<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="3983">
<package pkgid="7974632680c0cd0c9d5e17dcc2f811b1f5a4fd475fa7f7d9db8aa10fd09147d7" name="7zip" arch="src">
  <version epoch="0" ver="25.01" rel="150400.9.3.1"/>
  <changelog author="danilo.spinella@suse.com" date="1641211200">- Update to version 21.07:
  * The sorting order of files in archives was slightly changed to be more
    consistent for cases where the name of some directory is the same as the
    prefix part of the name of another directory or file.
  * TAR archives created by 7-Zip now are more consistent with archives
    created by GNU TAR program.
- Remove unneeded pach remove-rar-handler.patch
- Use the tarball in place of the 7zip archive as Source</changelog>
  <changelog author="danilo.spinella@suse.com" date="1641988800">- Replace p7zip with 7zip
  * Add p7zip and p7zip.1</changelog>
  <changelog author="dfaggioli@suse.com" date="1643198400">- Fix an incompatibility with p7zip which was breaking some downstreams
  (e.g., GNOME's File-Roller). See bsc#1195041
  * Add fix-compatib-with-p7zip.patch</changelog>
  <changelog author="elimat@opensuse.org" date="1656849600">- Update to version 22.00:
  * 7-Zip now can extract APFS (Apple File System) images that can be used in DMG files.
  * 7-Zip now can create TAR archives in POSIX (pax) tar format with the switches
  - ttar -mm=pax or -ttar -mm=posix
  * 7-Zip now can store additional file timestamps with high precision (1 ns in Linux)
    in tar/pax archives with the following switches:
  - ttar -mm=pax -mtp=3 -mtc -mta
  * New switches for Linux version for TAR archives:
  - snoi : store owner/group ids in archive or set owner/group ids from archive to extracted files.
  - snon : store owner/group names in archive
  * New -snz switch to propagate Zone.Identifier stream to extracted files (Windows).
  * New option "Propagate Zone.Id stream" in Tools/Options/7-Zip menu.
  * New "Options" window in "Add to archive" allows to select what metadata must be
    included to archive. Also it allows to select new option
    "Do not change source files last access time".
  * Some bugs were fixed.</changelog>
  <changelog author="dmueller@suse.com" date="1658491200">- update to 22.01:
  * UDF support was improved to UDF version 2.60.
  * HFS and APFS support was improved.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1669809600">- Enable ASM to increase performance in compression and decompression
  bsc#1202197</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- build for x86_64 subarchs the same way like for baseline</changelog>
  <changelog author="fvogt@suse.com" date="1687348800">- Update to version 23.01:
  * 7-Zip now can use new ARM64 filter for compression to 7z and xz archives.
    ARM64 filter can increase compression ratio for data containing executable files
    compiled for ARM64 (AArch64) architecture.
  * Default section size for BCJ2 filter was changed from 64 MiB to 240 MiB. It
    can increase compression ratio for executable files larger than 64 MiB.
  * UDF: support was improved.
  * cpio: support for hard links.
  * Some changes and optimizations in WIM creation code.
  * When new 7-Zip creates multivolume archive, 7-Zip keeps in open state only
    volumes that still can be changed. Previous versions kept all volumes in open
    state until the end of the archive creation.
  * 7-Zip now can reduce the number of simultaneously open files, when
    7-Zip opens, extracts or creates multivolume archive. It allows to avoid the
    failures for cases with big number of volumes, bacause there is a limitation for
    number of open files allowed for a single program in Linux.
  * The bugs were fixed:
  * ZIP archives: if multithreaded zip compression was performed with
    more than one file to stdout stream (-so switch), 7-zip didn't write "data
    descriptor" for some files.
  * ext4 archives: 7-Zip couldn't correctly extract symbolic link to directory from ext4 archives.
  * HFS and APFS archives: 7-Zip incorrectly decoded uncompressed blocks (64 KiB) in compressed forks.
  * Some another bugs were fixed.
- Refresh fix-compatib-with-p7zip.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1689681600">- Enable ARM64 ASM introduced in 23.01</changelog>
  <changelog author="martin.schreiner@suse.com" date="1704196800">- Add missing man pages for 7z / 7za / 7zr / 7zz.
  This solves bsc#1204856.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1706011200">- Fix build on SLE-15-SP6
  * fix-avx-sle.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1709726400">- Use autosetup -c instead of manually extracting the tarball and
  applying patches: allows us to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1716724800">- update to 24.05:
  * New switch -myv=.. to set decoder compatibility version for
    7z archive creating
  * New switches -myfa and -myfd to allow or disallow the specified
    filter method for 7z archive creating
  * can use new RISCV filter for compression to 7z and xz archives
  * can ask user permission to unpack RAR archives that require
    large amount of memory
  * new switch -smemx{size}g : to set allowed memory usage limit
    for RAR archive unpacking.
  * -y switch disables user requests and messages.
  * -slmu switch : to show timestamps as UTC instead of LOCAL TIME
  * support .sha256 files that use backslash path separator '\'
  * can unpack ZSTD archives (.zst filename extension).
  * can unpack ZIP, SquashFS and RPM archives that use ZSTD
    compression method.
  * support fast hash algorithm XXH64 that is used in ZSTD.
  * can unpack RAR archives (that use larger than 4 GB dictionary)
    created by new WinRAR 7.00.
  * can unpack DMG archives that use XZ (ULMO/LZMA) compression method
  * can unpack NTFS images with cluster size larger than 64 KB.
  * can unpack MBR and GDP images with 4 KB sectors.
  * Speed optimizations for archive unpacking: rar, cab, wim, zip, gz.
  * Speed optimizations for hash caclulation: CRC-32, CRC-64, BLAKE2sp.
  * Fix multivolume creation in some cases
  * bug fixs
- drop fix-avx-sle.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1717675200">- Update to 24.06:
  * The bug was fixed: 7-Zip could not unpack some ZSTD archives.</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1718884800">- Update to 24.07:
  * The bug was fixed: 7-Zip could crash for some incorrect ZSTD archives.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1724587200">- update to 24.08:
  * No longer write extra zero bytes after the end of the archive,
    if a file included to archive cannot be compressed to a size
    smaller than original
  * Some optimizations for displaying file icons in 7-Zip File
    Manager and in "Confirm File Replace" window.
  * Some bugs were fixed</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1733054400">- Update to 24.09:
  * The default dictionary size values for LZMA/LZMA2 compression methods
    were increased
  * 7-Zip now can calculate the following hash checksums: SHA-512, SHA-384, SHA3-256 and MD5.
  * APM and HFS support was improved.
  * If an archive update operation uses a temporary archive folder and
    the archive is moved to the destination folder, 7-Zip shows the progress of moving
    the archive file, as this operation can take a long time if the archive is large.
  * The bug was fixed: 7-Zip File Manager didn't propagate Zone.Identifier stream
    for extracted files from nested archives (if there is open archive inside another open
    archive).
  * Some bugs were fixed.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1756987200">- Update to 25.01 (boo#1249130)
  * The code for handling symbolic links has been changed to
    provide greater security when extracting files from archives
  * Command line switch -snld20 can be used to bypass default
    security checks when creating symbolic links.
- includes changes from 25.00:
  * bzip2 compression speed was increased by 15-40%.
  * deflate (zip/gz) compression speed was increased by 1-3%.
  * improved support for zip, cpio and fat archives.
  * CVE-2025-53816 : 7-Zip could work incorrectly for some
    incorrect RAR archives (boo#1246706)
  * CVE-2025-53817 : 7-Zip could crash for some incorrect COM
    (Compound File) archives (boo#1246707)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1764849600">- Do not use asm code on aarch64 until PAC/BTI/GCS fixed upstream</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1770033600">- Don't obsolete p7zip for SLE 15</changelog>
</package>
<package pkgid="cea5591f6503a707df449ee56a6fe04a92404eae4407486eb0855a1b1ef4dde5" name="7zip" arch="x86_64">
  <version epoch="0" ver="25.01" rel="150400.9.3.1"/>
  <changelog author="danilo.spinella@suse.com" date="1641211200">- Update to version 21.07:
  * The sorting order of files in archives was slightly changed to be more
    consistent for cases where the name of some directory is the same as the
    prefix part of the name of another directory or file.
  * TAR archives created by 7-Zip now are more consistent with archives
    created by GNU TAR program.
- Remove unneeded pach remove-rar-handler.patch
- Use the tarball in place of the 7zip archive as Source</changelog>
  <changelog author="danilo.spinella@suse.com" date="1641988800">- Replace p7zip with 7zip
  * Add p7zip and p7zip.1</changelog>
  <changelog author="dfaggioli@suse.com" date="1643198400">- Fix an incompatibility with p7zip which was breaking some downstreams
  (e.g., GNOME's File-Roller). See bsc#1195041
  * Add fix-compatib-with-p7zip.patch</changelog>
  <changelog author="elimat@opensuse.org" date="1656849600">- Update to version 22.00:
  * 7-Zip now can extract APFS (Apple File System) images that can be used in DMG files.
  * 7-Zip now can create TAR archives in POSIX (pax) tar format with the switches
  - ttar -mm=pax or -ttar -mm=posix
  * 7-Zip now can store additional file timestamps with high precision (1 ns in Linux)
    in tar/pax archives with the following switches:
  - ttar -mm=pax -mtp=3 -mtc -mta
  * New switches for Linux version for TAR archives:
  - snoi : store owner/group ids in archive or set owner/group ids from archive to extracted files.
  - snon : store owner/group names in archive
  * New -snz switch to propagate Zone.Identifier stream to extracted files (Windows).
  * New option "Propagate Zone.Id stream" in Tools/Options/7-Zip menu.
  * New "Options" window in "Add to archive" allows to select what metadata must be
    included to archive. Also it allows to select new option
    "Do not change source files last access time".
  * Some bugs were fixed.</changelog>
  <changelog author="dmueller@suse.com" date="1658491200">- update to 22.01:
  * UDF support was improved to UDF version 2.60.
  * HFS and APFS support was improved.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1669809600">- Enable ASM to increase performance in compression and decompression
  bsc#1202197</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- build for x86_64 subarchs the same way like for baseline</changelog>
  <changelog author="fvogt@suse.com" date="1687348800">- Update to version 23.01:
  * 7-Zip now can use new ARM64 filter for compression to 7z and xz archives.
    ARM64 filter can increase compression ratio for data containing executable files
    compiled for ARM64 (AArch64) architecture.
  * Default section size for BCJ2 filter was changed from 64 MiB to 240 MiB. It
    can increase compression ratio for executable files larger than 64 MiB.
  * UDF: support was improved.
  * cpio: support for hard links.
  * Some changes and optimizations in WIM creation code.
  * When new 7-Zip creates multivolume archive, 7-Zip keeps in open state only
    volumes that still can be changed. Previous versions kept all volumes in open
    state until the end of the archive creation.
  * 7-Zip now can reduce the number of simultaneously open files, when
    7-Zip opens, extracts or creates multivolume archive. It allows to avoid the
    failures for cases with big number of volumes, bacause there is a limitation for
    number of open files allowed for a single program in Linux.
  * The bugs were fixed:
  * ZIP archives: if multithreaded zip compression was performed with
    more than one file to stdout stream (-so switch), 7-zip didn't write "data
    descriptor" for some files.
  * ext4 archives: 7-Zip couldn't correctly extract symbolic link to directory from ext4 archives.
  * HFS and APFS archives: 7-Zip incorrectly decoded uncompressed blocks (64 KiB) in compressed forks.
  * Some another bugs were fixed.
- Refresh fix-compatib-with-p7zip.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1689681600">- Enable ARM64 ASM introduced in 23.01</changelog>
  <changelog author="martin.schreiner@suse.com" date="1704196800">- Add missing man pages for 7z / 7za / 7zr / 7zz.
  This solves bsc#1204856.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1706011200">- Fix build on SLE-15-SP6
  * fix-avx-sle.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1709726400">- Use autosetup -c instead of manually extracting the tarball and
  applying patches: allows us to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1716724800">- update to 24.05:
  * New switch -myv=.. to set decoder compatibility version for
    7z archive creating
  * New switches -myfa and -myfd to allow or disallow the specified
    filter method for 7z archive creating
  * can use new RISCV filter for compression to 7z and xz archives
  * can ask user permission to unpack RAR archives that require
    large amount of memory
  * new switch -smemx{size}g : to set allowed memory usage limit
    for RAR archive unpacking.
  * -y switch disables user requests and messages.
  * -slmu switch : to show timestamps as UTC instead of LOCAL TIME
  * support .sha256 files that use backslash path separator '\'
  * can unpack ZSTD archives (.zst filename extension).
  * can unpack ZIP, SquashFS and RPM archives that use ZSTD
    compression method.
  * support fast hash algorithm XXH64 that is used in ZSTD.
  * can unpack RAR archives (that use larger than 4 GB dictionary)
    created by new WinRAR 7.00.
  * can unpack DMG archives that use XZ (ULMO/LZMA) compression method
  * can unpack NTFS images with cluster size larger than 64 KB.
  * can unpack MBR and GDP images with 4 KB sectors.
  * Speed optimizations for archive unpacking: rar, cab, wim, zip, gz.
  * Speed optimizations for hash caclulation: CRC-32, CRC-64, BLAKE2sp.
  * Fix multivolume creation in some cases
  * bug fixs
- drop fix-avx-sle.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1717675200">- Update to 24.06:
  * The bug was fixed: 7-Zip could not unpack some ZSTD archives.</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1718884800">- Update to 24.07:
  * The bug was fixed: 7-Zip could crash for some incorrect ZSTD archives.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1724587200">- update to 24.08:
  * No longer write extra zero bytes after the end of the archive,
    if a file included to archive cannot be compressed to a size
    smaller than original
  * Some optimizations for displaying file icons in 7-Zip File
    Manager and in "Confirm File Replace" window.
  * Some bugs were fixed</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1733054400">- Update to 24.09:
  * The default dictionary size values for LZMA/LZMA2 compression methods
    were increased
  * 7-Zip now can calculate the following hash checksums: SHA-512, SHA-384, SHA3-256 and MD5.
  * APM and HFS support was improved.
  * If an archive update operation uses a temporary archive folder and
    the archive is moved to the destination folder, 7-Zip shows the progress of moving
    the archive file, as this operation can take a long time if the archive is large.
  * The bug was fixed: 7-Zip File Manager didn't propagate Zone.Identifier stream
    for extracted files from nested archives (if there is open archive inside another open
    archive).
  * Some bugs were fixed.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1756987200">- Update to 25.01 (boo#1249130)
  * The code for handling symbolic links has been changed to
    provide greater security when extracting files from archives
  * Command line switch -snld20 can be used to bypass default
    security checks when creating symbolic links.
- includes changes from 25.00:
  * bzip2 compression speed was increased by 15-40%.
  * deflate (zip/gz) compression speed was increased by 1-3%.
  * improved support for zip, cpio and fat archives.
  * CVE-2025-53816 : 7-Zip could work incorrectly for some
    incorrect RAR archives (boo#1246706)
  * CVE-2025-53817 : 7-Zip could crash for some incorrect COM
    (Compound File) archives (boo#1246707)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1764849600">- Do not use asm code on aarch64 until PAC/BTI/GCS fixed upstream</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1770033600">- Don't obsolete p7zip for SLE 15</changelog>
</package>
<package pkgid="c491feb1167e132f4a3baa04aedc8eabad2f0b4ea49390d3ae27749a5f725ec6" name="Mesa" arch="src">
  <version epoch="0" ver="24.3.3" rel="150700.93.5.1"/>
  <changelog author="sndirsch@suse.com" date="1730376000">- added -32bit package for Mesa-libva since it's needed by Steam;
  reported on packman ML:
  https://lists.links2linux.de/pipermail/packman/2024-October/017985.html</changelog>
  <changelog author="mrueckert@suse.de" date="1730376001">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
</package>
<package pkgid="0d96cd7fe2407075b09c606c767fb613de89177be384f3856c7f84326e0a6f97" name="Mesa" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.5.1"/>
  <changelog author="sndirsch@suse.com" date="1730376000">- added -32bit package for Mesa-libva since it's needed by Steam;
  reported on packman ML:
  https://lists.links2linux.de/pipermail/packman/2024-October/017985.html</changelog>
  <changelog author="mrueckert@suse.de" date="1730376001">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
</package>
<package pkgid="94a5251f6f0fb755c1131987e85f7256a0e2993adfa1f4ab1d538d6601dc8b0b" name="Mesa" arch="src">
  <version epoch="0" ver="24.3.3" rel="150700.93.8.1"/>
  <changelog author="mrueckert@suse.de" date="1730376000">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
</package>
<package pkgid="7ef11c63fc979539acd6b136d828d49d3e14fe33546c052ec0b86cb097a81cf7" name="Mesa" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.8.1"/>
  <changelog author="mrueckert@suse.de" date="1730376000">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
</package>
<package pkgid="7a04f1bb7fff1f8757cae526fc91850b432cac5bc9628d6627d6f80c6a2528db" name="Mesa-32bit" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.5.1"/>
  <changelog author="sndirsch@suse.com" date="1730376000">- added -32bit package for Mesa-libva since it's needed by Steam;
  reported on packman ML:
  https://lists.links2linux.de/pipermail/packman/2024-October/017985.html</changelog>
  <changelog author="mrueckert@suse.de" date="1730376001">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
</package>
<package pkgid="0426c55f28bbbc6e498024ad1f7c8097f90a9282224e1ee26b605e529c267e72" name="Mesa-32bit" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.8.1"/>
  <changelog author="mrueckert@suse.de" date="1730376000">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
</package>
<package pkgid="8ef69299943bcf98bca39938ddad6d333010c30473bea61b83f2160d4ede67dd" name="Mesa-KHR-devel" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.5.1"/>
  <changelog author="sndirsch@suse.com" date="1730376000">- added -32bit package for Mesa-libva since it's needed by Steam;
  reported on packman ML:
  https://lists.links2linux.de/pipermail/packman/2024-October/017985.html</changelog>
  <changelog author="mrueckert@suse.de" date="1730376001">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
</package>
<package pkgid="b60e1d3ed203ddbca104eb66ed2bc05e291ce53f0894cf9d21414af36318f789" name="Mesa-KHR-devel" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.8.1"/>
  <changelog author="mrueckert@suse.de" date="1730376000">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
</package>
<package pkgid="62a180a1f84d8bcea56e90fb701e66913a2f49118afd6dc3824dcfdbfa59dafb" name="Mesa-devel" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.5.1"/>
  <changelog author="sndirsch@suse.com" date="1730376000">- added -32bit package for Mesa-libva since it's needed by Steam;
  reported on packman ML:
  https://lists.links2linux.de/pipermail/packman/2024-October/017985.html</changelog>
  <changelog author="mrueckert@suse.de" date="1730376001">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
</package>
<package pkgid="f8d93f5054e2b3cdfd9947839bbac93de5b834c716e1ef1fec793d8041e2af92" name="Mesa-devel" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.8.1"/>
  <changelog author="mrueckert@suse.de" date="1730376000">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
</package>
<package pkgid="b776489936baf54ca87c4358bd8750e94726de0ab1b2bf631968e4e439eaac27" name="Mesa-dri" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.5.1"/>
  <changelog author="sndirsch@suse.com" date="1730376000">- added -32bit package for Mesa-libva since it's needed by Steam;
  reported on packman ML:
  https://lists.links2linux.de/pipermail/packman/2024-October/017985.html</changelog>
  <changelog author="mrueckert@suse.de" date="1730376001">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
</package>
<package pkgid="1854dc5ddf7feec1898106f6c8922d6e2ceb0a3b58f80b8f0d4cfbd19d19961b" name="Mesa-dri" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.8.1"/>
  <changelog author="mrueckert@suse.de" date="1730376000">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
</package>
<package pkgid="d72587ff8b0c9d9a1330c4b9d7f666ea932cd469ba12d661ca521e00430466a6" name="Mesa-dri-32bit" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.5.1"/>
  <changelog author="sndirsch@suse.com" date="1730376000">- added -32bit package for Mesa-libva since it's needed by Steam;
  reported on packman ML:
  https://lists.links2linux.de/pipermail/packman/2024-October/017985.html</changelog>
  <changelog author="mrueckert@suse.de" date="1730376001">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
</package>
<package pkgid="94630bb5091246a1fedf9787f531f54599ec86c9299f6e8477f6bd0d901da972" name="Mesa-dri-32bit" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.8.1"/>
  <changelog author="mrueckert@suse.de" date="1730376000">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
</package>
<package pkgid="437f81837a14d04363d17748bd44db4696acbc778e20aa43b7031698c8381f59" name="Mesa-dri-devel" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.5.1"/>
  <changelog author="sndirsch@suse.com" date="1730376000">- added -32bit package for Mesa-libva since it's needed by Steam;
  reported on packman ML:
  https://lists.links2linux.de/pipermail/packman/2024-October/017985.html</changelog>
  <changelog author="mrueckert@suse.de" date="1730376001">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
</package>
<package pkgid="d08676f144fba6c950d67ac963f3df2e46d70129377e1a89d5e3782d1206437a" name="Mesa-dri-devel" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.8.1"/>
  <changelog author="mrueckert@suse.de" date="1730376000">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
</package>
<package pkgid="cbf913be6549a994504f1353feae6ce70a02cdc1ac85207869259dd45107da2a" name="Mesa-drivers" arch="src">
  <version epoch="0" ver="21.2.4" rel="150400.68.18.1"/>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
  <changelog author="sndirsch@suse.com" date="1676030400">- U_ReturnME.patch
  * fixes blackscreen in Return To Monkey Island on Intel graphics
    (boo#1208145)</changelog>
  <changelog author="sndirsch@suse.com" date="1727784000">- u_mesa-CVE-2023-45913.patch
  * NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId()
    (CVE-2023-45913, bsc#1222040)
- u_mesa-CVE-2023-45919.patch
  * buffer over-read in glXQueryServerString()
    (CVE-2023-45919, bsc#1222041)
- u_mesa-CVE-2023-45922.patch
  * segmentation violation in __glXGetDrawableAttribute()
    (CVE-2023-45922, bsc#1222042)</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
</package>
<package pkgid="ed4e21fc60bca2f84e56dea673ca4943d0d45cb5c055e6343225266a3adc618e" name="Mesa-drivers" arch="src">
  <version epoch="0" ver="22.3.5" rel="150500.77.8.1"/>
  <changelog author="dmueller@suse.com" date="1668686400">- update to 22.2.4:
  * clover: windows:  library filename has \`-1` suffix and a \`lib` prefix
    when built with mingw
  * radv, dxvk: Rendering errors in World of Tanks after "Switch to dynamic
    rendering only"
  * gen9 gt3e/gt4e skus fail dEQP-VK.pipeline.multisample.sample_locations_ext.*
  * v3d: Wrong colors (pink) in videos in Firefox (likely YUV-&gt;RGB shader issue)
  * panfrost t860 glmark-es2 regression
  * radv: Flickering in Spider-Man Remastered (Regression) (Bisected)
  * radv: Hitman 2 using Direct3D 12 has discolored squares on RDNA2 with DCC
    enabled
  * panfrost/midgard -  on Duckstation PSX emulator: segfault on GLES 3.0 and
    bad shader compilations on 3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1670068800">- spefile: removed Release lines from libxatracker2,
  libxatracker-devel packages in the hope to have reproducibly
  builds also on Tumbleweed (boo#1205998)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1672315200">- Update to version 22.3.0:
  * See https://docs.mesa3d.org/relnotes/22.3.0.html
- Update to version 22.3.1:
  * See https://docs.mesa3d.org/relnotes/22.3.1.html
- Update to version 22.3.2:
  * See https://docs.mesa3d.org/relnotes/22.3.2.html
- Remove the libXvMC_nouveau and libXvMC_r600 packages as XVMC
  support was removed.
- Add libvdpau_virtio_gpu package for VirtIO GPU.
- Rebase n_drirc-disable-rgb10-for-chromium-on-amd.patch.
- Rebase u_dep_xcb.patch.
- Rebase U_fix-mpeg1_2-decode-mesa-20.2.patch.
- Drop n_buildfix-21.3.0.patch: fixed upstream.</changelog>
  <changelog author="sndirsch@suse.com" date="1672488000">- don't try to generate libvdpau_virtio_gpu package on ppc64le; for
  some reason this driver doesn't get built on this platform</changelog>
  <changelog author="schwab@suse.de" date="1672660800">- Update list of gallium-drivers to match default list</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1673438400">- Update to version 22.3.3:
  * See https://docs.mesa3d.org/relnotes/22.3.3.html</changelog>
  <changelog author="mardnh@gmx.de" date="1673784000">- Fix some deprecation warnings
  * WARNING: option "false" deprecated, please use "disabled" instead.
  * WARNING: option "true" deprecated, please use "enabled" instead.</changelog>
  <changelog author="hp@urpla.net" date="1673870400">- Compile with gcc12 on Leaps: building drivers fails with:
  /usr/include/dxguids/dxguids.h:70:1: internal compiler error:
  in cxx_eval_bit_field_ref, at cp/constexpr.c:2578</changelog>
  <changelog author="mardnh@gmx.de" date="1673870401">- Add support for Rusticl - Mesa's new OpenCL implementation.
  * See https://docs.mesa3d.org/rusticl
  You will need to set your environment to use it
  * See https://docs.mesa3d.org/envvars#rusticl-environment-variables</changelog>
  <changelog author="sndirsch@suse.com" date="1674475200">- re-enable build on Leap, but only for 15.5; there is no gcc12
  on Leap 15.4, which is now officially required by Mesa 22.3</changelog>
  <changelog author="manfred.h@gmx.net" date="1674561600">- Add BuildRequires for x264 and x265 in case video_codecs should
  be built.</changelog>
  <changelog author="sndirsch@suse.com" date="1674561601">- force usage of gcc 12 only on Leap 15.5; there is no gcc12 on
  Leap 15.4</changelog>
  <changelog author="sndirsch@suse.com" date="1674820800">- using gcc 12 now also on Leap 15.4; after changing build project
  to openSUSE:Leap:15.4:Update gcc 12 packages are found now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1674820801">- removing again BuildRequires for x264 and x265 in case
  video_codecs should be built (these were never needed nor used
  for build)</changelog>
  <changelog author="sndirsch@suse.com" date="1674820802">- Update to version 22.3.4
  * bug fix release which fixes bugs found since Mesa 22.3.3
  * see https://docs.mesa3d.org/relnotes/22.3.4.html for more
    details</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- Don't enable rusticl without opencl</changelog>
  <changelog author="sndirsch@suse.com" date="1675944000">- Update to version 22.3.5
  * bug fix release which fixes bugs found since Mesa 22.3.4
  * see https://docs.mesa3d.org/relnotes/22.3.5.html for more
    details
- refreshed u_dep_xcb.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1676030400">- U_ReturnME.patch
  * fixes blackscreen in Return To Monkey Island on Intel graphics
    (boo#1208145)</changelog>
  <changelog author="sndirsch@suse.com" date="1727784000">- u_mesa-CVE-2023-45913.patch
  * NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId()
    (CVE-2023-45913, bsc#1222040)
- u_mesa-CVE-2023-45919.patch
  * buffer over-read in glXQueryServerString()
    (CVE-2023-45919, bsc#1222041)
- u_mesa-CVE-2023-45922.patch
  * segmentation violation in __glXGetDrawableAttribute()
    (CVE-2023-45922, bsc#1222042)</changelog>
  <changelog author="sndirsch@suse.com" date="1776168000">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
</package>
<package pkgid="91c5f09001feb814a954efc33fb99708c3011b8858b81d6c9c105feadc65f3c7" name="Mesa-drivers" arch="src">
  <version epoch="0" ver="24.3.3" rel="150700.93.5.1"/>
  <changelog author="sndirsch@suse.com" date="1730376000">- added -32bit package for Mesa-libva since it's needed by Steam;
  reported on packman ML:
  https://lists.links2linux.de/pipermail/packman/2024-October/017985.html</changelog>
  <changelog author="mrueckert@suse.de" date="1730376001">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
</package>
<package pkgid="ce306ff651ddc88b66e7666aa3d36cfe1ee4a66af2ce6d3b69c9e053b2fb90f3" name="Mesa-drivers" arch="src">
  <version epoch="0" ver="24.3.3" rel="150700.93.8.1"/>
  <changelog author="mrueckert@suse.de" date="1730376000">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
</package>
<package pkgid="2c723bf42c67fb68a387fe6f054cec1ab3aed3eef1a8995263311c82f9beb9c5" name="Mesa-gallium" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.5.1"/>
  <changelog author="sndirsch@suse.com" date="1730376000">- added -32bit package for Mesa-libva since it's needed by Steam;
  reported on packman ML:
  https://lists.links2linux.de/pipermail/packman/2024-October/017985.html</changelog>
  <changelog author="mrueckert@suse.de" date="1730376001">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
</package>
<package pkgid="eabc87687fbfe8218b941e4ca60cd48ed2533ed3b1dec041f73e110d18bb6163" name="Mesa-gallium" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.8.1"/>
  <changelog author="mrueckert@suse.de" date="1730376000">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
</package>
<package pkgid="acd964d14810475be1dff57edd30d75885d39bbd404c510b810238d621cece06" name="Mesa-gallium-32bit" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.5.1"/>
  <changelog author="sndirsch@suse.com" date="1730376000">- added -32bit package for Mesa-libva since it's needed by Steam;
  reported on packman ML:
  https://lists.links2linux.de/pipermail/packman/2024-October/017985.html</changelog>
  <changelog author="mrueckert@suse.de" date="1730376001">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
</package>
<package pkgid="09cb91f00a2eb38d6d31b61022318b15f32ea9964534b988b78b2d5e9536493c" name="Mesa-gallium-32bit" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.8.1"/>
  <changelog author="mrueckert@suse.de" date="1730376000">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
</package>
<package pkgid="e894b150dea936d5a69e989ff2febdb69b62cdbd03be51309ff090ce39659b24" name="Mesa-libEGL-devel" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.5.1"/>
  <changelog author="sndirsch@suse.com" date="1730376000">- added -32bit package for Mesa-libva since it's needed by Steam;
  reported on packman ML:
  https://lists.links2linux.de/pipermail/packman/2024-October/017985.html</changelog>
  <changelog author="mrueckert@suse.de" date="1730376001">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
</package>
<package pkgid="effd656bf79e35f0ed41291691b96ae9e232a6b91d0eb43b45a1027b6534fb82" name="Mesa-libEGL-devel" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.8.1"/>
  <changelog author="mrueckert@suse.de" date="1730376000">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
</package>
<package pkgid="dc39bc9b1289f9ba59f320a2c6a8261d5e3334ec5f274e4dec46c658a40f94f6" name="Mesa-libEGL1" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.5.1"/>
  <changelog author="sndirsch@suse.com" date="1730376000">- added -32bit package for Mesa-libva since it's needed by Steam;
  reported on packman ML:
  https://lists.links2linux.de/pipermail/packman/2024-October/017985.html</changelog>
  <changelog author="mrueckert@suse.de" date="1730376001">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
</package>
<package pkgid="7eafa001c1e3b80021d12b37d4678c8921d263a1226788bbd1aa56e91660d4a1" name="Mesa-libEGL1" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.8.1"/>
  <changelog author="mrueckert@suse.de" date="1730376000">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
</package>
<package pkgid="25b2d998770d17d4d3f4e08dccffed7c4e7e129a86eb5eca22fb484bef5427a9" name="Mesa-libEGL1-32bit" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.5.1"/>
  <changelog author="sndirsch@suse.com" date="1730376000">- added -32bit package for Mesa-libva since it's needed by Steam;
  reported on packman ML:
  https://lists.links2linux.de/pipermail/packman/2024-October/017985.html</changelog>
  <changelog author="mrueckert@suse.de" date="1730376001">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
</package>
<package pkgid="d0b379433729f7c80092b0fd428876e66a302cc90d7c706186ca76fa7868c3ce" name="Mesa-libEGL1-32bit" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.8.1"/>
  <changelog author="mrueckert@suse.de" date="1730376000">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
</package>
<package pkgid="7fd8ebf7cb0b094011eb14a137007da5fa8a79c0339606e9dc1e837243363711" name="Mesa-libGL-devel" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.5.1"/>
  <changelog author="sndirsch@suse.com" date="1730376000">- added -32bit package for Mesa-libva since it's needed by Steam;
  reported on packman ML:
  https://lists.links2linux.de/pipermail/packman/2024-October/017985.html</changelog>
  <changelog author="mrueckert@suse.de" date="1730376001">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
</package>
<package pkgid="41c3a5c3dd276823bc6f8fe4d998c6068eba14c3cf058b0bdcd87e1c3a581e0c" name="Mesa-libGL-devel" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.8.1"/>
  <changelog author="mrueckert@suse.de" date="1730376000">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
</package>
<package pkgid="a62306ae7eb4dd29f396b4275b7d3108550fbf95ec9e44a1d2617d24aac0bf68" name="Mesa-libGL1" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.5.1"/>
  <changelog author="sndirsch@suse.com" date="1730376000">- added -32bit package for Mesa-libva since it's needed by Steam;
  reported on packman ML:
  https://lists.links2linux.de/pipermail/packman/2024-October/017985.html</changelog>
  <changelog author="mrueckert@suse.de" date="1730376001">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
</package>
<package pkgid="4fb02be3c21d2dc65e105f20328ff023de5e8246725e31c8148550cb1807821d" name="Mesa-libGL1" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.8.1"/>
  <changelog author="mrueckert@suse.de" date="1730376000">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
</package>
<package pkgid="2f62498005b9f138012bd626b636ab50cd0c95c7abb46bb60685ae50454396b6" name="Mesa-libGL1-32bit" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.5.1"/>
  <changelog author="sndirsch@suse.com" date="1730376000">- added -32bit package for Mesa-libva since it's needed by Steam;
  reported on packman ML:
  https://lists.links2linux.de/pipermail/packman/2024-October/017985.html</changelog>
  <changelog author="mrueckert@suse.de" date="1730376001">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
</package>
<package pkgid="8f1a9d0085c0490c6691de2d995264b99874a5bf4bb8d9890483acf02431ba3b" name="Mesa-libGL1-32bit" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.8.1"/>
  <changelog author="mrueckert@suse.de" date="1730376000">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
</package>
<package pkgid="e109c0450fdab65f1933a2e8840524400bdbbda44d18b3cc16faf7da0761ef31" name="Mesa-libGLESv1_CM-devel" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.5.1"/>
  <changelog author="sndirsch@suse.com" date="1730376000">- added -32bit package for Mesa-libva since it's needed by Steam;
  reported on packman ML:
  https://lists.links2linux.de/pipermail/packman/2024-October/017985.html</changelog>
  <changelog author="mrueckert@suse.de" date="1730376001">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
</package>
<package pkgid="76ea2a06eb586c7e7abf02d69cfc4fa96e8e057912df026789c38cc06f93702e" name="Mesa-libGLESv1_CM-devel" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.8.1"/>
  <changelog author="mrueckert@suse.de" date="1730376000">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
</package>
<package pkgid="22f4f804f7de9da543e19b60380054b4a99c8f26132d74805467294662aee295" name="Mesa-libGLESv2-devel" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.5.1"/>
  <changelog author="sndirsch@suse.com" date="1730376000">- added -32bit package for Mesa-libva since it's needed by Steam;
  reported on packman ML:
  https://lists.links2linux.de/pipermail/packman/2024-October/017985.html</changelog>
  <changelog author="mrueckert@suse.de" date="1730376001">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
</package>
<package pkgid="70aec960927700c655e50551ef50ea585eb5d4d29a5f075b13b5c3ca618ef00e" name="Mesa-libGLESv2-devel" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.8.1"/>
  <changelog author="mrueckert@suse.de" date="1730376000">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
</package>
<package pkgid="220358df7281a931067e09c4df6ba9b2ef51a319c0c0ef8aa87148d29c881d33" name="Mesa-libGLESv3-devel" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.5.1"/>
  <changelog author="sndirsch@suse.com" date="1730376000">- added -32bit package for Mesa-libva since it's needed by Steam;
  reported on packman ML:
  https://lists.links2linux.de/pipermail/packman/2024-October/017985.html</changelog>
  <changelog author="mrueckert@suse.de" date="1730376001">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
</package>
<package pkgid="95c948357051ddeb22acb7f73d8d483a513f5d4c050b3d38c25dbc18cca81ede" name="Mesa-libGLESv3-devel" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.8.1"/>
  <changelog author="mrueckert@suse.de" date="1730376000">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
</package>
<package pkgid="f7dfd17b0197f809f4868bf1be25d4ad22f3d2e5baecf3dcde28c9a4a06200e6" name="Mesa-libVulkan-devel" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.18.1"/>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
  <changelog author="sndirsch@suse.com" date="1676030400">- U_ReturnME.patch
  * fixes blackscreen in Return To Monkey Island on Intel graphics
    (boo#1208145)</changelog>
  <changelog author="sndirsch@suse.com" date="1727784000">- u_mesa-CVE-2023-45913.patch
  * NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId()
    (CVE-2023-45913, bsc#1222040)
- u_mesa-CVE-2023-45919.patch
  * buffer over-read in glXQueryServerString()
    (CVE-2023-45919, bsc#1222041)
- u_mesa-CVE-2023-45922.patch
  * segmentation violation in __glXGetDrawableAttribute()
    (CVE-2023-45922, bsc#1222042)</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
</package>
<package pkgid="934d8c6505012d61cb4d8590e8a1abd0754bb7cebcddfb9d95e937eab3d2fb59" name="Mesa-libd3d" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.5.1"/>
  <changelog author="sndirsch@suse.com" date="1730376000">- added -32bit package for Mesa-libva since it's needed by Steam;
  reported on packman ML:
  https://lists.links2linux.de/pipermail/packman/2024-October/017985.html</changelog>
  <changelog author="mrueckert@suse.de" date="1730376001">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
</package>
<package pkgid="7580e005813468f15abd2e6b77a237186df5d5a86fdb3cc3f51e7e5a092abe2e" name="Mesa-libd3d" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.8.1"/>
  <changelog author="mrueckert@suse.de" date="1730376000">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
</package>
<package pkgid="61497332fe0ccb5106f5043c8fdd755786af5f86b2caa1a93e1eed25db4d3059" name="Mesa-libd3d-devel" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.5.1"/>
  <changelog author="sndirsch@suse.com" date="1730376000">- added -32bit package for Mesa-libva since it's needed by Steam;
  reported on packman ML:
  https://lists.links2linux.de/pipermail/packman/2024-October/017985.html</changelog>
  <changelog author="mrueckert@suse.de" date="1730376001">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
</package>
<package pkgid="802fd36a54b3419cc523e49e38151fe7fff9f0deeb30b2bebd98d041b3b7ad11" name="Mesa-libd3d-devel" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.8.1"/>
  <changelog author="mrueckert@suse.de" date="1730376000">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
</package>
<package pkgid="f323047250fa0efa5c8fa808816da3d21930b4d4cb3d87505d14fee275d1abf0" name="Mesa-libglapi-devel" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.5.1"/>
  <changelog author="sndirsch@suse.com" date="1730376000">- added -32bit package for Mesa-libva since it's needed by Steam;
  reported on packman ML:
  https://lists.links2linux.de/pipermail/packman/2024-October/017985.html</changelog>
  <changelog author="mrueckert@suse.de" date="1730376001">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
</package>
<package pkgid="37dba3f42f323d9ae8b80d27059fcd1901ed2fbfb11a21b6ddb320f320d4e4ce" name="Mesa-libglapi-devel" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.8.1"/>
  <changelog author="mrueckert@suse.de" date="1730376000">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
</package>
<package pkgid="d2959b037b0b2306fe12776d6d7e7be116583185be1a1ae46415b894093f1d16" name="Mesa-libglapi0" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.5.1"/>
  <changelog author="sndirsch@suse.com" date="1730376000">- added -32bit package for Mesa-libva since it's needed by Steam;
  reported on packman ML:
  https://lists.links2linux.de/pipermail/packman/2024-October/017985.html</changelog>
  <changelog author="mrueckert@suse.de" date="1730376001">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
</package>
<package pkgid="874a2921a231618d31af028f120ccb5e60ef300eac8b2c85be82b7ed7dcd00a8" name="Mesa-libglapi0" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.8.1"/>
  <changelog author="mrueckert@suse.de" date="1730376000">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
</package>
<package pkgid="e6de7a1bd75c696ee079c122b1596a11eac0a2384b63caedc5ef47ef72e45ad9" name="Mesa-libglapi0-32bit" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.5.1"/>
  <changelog author="sndirsch@suse.com" date="1730376000">- added -32bit package for Mesa-libva since it's needed by Steam;
  reported on packman ML:
  https://lists.links2linux.de/pipermail/packman/2024-October/017985.html</changelog>
  <changelog author="mrueckert@suse.de" date="1730376001">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
</package>
<package pkgid="967e079d8d6bebed9dcfac4c7ef3e813b124c9529ab1674f96bd83631b41a4e9" name="Mesa-libglapi0-32bit" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.8.1"/>
  <changelog author="mrueckert@suse.de" date="1730376000">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
</package>
<package pkgid="b4a3695739c22e7c6a2c5cafc213c4edb5419541572b0b32f2406a5b5d1a9d22" name="Mesa-libva" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.5.1"/>
  <changelog author="sndirsch@suse.com" date="1730376000">- added -32bit package for Mesa-libva since it's needed by Steam;
  reported on packman ML:
  https://lists.links2linux.de/pipermail/packman/2024-October/017985.html</changelog>
  <changelog author="mrueckert@suse.de" date="1730376001">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
</package>
<package pkgid="ad5d942c78ec68d55c9345bfeecea4d1e88d30ded062ef8ed909eb2add754a62" name="Mesa-libva" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.8.1"/>
  <changelog author="mrueckert@suse.de" date="1730376000">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
</package>
<package pkgid="550c80764383b1e758896ef2d3f523b2eb543888fba129ddde7d7c2b74698165" name="Mesa-libva-32bit" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.5.1"/>
  <changelog author="sndirsch@suse.com" date="1730376000">- added -32bit package for Mesa-libva since it's needed by Steam;
  reported on packman ML:
  https://lists.links2linux.de/pipermail/packman/2024-October/017985.html</changelog>
  <changelog author="mrueckert@suse.de" date="1730376001">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
</package>
<package pkgid="7792d73b72bdd457616d357ddc3ba84f477e56f6322ceb9612d891d46f9c53d2" name="Mesa-libva-32bit" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.8.1"/>
  <changelog author="mrueckert@suse.de" date="1730376000">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
</package>
<package pkgid="d1a28a77bdc3fc3cac1803666e310cdc991afdd117a79ab5df0aad92d33a920a" name="Mesa-vulkan-device-select" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.5.1"/>
  <changelog author="sndirsch@suse.com" date="1730376000">- added -32bit package for Mesa-libva since it's needed by Steam;
  reported on packman ML:
  https://lists.links2linux.de/pipermail/packman/2024-October/017985.html</changelog>
  <changelog author="mrueckert@suse.de" date="1730376001">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
</package>
<package pkgid="003ccab04281792540f5dd83c70791d2b4a43233ddbe3f4270dc7d27c022c896" name="Mesa-vulkan-device-select" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.8.1"/>
  <changelog author="mrueckert@suse.de" date="1730376000">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
</package>
<package pkgid="666dcfe2282a367d3a92f79e08d313ba448bdf8a676f0e69990e6e057ecc8324" name="Mesa-vulkan-overlay" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.5.1"/>
  <changelog author="sndirsch@suse.com" date="1730376000">- added -32bit package for Mesa-libva since it's needed by Steam;
  reported on packman ML:
  https://lists.links2linux.de/pipermail/packman/2024-October/017985.html</changelog>
  <changelog author="mrueckert@suse.de" date="1730376001">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
</package>
<package pkgid="31393c8dde8048d7e658f959e2ac866416dfe213566ff7a2d9df70564b657c7c" name="Mesa-vulkan-overlay" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.8.1"/>
  <changelog author="mrueckert@suse.de" date="1730376000">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
</package>
<package pkgid="bdd224ad120f571f718fcfabbc2c5d2cf4c5caafa7a4f9f11f6e34b7a1ad717e" name="NetworkManager" arch="src">
  <version epoch="0" ver="1.44.2" rel="150600.3.4.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1667822400">- Keep netconfig support. The rc-manager auto detection will select
  appropriate manager during runtime.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1669982400">- Update to version 1.40.6:
  + team:
  - Also set empty port configuration so teamd knows about the
    port.
  - Restore port configuration after teamd respawn.
- Changes from version 1.40.4:
  + dhcp: revert restarting DHCP when MAC address changes, for
    example during a bond fail over.
  + Various documentation fixes.
  + Fix non-exported ABI in libnm which was wrongly present in the
    header files but unusable so far.
  + ifcfg-rh: fix writing ethtool pause settings to file.
  + core: set "proto static" for manual routing rules configured by
    NetworkManager.
  + Various minor bugfixes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1671537600">- Drop iptables BuildRequires and -Diptables meson parameter:
  iptables is legacy (obsoleted in favor of nft). Additionally.
  meson has proper fallback detection to assume the correct path,
  should it need to use iptables.
- Recommend nftables instead of iptables.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671537601">- Update to version 1.40.8:
  + Fixed a bug that caused devices (MACsec in particular) to be
    stuck in UNAVAILABLE state and not transition to DISCONNECTED
    if the carrier was ready too early.
  + Improved interoperability of MACsec with some Aruba switches by
    allowing CKN shorter than 64 characters.
  + Fixed an assertion failure when restarting NetworkManager with
    MACsec links configured.
  + Fixed a possible DHCP helper crash when handling failure to
    connect to D-Bus.
  + Corrected calculation of expiration time for items configured
    from IPv6 neighbor discovery messages.
  + Various fixes for platforms that don't allow unaligned memory
    access.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1673438400">- Update to version 1.40.10:
  + Fix the evaluation of the autoconnect retries.
  + nm-cloud-setup now preserves addresses added externally.
  + Ensure that dnsmasq is stopped after changing the dns backend
    and restarting the service.
  + Fix honoring an explicit DHCPv6 DUID with dhclient.
  + Other various fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674820800">- Update to version 1.40.12:
  + Make sure "external-ids" stays up to date in Open vSwitch
    database on a connection reapply.
  + Retry if a netlink sockets runs out of buffer space before
    we're able to read results of a link change.
  + Fix a possible race involving concurrent invocation of iptables
    in IPv4 shared mode.
  + Other various fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676030400">- Update to version 1.42.0:
  + Added support for source load balancing for Ethernet Bonds.
  + Allow specifying vhost name (SNI) for a manually DNS-over-TLS
    server. Only works with systemd-resolved plugin.
  + Connections can now be activated on a loopback interface.
  + Added support of IPv4 ECMP routes. The ECMP routes will get
    merged.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676289600">- Pass session_tracking=systemd and
  session_tracking_consolekit=false to meson, no longer build
  support for consolekit as session tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1676894400">- Add 1539.patch: Fix constructing the IPv4 nameserver variable
  (boo#1208371).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1677153600">- Update to version 1.42.2:
  + Add build option to set the mobile-broadband-provider-info
    database path.
  + Add new "ipv[46].replace-local-rule" setting to control whether
    to remove the local route rule that is automatically generated.
  + Add the DHCPv6 IAID to the lease information exposed in /run
    and on D-Bus.
  + Fix assuming team connections at boot.
  + Fix race condition when setting the MAC address of an OVS
    interface.
  + Fix constructing the IPv4 name servers variable passed to
    dispatcher scripts.
  + Don't use tentative IPv6 address to resolve the system hostname
    via DNS.
  + Deprecate the "Master" property of the NMActiveConnection D-Bus
    object in favor of the new "Controller" property.
- Drop 1539.patch: Fixed upstream.
- Refresh patch with quilt:
  + 0001-Coerce-connectivity-LIMITED-to-NONE-when-device-is-d.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Changes from version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update to version 1.42.4:
  + Fix a possible crash when [global-dns] is used and improve the
    documentation.
  + Documentation improvements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681992000">- Update to version 1.42.6:
  + Emit the dhcp-change dispatcher event also after a lease
    renewal.
  + Fix assertion failure on DHCP renewal.
  + Add support for EC2 IMDSv2 in nm-cloud-setup.
  + Allow setting tunnel flags for ip6gre &amp; ip6gretap connection
    profiles.
  + Improve the Wi-Fi hotspot functionality.
  + Fix setting the Wi-Fi roaming policy based on the number of
    seen BSSIDs.
  + Support the "no-aaaa" resolv.conf option.
  + Some oFono fixes.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1683979200">- Add nm-runstatedir.patch: to correct rundir from /var/run to /run
  for systemd FHS compatibility</changelog>
  <changelog author="luc14n0@opensuse.org" date="1685534400">- Update https://www.gnome.org/projects/NetworkManager/ URL tag to
  NM's newest home page: https://networkmanager.dev/, and main
  package summary to: standard Linux network configuration tool
  suite.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688040000">- Update to version 1.42.8:
  + Add support for ppp 2.5.0.
  + Fix nft rules for balance-slb bonding.
  + Support port priority for bonding.
  + Fix regression handling the PKEY_ID for infiniband profiles in
    ifcfg-rh format.
  + Fix race in nm-cloud-setup that caused partial configuration
    and loss of connectivity with multiple interfaces.
  + Don't touch "net.ipv6.conf.$IFACE.forwarding" unless explicitly
    required for IPv6 sharing.
  + Various bugfixes related to team, Wi-Fi P2P, IPv6LL.
  + Automatically unblock autoconnect of profiles during reapply.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691582400">- Update to version 1.44.0:
  + Introduce a new "link" setting that holds properties related to
    the kernel link such as "tx-queue-length", "gso-max-size",
    "gso-max-segments", "gro-max-size".
  + Support sending a DHCPv6 prefix delegation hint via the
    "ipv6.dhcp-pd-hint" connection property.
  + Support new bond options: "arp_missed_max", "lacp_active",
    "ns_ip6_target".
  + Add new "initial-eps-bearer-configure" and
    "initial-eps-bearer-apn" properties in the GSM setting.
  + Setting "connection.stable-id=default${CONNECTION}" changed
    behavior to be identical to the built-in default value when the
    stable-id is not set.
  + Add a "[keyfile].rename" option to NetworkManager.conf to force
    renaming profiles on disk when their name changes.
  + The ifcfg-rh plugin is deprecated; it will only receive
    bugfixes and no new features. A warning is emitted the log when
    a connection in ifcfg-rh format is found.
  + To automatically migrate existing ifcfg-rh connections to the
    keyfile format, a new configuration option
    "main.migrate-ifcfg-rh" is provided. Migration is disabled by
    default, but the default value can be changed at build time via
    "--with-config-migrate-ifcfg-rh-default=yes".
  + When configuring hostnames in non-public TLD (like
    "example.local"), use the TLD as default search domain instead
    of the full hostname.
  + Always apply DNS options from the [global-dns] configuration
    section
  + The NetworkManager daemon now acquires the D-Bus name only
    after populating the D-Bus tree. This can add a delay during
    startup but it is required to avoid race conditions with other
    services depending on NM.
  + Add a "version-id" argument to the Update2() D-Bus call to
    guard against concurrent modifications of profiles.
  + Don't use tentative IPv6 addresses to resolve the system
    hostname via DNS.
  + Track the number of autoconnect retries left for each device
    and connection. Previously it was tracked only per connection
    and this lead to unexpected behaviors in case of multiconnect
    profiles.
  + Set VLAN filtering options on bridge via netlink instead of
    sysfs.
  + nm-cloud-setup now supports IMDSv2 on Amazon EC2.
  + nmtui now allows to enable or disable Wi-Fi and WWAN radios.
  + Honor ignore-carrier=no for bond/bridge/team devices.
  + Add version mismatch warning when running nmcli commands.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1696334400">- Update to version 1.44.2:
  + Better log IPv4 Address Conflict Detection (ACD) conflicts
  + Remove the upper limit of 65535 for PIDs read from the PID file
  + Allow missing default gateway with oFono
  + Honor the CLICOLOR_FORCE environment variable
  + Fix generating connection with IPv6 method disabled vs ignored
  + Fix possible segmentation fault when doing a checkpoint
    rollback
  + Documentation improvements
- Switch to source services, use explicit released tag.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="yfjiang@suse.com" date="1701604800">- Add python3.6-in-sle.patch: SLE still takes python 3.6 as primary
  system, the patch allows meson to find python 3.6 in SLE.</changelog>
</package>
<package pkgid="19e568e41729b30e81913b2a04a87602423fbcdaf5c64ce27178d5575bd2474f" name="NetworkManager" arch="src">
  <version epoch="0" ver="1.44.2" rel="150600.3.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1671537600">- Drop iptables BuildRequires and -Diptables meson parameter:
  iptables is legacy (obsoleted in favor of nft). Additionally.
  meson has proper fallback detection to assume the correct path,
  should it need to use iptables.
- Recommend nftables instead of iptables.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671537601">- Update to version 1.40.8:
  + Fixed a bug that caused devices (MACsec in particular) to be
    stuck in UNAVAILABLE state and not transition to DISCONNECTED
    if the carrier was ready too early.
  + Improved interoperability of MACsec with some Aruba switches by
    allowing CKN shorter than 64 characters.
  + Fixed an assertion failure when restarting NetworkManager with
    MACsec links configured.
  + Fixed a possible DHCP helper crash when handling failure to
    connect to D-Bus.
  + Corrected calculation of expiration time for items configured
    from IPv6 neighbor discovery messages.
  + Various fixes for platforms that don't allow unaligned memory
    access.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1673438400">- Update to version 1.40.10:
  + Fix the evaluation of the autoconnect retries.
  + nm-cloud-setup now preserves addresses added externally.
  + Ensure that dnsmasq is stopped after changing the dns backend
    and restarting the service.
  + Fix honoring an explicit DHCPv6 DUID with dhclient.
  + Other various fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674820800">- Update to version 1.40.12:
  + Make sure "external-ids" stays up to date in Open vSwitch
    database on a connection reapply.
  + Retry if a netlink sockets runs out of buffer space before
    we're able to read results of a link change.
  + Fix a possible race involving concurrent invocation of iptables
    in IPv4 shared mode.
  + Other various fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676030400">- Update to version 1.42.0:
  + Added support for source load balancing for Ethernet Bonds.
  + Allow specifying vhost name (SNI) for a manually DNS-over-TLS
    server. Only works with systemd-resolved plugin.
  + Connections can now be activated on a loopback interface.
  + Added support of IPv4 ECMP routes. The ECMP routes will get
    merged.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676289600">- Pass session_tracking=systemd and
  session_tracking_consolekit=false to meson, no longer build
  support for consolekit as session tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1676894400">- Add 1539.patch: Fix constructing the IPv4 nameserver variable
  (boo#1208371).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1677153600">- Update to version 1.42.2:
  + Add build option to set the mobile-broadband-provider-info
    database path.
  + Add new "ipv[46].replace-local-rule" setting to control whether
    to remove the local route rule that is automatically generated.
  + Add the DHCPv6 IAID to the lease information exposed in /run
    and on D-Bus.
  + Fix assuming team connections at boot.
  + Fix race condition when setting the MAC address of an OVS
    interface.
  + Fix constructing the IPv4 name servers variable passed to
    dispatcher scripts.
  + Don't use tentative IPv6 address to resolve the system hostname
    via DNS.
  + Deprecate the "Master" property of the NMActiveConnection D-Bus
    object in favor of the new "Controller" property.
- Drop 1539.patch: Fixed upstream.
- Refresh patch with quilt:
  + 0001-Coerce-connectivity-LIMITED-to-NONE-when-device-is-d.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Changes from version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update to version 1.42.4:
  + Fix a possible crash when [global-dns] is used and improve the
    documentation.
  + Documentation improvements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681992000">- Update to version 1.42.6:
  + Emit the dhcp-change dispatcher event also after a lease
    renewal.
  + Fix assertion failure on DHCP renewal.
  + Add support for EC2 IMDSv2 in nm-cloud-setup.
  + Allow setting tunnel flags for ip6gre &amp; ip6gretap connection
    profiles.
  + Improve the Wi-Fi hotspot functionality.
  + Fix setting the Wi-Fi roaming policy based on the number of
    seen BSSIDs.
  + Support the "no-aaaa" resolv.conf option.
  + Some oFono fixes.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1683979200">- Add nm-runstatedir.patch: to correct rundir from /var/run to /run
  for systemd FHS compatibility</changelog>
  <changelog author="luc14n0@opensuse.org" date="1685534400">- Update https://www.gnome.org/projects/NetworkManager/ URL tag to
  NM's newest home page: https://networkmanager.dev/, and main
  package summary to: standard Linux network configuration tool
  suite.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688040000">- Update to version 1.42.8:
  + Add support for ppp 2.5.0.
  + Fix nft rules for balance-slb bonding.
  + Support port priority for bonding.
  + Fix regression handling the PKEY_ID for infiniband profiles in
    ifcfg-rh format.
  + Fix race in nm-cloud-setup that caused partial configuration
    and loss of connectivity with multiple interfaces.
  + Don't touch "net.ipv6.conf.$IFACE.forwarding" unless explicitly
    required for IPv6 sharing.
  + Various bugfixes related to team, Wi-Fi P2P, IPv6LL.
  + Automatically unblock autoconnect of profiles during reapply.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691582400">- Update to version 1.44.0:
  + Introduce a new "link" setting that holds properties related to
    the kernel link such as "tx-queue-length", "gso-max-size",
    "gso-max-segments", "gro-max-size".
  + Support sending a DHCPv6 prefix delegation hint via the
    "ipv6.dhcp-pd-hint" connection property.
  + Support new bond options: "arp_missed_max", "lacp_active",
    "ns_ip6_target".
  + Add new "initial-eps-bearer-configure" and
    "initial-eps-bearer-apn" properties in the GSM setting.
  + Setting "connection.stable-id=default${CONNECTION}" changed
    behavior to be identical to the built-in default value when the
    stable-id is not set.
  + Add a "[keyfile].rename" option to NetworkManager.conf to force
    renaming profiles on disk when their name changes.
  + The ifcfg-rh plugin is deprecated; it will only receive
    bugfixes and no new features. A warning is emitted the log when
    a connection in ifcfg-rh format is found.
  + To automatically migrate existing ifcfg-rh connections to the
    keyfile format, a new configuration option
    "main.migrate-ifcfg-rh" is provided. Migration is disabled by
    default, but the default value can be changed at build time via
    "--with-config-migrate-ifcfg-rh-default=yes".
  + When configuring hostnames in non-public TLD (like
    "example.local"), use the TLD as default search domain instead
    of the full hostname.
  + Always apply DNS options from the [global-dns] configuration
    section
  + The NetworkManager daemon now acquires the D-Bus name only
    after populating the D-Bus tree. This can add a delay during
    startup but it is required to avoid race conditions with other
    services depending on NM.
  + Add a "version-id" argument to the Update2() D-Bus call to
    guard against concurrent modifications of profiles.
  + Don't use tentative IPv6 addresses to resolve the system
    hostname via DNS.
  + Track the number of autoconnect retries left for each device
    and connection. Previously it was tracked only per connection
    and this lead to unexpected behaviors in case of multiconnect
    profiles.
  + Set VLAN filtering options on bridge via netlink instead of
    sysfs.
  + nm-cloud-setup now supports IMDSv2 on Amazon EC2.
  + nmtui now allows to enable or disable Wi-Fi and WWAN radios.
  + Honor ignore-carrier=no for bond/bridge/team devices.
  + Add version mismatch warning when running nmcli commands.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1696334400">- Update to version 1.44.2:
  + Better log IPv4 Address Conflict Detection (ACD) conflicts
  + Remove the upper limit of 65535 for PIDs read from the PID file
  + Allow missing default gateway with oFono
  + Honor the CLICOLOR_FORCE environment variable
  + Fix generating connection with IPv6 method disabled vs ignored
  + Fix possible segmentation fault when doing a checkpoint
    rollback
  + Documentation improvements
- Switch to source services, use explicit released tag.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="yfjiang@suse.com" date="1701604800">- Add python3.6-in-sle.patch: SLE still takes python 3.6 as primary
  system, the patch allows meson to find python 3.6 in SLE.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1722254400">- Add NetworkManager-dont-renew-bridge-dhcp-if-no-mac-on-wakeup.patch:
  manager: don't renew dhcp lease when software devices' MAC is empty
  (bsc#1225498, glfd#NetworkManager/NetworkManager#1587).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1773230400">- Add NetworkManager-CVE-2025-9615.patch: avoid that non-admin user
  using other users' certificates
  (bsc#1257359, CVE-2025-9615, glfd#NetworkManager/NetworkManager!2324).</changelog>
</package>
<package pkgid="e40a5bff88ef9b933675c3e1703328283d9f8e703667d30cecacc052396f538a" name="SLES16-Migration" arch="src">
  <version epoch="0" ver="2.1.26" rel="15.22.4"/>
  <changelog author="fcrozat@suse.com" date="1747742400">- Initial changelog</changelog>
  <changelog author="fcrozat@suse.com" date="1751025600">- Fix build on more architectures</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1753185600">- Add etc/motd overlay file
  Print message how to show migration progress information</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1754481600">- Added .ssh directory for migration user</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1757937600">- Bump version: 2.1.21</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1758283200">- Bump version: 2.1.22</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1758283201">- Bump version: 2.1.23</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1759492800">- Bump version: 2.1.24</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1760356800">- Bump version: 2.1.25</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1761566400">- Bump version: 2.1.26</changelog>
</package>
<package pkgid="f333afaa79e2bc5411c5868d75e855f9f5ba7993c5629a1df5a923dbcfae05f3" name="SLES16-Migration" arch="x86_64">
  <version epoch="0" ver="2.1.26" rel="15.22.4"/>
  <changelog author="fcrozat@suse.com" date="1747742400">- Initial changelog</changelog>
  <changelog author="fcrozat@suse.com" date="1751025600">- Fix build on more architectures</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1753185600">- Add etc/motd overlay file
  Print message how to show migration progress information</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1754481600">- Added .ssh directory for migration user</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1757937600">- Bump version: 2.1.21</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1758283200">- Bump version: 2.1.22</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1758283201">- Bump version: 2.1.23</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1759492800">- Bump version: 2.1.24</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1760356800">- Bump version: 2.1.25</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1761566400">- Bump version: 2.1.26</changelog>
</package>
<package pkgid="5f86e665af5eb258e3a49bc6a125efa428244ce8d2b8ab954cd8d84ce458efa0" name="SLES16-Migration" arch="src">
  <version epoch="0" ver="2.1.30" rel="15.26.4"/>
  <changelog author="fcrozat@suse.com" date="1747742400">- Initial changelog</changelog>
  <changelog author="fcrozat@suse.com" date="1751025600">- Fix build on more architectures</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1753185600">- Add etc/motd overlay file
  Print message how to show migration progress information</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1754481600">- Added .ssh directory for migration user</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1757937600">- Bump version: 2.1.21</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1758283200">- Bump version: 2.1.22</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1758283201">- Bump version: 2.1.23</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1759492800">- Bump version: 2.1.24</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1760356800">- Bump version: 2.1.25</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1761566400">- Bump version: 2.1.26</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1762430400">- Bump version: 2.1.27</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1764676800">- Bump version: 2.1.28</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1765627200">- Bump version: 2.1.29</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1770206400">- Bump version: 2.1.30</changelog>
</package>
<package pkgid="6ee243695a4db0628b3b11203551ccd1db8b2fa4506bbec7da9c16d1f9315593" name="SLES16-Migration" arch="x86_64">
  <version epoch="0" ver="2.1.30" rel="15.26.4"/>
  <changelog author="fcrozat@suse.com" date="1747742400">- Initial changelog</changelog>
  <changelog author="fcrozat@suse.com" date="1751025600">- Fix build on more architectures</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1753185600">- Add etc/motd overlay file
  Print message how to show migration progress information</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1754481600">- Added .ssh directory for migration user</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1757937600">- Bump version: 2.1.21</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1758283200">- Bump version: 2.1.22</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1758283201">- Bump version: 2.1.23</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1759492800">- Bump version: 2.1.24</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1760356800">- Bump version: 2.1.25</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1761566400">- Bump version: 2.1.26</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1762430400">- Bump version: 2.1.27</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1764676800">- Bump version: 2.1.28</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1765627200">- Bump version: 2.1.29</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1770206400">- Bump version: 2.1.30</changelog>
</package>
<package pkgid="4212f14fa45ee3e11e352de344fc01d09ef6937824cacf6ced8d354fdc28a2f3" name="ServiceReport" arch="noarch">
  <version epoch="0" ver="2.2.4+git7.8ca0fe4" rel="150600.3.3.1"/>
  <changelog author="sourabhjain@linux.ibm.com" date="1573819200">Version 2.2.1
- First Open source release
- Initial Commit of Open Source release</changelog>
  <changelog author="sourabhjain@linux.ibm.com" date="1589457600">Update to version 2.2.2
- Update crashkernel memory reservation limit
- Remove rpm postscript
- Add servicereport.spec file
- Move systemd service file to a generic location
- Run service only once at boot time without repair action
- fix initrd repair function
- [fadump] No boolean return from check_* function
- [fadump] indent the code with spaces instead of tabs
- Fix the option_string for --plugin option
- [fadump] update the logic to extract the FADump mem reservation
- Add irqbalance daemon check
- Add irqbalance package check
- Fix the system platform string extraction from /proc/cpuinfo
- Fix powerpc-ibm-utils package name
- Fix typo in README.md</changelog>
  <changelog author="sourabhjain@linux.ibm.com" date="1589716800">- Move setup.cfg metadata to setup.py file</changelog>
  <changelog author="msuchanek@suse.com" date="1599048000">- Run throuhg spec-cleaner and split off changelog.
- Fix license and dependencies
- Re-download the source</changelog>
  <changelog author="msuchanek@suse.de" date="1604404800">- Update to upstream git (jsc#SLE-13288).
  + 0001-Add-active-dump-check-in-kdump-and-FADump-plugin.patch
  + 0002-Introduce-a-new-option-to-mark-plugins-optional.patch
  + 0003-HTX-Mark-HTX-plugin-as-optional.patch
  + 0004-Add-new-option-to-run-all-applicable-plugins.patch
  + 0005-Allow-distro-classes-to-redefine-the-capture-kernel-.patch
  + 0006-utils-remove-the-invalid-function-call-to-walk_packa.patch
  + 0007-Update-data-files-of-the-project.patch
  + 0008-Run-servicereport-using-python3-binary.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1612353600">- Update to version 2.2.2+git10.1caca0630e36 (bsc#1181729 ltc#191203):
  * Update SLES crashkernel recommendation values
  * update HTX service name
- Remove the already included patches
  - 0001-Add-active-dump-check-in-kdump-and-FADump-plugin.patch
  - 0002-Introduce-a-new-option-to-mark-plugins-optional.patch
  - 0003-HTX-Mark-HTX-plugin-as-optional.patch
  - 0004-Add-new-option-to-run-all-applicable-plugins.patch
  - 0005-Allow-distro-classes-to-redefine-the-capture-kernel-.patch
  - 0006-utils-remove-the-invalid-function-call-to-walk_packa.patch
  - 0007-Update-data-files-of-the-project.patch
  - 0008-Run-servicereport-using-python3-binary.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1626350400">- Update to version 2.2.3 (jsc#SLE-18193):
  * ServiceReport v2.2.3 release
  * [Daemon] check active status along with enabled
  * Run-on supported architectures only
  * Take crashkernel recommendation from kdump-lib.sh scripts</changelog>
  <changelog author="jsegitz@suse.com" date="1627387200">- Added hardening to systemd service(s). Added harden_servicereport.service.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1632484800">- Update to version 2.2.3+git1.55a13db1c256:
  * [fadump] Update crashkernel recommendation (tid#7023277).</changelog>
  <changelog author="msuchanek@suse.com" date="1639483200">- Fix build on SLE 15: python-rpm-macros required for build (bsc#1193718).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699358400">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="msuchanek@suse.com" date="1709035200">- Update to version 2.2.4 (bsc#1220410 ltc#204408)
  * ServiceReport v2.2.4 release
  * [kdump] update /etc/sysconfig/kdump config processing
  * [kdump] customize initrd dump component check for SLES
  * [fadump] update initrd validation check
  * [kdump] restrict lsinitrd command to fetch only modules</changelog>
  <changelog author="msuchanek@suse.de" date="1729684800">- Update to version 2.2.4+git2.f1e4503:
  * [Service] Make the servicereport service dependent on the kdump service
  * [utils] Use --update-bls-cmdline Option for GRUB Update
- Refresh harden_servicereport.service.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1744977600">- Update to version 2.2.4+git5.e48c02c:
  * Added hardening to systemd service
- Drop upstreamed patch harden_servicereport.service.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1750420800">- Update to version 2.2.4+git7.8ca0fe4:
  * [utils] update logic to parse /etc/os-release (bsc#1244547 ltc#213710)
  * Added hardening to systemd service</changelog>
</package>
<package pkgid="72a31ba854da8f456d71987fc8c0d3867171060c4ad659a8c3106ab5bb3c2ef9" name="ServiceReport" arch="src">
  <version epoch="0" ver="2.2.4+git7.8ca0fe4" rel="150600.3.3.1"/>
  <changelog author="sourabhjain@linux.ibm.com" date="1573819200">Version 2.2.1
- First Open source release
- Initial Commit of Open Source release</changelog>
  <changelog author="sourabhjain@linux.ibm.com" date="1589457600">Update to version 2.2.2
- Update crashkernel memory reservation limit
- Remove rpm postscript
- Add servicereport.spec file
- Move systemd service file to a generic location
- Run service only once at boot time without repair action
- fix initrd repair function
- [fadump] No boolean return from check_* function
- [fadump] indent the code with spaces instead of tabs
- Fix the option_string for --plugin option
- [fadump] update the logic to extract the FADump mem reservation
- Add irqbalance daemon check
- Add irqbalance package check
- Fix the system platform string extraction from /proc/cpuinfo
- Fix powerpc-ibm-utils package name
- Fix typo in README.md</changelog>
  <changelog author="sourabhjain@linux.ibm.com" date="1589716800">- Move setup.cfg metadata to setup.py file</changelog>
  <changelog author="msuchanek@suse.com" date="1599048000">- Run throuhg spec-cleaner and split off changelog.
- Fix license and dependencies
- Re-download the source</changelog>
  <changelog author="msuchanek@suse.de" date="1604404800">- Update to upstream git (jsc#SLE-13288).
  + 0001-Add-active-dump-check-in-kdump-and-FADump-plugin.patch
  + 0002-Introduce-a-new-option-to-mark-plugins-optional.patch
  + 0003-HTX-Mark-HTX-plugin-as-optional.patch
  + 0004-Add-new-option-to-run-all-applicable-plugins.patch
  + 0005-Allow-distro-classes-to-redefine-the-capture-kernel-.patch
  + 0006-utils-remove-the-invalid-function-call-to-walk_packa.patch
  + 0007-Update-data-files-of-the-project.patch
  + 0008-Run-servicereport-using-python3-binary.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1612353600">- Update to version 2.2.2+git10.1caca0630e36 (bsc#1181729 ltc#191203):
  * Update SLES crashkernel recommendation values
  * update HTX service name
- Remove the already included patches
  - 0001-Add-active-dump-check-in-kdump-and-FADump-plugin.patch
  - 0002-Introduce-a-new-option-to-mark-plugins-optional.patch
  - 0003-HTX-Mark-HTX-plugin-as-optional.patch
  - 0004-Add-new-option-to-run-all-applicable-plugins.patch
  - 0005-Allow-distro-classes-to-redefine-the-capture-kernel-.patch
  - 0006-utils-remove-the-invalid-function-call-to-walk_packa.patch
  - 0007-Update-data-files-of-the-project.patch
  - 0008-Run-servicereport-using-python3-binary.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1626350400">- Update to version 2.2.3 (jsc#SLE-18193):
  * ServiceReport v2.2.3 release
  * [Daemon] check active status along with enabled
  * Run-on supported architectures only
  * Take crashkernel recommendation from kdump-lib.sh scripts</changelog>
  <changelog author="jsegitz@suse.com" date="1627387200">- Added hardening to systemd service(s). Added harden_servicereport.service.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1632484800">- Update to version 2.2.3+git1.55a13db1c256:
  * [fadump] Update crashkernel recommendation (tid#7023277).</changelog>
  <changelog author="msuchanek@suse.com" date="1639483200">- Fix build on SLE 15: python-rpm-macros required for build (bsc#1193718).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699358400">- Fix build with RPM 4.19: unnumbered patches are no longer
  supported.</changelog>
  <changelog author="msuchanek@suse.com" date="1709035200">- Update to version 2.2.4 (bsc#1220410 ltc#204408)
  * ServiceReport v2.2.4 release
  * [kdump] update /etc/sysconfig/kdump config processing
  * [kdump] customize initrd dump component check for SLES
  * [fadump] update initrd validation check
  * [kdump] restrict lsinitrd command to fetch only modules</changelog>
  <changelog author="msuchanek@suse.de" date="1729684800">- Update to version 2.2.4+git2.f1e4503:
  * [Service] Make the servicereport service dependent on the kdump service
  * [utils] Use --update-bls-cmdline Option for GRUB Update
- Refresh harden_servicereport.service.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1744977600">- Update to version 2.2.4+git5.e48c02c:
  * Added hardening to systemd service
- Drop upstreamed patch harden_servicereport.service.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1750420800">- Update to version 2.2.4+git7.8ca0fe4:
  * [utils] update logic to parse /etc/os-release (bsc#1244547 ltc#213710)
  * Added hardening to systemd service</changelog>
</package>
<package pkgid="22410e2cb9899cb095e04792447136c2987ef9d8961433316be916bb386b81fb" name="WebKitGTK-4.0-lang" arch="noarch">
  <version epoch="0" ver="2.48.2" rel="150600.12.40.2"/>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213,
    CVE-2024-23271.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834, CVE-2024-27808, CVE-2024-27820,
    CVE-2024-27833.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843, CVE-2024-54658.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
  <changelog author="mgorse@suse.com" date="1723118400">- Add CVE fixes:
  + webkit2gtk3-CVE-2024-40776.patch (boo#1228613 CVE-2024-40776)
  + webkit2gtk3-CVE-2024-40779.patch (boo#1228693 CVE-2024-40779)
  + webkit2gtk3-CVE-2024-40780.patch (boo#1228694 CVE-2024-40780)
  + webkit2gtk3-CVE-2024-40782.patch (boo#1228695 CVE-2024-40782)</changelog>
  <changelog author="mgorse@suse.com" date="1724068800">- Update to version 2.44.3 (boo#1228697):
  + Fix web process cache suspend/resume when sandbox is enabled.
  + Fix accelerated images dissapearing after scrolling.
  + Fix video flickering with DMA-BUF sink.
  + Fix pointer lock on X11.
  + Fix movement delta on mouse events in GTK3.
  + Undeprecate console message API and make it available in 2022
    API.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-40776, CVE-2024-40779, CVE-2024-40780,
    CVE-2024-40782, CVE-2024-40789, CVE-2024-4558, CVE-2024-27838,
  CVE-2024-27851.
- Drop patches now upstream:
  webkit2gtk3-CVE-2024-40776.patch
  webkit2gtk3-CVE-2024-40779.patch
  webkit2gtk3-CVE-2024-40780.patch
  webkit2gtk3-CVE-2024-40782.patch</changelog>
  <changelog author="mgorse@suse.com" date="1729166400">- Update to version 2.46.0 (boo#1231039):
  + Use Skia instead of cairo for 2D rendering and enable GPU
    rendering by default.
  + Enable offscreen canvas by default.
  + Add support for system tracing with Sysprof.
  + Implement printing using the Print portal.
  + Add new API to load settings from a config file.
  + Add a new setting to enable or disable the 2D canvas
    acceleration (enabled by default).
  + Undeprecate console messages API and make it available in 6.0
    API.
  + Security fixes: CVE-2024-40866, CVE-2024-44187, CVE-2024-44185,
    CVE-2024-54534, CVE-2024-27856.
- Drop webkit2gtk3-disable-dmabuf-nvidia.patch: Should not be
  needed anymore.
- Add webkit2gtk3-angle-s390x.patch: fix the build on s390x.
- Use gcc 13 to match what is tested upstream.
- Pass USE_SYSTEM_SYSPROF_CAPTURE=NO to cmake, avoid building
  sysprof capture for now.
- Add bug281495.patch: fix crash in ProcessLauncher socket
  monitor callback.</changelog>
  <changelog author="mgorse@suse.com" date="1730721600">- Update to version 2.46.3 (boo#1232747):
  + Flatten layers to a plane when preseve-3d style is set.
  + Fix DuckDuckGo links by adding a user agent quirk.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44244, CVE-2024-44296.
  + Changes in version 2.46.2:
  + Own well-known bus name on a11y bus.
  + Improve memory consumption when putImageData is used repeatedly
    on accelerated canvas.
  + Disable cached web process suspension for now to prevent leaks.
  + Improve text kerning with different combinations of antialias
    and hinting settings.
  + Destroy all network sessions on process exit.
  + Fix visible rectangle calculation when there are animations.
  + Fix the build with ENABLE_NOTIFICATIONS=OFF.
  + Fix the build with ENABLE_FULLSCREEN_API=OFF.
  + Fix the build with ENABLE_WEB_AUDIO=OFF.
  + Fix the build on ppc64le.
  + Changes in version 2.46.1:
  + Fix login QR code not shown in WhatsApp web.
  + Disable PSON by default again in GTK 3 API versions.
  + Disable DMABuf video sink by default to prevent file descriptor
    leaks.
  + Fix the build with GCC 13.
- Drop bug281495.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1732536000">- Add webkit2gtk3-CVE-2024-44308.patch: don't allocate DFG register
  after a slow path (boo#1233631 CVE-2024-44308).
- Add webkit2gtk3-CVE-2024-44309.patch: fix a cookie management
  issue (boo#1233632 CVE-2024-44309).</changelog>
  <changelog author="mgorse@suse.com" date="1735300800">- Update to version 2.46.5 (boo#1234851):
  + Fix the build with GBM and release logs disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-54479, CVE-2024-54502, CVE-2024-54505,
    CVE-2024-54508, CVE-2024-54543.
  + Changes in version 2.46.4:
  + Improve memory consumption and performance of Canvas
    getImageData.
  + Fix preserve-3D intersection rendering.
  + Fix video dimensions since GStreamer 1.24.9.
  + Fix the HTTP-based remote Web Inspector not loading in
    Chromium.
  + Fix content filters not working on about:blank iframes.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44308, CVE-2024-44309.
- Drop webkit2gtk3-CVE-2024-44308.patch and
  webkit2gtk3-CVE-2024-44309.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1739188800">- Update to version 2.46.6 (boo#1236946):
  + Fix a crash when enabling Skia CPU rendering.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24143, CVE-2025-24150, CVE-2025-24158,
    CVE-2025-24162.</changelog>
  <changelog author="mgorse@suse.com" date="1741953600">- Add 7d784721.patch: WebGL context primitive restart can be
  toggled from WebContent process (boo#1239547 CVE-2025-24201).</changelog>
  <changelog author="mgorse@suse.com" date="1743508800">- Update to version 2.48.0 (boo#1239863 boo#1239864):
  + Move tiles rendering to worker threads when rendering with the
    GPU.
  + Fix preserve-3D intersection rendering.
  + Added new function for creating Promise objects to
    JavaScripotCore GLib API.
  + The MediaRecorder backend gained WebM support (requires at
    least GStreamer 1.24.9) and audio bitrate configuration
    support.
  + Fix invalid DPI-aware font size conversion.
  + Bring back support for OpenType-SVG fonts using Skia SVG
    module.
  + Add metadata (title and creation/modification date) to the PDF
    document generated for printing.
  + Propagate the font’s computed locale to HarfBuzz.
  + The GPU process build is now enabled for WebGL, but the web
    process is still used by default. The runtime flag
    UseGPUProcessForWebGL can be used to use the GPU process for
    WebGL.
  + Security fixes: CVE-2024-44192, CVE-2024-54467, CVE-2025-24201.
- Drop 7d784721.patch: Fixed upstream.
- Disable speech synthesis. It has been disabled until now, and
  we don't have flite or spiel in SLE.
- Add gcc13-PIE to BuildRequires (bsc#1239950).
- Add webkit2gtk3-iochannel-network-cache.patch: backport upstream
  patch to stop using IOChannel in NetworkCache: hopefully fixes
  crashes in the network process.</changelog>
  <changelog author="mgorse@suse.com" date="1744113600">- Update to version 2.48.1 (boo#1240958 boo#1240961 boo#1240962
  boo#1240963 boo#1240964 boo#1240986 boo#1240987):
  + Limit the data stored in session state.
  + Remove the empty area below the title bar in Web Inspector when
    not docked.
  + Fix the build with GST_DISABLE_GST_DEBUG.
  + Fix the build with GStreamer &lt; 1.20.
  + Fix the build with video disabled.
  + Fix the build with clang 20.
  + Security fixes: CVE-2024-54551, CVE-2025-24208, CVE-2025-24209,
    CVE-2025-24213, CVE-2025-24216, CVE-2025-24264, CVE-2025-30427.
- Add 8bee9eb9.patch: fix the build on non-x86 architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1747828800">- Update to version 2.48.2 (boo#1243282 boo#1243286 boo#1243288
  boo#1243289 boo#1243424 boo#1243596):
  + Enable CSS Overscroll Behavior by default.
  + Change threaded rendering implementation to use Skia API
    instead of WebCore display list that is not thread safe.
  + Fix rendering when device scale factor change comes before the
    web view geometry update.
  + Fix network process crash on exit.
  + Fix the build with ENABLE_RESOURCE_USAGE=OFF.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24223, CVE-2025-31204, CVE-2025-31205,
    CVE-2025-31206, CVE-2025-31215, CVE-2025-31257.
- Drop 8bee9eb9.patch: fixed upstream.</changelog>
</package>
<package pkgid="48f4f22e7d03997b71aee25a1c014c48508cac335d92278b5ded9c0f92972ee9" name="WebKitGTK-4.0-lang" arch="noarch">
  <version epoch="0" ver="2.48.5" rel="150600.12.43.1"/>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213,
    CVE-2024-23271.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834, CVE-2024-27808, CVE-2024-27820,
    CVE-2024-27833.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843, CVE-2024-54658.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
  <changelog author="mgorse@suse.com" date="1723118400">- Add CVE fixes:
  + webkit2gtk3-CVE-2024-40776.patch (boo#1228613 CVE-2024-40776)
  + webkit2gtk3-CVE-2024-40779.patch (boo#1228693 CVE-2024-40779)
  + webkit2gtk3-CVE-2024-40780.patch (boo#1228694 CVE-2024-40780)
  + webkit2gtk3-CVE-2024-40782.patch (boo#1228695 CVE-2024-40782)</changelog>
  <changelog author="mgorse@suse.com" date="1724068800">- Update to version 2.44.3 (boo#1228697):
  + Fix web process cache suspend/resume when sandbox is enabled.
  + Fix accelerated images dissapearing after scrolling.
  + Fix video flickering with DMA-BUF sink.
  + Fix pointer lock on X11.
  + Fix movement delta on mouse events in GTK3.
  + Undeprecate console message API and make it available in 2022
    API.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-40776, CVE-2024-40779, CVE-2024-40780,
    CVE-2024-40782, CVE-2024-40789, CVE-2024-4558, CVE-2024-27838,
  CVE-2024-27851.
- Drop patches now upstream:
  webkit2gtk3-CVE-2024-40776.patch
  webkit2gtk3-CVE-2024-40779.patch
  webkit2gtk3-CVE-2024-40780.patch
  webkit2gtk3-CVE-2024-40782.patch</changelog>
  <changelog author="mgorse@suse.com" date="1729166400">- Update to version 2.46.0 (boo#1231039):
  + Use Skia instead of cairo for 2D rendering and enable GPU
    rendering by default.
  + Enable offscreen canvas by default.
  + Add support for system tracing with Sysprof.
  + Implement printing using the Print portal.
  + Add new API to load settings from a config file.
  + Add a new setting to enable or disable the 2D canvas
    acceleration (enabled by default).
  + Undeprecate console messages API and make it available in 6.0
    API.
  + Security fixes: CVE-2024-40866, CVE-2024-44187, CVE-2024-44185,
    CVE-2024-54534, CVE-2024-27856.
- Drop webkit2gtk3-disable-dmabuf-nvidia.patch: Should not be
  needed anymore.
- Add webkit2gtk3-angle-s390x.patch: fix the build on s390x.
- Use gcc 13 to match what is tested upstream.
- Pass USE_SYSTEM_SYSPROF_CAPTURE=NO to cmake, avoid building
  sysprof capture for now.
- Add bug281495.patch: fix crash in ProcessLauncher socket
  monitor callback.</changelog>
  <changelog author="mgorse@suse.com" date="1730721600">- Update to version 2.46.3 (boo#1232747):
  + Flatten layers to a plane when preseve-3d style is set.
  + Fix DuckDuckGo links by adding a user agent quirk.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44244, CVE-2024-44296.
  + Changes in version 2.46.2:
  + Own well-known bus name on a11y bus.
  + Improve memory consumption when putImageData is used repeatedly
    on accelerated canvas.
  + Disable cached web process suspension for now to prevent leaks.
  + Improve text kerning with different combinations of antialias
    and hinting settings.
  + Destroy all network sessions on process exit.
  + Fix visible rectangle calculation when there are animations.
  + Fix the build with ENABLE_NOTIFICATIONS=OFF.
  + Fix the build with ENABLE_FULLSCREEN_API=OFF.
  + Fix the build with ENABLE_WEB_AUDIO=OFF.
  + Fix the build on ppc64le.
  + Changes in version 2.46.1:
  + Fix login QR code not shown in WhatsApp web.
  + Disable PSON by default again in GTK 3 API versions.
  + Disable DMABuf video sink by default to prevent file descriptor
    leaks.
  + Fix the build with GCC 13.
- Drop bug281495.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1732536000">- Add webkit2gtk3-CVE-2024-44308.patch: don't allocate DFG register
  after a slow path (boo#1233631 CVE-2024-44308).
- Add webkit2gtk3-CVE-2024-44309.patch: fix a cookie management
  issue (boo#1233632 CVE-2024-44309).</changelog>
  <changelog author="mgorse@suse.com" date="1735300800">- Update to version 2.46.5 (boo#1234851):
  + Fix the build with GBM and release logs disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-54479, CVE-2024-54502, CVE-2024-54505,
    CVE-2024-54508, CVE-2024-54543.
  + Changes in version 2.46.4:
  + Improve memory consumption and performance of Canvas
    getImageData.
  + Fix preserve-3D intersection rendering.
  + Fix video dimensions since GStreamer 1.24.9.
  + Fix the HTTP-based remote Web Inspector not loading in
    Chromium.
  + Fix content filters not working on about:blank iframes.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44308, CVE-2024-44309.
- Drop webkit2gtk3-CVE-2024-44308.patch and
  webkit2gtk3-CVE-2024-44309.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1739188800">- Update to version 2.46.6 (boo#1236946):
  + Fix a crash when enabling Skia CPU rendering.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24143, CVE-2025-24150, CVE-2025-24158,
    CVE-2025-24162.</changelog>
  <changelog author="mgorse@suse.com" date="1741953600">- Add 7d784721.patch: WebGL context primitive restart can be
  toggled from WebContent process (boo#1239547 CVE-2025-24201).</changelog>
  <changelog author="mgorse@suse.com" date="1743508800">- Update to version 2.48.0 (boo#1239863 boo#1239864):
  + Move tiles rendering to worker threads when rendering with the
    GPU.
  + Fix preserve-3D intersection rendering.
  + Added new function for creating Promise objects to
    JavaScripotCore GLib API.
  + The MediaRecorder backend gained WebM support (requires at
    least GStreamer 1.24.9) and audio bitrate configuration
    support.
  + Fix invalid DPI-aware font size conversion.
  + Bring back support for OpenType-SVG fonts using Skia SVG
    module.
  + Add metadata (title and creation/modification date) to the PDF
    document generated for printing.
  + Propagate the font’s computed locale to HarfBuzz.
  + The GPU process build is now enabled for WebGL, but the web
    process is still used by default. The runtime flag
    UseGPUProcessForWebGL can be used to use the GPU process for
    WebGL.
  + Security fixes: CVE-2024-44192, CVE-2024-54467, CVE-2025-24201,
  CVE-2025-24189.
- Drop 7d784721.patch: Fixed upstream.
- Disable speech synthesis. It has been disabled until now, and
  we don't have flite or spiel in SLE.
- Add gcc13-PIE to BuildRequires (bsc#1239950).
- Add webkit2gtk3-iochannel-network-cache.patch: backport upstream
  patch to stop using IOChannel in NetworkCache: hopefully fixes
  crashes in the network process.</changelog>
  <changelog author="mgorse@suse.com" date="1744113600">- Update to version 2.48.1 (boo#1240958 boo#1240961 boo#1240962
  boo#1240963 boo#1240964 boo#1240986 boo#1240987):
  + Limit the data stored in session state.
  + Remove the empty area below the title bar in Web Inspector when
    not docked.
  + Fix the build with GST_DISABLE_GST_DEBUG.
  + Fix the build with GStreamer &lt; 1.20.
  + Fix the build with video disabled.
  + Fix the build with clang 20.
  + Security fixes: CVE-2024-54551, CVE-2025-24208, CVE-2025-24209,
    CVE-2025-24213, CVE-2025-24216, CVE-2025-24264, CVE-2025-30427.
- Add 8bee9eb9.patch: fix the build on non-x86 architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1747828800">- Update to version 2.48.2 (boo#1243282 boo#1243286 boo#1243288
  boo#1243289 boo#1243424 boo#1243596):
  + Enable CSS Overscroll Behavior by default.
  + Change threaded rendering implementation to use Skia API
    instead of WebCore display list that is not thread safe.
  + Fix rendering when device scale factor change comes before the
    web view geometry update.
  + Fix network process crash on exit.
  + Fix the build with ENABLE_RESOURCE_USAGE=OFF.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24223, CVE-2025-31204, CVE-2025-31205,
    CVE-2025-31206, CVE-2025-31215, CVE-2025-31257.
- Drop 8bee9eb9.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1754395200">- Update to version 2.48.5 (boo#1247562 boo#1247563 boo#1247564
  boo#1247595 boo#1247596 boo#1247597 boo#1247598 boo#1247599
  boo#1247600):
  + Fix several crashes.
  + Security fixes: CVE-2025-31273, CVE-2025-31278, CVE-2025-43211,
    CVE-2025-43212, CVE-2025-43216, CVE-2025-43227, CVE-2025-43228,
    CVE-2025-43240, CVE-2025-43265, CVE-2025-6558.
  + Changes in version 2.48.4:
  + Improve emoji font selection with USE_SKIA=ON.
  + Improve playback of multimedia streams from blob URLs.
  + Fix the build with USE_SKIA_OPENTYPE_SVG=ON and
    USE_SYSPROF_CAPTURE=ON.
  + Fix the build on LoongArch with USE_SKIA=ON.
  + Fix crash when using a WebKitWebView widget in an offscreen
    window.
  + Fix several crashes and rendering issues.
  + Changes in version 2.48.3:
  + Fix a crash introduced by the new threaded rendering
    implementation using Skia API.
  + Improve rendering performance by recording layers once and
    replaying every dirty region in different worker threads.
  + Fix a crash when setting WEBKIT_SKIA_GPU_PAINTING_THREADS=0.
  + Fix a reference cycle in webkitmediastreamsrc preventing its
    disposal.
- Increase mem_per_process again to avoid running out of memory.</changelog>
</package>
<package pkgid="5b276df1d7b579102eead2346451b93b9d3e7e89cbe7153d9c723ddeab8404e7" name="WebKitGTK-4.0-lang" arch="noarch">
  <version epoch="0" ver="2.50.1" rel="150600.12.48.3"/>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213,
    CVE-2024-23271.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834, CVE-2024-27808, CVE-2024-27820,
    CVE-2024-27833.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843, CVE-2024-54658.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
  <changelog author="mgorse@suse.com" date="1723118400">- Add CVE fixes:
  + webkit2gtk3-CVE-2024-40776.patch (boo#1228613 CVE-2024-40776)
  + webkit2gtk3-CVE-2024-40779.patch (boo#1228693 CVE-2024-40779)
  + webkit2gtk3-CVE-2024-40780.patch (boo#1228694 CVE-2024-40780)
  + webkit2gtk3-CVE-2024-40782.patch (boo#1228695 CVE-2024-40782)</changelog>
  <changelog author="mgorse@suse.com" date="1724068800">- Update to version 2.44.3 (boo#1228697):
  + Fix web process cache suspend/resume when sandbox is enabled.
  + Fix accelerated images dissapearing after scrolling.
  + Fix video flickering with DMA-BUF sink.
  + Fix pointer lock on X11.
  + Fix movement delta on mouse events in GTK3.
  + Undeprecate console message API and make it available in 2022
    API.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-40776, CVE-2024-40779, CVE-2024-40780,
    CVE-2024-40782, CVE-2024-40789, CVE-2024-4558, CVE-2024-27838,
  CVE-2024-27851.
- Drop patches now upstream:
  webkit2gtk3-CVE-2024-40776.patch
  webkit2gtk3-CVE-2024-40779.patch
  webkit2gtk3-CVE-2024-40780.patch
  webkit2gtk3-CVE-2024-40782.patch</changelog>
  <changelog author="mgorse@suse.com" date="1729166400">- Update to version 2.46.0 (boo#1231039):
  + Use Skia instead of cairo for 2D rendering and enable GPU
    rendering by default.
  + Enable offscreen canvas by default.
  + Add support for system tracing with Sysprof.
  + Implement printing using the Print portal.
  + Add new API to load settings from a config file.
  + Add a new setting to enable or disable the 2D canvas
    acceleration (enabled by default).
  + Undeprecate console messages API and make it available in 6.0
    API.
  + Security fixes: CVE-2024-40866, CVE-2024-44187, CVE-2024-44185,
    CVE-2024-54534, CVE-2024-27856.
- Drop webkit2gtk3-disable-dmabuf-nvidia.patch: Should not be
  needed anymore.
- Add webkit2gtk3-angle-s390x.patch: fix the build on s390x.
- Use gcc 13 to match what is tested upstream.
- Pass USE_SYSTEM_SYSPROF_CAPTURE=NO to cmake, avoid building
  sysprof capture for now.
- Add bug281495.patch: fix crash in ProcessLauncher socket
  monitor callback.</changelog>
  <changelog author="mgorse@suse.com" date="1730721600">- Update to version 2.46.3 (boo#1232747):
  + Flatten layers to a plane when preseve-3d style is set.
  + Fix DuckDuckGo links by adding a user agent quirk.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44244, CVE-2024-44296.
  + Changes in version 2.46.2:
  + Own well-known bus name on a11y bus.
  + Improve memory consumption when putImageData is used repeatedly
    on accelerated canvas.
  + Disable cached web process suspension for now to prevent leaks.
  + Improve text kerning with different combinations of antialias
    and hinting settings.
  + Destroy all network sessions on process exit.
  + Fix visible rectangle calculation when there are animations.
  + Fix the build with ENABLE_NOTIFICATIONS=OFF.
  + Fix the build with ENABLE_FULLSCREEN_API=OFF.
  + Fix the build with ENABLE_WEB_AUDIO=OFF.
  + Fix the build on ppc64le.
  + Changes in version 2.46.1:
  + Fix login QR code not shown in WhatsApp web.
  + Disable PSON by default again in GTK 3 API versions.
  + Disable DMABuf video sink by default to prevent file descriptor
    leaks.
  + Fix the build with GCC 13.
- Drop bug281495.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1732536000">- Add webkit2gtk3-CVE-2024-44308.patch: don't allocate DFG register
  after a slow path (boo#1233631 CVE-2024-44308).
- Add webkit2gtk3-CVE-2024-44309.patch: fix a cookie management
  issue (boo#1233632 CVE-2024-44309).</changelog>
  <changelog author="mgorse@suse.com" date="1735300800">- Update to version 2.46.5 (boo#1234851):
  + Fix the build with GBM and release logs disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-54479, CVE-2024-54502, CVE-2024-54505,
    CVE-2024-54508, CVE-2024-54543.
  + Changes in version 2.46.4:
  + Improve memory consumption and performance of Canvas
    getImageData.
  + Fix preserve-3D intersection rendering.
  + Fix video dimensions since GStreamer 1.24.9.
  + Fix the HTTP-based remote Web Inspector not loading in
    Chromium.
  + Fix content filters not working on about:blank iframes.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44308, CVE-2024-44309.
- Drop webkit2gtk3-CVE-2024-44308.patch and
  webkit2gtk3-CVE-2024-44309.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1739188800">- Update to version 2.46.6 (boo#1236946):
  + Fix a crash when enabling Skia CPU rendering.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24143, CVE-2025-24150, CVE-2025-24158,
    CVE-2025-24162.</changelog>
  <changelog author="mgorse@suse.com" date="1741953600">- Add 7d784721.patch: WebGL context primitive restart can be
  toggled from WebContent process (boo#1239547 CVE-2025-24201).</changelog>
  <changelog author="mgorse@suse.com" date="1743508800">- Update to version 2.48.0 (boo#1239863 boo#1239864):
  + Move tiles rendering to worker threads when rendering with the
    GPU.
  + Fix preserve-3D intersection rendering.
  + Added new function for creating Promise objects to
    JavaScripotCore GLib API.
  + The MediaRecorder backend gained WebM support (requires at
    least GStreamer 1.24.9) and audio bitrate configuration
    support.
  + Fix invalid DPI-aware font size conversion.
  + Bring back support for OpenType-SVG fonts using Skia SVG
    module.
  + Add metadata (title and creation/modification date) to the PDF
    document generated for printing.
  + Propagate the font’s computed locale to HarfBuzz.
  + The GPU process build is now enabled for WebGL, but the web
    process is still used by default. The runtime flag
    UseGPUProcessForWebGL can be used to use the GPU process for
    WebGL.
  + Security fixes: CVE-2024-44192, CVE-2024-54467, CVE-2025-24201,
  CVE-2025-24189.
- Drop 7d784721.patch: Fixed upstream.
- Disable speech synthesis. It has been disabled until now, and
  we don't have flite or spiel in SLE.
- Add gcc13-PIE to BuildRequires (bsc#1239950).
- Add webkit2gtk3-iochannel-network-cache.patch: backport upstream
  patch to stop using IOChannel in NetworkCache: hopefully fixes
  crashes in the network process.</changelog>
  <changelog author="mgorse@suse.com" date="1744113600">- Update to version 2.48.1 (boo#1240958 boo#1240961 boo#1240962
  boo#1240963 boo#1240964 boo#1240986 boo#1240987):
  + Limit the data stored in session state.
  + Remove the empty area below the title bar in Web Inspector when
    not docked.
  + Fix the build with GST_DISABLE_GST_DEBUG.
  + Fix the build with GStreamer &lt; 1.20.
  + Fix the build with video disabled.
  + Fix the build with clang 20.
  + Security fixes: CVE-2024-54551, CVE-2025-24208, CVE-2025-24209,
    CVE-2025-24213, CVE-2025-24216, CVE-2025-24264, CVE-2025-30427.
- Add 8bee9eb9.patch: fix the build on non-x86 architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1747828800">- Update to version 2.48.2 (boo#1243282 boo#1243286 boo#1243288
  boo#1243289 boo#1243424 boo#1243596):
  + Enable CSS Overscroll Behavior by default.
  + Change threaded rendering implementation to use Skia API
    instead of WebCore display list that is not thread safe.
  + Fix rendering when device scale factor change comes before the
    web view geometry update.
  + Fix network process crash on exit.
  + Fix the build with ENABLE_RESOURCE_USAGE=OFF.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24223, CVE-2025-31204, CVE-2025-31205,
    CVE-2025-31206, CVE-2025-31215, CVE-2025-31257.
- Drop 8bee9eb9.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1754395200">- Update to version 2.48.5 (boo#1247562 boo#1247563 boo#1247564
  boo#1247595 boo#1247596 boo#1247597 boo#1247598 boo#1247599
  boo#1247600):
  + Fix several crashes.
  + Security fixes: CVE-2025-31273, CVE-2025-31278, CVE-2025-43211,
    CVE-2025-43212, CVE-2025-43216, CVE-2025-43227, CVE-2025-43228,
    CVE-2025-43240, CVE-2025-43265, CVE-2025-6558.
  + Changes in version 2.48.4:
  + Improve emoji font selection with USE_SKIA=ON.
  + Improve playback of multimedia streams from blob URLs.
  + Fix the build with USE_SKIA_OPENTYPE_SVG=ON and
    USE_SYSPROF_CAPTURE=ON.
  + Fix the build on LoongArch with USE_SKIA=ON.
  + Fix crash when using a WebKitWebView widget in an offscreen
    window.
  + Fix several crashes and rendering issues.
  + Changes in version 2.48.3:
  + Fix a crash introduced by the new threaded rendering
    implementation using Skia API.
  + Improve rendering performance by recording layers once and
    replaying every dirty region in different worker threads.
  + Fix a crash when setting WEBKIT_SKIA_GPU_PAINTING_THREADS=0.
  + Fix a reference cycle in webkitmediastreamsrc preventing its
    disposal.
- Increase mem_per_process again to avoid running out of memory.</changelog>
  <changelog author="mgorse@suse.com" date="1758456000">- Update to version 2.50.0 (boo#1250439 boo#1250440 boo#1250441
  boo#1250442):
  + Improved rendering performance by recording each layer once and
    replaying every dirty region in different worker threads.
  + Enable damage propagation to the UI process by default.
  + CSS property font-variant-emoji is now enabled by default.
  + Font synthesis properties (bold/italic) are now properly
    handled.
  + Ensure web view is focused on tap gesture.
  + Added new API to get the theme color of a WebKitWebView.
  + Security fixes: CVE-2025-43272, CVE-2025-43342, CVE-2025-43356,
  CVE-2025-43368.
- Drop webkit2gtk3-iochannel-network-cache.patch: fixed upstream.
- Add webkit2gtk3-i586-build-fix.patch: fix the build on i586.
- Force the garbage collector to run more often when compiling on
  some architectures. Needed to avoid running out of memory.
- Remove _constraints override for armv6l and armv7l. They were not
  as restrictive as we would like and now seem unnecessary.</changelog>
  <changelog author="mgorse@suse.com" date="1760443200">- Update to version 2.50.1 (boo#1251975):
  + Improve text rendering performance.
  + Fix audio playback broken on instagram.
  + Fix rendering of layers with fractional transforms.
  + Fix the build with ENABLE(VIDEO) disabled.
  + Fix the build in s390x.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43343.
- Drop webkit2gtk3-i586-build-fix.patch: Merged upstream.
- Re-enable LTO on targets where it is not known to make the
  linker run out of memory.</changelog>
</package>
<package pkgid="514861564976024569801797c1197fdde691bd1b586014d1867b116d422f0e61" name="WebKitGTK-4.0-lang" arch="noarch">
  <version epoch="0" ver="2.50.4" rel="150600.12.54.1"/>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834, CVE-2024-27808, CVE-2024-27820,
    CVE-2024-27833.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843, CVE-2024-54658.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
  <changelog author="mgorse@suse.com" date="1723118400">- Add CVE fixes:
  + webkit2gtk3-CVE-2024-40776.patch (boo#1228613 CVE-2024-40776)
  + webkit2gtk3-CVE-2024-40779.patch (boo#1228693 CVE-2024-40779)
  + webkit2gtk3-CVE-2024-40780.patch (boo#1228694 CVE-2024-40780)
  + webkit2gtk3-CVE-2024-40782.patch (boo#1228695 CVE-2024-40782)</changelog>
  <changelog author="mgorse@suse.com" date="1724068800">- Update to version 2.44.3 (boo#1228697):
  + Fix web process cache suspend/resume when sandbox is enabled.
  + Fix accelerated images dissapearing after scrolling.
  + Fix video flickering with DMA-BUF sink.
  + Fix pointer lock on X11.
  + Fix movement delta on mouse events in GTK3.
  + Undeprecate console message API and make it available in 2022
    API.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-40776, CVE-2024-40779, CVE-2024-40780,
    CVE-2024-40782, CVE-2024-40789, CVE-2024-4558, CVE-2024-27838,
  CVE-2024-27851.
- Drop patches now upstream:
  webkit2gtk3-CVE-2024-40776.patch
  webkit2gtk3-CVE-2024-40779.patch
  webkit2gtk3-CVE-2024-40780.patch
  webkit2gtk3-CVE-2024-40782.patch</changelog>
  <changelog author="mgorse@suse.com" date="1729166400">- Update to version 2.46.0 (boo#1231039):
  + Use Skia instead of cairo for 2D rendering and enable GPU
    rendering by default.
  + Enable offscreen canvas by default.
  + Add support for system tracing with Sysprof.
  + Implement printing using the Print portal.
  + Add new API to load settings from a config file.
  + Add a new setting to enable or disable the 2D canvas
    acceleration (enabled by default).
  + Undeprecate console messages API and make it available in 6.0
    API.
  + Security fixes: CVE-2024-40866, CVE-2024-44187, CVE-2024-44185,
    CVE-2024-54534, CVE-2024-27856, CVE-2025-43480.
- Drop webkit2gtk3-disable-dmabuf-nvidia.patch: Should not be
  needed anymore.
- Add webkit2gtk3-angle-s390x.patch: fix the build on s390x.
- Use gcc 13 to match what is tested upstream.
- Pass USE_SYSTEM_SYSPROF_CAPTURE=NO to cmake, avoid building
  sysprof capture for now.
- Add bug281495.patch: fix crash in ProcessLauncher socket
  monitor callback.</changelog>
  <changelog author="mgorse@suse.com" date="1730721600">- Update to version 2.46.3 (boo#1232747):
  + Flatten layers to a plane when preseve-3d style is set.
  + Fix DuckDuckGo links by adding a user agent quirk.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44244, CVE-2024-44296.
  + Changes in version 2.46.2:
  + Own well-known bus name on a11y bus.
  + Improve memory consumption when putImageData is used repeatedly
    on accelerated canvas.
  + Disable cached web process suspension for now to prevent leaks.
  + Improve text kerning with different combinations of antialias
    and hinting settings.
  + Destroy all network sessions on process exit.
  + Fix visible rectangle calculation when there are animations.
  + Fix the build with ENABLE_NOTIFICATIONS=OFF.
  + Fix the build with ENABLE_FULLSCREEN_API=OFF.
  + Fix the build with ENABLE_WEB_AUDIO=OFF.
  + Fix the build on ppc64le.
  + Changes in version 2.46.1:
  + Fix login QR code not shown in WhatsApp web.
  + Disable PSON by default again in GTK 3 API versions.
  + Disable DMABuf video sink by default to prevent file descriptor
    leaks.
  + Fix the build with GCC 13.
- Drop bug281495.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1732536000">- Add webkit2gtk3-CVE-2024-44308.patch: don't allocate DFG register
  after a slow path (boo#1233631 CVE-2024-44308).
- Add webkit2gtk3-CVE-2024-44309.patch: fix a cookie management
  issue (boo#1233632 CVE-2024-44309).</changelog>
  <changelog author="mgorse@suse.com" date="1735300800">- Update to version 2.46.5 (boo#1234851):
  + Fix the build with GBM and release logs disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-54479, CVE-2024-54502, CVE-2024-54505,
    CVE-2024-54508, CVE-2024-54543.
  + Changes in version 2.46.4:
  + Improve memory consumption and performance of Canvas
    getImageData.
  + Fix preserve-3D intersection rendering.
  + Fix video dimensions since GStreamer 1.24.9.
  + Fix the HTTP-based remote Web Inspector not loading in
    Chromium.
  + Fix content filters not working on about:blank iframes.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44308, CVE-2024-44309.
- Drop webkit2gtk3-CVE-2024-44308.patch and
  webkit2gtk3-CVE-2024-44309.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1739188800">- Update to version 2.46.6 (boo#1236946):
  + Fix a crash when enabling Skia CPU rendering.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24143, CVE-2025-24150, CVE-2025-24158,
    CVE-2025-24162.</changelog>
  <changelog author="mgorse@suse.com" date="1741953600">- Add 7d784721.patch: WebGL context primitive restart can be
  toggled from WebContent process (boo#1239547 CVE-2025-24201).</changelog>
  <changelog author="mgorse@suse.com" date="1743508800">- Update to version 2.48.0 (boo#1239863 boo#1239864):
  + Move tiles rendering to worker threads when rendering with the
    GPU.
  + Fix preserve-3D intersection rendering.
  + Added new function for creating Promise objects to
    JavaScripotCore GLib API.
  + The MediaRecorder backend gained WebM support (requires at
    least GStreamer 1.24.9) and audio bitrate configuration
    support.
  + Fix invalid DPI-aware font size conversion.
  + Bring back support for OpenType-SVG fonts using Skia SVG
    module.
  + Add metadata (title and creation/modification date) to the PDF
    document generated for printing.
  + Propagate the font’s computed locale to HarfBuzz.
  + The GPU process build is now enabled for WebGL, but the web
    process is still used by default. The runtime flag
    UseGPUProcessForWebGL can be used to use the GPU process for
    WebGL.
  + Security fixes: CVE-2024-44192, CVE-2024-54467, CVE-2025-24201,
  CVE-2025-24189.
- Drop 7d784721.patch: Fixed upstream.
- Disable speech synthesis. It has been disabled until now, and
  we don't have flite or spiel in SLE.
- Add gcc13-PIE to BuildRequires (bsc#1239950).
- Add webkit2gtk3-iochannel-network-cache.patch: backport upstream
  patch to stop using IOChannel in NetworkCache: hopefully fixes
  crashes in the network process.</changelog>
  <changelog author="mgorse@suse.com" date="1744113600">- Update to version 2.48.1 (boo#1240958 boo#1240961 boo#1240962
  boo#1240963 boo#1240964 boo#1240986 boo#1240987):
  + Limit the data stored in session state.
  + Remove the empty area below the title bar in Web Inspector when
    not docked.
  + Fix the build with GST_DISABLE_GST_DEBUG.
  + Fix the build with GStreamer &lt; 1.20.
  + Fix the build with video disabled.
  + Fix the build with clang 20.
  + Security fixes: CVE-2024-54551, CVE-2025-24208, CVE-2025-24209,
    CVE-2025-24213, CVE-2025-24216, CVE-2025-24264, CVE-2025-30427.
- Add 8bee9eb9.patch: fix the build on non-x86 architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1747828800">- Update to version 2.48.2 (boo#1243282 boo#1243286 boo#1243288
  boo#1243289 boo#1243424 boo#1243596):
  + Enable CSS Overscroll Behavior by default.
  + Change threaded rendering implementation to use Skia API
    instead of WebCore display list that is not thread safe.
  + Fix rendering when device scale factor change comes before the
    web view geometry update.
  + Fix network process crash on exit.
  + Fix the build with ENABLE_RESOURCE_USAGE=OFF.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24223, CVE-2025-31204, CVE-2025-31205,
    CVE-2025-31206, CVE-2025-31215, CVE-2025-31257.
- Drop 8bee9eb9.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1754395200">- Update to version 2.48.5 (boo#1247562 boo#1247563 boo#1247564
  boo#1247595 boo#1247596 boo#1247597 boo#1247598 boo#1247599
  boo#1247600):
  + Fix several crashes.
  + Security fixes: CVE-2025-31273, CVE-2025-31278, CVE-2025-43211,
    CVE-2025-43212, CVE-2025-43216, CVE-2025-43227, CVE-2025-43228,
    CVE-2025-43240, CVE-2025-43265, CVE-2025-6558.
  + Changes in version 2.48.4:
  + Improve emoji font selection with USE_SKIA=ON.
  + Improve playback of multimedia streams from blob URLs.
  + Fix the build with USE_SKIA_OPENTYPE_SVG=ON and
    USE_SYSPROF_CAPTURE=ON.
  + Fix the build on LoongArch with USE_SKIA=ON.
  + Fix crash when using a WebKitWebView widget in an offscreen
    window.
  + Fix several crashes and rendering issues.
  + Changes in version 2.48.3:
  + Fix a crash introduced by the new threaded rendering
    implementation using Skia API.
  + Improve rendering performance by recording layers once and
    replaying every dirty region in different worker threads.
  + Fix a crash when setting WEBKIT_SKIA_GPU_PAINTING_THREADS=0.
  + Fix a reference cycle in webkitmediastreamsrc preventing its
    disposal.
- Increase mem_per_process again to avoid running out of memory.</changelog>
  <changelog author="mgorse@suse.com" date="1758456000">- Update to version 2.50.0 (boo#1250439 boo#1250440 boo#1250441
  boo#1250442):
  + Improved rendering performance by recording each layer once and
    replaying every dirty region in different worker threads.
  + Enable damage propagation to the UI process by default.
  + CSS property font-variant-emoji is now enabled by default.
  + Font synthesis properties (bold/italic) are now properly
    handled.
  + Ensure web view is focused on tap gesture.
  + Added new API to get the theme color of a WebKitWebView.
  + Security fixes: CVE-2025-43272, CVE-2025-43342, CVE-2025-43356,
  CVE-2025-43368, CVE-2025-43419.
- Drop webkit2gtk3-iochannel-network-cache.patch: fixed upstream.
- Add webkit2gtk3-i586-build-fix.patch: fix the build on i586.
- Force the garbage collector to run more often when compiling on
  some architectures. Needed to avoid running out of memory.
- Remove _constraints override for armv6l and armv7l. They were not
  as restrictive as we would like and now seem unnecessary.</changelog>
  <changelog author="mgorse@suse.com" date="1760443200">- Update to version 2.50.1 (boo#1251975):
  + Improve text rendering performance.
  + Fix audio playback broken on instagram.
  + Fix rendering of layers with fractional transforms.
  + Fix the build with ENABLE(VIDEO) disabled.
  + Fix the build in s390x.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43343.
- Drop webkit2gtk3-i586-build-fix.patch: Merged upstream.
- Re-enable LTO on targets where it is not known to make the
  linker run out of memory.</changelog>
  <changelog author="mgorse@suse.com" date="1763985600">- Update to version 2.50.2 (bsc#1254165 bsc#1254166 bsc#1254167
  bsc#1254168 bsc#1254169 bsc#1254170 bsc#1254171 bsc#1254172
  bsc#1254174 bsc#1254176 bsc#1254177 bsc#1254179 bsc#1254208):
  + Prevent unsafe URI schemes from participating in media
    playback.
  + Make jsc_value_array_buffer_get_data() function introspectable.
  + Fix logging in to Google accounts that have a WebAuthn second
    factor configured.
  + Fix loading webkit://gpu when there are no threads configured
    for GPU rendering.
  + Fix rendering gradiants that use the CSS hue interpolation
    method.
  + Fix pasting image data from the clipboard.
  + Fix font-family selection when the font name contains spaces.
  + Fix the build with standard C libraries that lack execinfo.h,
    like Musl or uClibc.
  + Fix capturing canvas snapshots in the Web Inspector.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43392, CVE-2025-43425, CVE-2025-43427,
    CVE-2025-43429, CVE-2025-43430, CVE-2025-43431, CVE-2025-43432,
    CVE-2025-43434, CVE-2025-43440, CVE-2025-43443, CVE-2025-13502.
- Add webkit2gtk3-undefined-symbol.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1765195200">- Update to version 2.50.3 (bsc#1254473 bsc#1254498 bsc#1254509):
  + Fix seeking and looping of media elements that set the "loop"
    property.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-13947, CVE-2025-43421, CVE-2025-43458,
    CVE-2025-66287.
- Drop webkit2gtk3-undefined-symbol.patch: fixed upstream.
- Use %limit_build. Also define %dwz_low_mem_die_limit and
  %dwz_max_die_limit, similar to what we have in wpewebkit.
  This should simplify the logic for limiting jobs and will
  hopefully help with intermittent build failures.</changelog>
  <changelog author="mgorse@suse.com" date="1765972800">- Update to version 2.50.4 (bsc#1255183 bsc#1255191 bsc#1255194
  bsc#1255195 bsc#1255198 bsc#1255200 bsc#1255497):
  + Correctly handle the program name passed to the sleep disabler.
  + Ensure GStreamer is initialized before using the Quirks.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-14174, CVE-2025-43501, CVE-2025-43529,
    CVE-2025-43531, CVE-2025-43535, CVE-2025-43536, CVE-2025-43541.
- Add webkit2gtk3-a11y-fix-role-mapping.patch: fix a11y regression
  where AT-SPI roles were mapped incorrectly.</changelog>
</package>
<package pkgid="27b658c58a27ed69786196ac1f81edf98e426a5349fe15f88485f69e04d2aba9" name="WebKitGTK-4.0-lang" arch="noarch">
  <version epoch="0" ver="2.52.1" rel="150600.12.63.1"/>
  <changelog author="mgorse@suse.com" date="1724068800">- Update to version 2.44.3 (boo#1228697):
  + Fix web process cache suspend/resume when sandbox is enabled.
  + Fix accelerated images dissapearing after scrolling.
  + Fix video flickering with DMA-BUF sink.
  + Fix pointer lock on X11.
  + Fix movement delta on mouse events in GTK3.
  + Undeprecate console message API and make it available in 2022
    API.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-40776, CVE-2024-40779, CVE-2024-40780,
    CVE-2024-40782, CVE-2024-40789, CVE-2024-4558, CVE-2024-27838,
  CVE-2024-27851.
- Drop patches now upstream:
  webkit2gtk3-CVE-2024-40776.patch
  webkit2gtk3-CVE-2024-40779.patch
  webkit2gtk3-CVE-2024-40780.patch
  webkit2gtk3-CVE-2024-40782.patch</changelog>
  <changelog author="mgorse@suse.com" date="1729166400">- Update to version 2.46.0 (boo#1231039):
  + Use Skia instead of cairo for 2D rendering and enable GPU
    rendering by default.
  + Enable offscreen canvas by default.
  + Add support for system tracing with Sysprof.
  + Implement printing using the Print portal.
  + Add new API to load settings from a config file.
  + Add a new setting to enable or disable the 2D canvas
    acceleration (enabled by default).
  + Undeprecate console messages API and make it available in 6.0
    API.
  + Security fixes: CVE-2024-40866, CVE-2024-44187, CVE-2024-44185,
    CVE-2024-54534, CVE-2024-27856, CVE-2025-43480.
- Drop webkit2gtk3-disable-dmabuf-nvidia.patch: Should not be
  needed anymore.
- Add webkit2gtk3-angle-s390x.patch: fix the build on s390x.
- Use gcc 13 to match what is tested upstream.
- Pass USE_SYSTEM_SYSPROF_CAPTURE=NO to cmake, avoid building
  sysprof capture for now.
- Add bug281495.patch: fix crash in ProcessLauncher socket
  monitor callback.</changelog>
  <changelog author="mgorse@suse.com" date="1730721600">- Update to version 2.46.3 (boo#1232747):
  + Flatten layers to a plane when preseve-3d style is set.
  + Fix DuckDuckGo links by adding a user agent quirk.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44244, CVE-2024-44296.
  + Changes in version 2.46.2:
  + Own well-known bus name on a11y bus.
  + Improve memory consumption when putImageData is used repeatedly
    on accelerated canvas.
  + Disable cached web process suspension for now to prevent leaks.
  + Improve text kerning with different combinations of antialias
    and hinting settings.
  + Destroy all network sessions on process exit.
  + Fix visible rectangle calculation when there are animations.
  + Fix the build with ENABLE_NOTIFICATIONS=OFF.
  + Fix the build with ENABLE_FULLSCREEN_API=OFF.
  + Fix the build with ENABLE_WEB_AUDIO=OFF.
  + Fix the build on ppc64le.
  + Changes in version 2.46.1:
  + Fix login QR code not shown in WhatsApp web.
  + Disable PSON by default again in GTK 3 API versions.
  + Disable DMABuf video sink by default to prevent file descriptor
    leaks.
  + Fix the build with GCC 13.
- Drop bug281495.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1732536000">- Add webkit2gtk3-CVE-2024-44308.patch: don't allocate DFG register
  after a slow path (boo#1233631 CVE-2024-44308).
- Add webkit2gtk3-CVE-2024-44309.patch: fix a cookie management
  issue (boo#1233632 CVE-2024-44309).</changelog>
  <changelog author="mgorse@suse.com" date="1735300800">- Update to version 2.46.5 (boo#1234851):
  + Fix the build with GBM and release logs disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-54479, CVE-2024-54502, CVE-2024-54505,
    CVE-2024-54508, CVE-2024-54543.
  + Changes in version 2.46.4:
  + Improve memory consumption and performance of Canvas
    getImageData.
  + Fix preserve-3D intersection rendering.
  + Fix video dimensions since GStreamer 1.24.9.
  + Fix the HTTP-based remote Web Inspector not loading in
    Chromium.
  + Fix content filters not working on about:blank iframes.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44308, CVE-2024-44309.
- Drop webkit2gtk3-CVE-2024-44308.patch and
  webkit2gtk3-CVE-2024-44309.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1739188800">- Update to version 2.46.6 (boo#1236946):
  + Fix a crash when enabling Skia CPU rendering.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24143, CVE-2025-24150, CVE-2025-24158,
    CVE-2025-24162.</changelog>
  <changelog author="mgorse@suse.com" date="1741953600">- Add 7d784721.patch: WebGL context primitive restart can be
  toggled from WebContent process (boo#1239547 CVE-2025-24201).</changelog>
  <changelog author="mgorse@suse.com" date="1743508800">- Update to version 2.48.0 (boo#1239863 boo#1239864):
  + Move tiles rendering to worker threads when rendering with the
    GPU.
  + Fix preserve-3D intersection rendering.
  + Added new function for creating Promise objects to
    JavaScripotCore GLib API.
  + The MediaRecorder backend gained WebM support (requires at
    least GStreamer 1.24.9) and audio bitrate configuration
    support.
  + Fix invalid DPI-aware font size conversion.
  + Bring back support for OpenType-SVG fonts using Skia SVG
    module.
  + Add metadata (title and creation/modification date) to the PDF
    document generated for printing.
  + Propagate the font’s computed locale to HarfBuzz.
  + The GPU process build is now enabled for WebGL, but the web
    process is still used by default. The runtime flag
    UseGPUProcessForWebGL can be used to use the GPU process for
    WebGL.
  + Security fixes: CVE-2024-44192, CVE-2024-54467, CVE-2025-24201,
  CVE-2025-24189.
- Drop 7d784721.patch: Fixed upstream.
- Disable speech synthesis. It has been disabled until now, and
  we don't have flite or spiel in SLE.
- Add gcc13-PIE to BuildRequires (bsc#1239950).
- Add webkit2gtk3-iochannel-network-cache.patch: backport upstream
  patch to stop using IOChannel in NetworkCache: hopefully fixes
  crashes in the network process.</changelog>
  <changelog author="mgorse@suse.com" date="1744113600">- Update to version 2.48.1 (boo#1240958 boo#1240961 boo#1240962
  boo#1240963 boo#1240964 boo#1240986 boo#1240987):
  + Limit the data stored in session state.
  + Remove the empty area below the title bar in Web Inspector when
    not docked.
  + Fix the build with GST_DISABLE_GST_DEBUG.
  + Fix the build with GStreamer &lt; 1.20.
  + Fix the build with video disabled.
  + Fix the build with clang 20.
  + Security fixes: CVE-2024-54551, CVE-2025-24208, CVE-2025-24209,
    CVE-2025-24213, CVE-2025-24216, CVE-2025-24264, CVE-2025-30427.
- Add 8bee9eb9.patch: fix the build on non-x86 architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1747828800">- Update to version 2.48.2 (boo#1243282 boo#1243286 boo#1243288
  boo#1243289 boo#1243424 boo#1243596):
  + Enable CSS Overscroll Behavior by default.
  + Change threaded rendering implementation to use Skia API
    instead of WebCore display list that is not thread safe.
  + Fix rendering when device scale factor change comes before the
    web view geometry update.
  + Fix network process crash on exit.
  + Fix the build with ENABLE_RESOURCE_USAGE=OFF.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24223, CVE-2025-31204, CVE-2025-31205,
    CVE-2025-31206, CVE-2025-31215, CVE-2025-31257.
- Drop 8bee9eb9.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1754395200">- Update to version 2.48.5 (boo#1247562 boo#1247563 boo#1247564
  boo#1247595 boo#1247596 boo#1247597 boo#1247598 boo#1247599
  boo#1247600):
  + Fix several crashes.
  + Security fixes: CVE-2025-31273, CVE-2025-31278, CVE-2025-43211,
    CVE-2025-43212, CVE-2025-43216, CVE-2025-43227, CVE-2025-43228,
    CVE-2025-43240, CVE-2025-43265, CVE-2025-6558.
  + Changes in version 2.48.4:
  + Improve emoji font selection with USE_SKIA=ON.
  + Improve playback of multimedia streams from blob URLs.
  + Fix the build with USE_SKIA_OPENTYPE_SVG=ON and
    USE_SYSPROF_CAPTURE=ON.
  + Fix the build on LoongArch with USE_SKIA=ON.
  + Fix crash when using a WebKitWebView widget in an offscreen
    window.
  + Fix several crashes and rendering issues.
  + Changes in version 2.48.3:
  + Fix a crash introduced by the new threaded rendering
    implementation using Skia API.
  + Improve rendering performance by recording layers once and
    replaying every dirty region in different worker threads.
  + Fix a crash when setting WEBKIT_SKIA_GPU_PAINTING_THREADS=0.
  + Fix a reference cycle in webkitmediastreamsrc preventing its
    disposal.
- Increase mem_per_process again to avoid running out of memory.</changelog>
  <changelog author="mgorse@suse.com" date="1758456000">- Update to version 2.50.0 (boo#1250439 boo#1250440 boo#1250441
  boo#1250442):
  + Improved rendering performance by recording each layer once and
    replaying every dirty region in different worker threads.
  + Enable damage propagation to the UI process by default.
  + CSS property font-variant-emoji is now enabled by default.
  + Font synthesis properties (bold/italic) are now properly
    handled.
  + Ensure web view is focused on tap gesture.
  + Added new API to get the theme color of a WebKitWebView.
  + Security fixes: CVE-2025-43272, CVE-2025-43342, CVE-2025-43356,
  CVE-2025-43368, CVE-2025-43419, CVE-2025-31223, CVE-2025-31277.
- Drop webkit2gtk3-iochannel-network-cache.patch: fixed upstream.
- Add webkit2gtk3-i586-build-fix.patch: fix the build on i586.
- Force the garbage collector to run more often when compiling on
  some architectures. Needed to avoid running out of memory.
- Remove _constraints override for armv6l and armv7l. They were not
  as restrictive as we would like and now seem unnecessary.</changelog>
  <changelog author="mgorse@suse.com" date="1760443200">- Update to version 2.50.1 (boo#1251975):
  + Improve text rendering performance.
  + Fix audio playback broken on instagram.
  + Fix rendering of layers with fractional transforms.
  + Fix the build with ENABLE(VIDEO) disabled.
  + Fix the build in s390x.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43343.
- Drop webkit2gtk3-i586-build-fix.patch: Merged upstream.
- Re-enable LTO on targets where it is not known to make the
  linker run out of memory.</changelog>
  <changelog author="mgorse@suse.com" date="1763985600">- Update to version 2.50.2 (bsc#1254165 bsc#1254166 bsc#1254167
  bsc#1254168 bsc#1254169 bsc#1254170 bsc#1254171 bsc#1254172
  bsc#1254174 bsc#1254176 bsc#1254177 bsc#1254179 bsc#1254208):
  + Prevent unsafe URI schemes from participating in media
    playback.
  + Make jsc_value_array_buffer_get_data() function introspectable.
  + Fix logging in to Google accounts that have a WebAuthn second
    factor configured.
  + Fix loading webkit://gpu when there are no threads configured
    for GPU rendering.
  + Fix rendering gradiants that use the CSS hue interpolation
    method.
  + Fix pasting image data from the clipboard.
  + Fix font-family selection when the font name contains spaces.
  + Fix the build with standard C libraries that lack execinfo.h,
    like Musl or uClibc.
  + Fix capturing canvas snapshots in the Web Inspector.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43392, CVE-2025-43425, CVE-2025-43427,
    CVE-2025-43429, CVE-2025-43430, CVE-2025-43431, CVE-2025-43432,
  +    CVE-2025-43434, CVE-2025-43440, CVE-2025-43443, CVE-2025-13502,
  +    CVE-2025-43433, CVE-2025-43438, CVE-2025-43441.
- Add webkit2gtk3-undefined-symbol.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1765195200">- Update to version 2.50.3 (bsc#1254473 bsc#1254498 bsc#1254509):
  + Fix seeking and looping of media elements that set the "loop"
    property.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-13947, CVE-2025-43421, CVE-2025-43458,
    CVE-2025-66287.
- Drop webkit2gtk3-undefined-symbol.patch: fixed upstream.
- Use %limit_build. Also define %dwz_low_mem_die_limit and
  %dwz_max_die_limit, similar to what we have in wpewebkit.
  This should simplify the logic for limiting jobs and will
  hopefully help with intermittent build failures.</changelog>
  <changelog author="mgorse@suse.com" date="1765972800">- Update to version 2.50.4 (bsc#1255183 bsc#1255191 bsc#1255194
  bsc#1255195 bsc#1255198 bsc#1255200 bsc#1255497):
  + Correctly handle the program name passed to the sleep disabler.
  + Ensure GStreamer is initialized before using the Quirks.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-14174, CVE-2025-43501, CVE-2025-43529,
    CVE-2025-43531, CVE-2025-43535, CVE-2025-43536, CVE-2025-43541.
- Add webkit2gtk3-a11y-fix-role-mapping.patch: fix a11y regression
  where AT-SPI roles were mapped incorrectly.</changelog>
  <changelog author="mgorse@suse.com" date="1773921600">- Update to version 2.52.0:
  + Make scrolling with touch input smoother for small movements.
  + Fix estimated load progress of downloads when Content-Length
    value is wrong.
  + Ensure that "scrollend" events are correctly emitted after
    scroll animations.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43213, CVE-2025-43214, CVE-2025-43457,
    CVE-2025-43511, CVE-2025-46299, CVE-2026-20608, CVE-2026-20635,
    CVE-2026-20636, CVE-2026-20644, CVE-2026-20652, CVE-2026-20676
    (bsc#1259934 bsc#1259935 bsc#1259936 bsc#1259937 bsc#1259938
    bsc#1259939 bsc#1259940 bsc#1259941 bsc#1259942 bsc#1259943
    bsc#1259944 bsc#1259945 bsc#1259946 bsc#1259947 bsc#1259948
    bsc#1259949 bsc#1259950)
- Drop webkit2gtk3-a11y-fix-role-mapping.patch: fixed upstream.
- Add webkit2gtk3-libsoup2.patch: reinstate support for libsoup2.</changelog>
  <changelog author="mgorse@suse.com" date="1774267200">- Add webkit2gtk3-aarch64-build-fix.patch: fix the build with JIT
  disabled.
- Increase limit_build to try to prevent running out of memory.</changelog>
  <changelog author="mgorse@suse.com" date="1774612800">- Pass ggc-min-expand=10 on some architectures, rather than 30.
  We are still getting "virtual memory exhausted" on i586
  sometimes, and hopefully this will help.</changelog>
  <changelog author="mgorse@suse.com" date="1775044800">- Update to version 2.52.1 (bsc#1261172 bsc#1261173 bsc#1261174
  bsc#1261175 bsc#1261176 bsc#1261177 bsc#1261178 bsc#1261179):
  + Reduce the amount of useless MPRIS notifications produced by
    MediaSesion when the information about media being played is
    incomplete.
  + Support turning off USE_GSTREAMER to configure the build with
    all multimedia features disabled.
  + Add Sysprof marks for mouse events.
  + Fix MediaSession icon for iheart.com not being displayed.
  + Fix the build with USE_GSTREAMER_GL disabled.
  + Fix the build with librice version 0.3.0 or newer.
  + Fix several crashes and rendering issues.
  + Translation updates: Georgian.
  + Security fixes: CVE-2026-20643, CVE-2026-20664, CVE-2026-20665,
    CVE-2026-20691, CVE-2026-28857, CVE-2026-28859, CVE-2026-28861,
    CVE-2026-28871.
- Rebase webkit2gtk3-libsoup2.patch.
- Add webkitgtk-gtk3-build-fix.patch: fix the gtk3 build.</changelog>
</package>
<package pkgid="ab2133c248e0b85dae05b3b362926d8b4a632c9cc6a0ee8b9f192dc7ce34292d" name="WebKitGTK-6.0-lang" arch="noarch">
  <version epoch="0" ver="2.48.2" rel="150600.12.40.2"/>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213,
    CVE-2024-23271.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834, CVE-2024-27808, CVE-2024-27820,
    CVE-2024-27833.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843, CVE-2024-54658.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
  <changelog author="mgorse@suse.com" date="1723118400">- Add CVE fixes:
  + webkit2gtk3-CVE-2024-40776.patch (boo#1228613 CVE-2024-40776)
  + webkit2gtk3-CVE-2024-40779.patch (boo#1228693 CVE-2024-40779)
  + webkit2gtk3-CVE-2024-40780.patch (boo#1228694 CVE-2024-40780)
  + webkit2gtk3-CVE-2024-40782.patch (boo#1228695 CVE-2024-40782)</changelog>
  <changelog author="mgorse@suse.com" date="1724068800">- Update to version 2.44.3 (boo#1228697):
  + Fix web process cache suspend/resume when sandbox is enabled.
  + Fix accelerated images dissapearing after scrolling.
  + Fix video flickering with DMA-BUF sink.
  + Fix pointer lock on X11.
  + Fix movement delta on mouse events in GTK3.
  + Undeprecate console message API and make it available in 2022
    API.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-40776, CVE-2024-40779, CVE-2024-40780,
    CVE-2024-40782, CVE-2024-40789, CVE-2024-4558, CVE-2024-27838,
  CVE-2024-27851.
- Drop patches now upstream:
  webkit2gtk3-CVE-2024-40776.patch
  webkit2gtk3-CVE-2024-40779.patch
  webkit2gtk3-CVE-2024-40780.patch
  webkit2gtk3-CVE-2024-40782.patch</changelog>
  <changelog author="mgorse@suse.com" date="1729166400">- Update to version 2.46.0 (boo#1231039):
  + Use Skia instead of cairo for 2D rendering and enable GPU
    rendering by default.
  + Enable offscreen canvas by default.
  + Add support for system tracing with Sysprof.
  + Implement printing using the Print portal.
  + Add new API to load settings from a config file.
  + Add a new setting to enable or disable the 2D canvas
    acceleration (enabled by default).
  + Undeprecate console messages API and make it available in 6.0
    API.
  + Security fixes: CVE-2024-40866, CVE-2024-44187, CVE-2024-44185,
    CVE-2024-54534, CVE-2024-27856.
- Drop webkit2gtk3-disable-dmabuf-nvidia.patch: Should not be
  needed anymore.
- Add webkit2gtk3-angle-s390x.patch: fix the build on s390x.
- Use gcc 13 to match what is tested upstream.
- Pass USE_SYSTEM_SYSPROF_CAPTURE=NO to cmake, avoid building
  sysprof capture for now.
- Add bug281495.patch: fix crash in ProcessLauncher socket
  monitor callback.</changelog>
  <changelog author="mgorse@suse.com" date="1730721600">- Update to version 2.46.3 (boo#1232747):
  + Flatten layers to a plane when preseve-3d style is set.
  + Fix DuckDuckGo links by adding a user agent quirk.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44244, CVE-2024-44296.
  + Changes in version 2.46.2:
  + Own well-known bus name on a11y bus.
  + Improve memory consumption when putImageData is used repeatedly
    on accelerated canvas.
  + Disable cached web process suspension for now to prevent leaks.
  + Improve text kerning with different combinations of antialias
    and hinting settings.
  + Destroy all network sessions on process exit.
  + Fix visible rectangle calculation when there are animations.
  + Fix the build with ENABLE_NOTIFICATIONS=OFF.
  + Fix the build with ENABLE_FULLSCREEN_API=OFF.
  + Fix the build with ENABLE_WEB_AUDIO=OFF.
  + Fix the build on ppc64le.
  + Changes in version 2.46.1:
  + Fix login QR code not shown in WhatsApp web.
  + Disable PSON by default again in GTK 3 API versions.
  + Disable DMABuf video sink by default to prevent file descriptor
    leaks.
  + Fix the build with GCC 13.
- Drop bug281495.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1732536000">- Add webkit2gtk3-CVE-2024-44308.patch: don't allocate DFG register
  after a slow path (boo#1233631 CVE-2024-44308).
- Add webkit2gtk3-CVE-2024-44309.patch: fix a cookie management
  issue (boo#1233632 CVE-2024-44309).</changelog>
  <changelog author="mgorse@suse.com" date="1735300800">- Update to version 2.46.5 (boo#1234851):
  + Fix the build with GBM and release logs disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-54479, CVE-2024-54502, CVE-2024-54505,
    CVE-2024-54508, CVE-2024-54543.
  + Changes in version 2.46.4:
  + Improve memory consumption and performance of Canvas
    getImageData.
  + Fix preserve-3D intersection rendering.
  + Fix video dimensions since GStreamer 1.24.9.
  + Fix the HTTP-based remote Web Inspector not loading in
    Chromium.
  + Fix content filters not working on about:blank iframes.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44308, CVE-2024-44309.
- Drop webkit2gtk3-CVE-2024-44308.patch and
  webkit2gtk3-CVE-2024-44309.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1739188800">- Update to version 2.46.6 (boo#1236946):
  + Fix a crash when enabling Skia CPU rendering.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24143, CVE-2025-24150, CVE-2025-24158,
    CVE-2025-24162.</changelog>
  <changelog author="mgorse@suse.com" date="1741953600">- Add 7d784721.patch: WebGL context primitive restart can be
  toggled from WebContent process (boo#1239547 CVE-2025-24201).</changelog>
  <changelog author="mgorse@suse.com" date="1743508800">- Update to version 2.48.0 (boo#1239863 boo#1239864):
  + Move tiles rendering to worker threads when rendering with the
    GPU.
  + Fix preserve-3D intersection rendering.
  + Added new function for creating Promise objects to
    JavaScripotCore GLib API.
  + The MediaRecorder backend gained WebM support (requires at
    least GStreamer 1.24.9) and audio bitrate configuration
    support.
  + Fix invalid DPI-aware font size conversion.
  + Bring back support for OpenType-SVG fonts using Skia SVG
    module.
  + Add metadata (title and creation/modification date) to the PDF
    document generated for printing.
  + Propagate the font’s computed locale to HarfBuzz.
  + The GPU process build is now enabled for WebGL, but the web
    process is still used by default. The runtime flag
    UseGPUProcessForWebGL can be used to use the GPU process for
    WebGL.
  + Security fixes: CVE-2024-44192, CVE-2024-54467, CVE-2025-24201.
- Drop 7d784721.patch: Fixed upstream.
- Disable speech synthesis. It has been disabled until now, and
  we don't have flite or spiel in SLE.
- Add gcc13-PIE to BuildRequires (bsc#1239950).
- Add webkit2gtk3-iochannel-network-cache.patch: backport upstream
  patch to stop using IOChannel in NetworkCache: hopefully fixes
  crashes in the network process.</changelog>
  <changelog author="mgorse@suse.com" date="1744113600">- Update to version 2.48.1 (boo#1240958 boo#1240961 boo#1240962
  boo#1240963 boo#1240964 boo#1240986 boo#1240987):
  + Limit the data stored in session state.
  + Remove the empty area below the title bar in Web Inspector when
    not docked.
  + Fix the build with GST_DISABLE_GST_DEBUG.
  + Fix the build with GStreamer &lt; 1.20.
  + Fix the build with video disabled.
  + Fix the build with clang 20.
  + Security fixes: CVE-2024-54551, CVE-2025-24208, CVE-2025-24209,
    CVE-2025-24213, CVE-2025-24216, CVE-2025-24264, CVE-2025-30427.
- Add 8bee9eb9.patch: fix the build on non-x86 architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1747828800">- Update to version 2.48.2 (boo#1243282 boo#1243286 boo#1243288
  boo#1243289 boo#1243424 boo#1243596):
  + Enable CSS Overscroll Behavior by default.
  + Change threaded rendering implementation to use Skia API
    instead of WebCore display list that is not thread safe.
  + Fix rendering when device scale factor change comes before the
    web view geometry update.
  + Fix network process crash on exit.
  + Fix the build with ENABLE_RESOURCE_USAGE=OFF.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24223, CVE-2025-31204, CVE-2025-31205,
    CVE-2025-31206, CVE-2025-31215, CVE-2025-31257.
- Drop 8bee9eb9.patch: fixed upstream.</changelog>
</package>
<package pkgid="d20f148941fe0992a91b01eb93a63af542565f4f1dd3cdc58601d6f0edcb5a79" name="WebKitGTK-6.0-lang" arch="noarch">
  <version epoch="0" ver="2.48.5" rel="150600.12.43.1"/>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213,
    CVE-2024-23271.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834, CVE-2024-27808, CVE-2024-27820,
    CVE-2024-27833.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843, CVE-2024-54658.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
  <changelog author="mgorse@suse.com" date="1723118400">- Add CVE fixes:
  + webkit2gtk3-CVE-2024-40776.patch (boo#1228613 CVE-2024-40776)
  + webkit2gtk3-CVE-2024-40779.patch (boo#1228693 CVE-2024-40779)
  + webkit2gtk3-CVE-2024-40780.patch (boo#1228694 CVE-2024-40780)
  + webkit2gtk3-CVE-2024-40782.patch (boo#1228695 CVE-2024-40782)</changelog>
  <changelog author="mgorse@suse.com" date="1724068800">- Update to version 2.44.3 (boo#1228697):
  + Fix web process cache suspend/resume when sandbox is enabled.
  + Fix accelerated images dissapearing after scrolling.
  + Fix video flickering with DMA-BUF sink.
  + Fix pointer lock on X11.
  + Fix movement delta on mouse events in GTK3.
  + Undeprecate console message API and make it available in 2022
    API.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-40776, CVE-2024-40779, CVE-2024-40780,
    CVE-2024-40782, CVE-2024-40789, CVE-2024-4558, CVE-2024-27838,
  CVE-2024-27851.
- Drop patches now upstream:
  webkit2gtk3-CVE-2024-40776.patch
  webkit2gtk3-CVE-2024-40779.patch
  webkit2gtk3-CVE-2024-40780.patch
  webkit2gtk3-CVE-2024-40782.patch</changelog>
  <changelog author="mgorse@suse.com" date="1729166400">- Update to version 2.46.0 (boo#1231039):
  + Use Skia instead of cairo for 2D rendering and enable GPU
    rendering by default.
  + Enable offscreen canvas by default.
  + Add support for system tracing with Sysprof.
  + Implement printing using the Print portal.
  + Add new API to load settings from a config file.
  + Add a new setting to enable or disable the 2D canvas
    acceleration (enabled by default).
  + Undeprecate console messages API and make it available in 6.0
    API.
  + Security fixes: CVE-2024-40866, CVE-2024-44187, CVE-2024-44185,
    CVE-2024-54534, CVE-2024-27856.
- Drop webkit2gtk3-disable-dmabuf-nvidia.patch: Should not be
  needed anymore.
- Add webkit2gtk3-angle-s390x.patch: fix the build on s390x.
- Use gcc 13 to match what is tested upstream.
- Pass USE_SYSTEM_SYSPROF_CAPTURE=NO to cmake, avoid building
  sysprof capture for now.
- Add bug281495.patch: fix crash in ProcessLauncher socket
  monitor callback.</changelog>
  <changelog author="mgorse@suse.com" date="1730721600">- Update to version 2.46.3 (boo#1232747):
  + Flatten layers to a plane when preseve-3d style is set.
  + Fix DuckDuckGo links by adding a user agent quirk.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44244, CVE-2024-44296.
  + Changes in version 2.46.2:
  + Own well-known bus name on a11y bus.
  + Improve memory consumption when putImageData is used repeatedly
    on accelerated canvas.
  + Disable cached web process suspension for now to prevent leaks.
  + Improve text kerning with different combinations of antialias
    and hinting settings.
  + Destroy all network sessions on process exit.
  + Fix visible rectangle calculation when there are animations.
  + Fix the build with ENABLE_NOTIFICATIONS=OFF.
  + Fix the build with ENABLE_FULLSCREEN_API=OFF.
  + Fix the build with ENABLE_WEB_AUDIO=OFF.
  + Fix the build on ppc64le.
  + Changes in version 2.46.1:
  + Fix login QR code not shown in WhatsApp web.
  + Disable PSON by default again in GTK 3 API versions.
  + Disable DMABuf video sink by default to prevent file descriptor
    leaks.
  + Fix the build with GCC 13.
- Drop bug281495.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1732536000">- Add webkit2gtk3-CVE-2024-44308.patch: don't allocate DFG register
  after a slow path (boo#1233631 CVE-2024-44308).
- Add webkit2gtk3-CVE-2024-44309.patch: fix a cookie management
  issue (boo#1233632 CVE-2024-44309).</changelog>
  <changelog author="mgorse@suse.com" date="1735300800">- Update to version 2.46.5 (boo#1234851):
  + Fix the build with GBM and release logs disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-54479, CVE-2024-54502, CVE-2024-54505,
    CVE-2024-54508, CVE-2024-54543.
  + Changes in version 2.46.4:
  + Improve memory consumption and performance of Canvas
    getImageData.
  + Fix preserve-3D intersection rendering.
  + Fix video dimensions since GStreamer 1.24.9.
  + Fix the HTTP-based remote Web Inspector not loading in
    Chromium.
  + Fix content filters not working on about:blank iframes.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44308, CVE-2024-44309.
- Drop webkit2gtk3-CVE-2024-44308.patch and
  webkit2gtk3-CVE-2024-44309.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1739188800">- Update to version 2.46.6 (boo#1236946):
  + Fix a crash when enabling Skia CPU rendering.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24143, CVE-2025-24150, CVE-2025-24158,
    CVE-2025-24162.</changelog>
  <changelog author="mgorse@suse.com" date="1741953600">- Add 7d784721.patch: WebGL context primitive restart can be
  toggled from WebContent process (boo#1239547 CVE-2025-24201).</changelog>
  <changelog author="mgorse@suse.com" date="1743508800">- Update to version 2.48.0 (boo#1239863 boo#1239864):
  + Move tiles rendering to worker threads when rendering with the
    GPU.
  + Fix preserve-3D intersection rendering.
  + Added new function for creating Promise objects to
    JavaScripotCore GLib API.
  + The MediaRecorder backend gained WebM support (requires at
    least GStreamer 1.24.9) and audio bitrate configuration
    support.
  + Fix invalid DPI-aware font size conversion.
  + Bring back support for OpenType-SVG fonts using Skia SVG
    module.
  + Add metadata (title and creation/modification date) to the PDF
    document generated for printing.
  + Propagate the font’s computed locale to HarfBuzz.
  + The GPU process build is now enabled for WebGL, but the web
    process is still used by default. The runtime flag
    UseGPUProcessForWebGL can be used to use the GPU process for
    WebGL.
  + Security fixes: CVE-2024-44192, CVE-2024-54467, CVE-2025-24201,
  CVE-2025-24189.
- Drop 7d784721.patch: Fixed upstream.
- Disable speech synthesis. It has been disabled until now, and
  we don't have flite or spiel in SLE.
- Add gcc13-PIE to BuildRequires (bsc#1239950).
- Add webkit2gtk3-iochannel-network-cache.patch: backport upstream
  patch to stop using IOChannel in NetworkCache: hopefully fixes
  crashes in the network process.</changelog>
  <changelog author="mgorse@suse.com" date="1744113600">- Update to version 2.48.1 (boo#1240958 boo#1240961 boo#1240962
  boo#1240963 boo#1240964 boo#1240986 boo#1240987):
  + Limit the data stored in session state.
  + Remove the empty area below the title bar in Web Inspector when
    not docked.
  + Fix the build with GST_DISABLE_GST_DEBUG.
  + Fix the build with GStreamer &lt; 1.20.
  + Fix the build with video disabled.
  + Fix the build with clang 20.
  + Security fixes: CVE-2024-54551, CVE-2025-24208, CVE-2025-24209,
    CVE-2025-24213, CVE-2025-24216, CVE-2025-24264, CVE-2025-30427.
- Add 8bee9eb9.patch: fix the build on non-x86 architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1747828800">- Update to version 2.48.2 (boo#1243282 boo#1243286 boo#1243288
  boo#1243289 boo#1243424 boo#1243596):
  + Enable CSS Overscroll Behavior by default.
  + Change threaded rendering implementation to use Skia API
    instead of WebCore display list that is not thread safe.
  + Fix rendering when device scale factor change comes before the
    web view geometry update.
  + Fix network process crash on exit.
  + Fix the build with ENABLE_RESOURCE_USAGE=OFF.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24223, CVE-2025-31204, CVE-2025-31205,
    CVE-2025-31206, CVE-2025-31215, CVE-2025-31257.
- Drop 8bee9eb9.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1754395200">- Update to version 2.48.5 (boo#1247562 boo#1247563 boo#1247564
  boo#1247595 boo#1247596 boo#1247597 boo#1247598 boo#1247599
  boo#1247600):
  + Fix several crashes.
  + Security fixes: CVE-2025-31273, CVE-2025-31278, CVE-2025-43211,
    CVE-2025-43212, CVE-2025-43216, CVE-2025-43227, CVE-2025-43228,
    CVE-2025-43240, CVE-2025-43265, CVE-2025-6558.
  + Changes in version 2.48.4:
  + Improve emoji font selection with USE_SKIA=ON.
  + Improve playback of multimedia streams from blob URLs.
  + Fix the build with USE_SKIA_OPENTYPE_SVG=ON and
    USE_SYSPROF_CAPTURE=ON.
  + Fix the build on LoongArch with USE_SKIA=ON.
  + Fix crash when using a WebKitWebView widget in an offscreen
    window.
  + Fix several crashes and rendering issues.
  + Changes in version 2.48.3:
  + Fix a crash introduced by the new threaded rendering
    implementation using Skia API.
  + Improve rendering performance by recording layers once and
    replaying every dirty region in different worker threads.
  + Fix a crash when setting WEBKIT_SKIA_GPU_PAINTING_THREADS=0.
  + Fix a reference cycle in webkitmediastreamsrc preventing its
    disposal.
- Increase mem_per_process again to avoid running out of memory.</changelog>
</package>
<package pkgid="9beb40344d931e0088a4190b2cfddd8cabf54823a52333eaa8c52289f0126e07" name="WebKitGTK-6.0-lang" arch="noarch">
  <version epoch="0" ver="2.50.1" rel="150600.12.48.3"/>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213,
    CVE-2024-23271.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834, CVE-2024-27808, CVE-2024-27820,
    CVE-2024-27833.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843, CVE-2024-54658.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
  <changelog author="mgorse@suse.com" date="1723118400">- Add CVE fixes:
  + webkit2gtk3-CVE-2024-40776.patch (boo#1228613 CVE-2024-40776)
  + webkit2gtk3-CVE-2024-40779.patch (boo#1228693 CVE-2024-40779)
  + webkit2gtk3-CVE-2024-40780.patch (boo#1228694 CVE-2024-40780)
  + webkit2gtk3-CVE-2024-40782.patch (boo#1228695 CVE-2024-40782)</changelog>
  <changelog author="mgorse@suse.com" date="1724068800">- Update to version 2.44.3 (boo#1228697):
  + Fix web process cache suspend/resume when sandbox is enabled.
  + Fix accelerated images dissapearing after scrolling.
  + Fix video flickering with DMA-BUF sink.
  + Fix pointer lock on X11.
  + Fix movement delta on mouse events in GTK3.
  + Undeprecate console message API and make it available in 2022
    API.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-40776, CVE-2024-40779, CVE-2024-40780,
    CVE-2024-40782, CVE-2024-40789, CVE-2024-4558, CVE-2024-27838,
  CVE-2024-27851.
- Drop patches now upstream:
  webkit2gtk3-CVE-2024-40776.patch
  webkit2gtk3-CVE-2024-40779.patch
  webkit2gtk3-CVE-2024-40780.patch
  webkit2gtk3-CVE-2024-40782.patch</changelog>
  <changelog author="mgorse@suse.com" date="1729166400">- Update to version 2.46.0 (boo#1231039):
  + Use Skia instead of cairo for 2D rendering and enable GPU
    rendering by default.
  + Enable offscreen canvas by default.
  + Add support for system tracing with Sysprof.
  + Implement printing using the Print portal.
  + Add new API to load settings from a config file.
  + Add a new setting to enable or disable the 2D canvas
    acceleration (enabled by default).
  + Undeprecate console messages API and make it available in 6.0
    API.
  + Security fixes: CVE-2024-40866, CVE-2024-44187, CVE-2024-44185,
    CVE-2024-54534, CVE-2024-27856.
- Drop webkit2gtk3-disable-dmabuf-nvidia.patch: Should not be
  needed anymore.
- Add webkit2gtk3-angle-s390x.patch: fix the build on s390x.
- Use gcc 13 to match what is tested upstream.
- Pass USE_SYSTEM_SYSPROF_CAPTURE=NO to cmake, avoid building
  sysprof capture for now.
- Add bug281495.patch: fix crash in ProcessLauncher socket
  monitor callback.</changelog>
  <changelog author="mgorse@suse.com" date="1730721600">- Update to version 2.46.3 (boo#1232747):
  + Flatten layers to a plane when preseve-3d style is set.
  + Fix DuckDuckGo links by adding a user agent quirk.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44244, CVE-2024-44296.
  + Changes in version 2.46.2:
  + Own well-known bus name on a11y bus.
  + Improve memory consumption when putImageData is used repeatedly
    on accelerated canvas.
  + Disable cached web process suspension for now to prevent leaks.
  + Improve text kerning with different combinations of antialias
    and hinting settings.
  + Destroy all network sessions on process exit.
  + Fix visible rectangle calculation when there are animations.
  + Fix the build with ENABLE_NOTIFICATIONS=OFF.
  + Fix the build with ENABLE_FULLSCREEN_API=OFF.
  + Fix the build with ENABLE_WEB_AUDIO=OFF.
  + Fix the build on ppc64le.
  + Changes in version 2.46.1:
  + Fix login QR code not shown in WhatsApp web.
  + Disable PSON by default again in GTK 3 API versions.
  + Disable DMABuf video sink by default to prevent file descriptor
    leaks.
  + Fix the build with GCC 13.
- Drop bug281495.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1732536000">- Add webkit2gtk3-CVE-2024-44308.patch: don't allocate DFG register
  after a slow path (boo#1233631 CVE-2024-44308).
- Add webkit2gtk3-CVE-2024-44309.patch: fix a cookie management
  issue (boo#1233632 CVE-2024-44309).</changelog>
  <changelog author="mgorse@suse.com" date="1735300800">- Update to version 2.46.5 (boo#1234851):
  + Fix the build with GBM and release logs disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-54479, CVE-2024-54502, CVE-2024-54505,
    CVE-2024-54508, CVE-2024-54543.
  + Changes in version 2.46.4:
  + Improve memory consumption and performance of Canvas
    getImageData.
  + Fix preserve-3D intersection rendering.
  + Fix video dimensions since GStreamer 1.24.9.
  + Fix the HTTP-based remote Web Inspector not loading in
    Chromium.
  + Fix content filters not working on about:blank iframes.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44308, CVE-2024-44309.
- Drop webkit2gtk3-CVE-2024-44308.patch and
  webkit2gtk3-CVE-2024-44309.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1739188800">- Update to version 2.46.6 (boo#1236946):
  + Fix a crash when enabling Skia CPU rendering.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24143, CVE-2025-24150, CVE-2025-24158,
    CVE-2025-24162.</changelog>
  <changelog author="mgorse@suse.com" date="1741953600">- Add 7d784721.patch: WebGL context primitive restart can be
  toggled from WebContent process (boo#1239547 CVE-2025-24201).</changelog>
  <changelog author="mgorse@suse.com" date="1743508800">- Update to version 2.48.0 (boo#1239863 boo#1239864):
  + Move tiles rendering to worker threads when rendering with the
    GPU.
  + Fix preserve-3D intersection rendering.
  + Added new function for creating Promise objects to
    JavaScripotCore GLib API.
  + The MediaRecorder backend gained WebM support (requires at
    least GStreamer 1.24.9) and audio bitrate configuration
    support.
  + Fix invalid DPI-aware font size conversion.
  + Bring back support for OpenType-SVG fonts using Skia SVG
    module.
  + Add metadata (title and creation/modification date) to the PDF
    document generated for printing.
  + Propagate the font’s computed locale to HarfBuzz.
  + The GPU process build is now enabled for WebGL, but the web
    process is still used by default. The runtime flag
    UseGPUProcessForWebGL can be used to use the GPU process for
    WebGL.
  + Security fixes: CVE-2024-44192, CVE-2024-54467, CVE-2025-24201,
  CVE-2025-24189.
- Drop 7d784721.patch: Fixed upstream.
- Disable speech synthesis. It has been disabled until now, and
  we don't have flite or spiel in SLE.
- Add gcc13-PIE to BuildRequires (bsc#1239950).
- Add webkit2gtk3-iochannel-network-cache.patch: backport upstream
  patch to stop using IOChannel in NetworkCache: hopefully fixes
  crashes in the network process.</changelog>
  <changelog author="mgorse@suse.com" date="1744113600">- Update to version 2.48.1 (boo#1240958 boo#1240961 boo#1240962
  boo#1240963 boo#1240964 boo#1240986 boo#1240987):
  + Limit the data stored in session state.
  + Remove the empty area below the title bar in Web Inspector when
    not docked.
  + Fix the build with GST_DISABLE_GST_DEBUG.
  + Fix the build with GStreamer &lt; 1.20.
  + Fix the build with video disabled.
  + Fix the build with clang 20.
  + Security fixes: CVE-2024-54551, CVE-2025-24208, CVE-2025-24209,
    CVE-2025-24213, CVE-2025-24216, CVE-2025-24264, CVE-2025-30427.
- Add 8bee9eb9.patch: fix the build on non-x86 architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1747828800">- Update to version 2.48.2 (boo#1243282 boo#1243286 boo#1243288
  boo#1243289 boo#1243424 boo#1243596):
  + Enable CSS Overscroll Behavior by default.
  + Change threaded rendering implementation to use Skia API
    instead of WebCore display list that is not thread safe.
  + Fix rendering when device scale factor change comes before the
    web view geometry update.
  + Fix network process crash on exit.
  + Fix the build with ENABLE_RESOURCE_USAGE=OFF.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24223, CVE-2025-31204, CVE-2025-31205,
    CVE-2025-31206, CVE-2025-31215, CVE-2025-31257.
- Drop 8bee9eb9.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1754395200">- Update to version 2.48.5 (boo#1247562 boo#1247563 boo#1247564
  boo#1247595 boo#1247596 boo#1247597 boo#1247598 boo#1247599
  boo#1247600):
  + Fix several crashes.
  + Security fixes: CVE-2025-31273, CVE-2025-31278, CVE-2025-43211,
    CVE-2025-43212, CVE-2025-43216, CVE-2025-43227, CVE-2025-43228,
    CVE-2025-43240, CVE-2025-43265, CVE-2025-6558.
  + Changes in version 2.48.4:
  + Improve emoji font selection with USE_SKIA=ON.
  + Improve playback of multimedia streams from blob URLs.
  + Fix the build with USE_SKIA_OPENTYPE_SVG=ON and
    USE_SYSPROF_CAPTURE=ON.
  + Fix the build on LoongArch with USE_SKIA=ON.
  + Fix crash when using a WebKitWebView widget in an offscreen
    window.
  + Fix several crashes and rendering issues.
  + Changes in version 2.48.3:
  + Fix a crash introduced by the new threaded rendering
    implementation using Skia API.
  + Improve rendering performance by recording layers once and
    replaying every dirty region in different worker threads.
  + Fix a crash when setting WEBKIT_SKIA_GPU_PAINTING_THREADS=0.
  + Fix a reference cycle in webkitmediastreamsrc preventing its
    disposal.
- Increase mem_per_process again to avoid running out of memory.</changelog>
  <changelog author="mgorse@suse.com" date="1758456000">- Update to version 2.50.0 (boo#1250439 boo#1250440 boo#1250441
  boo#1250442):
  + Improved rendering performance by recording each layer once and
    replaying every dirty region in different worker threads.
  + Enable damage propagation to the UI process by default.
  + CSS property font-variant-emoji is now enabled by default.
  + Font synthesis properties (bold/italic) are now properly
    handled.
  + Ensure web view is focused on tap gesture.
  + Added new API to get the theme color of a WebKitWebView.
  + Security fixes: CVE-2025-43272, CVE-2025-43342, CVE-2025-43356,
  CVE-2025-43368.
- Drop webkit2gtk3-iochannel-network-cache.patch: fixed upstream.
- Add webkit2gtk3-i586-build-fix.patch: fix the build on i586.
- Force the garbage collector to run more often when compiling on
  some architectures. Needed to avoid running out of memory.
- Remove _constraints override for armv6l and armv7l. They were not
  as restrictive as we would like and now seem unnecessary.</changelog>
  <changelog author="mgorse@suse.com" date="1760443200">- Update to version 2.50.1 (boo#1251975):
  + Improve text rendering performance.
  + Fix audio playback broken on instagram.
  + Fix rendering of layers with fractional transforms.
  + Fix the build with ENABLE(VIDEO) disabled.
  + Fix the build in s390x.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43343.
- Drop webkit2gtk3-i586-build-fix.patch: Merged upstream.
- Re-enable LTO on targets where it is not known to make the
  linker run out of memory.</changelog>
</package>
<package pkgid="7fba601ce8a534eae0357b4d27556e6661e8478f91fff27e080a25f6e64e1cb0" name="WebKitGTK-6.0-lang" arch="noarch">
  <version epoch="0" ver="2.50.4" rel="150600.12.54.1"/>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834, CVE-2024-27808, CVE-2024-27820,
    CVE-2024-27833.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843, CVE-2024-54658.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
  <changelog author="mgorse@suse.com" date="1723118400">- Add CVE fixes:
  + webkit2gtk3-CVE-2024-40776.patch (boo#1228613 CVE-2024-40776)
  + webkit2gtk3-CVE-2024-40779.patch (boo#1228693 CVE-2024-40779)
  + webkit2gtk3-CVE-2024-40780.patch (boo#1228694 CVE-2024-40780)
  + webkit2gtk3-CVE-2024-40782.patch (boo#1228695 CVE-2024-40782)</changelog>
  <changelog author="mgorse@suse.com" date="1724068800">- Update to version 2.44.3 (boo#1228697):
  + Fix web process cache suspend/resume when sandbox is enabled.
  + Fix accelerated images dissapearing after scrolling.
  + Fix video flickering with DMA-BUF sink.
  + Fix pointer lock on X11.
  + Fix movement delta on mouse events in GTK3.
  + Undeprecate console message API and make it available in 2022
    API.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-40776, CVE-2024-40779, CVE-2024-40780,
    CVE-2024-40782, CVE-2024-40789, CVE-2024-4558, CVE-2024-27838,
  CVE-2024-27851.
- Drop patches now upstream:
  webkit2gtk3-CVE-2024-40776.patch
  webkit2gtk3-CVE-2024-40779.patch
  webkit2gtk3-CVE-2024-40780.patch
  webkit2gtk3-CVE-2024-40782.patch</changelog>
  <changelog author="mgorse@suse.com" date="1729166400">- Update to version 2.46.0 (boo#1231039):
  + Use Skia instead of cairo for 2D rendering and enable GPU
    rendering by default.
  + Enable offscreen canvas by default.
  + Add support for system tracing with Sysprof.
  + Implement printing using the Print portal.
  + Add new API to load settings from a config file.
  + Add a new setting to enable or disable the 2D canvas
    acceleration (enabled by default).
  + Undeprecate console messages API and make it available in 6.0
    API.
  + Security fixes: CVE-2024-40866, CVE-2024-44187, CVE-2024-44185,
    CVE-2024-54534, CVE-2024-27856, CVE-2025-43480.
- Drop webkit2gtk3-disable-dmabuf-nvidia.patch: Should not be
  needed anymore.
- Add webkit2gtk3-angle-s390x.patch: fix the build on s390x.
- Use gcc 13 to match what is tested upstream.
- Pass USE_SYSTEM_SYSPROF_CAPTURE=NO to cmake, avoid building
  sysprof capture for now.
- Add bug281495.patch: fix crash in ProcessLauncher socket
  monitor callback.</changelog>
  <changelog author="mgorse@suse.com" date="1730721600">- Update to version 2.46.3 (boo#1232747):
  + Flatten layers to a plane when preseve-3d style is set.
  + Fix DuckDuckGo links by adding a user agent quirk.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44244, CVE-2024-44296.
  + Changes in version 2.46.2:
  + Own well-known bus name on a11y bus.
  + Improve memory consumption when putImageData is used repeatedly
    on accelerated canvas.
  + Disable cached web process suspension for now to prevent leaks.
  + Improve text kerning with different combinations of antialias
    and hinting settings.
  + Destroy all network sessions on process exit.
  + Fix visible rectangle calculation when there are animations.
  + Fix the build with ENABLE_NOTIFICATIONS=OFF.
  + Fix the build with ENABLE_FULLSCREEN_API=OFF.
  + Fix the build with ENABLE_WEB_AUDIO=OFF.
  + Fix the build on ppc64le.
  + Changes in version 2.46.1:
  + Fix login QR code not shown in WhatsApp web.
  + Disable PSON by default again in GTK 3 API versions.
  + Disable DMABuf video sink by default to prevent file descriptor
    leaks.
  + Fix the build with GCC 13.
- Drop bug281495.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1732536000">- Add webkit2gtk3-CVE-2024-44308.patch: don't allocate DFG register
  after a slow path (boo#1233631 CVE-2024-44308).
- Add webkit2gtk3-CVE-2024-44309.patch: fix a cookie management
  issue (boo#1233632 CVE-2024-44309).</changelog>
  <changelog author="mgorse@suse.com" date="1735300800">- Update to version 2.46.5 (boo#1234851):
  + Fix the build with GBM and release logs disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-54479, CVE-2024-54502, CVE-2024-54505,
    CVE-2024-54508, CVE-2024-54543.
  + Changes in version 2.46.4:
  + Improve memory consumption and performance of Canvas
    getImageData.
  + Fix preserve-3D intersection rendering.
  + Fix video dimensions since GStreamer 1.24.9.
  + Fix the HTTP-based remote Web Inspector not loading in
    Chromium.
  + Fix content filters not working on about:blank iframes.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44308, CVE-2024-44309.
- Drop webkit2gtk3-CVE-2024-44308.patch and
  webkit2gtk3-CVE-2024-44309.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1739188800">- Update to version 2.46.6 (boo#1236946):
  + Fix a crash when enabling Skia CPU rendering.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24143, CVE-2025-24150, CVE-2025-24158,
    CVE-2025-24162.</changelog>
  <changelog author="mgorse@suse.com" date="1741953600">- Add 7d784721.patch: WebGL context primitive restart can be
  toggled from WebContent process (boo#1239547 CVE-2025-24201).</changelog>
  <changelog author="mgorse@suse.com" date="1743508800">- Update to version 2.48.0 (boo#1239863 boo#1239864):
  + Move tiles rendering to worker threads when rendering with the
    GPU.
  + Fix preserve-3D intersection rendering.
  + Added new function for creating Promise objects to
    JavaScripotCore GLib API.
  + The MediaRecorder backend gained WebM support (requires at
    least GStreamer 1.24.9) and audio bitrate configuration
    support.
  + Fix invalid DPI-aware font size conversion.
  + Bring back support for OpenType-SVG fonts using Skia SVG
    module.
  + Add metadata (title and creation/modification date) to the PDF
    document generated for printing.
  + Propagate the font’s computed locale to HarfBuzz.
  + The GPU process build is now enabled for WebGL, but the web
    process is still used by default. The runtime flag
    UseGPUProcessForWebGL can be used to use the GPU process for
    WebGL.
  + Security fixes: CVE-2024-44192, CVE-2024-54467, CVE-2025-24201,
  CVE-2025-24189.
- Drop 7d784721.patch: Fixed upstream.
- Disable speech synthesis. It has been disabled until now, and
  we don't have flite or spiel in SLE.
- Add gcc13-PIE to BuildRequires (bsc#1239950).
- Add webkit2gtk3-iochannel-network-cache.patch: backport upstream
  patch to stop using IOChannel in NetworkCache: hopefully fixes
  crashes in the network process.</changelog>
  <changelog author="mgorse@suse.com" date="1744113600">- Update to version 2.48.1 (boo#1240958 boo#1240961 boo#1240962
  boo#1240963 boo#1240964 boo#1240986 boo#1240987):
  + Limit the data stored in session state.
  + Remove the empty area below the title bar in Web Inspector when
    not docked.
  + Fix the build with GST_DISABLE_GST_DEBUG.
  + Fix the build with GStreamer &lt; 1.20.
  + Fix the build with video disabled.
  + Fix the build with clang 20.
  + Security fixes: CVE-2024-54551, CVE-2025-24208, CVE-2025-24209,
    CVE-2025-24213, CVE-2025-24216, CVE-2025-24264, CVE-2025-30427.
- Add 8bee9eb9.patch: fix the build on non-x86 architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1747828800">- Update to version 2.48.2 (boo#1243282 boo#1243286 boo#1243288
  boo#1243289 boo#1243424 boo#1243596):
  + Enable CSS Overscroll Behavior by default.
  + Change threaded rendering implementation to use Skia API
    instead of WebCore display list that is not thread safe.
  + Fix rendering when device scale factor change comes before the
    web view geometry update.
  + Fix network process crash on exit.
  + Fix the build with ENABLE_RESOURCE_USAGE=OFF.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24223, CVE-2025-31204, CVE-2025-31205,
    CVE-2025-31206, CVE-2025-31215, CVE-2025-31257.
- Drop 8bee9eb9.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1754395200">- Update to version 2.48.5 (boo#1247562 boo#1247563 boo#1247564
  boo#1247595 boo#1247596 boo#1247597 boo#1247598 boo#1247599
  boo#1247600):
  + Fix several crashes.
  + Security fixes: CVE-2025-31273, CVE-2025-31278, CVE-2025-43211,
    CVE-2025-43212, CVE-2025-43216, CVE-2025-43227, CVE-2025-43228,
    CVE-2025-43240, CVE-2025-43265, CVE-2025-6558.
  + Changes in version 2.48.4:
  + Improve emoji font selection with USE_SKIA=ON.
  + Improve playback of multimedia streams from blob URLs.
  + Fix the build with USE_SKIA_OPENTYPE_SVG=ON and
    USE_SYSPROF_CAPTURE=ON.
  + Fix the build on LoongArch with USE_SKIA=ON.
  + Fix crash when using a WebKitWebView widget in an offscreen
    window.
  + Fix several crashes and rendering issues.
  + Changes in version 2.48.3:
  + Fix a crash introduced by the new threaded rendering
    implementation using Skia API.
  + Improve rendering performance by recording layers once and
    replaying every dirty region in different worker threads.
  + Fix a crash when setting WEBKIT_SKIA_GPU_PAINTING_THREADS=0.
  + Fix a reference cycle in webkitmediastreamsrc preventing its
    disposal.
- Increase mem_per_process again to avoid running out of memory.</changelog>
  <changelog author="mgorse@suse.com" date="1758456000">- Update to version 2.50.0 (boo#1250439 boo#1250440 boo#1250441
  boo#1250442):
  + Improved rendering performance by recording each layer once and
    replaying every dirty region in different worker threads.
  + Enable damage propagation to the UI process by default.
  + CSS property font-variant-emoji is now enabled by default.
  + Font synthesis properties (bold/italic) are now properly
    handled.
  + Ensure web view is focused on tap gesture.
  + Added new API to get the theme color of a WebKitWebView.
  + Security fixes: CVE-2025-43272, CVE-2025-43342, CVE-2025-43356,
  CVE-2025-43368, CVE-2025-43419.
- Drop webkit2gtk3-iochannel-network-cache.patch: fixed upstream.
- Add webkit2gtk3-i586-build-fix.patch: fix the build on i586.
- Force the garbage collector to run more often when compiling on
  some architectures. Needed to avoid running out of memory.
- Remove _constraints override for armv6l and armv7l. They were not
  as restrictive as we would like and now seem unnecessary.</changelog>
  <changelog author="mgorse@suse.com" date="1760443200">- Update to version 2.50.1 (boo#1251975):
  + Improve text rendering performance.
  + Fix audio playback broken on instagram.
  + Fix rendering of layers with fractional transforms.
  + Fix the build with ENABLE(VIDEO) disabled.
  + Fix the build in s390x.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43343.
- Drop webkit2gtk3-i586-build-fix.patch: Merged upstream.
- Re-enable LTO on targets where it is not known to make the
  linker run out of memory.</changelog>
  <changelog author="mgorse@suse.com" date="1763985600">- Update to version 2.50.2 (bsc#1254165 bsc#1254166 bsc#1254167
  bsc#1254168 bsc#1254169 bsc#1254170 bsc#1254171 bsc#1254172
  bsc#1254174 bsc#1254176 bsc#1254177 bsc#1254179 bsc#1254208):
  + Prevent unsafe URI schemes from participating in media
    playback.
  + Make jsc_value_array_buffer_get_data() function introspectable.
  + Fix logging in to Google accounts that have a WebAuthn second
    factor configured.
  + Fix loading webkit://gpu when there are no threads configured
    for GPU rendering.
  + Fix rendering gradiants that use the CSS hue interpolation
    method.
  + Fix pasting image data from the clipboard.
  + Fix font-family selection when the font name contains spaces.
  + Fix the build with standard C libraries that lack execinfo.h,
    like Musl or uClibc.
  + Fix capturing canvas snapshots in the Web Inspector.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43392, CVE-2025-43425, CVE-2025-43427,
    CVE-2025-43429, CVE-2025-43430, CVE-2025-43431, CVE-2025-43432,
    CVE-2025-43434, CVE-2025-43440, CVE-2025-43443, CVE-2025-13502.
- Add webkit2gtk3-undefined-symbol.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1765195200">- Update to version 2.50.3 (bsc#1254473 bsc#1254498 bsc#1254509):
  + Fix seeking and looping of media elements that set the "loop"
    property.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-13947, CVE-2025-43421, CVE-2025-43458,
    CVE-2025-66287.
- Drop webkit2gtk3-undefined-symbol.patch: fixed upstream.
- Use %limit_build. Also define %dwz_low_mem_die_limit and
  %dwz_max_die_limit, similar to what we have in wpewebkit.
  This should simplify the logic for limiting jobs and will
  hopefully help with intermittent build failures.</changelog>
  <changelog author="mgorse@suse.com" date="1765972800">- Update to version 2.50.4 (bsc#1255183 bsc#1255191 bsc#1255194
  bsc#1255195 bsc#1255198 bsc#1255200 bsc#1255497):
  + Correctly handle the program name passed to the sleep disabler.
  + Ensure GStreamer is initialized before using the Quirks.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-14174, CVE-2025-43501, CVE-2025-43529,
    CVE-2025-43531, CVE-2025-43535, CVE-2025-43536, CVE-2025-43541.
- Add webkit2gtk3-a11y-fix-role-mapping.patch: fix a11y regression
  where AT-SPI roles were mapped incorrectly.</changelog>
</package>
<package pkgid="7af7d05d3b31214abea9a6b879447133941c4dc7af6be18cf966d99eca9785b1" name="WebKitGTK-6.0-lang" arch="noarch">
  <version epoch="0" ver="2.52.1" rel="150600.12.63.1"/>
  <changelog author="mgorse@suse.com" date="1724068800">- Update to version 2.44.3 (boo#1228697):
  + Fix web process cache suspend/resume when sandbox is enabled.
  + Fix accelerated images dissapearing after scrolling.
  + Fix video flickering with DMA-BUF sink.
  + Fix pointer lock on X11.
  + Fix movement delta on mouse events in GTK3.
  + Undeprecate console message API and make it available in 2022
    API.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-40776, CVE-2024-40779, CVE-2024-40780,
    CVE-2024-40782, CVE-2024-40789, CVE-2024-4558, CVE-2024-27838,
  CVE-2024-27851.
- Drop patches now upstream:
  webkit2gtk3-CVE-2024-40776.patch
  webkit2gtk3-CVE-2024-40779.patch
  webkit2gtk3-CVE-2024-40780.patch
  webkit2gtk3-CVE-2024-40782.patch</changelog>
  <changelog author="mgorse@suse.com" date="1729166400">- Update to version 2.46.0 (boo#1231039):
  + Use Skia instead of cairo for 2D rendering and enable GPU
    rendering by default.
  + Enable offscreen canvas by default.
  + Add support for system tracing with Sysprof.
  + Implement printing using the Print portal.
  + Add new API to load settings from a config file.
  + Add a new setting to enable or disable the 2D canvas
    acceleration (enabled by default).
  + Undeprecate console messages API and make it available in 6.0
    API.
  + Security fixes: CVE-2024-40866, CVE-2024-44187, CVE-2024-44185,
    CVE-2024-54534, CVE-2024-27856, CVE-2025-43480.
- Drop webkit2gtk3-disable-dmabuf-nvidia.patch: Should not be
  needed anymore.
- Add webkit2gtk3-angle-s390x.patch: fix the build on s390x.
- Use gcc 13 to match what is tested upstream.
- Pass USE_SYSTEM_SYSPROF_CAPTURE=NO to cmake, avoid building
  sysprof capture for now.
- Add bug281495.patch: fix crash in ProcessLauncher socket
  monitor callback.</changelog>
  <changelog author="mgorse@suse.com" date="1730721600">- Update to version 2.46.3 (boo#1232747):
  + Flatten layers to a plane when preseve-3d style is set.
  + Fix DuckDuckGo links by adding a user agent quirk.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44244, CVE-2024-44296.
  + Changes in version 2.46.2:
  + Own well-known bus name on a11y bus.
  + Improve memory consumption when putImageData is used repeatedly
    on accelerated canvas.
  + Disable cached web process suspension for now to prevent leaks.
  + Improve text kerning with different combinations of antialias
    and hinting settings.
  + Destroy all network sessions on process exit.
  + Fix visible rectangle calculation when there are animations.
  + Fix the build with ENABLE_NOTIFICATIONS=OFF.
  + Fix the build with ENABLE_FULLSCREEN_API=OFF.
  + Fix the build with ENABLE_WEB_AUDIO=OFF.
  + Fix the build on ppc64le.
  + Changes in version 2.46.1:
  + Fix login QR code not shown in WhatsApp web.
  + Disable PSON by default again in GTK 3 API versions.
  + Disable DMABuf video sink by default to prevent file descriptor
    leaks.
  + Fix the build with GCC 13.
- Drop bug281495.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1732536000">- Add webkit2gtk3-CVE-2024-44308.patch: don't allocate DFG register
  after a slow path (boo#1233631 CVE-2024-44308).
- Add webkit2gtk3-CVE-2024-44309.patch: fix a cookie management
  issue (boo#1233632 CVE-2024-44309).</changelog>
  <changelog author="mgorse@suse.com" date="1735300800">- Update to version 2.46.5 (boo#1234851):
  + Fix the build with GBM and release logs disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-54479, CVE-2024-54502, CVE-2024-54505,
    CVE-2024-54508, CVE-2024-54543.
  + Changes in version 2.46.4:
  + Improve memory consumption and performance of Canvas
    getImageData.
  + Fix preserve-3D intersection rendering.
  + Fix video dimensions since GStreamer 1.24.9.
  + Fix the HTTP-based remote Web Inspector not loading in
    Chromium.
  + Fix content filters not working on about:blank iframes.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44308, CVE-2024-44309.
- Drop webkit2gtk3-CVE-2024-44308.patch and
  webkit2gtk3-CVE-2024-44309.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1739188800">- Update to version 2.46.6 (boo#1236946):
  + Fix a crash when enabling Skia CPU rendering.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24143, CVE-2025-24150, CVE-2025-24158,
    CVE-2025-24162.</changelog>
  <changelog author="mgorse@suse.com" date="1741953600">- Add 7d784721.patch: WebGL context primitive restart can be
  toggled from WebContent process (boo#1239547 CVE-2025-24201).</changelog>
  <changelog author="mgorse@suse.com" date="1743508800">- Update to version 2.48.0 (boo#1239863 boo#1239864):
  + Move tiles rendering to worker threads when rendering with the
    GPU.
  + Fix preserve-3D intersection rendering.
  + Added new function for creating Promise objects to
    JavaScripotCore GLib API.
  + The MediaRecorder backend gained WebM support (requires at
    least GStreamer 1.24.9) and audio bitrate configuration
    support.
  + Fix invalid DPI-aware font size conversion.
  + Bring back support for OpenType-SVG fonts using Skia SVG
    module.
  + Add metadata (title and creation/modification date) to the PDF
    document generated for printing.
  + Propagate the font’s computed locale to HarfBuzz.
  + The GPU process build is now enabled for WebGL, but the web
    process is still used by default. The runtime flag
    UseGPUProcessForWebGL can be used to use the GPU process for
    WebGL.
  + Security fixes: CVE-2024-44192, CVE-2024-54467, CVE-2025-24201,
  CVE-2025-24189.
- Drop 7d784721.patch: Fixed upstream.
- Disable speech synthesis. It has been disabled until now, and
  we don't have flite or spiel in SLE.
- Add gcc13-PIE to BuildRequires (bsc#1239950).
- Add webkit2gtk3-iochannel-network-cache.patch: backport upstream
  patch to stop using IOChannel in NetworkCache: hopefully fixes
  crashes in the network process.</changelog>
  <changelog author="mgorse@suse.com" date="1744113600">- Update to version 2.48.1 (boo#1240958 boo#1240961 boo#1240962
  boo#1240963 boo#1240964 boo#1240986 boo#1240987):
  + Limit the data stored in session state.
  + Remove the empty area below the title bar in Web Inspector when
    not docked.
  + Fix the build with GST_DISABLE_GST_DEBUG.
  + Fix the build with GStreamer &lt; 1.20.
  + Fix the build with video disabled.
  + Fix the build with clang 20.
  + Security fixes: CVE-2024-54551, CVE-2025-24208, CVE-2025-24209,
    CVE-2025-24213, CVE-2025-24216, CVE-2025-24264, CVE-2025-30427.
- Add 8bee9eb9.patch: fix the build on non-x86 architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1747828800">- Update to version 2.48.2 (boo#1243282 boo#1243286 boo#1243288
  boo#1243289 boo#1243424 boo#1243596):
  + Enable CSS Overscroll Behavior by default.
  + Change threaded rendering implementation to use Skia API
    instead of WebCore display list that is not thread safe.
  + Fix rendering when device scale factor change comes before the
    web view geometry update.
  + Fix network process crash on exit.
  + Fix the build with ENABLE_RESOURCE_USAGE=OFF.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24223, CVE-2025-31204, CVE-2025-31205,
    CVE-2025-31206, CVE-2025-31215, CVE-2025-31257.
- Drop 8bee9eb9.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1754395200">- Update to version 2.48.5 (boo#1247562 boo#1247563 boo#1247564
  boo#1247595 boo#1247596 boo#1247597 boo#1247598 boo#1247599
  boo#1247600):
  + Fix several crashes.
  + Security fixes: CVE-2025-31273, CVE-2025-31278, CVE-2025-43211,
    CVE-2025-43212, CVE-2025-43216, CVE-2025-43227, CVE-2025-43228,
    CVE-2025-43240, CVE-2025-43265, CVE-2025-6558.
  + Changes in version 2.48.4:
  + Improve emoji font selection with USE_SKIA=ON.
  + Improve playback of multimedia streams from blob URLs.
  + Fix the build with USE_SKIA_OPENTYPE_SVG=ON and
    USE_SYSPROF_CAPTURE=ON.
  + Fix the build on LoongArch with USE_SKIA=ON.
  + Fix crash when using a WebKitWebView widget in an offscreen
    window.
  + Fix several crashes and rendering issues.
  + Changes in version 2.48.3:
  + Fix a crash introduced by the new threaded rendering
    implementation using Skia API.
  + Improve rendering performance by recording layers once and
    replaying every dirty region in different worker threads.
  + Fix a crash when setting WEBKIT_SKIA_GPU_PAINTING_THREADS=0.
  + Fix a reference cycle in webkitmediastreamsrc preventing its
    disposal.
- Increase mem_per_process again to avoid running out of memory.</changelog>
  <changelog author="mgorse@suse.com" date="1758456000">- Update to version 2.50.0 (boo#1250439 boo#1250440 boo#1250441
  boo#1250442):
  + Improved rendering performance by recording each layer once and
    replaying every dirty region in different worker threads.
  + Enable damage propagation to the UI process by default.
  + CSS property font-variant-emoji is now enabled by default.
  + Font synthesis properties (bold/italic) are now properly
    handled.
  + Ensure web view is focused on tap gesture.
  + Added new API to get the theme color of a WebKitWebView.
  + Security fixes: CVE-2025-43272, CVE-2025-43342, CVE-2025-43356,
  CVE-2025-43368, CVE-2025-43419, CVE-2025-31223, CVE-2025-31277.
- Drop webkit2gtk3-iochannel-network-cache.patch: fixed upstream.
- Add webkit2gtk3-i586-build-fix.patch: fix the build on i586.
- Force the garbage collector to run more often when compiling on
  some architectures. Needed to avoid running out of memory.
- Remove _constraints override for armv6l and armv7l. They were not
  as restrictive as we would like and now seem unnecessary.</changelog>
  <changelog author="mgorse@suse.com" date="1760443200">- Update to version 2.50.1 (boo#1251975):
  + Improve text rendering performance.
  + Fix audio playback broken on instagram.
  + Fix rendering of layers with fractional transforms.
  + Fix the build with ENABLE(VIDEO) disabled.
  + Fix the build in s390x.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43343.
- Drop webkit2gtk3-i586-build-fix.patch: Merged upstream.
- Re-enable LTO on targets where it is not known to make the
  linker run out of memory.</changelog>
  <changelog author="mgorse@suse.com" date="1763985600">- Update to version 2.50.2 (bsc#1254165 bsc#1254166 bsc#1254167
  bsc#1254168 bsc#1254169 bsc#1254170 bsc#1254171 bsc#1254172
  bsc#1254174 bsc#1254176 bsc#1254177 bsc#1254179 bsc#1254208):
  + Prevent unsafe URI schemes from participating in media
    playback.
  + Make jsc_value_array_buffer_get_data() function introspectable.
  + Fix logging in to Google accounts that have a WebAuthn second
    factor configured.
  + Fix loading webkit://gpu when there are no threads configured
    for GPU rendering.
  + Fix rendering gradiants that use the CSS hue interpolation
    method.
  + Fix pasting image data from the clipboard.
  + Fix font-family selection when the font name contains spaces.
  + Fix the build with standard C libraries that lack execinfo.h,
    like Musl or uClibc.
  + Fix capturing canvas snapshots in the Web Inspector.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43392, CVE-2025-43425, CVE-2025-43427,
    CVE-2025-43429, CVE-2025-43430, CVE-2025-43431, CVE-2025-43432,
  +    CVE-2025-43434, CVE-2025-43440, CVE-2025-43443, CVE-2025-13502,
  +    CVE-2025-43433, CVE-2025-43438, CVE-2025-43441.
- Add webkit2gtk3-undefined-symbol.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1765195200">- Update to version 2.50.3 (bsc#1254473 bsc#1254498 bsc#1254509):
  + Fix seeking and looping of media elements that set the "loop"
    property.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-13947, CVE-2025-43421, CVE-2025-43458,
    CVE-2025-66287.
- Drop webkit2gtk3-undefined-symbol.patch: fixed upstream.
- Use %limit_build. Also define %dwz_low_mem_die_limit and
  %dwz_max_die_limit, similar to what we have in wpewebkit.
  This should simplify the logic for limiting jobs and will
  hopefully help with intermittent build failures.</changelog>
  <changelog author="mgorse@suse.com" date="1765972800">- Update to version 2.50.4 (bsc#1255183 bsc#1255191 bsc#1255194
  bsc#1255195 bsc#1255198 bsc#1255200 bsc#1255497):
  + Correctly handle the program name passed to the sleep disabler.
  + Ensure GStreamer is initialized before using the Quirks.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-14174, CVE-2025-43501, CVE-2025-43529,
    CVE-2025-43531, CVE-2025-43535, CVE-2025-43536, CVE-2025-43541.
- Add webkit2gtk3-a11y-fix-role-mapping.patch: fix a11y regression
  where AT-SPI roles were mapped incorrectly.</changelog>
  <changelog author="mgorse@suse.com" date="1773921600">- Update to version 2.52.0:
  + Make scrolling with touch input smoother for small movements.
  + Fix estimated load progress of downloads when Content-Length
    value is wrong.
  + Ensure that "scrollend" events are correctly emitted after
    scroll animations.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43213, CVE-2025-43214, CVE-2025-43457,
    CVE-2025-43511, CVE-2025-46299, CVE-2026-20608, CVE-2026-20635,
    CVE-2026-20636, CVE-2026-20644, CVE-2026-20652, CVE-2026-20676
    (bsc#1259934 bsc#1259935 bsc#1259936 bsc#1259937 bsc#1259938
    bsc#1259939 bsc#1259940 bsc#1259941 bsc#1259942 bsc#1259943
    bsc#1259944 bsc#1259945 bsc#1259946 bsc#1259947 bsc#1259948
    bsc#1259949 bsc#1259950)
- Drop webkit2gtk3-a11y-fix-role-mapping.patch: fixed upstream.
- Add webkit2gtk3-libsoup2.patch: reinstate support for libsoup2.</changelog>
  <changelog author="mgorse@suse.com" date="1774267200">- Add webkit2gtk3-aarch64-build-fix.patch: fix the build with JIT
  disabled.
- Increase limit_build to try to prevent running out of memory.</changelog>
  <changelog author="mgorse@suse.com" date="1774612800">- Pass ggc-min-expand=10 on some architectures, rather than 30.
  We are still getting "virtual memory exhausted" on i586
  sometimes, and hopefully this will help.</changelog>
  <changelog author="mgorse@suse.com" date="1775044800">- Update to version 2.52.1 (bsc#1261172 bsc#1261173 bsc#1261174
  bsc#1261175 bsc#1261176 bsc#1261177 bsc#1261178 bsc#1261179):
  + Reduce the amount of useless MPRIS notifications produced by
    MediaSesion when the information about media being played is
    incomplete.
  + Support turning off USE_GSTREAMER to configure the build with
    all multimedia features disabled.
  + Add Sysprof marks for mouse events.
  + Fix MediaSession icon for iheart.com not being displayed.
  + Fix the build with USE_GSTREAMER_GL disabled.
  + Fix the build with librice version 0.3.0 or newer.
  + Fix several crashes and rendering issues.
  + Translation updates: Georgian.
  + Security fixes: CVE-2026-20643, CVE-2026-20664, CVE-2026-20665,
    CVE-2026-20691, CVE-2026-28857, CVE-2026-28859, CVE-2026-28861,
    CVE-2026-28871.
- Rebase webkit2gtk3-libsoup2.patch.
- Add webkitgtk-gtk3-build-fix.patch: fix the gtk3 build.</changelog>
</package>
<package pkgid="23160ac5492ee4ab4c0d228c3c83a2cfdfa0d2139100fe5cd02946c038118b14" name="abseil-cpp" arch="src">
  <version epoch="0" ver="20240116.3" rel="150600.19.3.15"/>
  <changelog author="rpm@fthiessen.de" date="1619352000">- Update to LTS version 20210324.1
  * Fixed missing absl::Cleanup
  * Fixed pkgconfig install path
- Dropped upstream merged Correctly-install-pkgconfig.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210324.2 (LTS):
  * No user visible changes, only build system related</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 20211102.0:
  * absl::Cord is now implemented as a b-tree. The new implementation offers
    improved performance in most workloads.
  * absl::SimpleHexAtoi() has been added to strings library for parsing
    hexadecimal strings</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646395200">- Fix build on SLE-12-SP5</changelog>
  <changelog author="jengelh@inai.de" date="1649073600">- Implement shlib packaging policy</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1656504000">- Add options-old.patch, options-cxx17.patch (boo#1203378)
  * Ensure ABI stability regardless of compiler settings per instruction in the header.</changelog>
  <changelog author="fvogt@suse.com" date="1656504001">- Remove obsolete 0%{suse_version} &lt; 1500 conditions</changelog>
  <changelog author="elimat@opensuse.org" date="1656849600">- Update to version 20220623.0
  What's New:
  * Added absl::AnyInvocable, a move-only function type.
  * Added absl::CordBuffer, a type for buffering data for eventual inclusion an
    absl::Cord, which is useful for writing zero-copy code.
  * Added support for command-line flags of type absl::optional&lt;T&gt;.
  Breaking Changes:
  * CMake builds now use the flag ABSL_BUILD_TESTING (default: OFF) to control
    whether or not unit tests are built.
  * The ABSL_DEPRECATED macro now works with the GCC compiler. GCC users that
    are experiencing new warnings can use -Wno-deprecated-declatations silence
  the warnings or use -Wno-error=deprecated-declarations to see warnings but
  not fail the build.
  * ABSL_CONST_INIT uses the C++20 keyword constinit when available. Some
    compilers are more strict about where this keyword must appear compared to
  the pre-C++20 implementation.
  * Bazel builds now depend on the bazelbuild/bazel-skylib repository.
    See Abseil's WORKSPACE file for an example of how to add this dependency.
  Other:
  * This will be the last release to support C++11. Future releases will require at least C++14.
- run spec-cleaner</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1657540800">- Add Fix-maes-msse41-leaking-into-pkgconfig.patch
  * Do not make programs compiled with abseil require new-ish CPUs (boo#1203379)</changelog>
  <changelog author="dmueller@suse.com" date="1664020800">- update to 20220623.1:
  * minor warning fix</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to 20230125.2
  What's New:
    The Abseil logging library has been released. This library
    provides facilities for writing short text messages about the
    status of a program to stderr, disk files, or other sinks
    (via an extension API). See the logging library documentation
    for more information.
    An extension point, AbslStringify(), allows user-defined types
    to seamlessly work with Abseil's string formatting functions
    like absl::StrCat() and absl::StrFormat().
    A library for computing CRC32C checksums has been added.
    Floating-point parsing now uses the Eisel-Lemire algorithm,
    which provides a significant speed improvement.
    The flags library now provides suggestions for the closest
    flag(s) in the case of misspelled flags.
    Using CMake to install Abseil now makes the installed artifacts
    (in particular absl/base/options.h) reflect the compiled ABI.
  Breaking Changes:
    Abseil now requires at least C++14 and follows Google's Foundational
    C++ Support Policy. See this table for a list of currently supported
    versions compilers, platforms, and build tools.
    The legacy spellings of the thread annotation macros/functions
    (e.g. GUARDED_BY()) have been removed by default in favor of the
    ABSL_ prefixed versions (e.g. ABSL_GUARDED_BY()) due to clashes with
    other libraries. The compatibility macro ABSL_LEGACY_THREAD_ANNOTATIONS
    can be defined on the compile command-line to temporarily restore these
    spellings, but this compatibility macro will be removed in the future.
  Known Issues
    The Abseil logging library in this release is not a feature-complete
    replacement for glog yet. VLOG and DFATAL are examples of features
    that have not yet been released.
- obsolete Fix-maes-msse41-leaking-into-pkgconfig.patch</changelog>
  <changelog author="adrian@suse.de" date="1685016000">- update to 20230125.3
  Details can be found on:
    https://github.com/abseil/abseil-cpp/releases/tag/20230125.3</changelog>
  <changelog author="fvogt@suse.com" date="1688040000">- Add baselibs.conf to make protobuf happy. Hopefully temporary.</changelog>
  <changelog author="fstrba@suse.com" date="1691582400">- Fix build on older systems by requiring C++17 compliant compiler
- Added patch:
  * cmake.patch
    + lower the cmake requirement to 3.5 in order to be able to
    build on SLE12SP5</changelog>
  <changelog author="adrian@suse.de" date="1694088000">- update to 20230802.0
  What's New:
  * Added the nullability library for designating the expected
    nullability of pointers. Currently these serve as annotations
    only, but it is expected that compilers will one day be able
    to use these annotations for diagnostic purposes.
  * Added the prefetch library as a portable layer for moving data
    into caches before it is read.
  * Abseil's hash tables now detect many more programming errors
    in debug and sanitizer builds.
  * Abseil's synchronization objects now differentiate absolute
    waits (when passed an absl::Time) from relative waits (when
    passed an absl::Duration) when the underlying platform supports
    differentiating these cases. This only makes a difference when
    system clocks are adjusted.
  * Abseil's flag parsing library includes additional methods that
    make it easier to use when another library also expects to be
    able to parse flags.
  * absl::string_view is now available as a smaller target,
    @com_google_absl//absl/strings:string_view, so that users may
    use this library without depending on the much larger
    @com_google_absl//absl/strings target.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1696593600">- update to 20230802.1:
  * Add StdcppWaiter to the end of the list of waiter
    implementations</changelog>
  <changelog author="dmueller@suse.com" date="1705665600">- fix build for non-SUSE distributions</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1709467200">- update to 20240116.1:
  * Add absl::NoDestructor&lt;T&gt; to simplify defining static types
    that do not need to be destructed upon program exit.
  * Add configurable verbose logging (also known as VLOG).
  * Added absl::Overload(), which returns a functor that provides
    overloads based on the functors passed to it. Note that this
    functionality requires C++17 or newer.
  * Breaking Change: AbslHashValue() no longer accepts C-style
    arrays as a parameter, caller need to wrap C-string literals in
    absl::string_view.
  * Breaking Change: absl::weak_equality and absl::strong_equality
    have been removed. The corresponding std types were removed
    before C++20 was finalized</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1712836800">- SLE-only: import upstream patch to fix build with gcc7 in C++17
  mode: hash-fix-gcc7-cpp17-build.patch (bsc#1222261)
  + Upstream commit bb83aceacb554e79e7cd2404856f0be30bd00303</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1739966400">- Update to 20240116.3
  * Fix potential integer overflow in hash container create/resize (bsc#1236438)
    The sized constructors, reserve(), and rehash() methods of
    absl::{flat,node}_hash_{set,map} did not impose an upper bound on
    their size argument. As a result, it was possible for a caller to pass
    a very large size that would cause an integer overflow when computing
    the size of the container's backing store. Subsequent accesses to the
    container might then access out-of-bounds memory.
- from version 20240116.2
  * Prevent overflow in absl::CEscape(). Strings larger than 1 GiB on a
    platform with a 32-bit size_t could potentially overflow size_t in
    `CEscapedLength()`, resulting in an undersized allocation. The resulting
    write in `CEscapeAndAppendInternal()` would then write beyond the bounds
    of the output buffer.
  * A second overflow, where the calculated escaped length is added to the
    size of the string being appended to, is also fixed. In both cases the
    program will now abort prior to the overflow.
  * Workaround for NVIDIA C++ compiler being unable to parse variadic
    expansions in range of range-based for loop</changelog>
</package>
<package pkgid="ed60ae498eb49a1aaf487cea50aa43ab7d3d7c51a2ea4bebc8d5f505f652725e" name="abseil-cpp" arch="src">
  <version epoch="0" ver="20240116.3" rel="150600.19.6.1"/>
  <changelog author="rpm@fthiessen.de" date="1619352000">- Update to LTS version 20210324.1
  * Fixed missing absl::Cleanup
  * Fixed pkgconfig install path
- Dropped upstream merged Correctly-install-pkgconfig.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210324.2 (LTS):
  * No user visible changes, only build system related</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 20211102.0:
  * absl::Cord is now implemented as a b-tree. The new implementation offers
    improved performance in most workloads.
  * absl::SimpleHexAtoi() has been added to strings library for parsing
    hexadecimal strings</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646395200">- Fix build on SLE-12-SP5</changelog>
  <changelog author="jengelh@inai.de" date="1649073600">- Implement shlib packaging policy</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1656504000">- Add options-old.patch, options-cxx17.patch (boo#1203378)
  * Ensure ABI stability regardless of compiler settings per instruction in the header.</changelog>
  <changelog author="fvogt@suse.com" date="1656504001">- Remove obsolete 0%{suse_version} &lt; 1500 conditions</changelog>
  <changelog author="elimat@opensuse.org" date="1656849600">- Update to version 20220623.0
  What's New:
  * Added absl::AnyInvocable, a move-only function type.
  * Added absl::CordBuffer, a type for buffering data for eventual inclusion an
    absl::Cord, which is useful for writing zero-copy code.
  * Added support for command-line flags of type absl::optional&lt;T&gt;.
  Breaking Changes:
  * CMake builds now use the flag ABSL_BUILD_TESTING (default: OFF) to control
    whether or not unit tests are built.
  * The ABSL_DEPRECATED macro now works with the GCC compiler. GCC users that
    are experiencing new warnings can use -Wno-deprecated-declatations silence
  the warnings or use -Wno-error=deprecated-declarations to see warnings but
  not fail the build.
  * ABSL_CONST_INIT uses the C++20 keyword constinit when available. Some
    compilers are more strict about where this keyword must appear compared to
  the pre-C++20 implementation.
  * Bazel builds now depend on the bazelbuild/bazel-skylib repository.
    See Abseil's WORKSPACE file for an example of how to add this dependency.
  Other:
  * This will be the last release to support C++11. Future releases will require at least C++14.
- run spec-cleaner</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1657540800">- Add Fix-maes-msse41-leaking-into-pkgconfig.patch
  * Do not make programs compiled with abseil require new-ish CPUs (boo#1203379)</changelog>
  <changelog author="dmueller@suse.com" date="1664020800">- update to 20220623.1:
  * minor warning fix</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to 20230125.2
  What's New:
    The Abseil logging library has been released. This library
    provides facilities for writing short text messages about the
    status of a program to stderr, disk files, or other sinks
    (via an extension API). See the logging library documentation
    for more information.
    An extension point, AbslStringify(), allows user-defined types
    to seamlessly work with Abseil's string formatting functions
    like absl::StrCat() and absl::StrFormat().
    A library for computing CRC32C checksums has been added.
    Floating-point parsing now uses the Eisel-Lemire algorithm,
    which provides a significant speed improvement.
    The flags library now provides suggestions for the closest
    flag(s) in the case of misspelled flags.
    Using CMake to install Abseil now makes the installed artifacts
    (in particular absl/base/options.h) reflect the compiled ABI.
  Breaking Changes:
    Abseil now requires at least C++14 and follows Google's Foundational
    C++ Support Policy. See this table for a list of currently supported
    versions compilers, platforms, and build tools.
    The legacy spellings of the thread annotation macros/functions
    (e.g. GUARDED_BY()) have been removed by default in favor of the
    ABSL_ prefixed versions (e.g. ABSL_GUARDED_BY()) due to clashes with
    other libraries. The compatibility macro ABSL_LEGACY_THREAD_ANNOTATIONS
    can be defined on the compile command-line to temporarily restore these
    spellings, but this compatibility macro will be removed in the future.
  Known Issues
    The Abseil logging library in this release is not a feature-complete
    replacement for glog yet. VLOG and DFATAL are examples of features
    that have not yet been released.
- obsolete Fix-maes-msse41-leaking-into-pkgconfig.patch</changelog>
  <changelog author="adrian@suse.de" date="1685016000">- update to 20230125.3
  Details can be found on:
    https://github.com/abseil/abseil-cpp/releases/tag/20230125.3</changelog>
  <changelog author="fvogt@suse.com" date="1688040000">- Add baselibs.conf to make protobuf happy. Hopefully temporary.</changelog>
  <changelog author="fstrba@suse.com" date="1691582400">- Fix build on older systems by requiring C++17 compliant compiler
- Added patch:
  * cmake.patch
    + lower the cmake requirement to 3.5 in order to be able to
    build on SLE12SP5</changelog>
  <changelog author="adrian@suse.de" date="1694088000">- update to 20230802.0
  What's New:
  * Added the nullability library for designating the expected
    nullability of pointers. Currently these serve as annotations
    only, but it is expected that compilers will one day be able
    to use these annotations for diagnostic purposes.
  * Added the prefetch library as a portable layer for moving data
    into caches before it is read.
  * Abseil's hash tables now detect many more programming errors
    in debug and sanitizer builds.
  * Abseil's synchronization objects now differentiate absolute
    waits (when passed an absl::Time) from relative waits (when
    passed an absl::Duration) when the underlying platform supports
    differentiating these cases. This only makes a difference when
    system clocks are adjusted.
  * Abseil's flag parsing library includes additional methods that
    make it easier to use when another library also expects to be
    able to parse flags.
  * absl::string_view is now available as a smaller target,
    @com_google_absl//absl/strings:string_view, so that users may
    use this library without depending on the much larger
    @com_google_absl//absl/strings target.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1696593600">- update to 20230802.1:
  * Add StdcppWaiter to the end of the list of waiter
    implementations</changelog>
  <changelog author="dmueller@suse.com" date="1705665600">- fix build for non-SUSE distributions</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1709467200">- update to 20240116.1:
  * Add absl::NoDestructor&lt;T&gt; to simplify defining static types
    that do not need to be destructed upon program exit.
  * Add configurable verbose logging (also known as VLOG).
  * Added absl::Overload(), which returns a functor that provides
    overloads based on the functors passed to it. Note that this
    functionality requires C++17 or newer.
  * Breaking Change: AbslHashValue() no longer accepts C-style
    arrays as a parameter, caller need to wrap C-string literals in
    absl::string_view.
  * Breaking Change: absl::weak_equality and absl::strong_equality
    have been removed. The corresponding std types were removed
    before C++20 was finalized</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1712836800">- SLE-only: import upstream patch to fix build with gcc7 in C++17
  mode: hash-fix-gcc7-cpp17-build.patch (bsc#1222261)
  + Upstream commit bb83aceacb554e79e7cd2404856f0be30bd00303</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1739966400">- Update to 20240116.3
  * Fix potential integer overflow in hash container create/resize (bsc#1236438)
    The sized constructors, reserve(), and rehash() methods of
    absl::{flat,node}_hash_{set,map} did not impose an upper bound on
    their size argument. As a result, it was possible for a caller to pass
    a very large size that would cause an integer overflow when computing
    the size of the container's backing store. Subsequent accesses to the
    container might then access out-of-bounds memory. (bsc#1237543, CVE-2025-0838)
- from version 20240116.2
  * Prevent overflow in absl::CEscape(). Strings larger than 1 GiB on a
    platform with a 32-bit size_t could potentially overflow size_t in
    `CEscapedLength()`, resulting in an undersized allocation. The resulting
    write in `CEscapeAndAppendInternal()` would then write beyond the bounds
    of the output buffer.
  * A second overflow, where the calculated escaped length is added to the
    size of the string being appended to, is also fixed. In both cases the
    program will now abort prior to the overflow.
  * Workaround for NVIDIA C++ compiler being unable to parse variadic
    expansions in range of range-based for loop</changelog>
</package>
<package pkgid="2fbe289accea1525cfc2be8549ab71eec520cd7bd8fac86fa66118d28a1dce46" name="abseil-cpp-devel" arch="x86_64">
  <version epoch="0" ver="20240116.3" rel="150600.19.3.15"/>
  <changelog author="rpm@fthiessen.de" date="1619352000">- Update to LTS version 20210324.1
  * Fixed missing absl::Cleanup
  * Fixed pkgconfig install path
- Dropped upstream merged Correctly-install-pkgconfig.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210324.2 (LTS):
  * No user visible changes, only build system related</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 20211102.0:
  * absl::Cord is now implemented as a b-tree. The new implementation offers
    improved performance in most workloads.
  * absl::SimpleHexAtoi() has been added to strings library for parsing
    hexadecimal strings</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646395200">- Fix build on SLE-12-SP5</changelog>
  <changelog author="jengelh@inai.de" date="1649073600">- Implement shlib packaging policy</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1656504000">- Add options-old.patch, options-cxx17.patch (boo#1203378)
  * Ensure ABI stability regardless of compiler settings per instruction in the header.</changelog>
  <changelog author="fvogt@suse.com" date="1656504001">- Remove obsolete 0%{suse_version} &lt; 1500 conditions</changelog>
  <changelog author="elimat@opensuse.org" date="1656849600">- Update to version 20220623.0
  What's New:
  * Added absl::AnyInvocable, a move-only function type.
  * Added absl::CordBuffer, a type for buffering data for eventual inclusion an
    absl::Cord, which is useful for writing zero-copy code.
  * Added support for command-line flags of type absl::optional&lt;T&gt;.
  Breaking Changes:
  * CMake builds now use the flag ABSL_BUILD_TESTING (default: OFF) to control
    whether or not unit tests are built.
  * The ABSL_DEPRECATED macro now works with the GCC compiler. GCC users that
    are experiencing new warnings can use -Wno-deprecated-declatations silence
  the warnings or use -Wno-error=deprecated-declarations to see warnings but
  not fail the build.
  * ABSL_CONST_INIT uses the C++20 keyword constinit when available. Some
    compilers are more strict about where this keyword must appear compared to
  the pre-C++20 implementation.
  * Bazel builds now depend on the bazelbuild/bazel-skylib repository.
    See Abseil's WORKSPACE file for an example of how to add this dependency.
  Other:
  * This will be the last release to support C++11. Future releases will require at least C++14.
- run spec-cleaner</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1657540800">- Add Fix-maes-msse41-leaking-into-pkgconfig.patch
  * Do not make programs compiled with abseil require new-ish CPUs (boo#1203379)</changelog>
  <changelog author="dmueller@suse.com" date="1664020800">- update to 20220623.1:
  * minor warning fix</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to 20230125.2
  What's New:
    The Abseil logging library has been released. This library
    provides facilities for writing short text messages about the
    status of a program to stderr, disk files, or other sinks
    (via an extension API). See the logging library documentation
    for more information.
    An extension point, AbslStringify(), allows user-defined types
    to seamlessly work with Abseil's string formatting functions
    like absl::StrCat() and absl::StrFormat().
    A library for computing CRC32C checksums has been added.
    Floating-point parsing now uses the Eisel-Lemire algorithm,
    which provides a significant speed improvement.
    The flags library now provides suggestions for the closest
    flag(s) in the case of misspelled flags.
    Using CMake to install Abseil now makes the installed artifacts
    (in particular absl/base/options.h) reflect the compiled ABI.
  Breaking Changes:
    Abseil now requires at least C++14 and follows Google's Foundational
    C++ Support Policy. See this table for a list of currently supported
    versions compilers, platforms, and build tools.
    The legacy spellings of the thread annotation macros/functions
    (e.g. GUARDED_BY()) have been removed by default in favor of the
    ABSL_ prefixed versions (e.g. ABSL_GUARDED_BY()) due to clashes with
    other libraries. The compatibility macro ABSL_LEGACY_THREAD_ANNOTATIONS
    can be defined on the compile command-line to temporarily restore these
    spellings, but this compatibility macro will be removed in the future.
  Known Issues
    The Abseil logging library in this release is not a feature-complete
    replacement for glog yet. VLOG and DFATAL are examples of features
    that have not yet been released.
- obsolete Fix-maes-msse41-leaking-into-pkgconfig.patch</changelog>
  <changelog author="adrian@suse.de" date="1685016000">- update to 20230125.3
  Details can be found on:
    https://github.com/abseil/abseil-cpp/releases/tag/20230125.3</changelog>
  <changelog author="fvogt@suse.com" date="1688040000">- Add baselibs.conf to make protobuf happy. Hopefully temporary.</changelog>
  <changelog author="fstrba@suse.com" date="1691582400">- Fix build on older systems by requiring C++17 compliant compiler
- Added patch:
  * cmake.patch
    + lower the cmake requirement to 3.5 in order to be able to
    build on SLE12SP5</changelog>
  <changelog author="adrian@suse.de" date="1694088000">- update to 20230802.0
  What's New:
  * Added the nullability library for designating the expected
    nullability of pointers. Currently these serve as annotations
    only, but it is expected that compilers will one day be able
    to use these annotations for diagnostic purposes.
  * Added the prefetch library as a portable layer for moving data
    into caches before it is read.
  * Abseil's hash tables now detect many more programming errors
    in debug and sanitizer builds.
  * Abseil's synchronization objects now differentiate absolute
    waits (when passed an absl::Time) from relative waits (when
    passed an absl::Duration) when the underlying platform supports
    differentiating these cases. This only makes a difference when
    system clocks are adjusted.
  * Abseil's flag parsing library includes additional methods that
    make it easier to use when another library also expects to be
    able to parse flags.
  * absl::string_view is now available as a smaller target,
    @com_google_absl//absl/strings:string_view, so that users may
    use this library without depending on the much larger
    @com_google_absl//absl/strings target.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1696593600">- update to 20230802.1:
  * Add StdcppWaiter to the end of the list of waiter
    implementations</changelog>
  <changelog author="dmueller@suse.com" date="1705665600">- fix build for non-SUSE distributions</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1709467200">- update to 20240116.1:
  * Add absl::NoDestructor&lt;T&gt; to simplify defining static types
    that do not need to be destructed upon program exit.
  * Add configurable verbose logging (also known as VLOG).
  * Added absl::Overload(), which returns a functor that provides
    overloads based on the functors passed to it. Note that this
    functionality requires C++17 or newer.
  * Breaking Change: AbslHashValue() no longer accepts C-style
    arrays as a parameter, caller need to wrap C-string literals in
    absl::string_view.
  * Breaking Change: absl::weak_equality and absl::strong_equality
    have been removed. The corresponding std types were removed
    before C++20 was finalized</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1712836800">- SLE-only: import upstream patch to fix build with gcc7 in C++17
  mode: hash-fix-gcc7-cpp17-build.patch (bsc#1222261)
  + Upstream commit bb83aceacb554e79e7cd2404856f0be30bd00303</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1739966400">- Update to 20240116.3
  * Fix potential integer overflow in hash container create/resize (bsc#1236438)
    The sized constructors, reserve(), and rehash() methods of
    absl::{flat,node}_hash_{set,map} did not impose an upper bound on
    their size argument. As a result, it was possible for a caller to pass
    a very large size that would cause an integer overflow when computing
    the size of the container's backing store. Subsequent accesses to the
    container might then access out-of-bounds memory.
- from version 20240116.2
  * Prevent overflow in absl::CEscape(). Strings larger than 1 GiB on a
    platform with a 32-bit size_t could potentially overflow size_t in
    `CEscapedLength()`, resulting in an undersized allocation. The resulting
    write in `CEscapeAndAppendInternal()` would then write beyond the bounds
    of the output buffer.
  * A second overflow, where the calculated escaped length is added to the
    size of the string being appended to, is also fixed. In both cases the
    program will now abort prior to the overflow.
  * Workaround for NVIDIA C++ compiler being unable to parse variadic
    expansions in range of range-based for loop</changelog>
</package>
<package pkgid="5c753cabe7d5fb16f38fbd0737ad628149fd3d5a4ec2bf9ffd5989c0fcbdccd7" name="abseil-cpp-devel" arch="x86_64">
  <version epoch="0" ver="20240116.3" rel="150600.19.6.1"/>
  <changelog author="rpm@fthiessen.de" date="1619352000">- Update to LTS version 20210324.1
  * Fixed missing absl::Cleanup
  * Fixed pkgconfig install path
- Dropped upstream merged Correctly-install-pkgconfig.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210324.2 (LTS):
  * No user visible changes, only build system related</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 20211102.0:
  * absl::Cord is now implemented as a b-tree. The new implementation offers
    improved performance in most workloads.
  * absl::SimpleHexAtoi() has been added to strings library for parsing
    hexadecimal strings</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646395200">- Fix build on SLE-12-SP5</changelog>
  <changelog author="jengelh@inai.de" date="1649073600">- Implement shlib packaging policy</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1656504000">- Add options-old.patch, options-cxx17.patch (boo#1203378)
  * Ensure ABI stability regardless of compiler settings per instruction in the header.</changelog>
  <changelog author="fvogt@suse.com" date="1656504001">- Remove obsolete 0%{suse_version} &lt; 1500 conditions</changelog>
  <changelog author="elimat@opensuse.org" date="1656849600">- Update to version 20220623.0
  What's New:
  * Added absl::AnyInvocable, a move-only function type.
  * Added absl::CordBuffer, a type for buffering data for eventual inclusion an
    absl::Cord, which is useful for writing zero-copy code.
  * Added support for command-line flags of type absl::optional&lt;T&gt;.
  Breaking Changes:
  * CMake builds now use the flag ABSL_BUILD_TESTING (default: OFF) to control
    whether or not unit tests are built.
  * The ABSL_DEPRECATED macro now works with the GCC compiler. GCC users that
    are experiencing new warnings can use -Wno-deprecated-declatations silence
  the warnings or use -Wno-error=deprecated-declarations to see warnings but
  not fail the build.
  * ABSL_CONST_INIT uses the C++20 keyword constinit when available. Some
    compilers are more strict about where this keyword must appear compared to
  the pre-C++20 implementation.
  * Bazel builds now depend on the bazelbuild/bazel-skylib repository.
    See Abseil's WORKSPACE file for an example of how to add this dependency.
  Other:
  * This will be the last release to support C++11. Future releases will require at least C++14.
- run spec-cleaner</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1657540800">- Add Fix-maes-msse41-leaking-into-pkgconfig.patch
  * Do not make programs compiled with abseil require new-ish CPUs (boo#1203379)</changelog>
  <changelog author="dmueller@suse.com" date="1664020800">- update to 20220623.1:
  * minor warning fix</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to 20230125.2
  What's New:
    The Abseil logging library has been released. This library
    provides facilities for writing short text messages about the
    status of a program to stderr, disk files, or other sinks
    (via an extension API). See the logging library documentation
    for more information.
    An extension point, AbslStringify(), allows user-defined types
    to seamlessly work with Abseil's string formatting functions
    like absl::StrCat() and absl::StrFormat().
    A library for computing CRC32C checksums has been added.
    Floating-point parsing now uses the Eisel-Lemire algorithm,
    which provides a significant speed improvement.
    The flags library now provides suggestions for the closest
    flag(s) in the case of misspelled flags.
    Using CMake to install Abseil now makes the installed artifacts
    (in particular absl/base/options.h) reflect the compiled ABI.
  Breaking Changes:
    Abseil now requires at least C++14 and follows Google's Foundational
    C++ Support Policy. See this table for a list of currently supported
    versions compilers, platforms, and build tools.
    The legacy spellings of the thread annotation macros/functions
    (e.g. GUARDED_BY()) have been removed by default in favor of the
    ABSL_ prefixed versions (e.g. ABSL_GUARDED_BY()) due to clashes with
    other libraries. The compatibility macro ABSL_LEGACY_THREAD_ANNOTATIONS
    can be defined on the compile command-line to temporarily restore these
    spellings, but this compatibility macro will be removed in the future.
  Known Issues
    The Abseil logging library in this release is not a feature-complete
    replacement for glog yet. VLOG and DFATAL are examples of features
    that have not yet been released.
- obsolete Fix-maes-msse41-leaking-into-pkgconfig.patch</changelog>
  <changelog author="adrian@suse.de" date="1685016000">- update to 20230125.3
  Details can be found on:
    https://github.com/abseil/abseil-cpp/releases/tag/20230125.3</changelog>
  <changelog author="fvogt@suse.com" date="1688040000">- Add baselibs.conf to make protobuf happy. Hopefully temporary.</changelog>
  <changelog author="fstrba@suse.com" date="1691582400">- Fix build on older systems by requiring C++17 compliant compiler
- Added patch:
  * cmake.patch
    + lower the cmake requirement to 3.5 in order to be able to
    build on SLE12SP5</changelog>
  <changelog author="adrian@suse.de" date="1694088000">- update to 20230802.0
  What's New:
  * Added the nullability library for designating the expected
    nullability of pointers. Currently these serve as annotations
    only, but it is expected that compilers will one day be able
    to use these annotations for diagnostic purposes.
  * Added the prefetch library as a portable layer for moving data
    into caches before it is read.
  * Abseil's hash tables now detect many more programming errors
    in debug and sanitizer builds.
  * Abseil's synchronization objects now differentiate absolute
    waits (when passed an absl::Time) from relative waits (when
    passed an absl::Duration) when the underlying platform supports
    differentiating these cases. This only makes a difference when
    system clocks are adjusted.
  * Abseil's flag parsing library includes additional methods that
    make it easier to use when another library also expects to be
    able to parse flags.
  * absl::string_view is now available as a smaller target,
    @com_google_absl//absl/strings:string_view, so that users may
    use this library without depending on the much larger
    @com_google_absl//absl/strings target.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1696593600">- update to 20230802.1:
  * Add StdcppWaiter to the end of the list of waiter
    implementations</changelog>
  <changelog author="dmueller@suse.com" date="1705665600">- fix build for non-SUSE distributions</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1709467200">- update to 20240116.1:
  * Add absl::NoDestructor&lt;T&gt; to simplify defining static types
    that do not need to be destructed upon program exit.
  * Add configurable verbose logging (also known as VLOG).
  * Added absl::Overload(), which returns a functor that provides
    overloads based on the functors passed to it. Note that this
    functionality requires C++17 or newer.
  * Breaking Change: AbslHashValue() no longer accepts C-style
    arrays as a parameter, caller need to wrap C-string literals in
    absl::string_view.
  * Breaking Change: absl::weak_equality and absl::strong_equality
    have been removed. The corresponding std types were removed
    before C++20 was finalized</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1712836800">- SLE-only: import upstream patch to fix build with gcc7 in C++17
  mode: hash-fix-gcc7-cpp17-build.patch (bsc#1222261)
  + Upstream commit bb83aceacb554e79e7cd2404856f0be30bd00303</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1739966400">- Update to 20240116.3
  * Fix potential integer overflow in hash container create/resize (bsc#1236438)
    The sized constructors, reserve(), and rehash() methods of
    absl::{flat,node}_hash_{set,map} did not impose an upper bound on
    their size argument. As a result, it was possible for a caller to pass
    a very large size that would cause an integer overflow when computing
    the size of the container's backing store. Subsequent accesses to the
    container might then access out-of-bounds memory. (bsc#1237543, CVE-2025-0838)
- from version 20240116.2
  * Prevent overflow in absl::CEscape(). Strings larger than 1 GiB on a
    platform with a 32-bit size_t could potentially overflow size_t in
    `CEscapedLength()`, resulting in an undersized allocation. The resulting
    write in `CEscapeAndAppendInternal()` would then write beyond the bounds
    of the output buffer.
  * A second overflow, where the calculated escaped length is added to the
    size of the string being appended to, is also fixed. In both cases the
    program will now abort prior to the overflow.
  * Workaround for NVIDIA C++ compiler being unable to parse variadic
    expansions in range of range-based for loop</changelog>
</package>
<package pkgid="9c11d42d4b3391a40293a9c53b6a2434705220007efbfb62a3093dae7a58ce38" name="adaptec-firmware" arch="noarch">
  <version epoch="0" ver="1.35" rel="150000.3.3.1"/>
  <changelog author="hare@suse.de" date="1168257600">- Inital package (FATE 301600).</changelog>
  <changelog author="hare@suse.de" date="1170763200">- Added LICENSE</changelog>
  <changelog author="ro@suse.de" date="1170763201">- fix typo in specfile</changelog>
  <changelog author="ro@suse.de" date="1174219200">- remove /lib/firmware directory from filelist (in filesystem)</changelog>
  <changelog author="hare@suse.de" date="1196164800">- Update firmware to v32 (FATE 302809,#341872)</changelog>
  <changelog author="hare@suse.de" date="1204718400">- Update package version to reflect the firmware release
  (#362527)</changelog>
  <changelog author="hare@suse.de" date="1227528000">- Update firmware to v35 (bnc#445280)</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="coolo@suse.com" date="1323864000">- as spdx.org has no concept of firmware, we decided to mark it as
  SUSE-Firmware</changelog>
  <changelog author="pgajdos@suse.com" date="1762344000">- use %license tag [bsc#1252133]</changelog>
</package>
<package pkgid="1509c1b011af76460fe867a2f2ead11c87991a95fcdd54a0927b74fb4a1a512f" name="adaptec-firmware" arch="src">
  <version epoch="0" ver="1.35" rel="150000.3.3.1"/>
  <changelog author="hare@suse.de" date="1168257600">- Inital package (FATE 301600).</changelog>
  <changelog author="hare@suse.de" date="1170763200">- Added LICENSE</changelog>
  <changelog author="ro@suse.de" date="1170763201">- fix typo in specfile</changelog>
  <changelog author="ro@suse.de" date="1174219200">- remove /lib/firmware directory from filelist (in filesystem)</changelog>
  <changelog author="hare@suse.de" date="1196164800">- Update firmware to v32 (FATE 302809,#341872)</changelog>
  <changelog author="hare@suse.de" date="1204718400">- Update package version to reflect the firmware release
  (#362527)</changelog>
  <changelog author="hare@suse.de" date="1227528000">- Update firmware to v35 (bnc#445280)</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="coolo@suse.com" date="1323864000">- as spdx.org has no concept of firmware, we decided to mark it as
  SUSE-Firmware</changelog>
  <changelog author="pgajdos@suse.com" date="1762344000">- use %license tag [bsc#1252133]</changelog>
</package>
<package pkgid="e68450a5f03d4e2c77fbe0e1047d56341100235fb84dc58e8174ff4a339cd453" name="adcli" arch="src">
  <version epoch="0" ver="0.8.2" rel="150400.17.11.1"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="scabrero@suse.de" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1582200000">- Use GSS-SPNEGO if available (bsc#1162518)
  * 0026-Use-GSS-SPNEGO-if-available.patch
- Add option to use ldaps (bsc#1162518)
  * 0027-add-option-use-ldaps.patch</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets database after changing the machine password
  (jsc#sle-11503)
  * 0028-tools-add-option-add-samba-data.patch
  * 0029-tools-store-Samba-data-if-requested.patch
  * 0030-make-Samba-data-tool-configurable.patch
  * 0031-fix-typo-in-flag-value.patch
  * 0032-samba-data-tool-needs-to-take-an-argument.patch
  * 0033-doc-add-missing-samba_data_tool_path.xml-.in-to-EXTR.patch
- Support testjoin command (jsc#sle-11503)
  * 0034-Implement-adcli-testjoin.patch</changelog>
  <changelog author="scabrero@suse.de" date="1617969600">- Respect allowed Kerberos encryption types; (bsc#1184462);
  Add 0035-handle-encryption-types.patch</changelog>
  <changelog author="scabrero@suse.de" date="1635163200">- Add --dont-expire-password option; (jsc#sle-21225);
  * 0036-Add-dont-expire-password-option.patch
  * 0037-Fix-for-dont-expire-password-option-and-join.patch</changelog>
  <changelog author="scabrero@suse.de" date="1661947200">- Remove errx() calls on error conditions to execute the cleanup
  function and delete the krb5 snippets created in /tmp;
  (bsc#1202647);
  * Add 0038-Remove-errx-from-tools.patch
- Set umask before calling mkdtemp; (bsc#1202647);
  * Add 0039-Set-umask-before-calling-mkdtemp.patch</changelog>
  <changelog author="scabrero@suse.de" date="1691582400">- Write SID before secret to Samba's db; (bsc#1214076);
  Add 0040-adenroll-write-SID-before-secret-to-Samba-s-db.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702987200">- Populate Samba's secrets database using offline domain join;
  (bsc#1214076); Add
  0041-populate-samba-secrets-using-offline-domain-join.patch</changelog>
  <changelog author="scabrero@suse.de" date="1771848000">- Improve DC locator strategy, do not query more servers than
  necessary; (bsc#1257717); Add patch
  0042-Make-adcli-info-DC-location-mechanism-more-compliant.patch</changelog>
</package>
<package pkgid="b2f7ac45006d3fc593804d54744a56de9f79973e0657a48813efedddb9aa1e4b" name="adcli" arch="x86_64">
  <version epoch="0" ver="0.8.2" rel="150400.17.11.1"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="scabrero@suse.de" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1582200000">- Use GSS-SPNEGO if available (bsc#1162518)
  * 0026-Use-GSS-SPNEGO-if-available.patch
- Add option to use ldaps (bsc#1162518)
  * 0027-add-option-use-ldaps.patch</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets database after changing the machine password
  (jsc#sle-11503)
  * 0028-tools-add-option-add-samba-data.patch
  * 0029-tools-store-Samba-data-if-requested.patch
  * 0030-make-Samba-data-tool-configurable.patch
  * 0031-fix-typo-in-flag-value.patch
  * 0032-samba-data-tool-needs-to-take-an-argument.patch
  * 0033-doc-add-missing-samba_data_tool_path.xml-.in-to-EXTR.patch
- Support testjoin command (jsc#sle-11503)
  * 0034-Implement-adcli-testjoin.patch</changelog>
  <changelog author="scabrero@suse.de" date="1617969600">- Respect allowed Kerberos encryption types; (bsc#1184462);
  Add 0035-handle-encryption-types.patch</changelog>
  <changelog author="scabrero@suse.de" date="1635163200">- Add --dont-expire-password option; (jsc#sle-21225);
  * 0036-Add-dont-expire-password-option.patch
  * 0037-Fix-for-dont-expire-password-option-and-join.patch</changelog>
  <changelog author="scabrero@suse.de" date="1661947200">- Remove errx() calls on error conditions to execute the cleanup
  function and delete the krb5 snippets created in /tmp;
  (bsc#1202647);
  * Add 0038-Remove-errx-from-tools.patch
- Set umask before calling mkdtemp; (bsc#1202647);
  * Add 0039-Set-umask-before-calling-mkdtemp.patch</changelog>
  <changelog author="scabrero@suse.de" date="1691582400">- Write SID before secret to Samba's db; (bsc#1214076);
  Add 0040-adenroll-write-SID-before-secret-to-Samba-s-db.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702987200">- Populate Samba's secrets database using offline domain join;
  (bsc#1214076); Add
  0041-populate-samba-secrets-using-offline-domain-join.patch</changelog>
  <changelog author="scabrero@suse.de" date="1771848000">- Improve DC locator strategy, do not query more servers than
  necessary; (bsc#1257717); Add patch
  0042-Make-adcli-info-DC-location-mechanism-more-compliant.patch</changelog>
</package>
<package pkgid="5a66f2b889852238f56daab13ccd1ee517bd6ee40b35a3a8bab61caf95d262c4" name="adcli" arch="src">
  <version epoch="0" ver="0.8.2" rel="150600.22.5.1"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="scabrero@suse.de" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1582200000">- Use GSS-SPNEGO if available (bsc#1162518)
  * 0026-Use-GSS-SPNEGO-if-available.patch
- Add option to use ldaps (bsc#1162518)
  * 0027-add-option-use-ldaps.patch</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets database after changing the machine password
  (jsc#sle-11503)
  * 0028-tools-add-option-add-samba-data.patch
  * 0029-tools-store-Samba-data-if-requested.patch
  * 0030-make-Samba-data-tool-configurable.patch
  * 0031-fix-typo-in-flag-value.patch
  * 0032-samba-data-tool-needs-to-take-an-argument.patch
  * 0033-doc-add-missing-samba_data_tool_path.xml-.in-to-EXTR.patch
- Support testjoin command (jsc#sle-11503)
  * 0034-Implement-adcli-testjoin.patch</changelog>
  <changelog author="scabrero@suse.de" date="1617969600">- Respect allowed Kerberos encryption types; (bsc#1184462);
  Add 0035-handle-encryption-types.patch</changelog>
  <changelog author="scabrero@suse.de" date="1635163200">- Add --dont-expire-password option; (jsc#sle-21225);
  * 0036-Add-dont-expire-password-option.patch
  * 0037-Fix-for-dont-expire-password-option-and-join.patch</changelog>
  <changelog author="scabrero@suse.de" date="1661947200">- Remove errx() calls on error conditions to execute the cleanup
  function and delete the krb5 snippets created in /tmp;
  (bsc#1202647);
  * Add 0038-Remove-errx-from-tools.patch
- Set umask before calling mkdtemp; (bsc#1202647);
  * Add 0039-Set-umask-before-calling-mkdtemp.patch</changelog>
  <changelog author="scabrero@suse.de" date="1691582400">- Write SID before secret to Samba's db; (bsc#1214076);
  Add 0040-adenroll-write-SID-before-secret-to-Samba-s-db.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702987200">- Populate Samba's secrets database using offline domain join;
  (bsc#1214076); Add
  0041-populate-samba-secrets-using-offline-domain-join.patch</changelog>
  <changelog author="scabrero@suse.de" date="1771848000">- Improve DC locator strategy, do not query more servers than
  necessary; (bsc#1257717); Add patch
  0042-Make-adcli-info-DC-location-mechanism-more-compliant.patch</changelog>
  <changelog author="scabrero@suse.de" date="1773144000">- Build with openldap 2.5 to support TLS channel binding;
  (bsc#1259148);</changelog>
  <changelog author="scabrero@suse.de" date="1774353600">- Add missing use-ldaps option; (bsc#1259996); Add patch
  0043-tools-add-missing-use-ldaps-option-to-update-and-tes.patch</changelog>
</package>
<package pkgid="87b163953fa7ca8f525f7bebf4b5651efb78e4fdefd4cf50df5f53039620f586" name="adcli" arch="x86_64">
  <version epoch="0" ver="0.8.2" rel="150600.22.5.1"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="scabrero@suse.de" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1582200000">- Use GSS-SPNEGO if available (bsc#1162518)
  * 0026-Use-GSS-SPNEGO-if-available.patch
- Add option to use ldaps (bsc#1162518)
  * 0027-add-option-use-ldaps.patch</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets database after changing the machine password
  (jsc#sle-11503)
  * 0028-tools-add-option-add-samba-data.patch
  * 0029-tools-store-Samba-data-if-requested.patch
  * 0030-make-Samba-data-tool-configurable.patch
  * 0031-fix-typo-in-flag-value.patch
  * 0032-samba-data-tool-needs-to-take-an-argument.patch
  * 0033-doc-add-missing-samba_data_tool_path.xml-.in-to-EXTR.patch
- Support testjoin command (jsc#sle-11503)
  * 0034-Implement-adcli-testjoin.patch</changelog>
  <changelog author="scabrero@suse.de" date="1617969600">- Respect allowed Kerberos encryption types; (bsc#1184462);
  Add 0035-handle-encryption-types.patch</changelog>
  <changelog author="scabrero@suse.de" date="1635163200">- Add --dont-expire-password option; (jsc#sle-21225);
  * 0036-Add-dont-expire-password-option.patch
  * 0037-Fix-for-dont-expire-password-option-and-join.patch</changelog>
  <changelog author="scabrero@suse.de" date="1661947200">- Remove errx() calls on error conditions to execute the cleanup
  function and delete the krb5 snippets created in /tmp;
  (bsc#1202647);
  * Add 0038-Remove-errx-from-tools.patch
- Set umask before calling mkdtemp; (bsc#1202647);
  * Add 0039-Set-umask-before-calling-mkdtemp.patch</changelog>
  <changelog author="scabrero@suse.de" date="1691582400">- Write SID before secret to Samba's db; (bsc#1214076);
  Add 0040-adenroll-write-SID-before-secret-to-Samba-s-db.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702987200">- Populate Samba's secrets database using offline domain join;
  (bsc#1214076); Add
  0041-populate-samba-secrets-using-offline-domain-join.patch</changelog>
  <changelog author="scabrero@suse.de" date="1771848000">- Improve DC locator strategy, do not query more servers than
  necessary; (bsc#1257717); Add patch
  0042-Make-adcli-info-DC-location-mechanism-more-compliant.patch</changelog>
  <changelog author="scabrero@suse.de" date="1773144000">- Build with openldap 2.5 to support TLS channel binding;
  (bsc#1259148);</changelog>
  <changelog author="scabrero@suse.de" date="1774353600">- Add missing use-ldaps option; (bsc#1259996); Add patch
  0043-tools-add-missing-use-ldaps-option-to-update-and-tes.patch</changelog>
</package>
<package pkgid="8d72b3074d802dd83b5929c305d5221bc4f267677f17da2c1ef57039e12acdbb" name="adcli-doc" arch="x86_64">
  <version epoch="0" ver="0.8.2" rel="150400.17.11.1"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="scabrero@suse.de" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1582200000">- Use GSS-SPNEGO if available (bsc#1162518)
  * 0026-Use-GSS-SPNEGO-if-available.patch
- Add option to use ldaps (bsc#1162518)
  * 0027-add-option-use-ldaps.patch</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets database after changing the machine password
  (jsc#sle-11503)
  * 0028-tools-add-option-add-samba-data.patch
  * 0029-tools-store-Samba-data-if-requested.patch
  * 0030-make-Samba-data-tool-configurable.patch
  * 0031-fix-typo-in-flag-value.patch
  * 0032-samba-data-tool-needs-to-take-an-argument.patch
  * 0033-doc-add-missing-samba_data_tool_path.xml-.in-to-EXTR.patch
- Support testjoin command (jsc#sle-11503)
  * 0034-Implement-adcli-testjoin.patch</changelog>
  <changelog author="scabrero@suse.de" date="1617969600">- Respect allowed Kerberos encryption types; (bsc#1184462);
  Add 0035-handle-encryption-types.patch</changelog>
  <changelog author="scabrero@suse.de" date="1635163200">- Add --dont-expire-password option; (jsc#sle-21225);
  * 0036-Add-dont-expire-password-option.patch
  * 0037-Fix-for-dont-expire-password-option-and-join.patch</changelog>
  <changelog author="scabrero@suse.de" date="1661947200">- Remove errx() calls on error conditions to execute the cleanup
  function and delete the krb5 snippets created in /tmp;
  (bsc#1202647);
  * Add 0038-Remove-errx-from-tools.patch
- Set umask before calling mkdtemp; (bsc#1202647);
  * Add 0039-Set-umask-before-calling-mkdtemp.patch</changelog>
  <changelog author="scabrero@suse.de" date="1691582400">- Write SID before secret to Samba's db; (bsc#1214076);
  Add 0040-adenroll-write-SID-before-secret-to-Samba-s-db.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702987200">- Populate Samba's secrets database using offline domain join;
  (bsc#1214076); Add
  0041-populate-samba-secrets-using-offline-domain-join.patch</changelog>
  <changelog author="scabrero@suse.de" date="1771848000">- Improve DC locator strategy, do not query more servers than
  necessary; (bsc#1257717); Add patch
  0042-Make-adcli-info-DC-location-mechanism-more-compliant.patch</changelog>
</package>
<package pkgid="bb987b41be9182784b36c1a2e86dda451c041bf01028430a4dbdad2f7932b956" name="adcli-doc" arch="x86_64">
  <version epoch="0" ver="0.8.2" rel="150600.22.5.1"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="scabrero@suse.de" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1582200000">- Use GSS-SPNEGO if available (bsc#1162518)
  * 0026-Use-GSS-SPNEGO-if-available.patch
- Add option to use ldaps (bsc#1162518)
  * 0027-add-option-use-ldaps.patch</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets database after changing the machine password
  (jsc#sle-11503)
  * 0028-tools-add-option-add-samba-data.patch
  * 0029-tools-store-Samba-data-if-requested.patch
  * 0030-make-Samba-data-tool-configurable.patch
  * 0031-fix-typo-in-flag-value.patch
  * 0032-samba-data-tool-needs-to-take-an-argument.patch
  * 0033-doc-add-missing-samba_data_tool_path.xml-.in-to-EXTR.patch
- Support testjoin command (jsc#sle-11503)
  * 0034-Implement-adcli-testjoin.patch</changelog>
  <changelog author="scabrero@suse.de" date="1617969600">- Respect allowed Kerberos encryption types; (bsc#1184462);
  Add 0035-handle-encryption-types.patch</changelog>
  <changelog author="scabrero@suse.de" date="1635163200">- Add --dont-expire-password option; (jsc#sle-21225);
  * 0036-Add-dont-expire-password-option.patch
  * 0037-Fix-for-dont-expire-password-option-and-join.patch</changelog>
  <changelog author="scabrero@suse.de" date="1661947200">- Remove errx() calls on error conditions to execute the cleanup
  function and delete the krb5 snippets created in /tmp;
  (bsc#1202647);
  * Add 0038-Remove-errx-from-tools.patch
- Set umask before calling mkdtemp; (bsc#1202647);
  * Add 0039-Set-umask-before-calling-mkdtemp.patch</changelog>
  <changelog author="scabrero@suse.de" date="1691582400">- Write SID before secret to Samba's db; (bsc#1214076);
  Add 0040-adenroll-write-SID-before-secret-to-Samba-s-db.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702987200">- Populate Samba's secrets database using offline domain join;
  (bsc#1214076); Add
  0041-populate-samba-secrets-using-offline-domain-join.patch</changelog>
  <changelog author="scabrero@suse.de" date="1771848000">- Improve DC locator strategy, do not query more servers than
  necessary; (bsc#1257717); Add patch
  0042-Make-adcli-info-DC-location-mechanism-more-compliant.patch</changelog>
  <changelog author="scabrero@suse.de" date="1773144000">- Build with openldap 2.5 to support TLS channel binding;
  (bsc#1259148);</changelog>
  <changelog author="scabrero@suse.de" date="1774353600">- Add missing use-ldaps option; (bsc#1259996); Add patch
  0043-tools-add-missing-use-ldaps-option-to-update-and-tes.patch</changelog>
</package>
<package pkgid="5e13ab07c03d95e78b8a6ce7143138eae6587be0bfe319987a7f7ccbe673c945" name="alloy" arch="src">
  <version epoch="0" ver="1.11.3" rel="150700.15.9.1"/>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1740657600">- update to 1.7.1:
  * Bugfixes
  - Fixed an issue where some exporters such as
    prometheus.exporter.snmp couldn't accept targets from other
    components with an error conversion to '*map[string]string'
    is not supported". (@thampiotr)
  - Enable batching of calls to the appender in
    prometheus.write.queue to reduce lock contention when
    scraping, which will lead to reduced scrape duration.
    (@mattdurham)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1741608000">- update to 1.7.2:
  * Notable changes:
  - Fixed an issue where the otelcol.exporter.awss3 could not be
    started with the sumo_ic marshaler. (@wildum)
  - Update jfr-parser dependency to v0.9.3 to fix jfr parsing
    issues in pyroscope.java. (@korniltsev)
  - Fixed an issue where passing targets from some standard
    library functions was failing with target::ConvertFrom error.
    (@thampiotr)
  - Fixed an issue where indexing targets as maps (e.g.
    target["foo"]) or objects (e.g. target.foo) or using them
    with certain standard library functions was resulting in
    expected object or array, got capsule error under some
    circumstances. This could also lead to foreach evaluation
    failed errors when using the foreach configuration block.
    (@thampiotr)
  - Update prometheus.write.queue to reduce memory fragmentation
    and increase sent throughput. (@mattdurham)
  - Fixed an issue where the otelcol.exporter.kafka component
    would not start if the encoding was specific to a signal
    type. (@wildum)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1741867200">- update to 1.7.3:
  * Notable changes:
  - Fixed the parsing of selections, application and network
    filter blocks for Beyla
  - Add the stat_checkpointer collector in
    prometheus.exporter.postgres (@dehaansa)
  - Update the prometheus.exporter.postgres component to
    correctly support Postgres17 when stat_bgwriter collector is
    enabled (@dehaansa)
  - Fix remoteCfg logging and metrics reporting of errNotModified
    as a failure (@zackman0010)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1741953600">- update to 1.7.4:
  * Notable changes:
  - Revert the changes to loki.source.file from release v1.7.0.
    These changes introduced a potential deadlock. (@dehaansa)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1742558400">- update to 1.7.5:
  * Notable changes:
  - Set zstd as default compression for prometheus.write.queue.
    (@mattdurham)
    Though technically an enhancement this was causing trouble in
    disk io constrained environments. Zstd provides almost double
    the compression with little additional cpu overhead.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1744200000">- update to 1.8.0:
  * Breaking changes
  - Removed open_port and executable_name from top level
    configuration of Beyla component. Removed enabled argument
    from network block. (@marctc)
  - Breaking changes from the OpenTelemetry Collector v0.122
    update: (@wildum)
  - otelcol.exporter.splunkhec: min_size_items and
    max_size_items were replaced by min_size, max_size and
    sizer in the batcher block to allow users to configure the
    size of the batch in a more flexible way.
  - The telemetry level of Otel components is no longer
    configurable. The level argument in the debug_metrics block
    is kept to avoid breaking changes but it is not used
    anymore.
  - otelcol.processor.tailsampling changed the unit of the
    decision timer metric from microseconds to milliseconds.
    (change unit of
    otelcol_processor_tail_sampling_sampling_decision_timer_latency)
  - otelcol.processor.deltatocumulative: rename
    otelcol_deltatocumulative_datapoints_processed to
    otelcol_deltatocumulative_datapoints and remove the metrics
    otelcol_deltatocumulative_streams_evicted,
    otelcol_deltatocumulative_datapoints_dropped and
    otelcol_deltatocumulative_gaps_length.
  - The regex attribute was removed from
    otelcol.processor.k8sattributes. The extract-patterns
    function from otelcol.processor.transform can be used
    instead.
  - The default value of metrics_flush_interval in
    otelcol.connector.servicegraph was changed from 0s to 60s.
  - s3_partition in otelcol.exporter.awss3 was replaced by
    s3_partition_format.
  - (Experimental) prometheus.write.queue metric names changed to
    align better with prometheus standards. (@mattdurham)
  * Features
  - Add otelcol.receiver.awscloudwatch component to receive logs
    from AWS CloudWatch and forward them to other otelcol.*
    components. (@wildum)
  - Add loki.enrich component to enrich logs using labels from
    discovery.* components. (@v-zhuravlev)
  - Add string concatenation for secrets type (@ravishankar15)
  - Add support for environment variables to OpenTelemetry
    Collector config. (@jharvey10)
  - Replace graph in Alloy UI with a new version that supports
    modules and data flow visualization. (@wildum)
  - Added --cluster.wait-for-size and --cluster.wait-timeout
    flags which allow to specify the minimum cluster size
    required before components that use clustering begin
    processing traffic to ensure adequate cluster capacity is
    available. (@thampiotr)
  - Add trace_printer to beyla.ebpf component to print trace
    information in a specific format. (@marctc)
  - Add support for live debugging and graph in the UI for
    components imported via remotecfg. (@wildum)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1744372800">- update to 1.8.1:
  * Bugfixes
  - rfc3164_default_to_current_year argument was not fully added to
    loki.source.syslog (@dehaansa)
  - Fix issue with remoteCfg service stopping immediately and
    logging noop error if not configured (@dehaansa)
  - Fix potential race condition in remoteCfg service metrics
    registration (@kalleep)
  - Fix panic in prometheus.exporter.postgres when using minimal url
    as data source name. (@kalleep)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1744718400">- update to 1.8.1^20250410d23d30f49 (jsc#PED-12282):
  * Update github.com/hashicorp/vault/api to 1.16.0</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1745496000">- update to 1.8.2:
  Bugfixes
  * Fix otelcol.exporter.prometheus dropping valid
    exemplars. (@github-vincent-miszczak)
  * Fix loki.source.podlogs not adding labels
    __meta_kubernetes_namespace and
    __meta_kubernetes_pod_label_*. (@kalleep)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1746446400">- update to 1.8.3:
  Bugfixes
  * Fix mimir.rules.kubernetes panic on non-leader debug info
    retrieval (@TheoBrigitte)
  * Fix detection of the “streams limit exceeded” error in the Loki
    client so that metrics are correctly labeled as
    ReasonStreamLimited. (@maratkhv)
  * Fix loki.source.file race condition that often lead to panic when
    using decompression. (@kalleep)
  * Fix deadlock in loki.source.file that can happen when targets are
    removed. (@kalleep)
  * Fix loki.process to emit valid logfmt. (@kalleep)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1748865600">- update to 1.9.0:
  Breaking changes
  * The prometheus.exporter.windows component has been update to
    version v0.30.6. This update includes a significant rework of
    the exporter and includes some breaking changes. (@dehaansa)
    The msmq and service collectors can no longer be configured
    with a WMI where clause. Any filtering previously done in a
    where clause will need to be done in a prometheus.relabel
    component.
    The service collector no longer provides enable_v2_collector
    and use_api configuration options.
    The mscluster_* and netframework_* collectors are now replaced
    with one mscluster and netframework collector that allows you
    to enable the separate metric groupings individually.
    The teradici_pcoip and vmware_blast collectors have been
    removed from the exporter.
  * The prometheus.exporter.oracledb component now embeds the
    oracledb_exporter from oracle instead of the deprecated
    oracledb_exporter from iamseth for collecting metrics from an
    OracleDB server: (@wildum)
    The arguments username, password, default_metrics, and
    custom_metrics are now supported.
    The previously undocumented argument custom_metrics is now
    expecting a list of paths to custom metrics files.
    The following metrics are no longer available by default:
    oracledb_sessions_activity, oracledb_tablespace_free_bytes
    (Experimental) The enable_context_propagation argument in
    beyla.ebpf has been replaced with the context_propagation
    argument.
  * Set enable_context_propagation to all to get the same behaviour
    as enable_context_propagation being set to true.
  Security
  * CVE-2025-22872: Fix tokenizer incorrectly interpretting tags
    (bsc#1241863).
  * CVE-2025-46327: Fix race condition when checking access
    permissions to the Easy Logging configuration file
    (bsc#1242020).
  Features
  * Bump snmp_exporter and embedded modules in
    prometheus.exporter.snmp to v0.29.0, add cisco_device module
    support (@v-zhuravlev)
  * Add the otelcol.storage.file extension to support persistent
    sending queues and otelcol.receiver.filelog file state tracking
    between restarts. (@dehaansa)
  * Add otelcol.exporter.googlecloud community component to export
    metrics, traces, and logs to Google Cloud. (@motoki317)
  * Add support to configure basic authentication for alloy http
    server. (@kalleep)
  * Add validate command to alloy that will perform limited
    validation of alloy configuration files. (@kalleep)
  * Add support to validate foreach block when using validate
    command. (@kalleep)
  * Add otelcol.receiver.splunkhec component to receive events in
    splunk hec format and forward them to other otelcol.*
    components. (@kalleep)
  * Add support for Mimir federated rule groups in
    mimir.rules.kubernetes (@QuentinBisson)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1749124800">- update to 1.9.1:
  Bugfixes
  * Update the prometheus.exporter.windows component to version
    v0.30.7. This fixes an error with the exchange collector and
    terminal_services collector (@dehaansa)
  * Fix loki.source.firehose to propagate specific cloudwatch event
    timestamps when useIncomingTs is set to true. (@michaelPotter)
  * Fix elevated CPU usage when using some otelcol components due to
    debug logging. (@thampiotr)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1751284800">- update to 1.9.2:
  * Bugfixes
  - Send profiles concurrently from pyroscope.ebpf. (@korniltsev)
  - Fix the validate command not understanding the livedebugging
    block. (@dehaansa)
  - Fix invalid class names in python profiles obtained with
    pyroscope.ebpf. (@korniltsev)
  - Fixed a bug which prevented non-secret optional secrets to be
    passed in as number arguments. (@ptodev)
  - For CRD-based components (prometheus.operator.*), retry
    initializing informers if the apiserver request fails. This
    rectifies issues where the apiserver is not reachable
    immediately after node restart. (@dehaansa)
  * Other changes
  - Add no-op blocks and attributes to the
    prometheus.exporter.windows component (@ptodev).
    Version 1.9.0 of Alloy removed the msmq block, as well as the
    enable_v2_collector, where_clause, and use_api attributes in
    the service block.
    This made it difficult for users to upgrade, so those
    attributes have now been made a no-op instead of being
    removed.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1751889600">- Install default configuration file</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1752753600">- update to 1.10.0:
  Breaking changes
  * Removing the nanoserver-1809 container image for Windows 2019.
    (@ptodev)
  * This is due to the deprecation of windows-2019 GitHub Actions
    runners.
  * The windowsservercore-ltsc2022 Alloy image is still being
    published to DockerHub.
  Bugfixes
  * Upgrade otelcol components from OpenTelemetry v0.126.0 to
    v0.128.0 (@korniltsev, @dehaansa)
    [otelcol.exporter.kafka]: Allow kafka exporter to produce to
    topics based on metadata key values.
    [otelcol.receiver.kafka]: Enforce a backoff mechanism on
    non-permanent errors, such as when the queue is full.
    [otelcol.receiver.kafka]: Don't restart the Kafka consumer on
    failed errors when message marking is enabled for them.
    [otelcol.connector.spanmetrics]: Fix bug causing span metrics
    calls count to be always 0 when using delta temporality.
  Features
  * (Experimental) Add an array.group_by stdlib function to group
    items in an array by a key. (@wildum)
  * Add the otelcol.exporter.faro exporter to export traces and
    logs to Faro endpoint. (@mar4uk)
  * Add the otelcol.receiver.faro receiver to receive traces and
    logs from the Grafana Faro Web SDK. (@mar4uk)
  * Add entropy support for loki.secretfilter (@romain-gaillard)
  Enhancements
  * Add hash_string_id argument to foreach block to hash the string
    representation of the pipeline id instead of using the string
    itself. (@wildum)
  * (Experimental) Additions to experimental
    database_observability.mysql component:
    Add explain_plan collector to database_observability.mysql
    component. (@rgeyer) locks: addition of data locks collector
    (@gaantunes @fridgepoet) Query sample collector is now enabled
    by default (@matthewnolf)
  * (Experimental) prometheus.write.queue add support for
    exemplars. (@dehaansa)
  * Wire in survey block for beyla.ebpf component. (@grcevski,
    @tpaschalis)
  * Upgrade otelcol components from OpenTelemetry v0.126.0 to
    v0.128.0 (@korniltsev, @dehaansa)
    [otelcol.processor.resourcedetection]: Add additional OS
    properties to resource detection: os.build.id and os.name.
    [otelcol.processor.resourcedetection]: Add host.interface
    resource attribute to system detector.
    [otelcol.exporter.kafka]: Fix Snappy compression codec support
    for the Kafka exporter.  [otelcol.receiver.filelog]: Introduce
    utf8-raw encoding to avoid replacing invalid bytes with \uFFFD
    when reading UTF-8 input.  [otelcol.processor.k8sattributes]:
    Support extracting labels and annotations from k8s
    Deployments.  [otelcol.processor.k8sattributes]: Add option to
    configure automatic service resource attributes.
    [otelcol.exporter.datadog]: Adds hostname_detection_timeout
    configuration option for Datadog Exporter and sets default to
    25 seconds.  [otelcol.receiver.datadog]: Address semantic
    conventions noncompliance and add support for http/db.
    [otelcol.exporter.awss3]: Add the retry mode, max attempts and
    max backoff to the settings.
  * Add support for conditions and statement-specific error_mode in
    otelcol.processor.transform. (@ptodev)
  * Add storage and start_from args to cloudwatch logs receiver.
    (@boernd)
  Bugfixes
  * Fix extension registration for otelcol.receiver.splunkhec auth
    extensions. (@dehaansa)
  Other changes
  * Mark pyroscope.receive_http and pyroscope.relabel components as
    GA. (@marcsanmi)
  * Upgrade otelcol.exporter.windows to v0.30.8 to get bugfixes and
    fix update collector support. (@dehaansa)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1754568000">- update to 1.10.1:
  Full list of changes:
  https://github.com/grafana/alloy/blob/v1.10.1/CHANGELOG.md#v1101
  * Bugfixes
  - Fix issue with faro.receiver cors not allowing X-Scope-OrgID
    and traceparent headers. (@mar4uk)
  - Fix issues with propagating cluster peers change
    notifications to components configured with remotecfg.
    (@dehaansa)
  - Fix issues with statistics reporter not including components
    only configured with remotecfg. (@dehaansa)
  - Fix issues with prometheus.exporter.windows not propagating
    dns collector config. (@dehaansa)
  - Fixed a bug in prometheus.write.queue which caused retries
    even when max_retry_attempts was set to 0. (@ptodev)
  - Fixed a bug in prometheus.write.queue which caused labelling
    issues when providing more than one label in external_labels.
    (@dehaansa)
  - Add application_host and network_inter_zone features to
    beyla.ebpf component. (@marctc)
  - Fix issues in loki.process where stage.multiline did not pass
    through structured metadata. (@jan-mrm)
  - Fix URLs in the Windows installer being wrapped in quotes.
    (@martincostello)
  - Fixed an issue where certain otelcol.* components could
    prevent Alloy from shutting down when provided invalid
    configuration. (@thampiotr)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1755691200">- update to 1.10.2:
  Full list of changes:
  https://github.com/grafana/alloy/blob/v1.10.2/CHANGELOG.md#v1102
  * Bugfixes
  - Fix issue in prometheus.write.queue causing inability to
    increase shard count if existing WAL data was present on
    start. (@kgeckhart)
  - Fix issue with loki.source.gcplog when push messages sent by gcp
    pub/sub only includes messageId. (@kalleep)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1759492800">- update to 1.11.0:
  Full list of changes:
  https://github.com/grafana/alloy/blob/v1.11.0/CHANGELOG.md#v1110
  * Breaking changes
  - Prometheus dependency had a major version upgrade from
    v2.55.1 to v3.4.2. (@thampiotr)
  - The . pattern in regular expressions in PromQL matches
    newline characters now. With this change a regular
    expressions like .* matches strings that include \n. This
    applies to matchers in queries and relabel configs in
    Prometheus and Loki components.
  - The enable_http2 in prometheus.remote_write component's
    endpoints has been changed to false by default.
    Previously, in Prometheus v2 the remote write http client
    would default to use http2. In order to parallelize
    multiple remote write queues across multiple sockets its
    preferable to not default to http2. If you prefer to use
    http2 for remote write you must now set enable_http2 to
    true in your prometheus.remote_write endpoints
    configuration section.
  - The experimental CLI flag
  - -feature.prometheus.metric-validation-scheme has been
    deprecated and has no effect. You can configure the metric
    validation scheme individually for each prometheus.scrape
    component.
  - Log message format has changed for some of the prometheus.*
    components as part of the upgrade to Prometheus v3.
  - The values of the le label of classic histograms and the
    quantile label of summaries are now normalized upon
    ingestion. In previous Alloy versions, that used Prometheus
    v2, the value of these labels depended on the scrape
    protocol (protobuf vs text format) in some situations. This
    led to label values changing based on the scrape protocol.
    E.g. a metric exposed as my_classic_hist{le="1"} would be
    ingested as my_classic_hist{le="1"} via the text format,
    but as my_classic_hist{le="1.0"} via protobuf. This changed
    the identity of the metric and caused problems when
    querying the metric. In current Alloy release, which uses
    Prometheus v3, these label values will always be normalized
    to a float like representation. I.e. the above example will
    always result in my_classic_hist{le="1.0"} being ingested
    into Prometheus, no matter via which protocol. The effect
    of this change is that alerts, recording rules and
    dashboards that directly reference label values as whole
    numbers such as le="1" will stop working.  The recommended
    way to deal with this change is to fix references to
    integer le and quantile label values, but otherwise do
    nothing and accept that some queries that span the
    transition time will produce inaccurate or unexpected
    results.
    See the upstream Prometheus v3 migration guide for more details.
  - prometheus.exporter.windows dependency has been updated to
    v0.31.1. (@dehaansa)
  - There are various renamed metrics and two removed
    collectors (cs, logon).
  - scrape_native_histograms attribute for prometheus.scrape is
    now set to false, whereas in previous versions of Alloy it
    would default to true. This means that it is no longer enough
    to just configure scrape_protocols to start with
    PrometheusProto to scrape native histograms -
    scrape_native_histograms has to be enabled. If
    scrape_native_histograms is enabled, scrape_protocols will
    automatically be configured correctly for you to include
    PrometheusProto. If you configure it explicitly, Alloy will
    validate that PrometheusProto is in the scrape_protocols
    list.
  - Add otel_attrs_to_hec_metadata configuration block to
    otelcol.exporter.splunkhec to match
    otelcol.receiver.splunkhec. (@cgetzen)
  - [otelcol.processor.batch] Two arguments have different
    default values. (@ptodev)
  - send_batch_size is now set to 2000 by default. It used to
    be 8192.
  - send_batch_max_size is now set to 3000 by default. It used
    to be 0.
  - This helps prevent issues with ingestion of batches that
    are too large.
  - OpenTelemetry Collector dependencies upgraded from v0.128.0
    to v0.134.0. (@ptodev)
  - The otelcol.receiver.opencensus component has been
    deprecated and will be removed in a future release, use
    otelcol.receiver.otelp instead.
  - [otelcol.exporter.*] The deprecated blocking argument in
    the sending_queue block has been removed.  Use
    block_on_overflow instead.
  - [otelcol.receiver.kafka, otelcol.exporter.kafka]: Removed
    the broker_addr argument from the aws_msk block.  Also
    removed the SASL/AWS_MSK_IAM authentication mechanism.
  - [otelcol.exporter.splunkhec] The batcher block is
    deprecated and will be removed in a future release. Use the
    queue block instead.
  - [otelcol.exporter.loadbalancing] Use a linear probe to
    decrease variance caused by hash collisions, which was
    causing a non-uniform distribution of loadbalancing.
  - [otelcol.connector.servicegraph] The
    database_name_attribute argument has been removed.
  - [otelcol.connector.spanmetrics] Adds a default maximum
    number of exemplars within the metric export interval.
  - [otelcol.processor.tail_sampling] Add a new
    block_on_overflow config attribute.
  * Features
  - Add the otelcol.receiver.fluentforward receiver to receive
    logs via Fluent Forward Protocol. (@rucciva)
  - Add the prometheus.enrich component to enrich metrics using
    labels from discovery.* components. (@ArkovKonstantin)
  - Add node_filter configuration block to loki.source.podlogs
    component to enable node-based filtering for pod discovery.
    When enabled, only pods running on the specified node will be
    discovered and monitored, significantly reducing API server
    load and network traffic in DaemonSet deployments.
    (@QuentinBisson)
  - (Experimental) Additions to experimental
    database_observability.mysql component:
  - query_sample collector now supports auto-enabling the
    necessary setup_consumers settings (@cristiangreco)
  - query_sample collector is now compatible with mysql less
    than 8.0.28 (@cristiangreco)
  - include server_id label on log entries (@matthewnolf)
  - support receiving targets argument and relabel those to
    include server_id (@matthewnolf)
  - updated the config blocks and documentation
    (@cristiangreco)
  - (Experimental) Additions to experimental
    database_observability.postgres component:
  - add query_tables collector for postgres (@matthewnolf)
  - add cloud_provider.aws configuration that enables
    optionally supplying the ARN of the database under
    observation. The ARN is appended to metric samples as
    labels for easier filtering and grouping of resources.
  - add query_sample collector for postgres (@gaantunes)
  - add schema_table collector for postgres (@fridgepoet)
  - include server_id label on logs and metrics (@matthewnolf)
  - Add otelcol.receiver.googlecloudpubsub community component to
    receive metrics, traces, and logs from Google Cloud Pub/Sub
    subscription. (@eraac)
  - (Experimental) Add a honor_metadata configuration argument to
    the prometheus.scrape component.  When set to true, it will
    propagate metric metadata to downstream components.
  - Add a flag to pyroscope.ebpf alloy configuration to set the
    off-cpu profiling threshold. (@luweglarz)
  - Add encoding.url_encode and encoding.url_decode std lib
    functions. (@kalleep)
  * Security:
  - CVE-2025-58058: Removed dependency on vulnerable
    github.com/ulikunitz/xz (bsc#1248960)
  - CVE-2025-11065: Fixed sensitive information leak in logs
    (bsc#1250621)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1760356800">- update to 1.11.2 (1.11.1 was not released):
  * Bugfixes
  - Fix potential deadlock in loki.source.journal when stopping
    or reloading the component. (@thampiotr)
  - Honor sync timeout when waiting for network availability for
    prometheus.operator.* components. (@dehaansa)
  - Fix prometheus.exporter.cloudwatch to not always emit debug
    logs but respect debug property. (@kalleep)
  - Fix an issue where component shutdown could block
    indefinitely by adding a warning log message and a deadline
    of 10 minutes. The deadline can be configured with the
  - -feature.component-shutdown-deadline flag if the default is
    not suitable. (@thampiotr)
  - Fix potential deadlocks in loki.source.file and
    loki.source.journal when component is shutting down.
    (@kalleep, @thampiotr)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1761652800">- update to 1.11.3:
  * Enhancements
  - Schedule new path targets faster in loki.source.file.
    (@kalleep)
  - Add prometheus.static.exporter that exposes metrics specified
    in a text file in Prometheus exposition format. (@kalleep)
  * Bugfixes
  - local.file_match now publish targets faster whenever targets
    in arguments changes. (@kalleep)
  - Fix otelcol.exporter.splunkhec arguments missing documented
    otel_attrs_to_hec_metadata block. (@dehaansa)
  - Support Scrape Protocol specification in CRDS for
    prometheus.operator.* components. (@dehaansa)
  - Fix panic in otelcol.receiver.syslog when no tcp block was
    configured. (@kalleep)</changelog>
</package>
<package pkgid="40cabbde33ff857a799cd03e80a23380628e7cc87bcc80c71d2692504863c997" name="alloy" arch="x86_64">
  <version epoch="0" ver="1.11.3" rel="150700.15.9.1"/>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1740657600">- update to 1.7.1:
  * Bugfixes
  - Fixed an issue where some exporters such as
    prometheus.exporter.snmp couldn't accept targets from other
    components with an error conversion to '*map[string]string'
    is not supported". (@thampiotr)
  - Enable batching of calls to the appender in
    prometheus.write.queue to reduce lock contention when
    scraping, which will lead to reduced scrape duration.
    (@mattdurham)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1741608000">- update to 1.7.2:
  * Notable changes:
  - Fixed an issue where the otelcol.exporter.awss3 could not be
    started with the sumo_ic marshaler. (@wildum)
  - Update jfr-parser dependency to v0.9.3 to fix jfr parsing
    issues in pyroscope.java. (@korniltsev)
  - Fixed an issue where passing targets from some standard
    library functions was failing with target::ConvertFrom error.
    (@thampiotr)
  - Fixed an issue where indexing targets as maps (e.g.
    target["foo"]) or objects (e.g. target.foo) or using them
    with certain standard library functions was resulting in
    expected object or array, got capsule error under some
    circumstances. This could also lead to foreach evaluation
    failed errors when using the foreach configuration block.
    (@thampiotr)
  - Update prometheus.write.queue to reduce memory fragmentation
    and increase sent throughput. (@mattdurham)
  - Fixed an issue where the otelcol.exporter.kafka component
    would not start if the encoding was specific to a signal
    type. (@wildum)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1741867200">- update to 1.7.3:
  * Notable changes:
  - Fixed the parsing of selections, application and network
    filter blocks for Beyla
  - Add the stat_checkpointer collector in
    prometheus.exporter.postgres (@dehaansa)
  - Update the prometheus.exporter.postgres component to
    correctly support Postgres17 when stat_bgwriter collector is
    enabled (@dehaansa)
  - Fix remoteCfg logging and metrics reporting of errNotModified
    as a failure (@zackman0010)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1741953600">- update to 1.7.4:
  * Notable changes:
  - Revert the changes to loki.source.file from release v1.7.0.
    These changes introduced a potential deadlock. (@dehaansa)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1742558400">- update to 1.7.5:
  * Notable changes:
  - Set zstd as default compression for prometheus.write.queue.
    (@mattdurham)
    Though technically an enhancement this was causing trouble in
    disk io constrained environments. Zstd provides almost double
    the compression with little additional cpu overhead.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1744200000">- update to 1.8.0:
  * Breaking changes
  - Removed open_port and executable_name from top level
    configuration of Beyla component. Removed enabled argument
    from network block. (@marctc)
  - Breaking changes from the OpenTelemetry Collector v0.122
    update: (@wildum)
  - otelcol.exporter.splunkhec: min_size_items and
    max_size_items were replaced by min_size, max_size and
    sizer in the batcher block to allow users to configure the
    size of the batch in a more flexible way.
  - The telemetry level of Otel components is no longer
    configurable. The level argument in the debug_metrics block
    is kept to avoid breaking changes but it is not used
    anymore.
  - otelcol.processor.tailsampling changed the unit of the
    decision timer metric from microseconds to milliseconds.
    (change unit of
    otelcol_processor_tail_sampling_sampling_decision_timer_latency)
  - otelcol.processor.deltatocumulative: rename
    otelcol_deltatocumulative_datapoints_processed to
    otelcol_deltatocumulative_datapoints and remove the metrics
    otelcol_deltatocumulative_streams_evicted,
    otelcol_deltatocumulative_datapoints_dropped and
    otelcol_deltatocumulative_gaps_length.
  - The regex attribute was removed from
    otelcol.processor.k8sattributes. The extract-patterns
    function from otelcol.processor.transform can be used
    instead.
  - The default value of metrics_flush_interval in
    otelcol.connector.servicegraph was changed from 0s to 60s.
  - s3_partition in otelcol.exporter.awss3 was replaced by
    s3_partition_format.
  - (Experimental) prometheus.write.queue metric names changed to
    align better with prometheus standards. (@mattdurham)
  * Features
  - Add otelcol.receiver.awscloudwatch component to receive logs
    from AWS CloudWatch and forward them to other otelcol.*
    components. (@wildum)
  - Add loki.enrich component to enrich logs using labels from
    discovery.* components. (@v-zhuravlev)
  - Add string concatenation for secrets type (@ravishankar15)
  - Add support for environment variables to OpenTelemetry
    Collector config. (@jharvey10)
  - Replace graph in Alloy UI with a new version that supports
    modules and data flow visualization. (@wildum)
  - Added --cluster.wait-for-size and --cluster.wait-timeout
    flags which allow to specify the minimum cluster size
    required before components that use clustering begin
    processing traffic to ensure adequate cluster capacity is
    available. (@thampiotr)
  - Add trace_printer to beyla.ebpf component to print trace
    information in a specific format. (@marctc)
  - Add support for live debugging and graph in the UI for
    components imported via remotecfg. (@wildum)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1744372800">- update to 1.8.1:
  * Bugfixes
  - rfc3164_default_to_current_year argument was not fully added to
    loki.source.syslog (@dehaansa)
  - Fix issue with remoteCfg service stopping immediately and
    logging noop error if not configured (@dehaansa)
  - Fix potential race condition in remoteCfg service metrics
    registration (@kalleep)
  - Fix panic in prometheus.exporter.postgres when using minimal url
    as data source name. (@kalleep)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1744718400">- update to 1.8.1^20250410d23d30f49 (jsc#PED-12282):
  * Update github.com/hashicorp/vault/api to 1.16.0</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1745496000">- update to 1.8.2:
  Bugfixes
  * Fix otelcol.exporter.prometheus dropping valid
    exemplars. (@github-vincent-miszczak)
  * Fix loki.source.podlogs not adding labels
    __meta_kubernetes_namespace and
    __meta_kubernetes_pod_label_*. (@kalleep)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1746446400">- update to 1.8.3:
  Bugfixes
  * Fix mimir.rules.kubernetes panic on non-leader debug info
    retrieval (@TheoBrigitte)
  * Fix detection of the “streams limit exceeded” error in the Loki
    client so that metrics are correctly labeled as
    ReasonStreamLimited. (@maratkhv)
  * Fix loki.source.file race condition that often lead to panic when
    using decompression. (@kalleep)
  * Fix deadlock in loki.source.file that can happen when targets are
    removed. (@kalleep)
  * Fix loki.process to emit valid logfmt. (@kalleep)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1748865600">- update to 1.9.0:
  Breaking changes
  * The prometheus.exporter.windows component has been update to
    version v0.30.6. This update includes a significant rework of
    the exporter and includes some breaking changes. (@dehaansa)
    The msmq and service collectors can no longer be configured
    with a WMI where clause. Any filtering previously done in a
    where clause will need to be done in a prometheus.relabel
    component.
    The service collector no longer provides enable_v2_collector
    and use_api configuration options.
    The mscluster_* and netframework_* collectors are now replaced
    with one mscluster and netframework collector that allows you
    to enable the separate metric groupings individually.
    The teradici_pcoip and vmware_blast collectors have been
    removed from the exporter.
  * The prometheus.exporter.oracledb component now embeds the
    oracledb_exporter from oracle instead of the deprecated
    oracledb_exporter from iamseth for collecting metrics from an
    OracleDB server: (@wildum)
    The arguments username, password, default_metrics, and
    custom_metrics are now supported.
    The previously undocumented argument custom_metrics is now
    expecting a list of paths to custom metrics files.
    The following metrics are no longer available by default:
    oracledb_sessions_activity, oracledb_tablespace_free_bytes
    (Experimental) The enable_context_propagation argument in
    beyla.ebpf has been replaced with the context_propagation
    argument.
  * Set enable_context_propagation to all to get the same behaviour
    as enable_context_propagation being set to true.
  Security
  * CVE-2025-22872: Fix tokenizer incorrectly interpretting tags
    (bsc#1241863).
  * CVE-2025-46327: Fix race condition when checking access
    permissions to the Easy Logging configuration file
    (bsc#1242020).
  Features
  * Bump snmp_exporter and embedded modules in
    prometheus.exporter.snmp to v0.29.0, add cisco_device module
    support (@v-zhuravlev)
  * Add the otelcol.storage.file extension to support persistent
    sending queues and otelcol.receiver.filelog file state tracking
    between restarts. (@dehaansa)
  * Add otelcol.exporter.googlecloud community component to export
    metrics, traces, and logs to Google Cloud. (@motoki317)
  * Add support to configure basic authentication for alloy http
    server. (@kalleep)
  * Add validate command to alloy that will perform limited
    validation of alloy configuration files. (@kalleep)
  * Add support to validate foreach block when using validate
    command. (@kalleep)
  * Add otelcol.receiver.splunkhec component to receive events in
    splunk hec format and forward them to other otelcol.*
    components. (@kalleep)
  * Add support for Mimir federated rule groups in
    mimir.rules.kubernetes (@QuentinBisson)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1749124800">- update to 1.9.1:
  Bugfixes
  * Update the prometheus.exporter.windows component to version
    v0.30.7. This fixes an error with the exchange collector and
    terminal_services collector (@dehaansa)
  * Fix loki.source.firehose to propagate specific cloudwatch event
    timestamps when useIncomingTs is set to true. (@michaelPotter)
  * Fix elevated CPU usage when using some otelcol components due to
    debug logging. (@thampiotr)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1751284800">- update to 1.9.2:
  * Bugfixes
  - Send profiles concurrently from pyroscope.ebpf. (@korniltsev)
  - Fix the validate command not understanding the livedebugging
    block. (@dehaansa)
  - Fix invalid class names in python profiles obtained with
    pyroscope.ebpf. (@korniltsev)
  - Fixed a bug which prevented non-secret optional secrets to be
    passed in as number arguments. (@ptodev)
  - For CRD-based components (prometheus.operator.*), retry
    initializing informers if the apiserver request fails. This
    rectifies issues where the apiserver is not reachable
    immediately after node restart. (@dehaansa)
  * Other changes
  - Add no-op blocks and attributes to the
    prometheus.exporter.windows component (@ptodev).
    Version 1.9.0 of Alloy removed the msmq block, as well as the
    enable_v2_collector, where_clause, and use_api attributes in
    the service block.
    This made it difficult for users to upgrade, so those
    attributes have now been made a no-op instead of being
    removed.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1751889600">- Install default configuration file</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1752753600">- update to 1.10.0:
  Breaking changes
  * Removing the nanoserver-1809 container image for Windows 2019.
    (@ptodev)
  * This is due to the deprecation of windows-2019 GitHub Actions
    runners.
  * The windowsservercore-ltsc2022 Alloy image is still being
    published to DockerHub.
  Bugfixes
  * Upgrade otelcol components from OpenTelemetry v0.126.0 to
    v0.128.0 (@korniltsev, @dehaansa)
    [otelcol.exporter.kafka]: Allow kafka exporter to produce to
    topics based on metadata key values.
    [otelcol.receiver.kafka]: Enforce a backoff mechanism on
    non-permanent errors, such as when the queue is full.
    [otelcol.receiver.kafka]: Don't restart the Kafka consumer on
    failed errors when message marking is enabled for them.
    [otelcol.connector.spanmetrics]: Fix bug causing span metrics
    calls count to be always 0 when using delta temporality.
  Features
  * (Experimental) Add an array.group_by stdlib function to group
    items in an array by a key. (@wildum)
  * Add the otelcol.exporter.faro exporter to export traces and
    logs to Faro endpoint. (@mar4uk)
  * Add the otelcol.receiver.faro receiver to receive traces and
    logs from the Grafana Faro Web SDK. (@mar4uk)
  * Add entropy support for loki.secretfilter (@romain-gaillard)
  Enhancements
  * Add hash_string_id argument to foreach block to hash the string
    representation of the pipeline id instead of using the string
    itself. (@wildum)
  * (Experimental) Additions to experimental
    database_observability.mysql component:
    Add explain_plan collector to database_observability.mysql
    component. (@rgeyer) locks: addition of data locks collector
    (@gaantunes @fridgepoet) Query sample collector is now enabled
    by default (@matthewnolf)
  * (Experimental) prometheus.write.queue add support for
    exemplars. (@dehaansa)
  * Wire in survey block for beyla.ebpf component. (@grcevski,
    @tpaschalis)
  * Upgrade otelcol components from OpenTelemetry v0.126.0 to
    v0.128.0 (@korniltsev, @dehaansa)
    [otelcol.processor.resourcedetection]: Add additional OS
    properties to resource detection: os.build.id and os.name.
    [otelcol.processor.resourcedetection]: Add host.interface
    resource attribute to system detector.
    [otelcol.exporter.kafka]: Fix Snappy compression codec support
    for the Kafka exporter.  [otelcol.receiver.filelog]: Introduce
    utf8-raw encoding to avoid replacing invalid bytes with \uFFFD
    when reading UTF-8 input.  [otelcol.processor.k8sattributes]:
    Support extracting labels and annotations from k8s
    Deployments.  [otelcol.processor.k8sattributes]: Add option to
    configure automatic service resource attributes.
    [otelcol.exporter.datadog]: Adds hostname_detection_timeout
    configuration option for Datadog Exporter and sets default to
    25 seconds.  [otelcol.receiver.datadog]: Address semantic
    conventions noncompliance and add support for http/db.
    [otelcol.exporter.awss3]: Add the retry mode, max attempts and
    max backoff to the settings.
  * Add support for conditions and statement-specific error_mode in
    otelcol.processor.transform. (@ptodev)
  * Add storage and start_from args to cloudwatch logs receiver.
    (@boernd)
  Bugfixes
  * Fix extension registration for otelcol.receiver.splunkhec auth
    extensions. (@dehaansa)
  Other changes
  * Mark pyroscope.receive_http and pyroscope.relabel components as
    GA. (@marcsanmi)
  * Upgrade otelcol.exporter.windows to v0.30.8 to get bugfixes and
    fix update collector support. (@dehaansa)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1754568000">- update to 1.10.1:
  Full list of changes:
  https://github.com/grafana/alloy/blob/v1.10.1/CHANGELOG.md#v1101
  * Bugfixes
  - Fix issue with faro.receiver cors not allowing X-Scope-OrgID
    and traceparent headers. (@mar4uk)
  - Fix issues with propagating cluster peers change
    notifications to components configured with remotecfg.
    (@dehaansa)
  - Fix issues with statistics reporter not including components
    only configured with remotecfg. (@dehaansa)
  - Fix issues with prometheus.exporter.windows not propagating
    dns collector config. (@dehaansa)
  - Fixed a bug in prometheus.write.queue which caused retries
    even when max_retry_attempts was set to 0. (@ptodev)
  - Fixed a bug in prometheus.write.queue which caused labelling
    issues when providing more than one label in external_labels.
    (@dehaansa)
  - Add application_host and network_inter_zone features to
    beyla.ebpf component. (@marctc)
  - Fix issues in loki.process where stage.multiline did not pass
    through structured metadata. (@jan-mrm)
  - Fix URLs in the Windows installer being wrapped in quotes.
    (@martincostello)
  - Fixed an issue where certain otelcol.* components could
    prevent Alloy from shutting down when provided invalid
    configuration. (@thampiotr)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1755691200">- update to 1.10.2:
  Full list of changes:
  https://github.com/grafana/alloy/blob/v1.10.2/CHANGELOG.md#v1102
  * Bugfixes
  - Fix issue in prometheus.write.queue causing inability to
    increase shard count if existing WAL data was present on
    start. (@kgeckhart)
  - Fix issue with loki.source.gcplog when push messages sent by gcp
    pub/sub only includes messageId. (@kalleep)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1759492800">- update to 1.11.0:
  Full list of changes:
  https://github.com/grafana/alloy/blob/v1.11.0/CHANGELOG.md#v1110
  * Breaking changes
  - Prometheus dependency had a major version upgrade from
    v2.55.1 to v3.4.2. (@thampiotr)
  - The . pattern in regular expressions in PromQL matches
    newline characters now. With this change a regular
    expressions like .* matches strings that include \n. This
    applies to matchers in queries and relabel configs in
    Prometheus and Loki components.
  - The enable_http2 in prometheus.remote_write component's
    endpoints has been changed to false by default.
    Previously, in Prometheus v2 the remote write http client
    would default to use http2. In order to parallelize
    multiple remote write queues across multiple sockets its
    preferable to not default to http2. If you prefer to use
    http2 for remote write you must now set enable_http2 to
    true in your prometheus.remote_write endpoints
    configuration section.
  - The experimental CLI flag
  - -feature.prometheus.metric-validation-scheme has been
    deprecated and has no effect. You can configure the metric
    validation scheme individually for each prometheus.scrape
    component.
  - Log message format has changed for some of the prometheus.*
    components as part of the upgrade to Prometheus v3.
  - The values of the le label of classic histograms and the
    quantile label of summaries are now normalized upon
    ingestion. In previous Alloy versions, that used Prometheus
    v2, the value of these labels depended on the scrape
    protocol (protobuf vs text format) in some situations. This
    led to label values changing based on the scrape protocol.
    E.g. a metric exposed as my_classic_hist{le="1"} would be
    ingested as my_classic_hist{le="1"} via the text format,
    but as my_classic_hist{le="1.0"} via protobuf. This changed
    the identity of the metric and caused problems when
    querying the metric. In current Alloy release, which uses
    Prometheus v3, these label values will always be normalized
    to a float like representation. I.e. the above example will
    always result in my_classic_hist{le="1.0"} being ingested
    into Prometheus, no matter via which protocol. The effect
    of this change is that alerts, recording rules and
    dashboards that directly reference label values as whole
    numbers such as le="1" will stop working.  The recommended
    way to deal with this change is to fix references to
    integer le and quantile label values, but otherwise do
    nothing and accept that some queries that span the
    transition time will produce inaccurate or unexpected
    results.
    See the upstream Prometheus v3 migration guide for more details.
  - prometheus.exporter.windows dependency has been updated to
    v0.31.1. (@dehaansa)
  - There are various renamed metrics and two removed
    collectors (cs, logon).
  - scrape_native_histograms attribute for prometheus.scrape is
    now set to false, whereas in previous versions of Alloy it
    would default to true. This means that it is no longer enough
    to just configure scrape_protocols to start with
    PrometheusProto to scrape native histograms -
    scrape_native_histograms has to be enabled. If
    scrape_native_histograms is enabled, scrape_protocols will
    automatically be configured correctly for you to include
    PrometheusProto. If you configure it explicitly, Alloy will
    validate that PrometheusProto is in the scrape_protocols
    list.
  - Add otel_attrs_to_hec_metadata configuration block to
    otelcol.exporter.splunkhec to match
    otelcol.receiver.splunkhec. (@cgetzen)
  - [otelcol.processor.batch] Two arguments have different
    default values. (@ptodev)
  - send_batch_size is now set to 2000 by default. It used to
    be 8192.
  - send_batch_max_size is now set to 3000 by default. It used
    to be 0.
  - This helps prevent issues with ingestion of batches that
    are too large.
  - OpenTelemetry Collector dependencies upgraded from v0.128.0
    to v0.134.0. (@ptodev)
  - The otelcol.receiver.opencensus component has been
    deprecated and will be removed in a future release, use
    otelcol.receiver.otelp instead.
  - [otelcol.exporter.*] The deprecated blocking argument in
    the sending_queue block has been removed.  Use
    block_on_overflow instead.
  - [otelcol.receiver.kafka, otelcol.exporter.kafka]: Removed
    the broker_addr argument from the aws_msk block.  Also
    removed the SASL/AWS_MSK_IAM authentication mechanism.
  - [otelcol.exporter.splunkhec] The batcher block is
    deprecated and will be removed in a future release. Use the
    queue block instead.
  - [otelcol.exporter.loadbalancing] Use a linear probe to
    decrease variance caused by hash collisions, which was
    causing a non-uniform distribution of loadbalancing.
  - [otelcol.connector.servicegraph] The
    database_name_attribute argument has been removed.
  - [otelcol.connector.spanmetrics] Adds a default maximum
    number of exemplars within the metric export interval.
  - [otelcol.processor.tail_sampling] Add a new
    block_on_overflow config attribute.
  * Features
  - Add the otelcol.receiver.fluentforward receiver to receive
    logs via Fluent Forward Protocol. (@rucciva)
  - Add the prometheus.enrich component to enrich metrics using
    labels from discovery.* components. (@ArkovKonstantin)
  - Add node_filter configuration block to loki.source.podlogs
    component to enable node-based filtering for pod discovery.
    When enabled, only pods running on the specified node will be
    discovered and monitored, significantly reducing API server
    load and network traffic in DaemonSet deployments.
    (@QuentinBisson)
  - (Experimental) Additions to experimental
    database_observability.mysql component:
  - query_sample collector now supports auto-enabling the
    necessary setup_consumers settings (@cristiangreco)
  - query_sample collector is now compatible with mysql less
    than 8.0.28 (@cristiangreco)
  - include server_id label on log entries (@matthewnolf)
  - support receiving targets argument and relabel those to
    include server_id (@matthewnolf)
  - updated the config blocks and documentation
    (@cristiangreco)
  - (Experimental) Additions to experimental
    database_observability.postgres component:
  - add query_tables collector for postgres (@matthewnolf)
  - add cloud_provider.aws configuration that enables
    optionally supplying the ARN of the database under
    observation. The ARN is appended to metric samples as
    labels for easier filtering and grouping of resources.
  - add query_sample collector for postgres (@gaantunes)
  - add schema_table collector for postgres (@fridgepoet)
  - include server_id label on logs and metrics (@matthewnolf)
  - Add otelcol.receiver.googlecloudpubsub community component to
    receive metrics, traces, and logs from Google Cloud Pub/Sub
    subscription. (@eraac)
  - (Experimental) Add a honor_metadata configuration argument to
    the prometheus.scrape component.  When set to true, it will
    propagate metric metadata to downstream components.
  - Add a flag to pyroscope.ebpf alloy configuration to set the
    off-cpu profiling threshold. (@luweglarz)
  - Add encoding.url_encode and encoding.url_decode std lib
    functions. (@kalleep)
  * Security:
  - CVE-2025-58058: Removed dependency on vulnerable
    github.com/ulikunitz/xz (bsc#1248960)
  - CVE-2025-11065: Fixed sensitive information leak in logs
    (bsc#1250621)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1760356800">- update to 1.11.2 (1.11.1 was not released):
  * Bugfixes
  - Fix potential deadlock in loki.source.journal when stopping
    or reloading the component. (@thampiotr)
  - Honor sync timeout when waiting for network availability for
    prometheus.operator.* components. (@dehaansa)
  - Fix prometheus.exporter.cloudwatch to not always emit debug
    logs but respect debug property. (@kalleep)
  - Fix an issue where component shutdown could block
    indefinitely by adding a warning log message and a deadline
    of 10 minutes. The deadline can be configured with the
  - -feature.component-shutdown-deadline flag if the default is
    not suitable. (@thampiotr)
  - Fix potential deadlocks in loki.source.file and
    loki.source.journal when component is shutting down.
    (@kalleep, @thampiotr)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1761652800">- update to 1.11.3:
  * Enhancements
  - Schedule new path targets faster in loki.source.file.
    (@kalleep)
  - Add prometheus.static.exporter that exposes metrics specified
    in a text file in Prometheus exposition format. (@kalleep)
  * Bugfixes
  - local.file_match now publish targets faster whenever targets
    in arguments changes. (@kalleep)
  - Fix otelcol.exporter.splunkhec arguments missing documented
    otel_attrs_to_hec_metadata block. (@dehaansa)
  - Support Scrape Protocol specification in CRDS for
    prometheus.operator.* components. (@dehaansa)
  - Fix panic in otelcol.receiver.syslog when no tcp block was
    configured. (@kalleep)</changelog>
</package>
<package pkgid="72a6fadd76f1400effd0c6d0a0bd86bb0d37ccb5ddd1d4e683f029526864d543" name="alloy" arch="src">
  <version epoch="0" ver="1.12.1" rel="150700.15.12.1"/>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1741867200">- update to 1.7.3:
  * Notable changes:
  - Fixed the parsing of selections, application and network
    filter blocks for Beyla
  - Add the stat_checkpointer collector in
    prometheus.exporter.postgres (@dehaansa)
  - Update the prometheus.exporter.postgres component to
    correctly support Postgres17 when stat_bgwriter collector is
    enabled (@dehaansa)
  - Fix remoteCfg logging and metrics reporting of errNotModified
    as a failure (@zackman0010)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1741953600">- update to 1.7.4:
  * Notable changes:
  - Revert the changes to loki.source.file from release v1.7.0.
    These changes introduced a potential deadlock. (@dehaansa)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1742558400">- update to 1.7.5:
  * Notable changes:
  - Set zstd as default compression for prometheus.write.queue.
    (@mattdurham)
    Though technically an enhancement this was causing trouble in
    disk io constrained environments. Zstd provides almost double
    the compression with little additional cpu overhead.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1744200000">- update to 1.8.0:
  * Breaking changes
  - Removed open_port and executable_name from top level
    configuration of Beyla component. Removed enabled argument
    from network block. (@marctc)
  - Breaking changes from the OpenTelemetry Collector v0.122
    update: (@wildum)
  - otelcol.exporter.splunkhec: min_size_items and
    max_size_items were replaced by min_size, max_size and
    sizer in the batcher block to allow users to configure the
    size of the batch in a more flexible way.
  - The telemetry level of Otel components is no longer
    configurable. The level argument in the debug_metrics block
    is kept to avoid breaking changes but it is not used
    anymore.
  - otelcol.processor.tailsampling changed the unit of the
    decision timer metric from microseconds to milliseconds.
    (change unit of
    otelcol_processor_tail_sampling_sampling_decision_timer_latency)
  - otelcol.processor.deltatocumulative: rename
    otelcol_deltatocumulative_datapoints_processed to
    otelcol_deltatocumulative_datapoints and remove the metrics
    otelcol_deltatocumulative_streams_evicted,
    otelcol_deltatocumulative_datapoints_dropped and
    otelcol_deltatocumulative_gaps_length.
  - The regex attribute was removed from
    otelcol.processor.k8sattributes. The extract-patterns
    function from otelcol.processor.transform can be used
    instead.
  - The default value of metrics_flush_interval in
    otelcol.connector.servicegraph was changed from 0s to 60s.
  - s3_partition in otelcol.exporter.awss3 was replaced by
    s3_partition_format.
  - (Experimental) prometheus.write.queue metric names changed to
    align better with prometheus standards. (@mattdurham)
  * Features
  - Add otelcol.receiver.awscloudwatch component to receive logs
    from AWS CloudWatch and forward them to other otelcol.*
    components. (@wildum)
  - Add loki.enrich component to enrich logs using labels from
    discovery.* components. (@v-zhuravlev)
  - Add string concatenation for secrets type (@ravishankar15)
  - Add support for environment variables to OpenTelemetry
    Collector config. (@jharvey10)
  - Replace graph in Alloy UI with a new version that supports
    modules and data flow visualization. (@wildum)
  - Added --cluster.wait-for-size and --cluster.wait-timeout
    flags which allow to specify the minimum cluster size
    required before components that use clustering begin
    processing traffic to ensure adequate cluster capacity is
    available. (@thampiotr)
  - Add trace_printer to beyla.ebpf component to print trace
    information in a specific format. (@marctc)
  - Add support for live debugging and graph in the UI for
    components imported via remotecfg. (@wildum)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1744372800">- update to 1.8.1:
  * Bugfixes
  - rfc3164_default_to_current_year argument was not fully added to
    loki.source.syslog (@dehaansa)
  - Fix issue with remoteCfg service stopping immediately and
    logging noop error if not configured (@dehaansa)
  - Fix potential race condition in remoteCfg service metrics
    registration (@kalleep)
  - Fix panic in prometheus.exporter.postgres when using minimal url
    as data source name. (@kalleep)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1744718400">- update to 1.8.1^20250410d23d30f49 (jsc#PED-12282):
  * Update github.com/hashicorp/vault/api to 1.16.0</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1745496000">- update to 1.8.2:
  Bugfixes
  * Fix otelcol.exporter.prometheus dropping valid
    exemplars. (@github-vincent-miszczak)
  * Fix loki.source.podlogs not adding labels
    __meta_kubernetes_namespace and
    __meta_kubernetes_pod_label_*. (@kalleep)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1746446400">- update to 1.8.3:
  Bugfixes
  * Fix mimir.rules.kubernetes panic on non-leader debug info
    retrieval (@TheoBrigitte)
  * Fix detection of the “streams limit exceeded” error in the Loki
    client so that metrics are correctly labeled as
    ReasonStreamLimited. (@maratkhv)
  * Fix loki.source.file race condition that often lead to panic when
    using decompression. (@kalleep)
  * Fix deadlock in loki.source.file that can happen when targets are
    removed. (@kalleep)
  * Fix loki.process to emit valid logfmt. (@kalleep)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1748865600">- update to 1.9.0:
  Breaking changes
  * The prometheus.exporter.windows component has been update to
    version v0.30.6. This update includes a significant rework of
    the exporter and includes some breaking changes. (@dehaansa)
    The msmq and service collectors can no longer be configured
    with a WMI where clause. Any filtering previously done in a
    where clause will need to be done in a prometheus.relabel
    component.
    The service collector no longer provides enable_v2_collector
    and use_api configuration options.
    The mscluster_* and netframework_* collectors are now replaced
    with one mscluster and netframework collector that allows you
    to enable the separate metric groupings individually.
    The teradici_pcoip and vmware_blast collectors have been
    removed from the exporter.
  * The prometheus.exporter.oracledb component now embeds the
    oracledb_exporter from oracle instead of the deprecated
    oracledb_exporter from iamseth for collecting metrics from an
    OracleDB server: (@wildum)
    The arguments username, password, default_metrics, and
    custom_metrics are now supported.
    The previously undocumented argument custom_metrics is now
    expecting a list of paths to custom metrics files.
    The following metrics are no longer available by default:
    oracledb_sessions_activity, oracledb_tablespace_free_bytes
    (Experimental) The enable_context_propagation argument in
    beyla.ebpf has been replaced with the context_propagation
    argument.
  * Set enable_context_propagation to all to get the same behaviour
    as enable_context_propagation being set to true.
  Security
  * CVE-2025-22872: Fix tokenizer incorrectly interpretting tags
    (bsc#1241863).
  * CVE-2025-46327: Fix race condition when checking access
    permissions to the Easy Logging configuration file
    (bsc#1242020).
  Features
  * Bump snmp_exporter and embedded modules in
    prometheus.exporter.snmp to v0.29.0, add cisco_device module
    support (@v-zhuravlev)
  * Add the otelcol.storage.file extension to support persistent
    sending queues and otelcol.receiver.filelog file state tracking
    between restarts. (@dehaansa)
  * Add otelcol.exporter.googlecloud community component to export
    metrics, traces, and logs to Google Cloud. (@motoki317)
  * Add support to configure basic authentication for alloy http
    server. (@kalleep)
  * Add validate command to alloy that will perform limited
    validation of alloy configuration files. (@kalleep)
  * Add support to validate foreach block when using validate
    command. (@kalleep)
  * Add otelcol.receiver.splunkhec component to receive events in
    splunk hec format and forward them to other otelcol.*
    components. (@kalleep)
  * Add support for Mimir federated rule groups in
    mimir.rules.kubernetes (@QuentinBisson)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1749124800">- update to 1.9.1:
  Bugfixes
  * Update the prometheus.exporter.windows component to version
    v0.30.7. This fixes an error with the exchange collector and
    terminal_services collector (@dehaansa)
  * Fix loki.source.firehose to propagate specific cloudwatch event
    timestamps when useIncomingTs is set to true. (@michaelPotter)
  * Fix elevated CPU usage when using some otelcol components due to
    debug logging. (@thampiotr)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1751284800">- update to 1.9.2:
  * Bugfixes
  - Send profiles concurrently from pyroscope.ebpf. (@korniltsev)
  - Fix the validate command not understanding the livedebugging
    block. (@dehaansa)
  - Fix invalid class names in python profiles obtained with
    pyroscope.ebpf. (@korniltsev)
  - Fixed a bug which prevented non-secret optional secrets to be
    passed in as number arguments. (@ptodev)
  - For CRD-based components (prometheus.operator.*), retry
    initializing informers if the apiserver request fails. This
    rectifies issues where the apiserver is not reachable
    immediately after node restart. (@dehaansa)
  * Other changes
  - Add no-op blocks and attributes to the
    prometheus.exporter.windows component (@ptodev).
    Version 1.9.0 of Alloy removed the msmq block, as well as the
    enable_v2_collector, where_clause, and use_api attributes in
    the service block.
    This made it difficult for users to upgrade, so those
    attributes have now been made a no-op instead of being
    removed.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1751889600">- Install default configuration file</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1752753600">- update to 1.10.0:
  Breaking changes
  * Removing the nanoserver-1809 container image for Windows 2019.
    (@ptodev)
  * This is due to the deprecation of windows-2019 GitHub Actions
    runners.
  * The windowsservercore-ltsc2022 Alloy image is still being
    published to DockerHub.
  Bugfixes
  * Upgrade otelcol components from OpenTelemetry v0.126.0 to
    v0.128.0 (@korniltsev, @dehaansa)
    [otelcol.exporter.kafka]: Allow kafka exporter to produce to
    topics based on metadata key values.
    [otelcol.receiver.kafka]: Enforce a backoff mechanism on
    non-permanent errors, such as when the queue is full.
    [otelcol.receiver.kafka]: Don't restart the Kafka consumer on
    failed errors when message marking is enabled for them.
    [otelcol.connector.spanmetrics]: Fix bug causing span metrics
    calls count to be always 0 when using delta temporality.
  Features
  * (Experimental) Add an array.group_by stdlib function to group
    items in an array by a key. (@wildum)
  * Add the otelcol.exporter.faro exporter to export traces and
    logs to Faro endpoint. (@mar4uk)
  * Add the otelcol.receiver.faro receiver to receive traces and
    logs from the Grafana Faro Web SDK. (@mar4uk)
  * Add entropy support for loki.secretfilter (@romain-gaillard)
  Enhancements
  * Add hash_string_id argument to foreach block to hash the string
    representation of the pipeline id instead of using the string
    itself. (@wildum)
  * (Experimental) Additions to experimental
    database_observability.mysql component:
    Add explain_plan collector to database_observability.mysql
    component. (@rgeyer) locks: addition of data locks collector
    (@gaantunes @fridgepoet) Query sample collector is now enabled
    by default (@matthewnolf)
  * (Experimental) prometheus.write.queue add support for
    exemplars. (@dehaansa)
  * Wire in survey block for beyla.ebpf component. (@grcevski,
    @tpaschalis)
  * Upgrade otelcol components from OpenTelemetry v0.126.0 to
    v0.128.0 (@korniltsev, @dehaansa)
    [otelcol.processor.resourcedetection]: Add additional OS
    properties to resource detection: os.build.id and os.name.
    [otelcol.processor.resourcedetection]: Add host.interface
    resource attribute to system detector.
    [otelcol.exporter.kafka]: Fix Snappy compression codec support
    for the Kafka exporter.  [otelcol.receiver.filelog]: Introduce
    utf8-raw encoding to avoid replacing invalid bytes with \uFFFD
    when reading UTF-8 input.  [otelcol.processor.k8sattributes]:
    Support extracting labels and annotations from k8s
    Deployments.  [otelcol.processor.k8sattributes]: Add option to
    configure automatic service resource attributes.
    [otelcol.exporter.datadog]: Adds hostname_detection_timeout
    configuration option for Datadog Exporter and sets default to
    25 seconds.  [otelcol.receiver.datadog]: Address semantic
    conventions noncompliance and add support for http/db.
    [otelcol.exporter.awss3]: Add the retry mode, max attempts and
    max backoff to the settings.
  * Add support for conditions and statement-specific error_mode in
    otelcol.processor.transform. (@ptodev)
  * Add storage and start_from args to cloudwatch logs receiver.
    (@boernd)
  Bugfixes
  * Fix extension registration for otelcol.receiver.splunkhec auth
    extensions. (@dehaansa)
  Other changes
  * Mark pyroscope.receive_http and pyroscope.relabel components as
    GA. (@marcsanmi)
  * Upgrade otelcol.exporter.windows to v0.30.8 to get bugfixes and
    fix update collector support. (@dehaansa)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1754568000">- update to 1.10.1:
  Full list of changes:
  https://github.com/grafana/alloy/blob/v1.10.1/CHANGELOG.md#v1101
  * Bugfixes
  - Fix issue with faro.receiver cors not allowing X-Scope-OrgID
    and traceparent headers. (@mar4uk)
  - Fix issues with propagating cluster peers change
    notifications to components configured with remotecfg.
    (@dehaansa)
  - Fix issues with statistics reporter not including components
    only configured with remotecfg. (@dehaansa)
  - Fix issues with prometheus.exporter.windows not propagating
    dns collector config. (@dehaansa)
  - Fixed a bug in prometheus.write.queue which caused retries
    even when max_retry_attempts was set to 0. (@ptodev)
  - Fixed a bug in prometheus.write.queue which caused labelling
    issues when providing more than one label in external_labels.
    (@dehaansa)
  - Add application_host and network_inter_zone features to
    beyla.ebpf component. (@marctc)
  - Fix issues in loki.process where stage.multiline did not pass
    through structured metadata. (@jan-mrm)
  - Fix URLs in the Windows installer being wrapped in quotes.
    (@martincostello)
  - Fixed an issue where certain otelcol.* components could
    prevent Alloy from shutting down when provided invalid
    configuration. (@thampiotr)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1755691200">- update to 1.10.2:
  Full list of changes:
  https://github.com/grafana/alloy/blob/v1.10.2/CHANGELOG.md#v1102
  * Bugfixes
  - Fix issue in prometheus.write.queue causing inability to
    increase shard count if existing WAL data was present on
    start. (@kgeckhart)
  - Fix issue with loki.source.gcplog when push messages sent by gcp
    pub/sub only includes messageId. (@kalleep)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1759492800">- update to 1.11.0:
  Full list of changes:
  https://github.com/grafana/alloy/blob/v1.11.0/CHANGELOG.md#v1110
  * Breaking changes
  - Prometheus dependency had a major version upgrade from
    v2.55.1 to v3.4.2. (@thampiotr)
  - The . pattern in regular expressions in PromQL matches
    newline characters now. With this change a regular
    expressions like .* matches strings that include \n. This
    applies to matchers in queries and relabel configs in
    Prometheus and Loki components.
  - The enable_http2 in prometheus.remote_write component's
    endpoints has been changed to false by default.
    Previously, in Prometheus v2 the remote write http client
    would default to use http2. In order to parallelize
    multiple remote write queues across multiple sockets its
    preferable to not default to http2. If you prefer to use
    http2 for remote write you must now set enable_http2 to
    true in your prometheus.remote_write endpoints
    configuration section.
  - The experimental CLI flag
  - -feature.prometheus.metric-validation-scheme has been
    deprecated and has no effect. You can configure the metric
    validation scheme individually for each prometheus.scrape
    component.
  - Log message format has changed for some of the prometheus.*
    components as part of the upgrade to Prometheus v3.
  - The values of the le label of classic histograms and the
    quantile label of summaries are now normalized upon
    ingestion. In previous Alloy versions, that used Prometheus
    v2, the value of these labels depended on the scrape
    protocol (protobuf vs text format) in some situations. This
    led to label values changing based on the scrape protocol.
    E.g. a metric exposed as my_classic_hist{le="1"} would be
    ingested as my_classic_hist{le="1"} via the text format,
    but as my_classic_hist{le="1.0"} via protobuf. This changed
    the identity of the metric and caused problems when
    querying the metric. In current Alloy release, which uses
    Prometheus v3, these label values will always be normalized
    to a float like representation. I.e. the above example will
    always result in my_classic_hist{le="1.0"} being ingested
    into Prometheus, no matter via which protocol. The effect
    of this change is that alerts, recording rules and
    dashboards that directly reference label values as whole
    numbers such as le="1" will stop working.  The recommended
    way to deal with this change is to fix references to
    integer le and quantile label values, but otherwise do
    nothing and accept that some queries that span the
    transition time will produce inaccurate or unexpected
    results.
    See the upstream Prometheus v3 migration guide for more details.
  - prometheus.exporter.windows dependency has been updated to
    v0.31.1. (@dehaansa)
  - There are various renamed metrics and two removed
    collectors (cs, logon).
  - scrape_native_histograms attribute for prometheus.scrape is
    now set to false, whereas in previous versions of Alloy it
    would default to true. This means that it is no longer enough
    to just configure scrape_protocols to start with
    PrometheusProto to scrape native histograms -
    scrape_native_histograms has to be enabled. If
    scrape_native_histograms is enabled, scrape_protocols will
    automatically be configured correctly for you to include
    PrometheusProto. If you configure it explicitly, Alloy will
    validate that PrometheusProto is in the scrape_protocols
    list.
  - Add otel_attrs_to_hec_metadata configuration block to
    otelcol.exporter.splunkhec to match
    otelcol.receiver.splunkhec. (@cgetzen)
  - [otelcol.processor.batch] Two arguments have different
    default values. (@ptodev)
  - send_batch_size is now set to 2000 by default. It used to
    be 8192.
  - send_batch_max_size is now set to 3000 by default. It used
    to be 0.
  - This helps prevent issues with ingestion of batches that
    are too large.
  - OpenTelemetry Collector dependencies upgraded from v0.128.0
    to v0.134.0. (@ptodev)
  - The otelcol.receiver.opencensus component has been
    deprecated and will be removed in a future release, use
    otelcol.receiver.otelp instead.
  - [otelcol.exporter.*] The deprecated blocking argument in
    the sending_queue block has been removed.  Use
    block_on_overflow instead.
  - [otelcol.receiver.kafka, otelcol.exporter.kafka]: Removed
    the broker_addr argument from the aws_msk block.  Also
    removed the SASL/AWS_MSK_IAM authentication mechanism.
  - [otelcol.exporter.splunkhec] The batcher block is
    deprecated and will be removed in a future release. Use the
    queue block instead.
  - [otelcol.exporter.loadbalancing] Use a linear probe to
    decrease variance caused by hash collisions, which was
    causing a non-uniform distribution of loadbalancing.
  - [otelcol.connector.servicegraph] The
    database_name_attribute argument has been removed.
  - [otelcol.connector.spanmetrics] Adds a default maximum
    number of exemplars within the metric export interval.
  - [otelcol.processor.tail_sampling] Add a new
    block_on_overflow config attribute.
  * Features
  - Add the otelcol.receiver.fluentforward receiver to receive
    logs via Fluent Forward Protocol. (@rucciva)
  - Add the prometheus.enrich component to enrich metrics using
    labels from discovery.* components. (@ArkovKonstantin)
  - Add node_filter configuration block to loki.source.podlogs
    component to enable node-based filtering for pod discovery.
    When enabled, only pods running on the specified node will be
    discovered and monitored, significantly reducing API server
    load and network traffic in DaemonSet deployments.
    (@QuentinBisson)
  - (Experimental) Additions to experimental
    database_observability.mysql component:
  - query_sample collector now supports auto-enabling the
    necessary setup_consumers settings (@cristiangreco)
  - query_sample collector is now compatible with mysql less
    than 8.0.28 (@cristiangreco)
  - include server_id label on log entries (@matthewnolf)
  - support receiving targets argument and relabel those to
    include server_id (@matthewnolf)
  - updated the config blocks and documentation
    (@cristiangreco)
  - (Experimental) Additions to experimental
    database_observability.postgres component:
  - add query_tables collector for postgres (@matthewnolf)
  - add cloud_provider.aws configuration that enables
    optionally supplying the ARN of the database under
    observation. The ARN is appended to metric samples as
    labels for easier filtering and grouping of resources.
  - add query_sample collector for postgres (@gaantunes)
  - add schema_table collector for postgres (@fridgepoet)
  - include server_id label on logs and metrics (@matthewnolf)
  - Add otelcol.receiver.googlecloudpubsub community component to
    receive metrics, traces, and logs from Google Cloud Pub/Sub
    subscription. (@eraac)
  - (Experimental) Add a honor_metadata configuration argument to
    the prometheus.scrape component.  When set to true, it will
    propagate metric metadata to downstream components.
  - Add a flag to pyroscope.ebpf alloy configuration to set the
    off-cpu profiling threshold. (@luweglarz)
  - Add encoding.url_encode and encoding.url_decode std lib
    functions. (@kalleep)
  * Security:
  - CVE-2025-58058: Removed dependency on vulnerable
    github.com/ulikunitz/xz (bsc#1248960)
  - CVE-2025-11065: Fixed sensitive information leak in logs
    (bsc#1250621)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1760356800">- update to 1.11.2 (1.11.1 was not released):
  * Bugfixes
  - Fix potential deadlock in loki.source.journal when stopping
    or reloading the component. (@thampiotr)
  - Honor sync timeout when waiting for network availability for
    prometheus.operator.* components. (@dehaansa)
  - Fix prometheus.exporter.cloudwatch to not always emit debug
    logs but respect debug property. (@kalleep)
  - Fix an issue where component shutdown could block
    indefinitely by adding a warning log message and a deadline
    of 10 minutes. The deadline can be configured with the
  - -feature.component-shutdown-deadline flag if the default is
    not suitable. (@thampiotr)
  - Fix potential deadlocks in loki.source.file and
    loki.source.journal when component is shutting down.
    (@kalleep, @thampiotr)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1761652800">- update to 1.11.3:
  * Enhancements
  - Schedule new path targets faster in loki.source.file.
    (@kalleep)
  - Add prometheus.static.exporter that exposes metrics specified
    in a text file in Prometheus exposition format. (@kalleep)
  * Bugfixes
  - local.file_match now publish targets faster whenever targets
    in arguments changes. (@kalleep)
  - Fix otelcol.exporter.splunkhec arguments missing documented
    otel_attrs_to_hec_metadata block. (@dehaansa)
  - Support Scrape Protocol specification in CRDS for
    prometheus.operator.* components. (@dehaansa)
  - Fix panic in otelcol.receiver.syslog when no tcp block was
    configured. (@kalleep)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1764936000">- update to 1.12.0:
  * Breaking changes
  - prometheus.exporter.blackbox, prometheus.exporter.snmp and
    prometheus.exporter.statsd now use the component ID instead
    of the hostname as
  - their instance label in their exported metrics. This is a
    consequence of a bug fix that could lead to missing data when
    using the exporter
  - with clustering. If you would like to retain the previous
    behaviour, you can use discovery.relabel with action =
    "replace" rule to
  - set the instance label to sys.env("HOSTNAME"). (@thampiotr)
  * Security
  - CVE-2025-47911: Upgrade golang.org/x/net/html to fix various
    algorithms with quadratic complexity when parsing HTML
    documents (bsc#1251509)
  - CVE-2025-58190: Upgrade golang.org/x/net/html to fix
    excessive memory consumption by `html.ParseFragment` when
    processing specially crafted input (bsc#1251716)
  - CVE-2025-47913: Upgrade golang.org/x/crypto to fix client
    process termination when receiving an unexpected message type
    in response to a key listing or signing request (bsc#1253609)
  * Features
  - (Experimental) Add an otelcol.receiver.cloudflare component
    to receive
  - logs pushed by Cloudflare's LogPush jobs. (@x1unix)
  - (Experimental) Additions to experimental
    database_observability.mysql component:
  - explain_plans
  - collector now changes schema before returning the
    connection to the pool (@cristiangreco)
  - collector now passes queries more permissively, expressly
    to allow queries beginning in with (@rgeyer)
  - enable explain_plans collector by default (@rgeyer)
  - (Experimental) Additions to experimental
    database_observability.postgres component:
  - explain_plans
  - added the explain plan collector (@rgeyer)
  - collector now passes queries more permissively, expressly
    to allow queries beginning in with (@rgeyer)
  - query_samples
  - add user field to wait events within query_samples
    collector (@gaantunes)
  - rework the query samples collector to buffer per-query
    execution state across scrapes and emit finalized entries
    (@gaantunes)
  - process turned idle rows to calculate finalization times
    precisely and emit first seen idle rows (@gaantunes)
  - query_details
  - escape queries coming from pg_stat_statements with quotes
    (@gaantunes)
  - enable explain_plans collector by default (@rgeyer)
  - safely generate server_id when UDP socket used for database
    connection (@matthewnolf)
  - add table registry and include "validated" in parsed table
    name logs (@fridgepoet)
  - Add otelcol.exporter.googlecloudpubsub community component to
    export metrics, traces, and logs to Google Cloud Pub/Sub
    topic. (@eraac)
  - Add structured_metadata_drop stage for loki.process to filter
    structured metadata. (@baurmatt)
  - Send remote config status to the remote server for the
    remotecfg service. (@erikbaranowski)
  - Send effective config to the remote server for the remotecfg
    service. (@erikbaranowski)
  - Add a stat_statements configuration block to the
    prometheus.exporter.postgres component to enable selecting
    both the query ID and the full SQL statement. The new block
    includes one option to enable statement selection, and
    another to configure the maximum length of the statement
    text. (@SimonSerrano)
  - Add truncate stage for loki.process to truncate log entries,
    label values, and structured_metadata values. (@dehaansa)
  - Add u_probe_links &amp; load_probe configuration fields to alloy
    pyroscope.ebpf to extend configuration of the
    opentelemetry-ebpf-profiler to allow uprobe profiling and
    dynamic probing. (@luweglarz)
  - Add verbose_mode configuration fields to alloy pyroscope.ebpf
    to be enable ebpf-profiler verbose mode. (@luweglarz)
  - Add file_match block to loki.source.file for built-in file
    discovery using glob patterns. (@kalleep)
  - Add a regex argument to the structured_metadata stage in
    loki.process to extract labels matching a regular expression.
    (@timonegk)
  - OpenTelemetry Collector dependencies upgraded from v0.134.0
    to v0.139.0. (@dehaansa)
  - All otelcol.receiver.* components leveraging an HTTP server
    can configure HTTP keep alive behavior with
    keep_alives_enabled.
  - All otelcol.exporter.* components providing the
    sending_queue &gt; batch block have default batch values.
  - The otelcol.processor.k8sattributes component has support
    for extracting annotations from k8s jobs and daemonsets.
  - The otelcol.processor.resourcedecetion component supports
    nine new detectors.
  - The otelcol.exporter.kafka component supports partitioning
    logs by trace ID (partition_logs_by_trace_id) and
    configuring default behavior if topic does not exist
    (allow_auto_topic_creation).
  - The otelcol.receiver.kafka component has new configuration
    options max_partition_fetch_size, rack_id, and
    use_leader_epoch.
  - The otelcol.exporter.s3 component has new configuration
    options s3_base_prefix and s3_partition_timezone.
  - The otelcol.processor.servicegraph component now supports
    defining the maximum number of buckets for generated
    exponential histograms.
  - See the upstream
    [core][https://github.com/open-telemetry/opentelemetry-collector/blob/v0.139.0/CHANGELOG.md]
    and
    [contrib][https://github.com/open-telemetry/opentelemetry-collector-contrib/blob/v0.139.0/CHANGELOG.md]
    changelogs for more details.
  - A new mimir.alerts.kubernetes component which discovers
    AlertmanagerConfig Kubernetes resources and loads them into a
    Mimir instance. (@ptodev)
  - Mark stage.windowsevent block in the loki.process component
    as GA. (@kgeckhart)
  * Enhancements
  - Add per-application rate limiting with the strategy attribute
    in the faro.receiver component, to prevent one application
    from consuming the rate limit quota of others. (@hhertout)
  - Add support of tls in components
    loki.source.(awsfirehose|gcplog|heroku|api) and
    prometheus.receive_http and pyroscope.receive_http.
    (@fgouteroux)
  - Remove SendSIGKILL=no from unit files and recommendations
    (@oleg-kozlyuk-grafana)
  - Reduce memory overhead of prometheus.remote_write's WAL by
    lowering the size of the allocated series storage.
    (@kgeckhart)
  - Reduce lock wait/contention on the labelstore.LabelStore by
    removing unecessary usage from prometheus.relabel.
    (@kgeckhart)
  - prometheus.exporter.postgres dependency has been updated to
    v0.18.1. This includes new stat_progress_vacuum and
    buffercache_summary collectors, as well as other bugfixes and
    enhancements. (@cristiangreco)
  - Update Beyla component to 2.7.8. (@grcevski)
  - Support delimiters in stage.luhn. (@dehaansa)
  - pyroscope.java: update async-profiler to 4.2
    (@korniltsev-grafanista)
  - Improve debug info output from exported receivers (loki,
    prometheus and pyroscope). (@kalleep)
  - prometheus.exporter.unix: Add an arp config block to
    configure the ARP collector. (@ptodev)
  - prometheus.exporter.snowflake dependency has been updated to
    20251016132346-6d442402afb2, which updates data ownership
    queries to use last_over_time for a 24 hour period.
    (@Dasomeone)
  - loki.source.podlogs now supports preserve_discovered_labels
    parameter to preserve discovered pod metadata labels for use
    by downstream components. (@QuentinBisson)
  - Rework underlying framework of Alloy UI to use Vite instead
    of Create React App. (@jharvey10)
  - Use POST requests for remote config requests to avoid hitting
    http2 header limits. (@tpaschalis)
  - loki.source.api during component shutdown will now reject all
    the inflight requests with status code 503 after
    graceful_shutdown_timeout has expired. (@kalleep)
  - kubernetes.discovery Add support for attaching namespace
    metadata. (@kgeckhart)
  - Add meta_cache_address to beyla.ebpf component. (@skl)
  * Bugfixes
  - Stop loki.source.kubernetes discarding log lines with
    duplicate timestamps. (@ciaranj)
  - Fix direction of arrows for pyroscope components in UI graph.
    (@dehaansa)
  - Only log EOF errors for syslog port investigations in
    loki.source.syslog as Debug, not Warn. (@dehaansa)
  - Fix prometheus.exporter.process ignoring the
    remove_empty_groups argument. (@mhamzahkhan)
  - Fix issues with "unknown series ref when trying to add
    exemplar" from prometheus.remote_write by allowing series ref
    links to be updated if they change. (@kgeckhart)
  - Fix loki.source.podlogs component to register the Kubernetes
    field index for spec.nodeName when node filtering is enabled,
    preventing "Index with name field:spec.nodeName does not
    exist" errors. (@QuentinBisson)
  - Fix issue in loki.source.file where scheduling files could
    take too long. (@kalleep)
  - Fix loki.write no longer includes internal labels __.
    (@matt-gp)
  - Fix missing native histograms custom buckets (NHCB) samples
    from prometheus.remote_write. (@krajorama)
  - otelcol.receiver.prometheus now supports mixed histograms if
    prometheus.scrape has honor_metadata set to true. (@ptodev)
  - A mixed histogram is one which has both classic and
    exponential buckets.
  - loki.source.file has better support for non-UTF-8 encoded
    files. (@ptodev)
  - A BOM will be taken into account if the file is UTF-16
    encoded and encoding is set to UTF-16. (Not UTF-16BE or
    UTF-16LE)
  - The carriage return symbol in Windows log files with CLRF
    endings will no longer be part of the log line.
  - These bugs used to cause some logs to show up with Chinese
    characters. Notably, this would happen on MSSQL UTF-16 LE
    logs.
  - Fix the loki.write endpoint block's enable_http2 attribute to
    actually affect the client. HTTP2 was previously disabled
    regardless of configuration. (@dehaansa)
  - Optionally remove trailing newlines before appending entries
    in stage.multiline. (@dehaansa)
  - loki.source.api no longer drops request when relabel rules
    drops a specific stream. (@kalleep)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1765886400">- update to 1.12.1:
  * Bug Fixes
  - update to Beyla 2.7.10 (#5019) (c149393) (@rafaelroquetto)</changelog>
</package>
<package pkgid="bf154645d8f2b84782f8d4108405c62dfb04fa0bffe0303e0d90c48cf2407843" name="alloy" arch="x86_64">
  <version epoch="0" ver="1.12.1" rel="150700.15.12.1"/>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1741867200">- update to 1.7.3:
  * Notable changes:
  - Fixed the parsing of selections, application and network
    filter blocks for Beyla
  - Add the stat_checkpointer collector in
    prometheus.exporter.postgres (@dehaansa)
  - Update the prometheus.exporter.postgres component to
    correctly support Postgres17 when stat_bgwriter collector is
    enabled (@dehaansa)
  - Fix remoteCfg logging and metrics reporting of errNotModified
    as a failure (@zackman0010)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1741953600">- update to 1.7.4:
  * Notable changes:
  - Revert the changes to loki.source.file from release v1.7.0.
    These changes introduced a potential deadlock. (@dehaansa)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1742558400">- update to 1.7.5:
  * Notable changes:
  - Set zstd as default compression for prometheus.write.queue.
    (@mattdurham)
    Though technically an enhancement this was causing trouble in
    disk io constrained environments. Zstd provides almost double
    the compression with little additional cpu overhead.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1744200000">- update to 1.8.0:
  * Breaking changes
  - Removed open_port and executable_name from top level
    configuration of Beyla component. Removed enabled argument
    from network block. (@marctc)
  - Breaking changes from the OpenTelemetry Collector v0.122
    update: (@wildum)
  - otelcol.exporter.splunkhec: min_size_items and
    max_size_items were replaced by min_size, max_size and
    sizer in the batcher block to allow users to configure the
    size of the batch in a more flexible way.
  - The telemetry level of Otel components is no longer
    configurable. The level argument in the debug_metrics block
    is kept to avoid breaking changes but it is not used
    anymore.
  - otelcol.processor.tailsampling changed the unit of the
    decision timer metric from microseconds to milliseconds.
    (change unit of
    otelcol_processor_tail_sampling_sampling_decision_timer_latency)
  - otelcol.processor.deltatocumulative: rename
    otelcol_deltatocumulative_datapoints_processed to
    otelcol_deltatocumulative_datapoints and remove the metrics
    otelcol_deltatocumulative_streams_evicted,
    otelcol_deltatocumulative_datapoints_dropped and
    otelcol_deltatocumulative_gaps_length.
  - The regex attribute was removed from
    otelcol.processor.k8sattributes. The extract-patterns
    function from otelcol.processor.transform can be used
    instead.
  - The default value of metrics_flush_interval in
    otelcol.connector.servicegraph was changed from 0s to 60s.
  - s3_partition in otelcol.exporter.awss3 was replaced by
    s3_partition_format.
  - (Experimental) prometheus.write.queue metric names changed to
    align better with prometheus standards. (@mattdurham)
  * Features
  - Add otelcol.receiver.awscloudwatch component to receive logs
    from AWS CloudWatch and forward them to other otelcol.*
    components. (@wildum)
  - Add loki.enrich component to enrich logs using labels from
    discovery.* components. (@v-zhuravlev)
  - Add string concatenation for secrets type (@ravishankar15)
  - Add support for environment variables to OpenTelemetry
    Collector config. (@jharvey10)
  - Replace graph in Alloy UI with a new version that supports
    modules and data flow visualization. (@wildum)
  - Added --cluster.wait-for-size and --cluster.wait-timeout
    flags which allow to specify the minimum cluster size
    required before components that use clustering begin
    processing traffic to ensure adequate cluster capacity is
    available. (@thampiotr)
  - Add trace_printer to beyla.ebpf component to print trace
    information in a specific format. (@marctc)
  - Add support for live debugging and graph in the UI for
    components imported via remotecfg. (@wildum)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1744372800">- update to 1.8.1:
  * Bugfixes
  - rfc3164_default_to_current_year argument was not fully added to
    loki.source.syslog (@dehaansa)
  - Fix issue with remoteCfg service stopping immediately and
    logging noop error if not configured (@dehaansa)
  - Fix potential race condition in remoteCfg service metrics
    registration (@kalleep)
  - Fix panic in prometheus.exporter.postgres when using minimal url
    as data source name. (@kalleep)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1744718400">- update to 1.8.1^20250410d23d30f49 (jsc#PED-12282):
  * Update github.com/hashicorp/vault/api to 1.16.0</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1745496000">- update to 1.8.2:
  Bugfixes
  * Fix otelcol.exporter.prometheus dropping valid
    exemplars. (@github-vincent-miszczak)
  * Fix loki.source.podlogs not adding labels
    __meta_kubernetes_namespace and
    __meta_kubernetes_pod_label_*. (@kalleep)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1746446400">- update to 1.8.3:
  Bugfixes
  * Fix mimir.rules.kubernetes panic on non-leader debug info
    retrieval (@TheoBrigitte)
  * Fix detection of the “streams limit exceeded” error in the Loki
    client so that metrics are correctly labeled as
    ReasonStreamLimited. (@maratkhv)
  * Fix loki.source.file race condition that often lead to panic when
    using decompression. (@kalleep)
  * Fix deadlock in loki.source.file that can happen when targets are
    removed. (@kalleep)
  * Fix loki.process to emit valid logfmt. (@kalleep)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1748865600">- update to 1.9.0:
  Breaking changes
  * The prometheus.exporter.windows component has been update to
    version v0.30.6. This update includes a significant rework of
    the exporter and includes some breaking changes. (@dehaansa)
    The msmq and service collectors can no longer be configured
    with a WMI where clause. Any filtering previously done in a
    where clause will need to be done in a prometheus.relabel
    component.
    The service collector no longer provides enable_v2_collector
    and use_api configuration options.
    The mscluster_* and netframework_* collectors are now replaced
    with one mscluster and netframework collector that allows you
    to enable the separate metric groupings individually.
    The teradici_pcoip and vmware_blast collectors have been
    removed from the exporter.
  * The prometheus.exporter.oracledb component now embeds the
    oracledb_exporter from oracle instead of the deprecated
    oracledb_exporter from iamseth for collecting metrics from an
    OracleDB server: (@wildum)
    The arguments username, password, default_metrics, and
    custom_metrics are now supported.
    The previously undocumented argument custom_metrics is now
    expecting a list of paths to custom metrics files.
    The following metrics are no longer available by default:
    oracledb_sessions_activity, oracledb_tablespace_free_bytes
    (Experimental) The enable_context_propagation argument in
    beyla.ebpf has been replaced with the context_propagation
    argument.
  * Set enable_context_propagation to all to get the same behaviour
    as enable_context_propagation being set to true.
  Security
  * CVE-2025-22872: Fix tokenizer incorrectly interpretting tags
    (bsc#1241863).
  * CVE-2025-46327: Fix race condition when checking access
    permissions to the Easy Logging configuration file
    (bsc#1242020).
  Features
  * Bump snmp_exporter and embedded modules in
    prometheus.exporter.snmp to v0.29.0, add cisco_device module
    support (@v-zhuravlev)
  * Add the otelcol.storage.file extension to support persistent
    sending queues and otelcol.receiver.filelog file state tracking
    between restarts. (@dehaansa)
  * Add otelcol.exporter.googlecloud community component to export
    metrics, traces, and logs to Google Cloud. (@motoki317)
  * Add support to configure basic authentication for alloy http
    server. (@kalleep)
  * Add validate command to alloy that will perform limited
    validation of alloy configuration files. (@kalleep)
  * Add support to validate foreach block when using validate
    command. (@kalleep)
  * Add otelcol.receiver.splunkhec component to receive events in
    splunk hec format and forward them to other otelcol.*
    components. (@kalleep)
  * Add support for Mimir federated rule groups in
    mimir.rules.kubernetes (@QuentinBisson)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1749124800">- update to 1.9.1:
  Bugfixes
  * Update the prometheus.exporter.windows component to version
    v0.30.7. This fixes an error with the exchange collector and
    terminal_services collector (@dehaansa)
  * Fix loki.source.firehose to propagate specific cloudwatch event
    timestamps when useIncomingTs is set to true. (@michaelPotter)
  * Fix elevated CPU usage when using some otelcol components due to
    debug logging. (@thampiotr)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1751284800">- update to 1.9.2:
  * Bugfixes
  - Send profiles concurrently from pyroscope.ebpf. (@korniltsev)
  - Fix the validate command not understanding the livedebugging
    block. (@dehaansa)
  - Fix invalid class names in python profiles obtained with
    pyroscope.ebpf. (@korniltsev)
  - Fixed a bug which prevented non-secret optional secrets to be
    passed in as number arguments. (@ptodev)
  - For CRD-based components (prometheus.operator.*), retry
    initializing informers if the apiserver request fails. This
    rectifies issues where the apiserver is not reachable
    immediately after node restart. (@dehaansa)
  * Other changes
  - Add no-op blocks and attributes to the
    prometheus.exporter.windows component (@ptodev).
    Version 1.9.0 of Alloy removed the msmq block, as well as the
    enable_v2_collector, where_clause, and use_api attributes in
    the service block.
    This made it difficult for users to upgrade, so those
    attributes have now been made a no-op instead of being
    removed.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1751889600">- Install default configuration file</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1752753600">- update to 1.10.0:
  Breaking changes
  * Removing the nanoserver-1809 container image for Windows 2019.
    (@ptodev)
  * This is due to the deprecation of windows-2019 GitHub Actions
    runners.
  * The windowsservercore-ltsc2022 Alloy image is still being
    published to DockerHub.
  Bugfixes
  * Upgrade otelcol components from OpenTelemetry v0.126.0 to
    v0.128.0 (@korniltsev, @dehaansa)
    [otelcol.exporter.kafka]: Allow kafka exporter to produce to
    topics based on metadata key values.
    [otelcol.receiver.kafka]: Enforce a backoff mechanism on
    non-permanent errors, such as when the queue is full.
    [otelcol.receiver.kafka]: Don't restart the Kafka consumer on
    failed errors when message marking is enabled for them.
    [otelcol.connector.spanmetrics]: Fix bug causing span metrics
    calls count to be always 0 when using delta temporality.
  Features
  * (Experimental) Add an array.group_by stdlib function to group
    items in an array by a key. (@wildum)
  * Add the otelcol.exporter.faro exporter to export traces and
    logs to Faro endpoint. (@mar4uk)
  * Add the otelcol.receiver.faro receiver to receive traces and
    logs from the Grafana Faro Web SDK. (@mar4uk)
  * Add entropy support for loki.secretfilter (@romain-gaillard)
  Enhancements
  * Add hash_string_id argument to foreach block to hash the string
    representation of the pipeline id instead of using the string
    itself. (@wildum)
  * (Experimental) Additions to experimental
    database_observability.mysql component:
    Add explain_plan collector to database_observability.mysql
    component. (@rgeyer) locks: addition of data locks collector
    (@gaantunes @fridgepoet) Query sample collector is now enabled
    by default (@matthewnolf)
  * (Experimental) prometheus.write.queue add support for
    exemplars. (@dehaansa)
  * Wire in survey block for beyla.ebpf component. (@grcevski,
    @tpaschalis)
  * Upgrade otelcol components from OpenTelemetry v0.126.0 to
    v0.128.0 (@korniltsev, @dehaansa)
    [otelcol.processor.resourcedetection]: Add additional OS
    properties to resource detection: os.build.id and os.name.
    [otelcol.processor.resourcedetection]: Add host.interface
    resource attribute to system detector.
    [otelcol.exporter.kafka]: Fix Snappy compression codec support
    for the Kafka exporter.  [otelcol.receiver.filelog]: Introduce
    utf8-raw encoding to avoid replacing invalid bytes with \uFFFD
    when reading UTF-8 input.  [otelcol.processor.k8sattributes]:
    Support extracting labels and annotations from k8s
    Deployments.  [otelcol.processor.k8sattributes]: Add option to
    configure automatic service resource attributes.
    [otelcol.exporter.datadog]: Adds hostname_detection_timeout
    configuration option for Datadog Exporter and sets default to
    25 seconds.  [otelcol.receiver.datadog]: Address semantic
    conventions noncompliance and add support for http/db.
    [otelcol.exporter.awss3]: Add the retry mode, max attempts and
    max backoff to the settings.
  * Add support for conditions and statement-specific error_mode in
    otelcol.processor.transform. (@ptodev)
  * Add storage and start_from args to cloudwatch logs receiver.
    (@boernd)
  Bugfixes
  * Fix extension registration for otelcol.receiver.splunkhec auth
    extensions. (@dehaansa)
  Other changes
  * Mark pyroscope.receive_http and pyroscope.relabel components as
    GA. (@marcsanmi)
  * Upgrade otelcol.exporter.windows to v0.30.8 to get bugfixes and
    fix update collector support. (@dehaansa)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1754568000">- update to 1.10.1:
  Full list of changes:
  https://github.com/grafana/alloy/blob/v1.10.1/CHANGELOG.md#v1101
  * Bugfixes
  - Fix issue with faro.receiver cors not allowing X-Scope-OrgID
    and traceparent headers. (@mar4uk)
  - Fix issues with propagating cluster peers change
    notifications to components configured with remotecfg.
    (@dehaansa)
  - Fix issues with statistics reporter not including components
    only configured with remotecfg. (@dehaansa)
  - Fix issues with prometheus.exporter.windows not propagating
    dns collector config. (@dehaansa)
  - Fixed a bug in prometheus.write.queue which caused retries
    even when max_retry_attempts was set to 0. (@ptodev)
  - Fixed a bug in prometheus.write.queue which caused labelling
    issues when providing more than one label in external_labels.
    (@dehaansa)
  - Add application_host and network_inter_zone features to
    beyla.ebpf component. (@marctc)
  - Fix issues in loki.process where stage.multiline did not pass
    through structured metadata. (@jan-mrm)
  - Fix URLs in the Windows installer being wrapped in quotes.
    (@martincostello)
  - Fixed an issue where certain otelcol.* components could
    prevent Alloy from shutting down when provided invalid
    configuration. (@thampiotr)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1755691200">- update to 1.10.2:
  Full list of changes:
  https://github.com/grafana/alloy/blob/v1.10.2/CHANGELOG.md#v1102
  * Bugfixes
  - Fix issue in prometheus.write.queue causing inability to
    increase shard count if existing WAL data was present on
    start. (@kgeckhart)
  - Fix issue with loki.source.gcplog when push messages sent by gcp
    pub/sub only includes messageId. (@kalleep)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1759492800">- update to 1.11.0:
  Full list of changes:
  https://github.com/grafana/alloy/blob/v1.11.0/CHANGELOG.md#v1110
  * Breaking changes
  - Prometheus dependency had a major version upgrade from
    v2.55.1 to v3.4.2. (@thampiotr)
  - The . pattern in regular expressions in PromQL matches
    newline characters now. With this change a regular
    expressions like .* matches strings that include \n. This
    applies to matchers in queries and relabel configs in
    Prometheus and Loki components.
  - The enable_http2 in prometheus.remote_write component's
    endpoints has been changed to false by default.
    Previously, in Prometheus v2 the remote write http client
    would default to use http2. In order to parallelize
    multiple remote write queues across multiple sockets its
    preferable to not default to http2. If you prefer to use
    http2 for remote write you must now set enable_http2 to
    true in your prometheus.remote_write endpoints
    configuration section.
  - The experimental CLI flag
  - -feature.prometheus.metric-validation-scheme has been
    deprecated and has no effect. You can configure the metric
    validation scheme individually for each prometheus.scrape
    component.
  - Log message format has changed for some of the prometheus.*
    components as part of the upgrade to Prometheus v3.
  - The values of the le label of classic histograms and the
    quantile label of summaries are now normalized upon
    ingestion. In previous Alloy versions, that used Prometheus
    v2, the value of these labels depended on the scrape
    protocol (protobuf vs text format) in some situations. This
    led to label values changing based on the scrape protocol.
    E.g. a metric exposed as my_classic_hist{le="1"} would be
    ingested as my_classic_hist{le="1"} via the text format,
    but as my_classic_hist{le="1.0"} via protobuf. This changed
    the identity of the metric and caused problems when
    querying the metric. In current Alloy release, which uses
    Prometheus v3, these label values will always be normalized
    to a float like representation. I.e. the above example will
    always result in my_classic_hist{le="1.0"} being ingested
    into Prometheus, no matter via which protocol. The effect
    of this change is that alerts, recording rules and
    dashboards that directly reference label values as whole
    numbers such as le="1" will stop working.  The recommended
    way to deal with this change is to fix references to
    integer le and quantile label values, but otherwise do
    nothing and accept that some queries that span the
    transition time will produce inaccurate or unexpected
    results.
    See the upstream Prometheus v3 migration guide for more details.
  - prometheus.exporter.windows dependency has been updated to
    v0.31.1. (@dehaansa)
  - There are various renamed metrics and two removed
    collectors (cs, logon).
  - scrape_native_histograms attribute for prometheus.scrape is
    now set to false, whereas in previous versions of Alloy it
    would default to true. This means that it is no longer enough
    to just configure scrape_protocols to start with
    PrometheusProto to scrape native histograms -
    scrape_native_histograms has to be enabled. If
    scrape_native_histograms is enabled, scrape_protocols will
    automatically be configured correctly for you to include
    PrometheusProto. If you configure it explicitly, Alloy will
    validate that PrometheusProto is in the scrape_protocols
    list.
  - Add otel_attrs_to_hec_metadata configuration block to
    otelcol.exporter.splunkhec to match
    otelcol.receiver.splunkhec. (@cgetzen)
  - [otelcol.processor.batch] Two arguments have different
    default values. (@ptodev)
  - send_batch_size is now set to 2000 by default. It used to
    be 8192.
  - send_batch_max_size is now set to 3000 by default. It used
    to be 0.
  - This helps prevent issues with ingestion of batches that
    are too large.
  - OpenTelemetry Collector dependencies upgraded from v0.128.0
    to v0.134.0. (@ptodev)
  - The otelcol.receiver.opencensus component has been
    deprecated and will be removed in a future release, use
    otelcol.receiver.otelp instead.
  - [otelcol.exporter.*] The deprecated blocking argument in
    the sending_queue block has been removed.  Use
    block_on_overflow instead.
  - [otelcol.receiver.kafka, otelcol.exporter.kafka]: Removed
    the broker_addr argument from the aws_msk block.  Also
    removed the SASL/AWS_MSK_IAM authentication mechanism.
  - [otelcol.exporter.splunkhec] The batcher block is
    deprecated and will be removed in a future release. Use the
    queue block instead.
  - [otelcol.exporter.loadbalancing] Use a linear probe to
    decrease variance caused by hash collisions, which was
    causing a non-uniform distribution of loadbalancing.
  - [otelcol.connector.servicegraph] The
    database_name_attribute argument has been removed.
  - [otelcol.connector.spanmetrics] Adds a default maximum
    number of exemplars within the metric export interval.
  - [otelcol.processor.tail_sampling] Add a new
    block_on_overflow config attribute.
  * Features
  - Add the otelcol.receiver.fluentforward receiver to receive
    logs via Fluent Forward Protocol. (@rucciva)
  - Add the prometheus.enrich component to enrich metrics using
    labels from discovery.* components. (@ArkovKonstantin)
  - Add node_filter configuration block to loki.source.podlogs
    component to enable node-based filtering for pod discovery.
    When enabled, only pods running on the specified node will be
    discovered and monitored, significantly reducing API server
    load and network traffic in DaemonSet deployments.
    (@QuentinBisson)
  - (Experimental) Additions to experimental
    database_observability.mysql component:
  - query_sample collector now supports auto-enabling the
    necessary setup_consumers settings (@cristiangreco)
  - query_sample collector is now compatible with mysql less
    than 8.0.28 (@cristiangreco)
  - include server_id label on log entries (@matthewnolf)
  - support receiving targets argument and relabel those to
    include server_id (@matthewnolf)
  - updated the config blocks and documentation
    (@cristiangreco)
  - (Experimental) Additions to experimental
    database_observability.postgres component:
  - add query_tables collector for postgres (@matthewnolf)
  - add cloud_provider.aws configuration that enables
    optionally supplying the ARN of the database under
    observation. The ARN is appended to metric samples as
    labels for easier filtering and grouping of resources.
  - add query_sample collector for postgres (@gaantunes)
  - add schema_table collector for postgres (@fridgepoet)
  - include server_id label on logs and metrics (@matthewnolf)
  - Add otelcol.receiver.googlecloudpubsub community component to
    receive metrics, traces, and logs from Google Cloud Pub/Sub
    subscription. (@eraac)
  - (Experimental) Add a honor_metadata configuration argument to
    the prometheus.scrape component.  When set to true, it will
    propagate metric metadata to downstream components.
  - Add a flag to pyroscope.ebpf alloy configuration to set the
    off-cpu profiling threshold. (@luweglarz)
  - Add encoding.url_encode and encoding.url_decode std lib
    functions. (@kalleep)
  * Security:
  - CVE-2025-58058: Removed dependency on vulnerable
    github.com/ulikunitz/xz (bsc#1248960)
  - CVE-2025-11065: Fixed sensitive information leak in logs
    (bsc#1250621)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1760356800">- update to 1.11.2 (1.11.1 was not released):
  * Bugfixes
  - Fix potential deadlock in loki.source.journal when stopping
    or reloading the component. (@thampiotr)
  - Honor sync timeout when waiting for network availability for
    prometheus.operator.* components. (@dehaansa)
  - Fix prometheus.exporter.cloudwatch to not always emit debug
    logs but respect debug property. (@kalleep)
  - Fix an issue where component shutdown could block
    indefinitely by adding a warning log message and a deadline
    of 10 minutes. The deadline can be configured with the
  - -feature.component-shutdown-deadline flag if the default is
    not suitable. (@thampiotr)
  - Fix potential deadlocks in loki.source.file and
    loki.source.journal when component is shutting down.
    (@kalleep, @thampiotr)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1761652800">- update to 1.11.3:
  * Enhancements
  - Schedule new path targets faster in loki.source.file.
    (@kalleep)
  - Add prometheus.static.exporter that exposes metrics specified
    in a text file in Prometheus exposition format. (@kalleep)
  * Bugfixes
  - local.file_match now publish targets faster whenever targets
    in arguments changes. (@kalleep)
  - Fix otelcol.exporter.splunkhec arguments missing documented
    otel_attrs_to_hec_metadata block. (@dehaansa)
  - Support Scrape Protocol specification in CRDS for
    prometheus.operator.* components. (@dehaansa)
  - Fix panic in otelcol.receiver.syslog when no tcp block was
    configured. (@kalleep)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1764936000">- update to 1.12.0:
  * Breaking changes
  - prometheus.exporter.blackbox, prometheus.exporter.snmp and
    prometheus.exporter.statsd now use the component ID instead
    of the hostname as
  - their instance label in their exported metrics. This is a
    consequence of a bug fix that could lead to missing data when
    using the exporter
  - with clustering. If you would like to retain the previous
    behaviour, you can use discovery.relabel with action =
    "replace" rule to
  - set the instance label to sys.env("HOSTNAME"). (@thampiotr)
  * Security
  - CVE-2025-47911: Upgrade golang.org/x/net/html to fix various
    algorithms with quadratic complexity when parsing HTML
    documents (bsc#1251509)
  - CVE-2025-58190: Upgrade golang.org/x/net/html to fix
    excessive memory consumption by `html.ParseFragment` when
    processing specially crafted input (bsc#1251716)
  - CVE-2025-47913: Upgrade golang.org/x/crypto to fix client
    process termination when receiving an unexpected message type
    in response to a key listing or signing request (bsc#1253609)
  * Features
  - (Experimental) Add an otelcol.receiver.cloudflare component
    to receive
  - logs pushed by Cloudflare's LogPush jobs. (@x1unix)
  - (Experimental) Additions to experimental
    database_observability.mysql component:
  - explain_plans
  - collector now changes schema before returning the
    connection to the pool (@cristiangreco)
  - collector now passes queries more permissively, expressly
    to allow queries beginning in with (@rgeyer)
  - enable explain_plans collector by default (@rgeyer)
  - (Experimental) Additions to experimental
    database_observability.postgres component:
  - explain_plans
  - added the explain plan collector (@rgeyer)
  - collector now passes queries more permissively, expressly
    to allow queries beginning in with (@rgeyer)
  - query_samples
  - add user field to wait events within query_samples
    collector (@gaantunes)
  - rework the query samples collector to buffer per-query
    execution state across scrapes and emit finalized entries
    (@gaantunes)
  - process turned idle rows to calculate finalization times
    precisely and emit first seen idle rows (@gaantunes)
  - query_details
  - escape queries coming from pg_stat_statements with quotes
    (@gaantunes)
  - enable explain_plans collector by default (@rgeyer)
  - safely generate server_id when UDP socket used for database
    connection (@matthewnolf)
  - add table registry and include "validated" in parsed table
    name logs (@fridgepoet)
  - Add otelcol.exporter.googlecloudpubsub community component to
    export metrics, traces, and logs to Google Cloud Pub/Sub
    topic. (@eraac)
  - Add structured_metadata_drop stage for loki.process to filter
    structured metadata. (@baurmatt)
  - Send remote config status to the remote server for the
    remotecfg service. (@erikbaranowski)
  - Send effective config to the remote server for the remotecfg
    service. (@erikbaranowski)
  - Add a stat_statements configuration block to the
    prometheus.exporter.postgres component to enable selecting
    both the query ID and the full SQL statement. The new block
    includes one option to enable statement selection, and
    another to configure the maximum length of the statement
    text. (@SimonSerrano)
  - Add truncate stage for loki.process to truncate log entries,
    label values, and structured_metadata values. (@dehaansa)
  - Add u_probe_links &amp; load_probe configuration fields to alloy
    pyroscope.ebpf to extend configuration of the
    opentelemetry-ebpf-profiler to allow uprobe profiling and
    dynamic probing. (@luweglarz)
  - Add verbose_mode configuration fields to alloy pyroscope.ebpf
    to be enable ebpf-profiler verbose mode. (@luweglarz)
  - Add file_match block to loki.source.file for built-in file
    discovery using glob patterns. (@kalleep)
  - Add a regex argument to the structured_metadata stage in
    loki.process to extract labels matching a regular expression.
    (@timonegk)
  - OpenTelemetry Collector dependencies upgraded from v0.134.0
    to v0.139.0. (@dehaansa)
  - All otelcol.receiver.* components leveraging an HTTP server
    can configure HTTP keep alive behavior with
    keep_alives_enabled.
  - All otelcol.exporter.* components providing the
    sending_queue &gt; batch block have default batch values.
  - The otelcol.processor.k8sattributes component has support
    for extracting annotations from k8s jobs and daemonsets.
  - The otelcol.processor.resourcedecetion component supports
    nine new detectors.
  - The otelcol.exporter.kafka component supports partitioning
    logs by trace ID (partition_logs_by_trace_id) and
    configuring default behavior if topic does not exist
    (allow_auto_topic_creation).
  - The otelcol.receiver.kafka component has new configuration
    options max_partition_fetch_size, rack_id, and
    use_leader_epoch.
  - The otelcol.exporter.s3 component has new configuration
    options s3_base_prefix and s3_partition_timezone.
  - The otelcol.processor.servicegraph component now supports
    defining the maximum number of buckets for generated
    exponential histograms.
  - See the upstream
    [core][https://github.com/open-telemetry/opentelemetry-collector/blob/v0.139.0/CHANGELOG.md]
    and
    [contrib][https://github.com/open-telemetry/opentelemetry-collector-contrib/blob/v0.139.0/CHANGELOG.md]
    changelogs for more details.
  - A new mimir.alerts.kubernetes component which discovers
    AlertmanagerConfig Kubernetes resources and loads them into a
    Mimir instance. (@ptodev)
  - Mark stage.windowsevent block in the loki.process component
    as GA. (@kgeckhart)
  * Enhancements
  - Add per-application rate limiting with the strategy attribute
    in the faro.receiver component, to prevent one application
    from consuming the rate limit quota of others. (@hhertout)
  - Add support of tls in components
    loki.source.(awsfirehose|gcplog|heroku|api) and
    prometheus.receive_http and pyroscope.receive_http.
    (@fgouteroux)
  - Remove SendSIGKILL=no from unit files and recommendations
    (@oleg-kozlyuk-grafana)
  - Reduce memory overhead of prometheus.remote_write's WAL by
    lowering the size of the allocated series storage.
    (@kgeckhart)
  - Reduce lock wait/contention on the labelstore.LabelStore by
    removing unecessary usage from prometheus.relabel.
    (@kgeckhart)
  - prometheus.exporter.postgres dependency has been updated to
    v0.18.1. This includes new stat_progress_vacuum and
    buffercache_summary collectors, as well as other bugfixes and
    enhancements. (@cristiangreco)
  - Update Beyla component to 2.7.8. (@grcevski)
  - Support delimiters in stage.luhn. (@dehaansa)
  - pyroscope.java: update async-profiler to 4.2
    (@korniltsev-grafanista)
  - Improve debug info output from exported receivers (loki,
    prometheus and pyroscope). (@kalleep)
  - prometheus.exporter.unix: Add an arp config block to
    configure the ARP collector. (@ptodev)
  - prometheus.exporter.snowflake dependency has been updated to
    20251016132346-6d442402afb2, which updates data ownership
    queries to use last_over_time for a 24 hour period.
    (@Dasomeone)
  - loki.source.podlogs now supports preserve_discovered_labels
    parameter to preserve discovered pod metadata labels for use
    by downstream components. (@QuentinBisson)
  - Rework underlying framework of Alloy UI to use Vite instead
    of Create React App. (@jharvey10)
  - Use POST requests for remote config requests to avoid hitting
    http2 header limits. (@tpaschalis)
  - loki.source.api during component shutdown will now reject all
    the inflight requests with status code 503 after
    graceful_shutdown_timeout has expired. (@kalleep)
  - kubernetes.discovery Add support for attaching namespace
    metadata. (@kgeckhart)
  - Add meta_cache_address to beyla.ebpf component. (@skl)
  * Bugfixes
  - Stop loki.source.kubernetes discarding log lines with
    duplicate timestamps. (@ciaranj)
  - Fix direction of arrows for pyroscope components in UI graph.
    (@dehaansa)
  - Only log EOF errors for syslog port investigations in
    loki.source.syslog as Debug, not Warn. (@dehaansa)
  - Fix prometheus.exporter.process ignoring the
    remove_empty_groups argument. (@mhamzahkhan)
  - Fix issues with "unknown series ref when trying to add
    exemplar" from prometheus.remote_write by allowing series ref
    links to be updated if they change. (@kgeckhart)
  - Fix loki.source.podlogs component to register the Kubernetes
    field index for spec.nodeName when node filtering is enabled,
    preventing "Index with name field:spec.nodeName does not
    exist" errors. (@QuentinBisson)
  - Fix issue in loki.source.file where scheduling files could
    take too long. (@kalleep)
  - Fix loki.write no longer includes internal labels __.
    (@matt-gp)
  - Fix missing native histograms custom buckets (NHCB) samples
    from prometheus.remote_write. (@krajorama)
  - otelcol.receiver.prometheus now supports mixed histograms if
    prometheus.scrape has honor_metadata set to true. (@ptodev)
  - A mixed histogram is one which has both classic and
    exponential buckets.
  - loki.source.file has better support for non-UTF-8 encoded
    files. (@ptodev)
  - A BOM will be taken into account if the file is UTF-16
    encoded and encoding is set to UTF-16. (Not UTF-16BE or
    UTF-16LE)
  - The carriage return symbol in Windows log files with CLRF
    endings will no longer be part of the log line.
  - These bugs used to cause some logs to show up with Chinese
    characters. Notably, this would happen on MSSQL UTF-16 LE
    logs.
  - Fix the loki.write endpoint block's enable_http2 attribute to
    actually affect the client. HTTP2 was previously disabled
    regardless of configuration. (@dehaansa)
  - Optionally remove trailing newlines before appending entries
    in stage.multiline. (@dehaansa)
  - loki.source.api no longer drops request when relabel rules
    drops a specific stream. (@kalleep)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1765886400">- update to 1.12.1:
  * Bug Fixes
  - update to Beyla 2.7.10 (#5019) (c149393) (@rafaelroquetto)</changelog>
</package>
<package pkgid="b8976537c3c6a12dfad349c1cf5d31d7cbb479de1e7d477148e4af247df029c1" name="alloy" arch="src">
  <version epoch="0" ver="1.12.2" rel="150700.15.15.1"/>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1742558400">- update to 1.7.5:
  * Notable changes:
  - Set zstd as default compression for prometheus.write.queue.
    (@mattdurham)
    Though technically an enhancement this was causing trouble in
    disk io constrained environments. Zstd provides almost double
    the compression with little additional cpu overhead.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1744200000">- update to 1.8.0:
  * Breaking changes
  - Removed open_port and executable_name from top level
    configuration of Beyla component. Removed enabled argument
    from network block. (@marctc)
  - Breaking changes from the OpenTelemetry Collector v0.122
    update: (@wildum)
  - otelcol.exporter.splunkhec: min_size_items and
    max_size_items were replaced by min_size, max_size and
    sizer in the batcher block to allow users to configure the
    size of the batch in a more flexible way.
  - The telemetry level of Otel components is no longer
    configurable. The level argument in the debug_metrics block
    is kept to avoid breaking changes but it is not used
    anymore.
  - otelcol.processor.tailsampling changed the unit of the
    decision timer metric from microseconds to milliseconds.
    (change unit of
    otelcol_processor_tail_sampling_sampling_decision_timer_latency)
  - otelcol.processor.deltatocumulative: rename
    otelcol_deltatocumulative_datapoints_processed to
    otelcol_deltatocumulative_datapoints and remove the metrics
    otelcol_deltatocumulative_streams_evicted,
    otelcol_deltatocumulative_datapoints_dropped and
    otelcol_deltatocumulative_gaps_length.
  - The regex attribute was removed from
    otelcol.processor.k8sattributes. The extract-patterns
    function from otelcol.processor.transform can be used
    instead.
  - The default value of metrics_flush_interval in
    otelcol.connector.servicegraph was changed from 0s to 60s.
  - s3_partition in otelcol.exporter.awss3 was replaced by
    s3_partition_format.
  - (Experimental) prometheus.write.queue metric names changed to
    align better with prometheus standards. (@mattdurham)
  * Features
  - Add otelcol.receiver.awscloudwatch component to receive logs
    from AWS CloudWatch and forward them to other otelcol.*
    components. (@wildum)
  - Add loki.enrich component to enrich logs using labels from
    discovery.* components. (@v-zhuravlev)
  - Add string concatenation for secrets type (@ravishankar15)
  - Add support for environment variables to OpenTelemetry
    Collector config. (@jharvey10)
  - Replace graph in Alloy UI with a new version that supports
    modules and data flow visualization. (@wildum)
  - Added --cluster.wait-for-size and --cluster.wait-timeout
    flags which allow to specify the minimum cluster size
    required before components that use clustering begin
    processing traffic to ensure adequate cluster capacity is
    available. (@thampiotr)
  - Add trace_printer to beyla.ebpf component to print trace
    information in a specific format. (@marctc)
  - Add support for live debugging and graph in the UI for
    components imported via remotecfg. (@wildum)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1744372800">- update to 1.8.1:
  * Bugfixes
  - rfc3164_default_to_current_year argument was not fully added to
    loki.source.syslog (@dehaansa)
  - Fix issue with remoteCfg service stopping immediately and
    logging noop error if not configured (@dehaansa)
  - Fix potential race condition in remoteCfg service metrics
    registration (@kalleep)
  - Fix panic in prometheus.exporter.postgres when using minimal url
    as data source name. (@kalleep)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1744718400">- update to 1.8.1^20250410d23d30f49 (jsc#PED-12282):
  * Update github.com/hashicorp/vault/api to 1.16.0</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1745496000">- update to 1.8.2:
  Bugfixes
  * Fix otelcol.exporter.prometheus dropping valid
    exemplars. (@github-vincent-miszczak)
  * Fix loki.source.podlogs not adding labels
    __meta_kubernetes_namespace and
    __meta_kubernetes_pod_label_*. (@kalleep)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1746446400">- update to 1.8.3:
  Bugfixes
  * Fix mimir.rules.kubernetes panic on non-leader debug info
    retrieval (@TheoBrigitte)
  * Fix detection of the “streams limit exceeded” error in the Loki
    client so that metrics are correctly labeled as
    ReasonStreamLimited. (@maratkhv)
  * Fix loki.source.file race condition that often lead to panic when
    using decompression. (@kalleep)
  * Fix deadlock in loki.source.file that can happen when targets are
    removed. (@kalleep)
  * Fix loki.process to emit valid logfmt. (@kalleep)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1748865600">- update to 1.9.0:
  Breaking changes
  * The prometheus.exporter.windows component has been update to
    version v0.30.6. This update includes a significant rework of
    the exporter and includes some breaking changes. (@dehaansa)
    The msmq and service collectors can no longer be configured
    with a WMI where clause. Any filtering previously done in a
    where clause will need to be done in a prometheus.relabel
    component.
    The service collector no longer provides enable_v2_collector
    and use_api configuration options.
    The mscluster_* and netframework_* collectors are now replaced
    with one mscluster and netframework collector that allows you
    to enable the separate metric groupings individually.
    The teradici_pcoip and vmware_blast collectors have been
    removed from the exporter.
  * The prometheus.exporter.oracledb component now embeds the
    oracledb_exporter from oracle instead of the deprecated
    oracledb_exporter from iamseth for collecting metrics from an
    OracleDB server: (@wildum)
    The arguments username, password, default_metrics, and
    custom_metrics are now supported.
    The previously undocumented argument custom_metrics is now
    expecting a list of paths to custom metrics files.
    The following metrics are no longer available by default:
    oracledb_sessions_activity, oracledb_tablespace_free_bytes
    (Experimental) The enable_context_propagation argument in
    beyla.ebpf has been replaced with the context_propagation
    argument.
  * Set enable_context_propagation to all to get the same behaviour
    as enable_context_propagation being set to true.
  Security
  * CVE-2025-22872: Fix tokenizer incorrectly interpretting tags
    (bsc#1241863).
  * CVE-2025-46327: Fix race condition when checking access
    permissions to the Easy Logging configuration file
    (bsc#1242020).
  Features
  * Bump snmp_exporter and embedded modules in
    prometheus.exporter.snmp to v0.29.0, add cisco_device module
    support (@v-zhuravlev)
  * Add the otelcol.storage.file extension to support persistent
    sending queues and otelcol.receiver.filelog file state tracking
    between restarts. (@dehaansa)
  * Add otelcol.exporter.googlecloud community component to export
    metrics, traces, and logs to Google Cloud. (@motoki317)
  * Add support to configure basic authentication for alloy http
    server. (@kalleep)
  * Add validate command to alloy that will perform limited
    validation of alloy configuration files. (@kalleep)
  * Add support to validate foreach block when using validate
    command. (@kalleep)
  * Add otelcol.receiver.splunkhec component to receive events in
    splunk hec format and forward them to other otelcol.*
    components. (@kalleep)
  * Add support for Mimir federated rule groups in
    mimir.rules.kubernetes (@QuentinBisson)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1749124800">- update to 1.9.1:
  Bugfixes
  * Update the prometheus.exporter.windows component to version
    v0.30.7. This fixes an error with the exchange collector and
    terminal_services collector (@dehaansa)
  * Fix loki.source.firehose to propagate specific cloudwatch event
    timestamps when useIncomingTs is set to true. (@michaelPotter)
  * Fix elevated CPU usage when using some otelcol components due to
    debug logging. (@thampiotr)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1751284800">- update to 1.9.2:
  * Bugfixes
  - Send profiles concurrently from pyroscope.ebpf. (@korniltsev)
  - Fix the validate command not understanding the livedebugging
    block. (@dehaansa)
  - Fix invalid class names in python profiles obtained with
    pyroscope.ebpf. (@korniltsev)
  - Fixed a bug which prevented non-secret optional secrets to be
    passed in as number arguments. (@ptodev)
  - For CRD-based components (prometheus.operator.*), retry
    initializing informers if the apiserver request fails. This
    rectifies issues where the apiserver is not reachable
    immediately after node restart. (@dehaansa)
  * Other changes
  - Add no-op blocks and attributes to the
    prometheus.exporter.windows component (@ptodev).
    Version 1.9.0 of Alloy removed the msmq block, as well as the
    enable_v2_collector, where_clause, and use_api attributes in
    the service block.
    This made it difficult for users to upgrade, so those
    attributes have now been made a no-op instead of being
    removed.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1751889600">- Install default configuration file</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1752753600">- update to 1.10.0:
  Breaking changes
  * Removing the nanoserver-1809 container image for Windows 2019.
    (@ptodev)
  * This is due to the deprecation of windows-2019 GitHub Actions
    runners.
  * The windowsservercore-ltsc2022 Alloy image is still being
    published to DockerHub.
  Bugfixes
  * Upgrade otelcol components from OpenTelemetry v0.126.0 to
    v0.128.0 (@korniltsev, @dehaansa)
    [otelcol.exporter.kafka]: Allow kafka exporter to produce to
    topics based on metadata key values.
    [otelcol.receiver.kafka]: Enforce a backoff mechanism on
    non-permanent errors, such as when the queue is full.
    [otelcol.receiver.kafka]: Don't restart the Kafka consumer on
    failed errors when message marking is enabled for them.
    [otelcol.connector.spanmetrics]: Fix bug causing span metrics
    calls count to be always 0 when using delta temporality.
  Features
  * (Experimental) Add an array.group_by stdlib function to group
    items in an array by a key. (@wildum)
  * Add the otelcol.exporter.faro exporter to export traces and
    logs to Faro endpoint. (@mar4uk)
  * Add the otelcol.receiver.faro receiver to receive traces and
    logs from the Grafana Faro Web SDK. (@mar4uk)
  * Add entropy support for loki.secretfilter (@romain-gaillard)
  Enhancements
  * Add hash_string_id argument to foreach block to hash the string
    representation of the pipeline id instead of using the string
    itself. (@wildum)
  * (Experimental) Additions to experimental
    database_observability.mysql component:
    Add explain_plan collector to database_observability.mysql
    component. (@rgeyer) locks: addition of data locks collector
    (@gaantunes @fridgepoet) Query sample collector is now enabled
    by default (@matthewnolf)
  * (Experimental) prometheus.write.queue add support for
    exemplars. (@dehaansa)
  * Wire in survey block for beyla.ebpf component. (@grcevski,
    @tpaschalis)
  * Upgrade otelcol components from OpenTelemetry v0.126.0 to
    v0.128.0 (@korniltsev, @dehaansa)
    [otelcol.processor.resourcedetection]: Add additional OS
    properties to resource detection: os.build.id and os.name.
    [otelcol.processor.resourcedetection]: Add host.interface
    resource attribute to system detector.
    [otelcol.exporter.kafka]: Fix Snappy compression codec support
    for the Kafka exporter.  [otelcol.receiver.filelog]: Introduce
    utf8-raw encoding to avoid replacing invalid bytes with \uFFFD
    when reading UTF-8 input.  [otelcol.processor.k8sattributes]:
    Support extracting labels and annotations from k8s
    Deployments.  [otelcol.processor.k8sattributes]: Add option to
    configure automatic service resource attributes.
    [otelcol.exporter.datadog]: Adds hostname_detection_timeout
    configuration option for Datadog Exporter and sets default to
    25 seconds.  [otelcol.receiver.datadog]: Address semantic
    conventions noncompliance and add support for http/db.
    [otelcol.exporter.awss3]: Add the retry mode, max attempts and
    max backoff to the settings.
  * Add support for conditions and statement-specific error_mode in
    otelcol.processor.transform. (@ptodev)
  * Add storage and start_from args to cloudwatch logs receiver.
    (@boernd)
  Bugfixes
  * Fix extension registration for otelcol.receiver.splunkhec auth
    extensions. (@dehaansa)
  Other changes
  * Mark pyroscope.receive_http and pyroscope.relabel components as
    GA. (@marcsanmi)
  * Upgrade otelcol.exporter.windows to v0.30.8 to get bugfixes and
    fix update collector support. (@dehaansa)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1754568000">- update to 1.10.1:
  Full list of changes:
  https://github.com/grafana/alloy/blob/v1.10.1/CHANGELOG.md#v1101
  * Bugfixes
  - Fix issue with faro.receiver cors not allowing X-Scope-OrgID
    and traceparent headers. (@mar4uk)
  - Fix issues with propagating cluster peers change
    notifications to components configured with remotecfg.
    (@dehaansa)
  - Fix issues with statistics reporter not including components
    only configured with remotecfg. (@dehaansa)
  - Fix issues with prometheus.exporter.windows not propagating
    dns collector config. (@dehaansa)
  - Fixed a bug in prometheus.write.queue which caused retries
    even when max_retry_attempts was set to 0. (@ptodev)
  - Fixed a bug in prometheus.write.queue which caused labelling
    issues when providing more than one label in external_labels.
    (@dehaansa)
  - Add application_host and network_inter_zone features to
    beyla.ebpf component. (@marctc)
  - Fix issues in loki.process where stage.multiline did not pass
    through structured metadata. (@jan-mrm)
  - Fix URLs in the Windows installer being wrapped in quotes.
    (@martincostello)
  - Fixed an issue where certain otelcol.* components could
    prevent Alloy from shutting down when provided invalid
    configuration. (@thampiotr)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1755691200">- update to 1.10.2:
  Full list of changes:
  https://github.com/grafana/alloy/blob/v1.10.2/CHANGELOG.md#v1102
  * Bugfixes
  - Fix issue in prometheus.write.queue causing inability to
    increase shard count if existing WAL data was present on
    start. (@kgeckhart)
  - Fix issue with loki.source.gcplog when push messages sent by gcp
    pub/sub only includes messageId. (@kalleep)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1759492800">- update to 1.11.0:
  Full list of changes:
  https://github.com/grafana/alloy/blob/v1.11.0/CHANGELOG.md#v1110
  * Breaking changes
  - Prometheus dependency had a major version upgrade from
    v2.55.1 to v3.4.2. (@thampiotr)
  - The . pattern in regular expressions in PromQL matches
    newline characters now. With this change a regular
    expressions like .* matches strings that include \n. This
    applies to matchers in queries and relabel configs in
    Prometheus and Loki components.
  - The enable_http2 in prometheus.remote_write component's
    endpoints has been changed to false by default.
    Previously, in Prometheus v2 the remote write http client
    would default to use http2. In order to parallelize
    multiple remote write queues across multiple sockets its
    preferable to not default to http2. If you prefer to use
    http2 for remote write you must now set enable_http2 to
    true in your prometheus.remote_write endpoints
    configuration section.
  - The experimental CLI flag
  - -feature.prometheus.metric-validation-scheme has been
    deprecated and has no effect. You can configure the metric
    validation scheme individually for each prometheus.scrape
    component.
  - Log message format has changed for some of the prometheus.*
    components as part of the upgrade to Prometheus v3.
  - The values of the le label of classic histograms and the
    quantile label of summaries are now normalized upon
    ingestion. In previous Alloy versions, that used Prometheus
    v2, the value of these labels depended on the scrape
    protocol (protobuf vs text format) in some situations. This
    led to label values changing based on the scrape protocol.
    E.g. a metric exposed as my_classic_hist{le="1"} would be
    ingested as my_classic_hist{le="1"} via the text format,
    but as my_classic_hist{le="1.0"} via protobuf. This changed
    the identity of the metric and caused problems when
    querying the metric. In current Alloy release, which uses
    Prometheus v3, these label values will always be normalized
    to a float like representation. I.e. the above example will
    always result in my_classic_hist{le="1.0"} being ingested
    into Prometheus, no matter via which protocol. The effect
    of this change is that alerts, recording rules and
    dashboards that directly reference label values as whole
    numbers such as le="1" will stop working.  The recommended
    way to deal with this change is to fix references to
    integer le and quantile label values, but otherwise do
    nothing and accept that some queries that span the
    transition time will produce inaccurate or unexpected
    results.
    See the upstream Prometheus v3 migration guide for more details.
  - prometheus.exporter.windows dependency has been updated to
    v0.31.1. (@dehaansa)
  - There are various renamed metrics and two removed
    collectors (cs, logon).
  - scrape_native_histograms attribute for prometheus.scrape is
    now set to false, whereas in previous versions of Alloy it
    would default to true. This means that it is no longer enough
    to just configure scrape_protocols to start with
    PrometheusProto to scrape native histograms -
    scrape_native_histograms has to be enabled. If
    scrape_native_histograms is enabled, scrape_protocols will
    automatically be configured correctly for you to include
    PrometheusProto. If you configure it explicitly, Alloy will
    validate that PrometheusProto is in the scrape_protocols
    list.
  - Add otel_attrs_to_hec_metadata configuration block to
    otelcol.exporter.splunkhec to match
    otelcol.receiver.splunkhec. (@cgetzen)
  - [otelcol.processor.batch] Two arguments have different
    default values. (@ptodev)
  - send_batch_size is now set to 2000 by default. It used to
    be 8192.
  - send_batch_max_size is now set to 3000 by default. It used
    to be 0.
  - This helps prevent issues with ingestion of batches that
    are too large.
  - OpenTelemetry Collector dependencies upgraded from v0.128.0
    to v0.134.0. (@ptodev)
  - The otelcol.receiver.opencensus component has been
    deprecated and will be removed in a future release, use
    otelcol.receiver.otelp instead.
  - [otelcol.exporter.*] The deprecated blocking argument in
    the sending_queue block has been removed.  Use
    block_on_overflow instead.
  - [otelcol.receiver.kafka, otelcol.exporter.kafka]: Removed
    the broker_addr argument from the aws_msk block.  Also
    removed the SASL/AWS_MSK_IAM authentication mechanism.
  - [otelcol.exporter.splunkhec] The batcher block is
    deprecated and will be removed in a future release. Use the
    queue block instead.
  - [otelcol.exporter.loadbalancing] Use a linear probe to
    decrease variance caused by hash collisions, which was
    causing a non-uniform distribution of loadbalancing.
  - [otelcol.connector.servicegraph] The
    database_name_attribute argument has been removed.
  - [otelcol.connector.spanmetrics] Adds a default maximum
    number of exemplars within the metric export interval.
  - [otelcol.processor.tail_sampling] Add a new
    block_on_overflow config attribute.
  * Features
  - Add the otelcol.receiver.fluentforward receiver to receive
    logs via Fluent Forward Protocol. (@rucciva)
  - Add the prometheus.enrich component to enrich metrics using
    labels from discovery.* components. (@ArkovKonstantin)
  - Add node_filter configuration block to loki.source.podlogs
    component to enable node-based filtering for pod discovery.
    When enabled, only pods running on the specified node will be
    discovered and monitored, significantly reducing API server
    load and network traffic in DaemonSet deployments.
    (@QuentinBisson)
  - (Experimental) Additions to experimental
    database_observability.mysql component:
  - query_sample collector now supports auto-enabling the
    necessary setup_consumers settings (@cristiangreco)
  - query_sample collector is now compatible with mysql less
    than 8.0.28 (@cristiangreco)
  - include server_id label on log entries (@matthewnolf)
  - support receiving targets argument and relabel those to
    include server_id (@matthewnolf)
  - updated the config blocks and documentation
    (@cristiangreco)
  - (Experimental) Additions to experimental
    database_observability.postgres component:
  - add query_tables collector for postgres (@matthewnolf)
  - add cloud_provider.aws configuration that enables
    optionally supplying the ARN of the database under
    observation. The ARN is appended to metric samples as
    labels for easier filtering and grouping of resources.
  - add query_sample collector for postgres (@gaantunes)
  - add schema_table collector for postgres (@fridgepoet)
  - include server_id label on logs and metrics (@matthewnolf)
  - Add otelcol.receiver.googlecloudpubsub community component to
    receive metrics, traces, and logs from Google Cloud Pub/Sub
    subscription. (@eraac)
  - (Experimental) Add a honor_metadata configuration argument to
    the prometheus.scrape component.  When set to true, it will
    propagate metric metadata to downstream components.
  - Add a flag to pyroscope.ebpf alloy configuration to set the
    off-cpu profiling threshold. (@luweglarz)
  - Add encoding.url_encode and encoding.url_decode std lib
    functions. (@kalleep)
  * Security:
  - CVE-2025-58058: Removed dependency on vulnerable
    github.com/ulikunitz/xz (bsc#1248960)
  - CVE-2025-11065: Fixed sensitive information leak in logs
    (bsc#1250621)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1760356800">- update to 1.11.2 (1.11.1 was not released):
  * Bugfixes
  - Fix potential deadlock in loki.source.journal when stopping
    or reloading the component. (@thampiotr)
  - Honor sync timeout when waiting for network availability for
    prometheus.operator.* components. (@dehaansa)
  - Fix prometheus.exporter.cloudwatch to not always emit debug
    logs but respect debug property. (@kalleep)
  - Fix an issue where component shutdown could block
    indefinitely by adding a warning log message and a deadline
    of 10 minutes. The deadline can be configured with the
  - -feature.component-shutdown-deadline flag if the default is
    not suitable. (@thampiotr)
  - Fix potential deadlocks in loki.source.file and
    loki.source.journal when component is shutting down.
    (@kalleep, @thampiotr)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1761652800">- update to 1.11.3:
  * Enhancements
  - Schedule new path targets faster in loki.source.file.
    (@kalleep)
  - Add prometheus.static.exporter that exposes metrics specified
    in a text file in Prometheus exposition format. (@kalleep)
  * Bugfixes
  - local.file_match now publish targets faster whenever targets
    in arguments changes. (@kalleep)
  - Fix otelcol.exporter.splunkhec arguments missing documented
    otel_attrs_to_hec_metadata block. (@dehaansa)
  - Support Scrape Protocol specification in CRDS for
    prometheus.operator.* components. (@dehaansa)
  - Fix panic in otelcol.receiver.syslog when no tcp block was
    configured. (@kalleep)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1764936000">- update to 1.12.0:
  * Breaking changes
  - prometheus.exporter.blackbox, prometheus.exporter.snmp and
    prometheus.exporter.statsd now use the component ID instead
    of the hostname as
  - their instance label in their exported metrics. This is a
    consequence of a bug fix that could lead to missing data when
    using the exporter
  - with clustering. If you would like to retain the previous
    behaviour, you can use discovery.relabel with action =
    "replace" rule to
  - set the instance label to sys.env("HOSTNAME"). (@thampiotr)
  * Security
  - CVE-2025-47911: Upgrade golang.org/x/net/html to fix various
    algorithms with quadratic complexity when parsing HTML
    documents (bsc#1251509)
  - CVE-2025-58190: Upgrade golang.org/x/net/html to fix
    excessive memory consumption by `html.ParseFragment` when
    processing specially crafted input (bsc#1251716)
  - CVE-2025-47913: Upgrade golang.org/x/crypto to fix client
    process termination when receiving an unexpected message type
    in response to a key listing or signing request (bsc#1253609)
  - CVE-2025-31133, CVE-2025-52565, and CVE-2025-52881: Update
    github.com/opencontainers/runc to fix container breakouts by
    bypassing runc's restrictions for writing to arbitrary /proc
    files (bsc#1255074)
  * Features
  - (Experimental) Add an otelcol.receiver.cloudflare component
    to receive
  - logs pushed by Cloudflare's LogPush jobs. (@x1unix)
  - (Experimental) Additions to experimental
    database_observability.mysql component:
  - explain_plans
  - collector now changes schema before returning the
    connection to the pool (@cristiangreco)
  - collector now passes queries more permissively, expressly
    to allow queries beginning in with (@rgeyer)
  - enable explain_plans collector by default (@rgeyer)
  - (Experimental) Additions to experimental
    database_observability.postgres component:
  - explain_plans
  - added the explain plan collector (@rgeyer)
  - collector now passes queries more permissively, expressly
    to allow queries beginning in with (@rgeyer)
  - query_samples
  - add user field to wait events within query_samples
    collector (@gaantunes)
  - rework the query samples collector to buffer per-query
    execution state across scrapes and emit finalized entries
    (@gaantunes)
  - process turned idle rows to calculate finalization times
    precisely and emit first seen idle rows (@gaantunes)
  - query_details
  - escape queries coming from pg_stat_statements with quotes
    (@gaantunes)
  - enable explain_plans collector by default (@rgeyer)
  - safely generate server_id when UDP socket used for database
    connection (@matthewnolf)
  - add table registry and include "validated" in parsed table
    name logs (@fridgepoet)
  - Add otelcol.exporter.googlecloudpubsub community component to
    export metrics, traces, and logs to Google Cloud Pub/Sub
    topic. (@eraac)
  - Add structured_metadata_drop stage for loki.process to filter
    structured metadata. (@baurmatt)
  - Send remote config status to the remote server for the
    remotecfg service. (@erikbaranowski)
  - Send effective config to the remote server for the remotecfg
    service. (@erikbaranowski)
  - Add a stat_statements configuration block to the
    prometheus.exporter.postgres component to enable selecting
    both the query ID and the full SQL statement. The new block
    includes one option to enable statement selection, and
    another to configure the maximum length of the statement
    text. (@SimonSerrano)
  - Add truncate stage for loki.process to truncate log entries,
    label values, and structured_metadata values. (@dehaansa)
  - Add u_probe_links &amp; load_probe configuration fields to alloy
    pyroscope.ebpf to extend configuration of the
    opentelemetry-ebpf-profiler to allow uprobe profiling and
    dynamic probing. (@luweglarz)
  - Add verbose_mode configuration fields to alloy pyroscope.ebpf
    to be enable ebpf-profiler verbose mode. (@luweglarz)
  - Add file_match block to loki.source.file for built-in file
    discovery using glob patterns. (@kalleep)
  - Add a regex argument to the structured_metadata stage in
    loki.process to extract labels matching a regular expression.
    (@timonegk)
  - OpenTelemetry Collector dependencies upgraded from v0.134.0
    to v0.139.0. (@dehaansa)
  - All otelcol.receiver.* components leveraging an HTTP server
    can configure HTTP keep alive behavior with
    keep_alives_enabled.
  - All otelcol.exporter.* components providing the
    sending_queue &gt; batch block have default batch values.
  - The otelcol.processor.k8sattributes component has support
    for extracting annotations from k8s jobs and daemonsets.
  - The otelcol.processor.resourcedecetion component supports
    nine new detectors.
  - The otelcol.exporter.kafka component supports partitioning
    logs by trace ID (partition_logs_by_trace_id) and
    configuring default behavior if topic does not exist
    (allow_auto_topic_creation).
  - The otelcol.receiver.kafka component has new configuration
    options max_partition_fetch_size, rack_id, and
    use_leader_epoch.
  - The otelcol.exporter.s3 component has new configuration
    options s3_base_prefix and s3_partition_timezone.
  - The otelcol.processor.servicegraph component now supports
    defining the maximum number of buckets for generated
    exponential histograms.
  - See the upstream
    [core][https://github.com/open-telemetry/opentelemetry-collector/blob/v0.139.0/CHANGELOG.md]
    and
    [contrib][https://github.com/open-telemetry/opentelemetry-collector-contrib/blob/v0.139.0/CHANGELOG.md]
    changelogs for more details.
  - A new mimir.alerts.kubernetes component which discovers
    AlertmanagerConfig Kubernetes resources and loads them into a
    Mimir instance. (@ptodev)
  - Mark stage.windowsevent block in the loki.process component
    as GA. (@kgeckhart)
  * Enhancements
  - Add per-application rate limiting with the strategy attribute
    in the faro.receiver component, to prevent one application
    from consuming the rate limit quota of others. (@hhertout)
  - Add support of tls in components
    loki.source.(awsfirehose|gcplog|heroku|api) and
    prometheus.receive_http and pyroscope.receive_http.
    (@fgouteroux)
  - Remove SendSIGKILL=no from unit files and recommendations
    (@oleg-kozlyuk-grafana)
  - Reduce memory overhead of prometheus.remote_write's WAL by
    lowering the size of the allocated series storage.
    (@kgeckhart)
  - Reduce lock wait/contention on the labelstore.LabelStore by
    removing unecessary usage from prometheus.relabel.
    (@kgeckhart)
  - prometheus.exporter.postgres dependency has been updated to
    v0.18.1. This includes new stat_progress_vacuum and
    buffercache_summary collectors, as well as other bugfixes and
    enhancements. (@cristiangreco)
  - Update Beyla component to 2.7.8. (@grcevski)
  - Support delimiters in stage.luhn. (@dehaansa)
  - pyroscope.java: update async-profiler to 4.2
    (@korniltsev-grafanista)
  - Improve debug info output from exported receivers (loki,
    prometheus and pyroscope). (@kalleep)
  - prometheus.exporter.unix: Add an arp config block to
    configure the ARP collector. (@ptodev)
  - prometheus.exporter.snowflake dependency has been updated to
    20251016132346-6d442402afb2, which updates data ownership
    queries to use last_over_time for a 24 hour period.
    (@Dasomeone)
  - loki.source.podlogs now supports preserve_discovered_labels
    parameter to preserve discovered pod metadata labels for use
    by downstream components. (@QuentinBisson)
  - Rework underlying framework of Alloy UI to use Vite instead
    of Create React App. (@jharvey10)
  - Use POST requests for remote config requests to avoid hitting
    http2 header limits. (@tpaschalis)
  - loki.source.api during component shutdown will now reject all
    the inflight requests with status code 503 after
    graceful_shutdown_timeout has expired. (@kalleep)
  - kubernetes.discovery Add support for attaching namespace
    metadata. (@kgeckhart)
  - Add meta_cache_address to beyla.ebpf component. (@skl)
  * Bugfixes
  - Stop loki.source.kubernetes discarding log lines with
    duplicate timestamps. (@ciaranj)
  - Fix direction of arrows for pyroscope components in UI graph.
    (@dehaansa)
  - Only log EOF errors for syslog port investigations in
    loki.source.syslog as Debug, not Warn. (@dehaansa)
  - Fix prometheus.exporter.process ignoring the
    remove_empty_groups argument. (@mhamzahkhan)
  - Fix issues with "unknown series ref when trying to add
    exemplar" from prometheus.remote_write by allowing series ref
    links to be updated if they change. (@kgeckhart)
  - Fix loki.source.podlogs component to register the Kubernetes
    field index for spec.nodeName when node filtering is enabled,
    preventing "Index with name field:spec.nodeName does not
    exist" errors. (@QuentinBisson)
  - Fix issue in loki.source.file where scheduling files could
    take too long. (@kalleep)
  - Fix loki.write no longer includes internal labels __.
    (@matt-gp)
  - Fix missing native histograms custom buckets (NHCB) samples
    from prometheus.remote_write. (@krajorama)
  - otelcol.receiver.prometheus now supports mixed histograms if
    prometheus.scrape has honor_metadata set to true. (@ptodev)
  - A mixed histogram is one which has both classic and
    exponential buckets.
  - loki.source.file has better support for non-UTF-8 encoded
    files. (@ptodev)
  - A BOM will be taken into account if the file is UTF-16
    encoded and encoding is set to UTF-16. (Not UTF-16BE or
    UTF-16LE)
  - The carriage return symbol in Windows log files with CLRF
    endings will no longer be part of the log line.
  - These bugs used to cause some logs to show up with Chinese
    characters. Notably, this would happen on MSSQL UTF-16 LE
    logs.
  - Fix the loki.write endpoint block's enable_http2 attribute to
    actually affect the client. HTTP2 was previously disabled
    regardless of configuration. (@dehaansa)
  - Optionally remove trailing newlines before appending entries
    in stage.multiline. (@dehaansa)
  - loki.source.api no longer drops request when relabel rules
    drops a specific stream. (@kalleep)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1765886400">- update to 1.12.1:
  * Bug Fixes
  - update to Beyla 2.7.10 (#5019) (c149393) (@rafaelroquetto)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1768305600">- update to 1.12.2:
  * Bug Fixes
  - Add missing configuration parameter
    deployment_name_from_replicaset to k8sattributes processor
    (5b90a9d) (@dehaansa)
  - database_observability: Fix schema_details collector to fetch
    column definitions with case sensitive table names (#4872)
    (560dff4) (@jharvey10, @fridgepoet)
  - deps: Update jose2go to 1.7.0 (#4858) (dfdd341) (@jharvey10)
  - deps: Update npm dependencies [backport] (#5201) (8e06c26)
    (@jharvey10)
  - Ensure the squid exporter wrapper properly brackets ipv6
    addresses [backport] (#5205) (e329cc6) (@dehaansa)
  - Preserve meta labels in loki.source.podlogs (#5097) (ab4b21e)
    (@kalleep)
  - Prevent panic in import.git when update fails [backport]
    (#5204) (c82fbae) (@dehaansa, @jharvey10)
  - show correct fallback alloy version instead of v1.13.0
    (#5110) (b72be99) (@dehaansa, @jharvey10)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1768824000">- CVE-2025-68156: Fix potential DoS via unbounded recursion in
  builtin functions (bsc#1255333):
  * Bump github.com/expr-lang/expr to version 1.17.7</changelog>
</package>
<package pkgid="4db692eae0b99be4750e48e913dd9dfa8e96c879a3d9b1eaf66251338353eab1" name="alloy" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="150700.15.15.1"/>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1742558400">- update to 1.7.5:
  * Notable changes:
  - Set zstd as default compression for prometheus.write.queue.
    (@mattdurham)
    Though technically an enhancement this was causing trouble in
    disk io constrained environments. Zstd provides almost double
    the compression with little additional cpu overhead.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1744200000">- update to 1.8.0:
  * Breaking changes
  - Removed open_port and executable_name from top level
    configuration of Beyla component. Removed enabled argument
    from network block. (@marctc)
  - Breaking changes from the OpenTelemetry Collector v0.122
    update: (@wildum)
  - otelcol.exporter.splunkhec: min_size_items and
    max_size_items were replaced by min_size, max_size and
    sizer in the batcher block to allow users to configure the
    size of the batch in a more flexible way.
  - The telemetry level of Otel components is no longer
    configurable. The level argument in the debug_metrics block
    is kept to avoid breaking changes but it is not used
    anymore.
  - otelcol.processor.tailsampling changed the unit of the
    decision timer metric from microseconds to milliseconds.
    (change unit of
    otelcol_processor_tail_sampling_sampling_decision_timer_latency)
  - otelcol.processor.deltatocumulative: rename
    otelcol_deltatocumulative_datapoints_processed to
    otelcol_deltatocumulative_datapoints and remove the metrics
    otelcol_deltatocumulative_streams_evicted,
    otelcol_deltatocumulative_datapoints_dropped and
    otelcol_deltatocumulative_gaps_length.
  - The regex attribute was removed from
    otelcol.processor.k8sattributes. The extract-patterns
    function from otelcol.processor.transform can be used
    instead.
  - The default value of metrics_flush_interval in
    otelcol.connector.servicegraph was changed from 0s to 60s.
  - s3_partition in otelcol.exporter.awss3 was replaced by
    s3_partition_format.
  - (Experimental) prometheus.write.queue metric names changed to
    align better with prometheus standards. (@mattdurham)
  * Features
  - Add otelcol.receiver.awscloudwatch component to receive logs
    from AWS CloudWatch and forward them to other otelcol.*
    components. (@wildum)
  - Add loki.enrich component to enrich logs using labels from
    discovery.* components. (@v-zhuravlev)
  - Add string concatenation for secrets type (@ravishankar15)
  - Add support for environment variables to OpenTelemetry
    Collector config. (@jharvey10)
  - Replace graph in Alloy UI with a new version that supports
    modules and data flow visualization. (@wildum)
  - Added --cluster.wait-for-size and --cluster.wait-timeout
    flags which allow to specify the minimum cluster size
    required before components that use clustering begin
    processing traffic to ensure adequate cluster capacity is
    available. (@thampiotr)
  - Add trace_printer to beyla.ebpf component to print trace
    information in a specific format. (@marctc)
  - Add support for live debugging and graph in the UI for
    components imported via remotecfg. (@wildum)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1744372800">- update to 1.8.1:
  * Bugfixes
  - rfc3164_default_to_current_year argument was not fully added to
    loki.source.syslog (@dehaansa)
  - Fix issue with remoteCfg service stopping immediately and
    logging noop error if not configured (@dehaansa)
  - Fix potential race condition in remoteCfg service metrics
    registration (@kalleep)
  - Fix panic in prometheus.exporter.postgres when using minimal url
    as data source name. (@kalleep)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1744718400">- update to 1.8.1^20250410d23d30f49 (jsc#PED-12282):
  * Update github.com/hashicorp/vault/api to 1.16.0</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1745496000">- update to 1.8.2:
  Bugfixes
  * Fix otelcol.exporter.prometheus dropping valid
    exemplars. (@github-vincent-miszczak)
  * Fix loki.source.podlogs not adding labels
    __meta_kubernetes_namespace and
    __meta_kubernetes_pod_label_*. (@kalleep)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1746446400">- update to 1.8.3:
  Bugfixes
  * Fix mimir.rules.kubernetes panic on non-leader debug info
    retrieval (@TheoBrigitte)
  * Fix detection of the “streams limit exceeded” error in the Loki
    client so that metrics are correctly labeled as
    ReasonStreamLimited. (@maratkhv)
  * Fix loki.source.file race condition that often lead to panic when
    using decompression. (@kalleep)
  * Fix deadlock in loki.source.file that can happen when targets are
    removed. (@kalleep)
  * Fix loki.process to emit valid logfmt. (@kalleep)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1748865600">- update to 1.9.0:
  Breaking changes
  * The prometheus.exporter.windows component has been update to
    version v0.30.6. This update includes a significant rework of
    the exporter and includes some breaking changes. (@dehaansa)
    The msmq and service collectors can no longer be configured
    with a WMI where clause. Any filtering previously done in a
    where clause will need to be done in a prometheus.relabel
    component.
    The service collector no longer provides enable_v2_collector
    and use_api configuration options.
    The mscluster_* and netframework_* collectors are now replaced
    with one mscluster and netframework collector that allows you
    to enable the separate metric groupings individually.
    The teradici_pcoip and vmware_blast collectors have been
    removed from the exporter.
  * The prometheus.exporter.oracledb component now embeds the
    oracledb_exporter from oracle instead of the deprecated
    oracledb_exporter from iamseth for collecting metrics from an
    OracleDB server: (@wildum)
    The arguments username, password, default_metrics, and
    custom_metrics are now supported.
    The previously undocumented argument custom_metrics is now
    expecting a list of paths to custom metrics files.
    The following metrics are no longer available by default:
    oracledb_sessions_activity, oracledb_tablespace_free_bytes
    (Experimental) The enable_context_propagation argument in
    beyla.ebpf has been replaced with the context_propagation
    argument.
  * Set enable_context_propagation to all to get the same behaviour
    as enable_context_propagation being set to true.
  Security
  * CVE-2025-22872: Fix tokenizer incorrectly interpretting tags
    (bsc#1241863).
  * CVE-2025-46327: Fix race condition when checking access
    permissions to the Easy Logging configuration file
    (bsc#1242020).
  Features
  * Bump snmp_exporter and embedded modules in
    prometheus.exporter.snmp to v0.29.0, add cisco_device module
    support (@v-zhuravlev)
  * Add the otelcol.storage.file extension to support persistent
    sending queues and otelcol.receiver.filelog file state tracking
    between restarts. (@dehaansa)
  * Add otelcol.exporter.googlecloud community component to export
    metrics, traces, and logs to Google Cloud. (@motoki317)
  * Add support to configure basic authentication for alloy http
    server. (@kalleep)
  * Add validate command to alloy that will perform limited
    validation of alloy configuration files. (@kalleep)
  * Add support to validate foreach block when using validate
    command. (@kalleep)
  * Add otelcol.receiver.splunkhec component to receive events in
    splunk hec format and forward them to other otelcol.*
    components. (@kalleep)
  * Add support for Mimir federated rule groups in
    mimir.rules.kubernetes (@QuentinBisson)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1749124800">- update to 1.9.1:
  Bugfixes
  * Update the prometheus.exporter.windows component to version
    v0.30.7. This fixes an error with the exchange collector and
    terminal_services collector (@dehaansa)
  * Fix loki.source.firehose to propagate specific cloudwatch event
    timestamps when useIncomingTs is set to true. (@michaelPotter)
  * Fix elevated CPU usage when using some otelcol components due to
    debug logging. (@thampiotr)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1751284800">- update to 1.9.2:
  * Bugfixes
  - Send profiles concurrently from pyroscope.ebpf. (@korniltsev)
  - Fix the validate command not understanding the livedebugging
    block. (@dehaansa)
  - Fix invalid class names in python profiles obtained with
    pyroscope.ebpf. (@korniltsev)
  - Fixed a bug which prevented non-secret optional secrets to be
    passed in as number arguments. (@ptodev)
  - For CRD-based components (prometheus.operator.*), retry
    initializing informers if the apiserver request fails. This
    rectifies issues where the apiserver is not reachable
    immediately after node restart. (@dehaansa)
  * Other changes
  - Add no-op blocks and attributes to the
    prometheus.exporter.windows component (@ptodev).
    Version 1.9.0 of Alloy removed the msmq block, as well as the
    enable_v2_collector, where_clause, and use_api attributes in
    the service block.
    This made it difficult for users to upgrade, so those
    attributes have now been made a no-op instead of being
    removed.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1751889600">- Install default configuration file</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1752753600">- update to 1.10.0:
  Breaking changes
  * Removing the nanoserver-1809 container image for Windows 2019.
    (@ptodev)
  * This is due to the deprecation of windows-2019 GitHub Actions
    runners.
  * The windowsservercore-ltsc2022 Alloy image is still being
    published to DockerHub.
  Bugfixes
  * Upgrade otelcol components from OpenTelemetry v0.126.0 to
    v0.128.0 (@korniltsev, @dehaansa)
    [otelcol.exporter.kafka]: Allow kafka exporter to produce to
    topics based on metadata key values.
    [otelcol.receiver.kafka]: Enforce a backoff mechanism on
    non-permanent errors, such as when the queue is full.
    [otelcol.receiver.kafka]: Don't restart the Kafka consumer on
    failed errors when message marking is enabled for them.
    [otelcol.connector.spanmetrics]: Fix bug causing span metrics
    calls count to be always 0 when using delta temporality.
  Features
  * (Experimental) Add an array.group_by stdlib function to group
    items in an array by a key. (@wildum)
  * Add the otelcol.exporter.faro exporter to export traces and
    logs to Faro endpoint. (@mar4uk)
  * Add the otelcol.receiver.faro receiver to receive traces and
    logs from the Grafana Faro Web SDK. (@mar4uk)
  * Add entropy support for loki.secretfilter (@romain-gaillard)
  Enhancements
  * Add hash_string_id argument to foreach block to hash the string
    representation of the pipeline id instead of using the string
    itself. (@wildum)
  * (Experimental) Additions to experimental
    database_observability.mysql component:
    Add explain_plan collector to database_observability.mysql
    component. (@rgeyer) locks: addition of data locks collector
    (@gaantunes @fridgepoet) Query sample collector is now enabled
    by default (@matthewnolf)
  * (Experimental) prometheus.write.queue add support for
    exemplars. (@dehaansa)
  * Wire in survey block for beyla.ebpf component. (@grcevski,
    @tpaschalis)
  * Upgrade otelcol components from OpenTelemetry v0.126.0 to
    v0.128.0 (@korniltsev, @dehaansa)
    [otelcol.processor.resourcedetection]: Add additional OS
    properties to resource detection: os.build.id and os.name.
    [otelcol.processor.resourcedetection]: Add host.interface
    resource attribute to system detector.
    [otelcol.exporter.kafka]: Fix Snappy compression codec support
    for the Kafka exporter.  [otelcol.receiver.filelog]: Introduce
    utf8-raw encoding to avoid replacing invalid bytes with \uFFFD
    when reading UTF-8 input.  [otelcol.processor.k8sattributes]:
    Support extracting labels and annotations from k8s
    Deployments.  [otelcol.processor.k8sattributes]: Add option to
    configure automatic service resource attributes.
    [otelcol.exporter.datadog]: Adds hostname_detection_timeout
    configuration option for Datadog Exporter and sets default to
    25 seconds.  [otelcol.receiver.datadog]: Address semantic
    conventions noncompliance and add support for http/db.
    [otelcol.exporter.awss3]: Add the retry mode, max attempts and
    max backoff to the settings.
  * Add support for conditions and statement-specific error_mode in
    otelcol.processor.transform. (@ptodev)
  * Add storage and start_from args to cloudwatch logs receiver.
    (@boernd)
  Bugfixes
  * Fix extension registration for otelcol.receiver.splunkhec auth
    extensions. (@dehaansa)
  Other changes
  * Mark pyroscope.receive_http and pyroscope.relabel components as
    GA. (@marcsanmi)
  * Upgrade otelcol.exporter.windows to v0.30.8 to get bugfixes and
    fix update collector support. (@dehaansa)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1754568000">- update to 1.10.1:
  Full list of changes:
  https://github.com/grafana/alloy/blob/v1.10.1/CHANGELOG.md#v1101
  * Bugfixes
  - Fix issue with faro.receiver cors not allowing X-Scope-OrgID
    and traceparent headers. (@mar4uk)
  - Fix issues with propagating cluster peers change
    notifications to components configured with remotecfg.
    (@dehaansa)
  - Fix issues with statistics reporter not including components
    only configured with remotecfg. (@dehaansa)
  - Fix issues with prometheus.exporter.windows not propagating
    dns collector config. (@dehaansa)
  - Fixed a bug in prometheus.write.queue which caused retries
    even when max_retry_attempts was set to 0. (@ptodev)
  - Fixed a bug in prometheus.write.queue which caused labelling
    issues when providing more than one label in external_labels.
    (@dehaansa)
  - Add application_host and network_inter_zone features to
    beyla.ebpf component. (@marctc)
  - Fix issues in loki.process where stage.multiline did not pass
    through structured metadata. (@jan-mrm)
  - Fix URLs in the Windows installer being wrapped in quotes.
    (@martincostello)
  - Fixed an issue where certain otelcol.* components could
    prevent Alloy from shutting down when provided invalid
    configuration. (@thampiotr)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1755691200">- update to 1.10.2:
  Full list of changes:
  https://github.com/grafana/alloy/blob/v1.10.2/CHANGELOG.md#v1102
  * Bugfixes
  - Fix issue in prometheus.write.queue causing inability to
    increase shard count if existing WAL data was present on
    start. (@kgeckhart)
  - Fix issue with loki.source.gcplog when push messages sent by gcp
    pub/sub only includes messageId. (@kalleep)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1759492800">- update to 1.11.0:
  Full list of changes:
  https://github.com/grafana/alloy/blob/v1.11.0/CHANGELOG.md#v1110
  * Breaking changes
  - Prometheus dependency had a major version upgrade from
    v2.55.1 to v3.4.2. (@thampiotr)
  - The . pattern in regular expressions in PromQL matches
    newline characters now. With this change a regular
    expressions like .* matches strings that include \n. This
    applies to matchers in queries and relabel configs in
    Prometheus and Loki components.
  - The enable_http2 in prometheus.remote_write component's
    endpoints has been changed to false by default.
    Previously, in Prometheus v2 the remote write http client
    would default to use http2. In order to parallelize
    multiple remote write queues across multiple sockets its
    preferable to not default to http2. If you prefer to use
    http2 for remote write you must now set enable_http2 to
    true in your prometheus.remote_write endpoints
    configuration section.
  - The experimental CLI flag
  - -feature.prometheus.metric-validation-scheme has been
    deprecated and has no effect. You can configure the metric
    validation scheme individually for each prometheus.scrape
    component.
  - Log message format has changed for some of the prometheus.*
    components as part of the upgrade to Prometheus v3.
  - The values of the le label of classic histograms and the
    quantile label of summaries are now normalized upon
    ingestion. In previous Alloy versions, that used Prometheus
    v2, the value of these labels depended on the scrape
    protocol (protobuf vs text format) in some situations. This
    led to label values changing based on the scrape protocol.
    E.g. a metric exposed as my_classic_hist{le="1"} would be
    ingested as my_classic_hist{le="1"} via the text format,
    but as my_classic_hist{le="1.0"} via protobuf. This changed
    the identity of the metric and caused problems when
    querying the metric. In current Alloy release, which uses
    Prometheus v3, these label values will always be normalized
    to a float like representation. I.e. the above example will
    always result in my_classic_hist{le="1.0"} being ingested
    into Prometheus, no matter via which protocol. The effect
    of this change is that alerts, recording rules and
    dashboards that directly reference label values as whole
    numbers such as le="1" will stop working.  The recommended
    way to deal with this change is to fix references to
    integer le and quantile label values, but otherwise do
    nothing and accept that some queries that span the
    transition time will produce inaccurate or unexpected
    results.
    See the upstream Prometheus v3 migration guide for more details.
  - prometheus.exporter.windows dependency has been updated to
    v0.31.1. (@dehaansa)
  - There are various renamed metrics and two removed
    collectors (cs, logon).
  - scrape_native_histograms attribute for prometheus.scrape is
    now set to false, whereas in previous versions of Alloy it
    would default to true. This means that it is no longer enough
    to just configure scrape_protocols to start with
    PrometheusProto to scrape native histograms -
    scrape_native_histograms has to be enabled. If
    scrape_native_histograms is enabled, scrape_protocols will
    automatically be configured correctly for you to include
    PrometheusProto. If you configure it explicitly, Alloy will
    validate that PrometheusProto is in the scrape_protocols
    list.
  - Add otel_attrs_to_hec_metadata configuration block to
    otelcol.exporter.splunkhec to match
    otelcol.receiver.splunkhec. (@cgetzen)
  - [otelcol.processor.batch] Two arguments have different
    default values. (@ptodev)
  - send_batch_size is now set to 2000 by default. It used to
    be 8192.
  - send_batch_max_size is now set to 3000 by default. It used
    to be 0.
  - This helps prevent issues with ingestion of batches that
    are too large.
  - OpenTelemetry Collector dependencies upgraded from v0.128.0
    to v0.134.0. (@ptodev)
  - The otelcol.receiver.opencensus component has been
    deprecated and will be removed in a future release, use
    otelcol.receiver.otelp instead.
  - [otelcol.exporter.*] The deprecated blocking argument in
    the sending_queue block has been removed.  Use
    block_on_overflow instead.
  - [otelcol.receiver.kafka, otelcol.exporter.kafka]: Removed
    the broker_addr argument from the aws_msk block.  Also
    removed the SASL/AWS_MSK_IAM authentication mechanism.
  - [otelcol.exporter.splunkhec] The batcher block is
    deprecated and will be removed in a future release. Use the
    queue block instead.
  - [otelcol.exporter.loadbalancing] Use a linear probe to
    decrease variance caused by hash collisions, which was
    causing a non-uniform distribution of loadbalancing.
  - [otelcol.connector.servicegraph] The
    database_name_attribute argument has been removed.
  - [otelcol.connector.spanmetrics] Adds a default maximum
    number of exemplars within the metric export interval.
  - [otelcol.processor.tail_sampling] Add a new
    block_on_overflow config attribute.
  * Features
  - Add the otelcol.receiver.fluentforward receiver to receive
    logs via Fluent Forward Protocol. (@rucciva)
  - Add the prometheus.enrich component to enrich metrics using
    labels from discovery.* components. (@ArkovKonstantin)
  - Add node_filter configuration block to loki.source.podlogs
    component to enable node-based filtering for pod discovery.
    When enabled, only pods running on the specified node will be
    discovered and monitored, significantly reducing API server
    load and network traffic in DaemonSet deployments.
    (@QuentinBisson)
  - (Experimental) Additions to experimental
    database_observability.mysql component:
  - query_sample collector now supports auto-enabling the
    necessary setup_consumers settings (@cristiangreco)
  - query_sample collector is now compatible with mysql less
    than 8.0.28 (@cristiangreco)
  - include server_id label on log entries (@matthewnolf)
  - support receiving targets argument and relabel those to
    include server_id (@matthewnolf)
  - updated the config blocks and documentation
    (@cristiangreco)
  - (Experimental) Additions to experimental
    database_observability.postgres component:
  - add query_tables collector for postgres (@matthewnolf)
  - add cloud_provider.aws configuration that enables
    optionally supplying the ARN of the database under
    observation. The ARN is appended to metric samples as
    labels for easier filtering and grouping of resources.
  - add query_sample collector for postgres (@gaantunes)
  - add schema_table collector for postgres (@fridgepoet)
  - include server_id label on logs and metrics (@matthewnolf)
  - Add otelcol.receiver.googlecloudpubsub community component to
    receive metrics, traces, and logs from Google Cloud Pub/Sub
    subscription. (@eraac)
  - (Experimental) Add a honor_metadata configuration argument to
    the prometheus.scrape component.  When set to true, it will
    propagate metric metadata to downstream components.
  - Add a flag to pyroscope.ebpf alloy configuration to set the
    off-cpu profiling threshold. (@luweglarz)
  - Add encoding.url_encode and encoding.url_decode std lib
    functions. (@kalleep)
  * Security:
  - CVE-2025-58058: Removed dependency on vulnerable
    github.com/ulikunitz/xz (bsc#1248960)
  - CVE-2025-11065: Fixed sensitive information leak in logs
    (bsc#1250621)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1760356800">- update to 1.11.2 (1.11.1 was not released):
  * Bugfixes
  - Fix potential deadlock in loki.source.journal when stopping
    or reloading the component. (@thampiotr)
  - Honor sync timeout when waiting for network availability for
    prometheus.operator.* components. (@dehaansa)
  - Fix prometheus.exporter.cloudwatch to not always emit debug
    logs but respect debug property. (@kalleep)
  - Fix an issue where component shutdown could block
    indefinitely by adding a warning log message and a deadline
    of 10 minutes. The deadline can be configured with the
  - -feature.component-shutdown-deadline flag if the default is
    not suitable. (@thampiotr)
  - Fix potential deadlocks in loki.source.file and
    loki.source.journal when component is shutting down.
    (@kalleep, @thampiotr)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1761652800">- update to 1.11.3:
  * Enhancements
  - Schedule new path targets faster in loki.source.file.
    (@kalleep)
  - Add prometheus.static.exporter that exposes metrics specified
    in a text file in Prometheus exposition format. (@kalleep)
  * Bugfixes
  - local.file_match now publish targets faster whenever targets
    in arguments changes. (@kalleep)
  - Fix otelcol.exporter.splunkhec arguments missing documented
    otel_attrs_to_hec_metadata block. (@dehaansa)
  - Support Scrape Protocol specification in CRDS for
    prometheus.operator.* components. (@dehaansa)
  - Fix panic in otelcol.receiver.syslog when no tcp block was
    configured. (@kalleep)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1764936000">- update to 1.12.0:
  * Breaking changes
  - prometheus.exporter.blackbox, prometheus.exporter.snmp and
    prometheus.exporter.statsd now use the component ID instead
    of the hostname as
  - their instance label in their exported metrics. This is a
    consequence of a bug fix that could lead to missing data when
    using the exporter
  - with clustering. If you would like to retain the previous
    behaviour, you can use discovery.relabel with action =
    "replace" rule to
  - set the instance label to sys.env("HOSTNAME"). (@thampiotr)
  * Security
  - CVE-2025-47911: Upgrade golang.org/x/net/html to fix various
    algorithms with quadratic complexity when parsing HTML
    documents (bsc#1251509)
  - CVE-2025-58190: Upgrade golang.org/x/net/html to fix
    excessive memory consumption by `html.ParseFragment` when
    processing specially crafted input (bsc#1251716)
  - CVE-2025-47913: Upgrade golang.org/x/crypto to fix client
    process termination when receiving an unexpected message type
    in response to a key listing or signing request (bsc#1253609)
  - CVE-2025-31133, CVE-2025-52565, and CVE-2025-52881: Update
    github.com/opencontainers/runc to fix container breakouts by
    bypassing runc's restrictions for writing to arbitrary /proc
    files (bsc#1255074)
  * Features
  - (Experimental) Add an otelcol.receiver.cloudflare component
    to receive
  - logs pushed by Cloudflare's LogPush jobs. (@x1unix)
  - (Experimental) Additions to experimental
    database_observability.mysql component:
  - explain_plans
  - collector now changes schema before returning the
    connection to the pool (@cristiangreco)
  - collector now passes queries more permissively, expressly
    to allow queries beginning in with (@rgeyer)
  - enable explain_plans collector by default (@rgeyer)
  - (Experimental) Additions to experimental
    database_observability.postgres component:
  - explain_plans
  - added the explain plan collector (@rgeyer)
  - collector now passes queries more permissively, expressly
    to allow queries beginning in with (@rgeyer)
  - query_samples
  - add user field to wait events within query_samples
    collector (@gaantunes)
  - rework the query samples collector to buffer per-query
    execution state across scrapes and emit finalized entries
    (@gaantunes)
  - process turned idle rows to calculate finalization times
    precisely and emit first seen idle rows (@gaantunes)
  - query_details
  - escape queries coming from pg_stat_statements with quotes
    (@gaantunes)
  - enable explain_plans collector by default (@rgeyer)
  - safely generate server_id when UDP socket used for database
    connection (@matthewnolf)
  - add table registry and include "validated" in parsed table
    name logs (@fridgepoet)
  - Add otelcol.exporter.googlecloudpubsub community component to
    export metrics, traces, and logs to Google Cloud Pub/Sub
    topic. (@eraac)
  - Add structured_metadata_drop stage for loki.process to filter
    structured metadata. (@baurmatt)
  - Send remote config status to the remote server for the
    remotecfg service. (@erikbaranowski)
  - Send effective config to the remote server for the remotecfg
    service. (@erikbaranowski)
  - Add a stat_statements configuration block to the
    prometheus.exporter.postgres component to enable selecting
    both the query ID and the full SQL statement. The new block
    includes one option to enable statement selection, and
    another to configure the maximum length of the statement
    text. (@SimonSerrano)
  - Add truncate stage for loki.process to truncate log entries,
    label values, and structured_metadata values. (@dehaansa)
  - Add u_probe_links &amp; load_probe configuration fields to alloy
    pyroscope.ebpf to extend configuration of the
    opentelemetry-ebpf-profiler to allow uprobe profiling and
    dynamic probing. (@luweglarz)
  - Add verbose_mode configuration fields to alloy pyroscope.ebpf
    to be enable ebpf-profiler verbose mode. (@luweglarz)
  - Add file_match block to loki.source.file for built-in file
    discovery using glob patterns. (@kalleep)
  - Add a regex argument to the structured_metadata stage in
    loki.process to extract labels matching a regular expression.
    (@timonegk)
  - OpenTelemetry Collector dependencies upgraded from v0.134.0
    to v0.139.0. (@dehaansa)
  - All otelcol.receiver.* components leveraging an HTTP server
    can configure HTTP keep alive behavior with
    keep_alives_enabled.
  - All otelcol.exporter.* components providing the
    sending_queue &gt; batch block have default batch values.
  - The otelcol.processor.k8sattributes component has support
    for extracting annotations from k8s jobs and daemonsets.
  - The otelcol.processor.resourcedecetion component supports
    nine new detectors.
  - The otelcol.exporter.kafka component supports partitioning
    logs by trace ID (partition_logs_by_trace_id) and
    configuring default behavior if topic does not exist
    (allow_auto_topic_creation).
  - The otelcol.receiver.kafka component has new configuration
    options max_partition_fetch_size, rack_id, and
    use_leader_epoch.
  - The otelcol.exporter.s3 component has new configuration
    options s3_base_prefix and s3_partition_timezone.
  - The otelcol.processor.servicegraph component now supports
    defining the maximum number of buckets for generated
    exponential histograms.
  - See the upstream
    [core][https://github.com/open-telemetry/opentelemetry-collector/blob/v0.139.0/CHANGELOG.md]
    and
    [contrib][https://github.com/open-telemetry/opentelemetry-collector-contrib/blob/v0.139.0/CHANGELOG.md]
    changelogs for more details.
  - A new mimir.alerts.kubernetes component which discovers
    AlertmanagerConfig Kubernetes resources and loads them into a
    Mimir instance. (@ptodev)
  - Mark stage.windowsevent block in the loki.process component
    as GA. (@kgeckhart)
  * Enhancements
  - Add per-application rate limiting with the strategy attribute
    in the faro.receiver component, to prevent one application
    from consuming the rate limit quota of others. (@hhertout)
  - Add support of tls in components
    loki.source.(awsfirehose|gcplog|heroku|api) and
    prometheus.receive_http and pyroscope.receive_http.
    (@fgouteroux)
  - Remove SendSIGKILL=no from unit files and recommendations
    (@oleg-kozlyuk-grafana)
  - Reduce memory overhead of prometheus.remote_write's WAL by
    lowering the size of the allocated series storage.
    (@kgeckhart)
  - Reduce lock wait/contention on the labelstore.LabelStore by
    removing unecessary usage from prometheus.relabel.
    (@kgeckhart)
  - prometheus.exporter.postgres dependency has been updated to
    v0.18.1. This includes new stat_progress_vacuum and
    buffercache_summary collectors, as well as other bugfixes and
    enhancements. (@cristiangreco)
  - Update Beyla component to 2.7.8. (@grcevski)
  - Support delimiters in stage.luhn. (@dehaansa)
  - pyroscope.java: update async-profiler to 4.2
    (@korniltsev-grafanista)
  - Improve debug info output from exported receivers (loki,
    prometheus and pyroscope). (@kalleep)
  - prometheus.exporter.unix: Add an arp config block to
    configure the ARP collector. (@ptodev)
  - prometheus.exporter.snowflake dependency has been updated to
    20251016132346-6d442402afb2, which updates data ownership
    queries to use last_over_time for a 24 hour period.
    (@Dasomeone)
  - loki.source.podlogs now supports preserve_discovered_labels
    parameter to preserve discovered pod metadata labels for use
    by downstream components. (@QuentinBisson)
  - Rework underlying framework of Alloy UI to use Vite instead
    of Create React App. (@jharvey10)
  - Use POST requests for remote config requests to avoid hitting
    http2 header limits. (@tpaschalis)
  - loki.source.api during component shutdown will now reject all
    the inflight requests with status code 503 after
    graceful_shutdown_timeout has expired. (@kalleep)
  - kubernetes.discovery Add support for attaching namespace
    metadata. (@kgeckhart)
  - Add meta_cache_address to beyla.ebpf component. (@skl)
  * Bugfixes
  - Stop loki.source.kubernetes discarding log lines with
    duplicate timestamps. (@ciaranj)
  - Fix direction of arrows for pyroscope components in UI graph.
    (@dehaansa)
  - Only log EOF errors for syslog port investigations in
    loki.source.syslog as Debug, not Warn. (@dehaansa)
  - Fix prometheus.exporter.process ignoring the
    remove_empty_groups argument. (@mhamzahkhan)
  - Fix issues with "unknown series ref when trying to add
    exemplar" from prometheus.remote_write by allowing series ref
    links to be updated if they change. (@kgeckhart)
  - Fix loki.source.podlogs component to register the Kubernetes
    field index for spec.nodeName when node filtering is enabled,
    preventing "Index with name field:spec.nodeName does not
    exist" errors. (@QuentinBisson)
  - Fix issue in loki.source.file where scheduling files could
    take too long. (@kalleep)
  - Fix loki.write no longer includes internal labels __.
    (@matt-gp)
  - Fix missing native histograms custom buckets (NHCB) samples
    from prometheus.remote_write. (@krajorama)
  - otelcol.receiver.prometheus now supports mixed histograms if
    prometheus.scrape has honor_metadata set to true. (@ptodev)
  - A mixed histogram is one which has both classic and
    exponential buckets.
  - loki.source.file has better support for non-UTF-8 encoded
    files. (@ptodev)
  - A BOM will be taken into account if the file is UTF-16
    encoded and encoding is set to UTF-16. (Not UTF-16BE or
    UTF-16LE)
  - The carriage return symbol in Windows log files with CLRF
    endings will no longer be part of the log line.
  - These bugs used to cause some logs to show up with Chinese
    characters. Notably, this would happen on MSSQL UTF-16 LE
    logs.
  - Fix the loki.write endpoint block's enable_http2 attribute to
    actually affect the client. HTTP2 was previously disabled
    regardless of configuration. (@dehaansa)
  - Optionally remove trailing newlines before appending entries
    in stage.multiline. (@dehaansa)
  - loki.source.api no longer drops request when relabel rules
    drops a specific stream. (@kalleep)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1765886400">- update to 1.12.1:
  * Bug Fixes
  - update to Beyla 2.7.10 (#5019) (c149393) (@rafaelroquetto)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1768305600">- update to 1.12.2:
  * Bug Fixes
  - Add missing configuration parameter
    deployment_name_from_replicaset to k8sattributes processor
    (5b90a9d) (@dehaansa)
  - database_observability: Fix schema_details collector to fetch
    column definitions with case sensitive table names (#4872)
    (560dff4) (@jharvey10, @fridgepoet)
  - deps: Update jose2go to 1.7.0 (#4858) (dfdd341) (@jharvey10)
  - deps: Update npm dependencies [backport] (#5201) (8e06c26)
    (@jharvey10)
  - Ensure the squid exporter wrapper properly brackets ipv6
    addresses [backport] (#5205) (e329cc6) (@dehaansa)
  - Preserve meta labels in loki.source.podlogs (#5097) (ab4b21e)
    (@kalleep)
  - Prevent panic in import.git when update fails [backport]
    (#5204) (c82fbae) (@dehaansa, @jharvey10)
  - show correct fallback alloy version instead of v1.13.0
    (#5110) (b72be99) (@dehaansa, @jharvey10)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1768824000">- CVE-2025-68156: Fix potential DoS via unbounded recursion in
  builtin functions (bsc#1255333):
  * Bump github.com/expr-lang/expr to version 1.17.7</changelog>
</package>
<package pkgid="153f143f1f4d6117469f80f5b4fcb60c5e4eb7d7a806fe8120c158a810860a26" name="alloy" arch="src">
  <version epoch="0" ver="1.9.2" rel="150700.15.5.2"/>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1730289600">- update to 1.4.3:
  For a full list of changes, please refer to the CHANGELOG!
  https://github.com/grafana/alloy/blob/v1.4.3/CHANGELOG.md
  * Bugfixes
  - Fix an issue where some faro.receiver would drop multiple
    fields defined in payload.meta.browser, as fields were
    defined in the struct.
  - pyroscope.scrape no longer tries to scrape endpoints which
    are not active targets anymore. (@wildum @mattdurham
    @dehaansa @ptodev)
  - Fixed a bug with loki.source.podlogs not starting in large
    clusters due to short informer sync timeout.
    (@elburnetto-intapp)
  - prometheus.exporter.windows: Fixed bug with exclude regular
    expression config arguments which caused missing metrics.
    (@ptodev)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1731499200">- update to 1.5.0:
  For a full list of changes, please refer to the CHANGELOG!
  https://github.com/grafana/alloy/blob/v1.5.0/CHANGELOG.md
  * Breaking changes
  - import.git: The default value for revision has changed from
    HEAD to main. (@ptodev) It is no longer allowed to set
    revision to "HEAD", "FETCH_HEAD", "ORIG_HEAD", "MERGE_HEAD",
    or "CHERRY_PICK_HEAD".
  - The Otel update to v0.112.0 has a few breaking changes:
  - [otelcol.processor.deltatocumulative] Change max_streams
    default value to 9223372036854775807 (max int).
  - open-telemetry/opentelemetry-collector-contrib#35048
  - [otelcol.connector.spanmetrics] Change namespace default
    value to traces.span.metrics.
  - open-telemetry/opentelemetry-collector-contrib#34485
  - [otelcol.exporter.logging] Removed in favor of the
    otelcol.exporter.debug.
  - open-telemetry/opentelemetry-collector#11337
  * Features
  - Add the function path_join to the stdlib. (@wildum)
  - Add pyroscope.receive_http component to receive and forward
    Pyroscope profiles (@marcsanmi)
  - Add support to loki.source.syslog for the RFC3164 format
    ("BSD syslog"). (@sushain97)
  - Add support to loki.source.api to be able to extract the
    tenant from the HTTP X-Scope-OrgID header (@QuentinBisson)
  - (Experimental) Add a loki.secretfilter component to redact
    secrets from collected logs.
  - (Experimental) Add a prometheus.write.queue component to add
    an alternative to prometheus.remote_write which allowing the
    writing of metrics to a prometheus endpoint. (@mattdurham)
  - (Experimental) Add the arrary.combine_maps function to the
    stdlib. (@ptodev, @wildum)
  - Add support bundle generation via the API endpoint /-/support
    (@dehaansa)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1733313600">- update to 1.5.1:
  For a full list of changes, please refer to the CHANGELOG!
  https://github.com/grafana/alloy/blob/v1.5.1/CHANGELOG.md
  * Enhancements
  - Logs from underlying clustering library memberlist are now
    surfaced with correct level (@thampiotr)
  - Allow setting informer_sync_timeout in prometheus.operator.*
    components. (@captncraig)
  - For sharding targets during clustering, loki.source.podlogs
    now only takes into account some labels. (@ptodev)
  * Bugfixes
  - Fixed an issue in the pyroscope.write component to prevent
    TLS connection churn to Pyroscope when the
    pyroscope.receive_http clients don't request keepalive
    (@madaraszg-tulip)
  - Fixed an issue in the pyroscope.write component with multiple
    endpoints not working correctly for forwarding profiles from
    pyroscope.receive_http (@madaraszg-tulip)
  - Fixed a few race conditions that could lead to a deadlock
    when using import statements, which could lead to a memory
    leak on /metrics endpoint of an Alloy instance. (@thampiotr)
  - Fix a race condition where the ui service was dependent on
    starting after the remotecfg service, which is not
    guaranteed. (@dehaansa &amp; @erikbaranowski)
  - Fixed an issue in the otelcol.exporter.prometheus component
    that would set series value incorrectly for stale metrics
    (@YusifAghalar)
  - loki.source.podlogs: Fixed a bug which prevented clustering
    from working and caused duplicate logs to be sent. The bug
    only happened when no selector or namespace_selector blocks
    were specified in the Alloy configuration. (@ptodev)
  - Fixed an issue in the pyroscope.write component to allow
    slashes in application names in the same way it is done in
    the Pyroscope push API (@marcsanmi)
  - Fixed a crash when updating the configuration of remote.http.
    (@kinolaev)
  - Fixed an issue in the otelcol.processor.attribute component
    where the actions delete and hash could not be used with the
    pattern argument. (@wildum)
  - Fixed an issue in the prometheus.exporter.postgres component
    that would leak goroutines when the target was not reachable
    (@dehaansa)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1737979200">- update to 1.6.0:
  * Breaking changes
  - Upgrade to OpenTelemetry Collector v0.116.0:
    otelcol.processor.tailsampling: Change decision precedence
    when using and_sub_policy and invert_match. For more
    information, see the release notes for Alloy 1.6.
  * Features
  - Add otelcol.receiver.syslog component to receive otel logs in
    syslog format (@dehaansa)
  - Add support for metrics in otelcol.exporter.loadbalancing
    (@madaraszg-tulip)
  - Add add_cloudwatch_timestamp to
    prometheus.exporter.cloudwatch metrics. (@captncraig)
  - Add support to prometheus.operator.servicemonitors to allow
    endpointslice role. (@yoyosir)
  - Add otelcol.exporter.splunkhec allowing to export otel data
    to Splunk HEC (@adlotsof)
  - Add otelcol.receiver.solace component to receive traces from
    a Solace broker. (@wildum)
  - Add otelcol.exporter.syslog component to export logs in
    syslog format (@dehaansa)
  - (Experimental) Add a database_observability.mysql component
    to collect mysql performance data. (@cristiangreco &amp;
    @matthewnolf)
  - Add otelcol.receiver.influxdb to convert influx metric into
    OTEL. (@EHSchmitt4395)
  - Add a new /-/healthy endpoint which returns HTTP 500 if one
    or more components are unhealthy. (@ptodev)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1737979201">- update to 1.6.1:
  * Resolve issue with Beyla not starting. (1.6.0 regression)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1740484800">- update to 1.7.0:
  For a full list of changes, please refer to the CHANGELOG!
  https://github.com/grafana/alloy/blob/v1.7.0/CHANGELOG.md
  * Breaking changes
  - (Experimental) In prometheus.write.queue changed parallelism
    from attribute to a block to allow for dynamic scaling.
    (@mattdurham)
  - Remove tls_basic_auth_config_path attribute from
    prometheus.exporter.mongodb configuration as it does not
    configure TLS client behavior as previously documented.
  - Remove encoding and encoding_file_ext from
    otelcol.exporter.awss3 component as it was not wired in to
    the otel component and Alloy does not currently integrate the
    upstream encoding extensions that this would utilize.
  * Features
  - Add a otelcol.receiver.tcplog component to receive
    OpenTelemetry logs over a TCP connection. (@nosammai)
  - (Public preview) Add otelcol.receiver.filelog component to
    read otel log entries from files (@dehaansa)
  - (Public preview) Add a otelcol.processor.cumulativetodelta
    component to convert metrics from cumulative temporality to
    delta. (@madaraszg-tulip)
  - (Experimental) Add a stage.windowsevent block in the
    loki.process component. This aims to replace the existing
    stage.eventlogmessage. (@wildum)
  - Add pyroscope.relabel component to modify or filter profiles
    using Prometheus relabeling rules. (@marcsanmi)
  - (Experimental) A new foreach block which starts an Alloy
    pipeline for each item inside a list. (@wildum, @thampiotr,
    @ptodev)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1740657600">- update to 1.7.1:
  * Bugfixes
  - Fixed an issue where some exporters such as
    prometheus.exporter.snmp couldn't accept targets from other
    components with an error conversion to '*map[string]string'
    is not supported". (@thampiotr)
  - Enable batching of calls to the appender in
    prometheus.write.queue to reduce lock contention when
    scraping, which will lead to reduced scrape duration.
    (@mattdurham)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1741608000">- update to 1.7.2:
  * Notable changes:
  - Fixed an issue where the otelcol.exporter.awss3 could not be
    started with the sumo_ic marshaler. (@wildum)
  - Update jfr-parser dependency to v0.9.3 to fix jfr parsing
    issues in pyroscope.java. (@korniltsev)
  - Fixed an issue where passing targets from some standard
    library functions was failing with target::ConvertFrom error.
    (@thampiotr)
  - Fixed an issue where indexing targets as maps (e.g.
    target["foo"]) or objects (e.g. target.foo) or using them
    with certain standard library functions was resulting in
    expected object or array, got capsule error under some
    circumstances. This could also lead to foreach evaluation
    failed errors when using the foreach configuration block.
    (@thampiotr)
  - Update prometheus.write.queue to reduce memory fragmentation
    and increase sent throughput. (@mattdurham)
  - Fixed an issue where the otelcol.exporter.kafka component
    would not start if the encoding was specific to a signal
    type. (@wildum)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1741867200">- update to 1.7.3:
  * Notable changes:
  - Fixed the parsing of selections, application and network
    filter blocks for Beyla
  - Add the stat_checkpointer collector in
    prometheus.exporter.postgres (@dehaansa)
  - Update the prometheus.exporter.postgres component to
    correctly support Postgres17 when stat_bgwriter collector is
    enabled (@dehaansa)
  - Fix remoteCfg logging and metrics reporting of errNotModified
    as a failure (@zackman0010)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1741953600">- update to 1.7.4:
  * Notable changes:
  - Revert the changes to loki.source.file from release v1.7.0.
    These changes introduced a potential deadlock. (@dehaansa)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1742558400">- update to 1.7.5:
  * Notable changes:
  - Set zstd as default compression for prometheus.write.queue.
    (@mattdurham)
    Though technically an enhancement this was causing trouble in
    disk io constrained environments. Zstd provides almost double
    the compression with little additional cpu overhead.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1744200000">- update to 1.8.0:
  * Breaking changes
  - Removed open_port and executable_name from top level
    configuration of Beyla component. Removed enabled argument
    from network block. (@marctc)
  - Breaking changes from the OpenTelemetry Collector v0.122
    update: (@wildum)
  - otelcol.exporter.splunkhec: min_size_items and
    max_size_items were replaced by min_size, max_size and
    sizer in the batcher block to allow users to configure the
    size of the batch in a more flexible way.
  - The telemetry level of Otel components is no longer
    configurable. The level argument in the debug_metrics block
    is kept to avoid breaking changes but it is not used
    anymore.
  - otelcol.processor.tailsampling changed the unit of the
    decision timer metric from microseconds to milliseconds.
    (change unit of
    otelcol_processor_tail_sampling_sampling_decision_timer_latency)
  - otelcol.processor.deltatocumulative: rename
    otelcol_deltatocumulative_datapoints_processed to
    otelcol_deltatocumulative_datapoints and remove the metrics
    otelcol_deltatocumulative_streams_evicted,
    otelcol_deltatocumulative_datapoints_dropped and
    otelcol_deltatocumulative_gaps_length.
  - The regex attribute was removed from
    otelcol.processor.k8sattributes. The extract-patterns
    function from otelcol.processor.transform can be used
    instead.
  - The default value of metrics_flush_interval in
    otelcol.connector.servicegraph was changed from 0s to 60s.
  - s3_partition in otelcol.exporter.awss3 was replaced by
    s3_partition_format.
  - (Experimental) prometheus.write.queue metric names changed to
    align better with prometheus standards. (@mattdurham)
  * Features
  - Add otelcol.receiver.awscloudwatch component to receive logs
    from AWS CloudWatch and forward them to other otelcol.*
    components. (@wildum)
  - Add loki.enrich component to enrich logs using labels from
    discovery.* components. (@v-zhuravlev)
  - Add string concatenation for secrets type (@ravishankar15)
  - Add support for environment variables to OpenTelemetry
    Collector config. (@jharvey10)
  - Replace graph in Alloy UI with a new version that supports
    modules and data flow visualization. (@wildum)
  - Added --cluster.wait-for-size and --cluster.wait-timeout
    flags which allow to specify the minimum cluster size
    required before components that use clustering begin
    processing traffic to ensure adequate cluster capacity is
    available. (@thampiotr)
  - Add trace_printer to beyla.ebpf component to print trace
    information in a specific format. (@marctc)
  - Add support for live debugging and graph in the UI for
    components imported via remotecfg. (@wildum)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1744372800">- update to 1.8.1:
  * Bugfixes
  - rfc3164_default_to_current_year argument was not fully added to
    loki.source.syslog (@dehaansa)
  - Fix issue with remoteCfg service stopping immediately and
    logging noop error if not configured (@dehaansa)
  - Fix potential race condition in remoteCfg service metrics
    registration (@kalleep)
  - Fix panic in prometheus.exporter.postgres when using minimal url
    as data source name. (@kalleep)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1744718400">- update to 1.8.1^20250410d23d30f49 (jsc#PED-12282):
  * Update github.com/hashicorp/vault/api to 1.16.0</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1745496000">- update to 1.8.2:
  Bugfixes
  * Fix otelcol.exporter.prometheus dropping valid
    exemplars. (@github-vincent-miszczak)
  * Fix loki.source.podlogs not adding labels
    __meta_kubernetes_namespace and
    __meta_kubernetes_pod_label_*. (@kalleep)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1746446400">- update to 1.8.3:
  Bugfixes
  * Fix mimir.rules.kubernetes panic on non-leader debug info
    retrieval (@TheoBrigitte)
  * Fix detection of the “streams limit exceeded” error in the Loki
    client so that metrics are correctly labeled as
    ReasonStreamLimited. (@maratkhv)
  * Fix loki.source.file race condition that often lead to panic when
    using decompression. (@kalleep)
  * Fix deadlock in loki.source.file that can happen when targets are
    removed. (@kalleep)
  * Fix loki.process to emit valid logfmt. (@kalleep)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1748865600">- update to 1.9.0:
  Breaking changes
  * The prometheus.exporter.windows component has been update to
    version v0.30.6. This update includes a significant rework of
    the exporter and includes some breaking changes. (@dehaansa)
    The msmq and service collectors can no longer be configured
    with a WMI where clause. Any filtering previously done in a
    where clause will need to be done in a prometheus.relabel
    component.
    The service collector no longer provides enable_v2_collector
    and use_api configuration options.
    The mscluster_* and netframework_* collectors are now replaced
    with one mscluster and netframework collector that allows you
    to enable the separate metric groupings individually.
    The teradici_pcoip and vmware_blast collectors have been
    removed from the exporter.
  * The prometheus.exporter.oracledb component now embeds the
    oracledb_exporter from oracle instead of the deprecated
    oracledb_exporter from iamseth for collecting metrics from an
    OracleDB server: (@wildum)
    The arguments username, password, default_metrics, and
    custom_metrics are now supported.
    The previously undocumented argument custom_metrics is now
    expecting a list of paths to custom metrics files.
    The following metrics are no longer available by default:
    oracledb_sessions_activity, oracledb_tablespace_free_bytes
    (Experimental) The enable_context_propagation argument in
    beyla.ebpf has been replaced with the context_propagation
    argument.
  * Set enable_context_propagation to all to get the same behaviour
    as enable_context_propagation being set to true.
  Security
  * CVE-2025-22872: Fix tokenizer incorrectly interpretting tags
    (bsc#1241863).
  * CVE-2025-46327: Fix race condition when checking access
    permissions to the Easy Logging configuration file
    (bsc#1242020).
  Features
  * Bump snmp_exporter and embedded modules in
    prometheus.exporter.snmp to v0.29.0, add cisco_device module
    support (@v-zhuravlev)
  * Add the otelcol.storage.file extension to support persistent
    sending queues and otelcol.receiver.filelog file state tracking
    between restarts. (@dehaansa)
  * Add otelcol.exporter.googlecloud community component to export
    metrics, traces, and logs to Google Cloud. (@motoki317)
  * Add support to configure basic authentication for alloy http
    server. (@kalleep)
  * Add validate command to alloy that will perform limited
    validation of alloy configuration files. (@kalleep)
  * Add support to validate foreach block when using validate
    command. (@kalleep)
  * Add otelcol.receiver.splunkhec component to receive events in
    splunk hec format and forward them to other otelcol.*
    components. (@kalleep)
  * Add support for Mimir federated rule groups in
    mimir.rules.kubernetes (@QuentinBisson)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1749124800">- update to 1.9.1:
  Bugfixes
  * Update the prometheus.exporter.windows component to version
    v0.30.7. This fixes an error with the exchange collector and
    terminal_services collector (@dehaansa)
  * Fix loki.source.firehose to propagate specific cloudwatch event
    timestamps when useIncomingTs is set to true. (@michaelPotter)
  * Fix elevated CPU usage when using some otelcol components due to
    debug logging. (@thampiotr)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1751284800">- update to 1.9.2:
  * Bugfixes
  - Send profiles concurrently from pyroscope.ebpf. (@korniltsev)
  - Fix the validate command not understanding the livedebugging
    block. (@dehaansa)
  - Fix invalid class names in python profiles obtained with
    pyroscope.ebpf. (@korniltsev)
  - Fixed a bug which prevented non-secret optional secrets to be
    passed in as number arguments. (@ptodev)
  - For CRD-based components (prometheus.operator.*), retry
    initializing informers if the apiserver request fails. This
    rectifies issues where the apiserver is not reachable
    immediately after node restart. (@dehaansa)
  * Other changes
  - Add no-op blocks and attributes to the
    prometheus.exporter.windows component (@ptodev).
    Version 1.9.0 of Alloy removed the msmq block, as well as the
    enable_v2_collector, where_clause, and use_api attributes in
    the service block.
    This made it difficult for users to upgrade, so those
    attributes have now been made a no-op instead of being
    removed.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1751889600">- Install default configuration file</changelog>
</package>
<package pkgid="ec32caa395d938bf93b0e2cce605bb99a19f54ec8d821bfd1ec91198bcef45fb" name="alloy" arch="x86_64">
  <version epoch="0" ver="1.9.2" rel="150700.15.5.2"/>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1730289600">- update to 1.4.3:
  For a full list of changes, please refer to the CHANGELOG!
  https://github.com/grafana/alloy/blob/v1.4.3/CHANGELOG.md
  * Bugfixes
  - Fix an issue where some faro.receiver would drop multiple
    fields defined in payload.meta.browser, as fields were
    defined in the struct.
  - pyroscope.scrape no longer tries to scrape endpoints which
    are not active targets anymore. (@wildum @mattdurham
    @dehaansa @ptodev)
  - Fixed a bug with loki.source.podlogs not starting in large
    clusters due to short informer sync timeout.
    (@elburnetto-intapp)
  - prometheus.exporter.windows: Fixed bug with exclude regular
    expression config arguments which caused missing metrics.
    (@ptodev)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1731499200">- update to 1.5.0:
  For a full list of changes, please refer to the CHANGELOG!
  https://github.com/grafana/alloy/blob/v1.5.0/CHANGELOG.md
  * Breaking changes
  - import.git: The default value for revision has changed from
    HEAD to main. (@ptodev) It is no longer allowed to set
    revision to "HEAD", "FETCH_HEAD", "ORIG_HEAD", "MERGE_HEAD",
    or "CHERRY_PICK_HEAD".
  - The Otel update to v0.112.0 has a few breaking changes:
  - [otelcol.processor.deltatocumulative] Change max_streams
    default value to 9223372036854775807 (max int).
  - open-telemetry/opentelemetry-collector-contrib#35048
  - [otelcol.connector.spanmetrics] Change namespace default
    value to traces.span.metrics.
  - open-telemetry/opentelemetry-collector-contrib#34485
  - [otelcol.exporter.logging] Removed in favor of the
    otelcol.exporter.debug.
  - open-telemetry/opentelemetry-collector#11337
  * Features
  - Add the function path_join to the stdlib. (@wildum)
  - Add pyroscope.receive_http component to receive and forward
    Pyroscope profiles (@marcsanmi)
  - Add support to loki.source.syslog for the RFC3164 format
    ("BSD syslog"). (@sushain97)
  - Add support to loki.source.api to be able to extract the
    tenant from the HTTP X-Scope-OrgID header (@QuentinBisson)
  - (Experimental) Add a loki.secretfilter component to redact
    secrets from collected logs.
  - (Experimental) Add a prometheus.write.queue component to add
    an alternative to prometheus.remote_write which allowing the
    writing of metrics to a prometheus endpoint. (@mattdurham)
  - (Experimental) Add the arrary.combine_maps function to the
    stdlib. (@ptodev, @wildum)
  - Add support bundle generation via the API endpoint /-/support
    (@dehaansa)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1733313600">- update to 1.5.1:
  For a full list of changes, please refer to the CHANGELOG!
  https://github.com/grafana/alloy/blob/v1.5.1/CHANGELOG.md
  * Enhancements
  - Logs from underlying clustering library memberlist are now
    surfaced with correct level (@thampiotr)
  - Allow setting informer_sync_timeout in prometheus.operator.*
    components. (@captncraig)
  - For sharding targets during clustering, loki.source.podlogs
    now only takes into account some labels. (@ptodev)
  * Bugfixes
  - Fixed an issue in the pyroscope.write component to prevent
    TLS connection churn to Pyroscope when the
    pyroscope.receive_http clients don't request keepalive
    (@madaraszg-tulip)
  - Fixed an issue in the pyroscope.write component with multiple
    endpoints not working correctly for forwarding profiles from
    pyroscope.receive_http (@madaraszg-tulip)
  - Fixed a few race conditions that could lead to a deadlock
    when using import statements, which could lead to a memory
    leak on /metrics endpoint of an Alloy instance. (@thampiotr)
  - Fix a race condition where the ui service was dependent on
    starting after the remotecfg service, which is not
    guaranteed. (@dehaansa &amp; @erikbaranowski)
  - Fixed an issue in the otelcol.exporter.prometheus component
    that would set series value incorrectly for stale metrics
    (@YusifAghalar)
  - loki.source.podlogs: Fixed a bug which prevented clustering
    from working and caused duplicate logs to be sent. The bug
    only happened when no selector or namespace_selector blocks
    were specified in the Alloy configuration. (@ptodev)
  - Fixed an issue in the pyroscope.write component to allow
    slashes in application names in the same way it is done in
    the Pyroscope push API (@marcsanmi)
  - Fixed a crash when updating the configuration of remote.http.
    (@kinolaev)
  - Fixed an issue in the otelcol.processor.attribute component
    where the actions delete and hash could not be used with the
    pattern argument. (@wildum)
  - Fixed an issue in the prometheus.exporter.postgres component
    that would leak goroutines when the target was not reachable
    (@dehaansa)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1737979200">- update to 1.6.0:
  * Breaking changes
  - Upgrade to OpenTelemetry Collector v0.116.0:
    otelcol.processor.tailsampling: Change decision precedence
    when using and_sub_policy and invert_match. For more
    information, see the release notes for Alloy 1.6.
  * Features
  - Add otelcol.receiver.syslog component to receive otel logs in
    syslog format (@dehaansa)
  - Add support for metrics in otelcol.exporter.loadbalancing
    (@madaraszg-tulip)
  - Add add_cloudwatch_timestamp to
    prometheus.exporter.cloudwatch metrics. (@captncraig)
  - Add support to prometheus.operator.servicemonitors to allow
    endpointslice role. (@yoyosir)
  - Add otelcol.exporter.splunkhec allowing to export otel data
    to Splunk HEC (@adlotsof)
  - Add otelcol.receiver.solace component to receive traces from
    a Solace broker. (@wildum)
  - Add otelcol.exporter.syslog component to export logs in
    syslog format (@dehaansa)
  - (Experimental) Add a database_observability.mysql component
    to collect mysql performance data. (@cristiangreco &amp;
    @matthewnolf)
  - Add otelcol.receiver.influxdb to convert influx metric into
    OTEL. (@EHSchmitt4395)
  - Add a new /-/healthy endpoint which returns HTTP 500 if one
    or more components are unhealthy. (@ptodev)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1737979201">- update to 1.6.1:
  * Resolve issue with Beyla not starting. (1.6.0 regression)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1740484800">- update to 1.7.0:
  For a full list of changes, please refer to the CHANGELOG!
  https://github.com/grafana/alloy/blob/v1.7.0/CHANGELOG.md
  * Breaking changes
  - (Experimental) In prometheus.write.queue changed parallelism
    from attribute to a block to allow for dynamic scaling.
    (@mattdurham)
  - Remove tls_basic_auth_config_path attribute from
    prometheus.exporter.mongodb configuration as it does not
    configure TLS client behavior as previously documented.
  - Remove encoding and encoding_file_ext from
    otelcol.exporter.awss3 component as it was not wired in to
    the otel component and Alloy does not currently integrate the
    upstream encoding extensions that this would utilize.
  * Features
  - Add a otelcol.receiver.tcplog component to receive
    OpenTelemetry logs over a TCP connection. (@nosammai)
  - (Public preview) Add otelcol.receiver.filelog component to
    read otel log entries from files (@dehaansa)
  - (Public preview) Add a otelcol.processor.cumulativetodelta
    component to convert metrics from cumulative temporality to
    delta. (@madaraszg-tulip)
  - (Experimental) Add a stage.windowsevent block in the
    loki.process component. This aims to replace the existing
    stage.eventlogmessage. (@wildum)
  - Add pyroscope.relabel component to modify or filter profiles
    using Prometheus relabeling rules. (@marcsanmi)
  - (Experimental) A new foreach block which starts an Alloy
    pipeline for each item inside a list. (@wildum, @thampiotr,
    @ptodev)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1740657600">- update to 1.7.1:
  * Bugfixes
  - Fixed an issue where some exporters such as
    prometheus.exporter.snmp couldn't accept targets from other
    components with an error conversion to '*map[string]string'
    is not supported". (@thampiotr)
  - Enable batching of calls to the appender in
    prometheus.write.queue to reduce lock contention when
    scraping, which will lead to reduced scrape duration.
    (@mattdurham)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1741608000">- update to 1.7.2:
  * Notable changes:
  - Fixed an issue where the otelcol.exporter.awss3 could not be
    started with the sumo_ic marshaler. (@wildum)
  - Update jfr-parser dependency to v0.9.3 to fix jfr parsing
    issues in pyroscope.java. (@korniltsev)
  - Fixed an issue where passing targets from some standard
    library functions was failing with target::ConvertFrom error.
    (@thampiotr)
  - Fixed an issue where indexing targets as maps (e.g.
    target["foo"]) or objects (e.g. target.foo) or using them
    with certain standard library functions was resulting in
    expected object or array, got capsule error under some
    circumstances. This could also lead to foreach evaluation
    failed errors when using the foreach configuration block.
    (@thampiotr)
  - Update prometheus.write.queue to reduce memory fragmentation
    and increase sent throughput. (@mattdurham)
  - Fixed an issue where the otelcol.exporter.kafka component
    would not start if the encoding was specific to a signal
    type. (@wildum)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1741867200">- update to 1.7.3:
  * Notable changes:
  - Fixed the parsing of selections, application and network
    filter blocks for Beyla
  - Add the stat_checkpointer collector in
    prometheus.exporter.postgres (@dehaansa)
  - Update the prometheus.exporter.postgres component to
    correctly support Postgres17 when stat_bgwriter collector is
    enabled (@dehaansa)
  - Fix remoteCfg logging and metrics reporting of errNotModified
    as a failure (@zackman0010)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1741953600">- update to 1.7.4:
  * Notable changes:
  - Revert the changes to loki.source.file from release v1.7.0.
    These changes introduced a potential deadlock. (@dehaansa)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1742558400">- update to 1.7.5:
  * Notable changes:
  - Set zstd as default compression for prometheus.write.queue.
    (@mattdurham)
    Though technically an enhancement this was causing trouble in
    disk io constrained environments. Zstd provides almost double
    the compression with little additional cpu overhead.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1744200000">- update to 1.8.0:
  * Breaking changes
  - Removed open_port and executable_name from top level
    configuration of Beyla component. Removed enabled argument
    from network block. (@marctc)
  - Breaking changes from the OpenTelemetry Collector v0.122
    update: (@wildum)
  - otelcol.exporter.splunkhec: min_size_items and
    max_size_items were replaced by min_size, max_size and
    sizer in the batcher block to allow users to configure the
    size of the batch in a more flexible way.
  - The telemetry level of Otel components is no longer
    configurable. The level argument in the debug_metrics block
    is kept to avoid breaking changes but it is not used
    anymore.
  - otelcol.processor.tailsampling changed the unit of the
    decision timer metric from microseconds to milliseconds.
    (change unit of
    otelcol_processor_tail_sampling_sampling_decision_timer_latency)
  - otelcol.processor.deltatocumulative: rename
    otelcol_deltatocumulative_datapoints_processed to
    otelcol_deltatocumulative_datapoints and remove the metrics
    otelcol_deltatocumulative_streams_evicted,
    otelcol_deltatocumulative_datapoints_dropped and
    otelcol_deltatocumulative_gaps_length.
  - The regex attribute was removed from
    otelcol.processor.k8sattributes. The extract-patterns
    function from otelcol.processor.transform can be used
    instead.
  - The default value of metrics_flush_interval in
    otelcol.connector.servicegraph was changed from 0s to 60s.
  - s3_partition in otelcol.exporter.awss3 was replaced by
    s3_partition_format.
  - (Experimental) prometheus.write.queue metric names changed to
    align better with prometheus standards. (@mattdurham)
  * Features
  - Add otelcol.receiver.awscloudwatch component to receive logs
    from AWS CloudWatch and forward them to other otelcol.*
    components. (@wildum)
  - Add loki.enrich component to enrich logs using labels from
    discovery.* components. (@v-zhuravlev)
  - Add string concatenation for secrets type (@ravishankar15)
  - Add support for environment variables to OpenTelemetry
    Collector config. (@jharvey10)
  - Replace graph in Alloy UI with a new version that supports
    modules and data flow visualization. (@wildum)
  - Added --cluster.wait-for-size and --cluster.wait-timeout
    flags which allow to specify the minimum cluster size
    required before components that use clustering begin
    processing traffic to ensure adequate cluster capacity is
    available. (@thampiotr)
  - Add trace_printer to beyla.ebpf component to print trace
    information in a specific format. (@marctc)
  - Add support for live debugging and graph in the UI for
    components imported via remotecfg. (@wildum)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1744372800">- update to 1.8.1:
  * Bugfixes
  - rfc3164_default_to_current_year argument was not fully added to
    loki.source.syslog (@dehaansa)
  - Fix issue with remoteCfg service stopping immediately and
    logging noop error if not configured (@dehaansa)
  - Fix potential race condition in remoteCfg service metrics
    registration (@kalleep)
  - Fix panic in prometheus.exporter.postgres when using minimal url
    as data source name. (@kalleep)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1744718400">- update to 1.8.1^20250410d23d30f49 (jsc#PED-12282):
  * Update github.com/hashicorp/vault/api to 1.16.0</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1745496000">- update to 1.8.2:
  Bugfixes
  * Fix otelcol.exporter.prometheus dropping valid
    exemplars. (@github-vincent-miszczak)
  * Fix loki.source.podlogs not adding labels
    __meta_kubernetes_namespace and
    __meta_kubernetes_pod_label_*. (@kalleep)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1746446400">- update to 1.8.3:
  Bugfixes
  * Fix mimir.rules.kubernetes panic on non-leader debug info
    retrieval (@TheoBrigitte)
  * Fix detection of the “streams limit exceeded” error in the Loki
    client so that metrics are correctly labeled as
    ReasonStreamLimited. (@maratkhv)
  * Fix loki.source.file race condition that often lead to panic when
    using decompression. (@kalleep)
  * Fix deadlock in loki.source.file that can happen when targets are
    removed. (@kalleep)
  * Fix loki.process to emit valid logfmt. (@kalleep)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1748865600">- update to 1.9.0:
  Breaking changes
  * The prometheus.exporter.windows component has been update to
    version v0.30.6. This update includes a significant rework of
    the exporter and includes some breaking changes. (@dehaansa)
    The msmq and service collectors can no longer be configured
    with a WMI where clause. Any filtering previously done in a
    where clause will need to be done in a prometheus.relabel
    component.
    The service collector no longer provides enable_v2_collector
    and use_api configuration options.
    The mscluster_* and netframework_* collectors are now replaced
    with one mscluster and netframework collector that allows you
    to enable the separate metric groupings individually.
    The teradici_pcoip and vmware_blast collectors have been
    removed from the exporter.
  * The prometheus.exporter.oracledb component now embeds the
    oracledb_exporter from oracle instead of the deprecated
    oracledb_exporter from iamseth for collecting metrics from an
    OracleDB server: (@wildum)
    The arguments username, password, default_metrics, and
    custom_metrics are now supported.
    The previously undocumented argument custom_metrics is now
    expecting a list of paths to custom metrics files.
    The following metrics are no longer available by default:
    oracledb_sessions_activity, oracledb_tablespace_free_bytes
    (Experimental) The enable_context_propagation argument in
    beyla.ebpf has been replaced with the context_propagation
    argument.
  * Set enable_context_propagation to all to get the same behaviour
    as enable_context_propagation being set to true.
  Security
  * CVE-2025-22872: Fix tokenizer incorrectly interpretting tags
    (bsc#1241863).
  * CVE-2025-46327: Fix race condition when checking access
    permissions to the Easy Logging configuration file
    (bsc#1242020).
  Features
  * Bump snmp_exporter and embedded modules in
    prometheus.exporter.snmp to v0.29.0, add cisco_device module
    support (@v-zhuravlev)
  * Add the otelcol.storage.file extension to support persistent
    sending queues and otelcol.receiver.filelog file state tracking
    between restarts. (@dehaansa)
  * Add otelcol.exporter.googlecloud community component to export
    metrics, traces, and logs to Google Cloud. (@motoki317)
  * Add support to configure basic authentication for alloy http
    server. (@kalleep)
  * Add validate command to alloy that will perform limited
    validation of alloy configuration files. (@kalleep)
  * Add support to validate foreach block when using validate
    command. (@kalleep)
  * Add otelcol.receiver.splunkhec component to receive events in
    splunk hec format and forward them to other otelcol.*
    components. (@kalleep)
  * Add support for Mimir federated rule groups in
    mimir.rules.kubernetes (@QuentinBisson)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1749124800">- update to 1.9.1:
  Bugfixes
  * Update the prometheus.exporter.windows component to version
    v0.30.7. This fixes an error with the exchange collector and
    terminal_services collector (@dehaansa)
  * Fix loki.source.firehose to propagate specific cloudwatch event
    timestamps when useIncomingTs is set to true. (@michaelPotter)
  * Fix elevated CPU usage when using some otelcol components due to
    debug logging. (@thampiotr)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1751284800">- update to 1.9.2:
  * Bugfixes
  - Send profiles concurrently from pyroscope.ebpf. (@korniltsev)
  - Fix the validate command not understanding the livedebugging
    block. (@dehaansa)
  - Fix invalid class names in python profiles obtained with
    pyroscope.ebpf. (@korniltsev)
  - Fixed a bug which prevented non-secret optional secrets to be
    passed in as number arguments. (@ptodev)
  - For CRD-based components (prometheus.operator.*), retry
    initializing informers if the apiserver request fails. This
    rectifies issues where the apiserver is not reachable
    immediately after node restart. (@dehaansa)
  * Other changes
  - Add no-op blocks and attributes to the
    prometheus.exporter.windows component (@ptodev).
    Version 1.9.0 of Alloy removed the msmq block, as well as the
    enable_v2_collector, where_clause, and use_api attributes in
    the service block.
    This made it difficult for users to upgrade, so those
    attributes have now been made a no-op instead of being
    removed.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1751889600">- Install default configuration file</changelog>
</package>
<package pkgid="e41e03155f6230cd934ec0406d6ae6bfe92e0b87dc5c7545d868e56881f9fa38" name="alsa-ucm-conf" arch="noarch">
  <version epoch="0" ver="1.2.10" rel="150600.3.5.1"/>
  <changelog author="tiwai@suse.de" date="1609848000">- Backport upstream fixes: HD-audio dual codec fixes and the builtin
  mic fix for rt5645-based devices:
  0010-HDA-Intel-HiFi-dual-Add-EnableSequence-and-DisableSe.patch
  0011-HDA-Intel-HiFi-dual-Add-BootSequence-and-disable-pla.patch
  0012-chtrt5645-Enable-Internal-MIC-of-ECS-EF20EA.patch</changelog>
  <changelog author="tiwai@suse.de" date="1611230400">- Backport upstream fixes:
  more Baytrail/Cherrytrail profiles, TRX40 / ALC1220-VLC profiles:
  0013-bytcr-rt5640-Add-support-for-devices-without-speaker.patch
  0014-rt5640-Move-standard-DAC-setup-to-EnableSeq.conf.patch
  0015-bytcr-rt5640-fix-the-execution-order.patch
  0016-ucm2-add-initial-configuration-for-TRX40-Gigabyte-Ao.patch
  0017-USB-Audio-ALC1220-Bump-analog-Speaker-priority-over-.patch
  0018-USB-Audio-ALC1220-fix-indentation-for-Speaker-device.patch
  0019-USB-Audio-fix-indentation-in-Gigabyte-Aorus-Master-M.patch
  0020-chtnau8824-Add-a-SST-define-variable.patch
  0021-kblrt5660-Fix-file-permissions.patch
- Run fdupes to reduce the duplicated files</changelog>
  <changelog author="rpm@fthiessen.de" date="1622462400">- Update to version 1.2.5
  * tegra: Add UCM for more devices
  * codecs/rt5640: Make headset optional
  * rt715: add mic led support
  * bytcr-rt5640: Add support for controlling a speaker-mute LED
  * cht-bsw-rt5672: Add support for controlling speaker- and
    mic-mute LEDs, Add support for the components string
  * ucm2: add support to for Qualcomm RB5 Platform
  * codecs/rt5672: Add hardware volume-control support
  * codecs/rt5640: Add hardware volume-control support
  * bytcr-wm5102: Add new UCM profile for BYT boards with a WM5102 codec
  * bytcr-rt5640: Add support for devices without speakers and/or
    an internal mic
  * chtrt5645: Enable Internal MIC of ECS EF20EA
  * chtnau8824: Add support for laptops using stereo DMICs and fix
    mono speaker config not working
  * Full changes:
    https://www.alsa-project.org/wiki/Changes_v1.2.4_v1.2.5#alsa-ucm-conf
- Drop upstream fixes
  * 0001-fix-the-ucm2-codecs-hda-hdmi.conf-use.patch
  * 0002-codecs-hda-hdmi.conf-add-DisplayPort-to-the-device-d.patch
  * 0003-sof-soundwire-use-the-codecs-hda-hdmi.conf-macro.patch
  * 0004-Revert-ucm2-HDA-acp-add-Capture-simple-mixer-element.patch
  * 0005-chtnau8824-Fix-mono-speaker-config-not-working.patch
  * 0006-chtnau8824-Add-support-for-laptops-using-stereo-DMIC.patch
  * 0007-chtnau8824-Boost-analog-mic-volumes-a-bit.patch
  * 0008-rt715-init-setup-ADC07-to-a-proper-volume.patch
  * 0009-sof-hda-dsp-Set-Master-Playback-Switch-on-in-the-Boo.patch
  * 0010-HDA-Intel-HiFi-dual-Add-EnableSequence-and-DisableSe.patch
  * 0011-HDA-Intel-HiFi-dual-Add-BootSequence-and-disable-pla.patch
  * 0012-chtrt5645-Enable-Internal-MIC-of-ECS-EF20EA.patch
  * 0013-bytcr-rt5640-Add-support-for-devices-without-speaker.patch
  * 0014-rt5640-Move-standard-DAC-setup-to-EnableSeq.conf.patch
  * 0015-bytcr-rt5640-fix-the-execution-order.patch
  * 0016-ucm2-add-initial-configuration-for-TRX40-Gigabyte-Ao.patch
  * 0017-USB-Audio-ALC1220-Bump-analog-Speaker-priority-over-.patch
  * 0018-USB-Audio-ALC1220-fix-indentation-for-Speaker-device.patch
  * 0019-USB-Audio-fix-indentation-in-Gigabyte-Aorus-Master-M.patch
  * 0020-chtnau8824-Add-a-SST-define-variable.patch
  * 0021-kblrt5660-Fix-file-permissions.patch</changelog>
  <changelog author="tiwai@suse.de" date="1623240000">- Fix for HDA config lookup (boo#1187079):
  0001-HDA-Intel-the-lookups-are-supported-from-syntax-4.patch</changelog>
  <changelog author="tiwai@suse.de" date="1623672000">- Update to version 1.2.5.1:
  a small bugfix release, including the previous patch
  https://www.alsa-project.org/wiki/Changes_v1.2.5_v1.2.5.1
- Drop the obsoleted patch:
  0001-HDA-Intel-the-lookups-are-supported-from-syntax-4.patch</changelog>
  <changelog author="tiwai@suse.de" date="1638792000">- Update to version 1.2.6:
  various profile updates.  See URL below for details:
    https://alsa-project.org/wiki/Changes_v1.2.5.1_v1.2.6#alsa-ucm-conf
- Add *.sig file for the tarball
- Explicit Requires for the libasound2 with the same or newer
  version</changelog>
  <changelog author="tiwai@suse.de" date="1639137600">- Update to version 1.2.6.1:
  a minor fix release:
  * acp: fix linked configuration
  * ucm2: Add support for SC7180 Trogdor Lazor Chromebooks
  * USB-Audio: fix the wrong condition type for If.realtek-alc1220-vb
- More a couple of upstream fixes for forgotten conversions:
  0001-sof-hda-dsp-fix-path-to-Hdmi.conf.patch
  0002-bytcht-es8316-fix-Include-paths-in-HiFi.conf.patch</changelog>
  <changelog author="tiwai@suse.de" date="1639137601">- Update to version 1.2.6.2:
  a minor fix release, just includnig ther previous fixes
- Drop obsoleted patches
  0001-sof-hda-dsp-fix-path-to-Hdmi.conf.patch
  0002-bytcht-es8316-fix-Include-paths-in-HiFi.conf.patch</changelog>
  <changelog author="tiwai@suse.de" date="1640520000">- Update to version 1.2.6.3:
  * ucm2/Qualcomm/apq8096: Change plughw to hw to access card
  * ucm2/Qualcomm/apq8016-sbc: Change plughw to hw to access card
  * ucm2: Add support for RT5650 on MediaTek SoCs
  * sof-soundwire: use absolute path in SectionUseCase</changelog>
  <changelog author="tiwai@suse.de" date="1640865600">- Fix a regression in HDA-DualCodecs:
  0001-HDA-DualCodecs-fix-typo-in-Speaker-condition.patch</changelog>
  <changelog author="tiwai@suse.de" date="1642766400">- Fix regression for AMD ACP LED control:
  0002-HDA-acp-avoid-to-create-Mic-ACP-LED-control-for-the-.patch</changelog>
  <changelog author="tiwai@suse.com" date="1654084800">- Update to version 1.2.7:
  Various profile updates for USB-audio, HD-audio, etc.
  For details, see:
  https://www.alsa-project.org/wiki/Changes_v1.2.6.3_v1.2.7#alsa-ucm-conf
- Drop obsoleted patches:
  0001-HDA-DualCodecs-fix-typo-in-Speaker-condition.patch
  0002-HDA-acp-avoid-to-create-Mic-ACP-LED-control-for-the-.patch</changelog>
  <changelog author="tiwai@suse.com" date="1654516800">- Backport upstream fixes for Steinberg UR44:
  0001-Steinberg-UR44-fix-the-Line2-channel-mapping.patch
  0002-Steinberg-UR44-fix-the-Line2-channel-mapping-2nd.patch
  0003-Steinberg-UR44-fix-the-direction-for-steinberg_ur44_.patch</changelog>
  <changelog author="tiwai@suse.com" date="1655726400">- Update to version 1.2.7.1:
  updates of various device-specific profiles.  For details, see
  https://www.alsa-project.org/wiki/Changes_v1.2.7_v1.2.7.1#alsa-ucm-conf
- Drop obsoleted patches:
  0001-Steinberg-UR44-fix-the-Line2-channel-mapping.patch
  0002-Steinberg-UR44-fix-the-Line2-channel-mapping-2nd.patch
  0003-Steinberg-UR44-fix-the-direction-for-steinberg_ur44_.patch</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Update to version 1.2.7.2:
    updates of various device-specific profiles.  For details, see
  https://www.alsa-project.org/wiki/Changes_v1.2.7.1_v1.2.7.2#alsa-ucm-conf</changelog>
  <changelog author="tiwai@suse.com" date="1666699200">- Update to version 1.2.8 (jsc#PED-850):
  lots of new profiles for USB-audio, SOF and others:
  https://www.alsa-project.org/wiki/Changes_v1.2.7.2_v1.2.8
- Add keyring</changelog>
  <changelog author="tiwai@suse.com" date="1683547200">- Update to version 1.2.9:
  various profile updates for USB-audio, SOF and others.
  For details, see:
  https://www.alsa-project.org/wiki/Changes_v1.2.8_v1.2.9#alsa-ucm-conf</changelog>
  <changelog author="tiwai@suse.com" date="1693828800">- Update to version 1.2.10 (jsc#PED-6566):
  * updates / fixes for various devices: mtk-rt5650, usb-audio, tegra
    es8316, sof-essx8336, pinephone, Steinberg UR44C, AMD ACP RPL,
    ACP63, sof-hda-dsp, etc
  For details, see:
  https://www.alsa-project.org/wiki/Changes_v1.2.9_v1.2.10#alsa-ucm-conf
- Upstream regression fix:
  0001-SplitPCM-Device-argument-may-not-be-set.patch</changelog>
  <changelog author="tiwai@suse.com" date="1750420800">- Improved HD-audio Mic LED handling (bsc#1243695):
  0002-common-add-led.conf-with-SetLED-macro-to-hide-implem.patch
  0003-ucm2-use-new-SetLED-macro-to-hide-the-implementation.patch
  0004-ucm2-HDA-HiFi-analog-mic-Refactor-the-analog-mic-dis.patch
  0005-ucm2-HDA-remove-HDA-Capture-value.conf-and-put-conte.patch
  0006-HDA-move-led.conf-include-to-more-appropriate-place.patch
  0007-HDA-mics-prefer-Mic-Jack-instead-Headphone-Jack.patch
  0008-HDA-mics-improve-the-Jack-selection.patch
  0009-HDA-mics-don-t-create-conflict-link-for-Headphone-Mi.patch
  0010-acppdmmach-add-support-for-ACP-7.0.patch</changelog>
  <changelog author="tiwai@suse.com" date="1751544000">- Correct / update the previous backported patches</changelog>
</package>
<package pkgid="58ecc9b657b0bb45db47dcb3bb9a269469e1bc3f3df223b4fc44d5ca8e09bb68" name="alsa-ucm-conf" arch="src">
  <version epoch="0" ver="1.2.10" rel="150600.3.5.1"/>
  <changelog author="tiwai@suse.de" date="1609848000">- Backport upstream fixes: HD-audio dual codec fixes and the builtin
  mic fix for rt5645-based devices:
  0010-HDA-Intel-HiFi-dual-Add-EnableSequence-and-DisableSe.patch
  0011-HDA-Intel-HiFi-dual-Add-BootSequence-and-disable-pla.patch
  0012-chtrt5645-Enable-Internal-MIC-of-ECS-EF20EA.patch</changelog>
  <changelog author="tiwai@suse.de" date="1611230400">- Backport upstream fixes:
  more Baytrail/Cherrytrail profiles, TRX40 / ALC1220-VLC profiles:
  0013-bytcr-rt5640-Add-support-for-devices-without-speaker.patch
  0014-rt5640-Move-standard-DAC-setup-to-EnableSeq.conf.patch
  0015-bytcr-rt5640-fix-the-execution-order.patch
  0016-ucm2-add-initial-configuration-for-TRX40-Gigabyte-Ao.patch
  0017-USB-Audio-ALC1220-Bump-analog-Speaker-priority-over-.patch
  0018-USB-Audio-ALC1220-fix-indentation-for-Speaker-device.patch
  0019-USB-Audio-fix-indentation-in-Gigabyte-Aorus-Master-M.patch
  0020-chtnau8824-Add-a-SST-define-variable.patch
  0021-kblrt5660-Fix-file-permissions.patch
- Run fdupes to reduce the duplicated files</changelog>
  <changelog author="rpm@fthiessen.de" date="1622462400">- Update to version 1.2.5
  * tegra: Add UCM for more devices
  * codecs/rt5640: Make headset optional
  * rt715: add mic led support
  * bytcr-rt5640: Add support for controlling a speaker-mute LED
  * cht-bsw-rt5672: Add support for controlling speaker- and
    mic-mute LEDs, Add support for the components string
  * ucm2: add support to for Qualcomm RB5 Platform
  * codecs/rt5672: Add hardware volume-control support
  * codecs/rt5640: Add hardware volume-control support
  * bytcr-wm5102: Add new UCM profile for BYT boards with a WM5102 codec
  * bytcr-rt5640: Add support for devices without speakers and/or
    an internal mic
  * chtrt5645: Enable Internal MIC of ECS EF20EA
  * chtnau8824: Add support for laptops using stereo DMICs and fix
    mono speaker config not working
  * Full changes:
    https://www.alsa-project.org/wiki/Changes_v1.2.4_v1.2.5#alsa-ucm-conf
- Drop upstream fixes
  * 0001-fix-the-ucm2-codecs-hda-hdmi.conf-use.patch
  * 0002-codecs-hda-hdmi.conf-add-DisplayPort-to-the-device-d.patch
  * 0003-sof-soundwire-use-the-codecs-hda-hdmi.conf-macro.patch
  * 0004-Revert-ucm2-HDA-acp-add-Capture-simple-mixer-element.patch
  * 0005-chtnau8824-Fix-mono-speaker-config-not-working.patch
  * 0006-chtnau8824-Add-support-for-laptops-using-stereo-DMIC.patch
  * 0007-chtnau8824-Boost-analog-mic-volumes-a-bit.patch
  * 0008-rt715-init-setup-ADC07-to-a-proper-volume.patch
  * 0009-sof-hda-dsp-Set-Master-Playback-Switch-on-in-the-Boo.patch
  * 0010-HDA-Intel-HiFi-dual-Add-EnableSequence-and-DisableSe.patch
  * 0011-HDA-Intel-HiFi-dual-Add-BootSequence-and-disable-pla.patch
  * 0012-chtrt5645-Enable-Internal-MIC-of-ECS-EF20EA.patch
  * 0013-bytcr-rt5640-Add-support-for-devices-without-speaker.patch
  * 0014-rt5640-Move-standard-DAC-setup-to-EnableSeq.conf.patch
  * 0015-bytcr-rt5640-fix-the-execution-order.patch
  * 0016-ucm2-add-initial-configuration-for-TRX40-Gigabyte-Ao.patch
  * 0017-USB-Audio-ALC1220-Bump-analog-Speaker-priority-over-.patch
  * 0018-USB-Audio-ALC1220-fix-indentation-for-Speaker-device.patch
  * 0019-USB-Audio-fix-indentation-in-Gigabyte-Aorus-Master-M.patch
  * 0020-chtnau8824-Add-a-SST-define-variable.patch
  * 0021-kblrt5660-Fix-file-permissions.patch</changelog>
  <changelog author="tiwai@suse.de" date="1623240000">- Fix for HDA config lookup (boo#1187079):
  0001-HDA-Intel-the-lookups-are-supported-from-syntax-4.patch</changelog>
  <changelog author="tiwai@suse.de" date="1623672000">- Update to version 1.2.5.1:
  a small bugfix release, including the previous patch
  https://www.alsa-project.org/wiki/Changes_v1.2.5_v1.2.5.1
- Drop the obsoleted patch:
  0001-HDA-Intel-the-lookups-are-supported-from-syntax-4.patch</changelog>
  <changelog author="tiwai@suse.de" date="1638792000">- Update to version 1.2.6:
  various profile updates.  See URL below for details:
    https://alsa-project.org/wiki/Changes_v1.2.5.1_v1.2.6#alsa-ucm-conf
- Add *.sig file for the tarball
- Explicit Requires for the libasound2 with the same or newer
  version</changelog>
  <changelog author="tiwai@suse.de" date="1639137600">- Update to version 1.2.6.1:
  a minor fix release:
  * acp: fix linked configuration
  * ucm2: Add support for SC7180 Trogdor Lazor Chromebooks
  * USB-Audio: fix the wrong condition type for If.realtek-alc1220-vb
- More a couple of upstream fixes for forgotten conversions:
  0001-sof-hda-dsp-fix-path-to-Hdmi.conf.patch
  0002-bytcht-es8316-fix-Include-paths-in-HiFi.conf.patch</changelog>
  <changelog author="tiwai@suse.de" date="1639137601">- Update to version 1.2.6.2:
  a minor fix release, just includnig ther previous fixes
- Drop obsoleted patches
  0001-sof-hda-dsp-fix-path-to-Hdmi.conf.patch
  0002-bytcht-es8316-fix-Include-paths-in-HiFi.conf.patch</changelog>
  <changelog author="tiwai@suse.de" date="1640520000">- Update to version 1.2.6.3:
  * ucm2/Qualcomm/apq8096: Change plughw to hw to access card
  * ucm2/Qualcomm/apq8016-sbc: Change plughw to hw to access card
  * ucm2: Add support for RT5650 on MediaTek SoCs
  * sof-soundwire: use absolute path in SectionUseCase</changelog>
  <changelog author="tiwai@suse.de" date="1640865600">- Fix a regression in HDA-DualCodecs:
  0001-HDA-DualCodecs-fix-typo-in-Speaker-condition.patch</changelog>
  <changelog author="tiwai@suse.de" date="1642766400">- Fix regression for AMD ACP LED control:
  0002-HDA-acp-avoid-to-create-Mic-ACP-LED-control-for-the-.patch</changelog>
  <changelog author="tiwai@suse.com" date="1654084800">- Update to version 1.2.7:
  Various profile updates for USB-audio, HD-audio, etc.
  For details, see:
  https://www.alsa-project.org/wiki/Changes_v1.2.6.3_v1.2.7#alsa-ucm-conf
- Drop obsoleted patches:
  0001-HDA-DualCodecs-fix-typo-in-Speaker-condition.patch
  0002-HDA-acp-avoid-to-create-Mic-ACP-LED-control-for-the-.patch</changelog>
  <changelog author="tiwai@suse.com" date="1654516800">- Backport upstream fixes for Steinberg UR44:
  0001-Steinberg-UR44-fix-the-Line2-channel-mapping.patch
  0002-Steinberg-UR44-fix-the-Line2-channel-mapping-2nd.patch
  0003-Steinberg-UR44-fix-the-direction-for-steinberg_ur44_.patch</changelog>
  <changelog author="tiwai@suse.com" date="1655726400">- Update to version 1.2.7.1:
  updates of various device-specific profiles.  For details, see
  https://www.alsa-project.org/wiki/Changes_v1.2.7_v1.2.7.1#alsa-ucm-conf
- Drop obsoleted patches:
  0001-Steinberg-UR44-fix-the-Line2-channel-mapping.patch
  0002-Steinberg-UR44-fix-the-Line2-channel-mapping-2nd.patch
  0003-Steinberg-UR44-fix-the-direction-for-steinberg_ur44_.patch</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Update to version 1.2.7.2:
    updates of various device-specific profiles.  For details, see
  https://www.alsa-project.org/wiki/Changes_v1.2.7.1_v1.2.7.2#alsa-ucm-conf</changelog>
  <changelog author="tiwai@suse.com" date="1666699200">- Update to version 1.2.8 (jsc#PED-850):
  lots of new profiles for USB-audio, SOF and others:
  https://www.alsa-project.org/wiki/Changes_v1.2.7.2_v1.2.8
- Add keyring</changelog>
  <changelog author="tiwai@suse.com" date="1683547200">- Update to version 1.2.9:
  various profile updates for USB-audio, SOF and others.
  For details, see:
  https://www.alsa-project.org/wiki/Changes_v1.2.8_v1.2.9#alsa-ucm-conf</changelog>
  <changelog author="tiwai@suse.com" date="1693828800">- Update to version 1.2.10 (jsc#PED-6566):
  * updates / fixes for various devices: mtk-rt5650, usb-audio, tegra
    es8316, sof-essx8336, pinephone, Steinberg UR44C, AMD ACP RPL,
    ACP63, sof-hda-dsp, etc
  For details, see:
  https://www.alsa-project.org/wiki/Changes_v1.2.9_v1.2.10#alsa-ucm-conf
- Upstream regression fix:
  0001-SplitPCM-Device-argument-may-not-be-set.patch</changelog>
  <changelog author="tiwai@suse.com" date="1750420800">- Improved HD-audio Mic LED handling (bsc#1243695):
  0002-common-add-led.conf-with-SetLED-macro-to-hide-implem.patch
  0003-ucm2-use-new-SetLED-macro-to-hide-the-implementation.patch
  0004-ucm2-HDA-HiFi-analog-mic-Refactor-the-analog-mic-dis.patch
  0005-ucm2-HDA-remove-HDA-Capture-value.conf-and-put-conte.patch
  0006-HDA-move-led.conf-include-to-more-appropriate-place.patch
  0007-HDA-mics-prefer-Mic-Jack-instead-Headphone-Jack.patch
  0008-HDA-mics-improve-the-Jack-selection.patch
  0009-HDA-mics-don-t-create-conflict-link-for-Headphone-Mi.patch
  0010-acppdmmach-add-support-for-ACP-7.0.patch</changelog>
  <changelog author="tiwai@suse.com" date="1751544000">- Correct / update the previous backported patches</changelog>
</package>
<package pkgid="bebdf49214321c88f819fa2c760c323ec2c392d9dd966fae4641588dbec0dad8" name="alsa-ucm-conf" arch="noarch">
  <version epoch="0" ver="1.2.10" rel="150600.3.8.1"/>
  <changelog author="tiwai@suse.de" date="1611230400">- Backport upstream fixes:
  more Baytrail/Cherrytrail profiles, TRX40 / ALC1220-VLC profiles:
  0013-bytcr-rt5640-Add-support-for-devices-without-speaker.patch
  0014-rt5640-Move-standard-DAC-setup-to-EnableSeq.conf.patch
  0015-bytcr-rt5640-fix-the-execution-order.patch
  0016-ucm2-add-initial-configuration-for-TRX40-Gigabyte-Ao.patch
  0017-USB-Audio-ALC1220-Bump-analog-Speaker-priority-over-.patch
  0018-USB-Audio-ALC1220-fix-indentation-for-Speaker-device.patch
  0019-USB-Audio-fix-indentation-in-Gigabyte-Aorus-Master-M.patch
  0020-chtnau8824-Add-a-SST-define-variable.patch
  0021-kblrt5660-Fix-file-permissions.patch
- Run fdupes to reduce the duplicated files</changelog>
  <changelog author="rpm@fthiessen.de" date="1622462400">- Update to version 1.2.5
  * tegra: Add UCM for more devices
  * codecs/rt5640: Make headset optional
  * rt715: add mic led support
  * bytcr-rt5640: Add support for controlling a speaker-mute LED
  * cht-bsw-rt5672: Add support for controlling speaker- and
    mic-mute LEDs, Add support for the components string
  * ucm2: add support to for Qualcomm RB5 Platform
  * codecs/rt5672: Add hardware volume-control support
  * codecs/rt5640: Add hardware volume-control support
  * bytcr-wm5102: Add new UCM profile for BYT boards with a WM5102 codec
  * bytcr-rt5640: Add support for devices without speakers and/or
    an internal mic
  * chtrt5645: Enable Internal MIC of ECS EF20EA
  * chtnau8824: Add support for laptops using stereo DMICs and fix
    mono speaker config not working
  * Full changes:
    https://www.alsa-project.org/wiki/Changes_v1.2.4_v1.2.5#alsa-ucm-conf
- Drop upstream fixes
  * 0001-fix-the-ucm2-codecs-hda-hdmi.conf-use.patch
  * 0002-codecs-hda-hdmi.conf-add-DisplayPort-to-the-device-d.patch
  * 0003-sof-soundwire-use-the-codecs-hda-hdmi.conf-macro.patch
  * 0004-Revert-ucm2-HDA-acp-add-Capture-simple-mixer-element.patch
  * 0005-chtnau8824-Fix-mono-speaker-config-not-working.patch
  * 0006-chtnau8824-Add-support-for-laptops-using-stereo-DMIC.patch
  * 0007-chtnau8824-Boost-analog-mic-volumes-a-bit.patch
  * 0008-rt715-init-setup-ADC07-to-a-proper-volume.patch
  * 0009-sof-hda-dsp-Set-Master-Playback-Switch-on-in-the-Boo.patch
  * 0010-HDA-Intel-HiFi-dual-Add-EnableSequence-and-DisableSe.patch
  * 0011-HDA-Intel-HiFi-dual-Add-BootSequence-and-disable-pla.patch
  * 0012-chtrt5645-Enable-Internal-MIC-of-ECS-EF20EA.patch
  * 0013-bytcr-rt5640-Add-support-for-devices-without-speaker.patch
  * 0014-rt5640-Move-standard-DAC-setup-to-EnableSeq.conf.patch
  * 0015-bytcr-rt5640-fix-the-execution-order.patch
  * 0016-ucm2-add-initial-configuration-for-TRX40-Gigabyte-Ao.patch
  * 0017-USB-Audio-ALC1220-Bump-analog-Speaker-priority-over-.patch
  * 0018-USB-Audio-ALC1220-fix-indentation-for-Speaker-device.patch
  * 0019-USB-Audio-fix-indentation-in-Gigabyte-Aorus-Master-M.patch
  * 0020-chtnau8824-Add-a-SST-define-variable.patch
  * 0021-kblrt5660-Fix-file-permissions.patch</changelog>
  <changelog author="tiwai@suse.de" date="1623240000">- Fix for HDA config lookup (boo#1187079):
  0001-HDA-Intel-the-lookups-are-supported-from-syntax-4.patch</changelog>
  <changelog author="tiwai@suse.de" date="1623672000">- Update to version 1.2.5.1:
  a small bugfix release, including the previous patch
  https://www.alsa-project.org/wiki/Changes_v1.2.5_v1.2.5.1
- Drop the obsoleted patch:
  0001-HDA-Intel-the-lookups-are-supported-from-syntax-4.patch</changelog>
  <changelog author="tiwai@suse.de" date="1638792000">- Update to version 1.2.6:
  various profile updates.  See URL below for details:
    https://alsa-project.org/wiki/Changes_v1.2.5.1_v1.2.6#alsa-ucm-conf
- Add *.sig file for the tarball
- Explicit Requires for the libasound2 with the same or newer
  version</changelog>
  <changelog author="tiwai@suse.de" date="1639137600">- Update to version 1.2.6.1:
  a minor fix release:
  * acp: fix linked configuration
  * ucm2: Add support for SC7180 Trogdor Lazor Chromebooks
  * USB-Audio: fix the wrong condition type for If.realtek-alc1220-vb
- More a couple of upstream fixes for forgotten conversions:
  0001-sof-hda-dsp-fix-path-to-Hdmi.conf.patch
  0002-bytcht-es8316-fix-Include-paths-in-HiFi.conf.patch</changelog>
  <changelog author="tiwai@suse.de" date="1639137601">- Update to version 1.2.6.2:
  a minor fix release, just includnig ther previous fixes
- Drop obsoleted patches
  0001-sof-hda-dsp-fix-path-to-Hdmi.conf.patch
  0002-bytcht-es8316-fix-Include-paths-in-HiFi.conf.patch</changelog>
  <changelog author="tiwai@suse.de" date="1640520000">- Update to version 1.2.6.3:
  * ucm2/Qualcomm/apq8096: Change plughw to hw to access card
  * ucm2/Qualcomm/apq8016-sbc: Change plughw to hw to access card
  * ucm2: Add support for RT5650 on MediaTek SoCs
  * sof-soundwire: use absolute path in SectionUseCase</changelog>
  <changelog author="tiwai@suse.de" date="1640865600">- Fix a regression in HDA-DualCodecs:
  0001-HDA-DualCodecs-fix-typo-in-Speaker-condition.patch</changelog>
  <changelog author="tiwai@suse.de" date="1642766400">- Fix regression for AMD ACP LED control:
  0002-HDA-acp-avoid-to-create-Mic-ACP-LED-control-for-the-.patch</changelog>
  <changelog author="tiwai@suse.com" date="1654084800">- Update to version 1.2.7:
  Various profile updates for USB-audio, HD-audio, etc.
  For details, see:
  https://www.alsa-project.org/wiki/Changes_v1.2.6.3_v1.2.7#alsa-ucm-conf
- Drop obsoleted patches:
  0001-HDA-DualCodecs-fix-typo-in-Speaker-condition.patch
  0002-HDA-acp-avoid-to-create-Mic-ACP-LED-control-for-the-.patch</changelog>
  <changelog author="tiwai@suse.com" date="1654516800">- Backport upstream fixes for Steinberg UR44:
  0001-Steinberg-UR44-fix-the-Line2-channel-mapping.patch
  0002-Steinberg-UR44-fix-the-Line2-channel-mapping-2nd.patch
  0003-Steinberg-UR44-fix-the-direction-for-steinberg_ur44_.patch</changelog>
  <changelog author="tiwai@suse.com" date="1655726400">- Update to version 1.2.7.1:
  updates of various device-specific profiles.  For details, see
  https://www.alsa-project.org/wiki/Changes_v1.2.7_v1.2.7.1#alsa-ucm-conf
- Drop obsoleted patches:
  0001-Steinberg-UR44-fix-the-Line2-channel-mapping.patch
  0002-Steinberg-UR44-fix-the-Line2-channel-mapping-2nd.patch
  0003-Steinberg-UR44-fix-the-direction-for-steinberg_ur44_.patch</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Update to version 1.2.7.2:
    updates of various device-specific profiles.  For details, see
  https://www.alsa-project.org/wiki/Changes_v1.2.7.1_v1.2.7.2#alsa-ucm-conf</changelog>
  <changelog author="tiwai@suse.com" date="1666699200">- Update to version 1.2.8 (jsc#PED-850):
  lots of new profiles for USB-audio, SOF and others:
  https://www.alsa-project.org/wiki/Changes_v1.2.7.2_v1.2.8
- Add keyring</changelog>
  <changelog author="tiwai@suse.com" date="1683547200">- Update to version 1.2.9:
  various profile updates for USB-audio, SOF and others.
  For details, see:
  https://www.alsa-project.org/wiki/Changes_v1.2.8_v1.2.9#alsa-ucm-conf</changelog>
  <changelog author="tiwai@suse.com" date="1693828800">- Update to version 1.2.10 (jsc#PED-6566):
  * updates / fixes for various devices: mtk-rt5650, usb-audio, tegra
    es8316, sof-essx8336, pinephone, Steinberg UR44C, AMD ACP RPL,
    ACP63, sof-hda-dsp, etc
  For details, see:
  https://www.alsa-project.org/wiki/Changes_v1.2.9_v1.2.10#alsa-ucm-conf
- Upstream regression fix:
  0001-SplitPCM-Device-argument-may-not-be-set.patch</changelog>
  <changelog author="tiwai@suse.com" date="1750420800">- Improved HD-audio Mic LED handling (bsc#1243695):
  0002-common-add-led.conf-with-SetLED-macro-to-hide-implem.patch
  0003-ucm2-use-new-SetLED-macro-to-hide-the-implementation.patch
  0004-ucm2-HDA-HiFi-analog-mic-Refactor-the-analog-mic-dis.patch
  0005-ucm2-HDA-remove-HDA-Capture-value.conf-and-put-conte.patch
  0006-HDA-move-led.conf-include-to-more-appropriate-place.patch
  0007-HDA-mics-prefer-Mic-Jack-instead-Headphone-Jack.patch
  0008-HDA-mics-improve-the-Jack-selection.patch
  0009-HDA-mics-don-t-create-conflict-link-for-Headphone-Mi.patch
  0010-acppdmmach-add-support-for-ACP-7.0.patch</changelog>
  <changelog author="tiwai@suse.com" date="1751544000">- Correct / update the previous backported patches</changelog>
  <changelog author="tiwai@suse.com" date="1753099200">- Drop previous patches that caused regressions (bsc#1246737,
  bsc#1246763); keep the ACP-7 enablement patch meanwhile:
  0002-common-add-led.conf-with-SetLED-macro-to-hide-implem.patch
  0003-ucm2-use-new-SetLED-macro-to-hide-the-implementation.patch
  0004-ucm2-HDA-HiFi-analog-mic-Refactor-the-analog-mic-dis.patch
  0005-ucm2-HDA-remove-HDA-Capture-value.conf-and-put-conte.patch
  0006-HDA-move-led.conf-include-to-more-appropriate-place.patch
  0007-HDA-mics-prefer-Mic-Jack-instead-Headphone-Jack.patch
  0008-HDA-mics-improve-the-Jack-selection.patch
  0009-HDA-mics-don-t-create-conflict-link-for-Headphone-Mi.patch</changelog>
</package>
<package pkgid="d6b5c93e48193e5aa58e8d395d65ab5edef9e06c500be22f7b630f70434fedfc" name="alsa-ucm-conf" arch="src">
  <version epoch="0" ver="1.2.10" rel="150600.3.8.1"/>
  <changelog author="tiwai@suse.de" date="1611230400">- Backport upstream fixes:
  more Baytrail/Cherrytrail profiles, TRX40 / ALC1220-VLC profiles:
  0013-bytcr-rt5640-Add-support-for-devices-without-speaker.patch
  0014-rt5640-Move-standard-DAC-setup-to-EnableSeq.conf.patch
  0015-bytcr-rt5640-fix-the-execution-order.patch
  0016-ucm2-add-initial-configuration-for-TRX40-Gigabyte-Ao.patch
  0017-USB-Audio-ALC1220-Bump-analog-Speaker-priority-over-.patch
  0018-USB-Audio-ALC1220-fix-indentation-for-Speaker-device.patch
  0019-USB-Audio-fix-indentation-in-Gigabyte-Aorus-Master-M.patch
  0020-chtnau8824-Add-a-SST-define-variable.patch
  0021-kblrt5660-Fix-file-permissions.patch
- Run fdupes to reduce the duplicated files</changelog>
  <changelog author="rpm@fthiessen.de" date="1622462400">- Update to version 1.2.5
  * tegra: Add UCM for more devices
  * codecs/rt5640: Make headset optional
  * rt715: add mic led support
  * bytcr-rt5640: Add support for controlling a speaker-mute LED
  * cht-bsw-rt5672: Add support for controlling speaker- and
    mic-mute LEDs, Add support for the components string
  * ucm2: add support to for Qualcomm RB5 Platform
  * codecs/rt5672: Add hardware volume-control support
  * codecs/rt5640: Add hardware volume-control support
  * bytcr-wm5102: Add new UCM profile for BYT boards with a WM5102 codec
  * bytcr-rt5640: Add support for devices without speakers and/or
    an internal mic
  * chtrt5645: Enable Internal MIC of ECS EF20EA
  * chtnau8824: Add support for laptops using stereo DMICs and fix
    mono speaker config not working
  * Full changes:
    https://www.alsa-project.org/wiki/Changes_v1.2.4_v1.2.5#alsa-ucm-conf
- Drop upstream fixes
  * 0001-fix-the-ucm2-codecs-hda-hdmi.conf-use.patch
  * 0002-codecs-hda-hdmi.conf-add-DisplayPort-to-the-device-d.patch
  * 0003-sof-soundwire-use-the-codecs-hda-hdmi.conf-macro.patch
  * 0004-Revert-ucm2-HDA-acp-add-Capture-simple-mixer-element.patch
  * 0005-chtnau8824-Fix-mono-speaker-config-not-working.patch
  * 0006-chtnau8824-Add-support-for-laptops-using-stereo-DMIC.patch
  * 0007-chtnau8824-Boost-analog-mic-volumes-a-bit.patch
  * 0008-rt715-init-setup-ADC07-to-a-proper-volume.patch
  * 0009-sof-hda-dsp-Set-Master-Playback-Switch-on-in-the-Boo.patch
  * 0010-HDA-Intel-HiFi-dual-Add-EnableSequence-and-DisableSe.patch
  * 0011-HDA-Intel-HiFi-dual-Add-BootSequence-and-disable-pla.patch
  * 0012-chtrt5645-Enable-Internal-MIC-of-ECS-EF20EA.patch
  * 0013-bytcr-rt5640-Add-support-for-devices-without-speaker.patch
  * 0014-rt5640-Move-standard-DAC-setup-to-EnableSeq.conf.patch
  * 0015-bytcr-rt5640-fix-the-execution-order.patch
  * 0016-ucm2-add-initial-configuration-for-TRX40-Gigabyte-Ao.patch
  * 0017-USB-Audio-ALC1220-Bump-analog-Speaker-priority-over-.patch
  * 0018-USB-Audio-ALC1220-fix-indentation-for-Speaker-device.patch
  * 0019-USB-Audio-fix-indentation-in-Gigabyte-Aorus-Master-M.patch
  * 0020-chtnau8824-Add-a-SST-define-variable.patch
  * 0021-kblrt5660-Fix-file-permissions.patch</changelog>
  <changelog author="tiwai@suse.de" date="1623240000">- Fix for HDA config lookup (boo#1187079):
  0001-HDA-Intel-the-lookups-are-supported-from-syntax-4.patch</changelog>
  <changelog author="tiwai@suse.de" date="1623672000">- Update to version 1.2.5.1:
  a small bugfix release, including the previous patch
  https://www.alsa-project.org/wiki/Changes_v1.2.5_v1.2.5.1
- Drop the obsoleted patch:
  0001-HDA-Intel-the-lookups-are-supported-from-syntax-4.patch</changelog>
  <changelog author="tiwai@suse.de" date="1638792000">- Update to version 1.2.6:
  various profile updates.  See URL below for details:
    https://alsa-project.org/wiki/Changes_v1.2.5.1_v1.2.6#alsa-ucm-conf
- Add *.sig file for the tarball
- Explicit Requires for the libasound2 with the same or newer
  version</changelog>
  <changelog author="tiwai@suse.de" date="1639137600">- Update to version 1.2.6.1:
  a minor fix release:
  * acp: fix linked configuration
  * ucm2: Add support for SC7180 Trogdor Lazor Chromebooks
  * USB-Audio: fix the wrong condition type for If.realtek-alc1220-vb
- More a couple of upstream fixes for forgotten conversions:
  0001-sof-hda-dsp-fix-path-to-Hdmi.conf.patch
  0002-bytcht-es8316-fix-Include-paths-in-HiFi.conf.patch</changelog>
  <changelog author="tiwai@suse.de" date="1639137601">- Update to version 1.2.6.2:
  a minor fix release, just includnig ther previous fixes
- Drop obsoleted patches
  0001-sof-hda-dsp-fix-path-to-Hdmi.conf.patch
  0002-bytcht-es8316-fix-Include-paths-in-HiFi.conf.patch</changelog>
  <changelog author="tiwai@suse.de" date="1640520000">- Update to version 1.2.6.3:
  * ucm2/Qualcomm/apq8096: Change plughw to hw to access card
  * ucm2/Qualcomm/apq8016-sbc: Change plughw to hw to access card
  * ucm2: Add support for RT5650 on MediaTek SoCs
  * sof-soundwire: use absolute path in SectionUseCase</changelog>
  <changelog author="tiwai@suse.de" date="1640865600">- Fix a regression in HDA-DualCodecs:
  0001-HDA-DualCodecs-fix-typo-in-Speaker-condition.patch</changelog>
  <changelog author="tiwai@suse.de" date="1642766400">- Fix regression for AMD ACP LED control:
  0002-HDA-acp-avoid-to-create-Mic-ACP-LED-control-for-the-.patch</changelog>
  <changelog author="tiwai@suse.com" date="1654084800">- Update to version 1.2.7:
  Various profile updates for USB-audio, HD-audio, etc.
  For details, see:
  https://www.alsa-project.org/wiki/Changes_v1.2.6.3_v1.2.7#alsa-ucm-conf
- Drop obsoleted patches:
  0001-HDA-DualCodecs-fix-typo-in-Speaker-condition.patch
  0002-HDA-acp-avoid-to-create-Mic-ACP-LED-control-for-the-.patch</changelog>
  <changelog author="tiwai@suse.com" date="1654516800">- Backport upstream fixes for Steinberg UR44:
  0001-Steinberg-UR44-fix-the-Line2-channel-mapping.patch
  0002-Steinberg-UR44-fix-the-Line2-channel-mapping-2nd.patch
  0003-Steinberg-UR44-fix-the-direction-for-steinberg_ur44_.patch</changelog>
  <changelog author="tiwai@suse.com" date="1655726400">- Update to version 1.2.7.1:
  updates of various device-specific profiles.  For details, see
  https://www.alsa-project.org/wiki/Changes_v1.2.7_v1.2.7.1#alsa-ucm-conf
- Drop obsoleted patches:
  0001-Steinberg-UR44-fix-the-Line2-channel-mapping.patch
  0002-Steinberg-UR44-fix-the-Line2-channel-mapping-2nd.patch
  0003-Steinberg-UR44-fix-the-direction-for-steinberg_ur44_.patch</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Update to version 1.2.7.2:
    updates of various device-specific profiles.  For details, see
  https://www.alsa-project.org/wiki/Changes_v1.2.7.1_v1.2.7.2#alsa-ucm-conf</changelog>
  <changelog author="tiwai@suse.com" date="1666699200">- Update to version 1.2.8 (jsc#PED-850):
  lots of new profiles for USB-audio, SOF and others:
  https://www.alsa-project.org/wiki/Changes_v1.2.7.2_v1.2.8
- Add keyring</changelog>
  <changelog author="tiwai@suse.com" date="1683547200">- Update to version 1.2.9:
  various profile updates for USB-audio, SOF and others.
  For details, see:
  https://www.alsa-project.org/wiki/Changes_v1.2.8_v1.2.9#alsa-ucm-conf</changelog>
  <changelog author="tiwai@suse.com" date="1693828800">- Update to version 1.2.10 (jsc#PED-6566):
  * updates / fixes for various devices: mtk-rt5650, usb-audio, tegra
    es8316, sof-essx8336, pinephone, Steinberg UR44C, AMD ACP RPL,
    ACP63, sof-hda-dsp, etc
  For details, see:
  https://www.alsa-project.org/wiki/Changes_v1.2.9_v1.2.10#alsa-ucm-conf
- Upstream regression fix:
  0001-SplitPCM-Device-argument-may-not-be-set.patch</changelog>
  <changelog author="tiwai@suse.com" date="1750420800">- Improved HD-audio Mic LED handling (bsc#1243695):
  0002-common-add-led.conf-with-SetLED-macro-to-hide-implem.patch
  0003-ucm2-use-new-SetLED-macro-to-hide-the-implementation.patch
  0004-ucm2-HDA-HiFi-analog-mic-Refactor-the-analog-mic-dis.patch
  0005-ucm2-HDA-remove-HDA-Capture-value.conf-and-put-conte.patch
  0006-HDA-move-led.conf-include-to-more-appropriate-place.patch
  0007-HDA-mics-prefer-Mic-Jack-instead-Headphone-Jack.patch
  0008-HDA-mics-improve-the-Jack-selection.patch
  0009-HDA-mics-don-t-create-conflict-link-for-Headphone-Mi.patch
  0010-acppdmmach-add-support-for-ACP-7.0.patch</changelog>
  <changelog author="tiwai@suse.com" date="1751544000">- Correct / update the previous backported patches</changelog>
  <changelog author="tiwai@suse.com" date="1753099200">- Drop previous patches that caused regressions (bsc#1246737,
  bsc#1246763); keep the ACP-7 enablement patch meanwhile:
  0002-common-add-led.conf-with-SetLED-macro-to-hide-implem.patch
  0003-ucm2-use-new-SetLED-macro-to-hide-the-implementation.patch
  0004-ucm2-HDA-HiFi-analog-mic-Refactor-the-analog-mic-dis.patch
  0005-ucm2-HDA-remove-HDA-Capture-value.conf-and-put-conte.patch
  0006-HDA-move-led.conf-include-to-more-appropriate-place.patch
  0007-HDA-mics-prefer-Mic-Jack-instead-Headphone-Jack.patch
  0008-HDA-mics-improve-the-Jack-selection.patch
  0009-HDA-mics-don-t-create-conflict-link-for-Headphone-Mi.patch</changelog>
</package>
<package pkgid="8c42d345d0f9d38251e5d3d88b7b985aa9d9e77167fa6665fbed26b3dfd92e10" name="apache-commons-lang" arch="noarch">
  <version epoch="0" ver="2.6" rel="150200.14.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local</changelog>
  <changelog author="fstrba@suse.com" date="1505044800">- Require for build java-devel = 1.8.0, since it is the last
  version being able to build with source and target levels &lt; 1.5</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Require java-devel &lt; 1.9 because all those versions can use
  target level &lt; 1.5</changelog>
  <changelog author="marco.strigl@suse.com" date="1521547200">- fix flaky StopWatch tests on slow systems by increasing the max value (bsc#1085999)
  * fix_StopWatchTest_for_slow_systems.patch</changelog>
  <changelog author="fstrba@suse.com" date="1549281600">- Clean up the spec file</changelog>
  <changelog author="fstrba@suse.com" date="1553515200">- Remove pom parent, since we don't use it when not building with
  maven</changelog>
  <changelog author="fstrba@suse.com" date="1580126400">- On supported platforms, avoid building with OpenJ9 in order to
  prevent a build cycle.</changelog>
  <changelog author="fstrba@suse.com" date="1584964800">- Added patch:
  * commons-lang-bundle-manifest.patch
    + Add bundle manifest to make usable from eclipse</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1752580800">- Added patch:
  * CVE-2025-48924.patch
    + backport upstream fix for bsc#1246397, CVE-2025-48924:
    ClassUtils.getClass(...) can throw a StackOverflowError on
    very long inputs and cause application crashes</changelog>
</package>
<package pkgid="997b9b2063109934c43cb5d3ac20038bdb6887bf2944c90fb47693983853a3ca" name="apache-commons-lang" arch="src">
  <version epoch="0" ver="2.6" rel="150200.14.3.1"/>
  <changelog author="jsmeix@suse.de" date="1122465600">- Adjustments in the spec file.</changelog>
  <changelog author="jsmeix@suse.de" date="1125316800">- Removed the "test" to be built so that it builds now on all
  architectures (see bug 102629).
  The "test" failed on ppc, s390x, and ppc64 (see bug 113779).</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="ro@suse.de" date="1158321600">- use source=1.1 for java</changelog>
  <changelog author="mvyskocil@suse.cz" date="1216641600">- update to 2.3
  - merged with japackage 1.7 spec file
  - add a maven build support and a maven pom files and post/un scripts for
  depmap files
- removed a source=1.1 - fixed build under openjdk6
- removed a crosslink patch</changelog>
  <changelog author="anosek@suse.cz" date="1217332800">- made the symlink jakarta-commons-lang -&gt; jakarta-commons-lang-2.3
  part of the javadoc package</changelog>
  <changelog author="mvyskocil@suse.cz" date="1264593600">- merged with jakarta-commons-lang-2.1-7.jpp5.src.rpm</changelog>
  <changelog author="mvyskocil@suse.com" date="1378468800">- update to 2.6 (bugfix release)
  * see http://commons.apache.org/proper/commons-lang/release-notes/RELEASE-NOTES-2.6.txt
  * see http://commons.apache.org/proper/commons-lang/release-notes/RELEASE-NOTES-2.5.txt
- use new add_maven_depmap macro
- drop jakarta-commons-lang-build.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1404734400">- Depend on junit not junit4</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local</changelog>
  <changelog author="fstrba@suse.com" date="1505044800">- Require for build java-devel = 1.8.0, since it is the last
  version being able to build with source and target levels &lt; 1.5</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Require java-devel &lt; 1.9 because all those versions can use
  target level &lt; 1.5</changelog>
  <changelog author="marco.strigl@suse.com" date="1521547200">- fix flaky StopWatch tests on slow systems by increasing the max value (bsc#1085999)
  * fix_StopWatchTest_for_slow_systems.patch</changelog>
  <changelog author="fstrba@suse.com" date="1549281600">- Clean up the spec file</changelog>
  <changelog author="fstrba@suse.com" date="1553515200">- Remove pom parent, since we don't use it when not building with
  maven</changelog>
  <changelog author="fstrba@suse.com" date="1580126400">- On supported platforms, avoid building with OpenJ9 in order to
  prevent a build cycle.</changelog>
  <changelog author="fstrba@suse.com" date="1584964800">- Added patch:
  * commons-lang-bundle-manifest.patch
    + Add bundle manifest to make usable from eclipse</changelog>
  <changelog author="fstrba@suse.com" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="fstrba@suse.com" date="1752580800">- Added patch:
  * CVE-2025-48924.patch
    + backport upstream fix for bsc#1246397, CVE-2025-48924:
    ClassUtils.getClass(...) can throw a StackOverflowError on
    very long inputs and cause application crashes</changelog>
</package>
<package pkgid="6bbde5b72c7f60feb2dbafb0e3b00e8981c7476f1183e68b15d9d54f1680f50d" name="apache-commons-lang3" arch="noarch">
  <version epoch="0" ver="3.18.0" rel="150200.3.12.1"/>
  <changelog author="p.drouand@gmail.com" date="1453636800">- Initial release (version 3.4)</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Specify java target and source level 1.6
- Force building with jdk &lt; 1.9, since jdk9's javadoc chocks on one
  class file (internal error)</changelog>
  <changelog author="fstrba@suse.com" date="1507550400">- Modified patch:
  * commons-lang3-3.4-javadoc.patch
    + Fix build with jdk9
- Allow building with jdk9 too
- Run fdupes on javadoc</changelog>
  <changelog author="tchvatal@suse.com" date="1525262400">- Format with spec-cleaner</changelog>
  <changelog author="fstrba@suse.com" date="1540209600">- Build commons-lang3-3.8.1 using modified build.xml and
  default.properties from 3.4.
- Removed patch:
  * commons-lang3-3.4-javadoc.patch
  - integrated in the build.xml
- Use source and target version 1.7, since the code contains
  diamond operator.</changelog>
  <changelog author="fstrba@suse.com" date="1549281600">- Clean-up the spec file and install less jar symlinks</changelog>
  <changelog author="fstrba@suse.com" date="1553515200">- Remove pom parent, since we don't use it when not building with
  maven</changelog>
  <changelog author="fstrba@suse.com" date="1613476800">- Add OSGi manifest</changelog>
  <changelog author="rpm@fthiessen.de" date="1619179200">- Fixed SPEC file: Replaced broken URL
- Update to 3.9
  * Requires jdk &gt;= 1.8
  * Fixed issues with java 12
  * Add more SystemUtils.IS_JAVA_XX variants
  * Adding the Functions class
  * Add @FunctionalInterface to ThreadPredicate and ThreadGroupPredicate
  * Add isEmpty method to ObjectUtils
  * null-safe StringUtils.valueOf(char[]) to delegate to
    String.valueOf(char[]).
  * Add API org.apache.commons.lang3.SystemUtils.isJavaVersionAtMost(JavaVersion)
  * Consolidate the StringUtils equals and equalsIgnoreCase</changelog>
  <changelog author="david.anes@suse.com" date="1640347200">- Updated download URL.
- Update to 3.12.0:
  - New features:
  * Add BooleanUtils.booleanValues().
  * Add BooleanUtils.primitiveValues().
  * Add StringUtils.containsAnyIgnoreCase(CharSequence, CharSequence...).
  * Add StopWatch.getStopTime().
  * More test coverage for CharSequenceUtils.
  * Add fluent-style ArraySorter.
  * Add and use LocaleUtils.toLocale(Locale) to avoid NPEs.
  * Add FailableShortSupplier, handy for JDBC APIs.
  * Add JavaVersion.JAVA_17.
  * Add missing boolean[] join method.
  * Add StringUtils.substringBefore(String, int).
  * Add Range.INTEGER.
  * Add DurationUtils.
  * Introduce the use of @Nonnull, and @Nullable, and the Objects class as a helper tool.
  * Add and use true and false String constants.
  * Add and use ObjectUtils.requireNonEmpty().
  - Fixed Bugs:
  * Correct implementation of RandomUtils.nextLong(long, long).
  * Restore handling of collections for non-JSON ToStringStyle.
  * ContextedException Javadoc add missing semicolon.
  * Resolve JUnit pioneer transitive dependencies using JUnit BOM.
  * NumberUtilsTest - incorrect types in min/max tests.
  * Improve StringUtils.stripAccents conversion of remaining accents.
  * StringUtils.countMatches - clarify Javadoc.
  * Remove redundant argument from substring call.
  * BigDecimal is created when you pass it the min and max values.
  * ArrayUtils.contains() and indexOf() fail to handle Double.NaN.
  * ArrayUtils contains() and indexOf() fail to handle Float.NaN.
  * Fix potential NPE in TypeUtils.isAssignable(Type, ParameterizedType, Map, Type&gt;).
  * TypeUtils.isAssignable returns wrong result for GenericArrayType and ParameterizedType.
  * testGetAllFields and testGetFieldsWithAnnotation sometimes fail.
  * Fix Javadoc for SystemUtils.isJavaVersionAtMost().
  * Fix StringUtils.unwrap throws StringIndexOutOfBoundsException.
  * Fix formatting of isAnyBlank() and isAnyEmpty().
  * TypeUtils. containsTypeVariables does not support GenericArrayType.
  * Javadoc of some methods incorrectly refers to another method.
  * Refine StringUtils.lastIndexOfIgnoreCase.
  * Refine StringUtils.abbreviate.
  * Refine StringUtils.isNumericSpace.
  * Refine StringUtils.deleteWhitespace.
  * Correction in Javadoc of some methods.
  * Javadoc for RandomStringUtils.random() letters, numbers parameters is wrong.
  * Correct markup in Javadoc for unbalanced braces.
  * MethodUtils.invokeMethod NullPointerException in case of null in args list.
  * Fix 2 digit week year formatting.
  * Fix broken Javadoc links to commons-text.
  * Add and use ThreadUtils.sleep(Duration).
  * Add and use ThreadUtils.join(Thread, Duration).
  * Add ObjectUtils.wait(Duration).
  - Changes:
  * ArrayUtils.toPrimitive(Object) does not support boolean and other types.
  * Enable Dependabot.
  * Bump junit-jupiter from 5.6.2 to 5.7.0.
  * Bump spotbugs from 4.1.2 to 4.2.1.
  * Bump spotbugs-maven-plugin from 4.0.0 to 4.2.0.
  * Bump biz.aQute.bndlib from 5.1.1 to 5.3.0.
  * Bump junit-pioneer from 0.6.0 to 1.1.0.
  * Bump checkstyle from 8.34 to 8.40.
  * Bump actions/checkout from v2.3.1 to v2.3.4.
  * Bump actions/setup-java from v1.4.0 to v1.4.2.
  * Update commons.jacoco.version 0.8.5 to 0.8.6 (Fixes Java 15 builds).
  * Update maven-surefire-plugin 2.22.2 -&gt; 3.0.0-M5.
  * Bump maven-pmd-plugin from 3.13.0 to 3.14.0.
  * Bump jmh.version from 1.21 to 1.27.
  * Update commons.japicmp.version 0.14.3 -&gt; 0.15.2.
  * Processor.java: check enum equality with == instead of .equals() method.
  * Bump junit-pioneer from 1.1.0 to 1.3.0.
  * Bump maven-checkstyle-plugin from 3.1.1 to 3.1.2.
  * Bump actions/cache from v2 to v2.1.4.
  * Bump junit-bom from 5.7.0 to 5.7.1.
  * Minor Improvements.
  * Minor Improvement: Add final variable.try to make the code read-only.
  * Minor Improvement: Remove redundant initializer.
  * Use own validator ObjectUtils.anyNull to check null String input.
- From 3.11 Update:
  - New features:
  * Add ArrayUtils.isSameLength() to compare more array types.
  * Added the Locks class as a convenient possibility to deal with locked objects.
  * Add to Functions: FailableBooleanSupplier, FailableIntSupplier, FailableLongSupplier, FailableDoubleSupplier, and so on.
  * Add ArrayUtils.get(T[], index, T) to provide an out-of-bounds default value.
  * Add JavaVersion enum constants for Java 14 and 15.
  * Add JavaVersion enum constants for Java 16.
  * Use Java 8 lambdas and Map operations.
  * Change removeLastFieldSeparator to use endsWith.
  * Change a Pattern to a static final field, for not letting it compile each time the function invoked.
  * Add ImmutablePair factory methods left() and right().
  * Add ObjectUtils.toString(Object, Supplier&lt;String&gt;).
  * Add org.apache.commons.lang3.StringUtils.substringAfter(String, int).
  * Add org.apache.commons.lang3.StringUtils.substringAfterLast(String, int).
  - Fixed Bugs:
  * Fix Javadoc for StringUtils.appendIfMissingIgnoreCase().
  * Refine Javadoc.
  * Fix typos
  * Ignored exception `ignored`, should not be called so.
  * StringUtils.replaceEachRepeatedly gives IllegalStateException.
  * [JSON string for maps] ToStringBuilder.reflectionToString doesnt render nested maps correctly.
  * Correct Javadocs of methods that use Validate.notNull() and replace some uses of Validate.isTrue() with Validate.notNull().
  * Add allNull() and anyNull() methods to ObjectUtils.
  - Changes:
  * Refine test output for FastDateParserTest
  * CharSequenceUtils.lastIndexOf : remake it
  * remove encoding and docEncoding and use inherited values from commons-parent
  * Simplify null checks in Pair.hashCode() using Objects.hashCode().
  * Simplify null checks in Triple.hashCode() using Objects.hashCode().
  * Simplify some if statements in StringUtils.
  * Simplify a null check in the private replaceEach() method of StringUtils.
  * Replace some usages of the ternary operator with calls to Math.max() and Math.min().
  * (Javadoc) Fix return tag for throwableOf*() methods.
  * CharSequenceUtils.regionMatches is wrong dealing with Georgian.
  * Optimize ArrayUtils::isArrayIndexValid method.
  * Use List.sort instead of Collection.sort.
  * Use StandardCharsets.UTF_8.
  * Use Collections.singletonList insteadof Arrays.asList when there be only one element.
  * Change array style from `int a[]` to `int[] a`.
  * Change from addAll to constructors for some List.
  * Simplify if as some conditions are covered by others.
  * Fixed Javadocs for setTestRecursive().
  * ToStringBuilder.reflectionToString - Wrong JSON format when object has a List of Enum.
  * Make org.apache.commons.lang3.CharSequenceUtils.toCharArray(CharSequence) public.
  * org.apache.commons:commons-parent 50 -&gt; 51.
  * org.junit-pioneer:junit-pioneer 0.5.4 -&gt; 0.6.0.
  * org.junit.jupiter:junit-jupiter 5.6.0 -&gt; 5.6.2.
  * com.github.spotbugs:spotbugs 4.0.0 -&gt; 4.0.6.
  * com.puppycrawl.tools:checkstyle 8.29 -&gt; 8.34.
  * commons.surefire.version 3.0.0-M4 -&gt; 3.0.0-M5..
- From 3.10 Update:
  - New features:
  * Add ExceptionUtils.throwableOfType(Throwable, Class) and friends.
  * Add EMPTY_ARRAY constants to classes in org.apache.commons.lang3.tuple.
  * Add null-safe StringUtils APIs to wrap String#getBytes([Charset|String]).
  * Add zero arg constructor for org.apache.commons.lang3.NotImplementedException.
  * Add ArrayUtils.addFirst() methods.
  * Add Range.fit(T) to fit a value into a range.
  * Added Functions.as*, and tests thereof, as suggested by Peter Verhas
  * Add getters for lhs and rhs objects in DiffResult.
  * Generify builder classes Diffable, DiffBuilder, and DiffResult.
  * Add ClassLoaderUtils with toString() implementations.
  * Add null-safe APIs as StringUtils.toRootLowerCase(String) and StringUtils.toRootUpperCase(String).
  * Add org.apache.commons.lang3.time.Calendars.
  * Add EnumUtils getEnum() methods with default values.
  * Added indexesOf methods and simplified removeAllOccurences.
  * Add support of lambda value evaluation for defaulting methods.
  * Add factory methods to Pair classes with Map.Entry input.
  * Add StopWatch convenience APIs to format times and create a simple instance.
  * Allow a StopWatch to carry an optional message.
  * Add ComparableUtils.
  * Add org.apache.commons.lang3.SystemUtils.getUserName().
  * Add ObjectToStringComparator.
  * Add org.apache.commons.lang3.arch.Processor.Arch.getLabel().
  * Add IS_JAVA_14 and IS_JAVA_15 to org.apache.commons.lang3.SystemUtils.
  * ObjectUtils: Get first non-null supplier value.
  * Added the Streams class, and Functions.stream() as an accessor thereof.
  - Fixed Bugs:
  * Make test more stable by wrapping assertions in hashset.
  * Generate Javadoc jar on build.
  * Trivial: year of release for 3.9 says 2018, should be 2019.
  * Use synchronize on a set created with Collections.synchronizedSet before iterating.
  * StringUtils.unwrap incorrect throw StringIndexOutOfBoundsException.
  * StringIndexOutOfBoundsException in StringUtils.replaceIgnoreCase.
  * StringUtils.removeIgnoreCase("?a", "a") throws IndexOutOfBoundsException.
  * Corrected usage examples in Javadocs.
  * StringUtils abbreviate returns String of length greater than maxWidth.
  * Test may fail due to a different order of fields returned by reflection api.
  * Sort fields in ReflectionToStringBuilder for deterministic order.
  * MethodUtils will throw a NPE if invokeMethod() is called for a var-args method.
  * MethodUtils.getAnnotation() with searchSupers = true does not work if super is generic.
  - Changes:
  * Remove redundant if statements in join methods.
  * commons.japicmp.version 0.13.1 -&gt; 0.14.1.
  * junit-jupiter 5.5.0 -&gt; 5.5.1.
  * junit-jupiter 5.5.1 -&gt; 5.5.2.
  * Improve Javadoc based on the discussion of the GitHub PR.
  * maven-checkstyle-plugin 3.0.0 -&gt; 3.1.0.
  * Update documentation related to the issue LANG-696.
  * AnnotationUtils little cleanup.
  * Update test dependency: org.easymock:easymock 4.0.2 -&gt; 4.1.
  * Update test dependency: org.hamcrest:hamcrest 2.1 -&gt; 2.2.
  * Update test dependency: org.junit-pioneer:junit-pioneer 0.3.0 -&gt; 0.4.2.
  * Update build dependency: com.puppycrawl.tools:checkstyle 8.18 -&gt; 8.27.
  * Update POM parent: org.apache.commons:commons-parent 48 -&gt; 50.
  * BooleanUtils Javadoc.
  * Functions Javadoc.
  * org.easymock:easymock 4.1 -&gt; 4.2.
  * org.junit-pioneer:junit-pioneer 0.4.2 -&gt; 0.5.4.
  * org.junit.jupiter:junit-jupiter 5.5.2 -&gt; 5.6.0.
  * Use Javadoc {@code} instead of pre tags.
  * ExceptionUtilsTest to 100%.
  * Reuse own code in Functions.java.
  * Avoid unnecessary allocation in StringUtils.wrapIfMissing.
  * Internally use Validate.notNull(foo, ...) instead of Validate.isTrue(foo != null, ...).
  * Add 1 and 0 in toBooleanObject(final String str).
  * Remove an redundant argument check in NumberUtils.
  * Deprecate org.apache.commons.lang3.ArrayUtils.removeAllOccurences(*) for org.apache.commons.lang3.ArrayUtils.removeAllOccurrences(*).</changelog>
  <changelog author="david.anes@suse.com" date="1640779200">- Fix component version in default.properties to 3.12</changelog>
  <changelog author="pmonreal@suse.com" date="1640779201">- Remove the junit bom dependency for now as it breaks the build of
  other packages like log4j.
  * Add apache-commons-lang3-junit-bom.patch</changelog>
  <changelog author="fstrba@suse.com" date="1693396800">- Break cycle with the new bcel
- Removed patch:
  * apache-commons-lang3-junit-bom.patch
    + not needed since we install the pom file using the new
    %%mvn_install_pom macro which sanitizes the pom file to the
    bare runtime dependencies.</changelog>
  <changelog author="fstrba@suse.com" date="1715688000">- Update to 3.14.0:
  * New features:
    + Add Functions#function(Function).
    + Add FailableFunction#function(FailableFunction).
    + Add CalendarUtils.getInstance().
    + Add syntax for optional tokens to DurationFormatUtils.
    + Add ArrayFill.
    + Add FastDateParser.TimeZoneStrategy.TzInfo.toString().
    + Add LocaleUtils.isLanguageUndetermined(Locale).
    + Add ObjectUtils.toString(Supplier&lt;Object&gt;, Supplier&lt;String&gt;).
    + Add LazyInitializer.isInitialized().
    + Add ConcurrentInitializer#isInitialized() #1120.
    + Add Streams.failableStream(T...).
    + Add FailableSupplier.nul().
    + Add Suppliers.nul().
    + Add ExceptionUtils.throwUnchecked(T) where T extends
    Throwable, and deprecate Object version.
    + Add ExceptionUtils.rethrowRuntimeException(T), and deprecate
    rethrow(T).
    + ConcurrentInitializer implementations can now be instantiated
    and configured with allocation and release lambdas.
    Fixes LANG-1716.
    + Add support for RISC-V in ArchUtils #1128. Fixes LANG-1717.
  * Fixed bugs:
    + Rename variable names from 'clss' to 'clazz'.
    + [Javadoc] ComparableUtils'c1' to 'comparable1', 'c2' to
    'comparable2'
    + [Javadoc] Remove 2.1 specific comment #1091.
    + [Javadoc] Fix Incorrect Description in Processor isAarch64()
    [#1093]. Fixes LANG-1704.
    + [Javadoc] Point to right getShortClassName flavor in Javadoc
    for relevant notes #1097.
    + Improve performance of StringUtils.isMixedCase().
    + ThreadUtils find methods should not return null items. Fixes
    LANG-1706.
    + ReflectionToStringBuilder changes in version 3.13.0 has broken
    the logic for overriding classes. Fixes LANG-1710.
    + Return "null" instead of NPE in
    ClassLoaderUtils.toString(ClassLoader).
    + Return "null" instead of NPE in
    ClassLoaderUtils.toString(URLClassLoader).
    + Return ToStringStyle.nullText instead of NPE for
    ReflectionToStringBuilder.toString().
    + Fix ThresholdCircuitBreaker#checkState().
    + Use ConcurrentInitializer implementations without subclassing.
    + Update critical value for chi-square test.
    + Fix Javadoc syntax errors #1129.
- From 3.13.0 update
  * New features:
    + Add GitHub coverage.yml.
    + Add EnumUtils.getEnumSystemProperty(...).
    + Add TriConsumer.
    + Add and use EnumUtils.getFirstEnumIgnoreCase(Class, String,
    Function, E).
    + Add and use Suppliers.
    + Add and use ArrayUtils.getComponentType(T[]).
    + Add and use ClassUtils.getComponentType(Class&gt;T[]&gt;).
    + Add and use ObjectUtils.getClass(T).
    + Add and use ArrayUtils.newInstance(Class&gt;T&gt;, int).
    + Add and use null-safe Streams.of(T...).
    + Add ClassUtils.comparator().
    + Add and use ThreadUtils.sleepQuietly(Duration).
    + Add and use ArrayUtils.setAll(T[], IntFunction).
    + Add and use ArrayUtils.setAll(T[], Supplier).
    + Add BooleanConsumer.
    + Add IntToCharFunction.
    + Add IntStreams.
    + Add UncheckedFuture.
    + Add UncheckedException.
    + Add UncheckedExecutionException.
    + Add UncheckedTimeoutException.
    + Add UncheckedInterruptedException.
    + Add TimeZones.GMT.
    + Add ObjectUtils.identityHashCodeHex(Object).
    + Add ObjectUtils.hashCodeHex(Object).
    + Add StringUtils.removeStart(String, char).
    + Add null-safe ObjectUtils.isArray(). Fixes LANG-1659.
    + Add ComparableUtils.max(A, A) and ComparableUtils.min(A, A).
    + Add UncheckedReflectiveOperationException.
    + Add and use ClassUtils.isPublic(Class).
    + Add UncheckedIllegalAccessException.
    + Add MethodInvokers.
    + Add Streams.nullSafeStream(Collection).
    + Add Streams.toStream(Collection).
    + Add Streams.failableStream(Collection) and deprecate misnamed
    stream(Collection).
    + Add Streams.failableStream(Stream) and deprecate misnamed
    stream(Stream).
    + Add EnumUtils.getEnumMap(Class, Function).
    + Add FluentBitSet.
    + Add Streams.instancesOf(Class, Collection).
    + Add ImmutablePair.ofNonNull(L, R).
    + Add ImmutableTriple.ofNonNull(L, M, R).
    + Add MutablePair.ofNonNull(L, R).
    + Add MutableTriple.ofNonNull(L, M, R).
    + Add Pair.ofNonNull(L, R).
    + Add Triple.ofNonNull(L, M, R).
    + Add ArrayUtils.containsAny(Object[], Object...).
    + Add Processor.Type.AARCH_64.
    + Add Processor.isAarch64().
    + Update ArchUtils.getProcessor(String) for "aarch64".
    + Add JavaVersion.JAVA_18.
    + Add JavaVersion.JAVA_19.
    + Add JavaVersion.JAVA_20.
    + Add JavaVersion.JAVA_21.
    + Add TimeZones.toTimeZone(TimeZone).
    + Add FutureTasks.
    + Add Memoizer(Function) and Memoizer(Function, boolean).
    + Add Consumers.
    + Add github/codeql-action.
    + Add coverage.yml.
    + Add DurationUtils.since(Temporal).
    + Add DurationUtils.of(FailableConsumer|FailableRunnbale).
    + Add ExceptionUtils.forEach(Throwable, Consumer&lt;Throwable&gt;).
    + Add ExceptionUtils.stream(Throwable).
    + Add ExceptionUtils.getRootCauseStackTraceList(Throwable).
    + Add SystemUtils.IS_OS_WINDOWS_11.
    + Add SystemUtils.IS_JAVA_16.
    + Add SystemUtils.IS_JAVA_17.
    + Add SystemUtils.IS_JAVA_18.
    + Add SystemUtils.IS_JAVA_19.
    + Add SystemUtils.IS_JAVA_20.
    + Add SystemUtils.IS_JAVA_21.
    + Add ArrayUtils.oneHot(). Fixes LANG-1627.
    + Let ReflectionToStringBuilder only reflect given field names.
    Fixes LANG-1662.
    + Add Streams.of(Enumeration&lt;E&gt;).
    + Add Streams.of(Iterable&lt;E&gt;).
    + Add Streams.of(Iterator&lt;E&gt;).
    + Simple support for Optional in ObjectUtils#isEmpty(). Fixes
    LANG-1689.
    + Add Processor.Type.getLabel().
    + Add Processor.toString().
    + Add HashCodeBuilder.equals(Object).
    + Add BooleanUtils.values() and forEach().
    + Add ClassPathUtils.packageToPath(String) and pathToPackage(String)
    + Add CalendarUtils#getDayOfYear()
    + Add NumberRange, DoubleRange, IntegerRange, LongRange.
    + Add missing exception javadoc/tests for some null arguments.
    + Add ClassLoaderUtils.getSystemURLs() and getThreadURLs().
    + Add RegExUtils.dotAll() and dotAllMatcher().
    + Add Pair.accept(FailableBiConsumer).
    + Add Pair.apply(FailableBiFunction).
    + Add ReflectionDiffBuilder.setExcludeFieldNames(...) and
    DiffExclude a... Fixes LANG-1677.
    + Add and ExceptionUtils.isChecked() and isUnchecked(). Fixes
    LANG-1647.
    + Add and use ExceptionUtils.throwUnchecked(throwable).
    + Add LockingVisitors.create(O, ReadWriteLock).
  * Fixed bugs:
    + NumberUtils.createNumber() to recognize hex integers prefixed
    with +. Fixes LANG-1645.
    + NumberUtils.createNumber() to return requested floating point
    type for zero. Fixes LANG-1646.
    + DMI: Random object created and used only once
    (DMI_RANDOM_USED_ONLY_ONCE); Better multi-threaded behavior.
    + Redundant Collection operation. Use
    Collections.emptyIterator(). Fixes LANG-1646.
    + Make Streams.stream(Collection) null-safe.
    + Allow tests to access java.util classes such as ArrayList in
    Java 16. Fixes LANG-1667.
    + OpenJDK 16 Day Period Parsing. Fixes LANG-1669.
    + Update documentation to list correct exception for null array
    parameters. Fixes LANG-1663.
    + Fixing reversed Javadoc descriptions in StopWatch.
    + Fix typos in JavaDoc. Fixes LANG-1670.
    + Simplify assertions with equivalent but more simple..
    + Avoid multiple equivalent occurrences of the same expression.
    + Remove redundant initializers.
    + Fix ObjectUtils Javadocs.
    + Make Range constructors more generic. Fixes LANG-1674.
    + Use final and Remove redundant String.
    + Use Set instead of List for checking the contains() method.
    + Javadoc for StringUtils.substringBefore(String str,
    int separator) doesn't mention that the separator is an int.
    + Fix NullPointerException in ThreadUtils.getSystemThreadGroup()
    when the current thread is stopped.
    + ArrayUtils.toPrimitive(Boolean...) null array elements map to
    false, like Boolean.parseBoolean(null) and its callers return
    false.
    + StrBuilder.StrBuilderReader.skip(long): Throw an exception
    when an implicit narrowing conversion in a compound assignment
    would result in information loss or a numeric error such as an
    overflows.
    + Deprecate Validate#notNull(Object) in favor of using
    Objects#requireNonNull(Object, String).
    + Use TimeZone from calendar in DateFormatUtils. Fixes
    LANG-1462.
    + Updating javadoc for NullPointerException when
    Validate.notNull() is called.
    + Fixing and adding DateUtils exception Javadocs.
    + Improve performance of StringUtils.unwrap(String, String).
    Fixes LANG-1679.
    + Improve performance of StringUtils.join for primitives. Fixes
    LANG-1675.
    + Fixed NPE getting Stack Trace if Throwable is null. Fixes
    LANG-1675.
    + Make Validate.isAssignableFrom() check null inputs.
    + Fix Javadoc for Validate.isAssignableFrom().
    + Make final mappingFunction variable.
    + Remove unnecessary variable creations.
    + Minor changes.
    + FastDateFormat does not support the 'L'-Pattern from
    SimpleDateFormat. Fixes LANG-1680.
    + Increase test coverage of ComparableUtils from 71% to 100%.
    + Increase method test coverage of
    MultilineRecursiveToStringStyle.
    + Fix unstable coverage of CharSequenceUtils tests noticed
    during merge of PRs 898 and 899.
    + Rewrite Conversion.binaryBeMsb0ToHexDigit to invert logic of
    binaryToHexDigit.
    + Allow extension of previously final classes ImmutablePair and
    ImmutableTriple.
    + Update ClassUtils Javadoc with some missing throws NPE.
    + Javadoc: StringUtils.repeat("", "x", 3) = "xx";.
    + StringUtils.join(Iterable, String) should only return null
    when the Iterable is null.
    + Add tests to increase coverage.
    + Extends Object clauses are redundant.
    + Simplify conditional expression..
    + Fix some Javadoc comments.
    + Deprecate getNanosOfMiili() method with typo and create proper
    getNanosOfMilli().
    + Deprecate ThreadUtils code that defines custom function
    interfaces in favor of stock java.util.function.Predicate
    usage.
    + Fix links in Javadoc and documentation.
    + Deprecate RandomUtils in favor of Apache Commons RNG
    UniformRandomProvider. Fixes LANG-1604.
    + Added docs regarding week year support. Fixes LANG-1638.
    + ClassUtils.getShortCanonicalName doesn't use the
    canonicalName. Fixes LANG-1691.
    + Validate: Get error messages without using String.format when
    varargs is empty.
    + Simplify expression (length is never &lt; 0).
    + Fix simple broken javadoc..
    + Fix typo.
    + Use Objects.requireNonNull() directly.
    + MethodUtils.getMatchingMethod() fails with "Found multiple
    candidates". Fixes LANG-1694.
    + Construct ArrayList with better default size. Fixes LANG-1643.
    + ThreadUtilsTest#testThreadGroups will test failed when using
    Junit5 parallel test.
    + Swap the order of assertion args (first excepted then actual).
    + Fix the comment of Failable, redundant "-".
    + Fix the comment of ComparableUtils, using "smallest", not
    "largest".
    + AnnotationUtilsTest and FormattableUtilsTest Only use static
    imports to import assert methods in tests.
    + [LANG-1681] Fix some FieldUtils Javadocs.
    + Remove unnecessary statement in DurationFormatUtils.
    + Corrected value of SystemUtils.JAVA_VENDOR. Fixes LANG-1699.
    + [StepSecurity] ci: Harden GitHub Actions.
    + Update Javadoc for the insert methods in ArrayUtils.
    + Deprecate ExceptionUtils.ExceptionUtils().
    + TypeUtils.getRawType() throws a NullPointerException on
    Wildcard GenericArrayType. Fixes LANG-1697.
    + Throw IllegalArgumentException instead of InternalError in the
    builder package.
    + Avoid NPE in MutableObject#equals() for null content.
    + SystemUtils fix and updates related to macOS.</changelog>
  <changelog author="gus.kenion@suse.com" date="1723204800">- Update to 3.16.0:
  * New features:
    + Add StopWatch.getSplitDuration() and deprecate
    getSplitTime().
    + Add StopWatch.getStartInstant() and deprecate getStartTime().
    + Add StopWatch.getStopInstant() and deprecate getStopTime().
    + Add StopWatch.getDuration() and deprecate getTime().
    + Add Javadoc links from StopWatch to DurationUtils #1249.
    + Add LangCollectors.collect(Collector, T...).
    + Add RandomStringUtils.secure().
    + Add RandomStringUtils.insecure().
  * Fixed bugs:
    + Reimplement StopWatch internals to use java.time.
    + RandomStringUtils.random() with a negative character index
    should throw IllegalArgumentException. Fixes LANG-1745.
    + LocaleUtils.toLocale(String) cannot parse four segments.
    Fixes LANG-1741.
    + Use fewer intermediary strings in
    DefaultExceptionContext.getFormattedExceptionMessage(String).
    + Fix Javadoc in StringUtils.splitPreserveAllTokens() #1251.
    + Deprecate ArraySort constructor for removal.
    + Deprecate CharEncoding constructor for removal.
    + Deprecate Conversion constructor for removal.
    + Deprecate Conversion constructor for removal.
    + Deprecate EntityArrays constructor for removal.
    + Deprecate ObjectToStringComparator constructor for removal.
    + Deprecate RuntimeEnvironment constructor for removal.
- Includes changes from 3.15.0:
  * New features:
    + Customize text pattern in DiffResult#toString(). Fixes
    LANG-1724.
    + Add DiffBuilder.Builder.
    + Add DiffBuilder.builder().
    + Add ReflectionDiffBuilder.Builder.
    + Add ReflectionDiffBuilder.builder().
    + Add test in TypeUtilsTest #1151.
    + Add Streams.failableStream(T), non-varargs variant.
    + Add Streams.nonNull(T), non-varargs variant.
    + Add ArrayUtils.nullTo(T[], T[]).
    + Add T ArrayUtils.arraycopy(T, int, T, int, int) fluent style.
    + Add T ArrayUtils.arraycopy(T, int, int, int, Function) fluent
    style.
    + Add SystemUtils.IS_JAVA_22.
    + Add JavaVersion.JAVA_22.
    + Add SystemProperties.getUserName(Supplier&lt;String&gt;).
    + Add SystemProperties.getLineSeparator(Supplier&lt;String&gt;).
    + Add
    + SystemProperties.getJavaSpecificationVersion(Supplier&lt;String&gt;).
    + Add SystemProperties constants and methods for system
    properties as of Java 22.
    + Add MethodUtils.getMethodObject(Class, String, Class...).
    + Add null-safe Consumers.accept() and Functions.apply() #1215.
    Fixes LANG-1733.
    + Add SystemUtils.IS_OS_ANDROID.
    + Add SystemUtils.IS_OS_MAC_OSX_SONOMA.
    + Add RuntimeEnvironment.inContainer() #1241.
    + Add AppendableJoiner and refactor string joining #1244.
  * Fixed bugs:
    + Improve Javadoc in ExceptionUtils #1136.
    + Fixed two non-deterministic tests in EnumUtilsTest.java
    [#1131].
    + Fix wrong number check that cause
    StringIndexOutOfBoundsException #1140. Fixes LANG-1721.
    + Rethrow NegativeArraySizeException as SerializationException
    in SerializationUtils.deserialize(InputStream) #1141. Fixes
    LANG-1722.
    + Throw NumberFormatException instead of
    IndexOutOfBoundsException in NumberUtils.getMantissa(String,
    int) #1145. Fixes LANG-1723.
    + Minor grammar fixes #1143.
    + ArrayUtils will return null when adding two null arrays, but
    undocumented. Fixes LANG-1713.
    + Let parent POM figure out commons.spdx.version.
    + Undeprecate ExceptionUtils.rethrow(Throwable). Fixes
    LANG-1726.
    + Test the Conversion class #1155. Fixes LANG-1702.
    + Address minor redundancies after code inspection #1148.
    + Allow EventListenerSupport to handle (and ignore) exception
    from listeners allowing invocation of all listeners #1167.
    + Deprecate AnnotationUtils 0-argument constructor.
    + Deprecate ArchUtils 0-argument constructor.
    + Deprecate ArrayUtils 0-argument constructor.
    + Deprecate BooleanUtils 0-argument constructor.
    + Deprecate CharSequenceUtils 0-argument constructor.
    + Deprecate CharSetUtils 0-argument constructor.
    + Deprecate CharUtils 0-argument constructor.
    + Deprecate ClassLoaderUtils 0-argument constructor.
    + Deprecate ClassPathUtils 0-argument constructor.
    + Deprecate ClassUtils 0-argument constructor.
    + Deprecate ConstructorUtils 0-argument constructor.
    + Deprecate DateFormatUtils 0-argument constructor.
    + Deprecate DateUtils 0-argument constructor.
    + Deprecate Diff.getType().
    + Deprecate DiffBuilder.DiffBuilder(T, T, ToStringStyle).
    + Deprecate DiffBuilder.DiffBuilder(T, T, ToStringStyle,
    boolean).
    + Deprecate DurationFormatUtils 0-argument constructor.
    + Deprecate DurationUtils 0-argument constructor.
    + Deprecate EnumUtils 0-argument constructor.
    + Deprecate EventUtils 0-argument constructor.
    + Deprecate FieldUtils 0-argument constructor.
    + Deprecate IEEE754rUtils 0-argument constructor.
    + Deprecate InheritanceUtils 0-argument constructor.
    + Deprecate IntStreams 0-argument constructor.
    + Deprecate LocaleUtils 0-argument constructor.
    + Deprecate LockingVisitors 0-argument constructor.
    + Deprecate MemberUtils 0-argument constructor.
    + Deprecate MethodUtils 0-argument constructor.
    + Deprecate NumberUtils 0-argument constructor.
    + Deprecate ObjectUtils 0-argument constructor.
    + Deprecate RandomStringUtils 0-argument constructor.
    + Deprecate RandomUtils 0-argument constructor.
    + Deprecate ReflectionDiffBuilder.ReflectionDiffBuilder(T, T,
    ToStringStyle).
    + Deprecate RegExUtils 0-argument constructor.
    + Deprecate SerializationUtils 0-argument constructor.
    + Deprecate Streams 0-argument constructor.
    + Deprecate StringEscapeUtils 0-argument constructor.
    + Deprecate StringUtils 0-argument constructor.
    + Deprecate Suppliers 0-argument constructor.
    + Deprecate SystemProperties 0-argument constructor.
    + Deprecate ThreadUtils 0-argument constructor.
    + Deprecate TypeUtils 0-argument constructor.
    + Make ArrayFill null-safe.
    + Make ArraySorter null-safe.
    + Make ArrayUtils.removeAll() null-safe.
    + Fix Java version in README.md #1170.
    + StringUtils.stripAccents() should handle ligatures, UTF32
    math blocks, etc. #1201.
    + TypeUtils.toString(Type) StackOverflowError for an inner
    class in the inner class parameterized enclosing class #657.
    Fixes LANG-1524.
    + Deprecate SystemUtils.getUserName(String) in favor of
    SystemProperties.getUserName(Supplier).
    + Make LockVisitor.acceptReadLocked(FailableConsumer)
    null-safe.
    + Make LockVisitor.applyWriteLocked(FailableConsumer)
    null-safe.
    + Make ObjectUtils.getFirstNonNull(Supplier...) null-safe.
    + Make SystemProperties.getLineSeparator(Supplier).
    + StringUtils.stripAccents(String) doesn't handle "\u0111" and
    "\u0110" (Vietnamese) #1216.
    + StringUtils.stripAccents(String) doesn't handle I with bar.
    + StringUtils.stripAccents(String) doesn't handle U with bar.
    + StringUtils.stripAccents(String) doesn't handle T with
    stroke.
    + Fix Javadoc for FluentBitSet.setInclusive(int, int) #1222.
    Fixes LANG-1735.
    + Same Javadoc changes as [TEXT-234] #1223.
    + Remove duplicate static data in
    SerializationUtils.ClassLoaderAwareObjectInputStream.
    + Reimplement RandomUtils and RandomStringUtils on top of
    SecureRandom#getInstanceStrong() #1235.
    + DiffBuilder: Type constraint for method append(...,
    DiffResult) too strict #786. Fixes LANG-1657.</changelog>
  <changelog author="gus.kenion@suse.com" date="1743508800">- Update to 3.17.0
  * New features:
  * RandomUtils.secure() now uses SecureRandom() instead of
    SecureRandom.getInstanceStrong().
  * RandomStringUtils.secure() now uses SecureRandom() instead of
    SecureRandom.getInstanceStrong().
  * Remove unused exception from deprecated
    StringUtils.toString(byte[], String).
  * Make RandomUtils.insecure() public.
  * Add RandomUtils.secureStrong().
  * Add RandomStringUtils.secureStrong().
  * Add CalendarUtils.toLocalDateTime(Calendar).
  * Add CalendarUtils.toLocalDateTime().
  * Add CalendarUtils.toZonedDateTime(Calendar).
  * Add CalendarUtils.toZonedDateTime().
  * Add CalendarUtils.toOffsetDateTime(Calendar).
  * Add CalendarUtils.toOffsetDateTime().
  * Fixed Bugs:
  * LANG-1760: Using RandomStringUtils.insecure() still leads to
    using the secure() random.
  * Deprecate static RandomUtils.next*() methods in favor or
    .secure() and .insecure() versions.
  * Deprecate static RandomStringUtils.random*() methods in favor
    or .secure() and .insecure() versions.
  * Changes:
  * Bump org.hamcrest:hamcrest from 2.2 to 3.0 #1255.
  * Bump org.easymock:easymock from 5.3.0 to 5.4.0 #1256.
  * Bump org.codehaus.mojo:exec-maven-plugin from 3.3.0 to 3.4.1
    [#1262], #1264.
  * Bump org.apache.commons:commons-parent from 72 to 73 #1265.</changelog>
  <changelog author="fstrba@suse.com" date="1752580800">- Update to 3.18.0
  * New features:
    + Add Strings and refactor StringUtils
    + LANG-1747: Add StopWatch.run([Failable]Runnable) and
    get([Failable]Supplier)
    + Add JavaVersion.JAVA_23
    + Add JavaVersion.JAVA_24
    + Add SystemUtils.IS_JAVA_23
    + Add SystemUtils.IS_JAVA_24
    + Add IntegerRange.toIntStream()
    + Add LongRange.toLongStream()
    + Add IntStrams.of(int...)
    + Add ArrayUtils.containsAny(int[], int...)
    + Add CalendarUtils.toLocalDate() #725
    + Add SystemUtils.IS_OS_MAC_OSX_SEQUOIA
    + Add BasicThreadFactory.builder() and deprecate
    BasicThreadFactory.Builder()
    + Add BasicThreadFactory.daemon()
    + Add ArrayUtils.startsWith
    + Add Predicates
    + Add RegExUtils methods typed to CharSequence input and
    deprecate old versions typed to String
    + Add IterableStringTokenizer
    + Add FailableIntToFloatFunction
    + Add Validate.isTrue(boolean, Supplier&lt;String&gt;)
    + Add EnumUtils.getFirstEnum(Class&lt;E&gt;, int, ToIntFunction&lt;E&gt;, E)
    + Add FailableToBooleanFunction
    + Add the @FunctionalInterface annotation to
    org.apache.commons.lang3.concurrent.Computable
    + Add SystemUtils.getJavaIoTmpDirPath()
    + Add SystemUtils.getJavaHomePath()
    + Add SystemUtils.getUserDirPath()
    + Add SystemUtils.getUserHomePath()
    + Add ArrayFill.fill(T[], FailableIntFunction))
    + Add SystemProperties.JAVA_SECURITY_DEBUG
    + Add SystemProperties.JAVA_SECURITY_KERBEROS_CONF
    + Add SystemProperties.JAVA_SECURITY_KERBEROS_KDC
    + Add SystemProperties.JAVA_SECURITY_KERBEROS_REAL
    + Add ArrayFill.fill(boolean[], boolean) #1386
    + Add ObjectUtils.getIfNull(Object, Object) and deprecate
    defaultIfNull(Object, Object)
    + org.apache.commons.lang3.mutable.Mutable now extends Supplier
    + Add org.apache.commons.lang3.CharUtils.isHex(char)
    + Add org.apache.commons.lang3.CharUtils.isOctal(char)
    + Add org.apache.commons.lang3.concurrent.locks.LockingVisitors
    .reentrantLockVisitor(Object)
    + Add org.apache.commons.lang3.concurrent.locks.LockingVisitors
    .create(Object, ReentrantLock)
    + Add org.apache.commons.lang3.concurrent.locks.LockingVisitors
    .ReentrantLockVisitor
    + Add builders for LockingVisitors implementations
    + Add EnumSet.stream(Class)
    + Add org.apache.commons.lang3.SystemProperties.isPropertySet(String)
  * Fixed Bugs:
    + Fix flaky FileUtilsWaitForTest.testWaitForNegativeDuration()
    + Pick up exec-maven-plugin version from parent POM
    + Speed up and sanitize StopWatchTest
    + Fix handling of non-ASCII letters and numbers in
    RandomStringUtils #1273
    + Rewrite ClassUtils.getClass(...) without recursion to avoid
    StackOverflowError on very long inputs (bsc#1246397,
    CVE-2025-48924)
    + OSS-Fuzz Issue 42522972: apache-commons-text:
    StringSubstitutorInterpolatorFuzzer: Security exception in
    org.apache.commons.lang3.ClassUtils.getClass
    + Remove trailing whitespace in StopWatch exception messages
    + LANG-1754: Use getAllSuperclassesAndInterfaces() in
    getMatchingMethod() #1289
    + Add details to the ArrayFill Javadoc
    + Add details to the ArraySorter Javadoc
    + Fix broken URL to project location in Maven Central #1296
    + LANG-1753: StringUtils.replaceEachRepeatedly regression in
    3.11+ #1297
    + Use simplified JUnit assertion methods #1298
    + LANG-1682: Javadoc and test: Use Strings.CI.startsWithAny
    method instead #1299
    + Fix NullPointerException in FastDateParser.TimeZoneStrategy
    .setCalendar(FastDateParser, Calendar, String) on Java 23
    + LANG-1757: Fix NullPointerException in MethodUtils
    .getMatchingAccessibleMethod((Class, String, Class...))
    + LANG-1698: Fix StackOverflowError in TypeUtils
    .typeVariableToString(TypeVariable), TypeUtils.toString(Type)
    on Java 17 and up
    + LANG-1511: SystemUtils is missing important documentation
    + Make Failable.run(FailableRunnable) null-safe
    + Make Failable.accept(*) null-safe
    + Improve container detection by mimicking systemd #1323
    + Make LangCollectors.collect(...) null-safe
    + Make LangCollectors.collect(...) null-safe
    + Fix names of UTF-16 surrogate character test fixture
    constants, see also #1326
    + Moditect plugin generates split package warnings
    + LocaleUtils.availableLocaleSet() uses predictable iteration
    order
    + LANG-1759: SerializationUtils.clone(Object) throws
    ClassCastException when called with a Serializable lambda
    + LANG-1759: [StringUtils::indexOfAnyBut] redesign due to
    inconsistent/faulty behavior regarding UTF-16 surrogates #1327
    + Undeprecate ObjectUtils.toString(Object)
    + Fix Spotbugs [ERROR] Medium: The field org.apache.commons
    .lang3.builder.DiffBuilder$SDiff.leftSupplier is transient but
    isn't set by deserialization [org.apache.commons.lang3.builder
    .DiffBuilder$SDiff] In DiffBuilder.java
    SE_TRANSIENT_FIELD_NOT_RESTORED
    + Fix Spotbugs [ERROR] Medium: The field org.apache.commons
    .lang3.builder.DiffBuilder$SDiff.rightSupplier is transient but
    isn't set by deserialization [org.apache.commons.lang3.builder
    .DiffBuilder$SDiff] In DiffBuilder.java
    SE_TRANSIENT_FIELD_NOT_RESTORED
    + LANG-1762: StopWatch methods should not delegate to deprecated
    methods
    + Don't call TypeUtils.toString(Type) on every array item in
    TypeUtils.parameterize[WithOwner](Type, Class, Map, Type&gt;)
    unless required
    + Remove -nouses directive from maven-bundle-plugin. OSGi
    package imports now state 'uses' definitions for package
    imports, this doesn't affect JPMS
    (from org.apache.commons:commons-parent:80)
    + Instead of throwing a NullPointerException,
    ArrayUtils.toStringArray(Object[]) should return "null" for
    null elements like ArrayUtils.toStringArray(Object[], String)
    returns its valueForNullElements
    + LANG-1764: Deprecate NumericEntityUnescaper.OPTION in favor of
    Apache Commons Text
    + Several hash collisions in Fraction class
    + LANG-1768: MutableLong and friends should provide better
    parsing exceptions Javadocs
    + Reimplement StringUtils.toCodePoints(CharSequence) to use
    java.lang.CharSequence.codePoints()
    + Reimplement StringUtils.capitalize(String) to use
    java.lang.CharSequence.codePoints()
    + Reimplement StringUtils.uncapitalize(String) to use
    java.lang.CharSequence.codePoints()
    + org.apache.commons.lang3.ClassUtils.getCanonicalName(String)
    now throws an IllegalArgumentException for array dimensions
    greater than 255
    + Fix Javadoc typo and improve clarity in defaultIfBlank method
    [#1376]
    + LANG-1773: Apache Commons Lang no longer builds on Android
    [#1381]
    + LANG-1772: Restrict size of cache to prevent overflow errors
    [#1379]
    + LANG-1772: Reimplement
    org.apache.commons.lang3.ClassUtils.hierarchy(Class,
    Interfaces) using an AtomicReference
    + Fix Javadoc code examples in DiffBuilder and
    ReflectionDiffBuilder #1400
    + Fix generics in org.apache.commons.lang3.stream.Streams
    .toArray(Class) signature
    + LANG-1727: EventListenerSupport doesn't document ordering of
    events
    + Fix edge-case NullPointerException in org.apache.commons.lang3
    .SystemUtils.IS_OS_ANDROID
    + Fix edge-case NullPointerException in org.apache.commons.lang3
    .SystemUtils.isJavaVersionAtLeast(JavaVersion)
    + Fix edge-case NullPointerException in org.apache.commons.lang3
    .SystemUtils.isJavaVersionAtMost(JavaVersion)
    + Return the default enum if a SecurityException is caught in
    getEnumSystemProperty()
    + Fix edge-case NullPointerException in org.apache.commons.lang3
    .EnumUtils.getEnum(Class, String, E)
    + org.apache.commons.lang3.EnumUtils
    .getFirstEnumIgnoreCase(Class, String, Function, E) now
    returns the given default enum on null enumClass input
    + org.apache.commons.lang3.EnumUtils.getEnumIgnoreCase(Class,
    String, E) now returns the given default enum on null
    enumClass input
    + org.apache.commons.lang3.EnumUtils.getEnumIgnoreCase(Class,
    String) now returns the given default enum on null enumClass
    input
    + Fix NullPointerException in org.apache.commons.lang3.compare
    .ComparableUtils.ComparableCheckBuilder.equalTo(A)
    + Fix NullPointerException in org.apache.commons.lang3.compare
    .ComparableUtils.ComparableCheckBuilder.greaterThan(A)
    + Fix NullPointerException in org.apache.commons.lang3.compare
    .ComparableUtils.ComparableCheckBuilder.greaterThanOrEqualTo(A)
    + Fix NullPointerException in org.apache.commons.lang3.compare
    .ComparableUtils.ComparableCheckBuilder.lessThan(A)
    + Fix NullPointerException in org.apache.commons.lang3.compare
    .ComparableUtils.ComparableCheckBuilder.lessThanOrEqualTo(A)
    + LANG-1776: Use GitHub URL in POM for improved automation
    support</changelog>
</package>
<package pkgid="71a59b943fbff5fcdbba401abf670f36dc6b66cd6b753be4026fa462d354858c" name="apache-commons-lang3" arch="src">
  <version epoch="0" ver="3.18.0" rel="150200.3.12.1"/>
  <changelog author="p.drouand@gmail.com" date="1453636800">- Initial release (version 3.4)</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Specify java target and source level 1.6
- Force building with jdk &lt; 1.9, since jdk9's javadoc chocks on one
  class file (internal error)</changelog>
  <changelog author="fstrba@suse.com" date="1507550400">- Modified patch:
  * commons-lang3-3.4-javadoc.patch
    + Fix build with jdk9
- Allow building with jdk9 too
- Run fdupes on javadoc</changelog>
  <changelog author="tchvatal@suse.com" date="1525262400">- Format with spec-cleaner</changelog>
  <changelog author="fstrba@suse.com" date="1540209600">- Build commons-lang3-3.8.1 using modified build.xml and
  default.properties from 3.4.
- Removed patch:
  * commons-lang3-3.4-javadoc.patch
  - integrated in the build.xml
- Use source and target version 1.7, since the code contains
  diamond operator.</changelog>
  <changelog author="fstrba@suse.com" date="1549281600">- Clean-up the spec file and install less jar symlinks</changelog>
  <changelog author="fstrba@suse.com" date="1553515200">- Remove pom parent, since we don't use it when not building with
  maven</changelog>
  <changelog author="fstrba@suse.com" date="1613476800">- Add OSGi manifest</changelog>
  <changelog author="rpm@fthiessen.de" date="1619179200">- Fixed SPEC file: Replaced broken URL
- Update to 3.9
  * Requires jdk &gt;= 1.8
  * Fixed issues with java 12
  * Add more SystemUtils.IS_JAVA_XX variants
  * Adding the Functions class
  * Add @FunctionalInterface to ThreadPredicate and ThreadGroupPredicate
  * Add isEmpty method to ObjectUtils
  * null-safe StringUtils.valueOf(char[]) to delegate to
    String.valueOf(char[]).
  * Add API org.apache.commons.lang3.SystemUtils.isJavaVersionAtMost(JavaVersion)
  * Consolidate the StringUtils equals and equalsIgnoreCase</changelog>
  <changelog author="david.anes@suse.com" date="1640347200">- Updated download URL.
- Update to 3.12.0:
  - New features:
  * Add BooleanUtils.booleanValues().
  * Add BooleanUtils.primitiveValues().
  * Add StringUtils.containsAnyIgnoreCase(CharSequence, CharSequence...).
  * Add StopWatch.getStopTime().
  * More test coverage for CharSequenceUtils.
  * Add fluent-style ArraySorter.
  * Add and use LocaleUtils.toLocale(Locale) to avoid NPEs.
  * Add FailableShortSupplier, handy for JDBC APIs.
  * Add JavaVersion.JAVA_17.
  * Add missing boolean[] join method.
  * Add StringUtils.substringBefore(String, int).
  * Add Range.INTEGER.
  * Add DurationUtils.
  * Introduce the use of @Nonnull, and @Nullable, and the Objects class as a helper tool.
  * Add and use true and false String constants.
  * Add and use ObjectUtils.requireNonEmpty().
  - Fixed Bugs:
  * Correct implementation of RandomUtils.nextLong(long, long).
  * Restore handling of collections for non-JSON ToStringStyle.
  * ContextedException Javadoc add missing semicolon.
  * Resolve JUnit pioneer transitive dependencies using JUnit BOM.
  * NumberUtilsTest - incorrect types in min/max tests.
  * Improve StringUtils.stripAccents conversion of remaining accents.
  * StringUtils.countMatches - clarify Javadoc.
  * Remove redundant argument from substring call.
  * BigDecimal is created when you pass it the min and max values.
  * ArrayUtils.contains() and indexOf() fail to handle Double.NaN.
  * ArrayUtils contains() and indexOf() fail to handle Float.NaN.
  * Fix potential NPE in TypeUtils.isAssignable(Type, ParameterizedType, Map, Type&gt;).
  * TypeUtils.isAssignable returns wrong result for GenericArrayType and ParameterizedType.
  * testGetAllFields and testGetFieldsWithAnnotation sometimes fail.
  * Fix Javadoc for SystemUtils.isJavaVersionAtMost().
  * Fix StringUtils.unwrap throws StringIndexOutOfBoundsException.
  * Fix formatting of isAnyBlank() and isAnyEmpty().
  * TypeUtils. containsTypeVariables does not support GenericArrayType.
  * Javadoc of some methods incorrectly refers to another method.
  * Refine StringUtils.lastIndexOfIgnoreCase.
  * Refine StringUtils.abbreviate.
  * Refine StringUtils.isNumericSpace.
  * Refine StringUtils.deleteWhitespace.
  * Correction in Javadoc of some methods.
  * Javadoc for RandomStringUtils.random() letters, numbers parameters is wrong.
  * Correct markup in Javadoc for unbalanced braces.
  * MethodUtils.invokeMethod NullPointerException in case of null in args list.
  * Fix 2 digit week year formatting.
  * Fix broken Javadoc links to commons-text.
  * Add and use ThreadUtils.sleep(Duration).
  * Add and use ThreadUtils.join(Thread, Duration).
  * Add ObjectUtils.wait(Duration).
  - Changes:
  * ArrayUtils.toPrimitive(Object) does not support boolean and other types.
  * Enable Dependabot.
  * Bump junit-jupiter from 5.6.2 to 5.7.0.
  * Bump spotbugs from 4.1.2 to 4.2.1.
  * Bump spotbugs-maven-plugin from 4.0.0 to 4.2.0.
  * Bump biz.aQute.bndlib from 5.1.1 to 5.3.0.
  * Bump junit-pioneer from 0.6.0 to 1.1.0.
  * Bump checkstyle from 8.34 to 8.40.
  * Bump actions/checkout from v2.3.1 to v2.3.4.
  * Bump actions/setup-java from v1.4.0 to v1.4.2.
  * Update commons.jacoco.version 0.8.5 to 0.8.6 (Fixes Java 15 builds).
  * Update maven-surefire-plugin 2.22.2 -&gt; 3.0.0-M5.
  * Bump maven-pmd-plugin from 3.13.0 to 3.14.0.
  * Bump jmh.version from 1.21 to 1.27.
  * Update commons.japicmp.version 0.14.3 -&gt; 0.15.2.
  * Processor.java: check enum equality with == instead of .equals() method.
  * Bump junit-pioneer from 1.1.0 to 1.3.0.
  * Bump maven-checkstyle-plugin from 3.1.1 to 3.1.2.
  * Bump actions/cache from v2 to v2.1.4.
  * Bump junit-bom from 5.7.0 to 5.7.1.
  * Minor Improvements.
  * Minor Improvement: Add final variable.try to make the code read-only.
  * Minor Improvement: Remove redundant initializer.
  * Use own validator ObjectUtils.anyNull to check null String input.
- From 3.11 Update:
  - New features:
  * Add ArrayUtils.isSameLength() to compare more array types.
  * Added the Locks class as a convenient possibility to deal with locked objects.
  * Add to Functions: FailableBooleanSupplier, FailableIntSupplier, FailableLongSupplier, FailableDoubleSupplier, and so on.
  * Add ArrayUtils.get(T[], index, T) to provide an out-of-bounds default value.
  * Add JavaVersion enum constants for Java 14 and 15.
  * Add JavaVersion enum constants for Java 16.
  * Use Java 8 lambdas and Map operations.
  * Change removeLastFieldSeparator to use endsWith.
  * Change a Pattern to a static final field, for not letting it compile each time the function invoked.
  * Add ImmutablePair factory methods left() and right().
  * Add ObjectUtils.toString(Object, Supplier&lt;String&gt;).
  * Add org.apache.commons.lang3.StringUtils.substringAfter(String, int).
  * Add org.apache.commons.lang3.StringUtils.substringAfterLast(String, int).
  - Fixed Bugs:
  * Fix Javadoc for StringUtils.appendIfMissingIgnoreCase().
  * Refine Javadoc.
  * Fix typos
  * Ignored exception `ignored`, should not be called so.
  * StringUtils.replaceEachRepeatedly gives IllegalStateException.
  * [JSON string for maps] ToStringBuilder.reflectionToString doesnt render nested maps correctly.
  * Correct Javadocs of methods that use Validate.notNull() and replace some uses of Validate.isTrue() with Validate.notNull().
  * Add allNull() and anyNull() methods to ObjectUtils.
  - Changes:
  * Refine test output for FastDateParserTest
  * CharSequenceUtils.lastIndexOf : remake it
  * remove encoding and docEncoding and use inherited values from commons-parent
  * Simplify null checks in Pair.hashCode() using Objects.hashCode().
  * Simplify null checks in Triple.hashCode() using Objects.hashCode().
  * Simplify some if statements in StringUtils.
  * Simplify a null check in the private replaceEach() method of StringUtils.
  * Replace some usages of the ternary operator with calls to Math.max() and Math.min().
  * (Javadoc) Fix return tag for throwableOf*() methods.
  * CharSequenceUtils.regionMatches is wrong dealing with Georgian.
  * Optimize ArrayUtils::isArrayIndexValid method.
  * Use List.sort instead of Collection.sort.
  * Use StandardCharsets.UTF_8.
  * Use Collections.singletonList insteadof Arrays.asList when there be only one element.
  * Change array style from `int a[]` to `int[] a`.
  * Change from addAll to constructors for some List.
  * Simplify if as some conditions are covered by others.
  * Fixed Javadocs for setTestRecursive().
  * ToStringBuilder.reflectionToString - Wrong JSON format when object has a List of Enum.
  * Make org.apache.commons.lang3.CharSequenceUtils.toCharArray(CharSequence) public.
  * org.apache.commons:commons-parent 50 -&gt; 51.
  * org.junit-pioneer:junit-pioneer 0.5.4 -&gt; 0.6.0.
  * org.junit.jupiter:junit-jupiter 5.6.0 -&gt; 5.6.2.
  * com.github.spotbugs:spotbugs 4.0.0 -&gt; 4.0.6.
  * com.puppycrawl.tools:checkstyle 8.29 -&gt; 8.34.
  * commons.surefire.version 3.0.0-M4 -&gt; 3.0.0-M5..
- From 3.10 Update:
  - New features:
  * Add ExceptionUtils.throwableOfType(Throwable, Class) and friends.
  * Add EMPTY_ARRAY constants to classes in org.apache.commons.lang3.tuple.
  * Add null-safe StringUtils APIs to wrap String#getBytes([Charset|String]).
  * Add zero arg constructor for org.apache.commons.lang3.NotImplementedException.
  * Add ArrayUtils.addFirst() methods.
  * Add Range.fit(T) to fit a value into a range.
  * Added Functions.as*, and tests thereof, as suggested by Peter Verhas
  * Add getters for lhs and rhs objects in DiffResult.
  * Generify builder classes Diffable, DiffBuilder, and DiffResult.
  * Add ClassLoaderUtils with toString() implementations.
  * Add null-safe APIs as StringUtils.toRootLowerCase(String) and StringUtils.toRootUpperCase(String).
  * Add org.apache.commons.lang3.time.Calendars.
  * Add EnumUtils getEnum() methods with default values.
  * Added indexesOf methods and simplified removeAllOccurences.
  * Add support of lambda value evaluation for defaulting methods.
  * Add factory methods to Pair classes with Map.Entry input.
  * Add StopWatch convenience APIs to format times and create a simple instance.
  * Allow a StopWatch to carry an optional message.
  * Add ComparableUtils.
  * Add org.apache.commons.lang3.SystemUtils.getUserName().
  * Add ObjectToStringComparator.
  * Add org.apache.commons.lang3.arch.Processor.Arch.getLabel().
  * Add IS_JAVA_14 and IS_JAVA_15 to org.apache.commons.lang3.SystemUtils.
  * ObjectUtils: Get first non-null supplier value.
  * Added the Streams class, and Functions.stream() as an accessor thereof.
  - Fixed Bugs:
  * Make test more stable by wrapping assertions in hashset.
  * Generate Javadoc jar on build.
  * Trivial: year of release for 3.9 says 2018, should be 2019.
  * Use synchronize on a set created with Collections.synchronizedSet before iterating.
  * StringUtils.unwrap incorrect throw StringIndexOutOfBoundsException.
  * StringIndexOutOfBoundsException in StringUtils.replaceIgnoreCase.
  * StringUtils.removeIgnoreCase("?a", "a") throws IndexOutOfBoundsException.
  * Corrected usage examples in Javadocs.
  * StringUtils abbreviate returns String of length greater than maxWidth.
  * Test may fail due to a different order of fields returned by reflection api.
  * Sort fields in ReflectionToStringBuilder for deterministic order.
  * MethodUtils will throw a NPE if invokeMethod() is called for a var-args method.
  * MethodUtils.getAnnotation() with searchSupers = true does not work if super is generic.
  - Changes:
  * Remove redundant if statements in join methods.
  * commons.japicmp.version 0.13.1 -&gt; 0.14.1.
  * junit-jupiter 5.5.0 -&gt; 5.5.1.
  * junit-jupiter 5.5.1 -&gt; 5.5.2.
  * Improve Javadoc based on the discussion of the GitHub PR.
  * maven-checkstyle-plugin 3.0.0 -&gt; 3.1.0.
  * Update documentation related to the issue LANG-696.
  * AnnotationUtils little cleanup.
  * Update test dependency: org.easymock:easymock 4.0.2 -&gt; 4.1.
  * Update test dependency: org.hamcrest:hamcrest 2.1 -&gt; 2.2.
  * Update test dependency: org.junit-pioneer:junit-pioneer 0.3.0 -&gt; 0.4.2.
  * Update build dependency: com.puppycrawl.tools:checkstyle 8.18 -&gt; 8.27.
  * Update POM parent: org.apache.commons:commons-parent 48 -&gt; 50.
  * BooleanUtils Javadoc.
  * Functions Javadoc.
  * org.easymock:easymock 4.1 -&gt; 4.2.
  * org.junit-pioneer:junit-pioneer 0.4.2 -&gt; 0.5.4.
  * org.junit.jupiter:junit-jupiter 5.5.2 -&gt; 5.6.0.
  * Use Javadoc {@code} instead of pre tags.
  * ExceptionUtilsTest to 100%.
  * Reuse own code in Functions.java.
  * Avoid unnecessary allocation in StringUtils.wrapIfMissing.
  * Internally use Validate.notNull(foo, ...) instead of Validate.isTrue(foo != null, ...).
  * Add 1 and 0 in toBooleanObject(final String str).
  * Remove an redundant argument check in NumberUtils.
  * Deprecate org.apache.commons.lang3.ArrayUtils.removeAllOccurences(*) for org.apache.commons.lang3.ArrayUtils.removeAllOccurrences(*).</changelog>
  <changelog author="david.anes@suse.com" date="1640779200">- Fix component version in default.properties to 3.12</changelog>
  <changelog author="pmonreal@suse.com" date="1640779201">- Remove the junit bom dependency for now as it breaks the build of
  other packages like log4j.
  * Add apache-commons-lang3-junit-bom.patch</changelog>
  <changelog author="fstrba@suse.com" date="1693396800">- Break cycle with the new bcel
- Removed patch:
  * apache-commons-lang3-junit-bom.patch
    + not needed since we install the pom file using the new
    %%mvn_install_pom macro which sanitizes the pom file to the
    bare runtime dependencies.</changelog>
  <changelog author="fstrba@suse.com" date="1715688000">- Update to 3.14.0:
  * New features:
    + Add Functions#function(Function).
    + Add FailableFunction#function(FailableFunction).
    + Add CalendarUtils.getInstance().
    + Add syntax for optional tokens to DurationFormatUtils.
    + Add ArrayFill.
    + Add FastDateParser.TimeZoneStrategy.TzInfo.toString().
    + Add LocaleUtils.isLanguageUndetermined(Locale).
    + Add ObjectUtils.toString(Supplier&lt;Object&gt;, Supplier&lt;String&gt;).
    + Add LazyInitializer.isInitialized().
    + Add ConcurrentInitializer#isInitialized() #1120.
    + Add Streams.failableStream(T...).
    + Add FailableSupplier.nul().
    + Add Suppliers.nul().
    + Add ExceptionUtils.throwUnchecked(T) where T extends
    Throwable, and deprecate Object version.
    + Add ExceptionUtils.rethrowRuntimeException(T), and deprecate
    rethrow(T).
    + ConcurrentInitializer implementations can now be instantiated
    and configured with allocation and release lambdas.
    Fixes LANG-1716.
    + Add support for RISC-V in ArchUtils #1128. Fixes LANG-1717.
  * Fixed bugs:
    + Rename variable names from 'clss' to 'clazz'.
    + [Javadoc] ComparableUtils'c1' to 'comparable1', 'c2' to
    'comparable2'
    + [Javadoc] Remove 2.1 specific comment #1091.
    + [Javadoc] Fix Incorrect Description in Processor isAarch64()
    [#1093]. Fixes LANG-1704.
    + [Javadoc] Point to right getShortClassName flavor in Javadoc
    for relevant notes #1097.
    + Improve performance of StringUtils.isMixedCase().
    + ThreadUtils find methods should not return null items. Fixes
    LANG-1706.
    + ReflectionToStringBuilder changes in version 3.13.0 has broken
    the logic for overriding classes. Fixes LANG-1710.
    + Return "null" instead of NPE in
    ClassLoaderUtils.toString(ClassLoader).
    + Return "null" instead of NPE in
    ClassLoaderUtils.toString(URLClassLoader).
    + Return ToStringStyle.nullText instead of NPE for
    ReflectionToStringBuilder.toString().
    + Fix ThresholdCircuitBreaker#checkState().
    + Use ConcurrentInitializer implementations without subclassing.
    + Update critical value for chi-square test.
    + Fix Javadoc syntax errors #1129.
- From 3.13.0 update
  * New features:
    + Add GitHub coverage.yml.
    + Add EnumUtils.getEnumSystemProperty(...).
    + Add TriConsumer.
    + Add and use EnumUtils.getFirstEnumIgnoreCase(Class, String,
    Function, E).
    + Add and use Suppliers.
    + Add and use ArrayUtils.getComponentType(T[]).
    + Add and use ClassUtils.getComponentType(Class&gt;T[]&gt;).
    + Add and use ObjectUtils.getClass(T).
    + Add and use ArrayUtils.newInstance(Class&gt;T&gt;, int).
    + Add and use null-safe Streams.of(T...).
    + Add ClassUtils.comparator().
    + Add and use ThreadUtils.sleepQuietly(Duration).
    + Add and use ArrayUtils.setAll(T[], IntFunction).
    + Add and use ArrayUtils.setAll(T[], Supplier).
    + Add BooleanConsumer.
    + Add IntToCharFunction.
    + Add IntStreams.
    + Add UncheckedFuture.
    + Add UncheckedException.
    + Add UncheckedExecutionException.
    + Add UncheckedTimeoutException.
    + Add UncheckedInterruptedException.
    + Add TimeZones.GMT.
    + Add ObjectUtils.identityHashCodeHex(Object).
    + Add ObjectUtils.hashCodeHex(Object).
    + Add StringUtils.removeStart(String, char).
    + Add null-safe ObjectUtils.isArray(). Fixes LANG-1659.
    + Add ComparableUtils.max(A, A) and ComparableUtils.min(A, A).
    + Add UncheckedReflectiveOperationException.
    + Add and use ClassUtils.isPublic(Class).
    + Add UncheckedIllegalAccessException.
    + Add MethodInvokers.
    + Add Streams.nullSafeStream(Collection).
    + Add Streams.toStream(Collection).
    + Add Streams.failableStream(Collection) and deprecate misnamed
    stream(Collection).
    + Add Streams.failableStream(Stream) and deprecate misnamed
    stream(Stream).
    + Add EnumUtils.getEnumMap(Class, Function).
    + Add FluentBitSet.
    + Add Streams.instancesOf(Class, Collection).
    + Add ImmutablePair.ofNonNull(L, R).
    + Add ImmutableTriple.ofNonNull(L, M, R).
    + Add MutablePair.ofNonNull(L, R).
    + Add MutableTriple.ofNonNull(L, M, R).
    + Add Pair.ofNonNull(L, R).
    + Add Triple.ofNonNull(L, M, R).
    + Add ArrayUtils.containsAny(Object[], Object...).
    + Add Processor.Type.AARCH_64.
    + Add Processor.isAarch64().
    + Update ArchUtils.getProcessor(String) for "aarch64".
    + Add JavaVersion.JAVA_18.
    + Add JavaVersion.JAVA_19.
    + Add JavaVersion.JAVA_20.
    + Add JavaVersion.JAVA_21.
    + Add TimeZones.toTimeZone(TimeZone).
    + Add FutureTasks.
    + Add Memoizer(Function) and Memoizer(Function, boolean).
    + Add Consumers.
    + Add github/codeql-action.
    + Add coverage.yml.
    + Add DurationUtils.since(Temporal).
    + Add DurationUtils.of(FailableConsumer|FailableRunnbale).
    + Add ExceptionUtils.forEach(Throwable, Consumer&lt;Throwable&gt;).
    + Add ExceptionUtils.stream(Throwable).
    + Add ExceptionUtils.getRootCauseStackTraceList(Throwable).
    + Add SystemUtils.IS_OS_WINDOWS_11.
    + Add SystemUtils.IS_JAVA_16.
    + Add SystemUtils.IS_JAVA_17.
    + Add SystemUtils.IS_JAVA_18.
    + Add SystemUtils.IS_JAVA_19.
    + Add SystemUtils.IS_JAVA_20.
    + Add SystemUtils.IS_JAVA_21.
    + Add ArrayUtils.oneHot(). Fixes LANG-1627.
    + Let ReflectionToStringBuilder only reflect given field names.
    Fixes LANG-1662.
    + Add Streams.of(Enumeration&lt;E&gt;).
    + Add Streams.of(Iterable&lt;E&gt;).
    + Add Streams.of(Iterator&lt;E&gt;).
    + Simple support for Optional in ObjectUtils#isEmpty(). Fixes
    LANG-1689.
    + Add Processor.Type.getLabel().
    + Add Processor.toString().
    + Add HashCodeBuilder.equals(Object).
    + Add BooleanUtils.values() and forEach().
    + Add ClassPathUtils.packageToPath(String) and pathToPackage(String)
    + Add CalendarUtils#getDayOfYear()
    + Add NumberRange, DoubleRange, IntegerRange, LongRange.
    + Add missing exception javadoc/tests for some null arguments.
    + Add ClassLoaderUtils.getSystemURLs() and getThreadURLs().
    + Add RegExUtils.dotAll() and dotAllMatcher().
    + Add Pair.accept(FailableBiConsumer).
    + Add Pair.apply(FailableBiFunction).
    + Add ReflectionDiffBuilder.setExcludeFieldNames(...) and
    DiffExclude a... Fixes LANG-1677.
    + Add and ExceptionUtils.isChecked() and isUnchecked(). Fixes
    LANG-1647.
    + Add and use ExceptionUtils.throwUnchecked(throwable).
    + Add LockingVisitors.create(O, ReadWriteLock).
  * Fixed bugs:
    + NumberUtils.createNumber() to recognize hex integers prefixed
    with +. Fixes LANG-1645.
    + NumberUtils.createNumber() to return requested floating point
    type for zero. Fixes LANG-1646.
    + DMI: Random object created and used only once
    (DMI_RANDOM_USED_ONLY_ONCE); Better multi-threaded behavior.
    + Redundant Collection operation. Use
    Collections.emptyIterator(). Fixes LANG-1646.
    + Make Streams.stream(Collection) null-safe.
    + Allow tests to access java.util classes such as ArrayList in
    Java 16. Fixes LANG-1667.
    + OpenJDK 16 Day Period Parsing. Fixes LANG-1669.
    + Update documentation to list correct exception for null array
    parameters. Fixes LANG-1663.
    + Fixing reversed Javadoc descriptions in StopWatch.
    + Fix typos in JavaDoc. Fixes LANG-1670.
    + Simplify assertions with equivalent but more simple..
    + Avoid multiple equivalent occurrences of the same expression.
    + Remove redundant initializers.
    + Fix ObjectUtils Javadocs.
    + Make Range constructors more generic. Fixes LANG-1674.
    + Use final and Remove redundant String.
    + Use Set instead of List for checking the contains() method.
    + Javadoc for StringUtils.substringBefore(String str,
    int separator) doesn't mention that the separator is an int.
    + Fix NullPointerException in ThreadUtils.getSystemThreadGroup()
    when the current thread is stopped.
    + ArrayUtils.toPrimitive(Boolean...) null array elements map to
    false, like Boolean.parseBoolean(null) and its callers return
    false.
    + StrBuilder.StrBuilderReader.skip(long): Throw an exception
    when an implicit narrowing conversion in a compound assignment
    would result in information loss or a numeric error such as an
    overflows.
    + Deprecate Validate#notNull(Object) in favor of using
    Objects#requireNonNull(Object, String).
    + Use TimeZone from calendar in DateFormatUtils. Fixes
    LANG-1462.
    + Updating javadoc for NullPointerException when
    Validate.notNull() is called.
    + Fixing and adding DateUtils exception Javadocs.
    + Improve performance of StringUtils.unwrap(String, String).
    Fixes LANG-1679.
    + Improve performance of StringUtils.join for primitives. Fixes
    LANG-1675.
    + Fixed NPE getting Stack Trace if Throwable is null. Fixes
    LANG-1675.
    + Make Validate.isAssignableFrom() check null inputs.
    + Fix Javadoc for Validate.isAssignableFrom().
    + Make final mappingFunction variable.
    + Remove unnecessary variable creations.
    + Minor changes.
    + FastDateFormat does not support the 'L'-Pattern from
    SimpleDateFormat. Fixes LANG-1680.
    + Increase test coverage of ComparableUtils from 71% to 100%.
    + Increase method test coverage of
    MultilineRecursiveToStringStyle.
    + Fix unstable coverage of CharSequenceUtils tests noticed
    during merge of PRs 898 and 899.
    + Rewrite Conversion.binaryBeMsb0ToHexDigit to invert logic of
    binaryToHexDigit.
    + Allow extension of previously final classes ImmutablePair and
    ImmutableTriple.
    + Update ClassUtils Javadoc with some missing throws NPE.
    + Javadoc: StringUtils.repeat("", "x", 3) = "xx";.
    + StringUtils.join(Iterable, String) should only return null
    when the Iterable is null.
    + Add tests to increase coverage.
    + Extends Object clauses are redundant.
    + Simplify conditional expression..
    + Fix some Javadoc comments.
    + Deprecate getNanosOfMiili() method with typo and create proper
    getNanosOfMilli().
    + Deprecate ThreadUtils code that defines custom function
    interfaces in favor of stock java.util.function.Predicate
    usage.
    + Fix links in Javadoc and documentation.
    + Deprecate RandomUtils in favor of Apache Commons RNG
    UniformRandomProvider. Fixes LANG-1604.
    + Added docs regarding week year support. Fixes LANG-1638.
    + ClassUtils.getShortCanonicalName doesn't use the
    canonicalName. Fixes LANG-1691.
    + Validate: Get error messages without using String.format when
    varargs is empty.
    + Simplify expression (length is never &lt; 0).
    + Fix simple broken javadoc..
    + Fix typo.
    + Use Objects.requireNonNull() directly.
    + MethodUtils.getMatchingMethod() fails with "Found multiple
    candidates". Fixes LANG-1694.
    + Construct ArrayList with better default size. Fixes LANG-1643.
    + ThreadUtilsTest#testThreadGroups will test failed when using
    Junit5 parallel test.
    + Swap the order of assertion args (first excepted then actual).
    + Fix the comment of Failable, redundant "-".
    + Fix the comment of ComparableUtils, using "smallest", not
    "largest".
    + AnnotationUtilsTest and FormattableUtilsTest Only use static
    imports to import assert methods in tests.
    + [LANG-1681] Fix some FieldUtils Javadocs.
    + Remove unnecessary statement in DurationFormatUtils.
    + Corrected value of SystemUtils.JAVA_VENDOR. Fixes LANG-1699.
    + [StepSecurity] ci: Harden GitHub Actions.
    + Update Javadoc for the insert methods in ArrayUtils.
    + Deprecate ExceptionUtils.ExceptionUtils().
    + TypeUtils.getRawType() throws a NullPointerException on
    Wildcard GenericArrayType. Fixes LANG-1697.
    + Throw IllegalArgumentException instead of InternalError in the
    builder package.
    + Avoid NPE in MutableObject#equals() for null content.
    + SystemUtils fix and updates related to macOS.</changelog>
  <changelog author="gus.kenion@suse.com" date="1723204800">- Update to 3.16.0:
  * New features:
    + Add StopWatch.getSplitDuration() and deprecate
    getSplitTime().
    + Add StopWatch.getStartInstant() and deprecate getStartTime().
    + Add StopWatch.getStopInstant() and deprecate getStopTime().
    + Add StopWatch.getDuration() and deprecate getTime().
    + Add Javadoc links from StopWatch to DurationUtils #1249.
    + Add LangCollectors.collect(Collector, T...).
    + Add RandomStringUtils.secure().
    + Add RandomStringUtils.insecure().
  * Fixed bugs:
    + Reimplement StopWatch internals to use java.time.
    + RandomStringUtils.random() with a negative character index
    should throw IllegalArgumentException. Fixes LANG-1745.
    + LocaleUtils.toLocale(String) cannot parse four segments.
    Fixes LANG-1741.
    + Use fewer intermediary strings in
    DefaultExceptionContext.getFormattedExceptionMessage(String).
    + Fix Javadoc in StringUtils.splitPreserveAllTokens() #1251.
    + Deprecate ArraySort constructor for removal.
    + Deprecate CharEncoding constructor for removal.
    + Deprecate Conversion constructor for removal.
    + Deprecate Conversion constructor for removal.
    + Deprecate EntityArrays constructor for removal.
    + Deprecate ObjectToStringComparator constructor for removal.
    + Deprecate RuntimeEnvironment constructor for removal.
- Includes changes from 3.15.0:
  * New features:
    + Customize text pattern in DiffResult#toString(). Fixes
    LANG-1724.
    + Add DiffBuilder.Builder.
    + Add DiffBuilder.builder().
    + Add ReflectionDiffBuilder.Builder.
    + Add ReflectionDiffBuilder.builder().
    + Add test in TypeUtilsTest #1151.
    + Add Streams.failableStream(T), non-varargs variant.
    + Add Streams.nonNull(T), non-varargs variant.
    + Add ArrayUtils.nullTo(T[], T[]).
    + Add T ArrayUtils.arraycopy(T, int, T, int, int) fluent style.
    + Add T ArrayUtils.arraycopy(T, int, int, int, Function) fluent
    style.
    + Add SystemUtils.IS_JAVA_22.
    + Add JavaVersion.JAVA_22.
    + Add SystemProperties.getUserName(Supplier&lt;String&gt;).
    + Add SystemProperties.getLineSeparator(Supplier&lt;String&gt;).
    + Add
    + SystemProperties.getJavaSpecificationVersion(Supplier&lt;String&gt;).
    + Add SystemProperties constants and methods for system
    properties as of Java 22.
    + Add MethodUtils.getMethodObject(Class, String, Class...).
    + Add null-safe Consumers.accept() and Functions.apply() #1215.
    Fixes LANG-1733.
    + Add SystemUtils.IS_OS_ANDROID.
    + Add SystemUtils.IS_OS_MAC_OSX_SONOMA.
    + Add RuntimeEnvironment.inContainer() #1241.
    + Add AppendableJoiner and refactor string joining #1244.
  * Fixed bugs:
    + Improve Javadoc in ExceptionUtils #1136.
    + Fixed two non-deterministic tests in EnumUtilsTest.java
    [#1131].
    + Fix wrong number check that cause
    StringIndexOutOfBoundsException #1140. Fixes LANG-1721.
    + Rethrow NegativeArraySizeException as SerializationException
    in SerializationUtils.deserialize(InputStream) #1141. Fixes
    LANG-1722.
    + Throw NumberFormatException instead of
    IndexOutOfBoundsException in NumberUtils.getMantissa(String,
    int) #1145. Fixes LANG-1723.
    + Minor grammar fixes #1143.
    + ArrayUtils will return null when adding two null arrays, but
    undocumented. Fixes LANG-1713.
    + Let parent POM figure out commons.spdx.version.
    + Undeprecate ExceptionUtils.rethrow(Throwable). Fixes
    LANG-1726.
    + Test the Conversion class #1155. Fixes LANG-1702.
    + Address minor redundancies after code inspection #1148.
    + Allow EventListenerSupport to handle (and ignore) exception
    from listeners allowing invocation of all listeners #1167.
    + Deprecate AnnotationUtils 0-argument constructor.
    + Deprecate ArchUtils 0-argument constructor.
    + Deprecate ArrayUtils 0-argument constructor.
    + Deprecate BooleanUtils 0-argument constructor.
    + Deprecate CharSequenceUtils 0-argument constructor.
    + Deprecate CharSetUtils 0-argument constructor.
    + Deprecate CharUtils 0-argument constructor.
    + Deprecate ClassLoaderUtils 0-argument constructor.
    + Deprecate ClassPathUtils 0-argument constructor.
    + Deprecate ClassUtils 0-argument constructor.
    + Deprecate ConstructorUtils 0-argument constructor.
    + Deprecate DateFormatUtils 0-argument constructor.
    + Deprecate DateUtils 0-argument constructor.
    + Deprecate Diff.getType().
    + Deprecate DiffBuilder.DiffBuilder(T, T, ToStringStyle).
    + Deprecate DiffBuilder.DiffBuilder(T, T, ToStringStyle,
    boolean).
    + Deprecate DurationFormatUtils 0-argument constructor.
    + Deprecate DurationUtils 0-argument constructor.
    + Deprecate EnumUtils 0-argument constructor.
    + Deprecate EventUtils 0-argument constructor.
    + Deprecate FieldUtils 0-argument constructor.
    + Deprecate IEEE754rUtils 0-argument constructor.
    + Deprecate InheritanceUtils 0-argument constructor.
    + Deprecate IntStreams 0-argument constructor.
    + Deprecate LocaleUtils 0-argument constructor.
    + Deprecate LockingVisitors 0-argument constructor.
    + Deprecate MemberUtils 0-argument constructor.
    + Deprecate MethodUtils 0-argument constructor.
    + Deprecate NumberUtils 0-argument constructor.
    + Deprecate ObjectUtils 0-argument constructor.
    + Deprecate RandomStringUtils 0-argument constructor.
    + Deprecate RandomUtils 0-argument constructor.
    + Deprecate ReflectionDiffBuilder.ReflectionDiffBuilder(T, T,
    ToStringStyle).
    + Deprecate RegExUtils 0-argument constructor.
    + Deprecate SerializationUtils 0-argument constructor.
    + Deprecate Streams 0-argument constructor.
    + Deprecate StringEscapeUtils 0-argument constructor.
    + Deprecate StringUtils 0-argument constructor.
    + Deprecate Suppliers 0-argument constructor.
    + Deprecate SystemProperties 0-argument constructor.
    + Deprecate ThreadUtils 0-argument constructor.
    + Deprecate TypeUtils 0-argument constructor.
    + Make ArrayFill null-safe.
    + Make ArraySorter null-safe.
    + Make ArrayUtils.removeAll() null-safe.
    + Fix Java version in README.md #1170.
    + StringUtils.stripAccents() should handle ligatures, UTF32
    math blocks, etc. #1201.
    + TypeUtils.toString(Type) StackOverflowError for an inner
    class in the inner class parameterized enclosing class #657.
    Fixes LANG-1524.
    + Deprecate SystemUtils.getUserName(String) in favor of
    SystemProperties.getUserName(Supplier).
    + Make LockVisitor.acceptReadLocked(FailableConsumer)
    null-safe.
    + Make LockVisitor.applyWriteLocked(FailableConsumer)
    null-safe.
    + Make ObjectUtils.getFirstNonNull(Supplier...) null-safe.
    + Make SystemProperties.getLineSeparator(Supplier).
    + StringUtils.stripAccents(String) doesn't handle "\u0111" and
    "\u0110" (Vietnamese) #1216.
    + StringUtils.stripAccents(String) doesn't handle I with bar.
    + StringUtils.stripAccents(String) doesn't handle U with bar.
    + StringUtils.stripAccents(String) doesn't handle T with
    stroke.
    + Fix Javadoc for FluentBitSet.setInclusive(int, int) #1222.
    Fixes LANG-1735.
    + Same Javadoc changes as [TEXT-234] #1223.
    + Remove duplicate static data in
    SerializationUtils.ClassLoaderAwareObjectInputStream.
    + Reimplement RandomUtils and RandomStringUtils on top of
    SecureRandom#getInstanceStrong() #1235.
    + DiffBuilder: Type constraint for method append(...,
    DiffResult) too strict #786. Fixes LANG-1657.</changelog>
  <changelog author="gus.kenion@suse.com" date="1743508800">- Update to 3.17.0
  * New features:
  * RandomUtils.secure() now uses SecureRandom() instead of
    SecureRandom.getInstanceStrong().
  * RandomStringUtils.secure() now uses SecureRandom() instead of
    SecureRandom.getInstanceStrong().
  * Remove unused exception from deprecated
    StringUtils.toString(byte[], String).
  * Make RandomUtils.insecure() public.
  * Add RandomUtils.secureStrong().
  * Add RandomStringUtils.secureStrong().
  * Add CalendarUtils.toLocalDateTime(Calendar).
  * Add CalendarUtils.toLocalDateTime().
  * Add CalendarUtils.toZonedDateTime(Calendar).
  * Add CalendarUtils.toZonedDateTime().
  * Add CalendarUtils.toOffsetDateTime(Calendar).
  * Add CalendarUtils.toOffsetDateTime().
  * Fixed Bugs:
  * LANG-1760: Using RandomStringUtils.insecure() still leads to
    using the secure() random.
  * Deprecate static RandomUtils.next*() methods in favor or
    .secure() and .insecure() versions.
  * Deprecate static RandomStringUtils.random*() methods in favor
    or .secure() and .insecure() versions.
  * Changes:
  * Bump org.hamcrest:hamcrest from 2.2 to 3.0 #1255.
  * Bump org.easymock:easymock from 5.3.0 to 5.4.0 #1256.
  * Bump org.codehaus.mojo:exec-maven-plugin from 3.3.0 to 3.4.1
    [#1262], #1264.
  * Bump org.apache.commons:commons-parent from 72 to 73 #1265.</changelog>
  <changelog author="fstrba@suse.com" date="1752580800">- Update to 3.18.0
  * New features:
    + Add Strings and refactor StringUtils
    + LANG-1747: Add StopWatch.run([Failable]Runnable) and
    get([Failable]Supplier)
    + Add JavaVersion.JAVA_23
    + Add JavaVersion.JAVA_24
    + Add SystemUtils.IS_JAVA_23
    + Add SystemUtils.IS_JAVA_24
    + Add IntegerRange.toIntStream()
    + Add LongRange.toLongStream()
    + Add IntStrams.of(int...)
    + Add ArrayUtils.containsAny(int[], int...)
    + Add CalendarUtils.toLocalDate() #725
    + Add SystemUtils.IS_OS_MAC_OSX_SEQUOIA
    + Add BasicThreadFactory.builder() and deprecate
    BasicThreadFactory.Builder()
    + Add BasicThreadFactory.daemon()
    + Add ArrayUtils.startsWith
    + Add Predicates
    + Add RegExUtils methods typed to CharSequence input and
    deprecate old versions typed to String
    + Add IterableStringTokenizer
    + Add FailableIntToFloatFunction
    + Add Validate.isTrue(boolean, Supplier&lt;String&gt;)
    + Add EnumUtils.getFirstEnum(Class&lt;E&gt;, int, ToIntFunction&lt;E&gt;, E)
    + Add FailableToBooleanFunction
    + Add the @FunctionalInterface annotation to
    org.apache.commons.lang3.concurrent.Computable
    + Add SystemUtils.getJavaIoTmpDirPath()
    + Add SystemUtils.getJavaHomePath()
    + Add SystemUtils.getUserDirPath()
    + Add SystemUtils.getUserHomePath()
    + Add ArrayFill.fill(T[], FailableIntFunction))
    + Add SystemProperties.JAVA_SECURITY_DEBUG
    + Add SystemProperties.JAVA_SECURITY_KERBEROS_CONF
    + Add SystemProperties.JAVA_SECURITY_KERBEROS_KDC
    + Add SystemProperties.JAVA_SECURITY_KERBEROS_REAL
    + Add ArrayFill.fill(boolean[], boolean) #1386
    + Add ObjectUtils.getIfNull(Object, Object) and deprecate
    defaultIfNull(Object, Object)
    + org.apache.commons.lang3.mutable.Mutable now extends Supplier
    + Add org.apache.commons.lang3.CharUtils.isHex(char)
    + Add org.apache.commons.lang3.CharUtils.isOctal(char)
    + Add org.apache.commons.lang3.concurrent.locks.LockingVisitors
    .reentrantLockVisitor(Object)
    + Add org.apache.commons.lang3.concurrent.locks.LockingVisitors
    .create(Object, ReentrantLock)
    + Add org.apache.commons.lang3.concurrent.locks.LockingVisitors
    .ReentrantLockVisitor
    + Add builders for LockingVisitors implementations
    + Add EnumSet.stream(Class)
    + Add org.apache.commons.lang3.SystemProperties.isPropertySet(String)
  * Fixed Bugs:
    + Fix flaky FileUtilsWaitForTest.testWaitForNegativeDuration()
    + Pick up exec-maven-plugin version from parent POM
    + Speed up and sanitize StopWatchTest
    + Fix handling of non-ASCII letters and numbers in
    RandomStringUtils #1273
    + Rewrite ClassUtils.getClass(...) without recursion to avoid
    StackOverflowError on very long inputs (bsc#1246397,
    CVE-2025-48924)
    + OSS-Fuzz Issue 42522972: apache-commons-text:
    StringSubstitutorInterpolatorFuzzer: Security exception in
    org.apache.commons.lang3.ClassUtils.getClass
    + Remove trailing whitespace in StopWatch exception messages
    + LANG-1754: Use getAllSuperclassesAndInterfaces() in
    getMatchingMethod() #1289
    + Add details to the ArrayFill Javadoc
    + Add details to the ArraySorter Javadoc
    + Fix broken URL to project location in Maven Central #1296
    + LANG-1753: StringUtils.replaceEachRepeatedly regression in
    3.11+ #1297
    + Use simplified JUnit assertion methods #1298
    + LANG-1682: Javadoc and test: Use Strings.CI.startsWithAny
    method instead #1299
    + Fix NullPointerException in FastDateParser.TimeZoneStrategy
    .setCalendar(FastDateParser, Calendar, String) on Java 23
    + LANG-1757: Fix NullPointerException in MethodUtils
    .getMatchingAccessibleMethod((Class, String, Class...))
    + LANG-1698: Fix StackOverflowError in TypeUtils
    .typeVariableToString(TypeVariable), TypeUtils.toString(Type)
    on Java 17 and up
    + LANG-1511: SystemUtils is missing important documentation
    + Make Failable.run(FailableRunnable) null-safe
    + Make Failable.accept(*) null-safe
    + Improve container detection by mimicking systemd #1323
    + Make LangCollectors.collect(...) null-safe
    + Make LangCollectors.collect(...) null-safe
    + Fix names of UTF-16 surrogate character test fixture
    constants, see also #1326
    + Moditect plugin generates split package warnings
    + LocaleUtils.availableLocaleSet() uses predictable iteration
    order
    + LANG-1759: SerializationUtils.clone(Object) throws
    ClassCastException when called with a Serializable lambda
    + LANG-1759: [StringUtils::indexOfAnyBut] redesign due to
    inconsistent/faulty behavior regarding UTF-16 surrogates #1327
    + Undeprecate ObjectUtils.toString(Object)
    + Fix Spotbugs [ERROR] Medium: The field org.apache.commons
    .lang3.builder.DiffBuilder$SDiff.leftSupplier is transient but
    isn't set by deserialization [org.apache.commons.lang3.builder
    .DiffBuilder$SDiff] In DiffBuilder.java
    SE_TRANSIENT_FIELD_NOT_RESTORED
    + Fix Spotbugs [ERROR] Medium: The field org.apache.commons
    .lang3.builder.DiffBuilder$SDiff.rightSupplier is transient but
    isn't set by deserialization [org.apache.commons.lang3.builder
    .DiffBuilder$SDiff] In DiffBuilder.java
    SE_TRANSIENT_FIELD_NOT_RESTORED
    + LANG-1762: StopWatch methods should not delegate to deprecated
    methods
    + Don't call TypeUtils.toString(Type) on every array item in
    TypeUtils.parameterize[WithOwner](Type, Class, Map, Type&gt;)
    unless required
    + Remove -nouses directive from maven-bundle-plugin. OSGi
    package imports now state 'uses' definitions for package
    imports, this doesn't affect JPMS
    (from org.apache.commons:commons-parent:80)
    + Instead of throwing a NullPointerException,
    ArrayUtils.toStringArray(Object[]) should return "null" for
    null elements like ArrayUtils.toStringArray(Object[], String)
    returns its valueForNullElements
    + LANG-1764: Deprecate NumericEntityUnescaper.OPTION in favor of
    Apache Commons Text
    + Several hash collisions in Fraction class
    + LANG-1768: MutableLong and friends should provide better
    parsing exceptions Javadocs
    + Reimplement StringUtils.toCodePoints(CharSequence) to use
    java.lang.CharSequence.codePoints()
    + Reimplement StringUtils.capitalize(String) to use
    java.lang.CharSequence.codePoints()
    + Reimplement StringUtils.uncapitalize(String) to use
    java.lang.CharSequence.codePoints()
    + org.apache.commons.lang3.ClassUtils.getCanonicalName(String)
    now throws an IllegalArgumentException for array dimensions
    greater than 255
    + Fix Javadoc typo and improve clarity in defaultIfBlank method
    [#1376]
    + LANG-1773: Apache Commons Lang no longer builds on Android
    [#1381]
    + LANG-1772: Restrict size of cache to prevent overflow errors
    [#1379]
    + LANG-1772: Reimplement
    org.apache.commons.lang3.ClassUtils.hierarchy(Class,
    Interfaces) using an AtomicReference
    + Fix Javadoc code examples in DiffBuilder and
    ReflectionDiffBuilder #1400
    + Fix generics in org.apache.commons.lang3.stream.Streams
    .toArray(Class) signature
    + LANG-1727: EventListenerSupport doesn't document ordering of
    events
    + Fix edge-case NullPointerException in org.apache.commons.lang3
    .SystemUtils.IS_OS_ANDROID
    + Fix edge-case NullPointerException in org.apache.commons.lang3
    .SystemUtils.isJavaVersionAtLeast(JavaVersion)
    + Fix edge-case NullPointerException in org.apache.commons.lang3
    .SystemUtils.isJavaVersionAtMost(JavaVersion)
    + Return the default enum if a SecurityException is caught in
    getEnumSystemProperty()
    + Fix edge-case NullPointerException in org.apache.commons.lang3
    .EnumUtils.getEnum(Class, String, E)
    + org.apache.commons.lang3.EnumUtils
    .getFirstEnumIgnoreCase(Class, String, Function, E) now
    returns the given default enum on null enumClass input
    + org.apache.commons.lang3.EnumUtils.getEnumIgnoreCase(Class,
    String, E) now returns the given default enum on null
    enumClass input
    + org.apache.commons.lang3.EnumUtils.getEnumIgnoreCase(Class,
    String) now returns the given default enum on null enumClass
    input
    + Fix NullPointerException in org.apache.commons.lang3.compare
    .ComparableUtils.ComparableCheckBuilder.equalTo(A)
    + Fix NullPointerException in org.apache.commons.lang3.compare
    .ComparableUtils.ComparableCheckBuilder.greaterThan(A)
    + Fix NullPointerException in org.apache.commons.lang3.compare
    .ComparableUtils.ComparableCheckBuilder.greaterThanOrEqualTo(A)
    + Fix NullPointerException in org.apache.commons.lang3.compare
    .ComparableUtils.ComparableCheckBuilder.lessThan(A)
    + Fix NullPointerException in org.apache.commons.lang3.compare
    .ComparableUtils.ComparableCheckBuilder.lessThanOrEqualTo(A)
    + LANG-1776: Use GitHub URL in POM for improved automation
    support</changelog>
</package>
<package pkgid="940059ce5a800a1a54e1d2b2bbc756086e9e68cce92d87636c02a0ce9144f4fe" name="apache2" arch="src">
  <version epoch="0" ver="2.4.62" rel="150700.4.12.1"/>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718280000">- added patches [bsc#1226217]
  https://github.com/apache/httpd/pull/444/commits/c2fffd29b0f58bdc9caaaff4fec68e17a676f182
  + apache2-issue-444.patch</changelog>
  <changelog author="david.anes@suse.com" date="1720440000">- Security fix:
  - CVE-2024-39573, bsc#1227271: potential SSRF in mod_rewrite
  * Added apache2-CVE-2024-39573.patch
  - CVE-2024-38477, bsc#1227270: null pointer dereference in mod_proxy
  * Added apache2-CVE-2024-38477.patch
  - CVE-2024-38475, bsc#1227268: Improper escaping of output in mod_rewrite
  * Added apache2-CVE-2024-38475-1.patch
  * Added apache2-CVE-2024-38475-2.patch
  * Added apache2-CVE-2024-38475-3.patch
  - CVE-2024-38476, bsc#1227269: Server may use exploitable/malicious
  backend application output to run local handlers via internal
  redirect
  * Added apache2-CVE-2024-38476-1.patch
  * Added apache2-CVE-2024-38476-2.patch
  * Added apache2-CVE-2024-38476-3.patch
  * Added apache2-CVE-2024-38476-4.patch
  * Added apache2-CVE-2024-38476-5.patch
  * Added apache2-CVE-2024-38476-6.patch
  * Added apache2-CVE-2024-38476-7.patch
  * Added apache2-CVE-2024-38476-8.patch
  * Added apache2-CVE-2024-38476-9.patch
  * Added apache2-CVE-2024-38476-10.patch
  * Added apache2-CVE-2024-38476-11.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1721217600">- Security fix:
  - CVE-2024-36387, bsc#1227272: DoS by null pointer in websocket over HTTP/2
  * Added apache2-CVE-2024-36387.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1723636800">- Apply fix for CVE-2024-38474, bsc#1227278.
  Patch file added:
  * apache2-CVE-2024-38474.patch
- Apply fix for CVE-2024-38473, bsc#1227276.
  Patch files added:
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1724328000">- Apply fix for CVE-2024-39884, bsc#1227353.
  Patch file added:
  * apache2-CVE-2024-39884.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1727956800">- Apply fix for CVE-2024-40725, bsc#1228097.
  Patch file added:
  * apache2-CVE-2024-40725.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1728043200">- provide /usr/sbin/apxs and /usr/sbin/apxs2 symlinks to
  /usr/bin/aspx [bsc#1227261]</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11879).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1742385600">- Re-introduce patch to improve FIPS compatibility (bsc#1236802):
  * apache2-fips-compatibility.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1759320000">- Fix for bsc#1249359.
- Binary path for Apache's MPM was partially duplicated when it
  can't be invoked/found.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765800000">- Fix the following bugs and CVEs:
  * bsc#1254511 / CVE-2025-55753
  * bsc#1254512 / CVE-2025-58098
  * bsc#1254514 / CVE-2025-65082
  * bsc#1254515 / CVE-2025-66200
- Add patches:
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1770811200">- Fix bsc#1229147.
- The default value for MaxRequestWorkers should be a multiple of 25,
  so we're setting it from 256 down to 250, which is what Apache was
  doing during runtime in any case.</changelog>
</package>
<package pkgid="aa9dd82a104e5046e156d5fa110559784be8a5a95732368d238302d2bd65c93d" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.62" rel="150700.4.12.1"/>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718280000">- added patches [bsc#1226217]
  https://github.com/apache/httpd/pull/444/commits/c2fffd29b0f58bdc9caaaff4fec68e17a676f182
  + apache2-issue-444.patch</changelog>
  <changelog author="david.anes@suse.com" date="1720440000">- Security fix:
  - CVE-2024-39573, bsc#1227271: potential SSRF in mod_rewrite
  * Added apache2-CVE-2024-39573.patch
  - CVE-2024-38477, bsc#1227270: null pointer dereference in mod_proxy
  * Added apache2-CVE-2024-38477.patch
  - CVE-2024-38475, bsc#1227268: Improper escaping of output in mod_rewrite
  * Added apache2-CVE-2024-38475-1.patch
  * Added apache2-CVE-2024-38475-2.patch
  * Added apache2-CVE-2024-38475-3.patch
  - CVE-2024-38476, bsc#1227269: Server may use exploitable/malicious
  backend application output to run local handlers via internal
  redirect
  * Added apache2-CVE-2024-38476-1.patch
  * Added apache2-CVE-2024-38476-2.patch
  * Added apache2-CVE-2024-38476-3.patch
  * Added apache2-CVE-2024-38476-4.patch
  * Added apache2-CVE-2024-38476-5.patch
  * Added apache2-CVE-2024-38476-6.patch
  * Added apache2-CVE-2024-38476-7.patch
  * Added apache2-CVE-2024-38476-8.patch
  * Added apache2-CVE-2024-38476-9.patch
  * Added apache2-CVE-2024-38476-10.patch
  * Added apache2-CVE-2024-38476-11.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1721217600">- Security fix:
  - CVE-2024-36387, bsc#1227272: DoS by null pointer in websocket over HTTP/2
  * Added apache2-CVE-2024-36387.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1723636800">- Apply fix for CVE-2024-38474, bsc#1227278.
  Patch file added:
  * apache2-CVE-2024-38474.patch
- Apply fix for CVE-2024-38473, bsc#1227276.
  Patch files added:
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1724328000">- Apply fix for CVE-2024-39884, bsc#1227353.
  Patch file added:
  * apache2-CVE-2024-39884.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1727956800">- Apply fix for CVE-2024-40725, bsc#1228097.
  Patch file added:
  * apache2-CVE-2024-40725.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1728043200">- provide /usr/sbin/apxs and /usr/sbin/apxs2 symlinks to
  /usr/bin/aspx [bsc#1227261]</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11879).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1742385600">- Re-introduce patch to improve FIPS compatibility (bsc#1236802):
  * apache2-fips-compatibility.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1759320000">- Fix for bsc#1249359.
- Binary path for Apache's MPM was partially duplicated when it
  can't be invoked/found.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765800000">- Fix the following bugs and CVEs:
  * bsc#1254511 / CVE-2025-55753
  * bsc#1254512 / CVE-2025-58098
  * bsc#1254514 / CVE-2025-65082
  * bsc#1254515 / CVE-2025-66200
- Add patches:
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1770811200">- Fix bsc#1229147.
- The default value for MaxRequestWorkers should be a multiple of 25,
  so we're setting it from 256 down to 250, which is what Apache was
  doing during runtime in any case.</changelog>
</package>
<package pkgid="157d99e4f58096e2abc58fb45863621e55e7260d879ea8e7666748e677ee515a" name="apache2" arch="src">
  <version epoch="0" ver="2.4.62" rel="150700.4.3.1"/>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718280000">- added patches [bsc#1226217]
  https://github.com/apache/httpd/pull/444/commits/c2fffd29b0f58bdc9caaaff4fec68e17a676f182
  + apache2-issue-444.patch</changelog>
  <changelog author="david.anes@suse.com" date="1720440000">- Security fix:
  - CVE-2024-39573, bsc#1227271: potential SSRF in mod_rewrite
  * Added apache2-CVE-2024-39573.patch
  - CVE-2024-38477, bsc#1227270: null pointer dereference in mod_proxy
  * Added apache2-CVE-2024-38477.patch
  - CVE-2024-38475, bsc#1227268: Improper escaping of output in mod_rewrite
  * Added apache2-CVE-2024-38475-1.patch
  * Added apache2-CVE-2024-38475-2.patch
  * Added apache2-CVE-2024-38475-3.patch
  - CVE-2024-38476, bsc#1227269: Server may use exploitable/malicious
  backend application output to run local handlers via internal
  redirect
  * Added apache2-CVE-2024-38476-1.patch
  * Added apache2-CVE-2024-38476-2.patch
  * Added apache2-CVE-2024-38476-3.patch
  * Added apache2-CVE-2024-38476-4.patch
  * Added apache2-CVE-2024-38476-5.patch
  * Added apache2-CVE-2024-38476-6.patch
  * Added apache2-CVE-2024-38476-7.patch
  * Added apache2-CVE-2024-38476-8.patch
  * Added apache2-CVE-2024-38476-9.patch
  * Added apache2-CVE-2024-38476-10.patch
  * Added apache2-CVE-2024-38476-11.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1721217600">- Security fix:
  - CVE-2024-36387, bsc#1227272: DoS by null pointer in websocket over HTTP/2
  * Added apache2-CVE-2024-36387.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1723636800">- Apply fix for CVE-2024-38474, bsc#1227278.
  Patch file added:
  * apache2-CVE-2024-38474.patch
- Apply fix for CVE-2024-38473, bsc#1227276.
  Patch files added:
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1724328000">- Apply fix for CVE-2024-39884, bsc#1227353.
  Patch file added:
  * apache2-CVE-2024-39884.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1727956800">- Apply fix for CVE-2024-40725, bsc#1228097.
  Patch file added:
  * apache2-CVE-2024-40725.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1728043200">- provide /usr/sbin/apxs and /usr/sbin/apxs2 symlinks to
  /usr/bin/aspx [bsc#1227261]</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11879).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1742385600">- Re-introduce patch to improve FIPS compatibility (bsc#1236802):
  * apache2-fips-compatibility.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
</package>
<package pkgid="10607b019b591ef9239e15fa9e37888bf636a1eb9b1b53198f4e2c4130014822" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.62" rel="150700.4.3.1"/>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718280000">- added patches [bsc#1226217]
  https://github.com/apache/httpd/pull/444/commits/c2fffd29b0f58bdc9caaaff4fec68e17a676f182
  + apache2-issue-444.patch</changelog>
  <changelog author="david.anes@suse.com" date="1720440000">- Security fix:
  - CVE-2024-39573, bsc#1227271: potential SSRF in mod_rewrite
  * Added apache2-CVE-2024-39573.patch
  - CVE-2024-38477, bsc#1227270: null pointer dereference in mod_proxy
  * Added apache2-CVE-2024-38477.patch
  - CVE-2024-38475, bsc#1227268: Improper escaping of output in mod_rewrite
  * Added apache2-CVE-2024-38475-1.patch
  * Added apache2-CVE-2024-38475-2.patch
  * Added apache2-CVE-2024-38475-3.patch
  - CVE-2024-38476, bsc#1227269: Server may use exploitable/malicious
  backend application output to run local handlers via internal
  redirect
  * Added apache2-CVE-2024-38476-1.patch
  * Added apache2-CVE-2024-38476-2.patch
  * Added apache2-CVE-2024-38476-3.patch
  * Added apache2-CVE-2024-38476-4.patch
  * Added apache2-CVE-2024-38476-5.patch
  * Added apache2-CVE-2024-38476-6.patch
  * Added apache2-CVE-2024-38476-7.patch
  * Added apache2-CVE-2024-38476-8.patch
  * Added apache2-CVE-2024-38476-9.patch
  * Added apache2-CVE-2024-38476-10.patch
  * Added apache2-CVE-2024-38476-11.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1721217600">- Security fix:
  - CVE-2024-36387, bsc#1227272: DoS by null pointer in websocket over HTTP/2
  * Added apache2-CVE-2024-36387.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1723636800">- Apply fix for CVE-2024-38474, bsc#1227278.
  Patch file added:
  * apache2-CVE-2024-38474.patch
- Apply fix for CVE-2024-38473, bsc#1227276.
  Patch files added:
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1724328000">- Apply fix for CVE-2024-39884, bsc#1227353.
  Patch file added:
  * apache2-CVE-2024-39884.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1727956800">- Apply fix for CVE-2024-40725, bsc#1228097.
  Patch file added:
  * apache2-CVE-2024-40725.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1728043200">- provide /usr/sbin/apxs and /usr/sbin/apxs2 symlinks to
  /usr/bin/aspx [bsc#1227261]</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11879).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1742385600">- Re-introduce patch to improve FIPS compatibility (bsc#1236802):
  * apache2-fips-compatibility.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
</package>
<package pkgid="544c3966f02692c3b1c2be68b6889858324efc094b73ce3159017fc7c86381ee" name="apache2" arch="src">
  <version epoch="0" ver="2.4.62" rel="150700.4.6.1"/>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718280000">- added patches [bsc#1226217]
  https://github.com/apache/httpd/pull/444/commits/c2fffd29b0f58bdc9caaaff4fec68e17a676f182
  + apache2-issue-444.patch</changelog>
  <changelog author="david.anes@suse.com" date="1720440000">- Security fix:
  - CVE-2024-39573, bsc#1227271: potential SSRF in mod_rewrite
  * Added apache2-CVE-2024-39573.patch
  - CVE-2024-38477, bsc#1227270: null pointer dereference in mod_proxy
  * Added apache2-CVE-2024-38477.patch
  - CVE-2024-38475, bsc#1227268: Improper escaping of output in mod_rewrite
  * Added apache2-CVE-2024-38475-1.patch
  * Added apache2-CVE-2024-38475-2.patch
  * Added apache2-CVE-2024-38475-3.patch
  - CVE-2024-38476, bsc#1227269: Server may use exploitable/malicious
  backend application output to run local handlers via internal
  redirect
  * Added apache2-CVE-2024-38476-1.patch
  * Added apache2-CVE-2024-38476-2.patch
  * Added apache2-CVE-2024-38476-3.patch
  * Added apache2-CVE-2024-38476-4.patch
  * Added apache2-CVE-2024-38476-5.patch
  * Added apache2-CVE-2024-38476-6.patch
  * Added apache2-CVE-2024-38476-7.patch
  * Added apache2-CVE-2024-38476-8.patch
  * Added apache2-CVE-2024-38476-9.patch
  * Added apache2-CVE-2024-38476-10.patch
  * Added apache2-CVE-2024-38476-11.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1721217600">- Security fix:
  - CVE-2024-36387, bsc#1227272: DoS by null pointer in websocket over HTTP/2
  * Added apache2-CVE-2024-36387.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1723636800">- Apply fix for CVE-2024-38474, bsc#1227278.
  Patch file added:
  * apache2-CVE-2024-38474.patch
- Apply fix for CVE-2024-38473, bsc#1227276.
  Patch files added:
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1724328000">- Apply fix for CVE-2024-39884, bsc#1227353.
  Patch file added:
  * apache2-CVE-2024-39884.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1727956800">- Apply fix for CVE-2024-40725, bsc#1228097.
  Patch file added:
  * apache2-CVE-2024-40725.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1728043200">- provide /usr/sbin/apxs and /usr/sbin/apxs2 symlinks to
  /usr/bin/aspx [bsc#1227261]</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11879).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1742385600">- Re-introduce patch to improve FIPS compatibility (bsc#1236802):
  * apache2-fips-compatibility.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1759320000">- Fix for bsc#1249359.
- Binary path for Apache's MPM was partially duplicated when it
  can't be invoked/found.</changelog>
</package>
<package pkgid="0c8a4d99157de607e40946e6602b9d999e5816005ba9a6a3e363da5e00c3c80a" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.62" rel="150700.4.6.1"/>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718280000">- added patches [bsc#1226217]
  https://github.com/apache/httpd/pull/444/commits/c2fffd29b0f58bdc9caaaff4fec68e17a676f182
  + apache2-issue-444.patch</changelog>
  <changelog author="david.anes@suse.com" date="1720440000">- Security fix:
  - CVE-2024-39573, bsc#1227271: potential SSRF in mod_rewrite
  * Added apache2-CVE-2024-39573.patch
  - CVE-2024-38477, bsc#1227270: null pointer dereference in mod_proxy
  * Added apache2-CVE-2024-38477.patch
  - CVE-2024-38475, bsc#1227268: Improper escaping of output in mod_rewrite
  * Added apache2-CVE-2024-38475-1.patch
  * Added apache2-CVE-2024-38475-2.patch
  * Added apache2-CVE-2024-38475-3.patch
  - CVE-2024-38476, bsc#1227269: Server may use exploitable/malicious
  backend application output to run local handlers via internal
  redirect
  * Added apache2-CVE-2024-38476-1.patch
  * Added apache2-CVE-2024-38476-2.patch
  * Added apache2-CVE-2024-38476-3.patch
  * Added apache2-CVE-2024-38476-4.patch
  * Added apache2-CVE-2024-38476-5.patch
  * Added apache2-CVE-2024-38476-6.patch
  * Added apache2-CVE-2024-38476-7.patch
  * Added apache2-CVE-2024-38476-8.patch
  * Added apache2-CVE-2024-38476-9.patch
  * Added apache2-CVE-2024-38476-10.patch
  * Added apache2-CVE-2024-38476-11.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1721217600">- Security fix:
  - CVE-2024-36387, bsc#1227272: DoS by null pointer in websocket over HTTP/2
  * Added apache2-CVE-2024-36387.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1723636800">- Apply fix for CVE-2024-38474, bsc#1227278.
  Patch file added:
  * apache2-CVE-2024-38474.patch
- Apply fix for CVE-2024-38473, bsc#1227276.
  Patch files added:
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1724328000">- Apply fix for CVE-2024-39884, bsc#1227353.
  Patch file added:
  * apache2-CVE-2024-39884.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1727956800">- Apply fix for CVE-2024-40725, bsc#1228097.
  Patch file added:
  * apache2-CVE-2024-40725.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1728043200">- provide /usr/sbin/apxs and /usr/sbin/apxs2 symlinks to
  /usr/bin/aspx [bsc#1227261]</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11879).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1742385600">- Re-introduce patch to improve FIPS compatibility (bsc#1236802):
  * apache2-fips-compatibility.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1759320000">- Fix for bsc#1249359.
- Binary path for Apache's MPM was partially duplicated when it
  can't be invoked/found.</changelog>
</package>
<package pkgid="1455d53dff1a2c16a38125db5ac6090c5d6efac633f405aafc685cacf89a8bc1" name="apache2" arch="src">
  <version epoch="0" ver="2.4.62" rel="150700.4.9.1"/>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718280000">- added patches [bsc#1226217]
  https://github.com/apache/httpd/pull/444/commits/c2fffd29b0f58bdc9caaaff4fec68e17a676f182
  + apache2-issue-444.patch</changelog>
  <changelog author="david.anes@suse.com" date="1720440000">- Security fix:
  - CVE-2024-39573, bsc#1227271: potential SSRF in mod_rewrite
  * Added apache2-CVE-2024-39573.patch
  - CVE-2024-38477, bsc#1227270: null pointer dereference in mod_proxy
  * Added apache2-CVE-2024-38477.patch
  - CVE-2024-38475, bsc#1227268: Improper escaping of output in mod_rewrite
  * Added apache2-CVE-2024-38475-1.patch
  * Added apache2-CVE-2024-38475-2.patch
  * Added apache2-CVE-2024-38475-3.patch
  - CVE-2024-38476, bsc#1227269: Server may use exploitable/malicious
  backend application output to run local handlers via internal
  redirect
  * Added apache2-CVE-2024-38476-1.patch
  * Added apache2-CVE-2024-38476-2.patch
  * Added apache2-CVE-2024-38476-3.patch
  * Added apache2-CVE-2024-38476-4.patch
  * Added apache2-CVE-2024-38476-5.patch
  * Added apache2-CVE-2024-38476-6.patch
  * Added apache2-CVE-2024-38476-7.patch
  * Added apache2-CVE-2024-38476-8.patch
  * Added apache2-CVE-2024-38476-9.patch
  * Added apache2-CVE-2024-38476-10.patch
  * Added apache2-CVE-2024-38476-11.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1721217600">- Security fix:
  - CVE-2024-36387, bsc#1227272: DoS by null pointer in websocket over HTTP/2
  * Added apache2-CVE-2024-36387.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1723636800">- Apply fix for CVE-2024-38474, bsc#1227278.
  Patch file added:
  * apache2-CVE-2024-38474.patch
- Apply fix for CVE-2024-38473, bsc#1227276.
  Patch files added:
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1724328000">- Apply fix for CVE-2024-39884, bsc#1227353.
  Patch file added:
  * apache2-CVE-2024-39884.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1727956800">- Apply fix for CVE-2024-40725, bsc#1228097.
  Patch file added:
  * apache2-CVE-2024-40725.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1728043200">- provide /usr/sbin/apxs and /usr/sbin/apxs2 symlinks to
  /usr/bin/aspx [bsc#1227261]</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11879).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1742385600">- Re-introduce patch to improve FIPS compatibility (bsc#1236802):
  * apache2-fips-compatibility.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1759320000">- Fix for bsc#1249359.
- Binary path for Apache's MPM was partially duplicated when it
  can't be invoked/found.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765800000">- Fix the following bugs and CVEs:
  * bsc#1254511 / CVE-2025-55753
  * bsc#1254512 / CVE-2025-58098
  * bsc#1254514 / CVE-2025-65082
  * bsc#1254515 / CVE-2025-66200
- Add patches:
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch</changelog>
</package>
<package pkgid="32c23878c4f1a11eefe4da98bf9664ff517840089f86ee8669a4344c792ee8af" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.62" rel="150700.4.9.1"/>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718280000">- added patches [bsc#1226217]
  https://github.com/apache/httpd/pull/444/commits/c2fffd29b0f58bdc9caaaff4fec68e17a676f182
  + apache2-issue-444.patch</changelog>
  <changelog author="david.anes@suse.com" date="1720440000">- Security fix:
  - CVE-2024-39573, bsc#1227271: potential SSRF in mod_rewrite
  * Added apache2-CVE-2024-39573.patch
  - CVE-2024-38477, bsc#1227270: null pointer dereference in mod_proxy
  * Added apache2-CVE-2024-38477.patch
  - CVE-2024-38475, bsc#1227268: Improper escaping of output in mod_rewrite
  * Added apache2-CVE-2024-38475-1.patch
  * Added apache2-CVE-2024-38475-2.patch
  * Added apache2-CVE-2024-38475-3.patch
  - CVE-2024-38476, bsc#1227269: Server may use exploitable/malicious
  backend application output to run local handlers via internal
  redirect
  * Added apache2-CVE-2024-38476-1.patch
  * Added apache2-CVE-2024-38476-2.patch
  * Added apache2-CVE-2024-38476-3.patch
  * Added apache2-CVE-2024-38476-4.patch
  * Added apache2-CVE-2024-38476-5.patch
  * Added apache2-CVE-2024-38476-6.patch
  * Added apache2-CVE-2024-38476-7.patch
  * Added apache2-CVE-2024-38476-8.patch
  * Added apache2-CVE-2024-38476-9.patch
  * Added apache2-CVE-2024-38476-10.patch
  * Added apache2-CVE-2024-38476-11.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1721217600">- Security fix:
  - CVE-2024-36387, bsc#1227272: DoS by null pointer in websocket over HTTP/2
  * Added apache2-CVE-2024-36387.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1723636800">- Apply fix for CVE-2024-38474, bsc#1227278.
  Patch file added:
  * apache2-CVE-2024-38474.patch
- Apply fix for CVE-2024-38473, bsc#1227276.
  Patch files added:
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1724328000">- Apply fix for CVE-2024-39884, bsc#1227353.
  Patch file added:
  * apache2-CVE-2024-39884.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1727956800">- Apply fix for CVE-2024-40725, bsc#1228097.
  Patch file added:
  * apache2-CVE-2024-40725.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1728043200">- provide /usr/sbin/apxs and /usr/sbin/apxs2 symlinks to
  /usr/bin/aspx [bsc#1227261]</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11879).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1742385600">- Re-introduce patch to improve FIPS compatibility (bsc#1236802):
  * apache2-fips-compatibility.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1759320000">- Fix for bsc#1249359.
- Binary path for Apache's MPM was partially duplicated when it
  can't be invoked/found.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765800000">- Fix the following bugs and CVEs:
  * bsc#1254511 / CVE-2025-55753
  * bsc#1254512 / CVE-2025-58098
  * bsc#1254514 / CVE-2025-65082
  * bsc#1254515 / CVE-2025-66200
- Add patches:
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch</changelog>
</package>
<package pkgid="b333c7b92c4af8aa434eb1a4b16874a45eef6bf0d6f61f0132574ebe761f9c1d" name="apache2" arch="src">
  <version epoch="0" ver="2.4.66" rel="150700.4.15.1"/>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718280000">- added patches [bsc#1226217]
  https://github.com/apache/httpd/pull/444/commits/c2fffd29b0f58bdc9caaaff4fec68e17a676f182
  + apache2-issue-444.patch</changelog>
  <changelog author="david.anes@suse.com" date="1720440000">- Security fix:
  - CVE-2024-39573, bsc#1227271: potential SSRF in mod_rewrite
  * Added apache2-CVE-2024-39573.patch
  - CVE-2024-38477, bsc#1227270: null pointer dereference in mod_proxy
  * Added apache2-CVE-2024-38477.patch
  - CVE-2024-38475, bsc#1227268: Improper escaping of output in mod_rewrite
  * Added apache2-CVE-2024-38475-1.patch
  * Added apache2-CVE-2024-38475-2.patch
  * Added apache2-CVE-2024-38475-3.patch
  - CVE-2024-38476, bsc#1227269: Server may use exploitable/malicious
  backend application output to run local handlers via internal
  redirect
  * Added apache2-CVE-2024-38476-1.patch
  * Added apache2-CVE-2024-38476-2.patch
  * Added apache2-CVE-2024-38476-3.patch
  * Added apache2-CVE-2024-38476-4.patch
  * Added apache2-CVE-2024-38476-5.patch
  * Added apache2-CVE-2024-38476-6.patch
  * Added apache2-CVE-2024-38476-7.patch
  * Added apache2-CVE-2024-38476-8.patch
  * Added apache2-CVE-2024-38476-9.patch
  * Added apache2-CVE-2024-38476-10.patch
  * Added apache2-CVE-2024-38476-11.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1721217600">- Security fix:
  - CVE-2024-36387, bsc#1227272: DoS by null pointer in websocket over HTTP/2
  * Added apache2-CVE-2024-36387.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1723636800">- Apply fix for CVE-2024-38474, bsc#1227278.
  Patch file added:
  * apache2-CVE-2024-38474.patch
- Apply fix for CVE-2024-38473, bsc#1227276.
  Patch files added:
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1724328000">- Apply fix for CVE-2024-39884, bsc#1227353.
  Patch file added:
  * apache2-CVE-2024-39884.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1727956800">- Apply fix for CVE-2024-40725, bsc#1228097.
  Patch file added:
  * apache2-CVE-2024-40725.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1728043200">- provide /usr/sbin/apxs and /usr/sbin/apxs2 symlinks to
  /usr/bin/aspx [bsc#1227261]</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11879).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1742385600">- Re-introduce patch to improve FIPS compatibility (bsc#1236802):
  * apache2-fips-compatibility.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1759320000">- Fix for bsc#1249359.
- Binary path for Apache's MPM was partially duplicated when it
  can't be invoked/found.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765800000">- Fix the following bugs and CVEs:
  * bsc#1254511 / CVE-2025-55753
  * bsc#1254512 / CVE-2025-58098
  * bsc#1254514 / CVE-2025-65082
  * bsc#1254515 / CVE-2025-66200
- Add patches:
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1770811200">- Fix bsc#1229147.
- The default value for MaxRequestWorkers should be a multiple of 25,
  so we're setting it from 256 down to 250, which is what Apache was
  doing during runtime in any case.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1773835200">- Update to 2.4.66. ECO: jsc#PED-15953.
- This update is required to fix bsc#1254182.
- Removed these patches, as they've been merged/fixed upstream.
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch
- Removed these FIPS-related patches too, as they too have been merged upstream:
  * apache2-fips-compatibility.patch
- Refreshed patches:
  * apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch
  * apache2-LimitRequestFieldSize-limits-headers.patch
  * apache-test-application-xml-type.patch
  * apache-test-turn-off-variables-in-ssl-var-lookup.patch</changelog>
</package>
<package pkgid="7e332067e59b39e80a6588a6a9c2c7b52e60c2edbc64e1848159bb127c817e49" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.66" rel="150700.4.15.1"/>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718280000">- added patches [bsc#1226217]
  https://github.com/apache/httpd/pull/444/commits/c2fffd29b0f58bdc9caaaff4fec68e17a676f182
  + apache2-issue-444.patch</changelog>
  <changelog author="david.anes@suse.com" date="1720440000">- Security fix:
  - CVE-2024-39573, bsc#1227271: potential SSRF in mod_rewrite
  * Added apache2-CVE-2024-39573.patch
  - CVE-2024-38477, bsc#1227270: null pointer dereference in mod_proxy
  * Added apache2-CVE-2024-38477.patch
  - CVE-2024-38475, bsc#1227268: Improper escaping of output in mod_rewrite
  * Added apache2-CVE-2024-38475-1.patch
  * Added apache2-CVE-2024-38475-2.patch
  * Added apache2-CVE-2024-38475-3.patch
  - CVE-2024-38476, bsc#1227269: Server may use exploitable/malicious
  backend application output to run local handlers via internal
  redirect
  * Added apache2-CVE-2024-38476-1.patch
  * Added apache2-CVE-2024-38476-2.patch
  * Added apache2-CVE-2024-38476-3.patch
  * Added apache2-CVE-2024-38476-4.patch
  * Added apache2-CVE-2024-38476-5.patch
  * Added apache2-CVE-2024-38476-6.patch
  * Added apache2-CVE-2024-38476-7.patch
  * Added apache2-CVE-2024-38476-8.patch
  * Added apache2-CVE-2024-38476-9.patch
  * Added apache2-CVE-2024-38476-10.patch
  * Added apache2-CVE-2024-38476-11.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1721217600">- Security fix:
  - CVE-2024-36387, bsc#1227272: DoS by null pointer in websocket over HTTP/2
  * Added apache2-CVE-2024-36387.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1723636800">- Apply fix for CVE-2024-38474, bsc#1227278.
  Patch file added:
  * apache2-CVE-2024-38474.patch
- Apply fix for CVE-2024-38473, bsc#1227276.
  Patch files added:
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1724328000">- Apply fix for CVE-2024-39884, bsc#1227353.
  Patch file added:
  * apache2-CVE-2024-39884.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1727956800">- Apply fix for CVE-2024-40725, bsc#1228097.
  Patch file added:
  * apache2-CVE-2024-40725.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1728043200">- provide /usr/sbin/apxs and /usr/sbin/apxs2 symlinks to
  /usr/bin/aspx [bsc#1227261]</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11879).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1742385600">- Re-introduce patch to improve FIPS compatibility (bsc#1236802):
  * apache2-fips-compatibility.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1759320000">- Fix for bsc#1249359.
- Binary path for Apache's MPM was partially duplicated when it
  can't be invoked/found.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765800000">- Fix the following bugs and CVEs:
  * bsc#1254511 / CVE-2025-55753
  * bsc#1254512 / CVE-2025-58098
  * bsc#1254514 / CVE-2025-65082
  * bsc#1254515 / CVE-2025-66200
- Add patches:
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1770811200">- Fix bsc#1229147.
- The default value for MaxRequestWorkers should be a multiple of 25,
  so we're setting it from 256 down to 250, which is what Apache was
  doing during runtime in any case.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1773835200">- Update to 2.4.66. ECO: jsc#PED-15953.
- This update is required to fix bsc#1254182.
- Removed these patches, as they've been merged/fixed upstream.
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch
- Removed these FIPS-related patches too, as they too have been merged upstream:
  * apache2-fips-compatibility.patch
- Refreshed patches:
  * apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch
  * apache2-LimitRequestFieldSize-limits-headers.patch
  * apache-test-application-xml-type.patch
  * apache-test-turn-off-variables-in-ssl-var-lookup.patch</changelog>
</package>
<package pkgid="0880790dcb475fae9cd2ad71e9a750b2b08194678b0993615e7c18c4f796bc4d" name="apache2" arch="src">
  <version epoch="0" ver="2.4.66" rel="150700.4.20.1"/>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718280000">- added patches [bsc#1226217]
  https://github.com/apache/httpd/pull/444/commits/c2fffd29b0f58bdc9caaaff4fec68e17a676f182
  + apache2-issue-444.patch</changelog>
  <changelog author="david.anes@suse.com" date="1720440000">- Security fix:
  - CVE-2024-39573, bsc#1227271: potential SSRF in mod_rewrite
  * Added apache2-CVE-2024-39573.patch
  - CVE-2024-38477, bsc#1227270: null pointer dereference in mod_proxy
  * Added apache2-CVE-2024-38477.patch
  - CVE-2024-38475, bsc#1227268: Improper escaping of output in mod_rewrite
  * Added apache2-CVE-2024-38475-1.patch
  * Added apache2-CVE-2024-38475-2.patch
  * Added apache2-CVE-2024-38475-3.patch
  - CVE-2024-38476, bsc#1227269: Server may use exploitable/malicious
  backend application output to run local handlers via internal
  redirect
  * Added apache2-CVE-2024-38476-1.patch
  * Added apache2-CVE-2024-38476-2.patch
  * Added apache2-CVE-2024-38476-3.patch
  * Added apache2-CVE-2024-38476-4.patch
  * Added apache2-CVE-2024-38476-5.patch
  * Added apache2-CVE-2024-38476-6.patch
  * Added apache2-CVE-2024-38476-7.patch
  * Added apache2-CVE-2024-38476-8.patch
  * Added apache2-CVE-2024-38476-9.patch
  * Added apache2-CVE-2024-38476-10.patch
  * Added apache2-CVE-2024-38476-11.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1721217600">- Security fix:
  - CVE-2024-36387, bsc#1227272: DoS by null pointer in websocket over HTTP/2
  * Added apache2-CVE-2024-36387.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1723636800">- Apply fix for CVE-2024-38474, bsc#1227278.
  Patch file added:
  * apache2-CVE-2024-38474.patch
- Apply fix for CVE-2024-38473, bsc#1227276.
  Patch files added:
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1724328000">- Apply fix for CVE-2024-39884, bsc#1227353.
  Patch file added:
  * apache2-CVE-2024-39884.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1727956800">- Apply fix for CVE-2024-40725, bsc#1228097.
  Patch file added:
  * apache2-CVE-2024-40725.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1728043200">- provide /usr/sbin/apxs and /usr/sbin/apxs2 symlinks to
  /usr/bin/aspx [bsc#1227261]</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11879).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1742385600">- Re-introduce patch to improve FIPS compatibility (bsc#1236802):
  * apache2-fips-compatibility.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1759320000">- Fix for bsc#1249359.
- Binary path for Apache's MPM was partially duplicated when it
  can't be invoked/found.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765800000">- Fix the following bugs and CVEs:
  * bsc#1254511 / CVE-2025-55753
  * bsc#1254512 / CVE-2025-58098
  * bsc#1254514 / CVE-2025-65082
  * bsc#1254515 / CVE-2025-66200
- Add patches:
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1770811200">- Fix bsc#1229147.
- The default value for MaxRequestWorkers should be a multiple of 25,
  so we're setting it from 256 down to 250, which is what Apache was
  doing during runtime in any case.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1773835200">- Update to 2.4.66. ECO: jsc#PED-15953.
- This update is required to fix bsc#1254182.
- Removed these patches, as they've been merged/fixed upstream.
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch
- Removed these FIPS-related patches too, as they too have been merged upstream:
  * apache2-fips-compatibility.patch
- Refreshed patches:
  * apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch
  * apache2-LimitRequestFieldSize-limits-headers.patch
  * apache-test-application-xml-type.patch
  * apache-test-turn-off-variables-in-ssl-var-lookup.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1778760000">* Fix bsc#1263957 / CVE-2026-23918.
  * Fix bsc#1263953 / CVE-2026-33523.
  * Fix bsc#1263955 / CVE-2026-33006.
  * Fix bsc#1263956 / CVE-2026-29169.
  * Fix bsc#1263935 / CVE-2026-24072.
  * Fix bsc#1263950 / CVE-2026-34059.
  * Fix bsc#1263951 / CVE-2026-34032.
  * Add patch files:
  - CVE-2026-23918.patch
  - CVE-2026-33523.patch
  - CVE-2026-33006.patch
  - CVE-2026-29169.patch
  - CVE-2026-24072.patch
  - CVE-2026-34059.patch
  - CVE-2026-34032.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1779278400">* Fix bsc#1263952 / CVE-2026-33857.
  * Fix bsc#1263954 / CVE-2026-33007.
  * Fix bsc#1264163 / CVE-2026-28780.
  * Fix bsc#1264150 / CVE-2026-29168.
  * Add patch files:
  - CVE-2026-33857.patch
  - CVE-2026-33007.patch
  - CVE-2026-28780.patch
  - CVE-2026-29168.patch</changelog>
</package>
<package pkgid="7024560a0bff6045007531d23a1208609e7b00f0e8f84fdfbc57aa7602cf72d4" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.66" rel="150700.4.20.1"/>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718280000">- added patches [bsc#1226217]
  https://github.com/apache/httpd/pull/444/commits/c2fffd29b0f58bdc9caaaff4fec68e17a676f182
  + apache2-issue-444.patch</changelog>
  <changelog author="david.anes@suse.com" date="1720440000">- Security fix:
  - CVE-2024-39573, bsc#1227271: potential SSRF in mod_rewrite
  * Added apache2-CVE-2024-39573.patch
  - CVE-2024-38477, bsc#1227270: null pointer dereference in mod_proxy
  * Added apache2-CVE-2024-38477.patch
  - CVE-2024-38475, bsc#1227268: Improper escaping of output in mod_rewrite
  * Added apache2-CVE-2024-38475-1.patch
  * Added apache2-CVE-2024-38475-2.patch
  * Added apache2-CVE-2024-38475-3.patch
  - CVE-2024-38476, bsc#1227269: Server may use exploitable/malicious
  backend application output to run local handlers via internal
  redirect
  * Added apache2-CVE-2024-38476-1.patch
  * Added apache2-CVE-2024-38476-2.patch
  * Added apache2-CVE-2024-38476-3.patch
  * Added apache2-CVE-2024-38476-4.patch
  * Added apache2-CVE-2024-38476-5.patch
  * Added apache2-CVE-2024-38476-6.patch
  * Added apache2-CVE-2024-38476-7.patch
  * Added apache2-CVE-2024-38476-8.patch
  * Added apache2-CVE-2024-38476-9.patch
  * Added apache2-CVE-2024-38476-10.patch
  * Added apache2-CVE-2024-38476-11.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1721217600">- Security fix:
  - CVE-2024-36387, bsc#1227272: DoS by null pointer in websocket over HTTP/2
  * Added apache2-CVE-2024-36387.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1723636800">- Apply fix for CVE-2024-38474, bsc#1227278.
  Patch file added:
  * apache2-CVE-2024-38474.patch
- Apply fix for CVE-2024-38473, bsc#1227276.
  Patch files added:
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1724328000">- Apply fix for CVE-2024-39884, bsc#1227353.
  Patch file added:
  * apache2-CVE-2024-39884.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1727956800">- Apply fix for CVE-2024-40725, bsc#1228097.
  Patch file added:
  * apache2-CVE-2024-40725.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1728043200">- provide /usr/sbin/apxs and /usr/sbin/apxs2 symlinks to
  /usr/bin/aspx [bsc#1227261]</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11879).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1742385600">- Re-introduce patch to improve FIPS compatibility (bsc#1236802):
  * apache2-fips-compatibility.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1759320000">- Fix for bsc#1249359.
- Binary path for Apache's MPM was partially duplicated when it
  can't be invoked/found.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765800000">- Fix the following bugs and CVEs:
  * bsc#1254511 / CVE-2025-55753
  * bsc#1254512 / CVE-2025-58098
  * bsc#1254514 / CVE-2025-65082
  * bsc#1254515 / CVE-2025-66200
- Add patches:
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1770811200">- Fix bsc#1229147.
- The default value for MaxRequestWorkers should be a multiple of 25,
  so we're setting it from 256 down to 250, which is what Apache was
  doing during runtime in any case.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1773835200">- Update to 2.4.66. ECO: jsc#PED-15953.
- This update is required to fix bsc#1254182.
- Removed these patches, as they've been merged/fixed upstream.
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch
- Removed these FIPS-related patches too, as they too have been merged upstream:
  * apache2-fips-compatibility.patch
- Refreshed patches:
  * apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch
  * apache2-LimitRequestFieldSize-limits-headers.patch
  * apache-test-application-xml-type.patch
  * apache-test-turn-off-variables-in-ssl-var-lookup.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1778760000">* Fix bsc#1263957 / CVE-2026-23918.
  * Fix bsc#1263953 / CVE-2026-33523.
  * Fix bsc#1263955 / CVE-2026-33006.
  * Fix bsc#1263956 / CVE-2026-29169.
  * Fix bsc#1263935 / CVE-2026-24072.
  * Fix bsc#1263950 / CVE-2026-34059.
  * Fix bsc#1263951 / CVE-2026-34032.
  * Add patch files:
  - CVE-2026-23918.patch
  - CVE-2026-33523.patch
  - CVE-2026-33006.patch
  - CVE-2026-29169.patch
  - CVE-2026-24072.patch
  - CVE-2026-34059.patch
  - CVE-2026-34032.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1779278400">* Fix bsc#1263952 / CVE-2026-33857.
  * Fix bsc#1263954 / CVE-2026-33007.
  * Fix bsc#1264163 / CVE-2026-28780.
  * Fix bsc#1264150 / CVE-2026-29168.
  * Add patch files:
  - CVE-2026-33857.patch
  - CVE-2026-33007.patch
  - CVE-2026-28780.patch
  - CVE-2026-29168.patch</changelog>
</package>
<package pkgid="3727bd0cc3992c9a52784858644c64d781e98cf3c784f7c656cfc880385bc808" name="apache2-prefork" arch="src">
  <version epoch="0" ver="2.4.62" rel="150700.4.12.1"/>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718280000">- added patches [bsc#1226217]
  https://github.com/apache/httpd/pull/444/commits/c2fffd29b0f58bdc9caaaff4fec68e17a676f182
  + apache2-issue-444.patch</changelog>
  <changelog author="david.anes@suse.com" date="1720440000">- Security fix:
  - CVE-2024-39573, bsc#1227271: potential SSRF in mod_rewrite
  * Added apache2-CVE-2024-39573.patch
  - CVE-2024-38477, bsc#1227270: null pointer dereference in mod_proxy
  * Added apache2-CVE-2024-38477.patch
  - CVE-2024-38475, bsc#1227268: Improper escaping of output in mod_rewrite
  * Added apache2-CVE-2024-38475-1.patch
  * Added apache2-CVE-2024-38475-2.patch
  * Added apache2-CVE-2024-38475-3.patch
  - CVE-2024-38476, bsc#1227269: Server may use exploitable/malicious
  backend application output to run local handlers via internal
  redirect
  * Added apache2-CVE-2024-38476-1.patch
  * Added apache2-CVE-2024-38476-2.patch
  * Added apache2-CVE-2024-38476-3.patch
  * Added apache2-CVE-2024-38476-4.patch
  * Added apache2-CVE-2024-38476-5.patch
  * Added apache2-CVE-2024-38476-6.patch
  * Added apache2-CVE-2024-38476-7.patch
  * Added apache2-CVE-2024-38476-8.patch
  * Added apache2-CVE-2024-38476-9.patch
  * Added apache2-CVE-2024-38476-10.patch
  * Added apache2-CVE-2024-38476-11.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1721217600">- Security fix:
  - CVE-2024-36387, bsc#1227272: DoS by null pointer in websocket over HTTP/2
  * Added apache2-CVE-2024-36387.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1723636800">- Apply fix for CVE-2024-38474, bsc#1227278.
  Patch file added:
  * apache2-CVE-2024-38474.patch
- Apply fix for CVE-2024-38473, bsc#1227276.
  Patch files added:
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1724328000">- Apply fix for CVE-2024-39884, bsc#1227353.
  Patch file added:
  * apache2-CVE-2024-39884.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1727956800">- Apply fix for CVE-2024-40725, bsc#1228097.
  Patch file added:
  * apache2-CVE-2024-40725.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1728043200">- provide /usr/sbin/apxs and /usr/sbin/apxs2 symlinks to
  /usr/bin/aspx [bsc#1227261]</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11879).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1742385600">- Re-introduce patch to improve FIPS compatibility (bsc#1236802):
  * apache2-fips-compatibility.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1759320000">- Fix for bsc#1249359.
- Binary path for Apache's MPM was partially duplicated when it
  can't be invoked/found.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765800000">- Fix the following bugs and CVEs:
  * bsc#1254511 / CVE-2025-55753
  * bsc#1254512 / CVE-2025-58098
  * bsc#1254514 / CVE-2025-65082
  * bsc#1254515 / CVE-2025-66200
- Add patches:
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1770811200">- Fix bsc#1229147.
- The default value for MaxRequestWorkers should be a multiple of 25,
  so we're setting it from 256 down to 250, which is what Apache was
  doing during runtime in any case.</changelog>
</package>
<package pkgid="f49bcac9c2dcc993a4a0ae5f29157885b36b8b8f45d00ece84ccc1c8f3e1f8ac" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.62" rel="150700.4.12.1"/>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718280000">- added patches [bsc#1226217]
  https://github.com/apache/httpd/pull/444/commits/c2fffd29b0f58bdc9caaaff4fec68e17a676f182
  + apache2-issue-444.patch</changelog>
  <changelog author="david.anes@suse.com" date="1720440000">- Security fix:
  - CVE-2024-39573, bsc#1227271: potential SSRF in mod_rewrite
  * Added apache2-CVE-2024-39573.patch
  - CVE-2024-38477, bsc#1227270: null pointer dereference in mod_proxy
  * Added apache2-CVE-2024-38477.patch
  - CVE-2024-38475, bsc#1227268: Improper escaping of output in mod_rewrite
  * Added apache2-CVE-2024-38475-1.patch
  * Added apache2-CVE-2024-38475-2.patch
  * Added apache2-CVE-2024-38475-3.patch
  - CVE-2024-38476, bsc#1227269: Server may use exploitable/malicious
  backend application output to run local handlers via internal
  redirect
  * Added apache2-CVE-2024-38476-1.patch
  * Added apache2-CVE-2024-38476-2.patch
  * Added apache2-CVE-2024-38476-3.patch
  * Added apache2-CVE-2024-38476-4.patch
  * Added apache2-CVE-2024-38476-5.patch
  * Added apache2-CVE-2024-38476-6.patch
  * Added apache2-CVE-2024-38476-7.patch
  * Added apache2-CVE-2024-38476-8.patch
  * Added apache2-CVE-2024-38476-9.patch
  * Added apache2-CVE-2024-38476-10.patch
  * Added apache2-CVE-2024-38476-11.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1721217600">- Security fix:
  - CVE-2024-36387, bsc#1227272: DoS by null pointer in websocket over HTTP/2
  * Added apache2-CVE-2024-36387.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1723636800">- Apply fix for CVE-2024-38474, bsc#1227278.
  Patch file added:
  * apache2-CVE-2024-38474.patch
- Apply fix for CVE-2024-38473, bsc#1227276.
  Patch files added:
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1724328000">- Apply fix for CVE-2024-39884, bsc#1227353.
  Patch file added:
  * apache2-CVE-2024-39884.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1727956800">- Apply fix for CVE-2024-40725, bsc#1228097.
  Patch file added:
  * apache2-CVE-2024-40725.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1728043200">- provide /usr/sbin/apxs and /usr/sbin/apxs2 symlinks to
  /usr/bin/aspx [bsc#1227261]</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11879).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1742385600">- Re-introduce patch to improve FIPS compatibility (bsc#1236802):
  * apache2-fips-compatibility.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1759320000">- Fix for bsc#1249359.
- Binary path for Apache's MPM was partially duplicated when it
  can't be invoked/found.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765800000">- Fix the following bugs and CVEs:
  * bsc#1254511 / CVE-2025-55753
  * bsc#1254512 / CVE-2025-58098
  * bsc#1254514 / CVE-2025-65082
  * bsc#1254515 / CVE-2025-66200
- Add patches:
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1770811200">- Fix bsc#1229147.
- The default value for MaxRequestWorkers should be a multiple of 25,
  so we're setting it from 256 down to 250, which is what Apache was
  doing during runtime in any case.</changelog>
</package>
<package pkgid="475242f7ab20ef34cc3a4948cd789ff22a1eff9868808e29456e4f2c43182cde" name="apache2-prefork" arch="src">
  <version epoch="0" ver="2.4.62" rel="150700.4.3.1"/>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718280000">- added patches [bsc#1226217]
  https://github.com/apache/httpd/pull/444/commits/c2fffd29b0f58bdc9caaaff4fec68e17a676f182
  + apache2-issue-444.patch</changelog>
  <changelog author="david.anes@suse.com" date="1720440000">- Security fix:
  - CVE-2024-39573, bsc#1227271: potential SSRF in mod_rewrite
  * Added apache2-CVE-2024-39573.patch
  - CVE-2024-38477, bsc#1227270: null pointer dereference in mod_proxy
  * Added apache2-CVE-2024-38477.patch
  - CVE-2024-38475, bsc#1227268: Improper escaping of output in mod_rewrite
  * Added apache2-CVE-2024-38475-1.patch
  * Added apache2-CVE-2024-38475-2.patch
  * Added apache2-CVE-2024-38475-3.patch
  - CVE-2024-38476, bsc#1227269: Server may use exploitable/malicious
  backend application output to run local handlers via internal
  redirect
  * Added apache2-CVE-2024-38476-1.patch
  * Added apache2-CVE-2024-38476-2.patch
  * Added apache2-CVE-2024-38476-3.patch
  * Added apache2-CVE-2024-38476-4.patch
  * Added apache2-CVE-2024-38476-5.patch
  * Added apache2-CVE-2024-38476-6.patch
  * Added apache2-CVE-2024-38476-7.patch
  * Added apache2-CVE-2024-38476-8.patch
  * Added apache2-CVE-2024-38476-9.patch
  * Added apache2-CVE-2024-38476-10.patch
  * Added apache2-CVE-2024-38476-11.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1721217600">- Security fix:
  - CVE-2024-36387, bsc#1227272: DoS by null pointer in websocket over HTTP/2
  * Added apache2-CVE-2024-36387.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1723636800">- Apply fix for CVE-2024-38474, bsc#1227278.
  Patch file added:
  * apache2-CVE-2024-38474.patch
- Apply fix for CVE-2024-38473, bsc#1227276.
  Patch files added:
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1724328000">- Apply fix for CVE-2024-39884, bsc#1227353.
  Patch file added:
  * apache2-CVE-2024-39884.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1727956800">- Apply fix for CVE-2024-40725, bsc#1228097.
  Patch file added:
  * apache2-CVE-2024-40725.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1728043200">- provide /usr/sbin/apxs and /usr/sbin/apxs2 symlinks to
  /usr/bin/aspx [bsc#1227261]</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11879).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1742385600">- Re-introduce patch to improve FIPS compatibility (bsc#1236802):
  * apache2-fips-compatibility.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
</package>
<package pkgid="d149770c4cbb8b7fcfc874088286c0fc71c62f57689c35d2d2accd65066deb84" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.62" rel="150700.4.3.1"/>
  <changelog author="david.anes@suse.com" date="1678276800">- This update fixes the following security issues:
  * CVE-2023-27522 [bsc#1209049]: mod_proxy_uwsgi HTTP response splitting
  * CVE-2023-25690 [bsc#1209047]: HTTP request splitting with mod_rewrite and mod_proxy
- Update to 2.4.56:
  * ) rotatelogs: Add -T flag to allow subsequent rotated logfiles to be
    truncated without the initial logfile being truncated.  [Eric Covener]
  * ) mod_ldap: LDAPConnectionPoolTTL should accept negative values in order to
    allow connections of any age to be reused. Up to now, a negative value
    was handled as an error when parsing the configuration file.  PR 66421.
    [nailyk &lt;bzapache nailyk.fr&gt;, Christophe Jaillet]
  * ) mod_proxy_ajp: Report an error if the AJP backend sends an invalid number
    of headers. [Ruediger Pluem]
  * ) mod_md:
  - Enabling ED25519 support and certificate transparency information when
    building with libressl v3.5.0 and newer. Thanks to Giovanni Bechis.
  - MDChallengeDns01 can now be configured for individual domains.
    Thanks to Jérôme Billiras (@bilhackmac) for the initial PR.
  - Fixed a bug found by Jérôme Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
    [Stefan Eissing]
  * ) mod_http2: client resets of HTTP/2 streams led to unwanted 500 errors
    reported in access logs and error documents. The processing of the
    reset was correct, only unneccesary reporting was caused.
    [Stefan Eissing]
  * ) mod_proxy_uwsgi: Stricter backend HTTP response parsing/validation.
    [Yann Ylavic]</changelog>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718280000">- added patches [bsc#1226217]
  https://github.com/apache/httpd/pull/444/commits/c2fffd29b0f58bdc9caaaff4fec68e17a676f182
  + apache2-issue-444.patch</changelog>
  <changelog author="david.anes@suse.com" date="1720440000">- Security fix:
  - CVE-2024-39573, bsc#1227271: potential SSRF in mod_rewrite
  * Added apache2-CVE-2024-39573.patch
  - CVE-2024-38477, bsc#1227270: null pointer dereference in mod_proxy
  * Added apache2-CVE-2024-38477.patch
  - CVE-2024-38475, bsc#1227268: Improper escaping of output in mod_rewrite
  * Added apache2-CVE-2024-38475-1.patch
  * Added apache2-CVE-2024-38475-2.patch
  * Added apache2-CVE-2024-38475-3.patch
  - CVE-2024-38476, bsc#1227269: Server may use exploitable/malicious
  backend application output to run local handlers via internal
  redirect
  * Added apache2-CVE-2024-38476-1.patch
  * Added apache2-CVE-2024-38476-2.patch
  * Added apache2-CVE-2024-38476-3.patch
  * Added apache2-CVE-2024-38476-4.patch
  * Added apache2-CVE-2024-38476-5.patch
  * Added apache2-CVE-2024-38476-6.patch
  * Added apache2-CVE-2024-38476-7.patch
  * Added apache2-CVE-2024-38476-8.patch
  * Added apache2-CVE-2024-38476-9.patch
  * Added apache2-CVE-2024-38476-10.patch
  * Added apache2-CVE-2024-38476-11.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1721217600">- Security fix:
  - CVE-2024-36387, bsc#1227272: DoS by null pointer in websocket over HTTP/2
  * Added apache2-CVE-2024-36387.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1723636800">- Apply fix for CVE-2024-38474, bsc#1227278.
  Patch file added:
  * apache2-CVE-2024-38474.patch
- Apply fix for CVE-2024-38473, bsc#1227276.
  Patch files added:
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1724328000">- Apply fix for CVE-2024-39884, bsc#1227353.
  Patch file added:
  * apache2-CVE-2024-39884.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1727956800">- Apply fix for CVE-2024-40725, bsc#1228097.
  Patch file added:
  * apache2-CVE-2024-40725.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1728043200">- provide /usr/sbin/apxs and /usr/sbin/apxs2 symlinks to
  /usr/bin/aspx [bsc#1227261]</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11879).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1742385600">- Re-introduce patch to improve FIPS compatibility (bsc#1236802):
  * apache2-fips-compatibility.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
</package>
<package pkgid="0f602d3a23d2ac7522b79676bb506820faa96b9fdefcc4ff563067091cbcfc03" name="apache2-prefork" arch="src">
  <version epoch="0" ver="2.4.62" rel="150700.4.6.1"/>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718280000">- added patches [bsc#1226217]
  https://github.com/apache/httpd/pull/444/commits/c2fffd29b0f58bdc9caaaff4fec68e17a676f182
  + apache2-issue-444.patch</changelog>
  <changelog author="david.anes@suse.com" date="1720440000">- Security fix:
  - CVE-2024-39573, bsc#1227271: potential SSRF in mod_rewrite
  * Added apache2-CVE-2024-39573.patch
  - CVE-2024-38477, bsc#1227270: null pointer dereference in mod_proxy
  * Added apache2-CVE-2024-38477.patch
  - CVE-2024-38475, bsc#1227268: Improper escaping of output in mod_rewrite
  * Added apache2-CVE-2024-38475-1.patch
  * Added apache2-CVE-2024-38475-2.patch
  * Added apache2-CVE-2024-38475-3.patch
  - CVE-2024-38476, bsc#1227269: Server may use exploitable/malicious
  backend application output to run local handlers via internal
  redirect
  * Added apache2-CVE-2024-38476-1.patch
  * Added apache2-CVE-2024-38476-2.patch
  * Added apache2-CVE-2024-38476-3.patch
  * Added apache2-CVE-2024-38476-4.patch
  * Added apache2-CVE-2024-38476-5.patch
  * Added apache2-CVE-2024-38476-6.patch
  * Added apache2-CVE-2024-38476-7.patch
  * Added apache2-CVE-2024-38476-8.patch
  * Added apache2-CVE-2024-38476-9.patch
  * Added apache2-CVE-2024-38476-10.patch
  * Added apache2-CVE-2024-38476-11.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1721217600">- Security fix:
  - CVE-2024-36387, bsc#1227272: DoS by null pointer in websocket over HTTP/2
  * Added apache2-CVE-2024-36387.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1723636800">- Apply fix for CVE-2024-38474, bsc#1227278.
  Patch file added:
  * apache2-CVE-2024-38474.patch
- Apply fix for CVE-2024-38473, bsc#1227276.
  Patch files added:
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1724328000">- Apply fix for CVE-2024-39884, bsc#1227353.
  Patch file added:
  * apache2-CVE-2024-39884.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1727956800">- Apply fix for CVE-2024-40725, bsc#1228097.
  Patch file added:
  * apache2-CVE-2024-40725.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1728043200">- provide /usr/sbin/apxs and /usr/sbin/apxs2 symlinks to
  /usr/bin/aspx [bsc#1227261]</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11879).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1742385600">- Re-introduce patch to improve FIPS compatibility (bsc#1236802):
  * apache2-fips-compatibility.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1759320000">- Fix for bsc#1249359.
- Binary path for Apache's MPM was partially duplicated when it
  can't be invoked/found.</changelog>
</package>
<package pkgid="6a90dfee8dfb0becefc665deae232e0ddec795da587b2180d605f215c9b6d4be" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.62" rel="150700.4.6.1"/>
  <changelog author="suse+build@de-korte.org" date="1680868800">- Update to 2.4.57:
  * ) mod_proxy: Check before forwarding that a nocanon path has not been
    rewritten with spaces during processing.  [Yann Ylavic]
  * ) mod_proxy: In case that AllowEncodedSlashes is set to NoDecode do not
    double encode encoded slashes in the URL sent by the reverse proxy to the
    backend. [Ruediger Pluem]
  * ) mod_http2: fixed a crash during connection termination. See PR 66539.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a 2.4.56 regression for substitutions ending
    in a question mark. PR66547. [Eric Covener]
  * ) mod_rewrite: Add "BCTLS" and "BNE" RewriteRule flags. Re-allow encoded
    characters on redirections without the "NE" flag.
    [Yann Ylavic, Eric Covener]
  * ) mod_proxy: Fix double encoding of the uri-path of the request forwarded
    to the origin server, when using mapping=encoded|servlet.  [Yann Ylavic]
  * ) mod_mime: Do not match the extention against possible query string
    parameters in case ProxyPass was used with the nocanon option.
    [Ruediger Pluem]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718280000">- added patches [bsc#1226217]
  https://github.com/apache/httpd/pull/444/commits/c2fffd29b0f58bdc9caaaff4fec68e17a676f182
  + apache2-issue-444.patch</changelog>
  <changelog author="david.anes@suse.com" date="1720440000">- Security fix:
  - CVE-2024-39573, bsc#1227271: potential SSRF in mod_rewrite
  * Added apache2-CVE-2024-39573.patch
  - CVE-2024-38477, bsc#1227270: null pointer dereference in mod_proxy
  * Added apache2-CVE-2024-38477.patch
  - CVE-2024-38475, bsc#1227268: Improper escaping of output in mod_rewrite
  * Added apache2-CVE-2024-38475-1.patch
  * Added apache2-CVE-2024-38475-2.patch
  * Added apache2-CVE-2024-38475-3.patch
  - CVE-2024-38476, bsc#1227269: Server may use exploitable/malicious
  backend application output to run local handlers via internal
  redirect
  * Added apache2-CVE-2024-38476-1.patch
  * Added apache2-CVE-2024-38476-2.patch
  * Added apache2-CVE-2024-38476-3.patch
  * Added apache2-CVE-2024-38476-4.patch
  * Added apache2-CVE-2024-38476-5.patch
  * Added apache2-CVE-2024-38476-6.patch
  * Added apache2-CVE-2024-38476-7.patch
  * Added apache2-CVE-2024-38476-8.patch
  * Added apache2-CVE-2024-38476-9.patch
  * Added apache2-CVE-2024-38476-10.patch
  * Added apache2-CVE-2024-38476-11.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1721217600">- Security fix:
  - CVE-2024-36387, bsc#1227272: DoS by null pointer in websocket over HTTP/2
  * Added apache2-CVE-2024-36387.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1723636800">- Apply fix for CVE-2024-38474, bsc#1227278.
  Patch file added:
  * apache2-CVE-2024-38474.patch
- Apply fix for CVE-2024-38473, bsc#1227276.
  Patch files added:
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1724328000">- Apply fix for CVE-2024-39884, bsc#1227353.
  Patch file added:
  * apache2-CVE-2024-39884.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1727956800">- Apply fix for CVE-2024-40725, bsc#1228097.
  Patch file added:
  * apache2-CVE-2024-40725.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1728043200">- provide /usr/sbin/apxs and /usr/sbin/apxs2 symlinks to
  /usr/bin/aspx [bsc#1227261]</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11879).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1742385600">- Re-introduce patch to improve FIPS compatibility (bsc#1236802):
  * apache2-fips-compatibility.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1759320000">- Fix for bsc#1249359.
- Binary path for Apache's MPM was partially duplicated when it
  can't be invoked/found.</changelog>
</package>
<package pkgid="7b49209b0aa0b2571631669a2862912242d2fe2811dd0fe5c72b5b05225fcffe" name="apache2-prefork" arch="src">
  <version epoch="0" ver="2.4.62" rel="150700.4.9.1"/>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718280000">- added patches [bsc#1226217]
  https://github.com/apache/httpd/pull/444/commits/c2fffd29b0f58bdc9caaaff4fec68e17a676f182
  + apache2-issue-444.patch</changelog>
  <changelog author="david.anes@suse.com" date="1720440000">- Security fix:
  - CVE-2024-39573, bsc#1227271: potential SSRF in mod_rewrite
  * Added apache2-CVE-2024-39573.patch
  - CVE-2024-38477, bsc#1227270: null pointer dereference in mod_proxy
  * Added apache2-CVE-2024-38477.patch
  - CVE-2024-38475, bsc#1227268: Improper escaping of output in mod_rewrite
  * Added apache2-CVE-2024-38475-1.patch
  * Added apache2-CVE-2024-38475-2.patch
  * Added apache2-CVE-2024-38475-3.patch
  - CVE-2024-38476, bsc#1227269: Server may use exploitable/malicious
  backend application output to run local handlers via internal
  redirect
  * Added apache2-CVE-2024-38476-1.patch
  * Added apache2-CVE-2024-38476-2.patch
  * Added apache2-CVE-2024-38476-3.patch
  * Added apache2-CVE-2024-38476-4.patch
  * Added apache2-CVE-2024-38476-5.patch
  * Added apache2-CVE-2024-38476-6.patch
  * Added apache2-CVE-2024-38476-7.patch
  * Added apache2-CVE-2024-38476-8.patch
  * Added apache2-CVE-2024-38476-9.patch
  * Added apache2-CVE-2024-38476-10.patch
  * Added apache2-CVE-2024-38476-11.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1721217600">- Security fix:
  - CVE-2024-36387, bsc#1227272: DoS by null pointer in websocket over HTTP/2
  * Added apache2-CVE-2024-36387.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1723636800">- Apply fix for CVE-2024-38474, bsc#1227278.
  Patch file added:
  * apache2-CVE-2024-38474.patch
- Apply fix for CVE-2024-38473, bsc#1227276.
  Patch files added:
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1724328000">- Apply fix for CVE-2024-39884, bsc#1227353.
  Patch file added:
  * apache2-CVE-2024-39884.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1727956800">- Apply fix for CVE-2024-40725, bsc#1228097.
  Patch file added:
  * apache2-CVE-2024-40725.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1728043200">- provide /usr/sbin/apxs and /usr/sbin/apxs2 symlinks to
  /usr/bin/aspx [bsc#1227261]</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11879).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1742385600">- Re-introduce patch to improve FIPS compatibility (bsc#1236802):
  * apache2-fips-compatibility.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1759320000">- Fix for bsc#1249359.
- Binary path for Apache's MPM was partially duplicated when it
  can't be invoked/found.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765800000">- Fix the following bugs and CVEs:
  * bsc#1254511 / CVE-2025-55753
  * bsc#1254512 / CVE-2025-58098
  * bsc#1254514 / CVE-2025-65082
  * bsc#1254515 / CVE-2025-66200
- Add patches:
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch</changelog>
</package>
<package pkgid="02779abccaffed1138db69dd90c49742f3ed3ffb2c94bc8f3cf54c7a67edfe91" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.62" rel="150700.4.9.1"/>
  <changelog author="opensuse@dstoecker.de" date="1691236800">- Enable building of mod_md</changelog>
  <changelog author="david.anes@suse.com" date="1697716800">- Update to 2.4.58:
  * ) SECURITY: CVE-2023-45802: Apache HTTP Server: HTTP/2 stream
    memory not reclaimed right away on RST (cve.mitre.org)
    When a HTTP/2 stream was reset (RST frame) by a client, there
    was a time window were the request's memory resources were not
    reclaimed immediately. Instead, de-allocation was deferred to
    connection close. A client could send new requests and resets,
    keeping the connection busy and open and causing the memory
    footprint to keep on growing. On connection close, all resources
    were reclaimed, but the process might run out of memory before
    that.
    This was found by the reporter during testing of CVE-2023-44487
    (HTTP/2 Rapid Reset Exploit) with their own test client. During
    "normal" HTTP/2 use, the probability to hit this bug is very
    low. The kept memory would not become noticeable before the
    connection closes or times out.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Will Dormann of Vul Labs
  * ) SECURITY: CVE-2023-43622: Apache HTTP Server: DoS in HTTP/2 with
    initial windows size 0 (cve.mitre.org)
    An attacker, opening a HTTP/2 connection with an initial window
    size of 0, was able to block handling of that connection
    indefinitely in Apache HTTP Server. This could be used to
    exhaust worker resources in the server, similar to the well
    known "slow loris" attack pattern.
    This has been fixed in version 2.4.58, so that such connection
    are terminated properly after the configured connection timeout.
    This issue affects Apache HTTP Server: from 2.4.55 through
    2.4.57.
    Users are recommended to upgrade to version 2.4.58, which fixes
    the issue.
    Credits: Prof. Sven Dietrich (City University of New York)
  * ) SECURITY: CVE-2023-31122: mod_macro buffer over-read
    (cve.mitre.org)
    Out-of-bounds Read vulnerability in mod_macro of Apache HTTP
    Server.This issue affects Apache HTTP Server: through 2.4.57.
    Credits: David Shoon (github/davidshoon)
  * ) mod_ssl: Silence info log message "SSL Library Error: error:0A000126:
    SSL routines::unexpected eof while reading" when using
    OpenSSL 3 by setting SSL_OP_IGNORE_UNEXPECTED_EOF if
    available. [Rainer Jung]
  * ) mod_http2: improved early cleanup of streams.
    [Stefan Eissing]
  * ) mod_proxy_http2: improved error handling on connection errors while
    response is already underway.
    [Stefan Eissing]
  * ) mod_http2: fixed a bug that could lead to a crash in main connection
    output handling. This occured only when the last request on a HTTP/2
    connection had been processed and the session decided to shut down.
    This could lead to an attempt to send a final GOAWAY while the previous
    write was still in progress. See PR 66646.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix `X-Forward-Host` header to carry the correct value.
    Fixes PR66752.
    [Stefan Eissing]
  * ) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as
    described in RFC 8441. A new directive 'H2WebSockets on|off' has been
    added. The feature is by default not enabled.
    As also discussed in the manual, this feature should work for setups
    using "ProxyPass backend-url upgrade=websocket" without further changes.
    Special server modules for WebSockets will have to be adapted,
    most likely, as the handling if IO events is different with HTTP/2.
    HTTP/2 WebSockets are supported on platforms with native pipes. This
    excludes Windows.
    [Stefan Eissing]
  * ) mod_rewrite: Fix a regression with both a trailing ? and [QSA].
    in OCSP stapling. PR 66672. [Frank Meier &lt;frank.meier ergon.ch&gt;, covener]
  * ) mod_http2: fixed a bug in flushing pending data on an already closed
    connection that could lead to a busy loop, preventing the HTTP/2 session
    to close down successfully. Fixed PR 66624.
    [Stefan Eissing]
  * ) mod_http2: v2.0.15 with the following fixes and improvements
  - New directive 'H2EarlyHint name value' to add headers to a response,
    picked up already when a "103 Early Hints" response is sent. 'name' and
    'value' must comply to the HTTP field restrictions.
    This directive can be repeated several times and header fields of the
    same names add. Sending a 'Link' header with 'preload' relation will
    also cause a HTTP/2 PUSH if enabled and supported by the client.
  - Fixed an issue where requests were not logged and accounted in a timely
    fashion when the connection returns to "keepalive" handling, e.g. when
    the request served was the last outstanding one.
    This led to late appearance in access logs with wrong duration times
    reported.
  - Accurately report the bytes sent for a request in the '%O' Log format.
    This addresses #203, a long outstanding issue where mod_h2 has reported
    numbers over-eagerly from internal buffering and not what has actually
    been placed on the connection.
    The numbers are now the same with and without H2CopyFiles enabled.
    [Stefan Eissing]
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
    [Stefan Eissing]
  * ) mod_rewrite: Add server directory to include path as mod_rewrite requires
    test_char.h. PR 66571 [Valeria Petrov &lt;valeria.petrov@spinetix.com&gt;]
  * ) mod_http2: new directive `H2ProxyRequests on|off` to enable handling
    of HTTP/2 requests in a forward proxy configuration.
    General forward proxying is enabled via `ProxyRequests`. If the
    HTTP/2 protocol is also enabled for such a server/host, this new
    directive is needed in addition.
    [Stefan Eissing]
  * ) core: Updated conf/mime.types:
  - .js moved from 'application/javascript' to 'text/javascript'
  - .mjs was added as 'text/javascript'
  - add .opus ('audio/ogg')
  - add 'application/vnd.geogebra.slides'
  - add WebAssembly MIME types and extension
    [Mathias Bynens &lt;@mathiasbynens&gt; via PR 318,
    Richard de Boer &lt;richard tubul.net&gt;, Dave Hodder &lt;dmh dmh.org.uk&gt;,
    Zbynek Konecny &lt;zbynek1729 gmail.com&gt;]
  * ) mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend
    connection when sending data on the frontend one. This caused crashes
    or infinite loops in rare situations.
  * ) mod_proxy_http2: fixed a bug in retry/response handling that could lead
    to wrong status codes or HTTP messages send at the end of response bodies
    exceeding the announced content-length.
  * ) mod_proxy_http2: fix retry handling to not leak temporary errors.
    On detecting that that an existing connection was shutdown by the other
    side, a 503 response leaked even though the request was retried on a
    fresh connection.
  * ) mod_http2: fixed a bug that did cleanup of consumed and pending buckets in
    the wrong order when a bucket_beam was destroyed.
    [Stefan Eissing]
  * ) mod_http2: avoid double chunked-encoding on internal redirects.
    PR 66597 [Yann Ylavic, Stefan Eissing]
  * ) mod_http2: Fix reporting of `Total Accesses` in server-status to not count
    HTTP/2 requests twice. Fixes PR 66801.
    [Stefan Eissing]
  * ) mod_ssl: Fix handling of Certificate Revoked messages
    in OCSP stapling. PR 66626. [&lt;gmoniker gmail.com&gt;]
  * ) mod_http2: fixed a bug in handling of stream timeouts.
    [Stefan Eissing]
  * ) mod_tls: updating to rustls-ffi version 0.9.2 or higher.
    Checking in configure for proper version installed. Code
    fixes for changed clienthello member name.
    [Stefan Eissing]
  * ) mod_md:
  - New directive `MDMatchNames all|servernames` to allow more control over how
    MDomains are matched to VirtualHosts.
  - New directive `MDChallengeDns01Version`. Setting this to `2` will provide
    the command also with the challenge value on `teardown` invocation. In version
    1, the default, only the `setup` invocation gets this parameter.
    Refs #312. Thanks to @domrim for the idea.
  - For Managed Domain in "manual" mode, the checks if all used ServerName and
    ServerAlias are part of the MDomain now reports a warning instead of an error
    (AH10040) when not all names are present.
  - MDChallengeDns01 can now be configured for individual domains.
    Using PR from JÃ©rÃ´me Billiras (@bilhackmac) and adding test case and fixing proper working
  - Fixed a bug found by JÃ©rÃ´me Billiras (@bilhackmac) that caused the challenge
    teardown not being invoked as it should.
  * ) mod_ldap: Avoid performance overhead of APR-util rebind cache for
    OpenLDAP 2.2+.  PR 64414.  [Joe Orton]
  * ) mod_http2: new directive 'H2MaxDataFrameLen n' to limit the maximum
    amount of response body bytes put into a single HTTP/2 DATA frame.
    Setting this to 0 places no limit (but the max size allowed by the
    protocol is observed).
    The module, by default, tries to use the maximum size possible, which is
    somewhat around 16KB. This sets the maximum. When less response data is
    available, smaller frames will be sent.
  * ) mod_md: fixed passing of the server environment variables to programs
    started via MDMessageCmd and MDChallengeDns01 on *nix system.
    See &lt;https://github.com/icing/mod_md/issues/319&gt;.
    [Stefan Eissing]
  * ) mod_dav: Add DavBasePath directive to configure the repository root
    path.  PR 35077.  [Joe Orton]
  * ) mod_alias: Add AliasPreservePath directive to map the full
    path after the alias in a location. [Graham Leggett]
  * ) mod_alias: Add RedirectRelative to allow relative redirect targets to be
    issued as-is. [Eric Covener, Graham Leggett]
  * ) core: Add formats %{z} and %{strftime-format} to ErrorLogFormat, and make
    sure that if the format is configured early enough it applies to every log
    line.  PR 62161.  [Yann Ylavic]
  * ) mod_deflate: Add DeflateAlterETag to control how the ETag
    is modified. The 'NoChange' parameter mimics 2.2.x behavior.
    PR 45023, PR 39727. [Eric Covener]
  * ) core: Optimize send_brigade_nonblocking(). [Yann Ylavic, Christophe Jaillet]
  * ) mod_status: Remove duplicate keys "BusyWorkers" and "IdleWorkers".
    Resolve inconsistency between the previous two occurrences by
    counting workers in state SERVER_GRACEFUL no longer as busy,
    but instead in a new counter "GracefulWorkers" (or on HTML
    view as "workers gracefully restarting"). Also add the graceful
    counter as a new column to the existing HTML per process table
    for async MPMs. PR 63300. [Rainer Jung]</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718280000">- added patches [bsc#1226217]
  https://github.com/apache/httpd/pull/444/commits/c2fffd29b0f58bdc9caaaff4fec68e17a676f182
  + apache2-issue-444.patch</changelog>
  <changelog author="david.anes@suse.com" date="1720440000">- Security fix:
  - CVE-2024-39573, bsc#1227271: potential SSRF in mod_rewrite
  * Added apache2-CVE-2024-39573.patch
  - CVE-2024-38477, bsc#1227270: null pointer dereference in mod_proxy
  * Added apache2-CVE-2024-38477.patch
  - CVE-2024-38475, bsc#1227268: Improper escaping of output in mod_rewrite
  * Added apache2-CVE-2024-38475-1.patch
  * Added apache2-CVE-2024-38475-2.patch
  * Added apache2-CVE-2024-38475-3.patch
  - CVE-2024-38476, bsc#1227269: Server may use exploitable/malicious
  backend application output to run local handlers via internal
  redirect
  * Added apache2-CVE-2024-38476-1.patch
  * Added apache2-CVE-2024-38476-2.patch
  * Added apache2-CVE-2024-38476-3.patch
  * Added apache2-CVE-2024-38476-4.patch
  * Added apache2-CVE-2024-38476-5.patch
  * Added apache2-CVE-2024-38476-6.patch
  * Added apache2-CVE-2024-38476-7.patch
  * Added apache2-CVE-2024-38476-8.patch
  * Added apache2-CVE-2024-38476-9.patch
  * Added apache2-CVE-2024-38476-10.patch
  * Added apache2-CVE-2024-38476-11.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1721217600">- Security fix:
  - CVE-2024-36387, bsc#1227272: DoS by null pointer in websocket over HTTP/2
  * Added apache2-CVE-2024-36387.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1723636800">- Apply fix for CVE-2024-38474, bsc#1227278.
  Patch file added:
  * apache2-CVE-2024-38474.patch
- Apply fix for CVE-2024-38473, bsc#1227276.
  Patch files added:
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1724328000">- Apply fix for CVE-2024-39884, bsc#1227353.
  Patch file added:
  * apache2-CVE-2024-39884.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1727956800">- Apply fix for CVE-2024-40725, bsc#1228097.
  Patch file added:
  * apache2-CVE-2024-40725.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1728043200">- provide /usr/sbin/apxs and /usr/sbin/apxs2 symlinks to
  /usr/bin/aspx [bsc#1227261]</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11879).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1742385600">- Re-introduce patch to improve FIPS compatibility (bsc#1236802):
  * apache2-fips-compatibility.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1759320000">- Fix for bsc#1249359.
- Binary path for Apache's MPM was partially duplicated when it
  can't be invoked/found.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765800000">- Fix the following bugs and CVEs:
  * bsc#1254511 / CVE-2025-55753
  * bsc#1254512 / CVE-2025-58098
  * bsc#1254514 / CVE-2025-65082
  * bsc#1254515 / CVE-2025-66200
- Add patches:
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch</changelog>
</package>
<package pkgid="5bddacaf06acec82ab2ac007c5f4590a8e9a0b89e8c03804298f54725dbc7a78" name="apache2-prefork" arch="src">
  <version epoch="0" ver="2.4.66" rel="150700.4.15.1"/>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718280000">- added patches [bsc#1226217]
  https://github.com/apache/httpd/pull/444/commits/c2fffd29b0f58bdc9caaaff4fec68e17a676f182
  + apache2-issue-444.patch</changelog>
  <changelog author="david.anes@suse.com" date="1720440000">- Security fix:
  - CVE-2024-39573, bsc#1227271: potential SSRF in mod_rewrite
  * Added apache2-CVE-2024-39573.patch
  - CVE-2024-38477, bsc#1227270: null pointer dereference in mod_proxy
  * Added apache2-CVE-2024-38477.patch
  - CVE-2024-38475, bsc#1227268: Improper escaping of output in mod_rewrite
  * Added apache2-CVE-2024-38475-1.patch
  * Added apache2-CVE-2024-38475-2.patch
  * Added apache2-CVE-2024-38475-3.patch
  - CVE-2024-38476, bsc#1227269: Server may use exploitable/malicious
  backend application output to run local handlers via internal
  redirect
  * Added apache2-CVE-2024-38476-1.patch
  * Added apache2-CVE-2024-38476-2.patch
  * Added apache2-CVE-2024-38476-3.patch
  * Added apache2-CVE-2024-38476-4.patch
  * Added apache2-CVE-2024-38476-5.patch
  * Added apache2-CVE-2024-38476-6.patch
  * Added apache2-CVE-2024-38476-7.patch
  * Added apache2-CVE-2024-38476-8.patch
  * Added apache2-CVE-2024-38476-9.patch
  * Added apache2-CVE-2024-38476-10.patch
  * Added apache2-CVE-2024-38476-11.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1721217600">- Security fix:
  - CVE-2024-36387, bsc#1227272: DoS by null pointer in websocket over HTTP/2
  * Added apache2-CVE-2024-36387.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1723636800">- Apply fix for CVE-2024-38474, bsc#1227278.
  Patch file added:
  * apache2-CVE-2024-38474.patch
- Apply fix for CVE-2024-38473, bsc#1227276.
  Patch files added:
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1724328000">- Apply fix for CVE-2024-39884, bsc#1227353.
  Patch file added:
  * apache2-CVE-2024-39884.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1727956800">- Apply fix for CVE-2024-40725, bsc#1228097.
  Patch file added:
  * apache2-CVE-2024-40725.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1728043200">- provide /usr/sbin/apxs and /usr/sbin/apxs2 symlinks to
  /usr/bin/aspx [bsc#1227261]</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11879).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1742385600">- Re-introduce patch to improve FIPS compatibility (bsc#1236802):
  * apache2-fips-compatibility.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1759320000">- Fix for bsc#1249359.
- Binary path for Apache's MPM was partially duplicated when it
  can't be invoked/found.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765800000">- Fix the following bugs and CVEs:
  * bsc#1254511 / CVE-2025-55753
  * bsc#1254512 / CVE-2025-58098
  * bsc#1254514 / CVE-2025-65082
  * bsc#1254515 / CVE-2025-66200
- Add patches:
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1770811200">- Fix bsc#1229147.
- The default value for MaxRequestWorkers should be a multiple of 25,
  so we're setting it from 256 down to 250, which is what Apache was
  doing during runtime in any case.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1773835200">- Update to 2.4.66. ECO: jsc#PED-15953.
- This update is required to fix bsc#1254182.
- Removed these patches, as they've been merged/fixed upstream.
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch
- Removed these FIPS-related patches too, as they too have been merged upstream:
  * apache2-fips-compatibility.patch
- Refreshed patches:
  * apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch
  * apache2-LimitRequestFieldSize-limits-headers.patch
  * apache-test-application-xml-type.patch
  * apache-test-turn-off-variables-in-ssl-var-lookup.patch</changelog>
</package>
<package pkgid="7e04a53f88574d4be0b6ba8d66a5914b9bca7fda231ee73b3a2cfc64687dbd74" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.66" rel="150700.4.15.1"/>
  <changelog author="dmueller@suse.com" date="1706529600">- use grep -E for egrep</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718280000">- added patches [bsc#1226217]
  https://github.com/apache/httpd/pull/444/commits/c2fffd29b0f58bdc9caaaff4fec68e17a676f182
  + apache2-issue-444.patch</changelog>
  <changelog author="david.anes@suse.com" date="1720440000">- Security fix:
  - CVE-2024-39573, bsc#1227271: potential SSRF in mod_rewrite
  * Added apache2-CVE-2024-39573.patch
  - CVE-2024-38477, bsc#1227270: null pointer dereference in mod_proxy
  * Added apache2-CVE-2024-38477.patch
  - CVE-2024-38475, bsc#1227268: Improper escaping of output in mod_rewrite
  * Added apache2-CVE-2024-38475-1.patch
  * Added apache2-CVE-2024-38475-2.patch
  * Added apache2-CVE-2024-38475-3.patch
  - CVE-2024-38476, bsc#1227269: Server may use exploitable/malicious
  backend application output to run local handlers via internal
  redirect
  * Added apache2-CVE-2024-38476-1.patch
  * Added apache2-CVE-2024-38476-2.patch
  * Added apache2-CVE-2024-38476-3.patch
  * Added apache2-CVE-2024-38476-4.patch
  * Added apache2-CVE-2024-38476-5.patch
  * Added apache2-CVE-2024-38476-6.patch
  * Added apache2-CVE-2024-38476-7.patch
  * Added apache2-CVE-2024-38476-8.patch
  * Added apache2-CVE-2024-38476-9.patch
  * Added apache2-CVE-2024-38476-10.patch
  * Added apache2-CVE-2024-38476-11.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1721217600">- Security fix:
  - CVE-2024-36387, bsc#1227272: DoS by null pointer in websocket over HTTP/2
  * Added apache2-CVE-2024-36387.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1723636800">- Apply fix for CVE-2024-38474, bsc#1227278.
  Patch file added:
  * apache2-CVE-2024-38474.patch
- Apply fix for CVE-2024-38473, bsc#1227276.
  Patch files added:
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1724328000">- Apply fix for CVE-2024-39884, bsc#1227353.
  Patch file added:
  * apache2-CVE-2024-39884.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1727956800">- Apply fix for CVE-2024-40725, bsc#1228097.
  Patch file added:
  * apache2-CVE-2024-40725.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1728043200">- provide /usr/sbin/apxs and /usr/sbin/apxs2 symlinks to
  /usr/bin/aspx [bsc#1227261]</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11879).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1742385600">- Re-introduce patch to improve FIPS compatibility (bsc#1236802):
  * apache2-fips-compatibility.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1759320000">- Fix for bsc#1249359.
- Binary path for Apache's MPM was partially duplicated when it
  can't be invoked/found.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765800000">- Fix the following bugs and CVEs:
  * bsc#1254511 / CVE-2025-55753
  * bsc#1254512 / CVE-2025-58098
  * bsc#1254514 / CVE-2025-65082
  * bsc#1254515 / CVE-2025-66200
- Add patches:
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1770811200">- Fix bsc#1229147.
- The default value for MaxRequestWorkers should be a multiple of 25,
  so we're setting it from 256 down to 250, which is what Apache was
  doing during runtime in any case.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1773835200">- Update to 2.4.66. ECO: jsc#PED-15953.
- This update is required to fix bsc#1254182.
- Removed these patches, as they've been merged/fixed upstream.
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch
- Removed these FIPS-related patches too, as they too have been merged upstream:
  * apache2-fips-compatibility.patch
- Refreshed patches:
  * apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch
  * apache2-LimitRequestFieldSize-limits-headers.patch
  * apache-test-application-xml-type.patch
  * apache-test-turn-off-variables-in-ssl-var-lookup.patch</changelog>
</package>
<package pkgid="40b11c1a6c6fae950a0ddf9105a8cd47fc158fddcb071dbd5eae5bb656f5f4c2" name="apache2-prefork" arch="src">
  <version epoch="0" ver="2.4.66" rel="150700.4.20.1"/>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718280000">- added patches [bsc#1226217]
  https://github.com/apache/httpd/pull/444/commits/c2fffd29b0f58bdc9caaaff4fec68e17a676f182
  + apache2-issue-444.patch</changelog>
  <changelog author="david.anes@suse.com" date="1720440000">- Security fix:
  - CVE-2024-39573, bsc#1227271: potential SSRF in mod_rewrite
  * Added apache2-CVE-2024-39573.patch
  - CVE-2024-38477, bsc#1227270: null pointer dereference in mod_proxy
  * Added apache2-CVE-2024-38477.patch
  - CVE-2024-38475, bsc#1227268: Improper escaping of output in mod_rewrite
  * Added apache2-CVE-2024-38475-1.patch
  * Added apache2-CVE-2024-38475-2.patch
  * Added apache2-CVE-2024-38475-3.patch
  - CVE-2024-38476, bsc#1227269: Server may use exploitable/malicious
  backend application output to run local handlers via internal
  redirect
  * Added apache2-CVE-2024-38476-1.patch
  * Added apache2-CVE-2024-38476-2.patch
  * Added apache2-CVE-2024-38476-3.patch
  * Added apache2-CVE-2024-38476-4.patch
  * Added apache2-CVE-2024-38476-5.patch
  * Added apache2-CVE-2024-38476-6.patch
  * Added apache2-CVE-2024-38476-7.patch
  * Added apache2-CVE-2024-38476-8.patch
  * Added apache2-CVE-2024-38476-9.patch
  * Added apache2-CVE-2024-38476-10.patch
  * Added apache2-CVE-2024-38476-11.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1721217600">- Security fix:
  - CVE-2024-36387, bsc#1227272: DoS by null pointer in websocket over HTTP/2
  * Added apache2-CVE-2024-36387.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1723636800">- Apply fix for CVE-2024-38474, bsc#1227278.
  Patch file added:
  * apache2-CVE-2024-38474.patch
- Apply fix for CVE-2024-38473, bsc#1227276.
  Patch files added:
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1724328000">- Apply fix for CVE-2024-39884, bsc#1227353.
  Patch file added:
  * apache2-CVE-2024-39884.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1727956800">- Apply fix for CVE-2024-40725, bsc#1228097.
  Patch file added:
  * apache2-CVE-2024-40725.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1728043200">- provide /usr/sbin/apxs and /usr/sbin/apxs2 symlinks to
  /usr/bin/aspx [bsc#1227261]</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11879).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1742385600">- Re-introduce patch to improve FIPS compatibility (bsc#1236802):
  * apache2-fips-compatibility.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1759320000">- Fix for bsc#1249359.
- Binary path for Apache's MPM was partially duplicated when it
  can't be invoked/found.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765800000">- Fix the following bugs and CVEs:
  * bsc#1254511 / CVE-2025-55753
  * bsc#1254512 / CVE-2025-58098
  * bsc#1254514 / CVE-2025-65082
  * bsc#1254515 / CVE-2025-66200
- Add patches:
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1770811200">- Fix bsc#1229147.
- The default value for MaxRequestWorkers should be a multiple of 25,
  so we're setting it from 256 down to 250, which is what Apache was
  doing during runtime in any case.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1773835200">- Update to 2.4.66. ECO: jsc#PED-15953.
- This update is required to fix bsc#1254182.
- Removed these patches, as they've been merged/fixed upstream.
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch
- Removed these FIPS-related patches too, as they too have been merged upstream:
  * apache2-fips-compatibility.patch
- Refreshed patches:
  * apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch
  * apache2-LimitRequestFieldSize-limits-headers.patch
  * apache-test-application-xml-type.patch
  * apache-test-turn-off-variables-in-ssl-var-lookup.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1778760000">* Fix bsc#1263957 / CVE-2026-23918.
  * Fix bsc#1263953 / CVE-2026-33523.
  * Fix bsc#1263955 / CVE-2026-33006.
  * Fix bsc#1263956 / CVE-2026-29169.
  * Fix bsc#1263935 / CVE-2026-24072.
  * Fix bsc#1263950 / CVE-2026-34059.
  * Fix bsc#1263951 / CVE-2026-34032.
  * Add patch files:
  - CVE-2026-23918.patch
  - CVE-2026-33523.patch
  - CVE-2026-33006.patch
  - CVE-2026-29169.patch
  - CVE-2026-24072.patch
  - CVE-2026-34059.patch
  - CVE-2026-34032.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1779278400">* Fix bsc#1263952 / CVE-2026-33857.
  * Fix bsc#1263954 / CVE-2026-33007.
  * Fix bsc#1264163 / CVE-2026-28780.
  * Fix bsc#1264150 / CVE-2026-29168.
  * Add patch files:
  - CVE-2026-33857.patch
  - CVE-2026-33007.patch
  - CVE-2026-28780.patch
  - CVE-2026-29168.patch</changelog>
</package>
<package pkgid="6a8838db571134a719de7884a3a064d756c63f49cd428060bbf6fe48c575d3d4" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.66" rel="150700.4.20.1"/>
  <changelog author="eugenio.paolantonio@suse.com" date="1710763200">- SLE-only: forward-port gensslcert change to generate dhparams certificate
  using a valid FIPS method (bsc#1198913)</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1711108800">- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
  apache2ctl, htpasswd2) change, including the relative
  manpages (bsc#1221880)</changelog>
  <changelog author="david.anes@suse.com" date="1711627200">- Add patches to improve FIPS compatibility (bsc#1220681):
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716897600">- security update
- added patches
  fix CVE-2023-38709 [bsc#1222330], HTTP response splitting
  + apache2-CVE-2023-38709.patch
  fix CVE-2024-24795 [bsc#1222332], HTTP Response Splitting in multiple modules
  + apache2-CVE-2024-24795.patch
  fix CVE-2024-27316 [bsc#1221401], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + apache2-CVE-2024-27316.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1718280000">- added patches [bsc#1226217]
  https://github.com/apache/httpd/pull/444/commits/c2fffd29b0f58bdc9caaaff4fec68e17a676f182
  + apache2-issue-444.patch</changelog>
  <changelog author="david.anes@suse.com" date="1720440000">- Security fix:
  - CVE-2024-39573, bsc#1227271: potential SSRF in mod_rewrite
  * Added apache2-CVE-2024-39573.patch
  - CVE-2024-38477, bsc#1227270: null pointer dereference in mod_proxy
  * Added apache2-CVE-2024-38477.patch
  - CVE-2024-38475, bsc#1227268: Improper escaping of output in mod_rewrite
  * Added apache2-CVE-2024-38475-1.patch
  * Added apache2-CVE-2024-38475-2.patch
  * Added apache2-CVE-2024-38475-3.patch
  - CVE-2024-38476, bsc#1227269: Server may use exploitable/malicious
  backend application output to run local handlers via internal
  redirect
  * Added apache2-CVE-2024-38476-1.patch
  * Added apache2-CVE-2024-38476-2.patch
  * Added apache2-CVE-2024-38476-3.patch
  * Added apache2-CVE-2024-38476-4.patch
  * Added apache2-CVE-2024-38476-5.patch
  * Added apache2-CVE-2024-38476-6.patch
  * Added apache2-CVE-2024-38476-7.patch
  * Added apache2-CVE-2024-38476-8.patch
  * Added apache2-CVE-2024-38476-9.patch
  * Added apache2-CVE-2024-38476-10.patch
  * Added apache2-CVE-2024-38476-11.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1721217600">- Security fix:
  - CVE-2024-36387, bsc#1227272: DoS by null pointer in websocket over HTTP/2
  * Added apache2-CVE-2024-36387.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1723636800">- Apply fix for CVE-2024-38474, bsc#1227278.
  Patch file added:
  * apache2-CVE-2024-38474.patch
- Apply fix for CVE-2024-38473, bsc#1227276.
  Patch files added:
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1724328000">- Apply fix for CVE-2024-39884, bsc#1227353.
  Patch file added:
  * apache2-CVE-2024-39884.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1727956800">- Apply fix for CVE-2024-40725, bsc#1228097.
  Patch file added:
  * apache2-CVE-2024-40725.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1728043200">- provide /usr/sbin/apxs and /usr/sbin/apxs2 symlinks to
  /usr/bin/aspx [bsc#1227261]</changelog>
  <changelog author="martin.schreiner@suse.com" date="1736164800">- Update to 2.4.62 (jsc#PED-11879).
- Update test suite to svn1921782.
- Remove unneeded patches, they've all been merged upstream and are
  part of the 2.4.62 release.
  * apache2-CVE-2023-38709.patch
  * apache2-CVE-2024-24795.patch
  * apache2-CVE-2024-27316.patch
  * apache2-CVE-2024-36387.patch
  * apache2-CVE-2024-38473-1.patch
  * apache2-CVE-2024-38473-2.patch
  * apache2-CVE-2024-38473-3.patch
  * apache2-CVE-2024-38473-4.patch
  * apache2-CVE-2024-38474.patch
  * apache2-CVE-2024-38475-1.patch
  * apache2-CVE-2024-38475-2.patch
  * apache2-CVE-2024-38475-3.patch
  * apache2-CVE-2024-38476-1.patch
  * apache2-CVE-2024-38476-10.patch
  * apache2-CVE-2024-38476-11.patch
  * apache2-CVE-2024-38476-2.patch
  * apache2-CVE-2024-38476-3.patch
  * apache2-CVE-2024-38476-4.patch
  * apache2-CVE-2024-38476-5.patch
  * apache2-CVE-2024-38476-6.patch
  * apache2-CVE-2024-38476-7.patch
  * apache2-CVE-2024-38476-8.patch
  * apache2-CVE-2024-38476-9.patch
  * apache2-CVE-2024-38477.patch
  * apache2-CVE-2024-39573.patch
  * apache2-CVE-2024-39884.patch
  * apache2-CVE-2024-40725.patch
  * apache2-fips-compatibility-01.patch
  * apache2-fips-compatibility-02.patch
  * apache2-fips-compatibility-03.patch
  * apache2-issue-444.patch
- Changes from 2.4.62:
  * Applied trunk fix r1919860 which is proposed for backport, see
    UNCList config errors.
  * SECURITY: CVE-2024-40898: Apache HTTP Server: SSRF with
    mod_rewrite in server/vhost context on Windows (cve.mitre.org)
    SSRF in Apache HTTP Server on Windows with mod_rewrite in
    server/vhost context, allows to potentially leak NTML hashes to a
    malicious server via SSRF and malicious requests.  Users are
    recommended to upgrade to version 2.4.62 which fixes this issue.
  * SECURITY: CVE-2024-40725: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    partial fix for CVE-2024-39884 in the core of Apache HTTP Server
    2.4.61 ignores some use of the legacy content-type based
    configuration of handlers. "AddType" and similar configuration,
    under some circumstances where files are requested indirectly,
    result in source code disclosure of local content. For example,
    PHP scripts may be served instead of interpreted.  Users are
    recommended to upgrade to version 2.4.62, which fixes this issue.
  * mod_proxy: Fix canonicalisation and FCGI env (PATH_INFO,
    SCRIPT_NAME) for "balancer:" URLs set via SetHandler, also
    allowing for "unix:" sockets with BalancerMember(s).  PR 69168.
  * mod_proxy: Avoid AH01059 parsing error for SetHandler "unix:"
    URLs.  PR 69160
  * mod_ssl: Fix crashes in PKCS#11 ENGINE support with OpenSSL 3.2.
  * mod_ssl: Add support for loading certs/keys from pkcs11: URIs via
    OpenSSL 3.x providers.
  * mod_ssl: Restore SSL dumping on trace7 loglevel with OpenSSL &gt;=
    3.0.
  * mpm_worker: Fix possible warning (AH00045) about children
    processes not terminating timely.
- Changes from 2.4.61:
  * SECURITY: CVE-2024-39884: Apache HTTP Server: source code
    disclosure with handlers configured via AddType (cve.mitre.org) A
    regression in the core of Apache HTTP Server 2.4.60 ignores some
    use of the legacy content-type based configuration of handlers.
    "AddType" and similar configuration, under some circumstances
    where files are requested indirectly, result in source code
    disclosure of local content. For example, PHP scripts may be
    served instead of interpreted.  Users are recommended to upgrade
    to version 2.4.61, which fixes this issue.
- Changes from 2.4.60:
  * SECURITY: CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy
    handler substitution (cve.mitre.org) Potential SSRF in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to
    cause unsafe RewriteRules to unexpectedly setup URL's to be
    handled by mod_proxy.
  * SECURITY: CVE-2024-38477: Apache HTTP Server: Crash resulting in
    Denial of Service in mod_proxy via a malicious request
    (cve.mitre.org) null pointer dereference in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows an attacker to crash the
    server via a malicious request.
  * SECURITY: CVE-2024-38476: Apache HTTP Server may use
    exploitable/malicious backend application output to run local
    handlers via internal redirect (cve.mitre.org) Vulnerability in
    core of Apache HTTP Server 2.4.59 and earlier are vulnerably to
    information disclosure, SSRF or local script execution via backend
    applications whose response headers are malicious or exploitable.
    Note: Some legacy uses of the 'AddType' directive to connect a
    request to a handler must be ported to 'AddHandler' after this fix.
  * SECURITY: CVE-2024-38475: Apache HTTP Server weakness in
    mod_rewrite when first segment of substitution matches filesystem
    path. (cve.mitre.org) Improper escaping of output in mod_rewrite
    in Apache HTTP Server 2.4.59 and earlier allows an attacker to map
    URLs to filesystem locations that are permitted to be served by
    the server but are not intentionally/directly reachable by any
    URL, resulting in code execution or source code disclosure.
    Substitutions in server context that use a backreferences or
    variables as the first segment of the substitution are affected.
    Some unsafe RewiteRules will be broken by this change and the
    rewrite flag "UnsafePrefixStat" can be used to opt back in once
    ensuring the substitution is appropriately constrained.
  * SECURITY: CVE-2024-38474: Apache HTTP Server weakness with encoded
    question marks in backreferences (cve.mitre.org) Substitution
    encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and
    earlier allows attacker to execute scripts in directories
    permitted by the configuration but not directly reachable by any
    URL or source disclosure of scripts meant to only to be executed
    as CGI.
    Note: Some RewriteRules that capture and substitute unsafely will
    now fail unless rewrite flag "UnsafeAllow3F" is specified.
  * SECURITY: CVE-2024-38473: Apache HTTP Server proxy encoding
    problem (cve.mitre.org) Encoding problem in mod_proxy in Apache
    HTTP Server 2.4.59 and earlier allows request URLs with incorrect
    encoding to be sent to backend services, potentially bypassing
    authentication via crafted requests.
  * SECURITY: CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF
    (cve.mitre.org) SSRF in Apache HTTP Server on Windows allows to
    potentially leak NTML hashes to a malicious server via SSRF and
    malicious requests or content.
    Note: Existing configurations that access UNC paths will have to
    configure new directive "UNCList" to allow access during request
    processing.
  * SECURITY: CVE-2024-36387: Apache HTTP Server: DoS by Null
    pointer in websocket over HTTP/2 (cve.mitre.org)
    Serving WebSocket protocol upgrades over a HTTP/2 connection
    could result in a Null Pointer dereference, leading to a crash
    of the server process, degrading performance.
  * mod_proxy: Fix DNS requests and connections closed before the
    configured addressTTL.  BZ 69126.
  * core: On Linux, log the real thread ID in error logs.
  * core: Support zone/scope in IPv6 link-local addresses in Listen and
    VirtualHost directives (requires APR 1.7.x or later).  PR 59396
  * mod_ssl: Reject client-initiated renegotiation with a TLS alert
    (rather than connection closure).
  * Updated mime.types.
  * mod_ssl: Fix a regression that causes the default DH parameters
    for a key no longer set and thus effectively disabling DH ciphers
    when no explicit DH parameters are set. PR 68863
  * mod_cgid: Optional support for file descriptor passing, fixing
    error log handling (configure --enable-cgid-fdpassing) on Unix
    platforms. PR 54221.
  * mod_cgid/mod_cgi: Distinguish script stderr output clearly in
    error logs.  PR 61980.
  * mod_tls: update version of rustls-ffi to v0.13.0.
  * mod_md:
  - Using OCSP stapling information to trigger certificate renewals.
  - Added directive `MDCheckInterval` to control how often the
    server checks for detected revocations. Added proposals for
    configurations in the README.md chapter "Revocations".
  - OCSP stapling: accept OCSP responses without a `nextUpdate`
    entry which is allowed in RFC 6960. Treat those as having an
    update interval of 12 hours.
  - Adapt OpenSSL usage to changes in their API.
- Changes from 2.4.59:
  * SECURITY: CVE-2024-27316: Apache HTTP Server: HTTP/2 DoS by
    memory exhaustion on endless continuation frames (cve.mitre.org)
    HTTP/2 incoming headers exceeding the limit are temporarily
    buffered in nghttp2 in order to generate an informative HTTP 413
    response. If a client does not stop sending headers, this leads
    to memory exhaustion.
  * SECURITY: CVE-2024-24795: Apache HTTP Server: HTTP Response
    Splitting in multiple modules (cve.mitre.org) HTTP Response
    splitting in multiple modules in Apache HTTP Server allows an
    attacker that can inject malicious response headers into backend
    applications to cause an HTTP desynchronization attack.  Users are
    recommended to upgrade to version 2.4.59, which fixes this issue.
  * SECURITY: CVE-2023-38709: Apache HTTP Server: HTTP response
    splitting (cve.mitre.org) Faulty input validation in the core of
    Apache allows malicious or exploitable backend/content generators
    to split HTTP responses.  This issue affects Apache HTTP Server:
    through 2.4.58.
  * mod_deflate: Fixes and better logging for handling various error
    and edge cases.
  * Add CGIScriptTimeout to mod_cgi.
  * mod_xml2enc: Tolerate libxml2 2.12.0 and later. PR 68610
  * mod_slotmem_shm: Use ap_os_is_path_absolute() to make it portable.
  * mod_ssl: Use OpenSSL-standard functions to assemble CA name lists
    for SSLCACertificatePath/SSLCADNRequestPath.  Names will now be
    consistently sorted. PR 61574.
  * mod_xml2enc: Update check to accept any text/ media type or any
    XML media type per RFC 7303, avoiding corruption of Microsoft
    OOXML formats.  PR 64339.
  * mod_http2: v2.0.26 with the following fixes:
  - Fixed `Date` header on requests upgraded from HTTP/1.1
    (h2c). Fixes https://github.com/icing/mod_h2/issues/272 .
  - Fixed small memory leak in h2 header bucket free.
  * htcacheclean: In -a/-A mode, list all files per subdirectory
    rather than only one. PR 65091.
  * mod_ssl: SSLProxyMachineCertificateFile/Path may reference files
    which include CA certificates; those CA certs are treated as if
    configured with SSLProxyMachineCertificateChainFile.
  * htpasswd, htdbm, dbmmanage: Update help&amp;docs to refer to
    "hashing", rather than "encrypting" passwords.
  * mod_ssl: Fix build with LibreSSL 2.0.7+. PR 64047.
  * htpasswd: Add support for passwords using SHA-2.
  * core: Allow mod_env to override system environment vars.
  * Allow mod_dav_fs to tolerate race conditions between PROPFIND and
    an operation which removes a directory/file between apr_dir_read()
    and apr_stat(). Current behaviour is to abort the connection which
    seems inferior to tolerating (and logging) the error.
  * mod_ldap: HTML-escape data in the ldap-status handler.
  * mod_ssl: Disable the OpenSSL ENGINE API when OPENSSL_NO_ENGINE is
    set.  Allow for "SSLCryptoDevice builtin" if the ENGINE API is not
    available, notably with OpenSSL &gt;= 3.  PR 68080.
  * mod_ssl: Improve compatibility with OpenSSL 3, fix build warnings
    about deprecated ENGINE_ API, honor OPENSSL_API_COMPAT setting
    while defaulting to compatibitily with version 1.1.1 (including
    ENGINEs / SSLCryptoDevice).
  * mod_ssl: release memory to the OS when needed.
  * mod_proxy: Ignore (and warn about) enablereuse=on for
    ProxyPassMatch when some dollar substitution (backreference)
    happens in the hostname or port part of the URL.
  * mod_proxy: Allow to set a TTL for how long DNS resolutions to
    backend systems are cached.
  * mod_proxy: Add optional third argument for ProxyRemote, which
    configures Basic authentication credentials to pass to the remote
    proxy.  PR 37355.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1742385600">- Re-introduce patch to improve FIPS compatibility (bsc#1236802):
  * apache2-fips-compatibility.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1753099200">- Fix the following CVEs / bugs:
  * CVE-2024-42516 bsc#1246477
  * CVE-2024-43204 bsc#1246305
  * CVE-2024-47252 bsc#1246303
  * CVE-2025-23048 bsc#1246302
  * CVE-2025-49630 bsc#1246307
  * CVE-2025-49812 bsc#1246169
  * CVE-2025-53020 bsc#1246306
- Add the following patches:
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1759320000">- Fix for bsc#1249359.
- Binary path for Apache's MPM was partially duplicated when it
  can't be invoked/found.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765800000">- Fix the following bugs and CVEs:
  * bsc#1254511 / CVE-2025-55753
  * bsc#1254512 / CVE-2025-58098
  * bsc#1254514 / CVE-2025-65082
  * bsc#1254515 / CVE-2025-66200
- Add patches:
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1770811200">- Fix bsc#1229147.
- The default value for MaxRequestWorkers should be a multiple of 25,
  so we're setting it from 256 down to 250, which is what Apache was
  doing during runtime in any case.</changelog>
  <changelog author="martin.schreiner@suse.com" date="1773835200">- Update to 2.4.66. ECO: jsc#PED-15953.
- This update is required to fix bsc#1254182.
- Removed these patches, as they've been merged/fixed upstream.
  * CVE-2024-42516.patch
  * CVE-2024-43204.patch
  * CVE-2024-47252.patch
  * CVE-2025-23048.patch
  * CVE-2025-49630.patch
  * CVE-2025-49812.patch
  * CVE-2025-53020.patch
  * CVE-2025-55753.patch
  * CVE-2025-58098.patch
  * CVE-2025-65082.patch
  * CVE-2025-66200.patch
- Removed these FIPS-related patches too, as they too have been merged upstream:
  * apache2-fips-compatibility.patch
- Refreshed patches:
  * apache2-HttpContentLengthHeadZero-HttpExpectStrict.patch
  * apache2-LimitRequestFieldSize-limits-headers.patch
  * apache-test-application-xml-type.patch
  * apache-test-turn-off-variables-in-ssl-var-lookup.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1778760000">* Fix bsc#1263957 / CVE-2026-23918.
  * Fix bsc#1263953 / CVE-2026-33523.
  * Fix bsc#1263955 / CVE-2026-33006.
  * Fix bsc#1263956 / CVE-2026-29169.
  * Fix bsc#1263935 / CVE-2026-24072.
  * Fix bsc#1263950 / CVE-2026-34059.
  * Fix bsc#1263951 / CVE-2026-34032.
  * Add patch files:
  - CVE-2026-23918.patch
  - CVE-2026-33523.patch
  - CVE-2026-33006.patch
  - CVE-2026-29169.patch
  - CVE-2026-24072.patch
  - CVE-2026-34059.patch
  - CVE-2026-34032.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1779278400">* Fix bsc#1263952 / CVE-2026-33857.
  * Fix bsc#1263954 / CVE-2026-33007.
  * Fix bsc#1264163 / CVE-2026-28780.
  * Fix bsc#1264150 / CVE-2026-29168.
  * Add patch files:
  - CVE-2026-33857.patch
  - CVE-2026-33007.patch
  - CVE-2026-28780.patch
  - CVE-2026-29168.patch</changelog>
</package>
<package pkgid="2dc5a00f1ea6be3dd11f5ae27d867e5b88120d8f9c05cd414e3c28a04e248fbf" name="apparmor" arch="src">
  <version epoch="0" ver="3.1.7" rel="150600.5.12.2"/>
  <changelog author="suse-beta@cboltz.de" date="1685361600">- update to AppArmor 3.1.4
  - parser: fix mount rules encoding (CVE-2016-1585)
  - aa-logprof: fix error when choosing named exec with plain profile names
  - aa-status: fix json output
  - several fixes for profiles and abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.4
    for the full upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1686052800">- fix aa-status --json output (aa-status-fix-json-mr1046.patch,
  boo#1211980#c12)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1686484800">- update to AppArmor 3.1.5
  - fix handling of mount rules in apparmor_parser
  - minor additions to abstractions/base and snap_browsers
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.5
    for the full upstream changelog
- remove upstreamed aa-status-fix-json-mr1046.patch
- split off apparmor-enable-precompiled-cache.diff from
  apparmor-enable-profile-cache.diff so that the precompiled cache
  path doesn't get added in parser.conf for Tumbleweed builds.
  This prevents a warning about the non-existing directory when
  loading profiles.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1687435200">- update to AppArmor 3.1.6 (jsc#PED-5600)
  - fix regression in mount rules (boo#1211989)
  - some additions to the base and authentification abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.6
    for the full upstream changelog</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1695643200">- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
  (bsc#1215596)</changelog>
  <changelog author="julio@juliogonzalez.es" date="1699444800">- Add apparmor-systemd-sessions.patch to allow read access to
  /run/systemd/sessions/ (bsc#1216878)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1699444801">- Actually apply the previously added patch for bsc#1216878</changelog>
  <changelog author="suse-beta@cboltz.de" date="1706529600">- Add dovecot-unix_chkpwd.diff to allow dovecot-auth to execute
  unix_chkpwd, and add a profile for unix_chkpwd. This is needed
  for PAM 1.6 (boo#1219139)
- Refresh apparmor.keyring - the key was renewed</changelog>
  <changelog author="suse-beta@cboltz.de" date="1707134400">- Update to AppArmor 3.1.7
  - aa-logprof: don't skip exec events in hats
  - fix aa-cleanprof to work with named profiles
  - add permissions in various abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.7
    for the full list of changes
- drop upstreamed apparmor-systemd-sessions.patch</changelog>
  <changelog author="ddiss@suse.com" date="1707393600">- Add apparmor-abstractions-openssl-allow-version-specific-en.patch to
  allow version specific engdef &amp; engines openssl paths (boo#1219571)</changelog>
  <changelog author="ddiss@suse.com" date="1708430400">- Only run utils and profiles make check if kernel LSM is enabled
  (bsc#1220084)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430401">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="lnussel@suse.com" date="1708948800">- Fix systemd userdb access in unix-chkpwd</changelog>
  <changelog author="nopower@suse.com" date="1709035200">- Add smbd-unix_chkpwd.diff to allow smbd to execute
  unix_chkpwd and fix other pam related denies; (boo#1220032).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1709294400">- Remove workaround for boo#853019 in %postun parser -
  apparmor.service contains a more safe workaround.
  This also fixes boo#1220708 (missing daemon-reload).</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1741953600">- Allow dovecot-auth to execute unix_chkpwd from /sbin, not only from /usr/bin
  (bsc#1234452)
  * Update dovecot-unix_chkpwd.diff</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1745323200">- Allow pam_unix to execute unix_chkpwd with abi/3.0
  - remove dovecot-unix_chkpwd.diff
  - Add allow-pam_unix-to-execute-unix_chkpwd.patch
  - Add revert-abi-change-for-unix_chkpwd.patch
  (bsc#1234452, bsc#1232234)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1746446400">- Add dac_read_search capability for unix_chkpwd to allow it to read the shadow
  file even if it has 000 permissions. This is needed after the CVE-2024-10041
  fix in PAM.
  * unix-chkpwd-add-read-capability.path, bsc#1241678</changelog>
  <changelog author="nopower@suse.com" date="1772625600">- Fix deny exec of rpc_witness; (bsc#1225811).
  * add apparmor-rpcd-witness.patch
- Add some misc fixes for samba-4.21.x denies; (bsc#1259441).
  * add samba-misc-rpcd-spoolss.patch</changelog>
</package>
<package pkgid="6f7f14f592d3b13cafbe3aa0bd619bfbbf365b3807ebed897fcf8a813d1399db" name="apparmor" arch="src">
  <version epoch="0" ver="3.1.7" rel="150600.5.9.1"/>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1685361600">- update to AppArmor 3.1.4
  - parser: fix mount rules encoding (CVE-2016-1585)
  - aa-logprof: fix error when choosing named exec with plain profile names
  - aa-status: fix json output
  - several fixes for profiles and abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.4
    for the full upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1686052800">- fix aa-status --json output (aa-status-fix-json-mr1046.patch,
  boo#1211980#c12)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1686484800">- update to AppArmor 3.1.5
  - fix handling of mount rules in apparmor_parser
  - minor additions to abstractions/base and snap_browsers
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.5
    for the full upstream changelog
- remove upstreamed aa-status-fix-json-mr1046.patch
- split off apparmor-enable-precompiled-cache.diff from
  apparmor-enable-profile-cache.diff so that the precompiled cache
  path doesn't get added in parser.conf for Tumbleweed builds.
  This prevents a warning about the non-existing directory when
  loading profiles.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1687435200">- update to AppArmor 3.1.6 (jsc#PED-5600)
  - fix regression in mount rules (boo#1211989)
  - some additions to the base and authentification abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.6
    for the full upstream changelog</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1695643200">- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
  (bsc#1215596)</changelog>
  <changelog author="julio@juliogonzalez.es" date="1699444800">- Add apparmor-systemd-sessions.patch to allow read access to
  /run/systemd/sessions/ (bsc#1216878)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1699444801">- Actually apply the previously added patch for bsc#1216878</changelog>
  <changelog author="suse-beta@cboltz.de" date="1706529600">- Add dovecot-unix_chkpwd.diff to allow dovecot-auth to execute
  unix_chkpwd, and add a profile for unix_chkpwd. This is needed
  for PAM 1.6 (boo#1219139)
- Refresh apparmor.keyring - the key was renewed</changelog>
  <changelog author="suse-beta@cboltz.de" date="1707134400">- Update to AppArmor 3.1.7
  - aa-logprof: don't skip exec events in hats
  - fix aa-cleanprof to work with named profiles
  - add permissions in various abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.7
    for the full list of changes
- drop upstreamed apparmor-systemd-sessions.patch</changelog>
  <changelog author="ddiss@suse.com" date="1707393600">- Add apparmor-abstractions-openssl-allow-version-specific-en.patch to
  allow version specific engdef &amp; engines openssl paths (boo#1219571)</changelog>
  <changelog author="ddiss@suse.com" date="1708430400">- Only run utils and profiles make check if kernel LSM is enabled
  (bsc#1220084)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430401">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="lnussel@suse.com" date="1708948800">- Fix systemd userdb access in unix-chkpwd</changelog>
  <changelog author="nopower@suse.com" date="1709035200">- Add smbd-unix_chkpwd.diff to allow smbd to execute
  unix_chkpwd and fix other pam related denies; (boo#1220032).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1709294400">- Remove workaround for boo#853019 in %postun parser -
  apparmor.service contains a more safe workaround.
  This also fixes boo#1220708 (missing daemon-reload).</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1741953600">- Allow dovecot-auth to execute unix_chkpwd from /sbin, not only from /usr/bin
  (bsc#1234452)
  * Update dovecot-unix_chkpwd.diff</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1745323200">- Allow pam_unix to execute unix_chkpwd with abi/3.0
  - remove dovecot-unix_chkpwd.diff
  - Add allow-pam_unix-to-execute-unix_chkpwd.patch
  - Add revert-abi-change-for-unix_chkpwd.patch
  (bsc#1234452, bsc#1232234)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1746446400">- Add dac_read_search capability for unix_chkpwd to allow it to read the shadow
  file even if it has 000 permissions. This is needed after the CVE-2024-10041
  fix in PAM.
  * unix-chkpwd-add-read-capability.path, bsc#1241678</changelog>
</package>
<package pkgid="5b087b0b877ef2d6fc4eabc458094f9aa358293ea478a02bd06915fe27b73978" name="apparmor-abstractions" arch="noarch">
  <version epoch="0" ver="3.1.7" rel="150600.5.12.2"/>
  <changelog author="suse-beta@cboltz.de" date="1685361600">- update to AppArmor 3.1.4
  - parser: fix mount rules encoding (CVE-2016-1585)
  - aa-logprof: fix error when choosing named exec with plain profile names
  - aa-status: fix json output
  - several fixes for profiles and abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.4
    for the full upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1686052800">- fix aa-status --json output (aa-status-fix-json-mr1046.patch,
  boo#1211980#c12)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1686484800">- update to AppArmor 3.1.5
  - fix handling of mount rules in apparmor_parser
  - minor additions to abstractions/base and snap_browsers
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.5
    for the full upstream changelog
- remove upstreamed aa-status-fix-json-mr1046.patch
- split off apparmor-enable-precompiled-cache.diff from
  apparmor-enable-profile-cache.diff so that the precompiled cache
  path doesn't get added in parser.conf for Tumbleweed builds.
  This prevents a warning about the non-existing directory when
  loading profiles.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1687435200">- update to AppArmor 3.1.6 (jsc#PED-5600)
  - fix regression in mount rules (boo#1211989)
  - some additions to the base and authentification abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.6
    for the full upstream changelog</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1695643200">- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
  (bsc#1215596)</changelog>
  <changelog author="julio@juliogonzalez.es" date="1699444800">- Add apparmor-systemd-sessions.patch to allow read access to
  /run/systemd/sessions/ (bsc#1216878)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1699444801">- Actually apply the previously added patch for bsc#1216878</changelog>
  <changelog author="suse-beta@cboltz.de" date="1706529600">- Add dovecot-unix_chkpwd.diff to allow dovecot-auth to execute
  unix_chkpwd, and add a profile for unix_chkpwd. This is needed
  for PAM 1.6 (boo#1219139)
- Refresh apparmor.keyring - the key was renewed</changelog>
  <changelog author="suse-beta@cboltz.de" date="1707134400">- Update to AppArmor 3.1.7
  - aa-logprof: don't skip exec events in hats
  - fix aa-cleanprof to work with named profiles
  - add permissions in various abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.7
    for the full list of changes
- drop upstreamed apparmor-systemd-sessions.patch</changelog>
  <changelog author="ddiss@suse.com" date="1707393600">- Add apparmor-abstractions-openssl-allow-version-specific-en.patch to
  allow version specific engdef &amp; engines openssl paths (boo#1219571)</changelog>
  <changelog author="ddiss@suse.com" date="1708430400">- Only run utils and profiles make check if kernel LSM is enabled
  (bsc#1220084)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430401">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="lnussel@suse.com" date="1708948800">- Fix systemd userdb access in unix-chkpwd</changelog>
  <changelog author="nopower@suse.com" date="1709035200">- Add smbd-unix_chkpwd.diff to allow smbd to execute
  unix_chkpwd and fix other pam related denies; (boo#1220032).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1709294400">- Remove workaround for boo#853019 in %postun parser -
  apparmor.service contains a more safe workaround.
  This also fixes boo#1220708 (missing daemon-reload).</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1741953600">- Allow dovecot-auth to execute unix_chkpwd from /sbin, not only from /usr/bin
  (bsc#1234452)
  * Update dovecot-unix_chkpwd.diff</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1745323200">- Allow pam_unix to execute unix_chkpwd with abi/3.0
  - remove dovecot-unix_chkpwd.diff
  - Add allow-pam_unix-to-execute-unix_chkpwd.patch
  - Add revert-abi-change-for-unix_chkpwd.patch
  (bsc#1234452, bsc#1232234)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1746446400">- Add dac_read_search capability for unix_chkpwd to allow it to read the shadow
  file even if it has 000 permissions. This is needed after the CVE-2024-10041
  fix in PAM.
  * unix-chkpwd-add-read-capability.path, bsc#1241678</changelog>
  <changelog author="nopower@suse.com" date="1772625600">- Fix deny exec of rpc_witness; (bsc#1225811).
  * add apparmor-rpcd-witness.patch
- Add some misc fixes for samba-4.21.x denies; (bsc#1259441).
  * add samba-misc-rpcd-spoolss.patch</changelog>
</package>
<package pkgid="9fe1087e5654f5cd173240a9b4dfa2bc7863341340df6f9b083f6f399c247596" name="apparmor-abstractions" arch="noarch">
  <version epoch="0" ver="3.1.7" rel="150600.5.9.1"/>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1685361600">- update to AppArmor 3.1.4
  - parser: fix mount rules encoding (CVE-2016-1585)
  - aa-logprof: fix error when choosing named exec with plain profile names
  - aa-status: fix json output
  - several fixes for profiles and abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.4
    for the full upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1686052800">- fix aa-status --json output (aa-status-fix-json-mr1046.patch,
  boo#1211980#c12)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1686484800">- update to AppArmor 3.1.5
  - fix handling of mount rules in apparmor_parser
  - minor additions to abstractions/base and snap_browsers
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.5
    for the full upstream changelog
- remove upstreamed aa-status-fix-json-mr1046.patch
- split off apparmor-enable-precompiled-cache.diff from
  apparmor-enable-profile-cache.diff so that the precompiled cache
  path doesn't get added in parser.conf for Tumbleweed builds.
  This prevents a warning about the non-existing directory when
  loading profiles.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1687435200">- update to AppArmor 3.1.6 (jsc#PED-5600)
  - fix regression in mount rules (boo#1211989)
  - some additions to the base and authentification abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.6
    for the full upstream changelog</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1695643200">- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
  (bsc#1215596)</changelog>
  <changelog author="julio@juliogonzalez.es" date="1699444800">- Add apparmor-systemd-sessions.patch to allow read access to
  /run/systemd/sessions/ (bsc#1216878)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1699444801">- Actually apply the previously added patch for bsc#1216878</changelog>
  <changelog author="suse-beta@cboltz.de" date="1706529600">- Add dovecot-unix_chkpwd.diff to allow dovecot-auth to execute
  unix_chkpwd, and add a profile for unix_chkpwd. This is needed
  for PAM 1.6 (boo#1219139)
- Refresh apparmor.keyring - the key was renewed</changelog>
  <changelog author="suse-beta@cboltz.de" date="1707134400">- Update to AppArmor 3.1.7
  - aa-logprof: don't skip exec events in hats
  - fix aa-cleanprof to work with named profiles
  - add permissions in various abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.7
    for the full list of changes
- drop upstreamed apparmor-systemd-sessions.patch</changelog>
  <changelog author="ddiss@suse.com" date="1707393600">- Add apparmor-abstractions-openssl-allow-version-specific-en.patch to
  allow version specific engdef &amp; engines openssl paths (boo#1219571)</changelog>
  <changelog author="ddiss@suse.com" date="1708430400">- Only run utils and profiles make check if kernel LSM is enabled
  (bsc#1220084)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430401">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="lnussel@suse.com" date="1708948800">- Fix systemd userdb access in unix-chkpwd</changelog>
  <changelog author="nopower@suse.com" date="1709035200">- Add smbd-unix_chkpwd.diff to allow smbd to execute
  unix_chkpwd and fix other pam related denies; (boo#1220032).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1709294400">- Remove workaround for boo#853019 in %postun parser -
  apparmor.service contains a more safe workaround.
  This also fixes boo#1220708 (missing daemon-reload).</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1741953600">- Allow dovecot-auth to execute unix_chkpwd from /sbin, not only from /usr/bin
  (bsc#1234452)
  * Update dovecot-unix_chkpwd.diff</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1745323200">- Allow pam_unix to execute unix_chkpwd with abi/3.0
  - remove dovecot-unix_chkpwd.diff
  - Add allow-pam_unix-to-execute-unix_chkpwd.patch
  - Add revert-abi-change-for-unix_chkpwd.patch
  (bsc#1234452, bsc#1232234)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1746446400">- Add dac_read_search capability for unix_chkpwd to allow it to read the shadow
  file even if it has 000 permissions. This is needed after the CVE-2024-10041
  fix in PAM.
  * unix-chkpwd-add-read-capability.path, bsc#1241678</changelog>
</package>
<package pkgid="c248ccbfcd91d7d826db788cf4cdc1263dd826637b2cdafa72343813c181994e" name="apparmor-docs" arch="noarch">
  <version epoch="0" ver="3.1.7" rel="150600.5.12.2"/>
  <changelog author="suse-beta@cboltz.de" date="1685361600">- update to AppArmor 3.1.4
  - parser: fix mount rules encoding (CVE-2016-1585)
  - aa-logprof: fix error when choosing named exec with plain profile names
  - aa-status: fix json output
  - several fixes for profiles and abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.4
    for the full upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1686052800">- fix aa-status --json output (aa-status-fix-json-mr1046.patch,
  boo#1211980#c12)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1686484800">- update to AppArmor 3.1.5
  - fix handling of mount rules in apparmor_parser
  - minor additions to abstractions/base and snap_browsers
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.5
    for the full upstream changelog
- remove upstreamed aa-status-fix-json-mr1046.patch
- split off apparmor-enable-precompiled-cache.diff from
  apparmor-enable-profile-cache.diff so that the precompiled cache
  path doesn't get added in parser.conf for Tumbleweed builds.
  This prevents a warning about the non-existing directory when
  loading profiles.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1687435200">- update to AppArmor 3.1.6 (jsc#PED-5600)
  - fix regression in mount rules (boo#1211989)
  - some additions to the base and authentification abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.6
    for the full upstream changelog</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1695643200">- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
  (bsc#1215596)</changelog>
  <changelog author="julio@juliogonzalez.es" date="1699444800">- Add apparmor-systemd-sessions.patch to allow read access to
  /run/systemd/sessions/ (bsc#1216878)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1699444801">- Actually apply the previously added patch for bsc#1216878</changelog>
  <changelog author="suse-beta@cboltz.de" date="1706529600">- Add dovecot-unix_chkpwd.diff to allow dovecot-auth to execute
  unix_chkpwd, and add a profile for unix_chkpwd. This is needed
  for PAM 1.6 (boo#1219139)
- Refresh apparmor.keyring - the key was renewed</changelog>
  <changelog author="suse-beta@cboltz.de" date="1707134400">- Update to AppArmor 3.1.7
  - aa-logprof: don't skip exec events in hats
  - fix aa-cleanprof to work with named profiles
  - add permissions in various abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.7
    for the full list of changes
- drop upstreamed apparmor-systemd-sessions.patch</changelog>
  <changelog author="ddiss@suse.com" date="1707393600">- Add apparmor-abstractions-openssl-allow-version-specific-en.patch to
  allow version specific engdef &amp; engines openssl paths (boo#1219571)</changelog>
  <changelog author="ddiss@suse.com" date="1708430400">- Only run utils and profiles make check if kernel LSM is enabled
  (bsc#1220084)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430401">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="lnussel@suse.com" date="1708948800">- Fix systemd userdb access in unix-chkpwd</changelog>
  <changelog author="nopower@suse.com" date="1709035200">- Add smbd-unix_chkpwd.diff to allow smbd to execute
  unix_chkpwd and fix other pam related denies; (boo#1220032).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1709294400">- Remove workaround for boo#853019 in %postun parser -
  apparmor.service contains a more safe workaround.
  This also fixes boo#1220708 (missing daemon-reload).</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1741953600">- Allow dovecot-auth to execute unix_chkpwd from /sbin, not only from /usr/bin
  (bsc#1234452)
  * Update dovecot-unix_chkpwd.diff</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1745323200">- Allow pam_unix to execute unix_chkpwd with abi/3.0
  - remove dovecot-unix_chkpwd.diff
  - Add allow-pam_unix-to-execute-unix_chkpwd.patch
  - Add revert-abi-change-for-unix_chkpwd.patch
  (bsc#1234452, bsc#1232234)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1746446400">- Add dac_read_search capability for unix_chkpwd to allow it to read the shadow
  file even if it has 000 permissions. This is needed after the CVE-2024-10041
  fix in PAM.
  * unix-chkpwd-add-read-capability.path, bsc#1241678</changelog>
  <changelog author="nopower@suse.com" date="1772625600">- Fix deny exec of rpc_witness; (bsc#1225811).
  * add apparmor-rpcd-witness.patch
- Add some misc fixes for samba-4.21.x denies; (bsc#1259441).
  * add samba-misc-rpcd-spoolss.patch</changelog>
</package>
<package pkgid="34fdee4e75fea73f495173938b5c33da3d9504e28744207cd2bd8c97ab5d8597" name="apparmor-docs" arch="noarch">
  <version epoch="0" ver="3.1.7" rel="150600.5.9.1"/>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1685361600">- update to AppArmor 3.1.4
  - parser: fix mount rules encoding (CVE-2016-1585)
  - aa-logprof: fix error when choosing named exec with plain profile names
  - aa-status: fix json output
  - several fixes for profiles and abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.4
    for the full upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1686052800">- fix aa-status --json output (aa-status-fix-json-mr1046.patch,
  boo#1211980#c12)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1686484800">- update to AppArmor 3.1.5
  - fix handling of mount rules in apparmor_parser
  - minor additions to abstractions/base and snap_browsers
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.5
    for the full upstream changelog
- remove upstreamed aa-status-fix-json-mr1046.patch
- split off apparmor-enable-precompiled-cache.diff from
  apparmor-enable-profile-cache.diff so that the precompiled cache
  path doesn't get added in parser.conf for Tumbleweed builds.
  This prevents a warning about the non-existing directory when
  loading profiles.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1687435200">- update to AppArmor 3.1.6 (jsc#PED-5600)
  - fix regression in mount rules (boo#1211989)
  - some additions to the base and authentification abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.6
    for the full upstream changelog</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1695643200">- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
  (bsc#1215596)</changelog>
  <changelog author="julio@juliogonzalez.es" date="1699444800">- Add apparmor-systemd-sessions.patch to allow read access to
  /run/systemd/sessions/ (bsc#1216878)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1699444801">- Actually apply the previously added patch for bsc#1216878</changelog>
  <changelog author="suse-beta@cboltz.de" date="1706529600">- Add dovecot-unix_chkpwd.diff to allow dovecot-auth to execute
  unix_chkpwd, and add a profile for unix_chkpwd. This is needed
  for PAM 1.6 (boo#1219139)
- Refresh apparmor.keyring - the key was renewed</changelog>
  <changelog author="suse-beta@cboltz.de" date="1707134400">- Update to AppArmor 3.1.7
  - aa-logprof: don't skip exec events in hats
  - fix aa-cleanprof to work with named profiles
  - add permissions in various abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.7
    for the full list of changes
- drop upstreamed apparmor-systemd-sessions.patch</changelog>
  <changelog author="ddiss@suse.com" date="1707393600">- Add apparmor-abstractions-openssl-allow-version-specific-en.patch to
  allow version specific engdef &amp; engines openssl paths (boo#1219571)</changelog>
  <changelog author="ddiss@suse.com" date="1708430400">- Only run utils and profiles make check if kernel LSM is enabled
  (bsc#1220084)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430401">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="lnussel@suse.com" date="1708948800">- Fix systemd userdb access in unix-chkpwd</changelog>
  <changelog author="nopower@suse.com" date="1709035200">- Add smbd-unix_chkpwd.diff to allow smbd to execute
  unix_chkpwd and fix other pam related denies; (boo#1220032).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1709294400">- Remove workaround for boo#853019 in %postun parser -
  apparmor.service contains a more safe workaround.
  This also fixes boo#1220708 (missing daemon-reload).</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1741953600">- Allow dovecot-auth to execute unix_chkpwd from /sbin, not only from /usr/bin
  (bsc#1234452)
  * Update dovecot-unix_chkpwd.diff</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1745323200">- Allow pam_unix to execute unix_chkpwd with abi/3.0
  - remove dovecot-unix_chkpwd.diff
  - Add allow-pam_unix-to-execute-unix_chkpwd.patch
  - Add revert-abi-change-for-unix_chkpwd.patch
  (bsc#1234452, bsc#1232234)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1746446400">- Add dac_read_search capability for unix_chkpwd to allow it to read the shadow
  file even if it has 000 permissions. This is needed after the CVE-2024-10041
  fix in PAM.
  * unix-chkpwd-add-read-capability.path, bsc#1241678</changelog>
</package>
<package pkgid="fbaa6820c1a91abe3fb37109d5e3c22459e5482493ccb98661f009e8946796f5" name="apparmor-parser" arch="x86_64">
  <version epoch="0" ver="3.1.7" rel="150600.5.12.2"/>
  <changelog author="suse-beta@cboltz.de" date="1685361600">- update to AppArmor 3.1.4
  - parser: fix mount rules encoding (CVE-2016-1585)
  - aa-logprof: fix error when choosing named exec with plain profile names
  - aa-status: fix json output
  - several fixes for profiles and abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.4
    for the full upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1686052800">- fix aa-status --json output (aa-status-fix-json-mr1046.patch,
  boo#1211980#c12)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1686484800">- update to AppArmor 3.1.5
  - fix handling of mount rules in apparmor_parser
  - minor additions to abstractions/base and snap_browsers
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.5
    for the full upstream changelog
- remove upstreamed aa-status-fix-json-mr1046.patch
- split off apparmor-enable-precompiled-cache.diff from
  apparmor-enable-profile-cache.diff so that the precompiled cache
  path doesn't get added in parser.conf for Tumbleweed builds.
  This prevents a warning about the non-existing directory when
  loading profiles.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1687435200">- update to AppArmor 3.1.6 (jsc#PED-5600)
  - fix regression in mount rules (boo#1211989)
  - some additions to the base and authentification abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.6
    for the full upstream changelog</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1695643200">- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
  (bsc#1215596)</changelog>
  <changelog author="julio@juliogonzalez.es" date="1699444800">- Add apparmor-systemd-sessions.patch to allow read access to
  /run/systemd/sessions/ (bsc#1216878)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1699444801">- Actually apply the previously added patch for bsc#1216878</changelog>
  <changelog author="suse-beta@cboltz.de" date="1706529600">- Add dovecot-unix_chkpwd.diff to allow dovecot-auth to execute
  unix_chkpwd, and add a profile for unix_chkpwd. This is needed
  for PAM 1.6 (boo#1219139)
- Refresh apparmor.keyring - the key was renewed</changelog>
  <changelog author="suse-beta@cboltz.de" date="1707134400">- Update to AppArmor 3.1.7
  - aa-logprof: don't skip exec events in hats
  - fix aa-cleanprof to work with named profiles
  - add permissions in various abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.7
    for the full list of changes
- drop upstreamed apparmor-systemd-sessions.patch</changelog>
  <changelog author="ddiss@suse.com" date="1707393600">- Add apparmor-abstractions-openssl-allow-version-specific-en.patch to
  allow version specific engdef &amp; engines openssl paths (boo#1219571)</changelog>
  <changelog author="ddiss@suse.com" date="1708430400">- Only run utils and profiles make check if kernel LSM is enabled
  (bsc#1220084)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430401">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="lnussel@suse.com" date="1708948800">- Fix systemd userdb access in unix-chkpwd</changelog>
  <changelog author="nopower@suse.com" date="1709035200">- Add smbd-unix_chkpwd.diff to allow smbd to execute
  unix_chkpwd and fix other pam related denies; (boo#1220032).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1709294400">- Remove workaround for boo#853019 in %postun parser -
  apparmor.service contains a more safe workaround.
  This also fixes boo#1220708 (missing daemon-reload).</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1741953600">- Allow dovecot-auth to execute unix_chkpwd from /sbin, not only from /usr/bin
  (bsc#1234452)
  * Update dovecot-unix_chkpwd.diff</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1745323200">- Allow pam_unix to execute unix_chkpwd with abi/3.0
  - remove dovecot-unix_chkpwd.diff
  - Add allow-pam_unix-to-execute-unix_chkpwd.patch
  - Add revert-abi-change-for-unix_chkpwd.patch
  (bsc#1234452, bsc#1232234)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1746446400">- Add dac_read_search capability for unix_chkpwd to allow it to read the shadow
  file even if it has 000 permissions. This is needed after the CVE-2024-10041
  fix in PAM.
  * unix-chkpwd-add-read-capability.path, bsc#1241678</changelog>
  <changelog author="nopower@suse.com" date="1772625600">- Fix deny exec of rpc_witness; (bsc#1225811).
  * add apparmor-rpcd-witness.patch
- Add some misc fixes for samba-4.21.x denies; (bsc#1259441).
  * add samba-misc-rpcd-spoolss.patch</changelog>
</package>
<package pkgid="601ae6d1afe2851c7f7d28cec7e150be07ce9821f54ed754853a4d03943f0b3f" name="apparmor-parser" arch="x86_64">
  <version epoch="0" ver="3.1.7" rel="150600.5.9.1"/>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1685361600">- update to AppArmor 3.1.4
  - parser: fix mount rules encoding (CVE-2016-1585)
  - aa-logprof: fix error when choosing named exec with plain profile names
  - aa-status: fix json output
  - several fixes for profiles and abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.4
    for the full upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1686052800">- fix aa-status --json output (aa-status-fix-json-mr1046.patch,
  boo#1211980#c12)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1686484800">- update to AppArmor 3.1.5
  - fix handling of mount rules in apparmor_parser
  - minor additions to abstractions/base and snap_browsers
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.5
    for the full upstream changelog
- remove upstreamed aa-status-fix-json-mr1046.patch
- split off apparmor-enable-precompiled-cache.diff from
  apparmor-enable-profile-cache.diff so that the precompiled cache
  path doesn't get added in parser.conf for Tumbleweed builds.
  This prevents a warning about the non-existing directory when
  loading profiles.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1687435200">- update to AppArmor 3.1.6 (jsc#PED-5600)
  - fix regression in mount rules (boo#1211989)
  - some additions to the base and authentification abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.6
    for the full upstream changelog</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1695643200">- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
  (bsc#1215596)</changelog>
  <changelog author="julio@juliogonzalez.es" date="1699444800">- Add apparmor-systemd-sessions.patch to allow read access to
  /run/systemd/sessions/ (bsc#1216878)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1699444801">- Actually apply the previously added patch for bsc#1216878</changelog>
  <changelog author="suse-beta@cboltz.de" date="1706529600">- Add dovecot-unix_chkpwd.diff to allow dovecot-auth to execute
  unix_chkpwd, and add a profile for unix_chkpwd. This is needed
  for PAM 1.6 (boo#1219139)
- Refresh apparmor.keyring - the key was renewed</changelog>
  <changelog author="suse-beta@cboltz.de" date="1707134400">- Update to AppArmor 3.1.7
  - aa-logprof: don't skip exec events in hats
  - fix aa-cleanprof to work with named profiles
  - add permissions in various abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.7
    for the full list of changes
- drop upstreamed apparmor-systemd-sessions.patch</changelog>
  <changelog author="ddiss@suse.com" date="1707393600">- Add apparmor-abstractions-openssl-allow-version-specific-en.patch to
  allow version specific engdef &amp; engines openssl paths (boo#1219571)</changelog>
  <changelog author="ddiss@suse.com" date="1708430400">- Only run utils and profiles make check if kernel LSM is enabled
  (bsc#1220084)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430401">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="lnussel@suse.com" date="1708948800">- Fix systemd userdb access in unix-chkpwd</changelog>
  <changelog author="nopower@suse.com" date="1709035200">- Add smbd-unix_chkpwd.diff to allow smbd to execute
  unix_chkpwd and fix other pam related denies; (boo#1220032).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1709294400">- Remove workaround for boo#853019 in %postun parser -
  apparmor.service contains a more safe workaround.
  This also fixes boo#1220708 (missing daemon-reload).</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1741953600">- Allow dovecot-auth to execute unix_chkpwd from /sbin, not only from /usr/bin
  (bsc#1234452)
  * Update dovecot-unix_chkpwd.diff</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1745323200">- Allow pam_unix to execute unix_chkpwd with abi/3.0
  - remove dovecot-unix_chkpwd.diff
  - Add allow-pam_unix-to-execute-unix_chkpwd.patch
  - Add revert-abi-change-for-unix_chkpwd.patch
  (bsc#1234452, bsc#1232234)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1746446400">- Add dac_read_search capability for unix_chkpwd to allow it to read the shadow
  file even if it has 000 permissions. This is needed after the CVE-2024-10041
  fix in PAM.
  * unix-chkpwd-add-read-capability.path, bsc#1241678</changelog>
</package>
<package pkgid="eff19f3c71266c9fbf8d8526ea42f98d8ed978308feb38343ec8963df3665011" name="apparmor-parser-lang" arch="noarch">
  <version epoch="0" ver="3.1.7" rel="150600.5.12.2"/>
  <changelog author="suse-beta@cboltz.de" date="1685361600">- update to AppArmor 3.1.4
  - parser: fix mount rules encoding (CVE-2016-1585)
  - aa-logprof: fix error when choosing named exec with plain profile names
  - aa-status: fix json output
  - several fixes for profiles and abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.4
    for the full upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1686052800">- fix aa-status --json output (aa-status-fix-json-mr1046.patch,
  boo#1211980#c12)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1686484800">- update to AppArmor 3.1.5
  - fix handling of mount rules in apparmor_parser
  - minor additions to abstractions/base and snap_browsers
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.5
    for the full upstream changelog
- remove upstreamed aa-status-fix-json-mr1046.patch
- split off apparmor-enable-precompiled-cache.diff from
  apparmor-enable-profile-cache.diff so that the precompiled cache
  path doesn't get added in parser.conf for Tumbleweed builds.
  This prevents a warning about the non-existing directory when
  loading profiles.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1687435200">- update to AppArmor 3.1.6 (jsc#PED-5600)
  - fix regression in mount rules (boo#1211989)
  - some additions to the base and authentification abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.6
    for the full upstream changelog</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1695643200">- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
  (bsc#1215596)</changelog>
  <changelog author="julio@juliogonzalez.es" date="1699444800">- Add apparmor-systemd-sessions.patch to allow read access to
  /run/systemd/sessions/ (bsc#1216878)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1699444801">- Actually apply the previously added patch for bsc#1216878</changelog>
  <changelog author="suse-beta@cboltz.de" date="1706529600">- Add dovecot-unix_chkpwd.diff to allow dovecot-auth to execute
  unix_chkpwd, and add a profile for unix_chkpwd. This is needed
  for PAM 1.6 (boo#1219139)
- Refresh apparmor.keyring - the key was renewed</changelog>
  <changelog author="suse-beta@cboltz.de" date="1707134400">- Update to AppArmor 3.1.7
  - aa-logprof: don't skip exec events in hats
  - fix aa-cleanprof to work with named profiles
  - add permissions in various abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.7
    for the full list of changes
- drop upstreamed apparmor-systemd-sessions.patch</changelog>
  <changelog author="ddiss@suse.com" date="1707393600">- Add apparmor-abstractions-openssl-allow-version-specific-en.patch to
  allow version specific engdef &amp; engines openssl paths (boo#1219571)</changelog>
  <changelog author="ddiss@suse.com" date="1708430400">- Only run utils and profiles make check if kernel LSM is enabled
  (bsc#1220084)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430401">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="lnussel@suse.com" date="1708948800">- Fix systemd userdb access in unix-chkpwd</changelog>
  <changelog author="nopower@suse.com" date="1709035200">- Add smbd-unix_chkpwd.diff to allow smbd to execute
  unix_chkpwd and fix other pam related denies; (boo#1220032).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1709294400">- Remove workaround for boo#853019 in %postun parser -
  apparmor.service contains a more safe workaround.
  This also fixes boo#1220708 (missing daemon-reload).</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1741953600">- Allow dovecot-auth to execute unix_chkpwd from /sbin, not only from /usr/bin
  (bsc#1234452)
  * Update dovecot-unix_chkpwd.diff</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1745323200">- Allow pam_unix to execute unix_chkpwd with abi/3.0
  - remove dovecot-unix_chkpwd.diff
  - Add allow-pam_unix-to-execute-unix_chkpwd.patch
  - Add revert-abi-change-for-unix_chkpwd.patch
  (bsc#1234452, bsc#1232234)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1746446400">- Add dac_read_search capability for unix_chkpwd to allow it to read the shadow
  file even if it has 000 permissions. This is needed after the CVE-2024-10041
  fix in PAM.
  * unix-chkpwd-add-read-capability.path, bsc#1241678</changelog>
  <changelog author="nopower@suse.com" date="1772625600">- Fix deny exec of rpc_witness; (bsc#1225811).
  * add apparmor-rpcd-witness.patch
- Add some misc fixes for samba-4.21.x denies; (bsc#1259441).
  * add samba-misc-rpcd-spoolss.patch</changelog>
</package>
<package pkgid="c09d8c0603ef6411c35995385bc609c7baa1dad9560bef17217f1a7243cd5feb" name="apparmor-parser-lang" arch="noarch">
  <version epoch="0" ver="3.1.7" rel="150600.5.9.1"/>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1685361600">- update to AppArmor 3.1.4
  - parser: fix mount rules encoding (CVE-2016-1585)
  - aa-logprof: fix error when choosing named exec with plain profile names
  - aa-status: fix json output
  - several fixes for profiles and abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.4
    for the full upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1686052800">- fix aa-status --json output (aa-status-fix-json-mr1046.patch,
  boo#1211980#c12)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1686484800">- update to AppArmor 3.1.5
  - fix handling of mount rules in apparmor_parser
  - minor additions to abstractions/base and snap_browsers
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.5
    for the full upstream changelog
- remove upstreamed aa-status-fix-json-mr1046.patch
- split off apparmor-enable-precompiled-cache.diff from
  apparmor-enable-profile-cache.diff so that the precompiled cache
  path doesn't get added in parser.conf for Tumbleweed builds.
  This prevents a warning about the non-existing directory when
  loading profiles.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1687435200">- update to AppArmor 3.1.6 (jsc#PED-5600)
  - fix regression in mount rules (boo#1211989)
  - some additions to the base and authentification abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.6
    for the full upstream changelog</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1695643200">- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
  (bsc#1215596)</changelog>
  <changelog author="julio@juliogonzalez.es" date="1699444800">- Add apparmor-systemd-sessions.patch to allow read access to
  /run/systemd/sessions/ (bsc#1216878)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1699444801">- Actually apply the previously added patch for bsc#1216878</changelog>
  <changelog author="suse-beta@cboltz.de" date="1706529600">- Add dovecot-unix_chkpwd.diff to allow dovecot-auth to execute
  unix_chkpwd, and add a profile for unix_chkpwd. This is needed
  for PAM 1.6 (boo#1219139)
- Refresh apparmor.keyring - the key was renewed</changelog>
  <changelog author="suse-beta@cboltz.de" date="1707134400">- Update to AppArmor 3.1.7
  - aa-logprof: don't skip exec events in hats
  - fix aa-cleanprof to work with named profiles
  - add permissions in various abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.7
    for the full list of changes
- drop upstreamed apparmor-systemd-sessions.patch</changelog>
  <changelog author="ddiss@suse.com" date="1707393600">- Add apparmor-abstractions-openssl-allow-version-specific-en.patch to
  allow version specific engdef &amp; engines openssl paths (boo#1219571)</changelog>
  <changelog author="ddiss@suse.com" date="1708430400">- Only run utils and profiles make check if kernel LSM is enabled
  (bsc#1220084)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430401">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="lnussel@suse.com" date="1708948800">- Fix systemd userdb access in unix-chkpwd</changelog>
  <changelog author="nopower@suse.com" date="1709035200">- Add smbd-unix_chkpwd.diff to allow smbd to execute
  unix_chkpwd and fix other pam related denies; (boo#1220032).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1709294400">- Remove workaround for boo#853019 in %postun parser -
  apparmor.service contains a more safe workaround.
  This also fixes boo#1220708 (missing daemon-reload).</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1741953600">- Allow dovecot-auth to execute unix_chkpwd from /sbin, not only from /usr/bin
  (bsc#1234452)
  * Update dovecot-unix_chkpwd.diff</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1745323200">- Allow pam_unix to execute unix_chkpwd with abi/3.0
  - remove dovecot-unix_chkpwd.diff
  - Add allow-pam_unix-to-execute-unix_chkpwd.patch
  - Add revert-abi-change-for-unix_chkpwd.patch
  (bsc#1234452, bsc#1232234)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1746446400">- Add dac_read_search capability for unix_chkpwd to allow it to read the shadow
  file even if it has 000 permissions. This is needed after the CVE-2024-10041
  fix in PAM.
  * unix-chkpwd-add-read-capability.path, bsc#1241678</changelog>
</package>
<package pkgid="319f8ba3206541e00e5d2257a5b24f93aae269283b635f01fa05363ee5f414c2" name="apparmor-profiles" arch="noarch">
  <version epoch="0" ver="3.1.7" rel="150600.5.12.2"/>
  <changelog author="suse-beta@cboltz.de" date="1685361600">- update to AppArmor 3.1.4
  - parser: fix mount rules encoding (CVE-2016-1585)
  - aa-logprof: fix error when choosing named exec with plain profile names
  - aa-status: fix json output
  - several fixes for profiles and abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.4
    for the full upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1686052800">- fix aa-status --json output (aa-status-fix-json-mr1046.patch,
  boo#1211980#c12)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1686484800">- update to AppArmor 3.1.5
  - fix handling of mount rules in apparmor_parser
  - minor additions to abstractions/base and snap_browsers
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.5
    for the full upstream changelog
- remove upstreamed aa-status-fix-json-mr1046.patch
- split off apparmor-enable-precompiled-cache.diff from
  apparmor-enable-profile-cache.diff so that the precompiled cache
  path doesn't get added in parser.conf for Tumbleweed builds.
  This prevents a warning about the non-existing directory when
  loading profiles.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1687435200">- update to AppArmor 3.1.6 (jsc#PED-5600)
  - fix regression in mount rules (boo#1211989)
  - some additions to the base and authentification abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.6
    for the full upstream changelog</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1695643200">- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
  (bsc#1215596)</changelog>
  <changelog author="julio@juliogonzalez.es" date="1699444800">- Add apparmor-systemd-sessions.patch to allow read access to
  /run/systemd/sessions/ (bsc#1216878)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1699444801">- Actually apply the previously added patch for bsc#1216878</changelog>
  <changelog author="suse-beta@cboltz.de" date="1706529600">- Add dovecot-unix_chkpwd.diff to allow dovecot-auth to execute
  unix_chkpwd, and add a profile for unix_chkpwd. This is needed
  for PAM 1.6 (boo#1219139)
- Refresh apparmor.keyring - the key was renewed</changelog>
  <changelog author="suse-beta@cboltz.de" date="1707134400">- Update to AppArmor 3.1.7
  - aa-logprof: don't skip exec events in hats
  - fix aa-cleanprof to work with named profiles
  - add permissions in various abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.7
    for the full list of changes
- drop upstreamed apparmor-systemd-sessions.patch</changelog>
  <changelog author="ddiss@suse.com" date="1707393600">- Add apparmor-abstractions-openssl-allow-version-specific-en.patch to
  allow version specific engdef &amp; engines openssl paths (boo#1219571)</changelog>
  <changelog author="ddiss@suse.com" date="1708430400">- Only run utils and profiles make check if kernel LSM is enabled
  (bsc#1220084)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430401">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="lnussel@suse.com" date="1708948800">- Fix systemd userdb access in unix-chkpwd</changelog>
  <changelog author="nopower@suse.com" date="1709035200">- Add smbd-unix_chkpwd.diff to allow smbd to execute
  unix_chkpwd and fix other pam related denies; (boo#1220032).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1709294400">- Remove workaround for boo#853019 in %postun parser -
  apparmor.service contains a more safe workaround.
  This also fixes boo#1220708 (missing daemon-reload).</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1741953600">- Allow dovecot-auth to execute unix_chkpwd from /sbin, not only from /usr/bin
  (bsc#1234452)
  * Update dovecot-unix_chkpwd.diff</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1745323200">- Allow pam_unix to execute unix_chkpwd with abi/3.0
  - remove dovecot-unix_chkpwd.diff
  - Add allow-pam_unix-to-execute-unix_chkpwd.patch
  - Add revert-abi-change-for-unix_chkpwd.patch
  (bsc#1234452, bsc#1232234)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1746446400">- Add dac_read_search capability for unix_chkpwd to allow it to read the shadow
  file even if it has 000 permissions. This is needed after the CVE-2024-10041
  fix in PAM.
  * unix-chkpwd-add-read-capability.path, bsc#1241678</changelog>
  <changelog author="nopower@suse.com" date="1772625600">- Fix deny exec of rpc_witness; (bsc#1225811).
  * add apparmor-rpcd-witness.patch
- Add some misc fixes for samba-4.21.x denies; (bsc#1259441).
  * add samba-misc-rpcd-spoolss.patch</changelog>
</package>
<package pkgid="803ea9ecff641bfd1ba560d2a35bd9977e1bfc6db25d4ceb738fd5420c96de54" name="apparmor-profiles" arch="noarch">
  <version epoch="0" ver="3.1.7" rel="150600.5.9.1"/>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1685361600">- update to AppArmor 3.1.4
  - parser: fix mount rules encoding (CVE-2016-1585)
  - aa-logprof: fix error when choosing named exec with plain profile names
  - aa-status: fix json output
  - several fixes for profiles and abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.4
    for the full upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1686052800">- fix aa-status --json output (aa-status-fix-json-mr1046.patch,
  boo#1211980#c12)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1686484800">- update to AppArmor 3.1.5
  - fix handling of mount rules in apparmor_parser
  - minor additions to abstractions/base and snap_browsers
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.5
    for the full upstream changelog
- remove upstreamed aa-status-fix-json-mr1046.patch
- split off apparmor-enable-precompiled-cache.diff from
  apparmor-enable-profile-cache.diff so that the precompiled cache
  path doesn't get added in parser.conf for Tumbleweed builds.
  This prevents a warning about the non-existing directory when
  loading profiles.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1687435200">- update to AppArmor 3.1.6 (jsc#PED-5600)
  - fix regression in mount rules (boo#1211989)
  - some additions to the base and authentification abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.6
    for the full upstream changelog</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1695643200">- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
  (bsc#1215596)</changelog>
  <changelog author="julio@juliogonzalez.es" date="1699444800">- Add apparmor-systemd-sessions.patch to allow read access to
  /run/systemd/sessions/ (bsc#1216878)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1699444801">- Actually apply the previously added patch for bsc#1216878</changelog>
  <changelog author="suse-beta@cboltz.de" date="1706529600">- Add dovecot-unix_chkpwd.diff to allow dovecot-auth to execute
  unix_chkpwd, and add a profile for unix_chkpwd. This is needed
  for PAM 1.6 (boo#1219139)
- Refresh apparmor.keyring - the key was renewed</changelog>
  <changelog author="suse-beta@cboltz.de" date="1707134400">- Update to AppArmor 3.1.7
  - aa-logprof: don't skip exec events in hats
  - fix aa-cleanprof to work with named profiles
  - add permissions in various abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.7
    for the full list of changes
- drop upstreamed apparmor-systemd-sessions.patch</changelog>
  <changelog author="ddiss@suse.com" date="1707393600">- Add apparmor-abstractions-openssl-allow-version-specific-en.patch to
  allow version specific engdef &amp; engines openssl paths (boo#1219571)</changelog>
  <changelog author="ddiss@suse.com" date="1708430400">- Only run utils and profiles make check if kernel LSM is enabled
  (bsc#1220084)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430401">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="lnussel@suse.com" date="1708948800">- Fix systemd userdb access in unix-chkpwd</changelog>
  <changelog author="nopower@suse.com" date="1709035200">- Add smbd-unix_chkpwd.diff to allow smbd to execute
  unix_chkpwd and fix other pam related denies; (boo#1220032).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1709294400">- Remove workaround for boo#853019 in %postun parser -
  apparmor.service contains a more safe workaround.
  This also fixes boo#1220708 (missing daemon-reload).</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1741953600">- Allow dovecot-auth to execute unix_chkpwd from /sbin, not only from /usr/bin
  (bsc#1234452)
  * Update dovecot-unix_chkpwd.diff</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1745323200">- Allow pam_unix to execute unix_chkpwd with abi/3.0
  - remove dovecot-unix_chkpwd.diff
  - Add allow-pam_unix-to-execute-unix_chkpwd.patch
  - Add revert-abi-change-for-unix_chkpwd.patch
  (bsc#1234452, bsc#1232234)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1746446400">- Add dac_read_search capability for unix_chkpwd to allow it to read the shadow
  file even if it has 000 permissions. This is needed after the CVE-2024-10041
  fix in PAM.
  * unix-chkpwd-add-read-capability.path, bsc#1241678</changelog>
</package>
<package pkgid="342f50ced147100b9054e2fc5a1165452eb62e9363357e1df59a5ed750795b27" name="apparmor-utils" arch="noarch">
  <version epoch="0" ver="3.1.7" rel="150600.5.12.2"/>
  <changelog author="suse-beta@cboltz.de" date="1685361600">- update to AppArmor 3.1.4
  - parser: fix mount rules encoding (CVE-2016-1585)
  - aa-logprof: fix error when choosing named exec with plain profile names
  - aa-status: fix json output
  - several fixes for profiles and abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.4
    for the full upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1686052800">- fix aa-status --json output (aa-status-fix-json-mr1046.patch,
  boo#1211980#c12)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1686484800">- update to AppArmor 3.1.5
  - fix handling of mount rules in apparmor_parser
  - minor additions to abstractions/base and snap_browsers
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.5
    for the full upstream changelog
- remove upstreamed aa-status-fix-json-mr1046.patch
- split off apparmor-enable-precompiled-cache.diff from
  apparmor-enable-profile-cache.diff so that the precompiled cache
  path doesn't get added in parser.conf for Tumbleweed builds.
  This prevents a warning about the non-existing directory when
  loading profiles.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1687435200">- update to AppArmor 3.1.6 (jsc#PED-5600)
  - fix regression in mount rules (boo#1211989)
  - some additions to the base and authentification abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.6
    for the full upstream changelog</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1695643200">- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
  (bsc#1215596)</changelog>
  <changelog author="julio@juliogonzalez.es" date="1699444800">- Add apparmor-systemd-sessions.patch to allow read access to
  /run/systemd/sessions/ (bsc#1216878)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1699444801">- Actually apply the previously added patch for bsc#1216878</changelog>
  <changelog author="suse-beta@cboltz.de" date="1706529600">- Add dovecot-unix_chkpwd.diff to allow dovecot-auth to execute
  unix_chkpwd, and add a profile for unix_chkpwd. This is needed
  for PAM 1.6 (boo#1219139)
- Refresh apparmor.keyring - the key was renewed</changelog>
  <changelog author="suse-beta@cboltz.de" date="1707134400">- Update to AppArmor 3.1.7
  - aa-logprof: don't skip exec events in hats
  - fix aa-cleanprof to work with named profiles
  - add permissions in various abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.7
    for the full list of changes
- drop upstreamed apparmor-systemd-sessions.patch</changelog>
  <changelog author="ddiss@suse.com" date="1707393600">- Add apparmor-abstractions-openssl-allow-version-specific-en.patch to
  allow version specific engdef &amp; engines openssl paths (boo#1219571)</changelog>
  <changelog author="ddiss@suse.com" date="1708430400">- Only run utils and profiles make check if kernel LSM is enabled
  (bsc#1220084)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430401">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="lnussel@suse.com" date="1708948800">- Fix systemd userdb access in unix-chkpwd</changelog>
  <changelog author="nopower@suse.com" date="1709035200">- Add smbd-unix_chkpwd.diff to allow smbd to execute
  unix_chkpwd and fix other pam related denies; (boo#1220032).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1709294400">- Remove workaround for boo#853019 in %postun parser -
  apparmor.service contains a more safe workaround.
  This also fixes boo#1220708 (missing daemon-reload).</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1741953600">- Allow dovecot-auth to execute unix_chkpwd from /sbin, not only from /usr/bin
  (bsc#1234452)
  * Update dovecot-unix_chkpwd.diff</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1745323200">- Allow pam_unix to execute unix_chkpwd with abi/3.0
  - remove dovecot-unix_chkpwd.diff
  - Add allow-pam_unix-to-execute-unix_chkpwd.patch
  - Add revert-abi-change-for-unix_chkpwd.patch
  (bsc#1234452, bsc#1232234)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1746446400">- Add dac_read_search capability for unix_chkpwd to allow it to read the shadow
  file even if it has 000 permissions. This is needed after the CVE-2024-10041
  fix in PAM.
  * unix-chkpwd-add-read-capability.path, bsc#1241678</changelog>
  <changelog author="nopower@suse.com" date="1772625600">- Fix deny exec of rpc_witness; (bsc#1225811).
  * add apparmor-rpcd-witness.patch
- Add some misc fixes for samba-4.21.x denies; (bsc#1259441).
  * add samba-misc-rpcd-spoolss.patch</changelog>
</package>
<package pkgid="510fc34ccd4863758f540f30247994f33b7862045cd7877be90351774210046d" name="apparmor-utils" arch="noarch">
  <version epoch="0" ver="3.1.7" rel="150600.5.9.1"/>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1685361600">- update to AppArmor 3.1.4
  - parser: fix mount rules encoding (CVE-2016-1585)
  - aa-logprof: fix error when choosing named exec with plain profile names
  - aa-status: fix json output
  - several fixes for profiles and abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.4
    for the full upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1686052800">- fix aa-status --json output (aa-status-fix-json-mr1046.patch,
  boo#1211980#c12)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1686484800">- update to AppArmor 3.1.5
  - fix handling of mount rules in apparmor_parser
  - minor additions to abstractions/base and snap_browsers
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.5
    for the full upstream changelog
- remove upstreamed aa-status-fix-json-mr1046.patch
- split off apparmor-enable-precompiled-cache.diff from
  apparmor-enable-profile-cache.diff so that the precompiled cache
  path doesn't get added in parser.conf for Tumbleweed builds.
  This prevents a warning about the non-existing directory when
  loading profiles.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1687435200">- update to AppArmor 3.1.6 (jsc#PED-5600)
  - fix regression in mount rules (boo#1211989)
  - some additions to the base and authentification abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.6
    for the full upstream changelog</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1695643200">- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
  (bsc#1215596)</changelog>
  <changelog author="julio@juliogonzalez.es" date="1699444800">- Add apparmor-systemd-sessions.patch to allow read access to
  /run/systemd/sessions/ (bsc#1216878)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1699444801">- Actually apply the previously added patch for bsc#1216878</changelog>
  <changelog author="suse-beta@cboltz.de" date="1706529600">- Add dovecot-unix_chkpwd.diff to allow dovecot-auth to execute
  unix_chkpwd, and add a profile for unix_chkpwd. This is needed
  for PAM 1.6 (boo#1219139)
- Refresh apparmor.keyring - the key was renewed</changelog>
  <changelog author="suse-beta@cboltz.de" date="1707134400">- Update to AppArmor 3.1.7
  - aa-logprof: don't skip exec events in hats
  - fix aa-cleanprof to work with named profiles
  - add permissions in various abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.7
    for the full list of changes
- drop upstreamed apparmor-systemd-sessions.patch</changelog>
  <changelog author="ddiss@suse.com" date="1707393600">- Add apparmor-abstractions-openssl-allow-version-specific-en.patch to
  allow version specific engdef &amp; engines openssl paths (boo#1219571)</changelog>
  <changelog author="ddiss@suse.com" date="1708430400">- Only run utils and profiles make check if kernel LSM is enabled
  (bsc#1220084)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430401">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="lnussel@suse.com" date="1708948800">- Fix systemd userdb access in unix-chkpwd</changelog>
  <changelog author="nopower@suse.com" date="1709035200">- Add smbd-unix_chkpwd.diff to allow smbd to execute
  unix_chkpwd and fix other pam related denies; (boo#1220032).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1709294400">- Remove workaround for boo#853019 in %postun parser -
  apparmor.service contains a more safe workaround.
  This also fixes boo#1220708 (missing daemon-reload).</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1741953600">- Allow dovecot-auth to execute unix_chkpwd from /sbin, not only from /usr/bin
  (bsc#1234452)
  * Update dovecot-unix_chkpwd.diff</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1745323200">- Allow pam_unix to execute unix_chkpwd with abi/3.0
  - remove dovecot-unix_chkpwd.diff
  - Add allow-pam_unix-to-execute-unix_chkpwd.patch
  - Add revert-abi-change-for-unix_chkpwd.patch
  (bsc#1234452, bsc#1232234)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1746446400">- Add dac_read_search capability for unix_chkpwd to allow it to read the shadow
  file even if it has 000 permissions. This is needed after the CVE-2024-10041
  fix in PAM.
  * unix-chkpwd-add-read-capability.path, bsc#1241678</changelog>
</package>
<package pkgid="05a76812740774f7349305122d62c98adcd1e5e7d4b53221aba5682f028c68a8" name="apparmor-utils-lang" arch="noarch">
  <version epoch="0" ver="3.1.7" rel="150600.5.12.2"/>
  <changelog author="suse-beta@cboltz.de" date="1685361600">- update to AppArmor 3.1.4
  - parser: fix mount rules encoding (CVE-2016-1585)
  - aa-logprof: fix error when choosing named exec with plain profile names
  - aa-status: fix json output
  - several fixes for profiles and abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.4
    for the full upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1686052800">- fix aa-status --json output (aa-status-fix-json-mr1046.patch,
  boo#1211980#c12)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1686484800">- update to AppArmor 3.1.5
  - fix handling of mount rules in apparmor_parser
  - minor additions to abstractions/base and snap_browsers
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.5
    for the full upstream changelog
- remove upstreamed aa-status-fix-json-mr1046.patch
- split off apparmor-enable-precompiled-cache.diff from
  apparmor-enable-profile-cache.diff so that the precompiled cache
  path doesn't get added in parser.conf for Tumbleweed builds.
  This prevents a warning about the non-existing directory when
  loading profiles.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1687435200">- update to AppArmor 3.1.6 (jsc#PED-5600)
  - fix regression in mount rules (boo#1211989)
  - some additions to the base and authentification abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.6
    for the full upstream changelog</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1695643200">- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
  (bsc#1215596)</changelog>
  <changelog author="julio@juliogonzalez.es" date="1699444800">- Add apparmor-systemd-sessions.patch to allow read access to
  /run/systemd/sessions/ (bsc#1216878)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1699444801">- Actually apply the previously added patch for bsc#1216878</changelog>
  <changelog author="suse-beta@cboltz.de" date="1706529600">- Add dovecot-unix_chkpwd.diff to allow dovecot-auth to execute
  unix_chkpwd, and add a profile for unix_chkpwd. This is needed
  for PAM 1.6 (boo#1219139)
- Refresh apparmor.keyring - the key was renewed</changelog>
  <changelog author="suse-beta@cboltz.de" date="1707134400">- Update to AppArmor 3.1.7
  - aa-logprof: don't skip exec events in hats
  - fix aa-cleanprof to work with named profiles
  - add permissions in various abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.7
    for the full list of changes
- drop upstreamed apparmor-systemd-sessions.patch</changelog>
  <changelog author="ddiss@suse.com" date="1707393600">- Add apparmor-abstractions-openssl-allow-version-specific-en.patch to
  allow version specific engdef &amp; engines openssl paths (boo#1219571)</changelog>
  <changelog author="ddiss@suse.com" date="1708430400">- Only run utils and profiles make check if kernel LSM is enabled
  (bsc#1220084)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430401">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="lnussel@suse.com" date="1708948800">- Fix systemd userdb access in unix-chkpwd</changelog>
  <changelog author="nopower@suse.com" date="1709035200">- Add smbd-unix_chkpwd.diff to allow smbd to execute
  unix_chkpwd and fix other pam related denies; (boo#1220032).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1709294400">- Remove workaround for boo#853019 in %postun parser -
  apparmor.service contains a more safe workaround.
  This also fixes boo#1220708 (missing daemon-reload).</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1741953600">- Allow dovecot-auth to execute unix_chkpwd from /sbin, not only from /usr/bin
  (bsc#1234452)
  * Update dovecot-unix_chkpwd.diff</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1745323200">- Allow pam_unix to execute unix_chkpwd with abi/3.0
  - remove dovecot-unix_chkpwd.diff
  - Add allow-pam_unix-to-execute-unix_chkpwd.patch
  - Add revert-abi-change-for-unix_chkpwd.patch
  (bsc#1234452, bsc#1232234)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1746446400">- Add dac_read_search capability for unix_chkpwd to allow it to read the shadow
  file even if it has 000 permissions. This is needed after the CVE-2024-10041
  fix in PAM.
  * unix-chkpwd-add-read-capability.path, bsc#1241678</changelog>
  <changelog author="nopower@suse.com" date="1772625600">- Fix deny exec of rpc_witness; (bsc#1225811).
  * add apparmor-rpcd-witness.patch
- Add some misc fixes for samba-4.21.x denies; (bsc#1259441).
  * add samba-misc-rpcd-spoolss.patch</changelog>
</package>
<package pkgid="5ba56ca38d1a03f16ee8b0b9356a339b5267ab7d1d3d5565b5453e601d18d910" name="apparmor-utils-lang" arch="noarch">
  <version epoch="0" ver="3.1.7" rel="150600.5.9.1"/>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1685361600">- update to AppArmor 3.1.4
  - parser: fix mount rules encoding (CVE-2016-1585)
  - aa-logprof: fix error when choosing named exec with plain profile names
  - aa-status: fix json output
  - several fixes for profiles and abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.4
    for the full upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1686052800">- fix aa-status --json output (aa-status-fix-json-mr1046.patch,
  boo#1211980#c12)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1686484800">- update to AppArmor 3.1.5
  - fix handling of mount rules in apparmor_parser
  - minor additions to abstractions/base and snap_browsers
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.5
    for the full upstream changelog
- remove upstreamed aa-status-fix-json-mr1046.patch
- split off apparmor-enable-precompiled-cache.diff from
  apparmor-enable-profile-cache.diff so that the precompiled cache
  path doesn't get added in parser.conf for Tumbleweed builds.
  This prevents a warning about the non-existing directory when
  loading profiles.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1687435200">- update to AppArmor 3.1.6 (jsc#PED-5600)
  - fix regression in mount rules (boo#1211989)
  - some additions to the base and authentification abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.6
    for the full upstream changelog</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1695643200">- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
  (bsc#1215596)</changelog>
  <changelog author="julio@juliogonzalez.es" date="1699444800">- Add apparmor-systemd-sessions.patch to allow read access to
  /run/systemd/sessions/ (bsc#1216878)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1699444801">- Actually apply the previously added patch for bsc#1216878</changelog>
  <changelog author="suse-beta@cboltz.de" date="1706529600">- Add dovecot-unix_chkpwd.diff to allow dovecot-auth to execute
  unix_chkpwd, and add a profile for unix_chkpwd. This is needed
  for PAM 1.6 (boo#1219139)
- Refresh apparmor.keyring - the key was renewed</changelog>
  <changelog author="suse-beta@cboltz.de" date="1707134400">- Update to AppArmor 3.1.7
  - aa-logprof: don't skip exec events in hats
  - fix aa-cleanprof to work with named profiles
  - add permissions in various abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.7
    for the full list of changes
- drop upstreamed apparmor-systemd-sessions.patch</changelog>
  <changelog author="ddiss@suse.com" date="1707393600">- Add apparmor-abstractions-openssl-allow-version-specific-en.patch to
  allow version specific engdef &amp; engines openssl paths (boo#1219571)</changelog>
  <changelog author="ddiss@suse.com" date="1708430400">- Only run utils and profiles make check if kernel LSM is enabled
  (bsc#1220084)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430401">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="lnussel@suse.com" date="1708948800">- Fix systemd userdb access in unix-chkpwd</changelog>
  <changelog author="nopower@suse.com" date="1709035200">- Add smbd-unix_chkpwd.diff to allow smbd to execute
  unix_chkpwd and fix other pam related denies; (boo#1220032).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1709294400">- Remove workaround for boo#853019 in %postun parser -
  apparmor.service contains a more safe workaround.
  This also fixes boo#1220708 (missing daemon-reload).</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1741953600">- Allow dovecot-auth to execute unix_chkpwd from /sbin, not only from /usr/bin
  (bsc#1234452)
  * Update dovecot-unix_chkpwd.diff</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1745323200">- Allow pam_unix to execute unix_chkpwd with abi/3.0
  - remove dovecot-unix_chkpwd.diff
  - Add allow-pam_unix-to-execute-unix_chkpwd.patch
  - Add revert-abi-change-for-unix_chkpwd.patch
  (bsc#1234452, bsc#1232234)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1746446400">- Add dac_read_search capability for unix_chkpwd to allow it to read the shadow
  file even if it has 000 permissions. This is needed after the CVE-2024-10041
  fix in PAM.
  * unix-chkpwd-add-read-capability.path, bsc#1241678</changelog>
</package>
<package pkgid="fd99fed0b46feea6293ba205568dbbb155a9cfdfeb3709ef67c7bf08fdc34af4" name="arphic-bkai00mp-fonts" arch="noarch">
  <version epoch="0" ver="20001125" rel="150000.3.4.1"/>
  <changelog author="mfabian@suse.de" date="1143633600">- add zh_SG to the provides for zh_CN and zh_HK to the provides
  for zh_TW.</changelog>
  <changelog author="mfabian@suse.de" date="1155038400">- move fonts to /usr/share/fonts because of the move to Xorg X11R7.</changelog>
  <changelog author="tiwai@suse.de" date="1270728000">- remove unnecessary buildrequires for too old distros</changelog>
  <changelog author="tiwai@suse.de" date="1324555200">- Renamed ttf-arphic -&gt; arphic-fonts,
  ttf-arphic-bkai00mp -&gt; arphic-bkai00mp-fonts,
  ttf-arphic-bsmi00lp -&gt; arphic-bsmi00lp-fonts,
  ttf-arphic-gkai00mp -&gt; arphic-gkai00mp-fonts, and
  ttf-arphic-gbsn00lp -&gt; arphic-gbsn00lp-fonts according to
  openSUSE packaging guidelines and FATE#313035
  Adjusted Obsoletes and Provides accordingly</changelog>
  <changelog author="toms@opensuse.org" date="1326456000">- Fixed some small SPEC file issues:
  * Fixed typo in %{version}
  * Limited summary to make rpmlint happy</changelog>
  <changelog author="pgajdos@suse.com" date="1333022400">- SUSE-Arphic license</changelog>
  <changelog author="pgajdos@suse.com" date="1337256000">- call spec-cleaner</changelog>
  <changelog author="pgajdos@suse.cz" date="1341403200">- amend spec file to reflect new font packaging scheme
  (see openFATE#313536);</changelog>
  <changelog author="swyear@gmail.com" date="1358683200">- remove Provides: locale(*) and Provides: scalable-font-*,
  no more need these fonts in these locale,
  these fonts can be replaced by arphic-uming(-ukai).</changelog>
  <changelog author="pgajdos@suse.com" date="1762344000">- use %license tag [bsc#1252135]</changelog>
</package>
<package pkgid="a9ff853d3495e7b452ebc87a5f4a9b64867b1217f157610a8c228b7372a78799" name="arphic-bsmi00lp-fonts" arch="noarch">
  <version epoch="0" ver="20001125" rel="150000.3.4.1"/>
  <changelog author="mfabian@suse.de" date="1143633600">- add zh_SG to the provides for zh_CN and zh_HK to the provides
  for zh_TW.</changelog>
  <changelog author="mfabian@suse.de" date="1155038400">- move fonts to /usr/share/fonts because of the move to Xorg X11R7.</changelog>
  <changelog author="tiwai@suse.de" date="1270728000">- remove unnecessary buildrequires for too old distros</changelog>
  <changelog author="tiwai@suse.de" date="1324555200">- Renamed ttf-arphic -&gt; arphic-fonts,
  ttf-arphic-bkai00mp -&gt; arphic-bkai00mp-fonts,
  ttf-arphic-bsmi00lp -&gt; arphic-bsmi00lp-fonts,
  ttf-arphic-gkai00mp -&gt; arphic-gkai00mp-fonts, and
  ttf-arphic-gbsn00lp -&gt; arphic-gbsn00lp-fonts according to
  openSUSE packaging guidelines and FATE#313035
  Adjusted Obsoletes and Provides accordingly</changelog>
  <changelog author="toms@opensuse.org" date="1326456000">- Fixed some small SPEC file issues:
  * Fixed typo in %{version}
  * Limited summary to make rpmlint happy</changelog>
  <changelog author="pgajdos@suse.com" date="1333022400">- SUSE-Arphic license</changelog>
  <changelog author="pgajdos@suse.com" date="1337256000">- call spec-cleaner</changelog>
  <changelog author="pgajdos@suse.cz" date="1341403200">- amend spec file to reflect new font packaging scheme
  (see openFATE#313536);</changelog>
  <changelog author="swyear@gmail.com" date="1358683200">- remove Provides: locale(*) and Provides: scalable-font-*,
  no more need these fonts in these locale,
  these fonts can be replaced by arphic-uming(-ukai).</changelog>
  <changelog author="pgajdos@suse.com" date="1762344000">- use %license tag [bsc#1252135]</changelog>
</package>
<package pkgid="9fa4b303ec7794a61ca79b9fbd5ac83d6695dfddd459c6cbc6ab564149a43471" name="arphic-fonts" arch="noarch">
  <version epoch="0" ver="20001125" rel="150000.3.4.1"/>
  <changelog author="mfabian@suse.de" date="1143633600">- add zh_SG to the provides for zh_CN and zh_HK to the provides
  for zh_TW.</changelog>
  <changelog author="mfabian@suse.de" date="1155038400">- move fonts to /usr/share/fonts because of the move to Xorg X11R7.</changelog>
  <changelog author="tiwai@suse.de" date="1270728000">- remove unnecessary buildrequires for too old distros</changelog>
  <changelog author="tiwai@suse.de" date="1324555200">- Renamed ttf-arphic -&gt; arphic-fonts,
  ttf-arphic-bkai00mp -&gt; arphic-bkai00mp-fonts,
  ttf-arphic-bsmi00lp -&gt; arphic-bsmi00lp-fonts,
  ttf-arphic-gkai00mp -&gt; arphic-gkai00mp-fonts, and
  ttf-arphic-gbsn00lp -&gt; arphic-gbsn00lp-fonts according to
  openSUSE packaging guidelines and FATE#313035
  Adjusted Obsoletes and Provides accordingly</changelog>
  <changelog author="toms@opensuse.org" date="1326456000">- Fixed some small SPEC file issues:
  * Fixed typo in %{version}
  * Limited summary to make rpmlint happy</changelog>
  <changelog author="pgajdos@suse.com" date="1333022400">- SUSE-Arphic license</changelog>
  <changelog author="pgajdos@suse.com" date="1337256000">- call spec-cleaner</changelog>
  <changelog author="pgajdos@suse.cz" date="1341403200">- amend spec file to reflect new font packaging scheme
  (see openFATE#313536);</changelog>
  <changelog author="swyear@gmail.com" date="1358683200">- remove Provides: locale(*) and Provides: scalable-font-*,
  no more need these fonts in these locale,
  these fonts can be replaced by arphic-uming(-ukai).</changelog>
  <changelog author="pgajdos@suse.com" date="1762344000">- use %license tag [bsc#1252135]</changelog>
</package>
<package pkgid="9fba799e5f585c1bba6b06d79fae8e41aa5f703778d46491187b29261aa10200" name="arphic-fonts" arch="src">
  <version epoch="0" ver="20001125" rel="150000.3.4.1"/>
  <changelog author="mfabian@suse.de" date="988891200">- remove %post and %postun, it is enough when SuSEconfig
  updates the font directory, better don't duplicate the code
  here.
- improve fonts.scale.*</changelog>
  <changelog author="mfabian@suse.de" date="1015502400">- make iso10646 entries in fonts.scale proportional '-c-' -&gt; '-p-'</changelog>
  <changelog author="mfabian@suse.de" date="1055505600">- add %dir /usr/X11R6/lib/X11/fonts/truetype/ to file lists</changelog>
  <changelog author="hmacht@suse.de" date="1077537600">- added option # norootforbuild in specfile</changelog>
  <changelog author="mfabian@suse.de" date="1077883200">- run SuSEconfig.fonts and SuSEconfig.pango in %post and %postun</changelog>
  <changelog author="mfabian@suse.de" date="1079697600">- use %suseconfig_fonts_prereq
- run SuSEconfig.ghostscript-cjk in %post and %postun</changelog>
  <changelog author="mfabian@suse.de" date="1095076800">- Bugzilla #45156: add "Provides: scalable-font-zh-{CN,TW}"
  to the appropriate sub-packages.</changelog>
  <changelog author="mfabian@suse.de" date="1102075200">- use new macro "%run_suseconfig_fonts -c"</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="zsu@suse.de" date="1141128000">- add Provides: locale(zh_CN) or locale(zh_TW) to each sub package.</changelog>
  <changelog author="mfabian@suse.de" date="1143633600">- add zh_SG to the provides for zh_CN and zh_HK to the provides
  for zh_TW.</changelog>
  <changelog author="mfabian@suse.de" date="1155038400">- move fonts to /usr/share/fonts because of the move to Xorg X11R7.</changelog>
  <changelog author="tiwai@suse.de" date="1270728000">- remove unnecessary buildrequires for too old distros</changelog>
  <changelog author="tiwai@suse.de" date="1324555200">- Renamed ttf-arphic -&gt; arphic-fonts,
  ttf-arphic-bkai00mp -&gt; arphic-bkai00mp-fonts,
  ttf-arphic-bsmi00lp -&gt; arphic-bsmi00lp-fonts,
  ttf-arphic-gkai00mp -&gt; arphic-gkai00mp-fonts, and
  ttf-arphic-gbsn00lp -&gt; arphic-gbsn00lp-fonts according to
  openSUSE packaging guidelines and FATE#313035
  Adjusted Obsoletes and Provides accordingly</changelog>
  <changelog author="toms@opensuse.org" date="1326456000">- Fixed some small SPEC file issues:
  * Fixed typo in %{version}
  * Limited summary to make rpmlint happy</changelog>
  <changelog author="pgajdos@suse.com" date="1333022400">- SUSE-Arphic license</changelog>
  <changelog author="pgajdos@suse.com" date="1337256000">- call spec-cleaner</changelog>
  <changelog author="pgajdos@suse.cz" date="1341403200">- amend spec file to reflect new font packaging scheme
  (see openFATE#313536);</changelog>
  <changelog author="swyear@gmail.com" date="1358683200">- remove Provides: locale(*) and Provides: scalable-font-*,
  no more need these fonts in these locale,
  these fonts can be replaced by arphic-uming(-ukai).</changelog>
  <changelog author="pgajdos@suse.com" date="1762344000">- use %license tag [bsc#1252135]</changelog>
</package>
<package pkgid="c8b9cd4f3635d21140936cc6130f1966afb2e20c8bac569f75373d57b94800d2" name="arphic-gbsn00lp-fonts" arch="noarch">
  <version epoch="0" ver="20001125" rel="150000.3.4.1"/>
  <changelog author="mfabian@suse.de" date="1143633600">- add zh_SG to the provides for zh_CN and zh_HK to the provides
  for zh_TW.</changelog>
  <changelog author="mfabian@suse.de" date="1155038400">- move fonts to /usr/share/fonts because of the move to Xorg X11R7.</changelog>
  <changelog author="tiwai@suse.de" date="1270728000">- remove unnecessary buildrequires for too old distros</changelog>
  <changelog author="tiwai@suse.de" date="1324555200">- Renamed ttf-arphic -&gt; arphic-fonts,
  ttf-arphic-bkai00mp -&gt; arphic-bkai00mp-fonts,
  ttf-arphic-bsmi00lp -&gt; arphic-bsmi00lp-fonts,
  ttf-arphic-gkai00mp -&gt; arphic-gkai00mp-fonts, and
  ttf-arphic-gbsn00lp -&gt; arphic-gbsn00lp-fonts according to
  openSUSE packaging guidelines and FATE#313035
  Adjusted Obsoletes and Provides accordingly</changelog>
  <changelog author="toms@opensuse.org" date="1326456000">- Fixed some small SPEC file issues:
  * Fixed typo in %{version}
  * Limited summary to make rpmlint happy</changelog>
  <changelog author="pgajdos@suse.com" date="1333022400">- SUSE-Arphic license</changelog>
  <changelog author="pgajdos@suse.com" date="1337256000">- call spec-cleaner</changelog>
  <changelog author="pgajdos@suse.cz" date="1341403200">- amend spec file to reflect new font packaging scheme
  (see openFATE#313536);</changelog>
  <changelog author="swyear@gmail.com" date="1358683200">- remove Provides: locale(*) and Provides: scalable-font-*,
  no more need these fonts in these locale,
  these fonts can be replaced by arphic-uming(-ukai).</changelog>
  <changelog author="pgajdos@suse.com" date="1762344000">- use %license tag [bsc#1252135]</changelog>
</package>
<package pkgid="24ea0802f46b97bd052a47ba16496ef637a90df5bc48a7966b953fb3717627bc" name="arphic-gkai00mp-fonts" arch="noarch">
  <version epoch="0" ver="20001125" rel="150000.3.4.1"/>
  <changelog author="mfabian@suse.de" date="1143633600">- add zh_SG to the provides for zh_CN and zh_HK to the provides
  for zh_TW.</changelog>
  <changelog author="mfabian@suse.de" date="1155038400">- move fonts to /usr/share/fonts because of the move to Xorg X11R7.</changelog>
  <changelog author="tiwai@suse.de" date="1270728000">- remove unnecessary buildrequires for too old distros</changelog>
  <changelog author="tiwai@suse.de" date="1324555200">- Renamed ttf-arphic -&gt; arphic-fonts,
  ttf-arphic-bkai00mp -&gt; arphic-bkai00mp-fonts,
  ttf-arphic-bsmi00lp -&gt; arphic-bsmi00lp-fonts,
  ttf-arphic-gkai00mp -&gt; arphic-gkai00mp-fonts, and
  ttf-arphic-gbsn00lp -&gt; arphic-gbsn00lp-fonts according to
  openSUSE packaging guidelines and FATE#313035
  Adjusted Obsoletes and Provides accordingly</changelog>
  <changelog author="toms@opensuse.org" date="1326456000">- Fixed some small SPEC file issues:
  * Fixed typo in %{version}
  * Limited summary to make rpmlint happy</changelog>
  <changelog author="pgajdos@suse.com" date="1333022400">- SUSE-Arphic license</changelog>
  <changelog author="pgajdos@suse.com" date="1337256000">- call spec-cleaner</changelog>
  <changelog author="pgajdos@suse.cz" date="1341403200">- amend spec file to reflect new font packaging scheme
  (see openFATE#313536);</changelog>
  <changelog author="swyear@gmail.com" date="1358683200">- remove Provides: locale(*) and Provides: scalable-font-*,
  no more need these fonts in these locale,
  these fonts can be replaced by arphic-uming(-ukai).</changelog>
  <changelog author="pgajdos@suse.com" date="1762344000">- use %license tag [bsc#1252135]</changelog>
</package>
<package pkgid="5af3d4684fc08a3db492dedc89f94381d2dbe81efa5ef3e0a057acbec5a24a86" name="arphic-ukai-fonts" arch="noarch">
  <version epoch="0" ver="0.2.20080216.1" rel="150000.3.3.1"/>
  <changelog author="mfabian@suse.de" date="1191585600">- new package: ttf-arphic-ukai, version 0.1.20060928.</changelog>
  <changelog author="tiwai@suse.de" date="1270814400">- remove unnecessary buildrequires for too old distros</changelog>
  <changelog author="tiwai@suse.de" date="1324555200">- Renamed ttf-arphic-ukai -&gt; arphic-ukai-fonts according to
  openSUSE packaging guidelines and FATE#313035
  Adjusted Obsoletes and Provides accordingly</changelog>
  <changelog author="pgajdos@suse.com" date="1333022400">- SUSE-Arphic license</changelog>
  <changelog author="pgajdos@suse.com" date="1333368000">- updated to 20080216:
  * This release comes as TrueType Collection with 4 font flavors:
  * AR PL UKai CN: glyph shapes according to GB18030-2000
  * AR PL UKai HK: glyph shapes according to the Ming-Uni reference font
    and HKSCS printed material published by the HKSAR government
  * AR PL UKai TW: glyph styles according to CNS11643
  * AR PL UKai TW MBE: like "AR PL UKai TW" plus MBE glyph shapes in the
    Bopomofo Extended block used for Minnan and Hakka
  * For now, variants are only available for U+4EE4 and U+9AA8 as proof of
    concept. All other glyphs have the same style throughout all flavors.</changelog>
  <changelog author="pgajdos@suse.com" date="1337256000">- call spec-cleaner</changelog>
  <changelog author="pgajdos@suse.cz" date="1341403200">- amend spec file to reflect new font packaging scheme
  (see openFATE#313536);</changelog>
  <changelog author="pgajdos@suse.com" date="1762344000">- use %license tag [bsc#1252136]</changelog>
</package>
<package pkgid="c26416641608ec9fe6e547b2b18b3328963c60d8a8015a130f9272e0c89fd8eb" name="arphic-ukai-fonts" arch="src">
  <version epoch="0" ver="0.2.20080216.1" rel="150000.3.3.1"/>
  <changelog author="mfabian@suse.de" date="1191585600">- new package: ttf-arphic-ukai, version 0.1.20060928.</changelog>
  <changelog author="tiwai@suse.de" date="1270814400">- remove unnecessary buildrequires for too old distros</changelog>
  <changelog author="tiwai@suse.de" date="1324555200">- Renamed ttf-arphic-ukai -&gt; arphic-ukai-fonts according to
  openSUSE packaging guidelines and FATE#313035
  Adjusted Obsoletes and Provides accordingly</changelog>
  <changelog author="pgajdos@suse.com" date="1333022400">- SUSE-Arphic license</changelog>
  <changelog author="pgajdos@suse.com" date="1333368000">- updated to 20080216:
  * This release comes as TrueType Collection with 4 font flavors:
  * AR PL UKai CN: glyph shapes according to GB18030-2000
  * AR PL UKai HK: glyph shapes according to the Ming-Uni reference font
    and HKSCS printed material published by the HKSAR government
  * AR PL UKai TW: glyph styles according to CNS11643
  * AR PL UKai TW MBE: like "AR PL UKai TW" plus MBE glyph shapes in the
    Bopomofo Extended block used for Minnan and Hakka
  * For now, variants are only available for U+4EE4 and U+9AA8 as proof of
    concept. All other glyphs have the same style throughout all flavors.</changelog>
  <changelog author="pgajdos@suse.com" date="1337256000">- call spec-cleaner</changelog>
  <changelog author="pgajdos@suse.cz" date="1341403200">- amend spec file to reflect new font packaging scheme
  (see openFATE#313536);</changelog>
  <changelog author="pgajdos@suse.com" date="1762344000">- use %license tag [bsc#1252136]</changelog>
</package>
<package pkgid="b37c946ad9ec3bd523d3870752e866f29527ad2e6b788461596e3334406ec3e7" name="arphic-uming-fonts" arch="noarch">
  <version epoch="0" ver="0.2.20080216.1" rel="150000.3.3.1"/>
  <changelog author="mfabian@suse.de" date="1191585600">- new package: ttf-arphic-uming, version 0.1.20060928.</changelog>
  <changelog author="tiwai@suse.de" date="1270814400">- remove unnecessary buildrequires for too old distros</changelog>
  <changelog author="tiwai@suse.de" date="1324555200">- Renamed ttf-arphic-uming -&gt; arphic-uming-fonts according to
  openSUSE packaging guidelines and FATE#313035
  Adjusted Obsoletes and Provides accordingly</changelog>
  <changelog author="pgajdos@suse.com" date="1333022400">- SUSE-Arphic license</changelog>
  <changelog author="pgajdos@suse.com" date="1333368000">- updated to 0.2.20080216:
  * This release comes as TrueType Collection with 4 font flavors:
  * AR PL UMing CN: glyph shapes according to GB18030-2000
  * AR PL UMing HK: glyph shapes according to the Ming-Uni reference font
    and HKSCS printed material published by the HKSAR government
  * AR PL UMing TW: glyph styles according to CNS11643
  * AR PL UMing TW MBE: like "AR PL UMing TW" plus MBE glyph shapes in the
    Bopomofo Extended block used for Minnan and Hakka
  * For now, variants are only available for U+4EE4 and U+9AA8 as proof of
  concept. All other glyphs have the same style throughout all flavors.</changelog>
  <changelog author="pgajdos@suse.com" date="1337256000">- call spec-cleaner</changelog>
  <changelog author="pgajdos@suse.cz" date="1341403200">- amend spec file to reflect new font packaging scheme
  (see openFATE#313536);</changelog>
  <changelog author="pgajdos@suse.com" date="1762344000">- use %license tag [bsc#1252137]</changelog>
</package>
<package pkgid="01c581b5fdfa2eace964dbee8f52a1693650120ecd99953d92860f8bcc72b3a4" name="arphic-uming-fonts" arch="src">
  <version epoch="0" ver="0.2.20080216.1" rel="150000.3.3.1"/>
  <changelog author="mfabian@suse.de" date="1191585600">- new package: ttf-arphic-uming, version 0.1.20060928.</changelog>
  <changelog author="tiwai@suse.de" date="1270814400">- remove unnecessary buildrequires for too old distros</changelog>
  <changelog author="tiwai@suse.de" date="1324555200">- Renamed ttf-arphic-uming -&gt; arphic-uming-fonts according to
  openSUSE packaging guidelines and FATE#313035
  Adjusted Obsoletes and Provides accordingly</changelog>
  <changelog author="pgajdos@suse.com" date="1333022400">- SUSE-Arphic license</changelog>
  <changelog author="pgajdos@suse.com" date="1333368000">- updated to 0.2.20080216:
  * This release comes as TrueType Collection with 4 font flavors:
  * AR PL UMing CN: glyph shapes according to GB18030-2000
  * AR PL UMing HK: glyph shapes according to the Ming-Uni reference font
    and HKSCS printed material published by the HKSAR government
  * AR PL UMing TW: glyph styles according to CNS11643
  * AR PL UMing TW MBE: like "AR PL UMing TW" plus MBE glyph shapes in the
    Bopomofo Extended block used for Minnan and Hakka
  * For now, variants are only available for U+4EE4 and U+9AA8 as proof of
  concept. All other glyphs have the same style throughout all flavors.</changelog>
  <changelog author="pgajdos@suse.com" date="1337256000">- call spec-cleaner</changelog>
  <changelog author="pgajdos@suse.cz" date="1341403200">- amend spec file to reflect new font packaging scheme
  (see openFATE#313536);</changelog>
  <changelog author="pgajdos@suse.com" date="1762344000">- use %license tag [bsc#1252137]</changelog>
</package>
<package pkgid="a03f3cce7101e9a2d38cccc26ec732363dc1bbdba05acfcc85c546ef3a6535b7" name="augeas" arch="src">
  <version epoch="0" ver="1.14.1" rel="150600.3.3.1"/>
  <changelog author="vcizek@suse.com" date="1509019200">- Version update to 1.9.0:
  - General changes/additions
  * Fix error in handling escaped whitespace at the end of path expressions
    (addresses CVE-2017-7555)
  * several improvements to the error messages when transforming a tree
    back to text fails. They now make it clearer what part of the tree
    was problematic, and what the tree should have looked like.
  * Fixed the pkg-config file, which should now be usable
  * Fix handling of backslash-escaping in strings and regular expressions
    in the lens language. We used to handle constructs like "\\" and
    /\\\\/ incorrectly. (Issue #495)
  * do not unescape the default value of a del on create; otherwise we are
    double unescaping these strings (Issue #507)
  * remove tempfile when saving files because destination is not writable
    (Issue #479)
  * span information is now updated on save (Issue #467)
  * fix lots of warnings generated by gcc 7.1
  * Various changes to reduce bashisms in tests and make them run on
    FreeBSD (Romain Tartière)
  - API changes
  * add function aug_ns_attr to allow iterating through a nodeset
    quickly. See examples/dump.c for an example of how to use them
    instead of aug_get, aug_label etc. and for a way to measure
    performance gains.
  - Lens changes/additions
  * Ceph: new lens for /etc/ceph/ceph.conf
  * Cgconfig: accept fperm &amp; dperm in admin &amp; task (Pino Toscano)
  * Dovecot: also load files from /usr/local/etc (Roy Hubbard)
  * Exports: relax the rules for the path at the beginning of a line so
    that double-quoted paths are legal, too
  * Getcap: new lens to parse generic termcap-style capability databases
  * Grub: accept toplevel 'boot' entry (Pino Toscano)
  * Httpd: handle empty comments with a continuation line (Issue #423);
    handle '&gt;""' in a directive properly (Issue #429); make space between
    quoted arguments optional (Issue #435); accept quoted strings as part
    of bare arguments (Issue #470)
  * Nginx: load files from sites-available directory (Omer Katz) (Issue #471)
  * Nslcd: new lens for nss-pam-ldapd config (Jose Plana)
  * Oz: New lense for /etc/oz/oz.cnf
  * postfix lenses: also load files from /usr/local/etc (Roy Hubbard)
  * Properties: accept DOS line endings (Issue #468)
  * Rtadvd: new lens to parse the rtadvd configuration file (Matt Dainty)
  * Rsyslog: load files from /etc/rsyslog.d (Doug Wilson) (Issue #475);
    allow spaces before the # starting a comment; allow comments inside
    config statements like 'module'
  * Ssh: accept '=' to separate keyword from arguments
  * Sshd: split HostKeyAlgorithms into list of values; recognize quoted
    group names with spaces in them (Issue #477)
  * Sudoers: recognize "match_group_by_gid" (Luigi Toscano) (Issue #482)
  * Syslog: allow spaces before the # starting a comment
  * Termcap: new lens to parse termcap capability databases (Matt Dainty)
  * Vsftpd: accept seccomp_sandbox (Denys Stroebel)
  * Xymon: accept 'group-sorted' directive (Issue #462)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1521547200">- update to 1.10.1:
  General changes/additions
    New CLI utility 'augmatch' to print the tree for a file and select
    some of its contents
    New command 'count' in augtool
    New function 'not(bool) -&gt; bool' for path expressions
    The path expression 'label[. = "value"]' can now be written more
    concisely as 'label["value"]'
  API changes
    libfa has now a function fa_json to export an FA as a JSON file, and
    fa_state_* functions that make it possible to iterate over the FA's
    states and transitions. (Pedro Valero Mejia)
    Add functions aug_ns_label, aug_ns_value, aug_ns_count, and
    aug_ns_path to get the label (with index), the value, the number of
    nodes, and the fully qualified path for nodes stored in a nodeset in
    a variable efficiently
  Lens changes/additions
    Grubenv: new lens to process /boot/grub/grubenv (omgold)
    Httpd: also read files from /etc/httpd/conf.modules.d/*.conf
    (Tomas Meszaros) (Issue #537)
    Nsswitch: allow comments at the end of a line (Philip Hahn) (Issue #517)
    Ntp: accept 'ntpsigndsocket' statement (Philip Hahn) (Issue #516)
    Properties: accept empty comments with DOS line endings (Issue #161)
    Rancid: new lens for RANCiD router databases (Matt Dainty)
    Resolv: accept empty comments with DOS line endings (Issue #161)
    Systemd: also process /etc/systemd/logind.conf (Pat Riehecky)
    YAML: process a document that is just a sequence (John Vandenberg)
- drop chrpath dependency, the offending dump binary is no longer shipped</changelog>
  <changelog author="jengelh@inai.de" date="1521547201">- Fix RPM groups.</changelog>
  <changelog author="ecsos@opensuse.org" date="1545652800">- update to 1.11.0
  General changes/additions
  - augmatch: add a --quiet option; make the exit status useful
    to tell whether there was a match or not
  - Drastically reduce the amount of memory needed to evaluate
    complex path expressions against large files (Issue #569)
  - Fix a segfault on OSX when 'augmatch' is run without any
    arguments (Issue #556)
  API changes
  - aug_source did not in fact return the source; and always
    returned NULL for that. That has been fixed.
  Lens changes/additions
  - Chrony: add new options supported in chrony 3.2 and 3.3
    (Miroslav Lichvar)
  - Dhclient: fix parsing of append/prepend and similar
    directives (John Morrissey)
  - Fstab: allow leading whitespace in mount entry lines
    (Pino Toscano) (Issue #544)
  - Grub: tolerate some invalid entries. Those invalid entries
    get mapped to '#error' nodes
  - Httpd: accept comments with whitespace right after a tag
    opening a section (Issue #577)
  - Json: allow escaped slashes in strings (Issue #557)
  - Multipath: accept regular expressions for devnode, wwid,
    and property in blacklist and blacklist_exceptions sections
    (Issue #564)
  - Nginx: parse /etc/nginx/sites-enabled (plumbeo) allow
    semicolons inside double quoted strings in simple directives,
    and allow simple directives without an argument (Issue #566)
  - Redis: accept the 'bind' statement with multiple IP addresses
    (yannh) (Issue #194)
  - Rsyslog: support include() directive introduced in
    rsyslog 8.33
  - Strongswan: new lens (Kaarle Ritvanen)
  - Systemd: do not try to treat *.d or *.wants directories as
    configuration files (Issue #548)</changelog>
  <changelog author="vcizek@suse.com" date="1549972800">- Don't ignore %check test result, the testsuite now successfully
  passes</changelog>
  <changelog author="mliska@suse.cz" date="1552305600">- Add gcc9-disable-broken-test.patch in order to address bsc#1120894.</changelog>
  <changelog author="elimat@opensuse.org" date="1594123200">- update to 1.12.0
  General changes/additions
  - update gnulib to 91584ed6
  Lens changes/additions
  - Anaconda: new lens to process /etc/sysconfig/anaconda instead of Shellvars (Pino Toscano) (Issue #597)
  - DevfsRules: add lens for FreeBSD devfs.rules files
  - Dovecot: permit ! in block titles (Nathan Ward) (Issue #599)
  - Hostname: Allow creation of hostname when file is missing (David Farrell) (Issue #606)
  - Krb5: add more pkinit_* options (Issue #603)
  - Logrotate: fix missing recognition of double quoted filenames (Issue #611)
  - Multipath: accept values enclosed in quotes (Issue #583)
  - Nginx: support unix sockets as server address (Issue #618)
  - Nsswitch: add merge action (Issue #609)
  - Pam: accept continuation lines (Issue #590)
  - Puppetfile: allow symbols as (optional) values (Issue #619) allow comments in entries (Issue #620)
  - Rsyslog: support dynamic file paths (Issue #622) treat #!/+/- as comment (arnolda, PR #595)
  - Syslog: accept 'include' directive (Issue #486)
  - Semanage: new lens to process /etc/selinux/semanage.conf instead of Simplevars (Pino Toscano) (Issue #594)
  - Shellvars: allow and/or in @if conditions (#582) accept functions wrapped in round brackets, accept variables with a dash in their name, exclude csh/tcsh profile scripts (Pino Toscano) (Issue #600) accept variable as command (Issue #601)
  - Ssh: accept RekeyLimit (Issue #605)
  - Sshd: accept '=' to separate option names from their values (Emil Dragu, #587)
  - Sudoers: support 'always_query_group_plugin' flag (Steve Traylen, #588)
  - Strongswan: parse lists. This is a backwards-incompatible change since list entries that were parsed into a single string are now split into a list of entries (Kaarle Ritvanen)
  - Toml: new lens to parse .toml files (PR #91)
  - Xorg: accept empty values for options (arnolda, PR #596)
- refresh patches
- run spec-cleaner</changelog>
  <changelog author="jsikes@suse.com" date="1612872000">- Add new directives and options supported in chrony since 3.3 up to 4.0.
  * augeas-new_options_for_chrony.patch
  * [bsc#1178470]
  * sourced from https://github.com/hercules-team/augeas/pull/698</changelog>
  <changelog author="jsikes@suse.com" date="1622030400">- Allow all printable ASCII characters in WPA-PSK definition
  * augeas-allow_printable_ASCII.patch
  * bsc#1185524
  * Sourced from https://github.com/hercules-team/augeas/pull/723/commits
  * Credit to Michal Filka &lt;mfilka@suse.com&gt;</changelog>
  <changelog author="dmueller@suse.com" date="1623153600">- add remove-unportable-tests.patch to fix build</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- testsuite requires glibc-locale, buildrequire it</changelog>
  <changelog author="david.anes@suse.com" date="1649246400">- add augeas-sysctl_parsing.patch (bsc#1197443)
  * backport original patch and rebase</changelog>
  <changelog author="jengelh@inai.de" date="1650974400">- Employ shared library packaging guideline and resolve this
  rpmlint report: "libaugeas0.x86_64: E: shlib-policy-name-error
  SONAME: libfa.so.1, expected package suffix: 1" [boo#1191749]</changelog>
  <changelog author="fvogt@suse.com" date="1658836800">- Unset MALLOC_PERTURB_ to speed up %check significantly
  (boo#1201884, gh#hercules-team#768)</changelog>
  <changelog author="jsikes@suse.com" date="1667563200">- Update to 1.13.0
  * Fixes bsc#1204554
  * Added augeas-1.13.0-replace_security_context_t-patch to fix a
    syntax error.
  * Rebased gcc9-disable-broken-test.patch
  * Dropped the following patches since they are now upstreamed:
  - augeas-new_options_for_chrony.patch
  - augeas-allow_printable_ASCII.patch
  - remove-unportable-tests.patch
  * General changes/additions
  - Add Dockerfile (Nicolas Gif) (Issue #650)
  - augtool: Improved readline integration to handle quoting
    issues (Pino Toscano)
  - typechecker: Allow including '/' in keys and labels. Thanks
    to felixdoerre for pointing out that this restriction was
    unnecessary. See issue #668 for the discussion.
  - Add function modified() to select nodes which are marked as
    dirty (George Hansper) (Issue #691)
  - Add CLI command 'preview' and API 'aug_preview' to preview
    file contents (George Hansper) (#690)
  - Add "else" operator to augeas path-filter expressions
    (priority selector) (George Hansper) (#692)
  - Add new axis 'seq' to allow /path/seq::*[expr] to match and
    create numeric nodes, as idempotent alternative to
    /path/*[expr] (George Hansper) (#706)
  * Lens changes/additions
  - Authinfo2: new lens to parse Authinfo2 format (Nicolas Gif)
    (Issue #649)
  - Chrony: add new options (Miroslav Lichvar) (Issue #698)
  - Cmdline: New lens to parse /proc/cmdline (Thomas Weißschuh)
  - Crypttab: support UUID in device and / in opt (Raphaël
    Pinson) (#713)
  - Fail2ban: new lens to parse Fail2ban format (Nicolas Gif)
    (Issue #651)
  - Grub: support '+' in kernel command line option names (Pino
    Toscano) (Issue #647)
  - Krb5: handle [plugins] subsection (Pino Toscano) (Issue #663)
  - Limits: support colons in the domain pattern of the limits
    lens (Xavier Mol) (Issue #645)
  - Logrotate: add hourly schedule (Jason A. Smith) (Issue #655)
  - Mke2fs: parse more common entries between [defaults] and the
    tags in [fs_types], fix the type of few entries, handle the
    [options] stanza (Pino Toscano) (Issue #642)
  - support quoted values (Pino Toscano) (Issue #661)
  - NetworkManager: allow # in values (mfilka) (#723)
  - Opendkim: update to match current conffile format (Issue #644)
  - Postfix_Master: Allow unix-dgram as type (Issue #635)
  - Postfix_transport: Allow underscore (Anton Baranov) (Issue #678)
  - Postgresql: Allow hyphen '-' in values that don't require quotes
    (Marcin Barczyński) (Issues #700 #701)
  - Properties: Allow "/" in property names (felixdoerre) (Issue #680)
  - Redis: add incl path /etc/redis.conf (Raphaël Pinson) (#726)
  - support "replicaof" (Raphaël Pinson) (#727)
  - fix support for "sentinel" (Raphaël Pinson) (#728)
  - Resolv: Support new options (Trevor Vaughan) (Issues #707 #708)
  - Rsyslog: support multiple actions in filters and selectors (Issue
    [#653])
  - Shellvars: exclude more tcsh profile scripts (Pino Toscano) (Issue
    [#627])
  - Simplevars: add ocsinventory-agent.cfg (Pat Riehecky) (Issue #637)
  - Sudoers: support new @include/@includedir directives (Pino
    Toscano) (Issue #693)
  - Sudoers: Allow AD groups (luchihoratiu) (Issue #696)
  - Support negative integers (Ando David Roots) (#724)
  - Ssh: add Match keyword support (granquet) (Issue #695)
  - Sshd: support quotes in Match conditions (Issue #739)
  - Systemd: fix parsing of envvars with spaces (Pino Toscano) (#659)
  - Add incl paths according to 'systemd.network(5)' (chruetli) (#683)
  - Tinc: new lens for Tinc VPN configuration files (Thomas Weißschuh)
    (#718)
  - Toml: support arrays (norec) in inline tables (Raphaël Pinson)
    (#703)
  - Tmpfiles: improvements to the types specification (Pino Toscano)
    (Issue #694)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680782400">- Use the correct license - LGPL-2.1</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update to 1.14.0
  * General changes/additions
  - Update submodule gnulib to 2f7479a16a3395f1429c7795f10c5d19b9b4453e
    (#781)
  - Add bash-completion for augtool, augmatch, augprint (#783) George
    Hansper
  - Fix: Allow values to contain arbitrary unbalanced square brackets
    (#782) George Hansper
  - Add package bash to build stage in Dockerfile (#776) George Hansper
  - Add augprint tool for creating idempotent augtool scripts (#752) George
    Hansper
  - Replace deprecated 'security_context_t' with 'char *' (#747) Leo-Schmit
  - src/syntax.c: Fix whitespace which confuses static checkers
    (#725) rwmjones
  - README.md: Add oss-fuzz status badge (#702) Sergey Nizovtsev
  - Package augmatch, too (#688) oleksandriegorov
  - Add Github workflow to create releases with complete source tarballs
    (#744) Hilko Bengen
  * Lens changes/additions
  - Resolv: add option trust-ad (#784) George Hansper
  - Sos: new lens for /etc/sos/sos.conf (based on IniFile) (#779) George
    Hansper
  - Pg_Hba: unquoted auth-method may contain hyphens (#777) George Hansper
  - Sysctl: Allow keys to contain * and : and / characters (#755) M Filka
  - Semanage: Fix parsing of ignoredirs (#758) Richard W M Jones
  - Systemd: allow empty quoted environment variable values (#757) Michal
    Vasko
  - Systemd: allow values starting with whitespaces for Exec* and
    Environment service entries. (#757) Michal Vasko
  - Toml: workaround to allow writing toml files (#742) Richard
  - Kdump: parse "auto_reset_crashkernel" (#754) Laszlo Ersek
  - Keepalived: add parameters notify_stop and notify_deleted (#749) Adam
    Bambuch
  - Chrony: add new directives and options (#745) Miroslav Lichvar
  - Redis: Allow redis lens to set 'SAVE ""' as a valid option (#738) Mitch
    Hagstrand
  - ClamAV: update ClamAV lens to autoload /etc/clamav/*.conf
    (#748) Guillaume Ross
  - AuthselectPam: new lens for /etc/authselect/custom/*/*-auth
    and /etc/authselect/custom/*/postlogin (#743) Heston Snodgrass
  - Sshd: Parse GSSAPIKexAlgorithms PubkeyAcceptedKeyTypes
    CASignatureAlgorithms as comma-seperated lists instead of simple
    strings (#721) Edward Garbade
  - Yum: Add additional unit tests (#677) Pat Riehecky
  - Cockpit: new lens for /etc/cockpit/cockpit.conf (#675) Pat Riehecky
  * Rebased patch gcc9-disable-broken-test.patch
  * Deleted patches:
  - augeas-sysctl_parsing.patch
  - augeas-1.13.0-replace_security_context_t-patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1692878400">- Update to 1.14.1 (jsc#PED-6581)
  * General changes/additions
  - internal.c: update #if to only use GNU-specific strerror_r() when GLIBC
    is defined (#791) Dimitry Andric
  - augeas.c: Fix bug from PR#691 where the nodes of a newly created file
    are lost upon a subsequent load operation (#810) George Hansper
  - HACKING.md: describe testing (#796) Laszlo Ersek
  - Add GitHub Actions (#714) Raphaël Pinson
  - augprint.c: remove #include &lt;malloc.h&gt; , add #include &lt;libgen.h&gt;
    (#792) Ruoyu Zhong
  * Lens changes/additions
  - TOML: support trailing commas in arrays (#809) Bao
  - Tmpfiles: allow '=', '~', '^' for letter types, allow ":" as prefix for
    the mode (#805) Pino Toscano
  - Sshd: Add keyword PubkeyAcceptedAlgorithms as comma-separated list of
    items (#806) Dave Re
  - Cmdline: Allow whitespace at the end of kernel commnd line
    (#798) rwmjones</changelog>
  <changelog author="martin.schreiner@suse.com" date="1745409600">- Add patch, fix for bsc#1239909 / CVE-2025-2588:
  * CVE-2025-2588.patch</changelog>
</package>
<package pkgid="e132030d60cdfd511438b5897ddb69e94e2efa12d320be24a7a050afeac096fd" name="augeas" arch="x86_64">
  <version epoch="0" ver="1.14.1" rel="150600.3.3.1"/>
  <changelog author="vcizek@suse.com" date="1509019200">- Version update to 1.9.0:
  - General changes/additions
  * Fix error in handling escaped whitespace at the end of path expressions
    (addresses CVE-2017-7555)
  * several improvements to the error messages when transforming a tree
    back to text fails. They now make it clearer what part of the tree
    was problematic, and what the tree should have looked like.
  * Fixed the pkg-config file, which should now be usable
  * Fix handling of backslash-escaping in strings and regular expressions
    in the lens language. We used to handle constructs like "\\" and
    /\\\\/ incorrectly. (Issue #495)
  * do not unescape the default value of a del on create; otherwise we are
    double unescaping these strings (Issue #507)
  * remove tempfile when saving files because destination is not writable
    (Issue #479)
  * span information is now updated on save (Issue #467)
  * fix lots of warnings generated by gcc 7.1
  * Various changes to reduce bashisms in tests and make them run on
    FreeBSD (Romain Tartière)
  - API changes
  * add function aug_ns_attr to allow iterating through a nodeset
    quickly. See examples/dump.c for an example of how to use them
    instead of aug_get, aug_label etc. and for a way to measure
    performance gains.
  - Lens changes/additions
  * Ceph: new lens for /etc/ceph/ceph.conf
  * Cgconfig: accept fperm &amp; dperm in admin &amp; task (Pino Toscano)
  * Dovecot: also load files from /usr/local/etc (Roy Hubbard)
  * Exports: relax the rules for the path at the beginning of a line so
    that double-quoted paths are legal, too
  * Getcap: new lens to parse generic termcap-style capability databases
  * Grub: accept toplevel 'boot' entry (Pino Toscano)
  * Httpd: handle empty comments with a continuation line (Issue #423);
    handle '&gt;""' in a directive properly (Issue #429); make space between
    quoted arguments optional (Issue #435); accept quoted strings as part
    of bare arguments (Issue #470)
  * Nginx: load files from sites-available directory (Omer Katz) (Issue #471)
  * Nslcd: new lens for nss-pam-ldapd config (Jose Plana)
  * Oz: New lense for /etc/oz/oz.cnf
  * postfix lenses: also load files from /usr/local/etc (Roy Hubbard)
  * Properties: accept DOS line endings (Issue #468)
  * Rtadvd: new lens to parse the rtadvd configuration file (Matt Dainty)
  * Rsyslog: load files from /etc/rsyslog.d (Doug Wilson) (Issue #475);
    allow spaces before the # starting a comment; allow comments inside
    config statements like 'module'
  * Ssh: accept '=' to separate keyword from arguments
  * Sshd: split HostKeyAlgorithms into list of values; recognize quoted
    group names with spaces in them (Issue #477)
  * Sudoers: recognize "match_group_by_gid" (Luigi Toscano) (Issue #482)
  * Syslog: allow spaces before the # starting a comment
  * Termcap: new lens to parse termcap capability databases (Matt Dainty)
  * Vsftpd: accept seccomp_sandbox (Denys Stroebel)
  * Xymon: accept 'group-sorted' directive (Issue #462)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1521547200">- update to 1.10.1:
  General changes/additions
    New CLI utility 'augmatch' to print the tree for a file and select
    some of its contents
    New command 'count' in augtool
    New function 'not(bool) -&gt; bool' for path expressions
    The path expression 'label[. = "value"]' can now be written more
    concisely as 'label["value"]'
  API changes
    libfa has now a function fa_json to export an FA as a JSON file, and
    fa_state_* functions that make it possible to iterate over the FA's
    states and transitions. (Pedro Valero Mejia)
    Add functions aug_ns_label, aug_ns_value, aug_ns_count, and
    aug_ns_path to get the label (with index), the value, the number of
    nodes, and the fully qualified path for nodes stored in a nodeset in
    a variable efficiently
  Lens changes/additions
    Grubenv: new lens to process /boot/grub/grubenv (omgold)
    Httpd: also read files from /etc/httpd/conf.modules.d/*.conf
    (Tomas Meszaros) (Issue #537)
    Nsswitch: allow comments at the end of a line (Philip Hahn) (Issue #517)
    Ntp: accept 'ntpsigndsocket' statement (Philip Hahn) (Issue #516)
    Properties: accept empty comments with DOS line endings (Issue #161)
    Rancid: new lens for RANCiD router databases (Matt Dainty)
    Resolv: accept empty comments with DOS line endings (Issue #161)
    Systemd: also process /etc/systemd/logind.conf (Pat Riehecky)
    YAML: process a document that is just a sequence (John Vandenberg)
- drop chrpath dependency, the offending dump binary is no longer shipped</changelog>
  <changelog author="jengelh@inai.de" date="1521547201">- Fix RPM groups.</changelog>
  <changelog author="ecsos@opensuse.org" date="1545652800">- update to 1.11.0
  General changes/additions
  - augmatch: add a --quiet option; make the exit status useful
    to tell whether there was a match or not
  - Drastically reduce the amount of memory needed to evaluate
    complex path expressions against large files (Issue #569)
  - Fix a segfault on OSX when 'augmatch' is run without any
    arguments (Issue #556)
  API changes
  - aug_source did not in fact return the source; and always
    returned NULL for that. That has been fixed.
  Lens changes/additions
  - Chrony: add new options supported in chrony 3.2 and 3.3
    (Miroslav Lichvar)
  - Dhclient: fix parsing of append/prepend and similar
    directives (John Morrissey)
  - Fstab: allow leading whitespace in mount entry lines
    (Pino Toscano) (Issue #544)
  - Grub: tolerate some invalid entries. Those invalid entries
    get mapped to '#error' nodes
  - Httpd: accept comments with whitespace right after a tag
    opening a section (Issue #577)
  - Json: allow escaped slashes in strings (Issue #557)
  - Multipath: accept regular expressions for devnode, wwid,
    and property in blacklist and blacklist_exceptions sections
    (Issue #564)
  - Nginx: parse /etc/nginx/sites-enabled (plumbeo) allow
    semicolons inside double quoted strings in simple directives,
    and allow simple directives without an argument (Issue #566)
  - Redis: accept the 'bind' statement with multiple IP addresses
    (yannh) (Issue #194)
  - Rsyslog: support include() directive introduced in
    rsyslog 8.33
  - Strongswan: new lens (Kaarle Ritvanen)
  - Systemd: do not try to treat *.d or *.wants directories as
    configuration files (Issue #548)</changelog>
  <changelog author="vcizek@suse.com" date="1549972800">- Don't ignore %check test result, the testsuite now successfully
  passes</changelog>
  <changelog author="mliska@suse.cz" date="1552305600">- Add gcc9-disable-broken-test.patch in order to address bsc#1120894.</changelog>
  <changelog author="elimat@opensuse.org" date="1594123200">- update to 1.12.0
  General changes/additions
  - update gnulib to 91584ed6
  Lens changes/additions
  - Anaconda: new lens to process /etc/sysconfig/anaconda instead of Shellvars (Pino Toscano) (Issue #597)
  - DevfsRules: add lens for FreeBSD devfs.rules files
  - Dovecot: permit ! in block titles (Nathan Ward) (Issue #599)
  - Hostname: Allow creation of hostname when file is missing (David Farrell) (Issue #606)
  - Krb5: add more pkinit_* options (Issue #603)
  - Logrotate: fix missing recognition of double quoted filenames (Issue #611)
  - Multipath: accept values enclosed in quotes (Issue #583)
  - Nginx: support unix sockets as server address (Issue #618)
  - Nsswitch: add merge action (Issue #609)
  - Pam: accept continuation lines (Issue #590)
  - Puppetfile: allow symbols as (optional) values (Issue #619) allow comments in entries (Issue #620)
  - Rsyslog: support dynamic file paths (Issue #622) treat #!/+/- as comment (arnolda, PR #595)
  - Syslog: accept 'include' directive (Issue #486)
  - Semanage: new lens to process /etc/selinux/semanage.conf instead of Simplevars (Pino Toscano) (Issue #594)
  - Shellvars: allow and/or in @if conditions (#582) accept functions wrapped in round brackets, accept variables with a dash in their name, exclude csh/tcsh profile scripts (Pino Toscano) (Issue #600) accept variable as command (Issue #601)
  - Ssh: accept RekeyLimit (Issue #605)
  - Sshd: accept '=' to separate option names from their values (Emil Dragu, #587)
  - Sudoers: support 'always_query_group_plugin' flag (Steve Traylen, #588)
  - Strongswan: parse lists. This is a backwards-incompatible change since list entries that were parsed into a single string are now split into a list of entries (Kaarle Ritvanen)
  - Toml: new lens to parse .toml files (PR #91)
  - Xorg: accept empty values for options (arnolda, PR #596)
- refresh patches
- run spec-cleaner</changelog>
  <changelog author="jsikes@suse.com" date="1612872000">- Add new directives and options supported in chrony since 3.3 up to 4.0.
  * augeas-new_options_for_chrony.patch
  * [bsc#1178470]
  * sourced from https://github.com/hercules-team/augeas/pull/698</changelog>
  <changelog author="jsikes@suse.com" date="1622030400">- Allow all printable ASCII characters in WPA-PSK definition
  * augeas-allow_printable_ASCII.patch
  * bsc#1185524
  * Sourced from https://github.com/hercules-team/augeas/pull/723/commits
  * Credit to Michal Filka &lt;mfilka@suse.com&gt;</changelog>
  <changelog author="dmueller@suse.com" date="1623153600">- add remove-unportable-tests.patch to fix build</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- testsuite requires glibc-locale, buildrequire it</changelog>
  <changelog author="david.anes@suse.com" date="1649246400">- add augeas-sysctl_parsing.patch (bsc#1197443)
  * backport original patch and rebase</changelog>
  <changelog author="jengelh@inai.de" date="1650974400">- Employ shared library packaging guideline and resolve this
  rpmlint report: "libaugeas0.x86_64: E: shlib-policy-name-error
  SONAME: libfa.so.1, expected package suffix: 1" [boo#1191749]</changelog>
  <changelog author="fvogt@suse.com" date="1658836800">- Unset MALLOC_PERTURB_ to speed up %check significantly
  (boo#1201884, gh#hercules-team#768)</changelog>
  <changelog author="jsikes@suse.com" date="1667563200">- Update to 1.13.0
  * Fixes bsc#1204554
  * Added augeas-1.13.0-replace_security_context_t-patch to fix a
    syntax error.
  * Rebased gcc9-disable-broken-test.patch
  * Dropped the following patches since they are now upstreamed:
  - augeas-new_options_for_chrony.patch
  - augeas-allow_printable_ASCII.patch
  - remove-unportable-tests.patch
  * General changes/additions
  - Add Dockerfile (Nicolas Gif) (Issue #650)
  - augtool: Improved readline integration to handle quoting
    issues (Pino Toscano)
  - typechecker: Allow including '/' in keys and labels. Thanks
    to felixdoerre for pointing out that this restriction was
    unnecessary. See issue #668 for the discussion.
  - Add function modified() to select nodes which are marked as
    dirty (George Hansper) (Issue #691)
  - Add CLI command 'preview' and API 'aug_preview' to preview
    file contents (George Hansper) (#690)
  - Add "else" operator to augeas path-filter expressions
    (priority selector) (George Hansper) (#692)
  - Add new axis 'seq' to allow /path/seq::*[expr] to match and
    create numeric nodes, as idempotent alternative to
    /path/*[expr] (George Hansper) (#706)
  * Lens changes/additions
  - Authinfo2: new lens to parse Authinfo2 format (Nicolas Gif)
    (Issue #649)
  - Chrony: add new options (Miroslav Lichvar) (Issue #698)
  - Cmdline: New lens to parse /proc/cmdline (Thomas Weißschuh)
  - Crypttab: support UUID in device and / in opt (Raphaël
    Pinson) (#713)
  - Fail2ban: new lens to parse Fail2ban format (Nicolas Gif)
    (Issue #651)
  - Grub: support '+' in kernel command line option names (Pino
    Toscano) (Issue #647)
  - Krb5: handle [plugins] subsection (Pino Toscano) (Issue #663)
  - Limits: support colons in the domain pattern of the limits
    lens (Xavier Mol) (Issue #645)
  - Logrotate: add hourly schedule (Jason A. Smith) (Issue #655)
  - Mke2fs: parse more common entries between [defaults] and the
    tags in [fs_types], fix the type of few entries, handle the
    [options] stanza (Pino Toscano) (Issue #642)
  - support quoted values (Pino Toscano) (Issue #661)
  - NetworkManager: allow # in values (mfilka) (#723)
  - Opendkim: update to match current conffile format (Issue #644)
  - Postfix_Master: Allow unix-dgram as type (Issue #635)
  - Postfix_transport: Allow underscore (Anton Baranov) (Issue #678)
  - Postgresql: Allow hyphen '-' in values that don't require quotes
    (Marcin Barczyński) (Issues #700 #701)
  - Properties: Allow "/" in property names (felixdoerre) (Issue #680)
  - Redis: add incl path /etc/redis.conf (Raphaël Pinson) (#726)
  - support "replicaof" (Raphaël Pinson) (#727)
  - fix support for "sentinel" (Raphaël Pinson) (#728)
  - Resolv: Support new options (Trevor Vaughan) (Issues #707 #708)
  - Rsyslog: support multiple actions in filters and selectors (Issue
    [#653])
  - Shellvars: exclude more tcsh profile scripts (Pino Toscano) (Issue
    [#627])
  - Simplevars: add ocsinventory-agent.cfg (Pat Riehecky) (Issue #637)
  - Sudoers: support new @include/@includedir directives (Pino
    Toscano) (Issue #693)
  - Sudoers: Allow AD groups (luchihoratiu) (Issue #696)
  - Support negative integers (Ando David Roots) (#724)
  - Ssh: add Match keyword support (granquet) (Issue #695)
  - Sshd: support quotes in Match conditions (Issue #739)
  - Systemd: fix parsing of envvars with spaces (Pino Toscano) (#659)
  - Add incl paths according to 'systemd.network(5)' (chruetli) (#683)
  - Tinc: new lens for Tinc VPN configuration files (Thomas Weißschuh)
    (#718)
  - Toml: support arrays (norec) in inline tables (Raphaël Pinson)
    (#703)
  - Tmpfiles: improvements to the types specification (Pino Toscano)
    (Issue #694)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680782400">- Use the correct license - LGPL-2.1</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update to 1.14.0
  * General changes/additions
  - Update submodule gnulib to 2f7479a16a3395f1429c7795f10c5d19b9b4453e
    (#781)
  - Add bash-completion for augtool, augmatch, augprint (#783) George
    Hansper
  - Fix: Allow values to contain arbitrary unbalanced square brackets
    (#782) George Hansper
  - Add package bash to build stage in Dockerfile (#776) George Hansper
  - Add augprint tool for creating idempotent augtool scripts (#752) George
    Hansper
  - Replace deprecated 'security_context_t' with 'char *' (#747) Leo-Schmit
  - src/syntax.c: Fix whitespace which confuses static checkers
    (#725) rwmjones
  - README.md: Add oss-fuzz status badge (#702) Sergey Nizovtsev
  - Package augmatch, too (#688) oleksandriegorov
  - Add Github workflow to create releases with complete source tarballs
    (#744) Hilko Bengen
  * Lens changes/additions
  - Resolv: add option trust-ad (#784) George Hansper
  - Sos: new lens for /etc/sos/sos.conf (based on IniFile) (#779) George
    Hansper
  - Pg_Hba: unquoted auth-method may contain hyphens (#777) George Hansper
  - Sysctl: Allow keys to contain * and : and / characters (#755) M Filka
  - Semanage: Fix parsing of ignoredirs (#758) Richard W M Jones
  - Systemd: allow empty quoted environment variable values (#757) Michal
    Vasko
  - Systemd: allow values starting with whitespaces for Exec* and
    Environment service entries. (#757) Michal Vasko
  - Toml: workaround to allow writing toml files (#742) Richard
  - Kdump: parse "auto_reset_crashkernel" (#754) Laszlo Ersek
  - Keepalived: add parameters notify_stop and notify_deleted (#749) Adam
    Bambuch
  - Chrony: add new directives and options (#745) Miroslav Lichvar
  - Redis: Allow redis lens to set 'SAVE ""' as a valid option (#738) Mitch
    Hagstrand
  - ClamAV: update ClamAV lens to autoload /etc/clamav/*.conf
    (#748) Guillaume Ross
  - AuthselectPam: new lens for /etc/authselect/custom/*/*-auth
    and /etc/authselect/custom/*/postlogin (#743) Heston Snodgrass
  - Sshd: Parse GSSAPIKexAlgorithms PubkeyAcceptedKeyTypes
    CASignatureAlgorithms as comma-seperated lists instead of simple
    strings (#721) Edward Garbade
  - Yum: Add additional unit tests (#677) Pat Riehecky
  - Cockpit: new lens for /etc/cockpit/cockpit.conf (#675) Pat Riehecky
  * Rebased patch gcc9-disable-broken-test.patch
  * Deleted patches:
  - augeas-sysctl_parsing.patch
  - augeas-1.13.0-replace_security_context_t-patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1692878400">- Update to 1.14.1 (jsc#PED-6581)
  * General changes/additions
  - internal.c: update #if to only use GNU-specific strerror_r() when GLIBC
    is defined (#791) Dimitry Andric
  - augeas.c: Fix bug from PR#691 where the nodes of a newly created file
    are lost upon a subsequent load operation (#810) George Hansper
  - HACKING.md: describe testing (#796) Laszlo Ersek
  - Add GitHub Actions (#714) Raphaël Pinson
  - augprint.c: remove #include &lt;malloc.h&gt; , add #include &lt;libgen.h&gt;
    (#792) Ruoyu Zhong
  * Lens changes/additions
  - TOML: support trailing commas in arrays (#809) Bao
  - Tmpfiles: allow '=', '~', '^' for letter types, allow ":" as prefix for
    the mode (#805) Pino Toscano
  - Sshd: Add keyword PubkeyAcceptedAlgorithms as comma-separated list of
    items (#806) Dave Re
  - Cmdline: Allow whitespace at the end of kernel commnd line
    (#798) rwmjones</changelog>
  <changelog author="martin.schreiner@suse.com" date="1745409600">- Add patch, fix for bsc#1239909 / CVE-2025-2588:
  * CVE-2025-2588.patch</changelog>
</package>
<package pkgid="6a38d954cd9aa96d68b0d06146ede93c7212cbba2a98ba6f722282d3dfacd463" name="augeas-devel" arch="x86_64">
  <version epoch="0" ver="1.14.1" rel="150600.3.3.1"/>
  <changelog author="vcizek@suse.com" date="1509019200">- Version update to 1.9.0:
  - General changes/additions
  * Fix error in handling escaped whitespace at the end of path expressions
    (addresses CVE-2017-7555)
  * several improvements to the error messages when transforming a tree
    back to text fails. They now make it clearer what part of the tree
    was problematic, and what the tree should have looked like.
  * Fixed the pkg-config file, which should now be usable
  * Fix handling of backslash-escaping in strings and regular expressions
    in the lens language. We used to handle constructs like "\\" and
    /\\\\/ incorrectly. (Issue #495)
  * do not unescape the default value of a del on create; otherwise we are
    double unescaping these strings (Issue #507)
  * remove tempfile when saving files because destination is not writable
    (Issue #479)
  * span information is now updated on save (Issue #467)
  * fix lots of warnings generated by gcc 7.1
  * Various changes to reduce bashisms in tests and make them run on
    FreeBSD (Romain Tartière)
  - API changes
  * add function aug_ns_attr to allow iterating through a nodeset
    quickly. See examples/dump.c for an example of how to use them
    instead of aug_get, aug_label etc. and for a way to measure
    performance gains.
  - Lens changes/additions
  * Ceph: new lens for /etc/ceph/ceph.conf
  * Cgconfig: accept fperm &amp; dperm in admin &amp; task (Pino Toscano)
  * Dovecot: also load files from /usr/local/etc (Roy Hubbard)
  * Exports: relax the rules for the path at the beginning of a line so
    that double-quoted paths are legal, too
  * Getcap: new lens to parse generic termcap-style capability databases
  * Grub: accept toplevel 'boot' entry (Pino Toscano)
  * Httpd: handle empty comments with a continuation line (Issue #423);
    handle '&gt;""' in a directive properly (Issue #429); make space between
    quoted arguments optional (Issue #435); accept quoted strings as part
    of bare arguments (Issue #470)
  * Nginx: load files from sites-available directory (Omer Katz) (Issue #471)
  * Nslcd: new lens for nss-pam-ldapd config (Jose Plana)
  * Oz: New lense for /etc/oz/oz.cnf
  * postfix lenses: also load files from /usr/local/etc (Roy Hubbard)
  * Properties: accept DOS line endings (Issue #468)
  * Rtadvd: new lens to parse the rtadvd configuration file (Matt Dainty)
  * Rsyslog: load files from /etc/rsyslog.d (Doug Wilson) (Issue #475);
    allow spaces before the # starting a comment; allow comments inside
    config statements like 'module'
  * Ssh: accept '=' to separate keyword from arguments
  * Sshd: split HostKeyAlgorithms into list of values; recognize quoted
    group names with spaces in them (Issue #477)
  * Sudoers: recognize "match_group_by_gid" (Luigi Toscano) (Issue #482)
  * Syslog: allow spaces before the # starting a comment
  * Termcap: new lens to parse termcap capability databases (Matt Dainty)
  * Vsftpd: accept seccomp_sandbox (Denys Stroebel)
  * Xymon: accept 'group-sorted' directive (Issue #462)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1521547200">- update to 1.10.1:
  General changes/additions
    New CLI utility 'augmatch' to print the tree for a file and select
    some of its contents
    New command 'count' in augtool
    New function 'not(bool) -&gt; bool' for path expressions
    The path expression 'label[. = "value"]' can now be written more
    concisely as 'label["value"]'
  API changes
    libfa has now a function fa_json to export an FA as a JSON file, and
    fa_state_* functions that make it possible to iterate over the FA's
    states and transitions. (Pedro Valero Mejia)
    Add functions aug_ns_label, aug_ns_value, aug_ns_count, and
    aug_ns_path to get the label (with index), the value, the number of
    nodes, and the fully qualified path for nodes stored in a nodeset in
    a variable efficiently
  Lens changes/additions
    Grubenv: new lens to process /boot/grub/grubenv (omgold)
    Httpd: also read files from /etc/httpd/conf.modules.d/*.conf
    (Tomas Meszaros) (Issue #537)
    Nsswitch: allow comments at the end of a line (Philip Hahn) (Issue #517)
    Ntp: accept 'ntpsigndsocket' statement (Philip Hahn) (Issue #516)
    Properties: accept empty comments with DOS line endings (Issue #161)
    Rancid: new lens for RANCiD router databases (Matt Dainty)
    Resolv: accept empty comments with DOS line endings (Issue #161)
    Systemd: also process /etc/systemd/logind.conf (Pat Riehecky)
    YAML: process a document that is just a sequence (John Vandenberg)
- drop chrpath dependency, the offending dump binary is no longer shipped</changelog>
  <changelog author="jengelh@inai.de" date="1521547201">- Fix RPM groups.</changelog>
  <changelog author="ecsos@opensuse.org" date="1545652800">- update to 1.11.0
  General changes/additions
  - augmatch: add a --quiet option; make the exit status useful
    to tell whether there was a match or not
  - Drastically reduce the amount of memory needed to evaluate
    complex path expressions against large files (Issue #569)
  - Fix a segfault on OSX when 'augmatch' is run without any
    arguments (Issue #556)
  API changes
  - aug_source did not in fact return the source; and always
    returned NULL for that. That has been fixed.
  Lens changes/additions
  - Chrony: add new options supported in chrony 3.2 and 3.3
    (Miroslav Lichvar)
  - Dhclient: fix parsing of append/prepend and similar
    directives (John Morrissey)
  - Fstab: allow leading whitespace in mount entry lines
    (Pino Toscano) (Issue #544)
  - Grub: tolerate some invalid entries. Those invalid entries
    get mapped to '#error' nodes
  - Httpd: accept comments with whitespace right after a tag
    opening a section (Issue #577)
  - Json: allow escaped slashes in strings (Issue #557)
  - Multipath: accept regular expressions for devnode, wwid,
    and property in blacklist and blacklist_exceptions sections
    (Issue #564)
  - Nginx: parse /etc/nginx/sites-enabled (plumbeo) allow
    semicolons inside double quoted strings in simple directives,
    and allow simple directives without an argument (Issue #566)
  - Redis: accept the 'bind' statement with multiple IP addresses
    (yannh) (Issue #194)
  - Rsyslog: support include() directive introduced in
    rsyslog 8.33
  - Strongswan: new lens (Kaarle Ritvanen)
  - Systemd: do not try to treat *.d or *.wants directories as
    configuration files (Issue #548)</changelog>
  <changelog author="vcizek@suse.com" date="1549972800">- Don't ignore %check test result, the testsuite now successfully
  passes</changelog>
  <changelog author="mliska@suse.cz" date="1552305600">- Add gcc9-disable-broken-test.patch in order to address bsc#1120894.</changelog>
  <changelog author="elimat@opensuse.org" date="1594123200">- update to 1.12.0
  General changes/additions
  - update gnulib to 91584ed6
  Lens changes/additions
  - Anaconda: new lens to process /etc/sysconfig/anaconda instead of Shellvars (Pino Toscano) (Issue #597)
  - DevfsRules: add lens for FreeBSD devfs.rules files
  - Dovecot: permit ! in block titles (Nathan Ward) (Issue #599)
  - Hostname: Allow creation of hostname when file is missing (David Farrell) (Issue #606)
  - Krb5: add more pkinit_* options (Issue #603)
  - Logrotate: fix missing recognition of double quoted filenames (Issue #611)
  - Multipath: accept values enclosed in quotes (Issue #583)
  - Nginx: support unix sockets as server address (Issue #618)
  - Nsswitch: add merge action (Issue #609)
  - Pam: accept continuation lines (Issue #590)
  - Puppetfile: allow symbols as (optional) values (Issue #619) allow comments in entries (Issue #620)
  - Rsyslog: support dynamic file paths (Issue #622) treat #!/+/- as comment (arnolda, PR #595)
  - Syslog: accept 'include' directive (Issue #486)
  - Semanage: new lens to process /etc/selinux/semanage.conf instead of Simplevars (Pino Toscano) (Issue #594)
  - Shellvars: allow and/or in @if conditions (#582) accept functions wrapped in round brackets, accept variables with a dash in their name, exclude csh/tcsh profile scripts (Pino Toscano) (Issue #600) accept variable as command (Issue #601)
  - Ssh: accept RekeyLimit (Issue #605)
  - Sshd: accept '=' to separate option names from their values (Emil Dragu, #587)
  - Sudoers: support 'always_query_group_plugin' flag (Steve Traylen, #588)
  - Strongswan: parse lists. This is a backwards-incompatible change since list entries that were parsed into a single string are now split into a list of entries (Kaarle Ritvanen)
  - Toml: new lens to parse .toml files (PR #91)
  - Xorg: accept empty values for options (arnolda, PR #596)
- refresh patches
- run spec-cleaner</changelog>
  <changelog author="jsikes@suse.com" date="1612872000">- Add new directives and options supported in chrony since 3.3 up to 4.0.
  * augeas-new_options_for_chrony.patch
  * [bsc#1178470]
  * sourced from https://github.com/hercules-team/augeas/pull/698</changelog>
  <changelog author="jsikes@suse.com" date="1622030400">- Allow all printable ASCII characters in WPA-PSK definition
  * augeas-allow_printable_ASCII.patch
  * bsc#1185524
  * Sourced from https://github.com/hercules-team/augeas/pull/723/commits
  * Credit to Michal Filka &lt;mfilka@suse.com&gt;</changelog>
  <changelog author="dmueller@suse.com" date="1623153600">- add remove-unportable-tests.patch to fix build</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- testsuite requires glibc-locale, buildrequire it</changelog>
  <changelog author="david.anes@suse.com" date="1649246400">- add augeas-sysctl_parsing.patch (bsc#1197443)
  * backport original patch and rebase</changelog>
  <changelog author="jengelh@inai.de" date="1650974400">- Employ shared library packaging guideline and resolve this
  rpmlint report: "libaugeas0.x86_64: E: shlib-policy-name-error
  SONAME: libfa.so.1, expected package suffix: 1" [boo#1191749]</changelog>
  <changelog author="fvogt@suse.com" date="1658836800">- Unset MALLOC_PERTURB_ to speed up %check significantly
  (boo#1201884, gh#hercules-team#768)</changelog>
  <changelog author="jsikes@suse.com" date="1667563200">- Update to 1.13.0
  * Fixes bsc#1204554
  * Added augeas-1.13.0-replace_security_context_t-patch to fix a
    syntax error.
  * Rebased gcc9-disable-broken-test.patch
  * Dropped the following patches since they are now upstreamed:
  - augeas-new_options_for_chrony.patch
  - augeas-allow_printable_ASCII.patch
  - remove-unportable-tests.patch
  * General changes/additions
  - Add Dockerfile (Nicolas Gif) (Issue #650)
  - augtool: Improved readline integration to handle quoting
    issues (Pino Toscano)
  - typechecker: Allow including '/' in keys and labels. Thanks
    to felixdoerre for pointing out that this restriction was
    unnecessary. See issue #668 for the discussion.
  - Add function modified() to select nodes which are marked as
    dirty (George Hansper) (Issue #691)
  - Add CLI command 'preview' and API 'aug_preview' to preview
    file contents (George Hansper) (#690)
  - Add "else" operator to augeas path-filter expressions
    (priority selector) (George Hansper) (#692)
  - Add new axis 'seq' to allow /path/seq::*[expr] to match and
    create numeric nodes, as idempotent alternative to
    /path/*[expr] (George Hansper) (#706)
  * Lens changes/additions
  - Authinfo2: new lens to parse Authinfo2 format (Nicolas Gif)
    (Issue #649)
  - Chrony: add new options (Miroslav Lichvar) (Issue #698)
  - Cmdline: New lens to parse /proc/cmdline (Thomas Weißschuh)
  - Crypttab: support UUID in device and / in opt (Raphaël
    Pinson) (#713)
  - Fail2ban: new lens to parse Fail2ban format (Nicolas Gif)
    (Issue #651)
  - Grub: support '+' in kernel command line option names (Pino
    Toscano) (Issue #647)
  - Krb5: handle [plugins] subsection (Pino Toscano) (Issue #663)
  - Limits: support colons in the domain pattern of the limits
    lens (Xavier Mol) (Issue #645)
  - Logrotate: add hourly schedule (Jason A. Smith) (Issue #655)
  - Mke2fs: parse more common entries between [defaults] and the
    tags in [fs_types], fix the type of few entries, handle the
    [options] stanza (Pino Toscano) (Issue #642)
  - support quoted values (Pino Toscano) (Issue #661)
  - NetworkManager: allow # in values (mfilka) (#723)
  - Opendkim: update to match current conffile format (Issue #644)
  - Postfix_Master: Allow unix-dgram as type (Issue #635)
  - Postfix_transport: Allow underscore (Anton Baranov) (Issue #678)
  - Postgresql: Allow hyphen '-' in values that don't require quotes
    (Marcin Barczyński) (Issues #700 #701)
  - Properties: Allow "/" in property names (felixdoerre) (Issue #680)
  - Redis: add incl path /etc/redis.conf (Raphaël Pinson) (#726)
  - support "replicaof" (Raphaël Pinson) (#727)
  - fix support for "sentinel" (Raphaël Pinson) (#728)
  - Resolv: Support new options (Trevor Vaughan) (Issues #707 #708)
  - Rsyslog: support multiple actions in filters and selectors (Issue
    [#653])
  - Shellvars: exclude more tcsh profile scripts (Pino Toscano) (Issue
    [#627])
  - Simplevars: add ocsinventory-agent.cfg (Pat Riehecky) (Issue #637)
  - Sudoers: support new @include/@includedir directives (Pino
    Toscano) (Issue #693)
  - Sudoers: Allow AD groups (luchihoratiu) (Issue #696)
  - Support negative integers (Ando David Roots) (#724)
  - Ssh: add Match keyword support (granquet) (Issue #695)
  - Sshd: support quotes in Match conditions (Issue #739)
  - Systemd: fix parsing of envvars with spaces (Pino Toscano) (#659)
  - Add incl paths according to 'systemd.network(5)' (chruetli) (#683)
  - Tinc: new lens for Tinc VPN configuration files (Thomas Weißschuh)
    (#718)
  - Toml: support arrays (norec) in inline tables (Raphaël Pinson)
    (#703)
  - Tmpfiles: improvements to the types specification (Pino Toscano)
    (Issue #694)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680782400">- Use the correct license - LGPL-2.1</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update to 1.14.0
  * General changes/additions
  - Update submodule gnulib to 2f7479a16a3395f1429c7795f10c5d19b9b4453e
    (#781)
  - Add bash-completion for augtool, augmatch, augprint (#783) George
    Hansper
  - Fix: Allow values to contain arbitrary unbalanced square brackets
    (#782) George Hansper
  - Add package bash to build stage in Dockerfile (#776) George Hansper
  - Add augprint tool for creating idempotent augtool scripts (#752) George
    Hansper
  - Replace deprecated 'security_context_t' with 'char *' (#747) Leo-Schmit
  - src/syntax.c: Fix whitespace which confuses static checkers
    (#725) rwmjones
  - README.md: Add oss-fuzz status badge (#702) Sergey Nizovtsev
  - Package augmatch, too (#688) oleksandriegorov
  - Add Github workflow to create releases with complete source tarballs
    (#744) Hilko Bengen
  * Lens changes/additions
  - Resolv: add option trust-ad (#784) George Hansper
  - Sos: new lens for /etc/sos/sos.conf (based on IniFile) (#779) George
    Hansper
  - Pg_Hba: unquoted auth-method may contain hyphens (#777) George Hansper
  - Sysctl: Allow keys to contain * and : and / characters (#755) M Filka
  - Semanage: Fix parsing of ignoredirs (#758) Richard W M Jones
  - Systemd: allow empty quoted environment variable values (#757) Michal
    Vasko
  - Systemd: allow values starting with whitespaces for Exec* and
    Environment service entries. (#757) Michal Vasko
  - Toml: workaround to allow writing toml files (#742) Richard
  - Kdump: parse "auto_reset_crashkernel" (#754) Laszlo Ersek
  - Keepalived: add parameters notify_stop and notify_deleted (#749) Adam
    Bambuch
  - Chrony: add new directives and options (#745) Miroslav Lichvar
  - Redis: Allow redis lens to set 'SAVE ""' as a valid option (#738) Mitch
    Hagstrand
  - ClamAV: update ClamAV lens to autoload /etc/clamav/*.conf
    (#748) Guillaume Ross
  - AuthselectPam: new lens for /etc/authselect/custom/*/*-auth
    and /etc/authselect/custom/*/postlogin (#743) Heston Snodgrass
  - Sshd: Parse GSSAPIKexAlgorithms PubkeyAcceptedKeyTypes
    CASignatureAlgorithms as comma-seperated lists instead of simple
    strings (#721) Edward Garbade
  - Yum: Add additional unit tests (#677) Pat Riehecky
  - Cockpit: new lens for /etc/cockpit/cockpit.conf (#675) Pat Riehecky
  * Rebased patch gcc9-disable-broken-test.patch
  * Deleted patches:
  - augeas-sysctl_parsing.patch
  - augeas-1.13.0-replace_security_context_t-patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1692878400">- Update to 1.14.1 (jsc#PED-6581)
  * General changes/additions
  - internal.c: update #if to only use GNU-specific strerror_r() when GLIBC
    is defined (#791) Dimitry Andric
  - augeas.c: Fix bug from PR#691 where the nodes of a newly created file
    are lost upon a subsequent load operation (#810) George Hansper
  - HACKING.md: describe testing (#796) Laszlo Ersek
  - Add GitHub Actions (#714) Raphaël Pinson
  - augprint.c: remove #include &lt;malloc.h&gt; , add #include &lt;libgen.h&gt;
    (#792) Ruoyu Zhong
  * Lens changes/additions
  - TOML: support trailing commas in arrays (#809) Bao
  - Tmpfiles: allow '=', '~', '^' for letter types, allow ":" as prefix for
    the mode (#805) Pino Toscano
  - Sshd: Add keyword PubkeyAcceptedAlgorithms as comma-separated list of
    items (#806) Dave Re
  - Cmdline: Allow whitespace at the end of kernel commnd line
    (#798) rwmjones</changelog>
  <changelog author="martin.schreiner@suse.com" date="1745409600">- Add patch, fix for bsc#1239909 / CVE-2025-2588:
  * CVE-2025-2588.patch</changelog>
</package>
<package pkgid="f86dc45b80ca8f6d3a33b664a837dfef4f3f8b185b4717138056801810fdebf4" name="augeas-lenses" arch="x86_64">
  <version epoch="0" ver="1.14.1" rel="150600.3.3.1"/>
  <changelog author="vcizek@suse.com" date="1509019200">- Version update to 1.9.0:
  - General changes/additions
  * Fix error in handling escaped whitespace at the end of path expressions
    (addresses CVE-2017-7555)
  * several improvements to the error messages when transforming a tree
    back to text fails. They now make it clearer what part of the tree
    was problematic, and what the tree should have looked like.
  * Fixed the pkg-config file, which should now be usable
  * Fix handling of backslash-escaping in strings and regular expressions
    in the lens language. We used to handle constructs like "\\" and
    /\\\\/ incorrectly. (Issue #495)
  * do not unescape the default value of a del on create; otherwise we are
    double unescaping these strings (Issue #507)
  * remove tempfile when saving files because destination is not writable
    (Issue #479)
  * span information is now updated on save (Issue #467)
  * fix lots of warnings generated by gcc 7.1
  * Various changes to reduce bashisms in tests and make them run on
    FreeBSD (Romain Tartière)
  - API changes
  * add function aug_ns_attr to allow iterating through a nodeset
    quickly. See examples/dump.c for an example of how to use them
    instead of aug_get, aug_label etc. and for a way to measure
    performance gains.
  - Lens changes/additions
  * Ceph: new lens for /etc/ceph/ceph.conf
  * Cgconfig: accept fperm &amp; dperm in admin &amp; task (Pino Toscano)
  * Dovecot: also load files from /usr/local/etc (Roy Hubbard)
  * Exports: relax the rules for the path at the beginning of a line so
    that double-quoted paths are legal, too
  * Getcap: new lens to parse generic termcap-style capability databases
  * Grub: accept toplevel 'boot' entry (Pino Toscano)
  * Httpd: handle empty comments with a continuation line (Issue #423);
    handle '&gt;""' in a directive properly (Issue #429); make space between
    quoted arguments optional (Issue #435); accept quoted strings as part
    of bare arguments (Issue #470)
  * Nginx: load files from sites-available directory (Omer Katz) (Issue #471)
  * Nslcd: new lens for nss-pam-ldapd config (Jose Plana)
  * Oz: New lense for /etc/oz/oz.cnf
  * postfix lenses: also load files from /usr/local/etc (Roy Hubbard)
  * Properties: accept DOS line endings (Issue #468)
  * Rtadvd: new lens to parse the rtadvd configuration file (Matt Dainty)
  * Rsyslog: load files from /etc/rsyslog.d (Doug Wilson) (Issue #475);
    allow spaces before the # starting a comment; allow comments inside
    config statements like 'module'
  * Ssh: accept '=' to separate keyword from arguments
  * Sshd: split HostKeyAlgorithms into list of values; recognize quoted
    group names with spaces in them (Issue #477)
  * Sudoers: recognize "match_group_by_gid" (Luigi Toscano) (Issue #482)
  * Syslog: allow spaces before the # starting a comment
  * Termcap: new lens to parse termcap capability databases (Matt Dainty)
  * Vsftpd: accept seccomp_sandbox (Denys Stroebel)
  * Xymon: accept 'group-sorted' directive (Issue #462)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1521547200">- update to 1.10.1:
  General changes/additions
    New CLI utility 'augmatch' to print the tree for a file and select
    some of its contents
    New command 'count' in augtool
    New function 'not(bool) -&gt; bool' for path expressions
    The path expression 'label[. = "value"]' can now be written more
    concisely as 'label["value"]'
  API changes
    libfa has now a function fa_json to export an FA as a JSON file, and
    fa_state_* functions that make it possible to iterate over the FA's
    states and transitions. (Pedro Valero Mejia)
    Add functions aug_ns_label, aug_ns_value, aug_ns_count, and
    aug_ns_path to get the label (with index), the value, the number of
    nodes, and the fully qualified path for nodes stored in a nodeset in
    a variable efficiently
  Lens changes/additions
    Grubenv: new lens to process /boot/grub/grubenv (omgold)
    Httpd: also read files from /etc/httpd/conf.modules.d/*.conf
    (Tomas Meszaros) (Issue #537)
    Nsswitch: allow comments at the end of a line (Philip Hahn) (Issue #517)
    Ntp: accept 'ntpsigndsocket' statement (Philip Hahn) (Issue #516)
    Properties: accept empty comments with DOS line endings (Issue #161)
    Rancid: new lens for RANCiD router databases (Matt Dainty)
    Resolv: accept empty comments with DOS line endings (Issue #161)
    Systemd: also process /etc/systemd/logind.conf (Pat Riehecky)
    YAML: process a document that is just a sequence (John Vandenberg)
- drop chrpath dependency, the offending dump binary is no longer shipped</changelog>
  <changelog author="jengelh@inai.de" date="1521547201">- Fix RPM groups.</changelog>
  <changelog author="ecsos@opensuse.org" date="1545652800">- update to 1.11.0
  General changes/additions
  - augmatch: add a --quiet option; make the exit status useful
    to tell whether there was a match or not
  - Drastically reduce the amount of memory needed to evaluate
    complex path expressions against large files (Issue #569)
  - Fix a segfault on OSX when 'augmatch' is run without any
    arguments (Issue #556)
  API changes
  - aug_source did not in fact return the source; and always
    returned NULL for that. That has been fixed.
  Lens changes/additions
  - Chrony: add new options supported in chrony 3.2 and 3.3
    (Miroslav Lichvar)
  - Dhclient: fix parsing of append/prepend and similar
    directives (John Morrissey)
  - Fstab: allow leading whitespace in mount entry lines
    (Pino Toscano) (Issue #544)
  - Grub: tolerate some invalid entries. Those invalid entries
    get mapped to '#error' nodes
  - Httpd: accept comments with whitespace right after a tag
    opening a section (Issue #577)
  - Json: allow escaped slashes in strings (Issue #557)
  - Multipath: accept regular expressions for devnode, wwid,
    and property in blacklist and blacklist_exceptions sections
    (Issue #564)
  - Nginx: parse /etc/nginx/sites-enabled (plumbeo) allow
    semicolons inside double quoted strings in simple directives,
    and allow simple directives without an argument (Issue #566)
  - Redis: accept the 'bind' statement with multiple IP addresses
    (yannh) (Issue #194)
  - Rsyslog: support include() directive introduced in
    rsyslog 8.33
  - Strongswan: new lens (Kaarle Ritvanen)
  - Systemd: do not try to treat *.d or *.wants directories as
    configuration files (Issue #548)</changelog>
  <changelog author="vcizek@suse.com" date="1549972800">- Don't ignore %check test result, the testsuite now successfully
  passes</changelog>
  <changelog author="mliska@suse.cz" date="1552305600">- Add gcc9-disable-broken-test.patch in order to address bsc#1120894.</changelog>
  <changelog author="elimat@opensuse.org" date="1594123200">- update to 1.12.0
  General changes/additions
  - update gnulib to 91584ed6
  Lens changes/additions
  - Anaconda: new lens to process /etc/sysconfig/anaconda instead of Shellvars (Pino Toscano) (Issue #597)
  - DevfsRules: add lens for FreeBSD devfs.rules files
  - Dovecot: permit ! in block titles (Nathan Ward) (Issue #599)
  - Hostname: Allow creation of hostname when file is missing (David Farrell) (Issue #606)
  - Krb5: add more pkinit_* options (Issue #603)
  - Logrotate: fix missing recognition of double quoted filenames (Issue #611)
  - Multipath: accept values enclosed in quotes (Issue #583)
  - Nginx: support unix sockets as server address (Issue #618)
  - Nsswitch: add merge action (Issue #609)
  - Pam: accept continuation lines (Issue #590)
  - Puppetfile: allow symbols as (optional) values (Issue #619) allow comments in entries (Issue #620)
  - Rsyslog: support dynamic file paths (Issue #622) treat #!/+/- as comment (arnolda, PR #595)
  - Syslog: accept 'include' directive (Issue #486)
  - Semanage: new lens to process /etc/selinux/semanage.conf instead of Simplevars (Pino Toscano) (Issue #594)
  - Shellvars: allow and/or in @if conditions (#582) accept functions wrapped in round brackets, accept variables with a dash in their name, exclude csh/tcsh profile scripts (Pino Toscano) (Issue #600) accept variable as command (Issue #601)
  - Ssh: accept RekeyLimit (Issue #605)
  - Sshd: accept '=' to separate option names from their values (Emil Dragu, #587)
  - Sudoers: support 'always_query_group_plugin' flag (Steve Traylen, #588)
  - Strongswan: parse lists. This is a backwards-incompatible change since list entries that were parsed into a single string are now split into a list of entries (Kaarle Ritvanen)
  - Toml: new lens to parse .toml files (PR #91)
  - Xorg: accept empty values for options (arnolda, PR #596)
- refresh patches
- run spec-cleaner</changelog>
  <changelog author="jsikes@suse.com" date="1612872000">- Add new directives and options supported in chrony since 3.3 up to 4.0.
  * augeas-new_options_for_chrony.patch
  * [bsc#1178470]
  * sourced from https://github.com/hercules-team/augeas/pull/698</changelog>
  <changelog author="jsikes@suse.com" date="1622030400">- Allow all printable ASCII characters in WPA-PSK definition
  * augeas-allow_printable_ASCII.patch
  * bsc#1185524
  * Sourced from https://github.com/hercules-team/augeas/pull/723/commits
  * Credit to Michal Filka &lt;mfilka@suse.com&gt;</changelog>
  <changelog author="dmueller@suse.com" date="1623153600">- add remove-unportable-tests.patch to fix build</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- testsuite requires glibc-locale, buildrequire it</changelog>
  <changelog author="david.anes@suse.com" date="1649246400">- add augeas-sysctl_parsing.patch (bsc#1197443)
  * backport original patch and rebase</changelog>
  <changelog author="jengelh@inai.de" date="1650974400">- Employ shared library packaging guideline and resolve this
  rpmlint report: "libaugeas0.x86_64: E: shlib-policy-name-error
  SONAME: libfa.so.1, expected package suffix: 1" [boo#1191749]</changelog>
  <changelog author="fvogt@suse.com" date="1658836800">- Unset MALLOC_PERTURB_ to speed up %check significantly
  (boo#1201884, gh#hercules-team#768)</changelog>
  <changelog author="jsikes@suse.com" date="1667563200">- Update to 1.13.0
  * Fixes bsc#1204554
  * Added augeas-1.13.0-replace_security_context_t-patch to fix a
    syntax error.
  * Rebased gcc9-disable-broken-test.patch
  * Dropped the following patches since they are now upstreamed:
  - augeas-new_options_for_chrony.patch
  - augeas-allow_printable_ASCII.patch
  - remove-unportable-tests.patch
  * General changes/additions
  - Add Dockerfile (Nicolas Gif) (Issue #650)
  - augtool: Improved readline integration to handle quoting
    issues (Pino Toscano)
  - typechecker: Allow including '/' in keys and labels. Thanks
    to felixdoerre for pointing out that this restriction was
    unnecessary. See issue #668 for the discussion.
  - Add function modified() to select nodes which are marked as
    dirty (George Hansper) (Issue #691)
  - Add CLI command 'preview' and API 'aug_preview' to preview
    file contents (George Hansper) (#690)
  - Add "else" operator to augeas path-filter expressions
    (priority selector) (George Hansper) (#692)
  - Add new axis 'seq' to allow /path/seq::*[expr] to match and
    create numeric nodes, as idempotent alternative to
    /path/*[expr] (George Hansper) (#706)
  * Lens changes/additions
  - Authinfo2: new lens to parse Authinfo2 format (Nicolas Gif)
    (Issue #649)
  - Chrony: add new options (Miroslav Lichvar) (Issue #698)
  - Cmdline: New lens to parse /proc/cmdline (Thomas Weißschuh)
  - Crypttab: support UUID in device and / in opt (Raphaël
    Pinson) (#713)
  - Fail2ban: new lens to parse Fail2ban format (Nicolas Gif)
    (Issue #651)
  - Grub: support '+' in kernel command line option names (Pino
    Toscano) (Issue #647)
  - Krb5: handle [plugins] subsection (Pino Toscano) (Issue #663)
  - Limits: support colons in the domain pattern of the limits
    lens (Xavier Mol) (Issue #645)
  - Logrotate: add hourly schedule (Jason A. Smith) (Issue #655)
  - Mke2fs: parse more common entries between [defaults] and the
    tags in [fs_types], fix the type of few entries, handle the
    [options] stanza (Pino Toscano) (Issue #642)
  - support quoted values (Pino Toscano) (Issue #661)
  - NetworkManager: allow # in values (mfilka) (#723)
  - Opendkim: update to match current conffile format (Issue #644)
  - Postfix_Master: Allow unix-dgram as type (Issue #635)
  - Postfix_transport: Allow underscore (Anton Baranov) (Issue #678)
  - Postgresql: Allow hyphen '-' in values that don't require quotes
    (Marcin Barczyński) (Issues #700 #701)
  - Properties: Allow "/" in property names (felixdoerre) (Issue #680)
  - Redis: add incl path /etc/redis.conf (Raphaël Pinson) (#726)
  - support "replicaof" (Raphaël Pinson) (#727)
  - fix support for "sentinel" (Raphaël Pinson) (#728)
  - Resolv: Support new options (Trevor Vaughan) (Issues #707 #708)
  - Rsyslog: support multiple actions in filters and selectors (Issue
    [#653])
  - Shellvars: exclude more tcsh profile scripts (Pino Toscano) (Issue
    [#627])
  - Simplevars: add ocsinventory-agent.cfg (Pat Riehecky) (Issue #637)
  - Sudoers: support new @include/@includedir directives (Pino
    Toscano) (Issue #693)
  - Sudoers: Allow AD groups (luchihoratiu) (Issue #696)
  - Support negative integers (Ando David Roots) (#724)
  - Ssh: add Match keyword support (granquet) (Issue #695)
  - Sshd: support quotes in Match conditions (Issue #739)
  - Systemd: fix parsing of envvars with spaces (Pino Toscano) (#659)
  - Add incl paths according to 'systemd.network(5)' (chruetli) (#683)
  - Tinc: new lens for Tinc VPN configuration files (Thomas Weißschuh)
    (#718)
  - Toml: support arrays (norec) in inline tables (Raphaël Pinson)
    (#703)
  - Tmpfiles: improvements to the types specification (Pino Toscano)
    (Issue #694)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680782400">- Use the correct license - LGPL-2.1</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update to 1.14.0
  * General changes/additions
  - Update submodule gnulib to 2f7479a16a3395f1429c7795f10c5d19b9b4453e
    (#781)
  - Add bash-completion for augtool, augmatch, augprint (#783) George
    Hansper
  - Fix: Allow values to contain arbitrary unbalanced square brackets
    (#782) George Hansper
  - Add package bash to build stage in Dockerfile (#776) George Hansper
  - Add augprint tool for creating idempotent augtool scripts (#752) George
    Hansper
  - Replace deprecated 'security_context_t' with 'char *' (#747) Leo-Schmit
  - src/syntax.c: Fix whitespace which confuses static checkers
    (#725) rwmjones
  - README.md: Add oss-fuzz status badge (#702) Sergey Nizovtsev
  - Package augmatch, too (#688) oleksandriegorov
  - Add Github workflow to create releases with complete source tarballs
    (#744) Hilko Bengen
  * Lens changes/additions
  - Resolv: add option trust-ad (#784) George Hansper
  - Sos: new lens for /etc/sos/sos.conf (based on IniFile) (#779) George
    Hansper
  - Pg_Hba: unquoted auth-method may contain hyphens (#777) George Hansper
  - Sysctl: Allow keys to contain * and : and / characters (#755) M Filka
  - Semanage: Fix parsing of ignoredirs (#758) Richard W M Jones
  - Systemd: allow empty quoted environment variable values (#757) Michal
    Vasko
  - Systemd: allow values starting with whitespaces for Exec* and
    Environment service entries. (#757) Michal Vasko
  - Toml: workaround to allow writing toml files (#742) Richard
  - Kdump: parse "auto_reset_crashkernel" (#754) Laszlo Ersek
  - Keepalived: add parameters notify_stop and notify_deleted (#749) Adam
    Bambuch
  - Chrony: add new directives and options (#745) Miroslav Lichvar
  - Redis: Allow redis lens to set 'SAVE ""' as a valid option (#738) Mitch
    Hagstrand
  - ClamAV: update ClamAV lens to autoload /etc/clamav/*.conf
    (#748) Guillaume Ross
  - AuthselectPam: new lens for /etc/authselect/custom/*/*-auth
    and /etc/authselect/custom/*/postlogin (#743) Heston Snodgrass
  - Sshd: Parse GSSAPIKexAlgorithms PubkeyAcceptedKeyTypes
    CASignatureAlgorithms as comma-seperated lists instead of simple
    strings (#721) Edward Garbade
  - Yum: Add additional unit tests (#677) Pat Riehecky
  - Cockpit: new lens for /etc/cockpit/cockpit.conf (#675) Pat Riehecky
  * Rebased patch gcc9-disable-broken-test.patch
  * Deleted patches:
  - augeas-sysctl_parsing.patch
  - augeas-1.13.0-replace_security_context_t-patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1692878400">- Update to 1.14.1 (jsc#PED-6581)
  * General changes/additions
  - internal.c: update #if to only use GNU-specific strerror_r() when GLIBC
    is defined (#791) Dimitry Andric
  - augeas.c: Fix bug from PR#691 where the nodes of a newly created file
    are lost upon a subsequent load operation (#810) George Hansper
  - HACKING.md: describe testing (#796) Laszlo Ersek
  - Add GitHub Actions (#714) Raphaël Pinson
  - augprint.c: remove #include &lt;malloc.h&gt; , add #include &lt;libgen.h&gt;
    (#792) Ruoyu Zhong
  * Lens changes/additions
  - TOML: support trailing commas in arrays (#809) Bao
  - Tmpfiles: allow '=', '~', '^' for letter types, allow ":" as prefix for
    the mode (#805) Pino Toscano
  - Sshd: Add keyword PubkeyAcceptedAlgorithms as comma-separated list of
    items (#806) Dave Re
  - Cmdline: Allow whitespace at the end of kernel commnd line
    (#798) rwmjones</changelog>
  <changelog author="martin.schreiner@suse.com" date="1745409600">- Add patch, fix for bsc#1239909 / CVE-2025-2588:
  * CVE-2025-2588.patch</changelog>
</package>
<package pkgid="0908339838033d3f0ca1d9320da151225666aa9e1a2147bc1edf3f860b009ddf" name="autofs" arch="src">
  <version epoch="0" ver="5.1.9" rel="150600.3.5.1"/>
  <changelog author="rgoldwyn@suse.com" date="1598875200">- autofs-nsswitch-usr-etc.patch: Use /usr/etc/nsswitch.conf if
  /etc/nsswitch.con is unavailable (bsc#1175238)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1603454400">- automount-fix-master-wait.patch: Fix options string for master wait
  (bsc#1178006)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1619092800">- Upgrade to 5.1.7
  - make bind mounts propagation slave by default.
  - update ldap READMEs and schema definitions.
  - fix program map multi-mount lookup after mount fail.
  - fix browse dir not re-created on symlink expire.
  - fix a regression with map instance lookup.
  - correct fsf address.
  - samples: fix Makefile targets' directory dependencies
  - remove intr hosts map mount option.
  - fix trailing dollar sun entry expansion.
  - initialize struct addrinfo for getaddrinfo() calls.
  - fix quoted string length calc in expandsunent().
  - fix autofs mount options construction.
  - mount_nfs.c fix local rdma share not mounting.
  - configure.in: Remove unneeded second call to PKG_PROG_PKG_CONFIG.
  - configure.in: Do not append parentheses to PKG_PROG_PKG_CONFIG.
  - Use PKG_CHECK_MODULES to detect the libxml2 library.
  - fix ldap sasl reconnect problem.
  - samples/ldap.schema fix.
  - fix configure force shutdown check.
  - fix crash in sun_mount().
  - fix lookup_nss_read_master() nsswicth check return.
  - fix typo in open_sss_lib().
  - fix sss_master_map_wait timing.
  - add sss ECONREFUSED return handling.
  - use mapname in sss context for setautomntent().
  - add support for new sss autofs proto version call.
  - fix retries check in setautomntent_wait().
  - refactor sss setautomntent().
  - improve sss setautomntent() error handling.
  - refactor sss getautomntent().
  - improve sss getautomntent() error handling.
  - sss introduce calculate_retry_count() function.
  - move readall into struct master.
  - sss introduce a flag to indicate map being read.
  - update sss timeout documentation.
  - refactor sss getautomntbyname().
  - improve sss getautomntbyname() error handling.
  - use a valid timeout in lookup_prune_one_cache().
  - dont prune offset map entries.
  - simplify sss source stale check.
  - include linux/nfs.h directly in rpc_subs.h.
  - fix typo in daemon/automount.c.
  - fix direct mount unlink_mount_tree() path.
  - fix unlink mounts umount order.
  - fix incorrect logical compare in unlink_mount_tree().
  - use bit flag for force unlink mounts.
  - improve force unlink option description.
  - remove command fifo on autofs mount fail.
  - add force unlink mounts and exit option.
  - cleanup stale logpri fifo pipes on unlink and exit.
  - fix incorrect systemctl command syntax in autofs(8).
  - update list.h.
  - add hashtable implementation.
  - change mountpoint to mp in struct ext_mount.
  - make external mounts independent of amd_entry.
  - make external mounts use simpler hashtable.
  - add a hash index to mnt_list.
  - use mnt_list for submounts.
  - use mnt_list for amdmounts.
  - make umount_autofs() static.
  - remove force parameter from umount_all().
  - fix remount expire.
  - fix stale offset directories disable mount.
  - use struct mnt_list to track mounted mounts.
  - use struct mnt_list mounted list for expire.
  - remove unused function tree_get_mnt_list().
  - only add expre alarm for active mounts.
  - move submount check into conditional_alarm_add().
  - move lib/master.c to daemon/master.c.
  - use master_list_empty() for list empty check.
  - add helper to construct mount point path.
  - check defaults_read_config() return.
  - move AUTOFS_LIB to end of build rule lines.
  - make autofs.a a shared library.
  - make lookup_file.c nss map read status return handling consistent.
  - fix empty mounts list return from unlink_mount_tree().
- Refreshed autofs-5.1.1-dbus-udisks-monitor.patch
- Replaced automount-fix-master-wait.patch with upstream patch
  autofs-5.1.7-Fix-option-for-master_read_wait.patch</changelog>
  <changelog author="rgoldwyn@suse.com" date="1619092801">- Update pidfile path to /run from /var/run (bsc#1185155)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1631102400">-  autofs-5.1.7-use-default-stack-size-for-threads.patch: Use default
  stack size for threads (bsc#1189199)</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 5.1.8:
  * add xdr_exports().
  * remove mount.x and rpcgen dependencies.
  * dont use realloc in host exports list processing.
  * use sprintf() when constructing hosts mapent.
  * fix mnts_remove_amdmount() uses wrong list.
  * Fix option for master read wait.
  * eliminate cache_lookup_offset() usage.
  * fix is mounted check on non existent path.
  * simplify cache_get_parent().
  * set offset parent in update_offset_entry().
  * remove redundant variables from mount_autofs_offset().
  * remove unused parameter form do_mount_autofs_offset().
  * refactor umount_multi_triggers().
  * eliminate clean_stale_multi_triggers().
  * simplify mount_subtree() mount check.
  * fix mnts_get_expire_list() expire list construction.
  * fix inconsistent locking in umount_subtree_mounts().
  * fix return from umount_subtree_mounts() on offset list delete.
  * pass mapent_cache to update_offset_entry().
  * fix inconsistent locking in parse_mount().
  * remove unused mount offset list lock functions.
  * eliminate count_mounts() from expire_proc_indirect().
  * eliminate some strlen calls in offset handling.
  * don't add offset mounts to mounted mounts table.
  * reduce umount EBUSY check delay.
  * cleanup cache_delete() a little.
  * rename path to m_offset in update_offset_entry().
  * don't pass root to do_mount_autofs_offset().
  * rename tree implementation functions.
  * add some multi-mount macros.
  * remove unused functions cache_dump_multi() and cache_dump_cache().
  * add a len field to struct autofs_point.
  * make tree implementation data independent.
  * add mapent tree implementation.
  * add tree_mapent_add_node().
  * add tree_mapent_delete_offsets().
  * add tree_mapent_traverse_subtree().
  * fix mount_fullpath().
  * add tree_mapent_cleanup_offsets().
  * add set_offset_tree_catatonic().
  * add mount and umount offsets functions.
  * switch to use tree implementation for offsets.
  * remove obsolete functions.
  * remove redundant local var from sun_mount().
  * use mount_fullpath() in one spot in parse_mount().
  * pass root length to mount_fullpath().
  * remove unused function master_submount_list_empty().
  * move amd mounts removal into lib/mounts.c.
  * check for offset with no mount location.
  * remove mounts_mutex.
  * remove unused variable from get_exports().
  * add missing free in handle_mounts().
  * remove redundant if check.
  * fix possible memory leak in master_parse().
  * fix possible memory leak in mnts_add_amdmount().
  * fix double unlock in parse_mount().
  * add length check in umount_subtree_mounts().
  * fix flags check in umount_multi().
  * dont try umount after stat() ENOENT fail.
  * remove redundant assignment in master_add_amd_mount_section_mounts().
  * fix dead code in mnts_add_mount().
  * fix arg not used in error print.
  * fix missing lock release in mount_subtree().
  * fix double free in parse_mapent().
  * refactor lookup_prune_one_cache() a bit.
  * cater for empty mounts list in mnts_get_expire_list().
  * add ext_mount_hash_mutex lock helpers.
  * fix amd section mounts map reload.
  * fix dandling symlink creation if nis support is not available.
  * dont use AUTOFS_DEV_IOCTL_CLOSEMOUNT.
  * fix lookup_prune_one_cache() refactoring change.
  * fix amd hosts mount expire.
  * fix offset entries order.
  * use mapent tree root for tree_mapent_add_node().
  * eliminate redundant cache lookup in tree_mapent_add_node().
  * fix hosts map offset order.
  * fix direct mount deadlock.
  * add missing description of null map option.
  * fix nonstrict offset mount fail handling.
  * fix concat_options() error handling.
  * eliminate some more alloca usage.
  * use default stack size for threads.
  * fix use of possibly NULL var in lookup_program.c:match_key().
  * fix incorrect print format specifiers in get_pkt().
  * add mapent path length check in handle_packet_expire_direct().
  * add copy length check in umount_autofs_indirect().
  * add some buffer length checks to master map parser.
  * add buffer length check to rmdir_path().
  * eliminate buffer usage from handle_mounts_cleanup().
  * add buffer length checks to autofs mount_mount().
  * make NFS version check flags consistent.
  * refactor get_nfs_info().
- drop autofs-5.1.7-Fix-option-for-master_read_wait.patch,
  autofs-5.1.7-use-default-stack-size-for-threads.patch: upstream</changelog>
  <changelog author="nfbrown@suse.com" date="1644494400">- Add autofs-Test-TCP-request-correctly-in-nfs_get_info.patch
  Fix bug when rpcbind not visible
  (bsc#1195587 bsc#1195595)</changelog>
  <changelog author="nfbrown@suse.com" date="1644840000">- 0004-autofs-5.1.3-add-port-parameter-to-rpc_ping.patch
  Suppress portmap calls when port explicitly given
  (bsc#1195697)</changelog>
  <changelog author="nfbrown@suse.com" date="1647259200">- 0005-autofs-5.1.4-fix-incorrect-locking-in-sss-lookup.patch
  Fix locking problem that causes deadlock when sss used.
  (bsc#1196485)</changelog>
  <changelog author="nfbrown@suse.com" date="1647345600">- autofs-5.1.6-fix-quoted-string-length-calc-in-expand.patch
  Fix problem with quote handling
  (bsc#1181715)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1652097600">- Use OPTIONS instead of AUTOFS_OPTIONS in /etc/sysconfig/autofs
  (bsc#1199027)</changelog>
  <changelog author="schubi@suse.de" date="1652356800">- Moved -autofs- file from user specif directory
  /etc/NetworkManager/dispatcher.d to vendor specific directory
  /usr/lib/NetworkManager/dispatcher.d. So, users changes can
  still be done in /etc and will not be overwritten by an update.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1663070400">- Move dbus-1 system.d file to /usr (bsc#1203362)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1681732800">- Add autofs-suse-manpage-remove-initdir.patch
  Removes references of initdir from man pages (bsc#1207881)</changelog>
  <changelog author="ddiss@suse.com" date="1682164800">- autofs-5.1.3-revert-fix-argc-off-by-one-in-mount_aut.patch
  Fix off-by-one error in recursive map handling. (bsc#1209653)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1704974400">- Removed following upstreamed patches because of upgrade:
  * autofs-5.1.6-fix-quoted-string-length-calc-in-expand.patch
  * 0001-use_hostname_for_mounts-shouldn-t-prevent-selection-.patch
  * 0002-Fix-monotonic_elapsed.patch Deleted
  * 0003-autofs-5.1.4-fix-fd-leak-in-rpc_do_create_client.patch Deleted
  * 0004-autofs-5.1.3-add-port-parameter-to-rpc_ping.patch
  * 0005-autofs-5.1.4-fix-incorrect-locking-in-sss-lookup.patch
  * autofs-5.1.3-revert-fix-argc-off-by-one-in-mount_aut.patch
  * autofs-5-1-3-check-map-instances-for-staleness-on-map-update.patch
  * autofs-5-1-3-fix-ordering-of-seteuid-setegid-in-do_spawn.patch
  * autofs-5-1-3-fix-possible-map-instance-memory-leak.patch
  * autofs-5.1.3-revert-fix-argc-off-by-one-in-mount_aut.patch
  * autofs-5.1.6-fix-quoted-string-length-calc-in-expand.patch</changelog>
  <changelog author="ddiss@suse.com" date="1707566400">- update to 5.1.9 (bsc#1219508)
  * fix kernel mount status notification.
  * fix fedfs build flags.
  * fix set open file limit.
  * improve descriptor open error reporting.
  * fix root offset error handling.
  * fix fix root offset error handling.
  * fix nonstrict fail handling of last offset mount.
  * dont fail on duplicate offset entry tree add.
  * fix loop under run in cache_get_offset_parent().
  * bailout on rpc systemerror.
  * fix nfsv4 only mounts should not use rpcbind.
  * simplify cache_add() a little.
  * fix use after free in tree_mapent_delete_offset_tree().
  * fix memory leak in xdr_exports().
  * avoid calling pthread_getspecific() with NULL key_thread_attempt_id.
  * fix sysconf(3) return handling.
  * remove nonstrict parameter from tree_mapent_umount_offsets().
  * fix handling of incorrect return from umount_ent().
  * dont use initgroups() at spawn.
  * fix bashism in configure.
  * musl: fix missing include in hash.h.
  * musl: define fallback dummy NSS config path
  * musl: avoid internal stat.h definitions.
  * musl: add missing include to hash.h for _WORDSIZE.
  * musl: add missing include to log.h for pid_t.
  * musl: define _SWORD_TYPE.
  * add autofs_strerror_r() helper for musl.
  * update configure.
  * handle innetgr() not present in musl.
  * fix missing unlock in sasl_do_kinit_ext_cc().
  * fix a couple of null cache locking problems.
  * restore gcc flags after autoconf Kerberos 5 check.
  * prepare for OpenLDAP SASL binding.
  * let OpenLDAP handle SASL binding.
  * configure: LDAP function checks ignore implicit declarations.
  * improve debug logging of LDAP binds.
  * improve debug logging of SASL binds.
  * internal SASL logging only in debug log mode.
  * more comprehensive verbose logging for LDAP maps.
  * fix invalid tsv access.
  * support SCRAM for SASL binding.
  * ldap_sasl_interactive_bind() needs credentials for auto-detection.
  * fix autofs regression due to positive_timeout.
  * fix parse module instance mutex naming.
  * serialise lookup module open and reinit.
  * coverity fix for invalid access.
  * fix hosts map deadlock on restart.
  * fix deadlock with hosts map reload.
  * fix memory leak in update_hosts_mounts().
  * fix minus only option handling in concat_options().
  * fix incorrect path for is_mounted() in try_remount().
  * fix additional tsv invalid access.
  * fix use_ignore_mount_option description.
  * include addtional log info for mounts.
  * fail on empty replicated host name.
  * improve handling of ENOENT in sss setautomntent().
  * don't immediately call function when waiting.
  * define LDAP_DEPRECATED during LDAP configure check.
  * fix return status of mount_autofs().
  * don't close lookup at umount.
  * fix deadlock in lookups.
  * dont delay expire.
  * make amd mapent search function name clear.
  * rename statemachine() to signal_handler().
  * make signal handling consistent.
  * eliminate last remaining state_pipe usage.
  * add function master_find_mapent_by_devid().
  * use device id to locate autofs_point when setting log priotity.
  * add command pipe handling functions.
  * switch to application wide command pipe.
  * get rid of unused field submnt_count.
  * fix mount tree startup reconnect.
  * fix unterminated read in handle_cmd_pipe_fifo_message().
  * fix memory leak in sasl_do_kinit()
  * fix fix mount tree startup reconnect.
  * fix amd selector function matching.
  * get rid entry thid field.
  * continue expire immediately after submount check.
  * eliminate realpath from mount of submount.
  * eliminate root param from autofs mount and umount.
  * remove redundant fstat from do_mount_direct().
  * get rid of strlen call in handle_packet_missing_direct().
  * remove redundant stat call in lookup_ghost().
  * set mapent dev and ino before adding to index.
  * change to use printf functions in amd parser.
  * dont call umount_subtree_mounts() on parent at umount.
  * dont take parent source lock at mount shutdown.
  * fix possible use after free in handle_mounts_exit().
  * make submount cleanup the same as top level mounts.
  * add soucre parameter to module functions.
  * add ioctlfd open helper.
  * make open files limit configurable.
  * use correct reference for IN6 macro call.
  * dont probe interface that cant send packet.
  * fix some sss error return cases.
  * fix incorrect matching of cached wildcard key.
  * fix expire retry looping.
  * allow -null map in indirect maps.
  * fix multi-mount check.
  * fix let OpenLDAP handle SASL binding.
  * always recreate credential cache.
  * fix ldap_parse_page_control() check.
  * fix typo in create_cmd_pipe_fifo().
  * add null check in master_kill().
  * be more careful with cmd pipe at exit.
  * rename configure.in to configure.ac.
  * update autoconf macros.
  * update autoconf release.
  * update autofs release.
- drop autofs-5-1-3-fix-unset-tsd-group-name-handling.patch, upstream
  as ab8ca82 ("autofs-5.1.3 - fix unset tsd group name handling")
- drop autofs-Test-TCP-request-correctly-in-nfs_get_info.patch,
  superseded by 80845bb ("autofs-5.1.8 - fix nfsv4 only mounts should
  not use rpcbind")
- rebase autofs-5.1.1-dbus-udisks-monitor.patch atop 37fda2c
  ("autofs-5.1.8 - add soucre parameter to module functions")</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ddiss@suse.com" date="1752667200">- Fix autofs-5.1.1-dbus-udisks-monitor.patch (bsc#1246612) to account for:
  * d2feac6784b6 autofs-5.1.6 - make autofs.a a shared library
  * bcd8e1b642e9 autofs-5.0.7 - use LIBS for link libraries</changelog>
  <changelog author="ddiss@suse.com" date="1769169600">- fix deadlock on map entry removal (bsc#1246325)
  * 0001-autofs-5.1.9-fix-get-parent-multi-mount-check-in-try.patch
  * 0002-autofs-5.1.9-fix-deadlock-in-remount.patch
  * 0003-CHANGELOG-add-a-few-missing-entries.patch
  * 0004-autofs-5.1.9-quiet-possibly-noisy-log-message.patch
  * 0005-autofs-5.1.9-fix-devid-update-on-reload.patch
  * 0006-autofs-5.1.9-fix-cache-writelock-must-be-taken-in-up.patch
  * 0007-autofs-5.1.9-fix-skip-valid-map-entries-on-expire-cl.patch
  * 0008-autofs-5.1.9-remove-unnecessary-call-to-set_direct_m.patch
  * 0009-autofs-5.1.9-remove-unnecessary-assignment-in-umount.patch
  * 0010-autofs-5.1.9-fix-direct-mount-trigger-umount-failure.patch
  * 0011-autofs-5.1.9-refactor-do_umount_autofs_direct.patch
  * 0012-autofs-5.1.9-fix-stale-direct-mount-trigger-not-umou.patch
  * 0013-autofs-5.1.9-add-function-table_lookup_ino.patch
  * 0014-autofs-5.1.9-improve-handling-of-missing-map-entry-f.patch</changelog>
</package>
<package pkgid="214ebf357170f208be0b45e4d8254067dd6eeabfe7d88d0336f5b1cfabe220f8" name="autofs" arch="x86_64">
  <version epoch="0" ver="5.1.9" rel="150600.3.5.1"/>
  <changelog author="rgoldwyn@suse.com" date="1598875200">- autofs-nsswitch-usr-etc.patch: Use /usr/etc/nsswitch.conf if
  /etc/nsswitch.con is unavailable (bsc#1175238)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1603454400">- automount-fix-master-wait.patch: Fix options string for master wait
  (bsc#1178006)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1619092800">- Upgrade to 5.1.7
  - make bind mounts propagation slave by default.
  - update ldap READMEs and schema definitions.
  - fix program map multi-mount lookup after mount fail.
  - fix browse dir not re-created on symlink expire.
  - fix a regression with map instance lookup.
  - correct fsf address.
  - samples: fix Makefile targets' directory dependencies
  - remove intr hosts map mount option.
  - fix trailing dollar sun entry expansion.
  - initialize struct addrinfo for getaddrinfo() calls.
  - fix quoted string length calc in expandsunent().
  - fix autofs mount options construction.
  - mount_nfs.c fix local rdma share not mounting.
  - configure.in: Remove unneeded second call to PKG_PROG_PKG_CONFIG.
  - configure.in: Do not append parentheses to PKG_PROG_PKG_CONFIG.
  - Use PKG_CHECK_MODULES to detect the libxml2 library.
  - fix ldap sasl reconnect problem.
  - samples/ldap.schema fix.
  - fix configure force shutdown check.
  - fix crash in sun_mount().
  - fix lookup_nss_read_master() nsswicth check return.
  - fix typo in open_sss_lib().
  - fix sss_master_map_wait timing.
  - add sss ECONREFUSED return handling.
  - use mapname in sss context for setautomntent().
  - add support for new sss autofs proto version call.
  - fix retries check in setautomntent_wait().
  - refactor sss setautomntent().
  - improve sss setautomntent() error handling.
  - refactor sss getautomntent().
  - improve sss getautomntent() error handling.
  - sss introduce calculate_retry_count() function.
  - move readall into struct master.
  - sss introduce a flag to indicate map being read.
  - update sss timeout documentation.
  - refactor sss getautomntbyname().
  - improve sss getautomntbyname() error handling.
  - use a valid timeout in lookup_prune_one_cache().
  - dont prune offset map entries.
  - simplify sss source stale check.
  - include linux/nfs.h directly in rpc_subs.h.
  - fix typo in daemon/automount.c.
  - fix direct mount unlink_mount_tree() path.
  - fix unlink mounts umount order.
  - fix incorrect logical compare in unlink_mount_tree().
  - use bit flag for force unlink mounts.
  - improve force unlink option description.
  - remove command fifo on autofs mount fail.
  - add force unlink mounts and exit option.
  - cleanup stale logpri fifo pipes on unlink and exit.
  - fix incorrect systemctl command syntax in autofs(8).
  - update list.h.
  - add hashtable implementation.
  - change mountpoint to mp in struct ext_mount.
  - make external mounts independent of amd_entry.
  - make external mounts use simpler hashtable.
  - add a hash index to mnt_list.
  - use mnt_list for submounts.
  - use mnt_list for amdmounts.
  - make umount_autofs() static.
  - remove force parameter from umount_all().
  - fix remount expire.
  - fix stale offset directories disable mount.
  - use struct mnt_list to track mounted mounts.
  - use struct mnt_list mounted list for expire.
  - remove unused function tree_get_mnt_list().
  - only add expre alarm for active mounts.
  - move submount check into conditional_alarm_add().
  - move lib/master.c to daemon/master.c.
  - use master_list_empty() for list empty check.
  - add helper to construct mount point path.
  - check defaults_read_config() return.
  - move AUTOFS_LIB to end of build rule lines.
  - make autofs.a a shared library.
  - make lookup_file.c nss map read status return handling consistent.
  - fix empty mounts list return from unlink_mount_tree().
- Refreshed autofs-5.1.1-dbus-udisks-monitor.patch
- Replaced automount-fix-master-wait.patch with upstream patch
  autofs-5.1.7-Fix-option-for-master_read_wait.patch</changelog>
  <changelog author="rgoldwyn@suse.com" date="1619092801">- Update pidfile path to /run from /var/run (bsc#1185155)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1631102400">-  autofs-5.1.7-use-default-stack-size-for-threads.patch: Use default
  stack size for threads (bsc#1189199)</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 5.1.8:
  * add xdr_exports().
  * remove mount.x and rpcgen dependencies.
  * dont use realloc in host exports list processing.
  * use sprintf() when constructing hosts mapent.
  * fix mnts_remove_amdmount() uses wrong list.
  * Fix option for master read wait.
  * eliminate cache_lookup_offset() usage.
  * fix is mounted check on non existent path.
  * simplify cache_get_parent().
  * set offset parent in update_offset_entry().
  * remove redundant variables from mount_autofs_offset().
  * remove unused parameter form do_mount_autofs_offset().
  * refactor umount_multi_triggers().
  * eliminate clean_stale_multi_triggers().
  * simplify mount_subtree() mount check.
  * fix mnts_get_expire_list() expire list construction.
  * fix inconsistent locking in umount_subtree_mounts().
  * fix return from umount_subtree_mounts() on offset list delete.
  * pass mapent_cache to update_offset_entry().
  * fix inconsistent locking in parse_mount().
  * remove unused mount offset list lock functions.
  * eliminate count_mounts() from expire_proc_indirect().
  * eliminate some strlen calls in offset handling.
  * don't add offset mounts to mounted mounts table.
  * reduce umount EBUSY check delay.
  * cleanup cache_delete() a little.
  * rename path to m_offset in update_offset_entry().
  * don't pass root to do_mount_autofs_offset().
  * rename tree implementation functions.
  * add some multi-mount macros.
  * remove unused functions cache_dump_multi() and cache_dump_cache().
  * add a len field to struct autofs_point.
  * make tree implementation data independent.
  * add mapent tree implementation.
  * add tree_mapent_add_node().
  * add tree_mapent_delete_offsets().
  * add tree_mapent_traverse_subtree().
  * fix mount_fullpath().
  * add tree_mapent_cleanup_offsets().
  * add set_offset_tree_catatonic().
  * add mount and umount offsets functions.
  * switch to use tree implementation for offsets.
  * remove obsolete functions.
  * remove redundant local var from sun_mount().
  * use mount_fullpath() in one spot in parse_mount().
  * pass root length to mount_fullpath().
  * remove unused function master_submount_list_empty().
  * move amd mounts removal into lib/mounts.c.
  * check for offset with no mount location.
  * remove mounts_mutex.
  * remove unused variable from get_exports().
  * add missing free in handle_mounts().
  * remove redundant if check.
  * fix possible memory leak in master_parse().
  * fix possible memory leak in mnts_add_amdmount().
  * fix double unlock in parse_mount().
  * add length check in umount_subtree_mounts().
  * fix flags check in umount_multi().
  * dont try umount after stat() ENOENT fail.
  * remove redundant assignment in master_add_amd_mount_section_mounts().
  * fix dead code in mnts_add_mount().
  * fix arg not used in error print.
  * fix missing lock release in mount_subtree().
  * fix double free in parse_mapent().
  * refactor lookup_prune_one_cache() a bit.
  * cater for empty mounts list in mnts_get_expire_list().
  * add ext_mount_hash_mutex lock helpers.
  * fix amd section mounts map reload.
  * fix dandling symlink creation if nis support is not available.
  * dont use AUTOFS_DEV_IOCTL_CLOSEMOUNT.
  * fix lookup_prune_one_cache() refactoring change.
  * fix amd hosts mount expire.
  * fix offset entries order.
  * use mapent tree root for tree_mapent_add_node().
  * eliminate redundant cache lookup in tree_mapent_add_node().
  * fix hosts map offset order.
  * fix direct mount deadlock.
  * add missing description of null map option.
  * fix nonstrict offset mount fail handling.
  * fix concat_options() error handling.
  * eliminate some more alloca usage.
  * use default stack size for threads.
  * fix use of possibly NULL var in lookup_program.c:match_key().
  * fix incorrect print format specifiers in get_pkt().
  * add mapent path length check in handle_packet_expire_direct().
  * add copy length check in umount_autofs_indirect().
  * add some buffer length checks to master map parser.
  * add buffer length check to rmdir_path().
  * eliminate buffer usage from handle_mounts_cleanup().
  * add buffer length checks to autofs mount_mount().
  * make NFS version check flags consistent.
  * refactor get_nfs_info().
- drop autofs-5.1.7-Fix-option-for-master_read_wait.patch,
  autofs-5.1.7-use-default-stack-size-for-threads.patch: upstream</changelog>
  <changelog author="nfbrown@suse.com" date="1644494400">- Add autofs-Test-TCP-request-correctly-in-nfs_get_info.patch
  Fix bug when rpcbind not visible
  (bsc#1195587 bsc#1195595)</changelog>
  <changelog author="nfbrown@suse.com" date="1644840000">- 0004-autofs-5.1.3-add-port-parameter-to-rpc_ping.patch
  Suppress portmap calls when port explicitly given
  (bsc#1195697)</changelog>
  <changelog author="nfbrown@suse.com" date="1647259200">- 0005-autofs-5.1.4-fix-incorrect-locking-in-sss-lookup.patch
  Fix locking problem that causes deadlock when sss used.
  (bsc#1196485)</changelog>
  <changelog author="nfbrown@suse.com" date="1647345600">- autofs-5.1.6-fix-quoted-string-length-calc-in-expand.patch
  Fix problem with quote handling
  (bsc#1181715)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1652097600">- Use OPTIONS instead of AUTOFS_OPTIONS in /etc/sysconfig/autofs
  (bsc#1199027)</changelog>
  <changelog author="schubi@suse.de" date="1652356800">- Moved -autofs- file from user specif directory
  /etc/NetworkManager/dispatcher.d to vendor specific directory
  /usr/lib/NetworkManager/dispatcher.d. So, users changes can
  still be done in /etc and will not be overwritten by an update.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1663070400">- Move dbus-1 system.d file to /usr (bsc#1203362)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1681732800">- Add autofs-suse-manpage-remove-initdir.patch
  Removes references of initdir from man pages (bsc#1207881)</changelog>
  <changelog author="ddiss@suse.com" date="1682164800">- autofs-5.1.3-revert-fix-argc-off-by-one-in-mount_aut.patch
  Fix off-by-one error in recursive map handling. (bsc#1209653)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1704974400">- Removed following upstreamed patches because of upgrade:
  * autofs-5.1.6-fix-quoted-string-length-calc-in-expand.patch
  * 0001-use_hostname_for_mounts-shouldn-t-prevent-selection-.patch
  * 0002-Fix-monotonic_elapsed.patch Deleted
  * 0003-autofs-5.1.4-fix-fd-leak-in-rpc_do_create_client.patch Deleted
  * 0004-autofs-5.1.3-add-port-parameter-to-rpc_ping.patch
  * 0005-autofs-5.1.4-fix-incorrect-locking-in-sss-lookup.patch
  * autofs-5.1.3-revert-fix-argc-off-by-one-in-mount_aut.patch
  * autofs-5-1-3-check-map-instances-for-staleness-on-map-update.patch
  * autofs-5-1-3-fix-ordering-of-seteuid-setegid-in-do_spawn.patch
  * autofs-5-1-3-fix-possible-map-instance-memory-leak.patch
  * autofs-5.1.3-revert-fix-argc-off-by-one-in-mount_aut.patch
  * autofs-5.1.6-fix-quoted-string-length-calc-in-expand.patch</changelog>
  <changelog author="ddiss@suse.com" date="1707566400">- update to 5.1.9 (bsc#1219508)
  * fix kernel mount status notification.
  * fix fedfs build flags.
  * fix set open file limit.
  * improve descriptor open error reporting.
  * fix root offset error handling.
  * fix fix root offset error handling.
  * fix nonstrict fail handling of last offset mount.
  * dont fail on duplicate offset entry tree add.
  * fix loop under run in cache_get_offset_parent().
  * bailout on rpc systemerror.
  * fix nfsv4 only mounts should not use rpcbind.
  * simplify cache_add() a little.
  * fix use after free in tree_mapent_delete_offset_tree().
  * fix memory leak in xdr_exports().
  * avoid calling pthread_getspecific() with NULL key_thread_attempt_id.
  * fix sysconf(3) return handling.
  * remove nonstrict parameter from tree_mapent_umount_offsets().
  * fix handling of incorrect return from umount_ent().
  * dont use initgroups() at spawn.
  * fix bashism in configure.
  * musl: fix missing include in hash.h.
  * musl: define fallback dummy NSS config path
  * musl: avoid internal stat.h definitions.
  * musl: add missing include to hash.h for _WORDSIZE.
  * musl: add missing include to log.h for pid_t.
  * musl: define _SWORD_TYPE.
  * add autofs_strerror_r() helper for musl.
  * update configure.
  * handle innetgr() not present in musl.
  * fix missing unlock in sasl_do_kinit_ext_cc().
  * fix a couple of null cache locking problems.
  * restore gcc flags after autoconf Kerberos 5 check.
  * prepare for OpenLDAP SASL binding.
  * let OpenLDAP handle SASL binding.
  * configure: LDAP function checks ignore implicit declarations.
  * improve debug logging of LDAP binds.
  * improve debug logging of SASL binds.
  * internal SASL logging only in debug log mode.
  * more comprehensive verbose logging for LDAP maps.
  * fix invalid tsv access.
  * support SCRAM for SASL binding.
  * ldap_sasl_interactive_bind() needs credentials for auto-detection.
  * fix autofs regression due to positive_timeout.
  * fix parse module instance mutex naming.
  * serialise lookup module open and reinit.
  * coverity fix for invalid access.
  * fix hosts map deadlock on restart.
  * fix deadlock with hosts map reload.
  * fix memory leak in update_hosts_mounts().
  * fix minus only option handling in concat_options().
  * fix incorrect path for is_mounted() in try_remount().
  * fix additional tsv invalid access.
  * fix use_ignore_mount_option description.
  * include addtional log info for mounts.
  * fail on empty replicated host name.
  * improve handling of ENOENT in sss setautomntent().
  * don't immediately call function when waiting.
  * define LDAP_DEPRECATED during LDAP configure check.
  * fix return status of mount_autofs().
  * don't close lookup at umount.
  * fix deadlock in lookups.
  * dont delay expire.
  * make amd mapent search function name clear.
  * rename statemachine() to signal_handler().
  * make signal handling consistent.
  * eliminate last remaining state_pipe usage.
  * add function master_find_mapent_by_devid().
  * use device id to locate autofs_point when setting log priotity.
  * add command pipe handling functions.
  * switch to application wide command pipe.
  * get rid of unused field submnt_count.
  * fix mount tree startup reconnect.
  * fix unterminated read in handle_cmd_pipe_fifo_message().
  * fix memory leak in sasl_do_kinit()
  * fix fix mount tree startup reconnect.
  * fix amd selector function matching.
  * get rid entry thid field.
  * continue expire immediately after submount check.
  * eliminate realpath from mount of submount.
  * eliminate root param from autofs mount and umount.
  * remove redundant fstat from do_mount_direct().
  * get rid of strlen call in handle_packet_missing_direct().
  * remove redundant stat call in lookup_ghost().
  * set mapent dev and ino before adding to index.
  * change to use printf functions in amd parser.
  * dont call umount_subtree_mounts() on parent at umount.
  * dont take parent source lock at mount shutdown.
  * fix possible use after free in handle_mounts_exit().
  * make submount cleanup the same as top level mounts.
  * add soucre parameter to module functions.
  * add ioctlfd open helper.
  * make open files limit configurable.
  * use correct reference for IN6 macro call.
  * dont probe interface that cant send packet.
  * fix some sss error return cases.
  * fix incorrect matching of cached wildcard key.
  * fix expire retry looping.
  * allow -null map in indirect maps.
  * fix multi-mount check.
  * fix let OpenLDAP handle SASL binding.
  * always recreate credential cache.
  * fix ldap_parse_page_control() check.
  * fix typo in create_cmd_pipe_fifo().
  * add null check in master_kill().
  * be more careful with cmd pipe at exit.
  * rename configure.in to configure.ac.
  * update autoconf macros.
  * update autoconf release.
  * update autofs release.
- drop autofs-5-1-3-fix-unset-tsd-group-name-handling.patch, upstream
  as ab8ca82 ("autofs-5.1.3 - fix unset tsd group name handling")
- drop autofs-Test-TCP-request-correctly-in-nfs_get_info.patch,
  superseded by 80845bb ("autofs-5.1.8 - fix nfsv4 only mounts should
  not use rpcbind")
- rebase autofs-5.1.1-dbus-udisks-monitor.patch atop 37fda2c
  ("autofs-5.1.8 - add soucre parameter to module functions")</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="ddiss@suse.com" date="1752667200">- Fix autofs-5.1.1-dbus-udisks-monitor.patch (bsc#1246612) to account for:
  * d2feac6784b6 autofs-5.1.6 - make autofs.a a shared library
  * bcd8e1b642e9 autofs-5.0.7 - use LIBS for link libraries</changelog>
  <changelog author="ddiss@suse.com" date="1769169600">- fix deadlock on map entry removal (bsc#1246325)
  * 0001-autofs-5.1.9-fix-get-parent-multi-mount-check-in-try.patch
  * 0002-autofs-5.1.9-fix-deadlock-in-remount.patch
  * 0003-CHANGELOG-add-a-few-missing-entries.patch
  * 0004-autofs-5.1.9-quiet-possibly-noisy-log-message.patch
  * 0005-autofs-5.1.9-fix-devid-update-on-reload.patch
  * 0006-autofs-5.1.9-fix-cache-writelock-must-be-taken-in-up.patch
  * 0007-autofs-5.1.9-fix-skip-valid-map-entries-on-expire-cl.patch
  * 0008-autofs-5.1.9-remove-unnecessary-call-to-set_direct_m.patch
  * 0009-autofs-5.1.9-remove-unnecessary-assignment-in-umount.patch
  * 0010-autofs-5.1.9-fix-direct-mount-trigger-umount-failure.patch
  * 0011-autofs-5.1.9-refactor-do_umount_autofs_direct.patch
  * 0012-autofs-5.1.9-fix-stale-direct-mount-trigger-not-umou.patch
  * 0013-autofs-5.1.9-add-function-table_lookup_ino.patch
  * 0014-autofs-5.1.9-improve-handling-of-missing-map-entry-f.patch</changelog>
</package>
<package pkgid="59876d5f6b3252ddfbc77a60b3550e676e2bb2c04c8dde7053576fffd4ea85d1" name="autoyast2" arch="noarch">
  <version epoch="0" ver="4.7.3" rel="150700.3.3.1"/>
  <changelog author="mfilka@suse.com" date="1662724800">- bsc#1203227
  - Replaced egrep with grep -E.
- 4.5.4</changelog>
  <changelog author="kanderssen@suse.com" date="1664884800">- Add needed packages for the selected network backend in order to
  prevent it is not declared in the software section (bsc#1201235,
  bsc#1201435)
- 4.5.5</changelog>
  <changelog author="snwint@suse.com" date="1666008000">- fix profile location parsing and add 'repo' URL scheme (jsc#SLE-22578,
  jsc#SLE-24584)
- 4.5.6</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1666612800">- Allow empty values in ask/default, ask/selection/label and
  ask/selection/value elements (bsc#1204448).
- 4.5.7</changelog>
  <changelog author="lslezak@suse.cz" date="1667476800">- Log the profile/rules/classes file SHA1 sum so we can later
  verify that a particular file was or was not used by YaST
  (related to bsc#1204175)
- 4.5.8</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1667476801">- Add support for security policies validation (jsc#SLE-24764).</changelog>
  <changelog author="jreidinger@suse.com" date="1667908800">- Add needed packages for kdump even when kdump section is not
  defined if product enable kdump by default (bsc#1204180)
- 4.5.9</changelog>
  <changelog author="mvidner@suse.com" date="1669118400">- Fix hash vs keyword arguments in RSpec expectations (bsc#1204871)
- 4.5.10</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1669896000">- Avoid a potential crash when autoinst.ycp file is empty or
  missing (bsc#1205732).
- 4.5.11</changelog>
  <changelog author="lslezak@suse.com" date="1671624000">- Added XSLT transformation for easy conversion of the data types in the
  AutoYaST XML profiles between the old and the new format. This allows to
  convert a new profile to the format accepted in SLE15-SP2 or older
  (bsc#1206597)
- 4.5.12</changelog>
  <changelog author="lslezak@suse.com" date="1681300800">- Rebuild the RPM database during upgrade (--rebuilddb) (bsc#1209565)
- 4.5.13</changelog>
  <changelog author="lslezak@suse.com" date="1684843200">- Properly install the selected products, do not lose them after
  resetting the package manager internally (bsc#1202234)
- 4.5.14</changelog>
  <changelog author="jreidinger@suse.com" date="1693569600">- Branch package for SP6 (bsc#1208913)
- 4.6.3</changelog>
  <changelog author="ancor@suse.com" date="1695384000">- Added several LUKS-related elements to the partitioning schema
  (jsc#PED-3878, jsc#PED-5518).
- 4.6.4</changelog>
  <changelog author="lslezak@suse.com" date="1707998400">- Install standard SLES when the AY XML profile selects SLE_HPC,
  it has been dropped in SP6 (jsc#PED-7841)
- 4.6.5</changelog>
  <changelog author="mfilka@suse.com" date="1707998401">- jsc#PED-6407
  - enabled lvm_vg_reuse to be used in general/storage/proposal
    section
- 4.6.6</changelog>
  <changelog author="lslezak@suse.com" date="1725624000">- Branch package for SP7 (bsc#1230201)</changelog>
  <changelog author="kanderssen@suse.com" date="1740052800">- Update the partitioning schema to support the pervasive encryption
  apqns and key type elements (jsc#PED-10950).
- 4.7.1</changelog>
  <changelog author="kanderssen@suse.com" date="1743076800">- Load default security settings before importing the section to
  ensure the settings are set in case there is no security section
  defined and run without confirmation dialog (bsc#1231490)
- 4.7.2</changelog>
  <changelog author="kanderssen@suse.com" date="1747396800">- Move also the firewall section before software in inst_autosetup
  (bsc#1243185).</changelog>
</package>
<package pkgid="f60e80d93b21221c3c0563320750a31c1d604eb755cdd1f601d4f086eaa51ab7" name="autoyast2" arch="src">
  <version epoch="0" ver="4.7.3" rel="150700.3.3.1"/>
  <changelog author="mfilka@suse.com" date="1662724800">- bsc#1203227
  - Replaced egrep with grep -E.
- 4.5.4</changelog>
  <changelog author="kanderssen@suse.com" date="1664884800">- Add needed packages for the selected network backend in order to
  prevent it is not declared in the software section (bsc#1201235,
  bsc#1201435)
- 4.5.5</changelog>
  <changelog author="snwint@suse.com" date="1666008000">- fix profile location parsing and add 'repo' URL scheme (jsc#SLE-22578,
  jsc#SLE-24584)
- 4.5.6</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1666612800">- Allow empty values in ask/default, ask/selection/label and
  ask/selection/value elements (bsc#1204448).
- 4.5.7</changelog>
  <changelog author="lslezak@suse.cz" date="1667476800">- Log the profile/rules/classes file SHA1 sum so we can later
  verify that a particular file was or was not used by YaST
  (related to bsc#1204175)
- 4.5.8</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1667476801">- Add support for security policies validation (jsc#SLE-24764).</changelog>
  <changelog author="jreidinger@suse.com" date="1667908800">- Add needed packages for kdump even when kdump section is not
  defined if product enable kdump by default (bsc#1204180)
- 4.5.9</changelog>
  <changelog author="mvidner@suse.com" date="1669118400">- Fix hash vs keyword arguments in RSpec expectations (bsc#1204871)
- 4.5.10</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1669896000">- Avoid a potential crash when autoinst.ycp file is empty or
  missing (bsc#1205732).
- 4.5.11</changelog>
  <changelog author="lslezak@suse.com" date="1671624000">- Added XSLT transformation for easy conversion of the data types in the
  AutoYaST XML profiles between the old and the new format. This allows to
  convert a new profile to the format accepted in SLE15-SP2 or older
  (bsc#1206597)
- 4.5.12</changelog>
  <changelog author="lslezak@suse.com" date="1681300800">- Rebuild the RPM database during upgrade (--rebuilddb) (bsc#1209565)
- 4.5.13</changelog>
  <changelog author="lslezak@suse.com" date="1684843200">- Properly install the selected products, do not lose them after
  resetting the package manager internally (bsc#1202234)
- 4.5.14</changelog>
  <changelog author="jreidinger@suse.com" date="1693569600">- Branch package for SP6 (bsc#1208913)
- 4.6.3</changelog>
  <changelog author="ancor@suse.com" date="1695384000">- Added several LUKS-related elements to the partitioning schema
  (jsc#PED-3878, jsc#PED-5518).
- 4.6.4</changelog>
  <changelog author="lslezak@suse.com" date="1707998400">- Install standard SLES when the AY XML profile selects SLE_HPC,
  it has been dropped in SP6 (jsc#PED-7841)
- 4.6.5</changelog>
  <changelog author="mfilka@suse.com" date="1707998401">- jsc#PED-6407
  - enabled lvm_vg_reuse to be used in general/storage/proposal
    section
- 4.6.6</changelog>
  <changelog author="lslezak@suse.com" date="1725624000">- Branch package for SP7 (bsc#1230201)</changelog>
  <changelog author="kanderssen@suse.com" date="1740052800">- Update the partitioning schema to support the pervasive encryption
  apqns and key type elements (jsc#PED-10950).
- 4.7.1</changelog>
  <changelog author="kanderssen@suse.com" date="1743076800">- Load default security settings before importing the section to
  ensure the settings are set in case there is no security section
  defined and run without confirmation dialog (bsc#1231490)
- 4.7.2</changelog>
  <changelog author="kanderssen@suse.com" date="1747396800">- Move also the firewall section before software in inst_autosetup
  (bsc#1243185).</changelog>
</package>
<package pkgid="19c18395e5f93e1c6f5269e55c440530cb0548e72765d6c297058aefe2fadefe" name="autoyast2-installation" arch="noarch">
  <version epoch="0" ver="4.7.3" rel="150700.3.3.1"/>
  <changelog author="mfilka@suse.com" date="1662724800">- bsc#1203227
  - Replaced egrep with grep -E.
- 4.5.4</changelog>
  <changelog author="kanderssen@suse.com" date="1664884800">- Add needed packages for the selected network backend in order to
  prevent it is not declared in the software section (bsc#1201235,
  bsc#1201435)
- 4.5.5</changelog>
  <changelog author="snwint@suse.com" date="1666008000">- fix profile location parsing and add 'repo' URL scheme (jsc#SLE-22578,
  jsc#SLE-24584)
- 4.5.6</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1666612800">- Allow empty values in ask/default, ask/selection/label and
  ask/selection/value elements (bsc#1204448).
- 4.5.7</changelog>
  <changelog author="lslezak@suse.cz" date="1667476800">- Log the profile/rules/classes file SHA1 sum so we can later
  verify that a particular file was or was not used by YaST
  (related to bsc#1204175)
- 4.5.8</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1667476801">- Add support for security policies validation (jsc#SLE-24764).</changelog>
  <changelog author="jreidinger@suse.com" date="1667908800">- Add needed packages for kdump even when kdump section is not
  defined if product enable kdump by default (bsc#1204180)
- 4.5.9</changelog>
  <changelog author="mvidner@suse.com" date="1669118400">- Fix hash vs keyword arguments in RSpec expectations (bsc#1204871)
- 4.5.10</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1669896000">- Avoid a potential crash when autoinst.ycp file is empty or
  missing (bsc#1205732).
- 4.5.11</changelog>
  <changelog author="lslezak@suse.com" date="1671624000">- Added XSLT transformation for easy conversion of the data types in the
  AutoYaST XML profiles between the old and the new format. This allows to
  convert a new profile to the format accepted in SLE15-SP2 or older
  (bsc#1206597)
- 4.5.12</changelog>
  <changelog author="lslezak@suse.com" date="1681300800">- Rebuild the RPM database during upgrade (--rebuilddb) (bsc#1209565)
- 4.5.13</changelog>
  <changelog author="lslezak@suse.com" date="1684843200">- Properly install the selected products, do not lose them after
  resetting the package manager internally (bsc#1202234)
- 4.5.14</changelog>
  <changelog author="jreidinger@suse.com" date="1693569600">- Branch package for SP6 (bsc#1208913)
- 4.6.3</changelog>
  <changelog author="ancor@suse.com" date="1695384000">- Added several LUKS-related elements to the partitioning schema
  (jsc#PED-3878, jsc#PED-5518).
- 4.6.4</changelog>
  <changelog author="lslezak@suse.com" date="1707998400">- Install standard SLES when the AY XML profile selects SLE_HPC,
  it has been dropped in SP6 (jsc#PED-7841)
- 4.6.5</changelog>
  <changelog author="mfilka@suse.com" date="1707998401">- jsc#PED-6407
  - enabled lvm_vg_reuse to be used in general/storage/proposal
    section
- 4.6.6</changelog>
  <changelog author="lslezak@suse.com" date="1725624000">- Branch package for SP7 (bsc#1230201)</changelog>
  <changelog author="kanderssen@suse.com" date="1740052800">- Update the partitioning schema to support the pervasive encryption
  apqns and key type elements (jsc#PED-10950).
- 4.7.1</changelog>
  <changelog author="kanderssen@suse.com" date="1743076800">- Load default security settings before importing the section to
  ensure the settings are set in case there is no security section
  defined and run without confirmation dialog (bsc#1231490)
- 4.7.2</changelog>
  <changelog author="kanderssen@suse.com" date="1747396800">- Move also the firewall section before software in inst_autosetup
  (bsc#1243185).</changelog>
</package>
<package pkgid="31308ebc4af92ca61d1b8344ccefdb0fbe38e3c2c416f3ac8e0f743fb23ac9fd" name="avahi" arch="src">
  <version epoch="0" ver="0.8" rel="150600.15.12.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- avahi-daemon-check-dns.sh: convert obsolete egrep call to grep -E
  (boo#1203092)</changelog>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
</package>
<package pkgid="320cf2194b71df9f024de149b879967a15eff9c26c20fa83313f4a422887a632" name="avahi" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.12.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- avahi-daemon-check-dns.sh: convert obsolete egrep call to grep -E
  (boo#1203092)</changelog>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
</package>
<package pkgid="7d5fd2cd41990577e1af66835c256d0693fe55c899588a195ace3a9ceaf81ad8" name="avahi" arch="src">
  <version epoch="0" ver="0.8" rel="150600.15.15.1"/>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1775044800">- Add avahi-CVE-2026-24401.patch: Fix unsolicited mDNS response
  containing a recursive CNAME record (bsc#1257235).</changelog>
</package>
<package pkgid="45cad98e7ae6ff085222c5f190afae35df6517796ce9faf839ebbac31d993293" name="avahi" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.15.1"/>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1775044800">- Add avahi-CVE-2026-24401.patch: Fix unsolicited mDNS response
  containing a recursive CNAME record (bsc#1257235).</changelog>
</package>
<package pkgid="754a29278962a4a8c3a2d5f3f2eade304e8150c0a4d5e712aba8ec536e41ee9a" name="avahi" arch="src">
  <version epoch="0" ver="0.8" rel="150600.15.9.1"/>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="jengelh@inai.de" date="1650024000">- Stop requiring "avahi" from "libavahi-devel". The devel package
  ought to facilitate building programs with avahi, not run the
  whole deamon.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1657368000">- Move the dbus-1 system.d file to /usr (bsc#1201345)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- avahi-daemon-check-dns.sh: convert obsolete egrep call to grep -E
  (boo#1203092)</changelog>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
</package>
<package pkgid="0ba34990ddb60e963bc86d421e6dc1883f3020b592e041373dcc882665a35cfb" name="avahi" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.9.1"/>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="jengelh@inai.de" date="1650024000">- Stop requiring "avahi" from "libavahi-devel". The devel package
  ought to facilitate building programs with avahi, not run the
  whole deamon.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1657368000">- Move the dbus-1 system.d file to /usr (bsc#1201345)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- avahi-daemon-check-dns.sh: convert obsolete egrep call to grep -E
  (boo#1203092)</changelog>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
</package>
<package pkgid="d02ac4f4c9a00c2bd79160aab708485b3ed6fe227b720489a824e856fb1909bc" name="avahi-compat-howl-devel" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.12.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- avahi-daemon-check-dns.sh: convert obsolete egrep call to grep -E
  (boo#1203092)</changelog>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
</package>
<package pkgid="b7f2cc73d1e28d5445a0bbbd684b39bb75d856965a8772768842412684e50dd4" name="avahi-compat-howl-devel" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.15.1"/>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1775044800">- Add avahi-CVE-2026-24401.patch: Fix unsolicited mDNS response
  containing a recursive CNAME record (bsc#1257235).</changelog>
</package>
<package pkgid="3dfbf195a12a634ee89fd71ebfa964ca484440e3508717e3b6be3cb6f5ab9238" name="avahi-compat-howl-devel" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.9.1"/>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="jengelh@inai.de" date="1650024000">- Stop requiring "avahi" from "libavahi-devel". The devel package
  ought to facilitate building programs with avahi, not run the
  whole deamon.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1657368000">- Move the dbus-1 system.d file to /usr (bsc#1201345)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- avahi-daemon-check-dns.sh: convert obsolete egrep call to grep -E
  (boo#1203092)</changelog>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
</package>
<package pkgid="d4e3d1d29a8b3a28b95ba2b1b0c7ca1a642b3788608b7cb87d83692570c6fda9" name="avahi-compat-mDNSResponder-devel" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.12.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- avahi-daemon-check-dns.sh: convert obsolete egrep call to grep -E
  (boo#1203092)</changelog>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
</package>
<package pkgid="11e1cae4f8dbd7df4d7817c0027aa847f1ff6902f7c9435b73dc58169e2116df" name="avahi-compat-mDNSResponder-devel" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.15.1"/>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1775044800">- Add avahi-CVE-2026-24401.patch: Fix unsolicited mDNS response
  containing a recursive CNAME record (bsc#1257235).</changelog>
</package>
<package pkgid="e925ad56ebb95a984b6c3ae5b05e5952aaec8a6b7f3774787ae511d397eca1de" name="avahi-compat-mDNSResponder-devel" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.9.1"/>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="jengelh@inai.de" date="1650024000">- Stop requiring "avahi" from "libavahi-devel". The devel package
  ought to facilitate building programs with avahi, not run the
  whole deamon.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1657368000">- Move the dbus-1 system.d file to /usr (bsc#1201345)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- avahi-daemon-check-dns.sh: convert obsolete egrep call to grep -E
  (boo#1203092)</changelog>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
</package>
<package pkgid="c93c5d5ef211dc073698425642c177c6956cd504ac9515ee3b6bd0694e574fd7" name="avahi-glib2" arch="src">
  <version epoch="0" ver="0.8" rel="150600.15.12.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- avahi-daemon-check-dns.sh: convert obsolete egrep call to grep -E
  (boo#1203092)</changelog>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
</package>
<package pkgid="f444e283736acce3c1a5e4daaea5b61ec8d794c1203466a5fc346ee0eaf0fed8" name="avahi-glib2" arch="src">
  <version epoch="0" ver="0.8" rel="150600.15.15.1"/>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1775044800">- Add avahi-CVE-2026-24401.patch: Fix unsolicited mDNS response
  containing a recursive CNAME record (bsc#1257235).</changelog>
</package>
<package pkgid="0ff77f951e1237a8f38637ade4b41a4051faa98cd2042c5954ca389249d6a007" name="avahi-glib2" arch="src">
  <version epoch="0" ver="0.8" rel="150600.15.9.1"/>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="jengelh@inai.de" date="1650024000">- Stop requiring "avahi" from "libavahi-devel". The devel package
  ought to facilitate building programs with avahi, not run the
  whole deamon.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1657368000">- Move the dbus-1 system.d file to /usr (bsc#1201345)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- avahi-daemon-check-dns.sh: convert obsolete egrep call to grep -E
  (boo#1203092)</changelog>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
</package>
<package pkgid="065b20d67d8b9a6387f0eecb6bc7dd53350176b7e7c467601f6158ef24e5b9f5" name="avahi-lang" arch="noarch">
  <version epoch="0" ver="0.8" rel="150600.15.12.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- avahi-daemon-check-dns.sh: convert obsolete egrep call to grep -E
  (boo#1203092)</changelog>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
</package>
<package pkgid="6f3b889f56d12386b86819db44b5857176517603b778e3d47ac9a16304160fd9" name="avahi-lang" arch="noarch">
  <version epoch="0" ver="0.8" rel="150600.15.15.1"/>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1775044800">- Add avahi-CVE-2026-24401.patch: Fix unsolicited mDNS response
  containing a recursive CNAME record (bsc#1257235).</changelog>
</package>
<package pkgid="01a05fdb24ff088db638a5b7401fbe1c1bbf715fb3e4e4a4055ea3ecd4416b71" name="avahi-lang" arch="noarch">
  <version epoch="0" ver="0.8" rel="150600.15.9.1"/>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="jengelh@inai.de" date="1650024000">- Stop requiring "avahi" from "libavahi-devel". The devel package
  ought to facilitate building programs with avahi, not run the
  whole deamon.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1657368000">- Move the dbus-1 system.d file to /usr (bsc#1201345)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- avahi-daemon-check-dns.sh: convert obsolete egrep call to grep -E
  (boo#1203092)</changelog>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
</package>
<package pkgid="8c561dfbb542ac1f5958f146b9f78d049354ec1c7d15facda73325896a8b6a6c" name="avahi-utils" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.12.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- avahi-daemon-check-dns.sh: convert obsolete egrep call to grep -E
  (boo#1203092)</changelog>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
</package>
<package pkgid="59b34fac1593f6bd8dad503b27560eb1f4c36ad02ccf3dad8269ebbe3d9f0461" name="avahi-utils" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.15.1"/>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1775044800">- Add avahi-CVE-2026-24401.patch: Fix unsolicited mDNS response
  containing a recursive CNAME record (bsc#1257235).</changelog>
</package>
<package pkgid="1e329988bf752cee702a818f768ba66d8e53ffa64b1c9cee0e371098537c36cd" name="avahi-utils" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.9.1"/>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="jengelh@inai.de" date="1650024000">- Stop requiring "avahi" from "libavahi-devel". The devel package
  ought to facilitate building programs with avahi, not run the
  whole deamon.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1657368000">- Move the dbus-1 system.d file to /usr (bsc#1201345)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- avahi-daemon-check-dns.sh: convert obsolete egrep call to grep -E
  (boo#1203092)</changelog>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
</package>
<package pkgid="644ffd3b644b7fd5bc9591910cf44f0acef7be9a4c6377842e64fbd4ecccb6cc" name="bash" arch="src">
  <version epoch="0" ver="4.4" rel="150400.27.6.1"/>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
  <changelog author="werner@suse.de" date="1628078400">- Add patch bash-4.4-jobctrl.patch to allow process group asignment
  even for modern kernels (bsc#1057452, bsc#1188287)</changelog>
  <changelog author="werner@suse.de" date="1629201600">- Post update-alternatives approach back from factory for /bin/sh
  (SLE-19670)</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Using package bash-sh instead of the update-alternative
  mechanism.</changelog>
  <changelog author="werner@suse.de" date="1644580800">- Port bash-sh package approach back to SLE-15-SP4 (jsc#SLE-18234)</changelog>
  <changelog author="werner@suse.de" date="1648123200">- Do use old legacy PreReq to get bash installed before bash-sh
  but do not require bash-sh by bash (bsc#1197448)</changelog>
  <changelog author="werner@suse.de" date="1724241600">- Add patch boo1227807.patch
  * Load completion file eveh if a brace expansion is in the
    command line included (boo#1227807)</changelog>
  <changelog author="werner@suse.de" date="1760356800">- Add patch bsc1245199.patch
  * Fix histfile missing timestamp for the oldest record (bsc#1245199)</changelog>
</package>
<package pkgid="a9c59ad8a6cfef891ff6d2d3b72389942027cec8af9618980d546d7b4014723a" name="bash" arch="x86_64">
  <version epoch="0" ver="4.4" rel="150400.27.6.1"/>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
  <changelog author="werner@suse.de" date="1628078400">- Add patch bash-4.4-jobctrl.patch to allow process group asignment
  even for modern kernels (bsc#1057452, bsc#1188287)</changelog>
  <changelog author="werner@suse.de" date="1629201600">- Post update-alternatives approach back from factory for /bin/sh
  (SLE-19670)</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Using package bash-sh instead of the update-alternative
  mechanism.</changelog>
  <changelog author="werner@suse.de" date="1644580800">- Port bash-sh package approach back to SLE-15-SP4 (jsc#SLE-18234)</changelog>
  <changelog author="werner@suse.de" date="1648123200">- Do use old legacy PreReq to get bash installed before bash-sh
  but do not require bash-sh by bash (bsc#1197448)</changelog>
  <changelog author="werner@suse.de" date="1724241600">- Add patch boo1227807.patch
  * Load completion file eveh if a brace expansion is in the
    command line included (boo#1227807)</changelog>
  <changelog author="werner@suse.de" date="1760356800">- Add patch bsc1245199.patch
  * Fix histfile missing timestamp for the oldest record (bsc#1245199)</changelog>
</package>
<package pkgid="1f03fece5ea33401688a1f7c6e64acba233de728eb672ca0b5b6dcbf5b41a2c2" name="bash-devel" arch="x86_64">
  <version epoch="0" ver="4.4" rel="150400.27.6.1"/>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
  <changelog author="werner@suse.de" date="1628078400">- Add patch bash-4.4-jobctrl.patch to allow process group asignment
  even for modern kernels (bsc#1057452, bsc#1188287)</changelog>
  <changelog author="werner@suse.de" date="1629201600">- Post update-alternatives approach back from factory for /bin/sh
  (SLE-19670)</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Using package bash-sh instead of the update-alternative
  mechanism.</changelog>
  <changelog author="werner@suse.de" date="1644580800">- Port bash-sh package approach back to SLE-15-SP4 (jsc#SLE-18234)</changelog>
  <changelog author="werner@suse.de" date="1648123200">- Do use old legacy PreReq to get bash installed before bash-sh
  but do not require bash-sh by bash (bsc#1197448)</changelog>
  <changelog author="werner@suse.de" date="1724241600">- Add patch boo1227807.patch
  * Load completion file eveh if a brace expansion is in the
    command line included (boo#1227807)</changelog>
  <changelog author="werner@suse.de" date="1760356800">- Add patch bsc1245199.patch
  * Fix histfile missing timestamp for the oldest record (bsc#1245199)</changelog>
</package>
<package pkgid="428773bcdcd5e2b8f2875e76c3159922d6f53ed9b40414786c682d6d7115d101" name="bash-doc" arch="noarch">
  <version epoch="0" ver="4.4" rel="150400.27.6.1"/>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
  <changelog author="werner@suse.de" date="1628078400">- Add patch bash-4.4-jobctrl.patch to allow process group asignment
  even for modern kernels (bsc#1057452, bsc#1188287)</changelog>
  <changelog author="werner@suse.de" date="1629201600">- Post update-alternatives approach back from factory for /bin/sh
  (SLE-19670)</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Using package bash-sh instead of the update-alternative
  mechanism.</changelog>
  <changelog author="werner@suse.de" date="1644580800">- Port bash-sh package approach back to SLE-15-SP4 (jsc#SLE-18234)</changelog>
  <changelog author="werner@suse.de" date="1648123200">- Do use old legacy PreReq to get bash installed before bash-sh
  but do not require bash-sh by bash (bsc#1197448)</changelog>
  <changelog author="werner@suse.de" date="1724241600">- Add patch boo1227807.patch
  * Load completion file eveh if a brace expansion is in the
    command line included (boo#1227807)</changelog>
  <changelog author="werner@suse.de" date="1760356800">- Add patch bsc1245199.patch
  * Fix histfile missing timestamp for the oldest record (bsc#1245199)</changelog>
</package>
<package pkgid="9cf040bfbd906cb8aba8e5892627bd3661c5a143bf78888986d27e9b5ea0c13a" name="bash-lang" arch="noarch">
  <version epoch="0" ver="4.4" rel="150400.27.6.1"/>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
  <changelog author="werner@suse.de" date="1628078400">- Add patch bash-4.4-jobctrl.patch to allow process group asignment
  even for modern kernels (bsc#1057452, bsc#1188287)</changelog>
  <changelog author="werner@suse.de" date="1629201600">- Post update-alternatives approach back from factory for /bin/sh
  (SLE-19670)</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Using package bash-sh instead of the update-alternative
  mechanism.</changelog>
  <changelog author="werner@suse.de" date="1644580800">- Port bash-sh package approach back to SLE-15-SP4 (jsc#SLE-18234)</changelog>
  <changelog author="werner@suse.de" date="1648123200">- Do use old legacy PreReq to get bash installed before bash-sh
  but do not require bash-sh by bash (bsc#1197448)</changelog>
  <changelog author="werner@suse.de" date="1724241600">- Add patch boo1227807.patch
  * Load completion file eveh if a brace expansion is in the
    command line included (boo#1227807)</changelog>
  <changelog author="werner@suse.de" date="1760356800">- Add patch bsc1245199.patch
  * Fix histfile missing timestamp for the oldest record (bsc#1245199)</changelog>
</package>
<package pkgid="b5007b6f74819b08ef1a438efbc505afc839e18b9ba357ef72897344f0423427" name="bash-sh" arch="x86_64">
  <version epoch="0" ver="4.4" rel="150400.27.6.1"/>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
  <changelog author="werner@suse.de" date="1628078400">- Add patch bash-4.4-jobctrl.patch to allow process group asignment
  even for modern kernels (bsc#1057452, bsc#1188287)</changelog>
  <changelog author="werner@suse.de" date="1629201600">- Post update-alternatives approach back from factory for /bin/sh
  (SLE-19670)</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Using package bash-sh instead of the update-alternative
  mechanism.</changelog>
  <changelog author="werner@suse.de" date="1644580800">- Port bash-sh package approach back to SLE-15-SP4 (jsc#SLE-18234)</changelog>
  <changelog author="werner@suse.de" date="1648123200">- Do use old legacy PreReq to get bash installed before bash-sh
  but do not require bash-sh by bash (bsc#1197448)</changelog>
  <changelog author="werner@suse.de" date="1724241600">- Add patch boo1227807.patch
  * Load completion file eveh if a brace expansion is in the
    command line included (boo#1227807)</changelog>
  <changelog author="werner@suse.de" date="1760356800">- Add patch bsc1245199.patch
  * Fix histfile missing timestamp for the oldest record (bsc#1245199)</changelog>
</package>
<package pkgid="e18b05187061da001499c185cebdd93db7901afb011c720cc6c64d50917aee95" name="bind" arch="src">
  <version epoch="0" ver="9.16.6" rel="150300.22.53.1"/>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642507200">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- When using forwarders, bogus NS records supplied by, or via, those
  forwarders may be cached and used by named if it needs to recurse
  for any reason, causing it to obtain and pass on potentially
  incorrect answers.
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657108800">- Changed ownership of /var/lib/named/master from named:named to
  root:root.
  [bsc#1201247, bind.conf]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Security Fixes:
  * Previously, there was no limit to the number of database lookups
  performed while processing large delegations, which could be abused
  to severely impact the performance of named running as a recursive
  resolver. This has been fixed.
  [bsc#1203614, CVE-2022-2795, bind-CVE-2022-2795.patch]
  * A memory leak was fixed that could be externally triggered in the
  DNSSEC verification code for the ECDSA algorithm.
  [bsc#1203619, CVE-2022-38177, bind-CVE-2022-38177.patch]
  * Memory leaks were fixed that could be externally triggered in the
  DNSSEC verification code for the EdDSA algorithm.
  [bsc#1203620, CVE-2022-38178, bind-CVE-2022-38178.patch]</changelog>
  <changelog author="scabrero@suse.de" date="1669636800">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1674734400">- Security Fix:
  * An UPDATE message flood could cause named to exhaust all
    available memory. This flaw was addressed by adding a new
    update-quota option that controls the maximum number of
    outstanding DNS UPDATE messages that named can hold in a queue
    at any given time (default: 100).
  [bsc#1207471, CVE-2022-3094, bind-CVE-2022-3094.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1687435200">- Security Fix:
  * The overmem cleaning process has been improved, to prevent the
    cache from significantly exceeding the configured
    max-cache-size limit.
  [bsc#1212544, CVE-2023-2828, bind-CVE-2023-2828.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1689076800">- Add dnstap support
  [jsc#PED-4852]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1693483200">- Add libs as requires because they may need to be updated when
  installing bind
  [bsc#1213748]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1695297600">- Security Fix:
  * Previously, sending a specially crafted message over the
    control channel could cause the packet-parsing code to run out
    of available stack memory, causing named to terminate
    unexpectedly. This has been fixed.
  [bsc#1215472, CVE-2023-3341, bind-CVE-2023-3341.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1717675200">- Security Fixes:
  * Validating DNS messages containing a lot of DNSSEC signatures
    could cause excessive CPU load, leading to a denial-of-service
    condition. This has been fixed. (CVE-2023-50387)
    [bsc#1219823, bind-CVE-2023-50387-CVE-2023-50868.patch]
  * Preparing an NSEC3 closest encloser proof could cause excessiv
    CPU load, leading to a denial-of-service condition. This has
    been fixed. (CVE-2023-50868)
    [bsc#1219826, bind-CVE-2023-50387-CVE-2023-50868.patch]
  * Parsing DNS messages with many different names could cause
    excessive CPU load. This has been fixed. (CVE-2023-4408)
    [bsc#1219851, bind-CVE-2023-4408.patch]
  * Specific queries could cause named to crash with an assertion
    failure when nxdomain-redirect was enabled. This has been
    fixed. (CVE-2023-5517)
    [bsc#1219852, bind-CVE-2023-5517.patch]
  * Query patterns that continuously triggered cache database
    maintenance could cause an excessive amount of memory to be
    allocated, exceeding max-cache-size and potentially leading to
    all available memory on the host running named being exhausted
    This has been fixed. (CVE-2023-6516)
    [bsc#1219854, bind-CVE-2023-6516.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1722427200">- Security Fixes:
  * It is possible to craft excessively large numbers of resource
    record types for a given owner name, which has the effect of
    slowing down database processing. This has been addressed by
    adding a configurable limit to the number of records that can
    be stored per name and type in a cache or zone database. The
    default is 100, which can be tuned with the new
    max-types-per-name option. (CVE-2024-1737)
    [bsc#1228256, bind-9.16-CVE-2024-1737.patch]
  * Validating DNS messages signed using the SIG(0) protocol (RFC
    2931) could cause excessive CPU load, leading to a
    denial-of-service condition. Support for SIG(0) message
    validation was removed from this version of named.
    (CVE-2024-1975)
    [bsc#1228257, bind-9.16-CVE-2024-1975.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Limit additional section processing for large RDATA sets.
  When answering queries, don’t add data to the additional
  section if the answer has more than 13 names in the RDATA. This
  limits the number of lookups into the database(s) during a
  single client query, reducing the query-processing load.
  (CVE-2024-11187)
  [bsc#1236596, bind-9.16.6-CVE-2024-11187.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761220800">- Security Fixes:
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379, bind-9.16.6-CVE-2025-40778.patch]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380, bind-9.16.6-CVE-2025-40780.patch]</changelog>
</package>
<package pkgid="ae17d38aa60a9fbef0356b9b8dac6d68e930fbabaed336ab37048e5c60c3d92c" name="bind" arch="src">
  <version epoch="0" ver="9.16.6" rel="150300.22.56.1"/>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642507200">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- When using forwarders, bogus NS records supplied by, or via, those
  forwarders may be cached and used by named if it needs to recurse
  for any reason, causing it to obtain and pass on potentially
  incorrect answers.
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657108800">- Changed ownership of /var/lib/named/master from named:named to
  root:root.
  [bsc#1201247, bind.conf]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Security Fixes:
  * Previously, there was no limit to the number of database lookups
  performed while processing large delegations, which could be abused
  to severely impact the performance of named running as a recursive
  resolver. This has been fixed.
  [bsc#1203614, CVE-2022-2795, bind-CVE-2022-2795.patch]
  * A memory leak was fixed that could be externally triggered in the
  DNSSEC verification code for the ECDSA algorithm.
  [bsc#1203619, CVE-2022-38177, bind-CVE-2022-38177.patch]
  * Memory leaks were fixed that could be externally triggered in the
  DNSSEC verification code for the EdDSA algorithm.
  [bsc#1203620, CVE-2022-38178, bind-CVE-2022-38178.patch]</changelog>
  <changelog author="scabrero@suse.de" date="1669636800">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1674734400">- Security Fix:
  * An UPDATE message flood could cause named to exhaust all
    available memory. This flaw was addressed by adding a new
    update-quota option that controls the maximum number of
    outstanding DNS UPDATE messages that named can hold in a queue
    at any given time (default: 100).
  [bsc#1207471, CVE-2022-3094, bind-CVE-2022-3094.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1687435200">- Security Fix:
  * The overmem cleaning process has been improved, to prevent the
    cache from significantly exceeding the configured
    max-cache-size limit.
  [bsc#1212544, CVE-2023-2828, bind-CVE-2023-2828.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1689076800">- Add dnstap support
  [jsc#PED-4852]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1693483200">- Add libs as requires because they may need to be updated when
  installing bind
  [bsc#1213748]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1695297600">- Security Fix:
  * Previously, sending a specially crafted message over the
    control channel could cause the packet-parsing code to run out
    of available stack memory, causing named to terminate
    unexpectedly. This has been fixed.
  [bsc#1215472, CVE-2023-3341, bind-CVE-2023-3341.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1717675200">- Security Fixes:
  * Validating DNS messages containing a lot of DNSSEC signatures
    could cause excessive CPU load, leading to a denial-of-service
    condition. This has been fixed. (CVE-2023-50387)
    [bsc#1219823, bind-CVE-2023-50387-CVE-2023-50868.patch]
  * Preparing an NSEC3 closest encloser proof could cause excessiv
    CPU load, leading to a denial-of-service condition. This has
    been fixed. (CVE-2023-50868)
    [bsc#1219826, bind-CVE-2023-50387-CVE-2023-50868.patch]
  * Parsing DNS messages with many different names could cause
    excessive CPU load. This has been fixed. (CVE-2023-4408)
    [bsc#1219851, bind-CVE-2023-4408.patch]
  * Specific queries could cause named to crash with an assertion
    failure when nxdomain-redirect was enabled. This has been
    fixed. (CVE-2023-5517)
    [bsc#1219852, bind-CVE-2023-5517.patch]
  * Query patterns that continuously triggered cache database
    maintenance could cause an excessive amount of memory to be
    allocated, exceeding max-cache-size and potentially leading to
    all available memory on the host running named being exhausted
    This has been fixed. (CVE-2023-6516)
    [bsc#1219854, bind-CVE-2023-6516.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1722427200">- Security Fixes:
  * It is possible to craft excessively large numbers of resource
    record types for a given owner name, which has the effect of
    slowing down database processing. This has been addressed by
    adding a configurable limit to the number of records that can
    be stored per name and type in a cache or zone database. The
    default is 100, which can be tuned with the new
    max-types-per-name option. (CVE-2024-1737)
    [bsc#1228256, bind-9.16-CVE-2024-1737.patch]
  * Validating DNS messages signed using the SIG(0) protocol (RFC
    2931) could cause excessive CPU load, leading to a
    denial-of-service condition. Support for SIG(0) message
    validation was removed from this version of named.
    (CVE-2024-1975)
    [bsc#1228257, bind-9.16-CVE-2024-1975.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Limit additional section processing for large RDATA sets.
  When answering queries, don’t add data to the additional
  section if the answer has more than 13 names in the RDATA. This
  limits the number of lookups into the database(s) during a
  single client query, reducing the query-processing load.
  (CVE-2024-11187)
  [bsc#1236596, bind-9.16.6-CVE-2024-11187.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761220800">- Security Fixes:
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379, bind-9.16.6-CVE-2025-40778.patch]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380, bind-9.16.6-CVE-2025-40780.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1775044800">- Fix unbounded NSEC3 iterations when validating referrals to
  unsigned delegations.
  (CVE-2026-1519)
  [bsc#1260805, bind-9.16.6-CVE-2026-1519.patch]</changelog>
</package>
<package pkgid="6f482ca24a009d9ff99005f0bf7c86d0ef7eb6925047271787be0f7cdbfc5c31" name="bind" arch="src">
  <version epoch="0" ver="9.20.11" rel="150700.3.6.1"/>
  <changelog author="jorik.cronenberg@suse.com" date="1662724800">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Update to release 9.16.33
  Security Fixes:
  * Previously, there was no limit to the number of database lookups
    performed while processing large delegations, which could be
    abused to severely impact the performance of named running as a
    recursive resolver. This has been fixed. (CVE-2022-2795)
  * named running as a resolver with the stale-answer-client-timeout
    option set to 0 could crash with an assertion failure, when
    there was a stale CNAME in the cache for the incoming query.
    This has been fixed. (CVE-2022-3080)
  * A memory leak was fixed that could be externally triggered in the
    DNSSEC verification code for the ECDSA algorithm. (CVE-2022-38177)
  * Memory leaks were fixed that could be externally triggered in the
    DNSSEC verification code for the EdDSA algorithm. (CVE-2022-38178)
  Feature Changes:
  * Response Rate Limiting (RRL) code now treats all QNAMEs that are
    subject to wildcard processing within a given zone as the same
    name, to prevent circumventing the limits enforced by RRL.
  * Zones using dnssec-policy now require dynamic DNS or
    inline-signing to be configured explicitly.
  * A backward-compatible approach was implemented for encoding
    internationalized domain names (IDN) in dig and converting the
    domain to IDNA2008 form; if that fails,
    BIND tries an IDNA2003 conversion.
  Bug Fixes:
  * A serve-stale bug was fixed, where BIND would try to return stale
    data from cache for lookups that received duplicate queries or
    queries that would be dropped. This bug resulted in premature
    SERVFAIL responses, and has now been resolved.
  [bsc#1203614, bsc#1203618, bsc#1203619, bsc#1203620, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1668168000">- Update to release 9.16.34
  New Features:
  * Support for parsing and validating the dohpath service
    parameter in SVCB records was added.
  * named now logs the supported cryptographic algorithms during
    startup and in the output of named -V.
  Bug Fixes:
  * Changing just the TSIG key names for primaries in catalog
    zones’ member zones was not effective. This has been fixed.
  Known Issues:
  * Upgrading from BIND 9.16.32 or any older version may require a
    manual configuration change. The following configurations are
    affected:
  - type primary zones configured with dnssec-policy but without
    either allow-update or update-policy,
  - type secondary zones configured with dnssec-policy.
    In these cases please add inline-signing yes; to the individual
    zone configuration(s). Without applying this change, named will
    fail to start. For more details, see
    https://kb.isc.org/docs/dnssec-policy-requires-dynamic-dns-or-inline-signing
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1669291200">- Update to release 9.16.35
  Bug Fixes:
  * A crash was fixed that happened when a dnssec-policy zone that
    used NSEC3 was reconfigured to enable inline-signing.
  * In certain resolution scenarios, quotas could be erroneously
    reached for servers, including any configured forwarders,
    resulting in SERVFAIL answers being sent to clients.
  * rpz-ip rules in response-policy zones could be ineffective in
    some cases if a query had the CD (Checking Disabled) bit set to
    1.
  * Previously, if Internet connectivity issues were experienced
    during the initial startup of named, a BIND resolver with
    dnssec-validation set to auto could enter into a state where it
    would not recover without stopping named, manually deleting the
    managed-keys.bind and managed-keys.bind.jnl files, and starting
    named again.
  * The statistics counter representing the current number of
    clients awaiting recursive resolution results (RecursClients)
    could overflow in certain resolution scenarios.
  * Previously, BIND failed to start on Solaris-based systems with
    hundreds of CPUs.
  * When a DNS resource record’s TTL value was equal to the
    resolver’s configured prefetch “eligibility” value, the record
    was erroneously not treated as eligible for prefetching.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1671710400">- Update to release 9.16.36
  Feature Changes:
  * The auto-dnssec option has been deprecated and will be removed
    in a future BIND 9.19.x release. Please migrate to
    dnssec-policy.
  Bug Fixes:
  * When a catalog zone was removed from the configuration, in some
    cases a dangling pointer could cause the named process to
    crash.
  * When a zone was deleted from a server, a key management object
    related to that zone was inadvertently kept in memory and only
    released upon shutdown. This could lead to constantly
    increasing memory use on servers with a high rate of changes
    affecting the set of zones being served.
  * In certain cases, named waited for the resolution of
    outstanding recursive queries to finish before shutting down.
  * The zone &lt;name&gt;/&lt;class&gt;: final reference detached log message
    was moved from the INFO log level to the DEBUG(1) log level to
    prevent the named-checkzone tool from superfluously logging
    this message in non-debug mode.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1674561600">- Update to release 9.16.37
  Security Fixes:
  * An UPDATE message flood could cause named to exhaust all
    available memory. This flaw was addressed by adding a new
    update-quota option that controls the maximum number of
    outstanding DNS UPDATE messages that named can hold in a queue
    at any given time (default: 100). (CVE-2022-3094)
  * named could crash with an assertion failure when an RRSIG query
    was received and stale-answer-client-timeout was set to a
    non-zero value. This has been fixed. (CVE-2022-3736)
  * named running as a resolver with the
    stale-answer-client-timeout option set to any value greater
    than 0 could crash with an assertion failure, when the
    recursive-clients soft quota was reached. This has been fixed.
    (CVE-2022-3924)
  New Features:
  * The new update-quota option can be used to control the number
    of simultaneous DNS UPDATE messages that can be processed to
    update an authoritative zone on a primary server, or forwarded
    to the primary server by a secondary server. The default is
    100. A new statistics counter has also been added to record
    events when this quota is exceeded, and the version numbers for
    the XML and JSON statistics schemas have been updated.
  Feature Changes:
  * The Differentiated Services Code Point (DSCP) feature in BIND
    has been deprecated. Configuring DSCP values in named.conf now
    causes a warning to be logged. Note that this feature has only
    been partly operational since the new Network Manager was
    introduced in BIND 9.16.0.
  * The catalog zone implementation has been optimized to work with
    hundreds of thousands of member zones.
  Bug Fixes:
  * In certain query resolution scenarios (e.g. when following
    CNAME records), named configured to answer from stale cache
    could return a SERVFAIL response despite a usable, non-stale
    answer being present in the cache. This has been fixed.
  [bsc#1207471, bsc#1207473, bsc#1207475, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1676548800">- Update to release 9.16.38
  Bug Fixes:
  * A constant stream of zone additions and deletions via rndc
    reconfig could cause increased memory consumption due to
    delayed cleaning of view memory. This has been fixed.
  * The speed of the message digest algorithms (MD5, SHA-1, SHA-2),
    and of NSEC3 hashing, has been improved.
  * Building BIND 9 failed when the --enable-dnsrps switch for
    ./configure was used. This has been fixed.
  [jsc#SLE-24600]
- Updated keyring and signature</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1678881600">- Update to release 9.16.39
  Feature Changes:
  * libuv support for receiving multiple UDP messages in a single
    recvmmsg() system call has been tweaked several times between
    libuv versions 1.35.0 and 1.40.0; the current recommended libuv
    version is 1.40.0 or higher. New rules are now in effect for
    running with a different version of libuv than the one used at
    compilation time. These rules may trigger a fatal error at
    startup:
  - Building against or running with libuv versions 1.35.0 and
    1.36.0 is now a fatal error.
  - Running with libuv version higher than 1.34.2 is now a
    fatal error when named is built against libuv version
    1.34.2 or lower.
  - Running with libuv version higher than 1.39.0 is now a
    fatal error when named is built against libuv version
    1.37.0, 1.38.0, 1.38.1, or 1.39.0.
  * This prevents the use of libuv versions that may trigger an
    assertion failure when receiving multiple UDP messages in a
    single system call.
  Bug Fixes:
  * named could crash with an assertion failure when adding a new
    zone into the configuration file for a name which was already
    configured as a member zone for a catalog zone. This has been
    fixed.
  * When named starts up, it sends a query for the DNSSEC key for
    each configured trust anchor to determine whether the key has
    changed. In some unusual cases, the query might depend on a
    zone for which the server is itself authoritative, and would
    have failed if it were sent before the zone was fully loaded.
    This has now been fixed by delaying the key queries until all
    zones have finished loading.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1682424000">- Update to release 9.16.40
  Bug Fixes:
  * Logfiles using timestamp-style suffixes were not always
    correctly removed when the number of files exceeded the limit
    set by versions. This has been fixed for configurations which
    do not explicitly specify a directory path as part of the file
    argument in the channel specification.
  * Performance of DNSSEC validation in zones with many DNSKEY
    records has been improved.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1684324800">- Update to release 9.16.41
  Bug Fixes:
  * When removing delegations from an opt-out range,
    empty-non-terminal NSEC3 records generated by those delegations
    were not cleaned up. This has been fixed.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1687348800">- Update to release 9.16.42
  Security Fixes:
  * The overmem cleaning process has been improved, to prevent the
    cache from significantly exceeding the configured
    max-cache-size limit. (CVE-2023-2828)
  * A query that prioritizes stale data over lookup triggers a
    fetch to refresh the stale data in cache. If the fetch is
    aborted for exceeding the recursion quota, it was possible for
    named to enter an infinite callback loop and crash due to stack
    overflow. This has been fixed. (CVE-2023-2911)
  Bug Fixes:
  * Previously, it was possible for a delegation from cache to be
    returned to the client after the stale-answer-client-timeout
    duration. This has been fixed.
  [bsc#1212544, bsc#1212567, jsc#SLE-24600]</changelog>
  <changelog author="dmueller@suse.com" date="1688644800">- rebuild bind-utils on libuv updates (bsc#1212090)</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1688990400">- Log named-checkconf output [bsc#1213049]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1689076800">- Add dnstap support
  [jsc#PED-4852]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1695124800">- Update to release 9.16.44
  Bug Fixes:
  * Processing already-queued queries received over TCP could cause
    an assertion failure, when the server was reconfigured at the
    same time or the cache was being flushed. This has been fixed.
  Security Fixes:
  * Previously, sending a specially crafted message over the
    control channel could cause the packet-parsing code to run out
    of available stack memory, causing named to terminate
    unexpectedly. This has been fixed. (CVE-2023-3341)
  [bsc#1215472]
- Switch to pkgconfig(libprotobuf-c) since this now contains the
  required protobuf-c binary</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1708084800">- Update to new Major Version 9.18.24.
  This has many enhancements, bug fixes and changes.
  Breaking Changes:
  * Some options have been removed and some have been deprecated
    and will be removed in the future.
    For a complete list, see:
    https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-bind-916-to-918
  Major Changes:
  * Support for securing DNS traffic using Transport Layer Security
    (TLS). TLS is used by both DNS-over-TLS (DoT) and
    DNS-over-HTTPS (DoH).
  * Support for zone transfers over TLS (XFR-over-TLS, XoT) for
    both incoming and outgoing zone transfers.
  * The dig tool is now able to send DoT queries (+tls option).
  * Support for OpenSSL 3.0 APIs was added.
  * dnssec-checkds, dnssec-coverage, dnssec-keymgr, which have been
    removed in favor of the dnssec-policy feature
  * python3-bind is deprecated and the subpackage has been removed
  * A number of utilities have been moved from /usr/sbin to
    /usr/bin:
    named-checkconf named-checkzone named-compilezone
    dnssec-dsfromkey dnssec-importkey dnssec-keyfromlabel
    dnssec-keygen dnssec-revoke dnssec-settime dnssec-signzone
    dnssec-verify dnssec-cds named-journalprint nsec3hash
  * The lib directory was renamed from 'named' to 'bind'
  For a complete list of changes, see:
  * Bind Release Notes
    https://bind9.readthedocs.io/en/v9.18.24/notes.html
  * The CHANGES file in the source RPM
  Security Fixes:
  * Validating DNS messages containing a lot of DNSSEC signatures
    could cause excessive CPU load, leading to a denial-of-service
    condition. This has been fixed. (CVE-2023-50387)
    [bsc#1219823]
  * Preparing an NSEC3 closest encloser proof could cause excessive
    CPU load, leading to a denial-of-service condition. This has
    been fixed. (CVE-2023-50868)
    [bsc#1219826]
  * Parsing DNS messages with many different names could cause
    excessive CPU load. This has been fixed. (CVE-2023-4408)
    [bsc#1219851]
  * Specific queries could cause named to crash with an assertion
    failure when nxdomain-redirect was enabled. This has been
    fixed. (CVE-2023-5517)
    [bsc#1219852]
  * A bad interaction between DNS64 and serve-stale could cause
    named to crash with an assertion failure, when both of these
    features were enabled. This has been fixed. (CVE-2023-5679)
    [bsc#1219853]
  * Query patterns that continuously triggered cache database
    maintenance could cause an excessive amount of memory to be
    allocated, exceeding max-cache-size and potentially leading to
    all available memory on the host running named being exhausted.
    This has been fixed. (CVE-2023-6516)
    [bsc#1219854]
  Packaging notes:
  * libnghttps2 added as BuildRequires for tls support
  * named-bootconf.diff patch is obsolete and has been removed
  [jsc#PED-7932]
- Update KillMode to 'control-group' in named.service to handle
  forked processes better.
  [bsc#1215755]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1721908800">- Update to release 9.18.28
  Bug Fixes:
  * Command-line options for IPv4-only (named -4) and IPv6-only
    (named -6) modes are now respected for zone primaries,
    also-notify, and parental-agents.
  * An RPZ response’s SOA record TTL was set to 1 instead of the
    SOA TTL, if add-soa was used. This has been fixed.
  * When a query related to zone maintenance (NOTIFY, SOA) timed
    out close to a view shutdown (triggered e.g. by rndc reload),
    named could crash with an assertion failure. This has been
    fixed.
  * The statistics channel counters that indicated the number of
    currently connected TCP IPv4/IPv6 clients were not properly
    adjusted in certain failure scenarios. This has been fixed.
  * Some servers that could not be reached due to EHOSTDOWN or
    ENETDOWN conditions were incorrectly prioritized during server
    selection. These are now properly handled as unreachable.
  * On some systems the libuv call may return an error code when
    sending a TCP reset for a connection, which triggers an
    assertion failure in named. This error condition is now dealt
    with in a more graceful manner, by logging the incident and
    shutting down the connection.
  * Changes to listen-on statements were ignored on reconfiguration
    unless the port or interface address was changed, making it
    impossible to change a related listener transport type. That
    issue has been fixed.
  * A bug in the keymgr code unintentionally slowed down some
    DNSSEC key rollovers. This has been fixed.
  * Some ISO 8601 durations were accepted erroneously, leading to
    shorter durations than expected. This has been fixed
  * A regression in cache-cleaning code enabled memory use to grow
    significantly more quickly than before, until the configured
    max-cache-size limit was reached. This has been fixed.
  * Using rndc flush inadvertently caused cache cleaning to become
    less effective. This could ultimately lead to the configured
    max-cache-size limit being exceeded and has now been fixed.
  * The logic for cleaning up expired cached DNS records was
    tweaked to be more aggressive. This change helps with enforcing
    max-cache-ttl and max-ncache-ttl in a timely manner.
  * It was possible to trigger a use-after-free assertion when the
    overmem cache cleaning was initiated. This has been fixed.
  New Features:
  * A new option signatures-jitter has been added to dnssec-policy
    to allow signature expirations to be spread out over a period
    of time.
  * The statistics channel now includes counters that indicate the
    number of currently connected TCP IPv4/IPv6 clients.
  * Added RESOLVER.ARPA to the built in empty zones.
  Feature Changes:
  * DNSSEC signatures that are not valid because the current time
    falls outside the signature inception and expiration dates are
    skipped instead of causing an immediate validation failure.
  Security Fixes:
  * A malicious DNS client that sent many queries over TCP but
    never read the responses could cause a server to respond slowly
    or not at all for other clients. This has been fixed.
    (CVE-2024-0760)
    [bsc#1228255]
  * It is possible to craft excessively large resource records
    sets, which have the effect of slowing down database
    processing. This has been addressed by adding a configurable
    limit to the number of records that can be stored per name and
    type in a cache or zone database. The default is 100, which can
    be tuned with the new max-records-per-type option.
  * It is possible to craft excessively large numbers of resource
    record types for a given owner name, which has the effect of
    slowing down database processing. This has been addressed by
    adding a configurable limit to the number of records that can
    be stored per name and type in a cache or zone database. The
    default is 100, which can be tuned with the new
    max-types-per-name option. (CVE-2024-1737)
    [bsc#1228256]
  * Validating DNS messages signed using the SIG(0) protocol (RFC
    2931) could cause excessive CPU load, leading to a
    denial-of-service condition. Support for SIG(0) message
    validation was removed from this version of named.
    (CVE-2024-1975)
    [bsc#1228257]
  * Due to a logic error, lookups that triggered serving stale data
    and required lookups in local authoritative zone data could
    have resulted in an assertion failure. This has been fixed.
  * Potential data races were found in our DoH implementation,
    related to HTTP/2 session object management and endpoints set
    object management after reconfiguration. These issues have been
    fixed.
  * When looking up the NS records of parent zones as part of
    looking up DS records, it was possible for named to trigger an
    assertion failure if serve-stale was enabled. This has been
    fixed. (CVE-2024-4076)
    [bsc#1228258]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1729080000">- Update to new major version 9.20.3
  For a complete list of all changes see:
  * https://bind9.readthedocs.io/en/v9.20.3/notes.html
  * The CHANGES file in the source RPM
  Some noteworthy changes:
  * Added new BuildRequires liburcu for lock free data structures.
  * A new DNSSEC tool dnssec-ksr has been added to create Key
    Signing Request (KSR) and Signed Key Response (SKR) files.
  * /etc/bind.keys and /var/lib/named/named.root.key have been
    removed as the correct defaults are pre-compiled and there is
    no need to configure bind.keys manually.
  * The functions that were in the libbind9 shared library have
    been moved to the libisc and libisccfg libraries. The now-empty
    libbind9 has been removed and is no longer installed.
  * The irs_resconf module has been moved to the libdns shared
    library. The now-empty libirs library has been removed and is
    no longer installed.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Update to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  * dnssec-ksr now supports KSK rollovers.
  * The tool now allows for KSK generation, as well as planned KSK
    rollovers. When signing a bundle from a Key Signing Request
    (KSR), only the key that is active in that time frame is used
    for signing. Also, the CDS and CDNSKEY records are now added
    and removed at the correct time.
  * Print RFC 7314: EXPIRE option in transfer summary.
  * Emit more helpful log messages for exceeding
    max-records-per-type.
  * The new log message is emitted when adding or updating an RRset
    fails due to exceeding the max-records-per-type limit. The log
    includes the owner name and type, corresponding zone name, and
    the limit value. It will be emitted on loading a zone file,
    inbound zone transfer (both AXFR and IXFR), handling a DDNS
    update, or updating a cache DB. It’s especially helpful in the
    case of zone transfer, since the secondary side doesn’t have
    direct access to the offending zone data.
  * It could also be used for max-types-per-name, but this change
    doesn’t implement it yet as it’s much less likely to happen in
    practice.
  * Harden key management when key files have become unavailable.
  * Prior to doing key management, BIND 9 will check if the key
    files on disk match the expected keys. If key files for
    previously observed keys have become unavailable, this will
    prevent the internal key manager from running.
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  * Implement the min-transfer-rate-in configuration option.
  * Add HTTPS record query to host command line tool.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
  * Adds support for EDE code 1 and 2.
  * Add an rndc command to toggle jemalloc profiling.
  * Add support for multiple extended DNS errors.
  * Print the expiration time of stale records.
  * Add Extended DNS Error Code 22 - No Reachable Authority.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
  * Update built-in bind.keys file with the new 2025 IANA root key.
  * Add an initial-ds entry to bind.keys for the new root key, ID
    38696, which is scheduled for publication in January 2025.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.
  * Fix dual-stack-servers configuration option.
  * Fix a data race causing a permanent active client increase.
  * Fix deferred validation of unsigned DS and DNSKEY records.
  * Fix RPZ race condition during a reconfiguration.
  * “CNAME and other data check” not applied to all types.
  * Relax private DNSKEY and RRSIG constraints.
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
  * Fix a bug in the statistics channel when querying zone transfer
    information.
  * Fix assertion failure when dumping recursing clients.
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches().
  * Recently expired records could be returned with a timestamp in
    future.
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
  * Apply the memory limit only to ADB database items.
  * Avoid unnecessary locking in the zone/cache database.
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
  * Fix nsupdate hang when processing a large update.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
  * Resolve the spurious drops in performance due to glue cache.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
  * Fix improper handling of unknown directives in resolv.conf.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
  * Use TLS for notifies if configured to do so.
  * Notifies configured to use TLS will now be sent over TLS,
    instead of plain text UDP or TCP. Also, failing to load the TLS
    configuration for notify now results in an error.
  * {&amp;dns} is as valid as {?dns} in a SVCB’s dohpath.
  * dig failed to parse a valid SVCB record with a dohpath URI
    template containing a {&amp;dns}, like
    dohpath=/some/path?key=value{&amp;dns}”.
  * Fix NSEC3 closest encloser lookup for names with empty
    non-terminals.
  * A previous performance optimization for finding the NSEC3
    closest encloser when generating authoritative responses could
    cause servers to return incorrect NSEC3 records in some cases.
    This has been fixed.
  * recursive-clients statement with value 0 triggered an assertion
    failure.
  * BIND 9.20.0 broke recursive-clients 0;. This has now been
    fixed.
  * Parsing of hostnames in rndc.conf was broken.
  * When DSCP support was removed, parsing of hostnames in
    rndc.conf was accidentally broken, resulting in an assertion
    failure. This has been fixed.
  * dig options of the form [+-]option=&lt;value&gt; failed to display
    the value on the printed command line. This has been fixed.
  * Provide more visibility into TLS configuration errors by
    logging SSL_CTX_use_certificate_chain_file() and
    SSL_CTX_use_PrivateKey_file() errors individually.
  * Fix a race condition when canceling ADB find which could cause
    an assertion failure.
  * SERVFAIL cache memory cleaning is now more aggressive; it no
    longer consumes a lot of memory if the server encounters many
    SERVFAILs at once.
  * Fix trying the next primary XoT server when the previous one
    was marked as unreachable.
  * In some cases named failed to try the next primary server in
    the primaries list when the previous one was marked as
    unreachable. This has been fixed.
- CHANGES file has been removed, the changes are now only listed in
  the ARM docs available in the bind-doc package.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
</package>
<package pkgid="7136d5651b1644d2860d44d8b63826979834e0b65b5c06a4415f1b9e983b13ce" name="bind" arch="src">
  <version epoch="0" ver="9.20.11" rel="150700.3.9.1"/>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Update to release 9.16.33
  Security Fixes:
  * Previously, there was no limit to the number of database lookups
    performed while processing large delegations, which could be
    abused to severely impact the performance of named running as a
    recursive resolver. This has been fixed. (CVE-2022-2795)
  * named running as a resolver with the stale-answer-client-timeout
    option set to 0 could crash with an assertion failure, when
    there was a stale CNAME in the cache for the incoming query.
    This has been fixed. (CVE-2022-3080)
  * A memory leak was fixed that could be externally triggered in the
    DNSSEC verification code for the ECDSA algorithm. (CVE-2022-38177)
  * Memory leaks were fixed that could be externally triggered in the
    DNSSEC verification code for the EdDSA algorithm. (CVE-2022-38178)
  Feature Changes:
  * Response Rate Limiting (RRL) code now treats all QNAMEs that are
    subject to wildcard processing within a given zone as the same
    name, to prevent circumventing the limits enforced by RRL.
  * Zones using dnssec-policy now require dynamic DNS or
    inline-signing to be configured explicitly.
  * A backward-compatible approach was implemented for encoding
    internationalized domain names (IDN) in dig and converting the
    domain to IDNA2008 form; if that fails,
    BIND tries an IDNA2003 conversion.
  Bug Fixes:
  * A serve-stale bug was fixed, where BIND would try to return stale
    data from cache for lookups that received duplicate queries or
    queries that would be dropped. This bug resulted in premature
    SERVFAIL responses, and has now been resolved.
  [bsc#1203614, bsc#1203618, bsc#1203619, bsc#1203620, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1668168000">- Update to release 9.16.34
  New Features:
  * Support for parsing and validating the dohpath service
    parameter in SVCB records was added.
  * named now logs the supported cryptographic algorithms during
    startup and in the output of named -V.
  Bug Fixes:
  * Changing just the TSIG key names for primaries in catalog
    zones’ member zones was not effective. This has been fixed.
  Known Issues:
  * Upgrading from BIND 9.16.32 or any older version may require a
    manual configuration change. The following configurations are
    affected:
  - type primary zones configured with dnssec-policy but without
    either allow-update or update-policy,
  - type secondary zones configured with dnssec-policy.
    In these cases please add inline-signing yes; to the individual
    zone configuration(s). Without applying this change, named will
    fail to start. For more details, see
    https://kb.isc.org/docs/dnssec-policy-requires-dynamic-dns-or-inline-signing
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1669291200">- Update to release 9.16.35
  Bug Fixes:
  * A crash was fixed that happened when a dnssec-policy zone that
    used NSEC3 was reconfigured to enable inline-signing.
  * In certain resolution scenarios, quotas could be erroneously
    reached for servers, including any configured forwarders,
    resulting in SERVFAIL answers being sent to clients.
  * rpz-ip rules in response-policy zones could be ineffective in
    some cases if a query had the CD (Checking Disabled) bit set to
    1.
  * Previously, if Internet connectivity issues were experienced
    during the initial startup of named, a BIND resolver with
    dnssec-validation set to auto could enter into a state where it
    would not recover without stopping named, manually deleting the
    managed-keys.bind and managed-keys.bind.jnl files, and starting
    named again.
  * The statistics counter representing the current number of
    clients awaiting recursive resolution results (RecursClients)
    could overflow in certain resolution scenarios.
  * Previously, BIND failed to start on Solaris-based systems with
    hundreds of CPUs.
  * When a DNS resource record’s TTL value was equal to the
    resolver’s configured prefetch “eligibility” value, the record
    was erroneously not treated as eligible for prefetching.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1671710400">- Update to release 9.16.36
  Feature Changes:
  * The auto-dnssec option has been deprecated and will be removed
    in a future BIND 9.19.x release. Please migrate to
    dnssec-policy.
  Bug Fixes:
  * When a catalog zone was removed from the configuration, in some
    cases a dangling pointer could cause the named process to
    crash.
  * When a zone was deleted from a server, a key management object
    related to that zone was inadvertently kept in memory and only
    released upon shutdown. This could lead to constantly
    increasing memory use on servers with a high rate of changes
    affecting the set of zones being served.
  * In certain cases, named waited for the resolution of
    outstanding recursive queries to finish before shutting down.
  * The zone &lt;name&gt;/&lt;class&gt;: final reference detached log message
    was moved from the INFO log level to the DEBUG(1) log level to
    prevent the named-checkzone tool from superfluously logging
    this message in non-debug mode.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1674561600">- Update to release 9.16.37
  Security Fixes:
  * An UPDATE message flood could cause named to exhaust all
    available memory. This flaw was addressed by adding a new
    update-quota option that controls the maximum number of
    outstanding DNS UPDATE messages that named can hold in a queue
    at any given time (default: 100). (CVE-2022-3094)
  * named could crash with an assertion failure when an RRSIG query
    was received and stale-answer-client-timeout was set to a
    non-zero value. This has been fixed. (CVE-2022-3736)
  * named running as a resolver with the
    stale-answer-client-timeout option set to any value greater
    than 0 could crash with an assertion failure, when the
    recursive-clients soft quota was reached. This has been fixed.
    (CVE-2022-3924)
  New Features:
  * The new update-quota option can be used to control the number
    of simultaneous DNS UPDATE messages that can be processed to
    update an authoritative zone on a primary server, or forwarded
    to the primary server by a secondary server. The default is
    100. A new statistics counter has also been added to record
    events when this quota is exceeded, and the version numbers for
    the XML and JSON statistics schemas have been updated.
  Feature Changes:
  * The Differentiated Services Code Point (DSCP) feature in BIND
    has been deprecated. Configuring DSCP values in named.conf now
    causes a warning to be logged. Note that this feature has only
    been partly operational since the new Network Manager was
    introduced in BIND 9.16.0.
  * The catalog zone implementation has been optimized to work with
    hundreds of thousands of member zones.
  Bug Fixes:
  * In certain query resolution scenarios (e.g. when following
    CNAME records), named configured to answer from stale cache
    could return a SERVFAIL response despite a usable, non-stale
    answer being present in the cache. This has been fixed.
  [bsc#1207471, bsc#1207473, bsc#1207475, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1676548800">- Update to release 9.16.38
  Bug Fixes:
  * A constant stream of zone additions and deletions via rndc
    reconfig could cause increased memory consumption due to
    delayed cleaning of view memory. This has been fixed.
  * The speed of the message digest algorithms (MD5, SHA-1, SHA-2),
    and of NSEC3 hashing, has been improved.
  * Building BIND 9 failed when the --enable-dnsrps switch for
    ./configure was used. This has been fixed.
  [jsc#SLE-24600]
- Updated keyring and signature</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1678881600">- Update to release 9.16.39
  Feature Changes:
  * libuv support for receiving multiple UDP messages in a single
    recvmmsg() system call has been tweaked several times between
    libuv versions 1.35.0 and 1.40.0; the current recommended libuv
    version is 1.40.0 or higher. New rules are now in effect for
    running with a different version of libuv than the one used at
    compilation time. These rules may trigger a fatal error at
    startup:
  - Building against or running with libuv versions 1.35.0 and
    1.36.0 is now a fatal error.
  - Running with libuv version higher than 1.34.2 is now a
    fatal error when named is built against libuv version
    1.34.2 or lower.
  - Running with libuv version higher than 1.39.0 is now a
    fatal error when named is built against libuv version
    1.37.0, 1.38.0, 1.38.1, or 1.39.0.
  * This prevents the use of libuv versions that may trigger an
    assertion failure when receiving multiple UDP messages in a
    single system call.
  Bug Fixes:
  * named could crash with an assertion failure when adding a new
    zone into the configuration file for a name which was already
    configured as a member zone for a catalog zone. This has been
    fixed.
  * When named starts up, it sends a query for the DNSSEC key for
    each configured trust anchor to determine whether the key has
    changed. In some unusual cases, the query might depend on a
    zone for which the server is itself authoritative, and would
    have failed if it were sent before the zone was fully loaded.
    This has now been fixed by delaying the key queries until all
    zones have finished loading.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1682424000">- Update to release 9.16.40
  Bug Fixes:
  * Logfiles using timestamp-style suffixes were not always
    correctly removed when the number of files exceeded the limit
    set by versions. This has been fixed for configurations which
    do not explicitly specify a directory path as part of the file
    argument in the channel specification.
  * Performance of DNSSEC validation in zones with many DNSKEY
    records has been improved.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1684324800">- Update to release 9.16.41
  Bug Fixes:
  * When removing delegations from an opt-out range,
    empty-non-terminal NSEC3 records generated by those delegations
    were not cleaned up. This has been fixed.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1687348800">- Update to release 9.16.42
  Security Fixes:
  * The overmem cleaning process has been improved, to prevent the
    cache from significantly exceeding the configured
    max-cache-size limit. (CVE-2023-2828)
  * A query that prioritizes stale data over lookup triggers a
    fetch to refresh the stale data in cache. If the fetch is
    aborted for exceeding the recursion quota, it was possible for
    named to enter an infinite callback loop and crash due to stack
    overflow. This has been fixed. (CVE-2023-2911)
  Bug Fixes:
  * Previously, it was possible for a delegation from cache to be
    returned to the client after the stale-answer-client-timeout
    duration. This has been fixed.
  [bsc#1212544, bsc#1212567, jsc#SLE-24600]</changelog>
  <changelog author="dmueller@suse.com" date="1688644800">- rebuild bind-utils on libuv updates (bsc#1212090)</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1688990400">- Log named-checkconf output [bsc#1213049]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1689076800">- Add dnstap support
  [jsc#PED-4852]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1695124800">- Update to release 9.16.44
  Bug Fixes:
  * Processing already-queued queries received over TCP could cause
    an assertion failure, when the server was reconfigured at the
    same time or the cache was being flushed. This has been fixed.
  Security Fixes:
  * Previously, sending a specially crafted message over the
    control channel could cause the packet-parsing code to run out
    of available stack memory, causing named to terminate
    unexpectedly. This has been fixed. (CVE-2023-3341)
  [bsc#1215472]
- Switch to pkgconfig(libprotobuf-c) since this now contains the
  required protobuf-c binary</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1708084800">- Update to new Major Version 9.18.24.
  This has many enhancements, bug fixes and changes.
  Breaking Changes:
  * Some options have been removed and some have been deprecated
    and will be removed in the future.
    For a complete list, see:
    https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-bind-916-to-918
  Major Changes:
  * Support for securing DNS traffic using Transport Layer Security
    (TLS). TLS is used by both DNS-over-TLS (DoT) and
    DNS-over-HTTPS (DoH).
  * Support for zone transfers over TLS (XFR-over-TLS, XoT) for
    both incoming and outgoing zone transfers.
  * The dig tool is now able to send DoT queries (+tls option).
  * Support for OpenSSL 3.0 APIs was added.
  * dnssec-checkds, dnssec-coverage, dnssec-keymgr, which have been
    removed in favor of the dnssec-policy feature
  * python3-bind is deprecated and the subpackage has been removed
  * A number of utilities have been moved from /usr/sbin to
    /usr/bin:
    named-checkconf named-checkzone named-compilezone
    dnssec-dsfromkey dnssec-importkey dnssec-keyfromlabel
    dnssec-keygen dnssec-revoke dnssec-settime dnssec-signzone
    dnssec-verify dnssec-cds named-journalprint nsec3hash
  * The lib directory was renamed from 'named' to 'bind'
  For a complete list of changes, see:
  * Bind Release Notes
    https://bind9.readthedocs.io/en/v9.18.24/notes.html
  * The CHANGES file in the source RPM
  Security Fixes:
  * Validating DNS messages containing a lot of DNSSEC signatures
    could cause excessive CPU load, leading to a denial-of-service
    condition. This has been fixed. (CVE-2023-50387)
    [bsc#1219823]
  * Preparing an NSEC3 closest encloser proof could cause excessive
    CPU load, leading to a denial-of-service condition. This has
    been fixed. (CVE-2023-50868)
    [bsc#1219826]
  * Parsing DNS messages with many different names could cause
    excessive CPU load. This has been fixed. (CVE-2023-4408)
    [bsc#1219851]
  * Specific queries could cause named to crash with an assertion
    failure when nxdomain-redirect was enabled. This has been
    fixed. (CVE-2023-5517)
    [bsc#1219852]
  * A bad interaction between DNS64 and serve-stale could cause
    named to crash with an assertion failure, when both of these
    features were enabled. This has been fixed. (CVE-2023-5679)
    [bsc#1219853]
  * Query patterns that continuously triggered cache database
    maintenance could cause an excessive amount of memory to be
    allocated, exceeding max-cache-size and potentially leading to
    all available memory on the host running named being exhausted.
    This has been fixed. (CVE-2023-6516)
    [bsc#1219854]
  Packaging notes:
  * libnghttps2 added as BuildRequires for tls support
  * named-bootconf.diff patch is obsolete and has been removed
  [jsc#PED-7932]
- Update KillMode to 'control-group' in named.service to handle
  forked processes better.
  [bsc#1215755]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1721908800">- Update to release 9.18.28
  Bug Fixes:
  * Command-line options for IPv4-only (named -4) and IPv6-only
    (named -6) modes are now respected for zone primaries,
    also-notify, and parental-agents.
  * An RPZ response’s SOA record TTL was set to 1 instead of the
    SOA TTL, if add-soa was used. This has been fixed.
  * When a query related to zone maintenance (NOTIFY, SOA) timed
    out close to a view shutdown (triggered e.g. by rndc reload),
    named could crash with an assertion failure. This has been
    fixed.
  * The statistics channel counters that indicated the number of
    currently connected TCP IPv4/IPv6 clients were not properly
    adjusted in certain failure scenarios. This has been fixed.
  * Some servers that could not be reached due to EHOSTDOWN or
    ENETDOWN conditions were incorrectly prioritized during server
    selection. These are now properly handled as unreachable.
  * On some systems the libuv call may return an error code when
    sending a TCP reset for a connection, which triggers an
    assertion failure in named. This error condition is now dealt
    with in a more graceful manner, by logging the incident and
    shutting down the connection.
  * Changes to listen-on statements were ignored on reconfiguration
    unless the port or interface address was changed, making it
    impossible to change a related listener transport type. That
    issue has been fixed.
  * A bug in the keymgr code unintentionally slowed down some
    DNSSEC key rollovers. This has been fixed.
  * Some ISO 8601 durations were accepted erroneously, leading to
    shorter durations than expected. This has been fixed
  * A regression in cache-cleaning code enabled memory use to grow
    significantly more quickly than before, until the configured
    max-cache-size limit was reached. This has been fixed.
  * Using rndc flush inadvertently caused cache cleaning to become
    less effective. This could ultimately lead to the configured
    max-cache-size limit being exceeded and has now been fixed.
  * The logic for cleaning up expired cached DNS records was
    tweaked to be more aggressive. This change helps with enforcing
    max-cache-ttl and max-ncache-ttl in a timely manner.
  * It was possible to trigger a use-after-free assertion when the
    overmem cache cleaning was initiated. This has been fixed.
  New Features:
  * A new option signatures-jitter has been added to dnssec-policy
    to allow signature expirations to be spread out over a period
    of time.
  * The statistics channel now includes counters that indicate the
    number of currently connected TCP IPv4/IPv6 clients.
  * Added RESOLVER.ARPA to the built in empty zones.
  Feature Changes:
  * DNSSEC signatures that are not valid because the current time
    falls outside the signature inception and expiration dates are
    skipped instead of causing an immediate validation failure.
  Security Fixes:
  * A malicious DNS client that sent many queries over TCP but
    never read the responses could cause a server to respond slowly
    or not at all for other clients. This has been fixed.
    (CVE-2024-0760)
    [bsc#1228255]
  * It is possible to craft excessively large resource records
    sets, which have the effect of slowing down database
    processing. This has been addressed by adding a configurable
    limit to the number of records that can be stored per name and
    type in a cache or zone database. The default is 100, which can
    be tuned with the new max-records-per-type option.
  * It is possible to craft excessively large numbers of resource
    record types for a given owner name, which has the effect of
    slowing down database processing. This has been addressed by
    adding a configurable limit to the number of records that can
    be stored per name and type in a cache or zone database. The
    default is 100, which can be tuned with the new
    max-types-per-name option. (CVE-2024-1737)
    [bsc#1228256]
  * Validating DNS messages signed using the SIG(0) protocol (RFC
    2931) could cause excessive CPU load, leading to a
    denial-of-service condition. Support for SIG(0) message
    validation was removed from this version of named.
    (CVE-2024-1975)
    [bsc#1228257]
  * Due to a logic error, lookups that triggered serving stale data
    and required lookups in local authoritative zone data could
    have resulted in an assertion failure. This has been fixed.
  * Potential data races were found in our DoH implementation,
    related to HTTP/2 session object management and endpoints set
    object management after reconfiguration. These issues have been
    fixed.
  * When looking up the NS records of parent zones as part of
    looking up DS records, it was possible for named to trigger an
    assertion failure if serve-stale was enabled. This has been
    fixed. (CVE-2024-4076)
    [bsc#1228258]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1729080000">- Update to new major version 9.20.3
  For a complete list of all changes see:
  * https://bind9.readthedocs.io/en/v9.20.3/notes.html
  * The CHANGES file in the source RPM
  Some noteworthy changes:
  * Added new BuildRequires liburcu for lock free data structures.
  * A new DNSSEC tool dnssec-ksr has been added to create Key
    Signing Request (KSR) and Signed Key Response (SKR) files.
  * /etc/bind.keys and /var/lib/named/named.root.key have been
    removed as the correct defaults are pre-compiled and there is
    no need to configure bind.keys manually.
  * The functions that were in the libbind9 shared library have
    been moved to the libisc and libisccfg libraries. The now-empty
    libbind9 has been removed and is no longer installed.
  * The irs_resconf module has been moved to the libdns shared
    library. The now-empty libirs library has been removed and is
    no longer installed.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Update to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  * dnssec-ksr now supports KSK rollovers.
  * The tool now allows for KSK generation, as well as planned KSK
    rollovers. When signing a bundle from a Key Signing Request
    (KSR), only the key that is active in that time frame is used
    for signing. Also, the CDS and CDNSKEY records are now added
    and removed at the correct time.
  * Print RFC 7314: EXPIRE option in transfer summary.
  * Emit more helpful log messages for exceeding
    max-records-per-type.
  * The new log message is emitted when adding or updating an RRset
    fails due to exceeding the max-records-per-type limit. The log
    includes the owner name and type, corresponding zone name, and
    the limit value. It will be emitted on loading a zone file,
    inbound zone transfer (both AXFR and IXFR), handling a DDNS
    update, or updating a cache DB. It’s especially helpful in the
    case of zone transfer, since the secondary side doesn’t have
    direct access to the offending zone data.
  * It could also be used for max-types-per-name, but this change
    doesn’t implement it yet as it’s much less likely to happen in
    practice.
  * Harden key management when key files have become unavailable.
  * Prior to doing key management, BIND 9 will check if the key
    files on disk match the expected keys. If key files for
    previously observed keys have become unavailable, this will
    prevent the internal key manager from running.
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  * Implement the min-transfer-rate-in configuration option.
  * Add HTTPS record query to host command line tool.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
  * Adds support for EDE code 1 and 2.
  * Add an rndc command to toggle jemalloc profiling.
  * Add support for multiple extended DNS errors.
  * Print the expiration time of stale records.
  * Add Extended DNS Error Code 22 - No Reachable Authority.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
  * Update built-in bind.keys file with the new 2025 IANA root key.
  * Add an initial-ds entry to bind.keys for the new root key, ID
    38696, which is scheduled for publication in January 2025.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.
  * Fix dual-stack-servers configuration option.
  * Fix a data race causing a permanent active client increase.
  * Fix deferred validation of unsigned DS and DNSKEY records.
  * Fix RPZ race condition during a reconfiguration.
  * “CNAME and other data check” not applied to all types.
  * Relax private DNSKEY and RRSIG constraints.
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
  * Fix a bug in the statistics channel when querying zone transfer
    information.
  * Fix assertion failure when dumping recursing clients.
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches().
  * Recently expired records could be returned with a timestamp in
    future.
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
  * Apply the memory limit only to ADB database items.
  * Avoid unnecessary locking in the zone/cache database.
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
  * Fix nsupdate hang when processing a large update.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
  * Resolve the spurious drops in performance due to glue cache.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
  * Fix improper handling of unknown directives in resolv.conf.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
  * Use TLS for notifies if configured to do so.
  * Notifies configured to use TLS will now be sent over TLS,
    instead of plain text UDP or TCP. Also, failing to load the TLS
    configuration for notify now results in an error.
  * {&amp;dns} is as valid as {?dns} in a SVCB’s dohpath.
  * dig failed to parse a valid SVCB record with a dohpath URI
    template containing a {&amp;dns}, like
    dohpath=/some/path?key=value{&amp;dns}”.
  * Fix NSEC3 closest encloser lookup for names with empty
    non-terminals.
  * A previous performance optimization for finding the NSEC3
    closest encloser when generating authoritative responses could
    cause servers to return incorrect NSEC3 records in some cases.
    This has been fixed.
  * recursive-clients statement with value 0 triggered an assertion
    failure.
  * BIND 9.20.0 broke recursive-clients 0;. This has now been
    fixed.
  * Parsing of hostnames in rndc.conf was broken.
  * When DSCP support was removed, parsing of hostnames in
    rndc.conf was accidentally broken, resulting in an assertion
    failure. This has been fixed.
  * dig options of the form [+-]option=&lt;value&gt; failed to display
    the value on the printed command line. This has been fixed.
  * Provide more visibility into TLS configuration errors by
    logging SSL_CTX_use_certificate_chain_file() and
    SSL_CTX_use_PrivateKey_file() errors individually.
  * Fix a race condition when canceling ADB find which could cause
    an assertion failure.
  * SERVFAIL cache memory cleaning is now more aggressive; it no
    longer consumes a lot of memory if the server encounters many
    SERVFAILs at once.
  * Fix trying the next primary XoT server when the previous one
    was marked as unreachable.
  * In some cases named failed to try the next primary server in
    the primaries list when the previous one was marked as
    unreachable. This has been fixed.
- CHANGES file has been removed, the changes are now only listed in
  the ARM docs available in the bind-doc package.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="tabraham@suse.com" date="1756987200">- ensure file descriptors 0-2 are in use before using libuv (bsc#1230649)
  * bind-ensure-file-descriptors-0-2-are-in-use-before-using-.patch</changelog>
</package>
<package pkgid="9c95f2add89aa7160b1732636eab71f0b62e68b8dd670de02a5127e67a7d737f" name="bind" arch="src">
  <version epoch="0" ver="9.20.15" rel="150700.3.12.1"/>
  <changelog author="jorik.cronenberg@suse.com" date="1668168000">- Update to release 9.16.34
  New Features:
  * Support for parsing and validating the dohpath service
    parameter in SVCB records was added.
  * named now logs the supported cryptographic algorithms during
    startup and in the output of named -V.
  Bug Fixes:
  * Changing just the TSIG key names for primaries in catalog
    zones’ member zones was not effective. This has been fixed.
  Known Issues:
  * Upgrading from BIND 9.16.32 or any older version may require a
    manual configuration change. The following configurations are
    affected:
  - type primary zones configured with dnssec-policy but without
    either allow-update or update-policy,
  - type secondary zones configured with dnssec-policy.
    In these cases please add inline-signing yes; to the individual
    zone configuration(s). Without applying this change, named will
    fail to start. For more details, see
    https://kb.isc.org/docs/dnssec-policy-requires-dynamic-dns-or-inline-signing
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1669291200">- Update to release 9.16.35
  Bug Fixes:
  * A crash was fixed that happened when a dnssec-policy zone that
    used NSEC3 was reconfigured to enable inline-signing.
  * In certain resolution scenarios, quotas could be erroneously
    reached for servers, including any configured forwarders,
    resulting in SERVFAIL answers being sent to clients.
  * rpz-ip rules in response-policy zones could be ineffective in
    some cases if a query had the CD (Checking Disabled) bit set to
    1.
  * Previously, if Internet connectivity issues were experienced
    during the initial startup of named, a BIND resolver with
    dnssec-validation set to auto could enter into a state where it
    would not recover without stopping named, manually deleting the
    managed-keys.bind and managed-keys.bind.jnl files, and starting
    named again.
  * The statistics counter representing the current number of
    clients awaiting recursive resolution results (RecursClients)
    could overflow in certain resolution scenarios.
  * Previously, BIND failed to start on Solaris-based systems with
    hundreds of CPUs.
  * When a DNS resource record’s TTL value was equal to the
    resolver’s configured prefetch “eligibility” value, the record
    was erroneously not treated as eligible for prefetching.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1671710400">- Update to release 9.16.36
  Feature Changes:
  * The auto-dnssec option has been deprecated and will be removed
    in a future BIND 9.19.x release. Please migrate to
    dnssec-policy.
  Bug Fixes:
  * When a catalog zone was removed from the configuration, in some
    cases a dangling pointer could cause the named process to
    crash.
  * When a zone was deleted from a server, a key management object
    related to that zone was inadvertently kept in memory and only
    released upon shutdown. This could lead to constantly
    increasing memory use on servers with a high rate of changes
    affecting the set of zones being served.
  * In certain cases, named waited for the resolution of
    outstanding recursive queries to finish before shutting down.
  * The zone &lt;name&gt;/&lt;class&gt;: final reference detached log message
    was moved from the INFO log level to the DEBUG(1) log level to
    prevent the named-checkzone tool from superfluously logging
    this message in non-debug mode.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1674561600">- Update to release 9.16.37
  Security Fixes:
  * An UPDATE message flood could cause named to exhaust all
    available memory. This flaw was addressed by adding a new
    update-quota option that controls the maximum number of
    outstanding DNS UPDATE messages that named can hold in a queue
    at any given time (default: 100). (CVE-2022-3094)
  * named could crash with an assertion failure when an RRSIG query
    was received and stale-answer-client-timeout was set to a
    non-zero value. This has been fixed. (CVE-2022-3736)
  * named running as a resolver with the
    stale-answer-client-timeout option set to any value greater
    than 0 could crash with an assertion failure, when the
    recursive-clients soft quota was reached. This has been fixed.
    (CVE-2022-3924)
  New Features:
  * The new update-quota option can be used to control the number
    of simultaneous DNS UPDATE messages that can be processed to
    update an authoritative zone on a primary server, or forwarded
    to the primary server by a secondary server. The default is
    100. A new statistics counter has also been added to record
    events when this quota is exceeded, and the version numbers for
    the XML and JSON statistics schemas have been updated.
  Feature Changes:
  * The Differentiated Services Code Point (DSCP) feature in BIND
    has been deprecated. Configuring DSCP values in named.conf now
    causes a warning to be logged. Note that this feature has only
    been partly operational since the new Network Manager was
    introduced in BIND 9.16.0.
  * The catalog zone implementation has been optimized to work with
    hundreds of thousands of member zones.
  Bug Fixes:
  * In certain query resolution scenarios (e.g. when following
    CNAME records), named configured to answer from stale cache
    could return a SERVFAIL response despite a usable, non-stale
    answer being present in the cache. This has been fixed.
  [bsc#1207471, bsc#1207473, bsc#1207475, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1676548800">- Update to release 9.16.38
  Bug Fixes:
  * A constant stream of zone additions and deletions via rndc
    reconfig could cause increased memory consumption due to
    delayed cleaning of view memory. This has been fixed.
  * The speed of the message digest algorithms (MD5, SHA-1, SHA-2),
    and of NSEC3 hashing, has been improved.
  * Building BIND 9 failed when the --enable-dnsrps switch for
    ./configure was used. This has been fixed.
  [jsc#SLE-24600]
- Updated keyring and signature</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1678881600">- Update to release 9.16.39
  Feature Changes:
  * libuv support for receiving multiple UDP messages in a single
    recvmmsg() system call has been tweaked several times between
    libuv versions 1.35.0 and 1.40.0; the current recommended libuv
    version is 1.40.0 or higher. New rules are now in effect for
    running with a different version of libuv than the one used at
    compilation time. These rules may trigger a fatal error at
    startup:
  - Building against or running with libuv versions 1.35.0 and
    1.36.0 is now a fatal error.
  - Running with libuv version higher than 1.34.2 is now a
    fatal error when named is built against libuv version
    1.34.2 or lower.
  - Running with libuv version higher than 1.39.0 is now a
    fatal error when named is built against libuv version
    1.37.0, 1.38.0, 1.38.1, or 1.39.0.
  * This prevents the use of libuv versions that may trigger an
    assertion failure when receiving multiple UDP messages in a
    single system call.
  Bug Fixes:
  * named could crash with an assertion failure when adding a new
    zone into the configuration file for a name which was already
    configured as a member zone for a catalog zone. This has been
    fixed.
  * When named starts up, it sends a query for the DNSSEC key for
    each configured trust anchor to determine whether the key has
    changed. In some unusual cases, the query might depend on a
    zone for which the server is itself authoritative, and would
    have failed if it were sent before the zone was fully loaded.
    This has now been fixed by delaying the key queries until all
    zones have finished loading.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1682424000">- Update to release 9.16.40
  Bug Fixes:
  * Logfiles using timestamp-style suffixes were not always
    correctly removed when the number of files exceeded the limit
    set by versions. This has been fixed for configurations which
    do not explicitly specify a directory path as part of the file
    argument in the channel specification.
  * Performance of DNSSEC validation in zones with many DNSKEY
    records has been improved.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1684324800">- Update to release 9.16.41
  Bug Fixes:
  * When removing delegations from an opt-out range,
    empty-non-terminal NSEC3 records generated by those delegations
    were not cleaned up. This has been fixed.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1687348800">- Update to release 9.16.42
  Security Fixes:
  * The overmem cleaning process has been improved, to prevent the
    cache from significantly exceeding the configured
    max-cache-size limit. (CVE-2023-2828)
  * A query that prioritizes stale data over lookup triggers a
    fetch to refresh the stale data in cache. If the fetch is
    aborted for exceeding the recursion quota, it was possible for
    named to enter an infinite callback loop and crash due to stack
    overflow. This has been fixed. (CVE-2023-2911)
  Bug Fixes:
  * Previously, it was possible for a delegation from cache to be
    returned to the client after the stale-answer-client-timeout
    duration. This has been fixed.
  [bsc#1212544, bsc#1212567, jsc#SLE-24600]</changelog>
  <changelog author="dmueller@suse.com" date="1688644800">- rebuild bind-utils on libuv updates (bsc#1212090)</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1688990400">- Log named-checkconf output [bsc#1213049]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1689076800">- Add dnstap support
  [jsc#PED-4852]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1695124800">- Update to release 9.16.44
  Bug Fixes:
  * Processing already-queued queries received over TCP could cause
    an assertion failure, when the server was reconfigured at the
    same time or the cache was being flushed. This has been fixed.
  Security Fixes:
  * Previously, sending a specially crafted message over the
    control channel could cause the packet-parsing code to run out
    of available stack memory, causing named to terminate
    unexpectedly. This has been fixed. (CVE-2023-3341)
  [bsc#1215472]
- Switch to pkgconfig(libprotobuf-c) since this now contains the
  required protobuf-c binary</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1708084800">- Update to new Major Version 9.18.24.
  This has many enhancements, bug fixes and changes.
  Breaking Changes:
  * Some options have been removed and some have been deprecated
    and will be removed in the future.
    For a complete list, see:
    https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-bind-916-to-918
  Major Changes:
  * Support for securing DNS traffic using Transport Layer Security
    (TLS). TLS is used by both DNS-over-TLS (DoT) and
    DNS-over-HTTPS (DoH).
  * Support for zone transfers over TLS (XFR-over-TLS, XoT) for
    both incoming and outgoing zone transfers.
  * The dig tool is now able to send DoT queries (+tls option).
  * Support for OpenSSL 3.0 APIs was added.
  * dnssec-checkds, dnssec-coverage, dnssec-keymgr, which have been
    removed in favor of the dnssec-policy feature
  * python3-bind is deprecated and the subpackage has been removed
  * A number of utilities have been moved from /usr/sbin to
    /usr/bin:
    named-checkconf named-checkzone named-compilezone
    dnssec-dsfromkey dnssec-importkey dnssec-keyfromlabel
    dnssec-keygen dnssec-revoke dnssec-settime dnssec-signzone
    dnssec-verify dnssec-cds named-journalprint nsec3hash
  * The lib directory was renamed from 'named' to 'bind'
  For a complete list of changes, see:
  * Bind Release Notes
    https://bind9.readthedocs.io/en/v9.18.24/notes.html
  * The CHANGES file in the source RPM
  Security Fixes:
  * Validating DNS messages containing a lot of DNSSEC signatures
    could cause excessive CPU load, leading to a denial-of-service
    condition. This has been fixed. (CVE-2023-50387)
    [bsc#1219823]
  * Preparing an NSEC3 closest encloser proof could cause excessive
    CPU load, leading to a denial-of-service condition. This has
    been fixed. (CVE-2023-50868)
    [bsc#1219826]
  * Parsing DNS messages with many different names could cause
    excessive CPU load. This has been fixed. (CVE-2023-4408)
    [bsc#1219851]
  * Specific queries could cause named to crash with an assertion
    failure when nxdomain-redirect was enabled. This has been
    fixed. (CVE-2023-5517)
    [bsc#1219852]
  * A bad interaction between DNS64 and serve-stale could cause
    named to crash with an assertion failure, when both of these
    features were enabled. This has been fixed. (CVE-2023-5679)
    [bsc#1219853]
  * Query patterns that continuously triggered cache database
    maintenance could cause an excessive amount of memory to be
    allocated, exceeding max-cache-size and potentially leading to
    all available memory on the host running named being exhausted.
    This has been fixed. (CVE-2023-6516)
    [bsc#1219854]
  Packaging notes:
  * libnghttps2 added as BuildRequires for tls support
  * named-bootconf.diff patch is obsolete and has been removed
  [jsc#PED-7932]
- Update KillMode to 'control-group' in named.service to handle
  forked processes better.
  [bsc#1215755]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1721908800">- Update to release 9.18.28
  Bug Fixes:
  * Command-line options for IPv4-only (named -4) and IPv6-only
    (named -6) modes are now respected for zone primaries,
    also-notify, and parental-agents.
  * An RPZ response’s SOA record TTL was set to 1 instead of the
    SOA TTL, if add-soa was used. This has been fixed.
  * When a query related to zone maintenance (NOTIFY, SOA) timed
    out close to a view shutdown (triggered e.g. by rndc reload),
    named could crash with an assertion failure. This has been
    fixed.
  * The statistics channel counters that indicated the number of
    currently connected TCP IPv4/IPv6 clients were not properly
    adjusted in certain failure scenarios. This has been fixed.
  * Some servers that could not be reached due to EHOSTDOWN or
    ENETDOWN conditions were incorrectly prioritized during server
    selection. These are now properly handled as unreachable.
  * On some systems the libuv call may return an error code when
    sending a TCP reset for a connection, which triggers an
    assertion failure in named. This error condition is now dealt
    with in a more graceful manner, by logging the incident and
    shutting down the connection.
  * Changes to listen-on statements were ignored on reconfiguration
    unless the port or interface address was changed, making it
    impossible to change a related listener transport type. That
    issue has been fixed.
  * A bug in the keymgr code unintentionally slowed down some
    DNSSEC key rollovers. This has been fixed.
  * Some ISO 8601 durations were accepted erroneously, leading to
    shorter durations than expected. This has been fixed
  * A regression in cache-cleaning code enabled memory use to grow
    significantly more quickly than before, until the configured
    max-cache-size limit was reached. This has been fixed.
  * Using rndc flush inadvertently caused cache cleaning to become
    less effective. This could ultimately lead to the configured
    max-cache-size limit being exceeded and has now been fixed.
  * The logic for cleaning up expired cached DNS records was
    tweaked to be more aggressive. This change helps with enforcing
    max-cache-ttl and max-ncache-ttl in a timely manner.
  * It was possible to trigger a use-after-free assertion when the
    overmem cache cleaning was initiated. This has been fixed.
  New Features:
  * A new option signatures-jitter has been added to dnssec-policy
    to allow signature expirations to be spread out over a period
    of time.
  * The statistics channel now includes counters that indicate the
    number of currently connected TCP IPv4/IPv6 clients.
  * Added RESOLVER.ARPA to the built in empty zones.
  Feature Changes:
  * DNSSEC signatures that are not valid because the current time
    falls outside the signature inception and expiration dates are
    skipped instead of causing an immediate validation failure.
  Security Fixes:
  * A malicious DNS client that sent many queries over TCP but
    never read the responses could cause a server to respond slowly
    or not at all for other clients. This has been fixed.
    (CVE-2024-0760)
    [bsc#1228255]
  * It is possible to craft excessively large resource records
    sets, which have the effect of slowing down database
    processing. This has been addressed by adding a configurable
    limit to the number of records that can be stored per name and
    type in a cache or zone database. The default is 100, which can
    be tuned with the new max-records-per-type option.
  * It is possible to craft excessively large numbers of resource
    record types for a given owner name, which has the effect of
    slowing down database processing. This has been addressed by
    adding a configurable limit to the number of records that can
    be stored per name and type in a cache or zone database. The
    default is 100, which can be tuned with the new
    max-types-per-name option. (CVE-2024-1737)
    [bsc#1228256]
  * Validating DNS messages signed using the SIG(0) protocol (RFC
    2931) could cause excessive CPU load, leading to a
    denial-of-service condition. Support for SIG(0) message
    validation was removed from this version of named.
    (CVE-2024-1975)
    [bsc#1228257]
  * Due to a logic error, lookups that triggered serving stale data
    and required lookups in local authoritative zone data could
    have resulted in an assertion failure. This has been fixed.
  * Potential data races were found in our DoH implementation,
    related to HTTP/2 session object management and endpoints set
    object management after reconfiguration. These issues have been
    fixed.
  * When looking up the NS records of parent zones as part of
    looking up DS records, it was possible for named to trigger an
    assertion failure if serve-stale was enabled. This has been
    fixed. (CVE-2024-4076)
    [bsc#1228258]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1729080000">- Update to new major version 9.20.3
  For a complete list of all changes see:
  * https://bind9.readthedocs.io/en/v9.20.3/notes.html
  * The CHANGES file in the source RPM
  Some noteworthy changes:
  * Added new BuildRequires liburcu for lock free data structures.
  * A new DNSSEC tool dnssec-ksr has been added to create Key
    Signing Request (KSR) and Signed Key Response (SKR) files.
  * /etc/bind.keys and /var/lib/named/named.root.key have been
    removed as the correct defaults are pre-compiled and there is
    no need to configure bind.keys manually.
  * The functions that were in the libbind9 shared library have
    been moved to the libisc and libisccfg libraries. The now-empty
    libbind9 has been removed and is no longer installed.
  * The irs_resconf module has been moved to the libdns shared
    library. The now-empty libirs library has been removed and is
    no longer installed.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Update to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  * dnssec-ksr now supports KSK rollovers.
  * The tool now allows for KSK generation, as well as planned KSK
    rollovers. When signing a bundle from a Key Signing Request
    (KSR), only the key that is active in that time frame is used
    for signing. Also, the CDS and CDNSKEY records are now added
    and removed at the correct time.
  * Print RFC 7314: EXPIRE option in transfer summary.
  * Emit more helpful log messages for exceeding
    max-records-per-type.
  * The new log message is emitted when adding or updating an RRset
    fails due to exceeding the max-records-per-type limit. The log
    includes the owner name and type, corresponding zone name, and
    the limit value. It will be emitted on loading a zone file,
    inbound zone transfer (both AXFR and IXFR), handling a DDNS
    update, or updating a cache DB. It’s especially helpful in the
    case of zone transfer, since the secondary side doesn’t have
    direct access to the offending zone data.
  * It could also be used for max-types-per-name, but this change
    doesn’t implement it yet as it’s much less likely to happen in
    practice.
  * Harden key management when key files have become unavailable.
  * Prior to doing key management, BIND 9 will check if the key
    files on disk match the expected keys. If key files for
    previously observed keys have become unavailable, this will
    prevent the internal key manager from running.
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  * Implement the min-transfer-rate-in configuration option.
  * Add HTTPS record query to host command line tool.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
  * Adds support for EDE code 1 and 2.
  * Add an rndc command to toggle jemalloc profiling.
  * Add support for multiple extended DNS errors.
  * Print the expiration time of stale records.
  * Add Extended DNS Error Code 22 - No Reachable Authority.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
  * Update built-in bind.keys file with the new 2025 IANA root key.
  * Add an initial-ds entry to bind.keys for the new root key, ID
    38696, which is scheduled for publication in January 2025.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.
  * Fix dual-stack-servers configuration option.
  * Fix a data race causing a permanent active client increase.
  * Fix deferred validation of unsigned DS and DNSKEY records.
  * Fix RPZ race condition during a reconfiguration.
  * “CNAME and other data check” not applied to all types.
  * Relax private DNSKEY and RRSIG constraints.
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
  * Fix a bug in the statistics channel when querying zone transfer
    information.
  * Fix assertion failure when dumping recursing clients.
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches().
  * Recently expired records could be returned with a timestamp in
    future.
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
  * Apply the memory limit only to ADB database items.
  * Avoid unnecessary locking in the zone/cache database.
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
  * Fix nsupdate hang when processing a large update.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
  * Resolve the spurious drops in performance due to glue cache.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
  * Fix improper handling of unknown directives in resolv.conf.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
  * Use TLS for notifies if configured to do so.
  * Notifies configured to use TLS will now be sent over TLS,
    instead of plain text UDP or TCP. Also, failing to load the TLS
    configuration for notify now results in an error.
  * {&amp;dns} is as valid as {?dns} in a SVCB’s dohpath.
  * dig failed to parse a valid SVCB record with a dohpath URI
    template containing a {&amp;dns}, like
    dohpath=/some/path?key=value{&amp;dns}”.
  * Fix NSEC3 closest encloser lookup for names with empty
    non-terminals.
  * A previous performance optimization for finding the NSEC3
    closest encloser when generating authoritative responses could
    cause servers to return incorrect NSEC3 records in some cases.
    This has been fixed.
  * recursive-clients statement with value 0 triggered an assertion
    failure.
  * BIND 9.20.0 broke recursive-clients 0;. This has now been
    fixed.
  * Parsing of hostnames in rndc.conf was broken.
  * When DSCP support was removed, parsing of hostnames in
    rndc.conf was accidentally broken, resulting in an assertion
    failure. This has been fixed.
  * dig options of the form [+-]option=&lt;value&gt; failed to display
    the value on the printed command line. This has been fixed.
  * Provide more visibility into TLS configuration errors by
    logging SSL_CTX_use_certificate_chain_file() and
    SSL_CTX_use_PrivateKey_file() errors individually.
  * Fix a race condition when canceling ADB find which could cause
    an assertion failure.
  * SERVFAIL cache memory cleaning is now more aggressive; it no
    longer consumes a lot of memory if the server encounters many
    SERVFAILs at once.
  * Fix trying the next primary XoT server when the previous one
    was marked as unreachable.
  * In some cases named failed to try the next primary server in
    the primaries list when the previous one was marked as
    unreachable. This has been fixed.
- CHANGES file has been removed, the changes are now only listed in
  the ARM docs available in the bind-doc package.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="tabraham@suse.com" date="1756987200">- ensure file descriptors 0-2 are in use before using libuv (bsc#1230649)
  * bind-ensure-file-descriptors-0-2-are-in-use-before-using-.patch</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761134400">- Upgrade to release 9.20.15
  Security Fixes:
  * DNSSEC validation fails if matching but invalid DNSKEY is found.
    [CVE-2025-8677, bsc#1252378]
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380]
  New Features:
  * Add dnssec-policy keys configuration check to named-checkconf.
  * Add a new option `manual-mode` to dnssec-policy.
  * Add a new option `servfail-until-ready` to response-policy
    zones.
  * Support for parsing HHIT and BRID records has been added.
  * Support for parsing DSYNC records has been added.
  Removed Features:
  * Deprecate the `tkey-gssapi-credential` statement.
  * Obsolete the `tkey-domain` statement.
  Feature Changes:
  * Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS
    digest type 1.
  Bug Fixes:
  * Missing DNSSEC information when CD bit is set in query.
  * rndc sign during ZSK rollover will now replace signatures.
  * Use signer name when disabling DNSSEC algorithms.
  * Preserve cache when reload fails and reload the server again.
  * Prevent spurious SERVFAILs for certain 0-TTL resource records.
  * Fix unexpected termination if catalog-zones had undefined
    `default-primaries`.
  * Stale RRsets in a CNAME chain were not always refreshed.
  * Add RPZ extended DNS error for zones with a CNAME override
    policy configured.
  * Fix dig +keepopen option.
  * Log dropped or slipped responses in the query-errors category.
  * Fix synth-from-dnssec not working in some scenarios.
  * Clean enough memory when adding new ADB names/entries under
    memory pressure.
  * Prevent spurious validation failures.
- Obsoletes
  bind-ensure-file-descriptors-0-2-are-in-use-before-using-.patch</changelog>
</package>
<package pkgid="4b55f1e5e32d22ccc2f834ca090aa2cfda4eac02c3822a3ff818e39970e98d44" name="bind" arch="src">
  <version epoch="0" ver="9.20.18" rel="150700.3.15.1"/>
  <changelog author="jorik.cronenberg@suse.com" date="1669291200">- Update to release 9.16.35
  Bug Fixes:
  * A crash was fixed that happened when a dnssec-policy zone that
    used NSEC3 was reconfigured to enable inline-signing.
  * In certain resolution scenarios, quotas could be erroneously
    reached for servers, including any configured forwarders,
    resulting in SERVFAIL answers being sent to clients.
  * rpz-ip rules in response-policy zones could be ineffective in
    some cases if a query had the CD (Checking Disabled) bit set to
    1.
  * Previously, if Internet connectivity issues were experienced
    during the initial startup of named, a BIND resolver with
    dnssec-validation set to auto could enter into a state where it
    would not recover without stopping named, manually deleting the
    managed-keys.bind and managed-keys.bind.jnl files, and starting
    named again.
  * The statistics counter representing the current number of
    clients awaiting recursive resolution results (RecursClients)
    could overflow in certain resolution scenarios.
  * Previously, BIND failed to start on Solaris-based systems with
    hundreds of CPUs.
  * When a DNS resource record’s TTL value was equal to the
    resolver’s configured prefetch “eligibility” value, the record
    was erroneously not treated as eligible for prefetching.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1671710400">- Update to release 9.16.36
  Feature Changes:
  * The auto-dnssec option has been deprecated and will be removed
    in a future BIND 9.19.x release. Please migrate to
    dnssec-policy.
  Bug Fixes:
  * When a catalog zone was removed from the configuration, in some
    cases a dangling pointer could cause the named process to
    crash.
  * When a zone was deleted from a server, a key management object
    related to that zone was inadvertently kept in memory and only
    released upon shutdown. This could lead to constantly
    increasing memory use on servers with a high rate of changes
    affecting the set of zones being served.
  * In certain cases, named waited for the resolution of
    outstanding recursive queries to finish before shutting down.
  * The zone &lt;name&gt;/&lt;class&gt;: final reference detached log message
    was moved from the INFO log level to the DEBUG(1) log level to
    prevent the named-checkzone tool from superfluously logging
    this message in non-debug mode.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1674561600">- Update to release 9.16.37
  Security Fixes:
  * An UPDATE message flood could cause named to exhaust all
    available memory. This flaw was addressed by adding a new
    update-quota option that controls the maximum number of
    outstanding DNS UPDATE messages that named can hold in a queue
    at any given time (default: 100). (CVE-2022-3094)
  * named could crash with an assertion failure when an RRSIG query
    was received and stale-answer-client-timeout was set to a
    non-zero value. This has been fixed. (CVE-2022-3736)
  * named running as a resolver with the
    stale-answer-client-timeout option set to any value greater
    than 0 could crash with an assertion failure, when the
    recursive-clients soft quota was reached. This has been fixed.
    (CVE-2022-3924)
  New Features:
  * The new update-quota option can be used to control the number
    of simultaneous DNS UPDATE messages that can be processed to
    update an authoritative zone on a primary server, or forwarded
    to the primary server by a secondary server. The default is
    100. A new statistics counter has also been added to record
    events when this quota is exceeded, and the version numbers for
    the XML and JSON statistics schemas have been updated.
  Feature Changes:
  * The Differentiated Services Code Point (DSCP) feature in BIND
    has been deprecated. Configuring DSCP values in named.conf now
    causes a warning to be logged. Note that this feature has only
    been partly operational since the new Network Manager was
    introduced in BIND 9.16.0.
  * The catalog zone implementation has been optimized to work with
    hundreds of thousands of member zones.
  Bug Fixes:
  * In certain query resolution scenarios (e.g. when following
    CNAME records), named configured to answer from stale cache
    could return a SERVFAIL response despite a usable, non-stale
    answer being present in the cache. This has been fixed.
  [bsc#1207471, bsc#1207473, bsc#1207475, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1676548800">- Update to release 9.16.38
  Bug Fixes:
  * A constant stream of zone additions and deletions via rndc
    reconfig could cause increased memory consumption due to
    delayed cleaning of view memory. This has been fixed.
  * The speed of the message digest algorithms (MD5, SHA-1, SHA-2),
    and of NSEC3 hashing, has been improved.
  * Building BIND 9 failed when the --enable-dnsrps switch for
    ./configure was used. This has been fixed.
  [jsc#SLE-24600]
- Updated keyring and signature</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1678881600">- Update to release 9.16.39
  Feature Changes:
  * libuv support for receiving multiple UDP messages in a single
    recvmmsg() system call has been tweaked several times between
    libuv versions 1.35.0 and 1.40.0; the current recommended libuv
    version is 1.40.0 or higher. New rules are now in effect for
    running with a different version of libuv than the one used at
    compilation time. These rules may trigger a fatal error at
    startup:
  - Building against or running with libuv versions 1.35.0 and
    1.36.0 is now a fatal error.
  - Running with libuv version higher than 1.34.2 is now a
    fatal error when named is built against libuv version
    1.34.2 or lower.
  - Running with libuv version higher than 1.39.0 is now a
    fatal error when named is built against libuv version
    1.37.0, 1.38.0, 1.38.1, or 1.39.0.
  * This prevents the use of libuv versions that may trigger an
    assertion failure when receiving multiple UDP messages in a
    single system call.
  Bug Fixes:
  * named could crash with an assertion failure when adding a new
    zone into the configuration file for a name which was already
    configured as a member zone for a catalog zone. This has been
    fixed.
  * When named starts up, it sends a query for the DNSSEC key for
    each configured trust anchor to determine whether the key has
    changed. In some unusual cases, the query might depend on a
    zone for which the server is itself authoritative, and would
    have failed if it were sent before the zone was fully loaded.
    This has now been fixed by delaying the key queries until all
    zones have finished loading.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1682424000">- Update to release 9.16.40
  Bug Fixes:
  * Logfiles using timestamp-style suffixes were not always
    correctly removed when the number of files exceeded the limit
    set by versions. This has been fixed for configurations which
    do not explicitly specify a directory path as part of the file
    argument in the channel specification.
  * Performance of DNSSEC validation in zones with many DNSKEY
    records has been improved.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1684324800">- Update to release 9.16.41
  Bug Fixes:
  * When removing delegations from an opt-out range,
    empty-non-terminal NSEC3 records generated by those delegations
    were not cleaned up. This has been fixed.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1687348800">- Update to release 9.16.42
  Security Fixes:
  * The overmem cleaning process has been improved, to prevent the
    cache from significantly exceeding the configured
    max-cache-size limit. (CVE-2023-2828)
  * A query that prioritizes stale data over lookup triggers a
    fetch to refresh the stale data in cache. If the fetch is
    aborted for exceeding the recursion quota, it was possible for
    named to enter an infinite callback loop and crash due to stack
    overflow. This has been fixed. (CVE-2023-2911)
  Bug Fixes:
  * Previously, it was possible for a delegation from cache to be
    returned to the client after the stale-answer-client-timeout
    duration. This has been fixed.
  [bsc#1212544, bsc#1212567, jsc#SLE-24600]</changelog>
  <changelog author="dmueller@suse.com" date="1688644800">- rebuild bind-utils on libuv updates (bsc#1212090)</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1688990400">- Log named-checkconf output [bsc#1213049]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1689076800">- Add dnstap support
  [jsc#PED-4852]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1695124800">- Update to release 9.16.44
  Bug Fixes:
  * Processing already-queued queries received over TCP could cause
    an assertion failure, when the server was reconfigured at the
    same time or the cache was being flushed. This has been fixed.
  Security Fixes:
  * Previously, sending a specially crafted message over the
    control channel could cause the packet-parsing code to run out
    of available stack memory, causing named to terminate
    unexpectedly. This has been fixed. (CVE-2023-3341)
  [bsc#1215472]
- Switch to pkgconfig(libprotobuf-c) since this now contains the
  required protobuf-c binary</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1708084800">- Update to new Major Version 9.18.24.
  This has many enhancements, bug fixes and changes.
  Breaking Changes:
  * Some options have been removed and some have been deprecated
    and will be removed in the future.
    For a complete list, see:
    https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-bind-916-to-918
  Major Changes:
  * Support for securing DNS traffic using Transport Layer Security
    (TLS). TLS is used by both DNS-over-TLS (DoT) and
    DNS-over-HTTPS (DoH).
  * Support for zone transfers over TLS (XFR-over-TLS, XoT) for
    both incoming and outgoing zone transfers.
  * The dig tool is now able to send DoT queries (+tls option).
  * Support for OpenSSL 3.0 APIs was added.
  * dnssec-checkds, dnssec-coverage, dnssec-keymgr, which have been
    removed in favor of the dnssec-policy feature
  * python3-bind is deprecated and the subpackage has been removed
  * A number of utilities have been moved from /usr/sbin to
    /usr/bin:
    named-checkconf named-checkzone named-compilezone
    dnssec-dsfromkey dnssec-importkey dnssec-keyfromlabel
    dnssec-keygen dnssec-revoke dnssec-settime dnssec-signzone
    dnssec-verify dnssec-cds named-journalprint nsec3hash
  * The lib directory was renamed from 'named' to 'bind'
  For a complete list of changes, see:
  * Bind Release Notes
    https://bind9.readthedocs.io/en/v9.18.24/notes.html
  * The CHANGES file in the source RPM
  Security Fixes:
  * Validating DNS messages containing a lot of DNSSEC signatures
    could cause excessive CPU load, leading to a denial-of-service
    condition. This has been fixed. (CVE-2023-50387)
    [bsc#1219823]
  * Preparing an NSEC3 closest encloser proof could cause excessive
    CPU load, leading to a denial-of-service condition. This has
    been fixed. (CVE-2023-50868)
    [bsc#1219826]
  * Parsing DNS messages with many different names could cause
    excessive CPU load. This has been fixed. (CVE-2023-4408)
    [bsc#1219851]
  * Specific queries could cause named to crash with an assertion
    failure when nxdomain-redirect was enabled. This has been
    fixed. (CVE-2023-5517)
    [bsc#1219852]
  * A bad interaction between DNS64 and serve-stale could cause
    named to crash with an assertion failure, when both of these
    features were enabled. This has been fixed. (CVE-2023-5679)
    [bsc#1219853]
  * Query patterns that continuously triggered cache database
    maintenance could cause an excessive amount of memory to be
    allocated, exceeding max-cache-size and potentially leading to
    all available memory on the host running named being exhausted.
    This has been fixed. (CVE-2023-6516)
    [bsc#1219854]
  Packaging notes:
  * libnghttps2 added as BuildRequires for tls support
  * named-bootconf.diff patch is obsolete and has been removed
  [jsc#PED-7932]
- Update KillMode to 'control-group' in named.service to handle
  forked processes better.
  [bsc#1215755]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1721908800">- Update to release 9.18.28
  Bug Fixes:
  * Command-line options for IPv4-only (named -4) and IPv6-only
    (named -6) modes are now respected for zone primaries,
    also-notify, and parental-agents.
  * An RPZ response’s SOA record TTL was set to 1 instead of the
    SOA TTL, if add-soa was used. This has been fixed.
  * When a query related to zone maintenance (NOTIFY, SOA) timed
    out close to a view shutdown (triggered e.g. by rndc reload),
    named could crash with an assertion failure. This has been
    fixed.
  * The statistics channel counters that indicated the number of
    currently connected TCP IPv4/IPv6 clients were not properly
    adjusted in certain failure scenarios. This has been fixed.
  * Some servers that could not be reached due to EHOSTDOWN or
    ENETDOWN conditions were incorrectly prioritized during server
    selection. These are now properly handled as unreachable.
  * On some systems the libuv call may return an error code when
    sending a TCP reset for a connection, which triggers an
    assertion failure in named. This error condition is now dealt
    with in a more graceful manner, by logging the incident and
    shutting down the connection.
  * Changes to listen-on statements were ignored on reconfiguration
    unless the port or interface address was changed, making it
    impossible to change a related listener transport type. That
    issue has been fixed.
  * A bug in the keymgr code unintentionally slowed down some
    DNSSEC key rollovers. This has been fixed.
  * Some ISO 8601 durations were accepted erroneously, leading to
    shorter durations than expected. This has been fixed
  * A regression in cache-cleaning code enabled memory use to grow
    significantly more quickly than before, until the configured
    max-cache-size limit was reached. This has been fixed.
  * Using rndc flush inadvertently caused cache cleaning to become
    less effective. This could ultimately lead to the configured
    max-cache-size limit being exceeded and has now been fixed.
  * The logic for cleaning up expired cached DNS records was
    tweaked to be more aggressive. This change helps with enforcing
    max-cache-ttl and max-ncache-ttl in a timely manner.
  * It was possible to trigger a use-after-free assertion when the
    overmem cache cleaning was initiated. This has been fixed.
  New Features:
  * A new option signatures-jitter has been added to dnssec-policy
    to allow signature expirations to be spread out over a period
    of time.
  * The statistics channel now includes counters that indicate the
    number of currently connected TCP IPv4/IPv6 clients.
  * Added RESOLVER.ARPA to the built in empty zones.
  Feature Changes:
  * DNSSEC signatures that are not valid because the current time
    falls outside the signature inception and expiration dates are
    skipped instead of causing an immediate validation failure.
  Security Fixes:
  * A malicious DNS client that sent many queries over TCP but
    never read the responses could cause a server to respond slowly
    or not at all for other clients. This has been fixed.
    (CVE-2024-0760)
    [bsc#1228255]
  * It is possible to craft excessively large resource records
    sets, which have the effect of slowing down database
    processing. This has been addressed by adding a configurable
    limit to the number of records that can be stored per name and
    type in a cache or zone database. The default is 100, which can
    be tuned with the new max-records-per-type option.
  * It is possible to craft excessively large numbers of resource
    record types for a given owner name, which has the effect of
    slowing down database processing. This has been addressed by
    adding a configurable limit to the number of records that can
    be stored per name and type in a cache or zone database. The
    default is 100, which can be tuned with the new
    max-types-per-name option. (CVE-2024-1737)
    [bsc#1228256]
  * Validating DNS messages signed using the SIG(0) protocol (RFC
    2931) could cause excessive CPU load, leading to a
    denial-of-service condition. Support for SIG(0) message
    validation was removed from this version of named.
    (CVE-2024-1975)
    [bsc#1228257]
  * Due to a logic error, lookups that triggered serving stale data
    and required lookups in local authoritative zone data could
    have resulted in an assertion failure. This has been fixed.
  * Potential data races were found in our DoH implementation,
    related to HTTP/2 session object management and endpoints set
    object management after reconfiguration. These issues have been
    fixed.
  * When looking up the NS records of parent zones as part of
    looking up DS records, it was possible for named to trigger an
    assertion failure if serve-stale was enabled. This has been
    fixed. (CVE-2024-4076)
    [bsc#1228258]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1729080000">- Update to new major version 9.20.3
  For a complete list of all changes see:
  * https://bind9.readthedocs.io/en/v9.20.3/notes.html
  * The CHANGES file in the source RPM
  Some noteworthy changes:
  * Added new BuildRequires liburcu for lock free data structures.
  * A new DNSSEC tool dnssec-ksr has been added to create Key
    Signing Request (KSR) and Signed Key Response (SKR) files.
  * /etc/bind.keys and /var/lib/named/named.root.key have been
    removed as the correct defaults are pre-compiled and there is
    no need to configure bind.keys manually.
  * The functions that were in the libbind9 shared library have
    been moved to the libisc and libisccfg libraries. The now-empty
    libbind9 has been removed and is no longer installed.
  * The irs_resconf module has been moved to the libdns shared
    library. The now-empty libirs library has been removed and is
    no longer installed.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Update to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  * dnssec-ksr now supports KSK rollovers.
  * The tool now allows for KSK generation, as well as planned KSK
    rollovers. When signing a bundle from a Key Signing Request
    (KSR), only the key that is active in that time frame is used
    for signing. Also, the CDS and CDNSKEY records are now added
    and removed at the correct time.
  * Print RFC 7314: EXPIRE option in transfer summary.
  * Emit more helpful log messages for exceeding
    max-records-per-type.
  * The new log message is emitted when adding or updating an RRset
    fails due to exceeding the max-records-per-type limit. The log
    includes the owner name and type, corresponding zone name, and
    the limit value. It will be emitted on loading a zone file,
    inbound zone transfer (both AXFR and IXFR), handling a DDNS
    update, or updating a cache DB. It’s especially helpful in the
    case of zone transfer, since the secondary side doesn’t have
    direct access to the offending zone data.
  * It could also be used for max-types-per-name, but this change
    doesn’t implement it yet as it’s much less likely to happen in
    practice.
  * Harden key management when key files have become unavailable.
  * Prior to doing key management, BIND 9 will check if the key
    files on disk match the expected keys. If key files for
    previously observed keys have become unavailable, this will
    prevent the internal key manager from running.
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  * Implement the min-transfer-rate-in configuration option.
  * Add HTTPS record query to host command line tool.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
  * Adds support for EDE code 1 and 2.
  * Add an rndc command to toggle jemalloc profiling.
  * Add support for multiple extended DNS errors.
  * Print the expiration time of stale records.
  * Add Extended DNS Error Code 22 - No Reachable Authority.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
  * Update built-in bind.keys file with the new 2025 IANA root key.
  * Add an initial-ds entry to bind.keys for the new root key, ID
    38696, which is scheduled for publication in January 2025.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.
  * Fix dual-stack-servers configuration option.
  * Fix a data race causing a permanent active client increase.
  * Fix deferred validation of unsigned DS and DNSKEY records.
  * Fix RPZ race condition during a reconfiguration.
  * “CNAME and other data check” not applied to all types.
  * Relax private DNSKEY and RRSIG constraints.
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
  * Fix a bug in the statistics channel when querying zone transfer
    information.
  * Fix assertion failure when dumping recursing clients.
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches().
  * Recently expired records could be returned with a timestamp in
    future.
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
  * Apply the memory limit only to ADB database items.
  * Avoid unnecessary locking in the zone/cache database.
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
  * Fix nsupdate hang when processing a large update.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
  * Resolve the spurious drops in performance due to glue cache.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
  * Fix improper handling of unknown directives in resolv.conf.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
  * Use TLS for notifies if configured to do so.
  * Notifies configured to use TLS will now be sent over TLS,
    instead of plain text UDP or TCP. Also, failing to load the TLS
    configuration for notify now results in an error.
  * {&amp;dns} is as valid as {?dns} in a SVCB’s dohpath.
  * dig failed to parse a valid SVCB record with a dohpath URI
    template containing a {&amp;dns}, like
    dohpath=/some/path?key=value{&amp;dns}”.
  * Fix NSEC3 closest encloser lookup for names with empty
    non-terminals.
  * A previous performance optimization for finding the NSEC3
    closest encloser when generating authoritative responses could
    cause servers to return incorrect NSEC3 records in some cases.
    This has been fixed.
  * recursive-clients statement with value 0 triggered an assertion
    failure.
  * BIND 9.20.0 broke recursive-clients 0;. This has now been
    fixed.
  * Parsing of hostnames in rndc.conf was broken.
  * When DSCP support was removed, parsing of hostnames in
    rndc.conf was accidentally broken, resulting in an assertion
    failure. This has been fixed.
  * dig options of the form [+-]option=&lt;value&gt; failed to display
    the value on the printed command line. This has been fixed.
  * Provide more visibility into TLS configuration errors by
    logging SSL_CTX_use_certificate_chain_file() and
    SSL_CTX_use_PrivateKey_file() errors individually.
  * Fix a race condition when canceling ADB find which could cause
    an assertion failure.
  * SERVFAIL cache memory cleaning is now more aggressive; it no
    longer consumes a lot of memory if the server encounters many
    SERVFAILs at once.
  * Fix trying the next primary XoT server when the previous one
    was marked as unreachable.
  * In some cases named failed to try the next primary server in
    the primaries list when the previous one was marked as
    unreachable. This has been fixed.
- CHANGES file has been removed, the changes are now only listed in
  the ARM docs available in the bind-doc package.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="tabraham@suse.com" date="1756987200">- ensure file descriptors 0-2 are in use before using libuv (bsc#1230649)
  * bind-ensure-file-descriptors-0-2-are-in-use-before-using-.patch</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761134400">- Upgrade to release 9.20.15
  Security Fixes:
  * DNSSEC validation fails if matching but invalid DNSKEY is found.
    [CVE-2025-8677, bsc#1252378]
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380]
  New Features:
  * Add dnssec-policy keys configuration check to named-checkconf.
  * Add a new option `manual-mode` to dnssec-policy.
  * Add a new option `servfail-until-ready` to response-policy
    zones.
  * Support for parsing HHIT and BRID records has been added.
  * Support for parsing DSYNC records has been added.
  Removed Features:
  * Deprecate the `tkey-gssapi-credential` statement.
  * Obsolete the `tkey-domain` statement.
  Feature Changes:
  * Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS
    digest type 1.
  Bug Fixes:
  * Missing DNSSEC information when CD bit is set in query.
  * rndc sign during ZSK rollover will now replace signatures.
  * Use signer name when disabling DNSSEC algorithms.
  * Preserve cache when reload fails and reload the server again.
  * Prevent spurious SERVFAILs for certain 0-TTL resource records.
  * Fix unexpected termination if catalog-zones had undefined
    `default-primaries`.
  * Stale RRsets in a CNAME chain were not always refreshed.
  * Add RPZ extended DNS error for zones with a CNAME override
    policy configured.
  * Fix dig +keepopen option.
  * Log dropped or slipped responses in the query-errors category.
  * Fix synth-from-dnssec not working in some scenarios.
  * Clean enough memory when adding new ADB names/entries under
    memory pressure.
  * Prevent spurious validation failures.
- Obsoletes
  bind-ensure-file-descriptors-0-2-are-in-use-before-using-.patch</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1768996800">- Upgrade to release 9.20.18
  Security Fixes:
  * Fix incorrect length checks for BRID and HHIT records.
  (CVE-2025-13878)
  [bsc#1256997]
  Feature Changes:
  * Add more information to the rndc recursing output about
    fetches.
  * Reduce the number of outgoing queries.
  * Provide more information when memory allocation fails.
  Bug Fixes:
  * Make DNSSEC key rollovers more robust.
  * Fix a catalog zone issue, where member zones could fail to
    load.
  * Allow glue in delegations with QTYPE=ANY.
  * Fix slow speed when signing a large delegation zone with NSEC3
    opt-out.
  * Reconfiguring an NSEC3 opt-out zone to NSEC caused the zone to
    be invalid.
  * Fix a possible catalog zone issue during reconfiguration.
  * Fix the charts in the statistics channel.
  * Adding NSEC3 opt-out records could leave invalid records in
    chain.
  * Fix spurious timeouts while resolving names.
  * Fix bug where zone switches from NSEC3 to NSEC after
    retransfer.
  * AMTRELAY type 0 presentation format handling was wrong.
  * Fix parsing bug in remote-servers with key or TLS.
  * Fix DoT reconfigure/reload bug in the resolver.
  * Skip unsupported algorithms when looking for a signing key.
  * Fix dnssec-keygen key collision checking for KEY RRtype keys.
  * dnssec-verify now uses exit code 1 when failing due to illegal
    options.
  * Prevent assertion failures of dig when a server is specified
    before the -b option.
  * Skip buffer allocations if not logging.</changelog>
</package>
<package pkgid="f090b374b47054b939d7444071d07f136922d854e704544accd1e6ba56d92ce7" name="bind" arch="src">
  <version epoch="0" ver="9.20.21" rel="150700.3.18.1"/>
  <changelog author="jorik.cronenberg@suse.com" date="1671710400">- Update to release 9.16.36
  Feature Changes:
  * The auto-dnssec option has been deprecated and will be removed
    in a future BIND 9.19.x release. Please migrate to
    dnssec-policy.
  Bug Fixes:
  * When a catalog zone was removed from the configuration, in some
    cases a dangling pointer could cause the named process to
    crash.
  * When a zone was deleted from a server, a key management object
    related to that zone was inadvertently kept in memory and only
    released upon shutdown. This could lead to constantly
    increasing memory use on servers with a high rate of changes
    affecting the set of zones being served.
  * In certain cases, named waited for the resolution of
    outstanding recursive queries to finish before shutting down.
  * The zone &lt;name&gt;/&lt;class&gt;: final reference detached log message
    was moved from the INFO log level to the DEBUG(1) log level to
    prevent the named-checkzone tool from superfluously logging
    this message in non-debug mode.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1674561600">- Update to release 9.16.37
  Security Fixes:
  * An UPDATE message flood could cause named to exhaust all
    available memory. This flaw was addressed by adding a new
    update-quota option that controls the maximum number of
    outstanding DNS UPDATE messages that named can hold in a queue
    at any given time (default: 100). (CVE-2022-3094)
  * named could crash with an assertion failure when an RRSIG query
    was received and stale-answer-client-timeout was set to a
    non-zero value. This has been fixed. (CVE-2022-3736)
  * named running as a resolver with the
    stale-answer-client-timeout option set to any value greater
    than 0 could crash with an assertion failure, when the
    recursive-clients soft quota was reached. This has been fixed.
    (CVE-2022-3924)
  New Features:
  * The new update-quota option can be used to control the number
    of simultaneous DNS UPDATE messages that can be processed to
    update an authoritative zone on a primary server, or forwarded
    to the primary server by a secondary server. The default is
    100. A new statistics counter has also been added to record
    events when this quota is exceeded, and the version numbers for
    the XML and JSON statistics schemas have been updated.
  Feature Changes:
  * The Differentiated Services Code Point (DSCP) feature in BIND
    has been deprecated. Configuring DSCP values in named.conf now
    causes a warning to be logged. Note that this feature has only
    been partly operational since the new Network Manager was
    introduced in BIND 9.16.0.
  * The catalog zone implementation has been optimized to work with
    hundreds of thousands of member zones.
  Bug Fixes:
  * In certain query resolution scenarios (e.g. when following
    CNAME records), named configured to answer from stale cache
    could return a SERVFAIL response despite a usable, non-stale
    answer being present in the cache. This has been fixed.
  [bsc#1207471, bsc#1207473, bsc#1207475, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1676548800">- Update to release 9.16.38
  Bug Fixes:
  * A constant stream of zone additions and deletions via rndc
    reconfig could cause increased memory consumption due to
    delayed cleaning of view memory. This has been fixed.
  * The speed of the message digest algorithms (MD5, SHA-1, SHA-2),
    and of NSEC3 hashing, has been improved.
  * Building BIND 9 failed when the --enable-dnsrps switch for
    ./configure was used. This has been fixed.
  [jsc#SLE-24600]
- Updated keyring and signature</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1678881600">- Update to release 9.16.39
  Feature Changes:
  * libuv support for receiving multiple UDP messages in a single
    recvmmsg() system call has been tweaked several times between
    libuv versions 1.35.0 and 1.40.0; the current recommended libuv
    version is 1.40.0 or higher. New rules are now in effect for
    running with a different version of libuv than the one used at
    compilation time. These rules may trigger a fatal error at
    startup:
  - Building against or running with libuv versions 1.35.0 and
    1.36.0 is now a fatal error.
  - Running with libuv version higher than 1.34.2 is now a
    fatal error when named is built against libuv version
    1.34.2 or lower.
  - Running with libuv version higher than 1.39.0 is now a
    fatal error when named is built against libuv version
    1.37.0, 1.38.0, 1.38.1, or 1.39.0.
  * This prevents the use of libuv versions that may trigger an
    assertion failure when receiving multiple UDP messages in a
    single system call.
  Bug Fixes:
  * named could crash with an assertion failure when adding a new
    zone into the configuration file for a name which was already
    configured as a member zone for a catalog zone. This has been
    fixed.
  * When named starts up, it sends a query for the DNSSEC key for
    each configured trust anchor to determine whether the key has
    changed. In some unusual cases, the query might depend on a
    zone for which the server is itself authoritative, and would
    have failed if it were sent before the zone was fully loaded.
    This has now been fixed by delaying the key queries until all
    zones have finished loading.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1682424000">- Update to release 9.16.40
  Bug Fixes:
  * Logfiles using timestamp-style suffixes were not always
    correctly removed when the number of files exceeded the limit
    set by versions. This has been fixed for configurations which
    do not explicitly specify a directory path as part of the file
    argument in the channel specification.
  * Performance of DNSSEC validation in zones with many DNSKEY
    records has been improved.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1684324800">- Update to release 9.16.41
  Bug Fixes:
  * When removing delegations from an opt-out range,
    empty-non-terminal NSEC3 records generated by those delegations
    were not cleaned up. This has been fixed.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1687348800">- Update to release 9.16.42
  Security Fixes:
  * The overmem cleaning process has been improved, to prevent the
    cache from significantly exceeding the configured
    max-cache-size limit. (CVE-2023-2828)
  * A query that prioritizes stale data over lookup triggers a
    fetch to refresh the stale data in cache. If the fetch is
    aborted for exceeding the recursion quota, it was possible for
    named to enter an infinite callback loop and crash due to stack
    overflow. This has been fixed. (CVE-2023-2911)
  Bug Fixes:
  * Previously, it was possible for a delegation from cache to be
    returned to the client after the stale-answer-client-timeout
    duration. This has been fixed.
  [bsc#1212544, bsc#1212567, jsc#SLE-24600]</changelog>
  <changelog author="dmueller@suse.com" date="1688644800">- rebuild bind-utils on libuv updates (bsc#1212090)</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1688990400">- Log named-checkconf output [bsc#1213049]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1689076800">- Add dnstap support
  [jsc#PED-4852]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1695124800">- Update to release 9.16.44
  Bug Fixes:
  * Processing already-queued queries received over TCP could cause
    an assertion failure, when the server was reconfigured at the
    same time or the cache was being flushed. This has been fixed.
  Security Fixes:
  * Previously, sending a specially crafted message over the
    control channel could cause the packet-parsing code to run out
    of available stack memory, causing named to terminate
    unexpectedly. This has been fixed. (CVE-2023-3341)
  [bsc#1215472]
- Switch to pkgconfig(libprotobuf-c) since this now contains the
  required protobuf-c binary</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1708084800">- Update to new Major Version 9.18.24.
  This has many enhancements, bug fixes and changes.
  Breaking Changes:
  * Some options have been removed and some have been deprecated
    and will be removed in the future.
    For a complete list, see:
    https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-bind-916-to-918
  Major Changes:
  * Support for securing DNS traffic using Transport Layer Security
    (TLS). TLS is used by both DNS-over-TLS (DoT) and
    DNS-over-HTTPS (DoH).
  * Support for zone transfers over TLS (XFR-over-TLS, XoT) for
    both incoming and outgoing zone transfers.
  * The dig tool is now able to send DoT queries (+tls option).
  * Support for OpenSSL 3.0 APIs was added.
  * dnssec-checkds, dnssec-coverage, dnssec-keymgr, which have been
    removed in favor of the dnssec-policy feature
  * python3-bind is deprecated and the subpackage has been removed
  * A number of utilities have been moved from /usr/sbin to
    /usr/bin:
    named-checkconf named-checkzone named-compilezone
    dnssec-dsfromkey dnssec-importkey dnssec-keyfromlabel
    dnssec-keygen dnssec-revoke dnssec-settime dnssec-signzone
    dnssec-verify dnssec-cds named-journalprint nsec3hash
  * The lib directory was renamed from 'named' to 'bind'
  For a complete list of changes, see:
  * Bind Release Notes
    https://bind9.readthedocs.io/en/v9.18.24/notes.html
  * The CHANGES file in the source RPM
  Security Fixes:
  * Validating DNS messages containing a lot of DNSSEC signatures
    could cause excessive CPU load, leading to a denial-of-service
    condition. This has been fixed. (CVE-2023-50387)
    [bsc#1219823]
  * Preparing an NSEC3 closest encloser proof could cause excessive
    CPU load, leading to a denial-of-service condition. This has
    been fixed. (CVE-2023-50868)
    [bsc#1219826]
  * Parsing DNS messages with many different names could cause
    excessive CPU load. This has been fixed. (CVE-2023-4408)
    [bsc#1219851]
  * Specific queries could cause named to crash with an assertion
    failure when nxdomain-redirect was enabled. This has been
    fixed. (CVE-2023-5517)
    [bsc#1219852]
  * A bad interaction between DNS64 and serve-stale could cause
    named to crash with an assertion failure, when both of these
    features were enabled. This has been fixed. (CVE-2023-5679)
    [bsc#1219853]
  * Query patterns that continuously triggered cache database
    maintenance could cause an excessive amount of memory to be
    allocated, exceeding max-cache-size and potentially leading to
    all available memory on the host running named being exhausted.
    This has been fixed. (CVE-2023-6516)
    [bsc#1219854]
  Packaging notes:
  * libnghttps2 added as BuildRequires for tls support
  * named-bootconf.diff patch is obsolete and has been removed
  [jsc#PED-7932]
- Update KillMode to 'control-group' in named.service to handle
  forked processes better.
  [bsc#1215755]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1721908800">- Update to release 9.18.28
  Bug Fixes:
  * Command-line options for IPv4-only (named -4) and IPv6-only
    (named -6) modes are now respected for zone primaries,
    also-notify, and parental-agents.
  * An RPZ response’s SOA record TTL was set to 1 instead of the
    SOA TTL, if add-soa was used. This has been fixed.
  * When a query related to zone maintenance (NOTIFY, SOA) timed
    out close to a view shutdown (triggered e.g. by rndc reload),
    named could crash with an assertion failure. This has been
    fixed.
  * The statistics channel counters that indicated the number of
    currently connected TCP IPv4/IPv6 clients were not properly
    adjusted in certain failure scenarios. This has been fixed.
  * Some servers that could not be reached due to EHOSTDOWN or
    ENETDOWN conditions were incorrectly prioritized during server
    selection. These are now properly handled as unreachable.
  * On some systems the libuv call may return an error code when
    sending a TCP reset for a connection, which triggers an
    assertion failure in named. This error condition is now dealt
    with in a more graceful manner, by logging the incident and
    shutting down the connection.
  * Changes to listen-on statements were ignored on reconfiguration
    unless the port or interface address was changed, making it
    impossible to change a related listener transport type. That
    issue has been fixed.
  * A bug in the keymgr code unintentionally slowed down some
    DNSSEC key rollovers. This has been fixed.
  * Some ISO 8601 durations were accepted erroneously, leading to
    shorter durations than expected. This has been fixed
  * A regression in cache-cleaning code enabled memory use to grow
    significantly more quickly than before, until the configured
    max-cache-size limit was reached. This has been fixed.
  * Using rndc flush inadvertently caused cache cleaning to become
    less effective. This could ultimately lead to the configured
    max-cache-size limit being exceeded and has now been fixed.
  * The logic for cleaning up expired cached DNS records was
    tweaked to be more aggressive. This change helps with enforcing
    max-cache-ttl and max-ncache-ttl in a timely manner.
  * It was possible to trigger a use-after-free assertion when the
    overmem cache cleaning was initiated. This has been fixed.
  New Features:
  * A new option signatures-jitter has been added to dnssec-policy
    to allow signature expirations to be spread out over a period
    of time.
  * The statistics channel now includes counters that indicate the
    number of currently connected TCP IPv4/IPv6 clients.
  * Added RESOLVER.ARPA to the built in empty zones.
  Feature Changes:
  * DNSSEC signatures that are not valid because the current time
    falls outside the signature inception and expiration dates are
    skipped instead of causing an immediate validation failure.
  Security Fixes:
  * A malicious DNS client that sent many queries over TCP but
    never read the responses could cause a server to respond slowly
    or not at all for other clients. This has been fixed.
    (CVE-2024-0760)
    [bsc#1228255]
  * It is possible to craft excessively large resource records
    sets, which have the effect of slowing down database
    processing. This has been addressed by adding a configurable
    limit to the number of records that can be stored per name and
    type in a cache or zone database. The default is 100, which can
    be tuned with the new max-records-per-type option.
  * It is possible to craft excessively large numbers of resource
    record types for a given owner name, which has the effect of
    slowing down database processing. This has been addressed by
    adding a configurable limit to the number of records that can
    be stored per name and type in a cache or zone database. The
    default is 100, which can be tuned with the new
    max-types-per-name option. (CVE-2024-1737)
    [bsc#1228256]
  * Validating DNS messages signed using the SIG(0) protocol (RFC
    2931) could cause excessive CPU load, leading to a
    denial-of-service condition. Support for SIG(0) message
    validation was removed from this version of named.
    (CVE-2024-1975)
    [bsc#1228257]
  * Due to a logic error, lookups that triggered serving stale data
    and required lookups in local authoritative zone data could
    have resulted in an assertion failure. This has been fixed.
  * Potential data races were found in our DoH implementation,
    related to HTTP/2 session object management and endpoints set
    object management after reconfiguration. These issues have been
    fixed.
  * When looking up the NS records of parent zones as part of
    looking up DS records, it was possible for named to trigger an
    assertion failure if serve-stale was enabled. This has been
    fixed. (CVE-2024-4076)
    [bsc#1228258]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1729080000">- Update to new major version 9.20.3
  For a complete list of all changes see:
  * https://bind9.readthedocs.io/en/v9.20.3/notes.html
  * The CHANGES file in the source RPM
  Some noteworthy changes:
  * Added new BuildRequires liburcu for lock free data structures.
  * A new DNSSEC tool dnssec-ksr has been added to create Key
    Signing Request (KSR) and Signed Key Response (SKR) files.
  * /etc/bind.keys and /var/lib/named/named.root.key have been
    removed as the correct defaults are pre-compiled and there is
    no need to configure bind.keys manually.
  * The functions that were in the libbind9 shared library have
    been moved to the libisc and libisccfg libraries. The now-empty
    libbind9 has been removed and is no longer installed.
  * The irs_resconf module has been moved to the libdns shared
    library. The now-empty libirs library has been removed and is
    no longer installed.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Update to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  * dnssec-ksr now supports KSK rollovers.
  * The tool now allows for KSK generation, as well as planned KSK
    rollovers. When signing a bundle from a Key Signing Request
    (KSR), only the key that is active in that time frame is used
    for signing. Also, the CDS and CDNSKEY records are now added
    and removed at the correct time.
  * Print RFC 7314: EXPIRE option in transfer summary.
  * Emit more helpful log messages for exceeding
    max-records-per-type.
  * The new log message is emitted when adding or updating an RRset
    fails due to exceeding the max-records-per-type limit. The log
    includes the owner name and type, corresponding zone name, and
    the limit value. It will be emitted on loading a zone file,
    inbound zone transfer (both AXFR and IXFR), handling a DDNS
    update, or updating a cache DB. It’s especially helpful in the
    case of zone transfer, since the secondary side doesn’t have
    direct access to the offending zone data.
  * It could also be used for max-types-per-name, but this change
    doesn’t implement it yet as it’s much less likely to happen in
    practice.
  * Harden key management when key files have become unavailable.
  * Prior to doing key management, BIND 9 will check if the key
    files on disk match the expected keys. If key files for
    previously observed keys have become unavailable, this will
    prevent the internal key manager from running.
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  * Implement the min-transfer-rate-in configuration option.
  * Add HTTPS record query to host command line tool.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
  * Adds support for EDE code 1 and 2.
  * Add an rndc command to toggle jemalloc profiling.
  * Add support for multiple extended DNS errors.
  * Print the expiration time of stale records.
  * Add Extended DNS Error Code 22 - No Reachable Authority.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
  * Update built-in bind.keys file with the new 2025 IANA root key.
  * Add an initial-ds entry to bind.keys for the new root key, ID
    38696, which is scheduled for publication in January 2025.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.
  * Fix dual-stack-servers configuration option.
  * Fix a data race causing a permanent active client increase.
  * Fix deferred validation of unsigned DS and DNSKEY records.
  * Fix RPZ race condition during a reconfiguration.
  * “CNAME and other data check” not applied to all types.
  * Relax private DNSKEY and RRSIG constraints.
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
  * Fix a bug in the statistics channel when querying zone transfer
    information.
  * Fix assertion failure when dumping recursing clients.
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches().
  * Recently expired records could be returned with a timestamp in
    future.
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
  * Apply the memory limit only to ADB database items.
  * Avoid unnecessary locking in the zone/cache database.
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
  * Fix nsupdate hang when processing a large update.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
  * Resolve the spurious drops in performance due to glue cache.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
  * Fix improper handling of unknown directives in resolv.conf.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
  * Use TLS for notifies if configured to do so.
  * Notifies configured to use TLS will now be sent over TLS,
    instead of plain text UDP or TCP. Also, failing to load the TLS
    configuration for notify now results in an error.
  * {&amp;dns} is as valid as {?dns} in a SVCB’s dohpath.
  * dig failed to parse a valid SVCB record with a dohpath URI
    template containing a {&amp;dns}, like
    dohpath=/some/path?key=value{&amp;dns}”.
  * Fix NSEC3 closest encloser lookup for names with empty
    non-terminals.
  * A previous performance optimization for finding the NSEC3
    closest encloser when generating authoritative responses could
    cause servers to return incorrect NSEC3 records in some cases.
    This has been fixed.
  * recursive-clients statement with value 0 triggered an assertion
    failure.
  * BIND 9.20.0 broke recursive-clients 0;. This has now been
    fixed.
  * Parsing of hostnames in rndc.conf was broken.
  * When DSCP support was removed, parsing of hostnames in
    rndc.conf was accidentally broken, resulting in an assertion
    failure. This has been fixed.
  * dig options of the form [+-]option=&lt;value&gt; failed to display
    the value on the printed command line. This has been fixed.
  * Provide more visibility into TLS configuration errors by
    logging SSL_CTX_use_certificate_chain_file() and
    SSL_CTX_use_PrivateKey_file() errors individually.
  * Fix a race condition when canceling ADB find which could cause
    an assertion failure.
  * SERVFAIL cache memory cleaning is now more aggressive; it no
    longer consumes a lot of memory if the server encounters many
    SERVFAILs at once.
  * Fix trying the next primary XoT server when the previous one
    was marked as unreachable.
  * In some cases named failed to try the next primary server in
    the primaries list when the previous one was marked as
    unreachable. This has been fixed.
- CHANGES file has been removed, the changes are now only listed in
  the ARM docs available in the bind-doc package.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="tabraham@suse.com" date="1756987200">- ensure file descriptors 0-2 are in use before using libuv (bsc#1230649)
  * bind-ensure-file-descriptors-0-2-are-in-use-before-using-.patch</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761134400">- Upgrade to release 9.20.15
  Security Fixes:
  * DNSSEC validation fails if matching but invalid DNSKEY is found.
    [CVE-2025-8677, bsc#1252378]
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380]
  New Features:
  * Add dnssec-policy keys configuration check to named-checkconf.
  * Add a new option `manual-mode` to dnssec-policy.
  * Add a new option `servfail-until-ready` to response-policy
    zones.
  * Support for parsing HHIT and BRID records has been added.
  * Support for parsing DSYNC records has been added.
  Removed Features:
  * Deprecate the `tkey-gssapi-credential` statement.
  * Obsolete the `tkey-domain` statement.
  Feature Changes:
  * Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS
    digest type 1.
  Bug Fixes:
  * Missing DNSSEC information when CD bit is set in query.
  * rndc sign during ZSK rollover will now replace signatures.
  * Use signer name when disabling DNSSEC algorithms.
  * Preserve cache when reload fails and reload the server again.
  * Prevent spurious SERVFAILs for certain 0-TTL resource records.
  * Fix unexpected termination if catalog-zones had undefined
    `default-primaries`.
  * Stale RRsets in a CNAME chain were not always refreshed.
  * Add RPZ extended DNS error for zones with a CNAME override
    policy configured.
  * Fix dig +keepopen option.
  * Log dropped or slipped responses in the query-errors category.
  * Fix synth-from-dnssec not working in some scenarios.
  * Clean enough memory when adding new ADB names/entries under
    memory pressure.
  * Prevent spurious validation failures.
- Obsoletes
  bind-ensure-file-descriptors-0-2-are-in-use-before-using-.patch</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1768996800">- Upgrade to release 9.20.18
  Security Fixes:
  * Fix incorrect length checks for BRID and HHIT records.
  (CVE-2025-13878)
  [bsc#1256997]
  Feature Changes:
  * Add more information to the rndc recursing output about
    fetches.
  * Reduce the number of outgoing queries.
  * Provide more information when memory allocation fails.
  Bug Fixes:
  * Make DNSSEC key rollovers more robust.
  * Fix a catalog zone issue, where member zones could fail to
    load.
  * Allow glue in delegations with QTYPE=ANY.
  * Fix slow speed when signing a large delegation zone with NSEC3
    opt-out.
  * Reconfiguring an NSEC3 opt-out zone to NSEC caused the zone to
    be invalid.
  * Fix a possible catalog zone issue during reconfiguration.
  * Fix the charts in the statistics channel.
  * Adding NSEC3 opt-out records could leave invalid records in
    chain.
  * Fix spurious timeouts while resolving names.
  * Fix bug where zone switches from NSEC3 to NSEC after
    retransfer.
  * AMTRELAY type 0 presentation format handling was wrong.
  * Fix parsing bug in remote-servers with key or TLS.
  * Fix DoT reconfigure/reload bug in the resolver.
  * Skip unsupported algorithms when looking for a signing key.
  * Fix dnssec-keygen key collision checking for KEY RRtype keys.
  * dnssec-verify now uses exit code 1 when failing due to illegal
    options.
  * Prevent assertion failures of dig when a server is specified
    before the -b option.
  * Skip buffer allocations if not logging.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1774526400">- Upgrade to release 9.20.21
  Security Fixes:
  * Fix unbounded NSEC3 iterations when validating referrals to
    unsigned delegations.
    (CVE-2026-1519)
    [bsc#1260805]
  * Fix memory leaks in code preparing DNSSEC proofs of
    non-existence.
    (CVE-2026-3104)
    [bsc#1260567]
  * Prevent a crash in code processing queries containing a TKEY
    record.
    (CVE-2026-3119)
    [bsc#1260568]
  * Fix a stack use-after-return flaw in SIG(0) handling code.
    (CVE-2026-3591)
    [bsc#1260569]
  * Fix a use-after-free error in dns_client_resolve() triggered by
    a DNAME response. This issue only affected the delv tool and it
    has now been fixed.
    [bsc#1259202]
  Feature Changes:
  * Record query time for all dnstap responses.
  * Optimize TCP source port selection on Linux.
  Bug Fixes:
  * Fix the handling of key statements defined inside views.
  * Fix an assertion failure triggered by non-minimal IXFRs.
  * Fix a crash when retrying a NOTIFY over TCP.
  * Fetch loop detection improvements.
  * Randomize nameserver selection.
  * Fix dnstap logging of forwarded queries.
  * A stale answer could have been served in case of multiple
    upstream failures when following CNAME chains. This has been
    fixed.
  * Fail DNSKEY validation when supported but invalid DS is found.
  * Importing an invalid SKR file might corrupt stack memory.
  * Return FORMERR for queries with the EDNS Client Subnet FAMILY
    field set to 0.
  * Fix inbound IXFR performance regression.
  * Make catalog zone names and member zones' entry names
    case-insensitive.
  * Fix implementation of BRID and HHIT record types.
  * Fix implementation of DSYNC record type.
  * Fix response policy and catalog zones to work with $INCLUDE
    directive.</changelog>
</package>
<package pkgid="7269ac1fad75ba8707fc5c1c72064bd37fae3fa8ec76a3b73dd71e8967caf206" name="bind" arch="src">
  <version epoch="0" ver="9.20.9" rel="150700.3.3.1"/>
  <changelog author="jorik.cronenberg@suse.com" date="1662724800">- Include a modified createNamedConfInclude script again, as this
  broke compatability with existing configurations.
  A symlink for named.conf.include to /var/lib/named is created to
  allow for a read-only /etc directory.
  However it is still advised to change the existing configuration.
  See README-bind.chrootenv for a guide how to do this.
  [bsc#1203250, vendor-files/tools/createNamedConfInclude,
  vendor-files/docu/README-bind.chrootenv, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724801">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Update to release 9.16.33
  Security Fixes:
  * Previously, there was no limit to the number of database lookups
    performed while processing large delegations, which could be
    abused to severely impact the performance of named running as a
    recursive resolver. This has been fixed. (CVE-2022-2795)
  * named running as a resolver with the stale-answer-client-timeout
    option set to 0 could crash with an assertion failure, when
    there was a stale CNAME in the cache for the incoming query.
    This has been fixed. (CVE-2022-3080)
  * A memory leak was fixed that could be externally triggered in the
    DNSSEC verification code for the ECDSA algorithm. (CVE-2022-38177)
  * Memory leaks were fixed that could be externally triggered in the
    DNSSEC verification code for the EdDSA algorithm. (CVE-2022-38178)
  Feature Changes:
  * Response Rate Limiting (RRL) code now treats all QNAMEs that are
    subject to wildcard processing within a given zone as the same
    name, to prevent circumventing the limits enforced by RRL.
  * Zones using dnssec-policy now require dynamic DNS or
    inline-signing to be configured explicitly.
  * A backward-compatible approach was implemented for encoding
    internationalized domain names (IDN) in dig and converting the
    domain to IDNA2008 form; if that fails,
    BIND tries an IDNA2003 conversion.
  Bug Fixes:
  * A serve-stale bug was fixed, where BIND would try to return stale
    data from cache for lookups that received duplicate queries or
    queries that would be dropped. This bug resulted in premature
    SERVFAIL responses, and has now been resolved.
  [bsc#1203614, bsc#1203618, bsc#1203619, bsc#1203620, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1668168000">- Update to release 9.16.34
  New Features:
  * Support for parsing and validating the dohpath service
    parameter in SVCB records was added.
  * named now logs the supported cryptographic algorithms during
    startup and in the output of named -V.
  Bug Fixes:
  * Changing just the TSIG key names for primaries in catalog
    zones’ member zones was not effective. This has been fixed.
  Known Issues:
  * Upgrading from BIND 9.16.32 or any older version may require a
    manual configuration change. The following configurations are
    affected:
  - type primary zones configured with dnssec-policy but without
    either allow-update or update-policy,
  - type secondary zones configured with dnssec-policy.
    In these cases please add inline-signing yes; to the individual
    zone configuration(s). Without applying this change, named will
    fail to start. For more details, see
    https://kb.isc.org/docs/dnssec-policy-requires-dynamic-dns-or-inline-signing
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1669291200">- Update to release 9.16.35
  Bug Fixes:
  * A crash was fixed that happened when a dnssec-policy zone that
    used NSEC3 was reconfigured to enable inline-signing.
  * In certain resolution scenarios, quotas could be erroneously
    reached for servers, including any configured forwarders,
    resulting in SERVFAIL answers being sent to clients.
  * rpz-ip rules in response-policy zones could be ineffective in
    some cases if a query had the CD (Checking Disabled) bit set to
    1.
  * Previously, if Internet connectivity issues were experienced
    during the initial startup of named, a BIND resolver with
    dnssec-validation set to auto could enter into a state where it
    would not recover without stopping named, manually deleting the
    managed-keys.bind and managed-keys.bind.jnl files, and starting
    named again.
  * The statistics counter representing the current number of
    clients awaiting recursive resolution results (RecursClients)
    could overflow in certain resolution scenarios.
  * Previously, BIND failed to start on Solaris-based systems with
    hundreds of CPUs.
  * When a DNS resource record’s TTL value was equal to the
    resolver’s configured prefetch “eligibility” value, the record
    was erroneously not treated as eligible for prefetching.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1671710400">- Update to release 9.16.36
  Feature Changes:
  * The auto-dnssec option has been deprecated and will be removed
    in a future BIND 9.19.x release. Please migrate to
    dnssec-policy.
  Bug Fixes:
  * When a catalog zone was removed from the configuration, in some
    cases a dangling pointer could cause the named process to
    crash.
  * When a zone was deleted from a server, a key management object
    related to that zone was inadvertently kept in memory and only
    released upon shutdown. This could lead to constantly
    increasing memory use on servers with a high rate of changes
    affecting the set of zones being served.
  * In certain cases, named waited for the resolution of
    outstanding recursive queries to finish before shutting down.
  * The zone &lt;name&gt;/&lt;class&gt;: final reference detached log message
    was moved from the INFO log level to the DEBUG(1) log level to
    prevent the named-checkzone tool from superfluously logging
    this message in non-debug mode.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1674561600">- Update to release 9.16.37
  Security Fixes:
  * An UPDATE message flood could cause named to exhaust all
    available memory. This flaw was addressed by adding a new
    update-quota option that controls the maximum number of
    outstanding DNS UPDATE messages that named can hold in a queue
    at any given time (default: 100). (CVE-2022-3094)
  * named could crash with an assertion failure when an RRSIG query
    was received and stale-answer-client-timeout was set to a
    non-zero value. This has been fixed. (CVE-2022-3736)
  * named running as a resolver with the
    stale-answer-client-timeout option set to any value greater
    than 0 could crash with an assertion failure, when the
    recursive-clients soft quota was reached. This has been fixed.
    (CVE-2022-3924)
  New Features:
  * The new update-quota option can be used to control the number
    of simultaneous DNS UPDATE messages that can be processed to
    update an authoritative zone on a primary server, or forwarded
    to the primary server by a secondary server. The default is
    100. A new statistics counter has also been added to record
    events when this quota is exceeded, and the version numbers for
    the XML and JSON statistics schemas have been updated.
  Feature Changes:
  * The Differentiated Services Code Point (DSCP) feature in BIND
    has been deprecated. Configuring DSCP values in named.conf now
    causes a warning to be logged. Note that this feature has only
    been partly operational since the new Network Manager was
    introduced in BIND 9.16.0.
  * The catalog zone implementation has been optimized to work with
    hundreds of thousands of member zones.
  Bug Fixes:
  * In certain query resolution scenarios (e.g. when following
    CNAME records), named configured to answer from stale cache
    could return a SERVFAIL response despite a usable, non-stale
    answer being present in the cache. This has been fixed.
  [bsc#1207471, bsc#1207473, bsc#1207475, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1676548800">- Update to release 9.16.38
  Bug Fixes:
  * A constant stream of zone additions and deletions via rndc
    reconfig could cause increased memory consumption due to
    delayed cleaning of view memory. This has been fixed.
  * The speed of the message digest algorithms (MD5, SHA-1, SHA-2),
    and of NSEC3 hashing, has been improved.
  * Building BIND 9 failed when the --enable-dnsrps switch for
    ./configure was used. This has been fixed.
  [jsc#SLE-24600]
- Updated keyring and signature</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1678881600">- Update to release 9.16.39
  Feature Changes:
  * libuv support for receiving multiple UDP messages in a single
    recvmmsg() system call has been tweaked several times between
    libuv versions 1.35.0 and 1.40.0; the current recommended libuv
    version is 1.40.0 or higher. New rules are now in effect for
    running with a different version of libuv than the one used at
    compilation time. These rules may trigger a fatal error at
    startup:
  - Building against or running with libuv versions 1.35.0 and
    1.36.0 is now a fatal error.
  - Running with libuv version higher than 1.34.2 is now a
    fatal error when named is built against libuv version
    1.34.2 or lower.
  - Running with libuv version higher than 1.39.0 is now a
    fatal error when named is built against libuv version
    1.37.0, 1.38.0, 1.38.1, or 1.39.0.
  * This prevents the use of libuv versions that may trigger an
    assertion failure when receiving multiple UDP messages in a
    single system call.
  Bug Fixes:
  * named could crash with an assertion failure when adding a new
    zone into the configuration file for a name which was already
    configured as a member zone for a catalog zone. This has been
    fixed.
  * When named starts up, it sends a query for the DNSSEC key for
    each configured trust anchor to determine whether the key has
    changed. In some unusual cases, the query might depend on a
    zone for which the server is itself authoritative, and would
    have failed if it were sent before the zone was fully loaded.
    This has now been fixed by delaying the key queries until all
    zones have finished loading.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1682424000">- Update to release 9.16.40
  Bug Fixes:
  * Logfiles using timestamp-style suffixes were not always
    correctly removed when the number of files exceeded the limit
    set by versions. This has been fixed for configurations which
    do not explicitly specify a directory path as part of the file
    argument in the channel specification.
  * Performance of DNSSEC validation in zones with many DNSKEY
    records has been improved.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1684324800">- Update to release 9.16.41
  Bug Fixes:
  * When removing delegations from an opt-out range,
    empty-non-terminal NSEC3 records generated by those delegations
    were not cleaned up. This has been fixed.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1687348800">- Update to release 9.16.42
  Security Fixes:
  * The overmem cleaning process has been improved, to prevent the
    cache from significantly exceeding the configured
    max-cache-size limit. (CVE-2023-2828)
  * A query that prioritizes stale data over lookup triggers a
    fetch to refresh the stale data in cache. If the fetch is
    aborted for exceeding the recursion quota, it was possible for
    named to enter an infinite callback loop and crash due to stack
    overflow. This has been fixed. (CVE-2023-2911)
  Bug Fixes:
  * Previously, it was possible for a delegation from cache to be
    returned to the client after the stale-answer-client-timeout
    duration. This has been fixed.
  [bsc#1212544, bsc#1212567, jsc#SLE-24600]</changelog>
  <changelog author="dmueller@suse.com" date="1688644800">- rebuild bind-utils on libuv updates (bsc#1212090)</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1688990400">- Log named-checkconf output [bsc#1213049]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1689076800">- Add dnstap support
  [jsc#PED-4852]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1695124800">- Update to release 9.16.44
  Bug Fixes:
  * Processing already-queued queries received over TCP could cause
    an assertion failure, when the server was reconfigured at the
    same time or the cache was being flushed. This has been fixed.
  Security Fixes:
  * Previously, sending a specially crafted message over the
    control channel could cause the packet-parsing code to run out
    of available stack memory, causing named to terminate
    unexpectedly. This has been fixed. (CVE-2023-3341)
  [bsc#1215472]
- Switch to pkgconfig(libprotobuf-c) since this now contains the
  required protobuf-c binary</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1708084800">- Update to new Major Version 9.18.24.
  This has many enhancements, bug fixes and changes.
  Breaking Changes:
  * Some options have been removed and some have been deprecated
    and will be removed in the future.
    For a complete list, see:
    https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-bind-916-to-918
  Major Changes:
  * Support for securing DNS traffic using Transport Layer Security
    (TLS). TLS is used by both DNS-over-TLS (DoT) and
    DNS-over-HTTPS (DoH).
  * Support for zone transfers over TLS (XFR-over-TLS, XoT) for
    both incoming and outgoing zone transfers.
  * The dig tool is now able to send DoT queries (+tls option).
  * Support for OpenSSL 3.0 APIs was added.
  * dnssec-checkds, dnssec-coverage, dnssec-keymgr, which have been
    removed in favor of the dnssec-policy feature
  * python3-bind is deprecated and the subpackage has been removed
  * A number of utilities have been moved from /usr/sbin to
    /usr/bin:
    named-checkconf named-checkzone named-compilezone
    dnssec-dsfromkey dnssec-importkey dnssec-keyfromlabel
    dnssec-keygen dnssec-revoke dnssec-settime dnssec-signzone
    dnssec-verify dnssec-cds named-journalprint nsec3hash
  * The lib directory was renamed from 'named' to 'bind'
  For a complete list of changes, see:
  * Bind Release Notes
    https://bind9.readthedocs.io/en/v9.18.24/notes.html
  * The CHANGES file in the source RPM
  Security Fixes:
  * Validating DNS messages containing a lot of DNSSEC signatures
    could cause excessive CPU load, leading to a denial-of-service
    condition. This has been fixed. (CVE-2023-50387)
    [bsc#1219823]
  * Preparing an NSEC3 closest encloser proof could cause excessive
    CPU load, leading to a denial-of-service condition. This has
    been fixed. (CVE-2023-50868)
    [bsc#1219826]
  * Parsing DNS messages with many different names could cause
    excessive CPU load. This has been fixed. (CVE-2023-4408)
    [bsc#1219851]
  * Specific queries could cause named to crash with an assertion
    failure when nxdomain-redirect was enabled. This has been
    fixed. (CVE-2023-5517)
    [bsc#1219852]
  * A bad interaction between DNS64 and serve-stale could cause
    named to crash with an assertion failure, when both of these
    features were enabled. This has been fixed. (CVE-2023-5679)
    [bsc#1219853]
  * Query patterns that continuously triggered cache database
    maintenance could cause an excessive amount of memory to be
    allocated, exceeding max-cache-size and potentially leading to
    all available memory on the host running named being exhausted.
    This has been fixed. (CVE-2023-6516)
    [bsc#1219854]
  Packaging notes:
  * libnghttps2 added as BuildRequires for tls support
  * named-bootconf.diff patch is obsolete and has been removed
  [jsc#PED-7932]
- Update KillMode to 'control-group' in named.service to handle
  forked processes better.
  [bsc#1215755]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1721908800">- Update to release 9.18.28
  Bug Fixes:
  * Command-line options for IPv4-only (named -4) and IPv6-only
    (named -6) modes are now respected for zone primaries,
    also-notify, and parental-agents.
  * An RPZ response’s SOA record TTL was set to 1 instead of the
    SOA TTL, if add-soa was used. This has been fixed.
  * When a query related to zone maintenance (NOTIFY, SOA) timed
    out close to a view shutdown (triggered e.g. by rndc reload),
    named could crash with an assertion failure. This has been
    fixed.
  * The statistics channel counters that indicated the number of
    currently connected TCP IPv4/IPv6 clients were not properly
    adjusted in certain failure scenarios. This has been fixed.
  * Some servers that could not be reached due to EHOSTDOWN or
    ENETDOWN conditions were incorrectly prioritized during server
    selection. These are now properly handled as unreachable.
  * On some systems the libuv call may return an error code when
    sending a TCP reset for a connection, which triggers an
    assertion failure in named. This error condition is now dealt
    with in a more graceful manner, by logging the incident and
    shutting down the connection.
  * Changes to listen-on statements were ignored on reconfiguration
    unless the port or interface address was changed, making it
    impossible to change a related listener transport type. That
    issue has been fixed.
  * A bug in the keymgr code unintentionally slowed down some
    DNSSEC key rollovers. This has been fixed.
  * Some ISO 8601 durations were accepted erroneously, leading to
    shorter durations than expected. This has been fixed
  * A regression in cache-cleaning code enabled memory use to grow
    significantly more quickly than before, until the configured
    max-cache-size limit was reached. This has been fixed.
  * Using rndc flush inadvertently caused cache cleaning to become
    less effective. This could ultimately lead to the configured
    max-cache-size limit being exceeded and has now been fixed.
  * The logic for cleaning up expired cached DNS records was
    tweaked to be more aggressive. This change helps with enforcing
    max-cache-ttl and max-ncache-ttl in a timely manner.
  * It was possible to trigger a use-after-free assertion when the
    overmem cache cleaning was initiated. This has been fixed.
  New Features:
  * A new option signatures-jitter has been added to dnssec-policy
    to allow signature expirations to be spread out over a period
    of time.
  * The statistics channel now includes counters that indicate the
    number of currently connected TCP IPv4/IPv6 clients.
  * Added RESOLVER.ARPA to the built in empty zones.
  Feature Changes:
  * DNSSEC signatures that are not valid because the current time
    falls outside the signature inception and expiration dates are
    skipped instead of causing an immediate validation failure.
  Security Fixes:
  * A malicious DNS client that sent many queries over TCP but
    never read the responses could cause a server to respond slowly
    or not at all for other clients. This has been fixed.
    (CVE-2024-0760)
    [bsc#1228255]
  * It is possible to craft excessively large resource records
    sets, which have the effect of slowing down database
    processing. This has been addressed by adding a configurable
    limit to the number of records that can be stored per name and
    type in a cache or zone database. The default is 100, which can
    be tuned with the new max-records-per-type option.
  * It is possible to craft excessively large numbers of resource
    record types for a given owner name, which has the effect of
    slowing down database processing. This has been addressed by
    adding a configurable limit to the number of records that can
    be stored per name and type in a cache or zone database. The
    default is 100, which can be tuned with the new
    max-types-per-name option. (CVE-2024-1737)
    [bsc#1228256]
  * Validating DNS messages signed using the SIG(0) protocol (RFC
    2931) could cause excessive CPU load, leading to a
    denial-of-service condition. Support for SIG(0) message
    validation was removed from this version of named.
    (CVE-2024-1975)
    [bsc#1228257]
  * Due to a logic error, lookups that triggered serving stale data
    and required lookups in local authoritative zone data could
    have resulted in an assertion failure. This has been fixed.
  * Potential data races were found in our DoH implementation,
    related to HTTP/2 session object management and endpoints set
    object management after reconfiguration. These issues have been
    fixed.
  * When looking up the NS records of parent zones as part of
    looking up DS records, it was possible for named to trigger an
    assertion failure if serve-stale was enabled. This has been
    fixed. (CVE-2024-4076)
    [bsc#1228258]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1729080000">- Update to new major version 9.20.3
  For a complete list of all changes see:
  * https://bind9.readthedocs.io/en/v9.20.3/notes.html
  * The CHANGES file in the source RPM
  Some noteworthy changes:
  * Added new BuildRequires liburcu for lock free data structures.
  * A new DNSSEC tool dnssec-ksr has been added to create Key
    Signing Request (KSR) and Signed Key Response (SKR) files.
  * /etc/bind.keys and /var/lib/named/named.root.key have been
    removed as the correct defaults are pre-compiled and there is
    no need to configure bind.keys manually.
  * The functions that were in the libbind9 shared library have
    been moved to the libisc and libisccfg libraries. The now-empty
    libbind9 has been removed and is no longer installed.
  * The irs_resconf module has been moved to the libdns shared
    library. The now-empty libirs library has been removed and is
    no longer installed.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Update to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  * dnssec-ksr now supports KSK rollovers.
  * The tool now allows for KSK generation, as well as planned KSK
    rollovers. When signing a bundle from a Key Signing Request
    (KSR), only the key that is active in that time frame is used
    for signing. Also, the CDS and CDNSKEY records are now added
    and removed at the correct time.
  * Print RFC 7314: EXPIRE option in transfer summary.
  * Emit more helpful log messages for exceeding
    max-records-per-type.
  * The new log message is emitted when adding or updating an RRset
    fails due to exceeding the max-records-per-type limit. The log
    includes the owner name and type, corresponding zone name, and
    the limit value. It will be emitted on loading a zone file,
    inbound zone transfer (both AXFR and IXFR), handling a DDNS
    update, or updating a cache DB. It’s especially helpful in the
    case of zone transfer, since the secondary side doesn’t have
    direct access to the offending zone data.
  * It could also be used for max-types-per-name, but this change
    doesn’t implement it yet as it’s much less likely to happen in
    practice.
  * Harden key management when key files have become unavailable.
  * Prior to doing key management, BIND 9 will check if the key
    files on disk match the expected keys. If key files for
    previously observed keys have become unavailable, this will
    prevent the internal key manager from running.
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  * Implement the min-transfer-rate-in configuration option.
  * Add HTTPS record query to host command line tool.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
  * Adds support for EDE code 1 and 2.
  * Add an rndc command to toggle jemalloc profiling.
  * Add support for multiple extended DNS errors.
  * Print the expiration time of stale records.
  * Add Extended DNS Error Code 22 - No Reachable Authority.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
  * Update built-in bind.keys file with the new 2025 IANA root key.
  * Add an initial-ds entry to bind.keys for the new root key, ID
    38696, which is scheduled for publication in January 2025.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.
  * Fix dual-stack-servers configuration option.
  * Fix a data race causing a permanent active client increase.
  * Fix deferred validation of unsigned DS and DNSKEY records.
  * Fix RPZ race condition during a reconfiguration.
  * “CNAME and other data check” not applied to all types.
  * Relax private DNSKEY and RRSIG constraints.
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
  * Fix a bug in the statistics channel when querying zone transfer
    information.
  * Fix assertion failure when dumping recursing clients.
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches().
  * Recently expired records could be returned with a timestamp in
    future.
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
  * Apply the memory limit only to ADB database items.
  * Avoid unnecessary locking in the zone/cache database.
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
  * Fix nsupdate hang when processing a large update.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
  * Resolve the spurious drops in performance due to glue cache.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
  * Fix improper handling of unknown directives in resolv.conf.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
  * Use TLS for notifies if configured to do so.
  * Notifies configured to use TLS will now be sent over TLS,
    instead of plain text UDP or TCP. Also, failing to load the TLS
    configuration for notify now results in an error.
  * {&amp;dns} is as valid as {?dns} in a SVCB’s dohpath.
  * dig failed to parse a valid SVCB record with a dohpath URI
    template containing a {&amp;dns}, like
    dohpath=/some/path?key=value{&amp;dns}”.
  * Fix NSEC3 closest encloser lookup for names with empty
    non-terminals.
  * A previous performance optimization for finding the NSEC3
    closest encloser when generating authoritative responses could
    cause servers to return incorrect NSEC3 records in some cases.
    This has been fixed.
  * recursive-clients statement with value 0 triggered an assertion
    failure.
  * BIND 9.20.0 broke recursive-clients 0;. This has now been
    fixed.
  * Parsing of hostnames in rndc.conf was broken.
  * When DSCP support was removed, parsing of hostnames in
    rndc.conf was accidentally broken, resulting in an assertion
    failure. This has been fixed.
  * dig options of the form [+-]option=&lt;value&gt; failed to display
    the value on the printed command line. This has been fixed.
  * Provide more visibility into TLS configuration errors by
    logging SSL_CTX_use_certificate_chain_file() and
    SSL_CTX_use_PrivateKey_file() errors individually.
  * Fix a race condition when canceling ADB find which could cause
    an assertion failure.
  * SERVFAIL cache memory cleaning is now more aggressive; it no
    longer consumes a lot of memory if the server encounters many
    SERVFAILs at once.
  * Fix trying the next primary XoT server when the previous one
    was marked as unreachable.
  * In some cases named failed to try the next primary server in
    the primaries list when the previous one was marked as
    unreachable. This has been fixed.
- CHANGES file has been removed, the changes are now only listed in
  the ARM docs available in the bind-doc package.</changelog>
</package>
<package pkgid="5019316c5af793edb1b6ff9aeb295d29b923a11da0b5f730d36df987e82709f8" name="bind-utils" arch="x86_64">
  <version epoch="0" ver="9.20.11" rel="150700.3.6.1"/>
  <changelog author="jorik.cronenberg@suse.com" date="1662724800">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Update to release 9.16.33
  Security Fixes:
  * Previously, there was no limit to the number of database lookups
    performed while processing large delegations, which could be
    abused to severely impact the performance of named running as a
    recursive resolver. This has been fixed. (CVE-2022-2795)
  * named running as a resolver with the stale-answer-client-timeout
    option set to 0 could crash with an assertion failure, when
    there was a stale CNAME in the cache for the incoming query.
    This has been fixed. (CVE-2022-3080)
  * A memory leak was fixed that could be externally triggered in the
    DNSSEC verification code for the ECDSA algorithm. (CVE-2022-38177)
  * Memory leaks were fixed that could be externally triggered in the
    DNSSEC verification code for the EdDSA algorithm. (CVE-2022-38178)
  Feature Changes:
  * Response Rate Limiting (RRL) code now treats all QNAMEs that are
    subject to wildcard processing within a given zone as the same
    name, to prevent circumventing the limits enforced by RRL.
  * Zones using dnssec-policy now require dynamic DNS or
    inline-signing to be configured explicitly.
  * A backward-compatible approach was implemented for encoding
    internationalized domain names (IDN) in dig and converting the
    domain to IDNA2008 form; if that fails,
    BIND tries an IDNA2003 conversion.
  Bug Fixes:
  * A serve-stale bug was fixed, where BIND would try to return stale
    data from cache for lookups that received duplicate queries or
    queries that would be dropped. This bug resulted in premature
    SERVFAIL responses, and has now been resolved.
  [bsc#1203614, bsc#1203618, bsc#1203619, bsc#1203620, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1668168000">- Update to release 9.16.34
  New Features:
  * Support for parsing and validating the dohpath service
    parameter in SVCB records was added.
  * named now logs the supported cryptographic algorithms during
    startup and in the output of named -V.
  Bug Fixes:
  * Changing just the TSIG key names for primaries in catalog
    zones’ member zones was not effective. This has been fixed.
  Known Issues:
  * Upgrading from BIND 9.16.32 or any older version may require a
    manual configuration change. The following configurations are
    affected:
  - type primary zones configured with dnssec-policy but without
    either allow-update or update-policy,
  - type secondary zones configured with dnssec-policy.
    In these cases please add inline-signing yes; to the individual
    zone configuration(s). Without applying this change, named will
    fail to start. For more details, see
    https://kb.isc.org/docs/dnssec-policy-requires-dynamic-dns-or-inline-signing
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1669291200">- Update to release 9.16.35
  Bug Fixes:
  * A crash was fixed that happened when a dnssec-policy zone that
    used NSEC3 was reconfigured to enable inline-signing.
  * In certain resolution scenarios, quotas could be erroneously
    reached for servers, including any configured forwarders,
    resulting in SERVFAIL answers being sent to clients.
  * rpz-ip rules in response-policy zones could be ineffective in
    some cases if a query had the CD (Checking Disabled) bit set to
    1.
  * Previously, if Internet connectivity issues were experienced
    during the initial startup of named, a BIND resolver with
    dnssec-validation set to auto could enter into a state where it
    would not recover without stopping named, manually deleting the
    managed-keys.bind and managed-keys.bind.jnl files, and starting
    named again.
  * The statistics counter representing the current number of
    clients awaiting recursive resolution results (RecursClients)
    could overflow in certain resolution scenarios.
  * Previously, BIND failed to start on Solaris-based systems with
    hundreds of CPUs.
  * When a DNS resource record’s TTL value was equal to the
    resolver’s configured prefetch “eligibility” value, the record
    was erroneously not treated as eligible for prefetching.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1671710400">- Update to release 9.16.36
  Feature Changes:
  * The auto-dnssec option has been deprecated and will be removed
    in a future BIND 9.19.x release. Please migrate to
    dnssec-policy.
  Bug Fixes:
  * When a catalog zone was removed from the configuration, in some
    cases a dangling pointer could cause the named process to
    crash.
  * When a zone was deleted from a server, a key management object
    related to that zone was inadvertently kept in memory and only
    released upon shutdown. This could lead to constantly
    increasing memory use on servers with a high rate of changes
    affecting the set of zones being served.
  * In certain cases, named waited for the resolution of
    outstanding recursive queries to finish before shutting down.
  * The zone &lt;name&gt;/&lt;class&gt;: final reference detached log message
    was moved from the INFO log level to the DEBUG(1) log level to
    prevent the named-checkzone tool from superfluously logging
    this message in non-debug mode.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1674561600">- Update to release 9.16.37
  Security Fixes:
  * An UPDATE message flood could cause named to exhaust all
    available memory. This flaw was addressed by adding a new
    update-quota option that controls the maximum number of
    outstanding DNS UPDATE messages that named can hold in a queue
    at any given time (default: 100). (CVE-2022-3094)
  * named could crash with an assertion failure when an RRSIG query
    was received and stale-answer-client-timeout was set to a
    non-zero value. This has been fixed. (CVE-2022-3736)
  * named running as a resolver with the
    stale-answer-client-timeout option set to any value greater
    than 0 could crash with an assertion failure, when the
    recursive-clients soft quota was reached. This has been fixed.
    (CVE-2022-3924)
  New Features:
  * The new update-quota option can be used to control the number
    of simultaneous DNS UPDATE messages that can be processed to
    update an authoritative zone on a primary server, or forwarded
    to the primary server by a secondary server. The default is
    100. A new statistics counter has also been added to record
    events when this quota is exceeded, and the version numbers for
    the XML and JSON statistics schemas have been updated.
  Feature Changes:
  * The Differentiated Services Code Point (DSCP) feature in BIND
    has been deprecated. Configuring DSCP values in named.conf now
    causes a warning to be logged. Note that this feature has only
    been partly operational since the new Network Manager was
    introduced in BIND 9.16.0.
  * The catalog zone implementation has been optimized to work with
    hundreds of thousands of member zones.
  Bug Fixes:
  * In certain query resolution scenarios (e.g. when following
    CNAME records), named configured to answer from stale cache
    could return a SERVFAIL response despite a usable, non-stale
    answer being present in the cache. This has been fixed.
  [bsc#1207471, bsc#1207473, bsc#1207475, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1676548800">- Update to release 9.16.38
  Bug Fixes:
  * A constant stream of zone additions and deletions via rndc
    reconfig could cause increased memory consumption due to
    delayed cleaning of view memory. This has been fixed.
  * The speed of the message digest algorithms (MD5, SHA-1, SHA-2),
    and of NSEC3 hashing, has been improved.
  * Building BIND 9 failed when the --enable-dnsrps switch for
    ./configure was used. This has been fixed.
  [jsc#SLE-24600]
- Updated keyring and signature</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1678881600">- Update to release 9.16.39
  Feature Changes:
  * libuv support for receiving multiple UDP messages in a single
    recvmmsg() system call has been tweaked several times between
    libuv versions 1.35.0 and 1.40.0; the current recommended libuv
    version is 1.40.0 or higher. New rules are now in effect for
    running with a different version of libuv than the one used at
    compilation time. These rules may trigger a fatal error at
    startup:
  - Building against or running with libuv versions 1.35.0 and
    1.36.0 is now a fatal error.
  - Running with libuv version higher than 1.34.2 is now a
    fatal error when named is built against libuv version
    1.34.2 or lower.
  - Running with libuv version higher than 1.39.0 is now a
    fatal error when named is built against libuv version
    1.37.0, 1.38.0, 1.38.1, or 1.39.0.
  * This prevents the use of libuv versions that may trigger an
    assertion failure when receiving multiple UDP messages in a
    single system call.
  Bug Fixes:
  * named could crash with an assertion failure when adding a new
    zone into the configuration file for a name which was already
    configured as a member zone for a catalog zone. This has been
    fixed.
  * When named starts up, it sends a query for the DNSSEC key for
    each configured trust anchor to determine whether the key has
    changed. In some unusual cases, the query might depend on a
    zone for which the server is itself authoritative, and would
    have failed if it were sent before the zone was fully loaded.
    This has now been fixed by delaying the key queries until all
    zones have finished loading.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1682424000">- Update to release 9.16.40
  Bug Fixes:
  * Logfiles using timestamp-style suffixes were not always
    correctly removed when the number of files exceeded the limit
    set by versions. This has been fixed for configurations which
    do not explicitly specify a directory path as part of the file
    argument in the channel specification.
  * Performance of DNSSEC validation in zones with many DNSKEY
    records has been improved.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1684324800">- Update to release 9.16.41
  Bug Fixes:
  * When removing delegations from an opt-out range,
    empty-non-terminal NSEC3 records generated by those delegations
    were not cleaned up. This has been fixed.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1687348800">- Update to release 9.16.42
  Security Fixes:
  * The overmem cleaning process has been improved, to prevent the
    cache from significantly exceeding the configured
    max-cache-size limit. (CVE-2023-2828)
  * A query that prioritizes stale data over lookup triggers a
    fetch to refresh the stale data in cache. If the fetch is
    aborted for exceeding the recursion quota, it was possible for
    named to enter an infinite callback loop and crash due to stack
    overflow. This has been fixed. (CVE-2023-2911)
  Bug Fixes:
  * Previously, it was possible for a delegation from cache to be
    returned to the client after the stale-answer-client-timeout
    duration. This has been fixed.
  [bsc#1212544, bsc#1212567, jsc#SLE-24600]</changelog>
  <changelog author="dmueller@suse.com" date="1688644800">- rebuild bind-utils on libuv updates (bsc#1212090)</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1688990400">- Log named-checkconf output [bsc#1213049]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1689076800">- Add dnstap support
  [jsc#PED-4852]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1695124800">- Update to release 9.16.44
  Bug Fixes:
  * Processing already-queued queries received over TCP could cause
    an assertion failure, when the server was reconfigured at the
    same time or the cache was being flushed. This has been fixed.
  Security Fixes:
  * Previously, sending a specially crafted message over the
    control channel could cause the packet-parsing code to run out
    of available stack memory, causing named to terminate
    unexpectedly. This has been fixed. (CVE-2023-3341)
  [bsc#1215472]
- Switch to pkgconfig(libprotobuf-c) since this now contains the
  required protobuf-c binary</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1708084800">- Update to new Major Version 9.18.24.
  This has many enhancements, bug fixes and changes.
  Breaking Changes:
  * Some options have been removed and some have been deprecated
    and will be removed in the future.
    For a complete list, see:
    https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-bind-916-to-918
  Major Changes:
  * Support for securing DNS traffic using Transport Layer Security
    (TLS). TLS is used by both DNS-over-TLS (DoT) and
    DNS-over-HTTPS (DoH).
  * Support for zone transfers over TLS (XFR-over-TLS, XoT) for
    both incoming and outgoing zone transfers.
  * The dig tool is now able to send DoT queries (+tls option).
  * Support for OpenSSL 3.0 APIs was added.
  * dnssec-checkds, dnssec-coverage, dnssec-keymgr, which have been
    removed in favor of the dnssec-policy feature
  * python3-bind is deprecated and the subpackage has been removed
  * A number of utilities have been moved from /usr/sbin to
    /usr/bin:
    named-checkconf named-checkzone named-compilezone
    dnssec-dsfromkey dnssec-importkey dnssec-keyfromlabel
    dnssec-keygen dnssec-revoke dnssec-settime dnssec-signzone
    dnssec-verify dnssec-cds named-journalprint nsec3hash
  * The lib directory was renamed from 'named' to 'bind'
  For a complete list of changes, see:
  * Bind Release Notes
    https://bind9.readthedocs.io/en/v9.18.24/notes.html
  * The CHANGES file in the source RPM
  Security Fixes:
  * Validating DNS messages containing a lot of DNSSEC signatures
    could cause excessive CPU load, leading to a denial-of-service
    condition. This has been fixed. (CVE-2023-50387)
    [bsc#1219823]
  * Preparing an NSEC3 closest encloser proof could cause excessive
    CPU load, leading to a denial-of-service condition. This has
    been fixed. (CVE-2023-50868)
    [bsc#1219826]
  * Parsing DNS messages with many different names could cause
    excessive CPU load. This has been fixed. (CVE-2023-4408)
    [bsc#1219851]
  * Specific queries could cause named to crash with an assertion
    failure when nxdomain-redirect was enabled. This has been
    fixed. (CVE-2023-5517)
    [bsc#1219852]
  * A bad interaction between DNS64 and serve-stale could cause
    named to crash with an assertion failure, when both of these
    features were enabled. This has been fixed. (CVE-2023-5679)
    [bsc#1219853]
  * Query patterns that continuously triggered cache database
    maintenance could cause an excessive amount of memory to be
    allocated, exceeding max-cache-size and potentially leading to
    all available memory on the host running named being exhausted.
    This has been fixed. (CVE-2023-6516)
    [bsc#1219854]
  Packaging notes:
  * libnghttps2 added as BuildRequires for tls support
  * named-bootconf.diff patch is obsolete and has been removed
  [jsc#PED-7932]
- Update KillMode to 'control-group' in named.service to handle
  forked processes better.
  [bsc#1215755]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1721908800">- Update to release 9.18.28
  Bug Fixes:
  * Command-line options for IPv4-only (named -4) and IPv6-only
    (named -6) modes are now respected for zone primaries,
    also-notify, and parental-agents.
  * An RPZ response’s SOA record TTL was set to 1 instead of the
    SOA TTL, if add-soa was used. This has been fixed.
  * When a query related to zone maintenance (NOTIFY, SOA) timed
    out close to a view shutdown (triggered e.g. by rndc reload),
    named could crash with an assertion failure. This has been
    fixed.
  * The statistics channel counters that indicated the number of
    currently connected TCP IPv4/IPv6 clients were not properly
    adjusted in certain failure scenarios. This has been fixed.
  * Some servers that could not be reached due to EHOSTDOWN or
    ENETDOWN conditions were incorrectly prioritized during server
    selection. These are now properly handled as unreachable.
  * On some systems the libuv call may return an error code when
    sending a TCP reset for a connection, which triggers an
    assertion failure in named. This error condition is now dealt
    with in a more graceful manner, by logging the incident and
    shutting down the connection.
  * Changes to listen-on statements were ignored on reconfiguration
    unless the port or interface address was changed, making it
    impossible to change a related listener transport type. That
    issue has been fixed.
  * A bug in the keymgr code unintentionally slowed down some
    DNSSEC key rollovers. This has been fixed.
  * Some ISO 8601 durations were accepted erroneously, leading to
    shorter durations than expected. This has been fixed
  * A regression in cache-cleaning code enabled memory use to grow
    significantly more quickly than before, until the configured
    max-cache-size limit was reached. This has been fixed.
  * Using rndc flush inadvertently caused cache cleaning to become
    less effective. This could ultimately lead to the configured
    max-cache-size limit being exceeded and has now been fixed.
  * The logic for cleaning up expired cached DNS records was
    tweaked to be more aggressive. This change helps with enforcing
    max-cache-ttl and max-ncache-ttl in a timely manner.
  * It was possible to trigger a use-after-free assertion when the
    overmem cache cleaning was initiated. This has been fixed.
  New Features:
  * A new option signatures-jitter has been added to dnssec-policy
    to allow signature expirations to be spread out over a period
    of time.
  * The statistics channel now includes counters that indicate the
    number of currently connected TCP IPv4/IPv6 clients.
  * Added RESOLVER.ARPA to the built in empty zones.
  Feature Changes:
  * DNSSEC signatures that are not valid because the current time
    falls outside the signature inception and expiration dates are
    skipped instead of causing an immediate validation failure.
  Security Fixes:
  * A malicious DNS client that sent many queries over TCP but
    never read the responses could cause a server to respond slowly
    or not at all for other clients. This has been fixed.
    (CVE-2024-0760)
    [bsc#1228255]
  * It is possible to craft excessively large resource records
    sets, which have the effect of slowing down database
    processing. This has been addressed by adding a configurable
    limit to the number of records that can be stored per name and
    type in a cache or zone database. The default is 100, which can
    be tuned with the new max-records-per-type option.
  * It is possible to craft excessively large numbers of resource
    record types for a given owner name, which has the effect of
    slowing down database processing. This has been addressed by
    adding a configurable limit to the number of records that can
    be stored per name and type in a cache or zone database. The
    default is 100, which can be tuned with the new
    max-types-per-name option. (CVE-2024-1737)
    [bsc#1228256]
  * Validating DNS messages signed using the SIG(0) protocol (RFC
    2931) could cause excessive CPU load, leading to a
    denial-of-service condition. Support for SIG(0) message
    validation was removed from this version of named.
    (CVE-2024-1975)
    [bsc#1228257]
  * Due to a logic error, lookups that triggered serving stale data
    and required lookups in local authoritative zone data could
    have resulted in an assertion failure. This has been fixed.
  * Potential data races were found in our DoH implementation,
    related to HTTP/2 session object management and endpoints set
    object management after reconfiguration. These issues have been
    fixed.
  * When looking up the NS records of parent zones as part of
    looking up DS records, it was possible for named to trigger an
    assertion failure if serve-stale was enabled. This has been
    fixed. (CVE-2024-4076)
    [bsc#1228258]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1729080000">- Update to new major version 9.20.3
  For a complete list of all changes see:
  * https://bind9.readthedocs.io/en/v9.20.3/notes.html
  * The CHANGES file in the source RPM
  Some noteworthy changes:
  * Added new BuildRequires liburcu for lock free data structures.
  * A new DNSSEC tool dnssec-ksr has been added to create Key
    Signing Request (KSR) and Signed Key Response (SKR) files.
  * /etc/bind.keys and /var/lib/named/named.root.key have been
    removed as the correct defaults are pre-compiled and there is
    no need to configure bind.keys manually.
  * The functions that were in the libbind9 shared library have
    been moved to the libisc and libisccfg libraries. The now-empty
    libbind9 has been removed and is no longer installed.
  * The irs_resconf module has been moved to the libdns shared
    library. The now-empty libirs library has been removed and is
    no longer installed.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Update to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  * dnssec-ksr now supports KSK rollovers.
  * The tool now allows for KSK generation, as well as planned KSK
    rollovers. When signing a bundle from a Key Signing Request
    (KSR), only the key that is active in that time frame is used
    for signing. Also, the CDS and CDNSKEY records are now added
    and removed at the correct time.
  * Print RFC 7314: EXPIRE option in transfer summary.
  * Emit more helpful log messages for exceeding
    max-records-per-type.
  * The new log message is emitted when adding or updating an RRset
    fails due to exceeding the max-records-per-type limit. The log
    includes the owner name and type, corresponding zone name, and
    the limit value. It will be emitted on loading a zone file,
    inbound zone transfer (both AXFR and IXFR), handling a DDNS
    update, or updating a cache DB. It’s especially helpful in the
    case of zone transfer, since the secondary side doesn’t have
    direct access to the offending zone data.
  * It could also be used for max-types-per-name, but this change
    doesn’t implement it yet as it’s much less likely to happen in
    practice.
  * Harden key management when key files have become unavailable.
  * Prior to doing key management, BIND 9 will check if the key
    files on disk match the expected keys. If key files for
    previously observed keys have become unavailable, this will
    prevent the internal key manager from running.
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  * Implement the min-transfer-rate-in configuration option.
  * Add HTTPS record query to host command line tool.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
  * Adds support for EDE code 1 and 2.
  * Add an rndc command to toggle jemalloc profiling.
  * Add support for multiple extended DNS errors.
  * Print the expiration time of stale records.
  * Add Extended DNS Error Code 22 - No Reachable Authority.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
  * Update built-in bind.keys file with the new 2025 IANA root key.
  * Add an initial-ds entry to bind.keys for the new root key, ID
    38696, which is scheduled for publication in January 2025.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.
  * Fix dual-stack-servers configuration option.
  * Fix a data race causing a permanent active client increase.
  * Fix deferred validation of unsigned DS and DNSKEY records.
  * Fix RPZ race condition during a reconfiguration.
  * “CNAME and other data check” not applied to all types.
  * Relax private DNSKEY and RRSIG constraints.
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
  * Fix a bug in the statistics channel when querying zone transfer
    information.
  * Fix assertion failure when dumping recursing clients.
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches().
  * Recently expired records could be returned with a timestamp in
    future.
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
  * Apply the memory limit only to ADB database items.
  * Avoid unnecessary locking in the zone/cache database.
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
  * Fix nsupdate hang when processing a large update.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
  * Resolve the spurious drops in performance due to glue cache.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
  * Fix improper handling of unknown directives in resolv.conf.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
  * Use TLS for notifies if configured to do so.
  * Notifies configured to use TLS will now be sent over TLS,
    instead of plain text UDP or TCP. Also, failing to load the TLS
    configuration for notify now results in an error.
  * {&amp;dns} is as valid as {?dns} in a SVCB’s dohpath.
  * dig failed to parse a valid SVCB record with a dohpath URI
    template containing a {&amp;dns}, like
    dohpath=/some/path?key=value{&amp;dns}”.
  * Fix NSEC3 closest encloser lookup for names with empty
    non-terminals.
  * A previous performance optimization for finding the NSEC3
    closest encloser when generating authoritative responses could
    cause servers to return incorrect NSEC3 records in some cases.
    This has been fixed.
  * recursive-clients statement with value 0 triggered an assertion
    failure.
  * BIND 9.20.0 broke recursive-clients 0;. This has now been
    fixed.
  * Parsing of hostnames in rndc.conf was broken.
  * When DSCP support was removed, parsing of hostnames in
    rndc.conf was accidentally broken, resulting in an assertion
    failure. This has been fixed.
  * dig options of the form [+-]option=&lt;value&gt; failed to display
    the value on the printed command line. This has been fixed.
  * Provide more visibility into TLS configuration errors by
    logging SSL_CTX_use_certificate_chain_file() and
    SSL_CTX_use_PrivateKey_file() errors individually.
  * Fix a race condition when canceling ADB find which could cause
    an assertion failure.
  * SERVFAIL cache memory cleaning is now more aggressive; it no
    longer consumes a lot of memory if the server encounters many
    SERVFAILs at once.
  * Fix trying the next primary XoT server when the previous one
    was marked as unreachable.
  * In some cases named failed to try the next primary server in
    the primaries list when the previous one was marked as
    unreachable. This has been fixed.
- CHANGES file has been removed, the changes are now only listed in
  the ARM docs available in the bind-doc package.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
</package>
<package pkgid="eae8f2c0fb9b11a3dc728f1bcaa4b350bc6c88ee09429e1f8b14504f9f0c2be2" name="bind-utils" arch="x86_64">
  <version epoch="0" ver="9.20.11" rel="150700.3.9.1"/>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Update to release 9.16.33
  Security Fixes:
  * Previously, there was no limit to the number of database lookups
    performed while processing large delegations, which could be
    abused to severely impact the performance of named running as a
    recursive resolver. This has been fixed. (CVE-2022-2795)
  * named running as a resolver with the stale-answer-client-timeout
    option set to 0 could crash with an assertion failure, when
    there was a stale CNAME in the cache for the incoming query.
    This has been fixed. (CVE-2022-3080)
  * A memory leak was fixed that could be externally triggered in the
    DNSSEC verification code for the ECDSA algorithm. (CVE-2022-38177)
  * Memory leaks were fixed that could be externally triggered in the
    DNSSEC verification code for the EdDSA algorithm. (CVE-2022-38178)
  Feature Changes:
  * Response Rate Limiting (RRL) code now treats all QNAMEs that are
    subject to wildcard processing within a given zone as the same
    name, to prevent circumventing the limits enforced by RRL.
  * Zones using dnssec-policy now require dynamic DNS or
    inline-signing to be configured explicitly.
  * A backward-compatible approach was implemented for encoding
    internationalized domain names (IDN) in dig and converting the
    domain to IDNA2008 form; if that fails,
    BIND tries an IDNA2003 conversion.
  Bug Fixes:
  * A serve-stale bug was fixed, where BIND would try to return stale
    data from cache for lookups that received duplicate queries or
    queries that would be dropped. This bug resulted in premature
    SERVFAIL responses, and has now been resolved.
  [bsc#1203614, bsc#1203618, bsc#1203619, bsc#1203620, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1668168000">- Update to release 9.16.34
  New Features:
  * Support for parsing and validating the dohpath service
    parameter in SVCB records was added.
  * named now logs the supported cryptographic algorithms during
    startup and in the output of named -V.
  Bug Fixes:
  * Changing just the TSIG key names for primaries in catalog
    zones’ member zones was not effective. This has been fixed.
  Known Issues:
  * Upgrading from BIND 9.16.32 or any older version may require a
    manual configuration change. The following configurations are
    affected:
  - type primary zones configured with dnssec-policy but without
    either allow-update or update-policy,
  - type secondary zones configured with dnssec-policy.
    In these cases please add inline-signing yes; to the individual
    zone configuration(s). Without applying this change, named will
    fail to start. For more details, see
    https://kb.isc.org/docs/dnssec-policy-requires-dynamic-dns-or-inline-signing
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1669291200">- Update to release 9.16.35
  Bug Fixes:
  * A crash was fixed that happened when a dnssec-policy zone that
    used NSEC3 was reconfigured to enable inline-signing.
  * In certain resolution scenarios, quotas could be erroneously
    reached for servers, including any configured forwarders,
    resulting in SERVFAIL answers being sent to clients.
  * rpz-ip rules in response-policy zones could be ineffective in
    some cases if a query had the CD (Checking Disabled) bit set to
    1.
  * Previously, if Internet connectivity issues were experienced
    during the initial startup of named, a BIND resolver with
    dnssec-validation set to auto could enter into a state where it
    would not recover without stopping named, manually deleting the
    managed-keys.bind and managed-keys.bind.jnl files, and starting
    named again.
  * The statistics counter representing the current number of
    clients awaiting recursive resolution results (RecursClients)
    could overflow in certain resolution scenarios.
  * Previously, BIND failed to start on Solaris-based systems with
    hundreds of CPUs.
  * When a DNS resource record’s TTL value was equal to the
    resolver’s configured prefetch “eligibility” value, the record
    was erroneously not treated as eligible for prefetching.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1671710400">- Update to release 9.16.36
  Feature Changes:
  * The auto-dnssec option has been deprecated and will be removed
    in a future BIND 9.19.x release. Please migrate to
    dnssec-policy.
  Bug Fixes:
  * When a catalog zone was removed from the configuration, in some
    cases a dangling pointer could cause the named process to
    crash.
  * When a zone was deleted from a server, a key management object
    related to that zone was inadvertently kept in memory and only
    released upon shutdown. This could lead to constantly
    increasing memory use on servers with a high rate of changes
    affecting the set of zones being served.
  * In certain cases, named waited for the resolution of
    outstanding recursive queries to finish before shutting down.
  * The zone &lt;name&gt;/&lt;class&gt;: final reference detached log message
    was moved from the INFO log level to the DEBUG(1) log level to
    prevent the named-checkzone tool from superfluously logging
    this message in non-debug mode.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1674561600">- Update to release 9.16.37
  Security Fixes:
  * An UPDATE message flood could cause named to exhaust all
    available memory. This flaw was addressed by adding a new
    update-quota option that controls the maximum number of
    outstanding DNS UPDATE messages that named can hold in a queue
    at any given time (default: 100). (CVE-2022-3094)
  * named could crash with an assertion failure when an RRSIG query
    was received and stale-answer-client-timeout was set to a
    non-zero value. This has been fixed. (CVE-2022-3736)
  * named running as a resolver with the
    stale-answer-client-timeout option set to any value greater
    than 0 could crash with an assertion failure, when the
    recursive-clients soft quota was reached. This has been fixed.
    (CVE-2022-3924)
  New Features:
  * The new update-quota option can be used to control the number
    of simultaneous DNS UPDATE messages that can be processed to
    update an authoritative zone on a primary server, or forwarded
    to the primary server by a secondary server. The default is
    100. A new statistics counter has also been added to record
    events when this quota is exceeded, and the version numbers for
    the XML and JSON statistics schemas have been updated.
  Feature Changes:
  * The Differentiated Services Code Point (DSCP) feature in BIND
    has been deprecated. Configuring DSCP values in named.conf now
    causes a warning to be logged. Note that this feature has only
    been partly operational since the new Network Manager was
    introduced in BIND 9.16.0.
  * The catalog zone implementation has been optimized to work with
    hundreds of thousands of member zones.
  Bug Fixes:
  * In certain query resolution scenarios (e.g. when following
    CNAME records), named configured to answer from stale cache
    could return a SERVFAIL response despite a usable, non-stale
    answer being present in the cache. This has been fixed.
  [bsc#1207471, bsc#1207473, bsc#1207475, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1676548800">- Update to release 9.16.38
  Bug Fixes:
  * A constant stream of zone additions and deletions via rndc
    reconfig could cause increased memory consumption due to
    delayed cleaning of view memory. This has been fixed.
  * The speed of the message digest algorithms (MD5, SHA-1, SHA-2),
    and of NSEC3 hashing, has been improved.
  * Building BIND 9 failed when the --enable-dnsrps switch for
    ./configure was used. This has been fixed.
  [jsc#SLE-24600]
- Updated keyring and signature</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1678881600">- Update to release 9.16.39
  Feature Changes:
  * libuv support for receiving multiple UDP messages in a single
    recvmmsg() system call has been tweaked several times between
    libuv versions 1.35.0 and 1.40.0; the current recommended libuv
    version is 1.40.0 or higher. New rules are now in effect for
    running with a different version of libuv than the one used at
    compilation time. These rules may trigger a fatal error at
    startup:
  - Building against or running with libuv versions 1.35.0 and
    1.36.0 is now a fatal error.
  - Running with libuv version higher than 1.34.2 is now a
    fatal error when named is built against libuv version
    1.34.2 or lower.
  - Running with libuv version higher than 1.39.0 is now a
    fatal error when named is built against libuv version
    1.37.0, 1.38.0, 1.38.1, or 1.39.0.
  * This prevents the use of libuv versions that may trigger an
    assertion failure when receiving multiple UDP messages in a
    single system call.
  Bug Fixes:
  * named could crash with an assertion failure when adding a new
    zone into the configuration file for a name which was already
    configured as a member zone for a catalog zone. This has been
    fixed.
  * When named starts up, it sends a query for the DNSSEC key for
    each configured trust anchor to determine whether the key has
    changed. In some unusual cases, the query might depend on a
    zone for which the server is itself authoritative, and would
    have failed if it were sent before the zone was fully loaded.
    This has now been fixed by delaying the key queries until all
    zones have finished loading.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1682424000">- Update to release 9.16.40
  Bug Fixes:
  * Logfiles using timestamp-style suffixes were not always
    correctly removed when the number of files exceeded the limit
    set by versions. This has been fixed for configurations which
    do not explicitly specify a directory path as part of the file
    argument in the channel specification.
  * Performance of DNSSEC validation in zones with many DNSKEY
    records has been improved.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1684324800">- Update to release 9.16.41
  Bug Fixes:
  * When removing delegations from an opt-out range,
    empty-non-terminal NSEC3 records generated by those delegations
    were not cleaned up. This has been fixed.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1687348800">- Update to release 9.16.42
  Security Fixes:
  * The overmem cleaning process has been improved, to prevent the
    cache from significantly exceeding the configured
    max-cache-size limit. (CVE-2023-2828)
  * A query that prioritizes stale data over lookup triggers a
    fetch to refresh the stale data in cache. If the fetch is
    aborted for exceeding the recursion quota, it was possible for
    named to enter an infinite callback loop and crash due to stack
    overflow. This has been fixed. (CVE-2023-2911)
  Bug Fixes:
  * Previously, it was possible for a delegation from cache to be
    returned to the client after the stale-answer-client-timeout
    duration. This has been fixed.
  [bsc#1212544, bsc#1212567, jsc#SLE-24600]</changelog>
  <changelog author="dmueller@suse.com" date="1688644800">- rebuild bind-utils on libuv updates (bsc#1212090)</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1688990400">- Log named-checkconf output [bsc#1213049]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1689076800">- Add dnstap support
  [jsc#PED-4852]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1695124800">- Update to release 9.16.44
  Bug Fixes:
  * Processing already-queued queries received over TCP could cause
    an assertion failure, when the server was reconfigured at the
    same time or the cache was being flushed. This has been fixed.
  Security Fixes:
  * Previously, sending a specially crafted message over the
    control channel could cause the packet-parsing code to run out
    of available stack memory, causing named to terminate
    unexpectedly. This has been fixed. (CVE-2023-3341)
  [bsc#1215472]
- Switch to pkgconfig(libprotobuf-c) since this now contains the
  required protobuf-c binary</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1708084800">- Update to new Major Version 9.18.24.
  This has many enhancements, bug fixes and changes.
  Breaking Changes:
  * Some options have been removed and some have been deprecated
    and will be removed in the future.
    For a complete list, see:
    https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-bind-916-to-918
  Major Changes:
  * Support for securing DNS traffic using Transport Layer Security
    (TLS). TLS is used by both DNS-over-TLS (DoT) and
    DNS-over-HTTPS (DoH).
  * Support for zone transfers over TLS (XFR-over-TLS, XoT) for
    both incoming and outgoing zone transfers.
  * The dig tool is now able to send DoT queries (+tls option).
  * Support for OpenSSL 3.0 APIs was added.
  * dnssec-checkds, dnssec-coverage, dnssec-keymgr, which have been
    removed in favor of the dnssec-policy feature
  * python3-bind is deprecated and the subpackage has been removed
  * A number of utilities have been moved from /usr/sbin to
    /usr/bin:
    named-checkconf named-checkzone named-compilezone
    dnssec-dsfromkey dnssec-importkey dnssec-keyfromlabel
    dnssec-keygen dnssec-revoke dnssec-settime dnssec-signzone
    dnssec-verify dnssec-cds named-journalprint nsec3hash
  * The lib directory was renamed from 'named' to 'bind'
  For a complete list of changes, see:
  * Bind Release Notes
    https://bind9.readthedocs.io/en/v9.18.24/notes.html
  * The CHANGES file in the source RPM
  Security Fixes:
  * Validating DNS messages containing a lot of DNSSEC signatures
    could cause excessive CPU load, leading to a denial-of-service
    condition. This has been fixed. (CVE-2023-50387)
    [bsc#1219823]
  * Preparing an NSEC3 closest encloser proof could cause excessive
    CPU load, leading to a denial-of-service condition. This has
    been fixed. (CVE-2023-50868)
    [bsc#1219826]
  * Parsing DNS messages with many different names could cause
    excessive CPU load. This has been fixed. (CVE-2023-4408)
    [bsc#1219851]
  * Specific queries could cause named to crash with an assertion
    failure when nxdomain-redirect was enabled. This has been
    fixed. (CVE-2023-5517)
    [bsc#1219852]
  * A bad interaction between DNS64 and serve-stale could cause
    named to crash with an assertion failure, when both of these
    features were enabled. This has been fixed. (CVE-2023-5679)
    [bsc#1219853]
  * Query patterns that continuously triggered cache database
    maintenance could cause an excessive amount of memory to be
    allocated, exceeding max-cache-size and potentially leading to
    all available memory on the host running named being exhausted.
    This has been fixed. (CVE-2023-6516)
    [bsc#1219854]
  Packaging notes:
  * libnghttps2 added as BuildRequires for tls support
  * named-bootconf.diff patch is obsolete and has been removed
  [jsc#PED-7932]
- Update KillMode to 'control-group' in named.service to handle
  forked processes better.
  [bsc#1215755]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1721908800">- Update to release 9.18.28
  Bug Fixes:
  * Command-line options for IPv4-only (named -4) and IPv6-only
    (named -6) modes are now respected for zone primaries,
    also-notify, and parental-agents.
  * An RPZ response’s SOA record TTL was set to 1 instead of the
    SOA TTL, if add-soa was used. This has been fixed.
  * When a query related to zone maintenance (NOTIFY, SOA) timed
    out close to a view shutdown (triggered e.g. by rndc reload),
    named could crash with an assertion failure. This has been
    fixed.
  * The statistics channel counters that indicated the number of
    currently connected TCP IPv4/IPv6 clients were not properly
    adjusted in certain failure scenarios. This has been fixed.
  * Some servers that could not be reached due to EHOSTDOWN or
    ENETDOWN conditions were incorrectly prioritized during server
    selection. These are now properly handled as unreachable.
  * On some systems the libuv call may return an error code when
    sending a TCP reset for a connection, which triggers an
    assertion failure in named. This error condition is now dealt
    with in a more graceful manner, by logging the incident and
    shutting down the connection.
  * Changes to listen-on statements were ignored on reconfiguration
    unless the port or interface address was changed, making it
    impossible to change a related listener transport type. That
    issue has been fixed.
  * A bug in the keymgr code unintentionally slowed down some
    DNSSEC key rollovers. This has been fixed.
  * Some ISO 8601 durations were accepted erroneously, leading to
    shorter durations than expected. This has been fixed
  * A regression in cache-cleaning code enabled memory use to grow
    significantly more quickly than before, until the configured
    max-cache-size limit was reached. This has been fixed.
  * Using rndc flush inadvertently caused cache cleaning to become
    less effective. This could ultimately lead to the configured
    max-cache-size limit being exceeded and has now been fixed.
  * The logic for cleaning up expired cached DNS records was
    tweaked to be more aggressive. This change helps with enforcing
    max-cache-ttl and max-ncache-ttl in a timely manner.
  * It was possible to trigger a use-after-free assertion when the
    overmem cache cleaning was initiated. This has been fixed.
  New Features:
  * A new option signatures-jitter has been added to dnssec-policy
    to allow signature expirations to be spread out over a period
    of time.
  * The statistics channel now includes counters that indicate the
    number of currently connected TCP IPv4/IPv6 clients.
  * Added RESOLVER.ARPA to the built in empty zones.
  Feature Changes:
  * DNSSEC signatures that are not valid because the current time
    falls outside the signature inception and expiration dates are
    skipped instead of causing an immediate validation failure.
  Security Fixes:
  * A malicious DNS client that sent many queries over TCP but
    never read the responses could cause a server to respond slowly
    or not at all for other clients. This has been fixed.
    (CVE-2024-0760)
    [bsc#1228255]
  * It is possible to craft excessively large resource records
    sets, which have the effect of slowing down database
    processing. This has been addressed by adding a configurable
    limit to the number of records that can be stored per name and
    type in a cache or zone database. The default is 100, which can
    be tuned with the new max-records-per-type option.
  * It is possible to craft excessively large numbers of resource
    record types for a given owner name, which has the effect of
    slowing down database processing. This has been addressed by
    adding a configurable limit to the number of records that can
    be stored per name and type in a cache or zone database. The
    default is 100, which can be tuned with the new
    max-types-per-name option. (CVE-2024-1737)
    [bsc#1228256]
  * Validating DNS messages signed using the SIG(0) protocol (RFC
    2931) could cause excessive CPU load, leading to a
    denial-of-service condition. Support for SIG(0) message
    validation was removed from this version of named.
    (CVE-2024-1975)
    [bsc#1228257]
  * Due to a logic error, lookups that triggered serving stale data
    and required lookups in local authoritative zone data could
    have resulted in an assertion failure. This has been fixed.
  * Potential data races were found in our DoH implementation,
    related to HTTP/2 session object management and endpoints set
    object management after reconfiguration. These issues have been
    fixed.
  * When looking up the NS records of parent zones as part of
    looking up DS records, it was possible for named to trigger an
    assertion failure if serve-stale was enabled. This has been
    fixed. (CVE-2024-4076)
    [bsc#1228258]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1729080000">- Update to new major version 9.20.3
  For a complete list of all changes see:
  * https://bind9.readthedocs.io/en/v9.20.3/notes.html
  * The CHANGES file in the source RPM
  Some noteworthy changes:
  * Added new BuildRequires liburcu for lock free data structures.
  * A new DNSSEC tool dnssec-ksr has been added to create Key
    Signing Request (KSR) and Signed Key Response (SKR) files.
  * /etc/bind.keys and /var/lib/named/named.root.key have been
    removed as the correct defaults are pre-compiled and there is
    no need to configure bind.keys manually.
  * The functions that were in the libbind9 shared library have
    been moved to the libisc and libisccfg libraries. The now-empty
    libbind9 has been removed and is no longer installed.
  * The irs_resconf module has been moved to the libdns shared
    library. The now-empty libirs library has been removed and is
    no longer installed.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Update to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  * dnssec-ksr now supports KSK rollovers.
  * The tool now allows for KSK generation, as well as planned KSK
    rollovers. When signing a bundle from a Key Signing Request
    (KSR), only the key that is active in that time frame is used
    for signing. Also, the CDS and CDNSKEY records are now added
    and removed at the correct time.
  * Print RFC 7314: EXPIRE option in transfer summary.
  * Emit more helpful log messages for exceeding
    max-records-per-type.
  * The new log message is emitted when adding or updating an RRset
    fails due to exceeding the max-records-per-type limit. The log
    includes the owner name and type, corresponding zone name, and
    the limit value. It will be emitted on loading a zone file,
    inbound zone transfer (both AXFR and IXFR), handling a DDNS
    update, or updating a cache DB. It’s especially helpful in the
    case of zone transfer, since the secondary side doesn’t have
    direct access to the offending zone data.
  * It could also be used for max-types-per-name, but this change
    doesn’t implement it yet as it’s much less likely to happen in
    practice.
  * Harden key management when key files have become unavailable.
  * Prior to doing key management, BIND 9 will check if the key
    files on disk match the expected keys. If key files for
    previously observed keys have become unavailable, this will
    prevent the internal key manager from running.
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  * Implement the min-transfer-rate-in configuration option.
  * Add HTTPS record query to host command line tool.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
  * Adds support for EDE code 1 and 2.
  * Add an rndc command to toggle jemalloc profiling.
  * Add support for multiple extended DNS errors.
  * Print the expiration time of stale records.
  * Add Extended DNS Error Code 22 - No Reachable Authority.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
  * Update built-in bind.keys file with the new 2025 IANA root key.
  * Add an initial-ds entry to bind.keys for the new root key, ID
    38696, which is scheduled for publication in January 2025.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.
  * Fix dual-stack-servers configuration option.
  * Fix a data race causing a permanent active client increase.
  * Fix deferred validation of unsigned DS and DNSKEY records.
  * Fix RPZ race condition during a reconfiguration.
  * “CNAME and other data check” not applied to all types.
  * Relax private DNSKEY and RRSIG constraints.
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
  * Fix a bug in the statistics channel when querying zone transfer
    information.
  * Fix assertion failure when dumping recursing clients.
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches().
  * Recently expired records could be returned with a timestamp in
    future.
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
  * Apply the memory limit only to ADB database items.
  * Avoid unnecessary locking in the zone/cache database.
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
  * Fix nsupdate hang when processing a large update.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
  * Resolve the spurious drops in performance due to glue cache.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
  * Fix improper handling of unknown directives in resolv.conf.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
  * Use TLS for notifies if configured to do so.
  * Notifies configured to use TLS will now be sent over TLS,
    instead of plain text UDP or TCP. Also, failing to load the TLS
    configuration for notify now results in an error.
  * {&amp;dns} is as valid as {?dns} in a SVCB’s dohpath.
  * dig failed to parse a valid SVCB record with a dohpath URI
    template containing a {&amp;dns}, like
    dohpath=/some/path?key=value{&amp;dns}”.
  * Fix NSEC3 closest encloser lookup for names with empty
    non-terminals.
  * A previous performance optimization for finding the NSEC3
    closest encloser when generating authoritative responses could
    cause servers to return incorrect NSEC3 records in some cases.
    This has been fixed.
  * recursive-clients statement with value 0 triggered an assertion
    failure.
  * BIND 9.20.0 broke recursive-clients 0;. This has now been
    fixed.
  * Parsing of hostnames in rndc.conf was broken.
  * When DSCP support was removed, parsing of hostnames in
    rndc.conf was accidentally broken, resulting in an assertion
    failure. This has been fixed.
  * dig options of the form [+-]option=&lt;value&gt; failed to display
    the value on the printed command line. This has been fixed.
  * Provide more visibility into TLS configuration errors by
    logging SSL_CTX_use_certificate_chain_file() and
    SSL_CTX_use_PrivateKey_file() errors individually.
  * Fix a race condition when canceling ADB find which could cause
    an assertion failure.
  * SERVFAIL cache memory cleaning is now more aggressive; it no
    longer consumes a lot of memory if the server encounters many
    SERVFAILs at once.
  * Fix trying the next primary XoT server when the previous one
    was marked as unreachable.
  * In some cases named failed to try the next primary server in
    the primaries list when the previous one was marked as
    unreachable. This has been fixed.
- CHANGES file has been removed, the changes are now only listed in
  the ARM docs available in the bind-doc package.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="tabraham@suse.com" date="1756987200">- ensure file descriptors 0-2 are in use before using libuv (bsc#1230649)
  * bind-ensure-file-descriptors-0-2-are-in-use-before-using-.patch</changelog>
</package>
<package pkgid="bed00653472a9934fa3d3e37065b08648401d1f5390938aaa70d37ea7973cdb8" name="bind-utils" arch="x86_64">
  <version epoch="0" ver="9.20.15" rel="150700.3.12.1"/>
  <changelog author="jorik.cronenberg@suse.com" date="1668168000">- Update to release 9.16.34
  New Features:
  * Support for parsing and validating the dohpath service
    parameter in SVCB records was added.
  * named now logs the supported cryptographic algorithms during
    startup and in the output of named -V.
  Bug Fixes:
  * Changing just the TSIG key names for primaries in catalog
    zones’ member zones was not effective. This has been fixed.
  Known Issues:
  * Upgrading from BIND 9.16.32 or any older version may require a
    manual configuration change. The following configurations are
    affected:
  - type primary zones configured with dnssec-policy but without
    either allow-update or update-policy,
  - type secondary zones configured with dnssec-policy.
    In these cases please add inline-signing yes; to the individual
    zone configuration(s). Without applying this change, named will
    fail to start. For more details, see
    https://kb.isc.org/docs/dnssec-policy-requires-dynamic-dns-or-inline-signing
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1669291200">- Update to release 9.16.35
  Bug Fixes:
  * A crash was fixed that happened when a dnssec-policy zone that
    used NSEC3 was reconfigured to enable inline-signing.
  * In certain resolution scenarios, quotas could be erroneously
    reached for servers, including any configured forwarders,
    resulting in SERVFAIL answers being sent to clients.
  * rpz-ip rules in response-policy zones could be ineffective in
    some cases if a query had the CD (Checking Disabled) bit set to
    1.
  * Previously, if Internet connectivity issues were experienced
    during the initial startup of named, a BIND resolver with
    dnssec-validation set to auto could enter into a state where it
    would not recover without stopping named, manually deleting the
    managed-keys.bind and managed-keys.bind.jnl files, and starting
    named again.
  * The statistics counter representing the current number of
    clients awaiting recursive resolution results (RecursClients)
    could overflow in certain resolution scenarios.
  * Previously, BIND failed to start on Solaris-based systems with
    hundreds of CPUs.
  * When a DNS resource record’s TTL value was equal to the
    resolver’s configured prefetch “eligibility” value, the record
    was erroneously not treated as eligible for prefetching.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1671710400">- Update to release 9.16.36
  Feature Changes:
  * The auto-dnssec option has been deprecated and will be removed
    in a future BIND 9.19.x release. Please migrate to
    dnssec-policy.
  Bug Fixes:
  * When a catalog zone was removed from the configuration, in some
    cases a dangling pointer could cause the named process to
    crash.
  * When a zone was deleted from a server, a key management object
    related to that zone was inadvertently kept in memory and only
    released upon shutdown. This could lead to constantly
    increasing memory use on servers with a high rate of changes
    affecting the set of zones being served.
  * In certain cases, named waited for the resolution of
    outstanding recursive queries to finish before shutting down.
  * The zone &lt;name&gt;/&lt;class&gt;: final reference detached log message
    was moved from the INFO log level to the DEBUG(1) log level to
    prevent the named-checkzone tool from superfluously logging
    this message in non-debug mode.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1674561600">- Update to release 9.16.37
  Security Fixes:
  * An UPDATE message flood could cause named to exhaust all
    available memory. This flaw was addressed by adding a new
    update-quota option that controls the maximum number of
    outstanding DNS UPDATE messages that named can hold in a queue
    at any given time (default: 100). (CVE-2022-3094)
  * named could crash with an assertion failure when an RRSIG query
    was received and stale-answer-client-timeout was set to a
    non-zero value. This has been fixed. (CVE-2022-3736)
  * named running as a resolver with the
    stale-answer-client-timeout option set to any value greater
    than 0 could crash with an assertion failure, when the
    recursive-clients soft quota was reached. This has been fixed.
    (CVE-2022-3924)
  New Features:
  * The new update-quota option can be used to control the number
    of simultaneous DNS UPDATE messages that can be processed to
    update an authoritative zone on a primary server, or forwarded
    to the primary server by a secondary server. The default is
    100. A new statistics counter has also been added to record
    events when this quota is exceeded, and the version numbers for
    the XML and JSON statistics schemas have been updated.
  Feature Changes:
  * The Differentiated Services Code Point (DSCP) feature in BIND
    has been deprecated. Configuring DSCP values in named.conf now
    causes a warning to be logged. Note that this feature has only
    been partly operational since the new Network Manager was
    introduced in BIND 9.16.0.
  * The catalog zone implementation has been optimized to work with
    hundreds of thousands of member zones.
  Bug Fixes:
  * In certain query resolution scenarios (e.g. when following
    CNAME records), named configured to answer from stale cache
    could return a SERVFAIL response despite a usable, non-stale
    answer being present in the cache. This has been fixed.
  [bsc#1207471, bsc#1207473, bsc#1207475, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1676548800">- Update to release 9.16.38
  Bug Fixes:
  * A constant stream of zone additions and deletions via rndc
    reconfig could cause increased memory consumption due to
    delayed cleaning of view memory. This has been fixed.
  * The speed of the message digest algorithms (MD5, SHA-1, SHA-2),
    and of NSEC3 hashing, has been improved.
  * Building BIND 9 failed when the --enable-dnsrps switch for
    ./configure was used. This has been fixed.
  [jsc#SLE-24600]
- Updated keyring and signature</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1678881600">- Update to release 9.16.39
  Feature Changes:
  * libuv support for receiving multiple UDP messages in a single
    recvmmsg() system call has been tweaked several times between
    libuv versions 1.35.0 and 1.40.0; the current recommended libuv
    version is 1.40.0 or higher. New rules are now in effect for
    running with a different version of libuv than the one used at
    compilation time. These rules may trigger a fatal error at
    startup:
  - Building against or running with libuv versions 1.35.0 and
    1.36.0 is now a fatal error.
  - Running with libuv version higher than 1.34.2 is now a
    fatal error when named is built against libuv version
    1.34.2 or lower.
  - Running with libuv version higher than 1.39.0 is now a
    fatal error when named is built against libuv version
    1.37.0, 1.38.0, 1.38.1, or 1.39.0.
  * This prevents the use of libuv versions that may trigger an
    assertion failure when receiving multiple UDP messages in a
    single system call.
  Bug Fixes:
  * named could crash with an assertion failure when adding a new
    zone into the configuration file for a name which was already
    configured as a member zone for a catalog zone. This has been
    fixed.
  * When named starts up, it sends a query for the DNSSEC key for
    each configured trust anchor to determine whether the key has
    changed. In some unusual cases, the query might depend on a
    zone for which the server is itself authoritative, and would
    have failed if it were sent before the zone was fully loaded.
    This has now been fixed by delaying the key queries until all
    zones have finished loading.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1682424000">- Update to release 9.16.40
  Bug Fixes:
  * Logfiles using timestamp-style suffixes were not always
    correctly removed when the number of files exceeded the limit
    set by versions. This has been fixed for configurations which
    do not explicitly specify a directory path as part of the file
    argument in the channel specification.
  * Performance of DNSSEC validation in zones with many DNSKEY
    records has been improved.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1684324800">- Update to release 9.16.41
  Bug Fixes:
  * When removing delegations from an opt-out range,
    empty-non-terminal NSEC3 records generated by those delegations
    were not cleaned up. This has been fixed.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1687348800">- Update to release 9.16.42
  Security Fixes:
  * The overmem cleaning process has been improved, to prevent the
    cache from significantly exceeding the configured
    max-cache-size limit. (CVE-2023-2828)
  * A query that prioritizes stale data over lookup triggers a
    fetch to refresh the stale data in cache. If the fetch is
    aborted for exceeding the recursion quota, it was possible for
    named to enter an infinite callback loop and crash due to stack
    overflow. This has been fixed. (CVE-2023-2911)
  Bug Fixes:
  * Previously, it was possible for a delegation from cache to be
    returned to the client after the stale-answer-client-timeout
    duration. This has been fixed.
  [bsc#1212544, bsc#1212567, jsc#SLE-24600]</changelog>
  <changelog author="dmueller@suse.com" date="1688644800">- rebuild bind-utils on libuv updates (bsc#1212090)</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1688990400">- Log named-checkconf output [bsc#1213049]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1689076800">- Add dnstap support
  [jsc#PED-4852]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1695124800">- Update to release 9.16.44
  Bug Fixes:
  * Processing already-queued queries received over TCP could cause
    an assertion failure, when the server was reconfigured at the
    same time or the cache was being flushed. This has been fixed.
  Security Fixes:
  * Previously, sending a specially crafted message over the
    control channel could cause the packet-parsing code to run out
    of available stack memory, causing named to terminate
    unexpectedly. This has been fixed. (CVE-2023-3341)
  [bsc#1215472]
- Switch to pkgconfig(libprotobuf-c) since this now contains the
  required protobuf-c binary</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1708084800">- Update to new Major Version 9.18.24.
  This has many enhancements, bug fixes and changes.
  Breaking Changes:
  * Some options have been removed and some have been deprecated
    and will be removed in the future.
    For a complete list, see:
    https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-bind-916-to-918
  Major Changes:
  * Support for securing DNS traffic using Transport Layer Security
    (TLS). TLS is used by both DNS-over-TLS (DoT) and
    DNS-over-HTTPS (DoH).
  * Support for zone transfers over TLS (XFR-over-TLS, XoT) for
    both incoming and outgoing zone transfers.
  * The dig tool is now able to send DoT queries (+tls option).
  * Support for OpenSSL 3.0 APIs was added.
  * dnssec-checkds, dnssec-coverage, dnssec-keymgr, which have been
    removed in favor of the dnssec-policy feature
  * python3-bind is deprecated and the subpackage has been removed
  * A number of utilities have been moved from /usr/sbin to
    /usr/bin:
    named-checkconf named-checkzone named-compilezone
    dnssec-dsfromkey dnssec-importkey dnssec-keyfromlabel
    dnssec-keygen dnssec-revoke dnssec-settime dnssec-signzone
    dnssec-verify dnssec-cds named-journalprint nsec3hash
  * The lib directory was renamed from 'named' to 'bind'
  For a complete list of changes, see:
  * Bind Release Notes
    https://bind9.readthedocs.io/en/v9.18.24/notes.html
  * The CHANGES file in the source RPM
  Security Fixes:
  * Validating DNS messages containing a lot of DNSSEC signatures
    could cause excessive CPU load, leading to a denial-of-service
    condition. This has been fixed. (CVE-2023-50387)
    [bsc#1219823]
  * Preparing an NSEC3 closest encloser proof could cause excessive
    CPU load, leading to a denial-of-service condition. This has
    been fixed. (CVE-2023-50868)
    [bsc#1219826]
  * Parsing DNS messages with many different names could cause
    excessive CPU load. This has been fixed. (CVE-2023-4408)
    [bsc#1219851]
  * Specific queries could cause named to crash with an assertion
    failure when nxdomain-redirect was enabled. This has been
    fixed. (CVE-2023-5517)
    [bsc#1219852]
  * A bad interaction between DNS64 and serve-stale could cause
    named to crash with an assertion failure, when both of these
    features were enabled. This has been fixed. (CVE-2023-5679)
    [bsc#1219853]
  * Query patterns that continuously triggered cache database
    maintenance could cause an excessive amount of memory to be
    allocated, exceeding max-cache-size and potentially leading to
    all available memory on the host running named being exhausted.
    This has been fixed. (CVE-2023-6516)
    [bsc#1219854]
  Packaging notes:
  * libnghttps2 added as BuildRequires for tls support
  * named-bootconf.diff patch is obsolete and has been removed
  [jsc#PED-7932]
- Update KillMode to 'control-group' in named.service to handle
  forked processes better.
  [bsc#1215755]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1721908800">- Update to release 9.18.28
  Bug Fixes:
  * Command-line options for IPv4-only (named -4) and IPv6-only
    (named -6) modes are now respected for zone primaries,
    also-notify, and parental-agents.
  * An RPZ response’s SOA record TTL was set to 1 instead of the
    SOA TTL, if add-soa was used. This has been fixed.
  * When a query related to zone maintenance (NOTIFY, SOA) timed
    out close to a view shutdown (triggered e.g. by rndc reload),
    named could crash with an assertion failure. This has been
    fixed.
  * The statistics channel counters that indicated the number of
    currently connected TCP IPv4/IPv6 clients were not properly
    adjusted in certain failure scenarios. This has been fixed.
  * Some servers that could not be reached due to EHOSTDOWN or
    ENETDOWN conditions were incorrectly prioritized during server
    selection. These are now properly handled as unreachable.
  * On some systems the libuv call may return an error code when
    sending a TCP reset for a connection, which triggers an
    assertion failure in named. This error condition is now dealt
    with in a more graceful manner, by logging the incident and
    shutting down the connection.
  * Changes to listen-on statements were ignored on reconfiguration
    unless the port or interface address was changed, making it
    impossible to change a related listener transport type. That
    issue has been fixed.
  * A bug in the keymgr code unintentionally slowed down some
    DNSSEC key rollovers. This has been fixed.
  * Some ISO 8601 durations were accepted erroneously, leading to
    shorter durations than expected. This has been fixed
  * A regression in cache-cleaning code enabled memory use to grow
    significantly more quickly than before, until the configured
    max-cache-size limit was reached. This has been fixed.
  * Using rndc flush inadvertently caused cache cleaning to become
    less effective. This could ultimately lead to the configured
    max-cache-size limit being exceeded and has now been fixed.
  * The logic for cleaning up expired cached DNS records was
    tweaked to be more aggressive. This change helps with enforcing
    max-cache-ttl and max-ncache-ttl in a timely manner.
  * It was possible to trigger a use-after-free assertion when the
    overmem cache cleaning was initiated. This has been fixed.
  New Features:
  * A new option signatures-jitter has been added to dnssec-policy
    to allow signature expirations to be spread out over a period
    of time.
  * The statistics channel now includes counters that indicate the
    number of currently connected TCP IPv4/IPv6 clients.
  * Added RESOLVER.ARPA to the built in empty zones.
  Feature Changes:
  * DNSSEC signatures that are not valid because the current time
    falls outside the signature inception and expiration dates are
    skipped instead of causing an immediate validation failure.
  Security Fixes:
  * A malicious DNS client that sent many queries over TCP but
    never read the responses could cause a server to respond slowly
    or not at all for other clients. This has been fixed.
    (CVE-2024-0760)
    [bsc#1228255]
  * It is possible to craft excessively large resource records
    sets, which have the effect of slowing down database
    processing. This has been addressed by adding a configurable
    limit to the number of records that can be stored per name and
    type in a cache or zone database. The default is 100, which can
    be tuned with the new max-records-per-type option.
  * It is possible to craft excessively large numbers of resource
    record types for a given owner name, which has the effect of
    slowing down database processing. This has been addressed by
    adding a configurable limit to the number of records that can
    be stored per name and type in a cache or zone database. The
    default is 100, which can be tuned with the new
    max-types-per-name option. (CVE-2024-1737)
    [bsc#1228256]
  * Validating DNS messages signed using the SIG(0) protocol (RFC
    2931) could cause excessive CPU load, leading to a
    denial-of-service condition. Support for SIG(0) message
    validation was removed from this version of named.
    (CVE-2024-1975)
    [bsc#1228257]
  * Due to a logic error, lookups that triggered serving stale data
    and required lookups in local authoritative zone data could
    have resulted in an assertion failure. This has been fixed.
  * Potential data races were found in our DoH implementation,
    related to HTTP/2 session object management and endpoints set
    object management after reconfiguration. These issues have been
    fixed.
  * When looking up the NS records of parent zones as part of
    looking up DS records, it was possible for named to trigger an
    assertion failure if serve-stale was enabled. This has been
    fixed. (CVE-2024-4076)
    [bsc#1228258]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1729080000">- Update to new major version 9.20.3
  For a complete list of all changes see:
  * https://bind9.readthedocs.io/en/v9.20.3/notes.html
  * The CHANGES file in the source RPM
  Some noteworthy changes:
  * Added new BuildRequires liburcu for lock free data structures.
  * A new DNSSEC tool dnssec-ksr has been added to create Key
    Signing Request (KSR) and Signed Key Response (SKR) files.
  * /etc/bind.keys and /var/lib/named/named.root.key have been
    removed as the correct defaults are pre-compiled and there is
    no need to configure bind.keys manually.
  * The functions that were in the libbind9 shared library have
    been moved to the libisc and libisccfg libraries. The now-empty
    libbind9 has been removed and is no longer installed.
  * The irs_resconf module has been moved to the libdns shared
    library. The now-empty libirs library has been removed and is
    no longer installed.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Update to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  * dnssec-ksr now supports KSK rollovers.
  * The tool now allows for KSK generation, as well as planned KSK
    rollovers. When signing a bundle from a Key Signing Request
    (KSR), only the key that is active in that time frame is used
    for signing. Also, the CDS and CDNSKEY records are now added
    and removed at the correct time.
  * Print RFC 7314: EXPIRE option in transfer summary.
  * Emit more helpful log messages for exceeding
    max-records-per-type.
  * The new log message is emitted when adding or updating an RRset
    fails due to exceeding the max-records-per-type limit. The log
    includes the owner name and type, corresponding zone name, and
    the limit value. It will be emitted on loading a zone file,
    inbound zone transfer (both AXFR and IXFR), handling a DDNS
    update, or updating a cache DB. It’s especially helpful in the
    case of zone transfer, since the secondary side doesn’t have
    direct access to the offending zone data.
  * It could also be used for max-types-per-name, but this change
    doesn’t implement it yet as it’s much less likely to happen in
    practice.
  * Harden key management when key files have become unavailable.
  * Prior to doing key management, BIND 9 will check if the key
    files on disk match the expected keys. If key files for
    previously observed keys have become unavailable, this will
    prevent the internal key manager from running.
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  * Implement the min-transfer-rate-in configuration option.
  * Add HTTPS record query to host command line tool.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
  * Adds support for EDE code 1 and 2.
  * Add an rndc command to toggle jemalloc profiling.
  * Add support for multiple extended DNS errors.
  * Print the expiration time of stale records.
  * Add Extended DNS Error Code 22 - No Reachable Authority.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
  * Update built-in bind.keys file with the new 2025 IANA root key.
  * Add an initial-ds entry to bind.keys for the new root key, ID
    38696, which is scheduled for publication in January 2025.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.
  * Fix dual-stack-servers configuration option.
  * Fix a data race causing a permanent active client increase.
  * Fix deferred validation of unsigned DS and DNSKEY records.
  * Fix RPZ race condition during a reconfiguration.
  * “CNAME and other data check” not applied to all types.
  * Relax private DNSKEY and RRSIG constraints.
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
  * Fix a bug in the statistics channel when querying zone transfer
    information.
  * Fix assertion failure when dumping recursing clients.
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches().
  * Recently expired records could be returned with a timestamp in
    future.
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
  * Apply the memory limit only to ADB database items.
  * Avoid unnecessary locking in the zone/cache database.
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
  * Fix nsupdate hang when processing a large update.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
  * Resolve the spurious drops in performance due to glue cache.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
  * Fix improper handling of unknown directives in resolv.conf.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
  * Use TLS for notifies if configured to do so.
  * Notifies configured to use TLS will now be sent over TLS,
    instead of plain text UDP or TCP. Also, failing to load the TLS
    configuration for notify now results in an error.
  * {&amp;dns} is as valid as {?dns} in a SVCB’s dohpath.
  * dig failed to parse a valid SVCB record with a dohpath URI
    template containing a {&amp;dns}, like
    dohpath=/some/path?key=value{&amp;dns}”.
  * Fix NSEC3 closest encloser lookup for names with empty
    non-terminals.
  * A previous performance optimization for finding the NSEC3
    closest encloser when generating authoritative responses could
    cause servers to return incorrect NSEC3 records in some cases.
    This has been fixed.
  * recursive-clients statement with value 0 triggered an assertion
    failure.
  * BIND 9.20.0 broke recursive-clients 0;. This has now been
    fixed.
  * Parsing of hostnames in rndc.conf was broken.
  * When DSCP support was removed, parsing of hostnames in
    rndc.conf was accidentally broken, resulting in an assertion
    failure. This has been fixed.
  * dig options of the form [+-]option=&lt;value&gt; failed to display
    the value on the printed command line. This has been fixed.
  * Provide more visibility into TLS configuration errors by
    logging SSL_CTX_use_certificate_chain_file() and
    SSL_CTX_use_PrivateKey_file() errors individually.
  * Fix a race condition when canceling ADB find which could cause
    an assertion failure.
  * SERVFAIL cache memory cleaning is now more aggressive; it no
    longer consumes a lot of memory if the server encounters many
    SERVFAILs at once.
  * Fix trying the next primary XoT server when the previous one
    was marked as unreachable.
  * In some cases named failed to try the next primary server in
    the primaries list when the previous one was marked as
    unreachable. This has been fixed.
- CHANGES file has been removed, the changes are now only listed in
  the ARM docs available in the bind-doc package.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="tabraham@suse.com" date="1756987200">- ensure file descriptors 0-2 are in use before using libuv (bsc#1230649)
  * bind-ensure-file-descriptors-0-2-are-in-use-before-using-.patch</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761134400">- Upgrade to release 9.20.15
  Security Fixes:
  * DNSSEC validation fails if matching but invalid DNSKEY is found.
    [CVE-2025-8677, bsc#1252378]
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380]
  New Features:
  * Add dnssec-policy keys configuration check to named-checkconf.
  * Add a new option `manual-mode` to dnssec-policy.
  * Add a new option `servfail-until-ready` to response-policy
    zones.
  * Support for parsing HHIT and BRID records has been added.
  * Support for parsing DSYNC records has been added.
  Removed Features:
  * Deprecate the `tkey-gssapi-credential` statement.
  * Obsolete the `tkey-domain` statement.
  Feature Changes:
  * Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS
    digest type 1.
  Bug Fixes:
  * Missing DNSSEC information when CD bit is set in query.
  * rndc sign during ZSK rollover will now replace signatures.
  * Use signer name when disabling DNSSEC algorithms.
  * Preserve cache when reload fails and reload the server again.
  * Prevent spurious SERVFAILs for certain 0-TTL resource records.
  * Fix unexpected termination if catalog-zones had undefined
    `default-primaries`.
  * Stale RRsets in a CNAME chain were not always refreshed.
  * Add RPZ extended DNS error for zones with a CNAME override
    policy configured.
  * Fix dig +keepopen option.
  * Log dropped or slipped responses in the query-errors category.
  * Fix synth-from-dnssec not working in some scenarios.
  * Clean enough memory when adding new ADB names/entries under
    memory pressure.
  * Prevent spurious validation failures.
- Obsoletes
  bind-ensure-file-descriptors-0-2-are-in-use-before-using-.patch</changelog>
</package>
<package pkgid="2863177c16f91dfab7d6f2467a94854714b8c8afad8dc73f79f5db0ed14a9bc9" name="bind-utils" arch="x86_64">
  <version epoch="0" ver="9.20.18" rel="150700.3.15.1"/>
  <changelog author="jorik.cronenberg@suse.com" date="1669291200">- Update to release 9.16.35
  Bug Fixes:
  * A crash was fixed that happened when a dnssec-policy zone that
    used NSEC3 was reconfigured to enable inline-signing.
  * In certain resolution scenarios, quotas could be erroneously
    reached for servers, including any configured forwarders,
    resulting in SERVFAIL answers being sent to clients.
  * rpz-ip rules in response-policy zones could be ineffective in
    some cases if a query had the CD (Checking Disabled) bit set to
    1.
  * Previously, if Internet connectivity issues were experienced
    during the initial startup of named, a BIND resolver with
    dnssec-validation set to auto could enter into a state where it
    would not recover without stopping named, manually deleting the
    managed-keys.bind and managed-keys.bind.jnl files, and starting
    named again.
  * The statistics counter representing the current number of
    clients awaiting recursive resolution results (RecursClients)
    could overflow in certain resolution scenarios.
  * Previously, BIND failed to start on Solaris-based systems with
    hundreds of CPUs.
  * When a DNS resource record’s TTL value was equal to the
    resolver’s configured prefetch “eligibility” value, the record
    was erroneously not treated as eligible for prefetching.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1671710400">- Update to release 9.16.36
  Feature Changes:
  * The auto-dnssec option has been deprecated and will be removed
    in a future BIND 9.19.x release. Please migrate to
    dnssec-policy.
  Bug Fixes:
  * When a catalog zone was removed from the configuration, in some
    cases a dangling pointer could cause the named process to
    crash.
  * When a zone was deleted from a server, a key management object
    related to that zone was inadvertently kept in memory and only
    released upon shutdown. This could lead to constantly
    increasing memory use on servers with a high rate of changes
    affecting the set of zones being served.
  * In certain cases, named waited for the resolution of
    outstanding recursive queries to finish before shutting down.
  * The zone &lt;name&gt;/&lt;class&gt;: final reference detached log message
    was moved from the INFO log level to the DEBUG(1) log level to
    prevent the named-checkzone tool from superfluously logging
    this message in non-debug mode.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1674561600">- Update to release 9.16.37
  Security Fixes:
  * An UPDATE message flood could cause named to exhaust all
    available memory. This flaw was addressed by adding a new
    update-quota option that controls the maximum number of
    outstanding DNS UPDATE messages that named can hold in a queue
    at any given time (default: 100). (CVE-2022-3094)
  * named could crash with an assertion failure when an RRSIG query
    was received and stale-answer-client-timeout was set to a
    non-zero value. This has been fixed. (CVE-2022-3736)
  * named running as a resolver with the
    stale-answer-client-timeout option set to any value greater
    than 0 could crash with an assertion failure, when the
    recursive-clients soft quota was reached. This has been fixed.
    (CVE-2022-3924)
  New Features:
  * The new update-quota option can be used to control the number
    of simultaneous DNS UPDATE messages that can be processed to
    update an authoritative zone on a primary server, or forwarded
    to the primary server by a secondary server. The default is
    100. A new statistics counter has also been added to record
    events when this quota is exceeded, and the version numbers for
    the XML and JSON statistics schemas have been updated.
  Feature Changes:
  * The Differentiated Services Code Point (DSCP) feature in BIND
    has been deprecated. Configuring DSCP values in named.conf now
    causes a warning to be logged. Note that this feature has only
    been partly operational since the new Network Manager was
    introduced in BIND 9.16.0.
  * The catalog zone implementation has been optimized to work with
    hundreds of thousands of member zones.
  Bug Fixes:
  * In certain query resolution scenarios (e.g. when following
    CNAME records), named configured to answer from stale cache
    could return a SERVFAIL response despite a usable, non-stale
    answer being present in the cache. This has been fixed.
  [bsc#1207471, bsc#1207473, bsc#1207475, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1676548800">- Update to release 9.16.38
  Bug Fixes:
  * A constant stream of zone additions and deletions via rndc
    reconfig could cause increased memory consumption due to
    delayed cleaning of view memory. This has been fixed.
  * The speed of the message digest algorithms (MD5, SHA-1, SHA-2),
    and of NSEC3 hashing, has been improved.
  * Building BIND 9 failed when the --enable-dnsrps switch for
    ./configure was used. This has been fixed.
  [jsc#SLE-24600]
- Updated keyring and signature</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1678881600">- Update to release 9.16.39
  Feature Changes:
  * libuv support for receiving multiple UDP messages in a single
    recvmmsg() system call has been tweaked several times between
    libuv versions 1.35.0 and 1.40.0; the current recommended libuv
    version is 1.40.0 or higher. New rules are now in effect for
    running with a different version of libuv than the one used at
    compilation time. These rules may trigger a fatal error at
    startup:
  - Building against or running with libuv versions 1.35.0 and
    1.36.0 is now a fatal error.
  - Running with libuv version higher than 1.34.2 is now a
    fatal error when named is built against libuv version
    1.34.2 or lower.
  - Running with libuv version higher than 1.39.0 is now a
    fatal error when named is built against libuv version
    1.37.0, 1.38.0, 1.38.1, or 1.39.0.
  * This prevents the use of libuv versions that may trigger an
    assertion failure when receiving multiple UDP messages in a
    single system call.
  Bug Fixes:
  * named could crash with an assertion failure when adding a new
    zone into the configuration file for a name which was already
    configured as a member zone for a catalog zone. This has been
    fixed.
  * When named starts up, it sends a query for the DNSSEC key for
    each configured trust anchor to determine whether the key has
    changed. In some unusual cases, the query might depend on a
    zone for which the server is itself authoritative, and would
    have failed if it were sent before the zone was fully loaded.
    This has now been fixed by delaying the key queries until all
    zones have finished loading.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1682424000">- Update to release 9.16.40
  Bug Fixes:
  * Logfiles using timestamp-style suffixes were not always
    correctly removed when the number of files exceeded the limit
    set by versions. This has been fixed for configurations which
    do not explicitly specify a directory path as part of the file
    argument in the channel specification.
  * Performance of DNSSEC validation in zones with many DNSKEY
    records has been improved.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1684324800">- Update to release 9.16.41
  Bug Fixes:
  * When removing delegations from an opt-out range,
    empty-non-terminal NSEC3 records generated by those delegations
    were not cleaned up. This has been fixed.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1687348800">- Update to release 9.16.42
  Security Fixes:
  * The overmem cleaning process has been improved, to prevent the
    cache from significantly exceeding the configured
    max-cache-size limit. (CVE-2023-2828)
  * A query that prioritizes stale data over lookup triggers a
    fetch to refresh the stale data in cache. If the fetch is
    aborted for exceeding the recursion quota, it was possible for
    named to enter an infinite callback loop and crash due to stack
    overflow. This has been fixed. (CVE-2023-2911)
  Bug Fixes:
  * Previously, it was possible for a delegation from cache to be
    returned to the client after the stale-answer-client-timeout
    duration. This has been fixed.
  [bsc#1212544, bsc#1212567, jsc#SLE-24600]</changelog>
  <changelog author="dmueller@suse.com" date="1688644800">- rebuild bind-utils on libuv updates (bsc#1212090)</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1688990400">- Log named-checkconf output [bsc#1213049]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1689076800">- Add dnstap support
  [jsc#PED-4852]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1695124800">- Update to release 9.16.44
  Bug Fixes:
  * Processing already-queued queries received over TCP could cause
    an assertion failure, when the server was reconfigured at the
    same time or the cache was being flushed. This has been fixed.
  Security Fixes:
  * Previously, sending a specially crafted message over the
    control channel could cause the packet-parsing code to run out
    of available stack memory, causing named to terminate
    unexpectedly. This has been fixed. (CVE-2023-3341)
  [bsc#1215472]
- Switch to pkgconfig(libprotobuf-c) since this now contains the
  required protobuf-c binary</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1708084800">- Update to new Major Version 9.18.24.
  This has many enhancements, bug fixes and changes.
  Breaking Changes:
  * Some options have been removed and some have been deprecated
    and will be removed in the future.
    For a complete list, see:
    https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-bind-916-to-918
  Major Changes:
  * Support for securing DNS traffic using Transport Layer Security
    (TLS). TLS is used by both DNS-over-TLS (DoT) and
    DNS-over-HTTPS (DoH).
  * Support for zone transfers over TLS (XFR-over-TLS, XoT) for
    both incoming and outgoing zone transfers.
  * The dig tool is now able to send DoT queries (+tls option).
  * Support for OpenSSL 3.0 APIs was added.
  * dnssec-checkds, dnssec-coverage, dnssec-keymgr, which have been
    removed in favor of the dnssec-policy feature
  * python3-bind is deprecated and the subpackage has been removed
  * A number of utilities have been moved from /usr/sbin to
    /usr/bin:
    named-checkconf named-checkzone named-compilezone
    dnssec-dsfromkey dnssec-importkey dnssec-keyfromlabel
    dnssec-keygen dnssec-revoke dnssec-settime dnssec-signzone
    dnssec-verify dnssec-cds named-journalprint nsec3hash
  * The lib directory was renamed from 'named' to 'bind'
  For a complete list of changes, see:
  * Bind Release Notes
    https://bind9.readthedocs.io/en/v9.18.24/notes.html
  * The CHANGES file in the source RPM
  Security Fixes:
  * Validating DNS messages containing a lot of DNSSEC signatures
    could cause excessive CPU load, leading to a denial-of-service
    condition. This has been fixed. (CVE-2023-50387)
    [bsc#1219823]
  * Preparing an NSEC3 closest encloser proof could cause excessive
    CPU load, leading to a denial-of-service condition. This has
    been fixed. (CVE-2023-50868)
    [bsc#1219826]
  * Parsing DNS messages with many different names could cause
    excessive CPU load. This has been fixed. (CVE-2023-4408)
    [bsc#1219851]
  * Specific queries could cause named to crash with an assertion
    failure when nxdomain-redirect was enabled. This has been
    fixed. (CVE-2023-5517)
    [bsc#1219852]
  * A bad interaction between DNS64 and serve-stale could cause
    named to crash with an assertion failure, when both of these
    features were enabled. This has been fixed. (CVE-2023-5679)
    [bsc#1219853]
  * Query patterns that continuously triggered cache database
    maintenance could cause an excessive amount of memory to be
    allocated, exceeding max-cache-size and potentially leading to
    all available memory on the host running named being exhausted.
    This has been fixed. (CVE-2023-6516)
    [bsc#1219854]
  Packaging notes:
  * libnghttps2 added as BuildRequires for tls support
  * named-bootconf.diff patch is obsolete and has been removed
  [jsc#PED-7932]
- Update KillMode to 'control-group' in named.service to handle
  forked processes better.
  [bsc#1215755]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1721908800">- Update to release 9.18.28
  Bug Fixes:
  * Command-line options for IPv4-only (named -4) and IPv6-only
    (named -6) modes are now respected for zone primaries,
    also-notify, and parental-agents.
  * An RPZ response’s SOA record TTL was set to 1 instead of the
    SOA TTL, if add-soa was used. This has been fixed.
  * When a query related to zone maintenance (NOTIFY, SOA) timed
    out close to a view shutdown (triggered e.g. by rndc reload),
    named could crash with an assertion failure. This has been
    fixed.
  * The statistics channel counters that indicated the number of
    currently connected TCP IPv4/IPv6 clients were not properly
    adjusted in certain failure scenarios. This has been fixed.
  * Some servers that could not be reached due to EHOSTDOWN or
    ENETDOWN conditions were incorrectly prioritized during server
    selection. These are now properly handled as unreachable.
  * On some systems the libuv call may return an error code when
    sending a TCP reset for a connection, which triggers an
    assertion failure in named. This error condition is now dealt
    with in a more graceful manner, by logging the incident and
    shutting down the connection.
  * Changes to listen-on statements were ignored on reconfiguration
    unless the port or interface address was changed, making it
    impossible to change a related listener transport type. That
    issue has been fixed.
  * A bug in the keymgr code unintentionally slowed down some
    DNSSEC key rollovers. This has been fixed.
  * Some ISO 8601 durations were accepted erroneously, leading to
    shorter durations than expected. This has been fixed
  * A regression in cache-cleaning code enabled memory use to grow
    significantly more quickly than before, until the configured
    max-cache-size limit was reached. This has been fixed.
  * Using rndc flush inadvertently caused cache cleaning to become
    less effective. This could ultimately lead to the configured
    max-cache-size limit being exceeded and has now been fixed.
  * The logic for cleaning up expired cached DNS records was
    tweaked to be more aggressive. This change helps with enforcing
    max-cache-ttl and max-ncache-ttl in a timely manner.
  * It was possible to trigger a use-after-free assertion when the
    overmem cache cleaning was initiated. This has been fixed.
  New Features:
  * A new option signatures-jitter has been added to dnssec-policy
    to allow signature expirations to be spread out over a period
    of time.
  * The statistics channel now includes counters that indicate the
    number of currently connected TCP IPv4/IPv6 clients.
  * Added RESOLVER.ARPA to the built in empty zones.
  Feature Changes:
  * DNSSEC signatures that are not valid because the current time
    falls outside the signature inception and expiration dates are
    skipped instead of causing an immediate validation failure.
  Security Fixes:
  * A malicious DNS client that sent many queries over TCP but
    never read the responses could cause a server to respond slowly
    or not at all for other clients. This has been fixed.
    (CVE-2024-0760)
    [bsc#1228255]
  * It is possible to craft excessively large resource records
    sets, which have the effect of slowing down database
    processing. This has been addressed by adding a configurable
    limit to the number of records that can be stored per name and
    type in a cache or zone database. The default is 100, which can
    be tuned with the new max-records-per-type option.
  * It is possible to craft excessively large numbers of resource
    record types for a given owner name, which has the effect of
    slowing down database processing. This has been addressed by
    adding a configurable limit to the number of records that can
    be stored per name and type in a cache or zone database. The
    default is 100, which can be tuned with the new
    max-types-per-name option. (CVE-2024-1737)
    [bsc#1228256]
  * Validating DNS messages signed using the SIG(0) protocol (RFC
    2931) could cause excessive CPU load, leading to a
    denial-of-service condition. Support for SIG(0) message
    validation was removed from this version of named.
    (CVE-2024-1975)
    [bsc#1228257]
  * Due to a logic error, lookups that triggered serving stale data
    and required lookups in local authoritative zone data could
    have resulted in an assertion failure. This has been fixed.
  * Potential data races were found in our DoH implementation,
    related to HTTP/2 session object management and endpoints set
    object management after reconfiguration. These issues have been
    fixed.
  * When looking up the NS records of parent zones as part of
    looking up DS records, it was possible for named to trigger an
    assertion failure if serve-stale was enabled. This has been
    fixed. (CVE-2024-4076)
    [bsc#1228258]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1729080000">- Update to new major version 9.20.3
  For a complete list of all changes see:
  * https://bind9.readthedocs.io/en/v9.20.3/notes.html
  * The CHANGES file in the source RPM
  Some noteworthy changes:
  * Added new BuildRequires liburcu for lock free data structures.
  * A new DNSSEC tool dnssec-ksr has been added to create Key
    Signing Request (KSR) and Signed Key Response (SKR) files.
  * /etc/bind.keys and /var/lib/named/named.root.key have been
    removed as the correct defaults are pre-compiled and there is
    no need to configure bind.keys manually.
  * The functions that were in the libbind9 shared library have
    been moved to the libisc and libisccfg libraries. The now-empty
    libbind9 has been removed and is no longer installed.
  * The irs_resconf module has been moved to the libdns shared
    library. The now-empty libirs library has been removed and is
    no longer installed.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Update to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  * dnssec-ksr now supports KSK rollovers.
  * The tool now allows for KSK generation, as well as planned KSK
    rollovers. When signing a bundle from a Key Signing Request
    (KSR), only the key that is active in that time frame is used
    for signing. Also, the CDS and CDNSKEY records are now added
    and removed at the correct time.
  * Print RFC 7314: EXPIRE option in transfer summary.
  * Emit more helpful log messages for exceeding
    max-records-per-type.
  * The new log message is emitted when adding or updating an RRset
    fails due to exceeding the max-records-per-type limit. The log
    includes the owner name and type, corresponding zone name, and
    the limit value. It will be emitted on loading a zone file,
    inbound zone transfer (both AXFR and IXFR), handling a DDNS
    update, or updating a cache DB. It’s especially helpful in the
    case of zone transfer, since the secondary side doesn’t have
    direct access to the offending zone data.
  * It could also be used for max-types-per-name, but this change
    doesn’t implement it yet as it’s much less likely to happen in
    practice.
  * Harden key management when key files have become unavailable.
  * Prior to doing key management, BIND 9 will check if the key
    files on disk match the expected keys. If key files for
    previously observed keys have become unavailable, this will
    prevent the internal key manager from running.
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  * Implement the min-transfer-rate-in configuration option.
  * Add HTTPS record query to host command line tool.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
  * Adds support for EDE code 1 and 2.
  * Add an rndc command to toggle jemalloc profiling.
  * Add support for multiple extended DNS errors.
  * Print the expiration time of stale records.
  * Add Extended DNS Error Code 22 - No Reachable Authority.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
  * Update built-in bind.keys file with the new 2025 IANA root key.
  * Add an initial-ds entry to bind.keys for the new root key, ID
    38696, which is scheduled for publication in January 2025.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.
  * Fix dual-stack-servers configuration option.
  * Fix a data race causing a permanent active client increase.
  * Fix deferred validation of unsigned DS and DNSKEY records.
  * Fix RPZ race condition during a reconfiguration.
  * “CNAME and other data check” not applied to all types.
  * Relax private DNSKEY and RRSIG constraints.
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
  * Fix a bug in the statistics channel when querying zone transfer
    information.
  * Fix assertion failure when dumping recursing clients.
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches().
  * Recently expired records could be returned with a timestamp in
    future.
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
  * Apply the memory limit only to ADB database items.
  * Avoid unnecessary locking in the zone/cache database.
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
  * Fix nsupdate hang when processing a large update.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
  * Resolve the spurious drops in performance due to glue cache.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
  * Fix improper handling of unknown directives in resolv.conf.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
  * Use TLS for notifies if configured to do so.
  * Notifies configured to use TLS will now be sent over TLS,
    instead of plain text UDP or TCP. Also, failing to load the TLS
    configuration for notify now results in an error.
  * {&amp;dns} is as valid as {?dns} in a SVCB’s dohpath.
  * dig failed to parse a valid SVCB record with a dohpath URI
    template containing a {&amp;dns}, like
    dohpath=/some/path?key=value{&amp;dns}”.
  * Fix NSEC3 closest encloser lookup for names with empty
    non-terminals.
  * A previous performance optimization for finding the NSEC3
    closest encloser when generating authoritative responses could
    cause servers to return incorrect NSEC3 records in some cases.
    This has been fixed.
  * recursive-clients statement with value 0 triggered an assertion
    failure.
  * BIND 9.20.0 broke recursive-clients 0;. This has now been
    fixed.
  * Parsing of hostnames in rndc.conf was broken.
  * When DSCP support was removed, parsing of hostnames in
    rndc.conf was accidentally broken, resulting in an assertion
    failure. This has been fixed.
  * dig options of the form [+-]option=&lt;value&gt; failed to display
    the value on the printed command line. This has been fixed.
  * Provide more visibility into TLS configuration errors by
    logging SSL_CTX_use_certificate_chain_file() and
    SSL_CTX_use_PrivateKey_file() errors individually.
  * Fix a race condition when canceling ADB find which could cause
    an assertion failure.
  * SERVFAIL cache memory cleaning is now more aggressive; it no
    longer consumes a lot of memory if the server encounters many
    SERVFAILs at once.
  * Fix trying the next primary XoT server when the previous one
    was marked as unreachable.
  * In some cases named failed to try the next primary server in
    the primaries list when the previous one was marked as
    unreachable. This has been fixed.
- CHANGES file has been removed, the changes are now only listed in
  the ARM docs available in the bind-doc package.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="tabraham@suse.com" date="1756987200">- ensure file descriptors 0-2 are in use before using libuv (bsc#1230649)
  * bind-ensure-file-descriptors-0-2-are-in-use-before-using-.patch</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761134400">- Upgrade to release 9.20.15
  Security Fixes:
  * DNSSEC validation fails if matching but invalid DNSKEY is found.
    [CVE-2025-8677, bsc#1252378]
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380]
  New Features:
  * Add dnssec-policy keys configuration check to named-checkconf.
  * Add a new option `manual-mode` to dnssec-policy.
  * Add a new option `servfail-until-ready` to response-policy
    zones.
  * Support for parsing HHIT and BRID records has been added.
  * Support for parsing DSYNC records has been added.
  Removed Features:
  * Deprecate the `tkey-gssapi-credential` statement.
  * Obsolete the `tkey-domain` statement.
  Feature Changes:
  * Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS
    digest type 1.
  Bug Fixes:
  * Missing DNSSEC information when CD bit is set in query.
  * rndc sign during ZSK rollover will now replace signatures.
  * Use signer name when disabling DNSSEC algorithms.
  * Preserve cache when reload fails and reload the server again.
  * Prevent spurious SERVFAILs for certain 0-TTL resource records.
  * Fix unexpected termination if catalog-zones had undefined
    `default-primaries`.
  * Stale RRsets in a CNAME chain were not always refreshed.
  * Add RPZ extended DNS error for zones with a CNAME override
    policy configured.
  * Fix dig +keepopen option.
  * Log dropped or slipped responses in the query-errors category.
  * Fix synth-from-dnssec not working in some scenarios.
  * Clean enough memory when adding new ADB names/entries under
    memory pressure.
  * Prevent spurious validation failures.
- Obsoletes
  bind-ensure-file-descriptors-0-2-are-in-use-before-using-.patch</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1768996800">- Upgrade to release 9.20.18
  Security Fixes:
  * Fix incorrect length checks for BRID and HHIT records.
  (CVE-2025-13878)
  [bsc#1256997]
  Feature Changes:
  * Add more information to the rndc recursing output about
    fetches.
  * Reduce the number of outgoing queries.
  * Provide more information when memory allocation fails.
  Bug Fixes:
  * Make DNSSEC key rollovers more robust.
  * Fix a catalog zone issue, where member zones could fail to
    load.
  * Allow glue in delegations with QTYPE=ANY.
  * Fix slow speed when signing a large delegation zone with NSEC3
    opt-out.
  * Reconfiguring an NSEC3 opt-out zone to NSEC caused the zone to
    be invalid.
  * Fix a possible catalog zone issue during reconfiguration.
  * Fix the charts in the statistics channel.
  * Adding NSEC3 opt-out records could leave invalid records in
    chain.
  * Fix spurious timeouts while resolving names.
  * Fix bug where zone switches from NSEC3 to NSEC after
    retransfer.
  * AMTRELAY type 0 presentation format handling was wrong.
  * Fix parsing bug in remote-servers with key or TLS.
  * Fix DoT reconfigure/reload bug in the resolver.
  * Skip unsupported algorithms when looking for a signing key.
  * Fix dnssec-keygen key collision checking for KEY RRtype keys.
  * dnssec-verify now uses exit code 1 when failing due to illegal
    options.
  * Prevent assertion failures of dig when a server is specified
    before the -b option.
  * Skip buffer allocations if not logging.</changelog>
</package>
<package pkgid="f54e1a3671a5e4a2910932198e883c871751552e792d8c6a7783bfbeb445783b" name="bind-utils" arch="x86_64">
  <version epoch="0" ver="9.20.21" rel="150700.3.18.1"/>
  <changelog author="jorik.cronenberg@suse.com" date="1671710400">- Update to release 9.16.36
  Feature Changes:
  * The auto-dnssec option has been deprecated and will be removed
    in a future BIND 9.19.x release. Please migrate to
    dnssec-policy.
  Bug Fixes:
  * When a catalog zone was removed from the configuration, in some
    cases a dangling pointer could cause the named process to
    crash.
  * When a zone was deleted from a server, a key management object
    related to that zone was inadvertently kept in memory and only
    released upon shutdown. This could lead to constantly
    increasing memory use on servers with a high rate of changes
    affecting the set of zones being served.
  * In certain cases, named waited for the resolution of
    outstanding recursive queries to finish before shutting down.
  * The zone &lt;name&gt;/&lt;class&gt;: final reference detached log message
    was moved from the INFO log level to the DEBUG(1) log level to
    prevent the named-checkzone tool from superfluously logging
    this message in non-debug mode.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1674561600">- Update to release 9.16.37
  Security Fixes:
  * An UPDATE message flood could cause named to exhaust all
    available memory. This flaw was addressed by adding a new
    update-quota option that controls the maximum number of
    outstanding DNS UPDATE messages that named can hold in a queue
    at any given time (default: 100). (CVE-2022-3094)
  * named could crash with an assertion failure when an RRSIG query
    was received and stale-answer-client-timeout was set to a
    non-zero value. This has been fixed. (CVE-2022-3736)
  * named running as a resolver with the
    stale-answer-client-timeout option set to any value greater
    than 0 could crash with an assertion failure, when the
    recursive-clients soft quota was reached. This has been fixed.
    (CVE-2022-3924)
  New Features:
  * The new update-quota option can be used to control the number
    of simultaneous DNS UPDATE messages that can be processed to
    update an authoritative zone on a primary server, or forwarded
    to the primary server by a secondary server. The default is
    100. A new statistics counter has also been added to record
    events when this quota is exceeded, and the version numbers for
    the XML and JSON statistics schemas have been updated.
  Feature Changes:
  * The Differentiated Services Code Point (DSCP) feature in BIND
    has been deprecated. Configuring DSCP values in named.conf now
    causes a warning to be logged. Note that this feature has only
    been partly operational since the new Network Manager was
    introduced in BIND 9.16.0.
  * The catalog zone implementation has been optimized to work with
    hundreds of thousands of member zones.
  Bug Fixes:
  * In certain query resolution scenarios (e.g. when following
    CNAME records), named configured to answer from stale cache
    could return a SERVFAIL response despite a usable, non-stale
    answer being present in the cache. This has been fixed.
  [bsc#1207471, bsc#1207473, bsc#1207475, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1676548800">- Update to release 9.16.38
  Bug Fixes:
  * A constant stream of zone additions and deletions via rndc
    reconfig could cause increased memory consumption due to
    delayed cleaning of view memory. This has been fixed.
  * The speed of the message digest algorithms (MD5, SHA-1, SHA-2),
    and of NSEC3 hashing, has been improved.
  * Building BIND 9 failed when the --enable-dnsrps switch for
    ./configure was used. This has been fixed.
  [jsc#SLE-24600]
- Updated keyring and signature</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1678881600">- Update to release 9.16.39
  Feature Changes:
  * libuv support for receiving multiple UDP messages in a single
    recvmmsg() system call has been tweaked several times between
    libuv versions 1.35.0 and 1.40.0; the current recommended libuv
    version is 1.40.0 or higher. New rules are now in effect for
    running with a different version of libuv than the one used at
    compilation time. These rules may trigger a fatal error at
    startup:
  - Building against or running with libuv versions 1.35.0 and
    1.36.0 is now a fatal error.
  - Running with libuv version higher than 1.34.2 is now a
    fatal error when named is built against libuv version
    1.34.2 or lower.
  - Running with libuv version higher than 1.39.0 is now a
    fatal error when named is built against libuv version
    1.37.0, 1.38.0, 1.38.1, or 1.39.0.
  * This prevents the use of libuv versions that may trigger an
    assertion failure when receiving multiple UDP messages in a
    single system call.
  Bug Fixes:
  * named could crash with an assertion failure when adding a new
    zone into the configuration file for a name which was already
    configured as a member zone for a catalog zone. This has been
    fixed.
  * When named starts up, it sends a query for the DNSSEC key for
    each configured trust anchor to determine whether the key has
    changed. In some unusual cases, the query might depend on a
    zone for which the server is itself authoritative, and would
    have failed if it were sent before the zone was fully loaded.
    This has now been fixed by delaying the key queries until all
    zones have finished loading.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1682424000">- Update to release 9.16.40
  Bug Fixes:
  * Logfiles using timestamp-style suffixes were not always
    correctly removed when the number of files exceeded the limit
    set by versions. This has been fixed for configurations which
    do not explicitly specify a directory path as part of the file
    argument in the channel specification.
  * Performance of DNSSEC validation in zones with many DNSKEY
    records has been improved.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1684324800">- Update to release 9.16.41
  Bug Fixes:
  * When removing delegations from an opt-out range,
    empty-non-terminal NSEC3 records generated by those delegations
    were not cleaned up. This has been fixed.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1687348800">- Update to release 9.16.42
  Security Fixes:
  * The overmem cleaning process has been improved, to prevent the
    cache from significantly exceeding the configured
    max-cache-size limit. (CVE-2023-2828)
  * A query that prioritizes stale data over lookup triggers a
    fetch to refresh the stale data in cache. If the fetch is
    aborted for exceeding the recursion quota, it was possible for
    named to enter an infinite callback loop and crash due to stack
    overflow. This has been fixed. (CVE-2023-2911)
  Bug Fixes:
  * Previously, it was possible for a delegation from cache to be
    returned to the client after the stale-answer-client-timeout
    duration. This has been fixed.
  [bsc#1212544, bsc#1212567, jsc#SLE-24600]</changelog>
  <changelog author="dmueller@suse.com" date="1688644800">- rebuild bind-utils on libuv updates (bsc#1212090)</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1688990400">- Log named-checkconf output [bsc#1213049]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1689076800">- Add dnstap support
  [jsc#PED-4852]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1695124800">- Update to release 9.16.44
  Bug Fixes:
  * Processing already-queued queries received over TCP could cause
    an assertion failure, when the server was reconfigured at the
    same time or the cache was being flushed. This has been fixed.
  Security Fixes:
  * Previously, sending a specially crafted message over the
    control channel could cause the packet-parsing code to run out
    of available stack memory, causing named to terminate
    unexpectedly. This has been fixed. (CVE-2023-3341)
  [bsc#1215472]
- Switch to pkgconfig(libprotobuf-c) since this now contains the
  required protobuf-c binary</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1708084800">- Update to new Major Version 9.18.24.
  This has many enhancements, bug fixes and changes.
  Breaking Changes:
  * Some options have been removed and some have been deprecated
    and will be removed in the future.
    For a complete list, see:
    https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-bind-916-to-918
  Major Changes:
  * Support for securing DNS traffic using Transport Layer Security
    (TLS). TLS is used by both DNS-over-TLS (DoT) and
    DNS-over-HTTPS (DoH).
  * Support for zone transfers over TLS (XFR-over-TLS, XoT) for
    both incoming and outgoing zone transfers.
  * The dig tool is now able to send DoT queries (+tls option).
  * Support for OpenSSL 3.0 APIs was added.
  * dnssec-checkds, dnssec-coverage, dnssec-keymgr, which have been
    removed in favor of the dnssec-policy feature
  * python3-bind is deprecated and the subpackage has been removed
  * A number of utilities have been moved from /usr/sbin to
    /usr/bin:
    named-checkconf named-checkzone named-compilezone
    dnssec-dsfromkey dnssec-importkey dnssec-keyfromlabel
    dnssec-keygen dnssec-revoke dnssec-settime dnssec-signzone
    dnssec-verify dnssec-cds named-journalprint nsec3hash
  * The lib directory was renamed from 'named' to 'bind'
  For a complete list of changes, see:
  * Bind Release Notes
    https://bind9.readthedocs.io/en/v9.18.24/notes.html
  * The CHANGES file in the source RPM
  Security Fixes:
  * Validating DNS messages containing a lot of DNSSEC signatures
    could cause excessive CPU load, leading to a denial-of-service
    condition. This has been fixed. (CVE-2023-50387)
    [bsc#1219823]
  * Preparing an NSEC3 closest encloser proof could cause excessive
    CPU load, leading to a denial-of-service condition. This has
    been fixed. (CVE-2023-50868)
    [bsc#1219826]
  * Parsing DNS messages with many different names could cause
    excessive CPU load. This has been fixed. (CVE-2023-4408)
    [bsc#1219851]
  * Specific queries could cause named to crash with an assertion
    failure when nxdomain-redirect was enabled. This has been
    fixed. (CVE-2023-5517)
    [bsc#1219852]
  * A bad interaction between DNS64 and serve-stale could cause
    named to crash with an assertion failure, when both of these
    features were enabled. This has been fixed. (CVE-2023-5679)
    [bsc#1219853]
  * Query patterns that continuously triggered cache database
    maintenance could cause an excessive amount of memory to be
    allocated, exceeding max-cache-size and potentially leading to
    all available memory on the host running named being exhausted.
    This has been fixed. (CVE-2023-6516)
    [bsc#1219854]
  Packaging notes:
  * libnghttps2 added as BuildRequires for tls support
  * named-bootconf.diff patch is obsolete and has been removed
  [jsc#PED-7932]
- Update KillMode to 'control-group' in named.service to handle
  forked processes better.
  [bsc#1215755]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1721908800">- Update to release 9.18.28
  Bug Fixes:
  * Command-line options for IPv4-only (named -4) and IPv6-only
    (named -6) modes are now respected for zone primaries,
    also-notify, and parental-agents.
  * An RPZ response’s SOA record TTL was set to 1 instead of the
    SOA TTL, if add-soa was used. This has been fixed.
  * When a query related to zone maintenance (NOTIFY, SOA) timed
    out close to a view shutdown (triggered e.g. by rndc reload),
    named could crash with an assertion failure. This has been
    fixed.
  * The statistics channel counters that indicated the number of
    currently connected TCP IPv4/IPv6 clients were not properly
    adjusted in certain failure scenarios. This has been fixed.
  * Some servers that could not be reached due to EHOSTDOWN or
    ENETDOWN conditions were incorrectly prioritized during server
    selection. These are now properly handled as unreachable.
  * On some systems the libuv call may return an error code when
    sending a TCP reset for a connection, which triggers an
    assertion failure in named. This error condition is now dealt
    with in a more graceful manner, by logging the incident and
    shutting down the connection.
  * Changes to listen-on statements were ignored on reconfiguration
    unless the port or interface address was changed, making it
    impossible to change a related listener transport type. That
    issue has been fixed.
  * A bug in the keymgr code unintentionally slowed down some
    DNSSEC key rollovers. This has been fixed.
  * Some ISO 8601 durations were accepted erroneously, leading to
    shorter durations than expected. This has been fixed
  * A regression in cache-cleaning code enabled memory use to grow
    significantly more quickly than before, until the configured
    max-cache-size limit was reached. This has been fixed.
  * Using rndc flush inadvertently caused cache cleaning to become
    less effective. This could ultimately lead to the configured
    max-cache-size limit being exceeded and has now been fixed.
  * The logic for cleaning up expired cached DNS records was
    tweaked to be more aggressive. This change helps with enforcing
    max-cache-ttl and max-ncache-ttl in a timely manner.
  * It was possible to trigger a use-after-free assertion when the
    overmem cache cleaning was initiated. This has been fixed.
  New Features:
  * A new option signatures-jitter has been added to dnssec-policy
    to allow signature expirations to be spread out over a period
    of time.
  * The statistics channel now includes counters that indicate the
    number of currently connected TCP IPv4/IPv6 clients.
  * Added RESOLVER.ARPA to the built in empty zones.
  Feature Changes:
  * DNSSEC signatures that are not valid because the current time
    falls outside the signature inception and expiration dates are
    skipped instead of causing an immediate validation failure.
  Security Fixes:
  * A malicious DNS client that sent many queries over TCP but
    never read the responses could cause a server to respond slowly
    or not at all for other clients. This has been fixed.
    (CVE-2024-0760)
    [bsc#1228255]
  * It is possible to craft excessively large resource records
    sets, which have the effect of slowing down database
    processing. This has been addressed by adding a configurable
    limit to the number of records that can be stored per name and
    type in a cache or zone database. The default is 100, which can
    be tuned with the new max-records-per-type option.
  * It is possible to craft excessively large numbers of resource
    record types for a given owner name, which has the effect of
    slowing down database processing. This has been addressed by
    adding a configurable limit to the number of records that can
    be stored per name and type in a cache or zone database. The
    default is 100, which can be tuned with the new
    max-types-per-name option. (CVE-2024-1737)
    [bsc#1228256]
  * Validating DNS messages signed using the SIG(0) protocol (RFC
    2931) could cause excessive CPU load, leading to a
    denial-of-service condition. Support for SIG(0) message
    validation was removed from this version of named.
    (CVE-2024-1975)
    [bsc#1228257]
  * Due to a logic error, lookups that triggered serving stale data
    and required lookups in local authoritative zone data could
    have resulted in an assertion failure. This has been fixed.
  * Potential data races were found in our DoH implementation,
    related to HTTP/2 session object management and endpoints set
    object management after reconfiguration. These issues have been
    fixed.
  * When looking up the NS records of parent zones as part of
    looking up DS records, it was possible for named to trigger an
    assertion failure if serve-stale was enabled. This has been
    fixed. (CVE-2024-4076)
    [bsc#1228258]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1729080000">- Update to new major version 9.20.3
  For a complete list of all changes see:
  * https://bind9.readthedocs.io/en/v9.20.3/notes.html
  * The CHANGES file in the source RPM
  Some noteworthy changes:
  * Added new BuildRequires liburcu for lock free data structures.
  * A new DNSSEC tool dnssec-ksr has been added to create Key
    Signing Request (KSR) and Signed Key Response (SKR) files.
  * /etc/bind.keys and /var/lib/named/named.root.key have been
    removed as the correct defaults are pre-compiled and there is
    no need to configure bind.keys manually.
  * The functions that were in the libbind9 shared library have
    been moved to the libisc and libisccfg libraries. The now-empty
    libbind9 has been removed and is no longer installed.
  * The irs_resconf module has been moved to the libdns shared
    library. The now-empty libirs library has been removed and is
    no longer installed.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Update to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  * dnssec-ksr now supports KSK rollovers.
  * The tool now allows for KSK generation, as well as planned KSK
    rollovers. When signing a bundle from a Key Signing Request
    (KSR), only the key that is active in that time frame is used
    for signing. Also, the CDS and CDNSKEY records are now added
    and removed at the correct time.
  * Print RFC 7314: EXPIRE option in transfer summary.
  * Emit more helpful log messages for exceeding
    max-records-per-type.
  * The new log message is emitted when adding or updating an RRset
    fails due to exceeding the max-records-per-type limit. The log
    includes the owner name and type, corresponding zone name, and
    the limit value. It will be emitted on loading a zone file,
    inbound zone transfer (both AXFR and IXFR), handling a DDNS
    update, or updating a cache DB. It’s especially helpful in the
    case of zone transfer, since the secondary side doesn’t have
    direct access to the offending zone data.
  * It could also be used for max-types-per-name, but this change
    doesn’t implement it yet as it’s much less likely to happen in
    practice.
  * Harden key management when key files have become unavailable.
  * Prior to doing key management, BIND 9 will check if the key
    files on disk match the expected keys. If key files for
    previously observed keys have become unavailable, this will
    prevent the internal key manager from running.
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  * Implement the min-transfer-rate-in configuration option.
  * Add HTTPS record query to host command line tool.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
  * Adds support for EDE code 1 and 2.
  * Add an rndc command to toggle jemalloc profiling.
  * Add support for multiple extended DNS errors.
  * Print the expiration time of stale records.
  * Add Extended DNS Error Code 22 - No Reachable Authority.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
  * Update built-in bind.keys file with the new 2025 IANA root key.
  * Add an initial-ds entry to bind.keys for the new root key, ID
    38696, which is scheduled for publication in January 2025.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.
  * Fix dual-stack-servers configuration option.
  * Fix a data race causing a permanent active client increase.
  * Fix deferred validation of unsigned DS and DNSKEY records.
  * Fix RPZ race condition during a reconfiguration.
  * “CNAME and other data check” not applied to all types.
  * Relax private DNSKEY and RRSIG constraints.
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
  * Fix a bug in the statistics channel when querying zone transfer
    information.
  * Fix assertion failure when dumping recursing clients.
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches().
  * Recently expired records could be returned with a timestamp in
    future.
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
  * Apply the memory limit only to ADB database items.
  * Avoid unnecessary locking in the zone/cache database.
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
  * Fix nsupdate hang when processing a large update.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
  * Resolve the spurious drops in performance due to glue cache.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
  * Fix improper handling of unknown directives in resolv.conf.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
  * Use TLS for notifies if configured to do so.
  * Notifies configured to use TLS will now be sent over TLS,
    instead of plain text UDP or TCP. Also, failing to load the TLS
    configuration for notify now results in an error.
  * {&amp;dns} is as valid as {?dns} in a SVCB’s dohpath.
  * dig failed to parse a valid SVCB record with a dohpath URI
    template containing a {&amp;dns}, like
    dohpath=/some/path?key=value{&amp;dns}”.
  * Fix NSEC3 closest encloser lookup for names with empty
    non-terminals.
  * A previous performance optimization for finding the NSEC3
    closest encloser when generating authoritative responses could
    cause servers to return incorrect NSEC3 records in some cases.
    This has been fixed.
  * recursive-clients statement with value 0 triggered an assertion
    failure.
  * BIND 9.20.0 broke recursive-clients 0;. This has now been
    fixed.
  * Parsing of hostnames in rndc.conf was broken.
  * When DSCP support was removed, parsing of hostnames in
    rndc.conf was accidentally broken, resulting in an assertion
    failure. This has been fixed.
  * dig options of the form [+-]option=&lt;value&gt; failed to display
    the value on the printed command line. This has been fixed.
  * Provide more visibility into TLS configuration errors by
    logging SSL_CTX_use_certificate_chain_file() and
    SSL_CTX_use_PrivateKey_file() errors individually.
  * Fix a race condition when canceling ADB find which could cause
    an assertion failure.
  * SERVFAIL cache memory cleaning is now more aggressive; it no
    longer consumes a lot of memory if the server encounters many
    SERVFAILs at once.
  * Fix trying the next primary XoT server when the previous one
    was marked as unreachable.
  * In some cases named failed to try the next primary server in
    the primaries list when the previous one was marked as
    unreachable. This has been fixed.
- CHANGES file has been removed, the changes are now only listed in
  the ARM docs available in the bind-doc package.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1752580800">- Upgrade to release 9.20.11
  Security Fixes:
  * Fix a possible assertion failure when
    stale-answer-client-timeout is set to 0. In specific
    circumstances the named resolver process could exit with an
    assertion failure when stale answers were enabled and the
    stale-answer-client-timeout configuration option was set to 0.
    (CVE-2025-40777)
    [bsc#1246548]
  New Features:
  * Add support for the CO flag to dig.
  * Implement a new notify-defer configuration option. This new
    option sets a delay (in seconds) to wait before sending a set
    of NOTIFY messages for a zone. Whenever a NOTIFY message is
    ready to be sent, sending is deferred for this duration. This
    option should not be confused with the notify-delay option. The
    default is 0 seconds.
  Removed Features:
  * Implement the systemd notification protocol manually to remove
    dependency on libsystemd.
  Bug Fixes:
  * Correct the default interface-interval from 60s to 60m.
  * Fix a purge-keys bug when using multiple views of a zone.
  * Use IPv6 queries in delv +ns.
  * A secondary zone could initiate a new zone transfer from the
    primary server after it had been already deleted from the
    secondary server, and before the internal garbage collection
    was activated to clean it up completely. This has been fixed.
  * A secondary zone could fail to further refresh with new
    versions of the zone from a primary server if named was
    reconfigured during the SOA request step of an ongoing zone
    transfer. This has been fixed.
- Clean up systemd BuildRequires</changelog>
  <changelog author="tabraham@suse.com" date="1756987200">- ensure file descriptors 0-2 are in use before using libuv (bsc#1230649)
  * bind-ensure-file-descriptors-0-2-are-in-use-before-using-.patch</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761134400">- Upgrade to release 9.20.15
  Security Fixes:
  * DNSSEC validation fails if matching but invalid DNSKEY is found.
    [CVE-2025-8677, bsc#1252378]
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380]
  New Features:
  * Add dnssec-policy keys configuration check to named-checkconf.
  * Add a new option `manual-mode` to dnssec-policy.
  * Add a new option `servfail-until-ready` to response-policy
    zones.
  * Support for parsing HHIT and BRID records has been added.
  * Support for parsing DSYNC records has been added.
  Removed Features:
  * Deprecate the `tkey-gssapi-credential` statement.
  * Obsolete the `tkey-domain` statement.
  Feature Changes:
  * Add deprecation warnings for RSASHA1, RSASHA1-NSEC3SHA1, and DS
    digest type 1.
  Bug Fixes:
  * Missing DNSSEC information when CD bit is set in query.
  * rndc sign during ZSK rollover will now replace signatures.
  * Use signer name when disabling DNSSEC algorithms.
  * Preserve cache when reload fails and reload the server again.
  * Prevent spurious SERVFAILs for certain 0-TTL resource records.
  * Fix unexpected termination if catalog-zones had undefined
    `default-primaries`.
  * Stale RRsets in a CNAME chain were not always refreshed.
  * Add RPZ extended DNS error for zones with a CNAME override
    policy configured.
  * Fix dig +keepopen option.
  * Log dropped or slipped responses in the query-errors category.
  * Fix synth-from-dnssec not working in some scenarios.
  * Clean enough memory when adding new ADB names/entries under
    memory pressure.
  * Prevent spurious validation failures.
- Obsoletes
  bind-ensure-file-descriptors-0-2-are-in-use-before-using-.patch</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1768996800">- Upgrade to release 9.20.18
  Security Fixes:
  * Fix incorrect length checks for BRID and HHIT records.
  (CVE-2025-13878)
  [bsc#1256997]
  Feature Changes:
  * Add more information to the rndc recursing output about
    fetches.
  * Reduce the number of outgoing queries.
  * Provide more information when memory allocation fails.
  Bug Fixes:
  * Make DNSSEC key rollovers more robust.
  * Fix a catalog zone issue, where member zones could fail to
    load.
  * Allow glue in delegations with QTYPE=ANY.
  * Fix slow speed when signing a large delegation zone with NSEC3
    opt-out.
  * Reconfiguring an NSEC3 opt-out zone to NSEC caused the zone to
    be invalid.
  * Fix a possible catalog zone issue during reconfiguration.
  * Fix the charts in the statistics channel.
  * Adding NSEC3 opt-out records could leave invalid records in
    chain.
  * Fix spurious timeouts while resolving names.
  * Fix bug where zone switches from NSEC3 to NSEC after
    retransfer.
  * AMTRELAY type 0 presentation format handling was wrong.
  * Fix parsing bug in remote-servers with key or TLS.
  * Fix DoT reconfigure/reload bug in the resolver.
  * Skip unsupported algorithms when looking for a signing key.
  * Fix dnssec-keygen key collision checking for KEY RRtype keys.
  * dnssec-verify now uses exit code 1 when failing due to illegal
    options.
  * Prevent assertion failures of dig when a server is specified
    before the -b option.
  * Skip buffer allocations if not logging.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1774526400">- Upgrade to release 9.20.21
  Security Fixes:
  * Fix unbounded NSEC3 iterations when validating referrals to
    unsigned delegations.
    (CVE-2026-1519)
    [bsc#1260805]
  * Fix memory leaks in code preparing DNSSEC proofs of
    non-existence.
    (CVE-2026-3104)
    [bsc#1260567]
  * Prevent a crash in code processing queries containing a TKEY
    record.
    (CVE-2026-3119)
    [bsc#1260568]
  * Fix a stack use-after-return flaw in SIG(0) handling code.
    (CVE-2026-3591)
    [bsc#1260569]
  * Fix a use-after-free error in dns_client_resolve() triggered by
    a DNAME response. This issue only affected the delv tool and it
    has now been fixed.
    [bsc#1259202]
  Feature Changes:
  * Record query time for all dnstap responses.
  * Optimize TCP source port selection on Linux.
  Bug Fixes:
  * Fix the handling of key statements defined inside views.
  * Fix an assertion failure triggered by non-minimal IXFRs.
  * Fix a crash when retrying a NOTIFY over TCP.
  * Fetch loop detection improvements.
  * Randomize nameserver selection.
  * Fix dnstap logging of forwarded queries.
  * A stale answer could have been served in case of multiple
    upstream failures when following CNAME chains. This has been
    fixed.
  * Fail DNSKEY validation when supported but invalid DS is found.
  * Importing an invalid SKR file might corrupt stack memory.
  * Return FORMERR for queries with the EDNS Client Subnet FAMILY
    field set to 0.
  * Fix inbound IXFR performance regression.
  * Make catalog zone names and member zones' entry names
    case-insensitive.
  * Fix implementation of BRID and HHIT record types.
  * Fix implementation of DSYNC record type.
  * Fix response policy and catalog zones to work with $INCLUDE
    directive.</changelog>
</package>
<package pkgid="d64b037f4fa1fa778381db1d2ce4c539c1ffa36f0c0585497b54cb6e9134c768" name="bind-utils" arch="x86_64">
  <version epoch="0" ver="9.20.9" rel="150700.3.3.1"/>
  <changelog author="jorik.cronenberg@suse.com" date="1662724800">- Include a modified createNamedConfInclude script again, as this
  broke compatability with existing configurations.
  A symlink for named.conf.include to /var/lib/named is created to
  allow for a read-only /etc directory.
  However it is still advised to change the existing configuration.
  See README-bind.chrootenv for a guide how to do this.
  [bsc#1203250, vendor-files/tools/createNamedConfInclude,
  vendor-files/docu/README-bind.chrootenv, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724801">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Update to release 9.16.33
  Security Fixes:
  * Previously, there was no limit to the number of database lookups
    performed while processing large delegations, which could be
    abused to severely impact the performance of named running as a
    recursive resolver. This has been fixed. (CVE-2022-2795)
  * named running as a resolver with the stale-answer-client-timeout
    option set to 0 could crash with an assertion failure, when
    there was a stale CNAME in the cache for the incoming query.
    This has been fixed. (CVE-2022-3080)
  * A memory leak was fixed that could be externally triggered in the
    DNSSEC verification code for the ECDSA algorithm. (CVE-2022-38177)
  * Memory leaks were fixed that could be externally triggered in the
    DNSSEC verification code for the EdDSA algorithm. (CVE-2022-38178)
  Feature Changes:
  * Response Rate Limiting (RRL) code now treats all QNAMEs that are
    subject to wildcard processing within a given zone as the same
    name, to prevent circumventing the limits enforced by RRL.
  * Zones using dnssec-policy now require dynamic DNS or
    inline-signing to be configured explicitly.
  * A backward-compatible approach was implemented for encoding
    internationalized domain names (IDN) in dig and converting the
    domain to IDNA2008 form; if that fails,
    BIND tries an IDNA2003 conversion.
  Bug Fixes:
  * A serve-stale bug was fixed, where BIND would try to return stale
    data from cache for lookups that received duplicate queries or
    queries that would be dropped. This bug resulted in premature
    SERVFAIL responses, and has now been resolved.
  [bsc#1203614, bsc#1203618, bsc#1203619, bsc#1203620, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1668168000">- Update to release 9.16.34
  New Features:
  * Support for parsing and validating the dohpath service
    parameter in SVCB records was added.
  * named now logs the supported cryptographic algorithms during
    startup and in the output of named -V.
  Bug Fixes:
  * Changing just the TSIG key names for primaries in catalog
    zones’ member zones was not effective. This has been fixed.
  Known Issues:
  * Upgrading from BIND 9.16.32 or any older version may require a
    manual configuration change. The following configurations are
    affected:
  - type primary zones configured with dnssec-policy but without
    either allow-update or update-policy,
  - type secondary zones configured with dnssec-policy.
    In these cases please add inline-signing yes; to the individual
    zone configuration(s). Without applying this change, named will
    fail to start. For more details, see
    https://kb.isc.org/docs/dnssec-policy-requires-dynamic-dns-or-inline-signing
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1669291200">- Update to release 9.16.35
  Bug Fixes:
  * A crash was fixed that happened when a dnssec-policy zone that
    used NSEC3 was reconfigured to enable inline-signing.
  * In certain resolution scenarios, quotas could be erroneously
    reached for servers, including any configured forwarders,
    resulting in SERVFAIL answers being sent to clients.
  * rpz-ip rules in response-policy zones could be ineffective in
    some cases if a query had the CD (Checking Disabled) bit set to
    1.
  * Previously, if Internet connectivity issues were experienced
    during the initial startup of named, a BIND resolver with
    dnssec-validation set to auto could enter into a state where it
    would not recover without stopping named, manually deleting the
    managed-keys.bind and managed-keys.bind.jnl files, and starting
    named again.
  * The statistics counter representing the current number of
    clients awaiting recursive resolution results (RecursClients)
    could overflow in certain resolution scenarios.
  * Previously, BIND failed to start on Solaris-based systems with
    hundreds of CPUs.
  * When a DNS resource record’s TTL value was equal to the
    resolver’s configured prefetch “eligibility” value, the record
    was erroneously not treated as eligible for prefetching.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1671710400">- Update to release 9.16.36
  Feature Changes:
  * The auto-dnssec option has been deprecated and will be removed
    in a future BIND 9.19.x release. Please migrate to
    dnssec-policy.
  Bug Fixes:
  * When a catalog zone was removed from the configuration, in some
    cases a dangling pointer could cause the named process to
    crash.
  * When a zone was deleted from a server, a key management object
    related to that zone was inadvertently kept in memory and only
    released upon shutdown. This could lead to constantly
    increasing memory use on servers with a high rate of changes
    affecting the set of zones being served.
  * In certain cases, named waited for the resolution of
    outstanding recursive queries to finish before shutting down.
  * The zone &lt;name&gt;/&lt;class&gt;: final reference detached log message
    was moved from the INFO log level to the DEBUG(1) log level to
    prevent the named-checkzone tool from superfluously logging
    this message in non-debug mode.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1674561600">- Update to release 9.16.37
  Security Fixes:
  * An UPDATE message flood could cause named to exhaust all
    available memory. This flaw was addressed by adding a new
    update-quota option that controls the maximum number of
    outstanding DNS UPDATE messages that named can hold in a queue
    at any given time (default: 100). (CVE-2022-3094)
  * named could crash with an assertion failure when an RRSIG query
    was received and stale-answer-client-timeout was set to a
    non-zero value. This has been fixed. (CVE-2022-3736)
  * named running as a resolver with the
    stale-answer-client-timeout option set to any value greater
    than 0 could crash with an assertion failure, when the
    recursive-clients soft quota was reached. This has been fixed.
    (CVE-2022-3924)
  New Features:
  * The new update-quota option can be used to control the number
    of simultaneous DNS UPDATE messages that can be processed to
    update an authoritative zone on a primary server, or forwarded
    to the primary server by a secondary server. The default is
    100. A new statistics counter has also been added to record
    events when this quota is exceeded, and the version numbers for
    the XML and JSON statistics schemas have been updated.
  Feature Changes:
  * The Differentiated Services Code Point (DSCP) feature in BIND
    has been deprecated. Configuring DSCP values in named.conf now
    causes a warning to be logged. Note that this feature has only
    been partly operational since the new Network Manager was
    introduced in BIND 9.16.0.
  * The catalog zone implementation has been optimized to work with
    hundreds of thousands of member zones.
  Bug Fixes:
  * In certain query resolution scenarios (e.g. when following
    CNAME records), named configured to answer from stale cache
    could return a SERVFAIL response despite a usable, non-stale
    answer being present in the cache. This has been fixed.
  [bsc#1207471, bsc#1207473, bsc#1207475, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1676548800">- Update to release 9.16.38
  Bug Fixes:
  * A constant stream of zone additions and deletions via rndc
    reconfig could cause increased memory consumption due to
    delayed cleaning of view memory. This has been fixed.
  * The speed of the message digest algorithms (MD5, SHA-1, SHA-2),
    and of NSEC3 hashing, has been improved.
  * Building BIND 9 failed when the --enable-dnsrps switch for
    ./configure was used. This has been fixed.
  [jsc#SLE-24600]
- Updated keyring and signature</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1678881600">- Update to release 9.16.39
  Feature Changes:
  * libuv support for receiving multiple UDP messages in a single
    recvmmsg() system call has been tweaked several times between
    libuv versions 1.35.0 and 1.40.0; the current recommended libuv
    version is 1.40.0 or higher. New rules are now in effect for
    running with a different version of libuv than the one used at
    compilation time. These rules may trigger a fatal error at
    startup:
  - Building against or running with libuv versions 1.35.0 and
    1.36.0 is now a fatal error.
  - Running with libuv version higher than 1.34.2 is now a
    fatal error when named is built against libuv version
    1.34.2 or lower.
  - Running with libuv version higher than 1.39.0 is now a
    fatal error when named is built against libuv version
    1.37.0, 1.38.0, 1.38.1, or 1.39.0.
  * This prevents the use of libuv versions that may trigger an
    assertion failure when receiving multiple UDP messages in a
    single system call.
  Bug Fixes:
  * named could crash with an assertion failure when adding a new
    zone into the configuration file for a name which was already
    configured as a member zone for a catalog zone. This has been
    fixed.
  * When named starts up, it sends a query for the DNSSEC key for
    each configured trust anchor to determine whether the key has
    changed. In some unusual cases, the query might depend on a
    zone for which the server is itself authoritative, and would
    have failed if it were sent before the zone was fully loaded.
    This has now been fixed by delaying the key queries until all
    zones have finished loading.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1682424000">- Update to release 9.16.40
  Bug Fixes:
  * Logfiles using timestamp-style suffixes were not always
    correctly removed when the number of files exceeded the limit
    set by versions. This has been fixed for configurations which
    do not explicitly specify a directory path as part of the file
    argument in the channel specification.
  * Performance of DNSSEC validation in zones with many DNSKEY
    records has been improved.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1684324800">- Update to release 9.16.41
  Bug Fixes:
  * When removing delegations from an opt-out range,
    empty-non-terminal NSEC3 records generated by those delegations
    were not cleaned up. This has been fixed.
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1687348800">- Update to release 9.16.42
  Security Fixes:
  * The overmem cleaning process has been improved, to prevent the
    cache from significantly exceeding the configured
    max-cache-size limit. (CVE-2023-2828)
  * A query that prioritizes stale data over lookup triggers a
    fetch to refresh the stale data in cache. If the fetch is
    aborted for exceeding the recursion quota, it was possible for
    named to enter an infinite callback loop and crash due to stack
    overflow. This has been fixed. (CVE-2023-2911)
  Bug Fixes:
  * Previously, it was possible for a delegation from cache to be
    returned to the client after the stale-answer-client-timeout
    duration. This has been fixed.
  [bsc#1212544, bsc#1212567, jsc#SLE-24600]</changelog>
  <changelog author="dmueller@suse.com" date="1688644800">- rebuild bind-utils on libuv updates (bsc#1212090)</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1688990400">- Log named-checkconf output [bsc#1213049]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1689076800">- Add dnstap support
  [jsc#PED-4852]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1695124800">- Update to release 9.16.44
  Bug Fixes:
  * Processing already-queued queries received over TCP could cause
    an assertion failure, when the server was reconfigured at the
    same time or the cache was being flushed. This has been fixed.
  Security Fixes:
  * Previously, sending a specially crafted message over the
    control channel could cause the packet-parsing code to run out
    of available stack memory, causing named to terminate
    unexpectedly. This has been fixed. (CVE-2023-3341)
  [bsc#1215472]
- Switch to pkgconfig(libprotobuf-c) since this now contains the
  required protobuf-c binary</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1708084800">- Update to new Major Version 9.18.24.
  This has many enhancements, bug fixes and changes.
  Breaking Changes:
  * Some options have been removed and some have been deprecated
    and will be removed in the future.
    For a complete list, see:
    https://kb.isc.org/docs/changes-to-be-aware-of-when-moving-from-bind-916-to-918
  Major Changes:
  * Support for securing DNS traffic using Transport Layer Security
    (TLS). TLS is used by both DNS-over-TLS (DoT) and
    DNS-over-HTTPS (DoH).
  * Support for zone transfers over TLS (XFR-over-TLS, XoT) for
    both incoming and outgoing zone transfers.
  * The dig tool is now able to send DoT queries (+tls option).
  * Support for OpenSSL 3.0 APIs was added.
  * dnssec-checkds, dnssec-coverage, dnssec-keymgr, which have been
    removed in favor of the dnssec-policy feature
  * python3-bind is deprecated and the subpackage has been removed
  * A number of utilities have been moved from /usr/sbin to
    /usr/bin:
    named-checkconf named-checkzone named-compilezone
    dnssec-dsfromkey dnssec-importkey dnssec-keyfromlabel
    dnssec-keygen dnssec-revoke dnssec-settime dnssec-signzone
    dnssec-verify dnssec-cds named-journalprint nsec3hash
  * The lib directory was renamed from 'named' to 'bind'
  For a complete list of changes, see:
  * Bind Release Notes
    https://bind9.readthedocs.io/en/v9.18.24/notes.html
  * The CHANGES file in the source RPM
  Security Fixes:
  * Validating DNS messages containing a lot of DNSSEC signatures
    could cause excessive CPU load, leading to a denial-of-service
    condition. This has been fixed. (CVE-2023-50387)
    [bsc#1219823]
  * Preparing an NSEC3 closest encloser proof could cause excessive
    CPU load, leading to a denial-of-service condition. This has
    been fixed. (CVE-2023-50868)
    [bsc#1219826]
  * Parsing DNS messages with many different names could cause
    excessive CPU load. This has been fixed. (CVE-2023-4408)
    [bsc#1219851]
  * Specific queries could cause named to crash with an assertion
    failure when nxdomain-redirect was enabled. This has been
    fixed. (CVE-2023-5517)
    [bsc#1219852]
  * A bad interaction between DNS64 and serve-stale could cause
    named to crash with an assertion failure, when both of these
    features were enabled. This has been fixed. (CVE-2023-5679)
    [bsc#1219853]
  * Query patterns that continuously triggered cache database
    maintenance could cause an excessive amount of memory to be
    allocated, exceeding max-cache-size and potentially leading to
    all available memory on the host running named being exhausted.
    This has been fixed. (CVE-2023-6516)
    [bsc#1219854]
  Packaging notes:
  * libnghttps2 added as BuildRequires for tls support
  * named-bootconf.diff patch is obsolete and has been removed
  [jsc#PED-7932]
- Update KillMode to 'control-group' in named.service to handle
  forked processes better.
  [bsc#1215755]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1721908800">- Update to release 9.18.28
  Bug Fixes:
  * Command-line options for IPv4-only (named -4) and IPv6-only
    (named -6) modes are now respected for zone primaries,
    also-notify, and parental-agents.
  * An RPZ response’s SOA record TTL was set to 1 instead of the
    SOA TTL, if add-soa was used. This has been fixed.
  * When a query related to zone maintenance (NOTIFY, SOA) timed
    out close to a view shutdown (triggered e.g. by rndc reload),
    named could crash with an assertion failure. This has been
    fixed.
  * The statistics channel counters that indicated the number of
    currently connected TCP IPv4/IPv6 clients were not properly
    adjusted in certain failure scenarios. This has been fixed.
  * Some servers that could not be reached due to EHOSTDOWN or
    ENETDOWN conditions were incorrectly prioritized during server
    selection. These are now properly handled as unreachable.
  * On some systems the libuv call may return an error code when
    sending a TCP reset for a connection, which triggers an
    assertion failure in named. This error condition is now dealt
    with in a more graceful manner, by logging the incident and
    shutting down the connection.
  * Changes to listen-on statements were ignored on reconfiguration
    unless the port or interface address was changed, making it
    impossible to change a related listener transport type. That
    issue has been fixed.
  * A bug in the keymgr code unintentionally slowed down some
    DNSSEC key rollovers. This has been fixed.
  * Some ISO 8601 durations were accepted erroneously, leading to
    shorter durations than expected. This has been fixed
  * A regression in cache-cleaning code enabled memory use to grow
    significantly more quickly than before, until the configured
    max-cache-size limit was reached. This has been fixed.
  * Using rndc flush inadvertently caused cache cleaning to become
    less effective. This could ultimately lead to the configured
    max-cache-size limit being exceeded and has now been fixed.
  * The logic for cleaning up expired cached DNS records was
    tweaked to be more aggressive. This change helps with enforcing
    max-cache-ttl and max-ncache-ttl in a timely manner.
  * It was possible to trigger a use-after-free assertion when the
    overmem cache cleaning was initiated. This has been fixed.
  New Features:
  * A new option signatures-jitter has been added to dnssec-policy
    to allow signature expirations to be spread out over a period
    of time.
  * The statistics channel now includes counters that indicate the
    number of currently connected TCP IPv4/IPv6 clients.
  * Added RESOLVER.ARPA to the built in empty zones.
  Feature Changes:
  * DNSSEC signatures that are not valid because the current time
    falls outside the signature inception and expiration dates are
    skipped instead of causing an immediate validation failure.
  Security Fixes:
  * A malicious DNS client that sent many queries over TCP but
    never read the responses could cause a server to respond slowly
    or not at all for other clients. This has been fixed.
    (CVE-2024-0760)
    [bsc#1228255]
  * It is possible to craft excessively large resource records
    sets, which have the effect of slowing down database
    processing. This has been addressed by adding a configurable
    limit to the number of records that can be stored per name and
    type in a cache or zone database. The default is 100, which can
    be tuned with the new max-records-per-type option.
  * It is possible to craft excessively large numbers of resource
    record types for a given owner name, which has the effect of
    slowing down database processing. This has been addressed by
    adding a configurable limit to the number of records that can
    be stored per name and type in a cache or zone database. The
    default is 100, which can be tuned with the new
    max-types-per-name option. (CVE-2024-1737)
    [bsc#1228256]
  * Validating DNS messages signed using the SIG(0) protocol (RFC
    2931) could cause excessive CPU load, leading to a
    denial-of-service condition. Support for SIG(0) message
    validation was removed from this version of named.
    (CVE-2024-1975)
    [bsc#1228257]
  * Due to a logic error, lookups that triggered serving stale data
    and required lookups in local authoritative zone data could
    have resulted in an assertion failure. This has been fixed.
  * Potential data races were found in our DoH implementation,
    related to HTTP/2 session object management and endpoints set
    object management after reconfiguration. These issues have been
    fixed.
  * When looking up the NS records of parent zones as part of
    looking up DS records, it was possible for named to trigger an
    assertion failure if serve-stale was enabled. This has been
    fixed. (CVE-2024-4076)
    [bsc#1228258]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1729080000">- Update to new major version 9.20.3
  For a complete list of all changes see:
  * https://bind9.readthedocs.io/en/v9.20.3/notes.html
  * The CHANGES file in the source RPM
  Some noteworthy changes:
  * Added new BuildRequires liburcu for lock free data structures.
  * A new DNSSEC tool dnssec-ksr has been added to create Key
    Signing Request (KSR) and Signed Key Response (SKR) files.
  * /etc/bind.keys and /var/lib/named/named.root.key have been
    removed as the correct defaults are pre-compiled and there is
    no need to configure bind.keys manually.
  * The functions that were in the libbind9 shared library have
    been moved to the libisc and libisccfg libraries. The now-empty
    libbind9 has been removed and is no longer installed.
  * The irs_resconf module has been moved to the libdns shared
    library. The now-empty libirs library has been removed and is
    no longer installed.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1747742400">- Update to release 9.20.9
  Security Fixes:
  * Prevent an assertion failure when processing TSIG algorithm.
    (CVE-2025-40775)
    [bsc#1243361]
  * DNS-over-HTTPS flooding fixes.
    Fix DNS-over-HTTPS implementation issues that arise under heavy
    query load. Optimize resource usage for named instances that
    accept queries over DNS-over-HTTPS.
    Previously, named processed all incoming HTTP/2 data at once,
    which could overwhelm the server, especially when dealing with
    clients that sent requests but did not wait for responses. That
    has been fixed. Now, named handles HTTP/2 data in smaller
    chunks and throttles reading until the remote side reads the
    response data. It also throttles clients that send too many
    requests at once.
    In addition, named now evaluates excessive streams opened by
    clients that include no DNS data, which is considered
    “flooding.” It logs these clients and drops connections from
    them.
    In some cases, named could leave DNS-over-HTTPS connections in
    the CLOSE_WAIT state indefinitely. That has also been fixed.
    (CVE-2024-12705)
    [bsc#1236597]
  * Limit additional section processing for large RDATA sets.
    When answering queries, don’t add data to the additional
    section if the answer has more than 13 names in the RDATA. This
    limits the number of lookups into the database(s) during a
    single client query, reducing the query-processing load.
    (CVE-2024-11187)
    [bsc#1236596]
  Feature Changes:
  * Performance optimization for NSEC3 lookups introduced in BIND
    9.20.2 was reverted to avoid risks associated with a complex
    code change.
  * The configuration clauses parental-agents and primaries are
    renamed to remote-servers.
  * Add none parameter to query-source and query-source-v6 to
    disable IPv4 or IPv6 upstream queries but allow listening to
    queries from clients on IPv4 or IPv6.
  * dnssec-ksr now supports KSK rollovers.
  * The tool now allows for KSK generation, as well as planned KSK
    rollovers. When signing a bundle from a Key Signing Request
    (KSR), only the key that is active in that time frame is used
    for signing. Also, the CDS and CDNSKEY records are now added
    and removed at the correct time.
  * Print RFC 7314: EXPIRE option in transfer summary.
  * Emit more helpful log messages for exceeding
    max-records-per-type.
  * The new log message is emitted when adding or updating an RRset
    fails due to exceeding the max-records-per-type limit. The log
    includes the owner name and type, corresponding zone name, and
    the limit value. It will be emitted on loading a zone file,
    inbound zone transfer (both AXFR and IXFR), handling a DDNS
    update, or updating a cache DB. It’s especially helpful in the
    case of zone transfer, since the secondary side doesn’t have
    direct access to the offending zone data.
  * It could also be used for max-types-per-name, but this change
    doesn’t implement it yet as it’s much less likely to happen in
    practice.
  * Harden key management when key files have become unavailable.
  * Prior to doing key management, BIND 9 will check if the key
    files on disk match the expected keys. If key files for
    previously observed keys have become unavailable, this will
    prevent the internal key manager from running.
  New Features:
  * Add support for EDE 20 (Not Authoritative)
  * Add support for EDE 7 and EDE 8.
  * `dig` can now display the received BADVERS message during
    negotiation.
  * Add an `rndc` command to reset some statistics counters.
  * Implement the min-transfer-rate-in configuration option.
  * Add HTTPS record query to host command line tool.
  * Implement sig0key-checks-limit and sig0message-checks-limit.
  * Adds support for EDE code 1 and 2.
  * Add an rndc command to toggle jemalloc profiling.
  * Add support for multiple extended DNS errors.
  * Print the expiration time of stale records.
  * Add Extended DNS Error Code 22 - No Reachable Authority.
  * Add a new option to configure the maximum number of outgoing
    queries per client request.
  * Use the Server Name Indication (SNI) extension for all outgoing
    TLS connections.
  * Update built-in bind.keys file with the new 2025 IANA root key.
  * Add an initial-ds entry to bind.keys for the new root key, ID
    38696, which is scheduled for publication in January 2025.
  Bug Fixes:
  * Restore NSEC3 closest-encloser lookup improvements.
  * Stop caching lack of EDNS support.
  * Fix resolver statistics counters for timed-out responses.
  * Nested DNS validation could cause an assertion failure.
  * Wait for memory reclamation to finish in `named-checkconf`.
  * Ensure `max-clients-per-query` is at least `clients-per-query`.
  * Fix write after free in validator code.
  * Don't enforce NOAUTH/NOCONF flags in DNSKEYs.
  * Fix several small DNSSEC timing issues.
  * Fix inconsistency in CNAME/DNAME handling during resolution.
  * Fix dual-stack-servers configuration option.
  * Fix a data race causing a permanent active client increase.
  * Fix deferred validation of unsigned DS and DNSKEY records.
  * Fix RPZ race condition during a reconfiguration.
  * “CNAME and other data check” not applied to all types.
  * Relax private DNSKEY and RRSIG constraints.
  * Remove NSEC/DS/NSEC3 RRSIG check from dns_message_parse().
  * Fix TTL issue with ANY queries processed through RPZ
    “passthru”.
  * dnssec-signzone needs to check for a NULL key when setting
    offline.
  * Fix a bug in the statistics channel when querying zone transfer
    information.
  * Fix assertion failure when dumping recursing clients.
  * Dump the active resolver fetches from
    dns_resolver_dumpfetches().
  * Recently expired records could be returned with a timestamp in
    future.
  * YAML string not terminated in negative response in delv.
  * Fix a bug in dnssec-signzone related to keys being offline.
  * Apply the memory limit only to ADB database items.
  * Avoid unnecessary locking in the zone/cache database.
  * Fix reporting of Extended DNS Error 22 (No Reachable
    Authority).
  * Fix nsupdate hang when processing a large update.
  * Fix possible assertion failure when reloading server while
    processing update policy rules.
  * Preserve cache across reconfig when using attach-cache.
  * Resolve the spurious drops in performance due to glue cache.
  * Fix dnssec-signzone signing non-DNSKEY RRsets with revoked
    keys.
  * Fix improper handling of unknown directives in resolv.conf.
  * Fix response policy zones and catalog zones with an $INCLUDE
    statement defined.
  * Use TLS for notifies if configured to do so.
  * Notifies configured to use TLS will now be sent over TLS,
    instead of plain text UDP or TCP. Also, failing to load the TLS
    configuration for notify now results in an error.
  * {&amp;dns} is as valid as {?dns} in a SVCB’s dohpath.
  * dig failed to parse a valid SVCB record with a dohpath URI
    template containing a {&amp;dns}, like
    dohpath=/some/path?key=value{&amp;dns}”.
  * Fix NSEC3 closest encloser lookup for names with empty
    non-terminals.
  * A previous performance optimization for finding the NSEC3
    closest encloser when generating authoritative responses could
    cause servers to return incorrect NSEC3 records in some cases.
    This has been fixed.
  * recursive-clients statement with value 0 triggered an assertion
    failure.
  * BIND 9.20.0 broke recursive-clients 0;. This has now been
    fixed.
  * Parsing of hostnames in rndc.conf was broken.
  * When DSCP support was removed, parsing of hostnames in
    rndc.conf was accidentally broken, resulting in an assertion
    failure. This has been fixed.
  * dig options of the form [+-]option=&lt;value&gt; failed to display
    the value on the printed command line. This has been fixed.
  * Provide more visibility into TLS configuration errors by
    logging SSL_CTX_use_certificate_chain_file() and
    SSL_CTX_use_PrivateKey_file() errors individually.
  * Fix a race condition when canceling ADB find which could cause
    an assertion failure.
  * SERVFAIL cache memory cleaning is now more aggressive; it no
    longer consumes a lot of memory if the server encounters many
    SERVFAILs at once.
  * Fix trying the next primary XoT server when the previous one
    was marked as unreachable.
  * In some cases named failed to try the next primary server in
    the primaries list when the previous one was marked as
    unreachable. This has been fixed.
- CHANGES file has been removed, the changes are now only listed in
  the ARM docs available in the bind-doc package.</changelog>
</package>
<package pkgid="689fd5169560dfafd116ad5d64cfff1b281b6c3cebd156c896f03c65c1d3f19f" name="binutils" arch="src">
  <version epoch="0" ver="2.45" rel="150100.7.57.1"/>
  <changelog author="schwab@suse.de" date="1708516800">- riscv-no-relax.patch: RISC-V: Don't generate branch/jump relocation if
  symbol is local when no-relax</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="bwiedemann@suse.com" date="1714564800">- Allow to disable profiling</changelog>
  <changelog author="schwab@suse.de" date="1718280000">- binutils-pr22868.diff: Remove obsolete patch
- Undefine _FORTIFY_SOURCE when running checks</changelog>
  <changelog author="matz@suse.com" date="1722945600">- Update to version 2.43:
  * new .base64 pseudo-op, allowing base64 encoded data as strings
  * Intel APX: add support for CFCMOV, CCMP, CTEST, zero-upper, NF
    (APX_F now fully supported)
  * x86 Intel syntax now warns about more mnemonic suffixes
  * macros and .irp/.irpc/.rept bodies can use \+ to get at number
    of times the macro/body was executed
  * aarch64: support 'armv9.5-a' for -march, add support for LUT
    and LUT2
  * s390: base register operand in D(X,B) and D(L,B) can now be
    omitted (ala 'D(X,)'); warn when register type doesn't match
    operand type (use option
    'warn-regtype-mismatch=[strict|relaxed|no]' to adjust)
  * riscv: support various extensions: Zacas, Zcmp, Zfbfmin,
    Zvfbfmin, Zvfbfwma, Smcsrind/Sscsrind, XCvMem, XCvBi, XCvElw,
    XSfCease, all at version 1.0;
    remove support for assembly of privileged spec 1.9.1 (linking
    support remains)
  * arm: remove support for some old co-processors: Maverick and FPA
  * mips: '--trap' now causes either trap or breakpoint instructions
    to be emitted as per current ISA, instead of always using trap
    insn and failing when current ISA was incompatible with that
  * LoongArch: accept .option pseudo-op for fine-grained control
    of assembly code options; add support for DT_RELR
  * readelf: now displays RELR relocations in full detail;
    add -j/--display-section to show just those section(s) content
    according to their type
  * objdump/readelf now dump also .eh_frame_hdr (when present) when
    dumping .eh_frame
  * gprofng: add event types for AMD Zen3/Zen4 and Intel Ice Lake
    processors; add minimal support for riscv
  * linker:
  - put .got and .got.plt into relro segment
  - add -z isa-level-report=[none|all|needed|used] to the x86 ELF
    linker to report needed and used x86-64 ISA levels
  - add --rosegment option which changes the -z separate-code
    option so that only one read-only segment is created (instead
    of two)
  - add --section-ordering-file &lt;FILE&gt; option to add extra
    mapping of input sections to output sections
  - add -plugin-save-temps to store plugin intermediate files
    permanently
- Removed binutils-2.42.tar.bz2, binutils-2.42-branch.diff.gz.
- Added binutils-2.43.tar.bz2, binutils-2.43-branch.diff.gz.
- Removed upstream patch riscv-no-relax.patch.
- Rebased ld-relro.diff and binutils-revert-rela.diff.</changelog>
  <changelog author="matz@suse.com" date="1724846400">- Update to current 2.43.1 branch [PED-10474]:
  * PR32109 - fuzzing problem
  * PR32083 - LTO vs overridden common symbols
  * PR32067 - crash with LTO-plugin and --oformat=binary
  * PR31956 - LTO vs wrapper symbols
  * riscv - add Zimop and Zcmop extensions
- Adjusted binutils-2.43-branch.diff.gz.</changelog>
  <changelog author="martin.liska@hey.com" date="1725969600">- Enable zstd compression algorithm (instead of zlib)
  for debug info sections by default.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="jslaby@suse.cz" date="1732104000">- drop ld-relro.diff (relro is the default for some time)
  and it warns on avr spuriously (bsc#1233520)</changelog>
  <changelog author="matz@suse.com" date="1733745600">- Update to current 2.43.1 branch [PED-10254, PED-10306]:
  * s390 - Add arch15 instructions
  * various fixes from upstream: PR32153, PR32171, PR32189,
    PR32196, PR32191, PR32109, PR32372, PR32387
- Adjusted binutils-2.43-branch.diff.gz.
- Disable zstd-by-default again (needs adjustments in at least
  golang,llvm15,llvm17 first)
- Add binutils-fix-branch.diff.
- Check non-changing of flex/bison inputs only after applying
  branch and fix-branch diffs.</changelog>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
</package>
<package pkgid="869d3fe526fea1356ae3f107204968e24f7cf816dfd66628c0c3aab27fd8ee15" name="binutils" arch="x86_64">
  <version epoch="0" ver="2.45" rel="150100.7.57.1"/>
  <changelog author="schwab@suse.de" date="1708516800">- riscv-no-relax.patch: RISC-V: Don't generate branch/jump relocation if
  symbol is local when no-relax</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="bwiedemann@suse.com" date="1714564800">- Allow to disable profiling</changelog>
  <changelog author="schwab@suse.de" date="1718280000">- binutils-pr22868.diff: Remove obsolete patch
- Undefine _FORTIFY_SOURCE when running checks</changelog>
  <changelog author="matz@suse.com" date="1722945600">- Update to version 2.43:
  * new .base64 pseudo-op, allowing base64 encoded data as strings
  * Intel APX: add support for CFCMOV, CCMP, CTEST, zero-upper, NF
    (APX_F now fully supported)
  * x86 Intel syntax now warns about more mnemonic suffixes
  * macros and .irp/.irpc/.rept bodies can use \+ to get at number
    of times the macro/body was executed
  * aarch64: support 'armv9.5-a' for -march, add support for LUT
    and LUT2
  * s390: base register operand in D(X,B) and D(L,B) can now be
    omitted (ala 'D(X,)'); warn when register type doesn't match
    operand type (use option
    'warn-regtype-mismatch=[strict|relaxed|no]' to adjust)
  * riscv: support various extensions: Zacas, Zcmp, Zfbfmin,
    Zvfbfmin, Zvfbfwma, Smcsrind/Sscsrind, XCvMem, XCvBi, XCvElw,
    XSfCease, all at version 1.0;
    remove support for assembly of privileged spec 1.9.1 (linking
    support remains)
  * arm: remove support for some old co-processors: Maverick and FPA
  * mips: '--trap' now causes either trap or breakpoint instructions
    to be emitted as per current ISA, instead of always using trap
    insn and failing when current ISA was incompatible with that
  * LoongArch: accept .option pseudo-op for fine-grained control
    of assembly code options; add support for DT_RELR
  * readelf: now displays RELR relocations in full detail;
    add -j/--display-section to show just those section(s) content
    according to their type
  * objdump/readelf now dump also .eh_frame_hdr (when present) when
    dumping .eh_frame
  * gprofng: add event types for AMD Zen3/Zen4 and Intel Ice Lake
    processors; add minimal support for riscv
  * linker:
  - put .got and .got.plt into relro segment
  - add -z isa-level-report=[none|all|needed|used] to the x86 ELF
    linker to report needed and used x86-64 ISA levels
  - add --rosegment option which changes the -z separate-code
    option so that only one read-only segment is created (instead
    of two)
  - add --section-ordering-file &lt;FILE&gt; option to add extra
    mapping of input sections to output sections
  - add -plugin-save-temps to store plugin intermediate files
    permanently
- Removed binutils-2.42.tar.bz2, binutils-2.42-branch.diff.gz.
- Added binutils-2.43.tar.bz2, binutils-2.43-branch.diff.gz.
- Removed upstream patch riscv-no-relax.patch.
- Rebased ld-relro.diff and binutils-revert-rela.diff.</changelog>
  <changelog author="matz@suse.com" date="1724846400">- Update to current 2.43.1 branch [PED-10474]:
  * PR32109 - fuzzing problem
  * PR32083 - LTO vs overridden common symbols
  * PR32067 - crash with LTO-plugin and --oformat=binary
  * PR31956 - LTO vs wrapper symbols
  * riscv - add Zimop and Zcmop extensions
- Adjusted binutils-2.43-branch.diff.gz.</changelog>
  <changelog author="martin.liska@hey.com" date="1725969600">- Enable zstd compression algorithm (instead of zlib)
  for debug info sections by default.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="jslaby@suse.cz" date="1732104000">- drop ld-relro.diff (relro is the default for some time)
  and it warns on avr spuriously (bsc#1233520)</changelog>
  <changelog author="matz@suse.com" date="1733745600">- Update to current 2.43.1 branch [PED-10254, PED-10306]:
  * s390 - Add arch15 instructions
  * various fixes from upstream: PR32153, PR32171, PR32189,
    PR32196, PR32191, PR32109, PR32372, PR32387
- Adjusted binutils-2.43-branch.diff.gz.
- Disable zstd-by-default again (needs adjustments in at least
  golang,llvm15,llvm17 first)
- Add binutils-fix-branch.diff.
- Check non-changing of flex/bison inputs only after applying
  branch and fix-branch diffs.</changelog>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
</package>
<package pkgid="9380aa83557eff5a126809b73a5b4a25a618de84b0995141edf4426be4e4678c" name="binutils-devel" arch="x86_64">
  <version epoch="0" ver="2.45" rel="150100.7.57.1"/>
  <changelog author="schwab@suse.de" date="1708516800">- riscv-no-relax.patch: RISC-V: Don't generate branch/jump relocation if
  symbol is local when no-relax</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="bwiedemann@suse.com" date="1714564800">- Allow to disable profiling</changelog>
  <changelog author="schwab@suse.de" date="1718280000">- binutils-pr22868.diff: Remove obsolete patch
- Undefine _FORTIFY_SOURCE when running checks</changelog>
  <changelog author="matz@suse.com" date="1722945600">- Update to version 2.43:
  * new .base64 pseudo-op, allowing base64 encoded data as strings
  * Intel APX: add support for CFCMOV, CCMP, CTEST, zero-upper, NF
    (APX_F now fully supported)
  * x86 Intel syntax now warns about more mnemonic suffixes
  * macros and .irp/.irpc/.rept bodies can use \+ to get at number
    of times the macro/body was executed
  * aarch64: support 'armv9.5-a' for -march, add support for LUT
    and LUT2
  * s390: base register operand in D(X,B) and D(L,B) can now be
    omitted (ala 'D(X,)'); warn when register type doesn't match
    operand type (use option
    'warn-regtype-mismatch=[strict|relaxed|no]' to adjust)
  * riscv: support various extensions: Zacas, Zcmp, Zfbfmin,
    Zvfbfmin, Zvfbfwma, Smcsrind/Sscsrind, XCvMem, XCvBi, XCvElw,
    XSfCease, all at version 1.0;
    remove support for assembly of privileged spec 1.9.1 (linking
    support remains)
  * arm: remove support for some old co-processors: Maverick and FPA
  * mips: '--trap' now causes either trap or breakpoint instructions
    to be emitted as per current ISA, instead of always using trap
    insn and failing when current ISA was incompatible with that
  * LoongArch: accept .option pseudo-op for fine-grained control
    of assembly code options; add support for DT_RELR
  * readelf: now displays RELR relocations in full detail;
    add -j/--display-section to show just those section(s) content
    according to their type
  * objdump/readelf now dump also .eh_frame_hdr (when present) when
    dumping .eh_frame
  * gprofng: add event types for AMD Zen3/Zen4 and Intel Ice Lake
    processors; add minimal support for riscv
  * linker:
  - put .got and .got.plt into relro segment
  - add -z isa-level-report=[none|all|needed|used] to the x86 ELF
    linker to report needed and used x86-64 ISA levels
  - add --rosegment option which changes the -z separate-code
    option so that only one read-only segment is created (instead
    of two)
  - add --section-ordering-file &lt;FILE&gt; option to add extra
    mapping of input sections to output sections
  - add -plugin-save-temps to store plugin intermediate files
    permanently
- Removed binutils-2.42.tar.bz2, binutils-2.42-branch.diff.gz.
- Added binutils-2.43.tar.bz2, binutils-2.43-branch.diff.gz.
- Removed upstream patch riscv-no-relax.patch.
- Rebased ld-relro.diff and binutils-revert-rela.diff.</changelog>
  <changelog author="matz@suse.com" date="1724846400">- Update to current 2.43.1 branch [PED-10474]:
  * PR32109 - fuzzing problem
  * PR32083 - LTO vs overridden common symbols
  * PR32067 - crash with LTO-plugin and --oformat=binary
  * PR31956 - LTO vs wrapper symbols
  * riscv - add Zimop and Zcmop extensions
- Adjusted binutils-2.43-branch.diff.gz.</changelog>
  <changelog author="martin.liska@hey.com" date="1725969600">- Enable zstd compression algorithm (instead of zlib)
  for debug info sections by default.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="jslaby@suse.cz" date="1732104000">- drop ld-relro.diff (relro is the default for some time)
  and it warns on avr spuriously (bsc#1233520)</changelog>
  <changelog author="matz@suse.com" date="1733745600">- Update to current 2.43.1 branch [PED-10254, PED-10306]:
  * s390 - Add arch15 instructions
  * various fixes from upstream: PR32153, PR32171, PR32189,
    PR32196, PR32191, PR32109, PR32372, PR32387
- Adjusted binutils-2.43-branch.diff.gz.
- Disable zstd-by-default again (needs adjustments in at least
  golang,llvm15,llvm17 first)
- Add binutils-fix-branch.diff.
- Check non-changing of flex/bison inputs only after applying
  branch and fix-branch diffs.</changelog>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
</package>
<package pkgid="9396e8c2f0b906c590b030befcc8af81df60da955ac72a68801c73e2b4d3932b" name="boost" arch="src">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="a6d76b2c7a9b12eb4f6e429634cf222eaf7e9a7088654781a53df4a96dc10b14" name="boost-base" arch="src">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="11dcd8b0dfd3845ca40058b1a64714347c28ddbe72c6d6cc5ed7c05ed2b98b2e" name="boost-license1_66_0" arch="noarch">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="b9328921f46b1fe5e6b4cd7b17f91499f9c62904fa9c02aaade60b620815160c" name="brlapi-devel" arch="x86_64">
  <version epoch="0" ver="6.6" rel="150600.3.3.1"/>
  <changelog author="mgorse@suse.com" date="1602676800">- Add coreutils and util-linux to post requires (boo#1177656).</changelog>
  <changelog author="mgorse@suse.com" date="1609502400">- Update to version 6.2:
  + See ChangeLog for changes.
- Update api_version: now 0.8.1.
- Replace brltty-5.5-systemd-install.patch with
  brltty-fix-install-dirs.patch: also adjust udev directory.
- Drop brltty-gcc10.patch: fixed upstream.
- Move udev rules patching to %build.
- Use the Makefile to install udev and polkit rules and docs.
- Brltty-config has been renamed to brltty-config.sh.
- Remove polkit conditional: we always have it enabled.
- Remove old espeak support: Leap prior to 15.0 is no longer
  supported.
- Add python3-setuptools to BuildRequires: required by rpm during
  checks.
- Add doxygen to BuildRequires: needed to build manual.
- Create a brltty user on install: now expected by service.</changelog>
  <changelog author="dimstar@opensuse.org" date="1610884800">- Starting with the TCL 8.6.11 package, the default install path
  for the TCL library is corrected to /usr/lib64/tcl: adjust the
  move command for our tcl module basedon this change.</changelog>
  <changelog author="mgorse@suse.com" date="1612267200">- Update to version 6.3:
  + See ChangeLog for changes.
- API version is now 0.8.2.
- Drop brltty-fix-install-dirs.patch: no longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1632571200">- Update to version 6.4:
  + See ChangeLog for changes.
- API version is now 0.8.3.
- Add at-spi2 to BuildRequires. Now needed for at-spi driver.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1633089600">- Use sysuser-tools to process included sysusers.d file correctly
  (bsc#1191465)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1633176000">- Move sysusers.d to separate package
- Remove old SUSE RPM constructs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1637668800">- Add all sysusers.d Requires</changelog>
  <changelog author="ohering@suse.de" date="1639483200">- Add python-rpm-macros (bsc#1180125)</changelog>
  <changelog author="dimstar@opensuse.org" date="1644494400">- Pass --with-tables-directory=%{_datadir}/%{name} to configure: do
  not install the tables to /etc, as they are not supposed to be
  modified by local admins.</changelog>
  <changelog author="mgorse@suse.com" date="1655121600">- Update to version 6.5
- Update api_version.
- Add brltty-udev-dir.patch: install udev rules into /usr/lib.
- Remove the custom disabling of rules for generic USB serial
  devices, since upstream now has these separated out. Instead,
  provide these rules in a udev-generic package.</changelog>
  <changelog author="olaf@aepfle.de" date="1671278400">- Use tmpfiles_create_package
- Use sysuser-tools unconditionally (bsc#1205161)</changelog>
  <changelog author="fbui@suse.com" date="1687262400">- Don't use %tmpfiles_create_package anymore.
  This macro cannot work on transactional systems. However this macro was
  supposed to be used only when the tmpfiles stuff was needed in advance, which
  doesn't seem to be the case for brltty.</changelog>
  <changelog author="olaf@aepfle.de" date="1687262401">- Use conditionals for sysusers_requires to allow quilt setup
- Remove workarounds for old TCL
- Enable parallel build again</changelog>
  <changelog author="mgorse@suse.com" date="1690459200">- Update to version 6.6:
  + Too many changes; please read ChangeLog
- Update api_version.
- Rebase brltty-udev-dir.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692187200">- Add e6707d5e.patch: brlapi: Fix python crash on connection error.
  Cython 3.0 started using the new Python object finalization APIs
  from PEP 442.</changelog>
  <changelog author="olaf@aepfle.de" date="1701345600">- Disable parallel build again</changelog>
  <changelog author="ohering@suse.de" date="1702382400">- Use ocaml-rpm-macros to track OCaml ABI
- Reduce amount of rpmlint warnings with brltty.rpmlintrc</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1702468800">- README.SUSE: add documentation about the state of security of the brltty
  daemon (bsc#1214158).</changelog>
  <changelog author="mgorse@suse.com" date="1746532800">- Set umask to generate brlapi.key with correct permissions; avoid
  having the file temporarily world-readable (bsc#1235438).</changelog>
</package>
<package pkgid="5907257165b8668592c95baed7dd1c7b339efbe9d701b1681ff770d1cb502d8b" name="brlapi-devel" arch="x86_64">
  <version epoch="0" ver="6.6" rel="150600.3.5.1"/>
  <changelog author="mgorse@suse.com" date="1602676800">- Add coreutils and util-linux to post requires (boo#1177656).</changelog>
  <changelog author="mgorse@suse.com" date="1609502400">- Update to version 6.2:
  + See ChangeLog for changes.
- Update api_version: now 0.8.1.
- Replace brltty-5.5-systemd-install.patch with
  brltty-fix-install-dirs.patch: also adjust udev directory.
- Drop brltty-gcc10.patch: fixed upstream.
- Move udev rules patching to %build.
- Use the Makefile to install udev and polkit rules and docs.
- Brltty-config has been renamed to brltty-config.sh.
- Remove polkit conditional: we always have it enabled.
- Remove old espeak support: Leap prior to 15.0 is no longer
  supported.
- Add python3-setuptools to BuildRequires: required by rpm during
  checks.
- Add doxygen to BuildRequires: needed to build manual.
- Create a brltty user on install: now expected by service.</changelog>
  <changelog author="dimstar@opensuse.org" date="1610884800">- Starting with the TCL 8.6.11 package, the default install path
  for the TCL library is corrected to /usr/lib64/tcl: adjust the
  move command for our tcl module basedon this change.</changelog>
  <changelog author="mgorse@suse.com" date="1612267200">- Update to version 6.3:
  + See ChangeLog for changes.
- API version is now 0.8.2.
- Drop brltty-fix-install-dirs.patch: no longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1632571200">- Update to version 6.4:
  + See ChangeLog for changes.
- API version is now 0.8.3.
- Add at-spi2 to BuildRequires. Now needed for at-spi driver.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1633089600">- Use sysuser-tools to process included sysusers.d file correctly
  (bsc#1191465)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1633176000">- Move sysusers.d to separate package
- Remove old SUSE RPM constructs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1637668800">- Add all sysusers.d Requires</changelog>
  <changelog author="ohering@suse.de" date="1639483200">- Add python-rpm-macros (bsc#1180125)</changelog>
  <changelog author="dimstar@opensuse.org" date="1644494400">- Pass --with-tables-directory=%{_datadir}/%{name} to configure: do
  not install the tables to /etc, as they are not supposed to be
  modified by local admins.</changelog>
  <changelog author="mgorse@suse.com" date="1655121600">- Update to version 6.5
- Update api_version.
- Add brltty-udev-dir.patch: install udev rules into /usr/lib.
- Remove the custom disabling of rules for generic USB serial
  devices, since upstream now has these separated out. Instead,
  provide these rules in a udev-generic package.</changelog>
  <changelog author="olaf@aepfle.de" date="1671278400">- Use tmpfiles_create_package
- Use sysuser-tools unconditionally (bsc#1205161)</changelog>
  <changelog author="fbui@suse.com" date="1687262400">- Don't use %tmpfiles_create_package anymore.
  This macro cannot work on transactional systems. However this macro was
  supposed to be used only when the tmpfiles stuff was needed in advance, which
  doesn't seem to be the case for brltty.</changelog>
  <changelog author="olaf@aepfle.de" date="1687262401">- Use conditionals for sysusers_requires to allow quilt setup
- Remove workarounds for old TCL
- Enable parallel build again</changelog>
  <changelog author="mgorse@suse.com" date="1690459200">- Update to version 6.6:
  + Too many changes; please read ChangeLog
- Update api_version.
- Rebase brltty-udev-dir.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692187200">- Add e6707d5e.patch: brlapi: Fix python crash on connection error.
  Cython 3.0 started using the new Python object finalization APIs
  from PEP 442.</changelog>
  <changelog author="olaf@aepfle.de" date="1701345600">- Disable parallel build again</changelog>
  <changelog author="ohering@suse.de" date="1702382400">- Use ocaml-rpm-macros to track OCaml ABI
- Reduce amount of rpmlint warnings with brltty.rpmlintrc</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1702468800">- README.SUSE: add documentation about the state of security of the brltty
  daemon (bsc#1214158).</changelog>
  <changelog author="mgorse@suse.com" date="1746532800">- Set umask to generate brlapi.key with correct permissions; avoid
  having the file temporarily world-readable (bsc#1235438).</changelog>
</package>
<package pkgid="ef5b88f4edd519e84a9197018fdf413f0a6f8b11b87666e09d1fc7fdd330aefe" name="brltty" arch="src">
  <version epoch="0" ver="6.6" rel="150600.3.3.1"/>
  <changelog author="mgorse@suse.com" date="1602676800">- Add coreutils and util-linux to post requires (boo#1177656).</changelog>
  <changelog author="mgorse@suse.com" date="1609502400">- Update to version 6.2:
  + See ChangeLog for changes.
- Update api_version: now 0.8.1.
- Replace brltty-5.5-systemd-install.patch with
  brltty-fix-install-dirs.patch: also adjust udev directory.
- Drop brltty-gcc10.patch: fixed upstream.
- Move udev rules patching to %build.
- Use the Makefile to install udev and polkit rules and docs.
- Brltty-config has been renamed to brltty-config.sh.
- Remove polkit conditional: we always have it enabled.
- Remove old espeak support: Leap prior to 15.0 is no longer
  supported.
- Add python3-setuptools to BuildRequires: required by rpm during
  checks.
- Add doxygen to BuildRequires: needed to build manual.
- Create a brltty user on install: now expected by service.</changelog>
  <changelog author="dimstar@opensuse.org" date="1610884800">- Starting with the TCL 8.6.11 package, the default install path
  for the TCL library is corrected to /usr/lib64/tcl: adjust the
  move command for our tcl module basedon this change.</changelog>
  <changelog author="mgorse@suse.com" date="1612267200">- Update to version 6.3:
  + See ChangeLog for changes.
- API version is now 0.8.2.
- Drop brltty-fix-install-dirs.patch: no longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1632571200">- Update to version 6.4:
  + See ChangeLog for changes.
- API version is now 0.8.3.
- Add at-spi2 to BuildRequires. Now needed for at-spi driver.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1633089600">- Use sysuser-tools to process included sysusers.d file correctly
  (bsc#1191465)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1633176000">- Move sysusers.d to separate package
- Remove old SUSE RPM constructs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1637668800">- Add all sysusers.d Requires</changelog>
  <changelog author="ohering@suse.de" date="1639483200">- Add python-rpm-macros (bsc#1180125)</changelog>
  <changelog author="dimstar@opensuse.org" date="1644494400">- Pass --with-tables-directory=%{_datadir}/%{name} to configure: do
  not install the tables to /etc, as they are not supposed to be
  modified by local admins.</changelog>
  <changelog author="mgorse@suse.com" date="1655121600">- Update to version 6.5
- Update api_version.
- Add brltty-udev-dir.patch: install udev rules into /usr/lib.
- Remove the custom disabling of rules for generic USB serial
  devices, since upstream now has these separated out. Instead,
  provide these rules in a udev-generic package.</changelog>
  <changelog author="olaf@aepfle.de" date="1671278400">- Use tmpfiles_create_package
- Use sysuser-tools unconditionally (bsc#1205161)</changelog>
  <changelog author="fbui@suse.com" date="1687262400">- Don't use %tmpfiles_create_package anymore.
  This macro cannot work on transactional systems. However this macro was
  supposed to be used only when the tmpfiles stuff was needed in advance, which
  doesn't seem to be the case for brltty.</changelog>
  <changelog author="olaf@aepfle.de" date="1687262401">- Use conditionals for sysusers_requires to allow quilt setup
- Remove workarounds for old TCL
- Enable parallel build again</changelog>
  <changelog author="mgorse@suse.com" date="1690459200">- Update to version 6.6:
  + Too many changes; please read ChangeLog
- Update api_version.
- Rebase brltty-udev-dir.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692187200">- Add e6707d5e.patch: brlapi: Fix python crash on connection error.
  Cython 3.0 started using the new Python object finalization APIs
  from PEP 442.</changelog>
  <changelog author="olaf@aepfle.de" date="1701345600">- Disable parallel build again</changelog>
  <changelog author="ohering@suse.de" date="1702382400">- Use ocaml-rpm-macros to track OCaml ABI
- Reduce amount of rpmlint warnings with brltty.rpmlintrc</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1702468800">- README.SUSE: add documentation about the state of security of the brltty
  daemon (bsc#1214158).</changelog>
  <changelog author="mgorse@suse.com" date="1746532800">- Set umask to generate brlapi.key with correct permissions; avoid
  having the file temporarily world-readable (bsc#1235438).</changelog>
</package>
<package pkgid="706d51ccfb1ad20fbeb9a3e64926f62d1f4efa289d2f13aa269c9835168e05b2" name="brltty" arch="src">
  <version epoch="0" ver="6.6" rel="150600.3.5.1"/>
  <changelog author="mgorse@suse.com" date="1602676800">- Add coreutils and util-linux to post requires (boo#1177656).</changelog>
  <changelog author="mgorse@suse.com" date="1609502400">- Update to version 6.2:
  + See ChangeLog for changes.
- Update api_version: now 0.8.1.
- Replace brltty-5.5-systemd-install.patch with
  brltty-fix-install-dirs.patch: also adjust udev directory.
- Drop brltty-gcc10.patch: fixed upstream.
- Move udev rules patching to %build.
- Use the Makefile to install udev and polkit rules and docs.
- Brltty-config has been renamed to brltty-config.sh.
- Remove polkit conditional: we always have it enabled.
- Remove old espeak support: Leap prior to 15.0 is no longer
  supported.
- Add python3-setuptools to BuildRequires: required by rpm during
  checks.
- Add doxygen to BuildRequires: needed to build manual.
- Create a brltty user on install: now expected by service.</changelog>
  <changelog author="dimstar@opensuse.org" date="1610884800">- Starting with the TCL 8.6.11 package, the default install path
  for the TCL library is corrected to /usr/lib64/tcl: adjust the
  move command for our tcl module basedon this change.</changelog>
  <changelog author="mgorse@suse.com" date="1612267200">- Update to version 6.3:
  + See ChangeLog for changes.
- API version is now 0.8.2.
- Drop brltty-fix-install-dirs.patch: no longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1632571200">- Update to version 6.4:
  + See ChangeLog for changes.
- API version is now 0.8.3.
- Add at-spi2 to BuildRequires. Now needed for at-spi driver.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1633089600">- Use sysuser-tools to process included sysusers.d file correctly
  (bsc#1191465)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1633176000">- Move sysusers.d to separate package
- Remove old SUSE RPM constructs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1637668800">- Add all sysusers.d Requires</changelog>
  <changelog author="ohering@suse.de" date="1639483200">- Add python-rpm-macros (bsc#1180125)</changelog>
  <changelog author="dimstar@opensuse.org" date="1644494400">- Pass --with-tables-directory=%{_datadir}/%{name} to configure: do
  not install the tables to /etc, as they are not supposed to be
  modified by local admins.</changelog>
  <changelog author="mgorse@suse.com" date="1655121600">- Update to version 6.5
- Update api_version.
- Add brltty-udev-dir.patch: install udev rules into /usr/lib.
- Remove the custom disabling of rules for generic USB serial
  devices, since upstream now has these separated out. Instead,
  provide these rules in a udev-generic package.</changelog>
  <changelog author="olaf@aepfle.de" date="1671278400">- Use tmpfiles_create_package
- Use sysuser-tools unconditionally (bsc#1205161)</changelog>
  <changelog author="fbui@suse.com" date="1687262400">- Don't use %tmpfiles_create_package anymore.
  This macro cannot work on transactional systems. However this macro was
  supposed to be used only when the tmpfiles stuff was needed in advance, which
  doesn't seem to be the case for brltty.</changelog>
  <changelog author="olaf@aepfle.de" date="1687262401">- Use conditionals for sysusers_requires to allow quilt setup
- Remove workarounds for old TCL
- Enable parallel build again</changelog>
  <changelog author="mgorse@suse.com" date="1690459200">- Update to version 6.6:
  + Too many changes; please read ChangeLog
- Update api_version.
- Rebase brltty-udev-dir.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692187200">- Add e6707d5e.patch: brlapi: Fix python crash on connection error.
  Cython 3.0 started using the new Python object finalization APIs
  from PEP 442.</changelog>
  <changelog author="olaf@aepfle.de" date="1701345600">- Disable parallel build again</changelog>
  <changelog author="ohering@suse.de" date="1702382400">- Use ocaml-rpm-macros to track OCaml ABI
- Reduce amount of rpmlint warnings with brltty.rpmlintrc</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1702468800">- README.SUSE: add documentation about the state of security of the brltty
  daemon (bsc#1214158).</changelog>
  <changelog author="mgorse@suse.com" date="1746532800">- Set umask to generate brlapi.key with correct permissions; avoid
  having the file temporarily world-readable (bsc#1235438).</changelog>
</package>
<package pkgid="80765597c0e6bb32fa32aa5bdd852f4d63aced18395a969e7263369305d02c86" name="brotli" arch="src">
  <version epoch="0" ver="1.0.7" rel="150200.3.5.1"/>
  <changelog author="buschmann23@opensuse.org" date="1490356800">- initial package</changelog>
  <changelog author="buschmann23@opensuse.org" date="1498219200">- update to Brotli 0.6.0
  + better compression on 1MiB+ files
  + update "common" API to make dictionary fetching more flexible
  + fix decoder bug #502
  + faster compression on mid-low quality levels
  + fix encoder q10-11 slowdown after long copy #468
  + introduce Brotli*TakeOutput API
- now build shared libraries and development files in the following
  new packages:
  + libbrotlicommon0_6_0
  + libbrotlicommon-devel
  + libbrotlidec0_6_0
  + libbrotlidec-devel
  + libbrotlienc0_6_0
  + libbrtolienc-devel</changelog>
  <changelog author="buschmann23@opensuse.org" date="1505908800">- spec file changes
  + improve package description</changelog>
  <changelog author="buschmann23@opensuse.org" date="1508846400">- update to Brotli 1.0.1
  + updated README.md
  + fixed parallel exeuction of CMake "compatibility" tests
- update to Brotli 1.0.0
  + new CLI; bro -&gt; brotli; + man page
  + remove "custom dictionary" support
  + add ability to side-load brotli RFC dictionary
  + add decoder API to avoid ringbuffer reallocation
  + PY streaming decompression support
  + PY wrapper accepts memview
- spec file changes
  + improve descriptions
  + add man pages</changelog>
  <changelog author="buschmann23@opensuse.org" date="1512043200">- update to Brotli 1.0.2
  + Major chnages
  * added Autotools build files
  * switched shared library version to libtool scheme
  + Minor changes
  * BrotliDictionary members are not const now
  * ZopfliNode distance could be up to 128MiB
  * fixed API documentation typos
  * total_out is always set by decoder
  * fixed BROTLI_ENSURE_CAPACITY macro; no-op in preprocessed output
  + Other changes
  * fixed scripts for oss-fuzz, test them with Travis
  * made Bazel JNI tests less messy
  * fixed linter warnings in JS decoder
  * fixed permissions of various files
  * added Bazel build to Appveyor matrix
  * added Sieve dictionary generator</changelog>
  <changelog author="pgajdos@suse.com" date="1513771200">- build for SLE_12 and SLE_12_SP1</changelog>
  <changelog author="jengelh@inai.de" date="1514635200">- Avoid shipping duplicate files.
  Avoid shipping README.md, this just contains the description -
  and build instructions.
- Drop duplicate Requires on -devel.</changelog>
  <changelog author="jengelh@inai.de" date="1514980800">- Merge devel subpackages as libbrotli-devel</changelog>
  <changelog author="jengelh@inai.de" date="1520251200">- Update to new upstream release 1.0.3
  * New "Large Window Brotli" feature
  * New dictionary generator</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525262400">- Add missing libbrotlicommon%%{sover} and libbrotlidec%%{sover}
  Requires to devel subpackage.</changelog>
  <changelog author="mpluskal@suse.com" date="1530187200">- Update to version 1.0.5:
  * improve q=1 compression on small files
  * inverse Bazel workspace tree
  * add rolling-composite-hasher for large-window mode
  * add tools to download and transform static dictionary data
- Changes for version 1.0.4:
  * fix unaligned access for aarch64-cross-armhf build
  * fix aarch64 target detection
  * allow CLI to compress with enabled "large window" feature
  * add NPOSTFIX / NDIRECT encoder parameters
  * automatic NDIRECT/NPOSTFIX tuning (better compression)
  * fix "memory leak" in python tests
  * fix bug in durchschlag
  * fix source file lists (add params.h)
  * fix Bazel/MSVC compilator options
  * fix "fall though" warnings</changelog>
  <changelog author="mpluskal@suse.com" date="1532433600">- Use cmake macros for building and tests</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532520000">- Add baselibs.conf, build 32bit library support.</changelog>
  <changelog author="astieger@suse.com" date="1544788800">- brotli 1.0.7:
  * faster decoding on ARM
  * improved precision of window size calculation in CLI
- includes changes from 1.0.6:
  * fix unaligned 64-bit accesses on AArch32
  * add ASAN/MSAN unaligned read specializations
  * fix JDK 8&lt;-&gt;9 incompatibility</changelog>
  <changelog author="jengelh@inai.de" date="1544788801">- Avoid bashisms, install manpages without +x bit, get rid of
  wrap descriptions, feed through cleaner.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1547380800">- Add brotli_Verbose-CLI+Shared-Brotli.patch: Verbose CLI + start
  pulling "Shared-Brotli".
  * verbose CLI output; fix gh#google/brotlie#666.
  * pull `SHIFT` transforms; currently this is semantically dead
    code; later it will be used by "Shared-Brotli".
- Add brotli_Ensure-decompression-consumes-all-input.patch: Ensure
  decompression consumes all input. If not, it's a corrupt stream.
- Tweak spec slightly.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637928000">- Fix CVE-2020-8927, decoder: integer overflow when input chunk
  is larger than 2GiB. (CVE-2020-8927, bsc#1175825)
  * fix-cve-2020-8927.patch</changelog>
</package>
<package pkgid="01992850ae95b2f8885444a40b6052ffcf23f74e629784c6d40fdcebdcc50a4c" name="bubblewrap" arch="src">
  <version epoch="0" ver="0.11.0" rel="150500.3.12.1"/>
  <changelog author="sebix+novell.com@sebix.at" date="1488456000">- upgrade to upstream version 0.1.7
- note that this package was *never* affected by CVE-2017-5226
  as it was introduced in version 0.1.6
- upstream changelog of version 0.1.7:
    This release backs out the change in 0.1.6 which unconditionally
    called setsid() in order to fix a security issue with TIOCSTI, aka
    CVE-2017-522. That change caused some behavioural issues that are
    hard to work with in some cases. For instance, it makes shell job
    control not work for the bwrap command.
    Instead there is now a new option --new-session which works like
    0.1.6. It is recommended that you use this if possible, but if not we
    recommended that you neutralize this some other way, for instance
    using SECCOMP, which is what flatpak does:
    https://github.com/flatpak/flatpak/commit/902fb713990a8f968ea4350c7c2a27ff46f1a6c4
    In order to make it easy to create maximally safe sandboxes we have
    also added a new commandline switch called --unshare-all. It unshares
    all possible namespaces and is currently equivalent with:
  - -unshare-user-try --unshare-ipc --unshare-pid --unshare-net
  - -unshare-uts --unshare-cgroup-try
    However, the intent is that as new namespaces are added to the kernel they will
    be added to this list. Additionally, if --share-net is specified the network
    namespace is not unshared.
    This release also has some bugfixes:
    bwrap reaps (unexpected) children that are inherited from the
    parent, something which can happen if bwrap is part of a shell
    pipeline.
    bwrap clears the capability bounding set. The permitted
    capabilities was already empty, and use of PR_NO_NEW_PRIVS should
    make it impossible to increase the capabilities, but more
    layers of protection is better.
    The seccomp filter is now installed at the very end of bwrap, which
    means the requirement of the filter is minimal. Any bwrap seccomp
    filter must at least allow: execve, waitpid and write
    Alexander Larsson (7):
    Handle inherited children dying
    Clear capability bounding set
    Make the call to setsid() optional, with --new-session
    demos/bubblewrap-shell.sh: Unshare all namespaces
    Call setsid() and setexeccon() befor forking the init monitor
    Install seccomp filter at the very end
    Bump version to 0.1.7
    Colin Walters (6):
    Release 0.1.6
    man: Correct namespace user -&gt; mount
    demo/shell: Add /var/tmp compat symlink, tweak PS1, add more docs
    Release 0.1.6
    ci: Combine ASAN and UBSAN
    Add --unshare-all and --share-net
- upstream changelog for 0.1.6:
    This fixes a security issue with TIOCSTI, aka CVE-2017-522. Note bubblewrap is
    far from the only program that has this issue, and I think the best fix is
    probably in the kernel to support disabling this ioctl.
    Programs can also work around this by calling setsid() on their own in an exec
    handler before doing an exevp("bwrap").
- upstream changelog for 0.1.5:
    This is a bugfix release, here are the major changes:
    Running bubblewrap as root now works again
    Various fixes for the testsuite
    Use same default compiler warnings as ostree
    Handle errors resolving symlinks during bind mounts
    Alexander Larsson (2):
    bind-mount: Check for errors in realpath()
    Bump version to 0.1.5
    Colin Walters (6):
    Don't call capset() unless we need to
    Only --unshare-user automatically if we're not root
    ci: Modernize a bit, add f25-ubsan
    README.md: Update with better one liner and more information
    utils: Add __attribute__((printf)) to die()
    build: Sync default warning -&gt; error set from ostree
    Simon McVittie (4):
    test-run: be a bash script
    test-run: don't assume we are uid 1000
    Adapt tests so they can be run against installed binaries
    Fix incorrect nesting of backticks when finding a FUSE mount</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1495713600">- update to version 0.1.8
- New --die-with-parent which is based on the Linux prctl(PR_SET_PDEATHSIG) API.
- smaller bugfixes</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1499428800">- fix build macro with rpm &lt; 4.12 (non-Factory currently)</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1505736000">- add group</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1507550400">- update to version 0.2.0
  - bwrap now automatically detects the new
  user namespace restrictions in Red Hat Enterprise Linux 7.4:
  bubblewrap: check for max_user_namespaces == 0.
  - The most notable features are new arguments --as-pid1, and
  - -cap-add/--cap-drop. These were added for running systemd (or in general a
  "full" init system) inside bubblewrap. But the capability options are also
  useful for unprivileged callers to potentially retain capbilities inside the
  sandbox (for example CAP_NET_ADMIN), when user namespaces are enabled.
  Conversely, privileged callers (uid 0) can conversely drop capabilities (without
  user namespaces). Contributed by Giuseppe Scrivano.
  - With --dev, add /dev/fd and /dev/core symlinks
  which should improve compatibility with older software.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1525176000">- update to version 0.2.1:
  * All the demos are included
  * bugfixes for the demo files
  * There was an issue with mkdir when running bubblewrap on an NFS
  filesystem that has been fixed, so flatpak now works on NFS shares.
  * Some leaks have been fixed, including a file descriptor leak.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1531569600">- update to version 0.3.0:
  * The biggest feature from this release is that bwrap
    now supports being invoked recursively (from other container
    runtimes such as Docker/podman/runc as well as bwrap itself)
    when user namespaces are enabled, and the outer container manager
    allows it (Docker's default seccomp policy doesn't).
  * This is useful for testing scenarios; for example a project
    uses Kubernetes for its CI, but inside build the project wants to run
    each unit test in their own pid namespace, without going out
    and creating a new pod for every single unit test.
  * Similarly, rpm-ostree compose tree uses bwrap internally for scripts,
    and we want to support running rpm-ostree inside a container as well.
  * Another feature is bwrap now supports -- to terminate argument
    parsing. To detect availablity of this, you could parse bwrap --version.</changelog>
  <changelog author="alarrosa@suse.com" date="1539259200">- update to version 0.3.1:
  * New feature in this release is --bind-try (as well as --dev-bind-try
    and --ro-bind-try) which works like the regular versions if the source
    exists, but does nothing if it doesn't exist.
  * The mount type for the root tmpfs was also changed to "tmpfs" instead
    of being empty, as the later could cause problems with some programs
    when parsing the mountinfo files in /proc.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1559390400">- Update to version 0.3.3:
  - This release is the same as 0.3.2 but the version number in configure.ac
  was accidentally still set to 0.3.1
- Update to version 0.3.2:
  - fixes boo#1136958 / CVE-2019-12439
  This release fixes a mostly theoretical security issue in unusual/broken
  setups where `$XDG_RUNTIME_DIR` is unset.
  There are some other smaller fixes, as well as an addition to the JSON
  API that allows reading the inner process exit code, separately from
  the `bwrap` exit code.
  - Print "Out of memory" on stderr, not stdout
  - bwrap: add option json-status-fd to show child exit code
  - bwrap: Report COMMAND exit code in json-status-fd
  - man page: Describe --chdir, not nonexistent --cwd
  - Don't create our own temporary mount point for pivot_root
  - Make lockdata long enough on 32-bit with 64-bit file pointers.</changelog>
  <changelog author="alarrosa@suse.com" date="1559908800">- Use /bin/bash instead of /usr/bin/bash in SLE12</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1576843200">- Update to version 0.4.0:
  + The biggest feature in this release is the support for joining
    existing user and pid namespaces. This doesn't work in the
    setuid mode (at the moment).
  + Other changes:
  - Stores namespace info in status json.
  - In setuid mode pid 1 is now marked dumpable.
  - Now builds with musl libc.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1585742400">- Update to version 0.4.1:
  * retcode: fix return code with syncfd and no event_fd
  * Ensure we're always clearing the cap bounding set
  * tests: Update output patterns for libcap &gt;= 2.29
  * Don't rely on geteuid() to know when to switch back from setuid root
  * Don't support --userns2 in setuid mode
  * fixes CVE-2020-5291
  * fixes bsc#1168291</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632139200">- Update to version 0.5.0:
  + New features:
  - --chmod changes permissions
  - --clearenv unsets every environment variable (except PWD)
  - --perms sets permissions for one subsequent --bind-data,
  - -dir, --file, --ro-bind-data or --tmpfs
  + Other enhancements:
  - Better diagnostics when a --bind or other bind-mount fails
  - zsh tab-completion
  - Better test coverage
  + Bug fixes:
  - Use Python 3 for tests and examples
  - Mount points for non-directories are created with permissions
  - r--r--r-- instead of -rw-rw-rw-
  - Don't remount items in /proc read-only if already EROFS,
    required to run under Docker
  - Allow mounting an non-directory over an existing
    non-directory, e.g. --bind "$XDG_RUNTIME_DIR/my-log-socket"
    /dev/log
  - Silence kernel messages for our bind-mounts
  - Make sure pkg-config is checked for, regardless of build
    options
  - Improve ability to bind-mount directories on case-insensitive
    filesystems
  - Fix -Wshadow warnings
  - Fix deprecation warnings with newer SELinux
- Add new subpackage bubblewrap-zsh-completion</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1646395200">- Update to 0.6.1:
  - Add a release checklist
  - completions: Make zsh completion non-executable
  The Autotools build system installed it with 0644 permissions because
  it's listed as DATA, but the Meson build system installs executable
  files as executable by default.
  zsh completions don't need to be executable to work, and this one doesn't
  have the `#!` marker that should start an executable script.
- update to 0.6.0:
  - meson: Improve compatibility with Meson 0.49
  That version doesn't allow more than two arguments for define_variable.
  - Disable test-specifying-pidns.sh under 'meson dist' while I investigate
  This test is hanging when run under 'meson dist' for some reason, but
  not when run under 'meson test', and not locally, only in the Github
  Workflow-based CI. Disable it for now.
  - meson: Actually build and run the tests
  - tests: Fix compiler warnings for unused arguments
  - meson: Run test scripts from $srcdir
  - meson: Make G_TEST_SRCDIR, G_TEST_BUILDDIR match Autotools
  - meson: Run the Python test script with Python, not bash
  The python build option can be used to swap to a different interpreter,
  for environments like the Steam Runtime where the python3 executable in
  the PATH is extremely old but there is a better interpreter available.
  This is treated as non-optional, because Meson is written in Python,
  so the situation where there is no Python interpreter at build-time
  shouldn't arise.
  - meson: Build the try-syscall helper
  - meson: Build tests with equivalent of -I$(top_srcdir) -I$(top_builddir)
  - meson.build: Remove unnecessary check for sh
  - Add a Meson build system
  This allows bwrap to be built as a subproject in larger Meson projects.
  When built as a subproject, we install into the --libexecdir and
  require a program prefix to be specified: for example, Flatpak would use
  program_prefix=flatpak- to get /usr/libexec/flatpak-bwrap. Verified to
  be backwards-compatible as far as Meson 0.49.0 (Debian 9 backports).
  Loosely based on previous work by Jussi Pakkanen (see #133).
  Differences between the Autotools and Meson builds:
  The Meson build requires a version of libcap that has pkg-config
  metadata (introduced in libcap 2.23, in 2013).
  The Meson build has no equivalent of --with-priv-mode=setuid. On
  distributions like Debian &lt;= 10 and RHEL &lt;= 7 that require a setuid bwrap
  executable, the sysadmin or distribution packaging will need to set the
  correct permissions on the bwrap executable; Debian already did this via
  packaging rather than the upstream build system.
  The Meson build supports being used as a subproject, and there is CI
  for this. It automatically disables shell completions and man pages,
  moves the bubblewrap executable to ${libexecdir}, and renames the
  bubblewrap executable according to a program_prefix option that the
  caller must specify (for example, Flatpak would use
  - Dprogram_prefix=flatpak- to get /usr/libexec/flatpak-bwrap). See the
  tests/use-as-subproject/ directory for an example.
  - Use HEAD to refer to other projects' default branches in documentation
  This makes the URL independent of the name they have chosen for their
  default branches.
  - workflows: Update for rename of default branch to main
  - tests: Exercise seccomp filters
  - Allow loading more than one seccomp program
  This will allow Flatpak to combine an allow-list (default-deny) of
  known system calls with a deny-list (default-allow) of system calls
  that are undesired.
  Resolves: https://github.com/containers/bubblewrap/issues/453
  - Generalize linked lists of LockFile and SetupOp
  I'm about to add a third linked list, for seccomp programs, which would
  seem like too much duplication.
  - Handle argc == 0 better
  Unfortunately it's possible for argc to be 0, so error out pretty early
  on in that case. I don't think this is a security issue in this case.
  - Fix typo
  - Remove trailing whitespace
  - Fix spelling
  - bash: Fix shellcheck warnings
  - bash: Invoke bash using /usr/bin/env
  - bubblewrap: Avoid a -Wjump-misses-init false-positive
  When building with -Wjump-misses-init as part of a larger project, gcc
  reports that we jump past initialization of cover_proc_dirs. This is
  technically true, but we only use this variable in the case where it's
  initialized, so that's harmless.
  However, we can avoid this altogether by making the array static and
  constant, which allows it to be moved from initialized data to read-only
  data.
  - bind-mount: Be more const-correct
  When compiled with -Wwrite-strings as part of a larger project, gcc and
  clang both warn that we're assigning a string constant to a mutable
  struct member. There's actually no reason why it should be mutable, so
  make it const.
  - die_with_error: Save errno sooner
  We need to save errno immediately, otherwise it could be overwritten
  by a failing library call somewhere in the implementation of fprintf.
  - main: Warn when non-repeatable options are repeated
  A user might reasonably expect that `bwrap --seccomp 3 --seccomp 4 ...`
  would load seccomp programs from both fds 3 and 4, but in fact it only
  loads the program from fd 4.
  Helps: https://github.com/containers/bubblewrap/issues/453
  Resolves: https://github.com/containers/bubblewrap/issues/454
  - utils: Add warn()
  - Add SPDX-License-Identifier for files that already specify license
  This is a step towards REUSE compliance. Third-party files that we do
  not otherwise edit (git.mk, m4/attributes.m4) are excluded here.
  - tests: Use preferred spelling for SPDX license identifiers
  - Remove obsolete .travis.yml
  We no longer use Travis-CI.
  - Remove obsolete papr CI
  We no longer use this.</changelog>
  <changelog author="dimstar@opensuse.org" date="1652875200">- Update to version 0.6.2:
  + New features in Meson build:
  - Auto-detect whether the man page can be generated.
  - -Dbwrapdir=... changes the installation directory (useful
    when being used as a subproject).
  - -Dtests=false disables unit tests.
  + Bug fixes:
  - Add --add-seccomp-fd to shell completions
  - Document --add-seccomp-fd, --json-status-fd and --share-net
    in the man page
  - Add attributes to silence various compiler warnings
  - Allow compilation of tests with musl on mips architectures
  - Allow compilation with older glibc
  - Disable sanitizers for a test helper whose seccomp profile
    breaks the instrumentation
  - Disable AddressSanitizer leak detection where it interferes
    with unit testing</changelog>
  <changelog author="dmueller@suse.com" date="1670414400">- update to v0.7.0:
  * --size option controls the size of a subsequent --tmpfs (#509)
  * Better error messages if a mount operation fails (#472)
  * Better error message if creating the new user namespace fails with
    ENOSPC (#487)
  * When building as a Meson subproject, a RUNPATH can be set on the
    executable to make it easier to bundle its libcap dependency
  * Fix test failures when running as uid 0 but with limited capabilities
    (#510)
  * Use POSIX command -v in preference to non-standard which (#527)
  * Fix a copy/paste error in --help (#531)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1679918400">- update to v0.8.0:
  * Add --disable-userns option to prevent the sandbox from
    creating its own nested user namespace
  * Add --assert-userns-disabled option to check that an existing
    userns was created with --disable-userns
  * Give a clearer error message if the kernel doesn't have
    CONFIG_SECCOMP and CONFIG_SECCOMP_FILTER</changelog>
  <changelog author="qzhao@suse.com" date="1724241600">- Add bubblewrap-CVE-2024-42472.patch:
  Backporting a253257c from upstream, Add --bind-fd and --ro-bind-fd
  to let you bind a O_PATH fd.
  (CVE-2024-42472, bsc#1229157)</changelog>
  <changelog author="alarrosa@suse.com" date="1736337600">- fix shebang in demos/flatpak-run.sh
- update to 0.11.0:
  * New --overlay, --tmp-overlay, --ro-overlay and --overlay-src
    options allow creation of overlay mounts. This feature is not
    available when bubblewrap is installed setuid.
  * New --level-prefix option produces output that can be parsed
    by tools like logger --prio-prefix and
    systemd-cat --level-prefix=1
  * bug fixes and developer visible changes
- add upstream signing key and validate source signature
- Update to version v0.10.0:
  * New features: Add the --[ro-]bind-fd option, which can be used
    to mount a filesystem represented by a file descriptor without
    time-of-check/time-of-use attacks. This is needed when
    resolving security issue in Flatpak.
    (CVE-2024-42472, bsc#1229157)
  * Other changes: Fix some confusing syntax in SetupOpFlag (no
    functional change).
- update to v0.9.0:
  * Build system changed to Meson from Autotools
  * Add --argv0
    https://github.com/containers/bubblewrap/issues/91
  * --symlink is now idempotent, meaning it succeeds if the symlink
    already exists and already has the desired target
  * Clarify security considerations in documentation
  * Clarify documentation for --cap-add
  * Report a better error message if mount(2) fails with ENOSPC
  * Fix a double-close on error reading from --args, --seccomp or
  - -add-seccomp-fd argument
  * Improve memory allocation behaviour
- Drop patch which was already included in 0.10.0:
  * bubblewrap-CVE-2024-42472.patch</changelog>
  <changelog author="mgorse@suse.com" date="1777464000">- Fix CVE-2026-41163 (bsc#1263113):
  + bubblewrap-dont-run-privilege-separated-code-bumpable.patch
  + bubblewrap-harden-privsep-parent.patch</changelog>
</package>
<package pkgid="17ee02e8fcbce793e711083177289b28863efea75a6fcb1d4b9f3d95bb7bce22" name="bubblewrap" arch="x86_64">
  <version epoch="0" ver="0.11.0" rel="150500.3.12.1"/>
  <changelog author="sebix+novell.com@sebix.at" date="1488456000">- upgrade to upstream version 0.1.7
- note that this package was *never* affected by CVE-2017-5226
  as it was introduced in version 0.1.6
- upstream changelog of version 0.1.7:
    This release backs out the change in 0.1.6 which unconditionally
    called setsid() in order to fix a security issue with TIOCSTI, aka
    CVE-2017-522. That change caused some behavioural issues that are
    hard to work with in some cases. For instance, it makes shell job
    control not work for the bwrap command.
    Instead there is now a new option --new-session which works like
    0.1.6. It is recommended that you use this if possible, but if not we
    recommended that you neutralize this some other way, for instance
    using SECCOMP, which is what flatpak does:
    https://github.com/flatpak/flatpak/commit/902fb713990a8f968ea4350c7c2a27ff46f1a6c4
    In order to make it easy to create maximally safe sandboxes we have
    also added a new commandline switch called --unshare-all. It unshares
    all possible namespaces and is currently equivalent with:
  - -unshare-user-try --unshare-ipc --unshare-pid --unshare-net
  - -unshare-uts --unshare-cgroup-try
    However, the intent is that as new namespaces are added to the kernel they will
    be added to this list. Additionally, if --share-net is specified the network
    namespace is not unshared.
    This release also has some bugfixes:
    bwrap reaps (unexpected) children that are inherited from the
    parent, something which can happen if bwrap is part of a shell
    pipeline.
    bwrap clears the capability bounding set. The permitted
    capabilities was already empty, and use of PR_NO_NEW_PRIVS should
    make it impossible to increase the capabilities, but more
    layers of protection is better.
    The seccomp filter is now installed at the very end of bwrap, which
    means the requirement of the filter is minimal. Any bwrap seccomp
    filter must at least allow: execve, waitpid and write
    Alexander Larsson (7):
    Handle inherited children dying
    Clear capability bounding set
    Make the call to setsid() optional, with --new-session
    demos/bubblewrap-shell.sh: Unshare all namespaces
    Call setsid() and setexeccon() befor forking the init monitor
    Install seccomp filter at the very end
    Bump version to 0.1.7
    Colin Walters (6):
    Release 0.1.6
    man: Correct namespace user -&gt; mount
    demo/shell: Add /var/tmp compat symlink, tweak PS1, add more docs
    Release 0.1.6
    ci: Combine ASAN and UBSAN
    Add --unshare-all and --share-net
- upstream changelog for 0.1.6:
    This fixes a security issue with TIOCSTI, aka CVE-2017-522. Note bubblewrap is
    far from the only program that has this issue, and I think the best fix is
    probably in the kernel to support disabling this ioctl.
    Programs can also work around this by calling setsid() on their own in an exec
    handler before doing an exevp("bwrap").
- upstream changelog for 0.1.5:
    This is a bugfix release, here are the major changes:
    Running bubblewrap as root now works again
    Various fixes for the testsuite
    Use same default compiler warnings as ostree
    Handle errors resolving symlinks during bind mounts
    Alexander Larsson (2):
    bind-mount: Check for errors in realpath()
    Bump version to 0.1.5
    Colin Walters (6):
    Don't call capset() unless we need to
    Only --unshare-user automatically if we're not root
    ci: Modernize a bit, add f25-ubsan
    README.md: Update with better one liner and more information
    utils: Add __attribute__((printf)) to die()
    build: Sync default warning -&gt; error set from ostree
    Simon McVittie (4):
    test-run: be a bash script
    test-run: don't assume we are uid 1000
    Adapt tests so they can be run against installed binaries
    Fix incorrect nesting of backticks when finding a FUSE mount</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1495713600">- update to version 0.1.8
- New --die-with-parent which is based on the Linux prctl(PR_SET_PDEATHSIG) API.
- smaller bugfixes</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1499428800">- fix build macro with rpm &lt; 4.12 (non-Factory currently)</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1505736000">- add group</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1507550400">- update to version 0.2.0
  - bwrap now automatically detects the new
  user namespace restrictions in Red Hat Enterprise Linux 7.4:
  bubblewrap: check for max_user_namespaces == 0.
  - The most notable features are new arguments --as-pid1, and
  - -cap-add/--cap-drop. These were added for running systemd (or in general a
  "full" init system) inside bubblewrap. But the capability options are also
  useful for unprivileged callers to potentially retain capbilities inside the
  sandbox (for example CAP_NET_ADMIN), when user namespaces are enabled.
  Conversely, privileged callers (uid 0) can conversely drop capabilities (without
  user namespaces). Contributed by Giuseppe Scrivano.
  - With --dev, add /dev/fd and /dev/core symlinks
  which should improve compatibility with older software.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1525176000">- update to version 0.2.1:
  * All the demos are included
  * bugfixes for the demo files
  * There was an issue with mkdir when running bubblewrap on an NFS
  filesystem that has been fixed, so flatpak now works on NFS shares.
  * Some leaks have been fixed, including a file descriptor leak.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1531569600">- update to version 0.3.0:
  * The biggest feature from this release is that bwrap
    now supports being invoked recursively (from other container
    runtimes such as Docker/podman/runc as well as bwrap itself)
    when user namespaces are enabled, and the outer container manager
    allows it (Docker's default seccomp policy doesn't).
  * This is useful for testing scenarios; for example a project
    uses Kubernetes for its CI, but inside build the project wants to run
    each unit test in their own pid namespace, without going out
    and creating a new pod for every single unit test.
  * Similarly, rpm-ostree compose tree uses bwrap internally for scripts,
    and we want to support running rpm-ostree inside a container as well.
  * Another feature is bwrap now supports -- to terminate argument
    parsing. To detect availablity of this, you could parse bwrap --version.</changelog>
  <changelog author="alarrosa@suse.com" date="1539259200">- update to version 0.3.1:
  * New feature in this release is --bind-try (as well as --dev-bind-try
    and --ro-bind-try) which works like the regular versions if the source
    exists, but does nothing if it doesn't exist.
  * The mount type for the root tmpfs was also changed to "tmpfs" instead
    of being empty, as the later could cause problems with some programs
    when parsing the mountinfo files in /proc.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1559390400">- Update to version 0.3.3:
  - This release is the same as 0.3.2 but the version number in configure.ac
  was accidentally still set to 0.3.1
- Update to version 0.3.2:
  - fixes boo#1136958 / CVE-2019-12439
  This release fixes a mostly theoretical security issue in unusual/broken
  setups where `$XDG_RUNTIME_DIR` is unset.
  There are some other smaller fixes, as well as an addition to the JSON
  API that allows reading the inner process exit code, separately from
  the `bwrap` exit code.
  - Print "Out of memory" on stderr, not stdout
  - bwrap: add option json-status-fd to show child exit code
  - bwrap: Report COMMAND exit code in json-status-fd
  - man page: Describe --chdir, not nonexistent --cwd
  - Don't create our own temporary mount point for pivot_root
  - Make lockdata long enough on 32-bit with 64-bit file pointers.</changelog>
  <changelog author="alarrosa@suse.com" date="1559908800">- Use /bin/bash instead of /usr/bin/bash in SLE12</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1576843200">- Update to version 0.4.0:
  + The biggest feature in this release is the support for joining
    existing user and pid namespaces. This doesn't work in the
    setuid mode (at the moment).
  + Other changes:
  - Stores namespace info in status json.
  - In setuid mode pid 1 is now marked dumpable.
  - Now builds with musl libc.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1585742400">- Update to version 0.4.1:
  * retcode: fix return code with syncfd and no event_fd
  * Ensure we're always clearing the cap bounding set
  * tests: Update output patterns for libcap &gt;= 2.29
  * Don't rely on geteuid() to know when to switch back from setuid root
  * Don't support --userns2 in setuid mode
  * fixes CVE-2020-5291
  * fixes bsc#1168291</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632139200">- Update to version 0.5.0:
  + New features:
  - --chmod changes permissions
  - --clearenv unsets every environment variable (except PWD)
  - --perms sets permissions for one subsequent --bind-data,
  - -dir, --file, --ro-bind-data or --tmpfs
  + Other enhancements:
  - Better diagnostics when a --bind or other bind-mount fails
  - zsh tab-completion
  - Better test coverage
  + Bug fixes:
  - Use Python 3 for tests and examples
  - Mount points for non-directories are created with permissions
  - r--r--r-- instead of -rw-rw-rw-
  - Don't remount items in /proc read-only if already EROFS,
    required to run under Docker
  - Allow mounting an non-directory over an existing
    non-directory, e.g. --bind "$XDG_RUNTIME_DIR/my-log-socket"
    /dev/log
  - Silence kernel messages for our bind-mounts
  - Make sure pkg-config is checked for, regardless of build
    options
  - Improve ability to bind-mount directories on case-insensitive
    filesystems
  - Fix -Wshadow warnings
  - Fix deprecation warnings with newer SELinux
- Add new subpackage bubblewrap-zsh-completion</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1646395200">- Update to 0.6.1:
  - Add a release checklist
  - completions: Make zsh completion non-executable
  The Autotools build system installed it with 0644 permissions because
  it's listed as DATA, but the Meson build system installs executable
  files as executable by default.
  zsh completions don't need to be executable to work, and this one doesn't
  have the `#!` marker that should start an executable script.
- update to 0.6.0:
  - meson: Improve compatibility with Meson 0.49
  That version doesn't allow more than two arguments for define_variable.
  - Disable test-specifying-pidns.sh under 'meson dist' while I investigate
  This test is hanging when run under 'meson dist' for some reason, but
  not when run under 'meson test', and not locally, only in the Github
  Workflow-based CI. Disable it for now.
  - meson: Actually build and run the tests
  - tests: Fix compiler warnings for unused arguments
  - meson: Run test scripts from $srcdir
  - meson: Make G_TEST_SRCDIR, G_TEST_BUILDDIR match Autotools
  - meson: Run the Python test script with Python, not bash
  The python build option can be used to swap to a different interpreter,
  for environments like the Steam Runtime where the python3 executable in
  the PATH is extremely old but there is a better interpreter available.
  This is treated as non-optional, because Meson is written in Python,
  so the situation where there is no Python interpreter at build-time
  shouldn't arise.
  - meson: Build the try-syscall helper
  - meson: Build tests with equivalent of -I$(top_srcdir) -I$(top_builddir)
  - meson.build: Remove unnecessary check for sh
  - Add a Meson build system
  This allows bwrap to be built as a subproject in larger Meson projects.
  When built as a subproject, we install into the --libexecdir and
  require a program prefix to be specified: for example, Flatpak would use
  program_prefix=flatpak- to get /usr/libexec/flatpak-bwrap. Verified to
  be backwards-compatible as far as Meson 0.49.0 (Debian 9 backports).
  Loosely based on previous work by Jussi Pakkanen (see #133).
  Differences between the Autotools and Meson builds:
  The Meson build requires a version of libcap that has pkg-config
  metadata (introduced in libcap 2.23, in 2013).
  The Meson build has no equivalent of --with-priv-mode=setuid. On
  distributions like Debian &lt;= 10 and RHEL &lt;= 7 that require a setuid bwrap
  executable, the sysadmin or distribution packaging will need to set the
  correct permissions on the bwrap executable; Debian already did this via
  packaging rather than the upstream build system.
  The Meson build supports being used as a subproject, and there is CI
  for this. It automatically disables shell completions and man pages,
  moves the bubblewrap executable to ${libexecdir}, and renames the
  bubblewrap executable according to a program_prefix option that the
  caller must specify (for example, Flatpak would use
  - Dprogram_prefix=flatpak- to get /usr/libexec/flatpak-bwrap). See the
  tests/use-as-subproject/ directory for an example.
  - Use HEAD to refer to other projects' default branches in documentation
  This makes the URL independent of the name they have chosen for their
  default branches.
  - workflows: Update for rename of default branch to main
  - tests: Exercise seccomp filters
  - Allow loading more than one seccomp program
  This will allow Flatpak to combine an allow-list (default-deny) of
  known system calls with a deny-list (default-allow) of system calls
  that are undesired.
  Resolves: https://github.com/containers/bubblewrap/issues/453
  - Generalize linked lists of LockFile and SetupOp
  I'm about to add a third linked list, for seccomp programs, which would
  seem like too much duplication.
  - Handle argc == 0 better
  Unfortunately it's possible for argc to be 0, so error out pretty early
  on in that case. I don't think this is a security issue in this case.
  - Fix typo
  - Remove trailing whitespace
  - Fix spelling
  - bash: Fix shellcheck warnings
  - bash: Invoke bash using /usr/bin/env
  - bubblewrap: Avoid a -Wjump-misses-init false-positive
  When building with -Wjump-misses-init as part of a larger project, gcc
  reports that we jump past initialization of cover_proc_dirs. This is
  technically true, but we only use this variable in the case where it's
  initialized, so that's harmless.
  However, we can avoid this altogether by making the array static and
  constant, which allows it to be moved from initialized data to read-only
  data.
  - bind-mount: Be more const-correct
  When compiled with -Wwrite-strings as part of a larger project, gcc and
  clang both warn that we're assigning a string constant to a mutable
  struct member. There's actually no reason why it should be mutable, so
  make it const.
  - die_with_error: Save errno sooner
  We need to save errno immediately, otherwise it could be overwritten
  by a failing library call somewhere in the implementation of fprintf.
  - main: Warn when non-repeatable options are repeated
  A user might reasonably expect that `bwrap --seccomp 3 --seccomp 4 ...`
  would load seccomp programs from both fds 3 and 4, but in fact it only
  loads the program from fd 4.
  Helps: https://github.com/containers/bubblewrap/issues/453
  Resolves: https://github.com/containers/bubblewrap/issues/454
  - utils: Add warn()
  - Add SPDX-License-Identifier for files that already specify license
  This is a step towards REUSE compliance. Third-party files that we do
  not otherwise edit (git.mk, m4/attributes.m4) are excluded here.
  - tests: Use preferred spelling for SPDX license identifiers
  - Remove obsolete .travis.yml
  We no longer use Travis-CI.
  - Remove obsolete papr CI
  We no longer use this.</changelog>
  <changelog author="dimstar@opensuse.org" date="1652875200">- Update to version 0.6.2:
  + New features in Meson build:
  - Auto-detect whether the man page can be generated.
  - -Dbwrapdir=... changes the installation directory (useful
    when being used as a subproject).
  - -Dtests=false disables unit tests.
  + Bug fixes:
  - Add --add-seccomp-fd to shell completions
  - Document --add-seccomp-fd, --json-status-fd and --share-net
    in the man page
  - Add attributes to silence various compiler warnings
  - Allow compilation of tests with musl on mips architectures
  - Allow compilation with older glibc
  - Disable sanitizers for a test helper whose seccomp profile
    breaks the instrumentation
  - Disable AddressSanitizer leak detection where it interferes
    with unit testing</changelog>
  <changelog author="dmueller@suse.com" date="1670414400">- update to v0.7.0:
  * --size option controls the size of a subsequent --tmpfs (#509)
  * Better error messages if a mount operation fails (#472)
  * Better error message if creating the new user namespace fails with
    ENOSPC (#487)
  * When building as a Meson subproject, a RUNPATH can be set on the
    executable to make it easier to bundle its libcap dependency
  * Fix test failures when running as uid 0 but with limited capabilities
    (#510)
  * Use POSIX command -v in preference to non-standard which (#527)
  * Fix a copy/paste error in --help (#531)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1679918400">- update to v0.8.0:
  * Add --disable-userns option to prevent the sandbox from
    creating its own nested user namespace
  * Add --assert-userns-disabled option to check that an existing
    userns was created with --disable-userns
  * Give a clearer error message if the kernel doesn't have
    CONFIG_SECCOMP and CONFIG_SECCOMP_FILTER</changelog>
  <changelog author="qzhao@suse.com" date="1724241600">- Add bubblewrap-CVE-2024-42472.patch:
  Backporting a253257c from upstream, Add --bind-fd and --ro-bind-fd
  to let you bind a O_PATH fd.
  (CVE-2024-42472, bsc#1229157)</changelog>
  <changelog author="alarrosa@suse.com" date="1736337600">- fix shebang in demos/flatpak-run.sh
- update to 0.11.0:
  * New --overlay, --tmp-overlay, --ro-overlay and --overlay-src
    options allow creation of overlay mounts. This feature is not
    available when bubblewrap is installed setuid.
  * New --level-prefix option produces output that can be parsed
    by tools like logger --prio-prefix and
    systemd-cat --level-prefix=1
  * bug fixes and developer visible changes
- add upstream signing key and validate source signature
- Update to version v0.10.0:
  * New features: Add the --[ro-]bind-fd option, which can be used
    to mount a filesystem represented by a file descriptor without
    time-of-check/time-of-use attacks. This is needed when
    resolving security issue in Flatpak.
    (CVE-2024-42472, bsc#1229157)
  * Other changes: Fix some confusing syntax in SetupOpFlag (no
    functional change).
- update to v0.9.0:
  * Build system changed to Meson from Autotools
  * Add --argv0
    https://github.com/containers/bubblewrap/issues/91
  * --symlink is now idempotent, meaning it succeeds if the symlink
    already exists and already has the desired target
  * Clarify security considerations in documentation
  * Clarify documentation for --cap-add
  * Report a better error message if mount(2) fails with ENOSPC
  * Fix a double-close on error reading from --args, --seccomp or
  - -add-seccomp-fd argument
  * Improve memory allocation behaviour
- Drop patch which was already included in 0.10.0:
  * bubblewrap-CVE-2024-42472.patch</changelog>
  <changelog author="mgorse@suse.com" date="1777464000">- Fix CVE-2026-41163 (bsc#1263113):
  + bubblewrap-dont-run-privilege-separated-code-bumpable.patch
  + bubblewrap-harden-privsep-parent.patch</changelog>
</package>
<package pkgid="e973ae43ab4cf9fc8ece0865fd5a348df2e7e4a979247d0ff27f83d131e04ebc" name="bubblewrap-zsh-completion" arch="x86_64">
  <version epoch="0" ver="0.11.0" rel="150500.3.12.1"/>
  <changelog author="sebix+novell.com@sebix.at" date="1488456000">- upgrade to upstream version 0.1.7
- note that this package was *never* affected by CVE-2017-5226
  as it was introduced in version 0.1.6
- upstream changelog of version 0.1.7:
    This release backs out the change in 0.1.6 which unconditionally
    called setsid() in order to fix a security issue with TIOCSTI, aka
    CVE-2017-522. That change caused some behavioural issues that are
    hard to work with in some cases. For instance, it makes shell job
    control not work for the bwrap command.
    Instead there is now a new option --new-session which works like
    0.1.6. It is recommended that you use this if possible, but if not we
    recommended that you neutralize this some other way, for instance
    using SECCOMP, which is what flatpak does:
    https://github.com/flatpak/flatpak/commit/902fb713990a8f968ea4350c7c2a27ff46f1a6c4
    In order to make it easy to create maximally safe sandboxes we have
    also added a new commandline switch called --unshare-all. It unshares
    all possible namespaces and is currently equivalent with:
  - -unshare-user-try --unshare-ipc --unshare-pid --unshare-net
  - -unshare-uts --unshare-cgroup-try
    However, the intent is that as new namespaces are added to the kernel they will
    be added to this list. Additionally, if --share-net is specified the network
    namespace is not unshared.
    This release also has some bugfixes:
    bwrap reaps (unexpected) children that are inherited from the
    parent, something which can happen if bwrap is part of a shell
    pipeline.
    bwrap clears the capability bounding set. The permitted
    capabilities was already empty, and use of PR_NO_NEW_PRIVS should
    make it impossible to increase the capabilities, but more
    layers of protection is better.
    The seccomp filter is now installed at the very end of bwrap, which
    means the requirement of the filter is minimal. Any bwrap seccomp
    filter must at least allow: execve, waitpid and write
    Alexander Larsson (7):
    Handle inherited children dying
    Clear capability bounding set
    Make the call to setsid() optional, with --new-session
    demos/bubblewrap-shell.sh: Unshare all namespaces
    Call setsid() and setexeccon() befor forking the init monitor
    Install seccomp filter at the very end
    Bump version to 0.1.7
    Colin Walters (6):
    Release 0.1.6
    man: Correct namespace user -&gt; mount
    demo/shell: Add /var/tmp compat symlink, tweak PS1, add more docs
    Release 0.1.6
    ci: Combine ASAN and UBSAN
    Add --unshare-all and --share-net
- upstream changelog for 0.1.6:
    This fixes a security issue with TIOCSTI, aka CVE-2017-522. Note bubblewrap is
    far from the only program that has this issue, and I think the best fix is
    probably in the kernel to support disabling this ioctl.
    Programs can also work around this by calling setsid() on their own in an exec
    handler before doing an exevp("bwrap").
- upstream changelog for 0.1.5:
    This is a bugfix release, here are the major changes:
    Running bubblewrap as root now works again
    Various fixes for the testsuite
    Use same default compiler warnings as ostree
    Handle errors resolving symlinks during bind mounts
    Alexander Larsson (2):
    bind-mount: Check for errors in realpath()
    Bump version to 0.1.5
    Colin Walters (6):
    Don't call capset() unless we need to
    Only --unshare-user automatically if we're not root
    ci: Modernize a bit, add f25-ubsan
    README.md: Update with better one liner and more information
    utils: Add __attribute__((printf)) to die()
    build: Sync default warning -&gt; error set from ostree
    Simon McVittie (4):
    test-run: be a bash script
    test-run: don't assume we are uid 1000
    Adapt tests so they can be run against installed binaries
    Fix incorrect nesting of backticks when finding a FUSE mount</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1495713600">- update to version 0.1.8
- New --die-with-parent which is based on the Linux prctl(PR_SET_PDEATHSIG) API.
- smaller bugfixes</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1499428800">- fix build macro with rpm &lt; 4.12 (non-Factory currently)</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1505736000">- add group</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1507550400">- update to version 0.2.0
  - bwrap now automatically detects the new
  user namespace restrictions in Red Hat Enterprise Linux 7.4:
  bubblewrap: check for max_user_namespaces == 0.
  - The most notable features are new arguments --as-pid1, and
  - -cap-add/--cap-drop. These were added for running systemd (or in general a
  "full" init system) inside bubblewrap. But the capability options are also
  useful for unprivileged callers to potentially retain capbilities inside the
  sandbox (for example CAP_NET_ADMIN), when user namespaces are enabled.
  Conversely, privileged callers (uid 0) can conversely drop capabilities (without
  user namespaces). Contributed by Giuseppe Scrivano.
  - With --dev, add /dev/fd and /dev/core symlinks
  which should improve compatibility with older software.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1525176000">- update to version 0.2.1:
  * All the demos are included
  * bugfixes for the demo files
  * There was an issue with mkdir when running bubblewrap on an NFS
  filesystem that has been fixed, so flatpak now works on NFS shares.
  * Some leaks have been fixed, including a file descriptor leak.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1531569600">- update to version 0.3.0:
  * The biggest feature from this release is that bwrap
    now supports being invoked recursively (from other container
    runtimes such as Docker/podman/runc as well as bwrap itself)
    when user namespaces are enabled, and the outer container manager
    allows it (Docker's default seccomp policy doesn't).
  * This is useful for testing scenarios; for example a project
    uses Kubernetes for its CI, but inside build the project wants to run
    each unit test in their own pid namespace, without going out
    and creating a new pod for every single unit test.
  * Similarly, rpm-ostree compose tree uses bwrap internally for scripts,
    and we want to support running rpm-ostree inside a container as well.
  * Another feature is bwrap now supports -- to terminate argument
    parsing. To detect availablity of this, you could parse bwrap --version.</changelog>
  <changelog author="alarrosa@suse.com" date="1539259200">- update to version 0.3.1:
  * New feature in this release is --bind-try (as well as --dev-bind-try
    and --ro-bind-try) which works like the regular versions if the source
    exists, but does nothing if it doesn't exist.
  * The mount type for the root tmpfs was also changed to "tmpfs" instead
    of being empty, as the later could cause problems with some programs
    when parsing the mountinfo files in /proc.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1559390400">- Update to version 0.3.3:
  - This release is the same as 0.3.2 but the version number in configure.ac
  was accidentally still set to 0.3.1
- Update to version 0.3.2:
  - fixes boo#1136958 / CVE-2019-12439
  This release fixes a mostly theoretical security issue in unusual/broken
  setups where `$XDG_RUNTIME_DIR` is unset.
  There are some other smaller fixes, as well as an addition to the JSON
  API that allows reading the inner process exit code, separately from
  the `bwrap` exit code.
  - Print "Out of memory" on stderr, not stdout
  - bwrap: add option json-status-fd to show child exit code
  - bwrap: Report COMMAND exit code in json-status-fd
  - man page: Describe --chdir, not nonexistent --cwd
  - Don't create our own temporary mount point for pivot_root
  - Make lockdata long enough on 32-bit with 64-bit file pointers.</changelog>
  <changelog author="alarrosa@suse.com" date="1559908800">- Use /bin/bash instead of /usr/bin/bash in SLE12</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1576843200">- Update to version 0.4.0:
  + The biggest feature in this release is the support for joining
    existing user and pid namespaces. This doesn't work in the
    setuid mode (at the moment).
  + Other changes:
  - Stores namespace info in status json.
  - In setuid mode pid 1 is now marked dumpable.
  - Now builds with musl libc.</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1585742400">- Update to version 0.4.1:
  * retcode: fix return code with syncfd and no event_fd
  * Ensure we're always clearing the cap bounding set
  * tests: Update output patterns for libcap &gt;= 2.29
  * Don't rely on geteuid() to know when to switch back from setuid root
  * Don't support --userns2 in setuid mode
  * fixes CVE-2020-5291
  * fixes bsc#1168291</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632139200">- Update to version 0.5.0:
  + New features:
  - --chmod changes permissions
  - --clearenv unsets every environment variable (except PWD)
  - --perms sets permissions for one subsequent --bind-data,
  - -dir, --file, --ro-bind-data or --tmpfs
  + Other enhancements:
  - Better diagnostics when a --bind or other bind-mount fails
  - zsh tab-completion
  - Better test coverage
  + Bug fixes:
  - Use Python 3 for tests and examples
  - Mount points for non-directories are created with permissions
  - r--r--r-- instead of -rw-rw-rw-
  - Don't remount items in /proc read-only if already EROFS,
    required to run under Docker
  - Allow mounting an non-directory over an existing
    non-directory, e.g. --bind "$XDG_RUNTIME_DIR/my-log-socket"
    /dev/log
  - Silence kernel messages for our bind-mounts
  - Make sure pkg-config is checked for, regardless of build
    options
  - Improve ability to bind-mount directories on case-insensitive
    filesystems
  - Fix -Wshadow warnings
  - Fix deprecation warnings with newer SELinux
- Add new subpackage bubblewrap-zsh-completion</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1646395200">- Update to 0.6.1:
  - Add a release checklist
  - completions: Make zsh completion non-executable
  The Autotools build system installed it with 0644 permissions because
  it's listed as DATA, but the Meson build system installs executable
  files as executable by default.
  zsh completions don't need to be executable to work, and this one doesn't
  have the `#!` marker that should start an executable script.
- update to 0.6.0:
  - meson: Improve compatibility with Meson 0.49
  That version doesn't allow more than two arguments for define_variable.
  - Disable test-specifying-pidns.sh under 'meson dist' while I investigate
  This test is hanging when run under 'meson dist' for some reason, but
  not when run under 'meson test', and not locally, only in the Github
  Workflow-based CI. Disable it for now.
  - meson: Actually build and run the tests
  - tests: Fix compiler warnings for unused arguments
  - meson: Run test scripts from $srcdir
  - meson: Make G_TEST_SRCDIR, G_TEST_BUILDDIR match Autotools
  - meson: Run the Python test script with Python, not bash
  The python build option can be used to swap to a different interpreter,
  for environments like the Steam Runtime where the python3 executable in
  the PATH is extremely old but there is a better interpreter available.
  This is treated as non-optional, because Meson is written in Python,
  so the situation where there is no Python interpreter at build-time
  shouldn't arise.
  - meson: Build the try-syscall helper
  - meson: Build tests with equivalent of -I$(top_srcdir) -I$(top_builddir)
  - meson.build: Remove unnecessary check for sh
  - Add a Meson build system
  This allows bwrap to be built as a subproject in larger Meson projects.
  When built as a subproject, we install into the --libexecdir and
  require a program prefix to be specified: for example, Flatpak would use
  program_prefix=flatpak- to get /usr/libexec/flatpak-bwrap. Verified to
  be backwards-compatible as far as Meson 0.49.0 (Debian 9 backports).
  Loosely based on previous work by Jussi Pakkanen (see #133).
  Differences between the Autotools and Meson builds:
  The Meson build requires a version of libcap that has pkg-config
  metadata (introduced in libcap 2.23, in 2013).
  The Meson build has no equivalent of --with-priv-mode=setuid. On
  distributions like Debian &lt;= 10 and RHEL &lt;= 7 that require a setuid bwrap
  executable, the sysadmin or distribution packaging will need to set the
  correct permissions on the bwrap executable; Debian already did this via
  packaging rather than the upstream build system.
  The Meson build supports being used as a subproject, and there is CI
  for this. It automatically disables shell completions and man pages,
  moves the bubblewrap executable to ${libexecdir}, and renames the
  bubblewrap executable according to a program_prefix option that the
  caller must specify (for example, Flatpak would use
  - Dprogram_prefix=flatpak- to get /usr/libexec/flatpak-bwrap). See the
  tests/use-as-subproject/ directory for an example.
  - Use HEAD to refer to other projects' default branches in documentation
  This makes the URL independent of the name they have chosen for their
  default branches.
  - workflows: Update for rename of default branch to main
  - tests: Exercise seccomp filters
  - Allow loading more than one seccomp program
  This will allow Flatpak to combine an allow-list (default-deny) of
  known system calls with a deny-list (default-allow) of system calls
  that are undesired.
  Resolves: https://github.com/containers/bubblewrap/issues/453
  - Generalize linked lists of LockFile and SetupOp
  I'm about to add a third linked list, for seccomp programs, which would
  seem like too much duplication.
  - Handle argc == 0 better
  Unfortunately it's possible for argc to be 0, so error out pretty early
  on in that case. I don't think this is a security issue in this case.
  - Fix typo
  - Remove trailing whitespace
  - Fix spelling
  - bash: Fix shellcheck warnings
  - bash: Invoke bash using /usr/bin/env
  - bubblewrap: Avoid a -Wjump-misses-init false-positive
  When building with -Wjump-misses-init as part of a larger project, gcc
  reports that we jump past initialization of cover_proc_dirs. This is
  technically true, but we only use this variable in the case where it's
  initialized, so that's harmless.
  However, we can avoid this altogether by making the array static and
  constant, which allows it to be moved from initialized data to read-only
  data.
  - bind-mount: Be more const-correct
  When compiled with -Wwrite-strings as part of a larger project, gcc and
  clang both warn that we're assigning a string constant to a mutable
  struct member. There's actually no reason why it should be mutable, so
  make it const.
  - die_with_error: Save errno sooner
  We need to save errno immediately, otherwise it could be overwritten
  by a failing library call somewhere in the implementation of fprintf.
  - main: Warn when non-repeatable options are repeated
  A user might reasonably expect that `bwrap --seccomp 3 --seccomp 4 ...`
  would load seccomp programs from both fds 3 and 4, but in fact it only
  loads the program from fd 4.
  Helps: https://github.com/containers/bubblewrap/issues/453
  Resolves: https://github.com/containers/bubblewrap/issues/454
  - utils: Add warn()
  - Add SPDX-License-Identifier for files that already specify license
  This is a step towards REUSE compliance. Third-party files that we do
  not otherwise edit (git.mk, m4/attributes.m4) are excluded here.
  - tests: Use preferred spelling for SPDX license identifiers
  - Remove obsolete .travis.yml
  We no longer use Travis-CI.
  - Remove obsolete papr CI
  We no longer use this.</changelog>
  <changelog author="dimstar@opensuse.org" date="1652875200">- Update to version 0.6.2:
  + New features in Meson build:
  - Auto-detect whether the man page can be generated.
  - -Dbwrapdir=... changes the installation directory (useful
    when being used as a subproject).
  - -Dtests=false disables unit tests.
  + Bug fixes:
  - Add --add-seccomp-fd to shell completions
  - Document --add-seccomp-fd, --json-status-fd and --share-net
    in the man page
  - Add attributes to silence various compiler warnings
  - Allow compilation of tests with musl on mips architectures
  - Allow compilation with older glibc
  - Disable sanitizers for a test helper whose seccomp profile
    breaks the instrumentation
  - Disable AddressSanitizer leak detection where it interferes
    with unit testing</changelog>
  <changelog author="dmueller@suse.com" date="1670414400">- update to v0.7.0:
  * --size option controls the size of a subsequent --tmpfs (#509)
  * Better error messages if a mount operation fails (#472)
  * Better error message if creating the new user namespace fails with
    ENOSPC (#487)
  * When building as a Meson subproject, a RUNPATH can be set on the
    executable to make it easier to bundle its libcap dependency
  * Fix test failures when running as uid 0 but with limited capabilities
    (#510)
  * Use POSIX command -v in preference to non-standard which (#527)
  * Fix a copy/paste error in --help (#531)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1679918400">- update to v0.8.0:
  * Add --disable-userns option to prevent the sandbox from
    creating its own nested user namespace
  * Add --assert-userns-disabled option to check that an existing
    userns was created with --disable-userns
  * Give a clearer error message if the kernel doesn't have
    CONFIG_SECCOMP and CONFIG_SECCOMP_FILTER</changelog>
  <changelog author="qzhao@suse.com" date="1724241600">- Add bubblewrap-CVE-2024-42472.patch:
  Backporting a253257c from upstream, Add --bind-fd and --ro-bind-fd
  to let you bind a O_PATH fd.
  (CVE-2024-42472, bsc#1229157)</changelog>
  <changelog author="alarrosa@suse.com" date="1736337600">- fix shebang in demos/flatpak-run.sh
- update to 0.11.0:
  * New --overlay, --tmp-overlay, --ro-overlay and --overlay-src
    options allow creation of overlay mounts. This feature is not
    available when bubblewrap is installed setuid.
  * New --level-prefix option produces output that can be parsed
    by tools like logger --prio-prefix and
    systemd-cat --level-prefix=1
  * bug fixes and developer visible changes
- add upstream signing key and validate source signature
- Update to version v0.10.0:
  * New features: Add the --[ro-]bind-fd option, which can be used
    to mount a filesystem represented by a file descriptor without
    time-of-check/time-of-use attacks. This is needed when
    resolving security issue in Flatpak.
    (CVE-2024-42472, bsc#1229157)
  * Other changes: Fix some confusing syntax in SetupOpFlag (no
    functional change).
- update to v0.9.0:
  * Build system changed to Meson from Autotools
  * Add --argv0
    https://github.com/containers/bubblewrap/issues/91
  * --symlink is now idempotent, meaning it succeeds if the symlink
    already exists and already has the desired target
  * Clarify security considerations in documentation
  * Clarify documentation for --cap-add
  * Report a better error message if mount(2) fails with ENOSPC
  * Fix a double-close on error reading from --args, --seccomp or
  - -add-seccomp-fd argument
  * Improve memory allocation behaviour
- Drop patch which was already included in 0.10.0:
  * bubblewrap-CVE-2024-42472.patch</changelog>
  <changelog author="mgorse@suse.com" date="1777464000">- Fix CVE-2026-41163 (bsc#1263113):
  + bubblewrap-dont-run-privilege-separated-code-bumpable.patch
  + bubblewrap-harden-privsep-parent.patch</changelog>
</package>
<package pkgid="273ec4d911db03bee863518def6b5a162269ca22f078868d2a569a51268c248d" name="busybox" arch="src">
  <version epoch="0" ver="1.37.0" rel="150700.18.10.1"/>
  <changelog author="radoslav.kolev@suse.com" date="1666008000">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2014-9645 (bsc#914660):  strips of / in module names that can lead to loading unwanted modules</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1668427200">- Fix build under SLE-12</changelog>
  <changelog author="dimstar@opensuse.org" date="1669204800">- Add e63d7cdf.patch: awk: fix use after free (CVE-2022-30065,
  boo#1199744).</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1673006400">- Update to version 1.36.0
  - awk: fix use after free (CVE-2022-30065)
  - various fixes for ash, bc, cut, fbset, kbuild, libbb, mkfs.vfat,
    mv, powertop, sed, sort, taskset, top, udhcpc6, unzip, vi, xxd
  - improvements in ash, cmp, crond, devmem, ed, fbset, fdisk, ls, xargs, pkill
  - new applets added: seedrng, tree, tsort
- Adjust busybox.config for new features
  - ash: enable sleep built-in
  - enable new applets: seedrng, tree, tsort
  - enable SHA hardware acceleration
  - try LOOP_CONFIGURE for losetup/loop mounts, but fall back to
    LOOP_SET_FD + LOOP_SET_STATUS if not supported
- drop e63d7cdf.patch (fix for CVE-2022-30065), included upstream</changelog>
  <changelog author="dmueller@suse.com" date="1685707200">- update to 1.36.1:
  * fixes for line editing, detection of hardware sha1/sha256
    support, unzip
  (do not create suid/sgid files unless -K),
    shell (printf and sleep with no args, handing of SIGINT
    in sleep), ed.</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1693310400">-  Add ash-fix-segfault-d417193cf.patch: fix stack overflow vulnerability
  in ash (CVE-2022-48174, bsc#1214538)</changelog>
  <changelog author="kukuk@suse.com" date="1702036800">- Install udhcpc and udhcpc6 into the same directory
  (udhcp6-install-path.patch)
- Fully enable udhcpc and document that this tool needs special
  configuration and does not work out of the box [bsc#1217883]</changelog>
  <changelog author="kukuk@suse.com" date="1710417600">- tc-no-TCA_CBQ.patch: Disable TCA_CBQ code if kernel headers don't
  support them.</changelog>
  <changelog author="mge@suse.com" date="1727524800">- Update to 1.37.0 (jsc#PED-13039)
- remove unnecessary patch ash-fix-segfault-d417193cf.patch
- Update default config to match 1.37.0 expectations
- fix use-after-free in xasprintf (CVE-2023-42363, bsc#1217580)
- fix use-after-free in awk evaluate (CVE-2023-42364, bsc#1217584)
- fix use-after-free in awk copyvar (CVE-2023-42365, bsc#1217585)</changelog>
  <changelog author="kukuk@suse.com" date="1728043200">- Fix busybox.config again (got broken with 1.37.0 update)
- Cleanup spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1728302400">- Add patch to fix build on non-x86* architectures:
  * busybox-1.37.0-fix-conditional-for-sha1_process_block64_shaNI.patch</changelog>
  <changelog author="dmueller@suse.com" date="1741608000">- add busybox-1.37.0-make-ping-work-without-root-privileges.patch
  (bsc#1239176)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1745928000">- fix regression in hexdump that broke kernel build:
  * busybox-1.37.0-fix-regression-n2.patch
- fix build/tests and hexdump on big endian systems (S390):
  * busybox-1.37.0-hexdump-fix-regression-for-uint16-on-big-endian-syst.patch
  * busybox-1.37.0-od-make-B-test-little-endian-only-add-variant-for-bi.patch
  * busybox-1.37.0-hexdump-add-tests-for-x-handle-little-big-endian-pro.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1750680000">- enable halt, poweroff, reboot commands (bsc#1243201)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1752753600">- add placeholder variable and ignore applet logic to busybox.install</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1754049600">- revert the change to busybox.install.patch below. The logic will be
  needed only in busybox-links package when generating file lists.
- fix mkdir path to point to /usr/bin instead of /bin</changelog>
  <changelog author="fvogt@suse.com" date="1754913600">- Don't throw debug info away during build, let RPM separate it
  afterwards</changelog>
  <changelog author="fvogt@suse.com" date="1754913601">- Add patch to fix adduser inside containers on an SELinux host
  (boo#1247779):
  * 0001-update_passwd-Avoid-selinux_preserve_fcontext-if-SEL.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1766145600">- Fix tar hidden files via escape sequence (CVE-2025-46394, bsc#1241661)
  * 0001-archival-libarchive-sanitize-filenames-on-output-pre.patch
- Fix HTTP request header injection in wget (CVE-2025-60876, bsc#1253245)
  * wget-don-t-allow-control-characters-in-url.patch
- Set CONFIG_FIRST_SYSTEM_ID to 201 to avoid confclict (bsc#1236670)
- Fix unshare -mrpf sh core dump on  ppc64le (bsc#1249237)
  * 0001-nsenter-unshare-don-t-use-xvfork_parent_waits_and_ex.patch</changelog>
</package>
<package pkgid="f16072e24e3e42f6958d2d841d6c679f39750a1ec775022e701fc42dde1bc926" name="busybox" arch="x86_64">
  <version epoch="0" ver="1.37.0" rel="150700.18.10.1"/>
  <changelog author="radoslav.kolev@suse.com" date="1666008000">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2014-9645 (bsc#914660):  strips of / in module names that can lead to loading unwanted modules</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1668427200">- Fix build under SLE-12</changelog>
  <changelog author="dimstar@opensuse.org" date="1669204800">- Add e63d7cdf.patch: awk: fix use after free (CVE-2022-30065,
  boo#1199744).</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1673006400">- Update to version 1.36.0
  - awk: fix use after free (CVE-2022-30065)
  - various fixes for ash, bc, cut, fbset, kbuild, libbb, mkfs.vfat,
    mv, powertop, sed, sort, taskset, top, udhcpc6, unzip, vi, xxd
  - improvements in ash, cmp, crond, devmem, ed, fbset, fdisk, ls, xargs, pkill
  - new applets added: seedrng, tree, tsort
- Adjust busybox.config for new features
  - ash: enable sleep built-in
  - enable new applets: seedrng, tree, tsort
  - enable SHA hardware acceleration
  - try LOOP_CONFIGURE for losetup/loop mounts, but fall back to
    LOOP_SET_FD + LOOP_SET_STATUS if not supported
- drop e63d7cdf.patch (fix for CVE-2022-30065), included upstream</changelog>
  <changelog author="dmueller@suse.com" date="1685707200">- update to 1.36.1:
  * fixes for line editing, detection of hardware sha1/sha256
    support, unzip
  (do not create suid/sgid files unless -K),
    shell (printf and sleep with no args, handing of SIGINT
    in sleep), ed.</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1693310400">-  Add ash-fix-segfault-d417193cf.patch: fix stack overflow vulnerability
  in ash (CVE-2022-48174, bsc#1214538)</changelog>
  <changelog author="kukuk@suse.com" date="1702036800">- Install udhcpc and udhcpc6 into the same directory
  (udhcp6-install-path.patch)
- Fully enable udhcpc and document that this tool needs special
  configuration and does not work out of the box [bsc#1217883]</changelog>
  <changelog author="kukuk@suse.com" date="1710417600">- tc-no-TCA_CBQ.patch: Disable TCA_CBQ code if kernel headers don't
  support them.</changelog>
  <changelog author="mge@suse.com" date="1727524800">- Update to 1.37.0 (jsc#PED-13039)
- remove unnecessary patch ash-fix-segfault-d417193cf.patch
- Update default config to match 1.37.0 expectations
- fix use-after-free in xasprintf (CVE-2023-42363, bsc#1217580)
- fix use-after-free in awk evaluate (CVE-2023-42364, bsc#1217584)
- fix use-after-free in awk copyvar (CVE-2023-42365, bsc#1217585)</changelog>
  <changelog author="kukuk@suse.com" date="1728043200">- Fix busybox.config again (got broken with 1.37.0 update)
- Cleanup spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1728302400">- Add patch to fix build on non-x86* architectures:
  * busybox-1.37.0-fix-conditional-for-sha1_process_block64_shaNI.patch</changelog>
  <changelog author="dmueller@suse.com" date="1741608000">- add busybox-1.37.0-make-ping-work-without-root-privileges.patch
  (bsc#1239176)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1745928000">- fix regression in hexdump that broke kernel build:
  * busybox-1.37.0-fix-regression-n2.patch
- fix build/tests and hexdump on big endian systems (S390):
  * busybox-1.37.0-hexdump-fix-regression-for-uint16-on-big-endian-syst.patch
  * busybox-1.37.0-od-make-B-test-little-endian-only-add-variant-for-bi.patch
  * busybox-1.37.0-hexdump-add-tests-for-x-handle-little-big-endian-pro.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1750680000">- enable halt, poweroff, reboot commands (bsc#1243201)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1752753600">- add placeholder variable and ignore applet logic to busybox.install</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1754049600">- revert the change to busybox.install.patch below. The logic will be
  needed only in busybox-links package when generating file lists.
- fix mkdir path to point to /usr/bin instead of /bin</changelog>
  <changelog author="fvogt@suse.com" date="1754913600">- Don't throw debug info away during build, let RPM separate it
  afterwards</changelog>
  <changelog author="fvogt@suse.com" date="1754913601">- Add patch to fix adduser inside containers on an SELinux host
  (boo#1247779):
  * 0001-update_passwd-Avoid-selinux_preserve_fcontext-if-SEL.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1766145600">- Fix tar hidden files via escape sequence (CVE-2025-46394, bsc#1241661)
  * 0001-archival-libarchive-sanitize-filenames-on-output-pre.patch
- Fix HTTP request header injection in wget (CVE-2025-60876, bsc#1253245)
  * wget-don-t-allow-control-characters-in-url.patch
- Set CONFIG_FIRST_SYSTEM_ID to 201 to avoid confclict (bsc#1236670)
- Fix unshare -mrpf sh core dump on  ppc64le (bsc#1249237)
  * 0001-nsenter-unshare-don-t-use-xvfork_parent_waits_and_ex.patch</changelog>
</package>
<package pkgid="1dc2a6647c931f0c170967fc27c3adfe8675f803767291d578402591dae4fa7e" name="busybox" arch="src">
  <version epoch="0" ver="1.37.0" rel="150700.18.12.1"/>
  <changelog author="radoslav.kolev@suse.com" date="1666008000">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2014-9645 (bsc#914660):  strips of / in module names that can lead to loading unwanted modules</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1668427200">- Fix build under SLE-12</changelog>
  <changelog author="dimstar@opensuse.org" date="1669204800">- Add e63d7cdf.patch: awk: fix use after free (CVE-2022-30065,
  boo#1199744).</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1673006400">- Update to version 1.36.0
  - awk: fix use after free (CVE-2022-30065)
  - various fixes for ash, bc, cut, fbset, kbuild, libbb, mkfs.vfat,
    mv, powertop, sed, sort, taskset, top, udhcpc6, unzip, vi, xxd
  - improvements in ash, cmp, crond, devmem, ed, fbset, fdisk, ls, xargs, pkill
  - new applets added: seedrng, tree, tsort
- Adjust busybox.config for new features
  - ash: enable sleep built-in
  - enable new applets: seedrng, tree, tsort
  - enable SHA hardware acceleration
  - try LOOP_CONFIGURE for losetup/loop mounts, but fall back to
    LOOP_SET_FD + LOOP_SET_STATUS if not supported
- drop e63d7cdf.patch (fix for CVE-2022-30065), included upstream</changelog>
  <changelog author="dmueller@suse.com" date="1685707200">- update to 1.36.1:
  * fixes for line editing, detection of hardware sha1/sha256
    support, unzip
  (do not create suid/sgid files unless -K),
    shell (printf and sleep with no args, handing of SIGINT
    in sleep), ed.</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1693310400">-  Add ash-fix-segfault-d417193cf.patch: fix stack overflow vulnerability
  in ash (CVE-2022-48174, bsc#1214538)</changelog>
  <changelog author="kukuk@suse.com" date="1702036800">- Install udhcpc and udhcpc6 into the same directory
  (udhcp6-install-path.patch)
- Fully enable udhcpc and document that this tool needs special
  configuration and does not work out of the box [bsc#1217883]</changelog>
  <changelog author="kukuk@suse.com" date="1710417600">- tc-no-TCA_CBQ.patch: Disable TCA_CBQ code if kernel headers don't
  support them.</changelog>
  <changelog author="mge@suse.com" date="1727524800">- Update to 1.37.0 (jsc#PED-13039)
- remove unnecessary patch ash-fix-segfault-d417193cf.patch
- Update default config to match 1.37.0 expectations
- fix use-after-free in xasprintf (CVE-2023-42363, bsc#1217580)
- fix use-after-free in awk evaluate (CVE-2023-42364, bsc#1217584)
- fix use-after-free in awk copyvar (CVE-2023-42365, bsc#1217585)</changelog>
  <changelog author="kukuk@suse.com" date="1728043200">- Fix busybox.config again (got broken with 1.37.0 update)
- Cleanup spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1728302400">- Add patch to fix build on non-x86* architectures:
  * busybox-1.37.0-fix-conditional-for-sha1_process_block64_shaNI.patch</changelog>
  <changelog author="dmueller@suse.com" date="1741608000">- add busybox-1.37.0-make-ping-work-without-root-privileges.patch
  (bsc#1239176)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1745928000">- fix regression in hexdump that broke kernel build:
  * busybox-1.37.0-fix-regression-n2.patch
- fix build/tests and hexdump on big endian systems (S390):
  * busybox-1.37.0-hexdump-fix-regression-for-uint16-on-big-endian-syst.patch
  * busybox-1.37.0-od-make-B-test-little-endian-only-add-variant-for-bi.patch
  * busybox-1.37.0-hexdump-add-tests-for-x-handle-little-big-endian-pro.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1750680000">- enable halt, poweroff, reboot commands (bsc#1243201)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1752753600">- add placeholder variable and ignore applet logic to busybox.install</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1754049600">- revert the change to busybox.install.patch below. The logic will be
  needed only in busybox-links package when generating file lists.
- fix mkdir path to point to /usr/bin instead of /bin</changelog>
  <changelog author="fvogt@suse.com" date="1754913600">- Don't throw debug info away during build, let RPM separate it
  afterwards</changelog>
  <changelog author="fvogt@suse.com" date="1754913601">- Add patch to fix adduser inside containers on an SELinux host
  (boo#1247779):
  * 0001-update_passwd-Avoid-selinux_preserve_fcontext-if-SEL.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1766145600">- Fix tar hidden files via escape sequence (CVE-2025-46394, bsc#1241661)
  * 0001-archival-libarchive-sanitize-filenames-on-output-pre.patch
- Fix HTTP request header injection in wget (CVE-2025-60876, bsc#1253245)
  * wget-don-t-allow-control-characters-in-url.patch
- Set CONFIG_FIRST_SYSTEM_ID to 201 to avoid confclict (bsc#1236670)
- Fix unshare -mrpf sh core dump on  ppc64le (bsc#1249237)
  * 0001-nsenter-unshare-don-t-use-xvfork_parent_waits_and_ex.patch</changelog>
</package>
<package pkgid="c8a5512c9d148c3d7dc10c5cac3ce568e5b8ec9ed69bf02e5206d19505aba4ef" name="busybox" arch="x86_64">
  <version epoch="0" ver="1.37.0" rel="150700.18.12.1"/>
  <changelog author="radoslav.kolev@suse.com" date="1666008000">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2014-9645 (bsc#914660):  strips of / in module names that can lead to loading unwanted modules</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1668427200">- Fix build under SLE-12</changelog>
  <changelog author="dimstar@opensuse.org" date="1669204800">- Add e63d7cdf.patch: awk: fix use after free (CVE-2022-30065,
  boo#1199744).</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1673006400">- Update to version 1.36.0
  - awk: fix use after free (CVE-2022-30065)
  - various fixes for ash, bc, cut, fbset, kbuild, libbb, mkfs.vfat,
    mv, powertop, sed, sort, taskset, top, udhcpc6, unzip, vi, xxd
  - improvements in ash, cmp, crond, devmem, ed, fbset, fdisk, ls, xargs, pkill
  - new applets added: seedrng, tree, tsort
- Adjust busybox.config for new features
  - ash: enable sleep built-in
  - enable new applets: seedrng, tree, tsort
  - enable SHA hardware acceleration
  - try LOOP_CONFIGURE for losetup/loop mounts, but fall back to
    LOOP_SET_FD + LOOP_SET_STATUS if not supported
- drop e63d7cdf.patch (fix for CVE-2022-30065), included upstream</changelog>
  <changelog author="dmueller@suse.com" date="1685707200">- update to 1.36.1:
  * fixes for line editing, detection of hardware sha1/sha256
    support, unzip
  (do not create suid/sgid files unless -K),
    shell (printf and sleep with no args, handing of SIGINT
    in sleep), ed.</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1693310400">-  Add ash-fix-segfault-d417193cf.patch: fix stack overflow vulnerability
  in ash (CVE-2022-48174, bsc#1214538)</changelog>
  <changelog author="kukuk@suse.com" date="1702036800">- Install udhcpc and udhcpc6 into the same directory
  (udhcp6-install-path.patch)
- Fully enable udhcpc and document that this tool needs special
  configuration and does not work out of the box [bsc#1217883]</changelog>
  <changelog author="kukuk@suse.com" date="1710417600">- tc-no-TCA_CBQ.patch: Disable TCA_CBQ code if kernel headers don't
  support them.</changelog>
  <changelog author="mge@suse.com" date="1727524800">- Update to 1.37.0 (jsc#PED-13039)
- remove unnecessary patch ash-fix-segfault-d417193cf.patch
- Update default config to match 1.37.0 expectations
- fix use-after-free in xasprintf (CVE-2023-42363, bsc#1217580)
- fix use-after-free in awk evaluate (CVE-2023-42364, bsc#1217584)
- fix use-after-free in awk copyvar (CVE-2023-42365, bsc#1217585)</changelog>
  <changelog author="kukuk@suse.com" date="1728043200">- Fix busybox.config again (got broken with 1.37.0 update)
- Cleanup spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1728302400">- Add patch to fix build on non-x86* architectures:
  * busybox-1.37.0-fix-conditional-for-sha1_process_block64_shaNI.patch</changelog>
  <changelog author="dmueller@suse.com" date="1741608000">- add busybox-1.37.0-make-ping-work-without-root-privileges.patch
  (bsc#1239176)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1745928000">- fix regression in hexdump that broke kernel build:
  * busybox-1.37.0-fix-regression-n2.patch
- fix build/tests and hexdump on big endian systems (S390):
  * busybox-1.37.0-hexdump-fix-regression-for-uint16-on-big-endian-syst.patch
  * busybox-1.37.0-od-make-B-test-little-endian-only-add-variant-for-bi.patch
  * busybox-1.37.0-hexdump-add-tests-for-x-handle-little-big-endian-pro.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1750680000">- enable halt, poweroff, reboot commands (bsc#1243201)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1752753600">- add placeholder variable and ignore applet logic to busybox.install</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1754049600">- revert the change to busybox.install.patch below. The logic will be
  needed only in busybox-links package when generating file lists.
- fix mkdir path to point to /usr/bin instead of /bin</changelog>
  <changelog author="fvogt@suse.com" date="1754913600">- Don't throw debug info away during build, let RPM separate it
  afterwards</changelog>
  <changelog author="fvogt@suse.com" date="1754913601">- Add patch to fix adduser inside containers on an SELinux host
  (boo#1247779):
  * 0001-update_passwd-Avoid-selinux_preserve_fcontext-if-SEL.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1766145600">- Fix tar hidden files via escape sequence (CVE-2025-46394, bsc#1241661)
  * 0001-archival-libarchive-sanitize-filenames-on-output-pre.patch
- Fix HTTP request header injection in wget (CVE-2025-60876, bsc#1253245)
  * wget-don-t-allow-control-characters-in-url.patch
- Set CONFIG_FIRST_SYSTEM_ID to 201 to avoid confclict (bsc#1236670)
- Fix unshare -mrpf sh core dump on  ppc64le (bsc#1249237)
  * 0001-nsenter-unshare-don-t-use-xvfork_parent_waits_and_ex.patch</changelog>
</package>
<package pkgid="77051ecdb0668395c5177bd8f3abe83cee9cd22ed21e51d05346b7a6a8dd1f78" name="busybox" arch="src">
  <version epoch="0" ver="1.37.0" rel="150700.18.15.1"/>
  <changelog author="radoslav.kolev@suse.com" date="1668427200">- Fix build under SLE-12</changelog>
  <changelog author="dimstar@opensuse.org" date="1669204800">- Add e63d7cdf.patch: awk: fix use after free (CVE-2022-30065,
  boo#1199744).</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1673006400">- Update to version 1.36.0
  - awk: fix use after free (CVE-2022-30065)
  - various fixes for ash, bc, cut, fbset, kbuild, libbb, mkfs.vfat,
    mv, powertop, sed, sort, taskset, top, udhcpc6, unzip, vi, xxd
  - improvements in ash, cmp, crond, devmem, ed, fbset, fdisk, ls, xargs, pkill
  - new applets added: seedrng, tree, tsort
- Adjust busybox.config for new features
  - ash: enable sleep built-in
  - enable new applets: seedrng, tree, tsort
  - enable SHA hardware acceleration
  - try LOOP_CONFIGURE for losetup/loop mounts, but fall back to
    LOOP_SET_FD + LOOP_SET_STATUS if not supported
- drop e63d7cdf.patch (fix for CVE-2022-30065), included upstream</changelog>
  <changelog author="dmueller@suse.com" date="1685707200">- update to 1.36.1:
  * fixes for line editing, detection of hardware sha1/sha256
    support, unzip
  (do not create suid/sgid files unless -K),
    shell (printf and sleep with no args, handing of SIGINT
    in sleep), ed.</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1693310400">-  Add ash-fix-segfault-d417193cf.patch: fix stack overflow vulnerability
  in ash (CVE-2022-48174, bsc#1214538)</changelog>
  <changelog author="kukuk@suse.com" date="1702036800">- Install udhcpc and udhcpc6 into the same directory
  (udhcp6-install-path.patch)
- Fully enable udhcpc and document that this tool needs special
  configuration and does not work out of the box [bsc#1217883]</changelog>
  <changelog author="kukuk@suse.com" date="1710417600">- tc-no-TCA_CBQ.patch: Disable TCA_CBQ code if kernel headers don't
  support them.</changelog>
  <changelog author="mge@suse.com" date="1727524800">- Update to 1.37.0 (jsc#PED-13039)
- remove unnecessary patch ash-fix-segfault-d417193cf.patch
- Update default config to match 1.37.0 expectations
- fix use-after-free in xasprintf (CVE-2023-42363, bsc#1217580)
- fix use-after-free in awk evaluate (CVE-2023-42364, bsc#1217584)
- fix use-after-free in awk copyvar (CVE-2023-42365, bsc#1217585)</changelog>
  <changelog author="kukuk@suse.com" date="1728043200">- Fix busybox.config again (got broken with 1.37.0 update)
- Cleanup spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1728302400">- Add patch to fix build on non-x86* architectures:
  * busybox-1.37.0-fix-conditional-for-sha1_process_block64_shaNI.patch</changelog>
  <changelog author="dmueller@suse.com" date="1741608000">- add busybox-1.37.0-make-ping-work-without-root-privileges.patch
  (bsc#1239176)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1745928000">- fix regression in hexdump that broke kernel build:
  * busybox-1.37.0-fix-regression-n2.patch
- fix build/tests and hexdump on big endian systems (S390):
  * busybox-1.37.0-hexdump-fix-regression-for-uint16-on-big-endian-syst.patch
  * busybox-1.37.0-od-make-B-test-little-endian-only-add-variant-for-bi.patch
  * busybox-1.37.0-hexdump-add-tests-for-x-handle-little-big-endian-pro.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1750680000">- enable halt, poweroff, reboot commands (bsc#1243201)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1752753600">- add placeholder variable and ignore applet logic to busybox.install</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1754049600">- revert the change to busybox.install.patch below. The logic will be
  needed only in busybox-links package when generating file lists.
- fix mkdir path to point to /usr/bin instead of /bin</changelog>
  <changelog author="fvogt@suse.com" date="1754913600">- Don't throw debug info away during build, let RPM separate it
  afterwards</changelog>
  <changelog author="fvogt@suse.com" date="1754913601">- Add patch to fix adduser inside containers on an SELinux host
  (boo#1247779):
  * 0001-update_passwd-Avoid-selinux_preserve_fcontext-if-SEL.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1766145600">- Fix tar hidden files via escape sequence (CVE-2025-46394, bsc#1241661)
  * 0001-archival-libarchive-sanitize-filenames-on-output-pre.patch
- Fix HTTP request header injection in wget (CVE-2025-60876, bsc#1253245)
  * wget-don-t-allow-control-characters-in-url.patch
- Set CONFIG_FIRST_SYSTEM_ID to 201 to avoid confclict (bsc#1236670)
- Fix unshare -mrpf sh core dump on  ppc64le (bsc#1249237)
  * 0001-nsenter-unshare-don-t-use-xvfork_parent_waits_and_ex.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1770984000">- Fix arbitrary file overwrite and potential code execution via
  incomplete path sanitization (CVE-2026-26157, bsc#1258163),
  fix arbitrary file modification and privilege escalation via
  unvalidated tar archive entries (CVE-2026-26158, bsc#1258167)
  * 0001-tar-strip-unsafe-hardlink-components-GNU-tar-does-th.patch
  * 0002-tar-only-strip-unsafe-components-from-hardlinks-not-.patch</changelog>
</package>
<package pkgid="127bab46082134026f064687779d5d078ffb63af98b67cd8dd003a05d884cb15" name="busybox" arch="x86_64">
  <version epoch="0" ver="1.37.0" rel="150700.18.15.1"/>
  <changelog author="radoslav.kolev@suse.com" date="1668427200">- Fix build under SLE-12</changelog>
  <changelog author="dimstar@opensuse.org" date="1669204800">- Add e63d7cdf.patch: awk: fix use after free (CVE-2022-30065,
  boo#1199744).</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1673006400">- Update to version 1.36.0
  - awk: fix use after free (CVE-2022-30065)
  - various fixes for ash, bc, cut, fbset, kbuild, libbb, mkfs.vfat,
    mv, powertop, sed, sort, taskset, top, udhcpc6, unzip, vi, xxd
  - improvements in ash, cmp, crond, devmem, ed, fbset, fdisk, ls, xargs, pkill
  - new applets added: seedrng, tree, tsort
- Adjust busybox.config for new features
  - ash: enable sleep built-in
  - enable new applets: seedrng, tree, tsort
  - enable SHA hardware acceleration
  - try LOOP_CONFIGURE for losetup/loop mounts, but fall back to
    LOOP_SET_FD + LOOP_SET_STATUS if not supported
- drop e63d7cdf.patch (fix for CVE-2022-30065), included upstream</changelog>
  <changelog author="dmueller@suse.com" date="1685707200">- update to 1.36.1:
  * fixes for line editing, detection of hardware sha1/sha256
    support, unzip
  (do not create suid/sgid files unless -K),
    shell (printf and sleep with no args, handing of SIGINT
    in sleep), ed.</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1693310400">-  Add ash-fix-segfault-d417193cf.patch: fix stack overflow vulnerability
  in ash (CVE-2022-48174, bsc#1214538)</changelog>
  <changelog author="kukuk@suse.com" date="1702036800">- Install udhcpc and udhcpc6 into the same directory
  (udhcp6-install-path.patch)
- Fully enable udhcpc and document that this tool needs special
  configuration and does not work out of the box [bsc#1217883]</changelog>
  <changelog author="kukuk@suse.com" date="1710417600">- tc-no-TCA_CBQ.patch: Disable TCA_CBQ code if kernel headers don't
  support them.</changelog>
  <changelog author="mge@suse.com" date="1727524800">- Update to 1.37.0 (jsc#PED-13039)
- remove unnecessary patch ash-fix-segfault-d417193cf.patch
- Update default config to match 1.37.0 expectations
- fix use-after-free in xasprintf (CVE-2023-42363, bsc#1217580)
- fix use-after-free in awk evaluate (CVE-2023-42364, bsc#1217584)
- fix use-after-free in awk copyvar (CVE-2023-42365, bsc#1217585)</changelog>
  <changelog author="kukuk@suse.com" date="1728043200">- Fix busybox.config again (got broken with 1.37.0 update)
- Cleanup spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1728302400">- Add patch to fix build on non-x86* architectures:
  * busybox-1.37.0-fix-conditional-for-sha1_process_block64_shaNI.patch</changelog>
  <changelog author="dmueller@suse.com" date="1741608000">- add busybox-1.37.0-make-ping-work-without-root-privileges.patch
  (bsc#1239176)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1745928000">- fix regression in hexdump that broke kernel build:
  * busybox-1.37.0-fix-regression-n2.patch
- fix build/tests and hexdump on big endian systems (S390):
  * busybox-1.37.0-hexdump-fix-regression-for-uint16-on-big-endian-syst.patch
  * busybox-1.37.0-od-make-B-test-little-endian-only-add-variant-for-bi.patch
  * busybox-1.37.0-hexdump-add-tests-for-x-handle-little-big-endian-pro.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1750680000">- enable halt, poweroff, reboot commands (bsc#1243201)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1752753600">- add placeholder variable and ignore applet logic to busybox.install</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1754049600">- revert the change to busybox.install.patch below. The logic will be
  needed only in busybox-links package when generating file lists.
- fix mkdir path to point to /usr/bin instead of /bin</changelog>
  <changelog author="fvogt@suse.com" date="1754913600">- Don't throw debug info away during build, let RPM separate it
  afterwards</changelog>
  <changelog author="fvogt@suse.com" date="1754913601">- Add patch to fix adduser inside containers on an SELinux host
  (boo#1247779):
  * 0001-update_passwd-Avoid-selinux_preserve_fcontext-if-SEL.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1766145600">- Fix tar hidden files via escape sequence (CVE-2025-46394, bsc#1241661)
  * 0001-archival-libarchive-sanitize-filenames-on-output-pre.patch
- Fix HTTP request header injection in wget (CVE-2025-60876, bsc#1253245)
  * wget-don-t-allow-control-characters-in-url.patch
- Set CONFIG_FIRST_SYSTEM_ID to 201 to avoid confclict (bsc#1236670)
- Fix unshare -mrpf sh core dump on  ppc64le (bsc#1249237)
  * 0001-nsenter-unshare-don-t-use-xvfork_parent_waits_and_ex.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1770984000">- Fix arbitrary file overwrite and potential code execution via
  incomplete path sanitization (CVE-2026-26157, bsc#1258163),
  fix arbitrary file modification and privilege escalation via
  unvalidated tar archive entries (CVE-2026-26158, bsc#1258167)
  * 0001-tar-strip-unsafe-hardlink-components-GNU-tar-does-th.patch
  * 0002-tar-only-strip-unsafe-components-from-hardlinks-not-.patch</changelog>
</package>
<package pkgid="6fae7cfa2d2339360cd0e615352397d3cc7141706644590f9b3eba0f3cdbc591" name="busybox" arch="src">
  <version epoch="0" ver="1.37.0" rel="150700.18.18.1"/>
  <changelog author="dimstar@opensuse.org" date="1669204800">- Add e63d7cdf.patch: awk: fix use after free (CVE-2022-30065,
  boo#1199744).</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1673006400">- Update to version 1.36.0
  - awk: fix use after free (CVE-2022-30065)
  - various fixes for ash, bc, cut, fbset, kbuild, libbb, mkfs.vfat,
    mv, powertop, sed, sort, taskset, top, udhcpc6, unzip, vi, xxd
  - improvements in ash, cmp, crond, devmem, ed, fbset, fdisk, ls, xargs, pkill
  - new applets added: seedrng, tree, tsort
- Adjust busybox.config for new features
  - ash: enable sleep built-in
  - enable new applets: seedrng, tree, tsort
  - enable SHA hardware acceleration
  - try LOOP_CONFIGURE for losetup/loop mounts, but fall back to
    LOOP_SET_FD + LOOP_SET_STATUS if not supported
- drop e63d7cdf.patch (fix for CVE-2022-30065), included upstream</changelog>
  <changelog author="dmueller@suse.com" date="1685707200">- update to 1.36.1:
  * fixes for line editing, detection of hardware sha1/sha256
    support, unzip
  (do not create suid/sgid files unless -K),
    shell (printf and sleep with no args, handing of SIGINT
    in sleep), ed.</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1693310400">-  Add ash-fix-segfault-d417193cf.patch: fix stack overflow vulnerability
  in ash (CVE-2022-48174, bsc#1214538)</changelog>
  <changelog author="kukuk@suse.com" date="1702036800">- Install udhcpc and udhcpc6 into the same directory
  (udhcp6-install-path.patch)
- Fully enable udhcpc and document that this tool needs special
  configuration and does not work out of the box [bsc#1217883]</changelog>
  <changelog author="kukuk@suse.com" date="1710417600">- tc-no-TCA_CBQ.patch: Disable TCA_CBQ code if kernel headers don't
  support them.</changelog>
  <changelog author="mge@suse.com" date="1727524800">- Update to 1.37.0 (jsc#PED-13039)
- remove unnecessary patch ash-fix-segfault-d417193cf.patch
- Update default config to match 1.37.0 expectations
- fix use-after-free in xasprintf (CVE-2023-42363, bsc#1217580)
- fix use-after-free in awk evaluate (CVE-2023-42364, bsc#1217584)
- fix use-after-free in awk copyvar (CVE-2023-42365, bsc#1217585)</changelog>
  <changelog author="kukuk@suse.com" date="1728043200">- Fix busybox.config again (got broken with 1.37.0 update)
- Cleanup spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1728302400">- Add patch to fix build on non-x86* architectures:
  * busybox-1.37.0-fix-conditional-for-sha1_process_block64_shaNI.patch</changelog>
  <changelog author="dmueller@suse.com" date="1741608000">- add busybox-1.37.0-make-ping-work-without-root-privileges.patch
  (bsc#1239176)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1745928000">- fix regression in hexdump that broke kernel build:
  * busybox-1.37.0-fix-regression-n2.patch
- fix build/tests and hexdump on big endian systems (S390):
  * busybox-1.37.0-hexdump-fix-regression-for-uint16-on-big-endian-syst.patch
  * busybox-1.37.0-od-make-B-test-little-endian-only-add-variant-for-bi.patch
  * busybox-1.37.0-hexdump-add-tests-for-x-handle-little-big-endian-pro.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1750680000">- enable halt, poweroff, reboot commands (bsc#1243201)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1752753600">- add placeholder variable and ignore applet logic to busybox.install</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1754049600">- revert the change to busybox.install.patch below. The logic will be
  needed only in busybox-links package when generating file lists.
- fix mkdir path to point to /usr/bin instead of /bin</changelog>
  <changelog author="fvogt@suse.com" date="1754913600">- Don't throw debug info away during build, let RPM separate it
  afterwards</changelog>
  <changelog author="fvogt@suse.com" date="1754913601">- Add patch to fix adduser inside containers on an SELinux host
  (boo#1247779):
  * 0001-update_passwd-Avoid-selinux_preserve_fcontext-if-SEL.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1766145600">- Fix tar hidden files via escape sequence (CVE-2025-46394, bsc#1241661)
  * 0001-archival-libarchive-sanitize-filenames-on-output-pre.patch
- Fix HTTP request header injection in wget (CVE-2025-60876, bsc#1253245)
  * wget-don-t-allow-control-characters-in-url.patch
- Set CONFIG_FIRST_SYSTEM_ID to 201 to avoid confclict (bsc#1236670)
- Fix unshare -mrpf sh core dump on  ppc64le (bsc#1249237)
  * 0001-nsenter-unshare-don-t-use-xvfork_parent_waits_and_ex.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1770984000">- Fix arbitrary file overwrite and potential code execution via
  incomplete path sanitization (CVE-2026-26157, bsc#1258163),
  fix arbitrary file modification and privilege escalation via
  unvalidated tar archive entries (CVE-2026-26158, bsc#1258167)
  * 0001-tar-strip-unsafe-hardlink-components-GNU-tar-does-th.patch
  * 0002-tar-only-strip-unsafe-components-from-hardlinks-not-.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1778241600">- Fix heap buffer overflow vulnerability in the DHCPv6 client
  (CVE-2026-29004, bsc#1263989)
  * 0001-udhcpc6-fix-buffer-overflow.patch
  * 0002-udhcpc6-check-the-size-of-D6_OPT_IAPREFIX-option.patch</changelog>
</package>
<package pkgid="69902add61adbc0b0b10d7528fa14dd06b6d5dddfcec2ec5e8945d72aa4b9544" name="busybox" arch="x86_64">
  <version epoch="0" ver="1.37.0" rel="150700.18.18.1"/>
  <changelog author="dimstar@opensuse.org" date="1669204800">- Add e63d7cdf.patch: awk: fix use after free (CVE-2022-30065,
  boo#1199744).</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1673006400">- Update to version 1.36.0
  - awk: fix use after free (CVE-2022-30065)
  - various fixes for ash, bc, cut, fbset, kbuild, libbb, mkfs.vfat,
    mv, powertop, sed, sort, taskset, top, udhcpc6, unzip, vi, xxd
  - improvements in ash, cmp, crond, devmem, ed, fbset, fdisk, ls, xargs, pkill
  - new applets added: seedrng, tree, tsort
- Adjust busybox.config for new features
  - ash: enable sleep built-in
  - enable new applets: seedrng, tree, tsort
  - enable SHA hardware acceleration
  - try LOOP_CONFIGURE for losetup/loop mounts, but fall back to
    LOOP_SET_FD + LOOP_SET_STATUS if not supported
- drop e63d7cdf.patch (fix for CVE-2022-30065), included upstream</changelog>
  <changelog author="dmueller@suse.com" date="1685707200">- update to 1.36.1:
  * fixes for line editing, detection of hardware sha1/sha256
    support, unzip
  (do not create suid/sgid files unless -K),
    shell (printf and sleep with no args, handing of SIGINT
    in sleep), ed.</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1693310400">-  Add ash-fix-segfault-d417193cf.patch: fix stack overflow vulnerability
  in ash (CVE-2022-48174, bsc#1214538)</changelog>
  <changelog author="kukuk@suse.com" date="1702036800">- Install udhcpc and udhcpc6 into the same directory
  (udhcp6-install-path.patch)
- Fully enable udhcpc and document that this tool needs special
  configuration and does not work out of the box [bsc#1217883]</changelog>
  <changelog author="kukuk@suse.com" date="1710417600">- tc-no-TCA_CBQ.patch: Disable TCA_CBQ code if kernel headers don't
  support them.</changelog>
  <changelog author="mge@suse.com" date="1727524800">- Update to 1.37.0 (jsc#PED-13039)
- remove unnecessary patch ash-fix-segfault-d417193cf.patch
- Update default config to match 1.37.0 expectations
- fix use-after-free in xasprintf (CVE-2023-42363, bsc#1217580)
- fix use-after-free in awk evaluate (CVE-2023-42364, bsc#1217584)
- fix use-after-free in awk copyvar (CVE-2023-42365, bsc#1217585)</changelog>
  <changelog author="kukuk@suse.com" date="1728043200">- Fix busybox.config again (got broken with 1.37.0 update)
- Cleanup spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1728302400">- Add patch to fix build on non-x86* architectures:
  * busybox-1.37.0-fix-conditional-for-sha1_process_block64_shaNI.patch</changelog>
  <changelog author="dmueller@suse.com" date="1741608000">- add busybox-1.37.0-make-ping-work-without-root-privileges.patch
  (bsc#1239176)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1745928000">- fix regression in hexdump that broke kernel build:
  * busybox-1.37.0-fix-regression-n2.patch
- fix build/tests and hexdump on big endian systems (S390):
  * busybox-1.37.0-hexdump-fix-regression-for-uint16-on-big-endian-syst.patch
  * busybox-1.37.0-od-make-B-test-little-endian-only-add-variant-for-bi.patch
  * busybox-1.37.0-hexdump-add-tests-for-x-handle-little-big-endian-pro.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1750680000">- enable halt, poweroff, reboot commands (bsc#1243201)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1752753600">- add placeholder variable and ignore applet logic to busybox.install</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1754049600">- revert the change to busybox.install.patch below. The logic will be
  needed only in busybox-links package when generating file lists.
- fix mkdir path to point to /usr/bin instead of /bin</changelog>
  <changelog author="fvogt@suse.com" date="1754913600">- Don't throw debug info away during build, let RPM separate it
  afterwards</changelog>
  <changelog author="fvogt@suse.com" date="1754913601">- Add patch to fix adduser inside containers on an SELinux host
  (boo#1247779):
  * 0001-update_passwd-Avoid-selinux_preserve_fcontext-if-SEL.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1766145600">- Fix tar hidden files via escape sequence (CVE-2025-46394, bsc#1241661)
  * 0001-archival-libarchive-sanitize-filenames-on-output-pre.patch
- Fix HTTP request header injection in wget (CVE-2025-60876, bsc#1253245)
  * wget-don-t-allow-control-characters-in-url.patch
- Set CONFIG_FIRST_SYSTEM_ID to 201 to avoid confclict (bsc#1236670)
- Fix unshare -mrpf sh core dump on  ppc64le (bsc#1249237)
  * 0001-nsenter-unshare-don-t-use-xvfork_parent_waits_and_ex.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1770984000">- Fix arbitrary file overwrite and potential code execution via
  incomplete path sanitization (CVE-2026-26157, bsc#1258163),
  fix arbitrary file modification and privilege escalation via
  unvalidated tar archive entries (CVE-2026-26158, bsc#1258167)
  * 0001-tar-strip-unsafe-hardlink-components-GNU-tar-does-th.patch
  * 0002-tar-only-strip-unsafe-components-from-hardlinks-not-.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1778241600">- Fix heap buffer overflow vulnerability in the DHCPv6 client
  (CVE-2026-29004, bsc#1263989)
  * 0001-udhcpc6-fix-buffer-overflow.patch
  * 0002-udhcpc6-check-the-size-of-D6_OPT_IAPREFIX-option.patch</changelog>
</package>
<package pkgid="1a0e42600629510bdd3514f35facaf22ddb151e4f16e155e741fe25268148945" name="busybox" arch="src">
  <version epoch="0" ver="1.37.0" rel="150700.18.4.1"/>
  <changelog author="mpdesouza@suse.com" date="1648641600">- Enable udhcpc</changelog>
  <changelog author="mpdesouza@suse.com" date="1654862400">- Enable switch_root
  With this change virtme --force-initramfs works as expected.</changelog>
  <changelog author="lnussel@suse.de" date="1656590400">- prepare spec file for rpmbuild --build-in-place --noprep
- use bcond for static and ww3 subpackages
- fix verbose flag</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1666008000">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2014-9645 (bsc#914660):  strips of / in module names that can lead to loading unwanted modules</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1668427200">- Fix build under SLE-12</changelog>
  <changelog author="dimstar@opensuse.org" date="1669204800">- Add e63d7cdf.patch: awk: fix use after free (CVE-2022-30065,
  boo#1199744).</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1673006400">- Update to version 1.36.0
  - awk: fix use after free (CVE-2022-30065)
  - various fixes for ash, bc, cut, fbset, kbuild, libbb, mkfs.vfat,
    mv, powertop, sed, sort, taskset, top, udhcpc6, unzip, vi, xxd
  - improvements in ash, cmp, crond, devmem, ed, fbset, fdisk, ls, xargs, pkill
  - new applets added: seedrng, tree, tsort
- Adjust busybox.config for new features
  - ash: enable sleep built-in
  - enable new applets: seedrng, tree, tsort
  - enable SHA hardware acceleration
  - try LOOP_CONFIGURE for losetup/loop mounts, but fall back to
    LOOP_SET_FD + LOOP_SET_STATUS if not supported
- drop e63d7cdf.patch (fix for CVE-2022-30065), included upstream</changelog>
  <changelog author="dmueller@suse.com" date="1685707200">- update to 1.36.1:
  * fixes for line editing, detection of hardware sha1/sha256
    support, unzip
  (do not create suid/sgid files unless -K),
    shell (printf and sleep with no args, handing of SIGINT
    in sleep), ed.</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1693310400">-  Add ash-fix-segfault-d417193cf.patch: fix stack overflow vulnerability
  in ash (CVE-2022-48174, bsc#1214538)</changelog>
  <changelog author="kukuk@suse.com" date="1702036800">- Install udhcpc and udhcpc6 into the same directory
  (udhcp6-install-path.patch)
- Fully enable udhcpc and document that this tool needs special
  configuration and does not work out of the box [bsc#1217883]</changelog>
  <changelog author="kukuk@suse.com" date="1710417600">- tc-no-TCA_CBQ.patch: Disable TCA_CBQ code if kernel headers don't
  support them.</changelog>
  <changelog author="mge@suse.com" date="1727524800">- Update to 1.37.0 (jsc#PED-13039)
- remove unnecessary patch ash-fix-segfault-d417193cf.patch
- Update default config to match 1.37.0 expectations
- fix use-after-free in xasprintf (CVE-2023-42363, bsc#1217580)
- fix use-after-free in awk evaluate (CVE-2023-42364, bsc#1217584)
- fix use-after-free in awk copyvar (CVE-2023-42365, bsc#1217585)</changelog>
  <changelog author="kukuk@suse.com" date="1728043200">- Fix busybox.config again (got broken with 1.37.0 update)
- Cleanup spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1728302400">- Add patch to fix build on non-x86* architectures:
  * busybox-1.37.0-fix-conditional-for-sha1_process_block64_shaNI.patch</changelog>
  <changelog author="dmueller@suse.com" date="1741608000">- add busybox-1.37.0-make-ping-work-without-root-privileges.patch
  (bsc#1239176)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1745928000">- fix regression in hexdump that broke kernel build:
  * busybox-1.37.0-fix-regression-n2.patch
- fix build/tests and hexdump on big endian systems (S390):
  * busybox-1.37.0-hexdump-fix-regression-for-uint16-on-big-endian-syst.patch
  * busybox-1.37.0-od-make-B-test-little-endian-only-add-variant-for-bi.patch
  * busybox-1.37.0-hexdump-add-tests-for-x-handle-little-big-endian-pro.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1750680000">- enable halt, poweroff, reboot commands (bsc#1243201)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1752753600">- add placeholder variable and ignore applet logic to busybox.install</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1754049600">- revert the change to busybox.install.patch below. The logic will be
  needed only in busybox-links package when generating file lists.
- fix mkdir path to point to /usr/bin instead of /bin</changelog>
</package>
<package pkgid="7b3ccbcf5366c5fad518fd8e80c765603718648f7827abc4e20ecec9ee903bc2" name="busybox" arch="x86_64">
  <version epoch="0" ver="1.37.0" rel="150700.18.4.1"/>
  <changelog author="mpdesouza@suse.com" date="1648641600">- Enable udhcpc</changelog>
  <changelog author="mpdesouza@suse.com" date="1654862400">- Enable switch_root
  With this change virtme --force-initramfs works as expected.</changelog>
  <changelog author="lnussel@suse.de" date="1656590400">- prepare spec file for rpmbuild --build-in-place --noprep
- use bcond for static and ww3 subpackages
- fix verbose flag</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1666008000">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2014-9645 (bsc#914660):  strips of / in module names that can lead to loading unwanted modules</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1668427200">- Fix build under SLE-12</changelog>
  <changelog author="dimstar@opensuse.org" date="1669204800">- Add e63d7cdf.patch: awk: fix use after free (CVE-2022-30065,
  boo#1199744).</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1673006400">- Update to version 1.36.0
  - awk: fix use after free (CVE-2022-30065)
  - various fixes for ash, bc, cut, fbset, kbuild, libbb, mkfs.vfat,
    mv, powertop, sed, sort, taskset, top, udhcpc6, unzip, vi, xxd
  - improvements in ash, cmp, crond, devmem, ed, fbset, fdisk, ls, xargs, pkill
  - new applets added: seedrng, tree, tsort
- Adjust busybox.config for new features
  - ash: enable sleep built-in
  - enable new applets: seedrng, tree, tsort
  - enable SHA hardware acceleration
  - try LOOP_CONFIGURE for losetup/loop mounts, but fall back to
    LOOP_SET_FD + LOOP_SET_STATUS if not supported
- drop e63d7cdf.patch (fix for CVE-2022-30065), included upstream</changelog>
  <changelog author="dmueller@suse.com" date="1685707200">- update to 1.36.1:
  * fixes for line editing, detection of hardware sha1/sha256
    support, unzip
  (do not create suid/sgid files unless -K),
    shell (printf and sleep with no args, handing of SIGINT
    in sleep), ed.</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1693310400">-  Add ash-fix-segfault-d417193cf.patch: fix stack overflow vulnerability
  in ash (CVE-2022-48174, bsc#1214538)</changelog>
  <changelog author="kukuk@suse.com" date="1702036800">- Install udhcpc and udhcpc6 into the same directory
  (udhcp6-install-path.patch)
- Fully enable udhcpc and document that this tool needs special
  configuration and does not work out of the box [bsc#1217883]</changelog>
  <changelog author="kukuk@suse.com" date="1710417600">- tc-no-TCA_CBQ.patch: Disable TCA_CBQ code if kernel headers don't
  support them.</changelog>
  <changelog author="mge@suse.com" date="1727524800">- Update to 1.37.0 (jsc#PED-13039)
- remove unnecessary patch ash-fix-segfault-d417193cf.patch
- Update default config to match 1.37.0 expectations
- fix use-after-free in xasprintf (CVE-2023-42363, bsc#1217580)
- fix use-after-free in awk evaluate (CVE-2023-42364, bsc#1217584)
- fix use-after-free in awk copyvar (CVE-2023-42365, bsc#1217585)</changelog>
  <changelog author="kukuk@suse.com" date="1728043200">- Fix busybox.config again (got broken with 1.37.0 update)
- Cleanup spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1728302400">- Add patch to fix build on non-x86* architectures:
  * busybox-1.37.0-fix-conditional-for-sha1_process_block64_shaNI.patch</changelog>
  <changelog author="dmueller@suse.com" date="1741608000">- add busybox-1.37.0-make-ping-work-without-root-privileges.patch
  (bsc#1239176)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1745928000">- fix regression in hexdump that broke kernel build:
  * busybox-1.37.0-fix-regression-n2.patch
- fix build/tests and hexdump on big endian systems (S390):
  * busybox-1.37.0-hexdump-fix-regression-for-uint16-on-big-endian-syst.patch
  * busybox-1.37.0-od-make-B-test-little-endian-only-add-variant-for-bi.patch
  * busybox-1.37.0-hexdump-add-tests-for-x-handle-little-big-endian-pro.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1750680000">- enable halt, poweroff, reboot commands (bsc#1243201)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1752753600">- add placeholder variable and ignore applet logic to busybox.install</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1754049600">- revert the change to busybox.install.patch below. The logic will be
  needed only in busybox-links package when generating file lists.
- fix mkdir path to point to /usr/bin instead of /bin</changelog>
</package>
<package pkgid="d5e4036bbfe53d52a7f81ae96cf11e5c4d03b8ccd97e6bd575e879c8f28e1242" name="busybox" arch="src">
  <version epoch="0" ver="1.37.0" rel="150700.18.7.1"/>
  <changelog author="lnussel@suse.de" date="1656590400">- prepare spec file for rpmbuild --build-in-place --noprep
- use bcond for static and ww3 subpackages
- fix verbose flag</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1666008000">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2014-9645 (bsc#914660):  strips of / in module names that can lead to loading unwanted modules</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1668427200">- Fix build under SLE-12</changelog>
  <changelog author="dimstar@opensuse.org" date="1669204800">- Add e63d7cdf.patch: awk: fix use after free (CVE-2022-30065,
  boo#1199744).</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1673006400">- Update to version 1.36.0
  - awk: fix use after free (CVE-2022-30065)
  - various fixes for ash, bc, cut, fbset, kbuild, libbb, mkfs.vfat,
    mv, powertop, sed, sort, taskset, top, udhcpc6, unzip, vi, xxd
  - improvements in ash, cmp, crond, devmem, ed, fbset, fdisk, ls, xargs, pkill
  - new applets added: seedrng, tree, tsort
- Adjust busybox.config for new features
  - ash: enable sleep built-in
  - enable new applets: seedrng, tree, tsort
  - enable SHA hardware acceleration
  - try LOOP_CONFIGURE for losetup/loop mounts, but fall back to
    LOOP_SET_FD + LOOP_SET_STATUS if not supported
- drop e63d7cdf.patch (fix for CVE-2022-30065), included upstream</changelog>
  <changelog author="dmueller@suse.com" date="1685707200">- update to 1.36.1:
  * fixes for line editing, detection of hardware sha1/sha256
    support, unzip
  (do not create suid/sgid files unless -K),
    shell (printf and sleep with no args, handing of SIGINT
    in sleep), ed.</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1693310400">-  Add ash-fix-segfault-d417193cf.patch: fix stack overflow vulnerability
  in ash (CVE-2022-48174, bsc#1214538)</changelog>
  <changelog author="kukuk@suse.com" date="1702036800">- Install udhcpc and udhcpc6 into the same directory
  (udhcp6-install-path.patch)
- Fully enable udhcpc and document that this tool needs special
  configuration and does not work out of the box [bsc#1217883]</changelog>
  <changelog author="kukuk@suse.com" date="1710417600">- tc-no-TCA_CBQ.patch: Disable TCA_CBQ code if kernel headers don't
  support them.</changelog>
  <changelog author="mge@suse.com" date="1727524800">- Update to 1.37.0 (jsc#PED-13039)
- remove unnecessary patch ash-fix-segfault-d417193cf.patch
- Update default config to match 1.37.0 expectations
- fix use-after-free in xasprintf (CVE-2023-42363, bsc#1217580)
- fix use-after-free in awk evaluate (CVE-2023-42364, bsc#1217584)
- fix use-after-free in awk copyvar (CVE-2023-42365, bsc#1217585)</changelog>
  <changelog author="kukuk@suse.com" date="1728043200">- Fix busybox.config again (got broken with 1.37.0 update)
- Cleanup spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1728302400">- Add patch to fix build on non-x86* architectures:
  * busybox-1.37.0-fix-conditional-for-sha1_process_block64_shaNI.patch</changelog>
  <changelog author="dmueller@suse.com" date="1741608000">- add busybox-1.37.0-make-ping-work-without-root-privileges.patch
  (bsc#1239176)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1745928000">- fix regression in hexdump that broke kernel build:
  * busybox-1.37.0-fix-regression-n2.patch
- fix build/tests and hexdump on big endian systems (S390):
  * busybox-1.37.0-hexdump-fix-regression-for-uint16-on-big-endian-syst.patch
  * busybox-1.37.0-od-make-B-test-little-endian-only-add-variant-for-bi.patch
  * busybox-1.37.0-hexdump-add-tests-for-x-handle-little-big-endian-pro.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1750680000">- enable halt, poweroff, reboot commands (bsc#1243201)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1752753600">- add placeholder variable and ignore applet logic to busybox.install</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1754049600">- revert the change to busybox.install.patch below. The logic will be
  needed only in busybox-links package when generating file lists.
- fix mkdir path to point to /usr/bin instead of /bin</changelog>
  <changelog author="fvogt@suse.com" date="1754913600">- Don't throw debug info away during build, let RPM separate it
  afterwards</changelog>
  <changelog author="fvogt@suse.com" date="1754913601">- Add patch to fix adduser inside containers on an SELinux host
  (boo#1247779):
  * 0001-update_passwd-Avoid-selinux_preserve_fcontext-if-SEL.patch</changelog>
</package>
<package pkgid="f1a70ef0eec0fb4d62ceebfd8f8c9399574d2250dbbac2b94c9a151b4cdd297b" name="busybox" arch="x86_64">
  <version epoch="0" ver="1.37.0" rel="150700.18.7.1"/>
  <changelog author="lnussel@suse.de" date="1656590400">- prepare spec file for rpmbuild --build-in-place --noprep
- use bcond for static and ww3 subpackages
- fix verbose flag</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1666008000">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2014-9645 (bsc#914660):  strips of / in module names that can lead to loading unwanted modules</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1668427200">- Fix build under SLE-12</changelog>
  <changelog author="dimstar@opensuse.org" date="1669204800">- Add e63d7cdf.patch: awk: fix use after free (CVE-2022-30065,
  boo#1199744).</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1673006400">- Update to version 1.36.0
  - awk: fix use after free (CVE-2022-30065)
  - various fixes for ash, bc, cut, fbset, kbuild, libbb, mkfs.vfat,
    mv, powertop, sed, sort, taskset, top, udhcpc6, unzip, vi, xxd
  - improvements in ash, cmp, crond, devmem, ed, fbset, fdisk, ls, xargs, pkill
  - new applets added: seedrng, tree, tsort
- Adjust busybox.config for new features
  - ash: enable sleep built-in
  - enable new applets: seedrng, tree, tsort
  - enable SHA hardware acceleration
  - try LOOP_CONFIGURE for losetup/loop mounts, but fall back to
    LOOP_SET_FD + LOOP_SET_STATUS if not supported
- drop e63d7cdf.patch (fix for CVE-2022-30065), included upstream</changelog>
  <changelog author="dmueller@suse.com" date="1685707200">- update to 1.36.1:
  * fixes for line editing, detection of hardware sha1/sha256
    support, unzip
  (do not create suid/sgid files unless -K),
    shell (printf and sleep with no args, handing of SIGINT
    in sleep), ed.</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1693310400">-  Add ash-fix-segfault-d417193cf.patch: fix stack overflow vulnerability
  in ash (CVE-2022-48174, bsc#1214538)</changelog>
  <changelog author="kukuk@suse.com" date="1702036800">- Install udhcpc and udhcpc6 into the same directory
  (udhcp6-install-path.patch)
- Fully enable udhcpc and document that this tool needs special
  configuration and does not work out of the box [bsc#1217883]</changelog>
  <changelog author="kukuk@suse.com" date="1710417600">- tc-no-TCA_CBQ.patch: Disable TCA_CBQ code if kernel headers don't
  support them.</changelog>
  <changelog author="mge@suse.com" date="1727524800">- Update to 1.37.0 (jsc#PED-13039)
- remove unnecessary patch ash-fix-segfault-d417193cf.patch
- Update default config to match 1.37.0 expectations
- fix use-after-free in xasprintf (CVE-2023-42363, bsc#1217580)
- fix use-after-free in awk evaluate (CVE-2023-42364, bsc#1217584)
- fix use-after-free in awk copyvar (CVE-2023-42365, bsc#1217585)</changelog>
  <changelog author="kukuk@suse.com" date="1728043200">- Fix busybox.config again (got broken with 1.37.0 update)
- Cleanup spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1728302400">- Add patch to fix build on non-x86* architectures:
  * busybox-1.37.0-fix-conditional-for-sha1_process_block64_shaNI.patch</changelog>
  <changelog author="dmueller@suse.com" date="1741608000">- add busybox-1.37.0-make-ping-work-without-root-privileges.patch
  (bsc#1239176)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1745928000">- fix regression in hexdump that broke kernel build:
  * busybox-1.37.0-fix-regression-n2.patch
- fix build/tests and hexdump on big endian systems (S390):
  * busybox-1.37.0-hexdump-fix-regression-for-uint16-on-big-endian-syst.patch
  * busybox-1.37.0-od-make-B-test-little-endian-only-add-variant-for-bi.patch
  * busybox-1.37.0-hexdump-add-tests-for-x-handle-little-big-endian-pro.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1750680000">- enable halt, poweroff, reboot commands (bsc#1243201)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1752753600">- add placeholder variable and ignore applet logic to busybox.install</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1754049600">- revert the change to busybox.install.patch below. The logic will be
  needed only in busybox-links package when generating file lists.
- fix mkdir path to point to /usr/bin instead of /bin</changelog>
  <changelog author="fvogt@suse.com" date="1754913600">- Don't throw debug info away during build, let RPM separate it
  afterwards</changelog>
  <changelog author="fvogt@suse.com" date="1754913601">- Add patch to fix adduser inside containers on an SELinux host
  (boo#1247779):
  * 0001-update_passwd-Avoid-selinux_preserve_fcontext-if-SEL.patch</changelog>
</package>
<package pkgid="e7f890fece251ff8669adb47d24ea0e8412dbd8ef6d5cdf0721356889067c2c0" name="busybox-static" arch="x86_64">
  <version epoch="0" ver="1.37.0" rel="150700.18.10.1"/>
  <changelog author="radoslav.kolev@suse.com" date="1666008000">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2014-9645 (bsc#914660):  strips of / in module names that can lead to loading unwanted modules</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1668427200">- Fix build under SLE-12</changelog>
  <changelog author="dimstar@opensuse.org" date="1669204800">- Add e63d7cdf.patch: awk: fix use after free (CVE-2022-30065,
  boo#1199744).</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1673006400">- Update to version 1.36.0
  - awk: fix use after free (CVE-2022-30065)
  - various fixes for ash, bc, cut, fbset, kbuild, libbb, mkfs.vfat,
    mv, powertop, sed, sort, taskset, top, udhcpc6, unzip, vi, xxd
  - improvements in ash, cmp, crond, devmem, ed, fbset, fdisk, ls, xargs, pkill
  - new applets added: seedrng, tree, tsort
- Adjust busybox.config for new features
  - ash: enable sleep built-in
  - enable new applets: seedrng, tree, tsort
  - enable SHA hardware acceleration
  - try LOOP_CONFIGURE for losetup/loop mounts, but fall back to
    LOOP_SET_FD + LOOP_SET_STATUS if not supported
- drop e63d7cdf.patch (fix for CVE-2022-30065), included upstream</changelog>
  <changelog author="dmueller@suse.com" date="1685707200">- update to 1.36.1:
  * fixes for line editing, detection of hardware sha1/sha256
    support, unzip
  (do not create suid/sgid files unless -K),
    shell (printf and sleep with no args, handing of SIGINT
    in sleep), ed.</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1693310400">-  Add ash-fix-segfault-d417193cf.patch: fix stack overflow vulnerability
  in ash (CVE-2022-48174, bsc#1214538)</changelog>
  <changelog author="kukuk@suse.com" date="1702036800">- Install udhcpc and udhcpc6 into the same directory
  (udhcp6-install-path.patch)
- Fully enable udhcpc and document that this tool needs special
  configuration and does not work out of the box [bsc#1217883]</changelog>
  <changelog author="kukuk@suse.com" date="1710417600">- tc-no-TCA_CBQ.patch: Disable TCA_CBQ code if kernel headers don't
  support them.</changelog>
  <changelog author="mge@suse.com" date="1727524800">- Update to 1.37.0 (jsc#PED-13039)
- remove unnecessary patch ash-fix-segfault-d417193cf.patch
- Update default config to match 1.37.0 expectations
- fix use-after-free in xasprintf (CVE-2023-42363, bsc#1217580)
- fix use-after-free in awk evaluate (CVE-2023-42364, bsc#1217584)
- fix use-after-free in awk copyvar (CVE-2023-42365, bsc#1217585)</changelog>
  <changelog author="kukuk@suse.com" date="1728043200">- Fix busybox.config again (got broken with 1.37.0 update)
- Cleanup spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1728302400">- Add patch to fix build on non-x86* architectures:
  * busybox-1.37.0-fix-conditional-for-sha1_process_block64_shaNI.patch</changelog>
  <changelog author="dmueller@suse.com" date="1741608000">- add busybox-1.37.0-make-ping-work-without-root-privileges.patch
  (bsc#1239176)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1745928000">- fix regression in hexdump that broke kernel build:
  * busybox-1.37.0-fix-regression-n2.patch
- fix build/tests and hexdump on big endian systems (S390):
  * busybox-1.37.0-hexdump-fix-regression-for-uint16-on-big-endian-syst.patch
  * busybox-1.37.0-od-make-B-test-little-endian-only-add-variant-for-bi.patch
  * busybox-1.37.0-hexdump-add-tests-for-x-handle-little-big-endian-pro.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1750680000">- enable halt, poweroff, reboot commands (bsc#1243201)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1752753600">- add placeholder variable and ignore applet logic to busybox.install</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1754049600">- revert the change to busybox.install.patch below. The logic will be
  needed only in busybox-links package when generating file lists.
- fix mkdir path to point to /usr/bin instead of /bin</changelog>
  <changelog author="fvogt@suse.com" date="1754913600">- Don't throw debug info away during build, let RPM separate it
  afterwards</changelog>
  <changelog author="fvogt@suse.com" date="1754913601">- Add patch to fix adduser inside containers on an SELinux host
  (boo#1247779):
  * 0001-update_passwd-Avoid-selinux_preserve_fcontext-if-SEL.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1766145600">- Fix tar hidden files via escape sequence (CVE-2025-46394, bsc#1241661)
  * 0001-archival-libarchive-sanitize-filenames-on-output-pre.patch
- Fix HTTP request header injection in wget (CVE-2025-60876, bsc#1253245)
  * wget-don-t-allow-control-characters-in-url.patch
- Set CONFIG_FIRST_SYSTEM_ID to 201 to avoid confclict (bsc#1236670)
- Fix unshare -mrpf sh core dump on  ppc64le (bsc#1249237)
  * 0001-nsenter-unshare-don-t-use-xvfork_parent_waits_and_ex.patch</changelog>
</package>
<package pkgid="1557c9942e309c425ed76e1497f90cec49f1ff0b8a0168503f74737cf33fc458" name="busybox-static" arch="x86_64">
  <version epoch="0" ver="1.37.0" rel="150700.18.12.1"/>
  <changelog author="radoslav.kolev@suse.com" date="1666008000">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2014-9645 (bsc#914660):  strips of / in module names that can lead to loading unwanted modules</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1668427200">- Fix build under SLE-12</changelog>
  <changelog author="dimstar@opensuse.org" date="1669204800">- Add e63d7cdf.patch: awk: fix use after free (CVE-2022-30065,
  boo#1199744).</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1673006400">- Update to version 1.36.0
  - awk: fix use after free (CVE-2022-30065)
  - various fixes for ash, bc, cut, fbset, kbuild, libbb, mkfs.vfat,
    mv, powertop, sed, sort, taskset, top, udhcpc6, unzip, vi, xxd
  - improvements in ash, cmp, crond, devmem, ed, fbset, fdisk, ls, xargs, pkill
  - new applets added: seedrng, tree, tsort
- Adjust busybox.config for new features
  - ash: enable sleep built-in
  - enable new applets: seedrng, tree, tsort
  - enable SHA hardware acceleration
  - try LOOP_CONFIGURE for losetup/loop mounts, but fall back to
    LOOP_SET_FD + LOOP_SET_STATUS if not supported
- drop e63d7cdf.patch (fix for CVE-2022-30065), included upstream</changelog>
  <changelog author="dmueller@suse.com" date="1685707200">- update to 1.36.1:
  * fixes for line editing, detection of hardware sha1/sha256
    support, unzip
  (do not create suid/sgid files unless -K),
    shell (printf and sleep with no args, handing of SIGINT
    in sleep), ed.</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1693310400">-  Add ash-fix-segfault-d417193cf.patch: fix stack overflow vulnerability
  in ash (CVE-2022-48174, bsc#1214538)</changelog>
  <changelog author="kukuk@suse.com" date="1702036800">- Install udhcpc and udhcpc6 into the same directory
  (udhcp6-install-path.patch)
- Fully enable udhcpc and document that this tool needs special
  configuration and does not work out of the box [bsc#1217883]</changelog>
  <changelog author="kukuk@suse.com" date="1710417600">- tc-no-TCA_CBQ.patch: Disable TCA_CBQ code if kernel headers don't
  support them.</changelog>
  <changelog author="mge@suse.com" date="1727524800">- Update to 1.37.0 (jsc#PED-13039)
- remove unnecessary patch ash-fix-segfault-d417193cf.patch
- Update default config to match 1.37.0 expectations
- fix use-after-free in xasprintf (CVE-2023-42363, bsc#1217580)
- fix use-after-free in awk evaluate (CVE-2023-42364, bsc#1217584)
- fix use-after-free in awk copyvar (CVE-2023-42365, bsc#1217585)</changelog>
  <changelog author="kukuk@suse.com" date="1728043200">- Fix busybox.config again (got broken with 1.37.0 update)
- Cleanup spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1728302400">- Add patch to fix build on non-x86* architectures:
  * busybox-1.37.0-fix-conditional-for-sha1_process_block64_shaNI.patch</changelog>
  <changelog author="dmueller@suse.com" date="1741608000">- add busybox-1.37.0-make-ping-work-without-root-privileges.patch
  (bsc#1239176)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1745928000">- fix regression in hexdump that broke kernel build:
  * busybox-1.37.0-fix-regression-n2.patch
- fix build/tests and hexdump on big endian systems (S390):
  * busybox-1.37.0-hexdump-fix-regression-for-uint16-on-big-endian-syst.patch
  * busybox-1.37.0-od-make-B-test-little-endian-only-add-variant-for-bi.patch
  * busybox-1.37.0-hexdump-add-tests-for-x-handle-little-big-endian-pro.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1750680000">- enable halt, poweroff, reboot commands (bsc#1243201)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1752753600">- add placeholder variable and ignore applet logic to busybox.install</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1754049600">- revert the change to busybox.install.patch below. The logic will be
  needed only in busybox-links package when generating file lists.
- fix mkdir path to point to /usr/bin instead of /bin</changelog>
  <changelog author="fvogt@suse.com" date="1754913600">- Don't throw debug info away during build, let RPM separate it
  afterwards</changelog>
  <changelog author="fvogt@suse.com" date="1754913601">- Add patch to fix adduser inside containers on an SELinux host
  (boo#1247779):
  * 0001-update_passwd-Avoid-selinux_preserve_fcontext-if-SEL.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1766145600">- Fix tar hidden files via escape sequence (CVE-2025-46394, bsc#1241661)
  * 0001-archival-libarchive-sanitize-filenames-on-output-pre.patch
- Fix HTTP request header injection in wget (CVE-2025-60876, bsc#1253245)
  * wget-don-t-allow-control-characters-in-url.patch
- Set CONFIG_FIRST_SYSTEM_ID to 201 to avoid confclict (bsc#1236670)
- Fix unshare -mrpf sh core dump on  ppc64le (bsc#1249237)
  * 0001-nsenter-unshare-don-t-use-xvfork_parent_waits_and_ex.patch</changelog>
</package>
<package pkgid="464249bda3ee5c210cbc7b22d90181ddc03f5ba573438f035de3f1e3275e3fa5" name="busybox-static" arch="x86_64">
  <version epoch="0" ver="1.37.0" rel="150700.18.15.1"/>
  <changelog author="radoslav.kolev@suse.com" date="1668427200">- Fix build under SLE-12</changelog>
  <changelog author="dimstar@opensuse.org" date="1669204800">- Add e63d7cdf.patch: awk: fix use after free (CVE-2022-30065,
  boo#1199744).</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1673006400">- Update to version 1.36.0
  - awk: fix use after free (CVE-2022-30065)
  - various fixes for ash, bc, cut, fbset, kbuild, libbb, mkfs.vfat,
    mv, powertop, sed, sort, taskset, top, udhcpc6, unzip, vi, xxd
  - improvements in ash, cmp, crond, devmem, ed, fbset, fdisk, ls, xargs, pkill
  - new applets added: seedrng, tree, tsort
- Adjust busybox.config for new features
  - ash: enable sleep built-in
  - enable new applets: seedrng, tree, tsort
  - enable SHA hardware acceleration
  - try LOOP_CONFIGURE for losetup/loop mounts, but fall back to
    LOOP_SET_FD + LOOP_SET_STATUS if not supported
- drop e63d7cdf.patch (fix for CVE-2022-30065), included upstream</changelog>
  <changelog author="dmueller@suse.com" date="1685707200">- update to 1.36.1:
  * fixes for line editing, detection of hardware sha1/sha256
    support, unzip
  (do not create suid/sgid files unless -K),
    shell (printf and sleep with no args, handing of SIGINT
    in sleep), ed.</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1693310400">-  Add ash-fix-segfault-d417193cf.patch: fix stack overflow vulnerability
  in ash (CVE-2022-48174, bsc#1214538)</changelog>
  <changelog author="kukuk@suse.com" date="1702036800">- Install udhcpc and udhcpc6 into the same directory
  (udhcp6-install-path.patch)
- Fully enable udhcpc and document that this tool needs special
  configuration and does not work out of the box [bsc#1217883]</changelog>
  <changelog author="kukuk@suse.com" date="1710417600">- tc-no-TCA_CBQ.patch: Disable TCA_CBQ code if kernel headers don't
  support them.</changelog>
  <changelog author="mge@suse.com" date="1727524800">- Update to 1.37.0 (jsc#PED-13039)
- remove unnecessary patch ash-fix-segfault-d417193cf.patch
- Update default config to match 1.37.0 expectations
- fix use-after-free in xasprintf (CVE-2023-42363, bsc#1217580)
- fix use-after-free in awk evaluate (CVE-2023-42364, bsc#1217584)
- fix use-after-free in awk copyvar (CVE-2023-42365, bsc#1217585)</changelog>
  <changelog author="kukuk@suse.com" date="1728043200">- Fix busybox.config again (got broken with 1.37.0 update)
- Cleanup spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1728302400">- Add patch to fix build on non-x86* architectures:
  * busybox-1.37.0-fix-conditional-for-sha1_process_block64_shaNI.patch</changelog>
  <changelog author="dmueller@suse.com" date="1741608000">- add busybox-1.37.0-make-ping-work-without-root-privileges.patch
  (bsc#1239176)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1745928000">- fix regression in hexdump that broke kernel build:
  * busybox-1.37.0-fix-regression-n2.patch
- fix build/tests and hexdump on big endian systems (S390):
  * busybox-1.37.0-hexdump-fix-regression-for-uint16-on-big-endian-syst.patch
  * busybox-1.37.0-od-make-B-test-little-endian-only-add-variant-for-bi.patch
  * busybox-1.37.0-hexdump-add-tests-for-x-handle-little-big-endian-pro.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1750680000">- enable halt, poweroff, reboot commands (bsc#1243201)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1752753600">- add placeholder variable and ignore applet logic to busybox.install</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1754049600">- revert the change to busybox.install.patch below. The logic will be
  needed only in busybox-links package when generating file lists.
- fix mkdir path to point to /usr/bin instead of /bin</changelog>
  <changelog author="fvogt@suse.com" date="1754913600">- Don't throw debug info away during build, let RPM separate it
  afterwards</changelog>
  <changelog author="fvogt@suse.com" date="1754913601">- Add patch to fix adduser inside containers on an SELinux host
  (boo#1247779):
  * 0001-update_passwd-Avoid-selinux_preserve_fcontext-if-SEL.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1766145600">- Fix tar hidden files via escape sequence (CVE-2025-46394, bsc#1241661)
  * 0001-archival-libarchive-sanitize-filenames-on-output-pre.patch
- Fix HTTP request header injection in wget (CVE-2025-60876, bsc#1253245)
  * wget-don-t-allow-control-characters-in-url.patch
- Set CONFIG_FIRST_SYSTEM_ID to 201 to avoid confclict (bsc#1236670)
- Fix unshare -mrpf sh core dump on  ppc64le (bsc#1249237)
  * 0001-nsenter-unshare-don-t-use-xvfork_parent_waits_and_ex.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1770984000">- Fix arbitrary file overwrite and potential code execution via
  incomplete path sanitization (CVE-2026-26157, bsc#1258163),
  fix arbitrary file modification and privilege escalation via
  unvalidated tar archive entries (CVE-2026-26158, bsc#1258167)
  * 0001-tar-strip-unsafe-hardlink-components-GNU-tar-does-th.patch
  * 0002-tar-only-strip-unsafe-components-from-hardlinks-not-.patch</changelog>
</package>
<package pkgid="6047bcc2d39a311fac25a4309bf7019e78e9817a2f84fa957a82549567faf1bb" name="busybox-static" arch="x86_64">
  <version epoch="0" ver="1.37.0" rel="150700.18.18.1"/>
  <changelog author="dimstar@opensuse.org" date="1669204800">- Add e63d7cdf.patch: awk: fix use after free (CVE-2022-30065,
  boo#1199744).</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1673006400">- Update to version 1.36.0
  - awk: fix use after free (CVE-2022-30065)
  - various fixes for ash, bc, cut, fbset, kbuild, libbb, mkfs.vfat,
    mv, powertop, sed, sort, taskset, top, udhcpc6, unzip, vi, xxd
  - improvements in ash, cmp, crond, devmem, ed, fbset, fdisk, ls, xargs, pkill
  - new applets added: seedrng, tree, tsort
- Adjust busybox.config for new features
  - ash: enable sleep built-in
  - enable new applets: seedrng, tree, tsort
  - enable SHA hardware acceleration
  - try LOOP_CONFIGURE for losetup/loop mounts, but fall back to
    LOOP_SET_FD + LOOP_SET_STATUS if not supported
- drop e63d7cdf.patch (fix for CVE-2022-30065), included upstream</changelog>
  <changelog author="dmueller@suse.com" date="1685707200">- update to 1.36.1:
  * fixes for line editing, detection of hardware sha1/sha256
    support, unzip
  (do not create suid/sgid files unless -K),
    shell (printf and sleep with no args, handing of SIGINT
    in sleep), ed.</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1693310400">-  Add ash-fix-segfault-d417193cf.patch: fix stack overflow vulnerability
  in ash (CVE-2022-48174, bsc#1214538)</changelog>
  <changelog author="kukuk@suse.com" date="1702036800">- Install udhcpc and udhcpc6 into the same directory
  (udhcp6-install-path.patch)
- Fully enable udhcpc and document that this tool needs special
  configuration and does not work out of the box [bsc#1217883]</changelog>
  <changelog author="kukuk@suse.com" date="1710417600">- tc-no-TCA_CBQ.patch: Disable TCA_CBQ code if kernel headers don't
  support them.</changelog>
  <changelog author="mge@suse.com" date="1727524800">- Update to 1.37.0 (jsc#PED-13039)
- remove unnecessary patch ash-fix-segfault-d417193cf.patch
- Update default config to match 1.37.0 expectations
- fix use-after-free in xasprintf (CVE-2023-42363, bsc#1217580)
- fix use-after-free in awk evaluate (CVE-2023-42364, bsc#1217584)
- fix use-after-free in awk copyvar (CVE-2023-42365, bsc#1217585)</changelog>
  <changelog author="kukuk@suse.com" date="1728043200">- Fix busybox.config again (got broken with 1.37.0 update)
- Cleanup spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1728302400">- Add patch to fix build on non-x86* architectures:
  * busybox-1.37.0-fix-conditional-for-sha1_process_block64_shaNI.patch</changelog>
  <changelog author="dmueller@suse.com" date="1741608000">- add busybox-1.37.0-make-ping-work-without-root-privileges.patch
  (bsc#1239176)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1745928000">- fix regression in hexdump that broke kernel build:
  * busybox-1.37.0-fix-regression-n2.patch
- fix build/tests and hexdump on big endian systems (S390):
  * busybox-1.37.0-hexdump-fix-regression-for-uint16-on-big-endian-syst.patch
  * busybox-1.37.0-od-make-B-test-little-endian-only-add-variant-for-bi.patch
  * busybox-1.37.0-hexdump-add-tests-for-x-handle-little-big-endian-pro.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1750680000">- enable halt, poweroff, reboot commands (bsc#1243201)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1752753600">- add placeholder variable and ignore applet logic to busybox.install</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1754049600">- revert the change to busybox.install.patch below. The logic will be
  needed only in busybox-links package when generating file lists.
- fix mkdir path to point to /usr/bin instead of /bin</changelog>
  <changelog author="fvogt@suse.com" date="1754913600">- Don't throw debug info away during build, let RPM separate it
  afterwards</changelog>
  <changelog author="fvogt@suse.com" date="1754913601">- Add patch to fix adduser inside containers on an SELinux host
  (boo#1247779):
  * 0001-update_passwd-Avoid-selinux_preserve_fcontext-if-SEL.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1766145600">- Fix tar hidden files via escape sequence (CVE-2025-46394, bsc#1241661)
  * 0001-archival-libarchive-sanitize-filenames-on-output-pre.patch
- Fix HTTP request header injection in wget (CVE-2025-60876, bsc#1253245)
  * wget-don-t-allow-control-characters-in-url.patch
- Set CONFIG_FIRST_SYSTEM_ID to 201 to avoid confclict (bsc#1236670)
- Fix unshare -mrpf sh core dump on  ppc64le (bsc#1249237)
  * 0001-nsenter-unshare-don-t-use-xvfork_parent_waits_and_ex.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1770984000">- Fix arbitrary file overwrite and potential code execution via
  incomplete path sanitization (CVE-2026-26157, bsc#1258163),
  fix arbitrary file modification and privilege escalation via
  unvalidated tar archive entries (CVE-2026-26158, bsc#1258167)
  * 0001-tar-strip-unsafe-hardlink-components-GNU-tar-does-th.patch
  * 0002-tar-only-strip-unsafe-components-from-hardlinks-not-.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1778241600">- Fix heap buffer overflow vulnerability in the DHCPv6 client
  (CVE-2026-29004, bsc#1263989)
  * 0001-udhcpc6-fix-buffer-overflow.patch
  * 0002-udhcpc6-check-the-size-of-D6_OPT_IAPREFIX-option.patch</changelog>
</package>
<package pkgid="e17b9540ca8af0725412ce378adde49b35fd177dc9450971cb57b02148e45142" name="busybox-static" arch="x86_64">
  <version epoch="0" ver="1.37.0" rel="150700.18.4.1"/>
  <changelog author="mpdesouza@suse.com" date="1648641600">- Enable udhcpc</changelog>
  <changelog author="mpdesouza@suse.com" date="1654862400">- Enable switch_root
  With this change virtme --force-initramfs works as expected.</changelog>
  <changelog author="lnussel@suse.de" date="1656590400">- prepare spec file for rpmbuild --build-in-place --noprep
- use bcond for static and ww3 subpackages
- fix verbose flag</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1666008000">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2014-9645 (bsc#914660):  strips of / in module names that can lead to loading unwanted modules</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1668427200">- Fix build under SLE-12</changelog>
  <changelog author="dimstar@opensuse.org" date="1669204800">- Add e63d7cdf.patch: awk: fix use after free (CVE-2022-30065,
  boo#1199744).</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1673006400">- Update to version 1.36.0
  - awk: fix use after free (CVE-2022-30065)
  - various fixes for ash, bc, cut, fbset, kbuild, libbb, mkfs.vfat,
    mv, powertop, sed, sort, taskset, top, udhcpc6, unzip, vi, xxd
  - improvements in ash, cmp, crond, devmem, ed, fbset, fdisk, ls, xargs, pkill
  - new applets added: seedrng, tree, tsort
- Adjust busybox.config for new features
  - ash: enable sleep built-in
  - enable new applets: seedrng, tree, tsort
  - enable SHA hardware acceleration
  - try LOOP_CONFIGURE for losetup/loop mounts, but fall back to
    LOOP_SET_FD + LOOP_SET_STATUS if not supported
- drop e63d7cdf.patch (fix for CVE-2022-30065), included upstream</changelog>
  <changelog author="dmueller@suse.com" date="1685707200">- update to 1.36.1:
  * fixes for line editing, detection of hardware sha1/sha256
    support, unzip
  (do not create suid/sgid files unless -K),
    shell (printf and sleep with no args, handing of SIGINT
    in sleep), ed.</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1693310400">-  Add ash-fix-segfault-d417193cf.patch: fix stack overflow vulnerability
  in ash (CVE-2022-48174, bsc#1214538)</changelog>
  <changelog author="kukuk@suse.com" date="1702036800">- Install udhcpc and udhcpc6 into the same directory
  (udhcp6-install-path.patch)
- Fully enable udhcpc and document that this tool needs special
  configuration and does not work out of the box [bsc#1217883]</changelog>
  <changelog author="kukuk@suse.com" date="1710417600">- tc-no-TCA_CBQ.patch: Disable TCA_CBQ code if kernel headers don't
  support them.</changelog>
  <changelog author="mge@suse.com" date="1727524800">- Update to 1.37.0 (jsc#PED-13039)
- remove unnecessary patch ash-fix-segfault-d417193cf.patch
- Update default config to match 1.37.0 expectations
- fix use-after-free in xasprintf (CVE-2023-42363, bsc#1217580)
- fix use-after-free in awk evaluate (CVE-2023-42364, bsc#1217584)
- fix use-after-free in awk copyvar (CVE-2023-42365, bsc#1217585)</changelog>
  <changelog author="kukuk@suse.com" date="1728043200">- Fix busybox.config again (got broken with 1.37.0 update)
- Cleanup spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1728302400">- Add patch to fix build on non-x86* architectures:
  * busybox-1.37.0-fix-conditional-for-sha1_process_block64_shaNI.patch</changelog>
  <changelog author="dmueller@suse.com" date="1741608000">- add busybox-1.37.0-make-ping-work-without-root-privileges.patch
  (bsc#1239176)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1745928000">- fix regression in hexdump that broke kernel build:
  * busybox-1.37.0-fix-regression-n2.patch
- fix build/tests and hexdump on big endian systems (S390):
  * busybox-1.37.0-hexdump-fix-regression-for-uint16-on-big-endian-syst.patch
  * busybox-1.37.0-od-make-B-test-little-endian-only-add-variant-for-bi.patch
  * busybox-1.37.0-hexdump-add-tests-for-x-handle-little-big-endian-pro.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1750680000">- enable halt, poweroff, reboot commands (bsc#1243201)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1752753600">- add placeholder variable and ignore applet logic to busybox.install</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1754049600">- revert the change to busybox.install.patch below. The logic will be
  needed only in busybox-links package when generating file lists.
- fix mkdir path to point to /usr/bin instead of /bin</changelog>
</package>
<package pkgid="2089c8dc4ab64cbe9dcb928b17023bcabf2f7fc4ee33dc4e1c78d0898c8a3a35" name="busybox-static" arch="x86_64">
  <version epoch="0" ver="1.37.0" rel="150700.18.7.1"/>
  <changelog author="lnussel@suse.de" date="1656590400">- prepare spec file for rpmbuild --build-in-place --noprep
- use bcond for static and ww3 subpackages
- fix verbose flag</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1666008000">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2014-9645 (bsc#914660):  strips of / in module names that can lead to loading unwanted modules</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1668427200">- Fix build under SLE-12</changelog>
  <changelog author="dimstar@opensuse.org" date="1669204800">- Add e63d7cdf.patch: awk: fix use after free (CVE-2022-30065,
  boo#1199744).</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1673006400">- Update to version 1.36.0
  - awk: fix use after free (CVE-2022-30065)
  - various fixes for ash, bc, cut, fbset, kbuild, libbb, mkfs.vfat,
    mv, powertop, sed, sort, taskset, top, udhcpc6, unzip, vi, xxd
  - improvements in ash, cmp, crond, devmem, ed, fbset, fdisk, ls, xargs, pkill
  - new applets added: seedrng, tree, tsort
- Adjust busybox.config for new features
  - ash: enable sleep built-in
  - enable new applets: seedrng, tree, tsort
  - enable SHA hardware acceleration
  - try LOOP_CONFIGURE for losetup/loop mounts, but fall back to
    LOOP_SET_FD + LOOP_SET_STATUS if not supported
- drop e63d7cdf.patch (fix for CVE-2022-30065), included upstream</changelog>
  <changelog author="dmueller@suse.com" date="1685707200">- update to 1.36.1:
  * fixes for line editing, detection of hardware sha1/sha256
    support, unzip
  (do not create suid/sgid files unless -K),
    shell (printf and sleep with no args, handing of SIGINT
    in sleep), ed.</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1693310400">-  Add ash-fix-segfault-d417193cf.patch: fix stack overflow vulnerability
  in ash (CVE-2022-48174, bsc#1214538)</changelog>
  <changelog author="kukuk@suse.com" date="1702036800">- Install udhcpc and udhcpc6 into the same directory
  (udhcp6-install-path.patch)
- Fully enable udhcpc and document that this tool needs special
  configuration and does not work out of the box [bsc#1217883]</changelog>
  <changelog author="kukuk@suse.com" date="1710417600">- tc-no-TCA_CBQ.patch: Disable TCA_CBQ code if kernel headers don't
  support them.</changelog>
  <changelog author="mge@suse.com" date="1727524800">- Update to 1.37.0 (jsc#PED-13039)
- remove unnecessary patch ash-fix-segfault-d417193cf.patch
- Update default config to match 1.37.0 expectations
- fix use-after-free in xasprintf (CVE-2023-42363, bsc#1217580)
- fix use-after-free in awk evaluate (CVE-2023-42364, bsc#1217584)
- fix use-after-free in awk copyvar (CVE-2023-42365, bsc#1217585)</changelog>
  <changelog author="kukuk@suse.com" date="1728043200">- Fix busybox.config again (got broken with 1.37.0 update)
- Cleanup spec file</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1728302400">- Add patch to fix build on non-x86* architectures:
  * busybox-1.37.0-fix-conditional-for-sha1_process_block64_shaNI.patch</changelog>
  <changelog author="dmueller@suse.com" date="1741608000">- add busybox-1.37.0-make-ping-work-without-root-privileges.patch
  (bsc#1239176)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1745928000">- fix regression in hexdump that broke kernel build:
  * busybox-1.37.0-fix-regression-n2.patch
- fix build/tests and hexdump on big endian systems (S390):
  * busybox-1.37.0-hexdump-fix-regression-for-uint16-on-big-endian-syst.patch
  * busybox-1.37.0-od-make-B-test-little-endian-only-add-variant-for-bi.patch
  * busybox-1.37.0-hexdump-add-tests-for-x-handle-little-big-endian-pro.patch</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1750680000">- enable halt, poweroff, reboot commands (bsc#1243201)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1752753600">- add placeholder variable and ignore applet logic to busybox.install</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1754049600">- revert the change to busybox.install.patch below. The logic will be
  needed only in busybox-links package when generating file lists.
- fix mkdir path to point to /usr/bin instead of /bin</changelog>
  <changelog author="fvogt@suse.com" date="1754913600">- Don't throw debug info away during build, let RPM separate it
  afterwards</changelog>
  <changelog author="fvogt@suse.com" date="1754913601">- Add patch to fix adduser inside containers on an SELinux host
  (boo#1247779):
  * 0001-update_passwd-Avoid-selinux_preserve_fcontext-if-SEL.patch</changelog>
</package>
<package pkgid="56a3b817bf7fb20b145b64551fdaf181ad9c3f79cca89611b50358b38aa7519d" name="ca-certificates-mozilla" arch="noarch">
  <version epoch="0" ver="2.84" rel="150200.44.1"/>
  <changelog author="meissner@suse.com" date="1633176000">- updated to 2.50 state of the Mozilla NSS Certificate store (bsc#1188006)
- Added CAs:
  + HARICA Client ECC Root CA 2021
  + HARICA Client RSA Root CA 2021
  + HARICA TLS ECC Root CA 2021
  + HARICA TLS RSA Root CA 2021
  + TunTrust Root CA</changelog>
  <changelog author="meissner@suse.com" date="1651492800">- Updated to 2.54 state of Mozilla SSL root CAs (bsc#1199079)
  Added:
  - Autoridad de Certificacion Firmaprofesional CIF A62634068
  - D-TRUST BR Root CA 1 2020
  - D-TRUST EV Root CA 1 2020
  - GlobalSign ECC Root CA R4
  - GTS Root R1
  - GTS Root R2
  - GTS Root R3
  - GTS Root R4
  - HiPKI Root CA - G1
  - ISRG Root X2
  - Telia Root CA v2
  - vTrus ECC Root CA
  - vTrus Root CA
  Removed:
  - Cybertrust Global Root
  - DST Root CA X3
  - DigiNotar PKIoverheid CA Organisatie - G2
  - GlobalSign ECC Root CA R4
  - GlobalSign Root CA R2
  - GTS Root R1
  - GTS Root R2
  - GTS Root R3
  - GTS Root R4</changelog>
  <changelog author="meissner@suse.com" date="1661774400">- Updated to 2.56 state of Mozilla SSL root CAs (bsc#1202868)
  Added:
  - Certainly Root E1
  - Certainly Root R1
  - DigiCert SMIME ECC P384 Root G5
  - DigiCert SMIME RSA4096 Root G5
  - DigiCert TLS ECC P384 Root G5
  - DigiCert TLS RSA4096 Root G5
  - E-Tugra Global Root CA ECC v3
  - E-Tugra Global Root CA RSA v3
  Removed:
  - Hellenic Academic and Research Institutions RootCA 2011</changelog>
  <changelog author="meissner@suse.com" date="1671710400">- Updated to 2.60 state of Mozilla SSL root CAs (bsc#1206622)
  Removed CAs:
  - Global Chambersign Root
  - EC-ACC
  - Network Solutions Certificate Authority
  - Staat der Nederlanden EV Root CA
  - SwissSign Platinum CA - G2
  Added CAs:
  - DIGITALSIGN GLOBAL ROOT ECDSA CA
  - DIGITALSIGN GLOBAL ROOT RSA CA
  - Security Communication ECC RootCA1
  - Security Communication RootCA3
  Changed trust:
  - TrustCor certificates only trusted up to Nov 30 (bsc#1206212)
- Removed CAs (bsc#1206212) as most code does not handle "valid before nov 30 2022"
  and it is not clear how many certs were issued for SSL middleware by TrustCor:
  - TrustCor RootCert CA-1
  - TrustCor RootCert CA-2
  - TrustCor ECA-1
  Patch: remove-trustcor.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="meissner@suse.com" date="1692014400">- Updated to 2.62 state of Mozilla SSL root CAs (bsc#1214248)
  Added:
  - Atos TrustedRoot Root CA ECC G2 2020
  - Atos TrustedRoot Root CA ECC TLS 2021
  - Atos TrustedRoot Root CA RSA G2 2020
  - Atos TrustedRoot Root CA RSA TLS 2021
  - BJCA Global Root CA1
  - BJCA Global Root CA2
  - LAWtrust Root CA2 (4096)
  - Sectigo Public Email Protection Root E46
  - Sectigo Public Email Protection Root R46
  - Sectigo Public Server Authentication Root E46
  - Sectigo Public Server Authentication Root R46
  - SSL.com Client ECC Root CA 2022
  - SSL.com Client RSA Root CA 2022
  - SSL.com TLS ECC Root CA 2022
  - SSL.com TLS RSA Root CA 2022
  Removed CAs:
  - Chambers of Commerce Root
  - E-Tugra Certification Authority
  - E-Tugra Global Root CA ECC v3
  - E-Tugra Global Root CA RSA v3
  - Hongkong Post Root CA 1</changelog>
  <changelog author="meissner@suse.com" date="1692187200">- readd _multibuild</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="meissner@suse.com" date="1708948801">- use rpm 4.20 compatible patch syntax</changelog>
  <changelog author="meissner@suse.com" date="1708948802">- Updated to 2.66 state of Mozilla SSL root CAs (bsc#1220356)
  Added:
  - CommScope Public Trust ECC Root-01
  - CommScope Public Trust ECC Root-02
  - CommScope Public Trust RSA Root-01
  - CommScope Public Trust RSA Root-02
  - D-Trust SBR Root CA 1 2022
  - D-Trust SBR Root CA 2 2022
  - Telekom Security SMIME ECC Root 2021
  - Telekom Security SMIME RSA Root 2023
  - Telekom Security TLS ECC Root 2020
  - Telekom Security TLS RSA Root 2023
  - TrustAsia Global Root CA G3
  - TrustAsia Global Root CA G4
  Removed:
  - Autoridad de Certificacion Firmaprofesional CIF A62634068
  - Chambers of Commerce Root - 2008
  - Global Chambersign Root - 2008
  - Security Communication Root CA
  - Symantec Class 1 Public Primary Certification Authority - G6
  - Symantec Class 2 Public Primary Certification Authority - G6
  - TrustCor ECA-1
  - TrustCor RootCert CA-1
  - TrustCor RootCert CA-2
  - VeriSign Class 1 Public Primary Certification Authority - G3
  - VeriSign Class 2 Public Primary Certification Authority - G3
- remove-trustcor.patch: removed, now upstream
- do a versioned obsoletes of "openssl-certs".</changelog>
  <changelog author="meissner@suse.com" date="1720440000">- Updated to 2.68 state of Mozilla SSL root CAs (bsc#1227525)
  - Added: FIRMAPROFESIONAL CA ROOT-A WEB
  - Distrust: GLOBALTRUST 2020</changelog>
  <changelog author="dmueller@suse.com" date="1734264000">- Updated to 2.72 state of Mozilla SSL root CAs (bsc#1234798)
  Removed:
  - SecureSign RootCA11
  - Security Communication RootCA3
  Added:
  - TWCA CYBER Root CA
  - TWCA Global Root CA G2
  - SecureSign Root CA12
  - SecureSign Root CA14
  - SecureSign Root CA15</changelog>
  <changelog author="steven.kowalik@suse.com" date="1737633600">- Define two macros to break a build cycle with p11-kit.</changelog>
  <changelog author="dmueller@suse.com" date="1738670400">- remove extensive signature printing in comments of the cert
  bundle</changelog>
  <changelog author="dmueller@suse.com" date="1738670401">- update to 2.74 state of Mozilla SSL root CAs:
  Removed:
  * SwissSign Silver CA - G2
  Added:
  * D-TRUST BR Root CA 2 2023
  * D-TRUST EV Root CA 2 2023</changelog>
  <changelog author="meissner@suse.com" date="1742904000">- pass file argument to awk (bsc#1240009)</changelog>
  <changelog author="eroca@suse.com" date="1742904001">- Fix awk to compare (missing a =) and give the following output:
  [#] NSS_BUILTINS_LIBRARY_VERSION "2.74"</changelog>
  <changelog author="meissner@suse.com" date="1743422400">- explit remove distruted certs, as the distrust does not get exported
  correctly and the SSL certs are still trusted. (bsc#1240343)
  - Entrust.net Premium 2048 Secure Server CA
  - Entrust Root Certification Authority
  - AffirmTrust Commercial
  - AffirmTrust Networking
  - AffirmTrust Premium
  - AffirmTrust Premium ECC
  - Entrust Root Certification Authority - G2
  - Entrust Root Certification Authority - EC1
  - GlobalSign Root E46
  - GLOBALTRUST 2020
- remove-distrusted.patch: apply to certdata.txt</changelog>
  <changelog author="meissner@suse.com" date="1744372800">- reenable the distrusted certs again. the distrust is only for certs
  issued after the distrust date, not for all certs of a CA.
  remove: remove-distrusted.patch</changelog>
  <changelog author="meissner@suse.com" date="1770724800">- Updated to 2.84 state (bsc#1258002)
  - Removed:
  - Baltimore CyberTrust Root
  - CommScope Public Trust ECC Root-01
  - CommScope Public Trust ECC Root-02
  - CommScope Public Trust RSA Root-01
  - CommScope Public Trust RSA Root-02
  - DigiNotar Root CA
  - Added:
  - e-Szigno TLS Root CA 2023
  - OISTE Client Root ECC G1
  - OISTE Client Root RSA G1
  - OISTE Server Root ECC G1
  - OISTE Server Root RSA G1
  - SwissSign RSA SMIME Root CA 2022 - 1
  - SwissSign RSA TLS Root CA 2022 - 1
  - TrustAsia SMIME ECC Root CA
  - TrustAsia SMIME RSA Root CA
  - TrustAsia TLS ECC Root CA
  - TrustAsia TLS RSA Root CA</changelog>
</package>
<package pkgid="50e1640cbdb7ae0eddd991d6d1ddc07a04605b9d255c5f491844b6ec8cb64d3b" name="ca-certificates-mozilla" arch="src">
  <version epoch="0" ver="2.84" rel="150200.44.1"/>
  <changelog author="meissner@suse.com" date="1633176000">- updated to 2.50 state of the Mozilla NSS Certificate store (bsc#1188006)
- Added CAs:
  + HARICA Client ECC Root CA 2021
  + HARICA Client RSA Root CA 2021
  + HARICA TLS ECC Root CA 2021
  + HARICA TLS RSA Root CA 2021
  + TunTrust Root CA</changelog>
  <changelog author="meissner@suse.com" date="1651492800">- Updated to 2.54 state of Mozilla SSL root CAs (bsc#1199079)
  Added:
  - Autoridad de Certificacion Firmaprofesional CIF A62634068
  - D-TRUST BR Root CA 1 2020
  - D-TRUST EV Root CA 1 2020
  - GlobalSign ECC Root CA R4
  - GTS Root R1
  - GTS Root R2
  - GTS Root R3
  - GTS Root R4
  - HiPKI Root CA - G1
  - ISRG Root X2
  - Telia Root CA v2
  - vTrus ECC Root CA
  - vTrus Root CA
  Removed:
  - Cybertrust Global Root
  - DST Root CA X3
  - DigiNotar PKIoverheid CA Organisatie - G2
  - GlobalSign ECC Root CA R4
  - GlobalSign Root CA R2
  - GTS Root R1
  - GTS Root R2
  - GTS Root R3
  - GTS Root R4</changelog>
  <changelog author="meissner@suse.com" date="1661774400">- Updated to 2.56 state of Mozilla SSL root CAs (bsc#1202868)
  Added:
  - Certainly Root E1
  - Certainly Root R1
  - DigiCert SMIME ECC P384 Root G5
  - DigiCert SMIME RSA4096 Root G5
  - DigiCert TLS ECC P384 Root G5
  - DigiCert TLS RSA4096 Root G5
  - E-Tugra Global Root CA ECC v3
  - E-Tugra Global Root CA RSA v3
  Removed:
  - Hellenic Academic and Research Institutions RootCA 2011</changelog>
  <changelog author="meissner@suse.com" date="1671710400">- Updated to 2.60 state of Mozilla SSL root CAs (bsc#1206622)
  Removed CAs:
  - Global Chambersign Root
  - EC-ACC
  - Network Solutions Certificate Authority
  - Staat der Nederlanden EV Root CA
  - SwissSign Platinum CA - G2
  Added CAs:
  - DIGITALSIGN GLOBAL ROOT ECDSA CA
  - DIGITALSIGN GLOBAL ROOT RSA CA
  - Security Communication ECC RootCA1
  - Security Communication RootCA3
  Changed trust:
  - TrustCor certificates only trusted up to Nov 30 (bsc#1206212)
- Removed CAs (bsc#1206212) as most code does not handle "valid before nov 30 2022"
  and it is not clear how many certs were issued for SSL middleware by TrustCor:
  - TrustCor RootCert CA-1
  - TrustCor RootCert CA-2
  - TrustCor ECA-1
  Patch: remove-trustcor.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="meissner@suse.com" date="1692014400">- Updated to 2.62 state of Mozilla SSL root CAs (bsc#1214248)
  Added:
  - Atos TrustedRoot Root CA ECC G2 2020
  - Atos TrustedRoot Root CA ECC TLS 2021
  - Atos TrustedRoot Root CA RSA G2 2020
  - Atos TrustedRoot Root CA RSA TLS 2021
  - BJCA Global Root CA1
  - BJCA Global Root CA2
  - LAWtrust Root CA2 (4096)
  - Sectigo Public Email Protection Root E46
  - Sectigo Public Email Protection Root R46
  - Sectigo Public Server Authentication Root E46
  - Sectigo Public Server Authentication Root R46
  - SSL.com Client ECC Root CA 2022
  - SSL.com Client RSA Root CA 2022
  - SSL.com TLS ECC Root CA 2022
  - SSL.com TLS RSA Root CA 2022
  Removed CAs:
  - Chambers of Commerce Root
  - E-Tugra Certification Authority
  - E-Tugra Global Root CA ECC v3
  - E-Tugra Global Root CA RSA v3
  - Hongkong Post Root CA 1</changelog>
  <changelog author="meissner@suse.com" date="1692187200">- readd _multibuild</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="meissner@suse.com" date="1708948801">- use rpm 4.20 compatible patch syntax</changelog>
  <changelog author="meissner@suse.com" date="1708948802">- Updated to 2.66 state of Mozilla SSL root CAs (bsc#1220356)
  Added:
  - CommScope Public Trust ECC Root-01
  - CommScope Public Trust ECC Root-02
  - CommScope Public Trust RSA Root-01
  - CommScope Public Trust RSA Root-02
  - D-Trust SBR Root CA 1 2022
  - D-Trust SBR Root CA 2 2022
  - Telekom Security SMIME ECC Root 2021
  - Telekom Security SMIME RSA Root 2023
  - Telekom Security TLS ECC Root 2020
  - Telekom Security TLS RSA Root 2023
  - TrustAsia Global Root CA G3
  - TrustAsia Global Root CA G4
  Removed:
  - Autoridad de Certificacion Firmaprofesional CIF A62634068
  - Chambers of Commerce Root - 2008
  - Global Chambersign Root - 2008
  - Security Communication Root CA
  - Symantec Class 1 Public Primary Certification Authority - G6
  - Symantec Class 2 Public Primary Certification Authority - G6
  - TrustCor ECA-1
  - TrustCor RootCert CA-1
  - TrustCor RootCert CA-2
  - VeriSign Class 1 Public Primary Certification Authority - G3
  - VeriSign Class 2 Public Primary Certification Authority - G3
- remove-trustcor.patch: removed, now upstream
- do a versioned obsoletes of "openssl-certs".</changelog>
  <changelog author="meissner@suse.com" date="1720440000">- Updated to 2.68 state of Mozilla SSL root CAs (bsc#1227525)
  - Added: FIRMAPROFESIONAL CA ROOT-A WEB
  - Distrust: GLOBALTRUST 2020</changelog>
  <changelog author="dmueller@suse.com" date="1734264000">- Updated to 2.72 state of Mozilla SSL root CAs (bsc#1234798)
  Removed:
  - SecureSign RootCA11
  - Security Communication RootCA3
  Added:
  - TWCA CYBER Root CA
  - TWCA Global Root CA G2
  - SecureSign Root CA12
  - SecureSign Root CA14
  - SecureSign Root CA15</changelog>
  <changelog author="steven.kowalik@suse.com" date="1737633600">- Define two macros to break a build cycle with p11-kit.</changelog>
  <changelog author="dmueller@suse.com" date="1738670400">- remove extensive signature printing in comments of the cert
  bundle</changelog>
  <changelog author="dmueller@suse.com" date="1738670401">- update to 2.74 state of Mozilla SSL root CAs:
  Removed:
  * SwissSign Silver CA - G2
  Added:
  * D-TRUST BR Root CA 2 2023
  * D-TRUST EV Root CA 2 2023</changelog>
  <changelog author="meissner@suse.com" date="1742904000">- pass file argument to awk (bsc#1240009)</changelog>
  <changelog author="eroca@suse.com" date="1742904001">- Fix awk to compare (missing a =) and give the following output:
  [#] NSS_BUILTINS_LIBRARY_VERSION "2.74"</changelog>
  <changelog author="meissner@suse.com" date="1743422400">- explit remove distruted certs, as the distrust does not get exported
  correctly and the SSL certs are still trusted. (bsc#1240343)
  - Entrust.net Premium 2048 Secure Server CA
  - Entrust Root Certification Authority
  - AffirmTrust Commercial
  - AffirmTrust Networking
  - AffirmTrust Premium
  - AffirmTrust Premium ECC
  - Entrust Root Certification Authority - G2
  - Entrust Root Certification Authority - EC1
  - GlobalSign Root E46
  - GLOBALTRUST 2020
- remove-distrusted.patch: apply to certdata.txt</changelog>
  <changelog author="meissner@suse.com" date="1744372800">- reenable the distrusted certs again. the distrust is only for certs
  issued after the distrust date, not for all certs of a CA.
  remove: remove-distrusted.patch</changelog>
  <changelog author="meissner@suse.com" date="1770724800">- Updated to 2.84 state (bsc#1258002)
  - Removed:
  - Baltimore CyberTrust Root
  - CommScope Public Trust ECC Root-01
  - CommScope Public Trust ECC Root-02
  - CommScope Public Trust RSA Root-01
  - CommScope Public Trust RSA Root-02
  - DigiNotar Root CA
  - Added:
  - e-Szigno TLS Root CA 2023
  - OISTE Client Root ECC G1
  - OISTE Client Root RSA G1
  - OISTE Server Root ECC G1
  - OISTE Server Root RSA G1
  - SwissSign RSA SMIME Root CA 2022 - 1
  - SwissSign RSA TLS Root CA 2022 - 1
  - TrustAsia SMIME ECC Root CA
  - TrustAsia SMIME RSA Root CA
  - TrustAsia TLS ECC Root CA
  - TrustAsia TLS RSA Root CA</changelog>
</package>
<package pkgid="fe35fd181b618f59d784cc0f22abf2219541471eec586761860c390a700cdc8e" name="cairo" arch="src">
  <version epoch="0" ver="1.18.4" rel="150600.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523534400">- Update to version 1.15.12:
  + The main focus for this release is the addition of Variable
    Font support. Variable fonts are single font files with various
    typography characteristics, such as weight or slant, that users
    of the font can adjust between two points. Effectively this
    enables a single font to behave as multiple fonts.
  + The Skia backend is disabled in this release, due to severe
    bitrot, and will be removed in future releases. Contact the
    cairo team if you have a need of this backend.
  + Features and Enhancements:
  - Variable font support.
  - Skia backend is disabled.
  + API Changes: cairo_font_options_get_variations() and
    cairo_font_options_set_variations() are added.
  + Bugs fixed:
  - Fix errors in csi-trace --help and --version options.
  - Fix a 'memory leak' in the image compositor, with
    pixman_glyph_cache_t.
  - Fix access of uninitialized memory found by valgrind
    (fdo#91271).
  - Fix improper initialization of memory in
    _cairo_ft_font_face_create_for_pattern() (fdo#105084).
  - Fix multi-monitor virtual desktop with negative coords on
    Win32 (fdo#100793).
  - Fix issues occuring with older FreeType versions.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524571200">- Add cairo-fix-assertion-failure-in-freetype-backend.patch: Fix
  assertion failure in the freetype backend (fdo#105746).</changelog>
  <changelog author="qzheng@suse.com" date="1529496000">- Add cairo-CVE-2017-9814.patch: Replace malloc with _cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538740800">- Update to version 1.15.14:
  + Features and Enhancements:
  - Add more FreeeType font color conversions to support
    COLR/CPAL.
  - Update test reference images against current pixman.
  + Bugs fixed:
  - Fix crash when rendering Microsoft's Segoe UI Emoji Regular
    font.
  - Fix build breakage with glesv3 enabled due to non-existant
    glesv3.pc.
  - Fix memory leaks found by Coverity.
  - Fix incorrect null ptr handling found by Coverity.
  - Fix test compilation when font-config is disabled.
  - Use _cairo_malloc instead of malloc
    (fdo#101547, CVE-2017-9814).
  - Fix assertion failure in the freetype backend (fdo#105746).
- Drop upstream fixed patches:
  + cairo-fix-assertion-failure-in-freetype-backend.patch.
  + cairo-CVE-2017-9814.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540123200">- Update to version 1.16.0:
  + test: Free resources in pdf2png.
  + Drop skia backend.
  + Revert "Correctly decode Adobe CMYK JPEGs in PDF export".</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567598400">- Add 2 upstream bug fix patches:
  + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch:
    ft: Use FT_Done_MM_Var instead of free when available in
    cairo_ft_apply_variations. Fixes a crash when using freetype
    &gt;= 2.9
  + cairo-composite_color_glyphs.patch: Fix a thinko in
    composite_color_glyphs. We can't just move around the contents
    of the passed-in string, we need to make a copy. This was
    showing up as memory corruption in pango.</changelog>
  <changelog author="mwilck@suse.com" date="1582459200">- Add an upstream bug fix
  + cairo-pdf-add-missing-flush.patch: Fixes PDF generation
    see https://gitlab.freedesktop.org/cairo/cairo/issues/342</changelog>
  <changelog author="rpm@fthiessen.de" date="1634904000">- Add upstream patch
  + cairo-do-not-override-explicitly-requested-grayscale-aa.patch
    Do not replace explicitly set applications settings by user
    settings for font antialiasing.
    See: https://gitlab.freedesktop.org/cairo/cairo/-/merge_requests/114</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661947200">- Update to version 1.17.6:
  + This snapshot sees the removal of the following backends and
    platform support: Qt4, BeOS, OS/2, DirectFB, DRM, Cogl, OpenVG.
  + Thanks to all past contributors for their work on them. If you
    were using any of these backends then you will need to stick to
    Cairo 1.16.
  + This snapshot is going to be the **last** release of Cairo with
    the Autotools build system. The Meson build has seen many
    improvements and it is considerably easier to maintain and
    faster to build.
- Changes from version 1.17.4:
  + A particularly noteworthy improvement in this release is the
    addition of the meson build system as an alternative to
    autotools.
  + The cogl Cairo backend underwent significant development this
    cycle.
  + Subpixel positioning support allows improved glyph outlines
    with the Freetype font backend.
  + For a complete log of changes, please see
    https://cairographics.org/releases/ChangeLog.1.17.4
- Changes from version 1.17.2:
  + This snapshot provides the new support for writing floating
    point formats as 16 bpc PNGs, with support for RGBA128F and
    RGB96F formats. This new feature increases Cairo's pixman
    version requirement to 0.36.0.
  + Beyond this are a range of bugfixes.
    For a complete log of changes, please see
    https://cairographics.org/releases/ChangeLog.1.17.2
- Drop patches fixed upstream:
  + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch
  + cairo-composite_color_glyphs.patch
  + cairo-pdf-add-missing-flush.patch
  + cairo-do-not-override-explicitly-requested-grayscale-aa.patch
- Rebase remaining patches with quilt.
- Add 0001-Set-default-LCD-filter-to-FreeType-s-default.patch: Set
  default LCD filter to FreeType's default (patch merged upstream).
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 1.17.8:
  + In a continuing effort to reduce the amount of legacy code, and
    increase the long-term maintainability of cairo, the following
    backends have been removed:
  - GL and GLES drawing
  + Additionally, cairo's Autotools build system has been removed;
    from now on, cairo will only support the Meson build system.
    While the end result should be identical, further testing is
    appreciated.
  + In this snapshot, cairo gained support for rendering COLRv1
    fonts, and rendering SVG and COLRv1 fonts with custom palettes.
  + Support for macOS and Windows has been improved, with lots of
    build and bug fixes.
  + Lots of safety issues have been fixed, with array bounds
    checking and plugging memory leaks, as well as fixes for bugs
    identified via fuzzying.
  + This is going to be the last snapshot of the 1.17 development
    cycle; we only expect minor bug fixing and improvements until
    the 1.18.0 release.
- Switch to meson buildsystem: Add meson BuildRequires and macros.
- Update Source Url to new home.
- Drop build_gl_backend define and conditional pkgconfig(egl) and
  pkgconfig(gl) BuildRequires: No longer supported.
- Add generic c++_compiler and c_compiler BuildRequires: New
  dependencies.
- Drop 0001-Set-default-LCD-filter-to-FreeType-s-default.patch:
  Fixed upstream.
- Add upstream bug fix patches:
  + cairo-1.17.8-fix-tee-compilation.patch
  + cairo-1.17.8-ft-font-missing-glyph.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695470400">- Update to version 1.18.0:
  + The first stable cairo release in five years should be cause
    for celebration.
  + All the API added in the 1.17 development cycle is now
    considered stable, and will not change.
  + Many thanks to all the contributors for this release.
  + The cairo-sphinx tool has been removed; we could not find any
    instruction on how to use it, and no user answered our call for
    help. If you were using cairo-sphinx, please reach out to the
    cairo maintainers.
  + Cairo now implements Type 3 color fonts for PDF.
  + Multiple documentation fixes, to ensure that the cairo API
    reference is up to date. Also fixed multiple compiler warnings
    generated when building cairo.
  + The XML surface has been removed; it was disabled by default
    when building cairo, and we could not find any downstream
    distributor that would enable it.
  + The Tee surface is now automatically enabled. Downstream
    distributors of cairo have been enabling for years it in order
    to build Firefox.
  + Fixed multiple issues with the DWrite font backend.
  + Improved the Quartz surface; mainly, Quartz surfaces now use
    the main display ColorSpace, speeding up rendering operations.
  + Cairo now hides all private symbols by default on every
    platform; the old "slim" symbols hack to alias internally used
    symbols has been dropped, in favor of using
    `-Bsymbolic-functions` with toolchains that support it.
  + Fixed multiple memory leaks in the code base and test suite,
    and general maintenance.
  + Added new API to expose the Pixman dithering filter to cairo
    patterns; this is currently implemented only for image
    surfaces.
- Drop patches fixed upstream:
  + cairo-1.17.8-fix-tee-compilation.patch
  + cairo-1.17.8-ft-font-missing-glyph.patch
- Rebase patches with quilt.
- Stop passing xml=disabled to meson setup, xml backend is dropped.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1725278400">- Update to version 1.18.2:
  + The malloc-stats code has been removed from the tests directory
    the canonical location for it is:
    https://github.com/behdad/malloc-stats
  + Cairo now requires a version of pixman equal to, or newer than,
    0.40.
  + There have been multiple build fixes for newer versions of GCC
    for MSVC; for Solaris; and on macOS 10.7.
  + PNG errors caused by loading malformed data are correctly
    propagated to callers, so they can handle the case.
  + Both stroke and fill colors are now set when showing glyphs on
    a PDF surface.
  + All the font options are copied when creating a fallback font
    object.
  + When drawing text on macOS, Cairo now tries harder to select
    the appropriate font name.
  + Cairo now prefers the COLRv1 table inside a font, if one is
    available.
  + Cairo requires a C11 toolchain when building.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1726833600">- Add b9eed915f9a67380e7ef9d8746656455c43f67e2.patch: cff: Don't
  fail if no local subs. Fix regression when writing PDFs with
  fonts.</changelog>
  <changelog author="dimstar@opensuse.org" date="1732795200">- Convert to source service: allows for easier upgrades by the
  GNOME team.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1742212800">- Update to version 1.18.4:
  + The dependency on LZO has been made optional through a build
    time configuration toggle.
  + You can build Cairo against a Freetype installation that does
    not have the FT_Color type.
  + Cairo tests now build on Solaris 11.4 with GCC 14.
  + The DirectWrite backend now builds on MINGW 11.
  + The DirectWrite backend now supports font variations and proper
    glyph coverage.
  + Support for Windows 98 has been removed. The minimum
    requirement for Windows is now Vista.
- Use tarball in lieu of source service due to freedesktop gitlab
  migration, will switch back at next release at the latest.
- Drop b9eed915f9a67380e7ef9d8746656455c43f67e2.patch: Fixed
  upstream.
- Add pkgconfig(lzo2) BuildRequires: New optional dependency, build
  lzo2 support feature.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1742385600">- Switch back to using source service.</changelog>
  <changelog author="qzhao@suse.com" date="1754913600">- Add b5752618.patch:
  Backport from William Bader's request 621, Fix NULL access
  in active_edges_to_traps().
  https://gitlab.freedesktop.org/cairo/cairo/-/merge_requests/621/diffs
  https://gitlab.freedesktop.org/williamb/cairo/-/commit/b5752618
  (CVE-2025-50422, bsc#1247589)</changelog>
</package>
<package pkgid="6eba07befc1a7b9b730bf1a3c47c7dd4c2eff1248245b6dde0053bdfe68894e8" name="cairo-devel" arch="x86_64">
  <version epoch="0" ver="1.18.4" rel="150600.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523534400">- Update to version 1.15.12:
  + The main focus for this release is the addition of Variable
    Font support. Variable fonts are single font files with various
    typography characteristics, such as weight or slant, that users
    of the font can adjust between two points. Effectively this
    enables a single font to behave as multiple fonts.
  + The Skia backend is disabled in this release, due to severe
    bitrot, and will be removed in future releases. Contact the
    cairo team if you have a need of this backend.
  + Features and Enhancements:
  - Variable font support.
  - Skia backend is disabled.
  + API Changes: cairo_font_options_get_variations() and
    cairo_font_options_set_variations() are added.
  + Bugs fixed:
  - Fix errors in csi-trace --help and --version options.
  - Fix a 'memory leak' in the image compositor, with
    pixman_glyph_cache_t.
  - Fix access of uninitialized memory found by valgrind
    (fdo#91271).
  - Fix improper initialization of memory in
    _cairo_ft_font_face_create_for_pattern() (fdo#105084).
  - Fix multi-monitor virtual desktop with negative coords on
    Win32 (fdo#100793).
  - Fix issues occuring with older FreeType versions.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524571200">- Add cairo-fix-assertion-failure-in-freetype-backend.patch: Fix
  assertion failure in the freetype backend (fdo#105746).</changelog>
  <changelog author="qzheng@suse.com" date="1529496000">- Add cairo-CVE-2017-9814.patch: Replace malloc with _cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538740800">- Update to version 1.15.14:
  + Features and Enhancements:
  - Add more FreeeType font color conversions to support
    COLR/CPAL.
  - Update test reference images against current pixman.
  + Bugs fixed:
  - Fix crash when rendering Microsoft's Segoe UI Emoji Regular
    font.
  - Fix build breakage with glesv3 enabled due to non-existant
    glesv3.pc.
  - Fix memory leaks found by Coverity.
  - Fix incorrect null ptr handling found by Coverity.
  - Fix test compilation when font-config is disabled.
  - Use _cairo_malloc instead of malloc
    (fdo#101547, CVE-2017-9814).
  - Fix assertion failure in the freetype backend (fdo#105746).
- Drop upstream fixed patches:
  + cairo-fix-assertion-failure-in-freetype-backend.patch.
  + cairo-CVE-2017-9814.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540123200">- Update to version 1.16.0:
  + test: Free resources in pdf2png.
  + Drop skia backend.
  + Revert "Correctly decode Adobe CMYK JPEGs in PDF export".</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567598400">- Add 2 upstream bug fix patches:
  + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch:
    ft: Use FT_Done_MM_Var instead of free when available in
    cairo_ft_apply_variations. Fixes a crash when using freetype
    &gt;= 2.9
  + cairo-composite_color_glyphs.patch: Fix a thinko in
    composite_color_glyphs. We can't just move around the contents
    of the passed-in string, we need to make a copy. This was
    showing up as memory corruption in pango.</changelog>
  <changelog author="mwilck@suse.com" date="1582459200">- Add an upstream bug fix
  + cairo-pdf-add-missing-flush.patch: Fixes PDF generation
    see https://gitlab.freedesktop.org/cairo/cairo/issues/342</changelog>
  <changelog author="rpm@fthiessen.de" date="1634904000">- Add upstream patch
  + cairo-do-not-override-explicitly-requested-grayscale-aa.patch
    Do not replace explicitly set applications settings by user
    settings for font antialiasing.
    See: https://gitlab.freedesktop.org/cairo/cairo/-/merge_requests/114</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661947200">- Update to version 1.17.6:
  + This snapshot sees the removal of the following backends and
    platform support: Qt4, BeOS, OS/2, DirectFB, DRM, Cogl, OpenVG.
  + Thanks to all past contributors for their work on them. If you
    were using any of these backends then you will need to stick to
    Cairo 1.16.
  + This snapshot is going to be the **last** release of Cairo with
    the Autotools build system. The Meson build has seen many
    improvements and it is considerably easier to maintain and
    faster to build.
- Changes from version 1.17.4:
  + A particularly noteworthy improvement in this release is the
    addition of the meson build system as an alternative to
    autotools.
  + The cogl Cairo backend underwent significant development this
    cycle.
  + Subpixel positioning support allows improved glyph outlines
    with the Freetype font backend.
  + For a complete log of changes, please see
    https://cairographics.org/releases/ChangeLog.1.17.4
- Changes from version 1.17.2:
  + This snapshot provides the new support for writing floating
    point formats as 16 bpc PNGs, with support for RGBA128F and
    RGB96F formats. This new feature increases Cairo's pixman
    version requirement to 0.36.0.
  + Beyond this are a range of bugfixes.
    For a complete log of changes, please see
    https://cairographics.org/releases/ChangeLog.1.17.2
- Drop patches fixed upstream:
  + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch
  + cairo-composite_color_glyphs.patch
  + cairo-pdf-add-missing-flush.patch
  + cairo-do-not-override-explicitly-requested-grayscale-aa.patch
- Rebase remaining patches with quilt.
- Add 0001-Set-default-LCD-filter-to-FreeType-s-default.patch: Set
  default LCD filter to FreeType's default (patch merged upstream).
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 1.17.8:
  + In a continuing effort to reduce the amount of legacy code, and
    increase the long-term maintainability of cairo, the following
    backends have been removed:
  - GL and GLES drawing
  + Additionally, cairo's Autotools build system has been removed;
    from now on, cairo will only support the Meson build system.
    While the end result should be identical, further testing is
    appreciated.
  + In this snapshot, cairo gained support for rendering COLRv1
    fonts, and rendering SVG and COLRv1 fonts with custom palettes.
  + Support for macOS and Windows has been improved, with lots of
    build and bug fixes.
  + Lots of safety issues have been fixed, with array bounds
    checking and plugging memory leaks, as well as fixes for bugs
    identified via fuzzying.
  + This is going to be the last snapshot of the 1.17 development
    cycle; we only expect minor bug fixing and improvements until
    the 1.18.0 release.
- Switch to meson buildsystem: Add meson BuildRequires and macros.
- Update Source Url to new home.
- Drop build_gl_backend define and conditional pkgconfig(egl) and
  pkgconfig(gl) BuildRequires: No longer supported.
- Add generic c++_compiler and c_compiler BuildRequires: New
  dependencies.
- Drop 0001-Set-default-LCD-filter-to-FreeType-s-default.patch:
  Fixed upstream.
- Add upstream bug fix patches:
  + cairo-1.17.8-fix-tee-compilation.patch
  + cairo-1.17.8-ft-font-missing-glyph.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695470400">- Update to version 1.18.0:
  + The first stable cairo release in five years should be cause
    for celebration.
  + All the API added in the 1.17 development cycle is now
    considered stable, and will not change.
  + Many thanks to all the contributors for this release.
  + The cairo-sphinx tool has been removed; we could not find any
    instruction on how to use it, and no user answered our call for
    help. If you were using cairo-sphinx, please reach out to the
    cairo maintainers.
  + Cairo now implements Type 3 color fonts for PDF.
  + Multiple documentation fixes, to ensure that the cairo API
    reference is up to date. Also fixed multiple compiler warnings
    generated when building cairo.
  + The XML surface has been removed; it was disabled by default
    when building cairo, and we could not find any downstream
    distributor that would enable it.
  + The Tee surface is now automatically enabled. Downstream
    distributors of cairo have been enabling for years it in order
    to build Firefox.
  + Fixed multiple issues with the DWrite font backend.
  + Improved the Quartz surface; mainly, Quartz surfaces now use
    the main display ColorSpace, speeding up rendering operations.
  + Cairo now hides all private symbols by default on every
    platform; the old "slim" symbols hack to alias internally used
    symbols has been dropped, in favor of using
    `-Bsymbolic-functions` with toolchains that support it.
  + Fixed multiple memory leaks in the code base and test suite,
    and general maintenance.
  + Added new API to expose the Pixman dithering filter to cairo
    patterns; this is currently implemented only for image
    surfaces.
- Drop patches fixed upstream:
  + cairo-1.17.8-fix-tee-compilation.patch
  + cairo-1.17.8-ft-font-missing-glyph.patch
- Rebase patches with quilt.
- Stop passing xml=disabled to meson setup, xml backend is dropped.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1725278400">- Update to version 1.18.2:
  + The malloc-stats code has been removed from the tests directory
    the canonical location for it is:
    https://github.com/behdad/malloc-stats
  + Cairo now requires a version of pixman equal to, or newer than,
    0.40.
  + There have been multiple build fixes for newer versions of GCC
    for MSVC; for Solaris; and on macOS 10.7.
  + PNG errors caused by loading malformed data are correctly
    propagated to callers, so they can handle the case.
  + Both stroke and fill colors are now set when showing glyphs on
    a PDF surface.
  + All the font options are copied when creating a fallback font
    object.
  + When drawing text on macOS, Cairo now tries harder to select
    the appropriate font name.
  + Cairo now prefers the COLRv1 table inside a font, if one is
    available.
  + Cairo requires a C11 toolchain when building.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1726833600">- Add b9eed915f9a67380e7ef9d8746656455c43f67e2.patch: cff: Don't
  fail if no local subs. Fix regression when writing PDFs with
  fonts.</changelog>
  <changelog author="dimstar@opensuse.org" date="1732795200">- Convert to source service: allows for easier upgrades by the
  GNOME team.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1742212800">- Update to version 1.18.4:
  + The dependency on LZO has been made optional through a build
    time configuration toggle.
  + You can build Cairo against a Freetype installation that does
    not have the FT_Color type.
  + Cairo tests now build on Solaris 11.4 with GCC 14.
  + The DirectWrite backend now builds on MINGW 11.
  + The DirectWrite backend now supports font variations and proper
    glyph coverage.
  + Support for Windows 98 has been removed. The minimum
    requirement for Windows is now Vista.
- Use tarball in lieu of source service due to freedesktop gitlab
  migration, will switch back at next release at the latest.
- Drop b9eed915f9a67380e7ef9d8746656455c43f67e2.patch: Fixed
  upstream.
- Add pkgconfig(lzo2) BuildRequires: New optional dependency, build
  lzo2 support feature.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1742385600">- Switch back to using source service.</changelog>
  <changelog author="qzhao@suse.com" date="1754913600">- Add b5752618.patch:
  Backport from William Bader's request 621, Fix NULL access
  in active_edges_to_traps().
  https://gitlab.freedesktop.org/cairo/cairo/-/merge_requests/621/diffs
  https://gitlab.freedesktop.org/williamb/cairo/-/commit/b5752618
  (CVE-2025-50422, bsc#1247589)</changelog>
</package>
<package pkgid="a168cdb056e45e922cd7d013446a3b8b6c484fde140d49175b77f53855926a99" name="checkmedia" arch="src">
  <version epoch="0" ver="6.5" rel="150600.3.3.1"/>
  <changelog author="snwint@suse.com" date="1422360000">- updated git2log script
- 3.4</changelog>
  <changelog author="snwint@suse.com" date="1443528000">- Add information about openSUSE development
- Convert README to Markdown
- 3.5</changelog>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/checkmedia#3
- sort input files (boo#1041090)
- 3.6</changelog>
  <changelog author="wfeldt@opensuse.org" date="1512129600">- merge gh#openSUSE/checkmedia#4
- determine image size correctly (bsc#1070745)
- more comments
- 3.7</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524744000">- merge gh#openSUSE/checkmedia#5
- improve documentation
- fix Makefile
- update git2log script
- add simple usage examples
- 3.8</changelog>
  <changelog author="wfeldt@opensuse.org" date="1530273600">- merge gh#openSUSE/checkmedia#6
- change tagmedia to also store checksum over partition
  (bsc#1000947)
- update Makefile
- update documentation
- rewrite checkmedia to use new mediacheck library
- digestdemo: add simple demo tool for libmediacheck usage
- mediacheck library header file
- mediacheck library code
- add test tool for mediachecks
- test data
- enhance code
- fix typo in tagmedia
- 4.0</changelog>
  <changelog author="snwint@suse.de" date="1543406400">- merge gh#openSUSE/checkmedia#8
- fix digest calculation in tagmedia (bsc#1117499)
- added testcases
- adjust function descriptions
- 4.1</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563278400">- merge gh#openSUSE/checkmedia#10
- add support for signed media (bsc#1139561)
- adjust tagmedia script
- update doc
- adjust test cases
- add links to signature magic value origins
- allow to set specific gpg key for signature verification
- rearrange data structure to provide some compatibility
- check for empty signature
- better error log
- added tests for signature verification
- signature test results reference
- 5.0</changelog>
  <changelog author="jengelh@inai.de" date="1563364800">- Use noun phrase in summaries.
- Drop redundant ldconfig PreReq.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563364801">- merge gh#openSUSE/checkmedia#11
- work also with older gpg versions
- 5.1</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563364802">- merge gh#openSUSE/checkmedia#12
- fix compat issue with older gcc
- 5.2</changelog>
  <changelog author="wfeldt@opensuse.org" date="1564401600">- merge gh#openSUSE/checkmedia#13
- mediacheck.md: fix typos
- 5.3</changelog>
  <changelog author="wfeldt@opensuse.org" date="1586952000">- merge gh#openSUSE/checkmedia#14
- work better with broken media (bsc#1169420)
- 5.4</changelog>
  <changelog author="wfeldt@opensuse.org" date="1633089600">- merge gh#openSUSE/checkmedia#15
- add --version option to tagmedia
- use volume id if app id is missing for nice output
- add support for rh style meta data and digest calculation
- extend fragment calculation to suse style
- show signee if signature is ok
- add --create-signature option
- fix large file support
- updated unit tests
- enhance documentation
- add new and shiny README.adoc
- 6.0</changelog>
  <changelog author="wfeldt@opensuse.org" date="1633694400">- merge gh#openSUSE/checkmedia#16
- fix auto-detecting a suitable signature location for rh media
  (jsc#SCL-6)
- 6.1</changelog>
  <changelog author="snwint@suse.com" date="1636459200">- minor spec file adjustments</changelog>
  <changelog author="wfeldt@opensuse.org" date="1685707200">- merge gh#openSUSE/checkmedia#17
- do not select EFI System Partition for digest calculation
  (bsc#1211953)
- use default for SKIPSECTORS only for RH media
- add man pages for checkmedia and tagmedia
- add spec file for OBS
- 6.2</changelog>
  <changelog author="wfeldt@opensuse.org" date="1709640000">- merge gh#openSUSE/checkmedia#18
- tagmedia: fix size detection for block devices (bsc#1220972)
- 6.3</changelog>
  <changelog author="wfeldt@opensuse.org" date="1747137600">- merge gh#openSUSE/checkmedia#20
- added --[no-]signature-tag options for explicit handling of the
  'signature' tag (bsc#1243125)
- 6.4</changelog>
  <changelog author="wfeldt@opensuse.org" date="1755518400">- merge gh#openSUSE/checkmedia#21
- set LC_MESSAGES to C when running gpg (bsc#1248168)
- fix minor issue when printing app_id
- 6.5</changelog>
</package>
<package pkgid="8e6807c8f2e54024192f700634585e1e9d3a0a7512930e8a3654ab680e9c989d" name="checkmedia" arch="x86_64">
  <version epoch="0" ver="6.5" rel="150600.3.3.1"/>
  <changelog author="snwint@suse.com" date="1422360000">- updated git2log script
- 3.4</changelog>
  <changelog author="snwint@suse.com" date="1443528000">- Add information about openSUSE development
- Convert README to Markdown
- 3.5</changelog>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/checkmedia#3
- sort input files (boo#1041090)
- 3.6</changelog>
  <changelog author="wfeldt@opensuse.org" date="1512129600">- merge gh#openSUSE/checkmedia#4
- determine image size correctly (bsc#1070745)
- more comments
- 3.7</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524744000">- merge gh#openSUSE/checkmedia#5
- improve documentation
- fix Makefile
- update git2log script
- add simple usage examples
- 3.8</changelog>
  <changelog author="wfeldt@opensuse.org" date="1530273600">- merge gh#openSUSE/checkmedia#6
- change tagmedia to also store checksum over partition
  (bsc#1000947)
- update Makefile
- update documentation
- rewrite checkmedia to use new mediacheck library
- digestdemo: add simple demo tool for libmediacheck usage
- mediacheck library header file
- mediacheck library code
- add test tool for mediachecks
- test data
- enhance code
- fix typo in tagmedia
- 4.0</changelog>
  <changelog author="snwint@suse.de" date="1543406400">- merge gh#openSUSE/checkmedia#8
- fix digest calculation in tagmedia (bsc#1117499)
- added testcases
- adjust function descriptions
- 4.1</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563278400">- merge gh#openSUSE/checkmedia#10
- add support for signed media (bsc#1139561)
- adjust tagmedia script
- update doc
- adjust test cases
- add links to signature magic value origins
- allow to set specific gpg key for signature verification
- rearrange data structure to provide some compatibility
- check for empty signature
- better error log
- added tests for signature verification
- signature test results reference
- 5.0</changelog>
  <changelog author="jengelh@inai.de" date="1563364800">- Use noun phrase in summaries.
- Drop redundant ldconfig PreReq.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563364801">- merge gh#openSUSE/checkmedia#11
- work also with older gpg versions
- 5.1</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563364802">- merge gh#openSUSE/checkmedia#12
- fix compat issue with older gcc
- 5.2</changelog>
  <changelog author="wfeldt@opensuse.org" date="1564401600">- merge gh#openSUSE/checkmedia#13
- mediacheck.md: fix typos
- 5.3</changelog>
  <changelog author="wfeldt@opensuse.org" date="1586952000">- merge gh#openSUSE/checkmedia#14
- work better with broken media (bsc#1169420)
- 5.4</changelog>
  <changelog author="wfeldt@opensuse.org" date="1633089600">- merge gh#openSUSE/checkmedia#15
- add --version option to tagmedia
- use volume id if app id is missing for nice output
- add support for rh style meta data and digest calculation
- extend fragment calculation to suse style
- show signee if signature is ok
- add --create-signature option
- fix large file support
- updated unit tests
- enhance documentation
- add new and shiny README.adoc
- 6.0</changelog>
  <changelog author="wfeldt@opensuse.org" date="1633694400">- merge gh#openSUSE/checkmedia#16
- fix auto-detecting a suitable signature location for rh media
  (jsc#SCL-6)
- 6.1</changelog>
  <changelog author="snwint@suse.com" date="1636459200">- minor spec file adjustments</changelog>
  <changelog author="wfeldt@opensuse.org" date="1685707200">- merge gh#openSUSE/checkmedia#17
- do not select EFI System Partition for digest calculation
  (bsc#1211953)
- use default for SKIPSECTORS only for RH media
- add man pages for checkmedia and tagmedia
- add spec file for OBS
- 6.2</changelog>
  <changelog author="wfeldt@opensuse.org" date="1709640000">- merge gh#openSUSE/checkmedia#18
- tagmedia: fix size detection for block devices (bsc#1220972)
- 6.3</changelog>
  <changelog author="wfeldt@opensuse.org" date="1747137600">- merge gh#openSUSE/checkmedia#20
- added --[no-]signature-tag options for explicit handling of the
  'signature' tag (bsc#1243125)
- 6.4</changelog>
  <changelog author="wfeldt@opensuse.org" date="1755518400">- merge gh#openSUSE/checkmedia#21
- set LC_MESSAGES to C when running gpg (bsc#1248168)
- fix minor issue when printing app_id
- 6.5</changelog>
</package>
<package pkgid="00fda2aac3c243fe61379d2407981167014ae7d857dead657a55d71f05094f99" name="checkmedia" arch="src">
  <version epoch="0" ver="6.6" rel="150600.3.6.1"/>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/checkmedia#3
- sort input files (boo#1041090)
- 3.6</changelog>
  <changelog author="wfeldt@opensuse.org" date="1512129600">- merge gh#openSUSE/checkmedia#4
- determine image size correctly (bsc#1070745)
- more comments
- 3.7</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524744000">- merge gh#openSUSE/checkmedia#5
- improve documentation
- fix Makefile
- update git2log script
- add simple usage examples
- 3.8</changelog>
  <changelog author="wfeldt@opensuse.org" date="1530273600">- merge gh#openSUSE/checkmedia#6
- change tagmedia to also store checksum over partition
  (bsc#1000947)
- update Makefile
- update documentation
- rewrite checkmedia to use new mediacheck library
- digestdemo: add simple demo tool for libmediacheck usage
- mediacheck library header file
- mediacheck library code
- add test tool for mediachecks
- test data
- enhance code
- fix typo in tagmedia
- 4.0</changelog>
  <changelog author="snwint@suse.de" date="1543406400">- merge gh#openSUSE/checkmedia#8
- fix digest calculation in tagmedia (bsc#1117499)
- added testcases
- adjust function descriptions
- 4.1</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563278400">- merge gh#openSUSE/checkmedia#10
- add support for signed media (bsc#1139561)
- adjust tagmedia script
- update doc
- adjust test cases
- add links to signature magic value origins
- allow to set specific gpg key for signature verification
- rearrange data structure to provide some compatibility
- check for empty signature
- better error log
- added tests for signature verification
- signature test results reference
- 5.0</changelog>
  <changelog author="jengelh@inai.de" date="1563364800">- Use noun phrase in summaries.
- Drop redundant ldconfig PreReq.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563364801">- merge gh#openSUSE/checkmedia#11
- work also with older gpg versions
- 5.1</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563364802">- merge gh#openSUSE/checkmedia#12
- fix compat issue with older gcc
- 5.2</changelog>
  <changelog author="wfeldt@opensuse.org" date="1564401600">- merge gh#openSUSE/checkmedia#13
- mediacheck.md: fix typos
- 5.3</changelog>
  <changelog author="wfeldt@opensuse.org" date="1586952000">- merge gh#openSUSE/checkmedia#14
- work better with broken media (bsc#1169420)
- 5.4</changelog>
  <changelog author="wfeldt@opensuse.org" date="1633089600">- merge gh#openSUSE/checkmedia#15
- add --version option to tagmedia
- use volume id if app id is missing for nice output
- add support for rh style meta data and digest calculation
- extend fragment calculation to suse style
- show signee if signature is ok
- add --create-signature option
- fix large file support
- updated unit tests
- enhance documentation
- add new and shiny README.adoc
- 6.0</changelog>
  <changelog author="wfeldt@opensuse.org" date="1633694400">- merge gh#openSUSE/checkmedia#16
- fix auto-detecting a suitable signature location for rh media
  (jsc#SCL-6)
- 6.1</changelog>
  <changelog author="snwint@suse.com" date="1636459200">- minor spec file adjustments</changelog>
  <changelog author="wfeldt@opensuse.org" date="1685707200">- merge gh#openSUSE/checkmedia#17
- do not select EFI System Partition for digest calculation
  (bsc#1211953)
- use default for SKIPSECTORS only for RH media
- add man pages for checkmedia and tagmedia
- add spec file for OBS
- 6.2</changelog>
  <changelog author="wfeldt@opensuse.org" date="1709640000">- merge gh#openSUSE/checkmedia#18
- tagmedia: fix size detection for block devices (bsc#1220972)
- 6.3</changelog>
  <changelog author="wfeldt@opensuse.org" date="1747137600">- merge gh#openSUSE/checkmedia#20
- added --[no-]signature-tag options for explicit handling of the
  'signature' tag (bsc#1243125)
- 6.4</changelog>
  <changelog author="wfeldt@opensuse.org" date="1755518400">- merge gh#openSUSE/checkmedia#21
- set LC_MESSAGES to C when running gpg (bsc#1248168)
- fix minor issue when printing app_id
- 6.5</changelog>
  <changelog author="wfeldt@opensuse.org" date="1774612800">- merge gh#openSUSE/checkmedia#22
- Add support for GPT partitions</changelog>
  <changelog author="wfeldt@opensuse.org" date="1774612801">- merge gh#openSUSE/checkmedia#23
- include pre-built documentation (bsc#1260860)
- simplify spec file
- 6.6</changelog>
</package>
<package pkgid="865058d64027c24e859964831782f5567652407a9973a0e9e72e8416b4239dcb" name="checkmedia" arch="x86_64">
  <version epoch="0" ver="6.6" rel="150600.3.6.1"/>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/checkmedia#3
- sort input files (boo#1041090)
- 3.6</changelog>
  <changelog author="wfeldt@opensuse.org" date="1512129600">- merge gh#openSUSE/checkmedia#4
- determine image size correctly (bsc#1070745)
- more comments
- 3.7</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524744000">- merge gh#openSUSE/checkmedia#5
- improve documentation
- fix Makefile
- update git2log script
- add simple usage examples
- 3.8</changelog>
  <changelog author="wfeldt@opensuse.org" date="1530273600">- merge gh#openSUSE/checkmedia#6
- change tagmedia to also store checksum over partition
  (bsc#1000947)
- update Makefile
- update documentation
- rewrite checkmedia to use new mediacheck library
- digestdemo: add simple demo tool for libmediacheck usage
- mediacheck library header file
- mediacheck library code
- add test tool for mediachecks
- test data
- enhance code
- fix typo in tagmedia
- 4.0</changelog>
  <changelog author="snwint@suse.de" date="1543406400">- merge gh#openSUSE/checkmedia#8
- fix digest calculation in tagmedia (bsc#1117499)
- added testcases
- adjust function descriptions
- 4.1</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563278400">- merge gh#openSUSE/checkmedia#10
- add support for signed media (bsc#1139561)
- adjust tagmedia script
- update doc
- adjust test cases
- add links to signature magic value origins
- allow to set specific gpg key for signature verification
- rearrange data structure to provide some compatibility
- check for empty signature
- better error log
- added tests for signature verification
- signature test results reference
- 5.0</changelog>
  <changelog author="jengelh@inai.de" date="1563364800">- Use noun phrase in summaries.
- Drop redundant ldconfig PreReq.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563364801">- merge gh#openSUSE/checkmedia#11
- work also with older gpg versions
- 5.1</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563364802">- merge gh#openSUSE/checkmedia#12
- fix compat issue with older gcc
- 5.2</changelog>
  <changelog author="wfeldt@opensuse.org" date="1564401600">- merge gh#openSUSE/checkmedia#13
- mediacheck.md: fix typos
- 5.3</changelog>
  <changelog author="wfeldt@opensuse.org" date="1586952000">- merge gh#openSUSE/checkmedia#14
- work better with broken media (bsc#1169420)
- 5.4</changelog>
  <changelog author="wfeldt@opensuse.org" date="1633089600">- merge gh#openSUSE/checkmedia#15
- add --version option to tagmedia
- use volume id if app id is missing for nice output
- add support for rh style meta data and digest calculation
- extend fragment calculation to suse style
- show signee if signature is ok
- add --create-signature option
- fix large file support
- updated unit tests
- enhance documentation
- add new and shiny README.adoc
- 6.0</changelog>
  <changelog author="wfeldt@opensuse.org" date="1633694400">- merge gh#openSUSE/checkmedia#16
- fix auto-detecting a suitable signature location for rh media
  (jsc#SCL-6)
- 6.1</changelog>
  <changelog author="snwint@suse.com" date="1636459200">- minor spec file adjustments</changelog>
  <changelog author="wfeldt@opensuse.org" date="1685707200">- merge gh#openSUSE/checkmedia#17
- do not select EFI System Partition for digest calculation
  (bsc#1211953)
- use default for SKIPSECTORS only for RH media
- add man pages for checkmedia and tagmedia
- add spec file for OBS
- 6.2</changelog>
  <changelog author="wfeldt@opensuse.org" date="1709640000">- merge gh#openSUSE/checkmedia#18
- tagmedia: fix size detection for block devices (bsc#1220972)
- 6.3</changelog>
  <changelog author="wfeldt@opensuse.org" date="1747137600">- merge gh#openSUSE/checkmedia#20
- added --[no-]signature-tag options for explicit handling of the
  'signature' tag (bsc#1243125)
- 6.4</changelog>
  <changelog author="wfeldt@opensuse.org" date="1755518400">- merge gh#openSUSE/checkmedia#21
- set LC_MESSAGES to C when running gpg (bsc#1248168)
- fix minor issue when printing app_id
- 6.5</changelog>
  <changelog author="wfeldt@opensuse.org" date="1774612800">- merge gh#openSUSE/checkmedia#22
- Add support for GPT partitions</changelog>
  <changelog author="wfeldt@opensuse.org" date="1774612801">- merge gh#openSUSE/checkmedia#23
- include pre-built documentation (bsc#1260860)
- simplify spec file
- 6.6</changelog>
</package>
<package pkgid="368b5867fe651129b19c62ba9ec0f3685026cfa508970cfb5553894ca7e1542b" name="chrony" arch="src">
  <version epoch="0" ver="4.1" rel="150400.21.8.1"/>
  <changelog author="callumjfarmer13@gmail.com" date="1596369600">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="elimat@opensuse.org" date="1599998400">- Update to 3.5.1:
  * Create new file when writing pidfile (CVE-2020-14367, bsc#1174911)</changelog>
  <changelog author="max@suse.com" date="1600084800">- Adjust and rename the sysconfig file, so that it matches the
  expectations of chronyd.service (bsc#1173277).</changelog>
  <changelog author="kukuk@suse.com" date="1603886400">- By default we don't write log files but log to journald, so
  only recommend logrotate.</changelog>
  <changelog author="mrueckert@suse.de" date="1604232000">- Update to 4.0
  - Enhancements
  - Add support for Network Time Security (NTS) authentication
  - Add support for AES-CMAC keys (AES128, AES256) with Nettle
  - Add authselectmode directive to control selection of
    unauthenticated sources
  - Add binddevice, bindacqdevice, bindcmddevice directives
  - Add confdir directive to better support fragmented
    configuration
  - Add sourcedir directive and "reload sources" command to
    support dynamic NTP sources specified in files
  - Add clockprecision directive
  - Add dscp directive to set Differentiated Services Code Point
    (DSCP)
  - Add -L option to limit log messages by severity
  - Add -p option to print whole configuration with included
    files
  - Add -U option to allow start under non-root user
  - Allow maxsamples to be set to 1 for faster update with -q/-Q
    option
  - Avoid replacing NTP sources with sources that have
    unreachable address
  - Improve pools to repeat name resolution to get "maxsources"
    sources
  - Improve source selection with trusted sources
  - Improve NTP loop test to prevent synchronisation to itself
  - Repeat iburst when NTP source is switched from offline state
    to online
  - Update clock synchronisation status and leap status more
    frequently
  - Update seccomp filter
  - Add "add pool" command
  - Add "reset sources" command to drop all measurements
  - Add authdata command to print details about NTP
    authentication
  - Add selectdata command to print details about source
    selection
  - Add -N option and sourcename command to print original names
    of sources
  - Add -a option to some commands to print also unresolved
    sources
  - Add -k, -p, -r options to clients command to select, limit,
    reset data
  - Bug fixes
  - Don’t set interface for NTP responses to allow asymmetric
    routing
  - Handle RTCs that don’t support interrupts
  - Respond to command requests with correct address on
    multihomed hosts
  - Removed features
  - Drop support for RIPEMD keys (RMD128, RMD160, RMD256, RMD320)
  - Drop support for long (non-standard) MACs in NTPv4 packets
    (chrony 2.x clients using non-MD5/SHA1 keys need to use
    option "version 3")
  - Drop support for line editing with GNU Readline
- add BuildRequires for gnutls-devel (which also pulls nettle to
  enable the new features)
- drop patches which are included in the update:
  chrony-test-update-processing-of-packet-log.patch
  chrony-test-fix-util-unit-test-for-NTP-era-split.patch
- refreshed chrony-config.patch
- track series file for easier quilt setup
- added option to turn off testsuite with
  osc build --without=testsuite
  testsuite still runs by default</changelog>
  <changelog author="mrueckert@suse.de" date="1607342400">- drop buildrequires on NSS. We need gnutls for NTS anyway and we
  can do all the other required crypto via nettle+gnutls. no need
  for another crypto library.</changelog>
  <changelog author="max@suse.com" date="1612526400">- Enable syscallfilter unconditionally [boo#1181826].</changelog>
  <changelog author="max@suse.com" date="1622548800">- Update to 4.1
  * Add support for NTS servers specified by IP address (matching
    Subject Alternative Name in server certificate)
  * Add source-specific configuration of trusted certificates
  * Allow multiple files and directories with trusted certificates
  * Allow multiple pairs of server keys and certificates
  * Add copy option to server/pool directive
  * Increase PPS lock limit to 40% of pulse interval
  * Perform source selection immediately after loading dump files
  * Reload dump files for addresses negotiated by NTS-KE server
  * Update seccomp filter and add less restrictive level
  * Restart ongoing name resolution on online command
  * Fix dump files to not include uncorrected offset
  * Fix initstepslew to accept time from own NTP clients
  * Reset NTP address and port when no longer negotiated by NTS-KE
    server
- Update clknetsim to snapshot f89702d.
- Refresh chrony.keyring from
  https://chrony.tuxfamily.org/gpgkey-8F375C7E8D0EE125A3D3BD51537E2B76F7680DAC.asc
- Ensure the correct pool packages are installed for openSUSE
  and SLE (bsc#1180689).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1622635200">- Change to using systemd-sysusers
- Remove otherproviders, not needed anymore</changelog>
  <changelog author="gmbr3@opensuse.org" date="1623585600">- Add now working CONFIG parameter to sysusers generator</changelog>
  <changelog author="max@suse.com" date="1625140800">- boo#1187906: Consolidate all references to the helper script.
- bsc#1173760: MD5 is not available from mozilla-nss in FIPS mode,
  but needed for calculating refids from IPv6 addresses as part of
  the NTP protocol (rfc5905). As this is a non-cryptographic use of
  MD5 we can use our own implementation without violating FIPS
  rules: chrony-refid-internal-md5.patch .</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_chrony-wait.service.patch
  * harden_chronyd.service.patch</changelog>
  <changelog author="max@suse.com" date="1633694400">- boo#1190926: PrivateDevices is too strict, we might need to
  access the rtc and ptp devices.
- Add back support to build chrony on SLE12.
- Drop dependency on asciidoctor. It is only needed for building
  the HTML documentation which we don't package anyway.</changelog>
  <changelog author="max@suse.com" date="1637323200">- SLE bugs that have been fixed in openSUSE up to this point
  without explicit references: bsc#1183783, bsc#1184400,
  bsc#1171806, bsc#1161119, bsc#1159840.
- Obsoleted SLE patches:
  * chrony-fix-open.patch
  * chrony-gettimeofday.patch
  * chrony-ntp-era-split.patch
  * chrony-pidfile.patch
  * chrony-select-timeout.patch
  * chrony-urandom.patch
  * chrony.sysconfig
  * clknetsim-glibc-2.31.patch</changelog>
  <changelog author="max@suse.com" date="1638878400">- Add chrony-htonl.patch to work around undocumented behaviour of
  htonl() in older glibc versions (SLE-12) on 64 bit big endian
  architectures (s390x).</changelog>
  <changelog author="max@suse.com" date="1641816000">- bsc#1194229: Fix pool package dependencies, so that SLE actually
  prefers chrony-pool-suse over chrony-pool-empty.</changelog>
  <changelog author="max@suse.com" date="1648123200">- Fix config file handling in the spec file and remove "ntsdumpdir"
  from default config, because augeas-lenses cannot parse it during
  installation of SLE Micro on SLE-15-SP3 (bsc#1194220).</changelog>
  <changelog author="max@suse.com" date="1710504000">- Use shorter NTS-KE retry interval when network is down
  (bsc#1213551, chrony-burst_total_samples_to_go.patch,
  chrony-retry_interval_ke_start.patch).</changelog>
  <changelog author="max@suse.com" date="1712750400">- Use make quickcheck instead of make check to avoid &gt;1h build
  times and failures due to timeouts. This was the default before
  3.2 but it changed to make tests more reliable. Here a seed is
  already set to get deterministic execution.</changelog>
  <changelog author="max@suse.com" date="1757592000">- bsc#1246544: Fix racy socket creation
  * Add chrony-unix-socket.patch
  * Add chrony-remove-chmod.patch
- Use make quickcheck to speedup build.</changelog>
</package>
<package pkgid="fd650a531b16cf8b1250089983ec85d62e9069cb1f6e18ed43c4dd4cb17a754c" name="chrony" arch="x86_64">
  <version epoch="0" ver="4.1" rel="150400.21.8.1"/>
  <changelog author="callumjfarmer13@gmail.com" date="1596369600">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="elimat@opensuse.org" date="1599998400">- Update to 3.5.1:
  * Create new file when writing pidfile (CVE-2020-14367, bsc#1174911)</changelog>
  <changelog author="max@suse.com" date="1600084800">- Adjust and rename the sysconfig file, so that it matches the
  expectations of chronyd.service (bsc#1173277).</changelog>
  <changelog author="kukuk@suse.com" date="1603886400">- By default we don't write log files but log to journald, so
  only recommend logrotate.</changelog>
  <changelog author="mrueckert@suse.de" date="1604232000">- Update to 4.0
  - Enhancements
  - Add support for Network Time Security (NTS) authentication
  - Add support for AES-CMAC keys (AES128, AES256) with Nettle
  - Add authselectmode directive to control selection of
    unauthenticated sources
  - Add binddevice, bindacqdevice, bindcmddevice directives
  - Add confdir directive to better support fragmented
    configuration
  - Add sourcedir directive and "reload sources" command to
    support dynamic NTP sources specified in files
  - Add clockprecision directive
  - Add dscp directive to set Differentiated Services Code Point
    (DSCP)
  - Add -L option to limit log messages by severity
  - Add -p option to print whole configuration with included
    files
  - Add -U option to allow start under non-root user
  - Allow maxsamples to be set to 1 for faster update with -q/-Q
    option
  - Avoid replacing NTP sources with sources that have
    unreachable address
  - Improve pools to repeat name resolution to get "maxsources"
    sources
  - Improve source selection with trusted sources
  - Improve NTP loop test to prevent synchronisation to itself
  - Repeat iburst when NTP source is switched from offline state
    to online
  - Update clock synchronisation status and leap status more
    frequently
  - Update seccomp filter
  - Add "add pool" command
  - Add "reset sources" command to drop all measurements
  - Add authdata command to print details about NTP
    authentication
  - Add selectdata command to print details about source
    selection
  - Add -N option and sourcename command to print original names
    of sources
  - Add -a option to some commands to print also unresolved
    sources
  - Add -k, -p, -r options to clients command to select, limit,
    reset data
  - Bug fixes
  - Don’t set interface for NTP responses to allow asymmetric
    routing
  - Handle RTCs that don’t support interrupts
  - Respond to command requests with correct address on
    multihomed hosts
  - Removed features
  - Drop support for RIPEMD keys (RMD128, RMD160, RMD256, RMD320)
  - Drop support for long (non-standard) MACs in NTPv4 packets
    (chrony 2.x clients using non-MD5/SHA1 keys need to use
    option "version 3")
  - Drop support for line editing with GNU Readline
- add BuildRequires for gnutls-devel (which also pulls nettle to
  enable the new features)
- drop patches which are included in the update:
  chrony-test-update-processing-of-packet-log.patch
  chrony-test-fix-util-unit-test-for-NTP-era-split.patch
- refreshed chrony-config.patch
- track series file for easier quilt setup
- added option to turn off testsuite with
  osc build --without=testsuite
  testsuite still runs by default</changelog>
  <changelog author="mrueckert@suse.de" date="1607342400">- drop buildrequires on NSS. We need gnutls for NTS anyway and we
  can do all the other required crypto via nettle+gnutls. no need
  for another crypto library.</changelog>
  <changelog author="max@suse.com" date="1612526400">- Enable syscallfilter unconditionally [boo#1181826].</changelog>
  <changelog author="max@suse.com" date="1622548800">- Update to 4.1
  * Add support for NTS servers specified by IP address (matching
    Subject Alternative Name in server certificate)
  * Add source-specific configuration of trusted certificates
  * Allow multiple files and directories with trusted certificates
  * Allow multiple pairs of server keys and certificates
  * Add copy option to server/pool directive
  * Increase PPS lock limit to 40% of pulse interval
  * Perform source selection immediately after loading dump files
  * Reload dump files for addresses negotiated by NTS-KE server
  * Update seccomp filter and add less restrictive level
  * Restart ongoing name resolution on online command
  * Fix dump files to not include uncorrected offset
  * Fix initstepslew to accept time from own NTP clients
  * Reset NTP address and port when no longer negotiated by NTS-KE
    server
- Update clknetsim to snapshot f89702d.
- Refresh chrony.keyring from
  https://chrony.tuxfamily.org/gpgkey-8F375C7E8D0EE125A3D3BD51537E2B76F7680DAC.asc
- Ensure the correct pool packages are installed for openSUSE
  and SLE (bsc#1180689).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1622635200">- Change to using systemd-sysusers
- Remove otherproviders, not needed anymore</changelog>
  <changelog author="gmbr3@opensuse.org" date="1623585600">- Add now working CONFIG parameter to sysusers generator</changelog>
  <changelog author="max@suse.com" date="1625140800">- boo#1187906: Consolidate all references to the helper script.
- bsc#1173760: MD5 is not available from mozilla-nss in FIPS mode,
  but needed for calculating refids from IPv6 addresses as part of
  the NTP protocol (rfc5905). As this is a non-cryptographic use of
  MD5 we can use our own implementation without violating FIPS
  rules: chrony-refid-internal-md5.patch .</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_chrony-wait.service.patch
  * harden_chronyd.service.patch</changelog>
  <changelog author="max@suse.com" date="1633694400">- boo#1190926: PrivateDevices is too strict, we might need to
  access the rtc and ptp devices.
- Add back support to build chrony on SLE12.
- Drop dependency on asciidoctor. It is only needed for building
  the HTML documentation which we don't package anyway.</changelog>
  <changelog author="max@suse.com" date="1637323200">- SLE bugs that have been fixed in openSUSE up to this point
  without explicit references: bsc#1183783, bsc#1184400,
  bsc#1171806, bsc#1161119, bsc#1159840.
- Obsoleted SLE patches:
  * chrony-fix-open.patch
  * chrony-gettimeofday.patch
  * chrony-ntp-era-split.patch
  * chrony-pidfile.patch
  * chrony-select-timeout.patch
  * chrony-urandom.patch
  * chrony.sysconfig
  * clknetsim-glibc-2.31.patch</changelog>
  <changelog author="max@suse.com" date="1638878400">- Add chrony-htonl.patch to work around undocumented behaviour of
  htonl() in older glibc versions (SLE-12) on 64 bit big endian
  architectures (s390x).</changelog>
  <changelog author="max@suse.com" date="1641816000">- bsc#1194229: Fix pool package dependencies, so that SLE actually
  prefers chrony-pool-suse over chrony-pool-empty.</changelog>
  <changelog author="max@suse.com" date="1648123200">- Fix config file handling in the spec file and remove "ntsdumpdir"
  from default config, because augeas-lenses cannot parse it during
  installation of SLE Micro on SLE-15-SP3 (bsc#1194220).</changelog>
  <changelog author="max@suse.com" date="1710504000">- Use shorter NTS-KE retry interval when network is down
  (bsc#1213551, chrony-burst_total_samples_to_go.patch,
  chrony-retry_interval_ke_start.patch).</changelog>
  <changelog author="max@suse.com" date="1712750400">- Use make quickcheck instead of make check to avoid &gt;1h build
  times and failures due to timeouts. This was the default before
  3.2 but it changed to make tests more reliable. Here a seed is
  already set to get deterministic execution.</changelog>
  <changelog author="max@suse.com" date="1757592000">- bsc#1246544: Fix racy socket creation
  * Add chrony-unix-socket.patch
  * Add chrony-remove-chmod.patch
- Use make quickcheck to speedup build.</changelog>
</package>
<package pkgid="0c1539a86fc0b5ff203daa757efc0667914c860356b98a3a8e59a61d9ac2aae5" name="chrony-pool-empty" arch="noarch">
  <version epoch="0" ver="4.1" rel="150400.21.8.1"/>
  <changelog author="callumjfarmer13@gmail.com" date="1596369600">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="elimat@opensuse.org" date="1599998400">- Update to 3.5.1:
  * Create new file when writing pidfile (CVE-2020-14367, bsc#1174911)</changelog>
  <changelog author="max@suse.com" date="1600084800">- Adjust and rename the sysconfig file, so that it matches the
  expectations of chronyd.service (bsc#1173277).</changelog>
  <changelog author="kukuk@suse.com" date="1603886400">- By default we don't write log files but log to journald, so
  only recommend logrotate.</changelog>
  <changelog author="mrueckert@suse.de" date="1604232000">- Update to 4.0
  - Enhancements
  - Add support for Network Time Security (NTS) authentication
  - Add support for AES-CMAC keys (AES128, AES256) with Nettle
  - Add authselectmode directive to control selection of
    unauthenticated sources
  - Add binddevice, bindacqdevice, bindcmddevice directives
  - Add confdir directive to better support fragmented
    configuration
  - Add sourcedir directive and "reload sources" command to
    support dynamic NTP sources specified in files
  - Add clockprecision directive
  - Add dscp directive to set Differentiated Services Code Point
    (DSCP)
  - Add -L option to limit log messages by severity
  - Add -p option to print whole configuration with included
    files
  - Add -U option to allow start under non-root user
  - Allow maxsamples to be set to 1 for faster update with -q/-Q
    option
  - Avoid replacing NTP sources with sources that have
    unreachable address
  - Improve pools to repeat name resolution to get "maxsources"
    sources
  - Improve source selection with trusted sources
  - Improve NTP loop test to prevent synchronisation to itself
  - Repeat iburst when NTP source is switched from offline state
    to online
  - Update clock synchronisation status and leap status more
    frequently
  - Update seccomp filter
  - Add "add pool" command
  - Add "reset sources" command to drop all measurements
  - Add authdata command to print details about NTP
    authentication
  - Add selectdata command to print details about source
    selection
  - Add -N option and sourcename command to print original names
    of sources
  - Add -a option to some commands to print also unresolved
    sources
  - Add -k, -p, -r options to clients command to select, limit,
    reset data
  - Bug fixes
  - Don’t set interface for NTP responses to allow asymmetric
    routing
  - Handle RTCs that don’t support interrupts
  - Respond to command requests with correct address on
    multihomed hosts
  - Removed features
  - Drop support for RIPEMD keys (RMD128, RMD160, RMD256, RMD320)
  - Drop support for long (non-standard) MACs in NTPv4 packets
    (chrony 2.x clients using non-MD5/SHA1 keys need to use
    option "version 3")
  - Drop support for line editing with GNU Readline
- add BuildRequires for gnutls-devel (which also pulls nettle to
  enable the new features)
- drop patches which are included in the update:
  chrony-test-update-processing-of-packet-log.patch
  chrony-test-fix-util-unit-test-for-NTP-era-split.patch
- refreshed chrony-config.patch
- track series file for easier quilt setup
- added option to turn off testsuite with
  osc build --without=testsuite
  testsuite still runs by default</changelog>
  <changelog author="mrueckert@suse.de" date="1607342400">- drop buildrequires on NSS. We need gnutls for NTS anyway and we
  can do all the other required crypto via nettle+gnutls. no need
  for another crypto library.</changelog>
  <changelog author="max@suse.com" date="1612526400">- Enable syscallfilter unconditionally [boo#1181826].</changelog>
  <changelog author="max@suse.com" date="1622548800">- Update to 4.1
  * Add support for NTS servers specified by IP address (matching
    Subject Alternative Name in server certificate)
  * Add source-specific configuration of trusted certificates
  * Allow multiple files and directories with trusted certificates
  * Allow multiple pairs of server keys and certificates
  * Add copy option to server/pool directive
  * Increase PPS lock limit to 40% of pulse interval
  * Perform source selection immediately after loading dump files
  * Reload dump files for addresses negotiated by NTS-KE server
  * Update seccomp filter and add less restrictive level
  * Restart ongoing name resolution on online command
  * Fix dump files to not include uncorrected offset
  * Fix initstepslew to accept time from own NTP clients
  * Reset NTP address and port when no longer negotiated by NTS-KE
    server
- Update clknetsim to snapshot f89702d.
- Refresh chrony.keyring from
  https://chrony.tuxfamily.org/gpgkey-8F375C7E8D0EE125A3D3BD51537E2B76F7680DAC.asc
- Ensure the correct pool packages are installed for openSUSE
  and SLE (bsc#1180689).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1622635200">- Change to using systemd-sysusers
- Remove otherproviders, not needed anymore</changelog>
  <changelog author="gmbr3@opensuse.org" date="1623585600">- Add now working CONFIG parameter to sysusers generator</changelog>
  <changelog author="max@suse.com" date="1625140800">- boo#1187906: Consolidate all references to the helper script.
- bsc#1173760: MD5 is not available from mozilla-nss in FIPS mode,
  but needed for calculating refids from IPv6 addresses as part of
  the NTP protocol (rfc5905). As this is a non-cryptographic use of
  MD5 we can use our own implementation without violating FIPS
  rules: chrony-refid-internal-md5.patch .</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_chrony-wait.service.patch
  * harden_chronyd.service.patch</changelog>
  <changelog author="max@suse.com" date="1633694400">- boo#1190926: PrivateDevices is too strict, we might need to
  access the rtc and ptp devices.
- Add back support to build chrony on SLE12.
- Drop dependency on asciidoctor. It is only needed for building
  the HTML documentation which we don't package anyway.</changelog>
  <changelog author="max@suse.com" date="1637323200">- SLE bugs that have been fixed in openSUSE up to this point
  without explicit references: bsc#1183783, bsc#1184400,
  bsc#1171806, bsc#1161119, bsc#1159840.
- Obsoleted SLE patches:
  * chrony-fix-open.patch
  * chrony-gettimeofday.patch
  * chrony-ntp-era-split.patch
  * chrony-pidfile.patch
  * chrony-select-timeout.patch
  * chrony-urandom.patch
  * chrony.sysconfig
  * clknetsim-glibc-2.31.patch</changelog>
  <changelog author="max@suse.com" date="1638878400">- Add chrony-htonl.patch to work around undocumented behaviour of
  htonl() in older glibc versions (SLE-12) on 64 bit big endian
  architectures (s390x).</changelog>
  <changelog author="max@suse.com" date="1641816000">- bsc#1194229: Fix pool package dependencies, so that SLE actually
  prefers chrony-pool-suse over chrony-pool-empty.</changelog>
  <changelog author="max@suse.com" date="1648123200">- Fix config file handling in the spec file and remove "ntsdumpdir"
  from default config, because augeas-lenses cannot parse it during
  installation of SLE Micro on SLE-15-SP3 (bsc#1194220).</changelog>
  <changelog author="max@suse.com" date="1710504000">- Use shorter NTS-KE retry interval when network is down
  (bsc#1213551, chrony-burst_total_samples_to_go.patch,
  chrony-retry_interval_ke_start.patch).</changelog>
  <changelog author="max@suse.com" date="1712750400">- Use make quickcheck instead of make check to avoid &gt;1h build
  times and failures due to timeouts. This was the default before
  3.2 but it changed to make tests more reliable. Here a seed is
  already set to get deterministic execution.</changelog>
  <changelog author="max@suse.com" date="1757592000">- bsc#1246544: Fix racy socket creation
  * Add chrony-unix-socket.patch
  * Add chrony-remove-chmod.patch
- Use make quickcheck to speedup build.</changelog>
</package>
<package pkgid="16a793f3f83130a0c4431f84aa4cfb3406ea36680db104c2e4c68b7163005549" name="chrony-pool-suse" arch="noarch">
  <version epoch="0" ver="4.1" rel="150400.21.8.1"/>
  <changelog author="callumjfarmer13@gmail.com" date="1596369600">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="elimat@opensuse.org" date="1599998400">- Update to 3.5.1:
  * Create new file when writing pidfile (CVE-2020-14367, bsc#1174911)</changelog>
  <changelog author="max@suse.com" date="1600084800">- Adjust and rename the sysconfig file, so that it matches the
  expectations of chronyd.service (bsc#1173277).</changelog>
  <changelog author="kukuk@suse.com" date="1603886400">- By default we don't write log files but log to journald, so
  only recommend logrotate.</changelog>
  <changelog author="mrueckert@suse.de" date="1604232000">- Update to 4.0
  - Enhancements
  - Add support for Network Time Security (NTS) authentication
  - Add support for AES-CMAC keys (AES128, AES256) with Nettle
  - Add authselectmode directive to control selection of
    unauthenticated sources
  - Add binddevice, bindacqdevice, bindcmddevice directives
  - Add confdir directive to better support fragmented
    configuration
  - Add sourcedir directive and "reload sources" command to
    support dynamic NTP sources specified in files
  - Add clockprecision directive
  - Add dscp directive to set Differentiated Services Code Point
    (DSCP)
  - Add -L option to limit log messages by severity
  - Add -p option to print whole configuration with included
    files
  - Add -U option to allow start under non-root user
  - Allow maxsamples to be set to 1 for faster update with -q/-Q
    option
  - Avoid replacing NTP sources with sources that have
    unreachable address
  - Improve pools to repeat name resolution to get "maxsources"
    sources
  - Improve source selection with trusted sources
  - Improve NTP loop test to prevent synchronisation to itself
  - Repeat iburst when NTP source is switched from offline state
    to online
  - Update clock synchronisation status and leap status more
    frequently
  - Update seccomp filter
  - Add "add pool" command
  - Add "reset sources" command to drop all measurements
  - Add authdata command to print details about NTP
    authentication
  - Add selectdata command to print details about source
    selection
  - Add -N option and sourcename command to print original names
    of sources
  - Add -a option to some commands to print also unresolved
    sources
  - Add -k, -p, -r options to clients command to select, limit,
    reset data
  - Bug fixes
  - Don’t set interface for NTP responses to allow asymmetric
    routing
  - Handle RTCs that don’t support interrupts
  - Respond to command requests with correct address on
    multihomed hosts
  - Removed features
  - Drop support for RIPEMD keys (RMD128, RMD160, RMD256, RMD320)
  - Drop support for long (non-standard) MACs in NTPv4 packets
    (chrony 2.x clients using non-MD5/SHA1 keys need to use
    option "version 3")
  - Drop support for line editing with GNU Readline
- add BuildRequires for gnutls-devel (which also pulls nettle to
  enable the new features)
- drop patches which are included in the update:
  chrony-test-update-processing-of-packet-log.patch
  chrony-test-fix-util-unit-test-for-NTP-era-split.patch
- refreshed chrony-config.patch
- track series file for easier quilt setup
- added option to turn off testsuite with
  osc build --without=testsuite
  testsuite still runs by default</changelog>
  <changelog author="mrueckert@suse.de" date="1607342400">- drop buildrequires on NSS. We need gnutls for NTS anyway and we
  can do all the other required crypto via nettle+gnutls. no need
  for another crypto library.</changelog>
  <changelog author="max@suse.com" date="1612526400">- Enable syscallfilter unconditionally [boo#1181826].</changelog>
  <changelog author="max@suse.com" date="1622548800">- Update to 4.1
  * Add support for NTS servers specified by IP address (matching
    Subject Alternative Name in server certificate)
  * Add source-specific configuration of trusted certificates
  * Allow multiple files and directories with trusted certificates
  * Allow multiple pairs of server keys and certificates
  * Add copy option to server/pool directive
  * Increase PPS lock limit to 40% of pulse interval
  * Perform source selection immediately after loading dump files
  * Reload dump files for addresses negotiated by NTS-KE server
  * Update seccomp filter and add less restrictive level
  * Restart ongoing name resolution on online command
  * Fix dump files to not include uncorrected offset
  * Fix initstepslew to accept time from own NTP clients
  * Reset NTP address and port when no longer negotiated by NTS-KE
    server
- Update clknetsim to snapshot f89702d.
- Refresh chrony.keyring from
  https://chrony.tuxfamily.org/gpgkey-8F375C7E8D0EE125A3D3BD51537E2B76F7680DAC.asc
- Ensure the correct pool packages are installed for openSUSE
  and SLE (bsc#1180689).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1622635200">- Change to using systemd-sysusers
- Remove otherproviders, not needed anymore</changelog>
  <changelog author="gmbr3@opensuse.org" date="1623585600">- Add now working CONFIG parameter to sysusers generator</changelog>
  <changelog author="max@suse.com" date="1625140800">- boo#1187906: Consolidate all references to the helper script.
- bsc#1173760: MD5 is not available from mozilla-nss in FIPS mode,
  but needed for calculating refids from IPv6 addresses as part of
  the NTP protocol (rfc5905). As this is a non-cryptographic use of
  MD5 we can use our own implementation without violating FIPS
  rules: chrony-refid-internal-md5.patch .</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_chrony-wait.service.patch
  * harden_chronyd.service.patch</changelog>
  <changelog author="max@suse.com" date="1633694400">- boo#1190926: PrivateDevices is too strict, we might need to
  access the rtc and ptp devices.
- Add back support to build chrony on SLE12.
- Drop dependency on asciidoctor. It is only needed for building
  the HTML documentation which we don't package anyway.</changelog>
  <changelog author="max@suse.com" date="1637323200">- SLE bugs that have been fixed in openSUSE up to this point
  without explicit references: bsc#1183783, bsc#1184400,
  bsc#1171806, bsc#1161119, bsc#1159840.
- Obsoleted SLE patches:
  * chrony-fix-open.patch
  * chrony-gettimeofday.patch
  * chrony-ntp-era-split.patch
  * chrony-pidfile.patch
  * chrony-select-timeout.patch
  * chrony-urandom.patch
  * chrony.sysconfig
  * clknetsim-glibc-2.31.patch</changelog>
  <changelog author="max@suse.com" date="1638878400">- Add chrony-htonl.patch to work around undocumented behaviour of
  htonl() in older glibc versions (SLE-12) on 64 bit big endian
  architectures (s390x).</changelog>
  <changelog author="max@suse.com" date="1641816000">- bsc#1194229: Fix pool package dependencies, so that SLE actually
  prefers chrony-pool-suse over chrony-pool-empty.</changelog>
  <changelog author="max@suse.com" date="1648123200">- Fix config file handling in the spec file and remove "ntsdumpdir"
  from default config, because augeas-lenses cannot parse it during
  installation of SLE Micro on SLE-15-SP3 (bsc#1194220).</changelog>
  <changelog author="max@suse.com" date="1710504000">- Use shorter NTS-KE retry interval when network is down
  (bsc#1213551, chrony-burst_total_samples_to_go.patch,
  chrony-retry_interval_ke_start.patch).</changelog>
  <changelog author="max@suse.com" date="1712750400">- Use make quickcheck instead of make check to avoid &gt;1h build
  times and failures due to timeouts. This was the default before
  3.2 but it changed to make tests more reliable. Here a seed is
  already set to get deterministic execution.</changelog>
  <changelog author="max@suse.com" date="1757592000">- bsc#1246544: Fix racy socket creation
  * Add chrony-unix-socket.patch
  * Add chrony-remove-chmod.patch
- Use make quickcheck to speedup build.</changelog>
</package>
<package pkgid="e08b73f913e46c1897e7c45029ce022ce7267bfaed5e17df8b41775d3cf9f63c" name="cifs-utils" arch="src">
  <version epoch="0" ver="6.15" rel="150400.3.15.1"/>
  <changelog author="aaptel@suse.com" date="1550145600">- Allow cached DNS entry to expire; (fate#325270).
  * add allow-dns-resolver-key-to-expire.patch</changelog>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
  <changelog author="aaptel@suse.com" date="1565870400">- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
  * adds fixes for Azure
  * new smbinfo utility
  * remove cifs-utils-6.8.tar.bz2
  * remove cifs-utils-6.8.tar.bz2.asc
  * add cifs-utils-6.9.tar.bz2
  * add cifs-utils-6.9.tar.bz2.asc
  * add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * add 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
  * remove 0001-docs-cleanup-rst-formating.patch
  * remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  * remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  * remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  * remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  * remove 0006-cifs-utils-support-rst2man-3.patch
  * remove 0007-checkopts-report-duplicated-options-in-man-page.patch
  * remove 0008-mount.cifs.rst-more-cleanups.patch
  * remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  * remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
  * remove allow-dns-resolver-key-to-expire.patch
  * remove suse-document-new-vers-default-SMB2.1.patch
- Remove dependency workaround regarding python2/python3</changelog>
  <changelog author="aaptel@suse.com" date="1568030400">- Fix double-free in mount.cifs; (bsc#1149164).
  * add 0011-fix-doublefree.patch</changelog>
  <changelog author="palcantara@suse.de" date="1570017600">- Fix invalid free in mount.cifs; (bsc#1152930).
  * add 0012-mount.cifs-Fix-invalid-free.patch</changelog>
  <changelog author="aaptel@suse.com" date="1586347200">- rst2man has been moved to python3-docutils in SLE12+, update
  BuildRequires check to reflect that</changelog>
  <changelog author="aaptel@suse.com" date="1597060800">- CVE-2020-14342: Shell command injection vulnerability in mount.cifs;
  (bsc#1174477); (bso#14442); CVE-2020-14342.
  * add 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch</changelog>
  <changelog author="aaptel@suse.com" date="1597147200">- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).</changelog>
  <changelog author="lnussel@suse.de" date="1605614400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="aaptel@suse.com" date="1607688000">- Update to cifs-utils 6.11
  * remove cifs-utils-6.9.tar.bz2
  * remove cifs-utils-6.9.tar.bz2.asc
  * add    cifs-utils-6.11.tar.bz2
  * add    cifs-utils-6.11.tar.bz2.asc
- Remove backports already in 6.11
  * remove 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * remove 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * remove 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * remove 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * remove 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * remove 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * remove 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * remove 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * remove 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * remove 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
  * remove 0011-fix-doublefree.patch
  * remove 0012-mount.cifs-Fix-invalid-free.patch
  * remove 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch
- Add fixes for autoconf and make install issues
  * add    fix-sbin-install-error.patch
  * add    0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * add    0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Hardcode python3 interpreter in shebang of smb2-quota instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="lnussel@suse.de" date="1610625600">- use new %_pamdir macro to avoid hardcoding pam module path</changelog>
  <changelog author="aaptel@suse.com" date="1614081600">- Update to cifs-utils 6.12
  * remove cifs-utils-6.11.tar.bz2
  * remove cifs-utils-6.11.tar.bz2.asc
  * add    cifs-utils-6.12.tar.bz2
  * add    cifs-utils-6.12.tar.bz2.asc
- Remove backports already in 6.12
  * remove 0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * remove 0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Refresh Makefile.am install fix
  * modify fix-sbin-install-error.patch
- Hardcode python3 interpreter in shebang of smbinfo instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="palcantara@suse.de" date="1615291200">- CVE-2021-20208: cifs-utils: cifs.upcall kerberos auth leak in
  container; (bsc#1183239); CVE-2021-20208.
  * add 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="aaptel@suse.com" date="1619179200">- cifs.upcall: fix regression in kerberos mount; (bsc#1184815).
  * add 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to cifs-utils 6.13
  * Fixes CVE-2021-20208, cifs.upcall kerberos auth leak in container
  * remove cifs-utils-6.12.tar.bz2
  * remove cifs-utils-6.12.tar.bz2.asc
  * add    cifs-utils-6.13.tar.bz2
  * add    cifs-utils-6.13.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420800">- Update to cifs-utils 6.14
  * smbinfo is enhanced with capability to display alternate data streams
  * setcifsacl is improved to optionally reorder ACEs in preferred order
  * cifs.upcall regression in kerberos mount is fixed
  * remove cifs-utils-6.13.tar.bz2
  * remove cifs-utils-6.13.tar.bz2.asc
  * add    cifs-utils-6.14.tar.bz2
  * add    cifs-utils-6.14.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420801">- Update cifs-utils.spec:
  * Remove unused
    !BuildIgnore: samba-client
    BuildRequires: libwbclient-devel</changelog>
  <changelog author="rpm@fthiessen.de" date="1652788800">- Update to version 6.15
  * CVE-2022-27239: mount.cifs: fix length check for ip option parsing
    Previous check was true whatever the length of the input string was,
    leading to a buffer overflow in the subsequent strcpy call (bsc#1197216).
  * mount.cifs: fix verbose messages on option parsing (bsc#1198976, CVE-2022-29869)</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1744632000">- CVE-2025-2312: cifs-utils: cifs.upcall makes an upcall to the wrong
  namespace in containerized environments while trying to get Kerberos
  credentials (bsc#1239680)
  * add New-mount-option-for-cifs.upcall-namespace-reso.patch</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1750075200">- Add patches:
  * 0001-cifs.upcall-correctly-treat-UPTARGET_UNSPECIFIED-as-.patch
  (bsc#1243488)
  * 0001-mount.cifs-retry-mount-on-EINPROGRESS.patch</changelog>
</package>
<package pkgid="66223b1ca100adda0e2da944f6e4686d26153558bbd9bebc99f249076a523aa1" name="cifs-utils" arch="x86_64">
  <version epoch="0" ver="6.15" rel="150400.3.15.1"/>
  <changelog author="aaptel@suse.com" date="1550145600">- Allow cached DNS entry to expire; (fate#325270).
  * add allow-dns-resolver-key-to-expire.patch</changelog>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
  <changelog author="aaptel@suse.com" date="1565870400">- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
  * adds fixes for Azure
  * new smbinfo utility
  * remove cifs-utils-6.8.tar.bz2
  * remove cifs-utils-6.8.tar.bz2.asc
  * add cifs-utils-6.9.tar.bz2
  * add cifs-utils-6.9.tar.bz2.asc
  * add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * add 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
  * remove 0001-docs-cleanup-rst-formating.patch
  * remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  * remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  * remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  * remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  * remove 0006-cifs-utils-support-rst2man-3.patch
  * remove 0007-checkopts-report-duplicated-options-in-man-page.patch
  * remove 0008-mount.cifs.rst-more-cleanups.patch
  * remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  * remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
  * remove allow-dns-resolver-key-to-expire.patch
  * remove suse-document-new-vers-default-SMB2.1.patch
- Remove dependency workaround regarding python2/python3</changelog>
  <changelog author="aaptel@suse.com" date="1568030400">- Fix double-free in mount.cifs; (bsc#1149164).
  * add 0011-fix-doublefree.patch</changelog>
  <changelog author="palcantara@suse.de" date="1570017600">- Fix invalid free in mount.cifs; (bsc#1152930).
  * add 0012-mount.cifs-Fix-invalid-free.patch</changelog>
  <changelog author="aaptel@suse.com" date="1586347200">- rst2man has been moved to python3-docutils in SLE12+, update
  BuildRequires check to reflect that</changelog>
  <changelog author="aaptel@suse.com" date="1597060800">- CVE-2020-14342: Shell command injection vulnerability in mount.cifs;
  (bsc#1174477); (bso#14442); CVE-2020-14342.
  * add 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch</changelog>
  <changelog author="aaptel@suse.com" date="1597147200">- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).</changelog>
  <changelog author="lnussel@suse.de" date="1605614400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="aaptel@suse.com" date="1607688000">- Update to cifs-utils 6.11
  * remove cifs-utils-6.9.tar.bz2
  * remove cifs-utils-6.9.tar.bz2.asc
  * add    cifs-utils-6.11.tar.bz2
  * add    cifs-utils-6.11.tar.bz2.asc
- Remove backports already in 6.11
  * remove 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * remove 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * remove 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * remove 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * remove 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * remove 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * remove 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * remove 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * remove 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * remove 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
  * remove 0011-fix-doublefree.patch
  * remove 0012-mount.cifs-Fix-invalid-free.patch
  * remove 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch
- Add fixes for autoconf and make install issues
  * add    fix-sbin-install-error.patch
  * add    0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * add    0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Hardcode python3 interpreter in shebang of smb2-quota instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="lnussel@suse.de" date="1610625600">- use new %_pamdir macro to avoid hardcoding pam module path</changelog>
  <changelog author="aaptel@suse.com" date="1614081600">- Update to cifs-utils 6.12
  * remove cifs-utils-6.11.tar.bz2
  * remove cifs-utils-6.11.tar.bz2.asc
  * add    cifs-utils-6.12.tar.bz2
  * add    cifs-utils-6.12.tar.bz2.asc
- Remove backports already in 6.12
  * remove 0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * remove 0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Refresh Makefile.am install fix
  * modify fix-sbin-install-error.patch
- Hardcode python3 interpreter in shebang of smbinfo instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="palcantara@suse.de" date="1615291200">- CVE-2021-20208: cifs-utils: cifs.upcall kerberos auth leak in
  container; (bsc#1183239); CVE-2021-20208.
  * add 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="aaptel@suse.com" date="1619179200">- cifs.upcall: fix regression in kerberos mount; (bsc#1184815).
  * add 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to cifs-utils 6.13
  * Fixes CVE-2021-20208, cifs.upcall kerberos auth leak in container
  * remove cifs-utils-6.12.tar.bz2
  * remove cifs-utils-6.12.tar.bz2.asc
  * add    cifs-utils-6.13.tar.bz2
  * add    cifs-utils-6.13.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420800">- Update to cifs-utils 6.14
  * smbinfo is enhanced with capability to display alternate data streams
  * setcifsacl is improved to optionally reorder ACEs in preferred order
  * cifs.upcall regression in kerberos mount is fixed
  * remove cifs-utils-6.13.tar.bz2
  * remove cifs-utils-6.13.tar.bz2.asc
  * add    cifs-utils-6.14.tar.bz2
  * add    cifs-utils-6.14.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420801">- Update cifs-utils.spec:
  * Remove unused
    !BuildIgnore: samba-client
    BuildRequires: libwbclient-devel</changelog>
  <changelog author="rpm@fthiessen.de" date="1652788800">- Update to version 6.15
  * CVE-2022-27239: mount.cifs: fix length check for ip option parsing
    Previous check was true whatever the length of the input string was,
    leading to a buffer overflow in the subsequent strcpy call (bsc#1197216).
  * mount.cifs: fix verbose messages on option parsing (bsc#1198976, CVE-2022-29869)</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1744632000">- CVE-2025-2312: cifs-utils: cifs.upcall makes an upcall to the wrong
  namespace in containerized environments while trying to get Kerberos
  credentials (bsc#1239680)
  * add New-mount-option-for-cifs.upcall-namespace-reso.patch</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1750075200">- Add patches:
  * 0001-cifs.upcall-correctly-treat-UPTARGET_UNSPECIFIED-as-.patch
  (bsc#1243488)
  * 0001-mount.cifs-retry-mount-on-EINPROGRESS.patch</changelog>
</package>
<package pkgid="9ddd5360295561f43582e7fa488f1e3ea4a2570a510235acde47df1c7175c965" name="cifs-utils" arch="src">
  <version epoch="0" ver="6.15" rel="150400.3.18.1"/>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
  <changelog author="aaptel@suse.com" date="1565870400">- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
  * adds fixes for Azure
  * new smbinfo utility
  * remove cifs-utils-6.8.tar.bz2
  * remove cifs-utils-6.8.tar.bz2.asc
  * add cifs-utils-6.9.tar.bz2
  * add cifs-utils-6.9.tar.bz2.asc
  * add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * add 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
  * remove 0001-docs-cleanup-rst-formating.patch
  * remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  * remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  * remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  * remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  * remove 0006-cifs-utils-support-rst2man-3.patch
  * remove 0007-checkopts-report-duplicated-options-in-man-page.patch
  * remove 0008-mount.cifs.rst-more-cleanups.patch
  * remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  * remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
  * remove allow-dns-resolver-key-to-expire.patch
  * remove suse-document-new-vers-default-SMB2.1.patch
- Remove dependency workaround regarding python2/python3</changelog>
  <changelog author="aaptel@suse.com" date="1568030400">- Fix double-free in mount.cifs; (bsc#1149164).
  * add 0011-fix-doublefree.patch</changelog>
  <changelog author="palcantara@suse.de" date="1570017600">- Fix invalid free in mount.cifs; (bsc#1152930).
  * add 0012-mount.cifs-Fix-invalid-free.patch</changelog>
  <changelog author="aaptel@suse.com" date="1586347200">- rst2man has been moved to python3-docutils in SLE12+, update
  BuildRequires check to reflect that</changelog>
  <changelog author="aaptel@suse.com" date="1597060800">- CVE-2020-14342: Shell command injection vulnerability in mount.cifs;
  (bsc#1174477); (bso#14442); CVE-2020-14342.
  * add 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch</changelog>
  <changelog author="aaptel@suse.com" date="1597147200">- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).</changelog>
  <changelog author="lnussel@suse.de" date="1605614400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="aaptel@suse.com" date="1607688000">- Update to cifs-utils 6.11
  * remove cifs-utils-6.9.tar.bz2
  * remove cifs-utils-6.9.tar.bz2.asc
  * add    cifs-utils-6.11.tar.bz2
  * add    cifs-utils-6.11.tar.bz2.asc
- Remove backports already in 6.11
  * remove 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * remove 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * remove 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * remove 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * remove 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * remove 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * remove 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * remove 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * remove 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * remove 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
  * remove 0011-fix-doublefree.patch
  * remove 0012-mount.cifs-Fix-invalid-free.patch
  * remove 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch
- Add fixes for autoconf and make install issues
  * add    fix-sbin-install-error.patch
  * add    0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * add    0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Hardcode python3 interpreter in shebang of smb2-quota instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="lnussel@suse.de" date="1610625600">- use new %_pamdir macro to avoid hardcoding pam module path</changelog>
  <changelog author="aaptel@suse.com" date="1614081600">- Update to cifs-utils 6.12
  * remove cifs-utils-6.11.tar.bz2
  * remove cifs-utils-6.11.tar.bz2.asc
  * add    cifs-utils-6.12.tar.bz2
  * add    cifs-utils-6.12.tar.bz2.asc
- Remove backports already in 6.12
  * remove 0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * remove 0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Refresh Makefile.am install fix
  * modify fix-sbin-install-error.patch
- Hardcode python3 interpreter in shebang of smbinfo instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="palcantara@suse.de" date="1615291200">- CVE-2021-20208: cifs-utils: cifs.upcall kerberos auth leak in
  container; (bsc#1183239); CVE-2021-20208.
  * add 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="aaptel@suse.com" date="1619179200">- cifs.upcall: fix regression in kerberos mount; (bsc#1184815).
  * add 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to cifs-utils 6.13
  * Fixes CVE-2021-20208, cifs.upcall kerberos auth leak in container
  * remove cifs-utils-6.12.tar.bz2
  * remove cifs-utils-6.12.tar.bz2.asc
  * add    cifs-utils-6.13.tar.bz2
  * add    cifs-utils-6.13.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420800">- Update to cifs-utils 6.14
  * smbinfo is enhanced with capability to display alternate data streams
  * setcifsacl is improved to optionally reorder ACEs in preferred order
  * cifs.upcall regression in kerberos mount is fixed
  * remove cifs-utils-6.13.tar.bz2
  * remove cifs-utils-6.13.tar.bz2.asc
  * add    cifs-utils-6.14.tar.bz2
  * add    cifs-utils-6.14.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420801">- Update cifs-utils.spec:
  * Remove unused
    !BuildIgnore: samba-client
    BuildRequires: libwbclient-devel</changelog>
  <changelog author="rpm@fthiessen.de" date="1652788800">- Update to version 6.15
  * CVE-2022-27239: mount.cifs: fix length check for ip option parsing
    Previous check was true whatever the length of the input string was,
    leading to a buffer overflow in the subsequent strcpy call (bsc#1197216).
  * mount.cifs: fix verbose messages on option parsing (bsc#1198976, CVE-2022-29869)</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1744632000">- CVE-2025-2312: cifs-utils: cifs.upcall makes an upcall to the wrong
  namespace in containerized environments while trying to get Kerberos
  credentials (bsc#1239680)
  * add New-mount-option-for-cifs.upcall-namespace-reso.patch</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1750075200">- Add patches:
  * 0001-cifs.upcall-correctly-treat-UPTARGET_UNSPECIFIED-as-.patch
  (bsc#1243488)
  * 0001-mount.cifs-retry-mount-on-EINPROGRESS.patch</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1760443200">- Add patches:
  * 0001-cifs-utils-Skip-TGT-check-if-valid-service-ticket-is.patch (bsc#1248816)
  * 0001-setcifsacl-fix-memory-allocation-for-struct-cifs_ace.patch
  * 0001-cifs.upcall-fix-UAF-in-get_cachename_from_process_en.patch
  * 0001-cifs-utils-avoid-using-mktemp-when-updating-mtab.patch
  * 0001-cifs-utils-add-documentation-for-upcall_target.patch
  * 0001-cifs.upcall-fix-memory-leaks-in-check_service_ticket.patch</changelog>
</package>
<package pkgid="fa24b3800cccc9c4b4b1aa3a1b179fe243f438a6ff6b2c55802d682ff3d13cd1" name="cifs-utils" arch="x86_64">
  <version epoch="0" ver="6.15" rel="150400.3.18.1"/>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
  <changelog author="aaptel@suse.com" date="1565870400">- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
  * adds fixes for Azure
  * new smbinfo utility
  * remove cifs-utils-6.8.tar.bz2
  * remove cifs-utils-6.8.tar.bz2.asc
  * add cifs-utils-6.9.tar.bz2
  * add cifs-utils-6.9.tar.bz2.asc
  * add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * add 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
  * remove 0001-docs-cleanup-rst-formating.patch
  * remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  * remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  * remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  * remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  * remove 0006-cifs-utils-support-rst2man-3.patch
  * remove 0007-checkopts-report-duplicated-options-in-man-page.patch
  * remove 0008-mount.cifs.rst-more-cleanups.patch
  * remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  * remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
  * remove allow-dns-resolver-key-to-expire.patch
  * remove suse-document-new-vers-default-SMB2.1.patch
- Remove dependency workaround regarding python2/python3</changelog>
  <changelog author="aaptel@suse.com" date="1568030400">- Fix double-free in mount.cifs; (bsc#1149164).
  * add 0011-fix-doublefree.patch</changelog>
  <changelog author="palcantara@suse.de" date="1570017600">- Fix invalid free in mount.cifs; (bsc#1152930).
  * add 0012-mount.cifs-Fix-invalid-free.patch</changelog>
  <changelog author="aaptel@suse.com" date="1586347200">- rst2man has been moved to python3-docutils in SLE12+, update
  BuildRequires check to reflect that</changelog>
  <changelog author="aaptel@suse.com" date="1597060800">- CVE-2020-14342: Shell command injection vulnerability in mount.cifs;
  (bsc#1174477); (bso#14442); CVE-2020-14342.
  * add 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch</changelog>
  <changelog author="aaptel@suse.com" date="1597147200">- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).</changelog>
  <changelog author="lnussel@suse.de" date="1605614400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="aaptel@suse.com" date="1607688000">- Update to cifs-utils 6.11
  * remove cifs-utils-6.9.tar.bz2
  * remove cifs-utils-6.9.tar.bz2.asc
  * add    cifs-utils-6.11.tar.bz2
  * add    cifs-utils-6.11.tar.bz2.asc
- Remove backports already in 6.11
  * remove 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * remove 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * remove 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * remove 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * remove 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * remove 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * remove 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * remove 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * remove 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * remove 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
  * remove 0011-fix-doublefree.patch
  * remove 0012-mount.cifs-Fix-invalid-free.patch
  * remove 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch
- Add fixes for autoconf and make install issues
  * add    fix-sbin-install-error.patch
  * add    0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * add    0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Hardcode python3 interpreter in shebang of smb2-quota instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="lnussel@suse.de" date="1610625600">- use new %_pamdir macro to avoid hardcoding pam module path</changelog>
  <changelog author="aaptel@suse.com" date="1614081600">- Update to cifs-utils 6.12
  * remove cifs-utils-6.11.tar.bz2
  * remove cifs-utils-6.11.tar.bz2.asc
  * add    cifs-utils-6.12.tar.bz2
  * add    cifs-utils-6.12.tar.bz2.asc
- Remove backports already in 6.12
  * remove 0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * remove 0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Refresh Makefile.am install fix
  * modify fix-sbin-install-error.patch
- Hardcode python3 interpreter in shebang of smbinfo instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="palcantara@suse.de" date="1615291200">- CVE-2021-20208: cifs-utils: cifs.upcall kerberos auth leak in
  container; (bsc#1183239); CVE-2021-20208.
  * add 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="aaptel@suse.com" date="1619179200">- cifs.upcall: fix regression in kerberos mount; (bsc#1184815).
  * add 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to cifs-utils 6.13
  * Fixes CVE-2021-20208, cifs.upcall kerberos auth leak in container
  * remove cifs-utils-6.12.tar.bz2
  * remove cifs-utils-6.12.tar.bz2.asc
  * add    cifs-utils-6.13.tar.bz2
  * add    cifs-utils-6.13.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420800">- Update to cifs-utils 6.14
  * smbinfo is enhanced with capability to display alternate data streams
  * setcifsacl is improved to optionally reorder ACEs in preferred order
  * cifs.upcall regression in kerberos mount is fixed
  * remove cifs-utils-6.13.tar.bz2
  * remove cifs-utils-6.13.tar.bz2.asc
  * add    cifs-utils-6.14.tar.bz2
  * add    cifs-utils-6.14.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420801">- Update cifs-utils.spec:
  * Remove unused
    !BuildIgnore: samba-client
    BuildRequires: libwbclient-devel</changelog>
  <changelog author="rpm@fthiessen.de" date="1652788800">- Update to version 6.15
  * CVE-2022-27239: mount.cifs: fix length check for ip option parsing
    Previous check was true whatever the length of the input string was,
    leading to a buffer overflow in the subsequent strcpy call (bsc#1197216).
  * mount.cifs: fix verbose messages on option parsing (bsc#1198976, CVE-2022-29869)</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1744632000">- CVE-2025-2312: cifs-utils: cifs.upcall makes an upcall to the wrong
  namespace in containerized environments while trying to get Kerberos
  credentials (bsc#1239680)
  * add New-mount-option-for-cifs.upcall-namespace-reso.patch</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1750075200">- Add patches:
  * 0001-cifs.upcall-correctly-treat-UPTARGET_UNSPECIFIED-as-.patch
  (bsc#1243488)
  * 0001-mount.cifs-retry-mount-on-EINPROGRESS.patch</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1760443200">- Add patches:
  * 0001-cifs-utils-Skip-TGT-check-if-valid-service-ticket-is.patch (bsc#1248816)
  * 0001-setcifsacl-fix-memory-allocation-for-struct-cifs_ace.patch
  * 0001-cifs.upcall-fix-UAF-in-get_cachename_from_process_en.patch
  * 0001-cifs-utils-avoid-using-mktemp-when-updating-mtab.patch
  * 0001-cifs-utils-add-documentation-for-upcall_target.patch
  * 0001-cifs.upcall-fix-memory-leaks-in-check_service_ticket.patch</changelog>
</package>
<package pkgid="1d88462137f4fd5794e84c58ebc2f88c3795572deb1cefec34ed5269a6b98e36" name="cifs-utils-devel" arch="x86_64">
  <version epoch="0" ver="6.15" rel="150400.3.15.1"/>
  <changelog author="aaptel@suse.com" date="1550145600">- Allow cached DNS entry to expire; (fate#325270).
  * add allow-dns-resolver-key-to-expire.patch</changelog>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
  <changelog author="aaptel@suse.com" date="1565870400">- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
  * adds fixes for Azure
  * new smbinfo utility
  * remove cifs-utils-6.8.tar.bz2
  * remove cifs-utils-6.8.tar.bz2.asc
  * add cifs-utils-6.9.tar.bz2
  * add cifs-utils-6.9.tar.bz2.asc
  * add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * add 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
  * remove 0001-docs-cleanup-rst-formating.patch
  * remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  * remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  * remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  * remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  * remove 0006-cifs-utils-support-rst2man-3.patch
  * remove 0007-checkopts-report-duplicated-options-in-man-page.patch
  * remove 0008-mount.cifs.rst-more-cleanups.patch
  * remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  * remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
  * remove allow-dns-resolver-key-to-expire.patch
  * remove suse-document-new-vers-default-SMB2.1.patch
- Remove dependency workaround regarding python2/python3</changelog>
  <changelog author="aaptel@suse.com" date="1568030400">- Fix double-free in mount.cifs; (bsc#1149164).
  * add 0011-fix-doublefree.patch</changelog>
  <changelog author="palcantara@suse.de" date="1570017600">- Fix invalid free in mount.cifs; (bsc#1152930).
  * add 0012-mount.cifs-Fix-invalid-free.patch</changelog>
  <changelog author="aaptel@suse.com" date="1586347200">- rst2man has been moved to python3-docutils in SLE12+, update
  BuildRequires check to reflect that</changelog>
  <changelog author="aaptel@suse.com" date="1597060800">- CVE-2020-14342: Shell command injection vulnerability in mount.cifs;
  (bsc#1174477); (bso#14442); CVE-2020-14342.
  * add 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch</changelog>
  <changelog author="aaptel@suse.com" date="1597147200">- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).</changelog>
  <changelog author="lnussel@suse.de" date="1605614400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="aaptel@suse.com" date="1607688000">- Update to cifs-utils 6.11
  * remove cifs-utils-6.9.tar.bz2
  * remove cifs-utils-6.9.tar.bz2.asc
  * add    cifs-utils-6.11.tar.bz2
  * add    cifs-utils-6.11.tar.bz2.asc
- Remove backports already in 6.11
  * remove 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * remove 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * remove 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * remove 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * remove 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * remove 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * remove 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * remove 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * remove 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * remove 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
  * remove 0011-fix-doublefree.patch
  * remove 0012-mount.cifs-Fix-invalid-free.patch
  * remove 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch
- Add fixes for autoconf and make install issues
  * add    fix-sbin-install-error.patch
  * add    0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * add    0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Hardcode python3 interpreter in shebang of smb2-quota instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="lnussel@suse.de" date="1610625600">- use new %_pamdir macro to avoid hardcoding pam module path</changelog>
  <changelog author="aaptel@suse.com" date="1614081600">- Update to cifs-utils 6.12
  * remove cifs-utils-6.11.tar.bz2
  * remove cifs-utils-6.11.tar.bz2.asc
  * add    cifs-utils-6.12.tar.bz2
  * add    cifs-utils-6.12.tar.bz2.asc
- Remove backports already in 6.12
  * remove 0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * remove 0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Refresh Makefile.am install fix
  * modify fix-sbin-install-error.patch
- Hardcode python3 interpreter in shebang of smbinfo instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="palcantara@suse.de" date="1615291200">- CVE-2021-20208: cifs-utils: cifs.upcall kerberos auth leak in
  container; (bsc#1183239); CVE-2021-20208.
  * add 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="aaptel@suse.com" date="1619179200">- cifs.upcall: fix regression in kerberos mount; (bsc#1184815).
  * add 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to cifs-utils 6.13
  * Fixes CVE-2021-20208, cifs.upcall kerberos auth leak in container
  * remove cifs-utils-6.12.tar.bz2
  * remove cifs-utils-6.12.tar.bz2.asc
  * add    cifs-utils-6.13.tar.bz2
  * add    cifs-utils-6.13.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420800">- Update to cifs-utils 6.14
  * smbinfo is enhanced with capability to display alternate data streams
  * setcifsacl is improved to optionally reorder ACEs in preferred order
  * cifs.upcall regression in kerberos mount is fixed
  * remove cifs-utils-6.13.tar.bz2
  * remove cifs-utils-6.13.tar.bz2.asc
  * add    cifs-utils-6.14.tar.bz2
  * add    cifs-utils-6.14.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420801">- Update cifs-utils.spec:
  * Remove unused
    !BuildIgnore: samba-client
    BuildRequires: libwbclient-devel</changelog>
  <changelog author="rpm@fthiessen.de" date="1652788800">- Update to version 6.15
  * CVE-2022-27239: mount.cifs: fix length check for ip option parsing
    Previous check was true whatever the length of the input string was,
    leading to a buffer overflow in the subsequent strcpy call (bsc#1197216).
  * mount.cifs: fix verbose messages on option parsing (bsc#1198976, CVE-2022-29869)</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1744632000">- CVE-2025-2312: cifs-utils: cifs.upcall makes an upcall to the wrong
  namespace in containerized environments while trying to get Kerberos
  credentials (bsc#1239680)
  * add New-mount-option-for-cifs.upcall-namespace-reso.patch</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1750075200">- Add patches:
  * 0001-cifs.upcall-correctly-treat-UPTARGET_UNSPECIFIED-as-.patch
  (bsc#1243488)
  * 0001-mount.cifs-retry-mount-on-EINPROGRESS.patch</changelog>
</package>
<package pkgid="1cfdf7f846358c11fe2e42487c8c5cac149d1fa507f554fd40a3f4b79cf7930c" name="cifs-utils-devel" arch="x86_64">
  <version epoch="0" ver="6.15" rel="150400.3.18.1"/>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
  <changelog author="aaptel@suse.com" date="1565870400">- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
  * adds fixes for Azure
  * new smbinfo utility
  * remove cifs-utils-6.8.tar.bz2
  * remove cifs-utils-6.8.tar.bz2.asc
  * add cifs-utils-6.9.tar.bz2
  * add cifs-utils-6.9.tar.bz2.asc
  * add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * add 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
  * remove 0001-docs-cleanup-rst-formating.patch
  * remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  * remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  * remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  * remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  * remove 0006-cifs-utils-support-rst2man-3.patch
  * remove 0007-checkopts-report-duplicated-options-in-man-page.patch
  * remove 0008-mount.cifs.rst-more-cleanups.patch
  * remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  * remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
  * remove allow-dns-resolver-key-to-expire.patch
  * remove suse-document-new-vers-default-SMB2.1.patch
- Remove dependency workaround regarding python2/python3</changelog>
  <changelog author="aaptel@suse.com" date="1568030400">- Fix double-free in mount.cifs; (bsc#1149164).
  * add 0011-fix-doublefree.patch</changelog>
  <changelog author="palcantara@suse.de" date="1570017600">- Fix invalid free in mount.cifs; (bsc#1152930).
  * add 0012-mount.cifs-Fix-invalid-free.patch</changelog>
  <changelog author="aaptel@suse.com" date="1586347200">- rst2man has been moved to python3-docutils in SLE12+, update
  BuildRequires check to reflect that</changelog>
  <changelog author="aaptel@suse.com" date="1597060800">- CVE-2020-14342: Shell command injection vulnerability in mount.cifs;
  (bsc#1174477); (bso#14442); CVE-2020-14342.
  * add 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch</changelog>
  <changelog author="aaptel@suse.com" date="1597147200">- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).</changelog>
  <changelog author="lnussel@suse.de" date="1605614400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="aaptel@suse.com" date="1607688000">- Update to cifs-utils 6.11
  * remove cifs-utils-6.9.tar.bz2
  * remove cifs-utils-6.9.tar.bz2.asc
  * add    cifs-utils-6.11.tar.bz2
  * add    cifs-utils-6.11.tar.bz2.asc
- Remove backports already in 6.11
  * remove 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * remove 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * remove 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * remove 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * remove 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * remove 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * remove 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * remove 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * remove 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * remove 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
  * remove 0011-fix-doublefree.patch
  * remove 0012-mount.cifs-Fix-invalid-free.patch
  * remove 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch
- Add fixes for autoconf and make install issues
  * add    fix-sbin-install-error.patch
  * add    0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * add    0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Hardcode python3 interpreter in shebang of smb2-quota instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="lnussel@suse.de" date="1610625600">- use new %_pamdir macro to avoid hardcoding pam module path</changelog>
  <changelog author="aaptel@suse.com" date="1614081600">- Update to cifs-utils 6.12
  * remove cifs-utils-6.11.tar.bz2
  * remove cifs-utils-6.11.tar.bz2.asc
  * add    cifs-utils-6.12.tar.bz2
  * add    cifs-utils-6.12.tar.bz2.asc
- Remove backports already in 6.12
  * remove 0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * remove 0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Refresh Makefile.am install fix
  * modify fix-sbin-install-error.patch
- Hardcode python3 interpreter in shebang of smbinfo instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="palcantara@suse.de" date="1615291200">- CVE-2021-20208: cifs-utils: cifs.upcall kerberos auth leak in
  container; (bsc#1183239); CVE-2021-20208.
  * add 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="aaptel@suse.com" date="1619179200">- cifs.upcall: fix regression in kerberos mount; (bsc#1184815).
  * add 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to cifs-utils 6.13
  * Fixes CVE-2021-20208, cifs.upcall kerberos auth leak in container
  * remove cifs-utils-6.12.tar.bz2
  * remove cifs-utils-6.12.tar.bz2.asc
  * add    cifs-utils-6.13.tar.bz2
  * add    cifs-utils-6.13.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420800">- Update to cifs-utils 6.14
  * smbinfo is enhanced with capability to display alternate data streams
  * setcifsacl is improved to optionally reorder ACEs in preferred order
  * cifs.upcall regression in kerberos mount is fixed
  * remove cifs-utils-6.13.tar.bz2
  * remove cifs-utils-6.13.tar.bz2.asc
  * add    cifs-utils-6.14.tar.bz2
  * add    cifs-utils-6.14.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420801">- Update cifs-utils.spec:
  * Remove unused
    !BuildIgnore: samba-client
    BuildRequires: libwbclient-devel</changelog>
  <changelog author="rpm@fthiessen.de" date="1652788800">- Update to version 6.15
  * CVE-2022-27239: mount.cifs: fix length check for ip option parsing
    Previous check was true whatever the length of the input string was,
    leading to a buffer overflow in the subsequent strcpy call (bsc#1197216).
  * mount.cifs: fix verbose messages on option parsing (bsc#1198976, CVE-2022-29869)</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1744632000">- CVE-2025-2312: cifs-utils: cifs.upcall makes an upcall to the wrong
  namespace in containerized environments while trying to get Kerberos
  credentials (bsc#1239680)
  * add New-mount-option-for-cifs.upcall-namespace-reso.patch</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1750075200">- Add patches:
  * 0001-cifs.upcall-correctly-treat-UPTARGET_UNSPECIFIED-as-.patch
  (bsc#1243488)
  * 0001-mount.cifs-retry-mount-on-EINPROGRESS.patch</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1760443200">- Add patches:
  * 0001-cifs-utils-Skip-TGT-check-if-valid-service-ticket-is.patch (bsc#1248816)
  * 0001-setcifsacl-fix-memory-allocation-for-struct-cifs_ace.patch
  * 0001-cifs.upcall-fix-UAF-in-get_cachename_from_process_en.patch
  * 0001-cifs-utils-avoid-using-mktemp-when-updating-mtab.patch
  * 0001-cifs-utils-add-documentation-for-upcall_target.patch
  * 0001-cifs.upcall-fix-memory-leaks-in-check_service_ticket.patch</changelog>
</package>
<package pkgid="9de8d776da908499d5064ed68b616e20bdb37b8b008723d46c2bf79f483b58ff" name="clamav" arch="src">
  <version epoch="0" ver="1.4.2" rel="150600.18.12.1"/>
  <changelog author="suse+build@de-korte.org" date="1641988800">- Update to 0.103.5
  * CVE-2022-20698: Fix for invalid pointer read that may cause a crash.
    This issue affects 0.104.1, 0.103.4 and prior when ClamAV is compiled
    with libjson-c and the CL_SCAN_GENERAL_COLLECT_METADATA scan option
    (the clamscan --gen-json option) is enabled. (bsc#1194731)
  * Fixed ability to disable the file size limit with libclamav C API,
    like this:
    cl_engine_set_num(engine, CL_ENGINE_MAX_FILESIZE, 0);
    This issue didn't affect ClamD or ClamScan which also can disable the
    limit by setting it to zero using MaxFileSize 0 in clamd.conf for ClamD,
    or clamscan --max-filesize=0 for ClamScan.
    Note: Internally, the max file size is still set to 2 GiB. Disabling the
    limit for a scan will fall back on the internal 2 GiB limitation.
  * Increased the maximum line length for ClamAV config files from 512 bytes
    to 1,024 bytes to allow for longer config option strings.
  * SigTool: Fix insufficient buffer size for --list-sigs that caused a
    failure when listing a database containing one or more very long
    signatures. This fix was backported from 0.104.</changelog>
  <changelog author="meissner@suse.com" date="1649764800">- https source urls</changelog>
  <changelog author="suse+build@de-korte.org" date="1651752000">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
  <changelog author="ecsos@opensuse.org" date="1659700800">- Update to 0.103.7 (bsc#1202986)
  - Zip parser: tolerate 2-byte overlap in file entries
  - Fix bug with logical signature Intermediates feature
  - Update to UnRAR v6.1.7
  - Patch UnRAR: allow skipping files in solid archives
  - Patch UnRAR: limit dict winsize to 1GB</changelog>
  <changelog author="suse+build@de-korte.org" date="1676462400">- Update to 0.103.8
  * CVE-2023-20032: Fixed a possible remote code execution vulnerability
    in the HFS+ file parser. Issue affects versions 1.0.0 and earlier,
    0.105.1 and earlier, and 0.103.7 and earlier. (bsc#1208363)
  * CVE-2023-20052: Fixed a possible remote information leak
    vulnerability in the DMG file parser. Issue affects versions 1.0.0
    and earlier, 0.105.1 and earlier, and 0.103.7 and earlier.
    (bsc#1208365)
  * Update vendored libmspack library to version 0.11alpha.
    (bsc#1103032: CVE-2018-14679)
- Package huge .html documentation in a separate subpackage.</changelog>
  <changelog author="suse+build@de-korte.org" date="1692187200">- Update to 0.103.9
  * CVE-2023-20197: Fixed a possible denial of service vulnerability in
    the HFS+ file parser. This issue affects versions 1.1.0, 1.0.1 through
    1.0.0, 0.105.2 through 0.105.0, 0.104.4 through 0.104.0, and 0.103.8
    through 0.103.0. (boo#1214342)
  * Fixed compiler warnings that may turn into errors in Clang 16.</changelog>
  <changelog author="max@suse.com" date="1692360000">- Renew clamav.keyring .</changelog>
  <changelog author="suse+build@de-korte.org" date="1698235200">- Update to 0.103.11
  * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.12.
  * Windows: libjson-c 0.17 compatibility fix. with ssize_t type definition.
  * Windows: Update build system to use OpenSSL 3 and PThreads-Win32 v3.
- Update to 0.103.10
  * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.10.
    (bsc#1216625, CVE-2023-40477)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="max@suse.com" date="1710504000">- New version: 1.3.0:
  * Added support for extracting and scanning attachments found in
    Microsoft OneNote section files. OneNote parsing will be
    enabled by default, but may be optionally disabled.
  * Added file type recognition for compiled Python (`.pyc`) files.
  * Improved support for decrypting PDFs with empty passwords.
  * Fixed a warning when scanning some HTML files.
  * ClamOnAcc: Fixed an infinite loop when a watched directory
    does not exist.
  * ClamOnAcc: Fixed an infinite loop when a file has been deleted
    before a scan.
- New version: 1.2.0:
  * Added support for extracting Universal Disk Format (UDF)
    partitions.
  * Added an option to customize the size of ClamAV's clean file
    cache.
  * Raised the MaxScanSize limit so the total amount of data
    scanned when scanning a file or archive may exceed 4 gigabytes.
  * Added ability for Freshclam to use a client certificate PEM
    file and a private key PEM file for authentication to a private
    mirror.
  * Fix an issue extracting files from ISO9660 partitions where the
    files are listed in the plain ISO tree and there also exists an
    empty Joliet tree.
  * PID and socket are now located under /run/clamav/clamd.pid and
    /run/clamav/clamd.sock .
  * bsc#1211594: Fixed an issue where ClamAV does not abort the
    signature load process after partially loading an invalid
    signature.
- New version 1.1.0:
  * https://blog.clamav.net/2023/05/clamav-110-released.html
  * Added the ability to extract images embedded in HTML CSS
    &lt;style&gt; blocks.
  * Updated to Sigtool so that the --vba option will extract VBA
    code from Microsoft Office documents the same way that
    libclamav extracts VBA.
  * Added a new option --fail-if-cvd-older-than=days to clamscan
    and clamd, and FailIfCvdOlderThan to clamd.conf
  * Added a new function cl_cvdgetage() to the libclamav API.
  * Added a new function cl_engine_set_clcb_vba() to the
    libclamav API.
  * obsoletes clamav-ec32.patch.
- boo#1180296: Integrate clamonacc as a service.
- New version 1.0.1 LTS (including changes in 0.104 and 0.105):
  * As of ClamAV 0.104, CMake is required to build ClamAV.
  * As of ClamAV 0.105, Rust is now required to compile ClamAV.
  * Increased the default limits for file and scan size:
  * MaxScanSize: 100M to 400M
  * MaxFileSize: 25M to 100M
  * StreamMaxLength: 25M to 100M
  * PCREMaxFileSize: 25M to 100M
  * MaxEmbeddedPE: 10M to 40M
  * MaxHTMLNormalize: 10M to 40M
  * MaxScriptNormalize: 5M to 20M
  * MaxHTMLNoTags: 2M to 8M
  * Added image fuzzy hash subsignatures for logical signatures.
  * Support for decrypting read-only OLE2-based XLS files that are
    encrypted with the default password.
  * Overhauled the implementation of the all-match feature.
  * Added a new callback to the public API for inspecting file
    content during a scan at each layer of archive extraction.
  * Added a new function to the public API for unpacking CVD
    signature archives.
  * The option to build with an external TomsFastMath library has
    been removed. ClamAV requires non-default build options for
    TomsFastMath to support bigger floating point numbers.
  * For a full list of changes see the release announcements:
  * https://blog.clamav.net/2022/11/clamav-100-lts-released.html
  * https://blog.clamav.net/2022/05/clamav-01050-01043-01036-released.html
  * https://blog.clamav.net/2021/09/clamav-01040-released.html
- Build clamd with systemd support.
- Fix format strings on 32bit platforms (clamav-format.patch).
- Add missing endianness conversions (clamav-ec32.patch).
- Don't build on armv7l for now due to some test failures.
- Drop clamav-disable-yara.patch as yara cannot be disabled anymore</changelog>
  <changelog author="max@suse.com" date="1713787200">- New Version: 1.3.1:
  * CVE-2024-20380: Fixed a possible crash in the HTML file parser
    that could cause a denial-of-service (DoS) condition.
  * Updated select Rust dependencies to the latest versions.
  * Fixed a bug causing some text to be truncated when converting
    from UTF-16.
  * Fixed assorted complaints identified by Coverity static
    analysis.
  * Fixed a bug causing CVDs downloaded by the DatabaseCustomURL
    Freshclam config option to be pruned and then re-downloaded
    with every update.
  * Added the new 'valhalla' database name to the list of optional
    databases in preparation for future work.</changelog>
  <changelog author="bwiedemann@suse.com" date="1722254400">- Add upstream 1305.patch to fix tests (boo#1102840, https://github.com/Cisco-Talos/clamav/issues/1300)</changelog>
  <changelog author="suse+build@de-korte.org" date="1725451200">- New version 1.3.2:
  * CVE-2024-20506: Changed the logging module to disable following
    symlinks on Linux and Unix systems so as to prevent an attacker
    with existing access to the 'clamd' or 'freshclam' services from
    using a symlink to corrupt system files.
  * CVE-2024-20505: Fixed a possible out-of-bounds read bug in the PDF
    file parser that could cause a denial-of-service condition.
  * Removed unused Python modules from freshclam tests including
    deprecated 'cgi' module that is expected to cause test failures in
    Python 3.13.
  * Fix unit test caused by expiring signing certificate.
  * Fixed a build issue on Windows with newer versions of Rust. Also
    upgraded GitHub Actions imports to fix CI failures.
  * Fixed an unaligned pointer dereference issue on select architectures.
  * Fixes to Jenkins CI pipeline.
- Remove upstreamed 1305.patch</changelog>
  <changelog author="max@suse.com" date="1725969600">- New version 1.4.1:
  * [CVE-2024-20506, bsc#1230162]: Changed the logging module to
    disable following symlinks on Linux and Unix systems so as to
    prevent an attacker with existing access to the 'clamd' or
    'freshclam' services from using a symlink to corrupt system
    files.
  * [CVE-2024-20505, bsc#1230161]: Fixed a possible out-of-bounds
    read bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition.
  * https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html
- New version 1.4.0:
  * Added support for extracting ALZ archives.
  * Added support for extracting LHA/LZH archives.
  * Added the ability to disable image fuzzy hashing, if needed.
    For context, image fuzzy hashing is a detection mechanism
    useful for identifying malware by matching images included with
    the malware or phishing email/document.
  * https://blog.clamav.net/2024/08/clamav-140-feature-release-and-clamav.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734523200">- fix factory submission (clam.tcl, clamscan.log)</changelog>
  <changelog author="max@suse.com" date="1736510400">- bsc#1232242: Start clamonacc with --fdpass to avoid errors due to
  clamd not being able to access user files.</changelog>
  <changelog author="max@suse.com" date="1737547200">- New version 1.4.2:
  * CVE-2025-20128, bsc#1236307: Fixed a possible buffer overflow
    read bug in the OLE2 file parser that could cause a
    denial-of-service (DoS) condition.</changelog>
  <changelog author="max@suse.com" date="1737633600">- Drop the version dependency on libcurl. Building against versions
  older than 7.45 does not fail anymore, but disables support for
  fdpassing in clamonacc. This only affects SLE-12 up to SP3.</changelog>
  <changelog author="max@suse.com" date="1739188800">- bsc#1236949: Fix location of license files.</changelog>
  <changelog author="max@suse.com" date="1742817600">- bsc#1239957: Build with PIE.
- Eliminate some UTF-8 NBSP characters from the changes file.</changelog>
</package>
<package pkgid="5adcc34014c8095475e6a8259b7f37268565057f24e2b4d50a09f453cc262c4f" name="clamav" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="150600.18.12.1"/>
  <changelog author="suse+build@de-korte.org" date="1641988800">- Update to 0.103.5
  * CVE-2022-20698: Fix for invalid pointer read that may cause a crash.
    This issue affects 0.104.1, 0.103.4 and prior when ClamAV is compiled
    with libjson-c and the CL_SCAN_GENERAL_COLLECT_METADATA scan option
    (the clamscan --gen-json option) is enabled. (bsc#1194731)
  * Fixed ability to disable the file size limit with libclamav C API,
    like this:
    cl_engine_set_num(engine, CL_ENGINE_MAX_FILESIZE, 0);
    This issue didn't affect ClamD or ClamScan which also can disable the
    limit by setting it to zero using MaxFileSize 0 in clamd.conf for ClamD,
    or clamscan --max-filesize=0 for ClamScan.
    Note: Internally, the max file size is still set to 2 GiB. Disabling the
    limit for a scan will fall back on the internal 2 GiB limitation.
  * Increased the maximum line length for ClamAV config files from 512 bytes
    to 1,024 bytes to allow for longer config option strings.
  * SigTool: Fix insufficient buffer size for --list-sigs that caused a
    failure when listing a database containing one or more very long
    signatures. This fix was backported from 0.104.</changelog>
  <changelog author="meissner@suse.com" date="1649764800">- https source urls</changelog>
  <changelog author="suse+build@de-korte.org" date="1651752000">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
  <changelog author="ecsos@opensuse.org" date="1659700800">- Update to 0.103.7 (bsc#1202986)
  - Zip parser: tolerate 2-byte overlap in file entries
  - Fix bug with logical signature Intermediates feature
  - Update to UnRAR v6.1.7
  - Patch UnRAR: allow skipping files in solid archives
  - Patch UnRAR: limit dict winsize to 1GB</changelog>
  <changelog author="suse+build@de-korte.org" date="1676462400">- Update to 0.103.8
  * CVE-2023-20032: Fixed a possible remote code execution vulnerability
    in the HFS+ file parser. Issue affects versions 1.0.0 and earlier,
    0.105.1 and earlier, and 0.103.7 and earlier. (bsc#1208363)
  * CVE-2023-20052: Fixed a possible remote information leak
    vulnerability in the DMG file parser. Issue affects versions 1.0.0
    and earlier, 0.105.1 and earlier, and 0.103.7 and earlier.
    (bsc#1208365)
  * Update vendored libmspack library to version 0.11alpha.
    (bsc#1103032: CVE-2018-14679)
- Package huge .html documentation in a separate subpackage.</changelog>
  <changelog author="suse+build@de-korte.org" date="1692187200">- Update to 0.103.9
  * CVE-2023-20197: Fixed a possible denial of service vulnerability in
    the HFS+ file parser. This issue affects versions 1.1.0, 1.0.1 through
    1.0.0, 0.105.2 through 0.105.0, 0.104.4 through 0.104.0, and 0.103.8
    through 0.103.0. (boo#1214342)
  * Fixed compiler warnings that may turn into errors in Clang 16.</changelog>
  <changelog author="max@suse.com" date="1692360000">- Renew clamav.keyring .</changelog>
  <changelog author="suse+build@de-korte.org" date="1698235200">- Update to 0.103.11
  * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.12.
  * Windows: libjson-c 0.17 compatibility fix. with ssize_t type definition.
  * Windows: Update build system to use OpenSSL 3 and PThreads-Win32 v3.
- Update to 0.103.10
  * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.10.
    (bsc#1216625, CVE-2023-40477)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="max@suse.com" date="1710504000">- New version: 1.3.0:
  * Added support for extracting and scanning attachments found in
    Microsoft OneNote section files. OneNote parsing will be
    enabled by default, but may be optionally disabled.
  * Added file type recognition for compiled Python (`.pyc`) files.
  * Improved support for decrypting PDFs with empty passwords.
  * Fixed a warning when scanning some HTML files.
  * ClamOnAcc: Fixed an infinite loop when a watched directory
    does not exist.
  * ClamOnAcc: Fixed an infinite loop when a file has been deleted
    before a scan.
- New version: 1.2.0:
  * Added support for extracting Universal Disk Format (UDF)
    partitions.
  * Added an option to customize the size of ClamAV's clean file
    cache.
  * Raised the MaxScanSize limit so the total amount of data
    scanned when scanning a file or archive may exceed 4 gigabytes.
  * Added ability for Freshclam to use a client certificate PEM
    file and a private key PEM file for authentication to a private
    mirror.
  * Fix an issue extracting files from ISO9660 partitions where the
    files are listed in the plain ISO tree and there also exists an
    empty Joliet tree.
  * PID and socket are now located under /run/clamav/clamd.pid and
    /run/clamav/clamd.sock .
  * bsc#1211594: Fixed an issue where ClamAV does not abort the
    signature load process after partially loading an invalid
    signature.
- New version 1.1.0:
  * https://blog.clamav.net/2023/05/clamav-110-released.html
  * Added the ability to extract images embedded in HTML CSS
    &lt;style&gt; blocks.
  * Updated to Sigtool so that the --vba option will extract VBA
    code from Microsoft Office documents the same way that
    libclamav extracts VBA.
  * Added a new option --fail-if-cvd-older-than=days to clamscan
    and clamd, and FailIfCvdOlderThan to clamd.conf
  * Added a new function cl_cvdgetage() to the libclamav API.
  * Added a new function cl_engine_set_clcb_vba() to the
    libclamav API.
  * obsoletes clamav-ec32.patch.
- boo#1180296: Integrate clamonacc as a service.
- New version 1.0.1 LTS (including changes in 0.104 and 0.105):
  * As of ClamAV 0.104, CMake is required to build ClamAV.
  * As of ClamAV 0.105, Rust is now required to compile ClamAV.
  * Increased the default limits for file and scan size:
  * MaxScanSize: 100M to 400M
  * MaxFileSize: 25M to 100M
  * StreamMaxLength: 25M to 100M
  * PCREMaxFileSize: 25M to 100M
  * MaxEmbeddedPE: 10M to 40M
  * MaxHTMLNormalize: 10M to 40M
  * MaxScriptNormalize: 5M to 20M
  * MaxHTMLNoTags: 2M to 8M
  * Added image fuzzy hash subsignatures for logical signatures.
  * Support for decrypting read-only OLE2-based XLS files that are
    encrypted with the default password.
  * Overhauled the implementation of the all-match feature.
  * Added a new callback to the public API for inspecting file
    content during a scan at each layer of archive extraction.
  * Added a new function to the public API for unpacking CVD
    signature archives.
  * The option to build with an external TomsFastMath library has
    been removed. ClamAV requires non-default build options for
    TomsFastMath to support bigger floating point numbers.
  * For a full list of changes see the release announcements:
  * https://blog.clamav.net/2022/11/clamav-100-lts-released.html
  * https://blog.clamav.net/2022/05/clamav-01050-01043-01036-released.html
  * https://blog.clamav.net/2021/09/clamav-01040-released.html
- Build clamd with systemd support.
- Fix format strings on 32bit platforms (clamav-format.patch).
- Add missing endianness conversions (clamav-ec32.patch).
- Don't build on armv7l for now due to some test failures.
- Drop clamav-disable-yara.patch as yara cannot be disabled anymore</changelog>
  <changelog author="max@suse.com" date="1713787200">- New Version: 1.3.1:
  * CVE-2024-20380: Fixed a possible crash in the HTML file parser
    that could cause a denial-of-service (DoS) condition.
  * Updated select Rust dependencies to the latest versions.
  * Fixed a bug causing some text to be truncated when converting
    from UTF-16.
  * Fixed assorted complaints identified by Coverity static
    analysis.
  * Fixed a bug causing CVDs downloaded by the DatabaseCustomURL
    Freshclam config option to be pruned and then re-downloaded
    with every update.
  * Added the new 'valhalla' database name to the list of optional
    databases in preparation for future work.</changelog>
  <changelog author="bwiedemann@suse.com" date="1722254400">- Add upstream 1305.patch to fix tests (boo#1102840, https://github.com/Cisco-Talos/clamav/issues/1300)</changelog>
  <changelog author="suse+build@de-korte.org" date="1725451200">- New version 1.3.2:
  * CVE-2024-20506: Changed the logging module to disable following
    symlinks on Linux and Unix systems so as to prevent an attacker
    with existing access to the 'clamd' or 'freshclam' services from
    using a symlink to corrupt system files.
  * CVE-2024-20505: Fixed a possible out-of-bounds read bug in the PDF
    file parser that could cause a denial-of-service condition.
  * Removed unused Python modules from freshclam tests including
    deprecated 'cgi' module that is expected to cause test failures in
    Python 3.13.
  * Fix unit test caused by expiring signing certificate.
  * Fixed a build issue on Windows with newer versions of Rust. Also
    upgraded GitHub Actions imports to fix CI failures.
  * Fixed an unaligned pointer dereference issue on select architectures.
  * Fixes to Jenkins CI pipeline.
- Remove upstreamed 1305.patch</changelog>
  <changelog author="max@suse.com" date="1725969600">- New version 1.4.1:
  * [CVE-2024-20506, bsc#1230162]: Changed the logging module to
    disable following symlinks on Linux and Unix systems so as to
    prevent an attacker with existing access to the 'clamd' or
    'freshclam' services from using a symlink to corrupt system
    files.
  * [CVE-2024-20505, bsc#1230161]: Fixed a possible out-of-bounds
    read bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition.
  * https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html
- New version 1.4.0:
  * Added support for extracting ALZ archives.
  * Added support for extracting LHA/LZH archives.
  * Added the ability to disable image fuzzy hashing, if needed.
    For context, image fuzzy hashing is a detection mechanism
    useful for identifying malware by matching images included with
    the malware or phishing email/document.
  * https://blog.clamav.net/2024/08/clamav-140-feature-release-and-clamav.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734523200">- fix factory submission (clam.tcl, clamscan.log)</changelog>
  <changelog author="max@suse.com" date="1736510400">- bsc#1232242: Start clamonacc with --fdpass to avoid errors due to
  clamd not being able to access user files.</changelog>
  <changelog author="max@suse.com" date="1737547200">- New version 1.4.2:
  * CVE-2025-20128, bsc#1236307: Fixed a possible buffer overflow
    read bug in the OLE2 file parser that could cause a
    denial-of-service (DoS) condition.</changelog>
  <changelog author="max@suse.com" date="1737633600">- Drop the version dependency on libcurl. Building against versions
  older than 7.45 does not fail anymore, but disables support for
  fdpassing in clamonacc. This only affects SLE-12 up to SP3.</changelog>
  <changelog author="max@suse.com" date="1739188800">- bsc#1236949: Fix location of license files.</changelog>
  <changelog author="max@suse.com" date="1742817600">- bsc#1239957: Build with PIE.
- Eliminate some UTF-8 NBSP characters from the changes file.</changelog>
</package>
<package pkgid="73f96ffe2408fe9bf1b8f6872e990fe0565c1e79a3693c98670bc808998e39a2" name="clamav" arch="src">
  <version epoch="0" ver="1.4.2" rel="150600.18.15.1"/>
  <changelog author="meissner@suse.com" date="1649764800">- https source urls</changelog>
  <changelog author="suse+build@de-korte.org" date="1651752000">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
  <changelog author="ecsos@opensuse.org" date="1659700800">- Update to 0.103.7 (bsc#1202986)
  - Zip parser: tolerate 2-byte overlap in file entries
  - Fix bug with logical signature Intermediates feature
  - Update to UnRAR v6.1.7
  - Patch UnRAR: allow skipping files in solid archives
  - Patch UnRAR: limit dict winsize to 1GB</changelog>
  <changelog author="suse+build@de-korte.org" date="1676462400">- Update to 0.103.8
  * CVE-2023-20032: Fixed a possible remote code execution vulnerability
    in the HFS+ file parser. Issue affects versions 1.0.0 and earlier,
    0.105.1 and earlier, and 0.103.7 and earlier. (bsc#1208363)
  * CVE-2023-20052: Fixed a possible remote information leak
    vulnerability in the DMG file parser. Issue affects versions 1.0.0
    and earlier, 0.105.1 and earlier, and 0.103.7 and earlier.
    (bsc#1208365)
  * Update vendored libmspack library to version 0.11alpha.
    (bsc#1103032: CVE-2018-14679)
- Package huge .html documentation in a separate subpackage.</changelog>
  <changelog author="suse+build@de-korte.org" date="1692187200">- Update to 0.103.9
  * CVE-2023-20197: Fixed a possible denial of service vulnerability in
    the HFS+ file parser. This issue affects versions 1.1.0, 1.0.1 through
    1.0.0, 0.105.2 through 0.105.0, 0.104.4 through 0.104.0, and 0.103.8
    through 0.103.0. (boo#1214342)
  * Fixed compiler warnings that may turn into errors in Clang 16.</changelog>
  <changelog author="max@suse.com" date="1692360000">- Renew clamav.keyring .</changelog>
  <changelog author="suse+build@de-korte.org" date="1698235200">- Update to 0.103.11
  * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.12.
  * Windows: libjson-c 0.17 compatibility fix. with ssize_t type definition.
  * Windows: Update build system to use OpenSSL 3 and PThreads-Win32 v3.
- Update to 0.103.10
  * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.10.
    (bsc#1216625, CVE-2023-40477)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="max@suse.com" date="1710504000">- New version: 1.3.0:
  * Added support for extracting and scanning attachments found in
    Microsoft OneNote section files. OneNote parsing will be
    enabled by default, but may be optionally disabled.
  * Added file type recognition for compiled Python (`.pyc`) files.
  * Improved support for decrypting PDFs with empty passwords.
  * Fixed a warning when scanning some HTML files.
  * ClamOnAcc: Fixed an infinite loop when a watched directory
    does not exist.
  * ClamOnAcc: Fixed an infinite loop when a file has been deleted
    before a scan.
- New version: 1.2.0:
  * Added support for extracting Universal Disk Format (UDF)
    partitions.
  * Added an option to customize the size of ClamAV's clean file
    cache.
  * Raised the MaxScanSize limit so the total amount of data
    scanned when scanning a file or archive may exceed 4 gigabytes.
  * Added ability for Freshclam to use a client certificate PEM
    file and a private key PEM file for authentication to a private
    mirror.
  * Fix an issue extracting files from ISO9660 partitions where the
    files are listed in the plain ISO tree and there also exists an
    empty Joliet tree.
  * PID and socket are now located under /run/clamav/clamd.pid and
    /run/clamav/clamd.sock .
  * bsc#1211594: Fixed an issue where ClamAV does not abort the
    signature load process after partially loading an invalid
    signature.
- New version 1.1.0:
  * https://blog.clamav.net/2023/05/clamav-110-released.html
  * Added the ability to extract images embedded in HTML CSS
    &lt;style&gt; blocks.
  * Updated to Sigtool so that the --vba option will extract VBA
    code from Microsoft Office documents the same way that
    libclamav extracts VBA.
  * Added a new option --fail-if-cvd-older-than=days to clamscan
    and clamd, and FailIfCvdOlderThan to clamd.conf
  * Added a new function cl_cvdgetage() to the libclamav API.
  * Added a new function cl_engine_set_clcb_vba() to the
    libclamav API.
  * obsoletes clamav-ec32.patch.
- boo#1180296: Integrate clamonacc as a service.
- New version 1.0.1 LTS (including changes in 0.104 and 0.105):
  * As of ClamAV 0.104, CMake is required to build ClamAV.
  * As of ClamAV 0.105, Rust is now required to compile ClamAV.
  * Increased the default limits for file and scan size:
  * MaxScanSize: 100M to 400M
  * MaxFileSize: 25M to 100M
  * StreamMaxLength: 25M to 100M
  * PCREMaxFileSize: 25M to 100M
  * MaxEmbeddedPE: 10M to 40M
  * MaxHTMLNormalize: 10M to 40M
  * MaxScriptNormalize: 5M to 20M
  * MaxHTMLNoTags: 2M to 8M
  * Added image fuzzy hash subsignatures for logical signatures.
  * Support for decrypting read-only OLE2-based XLS files that are
    encrypted with the default password.
  * Overhauled the implementation of the all-match feature.
  * Added a new callback to the public API for inspecting file
    content during a scan at each layer of archive extraction.
  * Added a new function to the public API for unpacking CVD
    signature archives.
  * The option to build with an external TomsFastMath library has
    been removed. ClamAV requires non-default build options for
    TomsFastMath to support bigger floating point numbers.
  * For a full list of changes see the release announcements:
  * https://blog.clamav.net/2022/11/clamav-100-lts-released.html
  * https://blog.clamav.net/2022/05/clamav-01050-01043-01036-released.html
  * https://blog.clamav.net/2021/09/clamav-01040-released.html
- Build clamd with systemd support.
- Fix format strings on 32bit platforms (clamav-format.patch).
- Add missing endianness conversions (clamav-ec32.patch).
- Don't build on armv7l for now due to some test failures.
- Drop clamav-disable-yara.patch as yara cannot be disabled anymore</changelog>
  <changelog author="max@suse.com" date="1713787200">- New Version: 1.3.1:
  * CVE-2024-20380: Fixed a possible crash in the HTML file parser
    that could cause a denial-of-service (DoS) condition.
  * Updated select Rust dependencies to the latest versions.
  * Fixed a bug causing some text to be truncated when converting
    from UTF-16.
  * Fixed assorted complaints identified by Coverity static
    analysis.
  * Fixed a bug causing CVDs downloaded by the DatabaseCustomURL
    Freshclam config option to be pruned and then re-downloaded
    with every update.
  * Added the new 'valhalla' database name to the list of optional
    databases in preparation for future work.</changelog>
  <changelog author="bwiedemann@suse.com" date="1722254400">- Add upstream 1305.patch to fix tests (boo#1102840, https://github.com/Cisco-Talos/clamav/issues/1300)</changelog>
  <changelog author="suse+build@de-korte.org" date="1725451200">- New version 1.3.2:
  * CVE-2024-20506: Changed the logging module to disable following
    symlinks on Linux and Unix systems so as to prevent an attacker
    with existing access to the 'clamd' or 'freshclam' services from
    using a symlink to corrupt system files.
  * CVE-2024-20505: Fixed a possible out-of-bounds read bug in the PDF
    file parser that could cause a denial-of-service condition.
  * Removed unused Python modules from freshclam tests including
    deprecated 'cgi' module that is expected to cause test failures in
    Python 3.13.
  * Fix unit test caused by expiring signing certificate.
  * Fixed a build issue on Windows with newer versions of Rust. Also
    upgraded GitHub Actions imports to fix CI failures.
  * Fixed an unaligned pointer dereference issue on select architectures.
  * Fixes to Jenkins CI pipeline.
- Remove upstreamed 1305.patch</changelog>
  <changelog author="max@suse.com" date="1725969600">- New version 1.4.1:
  * [CVE-2024-20506, bsc#1230162]: Changed the logging module to
    disable following symlinks on Linux and Unix systems so as to
    prevent an attacker with existing access to the 'clamd' or
    'freshclam' services from using a symlink to corrupt system
    files.
  * [CVE-2024-20505, bsc#1230161]: Fixed a possible out-of-bounds
    read bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition.
  * https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html
- New version 1.4.0:
  * Added support for extracting ALZ archives.
  * Added support for extracting LHA/LZH archives.
  * Added the ability to disable image fuzzy hashing, if needed.
    For context, image fuzzy hashing is a detection mechanism
    useful for identifying malware by matching images included with
    the malware or phishing email/document.
  * https://blog.clamav.net/2024/08/clamav-140-feature-release-and-clamav.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734523200">- fix factory submission (clam.tcl, clamscan.log)</changelog>
  <changelog author="max@suse.com" date="1736510400">- bsc#1232242: Start clamonacc with --fdpass to avoid errors due to
  clamd not being able to access user files.</changelog>
  <changelog author="max@suse.com" date="1737547200">- New version 1.4.2:
  * CVE-2025-20128, bsc#1236307: Fixed a possible buffer overflow
    read bug in the OLE2 file parser that could cause a
    denial-of-service (DoS) condition.</changelog>
  <changelog author="max@suse.com" date="1737633600">- Drop the version dependency on libcurl. Building against versions
  older than 7.45 does not fail anymore, but disables support for
  fdpassing in clamonacc. This only affects SLE-12 up to SP3.</changelog>
  <changelog author="max@suse.com" date="1739188800">- bsc#1236949: Fix location of license files.</changelog>
  <changelog author="max@suse.com" date="1742817600">- bsc#1239957: Build with PIE.
- Eliminate some UTF-8 NBSP characters from the changes file.</changelog>
  <changelog author="max@suse.com" date="1748433600">- bsc#1243565: Add clamav-freshclam_test.patch to fix a race
  condition between the mockup servers started by different test
  cases in freshclam_test.py.</changelog>
</package>
<package pkgid="0b3c5f880231f5995dda99eb1e92cfb062f7088e442a2e20fdc44488fa03d462" name="clamav" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="150600.18.15.1"/>
  <changelog author="meissner@suse.com" date="1649764800">- https source urls</changelog>
  <changelog author="suse+build@de-korte.org" date="1651752000">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
  <changelog author="ecsos@opensuse.org" date="1659700800">- Update to 0.103.7 (bsc#1202986)
  - Zip parser: tolerate 2-byte overlap in file entries
  - Fix bug with logical signature Intermediates feature
  - Update to UnRAR v6.1.7
  - Patch UnRAR: allow skipping files in solid archives
  - Patch UnRAR: limit dict winsize to 1GB</changelog>
  <changelog author="suse+build@de-korte.org" date="1676462400">- Update to 0.103.8
  * CVE-2023-20032: Fixed a possible remote code execution vulnerability
    in the HFS+ file parser. Issue affects versions 1.0.0 and earlier,
    0.105.1 and earlier, and 0.103.7 and earlier. (bsc#1208363)
  * CVE-2023-20052: Fixed a possible remote information leak
    vulnerability in the DMG file parser. Issue affects versions 1.0.0
    and earlier, 0.105.1 and earlier, and 0.103.7 and earlier.
    (bsc#1208365)
  * Update vendored libmspack library to version 0.11alpha.
    (bsc#1103032: CVE-2018-14679)
- Package huge .html documentation in a separate subpackage.</changelog>
  <changelog author="suse+build@de-korte.org" date="1692187200">- Update to 0.103.9
  * CVE-2023-20197: Fixed a possible denial of service vulnerability in
    the HFS+ file parser. This issue affects versions 1.1.0, 1.0.1 through
    1.0.0, 0.105.2 through 0.105.0, 0.104.4 through 0.104.0, and 0.103.8
    through 0.103.0. (boo#1214342)
  * Fixed compiler warnings that may turn into errors in Clang 16.</changelog>
  <changelog author="max@suse.com" date="1692360000">- Renew clamav.keyring .</changelog>
  <changelog author="suse+build@de-korte.org" date="1698235200">- Update to 0.103.11
  * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.12.
  * Windows: libjson-c 0.17 compatibility fix. with ssize_t type definition.
  * Windows: Update build system to use OpenSSL 3 and PThreads-Win32 v3.
- Update to 0.103.10
  * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.10.
    (bsc#1216625, CVE-2023-40477)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="max@suse.com" date="1710504000">- New version: 1.3.0:
  * Added support for extracting and scanning attachments found in
    Microsoft OneNote section files. OneNote parsing will be
    enabled by default, but may be optionally disabled.
  * Added file type recognition for compiled Python (`.pyc`) files.
  * Improved support for decrypting PDFs with empty passwords.
  * Fixed a warning when scanning some HTML files.
  * ClamOnAcc: Fixed an infinite loop when a watched directory
    does not exist.
  * ClamOnAcc: Fixed an infinite loop when a file has been deleted
    before a scan.
- New version: 1.2.0:
  * Added support for extracting Universal Disk Format (UDF)
    partitions.
  * Added an option to customize the size of ClamAV's clean file
    cache.
  * Raised the MaxScanSize limit so the total amount of data
    scanned when scanning a file or archive may exceed 4 gigabytes.
  * Added ability for Freshclam to use a client certificate PEM
    file and a private key PEM file for authentication to a private
    mirror.
  * Fix an issue extracting files from ISO9660 partitions where the
    files are listed in the plain ISO tree and there also exists an
    empty Joliet tree.
  * PID and socket are now located under /run/clamav/clamd.pid and
    /run/clamav/clamd.sock .
  * bsc#1211594: Fixed an issue where ClamAV does not abort the
    signature load process after partially loading an invalid
    signature.
- New version 1.1.0:
  * https://blog.clamav.net/2023/05/clamav-110-released.html
  * Added the ability to extract images embedded in HTML CSS
    &lt;style&gt; blocks.
  * Updated to Sigtool so that the --vba option will extract VBA
    code from Microsoft Office documents the same way that
    libclamav extracts VBA.
  * Added a new option --fail-if-cvd-older-than=days to clamscan
    and clamd, and FailIfCvdOlderThan to clamd.conf
  * Added a new function cl_cvdgetage() to the libclamav API.
  * Added a new function cl_engine_set_clcb_vba() to the
    libclamav API.
  * obsoletes clamav-ec32.patch.
- boo#1180296: Integrate clamonacc as a service.
- New version 1.0.1 LTS (including changes in 0.104 and 0.105):
  * As of ClamAV 0.104, CMake is required to build ClamAV.
  * As of ClamAV 0.105, Rust is now required to compile ClamAV.
  * Increased the default limits for file and scan size:
  * MaxScanSize: 100M to 400M
  * MaxFileSize: 25M to 100M
  * StreamMaxLength: 25M to 100M
  * PCREMaxFileSize: 25M to 100M
  * MaxEmbeddedPE: 10M to 40M
  * MaxHTMLNormalize: 10M to 40M
  * MaxScriptNormalize: 5M to 20M
  * MaxHTMLNoTags: 2M to 8M
  * Added image fuzzy hash subsignatures for logical signatures.
  * Support for decrypting read-only OLE2-based XLS files that are
    encrypted with the default password.
  * Overhauled the implementation of the all-match feature.
  * Added a new callback to the public API for inspecting file
    content during a scan at each layer of archive extraction.
  * Added a new function to the public API for unpacking CVD
    signature archives.
  * The option to build with an external TomsFastMath library has
    been removed. ClamAV requires non-default build options for
    TomsFastMath to support bigger floating point numbers.
  * For a full list of changes see the release announcements:
  * https://blog.clamav.net/2022/11/clamav-100-lts-released.html
  * https://blog.clamav.net/2022/05/clamav-01050-01043-01036-released.html
  * https://blog.clamav.net/2021/09/clamav-01040-released.html
- Build clamd with systemd support.
- Fix format strings on 32bit platforms (clamav-format.patch).
- Add missing endianness conversions (clamav-ec32.patch).
- Don't build on armv7l for now due to some test failures.
- Drop clamav-disable-yara.patch as yara cannot be disabled anymore</changelog>
  <changelog author="max@suse.com" date="1713787200">- New Version: 1.3.1:
  * CVE-2024-20380: Fixed a possible crash in the HTML file parser
    that could cause a denial-of-service (DoS) condition.
  * Updated select Rust dependencies to the latest versions.
  * Fixed a bug causing some text to be truncated when converting
    from UTF-16.
  * Fixed assorted complaints identified by Coverity static
    analysis.
  * Fixed a bug causing CVDs downloaded by the DatabaseCustomURL
    Freshclam config option to be pruned and then re-downloaded
    with every update.
  * Added the new 'valhalla' database name to the list of optional
    databases in preparation for future work.</changelog>
  <changelog author="bwiedemann@suse.com" date="1722254400">- Add upstream 1305.patch to fix tests (boo#1102840, https://github.com/Cisco-Talos/clamav/issues/1300)</changelog>
  <changelog author="suse+build@de-korte.org" date="1725451200">- New version 1.3.2:
  * CVE-2024-20506: Changed the logging module to disable following
    symlinks on Linux and Unix systems so as to prevent an attacker
    with existing access to the 'clamd' or 'freshclam' services from
    using a symlink to corrupt system files.
  * CVE-2024-20505: Fixed a possible out-of-bounds read bug in the PDF
    file parser that could cause a denial-of-service condition.
  * Removed unused Python modules from freshclam tests including
    deprecated 'cgi' module that is expected to cause test failures in
    Python 3.13.
  * Fix unit test caused by expiring signing certificate.
  * Fixed a build issue on Windows with newer versions of Rust. Also
    upgraded GitHub Actions imports to fix CI failures.
  * Fixed an unaligned pointer dereference issue on select architectures.
  * Fixes to Jenkins CI pipeline.
- Remove upstreamed 1305.patch</changelog>
  <changelog author="max@suse.com" date="1725969600">- New version 1.4.1:
  * [CVE-2024-20506, bsc#1230162]: Changed the logging module to
    disable following symlinks on Linux and Unix systems so as to
    prevent an attacker with existing access to the 'clamd' or
    'freshclam' services from using a symlink to corrupt system
    files.
  * [CVE-2024-20505, bsc#1230161]: Fixed a possible out-of-bounds
    read bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition.
  * https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html
- New version 1.4.0:
  * Added support for extracting ALZ archives.
  * Added support for extracting LHA/LZH archives.
  * Added the ability to disable image fuzzy hashing, if needed.
    For context, image fuzzy hashing is a detection mechanism
    useful for identifying malware by matching images included with
    the malware or phishing email/document.
  * https://blog.clamav.net/2024/08/clamav-140-feature-release-and-clamav.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734523200">- fix factory submission (clam.tcl, clamscan.log)</changelog>
  <changelog author="max@suse.com" date="1736510400">- bsc#1232242: Start clamonacc with --fdpass to avoid errors due to
  clamd not being able to access user files.</changelog>
  <changelog author="max@suse.com" date="1737547200">- New version 1.4.2:
  * CVE-2025-20128, bsc#1236307: Fixed a possible buffer overflow
    read bug in the OLE2 file parser that could cause a
    denial-of-service (DoS) condition.</changelog>
  <changelog author="max@suse.com" date="1737633600">- Drop the version dependency on libcurl. Building against versions
  older than 7.45 does not fail anymore, but disables support for
  fdpassing in clamonacc. This only affects SLE-12 up to SP3.</changelog>
  <changelog author="max@suse.com" date="1739188800">- bsc#1236949: Fix location of license files.</changelog>
  <changelog author="max@suse.com" date="1742817600">- bsc#1239957: Build with PIE.
- Eliminate some UTF-8 NBSP characters from the changes file.</changelog>
  <changelog author="max@suse.com" date="1748433600">- bsc#1243565: Add clamav-freshclam_test.patch to fix a race
  condition between the mockup servers started by different test
  cases in freshclam_test.py.</changelog>
</package>
<package pkgid="421662769f1794371862ef2274527f92512ed22a1e28af802490ee15708d98d9" name="clamav" arch="src">
  <version epoch="0" ver="1.4.3" rel="150600.18.18.1"/>
  <changelog author="suse+build@de-korte.org" date="1651752000">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
  <changelog author="ecsos@opensuse.org" date="1659700800">- Update to 0.103.7 (bsc#1202986)
  - Zip parser: tolerate 2-byte overlap in file entries
  - Fix bug with logical signature Intermediates feature
  - Update to UnRAR v6.1.7
  - Patch UnRAR: allow skipping files in solid archives
  - Patch UnRAR: limit dict winsize to 1GB</changelog>
  <changelog author="suse+build@de-korte.org" date="1676462400">- Update to 0.103.8
  * CVE-2023-20032: Fixed a possible remote code execution vulnerability
    in the HFS+ file parser. Issue affects versions 1.0.0 and earlier,
    0.105.1 and earlier, and 0.103.7 and earlier. (bsc#1208363)
  * CVE-2023-20052: Fixed a possible remote information leak
    vulnerability in the DMG file parser. Issue affects versions 1.0.0
    and earlier, 0.105.1 and earlier, and 0.103.7 and earlier.
    (bsc#1208365)
  * Update vendored libmspack library to version 0.11alpha.
    (bsc#1103032: CVE-2018-14679)
- Package huge .html documentation in a separate subpackage.</changelog>
  <changelog author="suse+build@de-korte.org" date="1692187200">- Update to 0.103.9
  * CVE-2023-20197: Fixed a possible denial of service vulnerability in
    the HFS+ file parser. This issue affects versions 1.1.0, 1.0.1 through
    1.0.0, 0.105.2 through 0.105.0, 0.104.4 through 0.104.0, and 0.103.8
    through 0.103.0. (boo#1214342)
  * Fixed compiler warnings that may turn into errors in Clang 16.</changelog>
  <changelog author="max@suse.com" date="1692360000">- Renew clamav.keyring .</changelog>
  <changelog author="suse+build@de-korte.org" date="1698235200">- Update to 0.103.11
  * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.12.
  * Windows: libjson-c 0.17 compatibility fix. with ssize_t type definition.
  * Windows: Update build system to use OpenSSL 3 and PThreads-Win32 v3.
- Update to 0.103.10
  * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.10.
    (bsc#1216625, CVE-2023-40477)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="max@suse.com" date="1710504000">- New version: 1.3.0:
  * Added support for extracting and scanning attachments found in
    Microsoft OneNote section files. OneNote parsing will be
    enabled by default, but may be optionally disabled.
  * Added file type recognition for compiled Python (`.pyc`) files.
  * Improved support for decrypting PDFs with empty passwords.
  * Fixed a warning when scanning some HTML files.
  * ClamOnAcc: Fixed an infinite loop when a watched directory
    does not exist.
  * ClamOnAcc: Fixed an infinite loop when a file has been deleted
    before a scan.
- New version: 1.2.0:
  * Added support for extracting Universal Disk Format (UDF)
    partitions.
  * Added an option to customize the size of ClamAV's clean file
    cache.
  * Raised the MaxScanSize limit so the total amount of data
    scanned when scanning a file or archive may exceed 4 gigabytes.
  * Added ability for Freshclam to use a client certificate PEM
    file and a private key PEM file for authentication to a private
    mirror.
  * Fix an issue extracting files from ISO9660 partitions where the
    files are listed in the plain ISO tree and there also exists an
    empty Joliet tree.
  * PID and socket are now located under /run/clamav/clamd.pid and
    /run/clamav/clamd.sock .
  * bsc#1211594: Fixed an issue where ClamAV does not abort the
    signature load process after partially loading an invalid
    signature.
- New version 1.1.0:
  * https://blog.clamav.net/2023/05/clamav-110-released.html
  * Added the ability to extract images embedded in HTML CSS
    &lt;style&gt; blocks.
  * Updated to Sigtool so that the --vba option will extract VBA
    code from Microsoft Office documents the same way that
    libclamav extracts VBA.
  * Added a new option --fail-if-cvd-older-than=days to clamscan
    and clamd, and FailIfCvdOlderThan to clamd.conf
  * Added a new function cl_cvdgetage() to the libclamav API.
  * Added a new function cl_engine_set_clcb_vba() to the
    libclamav API.
  * obsoletes clamav-ec32.patch.
- boo#1180296: Integrate clamonacc as a service.
- New version 1.0.1 LTS (including changes in 0.104 and 0.105):
  * As of ClamAV 0.104, CMake is required to build ClamAV.
  * As of ClamAV 0.105, Rust is now required to compile ClamAV.
  * Increased the default limits for file and scan size:
  * MaxScanSize: 100M to 400M
  * MaxFileSize: 25M to 100M
  * StreamMaxLength: 25M to 100M
  * PCREMaxFileSize: 25M to 100M
  * MaxEmbeddedPE: 10M to 40M
  * MaxHTMLNormalize: 10M to 40M
  * MaxScriptNormalize: 5M to 20M
  * MaxHTMLNoTags: 2M to 8M
  * Added image fuzzy hash subsignatures for logical signatures.
  * Support for decrypting read-only OLE2-based XLS files that are
    encrypted with the default password.
  * Overhauled the implementation of the all-match feature.
  * Added a new callback to the public API for inspecting file
    content during a scan at each layer of archive extraction.
  * Added a new function to the public API for unpacking CVD
    signature archives.
  * The option to build with an external TomsFastMath library has
    been removed. ClamAV requires non-default build options for
    TomsFastMath to support bigger floating point numbers.
  * For a full list of changes see the release announcements:
  * https://blog.clamav.net/2022/11/clamav-100-lts-released.html
  * https://blog.clamav.net/2022/05/clamav-01050-01043-01036-released.html
  * https://blog.clamav.net/2021/09/clamav-01040-released.html
- Build clamd with systemd support.
- Fix format strings on 32bit platforms (clamav-format.patch).
- Add missing endianness conversions (clamav-ec32.patch).
- Don't build on armv7l for now due to some test failures.
- Drop clamav-disable-yara.patch as yara cannot be disabled anymore</changelog>
  <changelog author="max@suse.com" date="1713787200">- New Version: 1.3.1:
  * CVE-2024-20380: Fixed a possible crash in the HTML file parser
    that could cause a denial-of-service (DoS) condition.
  * Updated select Rust dependencies to the latest versions.
  * Fixed a bug causing some text to be truncated when converting
    from UTF-16.
  * Fixed assorted complaints identified by Coverity static
    analysis.
  * Fixed a bug causing CVDs downloaded by the DatabaseCustomURL
    Freshclam config option to be pruned and then re-downloaded
    with every update.
  * Added the new 'valhalla' database name to the list of optional
    databases in preparation for future work.</changelog>
  <changelog author="bwiedemann@suse.com" date="1722254400">- Add upstream 1305.patch to fix tests (boo#1102840, https://github.com/Cisco-Talos/clamav/issues/1300)</changelog>
  <changelog author="suse+build@de-korte.org" date="1725451200">- New version 1.3.2:
  * CVE-2024-20506: Changed the logging module to disable following
    symlinks on Linux and Unix systems so as to prevent an attacker
    with existing access to the 'clamd' or 'freshclam' services from
    using a symlink to corrupt system files.
  * CVE-2024-20505: Fixed a possible out-of-bounds read bug in the PDF
    file parser that could cause a denial-of-service condition.
  * Removed unused Python modules from freshclam tests including
    deprecated 'cgi' module that is expected to cause test failures in
    Python 3.13.
  * Fix unit test caused by expiring signing certificate.
  * Fixed a build issue on Windows with newer versions of Rust. Also
    upgraded GitHub Actions imports to fix CI failures.
  * Fixed an unaligned pointer dereference issue on select architectures.
  * Fixes to Jenkins CI pipeline.
- Remove upstreamed 1305.patch</changelog>
  <changelog author="max@suse.com" date="1725969600">- New version 1.4.1:
  * [CVE-2024-20506, bsc#1230162]: Changed the logging module to
    disable following symlinks on Linux and Unix systems so as to
    prevent an attacker with existing access to the 'clamd' or
    'freshclam' services from using a symlink to corrupt system
    files.
  * [CVE-2024-20505, bsc#1230161]: Fixed a possible out-of-bounds
    read bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition.
  * https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html
- New version 1.4.0:
  * Added support for extracting ALZ archives.
  * Added support for extracting LHA/LZH archives.
  * Added the ability to disable image fuzzy hashing, if needed.
    For context, image fuzzy hashing is a detection mechanism
    useful for identifying malware by matching images included with
    the malware or phishing email/document.
  * https://blog.clamav.net/2024/08/clamav-140-feature-release-and-clamav.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734523200">- fix factory submission (clam.tcl, clamscan.log)</changelog>
  <changelog author="max@suse.com" date="1736510400">- bsc#1232242: Start clamonacc with --fdpass to avoid errors due to
  clamd not being able to access user files.</changelog>
  <changelog author="max@suse.com" date="1737547200">- New version 1.4.2:
  * CVE-2025-20128, bsc#1236307: Fixed a possible buffer overflow
    read bug in the OLE2 file parser that could cause a
    denial-of-service (DoS) condition.</changelog>
  <changelog author="max@suse.com" date="1737633600">- Drop the version dependency on libcurl. Building against versions
  older than 7.45 does not fail anymore, but disables support for
  fdpassing in clamonacc. This only affects SLE-12 up to SP3.</changelog>
  <changelog author="max@suse.com" date="1739188800">- bsc#1236949: Fix location of license files.</changelog>
  <changelog author="max@suse.com" date="1742817600">- bsc#1239957: Build with PIE.
- Eliminate some UTF-8 NBSP characters from the changes file.</changelog>
  <changelog author="max@suse.com" date="1748433600">- bsc#1243565: Add clamav-freshclam_test.patch to fix a race
  condition between the mockup servers started by different test
  cases in freshclam_test.py.</changelog>
  <changelog author="suse+build@de-korte.org" date="1750334400">- New version 1.4.3:
  ClamAV 1.4.3 is a patch release with the following fixes:
  * CVE-2025-20260, bsc#1245054: Fixed a possible buffer overflow
    write bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition or enable remote code
    execution. This issue only affects configurations where both:
  - The max file-size scan limit is set greater than or equal to 1024MB.
  - The max scan-size scan limit is set greater than or equal to 1025MB.
    The code flaw was present prior to version 1.0.0, but a change in
    version 1.0.0 that enables larger allocations based on untrusted data
    made it possible to trigger this bug.
    This issue affects all currently supported versions.
  * CVE-2025-20234, bsc#1245055: Fixed a possible buffer overflow
    read bug in the UDF file parser that may write to a temp file
    and thus disclose information, or it may crash and cause a
    denial-of-service (DoS) condition.
    This issue was introduced in version 1.2.0.
  * Fixed a possible use-after-free bug in the Xz decompression module in
    the bundled lzma-sdk library.
    This issue was fixed in the lzma-sdk version 18.03. ClamAV bundles a
    copy of the lzma-sdk with some performance changes specific to
    libclamav, plus select bug fixes like this one in lieu of a full
    upgrade to newer lzma-sdk.
    This issue affects all ClamAV versions at least as far back as 0.99.4.
  * Windows: Fixed a build install issue when a DLL dependency such as
    libcrypto has the exact same name as one provided by the Windows
    operating system.
- Renew clamav.keyring</changelog>
</package>
<package pkgid="c0526bf9254633bf558c8e4902d3ce00ab4fb0fa9896e9b44debcc7d94c7bae6" name="clamav" arch="x86_64">
  <version epoch="0" ver="1.4.3" rel="150600.18.18.1"/>
  <changelog author="suse+build@de-korte.org" date="1651752000">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
  <changelog author="ecsos@opensuse.org" date="1659700800">- Update to 0.103.7 (bsc#1202986)
  - Zip parser: tolerate 2-byte overlap in file entries
  - Fix bug with logical signature Intermediates feature
  - Update to UnRAR v6.1.7
  - Patch UnRAR: allow skipping files in solid archives
  - Patch UnRAR: limit dict winsize to 1GB</changelog>
  <changelog author="suse+build@de-korte.org" date="1676462400">- Update to 0.103.8
  * CVE-2023-20032: Fixed a possible remote code execution vulnerability
    in the HFS+ file parser. Issue affects versions 1.0.0 and earlier,
    0.105.1 and earlier, and 0.103.7 and earlier. (bsc#1208363)
  * CVE-2023-20052: Fixed a possible remote information leak
    vulnerability in the DMG file parser. Issue affects versions 1.0.0
    and earlier, 0.105.1 and earlier, and 0.103.7 and earlier.
    (bsc#1208365)
  * Update vendored libmspack library to version 0.11alpha.
    (bsc#1103032: CVE-2018-14679)
- Package huge .html documentation in a separate subpackage.</changelog>
  <changelog author="suse+build@de-korte.org" date="1692187200">- Update to 0.103.9
  * CVE-2023-20197: Fixed a possible denial of service vulnerability in
    the HFS+ file parser. This issue affects versions 1.1.0, 1.0.1 through
    1.0.0, 0.105.2 through 0.105.0, 0.104.4 through 0.104.0, and 0.103.8
    through 0.103.0. (boo#1214342)
  * Fixed compiler warnings that may turn into errors in Clang 16.</changelog>
  <changelog author="max@suse.com" date="1692360000">- Renew clamav.keyring .</changelog>
  <changelog author="suse+build@de-korte.org" date="1698235200">- Update to 0.103.11
  * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.12.
  * Windows: libjson-c 0.17 compatibility fix. with ssize_t type definition.
  * Windows: Update build system to use OpenSSL 3 and PThreads-Win32 v3.
- Update to 0.103.10
  * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.10.
    (bsc#1216625, CVE-2023-40477)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="max@suse.com" date="1710504000">- New version: 1.3.0:
  * Added support for extracting and scanning attachments found in
    Microsoft OneNote section files. OneNote parsing will be
    enabled by default, but may be optionally disabled.
  * Added file type recognition for compiled Python (`.pyc`) files.
  * Improved support for decrypting PDFs with empty passwords.
  * Fixed a warning when scanning some HTML files.
  * ClamOnAcc: Fixed an infinite loop when a watched directory
    does not exist.
  * ClamOnAcc: Fixed an infinite loop when a file has been deleted
    before a scan.
- New version: 1.2.0:
  * Added support for extracting Universal Disk Format (UDF)
    partitions.
  * Added an option to customize the size of ClamAV's clean file
    cache.
  * Raised the MaxScanSize limit so the total amount of data
    scanned when scanning a file or archive may exceed 4 gigabytes.
  * Added ability for Freshclam to use a client certificate PEM
    file and a private key PEM file for authentication to a private
    mirror.
  * Fix an issue extracting files from ISO9660 partitions where the
    files are listed in the plain ISO tree and there also exists an
    empty Joliet tree.
  * PID and socket are now located under /run/clamav/clamd.pid and
    /run/clamav/clamd.sock .
  * bsc#1211594: Fixed an issue where ClamAV does not abort the
    signature load process after partially loading an invalid
    signature.
- New version 1.1.0:
  * https://blog.clamav.net/2023/05/clamav-110-released.html
  * Added the ability to extract images embedded in HTML CSS
    &lt;style&gt; blocks.
  * Updated to Sigtool so that the --vba option will extract VBA
    code from Microsoft Office documents the same way that
    libclamav extracts VBA.
  * Added a new option --fail-if-cvd-older-than=days to clamscan
    and clamd, and FailIfCvdOlderThan to clamd.conf
  * Added a new function cl_cvdgetage() to the libclamav API.
  * Added a new function cl_engine_set_clcb_vba() to the
    libclamav API.
  * obsoletes clamav-ec32.patch.
- boo#1180296: Integrate clamonacc as a service.
- New version 1.0.1 LTS (including changes in 0.104 and 0.105):
  * As of ClamAV 0.104, CMake is required to build ClamAV.
  * As of ClamAV 0.105, Rust is now required to compile ClamAV.
  * Increased the default limits for file and scan size:
  * MaxScanSize: 100M to 400M
  * MaxFileSize: 25M to 100M
  * StreamMaxLength: 25M to 100M
  * PCREMaxFileSize: 25M to 100M
  * MaxEmbeddedPE: 10M to 40M
  * MaxHTMLNormalize: 10M to 40M
  * MaxScriptNormalize: 5M to 20M
  * MaxHTMLNoTags: 2M to 8M
  * Added image fuzzy hash subsignatures for logical signatures.
  * Support for decrypting read-only OLE2-based XLS files that are
    encrypted with the default password.
  * Overhauled the implementation of the all-match feature.
  * Added a new callback to the public API for inspecting file
    content during a scan at each layer of archive extraction.
  * Added a new function to the public API for unpacking CVD
    signature archives.
  * The option to build with an external TomsFastMath library has
    been removed. ClamAV requires non-default build options for
    TomsFastMath to support bigger floating point numbers.
  * For a full list of changes see the release announcements:
  * https://blog.clamav.net/2022/11/clamav-100-lts-released.html
  * https://blog.clamav.net/2022/05/clamav-01050-01043-01036-released.html
  * https://blog.clamav.net/2021/09/clamav-01040-released.html
- Build clamd with systemd support.
- Fix format strings on 32bit platforms (clamav-format.patch).
- Add missing endianness conversions (clamav-ec32.patch).
- Don't build on armv7l for now due to some test failures.
- Drop clamav-disable-yara.patch as yara cannot be disabled anymore</changelog>
  <changelog author="max@suse.com" date="1713787200">- New Version: 1.3.1:
  * CVE-2024-20380: Fixed a possible crash in the HTML file parser
    that could cause a denial-of-service (DoS) condition.
  * Updated select Rust dependencies to the latest versions.
  * Fixed a bug causing some text to be truncated when converting
    from UTF-16.
  * Fixed assorted complaints identified by Coverity static
    analysis.
  * Fixed a bug causing CVDs downloaded by the DatabaseCustomURL
    Freshclam config option to be pruned and then re-downloaded
    with every update.
  * Added the new 'valhalla' database name to the list of optional
    databases in preparation for future work.</changelog>
  <changelog author="bwiedemann@suse.com" date="1722254400">- Add upstream 1305.patch to fix tests (boo#1102840, https://github.com/Cisco-Talos/clamav/issues/1300)</changelog>
  <changelog author="suse+build@de-korte.org" date="1725451200">- New version 1.3.2:
  * CVE-2024-20506: Changed the logging module to disable following
    symlinks on Linux and Unix systems so as to prevent an attacker
    with existing access to the 'clamd' or 'freshclam' services from
    using a symlink to corrupt system files.
  * CVE-2024-20505: Fixed a possible out-of-bounds read bug in the PDF
    file parser that could cause a denial-of-service condition.
  * Removed unused Python modules from freshclam tests including
    deprecated 'cgi' module that is expected to cause test failures in
    Python 3.13.
  * Fix unit test caused by expiring signing certificate.
  * Fixed a build issue on Windows with newer versions of Rust. Also
    upgraded GitHub Actions imports to fix CI failures.
  * Fixed an unaligned pointer dereference issue on select architectures.
  * Fixes to Jenkins CI pipeline.
- Remove upstreamed 1305.patch</changelog>
  <changelog author="max@suse.com" date="1725969600">- New version 1.4.1:
  * [CVE-2024-20506, bsc#1230162]: Changed the logging module to
    disable following symlinks on Linux and Unix systems so as to
    prevent an attacker with existing access to the 'clamd' or
    'freshclam' services from using a symlink to corrupt system
    files.
  * [CVE-2024-20505, bsc#1230161]: Fixed a possible out-of-bounds
    read bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition.
  * https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html
- New version 1.4.0:
  * Added support for extracting ALZ archives.
  * Added support for extracting LHA/LZH archives.
  * Added the ability to disable image fuzzy hashing, if needed.
    For context, image fuzzy hashing is a detection mechanism
    useful for identifying malware by matching images included with
    the malware or phishing email/document.
  * https://blog.clamav.net/2024/08/clamav-140-feature-release-and-clamav.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734523200">- fix factory submission (clam.tcl, clamscan.log)</changelog>
  <changelog author="max@suse.com" date="1736510400">- bsc#1232242: Start clamonacc with --fdpass to avoid errors due to
  clamd not being able to access user files.</changelog>
  <changelog author="max@suse.com" date="1737547200">- New version 1.4.2:
  * CVE-2025-20128, bsc#1236307: Fixed a possible buffer overflow
    read bug in the OLE2 file parser that could cause a
    denial-of-service (DoS) condition.</changelog>
  <changelog author="max@suse.com" date="1737633600">- Drop the version dependency on libcurl. Building against versions
  older than 7.45 does not fail anymore, but disables support for
  fdpassing in clamonacc. This only affects SLE-12 up to SP3.</changelog>
  <changelog author="max@suse.com" date="1739188800">- bsc#1236949: Fix location of license files.</changelog>
  <changelog author="max@suse.com" date="1742817600">- bsc#1239957: Build with PIE.
- Eliminate some UTF-8 NBSP characters from the changes file.</changelog>
  <changelog author="max@suse.com" date="1748433600">- bsc#1243565: Add clamav-freshclam_test.patch to fix a race
  condition between the mockup servers started by different test
  cases in freshclam_test.py.</changelog>
  <changelog author="suse+build@de-korte.org" date="1750334400">- New version 1.4.3:
  ClamAV 1.4.3 is a patch release with the following fixes:
  * CVE-2025-20260, bsc#1245054: Fixed a possible buffer overflow
    write bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition or enable remote code
    execution. This issue only affects configurations where both:
  - The max file-size scan limit is set greater than or equal to 1024MB.
  - The max scan-size scan limit is set greater than or equal to 1025MB.
    The code flaw was present prior to version 1.0.0, but a change in
    version 1.0.0 that enables larger allocations based on untrusted data
    made it possible to trigger this bug.
    This issue affects all currently supported versions.
  * CVE-2025-20234, bsc#1245055: Fixed a possible buffer overflow
    read bug in the UDF file parser that may write to a temp file
    and thus disclose information, or it may crash and cause a
    denial-of-service (DoS) condition.
    This issue was introduced in version 1.2.0.
  * Fixed a possible use-after-free bug in the Xz decompression module in
    the bundled lzma-sdk library.
    This issue was fixed in the lzma-sdk version 18.03. ClamAV bundles a
    copy of the lzma-sdk with some performance changes specific to
    libclamav, plus select bug fixes like this one in lieu of a full
    upgrade to newer lzma-sdk.
    This issue affects all ClamAV versions at least as far back as 0.99.4.
  * Windows: Fixed a build install issue when a DLL dependency such as
    libcrypto has the exact same name as one provided by the Windows
    operating system.
- Renew clamav.keyring</changelog>
</package>
<package pkgid="e7e72d9aa2694355103fd218bfb53378020a0d6a54f649d630281795604c58f2" name="clamav" arch="src">
  <version epoch="0" ver="1.5.1" rel="150600.18.22.1"/>
  <changelog author="max@suse.com" date="1713787200">- New Version: 1.3.1:
  * CVE-2024-20380: Fixed a possible crash in the HTML file parser
    that could cause a denial-of-service (DoS) condition.
  * Updated select Rust dependencies to the latest versions.
  * Fixed a bug causing some text to be truncated when converting
    from UTF-16.
  * Fixed assorted complaints identified by Coverity static
    analysis.
  * Fixed a bug causing CVDs downloaded by the DatabaseCustomURL
    Freshclam config option to be pruned and then re-downloaded
    with every update.
  * Added the new 'valhalla' database name to the list of optional
    databases in preparation for future work.</changelog>
  <changelog author="bwiedemann@suse.com" date="1722254400">- Add upstream 1305.patch to fix tests (boo#1102840, https://github.com/Cisco-Talos/clamav/issues/1300)</changelog>
  <changelog author="suse+build@de-korte.org" date="1725451200">- New version 1.3.2:
  * CVE-2024-20506: Changed the logging module to disable following
    symlinks on Linux and Unix systems so as to prevent an attacker
    with existing access to the 'clamd' or 'freshclam' services from
    using a symlink to corrupt system files.
  * CVE-2024-20505: Fixed a possible out-of-bounds read bug in the PDF
    file parser that could cause a denial-of-service condition.
  * Removed unused Python modules from freshclam tests including
    deprecated 'cgi' module that is expected to cause test failures in
    Python 3.13.
  * Fix unit test caused by expiring signing certificate.
  * Fixed a build issue on Windows with newer versions of Rust. Also
    upgraded GitHub Actions imports to fix CI failures.
  * Fixed an unaligned pointer dereference issue on select architectures.
  * Fixes to Jenkins CI pipeline.
- Remove upstreamed 1305.patch</changelog>
  <changelog author="max@suse.com" date="1725969600">- New version 1.4.1:
  * [CVE-2024-20506, bsc#1230162]: Changed the logging module to
    disable following symlinks on Linux and Unix systems so as to
    prevent an attacker with existing access to the 'clamd' or
    'freshclam' services from using a symlink to corrupt system
    files.
  * [CVE-2024-20505, bsc#1230161]: Fixed a possible out-of-bounds
    read bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition.
  * https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html
- New version 1.4.0:
  * Added support for extracting ALZ archives.
  * Added support for extracting LHA/LZH archives.
  * Added the ability to disable image fuzzy hashing, if needed.
    For context, image fuzzy hashing is a detection mechanism
    useful for identifying malware by matching images included with
    the malware or phishing email/document.
  * https://blog.clamav.net/2024/08/clamav-140-feature-release-and-clamav.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734523200">- fix factory submission (clam.tcl, clamscan.log)</changelog>
  <changelog author="max@suse.com" date="1736510400">- bsc#1232242: Start clamonacc with --fdpass to avoid errors due to
  clamd not being able to access user files.</changelog>
  <changelog author="max@suse.com" date="1737547200">- New version 1.4.2:
  * CVE-2025-20128, bsc#1236307: Fixed a possible buffer overflow
    read bug in the OLE2 file parser that could cause a
    denial-of-service (DoS) condition.</changelog>
  <changelog author="max@suse.com" date="1737633600">- Drop the version dependency on libcurl. Building against versions
  older than 7.45 does not fail anymore, but disables support for
  fdpassing in clamonacc. This only affects SLE-12 up to SP3.</changelog>
  <changelog author="max@suse.com" date="1739188800">- bsc#1236949: Fix location of license files.</changelog>
  <changelog author="max@suse.com" date="1742817600">- bsc#1239957: Build with PIE.
- Eliminate some UTF-8 NBSP characters from the changes file.</changelog>
  <changelog author="max@suse.com" date="1748433600">- bsc#1243565: Add clamav-freshclam_test.patch to fix a race
  condition between the mockup servers started by different test
  cases in freshclam_test.py.</changelog>
  <changelog author="suse+build@de-korte.org" date="1750334400">- New version 1.4.3:
  ClamAV 1.4.3 is a patch release with the following fixes:
  * CVE-2025-20260, bsc#1245054: Fixed a possible buffer overflow
    write bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition or enable remote code
    execution. This issue only affects configurations where both:
  - The max file-size scan limit is set greater than or equal to 1024MB.
  - The max scan-size scan limit is set greater than or equal to 1025MB.
    The code flaw was present prior to version 1.0.0, but a change in
    version 1.0.0 that enables larger allocations based on untrusted data
    made it possible to trigger this bug.
    This issue affects all currently supported versions.
  * CVE-2025-20234, bsc#1245055: Fixed a possible buffer overflow
    read bug in the UDF file parser that may write to a temp file
    and thus disclose information, or it may crash and cause a
    denial-of-service (DoS) condition.
    This issue was introduced in version 1.2.0.
  * Fixed a possible use-after-free bug in the Xz decompression module in
    the bundled lzma-sdk library.
    This issue was fixed in the lzma-sdk version 18.03. ClamAV bundles a
    copy of the lzma-sdk with some performance changes specific to
    libclamav, plus select bug fixes like this one in lieu of a full
    upgrade to newer lzma-sdk.
    This issue affects all ClamAV versions at least as far back as 0.99.4.
  * Windows: Fixed a build install issue when a DLL dependency such as
    libcrypto has the exact same name as one provided by the Windows
    operating system.
- Renew clamav.keyring</changelog>
  <changelog author="max@suse.com" date="1751284800">- bsc#1240363, clamav-disable-administrative-commands.patch: clamd:
  Add an option to toggle SHUTDOWN, RELOAD, STATS and VERSION.</changelog>
  <changelog author="max@suse.com" date="1759924800">- New version 1.5.0:
  * Added checks to determine if an OLE2-based Microsoft Office
    document is encrypted.
  * Added the ability to record URIs found in HTML if the
    generate-JSON-metadata feature is enabled.
  * Added the ability to record URIs found in PDFs if the
    generate-JSON-metadata feature is enabled.
  * Added regex support for the clamd.conf OnAccessExcludePath
    config option.
  * Added CVD signing/verification with external .sign files.
  * Freshclam, ClamD, ClamScan, and Sigtool: Added an option to
    enable FIPS-like limits disabling MD5 and SHA1 from being used
    for verifying digital signatures or for being used to trust a
    file when checking for false positives
  * ClamD: Added an option to disable select administrative
    commands including SHUTDOWN, RELOAD, STATS and VERSION.
  * libclamav: Added extended hashing functions with a "flags"
    parameter that allows the caller to choose if they want to
    bypass FIPS hash algorithm limits.
  * See the release announcement for the full list of changes:
    https://blog.clamav.net/2025/10/clamav-150-released.html
- Obsoleted patches:
  * clamav-freshclam_test.patch
  * clamav-disable-administrative-commands.patch
  * clamav-fips.patch
- Use macros for library versions
- Remove service symlinks: rcclamd, rcfreshclam, rcclamav-milter,
  and clamonacc.
- Use rust 1.86 for SLE-12 and SLE-15-SP2.</changelog>
  <changelog author="max@suse.com" date="1760443200">- Add json-c-json-c-0.18-20240915.tar.gz and link it statically
  into libclamav on SLE-12, because version 0.12 is too old.</changelog>
  <changelog author="max@suse.com" date="1760616000">- New version: 1.5.1:
  * Fixed a significant performance issue when scanning some PE
    files.
  * Fixed an issue recording file entries from a ZIP archive
    central directory which resulted in
    "Heuristics.Limits.Exceeded.MaxFiles" alerts when using the
    ClamScan --alert-exceeds-max command line option or ClamD
    AlertExceedsMax config file option.
  * Improved performance when scanning TNEF email attachments.
  * Fixed an issue with recording metadata for OOXML office
    documents.
  * Fixed an issue with signature matches for VBA in OLE2 office
    documents.
  * Loosened overly restrictive rules for embedded file
    identification and increased the limit for finding PE files
    embedded in other PE files.
  * Fixed an issue with extracting some RAR archives embedded in
    other files.
  * Fixed an issue with calculating fuzzy hashes affecting some
    images by updating the version for several Rust library
    dependencies.</changelog>
  <changelog author="max@suse.com" date="1762257600">- Add clamav-workaround.patch to work around symbol removals in
  version 1.5.0 and 1.5.1.</changelog>
  <changelog author="bwiedemann@suse.com" date="1763208000">- Build with older rust 1.87 for reproducible builds (boo#1249404)</changelog>
  <changelog author="max@suse.com" date="1763726400">- Provide a better fix for boo#1249404 by disabling debug mode.</changelog>
  <changelog author="max@suse.com" date="1764331200">- Fix testsuite error on SLE-15-SP6 by falling back to rust1.86.</changelog>
</package>
<package pkgid="162480291b11465e2043196d7b5c5a000555b337b7e4c729666103d87c7552a3" name="clamav" arch="x86_64">
  <version epoch="0" ver="1.5.1" rel="150600.18.22.1"/>
  <changelog author="max@suse.com" date="1713787200">- New Version: 1.3.1:
  * CVE-2024-20380: Fixed a possible crash in the HTML file parser
    that could cause a denial-of-service (DoS) condition.
  * Updated select Rust dependencies to the latest versions.
  * Fixed a bug causing some text to be truncated when converting
    from UTF-16.
  * Fixed assorted complaints identified by Coverity static
    analysis.
  * Fixed a bug causing CVDs downloaded by the DatabaseCustomURL
    Freshclam config option to be pruned and then re-downloaded
    with every update.
  * Added the new 'valhalla' database name to the list of optional
    databases in preparation for future work.</changelog>
  <changelog author="bwiedemann@suse.com" date="1722254400">- Add upstream 1305.patch to fix tests (boo#1102840, https://github.com/Cisco-Talos/clamav/issues/1300)</changelog>
  <changelog author="suse+build@de-korte.org" date="1725451200">- New version 1.3.2:
  * CVE-2024-20506: Changed the logging module to disable following
    symlinks on Linux and Unix systems so as to prevent an attacker
    with existing access to the 'clamd' or 'freshclam' services from
    using a symlink to corrupt system files.
  * CVE-2024-20505: Fixed a possible out-of-bounds read bug in the PDF
    file parser that could cause a denial-of-service condition.
  * Removed unused Python modules from freshclam tests including
    deprecated 'cgi' module that is expected to cause test failures in
    Python 3.13.
  * Fix unit test caused by expiring signing certificate.
  * Fixed a build issue on Windows with newer versions of Rust. Also
    upgraded GitHub Actions imports to fix CI failures.
  * Fixed an unaligned pointer dereference issue on select architectures.
  * Fixes to Jenkins CI pipeline.
- Remove upstreamed 1305.patch</changelog>
  <changelog author="max@suse.com" date="1725969600">- New version 1.4.1:
  * [CVE-2024-20506, bsc#1230162]: Changed the logging module to
    disable following symlinks on Linux and Unix systems so as to
    prevent an attacker with existing access to the 'clamd' or
    'freshclam' services from using a symlink to corrupt system
    files.
  * [CVE-2024-20505, bsc#1230161]: Fixed a possible out-of-bounds
    read bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition.
  * https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html
- New version 1.4.0:
  * Added support for extracting ALZ archives.
  * Added support for extracting LHA/LZH archives.
  * Added the ability to disable image fuzzy hashing, if needed.
    For context, image fuzzy hashing is a detection mechanism
    useful for identifying malware by matching images included with
    the malware or phishing email/document.
  * https://blog.clamav.net/2024/08/clamav-140-feature-release-and-clamav.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734523200">- fix factory submission (clam.tcl, clamscan.log)</changelog>
  <changelog author="max@suse.com" date="1736510400">- bsc#1232242: Start clamonacc with --fdpass to avoid errors due to
  clamd not being able to access user files.</changelog>
  <changelog author="max@suse.com" date="1737547200">- New version 1.4.2:
  * CVE-2025-20128, bsc#1236307: Fixed a possible buffer overflow
    read bug in the OLE2 file parser that could cause a
    denial-of-service (DoS) condition.</changelog>
  <changelog author="max@suse.com" date="1737633600">- Drop the version dependency on libcurl. Building against versions
  older than 7.45 does not fail anymore, but disables support for
  fdpassing in clamonacc. This only affects SLE-12 up to SP3.</changelog>
  <changelog author="max@suse.com" date="1739188800">- bsc#1236949: Fix location of license files.</changelog>
  <changelog author="max@suse.com" date="1742817600">- bsc#1239957: Build with PIE.
- Eliminate some UTF-8 NBSP characters from the changes file.</changelog>
  <changelog author="max@suse.com" date="1748433600">- bsc#1243565: Add clamav-freshclam_test.patch to fix a race
  condition between the mockup servers started by different test
  cases in freshclam_test.py.</changelog>
  <changelog author="suse+build@de-korte.org" date="1750334400">- New version 1.4.3:
  ClamAV 1.4.3 is a patch release with the following fixes:
  * CVE-2025-20260, bsc#1245054: Fixed a possible buffer overflow
    write bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition or enable remote code
    execution. This issue only affects configurations where both:
  - The max file-size scan limit is set greater than or equal to 1024MB.
  - The max scan-size scan limit is set greater than or equal to 1025MB.
    The code flaw was present prior to version 1.0.0, but a change in
    version 1.0.0 that enables larger allocations based on untrusted data
    made it possible to trigger this bug.
    This issue affects all currently supported versions.
  * CVE-2025-20234, bsc#1245055: Fixed a possible buffer overflow
    read bug in the UDF file parser that may write to a temp file
    and thus disclose information, or it may crash and cause a
    denial-of-service (DoS) condition.
    This issue was introduced in version 1.2.0.
  * Fixed a possible use-after-free bug in the Xz decompression module in
    the bundled lzma-sdk library.
    This issue was fixed in the lzma-sdk version 18.03. ClamAV bundles a
    copy of the lzma-sdk with some performance changes specific to
    libclamav, plus select bug fixes like this one in lieu of a full
    upgrade to newer lzma-sdk.
    This issue affects all ClamAV versions at least as far back as 0.99.4.
  * Windows: Fixed a build install issue when a DLL dependency such as
    libcrypto has the exact same name as one provided by the Windows
    operating system.
- Renew clamav.keyring</changelog>
  <changelog author="max@suse.com" date="1751284800">- bsc#1240363, clamav-disable-administrative-commands.patch: clamd:
  Add an option to toggle SHUTDOWN, RELOAD, STATS and VERSION.</changelog>
  <changelog author="max@suse.com" date="1759924800">- New version 1.5.0:
  * Added checks to determine if an OLE2-based Microsoft Office
    document is encrypted.
  * Added the ability to record URIs found in HTML if the
    generate-JSON-metadata feature is enabled.
  * Added the ability to record URIs found in PDFs if the
    generate-JSON-metadata feature is enabled.
  * Added regex support for the clamd.conf OnAccessExcludePath
    config option.
  * Added CVD signing/verification with external .sign files.
  * Freshclam, ClamD, ClamScan, and Sigtool: Added an option to
    enable FIPS-like limits disabling MD5 and SHA1 from being used
    for verifying digital signatures or for being used to trust a
    file when checking for false positives
  * ClamD: Added an option to disable select administrative
    commands including SHUTDOWN, RELOAD, STATS and VERSION.
  * libclamav: Added extended hashing functions with a "flags"
    parameter that allows the caller to choose if they want to
    bypass FIPS hash algorithm limits.
  * See the release announcement for the full list of changes:
    https://blog.clamav.net/2025/10/clamav-150-released.html
- Obsoleted patches:
  * clamav-freshclam_test.patch
  * clamav-disable-administrative-commands.patch
  * clamav-fips.patch
- Use macros for library versions
- Remove service symlinks: rcclamd, rcfreshclam, rcclamav-milter,
  and clamonacc.
- Use rust 1.86 for SLE-12 and SLE-15-SP2.</changelog>
  <changelog author="max@suse.com" date="1760443200">- Add json-c-json-c-0.18-20240915.tar.gz and link it statically
  into libclamav on SLE-12, because version 0.12 is too old.</changelog>
  <changelog author="max@suse.com" date="1760616000">- New version: 1.5.1:
  * Fixed a significant performance issue when scanning some PE
    files.
  * Fixed an issue recording file entries from a ZIP archive
    central directory which resulted in
    "Heuristics.Limits.Exceeded.MaxFiles" alerts when using the
    ClamScan --alert-exceeds-max command line option or ClamD
    AlertExceedsMax config file option.
  * Improved performance when scanning TNEF email attachments.
  * Fixed an issue with recording metadata for OOXML office
    documents.
  * Fixed an issue with signature matches for VBA in OLE2 office
    documents.
  * Loosened overly restrictive rules for embedded file
    identification and increased the limit for finding PE files
    embedded in other PE files.
  * Fixed an issue with extracting some RAR archives embedded in
    other files.
  * Fixed an issue with calculating fuzzy hashes affecting some
    images by updating the version for several Rust library
    dependencies.</changelog>
  <changelog author="max@suse.com" date="1762257600">- Add clamav-workaround.patch to work around symbol removals in
  version 1.5.0 and 1.5.1.</changelog>
  <changelog author="bwiedemann@suse.com" date="1763208000">- Build with older rust 1.87 for reproducible builds (boo#1249404)</changelog>
  <changelog author="max@suse.com" date="1763726400">- Provide a better fix for boo#1249404 by disabling debug mode.</changelog>
  <changelog author="max@suse.com" date="1764331200">- Fix testsuite error on SLE-15-SP6 by falling back to rust1.86.</changelog>
</package>
<package pkgid="4e424a67f9bbe8b2d65d1253da003f94ec78b577334cccdc201cfba4c08d7520" name="clamav" arch="src">
  <version epoch="0" ver="1.5.2" rel="150600.18.25.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1734523200">- fix factory submission (clam.tcl, clamscan.log)</changelog>
  <changelog author="max@suse.com" date="1736510400">- bsc#1232242: Start clamonacc with --fdpass to avoid errors due to
  clamd not being able to access user files.</changelog>
  <changelog author="max@suse.com" date="1737547200">- New version 1.4.2:
  * CVE-2025-20128, bsc#1236307: Fixed a possible buffer overflow
    read bug in the OLE2 file parser that could cause a
    denial-of-service (DoS) condition.</changelog>
  <changelog author="max@suse.com" date="1737633600">- Drop the version dependency on libcurl. Building against versions
  older than 7.45 does not fail anymore, but disables support for
  fdpassing in clamonacc. This only affects SLE-12 up to SP3.</changelog>
  <changelog author="max@suse.com" date="1739188800">- bsc#1236949: Fix location of license files.</changelog>
  <changelog author="max@suse.com" date="1742817600">- bsc#1239957: Build with PIE.
- Eliminate some UTF-8 NBSP characters from the changes file.</changelog>
  <changelog author="max@suse.com" date="1748433600">- bsc#1243565: Add clamav-freshclam_test.patch to fix a race
  condition between the mockup servers started by different test
  cases in freshclam_test.py.</changelog>
  <changelog author="suse+build@de-korte.org" date="1750334400">- New version 1.4.3:
  ClamAV 1.4.3 is a patch release with the following fixes:
  * CVE-2025-20260, bsc#1245054: Fixed a possible buffer overflow
    write bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition or enable remote code
    execution. This issue only affects configurations where both:
  - The max file-size scan limit is set greater than or equal to 1024MB.
  - The max scan-size scan limit is set greater than or equal to 1025MB.
    The code flaw was present prior to version 1.0.0, but a change in
    version 1.0.0 that enables larger allocations based on untrusted data
    made it possible to trigger this bug.
    This issue affects all currently supported versions.
  * CVE-2025-20234, bsc#1245055: Fixed a possible buffer overflow
    read bug in the UDF file parser that may write to a temp file
    and thus disclose information, or it may crash and cause a
    denial-of-service (DoS) condition.
    This issue was introduced in version 1.2.0.
  * Fixed a possible use-after-free bug in the Xz decompression module in
    the bundled lzma-sdk library.
    This issue was fixed in the lzma-sdk version 18.03. ClamAV bundles a
    copy of the lzma-sdk with some performance changes specific to
    libclamav, plus select bug fixes like this one in lieu of a full
    upgrade to newer lzma-sdk.
    This issue affects all ClamAV versions at least as far back as 0.99.4.
  * Windows: Fixed a build install issue when a DLL dependency such as
    libcrypto has the exact same name as one provided by the Windows
    operating system.
- Renew clamav.keyring</changelog>
  <changelog author="max@suse.com" date="1751284800">- bsc#1240363, clamav-disable-administrative-commands.patch: clamd:
  Add an option to toggle SHUTDOWN, RELOAD, STATS and VERSION.</changelog>
  <changelog author="max@suse.com" date="1759924800">- New version 1.5.0:
  * Added checks to determine if an OLE2-based Microsoft Office
    document is encrypted.
  * Added the ability to record URIs found in HTML if the
    generate-JSON-metadata feature is enabled.
  * Added the ability to record URIs found in PDFs if the
    generate-JSON-metadata feature is enabled.
  * Added regex support for the clamd.conf OnAccessExcludePath
    config option.
  * Added CVD signing/verification with external .sign files.
  * Freshclam, ClamD, ClamScan, and Sigtool: Added an option to
    enable FIPS-like limits disabling MD5 and SHA1 from being used
    for verifying digital signatures or for being used to trust a
    file when checking for false positives (bsc#1221954).
  * ClamD: Added an option to disable select administrative
    commands including SHUTDOWN, RELOAD, STATS and VERSION.
  * libclamav: Added extended hashing functions with a "flags"
    parameter that allows the caller to choose if they want to
    bypass FIPS hash algorithm limits.
  * See the release announcement for the full list of changes:
    https://blog.clamav.net/2025/10/clamav-150-released.html
- Obsoleted patches:
  * clamav-freshclam_test.patch
  * clamav-disable-administrative-commands.patch
  * clamav-fips.patch
- Use macros for library versions
- Remove service symlinks: rcclamd, rcfreshclam, rcclamav-milter,
  and clamonacc.
- Use rust 1.86 for SLE-12 and SLE-15-SP2.</changelog>
  <changelog author="max@suse.com" date="1760443200">- Add json-c-json-c-0.18-20240915.tar.gz and link it statically
  into libclamav on SLE-12, because version 0.12 is too old.</changelog>
  <changelog author="max@suse.com" date="1760616000">- New version: 1.5.1:
  * Fixed a significant performance issue when scanning some PE
    files.
  * Fixed an issue recording file entries from a ZIP archive
    central directory which resulted in
    "Heuristics.Limits.Exceeded.MaxFiles" alerts when using the
    ClamScan --alert-exceeds-max command line option or ClamD
    AlertExceedsMax config file option.
  * Improved performance when scanning TNEF email attachments.
  * Fixed an issue with recording metadata for OOXML office
    documents.
  * Fixed an issue with signature matches for VBA in OLE2 office
    documents.
  * Loosened overly restrictive rules for embedded file
    identification and increased the limit for finding PE files
    embedded in other PE files.
  * Fixed an issue with extracting some RAR archives embedded in
    other files.
  * Fixed an issue with calculating fuzzy hashes affecting some
    images by updating the version for several Rust library
    dependencies.</changelog>
  <changelog author="max@suse.com" date="1762257600">- Add clamav-workaround.patch to work around symbol removals in
  version 1.5.0 and 1.5.1.</changelog>
  <changelog author="bwiedemann@suse.com" date="1763208000">- Build with older rust 1.87 for reproducible builds (boo#1249404)</changelog>
  <changelog author="max@suse.com" date="1763726400">- Provide a better fix for boo#1249404 by disabling debug mode.</changelog>
  <changelog author="max@suse.com" date="1764331200">- Fix testsuite error on SLE-15-SP6 by falling back to rust1.86.</changelog>
  <changelog author="max@suse.com" date="1770724800">- jsc-PED-14819: Support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1770984000">- bsc#1258072: Require main and library packages to be of the same
  version and release. Given that all the core functionality is
  in the libraries it makes little sense to update the main
  package alone.</changelog>
  <changelog author="max@suse.com" date="1772712000">- New version 1.5.2:
  * bsc#1259207, CVE-2026-20031: Fixed an error handling bug in the
    HTML file parser that may crash the program and cause a
    denial-of-service (DoS) condition. This issue was introduced in
    version 1.1.0.
  * Fixed a possible infinite loop when scanning some JPEG files by
    upgrading affected ClamAV dependency, a Rust image library.
  * The CVD verification process will now ignore certificate files
    in the CVD certs directory when the user lacks read permissions.
  * Freshclam: Fix CLD verification bug with PrivateMirror option.
  * Upgraded the Rust bytes dependency to a newer version to
    resolve RUSTSEC-2026-0007 advisory.
  * Fixed a possible crash caused by invalid pointer alignment on
    some platforms.
  * Minimal required Rust version is now 1.87.</changelog>
  <changelog author="max@suse.com" date="1773316800">- Disable build for 32 bit ix86 because of testsuite failures with
  rust &gt;= 1.87 that upstream is not planning to fix.
- Run the test suite on all SUSE releases.</changelog>
</package>
<package pkgid="455ec9869cfdab68d6e7f415615c98192431942009b46b5ba75237a6fc979d70" name="clamav" arch="x86_64">
  <version epoch="0" ver="1.5.2" rel="150600.18.25.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1734523200">- fix factory submission (clam.tcl, clamscan.log)</changelog>
  <changelog author="max@suse.com" date="1736510400">- bsc#1232242: Start clamonacc with --fdpass to avoid errors due to
  clamd not being able to access user files.</changelog>
  <changelog author="max@suse.com" date="1737547200">- New version 1.4.2:
  * CVE-2025-20128, bsc#1236307: Fixed a possible buffer overflow
    read bug in the OLE2 file parser that could cause a
    denial-of-service (DoS) condition.</changelog>
  <changelog author="max@suse.com" date="1737633600">- Drop the version dependency on libcurl. Building against versions
  older than 7.45 does not fail anymore, but disables support for
  fdpassing in clamonacc. This only affects SLE-12 up to SP3.</changelog>
  <changelog author="max@suse.com" date="1739188800">- bsc#1236949: Fix location of license files.</changelog>
  <changelog author="max@suse.com" date="1742817600">- bsc#1239957: Build with PIE.
- Eliminate some UTF-8 NBSP characters from the changes file.</changelog>
  <changelog author="max@suse.com" date="1748433600">- bsc#1243565: Add clamav-freshclam_test.patch to fix a race
  condition between the mockup servers started by different test
  cases in freshclam_test.py.</changelog>
  <changelog author="suse+build@de-korte.org" date="1750334400">- New version 1.4.3:
  ClamAV 1.4.3 is a patch release with the following fixes:
  * CVE-2025-20260, bsc#1245054: Fixed a possible buffer overflow
    write bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition or enable remote code
    execution. This issue only affects configurations where both:
  - The max file-size scan limit is set greater than or equal to 1024MB.
  - The max scan-size scan limit is set greater than or equal to 1025MB.
    The code flaw was present prior to version 1.0.0, but a change in
    version 1.0.0 that enables larger allocations based on untrusted data
    made it possible to trigger this bug.
    This issue affects all currently supported versions.
  * CVE-2025-20234, bsc#1245055: Fixed a possible buffer overflow
    read bug in the UDF file parser that may write to a temp file
    and thus disclose information, or it may crash and cause a
    denial-of-service (DoS) condition.
    This issue was introduced in version 1.2.0.
  * Fixed a possible use-after-free bug in the Xz decompression module in
    the bundled lzma-sdk library.
    This issue was fixed in the lzma-sdk version 18.03. ClamAV bundles a
    copy of the lzma-sdk with some performance changes specific to
    libclamav, plus select bug fixes like this one in lieu of a full
    upgrade to newer lzma-sdk.
    This issue affects all ClamAV versions at least as far back as 0.99.4.
  * Windows: Fixed a build install issue when a DLL dependency such as
    libcrypto has the exact same name as one provided by the Windows
    operating system.
- Renew clamav.keyring</changelog>
  <changelog author="max@suse.com" date="1751284800">- bsc#1240363, clamav-disable-administrative-commands.patch: clamd:
  Add an option to toggle SHUTDOWN, RELOAD, STATS and VERSION.</changelog>
  <changelog author="max@suse.com" date="1759924800">- New version 1.5.0:
  * Added checks to determine if an OLE2-based Microsoft Office
    document is encrypted.
  * Added the ability to record URIs found in HTML if the
    generate-JSON-metadata feature is enabled.
  * Added the ability to record URIs found in PDFs if the
    generate-JSON-metadata feature is enabled.
  * Added regex support for the clamd.conf OnAccessExcludePath
    config option.
  * Added CVD signing/verification with external .sign files.
  * Freshclam, ClamD, ClamScan, and Sigtool: Added an option to
    enable FIPS-like limits disabling MD5 and SHA1 from being used
    for verifying digital signatures or for being used to trust a
    file when checking for false positives (bsc#1221954).
  * ClamD: Added an option to disable select administrative
    commands including SHUTDOWN, RELOAD, STATS and VERSION.
  * libclamav: Added extended hashing functions with a "flags"
    parameter that allows the caller to choose if they want to
    bypass FIPS hash algorithm limits.
  * See the release announcement for the full list of changes:
    https://blog.clamav.net/2025/10/clamav-150-released.html
- Obsoleted patches:
  * clamav-freshclam_test.patch
  * clamav-disable-administrative-commands.patch
  * clamav-fips.patch
- Use macros for library versions
- Remove service symlinks: rcclamd, rcfreshclam, rcclamav-milter,
  and clamonacc.
- Use rust 1.86 for SLE-12 and SLE-15-SP2.</changelog>
  <changelog author="max@suse.com" date="1760443200">- Add json-c-json-c-0.18-20240915.tar.gz and link it statically
  into libclamav on SLE-12, because version 0.12 is too old.</changelog>
  <changelog author="max@suse.com" date="1760616000">- New version: 1.5.1:
  * Fixed a significant performance issue when scanning some PE
    files.
  * Fixed an issue recording file entries from a ZIP archive
    central directory which resulted in
    "Heuristics.Limits.Exceeded.MaxFiles" alerts when using the
    ClamScan --alert-exceeds-max command line option or ClamD
    AlertExceedsMax config file option.
  * Improved performance when scanning TNEF email attachments.
  * Fixed an issue with recording metadata for OOXML office
    documents.
  * Fixed an issue with signature matches for VBA in OLE2 office
    documents.
  * Loosened overly restrictive rules for embedded file
    identification and increased the limit for finding PE files
    embedded in other PE files.
  * Fixed an issue with extracting some RAR archives embedded in
    other files.
  * Fixed an issue with calculating fuzzy hashes affecting some
    images by updating the version for several Rust library
    dependencies.</changelog>
  <changelog author="max@suse.com" date="1762257600">- Add clamav-workaround.patch to work around symbol removals in
  version 1.5.0 and 1.5.1.</changelog>
  <changelog author="bwiedemann@suse.com" date="1763208000">- Build with older rust 1.87 for reproducible builds (boo#1249404)</changelog>
  <changelog author="max@suse.com" date="1763726400">- Provide a better fix for boo#1249404 by disabling debug mode.</changelog>
  <changelog author="max@suse.com" date="1764331200">- Fix testsuite error on SLE-15-SP6 by falling back to rust1.86.</changelog>
  <changelog author="max@suse.com" date="1770724800">- jsc-PED-14819: Support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1770984000">- bsc#1258072: Require main and library packages to be of the same
  version and release. Given that all the core functionality is
  in the libraries it makes little sense to update the main
  package alone.</changelog>
  <changelog author="max@suse.com" date="1772712000">- New version 1.5.2:
  * bsc#1259207, CVE-2026-20031: Fixed an error handling bug in the
    HTML file parser that may crash the program and cause a
    denial-of-service (DoS) condition. This issue was introduced in
    version 1.1.0.
  * Fixed a possible infinite loop when scanning some JPEG files by
    upgrading affected ClamAV dependency, a Rust image library.
  * The CVD verification process will now ignore certificate files
    in the CVD certs directory when the user lacks read permissions.
  * Freshclam: Fix CLD verification bug with PrivateMirror option.
  * Upgraded the Rust bytes dependency to a newer version to
    resolve RUSTSEC-2026-0007 advisory.
  * Fixed a possible crash caused by invalid pointer alignment on
    some platforms.
  * Minimal required Rust version is now 1.87.</changelog>
  <changelog author="max@suse.com" date="1773316800">- Disable build for 32 bit ix86 because of testsuite failures with
  rust &gt;= 1.87 that upstream is not planning to fix.
- Run the test suite on all SUSE releases.</changelog>
</package>
<package pkgid="bff42a165eb0e23530f5f3f16f2de485a7f94f6a86da464e050c4d8029a801d9" name="clamav-devel" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="150600.18.12.1"/>
  <changelog author="suse+build@de-korte.org" date="1641988800">- Update to 0.103.5
  * CVE-2022-20698: Fix for invalid pointer read that may cause a crash.
    This issue affects 0.104.1, 0.103.4 and prior when ClamAV is compiled
    with libjson-c and the CL_SCAN_GENERAL_COLLECT_METADATA scan option
    (the clamscan --gen-json option) is enabled. (bsc#1194731)
  * Fixed ability to disable the file size limit with libclamav C API,
    like this:
    cl_engine_set_num(engine, CL_ENGINE_MAX_FILESIZE, 0);
    This issue didn't affect ClamD or ClamScan which also can disable the
    limit by setting it to zero using MaxFileSize 0 in clamd.conf for ClamD,
    or clamscan --max-filesize=0 for ClamScan.
    Note: Internally, the max file size is still set to 2 GiB. Disabling the
    limit for a scan will fall back on the internal 2 GiB limitation.
  * Increased the maximum line length for ClamAV config files from 512 bytes
    to 1,024 bytes to allow for longer config option strings.
  * SigTool: Fix insufficient buffer size for --list-sigs that caused a
    failure when listing a database containing one or more very long
    signatures. This fix was backported from 0.104.</changelog>
  <changelog author="meissner@suse.com" date="1649764800">- https source urls</changelog>
  <changelog author="suse+build@de-korte.org" date="1651752000">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
  <changelog author="ecsos@opensuse.org" date="1659700800">- Update to 0.103.7 (bsc#1202986)
  - Zip parser: tolerate 2-byte overlap in file entries
  - Fix bug with logical signature Intermediates feature
  - Update to UnRAR v6.1.7
  - Patch UnRAR: allow skipping files in solid archives
  - Patch UnRAR: limit dict winsize to 1GB</changelog>
  <changelog author="suse+build@de-korte.org" date="1676462400">- Update to 0.103.8
  * CVE-2023-20032: Fixed a possible remote code execution vulnerability
    in the HFS+ file parser. Issue affects versions 1.0.0 and earlier,
    0.105.1 and earlier, and 0.103.7 and earlier. (bsc#1208363)
  * CVE-2023-20052: Fixed a possible remote information leak
    vulnerability in the DMG file parser. Issue affects versions 1.0.0
    and earlier, 0.105.1 and earlier, and 0.103.7 and earlier.
    (bsc#1208365)
  * Update vendored libmspack library to version 0.11alpha.
    (bsc#1103032: CVE-2018-14679)
- Package huge .html documentation in a separate subpackage.</changelog>
  <changelog author="suse+build@de-korte.org" date="1692187200">- Update to 0.103.9
  * CVE-2023-20197: Fixed a possible denial of service vulnerability in
    the HFS+ file parser. This issue affects versions 1.1.0, 1.0.1 through
    1.0.0, 0.105.2 through 0.105.0, 0.104.4 through 0.104.0, and 0.103.8
    through 0.103.0. (boo#1214342)
  * Fixed compiler warnings that may turn into errors in Clang 16.</changelog>
  <changelog author="max@suse.com" date="1692360000">- Renew clamav.keyring .</changelog>
  <changelog author="suse+build@de-korte.org" date="1698235200">- Update to 0.103.11
  * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.12.
  * Windows: libjson-c 0.17 compatibility fix. with ssize_t type definition.
  * Windows: Update build system to use OpenSSL 3 and PThreads-Win32 v3.
- Update to 0.103.10
  * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.10.
    (bsc#1216625, CVE-2023-40477)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="max@suse.com" date="1710504000">- New version: 1.3.0:
  * Added support for extracting and scanning attachments found in
    Microsoft OneNote section files. OneNote parsing will be
    enabled by default, but may be optionally disabled.
  * Added file type recognition for compiled Python (`.pyc`) files.
  * Improved support for decrypting PDFs with empty passwords.
  * Fixed a warning when scanning some HTML files.
  * ClamOnAcc: Fixed an infinite loop when a watched directory
    does not exist.
  * ClamOnAcc: Fixed an infinite loop when a file has been deleted
    before a scan.
- New version: 1.2.0:
  * Added support for extracting Universal Disk Format (UDF)
    partitions.
  * Added an option to customize the size of ClamAV's clean file
    cache.
  * Raised the MaxScanSize limit so the total amount of data
    scanned when scanning a file or archive may exceed 4 gigabytes.
  * Added ability for Freshclam to use a client certificate PEM
    file and a private key PEM file for authentication to a private
    mirror.
  * Fix an issue extracting files from ISO9660 partitions where the
    files are listed in the plain ISO tree and there also exists an
    empty Joliet tree.
  * PID and socket are now located under /run/clamav/clamd.pid and
    /run/clamav/clamd.sock .
  * bsc#1211594: Fixed an issue where ClamAV does not abort the
    signature load process after partially loading an invalid
    signature.
- New version 1.1.0:
  * https://blog.clamav.net/2023/05/clamav-110-released.html
  * Added the ability to extract images embedded in HTML CSS
    &lt;style&gt; blocks.
  * Updated to Sigtool so that the --vba option will extract VBA
    code from Microsoft Office documents the same way that
    libclamav extracts VBA.
  * Added a new option --fail-if-cvd-older-than=days to clamscan
    and clamd, and FailIfCvdOlderThan to clamd.conf
  * Added a new function cl_cvdgetage() to the libclamav API.
  * Added a new function cl_engine_set_clcb_vba() to the
    libclamav API.
  * obsoletes clamav-ec32.patch.
- boo#1180296: Integrate clamonacc as a service.
- New version 1.0.1 LTS (including changes in 0.104 and 0.105):
  * As of ClamAV 0.104, CMake is required to build ClamAV.
  * As of ClamAV 0.105, Rust is now required to compile ClamAV.
  * Increased the default limits for file and scan size:
  * MaxScanSize: 100M to 400M
  * MaxFileSize: 25M to 100M
  * StreamMaxLength: 25M to 100M
  * PCREMaxFileSize: 25M to 100M
  * MaxEmbeddedPE: 10M to 40M
  * MaxHTMLNormalize: 10M to 40M
  * MaxScriptNormalize: 5M to 20M
  * MaxHTMLNoTags: 2M to 8M
  * Added image fuzzy hash subsignatures for logical signatures.
  * Support for decrypting read-only OLE2-based XLS files that are
    encrypted with the default password.
  * Overhauled the implementation of the all-match feature.
  * Added a new callback to the public API for inspecting file
    content during a scan at each layer of archive extraction.
  * Added a new function to the public API for unpacking CVD
    signature archives.
  * The option to build with an external TomsFastMath library has
    been removed. ClamAV requires non-default build options for
    TomsFastMath to support bigger floating point numbers.
  * For a full list of changes see the release announcements:
  * https://blog.clamav.net/2022/11/clamav-100-lts-released.html
  * https://blog.clamav.net/2022/05/clamav-01050-01043-01036-released.html
  * https://blog.clamav.net/2021/09/clamav-01040-released.html
- Build clamd with systemd support.
- Fix format strings on 32bit platforms (clamav-format.patch).
- Add missing endianness conversions (clamav-ec32.patch).
- Don't build on armv7l for now due to some test failures.
- Drop clamav-disable-yara.patch as yara cannot be disabled anymore</changelog>
  <changelog author="max@suse.com" date="1713787200">- New Version: 1.3.1:
  * CVE-2024-20380: Fixed a possible crash in the HTML file parser
    that could cause a denial-of-service (DoS) condition.
  * Updated select Rust dependencies to the latest versions.
  * Fixed a bug causing some text to be truncated when converting
    from UTF-16.
  * Fixed assorted complaints identified by Coverity static
    analysis.
  * Fixed a bug causing CVDs downloaded by the DatabaseCustomURL
    Freshclam config option to be pruned and then re-downloaded
    with every update.
  * Added the new 'valhalla' database name to the list of optional
    databases in preparation for future work.</changelog>
  <changelog author="bwiedemann@suse.com" date="1722254400">- Add upstream 1305.patch to fix tests (boo#1102840, https://github.com/Cisco-Talos/clamav/issues/1300)</changelog>
  <changelog author="suse+build@de-korte.org" date="1725451200">- New version 1.3.2:
  * CVE-2024-20506: Changed the logging module to disable following
    symlinks on Linux and Unix systems so as to prevent an attacker
    with existing access to the 'clamd' or 'freshclam' services from
    using a symlink to corrupt system files.
  * CVE-2024-20505: Fixed a possible out-of-bounds read bug in the PDF
    file parser that could cause a denial-of-service condition.
  * Removed unused Python modules from freshclam tests including
    deprecated 'cgi' module that is expected to cause test failures in
    Python 3.13.
  * Fix unit test caused by expiring signing certificate.
  * Fixed a build issue on Windows with newer versions of Rust. Also
    upgraded GitHub Actions imports to fix CI failures.
  * Fixed an unaligned pointer dereference issue on select architectures.
  * Fixes to Jenkins CI pipeline.
- Remove upstreamed 1305.patch</changelog>
  <changelog author="max@suse.com" date="1725969600">- New version 1.4.1:
  * [CVE-2024-20506, bsc#1230162]: Changed the logging module to
    disable following symlinks on Linux and Unix systems so as to
    prevent an attacker with existing access to the 'clamd' or
    'freshclam' services from using a symlink to corrupt system
    files.
  * [CVE-2024-20505, bsc#1230161]: Fixed a possible out-of-bounds
    read bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition.
  * https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html
- New version 1.4.0:
  * Added support for extracting ALZ archives.
  * Added support for extracting LHA/LZH archives.
  * Added the ability to disable image fuzzy hashing, if needed.
    For context, image fuzzy hashing is a detection mechanism
    useful for identifying malware by matching images included with
    the malware or phishing email/document.
  * https://blog.clamav.net/2024/08/clamav-140-feature-release-and-clamav.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734523200">- fix factory submission (clam.tcl, clamscan.log)</changelog>
  <changelog author="max@suse.com" date="1736510400">- bsc#1232242: Start clamonacc with --fdpass to avoid errors due to
  clamd not being able to access user files.</changelog>
  <changelog author="max@suse.com" date="1737547200">- New version 1.4.2:
  * CVE-2025-20128, bsc#1236307: Fixed a possible buffer overflow
    read bug in the OLE2 file parser that could cause a
    denial-of-service (DoS) condition.</changelog>
  <changelog author="max@suse.com" date="1737633600">- Drop the version dependency on libcurl. Building against versions
  older than 7.45 does not fail anymore, but disables support for
  fdpassing in clamonacc. This only affects SLE-12 up to SP3.</changelog>
  <changelog author="max@suse.com" date="1739188800">- bsc#1236949: Fix location of license files.</changelog>
  <changelog author="max@suse.com" date="1742817600">- bsc#1239957: Build with PIE.
- Eliminate some UTF-8 NBSP characters from the changes file.</changelog>
</package>
<package pkgid="dca913568fe84a996b4b42ff55c5b6127600fad4bf21e838d9d0c3836e99271d" name="clamav-devel" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="150600.18.15.1"/>
  <changelog author="meissner@suse.com" date="1649764800">- https source urls</changelog>
  <changelog author="suse+build@de-korte.org" date="1651752000">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
  <changelog author="ecsos@opensuse.org" date="1659700800">- Update to 0.103.7 (bsc#1202986)
  - Zip parser: tolerate 2-byte overlap in file entries
  - Fix bug with logical signature Intermediates feature
  - Update to UnRAR v6.1.7
  - Patch UnRAR: allow skipping files in solid archives
  - Patch UnRAR: limit dict winsize to 1GB</changelog>
  <changelog author="suse+build@de-korte.org" date="1676462400">- Update to 0.103.8
  * CVE-2023-20032: Fixed a possible remote code execution vulnerability
    in the HFS+ file parser. Issue affects versions 1.0.0 and earlier,
    0.105.1 and earlier, and 0.103.7 and earlier. (bsc#1208363)
  * CVE-2023-20052: Fixed a possible remote information leak
    vulnerability in the DMG file parser. Issue affects versions 1.0.0
    and earlier, 0.105.1 and earlier, and 0.103.7 and earlier.
    (bsc#1208365)
  * Update vendored libmspack library to version 0.11alpha.
    (bsc#1103032: CVE-2018-14679)
- Package huge .html documentation in a separate subpackage.</changelog>
  <changelog author="suse+build@de-korte.org" date="1692187200">- Update to 0.103.9
  * CVE-2023-20197: Fixed a possible denial of service vulnerability in
    the HFS+ file parser. This issue affects versions 1.1.0, 1.0.1 through
    1.0.0, 0.105.2 through 0.105.0, 0.104.4 through 0.104.0, and 0.103.8
    through 0.103.0. (boo#1214342)
  * Fixed compiler warnings that may turn into errors in Clang 16.</changelog>
  <changelog author="max@suse.com" date="1692360000">- Renew clamav.keyring .</changelog>
  <changelog author="suse+build@de-korte.org" date="1698235200">- Update to 0.103.11
  * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.12.
  * Windows: libjson-c 0.17 compatibility fix. with ssize_t type definition.
  * Windows: Update build system to use OpenSSL 3 and PThreads-Win32 v3.
- Update to 0.103.10
  * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.10.
    (bsc#1216625, CVE-2023-40477)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="max@suse.com" date="1710504000">- New version: 1.3.0:
  * Added support for extracting and scanning attachments found in
    Microsoft OneNote section files. OneNote parsing will be
    enabled by default, but may be optionally disabled.
  * Added file type recognition for compiled Python (`.pyc`) files.
  * Improved support for decrypting PDFs with empty passwords.
  * Fixed a warning when scanning some HTML files.
  * ClamOnAcc: Fixed an infinite loop when a watched directory
    does not exist.
  * ClamOnAcc: Fixed an infinite loop when a file has been deleted
    before a scan.
- New version: 1.2.0:
  * Added support for extracting Universal Disk Format (UDF)
    partitions.
  * Added an option to customize the size of ClamAV's clean file
    cache.
  * Raised the MaxScanSize limit so the total amount of data
    scanned when scanning a file or archive may exceed 4 gigabytes.
  * Added ability for Freshclam to use a client certificate PEM
    file and a private key PEM file for authentication to a private
    mirror.
  * Fix an issue extracting files from ISO9660 partitions where the
    files are listed in the plain ISO tree and there also exists an
    empty Joliet tree.
  * PID and socket are now located under /run/clamav/clamd.pid and
    /run/clamav/clamd.sock .
  * bsc#1211594: Fixed an issue where ClamAV does not abort the
    signature load process after partially loading an invalid
    signature.
- New version 1.1.0:
  * https://blog.clamav.net/2023/05/clamav-110-released.html
  * Added the ability to extract images embedded in HTML CSS
    &lt;style&gt; blocks.
  * Updated to Sigtool so that the --vba option will extract VBA
    code from Microsoft Office documents the same way that
    libclamav extracts VBA.
  * Added a new option --fail-if-cvd-older-than=days to clamscan
    and clamd, and FailIfCvdOlderThan to clamd.conf
  * Added a new function cl_cvdgetage() to the libclamav API.
  * Added a new function cl_engine_set_clcb_vba() to the
    libclamav API.
  * obsoletes clamav-ec32.patch.
- boo#1180296: Integrate clamonacc as a service.
- New version 1.0.1 LTS (including changes in 0.104 and 0.105):
  * As of ClamAV 0.104, CMake is required to build ClamAV.
  * As of ClamAV 0.105, Rust is now required to compile ClamAV.
  * Increased the default limits for file and scan size:
  * MaxScanSize: 100M to 400M
  * MaxFileSize: 25M to 100M
  * StreamMaxLength: 25M to 100M
  * PCREMaxFileSize: 25M to 100M
  * MaxEmbeddedPE: 10M to 40M
  * MaxHTMLNormalize: 10M to 40M
  * MaxScriptNormalize: 5M to 20M
  * MaxHTMLNoTags: 2M to 8M
  * Added image fuzzy hash subsignatures for logical signatures.
  * Support for decrypting read-only OLE2-based XLS files that are
    encrypted with the default password.
  * Overhauled the implementation of the all-match feature.
  * Added a new callback to the public API for inspecting file
    content during a scan at each layer of archive extraction.
  * Added a new function to the public API for unpacking CVD
    signature archives.
  * The option to build with an external TomsFastMath library has
    been removed. ClamAV requires non-default build options for
    TomsFastMath to support bigger floating point numbers.
  * For a full list of changes see the release announcements:
  * https://blog.clamav.net/2022/11/clamav-100-lts-released.html
  * https://blog.clamav.net/2022/05/clamav-01050-01043-01036-released.html
  * https://blog.clamav.net/2021/09/clamav-01040-released.html
- Build clamd with systemd support.
- Fix format strings on 32bit platforms (clamav-format.patch).
- Add missing endianness conversions (clamav-ec32.patch).
- Don't build on armv7l for now due to some test failures.
- Drop clamav-disable-yara.patch as yara cannot be disabled anymore</changelog>
  <changelog author="max@suse.com" date="1713787200">- New Version: 1.3.1:
  * CVE-2024-20380: Fixed a possible crash in the HTML file parser
    that could cause a denial-of-service (DoS) condition.
  * Updated select Rust dependencies to the latest versions.
  * Fixed a bug causing some text to be truncated when converting
    from UTF-16.
  * Fixed assorted complaints identified by Coverity static
    analysis.
  * Fixed a bug causing CVDs downloaded by the DatabaseCustomURL
    Freshclam config option to be pruned and then re-downloaded
    with every update.
  * Added the new 'valhalla' database name to the list of optional
    databases in preparation for future work.</changelog>
  <changelog author="bwiedemann@suse.com" date="1722254400">- Add upstream 1305.patch to fix tests (boo#1102840, https://github.com/Cisco-Talos/clamav/issues/1300)</changelog>
  <changelog author="suse+build@de-korte.org" date="1725451200">- New version 1.3.2:
  * CVE-2024-20506: Changed the logging module to disable following
    symlinks on Linux and Unix systems so as to prevent an attacker
    with existing access to the 'clamd' or 'freshclam' services from
    using a symlink to corrupt system files.
  * CVE-2024-20505: Fixed a possible out-of-bounds read bug in the PDF
    file parser that could cause a denial-of-service condition.
  * Removed unused Python modules from freshclam tests including
    deprecated 'cgi' module that is expected to cause test failures in
    Python 3.13.
  * Fix unit test caused by expiring signing certificate.
  * Fixed a build issue on Windows with newer versions of Rust. Also
    upgraded GitHub Actions imports to fix CI failures.
  * Fixed an unaligned pointer dereference issue on select architectures.
  * Fixes to Jenkins CI pipeline.
- Remove upstreamed 1305.patch</changelog>
  <changelog author="max@suse.com" date="1725969600">- New version 1.4.1:
  * [CVE-2024-20506, bsc#1230162]: Changed the logging module to
    disable following symlinks on Linux and Unix systems so as to
    prevent an attacker with existing access to the 'clamd' or
    'freshclam' services from using a symlink to corrupt system
    files.
  * [CVE-2024-20505, bsc#1230161]: Fixed a possible out-of-bounds
    read bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition.
  * https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html
- New version 1.4.0:
  * Added support for extracting ALZ archives.
  * Added support for extracting LHA/LZH archives.
  * Added the ability to disable image fuzzy hashing, if needed.
    For context, image fuzzy hashing is a detection mechanism
    useful for identifying malware by matching images included with
    the malware or phishing email/document.
  * https://blog.clamav.net/2024/08/clamav-140-feature-release-and-clamav.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734523200">- fix factory submission (clam.tcl, clamscan.log)</changelog>
  <changelog author="max@suse.com" date="1736510400">- bsc#1232242: Start clamonacc with --fdpass to avoid errors due to
  clamd not being able to access user files.</changelog>
  <changelog author="max@suse.com" date="1737547200">- New version 1.4.2:
  * CVE-2025-20128, bsc#1236307: Fixed a possible buffer overflow
    read bug in the OLE2 file parser that could cause a
    denial-of-service (DoS) condition.</changelog>
  <changelog author="max@suse.com" date="1737633600">- Drop the version dependency on libcurl. Building against versions
  older than 7.45 does not fail anymore, but disables support for
  fdpassing in clamonacc. This only affects SLE-12 up to SP3.</changelog>
  <changelog author="max@suse.com" date="1739188800">- bsc#1236949: Fix location of license files.</changelog>
  <changelog author="max@suse.com" date="1742817600">- bsc#1239957: Build with PIE.
- Eliminate some UTF-8 NBSP characters from the changes file.</changelog>
  <changelog author="max@suse.com" date="1748433600">- bsc#1243565: Add clamav-freshclam_test.patch to fix a race
  condition between the mockup servers started by different test
  cases in freshclam_test.py.</changelog>
</package>
<package pkgid="c3d66b887fdfa118b7a53c6cb2542515b858cf238499953a64a5a51852ab8be8" name="clamav-devel" arch="x86_64">
  <version epoch="0" ver="1.4.3" rel="150600.18.18.1"/>
  <changelog author="suse+build@de-korte.org" date="1651752000">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
  <changelog author="ecsos@opensuse.org" date="1659700800">- Update to 0.103.7 (bsc#1202986)
  - Zip parser: tolerate 2-byte overlap in file entries
  - Fix bug with logical signature Intermediates feature
  - Update to UnRAR v6.1.7
  - Patch UnRAR: allow skipping files in solid archives
  - Patch UnRAR: limit dict winsize to 1GB</changelog>
  <changelog author="suse+build@de-korte.org" date="1676462400">- Update to 0.103.8
  * CVE-2023-20032: Fixed a possible remote code execution vulnerability
    in the HFS+ file parser. Issue affects versions 1.0.0 and earlier,
    0.105.1 and earlier, and 0.103.7 and earlier. (bsc#1208363)
  * CVE-2023-20052: Fixed a possible remote information leak
    vulnerability in the DMG file parser. Issue affects versions 1.0.0
    and earlier, 0.105.1 and earlier, and 0.103.7 and earlier.
    (bsc#1208365)
  * Update vendored libmspack library to version 0.11alpha.
    (bsc#1103032: CVE-2018-14679)
- Package huge .html documentation in a separate subpackage.</changelog>
  <changelog author="suse+build@de-korte.org" date="1692187200">- Update to 0.103.9
  * CVE-2023-20197: Fixed a possible denial of service vulnerability in
    the HFS+ file parser. This issue affects versions 1.1.0, 1.0.1 through
    1.0.0, 0.105.2 through 0.105.0, 0.104.4 through 0.104.0, and 0.103.8
    through 0.103.0. (boo#1214342)
  * Fixed compiler warnings that may turn into errors in Clang 16.</changelog>
  <changelog author="max@suse.com" date="1692360000">- Renew clamav.keyring .</changelog>
  <changelog author="suse+build@de-korte.org" date="1698235200">- Update to 0.103.11
  * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.12.
  * Windows: libjson-c 0.17 compatibility fix. with ssize_t type definition.
  * Windows: Update build system to use OpenSSL 3 and PThreads-Win32 v3.
- Update to 0.103.10
  * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.10.
    (bsc#1216625, CVE-2023-40477)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="max@suse.com" date="1710504000">- New version: 1.3.0:
  * Added support for extracting and scanning attachments found in
    Microsoft OneNote section files. OneNote parsing will be
    enabled by default, but may be optionally disabled.
  * Added file type recognition for compiled Python (`.pyc`) files.
  * Improved support for decrypting PDFs with empty passwords.
  * Fixed a warning when scanning some HTML files.
  * ClamOnAcc: Fixed an infinite loop when a watched directory
    does not exist.
  * ClamOnAcc: Fixed an infinite loop when a file has been deleted
    before a scan.
- New version: 1.2.0:
  * Added support for extracting Universal Disk Format (UDF)
    partitions.
  * Added an option to customize the size of ClamAV's clean file
    cache.
  * Raised the MaxScanSize limit so the total amount of data
    scanned when scanning a file or archive may exceed 4 gigabytes.
  * Added ability for Freshclam to use a client certificate PEM
    file and a private key PEM file for authentication to a private
    mirror.
  * Fix an issue extracting files from ISO9660 partitions where the
    files are listed in the plain ISO tree and there also exists an
    empty Joliet tree.
  * PID and socket are now located under /run/clamav/clamd.pid and
    /run/clamav/clamd.sock .
  * bsc#1211594: Fixed an issue where ClamAV does not abort the
    signature load process after partially loading an invalid
    signature.
- New version 1.1.0:
  * https://blog.clamav.net/2023/05/clamav-110-released.html
  * Added the ability to extract images embedded in HTML CSS
    &lt;style&gt; blocks.
  * Updated to Sigtool so that the --vba option will extract VBA
    code from Microsoft Office documents the same way that
    libclamav extracts VBA.
  * Added a new option --fail-if-cvd-older-than=days to clamscan
    and clamd, and FailIfCvdOlderThan to clamd.conf
  * Added a new function cl_cvdgetage() to the libclamav API.
  * Added a new function cl_engine_set_clcb_vba() to the
    libclamav API.
  * obsoletes clamav-ec32.patch.
- boo#1180296: Integrate clamonacc as a service.
- New version 1.0.1 LTS (including changes in 0.104 and 0.105):
  * As of ClamAV 0.104, CMake is required to build ClamAV.
  * As of ClamAV 0.105, Rust is now required to compile ClamAV.
  * Increased the default limits for file and scan size:
  * MaxScanSize: 100M to 400M
  * MaxFileSize: 25M to 100M
  * StreamMaxLength: 25M to 100M
  * PCREMaxFileSize: 25M to 100M
  * MaxEmbeddedPE: 10M to 40M
  * MaxHTMLNormalize: 10M to 40M
  * MaxScriptNormalize: 5M to 20M
  * MaxHTMLNoTags: 2M to 8M
  * Added image fuzzy hash subsignatures for logical signatures.
  * Support for decrypting read-only OLE2-based XLS files that are
    encrypted with the default password.
  * Overhauled the implementation of the all-match feature.
  * Added a new callback to the public API for inspecting file
    content during a scan at each layer of archive extraction.
  * Added a new function to the public API for unpacking CVD
    signature archives.
  * The option to build with an external TomsFastMath library has
    been removed. ClamAV requires non-default build options for
    TomsFastMath to support bigger floating point numbers.
  * For a full list of changes see the release announcements:
  * https://blog.clamav.net/2022/11/clamav-100-lts-released.html
  * https://blog.clamav.net/2022/05/clamav-01050-01043-01036-released.html
  * https://blog.clamav.net/2021/09/clamav-01040-released.html
- Build clamd with systemd support.
- Fix format strings on 32bit platforms (clamav-format.patch).
- Add missing endianness conversions (clamav-ec32.patch).
- Don't build on armv7l for now due to some test failures.
- Drop clamav-disable-yara.patch as yara cannot be disabled anymore</changelog>
  <changelog author="max@suse.com" date="1713787200">- New Version: 1.3.1:
  * CVE-2024-20380: Fixed a possible crash in the HTML file parser
    that could cause a denial-of-service (DoS) condition.
  * Updated select Rust dependencies to the latest versions.
  * Fixed a bug causing some text to be truncated when converting
    from UTF-16.
  * Fixed assorted complaints identified by Coverity static
    analysis.
  * Fixed a bug causing CVDs downloaded by the DatabaseCustomURL
    Freshclam config option to be pruned and then re-downloaded
    with every update.
  * Added the new 'valhalla' database name to the list of optional
    databases in preparation for future work.</changelog>
  <changelog author="bwiedemann@suse.com" date="1722254400">- Add upstream 1305.patch to fix tests (boo#1102840, https://github.com/Cisco-Talos/clamav/issues/1300)</changelog>
  <changelog author="suse+build@de-korte.org" date="1725451200">- New version 1.3.2:
  * CVE-2024-20506: Changed the logging module to disable following
    symlinks on Linux and Unix systems so as to prevent an attacker
    with existing access to the 'clamd' or 'freshclam' services from
    using a symlink to corrupt system files.
  * CVE-2024-20505: Fixed a possible out-of-bounds read bug in the PDF
    file parser that could cause a denial-of-service condition.
  * Removed unused Python modules from freshclam tests including
    deprecated 'cgi' module that is expected to cause test failures in
    Python 3.13.
  * Fix unit test caused by expiring signing certificate.
  * Fixed a build issue on Windows with newer versions of Rust. Also
    upgraded GitHub Actions imports to fix CI failures.
  * Fixed an unaligned pointer dereference issue on select architectures.
  * Fixes to Jenkins CI pipeline.
- Remove upstreamed 1305.patch</changelog>
  <changelog author="max@suse.com" date="1725969600">- New version 1.4.1:
  * [CVE-2024-20506, bsc#1230162]: Changed the logging module to
    disable following symlinks on Linux and Unix systems so as to
    prevent an attacker with existing access to the 'clamd' or
    'freshclam' services from using a symlink to corrupt system
    files.
  * [CVE-2024-20505, bsc#1230161]: Fixed a possible out-of-bounds
    read bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition.
  * https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html
- New version 1.4.0:
  * Added support for extracting ALZ archives.
  * Added support for extracting LHA/LZH archives.
  * Added the ability to disable image fuzzy hashing, if needed.
    For context, image fuzzy hashing is a detection mechanism
    useful for identifying malware by matching images included with
    the malware or phishing email/document.
  * https://blog.clamav.net/2024/08/clamav-140-feature-release-and-clamav.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734523200">- fix factory submission (clam.tcl, clamscan.log)</changelog>
  <changelog author="max@suse.com" date="1736510400">- bsc#1232242: Start clamonacc with --fdpass to avoid errors due to
  clamd not being able to access user files.</changelog>
  <changelog author="max@suse.com" date="1737547200">- New version 1.4.2:
  * CVE-2025-20128, bsc#1236307: Fixed a possible buffer overflow
    read bug in the OLE2 file parser that could cause a
    denial-of-service (DoS) condition.</changelog>
  <changelog author="max@suse.com" date="1737633600">- Drop the version dependency on libcurl. Building against versions
  older than 7.45 does not fail anymore, but disables support for
  fdpassing in clamonacc. This only affects SLE-12 up to SP3.</changelog>
  <changelog author="max@suse.com" date="1739188800">- bsc#1236949: Fix location of license files.</changelog>
  <changelog author="max@suse.com" date="1742817600">- bsc#1239957: Build with PIE.
- Eliminate some UTF-8 NBSP characters from the changes file.</changelog>
  <changelog author="max@suse.com" date="1748433600">- bsc#1243565: Add clamav-freshclam_test.patch to fix a race
  condition between the mockup servers started by different test
  cases in freshclam_test.py.</changelog>
  <changelog author="suse+build@de-korte.org" date="1750334400">- New version 1.4.3:
  ClamAV 1.4.3 is a patch release with the following fixes:
  * CVE-2025-20260, bsc#1245054: Fixed a possible buffer overflow
    write bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition or enable remote code
    execution. This issue only affects configurations where both:
  - The max file-size scan limit is set greater than or equal to 1024MB.
  - The max scan-size scan limit is set greater than or equal to 1025MB.
    The code flaw was present prior to version 1.0.0, but a change in
    version 1.0.0 that enables larger allocations based on untrusted data
    made it possible to trigger this bug.
    This issue affects all currently supported versions.
  * CVE-2025-20234, bsc#1245055: Fixed a possible buffer overflow
    read bug in the UDF file parser that may write to a temp file
    and thus disclose information, or it may crash and cause a
    denial-of-service (DoS) condition.
    This issue was introduced in version 1.2.0.
  * Fixed a possible use-after-free bug in the Xz decompression module in
    the bundled lzma-sdk library.
    This issue was fixed in the lzma-sdk version 18.03. ClamAV bundles a
    copy of the lzma-sdk with some performance changes specific to
    libclamav, plus select bug fixes like this one in lieu of a full
    upgrade to newer lzma-sdk.
    This issue affects all ClamAV versions at least as far back as 0.99.4.
  * Windows: Fixed a build install issue when a DLL dependency such as
    libcrypto has the exact same name as one provided by the Windows
    operating system.
- Renew clamav.keyring</changelog>
</package>
<package pkgid="bcb7b91f79c6cba25de7123f188195489f65fafa99ee52f729d3f77744806bdf" name="clamav-devel" arch="x86_64">
  <version epoch="0" ver="1.5.1" rel="150600.18.22.1"/>
  <changelog author="max@suse.com" date="1713787200">- New Version: 1.3.1:
  * CVE-2024-20380: Fixed a possible crash in the HTML file parser
    that could cause a denial-of-service (DoS) condition.
  * Updated select Rust dependencies to the latest versions.
  * Fixed a bug causing some text to be truncated when converting
    from UTF-16.
  * Fixed assorted complaints identified by Coverity static
    analysis.
  * Fixed a bug causing CVDs downloaded by the DatabaseCustomURL
    Freshclam config option to be pruned and then re-downloaded
    with every update.
  * Added the new 'valhalla' database name to the list of optional
    databases in preparation for future work.</changelog>
  <changelog author="bwiedemann@suse.com" date="1722254400">- Add upstream 1305.patch to fix tests (boo#1102840, https://github.com/Cisco-Talos/clamav/issues/1300)</changelog>
  <changelog author="suse+build@de-korte.org" date="1725451200">- New version 1.3.2:
  * CVE-2024-20506: Changed the logging module to disable following
    symlinks on Linux and Unix systems so as to prevent an attacker
    with existing access to the 'clamd' or 'freshclam' services from
    using a symlink to corrupt system files.
  * CVE-2024-20505: Fixed a possible out-of-bounds read bug in the PDF
    file parser that could cause a denial-of-service condition.
  * Removed unused Python modules from freshclam tests including
    deprecated 'cgi' module that is expected to cause test failures in
    Python 3.13.
  * Fix unit test caused by expiring signing certificate.
  * Fixed a build issue on Windows with newer versions of Rust. Also
    upgraded GitHub Actions imports to fix CI failures.
  * Fixed an unaligned pointer dereference issue on select architectures.
  * Fixes to Jenkins CI pipeline.
- Remove upstreamed 1305.patch</changelog>
  <changelog author="max@suse.com" date="1725969600">- New version 1.4.1:
  * [CVE-2024-20506, bsc#1230162]: Changed the logging module to
    disable following symlinks on Linux and Unix systems so as to
    prevent an attacker with existing access to the 'clamd' or
    'freshclam' services from using a symlink to corrupt system
    files.
  * [CVE-2024-20505, bsc#1230161]: Fixed a possible out-of-bounds
    read bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition.
  * https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html
- New version 1.4.0:
  * Added support for extracting ALZ archives.
  * Added support for extracting LHA/LZH archives.
  * Added the ability to disable image fuzzy hashing, if needed.
    For context, image fuzzy hashing is a detection mechanism
    useful for identifying malware by matching images included with
    the malware or phishing email/document.
  * https://blog.clamav.net/2024/08/clamav-140-feature-release-and-clamav.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734523200">- fix factory submission (clam.tcl, clamscan.log)</changelog>
  <changelog author="max@suse.com" date="1736510400">- bsc#1232242: Start clamonacc with --fdpass to avoid errors due to
  clamd not being able to access user files.</changelog>
  <changelog author="max@suse.com" date="1737547200">- New version 1.4.2:
  * CVE-2025-20128, bsc#1236307: Fixed a possible buffer overflow
    read bug in the OLE2 file parser that could cause a
    denial-of-service (DoS) condition.</changelog>
  <changelog author="max@suse.com" date="1737633600">- Drop the version dependency on libcurl. Building against versions
  older than 7.45 does not fail anymore, but disables support for
  fdpassing in clamonacc. This only affects SLE-12 up to SP3.</changelog>
  <changelog author="max@suse.com" date="1739188800">- bsc#1236949: Fix location of license files.</changelog>
  <changelog author="max@suse.com" date="1742817600">- bsc#1239957: Build with PIE.
- Eliminate some UTF-8 NBSP characters from the changes file.</changelog>
  <changelog author="max@suse.com" date="1748433600">- bsc#1243565: Add clamav-freshclam_test.patch to fix a race
  condition between the mockup servers started by different test
  cases in freshclam_test.py.</changelog>
  <changelog author="suse+build@de-korte.org" date="1750334400">- New version 1.4.3:
  ClamAV 1.4.3 is a patch release with the following fixes:
  * CVE-2025-20260, bsc#1245054: Fixed a possible buffer overflow
    write bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition or enable remote code
    execution. This issue only affects configurations where both:
  - The max file-size scan limit is set greater than or equal to 1024MB.
  - The max scan-size scan limit is set greater than or equal to 1025MB.
    The code flaw was present prior to version 1.0.0, but a change in
    version 1.0.0 that enables larger allocations based on untrusted data
    made it possible to trigger this bug.
    This issue affects all currently supported versions.
  * CVE-2025-20234, bsc#1245055: Fixed a possible buffer overflow
    read bug in the UDF file parser that may write to a temp file
    and thus disclose information, or it may crash and cause a
    denial-of-service (DoS) condition.
    This issue was introduced in version 1.2.0.
  * Fixed a possible use-after-free bug in the Xz decompression module in
    the bundled lzma-sdk library.
    This issue was fixed in the lzma-sdk version 18.03. ClamAV bundles a
    copy of the lzma-sdk with some performance changes specific to
    libclamav, plus select bug fixes like this one in lieu of a full
    upgrade to newer lzma-sdk.
    This issue affects all ClamAV versions at least as far back as 0.99.4.
  * Windows: Fixed a build install issue when a DLL dependency such as
    libcrypto has the exact same name as one provided by the Windows
    operating system.
- Renew clamav.keyring</changelog>
  <changelog author="max@suse.com" date="1751284800">- bsc#1240363, clamav-disable-administrative-commands.patch: clamd:
  Add an option to toggle SHUTDOWN, RELOAD, STATS and VERSION.</changelog>
  <changelog author="max@suse.com" date="1759924800">- New version 1.5.0:
  * Added checks to determine if an OLE2-based Microsoft Office
    document is encrypted.
  * Added the ability to record URIs found in HTML if the
    generate-JSON-metadata feature is enabled.
  * Added the ability to record URIs found in PDFs if the
    generate-JSON-metadata feature is enabled.
  * Added regex support for the clamd.conf OnAccessExcludePath
    config option.
  * Added CVD signing/verification with external .sign files.
  * Freshclam, ClamD, ClamScan, and Sigtool: Added an option to
    enable FIPS-like limits disabling MD5 and SHA1 from being used
    for verifying digital signatures or for being used to trust a
    file when checking for false positives
  * ClamD: Added an option to disable select administrative
    commands including SHUTDOWN, RELOAD, STATS and VERSION.
  * libclamav: Added extended hashing functions with a "flags"
    parameter that allows the caller to choose if they want to
    bypass FIPS hash algorithm limits.
  * See the release announcement for the full list of changes:
    https://blog.clamav.net/2025/10/clamav-150-released.html
- Obsoleted patches:
  * clamav-freshclam_test.patch
  * clamav-disable-administrative-commands.patch
  * clamav-fips.patch
- Use macros for library versions
- Remove service symlinks: rcclamd, rcfreshclam, rcclamav-milter,
  and clamonacc.
- Use rust 1.86 for SLE-12 and SLE-15-SP2.</changelog>
  <changelog author="max@suse.com" date="1760443200">- Add json-c-json-c-0.18-20240915.tar.gz and link it statically
  into libclamav on SLE-12, because version 0.12 is too old.</changelog>
  <changelog author="max@suse.com" date="1760616000">- New version: 1.5.1:
  * Fixed a significant performance issue when scanning some PE
    files.
  * Fixed an issue recording file entries from a ZIP archive
    central directory which resulted in
    "Heuristics.Limits.Exceeded.MaxFiles" alerts when using the
    ClamScan --alert-exceeds-max command line option or ClamD
    AlertExceedsMax config file option.
  * Improved performance when scanning TNEF email attachments.
  * Fixed an issue with recording metadata for OOXML office
    documents.
  * Fixed an issue with signature matches for VBA in OLE2 office
    documents.
  * Loosened overly restrictive rules for embedded file
    identification and increased the limit for finding PE files
    embedded in other PE files.
  * Fixed an issue with extracting some RAR archives embedded in
    other files.
  * Fixed an issue with calculating fuzzy hashes affecting some
    images by updating the version for several Rust library
    dependencies.</changelog>
  <changelog author="max@suse.com" date="1762257600">- Add clamav-workaround.patch to work around symbol removals in
  version 1.5.0 and 1.5.1.</changelog>
  <changelog author="bwiedemann@suse.com" date="1763208000">- Build with older rust 1.87 for reproducible builds (boo#1249404)</changelog>
  <changelog author="max@suse.com" date="1763726400">- Provide a better fix for boo#1249404 by disabling debug mode.</changelog>
  <changelog author="max@suse.com" date="1764331200">- Fix testsuite error on SLE-15-SP6 by falling back to rust1.86.</changelog>
</package>
<package pkgid="232cc105d0ab6875d8549f21d1708eb2e5b3e12083e77ce0e07d6a2f700ecac7" name="clamav-devel" arch="x86_64">
  <version epoch="0" ver="1.5.2" rel="150600.18.25.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1734523200">- fix factory submission (clam.tcl, clamscan.log)</changelog>
  <changelog author="max@suse.com" date="1736510400">- bsc#1232242: Start clamonacc with --fdpass to avoid errors due to
  clamd not being able to access user files.</changelog>
  <changelog author="max@suse.com" date="1737547200">- New version 1.4.2:
  * CVE-2025-20128, bsc#1236307: Fixed a possible buffer overflow
    read bug in the OLE2 file parser that could cause a
    denial-of-service (DoS) condition.</changelog>
  <changelog author="max@suse.com" date="1737633600">- Drop the version dependency on libcurl. Building against versions
  older than 7.45 does not fail anymore, but disables support for
  fdpassing in clamonacc. This only affects SLE-12 up to SP3.</changelog>
  <changelog author="max@suse.com" date="1739188800">- bsc#1236949: Fix location of license files.</changelog>
  <changelog author="max@suse.com" date="1742817600">- bsc#1239957: Build with PIE.
- Eliminate some UTF-8 NBSP characters from the changes file.</changelog>
  <changelog author="max@suse.com" date="1748433600">- bsc#1243565: Add clamav-freshclam_test.patch to fix a race
  condition between the mockup servers started by different test
  cases in freshclam_test.py.</changelog>
  <changelog author="suse+build@de-korte.org" date="1750334400">- New version 1.4.3:
  ClamAV 1.4.3 is a patch release with the following fixes:
  * CVE-2025-20260, bsc#1245054: Fixed a possible buffer overflow
    write bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition or enable remote code
    execution. This issue only affects configurations where both:
  - The max file-size scan limit is set greater than or equal to 1024MB.
  - The max scan-size scan limit is set greater than or equal to 1025MB.
    The code flaw was present prior to version 1.0.0, but a change in
    version 1.0.0 that enables larger allocations based on untrusted data
    made it possible to trigger this bug.
    This issue affects all currently supported versions.
  * CVE-2025-20234, bsc#1245055: Fixed a possible buffer overflow
    read bug in the UDF file parser that may write to a temp file
    and thus disclose information, or it may crash and cause a
    denial-of-service (DoS) condition.
    This issue was introduced in version 1.2.0.
  * Fixed a possible use-after-free bug in the Xz decompression module in
    the bundled lzma-sdk library.
    This issue was fixed in the lzma-sdk version 18.03. ClamAV bundles a
    copy of the lzma-sdk with some performance changes specific to
    libclamav, plus select bug fixes like this one in lieu of a full
    upgrade to newer lzma-sdk.
    This issue affects all ClamAV versions at least as far back as 0.99.4.
  * Windows: Fixed a build install issue when a DLL dependency such as
    libcrypto has the exact same name as one provided by the Windows
    operating system.
- Renew clamav.keyring</changelog>
  <changelog author="max@suse.com" date="1751284800">- bsc#1240363, clamav-disable-administrative-commands.patch: clamd:
  Add an option to toggle SHUTDOWN, RELOAD, STATS and VERSION.</changelog>
  <changelog author="max@suse.com" date="1759924800">- New version 1.5.0:
  * Added checks to determine if an OLE2-based Microsoft Office
    document is encrypted.
  * Added the ability to record URIs found in HTML if the
    generate-JSON-metadata feature is enabled.
  * Added the ability to record URIs found in PDFs if the
    generate-JSON-metadata feature is enabled.
  * Added regex support for the clamd.conf OnAccessExcludePath
    config option.
  * Added CVD signing/verification with external .sign files.
  * Freshclam, ClamD, ClamScan, and Sigtool: Added an option to
    enable FIPS-like limits disabling MD5 and SHA1 from being used
    for verifying digital signatures or for being used to trust a
    file when checking for false positives (bsc#1221954).
  * ClamD: Added an option to disable select administrative
    commands including SHUTDOWN, RELOAD, STATS and VERSION.
  * libclamav: Added extended hashing functions with a "flags"
    parameter that allows the caller to choose if they want to
    bypass FIPS hash algorithm limits.
  * See the release announcement for the full list of changes:
    https://blog.clamav.net/2025/10/clamav-150-released.html
- Obsoleted patches:
  * clamav-freshclam_test.patch
  * clamav-disable-administrative-commands.patch
  * clamav-fips.patch
- Use macros for library versions
- Remove service symlinks: rcclamd, rcfreshclam, rcclamav-milter,
  and clamonacc.
- Use rust 1.86 for SLE-12 and SLE-15-SP2.</changelog>
  <changelog author="max@suse.com" date="1760443200">- Add json-c-json-c-0.18-20240915.tar.gz and link it statically
  into libclamav on SLE-12, because version 0.12 is too old.</changelog>
  <changelog author="max@suse.com" date="1760616000">- New version: 1.5.1:
  * Fixed a significant performance issue when scanning some PE
    files.
  * Fixed an issue recording file entries from a ZIP archive
    central directory which resulted in
    "Heuristics.Limits.Exceeded.MaxFiles" alerts when using the
    ClamScan --alert-exceeds-max command line option or ClamD
    AlertExceedsMax config file option.
  * Improved performance when scanning TNEF email attachments.
  * Fixed an issue with recording metadata for OOXML office
    documents.
  * Fixed an issue with signature matches for VBA in OLE2 office
    documents.
  * Loosened overly restrictive rules for embedded file
    identification and increased the limit for finding PE files
    embedded in other PE files.
  * Fixed an issue with extracting some RAR archives embedded in
    other files.
  * Fixed an issue with calculating fuzzy hashes affecting some
    images by updating the version for several Rust library
    dependencies.</changelog>
  <changelog author="max@suse.com" date="1762257600">- Add clamav-workaround.patch to work around symbol removals in
  version 1.5.0 and 1.5.1.</changelog>
  <changelog author="bwiedemann@suse.com" date="1763208000">- Build with older rust 1.87 for reproducible builds (boo#1249404)</changelog>
  <changelog author="max@suse.com" date="1763726400">- Provide a better fix for boo#1249404 by disabling debug mode.</changelog>
  <changelog author="max@suse.com" date="1764331200">- Fix testsuite error on SLE-15-SP6 by falling back to rust1.86.</changelog>
  <changelog author="max@suse.com" date="1770724800">- jsc-PED-14819: Support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1770984000">- bsc#1258072: Require main and library packages to be of the same
  version and release. Given that all the core functionality is
  in the libraries it makes little sense to update the main
  package alone.</changelog>
  <changelog author="max@suse.com" date="1772712000">- New version 1.5.2:
  * bsc#1259207, CVE-2026-20031: Fixed an error handling bug in the
    HTML file parser that may crash the program and cause a
    denial-of-service (DoS) condition. This issue was introduced in
    version 1.1.0.
  * Fixed a possible infinite loop when scanning some JPEG files by
    upgrading affected ClamAV dependency, a Rust image library.
  * The CVD verification process will now ignore certificate files
    in the CVD certs directory when the user lacks read permissions.
  * Freshclam: Fix CLD verification bug with PrivateMirror option.
  * Upgraded the Rust bytes dependency to a newer version to
    resolve RUSTSEC-2026-0007 advisory.
  * Fixed a possible crash caused by invalid pointer alignment on
    some platforms.
  * Minimal required Rust version is now 1.87.</changelog>
  <changelog author="max@suse.com" date="1773316800">- Disable build for 32 bit ix86 because of testsuite failures with
  rust &gt;= 1.87 that upstream is not planning to fix.
- Run the test suite on all SUSE releases.</changelog>
</package>
<package pkgid="b0a507c3f25fe5fbef8c40eef4dbed51b99ab988f4aec93dde16f7caafb587b1" name="clamav-docs-html" arch="noarch">
  <version epoch="0" ver="1.4.2" rel="150600.18.12.1"/>
  <changelog author="suse+build@de-korte.org" date="1641988800">- Update to 0.103.5
  * CVE-2022-20698: Fix for invalid pointer read that may cause a crash.
    This issue affects 0.104.1, 0.103.4 and prior when ClamAV is compiled
    with libjson-c and the CL_SCAN_GENERAL_COLLECT_METADATA scan option
    (the clamscan --gen-json option) is enabled. (bsc#1194731)
  * Fixed ability to disable the file size limit with libclamav C API,
    like this:
    cl_engine_set_num(engine, CL_ENGINE_MAX_FILESIZE, 0);
    This issue didn't affect ClamD or ClamScan which also can disable the
    limit by setting it to zero using MaxFileSize 0 in clamd.conf for ClamD,
    or clamscan --max-filesize=0 for ClamScan.
    Note: Internally, the max file size is still set to 2 GiB. Disabling the
    limit for a scan will fall back on the internal 2 GiB limitation.
  * Increased the maximum line length for ClamAV config files from 512 bytes
    to 1,024 bytes to allow for longer config option strings.
  * SigTool: Fix insufficient buffer size for --list-sigs that caused a
    failure when listing a database containing one or more very long
    signatures. This fix was backported from 0.104.</changelog>
  <changelog author="meissner@suse.com" date="1649764800">- https source urls</changelog>
  <changelog author="suse+build@de-korte.org" date="1651752000">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
  <changelog author="ecsos@opensuse.org" date="1659700800">- Update to 0.103.7 (bsc#1202986)
  - Zip parser: tolerate 2-byte overlap in file entries
  - Fix bug with logical signature Intermediates feature
  - Update to UnRAR v6.1.7
  - Patch UnRAR: allow skipping files in solid archives
  - Patch UnRAR: limit dict winsize to 1GB</changelog>
  <changelog author="suse+build@de-korte.org" date="1676462400">- Update to 0.103.8
  * CVE-2023-20032: Fixed a possible remote code execution vulnerability
    in the HFS+ file parser. Issue affects versions 1.0.0 and earlier,
    0.105.1 and earlier, and 0.103.7 and earlier. (bsc#1208363)
  * CVE-2023-20052: Fixed a possible remote information leak
    vulnerability in the DMG file parser. Issue affects versions 1.0.0
    and earlier, 0.105.1 and earlier, and 0.103.7 and earlier.
    (bsc#1208365)
  * Update vendored libmspack library to version 0.11alpha.
    (bsc#1103032: CVE-2018-14679)
- Package huge .html documentation in a separate subpackage.</changelog>
  <changelog author="suse+build@de-korte.org" date="1692187200">- Update to 0.103.9
  * CVE-2023-20197: Fixed a possible denial of service vulnerability in
    the HFS+ file parser. This issue affects versions 1.1.0, 1.0.1 through
    1.0.0, 0.105.2 through 0.105.0, 0.104.4 through 0.104.0, and 0.103.8
    through 0.103.0. (boo#1214342)
  * Fixed compiler warnings that may turn into errors in Clang 16.</changelog>
  <changelog author="max@suse.com" date="1692360000">- Renew clamav.keyring .</changelog>
  <changelog author="suse+build@de-korte.org" date="1698235200">- Update to 0.103.11
  * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.12.
  * Windows: libjson-c 0.17 compatibility fix. with ssize_t type definition.
  * Windows: Update build system to use OpenSSL 3 and PThreads-Win32 v3.
- Update to 0.103.10
  * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.10.
    (bsc#1216625, CVE-2023-40477)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="max@suse.com" date="1710504000">- New version: 1.3.0:
  * Added support for extracting and scanning attachments found in
    Microsoft OneNote section files. OneNote parsing will be
    enabled by default, but may be optionally disabled.
  * Added file type recognition for compiled Python (`.pyc`) files.
  * Improved support for decrypting PDFs with empty passwords.
  * Fixed a warning when scanning some HTML files.
  * ClamOnAcc: Fixed an infinite loop when a watched directory
    does not exist.
  * ClamOnAcc: Fixed an infinite loop when a file has been deleted
    before a scan.
- New version: 1.2.0:
  * Added support for extracting Universal Disk Format (UDF)
    partitions.
  * Added an option to customize the size of ClamAV's clean file
    cache.
  * Raised the MaxScanSize limit so the total amount of data
    scanned when scanning a file or archive may exceed 4 gigabytes.
  * Added ability for Freshclam to use a client certificate PEM
    file and a private key PEM file for authentication to a private
    mirror.
  * Fix an issue extracting files from ISO9660 partitions where the
    files are listed in the plain ISO tree and there also exists an
    empty Joliet tree.
  * PID and socket are now located under /run/clamav/clamd.pid and
    /run/clamav/clamd.sock .
  * bsc#1211594: Fixed an issue where ClamAV does not abort the
    signature load process after partially loading an invalid
    signature.
- New version 1.1.0:
  * https://blog.clamav.net/2023/05/clamav-110-released.html
  * Added the ability to extract images embedded in HTML CSS
    &lt;style&gt; blocks.
  * Updated to Sigtool so that the --vba option will extract VBA
    code from Microsoft Office documents the same way that
    libclamav extracts VBA.
  * Added a new option --fail-if-cvd-older-than=days to clamscan
    and clamd, and FailIfCvdOlderThan to clamd.conf
  * Added a new function cl_cvdgetage() to the libclamav API.
  * Added a new function cl_engine_set_clcb_vba() to the
    libclamav API.
  * obsoletes clamav-ec32.patch.
- boo#1180296: Integrate clamonacc as a service.
- New version 1.0.1 LTS (including changes in 0.104 and 0.105):
  * As of ClamAV 0.104, CMake is required to build ClamAV.
  * As of ClamAV 0.105, Rust is now required to compile ClamAV.
  * Increased the default limits for file and scan size:
  * MaxScanSize: 100M to 400M
  * MaxFileSize: 25M to 100M
  * StreamMaxLength: 25M to 100M
  * PCREMaxFileSize: 25M to 100M
  * MaxEmbeddedPE: 10M to 40M
  * MaxHTMLNormalize: 10M to 40M
  * MaxScriptNormalize: 5M to 20M
  * MaxHTMLNoTags: 2M to 8M
  * Added image fuzzy hash subsignatures for logical signatures.
  * Support for decrypting read-only OLE2-based XLS files that are
    encrypted with the default password.
  * Overhauled the implementation of the all-match feature.
  * Added a new callback to the public API for inspecting file
    content during a scan at each layer of archive extraction.
  * Added a new function to the public API for unpacking CVD
    signature archives.
  * The option to build with an external TomsFastMath library has
    been removed. ClamAV requires non-default build options for
    TomsFastMath to support bigger floating point numbers.
  * For a full list of changes see the release announcements:
  * https://blog.clamav.net/2022/11/clamav-100-lts-released.html
  * https://blog.clamav.net/2022/05/clamav-01050-01043-01036-released.html
  * https://blog.clamav.net/2021/09/clamav-01040-released.html
- Build clamd with systemd support.
- Fix format strings on 32bit platforms (clamav-format.patch).
- Add missing endianness conversions (clamav-ec32.patch).
- Don't build on armv7l for now due to some test failures.
- Drop clamav-disable-yara.patch as yara cannot be disabled anymore</changelog>
  <changelog author="max@suse.com" date="1713787200">- New Version: 1.3.1:
  * CVE-2024-20380: Fixed a possible crash in the HTML file parser
    that could cause a denial-of-service (DoS) condition.
  * Updated select Rust dependencies to the latest versions.
  * Fixed a bug causing some text to be truncated when converting
    from UTF-16.
  * Fixed assorted complaints identified by Coverity static
    analysis.
  * Fixed a bug causing CVDs downloaded by the DatabaseCustomURL
    Freshclam config option to be pruned and then re-downloaded
    with every update.
  * Added the new 'valhalla' database name to the list of optional
    databases in preparation for future work.</changelog>
  <changelog author="bwiedemann@suse.com" date="1722254400">- Add upstream 1305.patch to fix tests (boo#1102840, https://github.com/Cisco-Talos/clamav/issues/1300)</changelog>
  <changelog author="suse+build@de-korte.org" date="1725451200">- New version 1.3.2:
  * CVE-2024-20506: Changed the logging module to disable following
    symlinks on Linux and Unix systems so as to prevent an attacker
    with existing access to the 'clamd' or 'freshclam' services from
    using a symlink to corrupt system files.
  * CVE-2024-20505: Fixed a possible out-of-bounds read bug in the PDF
    file parser that could cause a denial-of-service condition.
  * Removed unused Python modules from freshclam tests including
    deprecated 'cgi' module that is expected to cause test failures in
    Python 3.13.
  * Fix unit test caused by expiring signing certificate.
  * Fixed a build issue on Windows with newer versions of Rust. Also
    upgraded GitHub Actions imports to fix CI failures.
  * Fixed an unaligned pointer dereference issue on select architectures.
  * Fixes to Jenkins CI pipeline.
- Remove upstreamed 1305.patch</changelog>
  <changelog author="max@suse.com" date="1725969600">- New version 1.4.1:
  * [CVE-2024-20506, bsc#1230162]: Changed the logging module to
    disable following symlinks on Linux and Unix systems so as to
    prevent an attacker with existing access to the 'clamd' or
    'freshclam' services from using a symlink to corrupt system
    files.
  * [CVE-2024-20505, bsc#1230161]: Fixed a possible out-of-bounds
    read bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition.
  * https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html
- New version 1.4.0:
  * Added support for extracting ALZ archives.
  * Added support for extracting LHA/LZH archives.
  * Added the ability to disable image fuzzy hashing, if needed.
    For context, image fuzzy hashing is a detection mechanism
    useful for identifying malware by matching images included with
    the malware or phishing email/document.
  * https://blog.clamav.net/2024/08/clamav-140-feature-release-and-clamav.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734523200">- fix factory submission (clam.tcl, clamscan.log)</changelog>
  <changelog author="max@suse.com" date="1736510400">- bsc#1232242: Start clamonacc with --fdpass to avoid errors due to
  clamd not being able to access user files.</changelog>
  <changelog author="max@suse.com" date="1737547200">- New version 1.4.2:
  * CVE-2025-20128, bsc#1236307: Fixed a possible buffer overflow
    read bug in the OLE2 file parser that could cause a
    denial-of-service (DoS) condition.</changelog>
  <changelog author="max@suse.com" date="1737633600">- Drop the version dependency on libcurl. Building against versions
  older than 7.45 does not fail anymore, but disables support for
  fdpassing in clamonacc. This only affects SLE-12 up to SP3.</changelog>
  <changelog author="max@suse.com" date="1739188800">- bsc#1236949: Fix location of license files.</changelog>
  <changelog author="max@suse.com" date="1742817600">- bsc#1239957: Build with PIE.
- Eliminate some UTF-8 NBSP characters from the changes file.</changelog>
</package>
<package pkgid="2fc4d28952e4854dbe24c521b8ae3027799ad8ebaebd3a8218d23e3e0fb0e308" name="clamav-docs-html" arch="noarch">
  <version epoch="0" ver="1.4.2" rel="150600.18.15.1"/>
  <changelog author="meissner@suse.com" date="1649764800">- https source urls</changelog>
  <changelog author="suse+build@de-korte.org" date="1651752000">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
  <changelog author="ecsos@opensuse.org" date="1659700800">- Update to 0.103.7 (bsc#1202986)
  - Zip parser: tolerate 2-byte overlap in file entries
  - Fix bug with logical signature Intermediates feature
  - Update to UnRAR v6.1.7
  - Patch UnRAR: allow skipping files in solid archives
  - Patch UnRAR: limit dict winsize to 1GB</changelog>
  <changelog author="suse+build@de-korte.org" date="1676462400">- Update to 0.103.8
  * CVE-2023-20032: Fixed a possible remote code execution vulnerability
    in the HFS+ file parser. Issue affects versions 1.0.0 and earlier,
    0.105.1 and earlier, and 0.103.7 and earlier. (bsc#1208363)
  * CVE-2023-20052: Fixed a possible remote information leak
    vulnerability in the DMG file parser. Issue affects versions 1.0.0
    and earlier, 0.105.1 and earlier, and 0.103.7 and earlier.
    (bsc#1208365)
  * Update vendored libmspack library to version 0.11alpha.
    (bsc#1103032: CVE-2018-14679)
- Package huge .html documentation in a separate subpackage.</changelog>
  <changelog author="suse+build@de-korte.org" date="1692187200">- Update to 0.103.9
  * CVE-2023-20197: Fixed a possible denial of service vulnerability in
    the HFS+ file parser. This issue affects versions 1.1.0, 1.0.1 through
    1.0.0, 0.105.2 through 0.105.0, 0.104.4 through 0.104.0, and 0.103.8
    through 0.103.0. (boo#1214342)
  * Fixed compiler warnings that may turn into errors in Clang 16.</changelog>
  <changelog author="max@suse.com" date="1692360000">- Renew clamav.keyring .</changelog>
  <changelog author="suse+build@de-korte.org" date="1698235200">- Update to 0.103.11
  * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.12.
  * Windows: libjson-c 0.17 compatibility fix. with ssize_t type definition.
  * Windows: Update build system to use OpenSSL 3 and PThreads-Win32 v3.
- Update to 0.103.10
  * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.10.
    (bsc#1216625, CVE-2023-40477)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="max@suse.com" date="1710504000">- New version: 1.3.0:
  * Added support for extracting and scanning attachments found in
    Microsoft OneNote section files. OneNote parsing will be
    enabled by default, but may be optionally disabled.
  * Added file type recognition for compiled Python (`.pyc`) files.
  * Improved support for decrypting PDFs with empty passwords.
  * Fixed a warning when scanning some HTML files.
  * ClamOnAcc: Fixed an infinite loop when a watched directory
    does not exist.
  * ClamOnAcc: Fixed an infinite loop when a file has been deleted
    before a scan.
- New version: 1.2.0:
  * Added support for extracting Universal Disk Format (UDF)
    partitions.
  * Added an option to customize the size of ClamAV's clean file
    cache.
  * Raised the MaxScanSize limit so the total amount of data
    scanned when scanning a file or archive may exceed 4 gigabytes.
  * Added ability for Freshclam to use a client certificate PEM
    file and a private key PEM file for authentication to a private
    mirror.
  * Fix an issue extracting files from ISO9660 partitions where the
    files are listed in the plain ISO tree and there also exists an
    empty Joliet tree.
  * PID and socket are now located under /run/clamav/clamd.pid and
    /run/clamav/clamd.sock .
  * bsc#1211594: Fixed an issue where ClamAV does not abort the
    signature load process after partially loading an invalid
    signature.
- New version 1.1.0:
  * https://blog.clamav.net/2023/05/clamav-110-released.html
  * Added the ability to extract images embedded in HTML CSS
    &lt;style&gt; blocks.
  * Updated to Sigtool so that the --vba option will extract VBA
    code from Microsoft Office documents the same way that
    libclamav extracts VBA.
  * Added a new option --fail-if-cvd-older-than=days to clamscan
    and clamd, and FailIfCvdOlderThan to clamd.conf
  * Added a new function cl_cvdgetage() to the libclamav API.
  * Added a new function cl_engine_set_clcb_vba() to the
    libclamav API.
  * obsoletes clamav-ec32.patch.
- boo#1180296: Integrate clamonacc as a service.
- New version 1.0.1 LTS (including changes in 0.104 and 0.105):
  * As of ClamAV 0.104, CMake is required to build ClamAV.
  * As of ClamAV 0.105, Rust is now required to compile ClamAV.
  * Increased the default limits for file and scan size:
  * MaxScanSize: 100M to 400M
  * MaxFileSize: 25M to 100M
  * StreamMaxLength: 25M to 100M
  * PCREMaxFileSize: 25M to 100M
  * MaxEmbeddedPE: 10M to 40M
  * MaxHTMLNormalize: 10M to 40M
  * MaxScriptNormalize: 5M to 20M
  * MaxHTMLNoTags: 2M to 8M
  * Added image fuzzy hash subsignatures for logical signatures.
  * Support for decrypting read-only OLE2-based XLS files that are
    encrypted with the default password.
  * Overhauled the implementation of the all-match feature.
  * Added a new callback to the public API for inspecting file
    content during a scan at each layer of archive extraction.
  * Added a new function to the public API for unpacking CVD
    signature archives.
  * The option to build with an external TomsFastMath library has
    been removed. ClamAV requires non-default build options for
    TomsFastMath to support bigger floating point numbers.
  * For a full list of changes see the release announcements:
  * https://blog.clamav.net/2022/11/clamav-100-lts-released.html
  * https://blog.clamav.net/2022/05/clamav-01050-01043-01036-released.html
  * https://blog.clamav.net/2021/09/clamav-01040-released.html
- Build clamd with systemd support.
- Fix format strings on 32bit platforms (clamav-format.patch).
- Add missing endianness conversions (clamav-ec32.patch).
- Don't build on armv7l for now due to some test failures.
- Drop clamav-disable-yara.patch as yara cannot be disabled anymore</changelog>
  <changelog author="max@suse.com" date="1713787200">- New Version: 1.3.1:
  * CVE-2024-20380: Fixed a possible crash in the HTML file parser
    that could cause a denial-of-service (DoS) condition.
  * Updated select Rust dependencies to the latest versions.
  * Fixed a bug causing some text to be truncated when converting
    from UTF-16.
  * Fixed assorted complaints identified by Coverity static
    analysis.
  * Fixed a bug causing CVDs downloaded by the DatabaseCustomURL
    Freshclam config option to be pruned and then re-downloaded
    with every update.
  * Added the new 'valhalla' database name to the list of optional
    databases in preparation for future work.</changelog>
  <changelog author="bwiedemann@suse.com" date="1722254400">- Add upstream 1305.patch to fix tests (boo#1102840, https://github.com/Cisco-Talos/clamav/issues/1300)</changelog>
  <changelog author="suse+build@de-korte.org" date="1725451200">- New version 1.3.2:
  * CVE-2024-20506: Changed the logging module to disable following
    symlinks on Linux and Unix systems so as to prevent an attacker
    with existing access to the 'clamd' or 'freshclam' services from
    using a symlink to corrupt system files.
  * CVE-2024-20505: Fixed a possible out-of-bounds read bug in the PDF
    file parser that could cause a denial-of-service condition.
  * Removed unused Python modules from freshclam tests including
    deprecated 'cgi' module that is expected to cause test failures in
    Python 3.13.
  * Fix unit test caused by expiring signing certificate.
  * Fixed a build issue on Windows with newer versions of Rust. Also
    upgraded GitHub Actions imports to fix CI failures.
  * Fixed an unaligned pointer dereference issue on select architectures.
  * Fixes to Jenkins CI pipeline.
- Remove upstreamed 1305.patch</changelog>
  <changelog author="max@suse.com" date="1725969600">- New version 1.4.1:
  * [CVE-2024-20506, bsc#1230162]: Changed the logging module to
    disable following symlinks on Linux and Unix systems so as to
    prevent an attacker with existing access to the 'clamd' or
    'freshclam' services from using a symlink to corrupt system
    files.
  * [CVE-2024-20505, bsc#1230161]: Fixed a possible out-of-bounds
    read bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition.
  * https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html
- New version 1.4.0:
  * Added support for extracting ALZ archives.
  * Added support for extracting LHA/LZH archives.
  * Added the ability to disable image fuzzy hashing, if needed.
    For context, image fuzzy hashing is a detection mechanism
    useful for identifying malware by matching images included with
    the malware or phishing email/document.
  * https://blog.clamav.net/2024/08/clamav-140-feature-release-and-clamav.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734523200">- fix factory submission (clam.tcl, clamscan.log)</changelog>
  <changelog author="max@suse.com" date="1736510400">- bsc#1232242: Start clamonacc with --fdpass to avoid errors due to
  clamd not being able to access user files.</changelog>
  <changelog author="max@suse.com" date="1737547200">- New version 1.4.2:
  * CVE-2025-20128, bsc#1236307: Fixed a possible buffer overflow
    read bug in the OLE2 file parser that could cause a
    denial-of-service (DoS) condition.</changelog>
  <changelog author="max@suse.com" date="1737633600">- Drop the version dependency on libcurl. Building against versions
  older than 7.45 does not fail anymore, but disables support for
  fdpassing in clamonacc. This only affects SLE-12 up to SP3.</changelog>
  <changelog author="max@suse.com" date="1739188800">- bsc#1236949: Fix location of license files.</changelog>
  <changelog author="max@suse.com" date="1742817600">- bsc#1239957: Build with PIE.
- Eliminate some UTF-8 NBSP characters from the changes file.</changelog>
  <changelog author="max@suse.com" date="1748433600">- bsc#1243565: Add clamav-freshclam_test.patch to fix a race
  condition between the mockup servers started by different test
  cases in freshclam_test.py.</changelog>
</package>
<package pkgid="65b8fbe6f30c9c7024fc5ea7d5fc278f9a9a1ec16d59ef4fa064c8a5a54f4524" name="clamav-docs-html" arch="noarch">
  <version epoch="0" ver="1.4.3" rel="150600.18.18.1"/>
  <changelog author="suse+build@de-korte.org" date="1651752000">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
  <changelog author="ecsos@opensuse.org" date="1659700800">- Update to 0.103.7 (bsc#1202986)
  - Zip parser: tolerate 2-byte overlap in file entries
  - Fix bug with logical signature Intermediates feature
  - Update to UnRAR v6.1.7
  - Patch UnRAR: allow skipping files in solid archives
  - Patch UnRAR: limit dict winsize to 1GB</changelog>
  <changelog author="suse+build@de-korte.org" date="1676462400">- Update to 0.103.8
  * CVE-2023-20032: Fixed a possible remote code execution vulnerability
    in the HFS+ file parser. Issue affects versions 1.0.0 and earlier,
    0.105.1 and earlier, and 0.103.7 and earlier. (bsc#1208363)
  * CVE-2023-20052: Fixed a possible remote information leak
    vulnerability in the DMG file parser. Issue affects versions 1.0.0
    and earlier, 0.105.1 and earlier, and 0.103.7 and earlier.
    (bsc#1208365)
  * Update vendored libmspack library to version 0.11alpha.
    (bsc#1103032: CVE-2018-14679)
- Package huge .html documentation in a separate subpackage.</changelog>
  <changelog author="suse+build@de-korte.org" date="1692187200">- Update to 0.103.9
  * CVE-2023-20197: Fixed a possible denial of service vulnerability in
    the HFS+ file parser. This issue affects versions 1.1.0, 1.0.1 through
    1.0.0, 0.105.2 through 0.105.0, 0.104.4 through 0.104.0, and 0.103.8
    through 0.103.0. (boo#1214342)
  * Fixed compiler warnings that may turn into errors in Clang 16.</changelog>
  <changelog author="max@suse.com" date="1692360000">- Renew clamav.keyring .</changelog>
  <changelog author="suse+build@de-korte.org" date="1698235200">- Update to 0.103.11
  * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.12.
  * Windows: libjson-c 0.17 compatibility fix. with ssize_t type definition.
  * Windows: Update build system to use OpenSSL 3 and PThreads-Win32 v3.
- Update to 0.103.10
  * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.10.
    (bsc#1216625, CVE-2023-40477)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="max@suse.com" date="1710504000">- New version: 1.3.0:
  * Added support for extracting and scanning attachments found in
    Microsoft OneNote section files. OneNote parsing will be
    enabled by default, but may be optionally disabled.
  * Added file type recognition for compiled Python (`.pyc`) files.
  * Improved support for decrypting PDFs with empty passwords.
  * Fixed a warning when scanning some HTML files.
  * ClamOnAcc: Fixed an infinite loop when a watched directory
    does not exist.
  * ClamOnAcc: Fixed an infinite loop when a file has been deleted
    before a scan.
- New version: 1.2.0:
  * Added support for extracting Universal Disk Format (UDF)
    partitions.
  * Added an option to customize the size of ClamAV's clean file
    cache.
  * Raised the MaxScanSize limit so the total amount of data
    scanned when scanning a file or archive may exceed 4 gigabytes.
  * Added ability for Freshclam to use a client certificate PEM
    file and a private key PEM file for authentication to a private
    mirror.
  * Fix an issue extracting files from ISO9660 partitions where the
    files are listed in the plain ISO tree and there also exists an
    empty Joliet tree.
  * PID and socket are now located under /run/clamav/clamd.pid and
    /run/clamav/clamd.sock .
  * bsc#1211594: Fixed an issue where ClamAV does not abort the
    signature load process after partially loading an invalid
    signature.
- New version 1.1.0:
  * https://blog.clamav.net/2023/05/clamav-110-released.html
  * Added the ability to extract images embedded in HTML CSS
    &lt;style&gt; blocks.
  * Updated to Sigtool so that the --vba option will extract VBA
    code from Microsoft Office documents the same way that
    libclamav extracts VBA.
  * Added a new option --fail-if-cvd-older-than=days to clamscan
    and clamd, and FailIfCvdOlderThan to clamd.conf
  * Added a new function cl_cvdgetage() to the libclamav API.
  * Added a new function cl_engine_set_clcb_vba() to the
    libclamav API.
  * obsoletes clamav-ec32.patch.
- boo#1180296: Integrate clamonacc as a service.
- New version 1.0.1 LTS (including changes in 0.104 and 0.105):
  * As of ClamAV 0.104, CMake is required to build ClamAV.
  * As of ClamAV 0.105, Rust is now required to compile ClamAV.
  * Increased the default limits for file and scan size:
  * MaxScanSize: 100M to 400M
  * MaxFileSize: 25M to 100M
  * StreamMaxLength: 25M to 100M
  * PCREMaxFileSize: 25M to 100M
  * MaxEmbeddedPE: 10M to 40M
  * MaxHTMLNormalize: 10M to 40M
  * MaxScriptNormalize: 5M to 20M
  * MaxHTMLNoTags: 2M to 8M
  * Added image fuzzy hash subsignatures for logical signatures.
  * Support for decrypting read-only OLE2-based XLS files that are
    encrypted with the default password.
  * Overhauled the implementation of the all-match feature.
  * Added a new callback to the public API for inspecting file
    content during a scan at each layer of archive extraction.
  * Added a new function to the public API for unpacking CVD
    signature archives.
  * The option to build with an external TomsFastMath library has
    been removed. ClamAV requires non-default build options for
    TomsFastMath to support bigger floating point numbers.
  * For a full list of changes see the release announcements:
  * https://blog.clamav.net/2022/11/clamav-100-lts-released.html
  * https://blog.clamav.net/2022/05/clamav-01050-01043-01036-released.html
  * https://blog.clamav.net/2021/09/clamav-01040-released.html
- Build clamd with systemd support.
- Fix format strings on 32bit platforms (clamav-format.patch).
- Add missing endianness conversions (clamav-ec32.patch).
- Don't build on armv7l for now due to some test failures.
- Drop clamav-disable-yara.patch as yara cannot be disabled anymore</changelog>
  <changelog author="max@suse.com" date="1713787200">- New Version: 1.3.1:
  * CVE-2024-20380: Fixed a possible crash in the HTML file parser
    that could cause a denial-of-service (DoS) condition.
  * Updated select Rust dependencies to the latest versions.
  * Fixed a bug causing some text to be truncated when converting
    from UTF-16.
  * Fixed assorted complaints identified by Coverity static
    analysis.
  * Fixed a bug causing CVDs downloaded by the DatabaseCustomURL
    Freshclam config option to be pruned and then re-downloaded
    with every update.
  * Added the new 'valhalla' database name to the list of optional
    databases in preparation for future work.</changelog>
  <changelog author="bwiedemann@suse.com" date="1722254400">- Add upstream 1305.patch to fix tests (boo#1102840, https://github.com/Cisco-Talos/clamav/issues/1300)</changelog>
  <changelog author="suse+build@de-korte.org" date="1725451200">- New version 1.3.2:
  * CVE-2024-20506: Changed the logging module to disable following
    symlinks on Linux and Unix systems so as to prevent an attacker
    with existing access to the 'clamd' or 'freshclam' services from
    using a symlink to corrupt system files.
  * CVE-2024-20505: Fixed a possible out-of-bounds read bug in the PDF
    file parser that could cause a denial-of-service condition.
  * Removed unused Python modules from freshclam tests including
    deprecated 'cgi' module that is expected to cause test failures in
    Python 3.13.
  * Fix unit test caused by expiring signing certificate.
  * Fixed a build issue on Windows with newer versions of Rust. Also
    upgraded GitHub Actions imports to fix CI failures.
  * Fixed an unaligned pointer dereference issue on select architectures.
  * Fixes to Jenkins CI pipeline.
- Remove upstreamed 1305.patch</changelog>
  <changelog author="max@suse.com" date="1725969600">- New version 1.4.1:
  * [CVE-2024-20506, bsc#1230162]: Changed the logging module to
    disable following symlinks on Linux and Unix systems so as to
    prevent an attacker with existing access to the 'clamd' or
    'freshclam' services from using a symlink to corrupt system
    files.
  * [CVE-2024-20505, bsc#1230161]: Fixed a possible out-of-bounds
    read bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition.
  * https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html
- New version 1.4.0:
  * Added support for extracting ALZ archives.
  * Added support for extracting LHA/LZH archives.
  * Added the ability to disable image fuzzy hashing, if needed.
    For context, image fuzzy hashing is a detection mechanism
    useful for identifying malware by matching images included with
    the malware or phishing email/document.
  * https://blog.clamav.net/2024/08/clamav-140-feature-release-and-clamav.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734523200">- fix factory submission (clam.tcl, clamscan.log)</changelog>
  <changelog author="max@suse.com" date="1736510400">- bsc#1232242: Start clamonacc with --fdpass to avoid errors due to
  clamd not being able to access user files.</changelog>
  <changelog author="max@suse.com" date="1737547200">- New version 1.4.2:
  * CVE-2025-20128, bsc#1236307: Fixed a possible buffer overflow
    read bug in the OLE2 file parser that could cause a
    denial-of-service (DoS) condition.</changelog>
  <changelog author="max@suse.com" date="1737633600">- Drop the version dependency on libcurl. Building against versions
  older than 7.45 does not fail anymore, but disables support for
  fdpassing in clamonacc. This only affects SLE-12 up to SP3.</changelog>
  <changelog author="max@suse.com" date="1739188800">- bsc#1236949: Fix location of license files.</changelog>
  <changelog author="max@suse.com" date="1742817600">- bsc#1239957: Build with PIE.
- Eliminate some UTF-8 NBSP characters from the changes file.</changelog>
  <changelog author="max@suse.com" date="1748433600">- bsc#1243565: Add clamav-freshclam_test.patch to fix a race
  condition between the mockup servers started by different test
  cases in freshclam_test.py.</changelog>
  <changelog author="suse+build@de-korte.org" date="1750334400">- New version 1.4.3:
  ClamAV 1.4.3 is a patch release with the following fixes:
  * CVE-2025-20260, bsc#1245054: Fixed a possible buffer overflow
    write bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition or enable remote code
    execution. This issue only affects configurations where both:
  - The max file-size scan limit is set greater than or equal to 1024MB.
  - The max scan-size scan limit is set greater than or equal to 1025MB.
    The code flaw was present prior to version 1.0.0, but a change in
    version 1.0.0 that enables larger allocations based on untrusted data
    made it possible to trigger this bug.
    This issue affects all currently supported versions.
  * CVE-2025-20234, bsc#1245055: Fixed a possible buffer overflow
    read bug in the UDF file parser that may write to a temp file
    and thus disclose information, or it may crash and cause a
    denial-of-service (DoS) condition.
    This issue was introduced in version 1.2.0.
  * Fixed a possible use-after-free bug in the Xz decompression module in
    the bundled lzma-sdk library.
    This issue was fixed in the lzma-sdk version 18.03. ClamAV bundles a
    copy of the lzma-sdk with some performance changes specific to
    libclamav, plus select bug fixes like this one in lieu of a full
    upgrade to newer lzma-sdk.
    This issue affects all ClamAV versions at least as far back as 0.99.4.
  * Windows: Fixed a build install issue when a DLL dependency such as
    libcrypto has the exact same name as one provided by the Windows
    operating system.
- Renew clamav.keyring</changelog>
</package>
<package pkgid="34b1994f4df3274cbcce0744d1c1fd187776cb04c3cb2d0f3c29e4fdea31718c" name="clamav-docs-html" arch="noarch">
  <version epoch="0" ver="1.5.1" rel="150600.18.22.1"/>
  <changelog author="max@suse.com" date="1713787200">- New Version: 1.3.1:
  * CVE-2024-20380: Fixed a possible crash in the HTML file parser
    that could cause a denial-of-service (DoS) condition.
  * Updated select Rust dependencies to the latest versions.
  * Fixed a bug causing some text to be truncated when converting
    from UTF-16.
  * Fixed assorted complaints identified by Coverity static
    analysis.
  * Fixed a bug causing CVDs downloaded by the DatabaseCustomURL
    Freshclam config option to be pruned and then re-downloaded
    with every update.
  * Added the new 'valhalla' database name to the list of optional
    databases in preparation for future work.</changelog>
  <changelog author="bwiedemann@suse.com" date="1722254400">- Add upstream 1305.patch to fix tests (boo#1102840, https://github.com/Cisco-Talos/clamav/issues/1300)</changelog>
  <changelog author="suse+build@de-korte.org" date="1725451200">- New version 1.3.2:
  * CVE-2024-20506: Changed the logging module to disable following
    symlinks on Linux and Unix systems so as to prevent an attacker
    with existing access to the 'clamd' or 'freshclam' services from
    using a symlink to corrupt system files.
  * CVE-2024-20505: Fixed a possible out-of-bounds read bug in the PDF
    file parser that could cause a denial-of-service condition.
  * Removed unused Python modules from freshclam tests including
    deprecated 'cgi' module that is expected to cause test failures in
    Python 3.13.
  * Fix unit test caused by expiring signing certificate.
  * Fixed a build issue on Windows with newer versions of Rust. Also
    upgraded GitHub Actions imports to fix CI failures.
  * Fixed an unaligned pointer dereference issue on select architectures.
  * Fixes to Jenkins CI pipeline.
- Remove upstreamed 1305.patch</changelog>
  <changelog author="max@suse.com" date="1725969600">- New version 1.4.1:
  * [CVE-2024-20506, bsc#1230162]: Changed the logging module to
    disable following symlinks on Linux and Unix systems so as to
    prevent an attacker with existing access to the 'clamd' or
    'freshclam' services from using a symlink to corrupt system
    files.
  * [CVE-2024-20505, bsc#1230161]: Fixed a possible out-of-bounds
    read bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition.
  * https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html
- New version 1.4.0:
  * Added support for extracting ALZ archives.
  * Added support for extracting LHA/LZH archives.
  * Added the ability to disable image fuzzy hashing, if needed.
    For context, image fuzzy hashing is a detection mechanism
    useful for identifying malware by matching images included with
    the malware or phishing email/document.
  * https://blog.clamav.net/2024/08/clamav-140-feature-release-and-clamav.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734523200">- fix factory submission (clam.tcl, clamscan.log)</changelog>
  <changelog author="max@suse.com" date="1736510400">- bsc#1232242: Start clamonacc with --fdpass to avoid errors due to
  clamd not being able to access user files.</changelog>
  <changelog author="max@suse.com" date="1737547200">- New version 1.4.2:
  * CVE-2025-20128, bsc#1236307: Fixed a possible buffer overflow
    read bug in the OLE2 file parser that could cause a
    denial-of-service (DoS) condition.</changelog>
  <changelog author="max@suse.com" date="1737633600">- Drop the version dependency on libcurl. Building against versions
  older than 7.45 does not fail anymore, but disables support for
  fdpassing in clamonacc. This only affects SLE-12 up to SP3.</changelog>
  <changelog author="max@suse.com" date="1739188800">- bsc#1236949: Fix location of license files.</changelog>
  <changelog author="max@suse.com" date="1742817600">- bsc#1239957: Build with PIE.
- Eliminate some UTF-8 NBSP characters from the changes file.</changelog>
  <changelog author="max@suse.com" date="1748433600">- bsc#1243565: Add clamav-freshclam_test.patch to fix a race
  condition between the mockup servers started by different test
  cases in freshclam_test.py.</changelog>
  <changelog author="suse+build@de-korte.org" date="1750334400">- New version 1.4.3:
  ClamAV 1.4.3 is a patch release with the following fixes:
  * CVE-2025-20260, bsc#1245054: Fixed a possible buffer overflow
    write bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition or enable remote code
    execution. This issue only affects configurations where both:
  - The max file-size scan limit is set greater than or equal to 1024MB.
  - The max scan-size scan limit is set greater than or equal to 1025MB.
    The code flaw was present prior to version 1.0.0, but a change in
    version 1.0.0 that enables larger allocations based on untrusted data
    made it possible to trigger this bug.
    This issue affects all currently supported versions.
  * CVE-2025-20234, bsc#1245055: Fixed a possible buffer overflow
    read bug in the UDF file parser that may write to a temp file
    and thus disclose information, or it may crash and cause a
    denial-of-service (DoS) condition.
    This issue was introduced in version 1.2.0.
  * Fixed a possible use-after-free bug in the Xz decompression module in
    the bundled lzma-sdk library.
    This issue was fixed in the lzma-sdk version 18.03. ClamAV bundles a
    copy of the lzma-sdk with some performance changes specific to
    libclamav, plus select bug fixes like this one in lieu of a full
    upgrade to newer lzma-sdk.
    This issue affects all ClamAV versions at least as far back as 0.99.4.
  * Windows: Fixed a build install issue when a DLL dependency such as
    libcrypto has the exact same name as one provided by the Windows
    operating system.
- Renew clamav.keyring</changelog>
  <changelog author="max@suse.com" date="1751284800">- bsc#1240363, clamav-disable-administrative-commands.patch: clamd:
  Add an option to toggle SHUTDOWN, RELOAD, STATS and VERSION.</changelog>
  <changelog author="max@suse.com" date="1759924800">- New version 1.5.0:
  * Added checks to determine if an OLE2-based Microsoft Office
    document is encrypted.
  * Added the ability to record URIs found in HTML if the
    generate-JSON-metadata feature is enabled.
  * Added the ability to record URIs found in PDFs if the
    generate-JSON-metadata feature is enabled.
  * Added regex support for the clamd.conf OnAccessExcludePath
    config option.
  * Added CVD signing/verification with external .sign files.
  * Freshclam, ClamD, ClamScan, and Sigtool: Added an option to
    enable FIPS-like limits disabling MD5 and SHA1 from being used
    for verifying digital signatures or for being used to trust a
    file when checking for false positives
  * ClamD: Added an option to disable select administrative
    commands including SHUTDOWN, RELOAD, STATS and VERSION.
  * libclamav: Added extended hashing functions with a "flags"
    parameter that allows the caller to choose if they want to
    bypass FIPS hash algorithm limits.
  * See the release announcement for the full list of changes:
    https://blog.clamav.net/2025/10/clamav-150-released.html
- Obsoleted patches:
  * clamav-freshclam_test.patch
  * clamav-disable-administrative-commands.patch
  * clamav-fips.patch
- Use macros for library versions
- Remove service symlinks: rcclamd, rcfreshclam, rcclamav-milter,
  and clamonacc.
- Use rust 1.86 for SLE-12 and SLE-15-SP2.</changelog>
  <changelog author="max@suse.com" date="1760443200">- Add json-c-json-c-0.18-20240915.tar.gz and link it statically
  into libclamav on SLE-12, because version 0.12 is too old.</changelog>
  <changelog author="max@suse.com" date="1760616000">- New version: 1.5.1:
  * Fixed a significant performance issue when scanning some PE
    files.
  * Fixed an issue recording file entries from a ZIP archive
    central directory which resulted in
    "Heuristics.Limits.Exceeded.MaxFiles" alerts when using the
    ClamScan --alert-exceeds-max command line option or ClamD
    AlertExceedsMax config file option.
  * Improved performance when scanning TNEF email attachments.
  * Fixed an issue with recording metadata for OOXML office
    documents.
  * Fixed an issue with signature matches for VBA in OLE2 office
    documents.
  * Loosened overly restrictive rules for embedded file
    identification and increased the limit for finding PE files
    embedded in other PE files.
  * Fixed an issue with extracting some RAR archives embedded in
    other files.
  * Fixed an issue with calculating fuzzy hashes affecting some
    images by updating the version for several Rust library
    dependencies.</changelog>
  <changelog author="max@suse.com" date="1762257600">- Add clamav-workaround.patch to work around symbol removals in
  version 1.5.0 and 1.5.1.</changelog>
  <changelog author="bwiedemann@suse.com" date="1763208000">- Build with older rust 1.87 for reproducible builds (boo#1249404)</changelog>
  <changelog author="max@suse.com" date="1763726400">- Provide a better fix for boo#1249404 by disabling debug mode.</changelog>
  <changelog author="max@suse.com" date="1764331200">- Fix testsuite error on SLE-15-SP6 by falling back to rust1.86.</changelog>
</package>
<package pkgid="540514d44b28065abd942e15573df3d0d559db8e442c232a03b83e7fc77bc1ce" name="clamav-docs-html" arch="noarch">
  <version epoch="0" ver="1.5.2" rel="150600.18.25.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1734523200">- fix factory submission (clam.tcl, clamscan.log)</changelog>
  <changelog author="max@suse.com" date="1736510400">- bsc#1232242: Start clamonacc with --fdpass to avoid errors due to
  clamd not being able to access user files.</changelog>
  <changelog author="max@suse.com" date="1737547200">- New version 1.4.2:
  * CVE-2025-20128, bsc#1236307: Fixed a possible buffer overflow
    read bug in the OLE2 file parser that could cause a
    denial-of-service (DoS) condition.</changelog>
  <changelog author="max@suse.com" date="1737633600">- Drop the version dependency on libcurl. Building against versions
  older than 7.45 does not fail anymore, but disables support for
  fdpassing in clamonacc. This only affects SLE-12 up to SP3.</changelog>
  <changelog author="max@suse.com" date="1739188800">- bsc#1236949: Fix location of license files.</changelog>
  <changelog author="max@suse.com" date="1742817600">- bsc#1239957: Build with PIE.
- Eliminate some UTF-8 NBSP characters from the changes file.</changelog>
  <changelog author="max@suse.com" date="1748433600">- bsc#1243565: Add clamav-freshclam_test.patch to fix a race
  condition between the mockup servers started by different test
  cases in freshclam_test.py.</changelog>
  <changelog author="suse+build@de-korte.org" date="1750334400">- New version 1.4.3:
  ClamAV 1.4.3 is a patch release with the following fixes:
  * CVE-2025-20260, bsc#1245054: Fixed a possible buffer overflow
    write bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition or enable remote code
    execution. This issue only affects configurations where both:
  - The max file-size scan limit is set greater than or equal to 1024MB.
  - The max scan-size scan limit is set greater than or equal to 1025MB.
    The code flaw was present prior to version 1.0.0, but a change in
    version 1.0.0 that enables larger allocations based on untrusted data
    made it possible to trigger this bug.
    This issue affects all currently supported versions.
  * CVE-2025-20234, bsc#1245055: Fixed a possible buffer overflow
    read bug in the UDF file parser that may write to a temp file
    and thus disclose information, or it may crash and cause a
    denial-of-service (DoS) condition.
    This issue was introduced in version 1.2.0.
  * Fixed a possible use-after-free bug in the Xz decompression module in
    the bundled lzma-sdk library.
    This issue was fixed in the lzma-sdk version 18.03. ClamAV bundles a
    copy of the lzma-sdk with some performance changes specific to
    libclamav, plus select bug fixes like this one in lieu of a full
    upgrade to newer lzma-sdk.
    This issue affects all ClamAV versions at least as far back as 0.99.4.
  * Windows: Fixed a build install issue when a DLL dependency such as
    libcrypto has the exact same name as one provided by the Windows
    operating system.
- Renew clamav.keyring</changelog>
  <changelog author="max@suse.com" date="1751284800">- bsc#1240363, clamav-disable-administrative-commands.patch: clamd:
  Add an option to toggle SHUTDOWN, RELOAD, STATS and VERSION.</changelog>
  <changelog author="max@suse.com" date="1759924800">- New version 1.5.0:
  * Added checks to determine if an OLE2-based Microsoft Office
    document is encrypted.
  * Added the ability to record URIs found in HTML if the
    generate-JSON-metadata feature is enabled.
  * Added the ability to record URIs found in PDFs if the
    generate-JSON-metadata feature is enabled.
  * Added regex support for the clamd.conf OnAccessExcludePath
    config option.
  * Added CVD signing/verification with external .sign files.
  * Freshclam, ClamD, ClamScan, and Sigtool: Added an option to
    enable FIPS-like limits disabling MD5 and SHA1 from being used
    for verifying digital signatures or for being used to trust a
    file when checking for false positives (bsc#1221954).
  * ClamD: Added an option to disable select administrative
    commands including SHUTDOWN, RELOAD, STATS and VERSION.
  * libclamav: Added extended hashing functions with a "flags"
    parameter that allows the caller to choose if they want to
    bypass FIPS hash algorithm limits.
  * See the release announcement for the full list of changes:
    https://blog.clamav.net/2025/10/clamav-150-released.html
- Obsoleted patches:
  * clamav-freshclam_test.patch
  * clamav-disable-administrative-commands.patch
  * clamav-fips.patch
- Use macros for library versions
- Remove service symlinks: rcclamd, rcfreshclam, rcclamav-milter,
  and clamonacc.
- Use rust 1.86 for SLE-12 and SLE-15-SP2.</changelog>
  <changelog author="max@suse.com" date="1760443200">- Add json-c-json-c-0.18-20240915.tar.gz and link it statically
  into libclamav on SLE-12, because version 0.12 is too old.</changelog>
  <changelog author="max@suse.com" date="1760616000">- New version: 1.5.1:
  * Fixed a significant performance issue when scanning some PE
    files.
  * Fixed an issue recording file entries from a ZIP archive
    central directory which resulted in
    "Heuristics.Limits.Exceeded.MaxFiles" alerts when using the
    ClamScan --alert-exceeds-max command line option or ClamD
    AlertExceedsMax config file option.
  * Improved performance when scanning TNEF email attachments.
  * Fixed an issue with recording metadata for OOXML office
    documents.
  * Fixed an issue with signature matches for VBA in OLE2 office
    documents.
  * Loosened overly restrictive rules for embedded file
    identification and increased the limit for finding PE files
    embedded in other PE files.
  * Fixed an issue with extracting some RAR archives embedded in
    other files.
  * Fixed an issue with calculating fuzzy hashes affecting some
    images by updating the version for several Rust library
    dependencies.</changelog>
  <changelog author="max@suse.com" date="1762257600">- Add clamav-workaround.patch to work around symbol removals in
  version 1.5.0 and 1.5.1.</changelog>
  <changelog author="bwiedemann@suse.com" date="1763208000">- Build with older rust 1.87 for reproducible builds (boo#1249404)</changelog>
  <changelog author="max@suse.com" date="1763726400">- Provide a better fix for boo#1249404 by disabling debug mode.</changelog>
  <changelog author="max@suse.com" date="1764331200">- Fix testsuite error on SLE-15-SP6 by falling back to rust1.86.</changelog>
  <changelog author="max@suse.com" date="1770724800">- jsc-PED-14819: Support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1770984000">- bsc#1258072: Require main and library packages to be of the same
  version and release. Given that all the core functionality is
  in the libraries it makes little sense to update the main
  package alone.</changelog>
  <changelog author="max@suse.com" date="1772712000">- New version 1.5.2:
  * bsc#1259207, CVE-2026-20031: Fixed an error handling bug in the
    HTML file parser that may crash the program and cause a
    denial-of-service (DoS) condition. This issue was introduced in
    version 1.1.0.
  * Fixed a possible infinite loop when scanning some JPEG files by
    upgrading affected ClamAV dependency, a Rust image library.
  * The CVD verification process will now ignore certificate files
    in the CVD certs directory when the user lacks read permissions.
  * Freshclam: Fix CLD verification bug with PrivateMirror option.
  * Upgraded the Rust bytes dependency to a newer version to
    resolve RUSTSEC-2026-0007 advisory.
  * Fixed a possible crash caused by invalid pointer alignment on
    some platforms.
  * Minimal required Rust version is now 1.87.</changelog>
  <changelog author="max@suse.com" date="1773316800">- Disable build for 32 bit ix86 because of testsuite failures with
  rust &gt;= 1.87 that upstream is not planning to fix.
- Run the test suite on all SUSE releases.</changelog>
</package>
<package pkgid="07f13e505b7d86becab30e5ee7c7d35394bcd1db06d5a234b30aa7945e06849a" name="clamav-milter" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="150600.18.12.1"/>
  <changelog author="suse+build@de-korte.org" date="1641988800">- Update to 0.103.5
  * CVE-2022-20698: Fix for invalid pointer read that may cause a crash.
    This issue affects 0.104.1, 0.103.4 and prior when ClamAV is compiled
    with libjson-c and the CL_SCAN_GENERAL_COLLECT_METADATA scan option
    (the clamscan --gen-json option) is enabled. (bsc#1194731)
  * Fixed ability to disable the file size limit with libclamav C API,
    like this:
    cl_engine_set_num(engine, CL_ENGINE_MAX_FILESIZE, 0);
    This issue didn't affect ClamD or ClamScan which also can disable the
    limit by setting it to zero using MaxFileSize 0 in clamd.conf for ClamD,
    or clamscan --max-filesize=0 for ClamScan.
    Note: Internally, the max file size is still set to 2 GiB. Disabling the
    limit for a scan will fall back on the internal 2 GiB limitation.
  * Increased the maximum line length for ClamAV config files from 512 bytes
    to 1,024 bytes to allow for longer config option strings.
  * SigTool: Fix insufficient buffer size for --list-sigs that caused a
    failure when listing a database containing one or more very long
    signatures. This fix was backported from 0.104.</changelog>
  <changelog author="meissner@suse.com" date="1649764800">- https source urls</changelog>
  <changelog author="suse+build@de-korte.org" date="1651752000">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
  <changelog author="ecsos@opensuse.org" date="1659700800">- Update to 0.103.7 (bsc#1202986)
  - Zip parser: tolerate 2-byte overlap in file entries
  - Fix bug with logical signature Intermediates feature
  - Update to UnRAR v6.1.7
  - Patch UnRAR: allow skipping files in solid archives
  - Patch UnRAR: limit dict winsize to 1GB</changelog>
  <changelog author="suse+build@de-korte.org" date="1676462400">- Update to 0.103.8
  * CVE-2023-20032: Fixed a possible remote code execution vulnerability
    in the HFS+ file parser. Issue affects versions 1.0.0 and earlier,
    0.105.1 and earlier, and 0.103.7 and earlier. (bsc#1208363)
  * CVE-2023-20052: Fixed a possible remote information leak
    vulnerability in the DMG file parser. Issue affects versions 1.0.0
    and earlier, 0.105.1 and earlier, and 0.103.7 and earlier.
    (bsc#1208365)
  * Update vendored libmspack library to version 0.11alpha.
    (bsc#1103032: CVE-2018-14679)
- Package huge .html documentation in a separate subpackage.</changelog>
  <changelog author="suse+build@de-korte.org" date="1692187200">- Update to 0.103.9
  * CVE-2023-20197: Fixed a possible denial of service vulnerability in
    the HFS+ file parser. This issue affects versions 1.1.0, 1.0.1 through
    1.0.0, 0.105.2 through 0.105.0, 0.104.4 through 0.104.0, and 0.103.8
    through 0.103.0. (boo#1214342)
  * Fixed compiler warnings that may turn into errors in Clang 16.</changelog>
  <changelog author="max@suse.com" date="1692360000">- Renew clamav.keyring .</changelog>
  <changelog author="suse+build@de-korte.org" date="1698235200">- Update to 0.103.11
  * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.12.
  * Windows: libjson-c 0.17 compatibility fix. with ssize_t type definition.
  * Windows: Update build system to use OpenSSL 3 and PThreads-Win32 v3.
- Update to 0.103.10
  * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.10.
    (bsc#1216625, CVE-2023-40477)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="max@suse.com" date="1710504000">- New version: 1.3.0:
  * Added support for extracting and scanning attachments found in
    Microsoft OneNote section files. OneNote parsing will be
    enabled by default, but may be optionally disabled.
  * Added file type recognition for compiled Python (`.pyc`) files.
  * Improved support for decrypting PDFs with empty passwords.
  * Fixed a warning when scanning some HTML files.
  * ClamOnAcc: Fixed an infinite loop when a watched directory
    does not exist.
  * ClamOnAcc: Fixed an infinite loop when a file has been deleted
    before a scan.
- New version: 1.2.0:
  * Added support for extracting Universal Disk Format (UDF)
    partitions.
  * Added an option to customize the size of ClamAV's clean file
    cache.
  * Raised the MaxScanSize limit so the total amount of data
    scanned when scanning a file or archive may exceed 4 gigabytes.
  * Added ability for Freshclam to use a client certificate PEM
    file and a private key PEM file for authentication to a private
    mirror.
  * Fix an issue extracting files from ISO9660 partitions where the
    files are listed in the plain ISO tree and there also exists an
    empty Joliet tree.
  * PID and socket are now located under /run/clamav/clamd.pid and
    /run/clamav/clamd.sock .
  * bsc#1211594: Fixed an issue where ClamAV does not abort the
    signature load process after partially loading an invalid
    signature.
- New version 1.1.0:
  * https://blog.clamav.net/2023/05/clamav-110-released.html
  * Added the ability to extract images embedded in HTML CSS
    &lt;style&gt; blocks.
  * Updated to Sigtool so that the --vba option will extract VBA
    code from Microsoft Office documents the same way that
    libclamav extracts VBA.
  * Added a new option --fail-if-cvd-older-than=days to clamscan
    and clamd, and FailIfCvdOlderThan to clamd.conf
  * Added a new function cl_cvdgetage() to the libclamav API.
  * Added a new function cl_engine_set_clcb_vba() to the
    libclamav API.
  * obsoletes clamav-ec32.patch.
- boo#1180296: Integrate clamonacc as a service.
- New version 1.0.1 LTS (including changes in 0.104 and 0.105):
  * As of ClamAV 0.104, CMake is required to build ClamAV.
  * As of ClamAV 0.105, Rust is now required to compile ClamAV.
  * Increased the default limits for file and scan size:
  * MaxScanSize: 100M to 400M
  * MaxFileSize: 25M to 100M
  * StreamMaxLength: 25M to 100M
  * PCREMaxFileSize: 25M to 100M
  * MaxEmbeddedPE: 10M to 40M
  * MaxHTMLNormalize: 10M to 40M
  * MaxScriptNormalize: 5M to 20M
  * MaxHTMLNoTags: 2M to 8M
  * Added image fuzzy hash subsignatures for logical signatures.
  * Support for decrypting read-only OLE2-based XLS files that are
    encrypted with the default password.
  * Overhauled the implementation of the all-match feature.
  * Added a new callback to the public API for inspecting file
    content during a scan at each layer of archive extraction.
  * Added a new function to the public API for unpacking CVD
    signature archives.
  * The option to build with an external TomsFastMath library has
    been removed. ClamAV requires non-default build options for
    TomsFastMath to support bigger floating point numbers.
  * For a full list of changes see the release announcements:
  * https://blog.clamav.net/2022/11/clamav-100-lts-released.html
  * https://blog.clamav.net/2022/05/clamav-01050-01043-01036-released.html
  * https://blog.clamav.net/2021/09/clamav-01040-released.html
- Build clamd with systemd support.
- Fix format strings on 32bit platforms (clamav-format.patch).
- Add missing endianness conversions (clamav-ec32.patch).
- Don't build on armv7l for now due to some test failures.
- Drop clamav-disable-yara.patch as yara cannot be disabled anymore</changelog>
  <changelog author="max@suse.com" date="1713787200">- New Version: 1.3.1:
  * CVE-2024-20380: Fixed a possible crash in the HTML file parser
    that could cause a denial-of-service (DoS) condition.
  * Updated select Rust dependencies to the latest versions.
  * Fixed a bug causing some text to be truncated when converting
    from UTF-16.
  * Fixed assorted complaints identified by Coverity static
    analysis.
  * Fixed a bug causing CVDs downloaded by the DatabaseCustomURL
    Freshclam config option to be pruned and then re-downloaded
    with every update.
  * Added the new 'valhalla' database name to the list of optional
    databases in preparation for future work.</changelog>
  <changelog author="bwiedemann@suse.com" date="1722254400">- Add upstream 1305.patch to fix tests (boo#1102840, https://github.com/Cisco-Talos/clamav/issues/1300)</changelog>
  <changelog author="suse+build@de-korte.org" date="1725451200">- New version 1.3.2:
  * CVE-2024-20506: Changed the logging module to disable following
    symlinks on Linux and Unix systems so as to prevent an attacker
    with existing access to the 'clamd' or 'freshclam' services from
    using a symlink to corrupt system files.
  * CVE-2024-20505: Fixed a possible out-of-bounds read bug in the PDF
    file parser that could cause a denial-of-service condition.
  * Removed unused Python modules from freshclam tests including
    deprecated 'cgi' module that is expected to cause test failures in
    Python 3.13.
  * Fix unit test caused by expiring signing certificate.
  * Fixed a build issue on Windows with newer versions of Rust. Also
    upgraded GitHub Actions imports to fix CI failures.
  * Fixed an unaligned pointer dereference issue on select architectures.
  * Fixes to Jenkins CI pipeline.
- Remove upstreamed 1305.patch</changelog>
  <changelog author="max@suse.com" date="1725969600">- New version 1.4.1:
  * [CVE-2024-20506, bsc#1230162]: Changed the logging module to
    disable following symlinks on Linux and Unix systems so as to
    prevent an attacker with existing access to the 'clamd' or
    'freshclam' services from using a symlink to corrupt system
    files.
  * [CVE-2024-20505, bsc#1230161]: Fixed a possible out-of-bounds
    read bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition.
  * https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html
- New version 1.4.0:
  * Added support for extracting ALZ archives.
  * Added support for extracting LHA/LZH archives.
  * Added the ability to disable image fuzzy hashing, if needed.
    For context, image fuzzy hashing is a detection mechanism
    useful for identifying malware by matching images included with
    the malware or phishing email/document.
  * https://blog.clamav.net/2024/08/clamav-140-feature-release-and-clamav.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734523200">- fix factory submission (clam.tcl, clamscan.log)</changelog>
  <changelog author="max@suse.com" date="1736510400">- bsc#1232242: Start clamonacc with --fdpass to avoid errors due to
  clamd not being able to access user files.</changelog>
  <changelog author="max@suse.com" date="1737547200">- New version 1.4.2:
  * CVE-2025-20128, bsc#1236307: Fixed a possible buffer overflow
    read bug in the OLE2 file parser that could cause a
    denial-of-service (DoS) condition.</changelog>
  <changelog author="max@suse.com" date="1737633600">- Drop the version dependency on libcurl. Building against versions
  older than 7.45 does not fail anymore, but disables support for
  fdpassing in clamonacc. This only affects SLE-12 up to SP3.</changelog>
  <changelog author="max@suse.com" date="1739188800">- bsc#1236949: Fix location of license files.</changelog>
  <changelog author="max@suse.com" date="1742817600">- bsc#1239957: Build with PIE.
- Eliminate some UTF-8 NBSP characters from the changes file.</changelog>
</package>
<package pkgid="9f9d8ef168e96030f6a1a682ea9c2c2f9f70c1d31fffe7da16353a9f5b86da2e" name="clamav-milter" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="150600.18.15.1"/>
  <changelog author="meissner@suse.com" date="1649764800">- https source urls</changelog>
  <changelog author="suse+build@de-korte.org" date="1651752000">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
  <changelog author="ecsos@opensuse.org" date="1659700800">- Update to 0.103.7 (bsc#1202986)
  - Zip parser: tolerate 2-byte overlap in file entries
  - Fix bug with logical signature Intermediates feature
  - Update to UnRAR v6.1.7
  - Patch UnRAR: allow skipping files in solid archives
  - Patch UnRAR: limit dict winsize to 1GB</changelog>
  <changelog author="suse+build@de-korte.org" date="1676462400">- Update to 0.103.8
  * CVE-2023-20032: Fixed a possible remote code execution vulnerability
    in the HFS+ file parser. Issue affects versions 1.0.0 and earlier,
    0.105.1 and earlier, and 0.103.7 and earlier. (bsc#1208363)
  * CVE-2023-20052: Fixed a possible remote information leak
    vulnerability in the DMG file parser. Issue affects versions 1.0.0
    and earlier, 0.105.1 and earlier, and 0.103.7 and earlier.
    (bsc#1208365)
  * Update vendored libmspack library to version 0.11alpha.
    (bsc#1103032: CVE-2018-14679)
- Package huge .html documentation in a separate subpackage.</changelog>
  <changelog author="suse+build@de-korte.org" date="1692187200">- Update to 0.103.9
  * CVE-2023-20197: Fixed a possible denial of service vulnerability in
    the HFS+ file parser. This issue affects versions 1.1.0, 1.0.1 through
    1.0.0, 0.105.2 through 0.105.0, 0.104.4 through 0.104.0, and 0.103.8
    through 0.103.0. (boo#1214342)
  * Fixed compiler warnings that may turn into errors in Clang 16.</changelog>
  <changelog author="max@suse.com" date="1692360000">- Renew clamav.keyring .</changelog>
  <changelog author="suse+build@de-korte.org" date="1698235200">- Update to 0.103.11
  * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.12.
  * Windows: libjson-c 0.17 compatibility fix. with ssize_t type definition.
  * Windows: Update build system to use OpenSSL 3 and PThreads-Win32 v3.
- Update to 0.103.10
  * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.10.
    (bsc#1216625, CVE-2023-40477)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="max@suse.com" date="1710504000">- New version: 1.3.0:
  * Added support for extracting and scanning attachments found in
    Microsoft OneNote section files. OneNote parsing will be
    enabled by default, but may be optionally disabled.
  * Added file type recognition for compiled Python (`.pyc`) files.
  * Improved support for decrypting PDFs with empty passwords.
  * Fixed a warning when scanning some HTML files.
  * ClamOnAcc: Fixed an infinite loop when a watched directory
    does not exist.
  * ClamOnAcc: Fixed an infinite loop when a file has been deleted
    before a scan.
- New version: 1.2.0:
  * Added support for extracting Universal Disk Format (UDF)
    partitions.
  * Added an option to customize the size of ClamAV's clean file
    cache.
  * Raised the MaxScanSize limit so the total amount of data
    scanned when scanning a file or archive may exceed 4 gigabytes.
  * Added ability for Freshclam to use a client certificate PEM
    file and a private key PEM file for authentication to a private
    mirror.
  * Fix an issue extracting files from ISO9660 partitions where the
    files are listed in the plain ISO tree and there also exists an
    empty Joliet tree.
  * PID and socket are now located under /run/clamav/clamd.pid and
    /run/clamav/clamd.sock .
  * bsc#1211594: Fixed an issue where ClamAV does not abort the
    signature load process after partially loading an invalid
    signature.
- New version 1.1.0:
  * https://blog.clamav.net/2023/05/clamav-110-released.html
  * Added the ability to extract images embedded in HTML CSS
    &lt;style&gt; blocks.
  * Updated to Sigtool so that the --vba option will extract VBA
    code from Microsoft Office documents the same way that
    libclamav extracts VBA.
  * Added a new option --fail-if-cvd-older-than=days to clamscan
    and clamd, and FailIfCvdOlderThan to clamd.conf
  * Added a new function cl_cvdgetage() to the libclamav API.
  * Added a new function cl_engine_set_clcb_vba() to the
    libclamav API.
  * obsoletes clamav-ec32.patch.
- boo#1180296: Integrate clamonacc as a service.
- New version 1.0.1 LTS (including changes in 0.104 and 0.105):
  * As of ClamAV 0.104, CMake is required to build ClamAV.
  * As of ClamAV 0.105, Rust is now required to compile ClamAV.
  * Increased the default limits for file and scan size:
  * MaxScanSize: 100M to 400M
  * MaxFileSize: 25M to 100M
  * StreamMaxLength: 25M to 100M
  * PCREMaxFileSize: 25M to 100M
  * MaxEmbeddedPE: 10M to 40M
  * MaxHTMLNormalize: 10M to 40M
  * MaxScriptNormalize: 5M to 20M
  * MaxHTMLNoTags: 2M to 8M
  * Added image fuzzy hash subsignatures for logical signatures.
  * Support for decrypting read-only OLE2-based XLS files that are
    encrypted with the default password.
  * Overhauled the implementation of the all-match feature.
  * Added a new callback to the public API for inspecting file
    content during a scan at each layer of archive extraction.
  * Added a new function to the public API for unpacking CVD
    signature archives.
  * The option to build with an external TomsFastMath library has
    been removed. ClamAV requires non-default build options for
    TomsFastMath to support bigger floating point numbers.
  * For a full list of changes see the release announcements:
  * https://blog.clamav.net/2022/11/clamav-100-lts-released.html
  * https://blog.clamav.net/2022/05/clamav-01050-01043-01036-released.html
  * https://blog.clamav.net/2021/09/clamav-01040-released.html
- Build clamd with systemd support.
- Fix format strings on 32bit platforms (clamav-format.patch).
- Add missing endianness conversions (clamav-ec32.patch).
- Don't build on armv7l for now due to some test failures.
- Drop clamav-disable-yara.patch as yara cannot be disabled anymore</changelog>
  <changelog author="max@suse.com" date="1713787200">- New Version: 1.3.1:
  * CVE-2024-20380: Fixed a possible crash in the HTML file parser
    that could cause a denial-of-service (DoS) condition.
  * Updated select Rust dependencies to the latest versions.
  * Fixed a bug causing some text to be truncated when converting
    from UTF-16.
  * Fixed assorted complaints identified by Coverity static
    analysis.
  * Fixed a bug causing CVDs downloaded by the DatabaseCustomURL
    Freshclam config option to be pruned and then re-downloaded
    with every update.
  * Added the new 'valhalla' database name to the list of optional
    databases in preparation for future work.</changelog>
  <changelog author="bwiedemann@suse.com" date="1722254400">- Add upstream 1305.patch to fix tests (boo#1102840, https://github.com/Cisco-Talos/clamav/issues/1300)</changelog>
  <changelog author="suse+build@de-korte.org" date="1725451200">- New version 1.3.2:
  * CVE-2024-20506: Changed the logging module to disable following
    symlinks on Linux and Unix systems so as to prevent an attacker
    with existing access to the 'clamd' or 'freshclam' services from
    using a symlink to corrupt system files.
  * CVE-2024-20505: Fixed a possible out-of-bounds read bug in the PDF
    file parser that could cause a denial-of-service condition.
  * Removed unused Python modules from freshclam tests including
    deprecated 'cgi' module that is expected to cause test failures in
    Python 3.13.
  * Fix unit test caused by expiring signing certificate.
  * Fixed a build issue on Windows with newer versions of Rust. Also
    upgraded GitHub Actions imports to fix CI failures.
  * Fixed an unaligned pointer dereference issue on select architectures.
  * Fixes to Jenkins CI pipeline.
- Remove upstreamed 1305.patch</changelog>
  <changelog author="max@suse.com" date="1725969600">- New version 1.4.1:
  * [CVE-2024-20506, bsc#1230162]: Changed the logging module to
    disable following symlinks on Linux and Unix systems so as to
    prevent an attacker with existing access to the 'clamd' or
    'freshclam' services from using a symlink to corrupt system
    files.
  * [CVE-2024-20505, bsc#1230161]: Fixed a possible out-of-bounds
    read bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition.
  * https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html
- New version 1.4.0:
  * Added support for extracting ALZ archives.
  * Added support for extracting LHA/LZH archives.
  * Added the ability to disable image fuzzy hashing, if needed.
    For context, image fuzzy hashing is a detection mechanism
    useful for identifying malware by matching images included with
    the malware or phishing email/document.
  * https://blog.clamav.net/2024/08/clamav-140-feature-release-and-clamav.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734523200">- fix factory submission (clam.tcl, clamscan.log)</changelog>
  <changelog author="max@suse.com" date="1736510400">- bsc#1232242: Start clamonacc with --fdpass to avoid errors due to
  clamd not being able to access user files.</changelog>
  <changelog author="max@suse.com" date="1737547200">- New version 1.4.2:
  * CVE-2025-20128, bsc#1236307: Fixed a possible buffer overflow
    read bug in the OLE2 file parser that could cause a
    denial-of-service (DoS) condition.</changelog>
  <changelog author="max@suse.com" date="1737633600">- Drop the version dependency on libcurl. Building against versions
  older than 7.45 does not fail anymore, but disables support for
  fdpassing in clamonacc. This only affects SLE-12 up to SP3.</changelog>
  <changelog author="max@suse.com" date="1739188800">- bsc#1236949: Fix location of license files.</changelog>
  <changelog author="max@suse.com" date="1742817600">- bsc#1239957: Build with PIE.
- Eliminate some UTF-8 NBSP characters from the changes file.</changelog>
  <changelog author="max@suse.com" date="1748433600">- bsc#1243565: Add clamav-freshclam_test.patch to fix a race
  condition between the mockup servers started by different test
  cases in freshclam_test.py.</changelog>
</package>
<package pkgid="a96715fb9e71371ad0c7fc821951936826fb591cc6d07fe3ad6ea34a814a4a5a" name="clamav-milter" arch="x86_64">
  <version epoch="0" ver="1.4.3" rel="150600.18.18.1"/>
  <changelog author="suse+build@de-korte.org" date="1651752000">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
  <changelog author="ecsos@opensuse.org" date="1659700800">- Update to 0.103.7 (bsc#1202986)
  - Zip parser: tolerate 2-byte overlap in file entries
  - Fix bug with logical signature Intermediates feature
  - Update to UnRAR v6.1.7
  - Patch UnRAR: allow skipping files in solid archives
  - Patch UnRAR: limit dict winsize to 1GB</changelog>
  <changelog author="suse+build@de-korte.org" date="1676462400">- Update to 0.103.8
  * CVE-2023-20032: Fixed a possible remote code execution vulnerability
    in the HFS+ file parser. Issue affects versions 1.0.0 and earlier,
    0.105.1 and earlier, and 0.103.7 and earlier. (bsc#1208363)
  * CVE-2023-20052: Fixed a possible remote information leak
    vulnerability in the DMG file parser. Issue affects versions 1.0.0
    and earlier, 0.105.1 and earlier, and 0.103.7 and earlier.
    (bsc#1208365)
  * Update vendored libmspack library to version 0.11alpha.
    (bsc#1103032: CVE-2018-14679)
- Package huge .html documentation in a separate subpackage.</changelog>
  <changelog author="suse+build@de-korte.org" date="1692187200">- Update to 0.103.9
  * CVE-2023-20197: Fixed a possible denial of service vulnerability in
    the HFS+ file parser. This issue affects versions 1.1.0, 1.0.1 through
    1.0.0, 0.105.2 through 0.105.0, 0.104.4 through 0.104.0, and 0.103.8
    through 0.103.0. (boo#1214342)
  * Fixed compiler warnings that may turn into errors in Clang 16.</changelog>
  <changelog author="max@suse.com" date="1692360000">- Renew clamav.keyring .</changelog>
  <changelog author="suse+build@de-korte.org" date="1698235200">- Update to 0.103.11
  * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.12.
  * Windows: libjson-c 0.17 compatibility fix. with ssize_t type definition.
  * Windows: Update build system to use OpenSSL 3 and PThreads-Win32 v3.
- Update to 0.103.10
  * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.10.
    (bsc#1216625, CVE-2023-40477)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="max@suse.com" date="1710504000">- New version: 1.3.0:
  * Added support for extracting and scanning attachments found in
    Microsoft OneNote section files. OneNote parsing will be
    enabled by default, but may be optionally disabled.
  * Added file type recognition for compiled Python (`.pyc`) files.
  * Improved support for decrypting PDFs with empty passwords.
  * Fixed a warning when scanning some HTML files.
  * ClamOnAcc: Fixed an infinite loop when a watched directory
    does not exist.
  * ClamOnAcc: Fixed an infinite loop when a file has been deleted
    before a scan.
- New version: 1.2.0:
  * Added support for extracting Universal Disk Format (UDF)
    partitions.
  * Added an option to customize the size of ClamAV's clean file
    cache.
  * Raised the MaxScanSize limit so the total amount of data
    scanned when scanning a file or archive may exceed 4 gigabytes.
  * Added ability for Freshclam to use a client certificate PEM
    file and a private key PEM file for authentication to a private
    mirror.
  * Fix an issue extracting files from ISO9660 partitions where the
    files are listed in the plain ISO tree and there also exists an
    empty Joliet tree.
  * PID and socket are now located under /run/clamav/clamd.pid and
    /run/clamav/clamd.sock .
  * bsc#1211594: Fixed an issue where ClamAV does not abort the
    signature load process after partially loading an invalid
    signature.
- New version 1.1.0:
  * https://blog.clamav.net/2023/05/clamav-110-released.html
  * Added the ability to extract images embedded in HTML CSS
    &lt;style&gt; blocks.
  * Updated to Sigtool so that the --vba option will extract VBA
    code from Microsoft Office documents the same way that
    libclamav extracts VBA.
  * Added a new option --fail-if-cvd-older-than=days to clamscan
    and clamd, and FailIfCvdOlderThan to clamd.conf
  * Added a new function cl_cvdgetage() to the libclamav API.
  * Added a new function cl_engine_set_clcb_vba() to the
    libclamav API.
  * obsoletes clamav-ec32.patch.
- boo#1180296: Integrate clamonacc as a service.
- New version 1.0.1 LTS (including changes in 0.104 and 0.105):
  * As of ClamAV 0.104, CMake is required to build ClamAV.
  * As of ClamAV 0.105, Rust is now required to compile ClamAV.
  * Increased the default limits for file and scan size:
  * MaxScanSize: 100M to 400M
  * MaxFileSize: 25M to 100M
  * StreamMaxLength: 25M to 100M
  * PCREMaxFileSize: 25M to 100M
  * MaxEmbeddedPE: 10M to 40M
  * MaxHTMLNormalize: 10M to 40M
  * MaxScriptNormalize: 5M to 20M
  * MaxHTMLNoTags: 2M to 8M
  * Added image fuzzy hash subsignatures for logical signatures.
  * Support for decrypting read-only OLE2-based XLS files that are
    encrypted with the default password.
  * Overhauled the implementation of the all-match feature.
  * Added a new callback to the public API for inspecting file
    content during a scan at each layer of archive extraction.
  * Added a new function to the public API for unpacking CVD
    signature archives.
  * The option to build with an external TomsFastMath library has
    been removed. ClamAV requires non-default build options for
    TomsFastMath to support bigger floating point numbers.
  * For a full list of changes see the release announcements:
  * https://blog.clamav.net/2022/11/clamav-100-lts-released.html
  * https://blog.clamav.net/2022/05/clamav-01050-01043-01036-released.html
  * https://blog.clamav.net/2021/09/clamav-01040-released.html
- Build clamd with systemd support.
- Fix format strings on 32bit platforms (clamav-format.patch).
- Add missing endianness conversions (clamav-ec32.patch).
- Don't build on armv7l for now due to some test failures.
- Drop clamav-disable-yara.patch as yara cannot be disabled anymore</changelog>
  <changelog author="max@suse.com" date="1713787200">- New Version: 1.3.1:
  * CVE-2024-20380: Fixed a possible crash in the HTML file parser
    that could cause a denial-of-service (DoS) condition.
  * Updated select Rust dependencies to the latest versions.
  * Fixed a bug causing some text to be truncated when converting
    from UTF-16.
  * Fixed assorted complaints identified by Coverity static
    analysis.
  * Fixed a bug causing CVDs downloaded by the DatabaseCustomURL
    Freshclam config option to be pruned and then re-downloaded
    with every update.
  * Added the new 'valhalla' database name to the list of optional
    databases in preparation for future work.</changelog>
  <changelog author="bwiedemann@suse.com" date="1722254400">- Add upstream 1305.patch to fix tests (boo#1102840, https://github.com/Cisco-Talos/clamav/issues/1300)</changelog>
  <changelog author="suse+build@de-korte.org" date="1725451200">- New version 1.3.2:
  * CVE-2024-20506: Changed the logging module to disable following
    symlinks on Linux and Unix systems so as to prevent an attacker
    with existing access to the 'clamd' or 'freshclam' services from
    using a symlink to corrupt system files.
  * CVE-2024-20505: Fixed a possible out-of-bounds read bug in the PDF
    file parser that could cause a denial-of-service condition.
  * Removed unused Python modules from freshclam tests including
    deprecated 'cgi' module that is expected to cause test failures in
    Python 3.13.
  * Fix unit test caused by expiring signing certificate.
  * Fixed a build issue on Windows with newer versions of Rust. Also
    upgraded GitHub Actions imports to fix CI failures.
  * Fixed an unaligned pointer dereference issue on select architectures.
  * Fixes to Jenkins CI pipeline.
- Remove upstreamed 1305.patch</changelog>
  <changelog author="max@suse.com" date="1725969600">- New version 1.4.1:
  * [CVE-2024-20506, bsc#1230162]: Changed the logging module to
    disable following symlinks on Linux and Unix systems so as to
    prevent an attacker with existing access to the 'clamd' or
    'freshclam' services from using a symlink to corrupt system
    files.
  * [CVE-2024-20505, bsc#1230161]: Fixed a possible out-of-bounds
    read bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition.
  * https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html
- New version 1.4.0:
  * Added support for extracting ALZ archives.
  * Added support for extracting LHA/LZH archives.
  * Added the ability to disable image fuzzy hashing, if needed.
    For context, image fuzzy hashing is a detection mechanism
    useful for identifying malware by matching images included with
    the malware or phishing email/document.
  * https://blog.clamav.net/2024/08/clamav-140-feature-release-and-clamav.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734523200">- fix factory submission (clam.tcl, clamscan.log)</changelog>
  <changelog author="max@suse.com" date="1736510400">- bsc#1232242: Start clamonacc with --fdpass to avoid errors due to
  clamd not being able to access user files.</changelog>
  <changelog author="max@suse.com" date="1737547200">- New version 1.4.2:
  * CVE-2025-20128, bsc#1236307: Fixed a possible buffer overflow
    read bug in the OLE2 file parser that could cause a
    denial-of-service (DoS) condition.</changelog>
  <changelog author="max@suse.com" date="1737633600">- Drop the version dependency on libcurl. Building against versions
  older than 7.45 does not fail anymore, but disables support for
  fdpassing in clamonacc. This only affects SLE-12 up to SP3.</changelog>
  <changelog author="max@suse.com" date="1739188800">- bsc#1236949: Fix location of license files.</changelog>
  <changelog author="max@suse.com" date="1742817600">- bsc#1239957: Build with PIE.
- Eliminate some UTF-8 NBSP characters from the changes file.</changelog>
  <changelog author="max@suse.com" date="1748433600">- bsc#1243565: Add clamav-freshclam_test.patch to fix a race
  condition between the mockup servers started by different test
  cases in freshclam_test.py.</changelog>
  <changelog author="suse+build@de-korte.org" date="1750334400">- New version 1.4.3:
  ClamAV 1.4.3 is a patch release with the following fixes:
  * CVE-2025-20260, bsc#1245054: Fixed a possible buffer overflow
    write bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition or enable remote code
    execution. This issue only affects configurations where both:
  - The max file-size scan limit is set greater than or equal to 1024MB.
  - The max scan-size scan limit is set greater than or equal to 1025MB.
    The code flaw was present prior to version 1.0.0, but a change in
    version 1.0.0 that enables larger allocations based on untrusted data
    made it possible to trigger this bug.
    This issue affects all currently supported versions.
  * CVE-2025-20234, bsc#1245055: Fixed a possible buffer overflow
    read bug in the UDF file parser that may write to a temp file
    and thus disclose information, or it may crash and cause a
    denial-of-service (DoS) condition.
    This issue was introduced in version 1.2.0.
  * Fixed a possible use-after-free bug in the Xz decompression module in
    the bundled lzma-sdk library.
    This issue was fixed in the lzma-sdk version 18.03. ClamAV bundles a
    copy of the lzma-sdk with some performance changes specific to
    libclamav, plus select bug fixes like this one in lieu of a full
    upgrade to newer lzma-sdk.
    This issue affects all ClamAV versions at least as far back as 0.99.4.
  * Windows: Fixed a build install issue when a DLL dependency such as
    libcrypto has the exact same name as one provided by the Windows
    operating system.
- Renew clamav.keyring</changelog>
</package>
<package pkgid="7c9f5bbdf3b1a02666ecdee177acaf69ca4ec5badb2d02c7736cd084e3f600b3" name="clamav-milter" arch="x86_64">
  <version epoch="0" ver="1.5.1" rel="150600.18.22.1"/>
  <changelog author="max@suse.com" date="1713787200">- New Version: 1.3.1:
  * CVE-2024-20380: Fixed a possible crash in the HTML file parser
    that could cause a denial-of-service (DoS) condition.
  * Updated select Rust dependencies to the latest versions.
  * Fixed a bug causing some text to be truncated when converting
    from UTF-16.
  * Fixed assorted complaints identified by Coverity static
    analysis.
  * Fixed a bug causing CVDs downloaded by the DatabaseCustomURL
    Freshclam config option to be pruned and then re-downloaded
    with every update.
  * Added the new 'valhalla' database name to the list of optional
    databases in preparation for future work.</changelog>
  <changelog author="bwiedemann@suse.com" date="1722254400">- Add upstream 1305.patch to fix tests (boo#1102840, https://github.com/Cisco-Talos/clamav/issues/1300)</changelog>
  <changelog author="suse+build@de-korte.org" date="1725451200">- New version 1.3.2:
  * CVE-2024-20506: Changed the logging module to disable following
    symlinks on Linux and Unix systems so as to prevent an attacker
    with existing access to the 'clamd' or 'freshclam' services from
    using a symlink to corrupt system files.
  * CVE-2024-20505: Fixed a possible out-of-bounds read bug in the PDF
    file parser that could cause a denial-of-service condition.
  * Removed unused Python modules from freshclam tests including
    deprecated 'cgi' module that is expected to cause test failures in
    Python 3.13.
  * Fix unit test caused by expiring signing certificate.
  * Fixed a build issue on Windows with newer versions of Rust. Also
    upgraded GitHub Actions imports to fix CI failures.
  * Fixed an unaligned pointer dereference issue on select architectures.
  * Fixes to Jenkins CI pipeline.
- Remove upstreamed 1305.patch</changelog>
  <changelog author="max@suse.com" date="1725969600">- New version 1.4.1:
  * [CVE-2024-20506, bsc#1230162]: Changed the logging module to
    disable following symlinks on Linux and Unix systems so as to
    prevent an attacker with existing access to the 'clamd' or
    'freshclam' services from using a symlink to corrupt system
    files.
  * [CVE-2024-20505, bsc#1230161]: Fixed a possible out-of-bounds
    read bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition.
  * https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html
- New version 1.4.0:
  * Added support for extracting ALZ archives.
  * Added support for extracting LHA/LZH archives.
  * Added the ability to disable image fuzzy hashing, if needed.
    For context, image fuzzy hashing is a detection mechanism
    useful for identifying malware by matching images included with
    the malware or phishing email/document.
  * https://blog.clamav.net/2024/08/clamav-140-feature-release-and-clamav.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734523200">- fix factory submission (clam.tcl, clamscan.log)</changelog>
  <changelog author="max@suse.com" date="1736510400">- bsc#1232242: Start clamonacc with --fdpass to avoid errors due to
  clamd not being able to access user files.</changelog>
  <changelog author="max@suse.com" date="1737547200">- New version 1.4.2:
  * CVE-2025-20128, bsc#1236307: Fixed a possible buffer overflow
    read bug in the OLE2 file parser that could cause a
    denial-of-service (DoS) condition.</changelog>
  <changelog author="max@suse.com" date="1737633600">- Drop the version dependency on libcurl. Building against versions
  older than 7.45 does not fail anymore, but disables support for
  fdpassing in clamonacc. This only affects SLE-12 up to SP3.</changelog>
  <changelog author="max@suse.com" date="1739188800">- bsc#1236949: Fix location of license files.</changelog>
  <changelog author="max@suse.com" date="1742817600">- bsc#1239957: Build with PIE.
- Eliminate some UTF-8 NBSP characters from the changes file.</changelog>
  <changelog author="max@suse.com" date="1748433600">- bsc#1243565: Add clamav-freshclam_test.patch to fix a race
  condition between the mockup servers started by different test
  cases in freshclam_test.py.</changelog>
  <changelog author="suse+build@de-korte.org" date="1750334400">- New version 1.4.3:
  ClamAV 1.4.3 is a patch release with the following fixes:
  * CVE-2025-20260, bsc#1245054: Fixed a possible buffer overflow
    write bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition or enable remote code
    execution. This issue only affects configurations where both:
  - The max file-size scan limit is set greater than or equal to 1024MB.
  - The max scan-size scan limit is set greater than or equal to 1025MB.
    The code flaw was present prior to version 1.0.0, but a change in
    version 1.0.0 that enables larger allocations based on untrusted data
    made it possible to trigger this bug.
    This issue affects all currently supported versions.
  * CVE-2025-20234, bsc#1245055: Fixed a possible buffer overflow
    read bug in the UDF file parser that may write to a temp file
    and thus disclose information, or it may crash and cause a
    denial-of-service (DoS) condition.
    This issue was introduced in version 1.2.0.
  * Fixed a possible use-after-free bug in the Xz decompression module in
    the bundled lzma-sdk library.
    This issue was fixed in the lzma-sdk version 18.03. ClamAV bundles a
    copy of the lzma-sdk with some performance changes specific to
    libclamav, plus select bug fixes like this one in lieu of a full
    upgrade to newer lzma-sdk.
    This issue affects all ClamAV versions at least as far back as 0.99.4.
  * Windows: Fixed a build install issue when a DLL dependency such as
    libcrypto has the exact same name as one provided by the Windows
    operating system.
- Renew clamav.keyring</changelog>
  <changelog author="max@suse.com" date="1751284800">- bsc#1240363, clamav-disable-administrative-commands.patch: clamd:
  Add an option to toggle SHUTDOWN, RELOAD, STATS and VERSION.</changelog>
  <changelog author="max@suse.com" date="1759924800">- New version 1.5.0:
  * Added checks to determine if an OLE2-based Microsoft Office
    document is encrypted.
  * Added the ability to record URIs found in HTML if the
    generate-JSON-metadata feature is enabled.
  * Added the ability to record URIs found in PDFs if the
    generate-JSON-metadata feature is enabled.
  * Added regex support for the clamd.conf OnAccessExcludePath
    config option.
  * Added CVD signing/verification with external .sign files.
  * Freshclam, ClamD, ClamScan, and Sigtool: Added an option to
    enable FIPS-like limits disabling MD5 and SHA1 from being used
    for verifying digital signatures or for being used to trust a
    file when checking for false positives
  * ClamD: Added an option to disable select administrative
    commands including SHUTDOWN, RELOAD, STATS and VERSION.
  * libclamav: Added extended hashing functions with a "flags"
    parameter that allows the caller to choose if they want to
    bypass FIPS hash algorithm limits.
  * See the release announcement for the full list of changes:
    https://blog.clamav.net/2025/10/clamav-150-released.html
- Obsoleted patches:
  * clamav-freshclam_test.patch
  * clamav-disable-administrative-commands.patch
  * clamav-fips.patch
- Use macros for library versions
- Remove service symlinks: rcclamd, rcfreshclam, rcclamav-milter,
  and clamonacc.
- Use rust 1.86 for SLE-12 and SLE-15-SP2.</changelog>
  <changelog author="max@suse.com" date="1760443200">- Add json-c-json-c-0.18-20240915.tar.gz and link it statically
  into libclamav on SLE-12, because version 0.12 is too old.</changelog>
  <changelog author="max@suse.com" date="1760616000">- New version: 1.5.1:
  * Fixed a significant performance issue when scanning some PE
    files.
  * Fixed an issue recording file entries from a ZIP archive
    central directory which resulted in
    "Heuristics.Limits.Exceeded.MaxFiles" alerts when using the
    ClamScan --alert-exceeds-max command line option or ClamD
    AlertExceedsMax config file option.
  * Improved performance when scanning TNEF email attachments.
  * Fixed an issue with recording metadata for OOXML office
    documents.
  * Fixed an issue with signature matches for VBA in OLE2 office
    documents.
  * Loosened overly restrictive rules for embedded file
    identification and increased the limit for finding PE files
    embedded in other PE files.
  * Fixed an issue with extracting some RAR archives embedded in
    other files.
  * Fixed an issue with calculating fuzzy hashes affecting some
    images by updating the version for several Rust library
    dependencies.</changelog>
  <changelog author="max@suse.com" date="1762257600">- Add clamav-workaround.patch to work around symbol removals in
  version 1.5.0 and 1.5.1.</changelog>
  <changelog author="bwiedemann@suse.com" date="1763208000">- Build with older rust 1.87 for reproducible builds (boo#1249404)</changelog>
  <changelog author="max@suse.com" date="1763726400">- Provide a better fix for boo#1249404 by disabling debug mode.</changelog>
  <changelog author="max@suse.com" date="1764331200">- Fix testsuite error on SLE-15-SP6 by falling back to rust1.86.</changelog>
</package>
<package pkgid="d982a8c73ce36837c480982dbedb49e566033bdb572e26e2262038be657c0177" name="clamav-milter" arch="x86_64">
  <version epoch="0" ver="1.5.2" rel="150600.18.25.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1734523200">- fix factory submission (clam.tcl, clamscan.log)</changelog>
  <changelog author="max@suse.com" date="1736510400">- bsc#1232242: Start clamonacc with --fdpass to avoid errors due to
  clamd not being able to access user files.</changelog>
  <changelog author="max@suse.com" date="1737547200">- New version 1.4.2:
  * CVE-2025-20128, bsc#1236307: Fixed a possible buffer overflow
    read bug in the OLE2 file parser that could cause a
    denial-of-service (DoS) condition.</changelog>
  <changelog author="max@suse.com" date="1737633600">- Drop the version dependency on libcurl. Building against versions
  older than 7.45 does not fail anymore, but disables support for
  fdpassing in clamonacc. This only affects SLE-12 up to SP3.</changelog>
  <changelog author="max@suse.com" date="1739188800">- bsc#1236949: Fix location of license files.</changelog>
  <changelog author="max@suse.com" date="1742817600">- bsc#1239957: Build with PIE.
- Eliminate some UTF-8 NBSP characters from the changes file.</changelog>
  <changelog author="max@suse.com" date="1748433600">- bsc#1243565: Add clamav-freshclam_test.patch to fix a race
  condition between the mockup servers started by different test
  cases in freshclam_test.py.</changelog>
  <changelog author="suse+build@de-korte.org" date="1750334400">- New version 1.4.3:
  ClamAV 1.4.3 is a patch release with the following fixes:
  * CVE-2025-20260, bsc#1245054: Fixed a possible buffer overflow
    write bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition or enable remote code
    execution. This issue only affects configurations where both:
  - The max file-size scan limit is set greater than or equal to 1024MB.
  - The max scan-size scan limit is set greater than or equal to 1025MB.
    The code flaw was present prior to version 1.0.0, but a change in
    version 1.0.0 that enables larger allocations based on untrusted data
    made it possible to trigger this bug.
    This issue affects all currently supported versions.
  * CVE-2025-20234, bsc#1245055: Fixed a possible buffer overflow
    read bug in the UDF file parser that may write to a temp file
    and thus disclose information, or it may crash and cause a
    denial-of-service (DoS) condition.
    This issue was introduced in version 1.2.0.
  * Fixed a possible use-after-free bug in the Xz decompression module in
    the bundled lzma-sdk library.
    This issue was fixed in the lzma-sdk version 18.03. ClamAV bundles a
    copy of the lzma-sdk with some performance changes specific to
    libclamav, plus select bug fixes like this one in lieu of a full
    upgrade to newer lzma-sdk.
    This issue affects all ClamAV versions at least as far back as 0.99.4.
  * Windows: Fixed a build install issue when a DLL dependency such as
    libcrypto has the exact same name as one provided by the Windows
    operating system.
- Renew clamav.keyring</changelog>
  <changelog author="max@suse.com" date="1751284800">- bsc#1240363, clamav-disable-administrative-commands.patch: clamd:
  Add an option to toggle SHUTDOWN, RELOAD, STATS and VERSION.</changelog>
  <changelog author="max@suse.com" date="1759924800">- New version 1.5.0:
  * Added checks to determine if an OLE2-based Microsoft Office
    document is encrypted.
  * Added the ability to record URIs found in HTML if the
    generate-JSON-metadata feature is enabled.
  * Added the ability to record URIs found in PDFs if the
    generate-JSON-metadata feature is enabled.
  * Added regex support for the clamd.conf OnAccessExcludePath
    config option.
  * Added CVD signing/verification with external .sign files.
  * Freshclam, ClamD, ClamScan, and Sigtool: Added an option to
    enable FIPS-like limits disabling MD5 and SHA1 from being used
    for verifying digital signatures or for being used to trust a
    file when checking for false positives (bsc#1221954).
  * ClamD: Added an option to disable select administrative
    commands including SHUTDOWN, RELOAD, STATS and VERSION.
  * libclamav: Added extended hashing functions with a "flags"
    parameter that allows the caller to choose if they want to
    bypass FIPS hash algorithm limits.
  * See the release announcement for the full list of changes:
    https://blog.clamav.net/2025/10/clamav-150-released.html
- Obsoleted patches:
  * clamav-freshclam_test.patch
  * clamav-disable-administrative-commands.patch
  * clamav-fips.patch
- Use macros for library versions
- Remove service symlinks: rcclamd, rcfreshclam, rcclamav-milter,
  and clamonacc.
- Use rust 1.86 for SLE-12 and SLE-15-SP2.</changelog>
  <changelog author="max@suse.com" date="1760443200">- Add json-c-json-c-0.18-20240915.tar.gz and link it statically
  into libclamav on SLE-12, because version 0.12 is too old.</changelog>
  <changelog author="max@suse.com" date="1760616000">- New version: 1.5.1:
  * Fixed a significant performance issue when scanning some PE
    files.
  * Fixed an issue recording file entries from a ZIP archive
    central directory which resulted in
    "Heuristics.Limits.Exceeded.MaxFiles" alerts when using the
    ClamScan --alert-exceeds-max command line option or ClamD
    AlertExceedsMax config file option.
  * Improved performance when scanning TNEF email attachments.
  * Fixed an issue with recording metadata for OOXML office
    documents.
  * Fixed an issue with signature matches for VBA in OLE2 office
    documents.
  * Loosened overly restrictive rules for embedded file
    identification and increased the limit for finding PE files
    embedded in other PE files.
  * Fixed an issue with extracting some RAR archives embedded in
    other files.
  * Fixed an issue with calculating fuzzy hashes affecting some
    images by updating the version for several Rust library
    dependencies.</changelog>
  <changelog author="max@suse.com" date="1762257600">- Add clamav-workaround.patch to work around symbol removals in
  version 1.5.0 and 1.5.1.</changelog>
  <changelog author="bwiedemann@suse.com" date="1763208000">- Build with older rust 1.87 for reproducible builds (boo#1249404)</changelog>
  <changelog author="max@suse.com" date="1763726400">- Provide a better fix for boo#1249404 by disabling debug mode.</changelog>
  <changelog author="max@suse.com" date="1764331200">- Fix testsuite error on SLE-15-SP6 by falling back to rust1.86.</changelog>
  <changelog author="max@suse.com" date="1770724800">- jsc-PED-14819: Support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1770984000">- bsc#1258072: Require main and library packages to be of the same
  version and release. Given that all the core functionality is
  in the libraries it makes little sense to update the main
  package alone.</changelog>
  <changelog author="max@suse.com" date="1772712000">- New version 1.5.2:
  * bsc#1259207, CVE-2026-20031: Fixed an error handling bug in the
    HTML file parser that may crash the program and cause a
    denial-of-service (DoS) condition. This issue was introduced in
    version 1.1.0.
  * Fixed a possible infinite loop when scanning some JPEG files by
    upgrading affected ClamAV dependency, a Rust image library.
  * The CVD verification process will now ignore certificate files
    in the CVD certs directory when the user lacks read permissions.
  * Freshclam: Fix CLD verification bug with PrivateMirror option.
  * Upgraded the Rust bytes dependency to a newer version to
    resolve RUSTSEC-2026-0007 advisory.
  * Fixed a possible crash caused by invalid pointer alignment on
    some platforms.
  * Minimal required Rust version is now 1.87.</changelog>
  <changelog author="max@suse.com" date="1773316800">- Disable build for 32 bit ix86 because of testsuite failures with
  rust &gt;= 1.87 that upstream is not planning to fix.
- Run the test suite on all SUSE releases.</changelog>
</package>
<package pkgid="b2f784b593e54a940790e568ed6664e8b95a110485a8a2ed62c89bf66ea0e376" name="cmake" arch="src">
  <version epoch="0" ver="3.28.3" rel="150600.3.3.1"/>
  <changelog author="foss@grueninger.de" date="1689681600">- Update to 3.27.0
  * “cmake(1)” now supports interactive debugging of the CMake language.
    See the “–debugger” option.
  * The “SKIP_LINTING” source file property was added to suppress
    target-wide code checks on specific sources.
  * The “COMPILE_ONLY” generator expression was added to specify
    compilation usage requirements without any linking requirements.
  * The “FindCUDA” module, which has been deprecated since CMake 3.10,
    has been removed by policy “CMP0146”.
  * The “FindPythonInterp” and “FindPythonLibs” modules, which have been
    deprecated since CMake 3.12, have been removed by policy “CMP0148”.
    Port projects to “FindPython3”, “FindPython2”, or “FindPython”.
  * “cmake –build $dir –verbose” will now print the working directory
    and command line used to perform the build.
- Debug feature introduces new dependency to cppdap which is not
  yet packaged. Thus we use cppdap code provided by CMake.
- Drop cmake-fix-png-include-dir.patch and glibc-236.patch as they
  are included in this release</changelog>
  <changelog author="foss@grueninger.de" date="1690545600">- Update to 3.27.1
  * cmComputeLinkInformation: track OBJECT library dependencies
  * cmTarget: Restore Fortran_PREPROCESS property initialization
  * FindOpenSSL: Prefer OPENSSL_ROOT_DIR only if non-empty
  * CTest: Fix regression in calculating test timeout</changelog>
  <changelog author="foss@grueninger.de" date="1691841600">- update to 3.27.2
  * Tests: Remove redundant condition in RunCMake.GeneratorPlatform
    test
  * file(GENERATE): Restore INPUT|CONTENT parse checking
  * cmList: Fix performance regression in append/prepend</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1692792000">- update to 3.27.4:
  * Fix support for Intel compiler with modern GNU system compiler
  * Graphviz: Restore support for per-target dependency graph options
  * FindOpenSSL: Fix OpenSSL 3.0.0 version extraction</changelog>
  <changelog author="info@paolostivanin.com" date="1694779200">- update to 3.27.5:
  * cmGeneratorTarget: support config-independent Fortran source queries
  * cmComputeLinkInformation: compute link info for module-using targets
  * FortranCInterface: forward CMAKE_OSX_DEPLOYMENT_TARGET
  * cxxmodules: detect and message about non-compiled sources
  * Source: Link libatomic when needed on any Linux architecture
  * Help: MSVC_DEBUG_INFORMATION_FORMAT is initialized from associated variable
  * FindBoost: Add support for Boost 1.83
  * Autogen: Evaluate INTERFACE_AUTOMOC_MACRO_NAMES efficiently
  * VS: Avoid unnecessary CUDA device linking for OBJECT libraries</changelog>
  <changelog author="info@paolostivanin.com" date="1697198400">- update to 3.27.7:
  * Tests: Clarify RunCMake.CTestTimeout case name
  * ctest: Restore support for --timeout values higher than default test timeout
  * Help: Document CMP0124 behavior on already-set variables
  * FindPostgreSQL: Add support for version 16</changelog>
  <changelog author="dmueller@suse.com" date="1701086400">- update to 3.27.8 (bsc#1215888, CVE-2023-38545):
  * cmComputeLinkDepends: also copy the target from object link items
  * cmComputeLinkInformation: skip over linking to items for object purposes
  * Fortran: Restore support for TARGET_OBJECTS providing modules
  * curl: Backport SOCKS5 heap buffer overflow fix from curl 8.4.0
  * GetPrerequisites: Revert “Ignore relative paths printed by ldd”
  * cmCommonTargetGenerator: Factor out GetLinkedTargetDirectories loop body
  * cmComputeLinkInformation: Track targets named by TARGET_OBJECTS sources
  * FindOpenMP: Add support for openmp 5.1 (llvm 17) and 5.2</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1701259200">- update to 3.27.9:
  * cmake-file-api(7) "codemodel" version 2 "target" object fileSets
    field was introduced by CMake 3.26.0 with entries of its
    baseDirectories member incorrectly expressed as absolute paths
    even if they are inside the top-level source directory, now
    fixed. Clients must be updated to expect relative paths under
    the top-level source directory.
  * Fortran: Revert 3.27.0 change to module dependency scanning</changelog>
  <changelog author="foss@grueninger.de" date="1701864000">- update to 3.28.0
  * C++ 20 named modules are now supported by Ninja Generators, in
    combination with LLVM/Clang 16.0 and newer, and GCC 14 (after
    the 2023-09-20 daily bump) and newer.
  * "HIP" language code may now be compiled for NVIDIA GPUs using
    the NVIDIA CUDA Compiler (NVCC).
  * The "exec_program()" command, which has been deprecated since
    CMake 3.0, has been removed by policy "CMP0153". Use the
    "execute_process()" command instead.
  * Generated files, in targets using File Sets, are now considered
    private by default.  Generated public headers must be specified
    using file sets.
  * The "find_library()", "find_path()", and "find_file()" commands no
    longer search in installation prefixes derived from the "PATH"
    environment variable.</changelog>
  <changelog author="foss@grueninger.de" date="1702555200">- update to 3.28.1
  * cmGeneratorTarget: disable C++ module scanning for verify targets
  * cmQtAutoGenInitializer: disable C++ module scanning for autogen sources
  * cmLocalGenerator: disable C++ module scanning for copied PCH sources
  * cmLocalGenerator: disable C++ module scanning for unity sources
  * cmGlobalXCodeGenerator: disable C++ module scanning for force-lang files
  * FindFreetype: always find the config module quietly
  * FindFreetype: also consider RelWithDebInfo-built libraries
  * FindTIFF: always find the config module quietly
  * FindTIFF: consider `IMPLIB`-using platforms
  * FindCUDAToolkit: Fix stub library representation on reconfigure
  * FindMatlab: Fix regression on Windows Registry lookup failure
  * FindFreetype: Fix success message when config module is found
  * FindTIFF: Restore support for projects that do not enable CMP0057
  * FindMatlab: Fix processing of multiple versions from Windows Registry</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1703678400">- Re-add "-Wl,--no-undefined" linker flags for executables and
  regular shared libraries. Shared library targets which are used
  as plugins/modules should use `add_library(... MODULE ...), which
  uses the "CMAKE_MODULE_LINKER_FLAGS".</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- A quick note for the bots that boo#1217009 is already fixed
  in tumbleweed</changelog>
  <changelog author="msuchanek@suse.com" date="1704974401">- Use new enough Sphinx on SLE (jsc#PED-7572 boo#1218125).</changelog>
  <changelog author="bjorn.bidar@thaodan.de" date="1705492800">- macros: Set some more variables notable %{_docdir} so that GNUInstallDirs
  works fully on openSUSE. Packages using CMAKE_INSTALL_DOCDIR fail otherwise.</changelog>
  <changelog author="lnussel@suse.com" date="1705579200">- Revert "-Wl,--no-undefined" as it still breaks packages (boo#1218620)</changelog>
  <changelog author="dmueller@suse.com" date="1705665600">- fix incorrect requires on libuv1 on non-suse distributions</changelog>
  <changelog author="fstrba@suse.com" date="1707912000">- Added patch:
  * cmake-zerojvm.patch
    + fix JVM detection on JDKs with ZERO virtual machine, like
    java-21-openjdk for armv6l</changelog>
  <changelog author="msuchanek@suse.com" date="1708603200">- Fix python dependencies: python 3.11 is only needed for build (boo#1218125).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1708862400">- update to 3.28.3:
  * Fixes for Freetype with ZLIB, execute_process, Autogen, Matlab,
    and various bugs</changelog>
  <changelog author="sflees@suse.de" date="1755864000">- Assertion failure due to improper validation of iteration variable
  counts in the foreach command processing logic
  (bsc#1248461, CVE-2025-9301)</changelog>
</package>
<package pkgid="9c7a21c1e4ddea32daa90dab705f9ec289decaa94131a88cc60874f9e86fd450" name="cmake" arch="x86_64">
  <version epoch="0" ver="3.28.3" rel="150600.3.3.1"/>
  <changelog author="foss@grueninger.de" date="1689681600">- Update to 3.27.0
  * “cmake(1)” now supports interactive debugging of the CMake language.
    See the “–debugger” option.
  * The “SKIP_LINTING” source file property was added to suppress
    target-wide code checks on specific sources.
  * The “COMPILE_ONLY” generator expression was added to specify
    compilation usage requirements without any linking requirements.
  * The “FindCUDA” module, which has been deprecated since CMake 3.10,
    has been removed by policy “CMP0146”.
  * The “FindPythonInterp” and “FindPythonLibs” modules, which have been
    deprecated since CMake 3.12, have been removed by policy “CMP0148”.
    Port projects to “FindPython3”, “FindPython2”, or “FindPython”.
  * “cmake –build $dir –verbose” will now print the working directory
    and command line used to perform the build.
- Debug feature introduces new dependency to cppdap which is not
  yet packaged. Thus we use cppdap code provided by CMake.
- Drop cmake-fix-png-include-dir.patch and glibc-236.patch as they
  are included in this release</changelog>
  <changelog author="foss@grueninger.de" date="1690545600">- Update to 3.27.1
  * cmComputeLinkInformation: track OBJECT library dependencies
  * cmTarget: Restore Fortran_PREPROCESS property initialization
  * FindOpenSSL: Prefer OPENSSL_ROOT_DIR only if non-empty
  * CTest: Fix regression in calculating test timeout</changelog>
  <changelog author="foss@grueninger.de" date="1691841600">- update to 3.27.2
  * Tests: Remove redundant condition in RunCMake.GeneratorPlatform
    test
  * file(GENERATE): Restore INPUT|CONTENT parse checking
  * cmList: Fix performance regression in append/prepend</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1692792000">- update to 3.27.4:
  * Fix support for Intel compiler with modern GNU system compiler
  * Graphviz: Restore support for per-target dependency graph options
  * FindOpenSSL: Fix OpenSSL 3.0.0 version extraction</changelog>
  <changelog author="info@paolostivanin.com" date="1694779200">- update to 3.27.5:
  * cmGeneratorTarget: support config-independent Fortran source queries
  * cmComputeLinkInformation: compute link info for module-using targets
  * FortranCInterface: forward CMAKE_OSX_DEPLOYMENT_TARGET
  * cxxmodules: detect and message about non-compiled sources
  * Source: Link libatomic when needed on any Linux architecture
  * Help: MSVC_DEBUG_INFORMATION_FORMAT is initialized from associated variable
  * FindBoost: Add support for Boost 1.83
  * Autogen: Evaluate INTERFACE_AUTOMOC_MACRO_NAMES efficiently
  * VS: Avoid unnecessary CUDA device linking for OBJECT libraries</changelog>
  <changelog author="info@paolostivanin.com" date="1697198400">- update to 3.27.7:
  * Tests: Clarify RunCMake.CTestTimeout case name
  * ctest: Restore support for --timeout values higher than default test timeout
  * Help: Document CMP0124 behavior on already-set variables
  * FindPostgreSQL: Add support for version 16</changelog>
  <changelog author="dmueller@suse.com" date="1701086400">- update to 3.27.8 (bsc#1215888, CVE-2023-38545):
  * cmComputeLinkDepends: also copy the target from object link items
  * cmComputeLinkInformation: skip over linking to items for object purposes
  * Fortran: Restore support for TARGET_OBJECTS providing modules
  * curl: Backport SOCKS5 heap buffer overflow fix from curl 8.4.0
  * GetPrerequisites: Revert “Ignore relative paths printed by ldd”
  * cmCommonTargetGenerator: Factor out GetLinkedTargetDirectories loop body
  * cmComputeLinkInformation: Track targets named by TARGET_OBJECTS sources
  * FindOpenMP: Add support for openmp 5.1 (llvm 17) and 5.2</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1701259200">- update to 3.27.9:
  * cmake-file-api(7) "codemodel" version 2 "target" object fileSets
    field was introduced by CMake 3.26.0 with entries of its
    baseDirectories member incorrectly expressed as absolute paths
    even if they are inside the top-level source directory, now
    fixed. Clients must be updated to expect relative paths under
    the top-level source directory.
  * Fortran: Revert 3.27.0 change to module dependency scanning</changelog>
  <changelog author="foss@grueninger.de" date="1701864000">- update to 3.28.0
  * C++ 20 named modules are now supported by Ninja Generators, in
    combination with LLVM/Clang 16.0 and newer, and GCC 14 (after
    the 2023-09-20 daily bump) and newer.
  * "HIP" language code may now be compiled for NVIDIA GPUs using
    the NVIDIA CUDA Compiler (NVCC).
  * The "exec_program()" command, which has been deprecated since
    CMake 3.0, has been removed by policy "CMP0153". Use the
    "execute_process()" command instead.
  * Generated files, in targets using File Sets, are now considered
    private by default.  Generated public headers must be specified
    using file sets.
  * The "find_library()", "find_path()", and "find_file()" commands no
    longer search in installation prefixes derived from the "PATH"
    environment variable.</changelog>
  <changelog author="foss@grueninger.de" date="1702555200">- update to 3.28.1
  * cmGeneratorTarget: disable C++ module scanning for verify targets
  * cmQtAutoGenInitializer: disable C++ module scanning for autogen sources
  * cmLocalGenerator: disable C++ module scanning for copied PCH sources
  * cmLocalGenerator: disable C++ module scanning for unity sources
  * cmGlobalXCodeGenerator: disable C++ module scanning for force-lang files
  * FindFreetype: always find the config module quietly
  * FindFreetype: also consider RelWithDebInfo-built libraries
  * FindTIFF: always find the config module quietly
  * FindTIFF: consider `IMPLIB`-using platforms
  * FindCUDAToolkit: Fix stub library representation on reconfigure
  * FindMatlab: Fix regression on Windows Registry lookup failure
  * FindFreetype: Fix success message when config module is found
  * FindTIFF: Restore support for projects that do not enable CMP0057
  * FindMatlab: Fix processing of multiple versions from Windows Registry</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1703678400">- Re-add "-Wl,--no-undefined" linker flags for executables and
  regular shared libraries. Shared library targets which are used
  as plugins/modules should use `add_library(... MODULE ...), which
  uses the "CMAKE_MODULE_LINKER_FLAGS".</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- A quick note for the bots that boo#1217009 is already fixed
  in tumbleweed</changelog>
  <changelog author="msuchanek@suse.com" date="1704974401">- Use new enough Sphinx on SLE (jsc#PED-7572 boo#1218125).</changelog>
  <changelog author="bjorn.bidar@thaodan.de" date="1705492800">- macros: Set some more variables notable %{_docdir} so that GNUInstallDirs
  works fully on openSUSE. Packages using CMAKE_INSTALL_DOCDIR fail otherwise.</changelog>
  <changelog author="lnussel@suse.com" date="1705579200">- Revert "-Wl,--no-undefined" as it still breaks packages (boo#1218620)</changelog>
  <changelog author="dmueller@suse.com" date="1705665600">- fix incorrect requires on libuv1 on non-suse distributions</changelog>
  <changelog author="fstrba@suse.com" date="1707912000">- Added patch:
  * cmake-zerojvm.patch
    + fix JVM detection on JDKs with ZERO virtual machine, like
    java-21-openjdk for armv6l</changelog>
  <changelog author="msuchanek@suse.com" date="1708603200">- Fix python dependencies: python 3.11 is only needed for build (boo#1218125).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1708862400">- update to 3.28.3:
  * Fixes for Freetype with ZLIB, execute_process, Autogen, Matlab,
    and various bugs</changelog>
  <changelog author="sflees@suse.de" date="1755864000">- Assertion failure due to improper validation of iteration variable
  counts in the foreach command processing logic
  (bsc#1248461, CVE-2025-9301)</changelog>
</package>
<package pkgid="32a521fa4209c5f40829c8ca6867b2762eb2e26019d992d123342fb7eaa1f2de" name="cmake-full" arch="src">
  <version epoch="0" ver="3.28.3" rel="150600.3.3.1"/>
  <changelog author="foss@grueninger.de" date="1689681600">- Update to 3.27.0
  * “cmake(1)” now supports interactive debugging of the CMake language.
    See the “–debugger” option.
  * The “SKIP_LINTING” source file property was added to suppress
    target-wide code checks on specific sources.
  * The “COMPILE_ONLY” generator expression was added to specify
    compilation usage requirements without any linking requirements.
  * The “FindCUDA” module, which has been deprecated since CMake 3.10,
    has been removed by policy “CMP0146”.
  * The “FindPythonInterp” and “FindPythonLibs” modules, which have been
    deprecated since CMake 3.12, have been removed by policy “CMP0148”.
    Port projects to “FindPython3”, “FindPython2”, or “FindPython”.
  * “cmake –build $dir –verbose” will now print the working directory
    and command line used to perform the build.
- Debug feature introduces new dependency to cppdap which is not
  yet packaged. Thus we use cppdap code provided by CMake.
- Drop cmake-fix-png-include-dir.patch and glibc-236.patch as they
  are included in this release</changelog>
  <changelog author="foss@grueninger.de" date="1690545600">- Update to 3.27.1
  * cmComputeLinkInformation: track OBJECT library dependencies
  * cmTarget: Restore Fortran_PREPROCESS property initialization
  * FindOpenSSL: Prefer OPENSSL_ROOT_DIR only if non-empty
  * CTest: Fix regression in calculating test timeout</changelog>
  <changelog author="foss@grueninger.de" date="1691841600">- update to 3.27.2
  * Tests: Remove redundant condition in RunCMake.GeneratorPlatform
    test
  * file(GENERATE): Restore INPUT|CONTENT parse checking
  * cmList: Fix performance regression in append/prepend</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1692792000">- update to 3.27.4:
  * Fix support for Intel compiler with modern GNU system compiler
  * Graphviz: Restore support for per-target dependency graph options
  * FindOpenSSL: Fix OpenSSL 3.0.0 version extraction</changelog>
  <changelog author="info@paolostivanin.com" date="1694779200">- update to 3.27.5:
  * cmGeneratorTarget: support config-independent Fortran source queries
  * cmComputeLinkInformation: compute link info for module-using targets
  * FortranCInterface: forward CMAKE_OSX_DEPLOYMENT_TARGET
  * cxxmodules: detect and message about non-compiled sources
  * Source: Link libatomic when needed on any Linux architecture
  * Help: MSVC_DEBUG_INFORMATION_FORMAT is initialized from associated variable
  * FindBoost: Add support for Boost 1.83
  * Autogen: Evaluate INTERFACE_AUTOMOC_MACRO_NAMES efficiently
  * VS: Avoid unnecessary CUDA device linking for OBJECT libraries</changelog>
  <changelog author="info@paolostivanin.com" date="1697198400">- update to 3.27.7:
  * Tests: Clarify RunCMake.CTestTimeout case name
  * ctest: Restore support for --timeout values higher than default test timeout
  * Help: Document CMP0124 behavior on already-set variables
  * FindPostgreSQL: Add support for version 16</changelog>
  <changelog author="dmueller@suse.com" date="1701086400">- update to 3.27.8 (bsc#1215888, CVE-2023-38545):
  * cmComputeLinkDepends: also copy the target from object link items
  * cmComputeLinkInformation: skip over linking to items for object purposes
  * Fortran: Restore support for TARGET_OBJECTS providing modules
  * curl: Backport SOCKS5 heap buffer overflow fix from curl 8.4.0
  * GetPrerequisites: Revert “Ignore relative paths printed by ldd”
  * cmCommonTargetGenerator: Factor out GetLinkedTargetDirectories loop body
  * cmComputeLinkInformation: Track targets named by TARGET_OBJECTS sources
  * FindOpenMP: Add support for openmp 5.1 (llvm 17) and 5.2</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1701259200">- update to 3.27.9:
  * cmake-file-api(7) "codemodel" version 2 "target" object fileSets
    field was introduced by CMake 3.26.0 with entries of its
    baseDirectories member incorrectly expressed as absolute paths
    even if they are inside the top-level source directory, now
    fixed. Clients must be updated to expect relative paths under
    the top-level source directory.
  * Fortran: Revert 3.27.0 change to module dependency scanning</changelog>
  <changelog author="foss@grueninger.de" date="1701864000">- update to 3.28.0
  * C++ 20 named modules are now supported by Ninja Generators, in
    combination with LLVM/Clang 16.0 and newer, and GCC 14 (after
    the 2023-09-20 daily bump) and newer.
  * "HIP" language code may now be compiled for NVIDIA GPUs using
    the NVIDIA CUDA Compiler (NVCC).
  * The "exec_program()" command, which has been deprecated since
    CMake 3.0, has been removed by policy "CMP0153". Use the
    "execute_process()" command instead.
  * Generated files, in targets using File Sets, are now considered
    private by default.  Generated public headers must be specified
    using file sets.
  * The "find_library()", "find_path()", and "find_file()" commands no
    longer search in installation prefixes derived from the "PATH"
    environment variable.</changelog>
  <changelog author="foss@grueninger.de" date="1702555200">- update to 3.28.1
  * cmGeneratorTarget: disable C++ module scanning for verify targets
  * cmQtAutoGenInitializer: disable C++ module scanning for autogen sources
  * cmLocalGenerator: disable C++ module scanning for copied PCH sources
  * cmLocalGenerator: disable C++ module scanning for unity sources
  * cmGlobalXCodeGenerator: disable C++ module scanning for force-lang files
  * FindFreetype: always find the config module quietly
  * FindFreetype: also consider RelWithDebInfo-built libraries
  * FindTIFF: always find the config module quietly
  * FindTIFF: consider `IMPLIB`-using platforms
  * FindCUDAToolkit: Fix stub library representation on reconfigure
  * FindMatlab: Fix regression on Windows Registry lookup failure
  * FindFreetype: Fix success message when config module is found
  * FindTIFF: Restore support for projects that do not enable CMP0057
  * FindMatlab: Fix processing of multiple versions from Windows Registry</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1703678400">- Re-add "-Wl,--no-undefined" linker flags for executables and
  regular shared libraries. Shared library targets which are used
  as plugins/modules should use `add_library(... MODULE ...), which
  uses the "CMAKE_MODULE_LINKER_FLAGS".</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- A quick note for the bots that boo#1217009 is already fixed
  in tumbleweed</changelog>
  <changelog author="msuchanek@suse.com" date="1704974401">- Use new enough Sphinx on SLE (jsc#PED-7572 boo#1218125).</changelog>
  <changelog author="bjorn.bidar@thaodan.de" date="1705492800">- macros: Set some more variables notable %{_docdir} so that GNUInstallDirs
  works fully on openSUSE. Packages using CMAKE_INSTALL_DOCDIR fail otherwise.</changelog>
  <changelog author="lnussel@suse.com" date="1705579200">- Revert "-Wl,--no-undefined" as it still breaks packages (boo#1218620)</changelog>
  <changelog author="dmueller@suse.com" date="1705665600">- fix incorrect requires on libuv1 on non-suse distributions</changelog>
  <changelog author="fstrba@suse.com" date="1707912000">- Added patch:
  * cmake-zerojvm.patch
    + fix JVM detection on JDKs with ZERO virtual machine, like
    java-21-openjdk for armv6l</changelog>
  <changelog author="msuchanek@suse.com" date="1708603200">- Fix python dependencies: python 3.11 is only needed for build (boo#1218125).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1708862400">- update to 3.28.3:
  * Fixes for Freetype with ZLIB, execute_process, Autogen, Matlab,
    and various bugs</changelog>
  <changelog author="sflees@suse.de" date="1755864000">- Assertion failure due to improper validation of iteration variable
  counts in the foreach command processing logic
  (bsc#1248461, CVE-2025-9301)</changelog>
</package>
<package pkgid="e0342dd72fd29f713caa6309e083910597e6b8632223c2ff400b598dd207bfed" name="cmake-full" arch="x86_64">
  <version epoch="0" ver="3.28.3" rel="150600.3.3.1"/>
  <changelog author="foss@grueninger.de" date="1689681600">- Update to 3.27.0
  * “cmake(1)” now supports interactive debugging of the CMake language.
    See the “–debugger” option.
  * The “SKIP_LINTING” source file property was added to suppress
    target-wide code checks on specific sources.
  * The “COMPILE_ONLY” generator expression was added to specify
    compilation usage requirements without any linking requirements.
  * The “FindCUDA” module, which has been deprecated since CMake 3.10,
    has been removed by policy “CMP0146”.
  * The “FindPythonInterp” and “FindPythonLibs” modules, which have been
    deprecated since CMake 3.12, have been removed by policy “CMP0148”.
    Port projects to “FindPython3”, “FindPython2”, or “FindPython”.
  * “cmake –build $dir –verbose” will now print the working directory
    and command line used to perform the build.
- Debug feature introduces new dependency to cppdap which is not
  yet packaged. Thus we use cppdap code provided by CMake.
- Drop cmake-fix-png-include-dir.patch and glibc-236.patch as they
  are included in this release</changelog>
  <changelog author="foss@grueninger.de" date="1690545600">- Update to 3.27.1
  * cmComputeLinkInformation: track OBJECT library dependencies
  * cmTarget: Restore Fortran_PREPROCESS property initialization
  * FindOpenSSL: Prefer OPENSSL_ROOT_DIR only if non-empty
  * CTest: Fix regression in calculating test timeout</changelog>
  <changelog author="foss@grueninger.de" date="1691841600">- update to 3.27.2
  * Tests: Remove redundant condition in RunCMake.GeneratorPlatform
    test
  * file(GENERATE): Restore INPUT|CONTENT parse checking
  * cmList: Fix performance regression in append/prepend</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1692792000">- update to 3.27.4:
  * Fix support for Intel compiler with modern GNU system compiler
  * Graphviz: Restore support for per-target dependency graph options
  * FindOpenSSL: Fix OpenSSL 3.0.0 version extraction</changelog>
  <changelog author="info@paolostivanin.com" date="1694779200">- update to 3.27.5:
  * cmGeneratorTarget: support config-independent Fortran source queries
  * cmComputeLinkInformation: compute link info for module-using targets
  * FortranCInterface: forward CMAKE_OSX_DEPLOYMENT_TARGET
  * cxxmodules: detect and message about non-compiled sources
  * Source: Link libatomic when needed on any Linux architecture
  * Help: MSVC_DEBUG_INFORMATION_FORMAT is initialized from associated variable
  * FindBoost: Add support for Boost 1.83
  * Autogen: Evaluate INTERFACE_AUTOMOC_MACRO_NAMES efficiently
  * VS: Avoid unnecessary CUDA device linking for OBJECT libraries</changelog>
  <changelog author="info@paolostivanin.com" date="1697198400">- update to 3.27.7:
  * Tests: Clarify RunCMake.CTestTimeout case name
  * ctest: Restore support for --timeout values higher than default test timeout
  * Help: Document CMP0124 behavior on already-set variables
  * FindPostgreSQL: Add support for version 16</changelog>
  <changelog author="dmueller@suse.com" date="1701086400">- update to 3.27.8 (bsc#1215888, CVE-2023-38545):
  * cmComputeLinkDepends: also copy the target from object link items
  * cmComputeLinkInformation: skip over linking to items for object purposes
  * Fortran: Restore support for TARGET_OBJECTS providing modules
  * curl: Backport SOCKS5 heap buffer overflow fix from curl 8.4.0
  * GetPrerequisites: Revert “Ignore relative paths printed by ldd”
  * cmCommonTargetGenerator: Factor out GetLinkedTargetDirectories loop body
  * cmComputeLinkInformation: Track targets named by TARGET_OBJECTS sources
  * FindOpenMP: Add support for openmp 5.1 (llvm 17) and 5.2</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1701259200">- update to 3.27.9:
  * cmake-file-api(7) "codemodel" version 2 "target" object fileSets
    field was introduced by CMake 3.26.0 with entries of its
    baseDirectories member incorrectly expressed as absolute paths
    even if they are inside the top-level source directory, now
    fixed. Clients must be updated to expect relative paths under
    the top-level source directory.
  * Fortran: Revert 3.27.0 change to module dependency scanning</changelog>
  <changelog author="foss@grueninger.de" date="1701864000">- update to 3.28.0
  * C++ 20 named modules are now supported by Ninja Generators, in
    combination with LLVM/Clang 16.0 and newer, and GCC 14 (after
    the 2023-09-20 daily bump) and newer.
  * "HIP" language code may now be compiled for NVIDIA GPUs using
    the NVIDIA CUDA Compiler (NVCC).
  * The "exec_program()" command, which has been deprecated since
    CMake 3.0, has been removed by policy "CMP0153". Use the
    "execute_process()" command instead.
  * Generated files, in targets using File Sets, are now considered
    private by default.  Generated public headers must be specified
    using file sets.
  * The "find_library()", "find_path()", and "find_file()" commands no
    longer search in installation prefixes derived from the "PATH"
    environment variable.</changelog>
  <changelog author="foss@grueninger.de" date="1702555200">- update to 3.28.1
  * cmGeneratorTarget: disable C++ module scanning for verify targets
  * cmQtAutoGenInitializer: disable C++ module scanning for autogen sources
  * cmLocalGenerator: disable C++ module scanning for copied PCH sources
  * cmLocalGenerator: disable C++ module scanning for unity sources
  * cmGlobalXCodeGenerator: disable C++ module scanning for force-lang files
  * FindFreetype: always find the config module quietly
  * FindFreetype: also consider RelWithDebInfo-built libraries
  * FindTIFF: always find the config module quietly
  * FindTIFF: consider `IMPLIB`-using platforms
  * FindCUDAToolkit: Fix stub library representation on reconfigure
  * FindMatlab: Fix regression on Windows Registry lookup failure
  * FindFreetype: Fix success message when config module is found
  * FindTIFF: Restore support for projects that do not enable CMP0057
  * FindMatlab: Fix processing of multiple versions from Windows Registry</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1703678400">- Re-add "-Wl,--no-undefined" linker flags for executables and
  regular shared libraries. Shared library targets which are used
  as plugins/modules should use `add_library(... MODULE ...), which
  uses the "CMAKE_MODULE_LINKER_FLAGS".</changelog>
  <changelog author="sflees@suse.de" date="1704974400">- A quick note for the bots that boo#1217009 is already fixed
  in tumbleweed</changelog>
  <changelog author="msuchanek@suse.com" date="1704974401">- Use new enough Sphinx on SLE (jsc#PED-7572 boo#1218125).</changelog>
  <changelog author="bjorn.bidar@thaodan.de" date="1705492800">- macros: Set some more variables notable %{_docdir} so that GNUInstallDirs
  works fully on openSUSE. Packages using CMAKE_INSTALL_DOCDIR fail otherwise.</changelog>
  <changelog author="lnussel@suse.com" date="1705579200">- Revert "-Wl,--no-undefined" as it still breaks packages (boo#1218620)</changelog>
  <changelog author="dmueller@suse.com" date="1705665600">- fix incorrect requires on libuv1 on non-suse distributions</changelog>
  <changelog author="fstrba@suse.com" date="1707912000">- Added patch:
  * cmake-zerojvm.patch
    + fix JVM detection on JDKs with ZERO virtual machine, like
    java-21-openjdk for armv6l</changelog>
  <changelog author="msuchanek@suse.com" date="1708603200">- Fix python dependencies: python 3.11 is only needed for build (boo#1218125).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1708862400">- update to 3.28.3:
  * Fixes for Freetype with ZLIB, execute_process, Autogen, Matlab,
    and various bugs</changelog>
  <changelog author="sflees@suse.de" date="1755864000">- Assertion failure due to improper validation of iteration variable
  counts in the foreach command processing logic
  (bsc#1248461, CVE-2025-9301)</changelog>
</package>
<package pkgid="afd8668520574ebd81f04ebf2bc38bad4c38aa65d054af26c0c6a49f7f95ed41" name="colord" arch="src">
  <version epoch="0" ver="1.4.6" rel="150600.3.8.1"/>
  <changelog author="dimstar@opensuse.org" date="1507291200">- Collapse files section for gtk-doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520942400">- Update to version 1.4.2:
  + New Features:
  - Add cd_icc_set_created.
  - Add --enable-timestamps option for CREATED header.
  + Bugfixes:
  - Avoid buffer overflow when reading profile_id.
  - Fix the detection of duplicate EDIDs.
  - Make udev hwdb optional by using pnp.ids as fallback.
  - Raise _XOPEN_SOURCE to 700 to enable C99 on FreeBSD.
  - Refactor build directory selection.
  - Set cd-create-profile date to SOURCE_DATE_EPOCH.
- Pass new option enable-udev-rules=true to meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524398400">- Update to version 1.4.3:
  + Bugfixes:
  - Make cd_color_get_blackbody_rgb_full safer.
  - Update style of Meson build options.
  - Update warning about running daemon as root.
- Update options passed to meson following upstream changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1549886400">- Fix meson parameters: -Dargyllcms-sensor=true must be
  - Dargyllcms_sensor=true (boo#1124388).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1561550400">- Change BuildRequires to docbook-utils-minimal, otherwise the build
  pulls in half of texlive and all its dependencies. Only man pages
  and HTML API docs are generated, no need for PS/PDF generation.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1570536000">- Also allow /var/lib/colord/icc/ in AppArmor profile (boo#1112230)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 1.4.4:
  + New Features:
  - Actually install the installed tests.
  - Allow building without the daemon.
  + Bugfixes:
  - Consistently search for spotread in $PATH.
  - Don't hard-require spotread to build argyll sensor.
  - Fix linker argument checks.
  - Include C header in Colorhug-1.0.gir.
  - Pass -DCD_COMPILATION to gir compiler.
  - Port manpages to xsltproc and DocBook 5.
- Replace docbook-utils-minimal with docbook5-xsl-stylesheets
  BuildRequires following upstreams port.
- Add _constraints file, avoid random buildfails for i586 and other
  arches.</changelog>
  <changelog author="rbrown@suse.com" date="1575460800">- Add add-spyderx.patch for datacolor SpyderX supprot (will be in
  version 1.4.5).
- Move colord-session.service and tmpfiles config from
  libcolord-devel to colord package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610020800">- Update to version 1.4.5:
  + New Features:
  - Add cd_icc_create_default_full
  - Add cd_icc_utils_get_adaptation_matrix
  - Add cd_mat33_is_finite
  - Add support for datacolor SpyderX
  + Bugfixes:
  - Check for errors from more sqlite calls
  - Fix cd_icc_load_data() annotation for the data array
  - Fix cd-sensor-dummy
  - Fix more annotation for data arrays
  - Fix owner and permissions on existing state files
  - Fix segfault due to dereferencing NULL pointer
  - Make the build reproductible
  - Refactor opening of mapping database and try again if fails
- Drop add-spyderx.patch: Included upstream in new release.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1610625600">- allow access to /usr/local/share/color in AppArmor profile (boo#1180898)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1637409600">- Change to systemd-sysusers</changelog>
  <changelog author="jsegitz@suse.com" date="1639396800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_colord.service.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1648209600">- Update to version 1.4.6:
  + Add missing copyright notices.
  + Add Spyder X entry.
  + Document where to send patches.
  + Don't use exact floating point comparisons.
  + Drop option for removed reverse engineering tools.
  + Drop references to hughski.com.
  + Fix a small memory leak in sqlite3_exec().
  + Fix typo in device-removed signal documentation.
  + Make introspection optional in meson.
- Drop -Dreverse=false meson parameter: no longer supported.
- Fix a few rpmlint warnings:
  + Do not self-obsolete shared-color-profiles by providing the
    symbol with a version.
  + Call +%tmpfiles_create %{_tmpfilesdir}/colord.conf in %post.
  + Package /usr/share/bash-completion/completions/colormgr with
    mode 644: the files are not executed, but sourced.
  + Own %{_localstatedir}/lib/colord/icc (ghost): this directory is
    generated by %tmpfiles_create.</changelog>
  <changelog author="mgorse@suse.com" date="1663329600">- Add colord-CVE-2021-42523.patch: fix a small memory leak on db
  open failure (boo#1202802 CVE-2021-42523).</changelog>
  <changelog author="fcrozat@suse.com" date="1683288000">- Tune _constraints for various architectures.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- Reduce memory constraints for riscv64</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1725451200">- Remove script in %pre to change ownership of /var/lib/colord
  (bsc#1208056).</changelog>
  <changelog author="mgorse@suse.com" date="1759406400">- Rework colord-CVE-2021-42523.patch based on what is now upstream.
  The original fix was wrong and did not properly free the error,
  resulting in a crash (bsc#1250750).</changelog>
</package>
<package pkgid="650bbfb844bae790fa12d9d6bd126bddf3e49117cc95ba2b618d93cf9619299c" name="containerd" arch="src">
  <version epoch="0" ver="1.7.29" rel="150000.128.1"/>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt;
  Includes fixes for:
  - CVE-2022-1996 bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
  <changelog author="dcermak@suse.com" date="1705320000">- Enable manpage generation
- Make devel package noarch
- adjust rpmlint filters</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="eyadlorenzo@gmail.com" date="1713700800">- Use obs_scm service instead of tar_scm
- Removed patch 0002-shim-Create-pid-file-with-0644-permissions.patch
  (merged upstream at
  &lt;https://github.com/containerd/containerd/pull/9571&gt;)
- Update to containerd v1.7.15. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.15&gt;
- Update to containerd v1.7.14. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.14&gt;
- Update to containerd v1.7.13. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.13&gt;
- Update to containerd v1.7.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.12&gt;
- Update to containerd v1.7.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.11&gt;
  GHSA-jq35-85cj-fj4p bsc#1224323</changelog>
  <changelog author="asarai@suse.com" date="1716379200">- Update to containerd v1.7.17. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.17&gt;
- Switch back to using tar_scm service. Aside from obs_scm using more bandwidth
  and storage than a locally-compressed tar.xz, it seems there's some weird
  issue with paths in obscpio that break our SLE-12-only patch.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch
- Update to containerd v1.7.16. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.16&gt;
  CVE-2023-45288 bsc#1221400</changelog>
  <changelog author="dcermak@suse.com" date="1719230400">- Revert noarch for devel subpackage for SLE 15
  Switching to noarch causes issues on SLES maintenance updates, reverting it
  fixes our image builds</changelog>
  <changelog author="asarai@suse.com" date="1725537600">- Update to containerd v1.7.21. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.21&gt;
  Fixes CVE-2023-47108. bsc#1217070
  Fixes CVE-2023-45142. bsc#1228553
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1726056000">- Update to containerd v1.7.22. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.22&gt;
- Bump minimum Go version to 1.22.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1730116800">- Update to containerd v1.7.23. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.23&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1736683200">- Update to containerd v1.7.25. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.25&gt;
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.24&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1740744000">- Update to containerd v1.7.26. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.26&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1744200000">- Update to containerd v1.7.27. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.27&gt;
  bsc#1239749 CVE-2024-40635
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1753531200">- Update to containerd v1.7.28. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.28&gt;</changelog>
  <changelog author="asarai@suse.com" date="1762689600">- Update to containerd v1.7.29. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.29&gt;
  * CVE-2024-25621 bsc#1253126
  * CVE-2025-64329 bsc#1253132
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
</package>
<package pkgid="de98e4caa9d4d15786f5ec6a38d2382ad316d1ab4a06dfb9e26936b92bfec492" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.7.29" rel="150000.128.1"/>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt;
  Includes fixes for:
  - CVE-2022-1996 bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
  <changelog author="dcermak@suse.com" date="1705320000">- Enable manpage generation
- Make devel package noarch
- adjust rpmlint filters</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="eyadlorenzo@gmail.com" date="1713700800">- Use obs_scm service instead of tar_scm
- Removed patch 0002-shim-Create-pid-file-with-0644-permissions.patch
  (merged upstream at
  &lt;https://github.com/containerd/containerd/pull/9571&gt;)
- Update to containerd v1.7.15. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.15&gt;
- Update to containerd v1.7.14. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.14&gt;
- Update to containerd v1.7.13. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.13&gt;
- Update to containerd v1.7.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.12&gt;
- Update to containerd v1.7.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.11&gt;
  GHSA-jq35-85cj-fj4p bsc#1224323</changelog>
  <changelog author="asarai@suse.com" date="1716379200">- Update to containerd v1.7.17. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.17&gt;
- Switch back to using tar_scm service. Aside from obs_scm using more bandwidth
  and storage than a locally-compressed tar.xz, it seems there's some weird
  issue with paths in obscpio that break our SLE-12-only patch.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch
- Update to containerd v1.7.16. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.16&gt;
  CVE-2023-45288 bsc#1221400</changelog>
  <changelog author="dcermak@suse.com" date="1719230400">- Revert noarch for devel subpackage for SLE 15
  Switching to noarch causes issues on SLES maintenance updates, reverting it
  fixes our image builds</changelog>
  <changelog author="asarai@suse.com" date="1725537600">- Update to containerd v1.7.21. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.21&gt;
  Fixes CVE-2023-47108. bsc#1217070
  Fixes CVE-2023-45142. bsc#1228553
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1726056000">- Update to containerd v1.7.22. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.22&gt;
- Bump minimum Go version to 1.22.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1730116800">- Update to containerd v1.7.23. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.23&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1736683200">- Update to containerd v1.7.25. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.25&gt;
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.24&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1740744000">- Update to containerd v1.7.26. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.26&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1744200000">- Update to containerd v1.7.27. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.27&gt;
  bsc#1239749 CVE-2024-40635
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1753531200">- Update to containerd v1.7.28. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.28&gt;</changelog>
  <changelog author="asarai@suse.com" date="1762689600">- Update to containerd v1.7.29. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.29&gt;
  * CVE-2024-25621 bsc#1253126
  * CVE-2025-64329 bsc#1253132
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
</package>
<package pkgid="eeb3dd051e171c090a738e920c75c0dc07099eaa97c88361ddfc4ac127c01b19" name="containerd" arch="src">
  <version epoch="0" ver="1.7.29" rel="150000.130.1"/>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt;
  Includes fixes for:
  - CVE-2022-1996 bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
  <changelog author="dcermak@suse.com" date="1705320000">- Enable manpage generation
- Make devel package noarch
- adjust rpmlint filters</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="eyadlorenzo@gmail.com" date="1713700800">- Use obs_scm service instead of tar_scm
- Removed patch 0002-shim-Create-pid-file-with-0644-permissions.patch
  (merged upstream at
  &lt;https://github.com/containerd/containerd/pull/9571&gt;)
- Update to containerd v1.7.15. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.15&gt;
- Update to containerd v1.7.14. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.14&gt;
- Update to containerd v1.7.13. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.13&gt;
- Update to containerd v1.7.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.12&gt;
- Update to containerd v1.7.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.11&gt;
  GHSA-jq35-85cj-fj4p bsc#1224323</changelog>
  <changelog author="asarai@suse.com" date="1716379200">- Update to containerd v1.7.17. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.17&gt;
- Switch back to using tar_scm service. Aside from obs_scm using more bandwidth
  and storage than a locally-compressed tar.xz, it seems there's some weird
  issue with paths in obscpio that break our SLE-12-only patch.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch
- Update to containerd v1.7.16. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.16&gt;
  CVE-2023-45288 bsc#1221400</changelog>
  <changelog author="dcermak@suse.com" date="1719230400">- Revert noarch for devel subpackage for SLE 15
  Switching to noarch causes issues on SLES maintenance updates, reverting it
  fixes our image builds</changelog>
  <changelog author="asarai@suse.com" date="1725537600">- Update to containerd v1.7.21. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.21&gt;
  Fixes CVE-2023-47108. bsc#1217070
  Fixes CVE-2023-45142. bsc#1228553
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1726056000">- Update to containerd v1.7.22. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.22&gt;
- Bump minimum Go version to 1.22.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1730116800">- Update to containerd v1.7.23. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.23&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1736683200">- Update to containerd v1.7.25. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.25&gt;
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.24&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1740744000">- Update to containerd v1.7.26. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.26&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1744200000">- Update to containerd v1.7.27. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.27&gt;
  bsc#1239749 CVE-2024-40635
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1753531200">- Update to containerd v1.7.28. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.28&gt;</changelog>
  <changelog author="asarai@suse.com" date="1762689600">- Update to containerd v1.7.29. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.29&gt;
  * CVE-2024-25621 bsc#1253126
  * CVE-2025-64329 bsc#1253132
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
</package>
<package pkgid="3ce84b42e015d014d3050016cc36135c552d2f0e518113be11cf69cd1f921cde" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.7.29" rel="150000.130.1"/>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt;
  Includes fixes for:
  - CVE-2022-1996 bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
  <changelog author="dcermak@suse.com" date="1705320000">- Enable manpage generation
- Make devel package noarch
- adjust rpmlint filters</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="eyadlorenzo@gmail.com" date="1713700800">- Use obs_scm service instead of tar_scm
- Removed patch 0002-shim-Create-pid-file-with-0644-permissions.patch
  (merged upstream at
  &lt;https://github.com/containerd/containerd/pull/9571&gt;)
- Update to containerd v1.7.15. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.15&gt;
- Update to containerd v1.7.14. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.14&gt;
- Update to containerd v1.7.13. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.13&gt;
- Update to containerd v1.7.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.12&gt;
- Update to containerd v1.7.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.11&gt;
  GHSA-jq35-85cj-fj4p bsc#1224323</changelog>
  <changelog author="asarai@suse.com" date="1716379200">- Update to containerd v1.7.17. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.17&gt;
- Switch back to using tar_scm service. Aside from obs_scm using more bandwidth
  and storage than a locally-compressed tar.xz, it seems there's some weird
  issue with paths in obscpio that break our SLE-12-only patch.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch
- Update to containerd v1.7.16. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.16&gt;
  CVE-2023-45288 bsc#1221400</changelog>
  <changelog author="dcermak@suse.com" date="1719230400">- Revert noarch for devel subpackage for SLE 15
  Switching to noarch causes issues on SLES maintenance updates, reverting it
  fixes our image builds</changelog>
  <changelog author="asarai@suse.com" date="1725537600">- Update to containerd v1.7.21. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.21&gt;
  Fixes CVE-2023-47108. bsc#1217070
  Fixes CVE-2023-45142. bsc#1228553
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1726056000">- Update to containerd v1.7.22. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.22&gt;
- Bump minimum Go version to 1.22.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1730116800">- Update to containerd v1.7.23. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.23&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1736683200">- Update to containerd v1.7.25. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.25&gt;
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.24&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1740744000">- Update to containerd v1.7.26. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.26&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1744200000">- Update to containerd v1.7.27. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.27&gt;
  bsc#1239749 CVE-2024-40635
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1753531200">- Update to containerd v1.7.28. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.28&gt;</changelog>
  <changelog author="asarai@suse.com" date="1762689600">- Update to containerd v1.7.29. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.29&gt;
  * CVE-2024-25621 bsc#1253126
  * CVE-2025-64329 bsc#1253132
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
</package>
<package pkgid="28b86a12662c44737559b68a0d3c3630df6b4c1dc83a3be22bea78b5c370e0ba" name="containerd" arch="src">
  <version epoch="0" ver="1.7.29" rel="150000.132.1"/>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt;
  Includes fixes for:
  - CVE-2022-1996 bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
  <changelog author="dcermak@suse.com" date="1705320000">- Enable manpage generation
- Make devel package noarch
- adjust rpmlint filters</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="eyadlorenzo@gmail.com" date="1713700800">- Use obs_scm service instead of tar_scm
- Removed patch 0002-shim-Create-pid-file-with-0644-permissions.patch
  (merged upstream at
  &lt;https://github.com/containerd/containerd/pull/9571&gt;)
- Update to containerd v1.7.15. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.15&gt;
- Update to containerd v1.7.14. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.14&gt;
- Update to containerd v1.7.13. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.13&gt;
- Update to containerd v1.7.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.12&gt;
- Update to containerd v1.7.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.11&gt;
  GHSA-jq35-85cj-fj4p bsc#1224323</changelog>
  <changelog author="asarai@suse.com" date="1716379200">- Update to containerd v1.7.17. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.17&gt;
- Switch back to using tar_scm service. Aside from obs_scm using more bandwidth
  and storage than a locally-compressed tar.xz, it seems there's some weird
  issue with paths in obscpio that break our SLE-12-only patch.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch
- Update to containerd v1.7.16. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.16&gt;
  CVE-2023-45288 bsc#1221400</changelog>
  <changelog author="dcermak@suse.com" date="1719230400">- Revert noarch for devel subpackage for SLE 15
  Switching to noarch causes issues on SLES maintenance updates, reverting it
  fixes our image builds</changelog>
  <changelog author="asarai@suse.com" date="1725537600">- Update to containerd v1.7.21. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.21&gt;
  Fixes CVE-2023-47108. bsc#1217070
  Fixes CVE-2023-45142. bsc#1228553
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1726056000">- Update to containerd v1.7.22. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.22&gt;
- Bump minimum Go version to 1.22.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1730116800">- Update to containerd v1.7.23. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.23&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1736683200">- Update to containerd v1.7.25. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.25&gt;
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.24&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1740744000">- Update to containerd v1.7.26. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.26&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1744200000">- Update to containerd v1.7.27. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.27&gt;
  bsc#1239749 CVE-2024-40635
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1753531200">- Update to containerd v1.7.28. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.28&gt;</changelog>
  <changelog author="asarai@suse.com" date="1762689600">- Update to containerd v1.7.29. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.29&gt;
  * CVE-2024-25621 bsc#1253126
  * CVE-2025-64329 bsc#1253132
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
</package>
<package pkgid="8ee80dda3afbb133c6b0eb56c9355a1161854873cce42c9e2fc3275911ace22e" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.7.29" rel="150000.132.1"/>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt;
  Includes fixes for:
  - CVE-2022-1996 bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
  <changelog author="dcermak@suse.com" date="1705320000">- Enable manpage generation
- Make devel package noarch
- adjust rpmlint filters</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="eyadlorenzo@gmail.com" date="1713700800">- Use obs_scm service instead of tar_scm
- Removed patch 0002-shim-Create-pid-file-with-0644-permissions.patch
  (merged upstream at
  &lt;https://github.com/containerd/containerd/pull/9571&gt;)
- Update to containerd v1.7.15. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.15&gt;
- Update to containerd v1.7.14. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.14&gt;
- Update to containerd v1.7.13. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.13&gt;
- Update to containerd v1.7.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.12&gt;
- Update to containerd v1.7.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.11&gt;
  GHSA-jq35-85cj-fj4p bsc#1224323</changelog>
  <changelog author="asarai@suse.com" date="1716379200">- Update to containerd v1.7.17. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.17&gt;
- Switch back to using tar_scm service. Aside from obs_scm using more bandwidth
  and storage than a locally-compressed tar.xz, it seems there's some weird
  issue with paths in obscpio that break our SLE-12-only patch.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch
- Update to containerd v1.7.16. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.16&gt;
  CVE-2023-45288 bsc#1221400</changelog>
  <changelog author="dcermak@suse.com" date="1719230400">- Revert noarch for devel subpackage for SLE 15
  Switching to noarch causes issues on SLES maintenance updates, reverting it
  fixes our image builds</changelog>
  <changelog author="asarai@suse.com" date="1725537600">- Update to containerd v1.7.21. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.21&gt;
  Fixes CVE-2023-47108. bsc#1217070
  Fixes CVE-2023-45142. bsc#1228553
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1726056000">- Update to containerd v1.7.22. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.22&gt;
- Bump minimum Go version to 1.22.
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1730116800">- Update to containerd v1.7.23. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.23&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1736683200">- Update to containerd v1.7.25. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.25&gt;
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.24&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1740744000">- Update to containerd v1.7.26. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.26&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1744200000">- Update to containerd v1.7.27. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.27&gt;
  bsc#1239749 CVE-2024-40635
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1753531200">- Update to containerd v1.7.28. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.28&gt;</changelog>
  <changelog author="asarai@suse.com" date="1762689600">- Update to containerd v1.7.29. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.29&gt;
  * CVE-2024-25621 bsc#1253126
  * CVE-2025-64329 bsc#1253132
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
</package>
<package pkgid="f9a800a6fc0b274864f3829c0edfd912df5e897c1c5d19505785826cfb68c586" name="coreutils" arch="src">
  <version epoch="0" ver="8.32" rel="150400.9.9.1"/>
  <changelog author="ghe@suse.com" date="1502884800">- Drop coreutils-ocfs2_reflinks.patch
  OCFS2 file system has supported file clone ioctls like btrfs,
  then, coreutils doesn't need this patch from the kernel v4.10-rc1</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1504526400">- Update to 8.28
  (for details see included NEWS file)
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.keyring: Update from upstream (Savannah).
- Remove now-upstream patches:
  * coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch
  * coreutils-tests-port-to-timezone-2017a.patch
- coreutils.spec: Add "BuildRequires: user(bin)" for the tests.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1514462400">- Update to 8.29:
  * Noteworthy changes in release 8.29 (2017-12-27) [stable]
  * * Bug fixes
  b2sum no longer crashes when processing certain truncated check files.
  [bug introduced with b2sum coreutils-8.26]
  dd now ensures the correct cache ranges are specified for the "nocache"
  and "direct" flags.  Previously some pages in the page cache were not
  invalidated.  [bug introduced for "direct" in coreutils-7.5,
  and with the "nocache" implementation in coreutils-8.11]
  df no longer hangs when given a fifo argument.
  [bug introduced in coreutils-7.3]
  ptx -S no longer infloops for a pattern which returns zero-length matches.
  [the bug dates back to the initial implementation]
  shred --remove will again repeatedly rename files with shortening names
  to attempt to hide the original length of the file name.
  [bug introduced in coreutils-8.28]
  stty no longer crashes when processing settings with -F also specified.
  [bug introduced in fileutils-4.0]
  tail --bytes again supports non seekable inputs on all systems.
  On systems like android it always tried to process as seekable inputs.
  [bug introduced in coreutils-8.24]
  timeout will again notice its managed command exiting, even when
  invoked with blocked CHLD signal, or in a narrow window where
  this CHLD signal from the exiting child was missed.  In each case
  timeout would have then waited for the time limit to expire.
  [bug introduced in coreutils-8.27]
  * * New features
  timeout now supports the --verbose option to diagnose forced termination.
  * * Improvements
  dd now supports iflag=direct with arbitrary sized files on all file systems.
  tail --bytes=NUM will efficiently seek to the end of block devices,
  rather than reading from the start.
  Utilities which do not support long options (other than the default --help
  and --version), e.g. cksum and sleep, now use more consistent error diagnostic
  for unknown long options.
  * * Build-related
  Default man pages are now distributed which are used if perl is
  not available on the build system, or when cross compiling.
- Refresh patches (line number changes only):
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1530619200">- Update to 8.30:
  * Noteworthy changes in release 8.30 (2018-07-01) [stable]
  * * Bug fixes
  'cp --symlink SRC DST' will again correctly validate DST.
  If DST is a regular file and SRC is a symlink to DST,
  then cp will no longer allow that operation to clobber DST.
  Also with -d, if DST is a symlink, then it can always be replaced,
  even if it points to SRC on a separate device.
  [bugs introduced with coreutils-8.27]
  'cp -n -u' and 'mv -n -u' now consistently ignore the -u option.
  Previously, this option combination suffered from race conditions
  that caused -u to sometimes override -n.
  [bug introduced with coreutils-7.1]
  'cp -a --no-preserve=mode' now sets appropriate default permissions
  for non regular files like fifos and character device nodes etc.,
  and leaves mode bits of existing files unchanged.
  Previously it would have set executable bits on created special files,
  and set mode bits for existing files as if they had been created.
  [bug introduced with coreutils-8.20]
  'cp --remove-destination file symlink' now removes the symlink
  even if it can't be traversed.
  [bug introduced with --remove-destination in fileutils-4.1.1]
  ls no longer truncates the abbreviated month names that have a
  display width between 6 and 12 inclusive.  Previously this would have
  output ambiguous months for Arabic or Catalan locales.
  'ls -aA' is now equivalent to 'ls -A', since -A now overrides -a.
  [bug introduced in coreutils-5.3.0]
  'mv -n A B' no longer suffers from a race condition that can
  overwrite a simultaneously-created B.  This bug fix requires
  platform support for the renameat2 or renameatx_np syscalls, found
  in recent Linux and macOS kernels.  As a side effect, ‘mv -n A A’
  now silently does nothing if A exists.
  [bug introduced with coreutils-7.1]
  * * Changes in behavior
  'cp --force file symlink' now removes the symlink even if
  it is self referential.
  ls --color now matches file extensions case insensitively.
  * * New features
  cp --reflink now supports --reflink=never to enforce a standard copy.
  env supports a new -v/--debug option to show verbose information about
  each processing step.
  env supports a new -S/--split-string=S option to split a single argument
  string into multiple arguments. Used to pass multiple arguments in scripts
  (shebang lines).
  md5sum accepts a new option: --zero (-z) to delimit the output lines with a
  NUL instead of a newline character.  This also disables file name escaping.
  This also applies to sha*sum and b2sum.
  rm --preserve-root now supports the --preserve-root=all option to
  reject any command line argument that is mounted to a separate file system.
  * * Improvements
  cut supports line lengths up to the max file size on 32 bit systems.
  Previously only offsets up to SIZE_MAX-1 were supported.
  stat and tail now know about the "exfs" file system, which is a
  version of XFS.  stat -f --format=%T now reports the file system type,
  and tail -f uses inotify.
  wc avoids redundant processing of ASCII text in multibyte locales,
  which is especially significant on macOS.
  * * Build-related
  Adjust to glibc &gt;= 2.28  (bsc#1182550, jsc#SLE-13520, jsc#SLE-13756)
- Refresh patches (line number changes only):
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * (License): osc changed the value from "GPL-3.0+" to "GPL-3.0-or-later".
  * (build): Make sure that parse-datetime.{c,y} ends up in debuginfo (rh#1555079).
- coreutils-i18n.patch:
  * src/exand.c,src/unexpand.c: Avoid -Wcomment warning.
  * src/cut.c (cut_characters_or_cut_bytes_no_split): Change idx from size_t
    to uintmax_t type to avoid a regression on i586, armv7l and ppc.
    Compare upstream, non-MB commit:
    https://git.sv.gnu.org/cgit/coreutils.git/commit/?id=d1a754c8272
    (cut_fields_mb): Likewise for field_idx.
  * tests/misc/cut.pl: Remove downstream tweaks as upstream MB tests are
    working since a while.
- coreutils.keyring: Update Assaf Gordon's GPG public key.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1552305600">- Update to 8.31:
  * Noteworthy changes in release 8.31 (2019-03-10) [stable]
  * * Bug fixes
  'base64 a b' now correctly diagnoses 'b' as the extra operand, not 'a'.
  [bug introduced in coreutils-5.3.0]
  When B already exists, 'cp -il A B' no longer immediately fails
  after asking the user whether to proceed.
  [This bug was present in "the beginning".]
  df no longer corrupts displayed multibyte characters on macOS.
  [bug introduced with coreutils-8.18]
  seq no longer outputs inconsistent decimal point characters
  for the last number, when locales are misconfigured.
  [bug introduced in coreutils-7.0]
  shred, sort, and split no longer falsely report ftruncate errors
  when outputting to less-common file types.  For example, the shell
  command 'sort /dev/null -o /dev/stdout | cat' no longer fails with
  an "error truncating" diagnostic.
  [bug was introduced with coreutils-8.18 for sort and split, and
  (for shared memory objects only) with fileutils-4.1 for shred]
  sync no longer fails for write-only file arguments.
  [bug introduced with argument support to sync in coreutils-8.24]
  'tail -f file | filter' no longer exits immediately on AIX.
  [bug introduced in coreutils-8.28]
  'tail -f file | filter' no longer goes into an infinite loop
  if filter exits and SIGPIPE is ignored.
  [bug introduced in coreutils-8.28]
  * * Changes in behavior
  cksum, dd, hostid, hostname, link, logname, sleep, tsort, unlink,
  uptime, users, whoami, yes: now always process --help and --version options,
  regardless of any other arguments present before any optional '--'
  end-of-options marker.
  nohup now processes --help and --version as first options even if other
  parameters follow.
  'yes a -- b' now outputs 'a b' instead of including the end-of-options
  marker as before: 'a -- b'.
  echo now always processes backslash escapes when the POSIXLY_CORRECT
  environment variable is set.
  When possible 'ln A B' now merely links A to B and reports an error
  if this fails, instead of statting A and B before linking.  This
  uses fewer system calls and avoids some races.  The old statting
  approach is still used in situations where hard links to directories
  are allowed (e.g., NetBSD when superuser).
  ls --group-directories-first will also group symlinks to directories.
  'test -a FILE' is not supported anymore.  Long ago, there were concerns about
  the high probability of humans confusing the -a primary with the -a binary
  operator, so POSIX changed this to 'test -e FILE'.  Scripts using it were
  already broken and non-portable; the -a unary operator was never documented.
  wc now treats non breaking space characters as word delimiters
  unless the POSIXLY_CORRECT environment variable is set.
  * * New features
  id now supports specifying multiple users.
  'date' now supports the '+' conversion specification flag,
  introduced in POSIX.1-2017.
  printf, seq, sleep, tail, and timeout now accept floating point
  numbers in either the current or the C locale.  For example, if the
  current locale's decimal point is ',', 'sleep 0,1' and 'sleep 0.1'
  now mean the same thing.  Previously, these commands accepted only
  C-locale syntax with '.' as the decimal point.  The new behavior is
  more compatible with other implementations in non-C locales.
  test now supports the '-N FILE' unary operator (like e.g. bash) to check
  whether FILE exists and has been modified since it was last read.
  env now supports '--default-signal[=SIG]', '--ignore-signal[=SIG]', and
  '--block-signal[=SIG], to setup signal handling before executing a program.
  env now supports '--list-signal-handling' to indicate non-default
  signal handling before executing a program.
  * * New commands
  basenc is added to complement existing base64,base32 commands,
  and encodes and decodes printable text using various common encodings:
  base64,base64url,base32,base32hex,base16,base2,z85.
  * * Improvements
  ls -l now better aligns abbreviated months containing digits,
  which is common in Asian locales.
  stat and tail now know about the "sdcardfs" file system on Android.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  stat now prints file creation time when supported by the file system,
  on GNU Linux systems with glibc &gt;= 2.28 and kernel &gt;= 4.11.
- Refresh patches (line number changes only):
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-misc.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * Version: bump version.
  * URL: Use https scheme.
  * %description: Add 'basenc' tool.
  * Change gitweb to cgit URL with https in a comment.
- coreutils.keyring:
  * Update for added section headers ('GPG keys of &lt;MAINTAINER&gt;').</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="lnussel@suse.de" date="1578571200">- switch to multibuild
- add coreutils-single subpackage that contains a single binary coreutils tool
  similar to busybox
- package LC_CTIME directories also in lang package
- split off doc package
- remove info macros, handled by file trigger nowadays</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1579521600">- minor: remove obsolete comment in spec file.</changelog>
  <changelog author="lnussel@suse.de" date="1580212800">- disable single and testsuite builds in rings/staging
- remove duplicate "coreutils" in flavor to make it look nicer in OBS</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1583755200">- Update to 8.32:
  * Noteworthy changes in release 8.32 (2020-03-05) [stable]
  * * Bug fixes
  cp now copies /dev/fd/N correctly on platforms like Solaris where
  it is a character-special file whose minor device number is N.
  [bug introduced in fileutils-4.1.6]
  dd conv=fdatasync no longer reports a "Bad file descriptor" error
  when fdatasync is interrupted, and dd now retries interrupted calls
  to close, fdatasync, fstat and fsync instead of incorrectly
  reporting an "Interrupted system call" error.
  [bugs introduced in coreutils-6.0]
  df now correctly parses the /proc/self/mountinfo file for unusual entries
  like ones with '\r' in a field value ("mount -t tmpfs tmpfs /foo$'\r'bar"),
  when the source field is empty ('mount -t tmpfs "" /mnt'), and when the
  filesystem type contains characters like a blank which need escaping.
  [bugs introduced in coreutils-8.24 with the introduction of reading
  the /proc/self/mountinfo file]
  factor again outputs immediately when stdout is a tty but stdin is not.
  [bug introduced in coreutils-8.24]
  ln works again on old systems without O_DIRECTORY support (like Solaris 10),
  and on systems where symlink ("x", ".") fails with errno == EINVAL
  (like Solaris 10 and Solaris 11).
  [bug introduced in coreutils-8.31]
  rmdir --ignore-fail-on-non-empty now works correctly for directories
  that fail to be removed due to permission issues.  Previously the exit status
  was reversed, failing for non empty and succeeding for empty directories.
  [bug introduced in coreutils-6.11]
  'shuf -r -n 0 file' no longer mistakenly reads from standard input.
  [bug introduced with the --repeat feature in coreutils-8.22]
  split no longer reports a "output file suffixes exhausted" error
  when the specified number of files is evenly divisible by 10, 16, 26,
  for --numeric, --hex, or default alphabetic suffixes respectively.
  [bug introduced in coreutils-8.24]
  seq no longer prints an extra line under certain circumstances (such as
  'seq -f "%g " 1000000 1000000').
  [bug introduced in coreutils-6.10]
  * * Changes in behavior
  Several programs now check that numbers end properly.  For example,
  'du -d 1x' now reports an error instead of silently ignoring the 'x'.
  Affected programs and options include du -d, expr's numeric operands
  on non-GMP builds, install -g and -o, ls's TABSIZE environment
  variable, mknod b and c, ptx -g and -w, shuf -n, and sort --batch-size
  and --parallel.
  date now parses military time zones in accordance with common usage:
    "A" to "M"  are equivalent to UTC+1 to UTC+12
    "N" to "Y"  are equivalent to UTC-1 to UTC-12
    "Z" is "zulu" time (UTC).
  For example, 'date -d "09:00B" is now equivalent to 9am in UTC+2 time zone.
  Previously, military time zones were parsed according to the obsolete
  rfc822, with their value negated (e.g., "B" was equivalent to UTC-2).
  [The old behavior was introduced in sh-utils 2.0.15 ca. 1999, predating
  coreutils package.]
  ls issues an error message on a removed directory, on GNU/Linux systems.
  Previously no error and no entries were output, and so indistinguishable
  from an empty directory, with default ls options.
  uniq no longer uses strcoll() to determine string equivalence,
  and so will operate more efficiently and consistently.
  * * New Features
  ls now supports the --time=birth option to display and sort by
  file creation time, where available.
  od --skip-bytes now can use lseek even if the input is not a regular
  file, greatly improving performance in some cases.
  stat(1) supports a new --cached= option, used on systems with statx(2)
  to control cache coherency of file system attributes,
  useful on network file systems.
  * * Improvements
  stat and ls now use the statx() system call where available, which can
  operate more efficiently by only retrieving requested attributes.
  stat and tail now know about the "binderfs", "dma-buf-fs", "erofs",
  "ppc-cmm-fs", and "z3fold" file systems.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  * * Build-related
  gzip-compressed tarballs are distributed once again
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-getaddrinfo.patch
  * coreutils-i18n.patch
  * coreutils-invalid-ids.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils-i18n.patch:
  * uniq: remove collation handling as required by newer POSIX; see
  - https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8e81d44b5
  - https://www.austingroupbugs.net/view.php?id=963
- coreutils-ls-restore-8.31-behavior-on-removed-dirs.patch:
  * Add patch for 'ls' to restore 8.31 behavior on removed directories.
- coreutils.spec:
  * Version: bump version.
  * %check: re-enable regular 'make check' for non-multibuild package.
  * reference the above new patch.
- coreutils.keyring:
  * Update from upstream (Savannah).</changelog>
  <changelog author="dmueller@suse.com" date="1588593600">- add coreutils-use-python3.patch to minimally port away from
  python 2.x use of pyinotify in the testsuite</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1592049600">- coreutils-gnulib-disable-test-float.patch: Add patch to temporarily
  disable the gnulib test 'test-float' failing on ppc and ppc64le.
- coreutils.spec: Reference the patch.  While at it, avoid conditional
  Patch and Source entries as that break cross-platform builds from
  source RPMs.</changelog>
  <changelog author="dimstar@opensuse.org" date="1594900800">- Drop suse-module-tools BuildRequires: this was used for the macro
  regenerate_initrd_post/posttrans, which have been moved to
  rpm-config-SUSE in Jan 2019.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1598875200">- gnulib-test-avoid-FP-perror-strerror.patch: Add patch to
  avoid false-positive error in gnulib tests 'test-perror2' and
  'test-strerror_r', visible on armv7l.
- coreutils.spec: Reference the patch.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="zpetrova@suse.com" date="1635163200">- coreutils-df-fuse-portal-dummy.patch:
  df: Add "fuse.portal" as a dummy file system (used in flatpak
  implementations). (bsc#1189152)</changelog>
  <changelog author="ailiop@suse.com" date="1706529600">- tail: fix tailing sysfs files where PAGE_SIZE &gt; BUFSIZ (bsc#1219321)
  - add coreutils-tail-fix-tailing-sysfs-files-where-PAGE_SIZE-BUFSIZ.patch</changelog>
  <changelog author="tabraham@suse.com" date="1712059200">- ls: avoid triggering automounts (bsc#1221632)
  - add coreutils-ls-avoid-triggering-automounts.patch</changelog>
  <changelog author="rw@suse.com" date="1748865600">- coreutils-9.7-sort-CVE-2025-5278.patch: Add upstream patch:
  sort with key character offsets of SIZE_MAX, could induce
  a read of 1 byte before an allocated heap buffer.
  (CVE-2025-5278, bsc#1243767)</changelog>
</package>
<package pkgid="d2a195b2ac6d545ab2c312c45be16dc5a9cbbc44877f089930b57ef87c4fa214" name="coreutils" arch="x86_64">
  <version epoch="0" ver="8.32" rel="150400.9.9.1"/>
  <changelog author="ghe@suse.com" date="1502884800">- Drop coreutils-ocfs2_reflinks.patch
  OCFS2 file system has supported file clone ioctls like btrfs,
  then, coreutils doesn't need this patch from the kernel v4.10-rc1</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1504526400">- Update to 8.28
  (for details see included NEWS file)
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.keyring: Update from upstream (Savannah).
- Remove now-upstream patches:
  * coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch
  * coreutils-tests-port-to-timezone-2017a.patch
- coreutils.spec: Add "BuildRequires: user(bin)" for the tests.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1514462400">- Update to 8.29:
  * Noteworthy changes in release 8.29 (2017-12-27) [stable]
  * * Bug fixes
  b2sum no longer crashes when processing certain truncated check files.
  [bug introduced with b2sum coreutils-8.26]
  dd now ensures the correct cache ranges are specified for the "nocache"
  and "direct" flags.  Previously some pages in the page cache were not
  invalidated.  [bug introduced for "direct" in coreutils-7.5,
  and with the "nocache" implementation in coreutils-8.11]
  df no longer hangs when given a fifo argument.
  [bug introduced in coreutils-7.3]
  ptx -S no longer infloops for a pattern which returns zero-length matches.
  [the bug dates back to the initial implementation]
  shred --remove will again repeatedly rename files with shortening names
  to attempt to hide the original length of the file name.
  [bug introduced in coreutils-8.28]
  stty no longer crashes when processing settings with -F also specified.
  [bug introduced in fileutils-4.0]
  tail --bytes again supports non seekable inputs on all systems.
  On systems like android it always tried to process as seekable inputs.
  [bug introduced in coreutils-8.24]
  timeout will again notice its managed command exiting, even when
  invoked with blocked CHLD signal, or in a narrow window where
  this CHLD signal from the exiting child was missed.  In each case
  timeout would have then waited for the time limit to expire.
  [bug introduced in coreutils-8.27]
  * * New features
  timeout now supports the --verbose option to diagnose forced termination.
  * * Improvements
  dd now supports iflag=direct with arbitrary sized files on all file systems.
  tail --bytes=NUM will efficiently seek to the end of block devices,
  rather than reading from the start.
  Utilities which do not support long options (other than the default --help
  and --version), e.g. cksum and sleep, now use more consistent error diagnostic
  for unknown long options.
  * * Build-related
  Default man pages are now distributed which are used if perl is
  not available on the build system, or when cross compiling.
- Refresh patches (line number changes only):
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1530619200">- Update to 8.30:
  * Noteworthy changes in release 8.30 (2018-07-01) [stable]
  * * Bug fixes
  'cp --symlink SRC DST' will again correctly validate DST.
  If DST is a regular file and SRC is a symlink to DST,
  then cp will no longer allow that operation to clobber DST.
  Also with -d, if DST is a symlink, then it can always be replaced,
  even if it points to SRC on a separate device.
  [bugs introduced with coreutils-8.27]
  'cp -n -u' and 'mv -n -u' now consistently ignore the -u option.
  Previously, this option combination suffered from race conditions
  that caused -u to sometimes override -n.
  [bug introduced with coreutils-7.1]
  'cp -a --no-preserve=mode' now sets appropriate default permissions
  for non regular files like fifos and character device nodes etc.,
  and leaves mode bits of existing files unchanged.
  Previously it would have set executable bits on created special files,
  and set mode bits for existing files as if they had been created.
  [bug introduced with coreutils-8.20]
  'cp --remove-destination file symlink' now removes the symlink
  even if it can't be traversed.
  [bug introduced with --remove-destination in fileutils-4.1.1]
  ls no longer truncates the abbreviated month names that have a
  display width between 6 and 12 inclusive.  Previously this would have
  output ambiguous months for Arabic or Catalan locales.
  'ls -aA' is now equivalent to 'ls -A', since -A now overrides -a.
  [bug introduced in coreutils-5.3.0]
  'mv -n A B' no longer suffers from a race condition that can
  overwrite a simultaneously-created B.  This bug fix requires
  platform support for the renameat2 or renameatx_np syscalls, found
  in recent Linux and macOS kernels.  As a side effect, ‘mv -n A A’
  now silently does nothing if A exists.
  [bug introduced with coreutils-7.1]
  * * Changes in behavior
  'cp --force file symlink' now removes the symlink even if
  it is self referential.
  ls --color now matches file extensions case insensitively.
  * * New features
  cp --reflink now supports --reflink=never to enforce a standard copy.
  env supports a new -v/--debug option to show verbose information about
  each processing step.
  env supports a new -S/--split-string=S option to split a single argument
  string into multiple arguments. Used to pass multiple arguments in scripts
  (shebang lines).
  md5sum accepts a new option: --zero (-z) to delimit the output lines with a
  NUL instead of a newline character.  This also disables file name escaping.
  This also applies to sha*sum and b2sum.
  rm --preserve-root now supports the --preserve-root=all option to
  reject any command line argument that is mounted to a separate file system.
  * * Improvements
  cut supports line lengths up to the max file size on 32 bit systems.
  Previously only offsets up to SIZE_MAX-1 were supported.
  stat and tail now know about the "exfs" file system, which is a
  version of XFS.  stat -f --format=%T now reports the file system type,
  and tail -f uses inotify.
  wc avoids redundant processing of ASCII text in multibyte locales,
  which is especially significant on macOS.
  * * Build-related
  Adjust to glibc &gt;= 2.28  (bsc#1182550, jsc#SLE-13520, jsc#SLE-13756)
- Refresh patches (line number changes only):
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * (License): osc changed the value from "GPL-3.0+" to "GPL-3.0-or-later".
  * (build): Make sure that parse-datetime.{c,y} ends up in debuginfo (rh#1555079).
- coreutils-i18n.patch:
  * src/exand.c,src/unexpand.c: Avoid -Wcomment warning.
  * src/cut.c (cut_characters_or_cut_bytes_no_split): Change idx from size_t
    to uintmax_t type to avoid a regression on i586, armv7l and ppc.
    Compare upstream, non-MB commit:
    https://git.sv.gnu.org/cgit/coreutils.git/commit/?id=d1a754c8272
    (cut_fields_mb): Likewise for field_idx.
  * tests/misc/cut.pl: Remove downstream tweaks as upstream MB tests are
    working since a while.
- coreutils.keyring: Update Assaf Gordon's GPG public key.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1552305600">- Update to 8.31:
  * Noteworthy changes in release 8.31 (2019-03-10) [stable]
  * * Bug fixes
  'base64 a b' now correctly diagnoses 'b' as the extra operand, not 'a'.
  [bug introduced in coreutils-5.3.0]
  When B already exists, 'cp -il A B' no longer immediately fails
  after asking the user whether to proceed.
  [This bug was present in "the beginning".]
  df no longer corrupts displayed multibyte characters on macOS.
  [bug introduced with coreutils-8.18]
  seq no longer outputs inconsistent decimal point characters
  for the last number, when locales are misconfigured.
  [bug introduced in coreutils-7.0]
  shred, sort, and split no longer falsely report ftruncate errors
  when outputting to less-common file types.  For example, the shell
  command 'sort /dev/null -o /dev/stdout | cat' no longer fails with
  an "error truncating" diagnostic.
  [bug was introduced with coreutils-8.18 for sort and split, and
  (for shared memory objects only) with fileutils-4.1 for shred]
  sync no longer fails for write-only file arguments.
  [bug introduced with argument support to sync in coreutils-8.24]
  'tail -f file | filter' no longer exits immediately on AIX.
  [bug introduced in coreutils-8.28]
  'tail -f file | filter' no longer goes into an infinite loop
  if filter exits and SIGPIPE is ignored.
  [bug introduced in coreutils-8.28]
  * * Changes in behavior
  cksum, dd, hostid, hostname, link, logname, sleep, tsort, unlink,
  uptime, users, whoami, yes: now always process --help and --version options,
  regardless of any other arguments present before any optional '--'
  end-of-options marker.
  nohup now processes --help and --version as first options even if other
  parameters follow.
  'yes a -- b' now outputs 'a b' instead of including the end-of-options
  marker as before: 'a -- b'.
  echo now always processes backslash escapes when the POSIXLY_CORRECT
  environment variable is set.
  When possible 'ln A B' now merely links A to B and reports an error
  if this fails, instead of statting A and B before linking.  This
  uses fewer system calls and avoids some races.  The old statting
  approach is still used in situations where hard links to directories
  are allowed (e.g., NetBSD when superuser).
  ls --group-directories-first will also group symlinks to directories.
  'test -a FILE' is not supported anymore.  Long ago, there were concerns about
  the high probability of humans confusing the -a primary with the -a binary
  operator, so POSIX changed this to 'test -e FILE'.  Scripts using it were
  already broken and non-portable; the -a unary operator was never documented.
  wc now treats non breaking space characters as word delimiters
  unless the POSIXLY_CORRECT environment variable is set.
  * * New features
  id now supports specifying multiple users.
  'date' now supports the '+' conversion specification flag,
  introduced in POSIX.1-2017.
  printf, seq, sleep, tail, and timeout now accept floating point
  numbers in either the current or the C locale.  For example, if the
  current locale's decimal point is ',', 'sleep 0,1' and 'sleep 0.1'
  now mean the same thing.  Previously, these commands accepted only
  C-locale syntax with '.' as the decimal point.  The new behavior is
  more compatible with other implementations in non-C locales.
  test now supports the '-N FILE' unary operator (like e.g. bash) to check
  whether FILE exists and has been modified since it was last read.
  env now supports '--default-signal[=SIG]', '--ignore-signal[=SIG]', and
  '--block-signal[=SIG], to setup signal handling before executing a program.
  env now supports '--list-signal-handling' to indicate non-default
  signal handling before executing a program.
  * * New commands
  basenc is added to complement existing base64,base32 commands,
  and encodes and decodes printable text using various common encodings:
  base64,base64url,base32,base32hex,base16,base2,z85.
  * * Improvements
  ls -l now better aligns abbreviated months containing digits,
  which is common in Asian locales.
  stat and tail now know about the "sdcardfs" file system on Android.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  stat now prints file creation time when supported by the file system,
  on GNU Linux systems with glibc &gt;= 2.28 and kernel &gt;= 4.11.
- Refresh patches (line number changes only):
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-misc.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * Version: bump version.
  * URL: Use https scheme.
  * %description: Add 'basenc' tool.
  * Change gitweb to cgit URL with https in a comment.
- coreutils.keyring:
  * Update for added section headers ('GPG keys of &lt;MAINTAINER&gt;').</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="lnussel@suse.de" date="1578571200">- switch to multibuild
- add coreutils-single subpackage that contains a single binary coreutils tool
  similar to busybox
- package LC_CTIME directories also in lang package
- split off doc package
- remove info macros, handled by file trigger nowadays</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1579521600">- minor: remove obsolete comment in spec file.</changelog>
  <changelog author="lnussel@suse.de" date="1580212800">- disable single and testsuite builds in rings/staging
- remove duplicate "coreutils" in flavor to make it look nicer in OBS</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1583755200">- Update to 8.32:
  * Noteworthy changes in release 8.32 (2020-03-05) [stable]
  * * Bug fixes
  cp now copies /dev/fd/N correctly on platforms like Solaris where
  it is a character-special file whose minor device number is N.
  [bug introduced in fileutils-4.1.6]
  dd conv=fdatasync no longer reports a "Bad file descriptor" error
  when fdatasync is interrupted, and dd now retries interrupted calls
  to close, fdatasync, fstat and fsync instead of incorrectly
  reporting an "Interrupted system call" error.
  [bugs introduced in coreutils-6.0]
  df now correctly parses the /proc/self/mountinfo file for unusual entries
  like ones with '\r' in a field value ("mount -t tmpfs tmpfs /foo$'\r'bar"),
  when the source field is empty ('mount -t tmpfs "" /mnt'), and when the
  filesystem type contains characters like a blank which need escaping.
  [bugs introduced in coreutils-8.24 with the introduction of reading
  the /proc/self/mountinfo file]
  factor again outputs immediately when stdout is a tty but stdin is not.
  [bug introduced in coreutils-8.24]
  ln works again on old systems without O_DIRECTORY support (like Solaris 10),
  and on systems where symlink ("x", ".") fails with errno == EINVAL
  (like Solaris 10 and Solaris 11).
  [bug introduced in coreutils-8.31]
  rmdir --ignore-fail-on-non-empty now works correctly for directories
  that fail to be removed due to permission issues.  Previously the exit status
  was reversed, failing for non empty and succeeding for empty directories.
  [bug introduced in coreutils-6.11]
  'shuf -r -n 0 file' no longer mistakenly reads from standard input.
  [bug introduced with the --repeat feature in coreutils-8.22]
  split no longer reports a "output file suffixes exhausted" error
  when the specified number of files is evenly divisible by 10, 16, 26,
  for --numeric, --hex, or default alphabetic suffixes respectively.
  [bug introduced in coreutils-8.24]
  seq no longer prints an extra line under certain circumstances (such as
  'seq -f "%g " 1000000 1000000').
  [bug introduced in coreutils-6.10]
  * * Changes in behavior
  Several programs now check that numbers end properly.  For example,
  'du -d 1x' now reports an error instead of silently ignoring the 'x'.
  Affected programs and options include du -d, expr's numeric operands
  on non-GMP builds, install -g and -o, ls's TABSIZE environment
  variable, mknod b and c, ptx -g and -w, shuf -n, and sort --batch-size
  and --parallel.
  date now parses military time zones in accordance with common usage:
    "A" to "M"  are equivalent to UTC+1 to UTC+12
    "N" to "Y"  are equivalent to UTC-1 to UTC-12
    "Z" is "zulu" time (UTC).
  For example, 'date -d "09:00B" is now equivalent to 9am in UTC+2 time zone.
  Previously, military time zones were parsed according to the obsolete
  rfc822, with their value negated (e.g., "B" was equivalent to UTC-2).
  [The old behavior was introduced in sh-utils 2.0.15 ca. 1999, predating
  coreutils package.]
  ls issues an error message on a removed directory, on GNU/Linux systems.
  Previously no error and no entries were output, and so indistinguishable
  from an empty directory, with default ls options.
  uniq no longer uses strcoll() to determine string equivalence,
  and so will operate more efficiently and consistently.
  * * New Features
  ls now supports the --time=birth option to display and sort by
  file creation time, where available.
  od --skip-bytes now can use lseek even if the input is not a regular
  file, greatly improving performance in some cases.
  stat(1) supports a new --cached= option, used on systems with statx(2)
  to control cache coherency of file system attributes,
  useful on network file systems.
  * * Improvements
  stat and ls now use the statx() system call where available, which can
  operate more efficiently by only retrieving requested attributes.
  stat and tail now know about the "binderfs", "dma-buf-fs", "erofs",
  "ppc-cmm-fs", and "z3fold" file systems.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  * * Build-related
  gzip-compressed tarballs are distributed once again
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-getaddrinfo.patch
  * coreutils-i18n.patch
  * coreutils-invalid-ids.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils-i18n.patch:
  * uniq: remove collation handling as required by newer POSIX; see
  - https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8e81d44b5
  - https://www.austingroupbugs.net/view.php?id=963
- coreutils-ls-restore-8.31-behavior-on-removed-dirs.patch:
  * Add patch for 'ls' to restore 8.31 behavior on removed directories.
- coreutils.spec:
  * Version: bump version.
  * %check: re-enable regular 'make check' for non-multibuild package.
  * reference the above new patch.
- coreutils.keyring:
  * Update from upstream (Savannah).</changelog>
  <changelog author="dmueller@suse.com" date="1588593600">- add coreutils-use-python3.patch to minimally port away from
  python 2.x use of pyinotify in the testsuite</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1592049600">- coreutils-gnulib-disable-test-float.patch: Add patch to temporarily
  disable the gnulib test 'test-float' failing on ppc and ppc64le.
- coreutils.spec: Reference the patch.  While at it, avoid conditional
  Patch and Source entries as that break cross-platform builds from
  source RPMs.</changelog>
  <changelog author="dimstar@opensuse.org" date="1594900800">- Drop suse-module-tools BuildRequires: this was used for the macro
  regenerate_initrd_post/posttrans, which have been moved to
  rpm-config-SUSE in Jan 2019.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1598875200">- gnulib-test-avoid-FP-perror-strerror.patch: Add patch to
  avoid false-positive error in gnulib tests 'test-perror2' and
  'test-strerror_r', visible on armv7l.
- coreutils.spec: Reference the patch.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="zpetrova@suse.com" date="1635163200">- coreutils-df-fuse-portal-dummy.patch:
  df: Add "fuse.portal" as a dummy file system (used in flatpak
  implementations). (bsc#1189152)</changelog>
  <changelog author="ailiop@suse.com" date="1706529600">- tail: fix tailing sysfs files where PAGE_SIZE &gt; BUFSIZ (bsc#1219321)
  - add coreutils-tail-fix-tailing-sysfs-files-where-PAGE_SIZE-BUFSIZ.patch</changelog>
  <changelog author="tabraham@suse.com" date="1712059200">- ls: avoid triggering automounts (bsc#1221632)
  - add coreutils-ls-avoid-triggering-automounts.patch</changelog>
  <changelog author="rw@suse.com" date="1748865600">- coreutils-9.7-sort-CVE-2025-5278.patch: Add upstream patch:
  sort with key character offsets of SIZE_MAX, could induce
  a read of 1 byte before an allocated heap buffer.
  (CVE-2025-5278, bsc#1243767)</changelog>
</package>
<package pkgid="e3dc5b56e9ece187964279cc802d9be8e8a6ba1a5e210cb851a35c99b9db21c7" name="coreutils-doc" arch="noarch">
  <version epoch="0" ver="8.32" rel="150400.9.9.1"/>
  <changelog author="ghe@suse.com" date="1502884800">- Drop coreutils-ocfs2_reflinks.patch
  OCFS2 file system has supported file clone ioctls like btrfs,
  then, coreutils doesn't need this patch from the kernel v4.10-rc1</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1504526400">- Update to 8.28
  (for details see included NEWS file)
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.keyring: Update from upstream (Savannah).
- Remove now-upstream patches:
  * coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch
  * coreutils-tests-port-to-timezone-2017a.patch
- coreutils.spec: Add "BuildRequires: user(bin)" for the tests.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1514462400">- Update to 8.29:
  * Noteworthy changes in release 8.29 (2017-12-27) [stable]
  * * Bug fixes
  b2sum no longer crashes when processing certain truncated check files.
  [bug introduced with b2sum coreutils-8.26]
  dd now ensures the correct cache ranges are specified for the "nocache"
  and "direct" flags.  Previously some pages in the page cache were not
  invalidated.  [bug introduced for "direct" in coreutils-7.5,
  and with the "nocache" implementation in coreutils-8.11]
  df no longer hangs when given a fifo argument.
  [bug introduced in coreutils-7.3]
  ptx -S no longer infloops for a pattern which returns zero-length matches.
  [the bug dates back to the initial implementation]
  shred --remove will again repeatedly rename files with shortening names
  to attempt to hide the original length of the file name.
  [bug introduced in coreutils-8.28]
  stty no longer crashes when processing settings with -F also specified.
  [bug introduced in fileutils-4.0]
  tail --bytes again supports non seekable inputs on all systems.
  On systems like android it always tried to process as seekable inputs.
  [bug introduced in coreutils-8.24]
  timeout will again notice its managed command exiting, even when
  invoked with blocked CHLD signal, or in a narrow window where
  this CHLD signal from the exiting child was missed.  In each case
  timeout would have then waited for the time limit to expire.
  [bug introduced in coreutils-8.27]
  * * New features
  timeout now supports the --verbose option to diagnose forced termination.
  * * Improvements
  dd now supports iflag=direct with arbitrary sized files on all file systems.
  tail --bytes=NUM will efficiently seek to the end of block devices,
  rather than reading from the start.
  Utilities which do not support long options (other than the default --help
  and --version), e.g. cksum and sleep, now use more consistent error diagnostic
  for unknown long options.
  * * Build-related
  Default man pages are now distributed which are used if perl is
  not available on the build system, or when cross compiling.
- Refresh patches (line number changes only):
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1530619200">- Update to 8.30:
  * Noteworthy changes in release 8.30 (2018-07-01) [stable]
  * * Bug fixes
  'cp --symlink SRC DST' will again correctly validate DST.
  If DST is a regular file and SRC is a symlink to DST,
  then cp will no longer allow that operation to clobber DST.
  Also with -d, if DST is a symlink, then it can always be replaced,
  even if it points to SRC on a separate device.
  [bugs introduced with coreutils-8.27]
  'cp -n -u' and 'mv -n -u' now consistently ignore the -u option.
  Previously, this option combination suffered from race conditions
  that caused -u to sometimes override -n.
  [bug introduced with coreutils-7.1]
  'cp -a --no-preserve=mode' now sets appropriate default permissions
  for non regular files like fifos and character device nodes etc.,
  and leaves mode bits of existing files unchanged.
  Previously it would have set executable bits on created special files,
  and set mode bits for existing files as if they had been created.
  [bug introduced with coreutils-8.20]
  'cp --remove-destination file symlink' now removes the symlink
  even if it can't be traversed.
  [bug introduced with --remove-destination in fileutils-4.1.1]
  ls no longer truncates the abbreviated month names that have a
  display width between 6 and 12 inclusive.  Previously this would have
  output ambiguous months for Arabic or Catalan locales.
  'ls -aA' is now equivalent to 'ls -A', since -A now overrides -a.
  [bug introduced in coreutils-5.3.0]
  'mv -n A B' no longer suffers from a race condition that can
  overwrite a simultaneously-created B.  This bug fix requires
  platform support for the renameat2 or renameatx_np syscalls, found
  in recent Linux and macOS kernels.  As a side effect, ‘mv -n A A’
  now silently does nothing if A exists.
  [bug introduced with coreutils-7.1]
  * * Changes in behavior
  'cp --force file symlink' now removes the symlink even if
  it is self referential.
  ls --color now matches file extensions case insensitively.
  * * New features
  cp --reflink now supports --reflink=never to enforce a standard copy.
  env supports a new -v/--debug option to show verbose information about
  each processing step.
  env supports a new -S/--split-string=S option to split a single argument
  string into multiple arguments. Used to pass multiple arguments in scripts
  (shebang lines).
  md5sum accepts a new option: --zero (-z) to delimit the output lines with a
  NUL instead of a newline character.  This also disables file name escaping.
  This also applies to sha*sum and b2sum.
  rm --preserve-root now supports the --preserve-root=all option to
  reject any command line argument that is mounted to a separate file system.
  * * Improvements
  cut supports line lengths up to the max file size on 32 bit systems.
  Previously only offsets up to SIZE_MAX-1 were supported.
  stat and tail now know about the "exfs" file system, which is a
  version of XFS.  stat -f --format=%T now reports the file system type,
  and tail -f uses inotify.
  wc avoids redundant processing of ASCII text in multibyte locales,
  which is especially significant on macOS.
  * * Build-related
  Adjust to glibc &gt;= 2.28  (bsc#1182550, jsc#SLE-13520, jsc#SLE-13756)
- Refresh patches (line number changes only):
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * (License): osc changed the value from "GPL-3.0+" to "GPL-3.0-or-later".
  * (build): Make sure that parse-datetime.{c,y} ends up in debuginfo (rh#1555079).
- coreutils-i18n.patch:
  * src/exand.c,src/unexpand.c: Avoid -Wcomment warning.
  * src/cut.c (cut_characters_or_cut_bytes_no_split): Change idx from size_t
    to uintmax_t type to avoid a regression on i586, armv7l and ppc.
    Compare upstream, non-MB commit:
    https://git.sv.gnu.org/cgit/coreutils.git/commit/?id=d1a754c8272
    (cut_fields_mb): Likewise for field_idx.
  * tests/misc/cut.pl: Remove downstream tweaks as upstream MB tests are
    working since a while.
- coreutils.keyring: Update Assaf Gordon's GPG public key.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1552305600">- Update to 8.31:
  * Noteworthy changes in release 8.31 (2019-03-10) [stable]
  * * Bug fixes
  'base64 a b' now correctly diagnoses 'b' as the extra operand, not 'a'.
  [bug introduced in coreutils-5.3.0]
  When B already exists, 'cp -il A B' no longer immediately fails
  after asking the user whether to proceed.
  [This bug was present in "the beginning".]
  df no longer corrupts displayed multibyte characters on macOS.
  [bug introduced with coreutils-8.18]
  seq no longer outputs inconsistent decimal point characters
  for the last number, when locales are misconfigured.
  [bug introduced in coreutils-7.0]
  shred, sort, and split no longer falsely report ftruncate errors
  when outputting to less-common file types.  For example, the shell
  command 'sort /dev/null -o /dev/stdout | cat' no longer fails with
  an "error truncating" diagnostic.
  [bug was introduced with coreutils-8.18 for sort and split, and
  (for shared memory objects only) with fileutils-4.1 for shred]
  sync no longer fails for write-only file arguments.
  [bug introduced with argument support to sync in coreutils-8.24]
  'tail -f file | filter' no longer exits immediately on AIX.
  [bug introduced in coreutils-8.28]
  'tail -f file | filter' no longer goes into an infinite loop
  if filter exits and SIGPIPE is ignored.
  [bug introduced in coreutils-8.28]
  * * Changes in behavior
  cksum, dd, hostid, hostname, link, logname, sleep, tsort, unlink,
  uptime, users, whoami, yes: now always process --help and --version options,
  regardless of any other arguments present before any optional '--'
  end-of-options marker.
  nohup now processes --help and --version as first options even if other
  parameters follow.
  'yes a -- b' now outputs 'a b' instead of including the end-of-options
  marker as before: 'a -- b'.
  echo now always processes backslash escapes when the POSIXLY_CORRECT
  environment variable is set.
  When possible 'ln A B' now merely links A to B and reports an error
  if this fails, instead of statting A and B before linking.  This
  uses fewer system calls and avoids some races.  The old statting
  approach is still used in situations where hard links to directories
  are allowed (e.g., NetBSD when superuser).
  ls --group-directories-first will also group symlinks to directories.
  'test -a FILE' is not supported anymore.  Long ago, there were concerns about
  the high probability of humans confusing the -a primary with the -a binary
  operator, so POSIX changed this to 'test -e FILE'.  Scripts using it were
  already broken and non-portable; the -a unary operator was never documented.
  wc now treats non breaking space characters as word delimiters
  unless the POSIXLY_CORRECT environment variable is set.
  * * New features
  id now supports specifying multiple users.
  'date' now supports the '+' conversion specification flag,
  introduced in POSIX.1-2017.
  printf, seq, sleep, tail, and timeout now accept floating point
  numbers in either the current or the C locale.  For example, if the
  current locale's decimal point is ',', 'sleep 0,1' and 'sleep 0.1'
  now mean the same thing.  Previously, these commands accepted only
  C-locale syntax with '.' as the decimal point.  The new behavior is
  more compatible with other implementations in non-C locales.
  test now supports the '-N FILE' unary operator (like e.g. bash) to check
  whether FILE exists and has been modified since it was last read.
  env now supports '--default-signal[=SIG]', '--ignore-signal[=SIG]', and
  '--block-signal[=SIG], to setup signal handling before executing a program.
  env now supports '--list-signal-handling' to indicate non-default
  signal handling before executing a program.
  * * New commands
  basenc is added to complement existing base64,base32 commands,
  and encodes and decodes printable text using various common encodings:
  base64,base64url,base32,base32hex,base16,base2,z85.
  * * Improvements
  ls -l now better aligns abbreviated months containing digits,
  which is common in Asian locales.
  stat and tail now know about the "sdcardfs" file system on Android.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  stat now prints file creation time when supported by the file system,
  on GNU Linux systems with glibc &gt;= 2.28 and kernel &gt;= 4.11.
- Refresh patches (line number changes only):
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-misc.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * Version: bump version.
  * URL: Use https scheme.
  * %description: Add 'basenc' tool.
  * Change gitweb to cgit URL with https in a comment.
- coreutils.keyring:
  * Update for added section headers ('GPG keys of &lt;MAINTAINER&gt;').</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="lnussel@suse.de" date="1578571200">- switch to multibuild
- add coreutils-single subpackage that contains a single binary coreutils tool
  similar to busybox
- package LC_CTIME directories also in lang package
- split off doc package
- remove info macros, handled by file trigger nowadays</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1579521600">- minor: remove obsolete comment in spec file.</changelog>
  <changelog author="lnussel@suse.de" date="1580212800">- disable single and testsuite builds in rings/staging
- remove duplicate "coreutils" in flavor to make it look nicer in OBS</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1583755200">- Update to 8.32:
  * Noteworthy changes in release 8.32 (2020-03-05) [stable]
  * * Bug fixes
  cp now copies /dev/fd/N correctly on platforms like Solaris where
  it is a character-special file whose minor device number is N.
  [bug introduced in fileutils-4.1.6]
  dd conv=fdatasync no longer reports a "Bad file descriptor" error
  when fdatasync is interrupted, and dd now retries interrupted calls
  to close, fdatasync, fstat and fsync instead of incorrectly
  reporting an "Interrupted system call" error.
  [bugs introduced in coreutils-6.0]
  df now correctly parses the /proc/self/mountinfo file for unusual entries
  like ones with '\r' in a field value ("mount -t tmpfs tmpfs /foo$'\r'bar"),
  when the source field is empty ('mount -t tmpfs "" /mnt'), and when the
  filesystem type contains characters like a blank which need escaping.
  [bugs introduced in coreutils-8.24 with the introduction of reading
  the /proc/self/mountinfo file]
  factor again outputs immediately when stdout is a tty but stdin is not.
  [bug introduced in coreutils-8.24]
  ln works again on old systems without O_DIRECTORY support (like Solaris 10),
  and on systems where symlink ("x", ".") fails with errno == EINVAL
  (like Solaris 10 and Solaris 11).
  [bug introduced in coreutils-8.31]
  rmdir --ignore-fail-on-non-empty now works correctly for directories
  that fail to be removed due to permission issues.  Previously the exit status
  was reversed, failing for non empty and succeeding for empty directories.
  [bug introduced in coreutils-6.11]
  'shuf -r -n 0 file' no longer mistakenly reads from standard input.
  [bug introduced with the --repeat feature in coreutils-8.22]
  split no longer reports a "output file suffixes exhausted" error
  when the specified number of files is evenly divisible by 10, 16, 26,
  for --numeric, --hex, or default alphabetic suffixes respectively.
  [bug introduced in coreutils-8.24]
  seq no longer prints an extra line under certain circumstances (such as
  'seq -f "%g " 1000000 1000000').
  [bug introduced in coreutils-6.10]
  * * Changes in behavior
  Several programs now check that numbers end properly.  For example,
  'du -d 1x' now reports an error instead of silently ignoring the 'x'.
  Affected programs and options include du -d, expr's numeric operands
  on non-GMP builds, install -g and -o, ls's TABSIZE environment
  variable, mknod b and c, ptx -g and -w, shuf -n, and sort --batch-size
  and --parallel.
  date now parses military time zones in accordance with common usage:
    "A" to "M"  are equivalent to UTC+1 to UTC+12
    "N" to "Y"  are equivalent to UTC-1 to UTC-12
    "Z" is "zulu" time (UTC).
  For example, 'date -d "09:00B" is now equivalent to 9am in UTC+2 time zone.
  Previously, military time zones were parsed according to the obsolete
  rfc822, with their value negated (e.g., "B" was equivalent to UTC-2).
  [The old behavior was introduced in sh-utils 2.0.15 ca. 1999, predating
  coreutils package.]
  ls issues an error message on a removed directory, on GNU/Linux systems.
  Previously no error and no entries were output, and so indistinguishable
  from an empty directory, with default ls options.
  uniq no longer uses strcoll() to determine string equivalence,
  and so will operate more efficiently and consistently.
  * * New Features
  ls now supports the --time=birth option to display and sort by
  file creation time, where available.
  od --skip-bytes now can use lseek even if the input is not a regular
  file, greatly improving performance in some cases.
  stat(1) supports a new --cached= option, used on systems with statx(2)
  to control cache coherency of file system attributes,
  useful on network file systems.
  * * Improvements
  stat and ls now use the statx() system call where available, which can
  operate more efficiently by only retrieving requested attributes.
  stat and tail now know about the "binderfs", "dma-buf-fs", "erofs",
  "ppc-cmm-fs", and "z3fold" file systems.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  * * Build-related
  gzip-compressed tarballs are distributed once again
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-getaddrinfo.patch
  * coreutils-i18n.patch
  * coreutils-invalid-ids.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils-i18n.patch:
  * uniq: remove collation handling as required by newer POSIX; see
  - https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8e81d44b5
  - https://www.austingroupbugs.net/view.php?id=963
- coreutils-ls-restore-8.31-behavior-on-removed-dirs.patch:
  * Add patch for 'ls' to restore 8.31 behavior on removed directories.
- coreutils.spec:
  * Version: bump version.
  * %check: re-enable regular 'make check' for non-multibuild package.
  * reference the above new patch.
- coreutils.keyring:
  * Update from upstream (Savannah).</changelog>
  <changelog author="dmueller@suse.com" date="1588593600">- add coreutils-use-python3.patch to minimally port away from
  python 2.x use of pyinotify in the testsuite</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1592049600">- coreutils-gnulib-disable-test-float.patch: Add patch to temporarily
  disable the gnulib test 'test-float' failing on ppc and ppc64le.
- coreutils.spec: Reference the patch.  While at it, avoid conditional
  Patch and Source entries as that break cross-platform builds from
  source RPMs.</changelog>
  <changelog author="dimstar@opensuse.org" date="1594900800">- Drop suse-module-tools BuildRequires: this was used for the macro
  regenerate_initrd_post/posttrans, which have been moved to
  rpm-config-SUSE in Jan 2019.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1598875200">- gnulib-test-avoid-FP-perror-strerror.patch: Add patch to
  avoid false-positive error in gnulib tests 'test-perror2' and
  'test-strerror_r', visible on armv7l.
- coreutils.spec: Reference the patch.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="zpetrova@suse.com" date="1635163200">- coreutils-df-fuse-portal-dummy.patch:
  df: Add "fuse.portal" as a dummy file system (used in flatpak
  implementations). (bsc#1189152)</changelog>
  <changelog author="ailiop@suse.com" date="1706529600">- tail: fix tailing sysfs files where PAGE_SIZE &gt; BUFSIZ (bsc#1219321)
  - add coreutils-tail-fix-tailing-sysfs-files-where-PAGE_SIZE-BUFSIZ.patch</changelog>
  <changelog author="tabraham@suse.com" date="1712059200">- ls: avoid triggering automounts (bsc#1221632)
  - add coreutils-ls-avoid-triggering-automounts.patch</changelog>
  <changelog author="rw@suse.com" date="1748865600">- coreutils-9.7-sort-CVE-2025-5278.patch: Add upstream patch:
  sort with key character offsets of SIZE_MAX, could induce
  a read of 1 byte before an allocated heap buffer.
  (CVE-2025-5278, bsc#1243767)</changelog>
</package>
<package pkgid="98a97af083ad161724b1ceef6f0f720970a71b53f80335794d9b499ba3b03e63" name="coreutils-lang" arch="noarch">
  <version epoch="0" ver="8.32" rel="150400.9.9.1"/>
  <changelog author="ghe@suse.com" date="1502884800">- Drop coreutils-ocfs2_reflinks.patch
  OCFS2 file system has supported file clone ioctls like btrfs,
  then, coreutils doesn't need this patch from the kernel v4.10-rc1</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1504526400">- Update to 8.28
  (for details see included NEWS file)
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.keyring: Update from upstream (Savannah).
- Remove now-upstream patches:
  * coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch
  * coreutils-tests-port-to-timezone-2017a.patch
- coreutils.spec: Add "BuildRequires: user(bin)" for the tests.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1514462400">- Update to 8.29:
  * Noteworthy changes in release 8.29 (2017-12-27) [stable]
  * * Bug fixes
  b2sum no longer crashes when processing certain truncated check files.
  [bug introduced with b2sum coreutils-8.26]
  dd now ensures the correct cache ranges are specified for the "nocache"
  and "direct" flags.  Previously some pages in the page cache were not
  invalidated.  [bug introduced for "direct" in coreutils-7.5,
  and with the "nocache" implementation in coreutils-8.11]
  df no longer hangs when given a fifo argument.
  [bug introduced in coreutils-7.3]
  ptx -S no longer infloops for a pattern which returns zero-length matches.
  [the bug dates back to the initial implementation]
  shred --remove will again repeatedly rename files with shortening names
  to attempt to hide the original length of the file name.
  [bug introduced in coreutils-8.28]
  stty no longer crashes when processing settings with -F also specified.
  [bug introduced in fileutils-4.0]
  tail --bytes again supports non seekable inputs on all systems.
  On systems like android it always tried to process as seekable inputs.
  [bug introduced in coreutils-8.24]
  timeout will again notice its managed command exiting, even when
  invoked with blocked CHLD signal, or in a narrow window where
  this CHLD signal from the exiting child was missed.  In each case
  timeout would have then waited for the time limit to expire.
  [bug introduced in coreutils-8.27]
  * * New features
  timeout now supports the --verbose option to diagnose forced termination.
  * * Improvements
  dd now supports iflag=direct with arbitrary sized files on all file systems.
  tail --bytes=NUM will efficiently seek to the end of block devices,
  rather than reading from the start.
  Utilities which do not support long options (other than the default --help
  and --version), e.g. cksum and sleep, now use more consistent error diagnostic
  for unknown long options.
  * * Build-related
  Default man pages are now distributed which are used if perl is
  not available on the build system, or when cross compiling.
- Refresh patches (line number changes only):
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1530619200">- Update to 8.30:
  * Noteworthy changes in release 8.30 (2018-07-01) [stable]
  * * Bug fixes
  'cp --symlink SRC DST' will again correctly validate DST.
  If DST is a regular file and SRC is a symlink to DST,
  then cp will no longer allow that operation to clobber DST.
  Also with -d, if DST is a symlink, then it can always be replaced,
  even if it points to SRC on a separate device.
  [bugs introduced with coreutils-8.27]
  'cp -n -u' and 'mv -n -u' now consistently ignore the -u option.
  Previously, this option combination suffered from race conditions
  that caused -u to sometimes override -n.
  [bug introduced with coreutils-7.1]
  'cp -a --no-preserve=mode' now sets appropriate default permissions
  for non regular files like fifos and character device nodes etc.,
  and leaves mode bits of existing files unchanged.
  Previously it would have set executable bits on created special files,
  and set mode bits for existing files as if they had been created.
  [bug introduced with coreutils-8.20]
  'cp --remove-destination file symlink' now removes the symlink
  even if it can't be traversed.
  [bug introduced with --remove-destination in fileutils-4.1.1]
  ls no longer truncates the abbreviated month names that have a
  display width between 6 and 12 inclusive.  Previously this would have
  output ambiguous months for Arabic or Catalan locales.
  'ls -aA' is now equivalent to 'ls -A', since -A now overrides -a.
  [bug introduced in coreutils-5.3.0]
  'mv -n A B' no longer suffers from a race condition that can
  overwrite a simultaneously-created B.  This bug fix requires
  platform support for the renameat2 or renameatx_np syscalls, found
  in recent Linux and macOS kernels.  As a side effect, ‘mv -n A A’
  now silently does nothing if A exists.
  [bug introduced with coreutils-7.1]
  * * Changes in behavior
  'cp --force file symlink' now removes the symlink even if
  it is self referential.
  ls --color now matches file extensions case insensitively.
  * * New features
  cp --reflink now supports --reflink=never to enforce a standard copy.
  env supports a new -v/--debug option to show verbose information about
  each processing step.
  env supports a new -S/--split-string=S option to split a single argument
  string into multiple arguments. Used to pass multiple arguments in scripts
  (shebang lines).
  md5sum accepts a new option: --zero (-z) to delimit the output lines with a
  NUL instead of a newline character.  This also disables file name escaping.
  This also applies to sha*sum and b2sum.
  rm --preserve-root now supports the --preserve-root=all option to
  reject any command line argument that is mounted to a separate file system.
  * * Improvements
  cut supports line lengths up to the max file size on 32 bit systems.
  Previously only offsets up to SIZE_MAX-1 were supported.
  stat and tail now know about the "exfs" file system, which is a
  version of XFS.  stat -f --format=%T now reports the file system type,
  and tail -f uses inotify.
  wc avoids redundant processing of ASCII text in multibyte locales,
  which is especially significant on macOS.
  * * Build-related
  Adjust to glibc &gt;= 2.28  (bsc#1182550, jsc#SLE-13520, jsc#SLE-13756)
- Refresh patches (line number changes only):
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * (License): osc changed the value from "GPL-3.0+" to "GPL-3.0-or-later".
  * (build): Make sure that parse-datetime.{c,y} ends up in debuginfo (rh#1555079).
- coreutils-i18n.patch:
  * src/exand.c,src/unexpand.c: Avoid -Wcomment warning.
  * src/cut.c (cut_characters_or_cut_bytes_no_split): Change idx from size_t
    to uintmax_t type to avoid a regression on i586, armv7l and ppc.
    Compare upstream, non-MB commit:
    https://git.sv.gnu.org/cgit/coreutils.git/commit/?id=d1a754c8272
    (cut_fields_mb): Likewise for field_idx.
  * tests/misc/cut.pl: Remove downstream tweaks as upstream MB tests are
    working since a while.
- coreutils.keyring: Update Assaf Gordon's GPG public key.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1552305600">- Update to 8.31:
  * Noteworthy changes in release 8.31 (2019-03-10) [stable]
  * * Bug fixes
  'base64 a b' now correctly diagnoses 'b' as the extra operand, not 'a'.
  [bug introduced in coreutils-5.3.0]
  When B already exists, 'cp -il A B' no longer immediately fails
  after asking the user whether to proceed.
  [This bug was present in "the beginning".]
  df no longer corrupts displayed multibyte characters on macOS.
  [bug introduced with coreutils-8.18]
  seq no longer outputs inconsistent decimal point characters
  for the last number, when locales are misconfigured.
  [bug introduced in coreutils-7.0]
  shred, sort, and split no longer falsely report ftruncate errors
  when outputting to less-common file types.  For example, the shell
  command 'sort /dev/null -o /dev/stdout | cat' no longer fails with
  an "error truncating" diagnostic.
  [bug was introduced with coreutils-8.18 for sort and split, and
  (for shared memory objects only) with fileutils-4.1 for shred]
  sync no longer fails for write-only file arguments.
  [bug introduced with argument support to sync in coreutils-8.24]
  'tail -f file | filter' no longer exits immediately on AIX.
  [bug introduced in coreutils-8.28]
  'tail -f file | filter' no longer goes into an infinite loop
  if filter exits and SIGPIPE is ignored.
  [bug introduced in coreutils-8.28]
  * * Changes in behavior
  cksum, dd, hostid, hostname, link, logname, sleep, tsort, unlink,
  uptime, users, whoami, yes: now always process --help and --version options,
  regardless of any other arguments present before any optional '--'
  end-of-options marker.
  nohup now processes --help and --version as first options even if other
  parameters follow.
  'yes a -- b' now outputs 'a b' instead of including the end-of-options
  marker as before: 'a -- b'.
  echo now always processes backslash escapes when the POSIXLY_CORRECT
  environment variable is set.
  When possible 'ln A B' now merely links A to B and reports an error
  if this fails, instead of statting A and B before linking.  This
  uses fewer system calls and avoids some races.  The old statting
  approach is still used in situations where hard links to directories
  are allowed (e.g., NetBSD when superuser).
  ls --group-directories-first will also group symlinks to directories.
  'test -a FILE' is not supported anymore.  Long ago, there were concerns about
  the high probability of humans confusing the -a primary with the -a binary
  operator, so POSIX changed this to 'test -e FILE'.  Scripts using it were
  already broken and non-portable; the -a unary operator was never documented.
  wc now treats non breaking space characters as word delimiters
  unless the POSIXLY_CORRECT environment variable is set.
  * * New features
  id now supports specifying multiple users.
  'date' now supports the '+' conversion specification flag,
  introduced in POSIX.1-2017.
  printf, seq, sleep, tail, and timeout now accept floating point
  numbers in either the current or the C locale.  For example, if the
  current locale's decimal point is ',', 'sleep 0,1' and 'sleep 0.1'
  now mean the same thing.  Previously, these commands accepted only
  C-locale syntax with '.' as the decimal point.  The new behavior is
  more compatible with other implementations in non-C locales.
  test now supports the '-N FILE' unary operator (like e.g. bash) to check
  whether FILE exists and has been modified since it was last read.
  env now supports '--default-signal[=SIG]', '--ignore-signal[=SIG]', and
  '--block-signal[=SIG], to setup signal handling before executing a program.
  env now supports '--list-signal-handling' to indicate non-default
  signal handling before executing a program.
  * * New commands
  basenc is added to complement existing base64,base32 commands,
  and encodes and decodes printable text using various common encodings:
  base64,base64url,base32,base32hex,base16,base2,z85.
  * * Improvements
  ls -l now better aligns abbreviated months containing digits,
  which is common in Asian locales.
  stat and tail now know about the "sdcardfs" file system on Android.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  stat now prints file creation time when supported by the file system,
  on GNU Linux systems with glibc &gt;= 2.28 and kernel &gt;= 4.11.
- Refresh patches (line number changes only):
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-misc.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * Version: bump version.
  * URL: Use https scheme.
  * %description: Add 'basenc' tool.
  * Change gitweb to cgit URL with https in a comment.
- coreutils.keyring:
  * Update for added section headers ('GPG keys of &lt;MAINTAINER&gt;').</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="lnussel@suse.de" date="1578571200">- switch to multibuild
- add coreutils-single subpackage that contains a single binary coreutils tool
  similar to busybox
- package LC_CTIME directories also in lang package
- split off doc package
- remove info macros, handled by file trigger nowadays</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1579521600">- minor: remove obsolete comment in spec file.</changelog>
  <changelog author="lnussel@suse.de" date="1580212800">- disable single and testsuite builds in rings/staging
- remove duplicate "coreutils" in flavor to make it look nicer in OBS</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1583755200">- Update to 8.32:
  * Noteworthy changes in release 8.32 (2020-03-05) [stable]
  * * Bug fixes
  cp now copies /dev/fd/N correctly on platforms like Solaris where
  it is a character-special file whose minor device number is N.
  [bug introduced in fileutils-4.1.6]
  dd conv=fdatasync no longer reports a "Bad file descriptor" error
  when fdatasync is interrupted, and dd now retries interrupted calls
  to close, fdatasync, fstat and fsync instead of incorrectly
  reporting an "Interrupted system call" error.
  [bugs introduced in coreutils-6.0]
  df now correctly parses the /proc/self/mountinfo file for unusual entries
  like ones with '\r' in a field value ("mount -t tmpfs tmpfs /foo$'\r'bar"),
  when the source field is empty ('mount -t tmpfs "" /mnt'), and when the
  filesystem type contains characters like a blank which need escaping.
  [bugs introduced in coreutils-8.24 with the introduction of reading
  the /proc/self/mountinfo file]
  factor again outputs immediately when stdout is a tty but stdin is not.
  [bug introduced in coreutils-8.24]
  ln works again on old systems without O_DIRECTORY support (like Solaris 10),
  and on systems where symlink ("x", ".") fails with errno == EINVAL
  (like Solaris 10 and Solaris 11).
  [bug introduced in coreutils-8.31]
  rmdir --ignore-fail-on-non-empty now works correctly for directories
  that fail to be removed due to permission issues.  Previously the exit status
  was reversed, failing for non empty and succeeding for empty directories.
  [bug introduced in coreutils-6.11]
  'shuf -r -n 0 file' no longer mistakenly reads from standard input.
  [bug introduced with the --repeat feature in coreutils-8.22]
  split no longer reports a "output file suffixes exhausted" error
  when the specified number of files is evenly divisible by 10, 16, 26,
  for --numeric, --hex, or default alphabetic suffixes respectively.
  [bug introduced in coreutils-8.24]
  seq no longer prints an extra line under certain circumstances (such as
  'seq -f "%g " 1000000 1000000').
  [bug introduced in coreutils-6.10]
  * * Changes in behavior
  Several programs now check that numbers end properly.  For example,
  'du -d 1x' now reports an error instead of silently ignoring the 'x'.
  Affected programs and options include du -d, expr's numeric operands
  on non-GMP builds, install -g and -o, ls's TABSIZE environment
  variable, mknod b and c, ptx -g and -w, shuf -n, and sort --batch-size
  and --parallel.
  date now parses military time zones in accordance with common usage:
    "A" to "M"  are equivalent to UTC+1 to UTC+12
    "N" to "Y"  are equivalent to UTC-1 to UTC-12
    "Z" is "zulu" time (UTC).
  For example, 'date -d "09:00B" is now equivalent to 9am in UTC+2 time zone.
  Previously, military time zones were parsed according to the obsolete
  rfc822, with their value negated (e.g., "B" was equivalent to UTC-2).
  [The old behavior was introduced in sh-utils 2.0.15 ca. 1999, predating
  coreutils package.]
  ls issues an error message on a removed directory, on GNU/Linux systems.
  Previously no error and no entries were output, and so indistinguishable
  from an empty directory, with default ls options.
  uniq no longer uses strcoll() to determine string equivalence,
  and so will operate more efficiently and consistently.
  * * New Features
  ls now supports the --time=birth option to display and sort by
  file creation time, where available.
  od --skip-bytes now can use lseek even if the input is not a regular
  file, greatly improving performance in some cases.
  stat(1) supports a new --cached= option, used on systems with statx(2)
  to control cache coherency of file system attributes,
  useful on network file systems.
  * * Improvements
  stat and ls now use the statx() system call where available, which can
  operate more efficiently by only retrieving requested attributes.
  stat and tail now know about the "binderfs", "dma-buf-fs", "erofs",
  "ppc-cmm-fs", and "z3fold" file systems.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  * * Build-related
  gzip-compressed tarballs are distributed once again
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-getaddrinfo.patch
  * coreutils-i18n.patch
  * coreutils-invalid-ids.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils-i18n.patch:
  * uniq: remove collation handling as required by newer POSIX; see
  - https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8e81d44b5
  - https://www.austingroupbugs.net/view.php?id=963
- coreutils-ls-restore-8.31-behavior-on-removed-dirs.patch:
  * Add patch for 'ls' to restore 8.31 behavior on removed directories.
- coreutils.spec:
  * Version: bump version.
  * %check: re-enable regular 'make check' for non-multibuild package.
  * reference the above new patch.
- coreutils.keyring:
  * Update from upstream (Savannah).</changelog>
  <changelog author="dmueller@suse.com" date="1588593600">- add coreutils-use-python3.patch to minimally port away from
  python 2.x use of pyinotify in the testsuite</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1592049600">- coreutils-gnulib-disable-test-float.patch: Add patch to temporarily
  disable the gnulib test 'test-float' failing on ppc and ppc64le.
- coreutils.spec: Reference the patch.  While at it, avoid conditional
  Patch and Source entries as that break cross-platform builds from
  source RPMs.</changelog>
  <changelog author="dimstar@opensuse.org" date="1594900800">- Drop suse-module-tools BuildRequires: this was used for the macro
  regenerate_initrd_post/posttrans, which have been moved to
  rpm-config-SUSE in Jan 2019.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1598875200">- gnulib-test-avoid-FP-perror-strerror.patch: Add patch to
  avoid false-positive error in gnulib tests 'test-perror2' and
  'test-strerror_r', visible on armv7l.
- coreutils.spec: Reference the patch.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="zpetrova@suse.com" date="1635163200">- coreutils-df-fuse-portal-dummy.patch:
  df: Add "fuse.portal" as a dummy file system (used in flatpak
  implementations). (bsc#1189152)</changelog>
  <changelog author="ailiop@suse.com" date="1706529600">- tail: fix tailing sysfs files where PAGE_SIZE &gt; BUFSIZ (bsc#1219321)
  - add coreutils-tail-fix-tailing-sysfs-files-where-PAGE_SIZE-BUFSIZ.patch</changelog>
  <changelog author="tabraham@suse.com" date="1712059200">- ls: avoid triggering automounts (bsc#1221632)
  - add coreutils-ls-avoid-triggering-automounts.patch</changelog>
  <changelog author="rw@suse.com" date="1748865600">- coreutils-9.7-sort-CVE-2025-5278.patch: Add upstream patch:
  sort with key character offsets of SIZE_MAX, could induce
  a read of 1 byte before an allocated heap buffer.
  (CVE-2025-5278, bsc#1243767)</changelog>
</package>
<package pkgid="b43d66f244959da2888c9c1d174a2bcb46d2ff7e08ec6b628068602130d25f09" name="cosign" arch="src">
  <version epoch="0" ver="2.5.3" rel="150400.3.30.1"/>
  <changelog author="meissner@suse.com" date="1666094400">- update to 1.13.1:
  * verify-blob-attestation: allow multiple subjects in in_toto attestation (#2341)
  * Nits for #2337 (#2342)
  * Add verify-blob-attestation command and tests (#2337)
  * Update warning when users sign images by tag. (#2313)
  * Remove experimental flags from attest-blob and refactor (#2338)
  * Add --output-attestation flag to attest-blob and remove experimental signing (#2332)
  * Add attest-blob command (#2286)
  * Add '--cert-identity' flag to support subject alternate names for ver… (#2278)
  * Update Dockerfile section of README (#2323)
  * Fix option description: "sign" --&gt; "verify" (#2306)
- update to 1.13.0:
  * feat: use stdin as an input for predicate by @developer-guy in https://github.com/sigstore/cosign/pull/2269
  * feat: improve the verification message by @developer-guy in https://github.com/sigstore/cosign/pull/2268
  * use scaffolding 0.4.8 for tests. by @vaikas in https://github.com/sigstore/cosign/pull/2280
  * fix pivtool generate key touch policy by @cpanato in https://github.com/sigstore/cosign/pull/2282
  * Check error on chain verification failure by @haydentherapper in https://github.com/sigstore/cosign/pull/2284
  * Fix: Remove an extra registry request from verification path. by @mattmoor in https://github.com/sigstore/cosign/pull/2285
  * Fix: Create a static copy of signatures as part of verification. by @mattmoor in https://github.com/sigstore/cosign/pull/2287
  * Data race in FetchSignaturesForReference by @RTann in https://github.com/sigstore/cosign/pull/2283
  * Add support for Fulcio username identity in SAN by @haydentherapper in https://github.com/sigstore/cosign/pull/2291
  * fix: make tlog entry lookups for online verification shard-aware by @asraa in https://github.com/sigstore/cosign/pull/2297
  * Better help text to sign and verify SBOM by @ChristianCiach in https://github.com/sigstore/cosign/pull/2308
  * Adding warning to pin to digest by @ChaosInTheCRD in https://github.com/sigstore/cosign/pull/2311
  * Add annotations for upload blob. by @cldmnky in https://github.com/sigstore/cosign/pull/2188
  * replace deprecate package by @cpanato in https://github.com/sigstore/cosign/pull/2314
  * update release images to use go1.19.2 and cosign v1.12.1 by @cpanato in https://github.com/sigstore/cosign/pull/2315</changelog>
  <changelog author="meissner@suse.com" date="1677499200">- update to 2.0.0 (jsc#SLE-23879)
  Breaking Changes:
  * insecure-skip-tlog-verify: rename and adapt the cert expiration check (#2620)
  * Deprecate --certificate-email flag. Make --certificate-identity and -… (#2411)
  Enhancements:
  * Change go module name to github.com/sigstore/cosign/v2 for Cosign 2.0 (#2544)
  * Allow users to pass in a path for the --identity-token flag (#2538)
  * Breaking change: Respect tlog-upload=false, default to true (#2505)
  * Support outputing a certificate without uploading to the tlog (#2506)
  * Attestation/Blob signing and verification using a RFC3161 time-stamping server (#2464)
  * respect tlog-upload flag with TSA (#2474)
  * Better feedback if specifying incompatible argument on cosign sign --attachment (#2449)
  * Support TSA and Rekor verifications (#2463)
  * add support for tsa signing and verification of images (#2460)
  * cosign policy sign: remove experimental flag and make keyless signing default (#2459)
  * Remove experimental mode from cosign attest and verify-attestation (#2458)
  * Remove experimental mode from sign-blob and verify-blob (#2457)
  * Add --offline flag to force offline verification (#2427)
  * Air gap support (#2299)
  * Breaking change: Change SCT verification behavior to default to enforcement (#2400)
  * Breaking change: remove --force flag from sign and attest and rely on --yes flag to skip confirmation (#2399)
  * Breaking change: replace --no-tlog-upload flag with --tlog-upload flag (#2397)
  * Remove experimental flag from cosign sign and cosign verify (#2387)
  * verify: remove SIGSTORE_TRUST_REKOR_API_PUBLIC_KEY test env var for using a key from rekor's API (#2362)
  * Add warning to use digest instead of tags to other cosign commands (#2650)
  * Fix up UI messages (#2629)
  * Remove hardcoded Fulcio from output (#2621)
  * Fix missing privacy statement, print in multiple locations (#2622)
  * feat: allows custom key names for import-key-pair (#2587)
  * feat: support keyless verification for verify-blob-attestation (#2525)
  * attest-blob: add functionality for keyless signing (#2515)
  * Rego: add support for custom error/warning messages when evaluating rego rules (#2577)
  * feat: add debug information to cert validation error (#2579)
  * Support non-Sigstore TSA requests (#2708)
  * Add COSIGN_OCI_EXPERIMENTAL, push .sig/.sbom using OCI 1.1+ digest tag (#2684)
  * Output certificate in bundle when entry is not uploaded to Rekor (#2715)
  * attach signature and attach sbom must use STDIN to upload raw string (#2637)
  * add generate-key-pair GitHub Enterprise server support (#2676)
  * add in format string for warning (#2699)
  * Support for fetching Fulcio certs with self-managed key (#2532)
  * 2476 predicate type download (#2484)
  Bug Fixes:
  * Fix the file existence check. (#2552)
  * Fix timestamp verification, add verify-blob tests (#2527)
  * Fix(verify): Consolidate certificate expiry logic (#2504)
  * Updates to Timestamp signing and verification (#2499)
  * Fix: removes attestation payload from attest-blob's output &amp; no base64 encoding (#2498)
  * Fix path for e2e-tests badge (#2490)
  * Fix spdx json media type (#2479)
  * Fix sct verificaction (#2426)
  * Fix: panic with unsigned local image (#2656)
  * Make sure a cert passed in via --cert matches the bundle cert (#2652)
  * Fix: fix github oidc post submit test (#2594)
  * Fix: add enhanced error messages for failing verification with TUF targets (#2589)
  * Fix: Add missing schemes to cosign predicate types. (#2717)
  * Fix: Drop the CosignPredicate wrapper around SBOM attestations. (#2718)
  * Fix prompts with Windows line endings (#2674)</changelog>
  <changelog author="dmueller@suse.com" date="1680609600">- fix buildtags
- build against a maintained golang version (upstream uses go1.20)</changelog>
  <changelog author="meissner@suse.com" date="1681732800">- update to 2.0.1 (jsc#SLE-23879)
  Enhancements
  - Add environment variable token provider (#2864)
  - Remove cosign policy command (#2846)
  - Allow customising 'go' executable with GOEXE var (#2841)
  - Consistent tlog warnings during verification (#2840)
  - Add riscv64 arch (#2821)
  - Default generated PEM labels to SIGSTORE (#2735)
  - Update privacy statement and confirmation (#2797)
  - Add exit codes for verify errors (#2766)
  - Add Buildkite provider (#2779)
  - verify-blob-attestation: Loosen arg requirements if --check-claims=false (#2746)
  Bug Fixes
  - PKCS11 sessions are now opened read only (#2853)
  - Makefile: date format of log should not show signatures (#2835)
  - Add missing flags to cosign verify dockerfile/manifest (#2830)
  - Add a warning to remember how to configure a custom Gitlab host (#2816)
  - Remove tag warning message from save/copy commands (#2799)
  - Mark keyless pem files with b64 (#2671)</changelog>
  <changelog author="meissner@suse.com" date="1683460800">- update to 2.0.2 (jsc#SLE-23879)
  Enhancements
  - Update sigstore/sigstore to v1.6.2 to pick up TUF CDN change (#2891)
  - feat: Make cosign copy faster (#2901)
  - remove sget (#2885)
  - Require a payload to be provided with a signature (#2785)
  Bug Fixes
  - cmd: Change error message from KeyParseError to PubKeyParseError for verify-blob. (#2876)
  - Use SOURCE_DATE_EPOCH for OCI CreatedAt times (#2878)
  Documentation
  - Remove experimental warning from Fulcio flags (#2923)
  - add missing oidc provider (#2922)
  - Add zot as a supported registry (#2920)
  - deprecates kms_support docs (#2900)
  - chore(docs) deprecate note for usage docs (#2906)
  - adds note of deprecation for examples.md docs (#2899)</changelog>
  <changelog author="meissner@suse.com" date="1687867200">- updated to 2.1.1 (jsc#SLE-23879)
  - Bug Fixes
  - wait for the workers become available again to continue the execution (#3084)
  - fix help text when in a container (#3082)
- updated to 2.1.0 (jsc#SLE-23879)
  - Breaking Change: The predicate is now a required flag in the attest commands, set via the --type flag.
  - Enhancements
  - Verify sigs and attestations in parallel (#3066)
  - Deep inspect attestations when filtering download (#3031)
  - refactor bundle validation code, add support for DSSE rekor type (#3016)
  - Allow overriding remote options (#3049)
  - feat: adds no cert found on sig exit code (#3038)
  - Make predicate a required flag in attest commands (#3033)
  - Added support for attaching Time stamp authority Response in attach command (#3001)
  - Add sign --sign-container-identity CLI (#2984)
  - Feature: Allow cosign to sign digests before they are uploaded. (#2959)
  - accepts attachment-tag-prefix for cosign copy (#3014)
  - Feature: adds '--allow-insecure-registry' for cosign load (#3000)
  - download attestation: support --platform flag (#2980)
  - Cleanup: Add Digest to the SignedEntity interface. (#2960)
  - verify command: support keyless verification using only a provided certificate chain with non-fulcio roots (#2845)
  - verify: use workers to limit the paralellism when verifying images with --max-workers flag (#3069)
  - Bug Fixes
  - Fix pkg/cosign/errors (#3050)
  - Fix: update doc to refer to github-actions oidc provider (#3040)
  - Fix: prefer GitHub OIDC provider if enabled (#3044)
  - Fix --sig-only in cosign copy (#3074)
  - Documentation
  - Fix links to sigstore/docs in markdown files (#3064)</changelog>
  <changelog author="meissner@suse.com" date="1693569600">- updated to 2.2.0 (jsc#SLE-23879)
  - Enhancements
  * switch to uploading DSSE types to rekor instead of intoto (#3113)
  * add 'cosign sign' command-line parameters for mTLS (#3052)
  * improve error messages around bundle != payload hash (#3146)
  * make VerifyImageAttestation function public (#3156)
  * Switch to cryptoutils function for SANS (#3185)
  * Handle HTTP_1_1_REQUIRED errors in github provider (#3172)
  - Bug Fixes
  * Fix nondeterminsitic timestamps (#3121)
  - Documentation
  * doc: Add example of sign-blob with key in env var (#3152)
  * add deprecation notice for cosign-releases GCS bucket (#3148)
  * update doc links (#3186)</changelog>
  <changelog author="meissner@suse.com" date="1699358400">- updated to 2.2.1 (jsc#SLE-23879)
  This release comes with a fix for
  CVE-2023-46737 / bsc#1216933 described in this [Github Security
  Advisory](https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9).
  Enhancements:
  * feat: Support basic auth and bearer auth login to registry (#3310)
  * add support for ignoring certificates with pkcs11 (#3334)
  * Support ReplaceOp in Signatures (#3315)
  * feat: added ability to get image digest back via triangulate (#3255)
  * feat: add `--only` flag in `cosign copy` to copy sign, att &amp; sbom (#3247)
  * feat: add support attaching a Rekor bundle to a container (#3246)
  * feat: add support outputting rekor response on signing (#3248)
  * feat: improve dockerfile verify subcommand (#3264)
  * Add guard flag for experimental OCI 1.1 verify. (#3272)
  * Deprecate SBOM attachments (#3256)
  * feat: dedent line in cosign copy doc (#3244)
  * feat: add platform flag to cosign copy command (#3234)
  * Add SLSA 1.0 attestation support to cosign. Closes #2860 (#3219)
  * attest: pass OCI remote opts to att resolver. (#3225)
  Bug Fixes:
  * Merge pull request from GHSA-vfp6-jrw2-99g9
  * fix: allow cosign download sbom when image is absent (#3245)
  * ci: add a OCI registry test for referrers support (#3253)
  * Fix ReplaceSignatures (#3292)
  * Stop using deprecated in_toto.ProvenanceStatement (#3243)
  * Fixes #3236, disable SCT checking for a cosign verification when usin… (#3237)
  * fix: update error in `SignedEntity` to be more descriptive (#3233)
  * Fail timestamp verification if no root is provided (#3224)
  Documentation:
  * Add some docs about verifying in an air-gapped environment (#3321)
  * Update CONTRIBUTING.md (#3268)
  * docs: improves the Contribution guidelines (#3257)
  * Remove security policy (#3230)
  Others:
  * Set go to min 1.21 and update dependencies  (#3327)
  * Update contact for code of conduct (#3266)
  * Update .ko.yaml (#3240)</changelog>
  <changelog author="marcos.bjoerkelund@suse.com" date="1702382400">- updated to 2.2.2 (jsc#SLE-23879)
  v2.2.2 adds a new container with a shell,
  gcr.io/projectsigstore/cosign:vx.y.z-dev, in addition to the existing
  container gcr.io/projectsigstore/cosign:vx.y.z without a shell.
  For private deployments, we have also added an alias for
  - -insecure-skip-log, --private-infrastructure.
  Bug Fixes:
  * chore(deps): bump github.com/sigstore/sigstore from 1.7.5 to 1.7.6 (#3411) which fixes a bug with using Azure KMS
  * Don't require CT log keys if using a key/sk (#3415)
  * Fix copy without any flag set (#3409)
  * Update cosign generate cmd to not include newline (#3393)
  * Fix idempotency error with signing (#3371)
  Features:
  * Add --yes flag cosign import-key-pair to skip the overwrite confirmation. (#3383)
  * Use the timeout flag value in verify* commands. (#3391)
  * add --private-infrastructure flag (#3369)
  Container Updates:
  * Bump builder image to use go1.21.4 and add new cosign image tags with shell (#3373)
  Documentation:
  * Update SBOM_SPEC.md (#3358)</changelog>
  <changelog author="meissner@suse.com" date="1706875200">- updated to 2.2.3 (jsc#SLE-23879)
  Bug Fixes:
  * Fix race condition on verification with multiple signatures attached to image (#3486)
  * fix(clean): Fix clean cmd for private registries (#3446)
  * Fixed BYO PKI verification (#3427)
  Features:
  * Allow for option in cosign attest and attest-blob to upload attestation as supported in Rekor (#3466)
  * Add support for OpenVEX predicate type (#3405)
  Documentation:
  * Resolves #3088: `version` sub-command expected behaviour documentation and testing (#3447)
  * add examples for cosign attach signature cmd (#3468)
  Misc:
  * Remove CertSubject function (#3467)
  * Use local rekor and fulcio instances in e2e tests (#3478)
- bumped embedded golang.org/x/crypto/ssh to fix the Terrapin attack CVE-2023-48795 (bsc#1218207)</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- updated to 2.2.4 (jsc#SLE-23879)
  * Bug Fixes
  * Fixes for GHSA-88jx-383q-w4qc and GHSA-95pr-fxf5-86gv (#3661)
  - CVE-2024-29902: Malicious attachments can cause system-wide denial of service (bsc#1222835)
  - CVE-2024-29903: Malicious artifects can cause machine-wide denial of service (bsc#1222837)
  * ErrNoSignaturesFound should be used when there is no signature attached to an image. (#3526)
  * fix semgrep issues for dgryski.semgrep-go ruleset (#3541)
  * Honor creation timestamp for signatures again (#3549)
  * Features
  * Adds Support for Fulcio Client Credentials Flow, and Argument to Set Flow Explicitly (#3578)
  * Documentation
  * add oci bundle spec (#3622)
  * Correct help text of triangulate cmd (#3551)
  * Correct help text of verify-attestation policy argument (#3527)
  * feat: add OVHcloud MPR registry tested with cosign (#3639)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1717156800">- add completion subpackages (bash, fish, zsh)</changelog>
  <changelog author="meissner@suse.com" date="1721822400">- update to 2.3.0 (jsc#SLE-23879)
  * Features
  - Add PayloadProvider interface to decouple AttestationToPayloadJSON from oci.Signature interface (#3693)
  - add registry options to cosign save (#3645)
  - Add debug providers command. (#3728)
  - Make config layers in ociremote mountable (#3741)
  - adds tsa cert chain check for env var or tuf targets. (#3600)
  - add --ca-roots and --ca-intermediates flags to 'cosign verify' (#3464)
  - add handling of keyless verification for all verify commands (#3761)
  * Bug Fixes
  - fix: close attestationFile (#3679)
  - Set bundleVerified to true after Rekor verification (Resolves #3740) (#3745)
  * Documentation
  - Document ImportKeyPair and LoadPrivateKey functions in pkg/cosign (#3776)</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1724155200">- Set CGO_ENABLED=1 for fixing s390x failed build</changelog>
  <changelog author="meissner@suse.com" date="1727870400">- update to 2.4.0 (jsc#SLE-23879)
  - Add new bundle support to verify-blob and verify-blob-attestation (#3796)
  - Adding protobuf bundle support to sign-blob and attest-blob (#3752)
  - Bump sigstore/sigstore to support email_verified as string or boolean (#3819)
  - Conformance testing for cosign (#3806)
  - move incremental builds per commit to GHCR instead of GCR (#3808)
  - Add support for recording creation timestamp for cosign attest (#3797)
  - Include SCT verification failure details in error message (#3799)</changelog>
  <changelog author="meissner@suse.com" date="1738756800">- Update to version 2.4.2:
  - Updated open-policy-agent to 1.1.0 library (#4036)
  - Note that only Rego v0 policies are supported at this time
  - Add UseSignedTimestamps to CheckOpts, refactor TSA options (#4006)
  - Add support for verifying root checksum in cosign initialize (#3953)
  - Detect if user supplied a valid protobuf bundle (#3931)
  - Add a log message if user doesn't provide --trusted-root (#3933)
  - Support mTLS towards container registry (#3922)
  - Add bundle create helper command (#3901)
  - Add trusted-root create helper command (#3876)
  Bug Fixes:
  - fix: set tls config while retaining other fields from default http transport (#4007)
  - policy fuzzer: ignore known panics (#3993)
  - Fix for multiple WithRemote options (#3982)
  - Add nightly conformance test workflow (#3979)
  - Fix copy --only for signatures + update/align docs (#3904)
- use "osc service mr" to update</changelog>
  <changelog author="meissner@suse.com" date="1740052800">- Update to version 2.4.3:
  * Enable fetching signatures without remote get. (#4047)
  * Bump sigstore/sigstore to support KMS plugins (#4073)
  * sort properly Go imports (#4071)
  * sync comment with parameter name in function signature (#4063)
  * fix go imports order to be alphabetical (#4062)
  * fix comment typo and imports order (#4061)
  * Feat/file flag completion improvements (#4028)
  * Udpate builder to use go1.23.6 (#4052)
  * Refactor verifyNewBundle into library function (#4013)
  * fix parsing error in --only for cosign copy (#4049)
  * Fix codeowners syntax, add dep-maintainers (#4046)</changelog>
  <changelog author="meissner@suse.com" date="1744545600">- Update to version 2.5.0:
  * Update sigstore-go to pick up bug fixes (#4150)
  * Update golangci-lint to v2, update golangci-lint-action (#4143)
  * Feat/non filename completions (#4115)
  * update builder to use go1.24.1 (#4116)
  * Add support for new bundle specification for attesting/verifying OCI image attestations (#3889)
  * Remove cert log line (#4113)
  * cmd/cosign/cli: fix typo in ignoreTLogMessage (#4111)
  * bump to latest scaffolding release for testing (#4099)
  * increase 2e2_test docker compose tiemout to 180s (#4091)
  * Fix replace with compliant image mediatype (#4077)
  * Add TSA certificate related flags and fields for cosign attest (#4079)
- Security issues fixed:
  - CVE-2024-6104: cosign: hashicorp/go-retryablehttp: url might write sensitive information to log file (bsc#1227031)
  - CVE-2024-51744: cosign: github.com/golang-jwt/jwt/v4: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt (bsc#1232985)
  - CVE-2025-27144: cosign: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: Go JOSE's Parsing Vulnerable to Denial of Service (bsc#1237682)
  - CVE-2025-22870: cosign: golang.org/x/net/proxy: proxy bypass using IPv6 zone IDs (bsc#1238693)
  - CVE-2025-22868: cosign: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239204)
  - CVE-2025-22869: cosign: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239337)</changelog>
  <changelog author="meissner@suse.com" date="1748433600">- switch to go1.24, enable fips build</changelog>
  <changelog author="meissner@suse.com" date="1752840000">- Update to version 2.5.3 (jsc#SLE-23879)
  - Add signing-config create command (#4280)
  - Allow multiple services to be specified for trusted-root create (#4285)
  - force when copying the latest image to overwrite (#4298)
  - Fix cert verification logic for trusted-root/SCTs (#4294)
  - Fix lint error for types package (#4295)
  - feat: Add OCI 1.1+ experimental support to tree (#4205)
  - Add validity period end for trusted-root create (#4271)
  - avoid double-loading trustedroot from file (#4264)
- Update to 2.5.2:
  - Do not load trusted root when CT env key is set
  - docs: improve doc for --no-upload option (#4206)
- Update to 2.5.1:
  * Features
  - Add Rekor v2 support for trusted-root create (#4242)
  - Add baseUrl and Uri to trusted-root create command
  - Upgrade to TUF v2 client with trusted root
  - Don't verify SCT for a private PKI cert (#4225)
  - Bump TSA library to relax EKU chain validation rules (#4219)
  * Bug Fixes
  - Bump sigstore-go to pick up log index=0 fix (#4162)
  - remove unused recursive flag on attest command (#4187)
  * Docs
  - Fix indentation in verify-blob cmd examples (#4160)
  * GO-2025-3660/ CVE-2025-46569: Fixed OPA server Data API HTTP path injection of Rego (bsc#1246725)</changelog>
</package>
<package pkgid="a382bedd9c2698dd58ee7b7be7310edb5a39ecd1216c8fe6027835560f1d16fc" name="cosign" arch="x86_64">
  <version epoch="0" ver="2.5.3" rel="150400.3.30.1"/>
  <changelog author="meissner@suse.com" date="1666094400">- update to 1.13.1:
  * verify-blob-attestation: allow multiple subjects in in_toto attestation (#2341)
  * Nits for #2337 (#2342)
  * Add verify-blob-attestation command and tests (#2337)
  * Update warning when users sign images by tag. (#2313)
  * Remove experimental flags from attest-blob and refactor (#2338)
  * Add --output-attestation flag to attest-blob and remove experimental signing (#2332)
  * Add attest-blob command (#2286)
  * Add '--cert-identity' flag to support subject alternate names for ver… (#2278)
  * Update Dockerfile section of README (#2323)
  * Fix option description: "sign" --&gt; "verify" (#2306)
- update to 1.13.0:
  * feat: use stdin as an input for predicate by @developer-guy in https://github.com/sigstore/cosign/pull/2269
  * feat: improve the verification message by @developer-guy in https://github.com/sigstore/cosign/pull/2268
  * use scaffolding 0.4.8 for tests. by @vaikas in https://github.com/sigstore/cosign/pull/2280
  * fix pivtool generate key touch policy by @cpanato in https://github.com/sigstore/cosign/pull/2282
  * Check error on chain verification failure by @haydentherapper in https://github.com/sigstore/cosign/pull/2284
  * Fix: Remove an extra registry request from verification path. by @mattmoor in https://github.com/sigstore/cosign/pull/2285
  * Fix: Create a static copy of signatures as part of verification. by @mattmoor in https://github.com/sigstore/cosign/pull/2287
  * Data race in FetchSignaturesForReference by @RTann in https://github.com/sigstore/cosign/pull/2283
  * Add support for Fulcio username identity in SAN by @haydentherapper in https://github.com/sigstore/cosign/pull/2291
  * fix: make tlog entry lookups for online verification shard-aware by @asraa in https://github.com/sigstore/cosign/pull/2297
  * Better help text to sign and verify SBOM by @ChristianCiach in https://github.com/sigstore/cosign/pull/2308
  * Adding warning to pin to digest by @ChaosInTheCRD in https://github.com/sigstore/cosign/pull/2311
  * Add annotations for upload blob. by @cldmnky in https://github.com/sigstore/cosign/pull/2188
  * replace deprecate package by @cpanato in https://github.com/sigstore/cosign/pull/2314
  * update release images to use go1.19.2 and cosign v1.12.1 by @cpanato in https://github.com/sigstore/cosign/pull/2315</changelog>
  <changelog author="meissner@suse.com" date="1677499200">- update to 2.0.0 (jsc#SLE-23879)
  Breaking Changes:
  * insecure-skip-tlog-verify: rename and adapt the cert expiration check (#2620)
  * Deprecate --certificate-email flag. Make --certificate-identity and -… (#2411)
  Enhancements:
  * Change go module name to github.com/sigstore/cosign/v2 for Cosign 2.0 (#2544)
  * Allow users to pass in a path for the --identity-token flag (#2538)
  * Breaking change: Respect tlog-upload=false, default to true (#2505)
  * Support outputing a certificate without uploading to the tlog (#2506)
  * Attestation/Blob signing and verification using a RFC3161 time-stamping server (#2464)
  * respect tlog-upload flag with TSA (#2474)
  * Better feedback if specifying incompatible argument on cosign sign --attachment (#2449)
  * Support TSA and Rekor verifications (#2463)
  * add support for tsa signing and verification of images (#2460)
  * cosign policy sign: remove experimental flag and make keyless signing default (#2459)
  * Remove experimental mode from cosign attest and verify-attestation (#2458)
  * Remove experimental mode from sign-blob and verify-blob (#2457)
  * Add --offline flag to force offline verification (#2427)
  * Air gap support (#2299)
  * Breaking change: Change SCT verification behavior to default to enforcement (#2400)
  * Breaking change: remove --force flag from sign and attest and rely on --yes flag to skip confirmation (#2399)
  * Breaking change: replace --no-tlog-upload flag with --tlog-upload flag (#2397)
  * Remove experimental flag from cosign sign and cosign verify (#2387)
  * verify: remove SIGSTORE_TRUST_REKOR_API_PUBLIC_KEY test env var for using a key from rekor's API (#2362)
  * Add warning to use digest instead of tags to other cosign commands (#2650)
  * Fix up UI messages (#2629)
  * Remove hardcoded Fulcio from output (#2621)
  * Fix missing privacy statement, print in multiple locations (#2622)
  * feat: allows custom key names for import-key-pair (#2587)
  * feat: support keyless verification for verify-blob-attestation (#2525)
  * attest-blob: add functionality for keyless signing (#2515)
  * Rego: add support for custom error/warning messages when evaluating rego rules (#2577)
  * feat: add debug information to cert validation error (#2579)
  * Support non-Sigstore TSA requests (#2708)
  * Add COSIGN_OCI_EXPERIMENTAL, push .sig/.sbom using OCI 1.1+ digest tag (#2684)
  * Output certificate in bundle when entry is not uploaded to Rekor (#2715)
  * attach signature and attach sbom must use STDIN to upload raw string (#2637)
  * add generate-key-pair GitHub Enterprise server support (#2676)
  * add in format string for warning (#2699)
  * Support for fetching Fulcio certs with self-managed key (#2532)
  * 2476 predicate type download (#2484)
  Bug Fixes:
  * Fix the file existence check. (#2552)
  * Fix timestamp verification, add verify-blob tests (#2527)
  * Fix(verify): Consolidate certificate expiry logic (#2504)
  * Updates to Timestamp signing and verification (#2499)
  * Fix: removes attestation payload from attest-blob's output &amp; no base64 encoding (#2498)
  * Fix path for e2e-tests badge (#2490)
  * Fix spdx json media type (#2479)
  * Fix sct verificaction (#2426)
  * Fix: panic with unsigned local image (#2656)
  * Make sure a cert passed in via --cert matches the bundle cert (#2652)
  * Fix: fix github oidc post submit test (#2594)
  * Fix: add enhanced error messages for failing verification with TUF targets (#2589)
  * Fix: Add missing schemes to cosign predicate types. (#2717)
  * Fix: Drop the CosignPredicate wrapper around SBOM attestations. (#2718)
  * Fix prompts with Windows line endings (#2674)</changelog>
  <changelog author="dmueller@suse.com" date="1680609600">- fix buildtags
- build against a maintained golang version (upstream uses go1.20)</changelog>
  <changelog author="meissner@suse.com" date="1681732800">- update to 2.0.1 (jsc#SLE-23879)
  Enhancements
  - Add environment variable token provider (#2864)
  - Remove cosign policy command (#2846)
  - Allow customising 'go' executable with GOEXE var (#2841)
  - Consistent tlog warnings during verification (#2840)
  - Add riscv64 arch (#2821)
  - Default generated PEM labels to SIGSTORE (#2735)
  - Update privacy statement and confirmation (#2797)
  - Add exit codes for verify errors (#2766)
  - Add Buildkite provider (#2779)
  - verify-blob-attestation: Loosen arg requirements if --check-claims=false (#2746)
  Bug Fixes
  - PKCS11 sessions are now opened read only (#2853)
  - Makefile: date format of log should not show signatures (#2835)
  - Add missing flags to cosign verify dockerfile/manifest (#2830)
  - Add a warning to remember how to configure a custom Gitlab host (#2816)
  - Remove tag warning message from save/copy commands (#2799)
  - Mark keyless pem files with b64 (#2671)</changelog>
  <changelog author="meissner@suse.com" date="1683460800">- update to 2.0.2 (jsc#SLE-23879)
  Enhancements
  - Update sigstore/sigstore to v1.6.2 to pick up TUF CDN change (#2891)
  - feat: Make cosign copy faster (#2901)
  - remove sget (#2885)
  - Require a payload to be provided with a signature (#2785)
  Bug Fixes
  - cmd: Change error message from KeyParseError to PubKeyParseError for verify-blob. (#2876)
  - Use SOURCE_DATE_EPOCH for OCI CreatedAt times (#2878)
  Documentation
  - Remove experimental warning from Fulcio flags (#2923)
  - add missing oidc provider (#2922)
  - Add zot as a supported registry (#2920)
  - deprecates kms_support docs (#2900)
  - chore(docs) deprecate note for usage docs (#2906)
  - adds note of deprecation for examples.md docs (#2899)</changelog>
  <changelog author="meissner@suse.com" date="1687867200">- updated to 2.1.1 (jsc#SLE-23879)
  - Bug Fixes
  - wait for the workers become available again to continue the execution (#3084)
  - fix help text when in a container (#3082)
- updated to 2.1.0 (jsc#SLE-23879)
  - Breaking Change: The predicate is now a required flag in the attest commands, set via the --type flag.
  - Enhancements
  - Verify sigs and attestations in parallel (#3066)
  - Deep inspect attestations when filtering download (#3031)
  - refactor bundle validation code, add support for DSSE rekor type (#3016)
  - Allow overriding remote options (#3049)
  - feat: adds no cert found on sig exit code (#3038)
  - Make predicate a required flag in attest commands (#3033)
  - Added support for attaching Time stamp authority Response in attach command (#3001)
  - Add sign --sign-container-identity CLI (#2984)
  - Feature: Allow cosign to sign digests before they are uploaded. (#2959)
  - accepts attachment-tag-prefix for cosign copy (#3014)
  - Feature: adds '--allow-insecure-registry' for cosign load (#3000)
  - download attestation: support --platform flag (#2980)
  - Cleanup: Add Digest to the SignedEntity interface. (#2960)
  - verify command: support keyless verification using only a provided certificate chain with non-fulcio roots (#2845)
  - verify: use workers to limit the paralellism when verifying images with --max-workers flag (#3069)
  - Bug Fixes
  - Fix pkg/cosign/errors (#3050)
  - Fix: update doc to refer to github-actions oidc provider (#3040)
  - Fix: prefer GitHub OIDC provider if enabled (#3044)
  - Fix --sig-only in cosign copy (#3074)
  - Documentation
  - Fix links to sigstore/docs in markdown files (#3064)</changelog>
  <changelog author="meissner@suse.com" date="1693569600">- updated to 2.2.0 (jsc#SLE-23879)
  - Enhancements
  * switch to uploading DSSE types to rekor instead of intoto (#3113)
  * add 'cosign sign' command-line parameters for mTLS (#3052)
  * improve error messages around bundle != payload hash (#3146)
  * make VerifyImageAttestation function public (#3156)
  * Switch to cryptoutils function for SANS (#3185)
  * Handle HTTP_1_1_REQUIRED errors in github provider (#3172)
  - Bug Fixes
  * Fix nondeterminsitic timestamps (#3121)
  - Documentation
  * doc: Add example of sign-blob with key in env var (#3152)
  * add deprecation notice for cosign-releases GCS bucket (#3148)
  * update doc links (#3186)</changelog>
  <changelog author="meissner@suse.com" date="1699358400">- updated to 2.2.1 (jsc#SLE-23879)
  This release comes with a fix for
  CVE-2023-46737 / bsc#1216933 described in this [Github Security
  Advisory](https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9).
  Enhancements:
  * feat: Support basic auth and bearer auth login to registry (#3310)
  * add support for ignoring certificates with pkcs11 (#3334)
  * Support ReplaceOp in Signatures (#3315)
  * feat: added ability to get image digest back via triangulate (#3255)
  * feat: add `--only` flag in `cosign copy` to copy sign, att &amp; sbom (#3247)
  * feat: add support attaching a Rekor bundle to a container (#3246)
  * feat: add support outputting rekor response on signing (#3248)
  * feat: improve dockerfile verify subcommand (#3264)
  * Add guard flag for experimental OCI 1.1 verify. (#3272)
  * Deprecate SBOM attachments (#3256)
  * feat: dedent line in cosign copy doc (#3244)
  * feat: add platform flag to cosign copy command (#3234)
  * Add SLSA 1.0 attestation support to cosign. Closes #2860 (#3219)
  * attest: pass OCI remote opts to att resolver. (#3225)
  Bug Fixes:
  * Merge pull request from GHSA-vfp6-jrw2-99g9
  * fix: allow cosign download sbom when image is absent (#3245)
  * ci: add a OCI registry test for referrers support (#3253)
  * Fix ReplaceSignatures (#3292)
  * Stop using deprecated in_toto.ProvenanceStatement (#3243)
  * Fixes #3236, disable SCT checking for a cosign verification when usin… (#3237)
  * fix: update error in `SignedEntity` to be more descriptive (#3233)
  * Fail timestamp verification if no root is provided (#3224)
  Documentation:
  * Add some docs about verifying in an air-gapped environment (#3321)
  * Update CONTRIBUTING.md (#3268)
  * docs: improves the Contribution guidelines (#3257)
  * Remove security policy (#3230)
  Others:
  * Set go to min 1.21 and update dependencies  (#3327)
  * Update contact for code of conduct (#3266)
  * Update .ko.yaml (#3240)</changelog>
  <changelog author="marcos.bjoerkelund@suse.com" date="1702382400">- updated to 2.2.2 (jsc#SLE-23879)
  v2.2.2 adds a new container with a shell,
  gcr.io/projectsigstore/cosign:vx.y.z-dev, in addition to the existing
  container gcr.io/projectsigstore/cosign:vx.y.z without a shell.
  For private deployments, we have also added an alias for
  - -insecure-skip-log, --private-infrastructure.
  Bug Fixes:
  * chore(deps): bump github.com/sigstore/sigstore from 1.7.5 to 1.7.6 (#3411) which fixes a bug with using Azure KMS
  * Don't require CT log keys if using a key/sk (#3415)
  * Fix copy without any flag set (#3409)
  * Update cosign generate cmd to not include newline (#3393)
  * Fix idempotency error with signing (#3371)
  Features:
  * Add --yes flag cosign import-key-pair to skip the overwrite confirmation. (#3383)
  * Use the timeout flag value in verify* commands. (#3391)
  * add --private-infrastructure flag (#3369)
  Container Updates:
  * Bump builder image to use go1.21.4 and add new cosign image tags with shell (#3373)
  Documentation:
  * Update SBOM_SPEC.md (#3358)</changelog>
  <changelog author="meissner@suse.com" date="1706875200">- updated to 2.2.3 (jsc#SLE-23879)
  Bug Fixes:
  * Fix race condition on verification with multiple signatures attached to image (#3486)
  * fix(clean): Fix clean cmd for private registries (#3446)
  * Fixed BYO PKI verification (#3427)
  Features:
  * Allow for option in cosign attest and attest-blob to upload attestation as supported in Rekor (#3466)
  * Add support for OpenVEX predicate type (#3405)
  Documentation:
  * Resolves #3088: `version` sub-command expected behaviour documentation and testing (#3447)
  * add examples for cosign attach signature cmd (#3468)
  Misc:
  * Remove CertSubject function (#3467)
  * Use local rekor and fulcio instances in e2e tests (#3478)
- bumped embedded golang.org/x/crypto/ssh to fix the Terrapin attack CVE-2023-48795 (bsc#1218207)</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- updated to 2.2.4 (jsc#SLE-23879)
  * Bug Fixes
  * Fixes for GHSA-88jx-383q-w4qc and GHSA-95pr-fxf5-86gv (#3661)
  - CVE-2024-29902: Malicious attachments can cause system-wide denial of service (bsc#1222835)
  - CVE-2024-29903: Malicious artifects can cause machine-wide denial of service (bsc#1222837)
  * ErrNoSignaturesFound should be used when there is no signature attached to an image. (#3526)
  * fix semgrep issues for dgryski.semgrep-go ruleset (#3541)
  * Honor creation timestamp for signatures again (#3549)
  * Features
  * Adds Support for Fulcio Client Credentials Flow, and Argument to Set Flow Explicitly (#3578)
  * Documentation
  * add oci bundle spec (#3622)
  * Correct help text of triangulate cmd (#3551)
  * Correct help text of verify-attestation policy argument (#3527)
  * feat: add OVHcloud MPR registry tested with cosign (#3639)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1717156800">- add completion subpackages (bash, fish, zsh)</changelog>
  <changelog author="meissner@suse.com" date="1721822400">- update to 2.3.0 (jsc#SLE-23879)
  * Features
  - Add PayloadProvider interface to decouple AttestationToPayloadJSON from oci.Signature interface (#3693)
  - add registry options to cosign save (#3645)
  - Add debug providers command. (#3728)
  - Make config layers in ociremote mountable (#3741)
  - adds tsa cert chain check for env var or tuf targets. (#3600)
  - add --ca-roots and --ca-intermediates flags to 'cosign verify' (#3464)
  - add handling of keyless verification for all verify commands (#3761)
  * Bug Fixes
  - fix: close attestationFile (#3679)
  - Set bundleVerified to true after Rekor verification (Resolves #3740) (#3745)
  * Documentation
  - Document ImportKeyPair and LoadPrivateKey functions in pkg/cosign (#3776)</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1724155200">- Set CGO_ENABLED=1 for fixing s390x failed build</changelog>
  <changelog author="meissner@suse.com" date="1727870400">- update to 2.4.0 (jsc#SLE-23879)
  - Add new bundle support to verify-blob and verify-blob-attestation (#3796)
  - Adding protobuf bundle support to sign-blob and attest-blob (#3752)
  - Bump sigstore/sigstore to support email_verified as string or boolean (#3819)
  - Conformance testing for cosign (#3806)
  - move incremental builds per commit to GHCR instead of GCR (#3808)
  - Add support for recording creation timestamp for cosign attest (#3797)
  - Include SCT verification failure details in error message (#3799)</changelog>
  <changelog author="meissner@suse.com" date="1738756800">- Update to version 2.4.2:
  - Updated open-policy-agent to 1.1.0 library (#4036)
  - Note that only Rego v0 policies are supported at this time
  - Add UseSignedTimestamps to CheckOpts, refactor TSA options (#4006)
  - Add support for verifying root checksum in cosign initialize (#3953)
  - Detect if user supplied a valid protobuf bundle (#3931)
  - Add a log message if user doesn't provide --trusted-root (#3933)
  - Support mTLS towards container registry (#3922)
  - Add bundle create helper command (#3901)
  - Add trusted-root create helper command (#3876)
  Bug Fixes:
  - fix: set tls config while retaining other fields from default http transport (#4007)
  - policy fuzzer: ignore known panics (#3993)
  - Fix for multiple WithRemote options (#3982)
  - Add nightly conformance test workflow (#3979)
  - Fix copy --only for signatures + update/align docs (#3904)
- use "osc service mr" to update</changelog>
  <changelog author="meissner@suse.com" date="1740052800">- Update to version 2.4.3:
  * Enable fetching signatures without remote get. (#4047)
  * Bump sigstore/sigstore to support KMS plugins (#4073)
  * sort properly Go imports (#4071)
  * sync comment with parameter name in function signature (#4063)
  * fix go imports order to be alphabetical (#4062)
  * fix comment typo and imports order (#4061)
  * Feat/file flag completion improvements (#4028)
  * Udpate builder to use go1.23.6 (#4052)
  * Refactor verifyNewBundle into library function (#4013)
  * fix parsing error in --only for cosign copy (#4049)
  * Fix codeowners syntax, add dep-maintainers (#4046)</changelog>
  <changelog author="meissner@suse.com" date="1744545600">- Update to version 2.5.0:
  * Update sigstore-go to pick up bug fixes (#4150)
  * Update golangci-lint to v2, update golangci-lint-action (#4143)
  * Feat/non filename completions (#4115)
  * update builder to use go1.24.1 (#4116)
  * Add support for new bundle specification for attesting/verifying OCI image attestations (#3889)
  * Remove cert log line (#4113)
  * cmd/cosign/cli: fix typo in ignoreTLogMessage (#4111)
  * bump to latest scaffolding release for testing (#4099)
  * increase 2e2_test docker compose tiemout to 180s (#4091)
  * Fix replace with compliant image mediatype (#4077)
  * Add TSA certificate related flags and fields for cosign attest (#4079)
- Security issues fixed:
  - CVE-2024-6104: cosign: hashicorp/go-retryablehttp: url might write sensitive information to log file (bsc#1227031)
  - CVE-2024-51744: cosign: github.com/golang-jwt/jwt/v4: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt (bsc#1232985)
  - CVE-2025-27144: cosign: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: Go JOSE's Parsing Vulnerable to Denial of Service (bsc#1237682)
  - CVE-2025-22870: cosign: golang.org/x/net/proxy: proxy bypass using IPv6 zone IDs (bsc#1238693)
  - CVE-2025-22868: cosign: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239204)
  - CVE-2025-22869: cosign: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239337)</changelog>
  <changelog author="meissner@suse.com" date="1748433600">- switch to go1.24, enable fips build</changelog>
  <changelog author="meissner@suse.com" date="1752840000">- Update to version 2.5.3 (jsc#SLE-23879)
  - Add signing-config create command (#4280)
  - Allow multiple services to be specified for trusted-root create (#4285)
  - force when copying the latest image to overwrite (#4298)
  - Fix cert verification logic for trusted-root/SCTs (#4294)
  - Fix lint error for types package (#4295)
  - feat: Add OCI 1.1+ experimental support to tree (#4205)
  - Add validity period end for trusted-root create (#4271)
  - avoid double-loading trustedroot from file (#4264)
- Update to 2.5.2:
  - Do not load trusted root when CT env key is set
  - docs: improve doc for --no-upload option (#4206)
- Update to 2.5.1:
  * Features
  - Add Rekor v2 support for trusted-root create (#4242)
  - Add baseUrl and Uri to trusted-root create command
  - Upgrade to TUF v2 client with trusted root
  - Don't verify SCT for a private PKI cert (#4225)
  - Bump TSA library to relax EKU chain validation rules (#4219)
  * Bug Fixes
  - Bump sigstore-go to pick up log index=0 fix (#4162)
  - remove unused recursive flag on attest command (#4187)
  * Docs
  - Fix indentation in verify-blob cmd examples (#4160)
  * GO-2025-3660/ CVE-2025-46569: Fixed OPA server Data API HTTP path injection of Rego (bsc#1246725)</changelog>
</package>
<package pkgid="30f8788b550e9687f045f6ba39097840e53e304e3f82fc8d934dd5c048340cce" name="cosign" arch="src">
  <version epoch="0" ver="3.0.5" rel="150400.3.35.1"/>
  <changelog author="meissner@suse.com" date="1683460800">- update to 2.0.2 (jsc#SLE-23879)
  Enhancements
  - Update sigstore/sigstore to v1.6.2 to pick up TUF CDN change (#2891)
  - feat: Make cosign copy faster (#2901)
  - remove sget (#2885)
  - Require a payload to be provided with a signature (#2785)
  Bug Fixes
  - cmd: Change error message from KeyParseError to PubKeyParseError for verify-blob. (#2876)
  - Use SOURCE_DATE_EPOCH for OCI CreatedAt times (#2878)
  Documentation
  - Remove experimental warning from Fulcio flags (#2923)
  - add missing oidc provider (#2922)
  - Add zot as a supported registry (#2920)
  - deprecates kms_support docs (#2900)
  - chore(docs) deprecate note for usage docs (#2906)
  - adds note of deprecation for examples.md docs (#2899)</changelog>
  <changelog author="meissner@suse.com" date="1687867200">- updated to 2.1.1 (jsc#SLE-23879)
  - Bug Fixes
  - wait for the workers become available again to continue the execution (#3084)
  - fix help text when in a container (#3082)
- updated to 2.1.0 (jsc#SLE-23879)
  - Breaking Change: The predicate is now a required flag in the attest commands, set via the --type flag.
  - Enhancements
  - Verify sigs and attestations in parallel (#3066)
  - Deep inspect attestations when filtering download (#3031)
  - refactor bundle validation code, add support for DSSE rekor type (#3016)
  - Allow overriding remote options (#3049)
  - feat: adds no cert found on sig exit code (#3038)
  - Make predicate a required flag in attest commands (#3033)
  - Added support for attaching Time stamp authority Response in attach command (#3001)
  - Add sign --sign-container-identity CLI (#2984)
  - Feature: Allow cosign to sign digests before they are uploaded. (#2959)
  - accepts attachment-tag-prefix for cosign copy (#3014)
  - Feature: adds '--allow-insecure-registry' for cosign load (#3000)
  - download attestation: support --platform flag (#2980)
  - Cleanup: Add Digest to the SignedEntity interface. (#2960)
  - verify command: support keyless verification using only a provided certificate chain with non-fulcio roots (#2845)
  - verify: use workers to limit the paralellism when verifying images with --max-workers flag (#3069)
  - Bug Fixes
  - Fix pkg/cosign/errors (#3050)
  - Fix: update doc to refer to github-actions oidc provider (#3040)
  - Fix: prefer GitHub OIDC provider if enabled (#3044)
  - Fix --sig-only in cosign copy (#3074)
  - Documentation
  - Fix links to sigstore/docs in markdown files (#3064)</changelog>
  <changelog author="meissner@suse.com" date="1693569600">- updated to 2.2.0 (jsc#SLE-23879)
  - Enhancements
  * switch to uploading DSSE types to rekor instead of intoto (#3113)
  * add 'cosign sign' command-line parameters for mTLS (#3052)
  * improve error messages around bundle != payload hash (#3146)
  * make VerifyImageAttestation function public (#3156)
  * Switch to cryptoutils function for SANS (#3185)
  * Handle HTTP_1_1_REQUIRED errors in github provider (#3172)
  - Bug Fixes
  * Fix nondeterminsitic timestamps (#3121)
  - Documentation
  * doc: Add example of sign-blob with key in env var (#3152)
  * add deprecation notice for cosign-releases GCS bucket (#3148)
  * update doc links (#3186)</changelog>
  <changelog author="meissner@suse.com" date="1699358400">- updated to 2.2.1 (jsc#SLE-23879)
  This release comes with a fix for
  CVE-2023-46737 / bsc#1216933 described in this [Github Security
  Advisory](https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9).
  Enhancements:
  * feat: Support basic auth and bearer auth login to registry (#3310)
  * add support for ignoring certificates with pkcs11 (#3334)
  * Support ReplaceOp in Signatures (#3315)
  * feat: added ability to get image digest back via triangulate (#3255)
  * feat: add `--only` flag in `cosign copy` to copy sign, att &amp; sbom (#3247)
  * feat: add support attaching a Rekor bundle to a container (#3246)
  * feat: add support outputting rekor response on signing (#3248)
  * feat: improve dockerfile verify subcommand (#3264)
  * Add guard flag for experimental OCI 1.1 verify. (#3272)
  * Deprecate SBOM attachments (#3256)
  * feat: dedent line in cosign copy doc (#3244)
  * feat: add platform flag to cosign copy command (#3234)
  * Add SLSA 1.0 attestation support to cosign. Closes #2860 (#3219)
  * attest: pass OCI remote opts to att resolver. (#3225)
  Bug Fixes:
  * Merge pull request from GHSA-vfp6-jrw2-99g9
  * fix: allow cosign download sbom when image is absent (#3245)
  * ci: add a OCI registry test for referrers support (#3253)
  * Fix ReplaceSignatures (#3292)
  * Stop using deprecated in_toto.ProvenanceStatement (#3243)
  * Fixes #3236, disable SCT checking for a cosign verification when usin… (#3237)
  * fix: update error in `SignedEntity` to be more descriptive (#3233)
  * Fail timestamp verification if no root is provided (#3224)
  Documentation:
  * Add some docs about verifying in an air-gapped environment (#3321)
  * Update CONTRIBUTING.md (#3268)
  * docs: improves the Contribution guidelines (#3257)
  * Remove security policy (#3230)
  Others:
  * Set go to min 1.21 and update dependencies  (#3327)
  * Update contact for code of conduct (#3266)
  * Update .ko.yaml (#3240)</changelog>
  <changelog author="marcos.bjoerkelund@suse.com" date="1702382400">- updated to 2.2.2 (jsc#SLE-23879)
  v2.2.2 adds a new container with a shell,
  gcr.io/projectsigstore/cosign:vx.y.z-dev, in addition to the existing
  container gcr.io/projectsigstore/cosign:vx.y.z without a shell.
  For private deployments, we have also added an alias for
  - -insecure-skip-log, --private-infrastructure.
  Bug Fixes:
  * chore(deps): bump github.com/sigstore/sigstore from 1.7.5 to 1.7.6 (#3411) which fixes a bug with using Azure KMS
  * Don't require CT log keys if using a key/sk (#3415)
  * Fix copy without any flag set (#3409)
  * Update cosign generate cmd to not include newline (#3393)
  * Fix idempotency error with signing (#3371)
  Features:
  * Add --yes flag cosign import-key-pair to skip the overwrite confirmation. (#3383)
  * Use the timeout flag value in verify* commands. (#3391)
  * add --private-infrastructure flag (#3369)
  Container Updates:
  * Bump builder image to use go1.21.4 and add new cosign image tags with shell (#3373)
  Documentation:
  * Update SBOM_SPEC.md (#3358)</changelog>
  <changelog author="meissner@suse.com" date="1706875200">- updated to 2.2.3 (jsc#SLE-23879)
  Bug Fixes:
  * Fix race condition on verification with multiple signatures attached to image (#3486)
  * fix(clean): Fix clean cmd for private registries (#3446)
  * Fixed BYO PKI verification (#3427)
  Features:
  * Allow for option in cosign attest and attest-blob to upload attestation as supported in Rekor (#3466)
  * Add support for OpenVEX predicate type (#3405)
  Documentation:
  * Resolves #3088: `version` sub-command expected behaviour documentation and testing (#3447)
  * add examples for cosign attach signature cmd (#3468)
  Misc:
  * Remove CertSubject function (#3467)
  * Use local rekor and fulcio instances in e2e tests (#3478)
- bumped embedded golang.org/x/crypto/ssh to fix the Terrapin attack CVE-2023-48795 (bsc#1218207)</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- updated to 2.2.4 (jsc#SLE-23879)
  * Bug Fixes
  * Fixes for GHSA-88jx-383q-w4qc and GHSA-95pr-fxf5-86gv (#3661)
  - CVE-2024-29902: Malicious attachments can cause system-wide denial of service (bsc#1222835)
  - CVE-2024-29903: Malicious artifects can cause machine-wide denial of service (bsc#1222837)
  * ErrNoSignaturesFound should be used when there is no signature attached to an image. (#3526)
  * fix semgrep issues for dgryski.semgrep-go ruleset (#3541)
  * Honor creation timestamp for signatures again (#3549)
  * Features
  * Adds Support for Fulcio Client Credentials Flow, and Argument to Set Flow Explicitly (#3578)
  * Documentation
  * add oci bundle spec (#3622)
  * Correct help text of triangulate cmd (#3551)
  * Correct help text of verify-attestation policy argument (#3527)
  * feat: add OVHcloud MPR registry tested with cosign (#3639)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1717156800">- add completion subpackages (bash, fish, zsh)</changelog>
  <changelog author="meissner@suse.com" date="1721822400">- update to 2.3.0 (jsc#SLE-23879)
  * Features
  - Add PayloadProvider interface to decouple AttestationToPayloadJSON from oci.Signature interface (#3693)
  - add registry options to cosign save (#3645)
  - Add debug providers command. (#3728)
  - Make config layers in ociremote mountable (#3741)
  - adds tsa cert chain check for env var or tuf targets. (#3600)
  - add --ca-roots and --ca-intermediates flags to 'cosign verify' (#3464)
  - add handling of keyless verification for all verify commands (#3761)
  * Bug Fixes
  - fix: close attestationFile (#3679)
  - Set bundleVerified to true after Rekor verification (Resolves #3740) (#3745)
  * Documentation
  - Document ImportKeyPair and LoadPrivateKey functions in pkg/cosign (#3776)</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1724155200">- Set CGO_ENABLED=1 for fixing s390x failed build</changelog>
  <changelog author="meissner@suse.com" date="1727870400">- update to 2.4.0 (jsc#SLE-23879)
  - Add new bundle support to verify-blob and verify-blob-attestation (#3796)
  - Adding protobuf bundle support to sign-blob and attest-blob (#3752)
  - Bump sigstore/sigstore to support email_verified as string or boolean (#3819)
  - Conformance testing for cosign (#3806)
  - move incremental builds per commit to GHCR instead of GCR (#3808)
  - Add support for recording creation timestamp for cosign attest (#3797)
  - Include SCT verification failure details in error message (#3799)</changelog>
  <changelog author="meissner@suse.com" date="1738756800">- Update to version 2.4.2:
  - Updated open-policy-agent to 1.1.0 library (#4036)
  - Note that only Rego v0 policies are supported at this time
  - Add UseSignedTimestamps to CheckOpts, refactor TSA options (#4006)
  - Add support for verifying root checksum in cosign initialize (#3953)
  - Detect if user supplied a valid protobuf bundle (#3931)
  - Add a log message if user doesn't provide --trusted-root (#3933)
  - Support mTLS towards container registry (#3922)
  - Add bundle create helper command (#3901)
  - Add trusted-root create helper command (#3876)
  Bug Fixes:
  - fix: set tls config while retaining other fields from default http transport (#4007)
  - policy fuzzer: ignore known panics (#3993)
  - Fix for multiple WithRemote options (#3982)
  - Add nightly conformance test workflow (#3979)
  - Fix copy --only for signatures + update/align docs (#3904)
- use "osc service mr" to update</changelog>
  <changelog author="meissner@suse.com" date="1740052800">- Update to version 2.4.3:
  * Enable fetching signatures without remote get. (#4047)
  * Bump sigstore/sigstore to support KMS plugins (#4073)
  * sort properly Go imports (#4071)
  * sync comment with parameter name in function signature (#4063)
  * fix go imports order to be alphabetical (#4062)
  * fix comment typo and imports order (#4061)
  * Feat/file flag completion improvements (#4028)
  * Udpate builder to use go1.23.6 (#4052)
  * Refactor verifyNewBundle into library function (#4013)
  * fix parsing error in --only for cosign copy (#4049)
  * Fix codeowners syntax, add dep-maintainers (#4046)</changelog>
  <changelog author="meissner@suse.com" date="1744545600">- Update to version 2.5.0:
  * Update sigstore-go to pick up bug fixes (#4150)
  * Update golangci-lint to v2, update golangci-lint-action (#4143)
  * Feat/non filename completions (#4115)
  * update builder to use go1.24.1 (#4116)
  * Add support for new bundle specification for attesting/verifying OCI image attestations (#3889)
  * Remove cert log line (#4113)
  * cmd/cosign/cli: fix typo in ignoreTLogMessage (#4111)
  * bump to latest scaffolding release for testing (#4099)
  * increase 2e2_test docker compose tiemout to 180s (#4091)
  * Fix replace with compliant image mediatype (#4077)
  * Add TSA certificate related flags and fields for cosign attest (#4079)
- Security issues fixed:
  - CVE-2024-6104: cosign: hashicorp/go-retryablehttp: url might write sensitive information to log file (bsc#1227031)
  - CVE-2024-51744: cosign: github.com/golang-jwt/jwt/v4: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt (bsc#1232985)
  - CVE-2025-27144: cosign: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: Go JOSE's Parsing Vulnerable to Denial of Service (bsc#1237682)
  - CVE-2025-22870: cosign: golang.org/x/net/proxy: proxy bypass using IPv6 zone IDs (bsc#1238693)
  - CVE-2025-22868: cosign: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239204)
  - CVE-2025-22869: cosign: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239337)</changelog>
  <changelog author="meissner@suse.com" date="1748433600">- switch to go1.24, enable fips build</changelog>
  <changelog author="meissner@suse.com" date="1752840000">- Update to version 2.5.3 (jsc#SLE-23879)
  - Add signing-config create command (#4280)
  - Allow multiple services to be specified for trusted-root create (#4285)
  - force when copying the latest image to overwrite (#4298)
  - Fix cert verification logic for trusted-root/SCTs (#4294)
  - Fix lint error for types package (#4295)
  - feat: Add OCI 1.1+ experimental support to tree (#4205)
  - Add validity period end for trusted-root create (#4271)
  - avoid double-loading trustedroot from file (#4264)
- Update to 2.5.2:
  - Do not load trusted root when CT env key is set
  - docs: improve doc for --no-upload option (#4206)
- Update to 2.5.1:
  * Features
  - Add Rekor v2 support for trusted-root create (#4242)
  - Add baseUrl and Uri to trusted-root create command
  - Upgrade to TUF v2 client with trusted root
  - Don't verify SCT for a private PKI cert (#4225)
  - Bump TSA library to relax EKU chain validation rules (#4219)
  * Bug Fixes
  - Bump sigstore-go to pick up log index=0 fix (#4162)
  - remove unused recursive flag on attest command (#4187)
  * Docs
  - Fix indentation in verify-blob cmd examples (#4160)
  * GO-2025-3660/ CVE-2025-46569: Fixed OPA server Data API HTTP path injection of Rego (bsc#1246725)</changelog>
  <changelog author="meissner@suse.com" date="1758196800">- Update to version 2.6.0:
  - Require exclusively a SigningConfig or service URLs when signing (#4403)
  - Add a terminal spinner while signing with sigstore-go (#4402)
  - Bump sigstore-go, support alternative hash algorithms with keys (#4386)
  - Add support for SigningConfig in sign/attest (#4371)
  - Support self-managed keys when signing with sigstore-go (#4368)
  - Remove SHA256 assumption in sign-blob/verify-blob (#4050)
  - introduce dockerfile to pin the go version to decouple go version from go.mod (#4369)
  - refactor: extract function to write referrer attestations (#4357)
  - Break import cycle with e2e build tag (#4370)
  - Update conformance test binary for signing config (#4367)
  - update builder image to use go1.25 (#4366)
  - Don't load content from TUF if trusted root path is specified (#4347)
  - Don't require timestamps when verifying with a key (#4337)
  - Fixes to cosign sign / verify for the new bundle format (#4346)
  - update builder to use go1.24.6 (#4334)
  - bump golangci-lint to v2.3.x (#4333)
  - Have cosign sign support bundle format (#4316)
  - Add support for SigningConfig for sign-blob/attest-blob, support Rekor v2 (#4319)
  - Verify subject with bundle only when checking claims (#4320)
  - Add to `attest-blob` the ability to supply a complete in-toto statement, and add to `verify-blob-attestation` the ability to verify with just a digest (#4306)</changelog>
  <changelog author="meissner@suse.com" date="1765368000">- Update to version 3.0.3:
  * 4554: Closes 4554 - Add warning when --output* is used (#4556)
  * chore(deps): bump golangci/golangci-lint-action from 8.0.0 to 9.1.0 (#4545)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.111.0 to 3.113.0 (#4542)
  * chore(deps): bump github.com/awslabs/amazon-ecr-credential-helper/ecr-login (#4543)
  * chore(deps): bump actions/checkout from 5.0.0 to 6.0.0 (#4546)
  * chore(deps): bump the actions group with 4 updates (#4544)
  * chore(deps): bump the gomod group across 1 directory with 5 updates (#4567)
  * chore(deps): bump golang from 1.25.4 to 1.25.5 in the all group (#4568)
  * update builder to use go1.25.5 (#4566)
  * Protobuf bundle support for subcommand `clean` (#4539)
  * Add staging flag to initialize with staging TUF metadata
  * update slack invite link (#4560)
  * Updating sign-blob to also support signing with a certificate (#4547)
  * Bump sigstore library dependencies (#4532)
  * Protobuf bundle support for subcommands `save` and `load` (#4538)
  * Fix cert attachment for new bundle with signing config
  * Fix OCI verification with local cert - old bundle
  * chore(deps): bump github.com/sigstore/fulcio from 1.7.1 to 1.8.1 (#4519)
  * chore(deps): bump golang.org/x/crypto in /test/fakeoidc (#4535)
  * chore(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0 (#4536)
  * CVE-2025-58181: Fixed golang.org/x/crypto/ssh: invalidated number
    of mechanisms can cause unbounded memory consumption (bsc#1253913)
  * update go builder and cosign (#4529)
  * chore(deps): bump the gomod group across 1 directory with 7 updates (#4528)
  * chore(deps): bump sigstore/cosign-installer from 3.10.0 to 4.0.0 (#4478)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4520)
  * chore(deps): bump golang from 1.25.3 to 1.25.4 in the all group (#4515)
  * chore(deps): bump golang.org/x/oauth2 from 0.32.0 to 0.33.0 (#4518)
  * chore(deps): bump cuelang.org/go from 0.14.2 to 0.15.0 (#4524)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.9.0 to 1.10.1 (#4521)
  * chore(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 (#4502)
  * chore(deps): bump the actions group across 1 directory with 2 updates (#4516)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.110.0 to 3.111.0 (#4523)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4522)
  * Deprecate tlog-upload flag (#4458)
  * fix: Use signal context for `sign` cli package.
  * update offline verification directions (#4526)
  * Fix signing/verifying annotations for new bundle
  * Add support to download and attach for protobuf bundles (#4477)
  * Add --signing-algorithm flag (#3497)
  * Refactor signcommon bundle helpers
  * Add --bundle and fix --upload for new bundle
  * Pass insecure registry flags through to referrers
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.108.0 to 3.109.1 (#4483)
  * Add protobuf bundle support for tree subcommand (#4491)
  * Remove stale embed import (#4492)
  * Support multiple container identities
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4484)
  * chore(deps): bump chainguard-dev/actions in the actions group (#4480)
  * chore(deps): bump github.com/sigstore/rekor-tiles/v2 (#4485)
  * chore(deps): bump golang.org/x/crypto from 0.42.0 to 0.43.0 (#4486)
  * chore(deps): bump cuelang.org/go in the gomod group (#4479)
  * upgrade OSS-Fuzz build tooling (#4487)
  * Fix segfault when no attestations are found (#4472)
  * Use overridden repository for new bundle format (#4473)
  * update go to 1.25.3 (#4471)
  * Remove --out flag from `cosign initialize` (#4462)
  * chore(deps): bump the actions group with 2 updates (#4460)
  * Deprecate offline flag (#4457)
  * Deduplicate code in sign/attest* and verify* commands (#4449)
  * Cache signing config when calling initialize (#4456)
  * Update changelog for v3.0.2 (#4455)
  * chore(deps): bump google.golang.org/api from 0.250.0 to 0.251.0
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go
  * chore(deps): bump the actions group with 3 updates
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.107.2 to 3.108.0
  * choose different signature filename for KMS-signed release signatures (#4448)
  * chore(deps): bump github.com/go-jose/go-jose/v4 (#4451)
  * Update rekor-tiles version path
  * update CL for v3.0.1 release (#4447)
  * update goreleaser config for v3.0.0 release (#4446)
  * Create changelog for v3.0.0 (#4440)
  * Fetch service URLs from the TUF PGI signing config by default (#4428)
  * Create changelog for v2.6.1 (#4439)
  * chore(deps): bump google.golang.org/api from 0.249.0 to 0.250.0 (#4432)
  * chore(deps): bump the gomod group with 2 updates (#4429)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.8.0 to 1.9.0 (#4433)
  * chore(deps): bump the actions group with 3 updates (#4434)
  * chore(deps): bump github.com/go-openapi/swag from 0.24.1 to 0.25.1 (#4435)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4436)
  * chore(deps): bump github.com/go-openapi/runtime from 0.28.0 to 0.29.0 (#4437)
  * Bump module version to v3 for Cosign v3.0 (#4427)
  * Move sigstore-conformance back to tagged release (#4425)
  * Bump sigstore-go to v1.1.3 (#4423)
  * Partially populate the output of cosign verify when working with new bundles (#4416)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4419)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4418)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.105.0 to 3.107.0 (#4420)
  * chore(deps): bump chainguard-dev/actions in the actions group (#4421)
  * bump go builder to use 1.25.1 and cosign (#4417)
  * Bump sigstore-go for more precise user agents (#4413)
  * chore(deps): bump github.com/spf13/viper from 1.20.1 to 1.21.0 (#4408)
  * chore(deps): bump the actions group with 2 updates (#4407)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4410)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.104.0 to 3.105.0 (#4411)
  * Default to using the new protobuf format (#4318)</changelog>
  <changelog author="meissner@suse.com" date="1770811200">- Update to version 3.0.4:
  * CVE-2025-11065: Fixed github.com/go-viper/mapstructure/v2: sensitive
    Information leak in logs (bsc#1250620)
  * CVE-2026-22703: Fixed that cosign verification accepts any valid
    Rekor entry under certain conditions (bsc#1256496)
  * Fix bundle verify path for old bundle/trusted root (#4623)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4616)
  * chore(deps): bump cuelang.org/go in the gomod group (#4615)
  * Optimize cosign tree performance by caching digest resolution (#4612)
  * Don't require a trusted root to verify offline with a key (#4613)
  * Support default services for trusted-root and signing-config creation (#4592)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4602)
  * chore(deps): bump github.com/sigstore/sigstore-go (#4578)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.114.1 to 3.115.2 (#4601)
  * chore(deps): bump google.golang.org/api from 0.257.0 to 0.258.0 (#4611)
  * chore(deps): bump k8s.io/client-go from 0.34.3 to 0.35.0 (#4604)
  * chore(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 (#4588)
  * chore(deps): bump golang.org/x/oauth2 from 0.33.0 to 0.34.0 (#4586)
  * chore(deps): bump the gomod group with 5 updates (#4599)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.10.1 to 1.12.1 (#4600)
  * chore(deps): bump golang.org/x/term from 0.37.0 to 0.38.0 (#4584)
  * chore(deps): bump the actions group with 3 updates (#4587)
  * chore(deps): bump actions/cache from 4.3.0 to 5.0.1 (#4589)
  * chore(deps): bump the gomod group with 9 updates (#4577)</changelog>
  <changelog author="meissner@suse.com" date="1771761600">- Update to version 3.0.5: (jsc#SLE-23879)
  * CVE-2026-24122: Fixed improper validation of certificates that
    outlive expired CA certificates (bsc#1258542)
  * CVE-2026-26958: Fixed filippo.io/edwards25519: failure to initialize
    receiver in MultiScalarMult can produce invalid results and lead to
    undefined behavior (bsc#1258612)
  * CVE-2026-24137: Fixed github.com/sigstore/sigstore/pkg/tuf: legacy
    TUF client allows for arbitrary file writes with target cache path
    traversal (bsc#1257139)
  * CVE-2026-22772: Fixed github.com/sigstore/fulcio: bypass MetaIssuer
    URL validation bypass can trigger SSRF to arbitrary internal services
    (bsc#1256562)
  * CVE-2026-23991: Fixed github.com/theupdateframework/go-tuf/v2: denial
    of service due to invalid TUF metadata JSON returned by TUF repository
    (bsc#1257080)
  * CVE-2026-23992: Fixed github.com/theupdateframework/go-tuf/v2:
    unauthorized modification to TUF metadata files due to a compromised
    or misconfigured TUF repository (bsc#1257085)
  * chore(deps): bump google.golang.org/api from 0.260.0 to 0.264.0 (#4679)
  * chore(deps): bump github.com/sigstore/rekor-tiles/v2 from 2.0.1 to 2.1.0 (#4670)
  * chore(deps): bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 (#4712)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4680)
  * chore(deps): bump the gomod group across 1 directory with 4 updates (#4702)
  * chore(deps): bump the actions group with 3 updates (#4703)
  * update golang builder to use go1.25.7 (#4687)
  * update golangci-lint to v2.8.x (#4688)
  * Fix typo in CLI help (#4701)
  * Support DSSE signing conformance test (#4685)
  * chore(deps): bump the actions group across 1 directory with 8 updates (#4689)
  * Deprecate rekor-entry-type flag (#4691)
  * Deprecate cosign triangulate (#4676)
  * Deprecate cosign copy (#4681)
  * Enforce TSA requirement for Rekor v2, Fuclio signing (#4683)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4668)
  * chore(deps): bump golang from 1.25.5 to 1.25.6 in the all group (#4673)
  * Automatically require signed timestamp with Rekor v2 entries (#4666)
  * Fix syntax issue in conformance test, update nightly (#4664)
  * Add mTLS support for TSA client connections when signing with a signing config (#4620)
  * fix: avoid panic on malformed tlog entry body (#4652)
  * Verify validity of chain rather than just certificate (#4663)
  * Allow --local-image with --new-bundle-format for v2 and v3 signatures (#4626)
  * chore(deps): bump the gomod group across 1 directory with 3 updates (#4662)
  * Bump sigstore/sigstore to resolve GHSA (#4660)
  * Gracefully fail if bundle payload body is not a string (#4648)
  * fix: avoid panic on malformed replace payload (#4653)
  * chore(deps): bump github.com/sigstore/rekor from 1.4.3 to 1.5.0 (#4659)
  * fix: avoid panic on malformed attestation payload (#4651)
  * fix: avoid panic on malformed tlog entries (#4649)
  * Update conformance to latest
  * docs(cosign): clarify RFC3161 revocation semantics (#4642)
  * Add empty predicate to cosign sign when payload type is application/vnd.in-toto+json (#4635)
  * chore(deps): bump github.com/sigstore/fulcio from 1.8.4 to 1.8.5 (#4637)
  * Add origin key for ctfe trusted root
  * Add changelog updates for v3.0.4 and v2.6.2 (#4625)</changelog>
</package>
<package pkgid="0fb674885012397e7967f4384a8a30329325fb80d4bcb8bb063c75ecee023636" name="cosign" arch="x86_64">
  <version epoch="0" ver="3.0.5" rel="150400.3.35.1"/>
  <changelog author="meissner@suse.com" date="1683460800">- update to 2.0.2 (jsc#SLE-23879)
  Enhancements
  - Update sigstore/sigstore to v1.6.2 to pick up TUF CDN change (#2891)
  - feat: Make cosign copy faster (#2901)
  - remove sget (#2885)
  - Require a payload to be provided with a signature (#2785)
  Bug Fixes
  - cmd: Change error message from KeyParseError to PubKeyParseError for verify-blob. (#2876)
  - Use SOURCE_DATE_EPOCH for OCI CreatedAt times (#2878)
  Documentation
  - Remove experimental warning from Fulcio flags (#2923)
  - add missing oidc provider (#2922)
  - Add zot as a supported registry (#2920)
  - deprecates kms_support docs (#2900)
  - chore(docs) deprecate note for usage docs (#2906)
  - adds note of deprecation for examples.md docs (#2899)</changelog>
  <changelog author="meissner@suse.com" date="1687867200">- updated to 2.1.1 (jsc#SLE-23879)
  - Bug Fixes
  - wait for the workers become available again to continue the execution (#3084)
  - fix help text when in a container (#3082)
- updated to 2.1.0 (jsc#SLE-23879)
  - Breaking Change: The predicate is now a required flag in the attest commands, set via the --type flag.
  - Enhancements
  - Verify sigs and attestations in parallel (#3066)
  - Deep inspect attestations when filtering download (#3031)
  - refactor bundle validation code, add support for DSSE rekor type (#3016)
  - Allow overriding remote options (#3049)
  - feat: adds no cert found on sig exit code (#3038)
  - Make predicate a required flag in attest commands (#3033)
  - Added support for attaching Time stamp authority Response in attach command (#3001)
  - Add sign --sign-container-identity CLI (#2984)
  - Feature: Allow cosign to sign digests before they are uploaded. (#2959)
  - accepts attachment-tag-prefix for cosign copy (#3014)
  - Feature: adds '--allow-insecure-registry' for cosign load (#3000)
  - download attestation: support --platform flag (#2980)
  - Cleanup: Add Digest to the SignedEntity interface. (#2960)
  - verify command: support keyless verification using only a provided certificate chain with non-fulcio roots (#2845)
  - verify: use workers to limit the paralellism when verifying images with --max-workers flag (#3069)
  - Bug Fixes
  - Fix pkg/cosign/errors (#3050)
  - Fix: update doc to refer to github-actions oidc provider (#3040)
  - Fix: prefer GitHub OIDC provider if enabled (#3044)
  - Fix --sig-only in cosign copy (#3074)
  - Documentation
  - Fix links to sigstore/docs in markdown files (#3064)</changelog>
  <changelog author="meissner@suse.com" date="1693569600">- updated to 2.2.0 (jsc#SLE-23879)
  - Enhancements
  * switch to uploading DSSE types to rekor instead of intoto (#3113)
  * add 'cosign sign' command-line parameters for mTLS (#3052)
  * improve error messages around bundle != payload hash (#3146)
  * make VerifyImageAttestation function public (#3156)
  * Switch to cryptoutils function for SANS (#3185)
  * Handle HTTP_1_1_REQUIRED errors in github provider (#3172)
  - Bug Fixes
  * Fix nondeterminsitic timestamps (#3121)
  - Documentation
  * doc: Add example of sign-blob with key in env var (#3152)
  * add deprecation notice for cosign-releases GCS bucket (#3148)
  * update doc links (#3186)</changelog>
  <changelog author="meissner@suse.com" date="1699358400">- updated to 2.2.1 (jsc#SLE-23879)
  This release comes with a fix for
  CVE-2023-46737 / bsc#1216933 described in this [Github Security
  Advisory](https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9).
  Enhancements:
  * feat: Support basic auth and bearer auth login to registry (#3310)
  * add support for ignoring certificates with pkcs11 (#3334)
  * Support ReplaceOp in Signatures (#3315)
  * feat: added ability to get image digest back via triangulate (#3255)
  * feat: add `--only` flag in `cosign copy` to copy sign, att &amp; sbom (#3247)
  * feat: add support attaching a Rekor bundle to a container (#3246)
  * feat: add support outputting rekor response on signing (#3248)
  * feat: improve dockerfile verify subcommand (#3264)
  * Add guard flag for experimental OCI 1.1 verify. (#3272)
  * Deprecate SBOM attachments (#3256)
  * feat: dedent line in cosign copy doc (#3244)
  * feat: add platform flag to cosign copy command (#3234)
  * Add SLSA 1.0 attestation support to cosign. Closes #2860 (#3219)
  * attest: pass OCI remote opts to att resolver. (#3225)
  Bug Fixes:
  * Merge pull request from GHSA-vfp6-jrw2-99g9
  * fix: allow cosign download sbom when image is absent (#3245)
  * ci: add a OCI registry test for referrers support (#3253)
  * Fix ReplaceSignatures (#3292)
  * Stop using deprecated in_toto.ProvenanceStatement (#3243)
  * Fixes #3236, disable SCT checking for a cosign verification when usin… (#3237)
  * fix: update error in `SignedEntity` to be more descriptive (#3233)
  * Fail timestamp verification if no root is provided (#3224)
  Documentation:
  * Add some docs about verifying in an air-gapped environment (#3321)
  * Update CONTRIBUTING.md (#3268)
  * docs: improves the Contribution guidelines (#3257)
  * Remove security policy (#3230)
  Others:
  * Set go to min 1.21 and update dependencies  (#3327)
  * Update contact for code of conduct (#3266)
  * Update .ko.yaml (#3240)</changelog>
  <changelog author="marcos.bjoerkelund@suse.com" date="1702382400">- updated to 2.2.2 (jsc#SLE-23879)
  v2.2.2 adds a new container with a shell,
  gcr.io/projectsigstore/cosign:vx.y.z-dev, in addition to the existing
  container gcr.io/projectsigstore/cosign:vx.y.z without a shell.
  For private deployments, we have also added an alias for
  - -insecure-skip-log, --private-infrastructure.
  Bug Fixes:
  * chore(deps): bump github.com/sigstore/sigstore from 1.7.5 to 1.7.6 (#3411) which fixes a bug with using Azure KMS
  * Don't require CT log keys if using a key/sk (#3415)
  * Fix copy without any flag set (#3409)
  * Update cosign generate cmd to not include newline (#3393)
  * Fix idempotency error with signing (#3371)
  Features:
  * Add --yes flag cosign import-key-pair to skip the overwrite confirmation. (#3383)
  * Use the timeout flag value in verify* commands. (#3391)
  * add --private-infrastructure flag (#3369)
  Container Updates:
  * Bump builder image to use go1.21.4 and add new cosign image tags with shell (#3373)
  Documentation:
  * Update SBOM_SPEC.md (#3358)</changelog>
  <changelog author="meissner@suse.com" date="1706875200">- updated to 2.2.3 (jsc#SLE-23879)
  Bug Fixes:
  * Fix race condition on verification with multiple signatures attached to image (#3486)
  * fix(clean): Fix clean cmd for private registries (#3446)
  * Fixed BYO PKI verification (#3427)
  Features:
  * Allow for option in cosign attest and attest-blob to upload attestation as supported in Rekor (#3466)
  * Add support for OpenVEX predicate type (#3405)
  Documentation:
  * Resolves #3088: `version` sub-command expected behaviour documentation and testing (#3447)
  * add examples for cosign attach signature cmd (#3468)
  Misc:
  * Remove CertSubject function (#3467)
  * Use local rekor and fulcio instances in e2e tests (#3478)
- bumped embedded golang.org/x/crypto/ssh to fix the Terrapin attack CVE-2023-48795 (bsc#1218207)</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- updated to 2.2.4 (jsc#SLE-23879)
  * Bug Fixes
  * Fixes for GHSA-88jx-383q-w4qc and GHSA-95pr-fxf5-86gv (#3661)
  - CVE-2024-29902: Malicious attachments can cause system-wide denial of service (bsc#1222835)
  - CVE-2024-29903: Malicious artifects can cause machine-wide denial of service (bsc#1222837)
  * ErrNoSignaturesFound should be used when there is no signature attached to an image. (#3526)
  * fix semgrep issues for dgryski.semgrep-go ruleset (#3541)
  * Honor creation timestamp for signatures again (#3549)
  * Features
  * Adds Support for Fulcio Client Credentials Flow, and Argument to Set Flow Explicitly (#3578)
  * Documentation
  * add oci bundle spec (#3622)
  * Correct help text of triangulate cmd (#3551)
  * Correct help text of verify-attestation policy argument (#3527)
  * feat: add OVHcloud MPR registry tested with cosign (#3639)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1717156800">- add completion subpackages (bash, fish, zsh)</changelog>
  <changelog author="meissner@suse.com" date="1721822400">- update to 2.3.0 (jsc#SLE-23879)
  * Features
  - Add PayloadProvider interface to decouple AttestationToPayloadJSON from oci.Signature interface (#3693)
  - add registry options to cosign save (#3645)
  - Add debug providers command. (#3728)
  - Make config layers in ociremote mountable (#3741)
  - adds tsa cert chain check for env var or tuf targets. (#3600)
  - add --ca-roots and --ca-intermediates flags to 'cosign verify' (#3464)
  - add handling of keyless verification for all verify commands (#3761)
  * Bug Fixes
  - fix: close attestationFile (#3679)
  - Set bundleVerified to true after Rekor verification (Resolves #3740) (#3745)
  * Documentation
  - Document ImportKeyPair and LoadPrivateKey functions in pkg/cosign (#3776)</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1724155200">- Set CGO_ENABLED=1 for fixing s390x failed build</changelog>
  <changelog author="meissner@suse.com" date="1727870400">- update to 2.4.0 (jsc#SLE-23879)
  - Add new bundle support to verify-blob and verify-blob-attestation (#3796)
  - Adding protobuf bundle support to sign-blob and attest-blob (#3752)
  - Bump sigstore/sigstore to support email_verified as string or boolean (#3819)
  - Conformance testing for cosign (#3806)
  - move incremental builds per commit to GHCR instead of GCR (#3808)
  - Add support for recording creation timestamp for cosign attest (#3797)
  - Include SCT verification failure details in error message (#3799)</changelog>
  <changelog author="meissner@suse.com" date="1738756800">- Update to version 2.4.2:
  - Updated open-policy-agent to 1.1.0 library (#4036)
  - Note that only Rego v0 policies are supported at this time
  - Add UseSignedTimestamps to CheckOpts, refactor TSA options (#4006)
  - Add support for verifying root checksum in cosign initialize (#3953)
  - Detect if user supplied a valid protobuf bundle (#3931)
  - Add a log message if user doesn't provide --trusted-root (#3933)
  - Support mTLS towards container registry (#3922)
  - Add bundle create helper command (#3901)
  - Add trusted-root create helper command (#3876)
  Bug Fixes:
  - fix: set tls config while retaining other fields from default http transport (#4007)
  - policy fuzzer: ignore known panics (#3993)
  - Fix for multiple WithRemote options (#3982)
  - Add nightly conformance test workflow (#3979)
  - Fix copy --only for signatures + update/align docs (#3904)
- use "osc service mr" to update</changelog>
  <changelog author="meissner@suse.com" date="1740052800">- Update to version 2.4.3:
  * Enable fetching signatures without remote get. (#4047)
  * Bump sigstore/sigstore to support KMS plugins (#4073)
  * sort properly Go imports (#4071)
  * sync comment with parameter name in function signature (#4063)
  * fix go imports order to be alphabetical (#4062)
  * fix comment typo and imports order (#4061)
  * Feat/file flag completion improvements (#4028)
  * Udpate builder to use go1.23.6 (#4052)
  * Refactor verifyNewBundle into library function (#4013)
  * fix parsing error in --only for cosign copy (#4049)
  * Fix codeowners syntax, add dep-maintainers (#4046)</changelog>
  <changelog author="meissner@suse.com" date="1744545600">- Update to version 2.5.0:
  * Update sigstore-go to pick up bug fixes (#4150)
  * Update golangci-lint to v2, update golangci-lint-action (#4143)
  * Feat/non filename completions (#4115)
  * update builder to use go1.24.1 (#4116)
  * Add support for new bundle specification for attesting/verifying OCI image attestations (#3889)
  * Remove cert log line (#4113)
  * cmd/cosign/cli: fix typo in ignoreTLogMessage (#4111)
  * bump to latest scaffolding release for testing (#4099)
  * increase 2e2_test docker compose tiemout to 180s (#4091)
  * Fix replace with compliant image mediatype (#4077)
  * Add TSA certificate related flags and fields for cosign attest (#4079)
- Security issues fixed:
  - CVE-2024-6104: cosign: hashicorp/go-retryablehttp: url might write sensitive information to log file (bsc#1227031)
  - CVE-2024-51744: cosign: github.com/golang-jwt/jwt/v4: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt (bsc#1232985)
  - CVE-2025-27144: cosign: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: Go JOSE's Parsing Vulnerable to Denial of Service (bsc#1237682)
  - CVE-2025-22870: cosign: golang.org/x/net/proxy: proxy bypass using IPv6 zone IDs (bsc#1238693)
  - CVE-2025-22868: cosign: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239204)
  - CVE-2025-22869: cosign: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239337)</changelog>
  <changelog author="meissner@suse.com" date="1748433600">- switch to go1.24, enable fips build</changelog>
  <changelog author="meissner@suse.com" date="1752840000">- Update to version 2.5.3 (jsc#SLE-23879)
  - Add signing-config create command (#4280)
  - Allow multiple services to be specified for trusted-root create (#4285)
  - force when copying the latest image to overwrite (#4298)
  - Fix cert verification logic for trusted-root/SCTs (#4294)
  - Fix lint error for types package (#4295)
  - feat: Add OCI 1.1+ experimental support to tree (#4205)
  - Add validity period end for trusted-root create (#4271)
  - avoid double-loading trustedroot from file (#4264)
- Update to 2.5.2:
  - Do not load trusted root when CT env key is set
  - docs: improve doc for --no-upload option (#4206)
- Update to 2.5.1:
  * Features
  - Add Rekor v2 support for trusted-root create (#4242)
  - Add baseUrl and Uri to trusted-root create command
  - Upgrade to TUF v2 client with trusted root
  - Don't verify SCT for a private PKI cert (#4225)
  - Bump TSA library to relax EKU chain validation rules (#4219)
  * Bug Fixes
  - Bump sigstore-go to pick up log index=0 fix (#4162)
  - remove unused recursive flag on attest command (#4187)
  * Docs
  - Fix indentation in verify-blob cmd examples (#4160)
  * GO-2025-3660/ CVE-2025-46569: Fixed OPA server Data API HTTP path injection of Rego (bsc#1246725)</changelog>
  <changelog author="meissner@suse.com" date="1758196800">- Update to version 2.6.0:
  - Require exclusively a SigningConfig or service URLs when signing (#4403)
  - Add a terminal spinner while signing with sigstore-go (#4402)
  - Bump sigstore-go, support alternative hash algorithms with keys (#4386)
  - Add support for SigningConfig in sign/attest (#4371)
  - Support self-managed keys when signing with sigstore-go (#4368)
  - Remove SHA256 assumption in sign-blob/verify-blob (#4050)
  - introduce dockerfile to pin the go version to decouple go version from go.mod (#4369)
  - refactor: extract function to write referrer attestations (#4357)
  - Break import cycle with e2e build tag (#4370)
  - Update conformance test binary for signing config (#4367)
  - update builder image to use go1.25 (#4366)
  - Don't load content from TUF if trusted root path is specified (#4347)
  - Don't require timestamps when verifying with a key (#4337)
  - Fixes to cosign sign / verify for the new bundle format (#4346)
  - update builder to use go1.24.6 (#4334)
  - bump golangci-lint to v2.3.x (#4333)
  - Have cosign sign support bundle format (#4316)
  - Add support for SigningConfig for sign-blob/attest-blob, support Rekor v2 (#4319)
  - Verify subject with bundle only when checking claims (#4320)
  - Add to `attest-blob` the ability to supply a complete in-toto statement, and add to `verify-blob-attestation` the ability to verify with just a digest (#4306)</changelog>
  <changelog author="meissner@suse.com" date="1765368000">- Update to version 3.0.3:
  * 4554: Closes 4554 - Add warning when --output* is used (#4556)
  * chore(deps): bump golangci/golangci-lint-action from 8.0.0 to 9.1.0 (#4545)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.111.0 to 3.113.0 (#4542)
  * chore(deps): bump github.com/awslabs/amazon-ecr-credential-helper/ecr-login (#4543)
  * chore(deps): bump actions/checkout from 5.0.0 to 6.0.0 (#4546)
  * chore(deps): bump the actions group with 4 updates (#4544)
  * chore(deps): bump the gomod group across 1 directory with 5 updates (#4567)
  * chore(deps): bump golang from 1.25.4 to 1.25.5 in the all group (#4568)
  * update builder to use go1.25.5 (#4566)
  * Protobuf bundle support for subcommand `clean` (#4539)
  * Add staging flag to initialize with staging TUF metadata
  * update slack invite link (#4560)
  * Updating sign-blob to also support signing with a certificate (#4547)
  * Bump sigstore library dependencies (#4532)
  * Protobuf bundle support for subcommands `save` and `load` (#4538)
  * Fix cert attachment for new bundle with signing config
  * Fix OCI verification with local cert - old bundle
  * chore(deps): bump github.com/sigstore/fulcio from 1.7.1 to 1.8.1 (#4519)
  * chore(deps): bump golang.org/x/crypto in /test/fakeoidc (#4535)
  * chore(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0 (#4536)
  * CVE-2025-58181: Fixed golang.org/x/crypto/ssh: invalidated number
    of mechanisms can cause unbounded memory consumption (bsc#1253913)
  * update go builder and cosign (#4529)
  * chore(deps): bump the gomod group across 1 directory with 7 updates (#4528)
  * chore(deps): bump sigstore/cosign-installer from 3.10.0 to 4.0.0 (#4478)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4520)
  * chore(deps): bump golang from 1.25.3 to 1.25.4 in the all group (#4515)
  * chore(deps): bump golang.org/x/oauth2 from 0.32.0 to 0.33.0 (#4518)
  * chore(deps): bump cuelang.org/go from 0.14.2 to 0.15.0 (#4524)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.9.0 to 1.10.1 (#4521)
  * chore(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 (#4502)
  * chore(deps): bump the actions group across 1 directory with 2 updates (#4516)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.110.0 to 3.111.0 (#4523)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4522)
  * Deprecate tlog-upload flag (#4458)
  * fix: Use signal context for `sign` cli package.
  * update offline verification directions (#4526)
  * Fix signing/verifying annotations for new bundle
  * Add support to download and attach for protobuf bundles (#4477)
  * Add --signing-algorithm flag (#3497)
  * Refactor signcommon bundle helpers
  * Add --bundle and fix --upload for new bundle
  * Pass insecure registry flags through to referrers
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.108.0 to 3.109.1 (#4483)
  * Add protobuf bundle support for tree subcommand (#4491)
  * Remove stale embed import (#4492)
  * Support multiple container identities
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4484)
  * chore(deps): bump chainguard-dev/actions in the actions group (#4480)
  * chore(deps): bump github.com/sigstore/rekor-tiles/v2 (#4485)
  * chore(deps): bump golang.org/x/crypto from 0.42.0 to 0.43.0 (#4486)
  * chore(deps): bump cuelang.org/go in the gomod group (#4479)
  * upgrade OSS-Fuzz build tooling (#4487)
  * Fix segfault when no attestations are found (#4472)
  * Use overridden repository for new bundle format (#4473)
  * update go to 1.25.3 (#4471)
  * Remove --out flag from `cosign initialize` (#4462)
  * chore(deps): bump the actions group with 2 updates (#4460)
  * Deprecate offline flag (#4457)
  * Deduplicate code in sign/attest* and verify* commands (#4449)
  * Cache signing config when calling initialize (#4456)
  * Update changelog for v3.0.2 (#4455)
  * chore(deps): bump google.golang.org/api from 0.250.0 to 0.251.0
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go
  * chore(deps): bump the actions group with 3 updates
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.107.2 to 3.108.0
  * choose different signature filename for KMS-signed release signatures (#4448)
  * chore(deps): bump github.com/go-jose/go-jose/v4 (#4451)
  * Update rekor-tiles version path
  * update CL for v3.0.1 release (#4447)
  * update goreleaser config for v3.0.0 release (#4446)
  * Create changelog for v3.0.0 (#4440)
  * Fetch service URLs from the TUF PGI signing config by default (#4428)
  * Create changelog for v2.6.1 (#4439)
  * chore(deps): bump google.golang.org/api from 0.249.0 to 0.250.0 (#4432)
  * chore(deps): bump the gomod group with 2 updates (#4429)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.8.0 to 1.9.0 (#4433)
  * chore(deps): bump the actions group with 3 updates (#4434)
  * chore(deps): bump github.com/go-openapi/swag from 0.24.1 to 0.25.1 (#4435)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4436)
  * chore(deps): bump github.com/go-openapi/runtime from 0.28.0 to 0.29.0 (#4437)
  * Bump module version to v3 for Cosign v3.0 (#4427)
  * Move sigstore-conformance back to tagged release (#4425)
  * Bump sigstore-go to v1.1.3 (#4423)
  * Partially populate the output of cosign verify when working with new bundles (#4416)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4419)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4418)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.105.0 to 3.107.0 (#4420)
  * chore(deps): bump chainguard-dev/actions in the actions group (#4421)
  * bump go builder to use 1.25.1 and cosign (#4417)
  * Bump sigstore-go for more precise user agents (#4413)
  * chore(deps): bump github.com/spf13/viper from 1.20.1 to 1.21.0 (#4408)
  * chore(deps): bump the actions group with 2 updates (#4407)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4410)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.104.0 to 3.105.0 (#4411)
  * Default to using the new protobuf format (#4318)</changelog>
  <changelog author="meissner@suse.com" date="1770811200">- Update to version 3.0.4:
  * CVE-2025-11065: Fixed github.com/go-viper/mapstructure/v2: sensitive
    Information leak in logs (bsc#1250620)
  * CVE-2026-22703: Fixed that cosign verification accepts any valid
    Rekor entry under certain conditions (bsc#1256496)
  * Fix bundle verify path for old bundle/trusted root (#4623)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4616)
  * chore(deps): bump cuelang.org/go in the gomod group (#4615)
  * Optimize cosign tree performance by caching digest resolution (#4612)
  * Don't require a trusted root to verify offline with a key (#4613)
  * Support default services for trusted-root and signing-config creation (#4592)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4602)
  * chore(deps): bump github.com/sigstore/sigstore-go (#4578)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.114.1 to 3.115.2 (#4601)
  * chore(deps): bump google.golang.org/api from 0.257.0 to 0.258.0 (#4611)
  * chore(deps): bump k8s.io/client-go from 0.34.3 to 0.35.0 (#4604)
  * chore(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 (#4588)
  * chore(deps): bump golang.org/x/oauth2 from 0.33.0 to 0.34.0 (#4586)
  * chore(deps): bump the gomod group with 5 updates (#4599)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.10.1 to 1.12.1 (#4600)
  * chore(deps): bump golang.org/x/term from 0.37.0 to 0.38.0 (#4584)
  * chore(deps): bump the actions group with 3 updates (#4587)
  * chore(deps): bump actions/cache from 4.3.0 to 5.0.1 (#4589)
  * chore(deps): bump the gomod group with 9 updates (#4577)</changelog>
  <changelog author="meissner@suse.com" date="1771761600">- Update to version 3.0.5: (jsc#SLE-23879)
  * CVE-2026-24122: Fixed improper validation of certificates that
    outlive expired CA certificates (bsc#1258542)
  * CVE-2026-26958: Fixed filippo.io/edwards25519: failure to initialize
    receiver in MultiScalarMult can produce invalid results and lead to
    undefined behavior (bsc#1258612)
  * CVE-2026-24137: Fixed github.com/sigstore/sigstore/pkg/tuf: legacy
    TUF client allows for arbitrary file writes with target cache path
    traversal (bsc#1257139)
  * CVE-2026-22772: Fixed github.com/sigstore/fulcio: bypass MetaIssuer
    URL validation bypass can trigger SSRF to arbitrary internal services
    (bsc#1256562)
  * CVE-2026-23991: Fixed github.com/theupdateframework/go-tuf/v2: denial
    of service due to invalid TUF metadata JSON returned by TUF repository
    (bsc#1257080)
  * CVE-2026-23992: Fixed github.com/theupdateframework/go-tuf/v2:
    unauthorized modification to TUF metadata files due to a compromised
    or misconfigured TUF repository (bsc#1257085)
  * chore(deps): bump google.golang.org/api from 0.260.0 to 0.264.0 (#4679)
  * chore(deps): bump github.com/sigstore/rekor-tiles/v2 from 2.0.1 to 2.1.0 (#4670)
  * chore(deps): bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 (#4712)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4680)
  * chore(deps): bump the gomod group across 1 directory with 4 updates (#4702)
  * chore(deps): bump the actions group with 3 updates (#4703)
  * update golang builder to use go1.25.7 (#4687)
  * update golangci-lint to v2.8.x (#4688)
  * Fix typo in CLI help (#4701)
  * Support DSSE signing conformance test (#4685)
  * chore(deps): bump the actions group across 1 directory with 8 updates (#4689)
  * Deprecate rekor-entry-type flag (#4691)
  * Deprecate cosign triangulate (#4676)
  * Deprecate cosign copy (#4681)
  * Enforce TSA requirement for Rekor v2, Fuclio signing (#4683)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4668)
  * chore(deps): bump golang from 1.25.5 to 1.25.6 in the all group (#4673)
  * Automatically require signed timestamp with Rekor v2 entries (#4666)
  * Fix syntax issue in conformance test, update nightly (#4664)
  * Add mTLS support for TSA client connections when signing with a signing config (#4620)
  * fix: avoid panic on malformed tlog entry body (#4652)
  * Verify validity of chain rather than just certificate (#4663)
  * Allow --local-image with --new-bundle-format for v2 and v3 signatures (#4626)
  * chore(deps): bump the gomod group across 1 directory with 3 updates (#4662)
  * Bump sigstore/sigstore to resolve GHSA (#4660)
  * Gracefully fail if bundle payload body is not a string (#4648)
  * fix: avoid panic on malformed replace payload (#4653)
  * chore(deps): bump github.com/sigstore/rekor from 1.4.3 to 1.5.0 (#4659)
  * fix: avoid panic on malformed attestation payload (#4651)
  * fix: avoid panic on malformed tlog entries (#4649)
  * Update conformance to latest
  * docs(cosign): clarify RFC3161 revocation semantics (#4642)
  * Add empty predicate to cosign sign when payload type is application/vnd.in-toto+json (#4635)
  * chore(deps): bump github.com/sigstore/fulcio from 1.8.4 to 1.8.5 (#4637)
  * Add origin key for ctfe trusted root
  * Add changelog updates for v3.0.4 and v2.6.2 (#4625)</changelog>
</package>
<package pkgid="01e23970e3dfba1dab856ae2962c8b7e94f29aa48c47b4f5fb056be33221b716" name="cosign" arch="src">
  <version epoch="0" ver="3.0.5" rel="150400.3.37.1"/>
  <changelog author="meissner@suse.com" date="1683460800">- update to 2.0.2 (jsc#SLE-23879)
  Enhancements
  - Update sigstore/sigstore to v1.6.2 to pick up TUF CDN change (#2891)
  - feat: Make cosign copy faster (#2901)
  - remove sget (#2885)
  - Require a payload to be provided with a signature (#2785)
  Bug Fixes
  - cmd: Change error message from KeyParseError to PubKeyParseError for verify-blob. (#2876)
  - Use SOURCE_DATE_EPOCH for OCI CreatedAt times (#2878)
  Documentation
  - Remove experimental warning from Fulcio flags (#2923)
  - add missing oidc provider (#2922)
  - Add zot as a supported registry (#2920)
  - deprecates kms_support docs (#2900)
  - chore(docs) deprecate note for usage docs (#2906)
  - adds note of deprecation for examples.md docs (#2899)</changelog>
  <changelog author="meissner@suse.com" date="1687867200">- updated to 2.1.1 (jsc#SLE-23879)
  - Bug Fixes
  - wait for the workers become available again to continue the execution (#3084)
  - fix help text when in a container (#3082)
- updated to 2.1.0 (jsc#SLE-23879)
  - Breaking Change: The predicate is now a required flag in the attest commands, set via the --type flag.
  - Enhancements
  - Verify sigs and attestations in parallel (#3066)
  - Deep inspect attestations when filtering download (#3031)
  - refactor bundle validation code, add support for DSSE rekor type (#3016)
  - Allow overriding remote options (#3049)
  - feat: adds no cert found on sig exit code (#3038)
  - Make predicate a required flag in attest commands (#3033)
  - Added support for attaching Time stamp authority Response in attach command (#3001)
  - Add sign --sign-container-identity CLI (#2984)
  - Feature: Allow cosign to sign digests before they are uploaded. (#2959)
  - accepts attachment-tag-prefix for cosign copy (#3014)
  - Feature: adds '--allow-insecure-registry' for cosign load (#3000)
  - download attestation: support --platform flag (#2980)
  - Cleanup: Add Digest to the SignedEntity interface. (#2960)
  - verify command: support keyless verification using only a provided certificate chain with non-fulcio roots (#2845)
  - verify: use workers to limit the paralellism when verifying images with --max-workers flag (#3069)
  - Bug Fixes
  - Fix pkg/cosign/errors (#3050)
  - Fix: update doc to refer to github-actions oidc provider (#3040)
  - Fix: prefer GitHub OIDC provider if enabled (#3044)
  - Fix --sig-only in cosign copy (#3074)
  - Documentation
  - Fix links to sigstore/docs in markdown files (#3064)</changelog>
  <changelog author="meissner@suse.com" date="1693569600">- updated to 2.2.0 (jsc#SLE-23879)
  - Enhancements
  * switch to uploading DSSE types to rekor instead of intoto (#3113)
  * add 'cosign sign' command-line parameters for mTLS (#3052)
  * improve error messages around bundle != payload hash (#3146)
  * make VerifyImageAttestation function public (#3156)
  * Switch to cryptoutils function for SANS (#3185)
  * Handle HTTP_1_1_REQUIRED errors in github provider (#3172)
  - Bug Fixes
  * Fix nondeterminsitic timestamps (#3121)
  - Documentation
  * doc: Add example of sign-blob with key in env var (#3152)
  * add deprecation notice for cosign-releases GCS bucket (#3148)
  * update doc links (#3186)</changelog>
  <changelog author="meissner@suse.com" date="1699358400">- updated to 2.2.1 (jsc#SLE-23879)
  This release comes with a fix for
  CVE-2023-46737 / bsc#1216933 described in this [Github Security
  Advisory](https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9).
  Enhancements:
  * feat: Support basic auth and bearer auth login to registry (#3310)
  * add support for ignoring certificates with pkcs11 (#3334)
  * Support ReplaceOp in Signatures (#3315)
  * feat: added ability to get image digest back via triangulate (#3255)
  * feat: add `--only` flag in `cosign copy` to copy sign, att &amp; sbom (#3247)
  * feat: add support attaching a Rekor bundle to a container (#3246)
  * feat: add support outputting rekor response on signing (#3248)
  * feat: improve dockerfile verify subcommand (#3264)
  * Add guard flag for experimental OCI 1.1 verify. (#3272)
  * Deprecate SBOM attachments (#3256)
  * feat: dedent line in cosign copy doc (#3244)
  * feat: add platform flag to cosign copy command (#3234)
  * Add SLSA 1.0 attestation support to cosign. Closes #2860 (#3219)
  * attest: pass OCI remote opts to att resolver. (#3225)
  Bug Fixes:
  * Merge pull request from GHSA-vfp6-jrw2-99g9
  * fix: allow cosign download sbom when image is absent (#3245)
  * ci: add a OCI registry test for referrers support (#3253)
  * Fix ReplaceSignatures (#3292)
  * Stop using deprecated in_toto.ProvenanceStatement (#3243)
  * Fixes #3236, disable SCT checking for a cosign verification when usin… (#3237)
  * fix: update error in `SignedEntity` to be more descriptive (#3233)
  * Fail timestamp verification if no root is provided (#3224)
  Documentation:
  * Add some docs about verifying in an air-gapped environment (#3321)
  * Update CONTRIBUTING.md (#3268)
  * docs: improves the Contribution guidelines (#3257)
  * Remove security policy (#3230)
  Others:
  * Set go to min 1.21 and update dependencies  (#3327)
  * Update contact for code of conduct (#3266)
  * Update .ko.yaml (#3240)</changelog>
  <changelog author="marcos.bjoerkelund@suse.com" date="1702382400">- updated to 2.2.2 (jsc#SLE-23879)
  v2.2.2 adds a new container with a shell,
  gcr.io/projectsigstore/cosign:vx.y.z-dev, in addition to the existing
  container gcr.io/projectsigstore/cosign:vx.y.z without a shell.
  For private deployments, we have also added an alias for
  - -insecure-skip-log, --private-infrastructure.
  Bug Fixes:
  * chore(deps): bump github.com/sigstore/sigstore from 1.7.5 to 1.7.6 (#3411) which fixes a bug with using Azure KMS
  * Don't require CT log keys if using a key/sk (#3415)
  * Fix copy without any flag set (#3409)
  * Update cosign generate cmd to not include newline (#3393)
  * Fix idempotency error with signing (#3371)
  Features:
  * Add --yes flag cosign import-key-pair to skip the overwrite confirmation. (#3383)
  * Use the timeout flag value in verify* commands. (#3391)
  * add --private-infrastructure flag (#3369)
  Container Updates:
  * Bump builder image to use go1.21.4 and add new cosign image tags with shell (#3373)
  Documentation:
  * Update SBOM_SPEC.md (#3358)</changelog>
  <changelog author="meissner@suse.com" date="1706875200">- updated to 2.2.3 (jsc#SLE-23879)
  Bug Fixes:
  * Fix race condition on verification with multiple signatures attached to image (#3486)
  * fix(clean): Fix clean cmd for private registries (#3446)
  * Fixed BYO PKI verification (#3427)
  Features:
  * Allow for option in cosign attest and attest-blob to upload attestation as supported in Rekor (#3466)
  * Add support for OpenVEX predicate type (#3405)
  Documentation:
  * Resolves #3088: `version` sub-command expected behaviour documentation and testing (#3447)
  * add examples for cosign attach signature cmd (#3468)
  Misc:
  * Remove CertSubject function (#3467)
  * Use local rekor and fulcio instances in e2e tests (#3478)
- bumped embedded golang.org/x/crypto/ssh to fix the Terrapin attack CVE-2023-48795 (bsc#1218207)</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- updated to 2.2.4 (jsc#SLE-23879)
  * Bug Fixes
  * Fixes for GHSA-88jx-383q-w4qc and GHSA-95pr-fxf5-86gv (#3661)
  - CVE-2024-29902: Malicious attachments can cause system-wide denial of service (bsc#1222835)
  - CVE-2024-29903: Malicious artifects can cause machine-wide denial of service (bsc#1222837)
  * ErrNoSignaturesFound should be used when there is no signature attached to an image. (#3526)
  * fix semgrep issues for dgryski.semgrep-go ruleset (#3541)
  * Honor creation timestamp for signatures again (#3549)
  * Features
  * Adds Support for Fulcio Client Credentials Flow, and Argument to Set Flow Explicitly (#3578)
  * Documentation
  * add oci bundle spec (#3622)
  * Correct help text of triangulate cmd (#3551)
  * Correct help text of verify-attestation policy argument (#3527)
  * feat: add OVHcloud MPR registry tested with cosign (#3639)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1717156800">- add completion subpackages (bash, fish, zsh)</changelog>
  <changelog author="meissner@suse.com" date="1721822400">- update to 2.3.0 (jsc#SLE-23879)
  * Features
  - Add PayloadProvider interface to decouple AttestationToPayloadJSON from oci.Signature interface (#3693)
  - add registry options to cosign save (#3645)
  - Add debug providers command. (#3728)
  - Make config layers in ociremote mountable (#3741)
  - adds tsa cert chain check for env var or tuf targets. (#3600)
  - add --ca-roots and --ca-intermediates flags to 'cosign verify' (#3464)
  - add handling of keyless verification for all verify commands (#3761)
  * Bug Fixes
  - fix: close attestationFile (#3679)
  - Set bundleVerified to true after Rekor verification (Resolves #3740) (#3745)
  * Documentation
  - Document ImportKeyPair and LoadPrivateKey functions in pkg/cosign (#3776)</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1724155200">- Set CGO_ENABLED=1 for fixing s390x failed build</changelog>
  <changelog author="meissner@suse.com" date="1727870400">- update to 2.4.0 (jsc#SLE-23879)
  - Add new bundle support to verify-blob and verify-blob-attestation (#3796)
  - Adding protobuf bundle support to sign-blob and attest-blob (#3752)
  - Bump sigstore/sigstore to support email_verified as string or boolean (#3819)
  - Conformance testing for cosign (#3806)
  - move incremental builds per commit to GHCR instead of GCR (#3808)
  - Add support for recording creation timestamp for cosign attest (#3797)
  - Include SCT verification failure details in error message (#3799)</changelog>
  <changelog author="meissner@suse.com" date="1738756800">- Update to version 2.4.2:
  - Updated open-policy-agent to 1.1.0 library (#4036)
  - Note that only Rego v0 policies are supported at this time
  - Add UseSignedTimestamps to CheckOpts, refactor TSA options (#4006)
  - Add support for verifying root checksum in cosign initialize (#3953)
  - Detect if user supplied a valid protobuf bundle (#3931)
  - Add a log message if user doesn't provide --trusted-root (#3933)
  - Support mTLS towards container registry (#3922)
  - Add bundle create helper command (#3901)
  - Add trusted-root create helper command (#3876)
  Bug Fixes:
  - fix: set tls config while retaining other fields from default http transport (#4007)
  - policy fuzzer: ignore known panics (#3993)
  - Fix for multiple WithRemote options (#3982)
  - Add nightly conformance test workflow (#3979)
  - Fix copy --only for signatures + update/align docs (#3904)
- use "osc service mr" to update</changelog>
  <changelog author="meissner@suse.com" date="1740052800">- Update to version 2.4.3:
  * Enable fetching signatures without remote get. (#4047)
  * Bump sigstore/sigstore to support KMS plugins (#4073)
  * sort properly Go imports (#4071)
  * sync comment with parameter name in function signature (#4063)
  * fix go imports order to be alphabetical (#4062)
  * fix comment typo and imports order (#4061)
  * Feat/file flag completion improvements (#4028)
  * Udpate builder to use go1.23.6 (#4052)
  * Refactor verifyNewBundle into library function (#4013)
  * fix parsing error in --only for cosign copy (#4049)
  * Fix codeowners syntax, add dep-maintainers (#4046)</changelog>
  <changelog author="meissner@suse.com" date="1744545600">- Update to version 2.5.0:
  * Update sigstore-go to pick up bug fixes (#4150)
  * Update golangci-lint to v2, update golangci-lint-action (#4143)
  * Feat/non filename completions (#4115)
  * update builder to use go1.24.1 (#4116)
  * Add support for new bundle specification for attesting/verifying OCI image attestations (#3889)
  * Remove cert log line (#4113)
  * cmd/cosign/cli: fix typo in ignoreTLogMessage (#4111)
  * bump to latest scaffolding release for testing (#4099)
  * increase 2e2_test docker compose tiemout to 180s (#4091)
  * Fix replace with compliant image mediatype (#4077)
  * Add TSA certificate related flags and fields for cosign attest (#4079)
- Security issues fixed:
  - CVE-2024-6104: cosign: hashicorp/go-retryablehttp: url might write sensitive information to log file (bsc#1227031)
  - CVE-2024-51744: cosign: github.com/golang-jwt/jwt/v4: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt (bsc#1232985)
  - CVE-2025-27144: cosign: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: Go JOSE's Parsing Vulnerable to Denial of Service (bsc#1237682)
  - CVE-2025-22870: cosign: golang.org/x/net/proxy: proxy bypass using IPv6 zone IDs (bsc#1238693)
  - CVE-2025-22868: cosign: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239204)
  - CVE-2025-22869: cosign: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239337)</changelog>
  <changelog author="meissner@suse.com" date="1748433600">- switch to go1.24, enable fips build</changelog>
  <changelog author="meissner@suse.com" date="1752840000">- Update to version 2.5.3 (jsc#SLE-23879)
  - Add signing-config create command (#4280)
  - Allow multiple services to be specified for trusted-root create (#4285)
  - force when copying the latest image to overwrite (#4298)
  - Fix cert verification logic for trusted-root/SCTs (#4294)
  - Fix lint error for types package (#4295)
  - feat: Add OCI 1.1+ experimental support to tree (#4205)
  - Add validity period end for trusted-root create (#4271)
  - avoid double-loading trustedroot from file (#4264)
- Update to 2.5.2:
  - Do not load trusted root when CT env key is set
  - docs: improve doc for --no-upload option (#4206)
- Update to 2.5.1:
  * Features
  - Add Rekor v2 support for trusted-root create (#4242)
  - Add baseUrl and Uri to trusted-root create command
  - Upgrade to TUF v2 client with trusted root
  - Don't verify SCT for a private PKI cert (#4225)
  - Bump TSA library to relax EKU chain validation rules (#4219)
  * Bug Fixes
  - Bump sigstore-go to pick up log index=0 fix (#4162)
  - remove unused recursive flag on attest command (#4187)
  * Docs
  - Fix indentation in verify-blob cmd examples (#4160)
  * GO-2025-3660/ CVE-2025-46569: Fixed OPA server Data API HTTP path injection of Rego (bsc#1246725)</changelog>
  <changelog author="meissner@suse.com" date="1758196800">- Update to version 2.6.0:
  - Require exclusively a SigningConfig or service URLs when signing (#4403)
  - Add a terminal spinner while signing with sigstore-go (#4402)
  - Bump sigstore-go, support alternative hash algorithms with keys (#4386)
  - Add support for SigningConfig in sign/attest (#4371)
  - Support self-managed keys when signing with sigstore-go (#4368)
  - Remove SHA256 assumption in sign-blob/verify-blob (#4050)
  - introduce dockerfile to pin the go version to decouple go version from go.mod (#4369)
  - refactor: extract function to write referrer attestations (#4357)
  - Break import cycle with e2e build tag (#4370)
  - Update conformance test binary for signing config (#4367)
  - update builder image to use go1.25 (#4366)
  - Don't load content from TUF if trusted root path is specified (#4347)
  - Don't require timestamps when verifying with a key (#4337)
  - Fixes to cosign sign / verify for the new bundle format (#4346)
  - update builder to use go1.24.6 (#4334)
  - bump golangci-lint to v2.3.x (#4333)
  - Have cosign sign support bundle format (#4316)
  - Add support for SigningConfig for sign-blob/attest-blob, support Rekor v2 (#4319)
  - Verify subject with bundle only when checking claims (#4320)
  - Add to `attest-blob` the ability to supply a complete in-toto statement, and add to `verify-blob-attestation` the ability to verify with just a digest (#4306)</changelog>
  <changelog author="meissner@suse.com" date="1765368000">- Update to version 3.0.3:
  * 4554: Closes 4554 - Add warning when --output* is used (#4556)
  * chore(deps): bump golangci/golangci-lint-action from 8.0.0 to 9.1.0 (#4545)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.111.0 to 3.113.0 (#4542)
  * chore(deps): bump github.com/awslabs/amazon-ecr-credential-helper/ecr-login (#4543)
  * chore(deps): bump actions/checkout from 5.0.0 to 6.0.0 (#4546)
  * chore(deps): bump the actions group with 4 updates (#4544)
  * chore(deps): bump the gomod group across 1 directory with 5 updates (#4567)
  * chore(deps): bump golang from 1.25.4 to 1.25.5 in the all group (#4568)
  * update builder to use go1.25.5 (#4566)
  * Protobuf bundle support for subcommand `clean` (#4539)
  * Add staging flag to initialize with staging TUF metadata
  * update slack invite link (#4560)
  * Updating sign-blob to also support signing with a certificate (#4547)
  * Bump sigstore library dependencies (#4532)
  * Protobuf bundle support for subcommands `save` and `load` (#4538)
  * Fix cert attachment for new bundle with signing config
  * Fix OCI verification with local cert - old bundle
  * chore(deps): bump github.com/sigstore/fulcio from 1.7.1 to 1.8.1 (#4519)
  * chore(deps): bump golang.org/x/crypto in /test/fakeoidc (#4535)
  * chore(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0 (#4536)
  * CVE-2025-58181: Fixed golang.org/x/crypto/ssh: invalidated number
    of mechanisms can cause unbounded memory consumption (bsc#1253913)
  * update go builder and cosign (#4529)
  * chore(deps): bump the gomod group across 1 directory with 7 updates (#4528)
  * chore(deps): bump sigstore/cosign-installer from 3.10.0 to 4.0.0 (#4478)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4520)
  * chore(deps): bump golang from 1.25.3 to 1.25.4 in the all group (#4515)
  * chore(deps): bump golang.org/x/oauth2 from 0.32.0 to 0.33.0 (#4518)
  * chore(deps): bump cuelang.org/go from 0.14.2 to 0.15.0 (#4524)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.9.0 to 1.10.1 (#4521)
  * chore(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 (#4502)
  * chore(deps): bump the actions group across 1 directory with 2 updates (#4516)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.110.0 to 3.111.0 (#4523)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4522)
  * Deprecate tlog-upload flag (#4458)
  * fix: Use signal context for `sign` cli package.
  * update offline verification directions (#4526)
  * Fix signing/verifying annotations for new bundle
  * Add support to download and attach for protobuf bundles (#4477)
  * Add --signing-algorithm flag (#3497)
  * Refactor signcommon bundle helpers
  * Add --bundle and fix --upload for new bundle
  * Pass insecure registry flags through to referrers
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.108.0 to 3.109.1 (#4483)
  * Add protobuf bundle support for tree subcommand (#4491)
  * Remove stale embed import (#4492)
  * Support multiple container identities
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4484)
  * chore(deps): bump chainguard-dev/actions in the actions group (#4480)
  * chore(deps): bump github.com/sigstore/rekor-tiles/v2 (#4485)
  * chore(deps): bump golang.org/x/crypto from 0.42.0 to 0.43.0 (#4486)
  * chore(deps): bump cuelang.org/go in the gomod group (#4479)
  * upgrade OSS-Fuzz build tooling (#4487)
  * Fix segfault when no attestations are found (#4472)
  * Use overridden repository for new bundle format (#4473)
  * update go to 1.25.3 (#4471)
  * Remove --out flag from `cosign initialize` (#4462)
  * chore(deps): bump the actions group with 2 updates (#4460)
  * Deprecate offline flag (#4457)
  * Deduplicate code in sign/attest* and verify* commands (#4449)
  * Cache signing config when calling initialize (#4456)
  * Update changelog for v3.0.2 (#4455)
  * chore(deps): bump google.golang.org/api from 0.250.0 to 0.251.0
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go
  * chore(deps): bump the actions group with 3 updates
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.107.2 to 3.108.0
  * choose different signature filename for KMS-signed release signatures (#4448)
  * chore(deps): bump github.com/go-jose/go-jose/v4 (#4451)
  * Update rekor-tiles version path
  * update CL for v3.0.1 release (#4447)
  * update goreleaser config for v3.0.0 release (#4446)
  * Create changelog for v3.0.0 (#4440)
  * Fetch service URLs from the TUF PGI signing config by default (#4428)
  * Create changelog for v2.6.1 (#4439)
  * chore(deps): bump google.golang.org/api from 0.249.0 to 0.250.0 (#4432)
  * chore(deps): bump the gomod group with 2 updates (#4429)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.8.0 to 1.9.0 (#4433)
  * chore(deps): bump the actions group with 3 updates (#4434)
  * chore(deps): bump github.com/go-openapi/swag from 0.24.1 to 0.25.1 (#4435)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4436)
  * chore(deps): bump github.com/go-openapi/runtime from 0.28.0 to 0.29.0 (#4437)
  * Bump module version to v3 for Cosign v3.0 (#4427)
  * Move sigstore-conformance back to tagged release (#4425)
  * Bump sigstore-go to v1.1.3 (#4423)
  * Partially populate the output of cosign verify when working with new bundles (#4416)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4419)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4418)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.105.0 to 3.107.0 (#4420)
  * chore(deps): bump chainguard-dev/actions in the actions group (#4421)
  * bump go builder to use 1.25.1 and cosign (#4417)
  * Bump sigstore-go for more precise user agents (#4413)
  * chore(deps): bump github.com/spf13/viper from 1.20.1 to 1.21.0 (#4408)
  * chore(deps): bump the actions group with 2 updates (#4407)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4410)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.104.0 to 3.105.0 (#4411)
  * Default to using the new protobuf format (#4318)</changelog>
  <changelog author="meissner@suse.com" date="1770811200">- Update to version 3.0.4:
  * CVE-2025-11065: Fixed github.com/go-viper/mapstructure/v2: sensitive
    Information leak in logs (bsc#1250620)
  * CVE-2026-22703: Fixed that cosign verification accepts any valid
    Rekor entry under certain conditions (bsc#1256496)
  * Fix bundle verify path for old bundle/trusted root (#4623)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4616)
  * chore(deps): bump cuelang.org/go in the gomod group (#4615)
  * Optimize cosign tree performance by caching digest resolution (#4612)
  * Don't require a trusted root to verify offline with a key (#4613)
  * Support default services for trusted-root and signing-config creation (#4592)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4602)
  * chore(deps): bump github.com/sigstore/sigstore-go (#4578)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.114.1 to 3.115.2 (#4601)
  * chore(deps): bump google.golang.org/api from 0.257.0 to 0.258.0 (#4611)
  * chore(deps): bump k8s.io/client-go from 0.34.3 to 0.35.0 (#4604)
  * chore(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 (#4588)
  * chore(deps): bump golang.org/x/oauth2 from 0.33.0 to 0.34.0 (#4586)
  * chore(deps): bump the gomod group with 5 updates (#4599)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.10.1 to 1.12.1 (#4600)
  * chore(deps): bump golang.org/x/term from 0.37.0 to 0.38.0 (#4584)
  * chore(deps): bump the actions group with 3 updates (#4587)
  * chore(deps): bump actions/cache from 4.3.0 to 5.0.1 (#4589)
  * chore(deps): bump the gomod group with 9 updates (#4577)</changelog>
  <changelog author="meissner@suse.com" date="1771761600">- Update to version 3.0.5: (jsc#SLE-23879)
  * CVE-2026-24122: Fixed improper validation of certificates that
    outlive expired CA certificates (bsc#1258542)
  * CVE-2026-26958: Fixed filippo.io/edwards25519: failure to initialize
    receiver in MultiScalarMult can produce invalid results and lead to
    undefined behavior (bsc#1258612)
  * CVE-2026-24137: Fixed github.com/sigstore/sigstore/pkg/tuf: legacy
    TUF client allows for arbitrary file writes with target cache path
    traversal (bsc#1257139)
  * CVE-2026-22772: Fixed github.com/sigstore/fulcio: bypass MetaIssuer
    URL validation bypass can trigger SSRF to arbitrary internal services
    (bsc#1256562)
  * CVE-2026-23991: Fixed github.com/theupdateframework/go-tuf/v2: denial
    of service due to invalid TUF metadata JSON returned by TUF repository
    (bsc#1257080)
  * CVE-2026-23992: Fixed github.com/theupdateframework/go-tuf/v2:
    unauthorized modification to TUF metadata files due to a compromised
    or misconfigured TUF repository (bsc#1257085)
  * chore(deps): bump google.golang.org/api from 0.260.0 to 0.264.0 (#4679)
  * chore(deps): bump github.com/sigstore/rekor-tiles/v2 from 2.0.1 to 2.1.0 (#4670)
  * chore(deps): bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 (#4712)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4680)
  * chore(deps): bump the gomod group across 1 directory with 4 updates (#4702)
  * chore(deps): bump the actions group with 3 updates (#4703)
  * update golang builder to use go1.25.7 (#4687)
  * update golangci-lint to v2.8.x (#4688)
  * Fix typo in CLI help (#4701)
  * Support DSSE signing conformance test (#4685)
  * chore(deps): bump the actions group across 1 directory with 8 updates (#4689)
  * Deprecate rekor-entry-type flag (#4691)
  * Deprecate cosign triangulate (#4676)
  * Deprecate cosign copy (#4681)
  * Enforce TSA requirement for Rekor v2, Fuclio signing (#4683)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4668)
  * chore(deps): bump golang from 1.25.5 to 1.25.6 in the all group (#4673)
  * Automatically require signed timestamp with Rekor v2 entries (#4666)
  * Fix syntax issue in conformance test, update nightly (#4664)
  * Add mTLS support for TSA client connections when signing with a signing config (#4620)
  * fix: avoid panic on malformed tlog entry body (#4652)
  * Verify validity of chain rather than just certificate (#4663)
  * Allow --local-image with --new-bundle-format for v2 and v3 signatures (#4626)
  * chore(deps): bump the gomod group across 1 directory with 3 updates (#4662)
  * Bump sigstore/sigstore to resolve GHSA (#4660)
  * Gracefully fail if bundle payload body is not a string (#4648)
  * fix: avoid panic on malformed replace payload (#4653)
  * chore(deps): bump github.com/sigstore/rekor from 1.4.3 to 1.5.0 (#4659)
  * fix: avoid panic on malformed attestation payload (#4651)
  * fix: avoid panic on malformed tlog entries (#4649)
  * Update conformance to latest
  * docs(cosign): clarify RFC3161 revocation semantics (#4642)
  * Add empty predicate to cosign sign when payload type is application/vnd.in-toto+json (#4635)
  * chore(deps): bump github.com/sigstore/fulcio from 1.8.4 to 1.8.5 (#4637)
  * Add origin key for ctfe trusted root
  * Add changelog updates for v3.0.4 and v2.6.2 (#4625)</changelog>
</package>
<package pkgid="d07d6a0e16879c1bf48f27e87ffe4f75d2c00f13e22a4e2ebd9b5e84fe535aa6" name="cosign" arch="x86_64">
  <version epoch="0" ver="3.0.5" rel="150400.3.37.1"/>
  <changelog author="meissner@suse.com" date="1683460800">- update to 2.0.2 (jsc#SLE-23879)
  Enhancements
  - Update sigstore/sigstore to v1.6.2 to pick up TUF CDN change (#2891)
  - feat: Make cosign copy faster (#2901)
  - remove sget (#2885)
  - Require a payload to be provided with a signature (#2785)
  Bug Fixes
  - cmd: Change error message from KeyParseError to PubKeyParseError for verify-blob. (#2876)
  - Use SOURCE_DATE_EPOCH for OCI CreatedAt times (#2878)
  Documentation
  - Remove experimental warning from Fulcio flags (#2923)
  - add missing oidc provider (#2922)
  - Add zot as a supported registry (#2920)
  - deprecates kms_support docs (#2900)
  - chore(docs) deprecate note for usage docs (#2906)
  - adds note of deprecation for examples.md docs (#2899)</changelog>
  <changelog author="meissner@suse.com" date="1687867200">- updated to 2.1.1 (jsc#SLE-23879)
  - Bug Fixes
  - wait for the workers become available again to continue the execution (#3084)
  - fix help text when in a container (#3082)
- updated to 2.1.0 (jsc#SLE-23879)
  - Breaking Change: The predicate is now a required flag in the attest commands, set via the --type flag.
  - Enhancements
  - Verify sigs and attestations in parallel (#3066)
  - Deep inspect attestations when filtering download (#3031)
  - refactor bundle validation code, add support for DSSE rekor type (#3016)
  - Allow overriding remote options (#3049)
  - feat: adds no cert found on sig exit code (#3038)
  - Make predicate a required flag in attest commands (#3033)
  - Added support for attaching Time stamp authority Response in attach command (#3001)
  - Add sign --sign-container-identity CLI (#2984)
  - Feature: Allow cosign to sign digests before they are uploaded. (#2959)
  - accepts attachment-tag-prefix for cosign copy (#3014)
  - Feature: adds '--allow-insecure-registry' for cosign load (#3000)
  - download attestation: support --platform flag (#2980)
  - Cleanup: Add Digest to the SignedEntity interface. (#2960)
  - verify command: support keyless verification using only a provided certificate chain with non-fulcio roots (#2845)
  - verify: use workers to limit the paralellism when verifying images with --max-workers flag (#3069)
  - Bug Fixes
  - Fix pkg/cosign/errors (#3050)
  - Fix: update doc to refer to github-actions oidc provider (#3040)
  - Fix: prefer GitHub OIDC provider if enabled (#3044)
  - Fix --sig-only in cosign copy (#3074)
  - Documentation
  - Fix links to sigstore/docs in markdown files (#3064)</changelog>
  <changelog author="meissner@suse.com" date="1693569600">- updated to 2.2.0 (jsc#SLE-23879)
  - Enhancements
  * switch to uploading DSSE types to rekor instead of intoto (#3113)
  * add 'cosign sign' command-line parameters for mTLS (#3052)
  * improve error messages around bundle != payload hash (#3146)
  * make VerifyImageAttestation function public (#3156)
  * Switch to cryptoutils function for SANS (#3185)
  * Handle HTTP_1_1_REQUIRED errors in github provider (#3172)
  - Bug Fixes
  * Fix nondeterminsitic timestamps (#3121)
  - Documentation
  * doc: Add example of sign-blob with key in env var (#3152)
  * add deprecation notice for cosign-releases GCS bucket (#3148)
  * update doc links (#3186)</changelog>
  <changelog author="meissner@suse.com" date="1699358400">- updated to 2.2.1 (jsc#SLE-23879)
  This release comes with a fix for
  CVE-2023-46737 / bsc#1216933 described in this [Github Security
  Advisory](https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9).
  Enhancements:
  * feat: Support basic auth and bearer auth login to registry (#3310)
  * add support for ignoring certificates with pkcs11 (#3334)
  * Support ReplaceOp in Signatures (#3315)
  * feat: added ability to get image digest back via triangulate (#3255)
  * feat: add `--only` flag in `cosign copy` to copy sign, att &amp; sbom (#3247)
  * feat: add support attaching a Rekor bundle to a container (#3246)
  * feat: add support outputting rekor response on signing (#3248)
  * feat: improve dockerfile verify subcommand (#3264)
  * Add guard flag for experimental OCI 1.1 verify. (#3272)
  * Deprecate SBOM attachments (#3256)
  * feat: dedent line in cosign copy doc (#3244)
  * feat: add platform flag to cosign copy command (#3234)
  * Add SLSA 1.0 attestation support to cosign. Closes #2860 (#3219)
  * attest: pass OCI remote opts to att resolver. (#3225)
  Bug Fixes:
  * Merge pull request from GHSA-vfp6-jrw2-99g9
  * fix: allow cosign download sbom when image is absent (#3245)
  * ci: add a OCI registry test for referrers support (#3253)
  * Fix ReplaceSignatures (#3292)
  * Stop using deprecated in_toto.ProvenanceStatement (#3243)
  * Fixes #3236, disable SCT checking for a cosign verification when usin… (#3237)
  * fix: update error in `SignedEntity` to be more descriptive (#3233)
  * Fail timestamp verification if no root is provided (#3224)
  Documentation:
  * Add some docs about verifying in an air-gapped environment (#3321)
  * Update CONTRIBUTING.md (#3268)
  * docs: improves the Contribution guidelines (#3257)
  * Remove security policy (#3230)
  Others:
  * Set go to min 1.21 and update dependencies  (#3327)
  * Update contact for code of conduct (#3266)
  * Update .ko.yaml (#3240)</changelog>
  <changelog author="marcos.bjoerkelund@suse.com" date="1702382400">- updated to 2.2.2 (jsc#SLE-23879)
  v2.2.2 adds a new container with a shell,
  gcr.io/projectsigstore/cosign:vx.y.z-dev, in addition to the existing
  container gcr.io/projectsigstore/cosign:vx.y.z without a shell.
  For private deployments, we have also added an alias for
  - -insecure-skip-log, --private-infrastructure.
  Bug Fixes:
  * chore(deps): bump github.com/sigstore/sigstore from 1.7.5 to 1.7.6 (#3411) which fixes a bug with using Azure KMS
  * Don't require CT log keys if using a key/sk (#3415)
  * Fix copy without any flag set (#3409)
  * Update cosign generate cmd to not include newline (#3393)
  * Fix idempotency error with signing (#3371)
  Features:
  * Add --yes flag cosign import-key-pair to skip the overwrite confirmation. (#3383)
  * Use the timeout flag value in verify* commands. (#3391)
  * add --private-infrastructure flag (#3369)
  Container Updates:
  * Bump builder image to use go1.21.4 and add new cosign image tags with shell (#3373)
  Documentation:
  * Update SBOM_SPEC.md (#3358)</changelog>
  <changelog author="meissner@suse.com" date="1706875200">- updated to 2.2.3 (jsc#SLE-23879)
  Bug Fixes:
  * Fix race condition on verification with multiple signatures attached to image (#3486)
  * fix(clean): Fix clean cmd for private registries (#3446)
  * Fixed BYO PKI verification (#3427)
  Features:
  * Allow for option in cosign attest and attest-blob to upload attestation as supported in Rekor (#3466)
  * Add support for OpenVEX predicate type (#3405)
  Documentation:
  * Resolves #3088: `version` sub-command expected behaviour documentation and testing (#3447)
  * add examples for cosign attach signature cmd (#3468)
  Misc:
  * Remove CertSubject function (#3467)
  * Use local rekor and fulcio instances in e2e tests (#3478)
- bumped embedded golang.org/x/crypto/ssh to fix the Terrapin attack CVE-2023-48795 (bsc#1218207)</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- updated to 2.2.4 (jsc#SLE-23879)
  * Bug Fixes
  * Fixes for GHSA-88jx-383q-w4qc and GHSA-95pr-fxf5-86gv (#3661)
  - CVE-2024-29902: Malicious attachments can cause system-wide denial of service (bsc#1222835)
  - CVE-2024-29903: Malicious artifects can cause machine-wide denial of service (bsc#1222837)
  * ErrNoSignaturesFound should be used when there is no signature attached to an image. (#3526)
  * fix semgrep issues for dgryski.semgrep-go ruleset (#3541)
  * Honor creation timestamp for signatures again (#3549)
  * Features
  * Adds Support for Fulcio Client Credentials Flow, and Argument to Set Flow Explicitly (#3578)
  * Documentation
  * add oci bundle spec (#3622)
  * Correct help text of triangulate cmd (#3551)
  * Correct help text of verify-attestation policy argument (#3527)
  * feat: add OVHcloud MPR registry tested with cosign (#3639)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1717156800">- add completion subpackages (bash, fish, zsh)</changelog>
  <changelog author="meissner@suse.com" date="1721822400">- update to 2.3.0 (jsc#SLE-23879)
  * Features
  - Add PayloadProvider interface to decouple AttestationToPayloadJSON from oci.Signature interface (#3693)
  - add registry options to cosign save (#3645)
  - Add debug providers command. (#3728)
  - Make config layers in ociremote mountable (#3741)
  - adds tsa cert chain check for env var or tuf targets. (#3600)
  - add --ca-roots and --ca-intermediates flags to 'cosign verify' (#3464)
  - add handling of keyless verification for all verify commands (#3761)
  * Bug Fixes
  - fix: close attestationFile (#3679)
  - Set bundleVerified to true after Rekor verification (Resolves #3740) (#3745)
  * Documentation
  - Document ImportKeyPair and LoadPrivateKey functions in pkg/cosign (#3776)</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1724155200">- Set CGO_ENABLED=1 for fixing s390x failed build</changelog>
  <changelog author="meissner@suse.com" date="1727870400">- update to 2.4.0 (jsc#SLE-23879)
  - Add new bundle support to verify-blob and verify-blob-attestation (#3796)
  - Adding protobuf bundle support to sign-blob and attest-blob (#3752)
  - Bump sigstore/sigstore to support email_verified as string or boolean (#3819)
  - Conformance testing for cosign (#3806)
  - move incremental builds per commit to GHCR instead of GCR (#3808)
  - Add support for recording creation timestamp for cosign attest (#3797)
  - Include SCT verification failure details in error message (#3799)</changelog>
  <changelog author="meissner@suse.com" date="1738756800">- Update to version 2.4.2:
  - Updated open-policy-agent to 1.1.0 library (#4036)
  - Note that only Rego v0 policies are supported at this time
  - Add UseSignedTimestamps to CheckOpts, refactor TSA options (#4006)
  - Add support for verifying root checksum in cosign initialize (#3953)
  - Detect if user supplied a valid protobuf bundle (#3931)
  - Add a log message if user doesn't provide --trusted-root (#3933)
  - Support mTLS towards container registry (#3922)
  - Add bundle create helper command (#3901)
  - Add trusted-root create helper command (#3876)
  Bug Fixes:
  - fix: set tls config while retaining other fields from default http transport (#4007)
  - policy fuzzer: ignore known panics (#3993)
  - Fix for multiple WithRemote options (#3982)
  - Add nightly conformance test workflow (#3979)
  - Fix copy --only for signatures + update/align docs (#3904)
- use "osc service mr" to update</changelog>
  <changelog author="meissner@suse.com" date="1740052800">- Update to version 2.4.3:
  * Enable fetching signatures without remote get. (#4047)
  * Bump sigstore/sigstore to support KMS plugins (#4073)
  * sort properly Go imports (#4071)
  * sync comment with parameter name in function signature (#4063)
  * fix go imports order to be alphabetical (#4062)
  * fix comment typo and imports order (#4061)
  * Feat/file flag completion improvements (#4028)
  * Udpate builder to use go1.23.6 (#4052)
  * Refactor verifyNewBundle into library function (#4013)
  * fix parsing error in --only for cosign copy (#4049)
  * Fix codeowners syntax, add dep-maintainers (#4046)</changelog>
  <changelog author="meissner@suse.com" date="1744545600">- Update to version 2.5.0:
  * Update sigstore-go to pick up bug fixes (#4150)
  * Update golangci-lint to v2, update golangci-lint-action (#4143)
  * Feat/non filename completions (#4115)
  * update builder to use go1.24.1 (#4116)
  * Add support for new bundle specification for attesting/verifying OCI image attestations (#3889)
  * Remove cert log line (#4113)
  * cmd/cosign/cli: fix typo in ignoreTLogMessage (#4111)
  * bump to latest scaffolding release for testing (#4099)
  * increase 2e2_test docker compose tiemout to 180s (#4091)
  * Fix replace with compliant image mediatype (#4077)
  * Add TSA certificate related flags and fields for cosign attest (#4079)
- Security issues fixed:
  - CVE-2024-6104: cosign: hashicorp/go-retryablehttp: url might write sensitive information to log file (bsc#1227031)
  - CVE-2024-51744: cosign: github.com/golang-jwt/jwt/v4: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt (bsc#1232985)
  - CVE-2025-27144: cosign: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: Go JOSE's Parsing Vulnerable to Denial of Service (bsc#1237682)
  - CVE-2025-22870: cosign: golang.org/x/net/proxy: proxy bypass using IPv6 zone IDs (bsc#1238693)
  - CVE-2025-22868: cosign: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239204)
  - CVE-2025-22869: cosign: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239337)</changelog>
  <changelog author="meissner@suse.com" date="1748433600">- switch to go1.24, enable fips build</changelog>
  <changelog author="meissner@suse.com" date="1752840000">- Update to version 2.5.3 (jsc#SLE-23879)
  - Add signing-config create command (#4280)
  - Allow multiple services to be specified for trusted-root create (#4285)
  - force when copying the latest image to overwrite (#4298)
  - Fix cert verification logic for trusted-root/SCTs (#4294)
  - Fix lint error for types package (#4295)
  - feat: Add OCI 1.1+ experimental support to tree (#4205)
  - Add validity period end for trusted-root create (#4271)
  - avoid double-loading trustedroot from file (#4264)
- Update to 2.5.2:
  - Do not load trusted root when CT env key is set
  - docs: improve doc for --no-upload option (#4206)
- Update to 2.5.1:
  * Features
  - Add Rekor v2 support for trusted-root create (#4242)
  - Add baseUrl and Uri to trusted-root create command
  - Upgrade to TUF v2 client with trusted root
  - Don't verify SCT for a private PKI cert (#4225)
  - Bump TSA library to relax EKU chain validation rules (#4219)
  * Bug Fixes
  - Bump sigstore-go to pick up log index=0 fix (#4162)
  - remove unused recursive flag on attest command (#4187)
  * Docs
  - Fix indentation in verify-blob cmd examples (#4160)
  * GO-2025-3660/ CVE-2025-46569: Fixed OPA server Data API HTTP path injection of Rego (bsc#1246725)</changelog>
  <changelog author="meissner@suse.com" date="1758196800">- Update to version 2.6.0:
  - Require exclusively a SigningConfig or service URLs when signing (#4403)
  - Add a terminal spinner while signing with sigstore-go (#4402)
  - Bump sigstore-go, support alternative hash algorithms with keys (#4386)
  - Add support for SigningConfig in sign/attest (#4371)
  - Support self-managed keys when signing with sigstore-go (#4368)
  - Remove SHA256 assumption in sign-blob/verify-blob (#4050)
  - introduce dockerfile to pin the go version to decouple go version from go.mod (#4369)
  - refactor: extract function to write referrer attestations (#4357)
  - Break import cycle with e2e build tag (#4370)
  - Update conformance test binary for signing config (#4367)
  - update builder image to use go1.25 (#4366)
  - Don't load content from TUF if trusted root path is specified (#4347)
  - Don't require timestamps when verifying with a key (#4337)
  - Fixes to cosign sign / verify for the new bundle format (#4346)
  - update builder to use go1.24.6 (#4334)
  - bump golangci-lint to v2.3.x (#4333)
  - Have cosign sign support bundle format (#4316)
  - Add support for SigningConfig for sign-blob/attest-blob, support Rekor v2 (#4319)
  - Verify subject with bundle only when checking claims (#4320)
  - Add to `attest-blob` the ability to supply a complete in-toto statement, and add to `verify-blob-attestation` the ability to verify with just a digest (#4306)</changelog>
  <changelog author="meissner@suse.com" date="1765368000">- Update to version 3.0.3:
  * 4554: Closes 4554 - Add warning when --output* is used (#4556)
  * chore(deps): bump golangci/golangci-lint-action from 8.0.0 to 9.1.0 (#4545)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.111.0 to 3.113.0 (#4542)
  * chore(deps): bump github.com/awslabs/amazon-ecr-credential-helper/ecr-login (#4543)
  * chore(deps): bump actions/checkout from 5.0.0 to 6.0.0 (#4546)
  * chore(deps): bump the actions group with 4 updates (#4544)
  * chore(deps): bump the gomod group across 1 directory with 5 updates (#4567)
  * chore(deps): bump golang from 1.25.4 to 1.25.5 in the all group (#4568)
  * update builder to use go1.25.5 (#4566)
  * Protobuf bundle support for subcommand `clean` (#4539)
  * Add staging flag to initialize with staging TUF metadata
  * update slack invite link (#4560)
  * Updating sign-blob to also support signing with a certificate (#4547)
  * Bump sigstore library dependencies (#4532)
  * Protobuf bundle support for subcommands `save` and `load` (#4538)
  * Fix cert attachment for new bundle with signing config
  * Fix OCI verification with local cert - old bundle
  * chore(deps): bump github.com/sigstore/fulcio from 1.7.1 to 1.8.1 (#4519)
  * chore(deps): bump golang.org/x/crypto in /test/fakeoidc (#4535)
  * chore(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0 (#4536)
  * CVE-2025-58181: Fixed golang.org/x/crypto/ssh: invalidated number
    of mechanisms can cause unbounded memory consumption (bsc#1253913)
  * update go builder and cosign (#4529)
  * chore(deps): bump the gomod group across 1 directory with 7 updates (#4528)
  * chore(deps): bump sigstore/cosign-installer from 3.10.0 to 4.0.0 (#4478)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4520)
  * chore(deps): bump golang from 1.25.3 to 1.25.4 in the all group (#4515)
  * chore(deps): bump golang.org/x/oauth2 from 0.32.0 to 0.33.0 (#4518)
  * chore(deps): bump cuelang.org/go from 0.14.2 to 0.15.0 (#4524)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.9.0 to 1.10.1 (#4521)
  * chore(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 (#4502)
  * chore(deps): bump the actions group across 1 directory with 2 updates (#4516)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.110.0 to 3.111.0 (#4523)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4522)
  * Deprecate tlog-upload flag (#4458)
  * fix: Use signal context for `sign` cli package.
  * update offline verification directions (#4526)
  * Fix signing/verifying annotations for new bundle
  * Add support to download and attach for protobuf bundles (#4477)
  * Add --signing-algorithm flag (#3497)
  * Refactor signcommon bundle helpers
  * Add --bundle and fix --upload for new bundle
  * Pass insecure registry flags through to referrers
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.108.0 to 3.109.1 (#4483)
  * Add protobuf bundle support for tree subcommand (#4491)
  * Remove stale embed import (#4492)
  * Support multiple container identities
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4484)
  * chore(deps): bump chainguard-dev/actions in the actions group (#4480)
  * chore(deps): bump github.com/sigstore/rekor-tiles/v2 (#4485)
  * chore(deps): bump golang.org/x/crypto from 0.42.0 to 0.43.0 (#4486)
  * chore(deps): bump cuelang.org/go in the gomod group (#4479)
  * upgrade OSS-Fuzz build tooling (#4487)
  * Fix segfault when no attestations are found (#4472)
  * Use overridden repository for new bundle format (#4473)
  * update go to 1.25.3 (#4471)
  * Remove --out flag from `cosign initialize` (#4462)
  * chore(deps): bump the actions group with 2 updates (#4460)
  * Deprecate offline flag (#4457)
  * Deduplicate code in sign/attest* and verify* commands (#4449)
  * Cache signing config when calling initialize (#4456)
  * Update changelog for v3.0.2 (#4455)
  * chore(deps): bump google.golang.org/api from 0.250.0 to 0.251.0
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go
  * chore(deps): bump the actions group with 3 updates
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.107.2 to 3.108.0
  * choose different signature filename for KMS-signed release signatures (#4448)
  * chore(deps): bump github.com/go-jose/go-jose/v4 (#4451)
  * Update rekor-tiles version path
  * update CL for v3.0.1 release (#4447)
  * update goreleaser config for v3.0.0 release (#4446)
  * Create changelog for v3.0.0 (#4440)
  * Fetch service URLs from the TUF PGI signing config by default (#4428)
  * Create changelog for v2.6.1 (#4439)
  * chore(deps): bump google.golang.org/api from 0.249.0 to 0.250.0 (#4432)
  * chore(deps): bump the gomod group with 2 updates (#4429)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.8.0 to 1.9.0 (#4433)
  * chore(deps): bump the actions group with 3 updates (#4434)
  * chore(deps): bump github.com/go-openapi/swag from 0.24.1 to 0.25.1 (#4435)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4436)
  * chore(deps): bump github.com/go-openapi/runtime from 0.28.0 to 0.29.0 (#4437)
  * Bump module version to v3 for Cosign v3.0 (#4427)
  * Move sigstore-conformance back to tagged release (#4425)
  * Bump sigstore-go to v1.1.3 (#4423)
  * Partially populate the output of cosign verify when working with new bundles (#4416)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4419)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4418)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.105.0 to 3.107.0 (#4420)
  * chore(deps): bump chainguard-dev/actions in the actions group (#4421)
  * bump go builder to use 1.25.1 and cosign (#4417)
  * Bump sigstore-go for more precise user agents (#4413)
  * chore(deps): bump github.com/spf13/viper from 1.20.1 to 1.21.0 (#4408)
  * chore(deps): bump the actions group with 2 updates (#4407)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4410)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.104.0 to 3.105.0 (#4411)
  * Default to using the new protobuf format (#4318)</changelog>
  <changelog author="meissner@suse.com" date="1770811200">- Update to version 3.0.4:
  * CVE-2025-11065: Fixed github.com/go-viper/mapstructure/v2: sensitive
    Information leak in logs (bsc#1250620)
  * CVE-2026-22703: Fixed that cosign verification accepts any valid
    Rekor entry under certain conditions (bsc#1256496)
  * Fix bundle verify path for old bundle/trusted root (#4623)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4616)
  * chore(deps): bump cuelang.org/go in the gomod group (#4615)
  * Optimize cosign tree performance by caching digest resolution (#4612)
  * Don't require a trusted root to verify offline with a key (#4613)
  * Support default services for trusted-root and signing-config creation (#4592)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4602)
  * chore(deps): bump github.com/sigstore/sigstore-go (#4578)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.114.1 to 3.115.2 (#4601)
  * chore(deps): bump google.golang.org/api from 0.257.0 to 0.258.0 (#4611)
  * chore(deps): bump k8s.io/client-go from 0.34.3 to 0.35.0 (#4604)
  * chore(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 (#4588)
  * chore(deps): bump golang.org/x/oauth2 from 0.33.0 to 0.34.0 (#4586)
  * chore(deps): bump the gomod group with 5 updates (#4599)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.10.1 to 1.12.1 (#4600)
  * chore(deps): bump golang.org/x/term from 0.37.0 to 0.38.0 (#4584)
  * chore(deps): bump the actions group with 3 updates (#4587)
  * chore(deps): bump actions/cache from 4.3.0 to 5.0.1 (#4589)
  * chore(deps): bump the gomod group with 9 updates (#4577)</changelog>
  <changelog author="meissner@suse.com" date="1771761600">- Update to version 3.0.5: (jsc#SLE-23879)
  * CVE-2026-24122: Fixed improper validation of certificates that
    outlive expired CA certificates (bsc#1258542)
  * CVE-2026-26958: Fixed filippo.io/edwards25519: failure to initialize
    receiver in MultiScalarMult can produce invalid results and lead to
    undefined behavior (bsc#1258612)
  * CVE-2026-24137: Fixed github.com/sigstore/sigstore/pkg/tuf: legacy
    TUF client allows for arbitrary file writes with target cache path
    traversal (bsc#1257139)
  * CVE-2026-22772: Fixed github.com/sigstore/fulcio: bypass MetaIssuer
    URL validation bypass can trigger SSRF to arbitrary internal services
    (bsc#1256562)
  * CVE-2026-23991: Fixed github.com/theupdateframework/go-tuf/v2: denial
    of service due to invalid TUF metadata JSON returned by TUF repository
    (bsc#1257080)
  * CVE-2026-23992: Fixed github.com/theupdateframework/go-tuf/v2:
    unauthorized modification to TUF metadata files due to a compromised
    or misconfigured TUF repository (bsc#1257085)
  * chore(deps): bump google.golang.org/api from 0.260.0 to 0.264.0 (#4679)
  * chore(deps): bump github.com/sigstore/rekor-tiles/v2 from 2.0.1 to 2.1.0 (#4670)
  * chore(deps): bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 (#4712)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4680)
  * chore(deps): bump the gomod group across 1 directory with 4 updates (#4702)
  * chore(deps): bump the actions group with 3 updates (#4703)
  * update golang builder to use go1.25.7 (#4687)
  * update golangci-lint to v2.8.x (#4688)
  * Fix typo in CLI help (#4701)
  * Support DSSE signing conformance test (#4685)
  * chore(deps): bump the actions group across 1 directory with 8 updates (#4689)
  * Deprecate rekor-entry-type flag (#4691)
  * Deprecate cosign triangulate (#4676)
  * Deprecate cosign copy (#4681)
  * Enforce TSA requirement for Rekor v2, Fuclio signing (#4683)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4668)
  * chore(deps): bump golang from 1.25.5 to 1.25.6 in the all group (#4673)
  * Automatically require signed timestamp with Rekor v2 entries (#4666)
  * Fix syntax issue in conformance test, update nightly (#4664)
  * Add mTLS support for TSA client connections when signing with a signing config (#4620)
  * fix: avoid panic on malformed tlog entry body (#4652)
  * Verify validity of chain rather than just certificate (#4663)
  * Allow --local-image with --new-bundle-format for v2 and v3 signatures (#4626)
  * chore(deps): bump the gomod group across 1 directory with 3 updates (#4662)
  * Bump sigstore/sigstore to resolve GHSA (#4660)
  * Gracefully fail if bundle payload body is not a string (#4648)
  * fix: avoid panic on malformed replace payload (#4653)
  * chore(deps): bump github.com/sigstore/rekor from 1.4.3 to 1.5.0 (#4659)
  * fix: avoid panic on malformed attestation payload (#4651)
  * fix: avoid panic on malformed tlog entries (#4649)
  * Update conformance to latest
  * docs(cosign): clarify RFC3161 revocation semantics (#4642)
  * Add empty predicate to cosign sign when payload type is application/vnd.in-toto+json (#4635)
  * chore(deps): bump github.com/sigstore/fulcio from 1.8.4 to 1.8.5 (#4637)
  * Add origin key for ctfe trusted root
  * Add changelog updates for v3.0.4 and v2.6.2 (#4625)</changelog>
</package>
<package pkgid="c66e5384454f532732585c0eb870836ce6e763060e643095b071b0c7636659e7" name="cosign" arch="src">
  <version epoch="0" ver="3.0.5" rel="150400.3.39.1"/>
  <changelog author="meissner@suse.com" date="1683460800">- update to 2.0.2 (jsc#SLE-23879)
  Enhancements
  - Update sigstore/sigstore to v1.6.2 to pick up TUF CDN change (#2891)
  - feat: Make cosign copy faster (#2901)
  - remove sget (#2885)
  - Require a payload to be provided with a signature (#2785)
  Bug Fixes
  - cmd: Change error message from KeyParseError to PubKeyParseError for verify-blob. (#2876)
  - Use SOURCE_DATE_EPOCH for OCI CreatedAt times (#2878)
  Documentation
  - Remove experimental warning from Fulcio flags (#2923)
  - add missing oidc provider (#2922)
  - Add zot as a supported registry (#2920)
  - deprecates kms_support docs (#2900)
  - chore(docs) deprecate note for usage docs (#2906)
  - adds note of deprecation for examples.md docs (#2899)</changelog>
  <changelog author="meissner@suse.com" date="1687867200">- updated to 2.1.1 (jsc#SLE-23879)
  - Bug Fixes
  - wait for the workers become available again to continue the execution (#3084)
  - fix help text when in a container (#3082)
- updated to 2.1.0 (jsc#SLE-23879)
  - Breaking Change: The predicate is now a required flag in the attest commands, set via the --type flag.
  - Enhancements
  - Verify sigs and attestations in parallel (#3066)
  - Deep inspect attestations when filtering download (#3031)
  - refactor bundle validation code, add support for DSSE rekor type (#3016)
  - Allow overriding remote options (#3049)
  - feat: adds no cert found on sig exit code (#3038)
  - Make predicate a required flag in attest commands (#3033)
  - Added support for attaching Time stamp authority Response in attach command (#3001)
  - Add sign --sign-container-identity CLI (#2984)
  - Feature: Allow cosign to sign digests before they are uploaded. (#2959)
  - accepts attachment-tag-prefix for cosign copy (#3014)
  - Feature: adds '--allow-insecure-registry' for cosign load (#3000)
  - download attestation: support --platform flag (#2980)
  - Cleanup: Add Digest to the SignedEntity interface. (#2960)
  - verify command: support keyless verification using only a provided certificate chain with non-fulcio roots (#2845)
  - verify: use workers to limit the paralellism when verifying images with --max-workers flag (#3069)
  - Bug Fixes
  - Fix pkg/cosign/errors (#3050)
  - Fix: update doc to refer to github-actions oidc provider (#3040)
  - Fix: prefer GitHub OIDC provider if enabled (#3044)
  - Fix --sig-only in cosign copy (#3074)
  - Documentation
  - Fix links to sigstore/docs in markdown files (#3064)</changelog>
  <changelog author="meissner@suse.com" date="1693569600">- updated to 2.2.0 (jsc#SLE-23879)
  - Enhancements
  * switch to uploading DSSE types to rekor instead of intoto (#3113)
  * add 'cosign sign' command-line parameters for mTLS (#3052)
  * improve error messages around bundle != payload hash (#3146)
  * make VerifyImageAttestation function public (#3156)
  * Switch to cryptoutils function for SANS (#3185)
  * Handle HTTP_1_1_REQUIRED errors in github provider (#3172)
  - Bug Fixes
  * Fix nondeterminsitic timestamps (#3121)
  - Documentation
  * doc: Add example of sign-blob with key in env var (#3152)
  * add deprecation notice for cosign-releases GCS bucket (#3148)
  * update doc links (#3186)</changelog>
  <changelog author="meissner@suse.com" date="1699358400">- updated to 2.2.1 (jsc#SLE-23879)
  This release comes with a fix for
  CVE-2023-46737 / bsc#1216933 described in this [Github Security
  Advisory](https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9).
  Enhancements:
  * feat: Support basic auth and bearer auth login to registry (#3310)
  * add support for ignoring certificates with pkcs11 (#3334)
  * Support ReplaceOp in Signatures (#3315)
  * feat: added ability to get image digest back via triangulate (#3255)
  * feat: add `--only` flag in `cosign copy` to copy sign, att &amp; sbom (#3247)
  * feat: add support attaching a Rekor bundle to a container (#3246)
  * feat: add support outputting rekor response on signing (#3248)
  * feat: improve dockerfile verify subcommand (#3264)
  * Add guard flag for experimental OCI 1.1 verify. (#3272)
  * Deprecate SBOM attachments (#3256)
  * feat: dedent line in cosign copy doc (#3244)
  * feat: add platform flag to cosign copy command (#3234)
  * Add SLSA 1.0 attestation support to cosign. Closes #2860 (#3219)
  * attest: pass OCI remote opts to att resolver. (#3225)
  Bug Fixes:
  * Merge pull request from GHSA-vfp6-jrw2-99g9
  * fix: allow cosign download sbom when image is absent (#3245)
  * ci: add a OCI registry test for referrers support (#3253)
  * Fix ReplaceSignatures (#3292)
  * Stop using deprecated in_toto.ProvenanceStatement (#3243)
  * Fixes #3236, disable SCT checking for a cosign verification when usin… (#3237)
  * fix: update error in `SignedEntity` to be more descriptive (#3233)
  * Fail timestamp verification if no root is provided (#3224)
  Documentation:
  * Add some docs about verifying in an air-gapped environment (#3321)
  * Update CONTRIBUTING.md (#3268)
  * docs: improves the Contribution guidelines (#3257)
  * Remove security policy (#3230)
  Others:
  * Set go to min 1.21 and update dependencies  (#3327)
  * Update contact for code of conduct (#3266)
  * Update .ko.yaml (#3240)</changelog>
  <changelog author="marcos.bjoerkelund@suse.com" date="1702382400">- updated to 2.2.2 (jsc#SLE-23879)
  v2.2.2 adds a new container with a shell,
  gcr.io/projectsigstore/cosign:vx.y.z-dev, in addition to the existing
  container gcr.io/projectsigstore/cosign:vx.y.z without a shell.
  For private deployments, we have also added an alias for
  - -insecure-skip-log, --private-infrastructure.
  Bug Fixes:
  * chore(deps): bump github.com/sigstore/sigstore from 1.7.5 to 1.7.6 (#3411) which fixes a bug with using Azure KMS
  * Don't require CT log keys if using a key/sk (#3415)
  * Fix copy without any flag set (#3409)
  * Update cosign generate cmd to not include newline (#3393)
  * Fix idempotency error with signing (#3371)
  Features:
  * Add --yes flag cosign import-key-pair to skip the overwrite confirmation. (#3383)
  * Use the timeout flag value in verify* commands. (#3391)
  * add --private-infrastructure flag (#3369)
  Container Updates:
  * Bump builder image to use go1.21.4 and add new cosign image tags with shell (#3373)
  Documentation:
  * Update SBOM_SPEC.md (#3358)</changelog>
  <changelog author="meissner@suse.com" date="1706875200">- updated to 2.2.3 (jsc#SLE-23879)
  Bug Fixes:
  * Fix race condition on verification with multiple signatures attached to image (#3486)
  * fix(clean): Fix clean cmd for private registries (#3446)
  * Fixed BYO PKI verification (#3427)
  Features:
  * Allow for option in cosign attest and attest-blob to upload attestation as supported in Rekor (#3466)
  * Add support for OpenVEX predicate type (#3405)
  Documentation:
  * Resolves #3088: `version` sub-command expected behaviour documentation and testing (#3447)
  * add examples for cosign attach signature cmd (#3468)
  Misc:
  * Remove CertSubject function (#3467)
  * Use local rekor and fulcio instances in e2e tests (#3478)
- bumped embedded golang.org/x/crypto/ssh to fix the Terrapin attack CVE-2023-48795 (bsc#1218207)</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- updated to 2.2.4 (jsc#SLE-23879)
  * Bug Fixes
  * Fixes for GHSA-88jx-383q-w4qc and GHSA-95pr-fxf5-86gv (#3661)
  - CVE-2024-29902: Malicious attachments can cause system-wide denial of service (bsc#1222835)
  - CVE-2024-29903: Malicious artifects can cause machine-wide denial of service (bsc#1222837)
  * ErrNoSignaturesFound should be used when there is no signature attached to an image. (#3526)
  * fix semgrep issues for dgryski.semgrep-go ruleset (#3541)
  * Honor creation timestamp for signatures again (#3549)
  * Features
  * Adds Support for Fulcio Client Credentials Flow, and Argument to Set Flow Explicitly (#3578)
  * Documentation
  * add oci bundle spec (#3622)
  * Correct help text of triangulate cmd (#3551)
  * Correct help text of verify-attestation policy argument (#3527)
  * feat: add OVHcloud MPR registry tested with cosign (#3639)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1717156800">- add completion subpackages (bash, fish, zsh)</changelog>
  <changelog author="meissner@suse.com" date="1721822400">- update to 2.3.0 (jsc#SLE-23879)
  * Features
  - Add PayloadProvider interface to decouple AttestationToPayloadJSON from oci.Signature interface (#3693)
  - add registry options to cosign save (#3645)
  - Add debug providers command. (#3728)
  - Make config layers in ociremote mountable (#3741)
  - adds tsa cert chain check for env var or tuf targets. (#3600)
  - add --ca-roots and --ca-intermediates flags to 'cosign verify' (#3464)
  - add handling of keyless verification for all verify commands (#3761)
  * Bug Fixes
  - fix: close attestationFile (#3679)
  - Set bundleVerified to true after Rekor verification (Resolves #3740) (#3745)
  * Documentation
  - Document ImportKeyPair and LoadPrivateKey functions in pkg/cosign (#3776)</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1724155200">- Set CGO_ENABLED=1 for fixing s390x failed build</changelog>
  <changelog author="meissner@suse.com" date="1727870400">- update to 2.4.0 (jsc#SLE-23879)
  - Add new bundle support to verify-blob and verify-blob-attestation (#3796)
  - Adding protobuf bundle support to sign-blob and attest-blob (#3752)
  - Bump sigstore/sigstore to support email_verified as string or boolean (#3819)
  - Conformance testing for cosign (#3806)
  - move incremental builds per commit to GHCR instead of GCR (#3808)
  - Add support for recording creation timestamp for cosign attest (#3797)
  - Include SCT verification failure details in error message (#3799)</changelog>
  <changelog author="meissner@suse.com" date="1738756800">- Update to version 2.4.2:
  - Updated open-policy-agent to 1.1.0 library (#4036)
  - Note that only Rego v0 policies are supported at this time
  - Add UseSignedTimestamps to CheckOpts, refactor TSA options (#4006)
  - Add support for verifying root checksum in cosign initialize (#3953)
  - Detect if user supplied a valid protobuf bundle (#3931)
  - Add a log message if user doesn't provide --trusted-root (#3933)
  - Support mTLS towards container registry (#3922)
  - Add bundle create helper command (#3901)
  - Add trusted-root create helper command (#3876)
  Bug Fixes:
  - fix: set tls config while retaining other fields from default http transport (#4007)
  - policy fuzzer: ignore known panics (#3993)
  - Fix for multiple WithRemote options (#3982)
  - Add nightly conformance test workflow (#3979)
  - Fix copy --only for signatures + update/align docs (#3904)
- use "osc service mr" to update</changelog>
  <changelog author="meissner@suse.com" date="1740052800">- Update to version 2.4.3:
  * Enable fetching signatures without remote get. (#4047)
  * Bump sigstore/sigstore to support KMS plugins (#4073)
  * sort properly Go imports (#4071)
  * sync comment with parameter name in function signature (#4063)
  * fix go imports order to be alphabetical (#4062)
  * fix comment typo and imports order (#4061)
  * Feat/file flag completion improvements (#4028)
  * Udpate builder to use go1.23.6 (#4052)
  * Refactor verifyNewBundle into library function (#4013)
  * fix parsing error in --only for cosign copy (#4049)
  * Fix codeowners syntax, add dep-maintainers (#4046)</changelog>
  <changelog author="meissner@suse.com" date="1744545600">- Update to version 2.5.0:
  * Update sigstore-go to pick up bug fixes (#4150)
  * Update golangci-lint to v2, update golangci-lint-action (#4143)
  * Feat/non filename completions (#4115)
  * update builder to use go1.24.1 (#4116)
  * Add support for new bundle specification for attesting/verifying OCI image attestations (#3889)
  * Remove cert log line (#4113)
  * cmd/cosign/cli: fix typo in ignoreTLogMessage (#4111)
  * bump to latest scaffolding release for testing (#4099)
  * increase 2e2_test docker compose tiemout to 180s (#4091)
  * Fix replace with compliant image mediatype (#4077)
  * Add TSA certificate related flags and fields for cosign attest (#4079)
- Security issues fixed:
  - CVE-2024-6104: cosign: hashicorp/go-retryablehttp: url might write sensitive information to log file (bsc#1227031)
  - CVE-2024-51744: cosign: github.com/golang-jwt/jwt/v4: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt (bsc#1232985)
  - CVE-2025-27144: cosign: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: Go JOSE's Parsing Vulnerable to Denial of Service (bsc#1237682)
  - CVE-2025-22870: cosign: golang.org/x/net/proxy: proxy bypass using IPv6 zone IDs (bsc#1238693)
  - CVE-2025-22868: cosign: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239204)
  - CVE-2025-22869: cosign: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239337)</changelog>
  <changelog author="meissner@suse.com" date="1748433600">- switch to go1.24, enable fips build</changelog>
  <changelog author="meissner@suse.com" date="1752840000">- Update to version 2.5.3 (jsc#SLE-23879)
  - Add signing-config create command (#4280)
  - Allow multiple services to be specified for trusted-root create (#4285)
  - force when copying the latest image to overwrite (#4298)
  - Fix cert verification logic for trusted-root/SCTs (#4294)
  - Fix lint error for types package (#4295)
  - feat: Add OCI 1.1+ experimental support to tree (#4205)
  - Add validity period end for trusted-root create (#4271)
  - avoid double-loading trustedroot from file (#4264)
- Update to 2.5.2:
  - Do not load trusted root when CT env key is set
  - docs: improve doc for --no-upload option (#4206)
- Update to 2.5.1:
  * Features
  - Add Rekor v2 support for trusted-root create (#4242)
  - Add baseUrl and Uri to trusted-root create command
  - Upgrade to TUF v2 client with trusted root
  - Don't verify SCT for a private PKI cert (#4225)
  - Bump TSA library to relax EKU chain validation rules (#4219)
  * Bug Fixes
  - Bump sigstore-go to pick up log index=0 fix (#4162)
  - remove unused recursive flag on attest command (#4187)
  * Docs
  - Fix indentation in verify-blob cmd examples (#4160)
  * GO-2025-3660/ CVE-2025-46569: Fixed OPA server Data API HTTP path injection of Rego (bsc#1246725)</changelog>
  <changelog author="meissner@suse.com" date="1758196800">- Update to version 2.6.0:
  - Require exclusively a SigningConfig or service URLs when signing (#4403)
  - Add a terminal spinner while signing with sigstore-go (#4402)
  - Bump sigstore-go, support alternative hash algorithms with keys (#4386)
  - Add support for SigningConfig in sign/attest (#4371)
  - Support self-managed keys when signing with sigstore-go (#4368)
  - Remove SHA256 assumption in sign-blob/verify-blob (#4050)
  - introduce dockerfile to pin the go version to decouple go version from go.mod (#4369)
  - refactor: extract function to write referrer attestations (#4357)
  - Break import cycle with e2e build tag (#4370)
  - Update conformance test binary for signing config (#4367)
  - update builder image to use go1.25 (#4366)
  - Don't load content from TUF if trusted root path is specified (#4347)
  - Don't require timestamps when verifying with a key (#4337)
  - Fixes to cosign sign / verify for the new bundle format (#4346)
  - update builder to use go1.24.6 (#4334)
  - bump golangci-lint to v2.3.x (#4333)
  - Have cosign sign support bundle format (#4316)
  - Add support for SigningConfig for sign-blob/attest-blob, support Rekor v2 (#4319)
  - Verify subject with bundle only when checking claims (#4320)
  - Add to `attest-blob` the ability to supply a complete in-toto statement, and add to `verify-blob-attestation` the ability to verify with just a digest (#4306)</changelog>
  <changelog author="meissner@suse.com" date="1765368000">- Update to version 3.0.3:
  * 4554: Closes 4554 - Add warning when --output* is used (#4556)
  * chore(deps): bump golangci/golangci-lint-action from 8.0.0 to 9.1.0 (#4545)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.111.0 to 3.113.0 (#4542)
  * chore(deps): bump github.com/awslabs/amazon-ecr-credential-helper/ecr-login (#4543)
  * chore(deps): bump actions/checkout from 5.0.0 to 6.0.0 (#4546)
  * chore(deps): bump the actions group with 4 updates (#4544)
  * chore(deps): bump the gomod group across 1 directory with 5 updates (#4567)
  * chore(deps): bump golang from 1.25.4 to 1.25.5 in the all group (#4568)
  * update builder to use go1.25.5 (#4566)
  * Protobuf bundle support for subcommand `clean` (#4539)
  * Add staging flag to initialize with staging TUF metadata
  * update slack invite link (#4560)
  * Updating sign-blob to also support signing with a certificate (#4547)
  * Bump sigstore library dependencies (#4532)
  * Protobuf bundle support for subcommands `save` and `load` (#4538)
  * Fix cert attachment for new bundle with signing config
  * Fix OCI verification with local cert - old bundle
  * chore(deps): bump github.com/sigstore/fulcio from 1.7.1 to 1.8.1 (#4519)
  * chore(deps): bump golang.org/x/crypto in /test/fakeoidc (#4535)
  * chore(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0 (#4536)
  * CVE-2025-58181: Fixed golang.org/x/crypto/ssh: invalidated number
    of mechanisms can cause unbounded memory consumption (bsc#1253913)
  * update go builder and cosign (#4529)
  * chore(deps): bump the gomod group across 1 directory with 7 updates (#4528)
  * chore(deps): bump sigstore/cosign-installer from 3.10.0 to 4.0.0 (#4478)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4520)
  * chore(deps): bump golang from 1.25.3 to 1.25.4 in the all group (#4515)
  * chore(deps): bump golang.org/x/oauth2 from 0.32.0 to 0.33.0 (#4518)
  * chore(deps): bump cuelang.org/go from 0.14.2 to 0.15.0 (#4524)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.9.0 to 1.10.1 (#4521)
  * chore(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 (#4502)
  * chore(deps): bump the actions group across 1 directory with 2 updates (#4516)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.110.0 to 3.111.0 (#4523)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4522)
  * Deprecate tlog-upload flag (#4458)
  * fix: Use signal context for `sign` cli package.
  * update offline verification directions (#4526)
  * Fix signing/verifying annotations for new bundle
  * Add support to download and attach for protobuf bundles (#4477)
  * Add --signing-algorithm flag (#3497)
  * Refactor signcommon bundle helpers
  * Add --bundle and fix --upload for new bundle
  * Pass insecure registry flags through to referrers
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.108.0 to 3.109.1 (#4483)
  * Add protobuf bundle support for tree subcommand (#4491)
  * Remove stale embed import (#4492)
  * Support multiple container identities
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4484)
  * chore(deps): bump chainguard-dev/actions in the actions group (#4480)
  * chore(deps): bump github.com/sigstore/rekor-tiles/v2 (#4485)
  * chore(deps): bump golang.org/x/crypto from 0.42.0 to 0.43.0 (#4486)
  * chore(deps): bump cuelang.org/go in the gomod group (#4479)
  * upgrade OSS-Fuzz build tooling (#4487)
  * Fix segfault when no attestations are found (#4472)
  * Use overridden repository for new bundle format (#4473)
  * update go to 1.25.3 (#4471)
  * Remove --out flag from `cosign initialize` (#4462)
  * chore(deps): bump the actions group with 2 updates (#4460)
  * Deprecate offline flag (#4457)
  * Deduplicate code in sign/attest* and verify* commands (#4449)
  * Cache signing config when calling initialize (#4456)
  * Update changelog for v3.0.2 (#4455)
  * chore(deps): bump google.golang.org/api from 0.250.0 to 0.251.0
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go
  * chore(deps): bump the actions group with 3 updates
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.107.2 to 3.108.0
  * choose different signature filename for KMS-signed release signatures (#4448)
  * chore(deps): bump github.com/go-jose/go-jose/v4 (#4451)
  * Update rekor-tiles version path
  * update CL for v3.0.1 release (#4447)
  * update goreleaser config for v3.0.0 release (#4446)
  * Create changelog for v3.0.0 (#4440)
  * Fetch service URLs from the TUF PGI signing config by default (#4428)
  * Create changelog for v2.6.1 (#4439)
  * chore(deps): bump google.golang.org/api from 0.249.0 to 0.250.0 (#4432)
  * chore(deps): bump the gomod group with 2 updates (#4429)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.8.0 to 1.9.0 (#4433)
  * chore(deps): bump the actions group with 3 updates (#4434)
  * chore(deps): bump github.com/go-openapi/swag from 0.24.1 to 0.25.1 (#4435)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4436)
  * chore(deps): bump github.com/go-openapi/runtime from 0.28.0 to 0.29.0 (#4437)
  * Bump module version to v3 for Cosign v3.0 (#4427)
  * Move sigstore-conformance back to tagged release (#4425)
  * Bump sigstore-go to v1.1.3 (#4423)
  * Partially populate the output of cosign verify when working with new bundles (#4416)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4419)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4418)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.105.0 to 3.107.0 (#4420)
  * chore(deps): bump chainguard-dev/actions in the actions group (#4421)
  * bump go builder to use 1.25.1 and cosign (#4417)
  * Bump sigstore-go for more precise user agents (#4413)
  * chore(deps): bump github.com/spf13/viper from 1.20.1 to 1.21.0 (#4408)
  * chore(deps): bump the actions group with 2 updates (#4407)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4410)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.104.0 to 3.105.0 (#4411)
  * Default to using the new protobuf format (#4318)</changelog>
  <changelog author="meissner@suse.com" date="1770811200">- Update to version 3.0.4:
  * CVE-2025-11065: Fixed github.com/go-viper/mapstructure/v2: sensitive
    Information leak in logs (bsc#1250620)
  * CVE-2026-22703: Fixed that cosign verification accepts any valid
    Rekor entry under certain conditions (bsc#1256496)
  * Fix bundle verify path for old bundle/trusted root (#4623)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4616)
  * chore(deps): bump cuelang.org/go in the gomod group (#4615)
  * Optimize cosign tree performance by caching digest resolution (#4612)
  * Don't require a trusted root to verify offline with a key (#4613)
  * Support default services for trusted-root and signing-config creation (#4592)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4602)
  * chore(deps): bump github.com/sigstore/sigstore-go (#4578)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.114.1 to 3.115.2 (#4601)
  * chore(deps): bump google.golang.org/api from 0.257.0 to 0.258.0 (#4611)
  * chore(deps): bump k8s.io/client-go from 0.34.3 to 0.35.0 (#4604)
  * chore(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 (#4588)
  * chore(deps): bump golang.org/x/oauth2 from 0.33.0 to 0.34.0 (#4586)
  * chore(deps): bump the gomod group with 5 updates (#4599)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.10.1 to 1.12.1 (#4600)
  * chore(deps): bump golang.org/x/term from 0.37.0 to 0.38.0 (#4584)
  * chore(deps): bump the actions group with 3 updates (#4587)
  * chore(deps): bump actions/cache from 4.3.0 to 5.0.1 (#4589)
  * chore(deps): bump the gomod group with 9 updates (#4577)</changelog>
  <changelog author="meissner@suse.com" date="1771761600">- Update to version 3.0.5: (jsc#SLE-23879)
  * CVE-2026-24122: Fixed improper validation of certificates that
    outlive expired CA certificates (bsc#1258542)
  * CVE-2026-26958: Fixed filippo.io/edwards25519: failure to initialize
    receiver in MultiScalarMult can produce invalid results and lead to
    undefined behavior (bsc#1258612)
  * CVE-2026-24137: Fixed github.com/sigstore/sigstore/pkg/tuf: legacy
    TUF client allows for arbitrary file writes with target cache path
    traversal (bsc#1257139)
  * CVE-2026-22772: Fixed github.com/sigstore/fulcio: bypass MetaIssuer
    URL validation bypass can trigger SSRF to arbitrary internal services
    (bsc#1256562)
  * CVE-2026-23991: Fixed github.com/theupdateframework/go-tuf/v2: denial
    of service due to invalid TUF metadata JSON returned by TUF repository
    (bsc#1257080)
  * CVE-2026-23992: Fixed github.com/theupdateframework/go-tuf/v2:
    unauthorized modification to TUF metadata files due to a compromised
    or misconfigured TUF repository (bsc#1257085)
  * chore(deps): bump google.golang.org/api from 0.260.0 to 0.264.0 (#4679)
  * chore(deps): bump github.com/sigstore/rekor-tiles/v2 from 2.0.1 to 2.1.0 (#4670)
  * chore(deps): bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 (#4712)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4680)
  * chore(deps): bump the gomod group across 1 directory with 4 updates (#4702)
  * chore(deps): bump the actions group with 3 updates (#4703)
  * update golang builder to use go1.25.7 (#4687)
  * update golangci-lint to v2.8.x (#4688)
  * Fix typo in CLI help (#4701)
  * Support DSSE signing conformance test (#4685)
  * chore(deps): bump the actions group across 1 directory with 8 updates (#4689)
  * Deprecate rekor-entry-type flag (#4691)
  * Deprecate cosign triangulate (#4676)
  * Deprecate cosign copy (#4681)
  * Enforce TSA requirement for Rekor v2, Fuclio signing (#4683)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4668)
  * chore(deps): bump golang from 1.25.5 to 1.25.6 in the all group (#4673)
  * Automatically require signed timestamp with Rekor v2 entries (#4666)
  * Fix syntax issue in conformance test, update nightly (#4664)
  * Add mTLS support for TSA client connections when signing with a signing config (#4620)
  * fix: avoid panic on malformed tlog entry body (#4652)
  * Verify validity of chain rather than just certificate (#4663)
  * Allow --local-image with --new-bundle-format for v2 and v3 signatures (#4626)
  * chore(deps): bump the gomod group across 1 directory with 3 updates (#4662)
  * Bump sigstore/sigstore to resolve GHSA (#4660)
  * Gracefully fail if bundle payload body is not a string (#4648)
  * fix: avoid panic on malformed replace payload (#4653)
  * chore(deps): bump github.com/sigstore/rekor from 1.4.3 to 1.5.0 (#4659)
  * fix: avoid panic on malformed attestation payload (#4651)
  * fix: avoid panic on malformed tlog entries (#4649)
  * Update conformance to latest
  * docs(cosign): clarify RFC3161 revocation semantics (#4642)
  * Add empty predicate to cosign sign when payload type is application/vnd.in-toto+json (#4635)
  * chore(deps): bump github.com/sigstore/fulcio from 1.8.4 to 1.8.5 (#4637)
  * Add origin key for ctfe trusted root
  * Add changelog updates for v3.0.4 and v2.6.2 (#4625)</changelog>
</package>
<package pkgid="222da01bf333aa39c7744613b05e2520ad0b377db4d40ebc084de6e7f3f9757c" name="cosign" arch="x86_64">
  <version epoch="0" ver="3.0.5" rel="150400.3.39.1"/>
  <changelog author="meissner@suse.com" date="1683460800">- update to 2.0.2 (jsc#SLE-23879)
  Enhancements
  - Update sigstore/sigstore to v1.6.2 to pick up TUF CDN change (#2891)
  - feat: Make cosign copy faster (#2901)
  - remove sget (#2885)
  - Require a payload to be provided with a signature (#2785)
  Bug Fixes
  - cmd: Change error message from KeyParseError to PubKeyParseError for verify-blob. (#2876)
  - Use SOURCE_DATE_EPOCH for OCI CreatedAt times (#2878)
  Documentation
  - Remove experimental warning from Fulcio flags (#2923)
  - add missing oidc provider (#2922)
  - Add zot as a supported registry (#2920)
  - deprecates kms_support docs (#2900)
  - chore(docs) deprecate note for usage docs (#2906)
  - adds note of deprecation for examples.md docs (#2899)</changelog>
  <changelog author="meissner@suse.com" date="1687867200">- updated to 2.1.1 (jsc#SLE-23879)
  - Bug Fixes
  - wait for the workers become available again to continue the execution (#3084)
  - fix help text when in a container (#3082)
- updated to 2.1.0 (jsc#SLE-23879)
  - Breaking Change: The predicate is now a required flag in the attest commands, set via the --type flag.
  - Enhancements
  - Verify sigs and attestations in parallel (#3066)
  - Deep inspect attestations when filtering download (#3031)
  - refactor bundle validation code, add support for DSSE rekor type (#3016)
  - Allow overriding remote options (#3049)
  - feat: adds no cert found on sig exit code (#3038)
  - Make predicate a required flag in attest commands (#3033)
  - Added support for attaching Time stamp authority Response in attach command (#3001)
  - Add sign --sign-container-identity CLI (#2984)
  - Feature: Allow cosign to sign digests before they are uploaded. (#2959)
  - accepts attachment-tag-prefix for cosign copy (#3014)
  - Feature: adds '--allow-insecure-registry' for cosign load (#3000)
  - download attestation: support --platform flag (#2980)
  - Cleanup: Add Digest to the SignedEntity interface. (#2960)
  - verify command: support keyless verification using only a provided certificate chain with non-fulcio roots (#2845)
  - verify: use workers to limit the paralellism when verifying images with --max-workers flag (#3069)
  - Bug Fixes
  - Fix pkg/cosign/errors (#3050)
  - Fix: update doc to refer to github-actions oidc provider (#3040)
  - Fix: prefer GitHub OIDC provider if enabled (#3044)
  - Fix --sig-only in cosign copy (#3074)
  - Documentation
  - Fix links to sigstore/docs in markdown files (#3064)</changelog>
  <changelog author="meissner@suse.com" date="1693569600">- updated to 2.2.0 (jsc#SLE-23879)
  - Enhancements
  * switch to uploading DSSE types to rekor instead of intoto (#3113)
  * add 'cosign sign' command-line parameters for mTLS (#3052)
  * improve error messages around bundle != payload hash (#3146)
  * make VerifyImageAttestation function public (#3156)
  * Switch to cryptoutils function for SANS (#3185)
  * Handle HTTP_1_1_REQUIRED errors in github provider (#3172)
  - Bug Fixes
  * Fix nondeterminsitic timestamps (#3121)
  - Documentation
  * doc: Add example of sign-blob with key in env var (#3152)
  * add deprecation notice for cosign-releases GCS bucket (#3148)
  * update doc links (#3186)</changelog>
  <changelog author="meissner@suse.com" date="1699358400">- updated to 2.2.1 (jsc#SLE-23879)
  This release comes with a fix for
  CVE-2023-46737 / bsc#1216933 described in this [Github Security
  Advisory](https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9).
  Enhancements:
  * feat: Support basic auth and bearer auth login to registry (#3310)
  * add support for ignoring certificates with pkcs11 (#3334)
  * Support ReplaceOp in Signatures (#3315)
  * feat: added ability to get image digest back via triangulate (#3255)
  * feat: add `--only` flag in `cosign copy` to copy sign, att &amp; sbom (#3247)
  * feat: add support attaching a Rekor bundle to a container (#3246)
  * feat: add support outputting rekor response on signing (#3248)
  * feat: improve dockerfile verify subcommand (#3264)
  * Add guard flag for experimental OCI 1.1 verify. (#3272)
  * Deprecate SBOM attachments (#3256)
  * feat: dedent line in cosign copy doc (#3244)
  * feat: add platform flag to cosign copy command (#3234)
  * Add SLSA 1.0 attestation support to cosign. Closes #2860 (#3219)
  * attest: pass OCI remote opts to att resolver. (#3225)
  Bug Fixes:
  * Merge pull request from GHSA-vfp6-jrw2-99g9
  * fix: allow cosign download sbom when image is absent (#3245)
  * ci: add a OCI registry test for referrers support (#3253)
  * Fix ReplaceSignatures (#3292)
  * Stop using deprecated in_toto.ProvenanceStatement (#3243)
  * Fixes #3236, disable SCT checking for a cosign verification when usin… (#3237)
  * fix: update error in `SignedEntity` to be more descriptive (#3233)
  * Fail timestamp verification if no root is provided (#3224)
  Documentation:
  * Add some docs about verifying in an air-gapped environment (#3321)
  * Update CONTRIBUTING.md (#3268)
  * docs: improves the Contribution guidelines (#3257)
  * Remove security policy (#3230)
  Others:
  * Set go to min 1.21 and update dependencies  (#3327)
  * Update contact for code of conduct (#3266)
  * Update .ko.yaml (#3240)</changelog>
  <changelog author="marcos.bjoerkelund@suse.com" date="1702382400">- updated to 2.2.2 (jsc#SLE-23879)
  v2.2.2 adds a new container with a shell,
  gcr.io/projectsigstore/cosign:vx.y.z-dev, in addition to the existing
  container gcr.io/projectsigstore/cosign:vx.y.z without a shell.
  For private deployments, we have also added an alias for
  - -insecure-skip-log, --private-infrastructure.
  Bug Fixes:
  * chore(deps): bump github.com/sigstore/sigstore from 1.7.5 to 1.7.6 (#3411) which fixes a bug with using Azure KMS
  * Don't require CT log keys if using a key/sk (#3415)
  * Fix copy without any flag set (#3409)
  * Update cosign generate cmd to not include newline (#3393)
  * Fix idempotency error with signing (#3371)
  Features:
  * Add --yes flag cosign import-key-pair to skip the overwrite confirmation. (#3383)
  * Use the timeout flag value in verify* commands. (#3391)
  * add --private-infrastructure flag (#3369)
  Container Updates:
  * Bump builder image to use go1.21.4 and add new cosign image tags with shell (#3373)
  Documentation:
  * Update SBOM_SPEC.md (#3358)</changelog>
  <changelog author="meissner@suse.com" date="1706875200">- updated to 2.2.3 (jsc#SLE-23879)
  Bug Fixes:
  * Fix race condition on verification with multiple signatures attached to image (#3486)
  * fix(clean): Fix clean cmd for private registries (#3446)
  * Fixed BYO PKI verification (#3427)
  Features:
  * Allow for option in cosign attest and attest-blob to upload attestation as supported in Rekor (#3466)
  * Add support for OpenVEX predicate type (#3405)
  Documentation:
  * Resolves #3088: `version` sub-command expected behaviour documentation and testing (#3447)
  * add examples for cosign attach signature cmd (#3468)
  Misc:
  * Remove CertSubject function (#3467)
  * Use local rekor and fulcio instances in e2e tests (#3478)
- bumped embedded golang.org/x/crypto/ssh to fix the Terrapin attack CVE-2023-48795 (bsc#1218207)</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- updated to 2.2.4 (jsc#SLE-23879)
  * Bug Fixes
  * Fixes for GHSA-88jx-383q-w4qc and GHSA-95pr-fxf5-86gv (#3661)
  - CVE-2024-29902: Malicious attachments can cause system-wide denial of service (bsc#1222835)
  - CVE-2024-29903: Malicious artifects can cause machine-wide denial of service (bsc#1222837)
  * ErrNoSignaturesFound should be used when there is no signature attached to an image. (#3526)
  * fix semgrep issues for dgryski.semgrep-go ruleset (#3541)
  * Honor creation timestamp for signatures again (#3549)
  * Features
  * Adds Support for Fulcio Client Credentials Flow, and Argument to Set Flow Explicitly (#3578)
  * Documentation
  * add oci bundle spec (#3622)
  * Correct help text of triangulate cmd (#3551)
  * Correct help text of verify-attestation policy argument (#3527)
  * feat: add OVHcloud MPR registry tested with cosign (#3639)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1717156800">- add completion subpackages (bash, fish, zsh)</changelog>
  <changelog author="meissner@suse.com" date="1721822400">- update to 2.3.0 (jsc#SLE-23879)
  * Features
  - Add PayloadProvider interface to decouple AttestationToPayloadJSON from oci.Signature interface (#3693)
  - add registry options to cosign save (#3645)
  - Add debug providers command. (#3728)
  - Make config layers in ociremote mountable (#3741)
  - adds tsa cert chain check for env var or tuf targets. (#3600)
  - add --ca-roots and --ca-intermediates flags to 'cosign verify' (#3464)
  - add handling of keyless verification for all verify commands (#3761)
  * Bug Fixes
  - fix: close attestationFile (#3679)
  - Set bundleVerified to true after Rekor verification (Resolves #3740) (#3745)
  * Documentation
  - Document ImportKeyPair and LoadPrivateKey functions in pkg/cosign (#3776)</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1724155200">- Set CGO_ENABLED=1 for fixing s390x failed build</changelog>
  <changelog author="meissner@suse.com" date="1727870400">- update to 2.4.0 (jsc#SLE-23879)
  - Add new bundle support to verify-blob and verify-blob-attestation (#3796)
  - Adding protobuf bundle support to sign-blob and attest-blob (#3752)
  - Bump sigstore/sigstore to support email_verified as string or boolean (#3819)
  - Conformance testing for cosign (#3806)
  - move incremental builds per commit to GHCR instead of GCR (#3808)
  - Add support for recording creation timestamp for cosign attest (#3797)
  - Include SCT verification failure details in error message (#3799)</changelog>
  <changelog author="meissner@suse.com" date="1738756800">- Update to version 2.4.2:
  - Updated open-policy-agent to 1.1.0 library (#4036)
  - Note that only Rego v0 policies are supported at this time
  - Add UseSignedTimestamps to CheckOpts, refactor TSA options (#4006)
  - Add support for verifying root checksum in cosign initialize (#3953)
  - Detect if user supplied a valid protobuf bundle (#3931)
  - Add a log message if user doesn't provide --trusted-root (#3933)
  - Support mTLS towards container registry (#3922)
  - Add bundle create helper command (#3901)
  - Add trusted-root create helper command (#3876)
  Bug Fixes:
  - fix: set tls config while retaining other fields from default http transport (#4007)
  - policy fuzzer: ignore known panics (#3993)
  - Fix for multiple WithRemote options (#3982)
  - Add nightly conformance test workflow (#3979)
  - Fix copy --only for signatures + update/align docs (#3904)
- use "osc service mr" to update</changelog>
  <changelog author="meissner@suse.com" date="1740052800">- Update to version 2.4.3:
  * Enable fetching signatures without remote get. (#4047)
  * Bump sigstore/sigstore to support KMS plugins (#4073)
  * sort properly Go imports (#4071)
  * sync comment with parameter name in function signature (#4063)
  * fix go imports order to be alphabetical (#4062)
  * fix comment typo and imports order (#4061)
  * Feat/file flag completion improvements (#4028)
  * Udpate builder to use go1.23.6 (#4052)
  * Refactor verifyNewBundle into library function (#4013)
  * fix parsing error in --only for cosign copy (#4049)
  * Fix codeowners syntax, add dep-maintainers (#4046)</changelog>
  <changelog author="meissner@suse.com" date="1744545600">- Update to version 2.5.0:
  * Update sigstore-go to pick up bug fixes (#4150)
  * Update golangci-lint to v2, update golangci-lint-action (#4143)
  * Feat/non filename completions (#4115)
  * update builder to use go1.24.1 (#4116)
  * Add support for new bundle specification for attesting/verifying OCI image attestations (#3889)
  * Remove cert log line (#4113)
  * cmd/cosign/cli: fix typo in ignoreTLogMessage (#4111)
  * bump to latest scaffolding release for testing (#4099)
  * increase 2e2_test docker compose tiemout to 180s (#4091)
  * Fix replace with compliant image mediatype (#4077)
  * Add TSA certificate related flags and fields for cosign attest (#4079)
- Security issues fixed:
  - CVE-2024-6104: cosign: hashicorp/go-retryablehttp: url might write sensitive information to log file (bsc#1227031)
  - CVE-2024-51744: cosign: github.com/golang-jwt/jwt/v4: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt (bsc#1232985)
  - CVE-2025-27144: cosign: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: Go JOSE's Parsing Vulnerable to Denial of Service (bsc#1237682)
  - CVE-2025-22870: cosign: golang.org/x/net/proxy: proxy bypass using IPv6 zone IDs (bsc#1238693)
  - CVE-2025-22868: cosign: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239204)
  - CVE-2025-22869: cosign: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239337)</changelog>
  <changelog author="meissner@suse.com" date="1748433600">- switch to go1.24, enable fips build</changelog>
  <changelog author="meissner@suse.com" date="1752840000">- Update to version 2.5.3 (jsc#SLE-23879)
  - Add signing-config create command (#4280)
  - Allow multiple services to be specified for trusted-root create (#4285)
  - force when copying the latest image to overwrite (#4298)
  - Fix cert verification logic for trusted-root/SCTs (#4294)
  - Fix lint error for types package (#4295)
  - feat: Add OCI 1.1+ experimental support to tree (#4205)
  - Add validity period end for trusted-root create (#4271)
  - avoid double-loading trustedroot from file (#4264)
- Update to 2.5.2:
  - Do not load trusted root when CT env key is set
  - docs: improve doc for --no-upload option (#4206)
- Update to 2.5.1:
  * Features
  - Add Rekor v2 support for trusted-root create (#4242)
  - Add baseUrl and Uri to trusted-root create command
  - Upgrade to TUF v2 client with trusted root
  - Don't verify SCT for a private PKI cert (#4225)
  - Bump TSA library to relax EKU chain validation rules (#4219)
  * Bug Fixes
  - Bump sigstore-go to pick up log index=0 fix (#4162)
  - remove unused recursive flag on attest command (#4187)
  * Docs
  - Fix indentation in verify-blob cmd examples (#4160)
  * GO-2025-3660/ CVE-2025-46569: Fixed OPA server Data API HTTP path injection of Rego (bsc#1246725)</changelog>
  <changelog author="meissner@suse.com" date="1758196800">- Update to version 2.6.0:
  - Require exclusively a SigningConfig or service URLs when signing (#4403)
  - Add a terminal spinner while signing with sigstore-go (#4402)
  - Bump sigstore-go, support alternative hash algorithms with keys (#4386)
  - Add support for SigningConfig in sign/attest (#4371)
  - Support self-managed keys when signing with sigstore-go (#4368)
  - Remove SHA256 assumption in sign-blob/verify-blob (#4050)
  - introduce dockerfile to pin the go version to decouple go version from go.mod (#4369)
  - refactor: extract function to write referrer attestations (#4357)
  - Break import cycle with e2e build tag (#4370)
  - Update conformance test binary for signing config (#4367)
  - update builder image to use go1.25 (#4366)
  - Don't load content from TUF if trusted root path is specified (#4347)
  - Don't require timestamps when verifying with a key (#4337)
  - Fixes to cosign sign / verify for the new bundle format (#4346)
  - update builder to use go1.24.6 (#4334)
  - bump golangci-lint to v2.3.x (#4333)
  - Have cosign sign support bundle format (#4316)
  - Add support for SigningConfig for sign-blob/attest-blob, support Rekor v2 (#4319)
  - Verify subject with bundle only when checking claims (#4320)
  - Add to `attest-blob` the ability to supply a complete in-toto statement, and add to `verify-blob-attestation` the ability to verify with just a digest (#4306)</changelog>
  <changelog author="meissner@suse.com" date="1765368000">- Update to version 3.0.3:
  * 4554: Closes 4554 - Add warning when --output* is used (#4556)
  * chore(deps): bump golangci/golangci-lint-action from 8.0.0 to 9.1.0 (#4545)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.111.0 to 3.113.0 (#4542)
  * chore(deps): bump github.com/awslabs/amazon-ecr-credential-helper/ecr-login (#4543)
  * chore(deps): bump actions/checkout from 5.0.0 to 6.0.0 (#4546)
  * chore(deps): bump the actions group with 4 updates (#4544)
  * chore(deps): bump the gomod group across 1 directory with 5 updates (#4567)
  * chore(deps): bump golang from 1.25.4 to 1.25.5 in the all group (#4568)
  * update builder to use go1.25.5 (#4566)
  * Protobuf bundle support for subcommand `clean` (#4539)
  * Add staging flag to initialize with staging TUF metadata
  * update slack invite link (#4560)
  * Updating sign-blob to also support signing with a certificate (#4547)
  * Bump sigstore library dependencies (#4532)
  * Protobuf bundle support for subcommands `save` and `load` (#4538)
  * Fix cert attachment for new bundle with signing config
  * Fix OCI verification with local cert - old bundle
  * chore(deps): bump github.com/sigstore/fulcio from 1.7.1 to 1.8.1 (#4519)
  * chore(deps): bump golang.org/x/crypto in /test/fakeoidc (#4535)
  * chore(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0 (#4536)
  * CVE-2025-58181: Fixed golang.org/x/crypto/ssh: invalidated number
    of mechanisms can cause unbounded memory consumption (bsc#1253913)
  * update go builder and cosign (#4529)
  * chore(deps): bump the gomod group across 1 directory with 7 updates (#4528)
  * chore(deps): bump sigstore/cosign-installer from 3.10.0 to 4.0.0 (#4478)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4520)
  * chore(deps): bump golang from 1.25.3 to 1.25.4 in the all group (#4515)
  * chore(deps): bump golang.org/x/oauth2 from 0.32.0 to 0.33.0 (#4518)
  * chore(deps): bump cuelang.org/go from 0.14.2 to 0.15.0 (#4524)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.9.0 to 1.10.1 (#4521)
  * chore(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 (#4502)
  * chore(deps): bump the actions group across 1 directory with 2 updates (#4516)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.110.0 to 3.111.0 (#4523)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4522)
  * Deprecate tlog-upload flag (#4458)
  * fix: Use signal context for `sign` cli package.
  * update offline verification directions (#4526)
  * Fix signing/verifying annotations for new bundle
  * Add support to download and attach for protobuf bundles (#4477)
  * Add --signing-algorithm flag (#3497)
  * Refactor signcommon bundle helpers
  * Add --bundle and fix --upload for new bundle
  * Pass insecure registry flags through to referrers
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.108.0 to 3.109.1 (#4483)
  * Add protobuf bundle support for tree subcommand (#4491)
  * Remove stale embed import (#4492)
  * Support multiple container identities
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4484)
  * chore(deps): bump chainguard-dev/actions in the actions group (#4480)
  * chore(deps): bump github.com/sigstore/rekor-tiles/v2 (#4485)
  * chore(deps): bump golang.org/x/crypto from 0.42.0 to 0.43.0 (#4486)
  * chore(deps): bump cuelang.org/go in the gomod group (#4479)
  * upgrade OSS-Fuzz build tooling (#4487)
  * Fix segfault when no attestations are found (#4472)
  * Use overridden repository for new bundle format (#4473)
  * update go to 1.25.3 (#4471)
  * Remove --out flag from `cosign initialize` (#4462)
  * chore(deps): bump the actions group with 2 updates (#4460)
  * Deprecate offline flag (#4457)
  * Deduplicate code in sign/attest* and verify* commands (#4449)
  * Cache signing config when calling initialize (#4456)
  * Update changelog for v3.0.2 (#4455)
  * chore(deps): bump google.golang.org/api from 0.250.0 to 0.251.0
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go
  * chore(deps): bump the actions group with 3 updates
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.107.2 to 3.108.0
  * choose different signature filename for KMS-signed release signatures (#4448)
  * chore(deps): bump github.com/go-jose/go-jose/v4 (#4451)
  * Update rekor-tiles version path
  * update CL for v3.0.1 release (#4447)
  * update goreleaser config for v3.0.0 release (#4446)
  * Create changelog for v3.0.0 (#4440)
  * Fetch service URLs from the TUF PGI signing config by default (#4428)
  * Create changelog for v2.6.1 (#4439)
  * chore(deps): bump google.golang.org/api from 0.249.0 to 0.250.0 (#4432)
  * chore(deps): bump the gomod group with 2 updates (#4429)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.8.0 to 1.9.0 (#4433)
  * chore(deps): bump the actions group with 3 updates (#4434)
  * chore(deps): bump github.com/go-openapi/swag from 0.24.1 to 0.25.1 (#4435)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4436)
  * chore(deps): bump github.com/go-openapi/runtime from 0.28.0 to 0.29.0 (#4437)
  * Bump module version to v3 for Cosign v3.0 (#4427)
  * Move sigstore-conformance back to tagged release (#4425)
  * Bump sigstore-go to v1.1.3 (#4423)
  * Partially populate the output of cosign verify when working with new bundles (#4416)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4419)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4418)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.105.0 to 3.107.0 (#4420)
  * chore(deps): bump chainguard-dev/actions in the actions group (#4421)
  * bump go builder to use 1.25.1 and cosign (#4417)
  * Bump sigstore-go for more precise user agents (#4413)
  * chore(deps): bump github.com/spf13/viper from 1.20.1 to 1.21.0 (#4408)
  * chore(deps): bump the actions group with 2 updates (#4407)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4410)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.104.0 to 3.105.0 (#4411)
  * Default to using the new protobuf format (#4318)</changelog>
  <changelog author="meissner@suse.com" date="1770811200">- Update to version 3.0.4:
  * CVE-2025-11065: Fixed github.com/go-viper/mapstructure/v2: sensitive
    Information leak in logs (bsc#1250620)
  * CVE-2026-22703: Fixed that cosign verification accepts any valid
    Rekor entry under certain conditions (bsc#1256496)
  * Fix bundle verify path for old bundle/trusted root (#4623)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4616)
  * chore(deps): bump cuelang.org/go in the gomod group (#4615)
  * Optimize cosign tree performance by caching digest resolution (#4612)
  * Don't require a trusted root to verify offline with a key (#4613)
  * Support default services for trusted-root and signing-config creation (#4592)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4602)
  * chore(deps): bump github.com/sigstore/sigstore-go (#4578)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.114.1 to 3.115.2 (#4601)
  * chore(deps): bump google.golang.org/api from 0.257.0 to 0.258.0 (#4611)
  * chore(deps): bump k8s.io/client-go from 0.34.3 to 0.35.0 (#4604)
  * chore(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 (#4588)
  * chore(deps): bump golang.org/x/oauth2 from 0.33.0 to 0.34.0 (#4586)
  * chore(deps): bump the gomod group with 5 updates (#4599)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.10.1 to 1.12.1 (#4600)
  * chore(deps): bump golang.org/x/term from 0.37.0 to 0.38.0 (#4584)
  * chore(deps): bump the actions group with 3 updates (#4587)
  * chore(deps): bump actions/cache from 4.3.0 to 5.0.1 (#4589)
  * chore(deps): bump the gomod group with 9 updates (#4577)</changelog>
  <changelog author="meissner@suse.com" date="1771761600">- Update to version 3.0.5: (jsc#SLE-23879)
  * CVE-2026-24122: Fixed improper validation of certificates that
    outlive expired CA certificates (bsc#1258542)
  * CVE-2026-26958: Fixed filippo.io/edwards25519: failure to initialize
    receiver in MultiScalarMult can produce invalid results and lead to
    undefined behavior (bsc#1258612)
  * CVE-2026-24137: Fixed github.com/sigstore/sigstore/pkg/tuf: legacy
    TUF client allows for arbitrary file writes with target cache path
    traversal (bsc#1257139)
  * CVE-2026-22772: Fixed github.com/sigstore/fulcio: bypass MetaIssuer
    URL validation bypass can trigger SSRF to arbitrary internal services
    (bsc#1256562)
  * CVE-2026-23991: Fixed github.com/theupdateframework/go-tuf/v2: denial
    of service due to invalid TUF metadata JSON returned by TUF repository
    (bsc#1257080)
  * CVE-2026-23992: Fixed github.com/theupdateframework/go-tuf/v2:
    unauthorized modification to TUF metadata files due to a compromised
    or misconfigured TUF repository (bsc#1257085)
  * chore(deps): bump google.golang.org/api from 0.260.0 to 0.264.0 (#4679)
  * chore(deps): bump github.com/sigstore/rekor-tiles/v2 from 2.0.1 to 2.1.0 (#4670)
  * chore(deps): bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 (#4712)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4680)
  * chore(deps): bump the gomod group across 1 directory with 4 updates (#4702)
  * chore(deps): bump the actions group with 3 updates (#4703)
  * update golang builder to use go1.25.7 (#4687)
  * update golangci-lint to v2.8.x (#4688)
  * Fix typo in CLI help (#4701)
  * Support DSSE signing conformance test (#4685)
  * chore(deps): bump the actions group across 1 directory with 8 updates (#4689)
  * Deprecate rekor-entry-type flag (#4691)
  * Deprecate cosign triangulate (#4676)
  * Deprecate cosign copy (#4681)
  * Enforce TSA requirement for Rekor v2, Fuclio signing (#4683)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4668)
  * chore(deps): bump golang from 1.25.5 to 1.25.6 in the all group (#4673)
  * Automatically require signed timestamp with Rekor v2 entries (#4666)
  * Fix syntax issue in conformance test, update nightly (#4664)
  * Add mTLS support for TSA client connections when signing with a signing config (#4620)
  * fix: avoid panic on malformed tlog entry body (#4652)
  * Verify validity of chain rather than just certificate (#4663)
  * Allow --local-image with --new-bundle-format for v2 and v3 signatures (#4626)
  * chore(deps): bump the gomod group across 1 directory with 3 updates (#4662)
  * Bump sigstore/sigstore to resolve GHSA (#4660)
  * Gracefully fail if bundle payload body is not a string (#4648)
  * fix: avoid panic on malformed replace payload (#4653)
  * chore(deps): bump github.com/sigstore/rekor from 1.4.3 to 1.5.0 (#4659)
  * fix: avoid panic on malformed attestation payload (#4651)
  * fix: avoid panic on malformed tlog entries (#4649)
  * Update conformance to latest
  * docs(cosign): clarify RFC3161 revocation semantics (#4642)
  * Add empty predicate to cosign sign when payload type is application/vnd.in-toto+json (#4635)
  * chore(deps): bump github.com/sigstore/fulcio from 1.8.4 to 1.8.5 (#4637)
  * Add origin key for ctfe trusted root
  * Add changelog updates for v3.0.4 and v2.6.2 (#4625)</changelog>
</package>
<package pkgid="c905db5899233977913e365d8e6121d60c3c302ab9e36974aa16684abdf550cf" name="cosign-bash-completion" arch="noarch">
  <version epoch="0" ver="2.5.3" rel="150400.3.30.1"/>
  <changelog author="meissner@suse.com" date="1666094400">- update to 1.13.1:
  * verify-blob-attestation: allow multiple subjects in in_toto attestation (#2341)
  * Nits for #2337 (#2342)
  * Add verify-blob-attestation command and tests (#2337)
  * Update warning when users sign images by tag. (#2313)
  * Remove experimental flags from attest-blob and refactor (#2338)
  * Add --output-attestation flag to attest-blob and remove experimental signing (#2332)
  * Add attest-blob command (#2286)
  * Add '--cert-identity' flag to support subject alternate names for ver… (#2278)
  * Update Dockerfile section of README (#2323)
  * Fix option description: "sign" --&gt; "verify" (#2306)
- update to 1.13.0:
  * feat: use stdin as an input for predicate by @developer-guy in https://github.com/sigstore/cosign/pull/2269
  * feat: improve the verification message by @developer-guy in https://github.com/sigstore/cosign/pull/2268
  * use scaffolding 0.4.8 for tests. by @vaikas in https://github.com/sigstore/cosign/pull/2280
  * fix pivtool generate key touch policy by @cpanato in https://github.com/sigstore/cosign/pull/2282
  * Check error on chain verification failure by @haydentherapper in https://github.com/sigstore/cosign/pull/2284
  * Fix: Remove an extra registry request from verification path. by @mattmoor in https://github.com/sigstore/cosign/pull/2285
  * Fix: Create a static copy of signatures as part of verification. by @mattmoor in https://github.com/sigstore/cosign/pull/2287
  * Data race in FetchSignaturesForReference by @RTann in https://github.com/sigstore/cosign/pull/2283
  * Add support for Fulcio username identity in SAN by @haydentherapper in https://github.com/sigstore/cosign/pull/2291
  * fix: make tlog entry lookups for online verification shard-aware by @asraa in https://github.com/sigstore/cosign/pull/2297
  * Better help text to sign and verify SBOM by @ChristianCiach in https://github.com/sigstore/cosign/pull/2308
  * Adding warning to pin to digest by @ChaosInTheCRD in https://github.com/sigstore/cosign/pull/2311
  * Add annotations for upload blob. by @cldmnky in https://github.com/sigstore/cosign/pull/2188
  * replace deprecate package by @cpanato in https://github.com/sigstore/cosign/pull/2314
  * update release images to use go1.19.2 and cosign v1.12.1 by @cpanato in https://github.com/sigstore/cosign/pull/2315</changelog>
  <changelog author="meissner@suse.com" date="1677499200">- update to 2.0.0 (jsc#SLE-23879)
  Breaking Changes:
  * insecure-skip-tlog-verify: rename and adapt the cert expiration check (#2620)
  * Deprecate --certificate-email flag. Make --certificate-identity and -… (#2411)
  Enhancements:
  * Change go module name to github.com/sigstore/cosign/v2 for Cosign 2.0 (#2544)
  * Allow users to pass in a path for the --identity-token flag (#2538)
  * Breaking change: Respect tlog-upload=false, default to true (#2505)
  * Support outputing a certificate without uploading to the tlog (#2506)
  * Attestation/Blob signing and verification using a RFC3161 time-stamping server (#2464)
  * respect tlog-upload flag with TSA (#2474)
  * Better feedback if specifying incompatible argument on cosign sign --attachment (#2449)
  * Support TSA and Rekor verifications (#2463)
  * add support for tsa signing and verification of images (#2460)
  * cosign policy sign: remove experimental flag and make keyless signing default (#2459)
  * Remove experimental mode from cosign attest and verify-attestation (#2458)
  * Remove experimental mode from sign-blob and verify-blob (#2457)
  * Add --offline flag to force offline verification (#2427)
  * Air gap support (#2299)
  * Breaking change: Change SCT verification behavior to default to enforcement (#2400)
  * Breaking change: remove --force flag from sign and attest and rely on --yes flag to skip confirmation (#2399)
  * Breaking change: replace --no-tlog-upload flag with --tlog-upload flag (#2397)
  * Remove experimental flag from cosign sign and cosign verify (#2387)
  * verify: remove SIGSTORE_TRUST_REKOR_API_PUBLIC_KEY test env var for using a key from rekor's API (#2362)
  * Add warning to use digest instead of tags to other cosign commands (#2650)
  * Fix up UI messages (#2629)
  * Remove hardcoded Fulcio from output (#2621)
  * Fix missing privacy statement, print in multiple locations (#2622)
  * feat: allows custom key names for import-key-pair (#2587)
  * feat: support keyless verification for verify-blob-attestation (#2525)
  * attest-blob: add functionality for keyless signing (#2515)
  * Rego: add support for custom error/warning messages when evaluating rego rules (#2577)
  * feat: add debug information to cert validation error (#2579)
  * Support non-Sigstore TSA requests (#2708)
  * Add COSIGN_OCI_EXPERIMENTAL, push .sig/.sbom using OCI 1.1+ digest tag (#2684)
  * Output certificate in bundle when entry is not uploaded to Rekor (#2715)
  * attach signature and attach sbom must use STDIN to upload raw string (#2637)
  * add generate-key-pair GitHub Enterprise server support (#2676)
  * add in format string for warning (#2699)
  * Support for fetching Fulcio certs with self-managed key (#2532)
  * 2476 predicate type download (#2484)
  Bug Fixes:
  * Fix the file existence check. (#2552)
  * Fix timestamp verification, add verify-blob tests (#2527)
  * Fix(verify): Consolidate certificate expiry logic (#2504)
  * Updates to Timestamp signing and verification (#2499)
  * Fix: removes attestation payload from attest-blob's output &amp; no base64 encoding (#2498)
  * Fix path for e2e-tests badge (#2490)
  * Fix spdx json media type (#2479)
  * Fix sct verificaction (#2426)
  * Fix: panic with unsigned local image (#2656)
  * Make sure a cert passed in via --cert matches the bundle cert (#2652)
  * Fix: fix github oidc post submit test (#2594)
  * Fix: add enhanced error messages for failing verification with TUF targets (#2589)
  * Fix: Add missing schemes to cosign predicate types. (#2717)
  * Fix: Drop the CosignPredicate wrapper around SBOM attestations. (#2718)
  * Fix prompts with Windows line endings (#2674)</changelog>
  <changelog author="dmueller@suse.com" date="1680609600">- fix buildtags
- build against a maintained golang version (upstream uses go1.20)</changelog>
  <changelog author="meissner@suse.com" date="1681732800">- update to 2.0.1 (jsc#SLE-23879)
  Enhancements
  - Add environment variable token provider (#2864)
  - Remove cosign policy command (#2846)
  - Allow customising 'go' executable with GOEXE var (#2841)
  - Consistent tlog warnings during verification (#2840)
  - Add riscv64 arch (#2821)
  - Default generated PEM labels to SIGSTORE (#2735)
  - Update privacy statement and confirmation (#2797)
  - Add exit codes for verify errors (#2766)
  - Add Buildkite provider (#2779)
  - verify-blob-attestation: Loosen arg requirements if --check-claims=false (#2746)
  Bug Fixes
  - PKCS11 sessions are now opened read only (#2853)
  - Makefile: date format of log should not show signatures (#2835)
  - Add missing flags to cosign verify dockerfile/manifest (#2830)
  - Add a warning to remember how to configure a custom Gitlab host (#2816)
  - Remove tag warning message from save/copy commands (#2799)
  - Mark keyless pem files with b64 (#2671)</changelog>
  <changelog author="meissner@suse.com" date="1683460800">- update to 2.0.2 (jsc#SLE-23879)
  Enhancements
  - Update sigstore/sigstore to v1.6.2 to pick up TUF CDN change (#2891)
  - feat: Make cosign copy faster (#2901)
  - remove sget (#2885)
  - Require a payload to be provided with a signature (#2785)
  Bug Fixes
  - cmd: Change error message from KeyParseError to PubKeyParseError for verify-blob. (#2876)
  - Use SOURCE_DATE_EPOCH for OCI CreatedAt times (#2878)
  Documentation
  - Remove experimental warning from Fulcio flags (#2923)
  - add missing oidc provider (#2922)
  - Add zot as a supported registry (#2920)
  - deprecates kms_support docs (#2900)
  - chore(docs) deprecate note for usage docs (#2906)
  - adds note of deprecation for examples.md docs (#2899)</changelog>
  <changelog author="meissner@suse.com" date="1687867200">- updated to 2.1.1 (jsc#SLE-23879)
  - Bug Fixes
  - wait for the workers become available again to continue the execution (#3084)
  - fix help text when in a container (#3082)
- updated to 2.1.0 (jsc#SLE-23879)
  - Breaking Change: The predicate is now a required flag in the attest commands, set via the --type flag.
  - Enhancements
  - Verify sigs and attestations in parallel (#3066)
  - Deep inspect attestations when filtering download (#3031)
  - refactor bundle validation code, add support for DSSE rekor type (#3016)
  - Allow overriding remote options (#3049)
  - feat: adds no cert found on sig exit code (#3038)
  - Make predicate a required flag in attest commands (#3033)
  - Added support for attaching Time stamp authority Response in attach command (#3001)
  - Add sign --sign-container-identity CLI (#2984)
  - Feature: Allow cosign to sign digests before they are uploaded. (#2959)
  - accepts attachment-tag-prefix for cosign copy (#3014)
  - Feature: adds '--allow-insecure-registry' for cosign load (#3000)
  - download attestation: support --platform flag (#2980)
  - Cleanup: Add Digest to the SignedEntity interface. (#2960)
  - verify command: support keyless verification using only a provided certificate chain with non-fulcio roots (#2845)
  - verify: use workers to limit the paralellism when verifying images with --max-workers flag (#3069)
  - Bug Fixes
  - Fix pkg/cosign/errors (#3050)
  - Fix: update doc to refer to github-actions oidc provider (#3040)
  - Fix: prefer GitHub OIDC provider if enabled (#3044)
  - Fix --sig-only in cosign copy (#3074)
  - Documentation
  - Fix links to sigstore/docs in markdown files (#3064)</changelog>
  <changelog author="meissner@suse.com" date="1693569600">- updated to 2.2.0 (jsc#SLE-23879)
  - Enhancements
  * switch to uploading DSSE types to rekor instead of intoto (#3113)
  * add 'cosign sign' command-line parameters for mTLS (#3052)
  * improve error messages around bundle != payload hash (#3146)
  * make VerifyImageAttestation function public (#3156)
  * Switch to cryptoutils function for SANS (#3185)
  * Handle HTTP_1_1_REQUIRED errors in github provider (#3172)
  - Bug Fixes
  * Fix nondeterminsitic timestamps (#3121)
  - Documentation
  * doc: Add example of sign-blob with key in env var (#3152)
  * add deprecation notice for cosign-releases GCS bucket (#3148)
  * update doc links (#3186)</changelog>
  <changelog author="meissner@suse.com" date="1699358400">- updated to 2.2.1 (jsc#SLE-23879)
  This release comes with a fix for
  CVE-2023-46737 / bsc#1216933 described in this [Github Security
  Advisory](https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9).
  Enhancements:
  * feat: Support basic auth and bearer auth login to registry (#3310)
  * add support for ignoring certificates with pkcs11 (#3334)
  * Support ReplaceOp in Signatures (#3315)
  * feat: added ability to get image digest back via triangulate (#3255)
  * feat: add `--only` flag in `cosign copy` to copy sign, att &amp; sbom (#3247)
  * feat: add support attaching a Rekor bundle to a container (#3246)
  * feat: add support outputting rekor response on signing (#3248)
  * feat: improve dockerfile verify subcommand (#3264)
  * Add guard flag for experimental OCI 1.1 verify. (#3272)
  * Deprecate SBOM attachments (#3256)
  * feat: dedent line in cosign copy doc (#3244)
  * feat: add platform flag to cosign copy command (#3234)
  * Add SLSA 1.0 attestation support to cosign. Closes #2860 (#3219)
  * attest: pass OCI remote opts to att resolver. (#3225)
  Bug Fixes:
  * Merge pull request from GHSA-vfp6-jrw2-99g9
  * fix: allow cosign download sbom when image is absent (#3245)
  * ci: add a OCI registry test for referrers support (#3253)
  * Fix ReplaceSignatures (#3292)
  * Stop using deprecated in_toto.ProvenanceStatement (#3243)
  * Fixes #3236, disable SCT checking for a cosign verification when usin… (#3237)
  * fix: update error in `SignedEntity` to be more descriptive (#3233)
  * Fail timestamp verification if no root is provided (#3224)
  Documentation:
  * Add some docs about verifying in an air-gapped environment (#3321)
  * Update CONTRIBUTING.md (#3268)
  * docs: improves the Contribution guidelines (#3257)
  * Remove security policy (#3230)
  Others:
  * Set go to min 1.21 and update dependencies  (#3327)
  * Update contact for code of conduct (#3266)
  * Update .ko.yaml (#3240)</changelog>
  <changelog author="marcos.bjoerkelund@suse.com" date="1702382400">- updated to 2.2.2 (jsc#SLE-23879)
  v2.2.2 adds a new container with a shell,
  gcr.io/projectsigstore/cosign:vx.y.z-dev, in addition to the existing
  container gcr.io/projectsigstore/cosign:vx.y.z without a shell.
  For private deployments, we have also added an alias for
  - -insecure-skip-log, --private-infrastructure.
  Bug Fixes:
  * chore(deps): bump github.com/sigstore/sigstore from 1.7.5 to 1.7.6 (#3411) which fixes a bug with using Azure KMS
  * Don't require CT log keys if using a key/sk (#3415)
  * Fix copy without any flag set (#3409)
  * Update cosign generate cmd to not include newline (#3393)
  * Fix idempotency error with signing (#3371)
  Features:
  * Add --yes flag cosign import-key-pair to skip the overwrite confirmation. (#3383)
  * Use the timeout flag value in verify* commands. (#3391)
  * add --private-infrastructure flag (#3369)
  Container Updates:
  * Bump builder image to use go1.21.4 and add new cosign image tags with shell (#3373)
  Documentation:
  * Update SBOM_SPEC.md (#3358)</changelog>
  <changelog author="meissner@suse.com" date="1706875200">- updated to 2.2.3 (jsc#SLE-23879)
  Bug Fixes:
  * Fix race condition on verification with multiple signatures attached to image (#3486)
  * fix(clean): Fix clean cmd for private registries (#3446)
  * Fixed BYO PKI verification (#3427)
  Features:
  * Allow for option in cosign attest and attest-blob to upload attestation as supported in Rekor (#3466)
  * Add support for OpenVEX predicate type (#3405)
  Documentation:
  * Resolves #3088: `version` sub-command expected behaviour documentation and testing (#3447)
  * add examples for cosign attach signature cmd (#3468)
  Misc:
  * Remove CertSubject function (#3467)
  * Use local rekor and fulcio instances in e2e tests (#3478)
- bumped embedded golang.org/x/crypto/ssh to fix the Terrapin attack CVE-2023-48795 (bsc#1218207)</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- updated to 2.2.4 (jsc#SLE-23879)
  * Bug Fixes
  * Fixes for GHSA-88jx-383q-w4qc and GHSA-95pr-fxf5-86gv (#3661)
  - CVE-2024-29902: Malicious attachments can cause system-wide denial of service (bsc#1222835)
  - CVE-2024-29903: Malicious artifects can cause machine-wide denial of service (bsc#1222837)
  * ErrNoSignaturesFound should be used when there is no signature attached to an image. (#3526)
  * fix semgrep issues for dgryski.semgrep-go ruleset (#3541)
  * Honor creation timestamp for signatures again (#3549)
  * Features
  * Adds Support for Fulcio Client Credentials Flow, and Argument to Set Flow Explicitly (#3578)
  * Documentation
  * add oci bundle spec (#3622)
  * Correct help text of triangulate cmd (#3551)
  * Correct help text of verify-attestation policy argument (#3527)
  * feat: add OVHcloud MPR registry tested with cosign (#3639)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1717156800">- add completion subpackages (bash, fish, zsh)</changelog>
  <changelog author="meissner@suse.com" date="1721822400">- update to 2.3.0 (jsc#SLE-23879)
  * Features
  - Add PayloadProvider interface to decouple AttestationToPayloadJSON from oci.Signature interface (#3693)
  - add registry options to cosign save (#3645)
  - Add debug providers command. (#3728)
  - Make config layers in ociremote mountable (#3741)
  - adds tsa cert chain check for env var or tuf targets. (#3600)
  - add --ca-roots and --ca-intermediates flags to 'cosign verify' (#3464)
  - add handling of keyless verification for all verify commands (#3761)
  * Bug Fixes
  - fix: close attestationFile (#3679)
  - Set bundleVerified to true after Rekor verification (Resolves #3740) (#3745)
  * Documentation
  - Document ImportKeyPair and LoadPrivateKey functions in pkg/cosign (#3776)</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1724155200">- Set CGO_ENABLED=1 for fixing s390x failed build</changelog>
  <changelog author="meissner@suse.com" date="1727870400">- update to 2.4.0 (jsc#SLE-23879)
  - Add new bundle support to verify-blob and verify-blob-attestation (#3796)
  - Adding protobuf bundle support to sign-blob and attest-blob (#3752)
  - Bump sigstore/sigstore to support email_verified as string or boolean (#3819)
  - Conformance testing for cosign (#3806)
  - move incremental builds per commit to GHCR instead of GCR (#3808)
  - Add support for recording creation timestamp for cosign attest (#3797)
  - Include SCT verification failure details in error message (#3799)</changelog>
  <changelog author="meissner@suse.com" date="1738756800">- Update to version 2.4.2:
  - Updated open-policy-agent to 1.1.0 library (#4036)
  - Note that only Rego v0 policies are supported at this time
  - Add UseSignedTimestamps to CheckOpts, refactor TSA options (#4006)
  - Add support for verifying root checksum in cosign initialize (#3953)
  - Detect if user supplied a valid protobuf bundle (#3931)
  - Add a log message if user doesn't provide --trusted-root (#3933)
  - Support mTLS towards container registry (#3922)
  - Add bundle create helper command (#3901)
  - Add trusted-root create helper command (#3876)
  Bug Fixes:
  - fix: set tls config while retaining other fields from default http transport (#4007)
  - policy fuzzer: ignore known panics (#3993)
  - Fix for multiple WithRemote options (#3982)
  - Add nightly conformance test workflow (#3979)
  - Fix copy --only for signatures + update/align docs (#3904)
- use "osc service mr" to update</changelog>
  <changelog author="meissner@suse.com" date="1740052800">- Update to version 2.4.3:
  * Enable fetching signatures without remote get. (#4047)
  * Bump sigstore/sigstore to support KMS plugins (#4073)
  * sort properly Go imports (#4071)
  * sync comment with parameter name in function signature (#4063)
  * fix go imports order to be alphabetical (#4062)
  * fix comment typo and imports order (#4061)
  * Feat/file flag completion improvements (#4028)
  * Udpate builder to use go1.23.6 (#4052)
  * Refactor verifyNewBundle into library function (#4013)
  * fix parsing error in --only for cosign copy (#4049)
  * Fix codeowners syntax, add dep-maintainers (#4046)</changelog>
  <changelog author="meissner@suse.com" date="1744545600">- Update to version 2.5.0:
  * Update sigstore-go to pick up bug fixes (#4150)
  * Update golangci-lint to v2, update golangci-lint-action (#4143)
  * Feat/non filename completions (#4115)
  * update builder to use go1.24.1 (#4116)
  * Add support for new bundle specification for attesting/verifying OCI image attestations (#3889)
  * Remove cert log line (#4113)
  * cmd/cosign/cli: fix typo in ignoreTLogMessage (#4111)
  * bump to latest scaffolding release for testing (#4099)
  * increase 2e2_test docker compose tiemout to 180s (#4091)
  * Fix replace with compliant image mediatype (#4077)
  * Add TSA certificate related flags and fields for cosign attest (#4079)
- Security issues fixed:
  - CVE-2024-6104: cosign: hashicorp/go-retryablehttp: url might write sensitive information to log file (bsc#1227031)
  - CVE-2024-51744: cosign: github.com/golang-jwt/jwt/v4: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt (bsc#1232985)
  - CVE-2025-27144: cosign: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: Go JOSE's Parsing Vulnerable to Denial of Service (bsc#1237682)
  - CVE-2025-22870: cosign: golang.org/x/net/proxy: proxy bypass using IPv6 zone IDs (bsc#1238693)
  - CVE-2025-22868: cosign: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239204)
  - CVE-2025-22869: cosign: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239337)</changelog>
  <changelog author="meissner@suse.com" date="1748433600">- switch to go1.24, enable fips build</changelog>
  <changelog author="meissner@suse.com" date="1752840000">- Update to version 2.5.3 (jsc#SLE-23879)
  - Add signing-config create command (#4280)
  - Allow multiple services to be specified for trusted-root create (#4285)
  - force when copying the latest image to overwrite (#4298)
  - Fix cert verification logic for trusted-root/SCTs (#4294)
  - Fix lint error for types package (#4295)
  - feat: Add OCI 1.1+ experimental support to tree (#4205)
  - Add validity period end for trusted-root create (#4271)
  - avoid double-loading trustedroot from file (#4264)
- Update to 2.5.2:
  - Do not load trusted root when CT env key is set
  - docs: improve doc for --no-upload option (#4206)
- Update to 2.5.1:
  * Features
  - Add Rekor v2 support for trusted-root create (#4242)
  - Add baseUrl and Uri to trusted-root create command
  - Upgrade to TUF v2 client with trusted root
  - Don't verify SCT for a private PKI cert (#4225)
  - Bump TSA library to relax EKU chain validation rules (#4219)
  * Bug Fixes
  - Bump sigstore-go to pick up log index=0 fix (#4162)
  - remove unused recursive flag on attest command (#4187)
  * Docs
  - Fix indentation in verify-blob cmd examples (#4160)
  * GO-2025-3660/ CVE-2025-46569: Fixed OPA server Data API HTTP path injection of Rego (bsc#1246725)</changelog>
</package>
<package pkgid="b27b98d2764d97bc8a2e53c1d2118f7a8367416650471dfff884924c7c36d343" name="cosign-bash-completion" arch="noarch">
  <version epoch="0" ver="3.0.5" rel="150400.3.35.1"/>
  <changelog author="meissner@suse.com" date="1683460800">- update to 2.0.2 (jsc#SLE-23879)
  Enhancements
  - Update sigstore/sigstore to v1.6.2 to pick up TUF CDN change (#2891)
  - feat: Make cosign copy faster (#2901)
  - remove sget (#2885)
  - Require a payload to be provided with a signature (#2785)
  Bug Fixes
  - cmd: Change error message from KeyParseError to PubKeyParseError for verify-blob. (#2876)
  - Use SOURCE_DATE_EPOCH for OCI CreatedAt times (#2878)
  Documentation
  - Remove experimental warning from Fulcio flags (#2923)
  - add missing oidc provider (#2922)
  - Add zot as a supported registry (#2920)
  - deprecates kms_support docs (#2900)
  - chore(docs) deprecate note for usage docs (#2906)
  - adds note of deprecation for examples.md docs (#2899)</changelog>
  <changelog author="meissner@suse.com" date="1687867200">- updated to 2.1.1 (jsc#SLE-23879)
  - Bug Fixes
  - wait for the workers become available again to continue the execution (#3084)
  - fix help text when in a container (#3082)
- updated to 2.1.0 (jsc#SLE-23879)
  - Breaking Change: The predicate is now a required flag in the attest commands, set via the --type flag.
  - Enhancements
  - Verify sigs and attestations in parallel (#3066)
  - Deep inspect attestations when filtering download (#3031)
  - refactor bundle validation code, add support for DSSE rekor type (#3016)
  - Allow overriding remote options (#3049)
  - feat: adds no cert found on sig exit code (#3038)
  - Make predicate a required flag in attest commands (#3033)
  - Added support for attaching Time stamp authority Response in attach command (#3001)
  - Add sign --sign-container-identity CLI (#2984)
  - Feature: Allow cosign to sign digests before they are uploaded. (#2959)
  - accepts attachment-tag-prefix for cosign copy (#3014)
  - Feature: adds '--allow-insecure-registry' for cosign load (#3000)
  - download attestation: support --platform flag (#2980)
  - Cleanup: Add Digest to the SignedEntity interface. (#2960)
  - verify command: support keyless verification using only a provided certificate chain with non-fulcio roots (#2845)
  - verify: use workers to limit the paralellism when verifying images with --max-workers flag (#3069)
  - Bug Fixes
  - Fix pkg/cosign/errors (#3050)
  - Fix: update doc to refer to github-actions oidc provider (#3040)
  - Fix: prefer GitHub OIDC provider if enabled (#3044)
  - Fix --sig-only in cosign copy (#3074)
  - Documentation
  - Fix links to sigstore/docs in markdown files (#3064)</changelog>
  <changelog author="meissner@suse.com" date="1693569600">- updated to 2.2.0 (jsc#SLE-23879)
  - Enhancements
  * switch to uploading DSSE types to rekor instead of intoto (#3113)
  * add 'cosign sign' command-line parameters for mTLS (#3052)
  * improve error messages around bundle != payload hash (#3146)
  * make VerifyImageAttestation function public (#3156)
  * Switch to cryptoutils function for SANS (#3185)
  * Handle HTTP_1_1_REQUIRED errors in github provider (#3172)
  - Bug Fixes
  * Fix nondeterminsitic timestamps (#3121)
  - Documentation
  * doc: Add example of sign-blob with key in env var (#3152)
  * add deprecation notice for cosign-releases GCS bucket (#3148)
  * update doc links (#3186)</changelog>
  <changelog author="meissner@suse.com" date="1699358400">- updated to 2.2.1 (jsc#SLE-23879)
  This release comes with a fix for
  CVE-2023-46737 / bsc#1216933 described in this [Github Security
  Advisory](https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9).
  Enhancements:
  * feat: Support basic auth and bearer auth login to registry (#3310)
  * add support for ignoring certificates with pkcs11 (#3334)
  * Support ReplaceOp in Signatures (#3315)
  * feat: added ability to get image digest back via triangulate (#3255)
  * feat: add `--only` flag in `cosign copy` to copy sign, att &amp; sbom (#3247)
  * feat: add support attaching a Rekor bundle to a container (#3246)
  * feat: add support outputting rekor response on signing (#3248)
  * feat: improve dockerfile verify subcommand (#3264)
  * Add guard flag for experimental OCI 1.1 verify. (#3272)
  * Deprecate SBOM attachments (#3256)
  * feat: dedent line in cosign copy doc (#3244)
  * feat: add platform flag to cosign copy command (#3234)
  * Add SLSA 1.0 attestation support to cosign. Closes #2860 (#3219)
  * attest: pass OCI remote opts to att resolver. (#3225)
  Bug Fixes:
  * Merge pull request from GHSA-vfp6-jrw2-99g9
  * fix: allow cosign download sbom when image is absent (#3245)
  * ci: add a OCI registry test for referrers support (#3253)
  * Fix ReplaceSignatures (#3292)
  * Stop using deprecated in_toto.ProvenanceStatement (#3243)
  * Fixes #3236, disable SCT checking for a cosign verification when usin… (#3237)
  * fix: update error in `SignedEntity` to be more descriptive (#3233)
  * Fail timestamp verification if no root is provided (#3224)
  Documentation:
  * Add some docs about verifying in an air-gapped environment (#3321)
  * Update CONTRIBUTING.md (#3268)
  * docs: improves the Contribution guidelines (#3257)
  * Remove security policy (#3230)
  Others:
  * Set go to min 1.21 and update dependencies  (#3327)
  * Update contact for code of conduct (#3266)
  * Update .ko.yaml (#3240)</changelog>
  <changelog author="marcos.bjoerkelund@suse.com" date="1702382400">- updated to 2.2.2 (jsc#SLE-23879)
  v2.2.2 adds a new container with a shell,
  gcr.io/projectsigstore/cosign:vx.y.z-dev, in addition to the existing
  container gcr.io/projectsigstore/cosign:vx.y.z without a shell.
  For private deployments, we have also added an alias for
  - -insecure-skip-log, --private-infrastructure.
  Bug Fixes:
  * chore(deps): bump github.com/sigstore/sigstore from 1.7.5 to 1.7.6 (#3411) which fixes a bug with using Azure KMS
  * Don't require CT log keys if using a key/sk (#3415)
  * Fix copy without any flag set (#3409)
  * Update cosign generate cmd to not include newline (#3393)
  * Fix idempotency error with signing (#3371)
  Features:
  * Add --yes flag cosign import-key-pair to skip the overwrite confirmation. (#3383)
  * Use the timeout flag value in verify* commands. (#3391)
  * add --private-infrastructure flag (#3369)
  Container Updates:
  * Bump builder image to use go1.21.4 and add new cosign image tags with shell (#3373)
  Documentation:
  * Update SBOM_SPEC.md (#3358)</changelog>
  <changelog author="meissner@suse.com" date="1706875200">- updated to 2.2.3 (jsc#SLE-23879)
  Bug Fixes:
  * Fix race condition on verification with multiple signatures attached to image (#3486)
  * fix(clean): Fix clean cmd for private registries (#3446)
  * Fixed BYO PKI verification (#3427)
  Features:
  * Allow for option in cosign attest and attest-blob to upload attestation as supported in Rekor (#3466)
  * Add support for OpenVEX predicate type (#3405)
  Documentation:
  * Resolves #3088: `version` sub-command expected behaviour documentation and testing (#3447)
  * add examples for cosign attach signature cmd (#3468)
  Misc:
  * Remove CertSubject function (#3467)
  * Use local rekor and fulcio instances in e2e tests (#3478)
- bumped embedded golang.org/x/crypto/ssh to fix the Terrapin attack CVE-2023-48795 (bsc#1218207)</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- updated to 2.2.4 (jsc#SLE-23879)
  * Bug Fixes
  * Fixes for GHSA-88jx-383q-w4qc and GHSA-95pr-fxf5-86gv (#3661)
  - CVE-2024-29902: Malicious attachments can cause system-wide denial of service (bsc#1222835)
  - CVE-2024-29903: Malicious artifects can cause machine-wide denial of service (bsc#1222837)
  * ErrNoSignaturesFound should be used when there is no signature attached to an image. (#3526)
  * fix semgrep issues for dgryski.semgrep-go ruleset (#3541)
  * Honor creation timestamp for signatures again (#3549)
  * Features
  * Adds Support for Fulcio Client Credentials Flow, and Argument to Set Flow Explicitly (#3578)
  * Documentation
  * add oci bundle spec (#3622)
  * Correct help text of triangulate cmd (#3551)
  * Correct help text of verify-attestation policy argument (#3527)
  * feat: add OVHcloud MPR registry tested with cosign (#3639)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1717156800">- add completion subpackages (bash, fish, zsh)</changelog>
  <changelog author="meissner@suse.com" date="1721822400">- update to 2.3.0 (jsc#SLE-23879)
  * Features
  - Add PayloadProvider interface to decouple AttestationToPayloadJSON from oci.Signature interface (#3693)
  - add registry options to cosign save (#3645)
  - Add debug providers command. (#3728)
  - Make config layers in ociremote mountable (#3741)
  - adds tsa cert chain check for env var or tuf targets. (#3600)
  - add --ca-roots and --ca-intermediates flags to 'cosign verify' (#3464)
  - add handling of keyless verification for all verify commands (#3761)
  * Bug Fixes
  - fix: close attestationFile (#3679)
  - Set bundleVerified to true after Rekor verification (Resolves #3740) (#3745)
  * Documentation
  - Document ImportKeyPair and LoadPrivateKey functions in pkg/cosign (#3776)</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1724155200">- Set CGO_ENABLED=1 for fixing s390x failed build</changelog>
  <changelog author="meissner@suse.com" date="1727870400">- update to 2.4.0 (jsc#SLE-23879)
  - Add new bundle support to verify-blob and verify-blob-attestation (#3796)
  - Adding protobuf bundle support to sign-blob and attest-blob (#3752)
  - Bump sigstore/sigstore to support email_verified as string or boolean (#3819)
  - Conformance testing for cosign (#3806)
  - move incremental builds per commit to GHCR instead of GCR (#3808)
  - Add support for recording creation timestamp for cosign attest (#3797)
  - Include SCT verification failure details in error message (#3799)</changelog>
  <changelog author="meissner@suse.com" date="1738756800">- Update to version 2.4.2:
  - Updated open-policy-agent to 1.1.0 library (#4036)
  - Note that only Rego v0 policies are supported at this time
  - Add UseSignedTimestamps to CheckOpts, refactor TSA options (#4006)
  - Add support for verifying root checksum in cosign initialize (#3953)
  - Detect if user supplied a valid protobuf bundle (#3931)
  - Add a log message if user doesn't provide --trusted-root (#3933)
  - Support mTLS towards container registry (#3922)
  - Add bundle create helper command (#3901)
  - Add trusted-root create helper command (#3876)
  Bug Fixes:
  - fix: set tls config while retaining other fields from default http transport (#4007)
  - policy fuzzer: ignore known panics (#3993)
  - Fix for multiple WithRemote options (#3982)
  - Add nightly conformance test workflow (#3979)
  - Fix copy --only for signatures + update/align docs (#3904)
- use "osc service mr" to update</changelog>
  <changelog author="meissner@suse.com" date="1740052800">- Update to version 2.4.3:
  * Enable fetching signatures without remote get. (#4047)
  * Bump sigstore/sigstore to support KMS plugins (#4073)
  * sort properly Go imports (#4071)
  * sync comment with parameter name in function signature (#4063)
  * fix go imports order to be alphabetical (#4062)
  * fix comment typo and imports order (#4061)
  * Feat/file flag completion improvements (#4028)
  * Udpate builder to use go1.23.6 (#4052)
  * Refactor verifyNewBundle into library function (#4013)
  * fix parsing error in --only for cosign copy (#4049)
  * Fix codeowners syntax, add dep-maintainers (#4046)</changelog>
  <changelog author="meissner@suse.com" date="1744545600">- Update to version 2.5.0:
  * Update sigstore-go to pick up bug fixes (#4150)
  * Update golangci-lint to v2, update golangci-lint-action (#4143)
  * Feat/non filename completions (#4115)
  * update builder to use go1.24.1 (#4116)
  * Add support for new bundle specification for attesting/verifying OCI image attestations (#3889)
  * Remove cert log line (#4113)
  * cmd/cosign/cli: fix typo in ignoreTLogMessage (#4111)
  * bump to latest scaffolding release for testing (#4099)
  * increase 2e2_test docker compose tiemout to 180s (#4091)
  * Fix replace with compliant image mediatype (#4077)
  * Add TSA certificate related flags and fields for cosign attest (#4079)
- Security issues fixed:
  - CVE-2024-6104: cosign: hashicorp/go-retryablehttp: url might write sensitive information to log file (bsc#1227031)
  - CVE-2024-51744: cosign: github.com/golang-jwt/jwt/v4: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt (bsc#1232985)
  - CVE-2025-27144: cosign: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: Go JOSE's Parsing Vulnerable to Denial of Service (bsc#1237682)
  - CVE-2025-22870: cosign: golang.org/x/net/proxy: proxy bypass using IPv6 zone IDs (bsc#1238693)
  - CVE-2025-22868: cosign: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239204)
  - CVE-2025-22869: cosign: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239337)</changelog>
  <changelog author="meissner@suse.com" date="1748433600">- switch to go1.24, enable fips build</changelog>
  <changelog author="meissner@suse.com" date="1752840000">- Update to version 2.5.3 (jsc#SLE-23879)
  - Add signing-config create command (#4280)
  - Allow multiple services to be specified for trusted-root create (#4285)
  - force when copying the latest image to overwrite (#4298)
  - Fix cert verification logic for trusted-root/SCTs (#4294)
  - Fix lint error for types package (#4295)
  - feat: Add OCI 1.1+ experimental support to tree (#4205)
  - Add validity period end for trusted-root create (#4271)
  - avoid double-loading trustedroot from file (#4264)
- Update to 2.5.2:
  - Do not load trusted root when CT env key is set
  - docs: improve doc for --no-upload option (#4206)
- Update to 2.5.1:
  * Features
  - Add Rekor v2 support for trusted-root create (#4242)
  - Add baseUrl and Uri to trusted-root create command
  - Upgrade to TUF v2 client with trusted root
  - Don't verify SCT for a private PKI cert (#4225)
  - Bump TSA library to relax EKU chain validation rules (#4219)
  * Bug Fixes
  - Bump sigstore-go to pick up log index=0 fix (#4162)
  - remove unused recursive flag on attest command (#4187)
  * Docs
  - Fix indentation in verify-blob cmd examples (#4160)
  * GO-2025-3660/ CVE-2025-46569: Fixed OPA server Data API HTTP path injection of Rego (bsc#1246725)</changelog>
  <changelog author="meissner@suse.com" date="1758196800">- Update to version 2.6.0:
  - Require exclusively a SigningConfig or service URLs when signing (#4403)
  - Add a terminal spinner while signing with sigstore-go (#4402)
  - Bump sigstore-go, support alternative hash algorithms with keys (#4386)
  - Add support for SigningConfig in sign/attest (#4371)
  - Support self-managed keys when signing with sigstore-go (#4368)
  - Remove SHA256 assumption in sign-blob/verify-blob (#4050)
  - introduce dockerfile to pin the go version to decouple go version from go.mod (#4369)
  - refactor: extract function to write referrer attestations (#4357)
  - Break import cycle with e2e build tag (#4370)
  - Update conformance test binary for signing config (#4367)
  - update builder image to use go1.25 (#4366)
  - Don't load content from TUF if trusted root path is specified (#4347)
  - Don't require timestamps when verifying with a key (#4337)
  - Fixes to cosign sign / verify for the new bundle format (#4346)
  - update builder to use go1.24.6 (#4334)
  - bump golangci-lint to v2.3.x (#4333)
  - Have cosign sign support bundle format (#4316)
  - Add support for SigningConfig for sign-blob/attest-blob, support Rekor v2 (#4319)
  - Verify subject with bundle only when checking claims (#4320)
  - Add to `attest-blob` the ability to supply a complete in-toto statement, and add to `verify-blob-attestation` the ability to verify with just a digest (#4306)</changelog>
  <changelog author="meissner@suse.com" date="1765368000">- Update to version 3.0.3:
  * 4554: Closes 4554 - Add warning when --output* is used (#4556)
  * chore(deps): bump golangci/golangci-lint-action from 8.0.0 to 9.1.0 (#4545)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.111.0 to 3.113.0 (#4542)
  * chore(deps): bump github.com/awslabs/amazon-ecr-credential-helper/ecr-login (#4543)
  * chore(deps): bump actions/checkout from 5.0.0 to 6.0.0 (#4546)
  * chore(deps): bump the actions group with 4 updates (#4544)
  * chore(deps): bump the gomod group across 1 directory with 5 updates (#4567)
  * chore(deps): bump golang from 1.25.4 to 1.25.5 in the all group (#4568)
  * update builder to use go1.25.5 (#4566)
  * Protobuf bundle support for subcommand `clean` (#4539)
  * Add staging flag to initialize with staging TUF metadata
  * update slack invite link (#4560)
  * Updating sign-blob to also support signing with a certificate (#4547)
  * Bump sigstore library dependencies (#4532)
  * Protobuf bundle support for subcommands `save` and `load` (#4538)
  * Fix cert attachment for new bundle with signing config
  * Fix OCI verification with local cert - old bundle
  * chore(deps): bump github.com/sigstore/fulcio from 1.7.1 to 1.8.1 (#4519)
  * chore(deps): bump golang.org/x/crypto in /test/fakeoidc (#4535)
  * chore(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0 (#4536)
  * CVE-2025-58181: Fixed golang.org/x/crypto/ssh: invalidated number
    of mechanisms can cause unbounded memory consumption (bsc#1253913)
  * update go builder and cosign (#4529)
  * chore(deps): bump the gomod group across 1 directory with 7 updates (#4528)
  * chore(deps): bump sigstore/cosign-installer from 3.10.0 to 4.0.0 (#4478)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4520)
  * chore(deps): bump golang from 1.25.3 to 1.25.4 in the all group (#4515)
  * chore(deps): bump golang.org/x/oauth2 from 0.32.0 to 0.33.0 (#4518)
  * chore(deps): bump cuelang.org/go from 0.14.2 to 0.15.0 (#4524)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.9.0 to 1.10.1 (#4521)
  * chore(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 (#4502)
  * chore(deps): bump the actions group across 1 directory with 2 updates (#4516)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.110.0 to 3.111.0 (#4523)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4522)
  * Deprecate tlog-upload flag (#4458)
  * fix: Use signal context for `sign` cli package.
  * update offline verification directions (#4526)
  * Fix signing/verifying annotations for new bundle
  * Add support to download and attach for protobuf bundles (#4477)
  * Add --signing-algorithm flag (#3497)
  * Refactor signcommon bundle helpers
  * Add --bundle and fix --upload for new bundle
  * Pass insecure registry flags through to referrers
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.108.0 to 3.109.1 (#4483)
  * Add protobuf bundle support for tree subcommand (#4491)
  * Remove stale embed import (#4492)
  * Support multiple container identities
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4484)
  * chore(deps): bump chainguard-dev/actions in the actions group (#4480)
  * chore(deps): bump github.com/sigstore/rekor-tiles/v2 (#4485)
  * chore(deps): bump golang.org/x/crypto from 0.42.0 to 0.43.0 (#4486)
  * chore(deps): bump cuelang.org/go in the gomod group (#4479)
  * upgrade OSS-Fuzz build tooling (#4487)
  * Fix segfault when no attestations are found (#4472)
  * Use overridden repository for new bundle format (#4473)
  * update go to 1.25.3 (#4471)
  * Remove --out flag from `cosign initialize` (#4462)
  * chore(deps): bump the actions group with 2 updates (#4460)
  * Deprecate offline flag (#4457)
  * Deduplicate code in sign/attest* and verify* commands (#4449)
  * Cache signing config when calling initialize (#4456)
  * Update changelog for v3.0.2 (#4455)
  * chore(deps): bump google.golang.org/api from 0.250.0 to 0.251.0
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go
  * chore(deps): bump the actions group with 3 updates
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.107.2 to 3.108.0
  * choose different signature filename for KMS-signed release signatures (#4448)
  * chore(deps): bump github.com/go-jose/go-jose/v4 (#4451)
  * Update rekor-tiles version path
  * update CL for v3.0.1 release (#4447)
  * update goreleaser config for v3.0.0 release (#4446)
  * Create changelog for v3.0.0 (#4440)
  * Fetch service URLs from the TUF PGI signing config by default (#4428)
  * Create changelog for v2.6.1 (#4439)
  * chore(deps): bump google.golang.org/api from 0.249.0 to 0.250.0 (#4432)
  * chore(deps): bump the gomod group with 2 updates (#4429)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.8.0 to 1.9.0 (#4433)
  * chore(deps): bump the actions group with 3 updates (#4434)
  * chore(deps): bump github.com/go-openapi/swag from 0.24.1 to 0.25.1 (#4435)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4436)
  * chore(deps): bump github.com/go-openapi/runtime from 0.28.0 to 0.29.0 (#4437)
  * Bump module version to v3 for Cosign v3.0 (#4427)
  * Move sigstore-conformance back to tagged release (#4425)
  * Bump sigstore-go to v1.1.3 (#4423)
  * Partially populate the output of cosign verify when working with new bundles (#4416)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4419)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4418)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.105.0 to 3.107.0 (#4420)
  * chore(deps): bump chainguard-dev/actions in the actions group (#4421)
  * bump go builder to use 1.25.1 and cosign (#4417)
  * Bump sigstore-go for more precise user agents (#4413)
  * chore(deps): bump github.com/spf13/viper from 1.20.1 to 1.21.0 (#4408)
  * chore(deps): bump the actions group with 2 updates (#4407)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4410)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.104.0 to 3.105.0 (#4411)
  * Default to using the new protobuf format (#4318)</changelog>
  <changelog author="meissner@suse.com" date="1770811200">- Update to version 3.0.4:
  * CVE-2025-11065: Fixed github.com/go-viper/mapstructure/v2: sensitive
    Information leak in logs (bsc#1250620)
  * CVE-2026-22703: Fixed that cosign verification accepts any valid
    Rekor entry under certain conditions (bsc#1256496)
  * Fix bundle verify path for old bundle/trusted root (#4623)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4616)
  * chore(deps): bump cuelang.org/go in the gomod group (#4615)
  * Optimize cosign tree performance by caching digest resolution (#4612)
  * Don't require a trusted root to verify offline with a key (#4613)
  * Support default services for trusted-root and signing-config creation (#4592)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4602)
  * chore(deps): bump github.com/sigstore/sigstore-go (#4578)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.114.1 to 3.115.2 (#4601)
  * chore(deps): bump google.golang.org/api from 0.257.0 to 0.258.0 (#4611)
  * chore(deps): bump k8s.io/client-go from 0.34.3 to 0.35.0 (#4604)
  * chore(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 (#4588)
  * chore(deps): bump golang.org/x/oauth2 from 0.33.0 to 0.34.0 (#4586)
  * chore(deps): bump the gomod group with 5 updates (#4599)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.10.1 to 1.12.1 (#4600)
  * chore(deps): bump golang.org/x/term from 0.37.0 to 0.38.0 (#4584)
  * chore(deps): bump the actions group with 3 updates (#4587)
  * chore(deps): bump actions/cache from 4.3.0 to 5.0.1 (#4589)
  * chore(deps): bump the gomod group with 9 updates (#4577)</changelog>
  <changelog author="meissner@suse.com" date="1771761600">- Update to version 3.0.5: (jsc#SLE-23879)
  * CVE-2026-24122: Fixed improper validation of certificates that
    outlive expired CA certificates (bsc#1258542)
  * CVE-2026-26958: Fixed filippo.io/edwards25519: failure to initialize
    receiver in MultiScalarMult can produce invalid results and lead to
    undefined behavior (bsc#1258612)
  * CVE-2026-24137: Fixed github.com/sigstore/sigstore/pkg/tuf: legacy
    TUF client allows for arbitrary file writes with target cache path
    traversal (bsc#1257139)
  * CVE-2026-22772: Fixed github.com/sigstore/fulcio: bypass MetaIssuer
    URL validation bypass can trigger SSRF to arbitrary internal services
    (bsc#1256562)
  * CVE-2026-23991: Fixed github.com/theupdateframework/go-tuf/v2: denial
    of service due to invalid TUF metadata JSON returned by TUF repository
    (bsc#1257080)
  * CVE-2026-23992: Fixed github.com/theupdateframework/go-tuf/v2:
    unauthorized modification to TUF metadata files due to a compromised
    or misconfigured TUF repository (bsc#1257085)
  * chore(deps): bump google.golang.org/api from 0.260.0 to 0.264.0 (#4679)
  * chore(deps): bump github.com/sigstore/rekor-tiles/v2 from 2.0.1 to 2.1.0 (#4670)
  * chore(deps): bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 (#4712)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4680)
  * chore(deps): bump the gomod group across 1 directory with 4 updates (#4702)
  * chore(deps): bump the actions group with 3 updates (#4703)
  * update golang builder to use go1.25.7 (#4687)
  * update golangci-lint to v2.8.x (#4688)
  * Fix typo in CLI help (#4701)
  * Support DSSE signing conformance test (#4685)
  * chore(deps): bump the actions group across 1 directory with 8 updates (#4689)
  * Deprecate rekor-entry-type flag (#4691)
  * Deprecate cosign triangulate (#4676)
  * Deprecate cosign copy (#4681)
  * Enforce TSA requirement for Rekor v2, Fuclio signing (#4683)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4668)
  * chore(deps): bump golang from 1.25.5 to 1.25.6 in the all group (#4673)
  * Automatically require signed timestamp with Rekor v2 entries (#4666)
  * Fix syntax issue in conformance test, update nightly (#4664)
  * Add mTLS support for TSA client connections when signing with a signing config (#4620)
  * fix: avoid panic on malformed tlog entry body (#4652)
  * Verify validity of chain rather than just certificate (#4663)
  * Allow --local-image with --new-bundle-format for v2 and v3 signatures (#4626)
  * chore(deps): bump the gomod group across 1 directory with 3 updates (#4662)
  * Bump sigstore/sigstore to resolve GHSA (#4660)
  * Gracefully fail if bundle payload body is not a string (#4648)
  * fix: avoid panic on malformed replace payload (#4653)
  * chore(deps): bump github.com/sigstore/rekor from 1.4.3 to 1.5.0 (#4659)
  * fix: avoid panic on malformed attestation payload (#4651)
  * fix: avoid panic on malformed tlog entries (#4649)
  * Update conformance to latest
  * docs(cosign): clarify RFC3161 revocation semantics (#4642)
  * Add empty predicate to cosign sign when payload type is application/vnd.in-toto+json (#4635)
  * chore(deps): bump github.com/sigstore/fulcio from 1.8.4 to 1.8.5 (#4637)
  * Add origin key for ctfe trusted root
  * Add changelog updates for v3.0.4 and v2.6.2 (#4625)</changelog>
</package>
<package pkgid="290e8e979ba377eb825957bbd2355bc2d4ecf016b5a14936e1bab23fa6900bfe" name="cosign-bash-completion" arch="noarch">
  <version epoch="0" ver="3.0.5" rel="150400.3.37.1"/>
  <changelog author="meissner@suse.com" date="1683460800">- update to 2.0.2 (jsc#SLE-23879)
  Enhancements
  - Update sigstore/sigstore to v1.6.2 to pick up TUF CDN change (#2891)
  - feat: Make cosign copy faster (#2901)
  - remove sget (#2885)
  - Require a payload to be provided with a signature (#2785)
  Bug Fixes
  - cmd: Change error message from KeyParseError to PubKeyParseError for verify-blob. (#2876)
  - Use SOURCE_DATE_EPOCH for OCI CreatedAt times (#2878)
  Documentation
  - Remove experimental warning from Fulcio flags (#2923)
  - add missing oidc provider (#2922)
  - Add zot as a supported registry (#2920)
  - deprecates kms_support docs (#2900)
  - chore(docs) deprecate note for usage docs (#2906)
  - adds note of deprecation for examples.md docs (#2899)</changelog>
  <changelog author="meissner@suse.com" date="1687867200">- updated to 2.1.1 (jsc#SLE-23879)
  - Bug Fixes
  - wait for the workers become available again to continue the execution (#3084)
  - fix help text when in a container (#3082)
- updated to 2.1.0 (jsc#SLE-23879)
  - Breaking Change: The predicate is now a required flag in the attest commands, set via the --type flag.
  - Enhancements
  - Verify sigs and attestations in parallel (#3066)
  - Deep inspect attestations when filtering download (#3031)
  - refactor bundle validation code, add support for DSSE rekor type (#3016)
  - Allow overriding remote options (#3049)
  - feat: adds no cert found on sig exit code (#3038)
  - Make predicate a required flag in attest commands (#3033)
  - Added support for attaching Time stamp authority Response in attach command (#3001)
  - Add sign --sign-container-identity CLI (#2984)
  - Feature: Allow cosign to sign digests before they are uploaded. (#2959)
  - accepts attachment-tag-prefix for cosign copy (#3014)
  - Feature: adds '--allow-insecure-registry' for cosign load (#3000)
  - download attestation: support --platform flag (#2980)
  - Cleanup: Add Digest to the SignedEntity interface. (#2960)
  - verify command: support keyless verification using only a provided certificate chain with non-fulcio roots (#2845)
  - verify: use workers to limit the paralellism when verifying images with --max-workers flag (#3069)
  - Bug Fixes
  - Fix pkg/cosign/errors (#3050)
  - Fix: update doc to refer to github-actions oidc provider (#3040)
  - Fix: prefer GitHub OIDC provider if enabled (#3044)
  - Fix --sig-only in cosign copy (#3074)
  - Documentation
  - Fix links to sigstore/docs in markdown files (#3064)</changelog>
  <changelog author="meissner@suse.com" date="1693569600">- updated to 2.2.0 (jsc#SLE-23879)
  - Enhancements
  * switch to uploading DSSE types to rekor instead of intoto (#3113)
  * add 'cosign sign' command-line parameters for mTLS (#3052)
  * improve error messages around bundle != payload hash (#3146)
  * make VerifyImageAttestation function public (#3156)
  * Switch to cryptoutils function for SANS (#3185)
  * Handle HTTP_1_1_REQUIRED errors in github provider (#3172)
  - Bug Fixes
  * Fix nondeterminsitic timestamps (#3121)
  - Documentation
  * doc: Add example of sign-blob with key in env var (#3152)
  * add deprecation notice for cosign-releases GCS bucket (#3148)
  * update doc links (#3186)</changelog>
  <changelog author="meissner@suse.com" date="1699358400">- updated to 2.2.1 (jsc#SLE-23879)
  This release comes with a fix for
  CVE-2023-46737 / bsc#1216933 described in this [Github Security
  Advisory](https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9).
  Enhancements:
  * feat: Support basic auth and bearer auth login to registry (#3310)
  * add support for ignoring certificates with pkcs11 (#3334)
  * Support ReplaceOp in Signatures (#3315)
  * feat: added ability to get image digest back via triangulate (#3255)
  * feat: add `--only` flag in `cosign copy` to copy sign, att &amp; sbom (#3247)
  * feat: add support attaching a Rekor bundle to a container (#3246)
  * feat: add support outputting rekor response on signing (#3248)
  * feat: improve dockerfile verify subcommand (#3264)
  * Add guard flag for experimental OCI 1.1 verify. (#3272)
  * Deprecate SBOM attachments (#3256)
  * feat: dedent line in cosign copy doc (#3244)
  * feat: add platform flag to cosign copy command (#3234)
  * Add SLSA 1.0 attestation support to cosign. Closes #2860 (#3219)
  * attest: pass OCI remote opts to att resolver. (#3225)
  Bug Fixes:
  * Merge pull request from GHSA-vfp6-jrw2-99g9
  * fix: allow cosign download sbom when image is absent (#3245)
  * ci: add a OCI registry test for referrers support (#3253)
  * Fix ReplaceSignatures (#3292)
  * Stop using deprecated in_toto.ProvenanceStatement (#3243)
  * Fixes #3236, disable SCT checking for a cosign verification when usin… (#3237)
  * fix: update error in `SignedEntity` to be more descriptive (#3233)
  * Fail timestamp verification if no root is provided (#3224)
  Documentation:
  * Add some docs about verifying in an air-gapped environment (#3321)
  * Update CONTRIBUTING.md (#3268)
  * docs: improves the Contribution guidelines (#3257)
  * Remove security policy (#3230)
  Others:
  * Set go to min 1.21 and update dependencies  (#3327)
  * Update contact for code of conduct (#3266)
  * Update .ko.yaml (#3240)</changelog>
  <changelog author="marcos.bjoerkelund@suse.com" date="1702382400">- updated to 2.2.2 (jsc#SLE-23879)
  v2.2.2 adds a new container with a shell,
  gcr.io/projectsigstore/cosign:vx.y.z-dev, in addition to the existing
  container gcr.io/projectsigstore/cosign:vx.y.z without a shell.
  For private deployments, we have also added an alias for
  - -insecure-skip-log, --private-infrastructure.
  Bug Fixes:
  * chore(deps): bump github.com/sigstore/sigstore from 1.7.5 to 1.7.6 (#3411) which fixes a bug with using Azure KMS
  * Don't require CT log keys if using a key/sk (#3415)
  * Fix copy without any flag set (#3409)
  * Update cosign generate cmd to not include newline (#3393)
  * Fix idempotency error with signing (#3371)
  Features:
  * Add --yes flag cosign import-key-pair to skip the overwrite confirmation. (#3383)
  * Use the timeout flag value in verify* commands. (#3391)
  * add --private-infrastructure flag (#3369)
  Container Updates:
  * Bump builder image to use go1.21.4 and add new cosign image tags with shell (#3373)
  Documentation:
  * Update SBOM_SPEC.md (#3358)</changelog>
  <changelog author="meissner@suse.com" date="1706875200">- updated to 2.2.3 (jsc#SLE-23879)
  Bug Fixes:
  * Fix race condition on verification with multiple signatures attached to image (#3486)
  * fix(clean): Fix clean cmd for private registries (#3446)
  * Fixed BYO PKI verification (#3427)
  Features:
  * Allow for option in cosign attest and attest-blob to upload attestation as supported in Rekor (#3466)
  * Add support for OpenVEX predicate type (#3405)
  Documentation:
  * Resolves #3088: `version` sub-command expected behaviour documentation and testing (#3447)
  * add examples for cosign attach signature cmd (#3468)
  Misc:
  * Remove CertSubject function (#3467)
  * Use local rekor and fulcio instances in e2e tests (#3478)
- bumped embedded golang.org/x/crypto/ssh to fix the Terrapin attack CVE-2023-48795 (bsc#1218207)</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- updated to 2.2.4 (jsc#SLE-23879)
  * Bug Fixes
  * Fixes for GHSA-88jx-383q-w4qc and GHSA-95pr-fxf5-86gv (#3661)
  - CVE-2024-29902: Malicious attachments can cause system-wide denial of service (bsc#1222835)
  - CVE-2024-29903: Malicious artifects can cause machine-wide denial of service (bsc#1222837)
  * ErrNoSignaturesFound should be used when there is no signature attached to an image. (#3526)
  * fix semgrep issues for dgryski.semgrep-go ruleset (#3541)
  * Honor creation timestamp for signatures again (#3549)
  * Features
  * Adds Support for Fulcio Client Credentials Flow, and Argument to Set Flow Explicitly (#3578)
  * Documentation
  * add oci bundle spec (#3622)
  * Correct help text of triangulate cmd (#3551)
  * Correct help text of verify-attestation policy argument (#3527)
  * feat: add OVHcloud MPR registry tested with cosign (#3639)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1717156800">- add completion subpackages (bash, fish, zsh)</changelog>
  <changelog author="meissner@suse.com" date="1721822400">- update to 2.3.0 (jsc#SLE-23879)
  * Features
  - Add PayloadProvider interface to decouple AttestationToPayloadJSON from oci.Signature interface (#3693)
  - add registry options to cosign save (#3645)
  - Add debug providers command. (#3728)
  - Make config layers in ociremote mountable (#3741)
  - adds tsa cert chain check for env var or tuf targets. (#3600)
  - add --ca-roots and --ca-intermediates flags to 'cosign verify' (#3464)
  - add handling of keyless verification for all verify commands (#3761)
  * Bug Fixes
  - fix: close attestationFile (#3679)
  - Set bundleVerified to true after Rekor verification (Resolves #3740) (#3745)
  * Documentation
  - Document ImportKeyPair and LoadPrivateKey functions in pkg/cosign (#3776)</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1724155200">- Set CGO_ENABLED=1 for fixing s390x failed build</changelog>
  <changelog author="meissner@suse.com" date="1727870400">- update to 2.4.0 (jsc#SLE-23879)
  - Add new bundle support to verify-blob and verify-blob-attestation (#3796)
  - Adding protobuf bundle support to sign-blob and attest-blob (#3752)
  - Bump sigstore/sigstore to support email_verified as string or boolean (#3819)
  - Conformance testing for cosign (#3806)
  - move incremental builds per commit to GHCR instead of GCR (#3808)
  - Add support for recording creation timestamp for cosign attest (#3797)
  - Include SCT verification failure details in error message (#3799)</changelog>
  <changelog author="meissner@suse.com" date="1738756800">- Update to version 2.4.2:
  - Updated open-policy-agent to 1.1.0 library (#4036)
  - Note that only Rego v0 policies are supported at this time
  - Add UseSignedTimestamps to CheckOpts, refactor TSA options (#4006)
  - Add support for verifying root checksum in cosign initialize (#3953)
  - Detect if user supplied a valid protobuf bundle (#3931)
  - Add a log message if user doesn't provide --trusted-root (#3933)
  - Support mTLS towards container registry (#3922)
  - Add bundle create helper command (#3901)
  - Add trusted-root create helper command (#3876)
  Bug Fixes:
  - fix: set tls config while retaining other fields from default http transport (#4007)
  - policy fuzzer: ignore known panics (#3993)
  - Fix for multiple WithRemote options (#3982)
  - Add nightly conformance test workflow (#3979)
  - Fix copy --only for signatures + update/align docs (#3904)
- use "osc service mr" to update</changelog>
  <changelog author="meissner@suse.com" date="1740052800">- Update to version 2.4.3:
  * Enable fetching signatures without remote get. (#4047)
  * Bump sigstore/sigstore to support KMS plugins (#4073)
  * sort properly Go imports (#4071)
  * sync comment with parameter name in function signature (#4063)
  * fix go imports order to be alphabetical (#4062)
  * fix comment typo and imports order (#4061)
  * Feat/file flag completion improvements (#4028)
  * Udpate builder to use go1.23.6 (#4052)
  * Refactor verifyNewBundle into library function (#4013)
  * fix parsing error in --only for cosign copy (#4049)
  * Fix codeowners syntax, add dep-maintainers (#4046)</changelog>
  <changelog author="meissner@suse.com" date="1744545600">- Update to version 2.5.0:
  * Update sigstore-go to pick up bug fixes (#4150)
  * Update golangci-lint to v2, update golangci-lint-action (#4143)
  * Feat/non filename completions (#4115)
  * update builder to use go1.24.1 (#4116)
  * Add support for new bundle specification for attesting/verifying OCI image attestations (#3889)
  * Remove cert log line (#4113)
  * cmd/cosign/cli: fix typo in ignoreTLogMessage (#4111)
  * bump to latest scaffolding release for testing (#4099)
  * increase 2e2_test docker compose tiemout to 180s (#4091)
  * Fix replace with compliant image mediatype (#4077)
  * Add TSA certificate related flags and fields for cosign attest (#4079)
- Security issues fixed:
  - CVE-2024-6104: cosign: hashicorp/go-retryablehttp: url might write sensitive information to log file (bsc#1227031)
  - CVE-2024-51744: cosign: github.com/golang-jwt/jwt/v4: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt (bsc#1232985)
  - CVE-2025-27144: cosign: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: Go JOSE's Parsing Vulnerable to Denial of Service (bsc#1237682)
  - CVE-2025-22870: cosign: golang.org/x/net/proxy: proxy bypass using IPv6 zone IDs (bsc#1238693)
  - CVE-2025-22868: cosign: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239204)
  - CVE-2025-22869: cosign: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239337)</changelog>
  <changelog author="meissner@suse.com" date="1748433600">- switch to go1.24, enable fips build</changelog>
  <changelog author="meissner@suse.com" date="1752840000">- Update to version 2.5.3 (jsc#SLE-23879)
  - Add signing-config create command (#4280)
  - Allow multiple services to be specified for trusted-root create (#4285)
  - force when copying the latest image to overwrite (#4298)
  - Fix cert verification logic for trusted-root/SCTs (#4294)
  - Fix lint error for types package (#4295)
  - feat: Add OCI 1.1+ experimental support to tree (#4205)
  - Add validity period end for trusted-root create (#4271)
  - avoid double-loading trustedroot from file (#4264)
- Update to 2.5.2:
  - Do not load trusted root when CT env key is set
  - docs: improve doc for --no-upload option (#4206)
- Update to 2.5.1:
  * Features
  - Add Rekor v2 support for trusted-root create (#4242)
  - Add baseUrl and Uri to trusted-root create command
  - Upgrade to TUF v2 client with trusted root
  - Don't verify SCT for a private PKI cert (#4225)
  - Bump TSA library to relax EKU chain validation rules (#4219)
  * Bug Fixes
  - Bump sigstore-go to pick up log index=0 fix (#4162)
  - remove unused recursive flag on attest command (#4187)
  * Docs
  - Fix indentation in verify-blob cmd examples (#4160)
  * GO-2025-3660/ CVE-2025-46569: Fixed OPA server Data API HTTP path injection of Rego (bsc#1246725)</changelog>
  <changelog author="meissner@suse.com" date="1758196800">- Update to version 2.6.0:
  - Require exclusively a SigningConfig or service URLs when signing (#4403)
  - Add a terminal spinner while signing with sigstore-go (#4402)
  - Bump sigstore-go, support alternative hash algorithms with keys (#4386)
  - Add support for SigningConfig in sign/attest (#4371)
  - Support self-managed keys when signing with sigstore-go (#4368)
  - Remove SHA256 assumption in sign-blob/verify-blob (#4050)
  - introduce dockerfile to pin the go version to decouple go version from go.mod (#4369)
  - refactor: extract function to write referrer attestations (#4357)
  - Break import cycle with e2e build tag (#4370)
  - Update conformance test binary for signing config (#4367)
  - update builder image to use go1.25 (#4366)
  - Don't load content from TUF if trusted root path is specified (#4347)
  - Don't require timestamps when verifying with a key (#4337)
  - Fixes to cosign sign / verify for the new bundle format (#4346)
  - update builder to use go1.24.6 (#4334)
  - bump golangci-lint to v2.3.x (#4333)
  - Have cosign sign support bundle format (#4316)
  - Add support for SigningConfig for sign-blob/attest-blob, support Rekor v2 (#4319)
  - Verify subject with bundle only when checking claims (#4320)
  - Add to `attest-blob` the ability to supply a complete in-toto statement, and add to `verify-blob-attestation` the ability to verify with just a digest (#4306)</changelog>
  <changelog author="meissner@suse.com" date="1765368000">- Update to version 3.0.3:
  * 4554: Closes 4554 - Add warning when --output* is used (#4556)
  * chore(deps): bump golangci/golangci-lint-action from 8.0.0 to 9.1.0 (#4545)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.111.0 to 3.113.0 (#4542)
  * chore(deps): bump github.com/awslabs/amazon-ecr-credential-helper/ecr-login (#4543)
  * chore(deps): bump actions/checkout from 5.0.0 to 6.0.0 (#4546)
  * chore(deps): bump the actions group with 4 updates (#4544)
  * chore(deps): bump the gomod group across 1 directory with 5 updates (#4567)
  * chore(deps): bump golang from 1.25.4 to 1.25.5 in the all group (#4568)
  * update builder to use go1.25.5 (#4566)
  * Protobuf bundle support for subcommand `clean` (#4539)
  * Add staging flag to initialize with staging TUF metadata
  * update slack invite link (#4560)
  * Updating sign-blob to also support signing with a certificate (#4547)
  * Bump sigstore library dependencies (#4532)
  * Protobuf bundle support for subcommands `save` and `load` (#4538)
  * Fix cert attachment for new bundle with signing config
  * Fix OCI verification with local cert - old bundle
  * chore(deps): bump github.com/sigstore/fulcio from 1.7.1 to 1.8.1 (#4519)
  * chore(deps): bump golang.org/x/crypto in /test/fakeoidc (#4535)
  * chore(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0 (#4536)
  * CVE-2025-58181: Fixed golang.org/x/crypto/ssh: invalidated number
    of mechanisms can cause unbounded memory consumption (bsc#1253913)
  * update go builder and cosign (#4529)
  * chore(deps): bump the gomod group across 1 directory with 7 updates (#4528)
  * chore(deps): bump sigstore/cosign-installer from 3.10.0 to 4.0.0 (#4478)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4520)
  * chore(deps): bump golang from 1.25.3 to 1.25.4 in the all group (#4515)
  * chore(deps): bump golang.org/x/oauth2 from 0.32.0 to 0.33.0 (#4518)
  * chore(deps): bump cuelang.org/go from 0.14.2 to 0.15.0 (#4524)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.9.0 to 1.10.1 (#4521)
  * chore(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 (#4502)
  * chore(deps): bump the actions group across 1 directory with 2 updates (#4516)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.110.0 to 3.111.0 (#4523)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4522)
  * Deprecate tlog-upload flag (#4458)
  * fix: Use signal context for `sign` cli package.
  * update offline verification directions (#4526)
  * Fix signing/verifying annotations for new bundle
  * Add support to download and attach for protobuf bundles (#4477)
  * Add --signing-algorithm flag (#3497)
  * Refactor signcommon bundle helpers
  * Add --bundle and fix --upload for new bundle
  * Pass insecure registry flags through to referrers
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.108.0 to 3.109.1 (#4483)
  * Add protobuf bundle support for tree subcommand (#4491)
  * Remove stale embed import (#4492)
  * Support multiple container identities
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4484)
  * chore(deps): bump chainguard-dev/actions in the actions group (#4480)
  * chore(deps): bump github.com/sigstore/rekor-tiles/v2 (#4485)
  * chore(deps): bump golang.org/x/crypto from 0.42.0 to 0.43.0 (#4486)
  * chore(deps): bump cuelang.org/go in the gomod group (#4479)
  * upgrade OSS-Fuzz build tooling (#4487)
  * Fix segfault when no attestations are found (#4472)
  * Use overridden repository for new bundle format (#4473)
  * update go to 1.25.3 (#4471)
  * Remove --out flag from `cosign initialize` (#4462)
  * chore(deps): bump the actions group with 2 updates (#4460)
  * Deprecate offline flag (#4457)
  * Deduplicate code in sign/attest* and verify* commands (#4449)
  * Cache signing config when calling initialize (#4456)
  * Update changelog for v3.0.2 (#4455)
  * chore(deps): bump google.golang.org/api from 0.250.0 to 0.251.0
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go
  * chore(deps): bump the actions group with 3 updates
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.107.2 to 3.108.0
  * choose different signature filename for KMS-signed release signatures (#4448)
  * chore(deps): bump github.com/go-jose/go-jose/v4 (#4451)
  * Update rekor-tiles version path
  * update CL for v3.0.1 release (#4447)
  * update goreleaser config for v3.0.0 release (#4446)
  * Create changelog for v3.0.0 (#4440)
  * Fetch service URLs from the TUF PGI signing config by default (#4428)
  * Create changelog for v2.6.1 (#4439)
  * chore(deps): bump google.golang.org/api from 0.249.0 to 0.250.0 (#4432)
  * chore(deps): bump the gomod group with 2 updates (#4429)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.8.0 to 1.9.0 (#4433)
  * chore(deps): bump the actions group with 3 updates (#4434)
  * chore(deps): bump github.com/go-openapi/swag from 0.24.1 to 0.25.1 (#4435)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4436)
  * chore(deps): bump github.com/go-openapi/runtime from 0.28.0 to 0.29.0 (#4437)
  * Bump module version to v3 for Cosign v3.0 (#4427)
  * Move sigstore-conformance back to tagged release (#4425)
  * Bump sigstore-go to v1.1.3 (#4423)
  * Partially populate the output of cosign verify when working with new bundles (#4416)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4419)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4418)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.105.0 to 3.107.0 (#4420)
  * chore(deps): bump chainguard-dev/actions in the actions group (#4421)
  * bump go builder to use 1.25.1 and cosign (#4417)
  * Bump sigstore-go for more precise user agents (#4413)
  * chore(deps): bump github.com/spf13/viper from 1.20.1 to 1.21.0 (#4408)
  * chore(deps): bump the actions group with 2 updates (#4407)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4410)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.104.0 to 3.105.0 (#4411)
  * Default to using the new protobuf format (#4318)</changelog>
  <changelog author="meissner@suse.com" date="1770811200">- Update to version 3.0.4:
  * CVE-2025-11065: Fixed github.com/go-viper/mapstructure/v2: sensitive
    Information leak in logs (bsc#1250620)
  * CVE-2026-22703: Fixed that cosign verification accepts any valid
    Rekor entry under certain conditions (bsc#1256496)
  * Fix bundle verify path for old bundle/trusted root (#4623)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4616)
  * chore(deps): bump cuelang.org/go in the gomod group (#4615)
  * Optimize cosign tree performance by caching digest resolution (#4612)
  * Don't require a trusted root to verify offline with a key (#4613)
  * Support default services for trusted-root and signing-config creation (#4592)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4602)
  * chore(deps): bump github.com/sigstore/sigstore-go (#4578)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.114.1 to 3.115.2 (#4601)
  * chore(deps): bump google.golang.org/api from 0.257.0 to 0.258.0 (#4611)
  * chore(deps): bump k8s.io/client-go from 0.34.3 to 0.35.0 (#4604)
  * chore(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 (#4588)
  * chore(deps): bump golang.org/x/oauth2 from 0.33.0 to 0.34.0 (#4586)
  * chore(deps): bump the gomod group with 5 updates (#4599)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.10.1 to 1.12.1 (#4600)
  * chore(deps): bump golang.org/x/term from 0.37.0 to 0.38.0 (#4584)
  * chore(deps): bump the actions group with 3 updates (#4587)
  * chore(deps): bump actions/cache from 4.3.0 to 5.0.1 (#4589)
  * chore(deps): bump the gomod group with 9 updates (#4577)</changelog>
  <changelog author="meissner@suse.com" date="1771761600">- Update to version 3.0.5: (jsc#SLE-23879)
  * CVE-2026-24122: Fixed improper validation of certificates that
    outlive expired CA certificates (bsc#1258542)
  * CVE-2026-26958: Fixed filippo.io/edwards25519: failure to initialize
    receiver in MultiScalarMult can produce invalid results and lead to
    undefined behavior (bsc#1258612)
  * CVE-2026-24137: Fixed github.com/sigstore/sigstore/pkg/tuf: legacy
    TUF client allows for arbitrary file writes with target cache path
    traversal (bsc#1257139)
  * CVE-2026-22772: Fixed github.com/sigstore/fulcio: bypass MetaIssuer
    URL validation bypass can trigger SSRF to arbitrary internal services
    (bsc#1256562)
  * CVE-2026-23991: Fixed github.com/theupdateframework/go-tuf/v2: denial
    of service due to invalid TUF metadata JSON returned by TUF repository
    (bsc#1257080)
  * CVE-2026-23992: Fixed github.com/theupdateframework/go-tuf/v2:
    unauthorized modification to TUF metadata files due to a compromised
    or misconfigured TUF repository (bsc#1257085)
  * chore(deps): bump google.golang.org/api from 0.260.0 to 0.264.0 (#4679)
  * chore(deps): bump github.com/sigstore/rekor-tiles/v2 from 2.0.1 to 2.1.0 (#4670)
  * chore(deps): bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 (#4712)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4680)
  * chore(deps): bump the gomod group across 1 directory with 4 updates (#4702)
  * chore(deps): bump the actions group with 3 updates (#4703)
  * update golang builder to use go1.25.7 (#4687)
  * update golangci-lint to v2.8.x (#4688)
  * Fix typo in CLI help (#4701)
  * Support DSSE signing conformance test (#4685)
  * chore(deps): bump the actions group across 1 directory with 8 updates (#4689)
  * Deprecate rekor-entry-type flag (#4691)
  * Deprecate cosign triangulate (#4676)
  * Deprecate cosign copy (#4681)
  * Enforce TSA requirement for Rekor v2, Fuclio signing (#4683)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4668)
  * chore(deps): bump golang from 1.25.5 to 1.25.6 in the all group (#4673)
  * Automatically require signed timestamp with Rekor v2 entries (#4666)
  * Fix syntax issue in conformance test, update nightly (#4664)
  * Add mTLS support for TSA client connections when signing with a signing config (#4620)
  * fix: avoid panic on malformed tlog entry body (#4652)
  * Verify validity of chain rather than just certificate (#4663)
  * Allow --local-image with --new-bundle-format for v2 and v3 signatures (#4626)
  * chore(deps): bump the gomod group across 1 directory with 3 updates (#4662)
  * Bump sigstore/sigstore to resolve GHSA (#4660)
  * Gracefully fail if bundle payload body is not a string (#4648)
  * fix: avoid panic on malformed replace payload (#4653)
  * chore(deps): bump github.com/sigstore/rekor from 1.4.3 to 1.5.0 (#4659)
  * fix: avoid panic on malformed attestation payload (#4651)
  * fix: avoid panic on malformed tlog entries (#4649)
  * Update conformance to latest
  * docs(cosign): clarify RFC3161 revocation semantics (#4642)
  * Add empty predicate to cosign sign when payload type is application/vnd.in-toto+json (#4635)
  * chore(deps): bump github.com/sigstore/fulcio from 1.8.4 to 1.8.5 (#4637)
  * Add origin key for ctfe trusted root
  * Add changelog updates for v3.0.4 and v2.6.2 (#4625)</changelog>
</package>
<package pkgid="913d0c09897e4ed480b458bdea34f8821a83637675bc0f87298d71136c564fe1" name="cosign-bash-completion" arch="noarch">
  <version epoch="0" ver="3.0.5" rel="150400.3.39.1"/>
  <changelog author="meissner@suse.com" date="1683460800">- update to 2.0.2 (jsc#SLE-23879)
  Enhancements
  - Update sigstore/sigstore to v1.6.2 to pick up TUF CDN change (#2891)
  - feat: Make cosign copy faster (#2901)
  - remove sget (#2885)
  - Require a payload to be provided with a signature (#2785)
  Bug Fixes
  - cmd: Change error message from KeyParseError to PubKeyParseError for verify-blob. (#2876)
  - Use SOURCE_DATE_EPOCH for OCI CreatedAt times (#2878)
  Documentation
  - Remove experimental warning from Fulcio flags (#2923)
  - add missing oidc provider (#2922)
  - Add zot as a supported registry (#2920)
  - deprecates kms_support docs (#2900)
  - chore(docs) deprecate note for usage docs (#2906)
  - adds note of deprecation for examples.md docs (#2899)</changelog>
  <changelog author="meissner@suse.com" date="1687867200">- updated to 2.1.1 (jsc#SLE-23879)
  - Bug Fixes
  - wait for the workers become available again to continue the execution (#3084)
  - fix help text when in a container (#3082)
- updated to 2.1.0 (jsc#SLE-23879)
  - Breaking Change: The predicate is now a required flag in the attest commands, set via the --type flag.
  - Enhancements
  - Verify sigs and attestations in parallel (#3066)
  - Deep inspect attestations when filtering download (#3031)
  - refactor bundle validation code, add support for DSSE rekor type (#3016)
  - Allow overriding remote options (#3049)
  - feat: adds no cert found on sig exit code (#3038)
  - Make predicate a required flag in attest commands (#3033)
  - Added support for attaching Time stamp authority Response in attach command (#3001)
  - Add sign --sign-container-identity CLI (#2984)
  - Feature: Allow cosign to sign digests before they are uploaded. (#2959)
  - accepts attachment-tag-prefix for cosign copy (#3014)
  - Feature: adds '--allow-insecure-registry' for cosign load (#3000)
  - download attestation: support --platform flag (#2980)
  - Cleanup: Add Digest to the SignedEntity interface. (#2960)
  - verify command: support keyless verification using only a provided certificate chain with non-fulcio roots (#2845)
  - verify: use workers to limit the paralellism when verifying images with --max-workers flag (#3069)
  - Bug Fixes
  - Fix pkg/cosign/errors (#3050)
  - Fix: update doc to refer to github-actions oidc provider (#3040)
  - Fix: prefer GitHub OIDC provider if enabled (#3044)
  - Fix --sig-only in cosign copy (#3074)
  - Documentation
  - Fix links to sigstore/docs in markdown files (#3064)</changelog>
  <changelog author="meissner@suse.com" date="1693569600">- updated to 2.2.0 (jsc#SLE-23879)
  - Enhancements
  * switch to uploading DSSE types to rekor instead of intoto (#3113)
  * add 'cosign sign' command-line parameters for mTLS (#3052)
  * improve error messages around bundle != payload hash (#3146)
  * make VerifyImageAttestation function public (#3156)
  * Switch to cryptoutils function for SANS (#3185)
  * Handle HTTP_1_1_REQUIRED errors in github provider (#3172)
  - Bug Fixes
  * Fix nondeterminsitic timestamps (#3121)
  - Documentation
  * doc: Add example of sign-blob with key in env var (#3152)
  * add deprecation notice for cosign-releases GCS bucket (#3148)
  * update doc links (#3186)</changelog>
  <changelog author="meissner@suse.com" date="1699358400">- updated to 2.2.1 (jsc#SLE-23879)
  This release comes with a fix for
  CVE-2023-46737 / bsc#1216933 described in this [Github Security
  Advisory](https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9).
  Enhancements:
  * feat: Support basic auth and bearer auth login to registry (#3310)
  * add support for ignoring certificates with pkcs11 (#3334)
  * Support ReplaceOp in Signatures (#3315)
  * feat: added ability to get image digest back via triangulate (#3255)
  * feat: add `--only` flag in `cosign copy` to copy sign, att &amp; sbom (#3247)
  * feat: add support attaching a Rekor bundle to a container (#3246)
  * feat: add support outputting rekor response on signing (#3248)
  * feat: improve dockerfile verify subcommand (#3264)
  * Add guard flag for experimental OCI 1.1 verify. (#3272)
  * Deprecate SBOM attachments (#3256)
  * feat: dedent line in cosign copy doc (#3244)
  * feat: add platform flag to cosign copy command (#3234)
  * Add SLSA 1.0 attestation support to cosign. Closes #2860 (#3219)
  * attest: pass OCI remote opts to att resolver. (#3225)
  Bug Fixes:
  * Merge pull request from GHSA-vfp6-jrw2-99g9
  * fix: allow cosign download sbom when image is absent (#3245)
  * ci: add a OCI registry test for referrers support (#3253)
  * Fix ReplaceSignatures (#3292)
  * Stop using deprecated in_toto.ProvenanceStatement (#3243)
  * Fixes #3236, disable SCT checking for a cosign verification when usin… (#3237)
  * fix: update error in `SignedEntity` to be more descriptive (#3233)
  * Fail timestamp verification if no root is provided (#3224)
  Documentation:
  * Add some docs about verifying in an air-gapped environment (#3321)
  * Update CONTRIBUTING.md (#3268)
  * docs: improves the Contribution guidelines (#3257)
  * Remove security policy (#3230)
  Others:
  * Set go to min 1.21 and update dependencies  (#3327)
  * Update contact for code of conduct (#3266)
  * Update .ko.yaml (#3240)</changelog>
  <changelog author="marcos.bjoerkelund@suse.com" date="1702382400">- updated to 2.2.2 (jsc#SLE-23879)
  v2.2.2 adds a new container with a shell,
  gcr.io/projectsigstore/cosign:vx.y.z-dev, in addition to the existing
  container gcr.io/projectsigstore/cosign:vx.y.z without a shell.
  For private deployments, we have also added an alias for
  - -insecure-skip-log, --private-infrastructure.
  Bug Fixes:
  * chore(deps): bump github.com/sigstore/sigstore from 1.7.5 to 1.7.6 (#3411) which fixes a bug with using Azure KMS
  * Don't require CT log keys if using a key/sk (#3415)
  * Fix copy without any flag set (#3409)
  * Update cosign generate cmd to not include newline (#3393)
  * Fix idempotency error with signing (#3371)
  Features:
  * Add --yes flag cosign import-key-pair to skip the overwrite confirmation. (#3383)
  * Use the timeout flag value in verify* commands. (#3391)
  * add --private-infrastructure flag (#3369)
  Container Updates:
  * Bump builder image to use go1.21.4 and add new cosign image tags with shell (#3373)
  Documentation:
  * Update SBOM_SPEC.md (#3358)</changelog>
  <changelog author="meissner@suse.com" date="1706875200">- updated to 2.2.3 (jsc#SLE-23879)
  Bug Fixes:
  * Fix race condition on verification with multiple signatures attached to image (#3486)
  * fix(clean): Fix clean cmd for private registries (#3446)
  * Fixed BYO PKI verification (#3427)
  Features:
  * Allow for option in cosign attest and attest-blob to upload attestation as supported in Rekor (#3466)
  * Add support for OpenVEX predicate type (#3405)
  Documentation:
  * Resolves #3088: `version` sub-command expected behaviour documentation and testing (#3447)
  * add examples for cosign attach signature cmd (#3468)
  Misc:
  * Remove CertSubject function (#3467)
  * Use local rekor and fulcio instances in e2e tests (#3478)
- bumped embedded golang.org/x/crypto/ssh to fix the Terrapin attack CVE-2023-48795 (bsc#1218207)</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- updated to 2.2.4 (jsc#SLE-23879)
  * Bug Fixes
  * Fixes for GHSA-88jx-383q-w4qc and GHSA-95pr-fxf5-86gv (#3661)
  - CVE-2024-29902: Malicious attachments can cause system-wide denial of service (bsc#1222835)
  - CVE-2024-29903: Malicious artifects can cause machine-wide denial of service (bsc#1222837)
  * ErrNoSignaturesFound should be used when there is no signature attached to an image. (#3526)
  * fix semgrep issues for dgryski.semgrep-go ruleset (#3541)
  * Honor creation timestamp for signatures again (#3549)
  * Features
  * Adds Support for Fulcio Client Credentials Flow, and Argument to Set Flow Explicitly (#3578)
  * Documentation
  * add oci bundle spec (#3622)
  * Correct help text of triangulate cmd (#3551)
  * Correct help text of verify-attestation policy argument (#3527)
  * feat: add OVHcloud MPR registry tested with cosign (#3639)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1717156800">- add completion subpackages (bash, fish, zsh)</changelog>
  <changelog author="meissner@suse.com" date="1721822400">- update to 2.3.0 (jsc#SLE-23879)
  * Features
  - Add PayloadProvider interface to decouple AttestationToPayloadJSON from oci.Signature interface (#3693)
  - add registry options to cosign save (#3645)
  - Add debug providers command. (#3728)
  - Make config layers in ociremote mountable (#3741)
  - adds tsa cert chain check for env var or tuf targets. (#3600)
  - add --ca-roots and --ca-intermediates flags to 'cosign verify' (#3464)
  - add handling of keyless verification for all verify commands (#3761)
  * Bug Fixes
  - fix: close attestationFile (#3679)
  - Set bundleVerified to true after Rekor verification (Resolves #3740) (#3745)
  * Documentation
  - Document ImportKeyPair and LoadPrivateKey functions in pkg/cosign (#3776)</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1724155200">- Set CGO_ENABLED=1 for fixing s390x failed build</changelog>
  <changelog author="meissner@suse.com" date="1727870400">- update to 2.4.0 (jsc#SLE-23879)
  - Add new bundle support to verify-blob and verify-blob-attestation (#3796)
  - Adding protobuf bundle support to sign-blob and attest-blob (#3752)
  - Bump sigstore/sigstore to support email_verified as string or boolean (#3819)
  - Conformance testing for cosign (#3806)
  - move incremental builds per commit to GHCR instead of GCR (#3808)
  - Add support for recording creation timestamp for cosign attest (#3797)
  - Include SCT verification failure details in error message (#3799)</changelog>
  <changelog author="meissner@suse.com" date="1738756800">- Update to version 2.4.2:
  - Updated open-policy-agent to 1.1.0 library (#4036)
  - Note that only Rego v0 policies are supported at this time
  - Add UseSignedTimestamps to CheckOpts, refactor TSA options (#4006)
  - Add support for verifying root checksum in cosign initialize (#3953)
  - Detect if user supplied a valid protobuf bundle (#3931)
  - Add a log message if user doesn't provide --trusted-root (#3933)
  - Support mTLS towards container registry (#3922)
  - Add bundle create helper command (#3901)
  - Add trusted-root create helper command (#3876)
  Bug Fixes:
  - fix: set tls config while retaining other fields from default http transport (#4007)
  - policy fuzzer: ignore known panics (#3993)
  - Fix for multiple WithRemote options (#3982)
  - Add nightly conformance test workflow (#3979)
  - Fix copy --only for signatures + update/align docs (#3904)
- use "osc service mr" to update</changelog>
  <changelog author="meissner@suse.com" date="1740052800">- Update to version 2.4.3:
  * Enable fetching signatures without remote get. (#4047)
  * Bump sigstore/sigstore to support KMS plugins (#4073)
  * sort properly Go imports (#4071)
  * sync comment with parameter name in function signature (#4063)
  * fix go imports order to be alphabetical (#4062)
  * fix comment typo and imports order (#4061)
  * Feat/file flag completion improvements (#4028)
  * Udpate builder to use go1.23.6 (#4052)
  * Refactor verifyNewBundle into library function (#4013)
  * fix parsing error in --only for cosign copy (#4049)
  * Fix codeowners syntax, add dep-maintainers (#4046)</changelog>
  <changelog author="meissner@suse.com" date="1744545600">- Update to version 2.5.0:
  * Update sigstore-go to pick up bug fixes (#4150)
  * Update golangci-lint to v2, update golangci-lint-action (#4143)
  * Feat/non filename completions (#4115)
  * update builder to use go1.24.1 (#4116)
  * Add support for new bundle specification for attesting/verifying OCI image attestations (#3889)
  * Remove cert log line (#4113)
  * cmd/cosign/cli: fix typo in ignoreTLogMessage (#4111)
  * bump to latest scaffolding release for testing (#4099)
  * increase 2e2_test docker compose tiemout to 180s (#4091)
  * Fix replace with compliant image mediatype (#4077)
  * Add TSA certificate related flags and fields for cosign attest (#4079)
- Security issues fixed:
  - CVE-2024-6104: cosign: hashicorp/go-retryablehttp: url might write sensitive information to log file (bsc#1227031)
  - CVE-2024-51744: cosign: github.com/golang-jwt/jwt/v4: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt (bsc#1232985)
  - CVE-2025-27144: cosign: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: Go JOSE's Parsing Vulnerable to Denial of Service (bsc#1237682)
  - CVE-2025-22870: cosign: golang.org/x/net/proxy: proxy bypass using IPv6 zone IDs (bsc#1238693)
  - CVE-2025-22868: cosign: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239204)
  - CVE-2025-22869: cosign: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239337)</changelog>
  <changelog author="meissner@suse.com" date="1748433600">- switch to go1.24, enable fips build</changelog>
  <changelog author="meissner@suse.com" date="1752840000">- Update to version 2.5.3 (jsc#SLE-23879)
  - Add signing-config create command (#4280)
  - Allow multiple services to be specified for trusted-root create (#4285)
  - force when copying the latest image to overwrite (#4298)
  - Fix cert verification logic for trusted-root/SCTs (#4294)
  - Fix lint error for types package (#4295)
  - feat: Add OCI 1.1+ experimental support to tree (#4205)
  - Add validity period end for trusted-root create (#4271)
  - avoid double-loading trustedroot from file (#4264)
- Update to 2.5.2:
  - Do not load trusted root when CT env key is set
  - docs: improve doc for --no-upload option (#4206)
- Update to 2.5.1:
  * Features
  - Add Rekor v2 support for trusted-root create (#4242)
  - Add baseUrl and Uri to trusted-root create command
  - Upgrade to TUF v2 client with trusted root
  - Don't verify SCT for a private PKI cert (#4225)
  - Bump TSA library to relax EKU chain validation rules (#4219)
  * Bug Fixes
  - Bump sigstore-go to pick up log index=0 fix (#4162)
  - remove unused recursive flag on attest command (#4187)
  * Docs
  - Fix indentation in verify-blob cmd examples (#4160)
  * GO-2025-3660/ CVE-2025-46569: Fixed OPA server Data API HTTP path injection of Rego (bsc#1246725)</changelog>
  <changelog author="meissner@suse.com" date="1758196800">- Update to version 2.6.0:
  - Require exclusively a SigningConfig or service URLs when signing (#4403)
  - Add a terminal spinner while signing with sigstore-go (#4402)
  - Bump sigstore-go, support alternative hash algorithms with keys (#4386)
  - Add support for SigningConfig in sign/attest (#4371)
  - Support self-managed keys when signing with sigstore-go (#4368)
  - Remove SHA256 assumption in sign-blob/verify-blob (#4050)
  - introduce dockerfile to pin the go version to decouple go version from go.mod (#4369)
  - refactor: extract function to write referrer attestations (#4357)
  - Break import cycle with e2e build tag (#4370)
  - Update conformance test binary for signing config (#4367)
  - update builder image to use go1.25 (#4366)
  - Don't load content from TUF if trusted root path is specified (#4347)
  - Don't require timestamps when verifying with a key (#4337)
  - Fixes to cosign sign / verify for the new bundle format (#4346)
  - update builder to use go1.24.6 (#4334)
  - bump golangci-lint to v2.3.x (#4333)
  - Have cosign sign support bundle format (#4316)
  - Add support for SigningConfig for sign-blob/attest-blob, support Rekor v2 (#4319)
  - Verify subject with bundle only when checking claims (#4320)
  - Add to `attest-blob` the ability to supply a complete in-toto statement, and add to `verify-blob-attestation` the ability to verify with just a digest (#4306)</changelog>
  <changelog author="meissner@suse.com" date="1765368000">- Update to version 3.0.3:
  * 4554: Closes 4554 - Add warning when --output* is used (#4556)
  * chore(deps): bump golangci/golangci-lint-action from 8.0.0 to 9.1.0 (#4545)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.111.0 to 3.113.0 (#4542)
  * chore(deps): bump github.com/awslabs/amazon-ecr-credential-helper/ecr-login (#4543)
  * chore(deps): bump actions/checkout from 5.0.0 to 6.0.0 (#4546)
  * chore(deps): bump the actions group with 4 updates (#4544)
  * chore(deps): bump the gomod group across 1 directory with 5 updates (#4567)
  * chore(deps): bump golang from 1.25.4 to 1.25.5 in the all group (#4568)
  * update builder to use go1.25.5 (#4566)
  * Protobuf bundle support for subcommand `clean` (#4539)
  * Add staging flag to initialize with staging TUF metadata
  * update slack invite link (#4560)
  * Updating sign-blob to also support signing with a certificate (#4547)
  * Bump sigstore library dependencies (#4532)
  * Protobuf bundle support for subcommands `save` and `load` (#4538)
  * Fix cert attachment for new bundle with signing config
  * Fix OCI verification with local cert - old bundle
  * chore(deps): bump github.com/sigstore/fulcio from 1.7.1 to 1.8.1 (#4519)
  * chore(deps): bump golang.org/x/crypto in /test/fakeoidc (#4535)
  * chore(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0 (#4536)
  * CVE-2025-58181: Fixed golang.org/x/crypto/ssh: invalidated number
    of mechanisms can cause unbounded memory consumption (bsc#1253913)
  * update go builder and cosign (#4529)
  * chore(deps): bump the gomod group across 1 directory with 7 updates (#4528)
  * chore(deps): bump sigstore/cosign-installer from 3.10.0 to 4.0.0 (#4478)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4520)
  * chore(deps): bump golang from 1.25.3 to 1.25.4 in the all group (#4515)
  * chore(deps): bump golang.org/x/oauth2 from 0.32.0 to 0.33.0 (#4518)
  * chore(deps): bump cuelang.org/go from 0.14.2 to 0.15.0 (#4524)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.9.0 to 1.10.1 (#4521)
  * chore(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 (#4502)
  * chore(deps): bump the actions group across 1 directory with 2 updates (#4516)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.110.0 to 3.111.0 (#4523)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4522)
  * Deprecate tlog-upload flag (#4458)
  * fix: Use signal context for `sign` cli package.
  * update offline verification directions (#4526)
  * Fix signing/verifying annotations for new bundle
  * Add support to download and attach for protobuf bundles (#4477)
  * Add --signing-algorithm flag (#3497)
  * Refactor signcommon bundle helpers
  * Add --bundle and fix --upload for new bundle
  * Pass insecure registry flags through to referrers
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.108.0 to 3.109.1 (#4483)
  * Add protobuf bundle support for tree subcommand (#4491)
  * Remove stale embed import (#4492)
  * Support multiple container identities
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4484)
  * chore(deps): bump chainguard-dev/actions in the actions group (#4480)
  * chore(deps): bump github.com/sigstore/rekor-tiles/v2 (#4485)
  * chore(deps): bump golang.org/x/crypto from 0.42.0 to 0.43.0 (#4486)
  * chore(deps): bump cuelang.org/go in the gomod group (#4479)
  * upgrade OSS-Fuzz build tooling (#4487)
  * Fix segfault when no attestations are found (#4472)
  * Use overridden repository for new bundle format (#4473)
  * update go to 1.25.3 (#4471)
  * Remove --out flag from `cosign initialize` (#4462)
  * chore(deps): bump the actions group with 2 updates (#4460)
  * Deprecate offline flag (#4457)
  * Deduplicate code in sign/attest* and verify* commands (#4449)
  * Cache signing config when calling initialize (#4456)
  * Update changelog for v3.0.2 (#4455)
  * chore(deps): bump google.golang.org/api from 0.250.0 to 0.251.0
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go
  * chore(deps): bump the actions group with 3 updates
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.107.2 to 3.108.0
  * choose different signature filename for KMS-signed release signatures (#4448)
  * chore(deps): bump github.com/go-jose/go-jose/v4 (#4451)
  * Update rekor-tiles version path
  * update CL for v3.0.1 release (#4447)
  * update goreleaser config for v3.0.0 release (#4446)
  * Create changelog for v3.0.0 (#4440)
  * Fetch service URLs from the TUF PGI signing config by default (#4428)
  * Create changelog for v2.6.1 (#4439)
  * chore(deps): bump google.golang.org/api from 0.249.0 to 0.250.0 (#4432)
  * chore(deps): bump the gomod group with 2 updates (#4429)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.8.0 to 1.9.0 (#4433)
  * chore(deps): bump the actions group with 3 updates (#4434)
  * chore(deps): bump github.com/go-openapi/swag from 0.24.1 to 0.25.1 (#4435)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4436)
  * chore(deps): bump github.com/go-openapi/runtime from 0.28.0 to 0.29.0 (#4437)
  * Bump module version to v3 for Cosign v3.0 (#4427)
  * Move sigstore-conformance back to tagged release (#4425)
  * Bump sigstore-go to v1.1.3 (#4423)
  * Partially populate the output of cosign verify when working with new bundles (#4416)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4419)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4418)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.105.0 to 3.107.0 (#4420)
  * chore(deps): bump chainguard-dev/actions in the actions group (#4421)
  * bump go builder to use 1.25.1 and cosign (#4417)
  * Bump sigstore-go for more precise user agents (#4413)
  * chore(deps): bump github.com/spf13/viper from 1.20.1 to 1.21.0 (#4408)
  * chore(deps): bump the actions group with 2 updates (#4407)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4410)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.104.0 to 3.105.0 (#4411)
  * Default to using the new protobuf format (#4318)</changelog>
  <changelog author="meissner@suse.com" date="1770811200">- Update to version 3.0.4:
  * CVE-2025-11065: Fixed github.com/go-viper/mapstructure/v2: sensitive
    Information leak in logs (bsc#1250620)
  * CVE-2026-22703: Fixed that cosign verification accepts any valid
    Rekor entry under certain conditions (bsc#1256496)
  * Fix bundle verify path for old bundle/trusted root (#4623)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4616)
  * chore(deps): bump cuelang.org/go in the gomod group (#4615)
  * Optimize cosign tree performance by caching digest resolution (#4612)
  * Don't require a trusted root to verify offline with a key (#4613)
  * Support default services for trusted-root and signing-config creation (#4592)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4602)
  * chore(deps): bump github.com/sigstore/sigstore-go (#4578)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.114.1 to 3.115.2 (#4601)
  * chore(deps): bump google.golang.org/api from 0.257.0 to 0.258.0 (#4611)
  * chore(deps): bump k8s.io/client-go from 0.34.3 to 0.35.0 (#4604)
  * chore(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 (#4588)
  * chore(deps): bump golang.org/x/oauth2 from 0.33.0 to 0.34.0 (#4586)
  * chore(deps): bump the gomod group with 5 updates (#4599)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.10.1 to 1.12.1 (#4600)
  * chore(deps): bump golang.org/x/term from 0.37.0 to 0.38.0 (#4584)
  * chore(deps): bump the actions group with 3 updates (#4587)
  * chore(deps): bump actions/cache from 4.3.0 to 5.0.1 (#4589)
  * chore(deps): bump the gomod group with 9 updates (#4577)</changelog>
  <changelog author="meissner@suse.com" date="1771761600">- Update to version 3.0.5: (jsc#SLE-23879)
  * CVE-2026-24122: Fixed improper validation of certificates that
    outlive expired CA certificates (bsc#1258542)
  * CVE-2026-26958: Fixed filippo.io/edwards25519: failure to initialize
    receiver in MultiScalarMult can produce invalid results and lead to
    undefined behavior (bsc#1258612)
  * CVE-2026-24137: Fixed github.com/sigstore/sigstore/pkg/tuf: legacy
    TUF client allows for arbitrary file writes with target cache path
    traversal (bsc#1257139)
  * CVE-2026-22772: Fixed github.com/sigstore/fulcio: bypass MetaIssuer
    URL validation bypass can trigger SSRF to arbitrary internal services
    (bsc#1256562)
  * CVE-2026-23991: Fixed github.com/theupdateframework/go-tuf/v2: denial
    of service due to invalid TUF metadata JSON returned by TUF repository
    (bsc#1257080)
  * CVE-2026-23992: Fixed github.com/theupdateframework/go-tuf/v2:
    unauthorized modification to TUF metadata files due to a compromised
    or misconfigured TUF repository (bsc#1257085)
  * chore(deps): bump google.golang.org/api from 0.260.0 to 0.264.0 (#4679)
  * chore(deps): bump github.com/sigstore/rekor-tiles/v2 from 2.0.1 to 2.1.0 (#4670)
  * chore(deps): bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 (#4712)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4680)
  * chore(deps): bump the gomod group across 1 directory with 4 updates (#4702)
  * chore(deps): bump the actions group with 3 updates (#4703)
  * update golang builder to use go1.25.7 (#4687)
  * update golangci-lint to v2.8.x (#4688)
  * Fix typo in CLI help (#4701)
  * Support DSSE signing conformance test (#4685)
  * chore(deps): bump the actions group across 1 directory with 8 updates (#4689)
  * Deprecate rekor-entry-type flag (#4691)
  * Deprecate cosign triangulate (#4676)
  * Deprecate cosign copy (#4681)
  * Enforce TSA requirement for Rekor v2, Fuclio signing (#4683)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4668)
  * chore(deps): bump golang from 1.25.5 to 1.25.6 in the all group (#4673)
  * Automatically require signed timestamp with Rekor v2 entries (#4666)
  * Fix syntax issue in conformance test, update nightly (#4664)
  * Add mTLS support for TSA client connections when signing with a signing config (#4620)
  * fix: avoid panic on malformed tlog entry body (#4652)
  * Verify validity of chain rather than just certificate (#4663)
  * Allow --local-image with --new-bundle-format for v2 and v3 signatures (#4626)
  * chore(deps): bump the gomod group across 1 directory with 3 updates (#4662)
  * Bump sigstore/sigstore to resolve GHSA (#4660)
  * Gracefully fail if bundle payload body is not a string (#4648)
  * fix: avoid panic on malformed replace payload (#4653)
  * chore(deps): bump github.com/sigstore/rekor from 1.4.3 to 1.5.0 (#4659)
  * fix: avoid panic on malformed attestation payload (#4651)
  * fix: avoid panic on malformed tlog entries (#4649)
  * Update conformance to latest
  * docs(cosign): clarify RFC3161 revocation semantics (#4642)
  * Add empty predicate to cosign sign when payload type is application/vnd.in-toto+json (#4635)
  * chore(deps): bump github.com/sigstore/fulcio from 1.8.4 to 1.8.5 (#4637)
  * Add origin key for ctfe trusted root
  * Add changelog updates for v3.0.4 and v2.6.2 (#4625)</changelog>
</package>
<package pkgid="48f2a62954dd0ff7116f0244b74c23c3109a70fcd45007ab7d47c644814cfd61" name="cosign-zsh-completion" arch="noarch">
  <version epoch="0" ver="2.5.3" rel="150400.3.30.1"/>
  <changelog author="meissner@suse.com" date="1666094400">- update to 1.13.1:
  * verify-blob-attestation: allow multiple subjects in in_toto attestation (#2341)
  * Nits for #2337 (#2342)
  * Add verify-blob-attestation command and tests (#2337)
  * Update warning when users sign images by tag. (#2313)
  * Remove experimental flags from attest-blob and refactor (#2338)
  * Add --output-attestation flag to attest-blob and remove experimental signing (#2332)
  * Add attest-blob command (#2286)
  * Add '--cert-identity' flag to support subject alternate names for ver… (#2278)
  * Update Dockerfile section of README (#2323)
  * Fix option description: "sign" --&gt; "verify" (#2306)
- update to 1.13.0:
  * feat: use stdin as an input for predicate by @developer-guy in https://github.com/sigstore/cosign/pull/2269
  * feat: improve the verification message by @developer-guy in https://github.com/sigstore/cosign/pull/2268
  * use scaffolding 0.4.8 for tests. by @vaikas in https://github.com/sigstore/cosign/pull/2280
  * fix pivtool generate key touch policy by @cpanato in https://github.com/sigstore/cosign/pull/2282
  * Check error on chain verification failure by @haydentherapper in https://github.com/sigstore/cosign/pull/2284
  * Fix: Remove an extra registry request from verification path. by @mattmoor in https://github.com/sigstore/cosign/pull/2285
  * Fix: Create a static copy of signatures as part of verification. by @mattmoor in https://github.com/sigstore/cosign/pull/2287
  * Data race in FetchSignaturesForReference by @RTann in https://github.com/sigstore/cosign/pull/2283
  * Add support for Fulcio username identity in SAN by @haydentherapper in https://github.com/sigstore/cosign/pull/2291
  * fix: make tlog entry lookups for online verification shard-aware by @asraa in https://github.com/sigstore/cosign/pull/2297
  * Better help text to sign and verify SBOM by @ChristianCiach in https://github.com/sigstore/cosign/pull/2308
  * Adding warning to pin to digest by @ChaosInTheCRD in https://github.com/sigstore/cosign/pull/2311
  * Add annotations for upload blob. by @cldmnky in https://github.com/sigstore/cosign/pull/2188
  * replace deprecate package by @cpanato in https://github.com/sigstore/cosign/pull/2314
  * update release images to use go1.19.2 and cosign v1.12.1 by @cpanato in https://github.com/sigstore/cosign/pull/2315</changelog>
  <changelog author="meissner@suse.com" date="1677499200">- update to 2.0.0 (jsc#SLE-23879)
  Breaking Changes:
  * insecure-skip-tlog-verify: rename and adapt the cert expiration check (#2620)
  * Deprecate --certificate-email flag. Make --certificate-identity and -… (#2411)
  Enhancements:
  * Change go module name to github.com/sigstore/cosign/v2 for Cosign 2.0 (#2544)
  * Allow users to pass in a path for the --identity-token flag (#2538)
  * Breaking change: Respect tlog-upload=false, default to true (#2505)
  * Support outputing a certificate without uploading to the tlog (#2506)
  * Attestation/Blob signing and verification using a RFC3161 time-stamping server (#2464)
  * respect tlog-upload flag with TSA (#2474)
  * Better feedback if specifying incompatible argument on cosign sign --attachment (#2449)
  * Support TSA and Rekor verifications (#2463)
  * add support for tsa signing and verification of images (#2460)
  * cosign policy sign: remove experimental flag and make keyless signing default (#2459)
  * Remove experimental mode from cosign attest and verify-attestation (#2458)
  * Remove experimental mode from sign-blob and verify-blob (#2457)
  * Add --offline flag to force offline verification (#2427)
  * Air gap support (#2299)
  * Breaking change: Change SCT verification behavior to default to enforcement (#2400)
  * Breaking change: remove --force flag from sign and attest and rely on --yes flag to skip confirmation (#2399)
  * Breaking change: replace --no-tlog-upload flag with --tlog-upload flag (#2397)
  * Remove experimental flag from cosign sign and cosign verify (#2387)
  * verify: remove SIGSTORE_TRUST_REKOR_API_PUBLIC_KEY test env var for using a key from rekor's API (#2362)
  * Add warning to use digest instead of tags to other cosign commands (#2650)
  * Fix up UI messages (#2629)
  * Remove hardcoded Fulcio from output (#2621)
  * Fix missing privacy statement, print in multiple locations (#2622)
  * feat: allows custom key names for import-key-pair (#2587)
  * feat: support keyless verification for verify-blob-attestation (#2525)
  * attest-blob: add functionality for keyless signing (#2515)
  * Rego: add support for custom error/warning messages when evaluating rego rules (#2577)
  * feat: add debug information to cert validation error (#2579)
  * Support non-Sigstore TSA requests (#2708)
  * Add COSIGN_OCI_EXPERIMENTAL, push .sig/.sbom using OCI 1.1+ digest tag (#2684)
  * Output certificate in bundle when entry is not uploaded to Rekor (#2715)
  * attach signature and attach sbom must use STDIN to upload raw string (#2637)
  * add generate-key-pair GitHub Enterprise server support (#2676)
  * add in format string for warning (#2699)
  * Support for fetching Fulcio certs with self-managed key (#2532)
  * 2476 predicate type download (#2484)
  Bug Fixes:
  * Fix the file existence check. (#2552)
  * Fix timestamp verification, add verify-blob tests (#2527)
  * Fix(verify): Consolidate certificate expiry logic (#2504)
  * Updates to Timestamp signing and verification (#2499)
  * Fix: removes attestation payload from attest-blob's output &amp; no base64 encoding (#2498)
  * Fix path for e2e-tests badge (#2490)
  * Fix spdx json media type (#2479)
  * Fix sct verificaction (#2426)
  * Fix: panic with unsigned local image (#2656)
  * Make sure a cert passed in via --cert matches the bundle cert (#2652)
  * Fix: fix github oidc post submit test (#2594)
  * Fix: add enhanced error messages for failing verification with TUF targets (#2589)
  * Fix: Add missing schemes to cosign predicate types. (#2717)
  * Fix: Drop the CosignPredicate wrapper around SBOM attestations. (#2718)
  * Fix prompts with Windows line endings (#2674)</changelog>
  <changelog author="dmueller@suse.com" date="1680609600">- fix buildtags
- build against a maintained golang version (upstream uses go1.20)</changelog>
  <changelog author="meissner@suse.com" date="1681732800">- update to 2.0.1 (jsc#SLE-23879)
  Enhancements
  - Add environment variable token provider (#2864)
  - Remove cosign policy command (#2846)
  - Allow customising 'go' executable with GOEXE var (#2841)
  - Consistent tlog warnings during verification (#2840)
  - Add riscv64 arch (#2821)
  - Default generated PEM labels to SIGSTORE (#2735)
  - Update privacy statement and confirmation (#2797)
  - Add exit codes for verify errors (#2766)
  - Add Buildkite provider (#2779)
  - verify-blob-attestation: Loosen arg requirements if --check-claims=false (#2746)
  Bug Fixes
  - PKCS11 sessions are now opened read only (#2853)
  - Makefile: date format of log should not show signatures (#2835)
  - Add missing flags to cosign verify dockerfile/manifest (#2830)
  - Add a warning to remember how to configure a custom Gitlab host (#2816)
  - Remove tag warning message from save/copy commands (#2799)
  - Mark keyless pem files with b64 (#2671)</changelog>
  <changelog author="meissner@suse.com" date="1683460800">- update to 2.0.2 (jsc#SLE-23879)
  Enhancements
  - Update sigstore/sigstore to v1.6.2 to pick up TUF CDN change (#2891)
  - feat: Make cosign copy faster (#2901)
  - remove sget (#2885)
  - Require a payload to be provided with a signature (#2785)
  Bug Fixes
  - cmd: Change error message from KeyParseError to PubKeyParseError for verify-blob. (#2876)
  - Use SOURCE_DATE_EPOCH for OCI CreatedAt times (#2878)
  Documentation
  - Remove experimental warning from Fulcio flags (#2923)
  - add missing oidc provider (#2922)
  - Add zot as a supported registry (#2920)
  - deprecates kms_support docs (#2900)
  - chore(docs) deprecate note for usage docs (#2906)
  - adds note of deprecation for examples.md docs (#2899)</changelog>
  <changelog author="meissner@suse.com" date="1687867200">- updated to 2.1.1 (jsc#SLE-23879)
  - Bug Fixes
  - wait for the workers become available again to continue the execution (#3084)
  - fix help text when in a container (#3082)
- updated to 2.1.0 (jsc#SLE-23879)
  - Breaking Change: The predicate is now a required flag in the attest commands, set via the --type flag.
  - Enhancements
  - Verify sigs and attestations in parallel (#3066)
  - Deep inspect attestations when filtering download (#3031)
  - refactor bundle validation code, add support for DSSE rekor type (#3016)
  - Allow overriding remote options (#3049)
  - feat: adds no cert found on sig exit code (#3038)
  - Make predicate a required flag in attest commands (#3033)
  - Added support for attaching Time stamp authority Response in attach command (#3001)
  - Add sign --sign-container-identity CLI (#2984)
  - Feature: Allow cosign to sign digests before they are uploaded. (#2959)
  - accepts attachment-tag-prefix for cosign copy (#3014)
  - Feature: adds '--allow-insecure-registry' for cosign load (#3000)
  - download attestation: support --platform flag (#2980)
  - Cleanup: Add Digest to the SignedEntity interface. (#2960)
  - verify command: support keyless verification using only a provided certificate chain with non-fulcio roots (#2845)
  - verify: use workers to limit the paralellism when verifying images with --max-workers flag (#3069)
  - Bug Fixes
  - Fix pkg/cosign/errors (#3050)
  - Fix: update doc to refer to github-actions oidc provider (#3040)
  - Fix: prefer GitHub OIDC provider if enabled (#3044)
  - Fix --sig-only in cosign copy (#3074)
  - Documentation
  - Fix links to sigstore/docs in markdown files (#3064)</changelog>
  <changelog author="meissner@suse.com" date="1693569600">- updated to 2.2.0 (jsc#SLE-23879)
  - Enhancements
  * switch to uploading DSSE types to rekor instead of intoto (#3113)
  * add 'cosign sign' command-line parameters for mTLS (#3052)
  * improve error messages around bundle != payload hash (#3146)
  * make VerifyImageAttestation function public (#3156)
  * Switch to cryptoutils function for SANS (#3185)
  * Handle HTTP_1_1_REQUIRED errors in github provider (#3172)
  - Bug Fixes
  * Fix nondeterminsitic timestamps (#3121)
  - Documentation
  * doc: Add example of sign-blob with key in env var (#3152)
  * add deprecation notice for cosign-releases GCS bucket (#3148)
  * update doc links (#3186)</changelog>
  <changelog author="meissner@suse.com" date="1699358400">- updated to 2.2.1 (jsc#SLE-23879)
  This release comes with a fix for
  CVE-2023-46737 / bsc#1216933 described in this [Github Security
  Advisory](https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9).
  Enhancements:
  * feat: Support basic auth and bearer auth login to registry (#3310)
  * add support for ignoring certificates with pkcs11 (#3334)
  * Support ReplaceOp in Signatures (#3315)
  * feat: added ability to get image digest back via triangulate (#3255)
  * feat: add `--only` flag in `cosign copy` to copy sign, att &amp; sbom (#3247)
  * feat: add support attaching a Rekor bundle to a container (#3246)
  * feat: add support outputting rekor response on signing (#3248)
  * feat: improve dockerfile verify subcommand (#3264)
  * Add guard flag for experimental OCI 1.1 verify. (#3272)
  * Deprecate SBOM attachments (#3256)
  * feat: dedent line in cosign copy doc (#3244)
  * feat: add platform flag to cosign copy command (#3234)
  * Add SLSA 1.0 attestation support to cosign. Closes #2860 (#3219)
  * attest: pass OCI remote opts to att resolver. (#3225)
  Bug Fixes:
  * Merge pull request from GHSA-vfp6-jrw2-99g9
  * fix: allow cosign download sbom when image is absent (#3245)
  * ci: add a OCI registry test for referrers support (#3253)
  * Fix ReplaceSignatures (#3292)
  * Stop using deprecated in_toto.ProvenanceStatement (#3243)
  * Fixes #3236, disable SCT checking for a cosign verification when usin… (#3237)
  * fix: update error in `SignedEntity` to be more descriptive (#3233)
  * Fail timestamp verification if no root is provided (#3224)
  Documentation:
  * Add some docs about verifying in an air-gapped environment (#3321)
  * Update CONTRIBUTING.md (#3268)
  * docs: improves the Contribution guidelines (#3257)
  * Remove security policy (#3230)
  Others:
  * Set go to min 1.21 and update dependencies  (#3327)
  * Update contact for code of conduct (#3266)
  * Update .ko.yaml (#3240)</changelog>
  <changelog author="marcos.bjoerkelund@suse.com" date="1702382400">- updated to 2.2.2 (jsc#SLE-23879)
  v2.2.2 adds a new container with a shell,
  gcr.io/projectsigstore/cosign:vx.y.z-dev, in addition to the existing
  container gcr.io/projectsigstore/cosign:vx.y.z without a shell.
  For private deployments, we have also added an alias for
  - -insecure-skip-log, --private-infrastructure.
  Bug Fixes:
  * chore(deps): bump github.com/sigstore/sigstore from 1.7.5 to 1.7.6 (#3411) which fixes a bug with using Azure KMS
  * Don't require CT log keys if using a key/sk (#3415)
  * Fix copy without any flag set (#3409)
  * Update cosign generate cmd to not include newline (#3393)
  * Fix idempotency error with signing (#3371)
  Features:
  * Add --yes flag cosign import-key-pair to skip the overwrite confirmation. (#3383)
  * Use the timeout flag value in verify* commands. (#3391)
  * add --private-infrastructure flag (#3369)
  Container Updates:
  * Bump builder image to use go1.21.4 and add new cosign image tags with shell (#3373)
  Documentation:
  * Update SBOM_SPEC.md (#3358)</changelog>
  <changelog author="meissner@suse.com" date="1706875200">- updated to 2.2.3 (jsc#SLE-23879)
  Bug Fixes:
  * Fix race condition on verification with multiple signatures attached to image (#3486)
  * fix(clean): Fix clean cmd for private registries (#3446)
  * Fixed BYO PKI verification (#3427)
  Features:
  * Allow for option in cosign attest and attest-blob to upload attestation as supported in Rekor (#3466)
  * Add support for OpenVEX predicate type (#3405)
  Documentation:
  * Resolves #3088: `version` sub-command expected behaviour documentation and testing (#3447)
  * add examples for cosign attach signature cmd (#3468)
  Misc:
  * Remove CertSubject function (#3467)
  * Use local rekor and fulcio instances in e2e tests (#3478)
- bumped embedded golang.org/x/crypto/ssh to fix the Terrapin attack CVE-2023-48795 (bsc#1218207)</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- updated to 2.2.4 (jsc#SLE-23879)
  * Bug Fixes
  * Fixes for GHSA-88jx-383q-w4qc and GHSA-95pr-fxf5-86gv (#3661)
  - CVE-2024-29902: Malicious attachments can cause system-wide denial of service (bsc#1222835)
  - CVE-2024-29903: Malicious artifects can cause machine-wide denial of service (bsc#1222837)
  * ErrNoSignaturesFound should be used when there is no signature attached to an image. (#3526)
  * fix semgrep issues for dgryski.semgrep-go ruleset (#3541)
  * Honor creation timestamp for signatures again (#3549)
  * Features
  * Adds Support for Fulcio Client Credentials Flow, and Argument to Set Flow Explicitly (#3578)
  * Documentation
  * add oci bundle spec (#3622)
  * Correct help text of triangulate cmd (#3551)
  * Correct help text of verify-attestation policy argument (#3527)
  * feat: add OVHcloud MPR registry tested with cosign (#3639)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1717156800">- add completion subpackages (bash, fish, zsh)</changelog>
  <changelog author="meissner@suse.com" date="1721822400">- update to 2.3.0 (jsc#SLE-23879)
  * Features
  - Add PayloadProvider interface to decouple AttestationToPayloadJSON from oci.Signature interface (#3693)
  - add registry options to cosign save (#3645)
  - Add debug providers command. (#3728)
  - Make config layers in ociremote mountable (#3741)
  - adds tsa cert chain check for env var or tuf targets. (#3600)
  - add --ca-roots and --ca-intermediates flags to 'cosign verify' (#3464)
  - add handling of keyless verification for all verify commands (#3761)
  * Bug Fixes
  - fix: close attestationFile (#3679)
  - Set bundleVerified to true after Rekor verification (Resolves #3740) (#3745)
  * Documentation
  - Document ImportKeyPair and LoadPrivateKey functions in pkg/cosign (#3776)</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1724155200">- Set CGO_ENABLED=1 for fixing s390x failed build</changelog>
  <changelog author="meissner@suse.com" date="1727870400">- update to 2.4.0 (jsc#SLE-23879)
  - Add new bundle support to verify-blob and verify-blob-attestation (#3796)
  - Adding protobuf bundle support to sign-blob and attest-blob (#3752)
  - Bump sigstore/sigstore to support email_verified as string or boolean (#3819)
  - Conformance testing for cosign (#3806)
  - move incremental builds per commit to GHCR instead of GCR (#3808)
  - Add support for recording creation timestamp for cosign attest (#3797)
  - Include SCT verification failure details in error message (#3799)</changelog>
  <changelog author="meissner@suse.com" date="1738756800">- Update to version 2.4.2:
  - Updated open-policy-agent to 1.1.0 library (#4036)
  - Note that only Rego v0 policies are supported at this time
  - Add UseSignedTimestamps to CheckOpts, refactor TSA options (#4006)
  - Add support for verifying root checksum in cosign initialize (#3953)
  - Detect if user supplied a valid protobuf bundle (#3931)
  - Add a log message if user doesn't provide --trusted-root (#3933)
  - Support mTLS towards container registry (#3922)
  - Add bundle create helper command (#3901)
  - Add trusted-root create helper command (#3876)
  Bug Fixes:
  - fix: set tls config while retaining other fields from default http transport (#4007)
  - policy fuzzer: ignore known panics (#3993)
  - Fix for multiple WithRemote options (#3982)
  - Add nightly conformance test workflow (#3979)
  - Fix copy --only for signatures + update/align docs (#3904)
- use "osc service mr" to update</changelog>
  <changelog author="meissner@suse.com" date="1740052800">- Update to version 2.4.3:
  * Enable fetching signatures without remote get. (#4047)
  * Bump sigstore/sigstore to support KMS plugins (#4073)
  * sort properly Go imports (#4071)
  * sync comment with parameter name in function signature (#4063)
  * fix go imports order to be alphabetical (#4062)
  * fix comment typo and imports order (#4061)
  * Feat/file flag completion improvements (#4028)
  * Udpate builder to use go1.23.6 (#4052)
  * Refactor verifyNewBundle into library function (#4013)
  * fix parsing error in --only for cosign copy (#4049)
  * Fix codeowners syntax, add dep-maintainers (#4046)</changelog>
  <changelog author="meissner@suse.com" date="1744545600">- Update to version 2.5.0:
  * Update sigstore-go to pick up bug fixes (#4150)
  * Update golangci-lint to v2, update golangci-lint-action (#4143)
  * Feat/non filename completions (#4115)
  * update builder to use go1.24.1 (#4116)
  * Add support for new bundle specification for attesting/verifying OCI image attestations (#3889)
  * Remove cert log line (#4113)
  * cmd/cosign/cli: fix typo in ignoreTLogMessage (#4111)
  * bump to latest scaffolding release for testing (#4099)
  * increase 2e2_test docker compose tiemout to 180s (#4091)
  * Fix replace with compliant image mediatype (#4077)
  * Add TSA certificate related flags and fields for cosign attest (#4079)
- Security issues fixed:
  - CVE-2024-6104: cosign: hashicorp/go-retryablehttp: url might write sensitive information to log file (bsc#1227031)
  - CVE-2024-51744: cosign: github.com/golang-jwt/jwt/v4: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt (bsc#1232985)
  - CVE-2025-27144: cosign: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: Go JOSE's Parsing Vulnerable to Denial of Service (bsc#1237682)
  - CVE-2025-22870: cosign: golang.org/x/net/proxy: proxy bypass using IPv6 zone IDs (bsc#1238693)
  - CVE-2025-22868: cosign: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239204)
  - CVE-2025-22869: cosign: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239337)</changelog>
  <changelog author="meissner@suse.com" date="1748433600">- switch to go1.24, enable fips build</changelog>
  <changelog author="meissner@suse.com" date="1752840000">- Update to version 2.5.3 (jsc#SLE-23879)
  - Add signing-config create command (#4280)
  - Allow multiple services to be specified for trusted-root create (#4285)
  - force when copying the latest image to overwrite (#4298)
  - Fix cert verification logic for trusted-root/SCTs (#4294)
  - Fix lint error for types package (#4295)
  - feat: Add OCI 1.1+ experimental support to tree (#4205)
  - Add validity period end for trusted-root create (#4271)
  - avoid double-loading trustedroot from file (#4264)
- Update to 2.5.2:
  - Do not load trusted root when CT env key is set
  - docs: improve doc for --no-upload option (#4206)
- Update to 2.5.1:
  * Features
  - Add Rekor v2 support for trusted-root create (#4242)
  - Add baseUrl and Uri to trusted-root create command
  - Upgrade to TUF v2 client with trusted root
  - Don't verify SCT for a private PKI cert (#4225)
  - Bump TSA library to relax EKU chain validation rules (#4219)
  * Bug Fixes
  - Bump sigstore-go to pick up log index=0 fix (#4162)
  - remove unused recursive flag on attest command (#4187)
  * Docs
  - Fix indentation in verify-blob cmd examples (#4160)
  * GO-2025-3660/ CVE-2025-46569: Fixed OPA server Data API HTTP path injection of Rego (bsc#1246725)</changelog>
</package>
<package pkgid="fdbbc9bbbc13c1fdec46d0d3cf4c6b255807fb0e42a2634552f1aa750eb932c4" name="cosign-zsh-completion" arch="noarch">
  <version epoch="0" ver="3.0.5" rel="150400.3.35.1"/>
  <changelog author="meissner@suse.com" date="1683460800">- update to 2.0.2 (jsc#SLE-23879)
  Enhancements
  - Update sigstore/sigstore to v1.6.2 to pick up TUF CDN change (#2891)
  - feat: Make cosign copy faster (#2901)
  - remove sget (#2885)
  - Require a payload to be provided with a signature (#2785)
  Bug Fixes
  - cmd: Change error message from KeyParseError to PubKeyParseError for verify-blob. (#2876)
  - Use SOURCE_DATE_EPOCH for OCI CreatedAt times (#2878)
  Documentation
  - Remove experimental warning from Fulcio flags (#2923)
  - add missing oidc provider (#2922)
  - Add zot as a supported registry (#2920)
  - deprecates kms_support docs (#2900)
  - chore(docs) deprecate note for usage docs (#2906)
  - adds note of deprecation for examples.md docs (#2899)</changelog>
  <changelog author="meissner@suse.com" date="1687867200">- updated to 2.1.1 (jsc#SLE-23879)
  - Bug Fixes
  - wait for the workers become available again to continue the execution (#3084)
  - fix help text when in a container (#3082)
- updated to 2.1.0 (jsc#SLE-23879)
  - Breaking Change: The predicate is now a required flag in the attest commands, set via the --type flag.
  - Enhancements
  - Verify sigs and attestations in parallel (#3066)
  - Deep inspect attestations when filtering download (#3031)
  - refactor bundle validation code, add support for DSSE rekor type (#3016)
  - Allow overriding remote options (#3049)
  - feat: adds no cert found on sig exit code (#3038)
  - Make predicate a required flag in attest commands (#3033)
  - Added support for attaching Time stamp authority Response in attach command (#3001)
  - Add sign --sign-container-identity CLI (#2984)
  - Feature: Allow cosign to sign digests before they are uploaded. (#2959)
  - accepts attachment-tag-prefix for cosign copy (#3014)
  - Feature: adds '--allow-insecure-registry' for cosign load (#3000)
  - download attestation: support --platform flag (#2980)
  - Cleanup: Add Digest to the SignedEntity interface. (#2960)
  - verify command: support keyless verification using only a provided certificate chain with non-fulcio roots (#2845)
  - verify: use workers to limit the paralellism when verifying images with --max-workers flag (#3069)
  - Bug Fixes
  - Fix pkg/cosign/errors (#3050)
  - Fix: update doc to refer to github-actions oidc provider (#3040)
  - Fix: prefer GitHub OIDC provider if enabled (#3044)
  - Fix --sig-only in cosign copy (#3074)
  - Documentation
  - Fix links to sigstore/docs in markdown files (#3064)</changelog>
  <changelog author="meissner@suse.com" date="1693569600">- updated to 2.2.0 (jsc#SLE-23879)
  - Enhancements
  * switch to uploading DSSE types to rekor instead of intoto (#3113)
  * add 'cosign sign' command-line parameters for mTLS (#3052)
  * improve error messages around bundle != payload hash (#3146)
  * make VerifyImageAttestation function public (#3156)
  * Switch to cryptoutils function for SANS (#3185)
  * Handle HTTP_1_1_REQUIRED errors in github provider (#3172)
  - Bug Fixes
  * Fix nondeterminsitic timestamps (#3121)
  - Documentation
  * doc: Add example of sign-blob with key in env var (#3152)
  * add deprecation notice for cosign-releases GCS bucket (#3148)
  * update doc links (#3186)</changelog>
  <changelog author="meissner@suse.com" date="1699358400">- updated to 2.2.1 (jsc#SLE-23879)
  This release comes with a fix for
  CVE-2023-46737 / bsc#1216933 described in this [Github Security
  Advisory](https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9).
  Enhancements:
  * feat: Support basic auth and bearer auth login to registry (#3310)
  * add support for ignoring certificates with pkcs11 (#3334)
  * Support ReplaceOp in Signatures (#3315)
  * feat: added ability to get image digest back via triangulate (#3255)
  * feat: add `--only` flag in `cosign copy` to copy sign, att &amp; sbom (#3247)
  * feat: add support attaching a Rekor bundle to a container (#3246)
  * feat: add support outputting rekor response on signing (#3248)
  * feat: improve dockerfile verify subcommand (#3264)
  * Add guard flag for experimental OCI 1.1 verify. (#3272)
  * Deprecate SBOM attachments (#3256)
  * feat: dedent line in cosign copy doc (#3244)
  * feat: add platform flag to cosign copy command (#3234)
  * Add SLSA 1.0 attestation support to cosign. Closes #2860 (#3219)
  * attest: pass OCI remote opts to att resolver. (#3225)
  Bug Fixes:
  * Merge pull request from GHSA-vfp6-jrw2-99g9
  * fix: allow cosign download sbom when image is absent (#3245)
  * ci: add a OCI registry test for referrers support (#3253)
  * Fix ReplaceSignatures (#3292)
  * Stop using deprecated in_toto.ProvenanceStatement (#3243)
  * Fixes #3236, disable SCT checking for a cosign verification when usin… (#3237)
  * fix: update error in `SignedEntity` to be more descriptive (#3233)
  * Fail timestamp verification if no root is provided (#3224)
  Documentation:
  * Add some docs about verifying in an air-gapped environment (#3321)
  * Update CONTRIBUTING.md (#3268)
  * docs: improves the Contribution guidelines (#3257)
  * Remove security policy (#3230)
  Others:
  * Set go to min 1.21 and update dependencies  (#3327)
  * Update contact for code of conduct (#3266)
  * Update .ko.yaml (#3240)</changelog>
  <changelog author="marcos.bjoerkelund@suse.com" date="1702382400">- updated to 2.2.2 (jsc#SLE-23879)
  v2.2.2 adds a new container with a shell,
  gcr.io/projectsigstore/cosign:vx.y.z-dev, in addition to the existing
  container gcr.io/projectsigstore/cosign:vx.y.z without a shell.
  For private deployments, we have also added an alias for
  - -insecure-skip-log, --private-infrastructure.
  Bug Fixes:
  * chore(deps): bump github.com/sigstore/sigstore from 1.7.5 to 1.7.6 (#3411) which fixes a bug with using Azure KMS
  * Don't require CT log keys if using a key/sk (#3415)
  * Fix copy without any flag set (#3409)
  * Update cosign generate cmd to not include newline (#3393)
  * Fix idempotency error with signing (#3371)
  Features:
  * Add --yes flag cosign import-key-pair to skip the overwrite confirmation. (#3383)
  * Use the timeout flag value in verify* commands. (#3391)
  * add --private-infrastructure flag (#3369)
  Container Updates:
  * Bump builder image to use go1.21.4 and add new cosign image tags with shell (#3373)
  Documentation:
  * Update SBOM_SPEC.md (#3358)</changelog>
  <changelog author="meissner@suse.com" date="1706875200">- updated to 2.2.3 (jsc#SLE-23879)
  Bug Fixes:
  * Fix race condition on verification with multiple signatures attached to image (#3486)
  * fix(clean): Fix clean cmd for private registries (#3446)
  * Fixed BYO PKI verification (#3427)
  Features:
  * Allow for option in cosign attest and attest-blob to upload attestation as supported in Rekor (#3466)
  * Add support for OpenVEX predicate type (#3405)
  Documentation:
  * Resolves #3088: `version` sub-command expected behaviour documentation and testing (#3447)
  * add examples for cosign attach signature cmd (#3468)
  Misc:
  * Remove CertSubject function (#3467)
  * Use local rekor and fulcio instances in e2e tests (#3478)
- bumped embedded golang.org/x/crypto/ssh to fix the Terrapin attack CVE-2023-48795 (bsc#1218207)</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- updated to 2.2.4 (jsc#SLE-23879)
  * Bug Fixes
  * Fixes for GHSA-88jx-383q-w4qc and GHSA-95pr-fxf5-86gv (#3661)
  - CVE-2024-29902: Malicious attachments can cause system-wide denial of service (bsc#1222835)
  - CVE-2024-29903: Malicious artifects can cause machine-wide denial of service (bsc#1222837)
  * ErrNoSignaturesFound should be used when there is no signature attached to an image. (#3526)
  * fix semgrep issues for dgryski.semgrep-go ruleset (#3541)
  * Honor creation timestamp for signatures again (#3549)
  * Features
  * Adds Support for Fulcio Client Credentials Flow, and Argument to Set Flow Explicitly (#3578)
  * Documentation
  * add oci bundle spec (#3622)
  * Correct help text of triangulate cmd (#3551)
  * Correct help text of verify-attestation policy argument (#3527)
  * feat: add OVHcloud MPR registry tested with cosign (#3639)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1717156800">- add completion subpackages (bash, fish, zsh)</changelog>
  <changelog author="meissner@suse.com" date="1721822400">- update to 2.3.0 (jsc#SLE-23879)
  * Features
  - Add PayloadProvider interface to decouple AttestationToPayloadJSON from oci.Signature interface (#3693)
  - add registry options to cosign save (#3645)
  - Add debug providers command. (#3728)
  - Make config layers in ociremote mountable (#3741)
  - adds tsa cert chain check for env var or tuf targets. (#3600)
  - add --ca-roots and --ca-intermediates flags to 'cosign verify' (#3464)
  - add handling of keyless verification for all verify commands (#3761)
  * Bug Fixes
  - fix: close attestationFile (#3679)
  - Set bundleVerified to true after Rekor verification (Resolves #3740) (#3745)
  * Documentation
  - Document ImportKeyPair and LoadPrivateKey functions in pkg/cosign (#3776)</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1724155200">- Set CGO_ENABLED=1 for fixing s390x failed build</changelog>
  <changelog author="meissner@suse.com" date="1727870400">- update to 2.4.0 (jsc#SLE-23879)
  - Add new bundle support to verify-blob and verify-blob-attestation (#3796)
  - Adding protobuf bundle support to sign-blob and attest-blob (#3752)
  - Bump sigstore/sigstore to support email_verified as string or boolean (#3819)
  - Conformance testing for cosign (#3806)
  - move incremental builds per commit to GHCR instead of GCR (#3808)
  - Add support for recording creation timestamp for cosign attest (#3797)
  - Include SCT verification failure details in error message (#3799)</changelog>
  <changelog author="meissner@suse.com" date="1738756800">- Update to version 2.4.2:
  - Updated open-policy-agent to 1.1.0 library (#4036)
  - Note that only Rego v0 policies are supported at this time
  - Add UseSignedTimestamps to CheckOpts, refactor TSA options (#4006)
  - Add support for verifying root checksum in cosign initialize (#3953)
  - Detect if user supplied a valid protobuf bundle (#3931)
  - Add a log message if user doesn't provide --trusted-root (#3933)
  - Support mTLS towards container registry (#3922)
  - Add bundle create helper command (#3901)
  - Add trusted-root create helper command (#3876)
  Bug Fixes:
  - fix: set tls config while retaining other fields from default http transport (#4007)
  - policy fuzzer: ignore known panics (#3993)
  - Fix for multiple WithRemote options (#3982)
  - Add nightly conformance test workflow (#3979)
  - Fix copy --only for signatures + update/align docs (#3904)
- use "osc service mr" to update</changelog>
  <changelog author="meissner@suse.com" date="1740052800">- Update to version 2.4.3:
  * Enable fetching signatures without remote get. (#4047)
  * Bump sigstore/sigstore to support KMS plugins (#4073)
  * sort properly Go imports (#4071)
  * sync comment with parameter name in function signature (#4063)
  * fix go imports order to be alphabetical (#4062)
  * fix comment typo and imports order (#4061)
  * Feat/file flag completion improvements (#4028)
  * Udpate builder to use go1.23.6 (#4052)
  * Refactor verifyNewBundle into library function (#4013)
  * fix parsing error in --only for cosign copy (#4049)
  * Fix codeowners syntax, add dep-maintainers (#4046)</changelog>
  <changelog author="meissner@suse.com" date="1744545600">- Update to version 2.5.0:
  * Update sigstore-go to pick up bug fixes (#4150)
  * Update golangci-lint to v2, update golangci-lint-action (#4143)
  * Feat/non filename completions (#4115)
  * update builder to use go1.24.1 (#4116)
  * Add support for new bundle specification for attesting/verifying OCI image attestations (#3889)
  * Remove cert log line (#4113)
  * cmd/cosign/cli: fix typo in ignoreTLogMessage (#4111)
  * bump to latest scaffolding release for testing (#4099)
  * increase 2e2_test docker compose tiemout to 180s (#4091)
  * Fix replace with compliant image mediatype (#4077)
  * Add TSA certificate related flags and fields for cosign attest (#4079)
- Security issues fixed:
  - CVE-2024-6104: cosign: hashicorp/go-retryablehttp: url might write sensitive information to log file (bsc#1227031)
  - CVE-2024-51744: cosign: github.com/golang-jwt/jwt/v4: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt (bsc#1232985)
  - CVE-2025-27144: cosign: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: Go JOSE's Parsing Vulnerable to Denial of Service (bsc#1237682)
  - CVE-2025-22870: cosign: golang.org/x/net/proxy: proxy bypass using IPv6 zone IDs (bsc#1238693)
  - CVE-2025-22868: cosign: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239204)
  - CVE-2025-22869: cosign: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239337)</changelog>
  <changelog author="meissner@suse.com" date="1748433600">- switch to go1.24, enable fips build</changelog>
  <changelog author="meissner@suse.com" date="1752840000">- Update to version 2.5.3 (jsc#SLE-23879)
  - Add signing-config create command (#4280)
  - Allow multiple services to be specified for trusted-root create (#4285)
  - force when copying the latest image to overwrite (#4298)
  - Fix cert verification logic for trusted-root/SCTs (#4294)
  - Fix lint error for types package (#4295)
  - feat: Add OCI 1.1+ experimental support to tree (#4205)
  - Add validity period end for trusted-root create (#4271)
  - avoid double-loading trustedroot from file (#4264)
- Update to 2.5.2:
  - Do not load trusted root when CT env key is set
  - docs: improve doc for --no-upload option (#4206)
- Update to 2.5.1:
  * Features
  - Add Rekor v2 support for trusted-root create (#4242)
  - Add baseUrl and Uri to trusted-root create command
  - Upgrade to TUF v2 client with trusted root
  - Don't verify SCT for a private PKI cert (#4225)
  - Bump TSA library to relax EKU chain validation rules (#4219)
  * Bug Fixes
  - Bump sigstore-go to pick up log index=0 fix (#4162)
  - remove unused recursive flag on attest command (#4187)
  * Docs
  - Fix indentation in verify-blob cmd examples (#4160)
  * GO-2025-3660/ CVE-2025-46569: Fixed OPA server Data API HTTP path injection of Rego (bsc#1246725)</changelog>
  <changelog author="meissner@suse.com" date="1758196800">- Update to version 2.6.0:
  - Require exclusively a SigningConfig or service URLs when signing (#4403)
  - Add a terminal spinner while signing with sigstore-go (#4402)
  - Bump sigstore-go, support alternative hash algorithms with keys (#4386)
  - Add support for SigningConfig in sign/attest (#4371)
  - Support self-managed keys when signing with sigstore-go (#4368)
  - Remove SHA256 assumption in sign-blob/verify-blob (#4050)
  - introduce dockerfile to pin the go version to decouple go version from go.mod (#4369)
  - refactor: extract function to write referrer attestations (#4357)
  - Break import cycle with e2e build tag (#4370)
  - Update conformance test binary for signing config (#4367)
  - update builder image to use go1.25 (#4366)
  - Don't load content from TUF if trusted root path is specified (#4347)
  - Don't require timestamps when verifying with a key (#4337)
  - Fixes to cosign sign / verify for the new bundle format (#4346)
  - update builder to use go1.24.6 (#4334)
  - bump golangci-lint to v2.3.x (#4333)
  - Have cosign sign support bundle format (#4316)
  - Add support for SigningConfig for sign-blob/attest-blob, support Rekor v2 (#4319)
  - Verify subject with bundle only when checking claims (#4320)
  - Add to `attest-blob` the ability to supply a complete in-toto statement, and add to `verify-blob-attestation` the ability to verify with just a digest (#4306)</changelog>
  <changelog author="meissner@suse.com" date="1765368000">- Update to version 3.0.3:
  * 4554: Closes 4554 - Add warning when --output* is used (#4556)
  * chore(deps): bump golangci/golangci-lint-action from 8.0.0 to 9.1.0 (#4545)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.111.0 to 3.113.0 (#4542)
  * chore(deps): bump github.com/awslabs/amazon-ecr-credential-helper/ecr-login (#4543)
  * chore(deps): bump actions/checkout from 5.0.0 to 6.0.0 (#4546)
  * chore(deps): bump the actions group with 4 updates (#4544)
  * chore(deps): bump the gomod group across 1 directory with 5 updates (#4567)
  * chore(deps): bump golang from 1.25.4 to 1.25.5 in the all group (#4568)
  * update builder to use go1.25.5 (#4566)
  * Protobuf bundle support for subcommand `clean` (#4539)
  * Add staging flag to initialize with staging TUF metadata
  * update slack invite link (#4560)
  * Updating sign-blob to also support signing with a certificate (#4547)
  * Bump sigstore library dependencies (#4532)
  * Protobuf bundle support for subcommands `save` and `load` (#4538)
  * Fix cert attachment for new bundle with signing config
  * Fix OCI verification with local cert - old bundle
  * chore(deps): bump github.com/sigstore/fulcio from 1.7.1 to 1.8.1 (#4519)
  * chore(deps): bump golang.org/x/crypto in /test/fakeoidc (#4535)
  * chore(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0 (#4536)
  * CVE-2025-58181: Fixed golang.org/x/crypto/ssh: invalidated number
    of mechanisms can cause unbounded memory consumption (bsc#1253913)
  * update go builder and cosign (#4529)
  * chore(deps): bump the gomod group across 1 directory with 7 updates (#4528)
  * chore(deps): bump sigstore/cosign-installer from 3.10.0 to 4.0.0 (#4478)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4520)
  * chore(deps): bump golang from 1.25.3 to 1.25.4 in the all group (#4515)
  * chore(deps): bump golang.org/x/oauth2 from 0.32.0 to 0.33.0 (#4518)
  * chore(deps): bump cuelang.org/go from 0.14.2 to 0.15.0 (#4524)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.9.0 to 1.10.1 (#4521)
  * chore(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 (#4502)
  * chore(deps): bump the actions group across 1 directory with 2 updates (#4516)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.110.0 to 3.111.0 (#4523)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4522)
  * Deprecate tlog-upload flag (#4458)
  * fix: Use signal context for `sign` cli package.
  * update offline verification directions (#4526)
  * Fix signing/verifying annotations for new bundle
  * Add support to download and attach for protobuf bundles (#4477)
  * Add --signing-algorithm flag (#3497)
  * Refactor signcommon bundle helpers
  * Add --bundle and fix --upload for new bundle
  * Pass insecure registry flags through to referrers
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.108.0 to 3.109.1 (#4483)
  * Add protobuf bundle support for tree subcommand (#4491)
  * Remove stale embed import (#4492)
  * Support multiple container identities
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4484)
  * chore(deps): bump chainguard-dev/actions in the actions group (#4480)
  * chore(deps): bump github.com/sigstore/rekor-tiles/v2 (#4485)
  * chore(deps): bump golang.org/x/crypto from 0.42.0 to 0.43.0 (#4486)
  * chore(deps): bump cuelang.org/go in the gomod group (#4479)
  * upgrade OSS-Fuzz build tooling (#4487)
  * Fix segfault when no attestations are found (#4472)
  * Use overridden repository for new bundle format (#4473)
  * update go to 1.25.3 (#4471)
  * Remove --out flag from `cosign initialize` (#4462)
  * chore(deps): bump the actions group with 2 updates (#4460)
  * Deprecate offline flag (#4457)
  * Deduplicate code in sign/attest* and verify* commands (#4449)
  * Cache signing config when calling initialize (#4456)
  * Update changelog for v3.0.2 (#4455)
  * chore(deps): bump google.golang.org/api from 0.250.0 to 0.251.0
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go
  * chore(deps): bump the actions group with 3 updates
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.107.2 to 3.108.0
  * choose different signature filename for KMS-signed release signatures (#4448)
  * chore(deps): bump github.com/go-jose/go-jose/v4 (#4451)
  * Update rekor-tiles version path
  * update CL for v3.0.1 release (#4447)
  * update goreleaser config for v3.0.0 release (#4446)
  * Create changelog for v3.0.0 (#4440)
  * Fetch service URLs from the TUF PGI signing config by default (#4428)
  * Create changelog for v2.6.1 (#4439)
  * chore(deps): bump google.golang.org/api from 0.249.0 to 0.250.0 (#4432)
  * chore(deps): bump the gomod group with 2 updates (#4429)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.8.0 to 1.9.0 (#4433)
  * chore(deps): bump the actions group with 3 updates (#4434)
  * chore(deps): bump github.com/go-openapi/swag from 0.24.1 to 0.25.1 (#4435)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4436)
  * chore(deps): bump github.com/go-openapi/runtime from 0.28.0 to 0.29.0 (#4437)
  * Bump module version to v3 for Cosign v3.0 (#4427)
  * Move sigstore-conformance back to tagged release (#4425)
  * Bump sigstore-go to v1.1.3 (#4423)
  * Partially populate the output of cosign verify when working with new bundles (#4416)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4419)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4418)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.105.0 to 3.107.0 (#4420)
  * chore(deps): bump chainguard-dev/actions in the actions group (#4421)
  * bump go builder to use 1.25.1 and cosign (#4417)
  * Bump sigstore-go for more precise user agents (#4413)
  * chore(deps): bump github.com/spf13/viper from 1.20.1 to 1.21.0 (#4408)
  * chore(deps): bump the actions group with 2 updates (#4407)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4410)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.104.0 to 3.105.0 (#4411)
  * Default to using the new protobuf format (#4318)</changelog>
  <changelog author="meissner@suse.com" date="1770811200">- Update to version 3.0.4:
  * CVE-2025-11065: Fixed github.com/go-viper/mapstructure/v2: sensitive
    Information leak in logs (bsc#1250620)
  * CVE-2026-22703: Fixed that cosign verification accepts any valid
    Rekor entry under certain conditions (bsc#1256496)
  * Fix bundle verify path for old bundle/trusted root (#4623)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4616)
  * chore(deps): bump cuelang.org/go in the gomod group (#4615)
  * Optimize cosign tree performance by caching digest resolution (#4612)
  * Don't require a trusted root to verify offline with a key (#4613)
  * Support default services for trusted-root and signing-config creation (#4592)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4602)
  * chore(deps): bump github.com/sigstore/sigstore-go (#4578)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.114.1 to 3.115.2 (#4601)
  * chore(deps): bump google.golang.org/api from 0.257.0 to 0.258.0 (#4611)
  * chore(deps): bump k8s.io/client-go from 0.34.3 to 0.35.0 (#4604)
  * chore(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 (#4588)
  * chore(deps): bump golang.org/x/oauth2 from 0.33.0 to 0.34.0 (#4586)
  * chore(deps): bump the gomod group with 5 updates (#4599)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.10.1 to 1.12.1 (#4600)
  * chore(deps): bump golang.org/x/term from 0.37.0 to 0.38.0 (#4584)
  * chore(deps): bump the actions group with 3 updates (#4587)
  * chore(deps): bump actions/cache from 4.3.0 to 5.0.1 (#4589)
  * chore(deps): bump the gomod group with 9 updates (#4577)</changelog>
  <changelog author="meissner@suse.com" date="1771761600">- Update to version 3.0.5: (jsc#SLE-23879)
  * CVE-2026-24122: Fixed improper validation of certificates that
    outlive expired CA certificates (bsc#1258542)
  * CVE-2026-26958: Fixed filippo.io/edwards25519: failure to initialize
    receiver in MultiScalarMult can produce invalid results and lead to
    undefined behavior (bsc#1258612)
  * CVE-2026-24137: Fixed github.com/sigstore/sigstore/pkg/tuf: legacy
    TUF client allows for arbitrary file writes with target cache path
    traversal (bsc#1257139)
  * CVE-2026-22772: Fixed github.com/sigstore/fulcio: bypass MetaIssuer
    URL validation bypass can trigger SSRF to arbitrary internal services
    (bsc#1256562)
  * CVE-2026-23991: Fixed github.com/theupdateframework/go-tuf/v2: denial
    of service due to invalid TUF metadata JSON returned by TUF repository
    (bsc#1257080)
  * CVE-2026-23992: Fixed github.com/theupdateframework/go-tuf/v2:
    unauthorized modification to TUF metadata files due to a compromised
    or misconfigured TUF repository (bsc#1257085)
  * chore(deps): bump google.golang.org/api from 0.260.0 to 0.264.0 (#4679)
  * chore(deps): bump github.com/sigstore/rekor-tiles/v2 from 2.0.1 to 2.1.0 (#4670)
  * chore(deps): bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 (#4712)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4680)
  * chore(deps): bump the gomod group across 1 directory with 4 updates (#4702)
  * chore(deps): bump the actions group with 3 updates (#4703)
  * update golang builder to use go1.25.7 (#4687)
  * update golangci-lint to v2.8.x (#4688)
  * Fix typo in CLI help (#4701)
  * Support DSSE signing conformance test (#4685)
  * chore(deps): bump the actions group across 1 directory with 8 updates (#4689)
  * Deprecate rekor-entry-type flag (#4691)
  * Deprecate cosign triangulate (#4676)
  * Deprecate cosign copy (#4681)
  * Enforce TSA requirement for Rekor v2, Fuclio signing (#4683)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4668)
  * chore(deps): bump golang from 1.25.5 to 1.25.6 in the all group (#4673)
  * Automatically require signed timestamp with Rekor v2 entries (#4666)
  * Fix syntax issue in conformance test, update nightly (#4664)
  * Add mTLS support for TSA client connections when signing with a signing config (#4620)
  * fix: avoid panic on malformed tlog entry body (#4652)
  * Verify validity of chain rather than just certificate (#4663)
  * Allow --local-image with --new-bundle-format for v2 and v3 signatures (#4626)
  * chore(deps): bump the gomod group across 1 directory with 3 updates (#4662)
  * Bump sigstore/sigstore to resolve GHSA (#4660)
  * Gracefully fail if bundle payload body is not a string (#4648)
  * fix: avoid panic on malformed replace payload (#4653)
  * chore(deps): bump github.com/sigstore/rekor from 1.4.3 to 1.5.0 (#4659)
  * fix: avoid panic on malformed attestation payload (#4651)
  * fix: avoid panic on malformed tlog entries (#4649)
  * Update conformance to latest
  * docs(cosign): clarify RFC3161 revocation semantics (#4642)
  * Add empty predicate to cosign sign when payload type is application/vnd.in-toto+json (#4635)
  * chore(deps): bump github.com/sigstore/fulcio from 1.8.4 to 1.8.5 (#4637)
  * Add origin key for ctfe trusted root
  * Add changelog updates for v3.0.4 and v2.6.2 (#4625)</changelog>
</package>
<package pkgid="d0c808b69c341d51d76f0d53db06c30cd4201aaeba86bef8c691dde185f8aa7f" name="cosign-zsh-completion" arch="noarch">
  <version epoch="0" ver="3.0.5" rel="150400.3.37.1"/>
  <changelog author="meissner@suse.com" date="1683460800">- update to 2.0.2 (jsc#SLE-23879)
  Enhancements
  - Update sigstore/sigstore to v1.6.2 to pick up TUF CDN change (#2891)
  - feat: Make cosign copy faster (#2901)
  - remove sget (#2885)
  - Require a payload to be provided with a signature (#2785)
  Bug Fixes
  - cmd: Change error message from KeyParseError to PubKeyParseError for verify-blob. (#2876)
  - Use SOURCE_DATE_EPOCH for OCI CreatedAt times (#2878)
  Documentation
  - Remove experimental warning from Fulcio flags (#2923)
  - add missing oidc provider (#2922)
  - Add zot as a supported registry (#2920)
  - deprecates kms_support docs (#2900)
  - chore(docs) deprecate note for usage docs (#2906)
  - adds note of deprecation for examples.md docs (#2899)</changelog>
  <changelog author="meissner@suse.com" date="1687867200">- updated to 2.1.1 (jsc#SLE-23879)
  - Bug Fixes
  - wait for the workers become available again to continue the execution (#3084)
  - fix help text when in a container (#3082)
- updated to 2.1.0 (jsc#SLE-23879)
  - Breaking Change: The predicate is now a required flag in the attest commands, set via the --type flag.
  - Enhancements
  - Verify sigs and attestations in parallel (#3066)
  - Deep inspect attestations when filtering download (#3031)
  - refactor bundle validation code, add support for DSSE rekor type (#3016)
  - Allow overriding remote options (#3049)
  - feat: adds no cert found on sig exit code (#3038)
  - Make predicate a required flag in attest commands (#3033)
  - Added support for attaching Time stamp authority Response in attach command (#3001)
  - Add sign --sign-container-identity CLI (#2984)
  - Feature: Allow cosign to sign digests before they are uploaded. (#2959)
  - accepts attachment-tag-prefix for cosign copy (#3014)
  - Feature: adds '--allow-insecure-registry' for cosign load (#3000)
  - download attestation: support --platform flag (#2980)
  - Cleanup: Add Digest to the SignedEntity interface. (#2960)
  - verify command: support keyless verification using only a provided certificate chain with non-fulcio roots (#2845)
  - verify: use workers to limit the paralellism when verifying images with --max-workers flag (#3069)
  - Bug Fixes
  - Fix pkg/cosign/errors (#3050)
  - Fix: update doc to refer to github-actions oidc provider (#3040)
  - Fix: prefer GitHub OIDC provider if enabled (#3044)
  - Fix --sig-only in cosign copy (#3074)
  - Documentation
  - Fix links to sigstore/docs in markdown files (#3064)</changelog>
  <changelog author="meissner@suse.com" date="1693569600">- updated to 2.2.0 (jsc#SLE-23879)
  - Enhancements
  * switch to uploading DSSE types to rekor instead of intoto (#3113)
  * add 'cosign sign' command-line parameters for mTLS (#3052)
  * improve error messages around bundle != payload hash (#3146)
  * make VerifyImageAttestation function public (#3156)
  * Switch to cryptoutils function for SANS (#3185)
  * Handle HTTP_1_1_REQUIRED errors in github provider (#3172)
  - Bug Fixes
  * Fix nondeterminsitic timestamps (#3121)
  - Documentation
  * doc: Add example of sign-blob with key in env var (#3152)
  * add deprecation notice for cosign-releases GCS bucket (#3148)
  * update doc links (#3186)</changelog>
  <changelog author="meissner@suse.com" date="1699358400">- updated to 2.2.1 (jsc#SLE-23879)
  This release comes with a fix for
  CVE-2023-46737 / bsc#1216933 described in this [Github Security
  Advisory](https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9).
  Enhancements:
  * feat: Support basic auth and bearer auth login to registry (#3310)
  * add support for ignoring certificates with pkcs11 (#3334)
  * Support ReplaceOp in Signatures (#3315)
  * feat: added ability to get image digest back via triangulate (#3255)
  * feat: add `--only` flag in `cosign copy` to copy sign, att &amp; sbom (#3247)
  * feat: add support attaching a Rekor bundle to a container (#3246)
  * feat: add support outputting rekor response on signing (#3248)
  * feat: improve dockerfile verify subcommand (#3264)
  * Add guard flag for experimental OCI 1.1 verify. (#3272)
  * Deprecate SBOM attachments (#3256)
  * feat: dedent line in cosign copy doc (#3244)
  * feat: add platform flag to cosign copy command (#3234)
  * Add SLSA 1.0 attestation support to cosign. Closes #2860 (#3219)
  * attest: pass OCI remote opts to att resolver. (#3225)
  Bug Fixes:
  * Merge pull request from GHSA-vfp6-jrw2-99g9
  * fix: allow cosign download sbom when image is absent (#3245)
  * ci: add a OCI registry test for referrers support (#3253)
  * Fix ReplaceSignatures (#3292)
  * Stop using deprecated in_toto.ProvenanceStatement (#3243)
  * Fixes #3236, disable SCT checking for a cosign verification when usin… (#3237)
  * fix: update error in `SignedEntity` to be more descriptive (#3233)
  * Fail timestamp verification if no root is provided (#3224)
  Documentation:
  * Add some docs about verifying in an air-gapped environment (#3321)
  * Update CONTRIBUTING.md (#3268)
  * docs: improves the Contribution guidelines (#3257)
  * Remove security policy (#3230)
  Others:
  * Set go to min 1.21 and update dependencies  (#3327)
  * Update contact for code of conduct (#3266)
  * Update .ko.yaml (#3240)</changelog>
  <changelog author="marcos.bjoerkelund@suse.com" date="1702382400">- updated to 2.2.2 (jsc#SLE-23879)
  v2.2.2 adds a new container with a shell,
  gcr.io/projectsigstore/cosign:vx.y.z-dev, in addition to the existing
  container gcr.io/projectsigstore/cosign:vx.y.z without a shell.
  For private deployments, we have also added an alias for
  - -insecure-skip-log, --private-infrastructure.
  Bug Fixes:
  * chore(deps): bump github.com/sigstore/sigstore from 1.7.5 to 1.7.6 (#3411) which fixes a bug with using Azure KMS
  * Don't require CT log keys if using a key/sk (#3415)
  * Fix copy without any flag set (#3409)
  * Update cosign generate cmd to not include newline (#3393)
  * Fix idempotency error with signing (#3371)
  Features:
  * Add --yes flag cosign import-key-pair to skip the overwrite confirmation. (#3383)
  * Use the timeout flag value in verify* commands. (#3391)
  * add --private-infrastructure flag (#3369)
  Container Updates:
  * Bump builder image to use go1.21.4 and add new cosign image tags with shell (#3373)
  Documentation:
  * Update SBOM_SPEC.md (#3358)</changelog>
  <changelog author="meissner@suse.com" date="1706875200">- updated to 2.2.3 (jsc#SLE-23879)
  Bug Fixes:
  * Fix race condition on verification with multiple signatures attached to image (#3486)
  * fix(clean): Fix clean cmd for private registries (#3446)
  * Fixed BYO PKI verification (#3427)
  Features:
  * Allow for option in cosign attest and attest-blob to upload attestation as supported in Rekor (#3466)
  * Add support for OpenVEX predicate type (#3405)
  Documentation:
  * Resolves #3088: `version` sub-command expected behaviour documentation and testing (#3447)
  * add examples for cosign attach signature cmd (#3468)
  Misc:
  * Remove CertSubject function (#3467)
  * Use local rekor and fulcio instances in e2e tests (#3478)
- bumped embedded golang.org/x/crypto/ssh to fix the Terrapin attack CVE-2023-48795 (bsc#1218207)</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- updated to 2.2.4 (jsc#SLE-23879)
  * Bug Fixes
  * Fixes for GHSA-88jx-383q-w4qc and GHSA-95pr-fxf5-86gv (#3661)
  - CVE-2024-29902: Malicious attachments can cause system-wide denial of service (bsc#1222835)
  - CVE-2024-29903: Malicious artifects can cause machine-wide denial of service (bsc#1222837)
  * ErrNoSignaturesFound should be used when there is no signature attached to an image. (#3526)
  * fix semgrep issues for dgryski.semgrep-go ruleset (#3541)
  * Honor creation timestamp for signatures again (#3549)
  * Features
  * Adds Support for Fulcio Client Credentials Flow, and Argument to Set Flow Explicitly (#3578)
  * Documentation
  * add oci bundle spec (#3622)
  * Correct help text of triangulate cmd (#3551)
  * Correct help text of verify-attestation policy argument (#3527)
  * feat: add OVHcloud MPR registry tested with cosign (#3639)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1717156800">- add completion subpackages (bash, fish, zsh)</changelog>
  <changelog author="meissner@suse.com" date="1721822400">- update to 2.3.0 (jsc#SLE-23879)
  * Features
  - Add PayloadProvider interface to decouple AttestationToPayloadJSON from oci.Signature interface (#3693)
  - add registry options to cosign save (#3645)
  - Add debug providers command. (#3728)
  - Make config layers in ociremote mountable (#3741)
  - adds tsa cert chain check for env var or tuf targets. (#3600)
  - add --ca-roots and --ca-intermediates flags to 'cosign verify' (#3464)
  - add handling of keyless verification for all verify commands (#3761)
  * Bug Fixes
  - fix: close attestationFile (#3679)
  - Set bundleVerified to true after Rekor verification (Resolves #3740) (#3745)
  * Documentation
  - Document ImportKeyPair and LoadPrivateKey functions in pkg/cosign (#3776)</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1724155200">- Set CGO_ENABLED=1 for fixing s390x failed build</changelog>
  <changelog author="meissner@suse.com" date="1727870400">- update to 2.4.0 (jsc#SLE-23879)
  - Add new bundle support to verify-blob and verify-blob-attestation (#3796)
  - Adding protobuf bundle support to sign-blob and attest-blob (#3752)
  - Bump sigstore/sigstore to support email_verified as string or boolean (#3819)
  - Conformance testing for cosign (#3806)
  - move incremental builds per commit to GHCR instead of GCR (#3808)
  - Add support for recording creation timestamp for cosign attest (#3797)
  - Include SCT verification failure details in error message (#3799)</changelog>
  <changelog author="meissner@suse.com" date="1738756800">- Update to version 2.4.2:
  - Updated open-policy-agent to 1.1.0 library (#4036)
  - Note that only Rego v0 policies are supported at this time
  - Add UseSignedTimestamps to CheckOpts, refactor TSA options (#4006)
  - Add support for verifying root checksum in cosign initialize (#3953)
  - Detect if user supplied a valid protobuf bundle (#3931)
  - Add a log message if user doesn't provide --trusted-root (#3933)
  - Support mTLS towards container registry (#3922)
  - Add bundle create helper command (#3901)
  - Add trusted-root create helper command (#3876)
  Bug Fixes:
  - fix: set tls config while retaining other fields from default http transport (#4007)
  - policy fuzzer: ignore known panics (#3993)
  - Fix for multiple WithRemote options (#3982)
  - Add nightly conformance test workflow (#3979)
  - Fix copy --only for signatures + update/align docs (#3904)
- use "osc service mr" to update</changelog>
  <changelog author="meissner@suse.com" date="1740052800">- Update to version 2.4.3:
  * Enable fetching signatures without remote get. (#4047)
  * Bump sigstore/sigstore to support KMS plugins (#4073)
  * sort properly Go imports (#4071)
  * sync comment with parameter name in function signature (#4063)
  * fix go imports order to be alphabetical (#4062)
  * fix comment typo and imports order (#4061)
  * Feat/file flag completion improvements (#4028)
  * Udpate builder to use go1.23.6 (#4052)
  * Refactor verifyNewBundle into library function (#4013)
  * fix parsing error in --only for cosign copy (#4049)
  * Fix codeowners syntax, add dep-maintainers (#4046)</changelog>
  <changelog author="meissner@suse.com" date="1744545600">- Update to version 2.5.0:
  * Update sigstore-go to pick up bug fixes (#4150)
  * Update golangci-lint to v2, update golangci-lint-action (#4143)
  * Feat/non filename completions (#4115)
  * update builder to use go1.24.1 (#4116)
  * Add support for new bundle specification for attesting/verifying OCI image attestations (#3889)
  * Remove cert log line (#4113)
  * cmd/cosign/cli: fix typo in ignoreTLogMessage (#4111)
  * bump to latest scaffolding release for testing (#4099)
  * increase 2e2_test docker compose tiemout to 180s (#4091)
  * Fix replace with compliant image mediatype (#4077)
  * Add TSA certificate related flags and fields for cosign attest (#4079)
- Security issues fixed:
  - CVE-2024-6104: cosign: hashicorp/go-retryablehttp: url might write sensitive information to log file (bsc#1227031)
  - CVE-2024-51744: cosign: github.com/golang-jwt/jwt/v4: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt (bsc#1232985)
  - CVE-2025-27144: cosign: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: Go JOSE's Parsing Vulnerable to Denial of Service (bsc#1237682)
  - CVE-2025-22870: cosign: golang.org/x/net/proxy: proxy bypass using IPv6 zone IDs (bsc#1238693)
  - CVE-2025-22868: cosign: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239204)
  - CVE-2025-22869: cosign: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239337)</changelog>
  <changelog author="meissner@suse.com" date="1748433600">- switch to go1.24, enable fips build</changelog>
  <changelog author="meissner@suse.com" date="1752840000">- Update to version 2.5.3 (jsc#SLE-23879)
  - Add signing-config create command (#4280)
  - Allow multiple services to be specified for trusted-root create (#4285)
  - force when copying the latest image to overwrite (#4298)
  - Fix cert verification logic for trusted-root/SCTs (#4294)
  - Fix lint error for types package (#4295)
  - feat: Add OCI 1.1+ experimental support to tree (#4205)
  - Add validity period end for trusted-root create (#4271)
  - avoid double-loading trustedroot from file (#4264)
- Update to 2.5.2:
  - Do not load trusted root when CT env key is set
  - docs: improve doc for --no-upload option (#4206)
- Update to 2.5.1:
  * Features
  - Add Rekor v2 support for trusted-root create (#4242)
  - Add baseUrl and Uri to trusted-root create command
  - Upgrade to TUF v2 client with trusted root
  - Don't verify SCT for a private PKI cert (#4225)
  - Bump TSA library to relax EKU chain validation rules (#4219)
  * Bug Fixes
  - Bump sigstore-go to pick up log index=0 fix (#4162)
  - remove unused recursive flag on attest command (#4187)
  * Docs
  - Fix indentation in verify-blob cmd examples (#4160)
  * GO-2025-3660/ CVE-2025-46569: Fixed OPA server Data API HTTP path injection of Rego (bsc#1246725)</changelog>
  <changelog author="meissner@suse.com" date="1758196800">- Update to version 2.6.0:
  - Require exclusively a SigningConfig or service URLs when signing (#4403)
  - Add a terminal spinner while signing with sigstore-go (#4402)
  - Bump sigstore-go, support alternative hash algorithms with keys (#4386)
  - Add support for SigningConfig in sign/attest (#4371)
  - Support self-managed keys when signing with sigstore-go (#4368)
  - Remove SHA256 assumption in sign-blob/verify-blob (#4050)
  - introduce dockerfile to pin the go version to decouple go version from go.mod (#4369)
  - refactor: extract function to write referrer attestations (#4357)
  - Break import cycle with e2e build tag (#4370)
  - Update conformance test binary for signing config (#4367)
  - update builder image to use go1.25 (#4366)
  - Don't load content from TUF if trusted root path is specified (#4347)
  - Don't require timestamps when verifying with a key (#4337)
  - Fixes to cosign sign / verify for the new bundle format (#4346)
  - update builder to use go1.24.6 (#4334)
  - bump golangci-lint to v2.3.x (#4333)
  - Have cosign sign support bundle format (#4316)
  - Add support for SigningConfig for sign-blob/attest-blob, support Rekor v2 (#4319)
  - Verify subject with bundle only when checking claims (#4320)
  - Add to `attest-blob` the ability to supply a complete in-toto statement, and add to `verify-blob-attestation` the ability to verify with just a digest (#4306)</changelog>
  <changelog author="meissner@suse.com" date="1765368000">- Update to version 3.0.3:
  * 4554: Closes 4554 - Add warning when --output* is used (#4556)
  * chore(deps): bump golangci/golangci-lint-action from 8.0.0 to 9.1.0 (#4545)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.111.0 to 3.113.0 (#4542)
  * chore(deps): bump github.com/awslabs/amazon-ecr-credential-helper/ecr-login (#4543)
  * chore(deps): bump actions/checkout from 5.0.0 to 6.0.0 (#4546)
  * chore(deps): bump the actions group with 4 updates (#4544)
  * chore(deps): bump the gomod group across 1 directory with 5 updates (#4567)
  * chore(deps): bump golang from 1.25.4 to 1.25.5 in the all group (#4568)
  * update builder to use go1.25.5 (#4566)
  * Protobuf bundle support for subcommand `clean` (#4539)
  * Add staging flag to initialize with staging TUF metadata
  * update slack invite link (#4560)
  * Updating sign-blob to also support signing with a certificate (#4547)
  * Bump sigstore library dependencies (#4532)
  * Protobuf bundle support for subcommands `save` and `load` (#4538)
  * Fix cert attachment for new bundle with signing config
  * Fix OCI verification with local cert - old bundle
  * chore(deps): bump github.com/sigstore/fulcio from 1.7.1 to 1.8.1 (#4519)
  * chore(deps): bump golang.org/x/crypto in /test/fakeoidc (#4535)
  * chore(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0 (#4536)
  * CVE-2025-58181: Fixed golang.org/x/crypto/ssh: invalidated number
    of mechanisms can cause unbounded memory consumption (bsc#1253913)
  * update go builder and cosign (#4529)
  * chore(deps): bump the gomod group across 1 directory with 7 updates (#4528)
  * chore(deps): bump sigstore/cosign-installer from 3.10.0 to 4.0.0 (#4478)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4520)
  * chore(deps): bump golang from 1.25.3 to 1.25.4 in the all group (#4515)
  * chore(deps): bump golang.org/x/oauth2 from 0.32.0 to 0.33.0 (#4518)
  * chore(deps): bump cuelang.org/go from 0.14.2 to 0.15.0 (#4524)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.9.0 to 1.10.1 (#4521)
  * chore(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 (#4502)
  * chore(deps): bump the actions group across 1 directory with 2 updates (#4516)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.110.0 to 3.111.0 (#4523)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4522)
  * Deprecate tlog-upload flag (#4458)
  * fix: Use signal context for `sign` cli package.
  * update offline verification directions (#4526)
  * Fix signing/verifying annotations for new bundle
  * Add support to download and attach for protobuf bundles (#4477)
  * Add --signing-algorithm flag (#3497)
  * Refactor signcommon bundle helpers
  * Add --bundle and fix --upload for new bundle
  * Pass insecure registry flags through to referrers
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.108.0 to 3.109.1 (#4483)
  * Add protobuf bundle support for tree subcommand (#4491)
  * Remove stale embed import (#4492)
  * Support multiple container identities
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4484)
  * chore(deps): bump chainguard-dev/actions in the actions group (#4480)
  * chore(deps): bump github.com/sigstore/rekor-tiles/v2 (#4485)
  * chore(deps): bump golang.org/x/crypto from 0.42.0 to 0.43.0 (#4486)
  * chore(deps): bump cuelang.org/go in the gomod group (#4479)
  * upgrade OSS-Fuzz build tooling (#4487)
  * Fix segfault when no attestations are found (#4472)
  * Use overridden repository for new bundle format (#4473)
  * update go to 1.25.3 (#4471)
  * Remove --out flag from `cosign initialize` (#4462)
  * chore(deps): bump the actions group with 2 updates (#4460)
  * Deprecate offline flag (#4457)
  * Deduplicate code in sign/attest* and verify* commands (#4449)
  * Cache signing config when calling initialize (#4456)
  * Update changelog for v3.0.2 (#4455)
  * chore(deps): bump google.golang.org/api from 0.250.0 to 0.251.0
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go
  * chore(deps): bump the actions group with 3 updates
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.107.2 to 3.108.0
  * choose different signature filename for KMS-signed release signatures (#4448)
  * chore(deps): bump github.com/go-jose/go-jose/v4 (#4451)
  * Update rekor-tiles version path
  * update CL for v3.0.1 release (#4447)
  * update goreleaser config for v3.0.0 release (#4446)
  * Create changelog for v3.0.0 (#4440)
  * Fetch service URLs from the TUF PGI signing config by default (#4428)
  * Create changelog for v2.6.1 (#4439)
  * chore(deps): bump google.golang.org/api from 0.249.0 to 0.250.0 (#4432)
  * chore(deps): bump the gomod group with 2 updates (#4429)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.8.0 to 1.9.0 (#4433)
  * chore(deps): bump the actions group with 3 updates (#4434)
  * chore(deps): bump github.com/go-openapi/swag from 0.24.1 to 0.25.1 (#4435)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4436)
  * chore(deps): bump github.com/go-openapi/runtime from 0.28.0 to 0.29.0 (#4437)
  * Bump module version to v3 for Cosign v3.0 (#4427)
  * Move sigstore-conformance back to tagged release (#4425)
  * Bump sigstore-go to v1.1.3 (#4423)
  * Partially populate the output of cosign verify when working with new bundles (#4416)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4419)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4418)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.105.0 to 3.107.0 (#4420)
  * chore(deps): bump chainguard-dev/actions in the actions group (#4421)
  * bump go builder to use 1.25.1 and cosign (#4417)
  * Bump sigstore-go for more precise user agents (#4413)
  * chore(deps): bump github.com/spf13/viper from 1.20.1 to 1.21.0 (#4408)
  * chore(deps): bump the actions group with 2 updates (#4407)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4410)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.104.0 to 3.105.0 (#4411)
  * Default to using the new protobuf format (#4318)</changelog>
  <changelog author="meissner@suse.com" date="1770811200">- Update to version 3.0.4:
  * CVE-2025-11065: Fixed github.com/go-viper/mapstructure/v2: sensitive
    Information leak in logs (bsc#1250620)
  * CVE-2026-22703: Fixed that cosign verification accepts any valid
    Rekor entry under certain conditions (bsc#1256496)
  * Fix bundle verify path for old bundle/trusted root (#4623)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4616)
  * chore(deps): bump cuelang.org/go in the gomod group (#4615)
  * Optimize cosign tree performance by caching digest resolution (#4612)
  * Don't require a trusted root to verify offline with a key (#4613)
  * Support default services for trusted-root and signing-config creation (#4592)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4602)
  * chore(deps): bump github.com/sigstore/sigstore-go (#4578)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.114.1 to 3.115.2 (#4601)
  * chore(deps): bump google.golang.org/api from 0.257.0 to 0.258.0 (#4611)
  * chore(deps): bump k8s.io/client-go from 0.34.3 to 0.35.0 (#4604)
  * chore(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 (#4588)
  * chore(deps): bump golang.org/x/oauth2 from 0.33.0 to 0.34.0 (#4586)
  * chore(deps): bump the gomod group with 5 updates (#4599)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.10.1 to 1.12.1 (#4600)
  * chore(deps): bump golang.org/x/term from 0.37.0 to 0.38.0 (#4584)
  * chore(deps): bump the actions group with 3 updates (#4587)
  * chore(deps): bump actions/cache from 4.3.0 to 5.0.1 (#4589)
  * chore(deps): bump the gomod group with 9 updates (#4577)</changelog>
  <changelog author="meissner@suse.com" date="1771761600">- Update to version 3.0.5: (jsc#SLE-23879)
  * CVE-2026-24122: Fixed improper validation of certificates that
    outlive expired CA certificates (bsc#1258542)
  * CVE-2026-26958: Fixed filippo.io/edwards25519: failure to initialize
    receiver in MultiScalarMult can produce invalid results and lead to
    undefined behavior (bsc#1258612)
  * CVE-2026-24137: Fixed github.com/sigstore/sigstore/pkg/tuf: legacy
    TUF client allows for arbitrary file writes with target cache path
    traversal (bsc#1257139)
  * CVE-2026-22772: Fixed github.com/sigstore/fulcio: bypass MetaIssuer
    URL validation bypass can trigger SSRF to arbitrary internal services
    (bsc#1256562)
  * CVE-2026-23991: Fixed github.com/theupdateframework/go-tuf/v2: denial
    of service due to invalid TUF metadata JSON returned by TUF repository
    (bsc#1257080)
  * CVE-2026-23992: Fixed github.com/theupdateframework/go-tuf/v2:
    unauthorized modification to TUF metadata files due to a compromised
    or misconfigured TUF repository (bsc#1257085)
  * chore(deps): bump google.golang.org/api from 0.260.0 to 0.264.0 (#4679)
  * chore(deps): bump github.com/sigstore/rekor-tiles/v2 from 2.0.1 to 2.1.0 (#4670)
  * chore(deps): bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 (#4712)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4680)
  * chore(deps): bump the gomod group across 1 directory with 4 updates (#4702)
  * chore(deps): bump the actions group with 3 updates (#4703)
  * update golang builder to use go1.25.7 (#4687)
  * update golangci-lint to v2.8.x (#4688)
  * Fix typo in CLI help (#4701)
  * Support DSSE signing conformance test (#4685)
  * chore(deps): bump the actions group across 1 directory with 8 updates (#4689)
  * Deprecate rekor-entry-type flag (#4691)
  * Deprecate cosign triangulate (#4676)
  * Deprecate cosign copy (#4681)
  * Enforce TSA requirement for Rekor v2, Fuclio signing (#4683)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4668)
  * chore(deps): bump golang from 1.25.5 to 1.25.6 in the all group (#4673)
  * Automatically require signed timestamp with Rekor v2 entries (#4666)
  * Fix syntax issue in conformance test, update nightly (#4664)
  * Add mTLS support for TSA client connections when signing with a signing config (#4620)
  * fix: avoid panic on malformed tlog entry body (#4652)
  * Verify validity of chain rather than just certificate (#4663)
  * Allow --local-image with --new-bundle-format for v2 and v3 signatures (#4626)
  * chore(deps): bump the gomod group across 1 directory with 3 updates (#4662)
  * Bump sigstore/sigstore to resolve GHSA (#4660)
  * Gracefully fail if bundle payload body is not a string (#4648)
  * fix: avoid panic on malformed replace payload (#4653)
  * chore(deps): bump github.com/sigstore/rekor from 1.4.3 to 1.5.0 (#4659)
  * fix: avoid panic on malformed attestation payload (#4651)
  * fix: avoid panic on malformed tlog entries (#4649)
  * Update conformance to latest
  * docs(cosign): clarify RFC3161 revocation semantics (#4642)
  * Add empty predicate to cosign sign when payload type is application/vnd.in-toto+json (#4635)
  * chore(deps): bump github.com/sigstore/fulcio from 1.8.4 to 1.8.5 (#4637)
  * Add origin key for ctfe trusted root
  * Add changelog updates for v3.0.4 and v2.6.2 (#4625)</changelog>
</package>
<package pkgid="ccb01cd63b4e1234e6d89455ff1426bb7320a8608bd5ac53d30333fb0fbaa787" name="cosign-zsh-completion" arch="noarch">
  <version epoch="0" ver="3.0.5" rel="150400.3.39.1"/>
  <changelog author="meissner@suse.com" date="1683460800">- update to 2.0.2 (jsc#SLE-23879)
  Enhancements
  - Update sigstore/sigstore to v1.6.2 to pick up TUF CDN change (#2891)
  - feat: Make cosign copy faster (#2901)
  - remove sget (#2885)
  - Require a payload to be provided with a signature (#2785)
  Bug Fixes
  - cmd: Change error message from KeyParseError to PubKeyParseError for verify-blob. (#2876)
  - Use SOURCE_DATE_EPOCH for OCI CreatedAt times (#2878)
  Documentation
  - Remove experimental warning from Fulcio flags (#2923)
  - add missing oidc provider (#2922)
  - Add zot as a supported registry (#2920)
  - deprecates kms_support docs (#2900)
  - chore(docs) deprecate note for usage docs (#2906)
  - adds note of deprecation for examples.md docs (#2899)</changelog>
  <changelog author="meissner@suse.com" date="1687867200">- updated to 2.1.1 (jsc#SLE-23879)
  - Bug Fixes
  - wait for the workers become available again to continue the execution (#3084)
  - fix help text when in a container (#3082)
- updated to 2.1.0 (jsc#SLE-23879)
  - Breaking Change: The predicate is now a required flag in the attest commands, set via the --type flag.
  - Enhancements
  - Verify sigs and attestations in parallel (#3066)
  - Deep inspect attestations when filtering download (#3031)
  - refactor bundle validation code, add support for DSSE rekor type (#3016)
  - Allow overriding remote options (#3049)
  - feat: adds no cert found on sig exit code (#3038)
  - Make predicate a required flag in attest commands (#3033)
  - Added support for attaching Time stamp authority Response in attach command (#3001)
  - Add sign --sign-container-identity CLI (#2984)
  - Feature: Allow cosign to sign digests before they are uploaded. (#2959)
  - accepts attachment-tag-prefix for cosign copy (#3014)
  - Feature: adds '--allow-insecure-registry' for cosign load (#3000)
  - download attestation: support --platform flag (#2980)
  - Cleanup: Add Digest to the SignedEntity interface. (#2960)
  - verify command: support keyless verification using only a provided certificate chain with non-fulcio roots (#2845)
  - verify: use workers to limit the paralellism when verifying images with --max-workers flag (#3069)
  - Bug Fixes
  - Fix pkg/cosign/errors (#3050)
  - Fix: update doc to refer to github-actions oidc provider (#3040)
  - Fix: prefer GitHub OIDC provider if enabled (#3044)
  - Fix --sig-only in cosign copy (#3074)
  - Documentation
  - Fix links to sigstore/docs in markdown files (#3064)</changelog>
  <changelog author="meissner@suse.com" date="1693569600">- updated to 2.2.0 (jsc#SLE-23879)
  - Enhancements
  * switch to uploading DSSE types to rekor instead of intoto (#3113)
  * add 'cosign sign' command-line parameters for mTLS (#3052)
  * improve error messages around bundle != payload hash (#3146)
  * make VerifyImageAttestation function public (#3156)
  * Switch to cryptoutils function for SANS (#3185)
  * Handle HTTP_1_1_REQUIRED errors in github provider (#3172)
  - Bug Fixes
  * Fix nondeterminsitic timestamps (#3121)
  - Documentation
  * doc: Add example of sign-blob with key in env var (#3152)
  * add deprecation notice for cosign-releases GCS bucket (#3148)
  * update doc links (#3186)</changelog>
  <changelog author="meissner@suse.com" date="1699358400">- updated to 2.2.1 (jsc#SLE-23879)
  This release comes with a fix for
  CVE-2023-46737 / bsc#1216933 described in this [Github Security
  Advisory](https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9).
  Enhancements:
  * feat: Support basic auth and bearer auth login to registry (#3310)
  * add support for ignoring certificates with pkcs11 (#3334)
  * Support ReplaceOp in Signatures (#3315)
  * feat: added ability to get image digest back via triangulate (#3255)
  * feat: add `--only` flag in `cosign copy` to copy sign, att &amp; sbom (#3247)
  * feat: add support attaching a Rekor bundle to a container (#3246)
  * feat: add support outputting rekor response on signing (#3248)
  * feat: improve dockerfile verify subcommand (#3264)
  * Add guard flag for experimental OCI 1.1 verify. (#3272)
  * Deprecate SBOM attachments (#3256)
  * feat: dedent line in cosign copy doc (#3244)
  * feat: add platform flag to cosign copy command (#3234)
  * Add SLSA 1.0 attestation support to cosign. Closes #2860 (#3219)
  * attest: pass OCI remote opts to att resolver. (#3225)
  Bug Fixes:
  * Merge pull request from GHSA-vfp6-jrw2-99g9
  * fix: allow cosign download sbom when image is absent (#3245)
  * ci: add a OCI registry test for referrers support (#3253)
  * Fix ReplaceSignatures (#3292)
  * Stop using deprecated in_toto.ProvenanceStatement (#3243)
  * Fixes #3236, disable SCT checking for a cosign verification when usin… (#3237)
  * fix: update error in `SignedEntity` to be more descriptive (#3233)
  * Fail timestamp verification if no root is provided (#3224)
  Documentation:
  * Add some docs about verifying in an air-gapped environment (#3321)
  * Update CONTRIBUTING.md (#3268)
  * docs: improves the Contribution guidelines (#3257)
  * Remove security policy (#3230)
  Others:
  * Set go to min 1.21 and update dependencies  (#3327)
  * Update contact for code of conduct (#3266)
  * Update .ko.yaml (#3240)</changelog>
  <changelog author="marcos.bjoerkelund@suse.com" date="1702382400">- updated to 2.2.2 (jsc#SLE-23879)
  v2.2.2 adds a new container with a shell,
  gcr.io/projectsigstore/cosign:vx.y.z-dev, in addition to the existing
  container gcr.io/projectsigstore/cosign:vx.y.z without a shell.
  For private deployments, we have also added an alias for
  - -insecure-skip-log, --private-infrastructure.
  Bug Fixes:
  * chore(deps): bump github.com/sigstore/sigstore from 1.7.5 to 1.7.6 (#3411) which fixes a bug with using Azure KMS
  * Don't require CT log keys if using a key/sk (#3415)
  * Fix copy without any flag set (#3409)
  * Update cosign generate cmd to not include newline (#3393)
  * Fix idempotency error with signing (#3371)
  Features:
  * Add --yes flag cosign import-key-pair to skip the overwrite confirmation. (#3383)
  * Use the timeout flag value in verify* commands. (#3391)
  * add --private-infrastructure flag (#3369)
  Container Updates:
  * Bump builder image to use go1.21.4 and add new cosign image tags with shell (#3373)
  Documentation:
  * Update SBOM_SPEC.md (#3358)</changelog>
  <changelog author="meissner@suse.com" date="1706875200">- updated to 2.2.3 (jsc#SLE-23879)
  Bug Fixes:
  * Fix race condition on verification with multiple signatures attached to image (#3486)
  * fix(clean): Fix clean cmd for private registries (#3446)
  * Fixed BYO PKI verification (#3427)
  Features:
  * Allow for option in cosign attest and attest-blob to upload attestation as supported in Rekor (#3466)
  * Add support for OpenVEX predicate type (#3405)
  Documentation:
  * Resolves #3088: `version` sub-command expected behaviour documentation and testing (#3447)
  * add examples for cosign attach signature cmd (#3468)
  Misc:
  * Remove CertSubject function (#3467)
  * Use local rekor and fulcio instances in e2e tests (#3478)
- bumped embedded golang.org/x/crypto/ssh to fix the Terrapin attack CVE-2023-48795 (bsc#1218207)</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- updated to 2.2.4 (jsc#SLE-23879)
  * Bug Fixes
  * Fixes for GHSA-88jx-383q-w4qc and GHSA-95pr-fxf5-86gv (#3661)
  - CVE-2024-29902: Malicious attachments can cause system-wide denial of service (bsc#1222835)
  - CVE-2024-29903: Malicious artifects can cause machine-wide denial of service (bsc#1222837)
  * ErrNoSignaturesFound should be used when there is no signature attached to an image. (#3526)
  * fix semgrep issues for dgryski.semgrep-go ruleset (#3541)
  * Honor creation timestamp for signatures again (#3549)
  * Features
  * Adds Support for Fulcio Client Credentials Flow, and Argument to Set Flow Explicitly (#3578)
  * Documentation
  * add oci bundle spec (#3622)
  * Correct help text of triangulate cmd (#3551)
  * Correct help text of verify-attestation policy argument (#3527)
  * feat: add OVHcloud MPR registry tested with cosign (#3639)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1717156800">- add completion subpackages (bash, fish, zsh)</changelog>
  <changelog author="meissner@suse.com" date="1721822400">- update to 2.3.0 (jsc#SLE-23879)
  * Features
  - Add PayloadProvider interface to decouple AttestationToPayloadJSON from oci.Signature interface (#3693)
  - add registry options to cosign save (#3645)
  - Add debug providers command. (#3728)
  - Make config layers in ociremote mountable (#3741)
  - adds tsa cert chain check for env var or tuf targets. (#3600)
  - add --ca-roots and --ca-intermediates flags to 'cosign verify' (#3464)
  - add handling of keyless verification for all verify commands (#3761)
  * Bug Fixes
  - fix: close attestationFile (#3679)
  - Set bundleVerified to true after Rekor verification (Resolves #3740) (#3745)
  * Documentation
  - Document ImportKeyPair and LoadPrivateKey functions in pkg/cosign (#3776)</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1724155200">- Set CGO_ENABLED=1 for fixing s390x failed build</changelog>
  <changelog author="meissner@suse.com" date="1727870400">- update to 2.4.0 (jsc#SLE-23879)
  - Add new bundle support to verify-blob and verify-blob-attestation (#3796)
  - Adding protobuf bundle support to sign-blob and attest-blob (#3752)
  - Bump sigstore/sigstore to support email_verified as string or boolean (#3819)
  - Conformance testing for cosign (#3806)
  - move incremental builds per commit to GHCR instead of GCR (#3808)
  - Add support for recording creation timestamp for cosign attest (#3797)
  - Include SCT verification failure details in error message (#3799)</changelog>
  <changelog author="meissner@suse.com" date="1738756800">- Update to version 2.4.2:
  - Updated open-policy-agent to 1.1.0 library (#4036)
  - Note that only Rego v0 policies are supported at this time
  - Add UseSignedTimestamps to CheckOpts, refactor TSA options (#4006)
  - Add support for verifying root checksum in cosign initialize (#3953)
  - Detect if user supplied a valid protobuf bundle (#3931)
  - Add a log message if user doesn't provide --trusted-root (#3933)
  - Support mTLS towards container registry (#3922)
  - Add bundle create helper command (#3901)
  - Add trusted-root create helper command (#3876)
  Bug Fixes:
  - fix: set tls config while retaining other fields from default http transport (#4007)
  - policy fuzzer: ignore known panics (#3993)
  - Fix for multiple WithRemote options (#3982)
  - Add nightly conformance test workflow (#3979)
  - Fix copy --only for signatures + update/align docs (#3904)
- use "osc service mr" to update</changelog>
  <changelog author="meissner@suse.com" date="1740052800">- Update to version 2.4.3:
  * Enable fetching signatures without remote get. (#4047)
  * Bump sigstore/sigstore to support KMS plugins (#4073)
  * sort properly Go imports (#4071)
  * sync comment with parameter name in function signature (#4063)
  * fix go imports order to be alphabetical (#4062)
  * fix comment typo and imports order (#4061)
  * Feat/file flag completion improvements (#4028)
  * Udpate builder to use go1.23.6 (#4052)
  * Refactor verifyNewBundle into library function (#4013)
  * fix parsing error in --only for cosign copy (#4049)
  * Fix codeowners syntax, add dep-maintainers (#4046)</changelog>
  <changelog author="meissner@suse.com" date="1744545600">- Update to version 2.5.0:
  * Update sigstore-go to pick up bug fixes (#4150)
  * Update golangci-lint to v2, update golangci-lint-action (#4143)
  * Feat/non filename completions (#4115)
  * update builder to use go1.24.1 (#4116)
  * Add support for new bundle specification for attesting/verifying OCI image attestations (#3889)
  * Remove cert log line (#4113)
  * cmd/cosign/cli: fix typo in ignoreTLogMessage (#4111)
  * bump to latest scaffolding release for testing (#4099)
  * increase 2e2_test docker compose tiemout to 180s (#4091)
  * Fix replace with compliant image mediatype (#4077)
  * Add TSA certificate related flags and fields for cosign attest (#4079)
- Security issues fixed:
  - CVE-2024-6104: cosign: hashicorp/go-retryablehttp: url might write sensitive information to log file (bsc#1227031)
  - CVE-2024-51744: cosign: github.com/golang-jwt/jwt/v4: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt (bsc#1232985)
  - CVE-2025-27144: cosign: github.com/go-jose/go-jose/v4,github.com/go-jose/go-jose/v3: Go JOSE's Parsing Vulnerable to Denial of Service (bsc#1237682)
  - CVE-2025-22870: cosign: golang.org/x/net/proxy: proxy bypass using IPv6 zone IDs (bsc#1238693)
  - CVE-2025-22868: cosign: golang.org/x/oauth2/jws: Unexpected memory consumption during token parsing in golang.org/x/oauth2 (bsc#1239204)
  - CVE-2025-22869: cosign: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh (bsc#1239337)</changelog>
  <changelog author="meissner@suse.com" date="1748433600">- switch to go1.24, enable fips build</changelog>
  <changelog author="meissner@suse.com" date="1752840000">- Update to version 2.5.3 (jsc#SLE-23879)
  - Add signing-config create command (#4280)
  - Allow multiple services to be specified for trusted-root create (#4285)
  - force when copying the latest image to overwrite (#4298)
  - Fix cert verification logic for trusted-root/SCTs (#4294)
  - Fix lint error for types package (#4295)
  - feat: Add OCI 1.1+ experimental support to tree (#4205)
  - Add validity period end for trusted-root create (#4271)
  - avoid double-loading trustedroot from file (#4264)
- Update to 2.5.2:
  - Do not load trusted root when CT env key is set
  - docs: improve doc for --no-upload option (#4206)
- Update to 2.5.1:
  * Features
  - Add Rekor v2 support for trusted-root create (#4242)
  - Add baseUrl and Uri to trusted-root create command
  - Upgrade to TUF v2 client with trusted root
  - Don't verify SCT for a private PKI cert (#4225)
  - Bump TSA library to relax EKU chain validation rules (#4219)
  * Bug Fixes
  - Bump sigstore-go to pick up log index=0 fix (#4162)
  - remove unused recursive flag on attest command (#4187)
  * Docs
  - Fix indentation in verify-blob cmd examples (#4160)
  * GO-2025-3660/ CVE-2025-46569: Fixed OPA server Data API HTTP path injection of Rego (bsc#1246725)</changelog>
  <changelog author="meissner@suse.com" date="1758196800">- Update to version 2.6.0:
  - Require exclusively a SigningConfig or service URLs when signing (#4403)
  - Add a terminal spinner while signing with sigstore-go (#4402)
  - Bump sigstore-go, support alternative hash algorithms with keys (#4386)
  - Add support for SigningConfig in sign/attest (#4371)
  - Support self-managed keys when signing with sigstore-go (#4368)
  - Remove SHA256 assumption in sign-blob/verify-blob (#4050)
  - introduce dockerfile to pin the go version to decouple go version from go.mod (#4369)
  - refactor: extract function to write referrer attestations (#4357)
  - Break import cycle with e2e build tag (#4370)
  - Update conformance test binary for signing config (#4367)
  - update builder image to use go1.25 (#4366)
  - Don't load content from TUF if trusted root path is specified (#4347)
  - Don't require timestamps when verifying with a key (#4337)
  - Fixes to cosign sign / verify for the new bundle format (#4346)
  - update builder to use go1.24.6 (#4334)
  - bump golangci-lint to v2.3.x (#4333)
  - Have cosign sign support bundle format (#4316)
  - Add support for SigningConfig for sign-blob/attest-blob, support Rekor v2 (#4319)
  - Verify subject with bundle only when checking claims (#4320)
  - Add to `attest-blob` the ability to supply a complete in-toto statement, and add to `verify-blob-attestation` the ability to verify with just a digest (#4306)</changelog>
  <changelog author="meissner@suse.com" date="1765368000">- Update to version 3.0.3:
  * 4554: Closes 4554 - Add warning when --output* is used (#4556)
  * chore(deps): bump golangci/golangci-lint-action from 8.0.0 to 9.1.0 (#4545)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.111.0 to 3.113.0 (#4542)
  * chore(deps): bump github.com/awslabs/amazon-ecr-credential-helper/ecr-login (#4543)
  * chore(deps): bump actions/checkout from 5.0.0 to 6.0.0 (#4546)
  * chore(deps): bump the actions group with 4 updates (#4544)
  * chore(deps): bump the gomod group across 1 directory with 5 updates (#4567)
  * chore(deps): bump golang from 1.25.4 to 1.25.5 in the all group (#4568)
  * update builder to use go1.25.5 (#4566)
  * Protobuf bundle support for subcommand `clean` (#4539)
  * Add staging flag to initialize with staging TUF metadata
  * update slack invite link (#4560)
  * Updating sign-blob to also support signing with a certificate (#4547)
  * Bump sigstore library dependencies (#4532)
  * Protobuf bundle support for subcommands `save` and `load` (#4538)
  * Fix cert attachment for new bundle with signing config
  * Fix OCI verification with local cert - old bundle
  * chore(deps): bump github.com/sigstore/fulcio from 1.7.1 to 1.8.1 (#4519)
  * chore(deps): bump golang.org/x/crypto in /test/fakeoidc (#4535)
  * chore(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0 (#4536)
  * CVE-2025-58181: Fixed golang.org/x/crypto/ssh: invalidated number
    of mechanisms can cause unbounded memory consumption (bsc#1253913)
  * update go builder and cosign (#4529)
  * chore(deps): bump the gomod group across 1 directory with 7 updates (#4528)
  * chore(deps): bump sigstore/cosign-installer from 3.10.0 to 4.0.0 (#4478)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4520)
  * chore(deps): bump golang from 1.25.3 to 1.25.4 in the all group (#4515)
  * chore(deps): bump golang.org/x/oauth2 from 0.32.0 to 0.33.0 (#4518)
  * chore(deps): bump cuelang.org/go from 0.14.2 to 0.15.0 (#4524)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.9.0 to 1.10.1 (#4521)
  * chore(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 (#4502)
  * chore(deps): bump the actions group across 1 directory with 2 updates (#4516)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.110.0 to 3.111.0 (#4523)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4522)
  * Deprecate tlog-upload flag (#4458)
  * fix: Use signal context for `sign` cli package.
  * update offline verification directions (#4526)
  * Fix signing/verifying annotations for new bundle
  * Add support to download and attach for protobuf bundles (#4477)
  * Add --signing-algorithm flag (#3497)
  * Refactor signcommon bundle helpers
  * Add --bundle and fix --upload for new bundle
  * Pass insecure registry flags through to referrers
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.108.0 to 3.109.1 (#4483)
  * Add protobuf bundle support for tree subcommand (#4491)
  * Remove stale embed import (#4492)
  * Support multiple container identities
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4484)
  * chore(deps): bump chainguard-dev/actions in the actions group (#4480)
  * chore(deps): bump github.com/sigstore/rekor-tiles/v2 (#4485)
  * chore(deps): bump golang.org/x/crypto from 0.42.0 to 0.43.0 (#4486)
  * chore(deps): bump cuelang.org/go in the gomod group (#4479)
  * upgrade OSS-Fuzz build tooling (#4487)
  * Fix segfault when no attestations are found (#4472)
  * Use overridden repository for new bundle format (#4473)
  * update go to 1.25.3 (#4471)
  * Remove --out flag from `cosign initialize` (#4462)
  * chore(deps): bump the actions group with 2 updates (#4460)
  * Deprecate offline flag (#4457)
  * Deduplicate code in sign/attest* and verify* commands (#4449)
  * Cache signing config when calling initialize (#4456)
  * Update changelog for v3.0.2 (#4455)
  * chore(deps): bump google.golang.org/api from 0.250.0 to 0.251.0
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go
  * chore(deps): bump the actions group with 3 updates
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.107.2 to 3.108.0
  * choose different signature filename for KMS-signed release signatures (#4448)
  * chore(deps): bump github.com/go-jose/go-jose/v4 (#4451)
  * Update rekor-tiles version path
  * update CL for v3.0.1 release (#4447)
  * update goreleaser config for v3.0.0 release (#4446)
  * Create changelog for v3.0.0 (#4440)
  * Fetch service URLs from the TUF PGI signing config by default (#4428)
  * Create changelog for v2.6.1 (#4439)
  * chore(deps): bump google.golang.org/api from 0.249.0 to 0.250.0 (#4432)
  * chore(deps): bump the gomod group with 2 updates (#4429)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.8.0 to 1.9.0 (#4433)
  * chore(deps): bump the actions group with 3 updates (#4434)
  * chore(deps): bump github.com/go-openapi/swag from 0.24.1 to 0.25.1 (#4435)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4436)
  * chore(deps): bump github.com/go-openapi/runtime from 0.28.0 to 0.29.0 (#4437)
  * Bump module version to v3 for Cosign v3.0 (#4427)
  * Move sigstore-conformance back to tagged release (#4425)
  * Bump sigstore-go to v1.1.3 (#4423)
  * Partially populate the output of cosign verify when working with new bundles (#4416)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4419)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4418)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.105.0 to 3.107.0 (#4420)
  * chore(deps): bump chainguard-dev/actions in the actions group (#4421)
  * bump go builder to use 1.25.1 and cosign (#4417)
  * Bump sigstore-go for more precise user agents (#4413)
  * chore(deps): bump github.com/spf13/viper from 1.20.1 to 1.21.0 (#4408)
  * chore(deps): bump the actions group with 2 updates (#4407)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4410)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.104.0 to 3.105.0 (#4411)
  * Default to using the new protobuf format (#4318)</changelog>
  <changelog author="meissner@suse.com" date="1770811200">- Update to version 3.0.4:
  * CVE-2025-11065: Fixed github.com/go-viper/mapstructure/v2: sensitive
    Information leak in logs (bsc#1250620)
  * CVE-2026-22703: Fixed that cosign verification accepts any valid
    Rekor entry under certain conditions (bsc#1256496)
  * Fix bundle verify path for old bundle/trusted root (#4623)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4616)
  * chore(deps): bump cuelang.org/go in the gomod group (#4615)
  * Optimize cosign tree performance by caching digest resolution (#4612)
  * Don't require a trusted root to verify offline with a key (#4613)
  * Support default services for trusted-root and signing-config creation (#4592)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4602)
  * chore(deps): bump github.com/sigstore/sigstore-go (#4578)
  * chore(deps): bump github.com/buildkite/agent/v3 from 3.114.1 to 3.115.2 (#4601)
  * chore(deps): bump google.golang.org/api from 0.257.0 to 0.258.0 (#4611)
  * chore(deps): bump k8s.io/client-go from 0.34.3 to 0.35.0 (#4604)
  * chore(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 (#4588)
  * chore(deps): bump golang.org/x/oauth2 from 0.33.0 to 0.34.0 (#4586)
  * chore(deps): bump the gomod group with 5 updates (#4599)
  * chore(deps): bump github.com/open-policy-agent/opa from 1.10.1 to 1.12.1 (#4600)
  * chore(deps): bump golang.org/x/term from 0.37.0 to 0.38.0 (#4584)
  * chore(deps): bump the actions group with 3 updates (#4587)
  * chore(deps): bump actions/cache from 4.3.0 to 5.0.1 (#4589)
  * chore(deps): bump the gomod group with 9 updates (#4577)</changelog>
  <changelog author="meissner@suse.com" date="1771761600">- Update to version 3.0.5: (jsc#SLE-23879)
  * CVE-2026-24122: Fixed improper validation of certificates that
    outlive expired CA certificates (bsc#1258542)
  * CVE-2026-26958: Fixed filippo.io/edwards25519: failure to initialize
    receiver in MultiScalarMult can produce invalid results and lead to
    undefined behavior (bsc#1258612)
  * CVE-2026-24137: Fixed github.com/sigstore/sigstore/pkg/tuf: legacy
    TUF client allows for arbitrary file writes with target cache path
    traversal (bsc#1257139)
  * CVE-2026-22772: Fixed github.com/sigstore/fulcio: bypass MetaIssuer
    URL validation bypass can trigger SSRF to arbitrary internal services
    (bsc#1256562)
  * CVE-2026-23991: Fixed github.com/theupdateframework/go-tuf/v2: denial
    of service due to invalid TUF metadata JSON returned by TUF repository
    (bsc#1257080)
  * CVE-2026-23992: Fixed github.com/theupdateframework/go-tuf/v2:
    unauthorized modification to TUF metadata files due to a compromised
    or misconfigured TUF repository (bsc#1257085)
  * chore(deps): bump google.golang.org/api from 0.260.0 to 0.264.0 (#4679)
  * chore(deps): bump github.com/sigstore/rekor-tiles/v2 from 2.0.1 to 2.1.0 (#4670)
  * chore(deps): bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 (#4712)
  * chore(deps): bump gitlab.com/gitlab-org/api/client-go (#4680)
  * chore(deps): bump the gomod group across 1 directory with 4 updates (#4702)
  * chore(deps): bump the actions group with 3 updates (#4703)
  * update golang builder to use go1.25.7 (#4687)
  * update golangci-lint to v2.8.x (#4688)
  * Fix typo in CLI help (#4701)
  * Support DSSE signing conformance test (#4685)
  * chore(deps): bump the actions group across 1 directory with 8 updates (#4689)
  * Deprecate rekor-entry-type flag (#4691)
  * Deprecate cosign triangulate (#4676)
  * Deprecate cosign copy (#4681)
  * Enforce TSA requirement for Rekor v2, Fuclio signing (#4683)
  * chore(deps): bump github.com/theupdateframework/go-tuf/v2 (#4668)
  * chore(deps): bump golang from 1.25.5 to 1.25.6 in the all group (#4673)
  * Automatically require signed timestamp with Rekor v2 entries (#4666)
  * Fix syntax issue in conformance test, update nightly (#4664)
  * Add mTLS support for TSA client connections when signing with a signing config (#4620)
  * fix: avoid panic on malformed tlog entry body (#4652)
  * Verify validity of chain rather than just certificate (#4663)
  * Allow --local-image with --new-bundle-format for v2 and v3 signatures (#4626)
  * chore(deps): bump the gomod group across 1 directory with 3 updates (#4662)
  * Bump sigstore/sigstore to resolve GHSA (#4660)
  * Gracefully fail if bundle payload body is not a string (#4648)
  * fix: avoid panic on malformed replace payload (#4653)
  * chore(deps): bump github.com/sigstore/rekor from 1.4.3 to 1.5.0 (#4659)
  * fix: avoid panic on malformed attestation payload (#4651)
  * fix: avoid panic on malformed tlog entries (#4649)
  * Update conformance to latest
  * docs(cosign): clarify RFC3161 revocation semantics (#4642)
  * Add empty predicate to cosign sign when payload type is application/vnd.in-toto+json (#4635)
  * chore(deps): bump github.com/sigstore/fulcio from 1.8.4 to 1.8.5 (#4637)
  * Add origin key for ctfe trusted root
  * Add changelog updates for v3.0.4 and v2.6.2 (#4625)</changelog>
</package>
<package pkgid="235fa088b47f7d595dabeb897d10730483a9ad4b960d25eecf34bee9e0d6dda7" name="cpupower" arch="src">
  <version epoch="0" ver="6.4.0" rel="150700.9.3.3"/>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Change to building the package from kernel-source based on
  how the perf package works
- Removed patches:
  * turbostat_makefile_fix_asm_header.patch
  * remove_bits_h.patch
  * x86_perf_makefile_fix_asm_header.patch
- Remove all tarballs and git script
- Use %lang_package
- Correct ix86 to %ix86</changelog>
  <changelog author="dmueller@suse.com" date="1649419200">- add rebuild subpackage to trigger rebuild on kernel updates</changelog>
  <changelog author="trenn@suse.de" date="1657022400">- Remove powercap capabilities to patch againt latest kernel sources
  - &gt; still keep the patches, will be removed after trying to get this
    mainline
- Add netlink (libnl-devel) requires</changelog>
  <changelog author="gmbr3@opensuse.org" date="1665144000">- Move bash-completion to subpackage so it isn't installed when
  not needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1666353600">- clean up sources: drop rapl_monitor.patch and
  cpupower_rapl.patch.</changelog>
  <changelog author="trenn@suse.de" date="1678017600">- Add wildcard for powercap.h since powercap patches have reached mainline
- Build bash-completion noarch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700049600">- Rename libcpupower0 to libcpupower1 following changes in SONAME.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="trenn@suse.de" date="1700481600">- Fix library file version: libcpupower.so.0.0.1 -&gt; libcpupower.so.1.0.1
  (bsc#1217044)
  A cpupower_fix_library_so_name.patch</changelog>
  <changelog author="trenn@suse.de" date="1710331200">- Source version of cpupower tools from kernel sources:
  cpupower #6feb1a9641197ee630bf43b5c34ea1d9f8b4a0aa
  turbostat 2023.11.07 #b8337e6a780dad9505f9d44da07c0a5c52fa0a04
  intel-speed-select 1.18 #a590ed62269a049a72484ce617fe2f34e2da66cf</changelog>
  <changelog author="trenn@suse.de" date="1741348800">- For latest changelog entries, please look up the changelog of
  a kernel-FLAVOR or kernel-source with the exact same version and
  release build number.
  rpm -q --changelog kernel-source |grep "turbostat\|intel-speed-select|cpupower"</changelog>
  <changelog author="trenn@suse.de" date="1753099200">- Show the first 2 lines of kernel-source sources we build against
  in the package description.
  Also show the latest git hash commit ID there to be able to track
  the exact sources the package has been built against.
  This is essential to be able to determine the exact
  sources (from kernel-source) the tools are built against.</changelog>
</package>
<package pkgid="398fe4e3d2fb112cfa77c1247d07a5a26077c7f34abf71c015eafe80ae2d0401" name="cpupower" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.9.3.3"/>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Change to building the package from kernel-source based on
  how the perf package works
- Removed patches:
  * turbostat_makefile_fix_asm_header.patch
  * remove_bits_h.patch
  * x86_perf_makefile_fix_asm_header.patch
- Remove all tarballs and git script
- Use %lang_package
- Correct ix86 to %ix86</changelog>
  <changelog author="dmueller@suse.com" date="1649419200">- add rebuild subpackage to trigger rebuild on kernel updates</changelog>
  <changelog author="trenn@suse.de" date="1657022400">- Remove powercap capabilities to patch againt latest kernel sources
  - &gt; still keep the patches, will be removed after trying to get this
    mainline
- Add netlink (libnl-devel) requires</changelog>
  <changelog author="gmbr3@opensuse.org" date="1665144000">- Move bash-completion to subpackage so it isn't installed when
  not needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1666353600">- clean up sources: drop rapl_monitor.patch and
  cpupower_rapl.patch.</changelog>
  <changelog author="trenn@suse.de" date="1678017600">- Add wildcard for powercap.h since powercap patches have reached mainline
- Build bash-completion noarch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700049600">- Rename libcpupower0 to libcpupower1 following changes in SONAME.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="trenn@suse.de" date="1700481600">- Fix library file version: libcpupower.so.0.0.1 -&gt; libcpupower.so.1.0.1
  (bsc#1217044)
  A cpupower_fix_library_so_name.patch</changelog>
  <changelog author="trenn@suse.de" date="1710331200">- Source version of cpupower tools from kernel sources:
  cpupower #6feb1a9641197ee630bf43b5c34ea1d9f8b4a0aa
  turbostat 2023.11.07 #b8337e6a780dad9505f9d44da07c0a5c52fa0a04
  intel-speed-select 1.18 #a590ed62269a049a72484ce617fe2f34e2da66cf</changelog>
  <changelog author="trenn@suse.de" date="1741348800">- For latest changelog entries, please look up the changelog of
  a kernel-FLAVOR or kernel-source with the exact same version and
  release build number.
  rpm -q --changelog kernel-source |grep "turbostat\|intel-speed-select|cpupower"</changelog>
  <changelog author="trenn@suse.de" date="1753099200">- Show the first 2 lines of kernel-source sources we build against
  in the package description.
  Also show the latest git hash commit ID there to be able to track
  the exact sources the package has been built against.
  This is essential to be able to determine the exact
  sources (from kernel-source) the tools are built against.</changelog>
</package>
<package pkgid="07093eb00c4107e12a701533fa4bd3b45b11029def1fa44dcf15cc9a48a06eff" name="cpupower-bash-completion" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="150700.9.3.3"/>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Change to building the package from kernel-source based on
  how the perf package works
- Removed patches:
  * turbostat_makefile_fix_asm_header.patch
  * remove_bits_h.patch
  * x86_perf_makefile_fix_asm_header.patch
- Remove all tarballs and git script
- Use %lang_package
- Correct ix86 to %ix86</changelog>
  <changelog author="dmueller@suse.com" date="1649419200">- add rebuild subpackage to trigger rebuild on kernel updates</changelog>
  <changelog author="trenn@suse.de" date="1657022400">- Remove powercap capabilities to patch againt latest kernel sources
  - &gt; still keep the patches, will be removed after trying to get this
    mainline
- Add netlink (libnl-devel) requires</changelog>
  <changelog author="gmbr3@opensuse.org" date="1665144000">- Move bash-completion to subpackage so it isn't installed when
  not needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1666353600">- clean up sources: drop rapl_monitor.patch and
  cpupower_rapl.patch.</changelog>
  <changelog author="trenn@suse.de" date="1678017600">- Add wildcard for powercap.h since powercap patches have reached mainline
- Build bash-completion noarch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700049600">- Rename libcpupower0 to libcpupower1 following changes in SONAME.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="trenn@suse.de" date="1700481600">- Fix library file version: libcpupower.so.0.0.1 -&gt; libcpupower.so.1.0.1
  (bsc#1217044)
  A cpupower_fix_library_so_name.patch</changelog>
  <changelog author="trenn@suse.de" date="1710331200">- Source version of cpupower tools from kernel sources:
  cpupower #6feb1a9641197ee630bf43b5c34ea1d9f8b4a0aa
  turbostat 2023.11.07 #b8337e6a780dad9505f9d44da07c0a5c52fa0a04
  intel-speed-select 1.18 #a590ed62269a049a72484ce617fe2f34e2da66cf</changelog>
  <changelog author="trenn@suse.de" date="1741348800">- For latest changelog entries, please look up the changelog of
  a kernel-FLAVOR or kernel-source with the exact same version and
  release build number.
  rpm -q --changelog kernel-source |grep "turbostat\|intel-speed-select|cpupower"</changelog>
  <changelog author="trenn@suse.de" date="1753099200">- Show the first 2 lines of kernel-source sources we build against
  in the package description.
  Also show the latest git hash commit ID there to be able to track
  the exact sources the package has been built against.
  This is essential to be able to determine the exact
  sources (from kernel-source) the tools are built against.</changelog>
</package>
<package pkgid="11aed298ef82b5c37528ac364d46b2d6a7ab661ed6b90368b1ab93b192d8ead6" name="cpupower-devel" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.9.3.3"/>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Change to building the package from kernel-source based on
  how the perf package works
- Removed patches:
  * turbostat_makefile_fix_asm_header.patch
  * remove_bits_h.patch
  * x86_perf_makefile_fix_asm_header.patch
- Remove all tarballs and git script
- Use %lang_package
- Correct ix86 to %ix86</changelog>
  <changelog author="dmueller@suse.com" date="1649419200">- add rebuild subpackage to trigger rebuild on kernel updates</changelog>
  <changelog author="trenn@suse.de" date="1657022400">- Remove powercap capabilities to patch againt latest kernel sources
  - &gt; still keep the patches, will be removed after trying to get this
    mainline
- Add netlink (libnl-devel) requires</changelog>
  <changelog author="gmbr3@opensuse.org" date="1665144000">- Move bash-completion to subpackage so it isn't installed when
  not needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1666353600">- clean up sources: drop rapl_monitor.patch and
  cpupower_rapl.patch.</changelog>
  <changelog author="trenn@suse.de" date="1678017600">- Add wildcard for powercap.h since powercap patches have reached mainline
- Build bash-completion noarch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700049600">- Rename libcpupower0 to libcpupower1 following changes in SONAME.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="trenn@suse.de" date="1700481600">- Fix library file version: libcpupower.so.0.0.1 -&gt; libcpupower.so.1.0.1
  (bsc#1217044)
  A cpupower_fix_library_so_name.patch</changelog>
  <changelog author="trenn@suse.de" date="1710331200">- Source version of cpupower tools from kernel sources:
  cpupower #6feb1a9641197ee630bf43b5c34ea1d9f8b4a0aa
  turbostat 2023.11.07 #b8337e6a780dad9505f9d44da07c0a5c52fa0a04
  intel-speed-select 1.18 #a590ed62269a049a72484ce617fe2f34e2da66cf</changelog>
  <changelog author="trenn@suse.de" date="1741348800">- For latest changelog entries, please look up the changelog of
  a kernel-FLAVOR or kernel-source with the exact same version and
  release build number.
  rpm -q --changelog kernel-source |grep "turbostat\|intel-speed-select|cpupower"</changelog>
  <changelog author="trenn@suse.de" date="1753099200">- Show the first 2 lines of kernel-source sources we build against
  in the package description.
  Also show the latest git hash commit ID there to be able to track
  the exact sources the package has been built against.
  This is essential to be able to determine the exact
  sources (from kernel-source) the tools are built against.</changelog>
</package>
<package pkgid="68a3d5ad7c974cdcd6e12c6be6b6294495646389f6681f027130d159286b0c19" name="cpupower-lang" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="150700.9.3.3"/>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Change to building the package from kernel-source based on
  how the perf package works
- Removed patches:
  * turbostat_makefile_fix_asm_header.patch
  * remove_bits_h.patch
  * x86_perf_makefile_fix_asm_header.patch
- Remove all tarballs and git script
- Use %lang_package
- Correct ix86 to %ix86</changelog>
  <changelog author="dmueller@suse.com" date="1649419200">- add rebuild subpackage to trigger rebuild on kernel updates</changelog>
  <changelog author="trenn@suse.de" date="1657022400">- Remove powercap capabilities to patch againt latest kernel sources
  - &gt; still keep the patches, will be removed after trying to get this
    mainline
- Add netlink (libnl-devel) requires</changelog>
  <changelog author="gmbr3@opensuse.org" date="1665144000">- Move bash-completion to subpackage so it isn't installed when
  not needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1666353600">- clean up sources: drop rapl_monitor.patch and
  cpupower_rapl.patch.</changelog>
  <changelog author="trenn@suse.de" date="1678017600">- Add wildcard for powercap.h since powercap patches have reached mainline
- Build bash-completion noarch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700049600">- Rename libcpupower0 to libcpupower1 following changes in SONAME.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="trenn@suse.de" date="1700481600">- Fix library file version: libcpupower.so.0.0.1 -&gt; libcpupower.so.1.0.1
  (bsc#1217044)
  A cpupower_fix_library_so_name.patch</changelog>
  <changelog author="trenn@suse.de" date="1710331200">- Source version of cpupower tools from kernel sources:
  cpupower #6feb1a9641197ee630bf43b5c34ea1d9f8b4a0aa
  turbostat 2023.11.07 #b8337e6a780dad9505f9d44da07c0a5c52fa0a04
  intel-speed-select 1.18 #a590ed62269a049a72484ce617fe2f34e2da66cf</changelog>
  <changelog author="trenn@suse.de" date="1741348800">- For latest changelog entries, please look up the changelog of
  a kernel-FLAVOR or kernel-source with the exact same version and
  release build number.
  rpm -q --changelog kernel-source |grep "turbostat\|intel-speed-select|cpupower"</changelog>
  <changelog author="trenn@suse.de" date="1753099200">- Show the first 2 lines of kernel-source sources we build against
  in the package description.
  Also show the latest git hash commit ID there to be able to track
  the exact sources the package has been built against.
  This is essential to be able to determine the exact
  sources (from kernel-source) the tools are built against.</changelog>
</package>
<package pkgid="efa96f65213eefa790acc4d9fe4146d6ad6b1264e9816f5b0e6601e2674f09f5" name="crda" arch="src">
  <version epoch="0" ver="3.18" rel="150000.3.3.2"/>
  <changelog author="helmut.schaa@googlemail.com" date="1169640000">- Initial package</changelog>
  <changelog author="hschaa@suse.de" date="1234180800">- Update to 1.0.1
- Needed for fate#305301</changelog>
  <changelog author="hschaa@suse.de" date="1235995200">- Add "Supplements: kernel" and "Requires: wireless-regdb"</changelog>
  <changelog author="aj@suse.de" date="1248782400">- Update to crda 1.1.0:
  * make openssl keys 64-bit safe</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1255176000">- update to git200910101747, fix build</changelog>
  <changelog author="ro@suse.de" date="1267790400">- update to 1.1.1 release</changelog>
  <changelog author="jengelh@medozas.de" date="1316174400">- Select libnl-1_1-devel</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="rschweikert@suse.com" date="1328356800">- put files in /usr tree (UsrMerge project)</changelog>
  <changelog author="pcerny@suse.com" date="1330430400">- use correct filepath in udev rule</changelog>
  <changelog author="p.drouand@gmail.com" date="1347192000">- update to 1.1.2 release</changelog>
  <changelog author="cfarrell@suse.com" date="1347537600">- license update: ISC
  License is ISC, not BSD-3-Clause</changelog>
  <changelog author="fcrozat@suse.com" date="1350475200">- Fix build with udev rules directory new location.</changelog>
  <changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1385208000">- update to 1.1.3 release (no changelog)
- run %udev_rules_update in %post if defined
- Correct _udevrulesdir definition for old distros</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1385294400">- use libnl3 which is now supported</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1435492800">- update to version 3.18:
  * user visible: add pubkey of new wireless-regdb maintainer to
    make crda work at all with newer wireless-regdb
  * synchronize code with latest kernel changes
  * crda: add AUTO-BW rule flag support
  * crda: parse/print CAC time
  * code restructuring and bug fixes
  * ** License is now copyleft-next-0.3.0 ***
- packaging:
  * add V=1 to make calls for rpmlint happiness
  * use %%optflags for compilation
  * shared library libreg.so is now used by the tools</changelog>
  <changelog author="martin.liska@suse.com" date="1464177600">- Add gcc6-fix-errors.patch to remove errors seen by GCC6.</changelog>
  <changelog author="meissner@suse.com" date="1496491200">- adjust Makefile patch to not include CFLAGS on linker line,
  this indirectly enables PIE support.</changelog>
  <changelog author="pgajdos@suse.com" date="1762430400">- package LICENSE with %license tag [bsc#1252141]</changelog>
</package>
<package pkgid="9ac60ddee89a4655bf36ac153ee48f4797a377eb5afcb5264b394291ea9feb3f" name="crda" arch="x86_64">
  <version epoch="0" ver="3.18" rel="150000.3.3.2"/>
  <changelog author="p.drouand@gmail.com" date="1347192000">- update to 1.1.2 release</changelog>
  <changelog author="cfarrell@suse.com" date="1347537600">- license update: ISC
  License is ISC, not BSD-3-Clause</changelog>
  <changelog author="fcrozat@suse.com" date="1350475200">- Fix build with udev rules directory new location.</changelog>
  <changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1385208000">- update to 1.1.3 release (no changelog)
- run %udev_rules_update in %post if defined
- Correct _udevrulesdir definition for old distros</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1385294400">- use libnl3 which is now supported</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1435492800">- update to version 3.18:
  * user visible: add pubkey of new wireless-regdb maintainer to
    make crda work at all with newer wireless-regdb
  * synchronize code with latest kernel changes
  * crda: add AUTO-BW rule flag support
  * crda: parse/print CAC time
  * code restructuring and bug fixes
  * ** License is now copyleft-next-0.3.0 ***
- packaging:
  * add V=1 to make calls for rpmlint happiness
  * use %%optflags for compilation
  * shared library libreg.so is now used by the tools</changelog>
  <changelog author="martin.liska@suse.com" date="1464177600">- Add gcc6-fix-errors.patch to remove errors seen by GCC6.</changelog>
  <changelog author="meissner@suse.com" date="1496491200">- adjust Makefile patch to not include CFLAGS on linker line,
  this indirectly enables PIE support.</changelog>
  <changelog author="pgajdos@suse.com" date="1762430400">- package LICENSE with %license tag [bsc#1252141]</changelog>
</package>
<package pkgid="4fa356ff142adf90186ea4770b7543bbe5769650d4da8dac5968fd73f97de8ba" name="crypto-policies" arch="noarch">
  <version epoch="0" ver="20230920.570ea89" rel="150600.3.12.1"/>
  <changelog author="pmonreal@suse.com" date="1614254400">- Update to version 20210225.05203d2:
  * Disable DTLS0.9 protocol in the DEFAULT policy.
  * policies/FIPS: insignificant reformatting
  * policygenerators/libssh: respect ssh_certs
  * policies/modules/OSPP: tighten to follow RHEL 8
  * crypto-policies(7): drop not-reenableable comment
  * follow up on disabling RC4</changelog>
  <changelog author="pmonreal@suse.com" date="1632484800">- Update to version 20210917.c9d86d1:
  * openssl: fix disabling ChaCha20
  * pacify pylint 2.11: use format strings
  * pacify pylint 2.11: specify explicit encoding
  * fix minor things found by new pylint
  * update-crypto-policies: --check against regenerated
  * update-crypto-policies: fix --check's walking order
  * policygenerators/gnutls: revert disabling DTLS0.9...
  * policygenerators/java: add javasystem backend
  * LEGACY: bump 1023 key size to 1024
  * cryptopolicies: fix 'and' in deprecation warnings
  * *ssh: condition ecdh-sha2-nistp384 on SECP384R1
  * nss: hopefully the last fix for nss sigalgs check
  * cryptopolicies: Python 3.10 compatibility
  * nss: postponing check + testing at least something
  * Rename 'policy modules' to 'subpolicies'
  * validation.rules: fix a missing word in error
  * cryptopolicies: raise errors right after warnings
  * update-crypto-policies: capitalize warnings
  * cryptopolicies: syntax-precheck scope errors
  * .gitlab-ci.yml, Makefile: enable codespell
  * all: fix several typos
  * docs: don't leave zero TLS/DTLS protocols on
  * openssl: separate TLS/DTLS MinProtocol/MaxProtocol
  * alg_lists: order protocols new-to-old for consistency
  * alg_lists: max_{d,}tls_version
  * update-crypto-policies: fix pregenerated + local.d
  * openssh: allow validation with pre-8.5
  * .gitlab-ci.yml: run commit-range against upstream
  * openssh: Use the new name for PubkeyAcceptedKeyTypes
  * sha1_in_dnssec: deprecate
  * .gitlab-ci.yml: test commit ranges
  * FIPS:OSPP: sign = -*-SHA2-224
  * scoped policies: documentation update
  * scoped policies: use new features to the fullest...
  * scoped policies: rewrite + minimal policy changes
  * scoped policies: rewrite preparations
  * nss: postponing the version check again, to 3.64
- Remove patches fixed upstream: crypto-policies-typos.patch
- Rebase: crypto-policies-test_supported_modules_only.patch
- Merge crypto-policies-asciidoc.patch into
    crypto-policies-no-build-manpages.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1632484801">- Remove the scripts and documentation regarding
  fips-finish-install and test-fips-setup
  * Add crypto-policies-FIPS.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- Update to version 20221214.a4c31a3:
  * bind: expand the list of disableable algorithms
  * libssh: Add support for openssh fido keys
  * .gitlab-ci.yml: install krb5-devel for krb5-config
  * sequoia: check using sequoia-policy-config-check
  * sequoia: introduce new back-end
  * Makefile: support overriding asciidoc executable name
  * openssh: make none and auto explicit and different
  * openssh: autodetect and allow forcing RequiredRSASize presence/name
  * openssh: remove _pre_8_5_ssh
  * pylintrc: update
  * Revert "disable SHA-1 further for a Fedora 38 Rawhide "jump scare"..."
  * disable SHA-1 further for a Fedora 38 Rawhide "jump scare"...
  * Makefile: exclude built manpages from codespell
  * add openssh HostbasedAcceptedAlgorithms
  * openssh: add RSAMinSize option following min_rsa_size
  * Revert ".gitlab-ci.yml: skip pylint (bz2069837)"
  * docs: add customization recommendation
  * tests/java: fix java.security.disableSystemPropertiesFile=true
  * policies: add FEDORA38 and TEST-FEDORA39
  * bind: control ED25519/ED448
  * openssl: disable SHA-1 signatures in FUTURE/NO-SHA1
  * .gitlab-ci.yml: skip pylint (bz2069837)
  * openssh: add support for sntrup761x25519-sha512@openssh.com
  * fips-mode-setup: fix one unrelated check to intended state
  * fips-mode-setup, fips-finish-install: abandon /etc/system-fips
  * Makefile: fix alt-policy test of LEGACY:AD-SUPPORT
  * fips-mode-setup: catch more inconsistencies, clarify --check
  * fips-mode-setup: improve handling FIPS plus subpolicies
  * .gitlab-ci.yml: use rawhide so that we get gnutls 3.7.3
  * gnutls: enable SHAKE, needed for Ed448
  * gnutls: use allowlisting
  * openssl: add newlines at the end of the output
  * FIPS:OSPP: relax -ECDSA-SHA2-512, -FFDHE-*
  * fips-mode-setup, fips-finish-install: call zipl more often
  * Add crypto-policies-rpmlintrc file to avoid files-duplicate,
    zero-length and non-conffile-in-etc warnings.
  * Rebase patches:
  - crypto-policies-FIPS.patch
  - crypto-policies-no-build-manpages.patch
  * Update README.SUSE</changelog>
  <changelog author="pmonreal@suse.com" date="1683547200">- Update to version 20230420.3d08ae7:
  * openssl, alg_lists: add brainpool support
  * openssl: set Groups explicitly
  * codespell: ignore aNULL
  * rpm-sequoia: allow 1024 bit DSA and SHA-1 per FeSCO decision 2960
  * sequoia: add separate rpm-sequoia backend
  * crypto-policies.7: state upfront that FUTURE is not so interoperable
  * Makefile: update for asciidoc 10
  * Skip not needed LibreswanGenerator and SequoiaGenerator:
  - Add crypto-policies-policygenerators.patch
  * Remove crypto-policies-test_supported_modules_only.patch
  * Rebase crypto-policies-no-build-manpages.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683547201">- Update the update-crypto-policies(8) man pages and README.SUSE
  to mention the supported back-end policies. [bsc#1209998]
  * Add crypto-policies-supported.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1684929600">- Revert a breaking change that introduces the config option
  rh-allow-sha1-signatures that is unkown to OpenSSL and fails
  on startup. We will consider adding this option to openssl.
  * https://gitlab.com/redhat-crypto/fedora-crypto-policies/-/commit/97fe4494
  * Add crypto-policies-revert-rh-allow-sha1-signatures.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1685016000">- FIPS: Enable to set the kernel FIPS mode with fips-mode-setup
  and fips-finish-install commands, add also the man pages. The
  required FIPS modules are left to be installed by the user.
  * Rebase crypto-policies-FIPS.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689249600">- Update to version 20230614.5f3458e:
  * policies: impose old OpenSSL groups order for all back-ends
  * Rebase patches:
  - crypto-policies-revert-rh-allow-sha1-signatures.patch
  - crypto-policies-supported.patch</changelog>
  <changelog author="meissner@suse.com" date="1689336000">- BSI.pol: Added a new BSI policy for BSI TR 02102* (jsc#PED-4933)
  derived from NEXT.pol</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- FIPS: Adapt the fips-mode-setup script to use the pbl command
  from the perl-Bootloader package to replace grubby. Add a note
  for transactional systems [jsc#PED-5041].
  * Rebase crypto-policies-FIPS.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693483200">- Tests: Fix pylint versioning for TW and fix the parsing of the
  policygenerators to account for the commented lines correctly.
  * Add crypto-policies-pylint.patch
  * Rebase crypto-policies-policygenerators.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694779200">- Conditionally recommend the crypto-policies-scripts package
  when python is not installed in the system [bsc#1215201]</changelog>
  <changelog author="pmonreal@suse.com" date="1695384000">- Update to version 20230920.570ea89:
  * fips-mode-setup: more thorough --disable, still unsupported
  * FIPS:OSPP: tighten beyond reason for OSPP 4.3
  * krb5: sort enctypes mac-first, cipher-second, prioritize SHA-2 ones
  * openssl: implement relaxing EMS in FIPS (NO-ENFORCE-EMS)
  * gnutls: prepare for tls-session-hash option coming
  * nss: prepare for TLS-REQUIRE-EMS option coming
  * NO-ENFORCE-EMS: add subpolicy
  * FIPS: set __ems = ENFORCE
  * cryptopolicies: add enums and __ems tri-state
  * docs: replace `FIPS 140-2` with just `FIPS 140`
  * .gitlab-ci: remove forcing OPENSSH_MIN_RSA_SIZE
  * cryptopolicies: add comments on dunder options
  * nss: retire NSS_OLD and replace with NSS_LAX 3.80 check
  * BSI: start a BSI TR 02102 policy [jsc#PED-4933]
  * Rebase patches:
  - crypto-policies-policygenerators.patch
  - crypto-policies-revert-rh-allow-sha1-signatures.patch
  - crypto-policies-FIPS.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695816000">- nss: Skip the NSS policy check if the mozilla-nss-tools package
  is not installed. This avoids adding more dependencies in ring0.
  * Add crypto-policies-nss.patch [bsc#1211301]</changelog>
  <changelog author="scabrero@suse.de" date="1737547200">- krb5: disallow aes256-cts-hmac-sha1-96 and aes128-cts-hmac-sha1-96
  kerberos encryption types from RFC3961 in FIPS mode, as its key
  derivation function is not certified; (jsc#PED-12018);
- Update AD-SUPPORT and add AD-SUPPORT-LEGACY subpolicies; (jsc#PED-12018);
  The AD-SUPPORT subpolicy will enable the aes256-cts-hmac-sha1-96
  and aes128-cts-hmac-sha1-96 encryption types necessary for AD.
  The Kerberos libraries will tell OpenSSL provider to bypass FIPS
  restrictions when loading the KRB5KDF module.
  The AD-SUPPORT-LEGACY will allow the use of RC4 encryption types
  in environments where either accounts or trusted domains objects
  were not yet migrated to AES.
- Add patch 0008-policies-modules-update-AD-SUPPORT-add-AD-SUP.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Remove dangling symlink for the libreswan config [bsc#1236858]</changelog>
  <changelog author="pmonreal@suse.com" date="1740744000">- fips-mode-setup: tolerate fips dracut module presence w/o FIPS
  * Fixes the "Inconsistent state detected" warning when disabling
    the FIPS mode [bsc#1236165]
  * Upstream commit [gl#redhat-crypto/fedora-crypto-policies#78773542]
  * Add crypto-policies-fips-mode-setup-dracut.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1740744001">- Fix fips-mode-setup in EFI or Secure Boot mode. [bsc#1227637]
  * Rebase crypto-policies-FIPS.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1752148800">- Update the BSI policy [jsc#PED-12880]
  * BSI: switch to 3072 minimum RSA key size [322f0ba4]
  * BSI: Update BSI policy for new 2024 minimum [64b9dddd]
  * Add patches:
  - crypto-policies-BSI-Update-BSI-policy-for-new-2024-minimum-recommend.patch
  - crypto-policies-BSI-switch-to-3072-minimum-RSA-key-size.patch</changelog>
</package>
<package pkgid="814cddece89d9a075b0abaf7ee6443f57f15b8eefb28b3b1c1162fcad222535b" name="crypto-policies" arch="src">
  <version epoch="0" ver="20230920.570ea89" rel="150600.3.12.1"/>
  <changelog author="pmonreal@suse.com" date="1614254400">- Update to version 20210225.05203d2:
  * Disable DTLS0.9 protocol in the DEFAULT policy.
  * policies/FIPS: insignificant reformatting
  * policygenerators/libssh: respect ssh_certs
  * policies/modules/OSPP: tighten to follow RHEL 8
  * crypto-policies(7): drop not-reenableable comment
  * follow up on disabling RC4</changelog>
  <changelog author="pmonreal@suse.com" date="1632484800">- Update to version 20210917.c9d86d1:
  * openssl: fix disabling ChaCha20
  * pacify pylint 2.11: use format strings
  * pacify pylint 2.11: specify explicit encoding
  * fix minor things found by new pylint
  * update-crypto-policies: --check against regenerated
  * update-crypto-policies: fix --check's walking order
  * policygenerators/gnutls: revert disabling DTLS0.9...
  * policygenerators/java: add javasystem backend
  * LEGACY: bump 1023 key size to 1024
  * cryptopolicies: fix 'and' in deprecation warnings
  * *ssh: condition ecdh-sha2-nistp384 on SECP384R1
  * nss: hopefully the last fix for nss sigalgs check
  * cryptopolicies: Python 3.10 compatibility
  * nss: postponing check + testing at least something
  * Rename 'policy modules' to 'subpolicies'
  * validation.rules: fix a missing word in error
  * cryptopolicies: raise errors right after warnings
  * update-crypto-policies: capitalize warnings
  * cryptopolicies: syntax-precheck scope errors
  * .gitlab-ci.yml, Makefile: enable codespell
  * all: fix several typos
  * docs: don't leave zero TLS/DTLS protocols on
  * openssl: separate TLS/DTLS MinProtocol/MaxProtocol
  * alg_lists: order protocols new-to-old for consistency
  * alg_lists: max_{d,}tls_version
  * update-crypto-policies: fix pregenerated + local.d
  * openssh: allow validation with pre-8.5
  * .gitlab-ci.yml: run commit-range against upstream
  * openssh: Use the new name for PubkeyAcceptedKeyTypes
  * sha1_in_dnssec: deprecate
  * .gitlab-ci.yml: test commit ranges
  * FIPS:OSPP: sign = -*-SHA2-224
  * scoped policies: documentation update
  * scoped policies: use new features to the fullest...
  * scoped policies: rewrite + minimal policy changes
  * scoped policies: rewrite preparations
  * nss: postponing the version check again, to 3.64
- Remove patches fixed upstream: crypto-policies-typos.patch
- Rebase: crypto-policies-test_supported_modules_only.patch
- Merge crypto-policies-asciidoc.patch into
    crypto-policies-no-build-manpages.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1632484801">- Remove the scripts and documentation regarding
  fips-finish-install and test-fips-setup
  * Add crypto-policies-FIPS.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- Update to version 20221214.a4c31a3:
  * bind: expand the list of disableable algorithms
  * libssh: Add support for openssh fido keys
  * .gitlab-ci.yml: install krb5-devel for krb5-config
  * sequoia: check using sequoia-policy-config-check
  * sequoia: introduce new back-end
  * Makefile: support overriding asciidoc executable name
  * openssh: make none and auto explicit and different
  * openssh: autodetect and allow forcing RequiredRSASize presence/name
  * openssh: remove _pre_8_5_ssh
  * pylintrc: update
  * Revert "disable SHA-1 further for a Fedora 38 Rawhide "jump scare"..."
  * disable SHA-1 further for a Fedora 38 Rawhide "jump scare"...
  * Makefile: exclude built manpages from codespell
  * add openssh HostbasedAcceptedAlgorithms
  * openssh: add RSAMinSize option following min_rsa_size
  * Revert ".gitlab-ci.yml: skip pylint (bz2069837)"
  * docs: add customization recommendation
  * tests/java: fix java.security.disableSystemPropertiesFile=true
  * policies: add FEDORA38 and TEST-FEDORA39
  * bind: control ED25519/ED448
  * openssl: disable SHA-1 signatures in FUTURE/NO-SHA1
  * .gitlab-ci.yml: skip pylint (bz2069837)
  * openssh: add support for sntrup761x25519-sha512@openssh.com
  * fips-mode-setup: fix one unrelated check to intended state
  * fips-mode-setup, fips-finish-install: abandon /etc/system-fips
  * Makefile: fix alt-policy test of LEGACY:AD-SUPPORT
  * fips-mode-setup: catch more inconsistencies, clarify --check
  * fips-mode-setup: improve handling FIPS plus subpolicies
  * .gitlab-ci.yml: use rawhide so that we get gnutls 3.7.3
  * gnutls: enable SHAKE, needed for Ed448
  * gnutls: use allowlisting
  * openssl: add newlines at the end of the output
  * FIPS:OSPP: relax -ECDSA-SHA2-512, -FFDHE-*
  * fips-mode-setup, fips-finish-install: call zipl more often
  * Add crypto-policies-rpmlintrc file to avoid files-duplicate,
    zero-length and non-conffile-in-etc warnings.
  * Rebase patches:
  - crypto-policies-FIPS.patch
  - crypto-policies-no-build-manpages.patch
  * Update README.SUSE</changelog>
  <changelog author="pmonreal@suse.com" date="1683547200">- Update to version 20230420.3d08ae7:
  * openssl, alg_lists: add brainpool support
  * openssl: set Groups explicitly
  * codespell: ignore aNULL
  * rpm-sequoia: allow 1024 bit DSA and SHA-1 per FeSCO decision 2960
  * sequoia: add separate rpm-sequoia backend
  * crypto-policies.7: state upfront that FUTURE is not so interoperable
  * Makefile: update for asciidoc 10
  * Skip not needed LibreswanGenerator and SequoiaGenerator:
  - Add crypto-policies-policygenerators.patch
  * Remove crypto-policies-test_supported_modules_only.patch
  * Rebase crypto-policies-no-build-manpages.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683547201">- Update the update-crypto-policies(8) man pages and README.SUSE
  to mention the supported back-end policies. [bsc#1209998]
  * Add crypto-policies-supported.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1684929600">- Revert a breaking change that introduces the config option
  rh-allow-sha1-signatures that is unkown to OpenSSL and fails
  on startup. We will consider adding this option to openssl.
  * https://gitlab.com/redhat-crypto/fedora-crypto-policies/-/commit/97fe4494
  * Add crypto-policies-revert-rh-allow-sha1-signatures.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1685016000">- FIPS: Enable to set the kernel FIPS mode with fips-mode-setup
  and fips-finish-install commands, add also the man pages. The
  required FIPS modules are left to be installed by the user.
  * Rebase crypto-policies-FIPS.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689249600">- Update to version 20230614.5f3458e:
  * policies: impose old OpenSSL groups order for all back-ends
  * Rebase patches:
  - crypto-policies-revert-rh-allow-sha1-signatures.patch
  - crypto-policies-supported.patch</changelog>
  <changelog author="meissner@suse.com" date="1689336000">- BSI.pol: Added a new BSI policy for BSI TR 02102* (jsc#PED-4933)
  derived from NEXT.pol</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- FIPS: Adapt the fips-mode-setup script to use the pbl command
  from the perl-Bootloader package to replace grubby. Add a note
  for transactional systems [jsc#PED-5041].
  * Rebase crypto-policies-FIPS.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693483200">- Tests: Fix pylint versioning for TW and fix the parsing of the
  policygenerators to account for the commented lines correctly.
  * Add crypto-policies-pylint.patch
  * Rebase crypto-policies-policygenerators.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694779200">- Conditionally recommend the crypto-policies-scripts package
  when python is not installed in the system [bsc#1215201]</changelog>
  <changelog author="pmonreal@suse.com" date="1695384000">- Update to version 20230920.570ea89:
  * fips-mode-setup: more thorough --disable, still unsupported
  * FIPS:OSPP: tighten beyond reason for OSPP 4.3
  * krb5: sort enctypes mac-first, cipher-second, prioritize SHA-2 ones
  * openssl: implement relaxing EMS in FIPS (NO-ENFORCE-EMS)
  * gnutls: prepare for tls-session-hash option coming
  * nss: prepare for TLS-REQUIRE-EMS option coming
  * NO-ENFORCE-EMS: add subpolicy
  * FIPS: set __ems = ENFORCE
  * cryptopolicies: add enums and __ems tri-state
  * docs: replace `FIPS 140-2` with just `FIPS 140`
  * .gitlab-ci: remove forcing OPENSSH_MIN_RSA_SIZE
  * cryptopolicies: add comments on dunder options
  * nss: retire NSS_OLD and replace with NSS_LAX 3.80 check
  * BSI: start a BSI TR 02102 policy [jsc#PED-4933]
  * Rebase patches:
  - crypto-policies-policygenerators.patch
  - crypto-policies-revert-rh-allow-sha1-signatures.patch
  - crypto-policies-FIPS.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695816000">- nss: Skip the NSS policy check if the mozilla-nss-tools package
  is not installed. This avoids adding more dependencies in ring0.
  * Add crypto-policies-nss.patch [bsc#1211301]</changelog>
  <changelog author="scabrero@suse.de" date="1737547200">- krb5: disallow aes256-cts-hmac-sha1-96 and aes128-cts-hmac-sha1-96
  kerberos encryption types from RFC3961 in FIPS mode, as its key
  derivation function is not certified; (jsc#PED-12018);
- Update AD-SUPPORT and add AD-SUPPORT-LEGACY subpolicies; (jsc#PED-12018);
  The AD-SUPPORT subpolicy will enable the aes256-cts-hmac-sha1-96
  and aes128-cts-hmac-sha1-96 encryption types necessary for AD.
  The Kerberos libraries will tell OpenSSL provider to bypass FIPS
  restrictions when loading the KRB5KDF module.
  The AD-SUPPORT-LEGACY will allow the use of RC4 encryption types
  in environments where either accounts or trusted domains objects
  were not yet migrated to AES.
- Add patch 0008-policies-modules-update-AD-SUPPORT-add-AD-SUP.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Remove dangling symlink for the libreswan config [bsc#1236858]</changelog>
  <changelog author="pmonreal@suse.com" date="1740744000">- fips-mode-setup: tolerate fips dracut module presence w/o FIPS
  * Fixes the "Inconsistent state detected" warning when disabling
    the FIPS mode [bsc#1236165]
  * Upstream commit [gl#redhat-crypto/fedora-crypto-policies#78773542]
  * Add crypto-policies-fips-mode-setup-dracut.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1740744001">- Fix fips-mode-setup in EFI or Secure Boot mode. [bsc#1227637]
  * Rebase crypto-policies-FIPS.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1752148800">- Update the BSI policy [jsc#PED-12880]
  * BSI: switch to 3072 minimum RSA key size [322f0ba4]
  * BSI: Update BSI policy for new 2024 minimum [64b9dddd]
  * Add patches:
  - crypto-policies-BSI-Update-BSI-policy-for-new-2024-minimum-recommend.patch
  - crypto-policies-BSI-switch-to-3072-minimum-RSA-key-size.patch</changelog>
</package>
<package pkgid="7ced757d6db5074acf0ea9abaadc2433e39cd78cc83088f735eb1cb10c163399" name="crypto-policies" arch="noarch">
  <version epoch="0" ver="20230920.570ea89" rel="150600.3.16.1"/>
  <changelog author="pmonreal@suse.com" date="1632484800">- Update to version 20210917.c9d86d1:
  * openssl: fix disabling ChaCha20
  * pacify pylint 2.11: use format strings
  * pacify pylint 2.11: specify explicit encoding
  * fix minor things found by new pylint
  * update-crypto-policies: --check against regenerated
  * update-crypto-policies: fix --check's walking order
  * policygenerators/gnutls: revert disabling DTLS0.9...
  * policygenerators/java: add javasystem backend
  * LEGACY: bump 1023 key size to 1024
  * cryptopolicies: fix 'and' in deprecation warnings
  * *ssh: condition ecdh-sha2-nistp384 on SECP384R1
  * nss: hopefully the last fix for nss sigalgs check
  * cryptopolicies: Python 3.10 compatibility
  * nss: postponing check + testing at least something
  * Rename 'policy modules' to 'subpolicies'
  * validation.rules: fix a missing word in error
  * cryptopolicies: raise errors right after warnings
  * update-crypto-policies: capitalize warnings
  * cryptopolicies: syntax-precheck scope errors
  * .gitlab-ci.yml, Makefile: enable codespell
  * all: fix several typos
  * docs: don't leave zero TLS/DTLS protocols on
  * openssl: separate TLS/DTLS MinProtocol/MaxProtocol
  * alg_lists: order protocols new-to-old for consistency
  * alg_lists: max_{d,}tls_version
  * update-crypto-policies: fix pregenerated + local.d
  * openssh: allow validation with pre-8.5
  * .gitlab-ci.yml: run commit-range against upstream
  * openssh: Use the new name for PubkeyAcceptedKeyTypes
  * sha1_in_dnssec: deprecate
  * .gitlab-ci.yml: test commit ranges
  * FIPS:OSPP: sign = -*-SHA2-224
  * scoped policies: documentation update
  * scoped policies: use new features to the fullest...
  * scoped policies: rewrite + minimal policy changes
  * scoped policies: rewrite preparations
  * nss: postponing the version check again, to 3.64
- Remove patches fixed upstream: crypto-policies-typos.patch
- Rebase: crypto-policies-test_supported_modules_only.patch
- Merge crypto-policies-asciidoc.patch into
    crypto-policies-no-build-manpages.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1632484801">- Remove the scripts and documentation regarding
  fips-finish-install and test-fips-setup
  * Add crypto-policies-FIPS.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- Update to version 20221214.a4c31a3:
  * bind: expand the list of disableable algorithms
  * libssh: Add support for openssh fido keys
  * .gitlab-ci.yml: install krb5-devel for krb5-config
  * sequoia: check using sequoia-policy-config-check
  * sequoia: introduce new back-end
  * Makefile: support overriding asciidoc executable name
  * openssh: make none and auto explicit and different
  * openssh: autodetect and allow forcing RequiredRSASize presence/name
  * openssh: remove _pre_8_5_ssh
  * pylintrc: update
  * Revert "disable SHA-1 further for a Fedora 38 Rawhide "jump scare"..."
  * disable SHA-1 further for a Fedora 38 Rawhide "jump scare"...
  * Makefile: exclude built manpages from codespell
  * add openssh HostbasedAcceptedAlgorithms
  * openssh: add RSAMinSize option following min_rsa_size
  * Revert ".gitlab-ci.yml: skip pylint (bz2069837)"
  * docs: add customization recommendation
  * tests/java: fix java.security.disableSystemPropertiesFile=true
  * policies: add FEDORA38 and TEST-FEDORA39
  * bind: control ED25519/ED448
  * openssl: disable SHA-1 signatures in FUTURE/NO-SHA1
  * .gitlab-ci.yml: skip pylint (bz2069837)
  * openssh: add support for sntrup761x25519-sha512@openssh.com
  * fips-mode-setup: fix one unrelated check to intended state
  * fips-mode-setup, fips-finish-install: abandon /etc/system-fips
  * Makefile: fix alt-policy test of LEGACY:AD-SUPPORT
  * fips-mode-setup: catch more inconsistencies, clarify --check
  * fips-mode-setup: improve handling FIPS plus subpolicies
  * .gitlab-ci.yml: use rawhide so that we get gnutls 3.7.3
  * gnutls: enable SHAKE, needed for Ed448
  * gnutls: use allowlisting
  * openssl: add newlines at the end of the output
  * FIPS:OSPP: relax -ECDSA-SHA2-512, -FFDHE-*
  * fips-mode-setup, fips-finish-install: call zipl more often
  * Add crypto-policies-rpmlintrc file to avoid files-duplicate,
    zero-length and non-conffile-in-etc warnings.
  * Rebase patches:
  - crypto-policies-FIPS.patch
  - crypto-policies-no-build-manpages.patch
  * Update README.SUSE</changelog>
  <changelog author="pmonreal@suse.com" date="1683547200">- Update to version 20230420.3d08ae7:
  * openssl, alg_lists: add brainpool support
  * openssl: set Groups explicitly
  * codespell: ignore aNULL
  * rpm-sequoia: allow 1024 bit DSA and SHA-1 per FeSCO decision 2960
  * sequoia: add separate rpm-sequoia backend
  * crypto-policies.7: state upfront that FUTURE is not so interoperable
  * Makefile: update for asciidoc 10
  * Skip not needed LibreswanGenerator and SequoiaGenerator:
  - Add crypto-policies-policygenerators.patch
  * Remove crypto-policies-test_supported_modules_only.patch
  * Rebase crypto-policies-no-build-manpages.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683547201">- Update the update-crypto-policies(8) man pages and README.SUSE
  to mention the supported back-end policies. [bsc#1209998]
  * Add crypto-policies-supported.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1684929600">- Revert a breaking change that introduces the config option
  rh-allow-sha1-signatures that is unkown to OpenSSL and fails
  on startup. We will consider adding this option to openssl.
  * https://gitlab.com/redhat-crypto/fedora-crypto-policies/-/commit/97fe4494
  * Add crypto-policies-revert-rh-allow-sha1-signatures.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1685016000">- FIPS: Enable to set the kernel FIPS mode with fips-mode-setup
  and fips-finish-install commands, add also the man pages. The
  required FIPS modules are left to be installed by the user.
  * Rebase crypto-policies-FIPS.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689249600">- Update to version 20230614.5f3458e:
  * policies: impose old OpenSSL groups order for all back-ends
  * Rebase patches:
  - crypto-policies-revert-rh-allow-sha1-signatures.patch
  - crypto-policies-supported.patch</changelog>
  <changelog author="meissner@suse.com" date="1689336000">- BSI.pol: Added a new BSI policy for BSI TR 02102* (jsc#PED-4933)
  derived from NEXT.pol</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- FIPS: Adapt the fips-mode-setup script to use the pbl command
  from the perl-Bootloader package to replace grubby. Add a note
  for transactional systems [jsc#PED-5041].
  * Rebase crypto-policies-FIPS.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693483200">- Tests: Fix pylint versioning for TW and fix the parsing of the
  policygenerators to account for the commented lines correctly.
  * Add crypto-policies-pylint.patch
  * Rebase crypto-policies-policygenerators.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694779200">- Conditionally recommend the crypto-policies-scripts package
  when python is not installed in the system [bsc#1215201]</changelog>
  <changelog author="pmonreal@suse.com" date="1695384000">- Update to version 20230920.570ea89:
  * fips-mode-setup: more thorough --disable, still unsupported
  * FIPS:OSPP: tighten beyond reason for OSPP 4.3
  * krb5: sort enctypes mac-first, cipher-second, prioritize SHA-2 ones
  * openssl: implement relaxing EMS in FIPS (NO-ENFORCE-EMS)
  * gnutls: prepare for tls-session-hash option coming
  * nss: prepare for TLS-REQUIRE-EMS option coming
  * NO-ENFORCE-EMS: add subpolicy
  * FIPS: set __ems = ENFORCE
  * cryptopolicies: add enums and __ems tri-state
  * docs: replace `FIPS 140-2` with just `FIPS 140`
  * .gitlab-ci: remove forcing OPENSSH_MIN_RSA_SIZE
  * cryptopolicies: add comments on dunder options
  * nss: retire NSS_OLD and replace with NSS_LAX 3.80 check
  * BSI: start a BSI TR 02102 policy [jsc#PED-4933]
  * Rebase patches:
  - crypto-policies-policygenerators.patch
  - crypto-policies-revert-rh-allow-sha1-signatures.patch
  - crypto-policies-FIPS.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695816000">- nss: Skip the NSS policy check if the mozilla-nss-tools package
  is not installed. This avoids adding more dependencies in ring0.
  * Add crypto-policies-nss.patch [bsc#1211301]</changelog>
  <changelog author="scabrero@suse.de" date="1737547200">- krb5: disallow aes256-cts-hmac-sha1-96 and aes128-cts-hmac-sha1-96
  kerberos encryption types from RFC3961 in FIPS mode, as its key
  derivation function is not certified; (jsc#PED-12018);
- Update AD-SUPPORT and add AD-SUPPORT-LEGACY subpolicies; (jsc#PED-12018);
  The AD-SUPPORT subpolicy will enable the aes256-cts-hmac-sha1-96
  and aes128-cts-hmac-sha1-96 encryption types necessary for AD.
  The Kerberos libraries will tell OpenSSL provider to bypass FIPS
  restrictions when loading the KRB5KDF module.
  The AD-SUPPORT-LEGACY will allow the use of RC4 encryption types
  in environments where either accounts or trusted domains objects
  were not yet migrated to AES.
- Add patch 0008-policies-modules-update-AD-SUPPORT-add-AD-SUP.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Remove dangling symlink for the libreswan config [bsc#1236858]</changelog>
  <changelog author="pmonreal@suse.com" date="1740744000">- fips-mode-setup: tolerate fips dracut module presence w/o FIPS
  * Fixes the "Inconsistent state detected" warning when disabling
    the FIPS mode [bsc#1236165]
  * Upstream commit [gl#redhat-crypto/fedora-crypto-policies#78773542]
  * Add crypto-policies-fips-mode-setup-dracut.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1740744001">- Fix fips-mode-setup in EFI or Secure Boot mode. [bsc#1227637]
  * Rebase crypto-policies-FIPS.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1752148800">- Update the BSI policy [jsc#PED-12880]
  * BSI: switch to 3072 minimum RSA key size [322f0ba4]
  * BSI: Update BSI policy for new 2024 minimum [64b9dddd]
  * Add patches:
  - crypto-policies-BSI-Update-BSI-policy-for-new-2024-minimum-recommend.patch
  - crypto-policies-BSI-switch-to-3072-minimum-RSA-key-size.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1773921600">- Add PQC support for OpenSSH (bsc#1258311, bsc#1259825)
  * Enable and prioritize sntrup761x25519-sha512 for OpenSSH by default
  * Add crypto-policies-OpenSSH-PQC.patch</changelog>
</package>
<package pkgid="7cd84f9feb862a63f384ef2db78cdc922c80f65a857ef0b13d575c84ef9d1180" name="crypto-policies" arch="src">
  <version epoch="0" ver="20230920.570ea89" rel="150600.3.16.1"/>
  <changelog author="pmonreal@suse.com" date="1632484800">- Update to version 20210917.c9d86d1:
  * openssl: fix disabling ChaCha20
  * pacify pylint 2.11: use format strings
  * pacify pylint 2.11: specify explicit encoding
  * fix minor things found by new pylint
  * update-crypto-policies: --check against regenerated
  * update-crypto-policies: fix --check's walking order
  * policygenerators/gnutls: revert disabling DTLS0.9...
  * policygenerators/java: add javasystem backend
  * LEGACY: bump 1023 key size to 1024
  * cryptopolicies: fix 'and' in deprecation warnings
  * *ssh: condition ecdh-sha2-nistp384 on SECP384R1
  * nss: hopefully the last fix for nss sigalgs check
  * cryptopolicies: Python 3.10 compatibility
  * nss: postponing check + testing at least something
  * Rename 'policy modules' to 'subpolicies'
  * validation.rules: fix a missing word in error
  * cryptopolicies: raise errors right after warnings
  * update-crypto-policies: capitalize warnings
  * cryptopolicies: syntax-precheck scope errors
  * .gitlab-ci.yml, Makefile: enable codespell
  * all: fix several typos
  * docs: don't leave zero TLS/DTLS protocols on
  * openssl: separate TLS/DTLS MinProtocol/MaxProtocol
  * alg_lists: order protocols new-to-old for consistency
  * alg_lists: max_{d,}tls_version
  * update-crypto-policies: fix pregenerated + local.d
  * openssh: allow validation with pre-8.5
  * .gitlab-ci.yml: run commit-range against upstream
  * openssh: Use the new name for PubkeyAcceptedKeyTypes
  * sha1_in_dnssec: deprecate
  * .gitlab-ci.yml: test commit ranges
  * FIPS:OSPP: sign = -*-SHA2-224
  * scoped policies: documentation update
  * scoped policies: use new features to the fullest...
  * scoped policies: rewrite + minimal policy changes
  * scoped policies: rewrite preparations
  * nss: postponing the version check again, to 3.64
- Remove patches fixed upstream: crypto-policies-typos.patch
- Rebase: crypto-policies-test_supported_modules_only.patch
- Merge crypto-policies-asciidoc.patch into
    crypto-policies-no-build-manpages.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1632484801">- Remove the scripts and documentation regarding
  fips-finish-install and test-fips-setup
  * Add crypto-policies-FIPS.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- Update to version 20221214.a4c31a3:
  * bind: expand the list of disableable algorithms
  * libssh: Add support for openssh fido keys
  * .gitlab-ci.yml: install krb5-devel for krb5-config
  * sequoia: check using sequoia-policy-config-check
  * sequoia: introduce new back-end
  * Makefile: support overriding asciidoc executable name
  * openssh: make none and auto explicit and different
  * openssh: autodetect and allow forcing RequiredRSASize presence/name
  * openssh: remove _pre_8_5_ssh
  * pylintrc: update
  * Revert "disable SHA-1 further for a Fedora 38 Rawhide "jump scare"..."
  * disable SHA-1 further for a Fedora 38 Rawhide "jump scare"...
  * Makefile: exclude built manpages from codespell
  * add openssh HostbasedAcceptedAlgorithms
  * openssh: add RSAMinSize option following min_rsa_size
  * Revert ".gitlab-ci.yml: skip pylint (bz2069837)"
  * docs: add customization recommendation
  * tests/java: fix java.security.disableSystemPropertiesFile=true
  * policies: add FEDORA38 and TEST-FEDORA39
  * bind: control ED25519/ED448
  * openssl: disable SHA-1 signatures in FUTURE/NO-SHA1
  * .gitlab-ci.yml: skip pylint (bz2069837)
  * openssh: add support for sntrup761x25519-sha512@openssh.com
  * fips-mode-setup: fix one unrelated check to intended state
  * fips-mode-setup, fips-finish-install: abandon /etc/system-fips
  * Makefile: fix alt-policy test of LEGACY:AD-SUPPORT
  * fips-mode-setup: catch more inconsistencies, clarify --check
  * fips-mode-setup: improve handling FIPS plus subpolicies
  * .gitlab-ci.yml: use rawhide so that we get gnutls 3.7.3
  * gnutls: enable SHAKE, needed for Ed448
  * gnutls: use allowlisting
  * openssl: add newlines at the end of the output
  * FIPS:OSPP: relax -ECDSA-SHA2-512, -FFDHE-*
  * fips-mode-setup, fips-finish-install: call zipl more often
  * Add crypto-policies-rpmlintrc file to avoid files-duplicate,
    zero-length and non-conffile-in-etc warnings.
  * Rebase patches:
  - crypto-policies-FIPS.patch
  - crypto-policies-no-build-manpages.patch
  * Update README.SUSE</changelog>
  <changelog author="pmonreal@suse.com" date="1683547200">- Update to version 20230420.3d08ae7:
  * openssl, alg_lists: add brainpool support
  * openssl: set Groups explicitly
  * codespell: ignore aNULL
  * rpm-sequoia: allow 1024 bit DSA and SHA-1 per FeSCO decision 2960
  * sequoia: add separate rpm-sequoia backend
  * crypto-policies.7: state upfront that FUTURE is not so interoperable
  * Makefile: update for asciidoc 10
  * Skip not needed LibreswanGenerator and SequoiaGenerator:
  - Add crypto-policies-policygenerators.patch
  * Remove crypto-policies-test_supported_modules_only.patch
  * Rebase crypto-policies-no-build-manpages.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683547201">- Update the update-crypto-policies(8) man pages and README.SUSE
  to mention the supported back-end policies. [bsc#1209998]
  * Add crypto-policies-supported.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1684929600">- Revert a breaking change that introduces the config option
  rh-allow-sha1-signatures that is unkown to OpenSSL and fails
  on startup. We will consider adding this option to openssl.
  * https://gitlab.com/redhat-crypto/fedora-crypto-policies/-/commit/97fe4494
  * Add crypto-policies-revert-rh-allow-sha1-signatures.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1685016000">- FIPS: Enable to set the kernel FIPS mode with fips-mode-setup
  and fips-finish-install commands, add also the man pages. The
  required FIPS modules are left to be installed by the user.
  * Rebase crypto-policies-FIPS.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689249600">- Update to version 20230614.5f3458e:
  * policies: impose old OpenSSL groups order for all back-ends
  * Rebase patches:
  - crypto-policies-revert-rh-allow-sha1-signatures.patch
  - crypto-policies-supported.patch</changelog>
  <changelog author="meissner@suse.com" date="1689336000">- BSI.pol: Added a new BSI policy for BSI TR 02102* (jsc#PED-4933)
  derived from NEXT.pol</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- FIPS: Adapt the fips-mode-setup script to use the pbl command
  from the perl-Bootloader package to replace grubby. Add a note
  for transactional systems [jsc#PED-5041].
  * Rebase crypto-policies-FIPS.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693483200">- Tests: Fix pylint versioning for TW and fix the parsing of the
  policygenerators to account for the commented lines correctly.
  * Add crypto-policies-pylint.patch
  * Rebase crypto-policies-policygenerators.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694779200">- Conditionally recommend the crypto-policies-scripts package
  when python is not installed in the system [bsc#1215201]</changelog>
  <changelog author="pmonreal@suse.com" date="1695384000">- Update to version 20230920.570ea89:
  * fips-mode-setup: more thorough --disable, still unsupported
  * FIPS:OSPP: tighten beyond reason for OSPP 4.3
  * krb5: sort enctypes mac-first, cipher-second, prioritize SHA-2 ones
  * openssl: implement relaxing EMS in FIPS (NO-ENFORCE-EMS)
  * gnutls: prepare for tls-session-hash option coming
  * nss: prepare for TLS-REQUIRE-EMS option coming
  * NO-ENFORCE-EMS: add subpolicy
  * FIPS: set __ems = ENFORCE
  * cryptopolicies: add enums and __ems tri-state
  * docs: replace `FIPS 140-2` with just `FIPS 140`
  * .gitlab-ci: remove forcing OPENSSH_MIN_RSA_SIZE
  * cryptopolicies: add comments on dunder options
  * nss: retire NSS_OLD and replace with NSS_LAX 3.80 check
  * BSI: start a BSI TR 02102 policy [jsc#PED-4933]
  * Rebase patches:
  - crypto-policies-policygenerators.patch
  - crypto-policies-revert-rh-allow-sha1-signatures.patch
  - crypto-policies-FIPS.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695816000">- nss: Skip the NSS policy check if the mozilla-nss-tools package
  is not installed. This avoids adding more dependencies in ring0.
  * Add crypto-policies-nss.patch [bsc#1211301]</changelog>
  <changelog author="scabrero@suse.de" date="1737547200">- krb5: disallow aes256-cts-hmac-sha1-96 and aes128-cts-hmac-sha1-96
  kerberos encryption types from RFC3961 in FIPS mode, as its key
  derivation function is not certified; (jsc#PED-12018);
- Update AD-SUPPORT and add AD-SUPPORT-LEGACY subpolicies; (jsc#PED-12018);
  The AD-SUPPORT subpolicy will enable the aes256-cts-hmac-sha1-96
  and aes128-cts-hmac-sha1-96 encryption types necessary for AD.
  The Kerberos libraries will tell OpenSSL provider to bypass FIPS
  restrictions when loading the KRB5KDF module.
  The AD-SUPPORT-LEGACY will allow the use of RC4 encryption types
  in environments where either accounts or trusted domains objects
  were not yet migrated to AES.
- Add patch 0008-policies-modules-update-AD-SUPPORT-add-AD-SUP.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Remove dangling symlink for the libreswan config [bsc#1236858]</changelog>
  <changelog author="pmonreal@suse.com" date="1740744000">- fips-mode-setup: tolerate fips dracut module presence w/o FIPS
  * Fixes the "Inconsistent state detected" warning when disabling
    the FIPS mode [bsc#1236165]
  * Upstream commit [gl#redhat-crypto/fedora-crypto-policies#78773542]
  * Add crypto-policies-fips-mode-setup-dracut.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1740744001">- Fix fips-mode-setup in EFI or Secure Boot mode. [bsc#1227637]
  * Rebase crypto-policies-FIPS.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1752148800">- Update the BSI policy [jsc#PED-12880]
  * BSI: switch to 3072 minimum RSA key size [322f0ba4]
  * BSI: Update BSI policy for new 2024 minimum [64b9dddd]
  * Add patches:
  - crypto-policies-BSI-Update-BSI-policy-for-new-2024-minimum-recommend.patch
  - crypto-policies-BSI-switch-to-3072-minimum-RSA-key-size.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1773921600">- Add PQC support for OpenSSH (bsc#1258311, bsc#1259825)
  * Enable and prioritize sntrup761x25519-sha512 for OpenSSH by default
  * Add crypto-policies-OpenSSH-PQC.patch</changelog>
</package>
<package pkgid="7ed73f0da6816894554840bcf163b95d75f04e8b9d216e9ed513c4a1f6ddab96" name="crypto-policies-scripts" arch="noarch">
  <version epoch="0" ver="20230920.570ea89" rel="150600.3.12.1"/>
  <changelog author="pmonreal@suse.com" date="1614254400">- Update to version 20210225.05203d2:
  * Disable DTLS0.9 protocol in the DEFAULT policy.
  * policies/FIPS: insignificant reformatting
  * policygenerators/libssh: respect ssh_certs
  * policies/modules/OSPP: tighten to follow RHEL 8
  * crypto-policies(7): drop not-reenableable comment
  * follow up on disabling RC4</changelog>
  <changelog author="pmonreal@suse.com" date="1632484800">- Update to version 20210917.c9d86d1:
  * openssl: fix disabling ChaCha20
  * pacify pylint 2.11: use format strings
  * pacify pylint 2.11: specify explicit encoding
  * fix minor things found by new pylint
  * update-crypto-policies: --check against regenerated
  * update-crypto-policies: fix --check's walking order
  * policygenerators/gnutls: revert disabling DTLS0.9...
  * policygenerators/java: add javasystem backend
  * LEGACY: bump 1023 key size to 1024
  * cryptopolicies: fix 'and' in deprecation warnings
  * *ssh: condition ecdh-sha2-nistp384 on SECP384R1
  * nss: hopefully the last fix for nss sigalgs check
  * cryptopolicies: Python 3.10 compatibility
  * nss: postponing check + testing at least something
  * Rename 'policy modules' to 'subpolicies'
  * validation.rules: fix a missing word in error
  * cryptopolicies: raise errors right after warnings
  * update-crypto-policies: capitalize warnings
  * cryptopolicies: syntax-precheck scope errors
  * .gitlab-ci.yml, Makefile: enable codespell
  * all: fix several typos
  * docs: don't leave zero TLS/DTLS protocols on
  * openssl: separate TLS/DTLS MinProtocol/MaxProtocol
  * alg_lists: order protocols new-to-old for consistency
  * alg_lists: max_{d,}tls_version
  * update-crypto-policies: fix pregenerated + local.d
  * openssh: allow validation with pre-8.5
  * .gitlab-ci.yml: run commit-range against upstream
  * openssh: Use the new name for PubkeyAcceptedKeyTypes
  * sha1_in_dnssec: deprecate
  * .gitlab-ci.yml: test commit ranges
  * FIPS:OSPP: sign = -*-SHA2-224
  * scoped policies: documentation update
  * scoped policies: use new features to the fullest...
  * scoped policies: rewrite + minimal policy changes
  * scoped policies: rewrite preparations
  * nss: postponing the version check again, to 3.64
- Remove patches fixed upstream: crypto-policies-typos.patch
- Rebase: crypto-policies-test_supported_modules_only.patch
- Merge crypto-policies-asciidoc.patch into
    crypto-policies-no-build-manpages.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1632484801">- Remove the scripts and documentation regarding
  fips-finish-install and test-fips-setup
  * Add crypto-policies-FIPS.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- Update to version 20221214.a4c31a3:
  * bind: expand the list of disableable algorithms
  * libssh: Add support for openssh fido keys
  * .gitlab-ci.yml: install krb5-devel for krb5-config
  * sequoia: check using sequoia-policy-config-check
  * sequoia: introduce new back-end
  * Makefile: support overriding asciidoc executable name
  * openssh: make none and auto explicit and different
  * openssh: autodetect and allow forcing RequiredRSASize presence/name
  * openssh: remove _pre_8_5_ssh
  * pylintrc: update
  * Revert "disable SHA-1 further for a Fedora 38 Rawhide "jump scare"..."
  * disable SHA-1 further for a Fedora 38 Rawhide "jump scare"...
  * Makefile: exclude built manpages from codespell
  * add openssh HostbasedAcceptedAlgorithms
  * openssh: add RSAMinSize option following min_rsa_size
  * Revert ".gitlab-ci.yml: skip pylint (bz2069837)"
  * docs: add customization recommendation
  * tests/java: fix java.security.disableSystemPropertiesFile=true
  * policies: add FEDORA38 and TEST-FEDORA39
  * bind: control ED25519/ED448
  * openssl: disable SHA-1 signatures in FUTURE/NO-SHA1
  * .gitlab-ci.yml: skip pylint (bz2069837)
  * openssh: add support for sntrup761x25519-sha512@openssh.com
  * fips-mode-setup: fix one unrelated check to intended state
  * fips-mode-setup, fips-finish-install: abandon /etc/system-fips
  * Makefile: fix alt-policy test of LEGACY:AD-SUPPORT
  * fips-mode-setup: catch more inconsistencies, clarify --check
  * fips-mode-setup: improve handling FIPS plus subpolicies
  * .gitlab-ci.yml: use rawhide so that we get gnutls 3.7.3
  * gnutls: enable SHAKE, needed for Ed448
  * gnutls: use allowlisting
  * openssl: add newlines at the end of the output
  * FIPS:OSPP: relax -ECDSA-SHA2-512, -FFDHE-*
  * fips-mode-setup, fips-finish-install: call zipl more often
  * Add crypto-policies-rpmlintrc file to avoid files-duplicate,
    zero-length and non-conffile-in-etc warnings.
  * Rebase patches:
  - crypto-policies-FIPS.patch
  - crypto-policies-no-build-manpages.patch
  * Update README.SUSE</changelog>
  <changelog author="pmonreal@suse.com" date="1683547200">- Update to version 20230420.3d08ae7:
  * openssl, alg_lists: add brainpool support
  * openssl: set Groups explicitly
  * codespell: ignore aNULL
  * rpm-sequoia: allow 1024 bit DSA and SHA-1 per FeSCO decision 2960
  * sequoia: add separate rpm-sequoia backend
  * crypto-policies.7: state upfront that FUTURE is not so interoperable
  * Makefile: update for asciidoc 10
  * Skip not needed LibreswanGenerator and SequoiaGenerator:
  - Add crypto-policies-policygenerators.patch
  * Remove crypto-policies-test_supported_modules_only.patch
  * Rebase crypto-policies-no-build-manpages.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683547201">- Update the update-crypto-policies(8) man pages and README.SUSE
  to mention the supported back-end policies. [bsc#1209998]
  * Add crypto-policies-supported.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1684929600">- Revert a breaking change that introduces the config option
  rh-allow-sha1-signatures that is unkown to OpenSSL and fails
  on startup. We will consider adding this option to openssl.
  * https://gitlab.com/redhat-crypto/fedora-crypto-policies/-/commit/97fe4494
  * Add crypto-policies-revert-rh-allow-sha1-signatures.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1685016000">- FIPS: Enable to set the kernel FIPS mode with fips-mode-setup
  and fips-finish-install commands, add also the man pages. The
  required FIPS modules are left to be installed by the user.
  * Rebase crypto-policies-FIPS.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689249600">- Update to version 20230614.5f3458e:
  * policies: impose old OpenSSL groups order for all back-ends
  * Rebase patches:
  - crypto-policies-revert-rh-allow-sha1-signatures.patch
  - crypto-policies-supported.patch</changelog>
  <changelog author="meissner@suse.com" date="1689336000">- BSI.pol: Added a new BSI policy for BSI TR 02102* (jsc#PED-4933)
  derived from NEXT.pol</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- FIPS: Adapt the fips-mode-setup script to use the pbl command
  from the perl-Bootloader package to replace grubby. Add a note
  for transactional systems [jsc#PED-5041].
  * Rebase crypto-policies-FIPS.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693483200">- Tests: Fix pylint versioning for TW and fix the parsing of the
  policygenerators to account for the commented lines correctly.
  * Add crypto-policies-pylint.patch
  * Rebase crypto-policies-policygenerators.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694779200">- Conditionally recommend the crypto-policies-scripts package
  when python is not installed in the system [bsc#1215201]</changelog>
  <changelog author="pmonreal@suse.com" date="1695384000">- Update to version 20230920.570ea89:
  * fips-mode-setup: more thorough --disable, still unsupported
  * FIPS:OSPP: tighten beyond reason for OSPP 4.3
  * krb5: sort enctypes mac-first, cipher-second, prioritize SHA-2 ones
  * openssl: implement relaxing EMS in FIPS (NO-ENFORCE-EMS)
  * gnutls: prepare for tls-session-hash option coming
  * nss: prepare for TLS-REQUIRE-EMS option coming
  * NO-ENFORCE-EMS: add subpolicy
  * FIPS: set __ems = ENFORCE
  * cryptopolicies: add enums and __ems tri-state
  * docs: replace `FIPS 140-2` with just `FIPS 140`
  * .gitlab-ci: remove forcing OPENSSH_MIN_RSA_SIZE
  * cryptopolicies: add comments on dunder options
  * nss: retire NSS_OLD and replace with NSS_LAX 3.80 check
  * BSI: start a BSI TR 02102 policy [jsc#PED-4933]
  * Rebase patches:
  - crypto-policies-policygenerators.patch
  - crypto-policies-revert-rh-allow-sha1-signatures.patch
  - crypto-policies-FIPS.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695816000">- nss: Skip the NSS policy check if the mozilla-nss-tools package
  is not installed. This avoids adding more dependencies in ring0.
  * Add crypto-policies-nss.patch [bsc#1211301]</changelog>
  <changelog author="scabrero@suse.de" date="1737547200">- krb5: disallow aes256-cts-hmac-sha1-96 and aes128-cts-hmac-sha1-96
  kerberos encryption types from RFC3961 in FIPS mode, as its key
  derivation function is not certified; (jsc#PED-12018);
- Update AD-SUPPORT and add AD-SUPPORT-LEGACY subpolicies; (jsc#PED-12018);
  The AD-SUPPORT subpolicy will enable the aes256-cts-hmac-sha1-96
  and aes128-cts-hmac-sha1-96 encryption types necessary for AD.
  The Kerberos libraries will tell OpenSSL provider to bypass FIPS
  restrictions when loading the KRB5KDF module.
  The AD-SUPPORT-LEGACY will allow the use of RC4 encryption types
  in environments where either accounts or trusted domains objects
  were not yet migrated to AES.
- Add patch 0008-policies-modules-update-AD-SUPPORT-add-AD-SUP.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Remove dangling symlink for the libreswan config [bsc#1236858]</changelog>
  <changelog author="pmonreal@suse.com" date="1740744000">- fips-mode-setup: tolerate fips dracut module presence w/o FIPS
  * Fixes the "Inconsistent state detected" warning when disabling
    the FIPS mode [bsc#1236165]
  * Upstream commit [gl#redhat-crypto/fedora-crypto-policies#78773542]
  * Add crypto-policies-fips-mode-setup-dracut.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1740744001">- Fix fips-mode-setup in EFI or Secure Boot mode. [bsc#1227637]
  * Rebase crypto-policies-FIPS.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1752148800">- Update the BSI policy [jsc#PED-12880]
  * BSI: switch to 3072 minimum RSA key size [322f0ba4]
  * BSI: Update BSI policy for new 2024 minimum [64b9dddd]
  * Add patches:
  - crypto-policies-BSI-Update-BSI-policy-for-new-2024-minimum-recommend.patch
  - crypto-policies-BSI-switch-to-3072-minimum-RSA-key-size.patch</changelog>
</package>
<package pkgid="75c0af3118576f6dd8d893a7a554513b91f5b9361f7ba90b3dba3f7bd48e1381" name="crypto-policies-scripts" arch="noarch">
  <version epoch="0" ver="20230920.570ea89" rel="150600.3.16.1"/>
  <changelog author="pmonreal@suse.com" date="1632484800">- Update to version 20210917.c9d86d1:
  * openssl: fix disabling ChaCha20
  * pacify pylint 2.11: use format strings
  * pacify pylint 2.11: specify explicit encoding
  * fix minor things found by new pylint
  * update-crypto-policies: --check against regenerated
  * update-crypto-policies: fix --check's walking order
  * policygenerators/gnutls: revert disabling DTLS0.9...
  * policygenerators/java: add javasystem backend
  * LEGACY: bump 1023 key size to 1024
  * cryptopolicies: fix 'and' in deprecation warnings
  * *ssh: condition ecdh-sha2-nistp384 on SECP384R1
  * nss: hopefully the last fix for nss sigalgs check
  * cryptopolicies: Python 3.10 compatibility
  * nss: postponing check + testing at least something
  * Rename 'policy modules' to 'subpolicies'
  * validation.rules: fix a missing word in error
  * cryptopolicies: raise errors right after warnings
  * update-crypto-policies: capitalize warnings
  * cryptopolicies: syntax-precheck scope errors
  * .gitlab-ci.yml, Makefile: enable codespell
  * all: fix several typos
  * docs: don't leave zero TLS/DTLS protocols on
  * openssl: separate TLS/DTLS MinProtocol/MaxProtocol
  * alg_lists: order protocols new-to-old for consistency
  * alg_lists: max_{d,}tls_version
  * update-crypto-policies: fix pregenerated + local.d
  * openssh: allow validation with pre-8.5
  * .gitlab-ci.yml: run commit-range against upstream
  * openssh: Use the new name for PubkeyAcceptedKeyTypes
  * sha1_in_dnssec: deprecate
  * .gitlab-ci.yml: test commit ranges
  * FIPS:OSPP: sign = -*-SHA2-224
  * scoped policies: documentation update
  * scoped policies: use new features to the fullest...
  * scoped policies: rewrite + minimal policy changes
  * scoped policies: rewrite preparations
  * nss: postponing the version check again, to 3.64
- Remove patches fixed upstream: crypto-policies-typos.patch
- Rebase: crypto-policies-test_supported_modules_only.patch
- Merge crypto-policies-asciidoc.patch into
    crypto-policies-no-build-manpages.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1632484801">- Remove the scripts and documentation regarding
  fips-finish-install and test-fips-setup
  * Add crypto-policies-FIPS.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- Update to version 20221214.a4c31a3:
  * bind: expand the list of disableable algorithms
  * libssh: Add support for openssh fido keys
  * .gitlab-ci.yml: install krb5-devel for krb5-config
  * sequoia: check using sequoia-policy-config-check
  * sequoia: introduce new back-end
  * Makefile: support overriding asciidoc executable name
  * openssh: make none and auto explicit and different
  * openssh: autodetect and allow forcing RequiredRSASize presence/name
  * openssh: remove _pre_8_5_ssh
  * pylintrc: update
  * Revert "disable SHA-1 further for a Fedora 38 Rawhide "jump scare"..."
  * disable SHA-1 further for a Fedora 38 Rawhide "jump scare"...
  * Makefile: exclude built manpages from codespell
  * add openssh HostbasedAcceptedAlgorithms
  * openssh: add RSAMinSize option following min_rsa_size
  * Revert ".gitlab-ci.yml: skip pylint (bz2069837)"
  * docs: add customization recommendation
  * tests/java: fix java.security.disableSystemPropertiesFile=true
  * policies: add FEDORA38 and TEST-FEDORA39
  * bind: control ED25519/ED448
  * openssl: disable SHA-1 signatures in FUTURE/NO-SHA1
  * .gitlab-ci.yml: skip pylint (bz2069837)
  * openssh: add support for sntrup761x25519-sha512@openssh.com
  * fips-mode-setup: fix one unrelated check to intended state
  * fips-mode-setup, fips-finish-install: abandon /etc/system-fips
  * Makefile: fix alt-policy test of LEGACY:AD-SUPPORT
  * fips-mode-setup: catch more inconsistencies, clarify --check
  * fips-mode-setup: improve handling FIPS plus subpolicies
  * .gitlab-ci.yml: use rawhide so that we get gnutls 3.7.3
  * gnutls: enable SHAKE, needed for Ed448
  * gnutls: use allowlisting
  * openssl: add newlines at the end of the output
  * FIPS:OSPP: relax -ECDSA-SHA2-512, -FFDHE-*
  * fips-mode-setup, fips-finish-install: call zipl more often
  * Add crypto-policies-rpmlintrc file to avoid files-duplicate,
    zero-length and non-conffile-in-etc warnings.
  * Rebase patches:
  - crypto-policies-FIPS.patch
  - crypto-policies-no-build-manpages.patch
  * Update README.SUSE</changelog>
  <changelog author="pmonreal@suse.com" date="1683547200">- Update to version 20230420.3d08ae7:
  * openssl, alg_lists: add brainpool support
  * openssl: set Groups explicitly
  * codespell: ignore aNULL
  * rpm-sequoia: allow 1024 bit DSA and SHA-1 per FeSCO decision 2960
  * sequoia: add separate rpm-sequoia backend
  * crypto-policies.7: state upfront that FUTURE is not so interoperable
  * Makefile: update for asciidoc 10
  * Skip not needed LibreswanGenerator and SequoiaGenerator:
  - Add crypto-policies-policygenerators.patch
  * Remove crypto-policies-test_supported_modules_only.patch
  * Rebase crypto-policies-no-build-manpages.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683547201">- Update the update-crypto-policies(8) man pages and README.SUSE
  to mention the supported back-end policies. [bsc#1209998]
  * Add crypto-policies-supported.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1684929600">- Revert a breaking change that introduces the config option
  rh-allow-sha1-signatures that is unkown to OpenSSL and fails
  on startup. We will consider adding this option to openssl.
  * https://gitlab.com/redhat-crypto/fedora-crypto-policies/-/commit/97fe4494
  * Add crypto-policies-revert-rh-allow-sha1-signatures.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1685016000">- FIPS: Enable to set the kernel FIPS mode with fips-mode-setup
  and fips-finish-install commands, add also the man pages. The
  required FIPS modules are left to be installed by the user.
  * Rebase crypto-policies-FIPS.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689249600">- Update to version 20230614.5f3458e:
  * policies: impose old OpenSSL groups order for all back-ends
  * Rebase patches:
  - crypto-policies-revert-rh-allow-sha1-signatures.patch
  - crypto-policies-supported.patch</changelog>
  <changelog author="meissner@suse.com" date="1689336000">- BSI.pol: Added a new BSI policy for BSI TR 02102* (jsc#PED-4933)
  derived from NEXT.pol</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- FIPS: Adapt the fips-mode-setup script to use the pbl command
  from the perl-Bootloader package to replace grubby. Add a note
  for transactional systems [jsc#PED-5041].
  * Rebase crypto-policies-FIPS.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693483200">- Tests: Fix pylint versioning for TW and fix the parsing of the
  policygenerators to account for the commented lines correctly.
  * Add crypto-policies-pylint.patch
  * Rebase crypto-policies-policygenerators.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694779200">- Conditionally recommend the crypto-policies-scripts package
  when python is not installed in the system [bsc#1215201]</changelog>
  <changelog author="pmonreal@suse.com" date="1695384000">- Update to version 20230920.570ea89:
  * fips-mode-setup: more thorough --disable, still unsupported
  * FIPS:OSPP: tighten beyond reason for OSPP 4.3
  * krb5: sort enctypes mac-first, cipher-second, prioritize SHA-2 ones
  * openssl: implement relaxing EMS in FIPS (NO-ENFORCE-EMS)
  * gnutls: prepare for tls-session-hash option coming
  * nss: prepare for TLS-REQUIRE-EMS option coming
  * NO-ENFORCE-EMS: add subpolicy
  * FIPS: set __ems = ENFORCE
  * cryptopolicies: add enums and __ems tri-state
  * docs: replace `FIPS 140-2` with just `FIPS 140`
  * .gitlab-ci: remove forcing OPENSSH_MIN_RSA_SIZE
  * cryptopolicies: add comments on dunder options
  * nss: retire NSS_OLD and replace with NSS_LAX 3.80 check
  * BSI: start a BSI TR 02102 policy [jsc#PED-4933]
  * Rebase patches:
  - crypto-policies-policygenerators.patch
  - crypto-policies-revert-rh-allow-sha1-signatures.patch
  - crypto-policies-FIPS.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695816000">- nss: Skip the NSS policy check if the mozilla-nss-tools package
  is not installed. This avoids adding more dependencies in ring0.
  * Add crypto-policies-nss.patch [bsc#1211301]</changelog>
  <changelog author="scabrero@suse.de" date="1737547200">- krb5: disallow aes256-cts-hmac-sha1-96 and aes128-cts-hmac-sha1-96
  kerberos encryption types from RFC3961 in FIPS mode, as its key
  derivation function is not certified; (jsc#PED-12018);
- Update AD-SUPPORT and add AD-SUPPORT-LEGACY subpolicies; (jsc#PED-12018);
  The AD-SUPPORT subpolicy will enable the aes256-cts-hmac-sha1-96
  and aes128-cts-hmac-sha1-96 encryption types necessary for AD.
  The Kerberos libraries will tell OpenSSL provider to bypass FIPS
  restrictions when loading the KRB5KDF module.
  The AD-SUPPORT-LEGACY will allow the use of RC4 encryption types
  in environments where either accounts or trusted domains objects
  were not yet migrated to AES.
- Add patch 0008-policies-modules-update-AD-SUPPORT-add-AD-SUP.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Remove dangling symlink for the libreswan config [bsc#1236858]</changelog>
  <changelog author="pmonreal@suse.com" date="1740744000">- fips-mode-setup: tolerate fips dracut module presence w/o FIPS
  * Fixes the "Inconsistent state detected" warning when disabling
    the FIPS mode [bsc#1236165]
  * Upstream commit [gl#redhat-crypto/fedora-crypto-policies#78773542]
  * Add crypto-policies-fips-mode-setup-dracut.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1740744001">- Fix fips-mode-setup in EFI or Secure Boot mode. [bsc#1227637]
  * Rebase crypto-policies-FIPS.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1752148800">- Update the BSI policy [jsc#PED-12880]
  * BSI: switch to 3072 minimum RSA key size [322f0ba4]
  * BSI: Update BSI policy for new 2024 minimum [64b9dddd]
  * Add patches:
  - crypto-policies-BSI-Update-BSI-policy-for-new-2024-minimum-recommend.patch
  - crypto-policies-BSI-switch-to-3072-minimum-RSA-key-size.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1773921600">- Add PQC support for OpenSSH (bsc#1258311, bsc#1259825)
  * Enable and prioritize sntrup761x25519-sha512 for OpenSSH by default
  * Add crypto-policies-OpenSSH-PQC.patch</changelog>
</package>
<package pkgid="35c81e481064f4e06d74ca0404e856ebcd165a7888a8be5deaf0429ce30dc583" name="cups" arch="src">
  <version epoch="0" ver="2.2.7" rel="150000.3.72.1"/>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
</package>
<package pkgid="86d7923ee4a11d6081cd512d303c2ffc96d474a1839ead8c1b82e36ca031d8d9" name="cups" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.72.1"/>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
</package>
<package pkgid="bf4bb47802866031768214f6571d68af091f41f9cffc197cd5f7139938a19a8f" name="cups" arch="src">
  <version epoch="0" ver="2.2.7" rel="150000.3.77.1"/>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1763640000">- cups-2.2.7-CVE-2025-61915.patch is based on
  https://github.com/OpenPrinting/cups-ghsa-hxm8-vfpq-jrfc/pull/2
  backported to CUPS 2.2.7 to fix CVE-2025-61915
  "Local denial-of-service via cupsd.conf update
  and related issues"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-hxm8-vfpq-jrfc
  bsc#1253783
- cups-2.2.7-CVE-2025-58436.patch mitigates CVE-2025-58436
  "Slow client communication leads to a possible DoS attack"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-8wpw-vfgm-qrrr
  (bsc#1244057)
- cups-2.2.7-bsc1234225c76.patch is from
  https://bugzilla.suse.com/show_bug.cgi?id=1234225#c76
  to fix bsc#1234225 "cupsd stuck in poll() loop"
  see also https://github.com/OpenPrinting/cups/issues/1264
- In general regarding CUPS security issues and/or DoS issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
</package>
<package pkgid="c55b5118d6b37e691d4780df8cf1e61a053e92095cb16d323f2616303073c3a8" name="cups" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.77.1"/>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1763640000">- cups-2.2.7-CVE-2025-61915.patch is based on
  https://github.com/OpenPrinting/cups-ghsa-hxm8-vfpq-jrfc/pull/2
  backported to CUPS 2.2.7 to fix CVE-2025-61915
  "Local denial-of-service via cupsd.conf update
  and related issues"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-hxm8-vfpq-jrfc
  bsc#1253783
- cups-2.2.7-CVE-2025-58436.patch mitigates CVE-2025-58436
  "Slow client communication leads to a possible DoS attack"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-8wpw-vfgm-qrrr
  (bsc#1244057)
- cups-2.2.7-bsc1234225c76.patch is from
  https://bugzilla.suse.com/show_bug.cgi?id=1234225#c76
  to fix bsc#1234225 "cupsd stuck in poll() loop"
  see also https://github.com/OpenPrinting/cups/issues/1264
- In general regarding CUPS security issues and/or DoS issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
</package>
<package pkgid="cb8291ae8b1db8b3dc34c73e0a84443083a228464d1cbf65b79d43f1015620e8" name="cups" arch="src">
  <version epoch="0" ver="2.2.7" rel="150000.3.80.1"/>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1763640000">- cups-2.2.7-CVE-2025-61915.patch is based on
  https://github.com/OpenPrinting/cups-ghsa-hxm8-vfpq-jrfc/pull/2
  backported to CUPS 2.2.7 to fix CVE-2025-61915
  "Local denial-of-service via cupsd.conf update
  and related issues"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-hxm8-vfpq-jrfc
  bsc#1253783
- cups-2.2.7-CVE-2025-58436.patch mitigates CVE-2025-58436
  "Slow client communication leads to a possible DoS attack"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-8wpw-vfgm-qrrr
  (bsc#1244057)
- cups-2.2.7-bsc1234225c76.patch is from
  https://bugzilla.suse.com/show_bug.cgi?id=1234225#c76
  to fix bsc#1234225 "cupsd stuck in poll() loop"
  see also https://github.com/OpenPrinting/cups/issues/1264
- In general regarding CUPS security issues and/or DoS issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1764590400">- cups-2.2.7-CVE-2025-58436.patch causes a regression
  bsc#1254353 "CUPS ... will hang GTK applications", see also
  https://github.com/OpenPrinting/cups/issues/1429
  so disabled this patch for now until the regression is fixed</changelog>
</package>
<package pkgid="797a4d527ef42b0a15fc3e580ccebe7b2ebdca8f9243bf9dca25f999474beaf0" name="cups" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.80.1"/>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1763640000">- cups-2.2.7-CVE-2025-61915.patch is based on
  https://github.com/OpenPrinting/cups-ghsa-hxm8-vfpq-jrfc/pull/2
  backported to CUPS 2.2.7 to fix CVE-2025-61915
  "Local denial-of-service via cupsd.conf update
  and related issues"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-hxm8-vfpq-jrfc
  bsc#1253783
- cups-2.2.7-CVE-2025-58436.patch mitigates CVE-2025-58436
  "Slow client communication leads to a possible DoS attack"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-8wpw-vfgm-qrrr
  (bsc#1244057)
- cups-2.2.7-bsc1234225c76.patch is from
  https://bugzilla.suse.com/show_bug.cgi?id=1234225#c76
  to fix bsc#1234225 "cupsd stuck in poll() loop"
  see also https://github.com/OpenPrinting/cups/issues/1264
- In general regarding CUPS security issues and/or DoS issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1764590400">- cups-2.2.7-CVE-2025-58436.patch causes a regression
  bsc#1254353 "CUPS ... will hang GTK applications", see also
  https://github.com/OpenPrinting/cups/issues/1429
  so disabled this patch for now until the regression is fixed</changelog>
</package>
<package pkgid="af5aea0c3a7d0d3d64822d7a9dd303e55df6d18826bde36b4d08b6effe2f1055" name="cups" arch="src">
  <version epoch="0" ver="2.2.7" rel="150000.3.83.1"/>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1763640000">- cups-2.2.7-CVE-2025-61915.patch is based on
  https://github.com/OpenPrinting/cups-ghsa-hxm8-vfpq-jrfc/pull/2
  backported to CUPS 2.2.7 to fix CVE-2025-61915
  "Local denial-of-service via cupsd.conf update
  and related issues"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-hxm8-vfpq-jrfc
  bsc#1253783
- cups-2.2.7-CVE-2025-58436.patch mitigates CVE-2025-58436
  "Slow client communication leads to a possible DoS attack"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-8wpw-vfgm-qrrr
  (bsc#1244057)
- cups-2.2.7-bsc1234225c76.patch is from
  https://bugzilla.suse.com/show_bug.cgi?id=1234225#c76
  to fix bsc#1234225 "cupsd stuck in poll() loop"
  see also https://github.com/OpenPrinting/cups/issues/1264
- In general regarding CUPS security issues and/or DoS issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1764763200">- Adapted cups-2.2.7-CVE-2025-58436.patch according to
  https://github.com/OpenPrinting/cups/pull/1439
  "http.c: Fix infinite loop in GTK apps"
  which fixes the regression boo#1254353
  "Cups version 2.2.7-150000.3.77.1 will hang GTK applications"
  https://github.com/OpenPrinting/cups/issues/1429
  "CUPS 2.4.15 freezes apps requesting the GTK print dialog"</changelog>
</package>
<package pkgid="7ee6854b38dbbd24449c09cbeceddcc0365d760bf98a7d3a8e0ace84751b4d66" name="cups" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.83.1"/>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1763640000">- cups-2.2.7-CVE-2025-61915.patch is based on
  https://github.com/OpenPrinting/cups-ghsa-hxm8-vfpq-jrfc/pull/2
  backported to CUPS 2.2.7 to fix CVE-2025-61915
  "Local denial-of-service via cupsd.conf update
  and related issues"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-hxm8-vfpq-jrfc
  bsc#1253783
- cups-2.2.7-CVE-2025-58436.patch mitigates CVE-2025-58436
  "Slow client communication leads to a possible DoS attack"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-8wpw-vfgm-qrrr
  (bsc#1244057)
- cups-2.2.7-bsc1234225c76.patch is from
  https://bugzilla.suse.com/show_bug.cgi?id=1234225#c76
  to fix bsc#1234225 "cupsd stuck in poll() loop"
  see also https://github.com/OpenPrinting/cups/issues/1264
- In general regarding CUPS security issues and/or DoS issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1764763200">- Adapted cups-2.2.7-CVE-2025-58436.patch according to
  https://github.com/OpenPrinting/cups/pull/1439
  "http.c: Fix infinite loop in GTK apps"
  which fixes the regression boo#1254353
  "Cups version 2.2.7-150000.3.77.1 will hang GTK applications"
  https://github.com/OpenPrinting/cups/issues/1429
  "CUPS 2.4.15 freezes apps requesting the GTK print dialog"</changelog>
</package>
<package pkgid="93e00a8dbeab91db248087e80335f2e7d3754ba0586912574c36c50a03853e9c" name="cups" arch="src">
  <version epoch="0" ver="2.2.7" rel="150000.3.86.1"/>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1763640000">- cups-2.2.7-CVE-2025-61915.patch is based on
  https://github.com/OpenPrinting/cups-ghsa-hxm8-vfpq-jrfc/pull/2
  backported to CUPS 2.2.7 to fix CVE-2025-61915
  "Local denial-of-service via cupsd.conf update
  and related issues"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-hxm8-vfpq-jrfc
  bsc#1253783
- cups-2.2.7-CVE-2025-58436.patch mitigates CVE-2025-58436
  "Slow client communication leads to a possible DoS attack"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-8wpw-vfgm-qrrr
  (bsc#1244057)
- cups-2.2.7-bsc1234225c76.patch is from
  https://bugzilla.suse.com/show_bug.cgi?id=1234225#c76
  to fix bsc#1234225 "cupsd stuck in poll() loop"
  see also https://github.com/OpenPrinting/cups/issues/1264
- In general regarding CUPS security issues and/or DoS issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1764763200">- Adapted cups-2.2.7-CVE-2025-58436.patch according to
  https://github.com/OpenPrinting/cups/pull/1439
  "http.c: Fix infinite loop in GTK apps"
  which fixes the regression boo#1254353
  "Cups version 2.2.7-150000.3.77.1 will hang GTK applications"
  https://github.com/OpenPrinting/cups/issues/1429
  "CUPS 2.4.15 freezes apps requesting the GTK print dialog"</changelog>
  <changelog author="jsmeix@suse.com" date="1775822400">- cups-2.2.7-CVE-2026-34990.patch is is based on
  https://github.com/OpenPrinting/cups/commit/e052dc44da9d12adfbebc51de4975fbadb2ce356
  backported to CUPS 2.2.7 to fix CVE-2026-34990
  "Local print admin token disclosure using temporary printers"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-c54j-2vqw-wpwp
  bsc#1261568
- Incompatible change needed to properly fix CVE-2026-34990:
  The ability to create/overwrite files via a 'file:' device URI
  is removed. Now the specified file must already exist
  and is opened only for writing in exclusive mode.
  In general: Historically 'file:' devices were provided
  for backwards compatibility with System V interface scripts
  that talked to serial printers over a character device, with
  very limited debugging support for writing to an ordinary file.
  It is not and never was intended as a way to "print to a file".
  For a proper debugging method see the section
  "A backend that sends its input into a file for debugging" in
  https://en.opensuse.org/SDB:Using_Your_Own_Backends_to_Print_with_CUPS</changelog>
</package>
<package pkgid="e5dd485a12829976227ed02eba0861e61efbc53a4c33600bf68839044757ba8f" name="cups" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.86.1"/>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1763640000">- cups-2.2.7-CVE-2025-61915.patch is based on
  https://github.com/OpenPrinting/cups-ghsa-hxm8-vfpq-jrfc/pull/2
  backported to CUPS 2.2.7 to fix CVE-2025-61915
  "Local denial-of-service via cupsd.conf update
  and related issues"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-hxm8-vfpq-jrfc
  bsc#1253783
- cups-2.2.7-CVE-2025-58436.patch mitigates CVE-2025-58436
  "Slow client communication leads to a possible DoS attack"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-8wpw-vfgm-qrrr
  (bsc#1244057)
- cups-2.2.7-bsc1234225c76.patch is from
  https://bugzilla.suse.com/show_bug.cgi?id=1234225#c76
  to fix bsc#1234225 "cupsd stuck in poll() loop"
  see also https://github.com/OpenPrinting/cups/issues/1264
- In general regarding CUPS security issues and/or DoS issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1764763200">- Adapted cups-2.2.7-CVE-2025-58436.patch according to
  https://github.com/OpenPrinting/cups/pull/1439
  "http.c: Fix infinite loop in GTK apps"
  which fixes the regression boo#1254353
  "Cups version 2.2.7-150000.3.77.1 will hang GTK applications"
  https://github.com/OpenPrinting/cups/issues/1429
  "CUPS 2.4.15 freezes apps requesting the GTK print dialog"</changelog>
  <changelog author="jsmeix@suse.com" date="1775822400">- cups-2.2.7-CVE-2026-34990.patch is is based on
  https://github.com/OpenPrinting/cups/commit/e052dc44da9d12adfbebc51de4975fbadb2ce356
  backported to CUPS 2.2.7 to fix CVE-2026-34990
  "Local print admin token disclosure using temporary printers"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-c54j-2vqw-wpwp
  bsc#1261568
- Incompatible change needed to properly fix CVE-2026-34990:
  The ability to create/overwrite files via a 'file:' device URI
  is removed. Now the specified file must already exist
  and is opened only for writing in exclusive mode.
  In general: Historically 'file:' devices were provided
  for backwards compatibility with System V interface scripts
  that talked to serial printers over a character device, with
  very limited debugging support for writing to an ordinary file.
  It is not and never was intended as a way to "print to a file".
  For a proper debugging method see the section
  "A backend that sends its input into a file for debugging" in
  https://en.opensuse.org/SDB:Using_Your_Own_Backends_to_Print_with_CUPS</changelog>
</package>
<package pkgid="8087a8dd3ff13f43d9e6d0baeb2345eb30f65ddfa6ed9118bd28e57e5f089e51" name="cups-client" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.72.1"/>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
</package>
<package pkgid="07f1c13c0f22b72851b681a9fc1d48f66b7455b6bfdd62c3700854d5cbd77d28" name="cups-client" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.77.1"/>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1763640000">- cups-2.2.7-CVE-2025-61915.patch is based on
  https://github.com/OpenPrinting/cups-ghsa-hxm8-vfpq-jrfc/pull/2
  backported to CUPS 2.2.7 to fix CVE-2025-61915
  "Local denial-of-service via cupsd.conf update
  and related issues"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-hxm8-vfpq-jrfc
  bsc#1253783
- cups-2.2.7-CVE-2025-58436.patch mitigates CVE-2025-58436
  "Slow client communication leads to a possible DoS attack"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-8wpw-vfgm-qrrr
  (bsc#1244057)
- cups-2.2.7-bsc1234225c76.patch is from
  https://bugzilla.suse.com/show_bug.cgi?id=1234225#c76
  to fix bsc#1234225 "cupsd stuck in poll() loop"
  see also https://github.com/OpenPrinting/cups/issues/1264
- In general regarding CUPS security issues and/or DoS issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
</package>
<package pkgid="8117ffdaaed9dec1f8fc149d034742779b1220437be0a330433b3050a2164467" name="cups-client" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.80.1"/>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1763640000">- cups-2.2.7-CVE-2025-61915.patch is based on
  https://github.com/OpenPrinting/cups-ghsa-hxm8-vfpq-jrfc/pull/2
  backported to CUPS 2.2.7 to fix CVE-2025-61915
  "Local denial-of-service via cupsd.conf update
  and related issues"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-hxm8-vfpq-jrfc
  bsc#1253783
- cups-2.2.7-CVE-2025-58436.patch mitigates CVE-2025-58436
  "Slow client communication leads to a possible DoS attack"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-8wpw-vfgm-qrrr
  (bsc#1244057)
- cups-2.2.7-bsc1234225c76.patch is from
  https://bugzilla.suse.com/show_bug.cgi?id=1234225#c76
  to fix bsc#1234225 "cupsd stuck in poll() loop"
  see also https://github.com/OpenPrinting/cups/issues/1264
- In general regarding CUPS security issues and/or DoS issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1764590400">- cups-2.2.7-CVE-2025-58436.patch causes a regression
  bsc#1254353 "CUPS ... will hang GTK applications", see also
  https://github.com/OpenPrinting/cups/issues/1429
  so disabled this patch for now until the regression is fixed</changelog>
</package>
<package pkgid="a5617df8b42748e6a7874aac6acc18f5a23b97d7091b33d970c42e3f5633a5d7" name="cups-client" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.83.1"/>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1763640000">- cups-2.2.7-CVE-2025-61915.patch is based on
  https://github.com/OpenPrinting/cups-ghsa-hxm8-vfpq-jrfc/pull/2
  backported to CUPS 2.2.7 to fix CVE-2025-61915
  "Local denial-of-service via cupsd.conf update
  and related issues"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-hxm8-vfpq-jrfc
  bsc#1253783
- cups-2.2.7-CVE-2025-58436.patch mitigates CVE-2025-58436
  "Slow client communication leads to a possible DoS attack"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-8wpw-vfgm-qrrr
  (bsc#1244057)
- cups-2.2.7-bsc1234225c76.patch is from
  https://bugzilla.suse.com/show_bug.cgi?id=1234225#c76
  to fix bsc#1234225 "cupsd stuck in poll() loop"
  see also https://github.com/OpenPrinting/cups/issues/1264
- In general regarding CUPS security issues and/or DoS issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1764763200">- Adapted cups-2.2.7-CVE-2025-58436.patch according to
  https://github.com/OpenPrinting/cups/pull/1439
  "http.c: Fix infinite loop in GTK apps"
  which fixes the regression boo#1254353
  "Cups version 2.2.7-150000.3.77.1 will hang GTK applications"
  https://github.com/OpenPrinting/cups/issues/1429
  "CUPS 2.4.15 freezes apps requesting the GTK print dialog"</changelog>
</package>
<package pkgid="8a2eaabed06e9561e9617c7053e4a3eb31fb33ae97279c6fba3bbd66b75f26d0" name="cups-client" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.86.1"/>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1763640000">- cups-2.2.7-CVE-2025-61915.patch is based on
  https://github.com/OpenPrinting/cups-ghsa-hxm8-vfpq-jrfc/pull/2
  backported to CUPS 2.2.7 to fix CVE-2025-61915
  "Local denial-of-service via cupsd.conf update
  and related issues"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-hxm8-vfpq-jrfc
  bsc#1253783
- cups-2.2.7-CVE-2025-58436.patch mitigates CVE-2025-58436
  "Slow client communication leads to a possible DoS attack"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-8wpw-vfgm-qrrr
  (bsc#1244057)
- cups-2.2.7-bsc1234225c76.patch is from
  https://bugzilla.suse.com/show_bug.cgi?id=1234225#c76
  to fix bsc#1234225 "cupsd stuck in poll() loop"
  see also https://github.com/OpenPrinting/cups/issues/1264
- In general regarding CUPS security issues and/or DoS issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1764763200">- Adapted cups-2.2.7-CVE-2025-58436.patch according to
  https://github.com/OpenPrinting/cups/pull/1439
  "http.c: Fix infinite loop in GTK apps"
  which fixes the regression boo#1254353
  "Cups version 2.2.7-150000.3.77.1 will hang GTK applications"
  https://github.com/OpenPrinting/cups/issues/1429
  "CUPS 2.4.15 freezes apps requesting the GTK print dialog"</changelog>
  <changelog author="jsmeix@suse.com" date="1775822400">- cups-2.2.7-CVE-2026-34990.patch is is based on
  https://github.com/OpenPrinting/cups/commit/e052dc44da9d12adfbebc51de4975fbadb2ce356
  backported to CUPS 2.2.7 to fix CVE-2026-34990
  "Local print admin token disclosure using temporary printers"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-c54j-2vqw-wpwp
  bsc#1261568
- Incompatible change needed to properly fix CVE-2026-34990:
  The ability to create/overwrite files via a 'file:' device URI
  is removed. Now the specified file must already exist
  and is opened only for writing in exclusive mode.
  In general: Historically 'file:' devices were provided
  for backwards compatibility with System V interface scripts
  that talked to serial printers over a character device, with
  very limited debugging support for writing to an ordinary file.
  It is not and never was intended as a way to "print to a file".
  For a proper debugging method see the section
  "A backend that sends its input into a file for debugging" in
  https://en.opensuse.org/SDB:Using_Your_Own_Backends_to_Print_with_CUPS</changelog>
</package>
<package pkgid="f620bc63fe0e54c22a52a618e9ba41441ec0aa995e4e63c12956217c2005809b" name="cups-config" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.72.1"/>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
</package>
<package pkgid="d52dff9ca29c7f3f4d3ea93e870686c59dcadbafc64c1cdc9b918c1686794557" name="cups-config" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.77.1"/>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1763640000">- cups-2.2.7-CVE-2025-61915.patch is based on
  https://github.com/OpenPrinting/cups-ghsa-hxm8-vfpq-jrfc/pull/2
  backported to CUPS 2.2.7 to fix CVE-2025-61915
  "Local denial-of-service via cupsd.conf update
  and related issues"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-hxm8-vfpq-jrfc
  bsc#1253783
- cups-2.2.7-CVE-2025-58436.patch mitigates CVE-2025-58436
  "Slow client communication leads to a possible DoS attack"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-8wpw-vfgm-qrrr
  (bsc#1244057)
- cups-2.2.7-bsc1234225c76.patch is from
  https://bugzilla.suse.com/show_bug.cgi?id=1234225#c76
  to fix bsc#1234225 "cupsd stuck in poll() loop"
  see also https://github.com/OpenPrinting/cups/issues/1264
- In general regarding CUPS security issues and/or DoS issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
</package>
<package pkgid="d16201c3e1a95a7f91450f036fd9cdad484a478d31e120c900f1e5775bece2a7" name="cups-config" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.80.1"/>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1763640000">- cups-2.2.7-CVE-2025-61915.patch is based on
  https://github.com/OpenPrinting/cups-ghsa-hxm8-vfpq-jrfc/pull/2
  backported to CUPS 2.2.7 to fix CVE-2025-61915
  "Local denial-of-service via cupsd.conf update
  and related issues"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-hxm8-vfpq-jrfc
  bsc#1253783
- cups-2.2.7-CVE-2025-58436.patch mitigates CVE-2025-58436
  "Slow client communication leads to a possible DoS attack"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-8wpw-vfgm-qrrr
  (bsc#1244057)
- cups-2.2.7-bsc1234225c76.patch is from
  https://bugzilla.suse.com/show_bug.cgi?id=1234225#c76
  to fix bsc#1234225 "cupsd stuck in poll() loop"
  see also https://github.com/OpenPrinting/cups/issues/1264
- In general regarding CUPS security issues and/or DoS issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1764590400">- cups-2.2.7-CVE-2025-58436.patch causes a regression
  bsc#1254353 "CUPS ... will hang GTK applications", see also
  https://github.com/OpenPrinting/cups/issues/1429
  so disabled this patch for now until the regression is fixed</changelog>
</package>
<package pkgid="2215414e8f2f369b9552311ae6a31728d24a82f6a44d86c33e94b40913ee8a41" name="cups-config" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.83.1"/>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1763640000">- cups-2.2.7-CVE-2025-61915.patch is based on
  https://github.com/OpenPrinting/cups-ghsa-hxm8-vfpq-jrfc/pull/2
  backported to CUPS 2.2.7 to fix CVE-2025-61915
  "Local denial-of-service via cupsd.conf update
  and related issues"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-hxm8-vfpq-jrfc
  bsc#1253783
- cups-2.2.7-CVE-2025-58436.patch mitigates CVE-2025-58436
  "Slow client communication leads to a possible DoS attack"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-8wpw-vfgm-qrrr
  (bsc#1244057)
- cups-2.2.7-bsc1234225c76.patch is from
  https://bugzilla.suse.com/show_bug.cgi?id=1234225#c76
  to fix bsc#1234225 "cupsd stuck in poll() loop"
  see also https://github.com/OpenPrinting/cups/issues/1264
- In general regarding CUPS security issues and/or DoS issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1764763200">- Adapted cups-2.2.7-CVE-2025-58436.patch according to
  https://github.com/OpenPrinting/cups/pull/1439
  "http.c: Fix infinite loop in GTK apps"
  which fixes the regression boo#1254353
  "Cups version 2.2.7-150000.3.77.1 will hang GTK applications"
  https://github.com/OpenPrinting/cups/issues/1429
  "CUPS 2.4.15 freezes apps requesting the GTK print dialog"</changelog>
</package>
<package pkgid="7ae1ef0942517207ac61cc513c1371ca5ad907027d0e29b3f4135d3fccb38554" name="cups-config" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.86.1"/>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1763640000">- cups-2.2.7-CVE-2025-61915.patch is based on
  https://github.com/OpenPrinting/cups-ghsa-hxm8-vfpq-jrfc/pull/2
  backported to CUPS 2.2.7 to fix CVE-2025-61915
  "Local denial-of-service via cupsd.conf update
  and related issues"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-hxm8-vfpq-jrfc
  bsc#1253783
- cups-2.2.7-CVE-2025-58436.patch mitigates CVE-2025-58436
  "Slow client communication leads to a possible DoS attack"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-8wpw-vfgm-qrrr
  (bsc#1244057)
- cups-2.2.7-bsc1234225c76.patch is from
  https://bugzilla.suse.com/show_bug.cgi?id=1234225#c76
  to fix bsc#1234225 "cupsd stuck in poll() loop"
  see also https://github.com/OpenPrinting/cups/issues/1264
- In general regarding CUPS security issues and/or DoS issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1764763200">- Adapted cups-2.2.7-CVE-2025-58436.patch according to
  https://github.com/OpenPrinting/cups/pull/1439
  "http.c: Fix infinite loop in GTK apps"
  which fixes the regression boo#1254353
  "Cups version 2.2.7-150000.3.77.1 will hang GTK applications"
  https://github.com/OpenPrinting/cups/issues/1429
  "CUPS 2.4.15 freezes apps requesting the GTK print dialog"</changelog>
  <changelog author="jsmeix@suse.com" date="1775822400">- cups-2.2.7-CVE-2026-34990.patch is is based on
  https://github.com/OpenPrinting/cups/commit/e052dc44da9d12adfbebc51de4975fbadb2ce356
  backported to CUPS 2.2.7 to fix CVE-2026-34990
  "Local print admin token disclosure using temporary printers"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-c54j-2vqw-wpwp
  bsc#1261568
- Incompatible change needed to properly fix CVE-2026-34990:
  The ability to create/overwrite files via a 'file:' device URI
  is removed. Now the specified file must already exist
  and is opened only for writing in exclusive mode.
  In general: Historically 'file:' devices were provided
  for backwards compatibility with System V interface scripts
  that talked to serial printers over a character device, with
  very limited debugging support for writing to an ordinary file.
  It is not and never was intended as a way to "print to a file".
  For a proper debugging method see the section
  "A backend that sends its input into a file for debugging" in
  https://en.opensuse.org/SDB:Using_Your_Own_Backends_to_Print_with_CUPS</changelog>
</package>
<package pkgid="21aecfed4e9f1a6a2abdd1df297c5d41e36b0e5118492de96e15643be2c9d41f" name="cups-devel" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.72.1"/>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
</package>
<package pkgid="642bd6deb63b8cbcf9746f1f838a00bca7c7d09d3a3a871dede56848a3b8661b" name="cups-devel" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.77.1"/>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1763640000">- cups-2.2.7-CVE-2025-61915.patch is based on
  https://github.com/OpenPrinting/cups-ghsa-hxm8-vfpq-jrfc/pull/2
  backported to CUPS 2.2.7 to fix CVE-2025-61915
  "Local denial-of-service via cupsd.conf update
  and related issues"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-hxm8-vfpq-jrfc
  bsc#1253783
- cups-2.2.7-CVE-2025-58436.patch mitigates CVE-2025-58436
  "Slow client communication leads to a possible DoS attack"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-8wpw-vfgm-qrrr
  (bsc#1244057)
- cups-2.2.7-bsc1234225c76.patch is from
  https://bugzilla.suse.com/show_bug.cgi?id=1234225#c76
  to fix bsc#1234225 "cupsd stuck in poll() loop"
  see also https://github.com/OpenPrinting/cups/issues/1264
- In general regarding CUPS security issues and/or DoS issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
</package>
<package pkgid="46c5459ea6a886d1227272013d2fedac323cf77806a3766c6c1a1832310e55c8" name="cups-devel" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.80.1"/>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1763640000">- cups-2.2.7-CVE-2025-61915.patch is based on
  https://github.com/OpenPrinting/cups-ghsa-hxm8-vfpq-jrfc/pull/2
  backported to CUPS 2.2.7 to fix CVE-2025-61915
  "Local denial-of-service via cupsd.conf update
  and related issues"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-hxm8-vfpq-jrfc
  bsc#1253783
- cups-2.2.7-CVE-2025-58436.patch mitigates CVE-2025-58436
  "Slow client communication leads to a possible DoS attack"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-8wpw-vfgm-qrrr
  (bsc#1244057)
- cups-2.2.7-bsc1234225c76.patch is from
  https://bugzilla.suse.com/show_bug.cgi?id=1234225#c76
  to fix bsc#1234225 "cupsd stuck in poll() loop"
  see also https://github.com/OpenPrinting/cups/issues/1264
- In general regarding CUPS security issues and/or DoS issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1764590400">- cups-2.2.7-CVE-2025-58436.patch causes a regression
  bsc#1254353 "CUPS ... will hang GTK applications", see also
  https://github.com/OpenPrinting/cups/issues/1429
  so disabled this patch for now until the regression is fixed</changelog>
</package>
<package pkgid="25f55dd54d9c9afdde15f3b5766327b185c35349d259bb0d93f42f136909d744" name="cups-devel" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.83.1"/>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1763640000">- cups-2.2.7-CVE-2025-61915.patch is based on
  https://github.com/OpenPrinting/cups-ghsa-hxm8-vfpq-jrfc/pull/2
  backported to CUPS 2.2.7 to fix CVE-2025-61915
  "Local denial-of-service via cupsd.conf update
  and related issues"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-hxm8-vfpq-jrfc
  bsc#1253783
- cups-2.2.7-CVE-2025-58436.patch mitigates CVE-2025-58436
  "Slow client communication leads to a possible DoS attack"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-8wpw-vfgm-qrrr
  (bsc#1244057)
- cups-2.2.7-bsc1234225c76.patch is from
  https://bugzilla.suse.com/show_bug.cgi?id=1234225#c76
  to fix bsc#1234225 "cupsd stuck in poll() loop"
  see also https://github.com/OpenPrinting/cups/issues/1264
- In general regarding CUPS security issues and/or DoS issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1764763200">- Adapted cups-2.2.7-CVE-2025-58436.patch according to
  https://github.com/OpenPrinting/cups/pull/1439
  "http.c: Fix infinite loop in GTK apps"
  which fixes the regression boo#1254353
  "Cups version 2.2.7-150000.3.77.1 will hang GTK applications"
  https://github.com/OpenPrinting/cups/issues/1429
  "CUPS 2.4.15 freezes apps requesting the GTK print dialog"</changelog>
</package>
<package pkgid="207e2a3f456b91ebd793ef2d1d80dd8c6999ab6d99b8df37eb96d8f17bae2fa8" name="cups-devel" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.86.1"/>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1763640000">- cups-2.2.7-CVE-2025-61915.patch is based on
  https://github.com/OpenPrinting/cups-ghsa-hxm8-vfpq-jrfc/pull/2
  backported to CUPS 2.2.7 to fix CVE-2025-61915
  "Local denial-of-service via cupsd.conf update
  and related issues"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-hxm8-vfpq-jrfc
  bsc#1253783
- cups-2.2.7-CVE-2025-58436.patch mitigates CVE-2025-58436
  "Slow client communication leads to a possible DoS attack"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-8wpw-vfgm-qrrr
  (bsc#1244057)
- cups-2.2.7-bsc1234225c76.patch is from
  https://bugzilla.suse.com/show_bug.cgi?id=1234225#c76
  to fix bsc#1234225 "cupsd stuck in poll() loop"
  see also https://github.com/OpenPrinting/cups/issues/1264
- In general regarding CUPS security issues and/or DoS issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1764763200">- Adapted cups-2.2.7-CVE-2025-58436.patch according to
  https://github.com/OpenPrinting/cups/pull/1439
  "http.c: Fix infinite loop in GTK apps"
  which fixes the regression boo#1254353
  "Cups version 2.2.7-150000.3.77.1 will hang GTK applications"
  https://github.com/OpenPrinting/cups/issues/1429
  "CUPS 2.4.15 freezes apps requesting the GTK print dialog"</changelog>
  <changelog author="jsmeix@suse.com" date="1775822400">- cups-2.2.7-CVE-2026-34990.patch is is based on
  https://github.com/OpenPrinting/cups/commit/e052dc44da9d12adfbebc51de4975fbadb2ce356
  backported to CUPS 2.2.7 to fix CVE-2026-34990
  "Local print admin token disclosure using temporary printers"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-c54j-2vqw-wpwp
  bsc#1261568
- Incompatible change needed to properly fix CVE-2026-34990:
  The ability to create/overwrite files via a 'file:' device URI
  is removed. Now the specified file must already exist
  and is opened only for writing in exclusive mode.
  In general: Historically 'file:' devices were provided
  for backwards compatibility with System V interface scripts
  that talked to serial printers over a character device, with
  very limited debugging support for writing to an ordinary file.
  It is not and never was intended as a way to "print to a file".
  For a proper debugging method see the section
  "A backend that sends its input into a file for debugging" in
  https://en.opensuse.org/SDB:Using_Your_Own_Backends_to_Print_with_CUPS</changelog>
</package>
<package pkgid="8449ea5c0ed9635cb4e773cf96504293897943fc868ca55de769405e35754ea3" name="cups-filters" arch="src">
  <version epoch="0" ver="1.25.0" rel="150200.3.22.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1531224000">- Add pdftoopvp_Silence-compiler-warning.patch: pdftoopvp: Silence
  compiler warning.</changelog>
  <changelog author="alarrosa@suse.com" date="1531828800">- Version upgrade to 1.20.4
  - gstoraster: Removed unneeded "if"s (Ghostscript bug #692705).
  - cups-browsed: When checking whether there is already a local
    print queue with the same URI as the one of the discovered
    printer, consider also as equal URI if the URIs only differ
    by use of IPP or IPPS and/or use of HTTPS port 443 instead
    of IPP port 631.
  - cups-browsed: Also upgrade from ipp: to ipps: when the ipps:
    URI is on HTTPS port 443 instead of IPP port 631. This is
    common on IPP network printers.
  - pdftopdf: Removed support for hardware-implemented reversing
    of page order in PostScript printers. It was once not
    correctly implemented in cups-filters and second, such
    printers are extremely rare, and on Gutenprint PPDs with
    pseudo OutputOrder option hardware reversing was even
    wrongly assumed (Issue #47).
  - pdftopdf: Accept option "output-order=normal/reverse" for
    reversing page order (Issue #47) and also "page-delivery=
    same-order/reverse-order" (CUPS Issue #5340).
  - libcupsfilters: Let the PPD generator add "*PageStackOrder
    ..."  lines to the choices of the "OutputBin" option, to
    mark which output bins need the pages printed in reverse
    order (Issue #47).
  - libcupsfilters: Let the PPD generator correctly create a
    "*DefaultOutputOrder: ..."  entry, depending on whether the
    paper is put out face-up or face-down in the default output
    bin (Issue #47).
  - libcupsfilters: Fixed human-readable name of the OutputBin
    option in the PPD generator.
  - pdftoopvp: Silence compiler warning (Issue #42).
  - cups-browsed: If the user modifies/overwrites a print queue
    created by cups-browsed, it will now not only be
    automatically released from the control of cups-browsed, but
    we also create a replacement for our generated local queue
    under a new name.
  - cups-browsed: Make URIS for using the implicitclass backend
    correctly working also with queue names containing an '@'
    character.
  - braille: Strengthen error checking (Pull request #41).
  - braille: Index: Replace bogus characters with space (Pull
    request #41).
  - braille: Add print and braille page number options (Pull
    request #41).
  - braille: Index: Use standard duplex cups option (Pull
    request #41).
  - cups-browsed: Moved auto-generation of PPD file for IPP
    network printers from create_remote_printer_entry()
    function to update_cups_queues(). This allows re-creating
    accidentally removed or overwritten local queues without
    losing the PPD file.
  - braille: Add option to pick hyphenation rule according to
    current locale and make it the default for second
    translation table. (Pull request #38 and #39).
  - braille: Remove generated defs on "make clean". (Pull request #38).
  - braille: Turn non-breakable spaces to spaces. (Pull request
    [#38] and #39).
  - braille: Fix character encoding when extracting text. When
    extracing text from a zip file or a pdf, the resulting text
    is always utf-8 independently of the original locale, so we
    need to force that. (Pull request #38).
  - braille: Warn when no text translation was selected in case
    the user didn't notice. (Pull request #37).
  - braille: Fix spurious spacing after last Form-Feed (Pull
    request #45).
- Drop pdftoopvp_Silence-compiler-warning.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1535630400">- Do not diferentiate for service location, it is in sbindir
  on all systems we support now
- Use license for license install
- Version update to 1.21.1:
  - foomatic-rip: Fixed segmentation fault caused by wrong
    Coverity Scan issue fix (Issue #57, Debian bug #907026).
  - Build system: Require QPDF 8.1.0 or later as it is needed by
    bannertopdf (Issue #56).
  - libcupsfilters, cups-browsed, driverless, foomatic-rip,
    parallel: Silenced warnings from newest gcc.
  - libcupsfilters: When generating a PPD for driverless
    printing on a remote IPP printer, make pdftopdf not being
    run by the local queue if the remote queue is a CUPS queue
    to avoid running pdftopdf twice (CUPS Issue #5361).
  - libcupsfilters, cups-browsed, driverless, bannertopdf,
    foomatic-rip, pdftops, pdftoraster, rastertops,
    rastertoescpx, sys5ippprinter, beh: Fixed Coverity Scan
    issues. Thanks to Zdenek Dohnal (zdohnal at redhat dot com)
    for the tests and the patches.
  - bannertopdf: Switched over from using Poppler to using QPDF
    for generating the PDF pages. With Poppler unstable APIs
    were used which were subject to change. Thanks to Sahil
    Arora for this project in the Google Summer of Code 2018
    (Pull request #25).
  - cups-browsed: Manually defined clusters ("Cluster" directive
    in cups-browsed.conf) caused cups-browsed to crash.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543406400">- Update to version 1.21.4:
  * cups-browsed: cups-browsed: Limit the number of retries for
    creating a print queue when it comes to HTTP timeouts. Number
    of retries given by HttpMaxRetries directive in
    cups-browsed.conf.
  * cups-browsed: Read out current time right before setting the
    timeouts.
  * libcupsfilters: In the PPD generator for driverless IPP
    printing let "*cupsManualCopies: true" lines get added to
    the PPD if printing is done in a raster format as then
    pdftopdf needs to generate the copies.
  * pdftoraster, pdftoopvp, pdftoijs: Fix build with
    Poppler &gt;= 0.70
  * pdftopdf: Fixed printing multiple copies on driverless IPP
    printers. When printing collated copies the multiple copies
    got applied twice, resulting in n*n instead of n copies.
  * pdftoraster, pdftoopvp, pdftoijs: Poppler removed memCheck
    and gMemReport functions, remove appropriate calls.
- Changes from version 1.21.3:
  * foomatic-rip: Reset stdin after replacing the underlying file
    descriptor.
- Changes from version 1.21.2:
  * cups-browsed: Fixed freeing of literal string caused by
    Coverity Scan issue fix.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545134400">- Update to version 1.21.6:
  * Bug fix release, mainly for cups-browsed to avoid crashes and
    infinite printer removal/re-creation loops and spurious local
    queues for local CUPS printers. Also expanded PostScript
    interpreter bug workaround to more Apple LaserWriter models.
  * cups-browsed: To find out whether a DNS-SD-discovered printer
    is from the local machine, use not only the flags in the Avahi
    lookup result but also check the host name.
  * cups-browsed: When a local CUPS queue pointing to a remote CUPS
    printer was removed and re-created to make it a permanent
    queue, on_printer_deleted() was triggered by cupsd's
    notification to re-create a lost queue. Now
    on_printer_deleted() checks whether the queue is really gone
    and only re-creates then.
  * cups-browsed: When updating the CUPS queues, also removed and
    unregistered queues and not only created queues got checked for
    HTTP timeouts, which caused crashes on shutdown.
  * pdftops: Use the PS interpreter of Poppler for all Apple
    LaserWriter 16/600, 4/600, 12/640, 12/600, 12/660 as they all
    seem to not work with Ghostscript's PS output.
  * cups-browsed: On shutdown queues got removed even if they still
    had jobs.
- Changes from version 1.21.5:
  * Bug fix release, to build with Poppler 0.71 and with
    cups-browsed converting temporary CUPS queues reliably to
    permanent queues.
  * cups-browsed: We cannot reliably determine whether a CUPS queue
    is temporary, so we apply the procedure to make a temporary
    queue permanent to any unshared queue.
  * pdftoraster, pdftopdf, pdftoijs, pdftoopvp: Do not use the
    Poppler-specific "GBool", "gFalse", "gTrue" any more, as
    Poppler has switched to standard "bool", "false", "true" in
    version 0.71.0.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546084800">- Fix building with Poppler 0.72
  Add 0001-Raise-minimum-poppler-version-from-0.18-to-0.19.patch
  Add 0002-Adapt-code-for-SplashXPathScanner-state-handling-sin.patch
  Add 0003-Support-some-more-methods-returning-const.patch
  Add 0004-Support-GooString-c_str-introduced-by-poppler-0.72.patch
  See https://github.com/OpenPrinting/cups-filters/pull/83</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548676800">- Update to version 1.22.0:
  * From this release on the pdftopdf filter flattens interactive
    PDF forms and annotations internally, using QPDF, instead of
    calling external utilities. This especially eliminates slowing
    factors as additional piping of the data and unneeded use of
    PDF interpreters. Using external utilities for flattening is
    still possible in case of problems. In addition, a crash bug in
    cups-browsed got fixed and compatibility of the filters with
    Poppler 0.72 assured.
- Drop upstream fixed patches:
  * 0001-Raise-minimum-poppler-version-from-0.18-to-0.19.patch
  * 0002-Adapt-code-for-SplashXPathScanner-state-handling-sin.patch
  * 0003-Support-some-more-methods-returning-const.patch
  * 0004-Support-GooString-c_str-introduced-by-poppler-0.72.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550664000">- Update to version 1.22.1:
  * braille: Use sort command with LC_ALL=C for reproducibility
    of the genrated files, needed for distribution packaging.
  * cups-browsed, driverless: When polling the printer's
    capabilities via get-printer-attributes IPP request for
    driverless printing, use the attributes "all" and
    "media-col-database". Without "all" some printers do not report
    "urf-supported" and without "media-col-database" not all paper
    size and marging info gets reported.
  * braille: Document how to rework output before embossing.</changelog>
  <changelog author="jsmeix@suse.de" date="1554724800">- Version upgrade to 1.22.5
  * foomatic-rip: Changed Ghostscript call to count pages in a
    PDF file to use "runpdfbegin" and not the undocumented
    Ghostscript internal "pdfdict", so that it works with
    Ghostscript 9.27 and later (Debian bug #926576,
    Arch Linux bug #62251, openSUSE boo#1131771,
    cups@cups.org mailing list thread
    https://lists.cups.org/pipermail/cups/2019-April/074563.html).
- Version upgrade to 1.22.4
  * cups-browsed: Fix broken trailing space removal on
    "NickName" (Pull request #103).
  * pdftops: Emit PostScript Level 2 instead of Level 3 for
    Brother PostScript printers as at least some of them
    report to support level 3 but ontly work with Level 2
    (Ubuntu bug #1306849, comment #42).
  * bannertopdf: When multiplying the page for N-up or Duplex
    printing one page too much was generated (Issue #102).
- Version upgrade to 1.22.3
  * libcupsfilters: Added error checks for processing GIF, to
    avoid crashes or hangs on broken GIF files (Issues #81, #82,
    Pull request #100).
  * cups-browsed: Added hint to the man page and configuration
    file that with "DebugLogging stderr" the logging output goes
    to journal or syslog if cups-browsed is running as system
    service (Issue #28).
- Version upgrade to 1.22.2
  * cups-browsed: Let distribution of jobs sent to queues with
    "implicitclass" backend (usually clusters) be done by a
    "job-state" CUPS notification and not by
    "printer-state-changed" any more. The "job-state"
    notification already contains the job ID. Before we had to
    poll the job ID from CUPS via IPP which was sometimes
    unreliable (Issue #97).
  * imagetopdf, imagetoraster, pdftopdf, libcupsfilters: Added
    new page scaling options: "fill" scales the input page
    (typically a photo) so that the output page (typically with
    different aspect ratio) gets completely filled, aloowing for
    some content of the input page getting lost. "crop-to-fit"
    allows for easy printing of documents on slightly different
    output page sizes (A4 &lt;-&gt; Letter) maintaining the size and
    centering and cropping into the destination page. Thanks to
    Dheeraj Yadav (dhirajyadav135 at gmail dot com) for the
    patch (Pull request #92).
  * cups-browsed: Do not do IPP request for printer-is-shared
    option for remote cups queues with CUPS 2.2.x and newer
    (Pull request #91).
  * cups-browsed: Fix crash bug when reading "Cluster"
    directive from configuration file (Issue #94).
  * driverless: Updated man page as now also Mopria and
    Wi-Fi Direct printers are supported. Mentioned also
    ippusbxd.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.23.0:
  * This release adds support for the "print-scaling" IPP attribute
    and has the code for the support of MuPDF as PDF renderer
    vastly simplified.
  * pdftops, mupdftoraster: Let pdftops call mutool directly and so
    that it directly outputs PostScript, eliminating the need to
    call the mupdftoraster and rastertops filters.
  * mupdftoraster: Reduced the use of temporary files from 3 to
    just one.
  * imagetopdf, imagetoraster, pdftopdf: Add support for
    print-scaling option.
- Changes from version 1.22.6:
  * Bug fix release, to address a further issue of cups-browsed
    removing user-created print queues, to make
    grayscale/monochrome PostScript jobs of colored input file
    actually output grayscale/monochrome files, to fix several bugs
    when using MuPDF as PDF renderer, and to silence compiler
    warnings.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559908800">- Update to version 1.25.0:
  * pdftoijs, pdftoopvp: Removed these deprecated filters
    completely as there is no demand for them any more. They also
    used unstable, undocumented APIs of Poppler.
  * pdftoraster: Changed from using unstable, undocumented APIs of
    Poppler to stable, documented ones, to improve maintainability
    of this filter, and with it of the cups-filters package.
  * libcupsfilters: Added support for color spaces CMY and RGBW
    when using filters without PPD file (mainly for development and
    debugging, option "print-color-mode" with values "cmy-XX" and
    "rgbw-XX" with XX being the number of bits per color).
- Changes from version 1.24.0:
  * cups-browsed: Integration of Deepak Patankar's Google Summer of
    Code 2018 project with the main goal of clustering different
    printers and automatically selecting the destination printers
    by job content and option/attribute settings.
  * cups-browsed, implicitclass: Support for mixed clusters of
    remote CUPS queues and IPP network printers. For this PPD files
    of remote CUPS queues are generated by cups-browsed based on
    IPP queries, as for native IPP printers, the number of jobs for
    load balancing is polled in a way that it works also with
    native IPP printers, the implicitclass backend sends jobs
    directly to the printer instead of re-queueing them via CUPS.
  * cups-browsed: Merge IPP attributes of several printers to
    combined attributes for the cluster to generate the cluster's
    PPD file, including PPD constraints for option combinations not
    fulfillable by any of the member printers, and finding
    reasonable, non-conflicting default settings.
  * cups-browsed: Selection algorithm for the destination printer
    for a job sent to the cluster. Based on the job settings
    requested such as page size, media type, print quality, the
    best most suitable printer in the cluster for the job will be
    selected.
  * cups-browsed, implicitclass: Filter jobs to clusters already
    locally. Due to the fact that a cluster's member printers are
    not exclusively non-raw CUPS queues with the complete filtering
    framework on the remote server, but also native IPP printers,
    we need to support generic driverless printers as destination.
    So we cannot pass on the input data unfiltered but need to
    filter locally. We let the cluster's PPD file emulate a PDF
    printer, letting the local CUPS queue of the cluster run
    pdftopdf and any pre-filters to turn the input into PDF and we
    let the implicitclass backend turn PDF into a format understood
    by the destination printer, supporting the 4 formats of
    driverless IPP printing: PDF, PWG Raster, Apple Raster, PCLm.
- Drop libpoppler-cpp0, libpoppler-devel and libpoppler-glib-devel
  BuildRequires.
- Add pkgconfig(poppler-cpp) BuildRequires following upstream
  changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="idonmez@suse.com" date="1567512000">- Add add-cstring-include.patch to include cstring for memcpy
  and strcmp</changelog>
  <changelog author="jsmeix@suse.de" date="1618488000">- fix_upstream_issue348.patch fixes
  https://github.com/OpenPrinting/cups-filters/issues/348
  foomatic-rip segfaults with 'job-sheets=none,none'
  but works with 'job-sheets=none'
  (bsc#1182893)</changelog>
  <changelog author="jsmeix@suse.com" date="1684152000">- cups-filters-1.25.0-0001-beh-backend-Use-execv-instead-of-system-CVE-2023-24805.patch
  cups-filters-1.25.0-0002-beh-backend-Extra-checks-against-odd-forged-input-CVE-2023-24805.patch
  cups-filters-1.25.0-0003-beh-backend-Further-improvements-CVE-2023-24805.patch
  are the upstream
  0001-beh-backend-Use-execv-instead-of-system-CVE-2023-24805.patch
  0002-beh-backend-Extra-checks-against-odd-forged-input-CVE-2023-24805.patch
  0003-beh-backend-Further-improvements-CVE-2023-24805.patch
  backpported to cups-filters-1.25.0
  to fix CVE-2023-24805: RCE in cups-filters, beh CUPS backend
  (bsc#1211340)</changelog>
  <changelog author="tabraham@suse.com" date="1684756800">- gstoraster-gstopdf-Make-number-of-copies-as-embedded.patch fixes
  https://github.com/OpenPrinting/cups-filters/issues/255
  Printing multiple copies prints only 1 (pstopdf vs gstopdf)
  (bsc#1211401) (boo#1173345)</changelog>
  <changelog author="jsmeix@suse.com" date="1720008000">- bsc1225040.patch fixes bsc#1225040
  "cups-filters: Poppler for color PDF as grayscale via PS level 1:
  huge output makes printing slow"
  see https://github.com/OpenPrinting/cups-filters/issues/169
  Poppler for color PDF as grayscale via PS level 1 was introduced
  in cups-filters 1.22.6 via
  https://github.com/OpenPrinting/cups-filters/commit/48f9f994322c808ba2e9d0db6f3ff81caf8c0b72
  and disabled in cups-filters 1.25.12 via
  https://github.com/OpenPrinting/cups-filters/commit/0818ee322a6139be11d21fc76db345de1e979339</changelog>
  <changelog author="sflees@suse.de" date="1727697600">- cups-filters-1.25.0-0001-remove-cups-browsed-CVE-2024-47176.patch
  The cups-browsed binds on UDP INADDR_ANY:631 trusts any packet
  from any source to trigger a Get-Printer-Attributes IPP request
  to an attacker controlled URL. (bsc#1230939, CVE-2024-47176)</changelog>
  <changelog author="jsmeix@suse.com" date="1728561600">- cups-filters-1.25.0-CVE-2024-47076.patch is the upstream
  https://github.com/OpenPrinting/libcupsfilters/commit/95576ec3
  backported to cups-filters 1.25.0 to fix CVE-2024-47076
  "lack of input sanitization in get_printer_attributes"
  (bsc#1230937)
- cups-filters-1.25.0-0001-remove-cups-browsed-CVE-2024-47176.patch
  also avoids CVE-2024-47850
  "cups-browsed can be abused to initiate remote DDoS"
  (bsc#1231294)
- In general regarding CUPS and cups-browsed security issues like
  CVE-2024-47076 CVE-2024-47176 CVE-2024-47850 see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-filters-1.25.0-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to cups-filters 1.25.0 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
</package>
<package pkgid="efbf2f99d0efaac214c5970130892462b453f5482957e750e4adf1c0cafcde85" name="cups-filters" arch="x86_64">
  <version epoch="0" ver="1.25.0" rel="150200.3.22.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1531224000">- Add pdftoopvp_Silence-compiler-warning.patch: pdftoopvp: Silence
  compiler warning.</changelog>
  <changelog author="alarrosa@suse.com" date="1531828800">- Version upgrade to 1.20.4
  - gstoraster: Removed unneeded "if"s (Ghostscript bug #692705).
  - cups-browsed: When checking whether there is already a local
    print queue with the same URI as the one of the discovered
    printer, consider also as equal URI if the URIs only differ
    by use of IPP or IPPS and/or use of HTTPS port 443 instead
    of IPP port 631.
  - cups-browsed: Also upgrade from ipp: to ipps: when the ipps:
    URI is on HTTPS port 443 instead of IPP port 631. This is
    common on IPP network printers.
  - pdftopdf: Removed support for hardware-implemented reversing
    of page order in PostScript printers. It was once not
    correctly implemented in cups-filters and second, such
    printers are extremely rare, and on Gutenprint PPDs with
    pseudo OutputOrder option hardware reversing was even
    wrongly assumed (Issue #47).
  - pdftopdf: Accept option "output-order=normal/reverse" for
    reversing page order (Issue #47) and also "page-delivery=
    same-order/reverse-order" (CUPS Issue #5340).
  - libcupsfilters: Let the PPD generator add "*PageStackOrder
    ..."  lines to the choices of the "OutputBin" option, to
    mark which output bins need the pages printed in reverse
    order (Issue #47).
  - libcupsfilters: Let the PPD generator correctly create a
    "*DefaultOutputOrder: ..."  entry, depending on whether the
    paper is put out face-up or face-down in the default output
    bin (Issue #47).
  - libcupsfilters: Fixed human-readable name of the OutputBin
    option in the PPD generator.
  - pdftoopvp: Silence compiler warning (Issue #42).
  - cups-browsed: If the user modifies/overwrites a print queue
    created by cups-browsed, it will now not only be
    automatically released from the control of cups-browsed, but
    we also create a replacement for our generated local queue
    under a new name.
  - cups-browsed: Make URIS for using the implicitclass backend
    correctly working also with queue names containing an '@'
    character.
  - braille: Strengthen error checking (Pull request #41).
  - braille: Index: Replace bogus characters with space (Pull
    request #41).
  - braille: Add print and braille page number options (Pull
    request #41).
  - braille: Index: Use standard duplex cups option (Pull
    request #41).
  - cups-browsed: Moved auto-generation of PPD file for IPP
    network printers from create_remote_printer_entry()
    function to update_cups_queues(). This allows re-creating
    accidentally removed or overwritten local queues without
    losing the PPD file.
  - braille: Add option to pick hyphenation rule according to
    current locale and make it the default for second
    translation table. (Pull request #38 and #39).
  - braille: Remove generated defs on "make clean". (Pull request #38).
  - braille: Turn non-breakable spaces to spaces. (Pull request
    [#38] and #39).
  - braille: Fix character encoding when extracting text. When
    extracing text from a zip file or a pdf, the resulting text
    is always utf-8 independently of the original locale, so we
    need to force that. (Pull request #38).
  - braille: Warn when no text translation was selected in case
    the user didn't notice. (Pull request #37).
  - braille: Fix spurious spacing after last Form-Feed (Pull
    request #45).
- Drop pdftoopvp_Silence-compiler-warning.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1535630400">- Do not diferentiate for service location, it is in sbindir
  on all systems we support now
- Use license for license install
- Version update to 1.21.1:
  - foomatic-rip: Fixed segmentation fault caused by wrong
    Coverity Scan issue fix (Issue #57, Debian bug #907026).
  - Build system: Require QPDF 8.1.0 or later as it is needed by
    bannertopdf (Issue #56).
  - libcupsfilters, cups-browsed, driverless, foomatic-rip,
    parallel: Silenced warnings from newest gcc.
  - libcupsfilters: When generating a PPD for driverless
    printing on a remote IPP printer, make pdftopdf not being
    run by the local queue if the remote queue is a CUPS queue
    to avoid running pdftopdf twice (CUPS Issue #5361).
  - libcupsfilters, cups-browsed, driverless, bannertopdf,
    foomatic-rip, pdftops, pdftoraster, rastertops,
    rastertoescpx, sys5ippprinter, beh: Fixed Coverity Scan
    issues. Thanks to Zdenek Dohnal (zdohnal at redhat dot com)
    for the tests and the patches.
  - bannertopdf: Switched over from using Poppler to using QPDF
    for generating the PDF pages. With Poppler unstable APIs
    were used which were subject to change. Thanks to Sahil
    Arora for this project in the Google Summer of Code 2018
    (Pull request #25).
  - cups-browsed: Manually defined clusters ("Cluster" directive
    in cups-browsed.conf) caused cups-browsed to crash.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543406400">- Update to version 1.21.4:
  * cups-browsed: cups-browsed: Limit the number of retries for
    creating a print queue when it comes to HTTP timeouts. Number
    of retries given by HttpMaxRetries directive in
    cups-browsed.conf.
  * cups-browsed: Read out current time right before setting the
    timeouts.
  * libcupsfilters: In the PPD generator for driverless IPP
    printing let "*cupsManualCopies: true" lines get added to
    the PPD if printing is done in a raster format as then
    pdftopdf needs to generate the copies.
  * pdftoraster, pdftoopvp, pdftoijs: Fix build with
    Poppler &gt;= 0.70
  * pdftopdf: Fixed printing multiple copies on driverless IPP
    printers. When printing collated copies the multiple copies
    got applied twice, resulting in n*n instead of n copies.
  * pdftoraster, pdftoopvp, pdftoijs: Poppler removed memCheck
    and gMemReport functions, remove appropriate calls.
- Changes from version 1.21.3:
  * foomatic-rip: Reset stdin after replacing the underlying file
    descriptor.
- Changes from version 1.21.2:
  * cups-browsed: Fixed freeing of literal string caused by
    Coverity Scan issue fix.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545134400">- Update to version 1.21.6:
  * Bug fix release, mainly for cups-browsed to avoid crashes and
    infinite printer removal/re-creation loops and spurious local
    queues for local CUPS printers. Also expanded PostScript
    interpreter bug workaround to more Apple LaserWriter models.
  * cups-browsed: To find out whether a DNS-SD-discovered printer
    is from the local machine, use not only the flags in the Avahi
    lookup result but also check the host name.
  * cups-browsed: When a local CUPS queue pointing to a remote CUPS
    printer was removed and re-created to make it a permanent
    queue, on_printer_deleted() was triggered by cupsd's
    notification to re-create a lost queue. Now
    on_printer_deleted() checks whether the queue is really gone
    and only re-creates then.
  * cups-browsed: When updating the CUPS queues, also removed and
    unregistered queues and not only created queues got checked for
    HTTP timeouts, which caused crashes on shutdown.
  * pdftops: Use the PS interpreter of Poppler for all Apple
    LaserWriter 16/600, 4/600, 12/640, 12/600, 12/660 as they all
    seem to not work with Ghostscript's PS output.
  * cups-browsed: On shutdown queues got removed even if they still
    had jobs.
- Changes from version 1.21.5:
  * Bug fix release, to build with Poppler 0.71 and with
    cups-browsed converting temporary CUPS queues reliably to
    permanent queues.
  * cups-browsed: We cannot reliably determine whether a CUPS queue
    is temporary, so we apply the procedure to make a temporary
    queue permanent to any unshared queue.
  * pdftoraster, pdftopdf, pdftoijs, pdftoopvp: Do not use the
    Poppler-specific "GBool", "gFalse", "gTrue" any more, as
    Poppler has switched to standard "bool", "false", "true" in
    version 0.71.0.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546084800">- Fix building with Poppler 0.72
  Add 0001-Raise-minimum-poppler-version-from-0.18-to-0.19.patch
  Add 0002-Adapt-code-for-SplashXPathScanner-state-handling-sin.patch
  Add 0003-Support-some-more-methods-returning-const.patch
  Add 0004-Support-GooString-c_str-introduced-by-poppler-0.72.patch
  See https://github.com/OpenPrinting/cups-filters/pull/83</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548676800">- Update to version 1.22.0:
  * From this release on the pdftopdf filter flattens interactive
    PDF forms and annotations internally, using QPDF, instead of
    calling external utilities. This especially eliminates slowing
    factors as additional piping of the data and unneeded use of
    PDF interpreters. Using external utilities for flattening is
    still possible in case of problems. In addition, a crash bug in
    cups-browsed got fixed and compatibility of the filters with
    Poppler 0.72 assured.
- Drop upstream fixed patches:
  * 0001-Raise-minimum-poppler-version-from-0.18-to-0.19.patch
  * 0002-Adapt-code-for-SplashXPathScanner-state-handling-sin.patch
  * 0003-Support-some-more-methods-returning-const.patch
  * 0004-Support-GooString-c_str-introduced-by-poppler-0.72.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550664000">- Update to version 1.22.1:
  * braille: Use sort command with LC_ALL=C for reproducibility
    of the genrated files, needed for distribution packaging.
  * cups-browsed, driverless: When polling the printer's
    capabilities via get-printer-attributes IPP request for
    driverless printing, use the attributes "all" and
    "media-col-database". Without "all" some printers do not report
    "urf-supported" and without "media-col-database" not all paper
    size and marging info gets reported.
  * braille: Document how to rework output before embossing.</changelog>
  <changelog author="jsmeix@suse.de" date="1554724800">- Version upgrade to 1.22.5
  * foomatic-rip: Changed Ghostscript call to count pages in a
    PDF file to use "runpdfbegin" and not the undocumented
    Ghostscript internal "pdfdict", so that it works with
    Ghostscript 9.27 and later (Debian bug #926576,
    Arch Linux bug #62251, openSUSE boo#1131771,
    cups@cups.org mailing list thread
    https://lists.cups.org/pipermail/cups/2019-April/074563.html).
- Version upgrade to 1.22.4
  * cups-browsed: Fix broken trailing space removal on
    "NickName" (Pull request #103).
  * pdftops: Emit PostScript Level 2 instead of Level 3 for
    Brother PostScript printers as at least some of them
    report to support level 3 but ontly work with Level 2
    (Ubuntu bug #1306849, comment #42).
  * bannertopdf: When multiplying the page for N-up or Duplex
    printing one page too much was generated (Issue #102).
- Version upgrade to 1.22.3
  * libcupsfilters: Added error checks for processing GIF, to
    avoid crashes or hangs on broken GIF files (Issues #81, #82,
    Pull request #100).
  * cups-browsed: Added hint to the man page and configuration
    file that with "DebugLogging stderr" the logging output goes
    to journal or syslog if cups-browsed is running as system
    service (Issue #28).
- Version upgrade to 1.22.2
  * cups-browsed: Let distribution of jobs sent to queues with
    "implicitclass" backend (usually clusters) be done by a
    "job-state" CUPS notification and not by
    "printer-state-changed" any more. The "job-state"
    notification already contains the job ID. Before we had to
    poll the job ID from CUPS via IPP which was sometimes
    unreliable (Issue #97).
  * imagetopdf, imagetoraster, pdftopdf, libcupsfilters: Added
    new page scaling options: "fill" scales the input page
    (typically a photo) so that the output page (typically with
    different aspect ratio) gets completely filled, aloowing for
    some content of the input page getting lost. "crop-to-fit"
    allows for easy printing of documents on slightly different
    output page sizes (A4 &lt;-&gt; Letter) maintaining the size and
    centering and cropping into the destination page. Thanks to
    Dheeraj Yadav (dhirajyadav135 at gmail dot com) for the
    patch (Pull request #92).
  * cups-browsed: Do not do IPP request for printer-is-shared
    option for remote cups queues with CUPS 2.2.x and newer
    (Pull request #91).
  * cups-browsed: Fix crash bug when reading "Cluster"
    directive from configuration file (Issue #94).
  * driverless: Updated man page as now also Mopria and
    Wi-Fi Direct printers are supported. Mentioned also
    ippusbxd.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.23.0:
  * This release adds support for the "print-scaling" IPP attribute
    and has the code for the support of MuPDF as PDF renderer
    vastly simplified.
  * pdftops, mupdftoraster: Let pdftops call mutool directly and so
    that it directly outputs PostScript, eliminating the need to
    call the mupdftoraster and rastertops filters.
  * mupdftoraster: Reduced the use of temporary files from 3 to
    just one.
  * imagetopdf, imagetoraster, pdftopdf: Add support for
    print-scaling option.
- Changes from version 1.22.6:
  * Bug fix release, to address a further issue of cups-browsed
    removing user-created print queues, to make
    grayscale/monochrome PostScript jobs of colored input file
    actually output grayscale/monochrome files, to fix several bugs
    when using MuPDF as PDF renderer, and to silence compiler
    warnings.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559908800">- Update to version 1.25.0:
  * pdftoijs, pdftoopvp: Removed these deprecated filters
    completely as there is no demand for them any more. They also
    used unstable, undocumented APIs of Poppler.
  * pdftoraster: Changed from using unstable, undocumented APIs of
    Poppler to stable, documented ones, to improve maintainability
    of this filter, and with it of the cups-filters package.
  * libcupsfilters: Added support for color spaces CMY and RGBW
    when using filters without PPD file (mainly for development and
    debugging, option "print-color-mode" with values "cmy-XX" and
    "rgbw-XX" with XX being the number of bits per color).
- Changes from version 1.24.0:
  * cups-browsed: Integration of Deepak Patankar's Google Summer of
    Code 2018 project with the main goal of clustering different
    printers and automatically selecting the destination printers
    by job content and option/attribute settings.
  * cups-browsed, implicitclass: Support for mixed clusters of
    remote CUPS queues and IPP network printers. For this PPD files
    of remote CUPS queues are generated by cups-browsed based on
    IPP queries, as for native IPP printers, the number of jobs for
    load balancing is polled in a way that it works also with
    native IPP printers, the implicitclass backend sends jobs
    directly to the printer instead of re-queueing them via CUPS.
  * cups-browsed: Merge IPP attributes of several printers to
    combined attributes for the cluster to generate the cluster's
    PPD file, including PPD constraints for option combinations not
    fulfillable by any of the member printers, and finding
    reasonable, non-conflicting default settings.
  * cups-browsed: Selection algorithm for the destination printer
    for a job sent to the cluster. Based on the job settings
    requested such as page size, media type, print quality, the
    best most suitable printer in the cluster for the job will be
    selected.
  * cups-browsed, implicitclass: Filter jobs to clusters already
    locally. Due to the fact that a cluster's member printers are
    not exclusively non-raw CUPS queues with the complete filtering
    framework on the remote server, but also native IPP printers,
    we need to support generic driverless printers as destination.
    So we cannot pass on the input data unfiltered but need to
    filter locally. We let the cluster's PPD file emulate a PDF
    printer, letting the local CUPS queue of the cluster run
    pdftopdf and any pre-filters to turn the input into PDF and we
    let the implicitclass backend turn PDF into a format understood
    by the destination printer, supporting the 4 formats of
    driverless IPP printing: PDF, PWG Raster, Apple Raster, PCLm.
- Drop libpoppler-cpp0, libpoppler-devel and libpoppler-glib-devel
  BuildRequires.
- Add pkgconfig(poppler-cpp) BuildRequires following upstream
  changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="idonmez@suse.com" date="1567512000">- Add add-cstring-include.patch to include cstring for memcpy
  and strcmp</changelog>
  <changelog author="jsmeix@suse.de" date="1618488000">- fix_upstream_issue348.patch fixes
  https://github.com/OpenPrinting/cups-filters/issues/348
  foomatic-rip segfaults with 'job-sheets=none,none'
  but works with 'job-sheets=none'
  (bsc#1182893)</changelog>
  <changelog author="jsmeix@suse.com" date="1684152000">- cups-filters-1.25.0-0001-beh-backend-Use-execv-instead-of-system-CVE-2023-24805.patch
  cups-filters-1.25.0-0002-beh-backend-Extra-checks-against-odd-forged-input-CVE-2023-24805.patch
  cups-filters-1.25.0-0003-beh-backend-Further-improvements-CVE-2023-24805.patch
  are the upstream
  0001-beh-backend-Use-execv-instead-of-system-CVE-2023-24805.patch
  0002-beh-backend-Extra-checks-against-odd-forged-input-CVE-2023-24805.patch
  0003-beh-backend-Further-improvements-CVE-2023-24805.patch
  backpported to cups-filters-1.25.0
  to fix CVE-2023-24805: RCE in cups-filters, beh CUPS backend
  (bsc#1211340)</changelog>
  <changelog author="tabraham@suse.com" date="1684756800">- gstoraster-gstopdf-Make-number-of-copies-as-embedded.patch fixes
  https://github.com/OpenPrinting/cups-filters/issues/255
  Printing multiple copies prints only 1 (pstopdf vs gstopdf)
  (bsc#1211401) (boo#1173345)</changelog>
  <changelog author="jsmeix@suse.com" date="1720008000">- bsc1225040.patch fixes bsc#1225040
  "cups-filters: Poppler for color PDF as grayscale via PS level 1:
  huge output makes printing slow"
  see https://github.com/OpenPrinting/cups-filters/issues/169
  Poppler for color PDF as grayscale via PS level 1 was introduced
  in cups-filters 1.22.6 via
  https://github.com/OpenPrinting/cups-filters/commit/48f9f994322c808ba2e9d0db6f3ff81caf8c0b72
  and disabled in cups-filters 1.25.12 via
  https://github.com/OpenPrinting/cups-filters/commit/0818ee322a6139be11d21fc76db345de1e979339</changelog>
  <changelog author="sflees@suse.de" date="1727697600">- cups-filters-1.25.0-0001-remove-cups-browsed-CVE-2024-47176.patch
  The cups-browsed binds on UDP INADDR_ANY:631 trusts any packet
  from any source to trigger a Get-Printer-Attributes IPP request
  to an attacker controlled URL. (bsc#1230939, CVE-2024-47176)</changelog>
  <changelog author="jsmeix@suse.com" date="1728561600">- cups-filters-1.25.0-CVE-2024-47076.patch is the upstream
  https://github.com/OpenPrinting/libcupsfilters/commit/95576ec3
  backported to cups-filters 1.25.0 to fix CVE-2024-47076
  "lack of input sanitization in get_printer_attributes"
  (bsc#1230937)
- cups-filters-1.25.0-0001-remove-cups-browsed-CVE-2024-47176.patch
  also avoids CVE-2024-47850
  "cups-browsed can be abused to initiate remote DDoS"
  (bsc#1231294)
- In general regarding CUPS and cups-browsed security issues like
  CVE-2024-47076 CVE-2024-47176 CVE-2024-47850 see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-filters-1.25.0-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to cups-filters 1.25.0 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
</package>
<package pkgid="79f6eac760f18ed1d16683c32e4ec549e74f82835819ebf7e32dd03fd2ff02f2" name="cups-filters" arch="src">
  <version epoch="0" ver="1.25.0" rel="150200.3.25.1"/>
  <changelog author="alarrosa@suse.com" date="1531828800">- Version upgrade to 1.20.4
  - gstoraster: Removed unneeded "if"s (Ghostscript bug #692705).
  - cups-browsed: When checking whether there is already a local
    print queue with the same URI as the one of the discovered
    printer, consider also as equal URI if the URIs only differ
    by use of IPP or IPPS and/or use of HTTPS port 443 instead
    of IPP port 631.
  - cups-browsed: Also upgrade from ipp: to ipps: when the ipps:
    URI is on HTTPS port 443 instead of IPP port 631. This is
    common on IPP network printers.
  - pdftopdf: Removed support for hardware-implemented reversing
    of page order in PostScript printers. It was once not
    correctly implemented in cups-filters and second, such
    printers are extremely rare, and on Gutenprint PPDs with
    pseudo OutputOrder option hardware reversing was even
    wrongly assumed (Issue #47).
  - pdftopdf: Accept option "output-order=normal/reverse" for
    reversing page order (Issue #47) and also "page-delivery=
    same-order/reverse-order" (CUPS Issue #5340).
  - libcupsfilters: Let the PPD generator add "*PageStackOrder
    ..."  lines to the choices of the "OutputBin" option, to
    mark which output bins need the pages printed in reverse
    order (Issue #47).
  - libcupsfilters: Let the PPD generator correctly create a
    "*DefaultOutputOrder: ..."  entry, depending on whether the
    paper is put out face-up or face-down in the default output
    bin (Issue #47).
  - libcupsfilters: Fixed human-readable name of the OutputBin
    option in the PPD generator.
  - pdftoopvp: Silence compiler warning (Issue #42).
  - cups-browsed: If the user modifies/overwrites a print queue
    created by cups-browsed, it will now not only be
    automatically released from the control of cups-browsed, but
    we also create a replacement for our generated local queue
    under a new name.
  - cups-browsed: Make URIS for using the implicitclass backend
    correctly working also with queue names containing an '@'
    character.
  - braille: Strengthen error checking (Pull request #41).
  - braille: Index: Replace bogus characters with space (Pull
    request #41).
  - braille: Add print and braille page number options (Pull
    request #41).
  - braille: Index: Use standard duplex cups option (Pull
    request #41).
  - cups-browsed: Moved auto-generation of PPD file for IPP
    network printers from create_remote_printer_entry()
    function to update_cups_queues(). This allows re-creating
    accidentally removed or overwritten local queues without
    losing the PPD file.
  - braille: Add option to pick hyphenation rule according to
    current locale and make it the default for second
    translation table. (Pull request #38 and #39).
  - braille: Remove generated defs on "make clean". (Pull request #38).
  - braille: Turn non-breakable spaces to spaces. (Pull request
    [#38] and #39).
  - braille: Fix character encoding when extracting text. When
    extracing text from a zip file or a pdf, the resulting text
    is always utf-8 independently of the original locale, so we
    need to force that. (Pull request #38).
  - braille: Warn when no text translation was selected in case
    the user didn't notice. (Pull request #37).
  - braille: Fix spurious spacing after last Form-Feed (Pull
    request #45).
- Drop pdftoopvp_Silence-compiler-warning.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1535630400">- Do not diferentiate for service location, it is in sbindir
  on all systems we support now
- Use license for license install
- Version update to 1.21.1:
  - foomatic-rip: Fixed segmentation fault caused by wrong
    Coverity Scan issue fix (Issue #57, Debian bug #907026).
  - Build system: Require QPDF 8.1.0 or later as it is needed by
    bannertopdf (Issue #56).
  - libcupsfilters, cups-browsed, driverless, foomatic-rip,
    parallel: Silenced warnings from newest gcc.
  - libcupsfilters: When generating a PPD for driverless
    printing on a remote IPP printer, make pdftopdf not being
    run by the local queue if the remote queue is a CUPS queue
    to avoid running pdftopdf twice (CUPS Issue #5361).
  - libcupsfilters, cups-browsed, driverless, bannertopdf,
    foomatic-rip, pdftops, pdftoraster, rastertops,
    rastertoescpx, sys5ippprinter, beh: Fixed Coverity Scan
    issues. Thanks to Zdenek Dohnal (zdohnal at redhat dot com)
    for the tests and the patches.
  - bannertopdf: Switched over from using Poppler to using QPDF
    for generating the PDF pages. With Poppler unstable APIs
    were used which were subject to change. Thanks to Sahil
    Arora for this project in the Google Summer of Code 2018
    (Pull request #25).
  - cups-browsed: Manually defined clusters ("Cluster" directive
    in cups-browsed.conf) caused cups-browsed to crash.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543406400">- Update to version 1.21.4:
  * cups-browsed: cups-browsed: Limit the number of retries for
    creating a print queue when it comes to HTTP timeouts. Number
    of retries given by HttpMaxRetries directive in
    cups-browsed.conf.
  * cups-browsed: Read out current time right before setting the
    timeouts.
  * libcupsfilters: In the PPD generator for driverless IPP
    printing let "*cupsManualCopies: true" lines get added to
    the PPD if printing is done in a raster format as then
    pdftopdf needs to generate the copies.
  * pdftoraster, pdftoopvp, pdftoijs: Fix build with
    Poppler &gt;= 0.70
  * pdftopdf: Fixed printing multiple copies on driverless IPP
    printers. When printing collated copies the multiple copies
    got applied twice, resulting in n*n instead of n copies.
  * pdftoraster, pdftoopvp, pdftoijs: Poppler removed memCheck
    and gMemReport functions, remove appropriate calls.
- Changes from version 1.21.3:
  * foomatic-rip: Reset stdin after replacing the underlying file
    descriptor.
- Changes from version 1.21.2:
  * cups-browsed: Fixed freeing of literal string caused by
    Coverity Scan issue fix.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545134400">- Update to version 1.21.6:
  * Bug fix release, mainly for cups-browsed to avoid crashes and
    infinite printer removal/re-creation loops and spurious local
    queues for local CUPS printers. Also expanded PostScript
    interpreter bug workaround to more Apple LaserWriter models.
  * cups-browsed: To find out whether a DNS-SD-discovered printer
    is from the local machine, use not only the flags in the Avahi
    lookup result but also check the host name.
  * cups-browsed: When a local CUPS queue pointing to a remote CUPS
    printer was removed and re-created to make it a permanent
    queue, on_printer_deleted() was triggered by cupsd's
    notification to re-create a lost queue. Now
    on_printer_deleted() checks whether the queue is really gone
    and only re-creates then.
  * cups-browsed: When updating the CUPS queues, also removed and
    unregistered queues and not only created queues got checked for
    HTTP timeouts, which caused crashes on shutdown.
  * pdftops: Use the PS interpreter of Poppler for all Apple
    LaserWriter 16/600, 4/600, 12/640, 12/600, 12/660 as they all
    seem to not work with Ghostscript's PS output.
  * cups-browsed: On shutdown queues got removed even if they still
    had jobs.
- Changes from version 1.21.5:
  * Bug fix release, to build with Poppler 0.71 and with
    cups-browsed converting temporary CUPS queues reliably to
    permanent queues.
  * cups-browsed: We cannot reliably determine whether a CUPS queue
    is temporary, so we apply the procedure to make a temporary
    queue permanent to any unshared queue.
  * pdftoraster, pdftopdf, pdftoijs, pdftoopvp: Do not use the
    Poppler-specific "GBool", "gFalse", "gTrue" any more, as
    Poppler has switched to standard "bool", "false", "true" in
    version 0.71.0.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546084800">- Fix building with Poppler 0.72
  Add 0001-Raise-minimum-poppler-version-from-0.18-to-0.19.patch
  Add 0002-Adapt-code-for-SplashXPathScanner-state-handling-sin.patch
  Add 0003-Support-some-more-methods-returning-const.patch
  Add 0004-Support-GooString-c_str-introduced-by-poppler-0.72.patch
  See https://github.com/OpenPrinting/cups-filters/pull/83</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548676800">- Update to version 1.22.0:
  * From this release on the pdftopdf filter flattens interactive
    PDF forms and annotations internally, using QPDF, instead of
    calling external utilities. This especially eliminates slowing
    factors as additional piping of the data and unneeded use of
    PDF interpreters. Using external utilities for flattening is
    still possible in case of problems. In addition, a crash bug in
    cups-browsed got fixed and compatibility of the filters with
    Poppler 0.72 assured.
- Drop upstream fixed patches:
  * 0001-Raise-minimum-poppler-version-from-0.18-to-0.19.patch
  * 0002-Adapt-code-for-SplashXPathScanner-state-handling-sin.patch
  * 0003-Support-some-more-methods-returning-const.patch
  * 0004-Support-GooString-c_str-introduced-by-poppler-0.72.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550664000">- Update to version 1.22.1:
  * braille: Use sort command with LC_ALL=C for reproducibility
    of the genrated files, needed for distribution packaging.
  * cups-browsed, driverless: When polling the printer's
    capabilities via get-printer-attributes IPP request for
    driverless printing, use the attributes "all" and
    "media-col-database". Without "all" some printers do not report
    "urf-supported" and without "media-col-database" not all paper
    size and marging info gets reported.
  * braille: Document how to rework output before embossing.</changelog>
  <changelog author="jsmeix@suse.de" date="1554724800">- Version upgrade to 1.22.5
  * foomatic-rip: Changed Ghostscript call to count pages in a
    PDF file to use "runpdfbegin" and not the undocumented
    Ghostscript internal "pdfdict", so that it works with
    Ghostscript 9.27 and later (Debian bug #926576,
    Arch Linux bug #62251, openSUSE boo#1131771,
    cups@cups.org mailing list thread
    https://lists.cups.org/pipermail/cups/2019-April/074563.html).
- Version upgrade to 1.22.4
  * cups-browsed: Fix broken trailing space removal on
    "NickName" (Pull request #103).
  * pdftops: Emit PostScript Level 2 instead of Level 3 for
    Brother PostScript printers as at least some of them
    report to support level 3 but ontly work with Level 2
    (Ubuntu bug #1306849, comment #42).
  * bannertopdf: When multiplying the page for N-up or Duplex
    printing one page too much was generated (Issue #102).
- Version upgrade to 1.22.3
  * libcupsfilters: Added error checks for processing GIF, to
    avoid crashes or hangs on broken GIF files (Issues #81, #82,
    Pull request #100).
  * cups-browsed: Added hint to the man page and configuration
    file that with "DebugLogging stderr" the logging output goes
    to journal or syslog if cups-browsed is running as system
    service (Issue #28).
- Version upgrade to 1.22.2
  * cups-browsed: Let distribution of jobs sent to queues with
    "implicitclass" backend (usually clusters) be done by a
    "job-state" CUPS notification and not by
    "printer-state-changed" any more. The "job-state"
    notification already contains the job ID. Before we had to
    poll the job ID from CUPS via IPP which was sometimes
    unreliable (Issue #97).
  * imagetopdf, imagetoraster, pdftopdf, libcupsfilters: Added
    new page scaling options: "fill" scales the input page
    (typically a photo) so that the output page (typically with
    different aspect ratio) gets completely filled, aloowing for
    some content of the input page getting lost. "crop-to-fit"
    allows for easy printing of documents on slightly different
    output page sizes (A4 &lt;-&gt; Letter) maintaining the size and
    centering and cropping into the destination page. Thanks to
    Dheeraj Yadav (dhirajyadav135 at gmail dot com) for the
    patch (Pull request #92).
  * cups-browsed: Do not do IPP request for printer-is-shared
    option for remote cups queues with CUPS 2.2.x and newer
    (Pull request #91).
  * cups-browsed: Fix crash bug when reading "Cluster"
    directive from configuration file (Issue #94).
  * driverless: Updated man page as now also Mopria and
    Wi-Fi Direct printers are supported. Mentioned also
    ippusbxd.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.23.0:
  * This release adds support for the "print-scaling" IPP attribute
    and has the code for the support of MuPDF as PDF renderer
    vastly simplified.
  * pdftops, mupdftoraster: Let pdftops call mutool directly and so
    that it directly outputs PostScript, eliminating the need to
    call the mupdftoraster and rastertops filters.
  * mupdftoraster: Reduced the use of temporary files from 3 to
    just one.
  * imagetopdf, imagetoraster, pdftopdf: Add support for
    print-scaling option.
- Changes from version 1.22.6:
  * Bug fix release, to address a further issue of cups-browsed
    removing user-created print queues, to make
    grayscale/monochrome PostScript jobs of colored input file
    actually output grayscale/monochrome files, to fix several bugs
    when using MuPDF as PDF renderer, and to silence compiler
    warnings.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559908800">- Update to version 1.25.0:
  * pdftoijs, pdftoopvp: Removed these deprecated filters
    completely as there is no demand for them any more. They also
    used unstable, undocumented APIs of Poppler.
  * pdftoraster: Changed from using unstable, undocumented APIs of
    Poppler to stable, documented ones, to improve maintainability
    of this filter, and with it of the cups-filters package.
  * libcupsfilters: Added support for color spaces CMY and RGBW
    when using filters without PPD file (mainly for development and
    debugging, option "print-color-mode" with values "cmy-XX" and
    "rgbw-XX" with XX being the number of bits per color).
- Changes from version 1.24.0:
  * cups-browsed: Integration of Deepak Patankar's Google Summer of
    Code 2018 project with the main goal of clustering different
    printers and automatically selecting the destination printers
    by job content and option/attribute settings.
  * cups-browsed, implicitclass: Support for mixed clusters of
    remote CUPS queues and IPP network printers. For this PPD files
    of remote CUPS queues are generated by cups-browsed based on
    IPP queries, as for native IPP printers, the number of jobs for
    load balancing is polled in a way that it works also with
    native IPP printers, the implicitclass backend sends jobs
    directly to the printer instead of re-queueing them via CUPS.
  * cups-browsed: Merge IPP attributes of several printers to
    combined attributes for the cluster to generate the cluster's
    PPD file, including PPD constraints for option combinations not
    fulfillable by any of the member printers, and finding
    reasonable, non-conflicting default settings.
  * cups-browsed: Selection algorithm for the destination printer
    for a job sent to the cluster. Based on the job settings
    requested such as page size, media type, print quality, the
    best most suitable printer in the cluster for the job will be
    selected.
  * cups-browsed, implicitclass: Filter jobs to clusters already
    locally. Due to the fact that a cluster's member printers are
    not exclusively non-raw CUPS queues with the complete filtering
    framework on the remote server, but also native IPP printers,
    we need to support generic driverless printers as destination.
    So we cannot pass on the input data unfiltered but need to
    filter locally. We let the cluster's PPD file emulate a PDF
    printer, letting the local CUPS queue of the cluster run
    pdftopdf and any pre-filters to turn the input into PDF and we
    let the implicitclass backend turn PDF into a format understood
    by the destination printer, supporting the 4 formats of
    driverless IPP printing: PDF, PWG Raster, Apple Raster, PCLm.
- Drop libpoppler-cpp0, libpoppler-devel and libpoppler-glib-devel
  BuildRequires.
- Add pkgconfig(poppler-cpp) BuildRequires following upstream
  changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="idonmez@suse.com" date="1567512000">- Add add-cstring-include.patch to include cstring for memcpy
  and strcmp</changelog>
  <changelog author="jsmeix@suse.de" date="1618488000">- fix_upstream_issue348.patch fixes
  https://github.com/OpenPrinting/cups-filters/issues/348
  foomatic-rip segfaults with 'job-sheets=none,none'
  but works with 'job-sheets=none'
  (bsc#1182893)</changelog>
  <changelog author="jsmeix@suse.com" date="1684152000">- cups-filters-1.25.0-0001-beh-backend-Use-execv-instead-of-system-CVE-2023-24805.patch
  cups-filters-1.25.0-0002-beh-backend-Extra-checks-against-odd-forged-input-CVE-2023-24805.patch
  cups-filters-1.25.0-0003-beh-backend-Further-improvements-CVE-2023-24805.patch
  are the upstream
  0001-beh-backend-Use-execv-instead-of-system-CVE-2023-24805.patch
  0002-beh-backend-Extra-checks-against-odd-forged-input-CVE-2023-24805.patch
  0003-beh-backend-Further-improvements-CVE-2023-24805.patch
  backpported to cups-filters-1.25.0
  to fix CVE-2023-24805: RCE in cups-filters, beh CUPS backend
  (bsc#1211340)</changelog>
  <changelog author="tabraham@suse.com" date="1684756800">- gstoraster-gstopdf-Make-number-of-copies-as-embedded.patch fixes
  https://github.com/OpenPrinting/cups-filters/issues/255
  Printing multiple copies prints only 1 (pstopdf vs gstopdf)
  (bsc#1211401) (boo#1173345)</changelog>
  <changelog author="jsmeix@suse.com" date="1720008000">- bsc1225040.patch fixes bsc#1225040
  "cups-filters: Poppler for color PDF as grayscale via PS level 1:
  huge output makes printing slow"
  see https://github.com/OpenPrinting/cups-filters/issues/169
  Poppler for color PDF as grayscale via PS level 1 was introduced
  in cups-filters 1.22.6 via
  https://github.com/OpenPrinting/cups-filters/commit/48f9f994322c808ba2e9d0db6f3ff81caf8c0b72
  and disabled in cups-filters 1.25.12 via
  https://github.com/OpenPrinting/cups-filters/commit/0818ee322a6139be11d21fc76db345de1e979339</changelog>
  <changelog author="sflees@suse.de" date="1727697600">- cups-filters-1.25.0-0001-remove-cups-browsed-CVE-2024-47176.patch
  The cups-browsed binds on UDP INADDR_ANY:631 trusts any packet
  from any source to trigger a Get-Printer-Attributes IPP request
  to an attacker controlled URL. (bsc#1230939, CVE-2024-47176)</changelog>
  <changelog author="jsmeix@suse.com" date="1728561600">- cups-filters-1.25.0-CVE-2024-47076.patch is the upstream
  https://github.com/OpenPrinting/libcupsfilters/commit/95576ec3
  backported to cups-filters 1.25.0 to fix CVE-2024-47076
  "lack of input sanitization in get_printer_attributes"
  (bsc#1230937)
- cups-filters-1.25.0-0001-remove-cups-browsed-CVE-2024-47176.patch
  also avoids CVE-2024-47850
  "cups-browsed can be abused to initiate remote DDoS"
  (bsc#1231294)
- In general regarding CUPS and cups-browsed security issues like
  CVE-2024-47076 CVE-2024-47176 CVE-2024-47850 see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-filters-1.25.0-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to cups-filters 1.25.0 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1763121600">- cups-filters-1.25.0-CVE-2025-64503.patch is
  https://github.com/OpenPrinting/cups-filters/commit/50d94ca0f2fa6177613c97c59791bde568631865
  for cups-filters 1.25.0 to fix CVE-2025-64503
  "out-of-bounds write in pdftoraster tool" (bsc#1253374), see
  https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-893j-2wr2-wrh9
- cups-filters-1.25.0-CVE-2025-57812.patch is
  https://github.com/OpenPrinting/cups-filters/commit/cb927006747b797aa9163cd0cbd41b9bbdf05db0
  https://github.com/OpenPrinting/cups-filters/commit/7bd588a1fc5c99ac0b1951beb1b54b438137a7b5
  https://github.com/OpenPrinting/cups-filters/commit/719c557c9a29db32b855e6e108d7f4e7c5397613
  https://github.com/OpenPrinting/cups-filters/commit/5122052dd8f06949242099401c59f6c3b14e61c3
  https://github.com/OpenPrinting/cups-filters/commit/5e5f1c5d46a043c57cbbe6e043aa95896d9c40fa
  for cups-filters 1.25.0 to fix CVE-2025-57812
  "multiple TIFF-related issues" (bsc#1253373), see
  https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-jpxg-qc2c-hgv4
  https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-rc6w-jmvv-v7gx
  https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-fmvr-45mx-43c6
- cups-filters-1.25.0-CVE-2025-64524.patch is from
  https://bugzilla.suse.com/attachment.cgi?id=886866 in bsc#1253364
  for cups-filters 1.25.0 to fix CVE-2025-64524
  "use of unvalidated length parameter in the rastertopclx filter
  can lead to an out-of-bounds write", see
  https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-rq44-2q5p-x3hv
- In general regarding cups-filters security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
</package>
<package pkgid="c0a633190f9b6acb593d48f91d994917f85ebaeae98e2627175685d9487517cb" name="cups-filters" arch="x86_64">
  <version epoch="0" ver="1.25.0" rel="150200.3.25.1"/>
  <changelog author="alarrosa@suse.com" date="1531828800">- Version upgrade to 1.20.4
  - gstoraster: Removed unneeded "if"s (Ghostscript bug #692705).
  - cups-browsed: When checking whether there is already a local
    print queue with the same URI as the one of the discovered
    printer, consider also as equal URI if the URIs only differ
    by use of IPP or IPPS and/or use of HTTPS port 443 instead
    of IPP port 631.
  - cups-browsed: Also upgrade from ipp: to ipps: when the ipps:
    URI is on HTTPS port 443 instead of IPP port 631. This is
    common on IPP network printers.
  - pdftopdf: Removed support for hardware-implemented reversing
    of page order in PostScript printers. It was once not
    correctly implemented in cups-filters and second, such
    printers are extremely rare, and on Gutenprint PPDs with
    pseudo OutputOrder option hardware reversing was even
    wrongly assumed (Issue #47).
  - pdftopdf: Accept option "output-order=normal/reverse" for
    reversing page order (Issue #47) and also "page-delivery=
    same-order/reverse-order" (CUPS Issue #5340).
  - libcupsfilters: Let the PPD generator add "*PageStackOrder
    ..."  lines to the choices of the "OutputBin" option, to
    mark which output bins need the pages printed in reverse
    order (Issue #47).
  - libcupsfilters: Let the PPD generator correctly create a
    "*DefaultOutputOrder: ..."  entry, depending on whether the
    paper is put out face-up or face-down in the default output
    bin (Issue #47).
  - libcupsfilters: Fixed human-readable name of the OutputBin
    option in the PPD generator.
  - pdftoopvp: Silence compiler warning (Issue #42).
  - cups-browsed: If the user modifies/overwrites a print queue
    created by cups-browsed, it will now not only be
    automatically released from the control of cups-browsed, but
    we also create a replacement for our generated local queue
    under a new name.
  - cups-browsed: Make URIS for using the implicitclass backend
    correctly working also with queue names containing an '@'
    character.
  - braille: Strengthen error checking (Pull request #41).
  - braille: Index: Replace bogus characters with space (Pull
    request #41).
  - braille: Add print and braille page number options (Pull
    request #41).
  - braille: Index: Use standard duplex cups option (Pull
    request #41).
  - cups-browsed: Moved auto-generation of PPD file for IPP
    network printers from create_remote_printer_entry()
    function to update_cups_queues(). This allows re-creating
    accidentally removed or overwritten local queues without
    losing the PPD file.
  - braille: Add option to pick hyphenation rule according to
    current locale and make it the default for second
    translation table. (Pull request #38 and #39).
  - braille: Remove generated defs on "make clean". (Pull request #38).
  - braille: Turn non-breakable spaces to spaces. (Pull request
    [#38] and #39).
  - braille: Fix character encoding when extracting text. When
    extracing text from a zip file or a pdf, the resulting text
    is always utf-8 independently of the original locale, so we
    need to force that. (Pull request #38).
  - braille: Warn when no text translation was selected in case
    the user didn't notice. (Pull request #37).
  - braille: Fix spurious spacing after last Form-Feed (Pull
    request #45).
- Drop pdftoopvp_Silence-compiler-warning.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1535630400">- Do not diferentiate for service location, it is in sbindir
  on all systems we support now
- Use license for license install
- Version update to 1.21.1:
  - foomatic-rip: Fixed segmentation fault caused by wrong
    Coverity Scan issue fix (Issue #57, Debian bug #907026).
  - Build system: Require QPDF 8.1.0 or later as it is needed by
    bannertopdf (Issue #56).
  - libcupsfilters, cups-browsed, driverless, foomatic-rip,
    parallel: Silenced warnings from newest gcc.
  - libcupsfilters: When generating a PPD for driverless
    printing on a remote IPP printer, make pdftopdf not being
    run by the local queue if the remote queue is a CUPS queue
    to avoid running pdftopdf twice (CUPS Issue #5361).
  - libcupsfilters, cups-browsed, driverless, bannertopdf,
    foomatic-rip, pdftops, pdftoraster, rastertops,
    rastertoescpx, sys5ippprinter, beh: Fixed Coverity Scan
    issues. Thanks to Zdenek Dohnal (zdohnal at redhat dot com)
    for the tests and the patches.
  - bannertopdf: Switched over from using Poppler to using QPDF
    for generating the PDF pages. With Poppler unstable APIs
    were used which were subject to change. Thanks to Sahil
    Arora for this project in the Google Summer of Code 2018
    (Pull request #25).
  - cups-browsed: Manually defined clusters ("Cluster" directive
    in cups-browsed.conf) caused cups-browsed to crash.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543406400">- Update to version 1.21.4:
  * cups-browsed: cups-browsed: Limit the number of retries for
    creating a print queue when it comes to HTTP timeouts. Number
    of retries given by HttpMaxRetries directive in
    cups-browsed.conf.
  * cups-browsed: Read out current time right before setting the
    timeouts.
  * libcupsfilters: In the PPD generator for driverless IPP
    printing let "*cupsManualCopies: true" lines get added to
    the PPD if printing is done in a raster format as then
    pdftopdf needs to generate the copies.
  * pdftoraster, pdftoopvp, pdftoijs: Fix build with
    Poppler &gt;= 0.70
  * pdftopdf: Fixed printing multiple copies on driverless IPP
    printers. When printing collated copies the multiple copies
    got applied twice, resulting in n*n instead of n copies.
  * pdftoraster, pdftoopvp, pdftoijs: Poppler removed memCheck
    and gMemReport functions, remove appropriate calls.
- Changes from version 1.21.3:
  * foomatic-rip: Reset stdin after replacing the underlying file
    descriptor.
- Changes from version 1.21.2:
  * cups-browsed: Fixed freeing of literal string caused by
    Coverity Scan issue fix.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545134400">- Update to version 1.21.6:
  * Bug fix release, mainly for cups-browsed to avoid crashes and
    infinite printer removal/re-creation loops and spurious local
    queues for local CUPS printers. Also expanded PostScript
    interpreter bug workaround to more Apple LaserWriter models.
  * cups-browsed: To find out whether a DNS-SD-discovered printer
    is from the local machine, use not only the flags in the Avahi
    lookup result but also check the host name.
  * cups-browsed: When a local CUPS queue pointing to a remote CUPS
    printer was removed and re-created to make it a permanent
    queue, on_printer_deleted() was triggered by cupsd's
    notification to re-create a lost queue. Now
    on_printer_deleted() checks whether the queue is really gone
    and only re-creates then.
  * cups-browsed: When updating the CUPS queues, also removed and
    unregistered queues and not only created queues got checked for
    HTTP timeouts, which caused crashes on shutdown.
  * pdftops: Use the PS interpreter of Poppler for all Apple
    LaserWriter 16/600, 4/600, 12/640, 12/600, 12/660 as they all
    seem to not work with Ghostscript's PS output.
  * cups-browsed: On shutdown queues got removed even if they still
    had jobs.
- Changes from version 1.21.5:
  * Bug fix release, to build with Poppler 0.71 and with
    cups-browsed converting temporary CUPS queues reliably to
    permanent queues.
  * cups-browsed: We cannot reliably determine whether a CUPS queue
    is temporary, so we apply the procedure to make a temporary
    queue permanent to any unshared queue.
  * pdftoraster, pdftopdf, pdftoijs, pdftoopvp: Do not use the
    Poppler-specific "GBool", "gFalse", "gTrue" any more, as
    Poppler has switched to standard "bool", "false", "true" in
    version 0.71.0.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546084800">- Fix building with Poppler 0.72
  Add 0001-Raise-minimum-poppler-version-from-0.18-to-0.19.patch
  Add 0002-Adapt-code-for-SplashXPathScanner-state-handling-sin.patch
  Add 0003-Support-some-more-methods-returning-const.patch
  Add 0004-Support-GooString-c_str-introduced-by-poppler-0.72.patch
  See https://github.com/OpenPrinting/cups-filters/pull/83</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548676800">- Update to version 1.22.0:
  * From this release on the pdftopdf filter flattens interactive
    PDF forms and annotations internally, using QPDF, instead of
    calling external utilities. This especially eliminates slowing
    factors as additional piping of the data and unneeded use of
    PDF interpreters. Using external utilities for flattening is
    still possible in case of problems. In addition, a crash bug in
    cups-browsed got fixed and compatibility of the filters with
    Poppler 0.72 assured.
- Drop upstream fixed patches:
  * 0001-Raise-minimum-poppler-version-from-0.18-to-0.19.patch
  * 0002-Adapt-code-for-SplashXPathScanner-state-handling-sin.patch
  * 0003-Support-some-more-methods-returning-const.patch
  * 0004-Support-GooString-c_str-introduced-by-poppler-0.72.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550664000">- Update to version 1.22.1:
  * braille: Use sort command with LC_ALL=C for reproducibility
    of the genrated files, needed for distribution packaging.
  * cups-browsed, driverless: When polling the printer's
    capabilities via get-printer-attributes IPP request for
    driverless printing, use the attributes "all" and
    "media-col-database". Without "all" some printers do not report
    "urf-supported" and without "media-col-database" not all paper
    size and marging info gets reported.
  * braille: Document how to rework output before embossing.</changelog>
  <changelog author="jsmeix@suse.de" date="1554724800">- Version upgrade to 1.22.5
  * foomatic-rip: Changed Ghostscript call to count pages in a
    PDF file to use "runpdfbegin" and not the undocumented
    Ghostscript internal "pdfdict", so that it works with
    Ghostscript 9.27 and later (Debian bug #926576,
    Arch Linux bug #62251, openSUSE boo#1131771,
    cups@cups.org mailing list thread
    https://lists.cups.org/pipermail/cups/2019-April/074563.html).
- Version upgrade to 1.22.4
  * cups-browsed: Fix broken trailing space removal on
    "NickName" (Pull request #103).
  * pdftops: Emit PostScript Level 2 instead of Level 3 for
    Brother PostScript printers as at least some of them
    report to support level 3 but ontly work with Level 2
    (Ubuntu bug #1306849, comment #42).
  * bannertopdf: When multiplying the page for N-up or Duplex
    printing one page too much was generated (Issue #102).
- Version upgrade to 1.22.3
  * libcupsfilters: Added error checks for processing GIF, to
    avoid crashes or hangs on broken GIF files (Issues #81, #82,
    Pull request #100).
  * cups-browsed: Added hint to the man page and configuration
    file that with "DebugLogging stderr" the logging output goes
    to journal or syslog if cups-browsed is running as system
    service (Issue #28).
- Version upgrade to 1.22.2
  * cups-browsed: Let distribution of jobs sent to queues with
    "implicitclass" backend (usually clusters) be done by a
    "job-state" CUPS notification and not by
    "printer-state-changed" any more. The "job-state"
    notification already contains the job ID. Before we had to
    poll the job ID from CUPS via IPP which was sometimes
    unreliable (Issue #97).
  * imagetopdf, imagetoraster, pdftopdf, libcupsfilters: Added
    new page scaling options: "fill" scales the input page
    (typically a photo) so that the output page (typically with
    different aspect ratio) gets completely filled, aloowing for
    some content of the input page getting lost. "crop-to-fit"
    allows for easy printing of documents on slightly different
    output page sizes (A4 &lt;-&gt; Letter) maintaining the size and
    centering and cropping into the destination page. Thanks to
    Dheeraj Yadav (dhirajyadav135 at gmail dot com) for the
    patch (Pull request #92).
  * cups-browsed: Do not do IPP request for printer-is-shared
    option for remote cups queues with CUPS 2.2.x and newer
    (Pull request #91).
  * cups-browsed: Fix crash bug when reading "Cluster"
    directive from configuration file (Issue #94).
  * driverless: Updated man page as now also Mopria and
    Wi-Fi Direct printers are supported. Mentioned also
    ippusbxd.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.23.0:
  * This release adds support for the "print-scaling" IPP attribute
    and has the code for the support of MuPDF as PDF renderer
    vastly simplified.
  * pdftops, mupdftoraster: Let pdftops call mutool directly and so
    that it directly outputs PostScript, eliminating the need to
    call the mupdftoraster and rastertops filters.
  * mupdftoraster: Reduced the use of temporary files from 3 to
    just one.
  * imagetopdf, imagetoraster, pdftopdf: Add support for
    print-scaling option.
- Changes from version 1.22.6:
  * Bug fix release, to address a further issue of cups-browsed
    removing user-created print queues, to make
    grayscale/monochrome PostScript jobs of colored input file
    actually output grayscale/monochrome files, to fix several bugs
    when using MuPDF as PDF renderer, and to silence compiler
    warnings.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559908800">- Update to version 1.25.0:
  * pdftoijs, pdftoopvp: Removed these deprecated filters
    completely as there is no demand for them any more. They also
    used unstable, undocumented APIs of Poppler.
  * pdftoraster: Changed from using unstable, undocumented APIs of
    Poppler to stable, documented ones, to improve maintainability
    of this filter, and with it of the cups-filters package.
  * libcupsfilters: Added support for color spaces CMY and RGBW
    when using filters without PPD file (mainly for development and
    debugging, option "print-color-mode" with values "cmy-XX" and
    "rgbw-XX" with XX being the number of bits per color).
- Changes from version 1.24.0:
  * cups-browsed: Integration of Deepak Patankar's Google Summer of
    Code 2018 project with the main goal of clustering different
    printers and automatically selecting the destination printers
    by job content and option/attribute settings.
  * cups-browsed, implicitclass: Support for mixed clusters of
    remote CUPS queues and IPP network printers. For this PPD files
    of remote CUPS queues are generated by cups-browsed based on
    IPP queries, as for native IPP printers, the number of jobs for
    load balancing is polled in a way that it works also with
    native IPP printers, the implicitclass backend sends jobs
    directly to the printer instead of re-queueing them via CUPS.
  * cups-browsed: Merge IPP attributes of several printers to
    combined attributes for the cluster to generate the cluster's
    PPD file, including PPD constraints for option combinations not
    fulfillable by any of the member printers, and finding
    reasonable, non-conflicting default settings.
  * cups-browsed: Selection algorithm for the destination printer
    for a job sent to the cluster. Based on the job settings
    requested such as page size, media type, print quality, the
    best most suitable printer in the cluster for the job will be
    selected.
  * cups-browsed, implicitclass: Filter jobs to clusters already
    locally. Due to the fact that a cluster's member printers are
    not exclusively non-raw CUPS queues with the complete filtering
    framework on the remote server, but also native IPP printers,
    we need to support generic driverless printers as destination.
    So we cannot pass on the input data unfiltered but need to
    filter locally. We let the cluster's PPD file emulate a PDF
    printer, letting the local CUPS queue of the cluster run
    pdftopdf and any pre-filters to turn the input into PDF and we
    let the implicitclass backend turn PDF into a format understood
    by the destination printer, supporting the 4 formats of
    driverless IPP printing: PDF, PWG Raster, Apple Raster, PCLm.
- Drop libpoppler-cpp0, libpoppler-devel and libpoppler-glib-devel
  BuildRequires.
- Add pkgconfig(poppler-cpp) BuildRequires following upstream
  changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="idonmez@suse.com" date="1567512000">- Add add-cstring-include.patch to include cstring for memcpy
  and strcmp</changelog>
  <changelog author="jsmeix@suse.de" date="1618488000">- fix_upstream_issue348.patch fixes
  https://github.com/OpenPrinting/cups-filters/issues/348
  foomatic-rip segfaults with 'job-sheets=none,none'
  but works with 'job-sheets=none'
  (bsc#1182893)</changelog>
  <changelog author="jsmeix@suse.com" date="1684152000">- cups-filters-1.25.0-0001-beh-backend-Use-execv-instead-of-system-CVE-2023-24805.patch
  cups-filters-1.25.0-0002-beh-backend-Extra-checks-against-odd-forged-input-CVE-2023-24805.patch
  cups-filters-1.25.0-0003-beh-backend-Further-improvements-CVE-2023-24805.patch
  are the upstream
  0001-beh-backend-Use-execv-instead-of-system-CVE-2023-24805.patch
  0002-beh-backend-Extra-checks-against-odd-forged-input-CVE-2023-24805.patch
  0003-beh-backend-Further-improvements-CVE-2023-24805.patch
  backpported to cups-filters-1.25.0
  to fix CVE-2023-24805: RCE in cups-filters, beh CUPS backend
  (bsc#1211340)</changelog>
  <changelog author="tabraham@suse.com" date="1684756800">- gstoraster-gstopdf-Make-number-of-copies-as-embedded.patch fixes
  https://github.com/OpenPrinting/cups-filters/issues/255
  Printing multiple copies prints only 1 (pstopdf vs gstopdf)
  (bsc#1211401) (boo#1173345)</changelog>
  <changelog author="jsmeix@suse.com" date="1720008000">- bsc1225040.patch fixes bsc#1225040
  "cups-filters: Poppler for color PDF as grayscale via PS level 1:
  huge output makes printing slow"
  see https://github.com/OpenPrinting/cups-filters/issues/169
  Poppler for color PDF as grayscale via PS level 1 was introduced
  in cups-filters 1.22.6 via
  https://github.com/OpenPrinting/cups-filters/commit/48f9f994322c808ba2e9d0db6f3ff81caf8c0b72
  and disabled in cups-filters 1.25.12 via
  https://github.com/OpenPrinting/cups-filters/commit/0818ee322a6139be11d21fc76db345de1e979339</changelog>
  <changelog author="sflees@suse.de" date="1727697600">- cups-filters-1.25.0-0001-remove-cups-browsed-CVE-2024-47176.patch
  The cups-browsed binds on UDP INADDR_ANY:631 trusts any packet
  from any source to trigger a Get-Printer-Attributes IPP request
  to an attacker controlled URL. (bsc#1230939, CVE-2024-47176)</changelog>
  <changelog author="jsmeix@suse.com" date="1728561600">- cups-filters-1.25.0-CVE-2024-47076.patch is the upstream
  https://github.com/OpenPrinting/libcupsfilters/commit/95576ec3
  backported to cups-filters 1.25.0 to fix CVE-2024-47076
  "lack of input sanitization in get_printer_attributes"
  (bsc#1230937)
- cups-filters-1.25.0-0001-remove-cups-browsed-CVE-2024-47176.patch
  also avoids CVE-2024-47850
  "cups-browsed can be abused to initiate remote DDoS"
  (bsc#1231294)
- In general regarding CUPS and cups-browsed security issues like
  CVE-2024-47076 CVE-2024-47176 CVE-2024-47850 see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-filters-1.25.0-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to cups-filters 1.25.0 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1763121600">- cups-filters-1.25.0-CVE-2025-64503.patch is
  https://github.com/OpenPrinting/cups-filters/commit/50d94ca0f2fa6177613c97c59791bde568631865
  for cups-filters 1.25.0 to fix CVE-2025-64503
  "out-of-bounds write in pdftoraster tool" (bsc#1253374), see
  https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-893j-2wr2-wrh9
- cups-filters-1.25.0-CVE-2025-57812.patch is
  https://github.com/OpenPrinting/cups-filters/commit/cb927006747b797aa9163cd0cbd41b9bbdf05db0
  https://github.com/OpenPrinting/cups-filters/commit/7bd588a1fc5c99ac0b1951beb1b54b438137a7b5
  https://github.com/OpenPrinting/cups-filters/commit/719c557c9a29db32b855e6e108d7f4e7c5397613
  https://github.com/OpenPrinting/cups-filters/commit/5122052dd8f06949242099401c59f6c3b14e61c3
  https://github.com/OpenPrinting/cups-filters/commit/5e5f1c5d46a043c57cbbe6e043aa95896d9c40fa
  for cups-filters 1.25.0 to fix CVE-2025-57812
  "multiple TIFF-related issues" (bsc#1253373), see
  https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-jpxg-qc2c-hgv4
  https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-rc6w-jmvv-v7gx
  https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-fmvr-45mx-43c6
- cups-filters-1.25.0-CVE-2025-64524.patch is from
  https://bugzilla.suse.com/attachment.cgi?id=886866 in bsc#1253364
  for cups-filters 1.25.0 to fix CVE-2025-64524
  "use of unvalidated length parameter in the rastertopclx filter
  can lead to an out-of-bounds write", see
  https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-rq44-2q5p-x3hv
- In general regarding cups-filters security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
</package>
<package pkgid="c7bb156fab01861311781e229d18619c02f931385312c89831927a7f10c719fd" name="cups-filters" arch="src">
  <version epoch="0" ver="1.25.0" rel="150200.3.28.1"/>
  <changelog author="tchvatal@suse.com" date="1535630400">- Do not diferentiate for service location, it is in sbindir
  on all systems we support now
- Use license for license install
- Version update to 1.21.1:
  - foomatic-rip: Fixed segmentation fault caused by wrong
    Coverity Scan issue fix (Issue #57, Debian bug #907026).
  - Build system: Require QPDF 8.1.0 or later as it is needed by
    bannertopdf (Issue #56).
  - libcupsfilters, cups-browsed, driverless, foomatic-rip,
    parallel: Silenced warnings from newest gcc.
  - libcupsfilters: When generating a PPD for driverless
    printing on a remote IPP printer, make pdftopdf not being
    run by the local queue if the remote queue is a CUPS queue
    to avoid running pdftopdf twice (CUPS Issue #5361).
  - libcupsfilters, cups-browsed, driverless, bannertopdf,
    foomatic-rip, pdftops, pdftoraster, rastertops,
    rastertoescpx, sys5ippprinter, beh: Fixed Coverity Scan
    issues. Thanks to Zdenek Dohnal (zdohnal at redhat dot com)
    for the tests and the patches.
  - bannertopdf: Switched over from using Poppler to using QPDF
    for generating the PDF pages. With Poppler unstable APIs
    were used which were subject to change. Thanks to Sahil
    Arora for this project in the Google Summer of Code 2018
    (Pull request #25).
  - cups-browsed: Manually defined clusters ("Cluster" directive
    in cups-browsed.conf) caused cups-browsed to crash.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543406400">- Update to version 1.21.4:
  * cups-browsed: cups-browsed: Limit the number of retries for
    creating a print queue when it comes to HTTP timeouts. Number
    of retries given by HttpMaxRetries directive in
    cups-browsed.conf.
  * cups-browsed: Read out current time right before setting the
    timeouts.
  * libcupsfilters: In the PPD generator for driverless IPP
    printing let "*cupsManualCopies: true" lines get added to
    the PPD if printing is done in a raster format as then
    pdftopdf needs to generate the copies.
  * pdftoraster, pdftoopvp, pdftoijs: Fix build with
    Poppler &gt;= 0.70
  * pdftopdf: Fixed printing multiple copies on driverless IPP
    printers. When printing collated copies the multiple copies
    got applied twice, resulting in n*n instead of n copies.
  * pdftoraster, pdftoopvp, pdftoijs: Poppler removed memCheck
    and gMemReport functions, remove appropriate calls.
- Changes from version 1.21.3:
  * foomatic-rip: Reset stdin after replacing the underlying file
    descriptor.
- Changes from version 1.21.2:
  * cups-browsed: Fixed freeing of literal string caused by
    Coverity Scan issue fix.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545134400">- Update to version 1.21.6:
  * Bug fix release, mainly for cups-browsed to avoid crashes and
    infinite printer removal/re-creation loops and spurious local
    queues for local CUPS printers. Also expanded PostScript
    interpreter bug workaround to more Apple LaserWriter models.
  * cups-browsed: To find out whether a DNS-SD-discovered printer
    is from the local machine, use not only the flags in the Avahi
    lookup result but also check the host name.
  * cups-browsed: When a local CUPS queue pointing to a remote CUPS
    printer was removed and re-created to make it a permanent
    queue, on_printer_deleted() was triggered by cupsd's
    notification to re-create a lost queue. Now
    on_printer_deleted() checks whether the queue is really gone
    and only re-creates then.
  * cups-browsed: When updating the CUPS queues, also removed and
    unregistered queues and not only created queues got checked for
    HTTP timeouts, which caused crashes on shutdown.
  * pdftops: Use the PS interpreter of Poppler for all Apple
    LaserWriter 16/600, 4/600, 12/640, 12/600, 12/660 as they all
    seem to not work with Ghostscript's PS output.
  * cups-browsed: On shutdown queues got removed even if they still
    had jobs.
- Changes from version 1.21.5:
  * Bug fix release, to build with Poppler 0.71 and with
    cups-browsed converting temporary CUPS queues reliably to
    permanent queues.
  * cups-browsed: We cannot reliably determine whether a CUPS queue
    is temporary, so we apply the procedure to make a temporary
    queue permanent to any unshared queue.
  * pdftoraster, pdftopdf, pdftoijs, pdftoopvp: Do not use the
    Poppler-specific "GBool", "gFalse", "gTrue" any more, as
    Poppler has switched to standard "bool", "false", "true" in
    version 0.71.0.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546084800">- Fix building with Poppler 0.72
  Add 0001-Raise-minimum-poppler-version-from-0.18-to-0.19.patch
  Add 0002-Adapt-code-for-SplashXPathScanner-state-handling-sin.patch
  Add 0003-Support-some-more-methods-returning-const.patch
  Add 0004-Support-GooString-c_str-introduced-by-poppler-0.72.patch
  See https://github.com/OpenPrinting/cups-filters/pull/83</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548676800">- Update to version 1.22.0:
  * From this release on the pdftopdf filter flattens interactive
    PDF forms and annotations internally, using QPDF, instead of
    calling external utilities. This especially eliminates slowing
    factors as additional piping of the data and unneeded use of
    PDF interpreters. Using external utilities for flattening is
    still possible in case of problems. In addition, a crash bug in
    cups-browsed got fixed and compatibility of the filters with
    Poppler 0.72 assured.
- Drop upstream fixed patches:
  * 0001-Raise-minimum-poppler-version-from-0.18-to-0.19.patch
  * 0002-Adapt-code-for-SplashXPathScanner-state-handling-sin.patch
  * 0003-Support-some-more-methods-returning-const.patch
  * 0004-Support-GooString-c_str-introduced-by-poppler-0.72.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550664000">- Update to version 1.22.1:
  * braille: Use sort command with LC_ALL=C for reproducibility
    of the genrated files, needed for distribution packaging.
  * cups-browsed, driverless: When polling the printer's
    capabilities via get-printer-attributes IPP request for
    driverless printing, use the attributes "all" and
    "media-col-database". Without "all" some printers do not report
    "urf-supported" and without "media-col-database" not all paper
    size and marging info gets reported.
  * braille: Document how to rework output before embossing.</changelog>
  <changelog author="jsmeix@suse.de" date="1554724800">- Version upgrade to 1.22.5
  * foomatic-rip: Changed Ghostscript call to count pages in a
    PDF file to use "runpdfbegin" and not the undocumented
    Ghostscript internal "pdfdict", so that it works with
    Ghostscript 9.27 and later (Debian bug #926576,
    Arch Linux bug #62251, openSUSE boo#1131771,
    cups@cups.org mailing list thread
    https://lists.cups.org/pipermail/cups/2019-April/074563.html).
- Version upgrade to 1.22.4
  * cups-browsed: Fix broken trailing space removal on
    "NickName" (Pull request #103).
  * pdftops: Emit PostScript Level 2 instead of Level 3 for
    Brother PostScript printers as at least some of them
    report to support level 3 but ontly work with Level 2
    (Ubuntu bug #1306849, comment #42).
  * bannertopdf: When multiplying the page for N-up or Duplex
    printing one page too much was generated (Issue #102).
- Version upgrade to 1.22.3
  * libcupsfilters: Added error checks for processing GIF, to
    avoid crashes or hangs on broken GIF files (Issues #81, #82,
    Pull request #100).
  * cups-browsed: Added hint to the man page and configuration
    file that with "DebugLogging stderr" the logging output goes
    to journal or syslog if cups-browsed is running as system
    service (Issue #28).
- Version upgrade to 1.22.2
  * cups-browsed: Let distribution of jobs sent to queues with
    "implicitclass" backend (usually clusters) be done by a
    "job-state" CUPS notification and not by
    "printer-state-changed" any more. The "job-state"
    notification already contains the job ID. Before we had to
    poll the job ID from CUPS via IPP which was sometimes
    unreliable (Issue #97).
  * imagetopdf, imagetoraster, pdftopdf, libcupsfilters: Added
    new page scaling options: "fill" scales the input page
    (typically a photo) so that the output page (typically with
    different aspect ratio) gets completely filled, aloowing for
    some content of the input page getting lost. "crop-to-fit"
    allows for easy printing of documents on slightly different
    output page sizes (A4 &lt;-&gt; Letter) maintaining the size and
    centering and cropping into the destination page. Thanks to
    Dheeraj Yadav (dhirajyadav135 at gmail dot com) for the
    patch (Pull request #92).
  * cups-browsed: Do not do IPP request for printer-is-shared
    option for remote cups queues with CUPS 2.2.x and newer
    (Pull request #91).
  * cups-browsed: Fix crash bug when reading "Cluster"
    directive from configuration file (Issue #94).
  * driverless: Updated man page as now also Mopria and
    Wi-Fi Direct printers are supported. Mentioned also
    ippusbxd.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.23.0:
  * This release adds support for the "print-scaling" IPP attribute
    and has the code for the support of MuPDF as PDF renderer
    vastly simplified.
  * pdftops, mupdftoraster: Let pdftops call mutool directly and so
    that it directly outputs PostScript, eliminating the need to
    call the mupdftoraster and rastertops filters.
  * mupdftoraster: Reduced the use of temporary files from 3 to
    just one.
  * imagetopdf, imagetoraster, pdftopdf: Add support for
    print-scaling option.
- Changes from version 1.22.6:
  * Bug fix release, to address a further issue of cups-browsed
    removing user-created print queues, to make
    grayscale/monochrome PostScript jobs of colored input file
    actually output grayscale/monochrome files, to fix several bugs
    when using MuPDF as PDF renderer, and to silence compiler
    warnings.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559908800">- Update to version 1.25.0:
  * pdftoijs, pdftoopvp: Removed these deprecated filters
    completely as there is no demand for them any more. They also
    used unstable, undocumented APIs of Poppler.
  * pdftoraster: Changed from using unstable, undocumented APIs of
    Poppler to stable, documented ones, to improve maintainability
    of this filter, and with it of the cups-filters package.
  * libcupsfilters: Added support for color spaces CMY and RGBW
    when using filters without PPD file (mainly for development and
    debugging, option "print-color-mode" with values "cmy-XX" and
    "rgbw-XX" with XX being the number of bits per color).
- Changes from version 1.24.0:
  * cups-browsed: Integration of Deepak Patankar's Google Summer of
    Code 2018 project with the main goal of clustering different
    printers and automatically selecting the destination printers
    by job content and option/attribute settings.
  * cups-browsed, implicitclass: Support for mixed clusters of
    remote CUPS queues and IPP network printers. For this PPD files
    of remote CUPS queues are generated by cups-browsed based on
    IPP queries, as for native IPP printers, the number of jobs for
    load balancing is polled in a way that it works also with
    native IPP printers, the implicitclass backend sends jobs
    directly to the printer instead of re-queueing them via CUPS.
  * cups-browsed: Merge IPP attributes of several printers to
    combined attributes for the cluster to generate the cluster's
    PPD file, including PPD constraints for option combinations not
    fulfillable by any of the member printers, and finding
    reasonable, non-conflicting default settings.
  * cups-browsed: Selection algorithm for the destination printer
    for a job sent to the cluster. Based on the job settings
    requested such as page size, media type, print quality, the
    best most suitable printer in the cluster for the job will be
    selected.
  * cups-browsed, implicitclass: Filter jobs to clusters already
    locally. Due to the fact that a cluster's member printers are
    not exclusively non-raw CUPS queues with the complete filtering
    framework on the remote server, but also native IPP printers,
    we need to support generic driverless printers as destination.
    So we cannot pass on the input data unfiltered but need to
    filter locally. We let the cluster's PPD file emulate a PDF
    printer, letting the local CUPS queue of the cluster run
    pdftopdf and any pre-filters to turn the input into PDF and we
    let the implicitclass backend turn PDF into a format understood
    by the destination printer, supporting the 4 formats of
    driverless IPP printing: PDF, PWG Raster, Apple Raster, PCLm.
- Drop libpoppler-cpp0, libpoppler-devel and libpoppler-glib-devel
  BuildRequires.
- Add pkgconfig(poppler-cpp) BuildRequires following upstream
  changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="idonmez@suse.com" date="1567512000">- Add add-cstring-include.patch to include cstring for memcpy
  and strcmp</changelog>
  <changelog author="jsmeix@suse.de" date="1618488000">- fix_upstream_issue348.patch fixes
  https://github.com/OpenPrinting/cups-filters/issues/348
  foomatic-rip segfaults with 'job-sheets=none,none'
  but works with 'job-sheets=none'
  (bsc#1182893)</changelog>
  <changelog author="jsmeix@suse.com" date="1684152000">- cups-filters-1.25.0-0001-beh-backend-Use-execv-instead-of-system-CVE-2023-24805.patch
  cups-filters-1.25.0-0002-beh-backend-Extra-checks-against-odd-forged-input-CVE-2023-24805.patch
  cups-filters-1.25.0-0003-beh-backend-Further-improvements-CVE-2023-24805.patch
  are the upstream
  0001-beh-backend-Use-execv-instead-of-system-CVE-2023-24805.patch
  0002-beh-backend-Extra-checks-against-odd-forged-input-CVE-2023-24805.patch
  0003-beh-backend-Further-improvements-CVE-2023-24805.patch
  backpported to cups-filters-1.25.0
  to fix CVE-2023-24805: RCE in cups-filters, beh CUPS backend
  (bsc#1211340)</changelog>
  <changelog author="tabraham@suse.com" date="1684756800">- gstoraster-gstopdf-Make-number-of-copies-as-embedded.patch fixes
  https://github.com/OpenPrinting/cups-filters/issues/255
  Printing multiple copies prints only 1 (pstopdf vs gstopdf)
  (bsc#1211401) (boo#1173345)</changelog>
  <changelog author="jsmeix@suse.com" date="1720008000">- bsc1225040.patch fixes bsc#1225040
  "cups-filters: Poppler for color PDF as grayscale via PS level 1:
  huge output makes printing slow"
  see https://github.com/OpenPrinting/cups-filters/issues/169
  Poppler for color PDF as grayscale via PS level 1 was introduced
  in cups-filters 1.22.6 via
  https://github.com/OpenPrinting/cups-filters/commit/48f9f994322c808ba2e9d0db6f3ff81caf8c0b72
  and disabled in cups-filters 1.25.12 via
  https://github.com/OpenPrinting/cups-filters/commit/0818ee322a6139be11d21fc76db345de1e979339</changelog>
  <changelog author="sflees@suse.de" date="1727697600">- cups-filters-1.25.0-0001-remove-cups-browsed-CVE-2024-47176.patch
  The cups-browsed binds on UDP INADDR_ANY:631 trusts any packet
  from any source to trigger a Get-Printer-Attributes IPP request
  to an attacker controlled URL. (bsc#1230939, CVE-2024-47176)</changelog>
  <changelog author="jsmeix@suse.com" date="1728561600">- cups-filters-1.25.0-CVE-2024-47076.patch is the upstream
  https://github.com/OpenPrinting/libcupsfilters/commit/95576ec3
  backported to cups-filters 1.25.0 to fix CVE-2024-47076
  "lack of input sanitization in get_printer_attributes"
  (bsc#1230937)
- cups-filters-1.25.0-0001-remove-cups-browsed-CVE-2024-47176.patch
  also avoids CVE-2024-47850
  "cups-browsed can be abused to initiate remote DDoS"
  (bsc#1231294)
- In general regarding CUPS and cups-browsed security issues like
  CVE-2024-47076 CVE-2024-47176 CVE-2024-47850 see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-filters-1.25.0-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to cups-filters 1.25.0 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1763121600">- cups-filters-1.25.0-CVE-2025-64503.patch is
  https://github.com/OpenPrinting/cups-filters/commit/50d94ca0f2fa6177613c97c59791bde568631865
  for cups-filters 1.25.0 to fix CVE-2025-64503
  "out-of-bounds write in pdftoraster tool" (bsc#1253374), see
  https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-893j-2wr2-wrh9
- cups-filters-1.25.0-CVE-2025-57812.patch is
  https://github.com/OpenPrinting/cups-filters/commit/cb927006747b797aa9163cd0cbd41b9bbdf05db0
  https://github.com/OpenPrinting/cups-filters/commit/7bd588a1fc5c99ac0b1951beb1b54b438137a7b5
  https://github.com/OpenPrinting/cups-filters/commit/719c557c9a29db32b855e6e108d7f4e7c5397613
  https://github.com/OpenPrinting/cups-filters/commit/5122052dd8f06949242099401c59f6c3b14e61c3
  https://github.com/OpenPrinting/cups-filters/commit/5e5f1c5d46a043c57cbbe6e043aa95896d9c40fa
  for cups-filters 1.25.0 to fix CVE-2025-57812
  "multiple TIFF-related issues" (bsc#1253373), see
  https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-jpxg-qc2c-hgv4
  https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-rc6w-jmvv-v7gx
  https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-fmvr-45mx-43c6
- cups-filters-1.25.0-CVE-2025-64524.patch is from
  https://bugzilla.suse.com/attachment.cgi?id=886866 in bsc#1253364
  for cups-filters 1.25.0 to fix CVE-2025-64524
  "use of unvalidated length parameter in the rastertopclx filter
  can lead to an out-of-bounds write", see
  https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-rq44-2q5p-x3hv
- In general regarding cups-filters security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1770811200">- Updated cups-filters-1.28.17-CVE-2024-47175.patch
  because the former version caused a regression
  "Error about PPD file during 'driverless' printer setup"
  (boo#1256868) and
  "ppd pull out from [driverless] printer feature broken"
  (bsc#1256977)</changelog>
</package>
<package pkgid="e3e0d69698facc821f5b3e21727065a6ab41e9bc4faea142e310cd2bc4596f73" name="cups-filters" arch="x86_64">
  <version epoch="0" ver="1.25.0" rel="150200.3.28.1"/>
  <changelog author="tchvatal@suse.com" date="1535630400">- Do not diferentiate for service location, it is in sbindir
  on all systems we support now
- Use license for license install
- Version update to 1.21.1:
  - foomatic-rip: Fixed segmentation fault caused by wrong
    Coverity Scan issue fix (Issue #57, Debian bug #907026).
  - Build system: Require QPDF 8.1.0 or later as it is needed by
    bannertopdf (Issue #56).
  - libcupsfilters, cups-browsed, driverless, foomatic-rip,
    parallel: Silenced warnings from newest gcc.
  - libcupsfilters: When generating a PPD for driverless
    printing on a remote IPP printer, make pdftopdf not being
    run by the local queue if the remote queue is a CUPS queue
    to avoid running pdftopdf twice (CUPS Issue #5361).
  - libcupsfilters, cups-browsed, driverless, bannertopdf,
    foomatic-rip, pdftops, pdftoraster, rastertops,
    rastertoescpx, sys5ippprinter, beh: Fixed Coverity Scan
    issues. Thanks to Zdenek Dohnal (zdohnal at redhat dot com)
    for the tests and the patches.
  - bannertopdf: Switched over from using Poppler to using QPDF
    for generating the PDF pages. With Poppler unstable APIs
    were used which were subject to change. Thanks to Sahil
    Arora for this project in the Google Summer of Code 2018
    (Pull request #25).
  - cups-browsed: Manually defined clusters ("Cluster" directive
    in cups-browsed.conf) caused cups-browsed to crash.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543406400">- Update to version 1.21.4:
  * cups-browsed: cups-browsed: Limit the number of retries for
    creating a print queue when it comes to HTTP timeouts. Number
    of retries given by HttpMaxRetries directive in
    cups-browsed.conf.
  * cups-browsed: Read out current time right before setting the
    timeouts.
  * libcupsfilters: In the PPD generator for driverless IPP
    printing let "*cupsManualCopies: true" lines get added to
    the PPD if printing is done in a raster format as then
    pdftopdf needs to generate the copies.
  * pdftoraster, pdftoopvp, pdftoijs: Fix build with
    Poppler &gt;= 0.70
  * pdftopdf: Fixed printing multiple copies on driverless IPP
    printers. When printing collated copies the multiple copies
    got applied twice, resulting in n*n instead of n copies.
  * pdftoraster, pdftoopvp, pdftoijs: Poppler removed memCheck
    and gMemReport functions, remove appropriate calls.
- Changes from version 1.21.3:
  * foomatic-rip: Reset stdin after replacing the underlying file
    descriptor.
- Changes from version 1.21.2:
  * cups-browsed: Fixed freeing of literal string caused by
    Coverity Scan issue fix.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545134400">- Update to version 1.21.6:
  * Bug fix release, mainly for cups-browsed to avoid crashes and
    infinite printer removal/re-creation loops and spurious local
    queues for local CUPS printers. Also expanded PostScript
    interpreter bug workaround to more Apple LaserWriter models.
  * cups-browsed: To find out whether a DNS-SD-discovered printer
    is from the local machine, use not only the flags in the Avahi
    lookup result but also check the host name.
  * cups-browsed: When a local CUPS queue pointing to a remote CUPS
    printer was removed and re-created to make it a permanent
    queue, on_printer_deleted() was triggered by cupsd's
    notification to re-create a lost queue. Now
    on_printer_deleted() checks whether the queue is really gone
    and only re-creates then.
  * cups-browsed: When updating the CUPS queues, also removed and
    unregistered queues and not only created queues got checked for
    HTTP timeouts, which caused crashes on shutdown.
  * pdftops: Use the PS interpreter of Poppler for all Apple
    LaserWriter 16/600, 4/600, 12/640, 12/600, 12/660 as they all
    seem to not work with Ghostscript's PS output.
  * cups-browsed: On shutdown queues got removed even if they still
    had jobs.
- Changes from version 1.21.5:
  * Bug fix release, to build with Poppler 0.71 and with
    cups-browsed converting temporary CUPS queues reliably to
    permanent queues.
  * cups-browsed: We cannot reliably determine whether a CUPS queue
    is temporary, so we apply the procedure to make a temporary
    queue permanent to any unshared queue.
  * pdftoraster, pdftopdf, pdftoijs, pdftoopvp: Do not use the
    Poppler-specific "GBool", "gFalse", "gTrue" any more, as
    Poppler has switched to standard "bool", "false", "true" in
    version 0.71.0.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546084800">- Fix building with Poppler 0.72
  Add 0001-Raise-minimum-poppler-version-from-0.18-to-0.19.patch
  Add 0002-Adapt-code-for-SplashXPathScanner-state-handling-sin.patch
  Add 0003-Support-some-more-methods-returning-const.patch
  Add 0004-Support-GooString-c_str-introduced-by-poppler-0.72.patch
  See https://github.com/OpenPrinting/cups-filters/pull/83</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548676800">- Update to version 1.22.0:
  * From this release on the pdftopdf filter flattens interactive
    PDF forms and annotations internally, using QPDF, instead of
    calling external utilities. This especially eliminates slowing
    factors as additional piping of the data and unneeded use of
    PDF interpreters. Using external utilities for flattening is
    still possible in case of problems. In addition, a crash bug in
    cups-browsed got fixed and compatibility of the filters with
    Poppler 0.72 assured.
- Drop upstream fixed patches:
  * 0001-Raise-minimum-poppler-version-from-0.18-to-0.19.patch
  * 0002-Adapt-code-for-SplashXPathScanner-state-handling-sin.patch
  * 0003-Support-some-more-methods-returning-const.patch
  * 0004-Support-GooString-c_str-introduced-by-poppler-0.72.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550664000">- Update to version 1.22.1:
  * braille: Use sort command with LC_ALL=C for reproducibility
    of the genrated files, needed for distribution packaging.
  * cups-browsed, driverless: When polling the printer's
    capabilities via get-printer-attributes IPP request for
    driverless printing, use the attributes "all" and
    "media-col-database". Without "all" some printers do not report
    "urf-supported" and without "media-col-database" not all paper
    size and marging info gets reported.
  * braille: Document how to rework output before embossing.</changelog>
  <changelog author="jsmeix@suse.de" date="1554724800">- Version upgrade to 1.22.5
  * foomatic-rip: Changed Ghostscript call to count pages in a
    PDF file to use "runpdfbegin" and not the undocumented
    Ghostscript internal "pdfdict", so that it works with
    Ghostscript 9.27 and later (Debian bug #926576,
    Arch Linux bug #62251, openSUSE boo#1131771,
    cups@cups.org mailing list thread
    https://lists.cups.org/pipermail/cups/2019-April/074563.html).
- Version upgrade to 1.22.4
  * cups-browsed: Fix broken trailing space removal on
    "NickName" (Pull request #103).
  * pdftops: Emit PostScript Level 2 instead of Level 3 for
    Brother PostScript printers as at least some of them
    report to support level 3 but ontly work with Level 2
    (Ubuntu bug #1306849, comment #42).
  * bannertopdf: When multiplying the page for N-up or Duplex
    printing one page too much was generated (Issue #102).
- Version upgrade to 1.22.3
  * libcupsfilters: Added error checks for processing GIF, to
    avoid crashes or hangs on broken GIF files (Issues #81, #82,
    Pull request #100).
  * cups-browsed: Added hint to the man page and configuration
    file that with "DebugLogging stderr" the logging output goes
    to journal or syslog if cups-browsed is running as system
    service (Issue #28).
- Version upgrade to 1.22.2
  * cups-browsed: Let distribution of jobs sent to queues with
    "implicitclass" backend (usually clusters) be done by a
    "job-state" CUPS notification and not by
    "printer-state-changed" any more. The "job-state"
    notification already contains the job ID. Before we had to
    poll the job ID from CUPS via IPP which was sometimes
    unreliable (Issue #97).
  * imagetopdf, imagetoraster, pdftopdf, libcupsfilters: Added
    new page scaling options: "fill" scales the input page
    (typically a photo) so that the output page (typically with
    different aspect ratio) gets completely filled, aloowing for
    some content of the input page getting lost. "crop-to-fit"
    allows for easy printing of documents on slightly different
    output page sizes (A4 &lt;-&gt; Letter) maintaining the size and
    centering and cropping into the destination page. Thanks to
    Dheeraj Yadav (dhirajyadav135 at gmail dot com) for the
    patch (Pull request #92).
  * cups-browsed: Do not do IPP request for printer-is-shared
    option for remote cups queues with CUPS 2.2.x and newer
    (Pull request #91).
  * cups-browsed: Fix crash bug when reading "Cluster"
    directive from configuration file (Issue #94).
  * driverless: Updated man page as now also Mopria and
    Wi-Fi Direct printers are supported. Mentioned also
    ippusbxd.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.23.0:
  * This release adds support for the "print-scaling" IPP attribute
    and has the code for the support of MuPDF as PDF renderer
    vastly simplified.
  * pdftops, mupdftoraster: Let pdftops call mutool directly and so
    that it directly outputs PostScript, eliminating the need to
    call the mupdftoraster and rastertops filters.
  * mupdftoraster: Reduced the use of temporary files from 3 to
    just one.
  * imagetopdf, imagetoraster, pdftopdf: Add support for
    print-scaling option.
- Changes from version 1.22.6:
  * Bug fix release, to address a further issue of cups-browsed
    removing user-created print queues, to make
    grayscale/monochrome PostScript jobs of colored input file
    actually output grayscale/monochrome files, to fix several bugs
    when using MuPDF as PDF renderer, and to silence compiler
    warnings.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559908800">- Update to version 1.25.0:
  * pdftoijs, pdftoopvp: Removed these deprecated filters
    completely as there is no demand for them any more. They also
    used unstable, undocumented APIs of Poppler.
  * pdftoraster: Changed from using unstable, undocumented APIs of
    Poppler to stable, documented ones, to improve maintainability
    of this filter, and with it of the cups-filters package.
  * libcupsfilters: Added support for color spaces CMY and RGBW
    when using filters without PPD file (mainly for development and
    debugging, option "print-color-mode" with values "cmy-XX" and
    "rgbw-XX" with XX being the number of bits per color).
- Changes from version 1.24.0:
  * cups-browsed: Integration of Deepak Patankar's Google Summer of
    Code 2018 project with the main goal of clustering different
    printers and automatically selecting the destination printers
    by job content and option/attribute settings.
  * cups-browsed, implicitclass: Support for mixed clusters of
    remote CUPS queues and IPP network printers. For this PPD files
    of remote CUPS queues are generated by cups-browsed based on
    IPP queries, as for native IPP printers, the number of jobs for
    load balancing is polled in a way that it works also with
    native IPP printers, the implicitclass backend sends jobs
    directly to the printer instead of re-queueing them via CUPS.
  * cups-browsed: Merge IPP attributes of several printers to
    combined attributes for the cluster to generate the cluster's
    PPD file, including PPD constraints for option combinations not
    fulfillable by any of the member printers, and finding
    reasonable, non-conflicting default settings.
  * cups-browsed: Selection algorithm for the destination printer
    for a job sent to the cluster. Based on the job settings
    requested such as page size, media type, print quality, the
    best most suitable printer in the cluster for the job will be
    selected.
  * cups-browsed, implicitclass: Filter jobs to clusters already
    locally. Due to the fact that a cluster's member printers are
    not exclusively non-raw CUPS queues with the complete filtering
    framework on the remote server, but also native IPP printers,
    we need to support generic driverless printers as destination.
    So we cannot pass on the input data unfiltered but need to
    filter locally. We let the cluster's PPD file emulate a PDF
    printer, letting the local CUPS queue of the cluster run
    pdftopdf and any pre-filters to turn the input into PDF and we
    let the implicitclass backend turn PDF into a format understood
    by the destination printer, supporting the 4 formats of
    driverless IPP printing: PDF, PWG Raster, Apple Raster, PCLm.
- Drop libpoppler-cpp0, libpoppler-devel and libpoppler-glib-devel
  BuildRequires.
- Add pkgconfig(poppler-cpp) BuildRequires following upstream
  changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="idonmez@suse.com" date="1567512000">- Add add-cstring-include.patch to include cstring for memcpy
  and strcmp</changelog>
  <changelog author="jsmeix@suse.de" date="1618488000">- fix_upstream_issue348.patch fixes
  https://github.com/OpenPrinting/cups-filters/issues/348
  foomatic-rip segfaults with 'job-sheets=none,none'
  but works with 'job-sheets=none'
  (bsc#1182893)</changelog>
  <changelog author="jsmeix@suse.com" date="1684152000">- cups-filters-1.25.0-0001-beh-backend-Use-execv-instead-of-system-CVE-2023-24805.patch
  cups-filters-1.25.0-0002-beh-backend-Extra-checks-against-odd-forged-input-CVE-2023-24805.patch
  cups-filters-1.25.0-0003-beh-backend-Further-improvements-CVE-2023-24805.patch
  are the upstream
  0001-beh-backend-Use-execv-instead-of-system-CVE-2023-24805.patch
  0002-beh-backend-Extra-checks-against-odd-forged-input-CVE-2023-24805.patch
  0003-beh-backend-Further-improvements-CVE-2023-24805.patch
  backpported to cups-filters-1.25.0
  to fix CVE-2023-24805: RCE in cups-filters, beh CUPS backend
  (bsc#1211340)</changelog>
  <changelog author="tabraham@suse.com" date="1684756800">- gstoraster-gstopdf-Make-number-of-copies-as-embedded.patch fixes
  https://github.com/OpenPrinting/cups-filters/issues/255
  Printing multiple copies prints only 1 (pstopdf vs gstopdf)
  (bsc#1211401) (boo#1173345)</changelog>
  <changelog author="jsmeix@suse.com" date="1720008000">- bsc1225040.patch fixes bsc#1225040
  "cups-filters: Poppler for color PDF as grayscale via PS level 1:
  huge output makes printing slow"
  see https://github.com/OpenPrinting/cups-filters/issues/169
  Poppler for color PDF as grayscale via PS level 1 was introduced
  in cups-filters 1.22.6 via
  https://github.com/OpenPrinting/cups-filters/commit/48f9f994322c808ba2e9d0db6f3ff81caf8c0b72
  and disabled in cups-filters 1.25.12 via
  https://github.com/OpenPrinting/cups-filters/commit/0818ee322a6139be11d21fc76db345de1e979339</changelog>
  <changelog author="sflees@suse.de" date="1727697600">- cups-filters-1.25.0-0001-remove-cups-browsed-CVE-2024-47176.patch
  The cups-browsed binds on UDP INADDR_ANY:631 trusts any packet
  from any source to trigger a Get-Printer-Attributes IPP request
  to an attacker controlled URL. (bsc#1230939, CVE-2024-47176)</changelog>
  <changelog author="jsmeix@suse.com" date="1728561600">- cups-filters-1.25.0-CVE-2024-47076.patch is the upstream
  https://github.com/OpenPrinting/libcupsfilters/commit/95576ec3
  backported to cups-filters 1.25.0 to fix CVE-2024-47076
  "lack of input sanitization in get_printer_attributes"
  (bsc#1230937)
- cups-filters-1.25.0-0001-remove-cups-browsed-CVE-2024-47176.patch
  also avoids CVE-2024-47850
  "cups-browsed can be abused to initiate remote DDoS"
  (bsc#1231294)
- In general regarding CUPS and cups-browsed security issues like
  CVE-2024-47076 CVE-2024-47176 CVE-2024-47850 see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-filters-1.25.0-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to cups-filters 1.25.0 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1763121600">- cups-filters-1.25.0-CVE-2025-64503.patch is
  https://github.com/OpenPrinting/cups-filters/commit/50d94ca0f2fa6177613c97c59791bde568631865
  for cups-filters 1.25.0 to fix CVE-2025-64503
  "out-of-bounds write in pdftoraster tool" (bsc#1253374), see
  https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-893j-2wr2-wrh9
- cups-filters-1.25.0-CVE-2025-57812.patch is
  https://github.com/OpenPrinting/cups-filters/commit/cb927006747b797aa9163cd0cbd41b9bbdf05db0
  https://github.com/OpenPrinting/cups-filters/commit/7bd588a1fc5c99ac0b1951beb1b54b438137a7b5
  https://github.com/OpenPrinting/cups-filters/commit/719c557c9a29db32b855e6e108d7f4e7c5397613
  https://github.com/OpenPrinting/cups-filters/commit/5122052dd8f06949242099401c59f6c3b14e61c3
  https://github.com/OpenPrinting/cups-filters/commit/5e5f1c5d46a043c57cbbe6e043aa95896d9c40fa
  for cups-filters 1.25.0 to fix CVE-2025-57812
  "multiple TIFF-related issues" (bsc#1253373), see
  https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-jpxg-qc2c-hgv4
  https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-rc6w-jmvv-v7gx
  https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-fmvr-45mx-43c6
- cups-filters-1.25.0-CVE-2025-64524.patch is from
  https://bugzilla.suse.com/attachment.cgi?id=886866 in bsc#1253364
  for cups-filters 1.25.0 to fix CVE-2025-64524
  "use of unvalidated length parameter in the rastertopclx filter
  can lead to an out-of-bounds write", see
  https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-rq44-2q5p-x3hv
- In general regarding cups-filters security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1770811200">- Updated cups-filters-1.28.17-CVE-2024-47175.patch
  because the former version caused a regression
  "Error about PPD file during 'driverless' printer setup"
  (boo#1256868) and
  "ppd pull out from [driverless] printer feature broken"
  (bsc#1256977)</changelog>
</package>
<package pkgid="570de5ff68dee710c3d1a9baaa868af57daa324151f2538974603c7a024b9880" name="cups-filters-devel" arch="x86_64">
  <version epoch="0" ver="1.25.0" rel="150200.3.22.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1531224000">- Add pdftoopvp_Silence-compiler-warning.patch: pdftoopvp: Silence
  compiler warning.</changelog>
  <changelog author="alarrosa@suse.com" date="1531828800">- Version upgrade to 1.20.4
  - gstoraster: Removed unneeded "if"s (Ghostscript bug #692705).
  - cups-browsed: When checking whether there is already a local
    print queue with the same URI as the one of the discovered
    printer, consider also as equal URI if the URIs only differ
    by use of IPP or IPPS and/or use of HTTPS port 443 instead
    of IPP port 631.
  - cups-browsed: Also upgrade from ipp: to ipps: when the ipps:
    URI is on HTTPS port 443 instead of IPP port 631. This is
    common on IPP network printers.
  - pdftopdf: Removed support for hardware-implemented reversing
    of page order in PostScript printers. It was once not
    correctly implemented in cups-filters and second, such
    printers are extremely rare, and on Gutenprint PPDs with
    pseudo OutputOrder option hardware reversing was even
    wrongly assumed (Issue #47).
  - pdftopdf: Accept option "output-order=normal/reverse" for
    reversing page order (Issue #47) and also "page-delivery=
    same-order/reverse-order" (CUPS Issue #5340).
  - libcupsfilters: Let the PPD generator add "*PageStackOrder
    ..."  lines to the choices of the "OutputBin" option, to
    mark which output bins need the pages printed in reverse
    order (Issue #47).
  - libcupsfilters: Let the PPD generator correctly create a
    "*DefaultOutputOrder: ..."  entry, depending on whether the
    paper is put out face-up or face-down in the default output
    bin (Issue #47).
  - libcupsfilters: Fixed human-readable name of the OutputBin
    option in the PPD generator.
  - pdftoopvp: Silence compiler warning (Issue #42).
  - cups-browsed: If the user modifies/overwrites a print queue
    created by cups-browsed, it will now not only be
    automatically released from the control of cups-browsed, but
    we also create a replacement for our generated local queue
    under a new name.
  - cups-browsed: Make URIS for using the implicitclass backend
    correctly working also with queue names containing an '@'
    character.
  - braille: Strengthen error checking (Pull request #41).
  - braille: Index: Replace bogus characters with space (Pull
    request #41).
  - braille: Add print and braille page number options (Pull
    request #41).
  - braille: Index: Use standard duplex cups option (Pull
    request #41).
  - cups-browsed: Moved auto-generation of PPD file for IPP
    network printers from create_remote_printer_entry()
    function to update_cups_queues(). This allows re-creating
    accidentally removed or overwritten local queues without
    losing the PPD file.
  - braille: Add option to pick hyphenation rule according to
    current locale and make it the default for second
    translation table. (Pull request #38 and #39).
  - braille: Remove generated defs on "make clean". (Pull request #38).
  - braille: Turn non-breakable spaces to spaces. (Pull request
    [#38] and #39).
  - braille: Fix character encoding when extracting text. When
    extracing text from a zip file or a pdf, the resulting text
    is always utf-8 independently of the original locale, so we
    need to force that. (Pull request #38).
  - braille: Warn when no text translation was selected in case
    the user didn't notice. (Pull request #37).
  - braille: Fix spurious spacing after last Form-Feed (Pull
    request #45).
- Drop pdftoopvp_Silence-compiler-warning.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1535630400">- Do not diferentiate for service location, it is in sbindir
  on all systems we support now
- Use license for license install
- Version update to 1.21.1:
  - foomatic-rip: Fixed segmentation fault caused by wrong
    Coverity Scan issue fix (Issue #57, Debian bug #907026).
  - Build system: Require QPDF 8.1.0 or later as it is needed by
    bannertopdf (Issue #56).
  - libcupsfilters, cups-browsed, driverless, foomatic-rip,
    parallel: Silenced warnings from newest gcc.
  - libcupsfilters: When generating a PPD for driverless
    printing on a remote IPP printer, make pdftopdf not being
    run by the local queue if the remote queue is a CUPS queue
    to avoid running pdftopdf twice (CUPS Issue #5361).
  - libcupsfilters, cups-browsed, driverless, bannertopdf,
    foomatic-rip, pdftops, pdftoraster, rastertops,
    rastertoescpx, sys5ippprinter, beh: Fixed Coverity Scan
    issues. Thanks to Zdenek Dohnal (zdohnal at redhat dot com)
    for the tests and the patches.
  - bannertopdf: Switched over from using Poppler to using QPDF
    for generating the PDF pages. With Poppler unstable APIs
    were used which were subject to change. Thanks to Sahil
    Arora for this project in the Google Summer of Code 2018
    (Pull request #25).
  - cups-browsed: Manually defined clusters ("Cluster" directive
    in cups-browsed.conf) caused cups-browsed to crash.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543406400">- Update to version 1.21.4:
  * cups-browsed: cups-browsed: Limit the number of retries for
    creating a print queue when it comes to HTTP timeouts. Number
    of retries given by HttpMaxRetries directive in
    cups-browsed.conf.
  * cups-browsed: Read out current time right before setting the
    timeouts.
  * libcupsfilters: In the PPD generator for driverless IPP
    printing let "*cupsManualCopies: true" lines get added to
    the PPD if printing is done in a raster format as then
    pdftopdf needs to generate the copies.
  * pdftoraster, pdftoopvp, pdftoijs: Fix build with
    Poppler &gt;= 0.70
  * pdftopdf: Fixed printing multiple copies on driverless IPP
    printers. When printing collated copies the multiple copies
    got applied twice, resulting in n*n instead of n copies.
  * pdftoraster, pdftoopvp, pdftoijs: Poppler removed memCheck
    and gMemReport functions, remove appropriate calls.
- Changes from version 1.21.3:
  * foomatic-rip: Reset stdin after replacing the underlying file
    descriptor.
- Changes from version 1.21.2:
  * cups-browsed: Fixed freeing of literal string caused by
    Coverity Scan issue fix.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545134400">- Update to version 1.21.6:
  * Bug fix release, mainly for cups-browsed to avoid crashes and
    infinite printer removal/re-creation loops and spurious local
    queues for local CUPS printers. Also expanded PostScript
    interpreter bug workaround to more Apple LaserWriter models.
  * cups-browsed: To find out whether a DNS-SD-discovered printer
    is from the local machine, use not only the flags in the Avahi
    lookup result but also check the host name.
  * cups-browsed: When a local CUPS queue pointing to a remote CUPS
    printer was removed and re-created to make it a permanent
    queue, on_printer_deleted() was triggered by cupsd's
    notification to re-create a lost queue. Now
    on_printer_deleted() checks whether the queue is really gone
    and only re-creates then.
  * cups-browsed: When updating the CUPS queues, also removed and
    unregistered queues and not only created queues got checked for
    HTTP timeouts, which caused crashes on shutdown.
  * pdftops: Use the PS interpreter of Poppler for all Apple
    LaserWriter 16/600, 4/600, 12/640, 12/600, 12/660 as they all
    seem to not work with Ghostscript's PS output.
  * cups-browsed: On shutdown queues got removed even if they still
    had jobs.
- Changes from version 1.21.5:
  * Bug fix release, to build with Poppler 0.71 and with
    cups-browsed converting temporary CUPS queues reliably to
    permanent queues.
  * cups-browsed: We cannot reliably determine whether a CUPS queue
    is temporary, so we apply the procedure to make a temporary
    queue permanent to any unshared queue.
  * pdftoraster, pdftopdf, pdftoijs, pdftoopvp: Do not use the
    Poppler-specific "GBool", "gFalse", "gTrue" any more, as
    Poppler has switched to standard "bool", "false", "true" in
    version 0.71.0.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546084800">- Fix building with Poppler 0.72
  Add 0001-Raise-minimum-poppler-version-from-0.18-to-0.19.patch
  Add 0002-Adapt-code-for-SplashXPathScanner-state-handling-sin.patch
  Add 0003-Support-some-more-methods-returning-const.patch
  Add 0004-Support-GooString-c_str-introduced-by-poppler-0.72.patch
  See https://github.com/OpenPrinting/cups-filters/pull/83</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548676800">- Update to version 1.22.0:
  * From this release on the pdftopdf filter flattens interactive
    PDF forms and annotations internally, using QPDF, instead of
    calling external utilities. This especially eliminates slowing
    factors as additional piping of the data and unneeded use of
    PDF interpreters. Using external utilities for flattening is
    still possible in case of problems. In addition, a crash bug in
    cups-browsed got fixed and compatibility of the filters with
    Poppler 0.72 assured.
- Drop upstream fixed patches:
  * 0001-Raise-minimum-poppler-version-from-0.18-to-0.19.patch
  * 0002-Adapt-code-for-SplashXPathScanner-state-handling-sin.patch
  * 0003-Support-some-more-methods-returning-const.patch
  * 0004-Support-GooString-c_str-introduced-by-poppler-0.72.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550664000">- Update to version 1.22.1:
  * braille: Use sort command with LC_ALL=C for reproducibility
    of the genrated files, needed for distribution packaging.
  * cups-browsed, driverless: When polling the printer's
    capabilities via get-printer-attributes IPP request for
    driverless printing, use the attributes "all" and
    "media-col-database". Without "all" some printers do not report
    "urf-supported" and without "media-col-database" not all paper
    size and marging info gets reported.
  * braille: Document how to rework output before embossing.</changelog>
  <changelog author="jsmeix@suse.de" date="1554724800">- Version upgrade to 1.22.5
  * foomatic-rip: Changed Ghostscript call to count pages in a
    PDF file to use "runpdfbegin" and not the undocumented
    Ghostscript internal "pdfdict", so that it works with
    Ghostscript 9.27 and later (Debian bug #926576,
    Arch Linux bug #62251, openSUSE boo#1131771,
    cups@cups.org mailing list thread
    https://lists.cups.org/pipermail/cups/2019-April/074563.html).
- Version upgrade to 1.22.4
  * cups-browsed: Fix broken trailing space removal on
    "NickName" (Pull request #103).
  * pdftops: Emit PostScript Level 2 instead of Level 3 for
    Brother PostScript printers as at least some of them
    report to support level 3 but ontly work with Level 2
    (Ubuntu bug #1306849, comment #42).
  * bannertopdf: When multiplying the page for N-up or Duplex
    printing one page too much was generated (Issue #102).
- Version upgrade to 1.22.3
  * libcupsfilters: Added error checks for processing GIF, to
    avoid crashes or hangs on broken GIF files (Issues #81, #82,
    Pull request #100).
  * cups-browsed: Added hint to the man page and configuration
    file that with "DebugLogging stderr" the logging output goes
    to journal or syslog if cups-browsed is running as system
    service (Issue #28).
- Version upgrade to 1.22.2
  * cups-browsed: Let distribution of jobs sent to queues with
    "implicitclass" backend (usually clusters) be done by a
    "job-state" CUPS notification and not by
    "printer-state-changed" any more. The "job-state"
    notification already contains the job ID. Before we had to
    poll the job ID from CUPS via IPP which was sometimes
    unreliable (Issue #97).
  * imagetopdf, imagetoraster, pdftopdf, libcupsfilters: Added
    new page scaling options: "fill" scales the input page
    (typically a photo) so that the output page (typically with
    different aspect ratio) gets completely filled, aloowing for
    some content of the input page getting lost. "crop-to-fit"
    allows for easy printing of documents on slightly different
    output page sizes (A4 &lt;-&gt; Letter) maintaining the size and
    centering and cropping into the destination page. Thanks to
    Dheeraj Yadav (dhirajyadav135 at gmail dot com) for the
    patch (Pull request #92).
  * cups-browsed: Do not do IPP request for printer-is-shared
    option for remote cups queues with CUPS 2.2.x and newer
    (Pull request #91).
  * cups-browsed: Fix crash bug when reading "Cluster"
    directive from configuration file (Issue #94).
  * driverless: Updated man page as now also Mopria and
    Wi-Fi Direct printers are supported. Mentioned also
    ippusbxd.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.23.0:
  * This release adds support for the "print-scaling" IPP attribute
    and has the code for the support of MuPDF as PDF renderer
    vastly simplified.
  * pdftops, mupdftoraster: Let pdftops call mutool directly and so
    that it directly outputs PostScript, eliminating the need to
    call the mupdftoraster and rastertops filters.
  * mupdftoraster: Reduced the use of temporary files from 3 to
    just one.
  * imagetopdf, imagetoraster, pdftopdf: Add support for
    print-scaling option.
- Changes from version 1.22.6:
  * Bug fix release, to address a further issue of cups-browsed
    removing user-created print queues, to make
    grayscale/monochrome PostScript jobs of colored input file
    actually output grayscale/monochrome files, to fix several bugs
    when using MuPDF as PDF renderer, and to silence compiler
    warnings.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559908800">- Update to version 1.25.0:
  * pdftoijs, pdftoopvp: Removed these deprecated filters
    completely as there is no demand for them any more. They also
    used unstable, undocumented APIs of Poppler.
  * pdftoraster: Changed from using unstable, undocumented APIs of
    Poppler to stable, documented ones, to improve maintainability
    of this filter, and with it of the cups-filters package.
  * libcupsfilters: Added support for color spaces CMY and RGBW
    when using filters without PPD file (mainly for development and
    debugging, option "print-color-mode" with values "cmy-XX" and
    "rgbw-XX" with XX being the number of bits per color).
- Changes from version 1.24.0:
  * cups-browsed: Integration of Deepak Patankar's Google Summer of
    Code 2018 project with the main goal of clustering different
    printers and automatically selecting the destination printers
    by job content and option/attribute settings.
  * cups-browsed, implicitclass: Support for mixed clusters of
    remote CUPS queues and IPP network printers. For this PPD files
    of remote CUPS queues are generated by cups-browsed based on
    IPP queries, as for native IPP printers, the number of jobs for
    load balancing is polled in a way that it works also with
    native IPP printers, the implicitclass backend sends jobs
    directly to the printer instead of re-queueing them via CUPS.
  * cups-browsed: Merge IPP attributes of several printers to
    combined attributes for the cluster to generate the cluster's
    PPD file, including PPD constraints for option combinations not
    fulfillable by any of the member printers, and finding
    reasonable, non-conflicting default settings.
  * cups-browsed: Selection algorithm for the destination printer
    for a job sent to the cluster. Based on the job settings
    requested such as page size, media type, print quality, the
    best most suitable printer in the cluster for the job will be
    selected.
  * cups-browsed, implicitclass: Filter jobs to clusters already
    locally. Due to the fact that a cluster's member printers are
    not exclusively non-raw CUPS queues with the complete filtering
    framework on the remote server, but also native IPP printers,
    we need to support generic driverless printers as destination.
    So we cannot pass on the input data unfiltered but need to
    filter locally. We let the cluster's PPD file emulate a PDF
    printer, letting the local CUPS queue of the cluster run
    pdftopdf and any pre-filters to turn the input into PDF and we
    let the implicitclass backend turn PDF into a format understood
    by the destination printer, supporting the 4 formats of
    driverless IPP printing: PDF, PWG Raster, Apple Raster, PCLm.
- Drop libpoppler-cpp0, libpoppler-devel and libpoppler-glib-devel
  BuildRequires.
- Add pkgconfig(poppler-cpp) BuildRequires following upstream
  changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="idonmez@suse.com" date="1567512000">- Add add-cstring-include.patch to include cstring for memcpy
  and strcmp</changelog>
  <changelog author="jsmeix@suse.de" date="1618488000">- fix_upstream_issue348.patch fixes
  https://github.com/OpenPrinting/cups-filters/issues/348
  foomatic-rip segfaults with 'job-sheets=none,none'
  but works with 'job-sheets=none'
  (bsc#1182893)</changelog>
  <changelog author="jsmeix@suse.com" date="1684152000">- cups-filters-1.25.0-0001-beh-backend-Use-execv-instead-of-system-CVE-2023-24805.patch
  cups-filters-1.25.0-0002-beh-backend-Extra-checks-against-odd-forged-input-CVE-2023-24805.patch
  cups-filters-1.25.0-0003-beh-backend-Further-improvements-CVE-2023-24805.patch
  are the upstream
  0001-beh-backend-Use-execv-instead-of-system-CVE-2023-24805.patch
  0002-beh-backend-Extra-checks-against-odd-forged-input-CVE-2023-24805.patch
  0003-beh-backend-Further-improvements-CVE-2023-24805.patch
  backpported to cups-filters-1.25.0
  to fix CVE-2023-24805: RCE in cups-filters, beh CUPS backend
  (bsc#1211340)</changelog>
  <changelog author="tabraham@suse.com" date="1684756800">- gstoraster-gstopdf-Make-number-of-copies-as-embedded.patch fixes
  https://github.com/OpenPrinting/cups-filters/issues/255
  Printing multiple copies prints only 1 (pstopdf vs gstopdf)
  (bsc#1211401) (boo#1173345)</changelog>
  <changelog author="jsmeix@suse.com" date="1720008000">- bsc1225040.patch fixes bsc#1225040
  "cups-filters: Poppler for color PDF as grayscale via PS level 1:
  huge output makes printing slow"
  see https://github.com/OpenPrinting/cups-filters/issues/169
  Poppler for color PDF as grayscale via PS level 1 was introduced
  in cups-filters 1.22.6 via
  https://github.com/OpenPrinting/cups-filters/commit/48f9f994322c808ba2e9d0db6f3ff81caf8c0b72
  and disabled in cups-filters 1.25.12 via
  https://github.com/OpenPrinting/cups-filters/commit/0818ee322a6139be11d21fc76db345de1e979339</changelog>
  <changelog author="sflees@suse.de" date="1727697600">- cups-filters-1.25.0-0001-remove-cups-browsed-CVE-2024-47176.patch
  The cups-browsed binds on UDP INADDR_ANY:631 trusts any packet
  from any source to trigger a Get-Printer-Attributes IPP request
  to an attacker controlled URL. (bsc#1230939, CVE-2024-47176)</changelog>
  <changelog author="jsmeix@suse.com" date="1728561600">- cups-filters-1.25.0-CVE-2024-47076.patch is the upstream
  https://github.com/OpenPrinting/libcupsfilters/commit/95576ec3
  backported to cups-filters 1.25.0 to fix CVE-2024-47076
  "lack of input sanitization in get_printer_attributes"
  (bsc#1230937)
- cups-filters-1.25.0-0001-remove-cups-browsed-CVE-2024-47176.patch
  also avoids CVE-2024-47850
  "cups-browsed can be abused to initiate remote DDoS"
  (bsc#1231294)
- In general regarding CUPS and cups-browsed security issues like
  CVE-2024-47076 CVE-2024-47176 CVE-2024-47850 see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-filters-1.25.0-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to cups-filters 1.25.0 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
</package>
<package pkgid="c3211b85fd304bf145978a9de69d0b6c5b5411a56eb73cb5ef7be1eb7ec1a13d" name="cups-filters-devel" arch="x86_64">
  <version epoch="0" ver="1.25.0" rel="150200.3.25.1"/>
  <changelog author="alarrosa@suse.com" date="1531828800">- Version upgrade to 1.20.4
  - gstoraster: Removed unneeded "if"s (Ghostscript bug #692705).
  - cups-browsed: When checking whether there is already a local
    print queue with the same URI as the one of the discovered
    printer, consider also as equal URI if the URIs only differ
    by use of IPP or IPPS and/or use of HTTPS port 443 instead
    of IPP port 631.
  - cups-browsed: Also upgrade from ipp: to ipps: when the ipps:
    URI is on HTTPS port 443 instead of IPP port 631. This is
    common on IPP network printers.
  - pdftopdf: Removed support for hardware-implemented reversing
    of page order in PostScript printers. It was once not
    correctly implemented in cups-filters and second, such
    printers are extremely rare, and on Gutenprint PPDs with
    pseudo OutputOrder option hardware reversing was even
    wrongly assumed (Issue #47).
  - pdftopdf: Accept option "output-order=normal/reverse" for
    reversing page order (Issue #47) and also "page-delivery=
    same-order/reverse-order" (CUPS Issue #5340).
  - libcupsfilters: Let the PPD generator add "*PageStackOrder
    ..."  lines to the choices of the "OutputBin" option, to
    mark which output bins need the pages printed in reverse
    order (Issue #47).
  - libcupsfilters: Let the PPD generator correctly create a
    "*DefaultOutputOrder: ..."  entry, depending on whether the
    paper is put out face-up or face-down in the default output
    bin (Issue #47).
  - libcupsfilters: Fixed human-readable name of the OutputBin
    option in the PPD generator.
  - pdftoopvp: Silence compiler warning (Issue #42).
  - cups-browsed: If the user modifies/overwrites a print queue
    created by cups-browsed, it will now not only be
    automatically released from the control of cups-browsed, but
    we also create a replacement for our generated local queue
    under a new name.
  - cups-browsed: Make URIS for using the implicitclass backend
    correctly working also with queue names containing an '@'
    character.
  - braille: Strengthen error checking (Pull request #41).
  - braille: Index: Replace bogus characters with space (Pull
    request #41).
  - braille: Add print and braille page number options (Pull
    request #41).
  - braille: Index: Use standard duplex cups option (Pull
    request #41).
  - cups-browsed: Moved auto-generation of PPD file for IPP
    network printers from create_remote_printer_entry()
    function to update_cups_queues(). This allows re-creating
    accidentally removed or overwritten local queues without
    losing the PPD file.
  - braille: Add option to pick hyphenation rule according to
    current locale and make it the default for second
    translation table. (Pull request #38 and #39).
  - braille: Remove generated defs on "make clean". (Pull request #38).
  - braille: Turn non-breakable spaces to spaces. (Pull request
    [#38] and #39).
  - braille: Fix character encoding when extracting text. When
    extracing text from a zip file or a pdf, the resulting text
    is always utf-8 independently of the original locale, so we
    need to force that. (Pull request #38).
  - braille: Warn when no text translation was selected in case
    the user didn't notice. (Pull request #37).
  - braille: Fix spurious spacing after last Form-Feed (Pull
    request #45).
- Drop pdftoopvp_Silence-compiler-warning.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1535630400">- Do not diferentiate for service location, it is in sbindir
  on all systems we support now
- Use license for license install
- Version update to 1.21.1:
  - foomatic-rip: Fixed segmentation fault caused by wrong
    Coverity Scan issue fix (Issue #57, Debian bug #907026).
  - Build system: Require QPDF 8.1.0 or later as it is needed by
    bannertopdf (Issue #56).
  - libcupsfilters, cups-browsed, driverless, foomatic-rip,
    parallel: Silenced warnings from newest gcc.
  - libcupsfilters: When generating a PPD for driverless
    printing on a remote IPP printer, make pdftopdf not being
    run by the local queue if the remote queue is a CUPS queue
    to avoid running pdftopdf twice (CUPS Issue #5361).
  - libcupsfilters, cups-browsed, driverless, bannertopdf,
    foomatic-rip, pdftops, pdftoraster, rastertops,
    rastertoescpx, sys5ippprinter, beh: Fixed Coverity Scan
    issues. Thanks to Zdenek Dohnal (zdohnal at redhat dot com)
    for the tests and the patches.
  - bannertopdf: Switched over from using Poppler to using QPDF
    for generating the PDF pages. With Poppler unstable APIs
    were used which were subject to change. Thanks to Sahil
    Arora for this project in the Google Summer of Code 2018
    (Pull request #25).
  - cups-browsed: Manually defined clusters ("Cluster" directive
    in cups-browsed.conf) caused cups-browsed to crash.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543406400">- Update to version 1.21.4:
  * cups-browsed: cups-browsed: Limit the number of retries for
    creating a print queue when it comes to HTTP timeouts. Number
    of retries given by HttpMaxRetries directive in
    cups-browsed.conf.
  * cups-browsed: Read out current time right before setting the
    timeouts.
  * libcupsfilters: In the PPD generator for driverless IPP
    printing let "*cupsManualCopies: true" lines get added to
    the PPD if printing is done in a raster format as then
    pdftopdf needs to generate the copies.
  * pdftoraster, pdftoopvp, pdftoijs: Fix build with
    Poppler &gt;= 0.70
  * pdftopdf: Fixed printing multiple copies on driverless IPP
    printers. When printing collated copies the multiple copies
    got applied twice, resulting in n*n instead of n copies.
  * pdftoraster, pdftoopvp, pdftoijs: Poppler removed memCheck
    and gMemReport functions, remove appropriate calls.
- Changes from version 1.21.3:
  * foomatic-rip: Reset stdin after replacing the underlying file
    descriptor.
- Changes from version 1.21.2:
  * cups-browsed: Fixed freeing of literal string caused by
    Coverity Scan issue fix.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545134400">- Update to version 1.21.6:
  * Bug fix release, mainly for cups-browsed to avoid crashes and
    infinite printer removal/re-creation loops and spurious local
    queues for local CUPS printers. Also expanded PostScript
    interpreter bug workaround to more Apple LaserWriter models.
  * cups-browsed: To find out whether a DNS-SD-discovered printer
    is from the local machine, use not only the flags in the Avahi
    lookup result but also check the host name.
  * cups-browsed: When a local CUPS queue pointing to a remote CUPS
    printer was removed and re-created to make it a permanent
    queue, on_printer_deleted() was triggered by cupsd's
    notification to re-create a lost queue. Now
    on_printer_deleted() checks whether the queue is really gone
    and only re-creates then.
  * cups-browsed: When updating the CUPS queues, also removed and
    unregistered queues and not only created queues got checked for
    HTTP timeouts, which caused crashes on shutdown.
  * pdftops: Use the PS interpreter of Poppler for all Apple
    LaserWriter 16/600, 4/600, 12/640, 12/600, 12/660 as they all
    seem to not work with Ghostscript's PS output.
  * cups-browsed: On shutdown queues got removed even if they still
    had jobs.
- Changes from version 1.21.5:
  * Bug fix release, to build with Poppler 0.71 and with
    cups-browsed converting temporary CUPS queues reliably to
    permanent queues.
  * cups-browsed: We cannot reliably determine whether a CUPS queue
    is temporary, so we apply the procedure to make a temporary
    queue permanent to any unshared queue.
  * pdftoraster, pdftopdf, pdftoijs, pdftoopvp: Do not use the
    Poppler-specific "GBool", "gFalse", "gTrue" any more, as
    Poppler has switched to standard "bool", "false", "true" in
    version 0.71.0.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546084800">- Fix building with Poppler 0.72
  Add 0001-Raise-minimum-poppler-version-from-0.18-to-0.19.patch
  Add 0002-Adapt-code-for-SplashXPathScanner-state-handling-sin.patch
  Add 0003-Support-some-more-methods-returning-const.patch
  Add 0004-Support-GooString-c_str-introduced-by-poppler-0.72.patch
  See https://github.com/OpenPrinting/cups-filters/pull/83</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548676800">- Update to version 1.22.0:
  * From this release on the pdftopdf filter flattens interactive
    PDF forms and annotations internally, using QPDF, instead of
    calling external utilities. This especially eliminates slowing
    factors as additional piping of the data and unneeded use of
    PDF interpreters. Using external utilities for flattening is
    still possible in case of problems. In addition, a crash bug in
    cups-browsed got fixed and compatibility of the filters with
    Poppler 0.72 assured.
- Drop upstream fixed patches:
  * 0001-Raise-minimum-poppler-version-from-0.18-to-0.19.patch
  * 0002-Adapt-code-for-SplashXPathScanner-state-handling-sin.patch
  * 0003-Support-some-more-methods-returning-const.patch
  * 0004-Support-GooString-c_str-introduced-by-poppler-0.72.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550664000">- Update to version 1.22.1:
  * braille: Use sort command with LC_ALL=C for reproducibility
    of the genrated files, needed for distribution packaging.
  * cups-browsed, driverless: When polling the printer's
    capabilities via get-printer-attributes IPP request for
    driverless printing, use the attributes "all" and
    "media-col-database". Without "all" some printers do not report
    "urf-supported" and without "media-col-database" not all paper
    size and marging info gets reported.
  * braille: Document how to rework output before embossing.</changelog>
  <changelog author="jsmeix@suse.de" date="1554724800">- Version upgrade to 1.22.5
  * foomatic-rip: Changed Ghostscript call to count pages in a
    PDF file to use "runpdfbegin" and not the undocumented
    Ghostscript internal "pdfdict", so that it works with
    Ghostscript 9.27 and later (Debian bug #926576,
    Arch Linux bug #62251, openSUSE boo#1131771,
    cups@cups.org mailing list thread
    https://lists.cups.org/pipermail/cups/2019-April/074563.html).
- Version upgrade to 1.22.4
  * cups-browsed: Fix broken trailing space removal on
    "NickName" (Pull request #103).
  * pdftops: Emit PostScript Level 2 instead of Level 3 for
    Brother PostScript printers as at least some of them
    report to support level 3 but ontly work with Level 2
    (Ubuntu bug #1306849, comment #42).
  * bannertopdf: When multiplying the page for N-up or Duplex
    printing one page too much was generated (Issue #102).
- Version upgrade to 1.22.3
  * libcupsfilters: Added error checks for processing GIF, to
    avoid crashes or hangs on broken GIF files (Issues #81, #82,
    Pull request #100).
  * cups-browsed: Added hint to the man page and configuration
    file that with "DebugLogging stderr" the logging output goes
    to journal or syslog if cups-browsed is running as system
    service (Issue #28).
- Version upgrade to 1.22.2
  * cups-browsed: Let distribution of jobs sent to queues with
    "implicitclass" backend (usually clusters) be done by a
    "job-state" CUPS notification and not by
    "printer-state-changed" any more. The "job-state"
    notification already contains the job ID. Before we had to
    poll the job ID from CUPS via IPP which was sometimes
    unreliable (Issue #97).
  * imagetopdf, imagetoraster, pdftopdf, libcupsfilters: Added
    new page scaling options: "fill" scales the input page
    (typically a photo) so that the output page (typically with
    different aspect ratio) gets completely filled, aloowing for
    some content of the input page getting lost. "crop-to-fit"
    allows for easy printing of documents on slightly different
    output page sizes (A4 &lt;-&gt; Letter) maintaining the size and
    centering and cropping into the destination page. Thanks to
    Dheeraj Yadav (dhirajyadav135 at gmail dot com) for the
    patch (Pull request #92).
  * cups-browsed: Do not do IPP request for printer-is-shared
    option for remote cups queues with CUPS 2.2.x and newer
    (Pull request #91).
  * cups-browsed: Fix crash bug when reading "Cluster"
    directive from configuration file (Issue #94).
  * driverless: Updated man page as now also Mopria and
    Wi-Fi Direct printers are supported. Mentioned also
    ippusbxd.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.23.0:
  * This release adds support for the "print-scaling" IPP attribute
    and has the code for the support of MuPDF as PDF renderer
    vastly simplified.
  * pdftops, mupdftoraster: Let pdftops call mutool directly and so
    that it directly outputs PostScript, eliminating the need to
    call the mupdftoraster and rastertops filters.
  * mupdftoraster: Reduced the use of temporary files from 3 to
    just one.
  * imagetopdf, imagetoraster, pdftopdf: Add support for
    print-scaling option.
- Changes from version 1.22.6:
  * Bug fix release, to address a further issue of cups-browsed
    removing user-created print queues, to make
    grayscale/monochrome PostScript jobs of colored input file
    actually output grayscale/monochrome files, to fix several bugs
    when using MuPDF as PDF renderer, and to silence compiler
    warnings.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559908800">- Update to version 1.25.0:
  * pdftoijs, pdftoopvp: Removed these deprecated filters
    completely as there is no demand for them any more. They also
    used unstable, undocumented APIs of Poppler.
  * pdftoraster: Changed from using unstable, undocumented APIs of
    Poppler to stable, documented ones, to improve maintainability
    of this filter, and with it of the cups-filters package.
  * libcupsfilters: Added support for color spaces CMY and RGBW
    when using filters without PPD file (mainly for development and
    debugging, option "print-color-mode" with values "cmy-XX" and
    "rgbw-XX" with XX being the number of bits per color).
- Changes from version 1.24.0:
  * cups-browsed: Integration of Deepak Patankar's Google Summer of
    Code 2018 project with the main goal of clustering different
    printers and automatically selecting the destination printers
    by job content and option/attribute settings.
  * cups-browsed, implicitclass: Support for mixed clusters of
    remote CUPS queues and IPP network printers. For this PPD files
    of remote CUPS queues are generated by cups-browsed based on
    IPP queries, as for native IPP printers, the number of jobs for
    load balancing is polled in a way that it works also with
    native IPP printers, the implicitclass backend sends jobs
    directly to the printer instead of re-queueing them via CUPS.
  * cups-browsed: Merge IPP attributes of several printers to
    combined attributes for the cluster to generate the cluster's
    PPD file, including PPD constraints for option combinations not
    fulfillable by any of the member printers, and finding
    reasonable, non-conflicting default settings.
  * cups-browsed: Selection algorithm for the destination printer
    for a job sent to the cluster. Based on the job settings
    requested such as page size, media type, print quality, the
    best most suitable printer in the cluster for the job will be
    selected.
  * cups-browsed, implicitclass: Filter jobs to clusters already
    locally. Due to the fact that a cluster's member printers are
    not exclusively non-raw CUPS queues with the complete filtering
    framework on the remote server, but also native IPP printers,
    we need to support generic driverless printers as destination.
    So we cannot pass on the input data unfiltered but need to
    filter locally. We let the cluster's PPD file emulate a PDF
    printer, letting the local CUPS queue of the cluster run
    pdftopdf and any pre-filters to turn the input into PDF and we
    let the implicitclass backend turn PDF into a format understood
    by the destination printer, supporting the 4 formats of
    driverless IPP printing: PDF, PWG Raster, Apple Raster, PCLm.
- Drop libpoppler-cpp0, libpoppler-devel and libpoppler-glib-devel
  BuildRequires.
- Add pkgconfig(poppler-cpp) BuildRequires following upstream
  changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="idonmez@suse.com" date="1567512000">- Add add-cstring-include.patch to include cstring for memcpy
  and strcmp</changelog>
  <changelog author="jsmeix@suse.de" date="1618488000">- fix_upstream_issue348.patch fixes
  https://github.com/OpenPrinting/cups-filters/issues/348
  foomatic-rip segfaults with 'job-sheets=none,none'
  but works with 'job-sheets=none'
  (bsc#1182893)</changelog>
  <changelog author="jsmeix@suse.com" date="1684152000">- cups-filters-1.25.0-0001-beh-backend-Use-execv-instead-of-system-CVE-2023-24805.patch
  cups-filters-1.25.0-0002-beh-backend-Extra-checks-against-odd-forged-input-CVE-2023-24805.patch
  cups-filters-1.25.0-0003-beh-backend-Further-improvements-CVE-2023-24805.patch
  are the upstream
  0001-beh-backend-Use-execv-instead-of-system-CVE-2023-24805.patch
  0002-beh-backend-Extra-checks-against-odd-forged-input-CVE-2023-24805.patch
  0003-beh-backend-Further-improvements-CVE-2023-24805.patch
  backpported to cups-filters-1.25.0
  to fix CVE-2023-24805: RCE in cups-filters, beh CUPS backend
  (bsc#1211340)</changelog>
  <changelog author="tabraham@suse.com" date="1684756800">- gstoraster-gstopdf-Make-number-of-copies-as-embedded.patch fixes
  https://github.com/OpenPrinting/cups-filters/issues/255
  Printing multiple copies prints only 1 (pstopdf vs gstopdf)
  (bsc#1211401) (boo#1173345)</changelog>
  <changelog author="jsmeix@suse.com" date="1720008000">- bsc1225040.patch fixes bsc#1225040
  "cups-filters: Poppler for color PDF as grayscale via PS level 1:
  huge output makes printing slow"
  see https://github.com/OpenPrinting/cups-filters/issues/169
  Poppler for color PDF as grayscale via PS level 1 was introduced
  in cups-filters 1.22.6 via
  https://github.com/OpenPrinting/cups-filters/commit/48f9f994322c808ba2e9d0db6f3ff81caf8c0b72
  and disabled in cups-filters 1.25.12 via
  https://github.com/OpenPrinting/cups-filters/commit/0818ee322a6139be11d21fc76db345de1e979339</changelog>
  <changelog author="sflees@suse.de" date="1727697600">- cups-filters-1.25.0-0001-remove-cups-browsed-CVE-2024-47176.patch
  The cups-browsed binds on UDP INADDR_ANY:631 trusts any packet
  from any source to trigger a Get-Printer-Attributes IPP request
  to an attacker controlled URL. (bsc#1230939, CVE-2024-47176)</changelog>
  <changelog author="jsmeix@suse.com" date="1728561600">- cups-filters-1.25.0-CVE-2024-47076.patch is the upstream
  https://github.com/OpenPrinting/libcupsfilters/commit/95576ec3
  backported to cups-filters 1.25.0 to fix CVE-2024-47076
  "lack of input sanitization in get_printer_attributes"
  (bsc#1230937)
- cups-filters-1.25.0-0001-remove-cups-browsed-CVE-2024-47176.patch
  also avoids CVE-2024-47850
  "cups-browsed can be abused to initiate remote DDoS"
  (bsc#1231294)
- In general regarding CUPS and cups-browsed security issues like
  CVE-2024-47076 CVE-2024-47176 CVE-2024-47850 see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-filters-1.25.0-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to cups-filters 1.25.0 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1763121600">- cups-filters-1.25.0-CVE-2025-64503.patch is
  https://github.com/OpenPrinting/cups-filters/commit/50d94ca0f2fa6177613c97c59791bde568631865
  for cups-filters 1.25.0 to fix CVE-2025-64503
  "out-of-bounds write in pdftoraster tool" (bsc#1253374), see
  https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-893j-2wr2-wrh9
- cups-filters-1.25.0-CVE-2025-57812.patch is
  https://github.com/OpenPrinting/cups-filters/commit/cb927006747b797aa9163cd0cbd41b9bbdf05db0
  https://github.com/OpenPrinting/cups-filters/commit/7bd588a1fc5c99ac0b1951beb1b54b438137a7b5
  https://github.com/OpenPrinting/cups-filters/commit/719c557c9a29db32b855e6e108d7f4e7c5397613
  https://github.com/OpenPrinting/cups-filters/commit/5122052dd8f06949242099401c59f6c3b14e61c3
  https://github.com/OpenPrinting/cups-filters/commit/5e5f1c5d46a043c57cbbe6e043aa95896d9c40fa
  for cups-filters 1.25.0 to fix CVE-2025-57812
  "multiple TIFF-related issues" (bsc#1253373), see
  https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-jpxg-qc2c-hgv4
  https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-rc6w-jmvv-v7gx
  https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-fmvr-45mx-43c6
- cups-filters-1.25.0-CVE-2025-64524.patch is from
  https://bugzilla.suse.com/attachment.cgi?id=886866 in bsc#1253364
  for cups-filters 1.25.0 to fix CVE-2025-64524
  "use of unvalidated length parameter in the rastertopclx filter
  can lead to an out-of-bounds write", see
  https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-rq44-2q5p-x3hv
- In general regarding cups-filters security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
</package>
<package pkgid="f7412492d3c4a604f440b460064ba701e8ecb2250ce6775ee61aade6e73d8577" name="cups-filters-devel" arch="x86_64">
  <version epoch="0" ver="1.25.0" rel="150200.3.28.1"/>
  <changelog author="tchvatal@suse.com" date="1535630400">- Do not diferentiate for service location, it is in sbindir
  on all systems we support now
- Use license for license install
- Version update to 1.21.1:
  - foomatic-rip: Fixed segmentation fault caused by wrong
    Coverity Scan issue fix (Issue #57, Debian bug #907026).
  - Build system: Require QPDF 8.1.0 or later as it is needed by
    bannertopdf (Issue #56).
  - libcupsfilters, cups-browsed, driverless, foomatic-rip,
    parallel: Silenced warnings from newest gcc.
  - libcupsfilters: When generating a PPD for driverless
    printing on a remote IPP printer, make pdftopdf not being
    run by the local queue if the remote queue is a CUPS queue
    to avoid running pdftopdf twice (CUPS Issue #5361).
  - libcupsfilters, cups-browsed, driverless, bannertopdf,
    foomatic-rip, pdftops, pdftoraster, rastertops,
    rastertoescpx, sys5ippprinter, beh: Fixed Coverity Scan
    issues. Thanks to Zdenek Dohnal (zdohnal at redhat dot com)
    for the tests and the patches.
  - bannertopdf: Switched over from using Poppler to using QPDF
    for generating the PDF pages. With Poppler unstable APIs
    were used which were subject to change. Thanks to Sahil
    Arora for this project in the Google Summer of Code 2018
    (Pull request #25).
  - cups-browsed: Manually defined clusters ("Cluster" directive
    in cups-browsed.conf) caused cups-browsed to crash.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543406400">- Update to version 1.21.4:
  * cups-browsed: cups-browsed: Limit the number of retries for
    creating a print queue when it comes to HTTP timeouts. Number
    of retries given by HttpMaxRetries directive in
    cups-browsed.conf.
  * cups-browsed: Read out current time right before setting the
    timeouts.
  * libcupsfilters: In the PPD generator for driverless IPP
    printing let "*cupsManualCopies: true" lines get added to
    the PPD if printing is done in a raster format as then
    pdftopdf needs to generate the copies.
  * pdftoraster, pdftoopvp, pdftoijs: Fix build with
    Poppler &gt;= 0.70
  * pdftopdf: Fixed printing multiple copies on driverless IPP
    printers. When printing collated copies the multiple copies
    got applied twice, resulting in n*n instead of n copies.
  * pdftoraster, pdftoopvp, pdftoijs: Poppler removed memCheck
    and gMemReport functions, remove appropriate calls.
- Changes from version 1.21.3:
  * foomatic-rip: Reset stdin after replacing the underlying file
    descriptor.
- Changes from version 1.21.2:
  * cups-browsed: Fixed freeing of literal string caused by
    Coverity Scan issue fix.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545134400">- Update to version 1.21.6:
  * Bug fix release, mainly for cups-browsed to avoid crashes and
    infinite printer removal/re-creation loops and spurious local
    queues for local CUPS printers. Also expanded PostScript
    interpreter bug workaround to more Apple LaserWriter models.
  * cups-browsed: To find out whether a DNS-SD-discovered printer
    is from the local machine, use not only the flags in the Avahi
    lookup result but also check the host name.
  * cups-browsed: When a local CUPS queue pointing to a remote CUPS
    printer was removed and re-created to make it a permanent
    queue, on_printer_deleted() was triggered by cupsd's
    notification to re-create a lost queue. Now
    on_printer_deleted() checks whether the queue is really gone
    and only re-creates then.
  * cups-browsed: When updating the CUPS queues, also removed and
    unregistered queues and not only created queues got checked for
    HTTP timeouts, which caused crashes on shutdown.
  * pdftops: Use the PS interpreter of Poppler for all Apple
    LaserWriter 16/600, 4/600, 12/640, 12/600, 12/660 as they all
    seem to not work with Ghostscript's PS output.
  * cups-browsed: On shutdown queues got removed even if they still
    had jobs.
- Changes from version 1.21.5:
  * Bug fix release, to build with Poppler 0.71 and with
    cups-browsed converting temporary CUPS queues reliably to
    permanent queues.
  * cups-browsed: We cannot reliably determine whether a CUPS queue
    is temporary, so we apply the procedure to make a temporary
    queue permanent to any unshared queue.
  * pdftoraster, pdftopdf, pdftoijs, pdftoopvp: Do not use the
    Poppler-specific "GBool", "gFalse", "gTrue" any more, as
    Poppler has switched to standard "bool", "false", "true" in
    version 0.71.0.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546084800">- Fix building with Poppler 0.72
  Add 0001-Raise-minimum-poppler-version-from-0.18-to-0.19.patch
  Add 0002-Adapt-code-for-SplashXPathScanner-state-handling-sin.patch
  Add 0003-Support-some-more-methods-returning-const.patch
  Add 0004-Support-GooString-c_str-introduced-by-poppler-0.72.patch
  See https://github.com/OpenPrinting/cups-filters/pull/83</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548676800">- Update to version 1.22.0:
  * From this release on the pdftopdf filter flattens interactive
    PDF forms and annotations internally, using QPDF, instead of
    calling external utilities. This especially eliminates slowing
    factors as additional piping of the data and unneeded use of
    PDF interpreters. Using external utilities for flattening is
    still possible in case of problems. In addition, a crash bug in
    cups-browsed got fixed and compatibility of the filters with
    Poppler 0.72 assured.
- Drop upstream fixed patches:
  * 0001-Raise-minimum-poppler-version-from-0.18-to-0.19.patch
  * 0002-Adapt-code-for-SplashXPathScanner-state-handling-sin.patch
  * 0003-Support-some-more-methods-returning-const.patch
  * 0004-Support-GooString-c_str-introduced-by-poppler-0.72.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550664000">- Update to version 1.22.1:
  * braille: Use sort command with LC_ALL=C for reproducibility
    of the genrated files, needed for distribution packaging.
  * cups-browsed, driverless: When polling the printer's
    capabilities via get-printer-attributes IPP request for
    driverless printing, use the attributes "all" and
    "media-col-database". Without "all" some printers do not report
    "urf-supported" and without "media-col-database" not all paper
    size and marging info gets reported.
  * braille: Document how to rework output before embossing.</changelog>
  <changelog author="jsmeix@suse.de" date="1554724800">- Version upgrade to 1.22.5
  * foomatic-rip: Changed Ghostscript call to count pages in a
    PDF file to use "runpdfbegin" and not the undocumented
    Ghostscript internal "pdfdict", so that it works with
    Ghostscript 9.27 and later (Debian bug #926576,
    Arch Linux bug #62251, openSUSE boo#1131771,
    cups@cups.org mailing list thread
    https://lists.cups.org/pipermail/cups/2019-April/074563.html).
- Version upgrade to 1.22.4
  * cups-browsed: Fix broken trailing space removal on
    "NickName" (Pull request #103).
  * pdftops: Emit PostScript Level 2 instead of Level 3 for
    Brother PostScript printers as at least some of them
    report to support level 3 but ontly work with Level 2
    (Ubuntu bug #1306849, comment #42).
  * bannertopdf: When multiplying the page for N-up or Duplex
    printing one page too much was generated (Issue #102).
- Version upgrade to 1.22.3
  * libcupsfilters: Added error checks for processing GIF, to
    avoid crashes or hangs on broken GIF files (Issues #81, #82,
    Pull request #100).
  * cups-browsed: Added hint to the man page and configuration
    file that with "DebugLogging stderr" the logging output goes
    to journal or syslog if cups-browsed is running as system
    service (Issue #28).
- Version upgrade to 1.22.2
  * cups-browsed: Let distribution of jobs sent to queues with
    "implicitclass" backend (usually clusters) be done by a
    "job-state" CUPS notification and not by
    "printer-state-changed" any more. The "job-state"
    notification already contains the job ID. Before we had to
    poll the job ID from CUPS via IPP which was sometimes
    unreliable (Issue #97).
  * imagetopdf, imagetoraster, pdftopdf, libcupsfilters: Added
    new page scaling options: "fill" scales the input page
    (typically a photo) so that the output page (typically with
    different aspect ratio) gets completely filled, aloowing for
    some content of the input page getting lost. "crop-to-fit"
    allows for easy printing of documents on slightly different
    output page sizes (A4 &lt;-&gt; Letter) maintaining the size and
    centering and cropping into the destination page. Thanks to
    Dheeraj Yadav (dhirajyadav135 at gmail dot com) for the
    patch (Pull request #92).
  * cups-browsed: Do not do IPP request for printer-is-shared
    option for remote cups queues with CUPS 2.2.x and newer
    (Pull request #91).
  * cups-browsed: Fix crash bug when reading "Cluster"
    directive from configuration file (Issue #94).
  * driverless: Updated man page as now also Mopria and
    Wi-Fi Direct printers are supported. Mentioned also
    ippusbxd.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.23.0:
  * This release adds support for the "print-scaling" IPP attribute
    and has the code for the support of MuPDF as PDF renderer
    vastly simplified.
  * pdftops, mupdftoraster: Let pdftops call mutool directly and so
    that it directly outputs PostScript, eliminating the need to
    call the mupdftoraster and rastertops filters.
  * mupdftoraster: Reduced the use of temporary files from 3 to
    just one.
  * imagetopdf, imagetoraster, pdftopdf: Add support for
    print-scaling option.
- Changes from version 1.22.6:
  * Bug fix release, to address a further issue of cups-browsed
    removing user-created print queues, to make
    grayscale/monochrome PostScript jobs of colored input file
    actually output grayscale/monochrome files, to fix several bugs
    when using MuPDF as PDF renderer, and to silence compiler
    warnings.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559908800">- Update to version 1.25.0:
  * pdftoijs, pdftoopvp: Removed these deprecated filters
    completely as there is no demand for them any more. They also
    used unstable, undocumented APIs of Poppler.
  * pdftoraster: Changed from using unstable, undocumented APIs of
    Poppler to stable, documented ones, to improve maintainability
    of this filter, and with it of the cups-filters package.
  * libcupsfilters: Added support for color spaces CMY and RGBW
    when using filters without PPD file (mainly for development and
    debugging, option "print-color-mode" with values "cmy-XX" and
    "rgbw-XX" with XX being the number of bits per color).
- Changes from version 1.24.0:
  * cups-browsed: Integration of Deepak Patankar's Google Summer of
    Code 2018 project with the main goal of clustering different
    printers and automatically selecting the destination printers
    by job content and option/attribute settings.
  * cups-browsed, implicitclass: Support for mixed clusters of
    remote CUPS queues and IPP network printers. For this PPD files
    of remote CUPS queues are generated by cups-browsed based on
    IPP queries, as for native IPP printers, the number of jobs for
    load balancing is polled in a way that it works also with
    native IPP printers, the implicitclass backend sends jobs
    directly to the printer instead of re-queueing them via CUPS.
  * cups-browsed: Merge IPP attributes of several printers to
    combined attributes for the cluster to generate the cluster's
    PPD file, including PPD constraints for option combinations not
    fulfillable by any of the member printers, and finding
    reasonable, non-conflicting default settings.
  * cups-browsed: Selection algorithm for the destination printer
    for a job sent to the cluster. Based on the job settings
    requested such as page size, media type, print quality, the
    best most suitable printer in the cluster for the job will be
    selected.
  * cups-browsed, implicitclass: Filter jobs to clusters already
    locally. Due to the fact that a cluster's member printers are
    not exclusively non-raw CUPS queues with the complete filtering
    framework on the remote server, but also native IPP printers,
    we need to support generic driverless printers as destination.
    So we cannot pass on the input data unfiltered but need to
    filter locally. We let the cluster's PPD file emulate a PDF
    printer, letting the local CUPS queue of the cluster run
    pdftopdf and any pre-filters to turn the input into PDF and we
    let the implicitclass backend turn PDF into a format understood
    by the destination printer, supporting the 4 formats of
    driverless IPP printing: PDF, PWG Raster, Apple Raster, PCLm.
- Drop libpoppler-cpp0, libpoppler-devel and libpoppler-glib-devel
  BuildRequires.
- Add pkgconfig(poppler-cpp) BuildRequires following upstream
  changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1560340800">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini</changelog>
  <changelog author="idonmez@suse.com" date="1567512000">- Add add-cstring-include.patch to include cstring for memcpy
  and strcmp</changelog>
  <changelog author="jsmeix@suse.de" date="1618488000">- fix_upstream_issue348.patch fixes
  https://github.com/OpenPrinting/cups-filters/issues/348
  foomatic-rip segfaults with 'job-sheets=none,none'
  but works with 'job-sheets=none'
  (bsc#1182893)</changelog>
  <changelog author="jsmeix@suse.com" date="1684152000">- cups-filters-1.25.0-0001-beh-backend-Use-execv-instead-of-system-CVE-2023-24805.patch
  cups-filters-1.25.0-0002-beh-backend-Extra-checks-against-odd-forged-input-CVE-2023-24805.patch
  cups-filters-1.25.0-0003-beh-backend-Further-improvements-CVE-2023-24805.patch
  are the upstream
  0001-beh-backend-Use-execv-instead-of-system-CVE-2023-24805.patch
  0002-beh-backend-Extra-checks-against-odd-forged-input-CVE-2023-24805.patch
  0003-beh-backend-Further-improvements-CVE-2023-24805.patch
  backpported to cups-filters-1.25.0
  to fix CVE-2023-24805: RCE in cups-filters, beh CUPS backend
  (bsc#1211340)</changelog>
  <changelog author="tabraham@suse.com" date="1684756800">- gstoraster-gstopdf-Make-number-of-copies-as-embedded.patch fixes
  https://github.com/OpenPrinting/cups-filters/issues/255
  Printing multiple copies prints only 1 (pstopdf vs gstopdf)
  (bsc#1211401) (boo#1173345)</changelog>
  <changelog author="jsmeix@suse.com" date="1720008000">- bsc1225040.patch fixes bsc#1225040
  "cups-filters: Poppler for color PDF as grayscale via PS level 1:
  huge output makes printing slow"
  see https://github.com/OpenPrinting/cups-filters/issues/169
  Poppler for color PDF as grayscale via PS level 1 was introduced
  in cups-filters 1.22.6 via
  https://github.com/OpenPrinting/cups-filters/commit/48f9f994322c808ba2e9d0db6f3ff81caf8c0b72
  and disabled in cups-filters 1.25.12 via
  https://github.com/OpenPrinting/cups-filters/commit/0818ee322a6139be11d21fc76db345de1e979339</changelog>
  <changelog author="sflees@suse.de" date="1727697600">- cups-filters-1.25.0-0001-remove-cups-browsed-CVE-2024-47176.patch
  The cups-browsed binds on UDP INADDR_ANY:631 trusts any packet
  from any source to trigger a Get-Printer-Attributes IPP request
  to an attacker controlled URL. (bsc#1230939, CVE-2024-47176)</changelog>
  <changelog author="jsmeix@suse.com" date="1728561600">- cups-filters-1.25.0-CVE-2024-47076.patch is the upstream
  https://github.com/OpenPrinting/libcupsfilters/commit/95576ec3
  backported to cups-filters 1.25.0 to fix CVE-2024-47076
  "lack of input sanitization in get_printer_attributes"
  (bsc#1230937)
- cups-filters-1.25.0-0001-remove-cups-browsed-CVE-2024-47176.patch
  also avoids CVE-2024-47850
  "cups-browsed can be abused to initiate remote DDoS"
  (bsc#1231294)
- In general regarding CUPS and cups-browsed security issues like
  CVE-2024-47076 CVE-2024-47176 CVE-2024-47850 see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-filters-1.25.0-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to cups-filters 1.25.0 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1763121600">- cups-filters-1.25.0-CVE-2025-64503.patch is
  https://github.com/OpenPrinting/cups-filters/commit/50d94ca0f2fa6177613c97c59791bde568631865
  for cups-filters 1.25.0 to fix CVE-2025-64503
  "out-of-bounds write in pdftoraster tool" (bsc#1253374), see
  https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-893j-2wr2-wrh9
- cups-filters-1.25.0-CVE-2025-57812.patch is
  https://github.com/OpenPrinting/cups-filters/commit/cb927006747b797aa9163cd0cbd41b9bbdf05db0
  https://github.com/OpenPrinting/cups-filters/commit/7bd588a1fc5c99ac0b1951beb1b54b438137a7b5
  https://github.com/OpenPrinting/cups-filters/commit/719c557c9a29db32b855e6e108d7f4e7c5397613
  https://github.com/OpenPrinting/cups-filters/commit/5122052dd8f06949242099401c59f6c3b14e61c3
  https://github.com/OpenPrinting/cups-filters/commit/5e5f1c5d46a043c57cbbe6e043aa95896d9c40fa
  for cups-filters 1.25.0 to fix CVE-2025-57812
  "multiple TIFF-related issues" (bsc#1253373), see
  https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-jpxg-qc2c-hgv4
  https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-rc6w-jmvv-v7gx
  https://github.com/OpenPrinting/libcupsfilters/security/advisories/GHSA-fmvr-45mx-43c6
- cups-filters-1.25.0-CVE-2025-64524.patch is from
  https://bugzilla.suse.com/attachment.cgi?id=886866 in bsc#1253364
  for cups-filters 1.25.0 to fix CVE-2025-64524
  "use of unvalidated length parameter in the rastertopclx filter
  can lead to an out-of-bounds write", see
  https://github.com/OpenPrinting/cups-filters/security/advisories/GHSA-rq44-2q5p-x3hv
- In general regarding cups-filters security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1770811200">- Updated cups-filters-1.28.17-CVE-2024-47175.patch
  because the former version caused a regression
  "Error about PPD file during 'driverless' printer setup"
  (boo#1256868) and
  "ppd pull out from [driverless] printer feature broken"
  (bsc#1256977)</changelog>
</package>
<package pkgid="bd5c784f60a80e83c3e73fe1b779e3461164010adf0b00b0672097b33c8232b3" name="curl" arch="src">
  <version epoch="0" ver="8.14.1" rel="150600.4.28.1"/>
  <changelog author="pmonreal@suse.com" date="1727179200">- Update to 8.10.1:
  * Bugfixes:
  - autotools: fix `--with-ca-embed` build rule
  - cmake: ensure `CURL_USE_OPENSSL`/`USE_OPENSSL_QUIC` are set in sync
  - cmake: fix MSH3 to appear on the feature list
  - connect: store connection info when really done
  - FTP: partly revert eeb7c1280742f5c8fa48a4340fc1e1a1a2c7075a
  - http2: when uploading data from stdin, fix eos forwarding
  - http: make max-filesize check not count ignored bodies
  - lib: fix AF_INET6 use outside of USE_IPV6
  - multi: check that the multi handle is valid in curl_multi_assign
  - QUIC: on connect, keep on trying on draining server
  - request: correctly reset the eos_sent flag
  - setopt: remove superfluous use of ternary expressions
  - singleuse: drop `Curl_memrchr()` for no-HTTP builds
  - tool_cb_wrt: use "curl_response" if no file name in URL
  - transfer: fix sendrecv() without interim poll
  - vtls: fix `Curl_ssl_conn_config_match` doc param</changelog>
  <changelog author="pmonreal@suse.com" date="1730289600">- Security fix: [bsc#1232528, CVE-2024-9681]
  * HSTS subdomain overwrites parent cache entry
  * Add curl-CVE-2024-9681.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730894400">- Update to 8.11.0:
  * Security fixes: [bsc#1232528, CVE-2024-9681]
  - curl: HSTS subdomain overwrites parent cache entry
  * Changes:
  - curl: --create-dirs works for --dump-header as well
  - gtls: Add P12 format support
  - ipfs: add options to disable
  - TLS: TLSv1.3 earlydata support for curl
  - WebSockets: make support official (non-experimental)
  * Bugfixes:
  - build: clarify CA embed is for curl tool, mark default, improve summary
  - build: show if CA bundle to embed was found
  - build: tidy up and improve versioned-symbols options
  - cmake/FindNGTCP2: use library path as hint for finding crypto module
  - cmake: disable default OpenSSL if BearSSL, GnuTLS or Rustls is enabled
  - cmake: rename LDAP dependency config variables to match Find modules
  - cmake: replace 'check_include_file_concat()' for LDAP and GSS detection
  - cmake: use OpenSSL for LDAP detection only if available
  - curl: add build options for safe/no CA bundle search (Windows)
  - curl: detect ECH support dynamically, not at build time
  - curl_addrinfo: support operating systems with only getaddrinfo(3)
  - ftp: fix 0-length last write on upload from stdin
  - gnutls: use session cache for QUIC
  - hsts: improve subdomain handling
  - hsts: support "implied LWS" properly around max-age
  - http2: auto reset stream on server eos
  - json.md: cli-option '--json' is an alias of '--data-binary'
  - lib: move curl_path.[ch] into vssh/
  - lib: remove function pointer typecasts for hmac/sha256/md5
  - libssh.c: handle EGAINS during proto-connect correctly
  - libssh2: use the filename buffer when getting the homedir
  - multi.c: warn/assert on stall only without timer
  - negotiate: conditional check around GSS &amp; SSL specific code
  - netrc: cache the netrc file in memory
  - ngtcp2: do not loop on recv
  - ngtcp2: set max window size to 10x of initial (128KB)
  - openssl quic: populate x509 store before handshake
  - openssl: extend the OpenSSL error messages
  - openssl: improve retries on shutdown
  - quic: use send/recvmmsg when available
  - schannel: fix TLS cert verification by IP SAN
  - schannel: ignore error on recv beyond close notify
  - select: use poll() if existing, avoid poll() with no sockets
  - sendf: add condition to max-filesize check
  - server/mqttd: fix two memory leaks
  - setopt: return error for bad input to CURLOPT_RTSP_REQUEST
  - setopt_cptr: make overflow check only done when needed
  - tls: avoid abusing CURLE_SSL_ENGINE_INITFAILED
  - tool: support --show-headers AND --remote-header-name
  - tool_operate: make --skip-existing work for --parallel
  - url: connection reuse on h3 connections
  - url: use same credentials on redirect
  - urlapi: normalize the IPv6 address
  - version: say quictls in MSH3 builds
  - vquic: fix compiler warning with gcc + MUSL
  - vquic: recv_mmsg, use fewer, but larger buffers
  - vtls: convert Curl_pin_peer_pubkey to use dynbuf
  - vtls: convert pubkey_pem_to_der to use dynbuf
  * Rebase curl-secure-getenv.patch</changelog>
  <changelog author="bjorn.bidar@thaodan.de" date="1731499200">- Add patch to fix libcurl when netrc parsing is enabled.
  curl_easy_duphandle did not init netrc which broke applications such
  as for example git. gh#curl/curl#15496
  * 0001-duphandle-also-init-netrc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733227200">- Security fix: [bsc#1234068, CVE-2024-11053]
  * curl could leak the password used for the first host to the
    followed-to host under certain circumstances.
  * netrc: address several netrc parser flaws
  * Add curl-CVE-2024-11053.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733918400">- Update to 8.11.1:
  * Security fixes:
  - netrc and redirect credential leak [bsc#1234068, CVE-2024-11053]
  * Bugfixes:
  - build: fix ECH to always enable HTTPS RR
  - cookie: treat cookie name case sensitively
  - curl-rustls.m4: keep existing 'CPPFLAGS'/'LDFLAGS' when detected
  - curl: use realtime in trace timestamps
  - digest: produce a shorter cnonce in Digest headers
  - docs: document default 'User-Agent'
  - docs: suggest --ssl-reqd instead of --ftp-ssl
  - duphandle: also init netrc
  - hostip: don't use the resolver for FQDN localhost
  - http_negotiate: allow for a one byte larger channel binding buffer
  - krb5: fix socket/sockindex confusion, MSVC compiler warnings
  - libssh: use libssh sftp_aio to upload file
  - libssh: when using IPv6 numerical address, add brackets
  - mime: fix reader stall on small read lengths
  - mk-ca-bundle: remove CKA_NSS_SERVER_DISTRUST_AFTER conditions
  - mprintf: fix the integer overflow checks
  - multi: fix callback for 'CURLMOPT_TIMERFUNCTION' not being called again when...
  - netrc: address several netrc parser flaws
  - netrc: support large file, longer lines, longer tokens
  - nghttp2: use custom memory functions
  - OpenSSL: improvde error message on expired certificate
  - openssl: remove three "Useless Assignments"
  - openssl: stop using SSL_CTX_ function prefix for our functions
  - pytest: add test for use of CURLMOPT_MAX_HOST_CONNECTIONS
  - rtsp: check EOS in the RTSP receive and return an error code
  - schannel: remove TLS 1.3 ciphersuite-list support
  - setopt: fix CURLOPT_HTTP_CONTENT_DECODING
  - setopt: fix missing options for builds without HTTP &amp; MQTT
  - socket: handle binding to "host!&lt;ip&gt;"
  - socketpair: fix enabling 'USE_EVENTFD'
  - strtok: use namespaced 'strtok_r' macro instead of redefining it
  * Remove 0001-duphandle-also-init-netrc.patch upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1736251200">- smtp: for starttls, do full upgrade [bsc#1235151]
  * Make sure the TLS handshake after a successful STARTTLS command
    is fully done before further sending/receiving on the connection.
  * Add curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238400">- Security fix: [bsc#1236588, CVE-2025-0167]
  * netrc: 'default' with no credentials is not a match
  * Add curl-CVE-2025-0167.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238401">- Security fix: [bsc#1236590, CVE-2025-0725]
  * content_encoding: drop support for zlib before 1.2.0.4
  * content_encoding: put the decomp buffers into the writer structs
  * Add curl-CVE-2025-0725.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738843200">- Update to 8.12.0:
  * Security fixes:
  - [bsc#1234068, CVE-2024-11053] curl could leak the password used
    for the first host to the followed-to host under certain circumstances.
  - [bsc#1232528, CVE-2024-9681] HSTS subdomain overwrites parent cache entry
  - [bsc#1236589, CVE-2025-0665] eventfd double close
  * Changes:
  - curl: add byte range support to --variable reading from file
  - curl: make --etag-save acknowledge --create-dirs
  - getinfo: fix CURLINFO_QUEUE_TIME_T and add 'time_queue' var
  - getinfo: provide info which auth was used for HTTP and proxy
  - hyper: drop support
  - openssl: add support to use keys and certificates from PKCS#11 provider
  - QUIC: 0RTT for gnutls via CURLSSLOPT_EARLYDATA
  - vtls: feature ssls-export for SSL session im-/export
  * Bugfixes:
  - altsvc: avoid integer overflow in expire calculation
  - asyn-ares: acknowledge CURLOPT_DNS_SERVERS set to NULL
  - asyn-ares: fix memory leak
  - asyn-ares: initial HTTPS resolve support
  - asyn-thread: use c-ares to resolve HTTPS RR
  - async-thread: avoid closing eventfd twice
  - cd2nroff: do not insist on quoted &lt;&gt; within backticks
  - cd2nroff: support "none" as a TLS backend
  - conncache: count shutdowns against host and max limits
  - content_encoding: drop support for zlib before 1.2.0.4
  - content_encoding: namespace GZIP flag constants
  - content_encoding: put the decomp buffers into the writer structs
  - content_encoding: support use of custom libzstd memory functions
  - cookie: cap expire times to 400 days
  - cookie: parse only the exact expire date
  - curl: return error if etag options are used with multiple URLs
  - curl_multi_fdset: include the shutdown connections in the set
  - curl_sha512_256: rename symbols to the curl namespace
  - curl_url_set.md: adjust the added-in to 7.62.0
  - doh: send HTTPS RR requests for all HTTP(S) transfers
  - easy: allow connect-only handle reuse with easy_perform
  - easy: make curl_easy_perform() return error if connection still there
  - easy_lock: use Sleep(1) for thread yield on old Windows
  - ECH: update APIs to those agreed with OpenSSL maintainers
  - GnuTLS: fix 'time_appconnect' for early data
  - HTTP/2: strip TE request header
  - http2: fix data_pending check
  - http2: fix value stored to 'result' is never read
  - http: ignore invalid Retry-After times
  - http_aws_sigv4: Fix invalid compare function handling zero-length pairs
  - https-connect: start next immediately on failure
  - lib: redirect handling by protocol handler
  - multi: fix curl_multi_waitfds reporting of fd_count
  - netrc: 'default' with no credentials is not a match
  - netrc: fix password-only entries
  - netrc: restore _netrc fallback logic
  - ngtcp2: fix memory leak on connect failure
  - openssl: define `HAVE_KEYLOG_CALLBACK` before use
  - openssl: fix ECH logic
  - osslq: use SSL_poll to determine writeability of QUIC streams
  - sectransp: free certificate on error
  - select: avoid a NULL deref in cwfds_add_sock
  - src: omit hugehelp and ca-embed from libcurltool
  - ssl session cache: change cache dimensions
  - system.h: add 64-bit curl_off_t definitions for NonStop
  - telnet: handle single-byte input option
  - TLS: check connection for SSL use, not handler
  - tool_formparse.c: make curlx_uztoso a static in here
  - tool_formparse: accept digits in --form type= strings
  - tool_getparam: ECH param parsing refix
  - tool_getparam: fail --hostpubsha256 if libssh2 is not used
  - tool_getparam: fix "Ignored Return Value"
  - tool_getparam: fix memory leak on error in parse_ech
  - tool_getparam: fix the ECH parser
  - tool_operate: make --etag-compare always accept a non-existing file
  - transfer: fix CURLOPT_CURLU override logic
  - urlapi: fix redirect to a new fragment or query (only)
  - vquic: make vquic_send_packets not return without setting psent
  - vtls: fix default SSL backend as a fallback
  - vtls: only remember the expiry timestamp in session cache
  - websocket: fix message send corruption
  - x509asn1: add parse recursion limit
  * Rebase pathes:
  - libcurl-ocloexec.patch
  - dont-mess-with-rpmoptflags.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739448000">- Update to 8.12.1:
  * Bugfixes:
  - asyn-thread: fix build with 'CURL_DISABLE_SOCKETPAIR'
  - asyn-thread: fix HTTPS RR crash
  - asyn-thread: fix the returned bitmask from Curl_resolver_getsock
  - asyn-thread: survive a c-ares channel set to NULL
  - cmake: always reference OpenSSL and ZLIB via imported targets
  - cmake: respect 'GNUTLS_CFLAGS' when detected via 'pkg-config'
  - cmake: respect 'GNUTLS_LIBRARY_DIRS' in 'libcurl.pc' and 'curl-config'
  - content_encoding: #error on too old zlib
  - imap: TLS upgrade fix
  - ldap: drop support for legacy Novell LDAP SDK
  - libssh2: comparison is always true because rc &lt;= -1
  - libssh2: raise lowest supported version to 1.2.8
  - libssh: drop support for libssh older than 0.9.0
  - openssl-quic: ignore ciphers for h3
  - pop3: TLS upgrade fix
  - runtests: fix the disabling of the memory tracking
  - runtests: quote commands to support paths with spaces
  - scache: add magic checks
  - smb: silence '-Warray-bounds' with gcc 13+
  - smtp: TLS upgrade fix
  - tool_cfgable: sort struct fields by size, use bitfields for booleans
  - tool_getparam: add "TLS required" flag for each such option
  - vtls: fix multissl-init
  - wakeup_write: make sure the eventfd write sends eight bytes</changelog>
  <changelog author="pmonreal@suse.com" date="1744200000">- Update to 8.13.0:
  * Changes:
  - curl: add write-out variable 'tls_earlydata'
  - curl: make --url support a file with URLs
  - gnutls: set priority via --ciphers
  - IMAP: add CURLOPT_UPLOAD_FLAGS and --upload-flags
  - lib: add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY
  - OpenSSL/quictls: add support for TLSv1.3 early data
  - rustls: add support for CERTINFO
  - rustls: add support for SSLKEYLOGFILE
  - rustls: support ECH w/ DoH lookup for config
  - rustls: support native platform verifier
  - var: add a '64dec' function that can base64 decode a string
  * Bugfixes:
  - conn: fix connection reuse when SSL is optional
  - hash: use single linked list for entries
  - http2: detect session being closed on ingress handling
  - http2: reset stream on response header error
  - http: remove a HTTP method size restriction
  - http: version negotiation
  - httpsrr: fix port detection
  - libssh: fix freeing of resources in disconnect
  - libssh: fix scp large file upload for 32-bit size_t systems
  - openssl-quic: do not iterate over multi handles
  - openssl: check return value of X509_get0_pubkey
  - openssl: drop support for old OpenSSL/LibreSSL versions
  - openssl: fix crash on missing cert password
  - openssl: fix pkcs11 URI checking for key files.
  - openssl: remove bad `goto`s into other scope
  - setopt: illegal CURLOPT_SOCKS5_AUTH should return error
  - setopt: setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine
  - sshserver.pl: adjust `AuthorizedKeysFile2` cutoff version
  - sshserver: fix excluding obsolete client config lines
  - SSLCERTS: list support for SSL_CERT_FILE and SSL_CERT_DIR
  - tftpd: prefix TFTP protocol error `E*` constants with `TFTP_`
  - tool_operate: fail SSH transfers without server auth
  - url: call protocol handler's disconnect in Curl_conn_free
  - urlapi: remove percent encoded dot sequences from the URL path
  - urldata: remove 'hostname' from struct Curl_async
  * Rebase patches:
  - libcurl-ocloexec.patch
  - curl-secure-getenv.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1744372800">- fix Leap build add curl-8.13.0-CloseSocket.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1748433600">- Update to 8.14.0:
  * Security fixes:
  - [CVE-2025-4947, bsc#1243397] QUIC certificate check skip with wolfSSL
  - [CVE-2025-5025, bsc#1243706] No QUIC certificate pinning with wolfSSL
  * Changes:
  - mqtt: send ping at upkeep interval
  - schannel: handle pkcs12 client certificates containing CA certificates
  - TLS: add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: import v2025.04.20 script + docs
  - websocket: add option to disable auto-pong reply
  * Bugfixes:
  - asny-thrdd: fix detach from running thread
  - async-threaded resolver: use ref counter
  - async: DoH improvements
  - build: enable gcc-12/13+, clang-10+ picky warnings
  - build: enable gcc-15 picky warnings
  - certs: drop unused `default_bits` from `.prm` files
  - cf-https-connect: use the passed in dns struct pointer
  - cf-socket: fix FTP accept connect
  - cfilters: remove assert
  - cmake: fix nghttp3 static linking with `USE_OPENSSL_QUIC=ON`
  - cmake: prefer `COMPILE_OPTIONS` over `CMAKE_C_FLAGS` for custom C options
  - cmake: revert `CURL_LTO` behavior for multi-config generators
  - configure: fix --disable-rt
  - CONTRIBUTE: add project guidelines for AI use
  - cpool/cshutdown: force close connections under pressure
  - curl: fix memory leak when -h is used in config file
  - curl_get_line: handle lines ending on the buffer boundary
  - headers: enforce a max number of response header to accept
  - http: fix HTTP/2 handling of TE request header using "trailers"
  - lib: include files using known path
  - lib: unify conversions to/from hex
  - libssh: add NULL check for Curl_meta_get()
  - libssh: fix memory leak
  - mqtt: use conn/easy meta hash
  - multi: do transfer book keeping using mid
  - multi: init_do(): check result
  - netrc: avoid NULL deref on weird input
  - netrc: avoid strdup NULL
  - netrc: deal with null token better
  - openssl-quic: avoid potential `-Wnull-dereference`, add assert
  - openssl-quic: fix shutdown when stream not open
  - openssl: enable builds for *both* engines and providers
  - openssl: set the cipher string before doing private cert
  - progress: avoid integer overflow when gathering total transfer size
  - rand: update comment on Curl_rand_bytes weak random
  - rustls: make max size of cert and key reasonable
  - smb: avoid integer overflow on weird input date
  - urlapi: redirecting to "" is considered fine
  * Remove curl-8.13.0-CloseSocket.patch upstream
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1749038400">- Update to 8.14.1:
  * Security fixes:
  - [bsc#1243933, CVE-2025-5399] libcurl can possibly get
    trapped in an endless busy-loop when processing specially
    crafted packets [d1145df2]
  * Bugfixes:
  - asyn-thrdd: fix cleanup when RR fails due to OOM
  - ftp: fix teardown of DATA connection in done
  - http: fail early when rewind of input failed when following redirects
  - multi: fix add_handle resizing
  - tls BIOs: handle BIO_CTRL_EOF correctly
  - tool_getparam: make --no-anyauth not be accepted
  - wolfssl: fix sending of early data
  - ws: handle blocked sends better
  - ws: tests and fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1749643200">- Update to 8.14.1: [jsc#PED-13055, jsc#PED-13056]
  * Add _multibuild
  * Remove patches fixed in the update:
  - curl-CVE-2024-11053.patch
  - curl-CVE-2024-2004.patch
  - curl-CVE-2024-2379.patch
  - curl-CVE-2024-2398.patch
  - curl-CVE-2024-2466.patch
  - curl-CVE-2024-6197.patch
  - curl-CVE-2024-7264.patch
  - curl-CVE-2024-8096.patch
  - curl-CVE-2024-9681.patch
  - curl-CVE-2025-0167.patch
  - curl-CVE-2025-0725.patch
  - curl-aws_sigv4-url-encode-the-canonical-path.patch
  - curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
</package>
<package pkgid="2bb9d50cf0001553f3153a180412334b943b409b52c64fdba1e3aa7eb2673a0d" name="curl" arch="x86_64">
  <version epoch="0" ver="8.14.1" rel="150600.4.28.1"/>
  <changelog author="pmonreal@suse.com" date="1727179200">- Update to 8.10.1:
  * Bugfixes:
  - autotools: fix `--with-ca-embed` build rule
  - cmake: ensure `CURL_USE_OPENSSL`/`USE_OPENSSL_QUIC` are set in sync
  - cmake: fix MSH3 to appear on the feature list
  - connect: store connection info when really done
  - FTP: partly revert eeb7c1280742f5c8fa48a4340fc1e1a1a2c7075a
  - http2: when uploading data from stdin, fix eos forwarding
  - http: make max-filesize check not count ignored bodies
  - lib: fix AF_INET6 use outside of USE_IPV6
  - multi: check that the multi handle is valid in curl_multi_assign
  - QUIC: on connect, keep on trying on draining server
  - request: correctly reset the eos_sent flag
  - setopt: remove superfluous use of ternary expressions
  - singleuse: drop `Curl_memrchr()` for no-HTTP builds
  - tool_cb_wrt: use "curl_response" if no file name in URL
  - transfer: fix sendrecv() without interim poll
  - vtls: fix `Curl_ssl_conn_config_match` doc param</changelog>
  <changelog author="pmonreal@suse.com" date="1730289600">- Security fix: [bsc#1232528, CVE-2024-9681]
  * HSTS subdomain overwrites parent cache entry
  * Add curl-CVE-2024-9681.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730894400">- Update to 8.11.0:
  * Security fixes: [bsc#1232528, CVE-2024-9681]
  - curl: HSTS subdomain overwrites parent cache entry
  * Changes:
  - curl: --create-dirs works for --dump-header as well
  - gtls: Add P12 format support
  - ipfs: add options to disable
  - TLS: TLSv1.3 earlydata support for curl
  - WebSockets: make support official (non-experimental)
  * Bugfixes:
  - build: clarify CA embed is for curl tool, mark default, improve summary
  - build: show if CA bundle to embed was found
  - build: tidy up and improve versioned-symbols options
  - cmake/FindNGTCP2: use library path as hint for finding crypto module
  - cmake: disable default OpenSSL if BearSSL, GnuTLS or Rustls is enabled
  - cmake: rename LDAP dependency config variables to match Find modules
  - cmake: replace 'check_include_file_concat()' for LDAP and GSS detection
  - cmake: use OpenSSL for LDAP detection only if available
  - curl: add build options for safe/no CA bundle search (Windows)
  - curl: detect ECH support dynamically, not at build time
  - curl_addrinfo: support operating systems with only getaddrinfo(3)
  - ftp: fix 0-length last write on upload from stdin
  - gnutls: use session cache for QUIC
  - hsts: improve subdomain handling
  - hsts: support "implied LWS" properly around max-age
  - http2: auto reset stream on server eos
  - json.md: cli-option '--json' is an alias of '--data-binary'
  - lib: move curl_path.[ch] into vssh/
  - lib: remove function pointer typecasts for hmac/sha256/md5
  - libssh.c: handle EGAINS during proto-connect correctly
  - libssh2: use the filename buffer when getting the homedir
  - multi.c: warn/assert on stall only without timer
  - negotiate: conditional check around GSS &amp; SSL specific code
  - netrc: cache the netrc file in memory
  - ngtcp2: do not loop on recv
  - ngtcp2: set max window size to 10x of initial (128KB)
  - openssl quic: populate x509 store before handshake
  - openssl: extend the OpenSSL error messages
  - openssl: improve retries on shutdown
  - quic: use send/recvmmsg when available
  - schannel: fix TLS cert verification by IP SAN
  - schannel: ignore error on recv beyond close notify
  - select: use poll() if existing, avoid poll() with no sockets
  - sendf: add condition to max-filesize check
  - server/mqttd: fix two memory leaks
  - setopt: return error for bad input to CURLOPT_RTSP_REQUEST
  - setopt_cptr: make overflow check only done when needed
  - tls: avoid abusing CURLE_SSL_ENGINE_INITFAILED
  - tool: support --show-headers AND --remote-header-name
  - tool_operate: make --skip-existing work for --parallel
  - url: connection reuse on h3 connections
  - url: use same credentials on redirect
  - urlapi: normalize the IPv6 address
  - version: say quictls in MSH3 builds
  - vquic: fix compiler warning with gcc + MUSL
  - vquic: recv_mmsg, use fewer, but larger buffers
  - vtls: convert Curl_pin_peer_pubkey to use dynbuf
  - vtls: convert pubkey_pem_to_der to use dynbuf
  * Rebase curl-secure-getenv.patch</changelog>
  <changelog author="bjorn.bidar@thaodan.de" date="1731499200">- Add patch to fix libcurl when netrc parsing is enabled.
  curl_easy_duphandle did not init netrc which broke applications such
  as for example git. gh#curl/curl#15496
  * 0001-duphandle-also-init-netrc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733227200">- Security fix: [bsc#1234068, CVE-2024-11053]
  * curl could leak the password used for the first host to the
    followed-to host under certain circumstances.
  * netrc: address several netrc parser flaws
  * Add curl-CVE-2024-11053.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733918400">- Update to 8.11.1:
  * Security fixes:
  - netrc and redirect credential leak [bsc#1234068, CVE-2024-11053]
  * Bugfixes:
  - build: fix ECH to always enable HTTPS RR
  - cookie: treat cookie name case sensitively
  - curl-rustls.m4: keep existing 'CPPFLAGS'/'LDFLAGS' when detected
  - curl: use realtime in trace timestamps
  - digest: produce a shorter cnonce in Digest headers
  - docs: document default 'User-Agent'
  - docs: suggest --ssl-reqd instead of --ftp-ssl
  - duphandle: also init netrc
  - hostip: don't use the resolver for FQDN localhost
  - http_negotiate: allow for a one byte larger channel binding buffer
  - krb5: fix socket/sockindex confusion, MSVC compiler warnings
  - libssh: use libssh sftp_aio to upload file
  - libssh: when using IPv6 numerical address, add brackets
  - mime: fix reader stall on small read lengths
  - mk-ca-bundle: remove CKA_NSS_SERVER_DISTRUST_AFTER conditions
  - mprintf: fix the integer overflow checks
  - multi: fix callback for 'CURLMOPT_TIMERFUNCTION' not being called again when...
  - netrc: address several netrc parser flaws
  - netrc: support large file, longer lines, longer tokens
  - nghttp2: use custom memory functions
  - OpenSSL: improvde error message on expired certificate
  - openssl: remove three "Useless Assignments"
  - openssl: stop using SSL_CTX_ function prefix for our functions
  - pytest: add test for use of CURLMOPT_MAX_HOST_CONNECTIONS
  - rtsp: check EOS in the RTSP receive and return an error code
  - schannel: remove TLS 1.3 ciphersuite-list support
  - setopt: fix CURLOPT_HTTP_CONTENT_DECODING
  - setopt: fix missing options for builds without HTTP &amp; MQTT
  - socket: handle binding to "host!&lt;ip&gt;"
  - socketpair: fix enabling 'USE_EVENTFD'
  - strtok: use namespaced 'strtok_r' macro instead of redefining it
  * Remove 0001-duphandle-also-init-netrc.patch upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1736251200">- smtp: for starttls, do full upgrade [bsc#1235151]
  * Make sure the TLS handshake after a successful STARTTLS command
    is fully done before further sending/receiving on the connection.
  * Add curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238400">- Security fix: [bsc#1236588, CVE-2025-0167]
  * netrc: 'default' with no credentials is not a match
  * Add curl-CVE-2025-0167.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238401">- Security fix: [bsc#1236590, CVE-2025-0725]
  * content_encoding: drop support for zlib before 1.2.0.4
  * content_encoding: put the decomp buffers into the writer structs
  * Add curl-CVE-2025-0725.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738843200">- Update to 8.12.0:
  * Security fixes:
  - [bsc#1234068, CVE-2024-11053] curl could leak the password used
    for the first host to the followed-to host under certain circumstances.
  - [bsc#1232528, CVE-2024-9681] HSTS subdomain overwrites parent cache entry
  - [bsc#1236589, CVE-2025-0665] eventfd double close
  * Changes:
  - curl: add byte range support to --variable reading from file
  - curl: make --etag-save acknowledge --create-dirs
  - getinfo: fix CURLINFO_QUEUE_TIME_T and add 'time_queue' var
  - getinfo: provide info which auth was used for HTTP and proxy
  - hyper: drop support
  - openssl: add support to use keys and certificates from PKCS#11 provider
  - QUIC: 0RTT for gnutls via CURLSSLOPT_EARLYDATA
  - vtls: feature ssls-export for SSL session im-/export
  * Bugfixes:
  - altsvc: avoid integer overflow in expire calculation
  - asyn-ares: acknowledge CURLOPT_DNS_SERVERS set to NULL
  - asyn-ares: fix memory leak
  - asyn-ares: initial HTTPS resolve support
  - asyn-thread: use c-ares to resolve HTTPS RR
  - async-thread: avoid closing eventfd twice
  - cd2nroff: do not insist on quoted &lt;&gt; within backticks
  - cd2nroff: support "none" as a TLS backend
  - conncache: count shutdowns against host and max limits
  - content_encoding: drop support for zlib before 1.2.0.4
  - content_encoding: namespace GZIP flag constants
  - content_encoding: put the decomp buffers into the writer structs
  - content_encoding: support use of custom libzstd memory functions
  - cookie: cap expire times to 400 days
  - cookie: parse only the exact expire date
  - curl: return error if etag options are used with multiple URLs
  - curl_multi_fdset: include the shutdown connections in the set
  - curl_sha512_256: rename symbols to the curl namespace
  - curl_url_set.md: adjust the added-in to 7.62.0
  - doh: send HTTPS RR requests for all HTTP(S) transfers
  - easy: allow connect-only handle reuse with easy_perform
  - easy: make curl_easy_perform() return error if connection still there
  - easy_lock: use Sleep(1) for thread yield on old Windows
  - ECH: update APIs to those agreed with OpenSSL maintainers
  - GnuTLS: fix 'time_appconnect' for early data
  - HTTP/2: strip TE request header
  - http2: fix data_pending check
  - http2: fix value stored to 'result' is never read
  - http: ignore invalid Retry-After times
  - http_aws_sigv4: Fix invalid compare function handling zero-length pairs
  - https-connect: start next immediately on failure
  - lib: redirect handling by protocol handler
  - multi: fix curl_multi_waitfds reporting of fd_count
  - netrc: 'default' with no credentials is not a match
  - netrc: fix password-only entries
  - netrc: restore _netrc fallback logic
  - ngtcp2: fix memory leak on connect failure
  - openssl: define `HAVE_KEYLOG_CALLBACK` before use
  - openssl: fix ECH logic
  - osslq: use SSL_poll to determine writeability of QUIC streams
  - sectransp: free certificate on error
  - select: avoid a NULL deref in cwfds_add_sock
  - src: omit hugehelp and ca-embed from libcurltool
  - ssl session cache: change cache dimensions
  - system.h: add 64-bit curl_off_t definitions for NonStop
  - telnet: handle single-byte input option
  - TLS: check connection for SSL use, not handler
  - tool_formparse.c: make curlx_uztoso a static in here
  - tool_formparse: accept digits in --form type= strings
  - tool_getparam: ECH param parsing refix
  - tool_getparam: fail --hostpubsha256 if libssh2 is not used
  - tool_getparam: fix "Ignored Return Value"
  - tool_getparam: fix memory leak on error in parse_ech
  - tool_getparam: fix the ECH parser
  - tool_operate: make --etag-compare always accept a non-existing file
  - transfer: fix CURLOPT_CURLU override logic
  - urlapi: fix redirect to a new fragment or query (only)
  - vquic: make vquic_send_packets not return without setting psent
  - vtls: fix default SSL backend as a fallback
  - vtls: only remember the expiry timestamp in session cache
  - websocket: fix message send corruption
  - x509asn1: add parse recursion limit
  * Rebase pathes:
  - libcurl-ocloexec.patch
  - dont-mess-with-rpmoptflags.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739448000">- Update to 8.12.1:
  * Bugfixes:
  - asyn-thread: fix build with 'CURL_DISABLE_SOCKETPAIR'
  - asyn-thread: fix HTTPS RR crash
  - asyn-thread: fix the returned bitmask from Curl_resolver_getsock
  - asyn-thread: survive a c-ares channel set to NULL
  - cmake: always reference OpenSSL and ZLIB via imported targets
  - cmake: respect 'GNUTLS_CFLAGS' when detected via 'pkg-config'
  - cmake: respect 'GNUTLS_LIBRARY_DIRS' in 'libcurl.pc' and 'curl-config'
  - content_encoding: #error on too old zlib
  - imap: TLS upgrade fix
  - ldap: drop support for legacy Novell LDAP SDK
  - libssh2: comparison is always true because rc &lt;= -1
  - libssh2: raise lowest supported version to 1.2.8
  - libssh: drop support for libssh older than 0.9.0
  - openssl-quic: ignore ciphers for h3
  - pop3: TLS upgrade fix
  - runtests: fix the disabling of the memory tracking
  - runtests: quote commands to support paths with spaces
  - scache: add magic checks
  - smb: silence '-Warray-bounds' with gcc 13+
  - smtp: TLS upgrade fix
  - tool_cfgable: sort struct fields by size, use bitfields for booleans
  - tool_getparam: add "TLS required" flag for each such option
  - vtls: fix multissl-init
  - wakeup_write: make sure the eventfd write sends eight bytes</changelog>
  <changelog author="pmonreal@suse.com" date="1744200000">- Update to 8.13.0:
  * Changes:
  - curl: add write-out variable 'tls_earlydata'
  - curl: make --url support a file with URLs
  - gnutls: set priority via --ciphers
  - IMAP: add CURLOPT_UPLOAD_FLAGS and --upload-flags
  - lib: add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY
  - OpenSSL/quictls: add support for TLSv1.3 early data
  - rustls: add support for CERTINFO
  - rustls: add support for SSLKEYLOGFILE
  - rustls: support ECH w/ DoH lookup for config
  - rustls: support native platform verifier
  - var: add a '64dec' function that can base64 decode a string
  * Bugfixes:
  - conn: fix connection reuse when SSL is optional
  - hash: use single linked list for entries
  - http2: detect session being closed on ingress handling
  - http2: reset stream on response header error
  - http: remove a HTTP method size restriction
  - http: version negotiation
  - httpsrr: fix port detection
  - libssh: fix freeing of resources in disconnect
  - libssh: fix scp large file upload for 32-bit size_t systems
  - openssl-quic: do not iterate over multi handles
  - openssl: check return value of X509_get0_pubkey
  - openssl: drop support for old OpenSSL/LibreSSL versions
  - openssl: fix crash on missing cert password
  - openssl: fix pkcs11 URI checking for key files.
  - openssl: remove bad `goto`s into other scope
  - setopt: illegal CURLOPT_SOCKS5_AUTH should return error
  - setopt: setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine
  - sshserver.pl: adjust `AuthorizedKeysFile2` cutoff version
  - sshserver: fix excluding obsolete client config lines
  - SSLCERTS: list support for SSL_CERT_FILE and SSL_CERT_DIR
  - tftpd: prefix TFTP protocol error `E*` constants with `TFTP_`
  - tool_operate: fail SSH transfers without server auth
  - url: call protocol handler's disconnect in Curl_conn_free
  - urlapi: remove percent encoded dot sequences from the URL path
  - urldata: remove 'hostname' from struct Curl_async
  * Rebase patches:
  - libcurl-ocloexec.patch
  - curl-secure-getenv.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1744372800">- fix Leap build add curl-8.13.0-CloseSocket.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1748433600">- Update to 8.14.0:
  * Security fixes:
  - [CVE-2025-4947, bsc#1243397] QUIC certificate check skip with wolfSSL
  - [CVE-2025-5025, bsc#1243706] No QUIC certificate pinning with wolfSSL
  * Changes:
  - mqtt: send ping at upkeep interval
  - schannel: handle pkcs12 client certificates containing CA certificates
  - TLS: add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: import v2025.04.20 script + docs
  - websocket: add option to disable auto-pong reply
  * Bugfixes:
  - asny-thrdd: fix detach from running thread
  - async-threaded resolver: use ref counter
  - async: DoH improvements
  - build: enable gcc-12/13+, clang-10+ picky warnings
  - build: enable gcc-15 picky warnings
  - certs: drop unused `default_bits` from `.prm` files
  - cf-https-connect: use the passed in dns struct pointer
  - cf-socket: fix FTP accept connect
  - cfilters: remove assert
  - cmake: fix nghttp3 static linking with `USE_OPENSSL_QUIC=ON`
  - cmake: prefer `COMPILE_OPTIONS` over `CMAKE_C_FLAGS` for custom C options
  - cmake: revert `CURL_LTO` behavior for multi-config generators
  - configure: fix --disable-rt
  - CONTRIBUTE: add project guidelines for AI use
  - cpool/cshutdown: force close connections under pressure
  - curl: fix memory leak when -h is used in config file
  - curl_get_line: handle lines ending on the buffer boundary
  - headers: enforce a max number of response header to accept
  - http: fix HTTP/2 handling of TE request header using "trailers"
  - lib: include files using known path
  - lib: unify conversions to/from hex
  - libssh: add NULL check for Curl_meta_get()
  - libssh: fix memory leak
  - mqtt: use conn/easy meta hash
  - multi: do transfer book keeping using mid
  - multi: init_do(): check result
  - netrc: avoid NULL deref on weird input
  - netrc: avoid strdup NULL
  - netrc: deal with null token better
  - openssl-quic: avoid potential `-Wnull-dereference`, add assert
  - openssl-quic: fix shutdown when stream not open
  - openssl: enable builds for *both* engines and providers
  - openssl: set the cipher string before doing private cert
  - progress: avoid integer overflow when gathering total transfer size
  - rand: update comment on Curl_rand_bytes weak random
  - rustls: make max size of cert and key reasonable
  - smb: avoid integer overflow on weird input date
  - urlapi: redirecting to "" is considered fine
  * Remove curl-8.13.0-CloseSocket.patch upstream
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1749038400">- Update to 8.14.1:
  * Security fixes:
  - [bsc#1243933, CVE-2025-5399] libcurl can possibly get
    trapped in an endless busy-loop when processing specially
    crafted packets [d1145df2]
  * Bugfixes:
  - asyn-thrdd: fix cleanup when RR fails due to OOM
  - ftp: fix teardown of DATA connection in done
  - http: fail early when rewind of input failed when following redirects
  - multi: fix add_handle resizing
  - tls BIOs: handle BIO_CTRL_EOF correctly
  - tool_getparam: make --no-anyauth not be accepted
  - wolfssl: fix sending of early data
  - ws: handle blocked sends better
  - ws: tests and fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1749643200">- Update to 8.14.1: [jsc#PED-13055, jsc#PED-13056]
  * Add _multibuild
  * Remove patches fixed in the update:
  - curl-CVE-2024-11053.patch
  - curl-CVE-2024-2004.patch
  - curl-CVE-2024-2379.patch
  - curl-CVE-2024-2398.patch
  - curl-CVE-2024-2466.patch
  - curl-CVE-2024-6197.patch
  - curl-CVE-2024-7264.patch
  - curl-CVE-2024-8096.patch
  - curl-CVE-2024-9681.patch
  - curl-CVE-2025-0167.patch
  - curl-CVE-2025-0725.patch
  - curl-aws_sigv4-url-encode-the-canonical-path.patch
  - curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
</package>
<package pkgid="38d4a599094a4f0ed5792068d2aabdada497310293627d9ffcdf0f64029f5953" name="curl" arch="src">
  <version epoch="0" ver="8.14.1" rel="150700.7.11.1"/>
  <changelog author="bjorn.bidar@thaodan.de" date="1731499200">- Add patch to fix libcurl when netrc parsing is enabled.
  curl_easy_duphandle did not init netrc which broke applications such
  as for example git. gh#curl/curl#15496
  * 0001-duphandle-also-init-netrc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733227200">- Security fix: [bsc#1234068, CVE-2024-11053]
  * curl could leak the password used for the first host to the
    followed-to host under certain circumstances.
  * netrc: address several netrc parser flaws
  * Add curl-CVE-2024-11053.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733918400">- Update to 8.11.1:
  * Security fixes:
  - netrc and redirect credential leak [bsc#1234068, CVE-2024-11053]
  * Bugfixes:
  - build: fix ECH to always enable HTTPS RR
  - cookie: treat cookie name case sensitively
  - curl-rustls.m4: keep existing 'CPPFLAGS'/'LDFLAGS' when detected
  - curl: use realtime in trace timestamps
  - digest: produce a shorter cnonce in Digest headers
  - docs: document default 'User-Agent'
  - docs: suggest --ssl-reqd instead of --ftp-ssl
  - duphandle: also init netrc
  - hostip: don't use the resolver for FQDN localhost
  - http_negotiate: allow for a one byte larger channel binding buffer
  - krb5: fix socket/sockindex confusion, MSVC compiler warnings
  - libssh: use libssh sftp_aio to upload file
  - libssh: when using IPv6 numerical address, add brackets
  - mime: fix reader stall on small read lengths
  - mk-ca-bundle: remove CKA_NSS_SERVER_DISTRUST_AFTER conditions
  - mprintf: fix the integer overflow checks
  - multi: fix callback for 'CURLMOPT_TIMERFUNCTION' not being called again when...
  - netrc: address several netrc parser flaws
  - netrc: support large file, longer lines, longer tokens
  - nghttp2: use custom memory functions
  - OpenSSL: improvde error message on expired certificate
  - openssl: remove three "Useless Assignments"
  - openssl: stop using SSL_CTX_ function prefix for our functions
  - pytest: add test for use of CURLMOPT_MAX_HOST_CONNECTIONS
  - rtsp: check EOS in the RTSP receive and return an error code
  - schannel: remove TLS 1.3 ciphersuite-list support
  - setopt: fix CURLOPT_HTTP_CONTENT_DECODING
  - setopt: fix missing options for builds without HTTP &amp; MQTT
  - socket: handle binding to "host!&lt;ip&gt;"
  - socketpair: fix enabling 'USE_EVENTFD'
  - strtok: use namespaced 'strtok_r' macro instead of redefining it
  * Remove 0001-duphandle-also-init-netrc.patch upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1736251200">- smtp: for starttls, do full upgrade [bsc#1235151]
  * Make sure the TLS handshake after a successful STARTTLS command
    is fully done before further sending/receiving on the connection.
  * Add curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238400">- Security fix: [bsc#1236588, CVE-2025-0167]
  * netrc: 'default' with no credentials is not a match
  * Add curl-CVE-2025-0167.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238401">- Security fix: [bsc#1236590, CVE-2025-0725]
  * content_encoding: drop support for zlib before 1.2.0.4
  * content_encoding: put the decomp buffers into the writer structs
  * Add curl-CVE-2025-0725.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738843200">- Update to 8.12.0:
  * Security fixes:
  - [bsc#1234068, CVE-2024-11053] curl could leak the password used
    for the first host to the followed-to host under certain circumstances.
  - [bsc#1232528, CVE-2024-9681] HSTS subdomain overwrites parent cache entry
  - [bsc#1236589, CVE-2025-0665] eventfd double close
  * Changes:
  - curl: add byte range support to --variable reading from file
  - curl: make --etag-save acknowledge --create-dirs
  - getinfo: fix CURLINFO_QUEUE_TIME_T and add 'time_queue' var
  - getinfo: provide info which auth was used for HTTP and proxy
  - hyper: drop support
  - openssl: add support to use keys and certificates from PKCS#11 provider
  - QUIC: 0RTT for gnutls via CURLSSLOPT_EARLYDATA
  - vtls: feature ssls-export for SSL session im-/export
  * Bugfixes:
  - altsvc: avoid integer overflow in expire calculation
  - asyn-ares: acknowledge CURLOPT_DNS_SERVERS set to NULL
  - asyn-ares: fix memory leak
  - asyn-ares: initial HTTPS resolve support
  - asyn-thread: use c-ares to resolve HTTPS RR
  - async-thread: avoid closing eventfd twice
  - cd2nroff: do not insist on quoted &lt;&gt; within backticks
  - cd2nroff: support "none" as a TLS backend
  - conncache: count shutdowns against host and max limits
  - content_encoding: drop support for zlib before 1.2.0.4
  - content_encoding: namespace GZIP flag constants
  - content_encoding: put the decomp buffers into the writer structs
  - content_encoding: support use of custom libzstd memory functions
  - cookie: cap expire times to 400 days
  - cookie: parse only the exact expire date
  - curl: return error if etag options are used with multiple URLs
  - curl_multi_fdset: include the shutdown connections in the set
  - curl_sha512_256: rename symbols to the curl namespace
  - curl_url_set.md: adjust the added-in to 7.62.0
  - doh: send HTTPS RR requests for all HTTP(S) transfers
  - easy: allow connect-only handle reuse with easy_perform
  - easy: make curl_easy_perform() return error if connection still there
  - easy_lock: use Sleep(1) for thread yield on old Windows
  - ECH: update APIs to those agreed with OpenSSL maintainers
  - GnuTLS: fix 'time_appconnect' for early data
  - HTTP/2: strip TE request header
  - http2: fix data_pending check
  - http2: fix value stored to 'result' is never read
  - http: ignore invalid Retry-After times
  - http_aws_sigv4: Fix invalid compare function handling zero-length pairs
  - https-connect: start next immediately on failure
  - lib: redirect handling by protocol handler
  - multi: fix curl_multi_waitfds reporting of fd_count
  - netrc: 'default' with no credentials is not a match
  - netrc: fix password-only entries
  - netrc: restore _netrc fallback logic
  - ngtcp2: fix memory leak on connect failure
  - openssl: define `HAVE_KEYLOG_CALLBACK` before use
  - openssl: fix ECH logic
  - osslq: use SSL_poll to determine writeability of QUIC streams
  - sectransp: free certificate on error
  - select: avoid a NULL deref in cwfds_add_sock
  - src: omit hugehelp and ca-embed from libcurltool
  - ssl session cache: change cache dimensions
  - system.h: add 64-bit curl_off_t definitions for NonStop
  - telnet: handle single-byte input option
  - TLS: check connection for SSL use, not handler
  - tool_formparse.c: make curlx_uztoso a static in here
  - tool_formparse: accept digits in --form type= strings
  - tool_getparam: ECH param parsing refix
  - tool_getparam: fail --hostpubsha256 if libssh2 is not used
  - tool_getparam: fix "Ignored Return Value"
  - tool_getparam: fix memory leak on error in parse_ech
  - tool_getparam: fix the ECH parser
  - tool_operate: make --etag-compare always accept a non-existing file
  - transfer: fix CURLOPT_CURLU override logic
  - urlapi: fix redirect to a new fragment or query (only)
  - vquic: make vquic_send_packets not return without setting psent
  - vtls: fix default SSL backend as a fallback
  - vtls: only remember the expiry timestamp in session cache
  - websocket: fix message send corruption
  - x509asn1: add parse recursion limit
  * Rebase pathes:
  - libcurl-ocloexec.patch
  - dont-mess-with-rpmoptflags.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739448000">- Update to 8.12.1:
  * Bugfixes:
  - asyn-thread: fix build with 'CURL_DISABLE_SOCKETPAIR'
  - asyn-thread: fix HTTPS RR crash
  - asyn-thread: fix the returned bitmask from Curl_resolver_getsock
  - asyn-thread: survive a c-ares channel set to NULL
  - cmake: always reference OpenSSL and ZLIB via imported targets
  - cmake: respect 'GNUTLS_CFLAGS' when detected via 'pkg-config'
  - cmake: respect 'GNUTLS_LIBRARY_DIRS' in 'libcurl.pc' and 'curl-config'
  - content_encoding: #error on too old zlib
  - imap: TLS upgrade fix
  - ldap: drop support for legacy Novell LDAP SDK
  - libssh2: comparison is always true because rc &lt;= -1
  - libssh2: raise lowest supported version to 1.2.8
  - libssh: drop support for libssh older than 0.9.0
  - openssl-quic: ignore ciphers for h3
  - pop3: TLS upgrade fix
  - runtests: fix the disabling of the memory tracking
  - runtests: quote commands to support paths with spaces
  - scache: add magic checks
  - smb: silence '-Warray-bounds' with gcc 13+
  - smtp: TLS upgrade fix
  - tool_cfgable: sort struct fields by size, use bitfields for booleans
  - tool_getparam: add "TLS required" flag for each such option
  - vtls: fix multissl-init
  - wakeup_write: make sure the eventfd write sends eight bytes</changelog>
  <changelog author="pmonreal@suse.com" date="1744200000">- Update to 8.13.0:
  * Changes:
  - curl: add write-out variable 'tls_earlydata'
  - curl: make --url support a file with URLs
  - gnutls: set priority via --ciphers
  - IMAP: add CURLOPT_UPLOAD_FLAGS and --upload-flags
  - lib: add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY
  - OpenSSL/quictls: add support for TLSv1.3 early data
  - rustls: add support for CERTINFO
  - rustls: add support for SSLKEYLOGFILE
  - rustls: support ECH w/ DoH lookup for config
  - rustls: support native platform verifier
  - var: add a '64dec' function that can base64 decode a string
  * Bugfixes:
  - conn: fix connection reuse when SSL is optional
  - hash: use single linked list for entries
  - http2: detect session being closed on ingress handling
  - http2: reset stream on response header error
  - http: remove a HTTP method size restriction
  - http: version negotiation
  - httpsrr: fix port detection
  - libssh: fix freeing of resources in disconnect
  - libssh: fix scp large file upload for 32-bit size_t systems
  - openssl-quic: do not iterate over multi handles
  - openssl: check return value of X509_get0_pubkey
  - openssl: drop support for old OpenSSL/LibreSSL versions
  - openssl: fix crash on missing cert password
  - openssl: fix pkcs11 URI checking for key files.
  - openssl: remove bad `goto`s into other scope
  - setopt: illegal CURLOPT_SOCKS5_AUTH should return error
  - setopt: setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine
  - sshserver.pl: adjust `AuthorizedKeysFile2` cutoff version
  - sshserver: fix excluding obsolete client config lines
  - SSLCERTS: list support for SSL_CERT_FILE and SSL_CERT_DIR
  - tftpd: prefix TFTP protocol error `E*` constants with `TFTP_`
  - tool_operate: fail SSH transfers without server auth
  - url: call protocol handler's disconnect in Curl_conn_free
  - urlapi: remove percent encoded dot sequences from the URL path
  - urldata: remove 'hostname' from struct Curl_async
  * Rebase patches:
  - libcurl-ocloexec.patch
  - curl-secure-getenv.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1744372800">- fix Leap build add curl-8.13.0-CloseSocket.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1748433600">- Update to 8.14.0:
  * Security fixes:
  - [CVE-2025-4947, bsc#1243397] QUIC certificate check skip with wolfSSL
  - [CVE-2025-5025, bsc#1243706] No QUIC certificate pinning with wolfSSL
  * Changes:
  - mqtt: send ping at upkeep interval
  - schannel: handle pkcs12 client certificates containing CA certificates
  - TLS: add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: import v2025.04.20 script + docs
  - websocket: add option to disable auto-pong reply
  * Bugfixes:
  - asny-thrdd: fix detach from running thread
  - async-threaded resolver: use ref counter
  - async: DoH improvements
  - build: enable gcc-12/13+, clang-10+ picky warnings
  - build: enable gcc-15 picky warnings
  - certs: drop unused `default_bits` from `.prm` files
  - cf-https-connect: use the passed in dns struct pointer
  - cf-socket: fix FTP accept connect
  - cfilters: remove assert
  - cmake: fix nghttp3 static linking with `USE_OPENSSL_QUIC=ON`
  - cmake: prefer `COMPILE_OPTIONS` over `CMAKE_C_FLAGS` for custom C options
  - cmake: revert `CURL_LTO` behavior for multi-config generators
  - configure: fix --disable-rt
  - CONTRIBUTE: add project guidelines for AI use
  - cpool/cshutdown: force close connections under pressure
  - curl: fix memory leak when -h is used in config file
  - curl_get_line: handle lines ending on the buffer boundary
  - headers: enforce a max number of response header to accept
  - http: fix HTTP/2 handling of TE request header using "trailers"
  - lib: include files using known path
  - lib: unify conversions to/from hex
  - libssh: add NULL check for Curl_meta_get()
  - libssh: fix memory leak
  - mqtt: use conn/easy meta hash
  - multi: do transfer book keeping using mid
  - multi: init_do(): check result
  - netrc: avoid NULL deref on weird input
  - netrc: avoid strdup NULL
  - netrc: deal with null token better
  - openssl-quic: avoid potential `-Wnull-dereference`, add assert
  - openssl-quic: fix shutdown when stream not open
  - openssl: enable builds for *both* engines and providers
  - openssl: set the cipher string before doing private cert
  - progress: avoid integer overflow when gathering total transfer size
  - rand: update comment on Curl_rand_bytes weak random
  - rustls: make max size of cert and key reasonable
  - smb: avoid integer overflow on weird input date
  - urlapi: redirecting to "" is considered fine
  * Remove curl-8.13.0-CloseSocket.patch upstream
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1749038400">- Update to 8.14.1:
  * Security fixes:
  - [bsc#1243933, CVE-2025-5399] libcurl can possibly get
    trapped in an endless busy-loop when processing specially
    crafted packets [d1145df2]
  * Bugfixes:
  - asyn-thrdd: fix cleanup when RR fails due to OOM
  - ftp: fix teardown of DATA connection in done
  - http: fail early when rewind of input failed when following redirects
  - multi: fix add_handle resizing
  - tls BIOs: handle BIO_CTRL_EOF correctly
  - tool_getparam: make --no-anyauth not be accepted
  - wolfssl: fix sending of early data
  - ws: handle blocked sends better
  - ws: tests and fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1749643200">- Update to 8.14.1: [jsc#PED-13055, jsc#PED-13056]
  * Add _multibuild
  * Remove patches fixed in the update:
  - curl-CVE-2024-11053.patch
  - curl-CVE-2024-2004.patch
  - curl-CVE-2024-2379.patch
  - curl-CVE-2024-2398.patch
  - curl-CVE-2024-2466.patch
  - curl-CVE-2024-6197.patch
  - curl-CVE-2024-7264.patch
  - curl-CVE-2024-8096.patch
  - curl-CVE-2024-9681.patch
  - curl-CVE-2025-0167.patch
  - curl-CVE-2025-0725.patch
  - curl-aws_sigv4-url-encode-the-canonical-path.patch
  - curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1763553600">- Security fix: [bsc#1253757, CVE-2025-11563]
  * curl: wcurl path traversal with percent-encoded slashes
  * Add curl-CVE-2025-11563.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767355200">- Security fixes:
  * [bsc#1255731, CVE-2025-14524] if redirected, require permission to use bearer
  * [bsc#1255734, CVE-2025-15224] require private key or user-agent for public key auth
  * [bsc#1255732, CVE-2025-14819] toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache
  * [bsc#1255733, CVE-2025-15079] set both knownhosts options to the same file
  * Add patches:
  - curl-CVE-2025-14524.patch
  - curl-CVE-2025-15224.patch
  - curl-CVE-2025-14819.patch
  - curl-CVE-2025-15079.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767787200">- Security fix: [bsc#1256105, CVE-2025-14017]
  * call ldap_init() before setting the options
  * Add patch curl-CVE-2025-14017.patch</changelog>
</package>
<package pkgid="e5c1530e38ebc5b9a8f8705cce28aa7621f7eb2d196d79ce9dde66ddb1f2257c" name="curl" arch="x86_64">
  <version epoch="0" ver="8.14.1" rel="150700.7.11.1"/>
  <changelog author="bjorn.bidar@thaodan.de" date="1731499200">- Add patch to fix libcurl when netrc parsing is enabled.
  curl_easy_duphandle did not init netrc which broke applications such
  as for example git. gh#curl/curl#15496
  * 0001-duphandle-also-init-netrc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733227200">- Security fix: [bsc#1234068, CVE-2024-11053]
  * curl could leak the password used for the first host to the
    followed-to host under certain circumstances.
  * netrc: address several netrc parser flaws
  * Add curl-CVE-2024-11053.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733918400">- Update to 8.11.1:
  * Security fixes:
  - netrc and redirect credential leak [bsc#1234068, CVE-2024-11053]
  * Bugfixes:
  - build: fix ECH to always enable HTTPS RR
  - cookie: treat cookie name case sensitively
  - curl-rustls.m4: keep existing 'CPPFLAGS'/'LDFLAGS' when detected
  - curl: use realtime in trace timestamps
  - digest: produce a shorter cnonce in Digest headers
  - docs: document default 'User-Agent'
  - docs: suggest --ssl-reqd instead of --ftp-ssl
  - duphandle: also init netrc
  - hostip: don't use the resolver for FQDN localhost
  - http_negotiate: allow for a one byte larger channel binding buffer
  - krb5: fix socket/sockindex confusion, MSVC compiler warnings
  - libssh: use libssh sftp_aio to upload file
  - libssh: when using IPv6 numerical address, add brackets
  - mime: fix reader stall on small read lengths
  - mk-ca-bundle: remove CKA_NSS_SERVER_DISTRUST_AFTER conditions
  - mprintf: fix the integer overflow checks
  - multi: fix callback for 'CURLMOPT_TIMERFUNCTION' not being called again when...
  - netrc: address several netrc parser flaws
  - netrc: support large file, longer lines, longer tokens
  - nghttp2: use custom memory functions
  - OpenSSL: improvde error message on expired certificate
  - openssl: remove three "Useless Assignments"
  - openssl: stop using SSL_CTX_ function prefix for our functions
  - pytest: add test for use of CURLMOPT_MAX_HOST_CONNECTIONS
  - rtsp: check EOS in the RTSP receive and return an error code
  - schannel: remove TLS 1.3 ciphersuite-list support
  - setopt: fix CURLOPT_HTTP_CONTENT_DECODING
  - setopt: fix missing options for builds without HTTP &amp; MQTT
  - socket: handle binding to "host!&lt;ip&gt;"
  - socketpair: fix enabling 'USE_EVENTFD'
  - strtok: use namespaced 'strtok_r' macro instead of redefining it
  * Remove 0001-duphandle-also-init-netrc.patch upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1736251200">- smtp: for starttls, do full upgrade [bsc#1235151]
  * Make sure the TLS handshake after a successful STARTTLS command
    is fully done before further sending/receiving on the connection.
  * Add curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238400">- Security fix: [bsc#1236588, CVE-2025-0167]
  * netrc: 'default' with no credentials is not a match
  * Add curl-CVE-2025-0167.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238401">- Security fix: [bsc#1236590, CVE-2025-0725]
  * content_encoding: drop support for zlib before 1.2.0.4
  * content_encoding: put the decomp buffers into the writer structs
  * Add curl-CVE-2025-0725.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738843200">- Update to 8.12.0:
  * Security fixes:
  - [bsc#1234068, CVE-2024-11053] curl could leak the password used
    for the first host to the followed-to host under certain circumstances.
  - [bsc#1232528, CVE-2024-9681] HSTS subdomain overwrites parent cache entry
  - [bsc#1236589, CVE-2025-0665] eventfd double close
  * Changes:
  - curl: add byte range support to --variable reading from file
  - curl: make --etag-save acknowledge --create-dirs
  - getinfo: fix CURLINFO_QUEUE_TIME_T and add 'time_queue' var
  - getinfo: provide info which auth was used for HTTP and proxy
  - hyper: drop support
  - openssl: add support to use keys and certificates from PKCS#11 provider
  - QUIC: 0RTT for gnutls via CURLSSLOPT_EARLYDATA
  - vtls: feature ssls-export for SSL session im-/export
  * Bugfixes:
  - altsvc: avoid integer overflow in expire calculation
  - asyn-ares: acknowledge CURLOPT_DNS_SERVERS set to NULL
  - asyn-ares: fix memory leak
  - asyn-ares: initial HTTPS resolve support
  - asyn-thread: use c-ares to resolve HTTPS RR
  - async-thread: avoid closing eventfd twice
  - cd2nroff: do not insist on quoted &lt;&gt; within backticks
  - cd2nroff: support "none" as a TLS backend
  - conncache: count shutdowns against host and max limits
  - content_encoding: drop support for zlib before 1.2.0.4
  - content_encoding: namespace GZIP flag constants
  - content_encoding: put the decomp buffers into the writer structs
  - content_encoding: support use of custom libzstd memory functions
  - cookie: cap expire times to 400 days
  - cookie: parse only the exact expire date
  - curl: return error if etag options are used with multiple URLs
  - curl_multi_fdset: include the shutdown connections in the set
  - curl_sha512_256: rename symbols to the curl namespace
  - curl_url_set.md: adjust the added-in to 7.62.0
  - doh: send HTTPS RR requests for all HTTP(S) transfers
  - easy: allow connect-only handle reuse with easy_perform
  - easy: make curl_easy_perform() return error if connection still there
  - easy_lock: use Sleep(1) for thread yield on old Windows
  - ECH: update APIs to those agreed with OpenSSL maintainers
  - GnuTLS: fix 'time_appconnect' for early data
  - HTTP/2: strip TE request header
  - http2: fix data_pending check
  - http2: fix value stored to 'result' is never read
  - http: ignore invalid Retry-After times
  - http_aws_sigv4: Fix invalid compare function handling zero-length pairs
  - https-connect: start next immediately on failure
  - lib: redirect handling by protocol handler
  - multi: fix curl_multi_waitfds reporting of fd_count
  - netrc: 'default' with no credentials is not a match
  - netrc: fix password-only entries
  - netrc: restore _netrc fallback logic
  - ngtcp2: fix memory leak on connect failure
  - openssl: define `HAVE_KEYLOG_CALLBACK` before use
  - openssl: fix ECH logic
  - osslq: use SSL_poll to determine writeability of QUIC streams
  - sectransp: free certificate on error
  - select: avoid a NULL deref in cwfds_add_sock
  - src: omit hugehelp and ca-embed from libcurltool
  - ssl session cache: change cache dimensions
  - system.h: add 64-bit curl_off_t definitions for NonStop
  - telnet: handle single-byte input option
  - TLS: check connection for SSL use, not handler
  - tool_formparse.c: make curlx_uztoso a static in here
  - tool_formparse: accept digits in --form type= strings
  - tool_getparam: ECH param parsing refix
  - tool_getparam: fail --hostpubsha256 if libssh2 is not used
  - tool_getparam: fix "Ignored Return Value"
  - tool_getparam: fix memory leak on error in parse_ech
  - tool_getparam: fix the ECH parser
  - tool_operate: make --etag-compare always accept a non-existing file
  - transfer: fix CURLOPT_CURLU override logic
  - urlapi: fix redirect to a new fragment or query (only)
  - vquic: make vquic_send_packets not return without setting psent
  - vtls: fix default SSL backend as a fallback
  - vtls: only remember the expiry timestamp in session cache
  - websocket: fix message send corruption
  - x509asn1: add parse recursion limit
  * Rebase pathes:
  - libcurl-ocloexec.patch
  - dont-mess-with-rpmoptflags.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739448000">- Update to 8.12.1:
  * Bugfixes:
  - asyn-thread: fix build with 'CURL_DISABLE_SOCKETPAIR'
  - asyn-thread: fix HTTPS RR crash
  - asyn-thread: fix the returned bitmask from Curl_resolver_getsock
  - asyn-thread: survive a c-ares channel set to NULL
  - cmake: always reference OpenSSL and ZLIB via imported targets
  - cmake: respect 'GNUTLS_CFLAGS' when detected via 'pkg-config'
  - cmake: respect 'GNUTLS_LIBRARY_DIRS' in 'libcurl.pc' and 'curl-config'
  - content_encoding: #error on too old zlib
  - imap: TLS upgrade fix
  - ldap: drop support for legacy Novell LDAP SDK
  - libssh2: comparison is always true because rc &lt;= -1
  - libssh2: raise lowest supported version to 1.2.8
  - libssh: drop support for libssh older than 0.9.0
  - openssl-quic: ignore ciphers for h3
  - pop3: TLS upgrade fix
  - runtests: fix the disabling of the memory tracking
  - runtests: quote commands to support paths with spaces
  - scache: add magic checks
  - smb: silence '-Warray-bounds' with gcc 13+
  - smtp: TLS upgrade fix
  - tool_cfgable: sort struct fields by size, use bitfields for booleans
  - tool_getparam: add "TLS required" flag for each such option
  - vtls: fix multissl-init
  - wakeup_write: make sure the eventfd write sends eight bytes</changelog>
  <changelog author="pmonreal@suse.com" date="1744200000">- Update to 8.13.0:
  * Changes:
  - curl: add write-out variable 'tls_earlydata'
  - curl: make --url support a file with URLs
  - gnutls: set priority via --ciphers
  - IMAP: add CURLOPT_UPLOAD_FLAGS and --upload-flags
  - lib: add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY
  - OpenSSL/quictls: add support for TLSv1.3 early data
  - rustls: add support for CERTINFO
  - rustls: add support for SSLKEYLOGFILE
  - rustls: support ECH w/ DoH lookup for config
  - rustls: support native platform verifier
  - var: add a '64dec' function that can base64 decode a string
  * Bugfixes:
  - conn: fix connection reuse when SSL is optional
  - hash: use single linked list for entries
  - http2: detect session being closed on ingress handling
  - http2: reset stream on response header error
  - http: remove a HTTP method size restriction
  - http: version negotiation
  - httpsrr: fix port detection
  - libssh: fix freeing of resources in disconnect
  - libssh: fix scp large file upload for 32-bit size_t systems
  - openssl-quic: do not iterate over multi handles
  - openssl: check return value of X509_get0_pubkey
  - openssl: drop support for old OpenSSL/LibreSSL versions
  - openssl: fix crash on missing cert password
  - openssl: fix pkcs11 URI checking for key files.
  - openssl: remove bad `goto`s into other scope
  - setopt: illegal CURLOPT_SOCKS5_AUTH should return error
  - setopt: setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine
  - sshserver.pl: adjust `AuthorizedKeysFile2` cutoff version
  - sshserver: fix excluding obsolete client config lines
  - SSLCERTS: list support for SSL_CERT_FILE and SSL_CERT_DIR
  - tftpd: prefix TFTP protocol error `E*` constants with `TFTP_`
  - tool_operate: fail SSH transfers without server auth
  - url: call protocol handler's disconnect in Curl_conn_free
  - urlapi: remove percent encoded dot sequences from the URL path
  - urldata: remove 'hostname' from struct Curl_async
  * Rebase patches:
  - libcurl-ocloexec.patch
  - curl-secure-getenv.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1744372800">- fix Leap build add curl-8.13.0-CloseSocket.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1748433600">- Update to 8.14.0:
  * Security fixes:
  - [CVE-2025-4947, bsc#1243397] QUIC certificate check skip with wolfSSL
  - [CVE-2025-5025, bsc#1243706] No QUIC certificate pinning with wolfSSL
  * Changes:
  - mqtt: send ping at upkeep interval
  - schannel: handle pkcs12 client certificates containing CA certificates
  - TLS: add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: import v2025.04.20 script + docs
  - websocket: add option to disable auto-pong reply
  * Bugfixes:
  - asny-thrdd: fix detach from running thread
  - async-threaded resolver: use ref counter
  - async: DoH improvements
  - build: enable gcc-12/13+, clang-10+ picky warnings
  - build: enable gcc-15 picky warnings
  - certs: drop unused `default_bits` from `.prm` files
  - cf-https-connect: use the passed in dns struct pointer
  - cf-socket: fix FTP accept connect
  - cfilters: remove assert
  - cmake: fix nghttp3 static linking with `USE_OPENSSL_QUIC=ON`
  - cmake: prefer `COMPILE_OPTIONS` over `CMAKE_C_FLAGS` for custom C options
  - cmake: revert `CURL_LTO` behavior for multi-config generators
  - configure: fix --disable-rt
  - CONTRIBUTE: add project guidelines for AI use
  - cpool/cshutdown: force close connections under pressure
  - curl: fix memory leak when -h is used in config file
  - curl_get_line: handle lines ending on the buffer boundary
  - headers: enforce a max number of response header to accept
  - http: fix HTTP/2 handling of TE request header using "trailers"
  - lib: include files using known path
  - lib: unify conversions to/from hex
  - libssh: add NULL check for Curl_meta_get()
  - libssh: fix memory leak
  - mqtt: use conn/easy meta hash
  - multi: do transfer book keeping using mid
  - multi: init_do(): check result
  - netrc: avoid NULL deref on weird input
  - netrc: avoid strdup NULL
  - netrc: deal with null token better
  - openssl-quic: avoid potential `-Wnull-dereference`, add assert
  - openssl-quic: fix shutdown when stream not open
  - openssl: enable builds for *both* engines and providers
  - openssl: set the cipher string before doing private cert
  - progress: avoid integer overflow when gathering total transfer size
  - rand: update comment on Curl_rand_bytes weak random
  - rustls: make max size of cert and key reasonable
  - smb: avoid integer overflow on weird input date
  - urlapi: redirecting to "" is considered fine
  * Remove curl-8.13.0-CloseSocket.patch upstream
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1749038400">- Update to 8.14.1:
  * Security fixes:
  - [bsc#1243933, CVE-2025-5399] libcurl can possibly get
    trapped in an endless busy-loop when processing specially
    crafted packets [d1145df2]
  * Bugfixes:
  - asyn-thrdd: fix cleanup when RR fails due to OOM
  - ftp: fix teardown of DATA connection in done
  - http: fail early when rewind of input failed when following redirects
  - multi: fix add_handle resizing
  - tls BIOs: handle BIO_CTRL_EOF correctly
  - tool_getparam: make --no-anyauth not be accepted
  - wolfssl: fix sending of early data
  - ws: handle blocked sends better
  - ws: tests and fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1749643200">- Update to 8.14.1: [jsc#PED-13055, jsc#PED-13056]
  * Add _multibuild
  * Remove patches fixed in the update:
  - curl-CVE-2024-11053.patch
  - curl-CVE-2024-2004.patch
  - curl-CVE-2024-2379.patch
  - curl-CVE-2024-2398.patch
  - curl-CVE-2024-2466.patch
  - curl-CVE-2024-6197.patch
  - curl-CVE-2024-7264.patch
  - curl-CVE-2024-8096.patch
  - curl-CVE-2024-9681.patch
  - curl-CVE-2025-0167.patch
  - curl-CVE-2025-0725.patch
  - curl-aws_sigv4-url-encode-the-canonical-path.patch
  - curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1763553600">- Security fix: [bsc#1253757, CVE-2025-11563]
  * curl: wcurl path traversal with percent-encoded slashes
  * Add curl-CVE-2025-11563.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767355200">- Security fixes:
  * [bsc#1255731, CVE-2025-14524] if redirected, require permission to use bearer
  * [bsc#1255734, CVE-2025-15224] require private key or user-agent for public key auth
  * [bsc#1255732, CVE-2025-14819] toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache
  * [bsc#1255733, CVE-2025-15079] set both knownhosts options to the same file
  * Add patches:
  - curl-CVE-2025-14524.patch
  - curl-CVE-2025-15224.patch
  - curl-CVE-2025-14819.patch
  - curl-CVE-2025-15079.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767787200">- Security fix: [bsc#1256105, CVE-2025-14017]
  * call ldap_init() before setting the options
  * Add patch curl-CVE-2025-14017.patch</changelog>
</package>
<package pkgid="36dccf5b6d3e76eee9c38921a4696569da32049983e832c47ddc3f174925e375" name="curl" arch="src">
  <version epoch="0" ver="8.14.1" rel="150700.7.14.1"/>
  <changelog author="pmonreal@suse.com" date="1733227200">- Security fix: [bsc#1234068, CVE-2024-11053]
  * curl could leak the password used for the first host to the
    followed-to host under certain circumstances.
  * netrc: address several netrc parser flaws
  * Add curl-CVE-2024-11053.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733918400">- Update to 8.11.1:
  * Security fixes:
  - netrc and redirect credential leak [bsc#1234068, CVE-2024-11053]
  * Bugfixes:
  - build: fix ECH to always enable HTTPS RR
  - cookie: treat cookie name case sensitively
  - curl-rustls.m4: keep existing 'CPPFLAGS'/'LDFLAGS' when detected
  - curl: use realtime in trace timestamps
  - digest: produce a shorter cnonce in Digest headers
  - docs: document default 'User-Agent'
  - docs: suggest --ssl-reqd instead of --ftp-ssl
  - duphandle: also init netrc
  - hostip: don't use the resolver for FQDN localhost
  - http_negotiate: allow for a one byte larger channel binding buffer
  - krb5: fix socket/sockindex confusion, MSVC compiler warnings
  - libssh: use libssh sftp_aio to upload file
  - libssh: when using IPv6 numerical address, add brackets
  - mime: fix reader stall on small read lengths
  - mk-ca-bundle: remove CKA_NSS_SERVER_DISTRUST_AFTER conditions
  - mprintf: fix the integer overflow checks
  - multi: fix callback for 'CURLMOPT_TIMERFUNCTION' not being called again when...
  - netrc: address several netrc parser flaws
  - netrc: support large file, longer lines, longer tokens
  - nghttp2: use custom memory functions
  - OpenSSL: improvde error message on expired certificate
  - openssl: remove three "Useless Assignments"
  - openssl: stop using SSL_CTX_ function prefix for our functions
  - pytest: add test for use of CURLMOPT_MAX_HOST_CONNECTIONS
  - rtsp: check EOS in the RTSP receive and return an error code
  - schannel: remove TLS 1.3 ciphersuite-list support
  - setopt: fix CURLOPT_HTTP_CONTENT_DECODING
  - setopt: fix missing options for builds without HTTP &amp; MQTT
  - socket: handle binding to "host!&lt;ip&gt;"
  - socketpair: fix enabling 'USE_EVENTFD'
  - strtok: use namespaced 'strtok_r' macro instead of redefining it
  * Remove 0001-duphandle-also-init-netrc.patch upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1736251200">- smtp: for starttls, do full upgrade [bsc#1235151]
  * Make sure the TLS handshake after a successful STARTTLS command
    is fully done before further sending/receiving on the connection.
  * Add curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238400">- Security fix: [bsc#1236588, CVE-2025-0167]
  * netrc: 'default' with no credentials is not a match
  * Add curl-CVE-2025-0167.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238401">- Security fix: [bsc#1236590, CVE-2025-0725]
  * content_encoding: drop support for zlib before 1.2.0.4
  * content_encoding: put the decomp buffers into the writer structs
  * Add curl-CVE-2025-0725.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738843200">- Update to 8.12.0:
  * Security fixes:
  - [bsc#1234068, CVE-2024-11053] curl could leak the password used
    for the first host to the followed-to host under certain circumstances.
  - [bsc#1232528, CVE-2024-9681] HSTS subdomain overwrites parent cache entry
  - [bsc#1236589, CVE-2025-0665] eventfd double close
  * Changes:
  - curl: add byte range support to --variable reading from file
  - curl: make --etag-save acknowledge --create-dirs
  - getinfo: fix CURLINFO_QUEUE_TIME_T and add 'time_queue' var
  - getinfo: provide info which auth was used for HTTP and proxy
  - hyper: drop support
  - openssl: add support to use keys and certificates from PKCS#11 provider
  - QUIC: 0RTT for gnutls via CURLSSLOPT_EARLYDATA
  - vtls: feature ssls-export for SSL session im-/export
  * Bugfixes:
  - altsvc: avoid integer overflow in expire calculation
  - asyn-ares: acknowledge CURLOPT_DNS_SERVERS set to NULL
  - asyn-ares: fix memory leak
  - asyn-ares: initial HTTPS resolve support
  - asyn-thread: use c-ares to resolve HTTPS RR
  - async-thread: avoid closing eventfd twice
  - cd2nroff: do not insist on quoted &lt;&gt; within backticks
  - cd2nroff: support "none" as a TLS backend
  - conncache: count shutdowns against host and max limits
  - content_encoding: drop support for zlib before 1.2.0.4
  - content_encoding: namespace GZIP flag constants
  - content_encoding: put the decomp buffers into the writer structs
  - content_encoding: support use of custom libzstd memory functions
  - cookie: cap expire times to 400 days
  - cookie: parse only the exact expire date
  - curl: return error if etag options are used with multiple URLs
  - curl_multi_fdset: include the shutdown connections in the set
  - curl_sha512_256: rename symbols to the curl namespace
  - curl_url_set.md: adjust the added-in to 7.62.0
  - doh: send HTTPS RR requests for all HTTP(S) transfers
  - easy: allow connect-only handle reuse with easy_perform
  - easy: make curl_easy_perform() return error if connection still there
  - easy_lock: use Sleep(1) for thread yield on old Windows
  - ECH: update APIs to those agreed with OpenSSL maintainers
  - GnuTLS: fix 'time_appconnect' for early data
  - HTTP/2: strip TE request header
  - http2: fix data_pending check
  - http2: fix value stored to 'result' is never read
  - http: ignore invalid Retry-After times
  - http_aws_sigv4: Fix invalid compare function handling zero-length pairs
  - https-connect: start next immediately on failure
  - lib: redirect handling by protocol handler
  - multi: fix curl_multi_waitfds reporting of fd_count
  - netrc: 'default' with no credentials is not a match
  - netrc: fix password-only entries
  - netrc: restore _netrc fallback logic
  - ngtcp2: fix memory leak on connect failure
  - openssl: define `HAVE_KEYLOG_CALLBACK` before use
  - openssl: fix ECH logic
  - osslq: use SSL_poll to determine writeability of QUIC streams
  - sectransp: free certificate on error
  - select: avoid a NULL deref in cwfds_add_sock
  - src: omit hugehelp and ca-embed from libcurltool
  - ssl session cache: change cache dimensions
  - system.h: add 64-bit curl_off_t definitions for NonStop
  - telnet: handle single-byte input option
  - TLS: check connection for SSL use, not handler
  - tool_formparse.c: make curlx_uztoso a static in here
  - tool_formparse: accept digits in --form type= strings
  - tool_getparam: ECH param parsing refix
  - tool_getparam: fail --hostpubsha256 if libssh2 is not used
  - tool_getparam: fix "Ignored Return Value"
  - tool_getparam: fix memory leak on error in parse_ech
  - tool_getparam: fix the ECH parser
  - tool_operate: make --etag-compare always accept a non-existing file
  - transfer: fix CURLOPT_CURLU override logic
  - urlapi: fix redirect to a new fragment or query (only)
  - vquic: make vquic_send_packets not return without setting psent
  - vtls: fix default SSL backend as a fallback
  - vtls: only remember the expiry timestamp in session cache
  - websocket: fix message send corruption
  - x509asn1: add parse recursion limit
  * Rebase pathes:
  - libcurl-ocloexec.patch
  - dont-mess-with-rpmoptflags.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739448000">- Update to 8.12.1:
  * Bugfixes:
  - asyn-thread: fix build with 'CURL_DISABLE_SOCKETPAIR'
  - asyn-thread: fix HTTPS RR crash
  - asyn-thread: fix the returned bitmask from Curl_resolver_getsock
  - asyn-thread: survive a c-ares channel set to NULL
  - cmake: always reference OpenSSL and ZLIB via imported targets
  - cmake: respect 'GNUTLS_CFLAGS' when detected via 'pkg-config'
  - cmake: respect 'GNUTLS_LIBRARY_DIRS' in 'libcurl.pc' and 'curl-config'
  - content_encoding: #error on too old zlib
  - imap: TLS upgrade fix
  - ldap: drop support for legacy Novell LDAP SDK
  - libssh2: comparison is always true because rc &lt;= -1
  - libssh2: raise lowest supported version to 1.2.8
  - libssh: drop support for libssh older than 0.9.0
  - openssl-quic: ignore ciphers for h3
  - pop3: TLS upgrade fix
  - runtests: fix the disabling of the memory tracking
  - runtests: quote commands to support paths with spaces
  - scache: add magic checks
  - smb: silence '-Warray-bounds' with gcc 13+
  - smtp: TLS upgrade fix
  - tool_cfgable: sort struct fields by size, use bitfields for booleans
  - tool_getparam: add "TLS required" flag for each such option
  - vtls: fix multissl-init
  - wakeup_write: make sure the eventfd write sends eight bytes</changelog>
  <changelog author="pmonreal@suse.com" date="1744200000">- Update to 8.13.0:
  * Changes:
  - curl: add write-out variable 'tls_earlydata'
  - curl: make --url support a file with URLs
  - gnutls: set priority via --ciphers
  - IMAP: add CURLOPT_UPLOAD_FLAGS and --upload-flags
  - lib: add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY
  - OpenSSL/quictls: add support for TLSv1.3 early data
  - rustls: add support for CERTINFO
  - rustls: add support for SSLKEYLOGFILE
  - rustls: support ECH w/ DoH lookup for config
  - rustls: support native platform verifier
  - var: add a '64dec' function that can base64 decode a string
  * Bugfixes:
  - conn: fix connection reuse when SSL is optional
  - hash: use single linked list for entries
  - http2: detect session being closed on ingress handling
  - http2: reset stream on response header error
  - http: remove a HTTP method size restriction
  - http: version negotiation
  - httpsrr: fix port detection
  - libssh: fix freeing of resources in disconnect
  - libssh: fix scp large file upload for 32-bit size_t systems
  - openssl-quic: do not iterate over multi handles
  - openssl: check return value of X509_get0_pubkey
  - openssl: drop support for old OpenSSL/LibreSSL versions
  - openssl: fix crash on missing cert password
  - openssl: fix pkcs11 URI checking for key files.
  - openssl: remove bad `goto`s into other scope
  - setopt: illegal CURLOPT_SOCKS5_AUTH should return error
  - setopt: setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine
  - sshserver.pl: adjust `AuthorizedKeysFile2` cutoff version
  - sshserver: fix excluding obsolete client config lines
  - SSLCERTS: list support for SSL_CERT_FILE and SSL_CERT_DIR
  - tftpd: prefix TFTP protocol error `E*` constants with `TFTP_`
  - tool_operate: fail SSH transfers without server auth
  - url: call protocol handler's disconnect in Curl_conn_free
  - urlapi: remove percent encoded dot sequences from the URL path
  - urldata: remove 'hostname' from struct Curl_async
  * Rebase patches:
  - libcurl-ocloexec.patch
  - curl-secure-getenv.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1744372800">- fix Leap build add curl-8.13.0-CloseSocket.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1748433600">- Update to 8.14.0:
  * Security fixes:
  - [CVE-2025-4947, bsc#1243397] QUIC certificate check skip with wolfSSL
  - [CVE-2025-5025, bsc#1243706] No QUIC certificate pinning with wolfSSL
  * Changes:
  - mqtt: send ping at upkeep interval
  - schannel: handle pkcs12 client certificates containing CA certificates
  - TLS: add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: import v2025.04.20 script + docs
  - websocket: add option to disable auto-pong reply
  * Bugfixes:
  - asny-thrdd: fix detach from running thread
  - async-threaded resolver: use ref counter
  - async: DoH improvements
  - build: enable gcc-12/13+, clang-10+ picky warnings
  - build: enable gcc-15 picky warnings
  - certs: drop unused `default_bits` from `.prm` files
  - cf-https-connect: use the passed in dns struct pointer
  - cf-socket: fix FTP accept connect
  - cfilters: remove assert
  - cmake: fix nghttp3 static linking with `USE_OPENSSL_QUIC=ON`
  - cmake: prefer `COMPILE_OPTIONS` over `CMAKE_C_FLAGS` for custom C options
  - cmake: revert `CURL_LTO` behavior for multi-config generators
  - configure: fix --disable-rt
  - CONTRIBUTE: add project guidelines for AI use
  - cpool/cshutdown: force close connections under pressure
  - curl: fix memory leak when -h is used in config file
  - curl_get_line: handle lines ending on the buffer boundary
  - headers: enforce a max number of response header to accept
  - http: fix HTTP/2 handling of TE request header using "trailers"
  - lib: include files using known path
  - lib: unify conversions to/from hex
  - libssh: add NULL check for Curl_meta_get()
  - libssh: fix memory leak
  - mqtt: use conn/easy meta hash
  - multi: do transfer book keeping using mid
  - multi: init_do(): check result
  - netrc: avoid NULL deref on weird input
  - netrc: avoid strdup NULL
  - netrc: deal with null token better
  - openssl-quic: avoid potential `-Wnull-dereference`, add assert
  - openssl-quic: fix shutdown when stream not open
  - openssl: enable builds for *both* engines and providers
  - openssl: set the cipher string before doing private cert
  - progress: avoid integer overflow when gathering total transfer size
  - rand: update comment on Curl_rand_bytes weak random
  - rustls: make max size of cert and key reasonable
  - smb: avoid integer overflow on weird input date
  - urlapi: redirecting to "" is considered fine
  * Remove curl-8.13.0-CloseSocket.patch upstream
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1749038400">- Update to 8.14.1:
  * Security fixes:
  - [bsc#1243933, CVE-2025-5399] libcurl can possibly get
    trapped in an endless busy-loop when processing specially
    crafted packets [d1145df2]
  * Bugfixes:
  - asyn-thrdd: fix cleanup when RR fails due to OOM
  - ftp: fix teardown of DATA connection in done
  - http: fail early when rewind of input failed when following redirects
  - multi: fix add_handle resizing
  - tls BIOs: handle BIO_CTRL_EOF correctly
  - tool_getparam: make --no-anyauth not be accepted
  - wolfssl: fix sending of early data
  - ws: handle blocked sends better
  - ws: tests and fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1749643200">- Update to 8.14.1: [jsc#PED-13055, jsc#PED-13056]
  * Add _multibuild
  * Remove patches fixed in the update:
  - curl-CVE-2024-11053.patch
  - curl-CVE-2024-2004.patch
  - curl-CVE-2024-2379.patch
  - curl-CVE-2024-2398.patch
  - curl-CVE-2024-2466.patch
  - curl-CVE-2024-6197.patch
  - curl-CVE-2024-7264.patch
  - curl-CVE-2024-8096.patch
  - curl-CVE-2024-9681.patch
  - curl-CVE-2025-0167.patch
  - curl-CVE-2025-0725.patch
  - curl-aws_sigv4-url-encode-the-canonical-path.patch
  - curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1763553600">- Security fix: [bsc#1253757, CVE-2025-11563]
  * curl: wcurl path traversal with percent-encoded slashes
  * Add curl-CVE-2025-11563.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767355200">- Security fixes:
  * [bsc#1255731, CVE-2025-14524] if redirected, require permission to use bearer
  * [bsc#1255734, CVE-2025-15224] require private key or user-agent for public key auth
  * [bsc#1255732, CVE-2025-14819] toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache
  * [bsc#1255733, CVE-2025-15079] set both knownhosts options to the same file
  * Add patches:
  - curl-CVE-2025-14524.patch
  - curl-CVE-2025-15224.patch
  - curl-CVE-2025-14819.patch
  - curl-CVE-2025-15079.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767787200">- Security fix: [bsc#1256105, CVE-2025-14017]
  * call ldap_init() before setting the options
  * Add patch curl-CVE-2025-14017.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1773057600">- Security fixes:
  * CVE-2026-1965: Bad reuse of HTTP Negotiate connection (bsc#1259362)
  * CVE-2026-3783: Token leak with redirect and netrc (bsc#1259363)
  * CVE-2026-3784: Wrong proxy connection reuse with credentials (bsc#1259364)
  * CVE-2026-3805: Use after free in SMB connection reuse (bsc#1259365)
  * Add patches:
  - curl-CVE-2026-1965.patch
  - curl-CVE-2026-3783.patch
  - curl-CVE-2026-3784.patch
  - curl-CVE-2026-3805.patch</changelog>
</package>
<package pkgid="9ad777284ca57a7d9babd8d5ccd59b6871ae3d2c32a87a0dd3d8abc418519495" name="curl" arch="x86_64">
  <version epoch="0" ver="8.14.1" rel="150700.7.14.1"/>
  <changelog author="pmonreal@suse.com" date="1733227200">- Security fix: [bsc#1234068, CVE-2024-11053]
  * curl could leak the password used for the first host to the
    followed-to host under certain circumstances.
  * netrc: address several netrc parser flaws
  * Add curl-CVE-2024-11053.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733918400">- Update to 8.11.1:
  * Security fixes:
  - netrc and redirect credential leak [bsc#1234068, CVE-2024-11053]
  * Bugfixes:
  - build: fix ECH to always enable HTTPS RR
  - cookie: treat cookie name case sensitively
  - curl-rustls.m4: keep existing 'CPPFLAGS'/'LDFLAGS' when detected
  - curl: use realtime in trace timestamps
  - digest: produce a shorter cnonce in Digest headers
  - docs: document default 'User-Agent'
  - docs: suggest --ssl-reqd instead of --ftp-ssl
  - duphandle: also init netrc
  - hostip: don't use the resolver for FQDN localhost
  - http_negotiate: allow for a one byte larger channel binding buffer
  - krb5: fix socket/sockindex confusion, MSVC compiler warnings
  - libssh: use libssh sftp_aio to upload file
  - libssh: when using IPv6 numerical address, add brackets
  - mime: fix reader stall on small read lengths
  - mk-ca-bundle: remove CKA_NSS_SERVER_DISTRUST_AFTER conditions
  - mprintf: fix the integer overflow checks
  - multi: fix callback for 'CURLMOPT_TIMERFUNCTION' not being called again when...
  - netrc: address several netrc parser flaws
  - netrc: support large file, longer lines, longer tokens
  - nghttp2: use custom memory functions
  - OpenSSL: improvde error message on expired certificate
  - openssl: remove three "Useless Assignments"
  - openssl: stop using SSL_CTX_ function prefix for our functions
  - pytest: add test for use of CURLMOPT_MAX_HOST_CONNECTIONS
  - rtsp: check EOS in the RTSP receive and return an error code
  - schannel: remove TLS 1.3 ciphersuite-list support
  - setopt: fix CURLOPT_HTTP_CONTENT_DECODING
  - setopt: fix missing options for builds without HTTP &amp; MQTT
  - socket: handle binding to "host!&lt;ip&gt;"
  - socketpair: fix enabling 'USE_EVENTFD'
  - strtok: use namespaced 'strtok_r' macro instead of redefining it
  * Remove 0001-duphandle-also-init-netrc.patch upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1736251200">- smtp: for starttls, do full upgrade [bsc#1235151]
  * Make sure the TLS handshake after a successful STARTTLS command
    is fully done before further sending/receiving on the connection.
  * Add curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238400">- Security fix: [bsc#1236588, CVE-2025-0167]
  * netrc: 'default' with no credentials is not a match
  * Add curl-CVE-2025-0167.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238401">- Security fix: [bsc#1236590, CVE-2025-0725]
  * content_encoding: drop support for zlib before 1.2.0.4
  * content_encoding: put the decomp buffers into the writer structs
  * Add curl-CVE-2025-0725.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738843200">- Update to 8.12.0:
  * Security fixes:
  - [bsc#1234068, CVE-2024-11053] curl could leak the password used
    for the first host to the followed-to host under certain circumstances.
  - [bsc#1232528, CVE-2024-9681] HSTS subdomain overwrites parent cache entry
  - [bsc#1236589, CVE-2025-0665] eventfd double close
  * Changes:
  - curl: add byte range support to --variable reading from file
  - curl: make --etag-save acknowledge --create-dirs
  - getinfo: fix CURLINFO_QUEUE_TIME_T and add 'time_queue' var
  - getinfo: provide info which auth was used for HTTP and proxy
  - hyper: drop support
  - openssl: add support to use keys and certificates from PKCS#11 provider
  - QUIC: 0RTT for gnutls via CURLSSLOPT_EARLYDATA
  - vtls: feature ssls-export for SSL session im-/export
  * Bugfixes:
  - altsvc: avoid integer overflow in expire calculation
  - asyn-ares: acknowledge CURLOPT_DNS_SERVERS set to NULL
  - asyn-ares: fix memory leak
  - asyn-ares: initial HTTPS resolve support
  - asyn-thread: use c-ares to resolve HTTPS RR
  - async-thread: avoid closing eventfd twice
  - cd2nroff: do not insist on quoted &lt;&gt; within backticks
  - cd2nroff: support "none" as a TLS backend
  - conncache: count shutdowns against host and max limits
  - content_encoding: drop support for zlib before 1.2.0.4
  - content_encoding: namespace GZIP flag constants
  - content_encoding: put the decomp buffers into the writer structs
  - content_encoding: support use of custom libzstd memory functions
  - cookie: cap expire times to 400 days
  - cookie: parse only the exact expire date
  - curl: return error if etag options are used with multiple URLs
  - curl_multi_fdset: include the shutdown connections in the set
  - curl_sha512_256: rename symbols to the curl namespace
  - curl_url_set.md: adjust the added-in to 7.62.0
  - doh: send HTTPS RR requests for all HTTP(S) transfers
  - easy: allow connect-only handle reuse with easy_perform
  - easy: make curl_easy_perform() return error if connection still there
  - easy_lock: use Sleep(1) for thread yield on old Windows
  - ECH: update APIs to those agreed with OpenSSL maintainers
  - GnuTLS: fix 'time_appconnect' for early data
  - HTTP/2: strip TE request header
  - http2: fix data_pending check
  - http2: fix value stored to 'result' is never read
  - http: ignore invalid Retry-After times
  - http_aws_sigv4: Fix invalid compare function handling zero-length pairs
  - https-connect: start next immediately on failure
  - lib: redirect handling by protocol handler
  - multi: fix curl_multi_waitfds reporting of fd_count
  - netrc: 'default' with no credentials is not a match
  - netrc: fix password-only entries
  - netrc: restore _netrc fallback logic
  - ngtcp2: fix memory leak on connect failure
  - openssl: define `HAVE_KEYLOG_CALLBACK` before use
  - openssl: fix ECH logic
  - osslq: use SSL_poll to determine writeability of QUIC streams
  - sectransp: free certificate on error
  - select: avoid a NULL deref in cwfds_add_sock
  - src: omit hugehelp and ca-embed from libcurltool
  - ssl session cache: change cache dimensions
  - system.h: add 64-bit curl_off_t definitions for NonStop
  - telnet: handle single-byte input option
  - TLS: check connection for SSL use, not handler
  - tool_formparse.c: make curlx_uztoso a static in here
  - tool_formparse: accept digits in --form type= strings
  - tool_getparam: ECH param parsing refix
  - tool_getparam: fail --hostpubsha256 if libssh2 is not used
  - tool_getparam: fix "Ignored Return Value"
  - tool_getparam: fix memory leak on error in parse_ech
  - tool_getparam: fix the ECH parser
  - tool_operate: make --etag-compare always accept a non-existing file
  - transfer: fix CURLOPT_CURLU override logic
  - urlapi: fix redirect to a new fragment or query (only)
  - vquic: make vquic_send_packets not return without setting psent
  - vtls: fix default SSL backend as a fallback
  - vtls: only remember the expiry timestamp in session cache
  - websocket: fix message send corruption
  - x509asn1: add parse recursion limit
  * Rebase pathes:
  - libcurl-ocloexec.patch
  - dont-mess-with-rpmoptflags.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739448000">- Update to 8.12.1:
  * Bugfixes:
  - asyn-thread: fix build with 'CURL_DISABLE_SOCKETPAIR'
  - asyn-thread: fix HTTPS RR crash
  - asyn-thread: fix the returned bitmask from Curl_resolver_getsock
  - asyn-thread: survive a c-ares channel set to NULL
  - cmake: always reference OpenSSL and ZLIB via imported targets
  - cmake: respect 'GNUTLS_CFLAGS' when detected via 'pkg-config'
  - cmake: respect 'GNUTLS_LIBRARY_DIRS' in 'libcurl.pc' and 'curl-config'
  - content_encoding: #error on too old zlib
  - imap: TLS upgrade fix
  - ldap: drop support for legacy Novell LDAP SDK
  - libssh2: comparison is always true because rc &lt;= -1
  - libssh2: raise lowest supported version to 1.2.8
  - libssh: drop support for libssh older than 0.9.0
  - openssl-quic: ignore ciphers for h3
  - pop3: TLS upgrade fix
  - runtests: fix the disabling of the memory tracking
  - runtests: quote commands to support paths with spaces
  - scache: add magic checks
  - smb: silence '-Warray-bounds' with gcc 13+
  - smtp: TLS upgrade fix
  - tool_cfgable: sort struct fields by size, use bitfields for booleans
  - tool_getparam: add "TLS required" flag for each such option
  - vtls: fix multissl-init
  - wakeup_write: make sure the eventfd write sends eight bytes</changelog>
  <changelog author="pmonreal@suse.com" date="1744200000">- Update to 8.13.0:
  * Changes:
  - curl: add write-out variable 'tls_earlydata'
  - curl: make --url support a file with URLs
  - gnutls: set priority via --ciphers
  - IMAP: add CURLOPT_UPLOAD_FLAGS and --upload-flags
  - lib: add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY
  - OpenSSL/quictls: add support for TLSv1.3 early data
  - rustls: add support for CERTINFO
  - rustls: add support for SSLKEYLOGFILE
  - rustls: support ECH w/ DoH lookup for config
  - rustls: support native platform verifier
  - var: add a '64dec' function that can base64 decode a string
  * Bugfixes:
  - conn: fix connection reuse when SSL is optional
  - hash: use single linked list for entries
  - http2: detect session being closed on ingress handling
  - http2: reset stream on response header error
  - http: remove a HTTP method size restriction
  - http: version negotiation
  - httpsrr: fix port detection
  - libssh: fix freeing of resources in disconnect
  - libssh: fix scp large file upload for 32-bit size_t systems
  - openssl-quic: do not iterate over multi handles
  - openssl: check return value of X509_get0_pubkey
  - openssl: drop support for old OpenSSL/LibreSSL versions
  - openssl: fix crash on missing cert password
  - openssl: fix pkcs11 URI checking for key files.
  - openssl: remove bad `goto`s into other scope
  - setopt: illegal CURLOPT_SOCKS5_AUTH should return error
  - setopt: setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine
  - sshserver.pl: adjust `AuthorizedKeysFile2` cutoff version
  - sshserver: fix excluding obsolete client config lines
  - SSLCERTS: list support for SSL_CERT_FILE and SSL_CERT_DIR
  - tftpd: prefix TFTP protocol error `E*` constants with `TFTP_`
  - tool_operate: fail SSH transfers without server auth
  - url: call protocol handler's disconnect in Curl_conn_free
  - urlapi: remove percent encoded dot sequences from the URL path
  - urldata: remove 'hostname' from struct Curl_async
  * Rebase patches:
  - libcurl-ocloexec.patch
  - curl-secure-getenv.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1744372800">- fix Leap build add curl-8.13.0-CloseSocket.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1748433600">- Update to 8.14.0:
  * Security fixes:
  - [CVE-2025-4947, bsc#1243397] QUIC certificate check skip with wolfSSL
  - [CVE-2025-5025, bsc#1243706] No QUIC certificate pinning with wolfSSL
  * Changes:
  - mqtt: send ping at upkeep interval
  - schannel: handle pkcs12 client certificates containing CA certificates
  - TLS: add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: import v2025.04.20 script + docs
  - websocket: add option to disable auto-pong reply
  * Bugfixes:
  - asny-thrdd: fix detach from running thread
  - async-threaded resolver: use ref counter
  - async: DoH improvements
  - build: enable gcc-12/13+, clang-10+ picky warnings
  - build: enable gcc-15 picky warnings
  - certs: drop unused `default_bits` from `.prm` files
  - cf-https-connect: use the passed in dns struct pointer
  - cf-socket: fix FTP accept connect
  - cfilters: remove assert
  - cmake: fix nghttp3 static linking with `USE_OPENSSL_QUIC=ON`
  - cmake: prefer `COMPILE_OPTIONS` over `CMAKE_C_FLAGS` for custom C options
  - cmake: revert `CURL_LTO` behavior for multi-config generators
  - configure: fix --disable-rt
  - CONTRIBUTE: add project guidelines for AI use
  - cpool/cshutdown: force close connections under pressure
  - curl: fix memory leak when -h is used in config file
  - curl_get_line: handle lines ending on the buffer boundary
  - headers: enforce a max number of response header to accept
  - http: fix HTTP/2 handling of TE request header using "trailers"
  - lib: include files using known path
  - lib: unify conversions to/from hex
  - libssh: add NULL check for Curl_meta_get()
  - libssh: fix memory leak
  - mqtt: use conn/easy meta hash
  - multi: do transfer book keeping using mid
  - multi: init_do(): check result
  - netrc: avoid NULL deref on weird input
  - netrc: avoid strdup NULL
  - netrc: deal with null token better
  - openssl-quic: avoid potential `-Wnull-dereference`, add assert
  - openssl-quic: fix shutdown when stream not open
  - openssl: enable builds for *both* engines and providers
  - openssl: set the cipher string before doing private cert
  - progress: avoid integer overflow when gathering total transfer size
  - rand: update comment on Curl_rand_bytes weak random
  - rustls: make max size of cert and key reasonable
  - smb: avoid integer overflow on weird input date
  - urlapi: redirecting to "" is considered fine
  * Remove curl-8.13.0-CloseSocket.patch upstream
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1749038400">- Update to 8.14.1:
  * Security fixes:
  - [bsc#1243933, CVE-2025-5399] libcurl can possibly get
    trapped in an endless busy-loop when processing specially
    crafted packets [d1145df2]
  * Bugfixes:
  - asyn-thrdd: fix cleanup when RR fails due to OOM
  - ftp: fix teardown of DATA connection in done
  - http: fail early when rewind of input failed when following redirects
  - multi: fix add_handle resizing
  - tls BIOs: handle BIO_CTRL_EOF correctly
  - tool_getparam: make --no-anyauth not be accepted
  - wolfssl: fix sending of early data
  - ws: handle blocked sends better
  - ws: tests and fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1749643200">- Update to 8.14.1: [jsc#PED-13055, jsc#PED-13056]
  * Add _multibuild
  * Remove patches fixed in the update:
  - curl-CVE-2024-11053.patch
  - curl-CVE-2024-2004.patch
  - curl-CVE-2024-2379.patch
  - curl-CVE-2024-2398.patch
  - curl-CVE-2024-2466.patch
  - curl-CVE-2024-6197.patch
  - curl-CVE-2024-7264.patch
  - curl-CVE-2024-8096.patch
  - curl-CVE-2024-9681.patch
  - curl-CVE-2025-0167.patch
  - curl-CVE-2025-0725.patch
  - curl-aws_sigv4-url-encode-the-canonical-path.patch
  - curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1763553600">- Security fix: [bsc#1253757, CVE-2025-11563]
  * curl: wcurl path traversal with percent-encoded slashes
  * Add curl-CVE-2025-11563.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767355200">- Security fixes:
  * [bsc#1255731, CVE-2025-14524] if redirected, require permission to use bearer
  * [bsc#1255734, CVE-2025-15224] require private key or user-agent for public key auth
  * [bsc#1255732, CVE-2025-14819] toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache
  * [bsc#1255733, CVE-2025-15079] set both knownhosts options to the same file
  * Add patches:
  - curl-CVE-2025-14524.patch
  - curl-CVE-2025-15224.patch
  - curl-CVE-2025-14819.patch
  - curl-CVE-2025-15079.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767787200">- Security fix: [bsc#1256105, CVE-2025-14017]
  * call ldap_init() before setting the options
  * Add patch curl-CVE-2025-14017.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1773057600">- Security fixes:
  * CVE-2026-1965: Bad reuse of HTTP Negotiate connection (bsc#1259362)
  * CVE-2026-3783: Token leak with redirect and netrc (bsc#1259363)
  * CVE-2026-3784: Wrong proxy connection reuse with credentials (bsc#1259364)
  * CVE-2026-3805: Use after free in SMB connection reuse (bsc#1259365)
  * Add patches:
  - curl-CVE-2026-1965.patch
  - curl-CVE-2026-3783.patch
  - curl-CVE-2026-3784.patch
  - curl-CVE-2026-3805.patch</changelog>
</package>
<package pkgid="570c403b0f55cd37ccc871c3c8272cb9306d6b990d20d0f266da403a4434002e" name="curl" arch="src">
  <version epoch="0" ver="8.14.1" rel="150700.7.2.1"/>
  <changelog author="pmonreal@suse.com" date="1727179200">- Update to 8.10.1:
  * Bugfixes:
  - autotools: fix `--with-ca-embed` build rule
  - cmake: ensure `CURL_USE_OPENSSL`/`USE_OPENSSL_QUIC` are set in sync
  - cmake: fix MSH3 to appear on the feature list
  - connect: store connection info when really done
  - FTP: partly revert eeb7c1280742f5c8fa48a4340fc1e1a1a2c7075a
  - http2: when uploading data from stdin, fix eos forwarding
  - http: make max-filesize check not count ignored bodies
  - lib: fix AF_INET6 use outside of USE_IPV6
  - multi: check that the multi handle is valid in curl_multi_assign
  - QUIC: on connect, keep on trying on draining server
  - request: correctly reset the eos_sent flag
  - setopt: remove superfluous use of ternary expressions
  - singleuse: drop `Curl_memrchr()` for no-HTTP builds
  - tool_cb_wrt: use "curl_response" if no file name in URL
  - transfer: fix sendrecv() without interim poll
  - vtls: fix `Curl_ssl_conn_config_match` doc param</changelog>
  <changelog author="pmonreal@suse.com" date="1730289600">- Security fix: [bsc#1232528, CVE-2024-9681]
  * HSTS subdomain overwrites parent cache entry
  * Add curl-CVE-2024-9681.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730894400">- Update to 8.11.0:
  * Security fixes: [bsc#1232528, CVE-2024-9681]
  - curl: HSTS subdomain overwrites parent cache entry
  * Changes:
  - curl: --create-dirs works for --dump-header as well
  - gtls: Add P12 format support
  - ipfs: add options to disable
  - TLS: TLSv1.3 earlydata support for curl
  - WebSockets: make support official (non-experimental)
  * Bugfixes:
  - build: clarify CA embed is for curl tool, mark default, improve summary
  - build: show if CA bundle to embed was found
  - build: tidy up and improve versioned-symbols options
  - cmake/FindNGTCP2: use library path as hint for finding crypto module
  - cmake: disable default OpenSSL if BearSSL, GnuTLS or Rustls is enabled
  - cmake: rename LDAP dependency config variables to match Find modules
  - cmake: replace 'check_include_file_concat()' for LDAP and GSS detection
  - cmake: use OpenSSL for LDAP detection only if available
  - curl: add build options for safe/no CA bundle search (Windows)
  - curl: detect ECH support dynamically, not at build time
  - curl_addrinfo: support operating systems with only getaddrinfo(3)
  - ftp: fix 0-length last write on upload from stdin
  - gnutls: use session cache for QUIC
  - hsts: improve subdomain handling
  - hsts: support "implied LWS" properly around max-age
  - http2: auto reset stream on server eos
  - json.md: cli-option '--json' is an alias of '--data-binary'
  - lib: move curl_path.[ch] into vssh/
  - lib: remove function pointer typecasts for hmac/sha256/md5
  - libssh.c: handle EGAINS during proto-connect correctly
  - libssh2: use the filename buffer when getting the homedir
  - multi.c: warn/assert on stall only without timer
  - negotiate: conditional check around GSS &amp; SSL specific code
  - netrc: cache the netrc file in memory
  - ngtcp2: do not loop on recv
  - ngtcp2: set max window size to 10x of initial (128KB)
  - openssl quic: populate x509 store before handshake
  - openssl: extend the OpenSSL error messages
  - openssl: improve retries on shutdown
  - quic: use send/recvmmsg when available
  - schannel: fix TLS cert verification by IP SAN
  - schannel: ignore error on recv beyond close notify
  - select: use poll() if existing, avoid poll() with no sockets
  - sendf: add condition to max-filesize check
  - server/mqttd: fix two memory leaks
  - setopt: return error for bad input to CURLOPT_RTSP_REQUEST
  - setopt_cptr: make overflow check only done when needed
  - tls: avoid abusing CURLE_SSL_ENGINE_INITFAILED
  - tool: support --show-headers AND --remote-header-name
  - tool_operate: make --skip-existing work for --parallel
  - url: connection reuse on h3 connections
  - url: use same credentials on redirect
  - urlapi: normalize the IPv6 address
  - version: say quictls in MSH3 builds
  - vquic: fix compiler warning with gcc + MUSL
  - vquic: recv_mmsg, use fewer, but larger buffers
  - vtls: convert Curl_pin_peer_pubkey to use dynbuf
  - vtls: convert pubkey_pem_to_der to use dynbuf
  * Rebase curl-secure-getenv.patch</changelog>
  <changelog author="bjorn.bidar@thaodan.de" date="1731499200">- Add patch to fix libcurl when netrc parsing is enabled.
  curl_easy_duphandle did not init netrc which broke applications such
  as for example git. gh#curl/curl#15496
  * 0001-duphandle-also-init-netrc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733227200">- Security fix: [bsc#1234068, CVE-2024-11053]
  * curl could leak the password used for the first host to the
    followed-to host under certain circumstances.
  * netrc: address several netrc parser flaws
  * Add curl-CVE-2024-11053.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733918400">- Update to 8.11.1:
  * Security fixes:
  - netrc and redirect credential leak [bsc#1234068, CVE-2024-11053]
  * Bugfixes:
  - build: fix ECH to always enable HTTPS RR
  - cookie: treat cookie name case sensitively
  - curl-rustls.m4: keep existing 'CPPFLAGS'/'LDFLAGS' when detected
  - curl: use realtime in trace timestamps
  - digest: produce a shorter cnonce in Digest headers
  - docs: document default 'User-Agent'
  - docs: suggest --ssl-reqd instead of --ftp-ssl
  - duphandle: also init netrc
  - hostip: don't use the resolver for FQDN localhost
  - http_negotiate: allow for a one byte larger channel binding buffer
  - krb5: fix socket/sockindex confusion, MSVC compiler warnings
  - libssh: use libssh sftp_aio to upload file
  - libssh: when using IPv6 numerical address, add brackets
  - mime: fix reader stall on small read lengths
  - mk-ca-bundle: remove CKA_NSS_SERVER_DISTRUST_AFTER conditions
  - mprintf: fix the integer overflow checks
  - multi: fix callback for 'CURLMOPT_TIMERFUNCTION' not being called again when...
  - netrc: address several netrc parser flaws
  - netrc: support large file, longer lines, longer tokens
  - nghttp2: use custom memory functions
  - OpenSSL: improvde error message on expired certificate
  - openssl: remove three "Useless Assignments"
  - openssl: stop using SSL_CTX_ function prefix for our functions
  - pytest: add test for use of CURLMOPT_MAX_HOST_CONNECTIONS
  - rtsp: check EOS in the RTSP receive and return an error code
  - schannel: remove TLS 1.3 ciphersuite-list support
  - setopt: fix CURLOPT_HTTP_CONTENT_DECODING
  - setopt: fix missing options for builds without HTTP &amp; MQTT
  - socket: handle binding to "host!&lt;ip&gt;"
  - socketpair: fix enabling 'USE_EVENTFD'
  - strtok: use namespaced 'strtok_r' macro instead of redefining it
  * Remove 0001-duphandle-also-init-netrc.patch upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1736251200">- smtp: for starttls, do full upgrade [bsc#1235151]
  * Make sure the TLS handshake after a successful STARTTLS command
    is fully done before further sending/receiving on the connection.
  * Add curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238400">- Security fix: [bsc#1236588, CVE-2025-0167]
  * netrc: 'default' with no credentials is not a match
  * Add curl-CVE-2025-0167.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238401">- Security fix: [bsc#1236590, CVE-2025-0725]
  * content_encoding: drop support for zlib before 1.2.0.4
  * content_encoding: put the decomp buffers into the writer structs
  * Add curl-CVE-2025-0725.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738843200">- Update to 8.12.0:
  * Security fixes:
  - [bsc#1234068, CVE-2024-11053] curl could leak the password used
    for the first host to the followed-to host under certain circumstances.
  - [bsc#1232528, CVE-2024-9681] HSTS subdomain overwrites parent cache entry
  - [bsc#1236589, CVE-2025-0665] eventfd double close
  * Changes:
  - curl: add byte range support to --variable reading from file
  - curl: make --etag-save acknowledge --create-dirs
  - getinfo: fix CURLINFO_QUEUE_TIME_T and add 'time_queue' var
  - getinfo: provide info which auth was used for HTTP and proxy
  - hyper: drop support
  - openssl: add support to use keys and certificates from PKCS#11 provider
  - QUIC: 0RTT for gnutls via CURLSSLOPT_EARLYDATA
  - vtls: feature ssls-export for SSL session im-/export
  * Bugfixes:
  - altsvc: avoid integer overflow in expire calculation
  - asyn-ares: acknowledge CURLOPT_DNS_SERVERS set to NULL
  - asyn-ares: fix memory leak
  - asyn-ares: initial HTTPS resolve support
  - asyn-thread: use c-ares to resolve HTTPS RR
  - async-thread: avoid closing eventfd twice
  - cd2nroff: do not insist on quoted &lt;&gt; within backticks
  - cd2nroff: support "none" as a TLS backend
  - conncache: count shutdowns against host and max limits
  - content_encoding: drop support for zlib before 1.2.0.4
  - content_encoding: namespace GZIP flag constants
  - content_encoding: put the decomp buffers into the writer structs
  - content_encoding: support use of custom libzstd memory functions
  - cookie: cap expire times to 400 days
  - cookie: parse only the exact expire date
  - curl: return error if etag options are used with multiple URLs
  - curl_multi_fdset: include the shutdown connections in the set
  - curl_sha512_256: rename symbols to the curl namespace
  - curl_url_set.md: adjust the added-in to 7.62.0
  - doh: send HTTPS RR requests for all HTTP(S) transfers
  - easy: allow connect-only handle reuse with easy_perform
  - easy: make curl_easy_perform() return error if connection still there
  - easy_lock: use Sleep(1) for thread yield on old Windows
  - ECH: update APIs to those agreed with OpenSSL maintainers
  - GnuTLS: fix 'time_appconnect' for early data
  - HTTP/2: strip TE request header
  - http2: fix data_pending check
  - http2: fix value stored to 'result' is never read
  - http: ignore invalid Retry-After times
  - http_aws_sigv4: Fix invalid compare function handling zero-length pairs
  - https-connect: start next immediately on failure
  - lib: redirect handling by protocol handler
  - multi: fix curl_multi_waitfds reporting of fd_count
  - netrc: 'default' with no credentials is not a match
  - netrc: fix password-only entries
  - netrc: restore _netrc fallback logic
  - ngtcp2: fix memory leak on connect failure
  - openssl: define `HAVE_KEYLOG_CALLBACK` before use
  - openssl: fix ECH logic
  - osslq: use SSL_poll to determine writeability of QUIC streams
  - sectransp: free certificate on error
  - select: avoid a NULL deref in cwfds_add_sock
  - src: omit hugehelp and ca-embed from libcurltool
  - ssl session cache: change cache dimensions
  - system.h: add 64-bit curl_off_t definitions for NonStop
  - telnet: handle single-byte input option
  - TLS: check connection for SSL use, not handler
  - tool_formparse.c: make curlx_uztoso a static in here
  - tool_formparse: accept digits in --form type= strings
  - tool_getparam: ECH param parsing refix
  - tool_getparam: fail --hostpubsha256 if libssh2 is not used
  - tool_getparam: fix "Ignored Return Value"
  - tool_getparam: fix memory leak on error in parse_ech
  - tool_getparam: fix the ECH parser
  - tool_operate: make --etag-compare always accept a non-existing file
  - transfer: fix CURLOPT_CURLU override logic
  - urlapi: fix redirect to a new fragment or query (only)
  - vquic: make vquic_send_packets not return without setting psent
  - vtls: fix default SSL backend as a fallback
  - vtls: only remember the expiry timestamp in session cache
  - websocket: fix message send corruption
  - x509asn1: add parse recursion limit
  * Rebase pathes:
  - libcurl-ocloexec.patch
  - dont-mess-with-rpmoptflags.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739448000">- Update to 8.12.1:
  * Bugfixes:
  - asyn-thread: fix build with 'CURL_DISABLE_SOCKETPAIR'
  - asyn-thread: fix HTTPS RR crash
  - asyn-thread: fix the returned bitmask from Curl_resolver_getsock
  - asyn-thread: survive a c-ares channel set to NULL
  - cmake: always reference OpenSSL and ZLIB via imported targets
  - cmake: respect 'GNUTLS_CFLAGS' when detected via 'pkg-config'
  - cmake: respect 'GNUTLS_LIBRARY_DIRS' in 'libcurl.pc' and 'curl-config'
  - content_encoding: #error on too old zlib
  - imap: TLS upgrade fix
  - ldap: drop support for legacy Novell LDAP SDK
  - libssh2: comparison is always true because rc &lt;= -1
  - libssh2: raise lowest supported version to 1.2.8
  - libssh: drop support for libssh older than 0.9.0
  - openssl-quic: ignore ciphers for h3
  - pop3: TLS upgrade fix
  - runtests: fix the disabling of the memory tracking
  - runtests: quote commands to support paths with spaces
  - scache: add magic checks
  - smb: silence '-Warray-bounds' with gcc 13+
  - smtp: TLS upgrade fix
  - tool_cfgable: sort struct fields by size, use bitfields for booleans
  - tool_getparam: add "TLS required" flag for each such option
  - vtls: fix multissl-init
  - wakeup_write: make sure the eventfd write sends eight bytes</changelog>
  <changelog author="pmonreal@suse.com" date="1744200000">- Update to 8.13.0:
  * Changes:
  - curl: add write-out variable 'tls_earlydata'
  - curl: make --url support a file with URLs
  - gnutls: set priority via --ciphers
  - IMAP: add CURLOPT_UPLOAD_FLAGS and --upload-flags
  - lib: add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY
  - OpenSSL/quictls: add support for TLSv1.3 early data
  - rustls: add support for CERTINFO
  - rustls: add support for SSLKEYLOGFILE
  - rustls: support ECH w/ DoH lookup for config
  - rustls: support native platform verifier
  - var: add a '64dec' function that can base64 decode a string
  * Bugfixes:
  - conn: fix connection reuse when SSL is optional
  - hash: use single linked list for entries
  - http2: detect session being closed on ingress handling
  - http2: reset stream on response header error
  - http: remove a HTTP method size restriction
  - http: version negotiation
  - httpsrr: fix port detection
  - libssh: fix freeing of resources in disconnect
  - libssh: fix scp large file upload for 32-bit size_t systems
  - openssl-quic: do not iterate over multi handles
  - openssl: check return value of X509_get0_pubkey
  - openssl: drop support for old OpenSSL/LibreSSL versions
  - openssl: fix crash on missing cert password
  - openssl: fix pkcs11 URI checking for key files.
  - openssl: remove bad `goto`s into other scope
  - setopt: illegal CURLOPT_SOCKS5_AUTH should return error
  - setopt: setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine
  - sshserver.pl: adjust `AuthorizedKeysFile2` cutoff version
  - sshserver: fix excluding obsolete client config lines
  - SSLCERTS: list support for SSL_CERT_FILE and SSL_CERT_DIR
  - tftpd: prefix TFTP protocol error `E*` constants with `TFTP_`
  - tool_operate: fail SSH transfers without server auth
  - url: call protocol handler's disconnect in Curl_conn_free
  - urlapi: remove percent encoded dot sequences from the URL path
  - urldata: remove 'hostname' from struct Curl_async
  * Rebase patches:
  - libcurl-ocloexec.patch
  - curl-secure-getenv.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1744372800">- fix Leap build add curl-8.13.0-CloseSocket.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1748433600">- Update to 8.14.0:
  * Security fixes:
  - [CVE-2025-4947, bsc#1243397] QUIC certificate check skip with wolfSSL
  - [CVE-2025-5025, bsc#1243706] No QUIC certificate pinning with wolfSSL
  * Changes:
  - mqtt: send ping at upkeep interval
  - schannel: handle pkcs12 client certificates containing CA certificates
  - TLS: add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: import v2025.04.20 script + docs
  - websocket: add option to disable auto-pong reply
  * Bugfixes:
  - asny-thrdd: fix detach from running thread
  - async-threaded resolver: use ref counter
  - async: DoH improvements
  - build: enable gcc-12/13+, clang-10+ picky warnings
  - build: enable gcc-15 picky warnings
  - certs: drop unused `default_bits` from `.prm` files
  - cf-https-connect: use the passed in dns struct pointer
  - cf-socket: fix FTP accept connect
  - cfilters: remove assert
  - cmake: fix nghttp3 static linking with `USE_OPENSSL_QUIC=ON`
  - cmake: prefer `COMPILE_OPTIONS` over `CMAKE_C_FLAGS` for custom C options
  - cmake: revert `CURL_LTO` behavior for multi-config generators
  - configure: fix --disable-rt
  - CONTRIBUTE: add project guidelines for AI use
  - cpool/cshutdown: force close connections under pressure
  - curl: fix memory leak when -h is used in config file
  - curl_get_line: handle lines ending on the buffer boundary
  - headers: enforce a max number of response header to accept
  - http: fix HTTP/2 handling of TE request header using "trailers"
  - lib: include files using known path
  - lib: unify conversions to/from hex
  - libssh: add NULL check for Curl_meta_get()
  - libssh: fix memory leak
  - mqtt: use conn/easy meta hash
  - multi: do transfer book keeping using mid
  - multi: init_do(): check result
  - netrc: avoid NULL deref on weird input
  - netrc: avoid strdup NULL
  - netrc: deal with null token better
  - openssl-quic: avoid potential `-Wnull-dereference`, add assert
  - openssl-quic: fix shutdown when stream not open
  - openssl: enable builds for *both* engines and providers
  - openssl: set the cipher string before doing private cert
  - progress: avoid integer overflow when gathering total transfer size
  - rand: update comment on Curl_rand_bytes weak random
  - rustls: make max size of cert and key reasonable
  - smb: avoid integer overflow on weird input date
  - urlapi: redirecting to "" is considered fine
  * Remove curl-8.13.0-CloseSocket.patch upstream
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1749038400">- Update to 8.14.1:
  * Security fixes:
  - [bsc#1243933, CVE-2025-5399] libcurl can possibly get
    trapped in an endless busy-loop when processing specially
    crafted packets [d1145df2]
  * Bugfixes:
  - asyn-thrdd: fix cleanup when RR fails due to OOM
  - ftp: fix teardown of DATA connection in done
  - http: fail early when rewind of input failed when following redirects
  - multi: fix add_handle resizing
  - tls BIOs: handle BIO_CTRL_EOF correctly
  - tool_getparam: make --no-anyauth not be accepted
  - wolfssl: fix sending of early data
  - ws: handle blocked sends better
  - ws: tests and fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1749643200">- Update to 8.14.1: [jsc#PED-13055, jsc#PED-13056]
  * Add _multibuild
  * Remove patches fixed in the update:
  - curl-CVE-2024-11053.patch
  - curl-CVE-2024-2004.patch
  - curl-CVE-2024-2379.patch
  - curl-CVE-2024-2398.patch
  - curl-CVE-2024-2466.patch
  - curl-CVE-2024-6197.patch
  - curl-CVE-2024-7264.patch
  - curl-CVE-2024-8096.patch
  - curl-CVE-2024-9681.patch
  - curl-CVE-2025-0167.patch
  - curl-CVE-2025-0725.patch
  - curl-aws_sigv4-url-encode-the-canonical-path.patch
  - curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
</package>
<package pkgid="9530cfc15c811f8ad01d8b1bd09551bc7383592fe4c3d2fb66722be54aeff96f" name="curl" arch="x86_64">
  <version epoch="0" ver="8.14.1" rel="150700.7.2.1"/>
  <changelog author="pmonreal@suse.com" date="1727179200">- Update to 8.10.1:
  * Bugfixes:
  - autotools: fix `--with-ca-embed` build rule
  - cmake: ensure `CURL_USE_OPENSSL`/`USE_OPENSSL_QUIC` are set in sync
  - cmake: fix MSH3 to appear on the feature list
  - connect: store connection info when really done
  - FTP: partly revert eeb7c1280742f5c8fa48a4340fc1e1a1a2c7075a
  - http2: when uploading data from stdin, fix eos forwarding
  - http: make max-filesize check not count ignored bodies
  - lib: fix AF_INET6 use outside of USE_IPV6
  - multi: check that the multi handle is valid in curl_multi_assign
  - QUIC: on connect, keep on trying on draining server
  - request: correctly reset the eos_sent flag
  - setopt: remove superfluous use of ternary expressions
  - singleuse: drop `Curl_memrchr()` for no-HTTP builds
  - tool_cb_wrt: use "curl_response" if no file name in URL
  - transfer: fix sendrecv() without interim poll
  - vtls: fix `Curl_ssl_conn_config_match` doc param</changelog>
  <changelog author="pmonreal@suse.com" date="1730289600">- Security fix: [bsc#1232528, CVE-2024-9681]
  * HSTS subdomain overwrites parent cache entry
  * Add curl-CVE-2024-9681.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730894400">- Update to 8.11.0:
  * Security fixes: [bsc#1232528, CVE-2024-9681]
  - curl: HSTS subdomain overwrites parent cache entry
  * Changes:
  - curl: --create-dirs works for --dump-header as well
  - gtls: Add P12 format support
  - ipfs: add options to disable
  - TLS: TLSv1.3 earlydata support for curl
  - WebSockets: make support official (non-experimental)
  * Bugfixes:
  - build: clarify CA embed is for curl tool, mark default, improve summary
  - build: show if CA bundle to embed was found
  - build: tidy up and improve versioned-symbols options
  - cmake/FindNGTCP2: use library path as hint for finding crypto module
  - cmake: disable default OpenSSL if BearSSL, GnuTLS or Rustls is enabled
  - cmake: rename LDAP dependency config variables to match Find modules
  - cmake: replace 'check_include_file_concat()' for LDAP and GSS detection
  - cmake: use OpenSSL for LDAP detection only if available
  - curl: add build options for safe/no CA bundle search (Windows)
  - curl: detect ECH support dynamically, not at build time
  - curl_addrinfo: support operating systems with only getaddrinfo(3)
  - ftp: fix 0-length last write on upload from stdin
  - gnutls: use session cache for QUIC
  - hsts: improve subdomain handling
  - hsts: support "implied LWS" properly around max-age
  - http2: auto reset stream on server eos
  - json.md: cli-option '--json' is an alias of '--data-binary'
  - lib: move curl_path.[ch] into vssh/
  - lib: remove function pointer typecasts for hmac/sha256/md5
  - libssh.c: handle EGAINS during proto-connect correctly
  - libssh2: use the filename buffer when getting the homedir
  - multi.c: warn/assert on stall only without timer
  - negotiate: conditional check around GSS &amp; SSL specific code
  - netrc: cache the netrc file in memory
  - ngtcp2: do not loop on recv
  - ngtcp2: set max window size to 10x of initial (128KB)
  - openssl quic: populate x509 store before handshake
  - openssl: extend the OpenSSL error messages
  - openssl: improve retries on shutdown
  - quic: use send/recvmmsg when available
  - schannel: fix TLS cert verification by IP SAN
  - schannel: ignore error on recv beyond close notify
  - select: use poll() if existing, avoid poll() with no sockets
  - sendf: add condition to max-filesize check
  - server/mqttd: fix two memory leaks
  - setopt: return error for bad input to CURLOPT_RTSP_REQUEST
  - setopt_cptr: make overflow check only done when needed
  - tls: avoid abusing CURLE_SSL_ENGINE_INITFAILED
  - tool: support --show-headers AND --remote-header-name
  - tool_operate: make --skip-existing work for --parallel
  - url: connection reuse on h3 connections
  - url: use same credentials on redirect
  - urlapi: normalize the IPv6 address
  - version: say quictls in MSH3 builds
  - vquic: fix compiler warning with gcc + MUSL
  - vquic: recv_mmsg, use fewer, but larger buffers
  - vtls: convert Curl_pin_peer_pubkey to use dynbuf
  - vtls: convert pubkey_pem_to_der to use dynbuf
  * Rebase curl-secure-getenv.patch</changelog>
  <changelog author="bjorn.bidar@thaodan.de" date="1731499200">- Add patch to fix libcurl when netrc parsing is enabled.
  curl_easy_duphandle did not init netrc which broke applications such
  as for example git. gh#curl/curl#15496
  * 0001-duphandle-also-init-netrc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733227200">- Security fix: [bsc#1234068, CVE-2024-11053]
  * curl could leak the password used for the first host to the
    followed-to host under certain circumstances.
  * netrc: address several netrc parser flaws
  * Add curl-CVE-2024-11053.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733918400">- Update to 8.11.1:
  * Security fixes:
  - netrc and redirect credential leak [bsc#1234068, CVE-2024-11053]
  * Bugfixes:
  - build: fix ECH to always enable HTTPS RR
  - cookie: treat cookie name case sensitively
  - curl-rustls.m4: keep existing 'CPPFLAGS'/'LDFLAGS' when detected
  - curl: use realtime in trace timestamps
  - digest: produce a shorter cnonce in Digest headers
  - docs: document default 'User-Agent'
  - docs: suggest --ssl-reqd instead of --ftp-ssl
  - duphandle: also init netrc
  - hostip: don't use the resolver for FQDN localhost
  - http_negotiate: allow for a one byte larger channel binding buffer
  - krb5: fix socket/sockindex confusion, MSVC compiler warnings
  - libssh: use libssh sftp_aio to upload file
  - libssh: when using IPv6 numerical address, add brackets
  - mime: fix reader stall on small read lengths
  - mk-ca-bundle: remove CKA_NSS_SERVER_DISTRUST_AFTER conditions
  - mprintf: fix the integer overflow checks
  - multi: fix callback for 'CURLMOPT_TIMERFUNCTION' not being called again when...
  - netrc: address several netrc parser flaws
  - netrc: support large file, longer lines, longer tokens
  - nghttp2: use custom memory functions
  - OpenSSL: improvde error message on expired certificate
  - openssl: remove three "Useless Assignments"
  - openssl: stop using SSL_CTX_ function prefix for our functions
  - pytest: add test for use of CURLMOPT_MAX_HOST_CONNECTIONS
  - rtsp: check EOS in the RTSP receive and return an error code
  - schannel: remove TLS 1.3 ciphersuite-list support
  - setopt: fix CURLOPT_HTTP_CONTENT_DECODING
  - setopt: fix missing options for builds without HTTP &amp; MQTT
  - socket: handle binding to "host!&lt;ip&gt;"
  - socketpair: fix enabling 'USE_EVENTFD'
  - strtok: use namespaced 'strtok_r' macro instead of redefining it
  * Remove 0001-duphandle-also-init-netrc.patch upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1736251200">- smtp: for starttls, do full upgrade [bsc#1235151]
  * Make sure the TLS handshake after a successful STARTTLS command
    is fully done before further sending/receiving on the connection.
  * Add curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238400">- Security fix: [bsc#1236588, CVE-2025-0167]
  * netrc: 'default' with no credentials is not a match
  * Add curl-CVE-2025-0167.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238401">- Security fix: [bsc#1236590, CVE-2025-0725]
  * content_encoding: drop support for zlib before 1.2.0.4
  * content_encoding: put the decomp buffers into the writer structs
  * Add curl-CVE-2025-0725.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738843200">- Update to 8.12.0:
  * Security fixes:
  - [bsc#1234068, CVE-2024-11053] curl could leak the password used
    for the first host to the followed-to host under certain circumstances.
  - [bsc#1232528, CVE-2024-9681] HSTS subdomain overwrites parent cache entry
  - [bsc#1236589, CVE-2025-0665] eventfd double close
  * Changes:
  - curl: add byte range support to --variable reading from file
  - curl: make --etag-save acknowledge --create-dirs
  - getinfo: fix CURLINFO_QUEUE_TIME_T and add 'time_queue' var
  - getinfo: provide info which auth was used for HTTP and proxy
  - hyper: drop support
  - openssl: add support to use keys and certificates from PKCS#11 provider
  - QUIC: 0RTT for gnutls via CURLSSLOPT_EARLYDATA
  - vtls: feature ssls-export for SSL session im-/export
  * Bugfixes:
  - altsvc: avoid integer overflow in expire calculation
  - asyn-ares: acknowledge CURLOPT_DNS_SERVERS set to NULL
  - asyn-ares: fix memory leak
  - asyn-ares: initial HTTPS resolve support
  - asyn-thread: use c-ares to resolve HTTPS RR
  - async-thread: avoid closing eventfd twice
  - cd2nroff: do not insist on quoted &lt;&gt; within backticks
  - cd2nroff: support "none" as a TLS backend
  - conncache: count shutdowns against host and max limits
  - content_encoding: drop support for zlib before 1.2.0.4
  - content_encoding: namespace GZIP flag constants
  - content_encoding: put the decomp buffers into the writer structs
  - content_encoding: support use of custom libzstd memory functions
  - cookie: cap expire times to 400 days
  - cookie: parse only the exact expire date
  - curl: return error if etag options are used with multiple URLs
  - curl_multi_fdset: include the shutdown connections in the set
  - curl_sha512_256: rename symbols to the curl namespace
  - curl_url_set.md: adjust the added-in to 7.62.0
  - doh: send HTTPS RR requests for all HTTP(S) transfers
  - easy: allow connect-only handle reuse with easy_perform
  - easy: make curl_easy_perform() return error if connection still there
  - easy_lock: use Sleep(1) for thread yield on old Windows
  - ECH: update APIs to those agreed with OpenSSL maintainers
  - GnuTLS: fix 'time_appconnect' for early data
  - HTTP/2: strip TE request header
  - http2: fix data_pending check
  - http2: fix value stored to 'result' is never read
  - http: ignore invalid Retry-After times
  - http_aws_sigv4: Fix invalid compare function handling zero-length pairs
  - https-connect: start next immediately on failure
  - lib: redirect handling by protocol handler
  - multi: fix curl_multi_waitfds reporting of fd_count
  - netrc: 'default' with no credentials is not a match
  - netrc: fix password-only entries
  - netrc: restore _netrc fallback logic
  - ngtcp2: fix memory leak on connect failure
  - openssl: define `HAVE_KEYLOG_CALLBACK` before use
  - openssl: fix ECH logic
  - osslq: use SSL_poll to determine writeability of QUIC streams
  - sectransp: free certificate on error
  - select: avoid a NULL deref in cwfds_add_sock
  - src: omit hugehelp and ca-embed from libcurltool
  - ssl session cache: change cache dimensions
  - system.h: add 64-bit curl_off_t definitions for NonStop
  - telnet: handle single-byte input option
  - TLS: check connection for SSL use, not handler
  - tool_formparse.c: make curlx_uztoso a static in here
  - tool_formparse: accept digits in --form type= strings
  - tool_getparam: ECH param parsing refix
  - tool_getparam: fail --hostpubsha256 if libssh2 is not used
  - tool_getparam: fix "Ignored Return Value"
  - tool_getparam: fix memory leak on error in parse_ech
  - tool_getparam: fix the ECH parser
  - tool_operate: make --etag-compare always accept a non-existing file
  - transfer: fix CURLOPT_CURLU override logic
  - urlapi: fix redirect to a new fragment or query (only)
  - vquic: make vquic_send_packets not return without setting psent
  - vtls: fix default SSL backend as a fallback
  - vtls: only remember the expiry timestamp in session cache
  - websocket: fix message send corruption
  - x509asn1: add parse recursion limit
  * Rebase pathes:
  - libcurl-ocloexec.patch
  - dont-mess-with-rpmoptflags.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739448000">- Update to 8.12.1:
  * Bugfixes:
  - asyn-thread: fix build with 'CURL_DISABLE_SOCKETPAIR'
  - asyn-thread: fix HTTPS RR crash
  - asyn-thread: fix the returned bitmask from Curl_resolver_getsock
  - asyn-thread: survive a c-ares channel set to NULL
  - cmake: always reference OpenSSL and ZLIB via imported targets
  - cmake: respect 'GNUTLS_CFLAGS' when detected via 'pkg-config'
  - cmake: respect 'GNUTLS_LIBRARY_DIRS' in 'libcurl.pc' and 'curl-config'
  - content_encoding: #error on too old zlib
  - imap: TLS upgrade fix
  - ldap: drop support for legacy Novell LDAP SDK
  - libssh2: comparison is always true because rc &lt;= -1
  - libssh2: raise lowest supported version to 1.2.8
  - libssh: drop support for libssh older than 0.9.0
  - openssl-quic: ignore ciphers for h3
  - pop3: TLS upgrade fix
  - runtests: fix the disabling of the memory tracking
  - runtests: quote commands to support paths with spaces
  - scache: add magic checks
  - smb: silence '-Warray-bounds' with gcc 13+
  - smtp: TLS upgrade fix
  - tool_cfgable: sort struct fields by size, use bitfields for booleans
  - tool_getparam: add "TLS required" flag for each such option
  - vtls: fix multissl-init
  - wakeup_write: make sure the eventfd write sends eight bytes</changelog>
  <changelog author="pmonreal@suse.com" date="1744200000">- Update to 8.13.0:
  * Changes:
  - curl: add write-out variable 'tls_earlydata'
  - curl: make --url support a file with URLs
  - gnutls: set priority via --ciphers
  - IMAP: add CURLOPT_UPLOAD_FLAGS and --upload-flags
  - lib: add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY
  - OpenSSL/quictls: add support for TLSv1.3 early data
  - rustls: add support for CERTINFO
  - rustls: add support for SSLKEYLOGFILE
  - rustls: support ECH w/ DoH lookup for config
  - rustls: support native platform verifier
  - var: add a '64dec' function that can base64 decode a string
  * Bugfixes:
  - conn: fix connection reuse when SSL is optional
  - hash: use single linked list for entries
  - http2: detect session being closed on ingress handling
  - http2: reset stream on response header error
  - http: remove a HTTP method size restriction
  - http: version negotiation
  - httpsrr: fix port detection
  - libssh: fix freeing of resources in disconnect
  - libssh: fix scp large file upload for 32-bit size_t systems
  - openssl-quic: do not iterate over multi handles
  - openssl: check return value of X509_get0_pubkey
  - openssl: drop support for old OpenSSL/LibreSSL versions
  - openssl: fix crash on missing cert password
  - openssl: fix pkcs11 URI checking for key files.
  - openssl: remove bad `goto`s into other scope
  - setopt: illegal CURLOPT_SOCKS5_AUTH should return error
  - setopt: setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine
  - sshserver.pl: adjust `AuthorizedKeysFile2` cutoff version
  - sshserver: fix excluding obsolete client config lines
  - SSLCERTS: list support for SSL_CERT_FILE and SSL_CERT_DIR
  - tftpd: prefix TFTP protocol error `E*` constants with `TFTP_`
  - tool_operate: fail SSH transfers without server auth
  - url: call protocol handler's disconnect in Curl_conn_free
  - urlapi: remove percent encoded dot sequences from the URL path
  - urldata: remove 'hostname' from struct Curl_async
  * Rebase patches:
  - libcurl-ocloexec.patch
  - curl-secure-getenv.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1744372800">- fix Leap build add curl-8.13.0-CloseSocket.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1748433600">- Update to 8.14.0:
  * Security fixes:
  - [CVE-2025-4947, bsc#1243397] QUIC certificate check skip with wolfSSL
  - [CVE-2025-5025, bsc#1243706] No QUIC certificate pinning with wolfSSL
  * Changes:
  - mqtt: send ping at upkeep interval
  - schannel: handle pkcs12 client certificates containing CA certificates
  - TLS: add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: import v2025.04.20 script + docs
  - websocket: add option to disable auto-pong reply
  * Bugfixes:
  - asny-thrdd: fix detach from running thread
  - async-threaded resolver: use ref counter
  - async: DoH improvements
  - build: enable gcc-12/13+, clang-10+ picky warnings
  - build: enable gcc-15 picky warnings
  - certs: drop unused `default_bits` from `.prm` files
  - cf-https-connect: use the passed in dns struct pointer
  - cf-socket: fix FTP accept connect
  - cfilters: remove assert
  - cmake: fix nghttp3 static linking with `USE_OPENSSL_QUIC=ON`
  - cmake: prefer `COMPILE_OPTIONS` over `CMAKE_C_FLAGS` for custom C options
  - cmake: revert `CURL_LTO` behavior for multi-config generators
  - configure: fix --disable-rt
  - CONTRIBUTE: add project guidelines for AI use
  - cpool/cshutdown: force close connections under pressure
  - curl: fix memory leak when -h is used in config file
  - curl_get_line: handle lines ending on the buffer boundary
  - headers: enforce a max number of response header to accept
  - http: fix HTTP/2 handling of TE request header using "trailers"
  - lib: include files using known path
  - lib: unify conversions to/from hex
  - libssh: add NULL check for Curl_meta_get()
  - libssh: fix memory leak
  - mqtt: use conn/easy meta hash
  - multi: do transfer book keeping using mid
  - multi: init_do(): check result
  - netrc: avoid NULL deref on weird input
  - netrc: avoid strdup NULL
  - netrc: deal with null token better
  - openssl-quic: avoid potential `-Wnull-dereference`, add assert
  - openssl-quic: fix shutdown when stream not open
  - openssl: enable builds for *both* engines and providers
  - openssl: set the cipher string before doing private cert
  - progress: avoid integer overflow when gathering total transfer size
  - rand: update comment on Curl_rand_bytes weak random
  - rustls: make max size of cert and key reasonable
  - smb: avoid integer overflow on weird input date
  - urlapi: redirecting to "" is considered fine
  * Remove curl-8.13.0-CloseSocket.patch upstream
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1749038400">- Update to 8.14.1:
  * Security fixes:
  - [bsc#1243933, CVE-2025-5399] libcurl can possibly get
    trapped in an endless busy-loop when processing specially
    crafted packets [d1145df2]
  * Bugfixes:
  - asyn-thrdd: fix cleanup when RR fails due to OOM
  - ftp: fix teardown of DATA connection in done
  - http: fail early when rewind of input failed when following redirects
  - multi: fix add_handle resizing
  - tls BIOs: handle BIO_CTRL_EOF correctly
  - tool_getparam: make --no-anyauth not be accepted
  - wolfssl: fix sending of early data
  - ws: handle blocked sends better
  - ws: tests and fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1749643200">- Update to 8.14.1: [jsc#PED-13055, jsc#PED-13056]
  * Add _multibuild
  * Remove patches fixed in the update:
  - curl-CVE-2024-11053.patch
  - curl-CVE-2024-2004.patch
  - curl-CVE-2024-2379.patch
  - curl-CVE-2024-2398.patch
  - curl-CVE-2024-2466.patch
  - curl-CVE-2024-6197.patch
  - curl-CVE-2024-7264.patch
  - curl-CVE-2024-8096.patch
  - curl-CVE-2024-9681.patch
  - curl-CVE-2025-0167.patch
  - curl-CVE-2025-0725.patch
  - curl-aws_sigv4-url-encode-the-canonical-path.patch
  - curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
</package>
<package pkgid="c94847df94ef848ceb8d795242b4b050cee6a0c3f774c9223b8ee90faefbf9c2" name="curl" arch="src">
  <version epoch="0" ver="8.14.1" rel="150700.7.5.1"/>
  <changelog author="pmonreal@suse.com" date="1730289600">- Security fix: [bsc#1232528, CVE-2024-9681]
  * HSTS subdomain overwrites parent cache entry
  * Add curl-CVE-2024-9681.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730894400">- Update to 8.11.0:
  * Security fixes: [bsc#1232528, CVE-2024-9681]
  - curl: HSTS subdomain overwrites parent cache entry
  * Changes:
  - curl: --create-dirs works for --dump-header as well
  - gtls: Add P12 format support
  - ipfs: add options to disable
  - TLS: TLSv1.3 earlydata support for curl
  - WebSockets: make support official (non-experimental)
  * Bugfixes:
  - build: clarify CA embed is for curl tool, mark default, improve summary
  - build: show if CA bundle to embed was found
  - build: tidy up and improve versioned-symbols options
  - cmake/FindNGTCP2: use library path as hint for finding crypto module
  - cmake: disable default OpenSSL if BearSSL, GnuTLS or Rustls is enabled
  - cmake: rename LDAP dependency config variables to match Find modules
  - cmake: replace 'check_include_file_concat()' for LDAP and GSS detection
  - cmake: use OpenSSL for LDAP detection only if available
  - curl: add build options for safe/no CA bundle search (Windows)
  - curl: detect ECH support dynamically, not at build time
  - curl_addrinfo: support operating systems with only getaddrinfo(3)
  - ftp: fix 0-length last write on upload from stdin
  - gnutls: use session cache for QUIC
  - hsts: improve subdomain handling
  - hsts: support "implied LWS" properly around max-age
  - http2: auto reset stream on server eos
  - json.md: cli-option '--json' is an alias of '--data-binary'
  - lib: move curl_path.[ch] into vssh/
  - lib: remove function pointer typecasts for hmac/sha256/md5
  - libssh.c: handle EGAINS during proto-connect correctly
  - libssh2: use the filename buffer when getting the homedir
  - multi.c: warn/assert on stall only without timer
  - negotiate: conditional check around GSS &amp; SSL specific code
  - netrc: cache the netrc file in memory
  - ngtcp2: do not loop on recv
  - ngtcp2: set max window size to 10x of initial (128KB)
  - openssl quic: populate x509 store before handshake
  - openssl: extend the OpenSSL error messages
  - openssl: improve retries on shutdown
  - quic: use send/recvmmsg when available
  - schannel: fix TLS cert verification by IP SAN
  - schannel: ignore error on recv beyond close notify
  - select: use poll() if existing, avoid poll() with no sockets
  - sendf: add condition to max-filesize check
  - server/mqttd: fix two memory leaks
  - setopt: return error for bad input to CURLOPT_RTSP_REQUEST
  - setopt_cptr: make overflow check only done when needed
  - tls: avoid abusing CURLE_SSL_ENGINE_INITFAILED
  - tool: support --show-headers AND --remote-header-name
  - tool_operate: make --skip-existing work for --parallel
  - url: connection reuse on h3 connections
  - url: use same credentials on redirect
  - urlapi: normalize the IPv6 address
  - version: say quictls in MSH3 builds
  - vquic: fix compiler warning with gcc + MUSL
  - vquic: recv_mmsg, use fewer, but larger buffers
  - vtls: convert Curl_pin_peer_pubkey to use dynbuf
  - vtls: convert pubkey_pem_to_der to use dynbuf
  * Rebase curl-secure-getenv.patch</changelog>
  <changelog author="bjorn.bidar@thaodan.de" date="1731499200">- Add patch to fix libcurl when netrc parsing is enabled.
  curl_easy_duphandle did not init netrc which broke applications such
  as for example git. gh#curl/curl#15496
  * 0001-duphandle-also-init-netrc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733227200">- Security fix: [bsc#1234068, CVE-2024-11053]
  * curl could leak the password used for the first host to the
    followed-to host under certain circumstances.
  * netrc: address several netrc parser flaws
  * Add curl-CVE-2024-11053.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733918400">- Update to 8.11.1:
  * Security fixes:
  - netrc and redirect credential leak [bsc#1234068, CVE-2024-11053]
  * Bugfixes:
  - build: fix ECH to always enable HTTPS RR
  - cookie: treat cookie name case sensitively
  - curl-rustls.m4: keep existing 'CPPFLAGS'/'LDFLAGS' when detected
  - curl: use realtime in trace timestamps
  - digest: produce a shorter cnonce in Digest headers
  - docs: document default 'User-Agent'
  - docs: suggest --ssl-reqd instead of --ftp-ssl
  - duphandle: also init netrc
  - hostip: don't use the resolver for FQDN localhost
  - http_negotiate: allow for a one byte larger channel binding buffer
  - krb5: fix socket/sockindex confusion, MSVC compiler warnings
  - libssh: use libssh sftp_aio to upload file
  - libssh: when using IPv6 numerical address, add brackets
  - mime: fix reader stall on small read lengths
  - mk-ca-bundle: remove CKA_NSS_SERVER_DISTRUST_AFTER conditions
  - mprintf: fix the integer overflow checks
  - multi: fix callback for 'CURLMOPT_TIMERFUNCTION' not being called again when...
  - netrc: address several netrc parser flaws
  - netrc: support large file, longer lines, longer tokens
  - nghttp2: use custom memory functions
  - OpenSSL: improvde error message on expired certificate
  - openssl: remove three "Useless Assignments"
  - openssl: stop using SSL_CTX_ function prefix for our functions
  - pytest: add test for use of CURLMOPT_MAX_HOST_CONNECTIONS
  - rtsp: check EOS in the RTSP receive and return an error code
  - schannel: remove TLS 1.3 ciphersuite-list support
  - setopt: fix CURLOPT_HTTP_CONTENT_DECODING
  - setopt: fix missing options for builds without HTTP &amp; MQTT
  - socket: handle binding to "host!&lt;ip&gt;"
  - socketpair: fix enabling 'USE_EVENTFD'
  - strtok: use namespaced 'strtok_r' macro instead of redefining it
  * Remove 0001-duphandle-also-init-netrc.patch upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1736251200">- smtp: for starttls, do full upgrade [bsc#1235151]
  * Make sure the TLS handshake after a successful STARTTLS command
    is fully done before further sending/receiving on the connection.
  * Add curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238400">- Security fix: [bsc#1236588, CVE-2025-0167]
  * netrc: 'default' with no credentials is not a match
  * Add curl-CVE-2025-0167.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238401">- Security fix: [bsc#1236590, CVE-2025-0725]
  * content_encoding: drop support for zlib before 1.2.0.4
  * content_encoding: put the decomp buffers into the writer structs
  * Add curl-CVE-2025-0725.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738843200">- Update to 8.12.0:
  * Security fixes:
  - [bsc#1234068, CVE-2024-11053] curl could leak the password used
    for the first host to the followed-to host under certain circumstances.
  - [bsc#1232528, CVE-2024-9681] HSTS subdomain overwrites parent cache entry
  - [bsc#1236589, CVE-2025-0665] eventfd double close
  * Changes:
  - curl: add byte range support to --variable reading from file
  - curl: make --etag-save acknowledge --create-dirs
  - getinfo: fix CURLINFO_QUEUE_TIME_T and add 'time_queue' var
  - getinfo: provide info which auth was used for HTTP and proxy
  - hyper: drop support
  - openssl: add support to use keys and certificates from PKCS#11 provider
  - QUIC: 0RTT for gnutls via CURLSSLOPT_EARLYDATA
  - vtls: feature ssls-export for SSL session im-/export
  * Bugfixes:
  - altsvc: avoid integer overflow in expire calculation
  - asyn-ares: acknowledge CURLOPT_DNS_SERVERS set to NULL
  - asyn-ares: fix memory leak
  - asyn-ares: initial HTTPS resolve support
  - asyn-thread: use c-ares to resolve HTTPS RR
  - async-thread: avoid closing eventfd twice
  - cd2nroff: do not insist on quoted &lt;&gt; within backticks
  - cd2nroff: support "none" as a TLS backend
  - conncache: count shutdowns against host and max limits
  - content_encoding: drop support for zlib before 1.2.0.4
  - content_encoding: namespace GZIP flag constants
  - content_encoding: put the decomp buffers into the writer structs
  - content_encoding: support use of custom libzstd memory functions
  - cookie: cap expire times to 400 days
  - cookie: parse only the exact expire date
  - curl: return error if etag options are used with multiple URLs
  - curl_multi_fdset: include the shutdown connections in the set
  - curl_sha512_256: rename symbols to the curl namespace
  - curl_url_set.md: adjust the added-in to 7.62.0
  - doh: send HTTPS RR requests for all HTTP(S) transfers
  - easy: allow connect-only handle reuse with easy_perform
  - easy: make curl_easy_perform() return error if connection still there
  - easy_lock: use Sleep(1) for thread yield on old Windows
  - ECH: update APIs to those agreed with OpenSSL maintainers
  - GnuTLS: fix 'time_appconnect' for early data
  - HTTP/2: strip TE request header
  - http2: fix data_pending check
  - http2: fix value stored to 'result' is never read
  - http: ignore invalid Retry-After times
  - http_aws_sigv4: Fix invalid compare function handling zero-length pairs
  - https-connect: start next immediately on failure
  - lib: redirect handling by protocol handler
  - multi: fix curl_multi_waitfds reporting of fd_count
  - netrc: 'default' with no credentials is not a match
  - netrc: fix password-only entries
  - netrc: restore _netrc fallback logic
  - ngtcp2: fix memory leak on connect failure
  - openssl: define `HAVE_KEYLOG_CALLBACK` before use
  - openssl: fix ECH logic
  - osslq: use SSL_poll to determine writeability of QUIC streams
  - sectransp: free certificate on error
  - select: avoid a NULL deref in cwfds_add_sock
  - src: omit hugehelp and ca-embed from libcurltool
  - ssl session cache: change cache dimensions
  - system.h: add 64-bit curl_off_t definitions for NonStop
  - telnet: handle single-byte input option
  - TLS: check connection for SSL use, not handler
  - tool_formparse.c: make curlx_uztoso a static in here
  - tool_formparse: accept digits in --form type= strings
  - tool_getparam: ECH param parsing refix
  - tool_getparam: fail --hostpubsha256 if libssh2 is not used
  - tool_getparam: fix "Ignored Return Value"
  - tool_getparam: fix memory leak on error in parse_ech
  - tool_getparam: fix the ECH parser
  - tool_operate: make --etag-compare always accept a non-existing file
  - transfer: fix CURLOPT_CURLU override logic
  - urlapi: fix redirect to a new fragment or query (only)
  - vquic: make vquic_send_packets not return without setting psent
  - vtls: fix default SSL backend as a fallback
  - vtls: only remember the expiry timestamp in session cache
  - websocket: fix message send corruption
  - x509asn1: add parse recursion limit
  * Rebase pathes:
  - libcurl-ocloexec.patch
  - dont-mess-with-rpmoptflags.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739448000">- Update to 8.12.1:
  * Bugfixes:
  - asyn-thread: fix build with 'CURL_DISABLE_SOCKETPAIR'
  - asyn-thread: fix HTTPS RR crash
  - asyn-thread: fix the returned bitmask from Curl_resolver_getsock
  - asyn-thread: survive a c-ares channel set to NULL
  - cmake: always reference OpenSSL and ZLIB via imported targets
  - cmake: respect 'GNUTLS_CFLAGS' when detected via 'pkg-config'
  - cmake: respect 'GNUTLS_LIBRARY_DIRS' in 'libcurl.pc' and 'curl-config'
  - content_encoding: #error on too old zlib
  - imap: TLS upgrade fix
  - ldap: drop support for legacy Novell LDAP SDK
  - libssh2: comparison is always true because rc &lt;= -1
  - libssh2: raise lowest supported version to 1.2.8
  - libssh: drop support for libssh older than 0.9.0
  - openssl-quic: ignore ciphers for h3
  - pop3: TLS upgrade fix
  - runtests: fix the disabling of the memory tracking
  - runtests: quote commands to support paths with spaces
  - scache: add magic checks
  - smb: silence '-Warray-bounds' with gcc 13+
  - smtp: TLS upgrade fix
  - tool_cfgable: sort struct fields by size, use bitfields for booleans
  - tool_getparam: add "TLS required" flag for each such option
  - vtls: fix multissl-init
  - wakeup_write: make sure the eventfd write sends eight bytes</changelog>
  <changelog author="pmonreal@suse.com" date="1744200000">- Update to 8.13.0:
  * Changes:
  - curl: add write-out variable 'tls_earlydata'
  - curl: make --url support a file with URLs
  - gnutls: set priority via --ciphers
  - IMAP: add CURLOPT_UPLOAD_FLAGS and --upload-flags
  - lib: add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY
  - OpenSSL/quictls: add support for TLSv1.3 early data
  - rustls: add support for CERTINFO
  - rustls: add support for SSLKEYLOGFILE
  - rustls: support ECH w/ DoH lookup for config
  - rustls: support native platform verifier
  - var: add a '64dec' function that can base64 decode a string
  * Bugfixes:
  - conn: fix connection reuse when SSL is optional
  - hash: use single linked list for entries
  - http2: detect session being closed on ingress handling
  - http2: reset stream on response header error
  - http: remove a HTTP method size restriction
  - http: version negotiation
  - httpsrr: fix port detection
  - libssh: fix freeing of resources in disconnect
  - libssh: fix scp large file upload for 32-bit size_t systems
  - openssl-quic: do not iterate over multi handles
  - openssl: check return value of X509_get0_pubkey
  - openssl: drop support for old OpenSSL/LibreSSL versions
  - openssl: fix crash on missing cert password
  - openssl: fix pkcs11 URI checking for key files.
  - openssl: remove bad `goto`s into other scope
  - setopt: illegal CURLOPT_SOCKS5_AUTH should return error
  - setopt: setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine
  - sshserver.pl: adjust `AuthorizedKeysFile2` cutoff version
  - sshserver: fix excluding obsolete client config lines
  - SSLCERTS: list support for SSL_CERT_FILE and SSL_CERT_DIR
  - tftpd: prefix TFTP protocol error `E*` constants with `TFTP_`
  - tool_operate: fail SSH transfers without server auth
  - url: call protocol handler's disconnect in Curl_conn_free
  - urlapi: remove percent encoded dot sequences from the URL path
  - urldata: remove 'hostname' from struct Curl_async
  * Rebase patches:
  - libcurl-ocloexec.patch
  - curl-secure-getenv.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1744372800">- fix Leap build add curl-8.13.0-CloseSocket.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1748433600">- Update to 8.14.0:
  * Security fixes:
  - [CVE-2025-4947, bsc#1243397] QUIC certificate check skip with wolfSSL
  - [CVE-2025-5025, bsc#1243706] No QUIC certificate pinning with wolfSSL
  * Changes:
  - mqtt: send ping at upkeep interval
  - schannel: handle pkcs12 client certificates containing CA certificates
  - TLS: add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: import v2025.04.20 script + docs
  - websocket: add option to disable auto-pong reply
  * Bugfixes:
  - asny-thrdd: fix detach from running thread
  - async-threaded resolver: use ref counter
  - async: DoH improvements
  - build: enable gcc-12/13+, clang-10+ picky warnings
  - build: enable gcc-15 picky warnings
  - certs: drop unused `default_bits` from `.prm` files
  - cf-https-connect: use the passed in dns struct pointer
  - cf-socket: fix FTP accept connect
  - cfilters: remove assert
  - cmake: fix nghttp3 static linking with `USE_OPENSSL_QUIC=ON`
  - cmake: prefer `COMPILE_OPTIONS` over `CMAKE_C_FLAGS` for custom C options
  - cmake: revert `CURL_LTO` behavior for multi-config generators
  - configure: fix --disable-rt
  - CONTRIBUTE: add project guidelines for AI use
  - cpool/cshutdown: force close connections under pressure
  - curl: fix memory leak when -h is used in config file
  - curl_get_line: handle lines ending on the buffer boundary
  - headers: enforce a max number of response header to accept
  - http: fix HTTP/2 handling of TE request header using "trailers"
  - lib: include files using known path
  - lib: unify conversions to/from hex
  - libssh: add NULL check for Curl_meta_get()
  - libssh: fix memory leak
  - mqtt: use conn/easy meta hash
  - multi: do transfer book keeping using mid
  - multi: init_do(): check result
  - netrc: avoid NULL deref on weird input
  - netrc: avoid strdup NULL
  - netrc: deal with null token better
  - openssl-quic: avoid potential `-Wnull-dereference`, add assert
  - openssl-quic: fix shutdown when stream not open
  - openssl: enable builds for *both* engines and providers
  - openssl: set the cipher string before doing private cert
  - progress: avoid integer overflow when gathering total transfer size
  - rand: update comment on Curl_rand_bytes weak random
  - rustls: make max size of cert and key reasonable
  - smb: avoid integer overflow on weird input date
  - urlapi: redirecting to "" is considered fine
  * Remove curl-8.13.0-CloseSocket.patch upstream
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1749038400">- Update to 8.14.1:
  * Security fixes:
  - [bsc#1243933, CVE-2025-5399] libcurl can possibly get
    trapped in an endless busy-loop when processing specially
    crafted packets [d1145df2]
  * Bugfixes:
  - asyn-thrdd: fix cleanup when RR fails due to OOM
  - ftp: fix teardown of DATA connection in done
  - http: fail early when rewind of input failed when following redirects
  - multi: fix add_handle resizing
  - tls BIOs: handle BIO_CTRL_EOF correctly
  - tool_getparam: make --no-anyauth not be accepted
  - wolfssl: fix sending of early data
  - ws: handle blocked sends better
  - ws: tests and fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1749643200">- Update to 8.14.1: [jsc#PED-13055, jsc#PED-13056]
  * Add _multibuild
  * Remove patches fixed in the update:
  - curl-CVE-2024-11053.patch
  - curl-CVE-2024-2004.patch
  - curl-CVE-2024-2379.patch
  - curl-CVE-2024-2398.patch
  - curl-CVE-2024-2466.patch
  - curl-CVE-2024-6197.patch
  - curl-CVE-2024-7264.patch
  - curl-CVE-2024-8096.patch
  - curl-CVE-2024-9681.patch
  - curl-CVE-2025-0167.patch
  - curl-CVE-2025-0725.patch
  - curl-aws_sigv4-url-encode-the-canonical-path.patch
  - curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1763553600">- Security fix: [bsc#1253757, CVE-2025-11563]
  * curl: wcurl path traversal with percent-encoded slashes
  * Add curl-CVE-2025-11563.patch</changelog>
</package>
<package pkgid="60dd14e16e4241578a4a683c76cc10c77f9e8d03f53a824223e475d55f2d5a9b" name="curl" arch="x86_64">
  <version epoch="0" ver="8.14.1" rel="150700.7.5.1"/>
  <changelog author="pmonreal@suse.com" date="1730289600">- Security fix: [bsc#1232528, CVE-2024-9681]
  * HSTS subdomain overwrites parent cache entry
  * Add curl-CVE-2024-9681.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730894400">- Update to 8.11.0:
  * Security fixes: [bsc#1232528, CVE-2024-9681]
  - curl: HSTS subdomain overwrites parent cache entry
  * Changes:
  - curl: --create-dirs works for --dump-header as well
  - gtls: Add P12 format support
  - ipfs: add options to disable
  - TLS: TLSv1.3 earlydata support for curl
  - WebSockets: make support official (non-experimental)
  * Bugfixes:
  - build: clarify CA embed is for curl tool, mark default, improve summary
  - build: show if CA bundle to embed was found
  - build: tidy up and improve versioned-symbols options
  - cmake/FindNGTCP2: use library path as hint for finding crypto module
  - cmake: disable default OpenSSL if BearSSL, GnuTLS or Rustls is enabled
  - cmake: rename LDAP dependency config variables to match Find modules
  - cmake: replace 'check_include_file_concat()' for LDAP and GSS detection
  - cmake: use OpenSSL for LDAP detection only if available
  - curl: add build options for safe/no CA bundle search (Windows)
  - curl: detect ECH support dynamically, not at build time
  - curl_addrinfo: support operating systems with only getaddrinfo(3)
  - ftp: fix 0-length last write on upload from stdin
  - gnutls: use session cache for QUIC
  - hsts: improve subdomain handling
  - hsts: support "implied LWS" properly around max-age
  - http2: auto reset stream on server eos
  - json.md: cli-option '--json' is an alias of '--data-binary'
  - lib: move curl_path.[ch] into vssh/
  - lib: remove function pointer typecasts for hmac/sha256/md5
  - libssh.c: handle EGAINS during proto-connect correctly
  - libssh2: use the filename buffer when getting the homedir
  - multi.c: warn/assert on stall only without timer
  - negotiate: conditional check around GSS &amp; SSL specific code
  - netrc: cache the netrc file in memory
  - ngtcp2: do not loop on recv
  - ngtcp2: set max window size to 10x of initial (128KB)
  - openssl quic: populate x509 store before handshake
  - openssl: extend the OpenSSL error messages
  - openssl: improve retries on shutdown
  - quic: use send/recvmmsg when available
  - schannel: fix TLS cert verification by IP SAN
  - schannel: ignore error on recv beyond close notify
  - select: use poll() if existing, avoid poll() with no sockets
  - sendf: add condition to max-filesize check
  - server/mqttd: fix two memory leaks
  - setopt: return error for bad input to CURLOPT_RTSP_REQUEST
  - setopt_cptr: make overflow check only done when needed
  - tls: avoid abusing CURLE_SSL_ENGINE_INITFAILED
  - tool: support --show-headers AND --remote-header-name
  - tool_operate: make --skip-existing work for --parallel
  - url: connection reuse on h3 connections
  - url: use same credentials on redirect
  - urlapi: normalize the IPv6 address
  - version: say quictls in MSH3 builds
  - vquic: fix compiler warning with gcc + MUSL
  - vquic: recv_mmsg, use fewer, but larger buffers
  - vtls: convert Curl_pin_peer_pubkey to use dynbuf
  - vtls: convert pubkey_pem_to_der to use dynbuf
  * Rebase curl-secure-getenv.patch</changelog>
  <changelog author="bjorn.bidar@thaodan.de" date="1731499200">- Add patch to fix libcurl when netrc parsing is enabled.
  curl_easy_duphandle did not init netrc which broke applications such
  as for example git. gh#curl/curl#15496
  * 0001-duphandle-also-init-netrc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733227200">- Security fix: [bsc#1234068, CVE-2024-11053]
  * curl could leak the password used for the first host to the
    followed-to host under certain circumstances.
  * netrc: address several netrc parser flaws
  * Add curl-CVE-2024-11053.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733918400">- Update to 8.11.1:
  * Security fixes:
  - netrc and redirect credential leak [bsc#1234068, CVE-2024-11053]
  * Bugfixes:
  - build: fix ECH to always enable HTTPS RR
  - cookie: treat cookie name case sensitively
  - curl-rustls.m4: keep existing 'CPPFLAGS'/'LDFLAGS' when detected
  - curl: use realtime in trace timestamps
  - digest: produce a shorter cnonce in Digest headers
  - docs: document default 'User-Agent'
  - docs: suggest --ssl-reqd instead of --ftp-ssl
  - duphandle: also init netrc
  - hostip: don't use the resolver for FQDN localhost
  - http_negotiate: allow for a one byte larger channel binding buffer
  - krb5: fix socket/sockindex confusion, MSVC compiler warnings
  - libssh: use libssh sftp_aio to upload file
  - libssh: when using IPv6 numerical address, add brackets
  - mime: fix reader stall on small read lengths
  - mk-ca-bundle: remove CKA_NSS_SERVER_DISTRUST_AFTER conditions
  - mprintf: fix the integer overflow checks
  - multi: fix callback for 'CURLMOPT_TIMERFUNCTION' not being called again when...
  - netrc: address several netrc parser flaws
  - netrc: support large file, longer lines, longer tokens
  - nghttp2: use custom memory functions
  - OpenSSL: improvde error message on expired certificate
  - openssl: remove three "Useless Assignments"
  - openssl: stop using SSL_CTX_ function prefix for our functions
  - pytest: add test for use of CURLMOPT_MAX_HOST_CONNECTIONS
  - rtsp: check EOS in the RTSP receive and return an error code
  - schannel: remove TLS 1.3 ciphersuite-list support
  - setopt: fix CURLOPT_HTTP_CONTENT_DECODING
  - setopt: fix missing options for builds without HTTP &amp; MQTT
  - socket: handle binding to "host!&lt;ip&gt;"
  - socketpair: fix enabling 'USE_EVENTFD'
  - strtok: use namespaced 'strtok_r' macro instead of redefining it
  * Remove 0001-duphandle-also-init-netrc.patch upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1736251200">- smtp: for starttls, do full upgrade [bsc#1235151]
  * Make sure the TLS handshake after a successful STARTTLS command
    is fully done before further sending/receiving on the connection.
  * Add curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238400">- Security fix: [bsc#1236588, CVE-2025-0167]
  * netrc: 'default' with no credentials is not a match
  * Add curl-CVE-2025-0167.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238401">- Security fix: [bsc#1236590, CVE-2025-0725]
  * content_encoding: drop support for zlib before 1.2.0.4
  * content_encoding: put the decomp buffers into the writer structs
  * Add curl-CVE-2025-0725.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738843200">- Update to 8.12.0:
  * Security fixes:
  - [bsc#1234068, CVE-2024-11053] curl could leak the password used
    for the first host to the followed-to host under certain circumstances.
  - [bsc#1232528, CVE-2024-9681] HSTS subdomain overwrites parent cache entry
  - [bsc#1236589, CVE-2025-0665] eventfd double close
  * Changes:
  - curl: add byte range support to --variable reading from file
  - curl: make --etag-save acknowledge --create-dirs
  - getinfo: fix CURLINFO_QUEUE_TIME_T and add 'time_queue' var
  - getinfo: provide info which auth was used for HTTP and proxy
  - hyper: drop support
  - openssl: add support to use keys and certificates from PKCS#11 provider
  - QUIC: 0RTT for gnutls via CURLSSLOPT_EARLYDATA
  - vtls: feature ssls-export for SSL session im-/export
  * Bugfixes:
  - altsvc: avoid integer overflow in expire calculation
  - asyn-ares: acknowledge CURLOPT_DNS_SERVERS set to NULL
  - asyn-ares: fix memory leak
  - asyn-ares: initial HTTPS resolve support
  - asyn-thread: use c-ares to resolve HTTPS RR
  - async-thread: avoid closing eventfd twice
  - cd2nroff: do not insist on quoted &lt;&gt; within backticks
  - cd2nroff: support "none" as a TLS backend
  - conncache: count shutdowns against host and max limits
  - content_encoding: drop support for zlib before 1.2.0.4
  - content_encoding: namespace GZIP flag constants
  - content_encoding: put the decomp buffers into the writer structs
  - content_encoding: support use of custom libzstd memory functions
  - cookie: cap expire times to 400 days
  - cookie: parse only the exact expire date
  - curl: return error if etag options are used with multiple URLs
  - curl_multi_fdset: include the shutdown connections in the set
  - curl_sha512_256: rename symbols to the curl namespace
  - curl_url_set.md: adjust the added-in to 7.62.0
  - doh: send HTTPS RR requests for all HTTP(S) transfers
  - easy: allow connect-only handle reuse with easy_perform
  - easy: make curl_easy_perform() return error if connection still there
  - easy_lock: use Sleep(1) for thread yield on old Windows
  - ECH: update APIs to those agreed with OpenSSL maintainers
  - GnuTLS: fix 'time_appconnect' for early data
  - HTTP/2: strip TE request header
  - http2: fix data_pending check
  - http2: fix value stored to 'result' is never read
  - http: ignore invalid Retry-After times
  - http_aws_sigv4: Fix invalid compare function handling zero-length pairs
  - https-connect: start next immediately on failure
  - lib: redirect handling by protocol handler
  - multi: fix curl_multi_waitfds reporting of fd_count
  - netrc: 'default' with no credentials is not a match
  - netrc: fix password-only entries
  - netrc: restore _netrc fallback logic
  - ngtcp2: fix memory leak on connect failure
  - openssl: define `HAVE_KEYLOG_CALLBACK` before use
  - openssl: fix ECH logic
  - osslq: use SSL_poll to determine writeability of QUIC streams
  - sectransp: free certificate on error
  - select: avoid a NULL deref in cwfds_add_sock
  - src: omit hugehelp and ca-embed from libcurltool
  - ssl session cache: change cache dimensions
  - system.h: add 64-bit curl_off_t definitions for NonStop
  - telnet: handle single-byte input option
  - TLS: check connection for SSL use, not handler
  - tool_formparse.c: make curlx_uztoso a static in here
  - tool_formparse: accept digits in --form type= strings
  - tool_getparam: ECH param parsing refix
  - tool_getparam: fail --hostpubsha256 if libssh2 is not used
  - tool_getparam: fix "Ignored Return Value"
  - tool_getparam: fix memory leak on error in parse_ech
  - tool_getparam: fix the ECH parser
  - tool_operate: make --etag-compare always accept a non-existing file
  - transfer: fix CURLOPT_CURLU override logic
  - urlapi: fix redirect to a new fragment or query (only)
  - vquic: make vquic_send_packets not return without setting psent
  - vtls: fix default SSL backend as a fallback
  - vtls: only remember the expiry timestamp in session cache
  - websocket: fix message send corruption
  - x509asn1: add parse recursion limit
  * Rebase pathes:
  - libcurl-ocloexec.patch
  - dont-mess-with-rpmoptflags.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739448000">- Update to 8.12.1:
  * Bugfixes:
  - asyn-thread: fix build with 'CURL_DISABLE_SOCKETPAIR'
  - asyn-thread: fix HTTPS RR crash
  - asyn-thread: fix the returned bitmask from Curl_resolver_getsock
  - asyn-thread: survive a c-ares channel set to NULL
  - cmake: always reference OpenSSL and ZLIB via imported targets
  - cmake: respect 'GNUTLS_CFLAGS' when detected via 'pkg-config'
  - cmake: respect 'GNUTLS_LIBRARY_DIRS' in 'libcurl.pc' and 'curl-config'
  - content_encoding: #error on too old zlib
  - imap: TLS upgrade fix
  - ldap: drop support for legacy Novell LDAP SDK
  - libssh2: comparison is always true because rc &lt;= -1
  - libssh2: raise lowest supported version to 1.2.8
  - libssh: drop support for libssh older than 0.9.0
  - openssl-quic: ignore ciphers for h3
  - pop3: TLS upgrade fix
  - runtests: fix the disabling of the memory tracking
  - runtests: quote commands to support paths with spaces
  - scache: add magic checks
  - smb: silence '-Warray-bounds' with gcc 13+
  - smtp: TLS upgrade fix
  - tool_cfgable: sort struct fields by size, use bitfields for booleans
  - tool_getparam: add "TLS required" flag for each such option
  - vtls: fix multissl-init
  - wakeup_write: make sure the eventfd write sends eight bytes</changelog>
  <changelog author="pmonreal@suse.com" date="1744200000">- Update to 8.13.0:
  * Changes:
  - curl: add write-out variable 'tls_earlydata'
  - curl: make --url support a file with URLs
  - gnutls: set priority via --ciphers
  - IMAP: add CURLOPT_UPLOAD_FLAGS and --upload-flags
  - lib: add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY
  - OpenSSL/quictls: add support for TLSv1.3 early data
  - rustls: add support for CERTINFO
  - rustls: add support for SSLKEYLOGFILE
  - rustls: support ECH w/ DoH lookup for config
  - rustls: support native platform verifier
  - var: add a '64dec' function that can base64 decode a string
  * Bugfixes:
  - conn: fix connection reuse when SSL is optional
  - hash: use single linked list for entries
  - http2: detect session being closed on ingress handling
  - http2: reset stream on response header error
  - http: remove a HTTP method size restriction
  - http: version negotiation
  - httpsrr: fix port detection
  - libssh: fix freeing of resources in disconnect
  - libssh: fix scp large file upload for 32-bit size_t systems
  - openssl-quic: do not iterate over multi handles
  - openssl: check return value of X509_get0_pubkey
  - openssl: drop support for old OpenSSL/LibreSSL versions
  - openssl: fix crash on missing cert password
  - openssl: fix pkcs11 URI checking for key files.
  - openssl: remove bad `goto`s into other scope
  - setopt: illegal CURLOPT_SOCKS5_AUTH should return error
  - setopt: setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine
  - sshserver.pl: adjust `AuthorizedKeysFile2` cutoff version
  - sshserver: fix excluding obsolete client config lines
  - SSLCERTS: list support for SSL_CERT_FILE and SSL_CERT_DIR
  - tftpd: prefix TFTP protocol error `E*` constants with `TFTP_`
  - tool_operate: fail SSH transfers without server auth
  - url: call protocol handler's disconnect in Curl_conn_free
  - urlapi: remove percent encoded dot sequences from the URL path
  - urldata: remove 'hostname' from struct Curl_async
  * Rebase patches:
  - libcurl-ocloexec.patch
  - curl-secure-getenv.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1744372800">- fix Leap build add curl-8.13.0-CloseSocket.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1748433600">- Update to 8.14.0:
  * Security fixes:
  - [CVE-2025-4947, bsc#1243397] QUIC certificate check skip with wolfSSL
  - [CVE-2025-5025, bsc#1243706] No QUIC certificate pinning with wolfSSL
  * Changes:
  - mqtt: send ping at upkeep interval
  - schannel: handle pkcs12 client certificates containing CA certificates
  - TLS: add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: import v2025.04.20 script + docs
  - websocket: add option to disable auto-pong reply
  * Bugfixes:
  - asny-thrdd: fix detach from running thread
  - async-threaded resolver: use ref counter
  - async: DoH improvements
  - build: enable gcc-12/13+, clang-10+ picky warnings
  - build: enable gcc-15 picky warnings
  - certs: drop unused `default_bits` from `.prm` files
  - cf-https-connect: use the passed in dns struct pointer
  - cf-socket: fix FTP accept connect
  - cfilters: remove assert
  - cmake: fix nghttp3 static linking with `USE_OPENSSL_QUIC=ON`
  - cmake: prefer `COMPILE_OPTIONS` over `CMAKE_C_FLAGS` for custom C options
  - cmake: revert `CURL_LTO` behavior for multi-config generators
  - configure: fix --disable-rt
  - CONTRIBUTE: add project guidelines for AI use
  - cpool/cshutdown: force close connections under pressure
  - curl: fix memory leak when -h is used in config file
  - curl_get_line: handle lines ending on the buffer boundary
  - headers: enforce a max number of response header to accept
  - http: fix HTTP/2 handling of TE request header using "trailers"
  - lib: include files using known path
  - lib: unify conversions to/from hex
  - libssh: add NULL check for Curl_meta_get()
  - libssh: fix memory leak
  - mqtt: use conn/easy meta hash
  - multi: do transfer book keeping using mid
  - multi: init_do(): check result
  - netrc: avoid NULL deref on weird input
  - netrc: avoid strdup NULL
  - netrc: deal with null token better
  - openssl-quic: avoid potential `-Wnull-dereference`, add assert
  - openssl-quic: fix shutdown when stream not open
  - openssl: enable builds for *both* engines and providers
  - openssl: set the cipher string before doing private cert
  - progress: avoid integer overflow when gathering total transfer size
  - rand: update comment on Curl_rand_bytes weak random
  - rustls: make max size of cert and key reasonable
  - smb: avoid integer overflow on weird input date
  - urlapi: redirecting to "" is considered fine
  * Remove curl-8.13.0-CloseSocket.patch upstream
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1749038400">- Update to 8.14.1:
  * Security fixes:
  - [bsc#1243933, CVE-2025-5399] libcurl can possibly get
    trapped in an endless busy-loop when processing specially
    crafted packets [d1145df2]
  * Bugfixes:
  - asyn-thrdd: fix cleanup when RR fails due to OOM
  - ftp: fix teardown of DATA connection in done
  - http: fail early when rewind of input failed when following redirects
  - multi: fix add_handle resizing
  - tls BIOs: handle BIO_CTRL_EOF correctly
  - tool_getparam: make --no-anyauth not be accepted
  - wolfssl: fix sending of early data
  - ws: handle blocked sends better
  - ws: tests and fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1749643200">- Update to 8.14.1: [jsc#PED-13055, jsc#PED-13056]
  * Add _multibuild
  * Remove patches fixed in the update:
  - curl-CVE-2024-11053.patch
  - curl-CVE-2024-2004.patch
  - curl-CVE-2024-2379.patch
  - curl-CVE-2024-2398.patch
  - curl-CVE-2024-2466.patch
  - curl-CVE-2024-6197.patch
  - curl-CVE-2024-7264.patch
  - curl-CVE-2024-8096.patch
  - curl-CVE-2024-9681.patch
  - curl-CVE-2025-0167.patch
  - curl-CVE-2025-0725.patch
  - curl-aws_sigv4-url-encode-the-canonical-path.patch
  - curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1763553600">- Security fix: [bsc#1253757, CVE-2025-11563]
  * curl: wcurl path traversal with percent-encoded slashes
  * Add curl-CVE-2025-11563.patch</changelog>
</package>
<package pkgid="8229afdbb93299e6968852c7fdaf013c0e11fe288af64b8d3ccba6cd70a38f83" name="curl" arch="src">
  <version epoch="0" ver="8.14.1" rel="150700.7.8.1"/>
  <changelog author="pmonreal@suse.com" date="1730894400">- Update to 8.11.0:
  * Security fixes: [bsc#1232528, CVE-2024-9681]
  - curl: HSTS subdomain overwrites parent cache entry
  * Changes:
  - curl: --create-dirs works for --dump-header as well
  - gtls: Add P12 format support
  - ipfs: add options to disable
  - TLS: TLSv1.3 earlydata support for curl
  - WebSockets: make support official (non-experimental)
  * Bugfixes:
  - build: clarify CA embed is for curl tool, mark default, improve summary
  - build: show if CA bundle to embed was found
  - build: tidy up and improve versioned-symbols options
  - cmake/FindNGTCP2: use library path as hint for finding crypto module
  - cmake: disable default OpenSSL if BearSSL, GnuTLS or Rustls is enabled
  - cmake: rename LDAP dependency config variables to match Find modules
  - cmake: replace 'check_include_file_concat()' for LDAP and GSS detection
  - cmake: use OpenSSL for LDAP detection only if available
  - curl: add build options for safe/no CA bundle search (Windows)
  - curl: detect ECH support dynamically, not at build time
  - curl_addrinfo: support operating systems with only getaddrinfo(3)
  - ftp: fix 0-length last write on upload from stdin
  - gnutls: use session cache for QUIC
  - hsts: improve subdomain handling
  - hsts: support "implied LWS" properly around max-age
  - http2: auto reset stream on server eos
  - json.md: cli-option '--json' is an alias of '--data-binary'
  - lib: move curl_path.[ch] into vssh/
  - lib: remove function pointer typecasts for hmac/sha256/md5
  - libssh.c: handle EGAINS during proto-connect correctly
  - libssh2: use the filename buffer when getting the homedir
  - multi.c: warn/assert on stall only without timer
  - negotiate: conditional check around GSS &amp; SSL specific code
  - netrc: cache the netrc file in memory
  - ngtcp2: do not loop on recv
  - ngtcp2: set max window size to 10x of initial (128KB)
  - openssl quic: populate x509 store before handshake
  - openssl: extend the OpenSSL error messages
  - openssl: improve retries on shutdown
  - quic: use send/recvmmsg when available
  - schannel: fix TLS cert verification by IP SAN
  - schannel: ignore error on recv beyond close notify
  - select: use poll() if existing, avoid poll() with no sockets
  - sendf: add condition to max-filesize check
  - server/mqttd: fix two memory leaks
  - setopt: return error for bad input to CURLOPT_RTSP_REQUEST
  - setopt_cptr: make overflow check only done when needed
  - tls: avoid abusing CURLE_SSL_ENGINE_INITFAILED
  - tool: support --show-headers AND --remote-header-name
  - tool_operate: make --skip-existing work for --parallel
  - url: connection reuse on h3 connections
  - url: use same credentials on redirect
  - urlapi: normalize the IPv6 address
  - version: say quictls in MSH3 builds
  - vquic: fix compiler warning with gcc + MUSL
  - vquic: recv_mmsg, use fewer, but larger buffers
  - vtls: convert Curl_pin_peer_pubkey to use dynbuf
  - vtls: convert pubkey_pem_to_der to use dynbuf
  * Rebase curl-secure-getenv.patch</changelog>
  <changelog author="bjorn.bidar@thaodan.de" date="1731499200">- Add patch to fix libcurl when netrc parsing is enabled.
  curl_easy_duphandle did not init netrc which broke applications such
  as for example git. gh#curl/curl#15496
  * 0001-duphandle-also-init-netrc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733227200">- Security fix: [bsc#1234068, CVE-2024-11053]
  * curl could leak the password used for the first host to the
    followed-to host under certain circumstances.
  * netrc: address several netrc parser flaws
  * Add curl-CVE-2024-11053.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733918400">- Update to 8.11.1:
  * Security fixes:
  - netrc and redirect credential leak [bsc#1234068, CVE-2024-11053]
  * Bugfixes:
  - build: fix ECH to always enable HTTPS RR
  - cookie: treat cookie name case sensitively
  - curl-rustls.m4: keep existing 'CPPFLAGS'/'LDFLAGS' when detected
  - curl: use realtime in trace timestamps
  - digest: produce a shorter cnonce in Digest headers
  - docs: document default 'User-Agent'
  - docs: suggest --ssl-reqd instead of --ftp-ssl
  - duphandle: also init netrc
  - hostip: don't use the resolver for FQDN localhost
  - http_negotiate: allow for a one byte larger channel binding buffer
  - krb5: fix socket/sockindex confusion, MSVC compiler warnings
  - libssh: use libssh sftp_aio to upload file
  - libssh: when using IPv6 numerical address, add brackets
  - mime: fix reader stall on small read lengths
  - mk-ca-bundle: remove CKA_NSS_SERVER_DISTRUST_AFTER conditions
  - mprintf: fix the integer overflow checks
  - multi: fix callback for 'CURLMOPT_TIMERFUNCTION' not being called again when...
  - netrc: address several netrc parser flaws
  - netrc: support large file, longer lines, longer tokens
  - nghttp2: use custom memory functions
  - OpenSSL: improvde error message on expired certificate
  - openssl: remove three "Useless Assignments"
  - openssl: stop using SSL_CTX_ function prefix for our functions
  - pytest: add test for use of CURLMOPT_MAX_HOST_CONNECTIONS
  - rtsp: check EOS in the RTSP receive and return an error code
  - schannel: remove TLS 1.3 ciphersuite-list support
  - setopt: fix CURLOPT_HTTP_CONTENT_DECODING
  - setopt: fix missing options for builds without HTTP &amp; MQTT
  - socket: handle binding to "host!&lt;ip&gt;"
  - socketpair: fix enabling 'USE_EVENTFD'
  - strtok: use namespaced 'strtok_r' macro instead of redefining it
  * Remove 0001-duphandle-also-init-netrc.patch upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1736251200">- smtp: for starttls, do full upgrade [bsc#1235151]
  * Make sure the TLS handshake after a successful STARTTLS command
    is fully done before further sending/receiving on the connection.
  * Add curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238400">- Security fix: [bsc#1236588, CVE-2025-0167]
  * netrc: 'default' with no credentials is not a match
  * Add curl-CVE-2025-0167.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238401">- Security fix: [bsc#1236590, CVE-2025-0725]
  * content_encoding: drop support for zlib before 1.2.0.4
  * content_encoding: put the decomp buffers into the writer structs
  * Add curl-CVE-2025-0725.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738843200">- Update to 8.12.0:
  * Security fixes:
  - [bsc#1234068, CVE-2024-11053] curl could leak the password used
    for the first host to the followed-to host under certain circumstances.
  - [bsc#1232528, CVE-2024-9681] HSTS subdomain overwrites parent cache entry
  - [bsc#1236589, CVE-2025-0665] eventfd double close
  * Changes:
  - curl: add byte range support to --variable reading from file
  - curl: make --etag-save acknowledge --create-dirs
  - getinfo: fix CURLINFO_QUEUE_TIME_T and add 'time_queue' var
  - getinfo: provide info which auth was used for HTTP and proxy
  - hyper: drop support
  - openssl: add support to use keys and certificates from PKCS#11 provider
  - QUIC: 0RTT for gnutls via CURLSSLOPT_EARLYDATA
  - vtls: feature ssls-export for SSL session im-/export
  * Bugfixes:
  - altsvc: avoid integer overflow in expire calculation
  - asyn-ares: acknowledge CURLOPT_DNS_SERVERS set to NULL
  - asyn-ares: fix memory leak
  - asyn-ares: initial HTTPS resolve support
  - asyn-thread: use c-ares to resolve HTTPS RR
  - async-thread: avoid closing eventfd twice
  - cd2nroff: do not insist on quoted &lt;&gt; within backticks
  - cd2nroff: support "none" as a TLS backend
  - conncache: count shutdowns against host and max limits
  - content_encoding: drop support for zlib before 1.2.0.4
  - content_encoding: namespace GZIP flag constants
  - content_encoding: put the decomp buffers into the writer structs
  - content_encoding: support use of custom libzstd memory functions
  - cookie: cap expire times to 400 days
  - cookie: parse only the exact expire date
  - curl: return error if etag options are used with multiple URLs
  - curl_multi_fdset: include the shutdown connections in the set
  - curl_sha512_256: rename symbols to the curl namespace
  - curl_url_set.md: adjust the added-in to 7.62.0
  - doh: send HTTPS RR requests for all HTTP(S) transfers
  - easy: allow connect-only handle reuse with easy_perform
  - easy: make curl_easy_perform() return error if connection still there
  - easy_lock: use Sleep(1) for thread yield on old Windows
  - ECH: update APIs to those agreed with OpenSSL maintainers
  - GnuTLS: fix 'time_appconnect' for early data
  - HTTP/2: strip TE request header
  - http2: fix data_pending check
  - http2: fix value stored to 'result' is never read
  - http: ignore invalid Retry-After times
  - http_aws_sigv4: Fix invalid compare function handling zero-length pairs
  - https-connect: start next immediately on failure
  - lib: redirect handling by protocol handler
  - multi: fix curl_multi_waitfds reporting of fd_count
  - netrc: 'default' with no credentials is not a match
  - netrc: fix password-only entries
  - netrc: restore _netrc fallback logic
  - ngtcp2: fix memory leak on connect failure
  - openssl: define `HAVE_KEYLOG_CALLBACK` before use
  - openssl: fix ECH logic
  - osslq: use SSL_poll to determine writeability of QUIC streams
  - sectransp: free certificate on error
  - select: avoid a NULL deref in cwfds_add_sock
  - src: omit hugehelp and ca-embed from libcurltool
  - ssl session cache: change cache dimensions
  - system.h: add 64-bit curl_off_t definitions for NonStop
  - telnet: handle single-byte input option
  - TLS: check connection for SSL use, not handler
  - tool_formparse.c: make curlx_uztoso a static in here
  - tool_formparse: accept digits in --form type= strings
  - tool_getparam: ECH param parsing refix
  - tool_getparam: fail --hostpubsha256 if libssh2 is not used
  - tool_getparam: fix "Ignored Return Value"
  - tool_getparam: fix memory leak on error in parse_ech
  - tool_getparam: fix the ECH parser
  - tool_operate: make --etag-compare always accept a non-existing file
  - transfer: fix CURLOPT_CURLU override logic
  - urlapi: fix redirect to a new fragment or query (only)
  - vquic: make vquic_send_packets not return without setting psent
  - vtls: fix default SSL backend as a fallback
  - vtls: only remember the expiry timestamp in session cache
  - websocket: fix message send corruption
  - x509asn1: add parse recursion limit
  * Rebase pathes:
  - libcurl-ocloexec.patch
  - dont-mess-with-rpmoptflags.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739448000">- Update to 8.12.1:
  * Bugfixes:
  - asyn-thread: fix build with 'CURL_DISABLE_SOCKETPAIR'
  - asyn-thread: fix HTTPS RR crash
  - asyn-thread: fix the returned bitmask from Curl_resolver_getsock
  - asyn-thread: survive a c-ares channel set to NULL
  - cmake: always reference OpenSSL and ZLIB via imported targets
  - cmake: respect 'GNUTLS_CFLAGS' when detected via 'pkg-config'
  - cmake: respect 'GNUTLS_LIBRARY_DIRS' in 'libcurl.pc' and 'curl-config'
  - content_encoding: #error on too old zlib
  - imap: TLS upgrade fix
  - ldap: drop support for legacy Novell LDAP SDK
  - libssh2: comparison is always true because rc &lt;= -1
  - libssh2: raise lowest supported version to 1.2.8
  - libssh: drop support for libssh older than 0.9.0
  - openssl-quic: ignore ciphers for h3
  - pop3: TLS upgrade fix
  - runtests: fix the disabling of the memory tracking
  - runtests: quote commands to support paths with spaces
  - scache: add magic checks
  - smb: silence '-Warray-bounds' with gcc 13+
  - smtp: TLS upgrade fix
  - tool_cfgable: sort struct fields by size, use bitfields for booleans
  - tool_getparam: add "TLS required" flag for each such option
  - vtls: fix multissl-init
  - wakeup_write: make sure the eventfd write sends eight bytes</changelog>
  <changelog author="pmonreal@suse.com" date="1744200000">- Update to 8.13.0:
  * Changes:
  - curl: add write-out variable 'tls_earlydata'
  - curl: make --url support a file with URLs
  - gnutls: set priority via --ciphers
  - IMAP: add CURLOPT_UPLOAD_FLAGS and --upload-flags
  - lib: add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY
  - OpenSSL/quictls: add support for TLSv1.3 early data
  - rustls: add support for CERTINFO
  - rustls: add support for SSLKEYLOGFILE
  - rustls: support ECH w/ DoH lookup for config
  - rustls: support native platform verifier
  - var: add a '64dec' function that can base64 decode a string
  * Bugfixes:
  - conn: fix connection reuse when SSL is optional
  - hash: use single linked list for entries
  - http2: detect session being closed on ingress handling
  - http2: reset stream on response header error
  - http: remove a HTTP method size restriction
  - http: version negotiation
  - httpsrr: fix port detection
  - libssh: fix freeing of resources in disconnect
  - libssh: fix scp large file upload for 32-bit size_t systems
  - openssl-quic: do not iterate over multi handles
  - openssl: check return value of X509_get0_pubkey
  - openssl: drop support for old OpenSSL/LibreSSL versions
  - openssl: fix crash on missing cert password
  - openssl: fix pkcs11 URI checking for key files.
  - openssl: remove bad `goto`s into other scope
  - setopt: illegal CURLOPT_SOCKS5_AUTH should return error
  - setopt: setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine
  - sshserver.pl: adjust `AuthorizedKeysFile2` cutoff version
  - sshserver: fix excluding obsolete client config lines
  - SSLCERTS: list support for SSL_CERT_FILE and SSL_CERT_DIR
  - tftpd: prefix TFTP protocol error `E*` constants with `TFTP_`
  - tool_operate: fail SSH transfers without server auth
  - url: call protocol handler's disconnect in Curl_conn_free
  - urlapi: remove percent encoded dot sequences from the URL path
  - urldata: remove 'hostname' from struct Curl_async
  * Rebase patches:
  - libcurl-ocloexec.patch
  - curl-secure-getenv.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1744372800">- fix Leap build add curl-8.13.0-CloseSocket.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1748433600">- Update to 8.14.0:
  * Security fixes:
  - [CVE-2025-4947, bsc#1243397] QUIC certificate check skip with wolfSSL
  - [CVE-2025-5025, bsc#1243706] No QUIC certificate pinning with wolfSSL
  * Changes:
  - mqtt: send ping at upkeep interval
  - schannel: handle pkcs12 client certificates containing CA certificates
  - TLS: add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: import v2025.04.20 script + docs
  - websocket: add option to disable auto-pong reply
  * Bugfixes:
  - asny-thrdd: fix detach from running thread
  - async-threaded resolver: use ref counter
  - async: DoH improvements
  - build: enable gcc-12/13+, clang-10+ picky warnings
  - build: enable gcc-15 picky warnings
  - certs: drop unused `default_bits` from `.prm` files
  - cf-https-connect: use the passed in dns struct pointer
  - cf-socket: fix FTP accept connect
  - cfilters: remove assert
  - cmake: fix nghttp3 static linking with `USE_OPENSSL_QUIC=ON`
  - cmake: prefer `COMPILE_OPTIONS` over `CMAKE_C_FLAGS` for custom C options
  - cmake: revert `CURL_LTO` behavior for multi-config generators
  - configure: fix --disable-rt
  - CONTRIBUTE: add project guidelines for AI use
  - cpool/cshutdown: force close connections under pressure
  - curl: fix memory leak when -h is used in config file
  - curl_get_line: handle lines ending on the buffer boundary
  - headers: enforce a max number of response header to accept
  - http: fix HTTP/2 handling of TE request header using "trailers"
  - lib: include files using known path
  - lib: unify conversions to/from hex
  - libssh: add NULL check for Curl_meta_get()
  - libssh: fix memory leak
  - mqtt: use conn/easy meta hash
  - multi: do transfer book keeping using mid
  - multi: init_do(): check result
  - netrc: avoid NULL deref on weird input
  - netrc: avoid strdup NULL
  - netrc: deal with null token better
  - openssl-quic: avoid potential `-Wnull-dereference`, add assert
  - openssl-quic: fix shutdown when stream not open
  - openssl: enable builds for *both* engines and providers
  - openssl: set the cipher string before doing private cert
  - progress: avoid integer overflow when gathering total transfer size
  - rand: update comment on Curl_rand_bytes weak random
  - rustls: make max size of cert and key reasonable
  - smb: avoid integer overflow on weird input date
  - urlapi: redirecting to "" is considered fine
  * Remove curl-8.13.0-CloseSocket.patch upstream
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1749038400">- Update to 8.14.1:
  * Security fixes:
  - [bsc#1243933, CVE-2025-5399] libcurl can possibly get
    trapped in an endless busy-loop when processing specially
    crafted packets [d1145df2]
  * Bugfixes:
  - asyn-thrdd: fix cleanup when RR fails due to OOM
  - ftp: fix teardown of DATA connection in done
  - http: fail early when rewind of input failed when following redirects
  - multi: fix add_handle resizing
  - tls BIOs: handle BIO_CTRL_EOF correctly
  - tool_getparam: make --no-anyauth not be accepted
  - wolfssl: fix sending of early data
  - ws: handle blocked sends better
  - ws: tests and fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1749643200">- Update to 8.14.1: [jsc#PED-13055, jsc#PED-13056]
  * Add _multibuild
  * Remove patches fixed in the update:
  - curl-CVE-2024-11053.patch
  - curl-CVE-2024-2004.patch
  - curl-CVE-2024-2379.patch
  - curl-CVE-2024-2398.patch
  - curl-CVE-2024-2466.patch
  - curl-CVE-2024-6197.patch
  - curl-CVE-2024-7264.patch
  - curl-CVE-2024-8096.patch
  - curl-CVE-2024-9681.patch
  - curl-CVE-2025-0167.patch
  - curl-CVE-2025-0725.patch
  - curl-aws_sigv4-url-encode-the-canonical-path.patch
  - curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1763553600">- Security fix: [bsc#1253757, CVE-2025-11563]
  * curl: wcurl path traversal with percent-encoded slashes
  * Add curl-CVE-2025-11563.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767355200">- Security fixes:
  * [bsc#1255731, CVE-2025-14524] if redirected, require permission to use bearer
  * [bsc#1255734, CVE-2025-15224] require private key or user-agent for public key auth
  * [bsc#1255732, CVE-2025-14819] toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache
  * [bsc#1255733, CVE-2025-15079] set both knownhosts options to the same file
  * Add patches:
  - curl-CVE-2025-14524.patch
  - curl-CVE-2025-15224.patch
  - curl-CVE-2025-14819.patch
  - curl-CVE-2025-15079.patch</changelog>
</package>
<package pkgid="5a351a1ba084febd3f4fbdea11a02645b727a956fb471e377663eec83bc77860" name="curl" arch="x86_64">
  <version epoch="0" ver="8.14.1" rel="150700.7.8.1"/>
  <changelog author="pmonreal@suse.com" date="1730894400">- Update to 8.11.0:
  * Security fixes: [bsc#1232528, CVE-2024-9681]
  - curl: HSTS subdomain overwrites parent cache entry
  * Changes:
  - curl: --create-dirs works for --dump-header as well
  - gtls: Add P12 format support
  - ipfs: add options to disable
  - TLS: TLSv1.3 earlydata support for curl
  - WebSockets: make support official (non-experimental)
  * Bugfixes:
  - build: clarify CA embed is for curl tool, mark default, improve summary
  - build: show if CA bundle to embed was found
  - build: tidy up and improve versioned-symbols options
  - cmake/FindNGTCP2: use library path as hint for finding crypto module
  - cmake: disable default OpenSSL if BearSSL, GnuTLS or Rustls is enabled
  - cmake: rename LDAP dependency config variables to match Find modules
  - cmake: replace 'check_include_file_concat()' for LDAP and GSS detection
  - cmake: use OpenSSL for LDAP detection only if available
  - curl: add build options for safe/no CA bundle search (Windows)
  - curl: detect ECH support dynamically, not at build time
  - curl_addrinfo: support operating systems with only getaddrinfo(3)
  - ftp: fix 0-length last write on upload from stdin
  - gnutls: use session cache for QUIC
  - hsts: improve subdomain handling
  - hsts: support "implied LWS" properly around max-age
  - http2: auto reset stream on server eos
  - json.md: cli-option '--json' is an alias of '--data-binary'
  - lib: move curl_path.[ch] into vssh/
  - lib: remove function pointer typecasts for hmac/sha256/md5
  - libssh.c: handle EGAINS during proto-connect correctly
  - libssh2: use the filename buffer when getting the homedir
  - multi.c: warn/assert on stall only without timer
  - negotiate: conditional check around GSS &amp; SSL specific code
  - netrc: cache the netrc file in memory
  - ngtcp2: do not loop on recv
  - ngtcp2: set max window size to 10x of initial (128KB)
  - openssl quic: populate x509 store before handshake
  - openssl: extend the OpenSSL error messages
  - openssl: improve retries on shutdown
  - quic: use send/recvmmsg when available
  - schannel: fix TLS cert verification by IP SAN
  - schannel: ignore error on recv beyond close notify
  - select: use poll() if existing, avoid poll() with no sockets
  - sendf: add condition to max-filesize check
  - server/mqttd: fix two memory leaks
  - setopt: return error for bad input to CURLOPT_RTSP_REQUEST
  - setopt_cptr: make overflow check only done when needed
  - tls: avoid abusing CURLE_SSL_ENGINE_INITFAILED
  - tool: support --show-headers AND --remote-header-name
  - tool_operate: make --skip-existing work for --parallel
  - url: connection reuse on h3 connections
  - url: use same credentials on redirect
  - urlapi: normalize the IPv6 address
  - version: say quictls in MSH3 builds
  - vquic: fix compiler warning with gcc + MUSL
  - vquic: recv_mmsg, use fewer, but larger buffers
  - vtls: convert Curl_pin_peer_pubkey to use dynbuf
  - vtls: convert pubkey_pem_to_der to use dynbuf
  * Rebase curl-secure-getenv.patch</changelog>
  <changelog author="bjorn.bidar@thaodan.de" date="1731499200">- Add patch to fix libcurl when netrc parsing is enabled.
  curl_easy_duphandle did not init netrc which broke applications such
  as for example git. gh#curl/curl#15496
  * 0001-duphandle-also-init-netrc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733227200">- Security fix: [bsc#1234068, CVE-2024-11053]
  * curl could leak the password used for the first host to the
    followed-to host under certain circumstances.
  * netrc: address several netrc parser flaws
  * Add curl-CVE-2024-11053.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733918400">- Update to 8.11.1:
  * Security fixes:
  - netrc and redirect credential leak [bsc#1234068, CVE-2024-11053]
  * Bugfixes:
  - build: fix ECH to always enable HTTPS RR
  - cookie: treat cookie name case sensitively
  - curl-rustls.m4: keep existing 'CPPFLAGS'/'LDFLAGS' when detected
  - curl: use realtime in trace timestamps
  - digest: produce a shorter cnonce in Digest headers
  - docs: document default 'User-Agent'
  - docs: suggest --ssl-reqd instead of --ftp-ssl
  - duphandle: also init netrc
  - hostip: don't use the resolver for FQDN localhost
  - http_negotiate: allow for a one byte larger channel binding buffer
  - krb5: fix socket/sockindex confusion, MSVC compiler warnings
  - libssh: use libssh sftp_aio to upload file
  - libssh: when using IPv6 numerical address, add brackets
  - mime: fix reader stall on small read lengths
  - mk-ca-bundle: remove CKA_NSS_SERVER_DISTRUST_AFTER conditions
  - mprintf: fix the integer overflow checks
  - multi: fix callback for 'CURLMOPT_TIMERFUNCTION' not being called again when...
  - netrc: address several netrc parser flaws
  - netrc: support large file, longer lines, longer tokens
  - nghttp2: use custom memory functions
  - OpenSSL: improvde error message on expired certificate
  - openssl: remove three "Useless Assignments"
  - openssl: stop using SSL_CTX_ function prefix for our functions
  - pytest: add test for use of CURLMOPT_MAX_HOST_CONNECTIONS
  - rtsp: check EOS in the RTSP receive and return an error code
  - schannel: remove TLS 1.3 ciphersuite-list support
  - setopt: fix CURLOPT_HTTP_CONTENT_DECODING
  - setopt: fix missing options for builds without HTTP &amp; MQTT
  - socket: handle binding to "host!&lt;ip&gt;"
  - socketpair: fix enabling 'USE_EVENTFD'
  - strtok: use namespaced 'strtok_r' macro instead of redefining it
  * Remove 0001-duphandle-also-init-netrc.patch upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1736251200">- smtp: for starttls, do full upgrade [bsc#1235151]
  * Make sure the TLS handshake after a successful STARTTLS command
    is fully done before further sending/receiving on the connection.
  * Add curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238400">- Security fix: [bsc#1236588, CVE-2025-0167]
  * netrc: 'default' with no credentials is not a match
  * Add curl-CVE-2025-0167.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238401">- Security fix: [bsc#1236590, CVE-2025-0725]
  * content_encoding: drop support for zlib before 1.2.0.4
  * content_encoding: put the decomp buffers into the writer structs
  * Add curl-CVE-2025-0725.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738843200">- Update to 8.12.0:
  * Security fixes:
  - [bsc#1234068, CVE-2024-11053] curl could leak the password used
    for the first host to the followed-to host under certain circumstances.
  - [bsc#1232528, CVE-2024-9681] HSTS subdomain overwrites parent cache entry
  - [bsc#1236589, CVE-2025-0665] eventfd double close
  * Changes:
  - curl: add byte range support to --variable reading from file
  - curl: make --etag-save acknowledge --create-dirs
  - getinfo: fix CURLINFO_QUEUE_TIME_T and add 'time_queue' var
  - getinfo: provide info which auth was used for HTTP and proxy
  - hyper: drop support
  - openssl: add support to use keys and certificates from PKCS#11 provider
  - QUIC: 0RTT for gnutls via CURLSSLOPT_EARLYDATA
  - vtls: feature ssls-export for SSL session im-/export
  * Bugfixes:
  - altsvc: avoid integer overflow in expire calculation
  - asyn-ares: acknowledge CURLOPT_DNS_SERVERS set to NULL
  - asyn-ares: fix memory leak
  - asyn-ares: initial HTTPS resolve support
  - asyn-thread: use c-ares to resolve HTTPS RR
  - async-thread: avoid closing eventfd twice
  - cd2nroff: do not insist on quoted &lt;&gt; within backticks
  - cd2nroff: support "none" as a TLS backend
  - conncache: count shutdowns against host and max limits
  - content_encoding: drop support for zlib before 1.2.0.4
  - content_encoding: namespace GZIP flag constants
  - content_encoding: put the decomp buffers into the writer structs
  - content_encoding: support use of custom libzstd memory functions
  - cookie: cap expire times to 400 days
  - cookie: parse only the exact expire date
  - curl: return error if etag options are used with multiple URLs
  - curl_multi_fdset: include the shutdown connections in the set
  - curl_sha512_256: rename symbols to the curl namespace
  - curl_url_set.md: adjust the added-in to 7.62.0
  - doh: send HTTPS RR requests for all HTTP(S) transfers
  - easy: allow connect-only handle reuse with easy_perform
  - easy: make curl_easy_perform() return error if connection still there
  - easy_lock: use Sleep(1) for thread yield on old Windows
  - ECH: update APIs to those agreed with OpenSSL maintainers
  - GnuTLS: fix 'time_appconnect' for early data
  - HTTP/2: strip TE request header
  - http2: fix data_pending check
  - http2: fix value stored to 'result' is never read
  - http: ignore invalid Retry-After times
  - http_aws_sigv4: Fix invalid compare function handling zero-length pairs
  - https-connect: start next immediately on failure
  - lib: redirect handling by protocol handler
  - multi: fix curl_multi_waitfds reporting of fd_count
  - netrc: 'default' with no credentials is not a match
  - netrc: fix password-only entries
  - netrc: restore _netrc fallback logic
  - ngtcp2: fix memory leak on connect failure
  - openssl: define `HAVE_KEYLOG_CALLBACK` before use
  - openssl: fix ECH logic
  - osslq: use SSL_poll to determine writeability of QUIC streams
  - sectransp: free certificate on error
  - select: avoid a NULL deref in cwfds_add_sock
  - src: omit hugehelp and ca-embed from libcurltool
  - ssl session cache: change cache dimensions
  - system.h: add 64-bit curl_off_t definitions for NonStop
  - telnet: handle single-byte input option
  - TLS: check connection for SSL use, not handler
  - tool_formparse.c: make curlx_uztoso a static in here
  - tool_formparse: accept digits in --form type= strings
  - tool_getparam: ECH param parsing refix
  - tool_getparam: fail --hostpubsha256 if libssh2 is not used
  - tool_getparam: fix "Ignored Return Value"
  - tool_getparam: fix memory leak on error in parse_ech
  - tool_getparam: fix the ECH parser
  - tool_operate: make --etag-compare always accept a non-existing file
  - transfer: fix CURLOPT_CURLU override logic
  - urlapi: fix redirect to a new fragment or query (only)
  - vquic: make vquic_send_packets not return without setting psent
  - vtls: fix default SSL backend as a fallback
  - vtls: only remember the expiry timestamp in session cache
  - websocket: fix message send corruption
  - x509asn1: add parse recursion limit
  * Rebase pathes:
  - libcurl-ocloexec.patch
  - dont-mess-with-rpmoptflags.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739448000">- Update to 8.12.1:
  * Bugfixes:
  - asyn-thread: fix build with 'CURL_DISABLE_SOCKETPAIR'
  - asyn-thread: fix HTTPS RR crash
  - asyn-thread: fix the returned bitmask from Curl_resolver_getsock
  - asyn-thread: survive a c-ares channel set to NULL
  - cmake: always reference OpenSSL and ZLIB via imported targets
  - cmake: respect 'GNUTLS_CFLAGS' when detected via 'pkg-config'
  - cmake: respect 'GNUTLS_LIBRARY_DIRS' in 'libcurl.pc' and 'curl-config'
  - content_encoding: #error on too old zlib
  - imap: TLS upgrade fix
  - ldap: drop support for legacy Novell LDAP SDK
  - libssh2: comparison is always true because rc &lt;= -1
  - libssh2: raise lowest supported version to 1.2.8
  - libssh: drop support for libssh older than 0.9.0
  - openssl-quic: ignore ciphers for h3
  - pop3: TLS upgrade fix
  - runtests: fix the disabling of the memory tracking
  - runtests: quote commands to support paths with spaces
  - scache: add magic checks
  - smb: silence '-Warray-bounds' with gcc 13+
  - smtp: TLS upgrade fix
  - tool_cfgable: sort struct fields by size, use bitfields for booleans
  - tool_getparam: add "TLS required" flag for each such option
  - vtls: fix multissl-init
  - wakeup_write: make sure the eventfd write sends eight bytes</changelog>
  <changelog author="pmonreal@suse.com" date="1744200000">- Update to 8.13.0:
  * Changes:
  - curl: add write-out variable 'tls_earlydata'
  - curl: make --url support a file with URLs
  - gnutls: set priority via --ciphers
  - IMAP: add CURLOPT_UPLOAD_FLAGS and --upload-flags
  - lib: add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY
  - OpenSSL/quictls: add support for TLSv1.3 early data
  - rustls: add support for CERTINFO
  - rustls: add support for SSLKEYLOGFILE
  - rustls: support ECH w/ DoH lookup for config
  - rustls: support native platform verifier
  - var: add a '64dec' function that can base64 decode a string
  * Bugfixes:
  - conn: fix connection reuse when SSL is optional
  - hash: use single linked list for entries
  - http2: detect session being closed on ingress handling
  - http2: reset stream on response header error
  - http: remove a HTTP method size restriction
  - http: version negotiation
  - httpsrr: fix port detection
  - libssh: fix freeing of resources in disconnect
  - libssh: fix scp large file upload for 32-bit size_t systems
  - openssl-quic: do not iterate over multi handles
  - openssl: check return value of X509_get0_pubkey
  - openssl: drop support for old OpenSSL/LibreSSL versions
  - openssl: fix crash on missing cert password
  - openssl: fix pkcs11 URI checking for key files.
  - openssl: remove bad `goto`s into other scope
  - setopt: illegal CURLOPT_SOCKS5_AUTH should return error
  - setopt: setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine
  - sshserver.pl: adjust `AuthorizedKeysFile2` cutoff version
  - sshserver: fix excluding obsolete client config lines
  - SSLCERTS: list support for SSL_CERT_FILE and SSL_CERT_DIR
  - tftpd: prefix TFTP protocol error `E*` constants with `TFTP_`
  - tool_operate: fail SSH transfers without server auth
  - url: call protocol handler's disconnect in Curl_conn_free
  - urlapi: remove percent encoded dot sequences from the URL path
  - urldata: remove 'hostname' from struct Curl_async
  * Rebase patches:
  - libcurl-ocloexec.patch
  - curl-secure-getenv.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1744372800">- fix Leap build add curl-8.13.0-CloseSocket.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1748433600">- Update to 8.14.0:
  * Security fixes:
  - [CVE-2025-4947, bsc#1243397] QUIC certificate check skip with wolfSSL
  - [CVE-2025-5025, bsc#1243706] No QUIC certificate pinning with wolfSSL
  * Changes:
  - mqtt: send ping at upkeep interval
  - schannel: handle pkcs12 client certificates containing CA certificates
  - TLS: add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: import v2025.04.20 script + docs
  - websocket: add option to disable auto-pong reply
  * Bugfixes:
  - asny-thrdd: fix detach from running thread
  - async-threaded resolver: use ref counter
  - async: DoH improvements
  - build: enable gcc-12/13+, clang-10+ picky warnings
  - build: enable gcc-15 picky warnings
  - certs: drop unused `default_bits` from `.prm` files
  - cf-https-connect: use the passed in dns struct pointer
  - cf-socket: fix FTP accept connect
  - cfilters: remove assert
  - cmake: fix nghttp3 static linking with `USE_OPENSSL_QUIC=ON`
  - cmake: prefer `COMPILE_OPTIONS` over `CMAKE_C_FLAGS` for custom C options
  - cmake: revert `CURL_LTO` behavior for multi-config generators
  - configure: fix --disable-rt
  - CONTRIBUTE: add project guidelines for AI use
  - cpool/cshutdown: force close connections under pressure
  - curl: fix memory leak when -h is used in config file
  - curl_get_line: handle lines ending on the buffer boundary
  - headers: enforce a max number of response header to accept
  - http: fix HTTP/2 handling of TE request header using "trailers"
  - lib: include files using known path
  - lib: unify conversions to/from hex
  - libssh: add NULL check for Curl_meta_get()
  - libssh: fix memory leak
  - mqtt: use conn/easy meta hash
  - multi: do transfer book keeping using mid
  - multi: init_do(): check result
  - netrc: avoid NULL deref on weird input
  - netrc: avoid strdup NULL
  - netrc: deal with null token better
  - openssl-quic: avoid potential `-Wnull-dereference`, add assert
  - openssl-quic: fix shutdown when stream not open
  - openssl: enable builds for *both* engines and providers
  - openssl: set the cipher string before doing private cert
  - progress: avoid integer overflow when gathering total transfer size
  - rand: update comment on Curl_rand_bytes weak random
  - rustls: make max size of cert and key reasonable
  - smb: avoid integer overflow on weird input date
  - urlapi: redirecting to "" is considered fine
  * Remove curl-8.13.0-CloseSocket.patch upstream
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1749038400">- Update to 8.14.1:
  * Security fixes:
  - [bsc#1243933, CVE-2025-5399] libcurl can possibly get
    trapped in an endless busy-loop when processing specially
    crafted packets [d1145df2]
  * Bugfixes:
  - asyn-thrdd: fix cleanup when RR fails due to OOM
  - ftp: fix teardown of DATA connection in done
  - http: fail early when rewind of input failed when following redirects
  - multi: fix add_handle resizing
  - tls BIOs: handle BIO_CTRL_EOF correctly
  - tool_getparam: make --no-anyauth not be accepted
  - wolfssl: fix sending of early data
  - ws: handle blocked sends better
  - ws: tests and fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1749643200">- Update to 8.14.1: [jsc#PED-13055, jsc#PED-13056]
  * Add _multibuild
  * Remove patches fixed in the update:
  - curl-CVE-2024-11053.patch
  - curl-CVE-2024-2004.patch
  - curl-CVE-2024-2379.patch
  - curl-CVE-2024-2398.patch
  - curl-CVE-2024-2466.patch
  - curl-CVE-2024-6197.patch
  - curl-CVE-2024-7264.patch
  - curl-CVE-2024-8096.patch
  - curl-CVE-2024-9681.patch
  - curl-CVE-2025-0167.patch
  - curl-CVE-2025-0725.patch
  - curl-aws_sigv4-url-encode-the-canonical-path.patch
  - curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1763553600">- Security fix: [bsc#1253757, CVE-2025-11563]
  * curl: wcurl path traversal with percent-encoded slashes
  * Add curl-CVE-2025-11563.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767355200">- Security fixes:
  * [bsc#1255731, CVE-2025-14524] if redirected, require permission to use bearer
  * [bsc#1255734, CVE-2025-15224] require private key or user-agent for public key auth
  * [bsc#1255732, CVE-2025-14819] toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache
  * [bsc#1255733, CVE-2025-15079] set both knownhosts options to the same file
  * Add patches:
  - curl-CVE-2025-14524.patch
  - curl-CVE-2025-15224.patch
  - curl-CVE-2025-14819.patch
  - curl-CVE-2025-15079.patch</changelog>
</package>
<package pkgid="687aab926871bc3df68f7582b7b05ad955b0040457cdbb985914b1a679a6ce5c" name="cyrus-sasl" arch="src">
  <version epoch="0" ver="2.1.28" rel="150600.7.14.1"/>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Make DIGEST-MD5 work with openssl3 ( bsc#1230111 )
  RC4 is legacy provided since openSSL3 and requires explicit loading, disable openssl3 depricated API warnings.
  * Add cyrus-sasl-make-digestmd5-work-ssl3.patch</changelog>
  <changelog author="scabrero@suse.de" date="1747828800">- Add Channel Binding support for GSSAPI/GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0009-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch
- Add support for setting max ssf 0 to GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0010-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch</changelog>
  <changelog author="varkoly@suse.com" date="1762776000">- Python3 error log upon importing pycurl (bsc#1233529)
  Remove senceless log message.
  * add remove-senceless-log.patch</changelog>
</package>
<package pkgid="6e7840c1e6fbafda43cd5ae74f3c9b032fe614e9ff99e1bbb06da48db024e1dc" name="cyrus-sasl" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="150600.7.14.1"/>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Make DIGEST-MD5 work with openssl3 ( bsc#1230111 )
  RC4 is legacy provided since openSSL3 and requires explicit loading, disable openssl3 depricated API warnings.
  * Add cyrus-sasl-make-digestmd5-work-ssl3.patch</changelog>
  <changelog author="scabrero@suse.de" date="1747828800">- Add Channel Binding support for GSSAPI/GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0009-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch
- Add support for setting max ssf 0 to GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0010-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch</changelog>
  <changelog author="varkoly@suse.com" date="1762776000">- Python3 error log upon importing pycurl (bsc#1233529)
  Remove senceless log message.
  * add remove-senceless-log.patch</changelog>
</package>
<package pkgid="5bc5809df2cb12786148a43e8e6a76583ec534eede2c8c5c90df793959488a02" name="cyrus-sasl" arch="src">
  <version epoch="0" ver="2.1.28" rel="150600.7.6.2"/>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Make DIGEST-MD5 work with openssl3 ( bsc#1230111 )
  RC4 is legacy provided since openSSL3 and requires explicit loading, disable openssl3 depricated API warnings.
  * Add cyrus-sasl-make-digestmd5-work-ssl3.patch</changelog>
  <changelog author="scabrero@suse.de" date="1747828800">- Add Channel Binding support for GSSAPI/GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0009-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch
- Add support for setting max ssf 0 to GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0010-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch</changelog>
</package>
<package pkgid="8758000bfd798ece2ab3ccefb2890e2c81acf32a7937c90360790328dd28ec46" name="cyrus-sasl" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="150600.7.6.2"/>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Make DIGEST-MD5 work with openssl3 ( bsc#1230111 )
  RC4 is legacy provided since openSSL3 and requires explicit loading, disable openssl3 depricated API warnings.
  * Add cyrus-sasl-make-digestmd5-work-ssl3.patch</changelog>
  <changelog author="scabrero@suse.de" date="1747828800">- Add Channel Binding support for GSSAPI/GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0009-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch
- Add support for setting max ssf 0 to GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0010-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch</changelog>
</package>
<package pkgid="3ebaa6931687862a88ff7782451107b59738e0cb1ac1783b9460309ffe36d2ff" name="cyrus-sasl" arch="src">
  <version epoch="0" ver="2.1.28" rel="150600.7.9.2"/>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Make DIGEST-MD5 work with openssl3 ( bsc#1230111 )
  RC4 is legacy provided since openSSL3 and requires explicit loading, disable openssl3 depricated API warnings.
  * Add cyrus-sasl-make-digestmd5-work-ssl3.patch</changelog>
  <changelog author="scabrero@suse.de" date="1747828800">- Add Channel Binding support for GSSAPI/GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0009-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch
- Add support for setting max ssf 0 to GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0010-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch</changelog>
</package>
<package pkgid="90f86b0ece27df33798ce2299f2bba61e97276f99281b03347a54f99ef84898f" name="cyrus-sasl" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="150600.7.9.2"/>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Make DIGEST-MD5 work with openssl3 ( bsc#1230111 )
  RC4 is legacy provided since openSSL3 and requires explicit loading, disable openssl3 depricated API warnings.
  * Add cyrus-sasl-make-digestmd5-work-ssl3.patch</changelog>
  <changelog author="scabrero@suse.de" date="1747828800">- Add Channel Binding support for GSSAPI/GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0009-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch
- Add support for setting max ssf 0 to GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0010-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch</changelog>
</package>
<package pkgid="719b5d224b7afcf175e962c46c3cbf5d276e5b01605162d3b34c9d9a68fb0cdc" name="cyrus-sasl-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="150600.7.14.1"/>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Make DIGEST-MD5 work with openssl3 ( bsc#1230111 )
  RC4 is legacy provided since openSSL3 and requires explicit loading, disable openssl3 depricated API warnings.
  * Add cyrus-sasl-make-digestmd5-work-ssl3.patch</changelog>
  <changelog author="scabrero@suse.de" date="1747828800">- Add Channel Binding support for GSSAPI/GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0009-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch
- Add support for setting max ssf 0 to GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0010-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch</changelog>
  <changelog author="varkoly@suse.com" date="1762776000">- Python3 error log upon importing pycurl (bsc#1233529)
  Remove senceless log message.
  * add remove-senceless-log.patch</changelog>
</package>
<package pkgid="7b9a137563111067be27dedb7e4eea28626da582db7086e0771683d5838e1063" name="cyrus-sasl-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="150600.7.6.2"/>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Make DIGEST-MD5 work with openssl3 ( bsc#1230111 )
  RC4 is legacy provided since openSSL3 and requires explicit loading, disable openssl3 depricated API warnings.
  * Add cyrus-sasl-make-digestmd5-work-ssl3.patch</changelog>
  <changelog author="scabrero@suse.de" date="1747828800">- Add Channel Binding support for GSSAPI/GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0009-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch
- Add support for setting max ssf 0 to GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0010-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch</changelog>
</package>
<package pkgid="b64eb1587943b6dcaa02425ebb0e01aac93de07997de248e7dfa0d5482337261" name="cyrus-sasl-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="150600.7.9.2"/>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Make DIGEST-MD5 work with openssl3 ( bsc#1230111 )
  RC4 is legacy provided since openSSL3 and requires explicit loading, disable openssl3 depricated API warnings.
  * Add cyrus-sasl-make-digestmd5-work-ssl3.patch</changelog>
  <changelog author="scabrero@suse.de" date="1747828800">- Add Channel Binding support for GSSAPI/GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0009-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch
- Add support for setting max ssf 0 to GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0010-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch</changelog>
</package>
<package pkgid="c0fbb007cffa8ff44ead864d21497cdb0bb0716c1b6aba2d97aa818abc439752" name="cyrus-sasl-crammd5" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="150600.7.14.1"/>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Make DIGEST-MD5 work with openssl3 ( bsc#1230111 )
  RC4 is legacy provided since openSSL3 and requires explicit loading, disable openssl3 depricated API warnings.
  * Add cyrus-sasl-make-digestmd5-work-ssl3.patch</changelog>
  <changelog author="scabrero@suse.de" date="1747828800">- Add Channel Binding support for GSSAPI/GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0009-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch
- Add support for setting max ssf 0 to GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0010-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch</changelog>
  <changelog author="varkoly@suse.com" date="1762776000">- Python3 error log upon importing pycurl (bsc#1233529)
  Remove senceless log message.
  * add remove-senceless-log.patch</changelog>
</package>
<package pkgid="87ea4198a36390cbf14517d84689caa365e06c46ec53df3adf3eae0608a11de4" name="cyrus-sasl-crammd5" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="150600.7.6.2"/>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Make DIGEST-MD5 work with openssl3 ( bsc#1230111 )
  RC4 is legacy provided since openSSL3 and requires explicit loading, disable openssl3 depricated API warnings.
  * Add cyrus-sasl-make-digestmd5-work-ssl3.patch</changelog>
  <changelog author="scabrero@suse.de" date="1747828800">- Add Channel Binding support for GSSAPI/GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0009-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch
- Add support for setting max ssf 0 to GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0010-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch</changelog>
</package>
<package pkgid="9a9b3a5bd0c346c5873d77f03fffc5ba6d0c76eb47da3ca46e4c04e65fb4ba59" name="cyrus-sasl-crammd5" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="150600.7.9.2"/>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Make DIGEST-MD5 work with openssl3 ( bsc#1230111 )
  RC4 is legacy provided since openSSL3 and requires explicit loading, disable openssl3 depricated API warnings.
  * Add cyrus-sasl-make-digestmd5-work-ssl3.patch</changelog>
  <changelog author="scabrero@suse.de" date="1747828800">- Add Channel Binding support for GSSAPI/GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0009-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch
- Add support for setting max ssf 0 to GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0010-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch</changelog>
</package>
<package pkgid="32f608e4fbebb40ed2550e80c60815306f1281bc679c0e6e04187eacd4b5e4cd" name="cyrus-sasl-crammd5-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="150600.7.14.1"/>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Make DIGEST-MD5 work with openssl3 ( bsc#1230111 )
  RC4 is legacy provided since openSSL3 and requires explicit loading, disable openssl3 depricated API warnings.
  * Add cyrus-sasl-make-digestmd5-work-ssl3.patch</changelog>
  <changelog author="scabrero@suse.de" date="1747828800">- Add Channel Binding support for GSSAPI/GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0009-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch
- Add support for setting max ssf 0 to GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0010-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch</changelog>
  <changelog author="varkoly@suse.com" date="1762776000">- Python3 error log upon importing pycurl (bsc#1233529)
  Remove senceless log message.
  * add remove-senceless-log.patch</changelog>
</package>
<package pkgid="cef9ac2236f4423d576844403548abd74db07a28ce06b8d00d3c81c83e29bbd7" name="cyrus-sasl-crammd5-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="150600.7.6.2"/>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Make DIGEST-MD5 work with openssl3 ( bsc#1230111 )
  RC4 is legacy provided since openSSL3 and requires explicit loading, disable openssl3 depricated API warnings.
  * Add cyrus-sasl-make-digestmd5-work-ssl3.patch</changelog>
  <changelog author="scabrero@suse.de" date="1747828800">- Add Channel Binding support for GSSAPI/GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0009-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch
- Add support for setting max ssf 0 to GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0010-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch</changelog>
</package>
<package pkgid="6248f4da3baaeefefa32e90a67fc2458d3a434bb38d77716ab1dc65ca5795d7d" name="cyrus-sasl-crammd5-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="150600.7.9.2"/>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Make DIGEST-MD5 work with openssl3 ( bsc#1230111 )
  RC4 is legacy provided since openSSL3 and requires explicit loading, disable openssl3 depricated API warnings.
  * Add cyrus-sasl-make-digestmd5-work-ssl3.patch</changelog>
  <changelog author="scabrero@suse.de" date="1747828800">- Add Channel Binding support for GSSAPI/GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0009-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch
- Add support for setting max ssf 0 to GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0010-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch</changelog>
</package>
<package pkgid="67cc25c7625096d356a24325d32d7426a7780617279f571511ac91958c8c68ec" name="cyrus-sasl-devel" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="150600.7.14.1"/>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Make DIGEST-MD5 work with openssl3 ( bsc#1230111 )
  RC4 is legacy provided since openSSL3 and requires explicit loading, disable openssl3 depricated API warnings.
  * Add cyrus-sasl-make-digestmd5-work-ssl3.patch</changelog>
  <changelog author="scabrero@suse.de" date="1747828800">- Add Channel Binding support for GSSAPI/GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0009-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch
- Add support for setting max ssf 0 to GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0010-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch</changelog>
  <changelog author="varkoly@suse.com" date="1762776000">- Python3 error log upon importing pycurl (bsc#1233529)
  Remove senceless log message.
  * add remove-senceless-log.patch</changelog>
</package>
<package pkgid="980fb445423556bae85a6ec07cef30471fd37fb88711305b773a86106bfc4523" name="cyrus-sasl-devel" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="150600.7.6.2"/>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Make DIGEST-MD5 work with openssl3 ( bsc#1230111 )
  RC4 is legacy provided since openSSL3 and requires explicit loading, disable openssl3 depricated API warnings.
  * Add cyrus-sasl-make-digestmd5-work-ssl3.patch</changelog>
  <changelog author="scabrero@suse.de" date="1747828800">- Add Channel Binding support for GSSAPI/GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0009-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch
- Add support for setting max ssf 0 to GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0010-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch</changelog>
</package>
<package pkgid="287538d62b3b3828968ee08ff8c1c43e32d0a8c43679d4aa64204ae813804560" name="cyrus-sasl-devel" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="150600.7.9.2"/>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Make DIGEST-MD5 work with openssl3 ( bsc#1230111 )
  RC4 is legacy provided since openSSL3 and requires explicit loading, disable openssl3 depricated API warnings.
  * Add cyrus-sasl-make-digestmd5-work-ssl3.patch</changelog>
  <changelog author="scabrero@suse.de" date="1747828800">- Add Channel Binding support for GSSAPI/GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0009-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch
- Add support for setting max ssf 0 to GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0010-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch</changelog>
</package>
<package pkgid="6fb2cd4fd4ed5702762477f7bcc93e2701440e43bd14513f1ae7ab19135d0e09" name="cyrus-sasl-digestmd5" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="150600.7.14.1"/>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Make DIGEST-MD5 work with openssl3 ( bsc#1230111 )
  RC4 is legacy provided since openSSL3 and requires explicit loading, disable openssl3 depricated API warnings.
  * Add cyrus-sasl-make-digestmd5-work-ssl3.patch</changelog>
  <changelog author="scabrero@suse.de" date="1747828800">- Add Channel Binding support for GSSAPI/GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0009-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch
- Add support for setting max ssf 0 to GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0010-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch</changelog>
  <changelog author="varkoly@suse.com" date="1762776000">- Python3 error log upon importing pycurl (bsc#1233529)
  Remove senceless log message.
  * add remove-senceless-log.patch</changelog>
</package>
<package pkgid="1dc984adedc6c693b2882e9338aca873e534936aef8d3136bd38ef4a394f5179" name="cyrus-sasl-digestmd5" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="150600.7.6.2"/>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Make DIGEST-MD5 work with openssl3 ( bsc#1230111 )
  RC4 is legacy provided since openSSL3 and requires explicit loading, disable openssl3 depricated API warnings.
  * Add cyrus-sasl-make-digestmd5-work-ssl3.patch</changelog>
  <changelog author="scabrero@suse.de" date="1747828800">- Add Channel Binding support for GSSAPI/GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0009-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch
- Add support for setting max ssf 0 to GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0010-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch</changelog>
</package>
<package pkgid="05dce8fd87bb165599151484c08be830940edb0664883def4c25a7170b5076c9" name="cyrus-sasl-digestmd5" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="150600.7.9.2"/>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Make DIGEST-MD5 work with openssl3 ( bsc#1230111 )
  RC4 is legacy provided since openSSL3 and requires explicit loading, disable openssl3 depricated API warnings.
  * Add cyrus-sasl-make-digestmd5-work-ssl3.patch</changelog>
  <changelog author="scabrero@suse.de" date="1747828800">- Add Channel Binding support for GSSAPI/GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0009-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch
- Add support for setting max ssf 0 to GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0010-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch</changelog>
</package>
<package pkgid="ecaea4611c9e600d2702c74c72a10ca27734fed56e1ed3694e8b0f1ee730ad5b" name="cyrus-sasl-digestmd5-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="150600.7.14.1"/>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Make DIGEST-MD5 work with openssl3 ( bsc#1230111 )
  RC4 is legacy provided since openSSL3 and requires explicit loading, disable openssl3 depricated API warnings.
  * Add cyrus-sasl-make-digestmd5-work-ssl3.patch</changelog>
  <changelog author="scabrero@suse.de" date="1747828800">- Add Channel Binding support for GSSAPI/GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0009-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch
- Add support for setting max ssf 0 to GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0010-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch</changelog>
  <changelog author="varkoly@suse.com" date="1762776000">- Python3 error log upon importing pycurl (bsc#1233529)
  Remove senceless log message.
  * add remove-senceless-log.patch</changelog>
</package>
<package pkgid="1aa2ab9fc1e9cbfebb48eee9c26e062f67d4ea94d50843c04ab4f1404bff1f5a" name="cyrus-sasl-digestmd5-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="150600.7.6.2"/>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Make DIGEST-MD5 work with openssl3 ( bsc#1230111 )
  RC4 is legacy provided since openSSL3 and requires explicit loading, disable openssl3 depricated API warnings.
  * Add cyrus-sasl-make-digestmd5-work-ssl3.patch</changelog>
  <changelog author="scabrero@suse.de" date="1747828800">- Add Channel Binding support for GSSAPI/GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0009-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch
- Add support for setting max ssf 0 to GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0010-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch</changelog>
</package>
<package pkgid="4e51bc0b7238df81bab5390e71fe99a39f903c24d017d4c65066a27f18075181" name="cyrus-sasl-digestmd5-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="150600.7.9.2"/>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Make DIGEST-MD5 work with openssl3 ( bsc#1230111 )
  RC4 is legacy provided since openSSL3 and requires explicit loading, disable openssl3 depricated API warnings.
  * Add cyrus-sasl-make-digestmd5-work-ssl3.patch</changelog>
  <changelog author="scabrero@suse.de" date="1747828800">- Add Channel Binding support for GSSAPI/GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0009-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch
- Add support for setting max ssf 0 to GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0010-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch</changelog>
</package>
<package pkgid="1f3961954d43659c1f8d470fd10e8187dae115ca5937aaa623021c9633f1927f" name="cyrus-sasl-gssapi" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="150600.7.14.1"/>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Make DIGEST-MD5 work with openssl3 ( bsc#1230111 )
  RC4 is legacy provided since openSSL3 and requires explicit loading, disable openssl3 depricated API warnings.
  * Add cyrus-sasl-make-digestmd5-work-ssl3.patch</changelog>
  <changelog author="scabrero@suse.de" date="1747828800">- Add Channel Binding support for GSSAPI/GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0009-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch
- Add support for setting max ssf 0 to GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0010-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch</changelog>
  <changelog author="varkoly@suse.com" date="1762776000">- Python3 error log upon importing pycurl (bsc#1233529)
  Remove senceless log message.
  * add remove-senceless-log.patch</changelog>
</package>
<package pkgid="45e256b2027f75ba735c4b3a96bdd4a290e01f0e580276f2882e6d32b7548f43" name="cyrus-sasl-gssapi" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="150600.7.6.2"/>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Make DIGEST-MD5 work with openssl3 ( bsc#1230111 )
  RC4 is legacy provided since openSSL3 and requires explicit loading, disable openssl3 depricated API warnings.
  * Add cyrus-sasl-make-digestmd5-work-ssl3.patch</changelog>
  <changelog author="scabrero@suse.de" date="1747828800">- Add Channel Binding support for GSSAPI/GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0009-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch
- Add support for setting max ssf 0 to GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0010-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch</changelog>
</package>
<package pkgid="f6385fd32089ca667900fe8ca6c721e4b75b0e2c79ec51610a3a693ccc2fdb9e" name="cyrus-sasl-gssapi" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="150600.7.9.2"/>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Make DIGEST-MD5 work with openssl3 ( bsc#1230111 )
  RC4 is legacy provided since openSSL3 and requires explicit loading, disable openssl3 depricated API warnings.
  * Add cyrus-sasl-make-digestmd5-work-ssl3.patch</changelog>
  <changelog author="scabrero@suse.de" date="1747828800">- Add Channel Binding support for GSSAPI/GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0009-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch
- Add support for setting max ssf 0 to GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0010-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch</changelog>
</package>
<package pkgid="46896daaefef38e48a8487040d416c145a1c6088be302ef0a500edfc31f1c9c2" name="cyrus-sasl-gssapi-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="150600.7.14.1"/>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Make DIGEST-MD5 work with openssl3 ( bsc#1230111 )
  RC4 is legacy provided since openSSL3 and requires explicit loading, disable openssl3 depricated API warnings.
  * Add cyrus-sasl-make-digestmd5-work-ssl3.patch</changelog>
  <changelog author="scabrero@suse.de" date="1747828800">- Add Channel Binding support for GSSAPI/GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0009-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch
- Add support for setting max ssf 0 to GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0010-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch</changelog>
  <changelog author="varkoly@suse.com" date="1762776000">- Python3 error log upon importing pycurl (bsc#1233529)
  Remove senceless log message.
  * add remove-senceless-log.patch</changelog>
</package>
<package pkgid="4d83a61098664c6d56dfb09ab8238cda845ed49397966059b50ece21e1576814" name="cyrus-sasl-gssapi-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="150600.7.6.2"/>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Make DIGEST-MD5 work with openssl3 ( bsc#1230111 )
  RC4 is legacy provided since openSSL3 and requires explicit loading, disable openssl3 depricated API warnings.
  * Add cyrus-sasl-make-digestmd5-work-ssl3.patch</changelog>
  <changelog author="scabrero@suse.de" date="1747828800">- Add Channel Binding support for GSSAPI/GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0009-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch
- Add support for setting max ssf 0 to GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0010-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch</changelog>
</package>
<package pkgid="36baae68250dd9b8508a595a024db4f501b8e8d2b65d11f274f82f4b04a46540" name="cyrus-sasl-gssapi-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="150600.7.9.2"/>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Make DIGEST-MD5 work with openssl3 ( bsc#1230111 )
  RC4 is legacy provided since openSSL3 and requires explicit loading, disable openssl3 depricated API warnings.
  * Add cyrus-sasl-make-digestmd5-work-ssl3.patch</changelog>
  <changelog author="scabrero@suse.de" date="1747828800">- Add Channel Binding support for GSSAPI/GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0009-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch
- Add support for setting max ssf 0 to GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0010-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch</changelog>
</package>
<package pkgid="af2546d79f032376c5e86c1794741b1706fe54c0436fabcdd7d3d36bbb1aba8c" name="cyrus-sasl-ntlm" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="150600.7.14.1"/>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Make DIGEST-MD5 work with openssl3 ( bsc#1230111 )
  RC4 is legacy provided since openSSL3 and requires explicit loading, disable openssl3 depricated API warnings.
  * Add cyrus-sasl-make-digestmd5-work-ssl3.patch</changelog>
  <changelog author="scabrero@suse.de" date="1747828800">- Add Channel Binding support for GSSAPI/GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0009-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch
- Add support for setting max ssf 0 to GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0010-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch</changelog>
  <changelog author="varkoly@suse.com" date="1762776000">- Python3 error log upon importing pycurl (bsc#1233529)
  Remove senceless log message.
  * add remove-senceless-log.patch</changelog>
</package>
<package pkgid="d9960063515e0f645d4b0c7d77b98fc7e575e1cd86ab35a95b438f7380caa844" name="cyrus-sasl-ntlm" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="150600.7.6.2"/>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Make DIGEST-MD5 work with openssl3 ( bsc#1230111 )
  RC4 is legacy provided since openSSL3 and requires explicit loading, disable openssl3 depricated API warnings.
  * Add cyrus-sasl-make-digestmd5-work-ssl3.patch</changelog>
  <changelog author="scabrero@suse.de" date="1747828800">- Add Channel Binding support for GSSAPI/GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0009-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch
- Add support for setting max ssf 0 to GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0010-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch</changelog>
</package>
<package pkgid="9e422d8334c32414f95da82215e445878f59e445cf9835c05744c8d976184cdb" name="cyrus-sasl-ntlm" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="150600.7.9.2"/>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Make DIGEST-MD5 work with openssl3 ( bsc#1230111 )
  RC4 is legacy provided since openSSL3 and requires explicit loading, disable openssl3 depricated API warnings.
  * Add cyrus-sasl-make-digestmd5-work-ssl3.patch</changelog>
  <changelog author="scabrero@suse.de" date="1747828800">- Add Channel Binding support for GSSAPI/GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0009-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch
- Add support for setting max ssf 0 to GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0010-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch</changelog>
</package>
<package pkgid="3b22fc8e2036cf262c14c5a5e7f2ec92d79148dd46db803303364befadca30ea" name="cyrus-sasl-otp" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="150600.7.14.1"/>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Make DIGEST-MD5 work with openssl3 ( bsc#1230111 )
  RC4 is legacy provided since openSSL3 and requires explicit loading, disable openssl3 depricated API warnings.
  * Add cyrus-sasl-make-digestmd5-work-ssl3.patch</changelog>
  <changelog author="scabrero@suse.de" date="1747828800">- Add Channel Binding support for GSSAPI/GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0009-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch
- Add support for setting max ssf 0 to GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0010-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch</changelog>
  <changelog author="varkoly@suse.com" date="1762776000">- Python3 error log upon importing pycurl (bsc#1233529)
  Remove senceless log message.
  * add remove-senceless-log.patch</changelog>
</package>
<package pkgid="a4d59bfbd5de4c1e847e2eaa1316229f3f25e6801c524c626bdda9617323b596" name="cyrus-sasl-otp" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="150600.7.6.2"/>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Make DIGEST-MD5 work with openssl3 ( bsc#1230111 )
  RC4 is legacy provided since openSSL3 and requires explicit loading, disable openssl3 depricated API warnings.
  * Add cyrus-sasl-make-digestmd5-work-ssl3.patch</changelog>
  <changelog author="scabrero@suse.de" date="1747828800">- Add Channel Binding support for GSSAPI/GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0009-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch
- Add support for setting max ssf 0 to GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0010-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch</changelog>
</package>
<package pkgid="17f34b2159ef4252451e078ef579419b3ea6dc8d3caa90ba62de0ff34e991cf7" name="cyrus-sasl-otp" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="150600.7.9.2"/>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Make DIGEST-MD5 work with openssl3 ( bsc#1230111 )
  RC4 is legacy provided since openSSL3 and requires explicit loading, disable openssl3 depricated API warnings.
  * Add cyrus-sasl-make-digestmd5-work-ssl3.patch</changelog>
  <changelog author="scabrero@suse.de" date="1747828800">- Add Channel Binding support for GSSAPI/GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0009-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch
- Add support for setting max ssf 0 to GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0010-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch</changelog>
</package>
<package pkgid="6d96b5902d16164115d59f9b686116cc5d034d6d94b525a8f711e44b66504bf9" name="cyrus-sasl-plain" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="150600.7.14.1"/>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Make DIGEST-MD5 work with openssl3 ( bsc#1230111 )
  RC4 is legacy provided since openSSL3 and requires explicit loading, disable openssl3 depricated API warnings.
  * Add cyrus-sasl-make-digestmd5-work-ssl3.patch</changelog>
  <changelog author="scabrero@suse.de" date="1747828800">- Add Channel Binding support for GSSAPI/GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0009-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch
- Add support for setting max ssf 0 to GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0010-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch</changelog>
  <changelog author="varkoly@suse.com" date="1762776000">- Python3 error log upon importing pycurl (bsc#1233529)
  Remove senceless log message.
  * add remove-senceless-log.patch</changelog>
</package>
<package pkgid="5a2896847a56e0d240ce4dd8ee213631df0b39424151bdd145959e3472a53ca2" name="cyrus-sasl-plain" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="150600.7.6.2"/>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Make DIGEST-MD5 work with openssl3 ( bsc#1230111 )
  RC4 is legacy provided since openSSL3 and requires explicit loading, disable openssl3 depricated API warnings.
  * Add cyrus-sasl-make-digestmd5-work-ssl3.patch</changelog>
  <changelog author="scabrero@suse.de" date="1747828800">- Add Channel Binding support for GSSAPI/GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0009-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch
- Add support for setting max ssf 0 to GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0010-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch</changelog>
</package>
<package pkgid="dba87e19a70045ed9e2010e22341974bc3245a88306c450d8e9e1d6ae5f78e11" name="cyrus-sasl-plain" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="150600.7.9.2"/>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Make DIGEST-MD5 work with openssl3 ( bsc#1230111 )
  RC4 is legacy provided since openSSL3 and requires explicit loading, disable openssl3 depricated API warnings.
  * Add cyrus-sasl-make-digestmd5-work-ssl3.patch</changelog>
  <changelog author="scabrero@suse.de" date="1747828800">- Add Channel Binding support for GSSAPI/GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0009-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch
- Add support for setting max ssf 0 to GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0010-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch</changelog>
</package>
<package pkgid="a8c7a5b25b235f89ce3012ee47fcb6e7d39c2f46392058884c41e047feb6d6f5" name="cyrus-sasl-plain-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="150600.7.14.1"/>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Make DIGEST-MD5 work with openssl3 ( bsc#1230111 )
  RC4 is legacy provided since openSSL3 and requires explicit loading, disable openssl3 depricated API warnings.
  * Add cyrus-sasl-make-digestmd5-work-ssl3.patch</changelog>
  <changelog author="scabrero@suse.de" date="1747828800">- Add Channel Binding support for GSSAPI/GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0009-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch
- Add support for setting max ssf 0 to GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0010-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch</changelog>
  <changelog author="varkoly@suse.com" date="1762776000">- Python3 error log upon importing pycurl (bsc#1233529)
  Remove senceless log message.
  * add remove-senceless-log.patch</changelog>
</package>
<package pkgid="9bb95d141f62d778d898685c106ecc5a88a43132f18fd91383c55b07a3dfa75d" name="cyrus-sasl-plain-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="150600.7.6.2"/>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Make DIGEST-MD5 work with openssl3 ( bsc#1230111 )
  RC4 is legacy provided since openSSL3 and requires explicit loading, disable openssl3 depricated API warnings.
  * Add cyrus-sasl-make-digestmd5-work-ssl3.patch</changelog>
  <changelog author="scabrero@suse.de" date="1747828800">- Add Channel Binding support for GSSAPI/GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0009-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch
- Add support for setting max ssf 0 to GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0010-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch</changelog>
</package>
<package pkgid="7e94482b026485d868b2365c5620d0e26fc7f9f99fbe42936ed4273f6c7cf070" name="cyrus-sasl-plain-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="150600.7.9.2"/>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Make DIGEST-MD5 work with openssl3 ( bsc#1230111 )
  RC4 is legacy provided since openSSL3 and requires explicit loading, disable openssl3 depricated API warnings.
  * Add cyrus-sasl-make-digestmd5-work-ssl3.patch</changelog>
  <changelog author="scabrero@suse.de" date="1747828800">- Add Channel Binding support for GSSAPI/GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0009-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch
- Add support for setting max ssf 0 to GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0010-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch</changelog>
</package>
<package pkgid="817c600c94f45ec451f08ffc8e2a367fc38ebf2560e416bf74b1af2ac367e63d" name="cyrus-sasl-saslauthd" arch="src">
  <version epoch="0" ver="2.1.28" rel="150600.7.14.1"/>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="william.brown@suse.com" date="1757505600">- bsc#1247498 - replace insecure MD5 with ephemeral HMAC-SHA256
  * 0001-Use-HMAC-SHA256-for-cache-passwords-over-MD5.patch</changelog>
</package>
<package pkgid="4bc0bfc5c0ae8c85423f152b5209762ffe3ec62ca5f3aafe677bc9b2153b6c37" name="cyrus-sasl-saslauthd" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="150600.7.14.1"/>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="william.brown@suse.com" date="1757505600">- bsc#1247498 - replace insecure MD5 with ephemeral HMAC-SHA256
  * 0001-Use-HMAC-SHA256-for-cache-passwords-over-MD5.patch</changelog>
</package>
<package pkgid="7f83cbb986d40171f1292dd012081d860afd26411c0bd947d441a0a839690b94" name="cyrus-sasl-saslauthd" arch="src">
  <version epoch="0" ver="2.1.28" rel="150600.7.6.2"/>
  <changelog author="varkoly@suse.com" date="1396353600">- bnc#871183 - cyrus-sasl-saslauthd service file is missing parameter 'Restart=always'</changelog>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
</package>
<package pkgid="d20a91e5d4e84c718a6c43dc5f6904694fe61699777133cf0ba23f3d423c0809" name="cyrus-sasl-saslauthd" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="150600.7.6.2"/>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
</package>
<package pkgid="8371b5c7d4c4803087f6abd3b2101d59e929b8cfcbccc50206e0ab5b27fe9f9f" name="cyrus-sasl-saslauthd" arch="src">
  <version epoch="0" ver="2.1.28" rel="150600.7.9.2"/>
  <changelog author="ckornacker@suse.com" date="1402660800">- Revert upstream commit 080e51c7fa0421eb2f0210d34cf0ac48a228b1e9
  cyrus-sasl-revert_gssapi_flags.patch (bnc#775279)</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; it's unneeded with systemd' systems
- Remove insserv and fillup dependency in cyrus-sasl package; there
  is neither sysconfig or init file</changelog>
  <changelog author="sfalken@opensuse.org" date="1406635200">- Changed --with-saslauthd=/var/run/sasl2 in %build to /run/sasl2 to clear rpmlint check failure</changelog>
  <changelog author="varkoly@suse.com" date="1411473600">- bnc#897837 saslauthd package has no config</changelog>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="william.brown@suse.com" date="1757505600">- bsc#1247498 - replace insecure MD5 with ephemeral HMAC-SHA256
  * 0001-Use-HMAC-SHA256-for-cache-passwords-over-MD5.patch</changelog>
</package>
<package pkgid="1425bd73afd47b8bac38227a143638edb2225a3a5376ea6eb98bdeb3d05a8012" name="cyrus-sasl-saslauthd" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="150600.7.9.2"/>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="william.brown@suse.com" date="1757505600">- bsc#1247498 - replace insecure MD5 with ephemeral HMAC-SHA256
  * 0001-Use-HMAC-SHA256-for-cache-passwords-over-MD5.patch</changelog>
</package>
<package pkgid="90361ba1c678a02297feb88670c58965f53a549a67a3b026f738d2c2893cdb7d" name="davfs2" arch="src">
  <version epoch="0" ver="1.5.4" rel="150000.3.13.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1243598400">- copied into filesystems repository in openSUSE Build Service, original in home:leo_eraly
- fix license tag
- added %%post script to create davfs2 group and user
- moved to Savannah
- some spec file tidying
- update to 1.4.0</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1245672000">- update to 1.4.1:
  * experimental support was added for the non-standard method USERINFO, which allows this release to get information about available and used Web space from the server
  * failed file upload attempts are now repeated at increasing time intervals
  * if a davfs filesystem is unmounted at disconnect, local changes are cached and submitted at the next mount
  * many other minor improvements and bugfixes were made</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1259582400">- update to 1.4.5:
  * option was added to silently refuse to connect when encountering suspicious server certificates
  * several minor bugs were fixed
- changes from 1.4.3:
  * support for Neon 0.29 was added, which also allows for support for NTLM authentication
  * an option was added to silently refuse connections with untrusted server certificates
  * experimental support for the command line option "username" was added for use with pam_mount</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1291032000">- fix location of mount/umount helpers, bnc#640967
- update to 1.4.6:
  * bugfixes</changelog>
  <changelog author="jengelh@inai.de" date="1338033600">- Remove redundant tags/sections from specfile
- Parallel build with %_smp_mflags
- User/group addition ought not to be fatal</changelog>
  <changelog author="conrad@quisquis.de" date="1360756800">- Upgrade to 1.4.7
- Added -pie/-fPIE compile flags
- Fixed (hopefully) permissions handling</changelog>
  <changelog author="conrad@quisquis.de" date="1360756801">- Disabled OBS files service - apparently some savannah mirrors are broken</changelog>
  <changelog author="conrad@quisquis.de" date="1360756802">- Added fix-formats patch to get rid of some warnings
- Added upstream patch for broken symlinks</changelog>
  <changelog author="conrad@quisquis.de" date="1360756803">- Added missing file</changelog>
  <changelog author="conrad@quisquis.de" date="1360929600">- Specfile fixes for fedora + SLES</changelog>
  <changelog author="juergen@spitzmueller.org" date="1385899200">- Accept Neon 0.30 (davfs2-ne_v30.patch -- backported from davfs2 cvs:
  http://cvs.savannah.gnu.org/viewvc/davfs2/configure.ac?root=davfs2&amp;r1=1.11.4.1&amp;r2=1.11.4.2)</changelog>
  <changelog author="draht@schaltsekun.de" date="1416916800">- upgrade to 1.5.2; changes include:
  * fix for insecure use of system(). This is related to CVE-2014-4362.
  * fixes for usage of symlinks for mountpoints and mtab
  * improved cookie support
  * neon 0.30 support
  * memory leak fixes
  * compiler options for hardened build.
  * load the fuse kernel module automatically.
  * new mount option grpid, trust_ca_cert and trust_server_cert.
  * This list is not exhaustive. Please have a look at the ChangeLog
    for a complete list.
- obsoleted and removed from package:
  * davfs2-fix-formats.patch
  * davfs2-ne_v30.patch
  * davfs2-DESTDIR.patch
  * davfs2-fix_missing_exit_failure.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1437134400">- Import of davfs2 to SLE12-SP1 from SLE11-SP4 (FATE#318116)</changelog>
  <changelog author="meissner@suse.com" date="1441972800">- remove the setuid root permission files (bsc#907662)</changelog>
  <changelog author="chris@computersalat.de" date="1512388800">- update to 1.5.4
  * mount.davfs frequently reads /proc/mounts. This is necessary with
    coda but not with fuse. When running two instances of mount.davfs
    using fuse these reads may trigger a kernel bug and create a deadlock.
  * when mount.davfs receives SIGTERM it stops reading from the fuse
    device. In this case kernel fuse will make umount(8) hang forever.</changelog>
  <changelog author="dsterba@suse.cz" date="1519041600">- spec: update rpmlint, fix build</changelog>
  <changelog author="jengelh@inai.de" date="1519646400">- Replace %__-type macro indirections. Do not ignore errors from
  useradd. Remove Fedora definitions. Restore debug creation.
  Compact grammar in description.</changelog>
  <changelog author="rgoldwyn@suse.com" date="1593172800">- Add davfs2-nofail.patch: respect nofail option (bsc#1173419)</changelog>
  <changelog author="ali.abdallah@suse.com" date="1641902400">- Add Fix-wrong-fscanf-format-in-umount.patch: Fix wrong fscanf format
  on umount that might lead to segmentation fault (bsc#1194537).
- Add Check-for-valid-prop-etag.patch: Check for valid server etag
  prop (bsc#1193733).
- Add Always-update-cached-file-on-dav_lookup.patch: Always updates
  the cached file attributes on dav_lookup, to reflect the latest
  looked up file state (bsc#1188967).</changelog>
  <changelog author="ali.abdallah@suse.com" date="1651060800">- Add Optimize-server-side-file-size-change-detection.patch:
  Previous fix of (bsc#1188967) introduces performance issue, as the
  update_cache_file is downloading the whole file on each lookup. It is
  enough to get the latest file size when a file is not open or not dirty
  to detect if it has been changed on the server, so next FUSE read will
  have the correct size (bsc#1198576).</changelog>
</package>
<package pkgid="a4958d44176e9d859533689d063d74c90c5f230afa4e4740738096acc918bdd4" name="davfs2" arch="x86_64">
  <version epoch="0" ver="1.5.4" rel="150000.3.13.1"/>
  <changelog author="juergen@spitzmueller.org" date="1385899200">- Accept Neon 0.30 (davfs2-ne_v30.patch -- backported from davfs2 cvs:
  http://cvs.savannah.gnu.org/viewvc/davfs2/configure.ac?root=davfs2&amp;r1=1.11.4.1&amp;r2=1.11.4.2)</changelog>
  <changelog author="draht@schaltsekun.de" date="1416916800">- upgrade to 1.5.2; changes include:
  * fix for insecure use of system(). This is related to CVE-2014-4362.
  * fixes for usage of symlinks for mountpoints and mtab
  * improved cookie support
  * neon 0.30 support
  * memory leak fixes
  * compiler options for hardened build.
  * load the fuse kernel module automatically.
  * new mount option grpid, trust_ca_cert and trust_server_cert.
  * This list is not exhaustive. Please have a look at the ChangeLog
    for a complete list.
- obsoleted and removed from package:
  * davfs2-fix-formats.patch
  * davfs2-ne_v30.patch
  * davfs2-DESTDIR.patch
  * davfs2-fix_missing_exit_failure.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1437134400">- Import of davfs2 to SLE12-SP1 from SLE11-SP4 (FATE#318116)</changelog>
  <changelog author="meissner@suse.com" date="1441972800">- remove the setuid root permission files (bsc#907662)</changelog>
  <changelog author="chris@computersalat.de" date="1512388800">- update to 1.5.4
  * mount.davfs frequently reads /proc/mounts. This is necessary with
    coda but not with fuse. When running two instances of mount.davfs
    using fuse these reads may trigger a kernel bug and create a deadlock.
  * when mount.davfs receives SIGTERM it stops reading from the fuse
    device. In this case kernel fuse will make umount(8) hang forever.</changelog>
  <changelog author="dsterba@suse.cz" date="1519041600">- spec: update rpmlint, fix build</changelog>
  <changelog author="jengelh@inai.de" date="1519646400">- Replace %__-type macro indirections. Do not ignore errors from
  useradd. Remove Fedora definitions. Restore debug creation.
  Compact grammar in description.</changelog>
  <changelog author="rgoldwyn@suse.com" date="1593172800">- Add davfs2-nofail.patch: respect nofail option (bsc#1173419)</changelog>
  <changelog author="ali.abdallah@suse.com" date="1641902400">- Add Fix-wrong-fscanf-format-in-umount.patch: Fix wrong fscanf format
  on umount that might lead to segmentation fault (bsc#1194537).
- Add Check-for-valid-prop-etag.patch: Check for valid server etag
  prop (bsc#1193733).
- Add Always-update-cached-file-on-dav_lookup.patch: Always updates
  the cached file attributes on dav_lookup, to reflect the latest
  looked up file state (bsc#1188967).</changelog>
  <changelog author="ali.abdallah@suse.com" date="1651060800">- Add Optimize-server-side-file-size-change-detection.patch:
  Previous fix of (bsc#1188967) introduces performance issue, as the
  update_cache_file is downloading the whole file on each lookup. It is
  enough to get the latest file size when a file is not open or not dirty
  to detect if it has been changed on the server, so next FUSE read will
  have the correct size (bsc#1198576).</changelog>
</package>
<package pkgid="c5c51cd0724d97fcdbd1826970b72eaf6d5a2b847fc8ffdb16b966cdb2d47402" name="debuginfod-client" arch="x86_64">
  <version epoch="0" ver="0.185" rel="150400.5.8.2"/>
  <changelog author="mliska@suse.cz" date="1585569600">- Update to version 0.179:
  debuginfod-client: When DEBUGINFOD_PROGRESS is set and the program doesn't
    install its own debuginfod_progressfn_t show download
    progress on stderr.
    DEBUGINFOD_TIMEOUT is now defined as seconds to get at
    least 100K, defaults to 90 seconds.
    Default to $XDG_CACHE_HOME/debuginfod_client.
    New functions debuginfod_set_user_data,
    debuginfod_get_user_data, debuginfod_get_url and
    debuginfod_add_http_header.
    Support for file:// URLs.
  debuginfod: Uses libarchive directly for reading rpm archives.
    Support for indexing .deb/.ddeb archives through dpkg-deb
    or bsdtar.
    Generic archive support through -Z EXT[=CMD]. Which can be
    used for example for arch-linux pacman files by using
  - Z '.tar.zst=zstdcat'.
    Better logging using User-Agent and X-Forwarded-For headers.
    More prometheus metrics.
    Support for eliding dots or extraneous slashes in path names.
  debuginfod-find: Accept /path/names in place of buildid hex.
  libelf: Handle PN_XNUM in elf_getphdrnum before shdr 0 is cached
    Ensure zlib resource cleanup on failure.
  libdwfl: dwfl_linux_kernel_find_elf and dwfl_linux_kernel_report_offline
    now find and handle a compressed vmlinuz image.
  readelf, elflint: Handle PT_GNU_PROPERTY.
  translations: Updated Ukrainian translation.</changelog>
  <changelog author="mliska@suse.cz" date="1591876800">- Update to version 0.180:
  elflint: Allow SHF_EXCLUDE as generic section flag when --gnu is given.
  libdw, readelf: Handle GCC LTO .gnu.debuglto_ prefix.
  libdw: Use correct CU to resolve file names in dwarf_decl_file.
  libdwfl: Handle debugaltlink in dwfl_standard_find_debuginfo.
  size: Also obey radix printing for bsd format.
  nm: Explicitly print weak 'V' or 'T' and common 'C' symbols.
- Add 0001-tests-Add-GCOV-flags-when-necessary.patch in order to fix
  an unresolved symbol.
- Enable LTO: boo#1138796 by adding -flto-partition=none and -Wno-error=stack-usage.</changelog>
  <changelog author="mliska@suse.cz" date="1592222400">- Remove remove-run-large-elf-file.sh.patch as it now checks for memory
  size.
- Use autosetup.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1599566400">- Update to version 0.181:
  libelf: elf_update now compensates (fixes up) a bad sh_addralign for
    SHF_COMPRESSED sections.
  libdebuginfod: configure now takes --enable-libdebuginfod=dummy or
  - -disable-libdebuginfod for bootstrapping.
    DEBUGINFOD_URLS now accepts "scheme-free" urls
    (guessing at what the user meant, either http:// or file://)
  readelf, elflint: Handle aarch64 bti, pac bits in dynamic table and gnu
    property notes.
  libdw, readelf: Recognize DW_CFA_AARCH64_negate_ra_state. Allows unwinding
    on arm64 for code that is compiled for PAC (Pointer
    Authentication Code) as long as it isn't enabled
- Drop upstream patch:
  * 0001-tests-Add-GCOV-flags-when-necessary.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1600171200">- Disable LTO again - boo#1138796
  Adding -flto-partition=none and -Wno-error=stack-usage were
  not enough:
    [  123s] libasm-devel.x86_64: E: lto-no-text-in-archive (Badness: 10000) /usr/lib64/libasm.a
    [  123s] libdw-devel.x86_64: E: lto-no-text-in-archive (Badness: 10000) /usr/lib64/libdw.a
    [  123s] libelf-devel.x86_64: E: lto-no-text-in-archive (Badness: 10000) /usr/lib64/libelf.a
    [  123s] This archive does not contain a non-empty .text section.  The archive was not
    [  123s] created with -ffat-lto-objects option.
  And adding -ffat-lto-objects breaks run-show-die-info.sh test.</changelog>
  <changelog author="mliska@suse.cz" date="1600776000">- Add Conflicts for dummy packages.</changelog>
  <changelog author="mliska@suse.cz" date="1604577600">- Add new /etc/profile.d/debuginfod.{,c}sh files.
- Update to version 0.182:
  backends: Support for tilegx has been removed.
  config: New /etc/profile.d files to provide default $DEBUGINFOD_URLS.
  debuginfod: More efficient package traversal, tolerate various errors
    during scanning, grooming progress is more visible and
    interruptible, more prometheus metrics.
  debuginfod-client: Now supports compressed (kernel) ELF images.
  libdwfl: Add ZSTD compression support.</changelog>
  <changelog author="mliska@suse.cz" date="1607601600">- Move profile files to libdebuginfod1 sub-package.
- Silent 2 rpmlint issues.</changelog>
  <changelog author="mliska@suse.cz" date="1609761600">- Add upstream config-do-not-define-DEBUGINFOD_URLS-environment-var.patch
  in order to fix boo#1180306.</changelog>
  <changelog author="mliska@suse.cz" date="1612785600">- Update to version 0.183:
  debuginfod: New thread-busy metric and more detailed error metrics.
    New --fdcache-mintmp and tracking of filesystem freespace.
    New increased webapi concurrency while grooming.
  debuginfod-client: DEBUGINFOD_SONAME macro added to debuginfod.h which
    can be used to dlopen the libdebuginfod.so library.
    New function debuginfod_set_verbose_fd and
    DEBUGINFOD_VERBOSE environment variable.
  config: profile.sh and profile.csh won't export DEBUGINFOD_URLS unless
    configured --enable-debuginfod-urls[=URLS]
  elflint, readelf: Recognize SHF_GNU_RETAIN.
    Handle SHT_X86_64_UNWIND as valid relocation target.
- Remove config-do-not-define-DEBUGINFOD_URLS-environment-var.patch patch.</changelog>
  <changelog author="mliska@suse.cz" date="1615896000">- Enable https://debuginfod.opensuse.org/ debuginfod server
  by default now.
- Add disable-run-readelf-self-test.patch in order to disable
  a failing test-case with GCC 11 (PR27367).</changelog>
  <changelog author="mliska@suse.cz" date="1620648000">- Update to version 0.184:
  debuginfod: Use libarchive's bsdtar as the .deb-family file unpacker.
  debuginfod-client: Client caches negative results. If a query for a
    file failed with 404, an empty 000 permission
    file is created in the cache. This will prevent
    requesting the same file for the next 10 minutes.
    Client objects now carry long-lived curl handles
    for outgoing connections.  This makes it more
    efficient for multiple sequential queries, because
    the TCP connections and/or TLS state info are kept
    around awhile, avoiding O(100ms) setup latencies.
  libdw: handle DW_FORM_indirect when reading attributes
  translations: Update Polish translation.
- Add 2 build dependences for tests.</changelog>
  <changelog author="mliska@suse.cz" date="1621857600">- Update to version 0.185:
  debuginfod-client: Simplify curl handle reuse so downloads which
    return an error are retried.
  elfcompress: Always exit with code 0 when the operation succeeds (even
    when nothing was done). On error the exit code is now always 1.</changelog>
  <changelog author="jcheung@suse.com" date="1626004800">- For version 0.185, the below patches are no longer needed
  (jsc#SLE-17288, jsc#SLE-17951)
  libdw-check-end-of-attributes-list-consistently.patch
  elflint-dont-check-section-group-without-flags-word.patch
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
  elfutils-dont-trust-sh_entsize.patch
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
  size-handle-recursive-elf-ar-files.patch
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
  use-the-empty-string-for-note-names-with-zero-size.patch
  readelf-fix-off-by-one-sanity-check.patch
  libebl-check-NT_PLATFORM-core-notes.patch
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
  libelf-check-compression-before-allocate-output-buffer.patch
  libdwfl-sanity-check-partial-core-file-data-reads.patch
  arlib-check-that-sh_entsize-isnt-zero.patch</changelog>
  <changelog author="martin.liska@suse.com" date="1628251200">- Add disable-run-deleted-test.patch in order to disable
  failing test-case (boo#1189153).</changelog>
  <changelog author="martin.liska@suse.com" date="1633953600">- Enhance license fields: all the libraries actually have a different
  license to the tools. While the tools are GPL-3.0-or-later, the
  libraries are (LGPL-3.0-or-later OR GPL-2.0-or-later)
  SLE bug (for tracking the above) bsc#1191310</changelog>
  <changelog author="tonyj@suse.com" date="1645790400">- Add support for zstd, needed to inspect kernel modules (bsc#1196510)</changelog>
  <changelog author="martin.liska@suse.com" date="1655726400">- Add missing Requires for devel package.</changelog>
  <changelog author="martin.liska@suse.com" date="1656331200">- Set --enable-debuginfod-urls only for TW.</changelog>
  <changelog author="matz@suse.com" date="1761134400">- Add elfutils-fix-large-alignment.diff and elfutils-pr28190.diff
  to fix build/testsuite for more recent glibc and kernels.
- Add elfutils-fuzz-1.diff, elfutils-fuzz-2.diff,
  elfutils-fuzz-3.diff, elfutils-fuzz-4.diff [bsc#1237236,
  bsc#1237240, bsc#1237241, bsc#1237242].
- Add elfutils-fix-debuginfod-groom-race.diff to fix a testsuite
  race in run-debuginfod-find.sh.</changelog>
</package>
<package pkgid="a6869a86fc1cfe8315d78996c21cedc7fca1fe9288226c170faaef175da29f7e" name="dejavu-fonts" arch="noarch">
  <version epoch="0" ver="2.37" rel="150000.3.3.1"/>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="toms@suse.de" date="1324468800">- Renamed dejavu -&gt; dejavu-fonts according to
  openSUSE packaging guidelines and FATE#313035
  Adjusted Obsoletes and Provides accordingly</changelog>
  <changelog author="cfarrell@suse.com" date="1325592000">- license update: SUSE-Permissive
  Use this SPDX proprietary extension tag until upstream SPDX adopts a
  permissive category</changelog>
  <changelog author="pgajdos@suse.com" date="1337256000">- call spec-cleaner</changelog>
  <changelog author="pgajdos@suse.cz" date="1341403200">- amend spec file to reflect new font packaging scheme
  (see openFATE#313536);</changelog>
  <changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1377518400">- Update to 2.34:
  * This release includes the addition of Lisu, an update of Georgian,
    the addition of some symbols and the addition and modification
    of several Latin characters.
  * Sans, SansMono, Serif: unlinked references of U+2596 for bug 50848
  * Sans, SansMono, Serif: added U+A7AA
  * Sans, SansMono, Serif: added U+2A6A, U+2A6B, U+2E1F based on U+223B
  * Sans, Serif: removed superfluous ligature definitions for
    ffl und ffi (bug 55363)
  * Sans, Serif: swapped glyphs for U+25D2 and U+25D3 (bug 55197)
  * Sans, Serif: added U+A740, U+A741
  * Sans: added U+20BA Turkish Lira sign
  * Sans: replaced Georgian Asomtavruli U+10A0-U+10C5 and Mkhedruli
    U+10D0-U+10FC with new version
  * Sans: added Georgian Nuskhuri U+2D00-U+U+2D25
  * Sans: added Private Use Area glyphs for Georgian U+F400-U+F441
  * Sans: tweaked U+0250, U+0254
  * Sans: adjusted hinting of U+032C-U+032D, avoiding problem on
    some platforms
  * Sans: added U+A7A0-U+A7A9, pre-1921 Latvian letters with
    oblique stroke
  * Sans: added anchors to U+2C6D
  * Sans: added cedilla anchor to some Latin characters
  * Sans: added ogonek anchor to A, E, O, U, Y
  * Sans: adjusted ogonek reference in U+0172, U+01EA, U+01EB
  * Sans: added anchors to U+0104, U+0105
  * Sans: added U+1F600, U+1F611, U+1F615, U+1F617, U+1F619,
    U+1F61B, U+1F61F, U+1F626-U+1F627, U+1F62E-U+1F62F, U+1F634
  * Sans: replaced U+27A1 with mirror image of U+2B05 for consistency
  * Sans: copied hints from U+14A3, U+14A7 to U+2142-U+2143
  * Sans: added Lisu block
  * Sans: typographical improvements to U+0166-U+0167, U+02A6, U+02AA
  * Sans: slightly change hinting of "2" to fix bug 37395
  * Sans: fixed U+1444 which had wrong top dot that shouldn't be there
  * Sans: added anchors for diacritics to U+01B7, U+01B8, U+01B9, U+0292
  * Sans: added U+01B7, U+01B8 to context for case diacritics above
  * SansMono: fixed U+0574
  * SansMono: added U+2016, U+27C2
  * SansMono: added U+02CE, U+02CF
  * SansMono: added U+2148, U+27E6-U+27E7, U+2B05-U+2B0D, U+1D55A
  * Serif: added U+02BA, U+02C2-U+02C5, U+02CA-U+02CB, U+02D7, U+02F3,
    U+02F7, U+046C-U+046D, U+0476-U+0477, U+1D7C-U+1D7F, U+20B8, U+2132,
    U+214E, U+2C7B to Serif
  * Serif: typographic improvements to U+0194, U+01B1, U+0263, U+028A,
    U+02A6, U+02A8, U+02AA, U+02E0, U+03DC, U+1D3B, U+1D7B
  * Serif: added small cap versions of q, x (in italic styles), delta,
    theta, xi, sigma, phi, omega, not wired in yet
  * Serif: added anchors to U+0234-U+0236
  * Serif: added U+02EC, U+02EF, U+02F0, U+0360</changelog>
  <changelog author="cornelis@solcon.nl" date="1437048000">- Update to 2.35:
  * For details see: http://dejavu-fonts.org/wiki/Changelog</changelog>
  <changelog author="sflees@suse.de" date="1470052800">- Update to 2.37
  * Changes from 2.36 to 2.37
  * Fix issue with empty glyphs in condensed typefaces in the released source files.
  * Changes from 2.35 to 2.36
  * Math: added DejaVu Math Tex Gyre by B. Jackowski, P. Strzelczyk and P. Pianowski (on behalf of TeX users groups)
  * Sans: removed dot of U+06BA in all forms
  * Sans: fixed position of three dots of U+06BD in init and medi forms (by Denis Jacquerye)
  * Sans: corrected direction of contours in U+05E7 (by Lior Halphon]])
  * Sans: added U+1F643 (by Olleg Samoylov)
  * Serif: moved up U+0360-0361 (by Gee Fung Sit 薛至峰]])
  * Serif: increased spacing of Roman numerals U+2161-2163, U+2165-2168, U+216A-216B (by Gee Fung Sit 薛至峰)
  * Serif: fixed anchor position of U+00E6 (by Gee Fung Sit 薛至峰)
  * Sans: fixed vertical position of U+20BA (by Gee Fung Sit 薛至峰)
  * Sans, Serif: fixed glyph height of Block Elements (by Gee Fung Sit 薛至峰)
  * Sans, Serif: added U+A698-A699 (by Gee Fung Sit 薛至峰)
  * Sans, Mono, Serif: added U+037F (by Gee Fung Sit 薛至峰)
  * Mono: added U+0376-0377, U+037B-037D (by Gee Fung Sit 薛至峰)
  * Serif: removed duplicate point from U+1D05 (by Gee Fung Sit 薛至峰)
  * Mono: added U+20BA, U+20BD (by Gee Fung Sit 薛至峰)
  * Sans: Added moon symbols U+1F311-1F318 (by Ben Laenen)</changelog>
  <changelog author="pgajdos@suse.com" date="1762344000">- use %license tag [bsc#1252142]</changelog>
</package>
<package pkgid="dff108354c60ef3c04c073fab585c2621f241fffc895896e05c81f7b75a2cfb8" name="dejavu-fonts" arch="src">
  <version epoch="0" ver="2.37" rel="150000.3.3.1"/>
  <changelog author="mfabian@suse.de" date="1205236800">- update to 2.24.
- Changes from 2.23 to 2.24:
  • instructions for U+05C0 ׀, U+05C3 ׃, U+05F3 ׳, and U+05F4 ״
    in DejaVu Sans. (by Wesley Transue)
  • instructions for U+2116 in Sans (by Andrey V. Panov)
  • Unicode 5.1 update: moved U+F208 to U+2C6D, U+F25F to U+2C71,
    added U+2C6E-U+2C6F, U+2C72-U+2C73, updated outline of U+2C71
    in Sans. (by Denis Jacquerye)
  • updated and instructed U+0401 in Sans (by Andrey V. Panov)
  • fixed the bug in Sans faces where U+02EC ˬ faced the wrong
    direction. Also, added a few more glyph instructions.
    (by Wesley Transue)
  • removed OS2Sub and OS2Strike that weren't intentional in
    Sans ExtraLight. (by Denis Jacquerye)
  • updated instructions for U+401, U+44F in Serif Book.
    (by Andrey V. Panov)
  • instructions for U+02C4 ˄, U+02C5 ˅, U+03D8 Ϙ, U+03D9 ϙ,
    U+0494 Ҕ, and U+0495 ҕ in Sans Book. (by Wesley Transue)
  • instructions for U+01A6 Ʀ, U+0238 ȸ, U+0239 ȹ, U+02EC ˬ,
    and U+05C6 ׆ in Sans Book. (by Wesley Transue)
  • DejaVuSans.sfd DejaVuSerif.sfd: updated instructions for
    U+447 and U+451 using code generated with xgridfit
    (by Andrey V. Panov)
  • instructions for a few glyphs in the Latin Extended-B Block,
    Greek Block, Cyrillic Block, and N'Ko block.
    (by Wesley Transue)
  • updated sfdnormalize.pl, and SFD files to new SFD format
    with empty lines. (by Denis Jacquerye)</changelog>
  <changelog author="mfabian@suse.de" date="1211198400">- update to 2.25.
- changes from 2.24 to 2.25:
  •  moved/added U+2E18 (by Gee Fung Sit 薛至峰)
  • added empty glyph for U+2064 in Sans and Serif
    (by Gee Fung Sit 薛至峰)
  • added U+22CE-U+22CF to Sans (by Gee Fung Sit 薛至峰)
  • Sans Oblique and Bold Oblique, Serif: reverted digits hinting
    instructions back to before revision 1590, which fixed mistaken
    debian bug #471024. This fixes Debian bug #411308.
    The original bug was in freetype not in the fonts
    (by Denis Jacquerye)
  • added U+A726-U+A729, U+A730-U+A733, U+A738-U+A73F,
    U+A746-U+A74B, U+A74E-U+A74F, U+A780-U+A781, U+A7FB-U+A7FF to
    Sans (by Gee Fung Sit 薛至峰)
  • added Macedonian italic glyph shape for U+0453 in Serif (by Ben Laenen)
  • changed descenders in U+0446, U+0449, U+0497, U+04A3,
    U+04AD (by Andrey V. Panov)
  • updated main SFD files to SplineFontDB 3.0
    (Denis Jacquerye and Gee Fung Sit 薛至峰)
  • moved U+0561 2 up since it wasn't aligned with the baseline
    well (by Ben Laenen)
  • added U+2E2E to Sans (by Gee Fung Sit 薛至峰)
  • replaced U+2699 with simpler version in Sans (
    by Gee Fung Sit 薛至峰)
  • added a lot of hinting instructions to Latin Extended B,
    Greek and Coptic glyphs Sans Book (by Wesley Transue)
  • differentiated U+2219 from U+22C5 and adjusted affected
    references in Sans and Mono (by Gee Fung Sit 薛至峰)
  • made Hebrew narrower in Sans Bold and Sans Bold Oblique
    (by Denis Jacquerye)
  • added Kurdish and Chuvash letters from Unicode 5.1 Cyrillic
    Extended block (by Wesley Transue)
  • added U+1E9F, U+A644-U+A647, U+A64C-U+A64D, U+A650-U+A651,
    U+A654-U+A655, U+A712U+A716 to Sans (by Gee Fung Sit 薛至峰)
  • added several glyphs to Sans ExtraLight (by Gee Fung Sit 薛至峰)
  • added hinting instructions to U+046A-U+046B, U+0508-U+0509,
    U+050B, U+0512-U+0513 in Sans Book (by Wesley Transue)
  • corrected width of U+027E in Sans Book (by Gee Fung Sit 薛至峰)
  • added U+2C79, U+2C7B-U+2C7D to Sans (by Gee Fung Sit 薛至峰)
  • added a bunch of glyphs+small corrections to Sans Light
    (by Gee Fung Sit 薛至峰)
  • added U+0496, U+0497, U+04B0, U+04B1 (by Andrey V. Panov)
  • updated U+0493, U+049B, U+04B3, U+04B7, U+04F7
    (by Andrey V. Panov)
  • further improvements in extended Cyrillic (by Andrey V. Panov)</changelog>
  <changelog author="mfabian@suse.de" date="1217246400">- update to 2.26.
- changes from 2.25 to 2.26:
  • added glyphs for Cyrillic-B to Sans (by Wesley Transue)
  • added U+0370-U+0371 to Sans (by Wesley Transue)
  • added U+019C, U+01A2-U+01A3, U+01A6, U+01E4-U+01E5,
    U+024C-U+024D, U+0285, U+0290, U+02A0, U+0370-U+0371, U+03F1,
    U+03FC to Sans ExtraLight (by Wesley Transue)
  • added U+20A0-U+20A5, U+20A7-U+20B3, U+2105, U+210D, U+210F,
    U+2115, U+2117, U+2119-U+211A, U+211D, U+2124, U+212E,
    U+2200-U+2204 to Mono (by Heikki Lindroos)
  • added U+01BA and U+01BF to Mono (by Heikki Lindroos)
  • merged OpenType "aalt" feature in Latin in Sans
    (by Denis Jacquerye)
  • added alternative shape for y in Sans (by Denis Jacquerye)
  • added saltillo (U+A78B-U+A78C) to all faces (by James Cloos)
  • changed U+047C-U+047D to references instead of outlines in
    Sans (by Wesley Transue)
  • added Latin letter tresillo U+A72A-U+A72B to Sans
    (by Wesley Transue)
  • added U+A734-U+A737 to Sans (by Wesley Transue)
  • added U+2053 to Serif and fixed it bug:9425 in Sans
    (by Gee Fung Sit 薛至峰)
  • removed problematic hints for U+0423 bug:10025
    (by Gee Fung Sit 薛至峰)
  • added U+27C5-U+27C6 bug:10255 to all faces
    (by Gee Fung Sit 薛至峰)
  • fixed width of U+2016 in Sans Oblique
    (by Gee Fung Sit 薛至峰)
  • added U+2016, U+2032-U+2038, U+2042, U+2045-U+2046,
    U+204B-U+204F, U+2051-U+2052, U+2057 to Serif
    (by Gee Fung Sit 薛至峰)
  • made U+2140 bigger to match other n-ary operators
    (by Gee Fung Sit 薛至峰)
  • added U+0606-U+0607, U+0609-U+060A to Sans
    (by Gee Fung Sit 薛至峰)
  • added U+221B-U+221C to Mono (by Gee Fung Sit 薛至峰)
  • small adjustments to U+221B-U+221C in Sans and Serif
    (by Gee Fung Sit 薛至峰)
  • update U+04B4-U+04B5 in Serif (by Andrey V. Panov)
  • increased max-storage value from maxp table to 153
    (by Andrey V. Panov)
  • added U+0472-U+0473, U+0510-U+0511, U+051A-U+051D,
    U+0606-U+0607, U+0609-U+060A, U+1E26-U+1E27, U+1E54-U+1E55,
    U+1E7C-U+1E7D, U+1E8C-U+1E8D, U+1E90-U+1E91, U+1E97-U+1E99,
    U+1E9F, U+1EAC-U+1EAD, U+1EB6-U+1EB7, U+1EC6-U+1EC7,
    U+1ED8-U+1EDD, U+1EE0-U+1EE3, U+1EE8-U+1EEB, U+1EEE-U+1EF1
    to Mono (by Gee Fung Sit 薛至峰)
  • added locl rules for S/T cedilla for Romanian and Moldavian
    so they get rendered as S/T with comma accent
    (see Redhat bug #455981) (by Ben Laenen)
  • removed ligature rule from Armenian U+0587 bug:16113
    (by Gee Fung Sit 薛至峰)</changelog>
  <changelog author="mfabian@suse.de" date="1227009600">- update to 2.27.
- changes from 2.26 to 2.27:
  • added some of Michael Everson's new Cyrillic glyphs to Sans
    (by Wesley Transue)
  • removed blank glyph at U+05EF from Sans Bold Oblique (by
    Gee Fung Sit)
  • small adjustments to existing tone bars in Sans and Mono
    (by Gee Fung Sit)
  • added U+0372-U+0373, U+0376-U+0377, U+03CF, U+A668-U+A66E,
    U+A708-U+A711, U+A71B-U+A71F to Sans (by Gee Fung Sit)
  • copied U+02E5-U+02E9 over from Sans to fix inconsistencies
    in Serif (by Gee Fung Sit)
  • added U+021C-U+021D, U+0370-U+0371, U+037B-U+037D,
    U+0470-U+0471, U+0510-U+0515, U+051A-U+051D, U+1E9F,
    U+2C64, U+2C6E-U+2C6F, U+2C79, U+2C7C-U+2C7D,
    U+A644-U+A647, U+A650-U+A651, U+A654-U+A657, U+A708-U+A716,
    U+A71B-U+A71F to Serif (by Gee Fung Sit)
  • added U+A708-U+A716, U+A71B-U+A71F to Mono (by Gee Fung
    Sit)
  • added anchors to U+017F (ſ) and fixed U+1E9B (ẛ) in Serif
    (by Gee Fung Sit)
  • made U+0325 smaller in Sans Bold and Serif to match Sans
    Book (by Gee Fung Sit)
  • fixes to U+02F3 (moved up), U+228F-U+2294 (more
    square-like) and U+22CE-U+22CF (stroke width) in Sans (by
    Gee Fung Sit)
  • replaced U+2202 ∂ (Sans and Mono) and U+221D ∝, U+221E ∞
    (Sans) with glyphs from Arev (with small changes) (by Gee
    Fung Sit)
  • added U+22B0-U+22B1, U+22C7, U+22D0-U+22D5 from Arev to
    Sans to complete the block (by Gee Fung Sit)
  • added U+0514-U+0515 to Sans ExtraLight (by Gee Fung Sit)
  • skewed U+A78C in all Oblique/Italic fonts (by Gee Fung Sit)
  • moved U+2215 to U+2044 in Sans and Serif and replaced
    U+2215 with reference to U+002F in all fonts (by Gee Fung
    Sit)
  • added U+2C6E to Mono (by Denis Jacquerye)
  • added U+A782 and U+A783 in Sans (by Wesley Transue)
  • added U+0244, U+024C-024D, U+2C64 in Sans Mono (by Denis
    Jacquerye)
  • modified U+01AE in Sans Mono (by Denis Jacquerye)
  • added U+2C7A to all fonts (by Gee Fung Sit)
  • italicized/small changes to U+2C76 in Serif (Bold) Italic
    (by Gee Fung Sit)
  • improved outlines of U+2C68, U+2C6A, U+2C6C in Serif (Bold)
    Italic (by Gee Fung Sit)
  • rounded U+2C77 at the bottom in Serif (by Gee Fung Sit)
  • added joining behavior for tone letters (U+02E5-U+02E9) in
    Sans (bug #15669) (by Gee Fung Sit)
  • fixed outline of y.alt in Sans Regular (by Denis Jacquerye)
  • changed references of U+1D5A8, U+1D5C5, U+1D5DC, U+1D5F9,
    U+1D610, U+1D62D, U+1D644 and U+1D661 to stylistic
    alternates to have a better distinction (by Gee Fung Sit)
  • hinted I.alt in Sans Regular (by Gee Fung Sit)
  • added U+0487, completing Cyrillic block (by Gee Fung Sit)
  • extended the bar of U+0463 to the right and moved the
    anchor (by Gee Fung Sit)
  • added anchors to glyphs in Cyrillic block (by Gee Fung Sit)
  • added (preliminary) hints to tone letter forms (U+02E5.5,
    U+02E9.1, stem) in Sans Book (by Gee Fung Sit)</changelog>
  <changelog author="mfabian@suse.de" date="1231848000">- update to 2.28.
- changes from 2.27 to 2.28
  • added U+A789, U+A78A in Sans and Sans Mono (by Denis Jacquerye)
  • modified U+02D6, U+02D7, U+02EE in Sans and Sans Mono
    (by Denis Jacquerye)
  • added U+1E9E (German capital ß) to Sans and Serif
    (by Denis Jacquerye)
  • adjusted width of U+01B7-U+01B9 in Serif Italic
    (by Denis Jacquerye)
  • modified U+021C, U+021D in Sans (by Denis Jacquerye)
  • added U+021C, U+021D in Mono (by Denis Jacquerye)
  • added U+F428 (Georgian Nuskhuri "f") in private use area
    (by Besarion Gugushvili)
  • updated Georgian mkhedruli (U+10D0-U+10FA) with new version
    (by Besarion Gugushvili)
  • updated Georgian asomtavruli (U+10A0-U+10C5) with new version
    (by Besarion Gugushvili)
  • added Georgian nuskhuri (U+2D00-U+2D25)
    (by Besarion Gugushvili)
  • added Georgian mtavruli in private use area (U+F400-U+F426)
    (by Besarion Gugushvili)
  • added mark anchors above to Cyrillic U+0430-U+0438,
    U+043A-U+044F, U+0454-U+0455 in Mono (by Ben Laenen)
  • modified/moved up U+0318-U+0319, U+031C-U+031F,
    U+0329-U+032A, U+032C-U+032D, U+0339-U+033B, U+0348 and U+0353
    in Sans to prevent cut-off (by Gee Fung Sit 薛至峰)
  • added U+035A to Sans (by Gee Fung Sit 薛至峰)
  • updated fontconfig files (by Nicolas Mailhot)
  • added U+2032-2037 to Mono (by Denis Jacquerye)
  • added Ogham to Sans ExtraLight (by Gee Fung Sit 薛至峰)
  • added U+2C6F, U+2C79, U+2C7C-2C7D to Mono
    (by Gee Fung Sit 薛至峰)
  • added U+210F to Serif and Sans ExtraLight
    (by Gee Fung Sit 薛至峰)
  • changed U+210F to a more common glyph in Sans and Mono
    (by Gee Fung Sit 薛至峰)</changelog>
  <changelog author="tiwai@suse.de" date="1248696000">- updated to version 2.29:
  * modified U+10FB in Sans to be a mirror image of U+2056
  * added U+2B1F, U+2B24, U+2B53, U+2B54 in Sans
  * fixed TUR opentype language tag to TRK in Serif (bug 19825)
  * early implementation of Abkhaz letter U+0524-U+0525 in Sans
  * flipped U+1D538 in Sans
  * added U+26B3-U+26B8, U+1D7D8-U+1D7E1 in Sans
  * corrected U+1D7A9 in Sans Bold Oblique
  * Fixed U+0649 to be dual-joining in Sans Mono
  * Remove unnecessary 'isol' feature from Sans Mono
  * Remove 'cmap' mappings for U+066E, U+066F, U+067C, U+067D, U+0681,
  U+0682, U+0685, U+0692, U+06A1, U+06B5, U+06BA, U+06C6, U+06CE,
  and U+06D5 in Sans Mono (bug 20323)
  * add half brackets (U+2E22 - U+2E25, by Steve Tinney)</changelog>
  <changelog author="coolo@novell.com" date="1266840000">- updated to version 2.30:
  * added U+0462-U+0463 to Mono
  * corrected U+1E53 in Serif
  * added U+1E4C-U+1E4D to Mono and Serif
  * added U+1E78-U+1E79 to Mono
  * fixed missing diacritics in Latin Extended Additional in Sans ExtraLight
  * fixed anchors on U+1E78 in Serif
  * added U+1DC4-U+1DC9 to Serif
  * renamed above-mark to above-mark in Serif-Italic
  * added U+1DC4-U+1DC9 to context class for dotless substitution
  * changed Doubleacute to Doublegrave in Sans ExtraLight
  * removed redundant reference in U+01FB in Sans Oblique
  * added U+A726-U+A727 to Mono
  * changed U+04BE and U+04BF according to recommedations of Sasha Ankwab in Sans
  * remove "Symbol Charset" from set of codepages in Sans</changelog>
  <changelog author="tiwai@suse.de" date="1270728000">- removed unnecessary buildrequires for too old distros</changelog>
  <changelog author="tiwai@suse.de" date="1282651200">- updated to version 2.32:
  * added to Sans: Latin small letter p with stroke (U+1D7D),
  Latin capital letter p with stroke through descender (U+A750),
  Latin small letter p with stroke through descender (U+A751),
  Latin capital letter thorn with stroke (U+A764),
  Latin small letter thorn with stroke (U+A765),
  Latin capital letter thorn with stroke through descender (U+A766),
  Latin small letter thorn with stroke through descender (U+A767),
  Latin capital letter q with stroke through descender (U+A756),
  Latin small letter q with stroke through descender (U+A757),
  Latin capital letter p with flourish (U+A752),
  Latin small letter p with flourish (U+A753)
  * add new Indian rupee symbol (U+20B9) to Sans, Serif and Mono
  * Sans: adjusted U+0E3F, U+20AB, U+20AD-U+20AE, U+20B1, U+20B5, U+20B8
  to have them take up the same width as digits
  * added U+23E8 to Sans
  * fixed numerous bugs (#22579, #28189, #28977, N'Ko in Windows, fixed U+FB4F,
  anchors for U+0332-U+0333, made extensions in Misc. Technical connect,
  and other small fixes)
  * added looptail g as stylistic variant to Serif
  * added the remaining precomposed characters in Latin Extended Additional
  in Serif
  * added Georgian Mkhedruli (U+10D0-U+10FC) to Sans ExtraLight
  * fix spacing in hinting of U+042E in Mono
  * replaced U+2650 and minor changes to U+2640-U+2642, U+2699,
  U+26A2-U+26A5, U+26B2-U+26B5, U+26B8 in Sans
  * added U+1E9C-U+1E9D, U+1EFA-U+1EFB, U+2028-U+2029, U+20B8, U+2150-U+2152,
  U+2189, U+26C0-U+26C3, U+A722-U+A725, U+1F030-U+1F093 to Sans
  * added U+1E9C-U+1E9E, U+1EFA-U+1EFB, U+2028-U+2029, U+20B8, U+2181-U+2182,
  U+2185 U+A722-U+A725, to Sans ExtraLight
  * added U+20B8, U+22A2-U+22A5, U+A722-U+A725 to Mono
  * added U+02CD, U+01BF, U+01F7, U+0222-U+0223, U+0243-U+0244, U+0246-U+024F,
  U+2150-U+2152, U+2189, U+239B-U+23AD and U+A73D to Serif
- updated to version 2.31:
  * Fixed bug where Serif Condensed Italic wouldn't get proper subfamily tags
  * Added math operators U+2234-U+2237 to Mono
  * Removed buggy instructions of U+032D
  * added U+2C70, U+2C7E, U+2C7F to Sans and Sans Mono
  * added U+2C7D to Sans Mono
  * added U+2C6D, U+2C70-2C73, U+2C7E-2C7F to Serif
  * added extremas to alpha U+03B1 in Serif-Italic
  * added U+4A4, U+4A5 to Mono
  * added Arabic letters U+0657, U+0670, U+0688-U+0690, U+0693-U+0694,
  U+0696-U+0697, U+0699-U+06A0, U+06A2-U+06A3, U+06A5, U+06A7-U+06A8,
  U+06AA-U+06AE, U+06B0-U+06B4, U+06B6-U+06B9, U+06BB-U+06BE and their
  contextual forms to Sans
  * added U+A78D LATIN CAPITAL LETTER TURNED H for coming Unicode 6.0</changelog>
  <changelog author="vlado.paskov@gmail.com" date="1308139200">- update to version 2.33
  * added Old Italic block to Sans
  * added U+051E, U+051F to Sans
  * added U+01BA, U+0372-U+0373, U+0376-U+0377, U+03CF, U+1D00-U+1D01,
    U+1D03-U+1D07, U+1D0A-U+1D13, U+1D15, U+1D18-U+1D1C, U+1D20-U+1D2B,
    U+1D2F, U+1D3D, U+1D5C-U+1D61, U+1D66-U+1D6B, U+1DB8, U+1E9C-U+1E9D,
    U+1EFA-U+1EFB, U+2C60-U+2C61, U+2C63, U+A726-U+A73C, U+A73E-U+A73F,
    U+A746-U+A747, U+A74A-U+A74B, U+A74E+U+A74F, U+A768-U+A769,
    U+A77B-U+A77C, U+A780-U+A787, U+A790-U+A791, U+A7FA-U+A7FF to Serif
  * added alternate forms to U+014A and U+01B7 in Serif
  * typographical improvements to U+0166-U+0167, U+0197, U+01B5-U+01B6,
    U+01BB, U+0222-U+0223, U+023D, U+0250-U+0252, U+026E, U+0274, U+028F,
    U+029F, U+02A3-U+02A5, U+02AB, U+03FE-U+03FF, U+1D02, U+1D14,
    U+1D1D-U+1D1F, U+1D3B, U+1D43-U+1D46, U+1D59, U+1D9B, U+2C71, U+2C73 in Serif
  * fixed bugs #31762 and #34700 plus other small fixes
    (wrong direction, duplicate points, etc.) for Sans and Serif
  * added U+204B to Mono
  * added U+26E2 to Sans
  * added Playing Cards block (U+1F0A0-U+1F0DF) to Sans
  * emoticons in Sans: replace U+2639-U+263B with better versions,
    add U+1F601-U+1F610, U+1F612-U+1F614, U+1F616, U+1F618,
    U+1F61A, U+1F61C-U+1F61E, U+1F620-U+1F624, U+1F625,
    U+1F628-U+1F62B, U+1F62D, U+1F630-U+1F633, U+1F635-U+1F640
  * added U+A78E, U+A790-U+A791 to Sans and Mono
  * added U+A7FA to Sans
  * subscripts: added U+2095-U+209C to Sans, Serif and Mono,
    adjusted U+1D49-U+1D4A in Sans and Mono
  * added U+0243 to Mono
  * adjusted U+0307 to match dot of i, replaced dotaccent U+02D9 with
    U+0307 in most dependencies in Sans
  * adjusted anchors of f and added them to long s in Sans
  * added anchors to precomposed dependencies of D and d
  * added debug glyphs U+F002 and U+F003 which will show current point size
  * use correct version for Serbian italic be
  * added pictograms U+1F42D-U+1F42E, U+1F431, U+1F435
  * improved Hebrew in Sans
  * improved Armenian in Sans, and added Armenian in Serif and Mono
  * remove "locl" feature for Romanian for S/T/s/t with cedilla/comma accent
  * replace wrong "dflt" script tag in Mono with "DFLT"</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile
  (cf. packaging guidelines)</changelog>
  <changelog author="toms@suse.de" date="1324468800">- Renamed dejavu -&gt; dejavu-fonts according to
  openSUSE packaging guidelines and FATE#313035
  Adjusted Obsoletes and Provides accordingly</changelog>
  <changelog author="cfarrell@suse.com" date="1325592000">- license update: SUSE-Permissive
  Use this SPDX proprietary extension tag until upstream SPDX adopts a
  permissive category</changelog>
  <changelog author="pgajdos@suse.com" date="1337256000">- call spec-cleaner</changelog>
  <changelog author="pgajdos@suse.cz" date="1341403200">- amend spec file to reflect new font packaging scheme
  (see openFATE#313536);</changelog>
  <changelog author="mmeister@suse.com" date="1363953600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1377518400">- Update to 2.34:
  * This release includes the addition of Lisu, an update of Georgian,
    the addition of some symbols and the addition and modification
    of several Latin characters.
  * Sans, SansMono, Serif: unlinked references of U+2596 for bug 50848
  * Sans, SansMono, Serif: added U+A7AA
  * Sans, SansMono, Serif: added U+2A6A, U+2A6B, U+2E1F based on U+223B
  * Sans, Serif: removed superfluous ligature definitions for
    ffl und ffi (bug 55363)
  * Sans, Serif: swapped glyphs for U+25D2 and U+25D3 (bug 55197)
  * Sans, Serif: added U+A740, U+A741
  * Sans: added U+20BA Turkish Lira sign
  * Sans: replaced Georgian Asomtavruli U+10A0-U+10C5 and Mkhedruli
    U+10D0-U+10FC with new version
  * Sans: added Georgian Nuskhuri U+2D00-U+U+2D25
  * Sans: added Private Use Area glyphs for Georgian U+F400-U+F441
  * Sans: tweaked U+0250, U+0254
  * Sans: adjusted hinting of U+032C-U+032D, avoiding problem on
    some platforms
  * Sans: added U+A7A0-U+A7A9, pre-1921 Latvian letters with
    oblique stroke
  * Sans: added anchors to U+2C6D
  * Sans: added cedilla anchor to some Latin characters
  * Sans: added ogonek anchor to A, E, O, U, Y
  * Sans: adjusted ogonek reference in U+0172, U+01EA, U+01EB
  * Sans: added anchors to U+0104, U+0105
  * Sans: added U+1F600, U+1F611, U+1F615, U+1F617, U+1F619,
    U+1F61B, U+1F61F, U+1F626-U+1F627, U+1F62E-U+1F62F, U+1F634
  * Sans: replaced U+27A1 with mirror image of U+2B05 for consistency
  * Sans: copied hints from U+14A3, U+14A7 to U+2142-U+2143
  * Sans: added Lisu block
  * Sans: typographical improvements to U+0166-U+0167, U+02A6, U+02AA
  * Sans: slightly change hinting of "2" to fix bug 37395
  * Sans: fixed U+1444 which had wrong top dot that shouldn't be there
  * Sans: added anchors for diacritics to U+01B7, U+01B8, U+01B9, U+0292
  * Sans: added U+01B7, U+01B8 to context for case diacritics above
  * SansMono: fixed U+0574
  * SansMono: added U+2016, U+27C2
  * SansMono: added U+02CE, U+02CF
  * SansMono: added U+2148, U+27E6-U+27E7, U+2B05-U+2B0D, U+1D55A
  * Serif: added U+02BA, U+02C2-U+02C5, U+02CA-U+02CB, U+02D7, U+02F3,
    U+02F7, U+046C-U+046D, U+0476-U+0477, U+1D7C-U+1D7F, U+20B8, U+2132,
    U+214E, U+2C7B to Serif
  * Serif: typographic improvements to U+0194, U+01B1, U+0263, U+028A,
    U+02A6, U+02A8, U+02AA, U+02E0, U+03DC, U+1D3B, U+1D7B
  * Serif: added small cap versions of q, x (in italic styles), delta,
    theta, xi, sigma, phi, omega, not wired in yet
  * Serif: added anchors to U+0234-U+0236
  * Serif: added U+02EC, U+02EF, U+02F0, U+0360</changelog>
  <changelog author="cornelis@solcon.nl" date="1437048000">- Update to 2.35:
  * For details see: http://dejavu-fonts.org/wiki/Changelog</changelog>
  <changelog author="sflees@suse.de" date="1470052800">- Update to 2.37
  * Changes from 2.36 to 2.37
  * Fix issue with empty glyphs in condensed typefaces in the released source files.
  * Changes from 2.35 to 2.36
  * Math: added DejaVu Math Tex Gyre by B. Jackowski, P. Strzelczyk and P. Pianowski (on behalf of TeX users groups)
  * Sans: removed dot of U+06BA in all forms
  * Sans: fixed position of three dots of U+06BD in init and medi forms (by Denis Jacquerye)
  * Sans: corrected direction of contours in U+05E7 (by Lior Halphon]])
  * Sans: added U+1F643 (by Olleg Samoylov)
  * Serif: moved up U+0360-0361 (by Gee Fung Sit 薛至峰]])
  * Serif: increased spacing of Roman numerals U+2161-2163, U+2165-2168, U+216A-216B (by Gee Fung Sit 薛至峰)
  * Serif: fixed anchor position of U+00E6 (by Gee Fung Sit 薛至峰)
  * Sans: fixed vertical position of U+20BA (by Gee Fung Sit 薛至峰)
  * Sans, Serif: fixed glyph height of Block Elements (by Gee Fung Sit 薛至峰)
  * Sans, Serif: added U+A698-A699 (by Gee Fung Sit 薛至峰)
  * Sans, Mono, Serif: added U+037F (by Gee Fung Sit 薛至峰)
  * Mono: added U+0376-0377, U+037B-037D (by Gee Fung Sit 薛至峰)
  * Serif: removed duplicate point from U+1D05 (by Gee Fung Sit 薛至峰)
  * Mono: added U+20BA, U+20BD (by Gee Fung Sit 薛至峰)
  * Sans: Added moon symbols U+1F311-1F318 (by Ben Laenen)</changelog>
  <changelog author="pgajdos@suse.com" date="1762344000">- use %license tag [bsc#1252142]</changelog>
</package>
<package pkgid="8223fa1def74c00ac4a778f6838ab929e70c1eaec7c9574c4a76009951cbc8ff" name="device-mapper" arch="x86_64">
  <version epoch="0" ver="2.03.24_1.02.198" rel="150700.7.3.3"/>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6339)
  * 2.03.22:
  * Fix pv_major/pv_minor report field types so they are integers, not strings.
  * Add lvmdevices --delnotfound to delete entries for missing devices.
  * Always use cachepool name for metadata backup LV for lvconvert --repair.
  * Make metadata backup LVs read-only after pool's lvconvert --repair.
  * Handle 'lvextend --usepolicies' for pools for all activation variants.
  * Fix memleak in vgchange autoactivation setup.
  * Support conversion from thick to fully provisioned thin LV.
  * Cache/Thin-pool can use error and zero volumes for testing.
  * Individual thin volume can be cached, but cannot take snapshot.
  * internal support for handling error and zero target (for testing).
  * COW above trimmed maximal size is does not return error.
  * Add lvm.conf thin_restore and cache_restore settings.
  * Handle multiple mounts while resizing volume with a FS.
  * Handle leading/trailing spaces in sys_wwid and sys_serial used by deivce_id.
  * Fix failing -S|--select for non-reporting cmds if using LV info/status fields.
  * Allow snapshots of raid+integrity LV.
  * Fix multisegment RAID1 allocator to prevent using single disk for more legs.
  * 2.03.21:
  * Allow (write)cache over raid+integrity LV.
  * 2.03.20:
  * Fix segfault if using -S|--select with log/report_command_log=1 setting.
  * 2.03.19:
  * Do not reset SYSTEMD_READY variable in udev for PVs on MD and loop devices.
  * Ensure udev is processing origin LV before its thick snapshots LVs.
  * 2.03.18:
  * Fix warning for thin pool overprovisioning on lvextend.
  * Add support for writecache metadata_only and pause_writeback settings.
  * Fix missing error messages in lvmdbusd.
  * 2.03.17:
  * Add new options (--fs, --fsmode) for FS handling when resizing LVs (btrfs is unsupported).
  * Fix 'lvremove -S|--select LV' to not also remove its historical LV right away.
  * Fix lv_active field type to binary so --select and --binary applies properly.
  * Error out in lvm shell if using a cmd argument not supported in the shell.
  * Fix lvm shell's lastlog command to report previous pre-command failures.
  * Add --valuesonly option to lvmconfig to print only values without keys.
  * Add json_std output format for more JSON standard compliant version of output.
  * Fix many corner cases in device_id, including handling of S/N duplicates.
  * Fix various issues in lvmdbusd.
- device-mapper version upgrade to 1.02.196
  * Improve parallel creation of /dev/mapper/control device node.
  * Import previous ID_FS_* udev records in 13-dm-disk.rules for suspended DM dev.
  * Remove NAME="mapper/control" rule from 10-dm.rules to avoid udev warnings.
  * Improve 'dmsetup create' without given table line with new kernels.
  * Add DM_REPORT_GROUP_JSON_STD for more JSON standard compliant output format.
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
  <changelog author="heming.zhao@suse.com" date="1716724800">- Update lvm2 from LVM2.2.03.22 to LVM2.2.03.24
  * ** WHATS_NEW from 2.03.22 to 2.03.24 ***
  Version 2.03.24 - 16th May 2024
  ===============================
    Lvconvert supports VDO options for thin-pool with vdo conversion.
    Improve placement to .data.rel.ro and .rodata sections.
    Fix support for -y and -W when creating thinpool with vdo.
    Bettter support for runtime valgrind detection.
    Allow command interruption when communicating with dmeventd.
    Fix resize of VDO volume used for thin pool data volume.
    Use -Wl,-z,now and -Wl,--as-needed for compilation by default.
    Require 3.7 as minimal version for sanlock.
    Share code for closing opened desriptors on program startup.
    Fix memleak in lvmcache.
    Add configure --with-default-event-activation=ON setting.
    Fix return value from reporter function when hitting internal error.
    Skip checking of pools for lvremove and vgremove commands.
    VDO modprobes dm-vdo for 6.9 kernel and kvdo for older kernel version.
    Fix lvs reporting for VDO volumes with new upstream kernel driver.
    Don't import DM_UDEV_DISABLE_OTHER_RULES_FLAG in LVM rules, DM rules cover it.
    Fix table line generation for cache snapshots using cachevol.
    Enhance lvconvert support for external origins stacking.
    When swapping LV names also swap properties like hostname, time and data.
    Fix removal of stacked external origins.
    Lock filesystem when converting volume to read-only external origin.
    Support external origin between different thin-pool.
    Improve validation of acceptable volumes for external origins.
    Reduce amount of preloaded devices for complex device trees.
    Avoid logging problems from monitoring snapshots with inactive origins.
    Check for cache policy module presence in kernel's builtin modules file.
    Add configure --with-modulesdir to select kernel modules directory.
    Support creation of thin-pool with VDO use for its data volume.
  Version 2.03.23 - 21st November 2023
  ====================================
    Set the first lv_attr flag for raid integrity images to i or I.
    Add -A option for pvs and pvscan to show PVs outside devices file.
    Improve searched_devnames temp file usage to prevent redundant scanning.
    Change default search_for_devnames from auto to all.
    Add lvmdevices --refresh to search for missing PVIDs on all devices.
    Add comparison between old and new entries in lvmdevices --check.
    Fix device_id matching order - match non-devname first.
    Fix "lvconvert -m 0" when there is other than first in-sync leg.
    Use system.devices as default for dmeventd when dmeventd.devices is undefined.
    Accept WWIDs containing QEMU HARDDISK for device_id.
    Improve handling of non-standard WWID prefixes used for device_id.
    Configure automatically enables cmdlib for dmeventd and notify-dbus for dbus.
    Fix hint calculation for pools with zero or error segment.
    Configure supports --disable-shared to build only static binaries.
    Configure supports --without-{blkid|systemd|udev} for easier static build.
    Refresh device ids if the system changes.
    Fix pvmove when specifying raid components as moved LVs.
    Enhance error detection for lvm_import_vdo.
    Support PV lists with thin lvconvert.
    Fix support for lvm_import_vdo with SCSI VDO volumes.
    Fix locking issue leading to hanging concurrent vgchange --refresh.
    Recognize lvm.conf report/headings=2 for full column names in report headings.
    Add --headings none|abbrev|full cmd line option to set report headings type.
    Fix conversion to thin pool using lvmlockd.
    Fix conversion from thick into thin volume using lvmlockd.
    Require writable LV for conversion to vdo pool.
    Fix return value from lvconvert integrity remove.
    Preserve UUID for pool metadata spare.
    Preserve UUID for swapped pool metadata.
    Rewrite validation of device name entries used as device_id.
  * ** WHATS_NEW_DM from 1.02.196 to 1.02.198 ***
  Version 1.02.198 - 16th May 2024
  ================================
    Fix static only compilation of libdevmapper.a and dmsetup tool.
    Use better code for closing opened descriptors when starting dmeventd.
    Correct dmeventd -R for systemd environment.
    Restart of dmeventd -R checks pid file to detect running dmeventd first.
    Query with dmeventd -i quickly ends when there is no running dmeventd.
    Enhance dm_get_status_raid to handle mismatching status or reported legs.
    Create /dev/disk/by-label symlinks for DM devs that have crypto as next layer.
    Persist udev db for DM devs on cleanup used in initrd to rootfs transition.
    Process synthetic udev events other than 'add/change' as 'change' events.
    Increase DM_UDEV_RULES_VSN to 3 to indicate changed udev rules.
    Rename DM_NOSCAN to .DM_NOSCAN so it's not stored in udev db.
    Rename DM_SUSPENDED to .DM_SUSPENDED so it's not stored in udev db.
    Do not import DM_UDEV_DISABLE_OTHER_RULES_FLAG from db in 10-dm-disk.rules.
    Test DISK_RO after importing properties from db in 10-dm.rules.
    Also import ID_FS_TYPE in 13-dm-disk.rules from db if needed.
  Version 1.02.197 - 21st November 2023
  =====================================
    Fix invalid JSON report if using DM_REPORT_OUTPUT_MULTIPLE_TIMES and selection.
    Propagate ioctl errno from dm_task_run when creating new table line.
    Add support for group aliases in dmstats.
    Add support for exit-on file for dmeventd to reduce shutdown delays.
    Add configure option --with-dmeventd-exit-on-path to specify default path.
    Add dmsetup --headings none|abbrev|full to set report headings type.
    Add DM_REPORT_OUTPUT_FIELD_IDS_IN_HEADINGS to provide alternative headings.
- Drop patches that have been merged into upstream
  - 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  - 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  - 0003-lvconvert-fix-regresion-from-integrity-check.patch
  - 0004-gcc-cleanup-warnings.patch
  - 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  - 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  - 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  - 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  - 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  - 0010-lvmlockd-client-mutex-ordering.patch
  - 0011-filesystem-move-stat-after-open-check.patch
  - 0012-tests-check-for-writecache.patch
  - 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  - 0014-gcc-fix-warnings-for-x32-architecture.patch
  - 0015-gcc-warning-missing-braces-around-initializer.patch
  - 0016-test-improve-aux-teardown.patch
  - 0017-tests-aux-try-with-extra-sleep.patch
  - 0018-tests-aux-using-singl-lvmconf-call.patch
  - 0019-tests-missing-to-check-for-writecache-support.patch
  - 0020-tests-pvmove-large-disk-area.patch
  - 0021-tests-enforce-full-fs-check.patch
  - 0022-tests-update-for-work-in-fake-dev-environment.patch
  - 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  - 0024-tests-better-slowdown.patch
- Update patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch</changelog>
  <changelog author="glass.su@suse.com" date="1729771200">- add rpm dependency in spec file for aligning new DM udev rules (bsc#1225783 bsc#1229518 bsc#1232063)
  * update lvm2.spec for multipath-tools and udev</changelog>
  <changelog author="heming.zhao@suse.com" date="1740052800">- system with LVM on iSCSI hangs on shutdown because blk-availability.service is not enabled (bsc#1236788)
  * update lvm2.spec
  - remove blk-availability.service from %postun
  - add new Provides 'dont_stop_blk_availability_service'</changelog>
  <changelog author="heming.zhao@suse.com" date="1741003200">- Fixes the lvm2-testsuite failure to run on SUSE kernel (bsc#1238213)
  * Add upstream patch
    + tests-fix-wrong-pos-with-CONFIG_PRINTK_CALLER.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1741348800">- Fixes the lvm2-testsuite case fsadm-btrfs.sh (bsc#1238857)
  * Update SUSE special patch
    + fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1744718400">- LVM filter behaves unexpectedly for MPIO devices in SLES15SP5 (bsc#1216938)
  * set lvm.conf devices.multipath_wwids_file=""</changelog>
  <changelog author="glass.su@suse.com" date="1753876800">- L3: systemd fails to start lvmlockd with sanlock running (bsc#1246691)
  * Add upstream patches for sd_notify configure option
    + bug-1246691_01-configure.ac-build-lvmlockd-with-notify.patch
    + bug-1246691_02-configure-autoreconf.patch
    + bug-1246691_03-configure.ac-add-option-disable-enable-sd-notify.patch
    + bug-1246691_04-lvmlockd-utilize-SD_NOTIFY_SUPPORT.patch
    + bug-1246691_05-configure-autoreconf.patch
  * Update lvm2.spec
    + add pkgconfig(systemd) for lvmlockd build
    + enable configure option '--enable-sd-notify' for lvmlockd</changelog>
</package>
<package pkgid="51811e7afd5fb865e62feb00a6c061bd990e34fbf60ba528887cf23040ed688b" name="device-mapper" arch="x86_64">
  <version epoch="0" ver="2.03.24_1.02.198" rel="150700.7.6.1"/>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6339)
  * 2.03.22:
  * Fix pv_major/pv_minor report field types so they are integers, not strings.
  * Add lvmdevices --delnotfound to delete entries for missing devices.
  * Always use cachepool name for metadata backup LV for lvconvert --repair.
  * Make metadata backup LVs read-only after pool's lvconvert --repair.
  * Handle 'lvextend --usepolicies' for pools for all activation variants.
  * Fix memleak in vgchange autoactivation setup.
  * Support conversion from thick to fully provisioned thin LV.
  * Cache/Thin-pool can use error and zero volumes for testing.
  * Individual thin volume can be cached, but cannot take snapshot.
  * internal support for handling error and zero target (for testing).
  * COW above trimmed maximal size is does not return error.
  * Add lvm.conf thin_restore and cache_restore settings.
  * Handle multiple mounts while resizing volume with a FS.
  * Handle leading/trailing spaces in sys_wwid and sys_serial used by deivce_id.
  * Fix failing -S|--select for non-reporting cmds if using LV info/status fields.
  * Allow snapshots of raid+integrity LV.
  * Fix multisegment RAID1 allocator to prevent using single disk for more legs.
  * 2.03.21:
  * Allow (write)cache over raid+integrity LV.
  * 2.03.20:
  * Fix segfault if using -S|--select with log/report_command_log=1 setting.
  * 2.03.19:
  * Do not reset SYSTEMD_READY variable in udev for PVs on MD and loop devices.
  * Ensure udev is processing origin LV before its thick snapshots LVs.
  * 2.03.18:
  * Fix warning for thin pool overprovisioning on lvextend.
  * Add support for writecache metadata_only and pause_writeback settings.
  * Fix missing error messages in lvmdbusd.
  * 2.03.17:
  * Add new options (--fs, --fsmode) for FS handling when resizing LVs (btrfs is unsupported).
  * Fix 'lvremove -S|--select LV' to not also remove its historical LV right away.
  * Fix lv_active field type to binary so --select and --binary applies properly.
  * Error out in lvm shell if using a cmd argument not supported in the shell.
  * Fix lvm shell's lastlog command to report previous pre-command failures.
  * Add --valuesonly option to lvmconfig to print only values without keys.
  * Add json_std output format for more JSON standard compliant version of output.
  * Fix many corner cases in device_id, including handling of S/N duplicates.
  * Fix various issues in lvmdbusd.
- device-mapper version upgrade to 1.02.196
  * Improve parallel creation of /dev/mapper/control device node.
  * Import previous ID_FS_* udev records in 13-dm-disk.rules for suspended DM dev.
  * Remove NAME="mapper/control" rule from 10-dm.rules to avoid udev warnings.
  * Improve 'dmsetup create' without given table line with new kernels.
  * Add DM_REPORT_GROUP_JSON_STD for more JSON standard compliant output format.
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
  <changelog author="heming.zhao@suse.com" date="1716724800">- Update lvm2 from LVM2.2.03.22 to LVM2.2.03.24
  * ** WHATS_NEW from 2.03.22 to 2.03.24 ***
  Version 2.03.24 - 16th May 2024
  ===============================
    Lvconvert supports VDO options for thin-pool with vdo conversion.
    Improve placement to .data.rel.ro and .rodata sections.
    Fix support for -y and -W when creating thinpool with vdo.
    Bettter support for runtime valgrind detection.
    Allow command interruption when communicating with dmeventd.
    Fix resize of VDO volume used for thin pool data volume.
    Use -Wl,-z,now and -Wl,--as-needed for compilation by default.
    Require 3.7 as minimal version for sanlock.
    Share code for closing opened desriptors on program startup.
    Fix memleak in lvmcache.
    Add configure --with-default-event-activation=ON setting.
    Fix return value from reporter function when hitting internal error.
    Skip checking of pools for lvremove and vgremove commands.
    VDO modprobes dm-vdo for 6.9 kernel and kvdo for older kernel version.
    Fix lvs reporting for VDO volumes with new upstream kernel driver.
    Don't import DM_UDEV_DISABLE_OTHER_RULES_FLAG in LVM rules, DM rules cover it.
    Fix table line generation for cache snapshots using cachevol.
    Enhance lvconvert support for external origins stacking.
    When swapping LV names also swap properties like hostname, time and data.
    Fix removal of stacked external origins.
    Lock filesystem when converting volume to read-only external origin.
    Support external origin between different thin-pool.
    Improve validation of acceptable volumes for external origins.
    Reduce amount of preloaded devices for complex device trees.
    Avoid logging problems from monitoring snapshots with inactive origins.
    Check for cache policy module presence in kernel's builtin modules file.
    Add configure --with-modulesdir to select kernel modules directory.
    Support creation of thin-pool with VDO use for its data volume.
  Version 2.03.23 - 21st November 2023
  ====================================
    Set the first lv_attr flag for raid integrity images to i or I.
    Add -A option for pvs and pvscan to show PVs outside devices file.
    Improve searched_devnames temp file usage to prevent redundant scanning.
    Change default search_for_devnames from auto to all.
    Add lvmdevices --refresh to search for missing PVIDs on all devices.
    Add comparison between old and new entries in lvmdevices --check.
    Fix device_id matching order - match non-devname first.
    Fix "lvconvert -m 0" when there is other than first in-sync leg.
    Use system.devices as default for dmeventd when dmeventd.devices is undefined.
    Accept WWIDs containing QEMU HARDDISK for device_id.
    Improve handling of non-standard WWID prefixes used for device_id.
    Configure automatically enables cmdlib for dmeventd and notify-dbus for dbus.
    Fix hint calculation for pools with zero or error segment.
    Configure supports --disable-shared to build only static binaries.
    Configure supports --without-{blkid|systemd|udev} for easier static build.
    Refresh device ids if the system changes.
    Fix pvmove when specifying raid components as moved LVs.
    Enhance error detection for lvm_import_vdo.
    Support PV lists with thin lvconvert.
    Fix support for lvm_import_vdo with SCSI VDO volumes.
    Fix locking issue leading to hanging concurrent vgchange --refresh.
    Recognize lvm.conf report/headings=2 for full column names in report headings.
    Add --headings none|abbrev|full cmd line option to set report headings type.
    Fix conversion to thin pool using lvmlockd.
    Fix conversion from thick into thin volume using lvmlockd.
    Require writable LV for conversion to vdo pool.
    Fix return value from lvconvert integrity remove.
    Preserve UUID for pool metadata spare.
    Preserve UUID for swapped pool metadata.
    Rewrite validation of device name entries used as device_id.
  * ** WHATS_NEW_DM from 1.02.196 to 1.02.198 ***
  Version 1.02.198 - 16th May 2024
  ================================
    Fix static only compilation of libdevmapper.a and dmsetup tool.
    Use better code for closing opened descriptors when starting dmeventd.
    Correct dmeventd -R for systemd environment.
    Restart of dmeventd -R checks pid file to detect running dmeventd first.
    Query with dmeventd -i quickly ends when there is no running dmeventd.
    Enhance dm_get_status_raid to handle mismatching status or reported legs.
    Create /dev/disk/by-label symlinks for DM devs that have crypto as next layer.
    Persist udev db for DM devs on cleanup used in initrd to rootfs transition.
    Process synthetic udev events other than 'add/change' as 'change' events.
    Increase DM_UDEV_RULES_VSN to 3 to indicate changed udev rules.
    Rename DM_NOSCAN to .DM_NOSCAN so it's not stored in udev db.
    Rename DM_SUSPENDED to .DM_SUSPENDED so it's not stored in udev db.
    Do not import DM_UDEV_DISABLE_OTHER_RULES_FLAG from db in 10-dm-disk.rules.
    Test DISK_RO after importing properties from db in 10-dm.rules.
    Also import ID_FS_TYPE in 13-dm-disk.rules from db if needed.
  Version 1.02.197 - 21st November 2023
  =====================================
    Fix invalid JSON report if using DM_REPORT_OUTPUT_MULTIPLE_TIMES and selection.
    Propagate ioctl errno from dm_task_run when creating new table line.
    Add support for group aliases in dmstats.
    Add support for exit-on file for dmeventd to reduce shutdown delays.
    Add configure option --with-dmeventd-exit-on-path to specify default path.
    Add dmsetup --headings none|abbrev|full to set report headings type.
    Add DM_REPORT_OUTPUT_FIELD_IDS_IN_HEADINGS to provide alternative headings.
- Drop patches that have been merged into upstream
  - 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  - 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  - 0003-lvconvert-fix-regresion-from-integrity-check.patch
  - 0004-gcc-cleanup-warnings.patch
  - 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  - 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  - 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  - 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  - 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  - 0010-lvmlockd-client-mutex-ordering.patch
  - 0011-filesystem-move-stat-after-open-check.patch
  - 0012-tests-check-for-writecache.patch
  - 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  - 0014-gcc-fix-warnings-for-x32-architecture.patch
  - 0015-gcc-warning-missing-braces-around-initializer.patch
  - 0016-test-improve-aux-teardown.patch
  - 0017-tests-aux-try-with-extra-sleep.patch
  - 0018-tests-aux-using-singl-lvmconf-call.patch
  - 0019-tests-missing-to-check-for-writecache-support.patch
  - 0020-tests-pvmove-large-disk-area.patch
  - 0021-tests-enforce-full-fs-check.patch
  - 0022-tests-update-for-work-in-fake-dev-environment.patch
  - 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  - 0024-tests-better-slowdown.patch
- Update patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch</changelog>
  <changelog author="glass.su@suse.com" date="1729771200">- add rpm dependency in spec file for aligning new DM udev rules (bsc#1225783 bsc#1229518 bsc#1232063)
  * update lvm2.spec for multipath-tools and udev</changelog>
  <changelog author="heming.zhao@suse.com" date="1740052800">- system with LVM on iSCSI hangs on shutdown because blk-availability.service is not enabled (bsc#1236788)
  * update lvm2.spec
  - remove blk-availability.service from %postun
  - add new Provides 'dont_stop_blk_availability_service'</changelog>
  <changelog author="heming.zhao@suse.com" date="1741003200">- Fixes the lvm2-testsuite failure to run on SUSE kernel (bsc#1238213)
  * Add upstream patch
    + tests-fix-wrong-pos-with-CONFIG_PRINTK_CALLER.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1741348800">- Fixes the lvm2-testsuite case fsadm-btrfs.sh (bsc#1238857)
  * Update SUSE special patch
    + fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1744718400">- LVM filter behaves unexpectedly for MPIO devices in SLES15SP5 (bsc#1216938)
  * set lvm.conf devices.multipath_wwids_file=""</changelog>
  <changelog author="glass.su@suse.com" date="1753876800">- L3: systemd fails to start lvmlockd with sanlock running (bsc#1246691)
  * Add upstream patches for sd_notify configure option
    + bug-1246691_01-configure.ac-build-lvmlockd-with-notify.patch
    + bug-1246691_02-configure-autoreconf.patch
    + bug-1246691_03-configure.ac-add-option-disable-enable-sd-notify.patch
    + bug-1246691_04-lvmlockd-utilize-SD_NOTIFY_SUPPORT.patch
    + bug-1246691_05-configure-autoreconf.patch
  * Update lvm2.spec
    + add pkgconfig(systemd) for lvmlockd build
    + enable configure option '--enable-sd-notify' for lvmlockd</changelog>
  <changelog author="glass.su@suse.com" date="1770724800">- L3: LVM_SUPPRESS_FD_WARNINGS is no longer effective (bsc#1257661)
  * Add upstream patch
    + bug-1257661-libdaemon-fix-suppressing-stray-fd-warnings.patch</changelog>
</package>
<package pkgid="dab4c703ad294f1de7ca6cdec2fa8ae18036a2aa1759ba593074b94bab1e921f" name="device-mapper-devel" arch="x86_64">
  <version epoch="0" ver="2.03.24_1.02.198" rel="150700.7.3.3"/>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6339)
  * 2.03.22:
  * Fix pv_major/pv_minor report field types so they are integers, not strings.
  * Add lvmdevices --delnotfound to delete entries for missing devices.
  * Always use cachepool name for metadata backup LV for lvconvert --repair.
  * Make metadata backup LVs read-only after pool's lvconvert --repair.
  * Handle 'lvextend --usepolicies' for pools for all activation variants.
  * Fix memleak in vgchange autoactivation setup.
  * Support conversion from thick to fully provisioned thin LV.
  * Cache/Thin-pool can use error and zero volumes for testing.
  * Individual thin volume can be cached, but cannot take snapshot.
  * internal support for handling error and zero target (for testing).
  * COW above trimmed maximal size is does not return error.
  * Add lvm.conf thin_restore and cache_restore settings.
  * Handle multiple mounts while resizing volume with a FS.
  * Handle leading/trailing spaces in sys_wwid and sys_serial used by deivce_id.
  * Fix failing -S|--select for non-reporting cmds if using LV info/status fields.
  * Allow snapshots of raid+integrity LV.
  * Fix multisegment RAID1 allocator to prevent using single disk for more legs.
  * 2.03.21:
  * Allow (write)cache over raid+integrity LV.
  * 2.03.20:
  * Fix segfault if using -S|--select with log/report_command_log=1 setting.
  * 2.03.19:
  * Do not reset SYSTEMD_READY variable in udev for PVs on MD and loop devices.
  * Ensure udev is processing origin LV before its thick snapshots LVs.
  * 2.03.18:
  * Fix warning for thin pool overprovisioning on lvextend.
  * Add support for writecache metadata_only and pause_writeback settings.
  * Fix missing error messages in lvmdbusd.
  * 2.03.17:
  * Add new options (--fs, --fsmode) for FS handling when resizing LVs (btrfs is unsupported).
  * Fix 'lvremove -S|--select LV' to not also remove its historical LV right away.
  * Fix lv_active field type to binary so --select and --binary applies properly.
  * Error out in lvm shell if using a cmd argument not supported in the shell.
  * Fix lvm shell's lastlog command to report previous pre-command failures.
  * Add --valuesonly option to lvmconfig to print only values without keys.
  * Add json_std output format for more JSON standard compliant version of output.
  * Fix many corner cases in device_id, including handling of S/N duplicates.
  * Fix various issues in lvmdbusd.
- device-mapper version upgrade to 1.02.196
  * Improve parallel creation of /dev/mapper/control device node.
  * Import previous ID_FS_* udev records in 13-dm-disk.rules for suspended DM dev.
  * Remove NAME="mapper/control" rule from 10-dm.rules to avoid udev warnings.
  * Improve 'dmsetup create' without given table line with new kernels.
  * Add DM_REPORT_GROUP_JSON_STD for more JSON standard compliant output format.
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
  <changelog author="heming.zhao@suse.com" date="1716724800">- Update lvm2 from LVM2.2.03.22 to LVM2.2.03.24
  * ** WHATS_NEW from 2.03.22 to 2.03.24 ***
  Version 2.03.24 - 16th May 2024
  ===============================
    Lvconvert supports VDO options for thin-pool with vdo conversion.
    Improve placement to .data.rel.ro and .rodata sections.
    Fix support for -y and -W when creating thinpool with vdo.
    Bettter support for runtime valgrind detection.
    Allow command interruption when communicating with dmeventd.
    Fix resize of VDO volume used for thin pool data volume.
    Use -Wl,-z,now and -Wl,--as-needed for compilation by default.
    Require 3.7 as minimal version for sanlock.
    Share code for closing opened desriptors on program startup.
    Fix memleak in lvmcache.
    Add configure --with-default-event-activation=ON setting.
    Fix return value from reporter function when hitting internal error.
    Skip checking of pools for lvremove and vgremove commands.
    VDO modprobes dm-vdo for 6.9 kernel and kvdo for older kernel version.
    Fix lvs reporting for VDO volumes with new upstream kernel driver.
    Don't import DM_UDEV_DISABLE_OTHER_RULES_FLAG in LVM rules, DM rules cover it.
    Fix table line generation for cache snapshots using cachevol.
    Enhance lvconvert support for external origins stacking.
    When swapping LV names also swap properties like hostname, time and data.
    Fix removal of stacked external origins.
    Lock filesystem when converting volume to read-only external origin.
    Support external origin between different thin-pool.
    Improve validation of acceptable volumes for external origins.
    Reduce amount of preloaded devices for complex device trees.
    Avoid logging problems from monitoring snapshots with inactive origins.
    Check for cache policy module presence in kernel's builtin modules file.
    Add configure --with-modulesdir to select kernel modules directory.
    Support creation of thin-pool with VDO use for its data volume.
  Version 2.03.23 - 21st November 2023
  ====================================
    Set the first lv_attr flag for raid integrity images to i or I.
    Add -A option for pvs and pvscan to show PVs outside devices file.
    Improve searched_devnames temp file usage to prevent redundant scanning.
    Change default search_for_devnames from auto to all.
    Add lvmdevices --refresh to search for missing PVIDs on all devices.
    Add comparison between old and new entries in lvmdevices --check.
    Fix device_id matching order - match non-devname first.
    Fix "lvconvert -m 0" when there is other than first in-sync leg.
    Use system.devices as default for dmeventd when dmeventd.devices is undefined.
    Accept WWIDs containing QEMU HARDDISK for device_id.
    Improve handling of non-standard WWID prefixes used for device_id.
    Configure automatically enables cmdlib for dmeventd and notify-dbus for dbus.
    Fix hint calculation for pools with zero or error segment.
    Configure supports --disable-shared to build only static binaries.
    Configure supports --without-{blkid|systemd|udev} for easier static build.
    Refresh device ids if the system changes.
    Fix pvmove when specifying raid components as moved LVs.
    Enhance error detection for lvm_import_vdo.
    Support PV lists with thin lvconvert.
    Fix support for lvm_import_vdo with SCSI VDO volumes.
    Fix locking issue leading to hanging concurrent vgchange --refresh.
    Recognize lvm.conf report/headings=2 for full column names in report headings.
    Add --headings none|abbrev|full cmd line option to set report headings type.
    Fix conversion to thin pool using lvmlockd.
    Fix conversion from thick into thin volume using lvmlockd.
    Require writable LV for conversion to vdo pool.
    Fix return value from lvconvert integrity remove.
    Preserve UUID for pool metadata spare.
    Preserve UUID for swapped pool metadata.
    Rewrite validation of device name entries used as device_id.
  * ** WHATS_NEW_DM from 1.02.196 to 1.02.198 ***
  Version 1.02.198 - 16th May 2024
  ================================
    Fix static only compilation of libdevmapper.a and dmsetup tool.
    Use better code for closing opened descriptors when starting dmeventd.
    Correct dmeventd -R for systemd environment.
    Restart of dmeventd -R checks pid file to detect running dmeventd first.
    Query with dmeventd -i quickly ends when there is no running dmeventd.
    Enhance dm_get_status_raid to handle mismatching status or reported legs.
    Create /dev/disk/by-label symlinks for DM devs that have crypto as next layer.
    Persist udev db for DM devs on cleanup used in initrd to rootfs transition.
    Process synthetic udev events other than 'add/change' as 'change' events.
    Increase DM_UDEV_RULES_VSN to 3 to indicate changed udev rules.
    Rename DM_NOSCAN to .DM_NOSCAN so it's not stored in udev db.
    Rename DM_SUSPENDED to .DM_SUSPENDED so it's not stored in udev db.
    Do not import DM_UDEV_DISABLE_OTHER_RULES_FLAG from db in 10-dm-disk.rules.
    Test DISK_RO after importing properties from db in 10-dm.rules.
    Also import ID_FS_TYPE in 13-dm-disk.rules from db if needed.
  Version 1.02.197 - 21st November 2023
  =====================================
    Fix invalid JSON report if using DM_REPORT_OUTPUT_MULTIPLE_TIMES and selection.
    Propagate ioctl errno from dm_task_run when creating new table line.
    Add support for group aliases in dmstats.
    Add support for exit-on file for dmeventd to reduce shutdown delays.
    Add configure option --with-dmeventd-exit-on-path to specify default path.
    Add dmsetup --headings none|abbrev|full to set report headings type.
    Add DM_REPORT_OUTPUT_FIELD_IDS_IN_HEADINGS to provide alternative headings.
- Drop patches that have been merged into upstream
  - 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  - 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  - 0003-lvconvert-fix-regresion-from-integrity-check.patch
  - 0004-gcc-cleanup-warnings.patch
  - 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  - 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  - 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  - 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  - 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  - 0010-lvmlockd-client-mutex-ordering.patch
  - 0011-filesystem-move-stat-after-open-check.patch
  - 0012-tests-check-for-writecache.patch
  - 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  - 0014-gcc-fix-warnings-for-x32-architecture.patch
  - 0015-gcc-warning-missing-braces-around-initializer.patch
  - 0016-test-improve-aux-teardown.patch
  - 0017-tests-aux-try-with-extra-sleep.patch
  - 0018-tests-aux-using-singl-lvmconf-call.patch
  - 0019-tests-missing-to-check-for-writecache-support.patch
  - 0020-tests-pvmove-large-disk-area.patch
  - 0021-tests-enforce-full-fs-check.patch
  - 0022-tests-update-for-work-in-fake-dev-environment.patch
  - 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  - 0024-tests-better-slowdown.patch
- Update patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch</changelog>
  <changelog author="glass.su@suse.com" date="1729771200">- add rpm dependency in spec file for aligning new DM udev rules (bsc#1225783 bsc#1229518 bsc#1232063)
  * update lvm2.spec for multipath-tools and udev</changelog>
  <changelog author="heming.zhao@suse.com" date="1740052800">- system with LVM on iSCSI hangs on shutdown because blk-availability.service is not enabled (bsc#1236788)
  * update lvm2.spec
  - remove blk-availability.service from %postun
  - add new Provides 'dont_stop_blk_availability_service'</changelog>
  <changelog author="heming.zhao@suse.com" date="1741003200">- Fixes the lvm2-testsuite failure to run on SUSE kernel (bsc#1238213)
  * Add upstream patch
    + tests-fix-wrong-pos-with-CONFIG_PRINTK_CALLER.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1741348800">- Fixes the lvm2-testsuite case fsadm-btrfs.sh (bsc#1238857)
  * Update SUSE special patch
    + fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1744718400">- LVM filter behaves unexpectedly for MPIO devices in SLES15SP5 (bsc#1216938)
  * set lvm.conf devices.multipath_wwids_file=""</changelog>
  <changelog author="glass.su@suse.com" date="1753876800">- L3: systemd fails to start lvmlockd with sanlock running (bsc#1246691)
  * Add upstream patches for sd_notify configure option
    + bug-1246691_01-configure.ac-build-lvmlockd-with-notify.patch
    + bug-1246691_02-configure-autoreconf.patch
    + bug-1246691_03-configure.ac-add-option-disable-enable-sd-notify.patch
    + bug-1246691_04-lvmlockd-utilize-SD_NOTIFY_SUPPORT.patch
    + bug-1246691_05-configure-autoreconf.patch
  * Update lvm2.spec
    + add pkgconfig(systemd) for lvmlockd build
    + enable configure option '--enable-sd-notify' for lvmlockd</changelog>
</package>
<package pkgid="2db1716dc10f5b7ba07dd004a948f1b457343e3baeb5671552c01fada09a6a6d" name="device-mapper-devel" arch="x86_64">
  <version epoch="0" ver="2.03.24_1.02.198" rel="150700.7.6.1"/>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6339)
  * 2.03.22:
  * Fix pv_major/pv_minor report field types so they are integers, not strings.
  * Add lvmdevices --delnotfound to delete entries for missing devices.
  * Always use cachepool name for metadata backup LV for lvconvert --repair.
  * Make metadata backup LVs read-only after pool's lvconvert --repair.
  * Handle 'lvextend --usepolicies' for pools for all activation variants.
  * Fix memleak in vgchange autoactivation setup.
  * Support conversion from thick to fully provisioned thin LV.
  * Cache/Thin-pool can use error and zero volumes for testing.
  * Individual thin volume can be cached, but cannot take snapshot.
  * internal support for handling error and zero target (for testing).
  * COW above trimmed maximal size is does not return error.
  * Add lvm.conf thin_restore and cache_restore settings.
  * Handle multiple mounts while resizing volume with a FS.
  * Handle leading/trailing spaces in sys_wwid and sys_serial used by deivce_id.
  * Fix failing -S|--select for non-reporting cmds if using LV info/status fields.
  * Allow snapshots of raid+integrity LV.
  * Fix multisegment RAID1 allocator to prevent using single disk for more legs.
  * 2.03.21:
  * Allow (write)cache over raid+integrity LV.
  * 2.03.20:
  * Fix segfault if using -S|--select with log/report_command_log=1 setting.
  * 2.03.19:
  * Do not reset SYSTEMD_READY variable in udev for PVs on MD and loop devices.
  * Ensure udev is processing origin LV before its thick snapshots LVs.
  * 2.03.18:
  * Fix warning for thin pool overprovisioning on lvextend.
  * Add support for writecache metadata_only and pause_writeback settings.
  * Fix missing error messages in lvmdbusd.
  * 2.03.17:
  * Add new options (--fs, --fsmode) for FS handling when resizing LVs (btrfs is unsupported).
  * Fix 'lvremove -S|--select LV' to not also remove its historical LV right away.
  * Fix lv_active field type to binary so --select and --binary applies properly.
  * Error out in lvm shell if using a cmd argument not supported in the shell.
  * Fix lvm shell's lastlog command to report previous pre-command failures.
  * Add --valuesonly option to lvmconfig to print only values without keys.
  * Add json_std output format for more JSON standard compliant version of output.
  * Fix many corner cases in device_id, including handling of S/N duplicates.
  * Fix various issues in lvmdbusd.
- device-mapper version upgrade to 1.02.196
  * Improve parallel creation of /dev/mapper/control device node.
  * Import previous ID_FS_* udev records in 13-dm-disk.rules for suspended DM dev.
  * Remove NAME="mapper/control" rule from 10-dm.rules to avoid udev warnings.
  * Improve 'dmsetup create' without given table line with new kernels.
  * Add DM_REPORT_GROUP_JSON_STD for more JSON standard compliant output format.
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
  <changelog author="heming.zhao@suse.com" date="1716724800">- Update lvm2 from LVM2.2.03.22 to LVM2.2.03.24
  * ** WHATS_NEW from 2.03.22 to 2.03.24 ***
  Version 2.03.24 - 16th May 2024
  ===============================
    Lvconvert supports VDO options for thin-pool with vdo conversion.
    Improve placement to .data.rel.ro and .rodata sections.
    Fix support for -y and -W when creating thinpool with vdo.
    Bettter support for runtime valgrind detection.
    Allow command interruption when communicating with dmeventd.
    Fix resize of VDO volume used for thin pool data volume.
    Use -Wl,-z,now and -Wl,--as-needed for compilation by default.
    Require 3.7 as minimal version for sanlock.
    Share code for closing opened desriptors on program startup.
    Fix memleak in lvmcache.
    Add configure --with-default-event-activation=ON setting.
    Fix return value from reporter function when hitting internal error.
    Skip checking of pools for lvremove and vgremove commands.
    VDO modprobes dm-vdo for 6.9 kernel and kvdo for older kernel version.
    Fix lvs reporting for VDO volumes with new upstream kernel driver.
    Don't import DM_UDEV_DISABLE_OTHER_RULES_FLAG in LVM rules, DM rules cover it.
    Fix table line generation for cache snapshots using cachevol.
    Enhance lvconvert support for external origins stacking.
    When swapping LV names also swap properties like hostname, time and data.
    Fix removal of stacked external origins.
    Lock filesystem when converting volume to read-only external origin.
    Support external origin between different thin-pool.
    Improve validation of acceptable volumes for external origins.
    Reduce amount of preloaded devices for complex device trees.
    Avoid logging problems from monitoring snapshots with inactive origins.
    Check for cache policy module presence in kernel's builtin modules file.
    Add configure --with-modulesdir to select kernel modules directory.
    Support creation of thin-pool with VDO use for its data volume.
  Version 2.03.23 - 21st November 2023
  ====================================
    Set the first lv_attr flag for raid integrity images to i or I.
    Add -A option for pvs and pvscan to show PVs outside devices file.
    Improve searched_devnames temp file usage to prevent redundant scanning.
    Change default search_for_devnames from auto to all.
    Add lvmdevices --refresh to search for missing PVIDs on all devices.
    Add comparison between old and new entries in lvmdevices --check.
    Fix device_id matching order - match non-devname first.
    Fix "lvconvert -m 0" when there is other than first in-sync leg.
    Use system.devices as default for dmeventd when dmeventd.devices is undefined.
    Accept WWIDs containing QEMU HARDDISK for device_id.
    Improve handling of non-standard WWID prefixes used for device_id.
    Configure automatically enables cmdlib for dmeventd and notify-dbus for dbus.
    Fix hint calculation for pools with zero or error segment.
    Configure supports --disable-shared to build only static binaries.
    Configure supports --without-{blkid|systemd|udev} for easier static build.
    Refresh device ids if the system changes.
    Fix pvmove when specifying raid components as moved LVs.
    Enhance error detection for lvm_import_vdo.
    Support PV lists with thin lvconvert.
    Fix support for lvm_import_vdo with SCSI VDO volumes.
    Fix locking issue leading to hanging concurrent vgchange --refresh.
    Recognize lvm.conf report/headings=2 for full column names in report headings.
    Add --headings none|abbrev|full cmd line option to set report headings type.
    Fix conversion to thin pool using lvmlockd.
    Fix conversion from thick into thin volume using lvmlockd.
    Require writable LV for conversion to vdo pool.
    Fix return value from lvconvert integrity remove.
    Preserve UUID for pool metadata spare.
    Preserve UUID for swapped pool metadata.
    Rewrite validation of device name entries used as device_id.
  * ** WHATS_NEW_DM from 1.02.196 to 1.02.198 ***
  Version 1.02.198 - 16th May 2024
  ================================
    Fix static only compilation of libdevmapper.a and dmsetup tool.
    Use better code for closing opened descriptors when starting dmeventd.
    Correct dmeventd -R for systemd environment.
    Restart of dmeventd -R checks pid file to detect running dmeventd first.
    Query with dmeventd -i quickly ends when there is no running dmeventd.
    Enhance dm_get_status_raid to handle mismatching status or reported legs.
    Create /dev/disk/by-label symlinks for DM devs that have crypto as next layer.
    Persist udev db for DM devs on cleanup used in initrd to rootfs transition.
    Process synthetic udev events other than 'add/change' as 'change' events.
    Increase DM_UDEV_RULES_VSN to 3 to indicate changed udev rules.
    Rename DM_NOSCAN to .DM_NOSCAN so it's not stored in udev db.
    Rename DM_SUSPENDED to .DM_SUSPENDED so it's not stored in udev db.
    Do not import DM_UDEV_DISABLE_OTHER_RULES_FLAG from db in 10-dm-disk.rules.
    Test DISK_RO after importing properties from db in 10-dm.rules.
    Also import ID_FS_TYPE in 13-dm-disk.rules from db if needed.
  Version 1.02.197 - 21st November 2023
  =====================================
    Fix invalid JSON report if using DM_REPORT_OUTPUT_MULTIPLE_TIMES and selection.
    Propagate ioctl errno from dm_task_run when creating new table line.
    Add support for group aliases in dmstats.
    Add support for exit-on file for dmeventd to reduce shutdown delays.
    Add configure option --with-dmeventd-exit-on-path to specify default path.
    Add dmsetup --headings none|abbrev|full to set report headings type.
    Add DM_REPORT_OUTPUT_FIELD_IDS_IN_HEADINGS to provide alternative headings.
- Drop patches that have been merged into upstream
  - 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  - 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  - 0003-lvconvert-fix-regresion-from-integrity-check.patch
  - 0004-gcc-cleanup-warnings.patch
  - 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  - 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  - 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  - 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  - 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  - 0010-lvmlockd-client-mutex-ordering.patch
  - 0011-filesystem-move-stat-after-open-check.patch
  - 0012-tests-check-for-writecache.patch
  - 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  - 0014-gcc-fix-warnings-for-x32-architecture.patch
  - 0015-gcc-warning-missing-braces-around-initializer.patch
  - 0016-test-improve-aux-teardown.patch
  - 0017-tests-aux-try-with-extra-sleep.patch
  - 0018-tests-aux-using-singl-lvmconf-call.patch
  - 0019-tests-missing-to-check-for-writecache-support.patch
  - 0020-tests-pvmove-large-disk-area.patch
  - 0021-tests-enforce-full-fs-check.patch
  - 0022-tests-update-for-work-in-fake-dev-environment.patch
  - 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  - 0024-tests-better-slowdown.patch
- Update patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch</changelog>
  <changelog author="glass.su@suse.com" date="1729771200">- add rpm dependency in spec file for aligning new DM udev rules (bsc#1225783 bsc#1229518 bsc#1232063)
  * update lvm2.spec for multipath-tools and udev</changelog>
  <changelog author="heming.zhao@suse.com" date="1740052800">- system with LVM on iSCSI hangs on shutdown because blk-availability.service is not enabled (bsc#1236788)
  * update lvm2.spec
  - remove blk-availability.service from %postun
  - add new Provides 'dont_stop_blk_availability_service'</changelog>
  <changelog author="heming.zhao@suse.com" date="1741003200">- Fixes the lvm2-testsuite failure to run on SUSE kernel (bsc#1238213)
  * Add upstream patch
    + tests-fix-wrong-pos-with-CONFIG_PRINTK_CALLER.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1741348800">- Fixes the lvm2-testsuite case fsadm-btrfs.sh (bsc#1238857)
  * Update SUSE special patch
    + fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1744718400">- LVM filter behaves unexpectedly for MPIO devices in SLES15SP5 (bsc#1216938)
  * set lvm.conf devices.multipath_wwids_file=""</changelog>
  <changelog author="glass.su@suse.com" date="1753876800">- L3: systemd fails to start lvmlockd with sanlock running (bsc#1246691)
  * Add upstream patches for sd_notify configure option
    + bug-1246691_01-configure.ac-build-lvmlockd-with-notify.patch
    + bug-1246691_02-configure-autoreconf.patch
    + bug-1246691_03-configure.ac-add-option-disable-enable-sd-notify.patch
    + bug-1246691_04-lvmlockd-utilize-SD_NOTIFY_SUPPORT.patch
    + bug-1246691_05-configure-autoreconf.patch
  * Update lvm2.spec
    + add pkgconfig(systemd) for lvmlockd build
    + enable configure option '--enable-sd-notify' for lvmlockd</changelog>
  <changelog author="glass.su@suse.com" date="1770724800">- L3: LVM_SUPPRESS_FD_WARNINGS is no longer effective (bsc#1257661)
  * Add upstream patch
    + bug-1257661-libdaemon-fix-suppressing-stray-fd-warnings.patch</changelog>
</package>
<package pkgid="3db987d69f5098dc3f6f02f4bc97f8e54e8561aa63fc25173926220f3e93d365" name="dirmngr" arch="x86_64">
  <version epoch="0" ver="2.4.4" rel="150600.3.12.1"/>
  <changelog author="pmonreal@suse.com" date="1678449600">- Temporarily revert back to the pre-2.4 default for key generation.
  The new rfc4880bis has been set as the default in 2.4 version and
  might create incompatible keys. Note that, rfc4880bis can still
  be used with the option flag --rfc4880bis as in previous versions.
  * More info in the gnupg-devel ML:
    https://lists.gnupg.org/pipermail/gnupg-devel/2022-December/035183.html
  * Reverted commit https://dev.gnupg.org/rGcaf4b3fc16e9
  * Add gnupg-revert-rfc4880bis.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682683200">- Update to 2.4.1:
  * If the ~/.gnupg directory does not exist, the keyboxd is now
    automagically enabled. [rGd9e7488b17]
  * gpg: New option --add-desig-revoker. [rG3d094e2bcf]
  * gpg: New option --assert-signer. [rGc9e95b8dee]
  * gpg: New command --quick-add-adsk and other ADSK features.
    [T6395, https://gnupg.org/blog/20230321-adsk.html]
  * gpg: New list-option "show-unusable-sigs". Also show "[self-signature]"
    instead of the user-id in key signature listings. [rG103acfe9ca]
  * gpg: For symmetric encryption the default S2K hash is now SHA256. [T6367]
  * gpg: Detect already compressed data also when using a pipe. Also
    detect JPEG and PNG file formats. [T6332]
  * gpg: New subcommand "openpgp" for --card-edit. [T6462]
  * gpgsm: Verification of detached signatures does now strip trailing
    zeroes from the input if --assume-binary is used. [rG2a13f7f9dc]
  * gpgsm: Non-armored detached signature are now created without
    using indefinite form length octets. This improves compatibility
    with some PDF signature verification software. [rG8996b0b655]
  * gpgtar: Emit progress status lines in create mode. [T6363]
  * dirmngr: The LDAP modifyTimestamp is now returned by some
    keyserver commands. [rG56d309133f]
  * ssh: Allow specification of the order keys are presented to ssh.
    See the man page entry for --enable-ssh-support. [T5996, T6212]
  * gpg: Make list-options "show-sig-subpackets" work again.
    Fixes regression in 2.4.0. [rG5a223303d7]
  * gpg: Fix the keytocard command for Yubikeys. [T6378]
  * gpg: Do not continue an export after a cancel for the primary key. [T6093]
  * gpg: Replace the --override-compliance-check hack by a real fix. [T5655]
  * gpgtar: Fix decryption with input taken from stdin. [T6355]
  * Rebase patches:
  - gnupg-revert-rfc4880bis.patch
  - gnupg-add_legacy_FIPS_mode_option.patch
  * Remove patch fixed upstream:
  - gnupg-tests-Fix-tests-gpgme-for-in-source-tree-builds.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1685448000">- Update to 2.4.2:
  * gpg: Print a warning if no more encryption subkeys are left over
    after changing the expiration date.  [rGef2c3d50fa]
  * gpg: Fix searching for the ADSK key when adding an ADSK.  [T6504]
  * gpgsm: Speed up key listings on Windows.  [rG08ff55bd44]
  * gpgsm: Reduce the number of "failed to open policy file"
    diagnostics.  [rG68613a6a9d]
  * agent: Make updating of private key files more robust and track
    display S/N.  [T6135]
  * keyboxd: Avoid longish delays on Windows when listing keys.
    [rG6944aefa3c]
  * gpgtar: Emit extra status lines to help GPGME.  [T6497]
  * w32: Avoid using the VirtualStore.  [T6403]
  * Rebase gnupg-add_legacy_FIPS_mode_option.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1688558400">- Update to 2.4.3:
  * gpg: Set default expiration date to 3 years. [T2701]
  * gpg: Add --list-filter properties "key_expires" and
    "key_expires_d". [T6529]
  * gpg: Emit status line and proper diagnostics for write errors. [T6528]
  * gpg: Make progress work for large files on Windows. [T6534]
  * gpg: New option --no-compress as alias for -z0.
  * gpgsm: Print PROGRESS status lines. Add new --input-size-hint. [T6534]
  * gpgsm: Support SENDCERT_SKI for --call-dirmngr. [rG701a8b30f0]
  * gpgsm: Major rewrite of the PKCS#12 parser. [T6536]
  * gpgtar: New option --no-compress.
  * dirmngr: Extend the AD_QUERY command. [rG207c99567c]
  * dirmngr: Disable the HTTP redirect rewriting. [T6477]
  * dirmngr: New option --compatibility-flags. [rGbf04b07327]
  * dirmngr: New option --ignore-crl-extensions. [T6545]
  * wkd: Use export-clean for gpg-wks-client's --mirror and --create
    commands. [rG2c7f7a5a27]
  * wkd: Make --add-revocs the default in gpg-wks-client. New option
  - -no-add-revocs. [rG10c937ee68]
  * scd: Make signing work for Nexus cards. [rGb83d86b988]
  * scd: Fix authentication with Administration Key for PIV. [rG25b59cf6ce]</changelog>
  <changelog author="pmonreal@suse.com" date="1691064000">- Revert back to use the IBM TPM Software stack.</changelog>
  <changelog author="pmonreal@suse.com" date="1695297600">- Install the systemd user units in the _userunitdir [bsc#1201564]
  * Note that, there is no activation by default.
  * Rework excludes in the spec's files section.</changelog>
  <changelog author="pmonreal@suse.com" date="1696852800">- Provide the systemd-user files since they have been removed
  upstream since version 2.4.1. [bsc#1201564]
  * Add gpg2-systemd-user.tar.xz</changelog>
  <changelog author="pmonreal@suse.com" date="1696939200">- Install the internal executables in the /usr/libexec dir instead
  of /usr/lib64. These files are keyboxd, scdaemon, gpg-auth
  gpg-check-pattern, gpg-pair-tool, gpg-preset-passphrase,
  gpg-protect-tool, gpg-wks-client, dirmngr_ldap and tpm2daemon.</changelog>
  <changelog author="pmonreal@suse.com" date="1697457600">- Fix Emacs EasyPG behavior when parsing output:
  * gpg: Report BEGIN_* status before examining the input.
  * Upstream task: https://dev.gnupg.org/T6481
  * Add gnupg-Report-BEGIN_-status-before-examining-the-input.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1697544000">- Do not pull revision info from GIT when autoconf is run. This
  removes the -unknown suffix after the version number.
  * Add gnupg-nobetasuffix.patch [bsc#1216334]</changelog>
  <changelog author="pmonreal@suse.com" date="1698667200">- Fix the build in SLE and Leap by adding an exclude in the files
  section for the dirmngr's systemd user units. [jsc#PED-7093]</changelog>
  <changelog author="pmonreal@suse.com" date="1706184000">- Update to 2.4.4: [bsc#1219191]
  * gpg: Do not keep an unprotected smartcard backup key on disk.
    See https://gnupg.org/blog/20240125-smartcard-backup-key.html
    for a security advisory. [T6944]
  * gpg: Allow to specify seconds since Epoch beyond 2038 on 32-bit
    platforms. [T6736]
  * gpg: Fix expiration time when Creation-Date is specified. [T5252]
  * gpg: Add support for Subkey-Expire-Date. [rG96b69c1866]
  * gpg: Add option --with-v5-fingerprint. [T6705]
  * gpg: Add sub-option ignore-attributes to --import-options.
  * gpg: Add --list-filter properties sig_expires/sig_expires_d.
  * gpg: Fix validity of re-imported keys. [T6399]
  * gpg: Report BEGIN_ status before examining the input. [T6481]
  * gpg: Don't try to compress a read-only keybox. [T6811]
  * gpg: Choose key from inserted card over a non-inserted card. [T6831]
  * gpg: Allow to create revocations even with non-compliant algos. [T6929]
  * gpg: Fix regression in the Revoker keyword of the parameter file. [T6923]
  * gpg: Improve error message for expired default keys. [T4704]
  * gpgsm: Add --always-trust feature. [T6559]
  * gpgsm: Support ECC certificates in de-vs mode. [T6802]
  * gpgsm: Major rewrite of the PKCS#12 parser. [T6536]
  * gpgsm: No not show the pkcs#12 passphrase in debug output. [T6654]
  * keyboxd: Timeout on failure to get the database lock. [T6838]
  * agent: Update the key stubs only if really modified. [T6829]
  * scd: Add support for certain Starcos 3.2 cards. [rG5304c9b080]
  * scd: Add support for CardOS 5.4 cards. [rG812f988059]
  * scd: Add support for D-Trust 4.1/4.4 cards. [rG0b85a9ac09]
  * scd: Add support for Smartcafe Expert 7.0 cards. [T6919]
  * scd: Add a length check for a new PIN. [T6843]
  * tpm: Fix keytotpm handling in the agent. [rG9909f622f6]
  * tpm: Fixes for the TPM test suite. [T6052]
  * dirmngr: New option --ignore-crl-extensions. [T6545]
  * dirmngr: Support config value "none" to disable the default
    keyserver. [T6708]
  * dirmngr: Fix handling of the HTTP Content-Length. [rGa5e33618f4]
  * gpgconf: Add commands --lock and --unlock. [rG93b5ba38dc]
  * gpgconf: Add keyword socketdir to gpgconf.ctl. [rG239c1fdc28]
  * gpgconf: Adjust the -X command for the new VERSION file format. [T6918]
  * wkd: Use export-clean for gpg-wks-client's --mirror and --create
    commands. [rG2c7f7a5a278c]
  * wkd: Make --add-revocs the default in gpg-wks-client. New option
  - -no-add-revocs. [rG10c937ee68]
  * Remove duplicated backslashes when setting the homedir. [T6833]
  * Ignore attempts to remove the /dev/null device. [T6556]
  * Improve advisory file lock retry strategy. [T3380]
  * Release-info: https://dev.gnupg.org/T6578
  * Remove patch upstream:
  - gnupg-Report-BEGIN_-status-before-examining-the-input.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1742212800">- Fix a verification DoS due to a malicious subkey in the keyring: [bsc#1239119]
  * Add patch gnupg-gpg-Fix-a-verification-DoS-due-to-a-malicious-subkey-in-the-keyring.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1748952000">- Don't install expired sks certificate [bsc#1243069]
  * Add patch gnupg-dirmngr-Don-t-install-expired-sks-certificate.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1750939200">- Security fix: [bsc#1236931, bsc#1239119, CVE-2025-30258]
  * gpg: Fix regression for the recent malicious subkey DoS fix.
  * gpg: Fix another regression due to the T7547 fix.
  * gpg: Allow the use of an ADSK subkey as ADSK subkey.
  * Add patches:
  - gnupg-gpg-Fix-regression-for-the-recent-malicious-subkey-D.patch
  - gnupg-gpg-Fix-another-regression-due-to-the-T7547-fix.patch
  - gnupg-gpg-Allow-the-use-of-an-ADSK-subkey-as-ADSK-subkey.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1767873600">- Security fix: [bsc#1256390] (gpg.fail/notdash)
  * gpg2: Cleartext Signature Forgery in the NotDashEscaped header
    implementation in GnuPG
  * Add patch gnupg-notdash-escape.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1767873601">- Security fix: [bsc#1256243]
  * gpg2 agent: Fix a memory leak
  * Add patch gnupg-agent-memleak.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767873602">- Security fix: [bsc#1256244] (gpg.fail/detached)
  * gpg: Error out on unverified output for non-detached signatures [T7903]
  * Add gnupg-gpg-Error-out-on-unverified-output-for-non-detached-signatures.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767873603">- Security fix: [bsc#1256246] (gpg.fail/sha1)
  * gpg: Avoid potential downgrade to SHA1 in 3rd party key signatures [T7904]
  * Add gnupg-gpg-Avoid-potential-downgrade-to-SHA1-in-3rd-party-keysig.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767873604">- Security fix: [bsc#1255715, CVE-2025-68973] (gpg.fail/memcpy)
  * gpg: Fix possible memory corruption in the armor parser [T7906]
  * Add gnupg-CVE-2025-68973.patch</changelog>
</package>
<package pkgid="eba2a50d08a120b290092987fb34f12670e5df2099fbbc107ac385258153b35c" name="dirmngr" arch="x86_64">
  <version epoch="0" ver="2.4.4" rel="150600.3.15.1"/>
  <changelog author="pmonreal@suse.com" date="1685448000">- Update to 2.4.2:
  * gpg: Print a warning if no more encryption subkeys are left over
    after changing the expiration date.  [rGef2c3d50fa]
  * gpg: Fix searching for the ADSK key when adding an ADSK.  [T6504]
  * gpgsm: Speed up key listings on Windows.  [rG08ff55bd44]
  * gpgsm: Reduce the number of "failed to open policy file"
    diagnostics.  [rG68613a6a9d]
  * agent: Make updating of private key files more robust and track
    display S/N.  [T6135]
  * keyboxd: Avoid longish delays on Windows when listing keys.
    [rG6944aefa3c]
  * gpgtar: Emit extra status lines to help GPGME.  [T6497]
  * w32: Avoid using the VirtualStore.  [T6403]
  * Rebase gnupg-add_legacy_FIPS_mode_option.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1688558400">- Update to 2.4.3:
  * gpg: Set default expiration date to 3 years. [T2701]
  * gpg: Add --list-filter properties "key_expires" and
    "key_expires_d". [T6529]
  * gpg: Emit status line and proper diagnostics for write errors. [T6528]
  * gpg: Make progress work for large files on Windows. [T6534]
  * gpg: New option --no-compress as alias for -z0.
  * gpgsm: Print PROGRESS status lines. Add new --input-size-hint. [T6534]
  * gpgsm: Support SENDCERT_SKI for --call-dirmngr. [rG701a8b30f0]
  * gpgsm: Major rewrite of the PKCS#12 parser. [T6536]
  * gpgtar: New option --no-compress.
  * dirmngr: Extend the AD_QUERY command. [rG207c99567c]
  * dirmngr: Disable the HTTP redirect rewriting. [T6477]
  * dirmngr: New option --compatibility-flags. [rGbf04b07327]
  * dirmngr: New option --ignore-crl-extensions. [T6545]
  * wkd: Use export-clean for gpg-wks-client's --mirror and --create
    commands. [rG2c7f7a5a27]
  * wkd: Make --add-revocs the default in gpg-wks-client. New option
  - -no-add-revocs. [rG10c937ee68]
  * scd: Make signing work for Nexus cards. [rGb83d86b988]
  * scd: Fix authentication with Administration Key for PIV. [rG25b59cf6ce]</changelog>
  <changelog author="pmonreal@suse.com" date="1691064000">- Revert back to use the IBM TPM Software stack.</changelog>
  <changelog author="pmonreal@suse.com" date="1695297600">- Install the systemd user units in the _userunitdir [bsc#1201564]
  * Note that, there is no activation by default.
  * Rework excludes in the spec's files section.</changelog>
  <changelog author="pmonreal@suse.com" date="1696852800">- Provide the systemd-user files since they have been removed
  upstream since version 2.4.1. [bsc#1201564]
  * Add gpg2-systemd-user.tar.xz</changelog>
  <changelog author="pmonreal@suse.com" date="1696939200">- Install the internal executables in the /usr/libexec dir instead
  of /usr/lib64. These files are keyboxd, scdaemon, gpg-auth
  gpg-check-pattern, gpg-pair-tool, gpg-preset-passphrase,
  gpg-protect-tool, gpg-wks-client, dirmngr_ldap and tpm2daemon.</changelog>
  <changelog author="pmonreal@suse.com" date="1697457600">- Fix Emacs EasyPG behavior when parsing output:
  * gpg: Report BEGIN_* status before examining the input.
  * Upstream task: https://dev.gnupg.org/T6481
  * Add gnupg-Report-BEGIN_-status-before-examining-the-input.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1697544000">- Do not pull revision info from GIT when autoconf is run. This
  removes the -unknown suffix after the version number.
  * Add gnupg-nobetasuffix.patch [bsc#1216334]</changelog>
  <changelog author="pmonreal@suse.com" date="1698667200">- Fix the build in SLE and Leap by adding an exclude in the files
  section for the dirmngr's systemd user units. [jsc#PED-7093]</changelog>
  <changelog author="pmonreal@suse.com" date="1706184000">- Update to 2.4.4: [bsc#1219191]
  * gpg: Do not keep an unprotected smartcard backup key on disk.
    See https://gnupg.org/blog/20240125-smartcard-backup-key.html
    for a security advisory. [T6944]
  * gpg: Allow to specify seconds since Epoch beyond 2038 on 32-bit
    platforms. [T6736]
  * gpg: Fix expiration time when Creation-Date is specified. [T5252]
  * gpg: Add support for Subkey-Expire-Date. [rG96b69c1866]
  * gpg: Add option --with-v5-fingerprint. [T6705]
  * gpg: Add sub-option ignore-attributes to --import-options.
  * gpg: Add --list-filter properties sig_expires/sig_expires_d.
  * gpg: Fix validity of re-imported keys. [T6399]
  * gpg: Report BEGIN_ status before examining the input. [T6481]
  * gpg: Don't try to compress a read-only keybox. [T6811]
  * gpg: Choose key from inserted card over a non-inserted card. [T6831]
  * gpg: Allow to create revocations even with non-compliant algos. [T6929]
  * gpg: Fix regression in the Revoker keyword of the parameter file. [T6923]
  * gpg: Improve error message for expired default keys. [T4704]
  * gpgsm: Add --always-trust feature. [T6559]
  * gpgsm: Support ECC certificates in de-vs mode. [T6802]
  * gpgsm: Major rewrite of the PKCS#12 parser. [T6536]
  * gpgsm: No not show the pkcs#12 passphrase in debug output. [T6654]
  * keyboxd: Timeout on failure to get the database lock. [T6838]
  * agent: Update the key stubs only if really modified. [T6829]
  * scd: Add support for certain Starcos 3.2 cards. [rG5304c9b080]
  * scd: Add support for CardOS 5.4 cards. [rG812f988059]
  * scd: Add support for D-Trust 4.1/4.4 cards. [rG0b85a9ac09]
  * scd: Add support for Smartcafe Expert 7.0 cards. [T6919]
  * scd: Add a length check for a new PIN. [T6843]
  * tpm: Fix keytotpm handling in the agent. [rG9909f622f6]
  * tpm: Fixes for the TPM test suite. [T6052]
  * dirmngr: New option --ignore-crl-extensions. [T6545]
  * dirmngr: Support config value "none" to disable the default
    keyserver. [T6708]
  * dirmngr: Fix handling of the HTTP Content-Length. [rGa5e33618f4]
  * gpgconf: Add commands --lock and --unlock. [rG93b5ba38dc]
  * gpgconf: Add keyword socketdir to gpgconf.ctl. [rG239c1fdc28]
  * gpgconf: Adjust the -X command for the new VERSION file format. [T6918]
  * wkd: Use export-clean for gpg-wks-client's --mirror and --create
    commands. [rG2c7f7a5a278c]
  * wkd: Make --add-revocs the default in gpg-wks-client. New option
  - -no-add-revocs. [rG10c937ee68]
  * Remove duplicated backslashes when setting the homedir. [T6833]
  * Ignore attempts to remove the /dev/null device. [T6556]
  * Improve advisory file lock retry strategy. [T3380]
  * Release-info: https://dev.gnupg.org/T6578
  * Remove patch upstream:
  - gnupg-Report-BEGIN_-status-before-examining-the-input.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1742212800">- Fix a verification DoS due to a malicious subkey in the keyring: [bsc#1239119]
  * Add patch gnupg-gpg-Fix-a-verification-DoS-due-to-a-malicious-subkey-in-the-keyring.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1748952000">- Don't install expired sks certificate [bsc#1243069]
  * Add patch gnupg-dirmngr-Don-t-install-expired-sks-certificate.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1750939200">- Security fix: [bsc#1236931, bsc#1239119, CVE-2025-30258]
  * gpg: Fix regression for the recent malicious subkey DoS fix.
  * gpg: Fix another regression due to the T7547 fix.
  * gpg: Allow the use of an ADSK subkey as ADSK subkey.
  * Add patches:
  - gnupg-gpg-Fix-regression-for-the-recent-malicious-subkey-D.patch
  - gnupg-gpg-Fix-another-regression-due-to-the-T7547-fix.patch
  - gnupg-gpg-Allow-the-use-of-an-ADSK-subkey-as-ADSK-subkey.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1767873600">- Security fix: [bsc#1256390] (gpg.fail/notdash)
  * gpg2: Cleartext Signature Forgery in the NotDashEscaped header
    implementation in GnuPG
  * Add patch gnupg-notdash-escape.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1767873601">- Security fix: [bsc#1256243]
  * gpg2 agent: Fix a memory leak
  * Add patch gnupg-agent-memleak.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767873602">- Security fix: [bsc#1256244] (gpg.fail/detached)
  * gpg: Error out on unverified output for non-detached signatures [T7903]
  * Add gnupg-gpg-Error-out-on-unverified-output-for-non-detached-signatures.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767873603">- Security fix: [bsc#1256246] (gpg.fail/sha1)
  * gpg: Avoid potential downgrade to SHA1 in 3rd party key signatures [T7904]
  * Add gnupg-gpg-Avoid-potential-downgrade-to-SHA1-in-3rd-party-keysig.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767873604">- Security fix: [bsc#1255715, CVE-2025-68973] (gpg.fail/memcpy)
  * gpg: Fix possible memory corruption in the armor parser [T7906]
  * Add gnupg-CVE-2025-68973.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1769601600">- Security fix: [bsc#1256389] (gpg.fail/filename)
  * GnuPG Accepts Path Separators and Path Traversals in Literal Data "Filename" Field
  * Add gnupg-accepts-path-separators-literal-data.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1769601601">- Security fix [bsc#1257396, CVE-2026-24882]
  - gpg2: stack-based buffer overflow in TPM2 PKDECRYPT for TPM-backed RSA and ECC keys
  - Added gnupg-CVE-2026-24882.patch</changelog>
</package>
<package pkgid="170caa8312ba3d483c82ea945a51bd53ca45ee225a663beb051e8214555f6b03" name="dirmngr" arch="x86_64">
  <version epoch="0" ver="2.4.4" rel="150600.3.9.1"/>
  <changelog author="pmonreal@suse.com" date="1666008000">- GnuPG 2.3.8:
  * gpg: Do not consider unknown public keys as non-compliant while
    decrypting.
  * gpg: Avoid to emit a compliance mode line if Libgcrypt is
    non-compliant.
  * gpg: Improve --edit-key setpref command to ease c+p.
  * gpg: Emit an ERROR status if --quick-set-primary-uid fails and
    allow to pass the user ID by hash.
  * gpg: Actually show symmetric+pubkey encrypted data as de-vs
    compliant.  Add extra compliance checks for symkey_enc packets.
  * gpg: In de-vs mode use SHA-256 instead of SHA-1 as implicit
    preference.
  * gpgsm: Fix reporting of bad passphrase error during PKCS#11
    import.
  * agent: Fix a regression in "READKEY --format=ssh".
  * agent: New option --need-attr for KEYINFO.
  * agent: New attribute "Remote-list" for use by KEYINFO.
  * scd: Fix problem with Yubikey 5.4 firmware.
  * dirmngr: Fix CRL Distribution Point fallback to other schemes.
  * dirmngr: New LDAP server flag "areconly" (A-record-only).
  * dirmngr: Fix upload of multiple keys for an LDAP server specified
    using the colon format.
  * dirmngr: Use LDAP schema v2 when a Base DN is specified.
  * dirmngr: Avoid caching expired certificates.
  * wkd: Fix path traversal attack in gpg-wks-server. Add the mail
    address to the pending request data.
  * wkd: New command --mirror for gpg-wks-client.
  * gpg-auth: New tool for authentication.
  * New common.conf option no-autostart.
  * Silence warnings from AllowSetForegroundWindow unless
    GNUPG_EXEC_DEBUG_FLAGS is used.
  * Rebase gnupg-detect_FIPS_mode.patch
  * Remove patch upstream:
  - gnupg-2.3.7-scd-openpgp-Fix-workaround-for-Yubikey-heuristics.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671537600">- Updated to require libgpg-error-devel &gt;= 1.46
- Rebased patches:
  * gnupg-allow-import-of-previously-known-keys-even-without-UIDs.patch
  * gnupg-add_legacy_FIPS_mode_option.patch
- GnuPG 2.4.0:
  * common: Fix translations in --help for gpgrt &lt; 1.47.
  * gpg: Do not continue the export after a cancel for the primary key.
  * gpg: Replace use of PRIu64 in log_debug.
  * Update NEWS for 2.4.0.
  * tests: Fix make check with GPGME.
  * agent: Allow arguments to "scd serialno" in restricted mode.
  * scd:p15: Skip deleted records.
  * build: Remove Windows CE support.
  * wkd: Do not send/install/mirror expired user ids.
  * gpgsm: Print the revocation time also with --verify.
  * gpgsm: Fix "problem re-searching certificate" case.
  * gpgsm: Print revocation date and reason in cert listings.
  * gpgsm: Silence the "non-critical certificate policy not allowed".
  * gpgsm: Always use the chain model if the root-CA requests this.
  * gpg: New export option "mode1003".
  * gpg: Remove a mostly duplicated function.
  * tests: Simplify fake-pinentry to use the option only.
  * tests: Fix fake-pinentry for Windows.
  * tests: Fix make check-all.
  * agent: Fix import of protected v5 keys.
  * gpgsm: Change default algo to AES-256.
  * tests: Put a workaround for semihosted environment.
  * tests: More fix for semihosted environment.
  * tests: Support semihosted environment.
  * tests: Fix tests under cms.
  * tests,w32: Fix for semihosted environment.
  * w32: Fix for tests on semihosted environment.
  * w32: Fix gnupg_unsetenv.
  * wkd: New option --add-revocs and some fixes.
  * wkd: Make use of --debug extprog.
  * gpg: New export-filter export-revocs.
  * gpg: Fix double-free in gpg --card-edit.
  * gpg: Make --require-compliance work with out --status-fd.
  * gpg: New option --list-filter.
  * dirmngr: Silence ocsp debug output.
  * tests: Fix to support --enable-all-tests and variants.
  * tests:w32: Fix for non-dot file name for Windows.
  * tests:gpgscm:w32: Fix for GetTempPath.
  * tests: Keep .log files in objdir.
  * tests: Use 233 for invalid value of FD.
  * w32: Fix gnupg_tmpfile for possible failure.
  * scd: Redact --debug cardio output of a VERIFY APDU.
  * common: Remove Windows CE support in common.
  * gpgsm: Fix colon outout of ECC encryption certificates.
  * scd:nks: Fix ECC signing if key not given by keygrip.
  * dirmngr: Fix verification of ECDSA signed CRLs.
  * agent: Allow trustlist on Windows in Unicode homedirs.
  * gpg: Fix verification of cleartext signatures with overlong lines.
  * gpg: Move w32_system function.
  * gpg: New option --quick-update-pref.
  * gpg: New list-options show-pref and show-pref-verbose.
  * tests: Add tests to check that OCB is only used for capable keys.
  * gpg: Make --list-packets work w/o --no-armor for plain OCB packets.
  * tests: Add symmetric decryption tests.
  * tests: Add tr:assert-same function.
  * agent: Avoid blanks in the ssh key's comment.
  * build: Update m4 files.
  * gpg: Merge --rfc4880bis features into --gnupg.
  * gpg: Allow only OCB for AEAD encryption.
  * gpg: New option --compatibility-flags.
  * gpgsm: Also announce AES256-CBC in signatures.
  * gpg: Fix trusted introducer for user-ids with only the mbox.
  * gpg: Import stray revocation certificates.
  * agent: Automatically convert to extended key format by KEYATTR.
  * card: New commands "gpg" and "gpgsm".
  * card: Also show fingerprints of known X.509 certificates.
  * scd:nks: Support non-ESIGN signing with the Signature Card v2.
  * gpgsm: Allow ECC encryption keys with just keyAgreement specified.
  * gpgsm: Use macro constants for cert_usage_p.
  * build: Update gpg-error.m4.
  * agent,common,dirmngr,tests,tools: Remove spawn PREEXEC argument.
  * gpg: Move NETLIBS after GPG_ERROR_LIBS.
  * gpg: Use GCRY_KDF_ONESTEP_KDF with newer libgcrypt in future.
  * common,w32: Fix struct stat on Windows.
  * agent,w32: Support Win32-OpenSSH emulation by gpg-agent.
  * common: Don't use FD2INT for POSIX-only code.
  * dirmngr: Fix build with no LDAP support.</changelog>
  <changelog author="pmonreal@suse.com" date="1673438400">- Fix broken GPGME QT tests: Upstram dev task dev.gnupg.org/T6313
  * The original patch has been modified to expand the changes
    also to the tests/gpgme/Makefile.in file.
  * Add gnupg-tests-Fix-tests-gpgme-for-in-source-tree-builds.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Fix the regression test suite fails with the IBM TPM Software
  stack. Builds fine using the Intel TPM; use the swtpm and
  tpm2-0-tss-devel packages instead of ibmswtpm2 and ibmtss-devel.</changelog>
  <changelog author="pmonreal@suse.com" date="1678449600">- Allow 8192 bit RSA keys in keygen UI when large_rsa is set
  * Add gnupg-allow-large-rsa.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678449601">- Temporarily revert back to the pre-2.4 default for key generation.
  The new rfc4880bis has been set as the default in 2.4 version and
  might create incompatible keys. Note that, rfc4880bis can still
  be used with the option flag --rfc4880bis as in previous versions.
  * More info in the gnupg-devel ML:
    https://lists.gnupg.org/pipermail/gnupg-devel/2022-December/035183.html
  * Reverted commit https://dev.gnupg.org/rGcaf4b3fc16e9
  * Add gnupg-revert-rfc4880bis.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682683200">- Update to 2.4.1:
  * If the ~/.gnupg directory does not exist, the keyboxd is now
    automagically enabled. [rGd9e7488b17]
  * gpg: New option --add-desig-revoker. [rG3d094e2bcf]
  * gpg: New option --assert-signer. [rGc9e95b8dee]
  * gpg: New command --quick-add-adsk and other ADSK features.
    [T6395, https://gnupg.org/blog/20230321-adsk.html]
  * gpg: New list-option "show-unusable-sigs". Also show "[self-signature]"
    instead of the user-id in key signature listings. [rG103acfe9ca]
  * gpg: For symmetric encryption the default S2K hash is now SHA256. [T6367]
  * gpg: Detect already compressed data also when using a pipe. Also
    detect JPEG and PNG file formats. [T6332]
  * gpg: New subcommand "openpgp" for --card-edit. [T6462]
  * gpgsm: Verification of detached signatures does now strip trailing
    zeroes from the input if --assume-binary is used. [rG2a13f7f9dc]
  * gpgsm: Non-armored detached signature are now created without
    using indefinite form length octets. This improves compatibility
    with some PDF signature verification software. [rG8996b0b655]
  * gpgtar: Emit progress status lines in create mode. [T6363]
  * dirmngr: The LDAP modifyTimestamp is now returned by some
    keyserver commands. [rG56d309133f]
  * ssh: Allow specification of the order keys are presented to ssh.
    See the man page entry for --enable-ssh-support. [T5996, T6212]
  * gpg: Make list-options "show-sig-subpackets" work again.
    Fixes regression in 2.4.0. [rG5a223303d7]
  * gpg: Fix the keytocard command for Yubikeys. [T6378]
  * gpg: Do not continue an export after a cancel for the primary key. [T6093]
  * gpg: Replace the --override-compliance-check hack by a real fix. [T5655]
  * gpgtar: Fix decryption with input taken from stdin. [T6355]
  * Rebase patches:
  - gnupg-revert-rfc4880bis.patch
  - gnupg-add_legacy_FIPS_mode_option.patch
  * Remove patch fixed upstream:
  - gnupg-tests-Fix-tests-gpgme-for-in-source-tree-builds.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1685448000">- Update to 2.4.2:
  * gpg: Print a warning if no more encryption subkeys are left over
    after changing the expiration date.  [rGef2c3d50fa]
  * gpg: Fix searching for the ADSK key when adding an ADSK.  [T6504]
  * gpgsm: Speed up key listings on Windows.  [rG08ff55bd44]
  * gpgsm: Reduce the number of "failed to open policy file"
    diagnostics.  [rG68613a6a9d]
  * agent: Make updating of private key files more robust and track
    display S/N.  [T6135]
  * keyboxd: Avoid longish delays on Windows when listing keys.
    [rG6944aefa3c]
  * gpgtar: Emit extra status lines to help GPGME.  [T6497]
  * w32: Avoid using the VirtualStore.  [T6403]
  * Rebase gnupg-add_legacy_FIPS_mode_option.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1688558400">- Update to 2.4.3:
  * gpg: Set default expiration date to 3 years. [T2701]
  * gpg: Add --list-filter properties "key_expires" and
    "key_expires_d". [T6529]
  * gpg: Emit status line and proper diagnostics for write errors. [T6528]
  * gpg: Make progress work for large files on Windows. [T6534]
  * gpg: New option --no-compress as alias for -z0.
  * gpgsm: Print PROGRESS status lines. Add new --input-size-hint. [T6534]
  * gpgsm: Support SENDCERT_SKI for --call-dirmngr. [rG701a8b30f0]
  * gpgsm: Major rewrite of the PKCS#12 parser. [T6536]
  * gpgtar: New option --no-compress.
  * dirmngr: Extend the AD_QUERY command. [rG207c99567c]
  * dirmngr: Disable the HTTP redirect rewriting. [T6477]
  * dirmngr: New option --compatibility-flags. [rGbf04b07327]
  * dirmngr: New option --ignore-crl-extensions. [T6545]
  * wkd: Use export-clean for gpg-wks-client's --mirror and --create
    commands. [rG2c7f7a5a27]
  * wkd: Make --add-revocs the default in gpg-wks-client. New option
  - -no-add-revocs. [rG10c937ee68]
  * scd: Make signing work for Nexus cards. [rGb83d86b988]
  * scd: Fix authentication with Administration Key for PIV. [rG25b59cf6ce]</changelog>
  <changelog author="pmonreal@suse.com" date="1691064000">- Revert back to use the IBM TPM Software stack.</changelog>
  <changelog author="pmonreal@suse.com" date="1695297600">- Install the systemd user units in the _userunitdir [bsc#1201564]
  * Note that, there is no activation by default.
  * Rework excludes in the spec's files section.</changelog>
  <changelog author="pmonreal@suse.com" date="1696852800">- Provide the systemd-user files since they have been removed
  upstream since version 2.4.1. [bsc#1201564]
  * Add gpg2-systemd-user.tar.xz</changelog>
  <changelog author="pmonreal@suse.com" date="1696939200">- Install the internal executables in the /usr/libexec dir instead
  of /usr/lib64. These files are keyboxd, scdaemon, gpg-auth
  gpg-check-pattern, gpg-pair-tool, gpg-preset-passphrase,
  gpg-protect-tool, gpg-wks-client, dirmngr_ldap and tpm2daemon.</changelog>
  <changelog author="pmonreal@suse.com" date="1697457600">- Fix Emacs EasyPG behavior when parsing output:
  * gpg: Report BEGIN_* status before examining the input.
  * Upstream task: https://dev.gnupg.org/T6481
  * Add gnupg-Report-BEGIN_-status-before-examining-the-input.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1697544000">- Do not pull revision info from GIT when autoconf is run. This
  removes the -unknown suffix after the version number.
  * Add gnupg-nobetasuffix.patch [bsc#1216334]</changelog>
  <changelog author="pmonreal@suse.com" date="1698667200">- Fix the build in SLE and Leap by adding an exclude in the files
  section for the dirmngr's systemd user units. [jsc#PED-7093]</changelog>
  <changelog author="pmonreal@suse.com" date="1706184000">- Update to 2.4.4: [bsc#1219191]
  * gpg: Do not keep an unprotected smartcard backup key on disk.
    See https://gnupg.org/blog/20240125-smartcard-backup-key.html
    for a security advisory. [T6944]
  * gpg: Allow to specify seconds since Epoch beyond 2038 on 32-bit
    platforms. [T6736]
  * gpg: Fix expiration time when Creation-Date is specified. [T5252]
  * gpg: Add support for Subkey-Expire-Date. [rG96b69c1866]
  * gpg: Add option --with-v5-fingerprint. [T6705]
  * gpg: Add sub-option ignore-attributes to --import-options.
  * gpg: Add --list-filter properties sig_expires/sig_expires_d.
  * gpg: Fix validity of re-imported keys. [T6399]
  * gpg: Report BEGIN_ status before examining the input. [T6481]
  * gpg: Don't try to compress a read-only keybox. [T6811]
  * gpg: Choose key from inserted card over a non-inserted card. [T6831]
  * gpg: Allow to create revocations even with non-compliant algos. [T6929]
  * gpg: Fix regression in the Revoker keyword of the parameter file. [T6923]
  * gpg: Improve error message for expired default keys. [T4704]
  * gpgsm: Add --always-trust feature. [T6559]
  * gpgsm: Support ECC certificates in de-vs mode. [T6802]
  * gpgsm: Major rewrite of the PKCS#12 parser. [T6536]
  * gpgsm: No not show the pkcs#12 passphrase in debug output. [T6654]
  * keyboxd: Timeout on failure to get the database lock. [T6838]
  * agent: Update the key stubs only if really modified. [T6829]
  * scd: Add support for certain Starcos 3.2 cards. [rG5304c9b080]
  * scd: Add support for CardOS 5.4 cards. [rG812f988059]
  * scd: Add support for D-Trust 4.1/4.4 cards. [rG0b85a9ac09]
  * scd: Add support for Smartcafe Expert 7.0 cards. [T6919]
  * scd: Add a length check for a new PIN. [T6843]
  * tpm: Fix keytotpm handling in the agent. [rG9909f622f6]
  * tpm: Fixes for the TPM test suite. [T6052]
  * dirmngr: New option --ignore-crl-extensions. [T6545]
  * dirmngr: Support config value "none" to disable the default
    keyserver. [T6708]
  * dirmngr: Fix handling of the HTTP Content-Length. [rGa5e33618f4]
  * gpgconf: Add commands --lock and --unlock. [rG93b5ba38dc]
  * gpgconf: Add keyword socketdir to gpgconf.ctl. [rG239c1fdc28]
  * gpgconf: Adjust the -X command for the new VERSION file format. [T6918]
  * wkd: Use export-clean for gpg-wks-client's --mirror and --create
    commands. [rG2c7f7a5a278c]
  * wkd: Make --add-revocs the default in gpg-wks-client. New option
  - -no-add-revocs. [rG10c937ee68]
  * Remove duplicated backslashes when setting the homedir. [T6833]
  * Ignore attempts to remove the /dev/null device. [T6556]
  * Improve advisory file lock retry strategy. [T3380]
  * Release-info: https://dev.gnupg.org/T6578
  * Remove patch upstream:
  - gnupg-Report-BEGIN_-status-before-examining-the-input.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1742212800">- Fix a verification DoS due to a malicious subkey in the keyring: [bsc#1239119]
  * Add patch gnupg-gpg-Fix-a-verification-DoS-due-to-a-malicious-subkey-in-the-keyring.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1748952000">- Don't install expired sks certificate [bsc#1243069]
  * Add patch gnupg-dirmngr-Don-t-install-expired-sks-certificate.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1750939200">- Security fix: [bsc#1236931, bsc#1239119, CVE-2025-30258]
  * gpg: Fix regression for the recent malicious subkey DoS fix.
  * gpg: Fix another regression due to the T7547 fix.
  * gpg: Allow the use of an ADSK subkey as ADSK subkey.
  * Add patches:
  - gnupg-gpg-Fix-regression-for-the-recent-malicious-subkey-D.patch
  - gnupg-gpg-Fix-another-regression-due-to-the-T7547-fix.patch
  - gnupg-gpg-Allow-the-use-of-an-ADSK-subkey-as-ADSK-subkey.patch</changelog>
</package>
<package pkgid="d38fb6a5d3ddaa09916bbdb4589742068c8095653ad7fab661d2ce65feecbf60" name="dnsdist" arch="src">
  <version epoch="0" ver="1.9.10" rel="150700.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1650888000">- update to 1.7.1
  https://dnsdist.org/changelog.html#change-1.7.1
  https://blog.powerdns.com/2022/04/25/dnsdist-1-7-1-released/</changelog>
  <changelog author="mrueckert@suse.de" date="1655467200">- update to 1.7.2
  https://dnsdist.org/changelog.html#change-1.7.2
  https://blog.powerdns.com/2022/06/14/dnsdist-1-7-2-released/</changelog>
  <changelog author="mrueckert@suse.de" date="1667390400">- update to 1.7.3
  https://dnsdist.org/changelog.html#change-1.7.3
  https://blog.powerdns.com/2022/11/02/dnsdist-1-7-3-released/</changelog>
  <changelog author="adam.majer@suse.de" date="1676030400">- Remove some build dependencies, like GNUTLS
- Remove DoH since it requires another http server that is not
  even in Factory. It's enabled by project config
- Build on 32bit arches by using 64bit time_t there</changelog>
  <changelog author="adam.majer@suse.de" date="1676894400">- Use sysusers* macros to generate and install daemon user</changelog>
  <changelog author="dimstar@opensuse.org" date="1677240000">- Refresh keyring: redownload
  https://dnsdist.org/_static/dnsdist-keyblock.asc as
  dnsdist.keyring.</changelog>
  <changelog author="adam.majer@suse.de" date="1677499200">- update to 1.8.0~rc1
  https://dnsdist.org/changelog.html#change-1.8.0-rc1
- no_doh_protobuf.patch: fix compilation when no DoH enabled
- f44a8a8f19aff191fb1dc0631e37ec30ff087c25.patch: fixes compiler
  feature detection</changelog>
  <changelog author="adam.majer@suse.de" date="1678363200">- update to 1.8.0~rc2
  https://dnsdist.org/changelog.html#change-1.8.0-rc2
- no_doh_protobuf.patch, f44a8a8f19aff191fb1dc0631e37ec30ff087c25.patch
  upstreamed and removed</changelog>
  <changelog author="adam.majer@suse.de" date="1679486400">- update to 1.8.0~rc3
  https://dnsdist.org/changelog.html#change-1.8.0-rc3
- dnsdist.lua sample config -- comment google's DNS servers. Valid
  downstream DNS resolver configuration should be chosen by the admin</changelog>
  <changelog author="adam.majer@suse.de" date="1680177600">- update to 1.8.0
  https://dnsdist.org/changelog.html#change-1.8.0
- Implements dnsdist in SLE15 (jsc#PED-3402)</changelog>
  <changelog author="adam.majer@suse.de" date="1694174400">- update to 1.8.1
  bug fix release. For details, see
  https://dnsdist.org/changelog.html#change-1.8.1</changelog>
  <changelog author="dimstar@opensuse.org" date="1698667200">- BuildRequire pkgconfig(systemd): configure checks for the
  presence of systemctl, which is being pulled in like this.</changelog>
  <changelog author="meissner@suse.com" date="1707134400">- provide user(dnsdist) and group(dnsdist)</changelog>
  <changelog author="adam.majer@suse.de" date="1707480000">- update to 1.8.3
  https://dnsdist.org/changelog.html#change-1.8.3
  https://dnsdist.org/changelog.html#change-1.8.2</changelog>
  <changelog author="dimstar@opensuse.org" date="1707480001">- Revert "provide user(dnsdist) and group(dnsdist)": the package
  already uses sysusers-tools to create the user.
- Actually install dnsdist.user as %{_sysusersdir}/dnsdist.conf.</changelog>
  <changelog author="adam.majer@suse.de" date="1708084800">- update to 1.9.0:
  * Fall back to libcrypto for authenticated encryption
  * Optimize the DoQ packet handling path
  * DNSName: Correct len and offset types
  * DNSName: Optimize parsing of uncompressed labels
  * enable DNS-over-HTTPS via nghttp2 library usage
  For details, see
  https://dnsdist.org/changelog.html#change-1.9.0</changelog>
  <changelog author="adam.majer@suse.de" date="1715601600">- update to 1.9.4: (bsc#1224001, CVE-2024-25581)
  * Fix “C++ One Definition Rule” warnings in XSK
  * Fix DNS over plain HTTP broken by reloadAllCertificates()
  * Fix a crash in incoming DoH with nghttp2
  * Fix handling of XFR requests over DoH
- changes since 1.9.0:
  * Support “no server available” result from Lua FFI load-balancing policies
  * Release incoming TCP connection right away on backend failure
  * Use server preference algorithm for ALPN selection
  * Fix a null-deref in incoming DNS over HTTPS with the nghttp2 provider
  * Fix DNS over HTTP connections/queries counters with the nghttp2 provider
  * Fix first IPv6 console connection being rejected
  * Fix XSK-enabled check when reconnecting a backend
  * Properly handle a failure of the first lazy health-check
  * Also handle EHOSTUNREACH as a case for reconnecting the socket</changelog>
  <changelog author="mrueckert@suse.de" date="1727611200">- update to 1.9.6:
  https://dnsdist.org/changelog.html#change-1.9.6
  https://dnsdist.org/changelog.html#change-1.9.5
- add powerdns-5_1_1-2_fix-build-with-boost-1_86_0.patch from Arch
  linux to fix build with Boost 1.86
- track series file for easier patching</changelog>
  <changelog author="mrueckert@suse.de" date="1730808000">- update to 1.9.7:
  https://dnsdist.org/changelog.html#change-1.9.7
- drop powerdns-5_1_1-2_fix-build-with-boost-1_86_0.patch included
  in update</changelog>
  <changelog author="adam.majer@suse.de" date="1748260800">- update to 1.9.10: (bsc#1243378, bsc#1242028, CVE-2025-30194, CVE-2025-30193)
  https://www.dnsdist.org/changelog.html#change-1.9.10</changelog>
</package>
<package pkgid="92ea262802ab64ed3401652682ece91d3b9b7404bb78398b1af6ecc5a4cb63e4" name="dnsdist" arch="x86_64">
  <version epoch="0" ver="1.9.10" rel="150700.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1650888000">- update to 1.7.1
  https://dnsdist.org/changelog.html#change-1.7.1
  https://blog.powerdns.com/2022/04/25/dnsdist-1-7-1-released/</changelog>
  <changelog author="mrueckert@suse.de" date="1655467200">- update to 1.7.2
  https://dnsdist.org/changelog.html#change-1.7.2
  https://blog.powerdns.com/2022/06/14/dnsdist-1-7-2-released/</changelog>
  <changelog author="mrueckert@suse.de" date="1667390400">- update to 1.7.3
  https://dnsdist.org/changelog.html#change-1.7.3
  https://blog.powerdns.com/2022/11/02/dnsdist-1-7-3-released/</changelog>
  <changelog author="adam.majer@suse.de" date="1676030400">- Remove some build dependencies, like GNUTLS
- Remove DoH since it requires another http server that is not
  even in Factory. It's enabled by project config
- Build on 32bit arches by using 64bit time_t there</changelog>
  <changelog author="adam.majer@suse.de" date="1676894400">- Use sysusers* macros to generate and install daemon user</changelog>
  <changelog author="dimstar@opensuse.org" date="1677240000">- Refresh keyring: redownload
  https://dnsdist.org/_static/dnsdist-keyblock.asc as
  dnsdist.keyring.</changelog>
  <changelog author="adam.majer@suse.de" date="1677499200">- update to 1.8.0~rc1
  https://dnsdist.org/changelog.html#change-1.8.0-rc1
- no_doh_protobuf.patch: fix compilation when no DoH enabled
- f44a8a8f19aff191fb1dc0631e37ec30ff087c25.patch: fixes compiler
  feature detection</changelog>
  <changelog author="adam.majer@suse.de" date="1678363200">- update to 1.8.0~rc2
  https://dnsdist.org/changelog.html#change-1.8.0-rc2
- no_doh_protobuf.patch, f44a8a8f19aff191fb1dc0631e37ec30ff087c25.patch
  upstreamed and removed</changelog>
  <changelog author="adam.majer@suse.de" date="1679486400">- update to 1.8.0~rc3
  https://dnsdist.org/changelog.html#change-1.8.0-rc3
- dnsdist.lua sample config -- comment google's DNS servers. Valid
  downstream DNS resolver configuration should be chosen by the admin</changelog>
  <changelog author="adam.majer@suse.de" date="1680177600">- update to 1.8.0
  https://dnsdist.org/changelog.html#change-1.8.0
- Implements dnsdist in SLE15 (jsc#PED-3402)</changelog>
  <changelog author="adam.majer@suse.de" date="1694174400">- update to 1.8.1
  bug fix release. For details, see
  https://dnsdist.org/changelog.html#change-1.8.1</changelog>
  <changelog author="dimstar@opensuse.org" date="1698667200">- BuildRequire pkgconfig(systemd): configure checks for the
  presence of systemctl, which is being pulled in like this.</changelog>
  <changelog author="meissner@suse.com" date="1707134400">- provide user(dnsdist) and group(dnsdist)</changelog>
  <changelog author="adam.majer@suse.de" date="1707480000">- update to 1.8.3
  https://dnsdist.org/changelog.html#change-1.8.3
  https://dnsdist.org/changelog.html#change-1.8.2</changelog>
  <changelog author="dimstar@opensuse.org" date="1707480001">- Revert "provide user(dnsdist) and group(dnsdist)": the package
  already uses sysusers-tools to create the user.
- Actually install dnsdist.user as %{_sysusersdir}/dnsdist.conf.</changelog>
  <changelog author="adam.majer@suse.de" date="1708084800">- update to 1.9.0:
  * Fall back to libcrypto for authenticated encryption
  * Optimize the DoQ packet handling path
  * DNSName: Correct len and offset types
  * DNSName: Optimize parsing of uncompressed labels
  * enable DNS-over-HTTPS via nghttp2 library usage
  For details, see
  https://dnsdist.org/changelog.html#change-1.9.0</changelog>
  <changelog author="adam.majer@suse.de" date="1715601600">- update to 1.9.4: (bsc#1224001, CVE-2024-25581)
  * Fix “C++ One Definition Rule” warnings in XSK
  * Fix DNS over plain HTTP broken by reloadAllCertificates()
  * Fix a crash in incoming DoH with nghttp2
  * Fix handling of XFR requests over DoH
- changes since 1.9.0:
  * Support “no server available” result from Lua FFI load-balancing policies
  * Release incoming TCP connection right away on backend failure
  * Use server preference algorithm for ALPN selection
  * Fix a null-deref in incoming DNS over HTTPS with the nghttp2 provider
  * Fix DNS over HTTP connections/queries counters with the nghttp2 provider
  * Fix first IPv6 console connection being rejected
  * Fix XSK-enabled check when reconnecting a backend
  * Properly handle a failure of the first lazy health-check
  * Also handle EHOSTUNREACH as a case for reconnecting the socket</changelog>
  <changelog author="mrueckert@suse.de" date="1727611200">- update to 1.9.6:
  https://dnsdist.org/changelog.html#change-1.9.6
  https://dnsdist.org/changelog.html#change-1.9.5
- add powerdns-5_1_1-2_fix-build-with-boost-1_86_0.patch from Arch
  linux to fix build with Boost 1.86
- track series file for easier patching</changelog>
  <changelog author="mrueckert@suse.de" date="1730808000">- update to 1.9.7:
  https://dnsdist.org/changelog.html#change-1.9.7
- drop powerdns-5_1_1-2_fix-build-with-boost-1_86_0.patch included
  in update</changelog>
  <changelog author="adam.majer@suse.de" date="1748260800">- update to 1.9.10: (bsc#1243378, bsc#1242028, CVE-2025-30194, CVE-2025-30193)
  https://www.dnsdist.org/changelog.html#change-1.9.10</changelog>
</package>
<package pkgid="eff5898b9ec47989f0c80cd2e078be47c919b1a25dd83dbecac58061a4989326" name="dnsdist" arch="src">
  <version epoch="0" ver="1.9.11" rel="150700.3.6.1"/>
  <changelog author="mrueckert@suse.de" date="1655467200">- update to 1.7.2
  https://dnsdist.org/changelog.html#change-1.7.2
  https://blog.powerdns.com/2022/06/14/dnsdist-1-7-2-released/</changelog>
  <changelog author="mrueckert@suse.de" date="1667390400">- update to 1.7.3
  https://dnsdist.org/changelog.html#change-1.7.3
  https://blog.powerdns.com/2022/11/02/dnsdist-1-7-3-released/</changelog>
  <changelog author="adam.majer@suse.de" date="1676030400">- Remove some build dependencies, like GNUTLS
- Remove DoH since it requires another http server that is not
  even in Factory. It's enabled by project config
- Build on 32bit arches by using 64bit time_t there</changelog>
  <changelog author="adam.majer@suse.de" date="1676894400">- Use sysusers* macros to generate and install daemon user</changelog>
  <changelog author="dimstar@opensuse.org" date="1677240000">- Refresh keyring: redownload
  https://dnsdist.org/_static/dnsdist-keyblock.asc as
  dnsdist.keyring.</changelog>
  <changelog author="adam.majer@suse.de" date="1677499200">- update to 1.8.0~rc1
  https://dnsdist.org/changelog.html#change-1.8.0-rc1
- no_doh_protobuf.patch: fix compilation when no DoH enabled
- f44a8a8f19aff191fb1dc0631e37ec30ff087c25.patch: fixes compiler
  feature detection</changelog>
  <changelog author="adam.majer@suse.de" date="1678363200">- update to 1.8.0~rc2
  https://dnsdist.org/changelog.html#change-1.8.0-rc2
- no_doh_protobuf.patch, f44a8a8f19aff191fb1dc0631e37ec30ff087c25.patch
  upstreamed and removed</changelog>
  <changelog author="adam.majer@suse.de" date="1679486400">- update to 1.8.0~rc3
  https://dnsdist.org/changelog.html#change-1.8.0-rc3
- dnsdist.lua sample config -- comment google's DNS servers. Valid
  downstream DNS resolver configuration should be chosen by the admin</changelog>
  <changelog author="adam.majer@suse.de" date="1680177600">- update to 1.8.0
  https://dnsdist.org/changelog.html#change-1.8.0
- Implements dnsdist in SLE15 (jsc#PED-3402)</changelog>
  <changelog author="adam.majer@suse.de" date="1694174400">- update to 1.8.1
  bug fix release. For details, see
  https://dnsdist.org/changelog.html#change-1.8.1</changelog>
  <changelog author="dimstar@opensuse.org" date="1698667200">- BuildRequire pkgconfig(systemd): configure checks for the
  presence of systemctl, which is being pulled in like this.</changelog>
  <changelog author="meissner@suse.com" date="1707134400">- provide user(dnsdist) and group(dnsdist)</changelog>
  <changelog author="adam.majer@suse.de" date="1707480000">- update to 1.8.3
  https://dnsdist.org/changelog.html#change-1.8.3
  https://dnsdist.org/changelog.html#change-1.8.2</changelog>
  <changelog author="dimstar@opensuse.org" date="1707480001">- Revert "provide user(dnsdist) and group(dnsdist)": the package
  already uses sysusers-tools to create the user.
- Actually install dnsdist.user as %{_sysusersdir}/dnsdist.conf.</changelog>
  <changelog author="adam.majer@suse.de" date="1708084800">- update to 1.9.0:
  * Fall back to libcrypto for authenticated encryption
  * Optimize the DoQ packet handling path
  * DNSName: Correct len and offset types
  * DNSName: Optimize parsing of uncompressed labels
  * enable DNS-over-HTTPS via nghttp2 library usage
  For details, see
  https://dnsdist.org/changelog.html#change-1.9.0</changelog>
  <changelog author="adam.majer@suse.de" date="1715601600">- update to 1.9.4: (bsc#1224001, CVE-2024-25581)
  * Fix “C++ One Definition Rule” warnings in XSK
  * Fix DNS over plain HTTP broken by reloadAllCertificates()
  * Fix a crash in incoming DoH with nghttp2
  * Fix handling of XFR requests over DoH
- changes since 1.9.0:
  * Support “no server available” result from Lua FFI load-balancing policies
  * Release incoming TCP connection right away on backend failure
  * Use server preference algorithm for ALPN selection
  * Fix a null-deref in incoming DNS over HTTPS with the nghttp2 provider
  * Fix DNS over HTTP connections/queries counters with the nghttp2 provider
  * Fix first IPv6 console connection being rejected
  * Fix XSK-enabled check when reconnecting a backend
  * Properly handle a failure of the first lazy health-check
  * Also handle EHOSTUNREACH as a case for reconnecting the socket</changelog>
  <changelog author="mrueckert@suse.de" date="1727611200">- update to 1.9.6:
  https://dnsdist.org/changelog.html#change-1.9.6
  https://dnsdist.org/changelog.html#change-1.9.5
- add powerdns-5_1_1-2_fix-build-with-boost-1_86_0.patch from Arch
  linux to fix build with Boost 1.86
- track series file for easier patching</changelog>
  <changelog author="mrueckert@suse.de" date="1730808000">- update to 1.9.7:
  https://dnsdist.org/changelog.html#change-1.9.7
- drop powerdns-5_1_1-2_fix-build-with-boost-1_86_0.patch included
  in update</changelog>
  <changelog author="adam.majer@suse.de" date="1748260800">- update to 1.9.10: (bsc#1243378, bsc#1242028, CVE-2025-30194, CVE-2025-30193)
  https://www.dnsdist.org/changelog.html#change-1.9.10
- disable luajit on ppc64le for SLFO (bsc#1243566)</changelog>
  <changelog author="adam.majer@suse.de" date="1772798400">- update to 1.9.11:
  * Add mitigations for the HTTP/2 MadeYouReset attack (bsc#1253852, CVE-2025-8671)
    fix a possible DoS in incoming DoH with nghttp2 (bsc#1250054, CVE-2025-30187)
  * Fix the IO reentry guard in outgoing DoH</changelog>
</package>
<package pkgid="a9654a044f47129405b090e47861d8247d7526660f7013fd75d028ccced9eeb0" name="dnsdist" arch="x86_64">
  <version epoch="0" ver="1.9.11" rel="150700.3.6.1"/>
  <changelog author="mrueckert@suse.de" date="1655467200">- update to 1.7.2
  https://dnsdist.org/changelog.html#change-1.7.2
  https://blog.powerdns.com/2022/06/14/dnsdist-1-7-2-released/</changelog>
  <changelog author="mrueckert@suse.de" date="1667390400">- update to 1.7.3
  https://dnsdist.org/changelog.html#change-1.7.3
  https://blog.powerdns.com/2022/11/02/dnsdist-1-7-3-released/</changelog>
  <changelog author="adam.majer@suse.de" date="1676030400">- Remove some build dependencies, like GNUTLS
- Remove DoH since it requires another http server that is not
  even in Factory. It's enabled by project config
- Build on 32bit arches by using 64bit time_t there</changelog>
  <changelog author="adam.majer@suse.de" date="1676894400">- Use sysusers* macros to generate and install daemon user</changelog>
  <changelog author="dimstar@opensuse.org" date="1677240000">- Refresh keyring: redownload
  https://dnsdist.org/_static/dnsdist-keyblock.asc as
  dnsdist.keyring.</changelog>
  <changelog author="adam.majer@suse.de" date="1677499200">- update to 1.8.0~rc1
  https://dnsdist.org/changelog.html#change-1.8.0-rc1
- no_doh_protobuf.patch: fix compilation when no DoH enabled
- f44a8a8f19aff191fb1dc0631e37ec30ff087c25.patch: fixes compiler
  feature detection</changelog>
  <changelog author="adam.majer@suse.de" date="1678363200">- update to 1.8.0~rc2
  https://dnsdist.org/changelog.html#change-1.8.0-rc2
- no_doh_protobuf.patch, f44a8a8f19aff191fb1dc0631e37ec30ff087c25.patch
  upstreamed and removed</changelog>
  <changelog author="adam.majer@suse.de" date="1679486400">- update to 1.8.0~rc3
  https://dnsdist.org/changelog.html#change-1.8.0-rc3
- dnsdist.lua sample config -- comment google's DNS servers. Valid
  downstream DNS resolver configuration should be chosen by the admin</changelog>
  <changelog author="adam.majer@suse.de" date="1680177600">- update to 1.8.0
  https://dnsdist.org/changelog.html#change-1.8.0
- Implements dnsdist in SLE15 (jsc#PED-3402)</changelog>
  <changelog author="adam.majer@suse.de" date="1694174400">- update to 1.8.1
  bug fix release. For details, see
  https://dnsdist.org/changelog.html#change-1.8.1</changelog>
  <changelog author="dimstar@opensuse.org" date="1698667200">- BuildRequire pkgconfig(systemd): configure checks for the
  presence of systemctl, which is being pulled in like this.</changelog>
  <changelog author="meissner@suse.com" date="1707134400">- provide user(dnsdist) and group(dnsdist)</changelog>
  <changelog author="adam.majer@suse.de" date="1707480000">- update to 1.8.3
  https://dnsdist.org/changelog.html#change-1.8.3
  https://dnsdist.org/changelog.html#change-1.8.2</changelog>
  <changelog author="dimstar@opensuse.org" date="1707480001">- Revert "provide user(dnsdist) and group(dnsdist)": the package
  already uses sysusers-tools to create the user.
- Actually install dnsdist.user as %{_sysusersdir}/dnsdist.conf.</changelog>
  <changelog author="adam.majer@suse.de" date="1708084800">- update to 1.9.0:
  * Fall back to libcrypto for authenticated encryption
  * Optimize the DoQ packet handling path
  * DNSName: Correct len and offset types
  * DNSName: Optimize parsing of uncompressed labels
  * enable DNS-over-HTTPS via nghttp2 library usage
  For details, see
  https://dnsdist.org/changelog.html#change-1.9.0</changelog>
  <changelog author="adam.majer@suse.de" date="1715601600">- update to 1.9.4: (bsc#1224001, CVE-2024-25581)
  * Fix “C++ One Definition Rule” warnings in XSK
  * Fix DNS over plain HTTP broken by reloadAllCertificates()
  * Fix a crash in incoming DoH with nghttp2
  * Fix handling of XFR requests over DoH
- changes since 1.9.0:
  * Support “no server available” result from Lua FFI load-balancing policies
  * Release incoming TCP connection right away on backend failure
  * Use server preference algorithm for ALPN selection
  * Fix a null-deref in incoming DNS over HTTPS with the nghttp2 provider
  * Fix DNS over HTTP connections/queries counters with the nghttp2 provider
  * Fix first IPv6 console connection being rejected
  * Fix XSK-enabled check when reconnecting a backend
  * Properly handle a failure of the first lazy health-check
  * Also handle EHOSTUNREACH as a case for reconnecting the socket</changelog>
  <changelog author="mrueckert@suse.de" date="1727611200">- update to 1.9.6:
  https://dnsdist.org/changelog.html#change-1.9.6
  https://dnsdist.org/changelog.html#change-1.9.5
- add powerdns-5_1_1-2_fix-build-with-boost-1_86_0.patch from Arch
  linux to fix build with Boost 1.86
- track series file for easier patching</changelog>
  <changelog author="mrueckert@suse.de" date="1730808000">- update to 1.9.7:
  https://dnsdist.org/changelog.html#change-1.9.7
- drop powerdns-5_1_1-2_fix-build-with-boost-1_86_0.patch included
  in update</changelog>
  <changelog author="adam.majer@suse.de" date="1748260800">- update to 1.9.10: (bsc#1243378, bsc#1242028, CVE-2025-30194, CVE-2025-30193)
  https://www.dnsdist.org/changelog.html#change-1.9.10
- disable luajit on ppc64le for SLFO (bsc#1243566)</changelog>
  <changelog author="adam.majer@suse.de" date="1772798400">- update to 1.9.11:
  * Add mitigations for the HTTP/2 MadeYouReset attack (bsc#1253852, CVE-2025-8671)
    fix a possible DoS in incoming DoH with nghttp2 (bsc#1250054, CVE-2025-30187)
  * Fix the IO reentry guard in outgoing DoH</changelog>
</package>
<package pkgid="4a0dac04586ac7115027e66e7b98d937974ec401ab9194874ac67e37d7862216" name="dnsdist" arch="src">
  <version epoch="0" ver="1.9.12" rel="150700.3.9.1"/>
  <changelog author="mrueckert@suse.de" date="1667390400">- update to 1.7.3
  https://dnsdist.org/changelog.html#change-1.7.3
  https://blog.powerdns.com/2022/11/02/dnsdist-1-7-3-released/</changelog>
  <changelog author="adam.majer@suse.de" date="1676030400">- Remove some build dependencies, like GNUTLS
- Remove DoH since it requires another http server that is not
  even in Factory. It's enabled by project config
- Build on 32bit arches by using 64bit time_t there</changelog>
  <changelog author="adam.majer@suse.de" date="1676894400">- Use sysusers* macros to generate and install daemon user</changelog>
  <changelog author="dimstar@opensuse.org" date="1677240000">- Refresh keyring: redownload
  https://dnsdist.org/_static/dnsdist-keyblock.asc as
  dnsdist.keyring.</changelog>
  <changelog author="adam.majer@suse.de" date="1677499200">- update to 1.8.0~rc1
  https://dnsdist.org/changelog.html#change-1.8.0-rc1
- no_doh_protobuf.patch: fix compilation when no DoH enabled
- f44a8a8f19aff191fb1dc0631e37ec30ff087c25.patch: fixes compiler
  feature detection</changelog>
  <changelog author="adam.majer@suse.de" date="1678363200">- update to 1.8.0~rc2
  https://dnsdist.org/changelog.html#change-1.8.0-rc2
- no_doh_protobuf.patch, f44a8a8f19aff191fb1dc0631e37ec30ff087c25.patch
  upstreamed and removed</changelog>
  <changelog author="adam.majer@suse.de" date="1679486400">- update to 1.8.0~rc3
  https://dnsdist.org/changelog.html#change-1.8.0-rc3
- dnsdist.lua sample config -- comment google's DNS servers. Valid
  downstream DNS resolver configuration should be chosen by the admin</changelog>
  <changelog author="adam.majer@suse.de" date="1680177600">- update to 1.8.0
  https://dnsdist.org/changelog.html#change-1.8.0
- Implements dnsdist in SLE15 (jsc#PED-3402)</changelog>
  <changelog author="adam.majer@suse.de" date="1694174400">- update to 1.8.1
  bug fix release. For details, see
  https://dnsdist.org/changelog.html#change-1.8.1</changelog>
  <changelog author="dimstar@opensuse.org" date="1698667200">- BuildRequire pkgconfig(systemd): configure checks for the
  presence of systemctl, which is being pulled in like this.</changelog>
  <changelog author="meissner@suse.com" date="1707134400">- provide user(dnsdist) and group(dnsdist)</changelog>
  <changelog author="adam.majer@suse.de" date="1707480000">- update to 1.8.3
  https://dnsdist.org/changelog.html#change-1.8.3
  https://dnsdist.org/changelog.html#change-1.8.2</changelog>
  <changelog author="dimstar@opensuse.org" date="1707480001">- Revert "provide user(dnsdist) and group(dnsdist)": the package
  already uses sysusers-tools to create the user.
- Actually install dnsdist.user as %{_sysusersdir}/dnsdist.conf.</changelog>
  <changelog author="adam.majer@suse.de" date="1708084800">- update to 1.9.0:
  * Fall back to libcrypto for authenticated encryption
  * Optimize the DoQ packet handling path
  * DNSName: Correct len and offset types
  * DNSName: Optimize parsing of uncompressed labels
  * enable DNS-over-HTTPS via nghttp2 library usage
  For details, see
  https://dnsdist.org/changelog.html#change-1.9.0</changelog>
  <changelog author="adam.majer@suse.de" date="1715601600">- update to 1.9.4: (bsc#1224001, CVE-2024-25581)
  * Fix “C++ One Definition Rule” warnings in XSK
  * Fix DNS over plain HTTP broken by reloadAllCertificates()
  * Fix a crash in incoming DoH with nghttp2
  * Fix handling of XFR requests over DoH
- changes since 1.9.0:
  * Support “no server available” result from Lua FFI load-balancing policies
  * Release incoming TCP connection right away on backend failure
  * Use server preference algorithm for ALPN selection
  * Fix a null-deref in incoming DNS over HTTPS with the nghttp2 provider
  * Fix DNS over HTTP connections/queries counters with the nghttp2 provider
  * Fix first IPv6 console connection being rejected
  * Fix XSK-enabled check when reconnecting a backend
  * Properly handle a failure of the first lazy health-check
  * Also handle EHOSTUNREACH as a case for reconnecting the socket</changelog>
  <changelog author="mrueckert@suse.de" date="1727611200">- update to 1.9.6:
  https://dnsdist.org/changelog.html#change-1.9.6
  https://dnsdist.org/changelog.html#change-1.9.5
- add powerdns-5_1_1-2_fix-build-with-boost-1_86_0.patch from Arch
  linux to fix build with Boost 1.86
- track series file for easier patching</changelog>
  <changelog author="mrueckert@suse.de" date="1730808000">- update to 1.9.7:
  https://dnsdist.org/changelog.html#change-1.9.7
- drop powerdns-5_1_1-2_fix-build-with-boost-1_86_0.patch included
  in update</changelog>
  <changelog author="adam.majer@suse.de" date="1748260800">- update to 1.9.10: (bsc#1243378, bsc#1242028, CVE-2025-30194, CVE-2025-30193)
  https://www.dnsdist.org/changelog.html#change-1.9.10
- disable luajit on ppc64le for SLFO (bsc#1243566)</changelog>
  <changelog author="adam.majer@suse.de" date="1772798400">- update to 1.9.11:
  * Add mitigations for the HTTP/2 MadeYouReset attack (bsc#1253852, CVE-2025-8671)
    fix a possible DoS in incoming DoH with nghttp2 (bsc#1250054, CVE-2025-30187)
  * Fix the IO reentry guard in outgoing DoH</changelog>
  <changelog author="adam.majer@suse.de" date="1775044800">- update to 1.9.12:
  https://www.dnsdist.org/changelog.html#change-1.9.12
  (CVE-2026-0396, bsc#1261236, CVE-2026-0397, bsc#1261237,
  CVE-2026-24028, bsc#1261238, CVE-2026-24029, bsc#1261239,
  CVE-2026-24030, bsc#1261240, CVE-2026-27853, bsc#1261241,
  CVE-2026-27854, bsc#1261243)</changelog>
</package>
<package pkgid="1795cc0611703832a15dbf0400cee5bdfff825f80868a748046e3757a827eec0" name="dnsdist" arch="x86_64">
  <version epoch="0" ver="1.9.12" rel="150700.3.9.1"/>
  <changelog author="mrueckert@suse.de" date="1667390400">- update to 1.7.3
  https://dnsdist.org/changelog.html#change-1.7.3
  https://blog.powerdns.com/2022/11/02/dnsdist-1-7-3-released/</changelog>
  <changelog author="adam.majer@suse.de" date="1676030400">- Remove some build dependencies, like GNUTLS
- Remove DoH since it requires another http server that is not
  even in Factory. It's enabled by project config
- Build on 32bit arches by using 64bit time_t there</changelog>
  <changelog author="adam.majer@suse.de" date="1676894400">- Use sysusers* macros to generate and install daemon user</changelog>
  <changelog author="dimstar@opensuse.org" date="1677240000">- Refresh keyring: redownload
  https://dnsdist.org/_static/dnsdist-keyblock.asc as
  dnsdist.keyring.</changelog>
  <changelog author="adam.majer@suse.de" date="1677499200">- update to 1.8.0~rc1
  https://dnsdist.org/changelog.html#change-1.8.0-rc1
- no_doh_protobuf.patch: fix compilation when no DoH enabled
- f44a8a8f19aff191fb1dc0631e37ec30ff087c25.patch: fixes compiler
  feature detection</changelog>
  <changelog author="adam.majer@suse.de" date="1678363200">- update to 1.8.0~rc2
  https://dnsdist.org/changelog.html#change-1.8.0-rc2
- no_doh_protobuf.patch, f44a8a8f19aff191fb1dc0631e37ec30ff087c25.patch
  upstreamed and removed</changelog>
  <changelog author="adam.majer@suse.de" date="1679486400">- update to 1.8.0~rc3
  https://dnsdist.org/changelog.html#change-1.8.0-rc3
- dnsdist.lua sample config -- comment google's DNS servers. Valid
  downstream DNS resolver configuration should be chosen by the admin</changelog>
  <changelog author="adam.majer@suse.de" date="1680177600">- update to 1.8.0
  https://dnsdist.org/changelog.html#change-1.8.0
- Implements dnsdist in SLE15 (jsc#PED-3402)</changelog>
  <changelog author="adam.majer@suse.de" date="1694174400">- update to 1.8.1
  bug fix release. For details, see
  https://dnsdist.org/changelog.html#change-1.8.1</changelog>
  <changelog author="dimstar@opensuse.org" date="1698667200">- BuildRequire pkgconfig(systemd): configure checks for the
  presence of systemctl, which is being pulled in like this.</changelog>
  <changelog author="meissner@suse.com" date="1707134400">- provide user(dnsdist) and group(dnsdist)</changelog>
  <changelog author="adam.majer@suse.de" date="1707480000">- update to 1.8.3
  https://dnsdist.org/changelog.html#change-1.8.3
  https://dnsdist.org/changelog.html#change-1.8.2</changelog>
  <changelog author="dimstar@opensuse.org" date="1707480001">- Revert "provide user(dnsdist) and group(dnsdist)": the package
  already uses sysusers-tools to create the user.
- Actually install dnsdist.user as %{_sysusersdir}/dnsdist.conf.</changelog>
  <changelog author="adam.majer@suse.de" date="1708084800">- update to 1.9.0:
  * Fall back to libcrypto for authenticated encryption
  * Optimize the DoQ packet handling path
  * DNSName: Correct len and offset types
  * DNSName: Optimize parsing of uncompressed labels
  * enable DNS-over-HTTPS via nghttp2 library usage
  For details, see
  https://dnsdist.org/changelog.html#change-1.9.0</changelog>
  <changelog author="adam.majer@suse.de" date="1715601600">- update to 1.9.4: (bsc#1224001, CVE-2024-25581)
  * Fix “C++ One Definition Rule” warnings in XSK
  * Fix DNS over plain HTTP broken by reloadAllCertificates()
  * Fix a crash in incoming DoH with nghttp2
  * Fix handling of XFR requests over DoH
- changes since 1.9.0:
  * Support “no server available” result from Lua FFI load-balancing policies
  * Release incoming TCP connection right away on backend failure
  * Use server preference algorithm for ALPN selection
  * Fix a null-deref in incoming DNS over HTTPS with the nghttp2 provider
  * Fix DNS over HTTP connections/queries counters with the nghttp2 provider
  * Fix first IPv6 console connection being rejected
  * Fix XSK-enabled check when reconnecting a backend
  * Properly handle a failure of the first lazy health-check
  * Also handle EHOSTUNREACH as a case for reconnecting the socket</changelog>
  <changelog author="mrueckert@suse.de" date="1727611200">- update to 1.9.6:
  https://dnsdist.org/changelog.html#change-1.9.6
  https://dnsdist.org/changelog.html#change-1.9.5
- add powerdns-5_1_1-2_fix-build-with-boost-1_86_0.patch from Arch
  linux to fix build with Boost 1.86
- track series file for easier patching</changelog>
  <changelog author="mrueckert@suse.de" date="1730808000">- update to 1.9.7:
  https://dnsdist.org/changelog.html#change-1.9.7
- drop powerdns-5_1_1-2_fix-build-with-boost-1_86_0.patch included
  in update</changelog>
  <changelog author="adam.majer@suse.de" date="1748260800">- update to 1.9.10: (bsc#1243378, bsc#1242028, CVE-2025-30194, CVE-2025-30193)
  https://www.dnsdist.org/changelog.html#change-1.9.10
- disable luajit on ppc64le for SLFO (bsc#1243566)</changelog>
  <changelog author="adam.majer@suse.de" date="1772798400">- update to 1.9.11:
  * Add mitigations for the HTTP/2 MadeYouReset attack (bsc#1253852, CVE-2025-8671)
    fix a possible DoS in incoming DoH with nghttp2 (bsc#1250054, CVE-2025-30187)
  * Fix the IO reentry guard in outgoing DoH</changelog>
  <changelog author="adam.majer@suse.de" date="1775044800">- update to 1.9.12:
  https://www.dnsdist.org/changelog.html#change-1.9.12
  (CVE-2026-0396, bsc#1261236, CVE-2026-0397, bsc#1261237,
  CVE-2026-24028, bsc#1261238, CVE-2026-24029, bsc#1261239,
  CVE-2026-24030, bsc#1261240, CVE-2026-27853, bsc#1261241,
  CVE-2026-27854, bsc#1261243)</changelog>
</package>
<package pkgid="c4922387609aa3fdb6c03b4ebb0fbc7a34232f415dc274efba8710d2c7a82c4d" name="dnsmasq" arch="src">
  <version epoch="0" ver="2.90" rel="150400.16.9.1"/>
  <changelog author="gmbr3@opensuse.org" date="1622635200">- Change to using systemd-sysusers on TW</changelog>
  <changelog author="gmbr3@opensuse.org" date="1623585600">- Add now working CONFIG parameter to sysusers generator</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400).</changelog>
  <changelog author="max@suse.com" date="1631880000">- Update to 2.86:
  * Handle DHCPREBIND requests in the DHCPv6 server code.
  * Fix bug which caused dnsmasq to lose track of processes forked
    to handle TCP DNS connections under heavy load.
  * Major rewrite of the DNS server and domain handling code. This
    should be largely transparent, but it drastically improves
    performance and reduces memory foot-print when configuring
    large numbers of domains.
  * Revise resource handling for number of concurrent DNS queries.
  * Improve efficiency of DNSSEC.
  * Connection track mark based DNS query filtering.
  * Allow smaller than 64 prefix lengths in synth-domain, with
    caveats.
  - -synth-domain=1234:4567::/56,example.com is now valid.
  * Make domains generated by --synth-domain appear in replies
    when in authoritative mode.
  * Ensure CAP_NET_ADMIN capability is available when conntrack
    is configured.
  * When --dhcp-hostsfile --dhcp-optsfile and --addn-hosts are
    given a directory as argument, define the order in which files
    within that directory are read (alphabetical order of filename).</changelog>
  <changelog author="max@suse.com" date="1632398400">- jsc#SLE-17936: Sync this state from Factory to SLE-15-SP1.
- SLE bugs that got fixed upstream between 2.79 and 2.86, but for
  which we need to keep references when syncing:
  * bsc#1176076: dnsmasq-servfail.patch
  * bsc#1156543: dnsmasq-siocgstamp.patch
  * bsc#1138743: dnsmasq-cache-size.patch
  * bsc#1076958: CVE-2017-15107, dnsmasq-CVE-2017-15107.patch
  * bsc#1180914: Open inotify socket only when used.
  * removed dnsmasq-dnspooq.patch
- bsc#1173646, CVE-2020-14312: Set --local-service by default.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Use systemd-sysusers from 15.3 onwards</changelog>
  <changelog author="max@suse.com" date="1637236800">- bsc#1192529, dnsmasq-resolv-conf.patch:
  Fix a segfault when re-reading an empty resolv.conf
- Remove "nogroup" membership from the dnsmasq user.</changelog>
  <changelog author="max@suse.com" date="1649160000">- bsc#1197872, CVE-2022-0934, dnsmasq-CVE-2022-0934.patch:
  Heap use after free in dhcp6_no_relay</changelog>
  <changelog author="gmbr3@opensuse.org" date="1654689600">- Move the dbus-1 system.d file to /usr (bsc#1200344)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1662724800">- Ensure the dnsmasq user's group is used
- Remove nogroup requirement</changelog>
  <changelog author="dmueller@suse.com" date="1666785600">- update to 2.87 (bsc#1197872, CVE-2022-0934):
  * Allow arbitrary prefix lengths in --rev-server and
  - -domain=....,local
  * Replace --address=/#/..... functionality which got
    missed in the 2.86 domain search rewrite.
  * Add --nftset option, like --ipset but for the newer nftables.
  * Add --filter-A and --filter-AAAA options, to remove IPv4 or IPv6
    addresses from DNS answers.
  * Fix crash doing netbooting when --port is set to zero
    to disable the DNS server. Thanks to Drexl Johannes
    for the bug report.
  * Generalise --dhcp-relay. Sending via broadcast/multicast is
    now supported for both IPv4 and IPv6 and the configuration
    syntax made easier (but backwards compatible).
  * Add snooping of IPv6 prefix-delegations to the DHCP-relay system.
  * Finesse parsing of --dhcp-remoteid and --dhcp-subscrid. To be treated
    as hex, the pattern must consist of only hex digits AND contain
    at least one ':'. Thanks to Bengt-Erik Sandstrom who tripped
    over a pattern consisting of a decimal number which was interpreted
    surprisingly.
  * Include client address in TFTP file-not-found error reports.
    Thanks to Stefan Rink for the initial patch, which has been
    re-worked by me (srk). All bugs mine.
  * Note in manpage the change in behaviour of -address. This behaviour
    actually changed in v2.86, but was undocumented there. From 2.86 on,
    (eg) --address=/example.com/1.2.3.4 ONLY applies to A queries. All other
    types of query will be sent upstream. Pre 2.86, that would catch the
    whole example.com domain and queries for other types would get
    a local NODATA answer. The pre-2.86 behaviour is still available,
    by configuring --address=/example.com/1.2.3.4 --local=/example.com/
  * Fix problem with binding DHCP sockets to an individual interface.
    Despite the fact that the system call tales the interface _name_ as
    a parameter, it actually, binds the socket to interface _index_.
    Deleting the interface and creating a new one with the same name
    leaves the socket bound to the old index. (Creating new sockets
    always allocates a fresh index, they are not reused). We now
    take this behaviour into account and keep up with changing indexes.
  * Add --conf-script configuration option.
  * Enhance --domain to accept, for instance,
  - -domain=net2.thekelleys.org.uk,eth2 so that hosts get a domain
    which relects the interface they are attached to in a way which
    doesn't require hard-coding addresses. Thanks to Sten Spans for
    the idea.
  * Fix write-after-free error in DHCPv6 server code.
    CVE-2022-0934 refers.
  * Add the ability to specify destination port in
    DHCP-relay mode. This change also removes a previous bug
    where --dhcp-alternate-port would affect the port used
    to relay _to_ as well as the port being listened on.
    The new feature allows configuration to provide bug-for-bug
    compatibility, if required. Thanks to Damian Kaczkowski
    for the feature suggestion.
  * Bound the value of UDP packet size in the EDNS0 header of
    forwarded queries to the configured or default value of
    edns-packet-max. There's no point letting a client set a larger
    value if we're unable to return the answer. Thanks to Bertie
    Taylor for pointing out the problem and supplying the patch.
- drop dnsmasq-CVE-2022-0934.patch, dnsmasq-resolv-conf.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 2.88:
  * Fix bug in --dynamic-host when an interface has /16 IPv4
  * address.
  * Add --fast-dns-retry option. This gives dnsmasq the ability
    to originate retries for upstream DNS queries itself, rather
    than relying on the downstream client. This is most useful
    when doing DNSSEC over unreliable upstream networks. It comes
    with some cost in memory usage and network bandwidth.
  * Add --use-stale-cache option. When set, if a DNS name exists
    in the cache, but its time-to-live has expired, dnsmasq will
    return the data anyway.
  * handle removal of whole files or entries within files.</changelog>
  <changelog author="info@paolostivanin.com" date="1675684800">- update to 2.89:
  * Fix bug introduced in 2.88 (commit fe91134b) which can result
    in corruption of the DNS cache internal data structures and
    logging of "cache internal error". This has only been seen
    in one place in the wild, and it took considerable effort
    to even generate a test case to reproduce it, but there's
    no way to be sure it won't strike, and the effect is to break
    the cache badly. Installations with DNSSEC enabled are more
    likely to see the problem, but not running DNSSEC does not
    guarantee that it won't happen. Thanks to Timo van Roermund
    for reporting the bug and for his great efforts in chasing
    it down. (boo#1207174)
- remove no longer needed rpmlintrc filters</changelog>
  <changelog author="max@suse.com" date="1682424000">- bsc#1209358, CVE-2023-28450, dnsmasq-CVE-2023-28450.patch:
  default maximum EDNS.0 UDP packet size should be 1232</changelog>
  <changelog author="gmbr3@opensuse.org" date="1683979200">- Correct rundir from /var/run to /run for pid file</changelog>
  <changelog author="kukuk@suse.com" date="1697198400">- SLP got dropped, remove config (bsc#1214884)</changelog>
  <changelog author="max@suse.com" date="1707912000">- update to 2.90:
  * CVE-2023-50387, CVE-2023-50868, bsc#1219823, bsc#1219826:
    Denial Of Service while trying to validate specially crafted
    DNSSEC responses
  * CVE-2023-49441, bsc#1226091: integer overflow via forward_query
  * Fix reversion in --rev-server introduced in 2.88 which caused
    breakage if the prefix length is not exactly divisible by 8
    (IPv4) or 4 (IPv6).
  * Fix possible SEGV when there server(s) for a particular domain
    are configured, but no server which is not qualified for a
    particular domain.
  * Set the default maximum DNS UDP packet sice to 1232.
    Obsoletes: dnsmasq-CVE-2023-28450.patch
  * Add --no-dhcpv4-interface and --no-dhcpv6-interface for better
    control over which inetrfaces are providing DHCP service.
  * Fix issue with stale caching
  * Add configurable caching for arbitrary RR-types.
  * Add --filter-rr option, to filter arbitrary RR-types.</changelog>
  <changelog author="lukasstraub2@web.de" date="1728388800">- Enable --nftset support</changelog>
  <changelog author="max@suse.com" date="1736856000">- bsc#1235834: Don't let compile time options change silently.
- Use pkgconfig for libidn2.
- Disable --nftset for SLE-15-SP3 and older.
- bsc#1235517: Reintroduce nogroup for SLE-15-SP3 and older.</changelog>
  <changelog author="max@suse.com" date="1771848000">- bsc#1258251, CVE-2026-2291, dnsmasq-CVE-2026-2291.patch:
  dnsmasq can be abused to record false cached data enabling DoS
  or attacker redirect.</changelog>
</package>
<package pkgid="d460f72946d5e2d6cd1c7d5b46a9c91c17d137c86a9b29182e7b896730de242d" name="dnsmasq" arch="x86_64">
  <version epoch="0" ver="2.90" rel="150400.16.9.1"/>
  <changelog author="gmbr3@opensuse.org" date="1622635200">- Change to using systemd-sysusers on TW</changelog>
  <changelog author="gmbr3@opensuse.org" date="1623585600">- Add now working CONFIG parameter to sysusers generator</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400).</changelog>
  <changelog author="max@suse.com" date="1631880000">- Update to 2.86:
  * Handle DHCPREBIND requests in the DHCPv6 server code.
  * Fix bug which caused dnsmasq to lose track of processes forked
    to handle TCP DNS connections under heavy load.
  * Major rewrite of the DNS server and domain handling code. This
    should be largely transparent, but it drastically improves
    performance and reduces memory foot-print when configuring
    large numbers of domains.
  * Revise resource handling for number of concurrent DNS queries.
  * Improve efficiency of DNSSEC.
  * Connection track mark based DNS query filtering.
  * Allow smaller than 64 prefix lengths in synth-domain, with
    caveats.
  - -synth-domain=1234:4567::/56,example.com is now valid.
  * Make domains generated by --synth-domain appear in replies
    when in authoritative mode.
  * Ensure CAP_NET_ADMIN capability is available when conntrack
    is configured.
  * When --dhcp-hostsfile --dhcp-optsfile and --addn-hosts are
    given a directory as argument, define the order in which files
    within that directory are read (alphabetical order of filename).</changelog>
  <changelog author="max@suse.com" date="1632398400">- jsc#SLE-17936: Sync this state from Factory to SLE-15-SP1.
- SLE bugs that got fixed upstream between 2.79 and 2.86, but for
  which we need to keep references when syncing:
  * bsc#1176076: dnsmasq-servfail.patch
  * bsc#1156543: dnsmasq-siocgstamp.patch
  * bsc#1138743: dnsmasq-cache-size.patch
  * bsc#1076958: CVE-2017-15107, dnsmasq-CVE-2017-15107.patch
  * bsc#1180914: Open inotify socket only when used.
  * removed dnsmasq-dnspooq.patch
- bsc#1173646, CVE-2020-14312: Set --local-service by default.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Use systemd-sysusers from 15.3 onwards</changelog>
  <changelog author="max@suse.com" date="1637236800">- bsc#1192529, dnsmasq-resolv-conf.patch:
  Fix a segfault when re-reading an empty resolv.conf
- Remove "nogroup" membership from the dnsmasq user.</changelog>
  <changelog author="max@suse.com" date="1649160000">- bsc#1197872, CVE-2022-0934, dnsmasq-CVE-2022-0934.patch:
  Heap use after free in dhcp6_no_relay</changelog>
  <changelog author="gmbr3@opensuse.org" date="1654689600">- Move the dbus-1 system.d file to /usr (bsc#1200344)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1662724800">- Ensure the dnsmasq user's group is used
- Remove nogroup requirement</changelog>
  <changelog author="dmueller@suse.com" date="1666785600">- update to 2.87 (bsc#1197872, CVE-2022-0934):
  * Allow arbitrary prefix lengths in --rev-server and
  - -domain=....,local
  * Replace --address=/#/..... functionality which got
    missed in the 2.86 domain search rewrite.
  * Add --nftset option, like --ipset but for the newer nftables.
  * Add --filter-A and --filter-AAAA options, to remove IPv4 or IPv6
    addresses from DNS answers.
  * Fix crash doing netbooting when --port is set to zero
    to disable the DNS server. Thanks to Drexl Johannes
    for the bug report.
  * Generalise --dhcp-relay. Sending via broadcast/multicast is
    now supported for both IPv4 and IPv6 and the configuration
    syntax made easier (but backwards compatible).
  * Add snooping of IPv6 prefix-delegations to the DHCP-relay system.
  * Finesse parsing of --dhcp-remoteid and --dhcp-subscrid. To be treated
    as hex, the pattern must consist of only hex digits AND contain
    at least one ':'. Thanks to Bengt-Erik Sandstrom who tripped
    over a pattern consisting of a decimal number which was interpreted
    surprisingly.
  * Include client address in TFTP file-not-found error reports.
    Thanks to Stefan Rink for the initial patch, which has been
    re-worked by me (srk). All bugs mine.
  * Note in manpage the change in behaviour of -address. This behaviour
    actually changed in v2.86, but was undocumented there. From 2.86 on,
    (eg) --address=/example.com/1.2.3.4 ONLY applies to A queries. All other
    types of query will be sent upstream. Pre 2.86, that would catch the
    whole example.com domain and queries for other types would get
    a local NODATA answer. The pre-2.86 behaviour is still available,
    by configuring --address=/example.com/1.2.3.4 --local=/example.com/
  * Fix problem with binding DHCP sockets to an individual interface.
    Despite the fact that the system call tales the interface _name_ as
    a parameter, it actually, binds the socket to interface _index_.
    Deleting the interface and creating a new one with the same name
    leaves the socket bound to the old index. (Creating new sockets
    always allocates a fresh index, they are not reused). We now
    take this behaviour into account and keep up with changing indexes.
  * Add --conf-script configuration option.
  * Enhance --domain to accept, for instance,
  - -domain=net2.thekelleys.org.uk,eth2 so that hosts get a domain
    which relects the interface they are attached to in a way which
    doesn't require hard-coding addresses. Thanks to Sten Spans for
    the idea.
  * Fix write-after-free error in DHCPv6 server code.
    CVE-2022-0934 refers.
  * Add the ability to specify destination port in
    DHCP-relay mode. This change also removes a previous bug
    where --dhcp-alternate-port would affect the port used
    to relay _to_ as well as the port being listened on.
    The new feature allows configuration to provide bug-for-bug
    compatibility, if required. Thanks to Damian Kaczkowski
    for the feature suggestion.
  * Bound the value of UDP packet size in the EDNS0 header of
    forwarded queries to the configured or default value of
    edns-packet-max. There's no point letting a client set a larger
    value if we're unable to return the answer. Thanks to Bertie
    Taylor for pointing out the problem and supplying the patch.
- drop dnsmasq-CVE-2022-0934.patch, dnsmasq-resolv-conf.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 2.88:
  * Fix bug in --dynamic-host when an interface has /16 IPv4
  * address.
  * Add --fast-dns-retry option. This gives dnsmasq the ability
    to originate retries for upstream DNS queries itself, rather
    than relying on the downstream client. This is most useful
    when doing DNSSEC over unreliable upstream networks. It comes
    with some cost in memory usage and network bandwidth.
  * Add --use-stale-cache option. When set, if a DNS name exists
    in the cache, but its time-to-live has expired, dnsmasq will
    return the data anyway.
  * handle removal of whole files or entries within files.</changelog>
  <changelog author="info@paolostivanin.com" date="1675684800">- update to 2.89:
  * Fix bug introduced in 2.88 (commit fe91134b) which can result
    in corruption of the DNS cache internal data structures and
    logging of "cache internal error". This has only been seen
    in one place in the wild, and it took considerable effort
    to even generate a test case to reproduce it, but there's
    no way to be sure it won't strike, and the effect is to break
    the cache badly. Installations with DNSSEC enabled are more
    likely to see the problem, but not running DNSSEC does not
    guarantee that it won't happen. Thanks to Timo van Roermund
    for reporting the bug and for his great efforts in chasing
    it down. (boo#1207174)
- remove no longer needed rpmlintrc filters</changelog>
  <changelog author="max@suse.com" date="1682424000">- bsc#1209358, CVE-2023-28450, dnsmasq-CVE-2023-28450.patch:
  default maximum EDNS.0 UDP packet size should be 1232</changelog>
  <changelog author="gmbr3@opensuse.org" date="1683979200">- Correct rundir from /var/run to /run for pid file</changelog>
  <changelog author="kukuk@suse.com" date="1697198400">- SLP got dropped, remove config (bsc#1214884)</changelog>
  <changelog author="max@suse.com" date="1707912000">- update to 2.90:
  * CVE-2023-50387, CVE-2023-50868, bsc#1219823, bsc#1219826:
    Denial Of Service while trying to validate specially crafted
    DNSSEC responses
  * CVE-2023-49441, bsc#1226091: integer overflow via forward_query
  * Fix reversion in --rev-server introduced in 2.88 which caused
    breakage if the prefix length is not exactly divisible by 8
    (IPv4) or 4 (IPv6).
  * Fix possible SEGV when there server(s) for a particular domain
    are configured, but no server which is not qualified for a
    particular domain.
  * Set the default maximum DNS UDP packet sice to 1232.
    Obsoletes: dnsmasq-CVE-2023-28450.patch
  * Add --no-dhcpv4-interface and --no-dhcpv6-interface for better
    control over which inetrfaces are providing DHCP service.
  * Fix issue with stale caching
  * Add configurable caching for arbitrary RR-types.
  * Add --filter-rr option, to filter arbitrary RR-types.</changelog>
  <changelog author="lukasstraub2@web.de" date="1728388800">- Enable --nftset support</changelog>
  <changelog author="max@suse.com" date="1736856000">- bsc#1235834: Don't let compile time options change silently.
- Use pkgconfig for libidn2.
- Disable --nftset for SLE-15-SP3 and older.
- bsc#1235517: Reintroduce nogroup for SLE-15-SP3 and older.</changelog>
  <changelog author="max@suse.com" date="1771848000">- bsc#1258251, CVE-2026-2291, dnsmasq-CVE-2026-2291.patch:
  dnsmasq can be abused to record false cached data enabling DoS
  or attacker redirect.</changelog>
</package>
<package pkgid="86d8f90b2553d31051a2bf76868d79b5da3cfad8dc0be53e68f878aabe7f9520" name="dnsmasq" arch="src">
  <version epoch="0" ver="2.92rel2" rel="150400.16.12.1"/>
  <changelog author="max@suse.com" date="1649160000">- bsc#1197872, CVE-2022-0934, dnsmasq-CVE-2022-0934.patch:
  Heap use after free in dhcp6_no_relay</changelog>
  <changelog author="gmbr3@opensuse.org" date="1654689600">- Move the dbus-1 system.d file to /usr (bsc#1200344)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1662724800">- Ensure the dnsmasq user's group is used
- Remove nogroup requirement</changelog>
  <changelog author="dmueller@suse.com" date="1666785600">- update to 2.87 (bsc#1197872, CVE-2022-0934):
  * Allow arbitrary prefix lengths in --rev-server and
  - -domain=....,local
  * Replace --address=/#/..... functionality which got
    missed in the 2.86 domain search rewrite.
  * Add --nftset option, like --ipset but for the newer nftables.
  * Add --filter-A and --filter-AAAA options, to remove IPv4 or IPv6
    addresses from DNS answers.
  * Fix crash doing netbooting when --port is set to zero
    to disable the DNS server. Thanks to Drexl Johannes
    for the bug report.
  * Generalise --dhcp-relay. Sending via broadcast/multicast is
    now supported for both IPv4 and IPv6 and the configuration
    syntax made easier (but backwards compatible).
  * Add snooping of IPv6 prefix-delegations to the DHCP-relay system.
  * Finesse parsing of --dhcp-remoteid and --dhcp-subscrid. To be treated
    as hex, the pattern must consist of only hex digits AND contain
    at least one ':'. Thanks to Bengt-Erik Sandstrom who tripped
    over a pattern consisting of a decimal number which was interpreted
    surprisingly.
  * Include client address in TFTP file-not-found error reports.
    Thanks to Stefan Rink for the initial patch, which has been
    re-worked by me (srk). All bugs mine.
  * Note in manpage the change in behaviour of -address. This behaviour
    actually changed in v2.86, but was undocumented there. From 2.86 on,
    (eg) --address=/example.com/1.2.3.4 ONLY applies to A queries. All other
    types of query will be sent upstream. Pre 2.86, that would catch the
    whole example.com domain and queries for other types would get
    a local NODATA answer. The pre-2.86 behaviour is still available,
    by configuring --address=/example.com/1.2.3.4 --local=/example.com/
  * Fix problem with binding DHCP sockets to an individual interface.
    Despite the fact that the system call tales the interface _name_ as
    a parameter, it actually, binds the socket to interface _index_.
    Deleting the interface and creating a new one with the same name
    leaves the socket bound to the old index. (Creating new sockets
    always allocates a fresh index, they are not reused). We now
    take this behaviour into account and keep up with changing indexes.
  * Add --conf-script configuration option.
  * Enhance --domain to accept, for instance,
  - -domain=net2.thekelleys.org.uk,eth2 so that hosts get a domain
    which relects the interface they are attached to in a way which
    doesn't require hard-coding addresses. Thanks to Sten Spans for
    the idea.
  * Fix write-after-free error in DHCPv6 server code.
    CVE-2022-0934 refers.
  * Add the ability to specify destination port in
    DHCP-relay mode. This change also removes a previous bug
    where --dhcp-alternate-port would affect the port used
    to relay _to_ as well as the port being listened on.
    The new feature allows configuration to provide bug-for-bug
    compatibility, if required. Thanks to Damian Kaczkowski
    for the feature suggestion.
  * Bound the value of UDP packet size in the EDNS0 header of
    forwarded queries to the configured or default value of
    edns-packet-max. There's no point letting a client set a larger
    value if we're unable to return the answer. Thanks to Bertie
    Taylor for pointing out the problem and supplying the patch.
- drop dnsmasq-CVE-2022-0934.patch, dnsmasq-resolv-conf.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 2.88:
  * Fix bug in --dynamic-host when an interface has /16 IPv4
  * address.
  * Add --fast-dns-retry option. This gives dnsmasq the ability
    to originate retries for upstream DNS queries itself, rather
    than relying on the downstream client. This is most useful
    when doing DNSSEC over unreliable upstream networks. It comes
    with some cost in memory usage and network bandwidth.
  * Add --use-stale-cache option. When set, if a DNS name exists
    in the cache, but its time-to-live has expired, dnsmasq will
    return the data anyway.
  * handle removal of whole files or entries within files.</changelog>
  <changelog author="info@paolostivanin.com" date="1675684800">- update to 2.89:
  * Fix bug introduced in 2.88 (commit fe91134b) which can result
    in corruption of the DNS cache internal data structures and
    logging of "cache internal error". This has only been seen
    in one place in the wild, and it took considerable effort
    to even generate a test case to reproduce it, but there's
    no way to be sure it won't strike, and the effect is to break
    the cache badly. Installations with DNSSEC enabled are more
    likely to see the problem, but not running DNSSEC does not
    guarantee that it won't happen. Thanks to Timo van Roermund
    for reporting the bug and for his great efforts in chasing
    it down. (boo#1207174)
- remove no longer needed rpmlintrc filters</changelog>
  <changelog author="max@suse.com" date="1682424000">- bsc#1209358, CVE-2023-28450, dnsmasq-CVE-2023-28450.patch:
  default maximum EDNS.0 UDP packet size should be 1232</changelog>
  <changelog author="gmbr3@opensuse.org" date="1683979200">- Correct rundir from /var/run to /run for pid file</changelog>
  <changelog author="kukuk@suse.com" date="1697198400">- SLP got dropped, remove config (bsc#1214884)</changelog>
  <changelog author="max@suse.com" date="1707912000">- update to 2.90:
  * CVE-2023-50387, CVE-2023-50868, bsc#1219823, bsc#1219826:
    Denial Of Service while trying to validate specially crafted
    DNSSEC responses
  * CVE-2023-49441, bsc#1226091: integer overflow via forward_query
  * Fix reversion in --rev-server introduced in 2.88 which caused
    breakage if the prefix length is not exactly divisible by 8
    (IPv4) or 4 (IPv6).
  * Fix possible SEGV when there server(s) for a particular domain
    are configured, but no server which is not qualified for a
    particular domain.
  * Set the default maximum DNS UDP packet sice to 1232.
    Obsoletes: dnsmasq-CVE-2023-28450.patch
  * Add --no-dhcpv4-interface and --no-dhcpv6-interface for better
    control over which inetrfaces are providing DHCP service.
  * Fix issue with stale caching
  * Add configurable caching for arbitrary RR-types.
  * Add --filter-rr option, to filter arbitrary RR-types.</changelog>
  <changelog author="lukasstraub2@web.de" date="1728388800">- Enable --nftset support</changelog>
  <changelog author="max@suse.com" date="1736856000">- bsc#1235834: Don't let compile time options change silently.
- Use pkgconfig for libidn2.
- Disable --nftset for SLE-15-SP3 and older.
- bsc#1235517: Reintroduce nogroup for SLE-15-SP3 and older.</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="gerald_chen@foxmail.com" date="1747569600">- update to 2.91:
  * Fix spurious "resource limit exceeded messages".
  * Fix out-of-bounds heap read in order_qsort().
  * Fix buffer overflow when configured lease-change script name
    is too long.
  * Improve behaviour in the face of non-responsive upstream TCP DNS
    servers. Without shorter timeouts, clients are blocked for too long
    and fail with their own timeouts.
  * Set --fast-dns-retries by default when doing DNSSEC. A single
    downstream query can trigger many upstream queries. On an
    unreliable network, there may not be enough downstream retries
    to ensure that all these queries complete.
  * Improve behaviour in the face of truncated answers to queries
    for DNSSEC records. Getting these answers by TCP doesn't now
    involve a faked truncated answer to the downstream client to
    force it to move to TCP. This improves performance and robustness
    in the face of broken clients which can't fall back to TCP.
  * No longer remove data from truncated upstream answers. If an
    upstream replies with a truncated answer, but the answer has some
    RRs included, return those RRs, rather than returning and
    empty answer.
  * Fix handling of EDNS0 UDP packet sizes.
  * Modify the behaviour of --synth-domain for IPv6.
  * Fix broken dhcp-relay on *BSD.
  * Add --dhcp-option-pxe config. This acts almost exactly like
  - -dhcp-option except that the defined option is only sent when
    replying to PXE clients. More importantly, these options are sent
    in reply PXE clients when dnsmasq in acting in PXE proxy mode. In
    PXE proxy mode, the set of options sent is defined by the PXE standard
    and the normal set of options is not sent. This config allows arbitrary
    options in PXE-proxy replies. A typical use-case is to send option
    175 to iPXE.
  * Support PXE proxy-DHCP and DHCP-relay at the same time.
  * Fix erroneous "DNSSEC validated" state with non-DNSSEC
    upstream servers.
  * Handle queries with EDNS client subnet fields better. If dnsmasq
    is configured to add an EDNS client subnet to a query, it is careful
    to suppress use of the cache, since a cached answer may not be valid
    for a query with a different client subnet. Extend this behaviour
    to queries which arrive a dnsmasq already carrying an EDNS client
    subnet.
  * Handle DS queries to auth zones. When dnsmasq is configured to
    act as an authoritative server and has an authoritative zone
    configured, and receives a query for that zone _as_forwarder_
    it answers the query directly rather than forwarding it. This
    doesn't affect the answer, but it saves dnsmasq forwarding the
    query to the recursor upstream, which then bounces it back to dnsmasq
    in auth mode. The exception should be when the query is for the root
    of zone, for a DS RR. The answer to that has to come from the parent,
    via the recursor, and will typically be a proof-of-non-existence
    since dnsmasq doesn't support signed zones. This patch suppresses
    local answers and forces forwarding to the upstream recursor for such
    queries. It stops breakage when a DNSSEC validating client makes
    queries to dnsmasq acting as forwarder for a zone for which it is
    authoritative.
  * Implement "DNS-0x20 encoding", for extra protection against
    reply-spoof attacks. Since DNS queries are case-insensitive,
    it's possible to randomly flip the case of letters in a query
    and still get the correct answer back.
  * Fix a long-standing problem when two queries which are identical
    in every repect _except_ case, get combined by dnsmasq. If
    dnsmasq gets eg, two queries for example.com and Example.com
    in quick succession it will get the answer for example.com from
    upstream and send that answer to both requestors. This means that
    the query for Example.com will get an answer for example.com, and
    in the modern DNS, that answer may not be accepted.</changelog>
  <changelog author="max@suse.com" date="1755777600">- bsc#1247812: Fix a segfault when setting up supplementary groups,
  but no username was specified.</changelog>
  <changelog author="FSchreiner@suse.com" date="1769256000">- update to 2.92
  * Redesign the interaction between DNSSEC validation and per-domain
    servers, specified as --server=/&lt;domain&gt;/&lt;ip-address&gt;. This should
    just work in all cases now. If the normal chain-of-trust exists into
    the delegated domain then whether the domain is signed or not, DNSSEC
    validation will function normally. In the case the delegated domain
    is an "overlay" on top of the global DNS and no NS and/or DS records
    exist connecting it to the global dns, then if the domain is
    unsigned the situation will be handled by synthesising a
    proof-of-non-existence-of-DS for the domain and queries will be
    answered unvalidated; this action will be logged. A signed domain
    without chain-of-trust can be validated if a suitable trust-anchor
    is provided using --trust-anchor. This change should be backwards
    compatible for all existing working configurations; it extends the
    space of possible configurations which are functional.
  * Fix a couple of problems with DNSSEC validation and DNAME. One
    could cause validation failure on correct domains, and the other
    would fail to spot an invalid domain. Thanks to Graham Clinch
    for spotting the problem.
  * Add --log-queries=auth option to only log replies from the auth DNS
    facility.
  * Fix some edge-cases with domains and --address and --server. There
    has been some regressions with this in previous releases. This change
    fixes the priority order from lower to highest as:
  - -address with a IPv4 or IPv6 address (as long as the query matches the type)
  - -address with # for all-zeros, as long as the query is A or AAAA)
  - -address with no address, which returns NXDOMAIN or NOERROR for all types.
  - -server with address set to # to use the unqualified servers.
  - -server with matching domain.
  - -server without domain or from /etc/resolv.conf.
  * Fix problems with ipset or nftset and TCP DNS transport. Previously
    this was racy, and insertion of addresses could fail on a busy server
    when DNS-over-TCP transport was involved.
  * DNSSEC validation change for reverse lookups in RFC-1918 ranges and friends.
    The large public DNS services seem not to return proof-of-nonexistence
    for DS records at the start of RFC-1918 in-addr.arpa domains and the their
    IPv6 equivalents. 10.in-addr.arpa, 168.192.in-addr.arpa etc.
    Since dnsmasq already has an option which instructs it not bother
    upstream servers with pointless queries about these address ranges,
    namely --bogus-priv, we extend that to enable behaviour which allows
    dnsmasq to assume that insecure NXDOMAIN replies for these domains
    are expected and to assume that the domains are legitimately unsigned.
    This behaviour only matters when some address range is directed to
    another upstream server using --rev-server. In that case it allows
    replies from that server to pass DNSSEC validation. Without such a
    server configured, queries are never sent upstream so they are never
    validated and the new behaviour is moot.
  * Add support for leasequery to the dnsmasq DHCPv4 server.
    This has to be specifically enabled with the --leasequery option.
    Many thanks to JAXPORT, Jacksonville Port Authority for sponsoring
    this enhancement to dnsmasq.
  * Fix failure to cache PTR RRs when a reply contains more than one answer.
    Thanks to Dmitry for spotting this.
  * Add TFTP options windowsize (RFC 7440) and timeout (RFC 2349).
  * Change the behaviour of the DHCPv6 server when a REBIND message
    is received but no lease exists. Under these circumstances a new
    lease is created _only_ when the --dhcp-authoritative option is
    set. This matches the behavior of the DHCPv4 server.
  * Add --dhcp-split-relay option. This makes a DHCPv4 relay which
    is functional when client and server networks aren't mutually
    route-able.
  * Fix failure to add client MAC address to queries in TCP mode.
    The options which cause	dnsmasq	to decorate a DNS query	with the MAC
    address	on the originating client can fail when the query is sent
    using TCP. Thanks to Bruno Ravara for spotting and
    characterising this bug.</changelog>
  <changelog author="max@suse.com" date="1774440000">- boo#1257934, 4070a748.patch: Fix build with nettle 4.0.</changelog>
  <changelog author="pmonreal@suse.com" date="1776686400">- Fix FTBFS with libnettle 4.0: (boo#1257934)
  * dnsmasq: missed hash-&gt;digest calls in 4070a74 (1eab169)
  * Add dnsmasq-Fix-FTBFS-nettle-4.0.patch and merge 4070a748.patch</changelog>
  <changelog author="max@suse.com" date="1776859200">- bsc#1262487, CVE-2026-6507, dnsmasq-CVE-2026-6507.patch:
  out-of-bounds write in DHCP BOOTREPLY processing can lead to
  denial of service.</changelog>
  <changelog author="max@suse.com" date="1778587200">- Update to security release 2.92rel2:
  * CVE-2026-2291, bsc#1258251: dnsmasq can be abused to record
    false cached data enabling DoS or attacker redirect.
  * CVE-2026-4890, bsc#1265001: DoS vulnerability in the DNSSEC
    validation.
  * CVE-2026-4891, bsc#1265002: heap-based out-of-bounds read
    vulnerability in the DNSSEC validation.
  * CVE-2026-4892, bsc#1265003: heap-based out-of-bounds write
    vulnerability in the DHCPv6 implementation.
  * CVE-2026-4893, bsc#1265004: information disclosure
    vulnerability in dnsmasq allows remote attackers to bypass
    source checks.
  * CVE-2026-5172, bsc#1265006: buffer overflow in dnsmasq’s
    extract_addresses() function.</changelog>
</package>
<package pkgid="8d06ba1210538f5aaa28b1e52f6c3fb78ff7b3d6e81f5fce0019074b8e11cbb1" name="dnsmasq" arch="x86_64">
  <version epoch="0" ver="2.92rel2" rel="150400.16.12.1"/>
  <changelog author="max@suse.com" date="1649160000">- bsc#1197872, CVE-2022-0934, dnsmasq-CVE-2022-0934.patch:
  Heap use after free in dhcp6_no_relay</changelog>
  <changelog author="gmbr3@opensuse.org" date="1654689600">- Move the dbus-1 system.d file to /usr (bsc#1200344)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1662724800">- Ensure the dnsmasq user's group is used
- Remove nogroup requirement</changelog>
  <changelog author="dmueller@suse.com" date="1666785600">- update to 2.87 (bsc#1197872, CVE-2022-0934):
  * Allow arbitrary prefix lengths in --rev-server and
  - -domain=....,local
  * Replace --address=/#/..... functionality which got
    missed in the 2.86 domain search rewrite.
  * Add --nftset option, like --ipset but for the newer nftables.
  * Add --filter-A and --filter-AAAA options, to remove IPv4 or IPv6
    addresses from DNS answers.
  * Fix crash doing netbooting when --port is set to zero
    to disable the DNS server. Thanks to Drexl Johannes
    for the bug report.
  * Generalise --dhcp-relay. Sending via broadcast/multicast is
    now supported for both IPv4 and IPv6 and the configuration
    syntax made easier (but backwards compatible).
  * Add snooping of IPv6 prefix-delegations to the DHCP-relay system.
  * Finesse parsing of --dhcp-remoteid and --dhcp-subscrid. To be treated
    as hex, the pattern must consist of only hex digits AND contain
    at least one ':'. Thanks to Bengt-Erik Sandstrom who tripped
    over a pattern consisting of a decimal number which was interpreted
    surprisingly.
  * Include client address in TFTP file-not-found error reports.
    Thanks to Stefan Rink for the initial patch, which has been
    re-worked by me (srk). All bugs mine.
  * Note in manpage the change in behaviour of -address. This behaviour
    actually changed in v2.86, but was undocumented there. From 2.86 on,
    (eg) --address=/example.com/1.2.3.4 ONLY applies to A queries. All other
    types of query will be sent upstream. Pre 2.86, that would catch the
    whole example.com domain and queries for other types would get
    a local NODATA answer. The pre-2.86 behaviour is still available,
    by configuring --address=/example.com/1.2.3.4 --local=/example.com/
  * Fix problem with binding DHCP sockets to an individual interface.
    Despite the fact that the system call tales the interface _name_ as
    a parameter, it actually, binds the socket to interface _index_.
    Deleting the interface and creating a new one with the same name
    leaves the socket bound to the old index. (Creating new sockets
    always allocates a fresh index, they are not reused). We now
    take this behaviour into account and keep up with changing indexes.
  * Add --conf-script configuration option.
  * Enhance --domain to accept, for instance,
  - -domain=net2.thekelleys.org.uk,eth2 so that hosts get a domain
    which relects the interface they are attached to in a way which
    doesn't require hard-coding addresses. Thanks to Sten Spans for
    the idea.
  * Fix write-after-free error in DHCPv6 server code.
    CVE-2022-0934 refers.
  * Add the ability to specify destination port in
    DHCP-relay mode. This change also removes a previous bug
    where --dhcp-alternate-port would affect the port used
    to relay _to_ as well as the port being listened on.
    The new feature allows configuration to provide bug-for-bug
    compatibility, if required. Thanks to Damian Kaczkowski
    for the feature suggestion.
  * Bound the value of UDP packet size in the EDNS0 header of
    forwarded queries to the configured or default value of
    edns-packet-max. There's no point letting a client set a larger
    value if we're unable to return the answer. Thanks to Bertie
    Taylor for pointing out the problem and supplying the patch.
- drop dnsmasq-CVE-2022-0934.patch, dnsmasq-resolv-conf.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 2.88:
  * Fix bug in --dynamic-host when an interface has /16 IPv4
  * address.
  * Add --fast-dns-retry option. This gives dnsmasq the ability
    to originate retries for upstream DNS queries itself, rather
    than relying on the downstream client. This is most useful
    when doing DNSSEC over unreliable upstream networks. It comes
    with some cost in memory usage and network bandwidth.
  * Add --use-stale-cache option. When set, if a DNS name exists
    in the cache, but its time-to-live has expired, dnsmasq will
    return the data anyway.
  * handle removal of whole files or entries within files.</changelog>
  <changelog author="info@paolostivanin.com" date="1675684800">- update to 2.89:
  * Fix bug introduced in 2.88 (commit fe91134b) which can result
    in corruption of the DNS cache internal data structures and
    logging of "cache internal error". This has only been seen
    in one place in the wild, and it took considerable effort
    to even generate a test case to reproduce it, but there's
    no way to be sure it won't strike, and the effect is to break
    the cache badly. Installations with DNSSEC enabled are more
    likely to see the problem, but not running DNSSEC does not
    guarantee that it won't happen. Thanks to Timo van Roermund
    for reporting the bug and for his great efforts in chasing
    it down. (boo#1207174)
- remove no longer needed rpmlintrc filters</changelog>
  <changelog author="max@suse.com" date="1682424000">- bsc#1209358, CVE-2023-28450, dnsmasq-CVE-2023-28450.patch:
  default maximum EDNS.0 UDP packet size should be 1232</changelog>
  <changelog author="gmbr3@opensuse.org" date="1683979200">- Correct rundir from /var/run to /run for pid file</changelog>
  <changelog author="kukuk@suse.com" date="1697198400">- SLP got dropped, remove config (bsc#1214884)</changelog>
  <changelog author="max@suse.com" date="1707912000">- update to 2.90:
  * CVE-2023-50387, CVE-2023-50868, bsc#1219823, bsc#1219826:
    Denial Of Service while trying to validate specially crafted
    DNSSEC responses
  * CVE-2023-49441, bsc#1226091: integer overflow via forward_query
  * Fix reversion in --rev-server introduced in 2.88 which caused
    breakage if the prefix length is not exactly divisible by 8
    (IPv4) or 4 (IPv6).
  * Fix possible SEGV when there server(s) for a particular domain
    are configured, but no server which is not qualified for a
    particular domain.
  * Set the default maximum DNS UDP packet sice to 1232.
    Obsoletes: dnsmasq-CVE-2023-28450.patch
  * Add --no-dhcpv4-interface and --no-dhcpv6-interface for better
    control over which inetrfaces are providing DHCP service.
  * Fix issue with stale caching
  * Add configurable caching for arbitrary RR-types.
  * Add --filter-rr option, to filter arbitrary RR-types.</changelog>
  <changelog author="lukasstraub2@web.de" date="1728388800">- Enable --nftset support</changelog>
  <changelog author="max@suse.com" date="1736856000">- bsc#1235834: Don't let compile time options change silently.
- Use pkgconfig for libidn2.
- Disable --nftset for SLE-15-SP3 and older.
- bsc#1235517: Reintroduce nogroup for SLE-15-SP3 and older.</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="gerald_chen@foxmail.com" date="1747569600">- update to 2.91:
  * Fix spurious "resource limit exceeded messages".
  * Fix out-of-bounds heap read in order_qsort().
  * Fix buffer overflow when configured lease-change script name
    is too long.
  * Improve behaviour in the face of non-responsive upstream TCP DNS
    servers. Without shorter timeouts, clients are blocked for too long
    and fail with their own timeouts.
  * Set --fast-dns-retries by default when doing DNSSEC. A single
    downstream query can trigger many upstream queries. On an
    unreliable network, there may not be enough downstream retries
    to ensure that all these queries complete.
  * Improve behaviour in the face of truncated answers to queries
    for DNSSEC records. Getting these answers by TCP doesn't now
    involve a faked truncated answer to the downstream client to
    force it to move to TCP. This improves performance and robustness
    in the face of broken clients which can't fall back to TCP.
  * No longer remove data from truncated upstream answers. If an
    upstream replies with a truncated answer, but the answer has some
    RRs included, return those RRs, rather than returning and
    empty answer.
  * Fix handling of EDNS0 UDP packet sizes.
  * Modify the behaviour of --synth-domain for IPv6.
  * Fix broken dhcp-relay on *BSD.
  * Add --dhcp-option-pxe config. This acts almost exactly like
  - -dhcp-option except that the defined option is only sent when
    replying to PXE clients. More importantly, these options are sent
    in reply PXE clients when dnsmasq in acting in PXE proxy mode. In
    PXE proxy mode, the set of options sent is defined by the PXE standard
    and the normal set of options is not sent. This config allows arbitrary
    options in PXE-proxy replies. A typical use-case is to send option
    175 to iPXE.
  * Support PXE proxy-DHCP and DHCP-relay at the same time.
  * Fix erroneous "DNSSEC validated" state with non-DNSSEC
    upstream servers.
  * Handle queries with EDNS client subnet fields better. If dnsmasq
    is configured to add an EDNS client subnet to a query, it is careful
    to suppress use of the cache, since a cached answer may not be valid
    for a query with a different client subnet. Extend this behaviour
    to queries which arrive a dnsmasq already carrying an EDNS client
    subnet.
  * Handle DS queries to auth zones. When dnsmasq is configured to
    act as an authoritative server and has an authoritative zone
    configured, and receives a query for that zone _as_forwarder_
    it answers the query directly rather than forwarding it. This
    doesn't affect the answer, but it saves dnsmasq forwarding the
    query to the recursor upstream, which then bounces it back to dnsmasq
    in auth mode. The exception should be when the query is for the root
    of zone, for a DS RR. The answer to that has to come from the parent,
    via the recursor, and will typically be a proof-of-non-existence
    since dnsmasq doesn't support signed zones. This patch suppresses
    local answers and forces forwarding to the upstream recursor for such
    queries. It stops breakage when a DNSSEC validating client makes
    queries to dnsmasq acting as forwarder for a zone for which it is
    authoritative.
  * Implement "DNS-0x20 encoding", for extra protection against
    reply-spoof attacks. Since DNS queries are case-insensitive,
    it's possible to randomly flip the case of letters in a query
    and still get the correct answer back.
  * Fix a long-standing problem when two queries which are identical
    in every repect _except_ case, get combined by dnsmasq. If
    dnsmasq gets eg, two queries for example.com and Example.com
    in quick succession it will get the answer for example.com from
    upstream and send that answer to both requestors. This means that
    the query for Example.com will get an answer for example.com, and
    in the modern DNS, that answer may not be accepted.</changelog>
  <changelog author="max@suse.com" date="1755777600">- bsc#1247812: Fix a segfault when setting up supplementary groups,
  but no username was specified.</changelog>
  <changelog author="FSchreiner@suse.com" date="1769256000">- update to 2.92
  * Redesign the interaction between DNSSEC validation and per-domain
    servers, specified as --server=/&lt;domain&gt;/&lt;ip-address&gt;. This should
    just work in all cases now. If the normal chain-of-trust exists into
    the delegated domain then whether the domain is signed or not, DNSSEC
    validation will function normally. In the case the delegated domain
    is an "overlay" on top of the global DNS and no NS and/or DS records
    exist connecting it to the global dns, then if the domain is
    unsigned the situation will be handled by synthesising a
    proof-of-non-existence-of-DS for the domain and queries will be
    answered unvalidated; this action will be logged. A signed domain
    without chain-of-trust can be validated if a suitable trust-anchor
    is provided using --trust-anchor. This change should be backwards
    compatible for all existing working configurations; it extends the
    space of possible configurations which are functional.
  * Fix a couple of problems with DNSSEC validation and DNAME. One
    could cause validation failure on correct domains, and the other
    would fail to spot an invalid domain. Thanks to Graham Clinch
    for spotting the problem.
  * Add --log-queries=auth option to only log replies from the auth DNS
    facility.
  * Fix some edge-cases with domains and --address and --server. There
    has been some regressions with this in previous releases. This change
    fixes the priority order from lower to highest as:
  - -address with a IPv4 or IPv6 address (as long as the query matches the type)
  - -address with # for all-zeros, as long as the query is A or AAAA)
  - -address with no address, which returns NXDOMAIN or NOERROR for all types.
  - -server with address set to # to use the unqualified servers.
  - -server with matching domain.
  - -server without domain or from /etc/resolv.conf.
  * Fix problems with ipset or nftset and TCP DNS transport. Previously
    this was racy, and insertion of addresses could fail on a busy server
    when DNS-over-TCP transport was involved.
  * DNSSEC validation change for reverse lookups in RFC-1918 ranges and friends.
    The large public DNS services seem not to return proof-of-nonexistence
    for DS records at the start of RFC-1918 in-addr.arpa domains and the their
    IPv6 equivalents. 10.in-addr.arpa, 168.192.in-addr.arpa etc.
    Since dnsmasq already has an option which instructs it not bother
    upstream servers with pointless queries about these address ranges,
    namely --bogus-priv, we extend that to enable behaviour which allows
    dnsmasq to assume that insecure NXDOMAIN replies for these domains
    are expected and to assume that the domains are legitimately unsigned.
    This behaviour only matters when some address range is directed to
    another upstream server using --rev-server. In that case it allows
    replies from that server to pass DNSSEC validation. Without such a
    server configured, queries are never sent upstream so they are never
    validated and the new behaviour is moot.
  * Add support for leasequery to the dnsmasq DHCPv4 server.
    This has to be specifically enabled with the --leasequery option.
    Many thanks to JAXPORT, Jacksonville Port Authority for sponsoring
    this enhancement to dnsmasq.
  * Fix failure to cache PTR RRs when a reply contains more than one answer.
    Thanks to Dmitry for spotting this.
  * Add TFTP options windowsize (RFC 7440) and timeout (RFC 2349).
  * Change the behaviour of the DHCPv6 server when a REBIND message
    is received but no lease exists. Under these circumstances a new
    lease is created _only_ when the --dhcp-authoritative option is
    set. This matches the behavior of the DHCPv4 server.
  * Add --dhcp-split-relay option. This makes a DHCPv4 relay which
    is functional when client and server networks aren't mutually
    route-able.
  * Fix failure to add client MAC address to queries in TCP mode.
    The options which cause	dnsmasq	to decorate a DNS query	with the MAC
    address	on the originating client can fail when the query is sent
    using TCP. Thanks to Bruno Ravara for spotting and
    characterising this bug.</changelog>
  <changelog author="max@suse.com" date="1774440000">- boo#1257934, 4070a748.patch: Fix build with nettle 4.0.</changelog>
  <changelog author="pmonreal@suse.com" date="1776686400">- Fix FTBFS with libnettle 4.0: (boo#1257934)
  * dnsmasq: missed hash-&gt;digest calls in 4070a74 (1eab169)
  * Add dnsmasq-Fix-FTBFS-nettle-4.0.patch and merge 4070a748.patch</changelog>
  <changelog author="max@suse.com" date="1776859200">- bsc#1262487, CVE-2026-6507, dnsmasq-CVE-2026-6507.patch:
  out-of-bounds write in DHCP BOOTREPLY processing can lead to
  denial of service.</changelog>
  <changelog author="max@suse.com" date="1778587200">- Update to security release 2.92rel2:
  * CVE-2026-2291, bsc#1258251: dnsmasq can be abused to record
    false cached data enabling DoS or attacker redirect.
  * CVE-2026-4890, bsc#1265001: DoS vulnerability in the DNSSEC
    validation.
  * CVE-2026-4891, bsc#1265002: heap-based out-of-bounds read
    vulnerability in the DNSSEC validation.
  * CVE-2026-4892, bsc#1265003: heap-based out-of-bounds write
    vulnerability in the DHCPv6 implementation.
  * CVE-2026-4893, bsc#1265004: information disclosure
    vulnerability in dnsmasq allows remote attackers to bypass
    source checks.
  * CVE-2026-5172, bsc#1265006: buffer overflow in dnsmasq’s
    extract_addresses() function.</changelog>
</package>
<package pkgid="294b605051a90e9ccb1f2ec09634206e00ea44f4012e467730b819f6f1155ce7" name="docker" arch="src">
  <version epoch="0" ver="28.2.2_ce" rel="150000.227.1"/>
  <changelog author="asarai@suse.com" date="1733918400">- Update docker-buildx to v0.19.2. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.19.2&gt;.
  Some notable changelogs from the last update:
  * &lt;https://github.com/docker/buildx/releases/tag/v0.19.0&gt;
  * &lt;https://github.com/docker/buildx/releases/tag/v0.18.0&gt;
- Update to Go 1.22.</changelog>
  <changelog author="asarai@suse.com" date="1734091200">- Update to Docker 27.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/27/#274&gt;
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Remove upstreamed patches:
  - 0006-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  - 0007-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch</changelog>
  <changelog author="asarai@suse.com" date="1734436800">- Update to docker-buildx 0.19.3. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.19.3&gt;</changelog>
  <changelog author="asarai@suse.com" date="1734523200">- Update to Docker 27.4.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/27/#2741&gt;
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1739966400">- Update to Docker 27.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/27/#2741&gt; bsc#1237335
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Update to docker-buildx 0.20.1. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.20.1&gt;</changelog>
  <changelog author="fvogt@suse.com" date="1742472000">- Make container-selinux requirement conditional on selinux-policy
  (bsc#1237367)</changelog>
  <changelog author="asarai@suse.com" date="1742904000">- Add backport for golang.org/x/oauth2 CVE-2025-22868 fix. bsc#1239185
  + 0006-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
- Add backport for golang.org/x/crypto CVE-2025-22869 fix. bsc#1239322
  + 0007-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
- Refresh patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1742990400">- Don't use the new container-selinux conditional requires on SLE-12, as the
  RPM version there doesn't support it. Arguably the change itself is a bit
  suspect but we can fix that later. bsc#1237367</changelog>
  <changelog author="asarai@suse.com" date="1744286400">- Disable transparent SUSEConnect support for SLE-16. PED-12534
  When this patchset was first added in 2013 (and rewritten over the years),
  there was no upstream way to easily provide SLE customers with a way to build
  container images based on SLE using the host subscription. However, with
  docker-buildx you can now define secrets for builds (this is not entirely
  transparent, but we can easily document this new requirement for SLE-16).
  Users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
- Now that the only blocker for docker-buildx support was removed for SLE-16,
  enable docker-buildx for SLE-16 as well. PED-8905</changelog>
  <changelog author="asarai@suse.com" date="1744286401">- Update to docker-buildx v0.22.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.22.0&gt;
  * Includes fixes for CVE-2025-0495. bsc#1239765</changelog>
  <changelog author="asarai@suse.com" date="1745841600">- Update to docker-buildx v0.23.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.23.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1746100800">- Update to Docker 28.1.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2811&gt; bsc#1242114
  Includes upstream fixes:
  - CVE-2025-22872 bsc#1241830
- Remove long-outdated build handling for deprecated and unsupported
  devicemapper and AUFS storage drivers. AUFS was removed in v24, and
  devicemapper was removed in v25.
  &lt;https://docs.docker.com/engine/deprecated/#aufs-storage-driver&gt;
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Remove upstreamed patches:
  - 0006-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0007-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  - cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1747915200">- Update to docker-buildx v0.24.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.24.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1748606400">- Update to Docker 28.2.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2820&gt; bsc#1243833
  &lt;https://github.com/moby/moby/releases/tag/v28.2.1&gt;
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1748606401">- Update to Docker 28.2.2-ce. See upstream changelog online at
  &lt;https://github.com/moby/moby/releases/tag/v28.2.2&gt;
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1749038400">[NOTE: This update was only ever released in SLES and Leap.]
- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  - 0006-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  + 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0007-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  + 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1749038401">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1750248000">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1750680000">[ This update is a no-op, only needed to work around unfortunate automated
  packaging script behaviour on SLES. ]
- The following patches were removed in openSUSE in the Docker 28.1.1-ce
  update, but the patch names were later renamed in a SLES-only update before
  Docker 28.1.1-ce was submitted to SLES.
  This causes the SLES build scripts to refuse the update because the patches
  are not referenced in the changelog. There is no obvious place to put the
  patch removals (the 28.1.1-ce update removing the patches chronologically
  predates their renaming in SLES), so they are included here a dummy changelog
  entry to work around the issue.
  - 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
</package>
<package pkgid="61c256b14b1baa579f16497249da71a6bf37541119ab9a1edb7418d2a403fcd0" name="docker" arch="x86_64">
  <version epoch="0" ver="28.2.2_ce" rel="150000.227.1"/>
  <changelog author="asarai@suse.com" date="1733918400">- Update docker-buildx to v0.19.2. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.19.2&gt;.
  Some notable changelogs from the last update:
  * &lt;https://github.com/docker/buildx/releases/tag/v0.19.0&gt;
  * &lt;https://github.com/docker/buildx/releases/tag/v0.18.0&gt;
- Update to Go 1.22.</changelog>
  <changelog author="asarai@suse.com" date="1734091200">- Update to Docker 27.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/27/#274&gt;
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Remove upstreamed patches:
  - 0006-bsc1221916-update-to-patched-buildkit-version-to-fix.patch
  - 0007-bsc1214855-volume-use-AtomicWriteFile-to-save-volume.patch</changelog>
  <changelog author="asarai@suse.com" date="1734436800">- Update to docker-buildx 0.19.3. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.19.3&gt;</changelog>
  <changelog author="asarai@suse.com" date="1734523200">- Update to Docker 27.4.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/27/#2741&gt;
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1739966400">- Update to Docker 27.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/27/#2741&gt; bsc#1237335
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Update to docker-buildx 0.20.1. See upstream changelog online at
  &lt;https://github.com/docker/buildx/releases/tag/v0.20.1&gt;</changelog>
  <changelog author="fvogt@suse.com" date="1742472000">- Make container-selinux requirement conditional on selinux-policy
  (bsc#1237367)</changelog>
  <changelog author="asarai@suse.com" date="1742904000">- Add backport for golang.org/x/oauth2 CVE-2025-22868 fix. bsc#1239185
  + 0006-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
- Add backport for golang.org/x/crypto CVE-2025-22869 fix. bsc#1239322
  + 0007-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
- Refresh patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1742990400">- Don't use the new container-selinux conditional requires on SLE-12, as the
  RPM version there doesn't support it. Arguably the change itself is a bit
  suspect but we can fix that later. bsc#1237367</changelog>
  <changelog author="asarai@suse.com" date="1744286400">- Disable transparent SUSEConnect support for SLE-16. PED-12534
  When this patchset was first added in 2013 (and rewritten over the years),
  there was no upstream way to easily provide SLE customers with a way to build
  container images based on SLE using the host subscription. However, with
  docker-buildx you can now define secrets for builds (this is not entirely
  transparent, but we can easily document this new requirement for SLE-16).
  Users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
- Now that the only blocker for docker-buildx support was removed for SLE-16,
  enable docker-buildx for SLE-16 as well. PED-8905</changelog>
  <changelog author="asarai@suse.com" date="1744286401">- Update to docker-buildx v0.22.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.22.0&gt;
  * Includes fixes for CVE-2025-0495. bsc#1239765</changelog>
  <changelog author="asarai@suse.com" date="1745841600">- Update to docker-buildx v0.23.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.23.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1746100800">- Update to Docker 28.1.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2811&gt; bsc#1242114
  Includes upstream fixes:
  - CVE-2025-22872 bsc#1241830
- Remove long-outdated build handling for deprecated and unsupported
  devicemapper and AUFS storage drivers. AUFS was removed in v24, and
  devicemapper was removed in v25.
  &lt;https://docs.docker.com/engine/deprecated/#aufs-storage-driver&gt;
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Remove upstreamed patches:
  - 0006-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0007-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  - cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1747915200">- Update to docker-buildx v0.24.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.24.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1748606400">- Update to Docker 28.2.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2820&gt; bsc#1243833
  &lt;https://github.com/moby/moby/releases/tag/v28.2.1&gt;
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1748606401">- Update to Docker 28.2.2-ce. See upstream changelog online at
  &lt;https://github.com/moby/moby/releases/tag/v28.2.2&gt;
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1749038400">[NOTE: This update was only ever released in SLES and Leap.]
- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  - 0006-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  + 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0007-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  + 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1749038401">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1750248000">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1750680000">[ This update is a no-op, only needed to work around unfortunate automated
  packaging script behaviour on SLES. ]
- The following patches were removed in openSUSE in the Docker 28.1.1-ce
  update, but the patch names were later renamed in a SLES-only update before
  Docker 28.1.1-ce was submitted to SLES.
  This causes the SLES build scripts to refuse the update because the patches
  are not referenced in the changelog. There is no obvious place to put the
  patch removals (the 28.1.1-ce update removing the patches chronologically
  predates their renaming in SLES), so they are included here a dummy changelog
  entry to work around the issue.
  - 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
</package>
<package pkgid="144ab7bd63a025246e88ea5fe3a3469da76d2f9117a10304fb93ff36c7d28127" name="docker" arch="src">
  <version epoch="0" ver="28.3.3_ce" rel="150000.230.1"/>
  <changelog author="asarai@suse.com" date="1742990400">- Don't use the new container-selinux conditional requires on SLE-12, as the
  RPM version there doesn't support it. Arguably the change itself is a bit
  suspect but we can fix that later. bsc#1237367</changelog>
  <changelog author="asarai@suse.com" date="1744286400">- Disable transparent SUSEConnect support for SLE-16. PED-12534
  When this patchset was first added in 2013 (and rewritten over the years),
  there was no upstream way to easily provide SLE customers with a way to build
  container images based on SLE using the host subscription. However, with
  docker-buildx you can now define secrets for builds (this is not entirely
  transparent, but we can easily document this new requirement for SLE-16).
  Users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
- Now that the only blocker for docker-buildx support was removed for SLE-16,
  enable docker-buildx for SLE-16 as well. PED-8905</changelog>
  <changelog author="asarai@suse.com" date="1744286401">- Update to docker-buildx v0.22.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.22.0&gt;
  * Includes fixes for CVE-2025-0495. bsc#1239765</changelog>
  <changelog author="asarai@suse.com" date="1745841600">- Update to docker-buildx v0.23.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.23.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1746100800">- Update to Docker 28.1.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2811&gt; bsc#1242114
  Includes upstream fixes:
  - CVE-2025-22872 bsc#1241830
- Remove long-outdated build handling for deprecated and unsupported
  devicemapper and AUFS storage drivers. AUFS was removed in v24, and
  devicemapper was removed in v25.
  &lt;https://docs.docker.com/engine/deprecated/#aufs-storage-driver&gt;
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Remove upstreamed patches:
  - 0006-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0007-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  - cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1747915200">- Update to docker-buildx v0.24.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.24.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1748606400">- Update to Docker 28.2.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2820&gt; bsc#1243833
  &lt;https://github.com/moby/moby/releases/tag/v28.2.1&gt;
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1748606401">- Update to Docker 28.2.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2822&gt;
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1749038400">[NOTE: This update was only ever released in SLES and Leap.]
- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  - 0006-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  + 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0007-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  + 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1749038401">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1750248000">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1750680000">[ This update is a no-op, only needed to work around unfortunate automated
  packaging script behaviour on SLES. ]
- The following patches were removed in openSUSE in the Docker 28.1.1-ce
  update, but the patch names were later renamed in a SLES-only update before
  Docker 28.1.1-ce was submitted to SLES.
  This causes the SLES build scripts to refuse the update because the patches
  are not referenced in the changelog. There is no obvious place to put the
  patch removals (the 28.1.1-ce update removing the patches chronologically
  predates their renaming in SLES), so they are included here a dummy changelog
  entry to work around the issue.
  - 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1750852800">- Update to Docker 28.3.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2830&gt;
  bsc#1246556
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1751544000">- Update to Docker 28.3.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2831&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752062400">- Update to Docker 28.3.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2832&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to Go 1.24 for builds, to match upstream.</changelog>
  <changelog author="asarai@suse.com" date="1753099200">- Update to docker-buildx v0.26.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1753272000">- Update to docker-buildx v0.26.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.1&gt;</changelog>
  <changelog author="asarai@suse.com" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
</package>
<package pkgid="19bf1f682c3a98b931dda3150fd157bf91e8dc8415d0f5eda662536ff440508e" name="docker" arch="x86_64">
  <version epoch="0" ver="28.3.3_ce" rel="150000.230.1"/>
  <changelog author="asarai@suse.com" date="1742990400">- Don't use the new container-selinux conditional requires on SLE-12, as the
  RPM version there doesn't support it. Arguably the change itself is a bit
  suspect but we can fix that later. bsc#1237367</changelog>
  <changelog author="asarai@suse.com" date="1744286400">- Disable transparent SUSEConnect support for SLE-16. PED-12534
  When this patchset was first added in 2013 (and rewritten over the years),
  there was no upstream way to easily provide SLE customers with a way to build
  container images based on SLE using the host subscription. However, with
  docker-buildx you can now define secrets for builds (this is not entirely
  transparent, but we can easily document this new requirement for SLE-16).
  Users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
- Now that the only blocker for docker-buildx support was removed for SLE-16,
  enable docker-buildx for SLE-16 as well. PED-8905</changelog>
  <changelog author="asarai@suse.com" date="1744286401">- Update to docker-buildx v0.22.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.22.0&gt;
  * Includes fixes for CVE-2025-0495. bsc#1239765</changelog>
  <changelog author="asarai@suse.com" date="1745841600">- Update to docker-buildx v0.23.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.23.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1746100800">- Update to Docker 28.1.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2811&gt; bsc#1242114
  Includes upstream fixes:
  - CVE-2025-22872 bsc#1241830
- Remove long-outdated build handling for deprecated and unsupported
  devicemapper and AUFS storage drivers. AUFS was removed in v24, and
  devicemapper was removed in v25.
  &lt;https://docs.docker.com/engine/deprecated/#aufs-storage-driver&gt;
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Remove upstreamed patches:
  - 0006-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0007-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  - cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1747915200">- Update to docker-buildx v0.24.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.24.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1748606400">- Update to Docker 28.2.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2820&gt; bsc#1243833
  &lt;https://github.com/moby/moby/releases/tag/v28.2.1&gt;
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1748606401">- Update to Docker 28.2.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2822&gt;
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1749038400">[NOTE: This update was only ever released in SLES and Leap.]
- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  - 0006-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  + 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0007-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  + 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1749038401">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1750248000">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1750680000">[ This update is a no-op, only needed to work around unfortunate automated
  packaging script behaviour on SLES. ]
- The following patches were removed in openSUSE in the Docker 28.1.1-ce
  update, but the patch names were later renamed in a SLES-only update before
  Docker 28.1.1-ce was submitted to SLES.
  This causes the SLES build scripts to refuse the update because the patches
  are not referenced in the changelog. There is no obvious place to put the
  patch removals (the 28.1.1-ce update removing the patches chronologically
  predates their renaming in SLES), so they are included here a dummy changelog
  entry to work around the issue.
  - 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1750852800">- Update to Docker 28.3.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2830&gt;
  bsc#1246556
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1751544000">- Update to Docker 28.3.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2831&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752062400">- Update to Docker 28.3.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2832&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to Go 1.24 for builds, to match upstream.</changelog>
  <changelog author="asarai@suse.com" date="1753099200">- Update to docker-buildx v0.26.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1753272000">- Update to docker-buildx v0.26.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.1&gt;</changelog>
  <changelog author="asarai@suse.com" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
</package>
<package pkgid="dea916277c635d93e50df7089898d51d32d5a5c4c00b5e861b255b14ffe460ec" name="docker" arch="src">
  <version epoch="0" ver="28.4.0_ce" rel="150000.235.1"/>
  <changelog author="asarai@suse.com" date="1744286400">- Update to docker-buildx v0.22.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.22.0&gt;
  * Includes fixes for CVE-2025-0495. bsc#1239765</changelog>
  <changelog author="asarai@suse.com" date="1745841600">- Update to docker-buildx v0.23.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.23.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1746100800">- Update to Docker 28.1.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2811&gt; bsc#1242114
  Includes upstream fixes:
  - CVE-2025-22872 bsc#1241830
- Remove long-outdated build handling for deprecated and unsupported
  devicemapper and AUFS storage drivers. AUFS was removed in v24, and
  devicemapper was removed in v25.
  &lt;https://docs.docker.com/engine/deprecated/#aufs-storage-driver&gt;
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Remove upstreamed patches:
  - 0006-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0007-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  - cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1747915200">- Update to docker-buildx v0.24.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.24.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1748606400">- Update to Docker 28.2.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2820&gt; bsc#1243833
  &lt;https://github.com/moby/moby/releases/tag/v28.2.1&gt;
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1748606401">- Update to Docker 28.2.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2822&gt;
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1749038400">[NOTE: This update was only ever released in SLES and Leap.]
- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  - 0006-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  + 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0007-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  + 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1749038401">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1750248000">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1750680000">[ This update is a no-op, only needed to work around unfortunate automated
  packaging script behaviour on SLES. ]
- The following patches were removed in openSUSE in the Docker 28.1.1-ce
  update, but the patch names were later renamed in a SLES-only update before
  Docker 28.1.1-ce was submitted to SLES.
  This causes the SLES build scripts to refuse the update because the patches
  are not referenced in the changelog. There is no obvious place to put the
  patch removals (the 28.1.1-ce update removing the patches chronologically
  predates their renaming in SLES), so they are included here a dummy changelog
  entry to work around the issue.
  - 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1750852800">- Update to Docker 28.3.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2830&gt;
  bsc#1246556
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1751544000">- Update to Docker 28.3.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2831&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752062400">- Update to Docker 28.3.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2832&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to Go 1.24 for builds, to match upstream.</changelog>
  <changelog author="asarai@suse.com" date="1753099200">- Update to docker-buildx v0.26.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1753272000">- Update to docker-buildx v0.26.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.1&gt;</changelog>
  <changelog author="asarai@suse.com" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="asarai@suse.com" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
</package>
<package pkgid="cf2bb367046a60e4e5094626b4c98ebd7bda02e9c4519984c2400d66810b5d19" name="docker" arch="x86_64">
  <version epoch="0" ver="28.4.0_ce" rel="150000.235.1"/>
  <changelog author="asarai@suse.com" date="1744286400">- Update to docker-buildx v0.22.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.22.0&gt;
  * Includes fixes for CVE-2025-0495. bsc#1239765</changelog>
  <changelog author="asarai@suse.com" date="1745841600">- Update to docker-buildx v0.23.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.23.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1746100800">- Update to Docker 28.1.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2811&gt; bsc#1242114
  Includes upstream fixes:
  - CVE-2025-22872 bsc#1241830
- Remove long-outdated build handling for deprecated and unsupported
  devicemapper and AUFS storage drivers. AUFS was removed in v24, and
  devicemapper was removed in v25.
  &lt;https://docs.docker.com/engine/deprecated/#aufs-storage-driver&gt;
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Remove upstreamed patches:
  - 0006-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0007-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  - cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1747915200">- Update to docker-buildx v0.24.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.24.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1748606400">- Update to Docker 28.2.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2820&gt; bsc#1243833
  &lt;https://github.com/moby/moby/releases/tag/v28.2.1&gt;
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1748606401">- Update to Docker 28.2.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2822&gt;
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1749038400">[NOTE: This update was only ever released in SLES and Leap.]
- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  - 0006-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  + 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0007-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  + 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1749038401">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1750248000">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1750680000">[ This update is a no-op, only needed to work around unfortunate automated
  packaging script behaviour on SLES. ]
- The following patches were removed in openSUSE in the Docker 28.1.1-ce
  update, but the patch names were later renamed in a SLES-only update before
  Docker 28.1.1-ce was submitted to SLES.
  This causes the SLES build scripts to refuse the update because the patches
  are not referenced in the changelog. There is no obvious place to put the
  patch removals (the 28.1.1-ce update removing the patches chronologically
  predates their renaming in SLES), so they are included here a dummy changelog
  entry to work around the issue.
  - 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1750852800">- Update to Docker 28.3.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2830&gt;
  bsc#1246556
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1751544000">- Update to Docker 28.3.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2831&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752062400">- Update to Docker 28.3.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2832&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to Go 1.24 for builds, to match upstream.</changelog>
  <changelog author="asarai@suse.com" date="1753099200">- Update to docker-buildx v0.26.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1753272000">- Update to docker-buildx v0.26.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.1&gt;</changelog>
  <changelog author="asarai@suse.com" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="asarai@suse.com" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
</package>
<package pkgid="7cbcb4773c6f68dcf54310776b427444b296dfbfa03ea203c7ffcaafff6ac7d2" name="docker" arch="src">
  <version epoch="0" ver="28.5.1_ce" rel="150000.238.1"/>
  <changelog author="asarai@suse.com" date="1749038400">[NOTE: This update was only ever released in SLES and Leap.]
- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  - 0006-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  + 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0007-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  + 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1749038401">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1750248000">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1750680000">[ This update is a no-op, only needed to work around unfortunate automated
  packaging script behaviour on SLES. ]
- The following patches were removed in openSUSE in the Docker 28.1.1-ce
  update, but the patch names were later renamed in a SLES-only update before
  Docker 28.1.1-ce was submitted to SLES.
  This causes the SLES build scripts to refuse the update because the patches
  are not referenced in the changelog. There is no obvious place to put the
  patch removals (the 28.1.1-ce update removing the patches chronologically
  predates their renaming in SLES), so they are included here a dummy changelog
  entry to work around the issue.
  - 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1750852800">- Update to Docker 28.3.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2830&gt;
  bsc#1246556
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1751544000">- Update to Docker 28.3.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2831&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752062400">- Update to Docker 28.3.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2832&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to Go 1.24 for builds, to match upstream.</changelog>
  <changelog author="asarai@suse.com" date="1753099200">- Update to docker-buildx v0.26.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1753272000">- Update to docker-buildx v0.26.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.1&gt;</changelog>
  <changelog author="asarai@suse.com" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="asarai@suse.com" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="dimstar@opensuse.org" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="asarai@suse.com" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
</package>
<package pkgid="41480d77144591a7b97f6bddc7dbdd56fb226c615a4496b1cd76227c05e8f521" name="docker" arch="x86_64">
  <version epoch="0" ver="28.5.1_ce" rel="150000.238.1"/>
  <changelog author="asarai@suse.com" date="1749038400">[NOTE: This update was only ever released in SLES and Leap.]
- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  - 0006-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  + 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0007-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  + 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1749038401">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1750248000">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1750680000">[ This update is a no-op, only needed to work around unfortunate automated
  packaging script behaviour on SLES. ]
- The following patches were removed in openSUSE in the Docker 28.1.1-ce
  update, but the patch names were later renamed in a SLES-only update before
  Docker 28.1.1-ce was submitted to SLES.
  This causes the SLES build scripts to refuse the update because the patches
  are not referenced in the changelog. There is no obvious place to put the
  patch removals (the 28.1.1-ce update removing the patches chronologically
  predates their renaming in SLES), so they are included here a dummy changelog
  entry to work around the issue.
  - 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1750852800">- Update to Docker 28.3.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2830&gt;
  bsc#1246556
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1751544000">- Update to Docker 28.3.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2831&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752062400">- Update to Docker 28.3.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2832&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to Go 1.24 for builds, to match upstream.</changelog>
  <changelog author="asarai@suse.com" date="1753099200">- Update to docker-buildx v0.26.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1753272000">- Update to docker-buildx v0.26.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.1&gt;</changelog>
  <changelog author="asarai@suse.com" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="asarai@suse.com" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="dimstar@opensuse.org" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="asarai@suse.com" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
</package>
<package pkgid="f4950f4d497f248ff14f0153ff3f1d6983abe810cd8f05bbd5a30b50e43a141b" name="docker" arch="src">
  <version epoch="0" ver="28.5.1_ce" rel="150000.241.2"/>
  <changelog author="asarai@suse.com" date="1749038400">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1750248000">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1750680000">[ This update is a no-op, only needed to work around unfortunate automated
  packaging script behaviour on SLES. ]
- The following patches were removed in openSUSE in the Docker 28.1.1-ce
  update, but the patch names were later renamed in a SLES-only update before
  Docker 28.1.1-ce was submitted to SLES.
  This causes the SLES build scripts to refuse the update because the patches
  are not referenced in the changelog. There is no obvious place to put the
  patch removals (the 28.1.1-ce update removing the patches chronologically
  predates their renaming in SLES), so they are included here a dummy changelog
  entry to work around the issue.
  - 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1750852800">- Update to Docker 28.3.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2830&gt;
  bsc#1246556
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1751544000">- Update to Docker 28.3.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2831&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752062400">- Update to Docker 28.3.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2832&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to Go 1.24 for builds, to match upstream.</changelog>
  <changelog author="asarai@suse.com" date="1753099200">- Update to docker-buildx v0.26.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1753272000">- Update to docker-buildx v0.26.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.1&gt;</changelog>
  <changelog author="asarai@suse.com" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="asarai@suse.com" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="dimstar@opensuse.org" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="asarai@suse.com" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1770206400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bsc#1253904, CVE-2025-58181)
  * 0007-CVE-2025-58181-fix-vendor-crypto-ssh.patch</changelog>
</package>
<package pkgid="7f96af4132ed1617cd7b327a690b9bba822536e34fef050ad81670671a6649f9" name="docker" arch="x86_64">
  <version epoch="0" ver="28.5.1_ce" rel="150000.241.2"/>
  <changelog author="asarai@suse.com" date="1749038400">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1750248000">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1750680000">[ This update is a no-op, only needed to work around unfortunate automated
  packaging script behaviour on SLES. ]
- The following patches were removed in openSUSE in the Docker 28.1.1-ce
  update, but the patch names were later renamed in a SLES-only update before
  Docker 28.1.1-ce was submitted to SLES.
  This causes the SLES build scripts to refuse the update because the patches
  are not referenced in the changelog. There is no obvious place to put the
  patch removals (the 28.1.1-ce update removing the patches chronologically
  predates their renaming in SLES), so they are included here a dummy changelog
  entry to work around the issue.
  - 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1750852800">- Update to Docker 28.3.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2830&gt;
  bsc#1246556
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1751544000">- Update to Docker 28.3.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2831&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752062400">- Update to Docker 28.3.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2832&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to Go 1.24 for builds, to match upstream.</changelog>
  <changelog author="asarai@suse.com" date="1753099200">- Update to docker-buildx v0.26.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1753272000">- Update to docker-buildx v0.26.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.1&gt;</changelog>
  <changelog author="asarai@suse.com" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="asarai@suse.com" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="dimstar@opensuse.org" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="asarai@suse.com" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1770206400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bsc#1253904, CVE-2025-58181)
  * 0007-CVE-2025-58181-fix-vendor-crypto-ssh.patch</changelog>
</package>
<package pkgid="9e7dce03817168ea50c74bb686b64bee57d245e52380c50b5749d453fc83caa9" name="docker" arch="src">
  <version epoch="0" ver="28.5.1_ce" rel="150000.243.1"/>
  <changelog author="asarai@suse.com" date="1749038400">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1750248000">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1750680000">[ This update is a no-op, only needed to work around unfortunate automated
  packaging script behaviour on SLES. ]
- The following patches were removed in openSUSE in the Docker 28.1.1-ce
  update, but the patch names were later renamed in a SLES-only update before
  Docker 28.1.1-ce was submitted to SLES.
  This causes the SLES build scripts to refuse the update because the patches
  are not referenced in the changelog. There is no obvious place to put the
  patch removals (the 28.1.1-ce update removing the patches chronologically
  predates their renaming in SLES), so they are included here a dummy changelog
  entry to work around the issue.
  - 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1750852800">- Update to Docker 28.3.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2830&gt;
  bsc#1246556
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1751544000">- Update to Docker 28.3.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2831&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752062400">- Update to Docker 28.3.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2832&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to Go 1.24 for builds, to match upstream.</changelog>
  <changelog author="asarai@suse.com" date="1753099200">- Update to docker-buildx v0.26.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1753272000">- Update to docker-buildx v0.26.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.1&gt;</changelog>
  <changelog author="asarai@suse.com" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="asarai@suse.com" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="dimstar@opensuse.org" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="asarai@suse.com" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1770206400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bsc#1253904, CVE-2025-58181)
  * 0007-CVE-2025-58181-fix-vendor-crypto-ssh.patch</changelog>
</package>
<package pkgid="86da5d06b0f42235c56f9793c7368a89c85b4762d788903c52e4a2f49ff9e809" name="docker" arch="x86_64">
  <version epoch="0" ver="28.5.1_ce" rel="150000.243.1"/>
  <changelog author="asarai@suse.com" date="1749038400">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1750248000">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1750680000">[ This update is a no-op, only needed to work around unfortunate automated
  packaging script behaviour on SLES. ]
- The following patches were removed in openSUSE in the Docker 28.1.1-ce
  update, but the patch names were later renamed in a SLES-only update before
  Docker 28.1.1-ce was submitted to SLES.
  This causes the SLES build scripts to refuse the update because the patches
  are not referenced in the changelog. There is no obvious place to put the
  patch removals (the 28.1.1-ce update removing the patches chronologically
  predates their renaming in SLES), so they are included here a dummy changelog
  entry to work around the issue.
  - 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1750852800">- Update to Docker 28.3.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2830&gt;
  bsc#1246556
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1751544000">- Update to Docker 28.3.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2831&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752062400">- Update to Docker 28.3.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2832&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to Go 1.24 for builds, to match upstream.</changelog>
  <changelog author="asarai@suse.com" date="1753099200">- Update to docker-buildx v0.26.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1753272000">- Update to docker-buildx v0.26.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.1&gt;</changelog>
  <changelog author="asarai@suse.com" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="asarai@suse.com" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="dimstar@opensuse.org" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="asarai@suse.com" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1770206400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bsc#1253904, CVE-2025-58181)
  * 0007-CVE-2025-58181-fix-vendor-crypto-ssh.patch</changelog>
</package>
<package pkgid="82045e64328775c1ec8bd6846a64fa8698ffbec2d46cf1232c7de2ff91541c25" name="docker" arch="src">
  <version epoch="0" ver="28.5.1_ce" rel="150000.245.2"/>
  <changelog author="asarai@suse.com" date="1749038400">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1750248000">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1750680000">[ This update is a no-op, only needed to work around unfortunate automated
  packaging script behaviour on SLES. ]
- The following patches were removed in openSUSE in the Docker 28.1.1-ce
  update, but the patch names were later renamed in a SLES-only update before
  Docker 28.1.1-ce was submitted to SLES.
  This causes the SLES build scripts to refuse the update because the patches
  are not referenced in the changelog. There is no obvious place to put the
  patch removals (the 28.1.1-ce update removing the patches chronologically
  predates their renaming in SLES), so they are included here a dummy changelog
  entry to work around the issue.
  - 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1750852800">- Update to Docker 28.3.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2830&gt;
  bsc#1246556
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1751544000">- Update to Docker 28.3.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2831&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752062400">- Update to Docker 28.3.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2832&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to Go 1.24 for builds, to match upstream.</changelog>
  <changelog author="asarai@suse.com" date="1753099200">- Update to docker-buildx v0.26.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1753272000">- Update to docker-buildx v0.26.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.1&gt;</changelog>
  <changelog author="asarai@suse.com" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="asarai@suse.com" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="dimstar@opensuse.org" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="asarai@suse.com" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1770206400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bsc#1253904, CVE-2025-58181)
  * 0007-CVE-2025-58181-fix-vendor-crypto-ssh.patch</changelog>
</package>
<package pkgid="288d0fe9fa75947f9545833da4e7161fbf4b75e60092774b073a3a29ef6f0be6" name="docker" arch="x86_64">
  <version epoch="0" ver="28.5.1_ce" rel="150000.245.2"/>
  <changelog author="asarai@suse.com" date="1749038400">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1750248000">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1750680000">[ This update is a no-op, only needed to work around unfortunate automated
  packaging script behaviour on SLES. ]
- The following patches were removed in openSUSE in the Docker 28.1.1-ce
  update, but the patch names were later renamed in a SLES-only update before
  Docker 28.1.1-ce was submitted to SLES.
  This causes the SLES build scripts to refuse the update because the patches
  are not referenced in the changelog. There is no obvious place to put the
  patch removals (the 28.1.1-ce update removing the patches chronologically
  predates their renaming in SLES), so they are included here a dummy changelog
  entry to work around the issue.
  - 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1750852800">- Update to Docker 28.3.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2830&gt;
  bsc#1246556
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1751544000">- Update to Docker 28.3.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2831&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752062400">- Update to Docker 28.3.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2832&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to Go 1.24 for builds, to match upstream.</changelog>
  <changelog author="asarai@suse.com" date="1753099200">- Update to docker-buildx v0.26.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1753272000">- Update to docker-buildx v0.26.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.1&gt;</changelog>
  <changelog author="asarai@suse.com" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="asarai@suse.com" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="dimstar@opensuse.org" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="asarai@suse.com" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1770206400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bsc#1253904, CVE-2025-58181)
  * 0007-CVE-2025-58181-fix-vendor-crypto-ssh.patch</changelog>
</package>
<package pkgid="96346bd0ebbb4fefe1e96f61529a1357d91cc6fbca22f3f8047eec294234ba3f" name="docker" arch="src">
  <version epoch="0" ver="28.5.1_ce" rel="150000.247.1"/>
  <changelog author="asarai@suse.com" date="1749038400">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1750248000">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1750680000">[ This update is a no-op, only needed to work around unfortunate automated
  packaging script behaviour on SLES. ]
- The following patches were removed in openSUSE in the Docker 28.1.1-ce
  update, but the patch names were later renamed in a SLES-only update before
  Docker 28.1.1-ce was submitted to SLES.
  This causes the SLES build scripts to refuse the update because the patches
  are not referenced in the changelog. There is no obvious place to put the
  patch removals (the 28.1.1-ce update removing the patches chronologically
  predates their renaming in SLES), so they are included here a dummy changelog
  entry to work around the issue.
  - 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1750852800">- Update to Docker 28.3.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2830&gt;
  bsc#1246556
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1751544000">- Update to Docker 28.3.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2831&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752062400">- Update to Docker 28.3.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2832&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to Go 1.24 for builds, to match upstream.</changelog>
  <changelog author="asarai@suse.com" date="1753099200">- Update to docker-buildx v0.26.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1753272000">- Update to docker-buildx v0.26.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.1&gt;</changelog>
  <changelog author="asarai@suse.com" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="asarai@suse.com" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="dimstar@opensuse.org" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="asarai@suse.com" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1770206400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bsc#1253904, CVE-2025-58181)
  * 0007-CVE-2025-58181-fix-vendor-crypto-ssh.patch</changelog>
</package>
<package pkgid="b56ef55acbffa62ba4fa63747cf399751b8d8e5316d115bfbdd4cfd43d88ad3b" name="docker" arch="x86_64">
  <version epoch="0" ver="28.5.1_ce" rel="150000.247.1"/>
  <changelog author="asarai@suse.com" date="1749038400">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1750248000">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1750680000">[ This update is a no-op, only needed to work around unfortunate automated
  packaging script behaviour on SLES. ]
- The following patches were removed in openSUSE in the Docker 28.1.1-ce
  update, but the patch names were later renamed in a SLES-only update before
  Docker 28.1.1-ce was submitted to SLES.
  This causes the SLES build scripts to refuse the update because the patches
  are not referenced in the changelog. There is no obvious place to put the
  patch removals (the 28.1.1-ce update removing the patches chronologically
  predates their renaming in SLES), so they are included here a dummy changelog
  entry to work around the issue.
  - 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1750852800">- Update to Docker 28.3.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2830&gt;
  bsc#1246556
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1751544000">- Update to Docker 28.3.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2831&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752062400">- Update to Docker 28.3.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2832&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to Go 1.24 for builds, to match upstream.</changelog>
  <changelog author="asarai@suse.com" date="1753099200">- Update to docker-buildx v0.26.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1753272000">- Update to docker-buildx v0.26.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.1&gt;</changelog>
  <changelog author="asarai@suse.com" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="asarai@suse.com" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="dimstar@opensuse.org" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="asarai@suse.com" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1770206400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bsc#1253904, CVE-2025-58181)
  * 0007-CVE-2025-58181-fix-vendor-crypto-ssh.patch</changelog>
</package>
<package pkgid="6d3a247bdb2513c26e303c2e5a14ce11898c7df49a8403849725b76c17c8b620" name="docker-buildx" arch="x86_64">
  <version epoch="0" ver="0.28.0" rel="150000.235.1"/>
  <changelog author="asarai@suse.com" date="1744286400">- Update to docker-buildx v0.22.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.22.0&gt;
  * Includes fixes for CVE-2025-0495. bsc#1239765</changelog>
  <changelog author="asarai@suse.com" date="1745841600">- Update to docker-buildx v0.23.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.23.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1746100800">- Update to Docker 28.1.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2811&gt; bsc#1242114
  Includes upstream fixes:
  - CVE-2025-22872 bsc#1241830
- Remove long-outdated build handling for deprecated and unsupported
  devicemapper and AUFS storage drivers. AUFS was removed in v24, and
  devicemapper was removed in v25.
  &lt;https://docs.docker.com/engine/deprecated/#aufs-storage-driver&gt;
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Remove upstreamed patches:
  - 0006-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0007-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  - cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1747915200">- Update to docker-buildx v0.24.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.24.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1748606400">- Update to Docker 28.2.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2820&gt; bsc#1243833
  &lt;https://github.com/moby/moby/releases/tag/v28.2.1&gt;
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1748606401">- Update to Docker 28.2.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2822&gt;
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1749038400">[NOTE: This update was only ever released in SLES and Leap.]
- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  - 0006-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  + 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0007-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  + 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1749038401">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1750248000">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1750680000">[ This update is a no-op, only needed to work around unfortunate automated
  packaging script behaviour on SLES. ]
- The following patches were removed in openSUSE in the Docker 28.1.1-ce
  update, but the patch names were later renamed in a SLES-only update before
  Docker 28.1.1-ce was submitted to SLES.
  This causes the SLES build scripts to refuse the update because the patches
  are not referenced in the changelog. There is no obvious place to put the
  patch removals (the 28.1.1-ce update removing the patches chronologically
  predates their renaming in SLES), so they are included here a dummy changelog
  entry to work around the issue.
  - 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1750852800">- Update to Docker 28.3.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2830&gt;
  bsc#1246556
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1751544000">- Update to Docker 28.3.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2831&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752062400">- Update to Docker 28.3.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2832&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to Go 1.24 for builds, to match upstream.</changelog>
  <changelog author="asarai@suse.com" date="1753099200">- Update to docker-buildx v0.26.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1753272000">- Update to docker-buildx v0.26.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.1&gt;</changelog>
  <changelog author="asarai@suse.com" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="asarai@suse.com" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
</package>
<package pkgid="9eade400c713f8d0df85cbfc17253dd4bfc83466511e40852f2a4933d2ee0086" name="docker-buildx" arch="x86_64">
  <version epoch="0" ver="0.29.0" rel="150000.238.1"/>
  <changelog author="asarai@suse.com" date="1749038400">[NOTE: This update was only ever released in SLES and Leap.]
- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  - 0006-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  + 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0007-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch
  + 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1749038401">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1750248000">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1750680000">[ This update is a no-op, only needed to work around unfortunate automated
  packaging script behaviour on SLES. ]
- The following patches were removed in openSUSE in the Docker 28.1.1-ce
  update, but the patch names were later renamed in a SLES-only update before
  Docker 28.1.1-ce was submitted to SLES.
  This causes the SLES build scripts to refuse the update because the patches
  are not referenced in the changelog. There is no obvious place to put the
  patch removals (the 28.1.1-ce update removing the patches chronologically
  predates their renaming in SLES), so they are included here a dummy changelog
  entry to work around the issue.
  - 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1750852800">- Update to Docker 28.3.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2830&gt;
  bsc#1246556
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1751544000">- Update to Docker 28.3.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2831&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752062400">- Update to Docker 28.3.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2832&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to Go 1.24 for builds, to match upstream.</changelog>
  <changelog author="asarai@suse.com" date="1753099200">- Update to docker-buildx v0.26.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1753272000">- Update to docker-buildx v0.26.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.1&gt;</changelog>
  <changelog author="asarai@suse.com" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="asarai@suse.com" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="dimstar@opensuse.org" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="asarai@suse.com" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
</package>
<package pkgid="10e7217dee4d835d12413c9f0f543c800a182cb744da34b1725d5f98e932f24c" name="docker-buildx" arch="x86_64">
  <version epoch="0" ver="0.29.0" rel="150000.241.2"/>
  <changelog author="asarai@suse.com" date="1749038400">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1750248000">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1750680000">[ This update is a no-op, only needed to work around unfortunate automated
  packaging script behaviour on SLES. ]
- The following patches were removed in openSUSE in the Docker 28.1.1-ce
  update, but the patch names were later renamed in a SLES-only update before
  Docker 28.1.1-ce was submitted to SLES.
  This causes the SLES build scripts to refuse the update because the patches
  are not referenced in the changelog. There is no obvious place to put the
  patch removals (the 28.1.1-ce update removing the patches chronologically
  predates their renaming in SLES), so they are included here a dummy changelog
  entry to work around the issue.
  - 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1750852800">- Update to Docker 28.3.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2830&gt;
  bsc#1246556
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1751544000">- Update to Docker 28.3.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2831&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752062400">- Update to Docker 28.3.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2832&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to Go 1.24 for builds, to match upstream.</changelog>
  <changelog author="asarai@suse.com" date="1753099200">- Update to docker-buildx v0.26.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1753272000">- Update to docker-buildx v0.26.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.1&gt;</changelog>
  <changelog author="asarai@suse.com" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="asarai@suse.com" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="dimstar@opensuse.org" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="asarai@suse.com" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1770206400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bsc#1253904, CVE-2025-58181)
  * 0007-CVE-2025-58181-fix-vendor-crypto-ssh.patch</changelog>
</package>
<package pkgid="bd80497d65f2693c35f611c548e6f582dcf4688977619afb82e80da2abbfb66e" name="docker-buildx" arch="x86_64">
  <version epoch="0" ver="0.29.0" rel="150000.243.1"/>
  <changelog author="asarai@suse.com" date="1749038400">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1750248000">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1750680000">[ This update is a no-op, only needed to work around unfortunate automated
  packaging script behaviour on SLES. ]
- The following patches were removed in openSUSE in the Docker 28.1.1-ce
  update, but the patch names were later renamed in a SLES-only update before
  Docker 28.1.1-ce was submitted to SLES.
  This causes the SLES build scripts to refuse the update because the patches
  are not referenced in the changelog. There is no obvious place to put the
  patch removals (the 28.1.1-ce update removing the patches chronologically
  predates their renaming in SLES), so they are included here a dummy changelog
  entry to work around the issue.
  - 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1750852800">- Update to Docker 28.3.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2830&gt;
  bsc#1246556
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1751544000">- Update to Docker 28.3.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2831&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752062400">- Update to Docker 28.3.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2832&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to Go 1.24 for builds, to match upstream.</changelog>
  <changelog author="asarai@suse.com" date="1753099200">- Update to docker-buildx v0.26.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1753272000">- Update to docker-buildx v0.26.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.1&gt;</changelog>
  <changelog author="asarai@suse.com" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="asarai@suse.com" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="dimstar@opensuse.org" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="asarai@suse.com" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1770206400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bsc#1253904, CVE-2025-58181)
  * 0007-CVE-2025-58181-fix-vendor-crypto-ssh.patch</changelog>
</package>
<package pkgid="d430f44fbc19503cd2d661a38d40c0d2d29e6bc08b32d962afb61fbaae6c42fd" name="docker-buildx" arch="x86_64">
  <version epoch="0" ver="0.29.0" rel="150000.245.2"/>
  <changelog author="asarai@suse.com" date="1749038400">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1750248000">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1750680000">[ This update is a no-op, only needed to work around unfortunate automated
  packaging script behaviour on SLES. ]
- The following patches were removed in openSUSE in the Docker 28.1.1-ce
  update, but the patch names were later renamed in a SLES-only update before
  Docker 28.1.1-ce was submitted to SLES.
  This causes the SLES build scripts to refuse the update because the patches
  are not referenced in the changelog. There is no obvious place to put the
  patch removals (the 28.1.1-ce update removing the patches chronologically
  predates their renaming in SLES), so they are included here a dummy changelog
  entry to work around the issue.
  - 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1750852800">- Update to Docker 28.3.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2830&gt;
  bsc#1246556
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1751544000">- Update to Docker 28.3.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2831&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752062400">- Update to Docker 28.3.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2832&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to Go 1.24 for builds, to match upstream.</changelog>
  <changelog author="asarai@suse.com" date="1753099200">- Update to docker-buildx v0.26.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1753272000">- Update to docker-buildx v0.26.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.1&gt;</changelog>
  <changelog author="asarai@suse.com" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="asarai@suse.com" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="dimstar@opensuse.org" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="asarai@suse.com" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1770206400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bsc#1253904, CVE-2025-58181)
  * 0007-CVE-2025-58181-fix-vendor-crypto-ssh.patch</changelog>
</package>
<package pkgid="b995103b13f7361b2e8e9b4b67978754550d6f93b1852adcdbdb52285c0ba26e" name="docker-buildx" arch="x86_64">
  <version epoch="0" ver="0.29.0" rel="150000.247.1"/>
  <changelog author="asarai@suse.com" date="1749038400">- Always clear SUSEConnect suse_* secrets when starting containers regardless
  of whether the daemon was built with SUSEConnect support. Not doing this
  causes containers from SUSEConnect-enabled daemons to fail to start when
  running with SUSEConnect-disabled (i.e. upstream) daemons.
  This was a long-standing issue with our secrets support but until recently
  this would've required migrating from SLE packages to openSUSE packages
  (which wasn't supported). However, as SLE Micro 6.x and SLES 16 will move
  away from in-built SUSEConnect support, this is now a practical issue users
  will run into. bsc#1244035
  + 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
- Rearrange patches:
  - 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  + 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  - 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  + 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1749124800">- Do not try to inject SUSEConnect secrets when in Rootless Docker mode, as
  Docker does not have permission to access the host zypper credentials in this
  mode (and unprivileged users cannot disable the feature using
  /etc/docker/suse-secrets-enable.) bsc#1240150
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1750248000">- Update to docker-buildx v0.25.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.25.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1750680000">[ This update is a no-op, only needed to work around unfortunate automated
  packaging script behaviour on SLES. ]
- The following patches were removed in openSUSE in the Docker 28.1.1-ce
  update, but the patch names were later renamed in a SLES-only update before
  Docker 28.1.1-ce was submitted to SLES.
  This causes the SLES build scripts to refuse the update because the patches
  are not referenced in the changelog. There is no obvious place to put the
  patch removals (the 28.1.1-ce update removing the patches chronologically
  predates their renaming in SLES), so they are included here a dummy changelog
  entry to work around the issue.
  - 0007-CVE-2025-22868-vendor-jws-split-token-into-fixed-num.patch
  - 0008-CVE-2025-22869-vendor-ssh-limit-the-size-of-the-inte.patch</changelog>
  <changelog author="asarai@suse.com" date="1750852800">- Update to Docker 28.3.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2830&gt;
  bsc#1246556
- Rebase patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch</changelog>
  <changelog author="asarai@suse.com" date="1751544000">- Update to Docker 28.3.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2831&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752062400">- Update to Docker 28.3.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2832&gt;</changelog>
  <changelog author="asarai@suse.com" date="1752753600">- Update to Go 1.24 for builds, to match upstream.</changelog>
  <changelog author="asarai@suse.com" date="1753099200">- Update to docker-buildx v0.26.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1753272000">- Update to docker-buildx v0.26.1. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.26.1&gt;</changelog>
  <changelog author="asarai@suse.com" date="1753790400">- Update to Docker 28.3.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2833&gt;
  CVE-2025-54388 bsc#1247367</changelog>
  <changelog author="asarai@suse.com" date="1756728000">- Update warnings and errors related to "docker buildx ..." so that they
  reference our openSUSE docker-buildx packages.
  + cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
- Enable building docker-buildx for SLE15 systems with SUSEConnect secret
  injection enabled. PED-12534 PED-8905 bsc#1247594
  As docker-buildx does not support our SUSEConnect secret injection (and some
  users depend "docker build" working transparently), patch the docker CLI so
  that "docker build" will no longer automatically call "docker buildx build",
  effectively making DOCKER_BUILDKIT=0 the default configuration. Users can
  manually use "docker buildx ..." commands or set DOCKER_BUILDKIT=1 in order
  to opt-in to using docker-buildx.
  Users can silence the "docker build" warning by setting DOCKER_BUILDKIT=0
  explicitly.
  In order to inject SCC credentials with docker-buildx, users should use
    RUN --mount=type=secret,id=SCCcredentials zypper -n ...
  in their Dockerfiles, and
    docker buildx build --secret id=SCCcredentials,src=/etc/zypp/credentials.d/SCCcredentials,type=file .
  when doing their builds.
  + cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1756987200">- Update to docker-buildx v0.28.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.28.0&gt;
- Update to Docker 28.4.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2840&gt;
  * Fixes a nil pointer panic in "docker push". bsc#1248373
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759147200">- Remove git-core recommends on SLE. Most SLE systems have
  installRecommends=yes by default and thus end up installing git with Docker.
  bsc#1250508
  This feature is mostly intended for developers ("docker build git://") so
  most users already have the dependency installed, and the error when git is
  missing is fairly straightforward (so they can easily figure out what they
  need to install).</changelog>
  <changelog author="dimstar@opensuse.org" date="1759147201">- Remove git-core recommends also on openSUSE: the below argument
  is valid for those users too.</changelog>
  <changelog author="asarai@suse.com" date="1759320000">- Update to docker-buildx v0.29.0. Upstream changelog:
  &lt;https://github.com/docker/buildx/releases/tag/v0.29.0&gt;</changelog>
  <changelog author="asarai@suse.com" date="1759492800">- Update to Docker 28.5.0-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2850&gt;
- Backport &lt;https://github.com/moby/moby/pull/51091&gt; to re-add vendor.sum,
  fixing our builds.
  + 0007-Add-back-vendor.sum.patch
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch</changelog>
  <changelog author="asarai@suse.com" date="1759924800">- Update to Docker 28.5.1-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/28/#2851&gt;
- Rebased patches:
  * 0001-SECRETS-SUSE-always-clear-our-internal-secrets.patch
  * 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0004-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0006-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-openSUSE-point-users-to-docker-buildx-package.patch
  * cli-0002-SECRETS-SUSE-default-to-DOCKER_BUILDKIT-0-for-docker.patch
- Remove upstreamed patch:
  - 0007-Add-back-vendor.sum.patch</changelog>
  <changelog author="asarai@suse.com" date="1761566400">- Enable SELinux in default daemon.json config (--selinux-enabled). This has no
  practical impact on non-SELinux systems. bsc#1252290</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1770206400">- Places a hard cap on the amount of mechanisms that can be specified and
  encoded in the payload. (bsc#1253904, CVE-2025-58181)
  * 0007-CVE-2025-58181-fix-vendor-crypto-ssh.patch</changelog>
</package>
<package pkgid="b3d04198ec2177cc5c93a544e40c0d63147b3afb4182b7bc52b0bc33640f1049" name="dracut" arch="src">
  <version epoch="0" ver="059+suse.564.g984c275a" rel="150700.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692792000">- Update to version 059+suse.494.g2ed56105:
  Update to current upstream version (059+backports) (jsc#PED-4884)
  Upstream backports not included in 059:
  Features:
  * feat(network-wicked): remove module
  * feat(systemd-rfkill): remove module
  * feat(livenet): add memory size check depending on live image size
  * feat(nvmf): add code for parsing the NBFT
  * chore(shfmt): update to pass with shfmt v3.5.1
  * feat(dracut-init.sh): do not print by default if an udev rule is skipped
  * feat(lsinitrd): notify user on missing compressor
  * feat(dracut): use log level indicator in console output
  * feat(kernel-modules): driver support for macbook keyboards
  * feat(dracut-init.sh): specify if a module cannot be found or cannot be installed
  Fixes:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)
  * fix(systemd-udevd): add missing override paths
  * fix(systemd-journald): add systemd-sysusers dependency
  * fix(base): correct handling of quiet in loginit
  * fix(integrity): do not require ls
  * fix(dracut-init.sh): `module_check` method ignores `forced` option
  * fix(man): add missing initrd-root-device.target to flow chart
  * fix(dracut-init.sh): use the local _ret variable
  * chore(suse): require gawk instead of awk
  * fix(dracut.sh): use gawk for strtonum
  * fix(man): remove duplicate entry
  * fix(systemd-sysext): handle confexts and correct extensions search path
  * fix(modsign): load keys to correct keyring
  * fix(dmsquash-live-autooverlay): specify filesystemtype when it is already known
  * fix(fs-lib): remove quoting form the first argument of the e2fsck call
  * fix(Makefile): remove leftover rpm build rules
  * fix(Makefile): no longer upload to kernel.org
  * fix(nvmf): support /etc/nvme/config.json
  * fix(install.d): respect even more kernel-install vars, plus style fixes
  * fix(install.d): respect more kernel-install env variables
  * fix(dracut.sh): also prevent fsfreeze for tmpfs
  * fix(dmsquash-live): allow other fstypes
  * fix(bluetooth): make bluetooth rules more strict
  * fix(bluetooth): add missing files
  * fix(bluetooth): include it if Appearance matches the value assigned for keyboard
  * fix(btrfs): do not require module via cmdline when --no-kernel
  * fix(btrfs): add missing cmdline function
  * fix(multipath): explicitly check if `hostonly_cmdline` is `yes`
  * fix(systemd-timedated): correct typo in override path
  * fix(systemd-resolved): correct typo in override path
  * fix(systemd-networkd): correct typos in override paths
  * fix(dracut-init.sh): correct check in `is_qemu_virtualized` function
  * fix(Makefile): execute command -v instead of which
  * fix(network-legacy): typo
  * fix(network,dbus): improve dependency checking
  * fix(systemd-pcrphase): only include systemd-pcrphase-initrd.service
  * fix(systemd-tmpfiles): do not include systemd-tmpfiles-clean.timer
  * fix(systemd-journald): do not include systemd-journal-flush.service
  * fix(systemd): do not include systemd-random-seed.service
  * fix(kernel-modules): add interconnect drivers
  * fix(dracut-lib.sh): remove successful finished initqueue scripts
  * fix(udev-rules): remove firmware.rules
  * fix(dracut.sh): silence the output of hardlinking files by default
  * fix(virtiofs): add virtio_pci kernel module to virtiofs
  * fix(dracut-systemd): rootfs-generator cannot write outside of generator dir
  * fix(dracut-systemd): check and create generator dir outside of inner function
  * fix(dracut-systemd): do not hardcode the systemd generator directory
  * fix(dracut-functions): avoid calling grep with PCRE (-P)
  * fix(dracut-initramfs-restore.sh): handle /etc/machine-id empty or uninitialized
  * fix(lsinitrd.sh): handle /etc/machine-id empty or uninitialized
  * fix(dracut.sh): handle /etc/machine-id empty or uninitialized
  * fix(systemd-networkd): add missing conf files and services
  * fix(dracut-functions.sh): convert mmcblk to the real kernel module name
  * fix(multipath): remove dependency on multipathd.socket
  * fix(99base): adjust to allow mksh as initrd shell
  * fix(base): do not quote $CLINE in the `set` command
  * fix(systemd-ac-power): correct systemd-ac-power binary path
  * fix(dracut.sh): use dynamically uefi's sections offset
  * fix(lvmthinpool-monitor): activate lvm thin pool before extend its size
  * fix(dmsquash-live): restore compatibility with earlier releases
  * fix(dracut.sh): kmoddir does not handle trailing /
  * fix(udev-rules): remove old eudev specific rule
  * fix(udev-rules): remove old redhat specific rule
  * fix(udev-rules): remove old edd_id extra rules
  * fix(udev-rules): remove old debian specific rules
  * fix(kernel-modules): add UFS drivers
  * fix(kernel-modules): use modalias info in get_dev_module()
  * fix(crypt): add missing libraries
  * revert(network-manager): avoid restarting NetworkManager
  * fix(dracut.sh): handle sbsign errors for UEFI builds
  * fix(dracut.sh): handle out of space error for UEFI builds
  * fix(plymouth): remove /etc/system-release dependency
  * fix(network-manager): add "After" dependency on dbus.service
  * fix(fido2): libfido2.so depends on libz.so
  * fix: make iso-scan trigger udev events
  * fix(install): do not undef _FILE_OFFSET_BITS
  * fix(dracut.sh): --sysroot option broken if global variables not set in conf
  * fix(lsinitrd.sh): handle filenames with special characters
  * fix(dracut-systemd): remove unused argument
  * fix(dracut-init.sh): correct typo in comment
  * fix(dracut.sh): correct --help and --version exit codes
  * fix(crypt-gpg): do not use always --card-status
  * fix(dmsquash-live): live:/dev/*
  * fix(load_fstype): avoid false positive searchs
  * fix: shellcheck 0.8.0
  Other:
  * refactor(install): log about missing firmware only once
  * refactor(dracut-init.sh): remove redundant "dracut" from "dracut module" prints
  * refactor(virtiofs): remove exit after die
  * build: remove rpm spec file and build rules
  * docs: remove rd.lvm.snapsize and rd.lvm.snapshot
  * chore(gentoo.conf): remove examples to avoid confusion
  * chore: remove git2spec.pl, it is no longer used
  * chore(suse): update url in spec
  Bugs between 056 and 059 not referenced yet:
  * fix(fips): add libkcapi fipscheck also with the libexec location (bsc#1207892)
  * revert(multipath): install multipathd.socket (bsc#1207524)
  * fix(dracut-initramfs-restore.sh): hide unpack errors (bsc#1199341)
  * fix(suse-initrd): always check that MACHINE_ID is not empty (bsc#1201780)
  * fix(i18n): add required includes for keymaps (bsc#1200950)
  * fix(integrity): do not enable EVM if there is no key (bsc#1200718)
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(lvm): add missing grep requirement (bsc#1198271)
  * fix(dracut-initramfs-restore.sh): unpack uncompressed initrd as last option (bsc#1197195)
  For more details on the changes included with 056, 057, 058 and 059 see:
  * https://github.com/dracutdevs/dracut/releases/tag/059
  * https://github.com/dracutdevs/dracut/releases/tag/058
  * https://github.com/dracutdevs/dracut/releases/tag/057
  * https://github.com/dracutdevs/dracut/releases/tag/056</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692792001">- Update to version 059+suse.495.g55462f85:
  * chore(suse): fix invalid license</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1694174400">- Update to version 059+suse.497.g6a2c5f83:
  * chore(suse): fix systemd-sysvinit dependency (bsc#1215132)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1697716800">- Update to version 059+suse.499.g2976c52f:
  * fix(dracut.spec): do not require libgcrypt20-hmac for dracut-fips (bsc#1216059)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1698062400">- Update to version 059+suse.502.g92237883:
  * fix(systemd): add new systemd-tmpfiles-setup-dev-early.service
  * revert(suse): fix systemd-sysvinit dependency</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 059+suse.506.gd33b6bef:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1710849600">- Update to version 059+suse.515.g83296e6f:
  * fix(dracut): correct regression with multiple `rd.break=` options (bsc#1221675)
  * fix(dracut-util): do not call `strcmp` if the `value` argument is NULL (bsc#1219841)
  * fix(i18n): handle symlinked keymap (bsc#1221193)
  * fix(zfcp_rules): correct shellcheck regression when parsing ccw args (bsc#1220485)
  * fix(dracut.sh): skip README for AMD microcode generation (bsc#1217083)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1714478400">- Update to version 059+suse.519.g3edf43b4:
  * chore(suse): remove obsolete fillup template (bsc#1223467)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1714737600">- Update to version 059+suse.521.g8412a1c0:
  * fix(suse-initrd): clean return of installkernel() (bsc#1223467)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1720440000">- Update to version 059+suse.527.g7870f083:
  * feat(crypt): force the inclusion of crypttab entries with x-initrd.attach (bsc#1226529)
  * fix(mdraid): try to assemble the missing raid device (bsc#1226412)
  * fix(dracut-install): continue parsing if ldd prints "cannot be preloaded" (bsc#1208690)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1724414400">- Update to version 059+suse.531.g48487c31:
  * feat(systemd*): include systemd config files from /usr/lib/systemd (bsc#1228398)
  * fix(convertfs): error in conditional expressions (bsc#1228847)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1726833600">- Update to version 059+suse.539.gdd3495f7:
  * fix(dracut.spec): add Builddeps for initrd posttrans macros (bsc#1230639)
  * fix(zfcp_rules): check for presence of legacy rules (bsc#1230330)
  Fixes for NVMeoF boot (bsc#1230468):
  * fix(nvmf): install (only) required nvmf modules
  * fix(nvmf): require NVMeoF modules
  * fix(nvmf): move /etc/nvme/host{nqn,id} requirement to hostonly</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1727438400">- Update to version 059+suse.541.g3c2df232:
  * fix(dasd-rules): handle all possible options in `rd.dasd` (bsc#1230110)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1730721600">- Update to version 059+suse.543.g98d7f037:
  * fix(dm): remove 59-persistent-storage-dm.rules (bsc#1232063)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1738670400">- Update to version 059+suse.552.g232957b4:
  Fixes related to getting live image size (bsc#1235912):
  * fix(livenet): split `imgsize` calculation to avoid misleading error message
  * fix(livenet): check also `content-length` from live image header
  * fix(livenet): propagate error code
  Fixes for booting from iSCSI offload with bnx2i (bsc#1228086):
  * fix(iscsi): attempt iSCSI login before all interfaces are up
  * fix(iscsi): don't require network setup for bnx2i
  Other:
  * fix(dracut): rework timeout for devices added via --mount and --add-device (bsc#1231792)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1741348800">- Update to version 059+suse.557.gccd6ab94:
  * fix(iscsi): make sure services are shut down when switching root (bsc#1237695)
  * fix(iscsi): don't require network setup for qedi
  * fix(network-legacy): do not require pgrep when using wicked (bsc#1236982)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1743681600">- Update to version 059+suse.562.g5ab4efaa:
  * fix(crypt): always install s390 crypto modules (jsc#IBM-1444)
  * fix(crypt): install dm_crypt module in non-hostonly mode as well
  * fix(nfs): set correct ownership of rpc.statd state directories (bsc#1217885)
  * perf(nfs): remove references to old rpcbind state dir
  * fix(nfs): libnfsidmap plugins not added in some distributions</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1751976000">- Update to version 059+suse.564.g984c275a:
  * fix(rngd): adjust license to match the license of the whole project
  * fix(dracut): kernel module name normalization in drivers lists (bsc#1241680)</changelog>
</package>
<package pkgid="b349faff82945b9dfe7f33cdfb2e2e463748dba99b4c0f44b07b9fee9a4570f4" name="dracut" arch="x86_64">
  <version epoch="0" ver="059+suse.564.g984c275a" rel="150700.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692792000">- Update to version 059+suse.494.g2ed56105:
  Update to current upstream version (059+backports) (jsc#PED-4884)
  Upstream backports not included in 059:
  Features:
  * feat(network-wicked): remove module
  * feat(systemd-rfkill): remove module
  * feat(livenet): add memory size check depending on live image size
  * feat(nvmf): add code for parsing the NBFT
  * chore(shfmt): update to pass with shfmt v3.5.1
  * feat(dracut-init.sh): do not print by default if an udev rule is skipped
  * feat(lsinitrd): notify user on missing compressor
  * feat(dracut): use log level indicator in console output
  * feat(kernel-modules): driver support for macbook keyboards
  * feat(dracut-init.sh): specify if a module cannot be found or cannot be installed
  Fixes:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)
  * fix(systemd-udevd): add missing override paths
  * fix(systemd-journald): add systemd-sysusers dependency
  * fix(base): correct handling of quiet in loginit
  * fix(integrity): do not require ls
  * fix(dracut-init.sh): `module_check` method ignores `forced` option
  * fix(man): add missing initrd-root-device.target to flow chart
  * fix(dracut-init.sh): use the local _ret variable
  * chore(suse): require gawk instead of awk
  * fix(dracut.sh): use gawk for strtonum
  * fix(man): remove duplicate entry
  * fix(systemd-sysext): handle confexts and correct extensions search path
  * fix(modsign): load keys to correct keyring
  * fix(dmsquash-live-autooverlay): specify filesystemtype when it is already known
  * fix(fs-lib): remove quoting form the first argument of the e2fsck call
  * fix(Makefile): remove leftover rpm build rules
  * fix(Makefile): no longer upload to kernel.org
  * fix(nvmf): support /etc/nvme/config.json
  * fix(install.d): respect even more kernel-install vars, plus style fixes
  * fix(install.d): respect more kernel-install env variables
  * fix(dracut.sh): also prevent fsfreeze for tmpfs
  * fix(dmsquash-live): allow other fstypes
  * fix(bluetooth): make bluetooth rules more strict
  * fix(bluetooth): add missing files
  * fix(bluetooth): include it if Appearance matches the value assigned for keyboard
  * fix(btrfs): do not require module via cmdline when --no-kernel
  * fix(btrfs): add missing cmdline function
  * fix(multipath): explicitly check if `hostonly_cmdline` is `yes`
  * fix(systemd-timedated): correct typo in override path
  * fix(systemd-resolved): correct typo in override path
  * fix(systemd-networkd): correct typos in override paths
  * fix(dracut-init.sh): correct check in `is_qemu_virtualized` function
  * fix(Makefile): execute command -v instead of which
  * fix(network-legacy): typo
  * fix(network,dbus): improve dependency checking
  * fix(systemd-pcrphase): only include systemd-pcrphase-initrd.service
  * fix(systemd-tmpfiles): do not include systemd-tmpfiles-clean.timer
  * fix(systemd-journald): do not include systemd-journal-flush.service
  * fix(systemd): do not include systemd-random-seed.service
  * fix(kernel-modules): add interconnect drivers
  * fix(dracut-lib.sh): remove successful finished initqueue scripts
  * fix(udev-rules): remove firmware.rules
  * fix(dracut.sh): silence the output of hardlinking files by default
  * fix(virtiofs): add virtio_pci kernel module to virtiofs
  * fix(dracut-systemd): rootfs-generator cannot write outside of generator dir
  * fix(dracut-systemd): check and create generator dir outside of inner function
  * fix(dracut-systemd): do not hardcode the systemd generator directory
  * fix(dracut-functions): avoid calling grep with PCRE (-P)
  * fix(dracut-initramfs-restore.sh): handle /etc/machine-id empty or uninitialized
  * fix(lsinitrd.sh): handle /etc/machine-id empty or uninitialized
  * fix(dracut.sh): handle /etc/machine-id empty or uninitialized
  * fix(systemd-networkd): add missing conf files and services
  * fix(dracut-functions.sh): convert mmcblk to the real kernel module name
  * fix(multipath): remove dependency on multipathd.socket
  * fix(99base): adjust to allow mksh as initrd shell
  * fix(base): do not quote $CLINE in the `set` command
  * fix(systemd-ac-power): correct systemd-ac-power binary path
  * fix(dracut.sh): use dynamically uefi's sections offset
  * fix(lvmthinpool-monitor): activate lvm thin pool before extend its size
  * fix(dmsquash-live): restore compatibility with earlier releases
  * fix(dracut.sh): kmoddir does not handle trailing /
  * fix(udev-rules): remove old eudev specific rule
  * fix(udev-rules): remove old redhat specific rule
  * fix(udev-rules): remove old edd_id extra rules
  * fix(udev-rules): remove old debian specific rules
  * fix(kernel-modules): add UFS drivers
  * fix(kernel-modules): use modalias info in get_dev_module()
  * fix(crypt): add missing libraries
  * revert(network-manager): avoid restarting NetworkManager
  * fix(dracut.sh): handle sbsign errors for UEFI builds
  * fix(dracut.sh): handle out of space error for UEFI builds
  * fix(plymouth): remove /etc/system-release dependency
  * fix(network-manager): add "After" dependency on dbus.service
  * fix(fido2): libfido2.so depends on libz.so
  * fix: make iso-scan trigger udev events
  * fix(install): do not undef _FILE_OFFSET_BITS
  * fix(dracut.sh): --sysroot option broken if global variables not set in conf
  * fix(lsinitrd.sh): handle filenames with special characters
  * fix(dracut-systemd): remove unused argument
  * fix(dracut-init.sh): correct typo in comment
  * fix(dracut.sh): correct --help and --version exit codes
  * fix(crypt-gpg): do not use always --card-status
  * fix(dmsquash-live): live:/dev/*
  * fix(load_fstype): avoid false positive searchs
  * fix: shellcheck 0.8.0
  Other:
  * refactor(install): log about missing firmware only once
  * refactor(dracut-init.sh): remove redundant "dracut" from "dracut module" prints
  * refactor(virtiofs): remove exit after die
  * build: remove rpm spec file and build rules
  * docs: remove rd.lvm.snapsize and rd.lvm.snapshot
  * chore(gentoo.conf): remove examples to avoid confusion
  * chore: remove git2spec.pl, it is no longer used
  * chore(suse): update url in spec
  Bugs between 056 and 059 not referenced yet:
  * fix(fips): add libkcapi fipscheck also with the libexec location (bsc#1207892)
  * revert(multipath): install multipathd.socket (bsc#1207524)
  * fix(dracut-initramfs-restore.sh): hide unpack errors (bsc#1199341)
  * fix(suse-initrd): always check that MACHINE_ID is not empty (bsc#1201780)
  * fix(i18n): add required includes for keymaps (bsc#1200950)
  * fix(integrity): do not enable EVM if there is no key (bsc#1200718)
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(lvm): add missing grep requirement (bsc#1198271)
  * fix(dracut-initramfs-restore.sh): unpack uncompressed initrd as last option (bsc#1197195)
  For more details on the changes included with 056, 057, 058 and 059 see:
  * https://github.com/dracutdevs/dracut/releases/tag/059
  * https://github.com/dracutdevs/dracut/releases/tag/058
  * https://github.com/dracutdevs/dracut/releases/tag/057
  * https://github.com/dracutdevs/dracut/releases/tag/056</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692792001">- Update to version 059+suse.495.g55462f85:
  * chore(suse): fix invalid license</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1694174400">- Update to version 059+suse.497.g6a2c5f83:
  * chore(suse): fix systemd-sysvinit dependency (bsc#1215132)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1697716800">- Update to version 059+suse.499.g2976c52f:
  * fix(dracut.spec): do not require libgcrypt20-hmac for dracut-fips (bsc#1216059)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1698062400">- Update to version 059+suse.502.g92237883:
  * fix(systemd): add new systemd-tmpfiles-setup-dev-early.service
  * revert(suse): fix systemd-sysvinit dependency</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 059+suse.506.gd33b6bef:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1710849600">- Update to version 059+suse.515.g83296e6f:
  * fix(dracut): correct regression with multiple `rd.break=` options (bsc#1221675)
  * fix(dracut-util): do not call `strcmp` if the `value` argument is NULL (bsc#1219841)
  * fix(i18n): handle symlinked keymap (bsc#1221193)
  * fix(zfcp_rules): correct shellcheck regression when parsing ccw args (bsc#1220485)
  * fix(dracut.sh): skip README for AMD microcode generation (bsc#1217083)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1714478400">- Update to version 059+suse.519.g3edf43b4:
  * chore(suse): remove obsolete fillup template (bsc#1223467)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1714737600">- Update to version 059+suse.521.g8412a1c0:
  * fix(suse-initrd): clean return of installkernel() (bsc#1223467)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1720440000">- Update to version 059+suse.527.g7870f083:
  * feat(crypt): force the inclusion of crypttab entries with x-initrd.attach (bsc#1226529)
  * fix(mdraid): try to assemble the missing raid device (bsc#1226412)
  * fix(dracut-install): continue parsing if ldd prints "cannot be preloaded" (bsc#1208690)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1724414400">- Update to version 059+suse.531.g48487c31:
  * feat(systemd*): include systemd config files from /usr/lib/systemd (bsc#1228398)
  * fix(convertfs): error in conditional expressions (bsc#1228847)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1726833600">- Update to version 059+suse.539.gdd3495f7:
  * fix(dracut.spec): add Builddeps for initrd posttrans macros (bsc#1230639)
  * fix(zfcp_rules): check for presence of legacy rules (bsc#1230330)
  Fixes for NVMeoF boot (bsc#1230468):
  * fix(nvmf): install (only) required nvmf modules
  * fix(nvmf): require NVMeoF modules
  * fix(nvmf): move /etc/nvme/host{nqn,id} requirement to hostonly</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1727438400">- Update to version 059+suse.541.g3c2df232:
  * fix(dasd-rules): handle all possible options in `rd.dasd` (bsc#1230110)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1730721600">- Update to version 059+suse.543.g98d7f037:
  * fix(dm): remove 59-persistent-storage-dm.rules (bsc#1232063)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1738670400">- Update to version 059+suse.552.g232957b4:
  Fixes related to getting live image size (bsc#1235912):
  * fix(livenet): split `imgsize` calculation to avoid misleading error message
  * fix(livenet): check also `content-length` from live image header
  * fix(livenet): propagate error code
  Fixes for booting from iSCSI offload with bnx2i (bsc#1228086):
  * fix(iscsi): attempt iSCSI login before all interfaces are up
  * fix(iscsi): don't require network setup for bnx2i
  Other:
  * fix(dracut): rework timeout for devices added via --mount and --add-device (bsc#1231792)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1741348800">- Update to version 059+suse.557.gccd6ab94:
  * fix(iscsi): make sure services are shut down when switching root (bsc#1237695)
  * fix(iscsi): don't require network setup for qedi
  * fix(network-legacy): do not require pgrep when using wicked (bsc#1236982)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1743681600">- Update to version 059+suse.562.g5ab4efaa:
  * fix(crypt): always install s390 crypto modules (jsc#IBM-1444)
  * fix(crypt): install dm_crypt module in non-hostonly mode as well
  * fix(nfs): set correct ownership of rpc.statd state directories (bsc#1217885)
  * perf(nfs): remove references to old rpcbind state dir
  * fix(nfs): libnfsidmap plugins not added in some distributions</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1751976000">- Update to version 059+suse.564.g984c275a:
  * fix(rngd): adjust license to match the license of the whole project
  * fix(dracut): kernel module name normalization in drivers lists (bsc#1241680)</changelog>
</package>
<package pkgid="8d9f42e6dc319c5ee8e8ebd9e18c24a3a277e03f33367d377a2addc47ffbd8fd" name="dracut" arch="src">
  <version epoch="0" ver="059+suse.565.g51c2c969" rel="150700.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692792000">- Update to version 059+suse.494.g2ed56105:
  Update to current upstream version (059+backports) (jsc#PED-4884)
  Upstream backports not included in 059:
  Features:
  * feat(network-wicked): remove module
  * feat(systemd-rfkill): remove module
  * feat(livenet): add memory size check depending on live image size
  * feat(nvmf): add code for parsing the NBFT
  * chore(shfmt): update to pass with shfmt v3.5.1
  * feat(dracut-init.sh): do not print by default if an udev rule is skipped
  * feat(lsinitrd): notify user on missing compressor
  * feat(dracut): use log level indicator in console output
  * feat(kernel-modules): driver support for macbook keyboards
  * feat(dracut-init.sh): specify if a module cannot be found or cannot be installed
  Fixes:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)
  * fix(systemd-udevd): add missing override paths
  * fix(systemd-journald): add systemd-sysusers dependency
  * fix(base): correct handling of quiet in loginit
  * fix(integrity): do not require ls
  * fix(dracut-init.sh): `module_check` method ignores `forced` option
  * fix(man): add missing initrd-root-device.target to flow chart
  * fix(dracut-init.sh): use the local _ret variable
  * chore(suse): require gawk instead of awk
  * fix(dracut.sh): use gawk for strtonum
  * fix(man): remove duplicate entry
  * fix(systemd-sysext): handle confexts and correct extensions search path
  * fix(modsign): load keys to correct keyring
  * fix(dmsquash-live-autooverlay): specify filesystemtype when it is already known
  * fix(fs-lib): remove quoting form the first argument of the e2fsck call
  * fix(Makefile): remove leftover rpm build rules
  * fix(Makefile): no longer upload to kernel.org
  * fix(nvmf): support /etc/nvme/config.json
  * fix(install.d): respect even more kernel-install vars, plus style fixes
  * fix(install.d): respect more kernel-install env variables
  * fix(dracut.sh): also prevent fsfreeze for tmpfs
  * fix(dmsquash-live): allow other fstypes
  * fix(bluetooth): make bluetooth rules more strict
  * fix(bluetooth): add missing files
  * fix(bluetooth): include it if Appearance matches the value assigned for keyboard
  * fix(btrfs): do not require module via cmdline when --no-kernel
  * fix(btrfs): add missing cmdline function
  * fix(multipath): explicitly check if `hostonly_cmdline` is `yes`
  * fix(systemd-timedated): correct typo in override path
  * fix(systemd-resolved): correct typo in override path
  * fix(systemd-networkd): correct typos in override paths
  * fix(dracut-init.sh): correct check in `is_qemu_virtualized` function
  * fix(Makefile): execute command -v instead of which
  * fix(network-legacy): typo
  * fix(network,dbus): improve dependency checking
  * fix(systemd-pcrphase): only include systemd-pcrphase-initrd.service
  * fix(systemd-tmpfiles): do not include systemd-tmpfiles-clean.timer
  * fix(systemd-journald): do not include systemd-journal-flush.service
  * fix(systemd): do not include systemd-random-seed.service
  * fix(kernel-modules): add interconnect drivers
  * fix(dracut-lib.sh): remove successful finished initqueue scripts
  * fix(udev-rules): remove firmware.rules
  * fix(dracut.sh): silence the output of hardlinking files by default
  * fix(virtiofs): add virtio_pci kernel module to virtiofs
  * fix(dracut-systemd): rootfs-generator cannot write outside of generator dir
  * fix(dracut-systemd): check and create generator dir outside of inner function
  * fix(dracut-systemd): do not hardcode the systemd generator directory
  * fix(dracut-functions): avoid calling grep with PCRE (-P)
  * fix(dracut-initramfs-restore.sh): handle /etc/machine-id empty or uninitialized
  * fix(lsinitrd.sh): handle /etc/machine-id empty or uninitialized
  * fix(dracut.sh): handle /etc/machine-id empty or uninitialized
  * fix(systemd-networkd): add missing conf files and services
  * fix(dracut-functions.sh): convert mmcblk to the real kernel module name
  * fix(multipath): remove dependency on multipathd.socket
  * fix(99base): adjust to allow mksh as initrd shell
  * fix(base): do not quote $CLINE in the `set` command
  * fix(systemd-ac-power): correct systemd-ac-power binary path
  * fix(dracut.sh): use dynamically uefi's sections offset
  * fix(lvmthinpool-monitor): activate lvm thin pool before extend its size
  * fix(dmsquash-live): restore compatibility with earlier releases
  * fix(dracut.sh): kmoddir does not handle trailing /
  * fix(udev-rules): remove old eudev specific rule
  * fix(udev-rules): remove old redhat specific rule
  * fix(udev-rules): remove old edd_id extra rules
  * fix(udev-rules): remove old debian specific rules
  * fix(kernel-modules): add UFS drivers
  * fix(kernel-modules): use modalias info in get_dev_module()
  * fix(crypt): add missing libraries
  * revert(network-manager): avoid restarting NetworkManager
  * fix(dracut.sh): handle sbsign errors for UEFI builds
  * fix(dracut.sh): handle out of space error for UEFI builds
  * fix(plymouth): remove /etc/system-release dependency
  * fix(network-manager): add "After" dependency on dbus.service
  * fix(fido2): libfido2.so depends on libz.so
  * fix: make iso-scan trigger udev events
  * fix(install): do not undef _FILE_OFFSET_BITS
  * fix(dracut.sh): --sysroot option broken if global variables not set in conf
  * fix(lsinitrd.sh): handle filenames with special characters
  * fix(dracut-systemd): remove unused argument
  * fix(dracut-init.sh): correct typo in comment
  * fix(dracut.sh): correct --help and --version exit codes
  * fix(crypt-gpg): do not use always --card-status
  * fix(dmsquash-live): live:/dev/*
  * fix(load_fstype): avoid false positive searchs
  * fix: shellcheck 0.8.0
  Other:
  * refactor(install): log about missing firmware only once
  * refactor(dracut-init.sh): remove redundant "dracut" from "dracut module" prints
  * refactor(virtiofs): remove exit after die
  * build: remove rpm spec file and build rules
  * docs: remove rd.lvm.snapsize and rd.lvm.snapshot
  * chore(gentoo.conf): remove examples to avoid confusion
  * chore: remove git2spec.pl, it is no longer used
  * chore(suse): update url in spec
  Bugs between 056 and 059 not referenced yet:
  * fix(fips): add libkcapi fipscheck also with the libexec location (bsc#1207892)
  * revert(multipath): install multipathd.socket (bsc#1207524)
  * fix(dracut-initramfs-restore.sh): hide unpack errors (bsc#1199341)
  * fix(suse-initrd): always check that MACHINE_ID is not empty (bsc#1201780)
  * fix(i18n): add required includes for keymaps (bsc#1200950)
  * fix(integrity): do not enable EVM if there is no key (bsc#1200718)
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(lvm): add missing grep requirement (bsc#1198271)
  * fix(dracut-initramfs-restore.sh): unpack uncompressed initrd as last option (bsc#1197195)
  For more details on the changes included with 056, 057, 058 and 059 see:
  * https://github.com/dracutdevs/dracut/releases/tag/059
  * https://github.com/dracutdevs/dracut/releases/tag/058
  * https://github.com/dracutdevs/dracut/releases/tag/057
  * https://github.com/dracutdevs/dracut/releases/tag/056</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692792001">- Update to version 059+suse.495.g55462f85:
  * chore(suse): fix invalid license</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1694174400">- Update to version 059+suse.497.g6a2c5f83:
  * chore(suse): fix systemd-sysvinit dependency (bsc#1215132)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1697716800">- Update to version 059+suse.499.g2976c52f:
  * fix(dracut.spec): do not require libgcrypt20-hmac for dracut-fips (bsc#1216059)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1698062400">- Update to version 059+suse.502.g92237883:
  * fix(systemd): add new systemd-tmpfiles-setup-dev-early.service
  * revert(suse): fix systemd-sysvinit dependency</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 059+suse.506.gd33b6bef:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1710849600">- Update to version 059+suse.515.g83296e6f:
  * fix(dracut): correct regression with multiple `rd.break=` options (bsc#1221675)
  * fix(dracut-util): do not call `strcmp` if the `value` argument is NULL (bsc#1219841)
  * fix(i18n): handle symlinked keymap (bsc#1221193)
  * fix(zfcp_rules): correct shellcheck regression when parsing ccw args (bsc#1220485)
  * fix(dracut.sh): skip README for AMD microcode generation (bsc#1217083)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1714478400">- Update to version 059+suse.519.g3edf43b4:
  * chore(suse): remove obsolete fillup template (bsc#1223467)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1714737600">- Update to version 059+suse.521.g8412a1c0:
  * fix(suse-initrd): clean return of installkernel() (bsc#1223467)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1720440000">- Update to version 059+suse.527.g7870f083:
  * feat(crypt): force the inclusion of crypttab entries with x-initrd.attach (bsc#1226529)
  * fix(mdraid): try to assemble the missing raid device (bsc#1226412)
  * fix(dracut-install): continue parsing if ldd prints "cannot be preloaded" (bsc#1208690)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1724414400">- Update to version 059+suse.531.g48487c31:
  * feat(systemd*): include systemd config files from /usr/lib/systemd (bsc#1228398)
  * fix(convertfs): error in conditional expressions (bsc#1228847)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1726833600">- Update to version 059+suse.539.gdd3495f7:
  * fix(dracut.spec): add Builddeps for initrd posttrans macros (bsc#1230639)
  * fix(zfcp_rules): check for presence of legacy rules (bsc#1230330)
  Fixes for NVMeoF boot (bsc#1230468):
  * fix(nvmf): install (only) required nvmf modules
  * fix(nvmf): require NVMeoF modules
  * fix(nvmf): move /etc/nvme/host{nqn,id} requirement to hostonly</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1727438400">- Update to version 059+suse.541.g3c2df232:
  * fix(dasd-rules): handle all possible options in `rd.dasd` (bsc#1230110)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1730721600">- Update to version 059+suse.543.g98d7f037:
  * fix(dm): remove 59-persistent-storage-dm.rules (bsc#1232063)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1738670400">- Update to version 059+suse.552.g232957b4:
  Fixes related to getting live image size (bsc#1235912):
  * fix(livenet): split `imgsize` calculation to avoid misleading error message
  * fix(livenet): check also `content-length` from live image header
  * fix(livenet): propagate error code
  Fixes for booting from iSCSI offload with bnx2i (bsc#1228086):
  * fix(iscsi): attempt iSCSI login before all interfaces are up
  * fix(iscsi): don't require network setup for bnx2i
  Other:
  * fix(dracut): rework timeout for devices added via --mount and --add-device (bsc#1231792)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1741348800">- Update to version 059+suse.557.gccd6ab94:
  * fix(iscsi): make sure services are shut down when switching root (bsc#1237695)
  * fix(iscsi): don't require network setup for qedi
  * fix(network-legacy): do not require pgrep when using wicked (bsc#1236982)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1743681600">- Update to version 059+suse.562.g5ab4efaa:
  * fix(crypt): always install s390 crypto modules (jsc#IBM-1444)
  * fix(crypt): install dm_crypt module in non-hostonly mode as well
  * fix(nfs): set correct ownership of rpc.statd state directories (bsc#1217885)
  * perf(nfs): remove references to old rpcbind state dir
  * fix(nfs): libnfsidmap plugins not added in some distributions</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1751976000">- Update to version 059+suse.564.g984c275a:
  * fix(rngd): adjust license to match the license of the whole project
  * fix(dracut): kernel module name normalization in drivers lists (bsc#1241680)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1755000000">- Update to version 059+suse.565.g51c2c969:
  * fix(dracut-util): crash if CMDLINE ends with quotation mark (bsc#1247819)</changelog>
</package>
<package pkgid="c8541e7bb9c92f4f173aec2ce4e3f20766a1d12695048b7afb32054e506dd06e" name="dracut" arch="x86_64">
  <version epoch="0" ver="059+suse.565.g51c2c969" rel="150700.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692792000">- Update to version 059+suse.494.g2ed56105:
  Update to current upstream version (059+backports) (jsc#PED-4884)
  Upstream backports not included in 059:
  Features:
  * feat(network-wicked): remove module
  * feat(systemd-rfkill): remove module
  * feat(livenet): add memory size check depending on live image size
  * feat(nvmf): add code for parsing the NBFT
  * chore(shfmt): update to pass with shfmt v3.5.1
  * feat(dracut-init.sh): do not print by default if an udev rule is skipped
  * feat(lsinitrd): notify user on missing compressor
  * feat(dracut): use log level indicator in console output
  * feat(kernel-modules): driver support for macbook keyboards
  * feat(dracut-init.sh): specify if a module cannot be found or cannot be installed
  Fixes:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)
  * fix(systemd-udevd): add missing override paths
  * fix(systemd-journald): add systemd-sysusers dependency
  * fix(base): correct handling of quiet in loginit
  * fix(integrity): do not require ls
  * fix(dracut-init.sh): `module_check` method ignores `forced` option
  * fix(man): add missing initrd-root-device.target to flow chart
  * fix(dracut-init.sh): use the local _ret variable
  * chore(suse): require gawk instead of awk
  * fix(dracut.sh): use gawk for strtonum
  * fix(man): remove duplicate entry
  * fix(systemd-sysext): handle confexts and correct extensions search path
  * fix(modsign): load keys to correct keyring
  * fix(dmsquash-live-autooverlay): specify filesystemtype when it is already known
  * fix(fs-lib): remove quoting form the first argument of the e2fsck call
  * fix(Makefile): remove leftover rpm build rules
  * fix(Makefile): no longer upload to kernel.org
  * fix(nvmf): support /etc/nvme/config.json
  * fix(install.d): respect even more kernel-install vars, plus style fixes
  * fix(install.d): respect more kernel-install env variables
  * fix(dracut.sh): also prevent fsfreeze for tmpfs
  * fix(dmsquash-live): allow other fstypes
  * fix(bluetooth): make bluetooth rules more strict
  * fix(bluetooth): add missing files
  * fix(bluetooth): include it if Appearance matches the value assigned for keyboard
  * fix(btrfs): do not require module via cmdline when --no-kernel
  * fix(btrfs): add missing cmdline function
  * fix(multipath): explicitly check if `hostonly_cmdline` is `yes`
  * fix(systemd-timedated): correct typo in override path
  * fix(systemd-resolved): correct typo in override path
  * fix(systemd-networkd): correct typos in override paths
  * fix(dracut-init.sh): correct check in `is_qemu_virtualized` function
  * fix(Makefile): execute command -v instead of which
  * fix(network-legacy): typo
  * fix(network,dbus): improve dependency checking
  * fix(systemd-pcrphase): only include systemd-pcrphase-initrd.service
  * fix(systemd-tmpfiles): do not include systemd-tmpfiles-clean.timer
  * fix(systemd-journald): do not include systemd-journal-flush.service
  * fix(systemd): do not include systemd-random-seed.service
  * fix(kernel-modules): add interconnect drivers
  * fix(dracut-lib.sh): remove successful finished initqueue scripts
  * fix(udev-rules): remove firmware.rules
  * fix(dracut.sh): silence the output of hardlinking files by default
  * fix(virtiofs): add virtio_pci kernel module to virtiofs
  * fix(dracut-systemd): rootfs-generator cannot write outside of generator dir
  * fix(dracut-systemd): check and create generator dir outside of inner function
  * fix(dracut-systemd): do not hardcode the systemd generator directory
  * fix(dracut-functions): avoid calling grep with PCRE (-P)
  * fix(dracut-initramfs-restore.sh): handle /etc/machine-id empty or uninitialized
  * fix(lsinitrd.sh): handle /etc/machine-id empty or uninitialized
  * fix(dracut.sh): handle /etc/machine-id empty or uninitialized
  * fix(systemd-networkd): add missing conf files and services
  * fix(dracut-functions.sh): convert mmcblk to the real kernel module name
  * fix(multipath): remove dependency on multipathd.socket
  * fix(99base): adjust to allow mksh as initrd shell
  * fix(base): do not quote $CLINE in the `set` command
  * fix(systemd-ac-power): correct systemd-ac-power binary path
  * fix(dracut.sh): use dynamically uefi's sections offset
  * fix(lvmthinpool-monitor): activate lvm thin pool before extend its size
  * fix(dmsquash-live): restore compatibility with earlier releases
  * fix(dracut.sh): kmoddir does not handle trailing /
  * fix(udev-rules): remove old eudev specific rule
  * fix(udev-rules): remove old redhat specific rule
  * fix(udev-rules): remove old edd_id extra rules
  * fix(udev-rules): remove old debian specific rules
  * fix(kernel-modules): add UFS drivers
  * fix(kernel-modules): use modalias info in get_dev_module()
  * fix(crypt): add missing libraries
  * revert(network-manager): avoid restarting NetworkManager
  * fix(dracut.sh): handle sbsign errors for UEFI builds
  * fix(dracut.sh): handle out of space error for UEFI builds
  * fix(plymouth): remove /etc/system-release dependency
  * fix(network-manager): add "After" dependency on dbus.service
  * fix(fido2): libfido2.so depends on libz.so
  * fix: make iso-scan trigger udev events
  * fix(install): do not undef _FILE_OFFSET_BITS
  * fix(dracut.sh): --sysroot option broken if global variables not set in conf
  * fix(lsinitrd.sh): handle filenames with special characters
  * fix(dracut-systemd): remove unused argument
  * fix(dracut-init.sh): correct typo in comment
  * fix(dracut.sh): correct --help and --version exit codes
  * fix(crypt-gpg): do not use always --card-status
  * fix(dmsquash-live): live:/dev/*
  * fix(load_fstype): avoid false positive searchs
  * fix: shellcheck 0.8.0
  Other:
  * refactor(install): log about missing firmware only once
  * refactor(dracut-init.sh): remove redundant "dracut" from "dracut module" prints
  * refactor(virtiofs): remove exit after die
  * build: remove rpm spec file and build rules
  * docs: remove rd.lvm.snapsize and rd.lvm.snapshot
  * chore(gentoo.conf): remove examples to avoid confusion
  * chore: remove git2spec.pl, it is no longer used
  * chore(suse): update url in spec
  Bugs between 056 and 059 not referenced yet:
  * fix(fips): add libkcapi fipscheck also with the libexec location (bsc#1207892)
  * revert(multipath): install multipathd.socket (bsc#1207524)
  * fix(dracut-initramfs-restore.sh): hide unpack errors (bsc#1199341)
  * fix(suse-initrd): always check that MACHINE_ID is not empty (bsc#1201780)
  * fix(i18n): add required includes for keymaps (bsc#1200950)
  * fix(integrity): do not enable EVM if there is no key (bsc#1200718)
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(lvm): add missing grep requirement (bsc#1198271)
  * fix(dracut-initramfs-restore.sh): unpack uncompressed initrd as last option (bsc#1197195)
  For more details on the changes included with 056, 057, 058 and 059 see:
  * https://github.com/dracutdevs/dracut/releases/tag/059
  * https://github.com/dracutdevs/dracut/releases/tag/058
  * https://github.com/dracutdevs/dracut/releases/tag/057
  * https://github.com/dracutdevs/dracut/releases/tag/056</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692792001">- Update to version 059+suse.495.g55462f85:
  * chore(suse): fix invalid license</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1694174400">- Update to version 059+suse.497.g6a2c5f83:
  * chore(suse): fix systemd-sysvinit dependency (bsc#1215132)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1697716800">- Update to version 059+suse.499.g2976c52f:
  * fix(dracut.spec): do not require libgcrypt20-hmac for dracut-fips (bsc#1216059)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1698062400">- Update to version 059+suse.502.g92237883:
  * fix(systemd): add new systemd-tmpfiles-setup-dev-early.service
  * revert(suse): fix systemd-sysvinit dependency</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 059+suse.506.gd33b6bef:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1710849600">- Update to version 059+suse.515.g83296e6f:
  * fix(dracut): correct regression with multiple `rd.break=` options (bsc#1221675)
  * fix(dracut-util): do not call `strcmp` if the `value` argument is NULL (bsc#1219841)
  * fix(i18n): handle symlinked keymap (bsc#1221193)
  * fix(zfcp_rules): correct shellcheck regression when parsing ccw args (bsc#1220485)
  * fix(dracut.sh): skip README for AMD microcode generation (bsc#1217083)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1714478400">- Update to version 059+suse.519.g3edf43b4:
  * chore(suse): remove obsolete fillup template (bsc#1223467)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1714737600">- Update to version 059+suse.521.g8412a1c0:
  * fix(suse-initrd): clean return of installkernel() (bsc#1223467)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1720440000">- Update to version 059+suse.527.g7870f083:
  * feat(crypt): force the inclusion of crypttab entries with x-initrd.attach (bsc#1226529)
  * fix(mdraid): try to assemble the missing raid device (bsc#1226412)
  * fix(dracut-install): continue parsing if ldd prints "cannot be preloaded" (bsc#1208690)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1724414400">- Update to version 059+suse.531.g48487c31:
  * feat(systemd*): include systemd config files from /usr/lib/systemd (bsc#1228398)
  * fix(convertfs): error in conditional expressions (bsc#1228847)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1726833600">- Update to version 059+suse.539.gdd3495f7:
  * fix(dracut.spec): add Builddeps for initrd posttrans macros (bsc#1230639)
  * fix(zfcp_rules): check for presence of legacy rules (bsc#1230330)
  Fixes for NVMeoF boot (bsc#1230468):
  * fix(nvmf): install (only) required nvmf modules
  * fix(nvmf): require NVMeoF modules
  * fix(nvmf): move /etc/nvme/host{nqn,id} requirement to hostonly</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1727438400">- Update to version 059+suse.541.g3c2df232:
  * fix(dasd-rules): handle all possible options in `rd.dasd` (bsc#1230110)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1730721600">- Update to version 059+suse.543.g98d7f037:
  * fix(dm): remove 59-persistent-storage-dm.rules (bsc#1232063)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1738670400">- Update to version 059+suse.552.g232957b4:
  Fixes related to getting live image size (bsc#1235912):
  * fix(livenet): split `imgsize` calculation to avoid misleading error message
  * fix(livenet): check also `content-length` from live image header
  * fix(livenet): propagate error code
  Fixes for booting from iSCSI offload with bnx2i (bsc#1228086):
  * fix(iscsi): attempt iSCSI login before all interfaces are up
  * fix(iscsi): don't require network setup for bnx2i
  Other:
  * fix(dracut): rework timeout for devices added via --mount and --add-device (bsc#1231792)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1741348800">- Update to version 059+suse.557.gccd6ab94:
  * fix(iscsi): make sure services are shut down when switching root (bsc#1237695)
  * fix(iscsi): don't require network setup for qedi
  * fix(network-legacy): do not require pgrep when using wicked (bsc#1236982)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1743681600">- Update to version 059+suse.562.g5ab4efaa:
  * fix(crypt): always install s390 crypto modules (jsc#IBM-1444)
  * fix(crypt): install dm_crypt module in non-hostonly mode as well
  * fix(nfs): set correct ownership of rpc.statd state directories (bsc#1217885)
  * perf(nfs): remove references to old rpcbind state dir
  * fix(nfs): libnfsidmap plugins not added in some distributions</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1751976000">- Update to version 059+suse.564.g984c275a:
  * fix(rngd): adjust license to match the license of the whole project
  * fix(dracut): kernel module name normalization in drivers lists (bsc#1241680)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1755000000">- Update to version 059+suse.565.g51c2c969:
  * fix(dracut-util): crash if CMDLINE ends with quotation mark (bsc#1247819)</changelog>
</package>
<package pkgid="c89246aae52eebcc3159ecd732ef3438cb2f22244f94dd162101254d18b2f01e" name="dracut" arch="src">
  <version epoch="0" ver="059+suse.566.gc1c35aa5" rel="150700.3.11.3"/>
  <changelog author="antonio.feijoo@suse.com" date="1692792000">- Update to version 059+suse.494.g2ed56105:
  Update to current upstream version (059+backports) (jsc#PED-4884)
  Upstream backports not included in 059:
  Features:
  * feat(network-wicked): remove module
  * feat(systemd-rfkill): remove module
  * feat(livenet): add memory size check depending on live image size
  * feat(nvmf): add code for parsing the NBFT
  * chore(shfmt): update to pass with shfmt v3.5.1
  * feat(dracut-init.sh): do not print by default if an udev rule is skipped
  * feat(lsinitrd): notify user on missing compressor
  * feat(dracut): use log level indicator in console output
  * feat(kernel-modules): driver support for macbook keyboards
  * feat(dracut-init.sh): specify if a module cannot be found or cannot be installed
  Fixes:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)
  * fix(systemd-udevd): add missing override paths
  * fix(systemd-journald): add systemd-sysusers dependency
  * fix(base): correct handling of quiet in loginit
  * fix(integrity): do not require ls
  * fix(dracut-init.sh): `module_check` method ignores `forced` option
  * fix(man): add missing initrd-root-device.target to flow chart
  * fix(dracut-init.sh): use the local _ret variable
  * chore(suse): require gawk instead of awk
  * fix(dracut.sh): use gawk for strtonum
  * fix(man): remove duplicate entry
  * fix(systemd-sysext): handle confexts and correct extensions search path
  * fix(modsign): load keys to correct keyring
  * fix(dmsquash-live-autooverlay): specify filesystemtype when it is already known
  * fix(fs-lib): remove quoting form the first argument of the e2fsck call
  * fix(Makefile): remove leftover rpm build rules
  * fix(Makefile): no longer upload to kernel.org
  * fix(nvmf): support /etc/nvme/config.json
  * fix(install.d): respect even more kernel-install vars, plus style fixes
  * fix(install.d): respect more kernel-install env variables
  * fix(dracut.sh): also prevent fsfreeze for tmpfs
  * fix(dmsquash-live): allow other fstypes
  * fix(bluetooth): make bluetooth rules more strict
  * fix(bluetooth): add missing files
  * fix(bluetooth): include it if Appearance matches the value assigned for keyboard
  * fix(btrfs): do not require module via cmdline when --no-kernel
  * fix(btrfs): add missing cmdline function
  * fix(multipath): explicitly check if `hostonly_cmdline` is `yes`
  * fix(systemd-timedated): correct typo in override path
  * fix(systemd-resolved): correct typo in override path
  * fix(systemd-networkd): correct typos in override paths
  * fix(dracut-init.sh): correct check in `is_qemu_virtualized` function
  * fix(Makefile): execute command -v instead of which
  * fix(network-legacy): typo
  * fix(network,dbus): improve dependency checking
  * fix(systemd-pcrphase): only include systemd-pcrphase-initrd.service
  * fix(systemd-tmpfiles): do not include systemd-tmpfiles-clean.timer
  * fix(systemd-journald): do not include systemd-journal-flush.service
  * fix(systemd): do not include systemd-random-seed.service
  * fix(kernel-modules): add interconnect drivers
  * fix(dracut-lib.sh): remove successful finished initqueue scripts
  * fix(udev-rules): remove firmware.rules
  * fix(dracut.sh): silence the output of hardlinking files by default
  * fix(virtiofs): add virtio_pci kernel module to virtiofs
  * fix(dracut-systemd): rootfs-generator cannot write outside of generator dir
  * fix(dracut-systemd): check and create generator dir outside of inner function
  * fix(dracut-systemd): do not hardcode the systemd generator directory
  * fix(dracut-functions): avoid calling grep with PCRE (-P)
  * fix(dracut-initramfs-restore.sh): handle /etc/machine-id empty or uninitialized
  * fix(lsinitrd.sh): handle /etc/machine-id empty or uninitialized
  * fix(dracut.sh): handle /etc/machine-id empty or uninitialized
  * fix(systemd-networkd): add missing conf files and services
  * fix(dracut-functions.sh): convert mmcblk to the real kernel module name
  * fix(multipath): remove dependency on multipathd.socket
  * fix(99base): adjust to allow mksh as initrd shell
  * fix(base): do not quote $CLINE in the `set` command
  * fix(systemd-ac-power): correct systemd-ac-power binary path
  * fix(dracut.sh): use dynamically uefi's sections offset
  * fix(lvmthinpool-monitor): activate lvm thin pool before extend its size
  * fix(dmsquash-live): restore compatibility with earlier releases
  * fix(dracut.sh): kmoddir does not handle trailing /
  * fix(udev-rules): remove old eudev specific rule
  * fix(udev-rules): remove old redhat specific rule
  * fix(udev-rules): remove old edd_id extra rules
  * fix(udev-rules): remove old debian specific rules
  * fix(kernel-modules): add UFS drivers
  * fix(kernel-modules): use modalias info in get_dev_module()
  * fix(crypt): add missing libraries
  * revert(network-manager): avoid restarting NetworkManager
  * fix(dracut.sh): handle sbsign errors for UEFI builds
  * fix(dracut.sh): handle out of space error for UEFI builds
  * fix(plymouth): remove /etc/system-release dependency
  * fix(network-manager): add "After" dependency on dbus.service
  * fix(fido2): libfido2.so depends on libz.so
  * fix: make iso-scan trigger udev events
  * fix(install): do not undef _FILE_OFFSET_BITS
  * fix(dracut.sh): --sysroot option broken if global variables not set in conf
  * fix(lsinitrd.sh): handle filenames with special characters
  * fix(dracut-systemd): remove unused argument
  * fix(dracut-init.sh): correct typo in comment
  * fix(dracut.sh): correct --help and --version exit codes
  * fix(crypt-gpg): do not use always --card-status
  * fix(dmsquash-live): live:/dev/*
  * fix(load_fstype): avoid false positive searchs
  * fix: shellcheck 0.8.0
  Other:
  * refactor(install): log about missing firmware only once
  * refactor(dracut-init.sh): remove redundant "dracut" from "dracut module" prints
  * refactor(virtiofs): remove exit after die
  * build: remove rpm spec file and build rules
  * docs: remove rd.lvm.snapsize and rd.lvm.snapshot
  * chore(gentoo.conf): remove examples to avoid confusion
  * chore: remove git2spec.pl, it is no longer used
  * chore(suse): update url in spec
  Bugs between 056 and 059 not referenced yet:
  * fix(fips): add libkcapi fipscheck also with the libexec location (bsc#1207892)
  * revert(multipath): install multipathd.socket (bsc#1207524)
  * fix(dracut-initramfs-restore.sh): hide unpack errors (bsc#1199341)
  * fix(suse-initrd): always check that MACHINE_ID is not empty (bsc#1201780)
  * fix(i18n): add required includes for keymaps (bsc#1200950)
  * fix(integrity): do not enable EVM if there is no key (bsc#1200718)
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(lvm): add missing grep requirement (bsc#1198271)
  * fix(dracut-initramfs-restore.sh): unpack uncompressed initrd as last option (bsc#1197195)
  For more details on the changes included with 056, 057, 058 and 059 see:
  * https://github.com/dracutdevs/dracut/releases/tag/059
  * https://github.com/dracutdevs/dracut/releases/tag/058
  * https://github.com/dracutdevs/dracut/releases/tag/057
  * https://github.com/dracutdevs/dracut/releases/tag/056</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692792001">- Update to version 059+suse.495.g55462f85:
  * chore(suse): fix invalid license</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1694174400">- Update to version 059+suse.497.g6a2c5f83:
  * chore(suse): fix systemd-sysvinit dependency (bsc#1215132)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1697716800">- Update to version 059+suse.499.g2976c52f:
  * fix(dracut.spec): do not require libgcrypt20-hmac for dracut-fips (bsc#1216059)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1698062400">- Update to version 059+suse.502.g92237883:
  * fix(systemd): add new systemd-tmpfiles-setup-dev-early.service
  * revert(suse): fix systemd-sysvinit dependency</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 059+suse.506.gd33b6bef:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1710849600">- Update to version 059+suse.515.g83296e6f:
  * fix(dracut): correct regression with multiple `rd.break=` options (bsc#1221675)
  * fix(dracut-util): do not call `strcmp` if the `value` argument is NULL (bsc#1219841)
  * fix(i18n): handle symlinked keymap (bsc#1221193)
  * fix(zfcp_rules): correct shellcheck regression when parsing ccw args (bsc#1220485)
  * fix(dracut.sh): skip README for AMD microcode generation (bsc#1217083)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1714478400">- Update to version 059+suse.519.g3edf43b4:
  * chore(suse): remove obsolete fillup template (bsc#1223467)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1714737600">- Update to version 059+suse.521.g8412a1c0:
  * fix(suse-initrd): clean return of installkernel() (bsc#1223467)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1720440000">- Update to version 059+suse.527.g7870f083:
  * feat(crypt): force the inclusion of crypttab entries with x-initrd.attach (bsc#1226529)
  * fix(mdraid): try to assemble the missing raid device (bsc#1226412)
  * fix(dracut-install): continue parsing if ldd prints "cannot be preloaded" (bsc#1208690)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1724414400">- Update to version 059+suse.531.g48487c31:
  * feat(systemd*): include systemd config files from /usr/lib/systemd (bsc#1228398)
  * fix(convertfs): error in conditional expressions (bsc#1228847)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1726833600">- Update to version 059+suse.539.gdd3495f7:
  * fix(dracut.spec): add Builddeps for initrd posttrans macros (bsc#1230639)
  * fix(zfcp_rules): check for presence of legacy rules (bsc#1230330)
  Fixes for NVMeoF boot (bsc#1230468):
  * fix(nvmf): install (only) required nvmf modules
  * fix(nvmf): require NVMeoF modules
  * fix(nvmf): move /etc/nvme/host{nqn,id} requirement to hostonly</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1727438400">- Update to version 059+suse.541.g3c2df232:
  * fix(dasd-rules): handle all possible options in `rd.dasd` (bsc#1230110)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1730721600">- Update to version 059+suse.543.g98d7f037:
  * fix(dm): remove 59-persistent-storage-dm.rules (bsc#1232063)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1738670400">- Update to version 059+suse.552.g232957b4:
  Fixes related to getting live image size (bsc#1235912):
  * fix(livenet): split `imgsize` calculation to avoid misleading error message
  * fix(livenet): check also `content-length` from live image header
  * fix(livenet): propagate error code
  Fixes for booting from iSCSI offload with bnx2i (bsc#1228086):
  * fix(iscsi): attempt iSCSI login before all interfaces are up
  * fix(iscsi): don't require network setup for bnx2i
  Other:
  * fix(dracut): rework timeout for devices added via --mount and --add-device (bsc#1231792)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1741348800">- Update to version 059+suse.557.gccd6ab94:
  * fix(iscsi): make sure services are shut down when switching root (bsc#1237695)
  * fix(iscsi): don't require network setup for qedi
  * fix(network-legacy): do not require pgrep when using wicked (bsc#1236982)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1743681600">- Update to version 059+suse.562.g5ab4efaa:
  * fix(crypt): always install s390 crypto modules (jsc#IBM-1444)
  * fix(crypt): install dm_crypt module in non-hostonly mode as well
  * fix(nfs): set correct ownership of rpc.statd state directories (bsc#1217885)
  * perf(nfs): remove references to old rpcbind state dir
  * fix(nfs): libnfsidmap plugins not added in some distributions</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1751976000">- Update to version 059+suse.564.g984c275a:
  * fix(rngd): adjust license to match the license of the whole project
  * fix(dracut): kernel module name normalization in drivers lists (bsc#1241680)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1755000000">- Update to version 059+suse.565.g51c2c969:
  * fix(dracut-util): crash if CMDLINE ends with quotation mark (bsc#1247819)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1762257600">- Update to version 059+suse.566.gc1c35aa5:
  * fix(kernel-modules-extra): remove stray \ before / (bsc#1253029)</changelog>
</package>
<package pkgid="9ca6be2a9ea591bb5de3b9ffb1946a39af3eb224a479a4fc936377260ef75d26" name="dracut" arch="x86_64">
  <version epoch="0" ver="059+suse.566.gc1c35aa5" rel="150700.3.11.3"/>
  <changelog author="antonio.feijoo@suse.com" date="1692792000">- Update to version 059+suse.494.g2ed56105:
  Update to current upstream version (059+backports) (jsc#PED-4884)
  Upstream backports not included in 059:
  Features:
  * feat(network-wicked): remove module
  * feat(systemd-rfkill): remove module
  * feat(livenet): add memory size check depending on live image size
  * feat(nvmf): add code for parsing the NBFT
  * chore(shfmt): update to pass with shfmt v3.5.1
  * feat(dracut-init.sh): do not print by default if an udev rule is skipped
  * feat(lsinitrd): notify user on missing compressor
  * feat(dracut): use log level indicator in console output
  * feat(kernel-modules): driver support for macbook keyboards
  * feat(dracut-init.sh): specify if a module cannot be found or cannot be installed
  Fixes:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)
  * fix(systemd-udevd): add missing override paths
  * fix(systemd-journald): add systemd-sysusers dependency
  * fix(base): correct handling of quiet in loginit
  * fix(integrity): do not require ls
  * fix(dracut-init.sh): `module_check` method ignores `forced` option
  * fix(man): add missing initrd-root-device.target to flow chart
  * fix(dracut-init.sh): use the local _ret variable
  * chore(suse): require gawk instead of awk
  * fix(dracut.sh): use gawk for strtonum
  * fix(man): remove duplicate entry
  * fix(systemd-sysext): handle confexts and correct extensions search path
  * fix(modsign): load keys to correct keyring
  * fix(dmsquash-live-autooverlay): specify filesystemtype when it is already known
  * fix(fs-lib): remove quoting form the first argument of the e2fsck call
  * fix(Makefile): remove leftover rpm build rules
  * fix(Makefile): no longer upload to kernel.org
  * fix(nvmf): support /etc/nvme/config.json
  * fix(install.d): respect even more kernel-install vars, plus style fixes
  * fix(install.d): respect more kernel-install env variables
  * fix(dracut.sh): also prevent fsfreeze for tmpfs
  * fix(dmsquash-live): allow other fstypes
  * fix(bluetooth): make bluetooth rules more strict
  * fix(bluetooth): add missing files
  * fix(bluetooth): include it if Appearance matches the value assigned for keyboard
  * fix(btrfs): do not require module via cmdline when --no-kernel
  * fix(btrfs): add missing cmdline function
  * fix(multipath): explicitly check if `hostonly_cmdline` is `yes`
  * fix(systemd-timedated): correct typo in override path
  * fix(systemd-resolved): correct typo in override path
  * fix(systemd-networkd): correct typos in override paths
  * fix(dracut-init.sh): correct check in `is_qemu_virtualized` function
  * fix(Makefile): execute command -v instead of which
  * fix(network-legacy): typo
  * fix(network,dbus): improve dependency checking
  * fix(systemd-pcrphase): only include systemd-pcrphase-initrd.service
  * fix(systemd-tmpfiles): do not include systemd-tmpfiles-clean.timer
  * fix(systemd-journald): do not include systemd-journal-flush.service
  * fix(systemd): do not include systemd-random-seed.service
  * fix(kernel-modules): add interconnect drivers
  * fix(dracut-lib.sh): remove successful finished initqueue scripts
  * fix(udev-rules): remove firmware.rules
  * fix(dracut.sh): silence the output of hardlinking files by default
  * fix(virtiofs): add virtio_pci kernel module to virtiofs
  * fix(dracut-systemd): rootfs-generator cannot write outside of generator dir
  * fix(dracut-systemd): check and create generator dir outside of inner function
  * fix(dracut-systemd): do not hardcode the systemd generator directory
  * fix(dracut-functions): avoid calling grep with PCRE (-P)
  * fix(dracut-initramfs-restore.sh): handle /etc/machine-id empty or uninitialized
  * fix(lsinitrd.sh): handle /etc/machine-id empty or uninitialized
  * fix(dracut.sh): handle /etc/machine-id empty or uninitialized
  * fix(systemd-networkd): add missing conf files and services
  * fix(dracut-functions.sh): convert mmcblk to the real kernel module name
  * fix(multipath): remove dependency on multipathd.socket
  * fix(99base): adjust to allow mksh as initrd shell
  * fix(base): do not quote $CLINE in the `set` command
  * fix(systemd-ac-power): correct systemd-ac-power binary path
  * fix(dracut.sh): use dynamically uefi's sections offset
  * fix(lvmthinpool-monitor): activate lvm thin pool before extend its size
  * fix(dmsquash-live): restore compatibility with earlier releases
  * fix(dracut.sh): kmoddir does not handle trailing /
  * fix(udev-rules): remove old eudev specific rule
  * fix(udev-rules): remove old redhat specific rule
  * fix(udev-rules): remove old edd_id extra rules
  * fix(udev-rules): remove old debian specific rules
  * fix(kernel-modules): add UFS drivers
  * fix(kernel-modules): use modalias info in get_dev_module()
  * fix(crypt): add missing libraries
  * revert(network-manager): avoid restarting NetworkManager
  * fix(dracut.sh): handle sbsign errors for UEFI builds
  * fix(dracut.sh): handle out of space error for UEFI builds
  * fix(plymouth): remove /etc/system-release dependency
  * fix(network-manager): add "After" dependency on dbus.service
  * fix(fido2): libfido2.so depends on libz.so
  * fix: make iso-scan trigger udev events
  * fix(install): do not undef _FILE_OFFSET_BITS
  * fix(dracut.sh): --sysroot option broken if global variables not set in conf
  * fix(lsinitrd.sh): handle filenames with special characters
  * fix(dracut-systemd): remove unused argument
  * fix(dracut-init.sh): correct typo in comment
  * fix(dracut.sh): correct --help and --version exit codes
  * fix(crypt-gpg): do not use always --card-status
  * fix(dmsquash-live): live:/dev/*
  * fix(load_fstype): avoid false positive searchs
  * fix: shellcheck 0.8.0
  Other:
  * refactor(install): log about missing firmware only once
  * refactor(dracut-init.sh): remove redundant "dracut" from "dracut module" prints
  * refactor(virtiofs): remove exit after die
  * build: remove rpm spec file and build rules
  * docs: remove rd.lvm.snapsize and rd.lvm.snapshot
  * chore(gentoo.conf): remove examples to avoid confusion
  * chore: remove git2spec.pl, it is no longer used
  * chore(suse): update url in spec
  Bugs between 056 and 059 not referenced yet:
  * fix(fips): add libkcapi fipscheck also with the libexec location (bsc#1207892)
  * revert(multipath): install multipathd.socket (bsc#1207524)
  * fix(dracut-initramfs-restore.sh): hide unpack errors (bsc#1199341)
  * fix(suse-initrd): always check that MACHINE_ID is not empty (bsc#1201780)
  * fix(i18n): add required includes for keymaps (bsc#1200950)
  * fix(integrity): do not enable EVM if there is no key (bsc#1200718)
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(lvm): add missing grep requirement (bsc#1198271)
  * fix(dracut-initramfs-restore.sh): unpack uncompressed initrd as last option (bsc#1197195)
  For more details on the changes included with 056, 057, 058 and 059 see:
  * https://github.com/dracutdevs/dracut/releases/tag/059
  * https://github.com/dracutdevs/dracut/releases/tag/058
  * https://github.com/dracutdevs/dracut/releases/tag/057
  * https://github.com/dracutdevs/dracut/releases/tag/056</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692792001">- Update to version 059+suse.495.g55462f85:
  * chore(suse): fix invalid license</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1694174400">- Update to version 059+suse.497.g6a2c5f83:
  * chore(suse): fix systemd-sysvinit dependency (bsc#1215132)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1697716800">- Update to version 059+suse.499.g2976c52f:
  * fix(dracut.spec): do not require libgcrypt20-hmac for dracut-fips (bsc#1216059)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1698062400">- Update to version 059+suse.502.g92237883:
  * fix(systemd): add new systemd-tmpfiles-setup-dev-early.service
  * revert(suse): fix systemd-sysvinit dependency</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 059+suse.506.gd33b6bef:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1710849600">- Update to version 059+suse.515.g83296e6f:
  * fix(dracut): correct regression with multiple `rd.break=` options (bsc#1221675)
  * fix(dracut-util): do not call `strcmp` if the `value` argument is NULL (bsc#1219841)
  * fix(i18n): handle symlinked keymap (bsc#1221193)
  * fix(zfcp_rules): correct shellcheck regression when parsing ccw args (bsc#1220485)
  * fix(dracut.sh): skip README for AMD microcode generation (bsc#1217083)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1714478400">- Update to version 059+suse.519.g3edf43b4:
  * chore(suse): remove obsolete fillup template (bsc#1223467)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1714737600">- Update to version 059+suse.521.g8412a1c0:
  * fix(suse-initrd): clean return of installkernel() (bsc#1223467)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1720440000">- Update to version 059+suse.527.g7870f083:
  * feat(crypt): force the inclusion of crypttab entries with x-initrd.attach (bsc#1226529)
  * fix(mdraid): try to assemble the missing raid device (bsc#1226412)
  * fix(dracut-install): continue parsing if ldd prints "cannot be preloaded" (bsc#1208690)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1724414400">- Update to version 059+suse.531.g48487c31:
  * feat(systemd*): include systemd config files from /usr/lib/systemd (bsc#1228398)
  * fix(convertfs): error in conditional expressions (bsc#1228847)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1726833600">- Update to version 059+suse.539.gdd3495f7:
  * fix(dracut.spec): add Builddeps for initrd posttrans macros (bsc#1230639)
  * fix(zfcp_rules): check for presence of legacy rules (bsc#1230330)
  Fixes for NVMeoF boot (bsc#1230468):
  * fix(nvmf): install (only) required nvmf modules
  * fix(nvmf): require NVMeoF modules
  * fix(nvmf): move /etc/nvme/host{nqn,id} requirement to hostonly</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1727438400">- Update to version 059+suse.541.g3c2df232:
  * fix(dasd-rules): handle all possible options in `rd.dasd` (bsc#1230110)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1730721600">- Update to version 059+suse.543.g98d7f037:
  * fix(dm): remove 59-persistent-storage-dm.rules (bsc#1232063)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1738670400">- Update to version 059+suse.552.g232957b4:
  Fixes related to getting live image size (bsc#1235912):
  * fix(livenet): split `imgsize` calculation to avoid misleading error message
  * fix(livenet): check also `content-length` from live image header
  * fix(livenet): propagate error code
  Fixes for booting from iSCSI offload with bnx2i (bsc#1228086):
  * fix(iscsi): attempt iSCSI login before all interfaces are up
  * fix(iscsi): don't require network setup for bnx2i
  Other:
  * fix(dracut): rework timeout for devices added via --mount and --add-device (bsc#1231792)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1741348800">- Update to version 059+suse.557.gccd6ab94:
  * fix(iscsi): make sure services are shut down when switching root (bsc#1237695)
  * fix(iscsi): don't require network setup for qedi
  * fix(network-legacy): do not require pgrep when using wicked (bsc#1236982)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1743681600">- Update to version 059+suse.562.g5ab4efaa:
  * fix(crypt): always install s390 crypto modules (jsc#IBM-1444)
  * fix(crypt): install dm_crypt module in non-hostonly mode as well
  * fix(nfs): set correct ownership of rpc.statd state directories (bsc#1217885)
  * perf(nfs): remove references to old rpcbind state dir
  * fix(nfs): libnfsidmap plugins not added in some distributions</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1751976000">- Update to version 059+suse.564.g984c275a:
  * fix(rngd): adjust license to match the license of the whole project
  * fix(dracut): kernel module name normalization in drivers lists (bsc#1241680)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1755000000">- Update to version 059+suse.565.g51c2c969:
  * fix(dracut-util): crash if CMDLINE ends with quotation mark (bsc#1247819)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1762257600">- Update to version 059+suse.566.gc1c35aa5:
  * fix(kernel-modules-extra): remove stray \ before / (bsc#1253029)</changelog>
</package>
<package pkgid="e1fd6e82d10f4d456fc706793fbec1abbfb7124b9fa1f19a6831bb10c1b3e69f" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="059+suse.564.g984c275a" rel="150700.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692792000">- Update to version 059+suse.494.g2ed56105:
  Update to current upstream version (059+backports) (jsc#PED-4884)
  Upstream backports not included in 059:
  Features:
  * feat(network-wicked): remove module
  * feat(systemd-rfkill): remove module
  * feat(livenet): add memory size check depending on live image size
  * feat(nvmf): add code for parsing the NBFT
  * chore(shfmt): update to pass with shfmt v3.5.1
  * feat(dracut-init.sh): do not print by default if an udev rule is skipped
  * feat(lsinitrd): notify user on missing compressor
  * feat(dracut): use log level indicator in console output
  * feat(kernel-modules): driver support for macbook keyboards
  * feat(dracut-init.sh): specify if a module cannot be found or cannot be installed
  Fixes:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)
  * fix(systemd-udevd): add missing override paths
  * fix(systemd-journald): add systemd-sysusers dependency
  * fix(base): correct handling of quiet in loginit
  * fix(integrity): do not require ls
  * fix(dracut-init.sh): `module_check` method ignores `forced` option
  * fix(man): add missing initrd-root-device.target to flow chart
  * fix(dracut-init.sh): use the local _ret variable
  * chore(suse): require gawk instead of awk
  * fix(dracut.sh): use gawk for strtonum
  * fix(man): remove duplicate entry
  * fix(systemd-sysext): handle confexts and correct extensions search path
  * fix(modsign): load keys to correct keyring
  * fix(dmsquash-live-autooverlay): specify filesystemtype when it is already known
  * fix(fs-lib): remove quoting form the first argument of the e2fsck call
  * fix(Makefile): remove leftover rpm build rules
  * fix(Makefile): no longer upload to kernel.org
  * fix(nvmf): support /etc/nvme/config.json
  * fix(install.d): respect even more kernel-install vars, plus style fixes
  * fix(install.d): respect more kernel-install env variables
  * fix(dracut.sh): also prevent fsfreeze for tmpfs
  * fix(dmsquash-live): allow other fstypes
  * fix(bluetooth): make bluetooth rules more strict
  * fix(bluetooth): add missing files
  * fix(bluetooth): include it if Appearance matches the value assigned for keyboard
  * fix(btrfs): do not require module via cmdline when --no-kernel
  * fix(btrfs): add missing cmdline function
  * fix(multipath): explicitly check if `hostonly_cmdline` is `yes`
  * fix(systemd-timedated): correct typo in override path
  * fix(systemd-resolved): correct typo in override path
  * fix(systemd-networkd): correct typos in override paths
  * fix(dracut-init.sh): correct check in `is_qemu_virtualized` function
  * fix(Makefile): execute command -v instead of which
  * fix(network-legacy): typo
  * fix(network,dbus): improve dependency checking
  * fix(systemd-pcrphase): only include systemd-pcrphase-initrd.service
  * fix(systemd-tmpfiles): do not include systemd-tmpfiles-clean.timer
  * fix(systemd-journald): do not include systemd-journal-flush.service
  * fix(systemd): do not include systemd-random-seed.service
  * fix(kernel-modules): add interconnect drivers
  * fix(dracut-lib.sh): remove successful finished initqueue scripts
  * fix(udev-rules): remove firmware.rules
  * fix(dracut.sh): silence the output of hardlinking files by default
  * fix(virtiofs): add virtio_pci kernel module to virtiofs
  * fix(dracut-systemd): rootfs-generator cannot write outside of generator dir
  * fix(dracut-systemd): check and create generator dir outside of inner function
  * fix(dracut-systemd): do not hardcode the systemd generator directory
  * fix(dracut-functions): avoid calling grep with PCRE (-P)
  * fix(dracut-initramfs-restore.sh): handle /etc/machine-id empty or uninitialized
  * fix(lsinitrd.sh): handle /etc/machine-id empty or uninitialized
  * fix(dracut.sh): handle /etc/machine-id empty or uninitialized
  * fix(systemd-networkd): add missing conf files and services
  * fix(dracut-functions.sh): convert mmcblk to the real kernel module name
  * fix(multipath): remove dependency on multipathd.socket
  * fix(99base): adjust to allow mksh as initrd shell
  * fix(base): do not quote $CLINE in the `set` command
  * fix(systemd-ac-power): correct systemd-ac-power binary path
  * fix(dracut.sh): use dynamically uefi's sections offset
  * fix(lvmthinpool-monitor): activate lvm thin pool before extend its size
  * fix(dmsquash-live): restore compatibility with earlier releases
  * fix(dracut.sh): kmoddir does not handle trailing /
  * fix(udev-rules): remove old eudev specific rule
  * fix(udev-rules): remove old redhat specific rule
  * fix(udev-rules): remove old edd_id extra rules
  * fix(udev-rules): remove old debian specific rules
  * fix(kernel-modules): add UFS drivers
  * fix(kernel-modules): use modalias info in get_dev_module()
  * fix(crypt): add missing libraries
  * revert(network-manager): avoid restarting NetworkManager
  * fix(dracut.sh): handle sbsign errors for UEFI builds
  * fix(dracut.sh): handle out of space error for UEFI builds
  * fix(plymouth): remove /etc/system-release dependency
  * fix(network-manager): add "After" dependency on dbus.service
  * fix(fido2): libfido2.so depends on libz.so
  * fix: make iso-scan trigger udev events
  * fix(install): do not undef _FILE_OFFSET_BITS
  * fix(dracut.sh): --sysroot option broken if global variables not set in conf
  * fix(lsinitrd.sh): handle filenames with special characters
  * fix(dracut-systemd): remove unused argument
  * fix(dracut-init.sh): correct typo in comment
  * fix(dracut.sh): correct --help and --version exit codes
  * fix(crypt-gpg): do not use always --card-status
  * fix(dmsquash-live): live:/dev/*
  * fix(load_fstype): avoid false positive searchs
  * fix: shellcheck 0.8.0
  Other:
  * refactor(install): log about missing firmware only once
  * refactor(dracut-init.sh): remove redundant "dracut" from "dracut module" prints
  * refactor(virtiofs): remove exit after die
  * build: remove rpm spec file and build rules
  * docs: remove rd.lvm.snapsize and rd.lvm.snapshot
  * chore(gentoo.conf): remove examples to avoid confusion
  * chore: remove git2spec.pl, it is no longer used
  * chore(suse): update url in spec
  Bugs between 056 and 059 not referenced yet:
  * fix(fips): add libkcapi fipscheck also with the libexec location (bsc#1207892)
  * revert(multipath): install multipathd.socket (bsc#1207524)
  * fix(dracut-initramfs-restore.sh): hide unpack errors (bsc#1199341)
  * fix(suse-initrd): always check that MACHINE_ID is not empty (bsc#1201780)
  * fix(i18n): add required includes for keymaps (bsc#1200950)
  * fix(integrity): do not enable EVM if there is no key (bsc#1200718)
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(lvm): add missing grep requirement (bsc#1198271)
  * fix(dracut-initramfs-restore.sh): unpack uncompressed initrd as last option (bsc#1197195)
  For more details on the changes included with 056, 057, 058 and 059 see:
  * https://github.com/dracutdevs/dracut/releases/tag/059
  * https://github.com/dracutdevs/dracut/releases/tag/058
  * https://github.com/dracutdevs/dracut/releases/tag/057
  * https://github.com/dracutdevs/dracut/releases/tag/056</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692792001">- Update to version 059+suse.495.g55462f85:
  * chore(suse): fix invalid license</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1694174400">- Update to version 059+suse.497.g6a2c5f83:
  * chore(suse): fix systemd-sysvinit dependency (bsc#1215132)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1697716800">- Update to version 059+suse.499.g2976c52f:
  * fix(dracut.spec): do not require libgcrypt20-hmac for dracut-fips (bsc#1216059)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1698062400">- Update to version 059+suse.502.g92237883:
  * fix(systemd): add new systemd-tmpfiles-setup-dev-early.service
  * revert(suse): fix systemd-sysvinit dependency</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 059+suse.506.gd33b6bef:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1710849600">- Update to version 059+suse.515.g83296e6f:
  * fix(dracut): correct regression with multiple `rd.break=` options (bsc#1221675)
  * fix(dracut-util): do not call `strcmp` if the `value` argument is NULL (bsc#1219841)
  * fix(i18n): handle symlinked keymap (bsc#1221193)
  * fix(zfcp_rules): correct shellcheck regression when parsing ccw args (bsc#1220485)
  * fix(dracut.sh): skip README for AMD microcode generation (bsc#1217083)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1714478400">- Update to version 059+suse.519.g3edf43b4:
  * chore(suse): remove obsolete fillup template (bsc#1223467)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1714737600">- Update to version 059+suse.521.g8412a1c0:
  * fix(suse-initrd): clean return of installkernel() (bsc#1223467)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1720440000">- Update to version 059+suse.527.g7870f083:
  * feat(crypt): force the inclusion of crypttab entries with x-initrd.attach (bsc#1226529)
  * fix(mdraid): try to assemble the missing raid device (bsc#1226412)
  * fix(dracut-install): continue parsing if ldd prints "cannot be preloaded" (bsc#1208690)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1724414400">- Update to version 059+suse.531.g48487c31:
  * feat(systemd*): include systemd config files from /usr/lib/systemd (bsc#1228398)
  * fix(convertfs): error in conditional expressions (bsc#1228847)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1726833600">- Update to version 059+suse.539.gdd3495f7:
  * fix(dracut.spec): add Builddeps for initrd posttrans macros (bsc#1230639)
  * fix(zfcp_rules): check for presence of legacy rules (bsc#1230330)
  Fixes for NVMeoF boot (bsc#1230468):
  * fix(nvmf): install (only) required nvmf modules
  * fix(nvmf): require NVMeoF modules
  * fix(nvmf): move /etc/nvme/host{nqn,id} requirement to hostonly</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1727438400">- Update to version 059+suse.541.g3c2df232:
  * fix(dasd-rules): handle all possible options in `rd.dasd` (bsc#1230110)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1730721600">- Update to version 059+suse.543.g98d7f037:
  * fix(dm): remove 59-persistent-storage-dm.rules (bsc#1232063)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1738670400">- Update to version 059+suse.552.g232957b4:
  Fixes related to getting live image size (bsc#1235912):
  * fix(livenet): split `imgsize` calculation to avoid misleading error message
  * fix(livenet): check also `content-length` from live image header
  * fix(livenet): propagate error code
  Fixes for booting from iSCSI offload with bnx2i (bsc#1228086):
  * fix(iscsi): attempt iSCSI login before all interfaces are up
  * fix(iscsi): don't require network setup for bnx2i
  Other:
  * fix(dracut): rework timeout for devices added via --mount and --add-device (bsc#1231792)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1741348800">- Update to version 059+suse.557.gccd6ab94:
  * fix(iscsi): make sure services are shut down when switching root (bsc#1237695)
  * fix(iscsi): don't require network setup for qedi
  * fix(network-legacy): do not require pgrep when using wicked (bsc#1236982)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1743681600">- Update to version 059+suse.562.g5ab4efaa:
  * fix(crypt): always install s390 crypto modules (jsc#IBM-1444)
  * fix(crypt): install dm_crypt module in non-hostonly mode as well
  * fix(nfs): set correct ownership of rpc.statd state directories (bsc#1217885)
  * perf(nfs): remove references to old rpcbind state dir
  * fix(nfs): libnfsidmap plugins not added in some distributions</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1751976000">- Update to version 059+suse.564.g984c275a:
  * fix(rngd): adjust license to match the license of the whole project
  * fix(dracut): kernel module name normalization in drivers lists (bsc#1241680)</changelog>
</package>
<package pkgid="4a042a2b63c96e1c92d2dbea60b2ffc771cf095101987c428359f5947102eba1" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="059+suse.565.g51c2c969" rel="150700.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692792000">- Update to version 059+suse.494.g2ed56105:
  Update to current upstream version (059+backports) (jsc#PED-4884)
  Upstream backports not included in 059:
  Features:
  * feat(network-wicked): remove module
  * feat(systemd-rfkill): remove module
  * feat(livenet): add memory size check depending on live image size
  * feat(nvmf): add code for parsing the NBFT
  * chore(shfmt): update to pass with shfmt v3.5.1
  * feat(dracut-init.sh): do not print by default if an udev rule is skipped
  * feat(lsinitrd): notify user on missing compressor
  * feat(dracut): use log level indicator in console output
  * feat(kernel-modules): driver support for macbook keyboards
  * feat(dracut-init.sh): specify if a module cannot be found or cannot be installed
  Fixes:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)
  * fix(systemd-udevd): add missing override paths
  * fix(systemd-journald): add systemd-sysusers dependency
  * fix(base): correct handling of quiet in loginit
  * fix(integrity): do not require ls
  * fix(dracut-init.sh): `module_check` method ignores `forced` option
  * fix(man): add missing initrd-root-device.target to flow chart
  * fix(dracut-init.sh): use the local _ret variable
  * chore(suse): require gawk instead of awk
  * fix(dracut.sh): use gawk for strtonum
  * fix(man): remove duplicate entry
  * fix(systemd-sysext): handle confexts and correct extensions search path
  * fix(modsign): load keys to correct keyring
  * fix(dmsquash-live-autooverlay): specify filesystemtype when it is already known
  * fix(fs-lib): remove quoting form the first argument of the e2fsck call
  * fix(Makefile): remove leftover rpm build rules
  * fix(Makefile): no longer upload to kernel.org
  * fix(nvmf): support /etc/nvme/config.json
  * fix(install.d): respect even more kernel-install vars, plus style fixes
  * fix(install.d): respect more kernel-install env variables
  * fix(dracut.sh): also prevent fsfreeze for tmpfs
  * fix(dmsquash-live): allow other fstypes
  * fix(bluetooth): make bluetooth rules more strict
  * fix(bluetooth): add missing files
  * fix(bluetooth): include it if Appearance matches the value assigned for keyboard
  * fix(btrfs): do not require module via cmdline when --no-kernel
  * fix(btrfs): add missing cmdline function
  * fix(multipath): explicitly check if `hostonly_cmdline` is `yes`
  * fix(systemd-timedated): correct typo in override path
  * fix(systemd-resolved): correct typo in override path
  * fix(systemd-networkd): correct typos in override paths
  * fix(dracut-init.sh): correct check in `is_qemu_virtualized` function
  * fix(Makefile): execute command -v instead of which
  * fix(network-legacy): typo
  * fix(network,dbus): improve dependency checking
  * fix(systemd-pcrphase): only include systemd-pcrphase-initrd.service
  * fix(systemd-tmpfiles): do not include systemd-tmpfiles-clean.timer
  * fix(systemd-journald): do not include systemd-journal-flush.service
  * fix(systemd): do not include systemd-random-seed.service
  * fix(kernel-modules): add interconnect drivers
  * fix(dracut-lib.sh): remove successful finished initqueue scripts
  * fix(udev-rules): remove firmware.rules
  * fix(dracut.sh): silence the output of hardlinking files by default
  * fix(virtiofs): add virtio_pci kernel module to virtiofs
  * fix(dracut-systemd): rootfs-generator cannot write outside of generator dir
  * fix(dracut-systemd): check and create generator dir outside of inner function
  * fix(dracut-systemd): do not hardcode the systemd generator directory
  * fix(dracut-functions): avoid calling grep with PCRE (-P)
  * fix(dracut-initramfs-restore.sh): handle /etc/machine-id empty or uninitialized
  * fix(lsinitrd.sh): handle /etc/machine-id empty or uninitialized
  * fix(dracut.sh): handle /etc/machine-id empty or uninitialized
  * fix(systemd-networkd): add missing conf files and services
  * fix(dracut-functions.sh): convert mmcblk to the real kernel module name
  * fix(multipath): remove dependency on multipathd.socket
  * fix(99base): adjust to allow mksh as initrd shell
  * fix(base): do not quote $CLINE in the `set` command
  * fix(systemd-ac-power): correct systemd-ac-power binary path
  * fix(dracut.sh): use dynamically uefi's sections offset
  * fix(lvmthinpool-monitor): activate lvm thin pool before extend its size
  * fix(dmsquash-live): restore compatibility with earlier releases
  * fix(dracut.sh): kmoddir does not handle trailing /
  * fix(udev-rules): remove old eudev specific rule
  * fix(udev-rules): remove old redhat specific rule
  * fix(udev-rules): remove old edd_id extra rules
  * fix(udev-rules): remove old debian specific rules
  * fix(kernel-modules): add UFS drivers
  * fix(kernel-modules): use modalias info in get_dev_module()
  * fix(crypt): add missing libraries
  * revert(network-manager): avoid restarting NetworkManager
  * fix(dracut.sh): handle sbsign errors for UEFI builds
  * fix(dracut.sh): handle out of space error for UEFI builds
  * fix(plymouth): remove /etc/system-release dependency
  * fix(network-manager): add "After" dependency on dbus.service
  * fix(fido2): libfido2.so depends on libz.so
  * fix: make iso-scan trigger udev events
  * fix(install): do not undef _FILE_OFFSET_BITS
  * fix(dracut.sh): --sysroot option broken if global variables not set in conf
  * fix(lsinitrd.sh): handle filenames with special characters
  * fix(dracut-systemd): remove unused argument
  * fix(dracut-init.sh): correct typo in comment
  * fix(dracut.sh): correct --help and --version exit codes
  * fix(crypt-gpg): do not use always --card-status
  * fix(dmsquash-live): live:/dev/*
  * fix(load_fstype): avoid false positive searchs
  * fix: shellcheck 0.8.0
  Other:
  * refactor(install): log about missing firmware only once
  * refactor(dracut-init.sh): remove redundant "dracut" from "dracut module" prints
  * refactor(virtiofs): remove exit after die
  * build: remove rpm spec file and build rules
  * docs: remove rd.lvm.snapsize and rd.lvm.snapshot
  * chore(gentoo.conf): remove examples to avoid confusion
  * chore: remove git2spec.pl, it is no longer used
  * chore(suse): update url in spec
  Bugs between 056 and 059 not referenced yet:
  * fix(fips): add libkcapi fipscheck also with the libexec location (bsc#1207892)
  * revert(multipath): install multipathd.socket (bsc#1207524)
  * fix(dracut-initramfs-restore.sh): hide unpack errors (bsc#1199341)
  * fix(suse-initrd): always check that MACHINE_ID is not empty (bsc#1201780)
  * fix(i18n): add required includes for keymaps (bsc#1200950)
  * fix(integrity): do not enable EVM if there is no key (bsc#1200718)
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(lvm): add missing grep requirement (bsc#1198271)
  * fix(dracut-initramfs-restore.sh): unpack uncompressed initrd as last option (bsc#1197195)
  For more details on the changes included with 056, 057, 058 and 059 see:
  * https://github.com/dracutdevs/dracut/releases/tag/059
  * https://github.com/dracutdevs/dracut/releases/tag/058
  * https://github.com/dracutdevs/dracut/releases/tag/057
  * https://github.com/dracutdevs/dracut/releases/tag/056</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692792001">- Update to version 059+suse.495.g55462f85:
  * chore(suse): fix invalid license</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1694174400">- Update to version 059+suse.497.g6a2c5f83:
  * chore(suse): fix systemd-sysvinit dependency (bsc#1215132)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1697716800">- Update to version 059+suse.499.g2976c52f:
  * fix(dracut.spec): do not require libgcrypt20-hmac for dracut-fips (bsc#1216059)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1698062400">- Update to version 059+suse.502.g92237883:
  * fix(systemd): add new systemd-tmpfiles-setup-dev-early.service
  * revert(suse): fix systemd-sysvinit dependency</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 059+suse.506.gd33b6bef:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1710849600">- Update to version 059+suse.515.g83296e6f:
  * fix(dracut): correct regression with multiple `rd.break=` options (bsc#1221675)
  * fix(dracut-util): do not call `strcmp` if the `value` argument is NULL (bsc#1219841)
  * fix(i18n): handle symlinked keymap (bsc#1221193)
  * fix(zfcp_rules): correct shellcheck regression when parsing ccw args (bsc#1220485)
  * fix(dracut.sh): skip README for AMD microcode generation (bsc#1217083)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1714478400">- Update to version 059+suse.519.g3edf43b4:
  * chore(suse): remove obsolete fillup template (bsc#1223467)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1714737600">- Update to version 059+suse.521.g8412a1c0:
  * fix(suse-initrd): clean return of installkernel() (bsc#1223467)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1720440000">- Update to version 059+suse.527.g7870f083:
  * feat(crypt): force the inclusion of crypttab entries with x-initrd.attach (bsc#1226529)
  * fix(mdraid): try to assemble the missing raid device (bsc#1226412)
  * fix(dracut-install): continue parsing if ldd prints "cannot be preloaded" (bsc#1208690)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1724414400">- Update to version 059+suse.531.g48487c31:
  * feat(systemd*): include systemd config files from /usr/lib/systemd (bsc#1228398)
  * fix(convertfs): error in conditional expressions (bsc#1228847)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1726833600">- Update to version 059+suse.539.gdd3495f7:
  * fix(dracut.spec): add Builddeps for initrd posttrans macros (bsc#1230639)
  * fix(zfcp_rules): check for presence of legacy rules (bsc#1230330)
  Fixes for NVMeoF boot (bsc#1230468):
  * fix(nvmf): install (only) required nvmf modules
  * fix(nvmf): require NVMeoF modules
  * fix(nvmf): move /etc/nvme/host{nqn,id} requirement to hostonly</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1727438400">- Update to version 059+suse.541.g3c2df232:
  * fix(dasd-rules): handle all possible options in `rd.dasd` (bsc#1230110)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1730721600">- Update to version 059+suse.543.g98d7f037:
  * fix(dm): remove 59-persistent-storage-dm.rules (bsc#1232063)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1738670400">- Update to version 059+suse.552.g232957b4:
  Fixes related to getting live image size (bsc#1235912):
  * fix(livenet): split `imgsize` calculation to avoid misleading error message
  * fix(livenet): check also `content-length` from live image header
  * fix(livenet): propagate error code
  Fixes for booting from iSCSI offload with bnx2i (bsc#1228086):
  * fix(iscsi): attempt iSCSI login before all interfaces are up
  * fix(iscsi): don't require network setup for bnx2i
  Other:
  * fix(dracut): rework timeout for devices added via --mount and --add-device (bsc#1231792)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1741348800">- Update to version 059+suse.557.gccd6ab94:
  * fix(iscsi): make sure services are shut down when switching root (bsc#1237695)
  * fix(iscsi): don't require network setup for qedi
  * fix(network-legacy): do not require pgrep when using wicked (bsc#1236982)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1743681600">- Update to version 059+suse.562.g5ab4efaa:
  * fix(crypt): always install s390 crypto modules (jsc#IBM-1444)
  * fix(crypt): install dm_crypt module in non-hostonly mode as well
  * fix(nfs): set correct ownership of rpc.statd state directories (bsc#1217885)
  * perf(nfs): remove references to old rpcbind state dir
  * fix(nfs): libnfsidmap plugins not added in some distributions</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1751976000">- Update to version 059+suse.564.g984c275a:
  * fix(rngd): adjust license to match the license of the whole project
  * fix(dracut): kernel module name normalization in drivers lists (bsc#1241680)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1755000000">- Update to version 059+suse.565.g51c2c969:
  * fix(dracut-util): crash if CMDLINE ends with quotation mark (bsc#1247819)</changelog>
</package>
<package pkgid="8fd9bf036e30560f07993dd84ede7afa1ec1b9ba00f0775abd09b515ecc3c03b" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="059+suse.566.gc1c35aa5" rel="150700.3.11.3"/>
  <changelog author="antonio.feijoo@suse.com" date="1692792000">- Update to version 059+suse.494.g2ed56105:
  Update to current upstream version (059+backports) (jsc#PED-4884)
  Upstream backports not included in 059:
  Features:
  * feat(network-wicked): remove module
  * feat(systemd-rfkill): remove module
  * feat(livenet): add memory size check depending on live image size
  * feat(nvmf): add code for parsing the NBFT
  * chore(shfmt): update to pass with shfmt v3.5.1
  * feat(dracut-init.sh): do not print by default if an udev rule is skipped
  * feat(lsinitrd): notify user on missing compressor
  * feat(dracut): use log level indicator in console output
  * feat(kernel-modules): driver support for macbook keyboards
  * feat(dracut-init.sh): specify if a module cannot be found or cannot be installed
  Fixes:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)
  * fix(systemd-udevd): add missing override paths
  * fix(systemd-journald): add systemd-sysusers dependency
  * fix(base): correct handling of quiet in loginit
  * fix(integrity): do not require ls
  * fix(dracut-init.sh): `module_check` method ignores `forced` option
  * fix(man): add missing initrd-root-device.target to flow chart
  * fix(dracut-init.sh): use the local _ret variable
  * chore(suse): require gawk instead of awk
  * fix(dracut.sh): use gawk for strtonum
  * fix(man): remove duplicate entry
  * fix(systemd-sysext): handle confexts and correct extensions search path
  * fix(modsign): load keys to correct keyring
  * fix(dmsquash-live-autooverlay): specify filesystemtype when it is already known
  * fix(fs-lib): remove quoting form the first argument of the e2fsck call
  * fix(Makefile): remove leftover rpm build rules
  * fix(Makefile): no longer upload to kernel.org
  * fix(nvmf): support /etc/nvme/config.json
  * fix(install.d): respect even more kernel-install vars, plus style fixes
  * fix(install.d): respect more kernel-install env variables
  * fix(dracut.sh): also prevent fsfreeze for tmpfs
  * fix(dmsquash-live): allow other fstypes
  * fix(bluetooth): make bluetooth rules more strict
  * fix(bluetooth): add missing files
  * fix(bluetooth): include it if Appearance matches the value assigned for keyboard
  * fix(btrfs): do not require module via cmdline when --no-kernel
  * fix(btrfs): add missing cmdline function
  * fix(multipath): explicitly check if `hostonly_cmdline` is `yes`
  * fix(systemd-timedated): correct typo in override path
  * fix(systemd-resolved): correct typo in override path
  * fix(systemd-networkd): correct typos in override paths
  * fix(dracut-init.sh): correct check in `is_qemu_virtualized` function
  * fix(Makefile): execute command -v instead of which
  * fix(network-legacy): typo
  * fix(network,dbus): improve dependency checking
  * fix(systemd-pcrphase): only include systemd-pcrphase-initrd.service
  * fix(systemd-tmpfiles): do not include systemd-tmpfiles-clean.timer
  * fix(systemd-journald): do not include systemd-journal-flush.service
  * fix(systemd): do not include systemd-random-seed.service
  * fix(kernel-modules): add interconnect drivers
  * fix(dracut-lib.sh): remove successful finished initqueue scripts
  * fix(udev-rules): remove firmware.rules
  * fix(dracut.sh): silence the output of hardlinking files by default
  * fix(virtiofs): add virtio_pci kernel module to virtiofs
  * fix(dracut-systemd): rootfs-generator cannot write outside of generator dir
  * fix(dracut-systemd): check and create generator dir outside of inner function
  * fix(dracut-systemd): do not hardcode the systemd generator directory
  * fix(dracut-functions): avoid calling grep with PCRE (-P)
  * fix(dracut-initramfs-restore.sh): handle /etc/machine-id empty or uninitialized
  * fix(lsinitrd.sh): handle /etc/machine-id empty or uninitialized
  * fix(dracut.sh): handle /etc/machine-id empty or uninitialized
  * fix(systemd-networkd): add missing conf files and services
  * fix(dracut-functions.sh): convert mmcblk to the real kernel module name
  * fix(multipath): remove dependency on multipathd.socket
  * fix(99base): adjust to allow mksh as initrd shell
  * fix(base): do not quote $CLINE in the `set` command
  * fix(systemd-ac-power): correct systemd-ac-power binary path
  * fix(dracut.sh): use dynamically uefi's sections offset
  * fix(lvmthinpool-monitor): activate lvm thin pool before extend its size
  * fix(dmsquash-live): restore compatibility with earlier releases
  * fix(dracut.sh): kmoddir does not handle trailing /
  * fix(udev-rules): remove old eudev specific rule
  * fix(udev-rules): remove old redhat specific rule
  * fix(udev-rules): remove old edd_id extra rules
  * fix(udev-rules): remove old debian specific rules
  * fix(kernel-modules): add UFS drivers
  * fix(kernel-modules): use modalias info in get_dev_module()
  * fix(crypt): add missing libraries
  * revert(network-manager): avoid restarting NetworkManager
  * fix(dracut.sh): handle sbsign errors for UEFI builds
  * fix(dracut.sh): handle out of space error for UEFI builds
  * fix(plymouth): remove /etc/system-release dependency
  * fix(network-manager): add "After" dependency on dbus.service
  * fix(fido2): libfido2.so depends on libz.so
  * fix: make iso-scan trigger udev events
  * fix(install): do not undef _FILE_OFFSET_BITS
  * fix(dracut.sh): --sysroot option broken if global variables not set in conf
  * fix(lsinitrd.sh): handle filenames with special characters
  * fix(dracut-systemd): remove unused argument
  * fix(dracut-init.sh): correct typo in comment
  * fix(dracut.sh): correct --help and --version exit codes
  * fix(crypt-gpg): do not use always --card-status
  * fix(dmsquash-live): live:/dev/*
  * fix(load_fstype): avoid false positive searchs
  * fix: shellcheck 0.8.0
  Other:
  * refactor(install): log about missing firmware only once
  * refactor(dracut-init.sh): remove redundant "dracut" from "dracut module" prints
  * refactor(virtiofs): remove exit after die
  * build: remove rpm spec file and build rules
  * docs: remove rd.lvm.snapsize and rd.lvm.snapshot
  * chore(gentoo.conf): remove examples to avoid confusion
  * chore: remove git2spec.pl, it is no longer used
  * chore(suse): update url in spec
  Bugs between 056 and 059 not referenced yet:
  * fix(fips): add libkcapi fipscheck also with the libexec location (bsc#1207892)
  * revert(multipath): install multipathd.socket (bsc#1207524)
  * fix(dracut-initramfs-restore.sh): hide unpack errors (bsc#1199341)
  * fix(suse-initrd): always check that MACHINE_ID is not empty (bsc#1201780)
  * fix(i18n): add required includes for keymaps (bsc#1200950)
  * fix(integrity): do not enable EVM if there is no key (bsc#1200718)
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(lvm): add missing grep requirement (bsc#1198271)
  * fix(dracut-initramfs-restore.sh): unpack uncompressed initrd as last option (bsc#1197195)
  For more details on the changes included with 056, 057, 058 and 059 see:
  * https://github.com/dracutdevs/dracut/releases/tag/059
  * https://github.com/dracutdevs/dracut/releases/tag/058
  * https://github.com/dracutdevs/dracut/releases/tag/057
  * https://github.com/dracutdevs/dracut/releases/tag/056</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692792001">- Update to version 059+suse.495.g55462f85:
  * chore(suse): fix invalid license</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1694174400">- Update to version 059+suse.497.g6a2c5f83:
  * chore(suse): fix systemd-sysvinit dependency (bsc#1215132)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1697716800">- Update to version 059+suse.499.g2976c52f:
  * fix(dracut.spec): do not require libgcrypt20-hmac for dracut-fips (bsc#1216059)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1698062400">- Update to version 059+suse.502.g92237883:
  * fix(systemd): add new systemd-tmpfiles-setup-dev-early.service
  * revert(suse): fix systemd-sysvinit dependency</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 059+suse.506.gd33b6bef:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1710849600">- Update to version 059+suse.515.g83296e6f:
  * fix(dracut): correct regression with multiple `rd.break=` options (bsc#1221675)
  * fix(dracut-util): do not call `strcmp` if the `value` argument is NULL (bsc#1219841)
  * fix(i18n): handle symlinked keymap (bsc#1221193)
  * fix(zfcp_rules): correct shellcheck regression when parsing ccw args (bsc#1220485)
  * fix(dracut.sh): skip README for AMD microcode generation (bsc#1217083)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1714478400">- Update to version 059+suse.519.g3edf43b4:
  * chore(suse): remove obsolete fillup template (bsc#1223467)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1714737600">- Update to version 059+suse.521.g8412a1c0:
  * fix(suse-initrd): clean return of installkernel() (bsc#1223467)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1720440000">- Update to version 059+suse.527.g7870f083:
  * feat(crypt): force the inclusion of crypttab entries with x-initrd.attach (bsc#1226529)
  * fix(mdraid): try to assemble the missing raid device (bsc#1226412)
  * fix(dracut-install): continue parsing if ldd prints "cannot be preloaded" (bsc#1208690)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1724414400">- Update to version 059+suse.531.g48487c31:
  * feat(systemd*): include systemd config files from /usr/lib/systemd (bsc#1228398)
  * fix(convertfs): error in conditional expressions (bsc#1228847)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1726833600">- Update to version 059+suse.539.gdd3495f7:
  * fix(dracut.spec): add Builddeps for initrd posttrans macros (bsc#1230639)
  * fix(zfcp_rules): check for presence of legacy rules (bsc#1230330)
  Fixes for NVMeoF boot (bsc#1230468):
  * fix(nvmf): install (only) required nvmf modules
  * fix(nvmf): require NVMeoF modules
  * fix(nvmf): move /etc/nvme/host{nqn,id} requirement to hostonly</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1727438400">- Update to version 059+suse.541.g3c2df232:
  * fix(dasd-rules): handle all possible options in `rd.dasd` (bsc#1230110)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1730721600">- Update to version 059+suse.543.g98d7f037:
  * fix(dm): remove 59-persistent-storage-dm.rules (bsc#1232063)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1738670400">- Update to version 059+suse.552.g232957b4:
  Fixes related to getting live image size (bsc#1235912):
  * fix(livenet): split `imgsize` calculation to avoid misleading error message
  * fix(livenet): check also `content-length` from live image header
  * fix(livenet): propagate error code
  Fixes for booting from iSCSI offload with bnx2i (bsc#1228086):
  * fix(iscsi): attempt iSCSI login before all interfaces are up
  * fix(iscsi): don't require network setup for bnx2i
  Other:
  * fix(dracut): rework timeout for devices added via --mount and --add-device (bsc#1231792)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1741348800">- Update to version 059+suse.557.gccd6ab94:
  * fix(iscsi): make sure services are shut down when switching root (bsc#1237695)
  * fix(iscsi): don't require network setup for qedi
  * fix(network-legacy): do not require pgrep when using wicked (bsc#1236982)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1743681600">- Update to version 059+suse.562.g5ab4efaa:
  * fix(crypt): always install s390 crypto modules (jsc#IBM-1444)
  * fix(crypt): install dm_crypt module in non-hostonly mode as well
  * fix(nfs): set correct ownership of rpc.statd state directories (bsc#1217885)
  * perf(nfs): remove references to old rpcbind state dir
  * fix(nfs): libnfsidmap plugins not added in some distributions</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1751976000">- Update to version 059+suse.564.g984c275a:
  * fix(rngd): adjust license to match the license of the whole project
  * fix(dracut): kernel module name normalization in drivers lists (bsc#1241680)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1755000000">- Update to version 059+suse.565.g51c2c969:
  * fix(dracut-util): crash if CMDLINE ends with quotation mark (bsc#1247819)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1762257600">- Update to version 059+suse.566.gc1c35aa5:
  * fix(kernel-modules-extra): remove stray \ before / (bsc#1253029)</changelog>
</package>
<package pkgid="96238a6ab1c80575359e3e8c2fd9013fa2445b0e4c676b7058c977513f58fd2d" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="059+suse.564.g984c275a" rel="150700.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692792000">- Update to version 059+suse.494.g2ed56105:
  Update to current upstream version (059+backports) (jsc#PED-4884)
  Upstream backports not included in 059:
  Features:
  * feat(network-wicked): remove module
  * feat(systemd-rfkill): remove module
  * feat(livenet): add memory size check depending on live image size
  * feat(nvmf): add code for parsing the NBFT
  * chore(shfmt): update to pass with shfmt v3.5.1
  * feat(dracut-init.sh): do not print by default if an udev rule is skipped
  * feat(lsinitrd): notify user on missing compressor
  * feat(dracut): use log level indicator in console output
  * feat(kernel-modules): driver support for macbook keyboards
  * feat(dracut-init.sh): specify if a module cannot be found or cannot be installed
  Fixes:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)
  * fix(systemd-udevd): add missing override paths
  * fix(systemd-journald): add systemd-sysusers dependency
  * fix(base): correct handling of quiet in loginit
  * fix(integrity): do not require ls
  * fix(dracut-init.sh): `module_check` method ignores `forced` option
  * fix(man): add missing initrd-root-device.target to flow chart
  * fix(dracut-init.sh): use the local _ret variable
  * chore(suse): require gawk instead of awk
  * fix(dracut.sh): use gawk for strtonum
  * fix(man): remove duplicate entry
  * fix(systemd-sysext): handle confexts and correct extensions search path
  * fix(modsign): load keys to correct keyring
  * fix(dmsquash-live-autooverlay): specify filesystemtype when it is already known
  * fix(fs-lib): remove quoting form the first argument of the e2fsck call
  * fix(Makefile): remove leftover rpm build rules
  * fix(Makefile): no longer upload to kernel.org
  * fix(nvmf): support /etc/nvme/config.json
  * fix(install.d): respect even more kernel-install vars, plus style fixes
  * fix(install.d): respect more kernel-install env variables
  * fix(dracut.sh): also prevent fsfreeze for tmpfs
  * fix(dmsquash-live): allow other fstypes
  * fix(bluetooth): make bluetooth rules more strict
  * fix(bluetooth): add missing files
  * fix(bluetooth): include it if Appearance matches the value assigned for keyboard
  * fix(btrfs): do not require module via cmdline when --no-kernel
  * fix(btrfs): add missing cmdline function
  * fix(multipath): explicitly check if `hostonly_cmdline` is `yes`
  * fix(systemd-timedated): correct typo in override path
  * fix(systemd-resolved): correct typo in override path
  * fix(systemd-networkd): correct typos in override paths
  * fix(dracut-init.sh): correct check in `is_qemu_virtualized` function
  * fix(Makefile): execute command -v instead of which
  * fix(network-legacy): typo
  * fix(network,dbus): improve dependency checking
  * fix(systemd-pcrphase): only include systemd-pcrphase-initrd.service
  * fix(systemd-tmpfiles): do not include systemd-tmpfiles-clean.timer
  * fix(systemd-journald): do not include systemd-journal-flush.service
  * fix(systemd): do not include systemd-random-seed.service
  * fix(kernel-modules): add interconnect drivers
  * fix(dracut-lib.sh): remove successful finished initqueue scripts
  * fix(udev-rules): remove firmware.rules
  * fix(dracut.sh): silence the output of hardlinking files by default
  * fix(virtiofs): add virtio_pci kernel module to virtiofs
  * fix(dracut-systemd): rootfs-generator cannot write outside of generator dir
  * fix(dracut-systemd): check and create generator dir outside of inner function
  * fix(dracut-systemd): do not hardcode the systemd generator directory
  * fix(dracut-functions): avoid calling grep with PCRE (-P)
  * fix(dracut-initramfs-restore.sh): handle /etc/machine-id empty or uninitialized
  * fix(lsinitrd.sh): handle /etc/machine-id empty or uninitialized
  * fix(dracut.sh): handle /etc/machine-id empty or uninitialized
  * fix(systemd-networkd): add missing conf files and services
  * fix(dracut-functions.sh): convert mmcblk to the real kernel module name
  * fix(multipath): remove dependency on multipathd.socket
  * fix(99base): adjust to allow mksh as initrd shell
  * fix(base): do not quote $CLINE in the `set` command
  * fix(systemd-ac-power): correct systemd-ac-power binary path
  * fix(dracut.sh): use dynamically uefi's sections offset
  * fix(lvmthinpool-monitor): activate lvm thin pool before extend its size
  * fix(dmsquash-live): restore compatibility with earlier releases
  * fix(dracut.sh): kmoddir does not handle trailing /
  * fix(udev-rules): remove old eudev specific rule
  * fix(udev-rules): remove old redhat specific rule
  * fix(udev-rules): remove old edd_id extra rules
  * fix(udev-rules): remove old debian specific rules
  * fix(kernel-modules): add UFS drivers
  * fix(kernel-modules): use modalias info in get_dev_module()
  * fix(crypt): add missing libraries
  * revert(network-manager): avoid restarting NetworkManager
  * fix(dracut.sh): handle sbsign errors for UEFI builds
  * fix(dracut.sh): handle out of space error for UEFI builds
  * fix(plymouth): remove /etc/system-release dependency
  * fix(network-manager): add "After" dependency on dbus.service
  * fix(fido2): libfido2.so depends on libz.so
  * fix: make iso-scan trigger udev events
  * fix(install): do not undef _FILE_OFFSET_BITS
  * fix(dracut.sh): --sysroot option broken if global variables not set in conf
  * fix(lsinitrd.sh): handle filenames with special characters
  * fix(dracut-systemd): remove unused argument
  * fix(dracut-init.sh): correct typo in comment
  * fix(dracut.sh): correct --help and --version exit codes
  * fix(crypt-gpg): do not use always --card-status
  * fix(dmsquash-live): live:/dev/*
  * fix(load_fstype): avoid false positive searchs
  * fix: shellcheck 0.8.0
  Other:
  * refactor(install): log about missing firmware only once
  * refactor(dracut-init.sh): remove redundant "dracut" from "dracut module" prints
  * refactor(virtiofs): remove exit after die
  * build: remove rpm spec file and build rules
  * docs: remove rd.lvm.snapsize and rd.lvm.snapshot
  * chore(gentoo.conf): remove examples to avoid confusion
  * chore: remove git2spec.pl, it is no longer used
  * chore(suse): update url in spec
  Bugs between 056 and 059 not referenced yet:
  * fix(fips): add libkcapi fipscheck also with the libexec location (bsc#1207892)
  * revert(multipath): install multipathd.socket (bsc#1207524)
  * fix(dracut-initramfs-restore.sh): hide unpack errors (bsc#1199341)
  * fix(suse-initrd): always check that MACHINE_ID is not empty (bsc#1201780)
  * fix(i18n): add required includes for keymaps (bsc#1200950)
  * fix(integrity): do not enable EVM if there is no key (bsc#1200718)
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(lvm): add missing grep requirement (bsc#1198271)
  * fix(dracut-initramfs-restore.sh): unpack uncompressed initrd as last option (bsc#1197195)
  For more details on the changes included with 056, 057, 058 and 059 see:
  * https://github.com/dracutdevs/dracut/releases/tag/059
  * https://github.com/dracutdevs/dracut/releases/tag/058
  * https://github.com/dracutdevs/dracut/releases/tag/057
  * https://github.com/dracutdevs/dracut/releases/tag/056</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692792001">- Update to version 059+suse.495.g55462f85:
  * chore(suse): fix invalid license</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1694174400">- Update to version 059+suse.497.g6a2c5f83:
  * chore(suse): fix systemd-sysvinit dependency (bsc#1215132)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1697716800">- Update to version 059+suse.499.g2976c52f:
  * fix(dracut.spec): do not require libgcrypt20-hmac for dracut-fips (bsc#1216059)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1698062400">- Update to version 059+suse.502.g92237883:
  * fix(systemd): add new systemd-tmpfiles-setup-dev-early.service
  * revert(suse): fix systemd-sysvinit dependency</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 059+suse.506.gd33b6bef:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1710849600">- Update to version 059+suse.515.g83296e6f:
  * fix(dracut): correct regression with multiple `rd.break=` options (bsc#1221675)
  * fix(dracut-util): do not call `strcmp` if the `value` argument is NULL (bsc#1219841)
  * fix(i18n): handle symlinked keymap (bsc#1221193)
  * fix(zfcp_rules): correct shellcheck regression when parsing ccw args (bsc#1220485)
  * fix(dracut.sh): skip README for AMD microcode generation (bsc#1217083)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1714478400">- Update to version 059+suse.519.g3edf43b4:
  * chore(suse): remove obsolete fillup template (bsc#1223467)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1714737600">- Update to version 059+suse.521.g8412a1c0:
  * fix(suse-initrd): clean return of installkernel() (bsc#1223467)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1720440000">- Update to version 059+suse.527.g7870f083:
  * feat(crypt): force the inclusion of crypttab entries with x-initrd.attach (bsc#1226529)
  * fix(mdraid): try to assemble the missing raid device (bsc#1226412)
  * fix(dracut-install): continue parsing if ldd prints "cannot be preloaded" (bsc#1208690)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1724414400">- Update to version 059+suse.531.g48487c31:
  * feat(systemd*): include systemd config files from /usr/lib/systemd (bsc#1228398)
  * fix(convertfs): error in conditional expressions (bsc#1228847)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1726833600">- Update to version 059+suse.539.gdd3495f7:
  * fix(dracut.spec): add Builddeps for initrd posttrans macros (bsc#1230639)
  * fix(zfcp_rules): check for presence of legacy rules (bsc#1230330)
  Fixes for NVMeoF boot (bsc#1230468):
  * fix(nvmf): install (only) required nvmf modules
  * fix(nvmf): require NVMeoF modules
  * fix(nvmf): move /etc/nvme/host{nqn,id} requirement to hostonly</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1727438400">- Update to version 059+suse.541.g3c2df232:
  * fix(dasd-rules): handle all possible options in `rd.dasd` (bsc#1230110)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1730721600">- Update to version 059+suse.543.g98d7f037:
  * fix(dm): remove 59-persistent-storage-dm.rules (bsc#1232063)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1738670400">- Update to version 059+suse.552.g232957b4:
  Fixes related to getting live image size (bsc#1235912):
  * fix(livenet): split `imgsize` calculation to avoid misleading error message
  * fix(livenet): check also `content-length` from live image header
  * fix(livenet): propagate error code
  Fixes for booting from iSCSI offload with bnx2i (bsc#1228086):
  * fix(iscsi): attempt iSCSI login before all interfaces are up
  * fix(iscsi): don't require network setup for bnx2i
  Other:
  * fix(dracut): rework timeout for devices added via --mount and --add-device (bsc#1231792)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1741348800">- Update to version 059+suse.557.gccd6ab94:
  * fix(iscsi): make sure services are shut down when switching root (bsc#1237695)
  * fix(iscsi): don't require network setup for qedi
  * fix(network-legacy): do not require pgrep when using wicked (bsc#1236982)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1743681600">- Update to version 059+suse.562.g5ab4efaa:
  * fix(crypt): always install s390 crypto modules (jsc#IBM-1444)
  * fix(crypt): install dm_crypt module in non-hostonly mode as well
  * fix(nfs): set correct ownership of rpc.statd state directories (bsc#1217885)
  * perf(nfs): remove references to old rpcbind state dir
  * fix(nfs): libnfsidmap plugins not added in some distributions</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1751976000">- Update to version 059+suse.564.g984c275a:
  * fix(rngd): adjust license to match the license of the whole project
  * fix(dracut): kernel module name normalization in drivers lists (bsc#1241680)</changelog>
</package>
<package pkgid="6c98378e894915c0183d09a480d0ee7f97a836d6e2e6ac317141a5e31b4c6c1f" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="059+suse.565.g51c2c969" rel="150700.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692792000">- Update to version 059+suse.494.g2ed56105:
  Update to current upstream version (059+backports) (jsc#PED-4884)
  Upstream backports not included in 059:
  Features:
  * feat(network-wicked): remove module
  * feat(systemd-rfkill): remove module
  * feat(livenet): add memory size check depending on live image size
  * feat(nvmf): add code for parsing the NBFT
  * chore(shfmt): update to pass with shfmt v3.5.1
  * feat(dracut-init.sh): do not print by default if an udev rule is skipped
  * feat(lsinitrd): notify user on missing compressor
  * feat(dracut): use log level indicator in console output
  * feat(kernel-modules): driver support for macbook keyboards
  * feat(dracut-init.sh): specify if a module cannot be found or cannot be installed
  Fixes:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)
  * fix(systemd-udevd): add missing override paths
  * fix(systemd-journald): add systemd-sysusers dependency
  * fix(base): correct handling of quiet in loginit
  * fix(integrity): do not require ls
  * fix(dracut-init.sh): `module_check` method ignores `forced` option
  * fix(man): add missing initrd-root-device.target to flow chart
  * fix(dracut-init.sh): use the local _ret variable
  * chore(suse): require gawk instead of awk
  * fix(dracut.sh): use gawk for strtonum
  * fix(man): remove duplicate entry
  * fix(systemd-sysext): handle confexts and correct extensions search path
  * fix(modsign): load keys to correct keyring
  * fix(dmsquash-live-autooverlay): specify filesystemtype when it is already known
  * fix(fs-lib): remove quoting form the first argument of the e2fsck call
  * fix(Makefile): remove leftover rpm build rules
  * fix(Makefile): no longer upload to kernel.org
  * fix(nvmf): support /etc/nvme/config.json
  * fix(install.d): respect even more kernel-install vars, plus style fixes
  * fix(install.d): respect more kernel-install env variables
  * fix(dracut.sh): also prevent fsfreeze for tmpfs
  * fix(dmsquash-live): allow other fstypes
  * fix(bluetooth): make bluetooth rules more strict
  * fix(bluetooth): add missing files
  * fix(bluetooth): include it if Appearance matches the value assigned for keyboard
  * fix(btrfs): do not require module via cmdline when --no-kernel
  * fix(btrfs): add missing cmdline function
  * fix(multipath): explicitly check if `hostonly_cmdline` is `yes`
  * fix(systemd-timedated): correct typo in override path
  * fix(systemd-resolved): correct typo in override path
  * fix(systemd-networkd): correct typos in override paths
  * fix(dracut-init.sh): correct check in `is_qemu_virtualized` function
  * fix(Makefile): execute command -v instead of which
  * fix(network-legacy): typo
  * fix(network,dbus): improve dependency checking
  * fix(systemd-pcrphase): only include systemd-pcrphase-initrd.service
  * fix(systemd-tmpfiles): do not include systemd-tmpfiles-clean.timer
  * fix(systemd-journald): do not include systemd-journal-flush.service
  * fix(systemd): do not include systemd-random-seed.service
  * fix(kernel-modules): add interconnect drivers
  * fix(dracut-lib.sh): remove successful finished initqueue scripts
  * fix(udev-rules): remove firmware.rules
  * fix(dracut.sh): silence the output of hardlinking files by default
  * fix(virtiofs): add virtio_pci kernel module to virtiofs
  * fix(dracut-systemd): rootfs-generator cannot write outside of generator dir
  * fix(dracut-systemd): check and create generator dir outside of inner function
  * fix(dracut-systemd): do not hardcode the systemd generator directory
  * fix(dracut-functions): avoid calling grep with PCRE (-P)
  * fix(dracut-initramfs-restore.sh): handle /etc/machine-id empty or uninitialized
  * fix(lsinitrd.sh): handle /etc/machine-id empty or uninitialized
  * fix(dracut.sh): handle /etc/machine-id empty or uninitialized
  * fix(systemd-networkd): add missing conf files and services
  * fix(dracut-functions.sh): convert mmcblk to the real kernel module name
  * fix(multipath): remove dependency on multipathd.socket
  * fix(99base): adjust to allow mksh as initrd shell
  * fix(base): do not quote $CLINE in the `set` command
  * fix(systemd-ac-power): correct systemd-ac-power binary path
  * fix(dracut.sh): use dynamically uefi's sections offset
  * fix(lvmthinpool-monitor): activate lvm thin pool before extend its size
  * fix(dmsquash-live): restore compatibility with earlier releases
  * fix(dracut.sh): kmoddir does not handle trailing /
  * fix(udev-rules): remove old eudev specific rule
  * fix(udev-rules): remove old redhat specific rule
  * fix(udev-rules): remove old edd_id extra rules
  * fix(udev-rules): remove old debian specific rules
  * fix(kernel-modules): add UFS drivers
  * fix(kernel-modules): use modalias info in get_dev_module()
  * fix(crypt): add missing libraries
  * revert(network-manager): avoid restarting NetworkManager
  * fix(dracut.sh): handle sbsign errors for UEFI builds
  * fix(dracut.sh): handle out of space error for UEFI builds
  * fix(plymouth): remove /etc/system-release dependency
  * fix(network-manager): add "After" dependency on dbus.service
  * fix(fido2): libfido2.so depends on libz.so
  * fix: make iso-scan trigger udev events
  * fix(install): do not undef _FILE_OFFSET_BITS
  * fix(dracut.sh): --sysroot option broken if global variables not set in conf
  * fix(lsinitrd.sh): handle filenames with special characters
  * fix(dracut-systemd): remove unused argument
  * fix(dracut-init.sh): correct typo in comment
  * fix(dracut.sh): correct --help and --version exit codes
  * fix(crypt-gpg): do not use always --card-status
  * fix(dmsquash-live): live:/dev/*
  * fix(load_fstype): avoid false positive searchs
  * fix: shellcheck 0.8.0
  Other:
  * refactor(install): log about missing firmware only once
  * refactor(dracut-init.sh): remove redundant "dracut" from "dracut module" prints
  * refactor(virtiofs): remove exit after die
  * build: remove rpm spec file and build rules
  * docs: remove rd.lvm.snapsize and rd.lvm.snapshot
  * chore(gentoo.conf): remove examples to avoid confusion
  * chore: remove git2spec.pl, it is no longer used
  * chore(suse): update url in spec
  Bugs between 056 and 059 not referenced yet:
  * fix(fips): add libkcapi fipscheck also with the libexec location (bsc#1207892)
  * revert(multipath): install multipathd.socket (bsc#1207524)
  * fix(dracut-initramfs-restore.sh): hide unpack errors (bsc#1199341)
  * fix(suse-initrd): always check that MACHINE_ID is not empty (bsc#1201780)
  * fix(i18n): add required includes for keymaps (bsc#1200950)
  * fix(integrity): do not enable EVM if there is no key (bsc#1200718)
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(lvm): add missing grep requirement (bsc#1198271)
  * fix(dracut-initramfs-restore.sh): unpack uncompressed initrd as last option (bsc#1197195)
  For more details on the changes included with 056, 057, 058 and 059 see:
  * https://github.com/dracutdevs/dracut/releases/tag/059
  * https://github.com/dracutdevs/dracut/releases/tag/058
  * https://github.com/dracutdevs/dracut/releases/tag/057
  * https://github.com/dracutdevs/dracut/releases/tag/056</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692792001">- Update to version 059+suse.495.g55462f85:
  * chore(suse): fix invalid license</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1694174400">- Update to version 059+suse.497.g6a2c5f83:
  * chore(suse): fix systemd-sysvinit dependency (bsc#1215132)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1697716800">- Update to version 059+suse.499.g2976c52f:
  * fix(dracut.spec): do not require libgcrypt20-hmac for dracut-fips (bsc#1216059)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1698062400">- Update to version 059+suse.502.g92237883:
  * fix(systemd): add new systemd-tmpfiles-setup-dev-early.service
  * revert(suse): fix systemd-sysvinit dependency</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 059+suse.506.gd33b6bef:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1710849600">- Update to version 059+suse.515.g83296e6f:
  * fix(dracut): correct regression with multiple `rd.break=` options (bsc#1221675)
  * fix(dracut-util): do not call `strcmp` if the `value` argument is NULL (bsc#1219841)
  * fix(i18n): handle symlinked keymap (bsc#1221193)
  * fix(zfcp_rules): correct shellcheck regression when parsing ccw args (bsc#1220485)
  * fix(dracut.sh): skip README for AMD microcode generation (bsc#1217083)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1714478400">- Update to version 059+suse.519.g3edf43b4:
  * chore(suse): remove obsolete fillup template (bsc#1223467)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1714737600">- Update to version 059+suse.521.g8412a1c0:
  * fix(suse-initrd): clean return of installkernel() (bsc#1223467)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1720440000">- Update to version 059+suse.527.g7870f083:
  * feat(crypt): force the inclusion of crypttab entries with x-initrd.attach (bsc#1226529)
  * fix(mdraid): try to assemble the missing raid device (bsc#1226412)
  * fix(dracut-install): continue parsing if ldd prints "cannot be preloaded" (bsc#1208690)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1724414400">- Update to version 059+suse.531.g48487c31:
  * feat(systemd*): include systemd config files from /usr/lib/systemd (bsc#1228398)
  * fix(convertfs): error in conditional expressions (bsc#1228847)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1726833600">- Update to version 059+suse.539.gdd3495f7:
  * fix(dracut.spec): add Builddeps for initrd posttrans macros (bsc#1230639)
  * fix(zfcp_rules): check for presence of legacy rules (bsc#1230330)
  Fixes for NVMeoF boot (bsc#1230468):
  * fix(nvmf): install (only) required nvmf modules
  * fix(nvmf): require NVMeoF modules
  * fix(nvmf): move /etc/nvme/host{nqn,id} requirement to hostonly</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1727438400">- Update to version 059+suse.541.g3c2df232:
  * fix(dasd-rules): handle all possible options in `rd.dasd` (bsc#1230110)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1730721600">- Update to version 059+suse.543.g98d7f037:
  * fix(dm): remove 59-persistent-storage-dm.rules (bsc#1232063)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1738670400">- Update to version 059+suse.552.g232957b4:
  Fixes related to getting live image size (bsc#1235912):
  * fix(livenet): split `imgsize` calculation to avoid misleading error message
  * fix(livenet): check also `content-length` from live image header
  * fix(livenet): propagate error code
  Fixes for booting from iSCSI offload with bnx2i (bsc#1228086):
  * fix(iscsi): attempt iSCSI login before all interfaces are up
  * fix(iscsi): don't require network setup for bnx2i
  Other:
  * fix(dracut): rework timeout for devices added via --mount and --add-device (bsc#1231792)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1741348800">- Update to version 059+suse.557.gccd6ab94:
  * fix(iscsi): make sure services are shut down when switching root (bsc#1237695)
  * fix(iscsi): don't require network setup for qedi
  * fix(network-legacy): do not require pgrep when using wicked (bsc#1236982)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1743681600">- Update to version 059+suse.562.g5ab4efaa:
  * fix(crypt): always install s390 crypto modules (jsc#IBM-1444)
  * fix(crypt): install dm_crypt module in non-hostonly mode as well
  * fix(nfs): set correct ownership of rpc.statd state directories (bsc#1217885)
  * perf(nfs): remove references to old rpcbind state dir
  * fix(nfs): libnfsidmap plugins not added in some distributions</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1751976000">- Update to version 059+suse.564.g984c275a:
  * fix(rngd): adjust license to match the license of the whole project
  * fix(dracut): kernel module name normalization in drivers lists (bsc#1241680)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1755000000">- Update to version 059+suse.565.g51c2c969:
  * fix(dracut-util): crash if CMDLINE ends with quotation mark (bsc#1247819)</changelog>
</package>
<package pkgid="498f21ab794f9c6dd63b79b1dd1d1a37b8751c605adbede4025571240e8766ab" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="059+suse.566.gc1c35aa5" rel="150700.3.11.3"/>
  <changelog author="antonio.feijoo@suse.com" date="1692792000">- Update to version 059+suse.494.g2ed56105:
  Update to current upstream version (059+backports) (jsc#PED-4884)
  Upstream backports not included in 059:
  Features:
  * feat(network-wicked): remove module
  * feat(systemd-rfkill): remove module
  * feat(livenet): add memory size check depending on live image size
  * feat(nvmf): add code for parsing the NBFT
  * chore(shfmt): update to pass with shfmt v3.5.1
  * feat(dracut-init.sh): do not print by default if an udev rule is skipped
  * feat(lsinitrd): notify user on missing compressor
  * feat(dracut): use log level indicator in console output
  * feat(kernel-modules): driver support for macbook keyboards
  * feat(dracut-init.sh): specify if a module cannot be found or cannot be installed
  Fixes:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)
  * fix(systemd-udevd): add missing override paths
  * fix(systemd-journald): add systemd-sysusers dependency
  * fix(base): correct handling of quiet in loginit
  * fix(integrity): do not require ls
  * fix(dracut-init.sh): `module_check` method ignores `forced` option
  * fix(man): add missing initrd-root-device.target to flow chart
  * fix(dracut-init.sh): use the local _ret variable
  * chore(suse): require gawk instead of awk
  * fix(dracut.sh): use gawk for strtonum
  * fix(man): remove duplicate entry
  * fix(systemd-sysext): handle confexts and correct extensions search path
  * fix(modsign): load keys to correct keyring
  * fix(dmsquash-live-autooverlay): specify filesystemtype when it is already known
  * fix(fs-lib): remove quoting form the first argument of the e2fsck call
  * fix(Makefile): remove leftover rpm build rules
  * fix(Makefile): no longer upload to kernel.org
  * fix(nvmf): support /etc/nvme/config.json
  * fix(install.d): respect even more kernel-install vars, plus style fixes
  * fix(install.d): respect more kernel-install env variables
  * fix(dracut.sh): also prevent fsfreeze for tmpfs
  * fix(dmsquash-live): allow other fstypes
  * fix(bluetooth): make bluetooth rules more strict
  * fix(bluetooth): add missing files
  * fix(bluetooth): include it if Appearance matches the value assigned for keyboard
  * fix(btrfs): do not require module via cmdline when --no-kernel
  * fix(btrfs): add missing cmdline function
  * fix(multipath): explicitly check if `hostonly_cmdline` is `yes`
  * fix(systemd-timedated): correct typo in override path
  * fix(systemd-resolved): correct typo in override path
  * fix(systemd-networkd): correct typos in override paths
  * fix(dracut-init.sh): correct check in `is_qemu_virtualized` function
  * fix(Makefile): execute command -v instead of which
  * fix(network-legacy): typo
  * fix(network,dbus): improve dependency checking
  * fix(systemd-pcrphase): only include systemd-pcrphase-initrd.service
  * fix(systemd-tmpfiles): do not include systemd-tmpfiles-clean.timer
  * fix(systemd-journald): do not include systemd-journal-flush.service
  * fix(systemd): do not include systemd-random-seed.service
  * fix(kernel-modules): add interconnect drivers
  * fix(dracut-lib.sh): remove successful finished initqueue scripts
  * fix(udev-rules): remove firmware.rules
  * fix(dracut.sh): silence the output of hardlinking files by default
  * fix(virtiofs): add virtio_pci kernel module to virtiofs
  * fix(dracut-systemd): rootfs-generator cannot write outside of generator dir
  * fix(dracut-systemd): check and create generator dir outside of inner function
  * fix(dracut-systemd): do not hardcode the systemd generator directory
  * fix(dracut-functions): avoid calling grep with PCRE (-P)
  * fix(dracut-initramfs-restore.sh): handle /etc/machine-id empty or uninitialized
  * fix(lsinitrd.sh): handle /etc/machine-id empty or uninitialized
  * fix(dracut.sh): handle /etc/machine-id empty or uninitialized
  * fix(systemd-networkd): add missing conf files and services
  * fix(dracut-functions.sh): convert mmcblk to the real kernel module name
  * fix(multipath): remove dependency on multipathd.socket
  * fix(99base): adjust to allow mksh as initrd shell
  * fix(base): do not quote $CLINE in the `set` command
  * fix(systemd-ac-power): correct systemd-ac-power binary path
  * fix(dracut.sh): use dynamically uefi's sections offset
  * fix(lvmthinpool-monitor): activate lvm thin pool before extend its size
  * fix(dmsquash-live): restore compatibility with earlier releases
  * fix(dracut.sh): kmoddir does not handle trailing /
  * fix(udev-rules): remove old eudev specific rule
  * fix(udev-rules): remove old redhat specific rule
  * fix(udev-rules): remove old edd_id extra rules
  * fix(udev-rules): remove old debian specific rules
  * fix(kernel-modules): add UFS drivers
  * fix(kernel-modules): use modalias info in get_dev_module()
  * fix(crypt): add missing libraries
  * revert(network-manager): avoid restarting NetworkManager
  * fix(dracut.sh): handle sbsign errors for UEFI builds
  * fix(dracut.sh): handle out of space error for UEFI builds
  * fix(plymouth): remove /etc/system-release dependency
  * fix(network-manager): add "After" dependency on dbus.service
  * fix(fido2): libfido2.so depends on libz.so
  * fix: make iso-scan trigger udev events
  * fix(install): do not undef _FILE_OFFSET_BITS
  * fix(dracut.sh): --sysroot option broken if global variables not set in conf
  * fix(lsinitrd.sh): handle filenames with special characters
  * fix(dracut-systemd): remove unused argument
  * fix(dracut-init.sh): correct typo in comment
  * fix(dracut.sh): correct --help and --version exit codes
  * fix(crypt-gpg): do not use always --card-status
  * fix(dmsquash-live): live:/dev/*
  * fix(load_fstype): avoid false positive searchs
  * fix: shellcheck 0.8.0
  Other:
  * refactor(install): log about missing firmware only once
  * refactor(dracut-init.sh): remove redundant "dracut" from "dracut module" prints
  * refactor(virtiofs): remove exit after die
  * build: remove rpm spec file and build rules
  * docs: remove rd.lvm.snapsize and rd.lvm.snapshot
  * chore(gentoo.conf): remove examples to avoid confusion
  * chore: remove git2spec.pl, it is no longer used
  * chore(suse): update url in spec
  Bugs between 056 and 059 not referenced yet:
  * fix(fips): add libkcapi fipscheck also with the libexec location (bsc#1207892)
  * revert(multipath): install multipathd.socket (bsc#1207524)
  * fix(dracut-initramfs-restore.sh): hide unpack errors (bsc#1199341)
  * fix(suse-initrd): always check that MACHINE_ID is not empty (bsc#1201780)
  * fix(i18n): add required includes for keymaps (bsc#1200950)
  * fix(integrity): do not enable EVM if there is no key (bsc#1200718)
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(lvm): add missing grep requirement (bsc#1198271)
  * fix(dracut-initramfs-restore.sh): unpack uncompressed initrd as last option (bsc#1197195)
  For more details on the changes included with 056, 057, 058 and 059 see:
  * https://github.com/dracutdevs/dracut/releases/tag/059
  * https://github.com/dracutdevs/dracut/releases/tag/058
  * https://github.com/dracutdevs/dracut/releases/tag/057
  * https://github.com/dracutdevs/dracut/releases/tag/056</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692792001">- Update to version 059+suse.495.g55462f85:
  * chore(suse): fix invalid license</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1694174400">- Update to version 059+suse.497.g6a2c5f83:
  * chore(suse): fix systemd-sysvinit dependency (bsc#1215132)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1697716800">- Update to version 059+suse.499.g2976c52f:
  * fix(dracut.spec): do not require libgcrypt20-hmac for dracut-fips (bsc#1216059)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1698062400">- Update to version 059+suse.502.g92237883:
  * fix(systemd): add new systemd-tmpfiles-setup-dev-early.service
  * revert(suse): fix systemd-sysvinit dependency</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 059+suse.506.gd33b6bef:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1710849600">- Update to version 059+suse.515.g83296e6f:
  * fix(dracut): correct regression with multiple `rd.break=` options (bsc#1221675)
  * fix(dracut-util): do not call `strcmp` if the `value` argument is NULL (bsc#1219841)
  * fix(i18n): handle symlinked keymap (bsc#1221193)
  * fix(zfcp_rules): correct shellcheck regression when parsing ccw args (bsc#1220485)
  * fix(dracut.sh): skip README for AMD microcode generation (bsc#1217083)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1714478400">- Update to version 059+suse.519.g3edf43b4:
  * chore(suse): remove obsolete fillup template (bsc#1223467)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1714737600">- Update to version 059+suse.521.g8412a1c0:
  * fix(suse-initrd): clean return of installkernel() (bsc#1223467)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1720440000">- Update to version 059+suse.527.g7870f083:
  * feat(crypt): force the inclusion of crypttab entries with x-initrd.attach (bsc#1226529)
  * fix(mdraid): try to assemble the missing raid device (bsc#1226412)
  * fix(dracut-install): continue parsing if ldd prints "cannot be preloaded" (bsc#1208690)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1724414400">- Update to version 059+suse.531.g48487c31:
  * feat(systemd*): include systemd config files from /usr/lib/systemd (bsc#1228398)
  * fix(convertfs): error in conditional expressions (bsc#1228847)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1726833600">- Update to version 059+suse.539.gdd3495f7:
  * fix(dracut.spec): add Builddeps for initrd posttrans macros (bsc#1230639)
  * fix(zfcp_rules): check for presence of legacy rules (bsc#1230330)
  Fixes for NVMeoF boot (bsc#1230468):
  * fix(nvmf): install (only) required nvmf modules
  * fix(nvmf): require NVMeoF modules
  * fix(nvmf): move /etc/nvme/host{nqn,id} requirement to hostonly</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1727438400">- Update to version 059+suse.541.g3c2df232:
  * fix(dasd-rules): handle all possible options in `rd.dasd` (bsc#1230110)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1730721600">- Update to version 059+suse.543.g98d7f037:
  * fix(dm): remove 59-persistent-storage-dm.rules (bsc#1232063)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1738670400">- Update to version 059+suse.552.g232957b4:
  Fixes related to getting live image size (bsc#1235912):
  * fix(livenet): split `imgsize` calculation to avoid misleading error message
  * fix(livenet): check also `content-length` from live image header
  * fix(livenet): propagate error code
  Fixes for booting from iSCSI offload with bnx2i (bsc#1228086):
  * fix(iscsi): attempt iSCSI login before all interfaces are up
  * fix(iscsi): don't require network setup for bnx2i
  Other:
  * fix(dracut): rework timeout for devices added via --mount and --add-device (bsc#1231792)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1741348800">- Update to version 059+suse.557.gccd6ab94:
  * fix(iscsi): make sure services are shut down when switching root (bsc#1237695)
  * fix(iscsi): don't require network setup for qedi
  * fix(network-legacy): do not require pgrep when using wicked (bsc#1236982)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1743681600">- Update to version 059+suse.562.g5ab4efaa:
  * fix(crypt): always install s390 crypto modules (jsc#IBM-1444)
  * fix(crypt): install dm_crypt module in non-hostonly mode as well
  * fix(nfs): set correct ownership of rpc.statd state directories (bsc#1217885)
  * perf(nfs): remove references to old rpcbind state dir
  * fix(nfs): libnfsidmap plugins not added in some distributions</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1751976000">- Update to version 059+suse.564.g984c275a:
  * fix(rngd): adjust license to match the license of the whole project
  * fix(dracut): kernel module name normalization in drivers lists (bsc#1241680)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1755000000">- Update to version 059+suse.565.g51c2c969:
  * fix(dracut-util): crash if CMDLINE ends with quotation mark (bsc#1247819)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1762257600">- Update to version 059+suse.566.gc1c35aa5:
  * fix(kernel-modules-extra): remove stray \ before / (bsc#1253029)</changelog>
</package>
<package pkgid="79c16277a8409aea2ba6b0cdaeba6eb60487ab8640d65b6e4ef59b4a690ce9c4" name="efont-unicode-bitmap-fonts" arch="noarch">
  <version epoch="0" ver="0.4.2" rel="150000.3.3.1"/>
  <changelog author="mfabian@suse.de" date="1154692800">- move fonts to /usr/share/fonts/misc in STABLE (paths changed
  because of the move to Xorg X11R7).</changelog>
  <changelog author="mfabian@suse.de" date="1164110400">- Bugzilla #199997: Add the special glyphs needed by YaST2
  to the halfwidth fonts.</changelog>
  <changelog author="tiwai@suse.de" date="1270728000">- removed unnecessary buildrequires for too old distros</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant/obsolete tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="tiwai@suse.de" date="1327060800">- Renamed efont-unicode -&gt; efont-unicode-bitmap-fonts according to
  openSUSE packaging guidelines and FATE#313035</changelog>
  <changelog author="pgajdos@suse.com" date="1333454400">- SUSE-Public-Domain and BSD-3-Clause license</changelog>
  <changelog author="pgajdos@suse.com" date="1337256000">- call spec-cleaner</changelog>
  <changelog author="pgajdos@suse.cz" date="1341403200">- amend spec file to reflect new font packaging scheme
  (see openFATE#313536);</changelog>
  <changelog author="bwiedemann@suse.com" date="1497787200">- Add reproducible.patch to call gzip -n to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1760702400">- use %license tag [bsc#1252144]</changelog>
</package>
<package pkgid="18967f913a428073db8cdce1558b0516d7b75ccd126ac6be55714a7a0940077b" name="efont-unicode-bitmap-fonts" arch="src">
  <version epoch="0" ver="0.4.2" rel="150000.3.3.1"/>
  <changelog author="arvin@suse.de" date="1068120000">- added freetype2 to neededforbuild</changelog>
  <changelog author="hmacht@suse.de" date="1075982400">- added option # norootforbuild in specfile</changelog>
  <changelog author="mfabian@suse.de" date="1076760000">- run SuSEconfig.fonts and SuSEconfig.pango in %post and %postun</changelog>
  <changelog author="mfabian@suse.de" date="1079611200">- use %suseconfig_fonts_prereq</changelog>
  <changelog author="mfabian@suse.de" date="1095163200">- Bugzilla #44705: set _MULE_BASELINE_OFFSET to -3 for all
  efont-unicode fonts to make them harmonize better with the
  ETL-fonts from the GNU intlfonts-1.2.1 package.</changelog>
  <changelog author="mfabian@suse.de" date="1095249600">- Bugzilla #45341: run SuSEconfig.fonts only if it exists.
- update to 0.4.2 (which includes my patch for Bugzilla #44705
  and Bugzilla #24755).</changelog>
  <changelog author="mfabian@suse.de" date="1102075200">- use new macro "%run_suseconfig_fonts".</changelog>
  <changelog author="schwab@suse.de" date="1105358400">- Set _MULE_BASELINE_OFFSET only in 24 pxl font.</changelog>
  <changelog author="mfabian@suse.de" date="1129636800">- Bugzilla #65106: convert README* to UTF-8.</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="mfabian@suse.de" date="1154692800">- move fonts to /usr/share/fonts/misc in STABLE (paths changed
  because of the move to Xorg X11R7).</changelog>
  <changelog author="mfabian@suse.de" date="1164110400">- Bugzilla #199997: Add the special glyphs needed by YaST2
  to the halfwidth fonts.</changelog>
  <changelog author="tiwai@suse.de" date="1270728000">- removed unnecessary buildrequires for too old distros</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant/obsolete tags/sections from specfile
  (cf. packaging guidelines)
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="tiwai@suse.de" date="1327060800">- Renamed efont-unicode -&gt; efont-unicode-bitmap-fonts according to
  openSUSE packaging guidelines and FATE#313035</changelog>
  <changelog author="pgajdos@suse.com" date="1333454400">- SUSE-Public-Domain and BSD-3-Clause license</changelog>
  <changelog author="pgajdos@suse.com" date="1337256000">- call spec-cleaner</changelog>
  <changelog author="pgajdos@suse.cz" date="1341403200">- amend spec file to reflect new font packaging scheme
  (see openFATE#313536);</changelog>
  <changelog author="bwiedemann@suse.com" date="1497787200">- Add reproducible.patch to call gzip -n to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1760702400">- use %license tag [bsc#1252144]</changelog>
</package>
<package pkgid="9caeaf7c75777e2eea91fb8a979ba09ba90393aa73addb6ab43caadc913c8499" name="elfutils" arch="src">
  <version epoch="0" ver="0.185" rel="150400.5.8.3"/>
  <changelog author="jengelh@inai.de" date="1579780800">- Avoid double-shipping libdebuginfo.so.1 in two different
  subpackages. Fixup RPM group.</changelog>
  <changelog author="mliska@suse.cz" date="1580817600">- Exclude debuginfod sub-packages and move them to elfutils-debuginfod.</changelog>
  <changelog author="dimstar@opensuse.org" date="1581336000">- Re-add libelf1 to baselibs.conf: we still generate a
  libelf-devel-32bit, which is only installable if libelf1-21bit
  also exists.</changelog>
  <changelog author="mliska@suse.cz" date="1585569600">- Update to version 0.179:
  debuginfod-client: When DEBUGINFOD_PROGRESS is set and the program doesn't
    install its own debuginfod_progressfn_t show download
    progress on stderr.
    DEBUGINFOD_TIMEOUT is now defined as seconds to get at
    least 100K, defaults to 90 seconds.
    Default to $XDG_CACHE_HOME/debuginfod_client.
    New functions debuginfod_set_user_data,
    debuginfod_get_user_data, debuginfod_get_url and
    debuginfod_add_http_header.
    Support for file:// URLs.
  debuginfod: Uses libarchive directly for reading rpm archives.
    Support for indexing .deb/.ddeb archives through dpkg-deb
    or bsdtar.
    Generic archive support through -Z EXT[=CMD]. Which can be
    used for example for arch-linux pacman files by using
  - Z '.tar.zst=zstdcat'.
    Better logging using User-Agent and X-Forwarded-For headers.
    More prometheus metrics.
    Support for eliding dots or extraneous slashes in path names.
  debuginfod-find: Accept /path/names in place of buildid hex.
  libelf: Handle PN_XNUM in elf_getphdrnum before shdr 0 is cached
    Ensure zlib resource cleanup on failure.
  libdwfl: dwfl_linux_kernel_find_elf and dwfl_linux_kernel_report_offline
    now find and handle a compressed vmlinuz image.
  readelf, elflint: Handle PT_GNU_PROPERTY.
  translations: Updated Ukrainian translation.</changelog>
  <changelog author="mliska@suse.cz" date="1591876800">- Update to version 0.180:
  elflint: Allow SHF_EXCLUDE as generic section flag when --gnu is given.
  libdw, readelf: Handle GCC LTO .gnu.debuglto_ prefix.
  libdw: Use correct CU to resolve file names in dwarf_decl_file.
  libdwfl: Handle debugaltlink in dwfl_standard_find_debuginfo.
  size: Also obey radix printing for bsd format.
  nm: Explicitly print weak 'V' or 'T' and common 'C' symbols.
- Add 0001-tests-Add-GCOV-flags-when-necessary.patch in order to fix
  an unresolved symbol.
- Enable LTO: boo#1138796 by adding -flto-partition=none and -Wno-error=stack-usage.</changelog>
  <changelog author="mliska@suse.cz" date="1592222400">- Remove cfi-fix.patch - should not be needed now.
- Remove remove-run-large-elf-file.sh.patch as it now checks for memory
  size.
- Use autosetup.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1599566400">- Update to version 0.181:
  libelf: elf_update now compensates (fixes up) a bad sh_addralign for
    SHF_COMPRESSED sections.
  libdebuginfod: configure now takes --enable-libdebuginfod=dummy or
  - -disable-libdebuginfod for bootstrapping.
    DEBUGINFOD_URLS now accepts "scheme-free" urls
    (guessing at what the user meant, either http:// or file://)
  readelf, elflint: Handle aarch64 bti, pac bits in dynamic table and gnu
    property notes.
  libdw, readelf: Recognize DW_CFA_AARCH64_negate_ra_state. Allows unwinding
    on arm64 for code that is compiled for PAC (Pointer
    Authentication Code) as long as it isn't enabled
- Drop upstream patch:
  * 0001-tests-Add-GCOV-flags-when-necessary.patch</changelog>
  <changelog author="mliska@suse.cz" date="1600776000">- Creatu dummy subpackages that can be used for build of packages
  that are in bootstrap cycle.
- Add Provides for real packages.</changelog>
  <changelog author="mliska@suse.cz" date="1604577600">- Add rpmlintrc for
  libdebuginfod1-dummy.s390x: E: shlib-policy-name-error (Badness: 10000) libdebuginfod1
  which is expected as libdebuginfod1 and it's dummy library do share equal
  soname.
- Update to version 0.182:
  backends: Support for tilegx has been removed.
  config: New /etc/profile.d files to provide default $DEBUGINFOD_URLS.
  debuginfod: More efficient package traversal, tolerate various errors
    during scanning, grooming progress is more visible and
    interruptible, more prometheus metrics.
  debuginfod-client: Now supports compressed (kernel) ELF images.
  libdwfl: Add ZSTD compression support.</changelog>
  <changelog author="mliska@suse.cz" date="1606737600">- Mention elfutils-rpmlintrc as a Source.</changelog>
  <changelog author="mliska@suse.cz" date="1611144000">- Enable LTO (boo#1138796) for elfutils.spec.</changelog>
  <changelog author="mliska@suse.cz" date="1612785600">- Update to version 0.183:
  debuginfod: New thread-busy metric and more detailed error metrics.
    New --fdcache-mintmp and tracking of filesystem freespace.
    New increased webapi concurrency while grooming.
  debuginfod-client: DEBUGINFOD_SONAME macro added to debuginfod.h which
    can be used to dlopen the libdebuginfod.so library.
    New function debuginfod_set_verbose_fd and
    DEBUGINFOD_VERBOSE environment variable.
  config: profile.sh and profile.csh won't export DEBUGINFOD_URLS unless
    configured --enable-debuginfod-urls[=URLS]
  elflint, readelf: Recognize SHF_GNU_RETAIN.
    Handle SHT_X86_64_UNWIND as valid relocation target.
- Remove config-do-not-define-DEBUGINFOD_URLS-environment-var.patch patch.</changelog>
  <changelog author="mliska@suse.cz" date="1615982400">- Add disable-run-readelf-self-test.patch in order to disable
  a failing test-case with GCC 11 (PR27367).</changelog>
  <changelog author="mliska@suse.cz" date="1620648000">- Update to version 0.184:
  debuginfod: Use libarchive's bsdtar as the .deb-family file unpacker.
  debuginfod-client: Client caches negative results. If a query for a
    file failed with 404, an empty 000 permission
    file is created in the cache. This will prevent
    requesting the same file for the next 10 minutes.
    Client objects now carry long-lived curl handles
    for outgoing connections.  This makes it more
    efficient for multiple sequential queries, because
    the TCP connections and/or TLS state info are kept
    around awhile, avoiding O(100ms) setup latencies.
  libdw: handle DW_FORM_indirect when reading attributes
  translations: Update Polish translation.</changelog>
  <changelog author="mliska@suse.cz" date="1621857600">- Update to version 0.185:
  debuginfod-client: Simplify curl handle reuse so downloads which
    return an error are retried.
  elfcompress: Always exit with code 0 when the operation succeeds (even
    when nothing was done). On error the exit code is now always 1.</changelog>
  <changelog author="jcheung@suse.com" date="1626004800">- For version 0.185, the below patches are no longer needed
  (jsc#SLE-17288, jsc#SLE-17951)
  libdw-check-end-of-attributes-list-consistently.patch
  elflint-dont-check-section-group-without-flags-word.patch
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
  elfutils-dont-trust-sh_entsize.patch
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
  size-handle-recursive-elf-ar-files.patch
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
  use-the-empty-string-for-note-names-with-zero-size.patch
  readelf-fix-off-by-one-sanity-check.patch
  libebl-check-NT_PLATFORM-core-notes.patch
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
  libelf-check-compression-before-allocate-output-buffer.patch
  libdwfl-sanity-check-partial-core-file-data-reads.patch
  arlib-check-that-sh_entsize-isnt-zero.patch</changelog>
  <changelog author="martin.liska@suse.com" date="1628251200">- Add disable-run-deleted-test.patch in order to disable
  failing test-case (boo#1189153).</changelog>
  <changelog author="martin.liska@suse.com" date="1633953600">- Enhance license fields: all the libraries actually have a different
  license to the tools. While the tools are GPL-3.0-or-later, the
  libraries are (LGPL-3.0-or-later OR GPL-2.0-or-later)
  SLE bug (for tracking the above) bsc#1191310</changelog>
  <changelog author="tonyj@suse.com" date="1645790400">- Add support for zstd, needed to inspect kernel modules (bsc#1196510)</changelog>
  <changelog author="matz@suse.com" date="1761134400">- Add elfutils-fix-large-alignment.diff and elfutils-pr28190.diff
  to fix build/testsuite for more recent glibc and kernels.
- Add elfutils-fuzz-1.diff, elfutils-fuzz-2.diff,
  elfutils-fuzz-3.diff, elfutils-fuzz-4.diff [bsc#1237236,
  bsc#1237240, bsc#1237241, bsc#1237242].
- Add elfutils-fix-debuginfod-groom-race.diff to fix a testsuite
  race in run-debuginfod-find.sh.</changelog>
</package>
<package pkgid="3adfb77ba652370c6ddc367d825ec378f74a87e3e06a6061ebbf4dd6f597ecda" name="elfutils" arch="x86_64">
  <version epoch="0" ver="0.185" rel="150400.5.8.3"/>
  <changelog author="jengelh@inai.de" date="1579780800">- Avoid double-shipping libdebuginfo.so.1 in two different
  subpackages. Fixup RPM group.</changelog>
  <changelog author="mliska@suse.cz" date="1580817600">- Exclude debuginfod sub-packages and move them to elfutils-debuginfod.</changelog>
  <changelog author="dimstar@opensuse.org" date="1581336000">- Re-add libelf1 to baselibs.conf: we still generate a
  libelf-devel-32bit, which is only installable if libelf1-21bit
  also exists.</changelog>
  <changelog author="mliska@suse.cz" date="1585569600">- Update to version 0.179:
  debuginfod-client: When DEBUGINFOD_PROGRESS is set and the program doesn't
    install its own debuginfod_progressfn_t show download
    progress on stderr.
    DEBUGINFOD_TIMEOUT is now defined as seconds to get at
    least 100K, defaults to 90 seconds.
    Default to $XDG_CACHE_HOME/debuginfod_client.
    New functions debuginfod_set_user_data,
    debuginfod_get_user_data, debuginfod_get_url and
    debuginfod_add_http_header.
    Support for file:// URLs.
  debuginfod: Uses libarchive directly for reading rpm archives.
    Support for indexing .deb/.ddeb archives through dpkg-deb
    or bsdtar.
    Generic archive support through -Z EXT[=CMD]. Which can be
    used for example for arch-linux pacman files by using
  - Z '.tar.zst=zstdcat'.
    Better logging using User-Agent and X-Forwarded-For headers.
    More prometheus metrics.
    Support for eliding dots or extraneous slashes in path names.
  debuginfod-find: Accept /path/names in place of buildid hex.
  libelf: Handle PN_XNUM in elf_getphdrnum before shdr 0 is cached
    Ensure zlib resource cleanup on failure.
  libdwfl: dwfl_linux_kernel_find_elf and dwfl_linux_kernel_report_offline
    now find and handle a compressed vmlinuz image.
  readelf, elflint: Handle PT_GNU_PROPERTY.
  translations: Updated Ukrainian translation.</changelog>
  <changelog author="mliska@suse.cz" date="1591876800">- Update to version 0.180:
  elflint: Allow SHF_EXCLUDE as generic section flag when --gnu is given.
  libdw, readelf: Handle GCC LTO .gnu.debuglto_ prefix.
  libdw: Use correct CU to resolve file names in dwarf_decl_file.
  libdwfl: Handle debugaltlink in dwfl_standard_find_debuginfo.
  size: Also obey radix printing for bsd format.
  nm: Explicitly print weak 'V' or 'T' and common 'C' symbols.
- Add 0001-tests-Add-GCOV-flags-when-necessary.patch in order to fix
  an unresolved symbol.
- Enable LTO: boo#1138796 by adding -flto-partition=none and -Wno-error=stack-usage.</changelog>
  <changelog author="mliska@suse.cz" date="1592222400">- Remove cfi-fix.patch - should not be needed now.
- Remove remove-run-large-elf-file.sh.patch as it now checks for memory
  size.
- Use autosetup.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1599566400">- Update to version 0.181:
  libelf: elf_update now compensates (fixes up) a bad sh_addralign for
    SHF_COMPRESSED sections.
  libdebuginfod: configure now takes --enable-libdebuginfod=dummy or
  - -disable-libdebuginfod for bootstrapping.
    DEBUGINFOD_URLS now accepts "scheme-free" urls
    (guessing at what the user meant, either http:// or file://)
  readelf, elflint: Handle aarch64 bti, pac bits in dynamic table and gnu
    property notes.
  libdw, readelf: Recognize DW_CFA_AARCH64_negate_ra_state. Allows unwinding
    on arm64 for code that is compiled for PAC (Pointer
    Authentication Code) as long as it isn't enabled
- Drop upstream patch:
  * 0001-tests-Add-GCOV-flags-when-necessary.patch</changelog>
  <changelog author="mliska@suse.cz" date="1600776000">- Creatu dummy subpackages that can be used for build of packages
  that are in bootstrap cycle.
- Add Provides for real packages.</changelog>
  <changelog author="mliska@suse.cz" date="1604577600">- Add rpmlintrc for
  libdebuginfod1-dummy.s390x: E: shlib-policy-name-error (Badness: 10000) libdebuginfod1
  which is expected as libdebuginfod1 and it's dummy library do share equal
  soname.
- Update to version 0.182:
  backends: Support for tilegx has been removed.
  config: New /etc/profile.d files to provide default $DEBUGINFOD_URLS.
  debuginfod: More efficient package traversal, tolerate various errors
    during scanning, grooming progress is more visible and
    interruptible, more prometheus metrics.
  debuginfod-client: Now supports compressed (kernel) ELF images.
  libdwfl: Add ZSTD compression support.</changelog>
  <changelog author="mliska@suse.cz" date="1606737600">- Mention elfutils-rpmlintrc as a Source.</changelog>
  <changelog author="mliska@suse.cz" date="1611144000">- Enable LTO (boo#1138796) for elfutils.spec.</changelog>
  <changelog author="mliska@suse.cz" date="1612785600">- Update to version 0.183:
  debuginfod: New thread-busy metric and more detailed error metrics.
    New --fdcache-mintmp and tracking of filesystem freespace.
    New increased webapi concurrency while grooming.
  debuginfod-client: DEBUGINFOD_SONAME macro added to debuginfod.h which
    can be used to dlopen the libdebuginfod.so library.
    New function debuginfod_set_verbose_fd and
    DEBUGINFOD_VERBOSE environment variable.
  config: profile.sh and profile.csh won't export DEBUGINFOD_URLS unless
    configured --enable-debuginfod-urls[=URLS]
  elflint, readelf: Recognize SHF_GNU_RETAIN.
    Handle SHT_X86_64_UNWIND as valid relocation target.
- Remove config-do-not-define-DEBUGINFOD_URLS-environment-var.patch patch.</changelog>
  <changelog author="mliska@suse.cz" date="1615982400">- Add disable-run-readelf-self-test.patch in order to disable
  a failing test-case with GCC 11 (PR27367).</changelog>
  <changelog author="mliska@suse.cz" date="1620648000">- Update to version 0.184:
  debuginfod: Use libarchive's bsdtar as the .deb-family file unpacker.
  debuginfod-client: Client caches negative results. If a query for a
    file failed with 404, an empty 000 permission
    file is created in the cache. This will prevent
    requesting the same file for the next 10 minutes.
    Client objects now carry long-lived curl handles
    for outgoing connections.  This makes it more
    efficient for multiple sequential queries, because
    the TCP connections and/or TLS state info are kept
    around awhile, avoiding O(100ms) setup latencies.
  libdw: handle DW_FORM_indirect when reading attributes
  translations: Update Polish translation.</changelog>
  <changelog author="mliska@suse.cz" date="1621857600">- Update to version 0.185:
  debuginfod-client: Simplify curl handle reuse so downloads which
    return an error are retried.
  elfcompress: Always exit with code 0 when the operation succeeds (even
    when nothing was done). On error the exit code is now always 1.</changelog>
  <changelog author="jcheung@suse.com" date="1626004800">- For version 0.185, the below patches are no longer needed
  (jsc#SLE-17288, jsc#SLE-17951)
  libdw-check-end-of-attributes-list-consistently.patch
  elflint-dont-check-section-group-without-flags-word.patch
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
  elfutils-dont-trust-sh_entsize.patch
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
  size-handle-recursive-elf-ar-files.patch
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
  use-the-empty-string-for-note-names-with-zero-size.patch
  readelf-fix-off-by-one-sanity-check.patch
  libebl-check-NT_PLATFORM-core-notes.patch
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
  libelf-check-compression-before-allocate-output-buffer.patch
  libdwfl-sanity-check-partial-core-file-data-reads.patch
  arlib-check-that-sh_entsize-isnt-zero.patch</changelog>
  <changelog author="martin.liska@suse.com" date="1628251200">- Add disable-run-deleted-test.patch in order to disable
  failing test-case (boo#1189153).</changelog>
  <changelog author="martin.liska@suse.com" date="1633953600">- Enhance license fields: all the libraries actually have a different
  license to the tools. While the tools are GPL-3.0-or-later, the
  libraries are (LGPL-3.0-or-later OR GPL-2.0-or-later)
  SLE bug (for tracking the above) bsc#1191310</changelog>
  <changelog author="tonyj@suse.com" date="1645790400">- Add support for zstd, needed to inspect kernel modules (bsc#1196510)</changelog>
  <changelog author="matz@suse.com" date="1761134400">- Add elfutils-fix-large-alignment.diff and elfutils-pr28190.diff
  to fix build/testsuite for more recent glibc and kernels.
- Add elfutils-fuzz-1.diff, elfutils-fuzz-2.diff,
  elfutils-fuzz-3.diff, elfutils-fuzz-4.diff [bsc#1237236,
  bsc#1237240, bsc#1237241, bsc#1237242].
- Add elfutils-fix-debuginfod-groom-race.diff to fix a testsuite
  race in run-debuginfod-find.sh.</changelog>
</package>
<package pkgid="2e3175bc22ab1f49dc53b6daef0af7608f11656ea3a6b80a7771cb4f4ab49548" name="elfutils-debuginfod" arch="src">
  <version epoch="0" ver="0.185" rel="150400.5.8.2"/>
  <changelog author="mliska@suse.cz" date="1585569600">- Update to version 0.179:
  debuginfod-client: When DEBUGINFOD_PROGRESS is set and the program doesn't
    install its own debuginfod_progressfn_t show download
    progress on stderr.
    DEBUGINFOD_TIMEOUT is now defined as seconds to get at
    least 100K, defaults to 90 seconds.
    Default to $XDG_CACHE_HOME/debuginfod_client.
    New functions debuginfod_set_user_data,
    debuginfod_get_user_data, debuginfod_get_url and
    debuginfod_add_http_header.
    Support for file:// URLs.
  debuginfod: Uses libarchive directly for reading rpm archives.
    Support for indexing .deb/.ddeb archives through dpkg-deb
    or bsdtar.
    Generic archive support through -Z EXT[=CMD]. Which can be
    used for example for arch-linux pacman files by using
  - Z '.tar.zst=zstdcat'.
    Better logging using User-Agent and X-Forwarded-For headers.
    More prometheus metrics.
    Support for eliding dots or extraneous slashes in path names.
  debuginfod-find: Accept /path/names in place of buildid hex.
  libelf: Handle PN_XNUM in elf_getphdrnum before shdr 0 is cached
    Ensure zlib resource cleanup on failure.
  libdwfl: dwfl_linux_kernel_find_elf and dwfl_linux_kernel_report_offline
    now find and handle a compressed vmlinuz image.
  readelf, elflint: Handle PT_GNU_PROPERTY.
  translations: Updated Ukrainian translation.</changelog>
  <changelog author="mliska@suse.cz" date="1591876800">- Update to version 0.180:
  elflint: Allow SHF_EXCLUDE as generic section flag when --gnu is given.
  libdw, readelf: Handle GCC LTO .gnu.debuglto_ prefix.
  libdw: Use correct CU to resolve file names in dwarf_decl_file.
  libdwfl: Handle debugaltlink in dwfl_standard_find_debuginfo.
  size: Also obey radix printing for bsd format.
  nm: Explicitly print weak 'V' or 'T' and common 'C' symbols.
- Add 0001-tests-Add-GCOV-flags-when-necessary.patch in order to fix
  an unresolved symbol.
- Enable LTO: boo#1138796 by adding -flto-partition=none and -Wno-error=stack-usage.</changelog>
  <changelog author="mliska@suse.cz" date="1592222400">- Remove remove-run-large-elf-file.sh.patch as it now checks for memory
  size.
- Use autosetup.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1599566400">- Update to version 0.181:
  libelf: elf_update now compensates (fixes up) a bad sh_addralign for
    SHF_COMPRESSED sections.
  libdebuginfod: configure now takes --enable-libdebuginfod=dummy or
  - -disable-libdebuginfod for bootstrapping.
    DEBUGINFOD_URLS now accepts "scheme-free" urls
    (guessing at what the user meant, either http:// or file://)
  readelf, elflint: Handle aarch64 bti, pac bits in dynamic table and gnu
    property notes.
  libdw, readelf: Recognize DW_CFA_AARCH64_negate_ra_state. Allows unwinding
    on arm64 for code that is compiled for PAC (Pointer
    Authentication Code) as long as it isn't enabled
- Drop upstream patch:
  * 0001-tests-Add-GCOV-flags-when-necessary.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1600171200">- Disable LTO again - boo#1138796
  Adding -flto-partition=none and -Wno-error=stack-usage were
  not enough:
    [  123s] libasm-devel.x86_64: E: lto-no-text-in-archive (Badness: 10000) /usr/lib64/libasm.a
    [  123s] libdw-devel.x86_64: E: lto-no-text-in-archive (Badness: 10000) /usr/lib64/libdw.a
    [  123s] libelf-devel.x86_64: E: lto-no-text-in-archive (Badness: 10000) /usr/lib64/libelf.a
    [  123s] This archive does not contain a non-empty .text section.  The archive was not
    [  123s] created with -ffat-lto-objects option.
  And adding -ffat-lto-objects breaks run-show-die-info.sh test.</changelog>
  <changelog author="mliska@suse.cz" date="1600776000">- Add Conflicts for dummy packages.</changelog>
  <changelog author="mliska@suse.cz" date="1604577600">- Add new /etc/profile.d/debuginfod.{,c}sh files.
- Update to version 0.182:
  backends: Support for tilegx has been removed.
  config: New /etc/profile.d files to provide default $DEBUGINFOD_URLS.
  debuginfod: More efficient package traversal, tolerate various errors
    during scanning, grooming progress is more visible and
    interruptible, more prometheus metrics.
  debuginfod-client: Now supports compressed (kernel) ELF images.
  libdwfl: Add ZSTD compression support.</changelog>
  <changelog author="mliska@suse.cz" date="1607601600">- Move profile files to libdebuginfod1 sub-package.
- Silent 2 rpmlint issues.</changelog>
  <changelog author="mliska@suse.cz" date="1609761600">- Add upstream config-do-not-define-DEBUGINFOD_URLS-environment-var.patch
  in order to fix boo#1180306.</changelog>
  <changelog author="mliska@suse.cz" date="1612785600">- Update to version 0.183:
  debuginfod: New thread-busy metric and more detailed error metrics.
    New --fdcache-mintmp and tracking of filesystem freespace.
    New increased webapi concurrency while grooming.
  debuginfod-client: DEBUGINFOD_SONAME macro added to debuginfod.h which
    can be used to dlopen the libdebuginfod.so library.
    New function debuginfod_set_verbose_fd and
    DEBUGINFOD_VERBOSE environment variable.
  config: profile.sh and profile.csh won't export DEBUGINFOD_URLS unless
    configured --enable-debuginfod-urls[=URLS]
  elflint, readelf: Recognize SHF_GNU_RETAIN.
    Handle SHT_X86_64_UNWIND as valid relocation target.
- Remove config-do-not-define-DEBUGINFOD_URLS-environment-var.patch patch.</changelog>
  <changelog author="mliska@suse.cz" date="1615896000">- Enable https://debuginfod.opensuse.org/ debuginfod server
  by default now.
- Add disable-run-readelf-self-test.patch in order to disable
  a failing test-case with GCC 11 (PR27367).</changelog>
  <changelog author="mliska@suse.cz" date="1620648000">- Update to version 0.184:
  debuginfod: Use libarchive's bsdtar as the .deb-family file unpacker.
  debuginfod-client: Client caches negative results. If a query for a
    file failed with 404, an empty 000 permission
    file is created in the cache. This will prevent
    requesting the same file for the next 10 minutes.
    Client objects now carry long-lived curl handles
    for outgoing connections.  This makes it more
    efficient for multiple sequential queries, because
    the TCP connections and/or TLS state info are kept
    around awhile, avoiding O(100ms) setup latencies.
  libdw: handle DW_FORM_indirect when reading attributes
  translations: Update Polish translation.
- Add 2 build dependences for tests.</changelog>
  <changelog author="mliska@suse.cz" date="1621857600">- Update to version 0.185:
  debuginfod-client: Simplify curl handle reuse so downloads which
    return an error are retried.
  elfcompress: Always exit with code 0 when the operation succeeds (even
    when nothing was done). On error the exit code is now always 1.</changelog>
  <changelog author="jcheung@suse.com" date="1626004800">- For version 0.185, the below patches are no longer needed
  (jsc#SLE-17288, jsc#SLE-17951)
  libdw-check-end-of-attributes-list-consistently.patch
  elflint-dont-check-section-group-without-flags-word.patch
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
  elfutils-dont-trust-sh_entsize.patch
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
  size-handle-recursive-elf-ar-files.patch
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
  use-the-empty-string-for-note-names-with-zero-size.patch
  readelf-fix-off-by-one-sanity-check.patch
  libebl-check-NT_PLATFORM-core-notes.patch
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
  libelf-check-compression-before-allocate-output-buffer.patch
  libdwfl-sanity-check-partial-core-file-data-reads.patch
  arlib-check-that-sh_entsize-isnt-zero.patch</changelog>
  <changelog author="martin.liska@suse.com" date="1628251200">- Add disable-run-deleted-test.patch in order to disable
  failing test-case (boo#1189153).</changelog>
  <changelog author="martin.liska@suse.com" date="1633953600">- Enhance license fields: all the libraries actually have a different
  license to the tools. While the tools are GPL-3.0-or-later, the
  libraries are (LGPL-3.0-or-later OR GPL-2.0-or-later)
  SLE bug (for tracking the above) bsc#1191310</changelog>
  <changelog author="tonyj@suse.com" date="1645790400">- Add support for zstd, needed to inspect kernel modules (bsc#1196510)</changelog>
  <changelog author="martin.liska@suse.com" date="1655726400">- Add missing Requires for devel package.</changelog>
  <changelog author="martin.liska@suse.com" date="1656331200">- Set --enable-debuginfod-urls only for TW.</changelog>
  <changelog author="matz@suse.com" date="1761134400">- Add elfutils-fix-large-alignment.diff and elfutils-pr28190.diff
  to fix build/testsuite for more recent glibc and kernels.
- Add elfutils-fuzz-1.diff, elfutils-fuzz-2.diff,
  elfutils-fuzz-3.diff, elfutils-fuzz-4.diff [bsc#1237236,
  bsc#1237240, bsc#1237241, bsc#1237242].
- Add elfutils-fix-debuginfod-groom-race.diff to fix a testsuite
  race in run-debuginfod-find.sh.</changelog>
</package>
<package pkgid="47ec2dc1f98853c8b44ff744201f045a768b92753d6087b619b3d04282db839f" name="elfutils-debuginfod" arch="x86_64">
  <version epoch="0" ver="0.185" rel="150400.5.8.2"/>
  <changelog author="mliska@suse.cz" date="1585569600">- Update to version 0.179:
  debuginfod-client: When DEBUGINFOD_PROGRESS is set and the program doesn't
    install its own debuginfod_progressfn_t show download
    progress on stderr.
    DEBUGINFOD_TIMEOUT is now defined as seconds to get at
    least 100K, defaults to 90 seconds.
    Default to $XDG_CACHE_HOME/debuginfod_client.
    New functions debuginfod_set_user_data,
    debuginfod_get_user_data, debuginfod_get_url and
    debuginfod_add_http_header.
    Support for file:// URLs.
  debuginfod: Uses libarchive directly for reading rpm archives.
    Support for indexing .deb/.ddeb archives through dpkg-deb
    or bsdtar.
    Generic archive support through -Z EXT[=CMD]. Which can be
    used for example for arch-linux pacman files by using
  - Z '.tar.zst=zstdcat'.
    Better logging using User-Agent and X-Forwarded-For headers.
    More prometheus metrics.
    Support for eliding dots or extraneous slashes in path names.
  debuginfod-find: Accept /path/names in place of buildid hex.
  libelf: Handle PN_XNUM in elf_getphdrnum before shdr 0 is cached
    Ensure zlib resource cleanup on failure.
  libdwfl: dwfl_linux_kernel_find_elf and dwfl_linux_kernel_report_offline
    now find and handle a compressed vmlinuz image.
  readelf, elflint: Handle PT_GNU_PROPERTY.
  translations: Updated Ukrainian translation.</changelog>
  <changelog author="mliska@suse.cz" date="1591876800">- Update to version 0.180:
  elflint: Allow SHF_EXCLUDE as generic section flag when --gnu is given.
  libdw, readelf: Handle GCC LTO .gnu.debuglto_ prefix.
  libdw: Use correct CU to resolve file names in dwarf_decl_file.
  libdwfl: Handle debugaltlink in dwfl_standard_find_debuginfo.
  size: Also obey radix printing for bsd format.
  nm: Explicitly print weak 'V' or 'T' and common 'C' symbols.
- Add 0001-tests-Add-GCOV-flags-when-necessary.patch in order to fix
  an unresolved symbol.
- Enable LTO: boo#1138796 by adding -flto-partition=none and -Wno-error=stack-usage.</changelog>
  <changelog author="mliska@suse.cz" date="1592222400">- Remove remove-run-large-elf-file.sh.patch as it now checks for memory
  size.
- Use autosetup.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1599566400">- Update to version 0.181:
  libelf: elf_update now compensates (fixes up) a bad sh_addralign for
    SHF_COMPRESSED sections.
  libdebuginfod: configure now takes --enable-libdebuginfod=dummy or
  - -disable-libdebuginfod for bootstrapping.
    DEBUGINFOD_URLS now accepts "scheme-free" urls
    (guessing at what the user meant, either http:// or file://)
  readelf, elflint: Handle aarch64 bti, pac bits in dynamic table and gnu
    property notes.
  libdw, readelf: Recognize DW_CFA_AARCH64_negate_ra_state. Allows unwinding
    on arm64 for code that is compiled for PAC (Pointer
    Authentication Code) as long as it isn't enabled
- Drop upstream patch:
  * 0001-tests-Add-GCOV-flags-when-necessary.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1600171200">- Disable LTO again - boo#1138796
  Adding -flto-partition=none and -Wno-error=stack-usage were
  not enough:
    [  123s] libasm-devel.x86_64: E: lto-no-text-in-archive (Badness: 10000) /usr/lib64/libasm.a
    [  123s] libdw-devel.x86_64: E: lto-no-text-in-archive (Badness: 10000) /usr/lib64/libdw.a
    [  123s] libelf-devel.x86_64: E: lto-no-text-in-archive (Badness: 10000) /usr/lib64/libelf.a
    [  123s] This archive does not contain a non-empty .text section.  The archive was not
    [  123s] created with -ffat-lto-objects option.
  And adding -ffat-lto-objects breaks run-show-die-info.sh test.</changelog>
  <changelog author="mliska@suse.cz" date="1600776000">- Add Conflicts for dummy packages.</changelog>
  <changelog author="mliska@suse.cz" date="1604577600">- Add new /etc/profile.d/debuginfod.{,c}sh files.
- Update to version 0.182:
  backends: Support for tilegx has been removed.
  config: New /etc/profile.d files to provide default $DEBUGINFOD_URLS.
  debuginfod: More efficient package traversal, tolerate various errors
    during scanning, grooming progress is more visible and
    interruptible, more prometheus metrics.
  debuginfod-client: Now supports compressed (kernel) ELF images.
  libdwfl: Add ZSTD compression support.</changelog>
  <changelog author="mliska@suse.cz" date="1607601600">- Move profile files to libdebuginfod1 sub-package.
- Silent 2 rpmlint issues.</changelog>
  <changelog author="mliska@suse.cz" date="1609761600">- Add upstream config-do-not-define-DEBUGINFOD_URLS-environment-var.patch
  in order to fix boo#1180306.</changelog>
  <changelog author="mliska@suse.cz" date="1612785600">- Update to version 0.183:
  debuginfod: New thread-busy metric and more detailed error metrics.
    New --fdcache-mintmp and tracking of filesystem freespace.
    New increased webapi concurrency while grooming.
  debuginfod-client: DEBUGINFOD_SONAME macro added to debuginfod.h which
    can be used to dlopen the libdebuginfod.so library.
    New function debuginfod_set_verbose_fd and
    DEBUGINFOD_VERBOSE environment variable.
  config: profile.sh and profile.csh won't export DEBUGINFOD_URLS unless
    configured --enable-debuginfod-urls[=URLS]
  elflint, readelf: Recognize SHF_GNU_RETAIN.
    Handle SHT_X86_64_UNWIND as valid relocation target.
- Remove config-do-not-define-DEBUGINFOD_URLS-environment-var.patch patch.</changelog>
  <changelog author="mliska@suse.cz" date="1615896000">- Enable https://debuginfod.opensuse.org/ debuginfod server
  by default now.
- Add disable-run-readelf-self-test.patch in order to disable
  a failing test-case with GCC 11 (PR27367).</changelog>
  <changelog author="mliska@suse.cz" date="1620648000">- Update to version 0.184:
  debuginfod: Use libarchive's bsdtar as the .deb-family file unpacker.
  debuginfod-client: Client caches negative results. If a query for a
    file failed with 404, an empty 000 permission
    file is created in the cache. This will prevent
    requesting the same file for the next 10 minutes.
    Client objects now carry long-lived curl handles
    for outgoing connections.  This makes it more
    efficient for multiple sequential queries, because
    the TCP connections and/or TLS state info are kept
    around awhile, avoiding O(100ms) setup latencies.
  libdw: handle DW_FORM_indirect when reading attributes
  translations: Update Polish translation.
- Add 2 build dependences for tests.</changelog>
  <changelog author="mliska@suse.cz" date="1621857600">- Update to version 0.185:
  debuginfod-client: Simplify curl handle reuse so downloads which
    return an error are retried.
  elfcompress: Always exit with code 0 when the operation succeeds (even
    when nothing was done). On error the exit code is now always 1.</changelog>
  <changelog author="jcheung@suse.com" date="1626004800">- For version 0.185, the below patches are no longer needed
  (jsc#SLE-17288, jsc#SLE-17951)
  libdw-check-end-of-attributes-list-consistently.patch
  elflint-dont-check-section-group-without-flags-word.patch
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
  elfutils-dont-trust-sh_entsize.patch
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
  size-handle-recursive-elf-ar-files.patch
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
  use-the-empty-string-for-note-names-with-zero-size.patch
  readelf-fix-off-by-one-sanity-check.patch
  libebl-check-NT_PLATFORM-core-notes.patch
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
  libelf-check-compression-before-allocate-output-buffer.patch
  libdwfl-sanity-check-partial-core-file-data-reads.patch
  arlib-check-that-sh_entsize-isnt-zero.patch</changelog>
  <changelog author="martin.liska@suse.com" date="1628251200">- Add disable-run-deleted-test.patch in order to disable
  failing test-case (boo#1189153).</changelog>
  <changelog author="martin.liska@suse.com" date="1633953600">- Enhance license fields: all the libraries actually have a different
  license to the tools. While the tools are GPL-3.0-or-later, the
  libraries are (LGPL-3.0-or-later OR GPL-2.0-or-later)
  SLE bug (for tracking the above) bsc#1191310</changelog>
  <changelog author="tonyj@suse.com" date="1645790400">- Add support for zstd, needed to inspect kernel modules (bsc#1196510)</changelog>
  <changelog author="martin.liska@suse.com" date="1655726400">- Add missing Requires for devel package.</changelog>
  <changelog author="martin.liska@suse.com" date="1656331200">- Set --enable-debuginfod-urls only for TW.</changelog>
  <changelog author="matz@suse.com" date="1761134400">- Add elfutils-fix-large-alignment.diff and elfutils-pr28190.diff
  to fix build/testsuite for more recent glibc and kernels.
- Add elfutils-fuzz-1.diff, elfutils-fuzz-2.diff,
  elfutils-fuzz-3.diff, elfutils-fuzz-4.diff [bsc#1237236,
  bsc#1237240, bsc#1237241, bsc#1237242].
- Add elfutils-fix-debuginfod-groom-race.diff to fix a testsuite
  race in run-debuginfod-find.sh.</changelog>
</package>
<package pkgid="74d118e4e6304cb8a688fc5c3be455946526beccf2f7e0a6a1ff87a8d6800205" name="elfutils-lang" arch="noarch">
  <version epoch="0" ver="0.185" rel="150400.5.8.3"/>
  <changelog author="jengelh@inai.de" date="1579780800">- Avoid double-shipping libdebuginfo.so.1 in two different
  subpackages. Fixup RPM group.</changelog>
  <changelog author="mliska@suse.cz" date="1580817600">- Exclude debuginfod sub-packages and move them to elfutils-debuginfod.</changelog>
  <changelog author="dimstar@opensuse.org" date="1581336000">- Re-add libelf1 to baselibs.conf: we still generate a
  libelf-devel-32bit, which is only installable if libelf1-21bit
  also exists.</changelog>
  <changelog author="mliska@suse.cz" date="1585569600">- Update to version 0.179:
  debuginfod-client: When DEBUGINFOD_PROGRESS is set and the program doesn't
    install its own debuginfod_progressfn_t show download
    progress on stderr.
    DEBUGINFOD_TIMEOUT is now defined as seconds to get at
    least 100K, defaults to 90 seconds.
    Default to $XDG_CACHE_HOME/debuginfod_client.
    New functions debuginfod_set_user_data,
    debuginfod_get_user_data, debuginfod_get_url and
    debuginfod_add_http_header.
    Support for file:// URLs.
  debuginfod: Uses libarchive directly for reading rpm archives.
    Support for indexing .deb/.ddeb archives through dpkg-deb
    or bsdtar.
    Generic archive support through -Z EXT[=CMD]. Which can be
    used for example for arch-linux pacman files by using
  - Z '.tar.zst=zstdcat'.
    Better logging using User-Agent and X-Forwarded-For headers.
    More prometheus metrics.
    Support for eliding dots or extraneous slashes in path names.
  debuginfod-find: Accept /path/names in place of buildid hex.
  libelf: Handle PN_XNUM in elf_getphdrnum before shdr 0 is cached
    Ensure zlib resource cleanup on failure.
  libdwfl: dwfl_linux_kernel_find_elf and dwfl_linux_kernel_report_offline
    now find and handle a compressed vmlinuz image.
  readelf, elflint: Handle PT_GNU_PROPERTY.
  translations: Updated Ukrainian translation.</changelog>
  <changelog author="mliska@suse.cz" date="1591876800">- Update to version 0.180:
  elflint: Allow SHF_EXCLUDE as generic section flag when --gnu is given.
  libdw, readelf: Handle GCC LTO .gnu.debuglto_ prefix.
  libdw: Use correct CU to resolve file names in dwarf_decl_file.
  libdwfl: Handle debugaltlink in dwfl_standard_find_debuginfo.
  size: Also obey radix printing for bsd format.
  nm: Explicitly print weak 'V' or 'T' and common 'C' symbols.
- Add 0001-tests-Add-GCOV-flags-when-necessary.patch in order to fix
  an unresolved symbol.
- Enable LTO: boo#1138796 by adding -flto-partition=none and -Wno-error=stack-usage.</changelog>
  <changelog author="mliska@suse.cz" date="1592222400">- Remove cfi-fix.patch - should not be needed now.
- Remove remove-run-large-elf-file.sh.patch as it now checks for memory
  size.
- Use autosetup.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1599566400">- Update to version 0.181:
  libelf: elf_update now compensates (fixes up) a bad sh_addralign for
    SHF_COMPRESSED sections.
  libdebuginfod: configure now takes --enable-libdebuginfod=dummy or
  - -disable-libdebuginfod for bootstrapping.
    DEBUGINFOD_URLS now accepts "scheme-free" urls
    (guessing at what the user meant, either http:// or file://)
  readelf, elflint: Handle aarch64 bti, pac bits in dynamic table and gnu
    property notes.
  libdw, readelf: Recognize DW_CFA_AARCH64_negate_ra_state. Allows unwinding
    on arm64 for code that is compiled for PAC (Pointer
    Authentication Code) as long as it isn't enabled
- Drop upstream patch:
  * 0001-tests-Add-GCOV-flags-when-necessary.patch</changelog>
  <changelog author="mliska@suse.cz" date="1600776000">- Creatu dummy subpackages that can be used for build of packages
  that are in bootstrap cycle.
- Add Provides for real packages.</changelog>
  <changelog author="mliska@suse.cz" date="1604577600">- Add rpmlintrc for
  libdebuginfod1-dummy.s390x: E: shlib-policy-name-error (Badness: 10000) libdebuginfod1
  which is expected as libdebuginfod1 and it's dummy library do share equal
  soname.
- Update to version 0.182:
  backends: Support for tilegx has been removed.
  config: New /etc/profile.d files to provide default $DEBUGINFOD_URLS.
  debuginfod: More efficient package traversal, tolerate various errors
    during scanning, grooming progress is more visible and
    interruptible, more prometheus metrics.
  debuginfod-client: Now supports compressed (kernel) ELF images.
  libdwfl: Add ZSTD compression support.</changelog>
  <changelog author="mliska@suse.cz" date="1606737600">- Mention elfutils-rpmlintrc as a Source.</changelog>
  <changelog author="mliska@suse.cz" date="1611144000">- Enable LTO (boo#1138796) for elfutils.spec.</changelog>
  <changelog author="mliska@suse.cz" date="1612785600">- Update to version 0.183:
  debuginfod: New thread-busy metric and more detailed error metrics.
    New --fdcache-mintmp and tracking of filesystem freespace.
    New increased webapi concurrency while grooming.
  debuginfod-client: DEBUGINFOD_SONAME macro added to debuginfod.h which
    can be used to dlopen the libdebuginfod.so library.
    New function debuginfod_set_verbose_fd and
    DEBUGINFOD_VERBOSE environment variable.
  config: profile.sh and profile.csh won't export DEBUGINFOD_URLS unless
    configured --enable-debuginfod-urls[=URLS]
  elflint, readelf: Recognize SHF_GNU_RETAIN.
    Handle SHT_X86_64_UNWIND as valid relocation target.
- Remove config-do-not-define-DEBUGINFOD_URLS-environment-var.patch patch.</changelog>
  <changelog author="mliska@suse.cz" date="1615982400">- Add disable-run-readelf-self-test.patch in order to disable
  a failing test-case with GCC 11 (PR27367).</changelog>
  <changelog author="mliska@suse.cz" date="1620648000">- Update to version 0.184:
  debuginfod: Use libarchive's bsdtar as the .deb-family file unpacker.
  debuginfod-client: Client caches negative results. If a query for a
    file failed with 404, an empty 000 permission
    file is created in the cache. This will prevent
    requesting the same file for the next 10 minutes.
    Client objects now carry long-lived curl handles
    for outgoing connections.  This makes it more
    efficient for multiple sequential queries, because
    the TCP connections and/or TLS state info are kept
    around awhile, avoiding O(100ms) setup latencies.
  libdw: handle DW_FORM_indirect when reading attributes
  translations: Update Polish translation.</changelog>
  <changelog author="mliska@suse.cz" date="1621857600">- Update to version 0.185:
  debuginfod-client: Simplify curl handle reuse so downloads which
    return an error are retried.
  elfcompress: Always exit with code 0 when the operation succeeds (even
    when nothing was done). On error the exit code is now always 1.</changelog>
  <changelog author="jcheung@suse.com" date="1626004800">- For version 0.185, the below patches are no longer needed
  (jsc#SLE-17288, jsc#SLE-17951)
  libdw-check-end-of-attributes-list-consistently.patch
  elflint-dont-check-section-group-without-flags-word.patch
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
  elfutils-dont-trust-sh_entsize.patch
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
  size-handle-recursive-elf-ar-files.patch
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
  use-the-empty-string-for-note-names-with-zero-size.patch
  readelf-fix-off-by-one-sanity-check.patch
  libebl-check-NT_PLATFORM-core-notes.patch
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
  libelf-check-compression-before-allocate-output-buffer.patch
  libdwfl-sanity-check-partial-core-file-data-reads.patch
  arlib-check-that-sh_entsize-isnt-zero.patch</changelog>
  <changelog author="martin.liska@suse.com" date="1628251200">- Add disable-run-deleted-test.patch in order to disable
  failing test-case (boo#1189153).</changelog>
  <changelog author="martin.liska@suse.com" date="1633953600">- Enhance license fields: all the libraries actually have a different
  license to the tools. While the tools are GPL-3.0-or-later, the
  libraries are (LGPL-3.0-or-later OR GPL-2.0-or-later)
  SLE bug (for tracking the above) bsc#1191310</changelog>
  <changelog author="tonyj@suse.com" date="1645790400">- Add support for zstd, needed to inspect kernel modules (bsc#1196510)</changelog>
  <changelog author="matz@suse.com" date="1761134400">- Add elfutils-fix-large-alignment.diff and elfutils-pr28190.diff
  to fix build/testsuite for more recent glibc and kernels.
- Add elfutils-fuzz-1.diff, elfutils-fuzz-2.diff,
  elfutils-fuzz-3.diff, elfutils-fuzz-4.diff [bsc#1237236,
  bsc#1237240, bsc#1237241, bsc#1237242].
- Add elfutils-fix-debuginfod-groom-race.diff to fix a testsuite
  race in run-debuginfod-find.sh.</changelog>
</package>
<package pkgid="11bbdc8c42a502618e801ad4e233d78eea87ff334280f192ed0e24b9187f3613" name="expat" arch="src">
  <version epoch="0" ver="2.7.1" rel="150700.3.12.1"/>
  <changelog author="david.anes@suse.com" date="1645358400">- update to 2.4.6 (bsc#1196168, CVE-2022-25313):
  * Bug fixes:
  - Fix a regression introduced by the fix for CVE-2022-25313
    in release 2.4.5 that affects applications that (1)
    call function XML_SetElementDeclHandler and (2) are
    parsing XML that contains nested element declarations
    (e.g. "&lt;!ELEMENT junk ((bar|foo|xyz+), zebra*)&gt;").
  - Version info bumped from 9:5:8 to 9:6:8;
    see https://verbump.de/ for what these numbers do.</changelog>
  <changelog author="david.anes@suse.com" date="1646481600">- update to 2.4.7 (bsc#1196784, CVE-2022-25236):
  * Bug fixes:
  - Relax fix to CVE-2022-25236 (introduced with release 2.4.5)
    with regard to all valid URI characters (RFC 3986),
    i.e. the following set (excluding whitespace):
    ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz
    0123456789 % -._~ :/?#[]@ !$&amp;'()*+,;=
  * Other changes:
  - CMake|Windows: Store Expat version in the DLL
  - Document consequences of namespace separator choices not just
    in doc/reference.html but also in header &lt;expat.h&gt;
  - Document Expat's lack of validation of namespace URIs against
    RFC 3986, and that the XML 1.0r4 specification doesn't
    require Expat to validate namespace URIs, and that Expat
    may do more in that regard in future releases.
    If you find need for strict RFC 3986 URI validation on
    application level today, https://uriparser.github.io/ may
    be of interest.
  - Fix documentation of XML_EndDoctypeDeclHandler in &lt;expat.h&gt;
  - Document that a call to XML_FreeContentModel can be done at
    a later time from outside the element declaration handler
  - Make hardcoded namespace URIs easier to find in code
  - Update documentation on use of XML_POOR_ENTOPY on Solaris
  - tests: Resolve use of macros NAN and INFINITY for GNU G++
    4.8.2 on Solaris.
  - Version info bumped from 9:6:8 to 9:7:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1648555200">- update to 2.4.8:
  * Other changes:
  - pkg-config: Move "-lm" to section "Libs.private"
  - CMake|MSVC: Fix pkg-config section "Libs"
  - CMake|macOS: Start using linker arguments
    "-compatibility_version &lt;version&gt;" and
    "-current_version &lt;version&gt;" in a way compatible with GNU
    Libtool
  - Version info bumped from 9:7:8 to 9:8:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- update to 2.4.9: (bsc#1203438)
  * Security fixes:
  - CVE-2022-40674 -- Heap use-after-free vulnerability in
    function doContent. Expected impact is denial of service
    or potentially arbitrary code execution.
  * Bug fixes:
  - MinGW: Fix mis-compilation for -D__USE_MINGW_ANSI_STDIO=0
  - docs: Fix documentation on effect of switch XML_DTD on
    symbol visibility in doc/reference.html
  * Other changes:
  - MinGW: Make fix-xmltest-log.sh drop more Wine bug output
  - Autotools: Sync CMake templates with CMake 3.22
  - CMake: Migrate from use of CMAKE_*_POSTFIX to
    dedicated variables EXPAT_*_POSTFIX to stop affecting
    other projects
  - Windows|CMake: Add missing -DXML_STATIC to test runners
    and fuzzers
  - Windows|CMake: Render .def file from a template to fix
    linking with -DEXPAT_DTD=OFF and/or -DEXPAT_ATTR_INFO=ON
  - MinGW|CMake: Apply MSVC .def file when linking
  - MinGW|CMake: Sync library name with GNU Autotools,
    i.e. produce libexpat-1.dll rather than libexpat.dll
    by default.  Filename libexpat.dll.a is unaffected.
  - MinGW|CMake: Set missing variable CMAKE_RC_COMPILER in
    toolchain file "cmake/mingw-toolchain.cmake" to avoid
    error "windres: Command not found" on e.g. Ubuntu 20.04
  - CMake: Unify inconsistent use of set() and option() in
    context of public build time options to take need for
    set(.. FORCE) in projects using Expat by means of
    add_subdirectory(..) off Expat's users' shoulders
  - Stop exporting API symbols when building a static library
  - Resolve use of deprecated "fgrep" by "grep -F"
  - CMake: Make documentation on variables a bit more consistent
  - CMake: Drop leading whitespace from a #cmakedefine line in
    file expat_config.h.cmake
  - xmlwf: Fix harmless variable mix-up in function nsattcmp
  - Address Cppcheck warnings
  - Address Clang 15 compiler warnings
  - Version info bumped from 9:8:8 to 9:9:8;
    see https://verbump.de/ for what these numbers do
  * Infrastructure:
  - CI: Windows: Start covering MSVC 2022
  - CI: macOS: Migrate off deprecated macOS 10.15
  - CI: Linux: Make migration off deprecated Ubuntu 18.04 work
  - CI: Upgrade Clang from 14 to 15
  - apply-clang-format.sh: Add support for BSD find
  - coverage.sh: Exclude MinGW headers
  - coverage.sh: Fix name collision for -funsigned-char</changelog>
  <changelog author="david.anes@suse.com" date="1666785600">- Update to 2.5.0: (bsc#1204708)
  * Security fixes:
  - CVE-2022-43680 -- Fix heap use-after-free after overeager
    destruction of a shared DTD in function
    XML_ExternalEntityParserCreate in out-of-memory situations.
    Expected impact is denial of service or potentially arbitrary
    code execution.
  * Bug fixes:
  - Fix curruption from undefined entities
  - Fix case when parsing was suspended while processing nested
    entities
  - Stop leaking opening tag bindings after a closing tag mismatch
    error where a parser is reset through XML_ParserReset and then
    reused to parse
  - CMake: Fix generation of pkg-config file
  - MinGW|CMake: Fix static library name
  * Other changes:
  - Protect header expat_config.h from multiple inclusion
  - examples: Make use of XML_GetBuffer and be more consistent
    across examples
  - Address compiler warnings
  - Version info bumped from 9:9:8 to 9:10:8; see
    https://verbump.de/ for what these numbers do</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1670760000">- add upstream signing key and validate source signature</changelog>
  <changelog author="david.anes@suse.com" date="1707739200">- Update keyring automatically from keyserver during OBS service run.
- Explicitly use --without-docbook (before it was implicit).
- Include missing files for documentation and examples.
- Add manpage for xmlwf, which is now available in the released tarball.
- Clean the spec file a bit.
- Update to 2.6.0:
  * Security fixes:
  - CVE-2023-52425 (boo#1219559)
  - - Fix quadratic runtime issues with big tokens
    that can cause denial of service, in partial where
    dealing with compressed XML input.  Applications
    that parsed a document in one go -- a single call to
    functions XML_Parse or XML_ParseBuffer -- were not affected.
    The smaller the chunks/buffers you use for parsing
    previously, the bigger the problem prior to the fix.
    Backporters should be careful to no omit parts of
    pull request #789 and to include earlier pull request #771,
    in order to not break the fix.
  - CVE-2023-52426 (boo#1219561)
  - - Fix billion laughs attacks for users
    compiling *without* XML_DTD defined (which is not common).
    Users with XML_DTD defined have been protected since
    Expat &gt;=2.4.0 (and that was CVE-2013-0340 back then).
  * Bug fixes:
  - Fix parse-size-dependent "invalid token" error for
    external entities that start with a byte order mark
  - Fix NULL pointer dereference in setContext via
    XML_ExternalEntityParserCreate for compilation with
    XML_DTD undefined
  - Protect against closing entities out of order
  * Other changes:
  - Improve support for arc4random/arc4random_buf
  - Improve buffer growth in XML_GetBuffer and XML_Parse
  - xmlwf: Support --help and --version
  - xmlwf: Support custom buffer size for XML_GetBuffer and read
  - xmlwf: Improve language and URL clickability in help output
  - examples: Add new example "element_declarations.c"
  - Be stricter about macro XML_CONTEXT_BYTES at build time
  - Make inclusion to expat_config.h consistent
  - Autotools: configure.ac: Support --disable-maintainer-mode
  - Autotools: Sync CMake templates with CMake 3.26
  - Autotools: Make installation of shipped man page doc/xmlwf.1
    independent of docbook2man availability
  - Autotools|CMake: Add missing -DXML_STATIC to pkg-config file
    section "Cflags.private" in order to fix compilation
    against static libexpat using pkg-config on Windows
  - Autotools|CMake: Require a C99 compiler
    (a de-facto requirement already since Expat 2.2.2 of 2017)
  - Autotools|CMake: Fix PACKAGE_BUGREPORT variable
  - Autotools|CMake: Make test suite require a C++11 compiler
  - CMake: Require CMake &gt;=3.5.0
  - CMake: Lowercase off_t and size_t to help a bug in Meson
  - CMake: Sort xmlwf sources alphabetically
  - CMake|Windows: Fix generation of DLL file version info
  - CMake: Build tests/benchmark/benchmark.c as well for
    a build with -DEXPAT_BUILD_TESTS=ON
  - docs: Document the importance of isFinal + adjust tests
    accordingly
  - docs: Improve use of "NULL" and "null"
  - docs: Be specific about version of XML (XML 1.0r4)
    and version of C (C99); (XML 1.0r5 will need a sponsor.)
  - docs: reference.html: Promote function XML_ParseBuffer more
  - docs: reference.html: Add HTML anchors to XML_* macros
  - docs: reference.html: Upgrade to OK.css 1.2.0
  - docs: Fix typos
  - docs|CI: Use HTTPS URLs instead of HTTP at various places
  - Address compiler warnings
  - Address clang-tidy warnings
  - Version info bumped from 9:10:8 (libexpat*.so.1.8.10)
    to 10:0:9 (libexpat*.so.1.9.0); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1708430400">- Fix handling of xmlwf.1 to avoid workarounds in specfile:
  * Added libxml2-fix-xmlwf.1-handling.patch
- Call buildconf.sh to avoid (future) issues with expat_config.h.in</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1709294400">- update to 2.6.1:
  * Expose billion laughs API with XML_DTD defined and XML_GE
    undefined, regression from 2.6.0
  * Make tests independent of CPU speed, and thus more robust
- drop libxml2-fix-xmlwf.1-handling.patch, upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1710331200">- update to 2.6.2:
  * CVE-2024-28757 -- Prevent billion laughs attacks with isolated
    use of external parsers (boo#1221289)
  * Reject direct parameter entity recursion and avoid the related
    undefined behavior</changelog>
  <changelog author="david.anes@suse.com" date="1725537600">- Update to 2.6.3:
  * Security fixes:
  - CVE-2024-45490, bsc#1229930 -- Calling function XML_ParseBuffer with
    len &lt; 0 without noticing and then calling XML_GetBuffer
    will have XML_ParseBuffer fail to recognize the problem
    and XML_GetBuffer corrupt memory.
    With the fix, XML_ParseBuffer now complains with error
    XML_ERROR_INVALID_ARGUMENT just like sibling XML_Parse
    has been doing since Expat 2.2.1, and now documented.
    Impact is denial of service to potentially artitrary code
    execution.
  - CVE-2024-45491, bsc#1229931 -- Internal function dtdCopy can have an
    integer overflow for nDefaultAtts on 32-bit platforms
    (where UINT_MAX equals SIZE_MAX).
    Impact is denial of service to potentially artitrary code
    execution.
  - CVE-2024-45492, bsc#1229932 -- Internal function nextScaffoldPart can
    have an integer overflow for m_groupSize on 32-bit
    platforms (where UINT_MAX equals SIZE_MAX).
    Impact is denial of service to potentially artitrary code
    execution.
  * Other changes:
  - Autotools: Sync CMake templates with CMake 3.28
  - Autotools: Always provide path to find(1) for portability
  - Autotools: Ensure that the m4 directory always exists.
  - Autotools: Simplify handling of SIZEOF_VOID_P
  - Autotools: Support non-GNU sed
  - Autotools|CMake: Fix main() to main(void)
  - Autotools|CMake: Fix compile tests for HAVE_SYSCALL_GETRANDOM
  - Autotools|CMake: Stop requiring dos2unix
  - CMake: Fix check for symbols size_t and off_t
  - docs|tests: Convert README to Markdown and update
  - Windows: Drop support for Visual Studio &lt;=15.0/2017
  - Drop needless XML_DTD guards around is_param access
  - Fix typo in a code comment
  - Version info bumped from 10:2:9 (libexpat*.so.1.9.2)
    to 10:3:9 (libexpat*.so.1.9.3); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1727352000">- updated keyring [https://build.suse.de/request/show/345282]
- modified sources
  % expat.keyring</changelog>
  <changelog author="pgajdos@suse.com" date="1730980800">- version update to 2.6.4
  * Security fixes: [bsc#1232601][bsc#1232579]
    [#915]  CVE-2024-50602 -- Fix crash within function XML_ResumeParser
    from a NULL pointer dereference by disallowing function
    XML_StopParser to (stop or) suspend an unstarted parser.
    A new error code XML_ERROR_NOT_STARTED was introduced to
    properly communicate this situation.  // CWE-476 CWE-754
  * Other changes:
    [#903]  CMake: Add alias target "expat::expat"
    [#905]  docs: Document use via CMake &gt;=3.18 with FetchContent
    and SOURCE_SUBDIR and its consequences
    [#902]  tests: Reduce use of global parser instance
    [#904]  tests: Resolve duplicate handler
  [#317] #918  tests: Improve tests on doctype closing (ex CVE-2019-15903)
    [#914]  Fix signedness of format strings
  [#919] #920  Version info bumped from 10:3:9 (libexpat*.so.1.9.3)
    to 11:0:10 (libexpat*.so.1.10.0); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1731412800">- no source changes, just adding jira reference: jsc#SLE-21253</changelog>
  <changelog author="pgajdos@suse.com" date="1741953600">- version update to 2.7.0 (CVE-2024-8176 [bsc#1239618])
  * Security fixes:
    [#893] #973  CVE-2024-8176 -- Fix crash from chaining a large number
    of entities caused by stack overflow by resolving use of
    recursion, for all three uses of entities:
  - general entities in character data ("&lt;e&gt;&amp;g1;&lt;/e&gt;")
  - general entities in attribute values ("&lt;e k1='&amp;g1;'/&gt;")
  - parameter entities ("%p1;")
    Known impact is (reliable and easy) denial of service:
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:H/RL:O/RC:C
    (Base Score: 7.5, Temporal Score: 7.2)
    Please note that a layer of compression around XML can
    significantly reduce the minimum attack payload size.
  * Other changes:
    [#935] #937  Autotools: Make generated CMake files look for
    libexpat.@SO_MAJOR@.dylib on macOS
    [#925]  Autotools: Sync CMake templates with CMake 3.29
  [#945] #962 #966  CMake: Drop support for CMake &lt;3.13
    [#942]  CMake: Small fuzzing related improvements
    [#921]  docs: Add missing documentation of error code
    XML_ERROR_NOT_STARTED that was introduced with 2.6.4
    [#941]  docs: Document need for C++11 compiler for use from C++
    [#959]  tests/benchmark: Fix a (harmless) TOCTTOU
    [#944]  Windows: Fix installer target location of file xmlwf.xml
    for CMake
    [#953]  Windows: Address warning -Wunknown-warning-option
    about -Wno-pedantic-ms-format from LLVM MinGW
    [#971]  Address Cppcheck warnings
    [#969] #970  Mass-migrate links from http:// to https://
    [#947] #958 ..
    [#974] #975  Document changes since the previous release
    [#974] #975  Version info bumped from 11:0:10 (libexpat*.so.1.10.0)
    to 11:1:10 (libexpat*.so.1.10.1); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1743076800">- version update to 2.7.0 for SLE-15-SP7 (jsc#PED-12507)</changelog>
  <changelog author="pgajdos@suse.com" date="1743163200">- version update to 2.7.1
    Bug fixes:
    [#980] #989  Restore event pointer behavior from Expat 2.6.4
    (that the fix to CVE-2024-8176 changed in 2.7.0);
    affected API functions are:
  - XML_GetCurrentByteCount
  - XML_GetCurrentByteIndex
  - XML_GetCurrentColumnNumber
  - XML_GetCurrentLineNumber
  - XML_GetInputContext
    Other changes:
    [#976] #977  Autotools: Integrate files "fuzz/xml_lpm_fuzzer.{cpp,proto}"
    with Automake that were missing from 2.7.0 release tarballs
    [#983] #984  Fix printf format specifiers for 32bit Emscripten
    [#992]  docs: Promote OpenSSF Best Practices self-certification
    [#978]  tests/benchmark: Resolve mistaken double close
    [#986]  Address compiler warnings
    [#990] #993  Version info bumped from 11:1:10 (libexpat*.so.1.10.1)
    to 11:2:10 (libexpat*.so.1.10.2); see https://verbump.de/
    for what these numbers do
    Infrastructure:
    [#982]  CI: Start running Perl XML::Parser integration tests
    [#987]  CI: Enforce Clang Static Analyzer clean code
    [#991]  CI: Re-enable warning clang-analyzer-valist.Uninitialized
    for clang-tidy
    [#981]  CI: Cover compilation with musl
    [#983] #984  CI: Cover compilation with 32bit Emscripten
    [#976] #977  CI: Protect against fuzzer files missing from future
    release archives</changelog>
  <changelog author="martin.schreiner@suse.com" date="1759147200">- Fix CVE-2025-59375 / bsc#1249584.
- Add patch file:
  * CVE-2025-59375.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770120000">- security update
- added patches
  CVE-2026-24515 [bsc#1257144], NULL dereference (CWE-476) due to function XML_ExternalEntityParserCreate() failing to copy the encoding handler data passed to XML_SetUnknownEncodingHandler() from the parent to the subparser
  * expat-CVE-2026-24515.patch
  CVE-2026-25210 [bsc#1257496], lack of buffer size check can lead to an integer overflow
  * expat-CVE-2026-25210.patch</changelog>
  <changelog author="david.anes@suse.com" date="1774526400">- security update:
  * CVE-2026-32776: expat: libexpat: NULL pointer dereference when
    processing empty external parameter entities inside an entity
    declaration value (bsc#1259726)
  - Added patch expat-CVE-2026-32776.patch
  * CVE-2026-32777: expat: libexpat: denial of service due to
    infinite loop in DTD content parsing (bsc#1259711)
  - Added patch expat-CVE-2026-32777.patch
  * CVE-2026-32778: expat: libexpat: NULL pointer dereference in
    `setContext` on retry after an out-of-memory condition (bsc#1259729)
  - Added patch expat-CVE-2026-32778.patch</changelog>
</package>
<package pkgid="2cd4ba54de8cfeeac851c5eccf781abae04a7ae8d2431110cc3a722119f99903" name="expat" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="150700.3.12.1"/>
  <changelog author="david.anes@suse.com" date="1645358400">- update to 2.4.6 (bsc#1196168, CVE-2022-25313):
  * Bug fixes:
  - Fix a regression introduced by the fix for CVE-2022-25313
    in release 2.4.5 that affects applications that (1)
    call function XML_SetElementDeclHandler and (2) are
    parsing XML that contains nested element declarations
    (e.g. "&lt;!ELEMENT junk ((bar|foo|xyz+), zebra*)&gt;").
  - Version info bumped from 9:5:8 to 9:6:8;
    see https://verbump.de/ for what these numbers do.</changelog>
  <changelog author="david.anes@suse.com" date="1646481600">- update to 2.4.7 (bsc#1196784, CVE-2022-25236):
  * Bug fixes:
  - Relax fix to CVE-2022-25236 (introduced with release 2.4.5)
    with regard to all valid URI characters (RFC 3986),
    i.e. the following set (excluding whitespace):
    ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz
    0123456789 % -._~ :/?#[]@ !$&amp;'()*+,;=
  * Other changes:
  - CMake|Windows: Store Expat version in the DLL
  - Document consequences of namespace separator choices not just
    in doc/reference.html but also in header &lt;expat.h&gt;
  - Document Expat's lack of validation of namespace URIs against
    RFC 3986, and that the XML 1.0r4 specification doesn't
    require Expat to validate namespace URIs, and that Expat
    may do more in that regard in future releases.
    If you find need for strict RFC 3986 URI validation on
    application level today, https://uriparser.github.io/ may
    be of interest.
  - Fix documentation of XML_EndDoctypeDeclHandler in &lt;expat.h&gt;
  - Document that a call to XML_FreeContentModel can be done at
    a later time from outside the element declaration handler
  - Make hardcoded namespace URIs easier to find in code
  - Update documentation on use of XML_POOR_ENTOPY on Solaris
  - tests: Resolve use of macros NAN and INFINITY for GNU G++
    4.8.2 on Solaris.
  - Version info bumped from 9:6:8 to 9:7:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1648555200">- update to 2.4.8:
  * Other changes:
  - pkg-config: Move "-lm" to section "Libs.private"
  - CMake|MSVC: Fix pkg-config section "Libs"
  - CMake|macOS: Start using linker arguments
    "-compatibility_version &lt;version&gt;" and
    "-current_version &lt;version&gt;" in a way compatible with GNU
    Libtool
  - Version info bumped from 9:7:8 to 9:8:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- update to 2.4.9: (bsc#1203438)
  * Security fixes:
  - CVE-2022-40674 -- Heap use-after-free vulnerability in
    function doContent. Expected impact is denial of service
    or potentially arbitrary code execution.
  * Bug fixes:
  - MinGW: Fix mis-compilation for -D__USE_MINGW_ANSI_STDIO=0
  - docs: Fix documentation on effect of switch XML_DTD on
    symbol visibility in doc/reference.html
  * Other changes:
  - MinGW: Make fix-xmltest-log.sh drop more Wine bug output
  - Autotools: Sync CMake templates with CMake 3.22
  - CMake: Migrate from use of CMAKE_*_POSTFIX to
    dedicated variables EXPAT_*_POSTFIX to stop affecting
    other projects
  - Windows|CMake: Add missing -DXML_STATIC to test runners
    and fuzzers
  - Windows|CMake: Render .def file from a template to fix
    linking with -DEXPAT_DTD=OFF and/or -DEXPAT_ATTR_INFO=ON
  - MinGW|CMake: Apply MSVC .def file when linking
  - MinGW|CMake: Sync library name with GNU Autotools,
    i.e. produce libexpat-1.dll rather than libexpat.dll
    by default.  Filename libexpat.dll.a is unaffected.
  - MinGW|CMake: Set missing variable CMAKE_RC_COMPILER in
    toolchain file "cmake/mingw-toolchain.cmake" to avoid
    error "windres: Command not found" on e.g. Ubuntu 20.04
  - CMake: Unify inconsistent use of set() and option() in
    context of public build time options to take need for
    set(.. FORCE) in projects using Expat by means of
    add_subdirectory(..) off Expat's users' shoulders
  - Stop exporting API symbols when building a static library
  - Resolve use of deprecated "fgrep" by "grep -F"
  - CMake: Make documentation on variables a bit more consistent
  - CMake: Drop leading whitespace from a #cmakedefine line in
    file expat_config.h.cmake
  - xmlwf: Fix harmless variable mix-up in function nsattcmp
  - Address Cppcheck warnings
  - Address Clang 15 compiler warnings
  - Version info bumped from 9:8:8 to 9:9:8;
    see https://verbump.de/ for what these numbers do
  * Infrastructure:
  - CI: Windows: Start covering MSVC 2022
  - CI: macOS: Migrate off deprecated macOS 10.15
  - CI: Linux: Make migration off deprecated Ubuntu 18.04 work
  - CI: Upgrade Clang from 14 to 15
  - apply-clang-format.sh: Add support for BSD find
  - coverage.sh: Exclude MinGW headers
  - coverage.sh: Fix name collision for -funsigned-char</changelog>
  <changelog author="david.anes@suse.com" date="1666785600">- Update to 2.5.0: (bsc#1204708)
  * Security fixes:
  - CVE-2022-43680 -- Fix heap use-after-free after overeager
    destruction of a shared DTD in function
    XML_ExternalEntityParserCreate in out-of-memory situations.
    Expected impact is denial of service or potentially arbitrary
    code execution.
  * Bug fixes:
  - Fix curruption from undefined entities
  - Fix case when parsing was suspended while processing nested
    entities
  - Stop leaking opening tag bindings after a closing tag mismatch
    error where a parser is reset through XML_ParserReset and then
    reused to parse
  - CMake: Fix generation of pkg-config file
  - MinGW|CMake: Fix static library name
  * Other changes:
  - Protect header expat_config.h from multiple inclusion
  - examples: Make use of XML_GetBuffer and be more consistent
    across examples
  - Address compiler warnings
  - Version info bumped from 9:9:8 to 9:10:8; see
    https://verbump.de/ for what these numbers do</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1670760000">- add upstream signing key and validate source signature</changelog>
  <changelog author="david.anes@suse.com" date="1707739200">- Update keyring automatically from keyserver during OBS service run.
- Explicitly use --without-docbook (before it was implicit).
- Include missing files for documentation and examples.
- Add manpage for xmlwf, which is now available in the released tarball.
- Clean the spec file a bit.
- Update to 2.6.0:
  * Security fixes:
  - CVE-2023-52425 (boo#1219559)
  - - Fix quadratic runtime issues with big tokens
    that can cause denial of service, in partial where
    dealing with compressed XML input.  Applications
    that parsed a document in one go -- a single call to
    functions XML_Parse or XML_ParseBuffer -- were not affected.
    The smaller the chunks/buffers you use for parsing
    previously, the bigger the problem prior to the fix.
    Backporters should be careful to no omit parts of
    pull request #789 and to include earlier pull request #771,
    in order to not break the fix.
  - CVE-2023-52426 (boo#1219561)
  - - Fix billion laughs attacks for users
    compiling *without* XML_DTD defined (which is not common).
    Users with XML_DTD defined have been protected since
    Expat &gt;=2.4.0 (and that was CVE-2013-0340 back then).
  * Bug fixes:
  - Fix parse-size-dependent "invalid token" error for
    external entities that start with a byte order mark
  - Fix NULL pointer dereference in setContext via
    XML_ExternalEntityParserCreate for compilation with
    XML_DTD undefined
  - Protect against closing entities out of order
  * Other changes:
  - Improve support for arc4random/arc4random_buf
  - Improve buffer growth in XML_GetBuffer and XML_Parse
  - xmlwf: Support --help and --version
  - xmlwf: Support custom buffer size for XML_GetBuffer and read
  - xmlwf: Improve language and URL clickability in help output
  - examples: Add new example "element_declarations.c"
  - Be stricter about macro XML_CONTEXT_BYTES at build time
  - Make inclusion to expat_config.h consistent
  - Autotools: configure.ac: Support --disable-maintainer-mode
  - Autotools: Sync CMake templates with CMake 3.26
  - Autotools: Make installation of shipped man page doc/xmlwf.1
    independent of docbook2man availability
  - Autotools|CMake: Add missing -DXML_STATIC to pkg-config file
    section "Cflags.private" in order to fix compilation
    against static libexpat using pkg-config on Windows
  - Autotools|CMake: Require a C99 compiler
    (a de-facto requirement already since Expat 2.2.2 of 2017)
  - Autotools|CMake: Fix PACKAGE_BUGREPORT variable
  - Autotools|CMake: Make test suite require a C++11 compiler
  - CMake: Require CMake &gt;=3.5.0
  - CMake: Lowercase off_t and size_t to help a bug in Meson
  - CMake: Sort xmlwf sources alphabetically
  - CMake|Windows: Fix generation of DLL file version info
  - CMake: Build tests/benchmark/benchmark.c as well for
    a build with -DEXPAT_BUILD_TESTS=ON
  - docs: Document the importance of isFinal + adjust tests
    accordingly
  - docs: Improve use of "NULL" and "null"
  - docs: Be specific about version of XML (XML 1.0r4)
    and version of C (C99); (XML 1.0r5 will need a sponsor.)
  - docs: reference.html: Promote function XML_ParseBuffer more
  - docs: reference.html: Add HTML anchors to XML_* macros
  - docs: reference.html: Upgrade to OK.css 1.2.0
  - docs: Fix typos
  - docs|CI: Use HTTPS URLs instead of HTTP at various places
  - Address compiler warnings
  - Address clang-tidy warnings
  - Version info bumped from 9:10:8 (libexpat*.so.1.8.10)
    to 10:0:9 (libexpat*.so.1.9.0); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1708430400">- Fix handling of xmlwf.1 to avoid workarounds in specfile:
  * Added libxml2-fix-xmlwf.1-handling.patch
- Call buildconf.sh to avoid (future) issues with expat_config.h.in</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1709294400">- update to 2.6.1:
  * Expose billion laughs API with XML_DTD defined and XML_GE
    undefined, regression from 2.6.0
  * Make tests independent of CPU speed, and thus more robust
- drop libxml2-fix-xmlwf.1-handling.patch, upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1710331200">- update to 2.6.2:
  * CVE-2024-28757 -- Prevent billion laughs attacks with isolated
    use of external parsers (boo#1221289)
  * Reject direct parameter entity recursion and avoid the related
    undefined behavior</changelog>
  <changelog author="david.anes@suse.com" date="1725537600">- Update to 2.6.3:
  * Security fixes:
  - CVE-2024-45490, bsc#1229930 -- Calling function XML_ParseBuffer with
    len &lt; 0 without noticing and then calling XML_GetBuffer
    will have XML_ParseBuffer fail to recognize the problem
    and XML_GetBuffer corrupt memory.
    With the fix, XML_ParseBuffer now complains with error
    XML_ERROR_INVALID_ARGUMENT just like sibling XML_Parse
    has been doing since Expat 2.2.1, and now documented.
    Impact is denial of service to potentially artitrary code
    execution.
  - CVE-2024-45491, bsc#1229931 -- Internal function dtdCopy can have an
    integer overflow for nDefaultAtts on 32-bit platforms
    (where UINT_MAX equals SIZE_MAX).
    Impact is denial of service to potentially artitrary code
    execution.
  - CVE-2024-45492, bsc#1229932 -- Internal function nextScaffoldPart can
    have an integer overflow for m_groupSize on 32-bit
    platforms (where UINT_MAX equals SIZE_MAX).
    Impact is denial of service to potentially artitrary code
    execution.
  * Other changes:
  - Autotools: Sync CMake templates with CMake 3.28
  - Autotools: Always provide path to find(1) for portability
  - Autotools: Ensure that the m4 directory always exists.
  - Autotools: Simplify handling of SIZEOF_VOID_P
  - Autotools: Support non-GNU sed
  - Autotools|CMake: Fix main() to main(void)
  - Autotools|CMake: Fix compile tests for HAVE_SYSCALL_GETRANDOM
  - Autotools|CMake: Stop requiring dos2unix
  - CMake: Fix check for symbols size_t and off_t
  - docs|tests: Convert README to Markdown and update
  - Windows: Drop support for Visual Studio &lt;=15.0/2017
  - Drop needless XML_DTD guards around is_param access
  - Fix typo in a code comment
  - Version info bumped from 10:2:9 (libexpat*.so.1.9.2)
    to 10:3:9 (libexpat*.so.1.9.3); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1727352000">- updated keyring [https://build.suse.de/request/show/345282]
- modified sources
  % expat.keyring</changelog>
  <changelog author="pgajdos@suse.com" date="1730980800">- version update to 2.6.4
  * Security fixes: [bsc#1232601][bsc#1232579]
    [#915]  CVE-2024-50602 -- Fix crash within function XML_ResumeParser
    from a NULL pointer dereference by disallowing function
    XML_StopParser to (stop or) suspend an unstarted parser.
    A new error code XML_ERROR_NOT_STARTED was introduced to
    properly communicate this situation.  // CWE-476 CWE-754
  * Other changes:
    [#903]  CMake: Add alias target "expat::expat"
    [#905]  docs: Document use via CMake &gt;=3.18 with FetchContent
    and SOURCE_SUBDIR and its consequences
    [#902]  tests: Reduce use of global parser instance
    [#904]  tests: Resolve duplicate handler
  [#317] #918  tests: Improve tests on doctype closing (ex CVE-2019-15903)
    [#914]  Fix signedness of format strings
  [#919] #920  Version info bumped from 10:3:9 (libexpat*.so.1.9.3)
    to 11:0:10 (libexpat*.so.1.10.0); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1731412800">- no source changes, just adding jira reference: jsc#SLE-21253</changelog>
  <changelog author="pgajdos@suse.com" date="1741953600">- version update to 2.7.0 (CVE-2024-8176 [bsc#1239618])
  * Security fixes:
    [#893] #973  CVE-2024-8176 -- Fix crash from chaining a large number
    of entities caused by stack overflow by resolving use of
    recursion, for all three uses of entities:
  - general entities in character data ("&lt;e&gt;&amp;g1;&lt;/e&gt;")
  - general entities in attribute values ("&lt;e k1='&amp;g1;'/&gt;")
  - parameter entities ("%p1;")
    Known impact is (reliable and easy) denial of service:
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:H/RL:O/RC:C
    (Base Score: 7.5, Temporal Score: 7.2)
    Please note that a layer of compression around XML can
    significantly reduce the minimum attack payload size.
  * Other changes:
    [#935] #937  Autotools: Make generated CMake files look for
    libexpat.@SO_MAJOR@.dylib on macOS
    [#925]  Autotools: Sync CMake templates with CMake 3.29
  [#945] #962 #966  CMake: Drop support for CMake &lt;3.13
    [#942]  CMake: Small fuzzing related improvements
    [#921]  docs: Add missing documentation of error code
    XML_ERROR_NOT_STARTED that was introduced with 2.6.4
    [#941]  docs: Document need for C++11 compiler for use from C++
    [#959]  tests/benchmark: Fix a (harmless) TOCTTOU
    [#944]  Windows: Fix installer target location of file xmlwf.xml
    for CMake
    [#953]  Windows: Address warning -Wunknown-warning-option
    about -Wno-pedantic-ms-format from LLVM MinGW
    [#971]  Address Cppcheck warnings
    [#969] #970  Mass-migrate links from http:// to https://
    [#947] #958 ..
    [#974] #975  Document changes since the previous release
    [#974] #975  Version info bumped from 11:0:10 (libexpat*.so.1.10.0)
    to 11:1:10 (libexpat*.so.1.10.1); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1743076800">- version update to 2.7.0 for SLE-15-SP7 (jsc#PED-12507)</changelog>
  <changelog author="pgajdos@suse.com" date="1743163200">- version update to 2.7.1
    Bug fixes:
    [#980] #989  Restore event pointer behavior from Expat 2.6.4
    (that the fix to CVE-2024-8176 changed in 2.7.0);
    affected API functions are:
  - XML_GetCurrentByteCount
  - XML_GetCurrentByteIndex
  - XML_GetCurrentColumnNumber
  - XML_GetCurrentLineNumber
  - XML_GetInputContext
    Other changes:
    [#976] #977  Autotools: Integrate files "fuzz/xml_lpm_fuzzer.{cpp,proto}"
    with Automake that were missing from 2.7.0 release tarballs
    [#983] #984  Fix printf format specifiers for 32bit Emscripten
    [#992]  docs: Promote OpenSSF Best Practices self-certification
    [#978]  tests/benchmark: Resolve mistaken double close
    [#986]  Address compiler warnings
    [#990] #993  Version info bumped from 11:1:10 (libexpat*.so.1.10.1)
    to 11:2:10 (libexpat*.so.1.10.2); see https://verbump.de/
    for what these numbers do
    Infrastructure:
    [#982]  CI: Start running Perl XML::Parser integration tests
    [#987]  CI: Enforce Clang Static Analyzer clean code
    [#991]  CI: Re-enable warning clang-analyzer-valist.Uninitialized
    for clang-tidy
    [#981]  CI: Cover compilation with musl
    [#983] #984  CI: Cover compilation with 32bit Emscripten
    [#976] #977  CI: Protect against fuzzer files missing from future
    release archives</changelog>
  <changelog author="martin.schreiner@suse.com" date="1759147200">- Fix CVE-2025-59375 / bsc#1249584.
- Add patch file:
  * CVE-2025-59375.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770120000">- security update
- added patches
  CVE-2026-24515 [bsc#1257144], NULL dereference (CWE-476) due to function XML_ExternalEntityParserCreate() failing to copy the encoding handler data passed to XML_SetUnknownEncodingHandler() from the parent to the subparser
  * expat-CVE-2026-24515.patch
  CVE-2026-25210 [bsc#1257496], lack of buffer size check can lead to an integer overflow
  * expat-CVE-2026-25210.patch</changelog>
  <changelog author="david.anes@suse.com" date="1774526400">- security update:
  * CVE-2026-32776: expat: libexpat: NULL pointer dereference when
    processing empty external parameter entities inside an entity
    declaration value (bsc#1259726)
  - Added patch expat-CVE-2026-32776.patch
  * CVE-2026-32777: expat: libexpat: denial of service due to
    infinite loop in DTD content parsing (bsc#1259711)
  - Added patch expat-CVE-2026-32777.patch
  * CVE-2026-32778: expat: libexpat: NULL pointer dereference in
    `setContext` on retry after an out-of-memory condition (bsc#1259729)
  - Added patch expat-CVE-2026-32778.patch</changelog>
</package>
<package pkgid="bf151aae4dc812ea754b9565428f0b86fc639bd8bfb7a1d78ff7d65424e2b686" name="expat" arch="src">
  <version epoch="0" ver="2.7.1" rel="150700.3.3.1"/>
  <changelog author="dmueller@suse.com" date="1642420800">- update to 2.4.3 (bsc#1194251, bsc#1194362, bsc#1194474,
    bsc#1194476, bsc#1194477, bsc#1194478, bsc#1194479, bsc#1194480):
  * CVE-2021-45960 -- Fix issues with left shifts by &gt;=29 places
    resulting in
    a) realloc acting as free
    b) realloc allocating too few bytes
    c) undefined behavior
    depending on architecture and precise value
    for XML documents with &gt;=2^27+1 prefixed attributes
    on a single XML tag a la
    "&lt;r xmlns:a='[..]' a:a123='[..]' [..] /&gt;"
    where XML_ParserCreateNS is used to create the parser
    (which needs argument "-n" when running xmlwf).
    Impact is denial of service, or more.
  * CVE-2021-46143 (ZDI-CAN-16157) -- Fix integer overflow
    on variable m_groupSize in function doProlog leading
    to realloc acting as free.
    Impact is denial of service or more.
  * CVE-2022-22822 to CVE-2022-22827 -- Prevent integer overflows
    near memory allocation at multiple places.  Mitre assigned
    a dedicated CVE for each involved internal C function:
  - CVE-2022-22822 for function addBinding
  - CVE-2022-22823 for function build_model
  - CVE-2022-22824 for function defineAttribute
  - CVE-2022-22825 for function lookup
  - CVE-2022-22826 for function nextScaffoldPart
  - CVE-2022-22827 for function storeAtts
    Impact is denial of service or more.</changelog>
  <changelog author="david.anes@suse.com" date="1643630400">- update to 2.4.4 (bsc#1195217, bsc#1195054):
  * Security fixes:
  - CVE-2022-23852 -- Fix signed integer overflow
    (undefined behavior) in function XML_GetBuffer
    that is also called by function XML_Parse internally)
    for when XML_CONTEXT_BYTES is defined to &gt;0 (which is both
    common and default).
    Impact is denial of service or more.
  - CVE-2022-23990 -- Fix unsigned integer overflow in function
    doProlog triggered by large content in element type
    declarations when there is an element declaration handler
    present (from a prior call to XML_SetElementDeclHandler).
    Impact is denial of service or more.
  * Bug fixes:
  - xmlwf: Fix a memory leak on output file opening error
  * Other changes:
  - Version info bumped from 9:3:8 to 9:4:8;
    see https://verbump.de/ for what these numbers do
  * Drop unused file valid-xhtml10.png</changelog>
  <changelog author="david.anes@suse.com" date="1645272000">- update to 2.4.5 (bsc#1196171, bsc#1196169, bsc#1196168,
  bsc#1196026, bsc#1196025):
  * Security fixes:
  - CVE-2022-25235 -- Passing malformed 2- and 3-byte UTF-8
    sequences (e.g. from start tag names) to the XML
    processing application on top of Expat can cause
    arbitrary damage (e.g. code execution) depending
    on how invalid UTF-8 is handled inside the XML
    processor; validation was not their job but Expat's.
    Exploits with code execution are known to exist.
  - CVE-2022-25236 -- Passing (one or more) namespace separator
    characters in "xmlns[:prefix]" attribute values
    made Expat send malformed tag names to the XML
    processor on top of Expat which can cause
    arbitrary damage (e.g. code execution) depending
    on such unexpectable cases are handled inside the XML
    processor; validation was not their job but Expat's.
    Exploits with code execution are known to exist.
  - CVE-2022-25313 -- Fix stack exhaustion in doctype parsing
    that could be triggered by e.g. a 2 megabytes
    file with a large number of opening braces.
    Expected impact is denial of service or potentially
    arbitrary code execution.
  - CVE-2022-25314 -- Fix integer overflow in function copyString;
    only affects the encoding name parameter at parser creation
    time which is often hardcoded (rather than user input),
    takes a value in the gigabytes to trigger, and a 64-bit
    machine.  Expected impact is denial of service.
  - CVE-2022-25315 -- Fix integer overflow in function storeRawNames;
    needs input in the gigabytes and a 64-bit machine.
    Expected impact is denial of service or potentially
    arbitrary code execution.
  * Other changes:
  - Version info bumped from 9:4:8 to 9:5:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1645358400">- update to 2.4.6 (bsc#1196168, CVE-2022-25313):
  * Bug fixes:
  - Fix a regression introduced by the fix for CVE-2022-25313
    in release 2.4.5 that affects applications that (1)
    call function XML_SetElementDeclHandler and (2) are
    parsing XML that contains nested element declarations
    (e.g. "&lt;!ELEMENT junk ((bar|foo|xyz+), zebra*)&gt;").
  - Version info bumped from 9:5:8 to 9:6:8;
    see https://verbump.de/ for what these numbers do.</changelog>
  <changelog author="david.anes@suse.com" date="1646481600">- update to 2.4.7 (bsc#1196784, CVE-2022-25236):
  * Bug fixes:
  - Relax fix to CVE-2022-25236 (introduced with release 2.4.5)
    with regard to all valid URI characters (RFC 3986),
    i.e. the following set (excluding whitespace):
    ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz
    0123456789 % -._~ :/?#[]@ !$&amp;'()*+,;=
  * Other changes:
  - CMake|Windows: Store Expat version in the DLL
  - Document consequences of namespace separator choices not just
    in doc/reference.html but also in header &lt;expat.h&gt;
  - Document Expat's lack of validation of namespace URIs against
    RFC 3986, and that the XML 1.0r4 specification doesn't
    require Expat to validate namespace URIs, and that Expat
    may do more in that regard in future releases.
    If you find need for strict RFC 3986 URI validation on
    application level today, https://uriparser.github.io/ may
    be of interest.
  - Fix documentation of XML_EndDoctypeDeclHandler in &lt;expat.h&gt;
  - Document that a call to XML_FreeContentModel can be done at
    a later time from outside the element declaration handler
  - Make hardcoded namespace URIs easier to find in code
  - Update documentation on use of XML_POOR_ENTOPY on Solaris
  - tests: Resolve use of macros NAN and INFINITY for GNU G++
    4.8.2 on Solaris.
  - Version info bumped from 9:6:8 to 9:7:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1648555200">- update to 2.4.8:
  * Other changes:
  - pkg-config: Move "-lm" to section "Libs.private"
  - CMake|MSVC: Fix pkg-config section "Libs"
  - CMake|macOS: Start using linker arguments
    "-compatibility_version &lt;version&gt;" and
    "-current_version &lt;version&gt;" in a way compatible with GNU
    Libtool
  - Version info bumped from 9:7:8 to 9:8:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- update to 2.4.9: (bsc#1203438)
  * Security fixes:
  - CVE-2022-40674 -- Heap use-after-free vulnerability in
    function doContent. Expected impact is denial of service
    or potentially arbitrary code execution.
  * Bug fixes:
  - MinGW: Fix mis-compilation for -D__USE_MINGW_ANSI_STDIO=0
  - docs: Fix documentation on effect of switch XML_DTD on
    symbol visibility in doc/reference.html
  * Other changes:
  - MinGW: Make fix-xmltest-log.sh drop more Wine bug output
  - Autotools: Sync CMake templates with CMake 3.22
  - CMake: Migrate from use of CMAKE_*_POSTFIX to
    dedicated variables EXPAT_*_POSTFIX to stop affecting
    other projects
  - Windows|CMake: Add missing -DXML_STATIC to test runners
    and fuzzers
  - Windows|CMake: Render .def file from a template to fix
    linking with -DEXPAT_DTD=OFF and/or -DEXPAT_ATTR_INFO=ON
  - MinGW|CMake: Apply MSVC .def file when linking
  - MinGW|CMake: Sync library name with GNU Autotools,
    i.e. produce libexpat-1.dll rather than libexpat.dll
    by default.  Filename libexpat.dll.a is unaffected.
  - MinGW|CMake: Set missing variable CMAKE_RC_COMPILER in
    toolchain file "cmake/mingw-toolchain.cmake" to avoid
    error "windres: Command not found" on e.g. Ubuntu 20.04
  - CMake: Unify inconsistent use of set() and option() in
    context of public build time options to take need for
    set(.. FORCE) in projects using Expat by means of
    add_subdirectory(..) off Expat's users' shoulders
  - Stop exporting API symbols when building a static library
  - Resolve use of deprecated "fgrep" by "grep -F"
  - CMake: Make documentation on variables a bit more consistent
  - CMake: Drop leading whitespace from a #cmakedefine line in
    file expat_config.h.cmake
  - xmlwf: Fix harmless variable mix-up in function nsattcmp
  - Address Cppcheck warnings
  - Address Clang 15 compiler warnings
  - Version info bumped from 9:8:8 to 9:9:8;
    see https://verbump.de/ for what these numbers do
  * Infrastructure:
  - CI: Windows: Start covering MSVC 2022
  - CI: macOS: Migrate off deprecated macOS 10.15
  - CI: Linux: Make migration off deprecated Ubuntu 18.04 work
  - CI: Upgrade Clang from 14 to 15
  - apply-clang-format.sh: Add support for BSD find
  - coverage.sh: Exclude MinGW headers
  - coverage.sh: Fix name collision for -funsigned-char</changelog>
  <changelog author="david.anes@suse.com" date="1666785600">- Update to 2.5.0: (bsc#1204708)
  * Security fixes:
  - CVE-2022-43680 -- Fix heap use-after-free after overeager
    destruction of a shared DTD in function
    XML_ExternalEntityParserCreate in out-of-memory situations.
    Expected impact is denial of service or potentially arbitrary
    code execution.
  * Bug fixes:
  - Fix curruption from undefined entities
  - Fix case when parsing was suspended while processing nested
    entities
  - Stop leaking opening tag bindings after a closing tag mismatch
    error where a parser is reset through XML_ParserReset and then
    reused to parse
  - CMake: Fix generation of pkg-config file
  - MinGW|CMake: Fix static library name
  * Other changes:
  - Protect header expat_config.h from multiple inclusion
  - examples: Make use of XML_GetBuffer and be more consistent
    across examples
  - Address compiler warnings
  - Version info bumped from 9:9:8 to 9:10:8; see
    https://verbump.de/ for what these numbers do</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1670760000">- add upstream signing key and validate source signature</changelog>
  <changelog author="david.anes@suse.com" date="1707739200">- Update keyring automatically from keyserver during OBS service run.
- Explicitly use --without-docbook (before it was implicit).
- Include missing files for documentation and examples.
- Add manpage for xmlwf, which is now available in the released tarball.
- Clean the spec file a bit.
- Update to 2.6.0:
  * Security fixes:
  - CVE-2023-52425 (boo#1219559)
  - - Fix quadratic runtime issues with big tokens
    that can cause denial of service, in partial where
    dealing with compressed XML input.  Applications
    that parsed a document in one go -- a single call to
    functions XML_Parse or XML_ParseBuffer -- were not affected.
    The smaller the chunks/buffers you use for parsing
    previously, the bigger the problem prior to the fix.
    Backporters should be careful to no omit parts of
    pull request #789 and to include earlier pull request #771,
    in order to not break the fix.
  - CVE-2023-52426 (boo#1219561)
  - - Fix billion laughs attacks for users
    compiling *without* XML_DTD defined (which is not common).
    Users with XML_DTD defined have been protected since
    Expat &gt;=2.4.0 (and that was CVE-2013-0340 back then).
  * Bug fixes:
  - Fix parse-size-dependent "invalid token" error for
    external entities that start with a byte order mark
  - Fix NULL pointer dereference in setContext via
    XML_ExternalEntityParserCreate for compilation with
    XML_DTD undefined
  - Protect against closing entities out of order
  * Other changes:
  - Improve support for arc4random/arc4random_buf
  - Improve buffer growth in XML_GetBuffer and XML_Parse
  - xmlwf: Support --help and --version
  - xmlwf: Support custom buffer size for XML_GetBuffer and read
  - xmlwf: Improve language and URL clickability in help output
  - examples: Add new example "element_declarations.c"
  - Be stricter about macro XML_CONTEXT_BYTES at build time
  - Make inclusion to expat_config.h consistent
  - Autotools: configure.ac: Support --disable-maintainer-mode
  - Autotools: Sync CMake templates with CMake 3.26
  - Autotools: Make installation of shipped man page doc/xmlwf.1
    independent of docbook2man availability
  - Autotools|CMake: Add missing -DXML_STATIC to pkg-config file
    section "Cflags.private" in order to fix compilation
    against static libexpat using pkg-config on Windows
  - Autotools|CMake: Require a C99 compiler
    (a de-facto requirement already since Expat 2.2.2 of 2017)
  - Autotools|CMake: Fix PACKAGE_BUGREPORT variable
  - Autotools|CMake: Make test suite require a C++11 compiler
  - CMake: Require CMake &gt;=3.5.0
  - CMake: Lowercase off_t and size_t to help a bug in Meson
  - CMake: Sort xmlwf sources alphabetically
  - CMake|Windows: Fix generation of DLL file version info
  - CMake: Build tests/benchmark/benchmark.c as well for
    a build with -DEXPAT_BUILD_TESTS=ON
  - docs: Document the importance of isFinal + adjust tests
    accordingly
  - docs: Improve use of "NULL" and "null"
  - docs: Be specific about version of XML (XML 1.0r4)
    and version of C (C99); (XML 1.0r5 will need a sponsor.)
  - docs: reference.html: Promote function XML_ParseBuffer more
  - docs: reference.html: Add HTML anchors to XML_* macros
  - docs: reference.html: Upgrade to OK.css 1.2.0
  - docs: Fix typos
  - docs|CI: Use HTTPS URLs instead of HTTP at various places
  - Address compiler warnings
  - Address clang-tidy warnings
  - Version info bumped from 9:10:8 (libexpat*.so.1.8.10)
    to 10:0:9 (libexpat*.so.1.9.0); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1708430400">- Fix handling of xmlwf.1 to avoid workarounds in specfile:
  * Added libxml2-fix-xmlwf.1-handling.patch
- Call buildconf.sh to avoid (future) issues with expat_config.h.in</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1709294400">- update to 2.6.1:
  * Expose billion laughs API with XML_DTD defined and XML_GE
    undefined, regression from 2.6.0
  * Make tests independent of CPU speed, and thus more robust
- drop libxml2-fix-xmlwf.1-handling.patch, upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1710331200">- update to 2.6.2:
  * CVE-2024-28757 -- Prevent billion laughs attacks with isolated
    use of external parsers (boo#1221289)
  * Reject direct parameter entity recursion and avoid the related
    undefined behavior</changelog>
  <changelog author="david.anes@suse.com" date="1725537600">- Update to 2.6.3:
  * Security fixes:
  - CVE-2024-45490, bsc#1229930 -- Calling function XML_ParseBuffer with
    len &lt; 0 without noticing and then calling XML_GetBuffer
    will have XML_ParseBuffer fail to recognize the problem
    and XML_GetBuffer corrupt memory.
    With the fix, XML_ParseBuffer now complains with error
    XML_ERROR_INVALID_ARGUMENT just like sibling XML_Parse
    has been doing since Expat 2.2.1, and now documented.
    Impact is denial of service to potentially artitrary code
    execution.
  - CVE-2024-45491, bsc#1229931 -- Internal function dtdCopy can have an
    integer overflow for nDefaultAtts on 32-bit platforms
    (where UINT_MAX equals SIZE_MAX).
    Impact is denial of service to potentially artitrary code
    execution.
  - CVE-2024-45492, bsc#1229932 -- Internal function nextScaffoldPart can
    have an integer overflow for m_groupSize on 32-bit
    platforms (where UINT_MAX equals SIZE_MAX).
    Impact is denial of service to potentially artitrary code
    execution.
  * Other changes:
  - Autotools: Sync CMake templates with CMake 3.28
  - Autotools: Always provide path to find(1) for portability
  - Autotools: Ensure that the m4 directory always exists.
  - Autotools: Simplify handling of SIZEOF_VOID_P
  - Autotools: Support non-GNU sed
  - Autotools|CMake: Fix main() to main(void)
  - Autotools|CMake: Fix compile tests for HAVE_SYSCALL_GETRANDOM
  - Autotools|CMake: Stop requiring dos2unix
  - CMake: Fix check for symbols size_t and off_t
  - docs|tests: Convert README to Markdown and update
  - Windows: Drop support for Visual Studio &lt;=15.0/2017
  - Drop needless XML_DTD guards around is_param access
  - Fix typo in a code comment
  - Version info bumped from 10:2:9 (libexpat*.so.1.9.2)
    to 10:3:9 (libexpat*.so.1.9.3); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1727352000">- updated keyring [https://build.suse.de/request/show/345282]
- modified sources
  % expat.keyring</changelog>
  <changelog author="pgajdos@suse.com" date="1730980800">- version update to 2.6.4
  * Security fixes: [bsc#1232601][bsc#1232579]
    [#915]  CVE-2024-50602 -- Fix crash within function XML_ResumeParser
    from a NULL pointer dereference by disallowing function
    XML_StopParser to (stop or) suspend an unstarted parser.
    A new error code XML_ERROR_NOT_STARTED was introduced to
    properly communicate this situation.  // CWE-476 CWE-754
  * Other changes:
    [#903]  CMake: Add alias target "expat::expat"
    [#905]  docs: Document use via CMake &gt;=3.18 with FetchContent
    and SOURCE_SUBDIR and its consequences
    [#902]  tests: Reduce use of global parser instance
    [#904]  tests: Resolve duplicate handler
  [#317] #918  tests: Improve tests on doctype closing (ex CVE-2019-15903)
    [#914]  Fix signedness of format strings
  [#919] #920  Version info bumped from 10:3:9 (libexpat*.so.1.9.3)
    to 11:0:10 (libexpat*.so.1.10.0); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1731412800">- no source changes, just adding jira reference: jsc#SLE-21253</changelog>
  <changelog author="pgajdos@suse.com" date="1741953600">- version update to 2.7.0 (CVE-2024-8176 [bsc#1239618])
  * Security fixes:
    [#893] #973  CVE-2024-8176 -- Fix crash from chaining a large number
    of entities caused by stack overflow by resolving use of
    recursion, for all three uses of entities:
  - general entities in character data ("&lt;e&gt;&amp;g1;&lt;/e&gt;")
  - general entities in attribute values ("&lt;e k1='&amp;g1;'/&gt;")
  - parameter entities ("%p1;")
    Known impact is (reliable and easy) denial of service:
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:H/RL:O/RC:C
    (Base Score: 7.5, Temporal Score: 7.2)
    Please note that a layer of compression around XML can
    significantly reduce the minimum attack payload size.
  * Other changes:
    [#935] #937  Autotools: Make generated CMake files look for
    libexpat.@SO_MAJOR@.dylib on macOS
    [#925]  Autotools: Sync CMake templates with CMake 3.29
  [#945] #962 #966  CMake: Drop support for CMake &lt;3.13
    [#942]  CMake: Small fuzzing related improvements
    [#921]  docs: Add missing documentation of error code
    XML_ERROR_NOT_STARTED that was introduced with 2.6.4
    [#941]  docs: Document need for C++11 compiler for use from C++
    [#959]  tests/benchmark: Fix a (harmless) TOCTTOU
    [#944]  Windows: Fix installer target location of file xmlwf.xml
    for CMake
    [#953]  Windows: Address warning -Wunknown-warning-option
    about -Wno-pedantic-ms-format from LLVM MinGW
    [#971]  Address Cppcheck warnings
    [#969] #970  Mass-migrate links from http:// to https://
    [#947] #958 ..
    [#974] #975  Document changes since the previous release
    [#974] #975  Version info bumped from 11:0:10 (libexpat*.so.1.10.0)
    to 11:1:10 (libexpat*.so.1.10.1); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1743076800">- version update to 2.7.0 for SLE-15-SP7 (jsc#PED-12507)</changelog>
  <changelog author="pgajdos@suse.com" date="1743163200">- version update to 2.7.1
    Bug fixes:
    [#980] #989  Restore event pointer behavior from Expat 2.6.4
    (that the fix to CVE-2024-8176 changed in 2.7.0);
    affected API functions are:
  - XML_GetCurrentByteCount
  - XML_GetCurrentByteIndex
  - XML_GetCurrentColumnNumber
  - XML_GetCurrentLineNumber
  - XML_GetInputContext
    Other changes:
    [#976] #977  Autotools: Integrate files "fuzz/xml_lpm_fuzzer.{cpp,proto}"
    with Automake that were missing from 2.7.0 release tarballs
    [#983] #984  Fix printf format specifiers for 32bit Emscripten
    [#992]  docs: Promote OpenSSF Best Practices self-certification
    [#978]  tests/benchmark: Resolve mistaken double close
    [#986]  Address compiler warnings
    [#990] #993  Version info bumped from 11:1:10 (libexpat*.so.1.10.1)
    to 11:2:10 (libexpat*.so.1.10.2); see https://verbump.de/
    for what these numbers do
    Infrastructure:
    [#982]  CI: Start running Perl XML::Parser integration tests
    [#987]  CI: Enforce Clang Static Analyzer clean code
    [#991]  CI: Re-enable warning clang-analyzer-valist.Uninitialized
    for clang-tidy
    [#981]  CI: Cover compilation with musl
    [#983] #984  CI: Cover compilation with 32bit Emscripten
    [#976] #977  CI: Protect against fuzzer files missing from future
    release archives</changelog>
</package>
<package pkgid="8fe56c45319b68ac03c33d6153e83817a4f74f3d1787be2a4aaa7d8d6ac761d9" name="expat" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="150700.3.3.1"/>
  <changelog author="dmueller@suse.com" date="1642420800">- update to 2.4.3 (bsc#1194251, bsc#1194362, bsc#1194474,
    bsc#1194476, bsc#1194477, bsc#1194478, bsc#1194479, bsc#1194480):
  * CVE-2021-45960 -- Fix issues with left shifts by &gt;=29 places
    resulting in
    a) realloc acting as free
    b) realloc allocating too few bytes
    c) undefined behavior
    depending on architecture and precise value
    for XML documents with &gt;=2^27+1 prefixed attributes
    on a single XML tag a la
    "&lt;r xmlns:a='[..]' a:a123='[..]' [..] /&gt;"
    where XML_ParserCreateNS is used to create the parser
    (which needs argument "-n" when running xmlwf).
    Impact is denial of service, or more.
  * CVE-2021-46143 (ZDI-CAN-16157) -- Fix integer overflow
    on variable m_groupSize in function doProlog leading
    to realloc acting as free.
    Impact is denial of service or more.
  * CVE-2022-22822 to CVE-2022-22827 -- Prevent integer overflows
    near memory allocation at multiple places.  Mitre assigned
    a dedicated CVE for each involved internal C function:
  - CVE-2022-22822 for function addBinding
  - CVE-2022-22823 for function build_model
  - CVE-2022-22824 for function defineAttribute
  - CVE-2022-22825 for function lookup
  - CVE-2022-22826 for function nextScaffoldPart
  - CVE-2022-22827 for function storeAtts
    Impact is denial of service or more.</changelog>
  <changelog author="david.anes@suse.com" date="1643630400">- update to 2.4.4 (bsc#1195217, bsc#1195054):
  * Security fixes:
  - CVE-2022-23852 -- Fix signed integer overflow
    (undefined behavior) in function XML_GetBuffer
    that is also called by function XML_Parse internally)
    for when XML_CONTEXT_BYTES is defined to &gt;0 (which is both
    common and default).
    Impact is denial of service or more.
  - CVE-2022-23990 -- Fix unsigned integer overflow in function
    doProlog triggered by large content in element type
    declarations when there is an element declaration handler
    present (from a prior call to XML_SetElementDeclHandler).
    Impact is denial of service or more.
  * Bug fixes:
  - xmlwf: Fix a memory leak on output file opening error
  * Other changes:
  - Version info bumped from 9:3:8 to 9:4:8;
    see https://verbump.de/ for what these numbers do
  * Drop unused file valid-xhtml10.png</changelog>
  <changelog author="david.anes@suse.com" date="1645272000">- update to 2.4.5 (bsc#1196171, bsc#1196169, bsc#1196168,
  bsc#1196026, bsc#1196025):
  * Security fixes:
  - CVE-2022-25235 -- Passing malformed 2- and 3-byte UTF-8
    sequences (e.g. from start tag names) to the XML
    processing application on top of Expat can cause
    arbitrary damage (e.g. code execution) depending
    on how invalid UTF-8 is handled inside the XML
    processor; validation was not their job but Expat's.
    Exploits with code execution are known to exist.
  - CVE-2022-25236 -- Passing (one or more) namespace separator
    characters in "xmlns[:prefix]" attribute values
    made Expat send malformed tag names to the XML
    processor on top of Expat which can cause
    arbitrary damage (e.g. code execution) depending
    on such unexpectable cases are handled inside the XML
    processor; validation was not their job but Expat's.
    Exploits with code execution are known to exist.
  - CVE-2022-25313 -- Fix stack exhaustion in doctype parsing
    that could be triggered by e.g. a 2 megabytes
    file with a large number of opening braces.
    Expected impact is denial of service or potentially
    arbitrary code execution.
  - CVE-2022-25314 -- Fix integer overflow in function copyString;
    only affects the encoding name parameter at parser creation
    time which is often hardcoded (rather than user input),
    takes a value in the gigabytes to trigger, and a 64-bit
    machine.  Expected impact is denial of service.
  - CVE-2022-25315 -- Fix integer overflow in function storeRawNames;
    needs input in the gigabytes and a 64-bit machine.
    Expected impact is denial of service or potentially
    arbitrary code execution.
  * Other changes:
  - Version info bumped from 9:4:8 to 9:5:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1645358400">- update to 2.4.6 (bsc#1196168, CVE-2022-25313):
  * Bug fixes:
  - Fix a regression introduced by the fix for CVE-2022-25313
    in release 2.4.5 that affects applications that (1)
    call function XML_SetElementDeclHandler and (2) are
    parsing XML that contains nested element declarations
    (e.g. "&lt;!ELEMENT junk ((bar|foo|xyz+), zebra*)&gt;").
  - Version info bumped from 9:5:8 to 9:6:8;
    see https://verbump.de/ for what these numbers do.</changelog>
  <changelog author="david.anes@suse.com" date="1646481600">- update to 2.4.7 (bsc#1196784, CVE-2022-25236):
  * Bug fixes:
  - Relax fix to CVE-2022-25236 (introduced with release 2.4.5)
    with regard to all valid URI characters (RFC 3986),
    i.e. the following set (excluding whitespace):
    ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz
    0123456789 % -._~ :/?#[]@ !$&amp;'()*+,;=
  * Other changes:
  - CMake|Windows: Store Expat version in the DLL
  - Document consequences of namespace separator choices not just
    in doc/reference.html but also in header &lt;expat.h&gt;
  - Document Expat's lack of validation of namespace URIs against
    RFC 3986, and that the XML 1.0r4 specification doesn't
    require Expat to validate namespace URIs, and that Expat
    may do more in that regard in future releases.
    If you find need for strict RFC 3986 URI validation on
    application level today, https://uriparser.github.io/ may
    be of interest.
  - Fix documentation of XML_EndDoctypeDeclHandler in &lt;expat.h&gt;
  - Document that a call to XML_FreeContentModel can be done at
    a later time from outside the element declaration handler
  - Make hardcoded namespace URIs easier to find in code
  - Update documentation on use of XML_POOR_ENTOPY on Solaris
  - tests: Resolve use of macros NAN and INFINITY for GNU G++
    4.8.2 on Solaris.
  - Version info bumped from 9:6:8 to 9:7:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1648555200">- update to 2.4.8:
  * Other changes:
  - pkg-config: Move "-lm" to section "Libs.private"
  - CMake|MSVC: Fix pkg-config section "Libs"
  - CMake|macOS: Start using linker arguments
    "-compatibility_version &lt;version&gt;" and
    "-current_version &lt;version&gt;" in a way compatible with GNU
    Libtool
  - Version info bumped from 9:7:8 to 9:8:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- update to 2.4.9: (bsc#1203438)
  * Security fixes:
  - CVE-2022-40674 -- Heap use-after-free vulnerability in
    function doContent. Expected impact is denial of service
    or potentially arbitrary code execution.
  * Bug fixes:
  - MinGW: Fix mis-compilation for -D__USE_MINGW_ANSI_STDIO=0
  - docs: Fix documentation on effect of switch XML_DTD on
    symbol visibility in doc/reference.html
  * Other changes:
  - MinGW: Make fix-xmltest-log.sh drop more Wine bug output
  - Autotools: Sync CMake templates with CMake 3.22
  - CMake: Migrate from use of CMAKE_*_POSTFIX to
    dedicated variables EXPAT_*_POSTFIX to stop affecting
    other projects
  - Windows|CMake: Add missing -DXML_STATIC to test runners
    and fuzzers
  - Windows|CMake: Render .def file from a template to fix
    linking with -DEXPAT_DTD=OFF and/or -DEXPAT_ATTR_INFO=ON
  - MinGW|CMake: Apply MSVC .def file when linking
  - MinGW|CMake: Sync library name with GNU Autotools,
    i.e. produce libexpat-1.dll rather than libexpat.dll
    by default.  Filename libexpat.dll.a is unaffected.
  - MinGW|CMake: Set missing variable CMAKE_RC_COMPILER in
    toolchain file "cmake/mingw-toolchain.cmake" to avoid
    error "windres: Command not found" on e.g. Ubuntu 20.04
  - CMake: Unify inconsistent use of set() and option() in
    context of public build time options to take need for
    set(.. FORCE) in projects using Expat by means of
    add_subdirectory(..) off Expat's users' shoulders
  - Stop exporting API symbols when building a static library
  - Resolve use of deprecated "fgrep" by "grep -F"
  - CMake: Make documentation on variables a bit more consistent
  - CMake: Drop leading whitespace from a #cmakedefine line in
    file expat_config.h.cmake
  - xmlwf: Fix harmless variable mix-up in function nsattcmp
  - Address Cppcheck warnings
  - Address Clang 15 compiler warnings
  - Version info bumped from 9:8:8 to 9:9:8;
    see https://verbump.de/ for what these numbers do
  * Infrastructure:
  - CI: Windows: Start covering MSVC 2022
  - CI: macOS: Migrate off deprecated macOS 10.15
  - CI: Linux: Make migration off deprecated Ubuntu 18.04 work
  - CI: Upgrade Clang from 14 to 15
  - apply-clang-format.sh: Add support for BSD find
  - coverage.sh: Exclude MinGW headers
  - coverage.sh: Fix name collision for -funsigned-char</changelog>
  <changelog author="david.anes@suse.com" date="1666785600">- Update to 2.5.0: (bsc#1204708)
  * Security fixes:
  - CVE-2022-43680 -- Fix heap use-after-free after overeager
    destruction of a shared DTD in function
    XML_ExternalEntityParserCreate in out-of-memory situations.
    Expected impact is denial of service or potentially arbitrary
    code execution.
  * Bug fixes:
  - Fix curruption from undefined entities
  - Fix case when parsing was suspended while processing nested
    entities
  - Stop leaking opening tag bindings after a closing tag mismatch
    error where a parser is reset through XML_ParserReset and then
    reused to parse
  - CMake: Fix generation of pkg-config file
  - MinGW|CMake: Fix static library name
  * Other changes:
  - Protect header expat_config.h from multiple inclusion
  - examples: Make use of XML_GetBuffer and be more consistent
    across examples
  - Address compiler warnings
  - Version info bumped from 9:9:8 to 9:10:8; see
    https://verbump.de/ for what these numbers do</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1670760000">- add upstream signing key and validate source signature</changelog>
  <changelog author="david.anes@suse.com" date="1707739200">- Update keyring automatically from keyserver during OBS service run.
- Explicitly use --without-docbook (before it was implicit).
- Include missing files for documentation and examples.
- Add manpage for xmlwf, which is now available in the released tarball.
- Clean the spec file a bit.
- Update to 2.6.0:
  * Security fixes:
  - CVE-2023-52425 (boo#1219559)
  - - Fix quadratic runtime issues with big tokens
    that can cause denial of service, in partial where
    dealing with compressed XML input.  Applications
    that parsed a document in one go -- a single call to
    functions XML_Parse or XML_ParseBuffer -- were not affected.
    The smaller the chunks/buffers you use for parsing
    previously, the bigger the problem prior to the fix.
    Backporters should be careful to no omit parts of
    pull request #789 and to include earlier pull request #771,
    in order to not break the fix.
  - CVE-2023-52426 (boo#1219561)
  - - Fix billion laughs attacks for users
    compiling *without* XML_DTD defined (which is not common).
    Users with XML_DTD defined have been protected since
    Expat &gt;=2.4.0 (and that was CVE-2013-0340 back then).
  * Bug fixes:
  - Fix parse-size-dependent "invalid token" error for
    external entities that start with a byte order mark
  - Fix NULL pointer dereference in setContext via
    XML_ExternalEntityParserCreate for compilation with
    XML_DTD undefined
  - Protect against closing entities out of order
  * Other changes:
  - Improve support for arc4random/arc4random_buf
  - Improve buffer growth in XML_GetBuffer and XML_Parse
  - xmlwf: Support --help and --version
  - xmlwf: Support custom buffer size for XML_GetBuffer and read
  - xmlwf: Improve language and URL clickability in help output
  - examples: Add new example "element_declarations.c"
  - Be stricter about macro XML_CONTEXT_BYTES at build time
  - Make inclusion to expat_config.h consistent
  - Autotools: configure.ac: Support --disable-maintainer-mode
  - Autotools: Sync CMake templates with CMake 3.26
  - Autotools: Make installation of shipped man page doc/xmlwf.1
    independent of docbook2man availability
  - Autotools|CMake: Add missing -DXML_STATIC to pkg-config file
    section "Cflags.private" in order to fix compilation
    against static libexpat using pkg-config on Windows
  - Autotools|CMake: Require a C99 compiler
    (a de-facto requirement already since Expat 2.2.2 of 2017)
  - Autotools|CMake: Fix PACKAGE_BUGREPORT variable
  - Autotools|CMake: Make test suite require a C++11 compiler
  - CMake: Require CMake &gt;=3.5.0
  - CMake: Lowercase off_t and size_t to help a bug in Meson
  - CMake: Sort xmlwf sources alphabetically
  - CMake|Windows: Fix generation of DLL file version info
  - CMake: Build tests/benchmark/benchmark.c as well for
    a build with -DEXPAT_BUILD_TESTS=ON
  - docs: Document the importance of isFinal + adjust tests
    accordingly
  - docs: Improve use of "NULL" and "null"
  - docs: Be specific about version of XML (XML 1.0r4)
    and version of C (C99); (XML 1.0r5 will need a sponsor.)
  - docs: reference.html: Promote function XML_ParseBuffer more
  - docs: reference.html: Add HTML anchors to XML_* macros
  - docs: reference.html: Upgrade to OK.css 1.2.0
  - docs: Fix typos
  - docs|CI: Use HTTPS URLs instead of HTTP at various places
  - Address compiler warnings
  - Address clang-tidy warnings
  - Version info bumped from 9:10:8 (libexpat*.so.1.8.10)
    to 10:0:9 (libexpat*.so.1.9.0); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1708430400">- Fix handling of xmlwf.1 to avoid workarounds in specfile:
  * Added libxml2-fix-xmlwf.1-handling.patch
- Call buildconf.sh to avoid (future) issues with expat_config.h.in</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1709294400">- update to 2.6.1:
  * Expose billion laughs API with XML_DTD defined and XML_GE
    undefined, regression from 2.6.0
  * Make tests independent of CPU speed, and thus more robust
- drop libxml2-fix-xmlwf.1-handling.patch, upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1710331200">- update to 2.6.2:
  * CVE-2024-28757 -- Prevent billion laughs attacks with isolated
    use of external parsers (boo#1221289)
  * Reject direct parameter entity recursion and avoid the related
    undefined behavior</changelog>
  <changelog author="david.anes@suse.com" date="1725537600">- Update to 2.6.3:
  * Security fixes:
  - CVE-2024-45490, bsc#1229930 -- Calling function XML_ParseBuffer with
    len &lt; 0 without noticing and then calling XML_GetBuffer
    will have XML_ParseBuffer fail to recognize the problem
    and XML_GetBuffer corrupt memory.
    With the fix, XML_ParseBuffer now complains with error
    XML_ERROR_INVALID_ARGUMENT just like sibling XML_Parse
    has been doing since Expat 2.2.1, and now documented.
    Impact is denial of service to potentially artitrary code
    execution.
  - CVE-2024-45491, bsc#1229931 -- Internal function dtdCopy can have an
    integer overflow for nDefaultAtts on 32-bit platforms
    (where UINT_MAX equals SIZE_MAX).
    Impact is denial of service to potentially artitrary code
    execution.
  - CVE-2024-45492, bsc#1229932 -- Internal function nextScaffoldPart can
    have an integer overflow for m_groupSize on 32-bit
    platforms (where UINT_MAX equals SIZE_MAX).
    Impact is denial of service to potentially artitrary code
    execution.
  * Other changes:
  - Autotools: Sync CMake templates with CMake 3.28
  - Autotools: Always provide path to find(1) for portability
  - Autotools: Ensure that the m4 directory always exists.
  - Autotools: Simplify handling of SIZEOF_VOID_P
  - Autotools: Support non-GNU sed
  - Autotools|CMake: Fix main() to main(void)
  - Autotools|CMake: Fix compile tests for HAVE_SYSCALL_GETRANDOM
  - Autotools|CMake: Stop requiring dos2unix
  - CMake: Fix check for symbols size_t and off_t
  - docs|tests: Convert README to Markdown and update
  - Windows: Drop support for Visual Studio &lt;=15.0/2017
  - Drop needless XML_DTD guards around is_param access
  - Fix typo in a code comment
  - Version info bumped from 10:2:9 (libexpat*.so.1.9.2)
    to 10:3:9 (libexpat*.so.1.9.3); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1727352000">- updated keyring [https://build.suse.de/request/show/345282]
- modified sources
  % expat.keyring</changelog>
  <changelog author="pgajdos@suse.com" date="1730980800">- version update to 2.6.4
  * Security fixes: [bsc#1232601][bsc#1232579]
    [#915]  CVE-2024-50602 -- Fix crash within function XML_ResumeParser
    from a NULL pointer dereference by disallowing function
    XML_StopParser to (stop or) suspend an unstarted parser.
    A new error code XML_ERROR_NOT_STARTED was introduced to
    properly communicate this situation.  // CWE-476 CWE-754
  * Other changes:
    [#903]  CMake: Add alias target "expat::expat"
    [#905]  docs: Document use via CMake &gt;=3.18 with FetchContent
    and SOURCE_SUBDIR and its consequences
    [#902]  tests: Reduce use of global parser instance
    [#904]  tests: Resolve duplicate handler
  [#317] #918  tests: Improve tests on doctype closing (ex CVE-2019-15903)
    [#914]  Fix signedness of format strings
  [#919] #920  Version info bumped from 10:3:9 (libexpat*.so.1.9.3)
    to 11:0:10 (libexpat*.so.1.10.0); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1731412800">- no source changes, just adding jira reference: jsc#SLE-21253</changelog>
  <changelog author="pgajdos@suse.com" date="1741953600">- version update to 2.7.0 (CVE-2024-8176 [bsc#1239618])
  * Security fixes:
    [#893] #973  CVE-2024-8176 -- Fix crash from chaining a large number
    of entities caused by stack overflow by resolving use of
    recursion, for all three uses of entities:
  - general entities in character data ("&lt;e&gt;&amp;g1;&lt;/e&gt;")
  - general entities in attribute values ("&lt;e k1='&amp;g1;'/&gt;")
  - parameter entities ("%p1;")
    Known impact is (reliable and easy) denial of service:
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:H/RL:O/RC:C
    (Base Score: 7.5, Temporal Score: 7.2)
    Please note that a layer of compression around XML can
    significantly reduce the minimum attack payload size.
  * Other changes:
    [#935] #937  Autotools: Make generated CMake files look for
    libexpat.@SO_MAJOR@.dylib on macOS
    [#925]  Autotools: Sync CMake templates with CMake 3.29
  [#945] #962 #966  CMake: Drop support for CMake &lt;3.13
    [#942]  CMake: Small fuzzing related improvements
    [#921]  docs: Add missing documentation of error code
    XML_ERROR_NOT_STARTED that was introduced with 2.6.4
    [#941]  docs: Document need for C++11 compiler for use from C++
    [#959]  tests/benchmark: Fix a (harmless) TOCTTOU
    [#944]  Windows: Fix installer target location of file xmlwf.xml
    for CMake
    [#953]  Windows: Address warning -Wunknown-warning-option
    about -Wno-pedantic-ms-format from LLVM MinGW
    [#971]  Address Cppcheck warnings
    [#969] #970  Mass-migrate links from http:// to https://
    [#947] #958 ..
    [#974] #975  Document changes since the previous release
    [#974] #975  Version info bumped from 11:0:10 (libexpat*.so.1.10.0)
    to 11:1:10 (libexpat*.so.1.10.1); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1743076800">- version update to 2.7.0 for SLE-15-SP7 (jsc#PED-12507)</changelog>
  <changelog author="pgajdos@suse.com" date="1743163200">- version update to 2.7.1
    Bug fixes:
    [#980] #989  Restore event pointer behavior from Expat 2.6.4
    (that the fix to CVE-2024-8176 changed in 2.7.0);
    affected API functions are:
  - XML_GetCurrentByteCount
  - XML_GetCurrentByteIndex
  - XML_GetCurrentColumnNumber
  - XML_GetCurrentLineNumber
  - XML_GetInputContext
    Other changes:
    [#976] #977  Autotools: Integrate files "fuzz/xml_lpm_fuzzer.{cpp,proto}"
    with Automake that were missing from 2.7.0 release tarballs
    [#983] #984  Fix printf format specifiers for 32bit Emscripten
    [#992]  docs: Promote OpenSSF Best Practices self-certification
    [#978]  tests/benchmark: Resolve mistaken double close
    [#986]  Address compiler warnings
    [#990] #993  Version info bumped from 11:1:10 (libexpat*.so.1.10.1)
    to 11:2:10 (libexpat*.so.1.10.2); see https://verbump.de/
    for what these numbers do
    Infrastructure:
    [#982]  CI: Start running Perl XML::Parser integration tests
    [#987]  CI: Enforce Clang Static Analyzer clean code
    [#991]  CI: Re-enable warning clang-analyzer-valist.Uninitialized
    for clang-tidy
    [#981]  CI: Cover compilation with musl
    [#983] #984  CI: Cover compilation with 32bit Emscripten
    [#976] #977  CI: Protect against fuzzer files missing from future
    release archives</changelog>
</package>
<package pkgid="abfdd0aeb619e617cb4551d84b0d05c5ee1cf22130ee603ad3231e480b9c263c" name="expat" arch="src">
  <version epoch="0" ver="2.7.1" rel="150700.3.6.1"/>
  <changelog author="david.anes@suse.com" date="1643630400">- update to 2.4.4 (bsc#1195217, bsc#1195054):
  * Security fixes:
  - CVE-2022-23852 -- Fix signed integer overflow
    (undefined behavior) in function XML_GetBuffer
    that is also called by function XML_Parse internally)
    for when XML_CONTEXT_BYTES is defined to &gt;0 (which is both
    common and default).
    Impact is denial of service or more.
  - CVE-2022-23990 -- Fix unsigned integer overflow in function
    doProlog triggered by large content in element type
    declarations when there is an element declaration handler
    present (from a prior call to XML_SetElementDeclHandler).
    Impact is denial of service or more.
  * Bug fixes:
  - xmlwf: Fix a memory leak on output file opening error
  * Other changes:
  - Version info bumped from 9:3:8 to 9:4:8;
    see https://verbump.de/ for what these numbers do
  * Drop unused file valid-xhtml10.png</changelog>
  <changelog author="david.anes@suse.com" date="1645272000">- update to 2.4.5 (bsc#1196171, bsc#1196169, bsc#1196168,
  bsc#1196026, bsc#1196025):
  * Security fixes:
  - CVE-2022-25235 -- Passing malformed 2- and 3-byte UTF-8
    sequences (e.g. from start tag names) to the XML
    processing application on top of Expat can cause
    arbitrary damage (e.g. code execution) depending
    on how invalid UTF-8 is handled inside the XML
    processor; validation was not their job but Expat's.
    Exploits with code execution are known to exist.
  - CVE-2022-25236 -- Passing (one or more) namespace separator
    characters in "xmlns[:prefix]" attribute values
    made Expat send malformed tag names to the XML
    processor on top of Expat which can cause
    arbitrary damage (e.g. code execution) depending
    on such unexpectable cases are handled inside the XML
    processor; validation was not their job but Expat's.
    Exploits with code execution are known to exist.
  - CVE-2022-25313 -- Fix stack exhaustion in doctype parsing
    that could be triggered by e.g. a 2 megabytes
    file with a large number of opening braces.
    Expected impact is denial of service or potentially
    arbitrary code execution.
  - CVE-2022-25314 -- Fix integer overflow in function copyString;
    only affects the encoding name parameter at parser creation
    time which is often hardcoded (rather than user input),
    takes a value in the gigabytes to trigger, and a 64-bit
    machine.  Expected impact is denial of service.
  - CVE-2022-25315 -- Fix integer overflow in function storeRawNames;
    needs input in the gigabytes and a 64-bit machine.
    Expected impact is denial of service or potentially
    arbitrary code execution.
  * Other changes:
  - Version info bumped from 9:4:8 to 9:5:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1645358400">- update to 2.4.6 (bsc#1196168, CVE-2022-25313):
  * Bug fixes:
  - Fix a regression introduced by the fix for CVE-2022-25313
    in release 2.4.5 that affects applications that (1)
    call function XML_SetElementDeclHandler and (2) are
    parsing XML that contains nested element declarations
    (e.g. "&lt;!ELEMENT junk ((bar|foo|xyz+), zebra*)&gt;").
  - Version info bumped from 9:5:8 to 9:6:8;
    see https://verbump.de/ for what these numbers do.</changelog>
  <changelog author="david.anes@suse.com" date="1646481600">- update to 2.4.7 (bsc#1196784, CVE-2022-25236):
  * Bug fixes:
  - Relax fix to CVE-2022-25236 (introduced with release 2.4.5)
    with regard to all valid URI characters (RFC 3986),
    i.e. the following set (excluding whitespace):
    ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz
    0123456789 % -._~ :/?#[]@ !$&amp;'()*+,;=
  * Other changes:
  - CMake|Windows: Store Expat version in the DLL
  - Document consequences of namespace separator choices not just
    in doc/reference.html but also in header &lt;expat.h&gt;
  - Document Expat's lack of validation of namespace URIs against
    RFC 3986, and that the XML 1.0r4 specification doesn't
    require Expat to validate namespace URIs, and that Expat
    may do more in that regard in future releases.
    If you find need for strict RFC 3986 URI validation on
    application level today, https://uriparser.github.io/ may
    be of interest.
  - Fix documentation of XML_EndDoctypeDeclHandler in &lt;expat.h&gt;
  - Document that a call to XML_FreeContentModel can be done at
    a later time from outside the element declaration handler
  - Make hardcoded namespace URIs easier to find in code
  - Update documentation on use of XML_POOR_ENTOPY on Solaris
  - tests: Resolve use of macros NAN and INFINITY for GNU G++
    4.8.2 on Solaris.
  - Version info bumped from 9:6:8 to 9:7:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1648555200">- update to 2.4.8:
  * Other changes:
  - pkg-config: Move "-lm" to section "Libs.private"
  - CMake|MSVC: Fix pkg-config section "Libs"
  - CMake|macOS: Start using linker arguments
    "-compatibility_version &lt;version&gt;" and
    "-current_version &lt;version&gt;" in a way compatible with GNU
    Libtool
  - Version info bumped from 9:7:8 to 9:8:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- update to 2.4.9: (bsc#1203438)
  * Security fixes:
  - CVE-2022-40674 -- Heap use-after-free vulnerability in
    function doContent. Expected impact is denial of service
    or potentially arbitrary code execution.
  * Bug fixes:
  - MinGW: Fix mis-compilation for -D__USE_MINGW_ANSI_STDIO=0
  - docs: Fix documentation on effect of switch XML_DTD on
    symbol visibility in doc/reference.html
  * Other changes:
  - MinGW: Make fix-xmltest-log.sh drop more Wine bug output
  - Autotools: Sync CMake templates with CMake 3.22
  - CMake: Migrate from use of CMAKE_*_POSTFIX to
    dedicated variables EXPAT_*_POSTFIX to stop affecting
    other projects
  - Windows|CMake: Add missing -DXML_STATIC to test runners
    and fuzzers
  - Windows|CMake: Render .def file from a template to fix
    linking with -DEXPAT_DTD=OFF and/or -DEXPAT_ATTR_INFO=ON
  - MinGW|CMake: Apply MSVC .def file when linking
  - MinGW|CMake: Sync library name with GNU Autotools,
    i.e. produce libexpat-1.dll rather than libexpat.dll
    by default.  Filename libexpat.dll.a is unaffected.
  - MinGW|CMake: Set missing variable CMAKE_RC_COMPILER in
    toolchain file "cmake/mingw-toolchain.cmake" to avoid
    error "windres: Command not found" on e.g. Ubuntu 20.04
  - CMake: Unify inconsistent use of set() and option() in
    context of public build time options to take need for
    set(.. FORCE) in projects using Expat by means of
    add_subdirectory(..) off Expat's users' shoulders
  - Stop exporting API symbols when building a static library
  - Resolve use of deprecated "fgrep" by "grep -F"
  - CMake: Make documentation on variables a bit more consistent
  - CMake: Drop leading whitespace from a #cmakedefine line in
    file expat_config.h.cmake
  - xmlwf: Fix harmless variable mix-up in function nsattcmp
  - Address Cppcheck warnings
  - Address Clang 15 compiler warnings
  - Version info bumped from 9:8:8 to 9:9:8;
    see https://verbump.de/ for what these numbers do
  * Infrastructure:
  - CI: Windows: Start covering MSVC 2022
  - CI: macOS: Migrate off deprecated macOS 10.15
  - CI: Linux: Make migration off deprecated Ubuntu 18.04 work
  - CI: Upgrade Clang from 14 to 15
  - apply-clang-format.sh: Add support for BSD find
  - coverage.sh: Exclude MinGW headers
  - coverage.sh: Fix name collision for -funsigned-char</changelog>
  <changelog author="david.anes@suse.com" date="1666785600">- Update to 2.5.0: (bsc#1204708)
  * Security fixes:
  - CVE-2022-43680 -- Fix heap use-after-free after overeager
    destruction of a shared DTD in function
    XML_ExternalEntityParserCreate in out-of-memory situations.
    Expected impact is denial of service or potentially arbitrary
    code execution.
  * Bug fixes:
  - Fix curruption from undefined entities
  - Fix case when parsing was suspended while processing nested
    entities
  - Stop leaking opening tag bindings after a closing tag mismatch
    error where a parser is reset through XML_ParserReset and then
    reused to parse
  - CMake: Fix generation of pkg-config file
  - MinGW|CMake: Fix static library name
  * Other changes:
  - Protect header expat_config.h from multiple inclusion
  - examples: Make use of XML_GetBuffer and be more consistent
    across examples
  - Address compiler warnings
  - Version info bumped from 9:9:8 to 9:10:8; see
    https://verbump.de/ for what these numbers do</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1670760000">- add upstream signing key and validate source signature</changelog>
  <changelog author="david.anes@suse.com" date="1707739200">- Update keyring automatically from keyserver during OBS service run.
- Explicitly use --without-docbook (before it was implicit).
- Include missing files for documentation and examples.
- Add manpage for xmlwf, which is now available in the released tarball.
- Clean the spec file a bit.
- Update to 2.6.0:
  * Security fixes:
  - CVE-2023-52425 (boo#1219559)
  - - Fix quadratic runtime issues with big tokens
    that can cause denial of service, in partial where
    dealing with compressed XML input.  Applications
    that parsed a document in one go -- a single call to
    functions XML_Parse or XML_ParseBuffer -- were not affected.
    The smaller the chunks/buffers you use for parsing
    previously, the bigger the problem prior to the fix.
    Backporters should be careful to no omit parts of
    pull request #789 and to include earlier pull request #771,
    in order to not break the fix.
  - CVE-2023-52426 (boo#1219561)
  - - Fix billion laughs attacks for users
    compiling *without* XML_DTD defined (which is not common).
    Users with XML_DTD defined have been protected since
    Expat &gt;=2.4.0 (and that was CVE-2013-0340 back then).
  * Bug fixes:
  - Fix parse-size-dependent "invalid token" error for
    external entities that start with a byte order mark
  - Fix NULL pointer dereference in setContext via
    XML_ExternalEntityParserCreate for compilation with
    XML_DTD undefined
  - Protect against closing entities out of order
  * Other changes:
  - Improve support for arc4random/arc4random_buf
  - Improve buffer growth in XML_GetBuffer and XML_Parse
  - xmlwf: Support --help and --version
  - xmlwf: Support custom buffer size for XML_GetBuffer and read
  - xmlwf: Improve language and URL clickability in help output
  - examples: Add new example "element_declarations.c"
  - Be stricter about macro XML_CONTEXT_BYTES at build time
  - Make inclusion to expat_config.h consistent
  - Autotools: configure.ac: Support --disable-maintainer-mode
  - Autotools: Sync CMake templates with CMake 3.26
  - Autotools: Make installation of shipped man page doc/xmlwf.1
    independent of docbook2man availability
  - Autotools|CMake: Add missing -DXML_STATIC to pkg-config file
    section "Cflags.private" in order to fix compilation
    against static libexpat using pkg-config on Windows
  - Autotools|CMake: Require a C99 compiler
    (a de-facto requirement already since Expat 2.2.2 of 2017)
  - Autotools|CMake: Fix PACKAGE_BUGREPORT variable
  - Autotools|CMake: Make test suite require a C++11 compiler
  - CMake: Require CMake &gt;=3.5.0
  - CMake: Lowercase off_t and size_t to help a bug in Meson
  - CMake: Sort xmlwf sources alphabetically
  - CMake|Windows: Fix generation of DLL file version info
  - CMake: Build tests/benchmark/benchmark.c as well for
    a build with -DEXPAT_BUILD_TESTS=ON
  - docs: Document the importance of isFinal + adjust tests
    accordingly
  - docs: Improve use of "NULL" and "null"
  - docs: Be specific about version of XML (XML 1.0r4)
    and version of C (C99); (XML 1.0r5 will need a sponsor.)
  - docs: reference.html: Promote function XML_ParseBuffer more
  - docs: reference.html: Add HTML anchors to XML_* macros
  - docs: reference.html: Upgrade to OK.css 1.2.0
  - docs: Fix typos
  - docs|CI: Use HTTPS URLs instead of HTTP at various places
  - Address compiler warnings
  - Address clang-tidy warnings
  - Version info bumped from 9:10:8 (libexpat*.so.1.8.10)
    to 10:0:9 (libexpat*.so.1.9.0); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1708430400">- Fix handling of xmlwf.1 to avoid workarounds in specfile:
  * Added libxml2-fix-xmlwf.1-handling.patch
- Call buildconf.sh to avoid (future) issues with expat_config.h.in</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1709294400">- update to 2.6.1:
  * Expose billion laughs API with XML_DTD defined and XML_GE
    undefined, regression from 2.6.0
  * Make tests independent of CPU speed, and thus more robust
- drop libxml2-fix-xmlwf.1-handling.patch, upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1710331200">- update to 2.6.2:
  * CVE-2024-28757 -- Prevent billion laughs attacks with isolated
    use of external parsers (boo#1221289)
  * Reject direct parameter entity recursion and avoid the related
    undefined behavior</changelog>
  <changelog author="david.anes@suse.com" date="1725537600">- Update to 2.6.3:
  * Security fixes:
  - CVE-2024-45490, bsc#1229930 -- Calling function XML_ParseBuffer with
    len &lt; 0 without noticing and then calling XML_GetBuffer
    will have XML_ParseBuffer fail to recognize the problem
    and XML_GetBuffer corrupt memory.
    With the fix, XML_ParseBuffer now complains with error
    XML_ERROR_INVALID_ARGUMENT just like sibling XML_Parse
    has been doing since Expat 2.2.1, and now documented.
    Impact is denial of service to potentially artitrary code
    execution.
  - CVE-2024-45491, bsc#1229931 -- Internal function dtdCopy can have an
    integer overflow for nDefaultAtts on 32-bit platforms
    (where UINT_MAX equals SIZE_MAX).
    Impact is denial of service to potentially artitrary code
    execution.
  - CVE-2024-45492, bsc#1229932 -- Internal function nextScaffoldPart can
    have an integer overflow for m_groupSize on 32-bit
    platforms (where UINT_MAX equals SIZE_MAX).
    Impact is denial of service to potentially artitrary code
    execution.
  * Other changes:
  - Autotools: Sync CMake templates with CMake 3.28
  - Autotools: Always provide path to find(1) for portability
  - Autotools: Ensure that the m4 directory always exists.
  - Autotools: Simplify handling of SIZEOF_VOID_P
  - Autotools: Support non-GNU sed
  - Autotools|CMake: Fix main() to main(void)
  - Autotools|CMake: Fix compile tests for HAVE_SYSCALL_GETRANDOM
  - Autotools|CMake: Stop requiring dos2unix
  - CMake: Fix check for symbols size_t and off_t
  - docs|tests: Convert README to Markdown and update
  - Windows: Drop support for Visual Studio &lt;=15.0/2017
  - Drop needless XML_DTD guards around is_param access
  - Fix typo in a code comment
  - Version info bumped from 10:2:9 (libexpat*.so.1.9.2)
    to 10:3:9 (libexpat*.so.1.9.3); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1727352000">- updated keyring [https://build.suse.de/request/show/345282]
- modified sources
  % expat.keyring</changelog>
  <changelog author="pgajdos@suse.com" date="1730980800">- version update to 2.6.4
  * Security fixes: [bsc#1232601][bsc#1232579]
    [#915]  CVE-2024-50602 -- Fix crash within function XML_ResumeParser
    from a NULL pointer dereference by disallowing function
    XML_StopParser to (stop or) suspend an unstarted parser.
    A new error code XML_ERROR_NOT_STARTED was introduced to
    properly communicate this situation.  // CWE-476 CWE-754
  * Other changes:
    [#903]  CMake: Add alias target "expat::expat"
    [#905]  docs: Document use via CMake &gt;=3.18 with FetchContent
    and SOURCE_SUBDIR and its consequences
    [#902]  tests: Reduce use of global parser instance
    [#904]  tests: Resolve duplicate handler
  [#317] #918  tests: Improve tests on doctype closing (ex CVE-2019-15903)
    [#914]  Fix signedness of format strings
  [#919] #920  Version info bumped from 10:3:9 (libexpat*.so.1.9.3)
    to 11:0:10 (libexpat*.so.1.10.0); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1731412800">- no source changes, just adding jira reference: jsc#SLE-21253</changelog>
  <changelog author="pgajdos@suse.com" date="1741953600">- version update to 2.7.0 (CVE-2024-8176 [bsc#1239618])
  * Security fixes:
    [#893] #973  CVE-2024-8176 -- Fix crash from chaining a large number
    of entities caused by stack overflow by resolving use of
    recursion, for all three uses of entities:
  - general entities in character data ("&lt;e&gt;&amp;g1;&lt;/e&gt;")
  - general entities in attribute values ("&lt;e k1='&amp;g1;'/&gt;")
  - parameter entities ("%p1;")
    Known impact is (reliable and easy) denial of service:
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:H/RL:O/RC:C
    (Base Score: 7.5, Temporal Score: 7.2)
    Please note that a layer of compression around XML can
    significantly reduce the minimum attack payload size.
  * Other changes:
    [#935] #937  Autotools: Make generated CMake files look for
    libexpat.@SO_MAJOR@.dylib on macOS
    [#925]  Autotools: Sync CMake templates with CMake 3.29
  [#945] #962 #966  CMake: Drop support for CMake &lt;3.13
    [#942]  CMake: Small fuzzing related improvements
    [#921]  docs: Add missing documentation of error code
    XML_ERROR_NOT_STARTED that was introduced with 2.6.4
    [#941]  docs: Document need for C++11 compiler for use from C++
    [#959]  tests/benchmark: Fix a (harmless) TOCTTOU
    [#944]  Windows: Fix installer target location of file xmlwf.xml
    for CMake
    [#953]  Windows: Address warning -Wunknown-warning-option
    about -Wno-pedantic-ms-format from LLVM MinGW
    [#971]  Address Cppcheck warnings
    [#969] #970  Mass-migrate links from http:// to https://
    [#947] #958 ..
    [#974] #975  Document changes since the previous release
    [#974] #975  Version info bumped from 11:0:10 (libexpat*.so.1.10.0)
    to 11:1:10 (libexpat*.so.1.10.1); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1743076800">- version update to 2.7.0 for SLE-15-SP7 (jsc#PED-12507)</changelog>
  <changelog author="pgajdos@suse.com" date="1743163200">- version update to 2.7.1
    Bug fixes:
    [#980] #989  Restore event pointer behavior from Expat 2.6.4
    (that the fix to CVE-2024-8176 changed in 2.7.0);
    affected API functions are:
  - XML_GetCurrentByteCount
  - XML_GetCurrentByteIndex
  - XML_GetCurrentColumnNumber
  - XML_GetCurrentLineNumber
  - XML_GetInputContext
    Other changes:
    [#976] #977  Autotools: Integrate files "fuzz/xml_lpm_fuzzer.{cpp,proto}"
    with Automake that were missing from 2.7.0 release tarballs
    [#983] #984  Fix printf format specifiers for 32bit Emscripten
    [#992]  docs: Promote OpenSSF Best Practices self-certification
    [#978]  tests/benchmark: Resolve mistaken double close
    [#986]  Address compiler warnings
    [#990] #993  Version info bumped from 11:1:10 (libexpat*.so.1.10.1)
    to 11:2:10 (libexpat*.so.1.10.2); see https://verbump.de/
    for what these numbers do
    Infrastructure:
    [#982]  CI: Start running Perl XML::Parser integration tests
    [#987]  CI: Enforce Clang Static Analyzer clean code
    [#991]  CI: Re-enable warning clang-analyzer-valist.Uninitialized
    for clang-tidy
    [#981]  CI: Cover compilation with musl
    [#983] #984  CI: Cover compilation with 32bit Emscripten
    [#976] #977  CI: Protect against fuzzer files missing from future
    release archives</changelog>
  <changelog author="martin.schreiner@suse.com" date="1759147200">- Fix CVE-2025-59375 / bsc#1249584.
- Add patch file:
  * CVE-2025-59375.patch</changelog>
</package>
<package pkgid="d6226c65d52e1da7a3bb02eaa7572f1cf39db7f079a83a1f87be8fcc51de0f90" name="expat" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="150700.3.6.1"/>
  <changelog author="david.anes@suse.com" date="1643630400">- update to 2.4.4 (bsc#1195217, bsc#1195054):
  * Security fixes:
  - CVE-2022-23852 -- Fix signed integer overflow
    (undefined behavior) in function XML_GetBuffer
    that is also called by function XML_Parse internally)
    for when XML_CONTEXT_BYTES is defined to &gt;0 (which is both
    common and default).
    Impact is denial of service or more.
  - CVE-2022-23990 -- Fix unsigned integer overflow in function
    doProlog triggered by large content in element type
    declarations when there is an element declaration handler
    present (from a prior call to XML_SetElementDeclHandler).
    Impact is denial of service or more.
  * Bug fixes:
  - xmlwf: Fix a memory leak on output file opening error
  * Other changes:
  - Version info bumped from 9:3:8 to 9:4:8;
    see https://verbump.de/ for what these numbers do
  * Drop unused file valid-xhtml10.png</changelog>
  <changelog author="david.anes@suse.com" date="1645272000">- update to 2.4.5 (bsc#1196171, bsc#1196169, bsc#1196168,
  bsc#1196026, bsc#1196025):
  * Security fixes:
  - CVE-2022-25235 -- Passing malformed 2- and 3-byte UTF-8
    sequences (e.g. from start tag names) to the XML
    processing application on top of Expat can cause
    arbitrary damage (e.g. code execution) depending
    on how invalid UTF-8 is handled inside the XML
    processor; validation was not their job but Expat's.
    Exploits with code execution are known to exist.
  - CVE-2022-25236 -- Passing (one or more) namespace separator
    characters in "xmlns[:prefix]" attribute values
    made Expat send malformed tag names to the XML
    processor on top of Expat which can cause
    arbitrary damage (e.g. code execution) depending
    on such unexpectable cases are handled inside the XML
    processor; validation was not their job but Expat's.
    Exploits with code execution are known to exist.
  - CVE-2022-25313 -- Fix stack exhaustion in doctype parsing
    that could be triggered by e.g. a 2 megabytes
    file with a large number of opening braces.
    Expected impact is denial of service or potentially
    arbitrary code execution.
  - CVE-2022-25314 -- Fix integer overflow in function copyString;
    only affects the encoding name parameter at parser creation
    time which is often hardcoded (rather than user input),
    takes a value in the gigabytes to trigger, and a 64-bit
    machine.  Expected impact is denial of service.
  - CVE-2022-25315 -- Fix integer overflow in function storeRawNames;
    needs input in the gigabytes and a 64-bit machine.
    Expected impact is denial of service or potentially
    arbitrary code execution.
  * Other changes:
  - Version info bumped from 9:4:8 to 9:5:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1645358400">- update to 2.4.6 (bsc#1196168, CVE-2022-25313):
  * Bug fixes:
  - Fix a regression introduced by the fix for CVE-2022-25313
    in release 2.4.5 that affects applications that (1)
    call function XML_SetElementDeclHandler and (2) are
    parsing XML that contains nested element declarations
    (e.g. "&lt;!ELEMENT junk ((bar|foo|xyz+), zebra*)&gt;").
  - Version info bumped from 9:5:8 to 9:6:8;
    see https://verbump.de/ for what these numbers do.</changelog>
  <changelog author="david.anes@suse.com" date="1646481600">- update to 2.4.7 (bsc#1196784, CVE-2022-25236):
  * Bug fixes:
  - Relax fix to CVE-2022-25236 (introduced with release 2.4.5)
    with regard to all valid URI characters (RFC 3986),
    i.e. the following set (excluding whitespace):
    ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz
    0123456789 % -._~ :/?#[]@ !$&amp;'()*+,;=
  * Other changes:
  - CMake|Windows: Store Expat version in the DLL
  - Document consequences of namespace separator choices not just
    in doc/reference.html but also in header &lt;expat.h&gt;
  - Document Expat's lack of validation of namespace URIs against
    RFC 3986, and that the XML 1.0r4 specification doesn't
    require Expat to validate namespace URIs, and that Expat
    may do more in that regard in future releases.
    If you find need for strict RFC 3986 URI validation on
    application level today, https://uriparser.github.io/ may
    be of interest.
  - Fix documentation of XML_EndDoctypeDeclHandler in &lt;expat.h&gt;
  - Document that a call to XML_FreeContentModel can be done at
    a later time from outside the element declaration handler
  - Make hardcoded namespace URIs easier to find in code
  - Update documentation on use of XML_POOR_ENTOPY on Solaris
  - tests: Resolve use of macros NAN and INFINITY for GNU G++
    4.8.2 on Solaris.
  - Version info bumped from 9:6:8 to 9:7:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1648555200">- update to 2.4.8:
  * Other changes:
  - pkg-config: Move "-lm" to section "Libs.private"
  - CMake|MSVC: Fix pkg-config section "Libs"
  - CMake|macOS: Start using linker arguments
    "-compatibility_version &lt;version&gt;" and
    "-current_version &lt;version&gt;" in a way compatible with GNU
    Libtool
  - Version info bumped from 9:7:8 to 9:8:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- update to 2.4.9: (bsc#1203438)
  * Security fixes:
  - CVE-2022-40674 -- Heap use-after-free vulnerability in
    function doContent. Expected impact is denial of service
    or potentially arbitrary code execution.
  * Bug fixes:
  - MinGW: Fix mis-compilation for -D__USE_MINGW_ANSI_STDIO=0
  - docs: Fix documentation on effect of switch XML_DTD on
    symbol visibility in doc/reference.html
  * Other changes:
  - MinGW: Make fix-xmltest-log.sh drop more Wine bug output
  - Autotools: Sync CMake templates with CMake 3.22
  - CMake: Migrate from use of CMAKE_*_POSTFIX to
    dedicated variables EXPAT_*_POSTFIX to stop affecting
    other projects
  - Windows|CMake: Add missing -DXML_STATIC to test runners
    and fuzzers
  - Windows|CMake: Render .def file from a template to fix
    linking with -DEXPAT_DTD=OFF and/or -DEXPAT_ATTR_INFO=ON
  - MinGW|CMake: Apply MSVC .def file when linking
  - MinGW|CMake: Sync library name with GNU Autotools,
    i.e. produce libexpat-1.dll rather than libexpat.dll
    by default.  Filename libexpat.dll.a is unaffected.
  - MinGW|CMake: Set missing variable CMAKE_RC_COMPILER in
    toolchain file "cmake/mingw-toolchain.cmake" to avoid
    error "windres: Command not found" on e.g. Ubuntu 20.04
  - CMake: Unify inconsistent use of set() and option() in
    context of public build time options to take need for
    set(.. FORCE) in projects using Expat by means of
    add_subdirectory(..) off Expat's users' shoulders
  - Stop exporting API symbols when building a static library
  - Resolve use of deprecated "fgrep" by "grep -F"
  - CMake: Make documentation on variables a bit more consistent
  - CMake: Drop leading whitespace from a #cmakedefine line in
    file expat_config.h.cmake
  - xmlwf: Fix harmless variable mix-up in function nsattcmp
  - Address Cppcheck warnings
  - Address Clang 15 compiler warnings
  - Version info bumped from 9:8:8 to 9:9:8;
    see https://verbump.de/ for what these numbers do
  * Infrastructure:
  - CI: Windows: Start covering MSVC 2022
  - CI: macOS: Migrate off deprecated macOS 10.15
  - CI: Linux: Make migration off deprecated Ubuntu 18.04 work
  - CI: Upgrade Clang from 14 to 15
  - apply-clang-format.sh: Add support for BSD find
  - coverage.sh: Exclude MinGW headers
  - coverage.sh: Fix name collision for -funsigned-char</changelog>
  <changelog author="david.anes@suse.com" date="1666785600">- Update to 2.5.0: (bsc#1204708)
  * Security fixes:
  - CVE-2022-43680 -- Fix heap use-after-free after overeager
    destruction of a shared DTD in function
    XML_ExternalEntityParserCreate in out-of-memory situations.
    Expected impact is denial of service or potentially arbitrary
    code execution.
  * Bug fixes:
  - Fix curruption from undefined entities
  - Fix case when parsing was suspended while processing nested
    entities
  - Stop leaking opening tag bindings after a closing tag mismatch
    error where a parser is reset through XML_ParserReset and then
    reused to parse
  - CMake: Fix generation of pkg-config file
  - MinGW|CMake: Fix static library name
  * Other changes:
  - Protect header expat_config.h from multiple inclusion
  - examples: Make use of XML_GetBuffer and be more consistent
    across examples
  - Address compiler warnings
  - Version info bumped from 9:9:8 to 9:10:8; see
    https://verbump.de/ for what these numbers do</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1670760000">- add upstream signing key and validate source signature</changelog>
  <changelog author="david.anes@suse.com" date="1707739200">- Update keyring automatically from keyserver during OBS service run.
- Explicitly use --without-docbook (before it was implicit).
- Include missing files for documentation and examples.
- Add manpage for xmlwf, which is now available in the released tarball.
- Clean the spec file a bit.
- Update to 2.6.0:
  * Security fixes:
  - CVE-2023-52425 (boo#1219559)
  - - Fix quadratic runtime issues with big tokens
    that can cause denial of service, in partial where
    dealing with compressed XML input.  Applications
    that parsed a document in one go -- a single call to
    functions XML_Parse or XML_ParseBuffer -- were not affected.
    The smaller the chunks/buffers you use for parsing
    previously, the bigger the problem prior to the fix.
    Backporters should be careful to no omit parts of
    pull request #789 and to include earlier pull request #771,
    in order to not break the fix.
  - CVE-2023-52426 (boo#1219561)
  - - Fix billion laughs attacks for users
    compiling *without* XML_DTD defined (which is not common).
    Users with XML_DTD defined have been protected since
    Expat &gt;=2.4.0 (and that was CVE-2013-0340 back then).
  * Bug fixes:
  - Fix parse-size-dependent "invalid token" error for
    external entities that start with a byte order mark
  - Fix NULL pointer dereference in setContext via
    XML_ExternalEntityParserCreate for compilation with
    XML_DTD undefined
  - Protect against closing entities out of order
  * Other changes:
  - Improve support for arc4random/arc4random_buf
  - Improve buffer growth in XML_GetBuffer and XML_Parse
  - xmlwf: Support --help and --version
  - xmlwf: Support custom buffer size for XML_GetBuffer and read
  - xmlwf: Improve language and URL clickability in help output
  - examples: Add new example "element_declarations.c"
  - Be stricter about macro XML_CONTEXT_BYTES at build time
  - Make inclusion to expat_config.h consistent
  - Autotools: configure.ac: Support --disable-maintainer-mode
  - Autotools: Sync CMake templates with CMake 3.26
  - Autotools: Make installation of shipped man page doc/xmlwf.1
    independent of docbook2man availability
  - Autotools|CMake: Add missing -DXML_STATIC to pkg-config file
    section "Cflags.private" in order to fix compilation
    against static libexpat using pkg-config on Windows
  - Autotools|CMake: Require a C99 compiler
    (a de-facto requirement already since Expat 2.2.2 of 2017)
  - Autotools|CMake: Fix PACKAGE_BUGREPORT variable
  - Autotools|CMake: Make test suite require a C++11 compiler
  - CMake: Require CMake &gt;=3.5.0
  - CMake: Lowercase off_t and size_t to help a bug in Meson
  - CMake: Sort xmlwf sources alphabetically
  - CMake|Windows: Fix generation of DLL file version info
  - CMake: Build tests/benchmark/benchmark.c as well for
    a build with -DEXPAT_BUILD_TESTS=ON
  - docs: Document the importance of isFinal + adjust tests
    accordingly
  - docs: Improve use of "NULL" and "null"
  - docs: Be specific about version of XML (XML 1.0r4)
    and version of C (C99); (XML 1.0r5 will need a sponsor.)
  - docs: reference.html: Promote function XML_ParseBuffer more
  - docs: reference.html: Add HTML anchors to XML_* macros
  - docs: reference.html: Upgrade to OK.css 1.2.0
  - docs: Fix typos
  - docs|CI: Use HTTPS URLs instead of HTTP at various places
  - Address compiler warnings
  - Address clang-tidy warnings
  - Version info bumped from 9:10:8 (libexpat*.so.1.8.10)
    to 10:0:9 (libexpat*.so.1.9.0); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1708430400">- Fix handling of xmlwf.1 to avoid workarounds in specfile:
  * Added libxml2-fix-xmlwf.1-handling.patch
- Call buildconf.sh to avoid (future) issues with expat_config.h.in</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1709294400">- update to 2.6.1:
  * Expose billion laughs API with XML_DTD defined and XML_GE
    undefined, regression from 2.6.0
  * Make tests independent of CPU speed, and thus more robust
- drop libxml2-fix-xmlwf.1-handling.patch, upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1710331200">- update to 2.6.2:
  * CVE-2024-28757 -- Prevent billion laughs attacks with isolated
    use of external parsers (boo#1221289)
  * Reject direct parameter entity recursion and avoid the related
    undefined behavior</changelog>
  <changelog author="david.anes@suse.com" date="1725537600">- Update to 2.6.3:
  * Security fixes:
  - CVE-2024-45490, bsc#1229930 -- Calling function XML_ParseBuffer with
    len &lt; 0 without noticing and then calling XML_GetBuffer
    will have XML_ParseBuffer fail to recognize the problem
    and XML_GetBuffer corrupt memory.
    With the fix, XML_ParseBuffer now complains with error
    XML_ERROR_INVALID_ARGUMENT just like sibling XML_Parse
    has been doing since Expat 2.2.1, and now documented.
    Impact is denial of service to potentially artitrary code
    execution.
  - CVE-2024-45491, bsc#1229931 -- Internal function dtdCopy can have an
    integer overflow for nDefaultAtts on 32-bit platforms
    (where UINT_MAX equals SIZE_MAX).
    Impact is denial of service to potentially artitrary code
    execution.
  - CVE-2024-45492, bsc#1229932 -- Internal function nextScaffoldPart can
    have an integer overflow for m_groupSize on 32-bit
    platforms (where UINT_MAX equals SIZE_MAX).
    Impact is denial of service to potentially artitrary code
    execution.
  * Other changes:
  - Autotools: Sync CMake templates with CMake 3.28
  - Autotools: Always provide path to find(1) for portability
  - Autotools: Ensure that the m4 directory always exists.
  - Autotools: Simplify handling of SIZEOF_VOID_P
  - Autotools: Support non-GNU sed
  - Autotools|CMake: Fix main() to main(void)
  - Autotools|CMake: Fix compile tests for HAVE_SYSCALL_GETRANDOM
  - Autotools|CMake: Stop requiring dos2unix
  - CMake: Fix check for symbols size_t and off_t
  - docs|tests: Convert README to Markdown and update
  - Windows: Drop support for Visual Studio &lt;=15.0/2017
  - Drop needless XML_DTD guards around is_param access
  - Fix typo in a code comment
  - Version info bumped from 10:2:9 (libexpat*.so.1.9.2)
    to 10:3:9 (libexpat*.so.1.9.3); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1727352000">- updated keyring [https://build.suse.de/request/show/345282]
- modified sources
  % expat.keyring</changelog>
  <changelog author="pgajdos@suse.com" date="1730980800">- version update to 2.6.4
  * Security fixes: [bsc#1232601][bsc#1232579]
    [#915]  CVE-2024-50602 -- Fix crash within function XML_ResumeParser
    from a NULL pointer dereference by disallowing function
    XML_StopParser to (stop or) suspend an unstarted parser.
    A new error code XML_ERROR_NOT_STARTED was introduced to
    properly communicate this situation.  // CWE-476 CWE-754
  * Other changes:
    [#903]  CMake: Add alias target "expat::expat"
    [#905]  docs: Document use via CMake &gt;=3.18 with FetchContent
    and SOURCE_SUBDIR and its consequences
    [#902]  tests: Reduce use of global parser instance
    [#904]  tests: Resolve duplicate handler
  [#317] #918  tests: Improve tests on doctype closing (ex CVE-2019-15903)
    [#914]  Fix signedness of format strings
  [#919] #920  Version info bumped from 10:3:9 (libexpat*.so.1.9.3)
    to 11:0:10 (libexpat*.so.1.10.0); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1731412800">- no source changes, just adding jira reference: jsc#SLE-21253</changelog>
  <changelog author="pgajdos@suse.com" date="1741953600">- version update to 2.7.0 (CVE-2024-8176 [bsc#1239618])
  * Security fixes:
    [#893] #973  CVE-2024-8176 -- Fix crash from chaining a large number
    of entities caused by stack overflow by resolving use of
    recursion, for all three uses of entities:
  - general entities in character data ("&lt;e&gt;&amp;g1;&lt;/e&gt;")
  - general entities in attribute values ("&lt;e k1='&amp;g1;'/&gt;")
  - parameter entities ("%p1;")
    Known impact is (reliable and easy) denial of service:
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:H/RL:O/RC:C
    (Base Score: 7.5, Temporal Score: 7.2)
    Please note that a layer of compression around XML can
    significantly reduce the minimum attack payload size.
  * Other changes:
    [#935] #937  Autotools: Make generated CMake files look for
    libexpat.@SO_MAJOR@.dylib on macOS
    [#925]  Autotools: Sync CMake templates with CMake 3.29
  [#945] #962 #966  CMake: Drop support for CMake &lt;3.13
    [#942]  CMake: Small fuzzing related improvements
    [#921]  docs: Add missing documentation of error code
    XML_ERROR_NOT_STARTED that was introduced with 2.6.4
    [#941]  docs: Document need for C++11 compiler for use from C++
    [#959]  tests/benchmark: Fix a (harmless) TOCTTOU
    [#944]  Windows: Fix installer target location of file xmlwf.xml
    for CMake
    [#953]  Windows: Address warning -Wunknown-warning-option
    about -Wno-pedantic-ms-format from LLVM MinGW
    [#971]  Address Cppcheck warnings
    [#969] #970  Mass-migrate links from http:// to https://
    [#947] #958 ..
    [#974] #975  Document changes since the previous release
    [#974] #975  Version info bumped from 11:0:10 (libexpat*.so.1.10.0)
    to 11:1:10 (libexpat*.so.1.10.1); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1743076800">- version update to 2.7.0 for SLE-15-SP7 (jsc#PED-12507)</changelog>
  <changelog author="pgajdos@suse.com" date="1743163200">- version update to 2.7.1
    Bug fixes:
    [#980] #989  Restore event pointer behavior from Expat 2.6.4
    (that the fix to CVE-2024-8176 changed in 2.7.0);
    affected API functions are:
  - XML_GetCurrentByteCount
  - XML_GetCurrentByteIndex
  - XML_GetCurrentColumnNumber
  - XML_GetCurrentLineNumber
  - XML_GetInputContext
    Other changes:
    [#976] #977  Autotools: Integrate files "fuzz/xml_lpm_fuzzer.{cpp,proto}"
    with Automake that were missing from 2.7.0 release tarballs
    [#983] #984  Fix printf format specifiers for 32bit Emscripten
    [#992]  docs: Promote OpenSSF Best Practices self-certification
    [#978]  tests/benchmark: Resolve mistaken double close
    [#986]  Address compiler warnings
    [#990] #993  Version info bumped from 11:1:10 (libexpat*.so.1.10.1)
    to 11:2:10 (libexpat*.so.1.10.2); see https://verbump.de/
    for what these numbers do
    Infrastructure:
    [#982]  CI: Start running Perl XML::Parser integration tests
    [#987]  CI: Enforce Clang Static Analyzer clean code
    [#991]  CI: Re-enable warning clang-analyzer-valist.Uninitialized
    for clang-tidy
    [#981]  CI: Cover compilation with musl
    [#983] #984  CI: Cover compilation with 32bit Emscripten
    [#976] #977  CI: Protect against fuzzer files missing from future
    release archives</changelog>
  <changelog author="martin.schreiner@suse.com" date="1759147200">- Fix CVE-2025-59375 / bsc#1249584.
- Add patch file:
  * CVE-2025-59375.patch</changelog>
</package>
<package pkgid="f1254135e055e72ca48c2356447ea72325fc5e57338e7d3766d091e5d4c82589" name="expat" arch="src">
  <version epoch="0" ver="2.7.1" rel="150700.3.9.2"/>
  <changelog author="david.anes@suse.com" date="1645272000">- update to 2.4.5 (bsc#1196171, bsc#1196169, bsc#1196168,
  bsc#1196026, bsc#1196025):
  * Security fixes:
  - CVE-2022-25235 -- Passing malformed 2- and 3-byte UTF-8
    sequences (e.g. from start tag names) to the XML
    processing application on top of Expat can cause
    arbitrary damage (e.g. code execution) depending
    on how invalid UTF-8 is handled inside the XML
    processor; validation was not their job but Expat's.
    Exploits with code execution are known to exist.
  - CVE-2022-25236 -- Passing (one or more) namespace separator
    characters in "xmlns[:prefix]" attribute values
    made Expat send malformed tag names to the XML
    processor on top of Expat which can cause
    arbitrary damage (e.g. code execution) depending
    on such unexpectable cases are handled inside the XML
    processor; validation was not their job but Expat's.
    Exploits with code execution are known to exist.
  - CVE-2022-25313 -- Fix stack exhaustion in doctype parsing
    that could be triggered by e.g. a 2 megabytes
    file with a large number of opening braces.
    Expected impact is denial of service or potentially
    arbitrary code execution.
  - CVE-2022-25314 -- Fix integer overflow in function copyString;
    only affects the encoding name parameter at parser creation
    time which is often hardcoded (rather than user input),
    takes a value in the gigabytes to trigger, and a 64-bit
    machine.  Expected impact is denial of service.
  - CVE-2022-25315 -- Fix integer overflow in function storeRawNames;
    needs input in the gigabytes and a 64-bit machine.
    Expected impact is denial of service or potentially
    arbitrary code execution.
  * Other changes:
  - Version info bumped from 9:4:8 to 9:5:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1645358400">- update to 2.4.6 (bsc#1196168, CVE-2022-25313):
  * Bug fixes:
  - Fix a regression introduced by the fix for CVE-2022-25313
    in release 2.4.5 that affects applications that (1)
    call function XML_SetElementDeclHandler and (2) are
    parsing XML that contains nested element declarations
    (e.g. "&lt;!ELEMENT junk ((bar|foo|xyz+), zebra*)&gt;").
  - Version info bumped from 9:5:8 to 9:6:8;
    see https://verbump.de/ for what these numbers do.</changelog>
  <changelog author="david.anes@suse.com" date="1646481600">- update to 2.4.7 (bsc#1196784, CVE-2022-25236):
  * Bug fixes:
  - Relax fix to CVE-2022-25236 (introduced with release 2.4.5)
    with regard to all valid URI characters (RFC 3986),
    i.e. the following set (excluding whitespace):
    ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz
    0123456789 % -._~ :/?#[]@ !$&amp;'()*+,;=
  * Other changes:
  - CMake|Windows: Store Expat version in the DLL
  - Document consequences of namespace separator choices not just
    in doc/reference.html but also in header &lt;expat.h&gt;
  - Document Expat's lack of validation of namespace URIs against
    RFC 3986, and that the XML 1.0r4 specification doesn't
    require Expat to validate namespace URIs, and that Expat
    may do more in that regard in future releases.
    If you find need for strict RFC 3986 URI validation on
    application level today, https://uriparser.github.io/ may
    be of interest.
  - Fix documentation of XML_EndDoctypeDeclHandler in &lt;expat.h&gt;
  - Document that a call to XML_FreeContentModel can be done at
    a later time from outside the element declaration handler
  - Make hardcoded namespace URIs easier to find in code
  - Update documentation on use of XML_POOR_ENTOPY on Solaris
  - tests: Resolve use of macros NAN and INFINITY for GNU G++
    4.8.2 on Solaris.
  - Version info bumped from 9:6:8 to 9:7:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1648555200">- update to 2.4.8:
  * Other changes:
  - pkg-config: Move "-lm" to section "Libs.private"
  - CMake|MSVC: Fix pkg-config section "Libs"
  - CMake|macOS: Start using linker arguments
    "-compatibility_version &lt;version&gt;" and
    "-current_version &lt;version&gt;" in a way compatible with GNU
    Libtool
  - Version info bumped from 9:7:8 to 9:8:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- update to 2.4.9: (bsc#1203438)
  * Security fixes:
  - CVE-2022-40674 -- Heap use-after-free vulnerability in
    function doContent. Expected impact is denial of service
    or potentially arbitrary code execution.
  * Bug fixes:
  - MinGW: Fix mis-compilation for -D__USE_MINGW_ANSI_STDIO=0
  - docs: Fix documentation on effect of switch XML_DTD on
    symbol visibility in doc/reference.html
  * Other changes:
  - MinGW: Make fix-xmltest-log.sh drop more Wine bug output
  - Autotools: Sync CMake templates with CMake 3.22
  - CMake: Migrate from use of CMAKE_*_POSTFIX to
    dedicated variables EXPAT_*_POSTFIX to stop affecting
    other projects
  - Windows|CMake: Add missing -DXML_STATIC to test runners
    and fuzzers
  - Windows|CMake: Render .def file from a template to fix
    linking with -DEXPAT_DTD=OFF and/or -DEXPAT_ATTR_INFO=ON
  - MinGW|CMake: Apply MSVC .def file when linking
  - MinGW|CMake: Sync library name with GNU Autotools,
    i.e. produce libexpat-1.dll rather than libexpat.dll
    by default.  Filename libexpat.dll.a is unaffected.
  - MinGW|CMake: Set missing variable CMAKE_RC_COMPILER in
    toolchain file "cmake/mingw-toolchain.cmake" to avoid
    error "windres: Command not found" on e.g. Ubuntu 20.04
  - CMake: Unify inconsistent use of set() and option() in
    context of public build time options to take need for
    set(.. FORCE) in projects using Expat by means of
    add_subdirectory(..) off Expat's users' shoulders
  - Stop exporting API symbols when building a static library
  - Resolve use of deprecated "fgrep" by "grep -F"
  - CMake: Make documentation on variables a bit more consistent
  - CMake: Drop leading whitespace from a #cmakedefine line in
    file expat_config.h.cmake
  - xmlwf: Fix harmless variable mix-up in function nsattcmp
  - Address Cppcheck warnings
  - Address Clang 15 compiler warnings
  - Version info bumped from 9:8:8 to 9:9:8;
    see https://verbump.de/ for what these numbers do
  * Infrastructure:
  - CI: Windows: Start covering MSVC 2022
  - CI: macOS: Migrate off deprecated macOS 10.15
  - CI: Linux: Make migration off deprecated Ubuntu 18.04 work
  - CI: Upgrade Clang from 14 to 15
  - apply-clang-format.sh: Add support for BSD find
  - coverage.sh: Exclude MinGW headers
  - coverage.sh: Fix name collision for -funsigned-char</changelog>
  <changelog author="david.anes@suse.com" date="1666785600">- Update to 2.5.0: (bsc#1204708)
  * Security fixes:
  - CVE-2022-43680 -- Fix heap use-after-free after overeager
    destruction of a shared DTD in function
    XML_ExternalEntityParserCreate in out-of-memory situations.
    Expected impact is denial of service or potentially arbitrary
    code execution.
  * Bug fixes:
  - Fix curruption from undefined entities
  - Fix case when parsing was suspended while processing nested
    entities
  - Stop leaking opening tag bindings after a closing tag mismatch
    error where a parser is reset through XML_ParserReset and then
    reused to parse
  - CMake: Fix generation of pkg-config file
  - MinGW|CMake: Fix static library name
  * Other changes:
  - Protect header expat_config.h from multiple inclusion
  - examples: Make use of XML_GetBuffer and be more consistent
    across examples
  - Address compiler warnings
  - Version info bumped from 9:9:8 to 9:10:8; see
    https://verbump.de/ for what these numbers do</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1670760000">- add upstream signing key and validate source signature</changelog>
  <changelog author="david.anes@suse.com" date="1707739200">- Update keyring automatically from keyserver during OBS service run.
- Explicitly use --without-docbook (before it was implicit).
- Include missing files for documentation and examples.
- Add manpage for xmlwf, which is now available in the released tarball.
- Clean the spec file a bit.
- Update to 2.6.0:
  * Security fixes:
  - CVE-2023-52425 (boo#1219559)
  - - Fix quadratic runtime issues with big tokens
    that can cause denial of service, in partial where
    dealing with compressed XML input.  Applications
    that parsed a document in one go -- a single call to
    functions XML_Parse or XML_ParseBuffer -- were not affected.
    The smaller the chunks/buffers you use for parsing
    previously, the bigger the problem prior to the fix.
    Backporters should be careful to no omit parts of
    pull request #789 and to include earlier pull request #771,
    in order to not break the fix.
  - CVE-2023-52426 (boo#1219561)
  - - Fix billion laughs attacks for users
    compiling *without* XML_DTD defined (which is not common).
    Users with XML_DTD defined have been protected since
    Expat &gt;=2.4.0 (and that was CVE-2013-0340 back then).
  * Bug fixes:
  - Fix parse-size-dependent "invalid token" error for
    external entities that start with a byte order mark
  - Fix NULL pointer dereference in setContext via
    XML_ExternalEntityParserCreate for compilation with
    XML_DTD undefined
  - Protect against closing entities out of order
  * Other changes:
  - Improve support for arc4random/arc4random_buf
  - Improve buffer growth in XML_GetBuffer and XML_Parse
  - xmlwf: Support --help and --version
  - xmlwf: Support custom buffer size for XML_GetBuffer and read
  - xmlwf: Improve language and URL clickability in help output
  - examples: Add new example "element_declarations.c"
  - Be stricter about macro XML_CONTEXT_BYTES at build time
  - Make inclusion to expat_config.h consistent
  - Autotools: configure.ac: Support --disable-maintainer-mode
  - Autotools: Sync CMake templates with CMake 3.26
  - Autotools: Make installation of shipped man page doc/xmlwf.1
    independent of docbook2man availability
  - Autotools|CMake: Add missing -DXML_STATIC to pkg-config file
    section "Cflags.private" in order to fix compilation
    against static libexpat using pkg-config on Windows
  - Autotools|CMake: Require a C99 compiler
    (a de-facto requirement already since Expat 2.2.2 of 2017)
  - Autotools|CMake: Fix PACKAGE_BUGREPORT variable
  - Autotools|CMake: Make test suite require a C++11 compiler
  - CMake: Require CMake &gt;=3.5.0
  - CMake: Lowercase off_t and size_t to help a bug in Meson
  - CMake: Sort xmlwf sources alphabetically
  - CMake|Windows: Fix generation of DLL file version info
  - CMake: Build tests/benchmark/benchmark.c as well for
    a build with -DEXPAT_BUILD_TESTS=ON
  - docs: Document the importance of isFinal + adjust tests
    accordingly
  - docs: Improve use of "NULL" and "null"
  - docs: Be specific about version of XML (XML 1.0r4)
    and version of C (C99); (XML 1.0r5 will need a sponsor.)
  - docs: reference.html: Promote function XML_ParseBuffer more
  - docs: reference.html: Add HTML anchors to XML_* macros
  - docs: reference.html: Upgrade to OK.css 1.2.0
  - docs: Fix typos
  - docs|CI: Use HTTPS URLs instead of HTTP at various places
  - Address compiler warnings
  - Address clang-tidy warnings
  - Version info bumped from 9:10:8 (libexpat*.so.1.8.10)
    to 10:0:9 (libexpat*.so.1.9.0); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1708430400">- Fix handling of xmlwf.1 to avoid workarounds in specfile:
  * Added libxml2-fix-xmlwf.1-handling.patch
- Call buildconf.sh to avoid (future) issues with expat_config.h.in</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1709294400">- update to 2.6.1:
  * Expose billion laughs API with XML_DTD defined and XML_GE
    undefined, regression from 2.6.0
  * Make tests independent of CPU speed, and thus more robust
- drop libxml2-fix-xmlwf.1-handling.patch, upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1710331200">- update to 2.6.2:
  * CVE-2024-28757 -- Prevent billion laughs attacks with isolated
    use of external parsers (boo#1221289)
  * Reject direct parameter entity recursion and avoid the related
    undefined behavior</changelog>
  <changelog author="david.anes@suse.com" date="1725537600">- Update to 2.6.3:
  * Security fixes:
  - CVE-2024-45490, bsc#1229930 -- Calling function XML_ParseBuffer with
    len &lt; 0 without noticing and then calling XML_GetBuffer
    will have XML_ParseBuffer fail to recognize the problem
    and XML_GetBuffer corrupt memory.
    With the fix, XML_ParseBuffer now complains with error
    XML_ERROR_INVALID_ARGUMENT just like sibling XML_Parse
    has been doing since Expat 2.2.1, and now documented.
    Impact is denial of service to potentially artitrary code
    execution.
  - CVE-2024-45491, bsc#1229931 -- Internal function dtdCopy can have an
    integer overflow for nDefaultAtts on 32-bit platforms
    (where UINT_MAX equals SIZE_MAX).
    Impact is denial of service to potentially artitrary code
    execution.
  - CVE-2024-45492, bsc#1229932 -- Internal function nextScaffoldPart can
    have an integer overflow for m_groupSize on 32-bit
    platforms (where UINT_MAX equals SIZE_MAX).
    Impact is denial of service to potentially artitrary code
    execution.
  * Other changes:
  - Autotools: Sync CMake templates with CMake 3.28
  - Autotools: Always provide path to find(1) for portability
  - Autotools: Ensure that the m4 directory always exists.
  - Autotools: Simplify handling of SIZEOF_VOID_P
  - Autotools: Support non-GNU sed
  - Autotools|CMake: Fix main() to main(void)
  - Autotools|CMake: Fix compile tests for HAVE_SYSCALL_GETRANDOM
  - Autotools|CMake: Stop requiring dos2unix
  - CMake: Fix check for symbols size_t and off_t
  - docs|tests: Convert README to Markdown and update
  - Windows: Drop support for Visual Studio &lt;=15.0/2017
  - Drop needless XML_DTD guards around is_param access
  - Fix typo in a code comment
  - Version info bumped from 10:2:9 (libexpat*.so.1.9.2)
    to 10:3:9 (libexpat*.so.1.9.3); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1727352000">- updated keyring [https://build.suse.de/request/show/345282]
- modified sources
  % expat.keyring</changelog>
  <changelog author="pgajdos@suse.com" date="1730980800">- version update to 2.6.4
  * Security fixes: [bsc#1232601][bsc#1232579]
    [#915]  CVE-2024-50602 -- Fix crash within function XML_ResumeParser
    from a NULL pointer dereference by disallowing function
    XML_StopParser to (stop or) suspend an unstarted parser.
    A new error code XML_ERROR_NOT_STARTED was introduced to
    properly communicate this situation.  // CWE-476 CWE-754
  * Other changes:
    [#903]  CMake: Add alias target "expat::expat"
    [#905]  docs: Document use via CMake &gt;=3.18 with FetchContent
    and SOURCE_SUBDIR and its consequences
    [#902]  tests: Reduce use of global parser instance
    [#904]  tests: Resolve duplicate handler
  [#317] #918  tests: Improve tests on doctype closing (ex CVE-2019-15903)
    [#914]  Fix signedness of format strings
  [#919] #920  Version info bumped from 10:3:9 (libexpat*.so.1.9.3)
    to 11:0:10 (libexpat*.so.1.10.0); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1731412800">- no source changes, just adding jira reference: jsc#SLE-21253</changelog>
  <changelog author="pgajdos@suse.com" date="1741953600">- version update to 2.7.0 (CVE-2024-8176 [bsc#1239618])
  * Security fixes:
    [#893] #973  CVE-2024-8176 -- Fix crash from chaining a large number
    of entities caused by stack overflow by resolving use of
    recursion, for all three uses of entities:
  - general entities in character data ("&lt;e&gt;&amp;g1;&lt;/e&gt;")
  - general entities in attribute values ("&lt;e k1='&amp;g1;'/&gt;")
  - parameter entities ("%p1;")
    Known impact is (reliable and easy) denial of service:
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:H/RL:O/RC:C
    (Base Score: 7.5, Temporal Score: 7.2)
    Please note that a layer of compression around XML can
    significantly reduce the minimum attack payload size.
  * Other changes:
    [#935] #937  Autotools: Make generated CMake files look for
    libexpat.@SO_MAJOR@.dylib on macOS
    [#925]  Autotools: Sync CMake templates with CMake 3.29
  [#945] #962 #966  CMake: Drop support for CMake &lt;3.13
    [#942]  CMake: Small fuzzing related improvements
    [#921]  docs: Add missing documentation of error code
    XML_ERROR_NOT_STARTED that was introduced with 2.6.4
    [#941]  docs: Document need for C++11 compiler for use from C++
    [#959]  tests/benchmark: Fix a (harmless) TOCTTOU
    [#944]  Windows: Fix installer target location of file xmlwf.xml
    for CMake
    [#953]  Windows: Address warning -Wunknown-warning-option
    about -Wno-pedantic-ms-format from LLVM MinGW
    [#971]  Address Cppcheck warnings
    [#969] #970  Mass-migrate links from http:// to https://
    [#947] #958 ..
    [#974] #975  Document changes since the previous release
    [#974] #975  Version info bumped from 11:0:10 (libexpat*.so.1.10.0)
    to 11:1:10 (libexpat*.so.1.10.1); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1743076800">- version update to 2.7.0 for SLE-15-SP7 (jsc#PED-12507)</changelog>
  <changelog author="pgajdos@suse.com" date="1743163200">- version update to 2.7.1
    Bug fixes:
    [#980] #989  Restore event pointer behavior from Expat 2.6.4
    (that the fix to CVE-2024-8176 changed in 2.7.0);
    affected API functions are:
  - XML_GetCurrentByteCount
  - XML_GetCurrentByteIndex
  - XML_GetCurrentColumnNumber
  - XML_GetCurrentLineNumber
  - XML_GetInputContext
    Other changes:
    [#976] #977  Autotools: Integrate files "fuzz/xml_lpm_fuzzer.{cpp,proto}"
    with Automake that were missing from 2.7.0 release tarballs
    [#983] #984  Fix printf format specifiers for 32bit Emscripten
    [#992]  docs: Promote OpenSSF Best Practices self-certification
    [#978]  tests/benchmark: Resolve mistaken double close
    [#986]  Address compiler warnings
    [#990] #993  Version info bumped from 11:1:10 (libexpat*.so.1.10.1)
    to 11:2:10 (libexpat*.so.1.10.2); see https://verbump.de/
    for what these numbers do
    Infrastructure:
    [#982]  CI: Start running Perl XML::Parser integration tests
    [#987]  CI: Enforce Clang Static Analyzer clean code
    [#991]  CI: Re-enable warning clang-analyzer-valist.Uninitialized
    for clang-tidy
    [#981]  CI: Cover compilation with musl
    [#983] #984  CI: Cover compilation with 32bit Emscripten
    [#976] #977  CI: Protect against fuzzer files missing from future
    release archives</changelog>
  <changelog author="martin.schreiner@suse.com" date="1759147200">- Fix CVE-2025-59375 / bsc#1249584.
- Add patch file:
  * CVE-2025-59375.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770120000">- security update
- added patches
  CVE-2026-24515 [bsc#1257144], NULL dereference (CWE-476) due to function XML_ExternalEntityParserCreate() failing to copy the encoding handler data passed to XML_SetUnknownEncodingHandler() from the parent to the subparser
  * expat-CVE-2026-24515.patch
  CVE-2026-25210 [bsc#1257496], lack of buffer size check can lead to an integer overflow
  * expat-CVE-2026-25210.patch</changelog>
</package>
<package pkgid="4b4fc3f08bec2cad401a12181c8e248f67d33374e9b94349896a33722c4973ea" name="expat" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="150700.3.9.2"/>
  <changelog author="david.anes@suse.com" date="1645272000">- update to 2.4.5 (bsc#1196171, bsc#1196169, bsc#1196168,
  bsc#1196026, bsc#1196025):
  * Security fixes:
  - CVE-2022-25235 -- Passing malformed 2- and 3-byte UTF-8
    sequences (e.g. from start tag names) to the XML
    processing application on top of Expat can cause
    arbitrary damage (e.g. code execution) depending
    on how invalid UTF-8 is handled inside the XML
    processor; validation was not their job but Expat's.
    Exploits with code execution are known to exist.
  - CVE-2022-25236 -- Passing (one or more) namespace separator
    characters in "xmlns[:prefix]" attribute values
    made Expat send malformed tag names to the XML
    processor on top of Expat which can cause
    arbitrary damage (e.g. code execution) depending
    on such unexpectable cases are handled inside the XML
    processor; validation was not their job but Expat's.
    Exploits with code execution are known to exist.
  - CVE-2022-25313 -- Fix stack exhaustion in doctype parsing
    that could be triggered by e.g. a 2 megabytes
    file with a large number of opening braces.
    Expected impact is denial of service or potentially
    arbitrary code execution.
  - CVE-2022-25314 -- Fix integer overflow in function copyString;
    only affects the encoding name parameter at parser creation
    time which is often hardcoded (rather than user input),
    takes a value in the gigabytes to trigger, and a 64-bit
    machine.  Expected impact is denial of service.
  - CVE-2022-25315 -- Fix integer overflow in function storeRawNames;
    needs input in the gigabytes and a 64-bit machine.
    Expected impact is denial of service or potentially
    arbitrary code execution.
  * Other changes:
  - Version info bumped from 9:4:8 to 9:5:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1645358400">- update to 2.4.6 (bsc#1196168, CVE-2022-25313):
  * Bug fixes:
  - Fix a regression introduced by the fix for CVE-2022-25313
    in release 2.4.5 that affects applications that (1)
    call function XML_SetElementDeclHandler and (2) are
    parsing XML that contains nested element declarations
    (e.g. "&lt;!ELEMENT junk ((bar|foo|xyz+), zebra*)&gt;").
  - Version info bumped from 9:5:8 to 9:6:8;
    see https://verbump.de/ for what these numbers do.</changelog>
  <changelog author="david.anes@suse.com" date="1646481600">- update to 2.4.7 (bsc#1196784, CVE-2022-25236):
  * Bug fixes:
  - Relax fix to CVE-2022-25236 (introduced with release 2.4.5)
    with regard to all valid URI characters (RFC 3986),
    i.e. the following set (excluding whitespace):
    ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz
    0123456789 % -._~ :/?#[]@ !$&amp;'()*+,;=
  * Other changes:
  - CMake|Windows: Store Expat version in the DLL
  - Document consequences of namespace separator choices not just
    in doc/reference.html but also in header &lt;expat.h&gt;
  - Document Expat's lack of validation of namespace URIs against
    RFC 3986, and that the XML 1.0r4 specification doesn't
    require Expat to validate namespace URIs, and that Expat
    may do more in that regard in future releases.
    If you find need for strict RFC 3986 URI validation on
    application level today, https://uriparser.github.io/ may
    be of interest.
  - Fix documentation of XML_EndDoctypeDeclHandler in &lt;expat.h&gt;
  - Document that a call to XML_FreeContentModel can be done at
    a later time from outside the element declaration handler
  - Make hardcoded namespace URIs easier to find in code
  - Update documentation on use of XML_POOR_ENTOPY on Solaris
  - tests: Resolve use of macros NAN and INFINITY for GNU G++
    4.8.2 on Solaris.
  - Version info bumped from 9:6:8 to 9:7:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1648555200">- update to 2.4.8:
  * Other changes:
  - pkg-config: Move "-lm" to section "Libs.private"
  - CMake|MSVC: Fix pkg-config section "Libs"
  - CMake|macOS: Start using linker arguments
    "-compatibility_version &lt;version&gt;" and
    "-current_version &lt;version&gt;" in a way compatible with GNU
    Libtool
  - Version info bumped from 9:7:8 to 9:8:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- update to 2.4.9: (bsc#1203438)
  * Security fixes:
  - CVE-2022-40674 -- Heap use-after-free vulnerability in
    function doContent. Expected impact is denial of service
    or potentially arbitrary code execution.
  * Bug fixes:
  - MinGW: Fix mis-compilation for -D__USE_MINGW_ANSI_STDIO=0
  - docs: Fix documentation on effect of switch XML_DTD on
    symbol visibility in doc/reference.html
  * Other changes:
  - MinGW: Make fix-xmltest-log.sh drop more Wine bug output
  - Autotools: Sync CMake templates with CMake 3.22
  - CMake: Migrate from use of CMAKE_*_POSTFIX to
    dedicated variables EXPAT_*_POSTFIX to stop affecting
    other projects
  - Windows|CMake: Add missing -DXML_STATIC to test runners
    and fuzzers
  - Windows|CMake: Render .def file from a template to fix
    linking with -DEXPAT_DTD=OFF and/or -DEXPAT_ATTR_INFO=ON
  - MinGW|CMake: Apply MSVC .def file when linking
  - MinGW|CMake: Sync library name with GNU Autotools,
    i.e. produce libexpat-1.dll rather than libexpat.dll
    by default.  Filename libexpat.dll.a is unaffected.
  - MinGW|CMake: Set missing variable CMAKE_RC_COMPILER in
    toolchain file "cmake/mingw-toolchain.cmake" to avoid
    error "windres: Command not found" on e.g. Ubuntu 20.04
  - CMake: Unify inconsistent use of set() and option() in
    context of public build time options to take need for
    set(.. FORCE) in projects using Expat by means of
    add_subdirectory(..) off Expat's users' shoulders
  - Stop exporting API symbols when building a static library
  - Resolve use of deprecated "fgrep" by "grep -F"
  - CMake: Make documentation on variables a bit more consistent
  - CMake: Drop leading whitespace from a #cmakedefine line in
    file expat_config.h.cmake
  - xmlwf: Fix harmless variable mix-up in function nsattcmp
  - Address Cppcheck warnings
  - Address Clang 15 compiler warnings
  - Version info bumped from 9:8:8 to 9:9:8;
    see https://verbump.de/ for what these numbers do
  * Infrastructure:
  - CI: Windows: Start covering MSVC 2022
  - CI: macOS: Migrate off deprecated macOS 10.15
  - CI: Linux: Make migration off deprecated Ubuntu 18.04 work
  - CI: Upgrade Clang from 14 to 15
  - apply-clang-format.sh: Add support for BSD find
  - coverage.sh: Exclude MinGW headers
  - coverage.sh: Fix name collision for -funsigned-char</changelog>
  <changelog author="david.anes@suse.com" date="1666785600">- Update to 2.5.0: (bsc#1204708)
  * Security fixes:
  - CVE-2022-43680 -- Fix heap use-after-free after overeager
    destruction of a shared DTD in function
    XML_ExternalEntityParserCreate in out-of-memory situations.
    Expected impact is denial of service or potentially arbitrary
    code execution.
  * Bug fixes:
  - Fix curruption from undefined entities
  - Fix case when parsing was suspended while processing nested
    entities
  - Stop leaking opening tag bindings after a closing tag mismatch
    error where a parser is reset through XML_ParserReset and then
    reused to parse
  - CMake: Fix generation of pkg-config file
  - MinGW|CMake: Fix static library name
  * Other changes:
  - Protect header expat_config.h from multiple inclusion
  - examples: Make use of XML_GetBuffer and be more consistent
    across examples
  - Address compiler warnings
  - Version info bumped from 9:9:8 to 9:10:8; see
    https://verbump.de/ for what these numbers do</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1670760000">- add upstream signing key and validate source signature</changelog>
  <changelog author="david.anes@suse.com" date="1707739200">- Update keyring automatically from keyserver during OBS service run.
- Explicitly use --without-docbook (before it was implicit).
- Include missing files for documentation and examples.
- Add manpage for xmlwf, which is now available in the released tarball.
- Clean the spec file a bit.
- Update to 2.6.0:
  * Security fixes:
  - CVE-2023-52425 (boo#1219559)
  - - Fix quadratic runtime issues with big tokens
    that can cause denial of service, in partial where
    dealing with compressed XML input.  Applications
    that parsed a document in one go -- a single call to
    functions XML_Parse or XML_ParseBuffer -- were not affected.
    The smaller the chunks/buffers you use for parsing
    previously, the bigger the problem prior to the fix.
    Backporters should be careful to no omit parts of
    pull request #789 and to include earlier pull request #771,
    in order to not break the fix.
  - CVE-2023-52426 (boo#1219561)
  - - Fix billion laughs attacks for users
    compiling *without* XML_DTD defined (which is not common).
    Users with XML_DTD defined have been protected since
    Expat &gt;=2.4.0 (and that was CVE-2013-0340 back then).
  * Bug fixes:
  - Fix parse-size-dependent "invalid token" error for
    external entities that start with a byte order mark
  - Fix NULL pointer dereference in setContext via
    XML_ExternalEntityParserCreate for compilation with
    XML_DTD undefined
  - Protect against closing entities out of order
  * Other changes:
  - Improve support for arc4random/arc4random_buf
  - Improve buffer growth in XML_GetBuffer and XML_Parse
  - xmlwf: Support --help and --version
  - xmlwf: Support custom buffer size for XML_GetBuffer and read
  - xmlwf: Improve language and URL clickability in help output
  - examples: Add new example "element_declarations.c"
  - Be stricter about macro XML_CONTEXT_BYTES at build time
  - Make inclusion to expat_config.h consistent
  - Autotools: configure.ac: Support --disable-maintainer-mode
  - Autotools: Sync CMake templates with CMake 3.26
  - Autotools: Make installation of shipped man page doc/xmlwf.1
    independent of docbook2man availability
  - Autotools|CMake: Add missing -DXML_STATIC to pkg-config file
    section "Cflags.private" in order to fix compilation
    against static libexpat using pkg-config on Windows
  - Autotools|CMake: Require a C99 compiler
    (a de-facto requirement already since Expat 2.2.2 of 2017)
  - Autotools|CMake: Fix PACKAGE_BUGREPORT variable
  - Autotools|CMake: Make test suite require a C++11 compiler
  - CMake: Require CMake &gt;=3.5.0
  - CMake: Lowercase off_t and size_t to help a bug in Meson
  - CMake: Sort xmlwf sources alphabetically
  - CMake|Windows: Fix generation of DLL file version info
  - CMake: Build tests/benchmark/benchmark.c as well for
    a build with -DEXPAT_BUILD_TESTS=ON
  - docs: Document the importance of isFinal + adjust tests
    accordingly
  - docs: Improve use of "NULL" and "null"
  - docs: Be specific about version of XML (XML 1.0r4)
    and version of C (C99); (XML 1.0r5 will need a sponsor.)
  - docs: reference.html: Promote function XML_ParseBuffer more
  - docs: reference.html: Add HTML anchors to XML_* macros
  - docs: reference.html: Upgrade to OK.css 1.2.0
  - docs: Fix typos
  - docs|CI: Use HTTPS URLs instead of HTTP at various places
  - Address compiler warnings
  - Address clang-tidy warnings
  - Version info bumped from 9:10:8 (libexpat*.so.1.8.10)
    to 10:0:9 (libexpat*.so.1.9.0); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1708430400">- Fix handling of xmlwf.1 to avoid workarounds in specfile:
  * Added libxml2-fix-xmlwf.1-handling.patch
- Call buildconf.sh to avoid (future) issues with expat_config.h.in</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1709294400">- update to 2.6.1:
  * Expose billion laughs API with XML_DTD defined and XML_GE
    undefined, regression from 2.6.0
  * Make tests independent of CPU speed, and thus more robust
- drop libxml2-fix-xmlwf.1-handling.patch, upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1710331200">- update to 2.6.2:
  * CVE-2024-28757 -- Prevent billion laughs attacks with isolated
    use of external parsers (boo#1221289)
  * Reject direct parameter entity recursion and avoid the related
    undefined behavior</changelog>
  <changelog author="david.anes@suse.com" date="1725537600">- Update to 2.6.3:
  * Security fixes:
  - CVE-2024-45490, bsc#1229930 -- Calling function XML_ParseBuffer with
    len &lt; 0 without noticing and then calling XML_GetBuffer
    will have XML_ParseBuffer fail to recognize the problem
    and XML_GetBuffer corrupt memory.
    With the fix, XML_ParseBuffer now complains with error
    XML_ERROR_INVALID_ARGUMENT just like sibling XML_Parse
    has been doing since Expat 2.2.1, and now documented.
    Impact is denial of service to potentially artitrary code
    execution.
  - CVE-2024-45491, bsc#1229931 -- Internal function dtdCopy can have an
    integer overflow for nDefaultAtts on 32-bit platforms
    (where UINT_MAX equals SIZE_MAX).
    Impact is denial of service to potentially artitrary code
    execution.
  - CVE-2024-45492, bsc#1229932 -- Internal function nextScaffoldPart can
    have an integer overflow for m_groupSize on 32-bit
    platforms (where UINT_MAX equals SIZE_MAX).
    Impact is denial of service to potentially artitrary code
    execution.
  * Other changes:
  - Autotools: Sync CMake templates with CMake 3.28
  - Autotools: Always provide path to find(1) for portability
  - Autotools: Ensure that the m4 directory always exists.
  - Autotools: Simplify handling of SIZEOF_VOID_P
  - Autotools: Support non-GNU sed
  - Autotools|CMake: Fix main() to main(void)
  - Autotools|CMake: Fix compile tests for HAVE_SYSCALL_GETRANDOM
  - Autotools|CMake: Stop requiring dos2unix
  - CMake: Fix check for symbols size_t and off_t
  - docs|tests: Convert README to Markdown and update
  - Windows: Drop support for Visual Studio &lt;=15.0/2017
  - Drop needless XML_DTD guards around is_param access
  - Fix typo in a code comment
  - Version info bumped from 10:2:9 (libexpat*.so.1.9.2)
    to 10:3:9 (libexpat*.so.1.9.3); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1727352000">- updated keyring [https://build.suse.de/request/show/345282]
- modified sources
  % expat.keyring</changelog>
  <changelog author="pgajdos@suse.com" date="1730980800">- version update to 2.6.4
  * Security fixes: [bsc#1232601][bsc#1232579]
    [#915]  CVE-2024-50602 -- Fix crash within function XML_ResumeParser
    from a NULL pointer dereference by disallowing function
    XML_StopParser to (stop or) suspend an unstarted parser.
    A new error code XML_ERROR_NOT_STARTED was introduced to
    properly communicate this situation.  // CWE-476 CWE-754
  * Other changes:
    [#903]  CMake: Add alias target "expat::expat"
    [#905]  docs: Document use via CMake &gt;=3.18 with FetchContent
    and SOURCE_SUBDIR and its consequences
    [#902]  tests: Reduce use of global parser instance
    [#904]  tests: Resolve duplicate handler
  [#317] #918  tests: Improve tests on doctype closing (ex CVE-2019-15903)
    [#914]  Fix signedness of format strings
  [#919] #920  Version info bumped from 10:3:9 (libexpat*.so.1.9.3)
    to 11:0:10 (libexpat*.so.1.10.0); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1731412800">- no source changes, just adding jira reference: jsc#SLE-21253</changelog>
  <changelog author="pgajdos@suse.com" date="1741953600">- version update to 2.7.0 (CVE-2024-8176 [bsc#1239618])
  * Security fixes:
    [#893] #973  CVE-2024-8176 -- Fix crash from chaining a large number
    of entities caused by stack overflow by resolving use of
    recursion, for all three uses of entities:
  - general entities in character data ("&lt;e&gt;&amp;g1;&lt;/e&gt;")
  - general entities in attribute values ("&lt;e k1='&amp;g1;'/&gt;")
  - parameter entities ("%p1;")
    Known impact is (reliable and easy) denial of service:
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:H/RL:O/RC:C
    (Base Score: 7.5, Temporal Score: 7.2)
    Please note that a layer of compression around XML can
    significantly reduce the minimum attack payload size.
  * Other changes:
    [#935] #937  Autotools: Make generated CMake files look for
    libexpat.@SO_MAJOR@.dylib on macOS
    [#925]  Autotools: Sync CMake templates with CMake 3.29
  [#945] #962 #966  CMake: Drop support for CMake &lt;3.13
    [#942]  CMake: Small fuzzing related improvements
    [#921]  docs: Add missing documentation of error code
    XML_ERROR_NOT_STARTED that was introduced with 2.6.4
    [#941]  docs: Document need for C++11 compiler for use from C++
    [#959]  tests/benchmark: Fix a (harmless) TOCTTOU
    [#944]  Windows: Fix installer target location of file xmlwf.xml
    for CMake
    [#953]  Windows: Address warning -Wunknown-warning-option
    about -Wno-pedantic-ms-format from LLVM MinGW
    [#971]  Address Cppcheck warnings
    [#969] #970  Mass-migrate links from http:// to https://
    [#947] #958 ..
    [#974] #975  Document changes since the previous release
    [#974] #975  Version info bumped from 11:0:10 (libexpat*.so.1.10.0)
    to 11:1:10 (libexpat*.so.1.10.1); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1743076800">- version update to 2.7.0 for SLE-15-SP7 (jsc#PED-12507)</changelog>
  <changelog author="pgajdos@suse.com" date="1743163200">- version update to 2.7.1
    Bug fixes:
    [#980] #989  Restore event pointer behavior from Expat 2.6.4
    (that the fix to CVE-2024-8176 changed in 2.7.0);
    affected API functions are:
  - XML_GetCurrentByteCount
  - XML_GetCurrentByteIndex
  - XML_GetCurrentColumnNumber
  - XML_GetCurrentLineNumber
  - XML_GetInputContext
    Other changes:
    [#976] #977  Autotools: Integrate files "fuzz/xml_lpm_fuzzer.{cpp,proto}"
    with Automake that were missing from 2.7.0 release tarballs
    [#983] #984  Fix printf format specifiers for 32bit Emscripten
    [#992]  docs: Promote OpenSSF Best Practices self-certification
    [#978]  tests/benchmark: Resolve mistaken double close
    [#986]  Address compiler warnings
    [#990] #993  Version info bumped from 11:1:10 (libexpat*.so.1.10.1)
    to 11:2:10 (libexpat*.so.1.10.2); see https://verbump.de/
    for what these numbers do
    Infrastructure:
    [#982]  CI: Start running Perl XML::Parser integration tests
    [#987]  CI: Enforce Clang Static Analyzer clean code
    [#991]  CI: Re-enable warning clang-analyzer-valist.Uninitialized
    for clang-tidy
    [#981]  CI: Cover compilation with musl
    [#983] #984  CI: Cover compilation with 32bit Emscripten
    [#976] #977  CI: Protect against fuzzer files missing from future
    release archives</changelog>
  <changelog author="martin.schreiner@suse.com" date="1759147200">- Fix CVE-2025-59375 / bsc#1249584.
- Add patch file:
  * CVE-2025-59375.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770120000">- security update
- added patches
  CVE-2026-24515 [bsc#1257144], NULL dereference (CWE-476) due to function XML_ExternalEntityParserCreate() failing to copy the encoding handler data passed to XML_SetUnknownEncodingHandler() from the parent to the subparser
  * expat-CVE-2026-24515.patch
  CVE-2026-25210 [bsc#1257496], lack of buffer size check can lead to an integer overflow
  * expat-CVE-2026-25210.patch</changelog>
</package>
<package pkgid="ffe8ce0e7e72bfb70a7d2c97f243248b0f36a1dd2958920b42f12102c4ac62a6" name="fbiterm" arch="x86_64">
  <version epoch="0" ver="0.5.20040304" rel="150000.5.9.1"/>
  <changelog author="pgajdos@suse.com" date="1362484800">- builds with automake 1.13
  * automake-1.13.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1406548800">- README.SuSE renamed to README.SUSE [bnc#889032] (internal)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414843200">- Switch to pkgconfig() buildrequires instead of using
  metapackage xorg-x11-devel</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- implict-ptsname-decl.patch: fix implicit declaration of ptsname with
  glibc &gt;= 2.24</changelog>
  <changelog author="bwiedemann@suse.com" date="1493467200">- call gzip -n to make build fully reproducible</changelog>
  <changelog author="schwab@suse.de" date="1502884800">- Prerequire group(tty)</changelog>
  <changelog author="dimstar@opensuse.org" date="1505822400">- Conflict libiterm1 with terminfo-iterm: terminfo-iterm is an
  alternative to xiterm, and the conflict is meant to be.</changelog>
  <changelog author="schwab@suse.de" date="1565265600">- stropts.patch: remove use of obsolete XSI STREAMS interface</changelog>
  <changelog author="pgajdos@suse.com" date="1599048000">- added patches
  fix do not enable application keypad mode [bsc#1158271]
  + xiterm-no-keypad-application-mode.patch
- big thanks to Stefan Hundhammer</changelog>
  <changelog author="pgajdos@suse.com" date="1761048000">- use %license tag for xiterm [bsc#1252221]</changelog>
</package>
<package pkgid="b8b5875c37ec350e8c22c7467dc7941b1c0910efe4cb23da991394736d4f02ba" name="fetchmail" arch="src">
  <version epoch="0" ver="6.4.22" rel="150600.35.3.1"/>
  <changelog author="kukuk@suse.com" date="1608292800">- Don't require systemd
- Use tmpfiles for all files
- Use systemd macro for tmpfiles
- Don't delete home directory if the user stays
- Use sysusers config to create system user</changelog>
  <changelog author="dmueller@suse.com" date="1608379200">- update to 6.4.14:
  * sr:    Мирослав Николић (Miroslav Nikolić) [Serbian]
  * Errors about lock file (= pidfile) creation could be lost in daemon
  configurations (-d option, or set daemon) when using syslog. Now they are also
  logged to syslog.  Found verifying a pidfile creation issue on 6.4.12 that was
  previously reported by Alex Hall of Automatic Distributors.
  * If the lock file cannot be removed (no write permission on directory), try
  to truncate it, and if that fails, report error.
  * If the pidfile was non-default, fetchmail -q or --quit would malfunction and
  claim no other fetchmail were running, because it did not read the
  configuration files or merge the command line options, thus it would look for
  the PID in the wrong file.</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 6.4.15:
  * Fix a typo in the manual page reported by David McKelvie.
  * Fix cross-compilation with openssl, by Fabrice Fontaine. Merge request !23.
  * Fix truncation of SMTP PLAIN AUTH with ^ in credentials, by Earl Chew.</changelog>
  <changelog author="pmonreal@suse.com" date="1614600000">- update to 6.4.16:
  * fetchmail's --configdump, and fetchmailconf, lacked support for
    the sslcertfile option.
  * fetchmail --version [fetchmail -V] now queries and prints the
    SSL/TLS library's "SSL default trusted certificate" file or
    directory (mind the word "default"), where the OpenSSL-compatible
    TLS implementation will look for trusted root, meaning
    certification authority (CA), certificates.
  * fetchmail --version now prints version of the OpenSSL library
    that it was compiled against, and that it is using at runtime,
    and also the OPENSSL_DIR and OPENSSL_ENGINES_DIR (if available).</changelog>
  <changelog author="pmonreal@suse.com" date="1614600001">- Set the hostname for SNI when using TLS [bsc#1182807]
- Add fetchmail-SNI-hostname-support.patch</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- update to 6.4.18:
  * fetchmailconf: fetchmail 6.4.16 added --sslcertfile to the configuration dump,
    but fetchmailconf support was incomplete in Git 7349f124 and it could not
    parse sslcertfile, thus the user settings editor came up empty with console
    errors printed.  Fix configuration parser in fetchmailconf.
  * fetchmailconf: do not require fetchmail for -V. do not require Tk (Tkinter)
    for -d option. This is to fail more gracefully on incomplete installs.
  * TLS code: remove OPENSSL_NO_DEPRECATED macros to avoid portability issues
    with OpenSSL v3 - these are for development purposes, not production.
  * TLS futureproofing: use SSL_use_PrivateKey_file instead of
    SSL_use_RSAPrivateKey_file, the latter will be deprecated with OpenSSL v3,
    and the user's key file might be something else than RSA.
  * IMAP client: it used to leak memory for username and password when trying
    the LOGIN (password-based) authentication and encountered a timeout situation.
  * dist-tools/getstats.py: also counts lines in *.py files, shown above.
  * fetchmail.man: now mentions that you may need to add --ssl when specifying
    a TLS-wrapped port.
  * fetchmailconf: --version (-V) now prints the Python version in use.</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- update to 6.4.19:
  * fetchmailconf: properly catch and report option parsing errors
  * LMTP: do not try to validate the last component of a UNIX-domain LMTP socket
    as though it were a TCP port.</changelog>
  <changelog author="jeffm@suse.com" date="1620907200">- Backported support for OAUTH2 authentication from Fetchmail 7.0.
  - add imap oauthbearer support
  - support oauthbearer/xoauth2 with pop3
  - add passwordfile and passwordfd options
  - add contrib/fetchnmail-oauth2.py token acquisition utility
  - FAQ: list gmail options including oauthbearer and app password
  - give each ctl it's own copy of password
  - re-read passwordfile on every poll
  - add query_to64_outsize() utility function
  - Chase and integrate interface change.
  - oauth2.c: calculate and pass in correct buffer size to to64frombits()
  - Increase max password length to handle oauth tokens
  - Bump max. passwordlen to 10000 bytes.
  - Add README.OAUTH2
- Added patches:
  * fetchmail-add-imap-oauthbearer-support.patch
  * fetchmail-support-oauthbearer-xoauth2-with-pop3.patch
  * fetchmail-add-passwordfile-and-passwordfd-options.patch
  * fetchmail-add-contrib-fetchnmail-oauth2.py-token-acquisition-u.patch
  * fetchmail-FAQ-list-gmail-options-including-oauthbearer-and-app.patch
  * fetchmail-give-each-ctl-it-s-own-copy-of-password.patch
  * fetchmail-re-read-passwordfile-on-every-poll.patch
  * fetchmail-add-query_to64_outsize-utility-function.patch
  * fetchmail-chase-and-integrate-interface-change.patch
  * fetchmail-oauth2-c-calculate-and-pass-in-correct-buffer-size-to-to64frombits.patch
  * fetchmail-increase-max-password-length-to-handle-oauth-tokens.patch
  * fetchmail-bump-max-passwordlen-to-1bytes.patch
  * fetchmail-add-readme-oauth2-issue-27.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1626091200">- Change PASSWORDLEN from 64 to 256 [bsc#1188034]
  * Add fetchmail-PASSWORDLEN-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1627560000">- Update to 6.4.20: [bsc#1188875, CVE-2021-36386]
  * CVE-2021-36386: DoS or information disclosure in some configurations.
    When a log message exceeds c. 2 kByte in size, for instance,
    with very long header contents, and depending on verbosity
    option, fetchmail can crash or misreport each first log message
    that requires a buffer reallocation. fetchmail then reallocates
    memory and re-runs vsnprintf() without another call to va_start(),
    so it reads garbage. The exact impact depends on many factors
    around the compiler and operating system configurations used and
    the implementation details of the stdarg.h interfaces of the two
    functions mentioned before.</changelog>
  <changelog author="pmonreal@suse.com" date="1627560001">- Security fix: [bsc#1188875, CVE-2021-36386]
  * DoS or information disclosure in some configurations.
  * See also: https://www.fetchmail.info/fetchmail-SA-2021-01.txt
  * Add fetchmail-CVE-2021-36386.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1629806400">- Update to 6.4.21:
  * REGRESSION FIX: The new security fix in 6.4.20 for
    CVE-2021-36386 caused truncation of messages logged to
    buffered outputs, predominantly --logfile.</changelog>
  <changelog author="pmonreal@suse.com" date="1629806401">- Update to 6.4.21 in SLE-15-SP2:
  [jsc#SLE-18159, jsc#SLE-17903, jsc#SLE-18059]
  * Remove patches fixed upstream:
  - fetchmail-SNI-hostname-support.patch
  - fetchmail-CVE-2021-36386.patch
  - fetchmail-PASSWORDLEN-256.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * fetchmail.service</changelog>
  <changelog author="pmonreal@suse.com" date="1633694400">- Security fix: [bsc#1190069, CVE-2021-39272]
  * Fix failure to enforce STARTTLS session encryption in some
    circumstances, such as a certain situation with IMAP and PREAUTH.
  * Advisory: https://www.fetchmail.info/fetchmail-SA-2021-02.txt
  * Add fetchmail-CVE-2021-39272.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1635336000">- Update to 6.4.22: [bsc#1190069, CVE-2021-39272]
  * OPENSSL AND LICENSING NOTE:
  - fetchmail 6.4.22 is compatible with OpenSSL 1.1.1 and 3.0.0.
    OpenSSL's licensing changed between these releases from dual
    OpenSSL/SSLeay license to Apache License v2.0, which is
    considered incompatible with GPL v2 by the FSF. For
    implications and details, see the file COPYING.
  * SECURITY FIXES:
  - CVE-2021-39272: fetchmail-SA-2021-02: On IMAP connections,
    without --ssl and with nonempty --sslproto, meaning that
    fetchmail is to enforce TLS, and when the server or an attacker
    sends a PREAUTH greeting, fetchmail used to continue an
    unencrypted connection. Now, log the error and abort the
    connection. --Recommendation for servers that support
    SSL/TLS-wrapped or "implicit" mode on a dedicated port
    (default 993): use --ssl, or the ssl user option in an rcfile.
  - On IMAP and POP3 connections, --auth ssh no longer prevents
    STARTTLS negotiation.
  - On IMAP connections, fetchmail does not permit overriding
    a server-side LOGINDISABLED with --auth password any more.
  - On POP3 connections, the possibility for RPA authentication
    (by probing with an AUTH command without arguments) no longer
    prevents STARTTLS negotiation.
  - For POP3 connections, only attempt RPA if the authentication
    type is "any".
  * BUG FIXES:
  - On IMAP connections, when AUTHENTICATE EXTERNAL fails and we
    have received the tagged (= final) response, do not send "*".
  - On IMAP connections, AUTHENTICATE EXTERNAL without username
    will properly send a "=" for protocol compliance.
  - On IMAP connections, AUTHENTICATE EXTERNAL will now check if
    the server advertised SASL-IR (RFC-4959) support and otherwise
    refuse (fetchmail &lt;= 6.4 has not supported and does not support
    the separate challenge/response with command continuation)
  - On IMAP connections, when --auth external is requested but not
    advertised by the server, log a proper error message.
  - Fetchmail no longer crashes when attempting a connection with
  - -plugin "" or --plugout "".
  - Fetchmail no longer leaks memory when processing the arguments
    of --plugin or --plugout on connections.
  - On POP3 connections, the CAPAbilities parser is now caseblind.
  - Fix segfault on configurations with "defaults ... no envelope".
    This is a regression in fetchmail 6.4.3 and happened when
    plugging memory leaks, which did not account for that the
    envelope parameter is special when set as "no envelope". The
    segfault happens in a constant strlen(-1), triggered by trusted
    local input =&gt; no vulnerability.
  - Fix program abort (SIGABRT) with "internal error" when invalid
    sslproto is given with OpenSSL 1.1.0 API compatible SSL
    implementations.
  * CHANGES:
  - IMAP: When fetchmail is in not-authenticated state and the server
    volunteers CAPABILITY information, use it and do not re-probe.
    (After STARTTLS, fetchmail must and will re-probe explicitly.)
  - For typical POP3/IMAP ports 110, 143, 993, 995, if port and --ssl
    option do not match, emit a warning and continue.
  - fetchmail.man and README.SSL were updated in line with
    RFC-8314/8996/8997 recommendations to prefer Implicit TLS
    (--ssl/ssl) and TLS v1.2 or newer, placing --sslproto tls1.2+
    more prominently. The defaults shall not change between 6.4.X
    releases for compatibility.
  * Rebase patches:
    fetchmail-add-imap-oauthbearer-support.patch
    fetchmail-add-query_to64_outsize-utility-function.patch
    fetchmail-support-oauthbearer-xoauth2-with-pop3.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1635336001">- Update to 6.4.22 in SLE-15-SP2:
  [jsc#SLE-18159, jsc#SLE-17903, jsc#SLE-18059]
  * Remove all python2 dependencies [bsc#1190896]
  * Remove fetchmail-CVE-2021-39272.patch fixed in the update</changelog>
  <changelog author="david.anes@suse.com" date="1641988800">- fix [bsc#1194203]:
  * Always create fetchmail group, even if the user is already
  present, as a leftover from Leap 15.2 upgrade. This may happen
  also if user is messing with groups/users directly or upgrading
  from even an older fetchmail versions.</changelog>
  <changelog author="david.anes@suse.com" date="1643371200">- fix [bsc#1193894]
  * Restore autoprobe functionality behaviour as per 6.3.x version
  * Added patch fetchmail-restore-auto-probe-behaviour.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1760702400">- Security fix [bsc#1251194, CVE-2025-61962]
  * Added patch fetchmail-CVE-2025-61962.patch</changelog>
</package>
<package pkgid="70b3056f7987e7512836532c0581876d187697476c07d76d5957a5ac802650de" name="fetchmail" arch="x86_64">
  <version epoch="0" ver="6.4.22" rel="150600.35.3.1"/>
  <changelog author="kukuk@suse.com" date="1608292800">- Don't require systemd
- Use tmpfiles for all files
- Use systemd macro for tmpfiles
- Don't delete home directory if the user stays
- Use sysusers config to create system user</changelog>
  <changelog author="dmueller@suse.com" date="1608379200">- update to 6.4.14:
  * sr:    Мирослав Николић (Miroslav Nikolić) [Serbian]
  * Errors about lock file (= pidfile) creation could be lost in daemon
  configurations (-d option, or set daemon) when using syslog. Now they are also
  logged to syslog.  Found verifying a pidfile creation issue on 6.4.12 that was
  previously reported by Alex Hall of Automatic Distributors.
  * If the lock file cannot be removed (no write permission on directory), try
  to truncate it, and if that fails, report error.
  * If the pidfile was non-default, fetchmail -q or --quit would malfunction and
  claim no other fetchmail were running, because it did not read the
  configuration files or merge the command line options, thus it would look for
  the PID in the wrong file.</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 6.4.15:
  * Fix a typo in the manual page reported by David McKelvie.
  * Fix cross-compilation with openssl, by Fabrice Fontaine. Merge request !23.
  * Fix truncation of SMTP PLAIN AUTH with ^ in credentials, by Earl Chew.</changelog>
  <changelog author="pmonreal@suse.com" date="1614600000">- update to 6.4.16:
  * fetchmail's --configdump, and fetchmailconf, lacked support for
    the sslcertfile option.
  * fetchmail --version [fetchmail -V] now queries and prints the
    SSL/TLS library's "SSL default trusted certificate" file or
    directory (mind the word "default"), where the OpenSSL-compatible
    TLS implementation will look for trusted root, meaning
    certification authority (CA), certificates.
  * fetchmail --version now prints version of the OpenSSL library
    that it was compiled against, and that it is using at runtime,
    and also the OPENSSL_DIR and OPENSSL_ENGINES_DIR (if available).</changelog>
  <changelog author="pmonreal@suse.com" date="1614600001">- Set the hostname for SNI when using TLS [bsc#1182807]
- Add fetchmail-SNI-hostname-support.patch</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- update to 6.4.18:
  * fetchmailconf: fetchmail 6.4.16 added --sslcertfile to the configuration dump,
    but fetchmailconf support was incomplete in Git 7349f124 and it could not
    parse sslcertfile, thus the user settings editor came up empty with console
    errors printed.  Fix configuration parser in fetchmailconf.
  * fetchmailconf: do not require fetchmail for -V. do not require Tk (Tkinter)
    for -d option. This is to fail more gracefully on incomplete installs.
  * TLS code: remove OPENSSL_NO_DEPRECATED macros to avoid portability issues
    with OpenSSL v3 - these are for development purposes, not production.
  * TLS futureproofing: use SSL_use_PrivateKey_file instead of
    SSL_use_RSAPrivateKey_file, the latter will be deprecated with OpenSSL v3,
    and the user's key file might be something else than RSA.
  * IMAP client: it used to leak memory for username and password when trying
    the LOGIN (password-based) authentication and encountered a timeout situation.
  * dist-tools/getstats.py: also counts lines in *.py files, shown above.
  * fetchmail.man: now mentions that you may need to add --ssl when specifying
    a TLS-wrapped port.
  * fetchmailconf: --version (-V) now prints the Python version in use.</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- update to 6.4.19:
  * fetchmailconf: properly catch and report option parsing errors
  * LMTP: do not try to validate the last component of a UNIX-domain LMTP socket
    as though it were a TCP port.</changelog>
  <changelog author="jeffm@suse.com" date="1620907200">- Backported support for OAUTH2 authentication from Fetchmail 7.0.
  - add imap oauthbearer support
  - support oauthbearer/xoauth2 with pop3
  - add passwordfile and passwordfd options
  - add contrib/fetchnmail-oauth2.py token acquisition utility
  - FAQ: list gmail options including oauthbearer and app password
  - give each ctl it's own copy of password
  - re-read passwordfile on every poll
  - add query_to64_outsize() utility function
  - Chase and integrate interface change.
  - oauth2.c: calculate and pass in correct buffer size to to64frombits()
  - Increase max password length to handle oauth tokens
  - Bump max. passwordlen to 10000 bytes.
  - Add README.OAUTH2
- Added patches:
  * fetchmail-add-imap-oauthbearer-support.patch
  * fetchmail-support-oauthbearer-xoauth2-with-pop3.patch
  * fetchmail-add-passwordfile-and-passwordfd-options.patch
  * fetchmail-add-contrib-fetchnmail-oauth2.py-token-acquisition-u.patch
  * fetchmail-FAQ-list-gmail-options-including-oauthbearer-and-app.patch
  * fetchmail-give-each-ctl-it-s-own-copy-of-password.patch
  * fetchmail-re-read-passwordfile-on-every-poll.patch
  * fetchmail-add-query_to64_outsize-utility-function.patch
  * fetchmail-chase-and-integrate-interface-change.patch
  * fetchmail-oauth2-c-calculate-and-pass-in-correct-buffer-size-to-to64frombits.patch
  * fetchmail-increase-max-password-length-to-handle-oauth-tokens.patch
  * fetchmail-bump-max-passwordlen-to-1bytes.patch
  * fetchmail-add-readme-oauth2-issue-27.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1626091200">- Change PASSWORDLEN from 64 to 256 [bsc#1188034]
  * Add fetchmail-PASSWORDLEN-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1627560000">- Update to 6.4.20: [bsc#1188875, CVE-2021-36386]
  * CVE-2021-36386: DoS or information disclosure in some configurations.
    When a log message exceeds c. 2 kByte in size, for instance,
    with very long header contents, and depending on verbosity
    option, fetchmail can crash or misreport each first log message
    that requires a buffer reallocation. fetchmail then reallocates
    memory and re-runs vsnprintf() without another call to va_start(),
    so it reads garbage. The exact impact depends on many factors
    around the compiler and operating system configurations used and
    the implementation details of the stdarg.h interfaces of the two
    functions mentioned before.</changelog>
  <changelog author="pmonreal@suse.com" date="1627560001">- Security fix: [bsc#1188875, CVE-2021-36386]
  * DoS or information disclosure in some configurations.
  * See also: https://www.fetchmail.info/fetchmail-SA-2021-01.txt
  * Add fetchmail-CVE-2021-36386.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1629806400">- Update to 6.4.21:
  * REGRESSION FIX: The new security fix in 6.4.20 for
    CVE-2021-36386 caused truncation of messages logged to
    buffered outputs, predominantly --logfile.</changelog>
  <changelog author="pmonreal@suse.com" date="1629806401">- Update to 6.4.21 in SLE-15-SP2:
  [jsc#SLE-18159, jsc#SLE-17903, jsc#SLE-18059]
  * Remove patches fixed upstream:
  - fetchmail-SNI-hostname-support.patch
  - fetchmail-CVE-2021-36386.patch
  - fetchmail-PASSWORDLEN-256.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * fetchmail.service</changelog>
  <changelog author="pmonreal@suse.com" date="1633694400">- Security fix: [bsc#1190069, CVE-2021-39272]
  * Fix failure to enforce STARTTLS session encryption in some
    circumstances, such as a certain situation with IMAP and PREAUTH.
  * Advisory: https://www.fetchmail.info/fetchmail-SA-2021-02.txt
  * Add fetchmail-CVE-2021-39272.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1635336000">- Update to 6.4.22: [bsc#1190069, CVE-2021-39272]
  * OPENSSL AND LICENSING NOTE:
  - fetchmail 6.4.22 is compatible with OpenSSL 1.1.1 and 3.0.0.
    OpenSSL's licensing changed between these releases from dual
    OpenSSL/SSLeay license to Apache License v2.0, which is
    considered incompatible with GPL v2 by the FSF. For
    implications and details, see the file COPYING.
  * SECURITY FIXES:
  - CVE-2021-39272: fetchmail-SA-2021-02: On IMAP connections,
    without --ssl and with nonempty --sslproto, meaning that
    fetchmail is to enforce TLS, and when the server or an attacker
    sends a PREAUTH greeting, fetchmail used to continue an
    unencrypted connection. Now, log the error and abort the
    connection. --Recommendation for servers that support
    SSL/TLS-wrapped or "implicit" mode on a dedicated port
    (default 993): use --ssl, or the ssl user option in an rcfile.
  - On IMAP and POP3 connections, --auth ssh no longer prevents
    STARTTLS negotiation.
  - On IMAP connections, fetchmail does not permit overriding
    a server-side LOGINDISABLED with --auth password any more.
  - On POP3 connections, the possibility for RPA authentication
    (by probing with an AUTH command without arguments) no longer
    prevents STARTTLS negotiation.
  - For POP3 connections, only attempt RPA if the authentication
    type is "any".
  * BUG FIXES:
  - On IMAP connections, when AUTHENTICATE EXTERNAL fails and we
    have received the tagged (= final) response, do not send "*".
  - On IMAP connections, AUTHENTICATE EXTERNAL without username
    will properly send a "=" for protocol compliance.
  - On IMAP connections, AUTHENTICATE EXTERNAL will now check if
    the server advertised SASL-IR (RFC-4959) support and otherwise
    refuse (fetchmail &lt;= 6.4 has not supported and does not support
    the separate challenge/response with command continuation)
  - On IMAP connections, when --auth external is requested but not
    advertised by the server, log a proper error message.
  - Fetchmail no longer crashes when attempting a connection with
  - -plugin "" or --plugout "".
  - Fetchmail no longer leaks memory when processing the arguments
    of --plugin or --plugout on connections.
  - On POP3 connections, the CAPAbilities parser is now caseblind.
  - Fix segfault on configurations with "defaults ... no envelope".
    This is a regression in fetchmail 6.4.3 and happened when
    plugging memory leaks, which did not account for that the
    envelope parameter is special when set as "no envelope". The
    segfault happens in a constant strlen(-1), triggered by trusted
    local input =&gt; no vulnerability.
  - Fix program abort (SIGABRT) with "internal error" when invalid
    sslproto is given with OpenSSL 1.1.0 API compatible SSL
    implementations.
  * CHANGES:
  - IMAP: When fetchmail is in not-authenticated state and the server
    volunteers CAPABILITY information, use it and do not re-probe.
    (After STARTTLS, fetchmail must and will re-probe explicitly.)
  - For typical POP3/IMAP ports 110, 143, 993, 995, if port and --ssl
    option do not match, emit a warning and continue.
  - fetchmail.man and README.SSL were updated in line with
    RFC-8314/8996/8997 recommendations to prefer Implicit TLS
    (--ssl/ssl) and TLS v1.2 or newer, placing --sslproto tls1.2+
    more prominently. The defaults shall not change between 6.4.X
    releases for compatibility.
  * Rebase patches:
    fetchmail-add-imap-oauthbearer-support.patch
    fetchmail-add-query_to64_outsize-utility-function.patch
    fetchmail-support-oauthbearer-xoauth2-with-pop3.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1635336001">- Update to 6.4.22 in SLE-15-SP2:
  [jsc#SLE-18159, jsc#SLE-17903, jsc#SLE-18059]
  * Remove all python2 dependencies [bsc#1190896]
  * Remove fetchmail-CVE-2021-39272.patch fixed in the update</changelog>
  <changelog author="david.anes@suse.com" date="1641988800">- fix [bsc#1194203]:
  * Always create fetchmail group, even if the user is already
  present, as a leftover from Leap 15.2 upgrade. This may happen
  also if user is messing with groups/users directly or upgrading
  from even an older fetchmail versions.</changelog>
  <changelog author="david.anes@suse.com" date="1643371200">- fix [bsc#1193894]
  * Restore autoprobe functionality behaviour as per 6.3.x version
  * Added patch fetchmail-restore-auto-probe-behaviour.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1760702400">- Security fix [bsc#1251194, CVE-2025-61962]
  * Added patch fetchmail-CVE-2025-61962.patch</changelog>
</package>
<package pkgid="ca413b70fa79a20efe06e623bff21727ae351f16db5fc002df04d5947436f71a" name="firewalld" arch="noarch">
  <version epoch="0" ver="1.3.4" rel="150600.13.3.1"/>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 0.8.3:
  * nftables: convert to libnftables JSON interface
  * service: new “helper” element to replace “module” More accurately represents the conntrack helper. Deprecates “module”.
  * allow custom helpers using standard helper modules (rhbz 1733066)
  * testsuite is now shipped in the dist tarball
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don’t print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: ipset types using “port”
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify –set-target values “default” vs “reject”
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * fix: nftables: ipset: port ranges for non-default protocols
  * fix(systemd): Conflict with nftables.service
  * fix(direct): rule in a zone chain
  * fix(client): addService needs to reduce tuple size
  * fix(doc): dbus: signatures for zone tuple based APIs
  * fix(config): bool values in dict based import/export
  * fix(dbus): service: don’t cleanup config for old set APIs
  * fix(ipset): flush the set if IndividiualCalls=yes
  * fix(firewall-offline-cmd): remove instances of “[P]” in help text
  * fix(rich): source mac with nftables backend
  * docs: replace occurrences of the term blacklist with denylist
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * docs(README): add libxslt for doc generation
  * fix(cli): add –zone is an invalid option with –direct
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1599220800">- update to 0.9.0:
  * New major features
  * prevention of Zone Drifting
  * Intra Zone Forwarding
  * Policy Objects
  * For a full list of changes, see
    https://github.com/firewalld/firewalld/compare/v0.8.0...v0.9.0</changelog>
  <changelog author="mrostecki@suse.com" date="1599652800">- Add python3-nftables as a requirement.</changelog>
  <changelog author="fbui@suse.com" date="1599825600">- Make use of %service_del_postun_without_restart
  And stop using DISABLE_RESTART_ON_UPDATE as this interface is
  obsolete.</changelog>
  <changelog author="mrostecki@suse.com" date="1604923200">- Remove the patch which enforces usage of iptables instead of
  nftables (jsc#SLE-16300):
  * 0001-firewall-backend-Switch-default-backend-to-iptables.patch
- Add firewalld zone for the docker0 interface. This is the
  workaround for lack of nftables support in docker. Without that
  additional zone, containers have no Internet connectivity.
  (rhbz#1817022, jsc#SLE-16300)
- Update to 0.9.1:
  * Bugfixes:
  * docs(firewall-cmd): clarify lockdown whitelist command paths
  * fix(dbus): getActivePolicies shouldn't return a policy if a zone is not active
  * fix(policy): zone interface/source changes should affect all using zone</changelog>
  <changelog author="rfrohl@suse.com" date="1610625600">- Add dependency for firewall-offline-cmd (bsc#1180883)</changelog>
  <changelog author="mrostecki@suse.com" date="1611576000">- Update to 0.9.3 (jsc#SLE-17336):
  * docs(dbus): fix invalid method names
  * fix(forward): iptables: ipset used as zone source
  * fix(rich): non-printable characters removed from rich rules
  * docs(firewall-cmd): small description grammar fix
  * fix(rich): limit table to strip non-printables to C0 and C1
  * fix(zone): add source with mac address</changelog>
  <changelog author="mrostecki@suse.com" date="1611662400">- Disable FlushAllOnReload option to not retain interface to zone
  assignments and direct rules when using --reload option.
  * 0002-Disable-FlushAllOnReload-option.patch</changelog>
  <changelog author="mrostecki@suse.com" date="1617796800">- Remove dependency on firewalld from firewall-macros (bsc#1183404)</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Fix modprobe.d directory for SLE15 SP3
- Always own %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mrostecki@suse.com" date="1647432000">- Add patch which fixes the zone configuration (bsc#1191837)
  * 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1648468800">- Provide dummy firewalld-prometheus-config package (bsc#1197042)</changelog>
  <changelog author="sflees@suse.de" date="1652097600">- Fix regression introduced in previous patch (an api change to a
  function also needed backporting) (bsc#1198814)
  * feature-upstream-new-check-config-1.patch
  * feature-upstream-new-check-config-2.patch</changelog>
  <changelog author="mohd.saquib@suse.com" date="1673611200">- Fix firewall-offline-cmd fails with ERROR: Calling pre func
  Added following patch (bsc#1206928)
  [+ 0003-firewall-offline-cmd-fail-fix.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1689076800">- Fix firewalld does not longer understand IPv4 network masks
  of type `255.255.255.0`
  Added following patch (boo#1212974)
  [+ 0004-fix_rich_source_address_with_netmask.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1696334400">- update to v2.0.1 (jsc#PED-5597)
  * fix(cli): all --list-all-zones output identical (d30bc61)
  * fix(cli): properly show default zone attribute (ea8d9a8)
  * fix(cli): properly show active attribute for zones and policies (b202403)
  * fix(cli): --get-active-zones should include the default zone (dae9112)
  * fix(nftables): always flush main table on start (cd20981)
  * fix(runtimeToPermanent): deepcopy settings before mangling (9c53639)
  * docs: fix reference to lockdown-whitelist.xml in SYNOPSIS section (1c77205)
  * fix(firewall-config): escape markup stored in bindings store (c876fd0)
  * fix(tests): avoid deprecated assertRaisesRegexp for assertRaisesRegex (2935119)
  * fix(icmp): fix check_icmpv6_name() to use correct IPv6 names (af3c35b)
  * fix(ipset): fix configuring IP range for ipsets with nftables (6a050ec)
  * fix(ipset): fix configuring "timeout","maxelem" values for ipsets with nftables (7d3340c)
  * fix(core): fix exception while parsing invalid "tcp-mss-clamp" in policy (ff61209)
  * docs(policy): fix wrong documentation of in man firewalld.policy (21026d9)
  * Correct Requires, python3-slip-dbus -&gt; python3-dbus-python
  * This is a major release. The major version is being bumped symbolically
    to reflect significant changes done in commit f4d2b80 ("fix(policy):
    disallow zone drifting"). It does not contain any deliberate breaking changes
  * fix(reload): restore policy for old backend if it changed (de85849)
  * fix(io): rich: tcp mss: handle value=None (8016f10)
  * fix(firewall-config): rich: set destination address (f6641a9)
  * fix(policy): mixed IP families in ingress/egress (69ed4d6)
- removed following patches:
  [- 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch]
  [- 0003-firewall-offline-cmd-fail-fix.patch]
  [- 0004-fix_rich_source_address_with_netmask.patch]
  [- feature-upstream-new-check-config-1.patch]
  [- feature-upstream-new-check-config-2.patch]</changelog>
  <changelog author="davide.benini@suse.com" date="1730376000">- Fix for SG#69031, bsc#1231771:
  * 0001-fix-nftables-set-correctly-match-iifname-oifname.patch:
    [PATCH 1/2] fix(nftables): set: correctly match iifname/oifname
  * 0002-test-ipset-verify-match-with-iface.patch: [PATCH 2/2]
    test(ipset): verify match with iface</changelog>
  <changelog author="meissner@suse.com" date="1748001600">- added a python311 flavor</changelog>
  <changelog author="fvogt@suse.com" date="1751976000">- Do not recommend python311-firewalld (bsc#1246100)</changelog>
  <changelog author="jan.fooken@suse.com" date="1759233600">- downgrade to v1.3.4 due to slow firewall rule generation
  introduced in the 2.x.x series (jsc#PED-13314).
  The Version includes the following cherry picked commits from
  upstream
  * fix(fw_nm): use IP interface names for connection lookup
  * fix(fw_policy): raise exceptions
  * fix(service): include: when used with rich rule
  * fix(nftables): rich: log: limit was not taking effect
  * fix(build): rpm must build all as prerequisite
  * fix: use error codes for FirewallError instances
  * fix(ipset): chunk entries when restoring set
  * fix(reload): restore policy for old backend if it changed
  * fix(io): rich: tcp mss: handle value=None
  * fix(firewall-config): rich: set destination address
  * fix(policy): mixed IP families in ingress/egress
  * fix(nftables): always flush main table on start
  * fix(runtimeToPermanent): deepcopy settings before mangling
  * docs: fix reference to lockdown-whitelist.xml in SYNOPSIS section
  * fix(tests): avoid deprecated assertRaisesRegexp for assertRaisesRegex
  * fix(icmp): fix check_icmpv6_name() to use correct IPv6 names
  * fix(ipset): fix configuring IP range for ipsets with nftables
  * improvement(tests): add test showing the current wrong behavior for ipsets
  * fix(ipset): fix configuring "timeout","maxelem" values for ipsets with nftables
  * improvement(build): rename the "master" branch to "main"
  * fix(core): fix exception while parsing invalid "tcp-mss-clamp" in policy
  * docs(policy): fix wrong documentation of &lt;tcp-mss-clamp/&gt; in `man firewalld.policy`
  * fix(applet): allows using KDE network connection editor
  * fix(applet): ActivationReason.Trigger
- rebase and update patches with origin information
- add the following patch from SLE-15-SP5:Update
  * 0003-firewall-offline-cmd-fail-fix.patch
- add the following patch
  * 0004-fix-ipset-test-for-iifname-oifname-switch.patch</changelog>
</package>
<package pkgid="2625e3c79c71c6ce6c325bc036b4946f1e07d9c8e3488125a280282f5dc75ca3" name="firewalld" arch="src">
  <version epoch="0" ver="1.3.4" rel="150600.13.3.1"/>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 0.8.3:
  * nftables: convert to libnftables JSON interface
  * service: new “helper” element to replace “module” More accurately represents the conntrack helper. Deprecates “module”.
  * allow custom helpers using standard helper modules (rhbz 1733066)
  * testsuite is now shipped in the dist tarball
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don’t print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: ipset types using “port”
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify –set-target values “default” vs “reject”
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * fix: nftables: ipset: port ranges for non-default protocols
  * fix(systemd): Conflict with nftables.service
  * fix(direct): rule in a zone chain
  * fix(client): addService needs to reduce tuple size
  * fix(doc): dbus: signatures for zone tuple based APIs
  * fix(config): bool values in dict based import/export
  * fix(dbus): service: don’t cleanup config for old set APIs
  * fix(ipset): flush the set if IndividiualCalls=yes
  * fix(firewall-offline-cmd): remove instances of “[P]” in help text
  * fix(rich): source mac with nftables backend
  * docs: replace occurrences of the term blacklist with denylist
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * docs(README): add libxslt for doc generation
  * fix(cli): add –zone is an invalid option with –direct
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1599220800">- update to 0.9.0:
  * New major features
  * prevention of Zone Drifting
  * Intra Zone Forwarding
  * Policy Objects
  * For a full list of changes, see
    https://github.com/firewalld/firewalld/compare/v0.8.0...v0.9.0</changelog>
  <changelog author="mrostecki@suse.com" date="1599652800">- Add python3-nftables as a requirement.</changelog>
  <changelog author="fbui@suse.com" date="1599825600">- Make use of %service_del_postun_without_restart
  And stop using DISABLE_RESTART_ON_UPDATE as this interface is
  obsolete.</changelog>
  <changelog author="mrostecki@suse.com" date="1604923200">- Remove the patch which enforces usage of iptables instead of
  nftables (jsc#SLE-16300):
  * 0001-firewall-backend-Switch-default-backend-to-iptables.patch
- Add firewalld zone for the docker0 interface. This is the
  workaround for lack of nftables support in docker. Without that
  additional zone, containers have no Internet connectivity.
  (rhbz#1817022, jsc#SLE-16300)
- Update to 0.9.1:
  * Bugfixes:
  * docs(firewall-cmd): clarify lockdown whitelist command paths
  * fix(dbus): getActivePolicies shouldn't return a policy if a zone is not active
  * fix(policy): zone interface/source changes should affect all using zone</changelog>
  <changelog author="rfrohl@suse.com" date="1610625600">- Add dependency for firewall-offline-cmd (bsc#1180883)</changelog>
  <changelog author="mrostecki@suse.com" date="1611576000">- Update to 0.9.3 (jsc#SLE-17336):
  * docs(dbus): fix invalid method names
  * fix(forward): iptables: ipset used as zone source
  * fix(rich): non-printable characters removed from rich rules
  * docs(firewall-cmd): small description grammar fix
  * fix(rich): limit table to strip non-printables to C0 and C1
  * fix(zone): add source with mac address</changelog>
  <changelog author="mrostecki@suse.com" date="1611662400">- Disable FlushAllOnReload option to not retain interface to zone
  assignments and direct rules when using --reload option.
  * 0002-Disable-FlushAllOnReload-option.patch</changelog>
  <changelog author="mrostecki@suse.com" date="1617796800">- Remove dependency on firewalld from firewall-macros (bsc#1183404)</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Fix modprobe.d directory for SLE15 SP3
- Always own %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mrostecki@suse.com" date="1647432000">- Add patch which fixes the zone configuration (bsc#1191837)
  * 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1648468800">- Provide dummy firewalld-prometheus-config package (bsc#1197042)</changelog>
  <changelog author="sflees@suse.de" date="1652097600">- Fix regression introduced in previous patch (an api change to a
  function also needed backporting) (bsc#1198814)
  * feature-upstream-new-check-config-1.patch
  * feature-upstream-new-check-config-2.patch</changelog>
  <changelog author="mohd.saquib@suse.com" date="1673611200">- Fix firewall-offline-cmd fails with ERROR: Calling pre func
  Added following patch (bsc#1206928)
  [+ 0003-firewall-offline-cmd-fail-fix.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1689076800">- Fix firewalld does not longer understand IPv4 network masks
  of type `255.255.255.0`
  Added following patch (boo#1212974)
  [+ 0004-fix_rich_source_address_with_netmask.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1696334400">- update to v2.0.1 (jsc#PED-5597)
  * fix(cli): all --list-all-zones output identical (d30bc61)
  * fix(cli): properly show default zone attribute (ea8d9a8)
  * fix(cli): properly show active attribute for zones and policies (b202403)
  * fix(cli): --get-active-zones should include the default zone (dae9112)
  * fix(nftables): always flush main table on start (cd20981)
  * fix(runtimeToPermanent): deepcopy settings before mangling (9c53639)
  * docs: fix reference to lockdown-whitelist.xml in SYNOPSIS section (1c77205)
  * fix(firewall-config): escape markup stored in bindings store (c876fd0)
  * fix(tests): avoid deprecated assertRaisesRegexp for assertRaisesRegex (2935119)
  * fix(icmp): fix check_icmpv6_name() to use correct IPv6 names (af3c35b)
  * fix(ipset): fix configuring IP range for ipsets with nftables (6a050ec)
  * fix(ipset): fix configuring "timeout","maxelem" values for ipsets with nftables (7d3340c)
  * fix(core): fix exception while parsing invalid "tcp-mss-clamp" in policy (ff61209)
  * docs(policy): fix wrong documentation of in man firewalld.policy (21026d9)
  * Correct Requires, python3-slip-dbus -&gt; python3-dbus-python
  * This is a major release. The major version is being bumped symbolically
    to reflect significant changes done in commit f4d2b80 ("fix(policy):
    disallow zone drifting"). It does not contain any deliberate breaking changes
  * fix(reload): restore policy for old backend if it changed (de85849)
  * fix(io): rich: tcp mss: handle value=None (8016f10)
  * fix(firewall-config): rich: set destination address (f6641a9)
  * fix(policy): mixed IP families in ingress/egress (69ed4d6)
- removed following patches:
  [- 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch]
  [- 0003-firewall-offline-cmd-fail-fix.patch]
  [- 0004-fix_rich_source_address_with_netmask.patch]
  [- feature-upstream-new-check-config-1.patch]
  [- feature-upstream-new-check-config-2.patch]</changelog>
  <changelog author="davide.benini@suse.com" date="1730376000">- Fix for SG#69031, bsc#1231771:
  * 0001-fix-nftables-set-correctly-match-iifname-oifname.patch:
    [PATCH 1/2] fix(nftables): set: correctly match iifname/oifname
  * 0002-test-ipset-verify-match-with-iface.patch: [PATCH 2/2]
    test(ipset): verify match with iface</changelog>
  <changelog author="meissner@suse.com" date="1748001600">- added a python311 flavor</changelog>
  <changelog author="fvogt@suse.com" date="1751976000">- Do not recommend python311-firewalld (bsc#1246100)</changelog>
  <changelog author="jan.fooken@suse.com" date="1759233600">- downgrade to v1.3.4 due to slow firewall rule generation
  introduced in the 2.x.x series (jsc#PED-13314).
  The Version includes the following cherry picked commits from
  upstream
  * fix(fw_nm): use IP interface names for connection lookup
  * fix(fw_policy): raise exceptions
  * fix(service): include: when used with rich rule
  * fix(nftables): rich: log: limit was not taking effect
  * fix(build): rpm must build all as prerequisite
  * fix: use error codes for FirewallError instances
  * fix(ipset): chunk entries when restoring set
  * fix(reload): restore policy for old backend if it changed
  * fix(io): rich: tcp mss: handle value=None
  * fix(firewall-config): rich: set destination address
  * fix(policy): mixed IP families in ingress/egress
  * fix(nftables): always flush main table on start
  * fix(runtimeToPermanent): deepcopy settings before mangling
  * docs: fix reference to lockdown-whitelist.xml in SYNOPSIS section
  * fix(tests): avoid deprecated assertRaisesRegexp for assertRaisesRegex
  * fix(icmp): fix check_icmpv6_name() to use correct IPv6 names
  * fix(ipset): fix configuring IP range for ipsets with nftables
  * improvement(tests): add test showing the current wrong behavior for ipsets
  * fix(ipset): fix configuring "timeout","maxelem" values for ipsets with nftables
  * improvement(build): rename the "master" branch to "main"
  * fix(core): fix exception while parsing invalid "tcp-mss-clamp" in policy
  * docs(policy): fix wrong documentation of &lt;tcp-mss-clamp/&gt; in `man firewalld.policy`
  * fix(applet): allows using KDE network connection editor
  * fix(applet): ActivationReason.Trigger
- rebase and update patches with origin information
- add the following patch from SLE-15-SP5:Update
  * 0003-firewall-offline-cmd-fail-fix.patch
- add the following patch
  * 0004-fix-ipset-test-for-iifname-oifname-switch.patch</changelog>
</package>
<package pkgid="8f672bb878d71f2cedbab7b9edfdc1916efdc836ece589b9a27981e60197f266" name="firewalld" arch="noarch">
  <version epoch="0" ver="2.0.1" rel="150600.3.12.1"/>
  <changelog author="mrostecki@suse.com" date="1597233600">- Update to version 0.7.5 (jsc#SLE-12281):
  * release: v0.7.5
  * chore(translation): merge from master
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter Fixes: rhbz1541077
  * test(rhbz1483921): better test name
  * fix(cli): add --zone is an invalid option with --direct
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * docs: replace occurrences of the term blacklist with denylist
  * docs(README): add libxslt for doc generation
  * test(rich): source mac with nftables backend
  * fix(firewall-offline-cmd): remove instances of "[P]" in help text
  * test(check-container): add support for centos8 stream
  * test(functions): use IndividualCalls if host doesn't support nft rule index
  * test(functions): add macro IF_HOST_SUPPORTS_NFT_RULE_INDEX
  * test(dbus): better way to check IPv6_rpfilter expected value
  * fix(ipset): flush the set if IndividiualCalls=yes
  * test(ipv6): skip square bracket address tests if ipv6 not available
  * test(gh509): only run test for nftables backend
  * fix(dbus): service: don't cleanup config for old set APIs
  * fix(config): bool values in dict based import/export
  * fix(doc): dbus: signatures for zone tuple based APIs
  * test(dbus): zone: fix zone runtime functional test title
  * test(dbus): zone: fix false failure due to list order
  * fix(client): addService needs to reduce tuple size
  * test(direct): rule in a zone chain
  * fix(direct): rule in a zone chain
  * test(dbus): zone: verify runtime config APIs
  * test(dbus): zone: verify permanent config APIs
  * fix(systemd): Conflict with nftables.service
  * fix: test/regression/gh599: use expr to be more portable
  * test: dbus: zone: verify runtime config API signatures
  * test: dbus: zone: verify permanent config API signatures
  * fix: test/regression/gh599: fix if not using debug output
  * test: log: verify logging still works after truncate
  * test: ipset: verify port ranges for non-default protocol</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 0.8.3:
  * nftables: convert to libnftables JSON interface
  * service: new “helper” element to replace “module” More accurately represents the conntrack helper. Deprecates “module”.
  * allow custom helpers using standard helper modules (rhbz 1733066)
  * testsuite is now shipped in the dist tarball
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don’t print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: ipset types using “port”
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify –set-target values “default” vs “reject”
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * fix: nftables: ipset: port ranges for non-default protocols
  * fix(systemd): Conflict with nftables.service
  * fix(direct): rule in a zone chain
  * fix(client): addService needs to reduce tuple size
  * fix(doc): dbus: signatures for zone tuple based APIs
  * fix(config): bool values in dict based import/export
  * fix(dbus): service: don’t cleanup config for old set APIs
  * fix(ipset): flush the set if IndividiualCalls=yes
  * fix(firewall-offline-cmd): remove instances of “[P]” in help text
  * fix(rich): source mac with nftables backend
  * docs: replace occurrences of the term blacklist with denylist
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * docs(README): add libxslt for doc generation
  * fix(cli): add –zone is an invalid option with –direct
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1599220800">- update to 0.9.0:
  * New major features
  * prevention of Zone Drifting
  * Intra Zone Forwarding
  * Policy Objects
  * For a full list of changes, see
    https://github.com/firewalld/firewalld/compare/v0.8.0...v0.9.0</changelog>
  <changelog author="mrostecki@suse.com" date="1599652800">- Add python3-nftables as a requirement.</changelog>
  <changelog author="fbui@suse.com" date="1599825600">- Make use of %service_del_postun_without_restart
  And stop using DISABLE_RESTART_ON_UPDATE as this interface is
  obsolete.</changelog>
  <changelog author="mrostecki@suse.com" date="1604923200">- Remove the patch which enforces usage of iptables instead of
  nftables (jsc#SLE-16300):
  * 0001-firewall-backend-Switch-default-backend-to-iptables.patch
- Add firewalld zone for the docker0 interface. This is the
  workaround for lack of nftables support in docker. Without that
  additional zone, containers have no Internet connectivity.
  (rhbz#1817022, jsc#SLE-16300)
- Update to 0.9.1:
  * Bugfixes:
  * docs(firewall-cmd): clarify lockdown whitelist command paths
  * fix(dbus): getActivePolicies shouldn't return a policy if a zone is not active
  * fix(policy): zone interface/source changes should affect all using zone</changelog>
  <changelog author="rfrohl@suse.com" date="1610625600">- Add dependency for firewall-offline-cmd (bsc#1180883)</changelog>
  <changelog author="mrostecki@suse.com" date="1611576000">- Update to 0.9.3 (jsc#SLE-17336):
  * docs(dbus): fix invalid method names
  * fix(forward): iptables: ipset used as zone source
  * fix(rich): non-printable characters removed from rich rules
  * docs(firewall-cmd): small description grammar fix
  * fix(rich): limit table to strip non-printables to C0 and C1
  * fix(zone): add source with mac address</changelog>
  <changelog author="mrostecki@suse.com" date="1611662400">- Disable FlushAllOnReload option to not retain interface to zone
  assignments and direct rules when using --reload option.
  * 0002-Disable-FlushAllOnReload-option.patch</changelog>
  <changelog author="mrostecki@suse.com" date="1617796800">- Remove dependency on firewalld from firewall-macros (bsc#1183404)</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Fix modprobe.d directory for SLE15 SP3
- Always own %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mrostecki@suse.com" date="1647432000">- Add patch which fixes the zone configuration (bsc#1191837)
  * 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1648468800">- Provide dummy firewalld-prometheus-config package (bsc#1197042)</changelog>
  <changelog author="sflees@suse.de" date="1652097600">- Fix regression introduced in previous patch (an api change to a
  function also needed backporting) (bsc#1198814)
  * feature-upstream-new-check-config-1.patch
  * feature-upstream-new-check-config-2.patch</changelog>
  <changelog author="mohd.saquib@suse.com" date="1673611200">- Fix firewall-offline-cmd fails with ERROR: Calling pre func
  Added following patch (bsc#1206928)
  [+ 0003-firewall-offline-cmd-fail-fix.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1689076800">- Fix firewalld does not longer understand IPv4 network masks
  of type `255.255.255.0`
  Added following patch (boo#1212974)
  [+ 0004-fix_rich_source_address_with_netmask.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1696334400">- update to v2.0.1 (jsc#PED-5597)
  * fix(cli): all --list-all-zones output identical (d30bc61)
  * fix(cli): properly show default zone attribute (ea8d9a8)
  * fix(cli): properly show active attribute for zones and policies (b202403)
  * fix(cli): --get-active-zones should include the default zone (dae9112)
  * fix(nftables): always flush main table on start (cd20981)
  * fix(runtimeToPermanent): deepcopy settings before mangling (9c53639)
  * docs: fix reference to lockdown-whitelist.xml in SYNOPSIS section (1c77205)
  * fix(firewall-config): escape markup stored in bindings store (c876fd0)
  * fix(tests): avoid deprecated assertRaisesRegexp for assertRaisesRegex (2935119)
  * fix(icmp): fix check_icmpv6_name() to use correct IPv6 names (af3c35b)
  * fix(ipset): fix configuring IP range for ipsets with nftables (6a050ec)
  * fix(ipset): fix configuring "timeout","maxelem" values for ipsets with nftables (7d3340c)
  * fix(core): fix exception while parsing invalid "tcp-mss-clamp" in policy (ff61209)
  * docs(policy): fix wrong documentation of in man firewalld.policy (21026d9)
  * Correct Requires, python3-slip-dbus -&gt; python3-dbus-python
  * This is a major release. The major version is being bumped symbolically
    to reflect significant changes done in commit f4d2b80 ("fix(policy):
    disallow zone drifting"). It does not contain any deliberate breaking changes
  * fix(reload): restore policy for old backend if it changed (de85849)
  * fix(io): rich: tcp mss: handle value=None (8016f10)
  * fix(firewall-config): rich: set destination address (f6641a9)
  * fix(policy): mixed IP families in ingress/egress (69ed4d6)
- removed following patches:
  [- 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch]
  [- 0003-firewall-offline-cmd-fail-fix.patch]
  [- 0004-fix_rich_source_address_with_netmask.patch]
  [- feature-upstream-new-check-config-1.patch]
  [- feature-upstream-new-check-config-2.patch]</changelog>
  <changelog author="davide.benini@suse.com" date="1730376000">- Fix for SG#69031, bsc#1231771:
  * 0001-fix-nftables-set-correctly-match-iifname-oifname.patch:
    [PATCH 1/2] fix(nftables): set: correctly match iifname/oifname
  * 0002-test-ipset-verify-match-with-iface.patch: [PATCH 2/2]
    test(ipset): verify match with iface</changelog>
  <changelog author="meissner@suse.com" date="1748001600">- added a python311 flavor</changelog>
  <changelog author="fvogt@suse.com" date="1751976000">- Do not recommend python311-firewalld (bsc#1246100)</changelog>
</package>
<package pkgid="fb72c3c89b00cc75873561798584c6f87e71c8b364644771d2a9ed1a2a076848" name="firewalld" arch="src">
  <version epoch="0" ver="2.0.1" rel="150600.3.12.1"/>
  <changelog author="mrostecki@suse.com" date="1597233600">- Update to version 0.7.5 (jsc#SLE-12281):
  * release: v0.7.5
  * chore(translation): merge from master
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter Fixes: rhbz1541077
  * test(rhbz1483921): better test name
  * fix(cli): add --zone is an invalid option with --direct
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * docs: replace occurrences of the term blacklist with denylist
  * docs(README): add libxslt for doc generation
  * test(rich): source mac with nftables backend
  * fix(firewall-offline-cmd): remove instances of "[P]" in help text
  * test(check-container): add support for centos8 stream
  * test(functions): use IndividualCalls if host doesn't support nft rule index
  * test(functions): add macro IF_HOST_SUPPORTS_NFT_RULE_INDEX
  * test(dbus): better way to check IPv6_rpfilter expected value
  * fix(ipset): flush the set if IndividiualCalls=yes
  * test(ipv6): skip square bracket address tests if ipv6 not available
  * test(gh509): only run test for nftables backend
  * fix(dbus): service: don't cleanup config for old set APIs
  * fix(config): bool values in dict based import/export
  * fix(doc): dbus: signatures for zone tuple based APIs
  * test(dbus): zone: fix zone runtime functional test title
  * test(dbus): zone: fix false failure due to list order
  * fix(client): addService needs to reduce tuple size
  * test(direct): rule in a zone chain
  * fix(direct): rule in a zone chain
  * test(dbus): zone: verify runtime config APIs
  * test(dbus): zone: verify permanent config APIs
  * fix(systemd): Conflict with nftables.service
  * fix: test/regression/gh599: use expr to be more portable
  * test: dbus: zone: verify runtime config API signatures
  * test: dbus: zone: verify permanent config API signatures
  * fix: test/regression/gh599: fix if not using debug output
  * test: log: verify logging still works after truncate
  * test: ipset: verify port ranges for non-default protocol</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 0.8.3:
  * nftables: convert to libnftables JSON interface
  * service: new “helper” element to replace “module” More accurately represents the conntrack helper. Deprecates “module”.
  * allow custom helpers using standard helper modules (rhbz 1733066)
  * testsuite is now shipped in the dist tarball
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don’t print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: ipset types using “port”
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify –set-target values “default” vs “reject”
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * fix: nftables: ipset: port ranges for non-default protocols
  * fix(systemd): Conflict with nftables.service
  * fix(direct): rule in a zone chain
  * fix(client): addService needs to reduce tuple size
  * fix(doc): dbus: signatures for zone tuple based APIs
  * fix(config): bool values in dict based import/export
  * fix(dbus): service: don’t cleanup config for old set APIs
  * fix(ipset): flush the set if IndividiualCalls=yes
  * fix(firewall-offline-cmd): remove instances of “[P]” in help text
  * fix(rich): source mac with nftables backend
  * docs: replace occurrences of the term blacklist with denylist
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * docs(README): add libxslt for doc generation
  * fix(cli): add –zone is an invalid option with –direct
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1599220800">- update to 0.9.0:
  * New major features
  * prevention of Zone Drifting
  * Intra Zone Forwarding
  * Policy Objects
  * For a full list of changes, see
    https://github.com/firewalld/firewalld/compare/v0.8.0...v0.9.0</changelog>
  <changelog author="mrostecki@suse.com" date="1599652800">- Add python3-nftables as a requirement.</changelog>
  <changelog author="fbui@suse.com" date="1599825600">- Make use of %service_del_postun_without_restart
  And stop using DISABLE_RESTART_ON_UPDATE as this interface is
  obsolete.</changelog>
  <changelog author="mrostecki@suse.com" date="1604923200">- Remove the patch which enforces usage of iptables instead of
  nftables (jsc#SLE-16300):
  * 0001-firewall-backend-Switch-default-backend-to-iptables.patch
- Add firewalld zone for the docker0 interface. This is the
  workaround for lack of nftables support in docker. Without that
  additional zone, containers have no Internet connectivity.
  (rhbz#1817022, jsc#SLE-16300)
- Update to 0.9.1:
  * Bugfixes:
  * docs(firewall-cmd): clarify lockdown whitelist command paths
  * fix(dbus): getActivePolicies shouldn't return a policy if a zone is not active
  * fix(policy): zone interface/source changes should affect all using zone</changelog>
  <changelog author="rfrohl@suse.com" date="1610625600">- Add dependency for firewall-offline-cmd (bsc#1180883)</changelog>
  <changelog author="mrostecki@suse.com" date="1611576000">- Update to 0.9.3 (jsc#SLE-17336):
  * docs(dbus): fix invalid method names
  * fix(forward): iptables: ipset used as zone source
  * fix(rich): non-printable characters removed from rich rules
  * docs(firewall-cmd): small description grammar fix
  * fix(rich): limit table to strip non-printables to C0 and C1
  * fix(zone): add source with mac address</changelog>
  <changelog author="mrostecki@suse.com" date="1611662400">- Disable FlushAllOnReload option to not retain interface to zone
  assignments and direct rules when using --reload option.
  * 0002-Disable-FlushAllOnReload-option.patch</changelog>
  <changelog author="mrostecki@suse.com" date="1617796800">- Remove dependency on firewalld from firewall-macros (bsc#1183404)</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Fix modprobe.d directory for SLE15 SP3
- Always own %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mrostecki@suse.com" date="1647432000">- Add patch which fixes the zone configuration (bsc#1191837)
  * 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1648468800">- Provide dummy firewalld-prometheus-config package (bsc#1197042)</changelog>
  <changelog author="sflees@suse.de" date="1652097600">- Fix regression introduced in previous patch (an api change to a
  function also needed backporting) (bsc#1198814)
  * feature-upstream-new-check-config-1.patch
  * feature-upstream-new-check-config-2.patch</changelog>
  <changelog author="mohd.saquib@suse.com" date="1673611200">- Fix firewall-offline-cmd fails with ERROR: Calling pre func
  Added following patch (bsc#1206928)
  [+ 0003-firewall-offline-cmd-fail-fix.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1689076800">- Fix firewalld does not longer understand IPv4 network masks
  of type `255.255.255.0`
  Added following patch (boo#1212974)
  [+ 0004-fix_rich_source_address_with_netmask.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1696334400">- update to v2.0.1 (jsc#PED-5597)
  * fix(cli): all --list-all-zones output identical (d30bc61)
  * fix(cli): properly show default zone attribute (ea8d9a8)
  * fix(cli): properly show active attribute for zones and policies (b202403)
  * fix(cli): --get-active-zones should include the default zone (dae9112)
  * fix(nftables): always flush main table on start (cd20981)
  * fix(runtimeToPermanent): deepcopy settings before mangling (9c53639)
  * docs: fix reference to lockdown-whitelist.xml in SYNOPSIS section (1c77205)
  * fix(firewall-config): escape markup stored in bindings store (c876fd0)
  * fix(tests): avoid deprecated assertRaisesRegexp for assertRaisesRegex (2935119)
  * fix(icmp): fix check_icmpv6_name() to use correct IPv6 names (af3c35b)
  * fix(ipset): fix configuring IP range for ipsets with nftables (6a050ec)
  * fix(ipset): fix configuring "timeout","maxelem" values for ipsets with nftables (7d3340c)
  * fix(core): fix exception while parsing invalid "tcp-mss-clamp" in policy (ff61209)
  * docs(policy): fix wrong documentation of in man firewalld.policy (21026d9)
  * Correct Requires, python3-slip-dbus -&gt; python3-dbus-python
  * This is a major release. The major version is being bumped symbolically
    to reflect significant changes done in commit f4d2b80 ("fix(policy):
    disallow zone drifting"). It does not contain any deliberate breaking changes
  * fix(reload): restore policy for old backend if it changed (de85849)
  * fix(io): rich: tcp mss: handle value=None (8016f10)
  * fix(firewall-config): rich: set destination address (f6641a9)
  * fix(policy): mixed IP families in ingress/egress (69ed4d6)
- removed following patches:
  [- 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch]
  [- 0003-firewall-offline-cmd-fail-fix.patch]
  [- 0004-fix_rich_source_address_with_netmask.patch]
  [- feature-upstream-new-check-config-1.patch]
  [- feature-upstream-new-check-config-2.patch]</changelog>
  <changelog author="davide.benini@suse.com" date="1730376000">- Fix for SG#69031, bsc#1231771:
  * 0001-fix-nftables-set-correctly-match-iifname-oifname.patch:
    [PATCH 1/2] fix(nftables): set: correctly match iifname/oifname
  * 0002-test-ipset-verify-match-with-iface.patch: [PATCH 2/2]
    test(ipset): verify match with iface</changelog>
  <changelog author="meissner@suse.com" date="1748001600">- added a python311 flavor</changelog>
  <changelog author="fvogt@suse.com" date="1751976000">- Do not recommend python311-firewalld (bsc#1246100)</changelog>
</package>
<package pkgid="3ebe8e2bb6b0de0d0534d676b876c7a7f503a383c9c20744bcb323f60429273f" name="firewalld" arch="noarch">
  <version epoch="0" ver="2.0.1" rel="150600.3.15.1"/>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 0.8.3:
  * nftables: convert to libnftables JSON interface
  * service: new “helper” element to replace “module” More accurately represents the conntrack helper. Deprecates “module”.
  * allow custom helpers using standard helper modules (rhbz 1733066)
  * testsuite is now shipped in the dist tarball
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don’t print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: ipset types using “port”
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify –set-target values “default” vs “reject”
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * fix: nftables: ipset: port ranges for non-default protocols
  * fix(systemd): Conflict with nftables.service
  * fix(direct): rule in a zone chain
  * fix(client): addService needs to reduce tuple size
  * fix(doc): dbus: signatures for zone tuple based APIs
  * fix(config): bool values in dict based import/export
  * fix(dbus): service: don’t cleanup config for old set APIs
  * fix(ipset): flush the set if IndividiualCalls=yes
  * fix(firewall-offline-cmd): remove instances of “[P]” in help text
  * fix(rich): source mac with nftables backend
  * docs: replace occurrences of the term blacklist with denylist
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * docs(README): add libxslt for doc generation
  * fix(cli): add –zone is an invalid option with –direct
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1599220800">- update to 0.9.0:
  * New major features
  * prevention of Zone Drifting
  * Intra Zone Forwarding
  * Policy Objects
  * For a full list of changes, see
    https://github.com/firewalld/firewalld/compare/v0.8.0...v0.9.0</changelog>
  <changelog author="mrostecki@suse.com" date="1599652800">- Add python3-nftables as a requirement.</changelog>
  <changelog author="fbui@suse.com" date="1599825600">- Make use of %service_del_postun_without_restart
  And stop using DISABLE_RESTART_ON_UPDATE as this interface is
  obsolete.</changelog>
  <changelog author="mrostecki@suse.com" date="1604923200">- Remove the patch which enforces usage of iptables instead of
  nftables (jsc#SLE-16300):
  * 0001-firewall-backend-Switch-default-backend-to-iptables.patch
- Add firewalld zone for the docker0 interface. This is the
  workaround for lack of nftables support in docker. Without that
  additional zone, containers have no Internet connectivity.
  (rhbz#1817022, jsc#SLE-16300)
- Update to 0.9.1:
  * Bugfixes:
  * docs(firewall-cmd): clarify lockdown whitelist command paths
  * fix(dbus): getActivePolicies shouldn't return a policy if a zone is not active
  * fix(policy): zone interface/source changes should affect all using zone</changelog>
  <changelog author="rfrohl@suse.com" date="1610625600">- Add dependency for firewall-offline-cmd (bsc#1180883)</changelog>
  <changelog author="mrostecki@suse.com" date="1611576000">- Update to 0.9.3 (jsc#SLE-17336):
  * docs(dbus): fix invalid method names
  * fix(forward): iptables: ipset used as zone source
  * fix(rich): non-printable characters removed from rich rules
  * docs(firewall-cmd): small description grammar fix
  * fix(rich): limit table to strip non-printables to C0 and C1
  * fix(zone): add source with mac address</changelog>
  <changelog author="mrostecki@suse.com" date="1611662400">- Disable FlushAllOnReload option to not retain interface to zone
  assignments and direct rules when using --reload option.
  * 0002-Disable-FlushAllOnReload-option.patch</changelog>
  <changelog author="mrostecki@suse.com" date="1617796800">- Remove dependency on firewalld from firewall-macros (bsc#1183404)</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Fix modprobe.d directory for SLE15 SP3
- Always own %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mrostecki@suse.com" date="1647432000">- Add patch which fixes the zone configuration (bsc#1191837)
  * 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1648468800">- Provide dummy firewalld-prometheus-config package (bsc#1197042)</changelog>
  <changelog author="sflees@suse.de" date="1652097600">- Fix regression introduced in previous patch (an api change to a
  function also needed backporting) (bsc#1198814)
  * feature-upstream-new-check-config-1.patch
  * feature-upstream-new-check-config-2.patch</changelog>
  <changelog author="mohd.saquib@suse.com" date="1673611200">- Fix firewall-offline-cmd fails with ERROR: Calling pre func
  Added following patch (bsc#1206928)
  [+ 0003-firewall-offline-cmd-fail-fix.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1689076800">- Fix firewalld does not longer understand IPv4 network masks
  of type `255.255.255.0`
  Added following patch (boo#1212974)
  [+ 0004-fix_rich_source_address_with_netmask.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1696334400">- update to v2.0.1 (jsc#PED-5597)
  * fix(cli): all --list-all-zones output identical (d30bc61)
  * fix(cli): properly show default zone attribute (ea8d9a8)
  * fix(cli): properly show active attribute for zones and policies (b202403)
  * fix(cli): --get-active-zones should include the default zone (dae9112)
  * fix(nftables): always flush main table on start (cd20981)
  * fix(runtimeToPermanent): deepcopy settings before mangling (9c53639)
  * docs: fix reference to lockdown-whitelist.xml in SYNOPSIS section (1c77205)
  * fix(firewall-config): escape markup stored in bindings store (c876fd0)
  * fix(tests): avoid deprecated assertRaisesRegexp for assertRaisesRegex (2935119)
  * fix(icmp): fix check_icmpv6_name() to use correct IPv6 names (af3c35b)
  * fix(ipset): fix configuring IP range for ipsets with nftables (6a050ec)
  * fix(ipset): fix configuring "timeout","maxelem" values for ipsets with nftables (7d3340c)
  * fix(core): fix exception while parsing invalid "tcp-mss-clamp" in policy (ff61209)
  * docs(policy): fix wrong documentation of in man firewalld.policy (21026d9)
  * Correct Requires, python3-slip-dbus -&gt; python3-dbus-python
  * This is a major release. The major version is being bumped symbolically
    to reflect significant changes done in commit f4d2b80 ("fix(policy):
    disallow zone drifting"). It does not contain any deliberate breaking changes
  * fix(reload): restore policy for old backend if it changed (de85849)
  * fix(io): rich: tcp mss: handle value=None (8016f10)
  * fix(firewall-config): rich: set destination address (f6641a9)
  * fix(policy): mixed IP families in ingress/egress (69ed4d6)
- removed following patches:
  [- 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch]
  [- 0003-firewall-offline-cmd-fail-fix.patch]
  [- 0004-fix_rich_source_address_with_netmask.patch]
  [- feature-upstream-new-check-config-1.patch]
  [- feature-upstream-new-check-config-2.patch]</changelog>
  <changelog author="davide.benini@suse.com" date="1730376000">- Fix for SG#69031, bsc#1231771:
  * 0001-fix-nftables-set-correctly-match-iifname-oifname.patch:
    [PATCH 1/2] fix(nftables): set: correctly match iifname/oifname
  * 0002-test-ipset-verify-match-with-iface.patch: [PATCH 2/2]
    test(ipset): verify match with iface</changelog>
  <changelog author="meissner@suse.com" date="1748001600">- added a python311 flavor</changelog>
  <changelog author="fvogt@suse.com" date="1751976000">- Do not recommend python311-firewalld (bsc#1246100)</changelog>
  <changelog author="rahul.jain@suse.com" date="1777377600">- Fix CVE-2026-4948: local unprivileged users can modify firewall
  state due to D-Bus setter mis-authorization(bsc#1260903)
  [+ 0001-Fix-CVE-2026-4948-local-unprivileged-users-can-modif.patch]</changelog>
</package>
<package pkgid="6a67631d90c09e4d63d79b142bcf7eaefe4402281c2931957ee6cff20d800ced" name="firewalld" arch="src">
  <version epoch="0" ver="2.0.1" rel="150600.3.15.1"/>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 0.8.3:
  * nftables: convert to libnftables JSON interface
  * service: new “helper” element to replace “module” More accurately represents the conntrack helper. Deprecates “module”.
  * allow custom helpers using standard helper modules (rhbz 1733066)
  * testsuite is now shipped in the dist tarball
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don’t print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: ipset types using “port”
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify –set-target values “default” vs “reject”
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * fix: nftables: ipset: port ranges for non-default protocols
  * fix(systemd): Conflict with nftables.service
  * fix(direct): rule in a zone chain
  * fix(client): addService needs to reduce tuple size
  * fix(doc): dbus: signatures for zone tuple based APIs
  * fix(config): bool values in dict based import/export
  * fix(dbus): service: don’t cleanup config for old set APIs
  * fix(ipset): flush the set if IndividiualCalls=yes
  * fix(firewall-offline-cmd): remove instances of “[P]” in help text
  * fix(rich): source mac with nftables backend
  * docs: replace occurrences of the term blacklist with denylist
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * docs(README): add libxslt for doc generation
  * fix(cli): add –zone is an invalid option with –direct
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1599220800">- update to 0.9.0:
  * New major features
  * prevention of Zone Drifting
  * Intra Zone Forwarding
  * Policy Objects
  * For a full list of changes, see
    https://github.com/firewalld/firewalld/compare/v0.8.0...v0.9.0</changelog>
  <changelog author="mrostecki@suse.com" date="1599652800">- Add python3-nftables as a requirement.</changelog>
  <changelog author="fbui@suse.com" date="1599825600">- Make use of %service_del_postun_without_restart
  And stop using DISABLE_RESTART_ON_UPDATE as this interface is
  obsolete.</changelog>
  <changelog author="mrostecki@suse.com" date="1604923200">- Remove the patch which enforces usage of iptables instead of
  nftables (jsc#SLE-16300):
  * 0001-firewall-backend-Switch-default-backend-to-iptables.patch
- Add firewalld zone for the docker0 interface. This is the
  workaround for lack of nftables support in docker. Without that
  additional zone, containers have no Internet connectivity.
  (rhbz#1817022, jsc#SLE-16300)
- Update to 0.9.1:
  * Bugfixes:
  * docs(firewall-cmd): clarify lockdown whitelist command paths
  * fix(dbus): getActivePolicies shouldn't return a policy if a zone is not active
  * fix(policy): zone interface/source changes should affect all using zone</changelog>
  <changelog author="rfrohl@suse.com" date="1610625600">- Add dependency for firewall-offline-cmd (bsc#1180883)</changelog>
  <changelog author="mrostecki@suse.com" date="1611576000">- Update to 0.9.3 (jsc#SLE-17336):
  * docs(dbus): fix invalid method names
  * fix(forward): iptables: ipset used as zone source
  * fix(rich): non-printable characters removed from rich rules
  * docs(firewall-cmd): small description grammar fix
  * fix(rich): limit table to strip non-printables to C0 and C1
  * fix(zone): add source with mac address</changelog>
  <changelog author="mrostecki@suse.com" date="1611662400">- Disable FlushAllOnReload option to not retain interface to zone
  assignments and direct rules when using --reload option.
  * 0002-Disable-FlushAllOnReload-option.patch</changelog>
  <changelog author="mrostecki@suse.com" date="1617796800">- Remove dependency on firewalld from firewall-macros (bsc#1183404)</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Fix modprobe.d directory for SLE15 SP3
- Always own %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mrostecki@suse.com" date="1647432000">- Add patch which fixes the zone configuration (bsc#1191837)
  * 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1648468800">- Provide dummy firewalld-prometheus-config package (bsc#1197042)</changelog>
  <changelog author="sflees@suse.de" date="1652097600">- Fix regression introduced in previous patch (an api change to a
  function also needed backporting) (bsc#1198814)
  * feature-upstream-new-check-config-1.patch
  * feature-upstream-new-check-config-2.patch</changelog>
  <changelog author="mohd.saquib@suse.com" date="1673611200">- Fix firewall-offline-cmd fails with ERROR: Calling pre func
  Added following patch (bsc#1206928)
  [+ 0003-firewall-offline-cmd-fail-fix.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1689076800">- Fix firewalld does not longer understand IPv4 network masks
  of type `255.255.255.0`
  Added following patch (boo#1212974)
  [+ 0004-fix_rich_source_address_with_netmask.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1696334400">- update to v2.0.1 (jsc#PED-5597)
  * fix(cli): all --list-all-zones output identical (d30bc61)
  * fix(cli): properly show default zone attribute (ea8d9a8)
  * fix(cli): properly show active attribute for zones and policies (b202403)
  * fix(cli): --get-active-zones should include the default zone (dae9112)
  * fix(nftables): always flush main table on start (cd20981)
  * fix(runtimeToPermanent): deepcopy settings before mangling (9c53639)
  * docs: fix reference to lockdown-whitelist.xml in SYNOPSIS section (1c77205)
  * fix(firewall-config): escape markup stored in bindings store (c876fd0)
  * fix(tests): avoid deprecated assertRaisesRegexp for assertRaisesRegex (2935119)
  * fix(icmp): fix check_icmpv6_name() to use correct IPv6 names (af3c35b)
  * fix(ipset): fix configuring IP range for ipsets with nftables (6a050ec)
  * fix(ipset): fix configuring "timeout","maxelem" values for ipsets with nftables (7d3340c)
  * fix(core): fix exception while parsing invalid "tcp-mss-clamp" in policy (ff61209)
  * docs(policy): fix wrong documentation of in man firewalld.policy (21026d9)
  * Correct Requires, python3-slip-dbus -&gt; python3-dbus-python
  * This is a major release. The major version is being bumped symbolically
    to reflect significant changes done in commit f4d2b80 ("fix(policy):
    disallow zone drifting"). It does not contain any deliberate breaking changes
  * fix(reload): restore policy for old backend if it changed (de85849)
  * fix(io): rich: tcp mss: handle value=None (8016f10)
  * fix(firewall-config): rich: set destination address (f6641a9)
  * fix(policy): mixed IP families in ingress/egress (69ed4d6)
- removed following patches:
  [- 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch]
  [- 0003-firewall-offline-cmd-fail-fix.patch]
  [- 0004-fix_rich_source_address_with_netmask.patch]
  [- feature-upstream-new-check-config-1.patch]
  [- feature-upstream-new-check-config-2.patch]</changelog>
  <changelog author="davide.benini@suse.com" date="1730376000">- Fix for SG#69031, bsc#1231771:
  * 0001-fix-nftables-set-correctly-match-iifname-oifname.patch:
    [PATCH 1/2] fix(nftables): set: correctly match iifname/oifname
  * 0002-test-ipset-verify-match-with-iface.patch: [PATCH 2/2]
    test(ipset): verify match with iface</changelog>
  <changelog author="meissner@suse.com" date="1748001600">- added a python311 flavor</changelog>
  <changelog author="fvogt@suse.com" date="1751976000">- Do not recommend python311-firewalld (bsc#1246100)</changelog>
  <changelog author="rahul.jain@suse.com" date="1777377600">- Fix CVE-2026-4948: local unprivileged users can modify firewall
  state due to D-Bus setter mis-authorization(bsc#1260903)
  [+ 0001-Fix-CVE-2026-4948-local-unprivileged-users-can-modif.patch]</changelog>
</package>
<package pkgid="4fee63292c362352a09c3a823c86247c665606582d00537ae12069a0910ddc11" name="firewalld" arch="noarch">
  <version epoch="0" ver="2.0.1" rel="150600.3.9.1"/>
  <changelog author="Mathias.Homann@opensuse.org" date="1585915200">- Update to 0.7.4
  This is a bug fix only release.
  However, it does reintroduce the zone drifting bug as a feature. See #258 and #441. This behavior is disabled by default.
  * improvement: build: add an option to disable building documentation
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don't print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * fix: tests: regenerate testsuite if .../{cli,python}/*.at changes
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify --set-target values "default" vs "reject"</changelog>
  <changelog author="mrostecki@suse.com" date="1597233600">- Update to version 0.7.5 (jsc#SLE-12281):
  * release: v0.7.5
  * chore(translation): merge from master
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter Fixes: rhbz1541077
  * test(rhbz1483921): better test name
  * fix(cli): add --zone is an invalid option with --direct
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * docs: replace occurrences of the term blacklist with denylist
  * docs(README): add libxslt for doc generation
  * test(rich): source mac with nftables backend
  * fix(firewall-offline-cmd): remove instances of "[P]" in help text
  * test(check-container): add support for centos8 stream
  * test(functions): use IndividualCalls if host doesn't support nft rule index
  * test(functions): add macro IF_HOST_SUPPORTS_NFT_RULE_INDEX
  * test(dbus): better way to check IPv6_rpfilter expected value
  * fix(ipset): flush the set if IndividiualCalls=yes
  * test(ipv6): skip square bracket address tests if ipv6 not available
  * test(gh509): only run test for nftables backend
  * fix(dbus): service: don't cleanup config for old set APIs
  * fix(config): bool values in dict based import/export
  * fix(doc): dbus: signatures for zone tuple based APIs
  * test(dbus): zone: fix zone runtime functional test title
  * test(dbus): zone: fix false failure due to list order
  * fix(client): addService needs to reduce tuple size
  * test(direct): rule in a zone chain
  * fix(direct): rule in a zone chain
  * test(dbus): zone: verify runtime config APIs
  * test(dbus): zone: verify permanent config APIs
  * fix(systemd): Conflict with nftables.service
  * fix: test/regression/gh599: use expr to be more portable
  * test: dbus: zone: verify runtime config API signatures
  * test: dbus: zone: verify permanent config API signatures
  * fix: test/regression/gh599: fix if not using debug output
  * test: log: verify logging still works after truncate
  * test: ipset: verify port ranges for non-default protocol</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 0.8.3:
  * nftables: convert to libnftables JSON interface
  * service: new “helper” element to replace “module” More accurately represents the conntrack helper. Deprecates “module”.
  * allow custom helpers using standard helper modules (rhbz 1733066)
  * testsuite is now shipped in the dist tarball
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don’t print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: ipset types using “port”
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify –set-target values “default” vs “reject”
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * fix: nftables: ipset: port ranges for non-default protocols
  * fix(systemd): Conflict with nftables.service
  * fix(direct): rule in a zone chain
  * fix(client): addService needs to reduce tuple size
  * fix(doc): dbus: signatures for zone tuple based APIs
  * fix(config): bool values in dict based import/export
  * fix(dbus): service: don’t cleanup config for old set APIs
  * fix(ipset): flush the set if IndividiualCalls=yes
  * fix(firewall-offline-cmd): remove instances of “[P]” in help text
  * fix(rich): source mac with nftables backend
  * docs: replace occurrences of the term blacklist with denylist
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * docs(README): add libxslt for doc generation
  * fix(cli): add –zone is an invalid option with –direct
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1599220800">- update to 0.9.0:
  * New major features
  * prevention of Zone Drifting
  * Intra Zone Forwarding
  * Policy Objects
  * For a full list of changes, see
    https://github.com/firewalld/firewalld/compare/v0.8.0...v0.9.0</changelog>
  <changelog author="mrostecki@suse.com" date="1599652800">- Add python3-nftables as a requirement.</changelog>
  <changelog author="fbui@suse.com" date="1599825600">- Make use of %service_del_postun_without_restart
  And stop using DISABLE_RESTART_ON_UPDATE as this interface is
  obsolete.</changelog>
  <changelog author="mrostecki@suse.com" date="1604923200">- Remove the patch which enforces usage of iptables instead of
  nftables (jsc#SLE-16300):
  * 0001-firewall-backend-Switch-default-backend-to-iptables.patch
- Add firewalld zone for the docker0 interface. This is the
  workaround for lack of nftables support in docker. Without that
  additional zone, containers have no Internet connectivity.
  (rhbz#1817022, jsc#SLE-16300)
- Update to 0.9.1:
  * Bugfixes:
  * docs(firewall-cmd): clarify lockdown whitelist command paths
  * fix(dbus): getActivePolicies shouldn't return a policy if a zone is not active
  * fix(policy): zone interface/source changes should affect all using zone</changelog>
  <changelog author="rfrohl@suse.com" date="1610625600">- Add dependency for firewall-offline-cmd (bsc#1180883)</changelog>
  <changelog author="mrostecki@suse.com" date="1611576000">- Update to 0.9.3 (jsc#SLE-17336):
  * docs(dbus): fix invalid method names
  * fix(forward): iptables: ipset used as zone source
  * fix(rich): non-printable characters removed from rich rules
  * docs(firewall-cmd): small description grammar fix
  * fix(rich): limit table to strip non-printables to C0 and C1
  * fix(zone): add source with mac address</changelog>
  <changelog author="mrostecki@suse.com" date="1611662400">- Disable FlushAllOnReload option to not retain interface to zone
  assignments and direct rules when using --reload option.
  * 0002-Disable-FlushAllOnReload-option.patch</changelog>
  <changelog author="mrostecki@suse.com" date="1617796800">- Remove dependency on firewalld from firewall-macros (bsc#1183404)</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Fix modprobe.d directory for SLE15 SP3
- Always own %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mrostecki@suse.com" date="1647432000">- Add patch which fixes the zone configuration (bsc#1191837)
  * 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1648468800">- Provide dummy firewalld-prometheus-config package (bsc#1197042)</changelog>
  <changelog author="sflees@suse.de" date="1652097600">- Fix regression introduced in previous patch (an api change to a
  function also needed backporting) (bsc#1198814)
  * feature-upstream-new-check-config-1.patch
  * feature-upstream-new-check-config-2.patch</changelog>
  <changelog author="mohd.saquib@suse.com" date="1673611200">- Fix firewall-offline-cmd fails with ERROR: Calling pre func
  Added following patch (bsc#1206928)
  [+ 0003-firewall-offline-cmd-fail-fix.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1689076800">- Fix firewalld does not longer understand IPv4 network masks
  of type `255.255.255.0`
  Added following patch (boo#1212974)
  [+ 0004-fix_rich_source_address_with_netmask.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1696334400">- update to v2.0.1 (jsc#PED-5597)
  * fix(cli): all --list-all-zones output identical (d30bc61)
  * fix(cli): properly show default zone attribute (ea8d9a8)
  * fix(cli): properly show active attribute for zones and policies (b202403)
  * fix(cli): --get-active-zones should include the default zone (dae9112)
  * fix(nftables): always flush main table on start (cd20981)
  * fix(runtimeToPermanent): deepcopy settings before mangling (9c53639)
  * docs: fix reference to lockdown-whitelist.xml in SYNOPSIS section (1c77205)
  * fix(firewall-config): escape markup stored in bindings store (c876fd0)
  * fix(tests): avoid deprecated assertRaisesRegexp for assertRaisesRegex (2935119)
  * fix(icmp): fix check_icmpv6_name() to use correct IPv6 names (af3c35b)
  * fix(ipset): fix configuring IP range for ipsets with nftables (6a050ec)
  * fix(ipset): fix configuring "timeout","maxelem" values for ipsets with nftables (7d3340c)
  * fix(core): fix exception while parsing invalid "tcp-mss-clamp" in policy (ff61209)
  * docs(policy): fix wrong documentation of in man firewalld.policy (21026d9)
  * Correct Requires, python3-slip-dbus -&gt; python3-dbus-python
  * This is a major release. The major version is being bumped symbolically
    to reflect significant changes done in commit f4d2b80 ("fix(policy):
    disallow zone drifting"). It does not contain any deliberate breaking changes
  * fix(reload): restore policy for old backend if it changed (de85849)
  * fix(io): rich: tcp mss: handle value=None (8016f10)
  * fix(firewall-config): rich: set destination address (f6641a9)
  * fix(policy): mixed IP families in ingress/egress (69ed4d6)
- removed following patches:
  [- 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch]
  [- 0003-firewall-offline-cmd-fail-fix.patch]
  [- 0004-fix_rich_source_address_with_netmask.patch]
  [- feature-upstream-new-check-config-1.patch]
  [- feature-upstream-new-check-config-2.patch]</changelog>
  <changelog author="davide.benini@suse.com" date="1730376000">- Fix for SG#69031, bsc#1231771:
  * 0001-fix-nftables-set-correctly-match-iifname-oifname.patch:
    [PATCH 1/2] fix(nftables): set: correctly match iifname/oifname
  * 0002-test-ipset-verify-match-with-iface.patch: [PATCH 2/2]
    test(ipset): verify match with iface</changelog>
  <changelog author="meissner@suse.com" date="1748001600">- added a python311 flavor</changelog>
</package>
<package pkgid="6b21ca2c8419d4bae7f116afee0b646ebdb04faf11dd9665d8c3b63e47d244dd" name="firewalld" arch="src">
  <version epoch="0" ver="2.0.1" rel="150600.3.9.1"/>
  <changelog author="Mathias.Homann@opensuse.org" date="1585915200">- Update to 0.7.4
  This is a bug fix only release.
  However, it does reintroduce the zone drifting bug as a feature. See #258 and #441. This behavior is disabled by default.
  * improvement: build: add an option to disable building documentation
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don't print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * fix: tests: regenerate testsuite if .../{cli,python}/*.at changes
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify --set-target values "default" vs "reject"</changelog>
  <changelog author="mrostecki@suse.com" date="1597233600">- Update to version 0.7.5 (jsc#SLE-12281):
  * release: v0.7.5
  * chore(translation): merge from master
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter Fixes: rhbz1541077
  * test(rhbz1483921): better test name
  * fix(cli): add --zone is an invalid option with --direct
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * docs: replace occurrences of the term blacklist with denylist
  * docs(README): add libxslt for doc generation
  * test(rich): source mac with nftables backend
  * fix(firewall-offline-cmd): remove instances of "[P]" in help text
  * test(check-container): add support for centos8 stream
  * test(functions): use IndividualCalls if host doesn't support nft rule index
  * test(functions): add macro IF_HOST_SUPPORTS_NFT_RULE_INDEX
  * test(dbus): better way to check IPv6_rpfilter expected value
  * fix(ipset): flush the set if IndividiualCalls=yes
  * test(ipv6): skip square bracket address tests if ipv6 not available
  * test(gh509): only run test for nftables backend
  * fix(dbus): service: don't cleanup config for old set APIs
  * fix(config): bool values in dict based import/export
  * fix(doc): dbus: signatures for zone tuple based APIs
  * test(dbus): zone: fix zone runtime functional test title
  * test(dbus): zone: fix false failure due to list order
  * fix(client): addService needs to reduce tuple size
  * test(direct): rule in a zone chain
  * fix(direct): rule in a zone chain
  * test(dbus): zone: verify runtime config APIs
  * test(dbus): zone: verify permanent config APIs
  * fix(systemd): Conflict with nftables.service
  * fix: test/regression/gh599: use expr to be more portable
  * test: dbus: zone: verify runtime config API signatures
  * test: dbus: zone: verify permanent config API signatures
  * fix: test/regression/gh599: fix if not using debug output
  * test: log: verify logging still works after truncate
  * test: ipset: verify port ranges for non-default protocol</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 0.8.3:
  * nftables: convert to libnftables JSON interface
  * service: new “helper” element to replace “module” More accurately represents the conntrack helper. Deprecates “module”.
  * allow custom helpers using standard helper modules (rhbz 1733066)
  * testsuite is now shipped in the dist tarball
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don’t print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: ipset types using “port”
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify –set-target values “default” vs “reject”
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * fix: nftables: ipset: port ranges for non-default protocols
  * fix(systemd): Conflict with nftables.service
  * fix(direct): rule in a zone chain
  * fix(client): addService needs to reduce tuple size
  * fix(doc): dbus: signatures for zone tuple based APIs
  * fix(config): bool values in dict based import/export
  * fix(dbus): service: don’t cleanup config for old set APIs
  * fix(ipset): flush the set if IndividiualCalls=yes
  * fix(firewall-offline-cmd): remove instances of “[P]” in help text
  * fix(rich): source mac with nftables backend
  * docs: replace occurrences of the term blacklist with denylist
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * docs(README): add libxslt for doc generation
  * fix(cli): add –zone is an invalid option with –direct
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1599220800">- update to 0.9.0:
  * New major features
  * prevention of Zone Drifting
  * Intra Zone Forwarding
  * Policy Objects
  * For a full list of changes, see
    https://github.com/firewalld/firewalld/compare/v0.8.0...v0.9.0</changelog>
  <changelog author="mrostecki@suse.com" date="1599652800">- Add python3-nftables as a requirement.</changelog>
  <changelog author="fbui@suse.com" date="1599825600">- Make use of %service_del_postun_without_restart
  And stop using DISABLE_RESTART_ON_UPDATE as this interface is
  obsolete.</changelog>
  <changelog author="mrostecki@suse.com" date="1604923200">- Remove the patch which enforces usage of iptables instead of
  nftables (jsc#SLE-16300):
  * 0001-firewall-backend-Switch-default-backend-to-iptables.patch
- Add firewalld zone for the docker0 interface. This is the
  workaround for lack of nftables support in docker. Without that
  additional zone, containers have no Internet connectivity.
  (rhbz#1817022, jsc#SLE-16300)
- Update to 0.9.1:
  * Bugfixes:
  * docs(firewall-cmd): clarify lockdown whitelist command paths
  * fix(dbus): getActivePolicies shouldn't return a policy if a zone is not active
  * fix(policy): zone interface/source changes should affect all using zone</changelog>
  <changelog author="rfrohl@suse.com" date="1610625600">- Add dependency for firewall-offline-cmd (bsc#1180883)</changelog>
  <changelog author="mrostecki@suse.com" date="1611576000">- Update to 0.9.3 (jsc#SLE-17336):
  * docs(dbus): fix invalid method names
  * fix(forward): iptables: ipset used as zone source
  * fix(rich): non-printable characters removed from rich rules
  * docs(firewall-cmd): small description grammar fix
  * fix(rich): limit table to strip non-printables to C0 and C1
  * fix(zone): add source with mac address</changelog>
  <changelog author="mrostecki@suse.com" date="1611662400">- Disable FlushAllOnReload option to not retain interface to zone
  assignments and direct rules when using --reload option.
  * 0002-Disable-FlushAllOnReload-option.patch</changelog>
  <changelog author="mrostecki@suse.com" date="1617796800">- Remove dependency on firewalld from firewall-macros (bsc#1183404)</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Fix modprobe.d directory for SLE15 SP3
- Always own %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mrostecki@suse.com" date="1647432000">- Add patch which fixes the zone configuration (bsc#1191837)
  * 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1648468800">- Provide dummy firewalld-prometheus-config package (bsc#1197042)</changelog>
  <changelog author="sflees@suse.de" date="1652097600">- Fix regression introduced in previous patch (an api change to a
  function also needed backporting) (bsc#1198814)
  * feature-upstream-new-check-config-1.patch
  * feature-upstream-new-check-config-2.patch</changelog>
  <changelog author="mohd.saquib@suse.com" date="1673611200">- Fix firewall-offline-cmd fails with ERROR: Calling pre func
  Added following patch (bsc#1206928)
  [+ 0003-firewall-offline-cmd-fail-fix.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1689076800">- Fix firewalld does not longer understand IPv4 network masks
  of type `255.255.255.0`
  Added following patch (boo#1212974)
  [+ 0004-fix_rich_source_address_with_netmask.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1696334400">- update to v2.0.1 (jsc#PED-5597)
  * fix(cli): all --list-all-zones output identical (d30bc61)
  * fix(cli): properly show default zone attribute (ea8d9a8)
  * fix(cli): properly show active attribute for zones and policies (b202403)
  * fix(cli): --get-active-zones should include the default zone (dae9112)
  * fix(nftables): always flush main table on start (cd20981)
  * fix(runtimeToPermanent): deepcopy settings before mangling (9c53639)
  * docs: fix reference to lockdown-whitelist.xml in SYNOPSIS section (1c77205)
  * fix(firewall-config): escape markup stored in bindings store (c876fd0)
  * fix(tests): avoid deprecated assertRaisesRegexp for assertRaisesRegex (2935119)
  * fix(icmp): fix check_icmpv6_name() to use correct IPv6 names (af3c35b)
  * fix(ipset): fix configuring IP range for ipsets with nftables (6a050ec)
  * fix(ipset): fix configuring "timeout","maxelem" values for ipsets with nftables (7d3340c)
  * fix(core): fix exception while parsing invalid "tcp-mss-clamp" in policy (ff61209)
  * docs(policy): fix wrong documentation of in man firewalld.policy (21026d9)
  * Correct Requires, python3-slip-dbus -&gt; python3-dbus-python
  * This is a major release. The major version is being bumped symbolically
    to reflect significant changes done in commit f4d2b80 ("fix(policy):
    disallow zone drifting"). It does not contain any deliberate breaking changes
  * fix(reload): restore policy for old backend if it changed (de85849)
  * fix(io): rich: tcp mss: handle value=None (8016f10)
  * fix(firewall-config): rich: set destination address (f6641a9)
  * fix(policy): mixed IP families in ingress/egress (69ed4d6)
- removed following patches:
  [- 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch]
  [- 0003-firewall-offline-cmd-fail-fix.patch]
  [- 0004-fix_rich_source_address_with_netmask.patch]
  [- feature-upstream-new-check-config-1.patch]
  [- feature-upstream-new-check-config-2.patch]</changelog>
  <changelog author="davide.benini@suse.com" date="1730376000">- Fix for SG#69031, bsc#1231771:
  * 0001-fix-nftables-set-correctly-match-iifname-oifname.patch:
    [PATCH 1/2] fix(nftables): set: correctly match iifname/oifname
  * 0002-test-ipset-verify-match-with-iface.patch: [PATCH 2/2]
    test(ipset): verify match with iface</changelog>
  <changelog author="meissner@suse.com" date="1748001600">- added a python311 flavor</changelog>
</package>
<package pkgid="6114e3668a3d82fa6057b25e87a95c4b400981c79f1e679c507af6d2973e741f" name="firewalld-bash-completion" arch="noarch">
  <version epoch="0" ver="1.3.4" rel="150600.13.3.1"/>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 0.8.3:
  * nftables: convert to libnftables JSON interface
  * service: new “helper” element to replace “module” More accurately represents the conntrack helper. Deprecates “module”.
  * allow custom helpers using standard helper modules (rhbz 1733066)
  * testsuite is now shipped in the dist tarball
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don’t print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: ipset types using “port”
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify –set-target values “default” vs “reject”
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * fix: nftables: ipset: port ranges for non-default protocols
  * fix(systemd): Conflict with nftables.service
  * fix(direct): rule in a zone chain
  * fix(client): addService needs to reduce tuple size
  * fix(doc): dbus: signatures for zone tuple based APIs
  * fix(config): bool values in dict based import/export
  * fix(dbus): service: don’t cleanup config for old set APIs
  * fix(ipset): flush the set if IndividiualCalls=yes
  * fix(firewall-offline-cmd): remove instances of “[P]” in help text
  * fix(rich): source mac with nftables backend
  * docs: replace occurrences of the term blacklist with denylist
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * docs(README): add libxslt for doc generation
  * fix(cli): add –zone is an invalid option with –direct
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1599220800">- update to 0.9.0:
  * New major features
  * prevention of Zone Drifting
  * Intra Zone Forwarding
  * Policy Objects
  * For a full list of changes, see
    https://github.com/firewalld/firewalld/compare/v0.8.0...v0.9.0</changelog>
  <changelog author="mrostecki@suse.com" date="1599652800">- Add python3-nftables as a requirement.</changelog>
  <changelog author="fbui@suse.com" date="1599825600">- Make use of %service_del_postun_without_restart
  And stop using DISABLE_RESTART_ON_UPDATE as this interface is
  obsolete.</changelog>
  <changelog author="mrostecki@suse.com" date="1604923200">- Remove the patch which enforces usage of iptables instead of
  nftables (jsc#SLE-16300):
  * 0001-firewall-backend-Switch-default-backend-to-iptables.patch
- Add firewalld zone for the docker0 interface. This is the
  workaround for lack of nftables support in docker. Without that
  additional zone, containers have no Internet connectivity.
  (rhbz#1817022, jsc#SLE-16300)
- Update to 0.9.1:
  * Bugfixes:
  * docs(firewall-cmd): clarify lockdown whitelist command paths
  * fix(dbus): getActivePolicies shouldn't return a policy if a zone is not active
  * fix(policy): zone interface/source changes should affect all using zone</changelog>
  <changelog author="rfrohl@suse.com" date="1610625600">- Add dependency for firewall-offline-cmd (bsc#1180883)</changelog>
  <changelog author="mrostecki@suse.com" date="1611576000">- Update to 0.9.3 (jsc#SLE-17336):
  * docs(dbus): fix invalid method names
  * fix(forward): iptables: ipset used as zone source
  * fix(rich): non-printable characters removed from rich rules
  * docs(firewall-cmd): small description grammar fix
  * fix(rich): limit table to strip non-printables to C0 and C1
  * fix(zone): add source with mac address</changelog>
  <changelog author="mrostecki@suse.com" date="1611662400">- Disable FlushAllOnReload option to not retain interface to zone
  assignments and direct rules when using --reload option.
  * 0002-Disable-FlushAllOnReload-option.patch</changelog>
  <changelog author="mrostecki@suse.com" date="1617796800">- Remove dependency on firewalld from firewall-macros (bsc#1183404)</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Fix modprobe.d directory for SLE15 SP3
- Always own %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mrostecki@suse.com" date="1647432000">- Add patch which fixes the zone configuration (bsc#1191837)
  * 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1648468800">- Provide dummy firewalld-prometheus-config package (bsc#1197042)</changelog>
  <changelog author="sflees@suse.de" date="1652097600">- Fix regression introduced in previous patch (an api change to a
  function also needed backporting) (bsc#1198814)
  * feature-upstream-new-check-config-1.patch
  * feature-upstream-new-check-config-2.patch</changelog>
  <changelog author="mohd.saquib@suse.com" date="1673611200">- Fix firewall-offline-cmd fails with ERROR: Calling pre func
  Added following patch (bsc#1206928)
  [+ 0003-firewall-offline-cmd-fail-fix.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1689076800">- Fix firewalld does not longer understand IPv4 network masks
  of type `255.255.255.0`
  Added following patch (boo#1212974)
  [+ 0004-fix_rich_source_address_with_netmask.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1696334400">- update to v2.0.1 (jsc#PED-5597)
  * fix(cli): all --list-all-zones output identical (d30bc61)
  * fix(cli): properly show default zone attribute (ea8d9a8)
  * fix(cli): properly show active attribute for zones and policies (b202403)
  * fix(cli): --get-active-zones should include the default zone (dae9112)
  * fix(nftables): always flush main table on start (cd20981)
  * fix(runtimeToPermanent): deepcopy settings before mangling (9c53639)
  * docs: fix reference to lockdown-whitelist.xml in SYNOPSIS section (1c77205)
  * fix(firewall-config): escape markup stored in bindings store (c876fd0)
  * fix(tests): avoid deprecated assertRaisesRegexp for assertRaisesRegex (2935119)
  * fix(icmp): fix check_icmpv6_name() to use correct IPv6 names (af3c35b)
  * fix(ipset): fix configuring IP range for ipsets with nftables (6a050ec)
  * fix(ipset): fix configuring "timeout","maxelem" values for ipsets with nftables (7d3340c)
  * fix(core): fix exception while parsing invalid "tcp-mss-clamp" in policy (ff61209)
  * docs(policy): fix wrong documentation of in man firewalld.policy (21026d9)
  * Correct Requires, python3-slip-dbus -&gt; python3-dbus-python
  * This is a major release. The major version is being bumped symbolically
    to reflect significant changes done in commit f4d2b80 ("fix(policy):
    disallow zone drifting"). It does not contain any deliberate breaking changes
  * fix(reload): restore policy for old backend if it changed (de85849)
  * fix(io): rich: tcp mss: handle value=None (8016f10)
  * fix(firewall-config): rich: set destination address (f6641a9)
  * fix(policy): mixed IP families in ingress/egress (69ed4d6)
- removed following patches:
  [- 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch]
  [- 0003-firewall-offline-cmd-fail-fix.patch]
  [- 0004-fix_rich_source_address_with_netmask.patch]
  [- feature-upstream-new-check-config-1.patch]
  [- feature-upstream-new-check-config-2.patch]</changelog>
  <changelog author="davide.benini@suse.com" date="1730376000">- Fix for SG#69031, bsc#1231771:
  * 0001-fix-nftables-set-correctly-match-iifname-oifname.patch:
    [PATCH 1/2] fix(nftables): set: correctly match iifname/oifname
  * 0002-test-ipset-verify-match-with-iface.patch: [PATCH 2/2]
    test(ipset): verify match with iface</changelog>
  <changelog author="meissner@suse.com" date="1748001600">- added a python311 flavor</changelog>
  <changelog author="fvogt@suse.com" date="1751976000">- Do not recommend python311-firewalld (bsc#1246100)</changelog>
  <changelog author="jan.fooken@suse.com" date="1759233600">- downgrade to v1.3.4 due to slow firewall rule generation
  introduced in the 2.x.x series (jsc#PED-13314).
  The Version includes the following cherry picked commits from
  upstream
  * fix(fw_nm): use IP interface names for connection lookup
  * fix(fw_policy): raise exceptions
  * fix(service): include: when used with rich rule
  * fix(nftables): rich: log: limit was not taking effect
  * fix(build): rpm must build all as prerequisite
  * fix: use error codes for FirewallError instances
  * fix(ipset): chunk entries when restoring set
  * fix(reload): restore policy for old backend if it changed
  * fix(io): rich: tcp mss: handle value=None
  * fix(firewall-config): rich: set destination address
  * fix(policy): mixed IP families in ingress/egress
  * fix(nftables): always flush main table on start
  * fix(runtimeToPermanent): deepcopy settings before mangling
  * docs: fix reference to lockdown-whitelist.xml in SYNOPSIS section
  * fix(tests): avoid deprecated assertRaisesRegexp for assertRaisesRegex
  * fix(icmp): fix check_icmpv6_name() to use correct IPv6 names
  * fix(ipset): fix configuring IP range for ipsets with nftables
  * improvement(tests): add test showing the current wrong behavior for ipsets
  * fix(ipset): fix configuring "timeout","maxelem" values for ipsets with nftables
  * improvement(build): rename the "master" branch to "main"
  * fix(core): fix exception while parsing invalid "tcp-mss-clamp" in policy
  * docs(policy): fix wrong documentation of &lt;tcp-mss-clamp/&gt; in `man firewalld.policy`
  * fix(applet): allows using KDE network connection editor
  * fix(applet): ActivationReason.Trigger
- rebase and update patches with origin information
- add the following patch from SLE-15-SP5:Update
  * 0003-firewall-offline-cmd-fail-fix.patch
- add the following patch
  * 0004-fix-ipset-test-for-iifname-oifname-switch.patch</changelog>
</package>
<package pkgid="b6db14d90d0e69d326fd99892afb81129659c355bb668345c9bc2beffe113746" name="firewalld-bash-completion" arch="noarch">
  <version epoch="0" ver="2.0.1" rel="150600.3.12.1"/>
  <changelog author="mrostecki@suse.com" date="1597233600">- Update to version 0.7.5 (jsc#SLE-12281):
  * release: v0.7.5
  * chore(translation): merge from master
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter Fixes: rhbz1541077
  * test(rhbz1483921): better test name
  * fix(cli): add --zone is an invalid option with --direct
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * docs: replace occurrences of the term blacklist with denylist
  * docs(README): add libxslt for doc generation
  * test(rich): source mac with nftables backend
  * fix(firewall-offline-cmd): remove instances of "[P]" in help text
  * test(check-container): add support for centos8 stream
  * test(functions): use IndividualCalls if host doesn't support nft rule index
  * test(functions): add macro IF_HOST_SUPPORTS_NFT_RULE_INDEX
  * test(dbus): better way to check IPv6_rpfilter expected value
  * fix(ipset): flush the set if IndividiualCalls=yes
  * test(ipv6): skip square bracket address tests if ipv6 not available
  * test(gh509): only run test for nftables backend
  * fix(dbus): service: don't cleanup config for old set APIs
  * fix(config): bool values in dict based import/export
  * fix(doc): dbus: signatures for zone tuple based APIs
  * test(dbus): zone: fix zone runtime functional test title
  * test(dbus): zone: fix false failure due to list order
  * fix(client): addService needs to reduce tuple size
  * test(direct): rule in a zone chain
  * fix(direct): rule in a zone chain
  * test(dbus): zone: verify runtime config APIs
  * test(dbus): zone: verify permanent config APIs
  * fix(systemd): Conflict with nftables.service
  * fix: test/regression/gh599: use expr to be more portable
  * test: dbus: zone: verify runtime config API signatures
  * test: dbus: zone: verify permanent config API signatures
  * fix: test/regression/gh599: fix if not using debug output
  * test: log: verify logging still works after truncate
  * test: ipset: verify port ranges for non-default protocol</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 0.8.3:
  * nftables: convert to libnftables JSON interface
  * service: new “helper” element to replace “module” More accurately represents the conntrack helper. Deprecates “module”.
  * allow custom helpers using standard helper modules (rhbz 1733066)
  * testsuite is now shipped in the dist tarball
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don’t print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: ipset types using “port”
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify –set-target values “default” vs “reject”
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * fix: nftables: ipset: port ranges for non-default protocols
  * fix(systemd): Conflict with nftables.service
  * fix(direct): rule in a zone chain
  * fix(client): addService needs to reduce tuple size
  * fix(doc): dbus: signatures for zone tuple based APIs
  * fix(config): bool values in dict based import/export
  * fix(dbus): service: don’t cleanup config for old set APIs
  * fix(ipset): flush the set if IndividiualCalls=yes
  * fix(firewall-offline-cmd): remove instances of “[P]” in help text
  * fix(rich): source mac with nftables backend
  * docs: replace occurrences of the term blacklist with denylist
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * docs(README): add libxslt for doc generation
  * fix(cli): add –zone is an invalid option with –direct
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1599220800">- update to 0.9.0:
  * New major features
  * prevention of Zone Drifting
  * Intra Zone Forwarding
  * Policy Objects
  * For a full list of changes, see
    https://github.com/firewalld/firewalld/compare/v0.8.0...v0.9.0</changelog>
  <changelog author="mrostecki@suse.com" date="1599652800">- Add python3-nftables as a requirement.</changelog>
  <changelog author="fbui@suse.com" date="1599825600">- Make use of %service_del_postun_without_restart
  And stop using DISABLE_RESTART_ON_UPDATE as this interface is
  obsolete.</changelog>
  <changelog author="mrostecki@suse.com" date="1604923200">- Remove the patch which enforces usage of iptables instead of
  nftables (jsc#SLE-16300):
  * 0001-firewall-backend-Switch-default-backend-to-iptables.patch
- Add firewalld zone for the docker0 interface. This is the
  workaround for lack of nftables support in docker. Without that
  additional zone, containers have no Internet connectivity.
  (rhbz#1817022, jsc#SLE-16300)
- Update to 0.9.1:
  * Bugfixes:
  * docs(firewall-cmd): clarify lockdown whitelist command paths
  * fix(dbus): getActivePolicies shouldn't return a policy if a zone is not active
  * fix(policy): zone interface/source changes should affect all using zone</changelog>
  <changelog author="rfrohl@suse.com" date="1610625600">- Add dependency for firewall-offline-cmd (bsc#1180883)</changelog>
  <changelog author="mrostecki@suse.com" date="1611576000">- Update to 0.9.3 (jsc#SLE-17336):
  * docs(dbus): fix invalid method names
  * fix(forward): iptables: ipset used as zone source
  * fix(rich): non-printable characters removed from rich rules
  * docs(firewall-cmd): small description grammar fix
  * fix(rich): limit table to strip non-printables to C0 and C1
  * fix(zone): add source with mac address</changelog>
  <changelog author="mrostecki@suse.com" date="1611662400">- Disable FlushAllOnReload option to not retain interface to zone
  assignments and direct rules when using --reload option.
  * 0002-Disable-FlushAllOnReload-option.patch</changelog>
  <changelog author="mrostecki@suse.com" date="1617796800">- Remove dependency on firewalld from firewall-macros (bsc#1183404)</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Fix modprobe.d directory for SLE15 SP3
- Always own %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mrostecki@suse.com" date="1647432000">- Add patch which fixes the zone configuration (bsc#1191837)
  * 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1648468800">- Provide dummy firewalld-prometheus-config package (bsc#1197042)</changelog>
  <changelog author="sflees@suse.de" date="1652097600">- Fix regression introduced in previous patch (an api change to a
  function also needed backporting) (bsc#1198814)
  * feature-upstream-new-check-config-1.patch
  * feature-upstream-new-check-config-2.patch</changelog>
  <changelog author="mohd.saquib@suse.com" date="1673611200">- Fix firewall-offline-cmd fails with ERROR: Calling pre func
  Added following patch (bsc#1206928)
  [+ 0003-firewall-offline-cmd-fail-fix.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1689076800">- Fix firewalld does not longer understand IPv4 network masks
  of type `255.255.255.0`
  Added following patch (boo#1212974)
  [+ 0004-fix_rich_source_address_with_netmask.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1696334400">- update to v2.0.1 (jsc#PED-5597)
  * fix(cli): all --list-all-zones output identical (d30bc61)
  * fix(cli): properly show default zone attribute (ea8d9a8)
  * fix(cli): properly show active attribute for zones and policies (b202403)
  * fix(cli): --get-active-zones should include the default zone (dae9112)
  * fix(nftables): always flush main table on start (cd20981)
  * fix(runtimeToPermanent): deepcopy settings before mangling (9c53639)
  * docs: fix reference to lockdown-whitelist.xml in SYNOPSIS section (1c77205)
  * fix(firewall-config): escape markup stored in bindings store (c876fd0)
  * fix(tests): avoid deprecated assertRaisesRegexp for assertRaisesRegex (2935119)
  * fix(icmp): fix check_icmpv6_name() to use correct IPv6 names (af3c35b)
  * fix(ipset): fix configuring IP range for ipsets with nftables (6a050ec)
  * fix(ipset): fix configuring "timeout","maxelem" values for ipsets with nftables (7d3340c)
  * fix(core): fix exception while parsing invalid "tcp-mss-clamp" in policy (ff61209)
  * docs(policy): fix wrong documentation of in man firewalld.policy (21026d9)
  * Correct Requires, python3-slip-dbus -&gt; python3-dbus-python
  * This is a major release. The major version is being bumped symbolically
    to reflect significant changes done in commit f4d2b80 ("fix(policy):
    disallow zone drifting"). It does not contain any deliberate breaking changes
  * fix(reload): restore policy for old backend if it changed (de85849)
  * fix(io): rich: tcp mss: handle value=None (8016f10)
  * fix(firewall-config): rich: set destination address (f6641a9)
  * fix(policy): mixed IP families in ingress/egress (69ed4d6)
- removed following patches:
  [- 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch]
  [- 0003-firewall-offline-cmd-fail-fix.patch]
  [- 0004-fix_rich_source_address_with_netmask.patch]
  [- feature-upstream-new-check-config-1.patch]
  [- feature-upstream-new-check-config-2.patch]</changelog>
  <changelog author="davide.benini@suse.com" date="1730376000">- Fix for SG#69031, bsc#1231771:
  * 0001-fix-nftables-set-correctly-match-iifname-oifname.patch:
    [PATCH 1/2] fix(nftables): set: correctly match iifname/oifname
  * 0002-test-ipset-verify-match-with-iface.patch: [PATCH 2/2]
    test(ipset): verify match with iface</changelog>
  <changelog author="meissner@suse.com" date="1748001600">- added a python311 flavor</changelog>
  <changelog author="fvogt@suse.com" date="1751976000">- Do not recommend python311-firewalld (bsc#1246100)</changelog>
</package>
<package pkgid="447095fae79d0055af9a7eb840348edec617c8b365ff7844269dc2df3c04bcc4" name="firewalld-bash-completion" arch="noarch">
  <version epoch="0" ver="2.0.1" rel="150600.3.15.1"/>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 0.8.3:
  * nftables: convert to libnftables JSON interface
  * service: new “helper” element to replace “module” More accurately represents the conntrack helper. Deprecates “module”.
  * allow custom helpers using standard helper modules (rhbz 1733066)
  * testsuite is now shipped in the dist tarball
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don’t print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: ipset types using “port”
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify –set-target values “default” vs “reject”
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * fix: nftables: ipset: port ranges for non-default protocols
  * fix(systemd): Conflict with nftables.service
  * fix(direct): rule in a zone chain
  * fix(client): addService needs to reduce tuple size
  * fix(doc): dbus: signatures for zone tuple based APIs
  * fix(config): bool values in dict based import/export
  * fix(dbus): service: don’t cleanup config for old set APIs
  * fix(ipset): flush the set if IndividiualCalls=yes
  * fix(firewall-offline-cmd): remove instances of “[P]” in help text
  * fix(rich): source mac with nftables backend
  * docs: replace occurrences of the term blacklist with denylist
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * docs(README): add libxslt for doc generation
  * fix(cli): add –zone is an invalid option with –direct
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1599220800">- update to 0.9.0:
  * New major features
  * prevention of Zone Drifting
  * Intra Zone Forwarding
  * Policy Objects
  * For a full list of changes, see
    https://github.com/firewalld/firewalld/compare/v0.8.0...v0.9.0</changelog>
  <changelog author="mrostecki@suse.com" date="1599652800">- Add python3-nftables as a requirement.</changelog>
  <changelog author="fbui@suse.com" date="1599825600">- Make use of %service_del_postun_without_restart
  And stop using DISABLE_RESTART_ON_UPDATE as this interface is
  obsolete.</changelog>
  <changelog author="mrostecki@suse.com" date="1604923200">- Remove the patch which enforces usage of iptables instead of
  nftables (jsc#SLE-16300):
  * 0001-firewall-backend-Switch-default-backend-to-iptables.patch
- Add firewalld zone for the docker0 interface. This is the
  workaround for lack of nftables support in docker. Without that
  additional zone, containers have no Internet connectivity.
  (rhbz#1817022, jsc#SLE-16300)
- Update to 0.9.1:
  * Bugfixes:
  * docs(firewall-cmd): clarify lockdown whitelist command paths
  * fix(dbus): getActivePolicies shouldn't return a policy if a zone is not active
  * fix(policy): zone interface/source changes should affect all using zone</changelog>
  <changelog author="rfrohl@suse.com" date="1610625600">- Add dependency for firewall-offline-cmd (bsc#1180883)</changelog>
  <changelog author="mrostecki@suse.com" date="1611576000">- Update to 0.9.3 (jsc#SLE-17336):
  * docs(dbus): fix invalid method names
  * fix(forward): iptables: ipset used as zone source
  * fix(rich): non-printable characters removed from rich rules
  * docs(firewall-cmd): small description grammar fix
  * fix(rich): limit table to strip non-printables to C0 and C1
  * fix(zone): add source with mac address</changelog>
  <changelog author="mrostecki@suse.com" date="1611662400">- Disable FlushAllOnReload option to not retain interface to zone
  assignments and direct rules when using --reload option.
  * 0002-Disable-FlushAllOnReload-option.patch</changelog>
  <changelog author="mrostecki@suse.com" date="1617796800">- Remove dependency on firewalld from firewall-macros (bsc#1183404)</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Fix modprobe.d directory for SLE15 SP3
- Always own %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mrostecki@suse.com" date="1647432000">- Add patch which fixes the zone configuration (bsc#1191837)
  * 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1648468800">- Provide dummy firewalld-prometheus-config package (bsc#1197042)</changelog>
  <changelog author="sflees@suse.de" date="1652097600">- Fix regression introduced in previous patch (an api change to a
  function also needed backporting) (bsc#1198814)
  * feature-upstream-new-check-config-1.patch
  * feature-upstream-new-check-config-2.patch</changelog>
  <changelog author="mohd.saquib@suse.com" date="1673611200">- Fix firewall-offline-cmd fails with ERROR: Calling pre func
  Added following patch (bsc#1206928)
  [+ 0003-firewall-offline-cmd-fail-fix.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1689076800">- Fix firewalld does not longer understand IPv4 network masks
  of type `255.255.255.0`
  Added following patch (boo#1212974)
  [+ 0004-fix_rich_source_address_with_netmask.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1696334400">- update to v2.0.1 (jsc#PED-5597)
  * fix(cli): all --list-all-zones output identical (d30bc61)
  * fix(cli): properly show default zone attribute (ea8d9a8)
  * fix(cli): properly show active attribute for zones and policies (b202403)
  * fix(cli): --get-active-zones should include the default zone (dae9112)
  * fix(nftables): always flush main table on start (cd20981)
  * fix(runtimeToPermanent): deepcopy settings before mangling (9c53639)
  * docs: fix reference to lockdown-whitelist.xml in SYNOPSIS section (1c77205)
  * fix(firewall-config): escape markup stored in bindings store (c876fd0)
  * fix(tests): avoid deprecated assertRaisesRegexp for assertRaisesRegex (2935119)
  * fix(icmp): fix check_icmpv6_name() to use correct IPv6 names (af3c35b)
  * fix(ipset): fix configuring IP range for ipsets with nftables (6a050ec)
  * fix(ipset): fix configuring "timeout","maxelem" values for ipsets with nftables (7d3340c)
  * fix(core): fix exception while parsing invalid "tcp-mss-clamp" in policy (ff61209)
  * docs(policy): fix wrong documentation of in man firewalld.policy (21026d9)
  * Correct Requires, python3-slip-dbus -&gt; python3-dbus-python
  * This is a major release. The major version is being bumped symbolically
    to reflect significant changes done in commit f4d2b80 ("fix(policy):
    disallow zone drifting"). It does not contain any deliberate breaking changes
  * fix(reload): restore policy for old backend if it changed (de85849)
  * fix(io): rich: tcp mss: handle value=None (8016f10)
  * fix(firewall-config): rich: set destination address (f6641a9)
  * fix(policy): mixed IP families in ingress/egress (69ed4d6)
- removed following patches:
  [- 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch]
  [- 0003-firewall-offline-cmd-fail-fix.patch]
  [- 0004-fix_rich_source_address_with_netmask.patch]
  [- feature-upstream-new-check-config-1.patch]
  [- feature-upstream-new-check-config-2.patch]</changelog>
  <changelog author="davide.benini@suse.com" date="1730376000">- Fix for SG#69031, bsc#1231771:
  * 0001-fix-nftables-set-correctly-match-iifname-oifname.patch:
    [PATCH 1/2] fix(nftables): set: correctly match iifname/oifname
  * 0002-test-ipset-verify-match-with-iface.patch: [PATCH 2/2]
    test(ipset): verify match with iface</changelog>
  <changelog author="meissner@suse.com" date="1748001600">- added a python311 flavor</changelog>
  <changelog author="fvogt@suse.com" date="1751976000">- Do not recommend python311-firewalld (bsc#1246100)</changelog>
  <changelog author="rahul.jain@suse.com" date="1777377600">- Fix CVE-2026-4948: local unprivileged users can modify firewall
  state due to D-Bus setter mis-authorization(bsc#1260903)
  [+ 0001-Fix-CVE-2026-4948-local-unprivileged-users-can-modif.patch]</changelog>
</package>
<package pkgid="6cc134ebbe962b20a7b23bda45adf21a90745403c3fb9e915bb6671328150197" name="firewalld-bash-completion" arch="noarch">
  <version epoch="0" ver="2.0.1" rel="150600.3.9.1"/>
  <changelog author="Mathias.Homann@opensuse.org" date="1585915200">- Update to 0.7.4
  This is a bug fix only release.
  However, it does reintroduce the zone drifting bug as a feature. See #258 and #441. This behavior is disabled by default.
  * improvement: build: add an option to disable building documentation
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don't print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * fix: tests: regenerate testsuite if .../{cli,python}/*.at changes
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify --set-target values "default" vs "reject"</changelog>
  <changelog author="mrostecki@suse.com" date="1597233600">- Update to version 0.7.5 (jsc#SLE-12281):
  * release: v0.7.5
  * chore(translation): merge from master
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter Fixes: rhbz1541077
  * test(rhbz1483921): better test name
  * fix(cli): add --zone is an invalid option with --direct
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * docs: replace occurrences of the term blacklist with denylist
  * docs(README): add libxslt for doc generation
  * test(rich): source mac with nftables backend
  * fix(firewall-offline-cmd): remove instances of "[P]" in help text
  * test(check-container): add support for centos8 stream
  * test(functions): use IndividualCalls if host doesn't support nft rule index
  * test(functions): add macro IF_HOST_SUPPORTS_NFT_RULE_INDEX
  * test(dbus): better way to check IPv6_rpfilter expected value
  * fix(ipset): flush the set if IndividiualCalls=yes
  * test(ipv6): skip square bracket address tests if ipv6 not available
  * test(gh509): only run test for nftables backend
  * fix(dbus): service: don't cleanup config for old set APIs
  * fix(config): bool values in dict based import/export
  * fix(doc): dbus: signatures for zone tuple based APIs
  * test(dbus): zone: fix zone runtime functional test title
  * test(dbus): zone: fix false failure due to list order
  * fix(client): addService needs to reduce tuple size
  * test(direct): rule in a zone chain
  * fix(direct): rule in a zone chain
  * test(dbus): zone: verify runtime config APIs
  * test(dbus): zone: verify permanent config APIs
  * fix(systemd): Conflict with nftables.service
  * fix: test/regression/gh599: use expr to be more portable
  * test: dbus: zone: verify runtime config API signatures
  * test: dbus: zone: verify permanent config API signatures
  * fix: test/regression/gh599: fix if not using debug output
  * test: log: verify logging still works after truncate
  * test: ipset: verify port ranges for non-default protocol</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 0.8.3:
  * nftables: convert to libnftables JSON interface
  * service: new “helper” element to replace “module” More accurately represents the conntrack helper. Deprecates “module”.
  * allow custom helpers using standard helper modules (rhbz 1733066)
  * testsuite is now shipped in the dist tarball
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don’t print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: ipset types using “port”
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify –set-target values “default” vs “reject”
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * fix: nftables: ipset: port ranges for non-default protocols
  * fix(systemd): Conflict with nftables.service
  * fix(direct): rule in a zone chain
  * fix(client): addService needs to reduce tuple size
  * fix(doc): dbus: signatures for zone tuple based APIs
  * fix(config): bool values in dict based import/export
  * fix(dbus): service: don’t cleanup config for old set APIs
  * fix(ipset): flush the set if IndividiualCalls=yes
  * fix(firewall-offline-cmd): remove instances of “[P]” in help text
  * fix(rich): source mac with nftables backend
  * docs: replace occurrences of the term blacklist with denylist
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * docs(README): add libxslt for doc generation
  * fix(cli): add –zone is an invalid option with –direct
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1599220800">- update to 0.9.0:
  * New major features
  * prevention of Zone Drifting
  * Intra Zone Forwarding
  * Policy Objects
  * For a full list of changes, see
    https://github.com/firewalld/firewalld/compare/v0.8.0...v0.9.0</changelog>
  <changelog author="mrostecki@suse.com" date="1599652800">- Add python3-nftables as a requirement.</changelog>
  <changelog author="fbui@suse.com" date="1599825600">- Make use of %service_del_postun_without_restart
  And stop using DISABLE_RESTART_ON_UPDATE as this interface is
  obsolete.</changelog>
  <changelog author="mrostecki@suse.com" date="1604923200">- Remove the patch which enforces usage of iptables instead of
  nftables (jsc#SLE-16300):
  * 0001-firewall-backend-Switch-default-backend-to-iptables.patch
- Add firewalld zone for the docker0 interface. This is the
  workaround for lack of nftables support in docker. Without that
  additional zone, containers have no Internet connectivity.
  (rhbz#1817022, jsc#SLE-16300)
- Update to 0.9.1:
  * Bugfixes:
  * docs(firewall-cmd): clarify lockdown whitelist command paths
  * fix(dbus): getActivePolicies shouldn't return a policy if a zone is not active
  * fix(policy): zone interface/source changes should affect all using zone</changelog>
  <changelog author="rfrohl@suse.com" date="1610625600">- Add dependency for firewall-offline-cmd (bsc#1180883)</changelog>
  <changelog author="mrostecki@suse.com" date="1611576000">- Update to 0.9.3 (jsc#SLE-17336):
  * docs(dbus): fix invalid method names
  * fix(forward): iptables: ipset used as zone source
  * fix(rich): non-printable characters removed from rich rules
  * docs(firewall-cmd): small description grammar fix
  * fix(rich): limit table to strip non-printables to C0 and C1
  * fix(zone): add source with mac address</changelog>
  <changelog author="mrostecki@suse.com" date="1611662400">- Disable FlushAllOnReload option to not retain interface to zone
  assignments and direct rules when using --reload option.
  * 0002-Disable-FlushAllOnReload-option.patch</changelog>
  <changelog author="mrostecki@suse.com" date="1617796800">- Remove dependency on firewalld from firewall-macros (bsc#1183404)</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Fix modprobe.d directory for SLE15 SP3
- Always own %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mrostecki@suse.com" date="1647432000">- Add patch which fixes the zone configuration (bsc#1191837)
  * 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1648468800">- Provide dummy firewalld-prometheus-config package (bsc#1197042)</changelog>
  <changelog author="sflees@suse.de" date="1652097600">- Fix regression introduced in previous patch (an api change to a
  function also needed backporting) (bsc#1198814)
  * feature-upstream-new-check-config-1.patch
  * feature-upstream-new-check-config-2.patch</changelog>
  <changelog author="mohd.saquib@suse.com" date="1673611200">- Fix firewall-offline-cmd fails with ERROR: Calling pre func
  Added following patch (bsc#1206928)
  [+ 0003-firewall-offline-cmd-fail-fix.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1689076800">- Fix firewalld does not longer understand IPv4 network masks
  of type `255.255.255.0`
  Added following patch (boo#1212974)
  [+ 0004-fix_rich_source_address_with_netmask.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1696334400">- update to v2.0.1 (jsc#PED-5597)
  * fix(cli): all --list-all-zones output identical (d30bc61)
  * fix(cli): properly show default zone attribute (ea8d9a8)
  * fix(cli): properly show active attribute for zones and policies (b202403)
  * fix(cli): --get-active-zones should include the default zone (dae9112)
  * fix(nftables): always flush main table on start (cd20981)
  * fix(runtimeToPermanent): deepcopy settings before mangling (9c53639)
  * docs: fix reference to lockdown-whitelist.xml in SYNOPSIS section (1c77205)
  * fix(firewall-config): escape markup stored in bindings store (c876fd0)
  * fix(tests): avoid deprecated assertRaisesRegexp for assertRaisesRegex (2935119)
  * fix(icmp): fix check_icmpv6_name() to use correct IPv6 names (af3c35b)
  * fix(ipset): fix configuring IP range for ipsets with nftables (6a050ec)
  * fix(ipset): fix configuring "timeout","maxelem" values for ipsets with nftables (7d3340c)
  * fix(core): fix exception while parsing invalid "tcp-mss-clamp" in policy (ff61209)
  * docs(policy): fix wrong documentation of in man firewalld.policy (21026d9)
  * Correct Requires, python3-slip-dbus -&gt; python3-dbus-python
  * This is a major release. The major version is being bumped symbolically
    to reflect significant changes done in commit f4d2b80 ("fix(policy):
    disallow zone drifting"). It does not contain any deliberate breaking changes
  * fix(reload): restore policy for old backend if it changed (de85849)
  * fix(io): rich: tcp mss: handle value=None (8016f10)
  * fix(firewall-config): rich: set destination address (f6641a9)
  * fix(policy): mixed IP families in ingress/egress (69ed4d6)
- removed following patches:
  [- 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch]
  [- 0003-firewall-offline-cmd-fail-fix.patch]
  [- 0004-fix_rich_source_address_with_netmask.patch]
  [- feature-upstream-new-check-config-1.patch]
  [- feature-upstream-new-check-config-2.patch]</changelog>
  <changelog author="davide.benini@suse.com" date="1730376000">- Fix for SG#69031, bsc#1231771:
  * 0001-fix-nftables-set-correctly-match-iifname-oifname.patch:
    [PATCH 1/2] fix(nftables): set: correctly match iifname/oifname
  * 0002-test-ipset-verify-match-with-iface.patch: [PATCH 2/2]
    test(ipset): verify match with iface</changelog>
  <changelog author="meissner@suse.com" date="1748001600">- added a python311 flavor</changelog>
</package>
<package pkgid="e28559be800a5ff2c0bb40cdefc1f42776384de28d8550d631eaf5bbe894c96c" name="firewalld-lang" arch="noarch">
  <version epoch="0" ver="1.3.4" rel="150600.13.3.1"/>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 0.8.3:
  * nftables: convert to libnftables JSON interface
  * service: new “helper” element to replace “module” More accurately represents the conntrack helper. Deprecates “module”.
  * allow custom helpers using standard helper modules (rhbz 1733066)
  * testsuite is now shipped in the dist tarball
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don’t print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: ipset types using “port”
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify –set-target values “default” vs “reject”
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * fix: nftables: ipset: port ranges for non-default protocols
  * fix(systemd): Conflict with nftables.service
  * fix(direct): rule in a zone chain
  * fix(client): addService needs to reduce tuple size
  * fix(doc): dbus: signatures for zone tuple based APIs
  * fix(config): bool values in dict based import/export
  * fix(dbus): service: don’t cleanup config for old set APIs
  * fix(ipset): flush the set if IndividiualCalls=yes
  * fix(firewall-offline-cmd): remove instances of “[P]” in help text
  * fix(rich): source mac with nftables backend
  * docs: replace occurrences of the term blacklist with denylist
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * docs(README): add libxslt for doc generation
  * fix(cli): add –zone is an invalid option with –direct
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1599220800">- update to 0.9.0:
  * New major features
  * prevention of Zone Drifting
  * Intra Zone Forwarding
  * Policy Objects
  * For a full list of changes, see
    https://github.com/firewalld/firewalld/compare/v0.8.0...v0.9.0</changelog>
  <changelog author="mrostecki@suse.com" date="1599652800">- Add python3-nftables as a requirement.</changelog>
  <changelog author="fbui@suse.com" date="1599825600">- Make use of %service_del_postun_without_restart
  And stop using DISABLE_RESTART_ON_UPDATE as this interface is
  obsolete.</changelog>
  <changelog author="mrostecki@suse.com" date="1604923200">- Remove the patch which enforces usage of iptables instead of
  nftables (jsc#SLE-16300):
  * 0001-firewall-backend-Switch-default-backend-to-iptables.patch
- Add firewalld zone for the docker0 interface. This is the
  workaround for lack of nftables support in docker. Without that
  additional zone, containers have no Internet connectivity.
  (rhbz#1817022, jsc#SLE-16300)
- Update to 0.9.1:
  * Bugfixes:
  * docs(firewall-cmd): clarify lockdown whitelist command paths
  * fix(dbus): getActivePolicies shouldn't return a policy if a zone is not active
  * fix(policy): zone interface/source changes should affect all using zone</changelog>
  <changelog author="rfrohl@suse.com" date="1610625600">- Add dependency for firewall-offline-cmd (bsc#1180883)</changelog>
  <changelog author="mrostecki@suse.com" date="1611576000">- Update to 0.9.3 (jsc#SLE-17336):
  * docs(dbus): fix invalid method names
  * fix(forward): iptables: ipset used as zone source
  * fix(rich): non-printable characters removed from rich rules
  * docs(firewall-cmd): small description grammar fix
  * fix(rich): limit table to strip non-printables to C0 and C1
  * fix(zone): add source with mac address</changelog>
  <changelog author="mrostecki@suse.com" date="1611662400">- Disable FlushAllOnReload option to not retain interface to zone
  assignments and direct rules when using --reload option.
  * 0002-Disable-FlushAllOnReload-option.patch</changelog>
  <changelog author="mrostecki@suse.com" date="1617796800">- Remove dependency on firewalld from firewall-macros (bsc#1183404)</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Fix modprobe.d directory for SLE15 SP3
- Always own %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mrostecki@suse.com" date="1647432000">- Add patch which fixes the zone configuration (bsc#1191837)
  * 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1648468800">- Provide dummy firewalld-prometheus-config package (bsc#1197042)</changelog>
  <changelog author="sflees@suse.de" date="1652097600">- Fix regression introduced in previous patch (an api change to a
  function also needed backporting) (bsc#1198814)
  * feature-upstream-new-check-config-1.patch
  * feature-upstream-new-check-config-2.patch</changelog>
  <changelog author="mohd.saquib@suse.com" date="1673611200">- Fix firewall-offline-cmd fails with ERROR: Calling pre func
  Added following patch (bsc#1206928)
  [+ 0003-firewall-offline-cmd-fail-fix.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1689076800">- Fix firewalld does not longer understand IPv4 network masks
  of type `255.255.255.0`
  Added following patch (boo#1212974)
  [+ 0004-fix_rich_source_address_with_netmask.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1696334400">- update to v2.0.1 (jsc#PED-5597)
  * fix(cli): all --list-all-zones output identical (d30bc61)
  * fix(cli): properly show default zone attribute (ea8d9a8)
  * fix(cli): properly show active attribute for zones and policies (b202403)
  * fix(cli): --get-active-zones should include the default zone (dae9112)
  * fix(nftables): always flush main table on start (cd20981)
  * fix(runtimeToPermanent): deepcopy settings before mangling (9c53639)
  * docs: fix reference to lockdown-whitelist.xml in SYNOPSIS section (1c77205)
  * fix(firewall-config): escape markup stored in bindings store (c876fd0)
  * fix(tests): avoid deprecated assertRaisesRegexp for assertRaisesRegex (2935119)
  * fix(icmp): fix check_icmpv6_name() to use correct IPv6 names (af3c35b)
  * fix(ipset): fix configuring IP range for ipsets with nftables (6a050ec)
  * fix(ipset): fix configuring "timeout","maxelem" values for ipsets with nftables (7d3340c)
  * fix(core): fix exception while parsing invalid "tcp-mss-clamp" in policy (ff61209)
  * docs(policy): fix wrong documentation of in man firewalld.policy (21026d9)
  * Correct Requires, python3-slip-dbus -&gt; python3-dbus-python
  * This is a major release. The major version is being bumped symbolically
    to reflect significant changes done in commit f4d2b80 ("fix(policy):
    disallow zone drifting"). It does not contain any deliberate breaking changes
  * fix(reload): restore policy for old backend if it changed (de85849)
  * fix(io): rich: tcp mss: handle value=None (8016f10)
  * fix(firewall-config): rich: set destination address (f6641a9)
  * fix(policy): mixed IP families in ingress/egress (69ed4d6)
- removed following patches:
  [- 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch]
  [- 0003-firewall-offline-cmd-fail-fix.patch]
  [- 0004-fix_rich_source_address_with_netmask.patch]
  [- feature-upstream-new-check-config-1.patch]
  [- feature-upstream-new-check-config-2.patch]</changelog>
  <changelog author="davide.benini@suse.com" date="1730376000">- Fix for SG#69031, bsc#1231771:
  * 0001-fix-nftables-set-correctly-match-iifname-oifname.patch:
    [PATCH 1/2] fix(nftables): set: correctly match iifname/oifname
  * 0002-test-ipset-verify-match-with-iface.patch: [PATCH 2/2]
    test(ipset): verify match with iface</changelog>
  <changelog author="meissner@suse.com" date="1748001600">- added a python311 flavor</changelog>
  <changelog author="fvogt@suse.com" date="1751976000">- Do not recommend python311-firewalld (bsc#1246100)</changelog>
  <changelog author="jan.fooken@suse.com" date="1759233600">- downgrade to v1.3.4 due to slow firewall rule generation
  introduced in the 2.x.x series (jsc#PED-13314).
  The Version includes the following cherry picked commits from
  upstream
  * fix(fw_nm): use IP interface names for connection lookup
  * fix(fw_policy): raise exceptions
  * fix(service): include: when used with rich rule
  * fix(nftables): rich: log: limit was not taking effect
  * fix(build): rpm must build all as prerequisite
  * fix: use error codes for FirewallError instances
  * fix(ipset): chunk entries when restoring set
  * fix(reload): restore policy for old backend if it changed
  * fix(io): rich: tcp mss: handle value=None
  * fix(firewall-config): rich: set destination address
  * fix(policy): mixed IP families in ingress/egress
  * fix(nftables): always flush main table on start
  * fix(runtimeToPermanent): deepcopy settings before mangling
  * docs: fix reference to lockdown-whitelist.xml in SYNOPSIS section
  * fix(tests): avoid deprecated assertRaisesRegexp for assertRaisesRegex
  * fix(icmp): fix check_icmpv6_name() to use correct IPv6 names
  * fix(ipset): fix configuring IP range for ipsets with nftables
  * improvement(tests): add test showing the current wrong behavior for ipsets
  * fix(ipset): fix configuring "timeout","maxelem" values for ipsets with nftables
  * improvement(build): rename the "master" branch to "main"
  * fix(core): fix exception while parsing invalid "tcp-mss-clamp" in policy
  * docs(policy): fix wrong documentation of &lt;tcp-mss-clamp/&gt; in `man firewalld.policy`
  * fix(applet): allows using KDE network connection editor
  * fix(applet): ActivationReason.Trigger
- rebase and update patches with origin information
- add the following patch from SLE-15-SP5:Update
  * 0003-firewall-offline-cmd-fail-fix.patch
- add the following patch
  * 0004-fix-ipset-test-for-iifname-oifname-switch.patch</changelog>
</package>
<package pkgid="0bc9a9b15e0c5d7dd769340e663c119c7865aaa452d6bd52b2246a584ba13806" name="firewalld-lang" arch="noarch">
  <version epoch="0" ver="2.0.1" rel="150600.3.12.1"/>
  <changelog author="mrostecki@suse.com" date="1597233600">- Update to version 0.7.5 (jsc#SLE-12281):
  * release: v0.7.5
  * chore(translation): merge from master
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter Fixes: rhbz1541077
  * test(rhbz1483921): better test name
  * fix(cli): add --zone is an invalid option with --direct
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * docs: replace occurrences of the term blacklist with denylist
  * docs(README): add libxslt for doc generation
  * test(rich): source mac with nftables backend
  * fix(firewall-offline-cmd): remove instances of "[P]" in help text
  * test(check-container): add support for centos8 stream
  * test(functions): use IndividualCalls if host doesn't support nft rule index
  * test(functions): add macro IF_HOST_SUPPORTS_NFT_RULE_INDEX
  * test(dbus): better way to check IPv6_rpfilter expected value
  * fix(ipset): flush the set if IndividiualCalls=yes
  * test(ipv6): skip square bracket address tests if ipv6 not available
  * test(gh509): only run test for nftables backend
  * fix(dbus): service: don't cleanup config for old set APIs
  * fix(config): bool values in dict based import/export
  * fix(doc): dbus: signatures for zone tuple based APIs
  * test(dbus): zone: fix zone runtime functional test title
  * test(dbus): zone: fix false failure due to list order
  * fix(client): addService needs to reduce tuple size
  * test(direct): rule in a zone chain
  * fix(direct): rule in a zone chain
  * test(dbus): zone: verify runtime config APIs
  * test(dbus): zone: verify permanent config APIs
  * fix(systemd): Conflict with nftables.service
  * fix: test/regression/gh599: use expr to be more portable
  * test: dbus: zone: verify runtime config API signatures
  * test: dbus: zone: verify permanent config API signatures
  * fix: test/regression/gh599: fix if not using debug output
  * test: log: verify logging still works after truncate
  * test: ipset: verify port ranges for non-default protocol</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 0.8.3:
  * nftables: convert to libnftables JSON interface
  * service: new “helper” element to replace “module” More accurately represents the conntrack helper. Deprecates “module”.
  * allow custom helpers using standard helper modules (rhbz 1733066)
  * testsuite is now shipped in the dist tarball
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don’t print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: ipset types using “port”
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify –set-target values “default” vs “reject”
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * fix: nftables: ipset: port ranges for non-default protocols
  * fix(systemd): Conflict with nftables.service
  * fix(direct): rule in a zone chain
  * fix(client): addService needs to reduce tuple size
  * fix(doc): dbus: signatures for zone tuple based APIs
  * fix(config): bool values in dict based import/export
  * fix(dbus): service: don’t cleanup config for old set APIs
  * fix(ipset): flush the set if IndividiualCalls=yes
  * fix(firewall-offline-cmd): remove instances of “[P]” in help text
  * fix(rich): source mac with nftables backend
  * docs: replace occurrences of the term blacklist with denylist
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * docs(README): add libxslt for doc generation
  * fix(cli): add –zone is an invalid option with –direct
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1599220800">- update to 0.9.0:
  * New major features
  * prevention of Zone Drifting
  * Intra Zone Forwarding
  * Policy Objects
  * For a full list of changes, see
    https://github.com/firewalld/firewalld/compare/v0.8.0...v0.9.0</changelog>
  <changelog author="mrostecki@suse.com" date="1599652800">- Add python3-nftables as a requirement.</changelog>
  <changelog author="fbui@suse.com" date="1599825600">- Make use of %service_del_postun_without_restart
  And stop using DISABLE_RESTART_ON_UPDATE as this interface is
  obsolete.</changelog>
  <changelog author="mrostecki@suse.com" date="1604923200">- Remove the patch which enforces usage of iptables instead of
  nftables (jsc#SLE-16300):
  * 0001-firewall-backend-Switch-default-backend-to-iptables.patch
- Add firewalld zone for the docker0 interface. This is the
  workaround for lack of nftables support in docker. Without that
  additional zone, containers have no Internet connectivity.
  (rhbz#1817022, jsc#SLE-16300)
- Update to 0.9.1:
  * Bugfixes:
  * docs(firewall-cmd): clarify lockdown whitelist command paths
  * fix(dbus): getActivePolicies shouldn't return a policy if a zone is not active
  * fix(policy): zone interface/source changes should affect all using zone</changelog>
  <changelog author="rfrohl@suse.com" date="1610625600">- Add dependency for firewall-offline-cmd (bsc#1180883)</changelog>
  <changelog author="mrostecki@suse.com" date="1611576000">- Update to 0.9.3 (jsc#SLE-17336):
  * docs(dbus): fix invalid method names
  * fix(forward): iptables: ipset used as zone source
  * fix(rich): non-printable characters removed from rich rules
  * docs(firewall-cmd): small description grammar fix
  * fix(rich): limit table to strip non-printables to C0 and C1
  * fix(zone): add source with mac address</changelog>
  <changelog author="mrostecki@suse.com" date="1611662400">- Disable FlushAllOnReload option to not retain interface to zone
  assignments and direct rules when using --reload option.
  * 0002-Disable-FlushAllOnReload-option.patch</changelog>
  <changelog author="mrostecki@suse.com" date="1617796800">- Remove dependency on firewalld from firewall-macros (bsc#1183404)</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Fix modprobe.d directory for SLE15 SP3
- Always own %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mrostecki@suse.com" date="1647432000">- Add patch which fixes the zone configuration (bsc#1191837)
  * 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1648468800">- Provide dummy firewalld-prometheus-config package (bsc#1197042)</changelog>
  <changelog author="sflees@suse.de" date="1652097600">- Fix regression introduced in previous patch (an api change to a
  function also needed backporting) (bsc#1198814)
  * feature-upstream-new-check-config-1.patch
  * feature-upstream-new-check-config-2.patch</changelog>
  <changelog author="mohd.saquib@suse.com" date="1673611200">- Fix firewall-offline-cmd fails with ERROR: Calling pre func
  Added following patch (bsc#1206928)
  [+ 0003-firewall-offline-cmd-fail-fix.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1689076800">- Fix firewalld does not longer understand IPv4 network masks
  of type `255.255.255.0`
  Added following patch (boo#1212974)
  [+ 0004-fix_rich_source_address_with_netmask.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1696334400">- update to v2.0.1 (jsc#PED-5597)
  * fix(cli): all --list-all-zones output identical (d30bc61)
  * fix(cli): properly show default zone attribute (ea8d9a8)
  * fix(cli): properly show active attribute for zones and policies (b202403)
  * fix(cli): --get-active-zones should include the default zone (dae9112)
  * fix(nftables): always flush main table on start (cd20981)
  * fix(runtimeToPermanent): deepcopy settings before mangling (9c53639)
  * docs: fix reference to lockdown-whitelist.xml in SYNOPSIS section (1c77205)
  * fix(firewall-config): escape markup stored in bindings store (c876fd0)
  * fix(tests): avoid deprecated assertRaisesRegexp for assertRaisesRegex (2935119)
  * fix(icmp): fix check_icmpv6_name() to use correct IPv6 names (af3c35b)
  * fix(ipset): fix configuring IP range for ipsets with nftables (6a050ec)
  * fix(ipset): fix configuring "timeout","maxelem" values for ipsets with nftables (7d3340c)
  * fix(core): fix exception while parsing invalid "tcp-mss-clamp" in policy (ff61209)
  * docs(policy): fix wrong documentation of in man firewalld.policy (21026d9)
  * Correct Requires, python3-slip-dbus -&gt; python3-dbus-python
  * This is a major release. The major version is being bumped symbolically
    to reflect significant changes done in commit f4d2b80 ("fix(policy):
    disallow zone drifting"). It does not contain any deliberate breaking changes
  * fix(reload): restore policy for old backend if it changed (de85849)
  * fix(io): rich: tcp mss: handle value=None (8016f10)
  * fix(firewall-config): rich: set destination address (f6641a9)
  * fix(policy): mixed IP families in ingress/egress (69ed4d6)
- removed following patches:
  [- 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch]
  [- 0003-firewall-offline-cmd-fail-fix.patch]
  [- 0004-fix_rich_source_address_with_netmask.patch]
  [- feature-upstream-new-check-config-1.patch]
  [- feature-upstream-new-check-config-2.patch]</changelog>
  <changelog author="davide.benini@suse.com" date="1730376000">- Fix for SG#69031, bsc#1231771:
  * 0001-fix-nftables-set-correctly-match-iifname-oifname.patch:
    [PATCH 1/2] fix(nftables): set: correctly match iifname/oifname
  * 0002-test-ipset-verify-match-with-iface.patch: [PATCH 2/2]
    test(ipset): verify match with iface</changelog>
  <changelog author="meissner@suse.com" date="1748001600">- added a python311 flavor</changelog>
  <changelog author="fvogt@suse.com" date="1751976000">- Do not recommend python311-firewalld (bsc#1246100)</changelog>
</package>
<package pkgid="160893882d0bc9cba9c04afa4cdfbff97fc0110ca21b319ef646093fb62a5962" name="firewalld-lang" arch="noarch">
  <version epoch="0" ver="2.0.1" rel="150600.3.15.1"/>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 0.8.3:
  * nftables: convert to libnftables JSON interface
  * service: new “helper” element to replace “module” More accurately represents the conntrack helper. Deprecates “module”.
  * allow custom helpers using standard helper modules (rhbz 1733066)
  * testsuite is now shipped in the dist tarball
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don’t print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: ipset types using “port”
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify –set-target values “default” vs “reject”
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * fix: nftables: ipset: port ranges for non-default protocols
  * fix(systemd): Conflict with nftables.service
  * fix(direct): rule in a zone chain
  * fix(client): addService needs to reduce tuple size
  * fix(doc): dbus: signatures for zone tuple based APIs
  * fix(config): bool values in dict based import/export
  * fix(dbus): service: don’t cleanup config for old set APIs
  * fix(ipset): flush the set if IndividiualCalls=yes
  * fix(firewall-offline-cmd): remove instances of “[P]” in help text
  * fix(rich): source mac with nftables backend
  * docs: replace occurrences of the term blacklist with denylist
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * docs(README): add libxslt for doc generation
  * fix(cli): add –zone is an invalid option with –direct
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1599220800">- update to 0.9.0:
  * New major features
  * prevention of Zone Drifting
  * Intra Zone Forwarding
  * Policy Objects
  * For a full list of changes, see
    https://github.com/firewalld/firewalld/compare/v0.8.0...v0.9.0</changelog>
  <changelog author="mrostecki@suse.com" date="1599652800">- Add python3-nftables as a requirement.</changelog>
  <changelog author="fbui@suse.com" date="1599825600">- Make use of %service_del_postun_without_restart
  And stop using DISABLE_RESTART_ON_UPDATE as this interface is
  obsolete.</changelog>
  <changelog author="mrostecki@suse.com" date="1604923200">- Remove the patch which enforces usage of iptables instead of
  nftables (jsc#SLE-16300):
  * 0001-firewall-backend-Switch-default-backend-to-iptables.patch
- Add firewalld zone for the docker0 interface. This is the
  workaround for lack of nftables support in docker. Without that
  additional zone, containers have no Internet connectivity.
  (rhbz#1817022, jsc#SLE-16300)
- Update to 0.9.1:
  * Bugfixes:
  * docs(firewall-cmd): clarify lockdown whitelist command paths
  * fix(dbus): getActivePolicies shouldn't return a policy if a zone is not active
  * fix(policy): zone interface/source changes should affect all using zone</changelog>
  <changelog author="rfrohl@suse.com" date="1610625600">- Add dependency for firewall-offline-cmd (bsc#1180883)</changelog>
  <changelog author="mrostecki@suse.com" date="1611576000">- Update to 0.9.3 (jsc#SLE-17336):
  * docs(dbus): fix invalid method names
  * fix(forward): iptables: ipset used as zone source
  * fix(rich): non-printable characters removed from rich rules
  * docs(firewall-cmd): small description grammar fix
  * fix(rich): limit table to strip non-printables to C0 and C1
  * fix(zone): add source with mac address</changelog>
  <changelog author="mrostecki@suse.com" date="1611662400">- Disable FlushAllOnReload option to not retain interface to zone
  assignments and direct rules when using --reload option.
  * 0002-Disable-FlushAllOnReload-option.patch</changelog>
  <changelog author="mrostecki@suse.com" date="1617796800">- Remove dependency on firewalld from firewall-macros (bsc#1183404)</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Fix modprobe.d directory for SLE15 SP3
- Always own %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mrostecki@suse.com" date="1647432000">- Add patch which fixes the zone configuration (bsc#1191837)
  * 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1648468800">- Provide dummy firewalld-prometheus-config package (bsc#1197042)</changelog>
  <changelog author="sflees@suse.de" date="1652097600">- Fix regression introduced in previous patch (an api change to a
  function also needed backporting) (bsc#1198814)
  * feature-upstream-new-check-config-1.patch
  * feature-upstream-new-check-config-2.patch</changelog>
  <changelog author="mohd.saquib@suse.com" date="1673611200">- Fix firewall-offline-cmd fails with ERROR: Calling pre func
  Added following patch (bsc#1206928)
  [+ 0003-firewall-offline-cmd-fail-fix.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1689076800">- Fix firewalld does not longer understand IPv4 network masks
  of type `255.255.255.0`
  Added following patch (boo#1212974)
  [+ 0004-fix_rich_source_address_with_netmask.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1696334400">- update to v2.0.1 (jsc#PED-5597)
  * fix(cli): all --list-all-zones output identical (d30bc61)
  * fix(cli): properly show default zone attribute (ea8d9a8)
  * fix(cli): properly show active attribute for zones and policies (b202403)
  * fix(cli): --get-active-zones should include the default zone (dae9112)
  * fix(nftables): always flush main table on start (cd20981)
  * fix(runtimeToPermanent): deepcopy settings before mangling (9c53639)
  * docs: fix reference to lockdown-whitelist.xml in SYNOPSIS section (1c77205)
  * fix(firewall-config): escape markup stored in bindings store (c876fd0)
  * fix(tests): avoid deprecated assertRaisesRegexp for assertRaisesRegex (2935119)
  * fix(icmp): fix check_icmpv6_name() to use correct IPv6 names (af3c35b)
  * fix(ipset): fix configuring IP range for ipsets with nftables (6a050ec)
  * fix(ipset): fix configuring "timeout","maxelem" values for ipsets with nftables (7d3340c)
  * fix(core): fix exception while parsing invalid "tcp-mss-clamp" in policy (ff61209)
  * docs(policy): fix wrong documentation of in man firewalld.policy (21026d9)
  * Correct Requires, python3-slip-dbus -&gt; python3-dbus-python
  * This is a major release. The major version is being bumped symbolically
    to reflect significant changes done in commit f4d2b80 ("fix(policy):
    disallow zone drifting"). It does not contain any deliberate breaking changes
  * fix(reload): restore policy for old backend if it changed (de85849)
  * fix(io): rich: tcp mss: handle value=None (8016f10)
  * fix(firewall-config): rich: set destination address (f6641a9)
  * fix(policy): mixed IP families in ingress/egress (69ed4d6)
- removed following patches:
  [- 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch]
  [- 0003-firewall-offline-cmd-fail-fix.patch]
  [- 0004-fix_rich_source_address_with_netmask.patch]
  [- feature-upstream-new-check-config-1.patch]
  [- feature-upstream-new-check-config-2.patch]</changelog>
  <changelog author="davide.benini@suse.com" date="1730376000">- Fix for SG#69031, bsc#1231771:
  * 0001-fix-nftables-set-correctly-match-iifname-oifname.patch:
    [PATCH 1/2] fix(nftables): set: correctly match iifname/oifname
  * 0002-test-ipset-verify-match-with-iface.patch: [PATCH 2/2]
    test(ipset): verify match with iface</changelog>
  <changelog author="meissner@suse.com" date="1748001600">- added a python311 flavor</changelog>
  <changelog author="fvogt@suse.com" date="1751976000">- Do not recommend python311-firewalld (bsc#1246100)</changelog>
  <changelog author="rahul.jain@suse.com" date="1777377600">- Fix CVE-2026-4948: local unprivileged users can modify firewall
  state due to D-Bus setter mis-authorization(bsc#1260903)
  [+ 0001-Fix-CVE-2026-4948-local-unprivileged-users-can-modif.patch]</changelog>
</package>
<package pkgid="d5df6dbc566e28fd5d2cea37f7f54f0887a81ef3dba4a6aabfde4dcf20626aa3" name="firewalld-lang" arch="noarch">
  <version epoch="0" ver="2.0.1" rel="150600.3.9.1"/>
  <changelog author="Mathias.Homann@opensuse.org" date="1585915200">- Update to 0.7.4
  This is a bug fix only release.
  However, it does reintroduce the zone drifting bug as a feature. See #258 and #441. This behavior is disabled by default.
  * improvement: build: add an option to disable building documentation
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don't print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * fix: tests: regenerate testsuite if .../{cli,python}/*.at changes
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify --set-target values "default" vs "reject"</changelog>
  <changelog author="mrostecki@suse.com" date="1597233600">- Update to version 0.7.5 (jsc#SLE-12281):
  * release: v0.7.5
  * chore(translation): merge from master
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter Fixes: rhbz1541077
  * test(rhbz1483921): better test name
  * fix(cli): add --zone is an invalid option with --direct
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * docs: replace occurrences of the term blacklist with denylist
  * docs(README): add libxslt for doc generation
  * test(rich): source mac with nftables backend
  * fix(firewall-offline-cmd): remove instances of "[P]" in help text
  * test(check-container): add support for centos8 stream
  * test(functions): use IndividualCalls if host doesn't support nft rule index
  * test(functions): add macro IF_HOST_SUPPORTS_NFT_RULE_INDEX
  * test(dbus): better way to check IPv6_rpfilter expected value
  * fix(ipset): flush the set if IndividiualCalls=yes
  * test(ipv6): skip square bracket address tests if ipv6 not available
  * test(gh509): only run test for nftables backend
  * fix(dbus): service: don't cleanup config for old set APIs
  * fix(config): bool values in dict based import/export
  * fix(doc): dbus: signatures for zone tuple based APIs
  * test(dbus): zone: fix zone runtime functional test title
  * test(dbus): zone: fix false failure due to list order
  * fix(client): addService needs to reduce tuple size
  * test(direct): rule in a zone chain
  * fix(direct): rule in a zone chain
  * test(dbus): zone: verify runtime config APIs
  * test(dbus): zone: verify permanent config APIs
  * fix(systemd): Conflict with nftables.service
  * fix: test/regression/gh599: use expr to be more portable
  * test: dbus: zone: verify runtime config API signatures
  * test: dbus: zone: verify permanent config API signatures
  * fix: test/regression/gh599: fix if not using debug output
  * test: log: verify logging still works after truncate
  * test: ipset: verify port ranges for non-default protocol</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 0.8.3:
  * nftables: convert to libnftables JSON interface
  * service: new “helper” element to replace “module” More accurately represents the conntrack helper. Deprecates “module”.
  * allow custom helpers using standard helper modules (rhbz 1733066)
  * testsuite is now shipped in the dist tarball
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don’t print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: ipset types using “port”
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify –set-target values “default” vs “reject”
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * fix: nftables: ipset: port ranges for non-default protocols
  * fix(systemd): Conflict with nftables.service
  * fix(direct): rule in a zone chain
  * fix(client): addService needs to reduce tuple size
  * fix(doc): dbus: signatures for zone tuple based APIs
  * fix(config): bool values in dict based import/export
  * fix(dbus): service: don’t cleanup config for old set APIs
  * fix(ipset): flush the set if IndividiualCalls=yes
  * fix(firewall-offline-cmd): remove instances of “[P]” in help text
  * fix(rich): source mac with nftables backend
  * docs: replace occurrences of the term blacklist with denylist
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * docs(README): add libxslt for doc generation
  * fix(cli): add –zone is an invalid option with –direct
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1599220800">- update to 0.9.0:
  * New major features
  * prevention of Zone Drifting
  * Intra Zone Forwarding
  * Policy Objects
  * For a full list of changes, see
    https://github.com/firewalld/firewalld/compare/v0.8.0...v0.9.0</changelog>
  <changelog author="mrostecki@suse.com" date="1599652800">- Add python3-nftables as a requirement.</changelog>
  <changelog author="fbui@suse.com" date="1599825600">- Make use of %service_del_postun_without_restart
  And stop using DISABLE_RESTART_ON_UPDATE as this interface is
  obsolete.</changelog>
  <changelog author="mrostecki@suse.com" date="1604923200">- Remove the patch which enforces usage of iptables instead of
  nftables (jsc#SLE-16300):
  * 0001-firewall-backend-Switch-default-backend-to-iptables.patch
- Add firewalld zone for the docker0 interface. This is the
  workaround for lack of nftables support in docker. Without that
  additional zone, containers have no Internet connectivity.
  (rhbz#1817022, jsc#SLE-16300)
- Update to 0.9.1:
  * Bugfixes:
  * docs(firewall-cmd): clarify lockdown whitelist command paths
  * fix(dbus): getActivePolicies shouldn't return a policy if a zone is not active
  * fix(policy): zone interface/source changes should affect all using zone</changelog>
  <changelog author="rfrohl@suse.com" date="1610625600">- Add dependency for firewall-offline-cmd (bsc#1180883)</changelog>
  <changelog author="mrostecki@suse.com" date="1611576000">- Update to 0.9.3 (jsc#SLE-17336):
  * docs(dbus): fix invalid method names
  * fix(forward): iptables: ipset used as zone source
  * fix(rich): non-printable characters removed from rich rules
  * docs(firewall-cmd): small description grammar fix
  * fix(rich): limit table to strip non-printables to C0 and C1
  * fix(zone): add source with mac address</changelog>
  <changelog author="mrostecki@suse.com" date="1611662400">- Disable FlushAllOnReload option to not retain interface to zone
  assignments and direct rules when using --reload option.
  * 0002-Disable-FlushAllOnReload-option.patch</changelog>
  <changelog author="mrostecki@suse.com" date="1617796800">- Remove dependency on firewalld from firewall-macros (bsc#1183404)</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Fix modprobe.d directory for SLE15 SP3
- Always own %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mrostecki@suse.com" date="1647432000">- Add patch which fixes the zone configuration (bsc#1191837)
  * 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1648468800">- Provide dummy firewalld-prometheus-config package (bsc#1197042)</changelog>
  <changelog author="sflees@suse.de" date="1652097600">- Fix regression introduced in previous patch (an api change to a
  function also needed backporting) (bsc#1198814)
  * feature-upstream-new-check-config-1.patch
  * feature-upstream-new-check-config-2.patch</changelog>
  <changelog author="mohd.saquib@suse.com" date="1673611200">- Fix firewall-offline-cmd fails with ERROR: Calling pre func
  Added following patch (bsc#1206928)
  [+ 0003-firewall-offline-cmd-fail-fix.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1689076800">- Fix firewalld does not longer understand IPv4 network masks
  of type `255.255.255.0`
  Added following patch (boo#1212974)
  [+ 0004-fix_rich_source_address_with_netmask.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1696334400">- update to v2.0.1 (jsc#PED-5597)
  * fix(cli): all --list-all-zones output identical (d30bc61)
  * fix(cli): properly show default zone attribute (ea8d9a8)
  * fix(cli): properly show active attribute for zones and policies (b202403)
  * fix(cli): --get-active-zones should include the default zone (dae9112)
  * fix(nftables): always flush main table on start (cd20981)
  * fix(runtimeToPermanent): deepcopy settings before mangling (9c53639)
  * docs: fix reference to lockdown-whitelist.xml in SYNOPSIS section (1c77205)
  * fix(firewall-config): escape markup stored in bindings store (c876fd0)
  * fix(tests): avoid deprecated assertRaisesRegexp for assertRaisesRegex (2935119)
  * fix(icmp): fix check_icmpv6_name() to use correct IPv6 names (af3c35b)
  * fix(ipset): fix configuring IP range for ipsets with nftables (6a050ec)
  * fix(ipset): fix configuring "timeout","maxelem" values for ipsets with nftables (7d3340c)
  * fix(core): fix exception while parsing invalid "tcp-mss-clamp" in policy (ff61209)
  * docs(policy): fix wrong documentation of in man firewalld.policy (21026d9)
  * Correct Requires, python3-slip-dbus -&gt; python3-dbus-python
  * This is a major release. The major version is being bumped symbolically
    to reflect significant changes done in commit f4d2b80 ("fix(policy):
    disallow zone drifting"). It does not contain any deliberate breaking changes
  * fix(reload): restore policy for old backend if it changed (de85849)
  * fix(io): rich: tcp mss: handle value=None (8016f10)
  * fix(firewall-config): rich: set destination address (f6641a9)
  * fix(policy): mixed IP families in ingress/egress (69ed4d6)
- removed following patches:
  [- 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch]
  [- 0003-firewall-offline-cmd-fail-fix.patch]
  [- 0004-fix_rich_source_address_with_netmask.patch]
  [- feature-upstream-new-check-config-1.patch]
  [- feature-upstream-new-check-config-2.patch]</changelog>
  <changelog author="davide.benini@suse.com" date="1730376000">- Fix for SG#69031, bsc#1231771:
  * 0001-fix-nftables-set-correctly-match-iifname-oifname.patch:
    [PATCH 1/2] fix(nftables): set: correctly match iifname/oifname
  * 0002-test-ipset-verify-match-with-iface.patch: [PATCH 2/2]
    test(ipset): verify match with iface</changelog>
  <changelog author="meissner@suse.com" date="1748001600">- added a python311 flavor</changelog>
</package>
<package pkgid="1a4d5f335e3837b827703a599d5a0dcfa9e4240c41a8eb282ef6689b670cbdc5" name="firewalld-zsh-completion" arch="noarch">
  <version epoch="0" ver="1.3.4" rel="150600.13.3.1"/>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 0.8.3:
  * nftables: convert to libnftables JSON interface
  * service: new “helper” element to replace “module” More accurately represents the conntrack helper. Deprecates “module”.
  * allow custom helpers using standard helper modules (rhbz 1733066)
  * testsuite is now shipped in the dist tarball
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don’t print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: ipset types using “port”
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify –set-target values “default” vs “reject”
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * fix: nftables: ipset: port ranges for non-default protocols
  * fix(systemd): Conflict with nftables.service
  * fix(direct): rule in a zone chain
  * fix(client): addService needs to reduce tuple size
  * fix(doc): dbus: signatures for zone tuple based APIs
  * fix(config): bool values in dict based import/export
  * fix(dbus): service: don’t cleanup config for old set APIs
  * fix(ipset): flush the set if IndividiualCalls=yes
  * fix(firewall-offline-cmd): remove instances of “[P]” in help text
  * fix(rich): source mac with nftables backend
  * docs: replace occurrences of the term blacklist with denylist
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * docs(README): add libxslt for doc generation
  * fix(cli): add –zone is an invalid option with –direct
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1599220800">- update to 0.9.0:
  * New major features
  * prevention of Zone Drifting
  * Intra Zone Forwarding
  * Policy Objects
  * For a full list of changes, see
    https://github.com/firewalld/firewalld/compare/v0.8.0...v0.9.0</changelog>
  <changelog author="mrostecki@suse.com" date="1599652800">- Add python3-nftables as a requirement.</changelog>
  <changelog author="fbui@suse.com" date="1599825600">- Make use of %service_del_postun_without_restart
  And stop using DISABLE_RESTART_ON_UPDATE as this interface is
  obsolete.</changelog>
  <changelog author="mrostecki@suse.com" date="1604923200">- Remove the patch which enforces usage of iptables instead of
  nftables (jsc#SLE-16300):
  * 0001-firewall-backend-Switch-default-backend-to-iptables.patch
- Add firewalld zone for the docker0 interface. This is the
  workaround for lack of nftables support in docker. Without that
  additional zone, containers have no Internet connectivity.
  (rhbz#1817022, jsc#SLE-16300)
- Update to 0.9.1:
  * Bugfixes:
  * docs(firewall-cmd): clarify lockdown whitelist command paths
  * fix(dbus): getActivePolicies shouldn't return a policy if a zone is not active
  * fix(policy): zone interface/source changes should affect all using zone</changelog>
  <changelog author="rfrohl@suse.com" date="1610625600">- Add dependency for firewall-offline-cmd (bsc#1180883)</changelog>
  <changelog author="mrostecki@suse.com" date="1611576000">- Update to 0.9.3 (jsc#SLE-17336):
  * docs(dbus): fix invalid method names
  * fix(forward): iptables: ipset used as zone source
  * fix(rich): non-printable characters removed from rich rules
  * docs(firewall-cmd): small description grammar fix
  * fix(rich): limit table to strip non-printables to C0 and C1
  * fix(zone): add source with mac address</changelog>
  <changelog author="mrostecki@suse.com" date="1611662400">- Disable FlushAllOnReload option to not retain interface to zone
  assignments and direct rules when using --reload option.
  * 0002-Disable-FlushAllOnReload-option.patch</changelog>
  <changelog author="mrostecki@suse.com" date="1617796800">- Remove dependency on firewalld from firewall-macros (bsc#1183404)</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Fix modprobe.d directory for SLE15 SP3
- Always own %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mrostecki@suse.com" date="1647432000">- Add patch which fixes the zone configuration (bsc#1191837)
  * 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1648468800">- Provide dummy firewalld-prometheus-config package (bsc#1197042)</changelog>
  <changelog author="sflees@suse.de" date="1652097600">- Fix regression introduced in previous patch (an api change to a
  function also needed backporting) (bsc#1198814)
  * feature-upstream-new-check-config-1.patch
  * feature-upstream-new-check-config-2.patch</changelog>
  <changelog author="mohd.saquib@suse.com" date="1673611200">- Fix firewall-offline-cmd fails with ERROR: Calling pre func
  Added following patch (bsc#1206928)
  [+ 0003-firewall-offline-cmd-fail-fix.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1689076800">- Fix firewalld does not longer understand IPv4 network masks
  of type `255.255.255.0`
  Added following patch (boo#1212974)
  [+ 0004-fix_rich_source_address_with_netmask.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1696334400">- update to v2.0.1 (jsc#PED-5597)
  * fix(cli): all --list-all-zones output identical (d30bc61)
  * fix(cli): properly show default zone attribute (ea8d9a8)
  * fix(cli): properly show active attribute for zones and policies (b202403)
  * fix(cli): --get-active-zones should include the default zone (dae9112)
  * fix(nftables): always flush main table on start (cd20981)
  * fix(runtimeToPermanent): deepcopy settings before mangling (9c53639)
  * docs: fix reference to lockdown-whitelist.xml in SYNOPSIS section (1c77205)
  * fix(firewall-config): escape markup stored in bindings store (c876fd0)
  * fix(tests): avoid deprecated assertRaisesRegexp for assertRaisesRegex (2935119)
  * fix(icmp): fix check_icmpv6_name() to use correct IPv6 names (af3c35b)
  * fix(ipset): fix configuring IP range for ipsets with nftables (6a050ec)
  * fix(ipset): fix configuring "timeout","maxelem" values for ipsets with nftables (7d3340c)
  * fix(core): fix exception while parsing invalid "tcp-mss-clamp" in policy (ff61209)
  * docs(policy): fix wrong documentation of in man firewalld.policy (21026d9)
  * Correct Requires, python3-slip-dbus -&gt; python3-dbus-python
  * This is a major release. The major version is being bumped symbolically
    to reflect significant changes done in commit f4d2b80 ("fix(policy):
    disallow zone drifting"). It does not contain any deliberate breaking changes
  * fix(reload): restore policy for old backend if it changed (de85849)
  * fix(io): rich: tcp mss: handle value=None (8016f10)
  * fix(firewall-config): rich: set destination address (f6641a9)
  * fix(policy): mixed IP families in ingress/egress (69ed4d6)
- removed following patches:
  [- 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch]
  [- 0003-firewall-offline-cmd-fail-fix.patch]
  [- 0004-fix_rich_source_address_with_netmask.patch]
  [- feature-upstream-new-check-config-1.patch]
  [- feature-upstream-new-check-config-2.patch]</changelog>
  <changelog author="davide.benini@suse.com" date="1730376000">- Fix for SG#69031, bsc#1231771:
  * 0001-fix-nftables-set-correctly-match-iifname-oifname.patch:
    [PATCH 1/2] fix(nftables): set: correctly match iifname/oifname
  * 0002-test-ipset-verify-match-with-iface.patch: [PATCH 2/2]
    test(ipset): verify match with iface</changelog>
  <changelog author="meissner@suse.com" date="1748001600">- added a python311 flavor</changelog>
  <changelog author="fvogt@suse.com" date="1751976000">- Do not recommend python311-firewalld (bsc#1246100)</changelog>
  <changelog author="jan.fooken@suse.com" date="1759233600">- downgrade to v1.3.4 due to slow firewall rule generation
  introduced in the 2.x.x series (jsc#PED-13314).
  The Version includes the following cherry picked commits from
  upstream
  * fix(fw_nm): use IP interface names for connection lookup
  * fix(fw_policy): raise exceptions
  * fix(service): include: when used with rich rule
  * fix(nftables): rich: log: limit was not taking effect
  * fix(build): rpm must build all as prerequisite
  * fix: use error codes for FirewallError instances
  * fix(ipset): chunk entries when restoring set
  * fix(reload): restore policy for old backend if it changed
  * fix(io): rich: tcp mss: handle value=None
  * fix(firewall-config): rich: set destination address
  * fix(policy): mixed IP families in ingress/egress
  * fix(nftables): always flush main table on start
  * fix(runtimeToPermanent): deepcopy settings before mangling
  * docs: fix reference to lockdown-whitelist.xml in SYNOPSIS section
  * fix(tests): avoid deprecated assertRaisesRegexp for assertRaisesRegex
  * fix(icmp): fix check_icmpv6_name() to use correct IPv6 names
  * fix(ipset): fix configuring IP range for ipsets with nftables
  * improvement(tests): add test showing the current wrong behavior for ipsets
  * fix(ipset): fix configuring "timeout","maxelem" values for ipsets with nftables
  * improvement(build): rename the "master" branch to "main"
  * fix(core): fix exception while parsing invalid "tcp-mss-clamp" in policy
  * docs(policy): fix wrong documentation of &lt;tcp-mss-clamp/&gt; in `man firewalld.policy`
  * fix(applet): allows using KDE network connection editor
  * fix(applet): ActivationReason.Trigger
- rebase and update patches with origin information
- add the following patch from SLE-15-SP5:Update
  * 0003-firewall-offline-cmd-fail-fix.patch
- add the following patch
  * 0004-fix-ipset-test-for-iifname-oifname-switch.patch</changelog>
</package>
<package pkgid="edeae62cae541dae5332e19e02205c63204c54de62ad4bff8868e8be73348724" name="firewalld-zsh-completion" arch="noarch">
  <version epoch="0" ver="2.0.1" rel="150600.3.12.1"/>
  <changelog author="mrostecki@suse.com" date="1597233600">- Update to version 0.7.5 (jsc#SLE-12281):
  * release: v0.7.5
  * chore(translation): merge from master
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter Fixes: rhbz1541077
  * test(rhbz1483921): better test name
  * fix(cli): add --zone is an invalid option with --direct
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * docs: replace occurrences of the term blacklist with denylist
  * docs(README): add libxslt for doc generation
  * test(rich): source mac with nftables backend
  * fix(firewall-offline-cmd): remove instances of "[P]" in help text
  * test(check-container): add support for centos8 stream
  * test(functions): use IndividualCalls if host doesn't support nft rule index
  * test(functions): add macro IF_HOST_SUPPORTS_NFT_RULE_INDEX
  * test(dbus): better way to check IPv6_rpfilter expected value
  * fix(ipset): flush the set if IndividiualCalls=yes
  * test(ipv6): skip square bracket address tests if ipv6 not available
  * test(gh509): only run test for nftables backend
  * fix(dbus): service: don't cleanup config for old set APIs
  * fix(config): bool values in dict based import/export
  * fix(doc): dbus: signatures for zone tuple based APIs
  * test(dbus): zone: fix zone runtime functional test title
  * test(dbus): zone: fix false failure due to list order
  * fix(client): addService needs to reduce tuple size
  * test(direct): rule in a zone chain
  * fix(direct): rule in a zone chain
  * test(dbus): zone: verify runtime config APIs
  * test(dbus): zone: verify permanent config APIs
  * fix(systemd): Conflict with nftables.service
  * fix: test/regression/gh599: use expr to be more portable
  * test: dbus: zone: verify runtime config API signatures
  * test: dbus: zone: verify permanent config API signatures
  * fix: test/regression/gh599: fix if not using debug output
  * test: log: verify logging still works after truncate
  * test: ipset: verify port ranges for non-default protocol</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 0.8.3:
  * nftables: convert to libnftables JSON interface
  * service: new “helper” element to replace “module” More accurately represents the conntrack helper. Deprecates “module”.
  * allow custom helpers using standard helper modules (rhbz 1733066)
  * testsuite is now shipped in the dist tarball
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don’t print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: ipset types using “port”
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify –set-target values “default” vs “reject”
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * fix: nftables: ipset: port ranges for non-default protocols
  * fix(systemd): Conflict with nftables.service
  * fix(direct): rule in a zone chain
  * fix(client): addService needs to reduce tuple size
  * fix(doc): dbus: signatures for zone tuple based APIs
  * fix(config): bool values in dict based import/export
  * fix(dbus): service: don’t cleanup config for old set APIs
  * fix(ipset): flush the set if IndividiualCalls=yes
  * fix(firewall-offline-cmd): remove instances of “[P]” in help text
  * fix(rich): source mac with nftables backend
  * docs: replace occurrences of the term blacklist with denylist
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * docs(README): add libxslt for doc generation
  * fix(cli): add –zone is an invalid option with –direct
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1599220800">- update to 0.9.0:
  * New major features
  * prevention of Zone Drifting
  * Intra Zone Forwarding
  * Policy Objects
  * For a full list of changes, see
    https://github.com/firewalld/firewalld/compare/v0.8.0...v0.9.0</changelog>
  <changelog author="mrostecki@suse.com" date="1599652800">- Add python3-nftables as a requirement.</changelog>
  <changelog author="fbui@suse.com" date="1599825600">- Make use of %service_del_postun_without_restart
  And stop using DISABLE_RESTART_ON_UPDATE as this interface is
  obsolete.</changelog>
  <changelog author="mrostecki@suse.com" date="1604923200">- Remove the patch which enforces usage of iptables instead of
  nftables (jsc#SLE-16300):
  * 0001-firewall-backend-Switch-default-backend-to-iptables.patch
- Add firewalld zone for the docker0 interface. This is the
  workaround for lack of nftables support in docker. Without that
  additional zone, containers have no Internet connectivity.
  (rhbz#1817022, jsc#SLE-16300)
- Update to 0.9.1:
  * Bugfixes:
  * docs(firewall-cmd): clarify lockdown whitelist command paths
  * fix(dbus): getActivePolicies shouldn't return a policy if a zone is not active
  * fix(policy): zone interface/source changes should affect all using zone</changelog>
  <changelog author="rfrohl@suse.com" date="1610625600">- Add dependency for firewall-offline-cmd (bsc#1180883)</changelog>
  <changelog author="mrostecki@suse.com" date="1611576000">- Update to 0.9.3 (jsc#SLE-17336):
  * docs(dbus): fix invalid method names
  * fix(forward): iptables: ipset used as zone source
  * fix(rich): non-printable characters removed from rich rules
  * docs(firewall-cmd): small description grammar fix
  * fix(rich): limit table to strip non-printables to C0 and C1
  * fix(zone): add source with mac address</changelog>
  <changelog author="mrostecki@suse.com" date="1611662400">- Disable FlushAllOnReload option to not retain interface to zone
  assignments and direct rules when using --reload option.
  * 0002-Disable-FlushAllOnReload-option.patch</changelog>
  <changelog author="mrostecki@suse.com" date="1617796800">- Remove dependency on firewalld from firewall-macros (bsc#1183404)</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Fix modprobe.d directory for SLE15 SP3
- Always own %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mrostecki@suse.com" date="1647432000">- Add patch which fixes the zone configuration (bsc#1191837)
  * 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1648468800">- Provide dummy firewalld-prometheus-config package (bsc#1197042)</changelog>
  <changelog author="sflees@suse.de" date="1652097600">- Fix regression introduced in previous patch (an api change to a
  function also needed backporting) (bsc#1198814)
  * feature-upstream-new-check-config-1.patch
  * feature-upstream-new-check-config-2.patch</changelog>
  <changelog author="mohd.saquib@suse.com" date="1673611200">- Fix firewall-offline-cmd fails with ERROR: Calling pre func
  Added following patch (bsc#1206928)
  [+ 0003-firewall-offline-cmd-fail-fix.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1689076800">- Fix firewalld does not longer understand IPv4 network masks
  of type `255.255.255.0`
  Added following patch (boo#1212974)
  [+ 0004-fix_rich_source_address_with_netmask.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1696334400">- update to v2.0.1 (jsc#PED-5597)
  * fix(cli): all --list-all-zones output identical (d30bc61)
  * fix(cli): properly show default zone attribute (ea8d9a8)
  * fix(cli): properly show active attribute for zones and policies (b202403)
  * fix(cli): --get-active-zones should include the default zone (dae9112)
  * fix(nftables): always flush main table on start (cd20981)
  * fix(runtimeToPermanent): deepcopy settings before mangling (9c53639)
  * docs: fix reference to lockdown-whitelist.xml in SYNOPSIS section (1c77205)
  * fix(firewall-config): escape markup stored in bindings store (c876fd0)
  * fix(tests): avoid deprecated assertRaisesRegexp for assertRaisesRegex (2935119)
  * fix(icmp): fix check_icmpv6_name() to use correct IPv6 names (af3c35b)
  * fix(ipset): fix configuring IP range for ipsets with nftables (6a050ec)
  * fix(ipset): fix configuring "timeout","maxelem" values for ipsets with nftables (7d3340c)
  * fix(core): fix exception while parsing invalid "tcp-mss-clamp" in policy (ff61209)
  * docs(policy): fix wrong documentation of in man firewalld.policy (21026d9)
  * Correct Requires, python3-slip-dbus -&gt; python3-dbus-python
  * This is a major release. The major version is being bumped symbolically
    to reflect significant changes done in commit f4d2b80 ("fix(policy):
    disallow zone drifting"). It does not contain any deliberate breaking changes
  * fix(reload): restore policy for old backend if it changed (de85849)
  * fix(io): rich: tcp mss: handle value=None (8016f10)
  * fix(firewall-config): rich: set destination address (f6641a9)
  * fix(policy): mixed IP families in ingress/egress (69ed4d6)
- removed following patches:
  [- 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch]
  [- 0003-firewall-offline-cmd-fail-fix.patch]
  [- 0004-fix_rich_source_address_with_netmask.patch]
  [- feature-upstream-new-check-config-1.patch]
  [- feature-upstream-new-check-config-2.patch]</changelog>
  <changelog author="davide.benini@suse.com" date="1730376000">- Fix for SG#69031, bsc#1231771:
  * 0001-fix-nftables-set-correctly-match-iifname-oifname.patch:
    [PATCH 1/2] fix(nftables): set: correctly match iifname/oifname
  * 0002-test-ipset-verify-match-with-iface.patch: [PATCH 2/2]
    test(ipset): verify match with iface</changelog>
  <changelog author="meissner@suse.com" date="1748001600">- added a python311 flavor</changelog>
  <changelog author="fvogt@suse.com" date="1751976000">- Do not recommend python311-firewalld (bsc#1246100)</changelog>
</package>
<package pkgid="1a9d068e573b0c7bcdf383aca7fc2538f1be2f794c04f622364eb37d99f4fa2b" name="firewalld-zsh-completion" arch="noarch">
  <version epoch="0" ver="2.0.1" rel="150600.3.15.1"/>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 0.8.3:
  * nftables: convert to libnftables JSON interface
  * service: new “helper” element to replace “module” More accurately represents the conntrack helper. Deprecates “module”.
  * allow custom helpers using standard helper modules (rhbz 1733066)
  * testsuite is now shipped in the dist tarball
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don’t print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: ipset types using “port”
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify –set-target values “default” vs “reject”
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * fix: nftables: ipset: port ranges for non-default protocols
  * fix(systemd): Conflict with nftables.service
  * fix(direct): rule in a zone chain
  * fix(client): addService needs to reduce tuple size
  * fix(doc): dbus: signatures for zone tuple based APIs
  * fix(config): bool values in dict based import/export
  * fix(dbus): service: don’t cleanup config for old set APIs
  * fix(ipset): flush the set if IndividiualCalls=yes
  * fix(firewall-offline-cmd): remove instances of “[P]” in help text
  * fix(rich): source mac with nftables backend
  * docs: replace occurrences of the term blacklist with denylist
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * docs(README): add libxslt for doc generation
  * fix(cli): add –zone is an invalid option with –direct
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1599220800">- update to 0.9.0:
  * New major features
  * prevention of Zone Drifting
  * Intra Zone Forwarding
  * Policy Objects
  * For a full list of changes, see
    https://github.com/firewalld/firewalld/compare/v0.8.0...v0.9.0</changelog>
  <changelog author="mrostecki@suse.com" date="1599652800">- Add python3-nftables as a requirement.</changelog>
  <changelog author="fbui@suse.com" date="1599825600">- Make use of %service_del_postun_without_restart
  And stop using DISABLE_RESTART_ON_UPDATE as this interface is
  obsolete.</changelog>
  <changelog author="mrostecki@suse.com" date="1604923200">- Remove the patch which enforces usage of iptables instead of
  nftables (jsc#SLE-16300):
  * 0001-firewall-backend-Switch-default-backend-to-iptables.patch
- Add firewalld zone for the docker0 interface. This is the
  workaround for lack of nftables support in docker. Without that
  additional zone, containers have no Internet connectivity.
  (rhbz#1817022, jsc#SLE-16300)
- Update to 0.9.1:
  * Bugfixes:
  * docs(firewall-cmd): clarify lockdown whitelist command paths
  * fix(dbus): getActivePolicies shouldn't return a policy if a zone is not active
  * fix(policy): zone interface/source changes should affect all using zone</changelog>
  <changelog author="rfrohl@suse.com" date="1610625600">- Add dependency for firewall-offline-cmd (bsc#1180883)</changelog>
  <changelog author="mrostecki@suse.com" date="1611576000">- Update to 0.9.3 (jsc#SLE-17336):
  * docs(dbus): fix invalid method names
  * fix(forward): iptables: ipset used as zone source
  * fix(rich): non-printable characters removed from rich rules
  * docs(firewall-cmd): small description grammar fix
  * fix(rich): limit table to strip non-printables to C0 and C1
  * fix(zone): add source with mac address</changelog>
  <changelog author="mrostecki@suse.com" date="1611662400">- Disable FlushAllOnReload option to not retain interface to zone
  assignments and direct rules when using --reload option.
  * 0002-Disable-FlushAllOnReload-option.patch</changelog>
  <changelog author="mrostecki@suse.com" date="1617796800">- Remove dependency on firewalld from firewall-macros (bsc#1183404)</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Fix modprobe.d directory for SLE15 SP3
- Always own %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mrostecki@suse.com" date="1647432000">- Add patch which fixes the zone configuration (bsc#1191837)
  * 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1648468800">- Provide dummy firewalld-prometheus-config package (bsc#1197042)</changelog>
  <changelog author="sflees@suse.de" date="1652097600">- Fix regression introduced in previous patch (an api change to a
  function also needed backporting) (bsc#1198814)
  * feature-upstream-new-check-config-1.patch
  * feature-upstream-new-check-config-2.patch</changelog>
  <changelog author="mohd.saquib@suse.com" date="1673611200">- Fix firewall-offline-cmd fails with ERROR: Calling pre func
  Added following patch (bsc#1206928)
  [+ 0003-firewall-offline-cmd-fail-fix.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1689076800">- Fix firewalld does not longer understand IPv4 network masks
  of type `255.255.255.0`
  Added following patch (boo#1212974)
  [+ 0004-fix_rich_source_address_with_netmask.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1696334400">- update to v2.0.1 (jsc#PED-5597)
  * fix(cli): all --list-all-zones output identical (d30bc61)
  * fix(cli): properly show default zone attribute (ea8d9a8)
  * fix(cli): properly show active attribute for zones and policies (b202403)
  * fix(cli): --get-active-zones should include the default zone (dae9112)
  * fix(nftables): always flush main table on start (cd20981)
  * fix(runtimeToPermanent): deepcopy settings before mangling (9c53639)
  * docs: fix reference to lockdown-whitelist.xml in SYNOPSIS section (1c77205)
  * fix(firewall-config): escape markup stored in bindings store (c876fd0)
  * fix(tests): avoid deprecated assertRaisesRegexp for assertRaisesRegex (2935119)
  * fix(icmp): fix check_icmpv6_name() to use correct IPv6 names (af3c35b)
  * fix(ipset): fix configuring IP range for ipsets with nftables (6a050ec)
  * fix(ipset): fix configuring "timeout","maxelem" values for ipsets with nftables (7d3340c)
  * fix(core): fix exception while parsing invalid "tcp-mss-clamp" in policy (ff61209)
  * docs(policy): fix wrong documentation of in man firewalld.policy (21026d9)
  * Correct Requires, python3-slip-dbus -&gt; python3-dbus-python
  * This is a major release. The major version is being bumped symbolically
    to reflect significant changes done in commit f4d2b80 ("fix(policy):
    disallow zone drifting"). It does not contain any deliberate breaking changes
  * fix(reload): restore policy for old backend if it changed (de85849)
  * fix(io): rich: tcp mss: handle value=None (8016f10)
  * fix(firewall-config): rich: set destination address (f6641a9)
  * fix(policy): mixed IP families in ingress/egress (69ed4d6)
- removed following patches:
  [- 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch]
  [- 0003-firewall-offline-cmd-fail-fix.patch]
  [- 0004-fix_rich_source_address_with_netmask.patch]
  [- feature-upstream-new-check-config-1.patch]
  [- feature-upstream-new-check-config-2.patch]</changelog>
  <changelog author="davide.benini@suse.com" date="1730376000">- Fix for SG#69031, bsc#1231771:
  * 0001-fix-nftables-set-correctly-match-iifname-oifname.patch:
    [PATCH 1/2] fix(nftables): set: correctly match iifname/oifname
  * 0002-test-ipset-verify-match-with-iface.patch: [PATCH 2/2]
    test(ipset): verify match with iface</changelog>
  <changelog author="meissner@suse.com" date="1748001600">- added a python311 flavor</changelog>
  <changelog author="fvogt@suse.com" date="1751976000">- Do not recommend python311-firewalld (bsc#1246100)</changelog>
  <changelog author="rahul.jain@suse.com" date="1777377600">- Fix CVE-2026-4948: local unprivileged users can modify firewall
  state due to D-Bus setter mis-authorization(bsc#1260903)
  [+ 0001-Fix-CVE-2026-4948-local-unprivileged-users-can-modif.patch]</changelog>
</package>
<package pkgid="407c2442b35473891339563453ce4056701bf1f03ffccfeeff43705cbf111d45" name="firewalld-zsh-completion" arch="noarch">
  <version epoch="0" ver="2.0.1" rel="150600.3.9.1"/>
  <changelog author="Mathias.Homann@opensuse.org" date="1585915200">- Update to 0.7.4
  This is a bug fix only release.
  However, it does reintroduce the zone drifting bug as a feature. See #258 and #441. This behavior is disabled by default.
  * improvement: build: add an option to disable building documentation
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don't print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * fix: tests: regenerate testsuite if .../{cli,python}/*.at changes
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify --set-target values "default" vs "reject"</changelog>
  <changelog author="mrostecki@suse.com" date="1597233600">- Update to version 0.7.5 (jsc#SLE-12281):
  * release: v0.7.5
  * chore(translation): merge from master
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter Fixes: rhbz1541077
  * test(rhbz1483921): better test name
  * fix(cli): add --zone is an invalid option with --direct
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * docs: replace occurrences of the term blacklist with denylist
  * docs(README): add libxslt for doc generation
  * test(rich): source mac with nftables backend
  * fix(firewall-offline-cmd): remove instances of "[P]" in help text
  * test(check-container): add support for centos8 stream
  * test(functions): use IndividualCalls if host doesn't support nft rule index
  * test(functions): add macro IF_HOST_SUPPORTS_NFT_RULE_INDEX
  * test(dbus): better way to check IPv6_rpfilter expected value
  * fix(ipset): flush the set if IndividiualCalls=yes
  * test(ipv6): skip square bracket address tests if ipv6 not available
  * test(gh509): only run test for nftables backend
  * fix(dbus): service: don't cleanup config for old set APIs
  * fix(config): bool values in dict based import/export
  * fix(doc): dbus: signatures for zone tuple based APIs
  * test(dbus): zone: fix zone runtime functional test title
  * test(dbus): zone: fix false failure due to list order
  * fix(client): addService needs to reduce tuple size
  * test(direct): rule in a zone chain
  * fix(direct): rule in a zone chain
  * test(dbus): zone: verify runtime config APIs
  * test(dbus): zone: verify permanent config APIs
  * fix(systemd): Conflict with nftables.service
  * fix: test/regression/gh599: use expr to be more portable
  * test: dbus: zone: verify runtime config API signatures
  * test: dbus: zone: verify permanent config API signatures
  * fix: test/regression/gh599: fix if not using debug output
  * test: log: verify logging still works after truncate
  * test: ipset: verify port ranges for non-default protocol</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 0.8.3:
  * nftables: convert to libnftables JSON interface
  * service: new “helper” element to replace “module” More accurately represents the conntrack helper. Deprecates “module”.
  * allow custom helpers using standard helper modules (rhbz 1733066)
  * testsuite is now shipped in the dist tarball
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don’t print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: ipset types using “port”
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify –set-target values “default” vs “reject”
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * fix: nftables: ipset: port ranges for non-default protocols
  * fix(systemd): Conflict with nftables.service
  * fix(direct): rule in a zone chain
  * fix(client): addService needs to reduce tuple size
  * fix(doc): dbus: signatures for zone tuple based APIs
  * fix(config): bool values in dict based import/export
  * fix(dbus): service: don’t cleanup config for old set APIs
  * fix(ipset): flush the set if IndividiualCalls=yes
  * fix(firewall-offline-cmd): remove instances of “[P]” in help text
  * fix(rich): source mac with nftables backend
  * docs: replace occurrences of the term blacklist with denylist
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * docs(README): add libxslt for doc generation
  * fix(cli): add –zone is an invalid option with –direct
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1599220800">- update to 0.9.0:
  * New major features
  * prevention of Zone Drifting
  * Intra Zone Forwarding
  * Policy Objects
  * For a full list of changes, see
    https://github.com/firewalld/firewalld/compare/v0.8.0...v0.9.0</changelog>
  <changelog author="mrostecki@suse.com" date="1599652800">- Add python3-nftables as a requirement.</changelog>
  <changelog author="fbui@suse.com" date="1599825600">- Make use of %service_del_postun_without_restart
  And stop using DISABLE_RESTART_ON_UPDATE as this interface is
  obsolete.</changelog>
  <changelog author="mrostecki@suse.com" date="1604923200">- Remove the patch which enforces usage of iptables instead of
  nftables (jsc#SLE-16300):
  * 0001-firewall-backend-Switch-default-backend-to-iptables.patch
- Add firewalld zone for the docker0 interface. This is the
  workaround for lack of nftables support in docker. Without that
  additional zone, containers have no Internet connectivity.
  (rhbz#1817022, jsc#SLE-16300)
- Update to 0.9.1:
  * Bugfixes:
  * docs(firewall-cmd): clarify lockdown whitelist command paths
  * fix(dbus): getActivePolicies shouldn't return a policy if a zone is not active
  * fix(policy): zone interface/source changes should affect all using zone</changelog>
  <changelog author="rfrohl@suse.com" date="1610625600">- Add dependency for firewall-offline-cmd (bsc#1180883)</changelog>
  <changelog author="mrostecki@suse.com" date="1611576000">- Update to 0.9.3 (jsc#SLE-17336):
  * docs(dbus): fix invalid method names
  * fix(forward): iptables: ipset used as zone source
  * fix(rich): non-printable characters removed from rich rules
  * docs(firewall-cmd): small description grammar fix
  * fix(rich): limit table to strip non-printables to C0 and C1
  * fix(zone): add source with mac address</changelog>
  <changelog author="mrostecki@suse.com" date="1611662400">- Disable FlushAllOnReload option to not retain interface to zone
  assignments and direct rules when using --reload option.
  * 0002-Disable-FlushAllOnReload-option.patch</changelog>
  <changelog author="mrostecki@suse.com" date="1617796800">- Remove dependency on firewalld from firewall-macros (bsc#1183404)</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Fix modprobe.d directory for SLE15 SP3
- Always own %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mrostecki@suse.com" date="1647432000">- Add patch which fixes the zone configuration (bsc#1191837)
  * 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1648468800">- Provide dummy firewalld-prometheus-config package (bsc#1197042)</changelog>
  <changelog author="sflees@suse.de" date="1652097600">- Fix regression introduced in previous patch (an api change to a
  function also needed backporting) (bsc#1198814)
  * feature-upstream-new-check-config-1.patch
  * feature-upstream-new-check-config-2.patch</changelog>
  <changelog author="mohd.saquib@suse.com" date="1673611200">- Fix firewall-offline-cmd fails with ERROR: Calling pre func
  Added following patch (bsc#1206928)
  [+ 0003-firewall-offline-cmd-fail-fix.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1689076800">- Fix firewalld does not longer understand IPv4 network masks
  of type `255.255.255.0`
  Added following patch (boo#1212974)
  [+ 0004-fix_rich_source_address_with_netmask.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1696334400">- update to v2.0.1 (jsc#PED-5597)
  * fix(cli): all --list-all-zones output identical (d30bc61)
  * fix(cli): properly show default zone attribute (ea8d9a8)
  * fix(cli): properly show active attribute for zones and policies (b202403)
  * fix(cli): --get-active-zones should include the default zone (dae9112)
  * fix(nftables): always flush main table on start (cd20981)
  * fix(runtimeToPermanent): deepcopy settings before mangling (9c53639)
  * docs: fix reference to lockdown-whitelist.xml in SYNOPSIS section (1c77205)
  * fix(firewall-config): escape markup stored in bindings store (c876fd0)
  * fix(tests): avoid deprecated assertRaisesRegexp for assertRaisesRegex (2935119)
  * fix(icmp): fix check_icmpv6_name() to use correct IPv6 names (af3c35b)
  * fix(ipset): fix configuring IP range for ipsets with nftables (6a050ec)
  * fix(ipset): fix configuring "timeout","maxelem" values for ipsets with nftables (7d3340c)
  * fix(core): fix exception while parsing invalid "tcp-mss-clamp" in policy (ff61209)
  * docs(policy): fix wrong documentation of in man firewalld.policy (21026d9)
  * Correct Requires, python3-slip-dbus -&gt; python3-dbus-python
  * This is a major release. The major version is being bumped symbolically
    to reflect significant changes done in commit f4d2b80 ("fix(policy):
    disallow zone drifting"). It does not contain any deliberate breaking changes
  * fix(reload): restore policy for old backend if it changed (de85849)
  * fix(io): rich: tcp mss: handle value=None (8016f10)
  * fix(firewall-config): rich: set destination address (f6641a9)
  * fix(policy): mixed IP families in ingress/egress (69ed4d6)
- removed following patches:
  [- 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch]
  [- 0003-firewall-offline-cmd-fail-fix.patch]
  [- 0004-fix_rich_source_address_with_netmask.patch]
  [- feature-upstream-new-check-config-1.patch]
  [- feature-upstream-new-check-config-2.patch]</changelog>
  <changelog author="davide.benini@suse.com" date="1730376000">- Fix for SG#69031, bsc#1231771:
  * 0001-fix-nftables-set-correctly-match-iifname-oifname.patch:
    [PATCH 1/2] fix(nftables): set: correctly match iifname/oifname
  * 0002-test-ipset-verify-match-with-iface.patch: [PATCH 2/2]
    test(ipset): verify match with iface</changelog>
  <changelog author="meissner@suse.com" date="1748001600">- added a python311 flavor</changelog>
</package>
<package pkgid="8a5b0a6d590e51cba594abd17e739a251a84767b297f7cc67b08a5058833566b" name="freeipmi" arch="src">
  <version epoch="0" ver="1.6.8" rel="150400.3.3.1"/>
  <changelog author="kkaempf@suse.com" date="1475582400">- Update to 1.5.4
  o Various changes/fixes in libipmiconsole
  - If user retrieves file descriptor from ipmiconsole_ctx_fd,
    user is required to close it.  ipmiconsole_ctx_destroy no
    longer closes it.  This is to avoid a potential double close
    which can be a problem for multithreaded applications. This
    is a change in behavior, but we do not believe this will
    affect most applications since most users close the file
    descriptor under most scenarios anyways.
  - ipmiconsole_ctx_destroy() should now be called to free
    resources even if ipmiconsole_engine_teardown() has been
    called.  This has been done to create consistent behavior in
    the API and avoid a former segfault possibility.  This is a
    change in behavior, but we do not believe this will affect
    most applications since ipmiconsole_engine_teardown() is
    only called when an application is being shutdown.
  - The use of IPMICONSOLE_ENGINE_CLOSE_FD has been clarified in
    the header file.  Some of the prior text was unclear.
    Behavior has not been changed.
  o In ipmi-oem, support Intel get-bmc-services and set-bmc-
    services commands.
  o In ipmi-oem, support Gigabyte get-nic-mode and set-nic-mode
    commands.
  o Support Gigabyte MD90-FS0-ZB OEM SEL events.</changelog>
  <changelog author="kkaempf@suse.com" date="1478174400">- Update to 1.5.5
  o Fix invalid flag clear in libipmiconsole that can lead to a potential
    double close on a file descriptor.
  o Support Supermicro H8SGL-F OEM sensors and events.</changelog>
  <changelog author="sfalken@opensuse.org" date="1489060800">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="kkaempf@suse.com" date="1499342400">- Update to 1.5.6
  o In libfreeipmi locate (used by ipmi-locate), use DMI firmware in
    sysfs if it exists.
  o Minor mem-leak corner case fix in libfreeipmi.
  o Minor documentation fixes.
  o Minor error message clarifications.</changelog>
  <changelog author="kkaempf@suse.com" date="1504094400">- Update to 1.5.7
  o In libipmimonitoring, fix several mem-leak corner cases.</changelog>
  <changelog author="alarrosa@suse.com" date="1508328000">- Follow the shared library packaging policy. Created new packages
  libipmiconsole2, libipmidetect0, libipmimonitoring6, libfreeipmi17</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kkaempf@suse.com" date="1517659200">- Update to 1.6.1
  o Add IPv6 hostname support to FreeIPMI, all of FreeIPMI can now take
    IPv6 addresses as inputs to "host" parameters, options, or inputs.
  o Support significant portions of IPMI IPv6 configuration in
    libfreeipmi.
  o Add --no-session option in ipmi-raw.
  o Add SDR cache options to ipmi-config.
  o Legacy -f short option for --flush-cache and -Q short option for
    quiet-cache.  Backwards compatible for tools that supported it
    before.
  o In ipmi-oem, support Gigabyte get-bmc-services and
    set-bmc-services.
  o Various performance improvements:
  - Remove excessive calls to secure_memset to clear memory.
  - Remove excessive memsets and clears of data.
  - Remove unnecessary "double input checks".
  - Remove expensive input checks in libfreeipmi fiid library.
    Fallout from this may include FIID_ERR_FIELD_NOT_FOUND
    errors in different fiid functions.
  - Remove unnecessary input checks in libfreeipmi fiid library.
  - Add recent 'lookups' of fields in fiid library to internal
    cache.
  o Various minor fixes/improvements
  - Update libfreeipmi core API to use poll() instead of select(), to
    avoid issues with applications with a high number of threads.
  - As a side point, while IPv6 networking support has been added, IPv6
    configuration in ipmi-config &amp; bmc-config is not supported in this
    release.</changelog>
  <changelog author="kkaempf@suse.com" date="1525435200">- Update to 1.6.2
  o Fix error in bridging where bridged requests were sent to the
    wrong LUN.
  o Fix command parsing bugs in legacy ipmi-config scripts
    (i.e. bmc-config, ipmi-pef-config, etc.)
  o Do not output full path of daemons in syslog, output only the
    daemon name (i.e. output "ipmidetected" instead of
    "/usr/sbin/ipmidetectd").
  o Update channel range from 0-7 to 0-11, per errata IPMI update.</changelog>
  <changelog author="josef.moellers@suse.com" date="1533124800">- Changed mode of .service files from 755 to 644.
  [bsc#1103311, 1103311-service-files-mode.patch]</changelog>
  <changelog author="trenn@suse.de" date="1535457600">- Enable build for aarch64 (fate#326605)</changelog>
  <changelog author="trenn@suse.de" date="1541764800">- Remove has_systemd conditions
- Add rcservice shortcut links to control services
- Fix some more build warnings
- Use %license instead of %doc where appropriate
- Extract ipmiseld service as a separate package as done with other
  services
- Declare /var/lib/freeipmi/ipckey as %ghost and do not create it
  explicitly in .spec file (bsc#1100124)</changelog>
  <changelog author="trenn@suse.de" date="1547208000">- Add provides:freeipmi:/usr/sbin/ipmiseld to the
  freeipmi-ipmiseld split package for backward compatibility
  for now</changelog>
  <changelog author="kkaempf@suse.com" date="1548417600">- Update to 1.6.3
  o In ipmi-locate, support parsing SPMI tables exported via sysfs.
  o Support Intel S2600GZ OEM sensor and SEL events.
  o Support Intel S2600WP OEM sensor and SEL events.
  o Support Gigabyte MG20-OP0-ZB OEM SEL events.
  o Fix DISCRETE_READING workaround in libipmimonitoring.
  o In libfreeipmi, add workaround for packets that are re-ordered
    during sensor bridging.
  o Minor bug fixes.
  o Various documentation updates/fixes.</changelog>
  <changelog author="kkaempf@suse.com" date="1566475200">- Update to 1.6.4
  o In libfreeipmi, add additional workarounds for packets that are
    re-ordered during sensor bridging.
  o In libfreeipmi, add additional sensor / event interpretations.
  o In libfreeipmi, fix error return value on bridging requests.
  o Add workaround in ipmi-sel for QuantaPlex T42D-2U motherboard,
    whichlists a SDR record that makes no sense.
  o Add workaround for Dell Poweredge FC830, which have an error
    when reading the last SDR record on a motherboard.
  o Support Supermicro X10 OEM dimm events.</changelog>
  <changelog author="kkaempf@suse.com" date="1590148800">- Update to 1.6.5
  o Add FRU parsing workaround for Fujitsu Primergy RX1330, in which a
    CEh is used to indicate that no FRU data is available.
  o Misc minor fixes.</changelog>
  <changelog author="kkaempf@suse.com" date="1599393600">- Update to 1.6.6
  o In libfreeipmi, fix segfault in SPMI parsing leading to immediate
    failures on some hardware across all tools.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1613304000">- freeipmi 1.6.7:
  * Do not require IPMI access when running ipmi-fru with the
  - -fru-file option
  * Minor documentation updates
- the following fixes were upstreamed:
  * Fix default permissions of various config and system files,
    drop 1103311-service-files-mode.patch</changelog>
  <changelog author="trenn@suse.de" date="1625745600">- Fix: W: name-repeated-in-summary C FreeIPMI
- Fix: freeipmi-bmc-watchdog.x86_64:
  W: non-etc-or-var-file-marked-as-conffile /usr/share/fillup-templates/sysconfig.bmc-watchdog
  Declaring fillup files as conffile is not needed
- freeipmi 1.6.8</changelog>
  <changelog author="trenn@suse.de" date="1777032000">- bsc#1260414 - CVE-2026-33554:
  freeipmi: improper memory handling and data validation can lead
  A ipmi-oem-fix-several-memory-out-of-bounds-errors.patch</changelog>
</package>
<package pkgid="7d7b1197a1874cfe93563d28b3df8edb455273c2dc2803ccc1ecd9e8ca476ea1" name="freeipmi" arch="x86_64">
  <version epoch="0" ver="1.6.8" rel="150400.3.3.1"/>
  <changelog author="kkaempf@suse.com" date="1475582400">- Update to 1.5.4
  o Various changes/fixes in libipmiconsole
  - If user retrieves file descriptor from ipmiconsole_ctx_fd,
    user is required to close it.  ipmiconsole_ctx_destroy no
    longer closes it.  This is to avoid a potential double close
    which can be a problem for multithreaded applications. This
    is a change in behavior, but we do not believe this will
    affect most applications since most users close the file
    descriptor under most scenarios anyways.
  - ipmiconsole_ctx_destroy() should now be called to free
    resources even if ipmiconsole_engine_teardown() has been
    called.  This has been done to create consistent behavior in
    the API and avoid a former segfault possibility.  This is a
    change in behavior, but we do not believe this will affect
    most applications since ipmiconsole_engine_teardown() is
    only called when an application is being shutdown.
  - The use of IPMICONSOLE_ENGINE_CLOSE_FD has been clarified in
    the header file.  Some of the prior text was unclear.
    Behavior has not been changed.
  o In ipmi-oem, support Intel get-bmc-services and set-bmc-
    services commands.
  o In ipmi-oem, support Gigabyte get-nic-mode and set-nic-mode
    commands.
  o Support Gigabyte MD90-FS0-ZB OEM SEL events.</changelog>
  <changelog author="kkaempf@suse.com" date="1478174400">- Update to 1.5.5
  o Fix invalid flag clear in libipmiconsole that can lead to a potential
    double close on a file descriptor.
  o Support Supermicro H8SGL-F OEM sensors and events.</changelog>
  <changelog author="sfalken@opensuse.org" date="1489060800">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="kkaempf@suse.com" date="1499342400">- Update to 1.5.6
  o In libfreeipmi locate (used by ipmi-locate), use DMI firmware in
    sysfs if it exists.
  o Minor mem-leak corner case fix in libfreeipmi.
  o Minor documentation fixes.
  o Minor error message clarifications.</changelog>
  <changelog author="kkaempf@suse.com" date="1504094400">- Update to 1.5.7
  o In libipmimonitoring, fix several mem-leak corner cases.</changelog>
  <changelog author="alarrosa@suse.com" date="1508328000">- Follow the shared library packaging policy. Created new packages
  libipmiconsole2, libipmidetect0, libipmimonitoring6, libfreeipmi17</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kkaempf@suse.com" date="1517659200">- Update to 1.6.1
  o Add IPv6 hostname support to FreeIPMI, all of FreeIPMI can now take
    IPv6 addresses as inputs to "host" parameters, options, or inputs.
  o Support significant portions of IPMI IPv6 configuration in
    libfreeipmi.
  o Add --no-session option in ipmi-raw.
  o Add SDR cache options to ipmi-config.
  o Legacy -f short option for --flush-cache and -Q short option for
    quiet-cache.  Backwards compatible for tools that supported it
    before.
  o In ipmi-oem, support Gigabyte get-bmc-services and
    set-bmc-services.
  o Various performance improvements:
  - Remove excessive calls to secure_memset to clear memory.
  - Remove excessive memsets and clears of data.
  - Remove unnecessary "double input checks".
  - Remove expensive input checks in libfreeipmi fiid library.
    Fallout from this may include FIID_ERR_FIELD_NOT_FOUND
    errors in different fiid functions.
  - Remove unnecessary input checks in libfreeipmi fiid library.
  - Add recent 'lookups' of fields in fiid library to internal
    cache.
  o Various minor fixes/improvements
  - Update libfreeipmi core API to use poll() instead of select(), to
    avoid issues with applications with a high number of threads.
  - As a side point, while IPv6 networking support has been added, IPv6
    configuration in ipmi-config &amp; bmc-config is not supported in this
    release.</changelog>
  <changelog author="kkaempf@suse.com" date="1525435200">- Update to 1.6.2
  o Fix error in bridging where bridged requests were sent to the
    wrong LUN.
  o Fix command parsing bugs in legacy ipmi-config scripts
    (i.e. bmc-config, ipmi-pef-config, etc.)
  o Do not output full path of daemons in syslog, output only the
    daemon name (i.e. output "ipmidetected" instead of
    "/usr/sbin/ipmidetectd").
  o Update channel range from 0-7 to 0-11, per errata IPMI update.</changelog>
  <changelog author="josef.moellers@suse.com" date="1533124800">- Changed mode of .service files from 755 to 644.
  [bsc#1103311, 1103311-service-files-mode.patch]</changelog>
  <changelog author="trenn@suse.de" date="1535457600">- Enable build for aarch64 (fate#326605)</changelog>
  <changelog author="trenn@suse.de" date="1541764800">- Remove has_systemd conditions
- Add rcservice shortcut links to control services
- Fix some more build warnings
- Use %license instead of %doc where appropriate
- Extract ipmiseld service as a separate package as done with other
  services
- Declare /var/lib/freeipmi/ipckey as %ghost and do not create it
  explicitly in .spec file (bsc#1100124)</changelog>
  <changelog author="trenn@suse.de" date="1547208000">- Add provides:freeipmi:/usr/sbin/ipmiseld to the
  freeipmi-ipmiseld split package for backward compatibility
  for now</changelog>
  <changelog author="kkaempf@suse.com" date="1548417600">- Update to 1.6.3
  o In ipmi-locate, support parsing SPMI tables exported via sysfs.
  o Support Intel S2600GZ OEM sensor and SEL events.
  o Support Intel S2600WP OEM sensor and SEL events.
  o Support Gigabyte MG20-OP0-ZB OEM SEL events.
  o Fix DISCRETE_READING workaround in libipmimonitoring.
  o In libfreeipmi, add workaround for packets that are re-ordered
    during sensor bridging.
  o Minor bug fixes.
  o Various documentation updates/fixes.</changelog>
  <changelog author="kkaempf@suse.com" date="1566475200">- Update to 1.6.4
  o In libfreeipmi, add additional workarounds for packets that are
    re-ordered during sensor bridging.
  o In libfreeipmi, add additional sensor / event interpretations.
  o In libfreeipmi, fix error return value on bridging requests.
  o Add workaround in ipmi-sel for QuantaPlex T42D-2U motherboard,
    whichlists a SDR record that makes no sense.
  o Add workaround for Dell Poweredge FC830, which have an error
    when reading the last SDR record on a motherboard.
  o Support Supermicro X10 OEM dimm events.</changelog>
  <changelog author="kkaempf@suse.com" date="1590148800">- Update to 1.6.5
  o Add FRU parsing workaround for Fujitsu Primergy RX1330, in which a
    CEh is used to indicate that no FRU data is available.
  o Misc minor fixes.</changelog>
  <changelog author="kkaempf@suse.com" date="1599393600">- Update to 1.6.6
  o In libfreeipmi, fix segfault in SPMI parsing leading to immediate
    failures on some hardware across all tools.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1613304000">- freeipmi 1.6.7:
  * Do not require IPMI access when running ipmi-fru with the
  - -fru-file option
  * Minor documentation updates
- the following fixes were upstreamed:
  * Fix default permissions of various config and system files,
    drop 1103311-service-files-mode.patch</changelog>
  <changelog author="trenn@suse.de" date="1625745600">- Fix: W: name-repeated-in-summary C FreeIPMI
- Fix: freeipmi-bmc-watchdog.x86_64:
  W: non-etc-or-var-file-marked-as-conffile /usr/share/fillup-templates/sysconfig.bmc-watchdog
  Declaring fillup files as conffile is not needed
- freeipmi 1.6.8</changelog>
  <changelog author="trenn@suse.de" date="1777032000">- bsc#1260414 - CVE-2026-33554:
  freeipmi: improper memory handling and data validation can lead
  A ipmi-oem-fix-several-memory-out-of-bounds-errors.patch</changelog>
</package>
<package pkgid="728dbfe02e90157d11a0b2ebe3bf71f22c403e863ccb9deb2397d7923c201607" name="freeipmi-devel" arch="x86_64">
  <version epoch="0" ver="1.6.8" rel="150400.3.3.1"/>
  <changelog author="kkaempf@suse.com" date="1475582400">- Update to 1.5.4
  o Various changes/fixes in libipmiconsole
  - If user retrieves file descriptor from ipmiconsole_ctx_fd,
    user is required to close it.  ipmiconsole_ctx_destroy no
    longer closes it.  This is to avoid a potential double close
    which can be a problem for multithreaded applications. This
    is a change in behavior, but we do not believe this will
    affect most applications since most users close the file
    descriptor under most scenarios anyways.
  - ipmiconsole_ctx_destroy() should now be called to free
    resources even if ipmiconsole_engine_teardown() has been
    called.  This has been done to create consistent behavior in
    the API and avoid a former segfault possibility.  This is a
    change in behavior, but we do not believe this will affect
    most applications since ipmiconsole_engine_teardown() is
    only called when an application is being shutdown.
  - The use of IPMICONSOLE_ENGINE_CLOSE_FD has been clarified in
    the header file.  Some of the prior text was unclear.
    Behavior has not been changed.
  o In ipmi-oem, support Intel get-bmc-services and set-bmc-
    services commands.
  o In ipmi-oem, support Gigabyte get-nic-mode and set-nic-mode
    commands.
  o Support Gigabyte MD90-FS0-ZB OEM SEL events.</changelog>
  <changelog author="kkaempf@suse.com" date="1478174400">- Update to 1.5.5
  o Fix invalid flag clear in libipmiconsole that can lead to a potential
    double close on a file descriptor.
  o Support Supermicro H8SGL-F OEM sensors and events.</changelog>
  <changelog author="sfalken@opensuse.org" date="1489060800">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="kkaempf@suse.com" date="1499342400">- Update to 1.5.6
  o In libfreeipmi locate (used by ipmi-locate), use DMI firmware in
    sysfs if it exists.
  o Minor mem-leak corner case fix in libfreeipmi.
  o Minor documentation fixes.
  o Minor error message clarifications.</changelog>
  <changelog author="kkaempf@suse.com" date="1504094400">- Update to 1.5.7
  o In libipmimonitoring, fix several mem-leak corner cases.</changelog>
  <changelog author="alarrosa@suse.com" date="1508328000">- Follow the shared library packaging policy. Created new packages
  libipmiconsole2, libipmidetect0, libipmimonitoring6, libfreeipmi17</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kkaempf@suse.com" date="1517659200">- Update to 1.6.1
  o Add IPv6 hostname support to FreeIPMI, all of FreeIPMI can now take
    IPv6 addresses as inputs to "host" parameters, options, or inputs.
  o Support significant portions of IPMI IPv6 configuration in
    libfreeipmi.
  o Add --no-session option in ipmi-raw.
  o Add SDR cache options to ipmi-config.
  o Legacy -f short option for --flush-cache and -Q short option for
    quiet-cache.  Backwards compatible for tools that supported it
    before.
  o In ipmi-oem, support Gigabyte get-bmc-services and
    set-bmc-services.
  o Various performance improvements:
  - Remove excessive calls to secure_memset to clear memory.
  - Remove excessive memsets and clears of data.
  - Remove unnecessary "double input checks".
  - Remove expensive input checks in libfreeipmi fiid library.
    Fallout from this may include FIID_ERR_FIELD_NOT_FOUND
    errors in different fiid functions.
  - Remove unnecessary input checks in libfreeipmi fiid library.
  - Add recent 'lookups' of fields in fiid library to internal
    cache.
  o Various minor fixes/improvements
  - Update libfreeipmi core API to use poll() instead of select(), to
    avoid issues with applications with a high number of threads.
  - As a side point, while IPv6 networking support has been added, IPv6
    configuration in ipmi-config &amp; bmc-config is not supported in this
    release.</changelog>
  <changelog author="kkaempf@suse.com" date="1525435200">- Update to 1.6.2
  o Fix error in bridging where bridged requests were sent to the
    wrong LUN.
  o Fix command parsing bugs in legacy ipmi-config scripts
    (i.e. bmc-config, ipmi-pef-config, etc.)
  o Do not output full path of daemons in syslog, output only the
    daemon name (i.e. output "ipmidetected" instead of
    "/usr/sbin/ipmidetectd").
  o Update channel range from 0-7 to 0-11, per errata IPMI update.</changelog>
  <changelog author="josef.moellers@suse.com" date="1533124800">- Changed mode of .service files from 755 to 644.
  [bsc#1103311, 1103311-service-files-mode.patch]</changelog>
  <changelog author="trenn@suse.de" date="1535457600">- Enable build for aarch64 (fate#326605)</changelog>
  <changelog author="trenn@suse.de" date="1541764800">- Remove has_systemd conditions
- Add rcservice shortcut links to control services
- Fix some more build warnings
- Use %license instead of %doc where appropriate
- Extract ipmiseld service as a separate package as done with other
  services
- Declare /var/lib/freeipmi/ipckey as %ghost and do not create it
  explicitly in .spec file (bsc#1100124)</changelog>
  <changelog author="trenn@suse.de" date="1547208000">- Add provides:freeipmi:/usr/sbin/ipmiseld to the
  freeipmi-ipmiseld split package for backward compatibility
  for now</changelog>
  <changelog author="kkaempf@suse.com" date="1548417600">- Update to 1.6.3
  o In ipmi-locate, support parsing SPMI tables exported via sysfs.
  o Support Intel S2600GZ OEM sensor and SEL events.
  o Support Intel S2600WP OEM sensor and SEL events.
  o Support Gigabyte MG20-OP0-ZB OEM SEL events.
  o Fix DISCRETE_READING workaround in libipmimonitoring.
  o In libfreeipmi, add workaround for packets that are re-ordered
    during sensor bridging.
  o Minor bug fixes.
  o Various documentation updates/fixes.</changelog>
  <changelog author="kkaempf@suse.com" date="1566475200">- Update to 1.6.4
  o In libfreeipmi, add additional workarounds for packets that are
    re-ordered during sensor bridging.
  o In libfreeipmi, add additional sensor / event interpretations.
  o In libfreeipmi, fix error return value on bridging requests.
  o Add workaround in ipmi-sel for QuantaPlex T42D-2U motherboard,
    whichlists a SDR record that makes no sense.
  o Add workaround for Dell Poweredge FC830, which have an error
    when reading the last SDR record on a motherboard.
  o Support Supermicro X10 OEM dimm events.</changelog>
  <changelog author="kkaempf@suse.com" date="1590148800">- Update to 1.6.5
  o Add FRU parsing workaround for Fujitsu Primergy RX1330, in which a
    CEh is used to indicate that no FRU data is available.
  o Misc minor fixes.</changelog>
  <changelog author="kkaempf@suse.com" date="1599393600">- Update to 1.6.6
  o In libfreeipmi, fix segfault in SPMI parsing leading to immediate
    failures on some hardware across all tools.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1613304000">- freeipmi 1.6.7:
  * Do not require IPMI access when running ipmi-fru with the
  - -fru-file option
  * Minor documentation updates
- the following fixes were upstreamed:
  * Fix default permissions of various config and system files,
    drop 1103311-service-files-mode.patch</changelog>
  <changelog author="trenn@suse.de" date="1625745600">- Fix: W: name-repeated-in-summary C FreeIPMI
- Fix: freeipmi-bmc-watchdog.x86_64:
  W: non-etc-or-var-file-marked-as-conffile /usr/share/fillup-templates/sysconfig.bmc-watchdog
  Declaring fillup files as conffile is not needed
- freeipmi 1.6.8</changelog>
  <changelog author="trenn@suse.de" date="1777032000">- bsc#1260414 - CVE-2026-33554:
  freeipmi: improper memory handling and data validation can lead
  A ipmi-oem-fix-several-memory-out-of-bounds-errors.patch</changelog>
</package>
<package pkgid="97e045e3f3c8e4855a8bd44bacf5668d153a81c29642b32264385b28ca2e4cf6" name="freeipmi-ipmiseld" arch="x86_64">
  <version epoch="0" ver="1.6.8" rel="150400.3.3.1"/>
  <changelog author="kkaempf@suse.com" date="1475582400">- Update to 1.5.4
  o Various changes/fixes in libipmiconsole
  - If user retrieves file descriptor from ipmiconsole_ctx_fd,
    user is required to close it.  ipmiconsole_ctx_destroy no
    longer closes it.  This is to avoid a potential double close
    which can be a problem for multithreaded applications. This
    is a change in behavior, but we do not believe this will
    affect most applications since most users close the file
    descriptor under most scenarios anyways.
  - ipmiconsole_ctx_destroy() should now be called to free
    resources even if ipmiconsole_engine_teardown() has been
    called.  This has been done to create consistent behavior in
    the API and avoid a former segfault possibility.  This is a
    change in behavior, but we do not believe this will affect
    most applications since ipmiconsole_engine_teardown() is
    only called when an application is being shutdown.
  - The use of IPMICONSOLE_ENGINE_CLOSE_FD has been clarified in
    the header file.  Some of the prior text was unclear.
    Behavior has not been changed.
  o In ipmi-oem, support Intel get-bmc-services and set-bmc-
    services commands.
  o In ipmi-oem, support Gigabyte get-nic-mode and set-nic-mode
    commands.
  o Support Gigabyte MD90-FS0-ZB OEM SEL events.</changelog>
  <changelog author="kkaempf@suse.com" date="1478174400">- Update to 1.5.5
  o Fix invalid flag clear in libipmiconsole that can lead to a potential
    double close on a file descriptor.
  o Support Supermicro H8SGL-F OEM sensors and events.</changelog>
  <changelog author="sfalken@opensuse.org" date="1489060800">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="kkaempf@suse.com" date="1499342400">- Update to 1.5.6
  o In libfreeipmi locate (used by ipmi-locate), use DMI firmware in
    sysfs if it exists.
  o Minor mem-leak corner case fix in libfreeipmi.
  o Minor documentation fixes.
  o Minor error message clarifications.</changelog>
  <changelog author="kkaempf@suse.com" date="1504094400">- Update to 1.5.7
  o In libipmimonitoring, fix several mem-leak corner cases.</changelog>
  <changelog author="alarrosa@suse.com" date="1508328000">- Follow the shared library packaging policy. Created new packages
  libipmiconsole2, libipmidetect0, libipmimonitoring6, libfreeipmi17</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kkaempf@suse.com" date="1517659200">- Update to 1.6.1
  o Add IPv6 hostname support to FreeIPMI, all of FreeIPMI can now take
    IPv6 addresses as inputs to "host" parameters, options, or inputs.
  o Support significant portions of IPMI IPv6 configuration in
    libfreeipmi.
  o Add --no-session option in ipmi-raw.
  o Add SDR cache options to ipmi-config.
  o Legacy -f short option for --flush-cache and -Q short option for
    quiet-cache.  Backwards compatible for tools that supported it
    before.
  o In ipmi-oem, support Gigabyte get-bmc-services and
    set-bmc-services.
  o Various performance improvements:
  - Remove excessive calls to secure_memset to clear memory.
  - Remove excessive memsets and clears of data.
  - Remove unnecessary "double input checks".
  - Remove expensive input checks in libfreeipmi fiid library.
    Fallout from this may include FIID_ERR_FIELD_NOT_FOUND
    errors in different fiid functions.
  - Remove unnecessary input checks in libfreeipmi fiid library.
  - Add recent 'lookups' of fields in fiid library to internal
    cache.
  o Various minor fixes/improvements
  - Update libfreeipmi core API to use poll() instead of select(), to
    avoid issues with applications with a high number of threads.
  - As a side point, while IPv6 networking support has been added, IPv6
    configuration in ipmi-config &amp; bmc-config is not supported in this
    release.</changelog>
  <changelog author="kkaempf@suse.com" date="1525435200">- Update to 1.6.2
  o Fix error in bridging where bridged requests were sent to the
    wrong LUN.
  o Fix command parsing bugs in legacy ipmi-config scripts
    (i.e. bmc-config, ipmi-pef-config, etc.)
  o Do not output full path of daemons in syslog, output only the
    daemon name (i.e. output "ipmidetected" instead of
    "/usr/sbin/ipmidetectd").
  o Update channel range from 0-7 to 0-11, per errata IPMI update.</changelog>
  <changelog author="josef.moellers@suse.com" date="1533124800">- Changed mode of .service files from 755 to 644.
  [bsc#1103311, 1103311-service-files-mode.patch]</changelog>
  <changelog author="trenn@suse.de" date="1535457600">- Enable build for aarch64 (fate#326605)</changelog>
  <changelog author="trenn@suse.de" date="1541764800">- Remove has_systemd conditions
- Add rcservice shortcut links to control services
- Fix some more build warnings
- Use %license instead of %doc where appropriate
- Extract ipmiseld service as a separate package as done with other
  services
- Declare /var/lib/freeipmi/ipckey as %ghost and do not create it
  explicitly in .spec file (bsc#1100124)</changelog>
  <changelog author="trenn@suse.de" date="1547208000">- Add provides:freeipmi:/usr/sbin/ipmiseld to the
  freeipmi-ipmiseld split package for backward compatibility
  for now</changelog>
  <changelog author="kkaempf@suse.com" date="1548417600">- Update to 1.6.3
  o In ipmi-locate, support parsing SPMI tables exported via sysfs.
  o Support Intel S2600GZ OEM sensor and SEL events.
  o Support Intel S2600WP OEM sensor and SEL events.
  o Support Gigabyte MG20-OP0-ZB OEM SEL events.
  o Fix DISCRETE_READING workaround in libipmimonitoring.
  o In libfreeipmi, add workaround for packets that are re-ordered
    during sensor bridging.
  o Minor bug fixes.
  o Various documentation updates/fixes.</changelog>
  <changelog author="kkaempf@suse.com" date="1566475200">- Update to 1.6.4
  o In libfreeipmi, add additional workarounds for packets that are
    re-ordered during sensor bridging.
  o In libfreeipmi, add additional sensor / event interpretations.
  o In libfreeipmi, fix error return value on bridging requests.
  o Add workaround in ipmi-sel for QuantaPlex T42D-2U motherboard,
    whichlists a SDR record that makes no sense.
  o Add workaround for Dell Poweredge FC830, which have an error
    when reading the last SDR record on a motherboard.
  o Support Supermicro X10 OEM dimm events.</changelog>
  <changelog author="kkaempf@suse.com" date="1590148800">- Update to 1.6.5
  o Add FRU parsing workaround for Fujitsu Primergy RX1330, in which a
    CEh is used to indicate that no FRU data is available.
  o Misc minor fixes.</changelog>
  <changelog author="kkaempf@suse.com" date="1599393600">- Update to 1.6.6
  o In libfreeipmi, fix segfault in SPMI parsing leading to immediate
    failures on some hardware across all tools.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1613304000">- freeipmi 1.6.7:
  * Do not require IPMI access when running ipmi-fru with the
  - -fru-file option
  * Minor documentation updates
- the following fixes were upstreamed:
  * Fix default permissions of various config and system files,
    drop 1103311-service-files-mode.patch</changelog>
  <changelog author="trenn@suse.de" date="1625745600">- Fix: W: name-repeated-in-summary C FreeIPMI
- Fix: freeipmi-bmc-watchdog.x86_64:
  W: non-etc-or-var-file-marked-as-conffile /usr/share/fillup-templates/sysconfig.bmc-watchdog
  Declaring fillup files as conffile is not needed
- freeipmi 1.6.8</changelog>
  <changelog author="trenn@suse.de" date="1777032000">- bsc#1260414 - CVE-2026-33554:
  freeipmi: improper memory handling and data validation can lead
  A ipmi-oem-fix-several-memory-out-of-bounds-errors.patch</changelog>
</package>
<package pkgid="1b8d81695e505a2e16948aa7514abda40d411f160eec26ff1bee41ceaf8cfdba" name="freetype2" arch="src">
  <version epoch="0" ver="2.10.4" rel="150000.4.25.1"/>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * Advance width values of variation fonts were often wrong.
  * More fixes for variation font support; you should update to
    this version if you want to support them.
  * As a GSoC project, Ewald Hew extended the new (Adobe) CFF
    engine to handle Type 1 fonts also, thus greatly improving
    the rendering of this format. This is the new default.
  * A new function, `FT_Set_Named_Instance', can be used to set
    or change the current named instance.
  * Starting with this FreeType version, resetting variation
    coordinates will return to the currently selected named
    instance. Previously, FreeType returned to the base font
    (i.e., no instance set).
  * Some fuzzer fixes to better reject malformed fonts.</changelog>
  <changelog author="idonmez@suse.com" date="1515585600">- Add psaux-flex.patch to fix a regression in Type1 rendering</changelog>
  <changelog author="fstrba@suse.com" date="1518004800">- Added patches:
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
    + Upstream fix for bsc#1079603: Avoid NULL reference in
    src/truetype/ttinterp.c
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch
    + Upstream fix for bsc#1079601: Protection against invalid VF
    data</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Added patch:
  * enable-long-family-names-by-default.patch
    + Define PCF_CONFIG_OPTION_LONG_FAMILY_NAMES to obtain 2.7.1
    behaviour</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520337600">- Refresh spec-file via spec-cleaner.
- Add shell script freetype2.sh in separate package
  freetype2-profile-tti35 in order to be able to set TrueType
  interpreter version 35 (boo#1084085).</changelog>
  <changelog author="kbabioch@suse.com" date="1520510400">- Add bnc1079600.patch: Fix several integer overflow issues in
  truetype/ttinterp.c (bsc#1079600)</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * Type 1 fonts containing flex features were not rendered
    correctly (bug introduced in version 2.9).
  * CVE-2018-6942: Older FreeType versions can crash with certain
    malformed variation fonts.
  * Bug fix: Multiple calls to `FT_Get_MM_Var' returned garbage.
  * Emboldening of bitmaps didn't work correctly sometimes, showing
    various artifacts (bug introduced in version 2.8.1).
  * The auto-hinter script ranges have  been updated for Unicode 11.
    No support for new scripts have been added, however,  with the
    exception of Georgian Mtavruli.
- freetype-config is now deprecated by upstream and not enabled
  by default.
- Drop upstreamed patches:
  * bnc1079600.patch
  * psaux-flex.patch
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch</changelog>
  <changelog author="idonmez@suse.com" date="1526299200">- Re-enable freetype-config, there is just too many fallouts.</changelog>
  <changelog author="idonmez@suse.com" date="1540641600">- Remove old ppc64 parts in spec file
- Refresh patches:
  + bugzilla-308961-cmex-workaround.patch
  + don-t-mark-libpng-as-required-library.patch
  + enable-long-family-names-by-default.patch
- Enable subpixel rendering with infinality config:
  + enable-subpixel-rendering.patch
  + enable-infinality-subpixel-hinting.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * A bunch of new functions has been added to access and process
    COLR/CPAL data of OpenType fonts with color-layered glyphs.
  * As a GSoC 2018 project, Nikhil Ramakrishnan completely
    overhauled and modernized the API reference.
  * The logic for computing the global ascender, descender, and
    height of OpenType fonts has been slightly adjusted for
    consistency.
  * `TT_Set_MM_Blend' could fail if called repeatedly with the same
    arguments.
  * The precision of handling deltas in Variation Fonts has been
    increased.The problem did only show up with multidimensional
    designspaces.
  * New function `FT_Library_SetLcdGeometry' to set up the geometry
    of LCD subpixels.
  * FreeType now uses the `defaultChar' property of PCF fonts to set
    the  glyph for  the undefined  character  at glyph  index 0  (as
    FreeType already does for all other supported font formats).  As
    a consequence, the order of glyphs of a PCF font if accessed
    with  FreeType can be different now compared to previous
    versions.
    This change doesn't affect PCF font access with cmaps.
  * `FT_Select_Charmap' has been changed to allow  parameter value
    `FT_ENCODING_NONE', which is valid for BDF, PCF, and Windows FNT
    formats to access built-in cmaps that don't have a predefined
    `FT_Encoding' value.
  * A previously reserved field in the `FT_GlyphSlotRec' structure
    now holds the glyph index.
  * The usual round of fuzzer bug fixes to better reject malformed
    fonts.
  * `FT_Outline_New_Internal' and `FT_Outline_Done_Internal' have
    been removed.These two functions were public by oversight only
    and were never documented.
  * A new function `FT_Error_String' returns descriptions of error
    codes if configuration macro FT_CONFIG_OPTION_ERROR_STRINGS is
    defined.
  * `FT_Set_MM_WeightVector' and `FT_Get_MM_WeightVector' are new
    functions limited to Adobe MultiMaster fonts to directly set and
    get the weight vector.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The bytecode hinting of OpenType variation fonts was flawed, since
    the data in the `CVAR' table wasn't correctly applied.
  * Auto-hinter support for Mongolian.
  * The handling of  the default character in PCF fonts as  introduced
    in version 2.10.0 was partially broken, causing premature abortion
    of charmap iteration for many fonts.
  * If  `FT_Set_Named_Instance' was  called  with  the same  arguments
    twice in a row, the function  returned an incorrect error code the
    second time.
  * Direct   rendering   using  FT_RASTER_FLAG_DIRECT   crashed   (bug
    introduced in version 2.10.0).
  * Increased  precision  while  computing  OpenType  font   variation
    instances.
  * The  flattening  algorithm of  cubic  Bezier  curves was  slightly
    changed to make  it faster.  This can cause  very subtle rendering
    changes, which aren't noticeable by the eye, however.
  * The  auto-hinter  now  disables hinting  if there  are blue  zones
    defined for a `style' (i.e., a certain combination of a script and
    its related typographic features) but the font doesn't contain any
    characters needed to set up at least one blue zone.
- Add tarball signatures and freetype2.keyring</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1570622400">- Use the compiler default C std, since 2012 gcc defaults
  have changed, we now only need to get rid of ANSIFLAGS, override
  that variable instead.</changelog>
  <changelog author="idonmez@suse.com" date="1589025600">- Update to version 2.10.2
  * Support for WOFF2 fonts, add BR on pkgconfig(libbrotlidec)
  * Function `FT_Get_Var_Axis_Flags' returned random data for Type 1
    MM fonts.
  * Type 1 fonts with non-integer metrics are now supported by the new
    (CFF) engine introduced in FreeType 2.9.
  * Drop support for Python 2 in Freetype's API reference generator
  * Auto-hinter support for Hanifi Rohingya
  * Document the `FT2_KEEP_ALIVE' debugging environment variable.</changelog>
  <changelog author="idonmez@suse.com" date="1603195200">- Update to version 2.10.4
  * Fix a heap buffer overflow has been found  in the handling of
    embedded PNG bitmaps, introduced in FreeType version 2.6
    (CVE-2020-15999 bsc#1177914)
  * Minor improvements to the B/W rasterizer.
  * Auto-hinter support for Medefaidrin script.
  * Fix various  memory leaks (mainly  for CFF) and other  issues that
    might cause crashes in rare circumstances.</changelog>
  <changelog author="fstrba@suse.com" date="1661256000">- Added patches:
  * CVE-2022-27404.patch
    + fixes bsc#1198830, CVE-2022-27404: Buffer Overflow
  * CVE-2022-27405.patch
    + fixes bsc#1198832, CVE-2022-27405: Segmentation Fault
  * CVE-2022-27406.patch
    + fixes bsc#1198823, CVE-2022-27406: Segmentation violation</changelog>
  <changelog author="meissner@suse.com" date="1661947200">- disable brotli linkage / WOFF2 support for now to keep dependencies
  as before.</changelog>
  <changelog author="fstrba@suse.com" date="1692705600">- Added patch:
  * CVE-2023-2004.patch
    + fixes bsc#1210419, CVE-2023-2004: Integer overflow</changelog>
  <changelog author="fstrba@suse.com" date="1742212800">- Added patch:
  * CVE-2025-27363.patch
    + fixes bsc#1239465, CVE-2025-27363: out-of-bounds write when
    attempting to parse font subglyph structures related to
    TrueType GX and variable font files</changelog>
  <changelog author="dmueller@suse.com" date="1745409600">- enable brotli support (jsc#PED-12258)</changelog>
  <changelog author="pgajdos@suse.com" date="1762430400">- package FTL.TXT and GPLv2.TXT as %license [bsc#1252148]</changelog>
</package>
<package pkgid="ff3ffc011c298443785eba7807708fae902cf881a7251f0f6cae20ebdd8bd5ef" name="freetype2-devel" arch="x86_64">
  <version epoch="0" ver="2.10.4" rel="150000.4.25.1"/>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * Advance width values of variation fonts were often wrong.
  * More fixes for variation font support; you should update to
    this version if you want to support them.
  * As a GSoC project, Ewald Hew extended the new (Adobe) CFF
    engine to handle Type 1 fonts also, thus greatly improving
    the rendering of this format. This is the new default.
  * A new function, `FT_Set_Named_Instance', can be used to set
    or change the current named instance.
  * Starting with this FreeType version, resetting variation
    coordinates will return to the currently selected named
    instance. Previously, FreeType returned to the base font
    (i.e., no instance set).
  * Some fuzzer fixes to better reject malformed fonts.</changelog>
  <changelog author="idonmez@suse.com" date="1515585600">- Add psaux-flex.patch to fix a regression in Type1 rendering</changelog>
  <changelog author="fstrba@suse.com" date="1518004800">- Added patches:
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
    + Upstream fix for bsc#1079603: Avoid NULL reference in
    src/truetype/ttinterp.c
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch
    + Upstream fix for bsc#1079601: Protection against invalid VF
    data</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Added patch:
  * enable-long-family-names-by-default.patch
    + Define PCF_CONFIG_OPTION_LONG_FAMILY_NAMES to obtain 2.7.1
    behaviour</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520337600">- Refresh spec-file via spec-cleaner.
- Add shell script freetype2.sh in separate package
  freetype2-profile-tti35 in order to be able to set TrueType
  interpreter version 35 (boo#1084085).</changelog>
  <changelog author="kbabioch@suse.com" date="1520510400">- Add bnc1079600.patch: Fix several integer overflow issues in
  truetype/ttinterp.c (bsc#1079600)</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * Type 1 fonts containing flex features were not rendered
    correctly (bug introduced in version 2.9).
  * CVE-2018-6942: Older FreeType versions can crash with certain
    malformed variation fonts.
  * Bug fix: Multiple calls to `FT_Get_MM_Var' returned garbage.
  * Emboldening of bitmaps didn't work correctly sometimes, showing
    various artifacts (bug introduced in version 2.8.1).
  * The auto-hinter script ranges have  been updated for Unicode 11.
    No support for new scripts have been added, however,  with the
    exception of Georgian Mtavruli.
- freetype-config is now deprecated by upstream and not enabled
  by default.
- Drop upstreamed patches:
  * bnc1079600.patch
  * psaux-flex.patch
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch</changelog>
  <changelog author="idonmez@suse.com" date="1526299200">- Re-enable freetype-config, there is just too many fallouts.</changelog>
  <changelog author="idonmez@suse.com" date="1540641600">- Remove old ppc64 parts in spec file
- Refresh patches:
  + bugzilla-308961-cmex-workaround.patch
  + don-t-mark-libpng-as-required-library.patch
  + enable-long-family-names-by-default.patch
- Enable subpixel rendering with infinality config:
  + enable-subpixel-rendering.patch
  + enable-infinality-subpixel-hinting.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * A bunch of new functions has been added to access and process
    COLR/CPAL data of OpenType fonts with color-layered glyphs.
  * As a GSoC 2018 project, Nikhil Ramakrishnan completely
    overhauled and modernized the API reference.
  * The logic for computing the global ascender, descender, and
    height of OpenType fonts has been slightly adjusted for
    consistency.
  * `TT_Set_MM_Blend' could fail if called repeatedly with the same
    arguments.
  * The precision of handling deltas in Variation Fonts has been
    increased.The problem did only show up with multidimensional
    designspaces.
  * New function `FT_Library_SetLcdGeometry' to set up the geometry
    of LCD subpixels.
  * FreeType now uses the `defaultChar' property of PCF fonts to set
    the  glyph for  the undefined  character  at glyph  index 0  (as
    FreeType already does for all other supported font formats).  As
    a consequence, the order of glyphs of a PCF font if accessed
    with  FreeType can be different now compared to previous
    versions.
    This change doesn't affect PCF font access with cmaps.
  * `FT_Select_Charmap' has been changed to allow  parameter value
    `FT_ENCODING_NONE', which is valid for BDF, PCF, and Windows FNT
    formats to access built-in cmaps that don't have a predefined
    `FT_Encoding' value.
  * A previously reserved field in the `FT_GlyphSlotRec' structure
    now holds the glyph index.
  * The usual round of fuzzer bug fixes to better reject malformed
    fonts.
  * `FT_Outline_New_Internal' and `FT_Outline_Done_Internal' have
    been removed.These two functions were public by oversight only
    and were never documented.
  * A new function `FT_Error_String' returns descriptions of error
    codes if configuration macro FT_CONFIG_OPTION_ERROR_STRINGS is
    defined.
  * `FT_Set_MM_WeightVector' and `FT_Get_MM_WeightVector' are new
    functions limited to Adobe MultiMaster fonts to directly set and
    get the weight vector.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The bytecode hinting of OpenType variation fonts was flawed, since
    the data in the `CVAR' table wasn't correctly applied.
  * Auto-hinter support for Mongolian.
  * The handling of  the default character in PCF fonts as  introduced
    in version 2.10.0 was partially broken, causing premature abortion
    of charmap iteration for many fonts.
  * If  `FT_Set_Named_Instance' was  called  with  the same  arguments
    twice in a row, the function  returned an incorrect error code the
    second time.
  * Direct   rendering   using  FT_RASTER_FLAG_DIRECT   crashed   (bug
    introduced in version 2.10.0).
  * Increased  precision  while  computing  OpenType  font   variation
    instances.
  * The  flattening  algorithm of  cubic  Bezier  curves was  slightly
    changed to make  it faster.  This can cause  very subtle rendering
    changes, which aren't noticeable by the eye, however.
  * The  auto-hinter  now  disables hinting  if there  are blue  zones
    defined for a `style' (i.e., a certain combination of a script and
    its related typographic features) but the font doesn't contain any
    characters needed to set up at least one blue zone.
- Add tarball signatures and freetype2.keyring</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1570622400">- Use the compiler default C std, since 2012 gcc defaults
  have changed, we now only need to get rid of ANSIFLAGS, override
  that variable instead.</changelog>
  <changelog author="idonmez@suse.com" date="1589025600">- Update to version 2.10.2
  * Support for WOFF2 fonts, add BR on pkgconfig(libbrotlidec)
  * Function `FT_Get_Var_Axis_Flags' returned random data for Type 1
    MM fonts.
  * Type 1 fonts with non-integer metrics are now supported by the new
    (CFF) engine introduced in FreeType 2.9.
  * Drop support for Python 2 in Freetype's API reference generator
  * Auto-hinter support for Hanifi Rohingya
  * Document the `FT2_KEEP_ALIVE' debugging environment variable.</changelog>
  <changelog author="idonmez@suse.com" date="1603195200">- Update to version 2.10.4
  * Fix a heap buffer overflow has been found  in the handling of
    embedded PNG bitmaps, introduced in FreeType version 2.6
    (CVE-2020-15999 bsc#1177914)
  * Minor improvements to the B/W rasterizer.
  * Auto-hinter support for Medefaidrin script.
  * Fix various  memory leaks (mainly  for CFF) and other  issues that
    might cause crashes in rare circumstances.</changelog>
  <changelog author="fstrba@suse.com" date="1661256000">- Added patches:
  * CVE-2022-27404.patch
    + fixes bsc#1198830, CVE-2022-27404: Buffer Overflow
  * CVE-2022-27405.patch
    + fixes bsc#1198832, CVE-2022-27405: Segmentation Fault
  * CVE-2022-27406.patch
    + fixes bsc#1198823, CVE-2022-27406: Segmentation violation</changelog>
  <changelog author="meissner@suse.com" date="1661947200">- disable brotli linkage / WOFF2 support for now to keep dependencies
  as before.</changelog>
  <changelog author="fstrba@suse.com" date="1692705600">- Added patch:
  * CVE-2023-2004.patch
    + fixes bsc#1210419, CVE-2023-2004: Integer overflow</changelog>
  <changelog author="fstrba@suse.com" date="1742212800">- Added patch:
  * CVE-2025-27363.patch
    + fixes bsc#1239465, CVE-2025-27363: out-of-bounds write when
    attempting to parse font subglyph structures related to
    TrueType GX and variable font files</changelog>
  <changelog author="dmueller@suse.com" date="1745409600">- enable brotli support (jsc#PED-12258)</changelog>
  <changelog author="pgajdos@suse.com" date="1762430400">- package FTL.TXT and GPLv2.TXT as %license [bsc#1252148]</changelog>
</package>
<package pkgid="c3815957f8d9da42688609092b17d86a71ddb7b255a104bf09cd344197ab3cd4" name="gcc14" arch="src">
  <version epoch="0" ver="14.3.0+git11799" rel="150000.1.11.1"/>
  <changelog author="rguenther@suse.com" date="1728475200">- Update to gcc-14 branch head, 4af44f2cf7d281f3e4f3957ef, git10750
  * includes libstdc++6 fix for parsing tzdata 2024b [gcc#116657]
- Add gcc14-pr116629.patch to fix ICE with LTO building openvino
  on aarch64 [boo#1230262]</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1732968000">- Add loongarch64 to asan_arch, atomic_arch,
  itm_arch, lsan_arch, tsan_arch and ubsan_arch
- Add larchintrin.h, lasxintrin.h and lsxintrin.h
  headers to gccXY main package in %files section
- Set build_primary_64bit to 1 for loongarch64</changelog>
  <changelog author="adrian@suse.de" date="1733140800">- disable go on loongarch64 for now</changelog>
  <changelog author="mardnh@gmx.de" date="1736078400">- Switch to glibc based cross-compiler for target hppa</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Define ALT_CC_UNDER_TEST and ALT_CXX_UNDER_TEST for compat tests</changelog>
  <changelog author="rguenther@suse.com" date="1738152000">- For cross compilers require the same or newer binutils, newlib
  or cross-glibc that was used at build time.  [bsc#1232526]</changelog>
  <changelog author="rguenther@suse.com" date="1738843200">- Adjust cross compiler requirements to use %requires_ge
- Fix condition on whether to enable plugins or JIT support to
  not check sle_version which is not defined in SLFO but to check
  is_opensuse and suse_version instead.
- Add gcc14-pr118780.patch to make the SLFO config work.</changelog>
  <changelog author="rguenther@suse.com" date="1740052800">- Update to gcc-14 branch head, 9ffecde121af883b60bbe60d0, git11321
  * fixes reported ICE in [bsc#1237442]
- Drop gcc14-pr116629.patch now backported to the branch.</changelog>
  <changelog author="rguenther@suse.com" date="1741608000">- Disable profiling during build when %want_reproducible_builds is set
  [bsc#1238491]</changelog>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
</package>
<package pkgid="74161339c0ee3026dd1aefe41f23dc2d5aa2918ec2a82e75fe2f963d6f11c99b" name="gcc14" arch="src">
  <version epoch="0" ver="14.3.0+git11799" rel="150000.1.14.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1732968000">- Add loongarch64 to asan_arch, atomic_arch,
  itm_arch, lsan_arch, tsan_arch and ubsan_arch
- Add larchintrin.h, lasxintrin.h and lsxintrin.h
  headers to gccXY main package in %files section
- Set build_primary_64bit to 1 for loongarch64</changelog>
  <changelog author="adrian@suse.de" date="1733140800">- disable go on loongarch64 for now</changelog>
  <changelog author="mardnh@gmx.de" date="1736078400">- Switch to glibc based cross-compiler for target hppa</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Define ALT_CC_UNDER_TEST and ALT_CXX_UNDER_TEST for compat tests</changelog>
  <changelog author="rguenther@suse.com" date="1738152000">- For cross compilers require the same or newer binutils, newlib
  or cross-glibc that was used at build time.  [bsc#1232526]</changelog>
  <changelog author="rguenther@suse.com" date="1738843200">- Adjust cross compiler requirements to use %requires_ge
- Fix condition on whether to enable plugins or JIT support to
  not check sle_version which is not defined in SLFO but to check
  is_opensuse and suse_version instead.
- Add gcc14-pr118780.patch to make the SLFO config work.</changelog>
  <changelog author="rguenther@suse.com" date="1740052800">- Update to gcc-14 branch head, 9ffecde121af883b60bbe60d0, git11321
  * fixes reported ICE in [bsc#1237442]
- Drop gcc14-pr116629.patch now backported to the branch.</changelog>
  <changelog author="rguenther@suse.com" date="1741608000">- Disable profiling during build when %want_reproducible_builds is set
  [bsc#1238491]</changelog>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc14-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="e6c5957190cdace54d9057ca43996851ebb238009d93d511c505aa43d58a5508" name="gcc15" arch="src">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.3.3"/>
  <changelog author="rguenther@suse.com" date="1743163200">- Update to GCC trunk head, 15.0.1+git9001
  * includes -msplit-patch-nops required for user-space livepatching
    on powerpc
  * includes fix for Ada build with --enable-host-pie
- Adjust for removed avx10_2roundingintrin.h intrinsic header.
- Build GCC executables PIE on SLE.  [bsc#1239938]</changelog>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="d3e9d593fcd7f97aba3b744945f1b73ab2cd2cbcb739bb6eba0aa995d400bd7a" name="gcc15" arch="src">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.6.1"/>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
</package>
<package pkgid="e007ce44d06ab63f29ad901de03617a6464f0e3ef377a30384ae2d4f8154c1de" name="gcc15" arch="src">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.9.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc14-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="d65d2a23e6eeb7c3280a377b09a931f461b717b5604cd86f895da5fec3dd5478" name="gdk-pixbuf" arch="src">
  <version epoch="0" ver="2.42.12" rel="150600.3.11.1"/>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 2.42.4:
  + Make enum type registration thread safe.
  + Do not install skipped test files.
  + Fix GIF initialization.
  + Always run GIF loader tests.
  + Fix leaks discovered via ASan.
  + Expose GdkPixbufLoader API via introspection.
  + Fix revert-to-previous first frame behaviour for GIF files.
  + Link to libintl if needed.
  + Improve support for using gdk-pixbuf as a subproject.
  + Fix build with GModule disabled.
  + Use gi-docgen to generate the API reference from introspection
    data.
- Replace gtk-doc BuildRequires with python3-gi-docgen: follow
  upstreams port.
- As a workaround to
  https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/177, delete
  the installed gi-docgen program files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616846400">- Disable building of docs: creates a cycle with python:
  + Drop python3-gi-docgen BuildRequires.
  + Pass gtk_doc=false to meson</changelog>
  <changelog author="rpm@fthiessen.de" date="1618401600">- Update to stable 2.42.6
  + Yield gtk_doc option value in subprojects
  + Always initialise locale on thumbnailer startup
  + Add fallback subproject for libjpeg
  + Use type:array for the builtin_loaders option
  + Default to using builtin png and jpeg loaders</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop gdk-pixbuf-bsc1180393-CVE-2020-29385.patch on SLE and Leap
  15.4: fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636027200">- Stop passing no longer used nor recognized options jasper=false
  and x11=false to meson, fails the build when using meson 0.60.x.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 2.42.8 (boo#1201826):
  + Clear the pixbuf's memory buffer to avoid returning
    uninitialized memory.
  + Turn GdkPixbufModule functions into typed callbacks.
  + tiff: Use non-deprecated C99 integer types.
  + gif: Check for overflow when compositing or clearing frames.
  + Change png/jpeg/tiff build options from boolean to feature.
  + jpeg: Do not rely on UB around setjmp/longjmp.
  + Build fixes.
  + Documentation fixes.
  + Security fixes: CVE-2021-46829.
  + Updated translations.
- Stop passing options to meson that just follow upstream default,
  just rely on upstream providing sane defaults, apart from where
  we want to deviate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1660046400">- Update to version 2.42.9:
  + Fix the check for maximum value of LZW initial code size
    (boo#1194633 CVE-2021-44648).
  + Use CMake for dependencies on Windows/MSVC.
  + Add option for building tests.
  + Move man pages to reStructuredText.
  + Disable relocation when built as a static libary on Windows.
  + Update wrap file for libjpeg-turbo.
  + Limit the memory size when loading image data.
- Add docutils and pkgconfig(gi-docgen) BuildRequires: New
  dependencies.</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- avoid bashism in baselibs postscript (bsc#1195391)</changelog>
  <changelog author="mgorse@suse.com" date="1661860800">- Add 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch:
  fix loading of larger images (glgo#GNOME/gdk-pixbuf#216).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666785600">- Update to version 2.42.10:
  + Search for rst2man.py.
  + Update the memory size limit for JPEG images.
  + Updated translations.
- Drop patch fixed upstream (with different limit):
  + 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- Fix path to gdk-pixbuf-query-loader in pkg-config file: we rename
  the loader to be multi-arch compatible and thus also need to
  adjust the .pc file to have build-systems find it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714651200">- Update to version 2.42.11:
  + Disable fringe loaders by default.
  + Introspection fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714996800">- Pass -Dothers=enabled to meson: enable other image loaders (most
  notably beeded seems xpm,xbm). This is in line with upstreams
  recommendation for now, but won't be working past version 2.43.x.
  The loaders will likely be split out into a separate repo.
  (boo#1223903, glgo#GNOME/gdk-pixbuf!169).
- Add 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: Fix test
  suite with other loaders enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715774400">- Update to version 2.42.12:
  + Fix a build failure,
  + Fix occasional build failures,
  + ani: Reject files with multiple INA or IART chunks,
  + ani: Reject files with multiple anih chunks (CVE-2022-48622),
  + ani: validate chunk size,
  + Updated translations.
- Drop 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Migrate package to a regular obs_scm service, no longer password
  protecting a zip file. The originally reported bsc#1159337 seems
  no longer be applicable and we prefer the easier route.
- Drop unzip BuildRequires and pre_checkin.sh script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860801">- Enable test suite on x86_64 (other arches seem too flaky for now):
  + Add %check section and call %meson_test
  + Add gdk-pixbuf-jpeg-slow.patch: allow pixbuf-jpeg to run for
    more than 30s, by marking it as a slow test
    (glgo#GNOME/gdk-pixbuf!174).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1752840000">- Add gdk-pixbuf-fix-decoder-written-bytes-reporting.patch: Fix
  memory leak caused by wrong written bytes reported by decoder
  (CVE-2025-6199, glgo#GNOME/gdk-pixbuf#257, bsc#1245227).</changelog>
  <changelog author="mgorse@suse.com" date="1755518400">- Add gdk-pixbuf-jpeg-icc-data.patch: be more careful with icc data
  (bsc#1246114 CVE-2025-7345 glgo@GNOME/gdk-pixbuf!217).</changelog>
  <changelog author="mgorse@suse.com" date="1775736000">- Add gdk-pixbuf-CVE-2026-5201.patch: jpeg: Reject unsupported
  number of components (bsc#1261210 CVE-2026-5201
  glgo#GNOME/gdk-pixbuf#266).</changelog>
</package>
<package pkgid="c7764318d4127e4899d204f124510f1e10669e90594acb71de8ea8a6a9893947" name="gdk-pixbuf" arch="src">
  <version epoch="0" ver="2.42.12" rel="150600.3.8.1"/>
  <changelog author="zcjia@suse.com" date="1610020800">- Add gdk-pixbuf-bsc1180393-CVE-2020-29385.patch:
  gif: Fix LZW decoder accepting invalid LZW code. (bsc#1180393)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 2.42.4:
  + Make enum type registration thread safe.
  + Do not install skipped test files.
  + Fix GIF initialization.
  + Always run GIF loader tests.
  + Fix leaks discovered via ASan.
  + Expose GdkPixbufLoader API via introspection.
  + Fix revert-to-previous first frame behaviour for GIF files.
  + Link to libintl if needed.
  + Improve support for using gdk-pixbuf as a subproject.
  + Fix build with GModule disabled.
  + Use gi-docgen to generate the API reference from introspection
    data.
- Replace gtk-doc BuildRequires with python3-gi-docgen: follow
  upstreams port.
- As a workaround to
  https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/177, delete
  the installed gi-docgen program files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616846400">- Disable building of docs: creates a cycle with python:
  + Drop python3-gi-docgen BuildRequires.
  + Pass gtk_doc=false to meson</changelog>
  <changelog author="rpm@fthiessen.de" date="1618401600">- Update to stable 2.42.6
  + Yield gtk_doc option value in subprojects
  + Always initialise locale on thumbnailer startup
  + Add fallback subproject for libjpeg
  + Use type:array for the builtin_loaders option
  + Default to using builtin png and jpeg loaders</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop gdk-pixbuf-bsc1180393-CVE-2020-29385.patch on SLE and Leap
  15.4: fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636027200">- Stop passing no longer used nor recognized options jasper=false
  and x11=false to meson, fails the build when using meson 0.60.x.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 2.42.8 (boo#1201826):
  + Clear the pixbuf's memory buffer to avoid returning
    uninitialized memory.
  + Turn GdkPixbufModule functions into typed callbacks.
  + tiff: Use non-deprecated C99 integer types.
  + gif: Check for overflow when compositing or clearing frames.
  + Change png/jpeg/tiff build options from boolean to feature.
  + jpeg: Do not rely on UB around setjmp/longjmp.
  + Build fixes.
  + Documentation fixes.
  + Security fixes: CVE-2021-46829.
  + Updated translations.
- Stop passing options to meson that just follow upstream default,
  just rely on upstream providing sane defaults, apart from where
  we want to deviate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1660046400">- Update to version 2.42.9:
  + Fix the check for maximum value of LZW initial code size
    (boo#1194633 CVE-2021-44648).
  + Use CMake for dependencies on Windows/MSVC.
  + Add option for building tests.
  + Move man pages to reStructuredText.
  + Disable relocation when built as a static libary on Windows.
  + Update wrap file for libjpeg-turbo.
  + Limit the memory size when loading image data.
- Add docutils and pkgconfig(gi-docgen) BuildRequires: New
  dependencies.</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- avoid bashism in baselibs postscript (bsc#1195391)</changelog>
  <changelog author="mgorse@suse.com" date="1661860800">- Add 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch:
  fix loading of larger images (glgo#GNOME/gdk-pixbuf#216).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666785600">- Update to version 2.42.10:
  + Search for rst2man.py.
  + Update the memory size limit for JPEG images.
  + Updated translations.
- Drop patch fixed upstream (with different limit):
  + 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- Fix path to gdk-pixbuf-query-loader in pkg-config file: we rename
  the loader to be multi-arch compatible and thus also need to
  adjust the .pc file to have build-systems find it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714651200">- Update to version 2.42.11:
  + Disable fringe loaders by default.
  + Introspection fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714996800">- Pass -Dothers=enabled to meson: enable other image loaders (most
  notably beeded seems xpm,xbm). This is in line with upstreams
  recommendation for now, but won't be working past version 2.43.x.
  The loaders will likely be split out into a separate repo.
  (boo#1223903, glgo#GNOME/gdk-pixbuf!169).
- Add 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: Fix test
  suite with other loaders enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715774400">- Update to version 2.42.12:
  + Fix a build failure,
  + Fix occasional build failures,
  + ani: Reject files with multiple INA or IART chunks,
  + ani: Reject files with multiple anih chunks (CVE-2022-48622),
  + ani: validate chunk size,
  + Updated translations.
- Drop 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Migrate package to a regular obs_scm service, no longer password
  protecting a zip file. The originally reported bsc#1159337 seems
  no longer be applicable and we prefer the easier route.
- Drop unzip BuildRequires and pre_checkin.sh script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860801">- Enable test suite on x86_64 (other arches seem too flaky for now):
  + Add %check section and call %meson_test
  + Add gdk-pixbuf-jpeg-slow.patch: allow pixbuf-jpeg to run for
    more than 30s, by marking it as a slow test
    (glgo#GNOME/gdk-pixbuf!174).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1752840000">- Add gdk-pixbuf-fix-decoder-written-bytes-reporting.patch: Fix
  memory leak caused by wrong written bytes reported by decoder
  (CVE-2025-6199, glgo#GNOME/gdk-pixbuf#257, bsc#1245227).</changelog>
  <changelog author="mgorse@suse.com" date="1755518400">- Add gdk-pixbuf-jpeg-icc-data.patch: be more careful with icc data
  (bsc#1246114 CVE-2025-7345 glgo@GNOME/gdk-pixbuf!217).</changelog>
</package>
<package pkgid="ca8324b7e8a8c92170d9a589eae99e3b82b7375ebe15d63dbdf5cf6a615434ae" name="gdk-pixbuf-devel" arch="x86_64">
  <version epoch="0" ver="2.42.12" rel="150600.3.11.1"/>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 2.42.4:
  + Make enum type registration thread safe.
  + Do not install skipped test files.
  + Fix GIF initialization.
  + Always run GIF loader tests.
  + Fix leaks discovered via ASan.
  + Expose GdkPixbufLoader API via introspection.
  + Fix revert-to-previous first frame behaviour for GIF files.
  + Link to libintl if needed.
  + Improve support for using gdk-pixbuf as a subproject.
  + Fix build with GModule disabled.
  + Use gi-docgen to generate the API reference from introspection
    data.
- Replace gtk-doc BuildRequires with python3-gi-docgen: follow
  upstreams port.
- As a workaround to
  https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/177, delete
  the installed gi-docgen program files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616846400">- Disable building of docs: creates a cycle with python:
  + Drop python3-gi-docgen BuildRequires.
  + Pass gtk_doc=false to meson</changelog>
  <changelog author="rpm@fthiessen.de" date="1618401600">- Update to stable 2.42.6
  + Yield gtk_doc option value in subprojects
  + Always initialise locale on thumbnailer startup
  + Add fallback subproject for libjpeg
  + Use type:array for the builtin_loaders option
  + Default to using builtin png and jpeg loaders</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop gdk-pixbuf-bsc1180393-CVE-2020-29385.patch on SLE and Leap
  15.4: fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636027200">- Stop passing no longer used nor recognized options jasper=false
  and x11=false to meson, fails the build when using meson 0.60.x.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 2.42.8 (boo#1201826):
  + Clear the pixbuf's memory buffer to avoid returning
    uninitialized memory.
  + Turn GdkPixbufModule functions into typed callbacks.
  + tiff: Use non-deprecated C99 integer types.
  + gif: Check for overflow when compositing or clearing frames.
  + Change png/jpeg/tiff build options from boolean to feature.
  + jpeg: Do not rely on UB around setjmp/longjmp.
  + Build fixes.
  + Documentation fixes.
  + Security fixes: CVE-2021-46829.
  + Updated translations.
- Stop passing options to meson that just follow upstream default,
  just rely on upstream providing sane defaults, apart from where
  we want to deviate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1660046400">- Update to version 2.42.9:
  + Fix the check for maximum value of LZW initial code size
    (boo#1194633 CVE-2021-44648).
  + Use CMake for dependencies on Windows/MSVC.
  + Add option for building tests.
  + Move man pages to reStructuredText.
  + Disable relocation when built as a static libary on Windows.
  + Update wrap file for libjpeg-turbo.
  + Limit the memory size when loading image data.
- Add docutils and pkgconfig(gi-docgen) BuildRequires: New
  dependencies.</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- avoid bashism in baselibs postscript (bsc#1195391)</changelog>
  <changelog author="mgorse@suse.com" date="1661860800">- Add 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch:
  fix loading of larger images (glgo#GNOME/gdk-pixbuf#216).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666785600">- Update to version 2.42.10:
  + Search for rst2man.py.
  + Update the memory size limit for JPEG images.
  + Updated translations.
- Drop patch fixed upstream (with different limit):
  + 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- Fix path to gdk-pixbuf-query-loader in pkg-config file: we rename
  the loader to be multi-arch compatible and thus also need to
  adjust the .pc file to have build-systems find it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714651200">- Update to version 2.42.11:
  + Disable fringe loaders by default.
  + Introspection fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714996800">- Pass -Dothers=enabled to meson: enable other image loaders (most
  notably beeded seems xpm,xbm). This is in line with upstreams
  recommendation for now, but won't be working past version 2.43.x.
  The loaders will likely be split out into a separate repo.
  (boo#1223903, glgo#GNOME/gdk-pixbuf!169).
- Add 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: Fix test
  suite with other loaders enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715774400">- Update to version 2.42.12:
  + Fix a build failure,
  + Fix occasional build failures,
  + ani: Reject files with multiple INA or IART chunks,
  + ani: Reject files with multiple anih chunks (CVE-2022-48622),
  + ani: validate chunk size,
  + Updated translations.
- Drop 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Migrate package to a regular obs_scm service, no longer password
  protecting a zip file. The originally reported bsc#1159337 seems
  no longer be applicable and we prefer the easier route.
- Drop unzip BuildRequires and pre_checkin.sh script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860801">- Enable test suite on x86_64 (other arches seem too flaky for now):
  + Add %check section and call %meson_test
  + Add gdk-pixbuf-jpeg-slow.patch: allow pixbuf-jpeg to run for
    more than 30s, by marking it as a slow test
    (glgo#GNOME/gdk-pixbuf!174).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1752840000">- Add gdk-pixbuf-fix-decoder-written-bytes-reporting.patch: Fix
  memory leak caused by wrong written bytes reported by decoder
  (CVE-2025-6199, glgo#GNOME/gdk-pixbuf#257, bsc#1245227).</changelog>
  <changelog author="mgorse@suse.com" date="1755518400">- Add gdk-pixbuf-jpeg-icc-data.patch: be more careful with icc data
  (bsc#1246114 CVE-2025-7345 glgo@GNOME/gdk-pixbuf!217).</changelog>
  <changelog author="mgorse@suse.com" date="1775736000">- Add gdk-pixbuf-CVE-2026-5201.patch: jpeg: Reject unsupported
  number of components (bsc#1261210 CVE-2026-5201
  glgo#GNOME/gdk-pixbuf#266).</changelog>
</package>
<package pkgid="b02b43d94fd95d85d3f111b30be5c801fb24a648420677d3eac3f1345305ef4c" name="gdk-pixbuf-devel" arch="x86_64">
  <version epoch="0" ver="2.42.12" rel="150600.3.8.1"/>
  <changelog author="zcjia@suse.com" date="1610020800">- Add gdk-pixbuf-bsc1180393-CVE-2020-29385.patch:
  gif: Fix LZW decoder accepting invalid LZW code. (bsc#1180393)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 2.42.4:
  + Make enum type registration thread safe.
  + Do not install skipped test files.
  + Fix GIF initialization.
  + Always run GIF loader tests.
  + Fix leaks discovered via ASan.
  + Expose GdkPixbufLoader API via introspection.
  + Fix revert-to-previous first frame behaviour for GIF files.
  + Link to libintl if needed.
  + Improve support for using gdk-pixbuf as a subproject.
  + Fix build with GModule disabled.
  + Use gi-docgen to generate the API reference from introspection
    data.
- Replace gtk-doc BuildRequires with python3-gi-docgen: follow
  upstreams port.
- As a workaround to
  https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/177, delete
  the installed gi-docgen program files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616846400">- Disable building of docs: creates a cycle with python:
  + Drop python3-gi-docgen BuildRequires.
  + Pass gtk_doc=false to meson</changelog>
  <changelog author="rpm@fthiessen.de" date="1618401600">- Update to stable 2.42.6
  + Yield gtk_doc option value in subprojects
  + Always initialise locale on thumbnailer startup
  + Add fallback subproject for libjpeg
  + Use type:array for the builtin_loaders option
  + Default to using builtin png and jpeg loaders</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop gdk-pixbuf-bsc1180393-CVE-2020-29385.patch on SLE and Leap
  15.4: fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636027200">- Stop passing no longer used nor recognized options jasper=false
  and x11=false to meson, fails the build when using meson 0.60.x.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 2.42.8 (boo#1201826):
  + Clear the pixbuf's memory buffer to avoid returning
    uninitialized memory.
  + Turn GdkPixbufModule functions into typed callbacks.
  + tiff: Use non-deprecated C99 integer types.
  + gif: Check for overflow when compositing or clearing frames.
  + Change png/jpeg/tiff build options from boolean to feature.
  + jpeg: Do not rely on UB around setjmp/longjmp.
  + Build fixes.
  + Documentation fixes.
  + Security fixes: CVE-2021-46829.
  + Updated translations.
- Stop passing options to meson that just follow upstream default,
  just rely on upstream providing sane defaults, apart from where
  we want to deviate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1660046400">- Update to version 2.42.9:
  + Fix the check for maximum value of LZW initial code size
    (boo#1194633 CVE-2021-44648).
  + Use CMake for dependencies on Windows/MSVC.
  + Add option for building tests.
  + Move man pages to reStructuredText.
  + Disable relocation when built as a static libary on Windows.
  + Update wrap file for libjpeg-turbo.
  + Limit the memory size when loading image data.
- Add docutils and pkgconfig(gi-docgen) BuildRequires: New
  dependencies.</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- avoid bashism in baselibs postscript (bsc#1195391)</changelog>
  <changelog author="mgorse@suse.com" date="1661860800">- Add 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch:
  fix loading of larger images (glgo#GNOME/gdk-pixbuf#216).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666785600">- Update to version 2.42.10:
  + Search for rst2man.py.
  + Update the memory size limit for JPEG images.
  + Updated translations.
- Drop patch fixed upstream (with different limit):
  + 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- Fix path to gdk-pixbuf-query-loader in pkg-config file: we rename
  the loader to be multi-arch compatible and thus also need to
  adjust the .pc file to have build-systems find it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714651200">- Update to version 2.42.11:
  + Disable fringe loaders by default.
  + Introspection fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714996800">- Pass -Dothers=enabled to meson: enable other image loaders (most
  notably beeded seems xpm,xbm). This is in line with upstreams
  recommendation for now, but won't be working past version 2.43.x.
  The loaders will likely be split out into a separate repo.
  (boo#1223903, glgo#GNOME/gdk-pixbuf!169).
- Add 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: Fix test
  suite with other loaders enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715774400">- Update to version 2.42.12:
  + Fix a build failure,
  + Fix occasional build failures,
  + ani: Reject files with multiple INA or IART chunks,
  + ani: Reject files with multiple anih chunks (CVE-2022-48622),
  + ani: validate chunk size,
  + Updated translations.
- Drop 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Migrate package to a regular obs_scm service, no longer password
  protecting a zip file. The originally reported bsc#1159337 seems
  no longer be applicable and we prefer the easier route.
- Drop unzip BuildRequires and pre_checkin.sh script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860801">- Enable test suite on x86_64 (other arches seem too flaky for now):
  + Add %check section and call %meson_test
  + Add gdk-pixbuf-jpeg-slow.patch: allow pixbuf-jpeg to run for
    more than 30s, by marking it as a slow test
    (glgo#GNOME/gdk-pixbuf!174).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1752840000">- Add gdk-pixbuf-fix-decoder-written-bytes-reporting.patch: Fix
  memory leak caused by wrong written bytes reported by decoder
  (CVE-2025-6199, glgo#GNOME/gdk-pixbuf#257, bsc#1245227).</changelog>
  <changelog author="mgorse@suse.com" date="1755518400">- Add gdk-pixbuf-jpeg-icc-data.patch: be more careful with icc data
  (bsc#1246114 CVE-2025-7345 glgo@GNOME/gdk-pixbuf!217).</changelog>
</package>
<package pkgid="e8b3084a15458c144329639c9f17f4c657cec025c9a09cb56beb536f40a03bfd" name="gdk-pixbuf-lang" arch="noarch">
  <version epoch="0" ver="2.42.12" rel="150600.3.11.1"/>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 2.42.4:
  + Make enum type registration thread safe.
  + Do not install skipped test files.
  + Fix GIF initialization.
  + Always run GIF loader tests.
  + Fix leaks discovered via ASan.
  + Expose GdkPixbufLoader API via introspection.
  + Fix revert-to-previous first frame behaviour for GIF files.
  + Link to libintl if needed.
  + Improve support for using gdk-pixbuf as a subproject.
  + Fix build with GModule disabled.
  + Use gi-docgen to generate the API reference from introspection
    data.
- Replace gtk-doc BuildRequires with python3-gi-docgen: follow
  upstreams port.
- As a workaround to
  https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/177, delete
  the installed gi-docgen program files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616846400">- Disable building of docs: creates a cycle with python:
  + Drop python3-gi-docgen BuildRequires.
  + Pass gtk_doc=false to meson</changelog>
  <changelog author="rpm@fthiessen.de" date="1618401600">- Update to stable 2.42.6
  + Yield gtk_doc option value in subprojects
  + Always initialise locale on thumbnailer startup
  + Add fallback subproject for libjpeg
  + Use type:array for the builtin_loaders option
  + Default to using builtin png and jpeg loaders</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop gdk-pixbuf-bsc1180393-CVE-2020-29385.patch on SLE and Leap
  15.4: fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636027200">- Stop passing no longer used nor recognized options jasper=false
  and x11=false to meson, fails the build when using meson 0.60.x.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 2.42.8 (boo#1201826):
  + Clear the pixbuf's memory buffer to avoid returning
    uninitialized memory.
  + Turn GdkPixbufModule functions into typed callbacks.
  + tiff: Use non-deprecated C99 integer types.
  + gif: Check for overflow when compositing or clearing frames.
  + Change png/jpeg/tiff build options from boolean to feature.
  + jpeg: Do not rely on UB around setjmp/longjmp.
  + Build fixes.
  + Documentation fixes.
  + Security fixes: CVE-2021-46829.
  + Updated translations.
- Stop passing options to meson that just follow upstream default,
  just rely on upstream providing sane defaults, apart from where
  we want to deviate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1660046400">- Update to version 2.42.9:
  + Fix the check for maximum value of LZW initial code size
    (boo#1194633 CVE-2021-44648).
  + Use CMake for dependencies on Windows/MSVC.
  + Add option for building tests.
  + Move man pages to reStructuredText.
  + Disable relocation when built as a static libary on Windows.
  + Update wrap file for libjpeg-turbo.
  + Limit the memory size when loading image data.
- Add docutils and pkgconfig(gi-docgen) BuildRequires: New
  dependencies.</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- avoid bashism in baselibs postscript (bsc#1195391)</changelog>
  <changelog author="mgorse@suse.com" date="1661860800">- Add 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch:
  fix loading of larger images (glgo#GNOME/gdk-pixbuf#216).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666785600">- Update to version 2.42.10:
  + Search for rst2man.py.
  + Update the memory size limit for JPEG images.
  + Updated translations.
- Drop patch fixed upstream (with different limit):
  + 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- Fix path to gdk-pixbuf-query-loader in pkg-config file: we rename
  the loader to be multi-arch compatible and thus also need to
  adjust the .pc file to have build-systems find it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714651200">- Update to version 2.42.11:
  + Disable fringe loaders by default.
  + Introspection fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714996800">- Pass -Dothers=enabled to meson: enable other image loaders (most
  notably beeded seems xpm,xbm). This is in line with upstreams
  recommendation for now, but won't be working past version 2.43.x.
  The loaders will likely be split out into a separate repo.
  (boo#1223903, glgo#GNOME/gdk-pixbuf!169).
- Add 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: Fix test
  suite with other loaders enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715774400">- Update to version 2.42.12:
  + Fix a build failure,
  + Fix occasional build failures,
  + ani: Reject files with multiple INA or IART chunks,
  + ani: Reject files with multiple anih chunks (CVE-2022-48622),
  + ani: validate chunk size,
  + Updated translations.
- Drop 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Migrate package to a regular obs_scm service, no longer password
  protecting a zip file. The originally reported bsc#1159337 seems
  no longer be applicable and we prefer the easier route.
- Drop unzip BuildRequires and pre_checkin.sh script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860801">- Enable test suite on x86_64 (other arches seem too flaky for now):
  + Add %check section and call %meson_test
  + Add gdk-pixbuf-jpeg-slow.patch: allow pixbuf-jpeg to run for
    more than 30s, by marking it as a slow test
    (glgo#GNOME/gdk-pixbuf!174).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1752840000">- Add gdk-pixbuf-fix-decoder-written-bytes-reporting.patch: Fix
  memory leak caused by wrong written bytes reported by decoder
  (CVE-2025-6199, glgo#GNOME/gdk-pixbuf#257, bsc#1245227).</changelog>
  <changelog author="mgorse@suse.com" date="1755518400">- Add gdk-pixbuf-jpeg-icc-data.patch: be more careful with icc data
  (bsc#1246114 CVE-2025-7345 glgo@GNOME/gdk-pixbuf!217).</changelog>
  <changelog author="mgorse@suse.com" date="1775736000">- Add gdk-pixbuf-CVE-2026-5201.patch: jpeg: Reject unsupported
  number of components (bsc#1261210 CVE-2026-5201
  glgo#GNOME/gdk-pixbuf#266).</changelog>
</package>
<package pkgid="0bad19e77a147009d6929ea13482bd04c98cc2867e6054fc1143aabaa17d006e" name="gdk-pixbuf-lang" arch="noarch">
  <version epoch="0" ver="2.42.12" rel="150600.3.8.1"/>
  <changelog author="zcjia@suse.com" date="1610020800">- Add gdk-pixbuf-bsc1180393-CVE-2020-29385.patch:
  gif: Fix LZW decoder accepting invalid LZW code. (bsc#1180393)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 2.42.4:
  + Make enum type registration thread safe.
  + Do not install skipped test files.
  + Fix GIF initialization.
  + Always run GIF loader tests.
  + Fix leaks discovered via ASan.
  + Expose GdkPixbufLoader API via introspection.
  + Fix revert-to-previous first frame behaviour for GIF files.
  + Link to libintl if needed.
  + Improve support for using gdk-pixbuf as a subproject.
  + Fix build with GModule disabled.
  + Use gi-docgen to generate the API reference from introspection
    data.
- Replace gtk-doc BuildRequires with python3-gi-docgen: follow
  upstreams port.
- As a workaround to
  https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/177, delete
  the installed gi-docgen program files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616846400">- Disable building of docs: creates a cycle with python:
  + Drop python3-gi-docgen BuildRequires.
  + Pass gtk_doc=false to meson</changelog>
  <changelog author="rpm@fthiessen.de" date="1618401600">- Update to stable 2.42.6
  + Yield gtk_doc option value in subprojects
  + Always initialise locale on thumbnailer startup
  + Add fallback subproject for libjpeg
  + Use type:array for the builtin_loaders option
  + Default to using builtin png and jpeg loaders</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop gdk-pixbuf-bsc1180393-CVE-2020-29385.patch on SLE and Leap
  15.4: fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636027200">- Stop passing no longer used nor recognized options jasper=false
  and x11=false to meson, fails the build when using meson 0.60.x.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 2.42.8 (boo#1201826):
  + Clear the pixbuf's memory buffer to avoid returning
    uninitialized memory.
  + Turn GdkPixbufModule functions into typed callbacks.
  + tiff: Use non-deprecated C99 integer types.
  + gif: Check for overflow when compositing or clearing frames.
  + Change png/jpeg/tiff build options from boolean to feature.
  + jpeg: Do not rely on UB around setjmp/longjmp.
  + Build fixes.
  + Documentation fixes.
  + Security fixes: CVE-2021-46829.
  + Updated translations.
- Stop passing options to meson that just follow upstream default,
  just rely on upstream providing sane defaults, apart from where
  we want to deviate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1660046400">- Update to version 2.42.9:
  + Fix the check for maximum value of LZW initial code size
    (boo#1194633 CVE-2021-44648).
  + Use CMake for dependencies on Windows/MSVC.
  + Add option for building tests.
  + Move man pages to reStructuredText.
  + Disable relocation when built as a static libary on Windows.
  + Update wrap file for libjpeg-turbo.
  + Limit the memory size when loading image data.
- Add docutils and pkgconfig(gi-docgen) BuildRequires: New
  dependencies.</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- avoid bashism in baselibs postscript (bsc#1195391)</changelog>
  <changelog author="mgorse@suse.com" date="1661860800">- Add 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch:
  fix loading of larger images (glgo#GNOME/gdk-pixbuf#216).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666785600">- Update to version 2.42.10:
  + Search for rst2man.py.
  + Update the memory size limit for JPEG images.
  + Updated translations.
- Drop patch fixed upstream (with different limit):
  + 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- Fix path to gdk-pixbuf-query-loader in pkg-config file: we rename
  the loader to be multi-arch compatible and thus also need to
  adjust the .pc file to have build-systems find it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714651200">- Update to version 2.42.11:
  + Disable fringe loaders by default.
  + Introspection fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714996800">- Pass -Dothers=enabled to meson: enable other image loaders (most
  notably beeded seems xpm,xbm). This is in line with upstreams
  recommendation for now, but won't be working past version 2.43.x.
  The loaders will likely be split out into a separate repo.
  (boo#1223903, glgo#GNOME/gdk-pixbuf!169).
- Add 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: Fix test
  suite with other loaders enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715774400">- Update to version 2.42.12:
  + Fix a build failure,
  + Fix occasional build failures,
  + ani: Reject files with multiple INA or IART chunks,
  + ani: Reject files with multiple anih chunks (CVE-2022-48622),
  + ani: validate chunk size,
  + Updated translations.
- Drop 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Migrate package to a regular obs_scm service, no longer password
  protecting a zip file. The originally reported bsc#1159337 seems
  no longer be applicable and we prefer the easier route.
- Drop unzip BuildRequires and pre_checkin.sh script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860801">- Enable test suite on x86_64 (other arches seem too flaky for now):
  + Add %check section and call %meson_test
  + Add gdk-pixbuf-jpeg-slow.patch: allow pixbuf-jpeg to run for
    more than 30s, by marking it as a slow test
    (glgo#GNOME/gdk-pixbuf!174).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1752840000">- Add gdk-pixbuf-fix-decoder-written-bytes-reporting.patch: Fix
  memory leak caused by wrong written bytes reported by decoder
  (CVE-2025-6199, glgo#GNOME/gdk-pixbuf#257, bsc#1245227).</changelog>
  <changelog author="mgorse@suse.com" date="1755518400">- Add gdk-pixbuf-jpeg-icc-data.patch: be more careful with icc data
  (bsc#1246114 CVE-2025-7345 glgo@GNOME/gdk-pixbuf!217).</changelog>
</package>
<package pkgid="8419265cc83694c358e5b0fe71f701c589af56aa5b3a5f7fcd2d537c5d736fc6" name="gdk-pixbuf-loader-rsvg" arch="x86_64">
  <version epoch="0" ver="2.57.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1661774400">- Update of vendored dependencies.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662465600">- Update to version 2.55.1:
  + As an experiment, I'll move librsvg from even-odd versioning
    (odd minor version is unstable, even minor version is stable),
    to the versioning scheme that GNOME uses these days. So, 2.55.x
    is the new stable series.
  + There is a new development guide for librsvg, for people who
    want to help in its development. I hope this will be especially
    useful to Outreachy and Summer of Code interns:
    https://gnome.pages.gitlab.gnome.org/librsvg/devel-docs/index.html
  + Define missing crate metadata for Cargo.toml.
  + Add some tests that were missing for the C API.
  + Fix the basic test suite in Windows.
  + Miscellaneous fixes for the build and CI.</changelog>
  <changelog author="dmueller@suse.com" date="1673524800">- update vendor tarball
- actually run the testsuite for x86_64 (bsc#1207167)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1677585600">- Update to version 2.55.91:
  + Support "turn" unit for CSS &lt;angle&gt; values.
  + Support the feDropShadow element.
  + Fix panic when a feTile filter gets an empty source region.
  + Update to gtk-rs 0.17.0.
  + Simplify the NMake Makefiles for Windows; see
    win32/MSVC-Builds.md for details.
  + Documentation and infrastructure updates.
  + Consolidate the scattered .md documents into the Development
    Guide. Updated links throughout.
    https://gnome.pages.gitlab.gnome.org/librsvg/devel-docs/index.html
  + Internal refactoring of the test suite.
  + Updated dependencies to avoid duplicated crates.
- Changes from version 2.55.90:
  + rsvg-convert now supports Tab completion for bash, elvish,
    fish, powershell, and zsh.  Please run rsvg-convert
  - -completion bash to generate the completion file.  You can use
    the other shells' names as an argument to the --completion
    option.
  + Support vector-effect="non-scaling-stroke" for paths.
  + Apply width, height when &lt;use&gt;ing an &lt;svg&gt;.
  + There is a new development guide for librsvg, for people who
    want to help in its development. I hope this will be especially
    useful to Outreachy and Summer of Code interns:
    https://gnome.pages.gitlab.gnome.org/librsvg/devel-docs/index.html
  + In the use element, honor the overflow:hidden property of a
    referenced symbol.
  + Treat property and attribute parse errors / invalid values as
    if they were not present, per the specs.  Previously this would
    cause the offending element's subtree to not be rendered.
  + Make feGaussianBlur work as a pass-through filter if the
    stdDeviation is invalid.
  + Define missing crate metadata for Cargo.toml.
  + Add some tests that were missing for the C API.
  + Fix the basic test suite in Windows.
  + Miscellaneous fixes for the build and CI.
  + Plenty of internal refactoring to enable more consistent
    logging.
  + Slight reductions in memory consumption for elements with
    context-stroke and context-fill.
  + Experimental gdk-pixbuf loader in Rust. This is not installed
    yet.
  + Update the gtk-rs crates to 0.16.0.
  + Port rsvg-convert's argument parsing to the clap4 crate.
  + Updates to the dependencies.
  + The CI now has a cargo-deny step, which should help us notice
    when there are security advisories for dependencies</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update to version 2.55.92:
  + Update to cssparser 0.29.6; this adds support for hwb() color
    syntax, from the CSS Color Module Level 4 spec
    (https://drafts.csswg.org/css-color-4/#changes). Note that
    values inside hwb() are *not* comma-separated, just whitespace.
  + Fix panic when a requested font-size is too big.
  + Validate all clipPath and mask transforms.
  + Add a performance tracking framework. This is part of an
    Outreachy internship.
  + Slight improvements in the size of generated code and memory
    consumption.
  + The Rust crate is now called "rsvg", for consistency with other
    crates that don't usually have a "lib" prefix.
  + The Rust API documentation is now available at
    https://gnome.pages.gitlab.gnome.org/librsvg/doc/rsvg/index.html
- Add minimum harddisk size of 9G for x86_64 to constraints. The
  cargo test uses a lot of disk space.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Pass --skip filter_morphology_from_reference_page_svg to
  cargo_test, filter out new test that fails when building against
  cairo-1.17.8.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054401">- Update to version 2.56.0:
  + Fix crash when XML files get recursively included through
    XInclude.
  + When running the suite of reference tests, you can now use the
    TESTS_OUTPUT_DIR environment variable to specify where results
    for failures get written. See tests/README.md for details.
  + The minimum supported Rust version (MSRV) is 1.64.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681560000">- Use __rustflags macro and drop no longer needed rustflags global.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Update licence tag, there is no longer any Apache licensed code.</changelog>
  <changelog author="fcrozat@suse.com" date="1683288000">- Tune _constraints for the various architectures.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685534400">- Update to version 2.56.1:
  + The minimum supported Rust version (MSRV) is 1.65.
    Unfortunately the assert_cmd crate, used in the test suite,
    bumped its MSRV and is forcing us to do the same.
  + Shrink the shared library by telling the linker to omit unused
    code.
  + Updates to dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1686744000">- Use %__default_rustflags instead of the deprecated %__rustflags
  macro. Requires at least cargo-packaging 1.2.0+2 (boo#1212333).</changelog>
  <changelog author="dimstar@opensuse.org" date="1687348800">- Use %build_rustflags instead of the deprecated
  %__default_rustflags macro. Requires at least cargo-packaging
  1.2.0+3 (boo#1212333).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1689940800">- Update to version 2.56.3:
  + This is a security release for bug glgo#GNOME/librsvg#996.
  - glgo#GNOME/librsvg#996: Fix arbitrary file read when href has
    special characters.
  - glgo#GNOME/librsvg#998: Fix cascade for symbol elements being
    referenced from use elements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692100800">- Update to version 2.56.92:
  + Fix the build for aarch64.
  + More extensive logging for filter primitives.
  + Update gtk-rs-core to 0.18.
  + Update dependencies.
  + Include license text in packaged crates.
  + The minimum supported Rust version (MSRV) is 1.70.0, due to the
    gtk-rs-core update.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694520000">- Skip bugs_bug668_small_caps_svg test, started failing with
  harfbuzz-8.2.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694692800">- Update to version 2.57.0:
  + rsvg-convert can now output PDF versions 1.4, 1.5, 1.6, in
    addition to the default 1.7, especially for LaTeX users. See
    the rsvg-convert(1) man page for options like --format=pdf1.4
  + Support the image-rendering property.
  + For consistency with other command-line tools, rsvg-convert now
    supports an argument "-" to specify the standard input. This is
    in addition to the already-supported syntax of not specifying
    an input file at all.
  + Partial support for the edgeMode attribute in feGaussianBlur,
    only for small blurs right now.
  + The minimum supported Rust version (MSRV) is 1.70.0.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701345600">- Run service with new obs-service-cargo, drop cargo_config as
  source and clean up spec and service, and switch to zst as
  buildtime compression.</changelog>
  <changelog author="dimstar@opensuse.org" date="1704369600">- Update to version 2.57.1:
  + Fix small-caps and bump the version of Pango required to 1.50.0.
  + Fix panic when using negative scaling transforms on the
    toplevel.
  + Support "var(--foo, #aabbcc)" just for colors.  This is the
    minimum required to render color SVG emoji fonts that provide
    color fallbacks, but it is not yet full support for CSS var().
  + Fix the VS2017 build.
  + Update cairo-rs.
  + Update the project metadata files.</changelog>
  <changelog author="federico@suse.com" date="1763121600">- Update to version 2.57.4 - bsc#1243867:
  + RUSTSEC-2024-0421 - idna accepts Punycode labels that do
    not produce any non-ASCII when decoded.
  + RUSTSEC-2024-0404 - Unsoundness in anstream.</changelog>
</package>
<package pkgid="92050ab861d337533e924fb86a475e7f41f28919c0ac11721a3ecffcee1ea6f9" name="gdk-pixbuf-loader-rsvg" arch="x86_64">
  <version epoch="0" ver="2.57.4" rel="150600.3.8.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1662465600">- Update to version 2.55.1:
  + As an experiment, I'll move librsvg from even-odd versioning
    (odd minor version is unstable, even minor version is stable),
    to the versioning scheme that GNOME uses these days. So, 2.55.x
    is the new stable series.
  + There is a new development guide for librsvg, for people who
    want to help in its development. I hope this will be especially
    useful to Outreachy and Summer of Code interns:
    https://gnome.pages.gitlab.gnome.org/librsvg/devel-docs/index.html
  + Define missing crate metadata for Cargo.toml.
  + Add some tests that were missing for the C API.
  + Fix the basic test suite in Windows.
  + Miscellaneous fixes for the build and CI.</changelog>
  <changelog author="dmueller@suse.com" date="1673524800">- update vendor tarball
- actually run the testsuite for x86_64 (bsc#1207167)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1677585600">- Update to version 2.55.91:
  + Support "turn" unit for CSS &lt;angle&gt; values.
  + Support the feDropShadow element.
  + Fix panic when a feTile filter gets an empty source region.
  + Update to gtk-rs 0.17.0.
  + Simplify the NMake Makefiles for Windows; see
    win32/MSVC-Builds.md for details.
  + Documentation and infrastructure updates.
  + Consolidate the scattered .md documents into the Development
    Guide. Updated links throughout.
    https://gnome.pages.gitlab.gnome.org/librsvg/devel-docs/index.html
  + Internal refactoring of the test suite.
  + Updated dependencies to avoid duplicated crates.
- Changes from version 2.55.90:
  + rsvg-convert now supports Tab completion for bash, elvish,
    fish, powershell, and zsh.  Please run rsvg-convert
  - -completion bash to generate the completion file.  You can use
    the other shells' names as an argument to the --completion
    option.
  + Support vector-effect="non-scaling-stroke" for paths.
  + Apply width, height when &lt;use&gt;ing an &lt;svg&gt;.
  + There is a new development guide for librsvg, for people who
    want to help in its development. I hope this will be especially
    useful to Outreachy and Summer of Code interns:
    https://gnome.pages.gitlab.gnome.org/librsvg/devel-docs/index.html
  + In the use element, honor the overflow:hidden property of a
    referenced symbol.
  + Treat property and attribute parse errors / invalid values as
    if they were not present, per the specs.  Previously this would
    cause the offending element's subtree to not be rendered.
  + Make feGaussianBlur work as a pass-through filter if the
    stdDeviation is invalid.
  + Define missing crate metadata for Cargo.toml.
  + Add some tests that were missing for the C API.
  + Fix the basic test suite in Windows.
  + Miscellaneous fixes for the build and CI.
  + Plenty of internal refactoring to enable more consistent
    logging.
  + Slight reductions in memory consumption for elements with
    context-stroke and context-fill.
  + Experimental gdk-pixbuf loader in Rust. This is not installed
    yet.
  + Update the gtk-rs crates to 0.16.0.
  + Port rsvg-convert's argument parsing to the clap4 crate.
  + Updates to the dependencies.
  + The CI now has a cargo-deny step, which should help us notice
    when there are security advisories for dependencies</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update to version 2.55.92:
  + Update to cssparser 0.29.6; this adds support for hwb() color
    syntax, from the CSS Color Module Level 4 spec
    (https://drafts.csswg.org/css-color-4/#changes). Note that
    values inside hwb() are *not* comma-separated, just whitespace.
  + Fix panic when a requested font-size is too big.
  + Validate all clipPath and mask transforms.
  + Add a performance tracking framework. This is part of an
    Outreachy internship.
  + Slight improvements in the size of generated code and memory
    consumption.
  + The Rust crate is now called "rsvg", for consistency with other
    crates that don't usually have a "lib" prefix.
  + The Rust API documentation is now available at
    https://gnome.pages.gitlab.gnome.org/librsvg/doc/rsvg/index.html
- Add minimum harddisk size of 9G for x86_64 to constraints. The
  cargo test uses a lot of disk space.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Pass --skip filter_morphology_from_reference_page_svg to
  cargo_test, filter out new test that fails when building against
  cairo-1.17.8.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054401">- Update to version 2.56.0:
  + Fix crash when XML files get recursively included through
    XInclude.
  + When running the suite of reference tests, you can now use the
    TESTS_OUTPUT_DIR environment variable to specify where results
    for failures get written. See tests/README.md for details.
  + The minimum supported Rust version (MSRV) is 1.64.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681560000">- Use __rustflags macro and drop no longer needed rustflags global.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Update licence tag, there is no longer any Apache licensed code.</changelog>
  <changelog author="fcrozat@suse.com" date="1683288000">- Tune _constraints for the various architectures.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685534400">- Update to version 2.56.1:
  + The minimum supported Rust version (MSRV) is 1.65.
    Unfortunately the assert_cmd crate, used in the test suite,
    bumped its MSRV and is forcing us to do the same.
  + Shrink the shared library by telling the linker to omit unused
    code.
  + Updates to dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1686744000">- Use %__default_rustflags instead of the deprecated %__rustflags
  macro. Requires at least cargo-packaging 1.2.0+2 (boo#1212333).</changelog>
  <changelog author="dimstar@opensuse.org" date="1687348800">- Use %build_rustflags instead of the deprecated
  %__default_rustflags macro. Requires at least cargo-packaging
  1.2.0+3 (boo#1212333).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1689940800">- Update to version 2.56.3:
  + This is a security release for bug glgo#GNOME/librsvg#996.
  - glgo#GNOME/librsvg#996: Fix arbitrary file read when href has
    special characters.
  - glgo#GNOME/librsvg#998: Fix cascade for symbol elements being
    referenced from use elements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692100800">- Update to version 2.56.92:
  + Fix the build for aarch64.
  + More extensive logging for filter primitives.
  + Update gtk-rs-core to 0.18.
  + Update dependencies.
  + Include license text in packaged crates.
  + The minimum supported Rust version (MSRV) is 1.70.0, due to the
    gtk-rs-core update.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694520000">- Skip bugs_bug668_small_caps_svg test, started failing with
  harfbuzz-8.2.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694692800">- Update to version 2.57.0:
  + rsvg-convert can now output PDF versions 1.4, 1.5, 1.6, in
    addition to the default 1.7, especially for LaTeX users. See
    the rsvg-convert(1) man page for options like --format=pdf1.4
  + Support the image-rendering property.
  + For consistency with other command-line tools, rsvg-convert now
    supports an argument "-" to specify the standard input. This is
    in addition to the already-supported syntax of not specifying
    an input file at all.
  + Partial support for the edgeMode attribute in feGaussianBlur,
    only for small blurs right now.
  + The minimum supported Rust version (MSRV) is 1.70.0.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701345600">- Run service with new obs-service-cargo, drop cargo_config as
  source and clean up spec and service, and switch to zst as
  buildtime compression.</changelog>
  <changelog author="dimstar@opensuse.org" date="1704369600">- Update to version 2.57.1:
  + Fix small-caps and bump the version of Pango required to 1.50.0.
  + Fix panic when using negative scaling transforms on the
    toplevel.
  + Support "var(--foo, #aabbcc)" just for colors.  This is the
    minimum required to render color SVG emoji fonts that provide
    color fallbacks, but it is not yet full support for CSS var().
  + Fix the VS2017 build.
  + Update cairo-rs.
  + Update the project metadata files.</changelog>
  <changelog author="federico@suse.com" date="1763121600">- Update to version 2.57.4 - bsc#1243867:
  + RUSTSEC-2024-0421 - idna accepts Punycode labels that do
    not produce any non-ASCII when decoded.
  + RUSTSEC-2024-0404 - Unsoundness in anstream.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1776340800">- Add librsvg-CVE-2026-25727.patch: Fix denial of service when
  parsing rfc2822. (bsc#1257922, CVE-2026-25727)</changelog>
</package>
<package pkgid="b82a7da2dbfec86d95b7628342a5007bfe566635c61410066c79da6f6edc824c" name="gdk-pixbuf-query-loaders" arch="x86_64">
  <version epoch="0" ver="2.42.12" rel="150600.3.11.1"/>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 2.42.4:
  + Make enum type registration thread safe.
  + Do not install skipped test files.
  + Fix GIF initialization.
  + Always run GIF loader tests.
  + Fix leaks discovered via ASan.
  + Expose GdkPixbufLoader API via introspection.
  + Fix revert-to-previous first frame behaviour for GIF files.
  + Link to libintl if needed.
  + Improve support for using gdk-pixbuf as a subproject.
  + Fix build with GModule disabled.
  + Use gi-docgen to generate the API reference from introspection
    data.
- Replace gtk-doc BuildRequires with python3-gi-docgen: follow
  upstreams port.
- As a workaround to
  https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/177, delete
  the installed gi-docgen program files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616846400">- Disable building of docs: creates a cycle with python:
  + Drop python3-gi-docgen BuildRequires.
  + Pass gtk_doc=false to meson</changelog>
  <changelog author="rpm@fthiessen.de" date="1618401600">- Update to stable 2.42.6
  + Yield gtk_doc option value in subprojects
  + Always initialise locale on thumbnailer startup
  + Add fallback subproject for libjpeg
  + Use type:array for the builtin_loaders option
  + Default to using builtin png and jpeg loaders</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop gdk-pixbuf-bsc1180393-CVE-2020-29385.patch on SLE and Leap
  15.4: fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636027200">- Stop passing no longer used nor recognized options jasper=false
  and x11=false to meson, fails the build when using meson 0.60.x.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 2.42.8 (boo#1201826):
  + Clear the pixbuf's memory buffer to avoid returning
    uninitialized memory.
  + Turn GdkPixbufModule functions into typed callbacks.
  + tiff: Use non-deprecated C99 integer types.
  + gif: Check for overflow when compositing or clearing frames.
  + Change png/jpeg/tiff build options from boolean to feature.
  + jpeg: Do not rely on UB around setjmp/longjmp.
  + Build fixes.
  + Documentation fixes.
  + Security fixes: CVE-2021-46829.
  + Updated translations.
- Stop passing options to meson that just follow upstream default,
  just rely on upstream providing sane defaults, apart from where
  we want to deviate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1660046400">- Update to version 2.42.9:
  + Fix the check for maximum value of LZW initial code size
    (boo#1194633 CVE-2021-44648).
  + Use CMake for dependencies on Windows/MSVC.
  + Add option for building tests.
  + Move man pages to reStructuredText.
  + Disable relocation when built as a static libary on Windows.
  + Update wrap file for libjpeg-turbo.
  + Limit the memory size when loading image data.
- Add docutils and pkgconfig(gi-docgen) BuildRequires: New
  dependencies.</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- avoid bashism in baselibs postscript (bsc#1195391)</changelog>
  <changelog author="mgorse@suse.com" date="1661860800">- Add 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch:
  fix loading of larger images (glgo#GNOME/gdk-pixbuf#216).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666785600">- Update to version 2.42.10:
  + Search for rst2man.py.
  + Update the memory size limit for JPEG images.
  + Updated translations.
- Drop patch fixed upstream (with different limit):
  + 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- Fix path to gdk-pixbuf-query-loader in pkg-config file: we rename
  the loader to be multi-arch compatible and thus also need to
  adjust the .pc file to have build-systems find it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714651200">- Update to version 2.42.11:
  + Disable fringe loaders by default.
  + Introspection fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714996800">- Pass -Dothers=enabled to meson: enable other image loaders (most
  notably beeded seems xpm,xbm). This is in line with upstreams
  recommendation for now, but won't be working past version 2.43.x.
  The loaders will likely be split out into a separate repo.
  (boo#1223903, glgo#GNOME/gdk-pixbuf!169).
- Add 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: Fix test
  suite with other loaders enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715774400">- Update to version 2.42.12:
  + Fix a build failure,
  + Fix occasional build failures,
  + ani: Reject files with multiple INA or IART chunks,
  + ani: Reject files with multiple anih chunks (CVE-2022-48622),
  + ani: validate chunk size,
  + Updated translations.
- Drop 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Migrate package to a regular obs_scm service, no longer password
  protecting a zip file. The originally reported bsc#1159337 seems
  no longer be applicable and we prefer the easier route.
- Drop unzip BuildRequires and pre_checkin.sh script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860801">- Enable test suite on x86_64 (other arches seem too flaky for now):
  + Add %check section and call %meson_test
  + Add gdk-pixbuf-jpeg-slow.patch: allow pixbuf-jpeg to run for
    more than 30s, by marking it as a slow test
    (glgo#GNOME/gdk-pixbuf!174).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1752840000">- Add gdk-pixbuf-fix-decoder-written-bytes-reporting.patch: Fix
  memory leak caused by wrong written bytes reported by decoder
  (CVE-2025-6199, glgo#GNOME/gdk-pixbuf#257, bsc#1245227).</changelog>
  <changelog author="mgorse@suse.com" date="1755518400">- Add gdk-pixbuf-jpeg-icc-data.patch: be more careful with icc data
  (bsc#1246114 CVE-2025-7345 glgo@GNOME/gdk-pixbuf!217).</changelog>
  <changelog author="mgorse@suse.com" date="1775736000">- Add gdk-pixbuf-CVE-2026-5201.patch: jpeg: Reject unsupported
  number of components (bsc#1261210 CVE-2026-5201
  glgo#GNOME/gdk-pixbuf#266).</changelog>
</package>
<package pkgid="f96d1992e2ffa3ca6572d741cb4d692c2f496e674adb7935d2db493a8379389c" name="gdk-pixbuf-query-loaders" arch="x86_64">
  <version epoch="0" ver="2.42.12" rel="150600.3.8.1"/>
  <changelog author="zcjia@suse.com" date="1610020800">- Add gdk-pixbuf-bsc1180393-CVE-2020-29385.patch:
  gif: Fix LZW decoder accepting invalid LZW code. (bsc#1180393)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 2.42.4:
  + Make enum type registration thread safe.
  + Do not install skipped test files.
  + Fix GIF initialization.
  + Always run GIF loader tests.
  + Fix leaks discovered via ASan.
  + Expose GdkPixbufLoader API via introspection.
  + Fix revert-to-previous first frame behaviour for GIF files.
  + Link to libintl if needed.
  + Improve support for using gdk-pixbuf as a subproject.
  + Fix build with GModule disabled.
  + Use gi-docgen to generate the API reference from introspection
    data.
- Replace gtk-doc BuildRequires with python3-gi-docgen: follow
  upstreams port.
- As a workaround to
  https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/177, delete
  the installed gi-docgen program files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616846400">- Disable building of docs: creates a cycle with python:
  + Drop python3-gi-docgen BuildRequires.
  + Pass gtk_doc=false to meson</changelog>
  <changelog author="rpm@fthiessen.de" date="1618401600">- Update to stable 2.42.6
  + Yield gtk_doc option value in subprojects
  + Always initialise locale on thumbnailer startup
  + Add fallback subproject for libjpeg
  + Use type:array for the builtin_loaders option
  + Default to using builtin png and jpeg loaders</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop gdk-pixbuf-bsc1180393-CVE-2020-29385.patch on SLE and Leap
  15.4: fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636027200">- Stop passing no longer used nor recognized options jasper=false
  and x11=false to meson, fails the build when using meson 0.60.x.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 2.42.8 (boo#1201826):
  + Clear the pixbuf's memory buffer to avoid returning
    uninitialized memory.
  + Turn GdkPixbufModule functions into typed callbacks.
  + tiff: Use non-deprecated C99 integer types.
  + gif: Check for overflow when compositing or clearing frames.
  + Change png/jpeg/tiff build options from boolean to feature.
  + jpeg: Do not rely on UB around setjmp/longjmp.
  + Build fixes.
  + Documentation fixes.
  + Security fixes: CVE-2021-46829.
  + Updated translations.
- Stop passing options to meson that just follow upstream default,
  just rely on upstream providing sane defaults, apart from where
  we want to deviate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1660046400">- Update to version 2.42.9:
  + Fix the check for maximum value of LZW initial code size
    (boo#1194633 CVE-2021-44648).
  + Use CMake for dependencies on Windows/MSVC.
  + Add option for building tests.
  + Move man pages to reStructuredText.
  + Disable relocation when built as a static libary on Windows.
  + Update wrap file for libjpeg-turbo.
  + Limit the memory size when loading image data.
- Add docutils and pkgconfig(gi-docgen) BuildRequires: New
  dependencies.</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- avoid bashism in baselibs postscript (bsc#1195391)</changelog>
  <changelog author="mgorse@suse.com" date="1661860800">- Add 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch:
  fix loading of larger images (glgo#GNOME/gdk-pixbuf#216).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666785600">- Update to version 2.42.10:
  + Search for rst2man.py.
  + Update the memory size limit for JPEG images.
  + Updated translations.
- Drop patch fixed upstream (with different limit):
  + 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- Fix path to gdk-pixbuf-query-loader in pkg-config file: we rename
  the loader to be multi-arch compatible and thus also need to
  adjust the .pc file to have build-systems find it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714651200">- Update to version 2.42.11:
  + Disable fringe loaders by default.
  + Introspection fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714996800">- Pass -Dothers=enabled to meson: enable other image loaders (most
  notably beeded seems xpm,xbm). This is in line with upstreams
  recommendation for now, but won't be working past version 2.43.x.
  The loaders will likely be split out into a separate repo.
  (boo#1223903, glgo#GNOME/gdk-pixbuf!169).
- Add 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: Fix test
  suite with other loaders enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715774400">- Update to version 2.42.12:
  + Fix a build failure,
  + Fix occasional build failures,
  + ani: Reject files with multiple INA or IART chunks,
  + ani: Reject files with multiple anih chunks (CVE-2022-48622),
  + ani: validate chunk size,
  + Updated translations.
- Drop 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Migrate package to a regular obs_scm service, no longer password
  protecting a zip file. The originally reported bsc#1159337 seems
  no longer be applicable and we prefer the easier route.
- Drop unzip BuildRequires and pre_checkin.sh script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860801">- Enable test suite on x86_64 (other arches seem too flaky for now):
  + Add %check section and call %meson_test
  + Add gdk-pixbuf-jpeg-slow.patch: allow pixbuf-jpeg to run for
    more than 30s, by marking it as a slow test
    (glgo#GNOME/gdk-pixbuf!174).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1752840000">- Add gdk-pixbuf-fix-decoder-written-bytes-reporting.patch: Fix
  memory leak caused by wrong written bytes reported by decoder
  (CVE-2025-6199, glgo#GNOME/gdk-pixbuf#257, bsc#1245227).</changelog>
  <changelog author="mgorse@suse.com" date="1755518400">- Add gdk-pixbuf-jpeg-icc-data.patch: be more careful with icc data
  (bsc#1246114 CVE-2025-7345 glgo@GNOME/gdk-pixbuf!217).</changelog>
</package>
<package pkgid="4377429c9baa0d1c3a96caf1683ff89cf45c8aced06194f37cb42fbdeeef0935" name="gdk-pixbuf-query-loaders-32bit" arch="x86_64">
  <version epoch="0" ver="2.42.12" rel="150600.3.11.1"/>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 2.42.4:
  + Make enum type registration thread safe.
  + Do not install skipped test files.
  + Fix GIF initialization.
  + Always run GIF loader tests.
  + Fix leaks discovered via ASan.
  + Expose GdkPixbufLoader API via introspection.
  + Fix revert-to-previous first frame behaviour for GIF files.
  + Link to libintl if needed.
  + Improve support for using gdk-pixbuf as a subproject.
  + Fix build with GModule disabled.
  + Use gi-docgen to generate the API reference from introspection
    data.
- Replace gtk-doc BuildRequires with python3-gi-docgen: follow
  upstreams port.
- As a workaround to
  https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/177, delete
  the installed gi-docgen program files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616846400">- Disable building of docs: creates a cycle with python:
  + Drop python3-gi-docgen BuildRequires.
  + Pass gtk_doc=false to meson</changelog>
  <changelog author="rpm@fthiessen.de" date="1618401600">- Update to stable 2.42.6
  + Yield gtk_doc option value in subprojects
  + Always initialise locale on thumbnailer startup
  + Add fallback subproject for libjpeg
  + Use type:array for the builtin_loaders option
  + Default to using builtin png and jpeg loaders</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop gdk-pixbuf-bsc1180393-CVE-2020-29385.patch on SLE and Leap
  15.4: fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636027200">- Stop passing no longer used nor recognized options jasper=false
  and x11=false to meson, fails the build when using meson 0.60.x.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 2.42.8 (boo#1201826):
  + Clear the pixbuf's memory buffer to avoid returning
    uninitialized memory.
  + Turn GdkPixbufModule functions into typed callbacks.
  + tiff: Use non-deprecated C99 integer types.
  + gif: Check for overflow when compositing or clearing frames.
  + Change png/jpeg/tiff build options from boolean to feature.
  + jpeg: Do not rely on UB around setjmp/longjmp.
  + Build fixes.
  + Documentation fixes.
  + Security fixes: CVE-2021-46829.
  + Updated translations.
- Stop passing options to meson that just follow upstream default,
  just rely on upstream providing sane defaults, apart from where
  we want to deviate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1660046400">- Update to version 2.42.9:
  + Fix the check for maximum value of LZW initial code size
    (boo#1194633 CVE-2021-44648).
  + Use CMake for dependencies on Windows/MSVC.
  + Add option for building tests.
  + Move man pages to reStructuredText.
  + Disable relocation when built as a static libary on Windows.
  + Update wrap file for libjpeg-turbo.
  + Limit the memory size when loading image data.
- Add docutils and pkgconfig(gi-docgen) BuildRequires: New
  dependencies.</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- avoid bashism in baselibs postscript (bsc#1195391)</changelog>
  <changelog author="mgorse@suse.com" date="1661860800">- Add 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch:
  fix loading of larger images (glgo#GNOME/gdk-pixbuf#216).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666785600">- Update to version 2.42.10:
  + Search for rst2man.py.
  + Update the memory size limit for JPEG images.
  + Updated translations.
- Drop patch fixed upstream (with different limit):
  + 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- Fix path to gdk-pixbuf-query-loader in pkg-config file: we rename
  the loader to be multi-arch compatible and thus also need to
  adjust the .pc file to have build-systems find it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714651200">- Update to version 2.42.11:
  + Disable fringe loaders by default.
  + Introspection fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714996800">- Pass -Dothers=enabled to meson: enable other image loaders (most
  notably beeded seems xpm,xbm). This is in line with upstreams
  recommendation for now, but won't be working past version 2.43.x.
  The loaders will likely be split out into a separate repo.
  (boo#1223903, glgo#GNOME/gdk-pixbuf!169).
- Add 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: Fix test
  suite with other loaders enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715774400">- Update to version 2.42.12:
  + Fix a build failure,
  + Fix occasional build failures,
  + ani: Reject files with multiple INA or IART chunks,
  + ani: Reject files with multiple anih chunks (CVE-2022-48622),
  + ani: validate chunk size,
  + Updated translations.
- Drop 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Migrate package to a regular obs_scm service, no longer password
  protecting a zip file. The originally reported bsc#1159337 seems
  no longer be applicable and we prefer the easier route.
- Drop unzip BuildRequires and pre_checkin.sh script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860801">- Enable test suite on x86_64 (other arches seem too flaky for now):
  + Add %check section and call %meson_test
  + Add gdk-pixbuf-jpeg-slow.patch: allow pixbuf-jpeg to run for
    more than 30s, by marking it as a slow test
    (glgo#GNOME/gdk-pixbuf!174).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1752840000">- Add gdk-pixbuf-fix-decoder-written-bytes-reporting.patch: Fix
  memory leak caused by wrong written bytes reported by decoder
  (CVE-2025-6199, glgo#GNOME/gdk-pixbuf#257, bsc#1245227).</changelog>
  <changelog author="mgorse@suse.com" date="1755518400">- Add gdk-pixbuf-jpeg-icc-data.patch: be more careful with icc data
  (bsc#1246114 CVE-2025-7345 glgo@GNOME/gdk-pixbuf!217).</changelog>
  <changelog author="mgorse@suse.com" date="1775736000">- Add gdk-pixbuf-CVE-2026-5201.patch: jpeg: Reject unsupported
  number of components (bsc#1261210 CVE-2026-5201
  glgo#GNOME/gdk-pixbuf#266).</changelog>
</package>
<package pkgid="901573c0b058c04402691ea15fc193d41ef217512666c691cb6c589cf2eed5bc" name="gdk-pixbuf-query-loaders-32bit" arch="x86_64">
  <version epoch="0" ver="2.42.12" rel="150600.3.8.1"/>
  <changelog author="zcjia@suse.com" date="1610020800">- Add gdk-pixbuf-bsc1180393-CVE-2020-29385.patch:
  gif: Fix LZW decoder accepting invalid LZW code. (bsc#1180393)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 2.42.4:
  + Make enum type registration thread safe.
  + Do not install skipped test files.
  + Fix GIF initialization.
  + Always run GIF loader tests.
  + Fix leaks discovered via ASan.
  + Expose GdkPixbufLoader API via introspection.
  + Fix revert-to-previous first frame behaviour for GIF files.
  + Link to libintl if needed.
  + Improve support for using gdk-pixbuf as a subproject.
  + Fix build with GModule disabled.
  + Use gi-docgen to generate the API reference from introspection
    data.
- Replace gtk-doc BuildRequires with python3-gi-docgen: follow
  upstreams port.
- As a workaround to
  https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/177, delete
  the installed gi-docgen program files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616846400">- Disable building of docs: creates a cycle with python:
  + Drop python3-gi-docgen BuildRequires.
  + Pass gtk_doc=false to meson</changelog>
  <changelog author="rpm@fthiessen.de" date="1618401600">- Update to stable 2.42.6
  + Yield gtk_doc option value in subprojects
  + Always initialise locale on thumbnailer startup
  + Add fallback subproject for libjpeg
  + Use type:array for the builtin_loaders option
  + Default to using builtin png and jpeg loaders</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop gdk-pixbuf-bsc1180393-CVE-2020-29385.patch on SLE and Leap
  15.4: fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636027200">- Stop passing no longer used nor recognized options jasper=false
  and x11=false to meson, fails the build when using meson 0.60.x.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 2.42.8 (boo#1201826):
  + Clear the pixbuf's memory buffer to avoid returning
    uninitialized memory.
  + Turn GdkPixbufModule functions into typed callbacks.
  + tiff: Use non-deprecated C99 integer types.
  + gif: Check for overflow when compositing or clearing frames.
  + Change png/jpeg/tiff build options from boolean to feature.
  + jpeg: Do not rely on UB around setjmp/longjmp.
  + Build fixes.
  + Documentation fixes.
  + Security fixes: CVE-2021-46829.
  + Updated translations.
- Stop passing options to meson that just follow upstream default,
  just rely on upstream providing sane defaults, apart from where
  we want to deviate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1660046400">- Update to version 2.42.9:
  + Fix the check for maximum value of LZW initial code size
    (boo#1194633 CVE-2021-44648).
  + Use CMake for dependencies on Windows/MSVC.
  + Add option for building tests.
  + Move man pages to reStructuredText.
  + Disable relocation when built as a static libary on Windows.
  + Update wrap file for libjpeg-turbo.
  + Limit the memory size when loading image data.
- Add docutils and pkgconfig(gi-docgen) BuildRequires: New
  dependencies.</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- avoid bashism in baselibs postscript (bsc#1195391)</changelog>
  <changelog author="mgorse@suse.com" date="1661860800">- Add 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch:
  fix loading of larger images (glgo#GNOME/gdk-pixbuf#216).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666785600">- Update to version 2.42.10:
  + Search for rst2man.py.
  + Update the memory size limit for JPEG images.
  + Updated translations.
- Drop patch fixed upstream (with different limit):
  + 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- Fix path to gdk-pixbuf-query-loader in pkg-config file: we rename
  the loader to be multi-arch compatible and thus also need to
  adjust the .pc file to have build-systems find it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714651200">- Update to version 2.42.11:
  + Disable fringe loaders by default.
  + Introspection fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714996800">- Pass -Dothers=enabled to meson: enable other image loaders (most
  notably beeded seems xpm,xbm). This is in line with upstreams
  recommendation for now, but won't be working past version 2.43.x.
  The loaders will likely be split out into a separate repo.
  (boo#1223903, glgo#GNOME/gdk-pixbuf!169).
- Add 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: Fix test
  suite with other loaders enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715774400">- Update to version 2.42.12:
  + Fix a build failure,
  + Fix occasional build failures,
  + ani: Reject files with multiple INA or IART chunks,
  + ani: Reject files with multiple anih chunks (CVE-2022-48622),
  + ani: validate chunk size,
  + Updated translations.
- Drop 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Migrate package to a regular obs_scm service, no longer password
  protecting a zip file. The originally reported bsc#1159337 seems
  no longer be applicable and we prefer the easier route.
- Drop unzip BuildRequires and pre_checkin.sh script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860801">- Enable test suite on x86_64 (other arches seem too flaky for now):
  + Add %check section and call %meson_test
  + Add gdk-pixbuf-jpeg-slow.patch: allow pixbuf-jpeg to run for
    more than 30s, by marking it as a slow test
    (glgo#GNOME/gdk-pixbuf!174).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1752840000">- Add gdk-pixbuf-fix-decoder-written-bytes-reporting.patch: Fix
  memory leak caused by wrong written bytes reported by decoder
  (CVE-2025-6199, glgo#GNOME/gdk-pixbuf#257, bsc#1245227).</changelog>
  <changelog author="mgorse@suse.com" date="1755518400">- Add gdk-pixbuf-jpeg-icc-data.patch: be more careful with icc data
  (bsc#1246114 CVE-2025-7345 glgo@GNOME/gdk-pixbuf!217).</changelog>
</package>
<package pkgid="5a1ca9dc7fbf473ffac7e913f9998d66f1240f9e457730857a15473108025927" name="gdk-pixbuf-thumbnailer" arch="x86_64">
  <version epoch="0" ver="2.42.12" rel="150600.3.11.1"/>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 2.42.4:
  + Make enum type registration thread safe.
  + Do not install skipped test files.
  + Fix GIF initialization.
  + Always run GIF loader tests.
  + Fix leaks discovered via ASan.
  + Expose GdkPixbufLoader API via introspection.
  + Fix revert-to-previous first frame behaviour for GIF files.
  + Link to libintl if needed.
  + Improve support for using gdk-pixbuf as a subproject.
  + Fix build with GModule disabled.
  + Use gi-docgen to generate the API reference from introspection
    data.
- Replace gtk-doc BuildRequires with python3-gi-docgen: follow
  upstreams port.
- As a workaround to
  https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/177, delete
  the installed gi-docgen program files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616846400">- Disable building of docs: creates a cycle with python:
  + Drop python3-gi-docgen BuildRequires.
  + Pass gtk_doc=false to meson</changelog>
  <changelog author="rpm@fthiessen.de" date="1618401600">- Update to stable 2.42.6
  + Yield gtk_doc option value in subprojects
  + Always initialise locale on thumbnailer startup
  + Add fallback subproject for libjpeg
  + Use type:array for the builtin_loaders option
  + Default to using builtin png and jpeg loaders</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop gdk-pixbuf-bsc1180393-CVE-2020-29385.patch on SLE and Leap
  15.4: fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636027200">- Stop passing no longer used nor recognized options jasper=false
  and x11=false to meson, fails the build when using meson 0.60.x.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 2.42.8 (boo#1201826):
  + Clear the pixbuf's memory buffer to avoid returning
    uninitialized memory.
  + Turn GdkPixbufModule functions into typed callbacks.
  + tiff: Use non-deprecated C99 integer types.
  + gif: Check for overflow when compositing or clearing frames.
  + Change png/jpeg/tiff build options from boolean to feature.
  + jpeg: Do not rely on UB around setjmp/longjmp.
  + Build fixes.
  + Documentation fixes.
  + Security fixes: CVE-2021-46829.
  + Updated translations.
- Stop passing options to meson that just follow upstream default,
  just rely on upstream providing sane defaults, apart from where
  we want to deviate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1660046400">- Update to version 2.42.9:
  + Fix the check for maximum value of LZW initial code size
    (boo#1194633 CVE-2021-44648).
  + Use CMake for dependencies on Windows/MSVC.
  + Add option for building tests.
  + Move man pages to reStructuredText.
  + Disable relocation when built as a static libary on Windows.
  + Update wrap file for libjpeg-turbo.
  + Limit the memory size when loading image data.
- Add docutils and pkgconfig(gi-docgen) BuildRequires: New
  dependencies.</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- avoid bashism in baselibs postscript (bsc#1195391)</changelog>
  <changelog author="mgorse@suse.com" date="1661860800">- Add 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch:
  fix loading of larger images (glgo#GNOME/gdk-pixbuf#216).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666785600">- Update to version 2.42.10:
  + Search for rst2man.py.
  + Update the memory size limit for JPEG images.
  + Updated translations.
- Drop patch fixed upstream (with different limit):
  + 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- Fix path to gdk-pixbuf-query-loader in pkg-config file: we rename
  the loader to be multi-arch compatible and thus also need to
  adjust the .pc file to have build-systems find it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714651200">- Update to version 2.42.11:
  + Disable fringe loaders by default.
  + Introspection fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714996800">- Pass -Dothers=enabled to meson: enable other image loaders (most
  notably beeded seems xpm,xbm). This is in line with upstreams
  recommendation for now, but won't be working past version 2.43.x.
  The loaders will likely be split out into a separate repo.
  (boo#1223903, glgo#GNOME/gdk-pixbuf!169).
- Add 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: Fix test
  suite with other loaders enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715774400">- Update to version 2.42.12:
  + Fix a build failure,
  + Fix occasional build failures,
  + ani: Reject files with multiple INA or IART chunks,
  + ani: Reject files with multiple anih chunks (CVE-2022-48622),
  + ani: validate chunk size,
  + Updated translations.
- Drop 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Migrate package to a regular obs_scm service, no longer password
  protecting a zip file. The originally reported bsc#1159337 seems
  no longer be applicable and we prefer the easier route.
- Drop unzip BuildRequires and pre_checkin.sh script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860801">- Enable test suite on x86_64 (other arches seem too flaky for now):
  + Add %check section and call %meson_test
  + Add gdk-pixbuf-jpeg-slow.patch: allow pixbuf-jpeg to run for
    more than 30s, by marking it as a slow test
    (glgo#GNOME/gdk-pixbuf!174).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1752840000">- Add gdk-pixbuf-fix-decoder-written-bytes-reporting.patch: Fix
  memory leak caused by wrong written bytes reported by decoder
  (CVE-2025-6199, glgo#GNOME/gdk-pixbuf#257, bsc#1245227).</changelog>
  <changelog author="mgorse@suse.com" date="1755518400">- Add gdk-pixbuf-jpeg-icc-data.patch: be more careful with icc data
  (bsc#1246114 CVE-2025-7345 glgo@GNOME/gdk-pixbuf!217).</changelog>
  <changelog author="mgorse@suse.com" date="1775736000">- Add gdk-pixbuf-CVE-2026-5201.patch: jpeg: Reject unsupported
  number of components (bsc#1261210 CVE-2026-5201
  glgo#GNOME/gdk-pixbuf#266).</changelog>
</package>
<package pkgid="4439a6a4bd5a14e31c0f7bfe97347cdf91b640a32f849b8feeecb2c4c8f07fe3" name="gdk-pixbuf-thumbnailer" arch="x86_64">
  <version epoch="0" ver="2.42.12" rel="150600.3.8.1"/>
  <changelog author="zcjia@suse.com" date="1610020800">- Add gdk-pixbuf-bsc1180393-CVE-2020-29385.patch:
  gif: Fix LZW decoder accepting invalid LZW code. (bsc#1180393)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 2.42.4:
  + Make enum type registration thread safe.
  + Do not install skipped test files.
  + Fix GIF initialization.
  + Always run GIF loader tests.
  + Fix leaks discovered via ASan.
  + Expose GdkPixbufLoader API via introspection.
  + Fix revert-to-previous first frame behaviour for GIF files.
  + Link to libintl if needed.
  + Improve support for using gdk-pixbuf as a subproject.
  + Fix build with GModule disabled.
  + Use gi-docgen to generate the API reference from introspection
    data.
- Replace gtk-doc BuildRequires with python3-gi-docgen: follow
  upstreams port.
- As a workaround to
  https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/177, delete
  the installed gi-docgen program files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616846400">- Disable building of docs: creates a cycle with python:
  + Drop python3-gi-docgen BuildRequires.
  + Pass gtk_doc=false to meson</changelog>
  <changelog author="rpm@fthiessen.de" date="1618401600">- Update to stable 2.42.6
  + Yield gtk_doc option value in subprojects
  + Always initialise locale on thumbnailer startup
  + Add fallback subproject for libjpeg
  + Use type:array for the builtin_loaders option
  + Default to using builtin png and jpeg loaders</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop gdk-pixbuf-bsc1180393-CVE-2020-29385.patch on SLE and Leap
  15.4: fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636027200">- Stop passing no longer used nor recognized options jasper=false
  and x11=false to meson, fails the build when using meson 0.60.x.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 2.42.8 (boo#1201826):
  + Clear the pixbuf's memory buffer to avoid returning
    uninitialized memory.
  + Turn GdkPixbufModule functions into typed callbacks.
  + tiff: Use non-deprecated C99 integer types.
  + gif: Check for overflow when compositing or clearing frames.
  + Change png/jpeg/tiff build options from boolean to feature.
  + jpeg: Do not rely on UB around setjmp/longjmp.
  + Build fixes.
  + Documentation fixes.
  + Security fixes: CVE-2021-46829.
  + Updated translations.
- Stop passing options to meson that just follow upstream default,
  just rely on upstream providing sane defaults, apart from where
  we want to deviate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1660046400">- Update to version 2.42.9:
  + Fix the check for maximum value of LZW initial code size
    (boo#1194633 CVE-2021-44648).
  + Use CMake for dependencies on Windows/MSVC.
  + Add option for building tests.
  + Move man pages to reStructuredText.
  + Disable relocation when built as a static libary on Windows.
  + Update wrap file for libjpeg-turbo.
  + Limit the memory size when loading image data.
- Add docutils and pkgconfig(gi-docgen) BuildRequires: New
  dependencies.</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- avoid bashism in baselibs postscript (bsc#1195391)</changelog>
  <changelog author="mgorse@suse.com" date="1661860800">- Add 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch:
  fix loading of larger images (glgo#GNOME/gdk-pixbuf#216).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666785600">- Update to version 2.42.10:
  + Search for rst2man.py.
  + Update the memory size limit for JPEG images.
  + Updated translations.
- Drop patch fixed upstream (with different limit):
  + 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- Fix path to gdk-pixbuf-query-loader in pkg-config file: we rename
  the loader to be multi-arch compatible and thus also need to
  adjust the .pc file to have build-systems find it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714651200">- Update to version 2.42.11:
  + Disable fringe loaders by default.
  + Introspection fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714996800">- Pass -Dothers=enabled to meson: enable other image loaders (most
  notably beeded seems xpm,xbm). This is in line with upstreams
  recommendation for now, but won't be working past version 2.43.x.
  The loaders will likely be split out into a separate repo.
  (boo#1223903, glgo#GNOME/gdk-pixbuf!169).
- Add 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: Fix test
  suite with other loaders enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715774400">- Update to version 2.42.12:
  + Fix a build failure,
  + Fix occasional build failures,
  + ani: Reject files with multiple INA or IART chunks,
  + ani: Reject files with multiple anih chunks (CVE-2022-48622),
  + ani: validate chunk size,
  + Updated translations.
- Drop 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Migrate package to a regular obs_scm service, no longer password
  protecting a zip file. The originally reported bsc#1159337 seems
  no longer be applicable and we prefer the easier route.
- Drop unzip BuildRequires and pre_checkin.sh script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860801">- Enable test suite on x86_64 (other arches seem too flaky for now):
  + Add %check section and call %meson_test
  + Add gdk-pixbuf-jpeg-slow.patch: allow pixbuf-jpeg to run for
    more than 30s, by marking it as a slow test
    (glgo#GNOME/gdk-pixbuf!174).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1752840000">- Add gdk-pixbuf-fix-decoder-written-bytes-reporting.patch: Fix
  memory leak caused by wrong written bytes reported by decoder
  (CVE-2025-6199, glgo#GNOME/gdk-pixbuf#257, bsc#1245227).</changelog>
  <changelog author="mgorse@suse.com" date="1755518400">- Add gdk-pixbuf-jpeg-icc-data.patch: be more careful with icc data
  (bsc#1246114 CVE-2025-7345 glgo@GNOME/gdk-pixbuf!217).</changelog>
</package>
<package pkgid="b6e5c672abe7642ae244e0b03db26a1abfa9937b02e586dc5fbf33e22a7e3b64" name="gedit" arch="src">
  <version epoch="0" ver="46.1" rel="150600.3.3.1"/>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632744000">- Add gedit-fix-open-crash.patch: open-selector: Fix crash
  introduced in GDateTime port.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Stop passing introspection=true, vapi=true and plugins=true to
  meson, no longer needed.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643803200">- Add 124.patch: Fix build with meson 0.61.0 and newer.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644840000">- Update to version 41.0:
  + Note that gnome-text-editor will be GNOME's recommended text
    editor beginning with the GNOME 42 release next month.
  + Fix some crashes, one when opening files, another when deleting
    the open folder with the file browser plugin active.
  + Fix buttons in the color scheme selector dialog.
  + Build fixes.
  + Improve symbolic icon coloring.
  + Improve Save As behavior when saving error infobar is showing.
  + Updated translations.
- Drop 124.patch and gedit-fix-open-crash.patch: Fixed upstream.</changelog>
  <changelog author="emilyyrose@gmail.com" date="1648814400">- Update to version 42.0:
  + Rename display name back to gedit.
  + Build fix.
  + Updated translations.</changelog>
  <changelog author="scott.bradnick@suse.com" date="1650628800">- Add "Requires: gsettings-desktop-schemas" to alleviate schema
  "is not installed" error after install in WSL. (boo#1198312)</changelog>
  <changelog author="dimstar@opensuse.org" date="1653912000">- Update to version 42.1:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1659096000">- Update to version 42.2:
  + Fix bug: text cut off at the bottom in certain situations.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1659096001">- Update to version 43.alpha:
  + Update app description.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1667476800">- Update to version 43.0:
  + Come back to the source code of gedit 40.0 and continue again
    from there. It is based on the Tepl and Amtk libraries. The
    single Open button is again split in two with a drop-down menu
    for recent files.
  + Workaround for bug: text cut off at the bottom in certain
    situations.
  + Change app name from "Text Editor" back to "gedit".
  + AppData: some updates, take a new screenshot.
  + Remove gitlab-ci.
  + Remove outdated build-aux/osx/ directory (several MB).
  + Flatpak: generate JSON manifest from YAML manifest.
  + File browser plugin: more robust check if Nautilus GSettings
    can be used, even if the key doesn't exist anymore.
  + Rework the I/O error info bars.
  + Handle application/x-zerosize mimetype.
  + Small code maintenance.
  + Documentation updates.
  + Updated translations.
- Rebase gedit-desktop.patch with quilt.
- Add pkgconfig(amtk-5) and pkgconfig(tepl-6) BuildRequires: New
  dependencies.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1667563200">- Update to version 43.1:
  + Be able to build with Meson &gt;= 0.61
  + AppData fix
  + Add some BuildStream element files in build-aux/buildstream/
- Add api_ver define and set it to 3.38</changelog>
  <changelog author="dimstar@opensuse.org" date="1669809600">- Update to version 43.2:
  + Fix the API version, bump to 43.
  + Updated translations.
- Change api_ver to 43, following upstreams change.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1672920000">- Update to version 44.1:
  + Updated translations.
- Changes from version 44.0:
  + Minor bug fixes.
  + Use more Tepl features.
  + Code refactorings.
  + Misc:
  - Donations: change to Liberapay link.
  - Create https://gedit-technology.net/ (mainly for developers).
  + User manual:
  - Available online:
    https://gedit-technology.net/user-manuals/gedit/ (used on
    platforms where Yelp is unavailable: macOS and Windows).
  - Improvements to the content.
  + The core of the application:
  - Rework the statusbar.
  - Improve the vocabulary used in the dialog for choosing
    favorite encodings.
  - Improve a little the API docs.
  + Plugins: File browser: expand/collapse item on right/left
    keypress.
  + Updated translations.
- Bump api_ver to 44 following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674216000">- Update to version 44.2:
  + File Browser plugin: bug fix.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687521600">- Update to version 45.0:
  + User manual: a few improvements.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1689940800">- Add desktop-file-utils BuildRequires: new dependency to run the
  desktop test.
- Bump api_ver to 45, following upstreams changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691928000">- Update to version 46.0:
  + Adapt for Amtk -&gt; libgedit-amtk rename.
  + API changes for plugins: see the API docs.
  + Code refactorings in GeditWindow, and delegate some of its work
    to new classes: GeditHeaderBar and GeditSidePanel.
  + Replace GeditMenuStackSwitcher by TeplPanelSwitcherMenu.
  + Replace GeditStatusMenuButton by TeplStatusMenuButton.
  + Remove a small feature from the statusbar: the small icons for
    the window state. You now need to look at each individual tab
    to know its state.
  + Build: replace inline_side_panel_switcher option -&gt; headerbar
    option.
  + Bug fixes for macOS.
  + Updated translations.
- Bump api_ver to 46, following upstreams changes.
- Replace pkgconfig(amtk-5) with pkgconfig(libgedit-amtk-5)
  following upstream chamges.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692273600">- Update to version 46.1:
  + Fix a -Wformat-security build issue.
  + Add a set of warning CFLAGS, and fix the code accordingly.
  + Flatpak update.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1771070400">- Disable externaltools plugin to prevent crash (bsc#1255717).</changelog>
</package>
<package pkgid="c5dc4e0a503b2ecb6f895edfb3d89e59507afea2c0dd66847dd11503bae048f0" name="ghostscript" arch="src">
  <version epoch="0" ver="9.52" rel="150000.206.1"/>
  <changelog author="jsmeix@suse.de" date="1631275200">- CVE-2021-3781.patch fixes CVE-2021-3781
  Trivial -dSAFER bypass
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=704342
  (bsc#1190381)</changelog>
  <changelog author="werner@suse.de" date="1632916800">- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with its wrapper script (jira#PM-3037)</changelog>
  <changelog author="jsmeix@suse.de" date="1641902400">- CVE-2021-45944.patch fixes CVE-2021-45944
  use-after-free in sampled_data_sample
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-237.yaml
  (bsc#1194303)
- CVE-2021-45949.patch fixes CVE-2021-45949
  heap-based buffer overflow in sampled_data_finish
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-803.yaml
  (bsc#1194304)</changelog>
  <changelog author="jsmeix@suse.com" date="1680523200">- CVE-2023-28879.patch fixes CVE-2023-28879
  Buffer Overflow in s_xBCPE_process
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=706494
  (bsc#1210062)
- 41ef9a0bc36b9db7115fbe9623f989bfb47bbade.patch
  fixes compilation with FreeType 2.10.3+
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702985</changelog>
  <changelog author="jsmeix@suse.com" date="1688040000">- CVE-2023-36664.patch fixes CVE-2023-36664
  see https://bugs.ghostscript.com/show_bug.cgi?id=706761
  "OS command injection in %pipe% access"
  and https://bugs.ghostscript.com/show_bug.cgi?id=706778
  "%pipe% allowed_path bypass"
  and bsc#1212711
  "permission validation mishandling for pipe devices
  (with the %pipe% prefix or the | pipe character prefix)"</changelog>
  <changelog author="jsmeix@suse.com" date="1690372800">- CVE-2023-38559.patch fixes CVE-2023-38559
  "out of bounds read devn_pcx_write_rle() could result in DoS"
  see bsc#1213637
  and https://bugs.ghostscript.com/show_bug.cgi?id=706897
  which is in base/gdevdevn.c the same issue
  "ordering in if expression to avoid out-of-bounds access"
  as the already fixed CVE-2020-16305 in devices/gdevpcx.c
  see https://bugs.ghostscript.com/show_bug.cgi?id=701819</changelog>
  <changelog author="jsmeix@suse.com" date="1695124800">- CVE-2023-43115.patch is derived for Ghostscript-9.52 from
  https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=e59216049cac290fb437a04c4f41ea46826cfba5
  that fixes CVE-2023-43115 "remote code execution
  via crafted PostScript documents in gdevijs.c"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707051
  (bsc#1215466)</changelog>
  <changelog author="jsmeix@suse.com" date="1702382400">- CVE-2023-46751.patch is derived for Ghostscript-9.52 from
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=dcdbc595c13
  (there is no "device initialization redesign" in Ghostscript-9.52)
  that fixes CVE-2023-46751
  "dangling pointer in gdev_prn_open_printer_seekable()"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707264
  (bsc#1217871)</changelog>
  <changelog author="jsmeix@suse.com" date="1704888000">- txtwrite_use_after_free.patch is
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=8c7bd787defa071c96289b7da9397f673fddb874
  to fix https://bugs.ghostscript.com/show_bug.cgi?id=702229
  "txtwrite: use after free in 9.51 on some files"
  which fixes CVE-2020-36773 (bsc#1219554)
  "out-of-bounds write and use-after-free
  in devices/vector/gdevtxtw.c (for txtwrite)"
  see also https://bugzilla.opensuse.org/show_bug.cgi?id=1177922
  (bsc#1191841)</changelog>
  <changelog author="jsmeix@suse.com" date="1708948800">- bsc1219357.patch is derived for Ghostscript-9.52 from
  https://github.com/ArtifexSoftware/ghostpdl/commit/4ceaf92815302863a8c86fcfcf2347e0118dd3a5
  to fix bsc#1219357
  "Ghostscript segfaults in gs_heap_free_object()"</changelog>
  <changelog author="jsmeix@suse.com" date="1714996800">- CVE-2023-52722.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=afd7188f74918cb51b5fb89f52b54eb16e8acfd1
  "In SAFER (default) don't allow eexec seeds
  other than the Type 1 standard"
  to fix bsc#1223852
  "ghostscript: eexec seeds other than the Type 1 standard
  are allowed while using SAFER mode"</changelog>
  <changelog author="jsmeix@suse.com" date="1718971200">- CVE-2024-33871.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=7145885041bb52cc23964f0aa2aec1b1c82b5908
  "OPVP device - prevent unsafe parameter change with SAFER"
  to fix bsc#1225491
  "OPVP device arbitrary code execution via custom Driver library"</changelog>
  <changelog author="jsmeix@suse.com" date="1719576000">- CVE-2024-29510.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=3b1735085ecef20b29e8db3416ab36de93e86d1f
  "Uniprint device - prevent string configuration changes
  when SAFER"
  to fix bsc#1226945
  "format string injection leads to shell command execution
  (SAFER bypass)"
- CVE-2024-33870.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=79aef19c685984dc3da2dc090450407d9fbcff80
  see https://bugs.ghostscript.com/show_bug.cgi?id=707686
  to fix bsc#1226944
  "path traversal to arbitrary files if the current directory
  is in the permitted paths"
- CVE-2024-33869.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=5ae2e320d69a7d0973011796bd388cd5befa1a43
  and
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=f5336e5b4154f515ac83bc5b9eba94302e6618d4
  see https://bugs.ghostscript.com/show_bug.cgi?id=707691
  to fix bsc#1226946
  "path traversal and command execution due to path reduction"</changelog>
  <changelog author="jsmeix@suse.com" date="1721131200">- CVE-2024-29508.patch is for Ghostscript-9.52 derived from
  https://git.ghostscript.com/?p=ghostpdl.git;h=ff1013a0ab485b66783b70145e342a82c670906a
  therein only the part that addresses CVE-2024-29508
  i.e. the change in gdevpdtb.c which "uses a fixed name
  for fonts which have no name instead of using the pointer
  to the address of the font"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707510
  to fix bsc#1227380
  "heap pointer leak in pdf_base_font_alloc()"</changelog>
  <changelog author="jsmeix@suse.com" date="1729771200">- CVE-2024-46951.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=f49812186baa
  that fixes CVE-2024-46951
  "Arbitrary code execution via unchecked 'Implementation'
  pointer in 'Pattern' color space"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707991
  (bsc#1232265)</changelog>
  <changelog author="jsmeix@suse.com" date="1729771201">- CVE-2024-46953.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=1f21a45df0fa
  that fixes CVE-2024-46953
  "An integer overflow when parsing the page format
  results in path truncation, path traversal, code execution"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707793
  (bsc#1232267)</changelog>
  <changelog author="jsmeix@suse.com" date="1729857600">- CVE-2024-46955.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=85bd9d2f4b79
  that fixes CVE-2024-46955
  "Out of bounds read when reading color in 'Indexed' color space"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707990
  (bsc#1232269)</changelog>
  <changelog author="jsmeix@suse.com" date="1729857601">- CVE-2024-46956.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=f4151f12db32
  that fixes CVE-2024-46956
  "Arbitrary code execution via out of bounds data access in filenameforall"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707895
  (bsc#1232270)</changelog>
  <changelog author="jsmeix@suse.com" date="1743163200">- CVE-2025-27831.patch is for Ghostscript-9.52 derived from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=e4db46d7529a
  that fixes CVE-2025-27831
  "DOCXWRITE TXTWRITE device has a text buffer overflow
  via long characters to devices/vector/doc_common.c"
  only for the TXTWRITE device in devices/vector/gdevtxtw.c
  because there is no DOCXWRITE device in Ghostscript-9.52
  see https://bugs.ghostscript.com/show_bug.cgi?id=708132
  (bsc#1240075)
- CVE-2025-27832.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=36ac25fca7b
  that fixes CVE-2025-27832
  "NPDL device has a Compression buffer overflow for contrib/japanese/gdevnpdl.c"
  see https://bugs.ghostscript.com/show_bug.cgi?id=708133
  (bsc#1240077)
- CVE-2025-27835.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=920fae68870
  that fixes CVE-2025-27835
  "buffer overflow occurs when converting glyphs to Unicode in psi/zbfont.c"
  see https://bugs.ghostscript.com/show_bug.cgi?id=708131
  (bsc#1240080)
- CVE-2025-27836.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=db77f4c0ce0
  that fixes CVE-2025-27836
  "BJ10V device has a Print buffer overflow in contrib/japanese/gdev10v.c"
  see https://bugs.ghostscript.com/show_bug.cgi?id=708192
  (bsc#1240081)
- Removed the not used remove-zlib-h-dependency.patch file because
  otherwise the OBS source_service 'source_validator' fails with
  "ERROR: patch 100 remove-zlib-h-dependency.patch
  apparently not applied (or not applied via %patch)"</changelog>
  <changelog author="jsmeix@suse.com" date="1754568000">- CVE-2025-48708.patch is for Ghostscript-9.52 derived from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=b587663c623b4462f9e78686a31fd880207303ee
  that fixes CVE-2025-48708
  "lacks of argument sanitization may lead to password disclosure"
  see https://bugs.ghostscript.com/show_bug.cgi?id=708446
  (bsc#1243701)</changelog>
</package>
<package pkgid="3b13412e9fa5a7b8bcfc9039bf6845d6d4d93c01eceee2bedfc0a021e0416d77" name="ghostscript" arch="x86_64">
  <version epoch="0" ver="9.52" rel="150000.206.1"/>
  <changelog author="jsmeix@suse.de" date="1631275200">- CVE-2021-3781.patch fixes CVE-2021-3781
  Trivial -dSAFER bypass
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=704342
  (bsc#1190381)</changelog>
  <changelog author="werner@suse.de" date="1632916800">- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with its wrapper script (jira#PM-3037)</changelog>
  <changelog author="jsmeix@suse.de" date="1641902400">- CVE-2021-45944.patch fixes CVE-2021-45944
  use-after-free in sampled_data_sample
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-237.yaml
  (bsc#1194303)
- CVE-2021-45949.patch fixes CVE-2021-45949
  heap-based buffer overflow in sampled_data_finish
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-803.yaml
  (bsc#1194304)</changelog>
  <changelog author="jsmeix@suse.com" date="1680523200">- CVE-2023-28879.patch fixes CVE-2023-28879
  Buffer Overflow in s_xBCPE_process
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=706494
  (bsc#1210062)
- 41ef9a0bc36b9db7115fbe9623f989bfb47bbade.patch
  fixes compilation with FreeType 2.10.3+
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702985</changelog>
  <changelog author="jsmeix@suse.com" date="1688040000">- CVE-2023-36664.patch fixes CVE-2023-36664
  see https://bugs.ghostscript.com/show_bug.cgi?id=706761
  "OS command injection in %pipe% access"
  and https://bugs.ghostscript.com/show_bug.cgi?id=706778
  "%pipe% allowed_path bypass"
  and bsc#1212711
  "permission validation mishandling for pipe devices
  (with the %pipe% prefix or the | pipe character prefix)"</changelog>
  <changelog author="jsmeix@suse.com" date="1690372800">- CVE-2023-38559.patch fixes CVE-2023-38559
  "out of bounds read devn_pcx_write_rle() could result in DoS"
  see bsc#1213637
  and https://bugs.ghostscript.com/show_bug.cgi?id=706897
  which is in base/gdevdevn.c the same issue
  "ordering in if expression to avoid out-of-bounds access"
  as the already fixed CVE-2020-16305 in devices/gdevpcx.c
  see https://bugs.ghostscript.com/show_bug.cgi?id=701819</changelog>
  <changelog author="jsmeix@suse.com" date="1695124800">- CVE-2023-43115.patch is derived for Ghostscript-9.52 from
  https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=e59216049cac290fb437a04c4f41ea46826cfba5
  that fixes CVE-2023-43115 "remote code execution
  via crafted PostScript documents in gdevijs.c"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707051
  (bsc#1215466)</changelog>
  <changelog author="jsmeix@suse.com" date="1702382400">- CVE-2023-46751.patch is derived for Ghostscript-9.52 from
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=dcdbc595c13
  (there is no "device initialization redesign" in Ghostscript-9.52)
  that fixes CVE-2023-46751
  "dangling pointer in gdev_prn_open_printer_seekable()"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707264
  (bsc#1217871)</changelog>
  <changelog author="jsmeix@suse.com" date="1704888000">- txtwrite_use_after_free.patch is
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=8c7bd787defa071c96289b7da9397f673fddb874
  to fix https://bugs.ghostscript.com/show_bug.cgi?id=702229
  "txtwrite: use after free in 9.51 on some files"
  which fixes CVE-2020-36773 (bsc#1219554)
  "out-of-bounds write and use-after-free
  in devices/vector/gdevtxtw.c (for txtwrite)"
  see also https://bugzilla.opensuse.org/show_bug.cgi?id=1177922
  (bsc#1191841)</changelog>
  <changelog author="jsmeix@suse.com" date="1708948800">- bsc1219357.patch is derived for Ghostscript-9.52 from
  https://github.com/ArtifexSoftware/ghostpdl/commit/4ceaf92815302863a8c86fcfcf2347e0118dd3a5
  to fix bsc#1219357
  "Ghostscript segfaults in gs_heap_free_object()"</changelog>
  <changelog author="jsmeix@suse.com" date="1714996800">- CVE-2023-52722.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=afd7188f74918cb51b5fb89f52b54eb16e8acfd1
  "In SAFER (default) don't allow eexec seeds
  other than the Type 1 standard"
  to fix bsc#1223852
  "ghostscript: eexec seeds other than the Type 1 standard
  are allowed while using SAFER mode"</changelog>
  <changelog author="jsmeix@suse.com" date="1718971200">- CVE-2024-33871.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=7145885041bb52cc23964f0aa2aec1b1c82b5908
  "OPVP device - prevent unsafe parameter change with SAFER"
  to fix bsc#1225491
  "OPVP device arbitrary code execution via custom Driver library"</changelog>
  <changelog author="jsmeix@suse.com" date="1719576000">- CVE-2024-29510.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=3b1735085ecef20b29e8db3416ab36de93e86d1f
  "Uniprint device - prevent string configuration changes
  when SAFER"
  to fix bsc#1226945
  "format string injection leads to shell command execution
  (SAFER bypass)"
- CVE-2024-33870.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=79aef19c685984dc3da2dc090450407d9fbcff80
  see https://bugs.ghostscript.com/show_bug.cgi?id=707686
  to fix bsc#1226944
  "path traversal to arbitrary files if the current directory
  is in the permitted paths"
- CVE-2024-33869.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=5ae2e320d69a7d0973011796bd388cd5befa1a43
  and
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=f5336e5b4154f515ac83bc5b9eba94302e6618d4
  see https://bugs.ghostscript.com/show_bug.cgi?id=707691
  to fix bsc#1226946
  "path traversal and command execution due to path reduction"</changelog>
  <changelog author="jsmeix@suse.com" date="1721131200">- CVE-2024-29508.patch is for Ghostscript-9.52 derived from
  https://git.ghostscript.com/?p=ghostpdl.git;h=ff1013a0ab485b66783b70145e342a82c670906a
  therein only the part that addresses CVE-2024-29508
  i.e. the change in gdevpdtb.c which "uses a fixed name
  for fonts which have no name instead of using the pointer
  to the address of the font"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707510
  to fix bsc#1227380
  "heap pointer leak in pdf_base_font_alloc()"</changelog>
  <changelog author="jsmeix@suse.com" date="1729771200">- CVE-2024-46951.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=f49812186baa
  that fixes CVE-2024-46951
  "Arbitrary code execution via unchecked 'Implementation'
  pointer in 'Pattern' color space"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707991
  (bsc#1232265)</changelog>
  <changelog author="jsmeix@suse.com" date="1729771201">- CVE-2024-46953.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=1f21a45df0fa
  that fixes CVE-2024-46953
  "An integer overflow when parsing the page format
  results in path truncation, path traversal, code execution"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707793
  (bsc#1232267)</changelog>
  <changelog author="jsmeix@suse.com" date="1729857600">- CVE-2024-46955.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=85bd9d2f4b79
  that fixes CVE-2024-46955
  "Out of bounds read when reading color in 'Indexed' color space"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707990
  (bsc#1232269)</changelog>
  <changelog author="jsmeix@suse.com" date="1729857601">- CVE-2024-46956.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=f4151f12db32
  that fixes CVE-2024-46956
  "Arbitrary code execution via out of bounds data access in filenameforall"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707895
  (bsc#1232270)</changelog>
  <changelog author="jsmeix@suse.com" date="1743163200">- CVE-2025-27831.patch is for Ghostscript-9.52 derived from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=e4db46d7529a
  that fixes CVE-2025-27831
  "DOCXWRITE TXTWRITE device has a text buffer overflow
  via long characters to devices/vector/doc_common.c"
  only for the TXTWRITE device in devices/vector/gdevtxtw.c
  because there is no DOCXWRITE device in Ghostscript-9.52
  see https://bugs.ghostscript.com/show_bug.cgi?id=708132
  (bsc#1240075)
- CVE-2025-27832.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=36ac25fca7b
  that fixes CVE-2025-27832
  "NPDL device has a Compression buffer overflow for contrib/japanese/gdevnpdl.c"
  see https://bugs.ghostscript.com/show_bug.cgi?id=708133
  (bsc#1240077)
- CVE-2025-27835.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=920fae68870
  that fixes CVE-2025-27835
  "buffer overflow occurs when converting glyphs to Unicode in psi/zbfont.c"
  see https://bugs.ghostscript.com/show_bug.cgi?id=708131
  (bsc#1240080)
- CVE-2025-27836.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=db77f4c0ce0
  that fixes CVE-2025-27836
  "BJ10V device has a Print buffer overflow in contrib/japanese/gdev10v.c"
  see https://bugs.ghostscript.com/show_bug.cgi?id=708192
  (bsc#1240081)
- Removed the not used remove-zlib-h-dependency.patch file because
  otherwise the OBS source_service 'source_validator' fails with
  "ERROR: patch 100 remove-zlib-h-dependency.patch
  apparently not applied (or not applied via %patch)"</changelog>
  <changelog author="jsmeix@suse.com" date="1754568000">- CVE-2025-48708.patch is for Ghostscript-9.52 derived from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=b587663c623b4462f9e78686a31fd880207303ee
  that fixes CVE-2025-48708
  "lacks of argument sanitization may lead to password disclosure"
  see https://bugs.ghostscript.com/show_bug.cgi?id=708446
  (bsc#1243701)</changelog>
</package>
<package pkgid="9ae4f4b9ffb8ed19e1c7f653bddeee3c168be7705e1eb349bb6e0fc169662552" name="ghostscript" arch="src">
  <version epoch="0" ver="9.52" rel="150000.211.1"/>
  <changelog author="werner@suse.de" date="1632916800">- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with its wrapper script (jira#PM-3037)</changelog>
  <changelog author="jsmeix@suse.de" date="1641902400">- CVE-2021-45944.patch fixes CVE-2021-45944
  use-after-free in sampled_data_sample
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-237.yaml
  (bsc#1194303)
- CVE-2021-45949.patch fixes CVE-2021-45949
  heap-based buffer overflow in sampled_data_finish
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-803.yaml
  (bsc#1194304)</changelog>
  <changelog author="jsmeix@suse.com" date="1680523200">- CVE-2023-28879.patch fixes CVE-2023-28879
  Buffer Overflow in s_xBCPE_process
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=706494
  (bsc#1210062)
- 41ef9a0bc36b9db7115fbe9623f989bfb47bbade.patch
  fixes compilation with FreeType 2.10.3+
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702985</changelog>
  <changelog author="jsmeix@suse.com" date="1688040000">- CVE-2023-36664.patch fixes CVE-2023-36664
  see https://bugs.ghostscript.com/show_bug.cgi?id=706761
  "OS command injection in %pipe% access"
  and https://bugs.ghostscript.com/show_bug.cgi?id=706778
  "%pipe% allowed_path bypass"
  and bsc#1212711
  "permission validation mishandling for pipe devices
  (with the %pipe% prefix or the | pipe character prefix)"</changelog>
  <changelog author="jsmeix@suse.com" date="1690372800">- CVE-2023-38559.patch fixes CVE-2023-38559
  "out of bounds read devn_pcx_write_rle() could result in DoS"
  see bsc#1213637
  and https://bugs.ghostscript.com/show_bug.cgi?id=706897
  which is in base/gdevdevn.c the same issue
  "ordering in if expression to avoid out-of-bounds access"
  as the already fixed CVE-2020-16305 in devices/gdevpcx.c
  see https://bugs.ghostscript.com/show_bug.cgi?id=701819</changelog>
  <changelog author="jsmeix@suse.com" date="1695124800">- CVE-2023-43115.patch is derived for Ghostscript-9.52 from
  https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=e59216049cac290fb437a04c4f41ea46826cfba5
  that fixes CVE-2023-43115 "remote code execution
  via crafted PostScript documents in gdevijs.c"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707051
  (bsc#1215466)</changelog>
  <changelog author="jsmeix@suse.com" date="1702382400">- CVE-2023-46751.patch is derived for Ghostscript-9.52 from
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=dcdbc595c13
  (there is no "device initialization redesign" in Ghostscript-9.52)
  that fixes CVE-2023-46751
  "dangling pointer in gdev_prn_open_printer_seekable()"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707264
  (bsc#1217871)</changelog>
  <changelog author="jsmeix@suse.com" date="1704888000">- txtwrite_use_after_free.patch is
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=8c7bd787defa071c96289b7da9397f673fddb874
  to fix https://bugs.ghostscript.com/show_bug.cgi?id=702229
  "txtwrite: use after free in 9.51 on some files"
  which fixes CVE-2020-36773 (bsc#1219554)
  "out-of-bounds write and use-after-free
  in devices/vector/gdevtxtw.c (for txtwrite)"
  see also https://bugzilla.opensuse.org/show_bug.cgi?id=1177922
  (bsc#1191841)</changelog>
  <changelog author="jsmeix@suse.com" date="1708948800">- bsc1219357.patch is derived for Ghostscript-9.52 from
  https://github.com/ArtifexSoftware/ghostpdl/commit/4ceaf92815302863a8c86fcfcf2347e0118dd3a5
  to fix bsc#1219357
  "Ghostscript segfaults in gs_heap_free_object()"</changelog>
  <changelog author="jsmeix@suse.com" date="1714996800">- CVE-2023-52722.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=afd7188f74918cb51b5fb89f52b54eb16e8acfd1
  "In SAFER (default) don't allow eexec seeds
  other than the Type 1 standard"
  to fix bsc#1223852
  "ghostscript: eexec seeds other than the Type 1 standard
  are allowed while using SAFER mode"</changelog>
  <changelog author="jsmeix@suse.com" date="1718971200">- CVE-2024-33871.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=7145885041bb52cc23964f0aa2aec1b1c82b5908
  "OPVP device - prevent unsafe parameter change with SAFER"
  to fix bsc#1225491
  "OPVP device arbitrary code execution via custom Driver library"</changelog>
  <changelog author="jsmeix@suse.com" date="1719576000">- CVE-2024-29510.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=3b1735085ecef20b29e8db3416ab36de93e86d1f
  "Uniprint device - prevent string configuration changes
  when SAFER"
  to fix bsc#1226945
  "format string injection leads to shell command execution
  (SAFER bypass)"
- CVE-2024-33870.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=79aef19c685984dc3da2dc090450407d9fbcff80
  see https://bugs.ghostscript.com/show_bug.cgi?id=707686
  to fix bsc#1226944
  "path traversal to arbitrary files if the current directory
  is in the permitted paths"
- CVE-2024-33869.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=5ae2e320d69a7d0973011796bd388cd5befa1a43
  and
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=f5336e5b4154f515ac83bc5b9eba94302e6618d4
  see https://bugs.ghostscript.com/show_bug.cgi?id=707691
  to fix bsc#1226946
  "path traversal and command execution due to path reduction"</changelog>
  <changelog author="jsmeix@suse.com" date="1721131200">- CVE-2024-29508.patch is for Ghostscript-9.52 derived from
  https://git.ghostscript.com/?p=ghostpdl.git;h=ff1013a0ab485b66783b70145e342a82c670906a
  therein only the part that addresses CVE-2024-29508
  i.e. the change in gdevpdtb.c which "uses a fixed name
  for fonts which have no name instead of using the pointer
  to the address of the font"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707510
  to fix bsc#1227380
  "heap pointer leak in pdf_base_font_alloc()"</changelog>
  <changelog author="jsmeix@suse.com" date="1729771200">- CVE-2024-46951.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=f49812186baa
  that fixes CVE-2024-46951
  "Arbitrary code execution via unchecked 'Implementation'
  pointer in 'Pattern' color space"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707991
  (bsc#1232265)</changelog>
  <changelog author="jsmeix@suse.com" date="1729771201">- CVE-2024-46953.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=1f21a45df0fa
  that fixes CVE-2024-46953
  "An integer overflow when parsing the page format
  results in path truncation, path traversal, code execution"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707793
  (bsc#1232267)</changelog>
  <changelog author="jsmeix@suse.com" date="1729857600">- CVE-2024-46955.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=85bd9d2f4b79
  that fixes CVE-2024-46955
  "Out of bounds read when reading color in 'Indexed' color space"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707990
  (bsc#1232269)</changelog>
  <changelog author="jsmeix@suse.com" date="1729857601">- CVE-2024-46956.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=f4151f12db32
  that fixes CVE-2024-46956
  "Arbitrary code execution via out of bounds data access in filenameforall"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707895
  (bsc#1232270)</changelog>
  <changelog author="jsmeix@suse.com" date="1743163200">- CVE-2025-27831.patch is for Ghostscript-9.52 derived from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=e4db46d7529a
  that fixes CVE-2025-27831
  "DOCXWRITE TXTWRITE device has a text buffer overflow
  via long characters to devices/vector/doc_common.c"
  only for the TXTWRITE device in devices/vector/gdevtxtw.c
  because there is no DOCXWRITE device in Ghostscript-9.52
  see https://bugs.ghostscript.com/show_bug.cgi?id=708132
  (bsc#1240075)
- CVE-2025-27832.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=36ac25fca7b
  that fixes CVE-2025-27832
  "NPDL device has a Compression buffer overflow for contrib/japanese/gdevnpdl.c"
  see https://bugs.ghostscript.com/show_bug.cgi?id=708133
  (bsc#1240077)
- CVE-2025-27835.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=920fae68870
  that fixes CVE-2025-27835
  "buffer overflow occurs when converting glyphs to Unicode in psi/zbfont.c"
  see https://bugs.ghostscript.com/show_bug.cgi?id=708131
  (bsc#1240080)
- CVE-2025-27836.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=db77f4c0ce0
  that fixes CVE-2025-27836
  "BJ10V device has a Print buffer overflow in contrib/japanese/gdev10v.c"
  see https://bugs.ghostscript.com/show_bug.cgi?id=708192
  (bsc#1240081)
- Removed the not used remove-zlib-h-dependency.patch file because
  otherwise the OBS source_service 'source_validator' fails with
  "ERROR: patch 100 remove-zlib-h-dependency.patch
  apparently not applied (or not applied via %patch)"</changelog>
  <changelog author="jsmeix@suse.com" date="1754568000">- CVE-2025-48708.patch is for Ghostscript-9.52 derived from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=b587663c623b4462f9e78686a31fd880207303ee
  that fixes CVE-2025-48708
  "lacks of argument sanitization may lead to password disclosure"
  see https://bugs.ghostscript.com/show_bug.cgi?id=708446
  (bsc#1243701)</changelog>
  <changelog author="jsmeix@suse.com" date="1762171200">- CVE-2025-59798.patch is for Ghostscript-9.52 derived from
  https://github.com/ArtifexSoftware/ghostpdl/commit/0cae41b23a9669e801211dd4cf97b6dadd6dbdd7
  that fixes CVE-2025-48708 "stack-based buffer overflow
  in pdf_write_cmap in devices/vector/gdevpdtw.c"
  see https://bugs.ghostscript.com/show_bug.cgi?id=708539
  (bsc#1250353)
- CVE-2025-59799.patch is for Ghostscript-9.52 derived from
  https://github.com/ArtifexSoftware/ghostpdl/commit/6dab38fb211f15226c242ab7a83fa53e4b0ff781
  that fixes CVE-2025-59799
  "stack-based buffer overflow in pdfmark_coerce_dest
  in devices/vector/gdevpdfm.c via a large size value"
  see https://bugs.ghostscript.com/show_bug.cgi?id=708517
  (bsc#1250354)</changelog>
</package>
<package pkgid="5e54c19e4341cc3f9744565aaac04ae3472edada197ec474fd32853b79f97a03" name="ghostscript" arch="x86_64">
  <version epoch="0" ver="9.52" rel="150000.211.1"/>
  <changelog author="werner@suse.de" date="1632916800">- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with its wrapper script (jira#PM-3037)</changelog>
  <changelog author="jsmeix@suse.de" date="1641902400">- CVE-2021-45944.patch fixes CVE-2021-45944
  use-after-free in sampled_data_sample
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-237.yaml
  (bsc#1194303)
- CVE-2021-45949.patch fixes CVE-2021-45949
  heap-based buffer overflow in sampled_data_finish
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-803.yaml
  (bsc#1194304)</changelog>
  <changelog author="jsmeix@suse.com" date="1680523200">- CVE-2023-28879.patch fixes CVE-2023-28879
  Buffer Overflow in s_xBCPE_process
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=706494
  (bsc#1210062)
- 41ef9a0bc36b9db7115fbe9623f989bfb47bbade.patch
  fixes compilation with FreeType 2.10.3+
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702985</changelog>
  <changelog author="jsmeix@suse.com" date="1688040000">- CVE-2023-36664.patch fixes CVE-2023-36664
  see https://bugs.ghostscript.com/show_bug.cgi?id=706761
  "OS command injection in %pipe% access"
  and https://bugs.ghostscript.com/show_bug.cgi?id=706778
  "%pipe% allowed_path bypass"
  and bsc#1212711
  "permission validation mishandling for pipe devices
  (with the %pipe% prefix or the | pipe character prefix)"</changelog>
  <changelog author="jsmeix@suse.com" date="1690372800">- CVE-2023-38559.patch fixes CVE-2023-38559
  "out of bounds read devn_pcx_write_rle() could result in DoS"
  see bsc#1213637
  and https://bugs.ghostscript.com/show_bug.cgi?id=706897
  which is in base/gdevdevn.c the same issue
  "ordering in if expression to avoid out-of-bounds access"
  as the already fixed CVE-2020-16305 in devices/gdevpcx.c
  see https://bugs.ghostscript.com/show_bug.cgi?id=701819</changelog>
  <changelog author="jsmeix@suse.com" date="1695124800">- CVE-2023-43115.patch is derived for Ghostscript-9.52 from
  https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=e59216049cac290fb437a04c4f41ea46826cfba5
  that fixes CVE-2023-43115 "remote code execution
  via crafted PostScript documents in gdevijs.c"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707051
  (bsc#1215466)</changelog>
  <changelog author="jsmeix@suse.com" date="1702382400">- CVE-2023-46751.patch is derived for Ghostscript-9.52 from
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=dcdbc595c13
  (there is no "device initialization redesign" in Ghostscript-9.52)
  that fixes CVE-2023-46751
  "dangling pointer in gdev_prn_open_printer_seekable()"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707264
  (bsc#1217871)</changelog>
  <changelog author="jsmeix@suse.com" date="1704888000">- txtwrite_use_after_free.patch is
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=8c7bd787defa071c96289b7da9397f673fddb874
  to fix https://bugs.ghostscript.com/show_bug.cgi?id=702229
  "txtwrite: use after free in 9.51 on some files"
  which fixes CVE-2020-36773 (bsc#1219554)
  "out-of-bounds write and use-after-free
  in devices/vector/gdevtxtw.c (for txtwrite)"
  see also https://bugzilla.opensuse.org/show_bug.cgi?id=1177922
  (bsc#1191841)</changelog>
  <changelog author="jsmeix@suse.com" date="1708948800">- bsc1219357.patch is derived for Ghostscript-9.52 from
  https://github.com/ArtifexSoftware/ghostpdl/commit/4ceaf92815302863a8c86fcfcf2347e0118dd3a5
  to fix bsc#1219357
  "Ghostscript segfaults in gs_heap_free_object()"</changelog>
  <changelog author="jsmeix@suse.com" date="1714996800">- CVE-2023-52722.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=afd7188f74918cb51b5fb89f52b54eb16e8acfd1
  "In SAFER (default) don't allow eexec seeds
  other than the Type 1 standard"
  to fix bsc#1223852
  "ghostscript: eexec seeds other than the Type 1 standard
  are allowed while using SAFER mode"</changelog>
  <changelog author="jsmeix@suse.com" date="1718971200">- CVE-2024-33871.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=7145885041bb52cc23964f0aa2aec1b1c82b5908
  "OPVP device - prevent unsafe parameter change with SAFER"
  to fix bsc#1225491
  "OPVP device arbitrary code execution via custom Driver library"</changelog>
  <changelog author="jsmeix@suse.com" date="1719576000">- CVE-2024-29510.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=3b1735085ecef20b29e8db3416ab36de93e86d1f
  "Uniprint device - prevent string configuration changes
  when SAFER"
  to fix bsc#1226945
  "format string injection leads to shell command execution
  (SAFER bypass)"
- CVE-2024-33870.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=79aef19c685984dc3da2dc090450407d9fbcff80
  see https://bugs.ghostscript.com/show_bug.cgi?id=707686
  to fix bsc#1226944
  "path traversal to arbitrary files if the current directory
  is in the permitted paths"
- CVE-2024-33869.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=5ae2e320d69a7d0973011796bd388cd5befa1a43
  and
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=f5336e5b4154f515ac83bc5b9eba94302e6618d4
  see https://bugs.ghostscript.com/show_bug.cgi?id=707691
  to fix bsc#1226946
  "path traversal and command execution due to path reduction"</changelog>
  <changelog author="jsmeix@suse.com" date="1721131200">- CVE-2024-29508.patch is for Ghostscript-9.52 derived from
  https://git.ghostscript.com/?p=ghostpdl.git;h=ff1013a0ab485b66783b70145e342a82c670906a
  therein only the part that addresses CVE-2024-29508
  i.e. the change in gdevpdtb.c which "uses a fixed name
  for fonts which have no name instead of using the pointer
  to the address of the font"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707510
  to fix bsc#1227380
  "heap pointer leak in pdf_base_font_alloc()"</changelog>
  <changelog author="jsmeix@suse.com" date="1729771200">- CVE-2024-46951.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=f49812186baa
  that fixes CVE-2024-46951
  "Arbitrary code execution via unchecked 'Implementation'
  pointer in 'Pattern' color space"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707991
  (bsc#1232265)</changelog>
  <changelog author="jsmeix@suse.com" date="1729771201">- CVE-2024-46953.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=1f21a45df0fa
  that fixes CVE-2024-46953
  "An integer overflow when parsing the page format
  results in path truncation, path traversal, code execution"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707793
  (bsc#1232267)</changelog>
  <changelog author="jsmeix@suse.com" date="1729857600">- CVE-2024-46955.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=85bd9d2f4b79
  that fixes CVE-2024-46955
  "Out of bounds read when reading color in 'Indexed' color space"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707990
  (bsc#1232269)</changelog>
  <changelog author="jsmeix@suse.com" date="1729857601">- CVE-2024-46956.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=f4151f12db32
  that fixes CVE-2024-46956
  "Arbitrary code execution via out of bounds data access in filenameforall"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707895
  (bsc#1232270)</changelog>
  <changelog author="jsmeix@suse.com" date="1743163200">- CVE-2025-27831.patch is for Ghostscript-9.52 derived from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=e4db46d7529a
  that fixes CVE-2025-27831
  "DOCXWRITE TXTWRITE device has a text buffer overflow
  via long characters to devices/vector/doc_common.c"
  only for the TXTWRITE device in devices/vector/gdevtxtw.c
  because there is no DOCXWRITE device in Ghostscript-9.52
  see https://bugs.ghostscript.com/show_bug.cgi?id=708132
  (bsc#1240075)
- CVE-2025-27832.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=36ac25fca7b
  that fixes CVE-2025-27832
  "NPDL device has a Compression buffer overflow for contrib/japanese/gdevnpdl.c"
  see https://bugs.ghostscript.com/show_bug.cgi?id=708133
  (bsc#1240077)
- CVE-2025-27835.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=920fae68870
  that fixes CVE-2025-27835
  "buffer overflow occurs when converting glyphs to Unicode in psi/zbfont.c"
  see https://bugs.ghostscript.com/show_bug.cgi?id=708131
  (bsc#1240080)
- CVE-2025-27836.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=db77f4c0ce0
  that fixes CVE-2025-27836
  "BJ10V device has a Print buffer overflow in contrib/japanese/gdev10v.c"
  see https://bugs.ghostscript.com/show_bug.cgi?id=708192
  (bsc#1240081)
- Removed the not used remove-zlib-h-dependency.patch file because
  otherwise the OBS source_service 'source_validator' fails with
  "ERROR: patch 100 remove-zlib-h-dependency.patch
  apparently not applied (or not applied via %patch)"</changelog>
  <changelog author="jsmeix@suse.com" date="1754568000">- CVE-2025-48708.patch is for Ghostscript-9.52 derived from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=b587663c623b4462f9e78686a31fd880207303ee
  that fixes CVE-2025-48708
  "lacks of argument sanitization may lead to password disclosure"
  see https://bugs.ghostscript.com/show_bug.cgi?id=708446
  (bsc#1243701)</changelog>
  <changelog author="jsmeix@suse.com" date="1762171200">- CVE-2025-59798.patch is for Ghostscript-9.52 derived from
  https://github.com/ArtifexSoftware/ghostpdl/commit/0cae41b23a9669e801211dd4cf97b6dadd6dbdd7
  that fixes CVE-2025-48708 "stack-based buffer overflow
  in pdf_write_cmap in devices/vector/gdevpdtw.c"
  see https://bugs.ghostscript.com/show_bug.cgi?id=708539
  (bsc#1250353)
- CVE-2025-59799.patch is for Ghostscript-9.52 derived from
  https://github.com/ArtifexSoftware/ghostpdl/commit/6dab38fb211f15226c242ab7a83fa53e4b0ff781
  that fixes CVE-2025-59799
  "stack-based buffer overflow in pdfmark_coerce_dest
  in devices/vector/gdevpdfm.c via a large size value"
  see https://bugs.ghostscript.com/show_bug.cgi?id=708517
  (bsc#1250354)</changelog>
</package>
<package pkgid="291cdc865d153360eec88a48a699155d155a42def8d86b3cd0b1f79f9930f003" name="ghostscript-devel" arch="x86_64">
  <version epoch="0" ver="9.52" rel="150000.206.1"/>
  <changelog author="jsmeix@suse.de" date="1631275200">- CVE-2021-3781.patch fixes CVE-2021-3781
  Trivial -dSAFER bypass
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=704342
  (bsc#1190381)</changelog>
  <changelog author="werner@suse.de" date="1632916800">- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with its wrapper script (jira#PM-3037)</changelog>
  <changelog author="jsmeix@suse.de" date="1641902400">- CVE-2021-45944.patch fixes CVE-2021-45944
  use-after-free in sampled_data_sample
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-237.yaml
  (bsc#1194303)
- CVE-2021-45949.patch fixes CVE-2021-45949
  heap-based buffer overflow in sampled_data_finish
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-803.yaml
  (bsc#1194304)</changelog>
  <changelog author="jsmeix@suse.com" date="1680523200">- CVE-2023-28879.patch fixes CVE-2023-28879
  Buffer Overflow in s_xBCPE_process
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=706494
  (bsc#1210062)
- 41ef9a0bc36b9db7115fbe9623f989bfb47bbade.patch
  fixes compilation with FreeType 2.10.3+
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702985</changelog>
  <changelog author="jsmeix@suse.com" date="1688040000">- CVE-2023-36664.patch fixes CVE-2023-36664
  see https://bugs.ghostscript.com/show_bug.cgi?id=706761
  "OS command injection in %pipe% access"
  and https://bugs.ghostscript.com/show_bug.cgi?id=706778
  "%pipe% allowed_path bypass"
  and bsc#1212711
  "permission validation mishandling for pipe devices
  (with the %pipe% prefix or the | pipe character prefix)"</changelog>
  <changelog author="jsmeix@suse.com" date="1690372800">- CVE-2023-38559.patch fixes CVE-2023-38559
  "out of bounds read devn_pcx_write_rle() could result in DoS"
  see bsc#1213637
  and https://bugs.ghostscript.com/show_bug.cgi?id=706897
  which is in base/gdevdevn.c the same issue
  "ordering in if expression to avoid out-of-bounds access"
  as the already fixed CVE-2020-16305 in devices/gdevpcx.c
  see https://bugs.ghostscript.com/show_bug.cgi?id=701819</changelog>
  <changelog author="jsmeix@suse.com" date="1695124800">- CVE-2023-43115.patch is derived for Ghostscript-9.52 from
  https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=e59216049cac290fb437a04c4f41ea46826cfba5
  that fixes CVE-2023-43115 "remote code execution
  via crafted PostScript documents in gdevijs.c"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707051
  (bsc#1215466)</changelog>
  <changelog author="jsmeix@suse.com" date="1702382400">- CVE-2023-46751.patch is derived for Ghostscript-9.52 from
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=dcdbc595c13
  (there is no "device initialization redesign" in Ghostscript-9.52)
  that fixes CVE-2023-46751
  "dangling pointer in gdev_prn_open_printer_seekable()"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707264
  (bsc#1217871)</changelog>
  <changelog author="jsmeix@suse.com" date="1704888000">- txtwrite_use_after_free.patch is
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=8c7bd787defa071c96289b7da9397f673fddb874
  to fix https://bugs.ghostscript.com/show_bug.cgi?id=702229
  "txtwrite: use after free in 9.51 on some files"
  which fixes CVE-2020-36773 (bsc#1219554)
  "out-of-bounds write and use-after-free
  in devices/vector/gdevtxtw.c (for txtwrite)"
  see also https://bugzilla.opensuse.org/show_bug.cgi?id=1177922
  (bsc#1191841)</changelog>
  <changelog author="jsmeix@suse.com" date="1708948800">- bsc1219357.patch is derived for Ghostscript-9.52 from
  https://github.com/ArtifexSoftware/ghostpdl/commit/4ceaf92815302863a8c86fcfcf2347e0118dd3a5
  to fix bsc#1219357
  "Ghostscript segfaults in gs_heap_free_object()"</changelog>
  <changelog author="jsmeix@suse.com" date="1714996800">- CVE-2023-52722.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=afd7188f74918cb51b5fb89f52b54eb16e8acfd1
  "In SAFER (default) don't allow eexec seeds
  other than the Type 1 standard"
  to fix bsc#1223852
  "ghostscript: eexec seeds other than the Type 1 standard
  are allowed while using SAFER mode"</changelog>
  <changelog author="jsmeix@suse.com" date="1718971200">- CVE-2024-33871.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=7145885041bb52cc23964f0aa2aec1b1c82b5908
  "OPVP device - prevent unsafe parameter change with SAFER"
  to fix bsc#1225491
  "OPVP device arbitrary code execution via custom Driver library"</changelog>
  <changelog author="jsmeix@suse.com" date="1719576000">- CVE-2024-29510.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=3b1735085ecef20b29e8db3416ab36de93e86d1f
  "Uniprint device - prevent string configuration changes
  when SAFER"
  to fix bsc#1226945
  "format string injection leads to shell command execution
  (SAFER bypass)"
- CVE-2024-33870.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=79aef19c685984dc3da2dc090450407d9fbcff80
  see https://bugs.ghostscript.com/show_bug.cgi?id=707686
  to fix bsc#1226944
  "path traversal to arbitrary files if the current directory
  is in the permitted paths"
- CVE-2024-33869.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=5ae2e320d69a7d0973011796bd388cd5befa1a43
  and
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=f5336e5b4154f515ac83bc5b9eba94302e6618d4
  see https://bugs.ghostscript.com/show_bug.cgi?id=707691
  to fix bsc#1226946
  "path traversal and command execution due to path reduction"</changelog>
  <changelog author="jsmeix@suse.com" date="1721131200">- CVE-2024-29508.patch is for Ghostscript-9.52 derived from
  https://git.ghostscript.com/?p=ghostpdl.git;h=ff1013a0ab485b66783b70145e342a82c670906a
  therein only the part that addresses CVE-2024-29508
  i.e. the change in gdevpdtb.c which "uses a fixed name
  for fonts which have no name instead of using the pointer
  to the address of the font"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707510
  to fix bsc#1227380
  "heap pointer leak in pdf_base_font_alloc()"</changelog>
  <changelog author="jsmeix@suse.com" date="1729771200">- CVE-2024-46951.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=f49812186baa
  that fixes CVE-2024-46951
  "Arbitrary code execution via unchecked 'Implementation'
  pointer in 'Pattern' color space"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707991
  (bsc#1232265)</changelog>
  <changelog author="jsmeix@suse.com" date="1729771201">- CVE-2024-46953.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=1f21a45df0fa
  that fixes CVE-2024-46953
  "An integer overflow when parsing the page format
  results in path truncation, path traversal, code execution"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707793
  (bsc#1232267)</changelog>
  <changelog author="jsmeix@suse.com" date="1729857600">- CVE-2024-46955.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=85bd9d2f4b79
  that fixes CVE-2024-46955
  "Out of bounds read when reading color in 'Indexed' color space"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707990
  (bsc#1232269)</changelog>
  <changelog author="jsmeix@suse.com" date="1729857601">- CVE-2024-46956.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=f4151f12db32
  that fixes CVE-2024-46956
  "Arbitrary code execution via out of bounds data access in filenameforall"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707895
  (bsc#1232270)</changelog>
  <changelog author="jsmeix@suse.com" date="1743163200">- CVE-2025-27831.patch is for Ghostscript-9.52 derived from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=e4db46d7529a
  that fixes CVE-2025-27831
  "DOCXWRITE TXTWRITE device has a text buffer overflow
  via long characters to devices/vector/doc_common.c"
  only for the TXTWRITE device in devices/vector/gdevtxtw.c
  because there is no DOCXWRITE device in Ghostscript-9.52
  see https://bugs.ghostscript.com/show_bug.cgi?id=708132
  (bsc#1240075)
- CVE-2025-27832.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=36ac25fca7b
  that fixes CVE-2025-27832
  "NPDL device has a Compression buffer overflow for contrib/japanese/gdevnpdl.c"
  see https://bugs.ghostscript.com/show_bug.cgi?id=708133
  (bsc#1240077)
- CVE-2025-27835.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=920fae68870
  that fixes CVE-2025-27835
  "buffer overflow occurs when converting glyphs to Unicode in psi/zbfont.c"
  see https://bugs.ghostscript.com/show_bug.cgi?id=708131
  (bsc#1240080)
- CVE-2025-27836.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=db77f4c0ce0
  that fixes CVE-2025-27836
  "BJ10V device has a Print buffer overflow in contrib/japanese/gdev10v.c"
  see https://bugs.ghostscript.com/show_bug.cgi?id=708192
  (bsc#1240081)
- Removed the not used remove-zlib-h-dependency.patch file because
  otherwise the OBS source_service 'source_validator' fails with
  "ERROR: patch 100 remove-zlib-h-dependency.patch
  apparently not applied (or not applied via %patch)"</changelog>
  <changelog author="jsmeix@suse.com" date="1754568000">- CVE-2025-48708.patch is for Ghostscript-9.52 derived from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=b587663c623b4462f9e78686a31fd880207303ee
  that fixes CVE-2025-48708
  "lacks of argument sanitization may lead to password disclosure"
  see https://bugs.ghostscript.com/show_bug.cgi?id=708446
  (bsc#1243701)</changelog>
</package>
<package pkgid="d5595cdfc0b59d1282c91b5d2ca1cf139befbfed7edc7d6a426c40c0a179c952" name="ghostscript-devel" arch="x86_64">
  <version epoch="0" ver="9.52" rel="150000.211.1"/>
  <changelog author="werner@suse.de" date="1632916800">- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with its wrapper script (jira#PM-3037)</changelog>
  <changelog author="jsmeix@suse.de" date="1641902400">- CVE-2021-45944.patch fixes CVE-2021-45944
  use-after-free in sampled_data_sample
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-237.yaml
  (bsc#1194303)
- CVE-2021-45949.patch fixes CVE-2021-45949
  heap-based buffer overflow in sampled_data_finish
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-803.yaml
  (bsc#1194304)</changelog>
  <changelog author="jsmeix@suse.com" date="1680523200">- CVE-2023-28879.patch fixes CVE-2023-28879
  Buffer Overflow in s_xBCPE_process
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=706494
  (bsc#1210062)
- 41ef9a0bc36b9db7115fbe9623f989bfb47bbade.patch
  fixes compilation with FreeType 2.10.3+
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702985</changelog>
  <changelog author="jsmeix@suse.com" date="1688040000">- CVE-2023-36664.patch fixes CVE-2023-36664
  see https://bugs.ghostscript.com/show_bug.cgi?id=706761
  "OS command injection in %pipe% access"
  and https://bugs.ghostscript.com/show_bug.cgi?id=706778
  "%pipe% allowed_path bypass"
  and bsc#1212711
  "permission validation mishandling for pipe devices
  (with the %pipe% prefix or the | pipe character prefix)"</changelog>
  <changelog author="jsmeix@suse.com" date="1690372800">- CVE-2023-38559.patch fixes CVE-2023-38559
  "out of bounds read devn_pcx_write_rle() could result in DoS"
  see bsc#1213637
  and https://bugs.ghostscript.com/show_bug.cgi?id=706897
  which is in base/gdevdevn.c the same issue
  "ordering in if expression to avoid out-of-bounds access"
  as the already fixed CVE-2020-16305 in devices/gdevpcx.c
  see https://bugs.ghostscript.com/show_bug.cgi?id=701819</changelog>
  <changelog author="jsmeix@suse.com" date="1695124800">- CVE-2023-43115.patch is derived for Ghostscript-9.52 from
  https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=e59216049cac290fb437a04c4f41ea46826cfba5
  that fixes CVE-2023-43115 "remote code execution
  via crafted PostScript documents in gdevijs.c"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707051
  (bsc#1215466)</changelog>
  <changelog author="jsmeix@suse.com" date="1702382400">- CVE-2023-46751.patch is derived for Ghostscript-9.52 from
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=dcdbc595c13
  (there is no "device initialization redesign" in Ghostscript-9.52)
  that fixes CVE-2023-46751
  "dangling pointer in gdev_prn_open_printer_seekable()"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707264
  (bsc#1217871)</changelog>
  <changelog author="jsmeix@suse.com" date="1704888000">- txtwrite_use_after_free.patch is
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=8c7bd787defa071c96289b7da9397f673fddb874
  to fix https://bugs.ghostscript.com/show_bug.cgi?id=702229
  "txtwrite: use after free in 9.51 on some files"
  which fixes CVE-2020-36773 (bsc#1219554)
  "out-of-bounds write and use-after-free
  in devices/vector/gdevtxtw.c (for txtwrite)"
  see also https://bugzilla.opensuse.org/show_bug.cgi?id=1177922
  (bsc#1191841)</changelog>
  <changelog author="jsmeix@suse.com" date="1708948800">- bsc1219357.patch is derived for Ghostscript-9.52 from
  https://github.com/ArtifexSoftware/ghostpdl/commit/4ceaf92815302863a8c86fcfcf2347e0118dd3a5
  to fix bsc#1219357
  "Ghostscript segfaults in gs_heap_free_object()"</changelog>
  <changelog author="jsmeix@suse.com" date="1714996800">- CVE-2023-52722.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=afd7188f74918cb51b5fb89f52b54eb16e8acfd1
  "In SAFER (default) don't allow eexec seeds
  other than the Type 1 standard"
  to fix bsc#1223852
  "ghostscript: eexec seeds other than the Type 1 standard
  are allowed while using SAFER mode"</changelog>
  <changelog author="jsmeix@suse.com" date="1718971200">- CVE-2024-33871.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=7145885041bb52cc23964f0aa2aec1b1c82b5908
  "OPVP device - prevent unsafe parameter change with SAFER"
  to fix bsc#1225491
  "OPVP device arbitrary code execution via custom Driver library"</changelog>
  <changelog author="jsmeix@suse.com" date="1719576000">- CVE-2024-29510.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=3b1735085ecef20b29e8db3416ab36de93e86d1f
  "Uniprint device - prevent string configuration changes
  when SAFER"
  to fix bsc#1226945
  "format string injection leads to shell command execution
  (SAFER bypass)"
- CVE-2024-33870.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=79aef19c685984dc3da2dc090450407d9fbcff80
  see https://bugs.ghostscript.com/show_bug.cgi?id=707686
  to fix bsc#1226944
  "path traversal to arbitrary files if the current directory
  is in the permitted paths"
- CVE-2024-33869.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=5ae2e320d69a7d0973011796bd388cd5befa1a43
  and
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=f5336e5b4154f515ac83bc5b9eba94302e6618d4
  see https://bugs.ghostscript.com/show_bug.cgi?id=707691
  to fix bsc#1226946
  "path traversal and command execution due to path reduction"</changelog>
  <changelog author="jsmeix@suse.com" date="1721131200">- CVE-2024-29508.patch is for Ghostscript-9.52 derived from
  https://git.ghostscript.com/?p=ghostpdl.git;h=ff1013a0ab485b66783b70145e342a82c670906a
  therein only the part that addresses CVE-2024-29508
  i.e. the change in gdevpdtb.c which "uses a fixed name
  for fonts which have no name instead of using the pointer
  to the address of the font"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707510
  to fix bsc#1227380
  "heap pointer leak in pdf_base_font_alloc()"</changelog>
  <changelog author="jsmeix@suse.com" date="1729771200">- CVE-2024-46951.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=f49812186baa
  that fixes CVE-2024-46951
  "Arbitrary code execution via unchecked 'Implementation'
  pointer in 'Pattern' color space"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707991
  (bsc#1232265)</changelog>
  <changelog author="jsmeix@suse.com" date="1729771201">- CVE-2024-46953.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=1f21a45df0fa
  that fixes CVE-2024-46953
  "An integer overflow when parsing the page format
  results in path truncation, path traversal, code execution"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707793
  (bsc#1232267)</changelog>
  <changelog author="jsmeix@suse.com" date="1729857600">- CVE-2024-46955.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=85bd9d2f4b79
  that fixes CVE-2024-46955
  "Out of bounds read when reading color in 'Indexed' color space"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707990
  (bsc#1232269)</changelog>
  <changelog author="jsmeix@suse.com" date="1729857601">- CVE-2024-46956.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=f4151f12db32
  that fixes CVE-2024-46956
  "Arbitrary code execution via out of bounds data access in filenameforall"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707895
  (bsc#1232270)</changelog>
  <changelog author="jsmeix@suse.com" date="1743163200">- CVE-2025-27831.patch is for Ghostscript-9.52 derived from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=e4db46d7529a
  that fixes CVE-2025-27831
  "DOCXWRITE TXTWRITE device has a text buffer overflow
  via long characters to devices/vector/doc_common.c"
  only for the TXTWRITE device in devices/vector/gdevtxtw.c
  because there is no DOCXWRITE device in Ghostscript-9.52
  see https://bugs.ghostscript.com/show_bug.cgi?id=708132
  (bsc#1240075)
- CVE-2025-27832.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=36ac25fca7b
  that fixes CVE-2025-27832
  "NPDL device has a Compression buffer overflow for contrib/japanese/gdevnpdl.c"
  see https://bugs.ghostscript.com/show_bug.cgi?id=708133
  (bsc#1240077)
- CVE-2025-27835.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=920fae68870
  that fixes CVE-2025-27835
  "buffer overflow occurs when converting glyphs to Unicode in psi/zbfont.c"
  see https://bugs.ghostscript.com/show_bug.cgi?id=708131
  (bsc#1240080)
- CVE-2025-27836.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=db77f4c0ce0
  that fixes CVE-2025-27836
  "BJ10V device has a Print buffer overflow in contrib/japanese/gdev10v.c"
  see https://bugs.ghostscript.com/show_bug.cgi?id=708192
  (bsc#1240081)
- Removed the not used remove-zlib-h-dependency.patch file because
  otherwise the OBS source_service 'source_validator' fails with
  "ERROR: patch 100 remove-zlib-h-dependency.patch
  apparently not applied (or not applied via %patch)"</changelog>
  <changelog author="jsmeix@suse.com" date="1754568000">- CVE-2025-48708.patch is for Ghostscript-9.52 derived from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=b587663c623b4462f9e78686a31fd880207303ee
  that fixes CVE-2025-48708
  "lacks of argument sanitization may lead to password disclosure"
  see https://bugs.ghostscript.com/show_bug.cgi?id=708446
  (bsc#1243701)</changelog>
  <changelog author="jsmeix@suse.com" date="1762171200">- CVE-2025-59798.patch is for Ghostscript-9.52 derived from
  https://github.com/ArtifexSoftware/ghostpdl/commit/0cae41b23a9669e801211dd4cf97b6dadd6dbdd7
  that fixes CVE-2025-48708 "stack-based buffer overflow
  in pdf_write_cmap in devices/vector/gdevpdtw.c"
  see https://bugs.ghostscript.com/show_bug.cgi?id=708539
  (bsc#1250353)
- CVE-2025-59799.patch is for Ghostscript-9.52 derived from
  https://github.com/ArtifexSoftware/ghostpdl/commit/6dab38fb211f15226c242ab7a83fa53e4b0ff781
  that fixes CVE-2025-59799
  "stack-based buffer overflow in pdfmark_coerce_dest
  in devices/vector/gdevpdfm.c via a large size value"
  see https://bugs.ghostscript.com/show_bug.cgi?id=708517
  (bsc#1250354)</changelog>
</package>
<package pkgid="c5beb18de349959a85bf19cecef574b3c07c9d9d5967b51376bfca8f8cf8b57b" name="ghostscript-x11" arch="x86_64">
  <version epoch="0" ver="9.52" rel="150000.206.1"/>
  <changelog author="jsmeix@suse.de" date="1631275200">- CVE-2021-3781.patch fixes CVE-2021-3781
  Trivial -dSAFER bypass
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=704342
  (bsc#1190381)</changelog>
  <changelog author="werner@suse.de" date="1632916800">- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with its wrapper script (jira#PM-3037)</changelog>
  <changelog author="jsmeix@suse.de" date="1641902400">- CVE-2021-45944.patch fixes CVE-2021-45944
  use-after-free in sampled_data_sample
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-237.yaml
  (bsc#1194303)
- CVE-2021-45949.patch fixes CVE-2021-45949
  heap-based buffer overflow in sampled_data_finish
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-803.yaml
  (bsc#1194304)</changelog>
  <changelog author="jsmeix@suse.com" date="1680523200">- CVE-2023-28879.patch fixes CVE-2023-28879
  Buffer Overflow in s_xBCPE_process
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=706494
  (bsc#1210062)
- 41ef9a0bc36b9db7115fbe9623f989bfb47bbade.patch
  fixes compilation with FreeType 2.10.3+
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702985</changelog>
  <changelog author="jsmeix@suse.com" date="1688040000">- CVE-2023-36664.patch fixes CVE-2023-36664
  see https://bugs.ghostscript.com/show_bug.cgi?id=706761
  "OS command injection in %pipe% access"
  and https://bugs.ghostscript.com/show_bug.cgi?id=706778
  "%pipe% allowed_path bypass"
  and bsc#1212711
  "permission validation mishandling for pipe devices
  (with the %pipe% prefix or the | pipe character prefix)"</changelog>
  <changelog author="jsmeix@suse.com" date="1690372800">- CVE-2023-38559.patch fixes CVE-2023-38559
  "out of bounds read devn_pcx_write_rle() could result in DoS"
  see bsc#1213637
  and https://bugs.ghostscript.com/show_bug.cgi?id=706897
  which is in base/gdevdevn.c the same issue
  "ordering in if expression to avoid out-of-bounds access"
  as the already fixed CVE-2020-16305 in devices/gdevpcx.c
  see https://bugs.ghostscript.com/show_bug.cgi?id=701819</changelog>
  <changelog author="jsmeix@suse.com" date="1695124800">- CVE-2023-43115.patch is derived for Ghostscript-9.52 from
  https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=e59216049cac290fb437a04c4f41ea46826cfba5
  that fixes CVE-2023-43115 "remote code execution
  via crafted PostScript documents in gdevijs.c"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707051
  (bsc#1215466)</changelog>
  <changelog author="jsmeix@suse.com" date="1702382400">- CVE-2023-46751.patch is derived for Ghostscript-9.52 from
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=dcdbc595c13
  (there is no "device initialization redesign" in Ghostscript-9.52)
  that fixes CVE-2023-46751
  "dangling pointer in gdev_prn_open_printer_seekable()"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707264
  (bsc#1217871)</changelog>
  <changelog author="jsmeix@suse.com" date="1704888000">- txtwrite_use_after_free.patch is
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=8c7bd787defa071c96289b7da9397f673fddb874
  to fix https://bugs.ghostscript.com/show_bug.cgi?id=702229
  "txtwrite: use after free in 9.51 on some files"
  which fixes CVE-2020-36773 (bsc#1219554)
  "out-of-bounds write and use-after-free
  in devices/vector/gdevtxtw.c (for txtwrite)"
  see also https://bugzilla.opensuse.org/show_bug.cgi?id=1177922
  (bsc#1191841)</changelog>
  <changelog author="jsmeix@suse.com" date="1708948800">- bsc1219357.patch is derived for Ghostscript-9.52 from
  https://github.com/ArtifexSoftware/ghostpdl/commit/4ceaf92815302863a8c86fcfcf2347e0118dd3a5
  to fix bsc#1219357
  "Ghostscript segfaults in gs_heap_free_object()"</changelog>
  <changelog author="jsmeix@suse.com" date="1714996800">- CVE-2023-52722.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=afd7188f74918cb51b5fb89f52b54eb16e8acfd1
  "In SAFER (default) don't allow eexec seeds
  other than the Type 1 standard"
  to fix bsc#1223852
  "ghostscript: eexec seeds other than the Type 1 standard
  are allowed while using SAFER mode"</changelog>
  <changelog author="jsmeix@suse.com" date="1718971200">- CVE-2024-33871.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=7145885041bb52cc23964f0aa2aec1b1c82b5908
  "OPVP device - prevent unsafe parameter change with SAFER"
  to fix bsc#1225491
  "OPVP device arbitrary code execution via custom Driver library"</changelog>
  <changelog author="jsmeix@suse.com" date="1719576000">- CVE-2024-29510.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=3b1735085ecef20b29e8db3416ab36de93e86d1f
  "Uniprint device - prevent string configuration changes
  when SAFER"
  to fix bsc#1226945
  "format string injection leads to shell command execution
  (SAFER bypass)"
- CVE-2024-33870.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=79aef19c685984dc3da2dc090450407d9fbcff80
  see https://bugs.ghostscript.com/show_bug.cgi?id=707686
  to fix bsc#1226944
  "path traversal to arbitrary files if the current directory
  is in the permitted paths"
- CVE-2024-33869.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=5ae2e320d69a7d0973011796bd388cd5befa1a43
  and
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=f5336e5b4154f515ac83bc5b9eba94302e6618d4
  see https://bugs.ghostscript.com/show_bug.cgi?id=707691
  to fix bsc#1226946
  "path traversal and command execution due to path reduction"</changelog>
  <changelog author="jsmeix@suse.com" date="1721131200">- CVE-2024-29508.patch is for Ghostscript-9.52 derived from
  https://git.ghostscript.com/?p=ghostpdl.git;h=ff1013a0ab485b66783b70145e342a82c670906a
  therein only the part that addresses CVE-2024-29508
  i.e. the change in gdevpdtb.c which "uses a fixed name
  for fonts which have no name instead of using the pointer
  to the address of the font"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707510
  to fix bsc#1227380
  "heap pointer leak in pdf_base_font_alloc()"</changelog>
  <changelog author="jsmeix@suse.com" date="1729771200">- CVE-2024-46951.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=f49812186baa
  that fixes CVE-2024-46951
  "Arbitrary code execution via unchecked 'Implementation'
  pointer in 'Pattern' color space"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707991
  (bsc#1232265)</changelog>
  <changelog author="jsmeix@suse.com" date="1729771201">- CVE-2024-46953.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=1f21a45df0fa
  that fixes CVE-2024-46953
  "An integer overflow when parsing the page format
  results in path truncation, path traversal, code execution"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707793
  (bsc#1232267)</changelog>
  <changelog author="jsmeix@suse.com" date="1729857600">- CVE-2024-46955.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=85bd9d2f4b79
  that fixes CVE-2024-46955
  "Out of bounds read when reading color in 'Indexed' color space"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707990
  (bsc#1232269)</changelog>
  <changelog author="jsmeix@suse.com" date="1729857601">- CVE-2024-46956.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=f4151f12db32
  that fixes CVE-2024-46956
  "Arbitrary code execution via out of bounds data access in filenameforall"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707895
  (bsc#1232270)</changelog>
  <changelog author="jsmeix@suse.com" date="1743163200">- CVE-2025-27831.patch is for Ghostscript-9.52 derived from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=e4db46d7529a
  that fixes CVE-2025-27831
  "DOCXWRITE TXTWRITE device has a text buffer overflow
  via long characters to devices/vector/doc_common.c"
  only for the TXTWRITE device in devices/vector/gdevtxtw.c
  because there is no DOCXWRITE device in Ghostscript-9.52
  see https://bugs.ghostscript.com/show_bug.cgi?id=708132
  (bsc#1240075)
- CVE-2025-27832.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=36ac25fca7b
  that fixes CVE-2025-27832
  "NPDL device has a Compression buffer overflow for contrib/japanese/gdevnpdl.c"
  see https://bugs.ghostscript.com/show_bug.cgi?id=708133
  (bsc#1240077)
- CVE-2025-27835.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=920fae68870
  that fixes CVE-2025-27835
  "buffer overflow occurs when converting glyphs to Unicode in psi/zbfont.c"
  see https://bugs.ghostscript.com/show_bug.cgi?id=708131
  (bsc#1240080)
- CVE-2025-27836.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=db77f4c0ce0
  that fixes CVE-2025-27836
  "BJ10V device has a Print buffer overflow in contrib/japanese/gdev10v.c"
  see https://bugs.ghostscript.com/show_bug.cgi?id=708192
  (bsc#1240081)
- Removed the not used remove-zlib-h-dependency.patch file because
  otherwise the OBS source_service 'source_validator' fails with
  "ERROR: patch 100 remove-zlib-h-dependency.patch
  apparently not applied (or not applied via %patch)"</changelog>
  <changelog author="jsmeix@suse.com" date="1754568000">- CVE-2025-48708.patch is for Ghostscript-9.52 derived from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=b587663c623b4462f9e78686a31fd880207303ee
  that fixes CVE-2025-48708
  "lacks of argument sanitization may lead to password disclosure"
  see https://bugs.ghostscript.com/show_bug.cgi?id=708446
  (bsc#1243701)</changelog>
</package>
<package pkgid="9ccd9e888f146a80deb3465fca2e84b729792bdec0bdc673e207aa5f251e14df" name="ghostscript-x11" arch="x86_64">
  <version epoch="0" ver="9.52" rel="150000.211.1"/>
  <changelog author="werner@suse.de" date="1632916800">- Use update-alternatives to get the real ghostscript binary from
  /usr/bin/gs to /usr/bin/gs.bin and allow the gswrap package to
  use this with its wrapper script (jira#PM-3037)</changelog>
  <changelog author="jsmeix@suse.de" date="1641902400">- CVE-2021-45944.patch fixes CVE-2021-45944
  use-after-free in sampled_data_sample
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-237.yaml
  (bsc#1194303)
- CVE-2021-45949.patch fixes CVE-2021-45949
  heap-based buffer overflow in sampled_data_finish
  cf. https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-803.yaml
  (bsc#1194304)</changelog>
  <changelog author="jsmeix@suse.com" date="1680523200">- CVE-2023-28879.patch fixes CVE-2023-28879
  Buffer Overflow in s_xBCPE_process
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=706494
  (bsc#1210062)
- 41ef9a0bc36b9db7115fbe9623f989bfb47bbade.patch
  fixes compilation with FreeType 2.10.3+
  cf. https://bugs.ghostscript.com/show_bug.cgi?id=702985</changelog>
  <changelog author="jsmeix@suse.com" date="1688040000">- CVE-2023-36664.patch fixes CVE-2023-36664
  see https://bugs.ghostscript.com/show_bug.cgi?id=706761
  "OS command injection in %pipe% access"
  and https://bugs.ghostscript.com/show_bug.cgi?id=706778
  "%pipe% allowed_path bypass"
  and bsc#1212711
  "permission validation mishandling for pipe devices
  (with the %pipe% prefix or the | pipe character prefix)"</changelog>
  <changelog author="jsmeix@suse.com" date="1690372800">- CVE-2023-38559.patch fixes CVE-2023-38559
  "out of bounds read devn_pcx_write_rle() could result in DoS"
  see bsc#1213637
  and https://bugs.ghostscript.com/show_bug.cgi?id=706897
  which is in base/gdevdevn.c the same issue
  "ordering in if expression to avoid out-of-bounds access"
  as the already fixed CVE-2020-16305 in devices/gdevpcx.c
  see https://bugs.ghostscript.com/show_bug.cgi?id=701819</changelog>
  <changelog author="jsmeix@suse.com" date="1695124800">- CVE-2023-43115.patch is derived for Ghostscript-9.52 from
  https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=e59216049cac290fb437a04c4f41ea46826cfba5
  that fixes CVE-2023-43115 "remote code execution
  via crafted PostScript documents in gdevijs.c"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707051
  (bsc#1215466)</changelog>
  <changelog author="jsmeix@suse.com" date="1702382400">- CVE-2023-46751.patch is derived for Ghostscript-9.52 from
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=dcdbc595c13
  (there is no "device initialization redesign" in Ghostscript-9.52)
  that fixes CVE-2023-46751
  "dangling pointer in gdev_prn_open_printer_seekable()"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707264
  (bsc#1217871)</changelog>
  <changelog author="jsmeix@suse.com" date="1704888000">- txtwrite_use_after_free.patch is
  https://git.ghostscript.com/?p=ghostpdl.git;a=commitdiff;h=8c7bd787defa071c96289b7da9397f673fddb874
  to fix https://bugs.ghostscript.com/show_bug.cgi?id=702229
  "txtwrite: use after free in 9.51 on some files"
  which fixes CVE-2020-36773 (bsc#1219554)
  "out-of-bounds write and use-after-free
  in devices/vector/gdevtxtw.c (for txtwrite)"
  see also https://bugzilla.opensuse.org/show_bug.cgi?id=1177922
  (bsc#1191841)</changelog>
  <changelog author="jsmeix@suse.com" date="1708948800">- bsc1219357.patch is derived for Ghostscript-9.52 from
  https://github.com/ArtifexSoftware/ghostpdl/commit/4ceaf92815302863a8c86fcfcf2347e0118dd3a5
  to fix bsc#1219357
  "Ghostscript segfaults in gs_heap_free_object()"</changelog>
  <changelog author="jsmeix@suse.com" date="1714996800">- CVE-2023-52722.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=afd7188f74918cb51b5fb89f52b54eb16e8acfd1
  "In SAFER (default) don't allow eexec seeds
  other than the Type 1 standard"
  to fix bsc#1223852
  "ghostscript: eexec seeds other than the Type 1 standard
  are allowed while using SAFER mode"</changelog>
  <changelog author="jsmeix@suse.com" date="1718971200">- CVE-2024-33871.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=7145885041bb52cc23964f0aa2aec1b1c82b5908
  "OPVP device - prevent unsafe parameter change with SAFER"
  to fix bsc#1225491
  "OPVP device arbitrary code execution via custom Driver library"</changelog>
  <changelog author="jsmeix@suse.com" date="1719576000">- CVE-2024-29510.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=3b1735085ecef20b29e8db3416ab36de93e86d1f
  "Uniprint device - prevent string configuration changes
  when SAFER"
  to fix bsc#1226945
  "format string injection leads to shell command execution
  (SAFER bypass)"
- CVE-2024-33870.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=79aef19c685984dc3da2dc090450407d9fbcff80
  see https://bugs.ghostscript.com/show_bug.cgi?id=707686
  to fix bsc#1226944
  "path traversal to arbitrary files if the current directory
  is in the permitted paths"
- CVE-2024-33869.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=5ae2e320d69a7d0973011796bd388cd5befa1a43
  and
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=f5336e5b4154f515ac83bc5b9eba94302e6618d4
  see https://bugs.ghostscript.com/show_bug.cgi?id=707691
  to fix bsc#1226946
  "path traversal and command execution due to path reduction"</changelog>
  <changelog author="jsmeix@suse.com" date="1721131200">- CVE-2024-29508.patch is for Ghostscript-9.52 derived from
  https://git.ghostscript.com/?p=ghostpdl.git;h=ff1013a0ab485b66783b70145e342a82c670906a
  therein only the part that addresses CVE-2024-29508
  i.e. the change in gdevpdtb.c which "uses a fixed name
  for fonts which have no name instead of using the pointer
  to the address of the font"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707510
  to fix bsc#1227380
  "heap pointer leak in pdf_base_font_alloc()"</changelog>
  <changelog author="jsmeix@suse.com" date="1729771200">- CVE-2024-46951.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=f49812186baa
  that fixes CVE-2024-46951
  "Arbitrary code execution via unchecked 'Implementation'
  pointer in 'Pattern' color space"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707991
  (bsc#1232265)</changelog>
  <changelog author="jsmeix@suse.com" date="1729771201">- CVE-2024-46953.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=1f21a45df0fa
  that fixes CVE-2024-46953
  "An integer overflow when parsing the page format
  results in path truncation, path traversal, code execution"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707793
  (bsc#1232267)</changelog>
  <changelog author="jsmeix@suse.com" date="1729857600">- CVE-2024-46955.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=85bd9d2f4b79
  that fixes CVE-2024-46955
  "Out of bounds read when reading color in 'Indexed' color space"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707990
  (bsc#1232269)</changelog>
  <changelog author="jsmeix@suse.com" date="1729857601">- CVE-2024-46956.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=f4151f12db32
  that fixes CVE-2024-46956
  "Arbitrary code execution via out of bounds data access in filenameforall"
  see https://bugs.ghostscript.com/show_bug.cgi?id=707895
  (bsc#1232270)</changelog>
  <changelog author="jsmeix@suse.com" date="1743163200">- CVE-2025-27831.patch is for Ghostscript-9.52 derived from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=e4db46d7529a
  that fixes CVE-2025-27831
  "DOCXWRITE TXTWRITE device has a text buffer overflow
  via long characters to devices/vector/doc_common.c"
  only for the TXTWRITE device in devices/vector/gdevtxtw.c
  because there is no DOCXWRITE device in Ghostscript-9.52
  see https://bugs.ghostscript.com/show_bug.cgi?id=708132
  (bsc#1240075)
- CVE-2025-27832.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=36ac25fca7b
  that fixes CVE-2025-27832
  "NPDL device has a Compression buffer overflow for contrib/japanese/gdevnpdl.c"
  see https://bugs.ghostscript.com/show_bug.cgi?id=708133
  (bsc#1240077)
- CVE-2025-27835.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=920fae68870
  that fixes CVE-2025-27835
  "buffer overflow occurs when converting glyphs to Unicode in psi/zbfont.c"
  see https://bugs.ghostscript.com/show_bug.cgi?id=708131
  (bsc#1240080)
- CVE-2025-27836.patch is for Ghostscript-9.52 from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=db77f4c0ce0
  that fixes CVE-2025-27836
  "BJ10V device has a Print buffer overflow in contrib/japanese/gdev10v.c"
  see https://bugs.ghostscript.com/show_bug.cgi?id=708192
  (bsc#1240081)
- Removed the not used remove-zlib-h-dependency.patch file because
  otherwise the OBS source_service 'source_validator' fails with
  "ERROR: patch 100 remove-zlib-h-dependency.patch
  apparently not applied (or not applied via %patch)"</changelog>
  <changelog author="jsmeix@suse.com" date="1754568000">- CVE-2025-48708.patch is for Ghostscript-9.52 derived from
  https://cgit.ghostscript.com/cgi-bin/cgit.cgi/ghostpdl.git/commit/?id=b587663c623b4462f9e78686a31fd880207303ee
  that fixes CVE-2025-48708
  "lacks of argument sanitization may lead to password disclosure"
  see https://bugs.ghostscript.com/show_bug.cgi?id=708446
  (bsc#1243701)</changelog>
  <changelog author="jsmeix@suse.com" date="1762171200">- CVE-2025-59798.patch is for Ghostscript-9.52 derived from
  https://github.com/ArtifexSoftware/ghostpdl/commit/0cae41b23a9669e801211dd4cf97b6dadd6dbdd7
  that fixes CVE-2025-48708 "stack-based buffer overflow
  in pdf_write_cmap in devices/vector/gdevpdtw.c"
  see https://bugs.ghostscript.com/show_bug.cgi?id=708539
  (bsc#1250353)
- CVE-2025-59799.patch is for Ghostscript-9.52 derived from
  https://github.com/ArtifexSoftware/ghostpdl/commit/6dab38fb211f15226c242ab7a83fa53e4b0ff781
  that fixes CVE-2025-59799
  "stack-based buffer overflow in pdfmark_coerce_dest
  in devices/vector/gdevpdfm.c via a large size value"
  see https://bugs.ghostscript.com/show_bug.cgi?id=708517
  (bsc#1250354)</changelog>
</package>
<package pkgid="2e2587c86546ec174c2d8f9bae74db1663d02ccb30e0452b77dded08ab3d399e" name="giflib" arch="src">
  <version epoch="0" ver="5.2.2" rel="150000.4.19.1"/>
  <changelog author="mmeister@suse.com" date="1364385600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1372248000">- Update to new upstream release 5.0.4
  * Fix for a rare misrendering bug when a GIF overruns the
  decompression-code table.
- Make patches have -p1, as requested by
  http://en.opensuse.org/openSUSE:Packaging_Patches_guidelines</changelog>
  <changelog author="jengelh@inai.de" date="1377950400">- Update to new upstream release 5.0.5 (bugfix release)
  * This release sets the error return properly when a screen
  descriptor read fails, and fixes minor API documentation bugs.</changelog>
  <changelog author="jengelh@inai.de" date="1401451200">- Update to new upstream release 5.1.0
  * Minor API change to assist library wrappers in dynamic languages,
  removal of the the gif2raw utility, and various minor fix patches
  for unusual edge cases.
  * API changes to functions:
  GifErrorString returns const char *;
  EGifGetGifVersion returns const char *;
  EGifCloseFile takes another int *errorcode;
  DGifCloseFile takes another int *errorcode;</changelog>
  <changelog author="p.drouand@gmail.com" date="1421236800">- Update to version 5.1.1
  + Numerous minor fixes in getarg.c. Affects only the utilities, not the
    core library.
  + Fix SourceForge bug #59 DGifOpen can segfault if DGifGetScreenDesc fails.
  + SourceForge patch #20: In gifalloc, fix usage of realloc() in case of failure.
  + Fix SourceForge bug #61 Leak in gifsponge.
  + glibtoolize port fix for OS X.</changelog>
  <changelog author="tchvatal@suse.com" date="1421323200">- Cleanup a bit
- Remove obsolete sle10 deprecations
- Fix one tiny rpmlint warning</changelog>
  <changelog author="fstrba@suse.com" date="1453204800">- Update to version 5.1.2 (fixes CVE-2015-7555, bsc#960319)
  * Code Fixes
    + Code hardening using reallocarray() from OpenBSD.
    + Sanity check in giffilter catches files with malformed
  extension records. Fixes SourceForge bug #63: malformed gif
  causes segfault in giffilter.
  + Inexpensive sanity check in DGifSlurp() catches malformed files
    with  no image descriptor. Fixes SourceForge bug #64: malformed
  gif causes crash in giftool.
  + Fix SourceForge bug #66: GifDrawBoxedText8x8() modifying
    constant input parameter.
  + Bail out of GIF read on invalid pixel width. Addresses Savannah
    bug #67: invalid shift in dgif_lib.c
  + Fix SourceForge bug #69: #69 Malformed: Gif file with no
    extension block after a GRAPHICS_EXT_FUNC_CODE extension causes
  segfault (in giftext).
  + Fix SourceForge bug #71: Buffer overwrite when giffixing a
    malformed gif.
  + Fix SourceForge bug #73: Null pointer deference in gifclrmap
    (only reachable with malformed GIF).
  + Fix SourceForge bug #74: Double free in gifsponge under 5.1,1,
    for any valid gif image.
  + Fix SourceForge bug #75: GAGetArgs overflows due to uncounted
    use of va_arg.
  + Sanity check in giffix catches some malformed files. Addresses
    SourceForge bug #77: dgif_lib.c: extension processing error
- Modified patches:
  * giflib-automake-1_13.patch
  * giflib-visibility.patch
    + rediff to changed context</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 5.1.3
  * Prevent malloc randomess from causing the header output routine
  to emit a GIF89 version string even when no GIF89 features are
  present.
  * Prevent malloc randomess from producing sporadic failures by causing
  sanity checks added in 5.1.2 to misfire.
  * Bulletproof gif2rgb against 0-height images. Addressed sf#78:
  Heap overflow in gif2rgb with images of size 0, also sf#82.
  * Remove unnecessary duplicate EGifClose() in gifcolor.c. Fixes sf#83
  introduced in 5.1.2.
  * Fix sf#84: incorrect return of DGifSlurp().
- Add giflib-sf-88.patch to fix sf#88</changelog>
  <changelog author="fstrba@suse.com" date="1460462400">- Update to version 5.1.4
  * Fix SF bug #94: giflib 5 loves to fail to load images... a LOT.
  * Fix SF Bug #92: Fix buffer overread in gifbuild.
  * Fix SF Bug #93: Add bounds check in gifbuild netscape2.0 path
  * Fix SF Bug #89: Fix buffer overread in gifbuild.
- Removed patch:
  * giflib-sf-88.patch
    + Integrated upstream
- Added patch:
  * giflib-CVE-2016-3977.patch
  - Fix CVE-2016-3977: heap buffer overflow in gif2rgb
    (bsc#974847)</changelog>
  <changelog author="rpm@fthiessen.de" date="1463140800">- Added fix-autoconf11.patch for fixing build with older autoconf,
  requires for SLE11.</changelog>
  <changelog author="bwiedemann@suse.com" date="1499256000">- Keep timestamps before patch updates them to fix build-compare</changelog>
  <changelog author="schwab@suse.de" date="1541764800">- Remove unused build requires on X libraries
- Use %license</changelog>
  <changelog author="elimat@opensuse.org" date="1594382400">- Update to version 5.2.1
  * In gifbuild.c, avoid a core dump on no color map.
  * Restore inadvertently removed library version numbers in Makefile.
- Changes in version 5.2.0
  * The undocumented and deprecated GifQuantizeBuffer() entry point
    has been moved to the util library to reduce libgif size and attack
    surface. Applications needing this function are couraged to link the
    util library or make their own copy.
  * The following obsolete utility programs are no longer installed:
    gifecho, giffilter, gifinto, gifsponge. These were either installed in
    error or have been obsolesced by modern image-transformmation tools
    like ImageMagick convert. They may be removed entirely in a future
    release.
  * Address SourceForge issue #136: Stack-buffer-overflow in gifcolor.c:84
  * Address SF bug #134: Giflib fails to slurp significant number of gifs
  * Apply SPDX convention for license tagging.
- Changes in version 5.1.9
  * The documentation directory now includes an HTMlified version of the
    GIF89 standard, and a more detailed description of how LZW compression
    is applied to GIFs.
  * Address SF bug #129: The latest version of giflib cannot be build on windows.
  * Address SF bug #126: Cannot compile giflib using c89
- Changes in version 5.1.8
  * Address SF bug #119: MemorySanitizer: FPE on unknown address (CVE-2019-15133 bsc#1146299)
  * Address SF bug #125: 5.1.7: xmlto is still required for tarball
  * Address SF bug #124: 5.1.7: ar invocation is not crosscompile compatible
  * Address SF bug #122: 5.1.7 installs manpages to wrong directory
  * Address SF bug #121: make: getversion: Command not found
  * Address SF bug #120: 5.1.7 does not build a proper library - no
- Changes in version 5.1.7
  * Correct a minor packaging error (superfluous symlinks) in the 5.1.6 tarballs.
- Changes in version 5.1.6
  * Fix library installation in the Makefile.
- Changes in version 5.1.5
  * Fix SF bug #114: Null dereferences in main() of gifclrmp
  * Fix SF bug #113: Heap Buffer Overflow-2 in function DGifDecompressLine()
    in cgif.c.  This had been assigned (CVE-2018-11490 bsc#1094832).
  * Fix SF bug #111: segmentation fault in PrintCodeBlock
  * Fix SF bug #109: Segmentation fault of giftool reading a crafted file
  * Fix SF bug #107: Floating point exception in giftext utility
  * Fix SF bug #105: heap buffer overflow in DumpScreen2RGB in gif2rgb.c:317
  * Fix SF bug #104: Ineffective bounds check in DGifSlurp
  * Fix SF bug #103: GIFLIB 5.1.4: DGifSlurp fails on empty comment
  * Fix SF bug #87: Heap buffer overflow in 5.1.2 (gif2rgb). (CVE-2016-3977 bsc#974847)
  * The horrible old autoconf build system has been removed with extreme prejudice.
    You now build this simply by running "make" from the top-level directory.
- Run spec-cleaner
- Drop patches fixed upstream:
  * giflib-visibility.patch
  * giflib-automake-1_13.patch
  * giflib-CVE-2016-3977.patch
  * fix-autoconf11.patch
- Change build system to Make only (upstream not using autoconf)</changelog>
  <changelog author="fstrba@suse.com" date="1618401600">- Added patch:
  * PIE.patch
    + build path independent objects and inherit CFLAGS from the
    build system (bsc#1184123)</changelog>
  <changelog author="olaf@aepfle.de" date="1618488000">- prep section should just extract and patch,
  further modifications have to be done in the build section</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- add reproducible.patch to avoid timestamp patching in the build
  section and allowing it to build with -Werror=date-time</changelog>
  <changelog author="fstrba@suse.com" date="1691841600">- Define make_build for distributions which do not define them in
  system macros</changelog>
  <changelog author="fstrba@suse.com" date="1708948800">- Update to version 5.2.2
  * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506
    (bsc#1198880)
  * Address SF issue #138 Documentation for obsolete utilities still
    installed
  * Address SF issue #139: Typo in "LZW image data" page
    ("110_2 = 4_10")
  * Address SF issue #140: Typo in "LZW image data" page ("LWZ")
  * Address SF issue #141: Typo in "Bits and bytes" page ("filed")
  * Note as already fixed SF issue #143: cannot compile under mingw
  * Address SF issue #144: giflib-5.2.1 cannot be build on windows
    and other platforms using c89
  * Address SF issue #145: Remove manual pages installation for
    binaries that are not installed too
  * Address SF issue #146: [PATCH] Limit installed man pages to
    binaries, move giflib to section 7
  * Address SF issue #147 [PATCH] Fixes to doc/whatsinagif/ content
  * Address SF issue #148: heap Out of Bound Read in gif2rgb.c:298
    DumpScreen2RGB
  * Declared no-info on SF issue #150: There is a denial of service
    vulnerability in GIFLIB 5.2.1
  * Declared Won't-fix on SF issue 149: Out of source builds no
    longer possible
  * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
  * Address SF issue #152: Fix some typos on the html documentation
    and man pages
  * Address SF issue #153: Fix segmentation faults due to non
    correct checking for args
  * Address SF issue #154: Recover the giffilter manual page
  * Address SF issue #155: Add gifsponge docs
  * Address SF issue #157: An OutofMemory-Exception or Memory Leak
    in gif2rgb
  * Address SF issue #158: There is a null pointer problem in
    gif2rgb
  * Address SF issue #159 A heap-buffer-overflow in GIFLIB5.2.1
    DumpScreen2RGB() in gif2rgb.c:298:45
  * Address SF issue #163: detected memory leaks in
    openbsd_reallocarray giflib/openbsd-reallocarray.c
  * Address SF issue #164: detected memory leaks in GifMakeMapObject
    giflib/gifalloc.c
  * Address SF issue #166: a read zero page leads segment fault in
    getarg.c and memory leaks in gif2rgb.c and gifmalloc.c
  * Address SF issue #167: Heap-Buffer Overflow during Image Saving
    in DumpScreen2RGB Function at Line 321 of gif2rgb.c
- Added patch:
  * giflib-5.2.2-no-imagemagick.patch
    + do not use ImageMagick to resize one gif file. It creates a
    build cycle.
  * 0001-Clean-up-memory-better-at-end-of-run-CVE-2021-40633.patch
    + upstream fix for CVE-2021-40633 (bsc#1200551)
- Modified patches:
  * PIE.patch
  * reproducible.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1743508800">- Added patch:
  * giflib-bsc1240416.patch
    + fixing bsc#1240416: buffer overflow in function DumpScreen2RGB</changelog>
  <changelog author="fstrba@suse.com" date="1773230400">- Added patch:
  * 0001-Avoid-potentuial-double-free-on-weird-images.patch
    + fixing bsc#1259502 (CVE-2026-23868): double-free result of a
    shallow copy can lead to memory corruption</changelog>
</package>
<package pkgid="f6f2dd724293457d8685c3bd90616eec09d8200d6e7f5b3a75058964241f0f66" name="giflib-devel" arch="x86_64">
  <version epoch="0" ver="5.2.2" rel="150000.4.19.1"/>
  <changelog author="p.drouand@gmail.com" date="1421236800">- Update to version 5.1.1
  + Numerous minor fixes in getarg.c. Affects only the utilities, not the
    core library.
  + Fix SourceForge bug #59 DGifOpen can segfault if DGifGetScreenDesc fails.
  + SourceForge patch #20: In gifalloc, fix usage of realloc() in case of failure.
  + Fix SourceForge bug #61 Leak in gifsponge.
  + glibtoolize port fix for OS X.</changelog>
  <changelog author="tchvatal@suse.com" date="1421323200">- Cleanup a bit
- Remove obsolete sle10 deprecations
- Fix one tiny rpmlint warning</changelog>
  <changelog author="fstrba@suse.com" date="1453204800">- Update to version 5.1.2 (fixes CVE-2015-7555, bsc#960319)
  * Code Fixes
    + Code hardening using reallocarray() from OpenBSD.
    + Sanity check in giffilter catches files with malformed
  extension records. Fixes SourceForge bug #63: malformed gif
  causes segfault in giffilter.
  + Inexpensive sanity check in DGifSlurp() catches malformed files
    with  no image descriptor. Fixes SourceForge bug #64: malformed
  gif causes crash in giftool.
  + Fix SourceForge bug #66: GifDrawBoxedText8x8() modifying
    constant input parameter.
  + Bail out of GIF read on invalid pixel width. Addresses Savannah
    bug #67: invalid shift in dgif_lib.c
  + Fix SourceForge bug #69: #69 Malformed: Gif file with no
    extension block after a GRAPHICS_EXT_FUNC_CODE extension causes
  segfault (in giftext).
  + Fix SourceForge bug #71: Buffer overwrite when giffixing a
    malformed gif.
  + Fix SourceForge bug #73: Null pointer deference in gifclrmap
    (only reachable with malformed GIF).
  + Fix SourceForge bug #74: Double free in gifsponge under 5.1,1,
    for any valid gif image.
  + Fix SourceForge bug #75: GAGetArgs overflows due to uncounted
    use of va_arg.
  + Sanity check in giffix catches some malformed files. Addresses
    SourceForge bug #77: dgif_lib.c: extension processing error
- Modified patches:
  * giflib-automake-1_13.patch
  * giflib-visibility.patch
    + rediff to changed context</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 5.1.3
  * Prevent malloc randomess from causing the header output routine
  to emit a GIF89 version string even when no GIF89 features are
  present.
  * Prevent malloc randomess from producing sporadic failures by causing
  sanity checks added in 5.1.2 to misfire.
  * Bulletproof gif2rgb against 0-height images. Addressed sf#78:
  Heap overflow in gif2rgb with images of size 0, also sf#82.
  * Remove unnecessary duplicate EGifClose() in gifcolor.c. Fixes sf#83
  introduced in 5.1.2.
  * Fix sf#84: incorrect return of DGifSlurp().
- Add giflib-sf-88.patch to fix sf#88</changelog>
  <changelog author="fstrba@suse.com" date="1460462400">- Update to version 5.1.4
  * Fix SF bug #94: giflib 5 loves to fail to load images... a LOT.
  * Fix SF Bug #92: Fix buffer overread in gifbuild.
  * Fix SF Bug #93: Add bounds check in gifbuild netscape2.0 path
  * Fix SF Bug #89: Fix buffer overread in gifbuild.
- Removed patch:
  * giflib-sf-88.patch
    + Integrated upstream
- Added patch:
  * giflib-CVE-2016-3977.patch
  - Fix CVE-2016-3977: heap buffer overflow in gif2rgb
    (bsc#974847)</changelog>
  <changelog author="rpm@fthiessen.de" date="1463140800">- Added fix-autoconf11.patch for fixing build with older autoconf,
  requires for SLE11.</changelog>
  <changelog author="bwiedemann@suse.com" date="1499256000">- Keep timestamps before patch updates them to fix build-compare</changelog>
  <changelog author="schwab@suse.de" date="1541764800">- Remove unused build requires on X libraries
- Use %license</changelog>
  <changelog author="elimat@opensuse.org" date="1594382400">- Update to version 5.2.1
  * In gifbuild.c, avoid a core dump on no color map.
  * Restore inadvertently removed library version numbers in Makefile.
- Changes in version 5.2.0
  * The undocumented and deprecated GifQuantizeBuffer() entry point
    has been moved to the util library to reduce libgif size and attack
    surface. Applications needing this function are couraged to link the
    util library or make their own copy.
  * The following obsolete utility programs are no longer installed:
    gifecho, giffilter, gifinto, gifsponge. These were either installed in
    error or have been obsolesced by modern image-transformmation tools
    like ImageMagick convert. They may be removed entirely in a future
    release.
  * Address SourceForge issue #136: Stack-buffer-overflow in gifcolor.c:84
  * Address SF bug #134: Giflib fails to slurp significant number of gifs
  * Apply SPDX convention for license tagging.
- Changes in version 5.1.9
  * The documentation directory now includes an HTMlified version of the
    GIF89 standard, and a more detailed description of how LZW compression
    is applied to GIFs.
  * Address SF bug #129: The latest version of giflib cannot be build on windows.
  * Address SF bug #126: Cannot compile giflib using c89
- Changes in version 5.1.8
  * Address SF bug #119: MemorySanitizer: FPE on unknown address (CVE-2019-15133 bsc#1146299)
  * Address SF bug #125: 5.1.7: xmlto is still required for tarball
  * Address SF bug #124: 5.1.7: ar invocation is not crosscompile compatible
  * Address SF bug #122: 5.1.7 installs manpages to wrong directory
  * Address SF bug #121: make: getversion: Command not found
  * Address SF bug #120: 5.1.7 does not build a proper library - no
- Changes in version 5.1.7
  * Correct a minor packaging error (superfluous symlinks) in the 5.1.6 tarballs.
- Changes in version 5.1.6
  * Fix library installation in the Makefile.
- Changes in version 5.1.5
  * Fix SF bug #114: Null dereferences in main() of gifclrmp
  * Fix SF bug #113: Heap Buffer Overflow-2 in function DGifDecompressLine()
    in cgif.c.  This had been assigned (CVE-2018-11490 bsc#1094832).
  * Fix SF bug #111: segmentation fault in PrintCodeBlock
  * Fix SF bug #109: Segmentation fault of giftool reading a crafted file
  * Fix SF bug #107: Floating point exception in giftext utility
  * Fix SF bug #105: heap buffer overflow in DumpScreen2RGB in gif2rgb.c:317
  * Fix SF bug #104: Ineffective bounds check in DGifSlurp
  * Fix SF bug #103: GIFLIB 5.1.4: DGifSlurp fails on empty comment
  * Fix SF bug #87: Heap buffer overflow in 5.1.2 (gif2rgb). (CVE-2016-3977 bsc#974847)
  * The horrible old autoconf build system has been removed with extreme prejudice.
    You now build this simply by running "make" from the top-level directory.
- Run spec-cleaner
- Drop patches fixed upstream:
  * giflib-visibility.patch
  * giflib-automake-1_13.patch
  * giflib-CVE-2016-3977.patch
  * fix-autoconf11.patch
- Change build system to Make only (upstream not using autoconf)</changelog>
  <changelog author="fstrba@suse.com" date="1618401600">- Added patch:
  * PIE.patch
    + build path independent objects and inherit CFLAGS from the
    build system (bsc#1184123)</changelog>
  <changelog author="olaf@aepfle.de" date="1618488000">- prep section should just extract and patch,
  further modifications have to be done in the build section</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- add reproducible.patch to avoid timestamp patching in the build
  section and allowing it to build with -Werror=date-time</changelog>
  <changelog author="fstrba@suse.com" date="1691841600">- Define make_build for distributions which do not define them in
  system macros</changelog>
  <changelog author="fstrba@suse.com" date="1708948800">- Update to version 5.2.2
  * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506
    (bsc#1198880)
  * Address SF issue #138 Documentation for obsolete utilities still
    installed
  * Address SF issue #139: Typo in "LZW image data" page
    ("110_2 = 4_10")
  * Address SF issue #140: Typo in "LZW image data" page ("LWZ")
  * Address SF issue #141: Typo in "Bits and bytes" page ("filed")
  * Note as already fixed SF issue #143: cannot compile under mingw
  * Address SF issue #144: giflib-5.2.1 cannot be build on windows
    and other platforms using c89
  * Address SF issue #145: Remove manual pages installation for
    binaries that are not installed too
  * Address SF issue #146: [PATCH] Limit installed man pages to
    binaries, move giflib to section 7
  * Address SF issue #147 [PATCH] Fixes to doc/whatsinagif/ content
  * Address SF issue #148: heap Out of Bound Read in gif2rgb.c:298
    DumpScreen2RGB
  * Declared no-info on SF issue #150: There is a denial of service
    vulnerability in GIFLIB 5.2.1
  * Declared Won't-fix on SF issue 149: Out of source builds no
    longer possible
  * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
  * Address SF issue #152: Fix some typos on the html documentation
    and man pages
  * Address SF issue #153: Fix segmentation faults due to non
    correct checking for args
  * Address SF issue #154: Recover the giffilter manual page
  * Address SF issue #155: Add gifsponge docs
  * Address SF issue #157: An OutofMemory-Exception or Memory Leak
    in gif2rgb
  * Address SF issue #158: There is a null pointer problem in
    gif2rgb
  * Address SF issue #159 A heap-buffer-overflow in GIFLIB5.2.1
    DumpScreen2RGB() in gif2rgb.c:298:45
  * Address SF issue #163: detected memory leaks in
    openbsd_reallocarray giflib/openbsd-reallocarray.c
  * Address SF issue #164: detected memory leaks in GifMakeMapObject
    giflib/gifalloc.c
  * Address SF issue #166: a read zero page leads segment fault in
    getarg.c and memory leaks in gif2rgb.c and gifmalloc.c
  * Address SF issue #167: Heap-Buffer Overflow during Image Saving
    in DumpScreen2RGB Function at Line 321 of gif2rgb.c
- Added patch:
  * giflib-5.2.2-no-imagemagick.patch
    + do not use ImageMagick to resize one gif file. It creates a
    build cycle.
  * 0001-Clean-up-memory-better-at-end-of-run-CVE-2021-40633.patch
    + upstream fix for CVE-2021-40633 (bsc#1200551)
- Modified patches:
  * PIE.patch
  * reproducible.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1743508800">- Added patch:
  * giflib-bsc1240416.patch
    + fixing bsc#1240416: buffer overflow in function DumpScreen2RGB</changelog>
  <changelog author="fstrba@suse.com" date="1773230400">- Added patch:
  * 0001-Avoid-potentuial-double-free-on-weird-images.patch
    + fixing bsc#1259502 (CVE-2026-23868): double-free result of a
    shallow copy can lead to memory corruption</changelog>
</package>
<package pkgid="a72f6065b6288a7aa2a31a2e5926c7fb829a9aec7d7dadb1d15679e2cdf6dc0d" name="git" arch="src">
  <version epoch="0" ver="2.51.0" rel="150600.3.12.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1670846400">- git 2.38.2, a general maintenance release:
  * Fix unaligned memory access for reads from the index v4
  * "git remote rename" failed to rename a remote without fetch
    refspec, which has been corrected.
  * "git clone" did not like to see the "--bare" and the "--origin"
    options used together without a good reason.
  * "git fsck" failed to release contents of tree objects already
    used from the memory
  * "git rebase -i" can mistakenly attempt to apply a fixup to
    commit itself, which has been corrected.
  * Fix segfault with "git merge-tree" on read-only repositories
  * Fix a logic in "mailinfo -b" that miscomputed the length of a
    substring, which lead to an out-of-bounds access.
  * The codepath to sign learned to report errors when it fails to
    read from "ssh-keygen".
  * "GIT_EDITOR=: git branch --edit-description" resulted in failure
  * "git multi-pack-index repack/expire" used to repack unreachable
    cruft into a new pack, which have been corrected.
  * The code to clean temporary object directories (used for
    quarantine) tried to remove them inside its signal handler
  * "git branch --edit-description" on an unborh branch misleadingly
    said that no such branch exists
  * `git rebase --update-refs` would delete references when all
    `update-ref` commands in the sequencer were removed</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1670846401">- git 2.39.0:
  * "git grep" learned to expand the sparse-index more lazily and
    on demand in a sparse checkout.
  * By default, use of fsmonitor on a repository on networked
    filesystem is disabled.
  * After checking out a "branch" that is a symbolic-ref that points at
    another branch, "git symbolic-ref HEAD" reports the underlying
    branch, not the symbolic-ref the user gave checkout as argument.
    The command learned the "--no-recurse" option to stop after
    dereferencing a symbolic-ref only once.
  * "git branch --edit-description @{-1}" is now a way to edit branch
    description of the branch you were on before switching to the
    current branch.
  * "git merge-tree --stdin" is a new way to request a series of merges
    and report the merge results.
  * "git shortlog" learned to group by the "format" string.
  * A new "--include-whitespace" option is added to "git patch-id", and
    existing bugs in the internal patch-id logic that did not match
    what "git patch-id" produces have been corrected.
  * Enable gc.cruftpacks by default for those who opt into
    feature.experimental setting.
  * "git repack" learns to send cruft objects out of the way into
    packfiles outside the repository.
  * 'scalar reconfigure -a' is taught to automatically remove
    scalar.repo entires which no longer exist.
  * Redact headers from cURL's h2h3 module in GIT_CURL_VERBOSE and
    others.
  * 'git maintenance register' is taught to write configuration to an
    arbitrary path, and 'git for-each-repo' is taught to expand tilde
    characters in paths.
  * When creating new notes, the template used to get a stray empty
    newline, which has been removed.
  * "git receive-pack" used to use all the local refs as the boundary for
    checking connectivity of the data "git push" sent, but now it uses
    only the refs that it advertised to the pusher. In a repository with
    the .hideRefs configuration, this reduces the resources needed to
    perform the check.
  * With '--recurse-submodules=on-demand', all submodules are
    recursively pushed.
  * developer visible fixes</changelog>
  <changelog author="dmueller@suse.com" date="1671105600">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1673956800">- git 2.39.1, fixing two security issues that could allow remote
  code execution when accessing specially crafted repositories:
  * CVE-2022-41903: log format integer overflow boo#1207033
  * CVE-2022-23521: gitattributed parsing integer overflow
    boo#1207032</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1676376000">- git 2.39.2:
  * CVE-2023-22490: Using a specially-crafted repository, Git can
    be tricked into using its local clone optimization even when
    using a non-local transport boo#1208027
  * CVE-2023-23946: a path outside the working tree can be
    overwritten as the user who is running "git apply" boo#1208028</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1678708800">- git 2.40.0:
  * backward incompatible change: The format.attach configuration
    variable lacked a way to override a value defined in a
    lower-priority configuration file (e.g. the system one) by
    redefining it in a higher-priority configuration file. Now,
    setting format.attach to an empty string means show the patch
    inline in the e-mail message, without using MIME attachment.
  * multiple commands and workflows gained additional options,
    compatible functionality, or more helpful output
  * "grep -P" learned to use Unicode Character Property to grok
    character classes when processing \b and \w etc.
  * under-the-hood improvements and bug fixes
- The scripted "git add -p/-i" implementation was removed upstream.
  The openSUSE package already preferred the C implementation.</changelog>
  <changelog author="adam.majer@suse.de" date="1680782400">- sha256_clone_fix.patch: fix cloning of empty sha256 repositories (jsc#PED-3891)</changelog>
  <changelog author="Andreas.Stieger@gmx.de" date="1682424000">- git 2.40.1:
  * CVE-2023-25652: By feeding specially crafted input to git apply
  - -reject, a path outside the working tree can be overwritten
    with partially controlled contents (corresponding to the
    rejected hunk(s) from the given patch).
  * CVE-2023-25815: When Git is compiled with runtime prefix
    support and runs without translated messages, it still used
    the gettext machinery to display messages, which subsequently
    potentially looked for translated messages in unexpected
    places. This allowed for malicious placement of crafted
    messages.
  * CVE-2023-29007: When renaming or deleting a section from a
    configuration file, certain malicious configuration values may
    be misinterpreted as the beginning of a new configuration
    section, leading to arbitrary configuration injection.</changelog>
  <changelog author="Andreas.Stieger@gmx.de" date="1685793600">- git 2.41.0: This update contains a number of compatible updates,
  improvements and extensions to multiple workflows. Some changes
  may break backwards compatibility:
  * The libsecret credential helper obsoletes direct GNOME keyring
    support, which was dropped (git-credential-gnome-keyring)
  * "git format-patch" has been taught to ignore end-user
    configuration ("diff.noprefix") and always use the standard
    prefixes, to avoid breaking the receiving end of the patch
- drop sha256_clone_fix.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1692792000">- git 2.42.0:
  * "git pack-refs" learns "--include" and "--exclude" to tweak the ref
    hierarchy to be packed using pattern matching.
  * 'git worktree add' learned how to create a worktree based on an
    orphaned branch with `--orphan`.
  * "git pack-objects" learned to invoke a new hook program that
    enumerates extra objects to be used as anchoring points to keep
    otherwise unreachable objects in cruft packs.
  * Add more "git var" for toolsmiths to learn various locations Git is
    configured with either via the configuration or hard-coded defaults.
  * 'git notes append' was taught '--separator' to specify string to insert
    between paragraphs.
  * The "git for-each-ref" family of commands learned placeholders
    related to GPG signature verification.
  * "git diff --no-index" learned to read from named pipes as if they
    were regular files, to allow "git diff &lt;(process) &lt;(substitution)"
    some shells support.
  * Help newbies by suggesting that there are cases where force-pushing
    is a valid and sensible thing to update a branch at a remote
    repository, rather than reconciling with merge/rebase.
  * "git blame --contents=file" has been taught to work in a bare
    repository.
  * "git branch -f X" to repoint the branch X said that X was "checked
    out" in another worktree, even when branch X was not and instead
    being bisected or rebased.  The message was reworded to say the
    branch was "in use".
  * Tone down the warning on SHA-256 repositories being an experimental
    curiosity.  We do not have support for them to interoperate with
    traditional SHA-1 repositories, but at this point, we do not plan
    to make breaking changes to SHA-256 repositories and there is no
    longer need for such a strongly phrased warning.
  * "git diff-tree" has been taught to take advantage of the
    sparse-index feature.
  * The object traversal using reachability bitmap done by
    "pack-object" has been tweaked to take advantage of the fact that
    using "boundary" commits as representative of all the uninteresting
    ones can save quite a lot of object enumeration.
  * "git worktree" learned to work better with sparse index feature.
  * When the external merge driver is killed by a signal, its output
    should not be trusted as a resolution with conflicts that is
    proposed by the driver, but the code did.
  * The set-up code for the get_revision() API now allows feeding
    options like --all and --not in the --stdin mode.
  * Move functions that are not about pure string manipulation out of
    strbuf.[ch]
  * "imap-send" codepaths got cleaned up to get rid of unused
    parameters.
  * Enumerating refs in the packed-refs file, while excluding refs that
    match certain patterns, has been optimized.
  * Mark-up unused parameters in the code so that we can eventually
    enable -Wunused-parameter by default.
  * Instead of inventing a custom counter variables for debugging,
    use existing trace2 facility in the fsync customization codepath.
  * "git branch --list --format=&lt;format&gt;" and friends are taught
    a new "%(describe)" placeholder.
  * Clarify how to choose the starting point for a new topic in
    developer guidance document.
  * The implementation of "get_sha1_hex()" that reads a hexadecimal
    string that spells a full object name has been extended to cope
    with any hash function used in the repository, but the "sha1" in
    its name survived.  Rename it to get_hash_hex(), a name that is
    more consistent within its friends like get_hash_hex_algop().
  * Command line parser fix, and a small parse-options API update.
  * bug fixes</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1699099200">- git 2.42.1:
  * The usual number of bug fixes, including
  * Fix "git diff" exit code handling
  * Various fixes to the behavior of "rebase -i" when the command
    got interrupted by conflicting changes</changelog>
  <changelog author="dmueller@suse.com" date="1700568000">- update to 2.43.0:
  * The "--rfc" option of "git format-patch" used to be a valid way to
  override an earlier "--subject-prefix=&lt;something&gt;" on the command
  line and replace it with "[RFC PATCH]", but from this release, it
  merely prefixes the string "RFC " in front of the given subject
  prefix.  If you are negatively affected by this change, please use
  "--subject-prefix=PATCH --rfc" as a replacement.
  * In Git 2.42, "git rev-list --stdin" learned to take non-revisions
  (like "--not") from the standard input, but the way such a "--not" was
  handled was quite confusing, which has been rethought.  The updated
  rule is that "--not" given from the command line only affects revs
  given from the command line that comes but not revs read from the
  standard input, and "--not" read from the standard input affects
  revs given from the standard input and not revs given from the
  command line.
  * A message written in olden time prevented a branch from getting
  checked out, saying it is already checked out elsewhere. But these
  days, we treat a branch that is being bisected or rebased just like
  a branch that is checked out and protect it from getting modified
  with the same codepath.  The message has been rephrased to say that
  the branch is "in use" to avoid confusion.
  * Hourly and other schedules of "git maintenance" jobs are randomly
  distributed now.
  * "git cmd -h" learned to signal which options can be negated by
  listing such options like "--[no-]opt".
  * The way authentication related data other than passwords (e.g.,
  oauth token and password expiration data) are stored in libsecret
  keyrings has been rethought.
  * Update the libsecret and wincred credential helpers to correctly
  match which credential to erase; they erased the wrong entry in
  some cases.
  * Git GUI updates.
  * "git format-patch" learned a new "--description-file" option that
  lets cover letter description to be fed; this can be used on
  detached HEAD where there is no branch description available, and
  also can override the branch description if there is one.
  * Use of the "--max-pack-size" option to allow multiple packfiles to
  be created is now supported even when we are sending unreachable
  objects to cruft packs.
  * "git format-patch --rfc --subject-prefix=&lt;foo&gt;" used to ignore the
  "--subject-prefix" option and used "[RFC PATCH]"; now we will add
  "RFC" prefix to whatever subject prefix is specified.
  * "git log --format" has been taught the %(decorate) placeholder for
  further customization over what the "--decorate" option offers.
  * The default log message created by "git revert", when reverting a
  commit that records a revert, has been tweaked, to encourage people
  to describe complex "revert of revert of revert" situations better in
  their own words.
  * The command-line completion support (in contrib/) learned to
  complete "git commit --trailer=" for possible trailer keys.
  * "git update-index" learned the "--show-index-version" option to
  inspect the index format version used by the on-disk index file.
  * "git diff" learned the "diff.statNameWidth" configuration variable,
  to give the default width for the name part in the "--stat" output.
  * "git range-diff --notes=foo" compared "log --notes=foo --notes" of
  the two ranges, instead of using just the specified notes tree,
  which has been corrected to use only the specified notes tree.
  * The command line completion script (in contrib/) can be told to
  complete aliases by including ": git &lt;cmd&gt; ;" in the alias to tell
  it that the alias should be completed in a similar way to how "git
  &lt;cmd&gt;" is completed.  The parsing code for the alias has been
  loosened to allow ';' without an extra space before it.
  * "git for-each-ref" and friends learned to apply mailmap to
  authorname and other fields in a more flexible way than using
  separate placeholder letters like %a[eElL] every time we want to
  come up with small variants.
  * "git repack" machinery learned to pay attention to the "--filter="
  option.
  * "git repack" learned the "--max-cruft-size" option to prevent cruft
  packs from growing without bounds.
  * "git merge-tree" learned to take strategy backend specific options
  via the "-X" option, like "git merge" does.
  * "git log" and friends learned the "--dd" option that is a
  short-hand for "--diff-merges=first-parent -p".
  * The attribute subsystem learned to honor the "attr.tree"
  configuration variable that specifies which tree to read the
  .gitattributes files from.
  * "git merge-file" learns a mode to read three variants of the
  contents to be merged from blob objects.
  * see https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.43.0.txt</changelog>
  <changelog author="danilo.spinella@suse.com" date="1719489600">- Fix CVE-2024-32002, recursive clones on case-insensitive filesystems
  that support symbolic links are susceptible to case confusion,
  bsc#1224168
  * CVE-2024-32002.patch
- Fix CVE-2024-32004, arbitrary code execution during local clones,
  bsc#1224170
  * CVE-2024-32004.patch
- Fix CVE-2024-32020, file overwriting vulnerability during local clones,
  bsc#1224171
  * CVE-2024-32020-1.patch
  * CVE-2024-32020-2.patch
  * CVE-2024-32020-4.patch
- Fix CVE-2024-32021, git may create hardlinks to arbitrary user-readable files,
  bsc#1224172
- Fix CVE-2024-32465, arbitrary code execution during clone operations,
  bsc#1224173
  * CVE-2024-32465.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1721304000">- Add CVE-2024-24577.patch
  * CVE-2024-24577: arbitrary code execution due to heap corruption
    in git_index_add (bsc#1219660)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1736683200">- Add CVE-2024-50349-1.patch, CVE-2024-50349-2.patch
  * CVE-2024-50349: passwords for trusted sites could be sent to untrusted
    sites (bsc#1235600)
- Add CVE-2024-52006.patch
  * CVE-2024-52006: Carriage Returns via the credential protocol to credential
    helpers (bsc#1235601)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1751889600">- Add CVE-2025-27614.patch
  * CVE-2025-27614: arbitrary script execution via repo clonation in gitk
    (bsc#1245939)
- Add CVE-2025-27613.patch
  * CVE-2025-27613: arbitrary writable file creation and truncation in Gitk
    (bsc#1245938)
- Add CVE-2025-48385.patch
  * CVE-2025-48385: arbitrary code execution due to protocol injection via
    fetching advertised bundle (bsc#1245946)
- Add CVE-2025-48384.patch
  * CVE-2025-48384: script may be unintentionally executed after checkout due
    to CRLF transforming (bsc#1245943)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1755691200">- Update to 2.51.0:
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.51.0.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.50.1.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.50.0.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.49.0.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.48.1.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.48.0.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.47.1.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.47.0.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.46.2.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.46.1.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.46.0.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.45.3.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.45.2.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.45.1.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.45.0.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.44.0.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.43.3.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.43.2.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.43.1.adoc
  * CVE fixes:
    CVE-2025-27613 (bsc#1245938)
    CVE-2025-27614 (bsc#1245939)
    CVE-2025-46835 (bsc#1245942)
    CVE-2025-48384 (bsc#1245943)
    CVE-2025-48385 (bsc#1245946)
  * SHA256 support (bsc#1243197)
- git moved to /usr/libexec/git/git, update AppArmor profile
  accordingly (boo#1218588)
- gitweb AppArmor profile: allow reading etc/gitweb-common.conf
  (boo#1218664)
- Do not replace apparmor configuration, fixes bsc#1216545
- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]
- only call the %python3_fix_shebang_path if it is actually
  defined.
- Compat stub for %python3_fix_shebang_path
- Change less requirement to path to allow for use with BusyBox
- contrib/workdir is dropped. remove references for it.
- Use zlib instead of zlib-ng for SLES16
- Drop upstreamed patches:
  * CVE-2024-32002.patch
  * CVE-2024-32004.patch
  * CVE-2024-32020-1.patch
  * CVE-2024-32020-2.patch
  * CVE-2024-32020-4.patch
  * CVE-2024-32465.patch
  * CVE-2024-50349-1.patch
  * CVE-2024-50349-2.patch
  * CVE-2024-52006.patch
  * CVE-2025-27613.patch
  * CVE-2025-27614.patch
  * CVE-2025-48384.patch
  * CVE-2025-48385.patch
- Refresh patches:
  * git-asciidoc.patch
  * git-prevent_xss-default.diff</changelog>
</package>
<package pkgid="75cead05d8d08723c3891795924c3fab1588f929ecfab7f597e4687fdbf952fe" name="git" arch="src">
  <version epoch="0" ver="2.51.0" rel="150600.3.15.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1670846400">- git 2.39.0:
  * "git grep" learned to expand the sparse-index more lazily and
    on demand in a sparse checkout.
  * By default, use of fsmonitor on a repository on networked
    filesystem is disabled.
  * After checking out a "branch" that is a symbolic-ref that points at
    another branch, "git symbolic-ref HEAD" reports the underlying
    branch, not the symbolic-ref the user gave checkout as argument.
    The command learned the "--no-recurse" option to stop after
    dereferencing a symbolic-ref only once.
  * "git branch --edit-description @{-1}" is now a way to edit branch
    description of the branch you were on before switching to the
    current branch.
  * "git merge-tree --stdin" is a new way to request a series of merges
    and report the merge results.
  * "git shortlog" learned to group by the "format" string.
  * A new "--include-whitespace" option is added to "git patch-id", and
    existing bugs in the internal patch-id logic that did not match
    what "git patch-id" produces have been corrected.
  * Enable gc.cruftpacks by default for those who opt into
    feature.experimental setting.
  * "git repack" learns to send cruft objects out of the way into
    packfiles outside the repository.
  * 'scalar reconfigure -a' is taught to automatically remove
    scalar.repo entires which no longer exist.
  * Redact headers from cURL's h2h3 module in GIT_CURL_VERBOSE and
    others.
  * 'git maintenance register' is taught to write configuration to an
    arbitrary path, and 'git for-each-repo' is taught to expand tilde
    characters in paths.
  * When creating new notes, the template used to get a stray empty
    newline, which has been removed.
  * "git receive-pack" used to use all the local refs as the boundary for
    checking connectivity of the data "git push" sent, but now it uses
    only the refs that it advertised to the pusher. In a repository with
    the .hideRefs configuration, this reduces the resources needed to
    perform the check.
  * With '--recurse-submodules=on-demand', all submodules are
    recursively pushed.
  * developer visible fixes</changelog>
  <changelog author="dmueller@suse.com" date="1671105600">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1673956800">- git 2.39.1, fixing two security issues that could allow remote
  code execution when accessing specially crafted repositories:
  * CVE-2022-41903: log format integer overflow boo#1207033
  * CVE-2022-23521: gitattributed parsing integer overflow
    boo#1207032</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1676376000">- git 2.39.2:
  * CVE-2023-22490: Using a specially-crafted repository, Git can
    be tricked into using its local clone optimization even when
    using a non-local transport boo#1208027
  * CVE-2023-23946: a path outside the working tree can be
    overwritten as the user who is running "git apply" boo#1208028</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1678708800">- git 2.40.0:
  * backward incompatible change: The format.attach configuration
    variable lacked a way to override a value defined in a
    lower-priority configuration file (e.g. the system one) by
    redefining it in a higher-priority configuration file. Now,
    setting format.attach to an empty string means show the patch
    inline in the e-mail message, without using MIME attachment.
  * multiple commands and workflows gained additional options,
    compatible functionality, or more helpful output
  * "grep -P" learned to use Unicode Character Property to grok
    character classes when processing \b and \w etc.
  * under-the-hood improvements and bug fixes
- The scripted "git add -p/-i" implementation was removed upstream.
  The openSUSE package already preferred the C implementation.</changelog>
  <changelog author="adam.majer@suse.de" date="1680782400">- sha256_clone_fix.patch: fix cloning of empty sha256 repositories (jsc#PED-3891)</changelog>
  <changelog author="Andreas.Stieger@gmx.de" date="1682424000">- git 2.40.1:
  * CVE-2023-25652: By feeding specially crafted input to git apply
  - -reject, a path outside the working tree can be overwritten
    with partially controlled contents (corresponding to the
    rejected hunk(s) from the given patch).
  * CVE-2023-25815: When Git is compiled with runtime prefix
    support and runs without translated messages, it still used
    the gettext machinery to display messages, which subsequently
    potentially looked for translated messages in unexpected
    places. This allowed for malicious placement of crafted
    messages.
  * CVE-2023-29007: When renaming or deleting a section from a
    configuration file, certain malicious configuration values may
    be misinterpreted as the beginning of a new configuration
    section, leading to arbitrary configuration injection.</changelog>
  <changelog author="Andreas.Stieger@gmx.de" date="1685793600">- git 2.41.0: This update contains a number of compatible updates,
  improvements and extensions to multiple workflows. Some changes
  may break backwards compatibility:
  * The libsecret credential helper obsoletes direct GNOME keyring
    support, which was dropped (git-credential-gnome-keyring)
  * "git format-patch" has been taught to ignore end-user
    configuration ("diff.noprefix") and always use the standard
    prefixes, to avoid breaking the receiving end of the patch
- drop sha256_clone_fix.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1692792000">- git 2.42.0:
  * "git pack-refs" learns "--include" and "--exclude" to tweak the ref
    hierarchy to be packed using pattern matching.
  * 'git worktree add' learned how to create a worktree based on an
    orphaned branch with `--orphan`.
  * "git pack-objects" learned to invoke a new hook program that
    enumerates extra objects to be used as anchoring points to keep
    otherwise unreachable objects in cruft packs.
  * Add more "git var" for toolsmiths to learn various locations Git is
    configured with either via the configuration or hard-coded defaults.
  * 'git notes append' was taught '--separator' to specify string to insert
    between paragraphs.
  * The "git for-each-ref" family of commands learned placeholders
    related to GPG signature verification.
  * "git diff --no-index" learned to read from named pipes as if they
    were regular files, to allow "git diff &lt;(process) &lt;(substitution)"
    some shells support.
  * Help newbies by suggesting that there are cases where force-pushing
    is a valid and sensible thing to update a branch at a remote
    repository, rather than reconciling with merge/rebase.
  * "git blame --contents=file" has been taught to work in a bare
    repository.
  * "git branch -f X" to repoint the branch X said that X was "checked
    out" in another worktree, even when branch X was not and instead
    being bisected or rebased.  The message was reworded to say the
    branch was "in use".
  * Tone down the warning on SHA-256 repositories being an experimental
    curiosity.  We do not have support for them to interoperate with
    traditional SHA-1 repositories, but at this point, we do not plan
    to make breaking changes to SHA-256 repositories and there is no
    longer need for such a strongly phrased warning.
  * "git diff-tree" has been taught to take advantage of the
    sparse-index feature.
  * The object traversal using reachability bitmap done by
    "pack-object" has been tweaked to take advantage of the fact that
    using "boundary" commits as representative of all the uninteresting
    ones can save quite a lot of object enumeration.
  * "git worktree" learned to work better with sparse index feature.
  * When the external merge driver is killed by a signal, its output
    should not be trusted as a resolution with conflicts that is
    proposed by the driver, but the code did.
  * The set-up code for the get_revision() API now allows feeding
    options like --all and --not in the --stdin mode.
  * Move functions that are not about pure string manipulation out of
    strbuf.[ch]
  * "imap-send" codepaths got cleaned up to get rid of unused
    parameters.
  * Enumerating refs in the packed-refs file, while excluding refs that
    match certain patterns, has been optimized.
  * Mark-up unused parameters in the code so that we can eventually
    enable -Wunused-parameter by default.
  * Instead of inventing a custom counter variables for debugging,
    use existing trace2 facility in the fsync customization codepath.
  * "git branch --list --format=&lt;format&gt;" and friends are taught
    a new "%(describe)" placeholder.
  * Clarify how to choose the starting point for a new topic in
    developer guidance document.
  * The implementation of "get_sha1_hex()" that reads a hexadecimal
    string that spells a full object name has been extended to cope
    with any hash function used in the repository, but the "sha1" in
    its name survived.  Rename it to get_hash_hex(), a name that is
    more consistent within its friends like get_hash_hex_algop().
  * Command line parser fix, and a small parse-options API update.
  * bug fixes</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1699099200">- git 2.42.1:
  * The usual number of bug fixes, including
  * Fix "git diff" exit code handling
  * Various fixes to the behavior of "rebase -i" when the command
    got interrupted by conflicting changes</changelog>
  <changelog author="dmueller@suse.com" date="1700568000">- update to 2.43.0:
  * The "--rfc" option of "git format-patch" used to be a valid way to
  override an earlier "--subject-prefix=&lt;something&gt;" on the command
  line and replace it with "[RFC PATCH]", but from this release, it
  merely prefixes the string "RFC " in front of the given subject
  prefix.  If you are negatively affected by this change, please use
  "--subject-prefix=PATCH --rfc" as a replacement.
  * In Git 2.42, "git rev-list --stdin" learned to take non-revisions
  (like "--not") from the standard input, but the way such a "--not" was
  handled was quite confusing, which has been rethought.  The updated
  rule is that "--not" given from the command line only affects revs
  given from the command line that comes but not revs read from the
  standard input, and "--not" read from the standard input affects
  revs given from the standard input and not revs given from the
  command line.
  * A message written in olden time prevented a branch from getting
  checked out, saying it is already checked out elsewhere. But these
  days, we treat a branch that is being bisected or rebased just like
  a branch that is checked out and protect it from getting modified
  with the same codepath.  The message has been rephrased to say that
  the branch is "in use" to avoid confusion.
  * Hourly and other schedules of "git maintenance" jobs are randomly
  distributed now.
  * "git cmd -h" learned to signal which options can be negated by
  listing such options like "--[no-]opt".
  * The way authentication related data other than passwords (e.g.,
  oauth token and password expiration data) are stored in libsecret
  keyrings has been rethought.
  * Update the libsecret and wincred credential helpers to correctly
  match which credential to erase; they erased the wrong entry in
  some cases.
  * Git GUI updates.
  * "git format-patch" learned a new "--description-file" option that
  lets cover letter description to be fed; this can be used on
  detached HEAD where there is no branch description available, and
  also can override the branch description if there is one.
  * Use of the "--max-pack-size" option to allow multiple packfiles to
  be created is now supported even when we are sending unreachable
  objects to cruft packs.
  * "git format-patch --rfc --subject-prefix=&lt;foo&gt;" used to ignore the
  "--subject-prefix" option and used "[RFC PATCH]"; now we will add
  "RFC" prefix to whatever subject prefix is specified.
  * "git log --format" has been taught the %(decorate) placeholder for
  further customization over what the "--decorate" option offers.
  * The default log message created by "git revert", when reverting a
  commit that records a revert, has been tweaked, to encourage people
  to describe complex "revert of revert of revert" situations better in
  their own words.
  * The command-line completion support (in contrib/) learned to
  complete "git commit --trailer=" for possible trailer keys.
  * "git update-index" learned the "--show-index-version" option to
  inspect the index format version used by the on-disk index file.
  * "git diff" learned the "diff.statNameWidth" configuration variable,
  to give the default width for the name part in the "--stat" output.
  * "git range-diff --notes=foo" compared "log --notes=foo --notes" of
  the two ranges, instead of using just the specified notes tree,
  which has been corrected to use only the specified notes tree.
  * The command line completion script (in contrib/) can be told to
  complete aliases by including ": git &lt;cmd&gt; ;" in the alias to tell
  it that the alias should be completed in a similar way to how "git
  &lt;cmd&gt;" is completed.  The parsing code for the alias has been
  loosened to allow ';' without an extra space before it.
  * "git for-each-ref" and friends learned to apply mailmap to
  authorname and other fields in a more flexible way than using
  separate placeholder letters like %a[eElL] every time we want to
  come up with small variants.
  * "git repack" machinery learned to pay attention to the "--filter="
  option.
  * "git repack" learned the "--max-cruft-size" option to prevent cruft
  packs from growing without bounds.
  * "git merge-tree" learned to take strategy backend specific options
  via the "-X" option, like "git merge" does.
  * "git log" and friends learned the "--dd" option that is a
  short-hand for "--diff-merges=first-parent -p".
  * The attribute subsystem learned to honor the "attr.tree"
  configuration variable that specifies which tree to read the
  .gitattributes files from.
  * "git merge-file" learns a mode to read three variants of the
  contents to be merged from blob objects.
  * see https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.43.0.txt</changelog>
  <changelog author="danilo.spinella@suse.com" date="1719489600">- Fix CVE-2024-32002, recursive clones on case-insensitive filesystems
  that support symbolic links are susceptible to case confusion,
  bsc#1224168
  * CVE-2024-32002.patch
- Fix CVE-2024-32004, arbitrary code execution during local clones,
  bsc#1224170
  * CVE-2024-32004.patch
- Fix CVE-2024-32020, file overwriting vulnerability during local clones,
  bsc#1224171
  * CVE-2024-32020-1.patch
  * CVE-2024-32020-2.patch
  * CVE-2024-32020-4.patch
- Fix CVE-2024-32021, git may create hardlinks to arbitrary user-readable files,
  bsc#1224172
- Fix CVE-2024-32465, arbitrary code execution during clone operations,
  bsc#1224173
  * CVE-2024-32465.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1721304000">- Add CVE-2024-24577.patch
  * CVE-2024-24577: arbitrary code execution due to heap corruption
    in git_index_add (bsc#1219660)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1736683200">- Add CVE-2024-50349-1.patch, CVE-2024-50349-2.patch
  * CVE-2024-50349: passwords for trusted sites could be sent to untrusted
    sites (bsc#1235600)
- Add CVE-2024-52006.patch
  * CVE-2024-52006: Carriage Returns via the credential protocol to credential
    helpers (bsc#1235601)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1751889600">- Add CVE-2025-27614.patch
  * CVE-2025-27614: arbitrary script execution via repo clonation in gitk
    (bsc#1245939)
- Add CVE-2025-27613.patch
  * CVE-2025-27613: arbitrary writable file creation and truncation in Gitk
    (bsc#1245938)
- Add CVE-2025-48385.patch
  * CVE-2025-48385: arbitrary code execution due to protocol injection via
    fetching advertised bundle (bsc#1245946)
- Add CVE-2025-48384.patch
  * CVE-2025-48384: script may be unintentionally executed after checkout due
    to CRLF transforming (bsc#1245943)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1755691200">- Update to 2.51.0:
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.51.0.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.50.1.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.50.0.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.49.0.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.48.1.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.48.0.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.47.1.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.47.0.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.46.2.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.46.1.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.46.0.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.45.3.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.45.2.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.45.1.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.45.0.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.44.0.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.43.3.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.43.2.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.43.1.adoc
  * CVE fixes:
    CVE-2025-27613 (bsc#1245938)
    CVE-2025-27614 (bsc#1245939)
    CVE-2025-46835 (bsc#1245942)
    CVE-2025-48384 (bsc#1245943)
    CVE-2025-48385 (bsc#1245946)
  * SHA256 support (bsc#1243197)
- git moved to /usr/libexec/git/git, update AppArmor profile
  accordingly (boo#1218588)
- gitweb AppArmor profile: allow reading etc/gitweb-common.conf
  (boo#1218664)
- Do not replace apparmor configuration, fixes bsc#1216545
- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]
- only call the %python3_fix_shebang_path if it is actually
  defined.
- Compat stub for %python3_fix_shebang_path
- Change less requirement to path to allow for use with BusyBox
- contrib/workdir is dropped. remove references for it.
- Use zlib instead of zlib-ng for SLES16
- Drop upstreamed patches:
  * CVE-2024-32002.patch
  * CVE-2024-32004.patch
  * CVE-2024-32020-1.patch
  * CVE-2024-32020-2.patch
  * CVE-2024-32020-4.patch
  * CVE-2024-32465.patch
  * CVE-2024-50349-1.patch
  * CVE-2024-50349-2.patch
  * CVE-2024-52006.patch
  * CVE-2025-27613.patch
  * CVE-2025-27614.patch
  * CVE-2025-48384.patch
  * CVE-2025-48385.patch
- Refresh patches:
  * git-asciidoc.patch
  * git-prevent_xss-default.diff</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1759838400">- Revert incorrect AppArmor profile change, in SLE 15 the binaries remain
  in /usr/lib/git (bsc#1251224)</changelog>
</package>
<package pkgid="3e03c6aba8b80261a3b835146a79b408f4fdad7169292f0740e35831154bc1ce" name="git-core" arch="x86_64">
  <version epoch="0" ver="2.51.0" rel="150600.3.12.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1670846400">- git 2.38.2, a general maintenance release:
  * Fix unaligned memory access for reads from the index v4
  * "git remote rename" failed to rename a remote without fetch
    refspec, which has been corrected.
  * "git clone" did not like to see the "--bare" and the "--origin"
    options used together without a good reason.
  * "git fsck" failed to release contents of tree objects already
    used from the memory
  * "git rebase -i" can mistakenly attempt to apply a fixup to
    commit itself, which has been corrected.
  * Fix segfault with "git merge-tree" on read-only repositories
  * Fix a logic in "mailinfo -b" that miscomputed the length of a
    substring, which lead to an out-of-bounds access.
  * The codepath to sign learned to report errors when it fails to
    read from "ssh-keygen".
  * "GIT_EDITOR=: git branch --edit-description" resulted in failure
  * "git multi-pack-index repack/expire" used to repack unreachable
    cruft into a new pack, which have been corrected.
  * The code to clean temporary object directories (used for
    quarantine) tried to remove them inside its signal handler
  * "git branch --edit-description" on an unborh branch misleadingly
    said that no such branch exists
  * `git rebase --update-refs` would delete references when all
    `update-ref` commands in the sequencer were removed</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1670846401">- git 2.39.0:
  * "git grep" learned to expand the sparse-index more lazily and
    on demand in a sparse checkout.
  * By default, use of fsmonitor on a repository on networked
    filesystem is disabled.
  * After checking out a "branch" that is a symbolic-ref that points at
    another branch, "git symbolic-ref HEAD" reports the underlying
    branch, not the symbolic-ref the user gave checkout as argument.
    The command learned the "--no-recurse" option to stop after
    dereferencing a symbolic-ref only once.
  * "git branch --edit-description @{-1}" is now a way to edit branch
    description of the branch you were on before switching to the
    current branch.
  * "git merge-tree --stdin" is a new way to request a series of merges
    and report the merge results.
  * "git shortlog" learned to group by the "format" string.
  * A new "--include-whitespace" option is added to "git patch-id", and
    existing bugs in the internal patch-id logic that did not match
    what "git patch-id" produces have been corrected.
  * Enable gc.cruftpacks by default for those who opt into
    feature.experimental setting.
  * "git repack" learns to send cruft objects out of the way into
    packfiles outside the repository.
  * 'scalar reconfigure -a' is taught to automatically remove
    scalar.repo entires which no longer exist.
  * Redact headers from cURL's h2h3 module in GIT_CURL_VERBOSE and
    others.
  * 'git maintenance register' is taught to write configuration to an
    arbitrary path, and 'git for-each-repo' is taught to expand tilde
    characters in paths.
  * When creating new notes, the template used to get a stray empty
    newline, which has been removed.
  * "git receive-pack" used to use all the local refs as the boundary for
    checking connectivity of the data "git push" sent, but now it uses
    only the refs that it advertised to the pusher. In a repository with
    the .hideRefs configuration, this reduces the resources needed to
    perform the check.
  * With '--recurse-submodules=on-demand', all submodules are
    recursively pushed.
  * developer visible fixes</changelog>
  <changelog author="dmueller@suse.com" date="1671105600">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1673956800">- git 2.39.1, fixing two security issues that could allow remote
  code execution when accessing specially crafted repositories:
  * CVE-2022-41903: log format integer overflow boo#1207033
  * CVE-2022-23521: gitattributed parsing integer overflow
    boo#1207032</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1676376000">- git 2.39.2:
  * CVE-2023-22490: Using a specially-crafted repository, Git can
    be tricked into using its local clone optimization even when
    using a non-local transport boo#1208027
  * CVE-2023-23946: a path outside the working tree can be
    overwritten as the user who is running "git apply" boo#1208028</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1678708800">- git 2.40.0:
  * backward incompatible change: The format.attach configuration
    variable lacked a way to override a value defined in a
    lower-priority configuration file (e.g. the system one) by
    redefining it in a higher-priority configuration file. Now,
    setting format.attach to an empty string means show the patch
    inline in the e-mail message, without using MIME attachment.
  * multiple commands and workflows gained additional options,
    compatible functionality, or more helpful output
  * "grep -P" learned to use Unicode Character Property to grok
    character classes when processing \b and \w etc.
  * under-the-hood improvements and bug fixes
- The scripted "git add -p/-i" implementation was removed upstream.
  The openSUSE package already preferred the C implementation.</changelog>
  <changelog author="adam.majer@suse.de" date="1680782400">- sha256_clone_fix.patch: fix cloning of empty sha256 repositories (jsc#PED-3891)</changelog>
  <changelog author="Andreas.Stieger@gmx.de" date="1682424000">- git 2.40.1:
  * CVE-2023-25652: By feeding specially crafted input to git apply
  - -reject, a path outside the working tree can be overwritten
    with partially controlled contents (corresponding to the
    rejected hunk(s) from the given patch).
  * CVE-2023-25815: When Git is compiled with runtime prefix
    support and runs without translated messages, it still used
    the gettext machinery to display messages, which subsequently
    potentially looked for translated messages in unexpected
    places. This allowed for malicious placement of crafted
    messages.
  * CVE-2023-29007: When renaming or deleting a section from a
    configuration file, certain malicious configuration values may
    be misinterpreted as the beginning of a new configuration
    section, leading to arbitrary configuration injection.</changelog>
  <changelog author="Andreas.Stieger@gmx.de" date="1685793600">- git 2.41.0: This update contains a number of compatible updates,
  improvements and extensions to multiple workflows. Some changes
  may break backwards compatibility:
  * The libsecret credential helper obsoletes direct GNOME keyring
    support, which was dropped (git-credential-gnome-keyring)
  * "git format-patch" has been taught to ignore end-user
    configuration ("diff.noprefix") and always use the standard
    prefixes, to avoid breaking the receiving end of the patch
- drop sha256_clone_fix.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1692792000">- git 2.42.0:
  * "git pack-refs" learns "--include" and "--exclude" to tweak the ref
    hierarchy to be packed using pattern matching.
  * 'git worktree add' learned how to create a worktree based on an
    orphaned branch with `--orphan`.
  * "git pack-objects" learned to invoke a new hook program that
    enumerates extra objects to be used as anchoring points to keep
    otherwise unreachable objects in cruft packs.
  * Add more "git var" for toolsmiths to learn various locations Git is
    configured with either via the configuration or hard-coded defaults.
  * 'git notes append' was taught '--separator' to specify string to insert
    between paragraphs.
  * The "git for-each-ref" family of commands learned placeholders
    related to GPG signature verification.
  * "git diff --no-index" learned to read from named pipes as if they
    were regular files, to allow "git diff &lt;(process) &lt;(substitution)"
    some shells support.
  * Help newbies by suggesting that there are cases where force-pushing
    is a valid and sensible thing to update a branch at a remote
    repository, rather than reconciling with merge/rebase.
  * "git blame --contents=file" has been taught to work in a bare
    repository.
  * "git branch -f X" to repoint the branch X said that X was "checked
    out" in another worktree, even when branch X was not and instead
    being bisected or rebased.  The message was reworded to say the
    branch was "in use".
  * Tone down the warning on SHA-256 repositories being an experimental
    curiosity.  We do not have support for them to interoperate with
    traditional SHA-1 repositories, but at this point, we do not plan
    to make breaking changes to SHA-256 repositories and there is no
    longer need for such a strongly phrased warning.
  * "git diff-tree" has been taught to take advantage of the
    sparse-index feature.
  * The object traversal using reachability bitmap done by
    "pack-object" has been tweaked to take advantage of the fact that
    using "boundary" commits as representative of all the uninteresting
    ones can save quite a lot of object enumeration.
  * "git worktree" learned to work better with sparse index feature.
  * When the external merge driver is killed by a signal, its output
    should not be trusted as a resolution with conflicts that is
    proposed by the driver, but the code did.
  * The set-up code for the get_revision() API now allows feeding
    options like --all and --not in the --stdin mode.
  * Move functions that are not about pure string manipulation out of
    strbuf.[ch]
  * "imap-send" codepaths got cleaned up to get rid of unused
    parameters.
  * Enumerating refs in the packed-refs file, while excluding refs that
    match certain patterns, has been optimized.
  * Mark-up unused parameters in the code so that we can eventually
    enable -Wunused-parameter by default.
  * Instead of inventing a custom counter variables for debugging,
    use existing trace2 facility in the fsync customization codepath.
  * "git branch --list --format=&lt;format&gt;" and friends are taught
    a new "%(describe)" placeholder.
  * Clarify how to choose the starting point for a new topic in
    developer guidance document.
  * The implementation of "get_sha1_hex()" that reads a hexadecimal
    string that spells a full object name has been extended to cope
    with any hash function used in the repository, but the "sha1" in
    its name survived.  Rename it to get_hash_hex(), a name that is
    more consistent within its friends like get_hash_hex_algop().
  * Command line parser fix, and a small parse-options API update.
  * bug fixes</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1699099200">- git 2.42.1:
  * The usual number of bug fixes, including
  * Fix "git diff" exit code handling
  * Various fixes to the behavior of "rebase -i" when the command
    got interrupted by conflicting changes</changelog>
  <changelog author="dmueller@suse.com" date="1700568000">- update to 2.43.0:
  * The "--rfc" option of "git format-patch" used to be a valid way to
  override an earlier "--subject-prefix=&lt;something&gt;" on the command
  line and replace it with "[RFC PATCH]", but from this release, it
  merely prefixes the string "RFC " in front of the given subject
  prefix.  If you are negatively affected by this change, please use
  "--subject-prefix=PATCH --rfc" as a replacement.
  * In Git 2.42, "git rev-list --stdin" learned to take non-revisions
  (like "--not") from the standard input, but the way such a "--not" was
  handled was quite confusing, which has been rethought.  The updated
  rule is that "--not" given from the command line only affects revs
  given from the command line that comes but not revs read from the
  standard input, and "--not" read from the standard input affects
  revs given from the standard input and not revs given from the
  command line.
  * A message written in olden time prevented a branch from getting
  checked out, saying it is already checked out elsewhere. But these
  days, we treat a branch that is being bisected or rebased just like
  a branch that is checked out and protect it from getting modified
  with the same codepath.  The message has been rephrased to say that
  the branch is "in use" to avoid confusion.
  * Hourly and other schedules of "git maintenance" jobs are randomly
  distributed now.
  * "git cmd -h" learned to signal which options can be negated by
  listing such options like "--[no-]opt".
  * The way authentication related data other than passwords (e.g.,
  oauth token and password expiration data) are stored in libsecret
  keyrings has been rethought.
  * Update the libsecret and wincred credential helpers to correctly
  match which credential to erase; they erased the wrong entry in
  some cases.
  * Git GUI updates.
  * "git format-patch" learned a new "--description-file" option that
  lets cover letter description to be fed; this can be used on
  detached HEAD where there is no branch description available, and
  also can override the branch description if there is one.
  * Use of the "--max-pack-size" option to allow multiple packfiles to
  be created is now supported even when we are sending unreachable
  objects to cruft packs.
  * "git format-patch --rfc --subject-prefix=&lt;foo&gt;" used to ignore the
  "--subject-prefix" option and used "[RFC PATCH]"; now we will add
  "RFC" prefix to whatever subject prefix is specified.
  * "git log --format" has been taught the %(decorate) placeholder for
  further customization over what the "--decorate" option offers.
  * The default log message created by "git revert", when reverting a
  commit that records a revert, has been tweaked, to encourage people
  to describe complex "revert of revert of revert" situations better in
  their own words.
  * The command-line completion support (in contrib/) learned to
  complete "git commit --trailer=" for possible trailer keys.
  * "git update-index" learned the "--show-index-version" option to
  inspect the index format version used by the on-disk index file.
  * "git diff" learned the "diff.statNameWidth" configuration variable,
  to give the default width for the name part in the "--stat" output.
  * "git range-diff --notes=foo" compared "log --notes=foo --notes" of
  the two ranges, instead of using just the specified notes tree,
  which has been corrected to use only the specified notes tree.
  * The command line completion script (in contrib/) can be told to
  complete aliases by including ": git &lt;cmd&gt; ;" in the alias to tell
  it that the alias should be completed in a similar way to how "git
  &lt;cmd&gt;" is completed.  The parsing code for the alias has been
  loosened to allow ';' without an extra space before it.
  * "git for-each-ref" and friends learned to apply mailmap to
  authorname and other fields in a more flexible way than using
  separate placeholder letters like %a[eElL] every time we want to
  come up with small variants.
  * "git repack" machinery learned to pay attention to the "--filter="
  option.
  * "git repack" learned the "--max-cruft-size" option to prevent cruft
  packs from growing without bounds.
  * "git merge-tree" learned to take strategy backend specific options
  via the "-X" option, like "git merge" does.
  * "git log" and friends learned the "--dd" option that is a
  short-hand for "--diff-merges=first-parent -p".
  * The attribute subsystem learned to honor the "attr.tree"
  configuration variable that specifies which tree to read the
  .gitattributes files from.
  * "git merge-file" learns a mode to read three variants of the
  contents to be merged from blob objects.
  * see https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.43.0.txt</changelog>
  <changelog author="danilo.spinella@suse.com" date="1719489600">- Fix CVE-2024-32002, recursive clones on case-insensitive filesystems
  that support symbolic links are susceptible to case confusion,
  bsc#1224168
  * CVE-2024-32002.patch
- Fix CVE-2024-32004, arbitrary code execution during local clones,
  bsc#1224170
  * CVE-2024-32004.patch
- Fix CVE-2024-32020, file overwriting vulnerability during local clones,
  bsc#1224171
  * CVE-2024-32020-1.patch
  * CVE-2024-32020-2.patch
  * CVE-2024-32020-4.patch
- Fix CVE-2024-32021, git may create hardlinks to arbitrary user-readable files,
  bsc#1224172
- Fix CVE-2024-32465, arbitrary code execution during clone operations,
  bsc#1224173
  * CVE-2024-32465.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1721304000">- Add CVE-2024-24577.patch
  * CVE-2024-24577: arbitrary code execution due to heap corruption
    in git_index_add (bsc#1219660)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1736683200">- Add CVE-2024-50349-1.patch, CVE-2024-50349-2.patch
  * CVE-2024-50349: passwords for trusted sites could be sent to untrusted
    sites (bsc#1235600)
- Add CVE-2024-52006.patch
  * CVE-2024-52006: Carriage Returns via the credential protocol to credential
    helpers (bsc#1235601)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1751889600">- Add CVE-2025-27614.patch
  * CVE-2025-27614: arbitrary script execution via repo clonation in gitk
    (bsc#1245939)
- Add CVE-2025-27613.patch
  * CVE-2025-27613: arbitrary writable file creation and truncation in Gitk
    (bsc#1245938)
- Add CVE-2025-48385.patch
  * CVE-2025-48385: arbitrary code execution due to protocol injection via
    fetching advertised bundle (bsc#1245946)
- Add CVE-2025-48384.patch
  * CVE-2025-48384: script may be unintentionally executed after checkout due
    to CRLF transforming (bsc#1245943)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1755691200">- Update to 2.51.0:
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.51.0.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.50.1.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.50.0.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.49.0.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.48.1.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.48.0.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.47.1.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.47.0.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.46.2.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.46.1.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.46.0.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.45.3.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.45.2.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.45.1.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.45.0.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.44.0.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.43.3.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.43.2.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.43.1.adoc
  * CVE fixes:
    CVE-2025-27613 (bsc#1245938)
    CVE-2025-27614 (bsc#1245939)
    CVE-2025-46835 (bsc#1245942)
    CVE-2025-48384 (bsc#1245943)
    CVE-2025-48385 (bsc#1245946)
  * SHA256 support (bsc#1243197)
- git moved to /usr/libexec/git/git, update AppArmor profile
  accordingly (boo#1218588)
- gitweb AppArmor profile: allow reading etc/gitweb-common.conf
  (boo#1218664)
- Do not replace apparmor configuration, fixes bsc#1216545
- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]
- only call the %python3_fix_shebang_path if it is actually
  defined.
- Compat stub for %python3_fix_shebang_path
- Change less requirement to path to allow for use with BusyBox
- contrib/workdir is dropped. remove references for it.
- Use zlib instead of zlib-ng for SLES16
- Drop upstreamed patches:
  * CVE-2024-32002.patch
  * CVE-2024-32004.patch
  * CVE-2024-32020-1.patch
  * CVE-2024-32020-2.patch
  * CVE-2024-32020-4.patch
  * CVE-2024-32465.patch
  * CVE-2024-50349-1.patch
  * CVE-2024-50349-2.patch
  * CVE-2024-52006.patch
  * CVE-2025-27613.patch
  * CVE-2025-27614.patch
  * CVE-2025-48384.patch
  * CVE-2025-48385.patch
- Refresh patches:
  * git-asciidoc.patch
  * git-prevent_xss-default.diff</changelog>
</package>
<package pkgid="c93916b0da569c1dee83dde8b268c9fea33e4fc4b0f68f8924ca7adaabf35143" name="git-core" arch="x86_64">
  <version epoch="0" ver="2.51.0" rel="150600.3.15.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1670846400">- git 2.39.0:
  * "git grep" learned to expand the sparse-index more lazily and
    on demand in a sparse checkout.
  * By default, use of fsmonitor on a repository on networked
    filesystem is disabled.
  * After checking out a "branch" that is a symbolic-ref that points at
    another branch, "git symbolic-ref HEAD" reports the underlying
    branch, not the symbolic-ref the user gave checkout as argument.
    The command learned the "--no-recurse" option to stop after
    dereferencing a symbolic-ref only once.
  * "git branch --edit-description @{-1}" is now a way to edit branch
    description of the branch you were on before switching to the
    current branch.
  * "git merge-tree --stdin" is a new way to request a series of merges
    and report the merge results.
  * "git shortlog" learned to group by the "format" string.
  * A new "--include-whitespace" option is added to "git patch-id", and
    existing bugs in the internal patch-id logic that did not match
    what "git patch-id" produces have been corrected.
  * Enable gc.cruftpacks by default for those who opt into
    feature.experimental setting.
  * "git repack" learns to send cruft objects out of the way into
    packfiles outside the repository.
  * 'scalar reconfigure -a' is taught to automatically remove
    scalar.repo entires which no longer exist.
  * Redact headers from cURL's h2h3 module in GIT_CURL_VERBOSE and
    others.
  * 'git maintenance register' is taught to write configuration to an
    arbitrary path, and 'git for-each-repo' is taught to expand tilde
    characters in paths.
  * When creating new notes, the template used to get a stray empty
    newline, which has been removed.
  * "git receive-pack" used to use all the local refs as the boundary for
    checking connectivity of the data "git push" sent, but now it uses
    only the refs that it advertised to the pusher. In a repository with
    the .hideRefs configuration, this reduces the resources needed to
    perform the check.
  * With '--recurse-submodules=on-demand', all submodules are
    recursively pushed.
  * developer visible fixes</changelog>
  <changelog author="dmueller@suse.com" date="1671105600">- switch to pkgconfig(zlib) so that alternative providers can be
  used</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1673956800">- git 2.39.1, fixing two security issues that could allow remote
  code execution when accessing specially crafted repositories:
  * CVE-2022-41903: log format integer overflow boo#1207033
  * CVE-2022-23521: gitattributed parsing integer overflow
    boo#1207032</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1676376000">- git 2.39.2:
  * CVE-2023-22490: Using a specially-crafted repository, Git can
    be tricked into using its local clone optimization even when
    using a non-local transport boo#1208027
  * CVE-2023-23946: a path outside the working tree can be
    overwritten as the user who is running "git apply" boo#1208028</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1678708800">- git 2.40.0:
  * backward incompatible change: The format.attach configuration
    variable lacked a way to override a value defined in a
    lower-priority configuration file (e.g. the system one) by
    redefining it in a higher-priority configuration file. Now,
    setting format.attach to an empty string means show the patch
    inline in the e-mail message, without using MIME attachment.
  * multiple commands and workflows gained additional options,
    compatible functionality, or more helpful output
  * "grep -P" learned to use Unicode Character Property to grok
    character classes when processing \b and \w etc.
  * under-the-hood improvements and bug fixes
- The scripted "git add -p/-i" implementation was removed upstream.
  The openSUSE package already preferred the C implementation.</changelog>
  <changelog author="adam.majer@suse.de" date="1680782400">- sha256_clone_fix.patch: fix cloning of empty sha256 repositories (jsc#PED-3891)</changelog>
  <changelog author="Andreas.Stieger@gmx.de" date="1682424000">- git 2.40.1:
  * CVE-2023-25652: By feeding specially crafted input to git apply
  - -reject, a path outside the working tree can be overwritten
    with partially controlled contents (corresponding to the
    rejected hunk(s) from the given patch).
  * CVE-2023-25815: When Git is compiled with runtime prefix
    support and runs without translated messages, it still used
    the gettext machinery to display messages, which subsequently
    potentially looked for translated messages in unexpected
    places. This allowed for malicious placement of crafted
    messages.
  * CVE-2023-29007: When renaming or deleting a section from a
    configuration file, certain malicious configuration values may
    be misinterpreted as the beginning of a new configuration
    section, leading to arbitrary configuration injection.</changelog>
  <changelog author="Andreas.Stieger@gmx.de" date="1685793600">- git 2.41.0: This update contains a number of compatible updates,
  improvements and extensions to multiple workflows. Some changes
  may break backwards compatibility:
  * The libsecret credential helper obsoletes direct GNOME keyring
    support, which was dropped (git-credential-gnome-keyring)
  * "git format-patch" has been taught to ignore end-user
    configuration ("diff.noprefix") and always use the standard
    prefixes, to avoid breaking the receiving end of the patch
- drop sha256_clone_fix.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1692792000">- git 2.42.0:
  * "git pack-refs" learns "--include" and "--exclude" to tweak the ref
    hierarchy to be packed using pattern matching.
  * 'git worktree add' learned how to create a worktree based on an
    orphaned branch with `--orphan`.
  * "git pack-objects" learned to invoke a new hook program that
    enumerates extra objects to be used as anchoring points to keep
    otherwise unreachable objects in cruft packs.
  * Add more "git var" for toolsmiths to learn various locations Git is
    configured with either via the configuration or hard-coded defaults.
  * 'git notes append' was taught '--separator' to specify string to insert
    between paragraphs.
  * The "git for-each-ref" family of commands learned placeholders
    related to GPG signature verification.
  * "git diff --no-index" learned to read from named pipes as if they
    were regular files, to allow "git diff &lt;(process) &lt;(substitution)"
    some shells support.
  * Help newbies by suggesting that there are cases where force-pushing
    is a valid and sensible thing to update a branch at a remote
    repository, rather than reconciling with merge/rebase.
  * "git blame --contents=file" has been taught to work in a bare
    repository.
  * "git branch -f X" to repoint the branch X said that X was "checked
    out" in another worktree, even when branch X was not and instead
    being bisected or rebased.  The message was reworded to say the
    branch was "in use".
  * Tone down the warning on SHA-256 repositories being an experimental
    curiosity.  We do not have support for them to interoperate with
    traditional SHA-1 repositories, but at this point, we do not plan
    to make breaking changes to SHA-256 repositories and there is no
    longer need for such a strongly phrased warning.
  * "git diff-tree" has been taught to take advantage of the
    sparse-index feature.
  * The object traversal using reachability bitmap done by
    "pack-object" has been tweaked to take advantage of the fact that
    using "boundary" commits as representative of all the uninteresting
    ones can save quite a lot of object enumeration.
  * "git worktree" learned to work better with sparse index feature.
  * When the external merge driver is killed by a signal, its output
    should not be trusted as a resolution with conflicts that is
    proposed by the driver, but the code did.
  * The set-up code for the get_revision() API now allows feeding
    options like --all and --not in the --stdin mode.
  * Move functions that are not about pure string manipulation out of
    strbuf.[ch]
  * "imap-send" codepaths got cleaned up to get rid of unused
    parameters.
  * Enumerating refs in the packed-refs file, while excluding refs that
    match certain patterns, has been optimized.
  * Mark-up unused parameters in the code so that we can eventually
    enable -Wunused-parameter by default.
  * Instead of inventing a custom counter variables for debugging,
    use existing trace2 facility in the fsync customization codepath.
  * "git branch --list --format=&lt;format&gt;" and friends are taught
    a new "%(describe)" placeholder.
  * Clarify how to choose the starting point for a new topic in
    developer guidance document.
  * The implementation of "get_sha1_hex()" that reads a hexadecimal
    string that spells a full object name has been extended to cope
    with any hash function used in the repository, but the "sha1" in
    its name survived.  Rename it to get_hash_hex(), a name that is
    more consistent within its friends like get_hash_hex_algop().
  * Command line parser fix, and a small parse-options API update.
  * bug fixes</changelog>
  <changelog author="msuchanek@suse.com" date="1695384000">- Downgrade openssh dependency to recommends (bsc#1215533)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1698062400">- gitweb.cgi AppArmor profile
  - make the profile a named profile
  - add local/ include to make custom additions easier</changelog>
  <changelog author="msuchanek@suse.com" date="1698062401">- Add rule for /etc/gitconfig in gitweb.cgi apparmor profile (bsc#1216501).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1699099200">- git 2.42.1:
  * The usual number of bug fixes, including
  * Fix "git diff" exit code handling
  * Various fixes to the behavior of "rebase -i" when the command
    got interrupted by conflicting changes</changelog>
  <changelog author="dmueller@suse.com" date="1700568000">- update to 2.43.0:
  * The "--rfc" option of "git format-patch" used to be a valid way to
  override an earlier "--subject-prefix=&lt;something&gt;" on the command
  line and replace it with "[RFC PATCH]", but from this release, it
  merely prefixes the string "RFC " in front of the given subject
  prefix.  If you are negatively affected by this change, please use
  "--subject-prefix=PATCH --rfc" as a replacement.
  * In Git 2.42, "git rev-list --stdin" learned to take non-revisions
  (like "--not") from the standard input, but the way such a "--not" was
  handled was quite confusing, which has been rethought.  The updated
  rule is that "--not" given from the command line only affects revs
  given from the command line that comes but not revs read from the
  standard input, and "--not" read from the standard input affects
  revs given from the standard input and not revs given from the
  command line.
  * A message written in olden time prevented a branch from getting
  checked out, saying it is already checked out elsewhere. But these
  days, we treat a branch that is being bisected or rebased just like
  a branch that is checked out and protect it from getting modified
  with the same codepath.  The message has been rephrased to say that
  the branch is "in use" to avoid confusion.
  * Hourly and other schedules of "git maintenance" jobs are randomly
  distributed now.
  * "git cmd -h" learned to signal which options can be negated by
  listing such options like "--[no-]opt".
  * The way authentication related data other than passwords (e.g.,
  oauth token and password expiration data) are stored in libsecret
  keyrings has been rethought.
  * Update the libsecret and wincred credential helpers to correctly
  match which credential to erase; they erased the wrong entry in
  some cases.
  * Git GUI updates.
  * "git format-patch" learned a new "--description-file" option that
  lets cover letter description to be fed; this can be used on
  detached HEAD where there is no branch description available, and
  also can override the branch description if there is one.
  * Use of the "--max-pack-size" option to allow multiple packfiles to
  be created is now supported even when we are sending unreachable
  objects to cruft packs.
  * "git format-patch --rfc --subject-prefix=&lt;foo&gt;" used to ignore the
  "--subject-prefix" option and used "[RFC PATCH]"; now we will add
  "RFC" prefix to whatever subject prefix is specified.
  * "git log --format" has been taught the %(decorate) placeholder for
  further customization over what the "--decorate" option offers.
  * The default log message created by "git revert", when reverting a
  commit that records a revert, has been tweaked, to encourage people
  to describe complex "revert of revert of revert" situations better in
  their own words.
  * The command-line completion support (in contrib/) learned to
  complete "git commit --trailer=" for possible trailer keys.
  * "git update-index" learned the "--show-index-version" option to
  inspect the index format version used by the on-disk index file.
  * "git diff" learned the "diff.statNameWidth" configuration variable,
  to give the default width for the name part in the "--stat" output.
  * "git range-diff --notes=foo" compared "log --notes=foo --notes" of
  the two ranges, instead of using just the specified notes tree,
  which has been corrected to use only the specified notes tree.
  * The command line completion script (in contrib/) can be told to
  complete aliases by including ": git &lt;cmd&gt; ;" in the alias to tell
  it that the alias should be completed in a similar way to how "git
  &lt;cmd&gt;" is completed.  The parsing code for the alias has been
  loosened to allow ';' without an extra space before it.
  * "git for-each-ref" and friends learned to apply mailmap to
  authorname and other fields in a more flexible way than using
  separate placeholder letters like %a[eElL] every time we want to
  come up with small variants.
  * "git repack" machinery learned to pay attention to the "--filter="
  option.
  * "git repack" learned the "--max-cruft-size" option to prevent cruft
  packs from growing without bounds.
  * "git merge-tree" learned to take strategy backend specific options
  via the "-X" option, like "git merge" does.
  * "git log" and friends learned the "--dd" option that is a
  short-hand for "--diff-merges=first-parent -p".
  * The attribute subsystem learned to honor the "attr.tree"
  configuration variable that specifies which tree to read the
  .gitattributes files from.
  * "git merge-file" learns a mode to read three variants of the
  contents to be merged from blob objects.
  * see https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.43.0.txt</changelog>
  <changelog author="danilo.spinella@suse.com" date="1719489600">- Fix CVE-2024-32002, recursive clones on case-insensitive filesystems
  that support symbolic links are susceptible to case confusion,
  bsc#1224168
  * CVE-2024-32002.patch
- Fix CVE-2024-32004, arbitrary code execution during local clones,
  bsc#1224170
  * CVE-2024-32004.patch
- Fix CVE-2024-32020, file overwriting vulnerability during local clones,
  bsc#1224171
  * CVE-2024-32020-1.patch
  * CVE-2024-32020-2.patch
  * CVE-2024-32020-4.patch
- Fix CVE-2024-32021, git may create hardlinks to arbitrary user-readable files,
  bsc#1224172
- Fix CVE-2024-32465, arbitrary code execution during clone operations,
  bsc#1224173
  * CVE-2024-32465.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1721304000">- Add CVE-2024-24577.patch
  * CVE-2024-24577: arbitrary code execution due to heap corruption
    in git_index_add (bsc#1219660)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1736683200">- Add CVE-2024-50349-1.patch, CVE-2024-50349-2.patch
  * CVE-2024-50349: passwords for trusted sites could be sent to untrusted
    sites (bsc#1235600)
- Add CVE-2024-52006.patch
  * CVE-2024-52006: Carriage Returns via the credential protocol to credential
    helpers (bsc#1235601)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1751889600">- Add CVE-2025-27614.patch
  * CVE-2025-27614: arbitrary script execution via repo clonation in gitk
    (bsc#1245939)
- Add CVE-2025-27613.patch
  * CVE-2025-27613: arbitrary writable file creation and truncation in Gitk
    (bsc#1245938)
- Add CVE-2025-48385.patch
  * CVE-2025-48385: arbitrary code execution due to protocol injection via
    fetching advertised bundle (bsc#1245946)
- Add CVE-2025-48384.patch
  * CVE-2025-48384: script may be unintentionally executed after checkout due
    to CRLF transforming (bsc#1245943)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1755691200">- Update to 2.51.0:
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.51.0.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.50.1.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.50.0.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.49.0.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.48.1.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.48.0.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.47.1.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.47.0.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.46.2.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.46.1.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.46.0.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.45.3.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.45.2.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.45.1.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.45.0.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.44.0.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.43.3.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.43.2.adoc
  https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.43.1.adoc
  * CVE fixes:
    CVE-2025-27613 (bsc#1245938)
    CVE-2025-27614 (bsc#1245939)
    CVE-2025-46835 (bsc#1245942)
    CVE-2025-48384 (bsc#1245943)
    CVE-2025-48385 (bsc#1245946)
  * SHA256 support (bsc#1243197)
- git moved to /usr/libexec/git/git, update AppArmor profile
  accordingly (boo#1218588)
- gitweb AppArmor profile: allow reading etc/gitweb-common.conf
  (boo#1218664)
- Do not replace apparmor configuration, fixes bsc#1216545
- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]
- only call the %python3_fix_shebang_path if it is actually
  defined.
- Compat stub for %python3_fix_shebang_path
- Change less requirement to path to allow for use with BusyBox
- contrib/workdir is dropped. remove references for it.
- Use zlib instead of zlib-ng for SLES16
- Drop upstreamed patches:
  * CVE-2024-32002.patch
  * CVE-2024-32004.patch
  * CVE-2024-32020-1.patch
  * CVE-2024-32020-2.patch
  * CVE-2024-32020-4.patch
  * CVE-2024-32465.patch
  * CVE-2024-50349-1.patch
  * CVE-2024-50349-2.patch
  * CVE-2024-52006.patch
  * CVE-2025-27613.patch
  * CVE-2025-27614.patch
  * CVE-2025-48384.patch
  * CVE-2025-48385.patch
- Refresh patches:
  * git-asciidoc.patch
  * git-prevent_xss-default.diff</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1759838400">- Revert incorrect AppArmor profile change, in SLE 15 the binaries remain
  in /usr/lib/git (bsc#1251224)</changelog>
</package>
<package pkgid="02b671aba6c30f4effaf692d96a40d3defd3699ae45742e39ef4658cd175f60e" name="glib2" arch="src">
  <version epoch="0" ver="2.78.6" rel="150600.4.16.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828801">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828802">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828804">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
</package>
<package pkgid="821e0f0f0c8b52b74f168d617c3bbd28ce2487bdf7b131a90aa1c48a84bbc691" name="glib2" arch="src">
  <version epoch="0" ver="2.78.6" rel="150600.4.22.1"/>
  <changelog author="luc14n0@opensuse.org" date="1693828800">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828802">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828803">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
</package>
<package pkgid="97e5b1a9f7e16c41a4728d409b8c00b00191564e9bbcac56f6a17e46dba6196e" name="glib2" arch="src">
  <version epoch="0" ver="2.78.6" rel="150600.4.25.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
</package>
<package pkgid="fe88b082351e2f7518e90671d09e971eb83cfe027d669e9799f5facf35a41e58" name="glib2" arch="src">
  <version epoch="0" ver="2.78.6" rel="150600.4.28.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828801">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
  <changelog author="mgorse@suse.com" date="1768996800">- Add glib2-CVE-2026-0988.patch: fix a potential integer overflow
  in g_buffered_input_stream_peek (bsc#1257049 CVE-2026-0988
  glgo#GNOME/glib#3851).</changelog>
</package>
<package pkgid="32088dbdb4c45fdb42b9ec053c9e981f9fadca965d293d8d86f4dcd1044aae49" name="glib2" arch="src">
  <version epoch="0" ver="2.78.6" rel="150600.4.35.1"/>
  <changelog author="luc14n0@opensuse.org" date="1693828800">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
  <changelog author="mgorse@suse.com" date="1768996800">- Add glib2-CVE-2026-0988.patch: fix a potential integer overflow
  in g_buffered_input_stream_peek (bsc#1257049 CVE-2026-0988
  glgo#GNOME/glib#3851).</changelog>
  <changelog author="mgorse@suse.com" date="1769515200">- Add CVE fixes:
  + glib2-CVE-2026-1484.patch (bsc#1257355 CVE-2026-1484
    glgo#GNOME/glib!4979).
  + glib2-CVE-2026-1485.patch (bsc#1257354 CVE-2026-1485
    glgo#GNOME/glib!4981).
  + glib2-CVE-2026-1489.patch (bsc#1257353 CVE-2026-1489
    glgo#GNOME/glib!4984).</changelog>
</package>
<package pkgid="fa9e7aaf3d6cee97f38d19c1bbd0acad77e4729c35825c91c1f630827c8c6779" name="glib2-devel" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.16.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828801">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828802">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828804">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
</package>
<package pkgid="26d4c8aed6ebbdc5c2712f1369030abfce3c36621cd582724b479accb8c9407e" name="glib2-devel" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.22.1"/>
  <changelog author="luc14n0@opensuse.org" date="1693828800">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828802">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828803">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
</package>
<package pkgid="24a44a9f037f4c173fd51b30288abfbebb1d71b07f45458cf19e504ebf230559" name="glib2-devel" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.25.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
</package>
<package pkgid="5fc172912f50c151424d3d5531980a870922f14bc9652a5b3ed25c339eb52753" name="glib2-devel" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.28.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828801">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
  <changelog author="mgorse@suse.com" date="1768996800">- Add glib2-CVE-2026-0988.patch: fix a potential integer overflow
  in g_buffered_input_stream_peek (bsc#1257049 CVE-2026-0988
  glgo#GNOME/glib#3851).</changelog>
</package>
<package pkgid="92a080763e799e028c0a274f73d20ab4fe9600005f3ec4a95d49bad899aeaf06" name="glib2-devel" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.35.1"/>
  <changelog author="luc14n0@opensuse.org" date="1693828800">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
  <changelog author="mgorse@suse.com" date="1768996800">- Add glib2-CVE-2026-0988.patch: fix a potential integer overflow
  in g_buffered_input_stream_peek (bsc#1257049 CVE-2026-0988
  glgo#GNOME/glib#3851).</changelog>
  <changelog author="mgorse@suse.com" date="1769515200">- Add CVE fixes:
  + glib2-CVE-2026-1484.patch (bsc#1257355 CVE-2026-1484
    glgo#GNOME/glib!4979).
  + glib2-CVE-2026-1485.patch (bsc#1257354 CVE-2026-1485
    glgo#GNOME/glib!4981).
  + glib2-CVE-2026-1489.patch (bsc#1257353 CVE-2026-1489
    glgo#GNOME/glib!4984).</changelog>
</package>
<package pkgid="cfa55bda5723562d5335a57897181b997f8e415bac2c9b8156f0d0e6fb8312e3" name="glib2-lang" arch="noarch">
  <version epoch="0" ver="2.78.6" rel="150600.4.16.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828801">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828802">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828804">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
</package>
<package pkgid="a6890d39b163e885e8482acaf0c921b46ffec03061735e1b0c5a121ea545e362" name="glib2-lang" arch="noarch">
  <version epoch="0" ver="2.78.6" rel="150600.4.22.1"/>
  <changelog author="luc14n0@opensuse.org" date="1693828800">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828802">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828803">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
</package>
<package pkgid="91fa61fb75c08726fe5334cfb61e14ba09bbba877daaf8a427db93a920299e97" name="glib2-lang" arch="noarch">
  <version epoch="0" ver="2.78.6" rel="150600.4.25.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
</package>
<package pkgid="aa361221d1044a7ca3af7929dfd2e856a2e0dc5fbe790c491f4ee22cfaee863f" name="glib2-lang" arch="noarch">
  <version epoch="0" ver="2.78.6" rel="150600.4.28.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828801">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
  <changelog author="mgorse@suse.com" date="1768996800">- Add glib2-CVE-2026-0988.patch: fix a potential integer overflow
  in g_buffered_input_stream_peek (bsc#1257049 CVE-2026-0988
  glgo#GNOME/glib#3851).</changelog>
</package>
<package pkgid="dc597929dd8f2ba4fc4f6232ed0ff84f47637eb3ccebcffd8a9631f259c0aab4" name="glib2-lang" arch="noarch">
  <version epoch="0" ver="2.78.6" rel="150600.4.35.1"/>
  <changelog author="luc14n0@opensuse.org" date="1693828800">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
  <changelog author="mgorse@suse.com" date="1768996800">- Add glib2-CVE-2026-0988.patch: fix a potential integer overflow
  in g_buffered_input_stream_peek (bsc#1257049 CVE-2026-0988
  glgo#GNOME/glib#3851).</changelog>
  <changelog author="mgorse@suse.com" date="1769515200">- Add CVE fixes:
  + glib2-CVE-2026-1484.patch (bsc#1257355 CVE-2026-1484
    glgo#GNOME/glib!4979).
  + glib2-CVE-2026-1485.patch (bsc#1257354 CVE-2026-1485
    glgo#GNOME/glib!4981).
  + glib2-CVE-2026-1489.patch (bsc#1257353 CVE-2026-1489
    glgo#GNOME/glib!4984).</changelog>
</package>
<package pkgid="d4b617f8041ded203ca3b8df5959f3395c972d0e7ba1e84dc43e6632b686bd3d" name="glib2-tools" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.16.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828801">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828802">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828804">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
</package>
<package pkgid="420d896884c9e5526e7491e2c6f4ced0234d1a34d5bc575cddabb82f0b2c4546" name="glib2-tools" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.22.1"/>
  <changelog author="luc14n0@opensuse.org" date="1693828800">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828802">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828803">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
</package>
<package pkgid="b30775de437a912a942295a87a6bff54700c23c55f98c221feabaa4b0acb38a4" name="glib2-tools" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.25.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
</package>
<package pkgid="2193cec653358f0dfc19854947e455f12ae625b8eb7a80a6430128799bbf76c9" name="glib2-tools" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.28.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828801">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
  <changelog author="mgorse@suse.com" date="1768996800">- Add glib2-CVE-2026-0988.patch: fix a potential integer overflow
  in g_buffered_input_stream_peek (bsc#1257049 CVE-2026-0988
  glgo#GNOME/glib#3851).</changelog>
</package>
<package pkgid="e672445f55badda7eb0bc32af0e48b56864ef7d1c3d7f8390cf663d4939e4d14" name="glib2-tools" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.35.1"/>
  <changelog author="luc14n0@opensuse.org" date="1693828800">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
  <changelog author="mgorse@suse.com" date="1768996800">- Add glib2-CVE-2026-0988.patch: fix a potential integer overflow
  in g_buffered_input_stream_peek (bsc#1257049 CVE-2026-0988
  glgo#GNOME/glib#3851).</changelog>
  <changelog author="mgorse@suse.com" date="1769515200">- Add CVE fixes:
  + glib2-CVE-2026-1484.patch (bsc#1257355 CVE-2026-1484
    glgo#GNOME/glib!4979).
  + glib2-CVE-2026-1485.patch (bsc#1257354 CVE-2026-1485
    glgo#GNOME/glib!4981).
  + glib2-CVE-2026-1489.patch (bsc#1257353 CVE-2026-1489
    glgo#GNOME/glib!4984).</changelog>
</package>
<package pkgid="1c506379c7736f742492c5ebeea675ce55e66aa7a4eebb45ead3466d6370336b" name="glibc" arch="src">
  <version epoch="0" ver="2.38" rel="150600.14.32.1"/>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
</package>
<package pkgid="c0664b2bc2cab7b325a4a64953564250a6e223b96cf9972a021b8e65dbd7100a" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.32.1"/>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
</package>
<package pkgid="0bfad7abd69fc20adb5cafa9fb2ba91de937e88cc803a068550310086dae58a2" name="glibc" arch="src">
  <version epoch="0" ver="2.38" rel="150600.14.37.1"/>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
</package>
<package pkgid="a035b5c1f2af67db46594aad6417710113dfe2284a3bfe8c0c35a7bf89c41760" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.37.1"/>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
</package>
<package pkgid="1d57083e19f7726ef5105d724e3ff751b2f369579aa3cdcbc9c805ea2333d058" name="glibc" arch="src">
  <version epoch="0" ver="2.38" rel="150600.14.40.1"/>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1768824000">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256437, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
</package>
<package pkgid="a108166c94f7f56068d4540dc4bbf8aa9b09afaafca4705cf4dbbcceca66774f" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.40.1"/>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1768824000">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256437, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
</package>
<package pkgid="7087e243a9a818f0a18f48e73b82da64f8a3197e619a017c2ba02033e4e714ad" name="glibc" arch="src">
  <version epoch="0" ver="2.38" rel="150600.14.43.1"/>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1768824000">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256437, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
  <changelog author="schwab@suse.de" date="1771329600">- nss-missing-checks.patch: nss: Missing checks in __nss_configure_lookup,
  __nss_database_get (bsc#1258319, BZ #28940)</changelog>
</package>
<package pkgid="df289f16cb9f0bcd0139a0bfe3c6fc502c92739e7ab85adb576038367359f693" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.43.1"/>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1768824000">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256437, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
  <changelog author="schwab@suse.de" date="1771329600">- nss-missing-checks.patch: nss: Missing checks in __nss_configure_lookup,
  __nss_database_get (bsc#1258319, BZ #28940)</changelog>
</package>
<package pkgid="19b1c26259aad7b56a137e2a54bcf4ad59910278446e5ebc4c3d9342eeefc103" name="glibc" arch="src">
  <version epoch="0" ver="2.38" rel="150600.14.46.1"/>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1768824000">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256437, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
  <changelog author="schwab@suse.de" date="1771329600">- nss-missing-checks.patch: nss: Missing checks in __nss_configure_lookup,
  __nss_database_get (bsc#1258319, BZ #28940)</changelog>
  <changelog author="schwab@suse.de" date="1774872000">- resolv-count-resource-records.patch: resolv: Count records correctly
  (CVE-2026-4437, bsc#1260078, BZ #34014)
- resolv-check-hostname.patch: resolv: Check hostname for validity
  (CVE-2026-4438, bsc#1260082, BZ #34015)</changelog>
</package>
<package pkgid="ed5a85711bf75411311d1d5baf373fe49e74021d2ca54128c6e12c598c3e70fd" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.46.1"/>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1768824000">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256437, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
  <changelog author="schwab@suse.de" date="1771329600">- nss-missing-checks.patch: nss: Missing checks in __nss_configure_lookup,
  __nss_database_get (bsc#1258319, BZ #28940)</changelog>
  <changelog author="schwab@suse.de" date="1774872000">- resolv-count-resource-records.patch: resolv: Count records correctly
  (CVE-2026-4437, bsc#1260078, BZ #34014)
- resolv-check-hostname.patch: resolv: Check hostname for validity
  (CVE-2026-4438, bsc#1260082, BZ #34015)</changelog>
</package>
<package pkgid="cedd7776e081859f7d4a3b14b2cd46254286701a67a288ef80ce56da67292478" name="glibc-32bit" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.32.1"/>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
</package>
<package pkgid="ca86e40978c643ce993149a5e0c0375abbd36af3f6e0fa591c7f47f73bb1138c" name="glibc-32bit" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.37.1"/>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
</package>
<package pkgid="88901aff46a821a4986e582d630892ce08a1c10d2559d078efd6cf2c110d4869" name="glibc-32bit" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.40.1"/>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1768824000">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256437, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
</package>
<package pkgid="ac7f575cb5060a798d60af77e513594b83030e599e9e439584372846963b708a" name="glibc-32bit" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.43.1"/>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1768824000">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256437, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
  <changelog author="schwab@suse.de" date="1771329600">- nss-missing-checks.patch: nss: Missing checks in __nss_configure_lookup,
  __nss_database_get (bsc#1258319, BZ #28940)</changelog>
</package>
<package pkgid="51e14fe47cce8a01a27c2612dc92070ab95a669eb9f8a795f75b45687c536080" name="glibc-32bit" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.46.1"/>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1768824000">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256437, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
  <changelog author="schwab@suse.de" date="1771329600">- nss-missing-checks.patch: nss: Missing checks in __nss_configure_lookup,
  __nss_database_get (bsc#1258319, BZ #28940)</changelog>
  <changelog author="schwab@suse.de" date="1774872000">- resolv-count-resource-records.patch: resolv: Count records correctly
  (CVE-2026-4437, bsc#1260078, BZ #34014)
- resolv-check-hostname.patch: resolv: Check hostname for validity
  (CVE-2026-4438, bsc#1260082, BZ #34015)</changelog>
</package>
<package pkgid="b3c8077a1e59c912147c389200e5d31ab27a99a26155a9bfb1523a922bd25939" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.32.1"/>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
</package>
<package pkgid="2c07d046ca6c02b2fb395fe52e75529a5f98ea8d7cabd765c819f4060038984c" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.37.1"/>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
</package>
<package pkgid="72e8b774123b1746a7b00839bc0d36184f252dca911ff1070b8c04c578e1e717" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.40.1"/>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1768824000">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256437, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
</package>
<package pkgid="845963cda45863e6b790ab97c3612ab121a808bc4d8eeb9c99e9d8084577a6de" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.43.1"/>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1768824000">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256437, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
  <changelog author="schwab@suse.de" date="1771329600">- nss-missing-checks.patch: nss: Missing checks in __nss_configure_lookup,
  __nss_database_get (bsc#1258319, BZ #28940)</changelog>
</package>
<package pkgid="d2d5a0d9a4674a51c2dd7d76e4d4c052b20772ecdc677ea3c56adace2d4ac067" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.46.1"/>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1768824000">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256437, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
  <changelog author="schwab@suse.de" date="1771329600">- nss-missing-checks.patch: nss: Missing checks in __nss_configure_lookup,
  __nss_database_get (bsc#1258319, BZ #28940)</changelog>
  <changelog author="schwab@suse.de" date="1774872000">- resolv-count-resource-records.patch: resolv: Count records correctly
  (CVE-2026-4437, bsc#1260078, BZ #34014)
- resolv-check-hostname.patch: resolv: Check hostname for validity
  (CVE-2026-4438, bsc#1260082, BZ #34015)</changelog>
</package>
<package pkgid="d1ce9e95dd15bbfb0249465b159a8cb2e54861b6f85919eb36d149c67976c4d5" name="glibc-extra" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.32.1"/>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
</package>
<package pkgid="98f959e099dc28ba3015ce66c636b302c8f1fb1f5f1b2c4829fa3302c5159948" name="glibc-extra" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.37.1"/>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
</package>
<package pkgid="f797746f2c11db6a3795a10324ac354b902b31a052902eb62b107bdcb124d85f" name="glibc-extra" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.40.1"/>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1768824000">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256437, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
</package>
<package pkgid="383cc6141bfa78748027b356715e23e00f5aa90136ff0dade1e0469a8a3ed14d" name="glibc-extra" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.43.1"/>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1768824000">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256437, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
  <changelog author="schwab@suse.de" date="1771329600">- nss-missing-checks.patch: nss: Missing checks in __nss_configure_lookup,
  __nss_database_get (bsc#1258319, BZ #28940)</changelog>
</package>
<package pkgid="84011ac97f6afcbae54b570b65527fa219d0be2c5f8e99fcf0c344899cd43195" name="glibc-extra" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.46.1"/>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1768824000">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256437, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
  <changelog author="schwab@suse.de" date="1771329600">- nss-missing-checks.patch: nss: Missing checks in __nss_configure_lookup,
  __nss_database_get (bsc#1258319, BZ #28940)</changelog>
  <changelog author="schwab@suse.de" date="1774872000">- resolv-count-resource-records.patch: resolv: Count records correctly
  (CVE-2026-4437, bsc#1260078, BZ #34014)
- resolv-check-hostname.patch: resolv: Check hostname for validity
  (CVE-2026-4438, bsc#1260082, BZ #34015)</changelog>
</package>
<package pkgid="e21eec029c229c62cbddc7680cb63dbadcfd5fe26d90825457499df963fc6a46" name="glibc-i18ndata" arch="noarch">
  <version epoch="0" ver="2.38" rel="150600.14.32.1"/>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
</package>
<package pkgid="baf828183de0b67c4887008d1a678ce584956de3b8ed6fef678ee012d02ab99f" name="glibc-i18ndata" arch="noarch">
  <version epoch="0" ver="2.38" rel="150600.14.37.1"/>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
</package>
<package pkgid="da7396e39e7ab6c6ebfcd00004c6449e0312d281738f3d4d291ac89cddca149d" name="glibc-i18ndata" arch="noarch">
  <version epoch="0" ver="2.38" rel="150600.14.40.1"/>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1768824000">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256437, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
</package>
<package pkgid="afc8d1f4511b59eafa219990bee7c9b3dce6bd9e30db11001bef0ed854de3f69" name="glibc-i18ndata" arch="noarch">
  <version epoch="0" ver="2.38" rel="150600.14.43.1"/>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1768824000">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256437, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
  <changelog author="schwab@suse.de" date="1771329600">- nss-missing-checks.patch: nss: Missing checks in __nss_configure_lookup,
  __nss_database_get (bsc#1258319, BZ #28940)</changelog>
</package>
<package pkgid="8a04647c1fa591523ea104a98b5a446a82a80b5e48feafe1c77e078a5b7116d8" name="glibc-i18ndata" arch="noarch">
  <version epoch="0" ver="2.38" rel="150600.14.46.1"/>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1768824000">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256437, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
  <changelog author="schwab@suse.de" date="1771329600">- nss-missing-checks.patch: nss: Missing checks in __nss_configure_lookup,
  __nss_database_get (bsc#1258319, BZ #28940)</changelog>
  <changelog author="schwab@suse.de" date="1774872000">- resolv-count-resource-records.patch: resolv: Count records correctly
  (CVE-2026-4437, bsc#1260078, BZ #34014)
- resolv-check-hostname.patch: resolv: Check hostname for validity
  (CVE-2026-4438, bsc#1260082, BZ #34015)</changelog>
</package>
<package pkgid="47e16c2f106be903715a9220add871143f6815d2f742a9a2f9b86bfadd490791" name="glibc-info" arch="noarch">
  <version epoch="0" ver="2.38" rel="150600.14.32.1"/>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
</package>
<package pkgid="126bb311eb3c8ca04da644735bede8f789a64c0c7ff10bfb2dc59a017aad4eff" name="glibc-info" arch="noarch">
  <version epoch="0" ver="2.38" rel="150600.14.37.1"/>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
</package>
<package pkgid="83efc2279bd2843904ffd701b83b1a4d95cef83d58788b24dc966b1ff59862b2" name="glibc-info" arch="noarch">
  <version epoch="0" ver="2.38" rel="150600.14.40.1"/>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1768824000">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256437, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
</package>
<package pkgid="85a834e125729a67597eaf1ac38b8ac444269121974a429d23c3e88c3a94c408" name="glibc-info" arch="noarch">
  <version epoch="0" ver="2.38" rel="150600.14.43.1"/>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1768824000">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256437, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
  <changelog author="schwab@suse.de" date="1771329600">- nss-missing-checks.patch: nss: Missing checks in __nss_configure_lookup,
  __nss_database_get (bsc#1258319, BZ #28940)</changelog>
</package>
<package pkgid="2f1850c5178e41d60d266956c8b84793644544a611071f296056c5427c317858" name="glibc-info" arch="noarch">
  <version epoch="0" ver="2.38" rel="150600.14.46.1"/>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1768824000">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256437, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
  <changelog author="schwab@suse.de" date="1771329600">- nss-missing-checks.patch: nss: Missing checks in __nss_configure_lookup,
  __nss_database_get (bsc#1258319, BZ #28940)</changelog>
  <changelog author="schwab@suse.de" date="1774872000">- resolv-count-resource-records.patch: resolv: Count records correctly
  (CVE-2026-4437, bsc#1260078, BZ #34014)
- resolv-check-hostname.patch: resolv: Check hostname for validity
  (CVE-2026-4438, bsc#1260082, BZ #34015)</changelog>
</package>
<package pkgid="c866f356b5258c705eeb0aae4f37e06414ee0e724717a6b6d40f787b97c5186d" name="glibc-lang" arch="noarch">
  <version epoch="0" ver="2.38" rel="150600.14.32.1"/>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
</package>
<package pkgid="48d33fed6eb05cdb6acd6ee5c86884134f24cbc9e079a8452c6eb068d0995fe5" name="glibc-lang" arch="noarch">
  <version epoch="0" ver="2.38" rel="150600.14.37.1"/>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
</package>
<package pkgid="426d244d0c0a8423adaf52f26dc462f662d05f95646677abe60baacb9421be8d" name="glibc-lang" arch="noarch">
  <version epoch="0" ver="2.38" rel="150600.14.40.1"/>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1768824000">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256437, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
</package>
<package pkgid="219b654d9cf9c1a8c41d7a22f9c42ec3ba6c09eb2f056de3eab14f3352c58ddb" name="glibc-lang" arch="noarch">
  <version epoch="0" ver="2.38" rel="150600.14.43.1"/>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1768824000">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256437, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
  <changelog author="schwab@suse.de" date="1771329600">- nss-missing-checks.patch: nss: Missing checks in __nss_configure_lookup,
  __nss_database_get (bsc#1258319, BZ #28940)</changelog>
</package>
<package pkgid="2a80e4c2230b596c5639a0bbe800501c8137ef7c442cdf211347e0edf2d4b46b" name="glibc-lang" arch="noarch">
  <version epoch="0" ver="2.38" rel="150600.14.46.1"/>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1768824000">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256437, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
  <changelog author="schwab@suse.de" date="1771329600">- nss-missing-checks.patch: nss: Missing checks in __nss_configure_lookup,
  __nss_database_get (bsc#1258319, BZ #28940)</changelog>
  <changelog author="schwab@suse.de" date="1774872000">- resolv-count-resource-records.patch: resolv: Count records correctly
  (CVE-2026-4437, bsc#1260078, BZ #34014)
- resolv-check-hostname.patch: resolv: Check hostname for validity
  (CVE-2026-4438, bsc#1260082, BZ #34015)</changelog>
</package>
<package pkgid="e0fb420dbf398f6fde72da9dacf513c6b65a22fecdf6e6236009d9a20ce39864" name="glibc-locale" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.32.1"/>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
</package>
<package pkgid="b478c17a25e7cbc198e0b3d18651d0ad5ae6546fac456618494c00be1a69051a" name="glibc-locale" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.37.1"/>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
</package>
<package pkgid="b2f68c213cf4615793b1b77c410d35a7e7d564c851655871d2f44f5fede4dd50" name="glibc-locale" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.40.1"/>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1768824000">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256437, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
</package>
<package pkgid="a519175052419bce389473591fd76783e2555130387a2bdb1659ff989837d8ef" name="glibc-locale" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.43.1"/>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1768824000">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256437, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
  <changelog author="schwab@suse.de" date="1771329600">- nss-missing-checks.patch: nss: Missing checks in __nss_configure_lookup,
  __nss_database_get (bsc#1258319, BZ #28940)</changelog>
</package>
<package pkgid="1e9e85e5fb815b2165740e19ee74ea408d9f44fc1450d35455d7fb09de456c9e" name="glibc-locale" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.46.1"/>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1768824000">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256437, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
  <changelog author="schwab@suse.de" date="1771329600">- nss-missing-checks.patch: nss: Missing checks in __nss_configure_lookup,
  __nss_database_get (bsc#1258319, BZ #28940)</changelog>
  <changelog author="schwab@suse.de" date="1774872000">- resolv-count-resource-records.patch: resolv: Count records correctly
  (CVE-2026-4437, bsc#1260078, BZ #34014)
- resolv-check-hostname.patch: resolv: Check hostname for validity
  (CVE-2026-4438, bsc#1260082, BZ #34015)</changelog>
</package>
<package pkgid="a791c0433c6ec4c133cba267fb426e07b59acb646b48d005dcb11ccdb68dfb10" name="glibc-locale-base" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.32.1"/>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
</package>
<package pkgid="a0e69598f41a4d8e4ed63c4aff305f091b49db00803d404b3bb16e0c95435502" name="glibc-locale-base" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.37.1"/>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
</package>
<package pkgid="1918a03fa45f9e7003669416ba5eebf8370e0228e2f0b946862d8edb36aefd38" name="glibc-locale-base" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.40.1"/>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1768824000">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256437, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
</package>
<package pkgid="dcd6d694e386d1a982e323df8cc7da7cd65b71fa0331114167c9bd538316f8e9" name="glibc-locale-base" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.43.1"/>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1768824000">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256437, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
  <changelog author="schwab@suse.de" date="1771329600">- nss-missing-checks.patch: nss: Missing checks in __nss_configure_lookup,
  __nss_database_get (bsc#1258319, BZ #28940)</changelog>
</package>
<package pkgid="cb3ec05d7acab9bee8893f01a7b460335f3258af6c02c750a430c7ae1b257c18" name="glibc-locale-base" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.46.1"/>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1768824000">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256437, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
  <changelog author="schwab@suse.de" date="1771329600">- nss-missing-checks.patch: nss: Missing checks in __nss_configure_lookup,
  __nss_database_get (bsc#1258319, BZ #28940)</changelog>
  <changelog author="schwab@suse.de" date="1774872000">- resolv-count-resource-records.patch: resolv: Count records correctly
  (CVE-2026-4437, bsc#1260078, BZ #34014)
- resolv-check-hostname.patch: resolv: Check hostname for validity
  (CVE-2026-4438, bsc#1260082, BZ #34015)</changelog>
</package>
<package pkgid="9257f2e66c33b535444a3a7a73dd031d56c4c5a428dcabc68f036ba3a18763d5" name="glibc-locale-base-32bit" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.32.1"/>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
</package>
<package pkgid="37666548691beae75c2eb98fbd2c9e6f770869740cb25773b284a80c63284f41" name="glibc-locale-base-32bit" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.37.1"/>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
</package>
<package pkgid="747970751f7281bc57d92a5f3bcaa310e9f18a5509ea781c4c21ca6cc15b467c" name="glibc-locale-base-32bit" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.40.1"/>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1768824000">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256437, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
</package>
<package pkgid="90738f70048c5e87f66981676fe3b315fb20124613df56cd48806128155cb4d0" name="glibc-locale-base-32bit" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.43.1"/>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1768824000">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256437, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
  <changelog author="schwab@suse.de" date="1771329600">- nss-missing-checks.patch: nss: Missing checks in __nss_configure_lookup,
  __nss_database_get (bsc#1258319, BZ #28940)</changelog>
</package>
<package pkgid="678ac7491c95036281f8fac1605219d96195d203b8f1f8549451489730fc0c29" name="glibc-locale-base-32bit" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.46.1"/>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1768824000">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256437, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
  <changelog author="schwab@suse.de" date="1771329600">- nss-missing-checks.patch: nss: Missing checks in __nss_configure_lookup,
  __nss_database_get (bsc#1258319, BZ #28940)</changelog>
  <changelog author="schwab@suse.de" date="1774872000">- resolv-count-resource-records.patch: resolv: Count records correctly
  (CVE-2026-4437, bsc#1260078, BZ #34014)
- resolv-check-hostname.patch: resolv: Check hostname for validity
  (CVE-2026-4438, bsc#1260082, BZ #34015)</changelog>
</package>
<package pkgid="ea290dde23684e8f201935fc1d20fc122ce900c1a9e838e23b9daf6f59858730" name="glibc-profile" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.32.1"/>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
</package>
<package pkgid="7b979f5d1f9623c7821bd2c1da46e9c7cd1e221c8283e2560016be8cd4be0c4f" name="glibc-profile" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.37.1"/>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
</package>
<package pkgid="286da0e2e6ab271eb1996ae7c3c31715e4b91fbf9a218a8c4d96dda7cc6a04f1" name="glibc-profile" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.40.1"/>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1768824000">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256437, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
</package>
<package pkgid="908451a87c7d7363df66c9beffe84b8cb6fd4e26846cadbc7e165e2b04ecb3d6" name="glibc-profile" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.43.1"/>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1768824000">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256437, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
  <changelog author="schwab@suse.de" date="1771329600">- nss-missing-checks.patch: nss: Missing checks in __nss_configure_lookup,
  __nss_database_get (bsc#1258319, BZ #28940)</changelog>
</package>
<package pkgid="2f6e15ba2e074ac819cf3cf23b99c936dcf7bba4b5aa4d2f252e514e8b332255" name="glibc-profile" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.46.1"/>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1768824000">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256437, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
  <changelog author="schwab@suse.de" date="1771329600">- nss-missing-checks.patch: nss: Missing checks in __nss_configure_lookup,
  __nss_database_get (bsc#1258319, BZ #28940)</changelog>
  <changelog author="schwab@suse.de" date="1774872000">- resolv-count-resource-records.patch: resolv: Count records correctly
  (CVE-2026-4437, bsc#1260078, BZ #34014)
- resolv-check-hostname.patch: resolv: Check hostname for validity
  (CVE-2026-4438, bsc#1260082, BZ #34015)</changelog>
</package>
<package pkgid="23e098f2be8803803928fc059c4a0446a16c1e6fd6ba895b038681e072398fff" name="glu" arch="src">
  <version epoch="0" ver="9.0.0" rel="150200.10.3.1"/>
  <changelog author="sndirsch@suse.com" date="1346673600">- created package (since GLU has been split out from Mesa)</changelog>
  <changelog author="coolo@suse.com" date="1347969600">- rename to glu and use "official" git snapshot</changelog>
  <changelog author="cfarrell@suse.com" date="1347969601">- license update: SUSE-SGI-FreeB-2.0
  SGI-FreeB-2.0 is MIT with an advertising clause at the bottom</changelog>
  <changelog author="sndirsch@suse.com" date="1348228800">- fixed and simplified BuildRequires</changelog>
  <changelog author="jengelh@inai.de" date="1350734400">- Add Obsoletes/Provides for Mesa-libGLU1
- Avoid running configure twice</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call</changelog>
  <changelog author="sndirsch@suse.com" date="1414411200">- fixed buildrequires: pkgconfig(dri) -&gt; pkgconfig(gl)
- added baselibs.conf as source to specfile</changelog>
  <changelog author="eich@suse.com" date="1468324800">- U_Add-D-N-DEBUG-to-CFLAGS-dependent-on-enable-debug.patch
  u_autoconf-Don-t-modify-CFLAGS-in-configure-scripts.patch
  Avoid debug messages being printed out at runtime (bsc#988411).</changelog>
  <changelog author="sndirsch@suse.com" date="1496059200">- includes everything needed for missing sle issue entries:
  fate #315643-315645, 319159-319161, 319618 (bsc#1041327)</changelog>
  <changelog author="sndirsch@suse.com" date="1578225600">- U_build-fix.patch
  * build fix for sle15-sp2 (bsc#1158161)</changelog>
  <changelog author="sndirsch@suse.com" date="1760616000">- added missing LICENSE file (bsc#1252149)
- fixed license string</changelog>
</package>
<package pkgid="233b8025382862c02e23ba536862b020cef1e8710f8016bd5840938bdd35ff1c" name="gnu-free-fonts" arch="noarch">
  <version epoch="0" ver="0.20120503" rel="150000.4.6.2"/>
  <changelog author="toms@suse.de" date="1324468800">- Renamed freefont -&gt; gnu-free-fonts according to
  openSUSE packaging guidelines and FATE#313035
  Adjusted Obsoletes and Provides accordingly</changelog>
  <changelog author="cfarrell@suse.com" date="1331726400">- license update: SUSE-GPL-3.0+-with-font-exception
  There are GPL-3.0 licensed fonts - also, use SUSE- proprietary prefix
  until license is accepted upstream at spdx.org</changelog>
  <changelog author="pgajdos@suse.com" date="1337256000">- call spec-cleaner</changelog>
  <changelog author="pgajdos@suse.cz" date="1341403200">- amend spec file to reflect new font packaging scheme
  (see openFATE#313536);</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1343908800">- Update to version 0.20120503:
  * Lots of changes (see http://savannah.gnu.org/forum/forum.php?forum_id=7216
    and ChangeLog for details).
- Use the package scripts for generating the fonts in openSUSE &gt; 11.2. Use the
  "GenerateTrueType" external script only for older versions (package fails to
  compile otherwise).</changelog>
  <changelog author="bwiedemann@suse.com" date="1460894400">- Add reproducible.patch to fix build-compare</changelog>
  <changelog author="dimstar@opensuse.org" date="1515499200">- Add freefont-build-using-py3.patch: Fix build when using python3.</changelog>
  <changelog author="tchvatal@suse.com" date="1515672000">- Format with spec-cleaner
- Drop sle11 support as we use just py3
- Drop the BR on python in favor of python3-base</changelog>
  <changelog author="pgajdos@suse.com" date="1591358400">- from factory: Fix building with fontforge 20190801 [bsc#1170856]
- added patches
  + make_ff_version_check_forward_compatible.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1760702400">- mark COPYING as %license [bsc#1252150]</changelog>
</package>
<package pkgid="a9c3ed3530f139d05d5c8da12a4708a7d5f06478a6d1e807d21beffad14b3300" name="gnu-free-fonts" arch="src">
  <version epoch="0" ver="0.20120503" rel="150000.4.6.2"/>
  <changelog author="mfabian@suse.de" date="1154952000">- move fonts to /usr/share/fonts because of the move to Xorg X11R7.</changelog>
  <changelog author="mfabian@suse.de" date="1155038400">- BuildRequires: xorg-x11-devel is necessary to detect Xorg X11R7.</changelog>
  <changelog author="mfabian@suse.de" date="1211803200">- bnc#246804: update to latest release (0.20080323), this seems
  to finally fix the spacing issues in the monospace font.</changelog>
  <changelog author="pgajdos@suse.cz" date="1260273600">- updated to 0.20091208
- used old but working GenerateTrueType script</changelog>
  <changelog author="tiwai@suse.de" date="1270728000">- fix build with new fontforge
- minor clean-ups</changelog>
  <changelog author="pgajdos@suse.cz" date="1290081600">- updated to 0.20101118</changelog>
  <changelog author="pgajdos@novell.com" date="1306152000">- updated to 20110523</changelog>
  <changelog author="andrea.turrini@gmail.com" date="1313236800">- fixed typo in freefont.spec</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Apply packaging guidelines (remove redundant/obsolete
  tags/sections from specfile, etc.)</changelog>
  <changelog author="pgajdos@suse.com" date="1320148800">- freefont changed to svn:
  svn co svn://svn.savannah.gnu.org/freefont/trunk/freefont
- updated to 0.20111101:
  * Cyrillic: added 'locl' lookup for Serbian/Macedonian 'be'
  * Latin, Diacritics, etc: hungarian umlaut, double grave adjustments
  * Latin: small adjustment to letter spacing
  * Latin: much messing with accents for Vietnamese, some kerning
  * etc. see svn changelog</changelog>
  <changelog author="toms@suse.de" date="1324468800">- Renamed freefont -&gt; gnu-free-fonts according to
  openSUSE packaging guidelines and FATE#313035
  Adjusted Obsoletes and Provides accordingly</changelog>
  <changelog author="cfarrell@suse.com" date="1331726400">- license update: SUSE-GPL-3.0+-with-font-exception
  There are GPL-3.0 licensed fonts - also, use SUSE- proprietary prefix
  until license is accepted upstream at spdx.org</changelog>
  <changelog author="pgajdos@suse.com" date="1337256000">- call spec-cleaner</changelog>
  <changelog author="pgajdos@suse.cz" date="1341403200">- amend spec file to reflect new font packaging scheme
  (see openFATE#313536);</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1343908800">- Update to version 0.20120503:
  * Lots of changes (see http://savannah.gnu.org/forum/forum.php?forum_id=7216
    and ChangeLog for details).
- Use the package scripts for generating the fonts in openSUSE &gt; 11.2. Use the
  "GenerateTrueType" external script only for older versions (package fails to
  compile otherwise).</changelog>
  <changelog author="bwiedemann@suse.com" date="1460894400">- Add reproducible.patch to fix build-compare</changelog>
  <changelog author="dimstar@opensuse.org" date="1515499200">- Add freefont-build-using-py3.patch: Fix build when using python3.</changelog>
  <changelog author="tchvatal@suse.com" date="1515672000">- Format with spec-cleaner
- Drop sle11 support as we use just py3
- Drop the BR on python in favor of python3-base</changelog>
  <changelog author="pgajdos@suse.com" date="1591358400">- from factory: Fix building with fontforge 20190801 [bsc#1170856]
- added patches
  + make_ff_version_check_forward_compatible.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1760702400">- mark COPYING as %license [bsc#1252150]</changelog>
</package>
<package pkgid="9b74a1be0b2e801772d0cd59b0ab89788d16e38e088baeb32231334461e47d71" name="gnutls" arch="src">
  <version epoch="0" ver="3.8.3" rel="150600.4.12.1"/>
  <changelog author="pmonreal@suse.com" date="1685361600">- FIPS: Fix baselibs.conf to mention libgnutls30-hmac [bsc#1211476]
  Extend also the checks in gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1691409600">- Update to version 3.8.1:
  * libgnutls: ClientHello extensions are randomized by default
    To make fingerprinting harder, TLS extensions in ClientHello
    messages are shuffled. As this behavior may cause compatibility
    issue with legacy applications that do not accept the last
    extension without payload, the behavior can be reverted with the
    %NO_SHUFFLE_EXTENSIONS priority keyword.
  * libgnutls: Add support for RFC 9258 external PSK importer.
    This enables to deploy the same PSK across multiple TLS versions
    (TLS 1.2 and TLS 1.3) in a secure manner. To use, the application
    needs to set up a callback that formats the PSK identity using
    gnutls_psk_format_imported_identity().
  * libgnutls: %GNUTLS_NO_EXTENSIONS has been renamed to
    %GNUTLS_NO_DEFAULT_EXTENSIONS.
  * libgnutls: Add additional PBKDF limit checks in FIPS mode as
    defined in SP 800-132. Minimum salt length is 128 bits and
    minimum iterations bound is 1000 for PBKDF in FIPS mode.
  * libgnutls: Add a mechanism to control whether to enforce extended
    master secret (RFC 7627). FIPS 140-3 mandates the use of TLS
    session hash (extended master secret, EMS) in TLS 1.2. To enforce
    this, a new priority keyword %FORCE_SESSION_HASH is added and if
    it is set and EMS is not set, the peer aborts the connection. This
    behavior is the default in FIPS mode, though it can be overridden
    through the configuration file with the "tls-session-hash" option.
    In either case non-EMS PRF is reported as a non-approved operation
    through the FIPS service indicator.
  * New option --attime to specify current time.
    To make testing with different timestamp to the system easier, the
    tools doing certificate verification now provide a new option
  - -attime, which takes an arbitrary time.
  * API and ABI modifications:
    gnutls_psk_client_credentials_function3: New typedef
    gnutls_psk_server_credentials_function3: New typedef
    gnutls_psk_set_server_credentials_function3: New function
    gnutls_psk_set_client_credentials_function3: New function
    gnutls_psk_format_imported_identity: New function
    GNUTLS_PSK_KEY_EXT: New enum member of gnutls_psk_key_flags
  * Rebase patches:
  - gnutls-FIPS-140-3-references.patch
  - gnutls-FIPS-jitterentropy.patch
  * Remove patches merged/fixed upstream:
  - gnutls-FIPS-PCT-DH.patch
  - gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1692619200">- tests: Fix the SRP test that fails with SIGPIPE signal return due
  to a socket being closed before using it.
  * Add gnutls-srp-test-SIGPIPE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1692705600">- Fix missing GNUTLS_NO_EXTENSIONS compatibility.
  * Upstream: gitlab.com/gnutls/gnutls/commit/abfa8634
  * Add gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to 3.8.2: [bsc#1217277, CVE-2023-5981]
  * libgnutls: Fix timing side-channel inside RSA-PSK key exchange.
    [GNUTLS-SA-2023-10-23, CVSS: medium] [CVE-2023-5981]
  * libgnutls: Add API functions to perform ECDH and DH key agreement
    The functionality has been there for a long time though they were
    not available as part of the public API.  This enables applications
    to implement custom protocols leveraging non-interactive key
    agreement with ECDH and DH.
  * libgnutls: Added support for AES-GCM-SIV ciphers (RFC 8452)
    The new algorithms GNUTLS_CIPHER_AES_128_SIV_GCM and
    GNUTLS_CIPHER_AES_256_SIV_GCM have been added to be used through
    the AEAD interface.  Note that, unlike
    GNUTLS_CIPHER_AES_{128,256}_SIV_GCM, the authentication tag is
    appended to the ciphertext, not prepended.
  * libgnutls: transparent KTLS support is extended to FreeBSD kernel
    The kernel TLS feature can now be enabled on FreeBSD as well as
    Linux when compiled with the --enable-ktls configure option.
  * gnutls-cli: New option --starttls-name
    Depending on deployment, application protocols such as XMPP may
    require a different origin address than the external address to be
    presented prior to STARTTLS negotiation.  The --starttls-name can
    be used to specify specify the addresses separately.
  * API and ABI modifications:
  - gnutls_pubkey_import_dh_raw: New function
  - gnutls_privkey_import_dh_raw: New function
  - gnutls_pubkey_export_dh_raw: New function
  - gnutls_privkey_export_dh_raw: New function
  - gnutls_x509_privkey_import_dh_raw: New function
  - gnutls_privkey_derive_secret: New function
  - GNUTLS_KEYGEN_DH: New enum member of gnutls_keygen_types_t
  - GNUTLS_CIPHER_AES_128_SIV_GCM: Added
  - GNUTLS_CIPHER_AES_256_SIV_GCM: Added
  * Rebase gnutls-FIPS-140-3-references.patch
  * Remove upstream: gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Update to 3.8.3:
  * libgnutls: Fix more timing side-channel inside RSA-PSK key
    exchange. [GNUTLS-SA-2024-01-14, CVSS: medium]
    [bsc#1218865, CVE-2024-0553]
  * libgnutls: Fix assertion failure when verifying a certificate
    chain with a cycle of cross signatures.
    [GNUTLS-SA-2024-01-09, CVSS: medium] [bsc#1218862, CVE-2024-0567]
  * libgnutls: Fix regression in handling Ed25519 keys stored in
    PKCS#11 token certtool was unable to handle Ed25519 keys
    generated on PKCS#11 with pkcs11-tool (OpenSC).
    This is a regression introduced in 3.8.2.
  * Rebase gnutls-FIPS-140-3-references.patch
  * Updated upstream gnutls.keyring</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1720785600">- FIPS: [bsc#1227671, bsc#1226731]
  * Remove not needed DSA in selfchecks in FIPS mode.
  * Add gnutls-FIPS-no_dsa_selftest.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721131200">- FIPS: bsc#1227670
  * Allow RSA signature verification with min of 2048 bit modulus.
  * Add gnutls-FIPS-rsa-min-2048.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721649600">- FIPS: bsc#1227642
  * Mark SHA1 as not allowed for signature verification in both RSA and ECDSA sigVer.
  * Add gnutls-FIPS-no-sha1-verify.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1722945600">- FIPS: bsc#1226733
  * Use full hash+sign operations, not low level primitives in PCT test.
  * Add gnutls-FIPS-full-hash_sign.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1723204800">- FIPS: bsc#1226733
  * Run pairwise consistency test only in FIPS mode
  * Backport upstream commit 5c276953c1536375fba96bc769e1cb5d3123b4a7
  * Add gnutls-pct-in-FIPS-only.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1725451200">- FIPS: bsc#1230166
  * Mark gnutls_hash_fast operations as approved in SLI.
  * Add gnutls-FIPS-gnutls_hash_fast-SLI.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725537600">- FIPS: Allow to perform the integrity check with the hmac provided
  by each library [bsc#1226724]
  * Rebase gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1726488000">- FIPS: Do not allow curve P-192 for signature or keypair verification [bsc#1227669]
  * Add gnutls-FIPS-p192-disabled.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1739534400">- Security fix [bsc#1236974, CVE-2024-12243]
  * gnutls: inefficient DER Decoding in libtasn1 could lead to remote DoS
  * Add gnutls-CVE-2024-12243.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- Fix heap buffer overread when handling the CT SCT extension during X.509
  certificate parsing [bsc#1246233, CVE-2025-32989]
  * Add patch gnutls-CVE-2025-32989.patch
- Fix double-free due to incorrect ownership handling in the export logic of
  SAN entries containing an otherName [bsc#1246232, CVE-2025-32988]
  * Add patch gnutls-CVE-2025-32988.patch
- Fix 1-byte heap buffer overflow when parsing templates with certtool
  [bsc#1246267, CVE-2025-32990]
  * Add patch gnutls-CVE-2025-32990.patch
- Fix NULL pointer dereference when 2nd Client Hello omits PSK
  [bsc#1246299, CVE-2025-6395]
  * Add patch gnutls-CVE-2025-6395.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1763985600">- Security fix bsc#1254132 CVE-2025-9820
  * Fix buffer overflow in gnutls_pkcs11_token_init
  * Added gnutls-CVE-2025-9820.patch</changelog>
</package>
<package pkgid="ca9e4e20366f45606267867dee65aae14037aa07596b94900d7504a44c134066" name="gnutls" arch="x86_64">
  <version epoch="0" ver="3.8.3" rel="150600.4.12.1"/>
  <changelog author="pmonreal@suse.com" date="1685361600">- FIPS: Fix baselibs.conf to mention libgnutls30-hmac [bsc#1211476]
  Extend also the checks in gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1691409600">- Update to version 3.8.1:
  * libgnutls: ClientHello extensions are randomized by default
    To make fingerprinting harder, TLS extensions in ClientHello
    messages are shuffled. As this behavior may cause compatibility
    issue with legacy applications that do not accept the last
    extension without payload, the behavior can be reverted with the
    %NO_SHUFFLE_EXTENSIONS priority keyword.
  * libgnutls: Add support for RFC 9258 external PSK importer.
    This enables to deploy the same PSK across multiple TLS versions
    (TLS 1.2 and TLS 1.3) in a secure manner. To use, the application
    needs to set up a callback that formats the PSK identity using
    gnutls_psk_format_imported_identity().
  * libgnutls: %GNUTLS_NO_EXTENSIONS has been renamed to
    %GNUTLS_NO_DEFAULT_EXTENSIONS.
  * libgnutls: Add additional PBKDF limit checks in FIPS mode as
    defined in SP 800-132. Minimum salt length is 128 bits and
    minimum iterations bound is 1000 for PBKDF in FIPS mode.
  * libgnutls: Add a mechanism to control whether to enforce extended
    master secret (RFC 7627). FIPS 140-3 mandates the use of TLS
    session hash (extended master secret, EMS) in TLS 1.2. To enforce
    this, a new priority keyword %FORCE_SESSION_HASH is added and if
    it is set and EMS is not set, the peer aborts the connection. This
    behavior is the default in FIPS mode, though it can be overridden
    through the configuration file with the "tls-session-hash" option.
    In either case non-EMS PRF is reported as a non-approved operation
    through the FIPS service indicator.
  * New option --attime to specify current time.
    To make testing with different timestamp to the system easier, the
    tools doing certificate verification now provide a new option
  - -attime, which takes an arbitrary time.
  * API and ABI modifications:
    gnutls_psk_client_credentials_function3: New typedef
    gnutls_psk_server_credentials_function3: New typedef
    gnutls_psk_set_server_credentials_function3: New function
    gnutls_psk_set_client_credentials_function3: New function
    gnutls_psk_format_imported_identity: New function
    GNUTLS_PSK_KEY_EXT: New enum member of gnutls_psk_key_flags
  * Rebase patches:
  - gnutls-FIPS-140-3-references.patch
  - gnutls-FIPS-jitterentropy.patch
  * Remove patches merged/fixed upstream:
  - gnutls-FIPS-PCT-DH.patch
  - gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1692619200">- tests: Fix the SRP test that fails with SIGPIPE signal return due
  to a socket being closed before using it.
  * Add gnutls-srp-test-SIGPIPE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1692705600">- Fix missing GNUTLS_NO_EXTENSIONS compatibility.
  * Upstream: gitlab.com/gnutls/gnutls/commit/abfa8634
  * Add gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to 3.8.2: [bsc#1217277, CVE-2023-5981]
  * libgnutls: Fix timing side-channel inside RSA-PSK key exchange.
    [GNUTLS-SA-2023-10-23, CVSS: medium] [CVE-2023-5981]
  * libgnutls: Add API functions to perform ECDH and DH key agreement
    The functionality has been there for a long time though they were
    not available as part of the public API.  This enables applications
    to implement custom protocols leveraging non-interactive key
    agreement with ECDH and DH.
  * libgnutls: Added support for AES-GCM-SIV ciphers (RFC 8452)
    The new algorithms GNUTLS_CIPHER_AES_128_SIV_GCM and
    GNUTLS_CIPHER_AES_256_SIV_GCM have been added to be used through
    the AEAD interface.  Note that, unlike
    GNUTLS_CIPHER_AES_{128,256}_SIV_GCM, the authentication tag is
    appended to the ciphertext, not prepended.
  * libgnutls: transparent KTLS support is extended to FreeBSD kernel
    The kernel TLS feature can now be enabled on FreeBSD as well as
    Linux when compiled with the --enable-ktls configure option.
  * gnutls-cli: New option --starttls-name
    Depending on deployment, application protocols such as XMPP may
    require a different origin address than the external address to be
    presented prior to STARTTLS negotiation.  The --starttls-name can
    be used to specify specify the addresses separately.
  * API and ABI modifications:
  - gnutls_pubkey_import_dh_raw: New function
  - gnutls_privkey_import_dh_raw: New function
  - gnutls_pubkey_export_dh_raw: New function
  - gnutls_privkey_export_dh_raw: New function
  - gnutls_x509_privkey_import_dh_raw: New function
  - gnutls_privkey_derive_secret: New function
  - GNUTLS_KEYGEN_DH: New enum member of gnutls_keygen_types_t
  - GNUTLS_CIPHER_AES_128_SIV_GCM: Added
  - GNUTLS_CIPHER_AES_256_SIV_GCM: Added
  * Rebase gnutls-FIPS-140-3-references.patch
  * Remove upstream: gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Update to 3.8.3:
  * libgnutls: Fix more timing side-channel inside RSA-PSK key
    exchange. [GNUTLS-SA-2024-01-14, CVSS: medium]
    [bsc#1218865, CVE-2024-0553]
  * libgnutls: Fix assertion failure when verifying a certificate
    chain with a cycle of cross signatures.
    [GNUTLS-SA-2024-01-09, CVSS: medium] [bsc#1218862, CVE-2024-0567]
  * libgnutls: Fix regression in handling Ed25519 keys stored in
    PKCS#11 token certtool was unable to handle Ed25519 keys
    generated on PKCS#11 with pkcs11-tool (OpenSC).
    This is a regression introduced in 3.8.2.
  * Rebase gnutls-FIPS-140-3-references.patch
  * Updated upstream gnutls.keyring</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1720785600">- FIPS: [bsc#1227671, bsc#1226731]
  * Remove not needed DSA in selfchecks in FIPS mode.
  * Add gnutls-FIPS-no_dsa_selftest.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721131200">- FIPS: bsc#1227670
  * Allow RSA signature verification with min of 2048 bit modulus.
  * Add gnutls-FIPS-rsa-min-2048.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721649600">- FIPS: bsc#1227642
  * Mark SHA1 as not allowed for signature verification in both RSA and ECDSA sigVer.
  * Add gnutls-FIPS-no-sha1-verify.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1722945600">- FIPS: bsc#1226733
  * Use full hash+sign operations, not low level primitives in PCT test.
  * Add gnutls-FIPS-full-hash_sign.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1723204800">- FIPS: bsc#1226733
  * Run pairwise consistency test only in FIPS mode
  * Backport upstream commit 5c276953c1536375fba96bc769e1cb5d3123b4a7
  * Add gnutls-pct-in-FIPS-only.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1725451200">- FIPS: bsc#1230166
  * Mark gnutls_hash_fast operations as approved in SLI.
  * Add gnutls-FIPS-gnutls_hash_fast-SLI.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725537600">- FIPS: Allow to perform the integrity check with the hmac provided
  by each library [bsc#1226724]
  * Rebase gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1726488000">- FIPS: Do not allow curve P-192 for signature or keypair verification [bsc#1227669]
  * Add gnutls-FIPS-p192-disabled.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1739534400">- Security fix [bsc#1236974, CVE-2024-12243]
  * gnutls: inefficient DER Decoding in libtasn1 could lead to remote DoS
  * Add gnutls-CVE-2024-12243.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- Fix heap buffer overread when handling the CT SCT extension during X.509
  certificate parsing [bsc#1246233, CVE-2025-32989]
  * Add patch gnutls-CVE-2025-32989.patch
- Fix double-free due to incorrect ownership handling in the export logic of
  SAN entries containing an otherName [bsc#1246232, CVE-2025-32988]
  * Add patch gnutls-CVE-2025-32988.patch
- Fix 1-byte heap buffer overflow when parsing templates with certtool
  [bsc#1246267, CVE-2025-32990]
  * Add patch gnutls-CVE-2025-32990.patch
- Fix NULL pointer dereference when 2nd Client Hello omits PSK
  [bsc#1246299, CVE-2025-6395]
  * Add patch gnutls-CVE-2025-6395.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1763985600">- Security fix bsc#1254132 CVE-2025-9820
  * Fix buffer overflow in gnutls_pkcs11_token_init
  * Added gnutls-CVE-2025-9820.patch</changelog>
</package>
<package pkgid="a84cd40d9224b5d48572c452a6561cfb78dd70ecf48650599c1950f8ccb4c9a4" name="gnutls" arch="src">
  <version epoch="0" ver="3.8.3" rel="150600.4.17.1"/>
  <changelog author="pmonreal@suse.com" date="1692619200">- tests: Fix the SRP test that fails with SIGPIPE signal return due
  to a socket being closed before using it.
  * Add gnutls-srp-test-SIGPIPE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1692705600">- Fix missing GNUTLS_NO_EXTENSIONS compatibility.
  * Upstream: gitlab.com/gnutls/gnutls/commit/abfa8634
  * Add gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to 3.8.2: [bsc#1217277, CVE-2023-5981]
  * libgnutls: Fix timing side-channel inside RSA-PSK key exchange.
    [GNUTLS-SA-2023-10-23, CVSS: medium] [CVE-2023-5981]
  * libgnutls: Add API functions to perform ECDH and DH key agreement
    The functionality has been there for a long time though they were
    not available as part of the public API.  This enables applications
    to implement custom protocols leveraging non-interactive key
    agreement with ECDH and DH.
  * libgnutls: Added support for AES-GCM-SIV ciphers (RFC 8452)
    The new algorithms GNUTLS_CIPHER_AES_128_SIV_GCM and
    GNUTLS_CIPHER_AES_256_SIV_GCM have been added to be used through
    the AEAD interface.  Note that, unlike
    GNUTLS_CIPHER_AES_{128,256}_SIV_GCM, the authentication tag is
    appended to the ciphertext, not prepended.
  * libgnutls: transparent KTLS support is extended to FreeBSD kernel
    The kernel TLS feature can now be enabled on FreeBSD as well as
    Linux when compiled with the --enable-ktls configure option.
  * gnutls-cli: New option --starttls-name
    Depending on deployment, application protocols such as XMPP may
    require a different origin address than the external address to be
    presented prior to STARTTLS negotiation.  The --starttls-name can
    be used to specify specify the addresses separately.
  * API and ABI modifications:
  - gnutls_pubkey_import_dh_raw: New function
  - gnutls_privkey_import_dh_raw: New function
  - gnutls_pubkey_export_dh_raw: New function
  - gnutls_privkey_export_dh_raw: New function
  - gnutls_x509_privkey_import_dh_raw: New function
  - gnutls_privkey_derive_secret: New function
  - GNUTLS_KEYGEN_DH: New enum member of gnutls_keygen_types_t
  - GNUTLS_CIPHER_AES_128_SIV_GCM: Added
  - GNUTLS_CIPHER_AES_256_SIV_GCM: Added
  * Rebase gnutls-FIPS-140-3-references.patch
  * Remove upstream: gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Update to 3.8.3:
  * libgnutls: Fix more timing side-channel inside RSA-PSK key
    exchange. [GNUTLS-SA-2024-01-14, CVSS: medium]
    [bsc#1218865, CVE-2024-0553]
  * libgnutls: Fix assertion failure when verifying a certificate
    chain with a cycle of cross signatures.
    [GNUTLS-SA-2024-01-09, CVSS: medium] [bsc#1218862, CVE-2024-0567]
  * libgnutls: Fix regression in handling Ed25519 keys stored in
    PKCS#11 token certtool was unable to handle Ed25519 keys
    generated on PKCS#11 with pkcs11-tool (OpenSC).
    This is a regression introduced in 3.8.2.
  * Rebase gnutls-FIPS-140-3-references.patch
  * Updated upstream gnutls.keyring</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1720785600">- FIPS: [bsc#1227671, bsc#1226731]
  * Remove not needed DSA in selfchecks in FIPS mode.
  * Add gnutls-FIPS-no_dsa_selftest.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721131200">- FIPS: bsc#1227670
  * Allow RSA signature verification with min of 2048 bit modulus.
  * Add gnutls-FIPS-rsa-min-2048.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721649600">- FIPS: bsc#1227642
  * Mark SHA1 as not allowed for signature verification in both RSA and ECDSA sigVer.
  * Add gnutls-FIPS-no-sha1-verify.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1722945600">- FIPS: bsc#1226733
  * Use full hash+sign operations, not low level primitives in PCT test.
  * Add gnutls-FIPS-full-hash_sign.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1723204800">- FIPS: bsc#1226733
  * Run pairwise consistency test only in FIPS mode
  * Backport upstream commit 5c276953c1536375fba96bc769e1cb5d3123b4a7
  * Add gnutls-pct-in-FIPS-only.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1725451200">- FIPS: bsc#1230166
  * Mark gnutls_hash_fast operations as approved in SLI.
  * Add gnutls-FIPS-gnutls_hash_fast-SLI.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725537600">- FIPS: Allow to perform the integrity check with the hmac provided
  by each library [bsc#1226724]
  * Rebase gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1726488000">- FIPS: Do not allow curve P-192 for signature or keypair verification [bsc#1227669]
  * Add gnutls-FIPS-p192-disabled.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1739534400">- Security fix [bsc#1236974, CVE-2024-12243]
  * gnutls: inefficient DER Decoding in libtasn1 could lead to remote DoS
  * Add gnutls-CVE-2024-12243.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- Fix heap buffer overread when handling the CT SCT extension during X.509
  certificate parsing [bsc#1246233, CVE-2025-32989]
  * Add patch gnutls-CVE-2025-32989.patch
- Fix double-free due to incorrect ownership handling in the export logic of
  SAN entries containing an otherName [bsc#1246232, CVE-2025-32988]
  * Add patch gnutls-CVE-2025-32988.patch
- Fix 1-byte heap buffer overflow when parsing templates with certtool
  [bsc#1246267, CVE-2025-32990]
  * Add patch gnutls-CVE-2025-32990.patch
- Fix NULL pointer dereference when 2nd Client Hello omits PSK
  [bsc#1246299, CVE-2025-6395]
  * Add patch gnutls-CVE-2025-6395.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1763985600">- Security fix bsc#1254132 CVE-2025-9820
  * Fix buffer overflow in gnutls_pkcs11_token_init
  * Added gnutls-CVE-2025-9820.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1770724800">- Security fix:
  * CVE-2025-14831: DoS via excessive resource consumption during
    certificate verification (bsc#1257960)
  * Add gnutls-CVE-2025-14831.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1771934400">- Add the functionality to allow to specify the hash algorithm for
  the PSK. This fixes a bug in the current implementation where the
  binder is always calculated with SHA256.
  * (bsc#1258083, jsc#PED-15752, jsc#PED-15753)
  * lib/psk: Add gnutls_psk_allocate_{client,server}_credentials2
  * tests/psk-file: Add testing for _credentials2 functions
  * lib/psk: add null check for binder algo
  * pre_shared_key: fix memleak when retrying with different binder algo
  * pre_shared_key: add null check on pskcred
  * Add patches:
  - gnutls-PSK-hash.patch
  - gnutls-PSK-hash-tests.patch
  - gnutls-PSK-hash-NULL-check.patch
  - gnutls-PSK-hash-NULL-check-pskcred.patch
  - gnutls-PSK-hash-fix-memleak.patch</changelog>
</package>
<package pkgid="7e5fe44c939b0c8f9a801763848d15dd0d8e851f96563f1ad3c6d47b80a4abf3" name="gnutls" arch="x86_64">
  <version epoch="0" ver="3.8.3" rel="150600.4.17.1"/>
  <changelog author="pmonreal@suse.com" date="1692619200">- tests: Fix the SRP test that fails with SIGPIPE signal return due
  to a socket being closed before using it.
  * Add gnutls-srp-test-SIGPIPE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1692705600">- Fix missing GNUTLS_NO_EXTENSIONS compatibility.
  * Upstream: gitlab.com/gnutls/gnutls/commit/abfa8634
  * Add gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to 3.8.2: [bsc#1217277, CVE-2023-5981]
  * libgnutls: Fix timing side-channel inside RSA-PSK key exchange.
    [GNUTLS-SA-2023-10-23, CVSS: medium] [CVE-2023-5981]
  * libgnutls: Add API functions to perform ECDH and DH key agreement
    The functionality has been there for a long time though they were
    not available as part of the public API.  This enables applications
    to implement custom protocols leveraging non-interactive key
    agreement with ECDH and DH.
  * libgnutls: Added support for AES-GCM-SIV ciphers (RFC 8452)
    The new algorithms GNUTLS_CIPHER_AES_128_SIV_GCM and
    GNUTLS_CIPHER_AES_256_SIV_GCM have been added to be used through
    the AEAD interface.  Note that, unlike
    GNUTLS_CIPHER_AES_{128,256}_SIV_GCM, the authentication tag is
    appended to the ciphertext, not prepended.
  * libgnutls: transparent KTLS support is extended to FreeBSD kernel
    The kernel TLS feature can now be enabled on FreeBSD as well as
    Linux when compiled with the --enable-ktls configure option.
  * gnutls-cli: New option --starttls-name
    Depending on deployment, application protocols such as XMPP may
    require a different origin address than the external address to be
    presented prior to STARTTLS negotiation.  The --starttls-name can
    be used to specify specify the addresses separately.
  * API and ABI modifications:
  - gnutls_pubkey_import_dh_raw: New function
  - gnutls_privkey_import_dh_raw: New function
  - gnutls_pubkey_export_dh_raw: New function
  - gnutls_privkey_export_dh_raw: New function
  - gnutls_x509_privkey_import_dh_raw: New function
  - gnutls_privkey_derive_secret: New function
  - GNUTLS_KEYGEN_DH: New enum member of gnutls_keygen_types_t
  - GNUTLS_CIPHER_AES_128_SIV_GCM: Added
  - GNUTLS_CIPHER_AES_256_SIV_GCM: Added
  * Rebase gnutls-FIPS-140-3-references.patch
  * Remove upstream: gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Update to 3.8.3:
  * libgnutls: Fix more timing side-channel inside RSA-PSK key
    exchange. [GNUTLS-SA-2024-01-14, CVSS: medium]
    [bsc#1218865, CVE-2024-0553]
  * libgnutls: Fix assertion failure when verifying a certificate
    chain with a cycle of cross signatures.
    [GNUTLS-SA-2024-01-09, CVSS: medium] [bsc#1218862, CVE-2024-0567]
  * libgnutls: Fix regression in handling Ed25519 keys stored in
    PKCS#11 token certtool was unable to handle Ed25519 keys
    generated on PKCS#11 with pkcs11-tool (OpenSC).
    This is a regression introduced in 3.8.2.
  * Rebase gnutls-FIPS-140-3-references.patch
  * Updated upstream gnutls.keyring</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1720785600">- FIPS: [bsc#1227671, bsc#1226731]
  * Remove not needed DSA in selfchecks in FIPS mode.
  * Add gnutls-FIPS-no_dsa_selftest.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721131200">- FIPS: bsc#1227670
  * Allow RSA signature verification with min of 2048 bit modulus.
  * Add gnutls-FIPS-rsa-min-2048.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721649600">- FIPS: bsc#1227642
  * Mark SHA1 as not allowed for signature verification in both RSA and ECDSA sigVer.
  * Add gnutls-FIPS-no-sha1-verify.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1722945600">- FIPS: bsc#1226733
  * Use full hash+sign operations, not low level primitives in PCT test.
  * Add gnutls-FIPS-full-hash_sign.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1723204800">- FIPS: bsc#1226733
  * Run pairwise consistency test only in FIPS mode
  * Backport upstream commit 5c276953c1536375fba96bc769e1cb5d3123b4a7
  * Add gnutls-pct-in-FIPS-only.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1725451200">- FIPS: bsc#1230166
  * Mark gnutls_hash_fast operations as approved in SLI.
  * Add gnutls-FIPS-gnutls_hash_fast-SLI.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725537600">- FIPS: Allow to perform the integrity check with the hmac provided
  by each library [bsc#1226724]
  * Rebase gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1726488000">- FIPS: Do not allow curve P-192 for signature or keypair verification [bsc#1227669]
  * Add gnutls-FIPS-p192-disabled.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1739534400">- Security fix [bsc#1236974, CVE-2024-12243]
  * gnutls: inefficient DER Decoding in libtasn1 could lead to remote DoS
  * Add gnutls-CVE-2024-12243.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- Fix heap buffer overread when handling the CT SCT extension during X.509
  certificate parsing [bsc#1246233, CVE-2025-32989]
  * Add patch gnutls-CVE-2025-32989.patch
- Fix double-free due to incorrect ownership handling in the export logic of
  SAN entries containing an otherName [bsc#1246232, CVE-2025-32988]
  * Add patch gnutls-CVE-2025-32988.patch
- Fix 1-byte heap buffer overflow when parsing templates with certtool
  [bsc#1246267, CVE-2025-32990]
  * Add patch gnutls-CVE-2025-32990.patch
- Fix NULL pointer dereference when 2nd Client Hello omits PSK
  [bsc#1246299, CVE-2025-6395]
  * Add patch gnutls-CVE-2025-6395.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1763985600">- Security fix bsc#1254132 CVE-2025-9820
  * Fix buffer overflow in gnutls_pkcs11_token_init
  * Added gnutls-CVE-2025-9820.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1770724800">- Security fix:
  * CVE-2025-14831: DoS via excessive resource consumption during
    certificate verification (bsc#1257960)
  * Add gnutls-CVE-2025-14831.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1771934400">- Add the functionality to allow to specify the hash algorithm for
  the PSK. This fixes a bug in the current implementation where the
  binder is always calculated with SHA256.
  * (bsc#1258083, jsc#PED-15752, jsc#PED-15753)
  * lib/psk: Add gnutls_psk_allocate_{client,server}_credentials2
  * tests/psk-file: Add testing for _credentials2 functions
  * lib/psk: add null check for binder algo
  * pre_shared_key: fix memleak when retrying with different binder algo
  * pre_shared_key: add null check on pskcred
  * Add patches:
  - gnutls-PSK-hash.patch
  - gnutls-PSK-hash-tests.patch
  - gnutls-PSK-hash-NULL-check.patch
  - gnutls-PSK-hash-NULL-check-pskcred.patch
  - gnutls-PSK-hash-fix-memleak.patch</changelog>
</package>
<package pkgid="430ec2c166ba37571d9b58fdeaf7375d859491eee1cba222e8c2bb32f7afa7ea" name="gnutls" arch="src">
  <version epoch="0" ver="3.8.3" rel="150600.4.20.1"/>
  <changelog author="pmonreal@suse.com" date="1692705600">- Fix missing GNUTLS_NO_EXTENSIONS compatibility.
  * Upstream: gitlab.com/gnutls/gnutls/commit/abfa8634
  * Add gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to 3.8.2: [bsc#1217277, CVE-2023-5981]
  * libgnutls: Fix timing side-channel inside RSA-PSK key exchange.
    [GNUTLS-SA-2023-10-23, CVSS: medium] [CVE-2023-5981]
  * libgnutls: Add API functions to perform ECDH and DH key agreement
    The functionality has been there for a long time though they were
    not available as part of the public API.  This enables applications
    to implement custom protocols leveraging non-interactive key
    agreement with ECDH and DH.
  * libgnutls: Added support for AES-GCM-SIV ciphers (RFC 8452)
    The new algorithms GNUTLS_CIPHER_AES_128_SIV_GCM and
    GNUTLS_CIPHER_AES_256_SIV_GCM have been added to be used through
    the AEAD interface.  Note that, unlike
    GNUTLS_CIPHER_AES_{128,256}_SIV_GCM, the authentication tag is
    appended to the ciphertext, not prepended.
  * libgnutls: transparent KTLS support is extended to FreeBSD kernel
    The kernel TLS feature can now be enabled on FreeBSD as well as
    Linux when compiled with the --enable-ktls configure option.
  * gnutls-cli: New option --starttls-name
    Depending on deployment, application protocols such as XMPP may
    require a different origin address than the external address to be
    presented prior to STARTTLS negotiation.  The --starttls-name can
    be used to specify specify the addresses separately.
  * API and ABI modifications:
  - gnutls_pubkey_import_dh_raw: New function
  - gnutls_privkey_import_dh_raw: New function
  - gnutls_pubkey_export_dh_raw: New function
  - gnutls_privkey_export_dh_raw: New function
  - gnutls_x509_privkey_import_dh_raw: New function
  - gnutls_privkey_derive_secret: New function
  - GNUTLS_KEYGEN_DH: New enum member of gnutls_keygen_types_t
  - GNUTLS_CIPHER_AES_128_SIV_GCM: Added
  - GNUTLS_CIPHER_AES_256_SIV_GCM: Added
  * Rebase gnutls-FIPS-140-3-references.patch
  * Remove upstream: gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Update to 3.8.3:
  * libgnutls: Fix more timing side-channel inside RSA-PSK key
    exchange. [GNUTLS-SA-2024-01-14, CVSS: medium]
    [bsc#1218865, CVE-2024-0553]
  * libgnutls: Fix assertion failure when verifying a certificate
    chain with a cycle of cross signatures.
    [GNUTLS-SA-2024-01-09, CVSS: medium] [bsc#1218862, CVE-2024-0567]
  * libgnutls: Fix regression in handling Ed25519 keys stored in
    PKCS#11 token certtool was unable to handle Ed25519 keys
    generated on PKCS#11 with pkcs11-tool (OpenSC).
    This is a regression introduced in 3.8.2.
  * Rebase gnutls-FIPS-140-3-references.patch
  * Updated upstream gnutls.keyring</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1720785600">- FIPS: [bsc#1227671, bsc#1226731]
  * Remove not needed DSA in selfchecks in FIPS mode.
  * Add gnutls-FIPS-no_dsa_selftest.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721131200">- FIPS: bsc#1227670
  * Allow RSA signature verification with min of 2048 bit modulus.
  * Add gnutls-FIPS-rsa-min-2048.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721649600">- FIPS: bsc#1227642
  * Mark SHA1 as not allowed for signature verification in both RSA and ECDSA sigVer.
  * Add gnutls-FIPS-no-sha1-verify.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1722945600">- FIPS: bsc#1226733
  * Use full hash+sign operations, not low level primitives in PCT test.
  * Add gnutls-FIPS-full-hash_sign.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1723204800">- FIPS: bsc#1226733
  * Run pairwise consistency test only in FIPS mode
  * Backport upstream commit 5c276953c1536375fba96bc769e1cb5d3123b4a7
  * Add gnutls-pct-in-FIPS-only.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1725451200">- FIPS: bsc#1230166
  * Mark gnutls_hash_fast operations as approved in SLI.
  * Add gnutls-FIPS-gnutls_hash_fast-SLI.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725537600">- FIPS: Allow to perform the integrity check with the hmac provided
  by each library [bsc#1226724]
  * Rebase gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1726488000">- FIPS: Do not allow curve P-192 for signature or keypair verification [bsc#1227669]
  * Add gnutls-FIPS-p192-disabled.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1739534400">- Security fix [bsc#1236974, CVE-2024-12243]
  * gnutls: inefficient DER Decoding in libtasn1 could lead to remote DoS
  * Add gnutls-CVE-2024-12243.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- Fix heap buffer overread when handling the CT SCT extension during X.509
  certificate parsing [bsc#1246233, CVE-2025-32989]
  * Add patch gnutls-CVE-2025-32989.patch
- Fix double-free due to incorrect ownership handling in the export logic of
  SAN entries containing an otherName [bsc#1246232, CVE-2025-32988]
  * Add patch gnutls-CVE-2025-32988.patch
- Fix 1-byte heap buffer overflow when parsing templates with certtool
  [bsc#1246267, CVE-2025-32990]
  * Add patch gnutls-CVE-2025-32990.patch
- Fix NULL pointer dereference when 2nd Client Hello omits PSK
  [bsc#1246299, CVE-2025-6395]
  * Add patch gnutls-CVE-2025-6395.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1763985600">- Security fix bsc#1254132 CVE-2025-9820
  * Fix buffer overflow in gnutls_pkcs11_token_init
  * Added gnutls-CVE-2025-9820.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1770724800">- Security fix:
  * CVE-2025-14831: DoS via excessive resource consumption during
    certificate verification (bsc#1257960)
  * Add gnutls-CVE-2025-14831.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1771934400">- Add the functionality to allow to specify the hash algorithm for
  the PSK. This fixes a bug in the current implementation where the
  binder is always calculated with SHA256.
  * (bsc#1258083, jsc#PED-15752, jsc#PED-15753)
  * lib/psk: Add gnutls_psk_allocate_{client,server}_credentials2
  * tests/psk-file: Add testing for _credentials2 functions
  * lib/psk: add null check for binder algo
  * pre_shared_key: fix memleak when retrying with different binder algo
  * pre_shared_key: add null check on pskcred
  * Add patches:
  - gnutls-PSK-hash.patch
  - gnutls-PSK-hash-tests.patch
  - gnutls-PSK-hash-NULL-check.patch
  - gnutls-PSK-hash-NULL-check-pskcred.patch
  - gnutls-PSK-hash-fix-memleak.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1778068800">- Security fixes:
  * CVE-2026-33846: buffers: add more checks to DTLS reassembly (bsc#1263705)
  * CVE-2026-42009: lib/buffers: ensure packets have differing sequence numbers (bsc#1263708)
  * CVE-2026-33845: buffers: switch from end_offset over to frag_length (bsc#1263704)
  * CVE-2026-42010: lib/auth/rsa_psk: fix binary PSK identity lookup (bsc#1263709)
  * CVE-2026-3833: x509/name-constraints: compare domain names case-insensitive (bsc#1263707)
  * CVE-2026-42011: x509/name_constraints: fix intersecting empty constraints (bsc#1263710)
  * CVE-2026-42012: x509/hostname-verify: make URI/SRV SAN preclude CN fallback (bsc#1263711)
  * CVE-2026-42013: x509: prevent fallback on oversized SAN (bsc#1263712)
  * CVE-2026-42014: pkcs11_write: fix UAF and leak in gnutls_pkcs11_token_set_pin (bsc#1263713)
  * CVE-2026-42015: x509/pkcs12_bag: fix off-by-one in bag element bounds check (bsc#1263714)
  * CVE-2026-5260: lib/pkcs11_privkey: guard against overreading on short ciphertexts (bsc#1263715)
  * CVE-2026-5419: gnutls_cipher_decrypt3: make PKCS#7 unpadding branch free (bsc#1263716)
  * Add patches:
    gnutls-CVE-2026-33846.patch gnutls-CVE-2026-42009.patch
    gnutls-CVE-2026-33845.patch gnutls-CVE-2026-42010.patch
    gnutls-CVE-2026-3833.patch  gnutls-CVE-2026-42011.patch
    gnutls-CVE-2026-42012.patch gnutls-CVE-2026-42013.patch
    gnutls-CVE-2026-42014.patch gnutls-CVE-2026-5260.patch
    gnutls-CVE-2026-42015.patch gnutls-CVE-2026-5419.patch</changelog>
</package>
<package pkgid="01bd0010b960e91330cc6c375eaa1b9e3167f408bb31843747bfcabccc687e00" name="gnutls" arch="x86_64">
  <version epoch="0" ver="3.8.3" rel="150600.4.20.1"/>
  <changelog author="pmonreal@suse.com" date="1692705600">- Fix missing GNUTLS_NO_EXTENSIONS compatibility.
  * Upstream: gitlab.com/gnutls/gnutls/commit/abfa8634
  * Add gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to 3.8.2: [bsc#1217277, CVE-2023-5981]
  * libgnutls: Fix timing side-channel inside RSA-PSK key exchange.
    [GNUTLS-SA-2023-10-23, CVSS: medium] [CVE-2023-5981]
  * libgnutls: Add API functions to perform ECDH and DH key agreement
    The functionality has been there for a long time though they were
    not available as part of the public API.  This enables applications
    to implement custom protocols leveraging non-interactive key
    agreement with ECDH and DH.
  * libgnutls: Added support for AES-GCM-SIV ciphers (RFC 8452)
    The new algorithms GNUTLS_CIPHER_AES_128_SIV_GCM and
    GNUTLS_CIPHER_AES_256_SIV_GCM have been added to be used through
    the AEAD interface.  Note that, unlike
    GNUTLS_CIPHER_AES_{128,256}_SIV_GCM, the authentication tag is
    appended to the ciphertext, not prepended.
  * libgnutls: transparent KTLS support is extended to FreeBSD kernel
    The kernel TLS feature can now be enabled on FreeBSD as well as
    Linux when compiled with the --enable-ktls configure option.
  * gnutls-cli: New option --starttls-name
    Depending on deployment, application protocols such as XMPP may
    require a different origin address than the external address to be
    presented prior to STARTTLS negotiation.  The --starttls-name can
    be used to specify specify the addresses separately.
  * API and ABI modifications:
  - gnutls_pubkey_import_dh_raw: New function
  - gnutls_privkey_import_dh_raw: New function
  - gnutls_pubkey_export_dh_raw: New function
  - gnutls_privkey_export_dh_raw: New function
  - gnutls_x509_privkey_import_dh_raw: New function
  - gnutls_privkey_derive_secret: New function
  - GNUTLS_KEYGEN_DH: New enum member of gnutls_keygen_types_t
  - GNUTLS_CIPHER_AES_128_SIV_GCM: Added
  - GNUTLS_CIPHER_AES_256_SIV_GCM: Added
  * Rebase gnutls-FIPS-140-3-references.patch
  * Remove upstream: gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Update to 3.8.3:
  * libgnutls: Fix more timing side-channel inside RSA-PSK key
    exchange. [GNUTLS-SA-2024-01-14, CVSS: medium]
    [bsc#1218865, CVE-2024-0553]
  * libgnutls: Fix assertion failure when verifying a certificate
    chain with a cycle of cross signatures.
    [GNUTLS-SA-2024-01-09, CVSS: medium] [bsc#1218862, CVE-2024-0567]
  * libgnutls: Fix regression in handling Ed25519 keys stored in
    PKCS#11 token certtool was unable to handle Ed25519 keys
    generated on PKCS#11 with pkcs11-tool (OpenSC).
    This is a regression introduced in 3.8.2.
  * Rebase gnutls-FIPS-140-3-references.patch
  * Updated upstream gnutls.keyring</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1720785600">- FIPS: [bsc#1227671, bsc#1226731]
  * Remove not needed DSA in selfchecks in FIPS mode.
  * Add gnutls-FIPS-no_dsa_selftest.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721131200">- FIPS: bsc#1227670
  * Allow RSA signature verification with min of 2048 bit modulus.
  * Add gnutls-FIPS-rsa-min-2048.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721649600">- FIPS: bsc#1227642
  * Mark SHA1 as not allowed for signature verification in both RSA and ECDSA sigVer.
  * Add gnutls-FIPS-no-sha1-verify.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1722945600">- FIPS: bsc#1226733
  * Use full hash+sign operations, not low level primitives in PCT test.
  * Add gnutls-FIPS-full-hash_sign.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1723204800">- FIPS: bsc#1226733
  * Run pairwise consistency test only in FIPS mode
  * Backport upstream commit 5c276953c1536375fba96bc769e1cb5d3123b4a7
  * Add gnutls-pct-in-FIPS-only.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1725451200">- FIPS: bsc#1230166
  * Mark gnutls_hash_fast operations as approved in SLI.
  * Add gnutls-FIPS-gnutls_hash_fast-SLI.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725537600">- FIPS: Allow to perform the integrity check with the hmac provided
  by each library [bsc#1226724]
  * Rebase gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1726488000">- FIPS: Do not allow curve P-192 for signature or keypair verification [bsc#1227669]
  * Add gnutls-FIPS-p192-disabled.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1739534400">- Security fix [bsc#1236974, CVE-2024-12243]
  * gnutls: inefficient DER Decoding in libtasn1 could lead to remote DoS
  * Add gnutls-CVE-2024-12243.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- Fix heap buffer overread when handling the CT SCT extension during X.509
  certificate parsing [bsc#1246233, CVE-2025-32989]
  * Add patch gnutls-CVE-2025-32989.patch
- Fix double-free due to incorrect ownership handling in the export logic of
  SAN entries containing an otherName [bsc#1246232, CVE-2025-32988]
  * Add patch gnutls-CVE-2025-32988.patch
- Fix 1-byte heap buffer overflow when parsing templates with certtool
  [bsc#1246267, CVE-2025-32990]
  * Add patch gnutls-CVE-2025-32990.patch
- Fix NULL pointer dereference when 2nd Client Hello omits PSK
  [bsc#1246299, CVE-2025-6395]
  * Add patch gnutls-CVE-2025-6395.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1763985600">- Security fix bsc#1254132 CVE-2025-9820
  * Fix buffer overflow in gnutls_pkcs11_token_init
  * Added gnutls-CVE-2025-9820.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1770724800">- Security fix:
  * CVE-2025-14831: DoS via excessive resource consumption during
    certificate verification (bsc#1257960)
  * Add gnutls-CVE-2025-14831.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1771934400">- Add the functionality to allow to specify the hash algorithm for
  the PSK. This fixes a bug in the current implementation where the
  binder is always calculated with SHA256.
  * (bsc#1258083, jsc#PED-15752, jsc#PED-15753)
  * lib/psk: Add gnutls_psk_allocate_{client,server}_credentials2
  * tests/psk-file: Add testing for _credentials2 functions
  * lib/psk: add null check for binder algo
  * pre_shared_key: fix memleak when retrying with different binder algo
  * pre_shared_key: add null check on pskcred
  * Add patches:
  - gnutls-PSK-hash.patch
  - gnutls-PSK-hash-tests.patch
  - gnutls-PSK-hash-NULL-check.patch
  - gnutls-PSK-hash-NULL-check-pskcred.patch
  - gnutls-PSK-hash-fix-memleak.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1778068800">- Security fixes:
  * CVE-2026-33846: buffers: add more checks to DTLS reassembly (bsc#1263705)
  * CVE-2026-42009: lib/buffers: ensure packets have differing sequence numbers (bsc#1263708)
  * CVE-2026-33845: buffers: switch from end_offset over to frag_length (bsc#1263704)
  * CVE-2026-42010: lib/auth/rsa_psk: fix binary PSK identity lookup (bsc#1263709)
  * CVE-2026-3833: x509/name-constraints: compare domain names case-insensitive (bsc#1263707)
  * CVE-2026-42011: x509/name_constraints: fix intersecting empty constraints (bsc#1263710)
  * CVE-2026-42012: x509/hostname-verify: make URI/SRV SAN preclude CN fallback (bsc#1263711)
  * CVE-2026-42013: x509: prevent fallback on oversized SAN (bsc#1263712)
  * CVE-2026-42014: pkcs11_write: fix UAF and leak in gnutls_pkcs11_token_set_pin (bsc#1263713)
  * CVE-2026-42015: x509/pkcs12_bag: fix off-by-one in bag element bounds check (bsc#1263714)
  * CVE-2026-5260: lib/pkcs11_privkey: guard against overreading on short ciphertexts (bsc#1263715)
  * CVE-2026-5419: gnutls_cipher_decrypt3: make PKCS#7 unpadding branch free (bsc#1263716)
  * Add patches:
    gnutls-CVE-2026-33846.patch gnutls-CVE-2026-42009.patch
    gnutls-CVE-2026-33845.patch gnutls-CVE-2026-42010.patch
    gnutls-CVE-2026-3833.patch  gnutls-CVE-2026-42011.patch
    gnutls-CVE-2026-42012.patch gnutls-CVE-2026-42013.patch
    gnutls-CVE-2026-42014.patch gnutls-CVE-2026-5260.patch
    gnutls-CVE-2026-42015.patch gnutls-CVE-2026-5419.patch</changelog>
</package>
<package pkgid="271955e7e3d4510db2ba6410a3a0a59d371db7eedd6e833592bd75a845b0aa9e" name="gnutls" arch="src">
  <version epoch="0" ver="3.8.3" rel="150600.4.9.1"/>
  <changelog author="pmonreal@suse.com" date="1684929600">- FIPS: Skip the fixed HMAC verification for nettle, hogweed and
  gmp libraries. These calculated HMACs change for every build of
  each of these packages, we only have to verify that for gnutls.
  * Add gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch [bsc#1211476]</changelog>
  <changelog author="pmonreal@suse.com" date="1685361600">- FIPS: Fix baselibs.conf to mention libgnutls30-hmac [bsc#1211476]
  Extend also the checks in gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1691409600">- Update to version 3.8.1:
  * libgnutls: ClientHello extensions are randomized by default
    To make fingerprinting harder, TLS extensions in ClientHello
    messages are shuffled. As this behavior may cause compatibility
    issue with legacy applications that do not accept the last
    extension without payload, the behavior can be reverted with the
    %NO_SHUFFLE_EXTENSIONS priority keyword.
  * libgnutls: Add support for RFC 9258 external PSK importer.
    This enables to deploy the same PSK across multiple TLS versions
    (TLS 1.2 and TLS 1.3) in a secure manner. To use, the application
    needs to set up a callback that formats the PSK identity using
    gnutls_psk_format_imported_identity().
  * libgnutls: %GNUTLS_NO_EXTENSIONS has been renamed to
    %GNUTLS_NO_DEFAULT_EXTENSIONS.
  * libgnutls: Add additional PBKDF limit checks in FIPS mode as
    defined in SP 800-132. Minimum salt length is 128 bits and
    minimum iterations bound is 1000 for PBKDF in FIPS mode.
  * libgnutls: Add a mechanism to control whether to enforce extended
    master secret (RFC 7627). FIPS 140-3 mandates the use of TLS
    session hash (extended master secret, EMS) in TLS 1.2. To enforce
    this, a new priority keyword %FORCE_SESSION_HASH is added and if
    it is set and EMS is not set, the peer aborts the connection. This
    behavior is the default in FIPS mode, though it can be overridden
    through the configuration file with the "tls-session-hash" option.
    In either case non-EMS PRF is reported as a non-approved operation
    through the FIPS service indicator.
  * New option --attime to specify current time.
    To make testing with different timestamp to the system easier, the
    tools doing certificate verification now provide a new option
  - -attime, which takes an arbitrary time.
  * API and ABI modifications:
    gnutls_psk_client_credentials_function3: New typedef
    gnutls_psk_server_credentials_function3: New typedef
    gnutls_psk_set_server_credentials_function3: New function
    gnutls_psk_set_client_credentials_function3: New function
    gnutls_psk_format_imported_identity: New function
    GNUTLS_PSK_KEY_EXT: New enum member of gnutls_psk_key_flags
  * Rebase patches:
  - gnutls-FIPS-140-3-references.patch
  - gnutls-FIPS-jitterentropy.patch
  * Remove patches merged/fixed upstream:
  - gnutls-FIPS-PCT-DH.patch
  - gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1692619200">- tests: Fix the SRP test that fails with SIGPIPE signal return due
  to a socket being closed before using it.
  * Add gnutls-srp-test-SIGPIPE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1692705600">- Fix missing GNUTLS_NO_EXTENSIONS compatibility.
  * Upstream: gitlab.com/gnutls/gnutls/commit/abfa8634
  * Add gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to 3.8.2: [bsc#1217277, CVE-2023-5981]
  * libgnutls: Fix timing side-channel inside RSA-PSK key exchange.
    [GNUTLS-SA-2023-10-23, CVSS: medium] [CVE-2023-5981]
  * libgnutls: Add API functions to perform ECDH and DH key agreement
    The functionality has been there for a long time though they were
    not available as part of the public API.  This enables applications
    to implement custom protocols leveraging non-interactive key
    agreement with ECDH and DH.
  * libgnutls: Added support for AES-GCM-SIV ciphers (RFC 8452)
    The new algorithms GNUTLS_CIPHER_AES_128_SIV_GCM and
    GNUTLS_CIPHER_AES_256_SIV_GCM have been added to be used through
    the AEAD interface.  Note that, unlike
    GNUTLS_CIPHER_AES_{128,256}_SIV_GCM, the authentication tag is
    appended to the ciphertext, not prepended.
  * libgnutls: transparent KTLS support is extended to FreeBSD kernel
    The kernel TLS feature can now be enabled on FreeBSD as well as
    Linux when compiled with the --enable-ktls configure option.
  * gnutls-cli: New option --starttls-name
    Depending on deployment, application protocols such as XMPP may
    require a different origin address than the external address to be
    presented prior to STARTTLS negotiation.  The --starttls-name can
    be used to specify specify the addresses separately.
  * API and ABI modifications:
  - gnutls_pubkey_import_dh_raw: New function
  - gnutls_privkey_import_dh_raw: New function
  - gnutls_pubkey_export_dh_raw: New function
  - gnutls_privkey_export_dh_raw: New function
  - gnutls_x509_privkey_import_dh_raw: New function
  - gnutls_privkey_derive_secret: New function
  - GNUTLS_KEYGEN_DH: New enum member of gnutls_keygen_types_t
  - GNUTLS_CIPHER_AES_128_SIV_GCM: Added
  - GNUTLS_CIPHER_AES_256_SIV_GCM: Added
  * Rebase gnutls-FIPS-140-3-references.patch
  * Remove upstream: gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Update to 3.8.3:
  * libgnutls: Fix more timing side-channel inside RSA-PSK key
    exchange. [GNUTLS-SA-2024-01-14, CVSS: medium]
    [bsc#1218865, CVE-2024-0553]
  * libgnutls: Fix assertion failure when verifying a certificate
    chain with a cycle of cross signatures.
    [GNUTLS-SA-2024-01-09, CVSS: medium] [bsc#1218862, CVE-2024-0567]
  * libgnutls: Fix regression in handling Ed25519 keys stored in
    PKCS#11 token certtool was unable to handle Ed25519 keys
    generated on PKCS#11 with pkcs11-tool (OpenSC).
    This is a regression introduced in 3.8.2.
  * Rebase gnutls-FIPS-140-3-references.patch
  * Updated upstream gnutls.keyring</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1720785600">- FIPS: [bsc#1227671, bsc#1226731]
  * Remove not needed DSA in selfchecks in FIPS mode.
  * Add gnutls-FIPS-no_dsa_selftest.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721131200">- FIPS: bsc#1227670
  * Allow RSA signature verification with min of 2048 bit modulus.
  * Add gnutls-FIPS-rsa-min-2048.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721649600">- FIPS: bsc#1227642
  * Mark SHA1 as not allowed for signature verification in both RSA and ECDSA sigVer.
  * Add gnutls-FIPS-no-sha1-verify.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1722945600">- FIPS: bsc#1226733
  * Use full hash+sign operations, not low level primitives in PCT test.
  * Add gnutls-FIPS-full-hash_sign.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1723204800">- FIPS: bsc#1226733
  * Run pairwise consistency test only in FIPS mode
  * Backport upstream commit 5c276953c1536375fba96bc769e1cb5d3123b4a7
  * Add gnutls-pct-in-FIPS-only.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1725451200">- FIPS: bsc#1230166
  * Mark gnutls_hash_fast operations as approved in SLI.
  * Add gnutls-FIPS-gnutls_hash_fast-SLI.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725537600">- FIPS: Allow to perform the integrity check with the hmac provided
  by each library [bsc#1226724]
  * Rebase gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1726488000">- FIPS: Do not allow curve P-192 for signature or keypair verification [bsc#1227669]
  * Add gnutls-FIPS-p192-disabled.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1739534400">- Security fix [bsc#1236974, CVE-2024-12243]
  * gnutls: inefficient DER Decoding in libtasn1 could lead to remote DoS
  * Add gnutls-CVE-2024-12243.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- Fix heap buffer overread when handling the CT SCT extension during X.509
  certificate parsing [bsc#1246233, CVE-2025-32989]
  * Add patch gnutls-CVE-2025-32989.patch
- Fix double-free due to incorrect ownership handling in the export logic of
  SAN entries containing an otherName [bsc#1246232, CVE-2025-32988]
  * Add patch gnutls-CVE-2025-32988.patch
- Fix 1-byte heap buffer overflow when parsing templates with certtool
  [bsc#1246267, CVE-2025-32990]
  * Add patch gnutls-CVE-2025-32990.patch
- Fix NULL pointer dereference when 2nd Client Hello omits PSK
  [bsc#1246299, CVE-2025-6395]
  * Add patch gnutls-CVE-2025-6395.patch</changelog>
</package>
<package pkgid="ac9a48dfcdc6803138b359363b5cc87e51dae9a77a514a212bb228df77c7f2a2" name="gnutls" arch="x86_64">
  <version epoch="0" ver="3.8.3" rel="150600.4.9.1"/>
  <changelog author="pmonreal@suse.com" date="1684929600">- FIPS: Skip the fixed HMAC verification for nettle, hogweed and
  gmp libraries. These calculated HMACs change for every build of
  each of these packages, we only have to verify that for gnutls.
  * Add gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch [bsc#1211476]</changelog>
  <changelog author="pmonreal@suse.com" date="1685361600">- FIPS: Fix baselibs.conf to mention libgnutls30-hmac [bsc#1211476]
  Extend also the checks in gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1691409600">- Update to version 3.8.1:
  * libgnutls: ClientHello extensions are randomized by default
    To make fingerprinting harder, TLS extensions in ClientHello
    messages are shuffled. As this behavior may cause compatibility
    issue with legacy applications that do not accept the last
    extension without payload, the behavior can be reverted with the
    %NO_SHUFFLE_EXTENSIONS priority keyword.
  * libgnutls: Add support for RFC 9258 external PSK importer.
    This enables to deploy the same PSK across multiple TLS versions
    (TLS 1.2 and TLS 1.3) in a secure manner. To use, the application
    needs to set up a callback that formats the PSK identity using
    gnutls_psk_format_imported_identity().
  * libgnutls: %GNUTLS_NO_EXTENSIONS has been renamed to
    %GNUTLS_NO_DEFAULT_EXTENSIONS.
  * libgnutls: Add additional PBKDF limit checks in FIPS mode as
    defined in SP 800-132. Minimum salt length is 128 bits and
    minimum iterations bound is 1000 for PBKDF in FIPS mode.
  * libgnutls: Add a mechanism to control whether to enforce extended
    master secret (RFC 7627). FIPS 140-3 mandates the use of TLS
    session hash (extended master secret, EMS) in TLS 1.2. To enforce
    this, a new priority keyword %FORCE_SESSION_HASH is added and if
    it is set and EMS is not set, the peer aborts the connection. This
    behavior is the default in FIPS mode, though it can be overridden
    through the configuration file with the "tls-session-hash" option.
    In either case non-EMS PRF is reported as a non-approved operation
    through the FIPS service indicator.
  * New option --attime to specify current time.
    To make testing with different timestamp to the system easier, the
    tools doing certificate verification now provide a new option
  - -attime, which takes an arbitrary time.
  * API and ABI modifications:
    gnutls_psk_client_credentials_function3: New typedef
    gnutls_psk_server_credentials_function3: New typedef
    gnutls_psk_set_server_credentials_function3: New function
    gnutls_psk_set_client_credentials_function3: New function
    gnutls_psk_format_imported_identity: New function
    GNUTLS_PSK_KEY_EXT: New enum member of gnutls_psk_key_flags
  * Rebase patches:
  - gnutls-FIPS-140-3-references.patch
  - gnutls-FIPS-jitterentropy.patch
  * Remove patches merged/fixed upstream:
  - gnutls-FIPS-PCT-DH.patch
  - gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1692619200">- tests: Fix the SRP test that fails with SIGPIPE signal return due
  to a socket being closed before using it.
  * Add gnutls-srp-test-SIGPIPE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1692705600">- Fix missing GNUTLS_NO_EXTENSIONS compatibility.
  * Upstream: gitlab.com/gnutls/gnutls/commit/abfa8634
  * Add gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to 3.8.2: [bsc#1217277, CVE-2023-5981]
  * libgnutls: Fix timing side-channel inside RSA-PSK key exchange.
    [GNUTLS-SA-2023-10-23, CVSS: medium] [CVE-2023-5981]
  * libgnutls: Add API functions to perform ECDH and DH key agreement
    The functionality has been there for a long time though they were
    not available as part of the public API.  This enables applications
    to implement custom protocols leveraging non-interactive key
    agreement with ECDH and DH.
  * libgnutls: Added support for AES-GCM-SIV ciphers (RFC 8452)
    The new algorithms GNUTLS_CIPHER_AES_128_SIV_GCM and
    GNUTLS_CIPHER_AES_256_SIV_GCM have been added to be used through
    the AEAD interface.  Note that, unlike
    GNUTLS_CIPHER_AES_{128,256}_SIV_GCM, the authentication tag is
    appended to the ciphertext, not prepended.
  * libgnutls: transparent KTLS support is extended to FreeBSD kernel
    The kernel TLS feature can now be enabled on FreeBSD as well as
    Linux when compiled with the --enable-ktls configure option.
  * gnutls-cli: New option --starttls-name
    Depending on deployment, application protocols such as XMPP may
    require a different origin address than the external address to be
    presented prior to STARTTLS negotiation.  The --starttls-name can
    be used to specify specify the addresses separately.
  * API and ABI modifications:
  - gnutls_pubkey_import_dh_raw: New function
  - gnutls_privkey_import_dh_raw: New function
  - gnutls_pubkey_export_dh_raw: New function
  - gnutls_privkey_export_dh_raw: New function
  - gnutls_x509_privkey_import_dh_raw: New function
  - gnutls_privkey_derive_secret: New function
  - GNUTLS_KEYGEN_DH: New enum member of gnutls_keygen_types_t
  - GNUTLS_CIPHER_AES_128_SIV_GCM: Added
  - GNUTLS_CIPHER_AES_256_SIV_GCM: Added
  * Rebase gnutls-FIPS-140-3-references.patch
  * Remove upstream: gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Update to 3.8.3:
  * libgnutls: Fix more timing side-channel inside RSA-PSK key
    exchange. [GNUTLS-SA-2024-01-14, CVSS: medium]
    [bsc#1218865, CVE-2024-0553]
  * libgnutls: Fix assertion failure when verifying a certificate
    chain with a cycle of cross signatures.
    [GNUTLS-SA-2024-01-09, CVSS: medium] [bsc#1218862, CVE-2024-0567]
  * libgnutls: Fix regression in handling Ed25519 keys stored in
    PKCS#11 token certtool was unable to handle Ed25519 keys
    generated on PKCS#11 with pkcs11-tool (OpenSC).
    This is a regression introduced in 3.8.2.
  * Rebase gnutls-FIPS-140-3-references.patch
  * Updated upstream gnutls.keyring</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1720785600">- FIPS: [bsc#1227671, bsc#1226731]
  * Remove not needed DSA in selfchecks in FIPS mode.
  * Add gnutls-FIPS-no_dsa_selftest.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721131200">- FIPS: bsc#1227670
  * Allow RSA signature verification with min of 2048 bit modulus.
  * Add gnutls-FIPS-rsa-min-2048.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721649600">- FIPS: bsc#1227642
  * Mark SHA1 as not allowed for signature verification in both RSA and ECDSA sigVer.
  * Add gnutls-FIPS-no-sha1-verify.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1722945600">- FIPS: bsc#1226733
  * Use full hash+sign operations, not low level primitives in PCT test.
  * Add gnutls-FIPS-full-hash_sign.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1723204800">- FIPS: bsc#1226733
  * Run pairwise consistency test only in FIPS mode
  * Backport upstream commit 5c276953c1536375fba96bc769e1cb5d3123b4a7
  * Add gnutls-pct-in-FIPS-only.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1725451200">- FIPS: bsc#1230166
  * Mark gnutls_hash_fast operations as approved in SLI.
  * Add gnutls-FIPS-gnutls_hash_fast-SLI.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725537600">- FIPS: Allow to perform the integrity check with the hmac provided
  by each library [bsc#1226724]
  * Rebase gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1726488000">- FIPS: Do not allow curve P-192 for signature or keypair verification [bsc#1227669]
  * Add gnutls-FIPS-p192-disabled.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1739534400">- Security fix [bsc#1236974, CVE-2024-12243]
  * gnutls: inefficient DER Decoding in libtasn1 could lead to remote DoS
  * Add gnutls-CVE-2024-12243.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- Fix heap buffer overread when handling the CT SCT extension during X.509
  certificate parsing [bsc#1246233, CVE-2025-32989]
  * Add patch gnutls-CVE-2025-32989.patch
- Fix double-free due to incorrect ownership handling in the export logic of
  SAN entries containing an otherName [bsc#1246232, CVE-2025-32988]
  * Add patch gnutls-CVE-2025-32988.patch
- Fix 1-byte heap buffer overflow when parsing templates with certtool
  [bsc#1246267, CVE-2025-32990]
  * Add patch gnutls-CVE-2025-32990.patch
- Fix NULL pointer dereference when 2nd Client Hello omits PSK
  [bsc#1246299, CVE-2025-6395]
  * Add patch gnutls-CVE-2025-6395.patch</changelog>
</package>
<package pkgid="9a6a3dc1b0c33875f8376021a8a78a8f962bcc53184fa0466c86407158b4e322" name="golang-github-prometheus-node_exporter" arch="src">
  <version epoch="0" ver="1.9.1" rel="150100.3.35.2"/>
  <changelog author="witold.bedyk@suse.com" date="1646827200">- Update vendor tarball with prometheus/client_golang 1.11.1
  (bsc#1196338, jsc#SLE-24238, jsc#SLE-24239, jsc#SUMA-114,
  CVE-2022-21698)
  + Added 0001-Update-prometheus-client-to-1.11.1.patch</changelog>
  <changelog author="tdehler@suse.com" date="1649851200">- Update spec file in order to make --version work (bsc#1196652)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1652184000">- Exclude s390 arch.</changelog>
  <changelog author="michael@stroeder.com" date="1656158400">- Update to 1.3.1
  * [BUGFIX] Handle nil CPU thermal power status on M1 #2218
  * [BUGFIX] bsd: Ignore filesystems flagged as MNT_IGNORE. #2227
  * [BUGFIX] Sanitize UTF-8 in dmi collector #2229</changelog>
  <changelog author="kastl@b1-systems.de" date="1673352000">- BuildRequire go1.18 OR HIGHER (previously this was fixed to 1.14)</changelog>
  <changelog author="kastl@b1-systems.de" date="1673352001">- update to 1.4.0:
  * [CHANGE] Merge metrics descriptions in textfile collector #2475
  * [FEATURE] [node-mixin] Add darwin dashboard to mixin #2351
  * [FEATURE] Add "isolated" metric on cpu collector on linux #2251
  * [FEATURE] Add cgroup summary collector #2408
  * [FEATURE] Add selinux collector #2205
  * [FEATURE] Add slab info collector #2376
  * [FEATURE] Add sysctl collector #2425
  * [FEATURE] Also track the CPU Spin time for OpenBSD systems #1971
  * [FEATURE] Add support for MacOS version #2471
  * [ENHANCEMENT] [node-mixin] Add missing selectors #2426
  * [ENHANCEMENT] [node-mixin] Change current datasource to grafana's default #2281
  * [ENHANCEMENT] [node-mixin] Change disk graph to disk table #2364
  * [ENHANCEMENT] [node-mixin] Change io time units to %util #2375
  * [ENHANCEMENT] Ad user_wired_bytes and laundry_bytes on *bsd #2266
  * [ENHANCEMENT] Add additional vm_stat memory metrics for darwin #2240
  * [ENHANCEMENT] Add device filter flags to arp collector #2254
  * [ENHANCEMENT] Add diskstats include and exclude device flags #2417
  * [ENHANCEMENT] Add node_softirqs_total metric #2221
  * [ENHANCEMENT] Add rapl zone name label option #2401
  * [ENHANCEMENT] Add slabinfo collector #1799
  * [ENHANCEMENT] Allow user to select port on NTP server to query #2270
  * [ENHANCEMENT] collector/diskstats: Add labels and metrics from udev #2404
  * [ENHANCEMENT] Enable builds against older macOS SDK #2327
  * [ENHANCEMENT] qdisk-linux: Add exclude and include flags for interface name #2432
  * [ENHANCEMENT] systemd: Expose systemd minor version #2282
  * [ENHANCEMENT] Use netlink for tcpstat collector #2322
  * [ENHANCEMENT] Use netlink to get netdev stats #2074
  * [ENHANCEMENT] Add additional perf counters for stalled frontend/backend cycles #2191
  * [ENHANCEMENT] Add btrfs device error stats #2193
  * [BUGFIX] [node-mixin] Fix fsSpaceAvailableCriticalThreshold and fsSpaceAvailableWarning #2352
  * [BUGFIX] Fix concurrency issue in ethtool collector #2289
  * [BUGFIX] Fix concurrency issue in netdev collector #2267
  * [BUGFIX] Fix diskstat reads and write metrics for disks with different sector sizes #2311
  * [BUGFIX] Fix iostat on macos broken by deprecation warning #2292
  * [BUGFIX] Fix NodeFileDescriptorLimit alerts #2340
  * [BUGFIX] Sanitize rapl zone names #2299
  * [BUGFIX] Add file descriptor close safely in test #2447
  * [BUGFIX] Fix race condition in os_release.go #2454
  * [BUGFIX] Skip ZFS IO metrics if their paths are missing #2451</changelog>
  <changelog author="kastl@b1-systems.de" date="1673352002">- update to 1.4.1:
  * [BUGFIX] Fix diskstats exclude flags #2487
  * [BUGFIX] Security: Update go/x/crypto and go/x/net
    (CVE-2022-27191, CVE-2022-27664)
  * [BUGFIX] Security: Update exporter-toolkit
    (CVE-2022-46146, bsc#1208064)</changelog>
  <changelog author="kastl@b1-systems.de" date="1673352003">- modify _service file and set all services to disabled
- remove patch 0001-Update-prometheus-client-to-1.11.1.patch
- update to 1.5.0 (jsc#PED-3578):
  * NOTE: This changes the Go runtime "GOMAXPROCS" to 1. This is done to limit the
    concurrency of the exporter to 1 CPU thread at a time in order to avoid a
    race condition problem in the Linux kernel (#2500) and parallel IO issues
    on nodes with high numbers of CPUs/CPU threads (#1880).
  * [CHANGE] Default GOMAXPROCS to 1 #2530
  * [FEATURE] Add multiple listeners and systemd socket listener activation #2393
  * [ENHANCEMENT] Add RTNL version of netclass collector #2492, #2528
  * [BUGFIX] Fix hwmon label sanitizer #2504
  * [BUGFIX] Use native endianness when encoding InetDiagMsg #2508
  * [BUGFIX] Fix btrfs device stats always being zero #2516</changelog>
  <changelog author="witold.bedyk@suse.com" date="1678795200">- Remove node_exporter-1.5.0.tar.gz
- Execute tar and recompress service modules at buildtime</changelog>
  <changelog author="kastl@b1-systems.de" date="1679486400">- change go_modules archive in _service to use obscpio file</changelog>
  <changelog author="kastl@b1-systems.de" date="1685188800">- update to 1.6.0:
  * [CHANGE] Fix cpustat when some cpus are offline #2318
  * [CHANGE] Remove metrics of offline CPUs in CPU collector #2605
  * [CHANGE] Deprecate ntp collector #2603
  * [CHANGE] Remove bcache `cache_readaheads_totals` metrics #2583
  * [CHANGE] Deprecate supervisord collector #2685
  * [FEATURE] Enable uname collector on NetBSD #2559
  * [FEATURE] NetBSD support for the meminfo collector #2570
  * [FEATURE] NetBSD support for CPU collector #2626
  * [FEATURE] Add FreeBSD collector for netisr subsystem #2668
  * [FEATURE] Add softirqs collector #2669
  * [ENHANCEMENT] Add suspended as a `node_zfs_zpool_state` #2449
  * [ENHANCEMENT] Add administrative state of Linux network
    interfaces #2515
  * [ENHANCEMENT] Log current value of GOMAXPROCS #2537
  * [ENHANCEMENT] Add profiler options for perf collector #2542
  * [ENHANCEMENT] Allow root path as metrics path #2590
  * [ENHANCEMENT] Add cpu frequency governor metrics #2569
  * [ENHANCEMENT] Add new landing page #2622
  * [ENHANCEMENT] Reduce privileges needed for btrfs device stats
    [#2634]
  * [ENHANCEMENT] Add ZFS `memory_available_bytes` #2687
  * [ENHANCEMENT] Use `SCSI_IDENT_SERIAL` as serial in diskstats
    [#2612]
  * [ENHANCEMENT] Read missing from netlink netclass attributes
    from sysfs #2669
  * [BUGFIX] perf: fixes for automatically detecting the correct
    tracefs mountpoints #2553
  * [BUGFIX] Fix `thermal_zone` collector noise @2554
  * [BUGFIX] Fix a problem fetching the user wire count on FreeBSD
    2584
  * [BUGFIX] interrupts: Fix fields on linux aarch64 #2631
  * [BUGFIX] Remove metrics of offline CPUs in CPU collector #2605
  * [BUGFIX] Fix OpenBSD filesystem collector string parsing #2637
  * [BUGFIX] Fix bad reporting of `node_cpu_seconds_total` in
    OpenBSD #2663</changelog>
  <changelog author="kastl@b1-systems.de" date="1699876800">- update to 1.7.0 (jsc#PED-7893, jsc#PED-7928):
  * [FEATURE] Add ZFS freebsd per dataset stats #2753
  * [FEATURE] Add cpu vulnerabilities reporting from sysfs #2721
  * [ENHANCEMENT] Parallelize stat calls in Linux filesystem
    collector #1772
  * [ENHANCEMENT] Add missing linkspeeds to ethtool collector #2711
  * [ENHANCEMENT] Add CPU MHz as the value for node_cpu_info metric
    [#2778]
  * [ENHANCEMENT] Improve qdisc collector performance #2779
  * [ENHANCEMENT] Add include and exclude filter for hwmon
    collector #2699
  * [ENHANCEMENT] Optionally fetch ARP stats via rtnetlink instead
    of procfs #2777
  * [BUFFIX] Fix ZFS arcstats on FreeBSD 14.0+ 2754
  * [BUGFIX] Fallback to 32-bit stats in netdev #2757
  * [BUGFIX] Close btrfs.FS handle after use #2780
  * [BUGFIX] Move RO status before error return #2807
  * [BUFFIX] Fix promhttp_metric_handler_errors_total being always
    active #2808
  * [BUGFIX] Fix nfsd v4 index miss #2824
- update to 1.6.1:
  (no source code changes in this release)
- BuildRequire go1.20</changelog>
  <changelog author="witold.bedyk@suse.com" date="1707739200">- Add fix_arp_collector.patch
  Patch updates rtnetlink library to fix errors during ARP metrics
  collection.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1708689600">- Add add_device_error_label.patch
  Patch adds `device_error` label for filesystem metrics.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1713960000">- update to 1.8.0:
  * [CHANGE] exec_bsd: Fix labels for vm.stats.sys.v_syscall sysctl
    [#2895]
  * [CHANGE] diskstats: Ignore zram devices on linux systems #2898
  * [CHANGE] textfile: Avoid inconsistent help-texts #2962
  * [CHANGE] os: Removed caching of modtime/filename of os-release
    file #2987
  * [FEATURE] xfrm: Add new collector #2866
  * [FEATURE] watchdog: Add new collector #2880
  * [ENHANCEMENT] cpu_vulnerabilities: Add mitigation information
    label #2806
  * [ENHANCEMENT] nfsd: Handle new wdeleg_getattr attribute #2810
  * [ENHANCEMENT] netstat: Add TCPOFOQueue to default netstat
    metrics #2867
  * [ENHANCEMENT] filesystem: surface device errors #2923
  * [ENHANCEMENT] os: Add support end parsing #2982
  * [ENHANCEMENT] zfs: Log mib when sysctl read fails on FreeBSD
    [#2975]
  * [ENHANCEMENT] fibre_channel: update procfs to take into account
    optional attributes #2933
  * [BUGFIX] cpu: Fix debug log in cpu collector #2857
  * [BUGFIX] hwmon: Fix hwmon nil ptr #2873
  * [BUGFIX] hwmon: Fix hwmon error capture #2915
  * [BUGFIX] zfs: Revert "Add ZFS freebsd per dataset stats #2925
  * [BUGFIX] ethtool: Sanitize ethtool metric name keys #2940
  * [BUGFIX] fix: data race of NetClassCollector metrics
    initialization #2995
- drop patch fix_arp_collector.patch (see
  https://github.com/prometheus/node_exporter/blob/master/go.mod#L17)
- drop patch add_device_error_label.patch
  https://github.com/prometheus/node_exporter/pull/2923</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1716292800">- update to 1.8.1:
  * [BUGFIX] Fix CPU seconds on Solaris #2963
  * [BUGFIX] Sign Darwin/MacOS binaries #3008
  * [BUGFIX] Fix pressure collector nil reference #3016</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1720958400">- update to 1.8.2:
  * [BUGFIX] Fix CPU pressure metric collection #3054</changelog>
  <changelog author="witold.bedyk@suse.com" date="1737374400">- Packaging improvements:
  * Use systemd-sysusers to configure the user in a dedicated
    'system-user-prometheus' subpackage (bsc#1235516)
  * Remove systemd and shadow hard requirements
  * Require Go 1.22 or newer for building
  * Drop BuildRequires: golang-packaging
  * Drop mod=vendor
  * Run `node_exporter --version` in the %check phase</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1739793600">- refactor `_service` file and spec to use a nice tarball name
- update to 1.9.0 (jsc#PED-12485):
  * CVE-2023-45288: Bump golang.org/x/net to version 0.33.0
    (bsc#1236516)
  * [CHANGE] meminfo: Convert linux implementation to use procfs
    lib #3049
  * [CHANGE] Update logging to use Go log/slog #3097
  * [FEATURE] filesystem: Add node_filesystem_mount_info metric
    [#2970]
  * [FEATURE] btrfs: Add metrics for commit statistics #3010
  * [FEATURE] interrupts: Add collector include/exclude filtering
    [#3028]
  * [FEATURE] interrupts: Add "exclude zeros" filtering #3028
  * [FEATURE] slabinfo: Add filters for slab name. #3041
  * [FEATURE] pressure: add IRQ PSI metrics #3048
  * [FEATURE] hwmon: Add include and exclude filter for sensors
    [#3072]
  * [FEATURE] filesystem: Add NetBSD support #3082
  * [FEATURE] netdev: Add ifAlias label #3087
  * [FEATURE] hwmon: Add Support for GPU Clock Frequencies #3093
  * [FEATURE] Add exclude[] URL parameter #3116
  * [FEATURE] Add AIX support #3136
  * [FEATURE] filesystem: Add fs-types/mount-points include flags
    [#3171]
  * [FEATURE] netstat: Add collector for tcp packet counters for
    FreeBSD. #3177
  * [ENHANCEMENT] ethtool: Add logging for filtering flags #2979
  * [ENHANCEMENT] netstat: Add TCPRcvQDrop to default metrics #3021
  * [ENHANCEMENT] diskstats: Add block device rotational #3022
  * [ENHANCEMENT] cpu: Support CPU online status #3032
  * [ENHANCEMENT] arp: optimize interface name resolution #3133
  * [ENHANCEMENT] textfile: Allow specifiying multiple directory
    globs #3135
  * [ENHANCEMENT] filesystem: Add reporting of purgeable space on
    MacOS #3206
  * [ENHANCEMENT] ethtool: Skip full scan of NetClass directories
    [#3239]
  * [BUGFIX] zfs: Prevent procfs integer underflow #2961
  * [BUGFIX] pressure: Fix collection on systems that do not expose
    a full CPU stat #3054
  * [BUGFIX] cpu: Fix FreeBSD 32-bit host support and plug memory
    leak #3083
  * [BUGFIX] hwmon: Add safety check to hwmon read #3134
  * [BUGFIX] zfs: Allow space in dataset name #3186</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1743508800">- update to 1.9.1
  * [BUGFIX] pressure: Fix missing IRQ on older kernels #3263
  * [BUGFIX] Fix Darwin memory leak #3277
  * CVE-2025-22870: Bump golang.org/x/net to version 0.37.0
    (bsc#1238686)</changelog>
</package>
<package pkgid="f6a48765549d93686e8af5f915a72b2bdb9fba2cd0cb0a35b2cb773f67fffba9" name="golang-github-prometheus-node_exporter" arch="x86_64">
  <version epoch="0" ver="1.9.1" rel="150100.3.35.2"/>
  <changelog author="witold.bedyk@suse.com" date="1646827200">- Update vendor tarball with prometheus/client_golang 1.11.1
  (bsc#1196338, jsc#SLE-24238, jsc#SLE-24239, jsc#SUMA-114,
  CVE-2022-21698)
  + Added 0001-Update-prometheus-client-to-1.11.1.patch</changelog>
  <changelog author="tdehler@suse.com" date="1649851200">- Update spec file in order to make --version work (bsc#1196652)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1652184000">- Exclude s390 arch.</changelog>
  <changelog author="michael@stroeder.com" date="1656158400">- Update to 1.3.1
  * [BUGFIX] Handle nil CPU thermal power status on M1 #2218
  * [BUGFIX] bsd: Ignore filesystems flagged as MNT_IGNORE. #2227
  * [BUGFIX] Sanitize UTF-8 in dmi collector #2229</changelog>
  <changelog author="kastl@b1-systems.de" date="1673352000">- BuildRequire go1.18 OR HIGHER (previously this was fixed to 1.14)</changelog>
  <changelog author="kastl@b1-systems.de" date="1673352001">- update to 1.4.0:
  * [CHANGE] Merge metrics descriptions in textfile collector #2475
  * [FEATURE] [node-mixin] Add darwin dashboard to mixin #2351
  * [FEATURE] Add "isolated" metric on cpu collector on linux #2251
  * [FEATURE] Add cgroup summary collector #2408
  * [FEATURE] Add selinux collector #2205
  * [FEATURE] Add slab info collector #2376
  * [FEATURE] Add sysctl collector #2425
  * [FEATURE] Also track the CPU Spin time for OpenBSD systems #1971
  * [FEATURE] Add support for MacOS version #2471
  * [ENHANCEMENT] [node-mixin] Add missing selectors #2426
  * [ENHANCEMENT] [node-mixin] Change current datasource to grafana's default #2281
  * [ENHANCEMENT] [node-mixin] Change disk graph to disk table #2364
  * [ENHANCEMENT] [node-mixin] Change io time units to %util #2375
  * [ENHANCEMENT] Ad user_wired_bytes and laundry_bytes on *bsd #2266
  * [ENHANCEMENT] Add additional vm_stat memory metrics for darwin #2240
  * [ENHANCEMENT] Add device filter flags to arp collector #2254
  * [ENHANCEMENT] Add diskstats include and exclude device flags #2417
  * [ENHANCEMENT] Add node_softirqs_total metric #2221
  * [ENHANCEMENT] Add rapl zone name label option #2401
  * [ENHANCEMENT] Add slabinfo collector #1799
  * [ENHANCEMENT] Allow user to select port on NTP server to query #2270
  * [ENHANCEMENT] collector/diskstats: Add labels and metrics from udev #2404
  * [ENHANCEMENT] Enable builds against older macOS SDK #2327
  * [ENHANCEMENT] qdisk-linux: Add exclude and include flags for interface name #2432
  * [ENHANCEMENT] systemd: Expose systemd minor version #2282
  * [ENHANCEMENT] Use netlink for tcpstat collector #2322
  * [ENHANCEMENT] Use netlink to get netdev stats #2074
  * [ENHANCEMENT] Add additional perf counters for stalled frontend/backend cycles #2191
  * [ENHANCEMENT] Add btrfs device error stats #2193
  * [BUGFIX] [node-mixin] Fix fsSpaceAvailableCriticalThreshold and fsSpaceAvailableWarning #2352
  * [BUGFIX] Fix concurrency issue in ethtool collector #2289
  * [BUGFIX] Fix concurrency issue in netdev collector #2267
  * [BUGFIX] Fix diskstat reads and write metrics for disks with different sector sizes #2311
  * [BUGFIX] Fix iostat on macos broken by deprecation warning #2292
  * [BUGFIX] Fix NodeFileDescriptorLimit alerts #2340
  * [BUGFIX] Sanitize rapl zone names #2299
  * [BUGFIX] Add file descriptor close safely in test #2447
  * [BUGFIX] Fix race condition in os_release.go #2454
  * [BUGFIX] Skip ZFS IO metrics if their paths are missing #2451</changelog>
  <changelog author="kastl@b1-systems.de" date="1673352002">- update to 1.4.1:
  * [BUGFIX] Fix diskstats exclude flags #2487
  * [BUGFIX] Security: Update go/x/crypto and go/x/net
    (CVE-2022-27191, CVE-2022-27664)
  * [BUGFIX] Security: Update exporter-toolkit
    (CVE-2022-46146, bsc#1208064)</changelog>
  <changelog author="kastl@b1-systems.de" date="1673352003">- modify _service file and set all services to disabled
- remove patch 0001-Update-prometheus-client-to-1.11.1.patch
- update to 1.5.0 (jsc#PED-3578):
  * NOTE: This changes the Go runtime "GOMAXPROCS" to 1. This is done to limit the
    concurrency of the exporter to 1 CPU thread at a time in order to avoid a
    race condition problem in the Linux kernel (#2500) and parallel IO issues
    on nodes with high numbers of CPUs/CPU threads (#1880).
  * [CHANGE] Default GOMAXPROCS to 1 #2530
  * [FEATURE] Add multiple listeners and systemd socket listener activation #2393
  * [ENHANCEMENT] Add RTNL version of netclass collector #2492, #2528
  * [BUGFIX] Fix hwmon label sanitizer #2504
  * [BUGFIX] Use native endianness when encoding InetDiagMsg #2508
  * [BUGFIX] Fix btrfs device stats always being zero #2516</changelog>
  <changelog author="witold.bedyk@suse.com" date="1678795200">- Remove node_exporter-1.5.0.tar.gz
- Execute tar and recompress service modules at buildtime</changelog>
  <changelog author="kastl@b1-systems.de" date="1679486400">- change go_modules archive in _service to use obscpio file</changelog>
  <changelog author="kastl@b1-systems.de" date="1685188800">- update to 1.6.0:
  * [CHANGE] Fix cpustat when some cpus are offline #2318
  * [CHANGE] Remove metrics of offline CPUs in CPU collector #2605
  * [CHANGE] Deprecate ntp collector #2603
  * [CHANGE] Remove bcache `cache_readaheads_totals` metrics #2583
  * [CHANGE] Deprecate supervisord collector #2685
  * [FEATURE] Enable uname collector on NetBSD #2559
  * [FEATURE] NetBSD support for the meminfo collector #2570
  * [FEATURE] NetBSD support for CPU collector #2626
  * [FEATURE] Add FreeBSD collector for netisr subsystem #2668
  * [FEATURE] Add softirqs collector #2669
  * [ENHANCEMENT] Add suspended as a `node_zfs_zpool_state` #2449
  * [ENHANCEMENT] Add administrative state of Linux network
    interfaces #2515
  * [ENHANCEMENT] Log current value of GOMAXPROCS #2537
  * [ENHANCEMENT] Add profiler options for perf collector #2542
  * [ENHANCEMENT] Allow root path as metrics path #2590
  * [ENHANCEMENT] Add cpu frequency governor metrics #2569
  * [ENHANCEMENT] Add new landing page #2622
  * [ENHANCEMENT] Reduce privileges needed for btrfs device stats
    [#2634]
  * [ENHANCEMENT] Add ZFS `memory_available_bytes` #2687
  * [ENHANCEMENT] Use `SCSI_IDENT_SERIAL` as serial in diskstats
    [#2612]
  * [ENHANCEMENT] Read missing from netlink netclass attributes
    from sysfs #2669
  * [BUGFIX] perf: fixes for automatically detecting the correct
    tracefs mountpoints #2553
  * [BUGFIX] Fix `thermal_zone` collector noise @2554
  * [BUGFIX] Fix a problem fetching the user wire count on FreeBSD
    2584
  * [BUGFIX] interrupts: Fix fields on linux aarch64 #2631
  * [BUGFIX] Remove metrics of offline CPUs in CPU collector #2605
  * [BUGFIX] Fix OpenBSD filesystem collector string parsing #2637
  * [BUGFIX] Fix bad reporting of `node_cpu_seconds_total` in
    OpenBSD #2663</changelog>
  <changelog author="kastl@b1-systems.de" date="1699876800">- update to 1.7.0 (jsc#PED-7893, jsc#PED-7928):
  * [FEATURE] Add ZFS freebsd per dataset stats #2753
  * [FEATURE] Add cpu vulnerabilities reporting from sysfs #2721
  * [ENHANCEMENT] Parallelize stat calls in Linux filesystem
    collector #1772
  * [ENHANCEMENT] Add missing linkspeeds to ethtool collector #2711
  * [ENHANCEMENT] Add CPU MHz as the value for node_cpu_info metric
    [#2778]
  * [ENHANCEMENT] Improve qdisc collector performance #2779
  * [ENHANCEMENT] Add include and exclude filter for hwmon
    collector #2699
  * [ENHANCEMENT] Optionally fetch ARP stats via rtnetlink instead
    of procfs #2777
  * [BUFFIX] Fix ZFS arcstats on FreeBSD 14.0+ 2754
  * [BUGFIX] Fallback to 32-bit stats in netdev #2757
  * [BUGFIX] Close btrfs.FS handle after use #2780
  * [BUGFIX] Move RO status before error return #2807
  * [BUFFIX] Fix promhttp_metric_handler_errors_total being always
    active #2808
  * [BUGFIX] Fix nfsd v4 index miss #2824
- update to 1.6.1:
  (no source code changes in this release)
- BuildRequire go1.20</changelog>
  <changelog author="witold.bedyk@suse.com" date="1707739200">- Add fix_arp_collector.patch
  Patch updates rtnetlink library to fix errors during ARP metrics
  collection.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1708689600">- Add add_device_error_label.patch
  Patch adds `device_error` label for filesystem metrics.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1713960000">- update to 1.8.0:
  * [CHANGE] exec_bsd: Fix labels for vm.stats.sys.v_syscall sysctl
    [#2895]
  * [CHANGE] diskstats: Ignore zram devices on linux systems #2898
  * [CHANGE] textfile: Avoid inconsistent help-texts #2962
  * [CHANGE] os: Removed caching of modtime/filename of os-release
    file #2987
  * [FEATURE] xfrm: Add new collector #2866
  * [FEATURE] watchdog: Add new collector #2880
  * [ENHANCEMENT] cpu_vulnerabilities: Add mitigation information
    label #2806
  * [ENHANCEMENT] nfsd: Handle new wdeleg_getattr attribute #2810
  * [ENHANCEMENT] netstat: Add TCPOFOQueue to default netstat
    metrics #2867
  * [ENHANCEMENT] filesystem: surface device errors #2923
  * [ENHANCEMENT] os: Add support end parsing #2982
  * [ENHANCEMENT] zfs: Log mib when sysctl read fails on FreeBSD
    [#2975]
  * [ENHANCEMENT] fibre_channel: update procfs to take into account
    optional attributes #2933
  * [BUGFIX] cpu: Fix debug log in cpu collector #2857
  * [BUGFIX] hwmon: Fix hwmon nil ptr #2873
  * [BUGFIX] hwmon: Fix hwmon error capture #2915
  * [BUGFIX] zfs: Revert "Add ZFS freebsd per dataset stats #2925
  * [BUGFIX] ethtool: Sanitize ethtool metric name keys #2940
  * [BUGFIX] fix: data race of NetClassCollector metrics
    initialization #2995
- drop patch fix_arp_collector.patch (see
  https://github.com/prometheus/node_exporter/blob/master/go.mod#L17)
- drop patch add_device_error_label.patch
  https://github.com/prometheus/node_exporter/pull/2923</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1716292800">- update to 1.8.1:
  * [BUGFIX] Fix CPU seconds on Solaris #2963
  * [BUGFIX] Sign Darwin/MacOS binaries #3008
  * [BUGFIX] Fix pressure collector nil reference #3016</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1720958400">- update to 1.8.2:
  * [BUGFIX] Fix CPU pressure metric collection #3054</changelog>
  <changelog author="witold.bedyk@suse.com" date="1737374400">- Packaging improvements:
  * Use systemd-sysusers to configure the user in a dedicated
    'system-user-prometheus' subpackage (bsc#1235516)
  * Remove systemd and shadow hard requirements
  * Require Go 1.22 or newer for building
  * Drop BuildRequires: golang-packaging
  * Drop mod=vendor
  * Run `node_exporter --version` in the %check phase</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1739793600">- refactor `_service` file and spec to use a nice tarball name
- update to 1.9.0 (jsc#PED-12485):
  * CVE-2023-45288: Bump golang.org/x/net to version 0.33.0
    (bsc#1236516)
  * [CHANGE] meminfo: Convert linux implementation to use procfs
    lib #3049
  * [CHANGE] Update logging to use Go log/slog #3097
  * [FEATURE] filesystem: Add node_filesystem_mount_info metric
    [#2970]
  * [FEATURE] btrfs: Add metrics for commit statistics #3010
  * [FEATURE] interrupts: Add collector include/exclude filtering
    [#3028]
  * [FEATURE] interrupts: Add "exclude zeros" filtering #3028
  * [FEATURE] slabinfo: Add filters for slab name. #3041
  * [FEATURE] pressure: add IRQ PSI metrics #3048
  * [FEATURE] hwmon: Add include and exclude filter for sensors
    [#3072]
  * [FEATURE] filesystem: Add NetBSD support #3082
  * [FEATURE] netdev: Add ifAlias label #3087
  * [FEATURE] hwmon: Add Support for GPU Clock Frequencies #3093
  * [FEATURE] Add exclude[] URL parameter #3116
  * [FEATURE] Add AIX support #3136
  * [FEATURE] filesystem: Add fs-types/mount-points include flags
    [#3171]
  * [FEATURE] netstat: Add collector for tcp packet counters for
    FreeBSD. #3177
  * [ENHANCEMENT] ethtool: Add logging for filtering flags #2979
  * [ENHANCEMENT] netstat: Add TCPRcvQDrop to default metrics #3021
  * [ENHANCEMENT] diskstats: Add block device rotational #3022
  * [ENHANCEMENT] cpu: Support CPU online status #3032
  * [ENHANCEMENT] arp: optimize interface name resolution #3133
  * [ENHANCEMENT] textfile: Allow specifiying multiple directory
    globs #3135
  * [ENHANCEMENT] filesystem: Add reporting of purgeable space on
    MacOS #3206
  * [ENHANCEMENT] ethtool: Skip full scan of NetClass directories
    [#3239]
  * [BUGFIX] zfs: Prevent procfs integer underflow #2961
  * [BUGFIX] pressure: Fix collection on systems that do not expose
    a full CPU stat #3054
  * [BUGFIX] cpu: Fix FreeBSD 32-bit host support and plug memory
    leak #3083
  * [BUGFIX] hwmon: Add safety check to hwmon read #3134
  * [BUGFIX] zfs: Allow space in dataset name #3186</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1743508800">- update to 1.9.1
  * [BUGFIX] pressure: Fix missing IRQ on older kernels #3263
  * [BUGFIX] Fix Darwin memory leak #3277
  * CVE-2025-22870: Bump golang.org/x/net to version 0.37.0
    (bsc#1238686)</changelog>
</package>
<package pkgid="1df83e2be7ee1357d6952d21caa6356d310128c97c34e7fecb436b32b4bb71b0" name="golang-github-prometheus-node_exporter" arch="src">
  <version epoch="0" ver="1.9.1" rel="150100.3.38.1"/>
  <changelog author="tdehler@suse.com" date="1649851200">- Update spec file in order to make --version work (bsc#1196652)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1652184000">- Exclude s390 arch.</changelog>
  <changelog author="michael@stroeder.com" date="1656158400">- Update to 1.3.1
  * [BUGFIX] Handle nil CPU thermal power status on M1 #2218
  * [BUGFIX] bsd: Ignore filesystems flagged as MNT_IGNORE. #2227
  * [BUGFIX] Sanitize UTF-8 in dmi collector #2229</changelog>
  <changelog author="kastl@b1-systems.de" date="1673352000">- BuildRequire go1.18 OR HIGHER (previously this was fixed to 1.14)</changelog>
  <changelog author="kastl@b1-systems.de" date="1673352001">- update to 1.4.0:
  * [CHANGE] Merge metrics descriptions in textfile collector #2475
  * [FEATURE] [node-mixin] Add darwin dashboard to mixin #2351
  * [FEATURE] Add "isolated" metric on cpu collector on linux #2251
  * [FEATURE] Add cgroup summary collector #2408
  * [FEATURE] Add selinux collector #2205
  * [FEATURE] Add slab info collector #2376
  * [FEATURE] Add sysctl collector #2425
  * [FEATURE] Also track the CPU Spin time for OpenBSD systems #1971
  * [FEATURE] Add support for MacOS version #2471
  * [ENHANCEMENT] [node-mixin] Add missing selectors #2426
  * [ENHANCEMENT] [node-mixin] Change current datasource to grafana's default #2281
  * [ENHANCEMENT] [node-mixin] Change disk graph to disk table #2364
  * [ENHANCEMENT] [node-mixin] Change io time units to %util #2375
  * [ENHANCEMENT] Ad user_wired_bytes and laundry_bytes on *bsd #2266
  * [ENHANCEMENT] Add additional vm_stat memory metrics for darwin #2240
  * [ENHANCEMENT] Add device filter flags to arp collector #2254
  * [ENHANCEMENT] Add diskstats include and exclude device flags #2417
  * [ENHANCEMENT] Add node_softirqs_total metric #2221
  * [ENHANCEMENT] Add rapl zone name label option #2401
  * [ENHANCEMENT] Add slabinfo collector #1799
  * [ENHANCEMENT] Allow user to select port on NTP server to query #2270
  * [ENHANCEMENT] collector/diskstats: Add labels and metrics from udev #2404
  * [ENHANCEMENT] Enable builds against older macOS SDK #2327
  * [ENHANCEMENT] qdisk-linux: Add exclude and include flags for interface name #2432
  * [ENHANCEMENT] systemd: Expose systemd minor version #2282
  * [ENHANCEMENT] Use netlink for tcpstat collector #2322
  * [ENHANCEMENT] Use netlink to get netdev stats #2074
  * [ENHANCEMENT] Add additional perf counters for stalled frontend/backend cycles #2191
  * [ENHANCEMENT] Add btrfs device error stats #2193
  * [BUGFIX] [node-mixin] Fix fsSpaceAvailableCriticalThreshold and fsSpaceAvailableWarning #2352
  * [BUGFIX] Fix concurrency issue in ethtool collector #2289
  * [BUGFIX] Fix concurrency issue in netdev collector #2267
  * [BUGFIX] Fix diskstat reads and write metrics for disks with different sector sizes #2311
  * [BUGFIX] Fix iostat on macos broken by deprecation warning #2292
  * [BUGFIX] Fix NodeFileDescriptorLimit alerts #2340
  * [BUGFIX] Sanitize rapl zone names #2299
  * [BUGFIX] Add file descriptor close safely in test #2447
  * [BUGFIX] Fix race condition in os_release.go #2454
  * [BUGFIX] Skip ZFS IO metrics if their paths are missing #2451</changelog>
  <changelog author="kastl@b1-systems.de" date="1673352002">- update to 1.4.1:
  * [BUGFIX] Fix diskstats exclude flags #2487
  * [BUGFIX] Security: Update go/x/crypto and go/x/net
    (CVE-2022-27191, CVE-2022-27664)
  * [BUGFIX] Security: Update exporter-toolkit
    (CVE-2022-46146, bsc#1208064)</changelog>
  <changelog author="kastl@b1-systems.de" date="1673352003">- modify _service file and set all services to disabled
- remove patch 0001-Update-prometheus-client-to-1.11.1.patch
- update to 1.5.0 (jsc#PED-3578):
  * NOTE: This changes the Go runtime "GOMAXPROCS" to 1. This is done to limit the
    concurrency of the exporter to 1 CPU thread at a time in order to avoid a
    race condition problem in the Linux kernel (#2500) and parallel IO issues
    on nodes with high numbers of CPUs/CPU threads (#1880).
  * [CHANGE] Default GOMAXPROCS to 1 #2530
  * [FEATURE] Add multiple listeners and systemd socket listener activation #2393
  * [ENHANCEMENT] Add RTNL version of netclass collector #2492, #2528
  * [BUGFIX] Fix hwmon label sanitizer #2504
  * [BUGFIX] Use native endianness when encoding InetDiagMsg #2508
  * [BUGFIX] Fix btrfs device stats always being zero #2516</changelog>
  <changelog author="witold.bedyk@suse.com" date="1678795200">- Remove node_exporter-1.5.0.tar.gz
- Execute tar and recompress service modules at buildtime</changelog>
  <changelog author="kastl@b1-systems.de" date="1679486400">- change go_modules archive in _service to use obscpio file</changelog>
  <changelog author="kastl@b1-systems.de" date="1685188800">- update to 1.6.0:
  * [CHANGE] Fix cpustat when some cpus are offline #2318
  * [CHANGE] Remove metrics of offline CPUs in CPU collector #2605
  * [CHANGE] Deprecate ntp collector #2603
  * [CHANGE] Remove bcache `cache_readaheads_totals` metrics #2583
  * [CHANGE] Deprecate supervisord collector #2685
  * [FEATURE] Enable uname collector on NetBSD #2559
  * [FEATURE] NetBSD support for the meminfo collector #2570
  * [FEATURE] NetBSD support for CPU collector #2626
  * [FEATURE] Add FreeBSD collector for netisr subsystem #2668
  * [FEATURE] Add softirqs collector #2669
  * [ENHANCEMENT] Add suspended as a `node_zfs_zpool_state` #2449
  * [ENHANCEMENT] Add administrative state of Linux network
    interfaces #2515
  * [ENHANCEMENT] Log current value of GOMAXPROCS #2537
  * [ENHANCEMENT] Add profiler options for perf collector #2542
  * [ENHANCEMENT] Allow root path as metrics path #2590
  * [ENHANCEMENT] Add cpu frequency governor metrics #2569
  * [ENHANCEMENT] Add new landing page #2622
  * [ENHANCEMENT] Reduce privileges needed for btrfs device stats
    [#2634]
  * [ENHANCEMENT] Add ZFS `memory_available_bytes` #2687
  * [ENHANCEMENT] Use `SCSI_IDENT_SERIAL` as serial in diskstats
    [#2612]
  * [ENHANCEMENT] Read missing from netlink netclass attributes
    from sysfs #2669
  * [BUGFIX] perf: fixes for automatically detecting the correct
    tracefs mountpoints #2553
  * [BUGFIX] Fix `thermal_zone` collector noise @2554
  * [BUGFIX] Fix a problem fetching the user wire count on FreeBSD
    2584
  * [BUGFIX] interrupts: Fix fields on linux aarch64 #2631
  * [BUGFIX] Remove metrics of offline CPUs in CPU collector #2605
  * [BUGFIX] Fix OpenBSD filesystem collector string parsing #2637
  * [BUGFIX] Fix bad reporting of `node_cpu_seconds_total` in
    OpenBSD #2663</changelog>
  <changelog author="kastl@b1-systems.de" date="1699876800">- update to 1.7.0 (jsc#PED-7893, jsc#PED-7928):
  * [FEATURE] Add ZFS freebsd per dataset stats #2753
  * [FEATURE] Add cpu vulnerabilities reporting from sysfs #2721
  * [ENHANCEMENT] Parallelize stat calls in Linux filesystem
    collector #1772
  * [ENHANCEMENT] Add missing linkspeeds to ethtool collector #2711
  * [ENHANCEMENT] Add CPU MHz as the value for node_cpu_info metric
    [#2778]
  * [ENHANCEMENT] Improve qdisc collector performance #2779
  * [ENHANCEMENT] Add include and exclude filter for hwmon
    collector #2699
  * [ENHANCEMENT] Optionally fetch ARP stats via rtnetlink instead
    of procfs #2777
  * [BUFFIX] Fix ZFS arcstats on FreeBSD 14.0+ 2754
  * [BUGFIX] Fallback to 32-bit stats in netdev #2757
  * [BUGFIX] Close btrfs.FS handle after use #2780
  * [BUGFIX] Move RO status before error return #2807
  * [BUFFIX] Fix promhttp_metric_handler_errors_total being always
    active #2808
  * [BUGFIX] Fix nfsd v4 index miss #2824
- update to 1.6.1:
  (no source code changes in this release)
- BuildRequire go1.20</changelog>
  <changelog author="witold.bedyk@suse.com" date="1707739200">- Add fix_arp_collector.patch
  Patch updates rtnetlink library to fix errors during ARP metrics
  collection.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1708689600">- Add add_device_error_label.patch
  Patch adds `device_error` label for filesystem metrics.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1713960000">- update to 1.8.0:
  * [CHANGE] exec_bsd: Fix labels for vm.stats.sys.v_syscall sysctl
    [#2895]
  * [CHANGE] diskstats: Ignore zram devices on linux systems #2898
  * [CHANGE] textfile: Avoid inconsistent help-texts #2962
  * [CHANGE] os: Removed caching of modtime/filename of os-release
    file #2987
  * [FEATURE] xfrm: Add new collector #2866
  * [FEATURE] watchdog: Add new collector #2880
  * [ENHANCEMENT] cpu_vulnerabilities: Add mitigation information
    label #2806
  * [ENHANCEMENT] nfsd: Handle new wdeleg_getattr attribute #2810
  * [ENHANCEMENT] netstat: Add TCPOFOQueue to default netstat
    metrics #2867
  * [ENHANCEMENT] filesystem: surface device errors #2923
  * [ENHANCEMENT] os: Add support end parsing #2982
  * [ENHANCEMENT] zfs: Log mib when sysctl read fails on FreeBSD
    [#2975]
  * [ENHANCEMENT] fibre_channel: update procfs to take into account
    optional attributes #2933
  * [BUGFIX] cpu: Fix debug log in cpu collector #2857
  * [BUGFIX] hwmon: Fix hwmon nil ptr #2873
  * [BUGFIX] hwmon: Fix hwmon error capture #2915
  * [BUGFIX] zfs: Revert "Add ZFS freebsd per dataset stats #2925
  * [BUGFIX] ethtool: Sanitize ethtool metric name keys #2940
  * [BUGFIX] fix: data race of NetClassCollector metrics
    initialization #2995
- drop patch fix_arp_collector.patch (see
  https://github.com/prometheus/node_exporter/blob/master/go.mod#L17)
- drop patch add_device_error_label.patch
  https://github.com/prometheus/node_exporter/pull/2923</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1716292800">- update to 1.8.1:
  * [BUGFIX] Fix CPU seconds on Solaris #2963
  * [BUGFIX] Sign Darwin/MacOS binaries #3008
  * [BUGFIX] Fix pressure collector nil reference #3016</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1720958400">- update to 1.8.2:
  * [BUGFIX] Fix CPU pressure metric collection #3054</changelog>
  <changelog author="witold.bedyk@suse.com" date="1737374400">- Packaging improvements:
  * Use systemd-sysusers to configure the user in a dedicated
    'system-user-prometheus' subpackage (bsc#1235516)
  * Remove systemd and shadow hard requirements
  * Require Go 1.22 or newer for building
  * Drop BuildRequires: golang-packaging
  * Drop mod=vendor
  * Run `node_exporter --version` in the %check phase</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1739793600">- refactor `_service` file and spec to use a nice tarball name
- update to 1.9.0 (jsc#PED-12485):
  * CVE-2023-45288: Bump golang.org/x/net to version 0.33.0
    (bsc#1236516)
  * [CHANGE] meminfo: Convert linux implementation to use procfs
    lib #3049
  * [CHANGE] Update logging to use Go log/slog #3097
  * [FEATURE] filesystem: Add node_filesystem_mount_info metric
    [#2970]
  * [FEATURE] btrfs: Add metrics for commit statistics #3010
  * [FEATURE] interrupts: Add collector include/exclude filtering
    [#3028]
  * [FEATURE] interrupts: Add "exclude zeros" filtering #3028
  * [FEATURE] slabinfo: Add filters for slab name. #3041
  * [FEATURE] pressure: add IRQ PSI metrics #3048
  * [FEATURE] hwmon: Add include and exclude filter for sensors
    [#3072]
  * [FEATURE] filesystem: Add NetBSD support #3082
  * [FEATURE] netdev: Add ifAlias label #3087
  * [FEATURE] hwmon: Add Support for GPU Clock Frequencies #3093
  * [FEATURE] Add exclude[] URL parameter #3116
  * [FEATURE] Add AIX support #3136
  * [FEATURE] filesystem: Add fs-types/mount-points include flags
    [#3171]
  * [FEATURE] netstat: Add collector for tcp packet counters for
    FreeBSD. #3177
  * [ENHANCEMENT] ethtool: Add logging for filtering flags #2979
  * [ENHANCEMENT] netstat: Add TCPRcvQDrop to default metrics #3021
  * [ENHANCEMENT] diskstats: Add block device rotational #3022
  * [ENHANCEMENT] cpu: Support CPU online status #3032
  * [ENHANCEMENT] arp: optimize interface name resolution #3133
  * [ENHANCEMENT] textfile: Allow specifiying multiple directory
    globs #3135
  * [ENHANCEMENT] filesystem: Add reporting of purgeable space on
    MacOS #3206
  * [ENHANCEMENT] ethtool: Skip full scan of NetClass directories
    [#3239]
  * [BUGFIX] zfs: Prevent procfs integer underflow #2961
  * [BUGFIX] pressure: Fix collection on systems that do not expose
    a full CPU stat #3054
  * [BUGFIX] cpu: Fix FreeBSD 32-bit host support and plug memory
    leak #3083
  * [BUGFIX] hwmon: Add safety check to hwmon read #3134
  * [BUGFIX] zfs: Allow space in dataset name #3186</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1743508800">- update to 1.9.1
  * [BUGFIX] pressure: Fix missing IRQ on older kernels #3263
  * [BUGFIX] Fix Darwin memory leak #3277
  * CVE-2025-22870: Bump golang.org/x/net to version 0.37.0
    (bsc#1238686)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1766145600">- Require gcc11-c++ for building with SLE 12</changelog>
</package>
<package pkgid="ad2cec9854ec42579962dfd85f2acf3a86b1163615a11881791963906dba416c" name="golang-github-prometheus-node_exporter" arch="x86_64">
  <version epoch="0" ver="1.9.1" rel="150100.3.38.1"/>
  <changelog author="tdehler@suse.com" date="1649851200">- Update spec file in order to make --version work (bsc#1196652)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1652184000">- Exclude s390 arch.</changelog>
  <changelog author="michael@stroeder.com" date="1656158400">- Update to 1.3.1
  * [BUGFIX] Handle nil CPU thermal power status on M1 #2218
  * [BUGFIX] bsd: Ignore filesystems flagged as MNT_IGNORE. #2227
  * [BUGFIX] Sanitize UTF-8 in dmi collector #2229</changelog>
  <changelog author="kastl@b1-systems.de" date="1673352000">- BuildRequire go1.18 OR HIGHER (previously this was fixed to 1.14)</changelog>
  <changelog author="kastl@b1-systems.de" date="1673352001">- update to 1.4.0:
  * [CHANGE] Merge metrics descriptions in textfile collector #2475
  * [FEATURE] [node-mixin] Add darwin dashboard to mixin #2351
  * [FEATURE] Add "isolated" metric on cpu collector on linux #2251
  * [FEATURE] Add cgroup summary collector #2408
  * [FEATURE] Add selinux collector #2205
  * [FEATURE] Add slab info collector #2376
  * [FEATURE] Add sysctl collector #2425
  * [FEATURE] Also track the CPU Spin time for OpenBSD systems #1971
  * [FEATURE] Add support for MacOS version #2471
  * [ENHANCEMENT] [node-mixin] Add missing selectors #2426
  * [ENHANCEMENT] [node-mixin] Change current datasource to grafana's default #2281
  * [ENHANCEMENT] [node-mixin] Change disk graph to disk table #2364
  * [ENHANCEMENT] [node-mixin] Change io time units to %util #2375
  * [ENHANCEMENT] Ad user_wired_bytes and laundry_bytes on *bsd #2266
  * [ENHANCEMENT] Add additional vm_stat memory metrics for darwin #2240
  * [ENHANCEMENT] Add device filter flags to arp collector #2254
  * [ENHANCEMENT] Add diskstats include and exclude device flags #2417
  * [ENHANCEMENT] Add node_softirqs_total metric #2221
  * [ENHANCEMENT] Add rapl zone name label option #2401
  * [ENHANCEMENT] Add slabinfo collector #1799
  * [ENHANCEMENT] Allow user to select port on NTP server to query #2270
  * [ENHANCEMENT] collector/diskstats: Add labels and metrics from udev #2404
  * [ENHANCEMENT] Enable builds against older macOS SDK #2327
  * [ENHANCEMENT] qdisk-linux: Add exclude and include flags for interface name #2432
  * [ENHANCEMENT] systemd: Expose systemd minor version #2282
  * [ENHANCEMENT] Use netlink for tcpstat collector #2322
  * [ENHANCEMENT] Use netlink to get netdev stats #2074
  * [ENHANCEMENT] Add additional perf counters for stalled frontend/backend cycles #2191
  * [ENHANCEMENT] Add btrfs device error stats #2193
  * [BUGFIX] [node-mixin] Fix fsSpaceAvailableCriticalThreshold and fsSpaceAvailableWarning #2352
  * [BUGFIX] Fix concurrency issue in ethtool collector #2289
  * [BUGFIX] Fix concurrency issue in netdev collector #2267
  * [BUGFIX] Fix diskstat reads and write metrics for disks with different sector sizes #2311
  * [BUGFIX] Fix iostat on macos broken by deprecation warning #2292
  * [BUGFIX] Fix NodeFileDescriptorLimit alerts #2340
  * [BUGFIX] Sanitize rapl zone names #2299
  * [BUGFIX] Add file descriptor close safely in test #2447
  * [BUGFIX] Fix race condition in os_release.go #2454
  * [BUGFIX] Skip ZFS IO metrics if their paths are missing #2451</changelog>
  <changelog author="kastl@b1-systems.de" date="1673352002">- update to 1.4.1:
  * [BUGFIX] Fix diskstats exclude flags #2487
  * [BUGFIX] Security: Update go/x/crypto and go/x/net
    (CVE-2022-27191, CVE-2022-27664)
  * [BUGFIX] Security: Update exporter-toolkit
    (CVE-2022-46146, bsc#1208064)</changelog>
  <changelog author="kastl@b1-systems.de" date="1673352003">- modify _service file and set all services to disabled
- remove patch 0001-Update-prometheus-client-to-1.11.1.patch
- update to 1.5.0 (jsc#PED-3578):
  * NOTE: This changes the Go runtime "GOMAXPROCS" to 1. This is done to limit the
    concurrency of the exporter to 1 CPU thread at a time in order to avoid a
    race condition problem in the Linux kernel (#2500) and parallel IO issues
    on nodes with high numbers of CPUs/CPU threads (#1880).
  * [CHANGE] Default GOMAXPROCS to 1 #2530
  * [FEATURE] Add multiple listeners and systemd socket listener activation #2393
  * [ENHANCEMENT] Add RTNL version of netclass collector #2492, #2528
  * [BUGFIX] Fix hwmon label sanitizer #2504
  * [BUGFIX] Use native endianness when encoding InetDiagMsg #2508
  * [BUGFIX] Fix btrfs device stats always being zero #2516</changelog>
  <changelog author="witold.bedyk@suse.com" date="1678795200">- Remove node_exporter-1.5.0.tar.gz
- Execute tar and recompress service modules at buildtime</changelog>
  <changelog author="kastl@b1-systems.de" date="1679486400">- change go_modules archive in _service to use obscpio file</changelog>
  <changelog author="kastl@b1-systems.de" date="1685188800">- update to 1.6.0:
  * [CHANGE] Fix cpustat when some cpus are offline #2318
  * [CHANGE] Remove metrics of offline CPUs in CPU collector #2605
  * [CHANGE] Deprecate ntp collector #2603
  * [CHANGE] Remove bcache `cache_readaheads_totals` metrics #2583
  * [CHANGE] Deprecate supervisord collector #2685
  * [FEATURE] Enable uname collector on NetBSD #2559
  * [FEATURE] NetBSD support for the meminfo collector #2570
  * [FEATURE] NetBSD support for CPU collector #2626
  * [FEATURE] Add FreeBSD collector for netisr subsystem #2668
  * [FEATURE] Add softirqs collector #2669
  * [ENHANCEMENT] Add suspended as a `node_zfs_zpool_state` #2449
  * [ENHANCEMENT] Add administrative state of Linux network
    interfaces #2515
  * [ENHANCEMENT] Log current value of GOMAXPROCS #2537
  * [ENHANCEMENT] Add profiler options for perf collector #2542
  * [ENHANCEMENT] Allow root path as metrics path #2590
  * [ENHANCEMENT] Add cpu frequency governor metrics #2569
  * [ENHANCEMENT] Add new landing page #2622
  * [ENHANCEMENT] Reduce privileges needed for btrfs device stats
    [#2634]
  * [ENHANCEMENT] Add ZFS `memory_available_bytes` #2687
  * [ENHANCEMENT] Use `SCSI_IDENT_SERIAL` as serial in diskstats
    [#2612]
  * [ENHANCEMENT] Read missing from netlink netclass attributes
    from sysfs #2669
  * [BUGFIX] perf: fixes for automatically detecting the correct
    tracefs mountpoints #2553
  * [BUGFIX] Fix `thermal_zone` collector noise @2554
  * [BUGFIX] Fix a problem fetching the user wire count on FreeBSD
    2584
  * [BUGFIX] interrupts: Fix fields on linux aarch64 #2631
  * [BUGFIX] Remove metrics of offline CPUs in CPU collector #2605
  * [BUGFIX] Fix OpenBSD filesystem collector string parsing #2637
  * [BUGFIX] Fix bad reporting of `node_cpu_seconds_total` in
    OpenBSD #2663</changelog>
  <changelog author="kastl@b1-systems.de" date="1699876800">- update to 1.7.0 (jsc#PED-7893, jsc#PED-7928):
  * [FEATURE] Add ZFS freebsd per dataset stats #2753
  * [FEATURE] Add cpu vulnerabilities reporting from sysfs #2721
  * [ENHANCEMENT] Parallelize stat calls in Linux filesystem
    collector #1772
  * [ENHANCEMENT] Add missing linkspeeds to ethtool collector #2711
  * [ENHANCEMENT] Add CPU MHz as the value for node_cpu_info metric
    [#2778]
  * [ENHANCEMENT] Improve qdisc collector performance #2779
  * [ENHANCEMENT] Add include and exclude filter for hwmon
    collector #2699
  * [ENHANCEMENT] Optionally fetch ARP stats via rtnetlink instead
    of procfs #2777
  * [BUFFIX] Fix ZFS arcstats on FreeBSD 14.0+ 2754
  * [BUGFIX] Fallback to 32-bit stats in netdev #2757
  * [BUGFIX] Close btrfs.FS handle after use #2780
  * [BUGFIX] Move RO status before error return #2807
  * [BUFFIX] Fix promhttp_metric_handler_errors_total being always
    active #2808
  * [BUGFIX] Fix nfsd v4 index miss #2824
- update to 1.6.1:
  (no source code changes in this release)
- BuildRequire go1.20</changelog>
  <changelog author="witold.bedyk@suse.com" date="1707739200">- Add fix_arp_collector.patch
  Patch updates rtnetlink library to fix errors during ARP metrics
  collection.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1708689600">- Add add_device_error_label.patch
  Patch adds `device_error` label for filesystem metrics.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1713960000">- update to 1.8.0:
  * [CHANGE] exec_bsd: Fix labels for vm.stats.sys.v_syscall sysctl
    [#2895]
  * [CHANGE] diskstats: Ignore zram devices on linux systems #2898
  * [CHANGE] textfile: Avoid inconsistent help-texts #2962
  * [CHANGE] os: Removed caching of modtime/filename of os-release
    file #2987
  * [FEATURE] xfrm: Add new collector #2866
  * [FEATURE] watchdog: Add new collector #2880
  * [ENHANCEMENT] cpu_vulnerabilities: Add mitigation information
    label #2806
  * [ENHANCEMENT] nfsd: Handle new wdeleg_getattr attribute #2810
  * [ENHANCEMENT] netstat: Add TCPOFOQueue to default netstat
    metrics #2867
  * [ENHANCEMENT] filesystem: surface device errors #2923
  * [ENHANCEMENT] os: Add support end parsing #2982
  * [ENHANCEMENT] zfs: Log mib when sysctl read fails on FreeBSD
    [#2975]
  * [ENHANCEMENT] fibre_channel: update procfs to take into account
    optional attributes #2933
  * [BUGFIX] cpu: Fix debug log in cpu collector #2857
  * [BUGFIX] hwmon: Fix hwmon nil ptr #2873
  * [BUGFIX] hwmon: Fix hwmon error capture #2915
  * [BUGFIX] zfs: Revert "Add ZFS freebsd per dataset stats #2925
  * [BUGFIX] ethtool: Sanitize ethtool metric name keys #2940
  * [BUGFIX] fix: data race of NetClassCollector metrics
    initialization #2995
- drop patch fix_arp_collector.patch (see
  https://github.com/prometheus/node_exporter/blob/master/go.mod#L17)
- drop patch add_device_error_label.patch
  https://github.com/prometheus/node_exporter/pull/2923</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1716292800">- update to 1.8.1:
  * [BUGFIX] Fix CPU seconds on Solaris #2963
  * [BUGFIX] Sign Darwin/MacOS binaries #3008
  * [BUGFIX] Fix pressure collector nil reference #3016</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1720958400">- update to 1.8.2:
  * [BUGFIX] Fix CPU pressure metric collection #3054</changelog>
  <changelog author="witold.bedyk@suse.com" date="1737374400">- Packaging improvements:
  * Use systemd-sysusers to configure the user in a dedicated
    'system-user-prometheus' subpackage (bsc#1235516)
  * Remove systemd and shadow hard requirements
  * Require Go 1.22 or newer for building
  * Drop BuildRequires: golang-packaging
  * Drop mod=vendor
  * Run `node_exporter --version` in the %check phase</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1739793600">- refactor `_service` file and spec to use a nice tarball name
- update to 1.9.0 (jsc#PED-12485):
  * CVE-2023-45288: Bump golang.org/x/net to version 0.33.0
    (bsc#1236516)
  * [CHANGE] meminfo: Convert linux implementation to use procfs
    lib #3049
  * [CHANGE] Update logging to use Go log/slog #3097
  * [FEATURE] filesystem: Add node_filesystem_mount_info metric
    [#2970]
  * [FEATURE] btrfs: Add metrics for commit statistics #3010
  * [FEATURE] interrupts: Add collector include/exclude filtering
    [#3028]
  * [FEATURE] interrupts: Add "exclude zeros" filtering #3028
  * [FEATURE] slabinfo: Add filters for slab name. #3041
  * [FEATURE] pressure: add IRQ PSI metrics #3048
  * [FEATURE] hwmon: Add include and exclude filter for sensors
    [#3072]
  * [FEATURE] filesystem: Add NetBSD support #3082
  * [FEATURE] netdev: Add ifAlias label #3087
  * [FEATURE] hwmon: Add Support for GPU Clock Frequencies #3093
  * [FEATURE] Add exclude[] URL parameter #3116
  * [FEATURE] Add AIX support #3136
  * [FEATURE] filesystem: Add fs-types/mount-points include flags
    [#3171]
  * [FEATURE] netstat: Add collector for tcp packet counters for
    FreeBSD. #3177
  * [ENHANCEMENT] ethtool: Add logging for filtering flags #2979
  * [ENHANCEMENT] netstat: Add TCPRcvQDrop to default metrics #3021
  * [ENHANCEMENT] diskstats: Add block device rotational #3022
  * [ENHANCEMENT] cpu: Support CPU online status #3032
  * [ENHANCEMENT] arp: optimize interface name resolution #3133
  * [ENHANCEMENT] textfile: Allow specifiying multiple directory
    globs #3135
  * [ENHANCEMENT] filesystem: Add reporting of purgeable space on
    MacOS #3206
  * [ENHANCEMENT] ethtool: Skip full scan of NetClass directories
    [#3239]
  * [BUGFIX] zfs: Prevent procfs integer underflow #2961
  * [BUGFIX] pressure: Fix collection on systems that do not expose
    a full CPU stat #3054
  * [BUGFIX] cpu: Fix FreeBSD 32-bit host support and plug memory
    leak #3083
  * [BUGFIX] hwmon: Add safety check to hwmon read #3134
  * [BUGFIX] zfs: Allow space in dataset name #3186</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1743508800">- update to 1.9.1
  * [BUGFIX] pressure: Fix missing IRQ on older kernels #3263
  * [BUGFIX] Fix Darwin memory leak #3277
  * CVE-2025-22870: Bump golang.org/x/net to version 0.37.0
    (bsc#1238686)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1766145600">- Require gcc11-c++ for building with SLE 12</changelog>
</package>
<package pkgid="b8ad588d0556a7e1aa885f1ba93a238d4e91a030793d16c8153a5a9c1d871992" name="gpg2" arch="src">
  <version epoch="0" ver="2.4.4" rel="150600.3.12.1"/>
  <changelog author="pmonreal@suse.com" date="1678449600">- Temporarily revert back to the pre-2.4 default for key generation.
  The new rfc4880bis has been set as the default in 2.4 version and
  might create incompatible keys. Note that, rfc4880bis can still
  be used with the option flag --rfc4880bis as in previous versions.
  * More info in the gnupg-devel ML:
    https://lists.gnupg.org/pipermail/gnupg-devel/2022-December/035183.html
  * Reverted commit https://dev.gnupg.org/rGcaf4b3fc16e9
  * Add gnupg-revert-rfc4880bis.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682683200">- Update to 2.4.1:
  * If the ~/.gnupg directory does not exist, the keyboxd is now
    automagically enabled. [rGd9e7488b17]
  * gpg: New option --add-desig-revoker. [rG3d094e2bcf]
  * gpg: New option --assert-signer. [rGc9e95b8dee]
  * gpg: New command --quick-add-adsk and other ADSK features.
    [T6395, https://gnupg.org/blog/20230321-adsk.html]
  * gpg: New list-option "show-unusable-sigs". Also show "[self-signature]"
    instead of the user-id in key signature listings. [rG103acfe9ca]
  * gpg: For symmetric encryption the default S2K hash is now SHA256. [T6367]
  * gpg: Detect already compressed data also when using a pipe. Also
    detect JPEG and PNG file formats. [T6332]
  * gpg: New subcommand "openpgp" for --card-edit. [T6462]
  * gpgsm: Verification of detached signatures does now strip trailing
    zeroes from the input if --assume-binary is used. [rG2a13f7f9dc]
  * gpgsm: Non-armored detached signature are now created without
    using indefinite form length octets. This improves compatibility
    with some PDF signature verification software. [rG8996b0b655]
  * gpgtar: Emit progress status lines in create mode. [T6363]
  * dirmngr: The LDAP modifyTimestamp is now returned by some
    keyserver commands. [rG56d309133f]
  * ssh: Allow specification of the order keys are presented to ssh.
    See the man page entry for --enable-ssh-support. [T5996, T6212]
  * gpg: Make list-options "show-sig-subpackets" work again.
    Fixes regression in 2.4.0. [rG5a223303d7]
  * gpg: Fix the keytocard command for Yubikeys. [T6378]
  * gpg: Do not continue an export after a cancel for the primary key. [T6093]
  * gpg: Replace the --override-compliance-check hack by a real fix. [T5655]
  * gpgtar: Fix decryption with input taken from stdin. [T6355]
  * Rebase patches:
  - gnupg-revert-rfc4880bis.patch
  - gnupg-add_legacy_FIPS_mode_option.patch
  * Remove patch fixed upstream:
  - gnupg-tests-Fix-tests-gpgme-for-in-source-tree-builds.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1685448000">- Update to 2.4.2:
  * gpg: Print a warning if no more encryption subkeys are left over
    after changing the expiration date.  [rGef2c3d50fa]
  * gpg: Fix searching for the ADSK key when adding an ADSK.  [T6504]
  * gpgsm: Speed up key listings on Windows.  [rG08ff55bd44]
  * gpgsm: Reduce the number of "failed to open policy file"
    diagnostics.  [rG68613a6a9d]
  * agent: Make updating of private key files more robust and track
    display S/N.  [T6135]
  * keyboxd: Avoid longish delays on Windows when listing keys.
    [rG6944aefa3c]
  * gpgtar: Emit extra status lines to help GPGME.  [T6497]
  * w32: Avoid using the VirtualStore.  [T6403]
  * Rebase gnupg-add_legacy_FIPS_mode_option.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1688558400">- Update to 2.4.3:
  * gpg: Set default expiration date to 3 years. [T2701]
  * gpg: Add --list-filter properties "key_expires" and
    "key_expires_d". [T6529]
  * gpg: Emit status line and proper diagnostics for write errors. [T6528]
  * gpg: Make progress work for large files on Windows. [T6534]
  * gpg: New option --no-compress as alias for -z0.
  * gpgsm: Print PROGRESS status lines. Add new --input-size-hint. [T6534]
  * gpgsm: Support SENDCERT_SKI for --call-dirmngr. [rG701a8b30f0]
  * gpgsm: Major rewrite of the PKCS#12 parser. [T6536]
  * gpgtar: New option --no-compress.
  * dirmngr: Extend the AD_QUERY command. [rG207c99567c]
  * dirmngr: Disable the HTTP redirect rewriting. [T6477]
  * dirmngr: New option --compatibility-flags. [rGbf04b07327]
  * dirmngr: New option --ignore-crl-extensions. [T6545]
  * wkd: Use export-clean for gpg-wks-client's --mirror and --create
    commands. [rG2c7f7a5a27]
  * wkd: Make --add-revocs the default in gpg-wks-client. New option
  - -no-add-revocs. [rG10c937ee68]
  * scd: Make signing work for Nexus cards. [rGb83d86b988]
  * scd: Fix authentication with Administration Key for PIV. [rG25b59cf6ce]</changelog>
  <changelog author="pmonreal@suse.com" date="1691064000">- Revert back to use the IBM TPM Software stack.</changelog>
  <changelog author="pmonreal@suse.com" date="1695297600">- Install the systemd user units in the _userunitdir [bsc#1201564]
  * Note that, there is no activation by default.
  * Rework excludes in the spec's files section.</changelog>
  <changelog author="pmonreal@suse.com" date="1696852800">- Provide the systemd-user files since they have been removed
  upstream since version 2.4.1. [bsc#1201564]
  * Add gpg2-systemd-user.tar.xz</changelog>
  <changelog author="pmonreal@suse.com" date="1696939200">- Install the internal executables in the /usr/libexec dir instead
  of /usr/lib64. These files are keyboxd, scdaemon, gpg-auth
  gpg-check-pattern, gpg-pair-tool, gpg-preset-passphrase,
  gpg-protect-tool, gpg-wks-client, dirmngr_ldap and tpm2daemon.</changelog>
  <changelog author="pmonreal@suse.com" date="1697457600">- Fix Emacs EasyPG behavior when parsing output:
  * gpg: Report BEGIN_* status before examining the input.
  * Upstream task: https://dev.gnupg.org/T6481
  * Add gnupg-Report-BEGIN_-status-before-examining-the-input.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1697544000">- Do not pull revision info from GIT when autoconf is run. This
  removes the -unknown suffix after the version number.
  * Add gnupg-nobetasuffix.patch [bsc#1216334]</changelog>
  <changelog author="pmonreal@suse.com" date="1698667200">- Fix the build in SLE and Leap by adding an exclude in the files
  section for the dirmngr's systemd user units. [jsc#PED-7093]</changelog>
  <changelog author="pmonreal@suse.com" date="1706184000">- Update to 2.4.4: [bsc#1219191]
  * gpg: Do not keep an unprotected smartcard backup key on disk.
    See https://gnupg.org/blog/20240125-smartcard-backup-key.html
    for a security advisory. [T6944]
  * gpg: Allow to specify seconds since Epoch beyond 2038 on 32-bit
    platforms. [T6736]
  * gpg: Fix expiration time when Creation-Date is specified. [T5252]
  * gpg: Add support for Subkey-Expire-Date. [rG96b69c1866]
  * gpg: Add option --with-v5-fingerprint. [T6705]
  * gpg: Add sub-option ignore-attributes to --import-options.
  * gpg: Add --list-filter properties sig_expires/sig_expires_d.
  * gpg: Fix validity of re-imported keys. [T6399]
  * gpg: Report BEGIN_ status before examining the input. [T6481]
  * gpg: Don't try to compress a read-only keybox. [T6811]
  * gpg: Choose key from inserted card over a non-inserted card. [T6831]
  * gpg: Allow to create revocations even with non-compliant algos. [T6929]
  * gpg: Fix regression in the Revoker keyword of the parameter file. [T6923]
  * gpg: Improve error message for expired default keys. [T4704]
  * gpgsm: Add --always-trust feature. [T6559]
  * gpgsm: Support ECC certificates in de-vs mode. [T6802]
  * gpgsm: Major rewrite of the PKCS#12 parser. [T6536]
  * gpgsm: No not show the pkcs#12 passphrase in debug output. [T6654]
  * keyboxd: Timeout on failure to get the database lock. [T6838]
  * agent: Update the key stubs only if really modified. [T6829]
  * scd: Add support for certain Starcos 3.2 cards. [rG5304c9b080]
  * scd: Add support for CardOS 5.4 cards. [rG812f988059]
  * scd: Add support for D-Trust 4.1/4.4 cards. [rG0b85a9ac09]
  * scd: Add support for Smartcafe Expert 7.0 cards. [T6919]
  * scd: Add a length check for a new PIN. [T6843]
  * tpm: Fix keytotpm handling in the agent. [rG9909f622f6]
  * tpm: Fixes for the TPM test suite. [T6052]
  * dirmngr: New option --ignore-crl-extensions. [T6545]
  * dirmngr: Support config value "none" to disable the default
    keyserver. [T6708]
  * dirmngr: Fix handling of the HTTP Content-Length. [rGa5e33618f4]
  * gpgconf: Add commands --lock and --unlock. [rG93b5ba38dc]
  * gpgconf: Add keyword socketdir to gpgconf.ctl. [rG239c1fdc28]
  * gpgconf: Adjust the -X command for the new VERSION file format. [T6918]
  * wkd: Use export-clean for gpg-wks-client's --mirror and --create
    commands. [rG2c7f7a5a278c]
  * wkd: Make --add-revocs the default in gpg-wks-client. New option
  - -no-add-revocs. [rG10c937ee68]
  * Remove duplicated backslashes when setting the homedir. [T6833]
  * Ignore attempts to remove the /dev/null device. [T6556]
  * Improve advisory file lock retry strategy. [T3380]
  * Release-info: https://dev.gnupg.org/T6578
  * Remove patch upstream:
  - gnupg-Report-BEGIN_-status-before-examining-the-input.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1742212800">- Fix a verification DoS due to a malicious subkey in the keyring: [bsc#1239119]
  * Add patch gnupg-gpg-Fix-a-verification-DoS-due-to-a-malicious-subkey-in-the-keyring.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1748952000">- Don't install expired sks certificate [bsc#1243069]
  * Add patch gnupg-dirmngr-Don-t-install-expired-sks-certificate.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1750939200">- Security fix: [bsc#1236931, bsc#1239119, CVE-2025-30258]
  * gpg: Fix regression for the recent malicious subkey DoS fix.
  * gpg: Fix another regression due to the T7547 fix.
  * gpg: Allow the use of an ADSK subkey as ADSK subkey.
  * Add patches:
  - gnupg-gpg-Fix-regression-for-the-recent-malicious-subkey-D.patch
  - gnupg-gpg-Fix-another-regression-due-to-the-T7547-fix.patch
  - gnupg-gpg-Allow-the-use-of-an-ADSK-subkey-as-ADSK-subkey.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1767873600">- Security fix: [bsc#1256390] (gpg.fail/notdash)
  * gpg2: Cleartext Signature Forgery in the NotDashEscaped header
    implementation in GnuPG
  * Add patch gnupg-notdash-escape.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1767873601">- Security fix: [bsc#1256243]
  * gpg2 agent: Fix a memory leak
  * Add patch gnupg-agent-memleak.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767873602">- Security fix: [bsc#1256244] (gpg.fail/detached)
  * gpg: Error out on unverified output for non-detached signatures [T7903]
  * Add gnupg-gpg-Error-out-on-unverified-output-for-non-detached-signatures.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767873603">- Security fix: [bsc#1256246] (gpg.fail/sha1)
  * gpg: Avoid potential downgrade to SHA1 in 3rd party key signatures [T7904]
  * Add gnupg-gpg-Avoid-potential-downgrade-to-SHA1-in-3rd-party-keysig.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767873604">- Security fix: [bsc#1255715, CVE-2025-68973] (gpg.fail/memcpy)
  * gpg: Fix possible memory corruption in the armor parser [T7906]
  * Add gnupg-CVE-2025-68973.patch</changelog>
</package>
<package pkgid="29b2fbd67f06c8a2ec90ee97dad7f1d404de518280b491d852e26b4f717d4c72" name="gpg2" arch="x86_64">
  <version epoch="0" ver="2.4.4" rel="150600.3.12.1"/>
  <changelog author="pmonreal@suse.com" date="1678449600">- Temporarily revert back to the pre-2.4 default for key generation.
  The new rfc4880bis has been set as the default in 2.4 version and
  might create incompatible keys. Note that, rfc4880bis can still
  be used with the option flag --rfc4880bis as in previous versions.
  * More info in the gnupg-devel ML:
    https://lists.gnupg.org/pipermail/gnupg-devel/2022-December/035183.html
  * Reverted commit https://dev.gnupg.org/rGcaf4b3fc16e9
  * Add gnupg-revert-rfc4880bis.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682683200">- Update to 2.4.1:
  * If the ~/.gnupg directory does not exist, the keyboxd is now
    automagically enabled. [rGd9e7488b17]
  * gpg: New option --add-desig-revoker. [rG3d094e2bcf]
  * gpg: New option --assert-signer. [rGc9e95b8dee]
  * gpg: New command --quick-add-adsk and other ADSK features.
    [T6395, https://gnupg.org/blog/20230321-adsk.html]
  * gpg: New list-option "show-unusable-sigs". Also show "[self-signature]"
    instead of the user-id in key signature listings. [rG103acfe9ca]
  * gpg: For symmetric encryption the default S2K hash is now SHA256. [T6367]
  * gpg: Detect already compressed data also when using a pipe. Also
    detect JPEG and PNG file formats. [T6332]
  * gpg: New subcommand "openpgp" for --card-edit. [T6462]
  * gpgsm: Verification of detached signatures does now strip trailing
    zeroes from the input if --assume-binary is used. [rG2a13f7f9dc]
  * gpgsm: Non-armored detached signature are now created without
    using indefinite form length octets. This improves compatibility
    with some PDF signature verification software. [rG8996b0b655]
  * gpgtar: Emit progress status lines in create mode. [T6363]
  * dirmngr: The LDAP modifyTimestamp is now returned by some
    keyserver commands. [rG56d309133f]
  * ssh: Allow specification of the order keys are presented to ssh.
    See the man page entry for --enable-ssh-support. [T5996, T6212]
  * gpg: Make list-options "show-sig-subpackets" work again.
    Fixes regression in 2.4.0. [rG5a223303d7]
  * gpg: Fix the keytocard command for Yubikeys. [T6378]
  * gpg: Do not continue an export after a cancel for the primary key. [T6093]
  * gpg: Replace the --override-compliance-check hack by a real fix. [T5655]
  * gpgtar: Fix decryption with input taken from stdin. [T6355]
  * Rebase patches:
  - gnupg-revert-rfc4880bis.patch
  - gnupg-add_legacy_FIPS_mode_option.patch
  * Remove patch fixed upstream:
  - gnupg-tests-Fix-tests-gpgme-for-in-source-tree-builds.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1685448000">- Update to 2.4.2:
  * gpg: Print a warning if no more encryption subkeys are left over
    after changing the expiration date.  [rGef2c3d50fa]
  * gpg: Fix searching for the ADSK key when adding an ADSK.  [T6504]
  * gpgsm: Speed up key listings on Windows.  [rG08ff55bd44]
  * gpgsm: Reduce the number of "failed to open policy file"
    diagnostics.  [rG68613a6a9d]
  * agent: Make updating of private key files more robust and track
    display S/N.  [T6135]
  * keyboxd: Avoid longish delays on Windows when listing keys.
    [rG6944aefa3c]
  * gpgtar: Emit extra status lines to help GPGME.  [T6497]
  * w32: Avoid using the VirtualStore.  [T6403]
  * Rebase gnupg-add_legacy_FIPS_mode_option.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1688558400">- Update to 2.4.3:
  * gpg: Set default expiration date to 3 years. [T2701]
  * gpg: Add --list-filter properties "key_expires" and
    "key_expires_d". [T6529]
  * gpg: Emit status line and proper diagnostics for write errors. [T6528]
  * gpg: Make progress work for large files on Windows. [T6534]
  * gpg: New option --no-compress as alias for -z0.
  * gpgsm: Print PROGRESS status lines. Add new --input-size-hint. [T6534]
  * gpgsm: Support SENDCERT_SKI for --call-dirmngr. [rG701a8b30f0]
  * gpgsm: Major rewrite of the PKCS#12 parser. [T6536]
  * gpgtar: New option --no-compress.
  * dirmngr: Extend the AD_QUERY command. [rG207c99567c]
  * dirmngr: Disable the HTTP redirect rewriting. [T6477]
  * dirmngr: New option --compatibility-flags. [rGbf04b07327]
  * dirmngr: New option --ignore-crl-extensions. [T6545]
  * wkd: Use export-clean for gpg-wks-client's --mirror and --create
    commands. [rG2c7f7a5a27]
  * wkd: Make --add-revocs the default in gpg-wks-client. New option
  - -no-add-revocs. [rG10c937ee68]
  * scd: Make signing work for Nexus cards. [rGb83d86b988]
  * scd: Fix authentication with Administration Key for PIV. [rG25b59cf6ce]</changelog>
  <changelog author="pmonreal@suse.com" date="1691064000">- Revert back to use the IBM TPM Software stack.</changelog>
  <changelog author="pmonreal@suse.com" date="1695297600">- Install the systemd user units in the _userunitdir [bsc#1201564]
  * Note that, there is no activation by default.
  * Rework excludes in the spec's files section.</changelog>
  <changelog author="pmonreal@suse.com" date="1696852800">- Provide the systemd-user files since they have been removed
  upstream since version 2.4.1. [bsc#1201564]
  * Add gpg2-systemd-user.tar.xz</changelog>
  <changelog author="pmonreal@suse.com" date="1696939200">- Install the internal executables in the /usr/libexec dir instead
  of /usr/lib64. These files are keyboxd, scdaemon, gpg-auth
  gpg-check-pattern, gpg-pair-tool, gpg-preset-passphrase,
  gpg-protect-tool, gpg-wks-client, dirmngr_ldap and tpm2daemon.</changelog>
  <changelog author="pmonreal@suse.com" date="1697457600">- Fix Emacs EasyPG behavior when parsing output:
  * gpg: Report BEGIN_* status before examining the input.
  * Upstream task: https://dev.gnupg.org/T6481
  * Add gnupg-Report-BEGIN_-status-before-examining-the-input.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1697544000">- Do not pull revision info from GIT when autoconf is run. This
  removes the -unknown suffix after the version number.
  * Add gnupg-nobetasuffix.patch [bsc#1216334]</changelog>
  <changelog author="pmonreal@suse.com" date="1698667200">- Fix the build in SLE and Leap by adding an exclude in the files
  section for the dirmngr's systemd user units. [jsc#PED-7093]</changelog>
  <changelog author="pmonreal@suse.com" date="1706184000">- Update to 2.4.4: [bsc#1219191]
  * gpg: Do not keep an unprotected smartcard backup key on disk.
    See https://gnupg.org/blog/20240125-smartcard-backup-key.html
    for a security advisory. [T6944]
  * gpg: Allow to specify seconds since Epoch beyond 2038 on 32-bit
    platforms. [T6736]
  * gpg: Fix expiration time when Creation-Date is specified. [T5252]
  * gpg: Add support for Subkey-Expire-Date. [rG96b69c1866]
  * gpg: Add option --with-v5-fingerprint. [T6705]
  * gpg: Add sub-option ignore-attributes to --import-options.
  * gpg: Add --list-filter properties sig_expires/sig_expires_d.
  * gpg: Fix validity of re-imported keys. [T6399]
  * gpg: Report BEGIN_ status before examining the input. [T6481]
  * gpg: Don't try to compress a read-only keybox. [T6811]
  * gpg: Choose key from inserted card over a non-inserted card. [T6831]
  * gpg: Allow to create revocations even with non-compliant algos. [T6929]
  * gpg: Fix regression in the Revoker keyword of the parameter file. [T6923]
  * gpg: Improve error message for expired default keys. [T4704]
  * gpgsm: Add --always-trust feature. [T6559]
  * gpgsm: Support ECC certificates in de-vs mode. [T6802]
  * gpgsm: Major rewrite of the PKCS#12 parser. [T6536]
  * gpgsm: No not show the pkcs#12 passphrase in debug output. [T6654]
  * keyboxd: Timeout on failure to get the database lock. [T6838]
  * agent: Update the key stubs only if really modified. [T6829]
  * scd: Add support for certain Starcos 3.2 cards. [rG5304c9b080]
  * scd: Add support for CardOS 5.4 cards. [rG812f988059]
  * scd: Add support for D-Trust 4.1/4.4 cards. [rG0b85a9ac09]
  * scd: Add support for Smartcafe Expert 7.0 cards. [T6919]
  * scd: Add a length check for a new PIN. [T6843]
  * tpm: Fix keytotpm handling in the agent. [rG9909f622f6]
  * tpm: Fixes for the TPM test suite. [T6052]
  * dirmngr: New option --ignore-crl-extensions. [T6545]
  * dirmngr: Support config value "none" to disable the default
    keyserver. [T6708]
  * dirmngr: Fix handling of the HTTP Content-Length. [rGa5e33618f4]
  * gpgconf: Add commands --lock and --unlock. [rG93b5ba38dc]
  * gpgconf: Add keyword socketdir to gpgconf.ctl. [rG239c1fdc28]
  * gpgconf: Adjust the -X command for the new VERSION file format. [T6918]
  * wkd: Use export-clean for gpg-wks-client's --mirror and --create
    commands. [rG2c7f7a5a278c]
  * wkd: Make --add-revocs the default in gpg-wks-client. New option
  - -no-add-revocs. [rG10c937ee68]
  * Remove duplicated backslashes when setting the homedir. [T6833]
  * Ignore attempts to remove the /dev/null device. [T6556]
  * Improve advisory file lock retry strategy. [T3380]
  * Release-info: https://dev.gnupg.org/T6578
  * Remove patch upstream:
  - gnupg-Report-BEGIN_-status-before-examining-the-input.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1742212800">- Fix a verification DoS due to a malicious subkey in the keyring: [bsc#1239119]
  * Add patch gnupg-gpg-Fix-a-verification-DoS-due-to-a-malicious-subkey-in-the-keyring.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1748952000">- Don't install expired sks certificate [bsc#1243069]
  * Add patch gnupg-dirmngr-Don-t-install-expired-sks-certificate.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1750939200">- Security fix: [bsc#1236931, bsc#1239119, CVE-2025-30258]
  * gpg: Fix regression for the recent malicious subkey DoS fix.
  * gpg: Fix another regression due to the T7547 fix.
  * gpg: Allow the use of an ADSK subkey as ADSK subkey.
  * Add patches:
  - gnupg-gpg-Fix-regression-for-the-recent-malicious-subkey-D.patch
  - gnupg-gpg-Fix-another-regression-due-to-the-T7547-fix.patch
  - gnupg-gpg-Allow-the-use-of-an-ADSK-subkey-as-ADSK-subkey.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1767873600">- Security fix: [bsc#1256390] (gpg.fail/notdash)
  * gpg2: Cleartext Signature Forgery in the NotDashEscaped header
    implementation in GnuPG
  * Add patch gnupg-notdash-escape.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1767873601">- Security fix: [bsc#1256243]
  * gpg2 agent: Fix a memory leak
  * Add patch gnupg-agent-memleak.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767873602">- Security fix: [bsc#1256244] (gpg.fail/detached)
  * gpg: Error out on unverified output for non-detached signatures [T7903]
  * Add gnupg-gpg-Error-out-on-unverified-output-for-non-detached-signatures.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767873603">- Security fix: [bsc#1256246] (gpg.fail/sha1)
  * gpg: Avoid potential downgrade to SHA1 in 3rd party key signatures [T7904]
  * Add gnupg-gpg-Avoid-potential-downgrade-to-SHA1-in-3rd-party-keysig.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767873604">- Security fix: [bsc#1255715, CVE-2025-68973] (gpg.fail/memcpy)
  * gpg: Fix possible memory corruption in the armor parser [T7906]
  * Add gnupg-CVE-2025-68973.patch</changelog>
</package>
<package pkgid="3cf21ba363863e4339da047892f5560072e3469c4920fc44e11f90f01e58da41" name="gpg2" arch="src">
  <version epoch="0" ver="2.4.4" rel="150600.3.15.1"/>
  <changelog author="pmonreal@suse.com" date="1685448000">- Update to 2.4.2:
  * gpg: Print a warning if no more encryption subkeys are left over
    after changing the expiration date.  [rGef2c3d50fa]
  * gpg: Fix searching for the ADSK key when adding an ADSK.  [T6504]
  * gpgsm: Speed up key listings on Windows.  [rG08ff55bd44]
  * gpgsm: Reduce the number of "failed to open policy file"
    diagnostics.  [rG68613a6a9d]
  * agent: Make updating of private key files more robust and track
    display S/N.  [T6135]
  * keyboxd: Avoid longish delays on Windows when listing keys.
    [rG6944aefa3c]
  * gpgtar: Emit extra status lines to help GPGME.  [T6497]
  * w32: Avoid using the VirtualStore.  [T6403]
  * Rebase gnupg-add_legacy_FIPS_mode_option.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1688558400">- Update to 2.4.3:
  * gpg: Set default expiration date to 3 years. [T2701]
  * gpg: Add --list-filter properties "key_expires" and
    "key_expires_d". [T6529]
  * gpg: Emit status line and proper diagnostics for write errors. [T6528]
  * gpg: Make progress work for large files on Windows. [T6534]
  * gpg: New option --no-compress as alias for -z0.
  * gpgsm: Print PROGRESS status lines. Add new --input-size-hint. [T6534]
  * gpgsm: Support SENDCERT_SKI for --call-dirmngr. [rG701a8b30f0]
  * gpgsm: Major rewrite of the PKCS#12 parser. [T6536]
  * gpgtar: New option --no-compress.
  * dirmngr: Extend the AD_QUERY command. [rG207c99567c]
  * dirmngr: Disable the HTTP redirect rewriting. [T6477]
  * dirmngr: New option --compatibility-flags. [rGbf04b07327]
  * dirmngr: New option --ignore-crl-extensions. [T6545]
  * wkd: Use export-clean for gpg-wks-client's --mirror and --create
    commands. [rG2c7f7a5a27]
  * wkd: Make --add-revocs the default in gpg-wks-client. New option
  - -no-add-revocs. [rG10c937ee68]
  * scd: Make signing work for Nexus cards. [rGb83d86b988]
  * scd: Fix authentication with Administration Key for PIV. [rG25b59cf6ce]</changelog>
  <changelog author="pmonreal@suse.com" date="1691064000">- Revert back to use the IBM TPM Software stack.</changelog>
  <changelog author="pmonreal@suse.com" date="1695297600">- Install the systemd user units in the _userunitdir [bsc#1201564]
  * Note that, there is no activation by default.
  * Rework excludes in the spec's files section.</changelog>
  <changelog author="pmonreal@suse.com" date="1696852800">- Provide the systemd-user files since they have been removed
  upstream since version 2.4.1. [bsc#1201564]
  * Add gpg2-systemd-user.tar.xz</changelog>
  <changelog author="pmonreal@suse.com" date="1696939200">- Install the internal executables in the /usr/libexec dir instead
  of /usr/lib64. These files are keyboxd, scdaemon, gpg-auth
  gpg-check-pattern, gpg-pair-tool, gpg-preset-passphrase,
  gpg-protect-tool, gpg-wks-client, dirmngr_ldap and tpm2daemon.</changelog>
  <changelog author="pmonreal@suse.com" date="1697457600">- Fix Emacs EasyPG behavior when parsing output:
  * gpg: Report BEGIN_* status before examining the input.
  * Upstream task: https://dev.gnupg.org/T6481
  * Add gnupg-Report-BEGIN_-status-before-examining-the-input.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1697544000">- Do not pull revision info from GIT when autoconf is run. This
  removes the -unknown suffix after the version number.
  * Add gnupg-nobetasuffix.patch [bsc#1216334]</changelog>
  <changelog author="pmonreal@suse.com" date="1698667200">- Fix the build in SLE and Leap by adding an exclude in the files
  section for the dirmngr's systemd user units. [jsc#PED-7093]</changelog>
  <changelog author="pmonreal@suse.com" date="1706184000">- Update to 2.4.4: [bsc#1219191]
  * gpg: Do not keep an unprotected smartcard backup key on disk.
    See https://gnupg.org/blog/20240125-smartcard-backup-key.html
    for a security advisory. [T6944]
  * gpg: Allow to specify seconds since Epoch beyond 2038 on 32-bit
    platforms. [T6736]
  * gpg: Fix expiration time when Creation-Date is specified. [T5252]
  * gpg: Add support for Subkey-Expire-Date. [rG96b69c1866]
  * gpg: Add option --with-v5-fingerprint. [T6705]
  * gpg: Add sub-option ignore-attributes to --import-options.
  * gpg: Add --list-filter properties sig_expires/sig_expires_d.
  * gpg: Fix validity of re-imported keys. [T6399]
  * gpg: Report BEGIN_ status before examining the input. [T6481]
  * gpg: Don't try to compress a read-only keybox. [T6811]
  * gpg: Choose key from inserted card over a non-inserted card. [T6831]
  * gpg: Allow to create revocations even with non-compliant algos. [T6929]
  * gpg: Fix regression in the Revoker keyword of the parameter file. [T6923]
  * gpg: Improve error message for expired default keys. [T4704]
  * gpgsm: Add --always-trust feature. [T6559]
  * gpgsm: Support ECC certificates in de-vs mode. [T6802]
  * gpgsm: Major rewrite of the PKCS#12 parser. [T6536]
  * gpgsm: No not show the pkcs#12 passphrase in debug output. [T6654]
  * keyboxd: Timeout on failure to get the database lock. [T6838]
  * agent: Update the key stubs only if really modified. [T6829]
  * scd: Add support for certain Starcos 3.2 cards. [rG5304c9b080]
  * scd: Add support for CardOS 5.4 cards. [rG812f988059]
  * scd: Add support for D-Trust 4.1/4.4 cards. [rG0b85a9ac09]
  * scd: Add support for Smartcafe Expert 7.0 cards. [T6919]
  * scd: Add a length check for a new PIN. [T6843]
  * tpm: Fix keytotpm handling in the agent. [rG9909f622f6]
  * tpm: Fixes for the TPM test suite. [T6052]
  * dirmngr: New option --ignore-crl-extensions. [T6545]
  * dirmngr: Support config value "none" to disable the default
    keyserver. [T6708]
  * dirmngr: Fix handling of the HTTP Content-Length. [rGa5e33618f4]
  * gpgconf: Add commands --lock and --unlock. [rG93b5ba38dc]
  * gpgconf: Add keyword socketdir to gpgconf.ctl. [rG239c1fdc28]
  * gpgconf: Adjust the -X command for the new VERSION file format. [T6918]
  * wkd: Use export-clean for gpg-wks-client's --mirror and --create
    commands. [rG2c7f7a5a278c]
  * wkd: Make --add-revocs the default in gpg-wks-client. New option
  - -no-add-revocs. [rG10c937ee68]
  * Remove duplicated backslashes when setting the homedir. [T6833]
  * Ignore attempts to remove the /dev/null device. [T6556]
  * Improve advisory file lock retry strategy. [T3380]
  * Release-info: https://dev.gnupg.org/T6578
  * Remove patch upstream:
  - gnupg-Report-BEGIN_-status-before-examining-the-input.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1742212800">- Fix a verification DoS due to a malicious subkey in the keyring: [bsc#1239119]
  * Add patch gnupg-gpg-Fix-a-verification-DoS-due-to-a-malicious-subkey-in-the-keyring.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1748952000">- Don't install expired sks certificate [bsc#1243069]
  * Add patch gnupg-dirmngr-Don-t-install-expired-sks-certificate.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1750939200">- Security fix: [bsc#1236931, bsc#1239119, CVE-2025-30258]
  * gpg: Fix regression for the recent malicious subkey DoS fix.
  * gpg: Fix another regression due to the T7547 fix.
  * gpg: Allow the use of an ADSK subkey as ADSK subkey.
  * Add patches:
  - gnupg-gpg-Fix-regression-for-the-recent-malicious-subkey-D.patch
  - gnupg-gpg-Fix-another-regression-due-to-the-T7547-fix.patch
  - gnupg-gpg-Allow-the-use-of-an-ADSK-subkey-as-ADSK-subkey.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1767873600">- Security fix: [bsc#1256390] (gpg.fail/notdash)
  * gpg2: Cleartext Signature Forgery in the NotDashEscaped header
    implementation in GnuPG
  * Add patch gnupg-notdash-escape.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1767873601">- Security fix: [bsc#1256243]
  * gpg2 agent: Fix a memory leak
  * Add patch gnupg-agent-memleak.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767873602">- Security fix: [bsc#1256244] (gpg.fail/detached)
  * gpg: Error out on unverified output for non-detached signatures [T7903]
  * Add gnupg-gpg-Error-out-on-unverified-output-for-non-detached-signatures.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767873603">- Security fix: [bsc#1256246] (gpg.fail/sha1)
  * gpg: Avoid potential downgrade to SHA1 in 3rd party key signatures [T7904]
  * Add gnupg-gpg-Avoid-potential-downgrade-to-SHA1-in-3rd-party-keysig.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767873604">- Security fix: [bsc#1255715, CVE-2025-68973] (gpg.fail/memcpy)
  * gpg: Fix possible memory corruption in the armor parser [T7906]
  * Add gnupg-CVE-2025-68973.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1769601600">- Security fix: [bsc#1256389] (gpg.fail/filename)
  * GnuPG Accepts Path Separators and Path Traversals in Literal Data "Filename" Field
  * Add gnupg-accepts-path-separators-literal-data.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1769601601">- Security fix [bsc#1257396, CVE-2026-24882]
  - gpg2: stack-based buffer overflow in TPM2 PKDECRYPT for TPM-backed RSA and ECC keys
  - Added gnupg-CVE-2026-24882.patch</changelog>
</package>
<package pkgid="946cc4ffb28d716ceb70faca209cb787cc500a42c3687f323a79c862ba5ef6ab" name="gpg2" arch="x86_64">
  <version epoch="0" ver="2.4.4" rel="150600.3.15.1"/>
  <changelog author="pmonreal@suse.com" date="1685448000">- Update to 2.4.2:
  * gpg: Print a warning if no more encryption subkeys are left over
    after changing the expiration date.  [rGef2c3d50fa]
  * gpg: Fix searching for the ADSK key when adding an ADSK.  [T6504]
  * gpgsm: Speed up key listings on Windows.  [rG08ff55bd44]
  * gpgsm: Reduce the number of "failed to open policy file"
    diagnostics.  [rG68613a6a9d]
  * agent: Make updating of private key files more robust and track
    display S/N.  [T6135]
  * keyboxd: Avoid longish delays on Windows when listing keys.
    [rG6944aefa3c]
  * gpgtar: Emit extra status lines to help GPGME.  [T6497]
  * w32: Avoid using the VirtualStore.  [T6403]
  * Rebase gnupg-add_legacy_FIPS_mode_option.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1688558400">- Update to 2.4.3:
  * gpg: Set default expiration date to 3 years. [T2701]
  * gpg: Add --list-filter properties "key_expires" and
    "key_expires_d". [T6529]
  * gpg: Emit status line and proper diagnostics for write errors. [T6528]
  * gpg: Make progress work for large files on Windows. [T6534]
  * gpg: New option --no-compress as alias for -z0.
  * gpgsm: Print PROGRESS status lines. Add new --input-size-hint. [T6534]
  * gpgsm: Support SENDCERT_SKI for --call-dirmngr. [rG701a8b30f0]
  * gpgsm: Major rewrite of the PKCS#12 parser. [T6536]
  * gpgtar: New option --no-compress.
  * dirmngr: Extend the AD_QUERY command. [rG207c99567c]
  * dirmngr: Disable the HTTP redirect rewriting. [T6477]
  * dirmngr: New option --compatibility-flags. [rGbf04b07327]
  * dirmngr: New option --ignore-crl-extensions. [T6545]
  * wkd: Use export-clean for gpg-wks-client's --mirror and --create
    commands. [rG2c7f7a5a27]
  * wkd: Make --add-revocs the default in gpg-wks-client. New option
  - -no-add-revocs. [rG10c937ee68]
  * scd: Make signing work for Nexus cards. [rGb83d86b988]
  * scd: Fix authentication with Administration Key for PIV. [rG25b59cf6ce]</changelog>
  <changelog author="pmonreal@suse.com" date="1691064000">- Revert back to use the IBM TPM Software stack.</changelog>
  <changelog author="pmonreal@suse.com" date="1695297600">- Install the systemd user units in the _userunitdir [bsc#1201564]
  * Note that, there is no activation by default.
  * Rework excludes in the spec's files section.</changelog>
  <changelog author="pmonreal@suse.com" date="1696852800">- Provide the systemd-user files since they have been removed
  upstream since version 2.4.1. [bsc#1201564]
  * Add gpg2-systemd-user.tar.xz</changelog>
  <changelog author="pmonreal@suse.com" date="1696939200">- Install the internal executables in the /usr/libexec dir instead
  of /usr/lib64. These files are keyboxd, scdaemon, gpg-auth
  gpg-check-pattern, gpg-pair-tool, gpg-preset-passphrase,
  gpg-protect-tool, gpg-wks-client, dirmngr_ldap and tpm2daemon.</changelog>
  <changelog author="pmonreal@suse.com" date="1697457600">- Fix Emacs EasyPG behavior when parsing output:
  * gpg: Report BEGIN_* status before examining the input.
  * Upstream task: https://dev.gnupg.org/T6481
  * Add gnupg-Report-BEGIN_-status-before-examining-the-input.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1697544000">- Do not pull revision info from GIT when autoconf is run. This
  removes the -unknown suffix after the version number.
  * Add gnupg-nobetasuffix.patch [bsc#1216334]</changelog>
  <changelog author="pmonreal@suse.com" date="1698667200">- Fix the build in SLE and Leap by adding an exclude in the files
  section for the dirmngr's systemd user units. [jsc#PED-7093]</changelog>
  <changelog author="pmonreal@suse.com" date="1706184000">- Update to 2.4.4: [bsc#1219191]
  * gpg: Do not keep an unprotected smartcard backup key on disk.
    See https://gnupg.org/blog/20240125-smartcard-backup-key.html
    for a security advisory. [T6944]
  * gpg: Allow to specify seconds since Epoch beyond 2038 on 32-bit
    platforms. [T6736]
  * gpg: Fix expiration time when Creation-Date is specified. [T5252]
  * gpg: Add support for Subkey-Expire-Date. [rG96b69c1866]
  * gpg: Add option --with-v5-fingerprint. [T6705]
  * gpg: Add sub-option ignore-attributes to --import-options.
  * gpg: Add --list-filter properties sig_expires/sig_expires_d.
  * gpg: Fix validity of re-imported keys. [T6399]
  * gpg: Report BEGIN_ status before examining the input. [T6481]
  * gpg: Don't try to compress a read-only keybox. [T6811]
  * gpg: Choose key from inserted card over a non-inserted card. [T6831]
  * gpg: Allow to create revocations even with non-compliant algos. [T6929]
  * gpg: Fix regression in the Revoker keyword of the parameter file. [T6923]
  * gpg: Improve error message for expired default keys. [T4704]
  * gpgsm: Add --always-trust feature. [T6559]
  * gpgsm: Support ECC certificates in de-vs mode. [T6802]
  * gpgsm: Major rewrite of the PKCS#12 parser. [T6536]
  * gpgsm: No not show the pkcs#12 passphrase in debug output. [T6654]
  * keyboxd: Timeout on failure to get the database lock. [T6838]
  * agent: Update the key stubs only if really modified. [T6829]
  * scd: Add support for certain Starcos 3.2 cards. [rG5304c9b080]
  * scd: Add support for CardOS 5.4 cards. [rG812f988059]
  * scd: Add support for D-Trust 4.1/4.4 cards. [rG0b85a9ac09]
  * scd: Add support for Smartcafe Expert 7.0 cards. [T6919]
  * scd: Add a length check for a new PIN. [T6843]
  * tpm: Fix keytotpm handling in the agent. [rG9909f622f6]
  * tpm: Fixes for the TPM test suite. [T6052]
  * dirmngr: New option --ignore-crl-extensions. [T6545]
  * dirmngr: Support config value "none" to disable the default
    keyserver. [T6708]
  * dirmngr: Fix handling of the HTTP Content-Length. [rGa5e33618f4]
  * gpgconf: Add commands --lock and --unlock. [rG93b5ba38dc]
  * gpgconf: Add keyword socketdir to gpgconf.ctl. [rG239c1fdc28]
  * gpgconf: Adjust the -X command for the new VERSION file format. [T6918]
  * wkd: Use export-clean for gpg-wks-client's --mirror and --create
    commands. [rG2c7f7a5a278c]
  * wkd: Make --add-revocs the default in gpg-wks-client. New option
  - -no-add-revocs. [rG10c937ee68]
  * Remove duplicated backslashes when setting the homedir. [T6833]
  * Ignore attempts to remove the /dev/null device. [T6556]
  * Improve advisory file lock retry strategy. [T3380]
  * Release-info: https://dev.gnupg.org/T6578
  * Remove patch upstream:
  - gnupg-Report-BEGIN_-status-before-examining-the-input.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1742212800">- Fix a verification DoS due to a malicious subkey in the keyring: [bsc#1239119]
  * Add patch gnupg-gpg-Fix-a-verification-DoS-due-to-a-malicious-subkey-in-the-keyring.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1748952000">- Don't install expired sks certificate [bsc#1243069]
  * Add patch gnupg-dirmngr-Don-t-install-expired-sks-certificate.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1750939200">- Security fix: [bsc#1236931, bsc#1239119, CVE-2025-30258]
  * gpg: Fix regression for the recent malicious subkey DoS fix.
  * gpg: Fix another regression due to the T7547 fix.
  * gpg: Allow the use of an ADSK subkey as ADSK subkey.
  * Add patches:
  - gnupg-gpg-Fix-regression-for-the-recent-malicious-subkey-D.patch
  - gnupg-gpg-Fix-another-regression-due-to-the-T7547-fix.patch
  - gnupg-gpg-Allow-the-use-of-an-ADSK-subkey-as-ADSK-subkey.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1767873600">- Security fix: [bsc#1256390] (gpg.fail/notdash)
  * gpg2: Cleartext Signature Forgery in the NotDashEscaped header
    implementation in GnuPG
  * Add patch gnupg-notdash-escape.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1767873601">- Security fix: [bsc#1256243]
  * gpg2 agent: Fix a memory leak
  * Add patch gnupg-agent-memleak.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767873602">- Security fix: [bsc#1256244] (gpg.fail/detached)
  * gpg: Error out on unverified output for non-detached signatures [T7903]
  * Add gnupg-gpg-Error-out-on-unverified-output-for-non-detached-signatures.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767873603">- Security fix: [bsc#1256246] (gpg.fail/sha1)
  * gpg: Avoid potential downgrade to SHA1 in 3rd party key signatures [T7904]
  * Add gnupg-gpg-Avoid-potential-downgrade-to-SHA1-in-3rd-party-keysig.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767873604">- Security fix: [bsc#1255715, CVE-2025-68973] (gpg.fail/memcpy)
  * gpg: Fix possible memory corruption in the armor parser [T7906]
  * Add gnupg-CVE-2025-68973.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1769601600">- Security fix: [bsc#1256389] (gpg.fail/filename)
  * GnuPG Accepts Path Separators and Path Traversals in Literal Data "Filename" Field
  * Add gnupg-accepts-path-separators-literal-data.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1769601601">- Security fix [bsc#1257396, CVE-2026-24882]
  - gpg2: stack-based buffer overflow in TPM2 PKDECRYPT for TPM-backed RSA and ECC keys
  - Added gnupg-CVE-2026-24882.patch</changelog>
</package>
<package pkgid="32437b5d76026907407ce242307f29ed67cd8eb0ccf48ec255fb0e97de2534ac" name="gpg2" arch="src">
  <version epoch="0" ver="2.4.4" rel="150600.3.9.1"/>
  <changelog author="pmonreal@suse.com" date="1666008000">- GnuPG 2.3.8:
  * gpg: Do not consider unknown public keys as non-compliant while
    decrypting.
  * gpg: Avoid to emit a compliance mode line if Libgcrypt is
    non-compliant.
  * gpg: Improve --edit-key setpref command to ease c+p.
  * gpg: Emit an ERROR status if --quick-set-primary-uid fails and
    allow to pass the user ID by hash.
  * gpg: Actually show symmetric+pubkey encrypted data as de-vs
    compliant.  Add extra compliance checks for symkey_enc packets.
  * gpg: In de-vs mode use SHA-256 instead of SHA-1 as implicit
    preference.
  * gpgsm: Fix reporting of bad passphrase error during PKCS#11
    import.
  * agent: Fix a regression in "READKEY --format=ssh".
  * agent: New option --need-attr for KEYINFO.
  * agent: New attribute "Remote-list" for use by KEYINFO.
  * scd: Fix problem with Yubikey 5.4 firmware.
  * dirmngr: Fix CRL Distribution Point fallback to other schemes.
  * dirmngr: New LDAP server flag "areconly" (A-record-only).
  * dirmngr: Fix upload of multiple keys for an LDAP server specified
    using the colon format.
  * dirmngr: Use LDAP schema v2 when a Base DN is specified.
  * dirmngr: Avoid caching expired certificates.
  * wkd: Fix path traversal attack in gpg-wks-server. Add the mail
    address to the pending request data.
  * wkd: New command --mirror for gpg-wks-client.
  * gpg-auth: New tool for authentication.
  * New common.conf option no-autostart.
  * Silence warnings from AllowSetForegroundWindow unless
    GNUPG_EXEC_DEBUG_FLAGS is used.
  * Rebase gnupg-detect_FIPS_mode.patch
  * Remove patch upstream:
  - gnupg-2.3.7-scd-openpgp-Fix-workaround-for-Yubikey-heuristics.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671537600">- Updated to require libgpg-error-devel &gt;= 1.46
- Rebased patches:
  * gnupg-allow-import-of-previously-known-keys-even-without-UIDs.patch
  * gnupg-add_legacy_FIPS_mode_option.patch
- GnuPG 2.4.0:
  * common: Fix translations in --help for gpgrt &lt; 1.47.
  * gpg: Do not continue the export after a cancel for the primary key.
  * gpg: Replace use of PRIu64 in log_debug.
  * Update NEWS for 2.4.0.
  * tests: Fix make check with GPGME.
  * agent: Allow arguments to "scd serialno" in restricted mode.
  * scd:p15: Skip deleted records.
  * build: Remove Windows CE support.
  * wkd: Do not send/install/mirror expired user ids.
  * gpgsm: Print the revocation time also with --verify.
  * gpgsm: Fix "problem re-searching certificate" case.
  * gpgsm: Print revocation date and reason in cert listings.
  * gpgsm: Silence the "non-critical certificate policy not allowed".
  * gpgsm: Always use the chain model if the root-CA requests this.
  * gpg: New export option "mode1003".
  * gpg: Remove a mostly duplicated function.
  * tests: Simplify fake-pinentry to use the option only.
  * tests: Fix fake-pinentry for Windows.
  * tests: Fix make check-all.
  * agent: Fix import of protected v5 keys.
  * gpgsm: Change default algo to AES-256.
  * tests: Put a workaround for semihosted environment.
  * tests: More fix for semihosted environment.
  * tests: Support semihosted environment.
  * tests: Fix tests under cms.
  * tests,w32: Fix for semihosted environment.
  * w32: Fix for tests on semihosted environment.
  * w32: Fix gnupg_unsetenv.
  * wkd: New option --add-revocs and some fixes.
  * wkd: Make use of --debug extprog.
  * gpg: New export-filter export-revocs.
  * gpg: Fix double-free in gpg --card-edit.
  * gpg: Make --require-compliance work with out --status-fd.
  * gpg: New option --list-filter.
  * dirmngr: Silence ocsp debug output.
  * tests: Fix to support --enable-all-tests and variants.
  * tests:w32: Fix for non-dot file name for Windows.
  * tests:gpgscm:w32: Fix for GetTempPath.
  * tests: Keep .log files in objdir.
  * tests: Use 233 for invalid value of FD.
  * w32: Fix gnupg_tmpfile for possible failure.
  * scd: Redact --debug cardio output of a VERIFY APDU.
  * common: Remove Windows CE support in common.
  * gpgsm: Fix colon outout of ECC encryption certificates.
  * scd:nks: Fix ECC signing if key not given by keygrip.
  * dirmngr: Fix verification of ECDSA signed CRLs.
  * agent: Allow trustlist on Windows in Unicode homedirs.
  * gpg: Fix verification of cleartext signatures with overlong lines.
  * gpg: Move w32_system function.
  * gpg: New option --quick-update-pref.
  * gpg: New list-options show-pref and show-pref-verbose.
  * tests: Add tests to check that OCB is only used for capable keys.
  * gpg: Make --list-packets work w/o --no-armor for plain OCB packets.
  * tests: Add symmetric decryption tests.
  * tests: Add tr:assert-same function.
  * agent: Avoid blanks in the ssh key's comment.
  * build: Update m4 files.
  * gpg: Merge --rfc4880bis features into --gnupg.
  * gpg: Allow only OCB for AEAD encryption.
  * gpg: New option --compatibility-flags.
  * gpgsm: Also announce AES256-CBC in signatures.
  * gpg: Fix trusted introducer for user-ids with only the mbox.
  * gpg: Import stray revocation certificates.
  * agent: Automatically convert to extended key format by KEYATTR.
  * card: New commands "gpg" and "gpgsm".
  * card: Also show fingerprints of known X.509 certificates.
  * scd:nks: Support non-ESIGN signing with the Signature Card v2.
  * gpgsm: Allow ECC encryption keys with just keyAgreement specified.
  * gpgsm: Use macro constants for cert_usage_p.
  * build: Update gpg-error.m4.
  * agent,common,dirmngr,tests,tools: Remove spawn PREEXEC argument.
  * gpg: Move NETLIBS after GPG_ERROR_LIBS.
  * gpg: Use GCRY_KDF_ONESTEP_KDF with newer libgcrypt in future.
  * common,w32: Fix struct stat on Windows.
  * agent,w32: Support Win32-OpenSSH emulation by gpg-agent.
  * common: Don't use FD2INT for POSIX-only code.
  * dirmngr: Fix build with no LDAP support.</changelog>
  <changelog author="pmonreal@suse.com" date="1673438400">- Fix broken GPGME QT tests: Upstram dev task dev.gnupg.org/T6313
  * The original patch has been modified to expand the changes
    also to the tests/gpgme/Makefile.in file.
  * Add gnupg-tests-Fix-tests-gpgme-for-in-source-tree-builds.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Fix the regression test suite fails with the IBM TPM Software
  stack. Builds fine using the Intel TPM; use the swtpm and
  tpm2-0-tss-devel packages instead of ibmswtpm2 and ibmtss-devel.</changelog>
  <changelog author="pmonreal@suse.com" date="1678449600">- Allow 8192 bit RSA keys in keygen UI when large_rsa is set
  * Add gnupg-allow-large-rsa.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678449601">- Temporarily revert back to the pre-2.4 default for key generation.
  The new rfc4880bis has been set as the default in 2.4 version and
  might create incompatible keys. Note that, rfc4880bis can still
  be used with the option flag --rfc4880bis as in previous versions.
  * More info in the gnupg-devel ML:
    https://lists.gnupg.org/pipermail/gnupg-devel/2022-December/035183.html
  * Reverted commit https://dev.gnupg.org/rGcaf4b3fc16e9
  * Add gnupg-revert-rfc4880bis.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682683200">- Update to 2.4.1:
  * If the ~/.gnupg directory does not exist, the keyboxd is now
    automagically enabled. [rGd9e7488b17]
  * gpg: New option --add-desig-revoker. [rG3d094e2bcf]
  * gpg: New option --assert-signer. [rGc9e95b8dee]
  * gpg: New command --quick-add-adsk and other ADSK features.
    [T6395, https://gnupg.org/blog/20230321-adsk.html]
  * gpg: New list-option "show-unusable-sigs". Also show "[self-signature]"
    instead of the user-id in key signature listings. [rG103acfe9ca]
  * gpg: For symmetric encryption the default S2K hash is now SHA256. [T6367]
  * gpg: Detect already compressed data also when using a pipe. Also
    detect JPEG and PNG file formats. [T6332]
  * gpg: New subcommand "openpgp" for --card-edit. [T6462]
  * gpgsm: Verification of detached signatures does now strip trailing
    zeroes from the input if --assume-binary is used. [rG2a13f7f9dc]
  * gpgsm: Non-armored detached signature are now created without
    using indefinite form length octets. This improves compatibility
    with some PDF signature verification software. [rG8996b0b655]
  * gpgtar: Emit progress status lines in create mode. [T6363]
  * dirmngr: The LDAP modifyTimestamp is now returned by some
    keyserver commands. [rG56d309133f]
  * ssh: Allow specification of the order keys are presented to ssh.
    See the man page entry for --enable-ssh-support. [T5996, T6212]
  * gpg: Make list-options "show-sig-subpackets" work again.
    Fixes regression in 2.4.0. [rG5a223303d7]
  * gpg: Fix the keytocard command for Yubikeys. [T6378]
  * gpg: Do not continue an export after a cancel for the primary key. [T6093]
  * gpg: Replace the --override-compliance-check hack by a real fix. [T5655]
  * gpgtar: Fix decryption with input taken from stdin. [T6355]
  * Rebase patches:
  - gnupg-revert-rfc4880bis.patch
  - gnupg-add_legacy_FIPS_mode_option.patch
  * Remove patch fixed upstream:
  - gnupg-tests-Fix-tests-gpgme-for-in-source-tree-builds.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1685448000">- Update to 2.4.2:
  * gpg: Print a warning if no more encryption subkeys are left over
    after changing the expiration date.  [rGef2c3d50fa]
  * gpg: Fix searching for the ADSK key when adding an ADSK.  [T6504]
  * gpgsm: Speed up key listings on Windows.  [rG08ff55bd44]
  * gpgsm: Reduce the number of "failed to open policy file"
    diagnostics.  [rG68613a6a9d]
  * agent: Make updating of private key files more robust and track
    display S/N.  [T6135]
  * keyboxd: Avoid longish delays on Windows when listing keys.
    [rG6944aefa3c]
  * gpgtar: Emit extra status lines to help GPGME.  [T6497]
  * w32: Avoid using the VirtualStore.  [T6403]
  * Rebase gnupg-add_legacy_FIPS_mode_option.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1688558400">- Update to 2.4.3:
  * gpg: Set default expiration date to 3 years. [T2701]
  * gpg: Add --list-filter properties "key_expires" and
    "key_expires_d". [T6529]
  * gpg: Emit status line and proper diagnostics for write errors. [T6528]
  * gpg: Make progress work for large files on Windows. [T6534]
  * gpg: New option --no-compress as alias for -z0.
  * gpgsm: Print PROGRESS status lines. Add new --input-size-hint. [T6534]
  * gpgsm: Support SENDCERT_SKI for --call-dirmngr. [rG701a8b30f0]
  * gpgsm: Major rewrite of the PKCS#12 parser. [T6536]
  * gpgtar: New option --no-compress.
  * dirmngr: Extend the AD_QUERY command. [rG207c99567c]
  * dirmngr: Disable the HTTP redirect rewriting. [T6477]
  * dirmngr: New option --compatibility-flags. [rGbf04b07327]
  * dirmngr: New option --ignore-crl-extensions. [T6545]
  * wkd: Use export-clean for gpg-wks-client's --mirror and --create
    commands. [rG2c7f7a5a27]
  * wkd: Make --add-revocs the default in gpg-wks-client. New option
  - -no-add-revocs. [rG10c937ee68]
  * scd: Make signing work for Nexus cards. [rGb83d86b988]
  * scd: Fix authentication with Administration Key for PIV. [rG25b59cf6ce]</changelog>
  <changelog author="pmonreal@suse.com" date="1691064000">- Revert back to use the IBM TPM Software stack.</changelog>
  <changelog author="pmonreal@suse.com" date="1695297600">- Install the systemd user units in the _userunitdir [bsc#1201564]
  * Note that, there is no activation by default.
  * Rework excludes in the spec's files section.</changelog>
  <changelog author="pmonreal@suse.com" date="1696852800">- Provide the systemd-user files since they have been removed
  upstream since version 2.4.1. [bsc#1201564]
  * Add gpg2-systemd-user.tar.xz</changelog>
  <changelog author="pmonreal@suse.com" date="1696939200">- Install the internal executables in the /usr/libexec dir instead
  of /usr/lib64. These files are keyboxd, scdaemon, gpg-auth
  gpg-check-pattern, gpg-pair-tool, gpg-preset-passphrase,
  gpg-protect-tool, gpg-wks-client, dirmngr_ldap and tpm2daemon.</changelog>
  <changelog author="pmonreal@suse.com" date="1697457600">- Fix Emacs EasyPG behavior when parsing output:
  * gpg: Report BEGIN_* status before examining the input.
  * Upstream task: https://dev.gnupg.org/T6481
  * Add gnupg-Report-BEGIN_-status-before-examining-the-input.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1697544000">- Do not pull revision info from GIT when autoconf is run. This
  removes the -unknown suffix after the version number.
  * Add gnupg-nobetasuffix.patch [bsc#1216334]</changelog>
  <changelog author="pmonreal@suse.com" date="1698667200">- Fix the build in SLE and Leap by adding an exclude in the files
  section for the dirmngr's systemd user units. [jsc#PED-7093]</changelog>
  <changelog author="pmonreal@suse.com" date="1706184000">- Update to 2.4.4: [bsc#1219191]
  * gpg: Do not keep an unprotected smartcard backup key on disk.
    See https://gnupg.org/blog/20240125-smartcard-backup-key.html
    for a security advisory. [T6944]
  * gpg: Allow to specify seconds since Epoch beyond 2038 on 32-bit
    platforms. [T6736]
  * gpg: Fix expiration time when Creation-Date is specified. [T5252]
  * gpg: Add support for Subkey-Expire-Date. [rG96b69c1866]
  * gpg: Add option --with-v5-fingerprint. [T6705]
  * gpg: Add sub-option ignore-attributes to --import-options.
  * gpg: Add --list-filter properties sig_expires/sig_expires_d.
  * gpg: Fix validity of re-imported keys. [T6399]
  * gpg: Report BEGIN_ status before examining the input. [T6481]
  * gpg: Don't try to compress a read-only keybox. [T6811]
  * gpg: Choose key from inserted card over a non-inserted card. [T6831]
  * gpg: Allow to create revocations even with non-compliant algos. [T6929]
  * gpg: Fix regression in the Revoker keyword of the parameter file. [T6923]
  * gpg: Improve error message for expired default keys. [T4704]
  * gpgsm: Add --always-trust feature. [T6559]
  * gpgsm: Support ECC certificates in de-vs mode. [T6802]
  * gpgsm: Major rewrite of the PKCS#12 parser. [T6536]
  * gpgsm: No not show the pkcs#12 passphrase in debug output. [T6654]
  * keyboxd: Timeout on failure to get the database lock. [T6838]
  * agent: Update the key stubs only if really modified. [T6829]
  * scd: Add support for certain Starcos 3.2 cards. [rG5304c9b080]
  * scd: Add support for CardOS 5.4 cards. [rG812f988059]
  * scd: Add support for D-Trust 4.1/4.4 cards. [rG0b85a9ac09]
  * scd: Add support for Smartcafe Expert 7.0 cards. [T6919]
  * scd: Add a length check for a new PIN. [T6843]
  * tpm: Fix keytotpm handling in the agent. [rG9909f622f6]
  * tpm: Fixes for the TPM test suite. [T6052]
  * dirmngr: New option --ignore-crl-extensions. [T6545]
  * dirmngr: Support config value "none" to disable the default
    keyserver. [T6708]
  * dirmngr: Fix handling of the HTTP Content-Length. [rGa5e33618f4]
  * gpgconf: Add commands --lock and --unlock. [rG93b5ba38dc]
  * gpgconf: Add keyword socketdir to gpgconf.ctl. [rG239c1fdc28]
  * gpgconf: Adjust the -X command for the new VERSION file format. [T6918]
  * wkd: Use export-clean for gpg-wks-client's --mirror and --create
    commands. [rG2c7f7a5a278c]
  * wkd: Make --add-revocs the default in gpg-wks-client. New option
  - -no-add-revocs. [rG10c937ee68]
  * Remove duplicated backslashes when setting the homedir. [T6833]
  * Ignore attempts to remove the /dev/null device. [T6556]
  * Improve advisory file lock retry strategy. [T3380]
  * Release-info: https://dev.gnupg.org/T6578
  * Remove patch upstream:
  - gnupg-Report-BEGIN_-status-before-examining-the-input.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1742212800">- Fix a verification DoS due to a malicious subkey in the keyring: [bsc#1239119]
  * Add patch gnupg-gpg-Fix-a-verification-DoS-due-to-a-malicious-subkey-in-the-keyring.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1748952000">- Don't install expired sks certificate [bsc#1243069]
  * Add patch gnupg-dirmngr-Don-t-install-expired-sks-certificate.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1750939200">- Security fix: [bsc#1236931, bsc#1239119, CVE-2025-30258]
  * gpg: Fix regression for the recent malicious subkey DoS fix.
  * gpg: Fix another regression due to the T7547 fix.
  * gpg: Allow the use of an ADSK subkey as ADSK subkey.
  * Add patches:
  - gnupg-gpg-Fix-regression-for-the-recent-malicious-subkey-D.patch
  - gnupg-gpg-Fix-another-regression-due-to-the-T7547-fix.patch
  - gnupg-gpg-Allow-the-use-of-an-ADSK-subkey-as-ADSK-subkey.patch</changelog>
</package>
<package pkgid="9fc79c08bd2731725f59b62f253b6af874c77ce553ac87097dfce8f1144c640a" name="gpg2" arch="x86_64">
  <version epoch="0" ver="2.4.4" rel="150600.3.9.1"/>
  <changelog author="pmonreal@suse.com" date="1666008000">- GnuPG 2.3.8:
  * gpg: Do not consider unknown public keys as non-compliant while
    decrypting.
  * gpg: Avoid to emit a compliance mode line if Libgcrypt is
    non-compliant.
  * gpg: Improve --edit-key setpref command to ease c+p.
  * gpg: Emit an ERROR status if --quick-set-primary-uid fails and
    allow to pass the user ID by hash.
  * gpg: Actually show symmetric+pubkey encrypted data as de-vs
    compliant.  Add extra compliance checks for symkey_enc packets.
  * gpg: In de-vs mode use SHA-256 instead of SHA-1 as implicit
    preference.
  * gpgsm: Fix reporting of bad passphrase error during PKCS#11
    import.
  * agent: Fix a regression in "READKEY --format=ssh".
  * agent: New option --need-attr for KEYINFO.
  * agent: New attribute "Remote-list" for use by KEYINFO.
  * scd: Fix problem with Yubikey 5.4 firmware.
  * dirmngr: Fix CRL Distribution Point fallback to other schemes.
  * dirmngr: New LDAP server flag "areconly" (A-record-only).
  * dirmngr: Fix upload of multiple keys for an LDAP server specified
    using the colon format.
  * dirmngr: Use LDAP schema v2 when a Base DN is specified.
  * dirmngr: Avoid caching expired certificates.
  * wkd: Fix path traversal attack in gpg-wks-server. Add the mail
    address to the pending request data.
  * wkd: New command --mirror for gpg-wks-client.
  * gpg-auth: New tool for authentication.
  * New common.conf option no-autostart.
  * Silence warnings from AllowSetForegroundWindow unless
    GNUPG_EXEC_DEBUG_FLAGS is used.
  * Rebase gnupg-detect_FIPS_mode.patch
  * Remove patch upstream:
  - gnupg-2.3.7-scd-openpgp-Fix-workaround-for-Yubikey-heuristics.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671537600">- Updated to require libgpg-error-devel &gt;= 1.46
- Rebased patches:
  * gnupg-allow-import-of-previously-known-keys-even-without-UIDs.patch
  * gnupg-add_legacy_FIPS_mode_option.patch
- GnuPG 2.4.0:
  * common: Fix translations in --help for gpgrt &lt; 1.47.
  * gpg: Do not continue the export after a cancel for the primary key.
  * gpg: Replace use of PRIu64 in log_debug.
  * Update NEWS for 2.4.0.
  * tests: Fix make check with GPGME.
  * agent: Allow arguments to "scd serialno" in restricted mode.
  * scd:p15: Skip deleted records.
  * build: Remove Windows CE support.
  * wkd: Do not send/install/mirror expired user ids.
  * gpgsm: Print the revocation time also with --verify.
  * gpgsm: Fix "problem re-searching certificate" case.
  * gpgsm: Print revocation date and reason in cert listings.
  * gpgsm: Silence the "non-critical certificate policy not allowed".
  * gpgsm: Always use the chain model if the root-CA requests this.
  * gpg: New export option "mode1003".
  * gpg: Remove a mostly duplicated function.
  * tests: Simplify fake-pinentry to use the option only.
  * tests: Fix fake-pinentry for Windows.
  * tests: Fix make check-all.
  * agent: Fix import of protected v5 keys.
  * gpgsm: Change default algo to AES-256.
  * tests: Put a workaround for semihosted environment.
  * tests: More fix for semihosted environment.
  * tests: Support semihosted environment.
  * tests: Fix tests under cms.
  * tests,w32: Fix for semihosted environment.
  * w32: Fix for tests on semihosted environment.
  * w32: Fix gnupg_unsetenv.
  * wkd: New option --add-revocs and some fixes.
  * wkd: Make use of --debug extprog.
  * gpg: New export-filter export-revocs.
  * gpg: Fix double-free in gpg --card-edit.
  * gpg: Make --require-compliance work with out --status-fd.
  * gpg: New option --list-filter.
  * dirmngr: Silence ocsp debug output.
  * tests: Fix to support --enable-all-tests and variants.
  * tests:w32: Fix for non-dot file name for Windows.
  * tests:gpgscm:w32: Fix for GetTempPath.
  * tests: Keep .log files in objdir.
  * tests: Use 233 for invalid value of FD.
  * w32: Fix gnupg_tmpfile for possible failure.
  * scd: Redact --debug cardio output of a VERIFY APDU.
  * common: Remove Windows CE support in common.
  * gpgsm: Fix colon outout of ECC encryption certificates.
  * scd:nks: Fix ECC signing if key not given by keygrip.
  * dirmngr: Fix verification of ECDSA signed CRLs.
  * agent: Allow trustlist on Windows in Unicode homedirs.
  * gpg: Fix verification of cleartext signatures with overlong lines.
  * gpg: Move w32_system function.
  * gpg: New option --quick-update-pref.
  * gpg: New list-options show-pref and show-pref-verbose.
  * tests: Add tests to check that OCB is only used for capable keys.
  * gpg: Make --list-packets work w/o --no-armor for plain OCB packets.
  * tests: Add symmetric decryption tests.
  * tests: Add tr:assert-same function.
  * agent: Avoid blanks in the ssh key's comment.
  * build: Update m4 files.
  * gpg: Merge --rfc4880bis features into --gnupg.
  * gpg: Allow only OCB for AEAD encryption.
  * gpg: New option --compatibility-flags.
  * gpgsm: Also announce AES256-CBC in signatures.
  * gpg: Fix trusted introducer for user-ids with only the mbox.
  * gpg: Import stray revocation certificates.
  * agent: Automatically convert to extended key format by KEYATTR.
  * card: New commands "gpg" and "gpgsm".
  * card: Also show fingerprints of known X.509 certificates.
  * scd:nks: Support non-ESIGN signing with the Signature Card v2.
  * gpgsm: Allow ECC encryption keys with just keyAgreement specified.
  * gpgsm: Use macro constants for cert_usage_p.
  * build: Update gpg-error.m4.
  * agent,common,dirmngr,tests,tools: Remove spawn PREEXEC argument.
  * gpg: Move NETLIBS after GPG_ERROR_LIBS.
  * gpg: Use GCRY_KDF_ONESTEP_KDF with newer libgcrypt in future.
  * common,w32: Fix struct stat on Windows.
  * agent,w32: Support Win32-OpenSSH emulation by gpg-agent.
  * common: Don't use FD2INT for POSIX-only code.
  * dirmngr: Fix build with no LDAP support.</changelog>
  <changelog author="pmonreal@suse.com" date="1673438400">- Fix broken GPGME QT tests: Upstram dev task dev.gnupg.org/T6313
  * The original patch has been modified to expand the changes
    also to the tests/gpgme/Makefile.in file.
  * Add gnupg-tests-Fix-tests-gpgme-for-in-source-tree-builds.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Fix the regression test suite fails with the IBM TPM Software
  stack. Builds fine using the Intel TPM; use the swtpm and
  tpm2-0-tss-devel packages instead of ibmswtpm2 and ibmtss-devel.</changelog>
  <changelog author="pmonreal@suse.com" date="1678449600">- Allow 8192 bit RSA keys in keygen UI when large_rsa is set
  * Add gnupg-allow-large-rsa.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678449601">- Temporarily revert back to the pre-2.4 default for key generation.
  The new rfc4880bis has been set as the default in 2.4 version and
  might create incompatible keys. Note that, rfc4880bis can still
  be used with the option flag --rfc4880bis as in previous versions.
  * More info in the gnupg-devel ML:
    https://lists.gnupg.org/pipermail/gnupg-devel/2022-December/035183.html
  * Reverted commit https://dev.gnupg.org/rGcaf4b3fc16e9
  * Add gnupg-revert-rfc4880bis.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682683200">- Update to 2.4.1:
  * If the ~/.gnupg directory does not exist, the keyboxd is now
    automagically enabled. [rGd9e7488b17]
  * gpg: New option --add-desig-revoker. [rG3d094e2bcf]
  * gpg: New option --assert-signer. [rGc9e95b8dee]
  * gpg: New command --quick-add-adsk and other ADSK features.
    [T6395, https://gnupg.org/blog/20230321-adsk.html]
  * gpg: New list-option "show-unusable-sigs". Also show "[self-signature]"
    instead of the user-id in key signature listings. [rG103acfe9ca]
  * gpg: For symmetric encryption the default S2K hash is now SHA256. [T6367]
  * gpg: Detect already compressed data also when using a pipe. Also
    detect JPEG and PNG file formats. [T6332]
  * gpg: New subcommand "openpgp" for --card-edit. [T6462]
  * gpgsm: Verification of detached signatures does now strip trailing
    zeroes from the input if --assume-binary is used. [rG2a13f7f9dc]
  * gpgsm: Non-armored detached signature are now created without
    using indefinite form length octets. This improves compatibility
    with some PDF signature verification software. [rG8996b0b655]
  * gpgtar: Emit progress status lines in create mode. [T6363]
  * dirmngr: The LDAP modifyTimestamp is now returned by some
    keyserver commands. [rG56d309133f]
  * ssh: Allow specification of the order keys are presented to ssh.
    See the man page entry for --enable-ssh-support. [T5996, T6212]
  * gpg: Make list-options "show-sig-subpackets" work again.
    Fixes regression in 2.4.0. [rG5a223303d7]
  * gpg: Fix the keytocard command for Yubikeys. [T6378]
  * gpg: Do not continue an export after a cancel for the primary key. [T6093]
  * gpg: Replace the --override-compliance-check hack by a real fix. [T5655]
  * gpgtar: Fix decryption with input taken from stdin. [T6355]
  * Rebase patches:
  - gnupg-revert-rfc4880bis.patch
  - gnupg-add_legacy_FIPS_mode_option.patch
  * Remove patch fixed upstream:
  - gnupg-tests-Fix-tests-gpgme-for-in-source-tree-builds.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1685448000">- Update to 2.4.2:
  * gpg: Print a warning if no more encryption subkeys are left over
    after changing the expiration date.  [rGef2c3d50fa]
  * gpg: Fix searching for the ADSK key when adding an ADSK.  [T6504]
  * gpgsm: Speed up key listings on Windows.  [rG08ff55bd44]
  * gpgsm: Reduce the number of "failed to open policy file"
    diagnostics.  [rG68613a6a9d]
  * agent: Make updating of private key files more robust and track
    display S/N.  [T6135]
  * keyboxd: Avoid longish delays on Windows when listing keys.
    [rG6944aefa3c]
  * gpgtar: Emit extra status lines to help GPGME.  [T6497]
  * w32: Avoid using the VirtualStore.  [T6403]
  * Rebase gnupg-add_legacy_FIPS_mode_option.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1688558400">- Update to 2.4.3:
  * gpg: Set default expiration date to 3 years. [T2701]
  * gpg: Add --list-filter properties "key_expires" and
    "key_expires_d". [T6529]
  * gpg: Emit status line and proper diagnostics for write errors. [T6528]
  * gpg: Make progress work for large files on Windows. [T6534]
  * gpg: New option --no-compress as alias for -z0.
  * gpgsm: Print PROGRESS status lines. Add new --input-size-hint. [T6534]
  * gpgsm: Support SENDCERT_SKI for --call-dirmngr. [rG701a8b30f0]
  * gpgsm: Major rewrite of the PKCS#12 parser. [T6536]
  * gpgtar: New option --no-compress.
  * dirmngr: Extend the AD_QUERY command. [rG207c99567c]
  * dirmngr: Disable the HTTP redirect rewriting. [T6477]
  * dirmngr: New option --compatibility-flags. [rGbf04b07327]
  * dirmngr: New option --ignore-crl-extensions. [T6545]
  * wkd: Use export-clean for gpg-wks-client's --mirror and --create
    commands. [rG2c7f7a5a27]
  * wkd: Make --add-revocs the default in gpg-wks-client. New option
  - -no-add-revocs. [rG10c937ee68]
  * scd: Make signing work for Nexus cards. [rGb83d86b988]
  * scd: Fix authentication with Administration Key for PIV. [rG25b59cf6ce]</changelog>
  <changelog author="pmonreal@suse.com" date="1691064000">- Revert back to use the IBM TPM Software stack.</changelog>
  <changelog author="pmonreal@suse.com" date="1695297600">- Install the systemd user units in the _userunitdir [bsc#1201564]
  * Note that, there is no activation by default.
  * Rework excludes in the spec's files section.</changelog>
  <changelog author="pmonreal@suse.com" date="1696852800">- Provide the systemd-user files since they have been removed
  upstream since version 2.4.1. [bsc#1201564]
  * Add gpg2-systemd-user.tar.xz</changelog>
  <changelog author="pmonreal@suse.com" date="1696939200">- Install the internal executables in the /usr/libexec dir instead
  of /usr/lib64. These files are keyboxd, scdaemon, gpg-auth
  gpg-check-pattern, gpg-pair-tool, gpg-preset-passphrase,
  gpg-protect-tool, gpg-wks-client, dirmngr_ldap and tpm2daemon.</changelog>
  <changelog author="pmonreal@suse.com" date="1697457600">- Fix Emacs EasyPG behavior when parsing output:
  * gpg: Report BEGIN_* status before examining the input.
  * Upstream task: https://dev.gnupg.org/T6481
  * Add gnupg-Report-BEGIN_-status-before-examining-the-input.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1697544000">- Do not pull revision info from GIT when autoconf is run. This
  removes the -unknown suffix after the version number.
  * Add gnupg-nobetasuffix.patch [bsc#1216334]</changelog>
  <changelog author="pmonreal@suse.com" date="1698667200">- Fix the build in SLE and Leap by adding an exclude in the files
  section for the dirmngr's systemd user units. [jsc#PED-7093]</changelog>
  <changelog author="pmonreal@suse.com" date="1706184000">- Update to 2.4.4: [bsc#1219191]
  * gpg: Do not keep an unprotected smartcard backup key on disk.
    See https://gnupg.org/blog/20240125-smartcard-backup-key.html
    for a security advisory. [T6944]
  * gpg: Allow to specify seconds since Epoch beyond 2038 on 32-bit
    platforms. [T6736]
  * gpg: Fix expiration time when Creation-Date is specified. [T5252]
  * gpg: Add support for Subkey-Expire-Date. [rG96b69c1866]
  * gpg: Add option --with-v5-fingerprint. [T6705]
  * gpg: Add sub-option ignore-attributes to --import-options.
  * gpg: Add --list-filter properties sig_expires/sig_expires_d.
  * gpg: Fix validity of re-imported keys. [T6399]
  * gpg: Report BEGIN_ status before examining the input. [T6481]
  * gpg: Don't try to compress a read-only keybox. [T6811]
  * gpg: Choose key from inserted card over a non-inserted card. [T6831]
  * gpg: Allow to create revocations even with non-compliant algos. [T6929]
  * gpg: Fix regression in the Revoker keyword of the parameter file. [T6923]
  * gpg: Improve error message for expired default keys. [T4704]
  * gpgsm: Add --always-trust feature. [T6559]
  * gpgsm: Support ECC certificates in de-vs mode. [T6802]
  * gpgsm: Major rewrite of the PKCS#12 parser. [T6536]
  * gpgsm: No not show the pkcs#12 passphrase in debug output. [T6654]
  * keyboxd: Timeout on failure to get the database lock. [T6838]
  * agent: Update the key stubs only if really modified. [T6829]
  * scd: Add support for certain Starcos 3.2 cards. [rG5304c9b080]
  * scd: Add support for CardOS 5.4 cards. [rG812f988059]
  * scd: Add support for D-Trust 4.1/4.4 cards. [rG0b85a9ac09]
  * scd: Add support for Smartcafe Expert 7.0 cards. [T6919]
  * scd: Add a length check for a new PIN. [T6843]
  * tpm: Fix keytotpm handling in the agent. [rG9909f622f6]
  * tpm: Fixes for the TPM test suite. [T6052]
  * dirmngr: New option --ignore-crl-extensions. [T6545]
  * dirmngr: Support config value "none" to disable the default
    keyserver. [T6708]
  * dirmngr: Fix handling of the HTTP Content-Length. [rGa5e33618f4]
  * gpgconf: Add commands --lock and --unlock. [rG93b5ba38dc]
  * gpgconf: Add keyword socketdir to gpgconf.ctl. [rG239c1fdc28]
  * gpgconf: Adjust the -X command for the new VERSION file format. [T6918]
  * wkd: Use export-clean for gpg-wks-client's --mirror and --create
    commands. [rG2c7f7a5a278c]
  * wkd: Make --add-revocs the default in gpg-wks-client. New option
  - -no-add-revocs. [rG10c937ee68]
  * Remove duplicated backslashes when setting the homedir. [T6833]
  * Ignore attempts to remove the /dev/null device. [T6556]
  * Improve advisory file lock retry strategy. [T3380]
  * Release-info: https://dev.gnupg.org/T6578
  * Remove patch upstream:
  - gnupg-Report-BEGIN_-status-before-examining-the-input.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1742212800">- Fix a verification DoS due to a malicious subkey in the keyring: [bsc#1239119]
  * Add patch gnupg-gpg-Fix-a-verification-DoS-due-to-a-malicious-subkey-in-the-keyring.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1748952000">- Don't install expired sks certificate [bsc#1243069]
  * Add patch gnupg-dirmngr-Don-t-install-expired-sks-certificate.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1750939200">- Security fix: [bsc#1236931, bsc#1239119, CVE-2025-30258]
  * gpg: Fix regression for the recent malicious subkey DoS fix.
  * gpg: Fix another regression due to the T7547 fix.
  * gpg: Allow the use of an ADSK subkey as ADSK subkey.
  * Add patches:
  - gnupg-gpg-Fix-regression-for-the-recent-malicious-subkey-D.patch
  - gnupg-gpg-Fix-another-regression-due-to-the-T7547-fix.patch
  - gnupg-gpg-Allow-the-use-of-an-ADSK-subkey-as-ADSK-subkey.patch</changelog>
</package>
<package pkgid="f7a8d2153bf62edbb19ba0131c8d1bc92765abaa7829cfb4ebf1608a45d1eaaa" name="gpg2-lang" arch="noarch">
  <version epoch="0" ver="2.4.4" rel="150600.3.12.1"/>
  <changelog author="pmonreal@suse.com" date="1678449600">- Temporarily revert back to the pre-2.4 default for key generation.
  The new rfc4880bis has been set as the default in 2.4 version and
  might create incompatible keys. Note that, rfc4880bis can still
  be used with the option flag --rfc4880bis as in previous versions.
  * More info in the gnupg-devel ML:
    https://lists.gnupg.org/pipermail/gnupg-devel/2022-December/035183.html
  * Reverted commit https://dev.gnupg.org/rGcaf4b3fc16e9
  * Add gnupg-revert-rfc4880bis.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682683200">- Update to 2.4.1:
  * If the ~/.gnupg directory does not exist, the keyboxd is now
    automagically enabled. [rGd9e7488b17]
  * gpg: New option --add-desig-revoker. [rG3d094e2bcf]
  * gpg: New option --assert-signer. [rGc9e95b8dee]
  * gpg: New command --quick-add-adsk and other ADSK features.
    [T6395, https://gnupg.org/blog/20230321-adsk.html]
  * gpg: New list-option "show-unusable-sigs". Also show "[self-signature]"
    instead of the user-id in key signature listings. [rG103acfe9ca]
  * gpg: For symmetric encryption the default S2K hash is now SHA256. [T6367]
  * gpg: Detect already compressed data also when using a pipe. Also
    detect JPEG and PNG file formats. [T6332]
  * gpg: New subcommand "openpgp" for --card-edit. [T6462]
  * gpgsm: Verification of detached signatures does now strip trailing
    zeroes from the input if --assume-binary is used. [rG2a13f7f9dc]
  * gpgsm: Non-armored detached signature are now created without
    using indefinite form length octets. This improves compatibility
    with some PDF signature verification software. [rG8996b0b655]
  * gpgtar: Emit progress status lines in create mode. [T6363]
  * dirmngr: The LDAP modifyTimestamp is now returned by some
    keyserver commands. [rG56d309133f]
  * ssh: Allow specification of the order keys are presented to ssh.
    See the man page entry for --enable-ssh-support. [T5996, T6212]
  * gpg: Make list-options "show-sig-subpackets" work again.
    Fixes regression in 2.4.0. [rG5a223303d7]
  * gpg: Fix the keytocard command for Yubikeys. [T6378]
  * gpg: Do not continue an export after a cancel for the primary key. [T6093]
  * gpg: Replace the --override-compliance-check hack by a real fix. [T5655]
  * gpgtar: Fix decryption with input taken from stdin. [T6355]
  * Rebase patches:
  - gnupg-revert-rfc4880bis.patch
  - gnupg-add_legacy_FIPS_mode_option.patch
  * Remove patch fixed upstream:
  - gnupg-tests-Fix-tests-gpgme-for-in-source-tree-builds.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1685448000">- Update to 2.4.2:
  * gpg: Print a warning if no more encryption subkeys are left over
    after changing the expiration date.  [rGef2c3d50fa]
  * gpg: Fix searching for the ADSK key when adding an ADSK.  [T6504]
  * gpgsm: Speed up key listings on Windows.  [rG08ff55bd44]
  * gpgsm: Reduce the number of "failed to open policy file"
    diagnostics.  [rG68613a6a9d]
  * agent: Make updating of private key files more robust and track
    display S/N.  [T6135]
  * keyboxd: Avoid longish delays on Windows when listing keys.
    [rG6944aefa3c]
  * gpgtar: Emit extra status lines to help GPGME.  [T6497]
  * w32: Avoid using the VirtualStore.  [T6403]
  * Rebase gnupg-add_legacy_FIPS_mode_option.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1688558400">- Update to 2.4.3:
  * gpg: Set default expiration date to 3 years. [T2701]
  * gpg: Add --list-filter properties "key_expires" and
    "key_expires_d". [T6529]
  * gpg: Emit status line and proper diagnostics for write errors. [T6528]
  * gpg: Make progress work for large files on Windows. [T6534]
  * gpg: New option --no-compress as alias for -z0.
  * gpgsm: Print PROGRESS status lines. Add new --input-size-hint. [T6534]
  * gpgsm: Support SENDCERT_SKI for --call-dirmngr. [rG701a8b30f0]
  * gpgsm: Major rewrite of the PKCS#12 parser. [T6536]
  * gpgtar: New option --no-compress.
  * dirmngr: Extend the AD_QUERY command. [rG207c99567c]
  * dirmngr: Disable the HTTP redirect rewriting. [T6477]
  * dirmngr: New option --compatibility-flags. [rGbf04b07327]
  * dirmngr: New option --ignore-crl-extensions. [T6545]
  * wkd: Use export-clean for gpg-wks-client's --mirror and --create
    commands. [rG2c7f7a5a27]
  * wkd: Make --add-revocs the default in gpg-wks-client. New option
  - -no-add-revocs. [rG10c937ee68]
  * scd: Make signing work for Nexus cards. [rGb83d86b988]
  * scd: Fix authentication with Administration Key for PIV. [rG25b59cf6ce]</changelog>
  <changelog author="pmonreal@suse.com" date="1691064000">- Revert back to use the IBM TPM Software stack.</changelog>
  <changelog author="pmonreal@suse.com" date="1695297600">- Install the systemd user units in the _userunitdir [bsc#1201564]
  * Note that, there is no activation by default.
  * Rework excludes in the spec's files section.</changelog>
  <changelog author="pmonreal@suse.com" date="1696852800">- Provide the systemd-user files since they have been removed
  upstream since version 2.4.1. [bsc#1201564]
  * Add gpg2-systemd-user.tar.xz</changelog>
  <changelog author="pmonreal@suse.com" date="1696939200">- Install the internal executables in the /usr/libexec dir instead
  of /usr/lib64. These files are keyboxd, scdaemon, gpg-auth
  gpg-check-pattern, gpg-pair-tool, gpg-preset-passphrase,
  gpg-protect-tool, gpg-wks-client, dirmngr_ldap and tpm2daemon.</changelog>
  <changelog author="pmonreal@suse.com" date="1697457600">- Fix Emacs EasyPG behavior when parsing output:
  * gpg: Report BEGIN_* status before examining the input.
  * Upstream task: https://dev.gnupg.org/T6481
  * Add gnupg-Report-BEGIN_-status-before-examining-the-input.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1697544000">- Do not pull revision info from GIT when autoconf is run. This
  removes the -unknown suffix after the version number.
  * Add gnupg-nobetasuffix.patch [bsc#1216334]</changelog>
  <changelog author="pmonreal@suse.com" date="1698667200">- Fix the build in SLE and Leap by adding an exclude in the files
  section for the dirmngr's systemd user units. [jsc#PED-7093]</changelog>
  <changelog author="pmonreal@suse.com" date="1706184000">- Update to 2.4.4: [bsc#1219191]
  * gpg: Do not keep an unprotected smartcard backup key on disk.
    See https://gnupg.org/blog/20240125-smartcard-backup-key.html
    for a security advisory. [T6944]
  * gpg: Allow to specify seconds since Epoch beyond 2038 on 32-bit
    platforms. [T6736]
  * gpg: Fix expiration time when Creation-Date is specified. [T5252]
  * gpg: Add support for Subkey-Expire-Date. [rG96b69c1866]
  * gpg: Add option --with-v5-fingerprint. [T6705]
  * gpg: Add sub-option ignore-attributes to --import-options.
  * gpg: Add --list-filter properties sig_expires/sig_expires_d.
  * gpg: Fix validity of re-imported keys. [T6399]
  * gpg: Report BEGIN_ status before examining the input. [T6481]
  * gpg: Don't try to compress a read-only keybox. [T6811]
  * gpg: Choose key from inserted card over a non-inserted card. [T6831]
  * gpg: Allow to create revocations even with non-compliant algos. [T6929]
  * gpg: Fix regression in the Revoker keyword of the parameter file. [T6923]
  * gpg: Improve error message for expired default keys. [T4704]
  * gpgsm: Add --always-trust feature. [T6559]
  * gpgsm: Support ECC certificates in de-vs mode. [T6802]
  * gpgsm: Major rewrite of the PKCS#12 parser. [T6536]
  * gpgsm: No not show the pkcs#12 passphrase in debug output. [T6654]
  * keyboxd: Timeout on failure to get the database lock. [T6838]
  * agent: Update the key stubs only if really modified. [T6829]
  * scd: Add support for certain Starcos 3.2 cards. [rG5304c9b080]
  * scd: Add support for CardOS 5.4 cards. [rG812f988059]
  * scd: Add support for D-Trust 4.1/4.4 cards. [rG0b85a9ac09]
  * scd: Add support for Smartcafe Expert 7.0 cards. [T6919]
  * scd: Add a length check for a new PIN. [T6843]
  * tpm: Fix keytotpm handling in the agent. [rG9909f622f6]
  * tpm: Fixes for the TPM test suite. [T6052]
  * dirmngr: New option --ignore-crl-extensions. [T6545]
  * dirmngr: Support config value "none" to disable the default
    keyserver. [T6708]
  * dirmngr: Fix handling of the HTTP Content-Length. [rGa5e33618f4]
  * gpgconf: Add commands --lock and --unlock. [rG93b5ba38dc]
  * gpgconf: Add keyword socketdir to gpgconf.ctl. [rG239c1fdc28]
  * gpgconf: Adjust the -X command for the new VERSION file format. [T6918]
  * wkd: Use export-clean for gpg-wks-client's --mirror and --create
    commands. [rG2c7f7a5a278c]
  * wkd: Make --add-revocs the default in gpg-wks-client. New option
  - -no-add-revocs. [rG10c937ee68]
  * Remove duplicated backslashes when setting the homedir. [T6833]
  * Ignore attempts to remove the /dev/null device. [T6556]
  * Improve advisory file lock retry strategy. [T3380]
  * Release-info: https://dev.gnupg.org/T6578
  * Remove patch upstream:
  - gnupg-Report-BEGIN_-status-before-examining-the-input.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1742212800">- Fix a verification DoS due to a malicious subkey in the keyring: [bsc#1239119]
  * Add patch gnupg-gpg-Fix-a-verification-DoS-due-to-a-malicious-subkey-in-the-keyring.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1748952000">- Don't install expired sks certificate [bsc#1243069]
  * Add patch gnupg-dirmngr-Don-t-install-expired-sks-certificate.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1750939200">- Security fix: [bsc#1236931, bsc#1239119, CVE-2025-30258]
  * gpg: Fix regression for the recent malicious subkey DoS fix.
  * gpg: Fix another regression due to the T7547 fix.
  * gpg: Allow the use of an ADSK subkey as ADSK subkey.
  * Add patches:
  - gnupg-gpg-Fix-regression-for-the-recent-malicious-subkey-D.patch
  - gnupg-gpg-Fix-another-regression-due-to-the-T7547-fix.patch
  - gnupg-gpg-Allow-the-use-of-an-ADSK-subkey-as-ADSK-subkey.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1767873600">- Security fix: [bsc#1256390] (gpg.fail/notdash)
  * gpg2: Cleartext Signature Forgery in the NotDashEscaped header
    implementation in GnuPG
  * Add patch gnupg-notdash-escape.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1767873601">- Security fix: [bsc#1256243]
  * gpg2 agent: Fix a memory leak
  * Add patch gnupg-agent-memleak.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767873602">- Security fix: [bsc#1256244] (gpg.fail/detached)
  * gpg: Error out on unverified output for non-detached signatures [T7903]
  * Add gnupg-gpg-Error-out-on-unverified-output-for-non-detached-signatures.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767873603">- Security fix: [bsc#1256246] (gpg.fail/sha1)
  * gpg: Avoid potential downgrade to SHA1 in 3rd party key signatures [T7904]
  * Add gnupg-gpg-Avoid-potential-downgrade-to-SHA1-in-3rd-party-keysig.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767873604">- Security fix: [bsc#1255715, CVE-2025-68973] (gpg.fail/memcpy)
  * gpg: Fix possible memory corruption in the armor parser [T7906]
  * Add gnupg-CVE-2025-68973.patch</changelog>
</package>
<package pkgid="2a8cd6cf2555af6d524d9915f62fb185a37dbe2f543b06ee181d77281ba6a84a" name="gpg2-lang" arch="noarch">
  <version epoch="0" ver="2.4.4" rel="150600.3.15.1"/>
  <changelog author="pmonreal@suse.com" date="1685448000">- Update to 2.4.2:
  * gpg: Print a warning if no more encryption subkeys are left over
    after changing the expiration date.  [rGef2c3d50fa]
  * gpg: Fix searching for the ADSK key when adding an ADSK.  [T6504]
  * gpgsm: Speed up key listings on Windows.  [rG08ff55bd44]
  * gpgsm: Reduce the number of "failed to open policy file"
    diagnostics.  [rG68613a6a9d]
  * agent: Make updating of private key files more robust and track
    display S/N.  [T6135]
  * keyboxd: Avoid longish delays on Windows when listing keys.
    [rG6944aefa3c]
  * gpgtar: Emit extra status lines to help GPGME.  [T6497]
  * w32: Avoid using the VirtualStore.  [T6403]
  * Rebase gnupg-add_legacy_FIPS_mode_option.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1688558400">- Update to 2.4.3:
  * gpg: Set default expiration date to 3 years. [T2701]
  * gpg: Add --list-filter properties "key_expires" and
    "key_expires_d". [T6529]
  * gpg: Emit status line and proper diagnostics for write errors. [T6528]
  * gpg: Make progress work for large files on Windows. [T6534]
  * gpg: New option --no-compress as alias for -z0.
  * gpgsm: Print PROGRESS status lines. Add new --input-size-hint. [T6534]
  * gpgsm: Support SENDCERT_SKI for --call-dirmngr. [rG701a8b30f0]
  * gpgsm: Major rewrite of the PKCS#12 parser. [T6536]
  * gpgtar: New option --no-compress.
  * dirmngr: Extend the AD_QUERY command. [rG207c99567c]
  * dirmngr: Disable the HTTP redirect rewriting. [T6477]
  * dirmngr: New option --compatibility-flags. [rGbf04b07327]
  * dirmngr: New option --ignore-crl-extensions. [T6545]
  * wkd: Use export-clean for gpg-wks-client's --mirror and --create
    commands. [rG2c7f7a5a27]
  * wkd: Make --add-revocs the default in gpg-wks-client. New option
  - -no-add-revocs. [rG10c937ee68]
  * scd: Make signing work for Nexus cards. [rGb83d86b988]
  * scd: Fix authentication with Administration Key for PIV. [rG25b59cf6ce]</changelog>
  <changelog author="pmonreal@suse.com" date="1691064000">- Revert back to use the IBM TPM Software stack.</changelog>
  <changelog author="pmonreal@suse.com" date="1695297600">- Install the systemd user units in the _userunitdir [bsc#1201564]
  * Note that, there is no activation by default.
  * Rework excludes in the spec's files section.</changelog>
  <changelog author="pmonreal@suse.com" date="1696852800">- Provide the systemd-user files since they have been removed
  upstream since version 2.4.1. [bsc#1201564]
  * Add gpg2-systemd-user.tar.xz</changelog>
  <changelog author="pmonreal@suse.com" date="1696939200">- Install the internal executables in the /usr/libexec dir instead
  of /usr/lib64. These files are keyboxd, scdaemon, gpg-auth
  gpg-check-pattern, gpg-pair-tool, gpg-preset-passphrase,
  gpg-protect-tool, gpg-wks-client, dirmngr_ldap and tpm2daemon.</changelog>
  <changelog author="pmonreal@suse.com" date="1697457600">- Fix Emacs EasyPG behavior when parsing output:
  * gpg: Report BEGIN_* status before examining the input.
  * Upstream task: https://dev.gnupg.org/T6481
  * Add gnupg-Report-BEGIN_-status-before-examining-the-input.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1697544000">- Do not pull revision info from GIT when autoconf is run. This
  removes the -unknown suffix after the version number.
  * Add gnupg-nobetasuffix.patch [bsc#1216334]</changelog>
  <changelog author="pmonreal@suse.com" date="1698667200">- Fix the build in SLE and Leap by adding an exclude in the files
  section for the dirmngr's systemd user units. [jsc#PED-7093]</changelog>
  <changelog author="pmonreal@suse.com" date="1706184000">- Update to 2.4.4: [bsc#1219191]
  * gpg: Do not keep an unprotected smartcard backup key on disk.
    See https://gnupg.org/blog/20240125-smartcard-backup-key.html
    for a security advisory. [T6944]
  * gpg: Allow to specify seconds since Epoch beyond 2038 on 32-bit
    platforms. [T6736]
  * gpg: Fix expiration time when Creation-Date is specified. [T5252]
  * gpg: Add support for Subkey-Expire-Date. [rG96b69c1866]
  * gpg: Add option --with-v5-fingerprint. [T6705]
  * gpg: Add sub-option ignore-attributes to --import-options.
  * gpg: Add --list-filter properties sig_expires/sig_expires_d.
  * gpg: Fix validity of re-imported keys. [T6399]
  * gpg: Report BEGIN_ status before examining the input. [T6481]
  * gpg: Don't try to compress a read-only keybox. [T6811]
  * gpg: Choose key from inserted card over a non-inserted card. [T6831]
  * gpg: Allow to create revocations even with non-compliant algos. [T6929]
  * gpg: Fix regression in the Revoker keyword of the parameter file. [T6923]
  * gpg: Improve error message for expired default keys. [T4704]
  * gpgsm: Add --always-trust feature. [T6559]
  * gpgsm: Support ECC certificates in de-vs mode. [T6802]
  * gpgsm: Major rewrite of the PKCS#12 parser. [T6536]
  * gpgsm: No not show the pkcs#12 passphrase in debug output. [T6654]
  * keyboxd: Timeout on failure to get the database lock. [T6838]
  * agent: Update the key stubs only if really modified. [T6829]
  * scd: Add support for certain Starcos 3.2 cards. [rG5304c9b080]
  * scd: Add support for CardOS 5.4 cards. [rG812f988059]
  * scd: Add support for D-Trust 4.1/4.4 cards. [rG0b85a9ac09]
  * scd: Add support for Smartcafe Expert 7.0 cards. [T6919]
  * scd: Add a length check for a new PIN. [T6843]
  * tpm: Fix keytotpm handling in the agent. [rG9909f622f6]
  * tpm: Fixes for the TPM test suite. [T6052]
  * dirmngr: New option --ignore-crl-extensions. [T6545]
  * dirmngr: Support config value "none" to disable the default
    keyserver. [T6708]
  * dirmngr: Fix handling of the HTTP Content-Length. [rGa5e33618f4]
  * gpgconf: Add commands --lock and --unlock. [rG93b5ba38dc]
  * gpgconf: Add keyword socketdir to gpgconf.ctl. [rG239c1fdc28]
  * gpgconf: Adjust the -X command for the new VERSION file format. [T6918]
  * wkd: Use export-clean for gpg-wks-client's --mirror and --create
    commands. [rG2c7f7a5a278c]
  * wkd: Make --add-revocs the default in gpg-wks-client. New option
  - -no-add-revocs. [rG10c937ee68]
  * Remove duplicated backslashes when setting the homedir. [T6833]
  * Ignore attempts to remove the /dev/null device. [T6556]
  * Improve advisory file lock retry strategy. [T3380]
  * Release-info: https://dev.gnupg.org/T6578
  * Remove patch upstream:
  - gnupg-Report-BEGIN_-status-before-examining-the-input.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1742212800">- Fix a verification DoS due to a malicious subkey in the keyring: [bsc#1239119]
  * Add patch gnupg-gpg-Fix-a-verification-DoS-due-to-a-malicious-subkey-in-the-keyring.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1748952000">- Don't install expired sks certificate [bsc#1243069]
  * Add patch gnupg-dirmngr-Don-t-install-expired-sks-certificate.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1750939200">- Security fix: [bsc#1236931, bsc#1239119, CVE-2025-30258]
  * gpg: Fix regression for the recent malicious subkey DoS fix.
  * gpg: Fix another regression due to the T7547 fix.
  * gpg: Allow the use of an ADSK subkey as ADSK subkey.
  * Add patches:
  - gnupg-gpg-Fix-regression-for-the-recent-malicious-subkey-D.patch
  - gnupg-gpg-Fix-another-regression-due-to-the-T7547-fix.patch
  - gnupg-gpg-Allow-the-use-of-an-ADSK-subkey-as-ADSK-subkey.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1767873600">- Security fix: [bsc#1256390] (gpg.fail/notdash)
  * gpg2: Cleartext Signature Forgery in the NotDashEscaped header
    implementation in GnuPG
  * Add patch gnupg-notdash-escape.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1767873601">- Security fix: [bsc#1256243]
  * gpg2 agent: Fix a memory leak
  * Add patch gnupg-agent-memleak.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767873602">- Security fix: [bsc#1256244] (gpg.fail/detached)
  * gpg: Error out on unverified output for non-detached signatures [T7903]
  * Add gnupg-gpg-Error-out-on-unverified-output-for-non-detached-signatures.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767873603">- Security fix: [bsc#1256246] (gpg.fail/sha1)
  * gpg: Avoid potential downgrade to SHA1 in 3rd party key signatures [T7904]
  * Add gnupg-gpg-Avoid-potential-downgrade-to-SHA1-in-3rd-party-keysig.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767873604">- Security fix: [bsc#1255715, CVE-2025-68973] (gpg.fail/memcpy)
  * gpg: Fix possible memory corruption in the armor parser [T7906]
  * Add gnupg-CVE-2025-68973.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1769601600">- Security fix: [bsc#1256389] (gpg.fail/filename)
  * GnuPG Accepts Path Separators and Path Traversals in Literal Data "Filename" Field
  * Add gnupg-accepts-path-separators-literal-data.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1769601601">- Security fix [bsc#1257396, CVE-2026-24882]
  - gpg2: stack-based buffer overflow in TPM2 PKDECRYPT for TPM-backed RSA and ECC keys
  - Added gnupg-CVE-2026-24882.patch</changelog>
</package>
<package pkgid="8a728a060a3dbc0280174c44ddcfb084e980be94a2c66c362e8e63d2332be37e" name="gpg2-lang" arch="noarch">
  <version epoch="0" ver="2.4.4" rel="150600.3.9.1"/>
  <changelog author="pmonreal@suse.com" date="1666008000">- GnuPG 2.3.8:
  * gpg: Do not consider unknown public keys as non-compliant while
    decrypting.
  * gpg: Avoid to emit a compliance mode line if Libgcrypt is
    non-compliant.
  * gpg: Improve --edit-key setpref command to ease c+p.
  * gpg: Emit an ERROR status if --quick-set-primary-uid fails and
    allow to pass the user ID by hash.
  * gpg: Actually show symmetric+pubkey encrypted data as de-vs
    compliant.  Add extra compliance checks for symkey_enc packets.
  * gpg: In de-vs mode use SHA-256 instead of SHA-1 as implicit
    preference.
  * gpgsm: Fix reporting of bad passphrase error during PKCS#11
    import.
  * agent: Fix a regression in "READKEY --format=ssh".
  * agent: New option --need-attr for KEYINFO.
  * agent: New attribute "Remote-list" for use by KEYINFO.
  * scd: Fix problem with Yubikey 5.4 firmware.
  * dirmngr: Fix CRL Distribution Point fallback to other schemes.
  * dirmngr: New LDAP server flag "areconly" (A-record-only).
  * dirmngr: Fix upload of multiple keys for an LDAP server specified
    using the colon format.
  * dirmngr: Use LDAP schema v2 when a Base DN is specified.
  * dirmngr: Avoid caching expired certificates.
  * wkd: Fix path traversal attack in gpg-wks-server. Add the mail
    address to the pending request data.
  * wkd: New command --mirror for gpg-wks-client.
  * gpg-auth: New tool for authentication.
  * New common.conf option no-autostart.
  * Silence warnings from AllowSetForegroundWindow unless
    GNUPG_EXEC_DEBUG_FLAGS is used.
  * Rebase gnupg-detect_FIPS_mode.patch
  * Remove patch upstream:
  - gnupg-2.3.7-scd-openpgp-Fix-workaround-for-Yubikey-heuristics.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671537600">- Updated to require libgpg-error-devel &gt;= 1.46
- Rebased patches:
  * gnupg-allow-import-of-previously-known-keys-even-without-UIDs.patch
  * gnupg-add_legacy_FIPS_mode_option.patch
- GnuPG 2.4.0:
  * common: Fix translations in --help for gpgrt &lt; 1.47.
  * gpg: Do not continue the export after a cancel for the primary key.
  * gpg: Replace use of PRIu64 in log_debug.
  * Update NEWS for 2.4.0.
  * tests: Fix make check with GPGME.
  * agent: Allow arguments to "scd serialno" in restricted mode.
  * scd:p15: Skip deleted records.
  * build: Remove Windows CE support.
  * wkd: Do not send/install/mirror expired user ids.
  * gpgsm: Print the revocation time also with --verify.
  * gpgsm: Fix "problem re-searching certificate" case.
  * gpgsm: Print revocation date and reason in cert listings.
  * gpgsm: Silence the "non-critical certificate policy not allowed".
  * gpgsm: Always use the chain model if the root-CA requests this.
  * gpg: New export option "mode1003".
  * gpg: Remove a mostly duplicated function.
  * tests: Simplify fake-pinentry to use the option only.
  * tests: Fix fake-pinentry for Windows.
  * tests: Fix make check-all.
  * agent: Fix import of protected v5 keys.
  * gpgsm: Change default algo to AES-256.
  * tests: Put a workaround for semihosted environment.
  * tests: More fix for semihosted environment.
  * tests: Support semihosted environment.
  * tests: Fix tests under cms.
  * tests,w32: Fix for semihosted environment.
  * w32: Fix for tests on semihosted environment.
  * w32: Fix gnupg_unsetenv.
  * wkd: New option --add-revocs and some fixes.
  * wkd: Make use of --debug extprog.
  * gpg: New export-filter export-revocs.
  * gpg: Fix double-free in gpg --card-edit.
  * gpg: Make --require-compliance work with out --status-fd.
  * gpg: New option --list-filter.
  * dirmngr: Silence ocsp debug output.
  * tests: Fix to support --enable-all-tests and variants.
  * tests:w32: Fix for non-dot file name for Windows.
  * tests:gpgscm:w32: Fix for GetTempPath.
  * tests: Keep .log files in objdir.
  * tests: Use 233 for invalid value of FD.
  * w32: Fix gnupg_tmpfile for possible failure.
  * scd: Redact --debug cardio output of a VERIFY APDU.
  * common: Remove Windows CE support in common.
  * gpgsm: Fix colon outout of ECC encryption certificates.
  * scd:nks: Fix ECC signing if key not given by keygrip.
  * dirmngr: Fix verification of ECDSA signed CRLs.
  * agent: Allow trustlist on Windows in Unicode homedirs.
  * gpg: Fix verification of cleartext signatures with overlong lines.
  * gpg: Move w32_system function.
  * gpg: New option --quick-update-pref.
  * gpg: New list-options show-pref and show-pref-verbose.
  * tests: Add tests to check that OCB is only used for capable keys.
  * gpg: Make --list-packets work w/o --no-armor for plain OCB packets.
  * tests: Add symmetric decryption tests.
  * tests: Add tr:assert-same function.
  * agent: Avoid blanks in the ssh key's comment.
  * build: Update m4 files.
  * gpg: Merge --rfc4880bis features into --gnupg.
  * gpg: Allow only OCB for AEAD encryption.
  * gpg: New option --compatibility-flags.
  * gpgsm: Also announce AES256-CBC in signatures.
  * gpg: Fix trusted introducer for user-ids with only the mbox.
  * gpg: Import stray revocation certificates.
  * agent: Automatically convert to extended key format by KEYATTR.
  * card: New commands "gpg" and "gpgsm".
  * card: Also show fingerprints of known X.509 certificates.
  * scd:nks: Support non-ESIGN signing with the Signature Card v2.
  * gpgsm: Allow ECC encryption keys with just keyAgreement specified.
  * gpgsm: Use macro constants for cert_usage_p.
  * build: Update gpg-error.m4.
  * agent,common,dirmngr,tests,tools: Remove spawn PREEXEC argument.
  * gpg: Move NETLIBS after GPG_ERROR_LIBS.
  * gpg: Use GCRY_KDF_ONESTEP_KDF with newer libgcrypt in future.
  * common,w32: Fix struct stat on Windows.
  * agent,w32: Support Win32-OpenSSH emulation by gpg-agent.
  * common: Don't use FD2INT for POSIX-only code.
  * dirmngr: Fix build with no LDAP support.</changelog>
  <changelog author="pmonreal@suse.com" date="1673438400">- Fix broken GPGME QT tests: Upstram dev task dev.gnupg.org/T6313
  * The original patch has been modified to expand the changes
    also to the tests/gpgme/Makefile.in file.
  * Add gnupg-tests-Fix-tests-gpgme-for-in-source-tree-builds.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Fix the regression test suite fails with the IBM TPM Software
  stack. Builds fine using the Intel TPM; use the swtpm and
  tpm2-0-tss-devel packages instead of ibmswtpm2 and ibmtss-devel.</changelog>
  <changelog author="pmonreal@suse.com" date="1678449600">- Allow 8192 bit RSA keys in keygen UI when large_rsa is set
  * Add gnupg-allow-large-rsa.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678449601">- Temporarily revert back to the pre-2.4 default for key generation.
  The new rfc4880bis has been set as the default in 2.4 version and
  might create incompatible keys. Note that, rfc4880bis can still
  be used with the option flag --rfc4880bis as in previous versions.
  * More info in the gnupg-devel ML:
    https://lists.gnupg.org/pipermail/gnupg-devel/2022-December/035183.html
  * Reverted commit https://dev.gnupg.org/rGcaf4b3fc16e9
  * Add gnupg-revert-rfc4880bis.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682683200">- Update to 2.4.1:
  * If the ~/.gnupg directory does not exist, the keyboxd is now
    automagically enabled. [rGd9e7488b17]
  * gpg: New option --add-desig-revoker. [rG3d094e2bcf]
  * gpg: New option --assert-signer. [rGc9e95b8dee]
  * gpg: New command --quick-add-adsk and other ADSK features.
    [T6395, https://gnupg.org/blog/20230321-adsk.html]
  * gpg: New list-option "show-unusable-sigs". Also show "[self-signature]"
    instead of the user-id in key signature listings. [rG103acfe9ca]
  * gpg: For symmetric encryption the default S2K hash is now SHA256. [T6367]
  * gpg: Detect already compressed data also when using a pipe. Also
    detect JPEG and PNG file formats. [T6332]
  * gpg: New subcommand "openpgp" for --card-edit. [T6462]
  * gpgsm: Verification of detached signatures does now strip trailing
    zeroes from the input if --assume-binary is used. [rG2a13f7f9dc]
  * gpgsm: Non-armored detached signature are now created without
    using indefinite form length octets. This improves compatibility
    with some PDF signature verification software. [rG8996b0b655]
  * gpgtar: Emit progress status lines in create mode. [T6363]
  * dirmngr: The LDAP modifyTimestamp is now returned by some
    keyserver commands. [rG56d309133f]
  * ssh: Allow specification of the order keys are presented to ssh.
    See the man page entry for --enable-ssh-support. [T5996, T6212]
  * gpg: Make list-options "show-sig-subpackets" work again.
    Fixes regression in 2.4.0. [rG5a223303d7]
  * gpg: Fix the keytocard command for Yubikeys. [T6378]
  * gpg: Do not continue an export after a cancel for the primary key. [T6093]
  * gpg: Replace the --override-compliance-check hack by a real fix. [T5655]
  * gpgtar: Fix decryption with input taken from stdin. [T6355]
  * Rebase patches:
  - gnupg-revert-rfc4880bis.patch
  - gnupg-add_legacy_FIPS_mode_option.patch
  * Remove patch fixed upstream:
  - gnupg-tests-Fix-tests-gpgme-for-in-source-tree-builds.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1685448000">- Update to 2.4.2:
  * gpg: Print a warning if no more encryption subkeys are left over
    after changing the expiration date.  [rGef2c3d50fa]
  * gpg: Fix searching for the ADSK key when adding an ADSK.  [T6504]
  * gpgsm: Speed up key listings on Windows.  [rG08ff55bd44]
  * gpgsm: Reduce the number of "failed to open policy file"
    diagnostics.  [rG68613a6a9d]
  * agent: Make updating of private key files more robust and track
    display S/N.  [T6135]
  * keyboxd: Avoid longish delays on Windows when listing keys.
    [rG6944aefa3c]
  * gpgtar: Emit extra status lines to help GPGME.  [T6497]
  * w32: Avoid using the VirtualStore.  [T6403]
  * Rebase gnupg-add_legacy_FIPS_mode_option.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1688558400">- Update to 2.4.3:
  * gpg: Set default expiration date to 3 years. [T2701]
  * gpg: Add --list-filter properties "key_expires" and
    "key_expires_d". [T6529]
  * gpg: Emit status line and proper diagnostics for write errors. [T6528]
  * gpg: Make progress work for large files on Windows. [T6534]
  * gpg: New option --no-compress as alias for -z0.
  * gpgsm: Print PROGRESS status lines. Add new --input-size-hint. [T6534]
  * gpgsm: Support SENDCERT_SKI for --call-dirmngr. [rG701a8b30f0]
  * gpgsm: Major rewrite of the PKCS#12 parser. [T6536]
  * gpgtar: New option --no-compress.
  * dirmngr: Extend the AD_QUERY command. [rG207c99567c]
  * dirmngr: Disable the HTTP redirect rewriting. [T6477]
  * dirmngr: New option --compatibility-flags. [rGbf04b07327]
  * dirmngr: New option --ignore-crl-extensions. [T6545]
  * wkd: Use export-clean for gpg-wks-client's --mirror and --create
    commands. [rG2c7f7a5a27]
  * wkd: Make --add-revocs the default in gpg-wks-client. New option
  - -no-add-revocs. [rG10c937ee68]
  * scd: Make signing work for Nexus cards. [rGb83d86b988]
  * scd: Fix authentication with Administration Key for PIV. [rG25b59cf6ce]</changelog>
  <changelog author="pmonreal@suse.com" date="1691064000">- Revert back to use the IBM TPM Software stack.</changelog>
  <changelog author="pmonreal@suse.com" date="1695297600">- Install the systemd user units in the _userunitdir [bsc#1201564]
  * Note that, there is no activation by default.
  * Rework excludes in the spec's files section.</changelog>
  <changelog author="pmonreal@suse.com" date="1696852800">- Provide the systemd-user files since they have been removed
  upstream since version 2.4.1. [bsc#1201564]
  * Add gpg2-systemd-user.tar.xz</changelog>
  <changelog author="pmonreal@suse.com" date="1696939200">- Install the internal executables in the /usr/libexec dir instead
  of /usr/lib64. These files are keyboxd, scdaemon, gpg-auth
  gpg-check-pattern, gpg-pair-tool, gpg-preset-passphrase,
  gpg-protect-tool, gpg-wks-client, dirmngr_ldap and tpm2daemon.</changelog>
  <changelog author="pmonreal@suse.com" date="1697457600">- Fix Emacs EasyPG behavior when parsing output:
  * gpg: Report BEGIN_* status before examining the input.
  * Upstream task: https://dev.gnupg.org/T6481
  * Add gnupg-Report-BEGIN_-status-before-examining-the-input.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1697544000">- Do not pull revision info from GIT when autoconf is run. This
  removes the -unknown suffix after the version number.
  * Add gnupg-nobetasuffix.patch [bsc#1216334]</changelog>
  <changelog author="pmonreal@suse.com" date="1698667200">- Fix the build in SLE and Leap by adding an exclude in the files
  section for the dirmngr's systemd user units. [jsc#PED-7093]</changelog>
  <changelog author="pmonreal@suse.com" date="1706184000">- Update to 2.4.4: [bsc#1219191]
  * gpg: Do not keep an unprotected smartcard backup key on disk.
    See https://gnupg.org/blog/20240125-smartcard-backup-key.html
    for a security advisory. [T6944]
  * gpg: Allow to specify seconds since Epoch beyond 2038 on 32-bit
    platforms. [T6736]
  * gpg: Fix expiration time when Creation-Date is specified. [T5252]
  * gpg: Add support for Subkey-Expire-Date. [rG96b69c1866]
  * gpg: Add option --with-v5-fingerprint. [T6705]
  * gpg: Add sub-option ignore-attributes to --import-options.
  * gpg: Add --list-filter properties sig_expires/sig_expires_d.
  * gpg: Fix validity of re-imported keys. [T6399]
  * gpg: Report BEGIN_ status before examining the input. [T6481]
  * gpg: Don't try to compress a read-only keybox. [T6811]
  * gpg: Choose key from inserted card over a non-inserted card. [T6831]
  * gpg: Allow to create revocations even with non-compliant algos. [T6929]
  * gpg: Fix regression in the Revoker keyword of the parameter file. [T6923]
  * gpg: Improve error message for expired default keys. [T4704]
  * gpgsm: Add --always-trust feature. [T6559]
  * gpgsm: Support ECC certificates in de-vs mode. [T6802]
  * gpgsm: Major rewrite of the PKCS#12 parser. [T6536]
  * gpgsm: No not show the pkcs#12 passphrase in debug output. [T6654]
  * keyboxd: Timeout on failure to get the database lock. [T6838]
  * agent: Update the key stubs only if really modified. [T6829]
  * scd: Add support for certain Starcos 3.2 cards. [rG5304c9b080]
  * scd: Add support for CardOS 5.4 cards. [rG812f988059]
  * scd: Add support for D-Trust 4.1/4.4 cards. [rG0b85a9ac09]
  * scd: Add support for Smartcafe Expert 7.0 cards. [T6919]
  * scd: Add a length check for a new PIN. [T6843]
  * tpm: Fix keytotpm handling in the agent. [rG9909f622f6]
  * tpm: Fixes for the TPM test suite. [T6052]
  * dirmngr: New option --ignore-crl-extensions. [T6545]
  * dirmngr: Support config value "none" to disable the default
    keyserver. [T6708]
  * dirmngr: Fix handling of the HTTP Content-Length. [rGa5e33618f4]
  * gpgconf: Add commands --lock and --unlock. [rG93b5ba38dc]
  * gpgconf: Add keyword socketdir to gpgconf.ctl. [rG239c1fdc28]
  * gpgconf: Adjust the -X command for the new VERSION file format. [T6918]
  * wkd: Use export-clean for gpg-wks-client's --mirror and --create
    commands. [rG2c7f7a5a278c]
  * wkd: Make --add-revocs the default in gpg-wks-client. New option
  - -no-add-revocs. [rG10c937ee68]
  * Remove duplicated backslashes when setting the homedir. [T6833]
  * Ignore attempts to remove the /dev/null device. [T6556]
  * Improve advisory file lock retry strategy. [T3380]
  * Release-info: https://dev.gnupg.org/T6578
  * Remove patch upstream:
  - gnupg-Report-BEGIN_-status-before-examining-the-input.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1742212800">- Fix a verification DoS due to a malicious subkey in the keyring: [bsc#1239119]
  * Add patch gnupg-gpg-Fix-a-verification-DoS-due-to-a-malicious-subkey-in-the-keyring.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1748952000">- Don't install expired sks certificate [bsc#1243069]
  * Add patch gnupg-dirmngr-Don-t-install-expired-sks-certificate.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1750939200">- Security fix: [bsc#1236931, bsc#1239119, CVE-2025-30258]
  * gpg: Fix regression for the recent malicious subkey DoS fix.
  * gpg: Fix another regression due to the T7547 fix.
  * gpg: Allow the use of an ADSK subkey as ADSK subkey.
  * Add patches:
  - gnupg-gpg-Fix-regression-for-the-recent-malicious-subkey-D.patch
  - gnupg-gpg-Fix-another-regression-due-to-the-T7547-fix.patch
  - gnupg-gpg-Allow-the-use-of-an-ADSK-subkey-as-ADSK-subkey.patch</changelog>
</package>
<package pkgid="d5d8c480d807061f506f3903a1e2afbaf152afabcb2f80f813cedf6e48d955a2" name="gpgme" arch="src">
  <version epoch="0" ver="1.23.0" rel="150600.3.5.1"/>
  <changelog author="code@bnavigator.de" date="1616673600">- Can't assume non-existence of python38 macros in Leap.
  gh#openSUSE/python-rpm-macros#107
  Test for suse_version instead. Only Tumbleweed has and needs the
  python_subpackage_only support.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1625659200">- gpgme 1.16.0:
  * New context flag "cert-expire"
  * New data flags "io-buffer-size" and "sensitive"
  * cpp,qt: Add support for trust signatures
  * qt: Add support for flags in LDAP server options
  * qt: Fix too high memory consumption due to QProcess
  * qt: Do not set empty base DN as query of keyserver URL
  * qt: Extend SignKeyJob to create signatures with expiration date
  * python: New optional parameter filter_signatures for decrypt
- run all tests again
- add patches to fix tests:
  * gpgme-1.16.0-Use-after-free-in-t-edit-sign-test.patch
  * gpgme-1.16.0-t-various-testSignKeyWithExpiration-32-bit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1628164800">- Fix build with glibc 2.34: [bsc#1189089]
  * Use glibc's closefrom.
  * Add gpgme-use-glibc-closefrom.patch</changelog>
  <changelog author="code@bnavigator.de" date="1640347200">- Add patches to support building bindings packages for
  Python 3.10
  * gpgme-D545-python310.patch -- https://dev.gnupg.org/D545
  * gpgme-D546-python310.patch -- https://dev.gnupg.org/D546</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1660824000">- gpgme 1.18.0
  * New keylist mode to force refresh via external methods
  * The keylist operations now create an import result to report the
    result of the locate keylist modes
  * core: Return BAD_PASSPHRASE error code on symmetric decryption
    failure
  * cpp, qt: Do not export internal symbols anymore
  * cpp, qt: Support revocation of own OpenPGP keys
  * qt: The file name of (signed and) encrypted data can now be set
  * cpp, qt: Support setting the primary user ID
  * python: Fix segv(NULL) when inspecting contect after exeception
- includes changes from version 1.17.1:
  * qt: Fix a bug in the ABI compatibility of 1.17.0
- includes changes from 1.17.0:
  * New context flag "key-origin"
  * New context flag "import-filter"
  * New export mode to export secret subkeys
  * Detect errors during the export of secret keys
  * New function gpgme_op_receive_keys to import keys from a keyserver
    without first running a key listing
  * Detect bad passphrase error in certificate import
  * Allow setting --key-origin when importing keys
  * Support components "keyboxd", "gpg-agent", "scdaemon", "dirmngr",
    "pinentry", and "socketdir" in gpgme_get_dirinfo
  * Under Unix use poll(2) instead of select(2), when available.
  * Fix results returned by gpgme_data_* functions
  * Support closefrom also for glibc
    (drop upstream gpgme-use-glibc-closefrom.patch
  * cpp,qt: Add support for export of secret keys and secret subkeys.
  * cpp,qt: Support for adding existing subkeys to other keys
  * qt: Extend ChangeExpiryJob to change expiration of primary key
    and of subkeys at the same time
  * qt: Support WKD lookup without implicit import
  * qt: Allow specifying an import filter when importing keys
  * qt: Allow retrieving the default value of a config entry
- drop patches included upstream
  * gpgme-1.16.0-Use-after-free-in-t-edit-sign-test.patch
  * gpgme-1.16.0-t-various-testSignKeyWithExpiration-32-bit.patch
- add patches to fix tests:
  * gpgme-1.18.0-T6137-qt_test.patch</changelog>
  <changelog author="code@bnavigator.de" date="1667908800">- Add gpgme-suse-nobetasuffix.patch
  * remove "-unknown" suffix from version string
  * boo#1205197</changelog>
  <changelog author="dmueller@suse.com" date="1674302400">- add python311.patch to build language bindings for python 3.11</changelog>
  <changelog author="pmonreal@suse.com" date="1674475200">- Update upstream keyring: https://gnupg.org/signature_key.asc</changelog>
  <changelog author="dmueller@suse.com" date="1678449600">- drop python2 subpackage handling. we do not support python 2.x
  anymore, and if we would it would happen via singlespec</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 1.19.0:
  * New context flag "no-auto-check-trustdb". [T6261]
  * Optionally, build QGpgME for Qt 6
  * Support component "gpgtar-name" in gpgme_get_dirinfo. [T6342]
  * Extended gpgme_op_encrypt*, gpgme_op_encrypt_sign*, and
    gpgme_op_sign* to allow creating an encrypted and/or signed
    archive. [T6342]
  * Extended gpgme_op_decrypt*, gpgme_op_decrypt_verify*,
    and gpgme_op_verify* to allow extracting an encrypted and/or
    signed archive. [T6342]
  * cpp: Handle error when trying to sign expired keys. [T6155]
  * cpp: Support encryption flags ThrowKeyIds, EncryptWrap, and
    WantAddress. [T6359]
  * cpp, qt: Fix building with C++11.  [T6141]
  * qt: Fix problem with expiration dates after 2038-01-19 on 32-bit
    systems  when adding an existing subkey to another key. [T6137]
  * cpp: Allow setting the curve to use when generating ECC keys
    for smart cards. [T4429]
  * qt: Extend ListAllKeysJob to allow disabling the automatic
    trust database check when listing all keys. [T6261]
  * qt: Allow deferred start of import jobs. [T6323]
  * qt: Support creating and extracting signed and encrypted
    archives. [T6342]
  * Rebase gpgme-suse-nobetasuffix.patch
  * Remove patches upstream:
  - gpgme-D546-python310.patch
  - gpgme-1.18.0-T6137-qt_test.patch
  - python311.patch</changelog>
  <changelog author="christophe@krop.fr" date="1681214400">- Add a Qt6 flavor to build Qt6 bindings
- Use %ldconfig_scriptlets</changelog>
  <changelog author="pmonreal@suse.com" date="1682078400">- Update to 1.20.0:
  * On Windows, the gettext functions provided by gpgrt are switched
    into utf8 mode, so that all localized texts returned by GpgME or
    gpgrt, e.g. the texts for error codes are now UTF-8 encoded. [T5960]
  * Key::canSign now returns false for OpenPGP keys without signing
    (sub)key. [T6456]
  * The new macOS Homebrew location is now by default supported. [T6440]
  * Fix regression in 1.19.0.
  * Fix invocation of gpgtar on Windows.
  * Interface changes relative to the 1.19.0 release:
  - gpgme_subkey_t              EXTENDED: New field 'can_renc'.
  - gpgme_subkey_t              EXTENDED: New field 'can_timestamp'.
  - gpgme_subkey_t              EXTENDED: New field 'is_group_owned'.
  - cpp: Subkey::canRenc        NEW.
  - cpp: Subkey::canTimestamp   NEW.
  - cpp: Subkey::isGroupOwned   NEW.
  - cpp: Key::canReallySign     DEPRECATED.
  * Release-info: https://dev.gnupg.org/T6463</changelog>
  <changelog author="pmonreal@suse.com" date="1688990400">- Update to 1.21.0
  * Extended gpgme_op_encrypt, gpgme_op_encrypt_sign, and gpgme_op_sign
    to allow writing the output directly to a file. [T6530]
  * Extended gpgme_op_decrypt and gpgme_op_verify to allow reading the
    input data directly from files. [T6530]
  * For key signing and uid revoking allow an empty user id. [rMfbc3963d62]
  * Pass an input-size-hint also to the gpgsm engine. [T6534]
  * qt: Allow writing the created archives directly to a file. [T6530]
  * qt: Allow reading the signed/encrypted archive to decrypt
    or verify directly from a file. [T6530]
  * qt: Qt Jobs working with QIODeviceDataProvider now properly
    handle input-size hints and progress for files larger.
    2^32 bytes in 32 bit builds. [T6534]
  * cpp: Error::isCanceled now also returns true for error code
    GPG_ERR_FULLY_CANCELED. [T6510]
  * python: Fix wrong use of write. [T6501]
  * Interface changes relative to the 1.20.0 release:
  - cpp: Data::setFlag                            NEW.
  - cpp: Data::setSizeHint                        NEW.
  - qt: Job::startIt                              NEW.
  - qt: DecryptVerifyArchiveJob::setInputFile     NEW.
  - qt: DecryptVerifyArchiveJob::inputFile        NEW.
  - qt: EncryptArchiveJob::setRecipients          NEW.
  - qt: EncryptArchiveJob::recipients             NEW.
  - qt: EncryptArchiveJob::setInputPaths          NEW.
  - qt: EncryptArchiveJob::inputPaths             NEW.
  - qt: EncryptArchiveJob::setOutputFile          NEW.
  - qt: EncryptArchiveJob::outputFile             NEW.
  - qt: EncryptArchiveJob::setEncryptionFlags     NEW.
  - qt: EncryptArchiveJob::encryptionFlags        NEW.
  - qt: SignArchiveJob::setSigners                NEW.
  - qt: SignArchiveJob::signers                   NEW.
  - qt: SignArchiveJob::setInputPaths             NEW.
  - qt: SignArchiveJob::inputPaths                NEW.
  - qt: SignArchiveJob::setOutputFile             NEW.
  - qt: SignArchiveJob::outputFile                NEW.
  - qt: SignEncryptArchiveJob::setSigners         NEW.
  - qt: SignEncryptArchiveJob::signers            NEW.
  - qt: SignEncryptArchiveJob::setRecipients      NEW.
  - qt: SignEncryptArchiveJob::recipients         NEW.
  - qt: SignEncryptArchiveJob::setInputPaths      NEW.
  - qt: SignEncryptArchiveJob::inputPaths         NEW.
  - qt: SignEncryptArchiveJob::setOutputFile      NEW.
  - qt: SignEncryptArchiveJob::outputFile         NEW.
  - qt: SignEncryptArchiveJob::setEncryptionFlags NEW.
  - qt: SignEncryptArchiveJob::encryptionFlags    NEW.</changelog>
  <changelog author="schwab@suse.de" date="1691064000">- Run testsuite in qemu build</changelog>
  <changelog author="pmonreal@suse.com" date="1692705600">- Update to 1.22.0:
  * Prevent wrong plaintext when verifying clearsigned signature.
  * Return bad data error instead of general error on unexpected data.
  * Take care of offline mode for all operations of gpgsm engine.
  * Prepare the use of the forthcoming libassuan version 3.
  * New configure option --with-libtool-modification.
  * cpp: Expose gpgme_decrypt_result_t.is_mime.
  * qt: Clean up after failure or cancel of sign/encrypt archive operation.
  * qt: Add setInputEncoding to QGpgMe::EncryptJob.
  * qt: Make toLogString helper public.
  * Interface changes relative to the 1.21.0 release:
  - qt: EncryptJob::setInputEncoding           NEW.
  - qt: DecryptionResult::isMime               NEW.
  - qt: toLogString                            NEW.</changelog>
  <changelog author="pmonreal@suse.com" date="1692705601">- Fix builds with qt and qt6 [T6673]:
  * qt,tests: Fix build in source directory. Include Qt binding
    sources before C++ binding sources and C sources. This fixes
    the problem that the debug.h in the C sources was found before
    the one in the Qt bindings.
  * build: Suggest out-of-source build. Suggest to run configure
    from a build subdirectory.
  * Add patches:
  - gpgme-qt-tests-Fix-build-in-source-directory.patch
  - gpgme-build-Suggest-out-of-source-build.patch</changelog>
  <changelog author="christophe@krop.fr" date="1695470400">- Use GCC 12 for building the Qt6 library. The default compiler
  is too old.
- Use '%{without xxx}' rather than '!%{with xxx}' in spec file</changelog>
  <changelog author="christophe@krop.fr" date="1695470401">- Use GCC 12 for building the Qt6 library on Leap 15. The
  default compiler is too old.
- Use '%{without xxx}' rather than '!%{with xxx}' in spec file</changelog>
  <changelog author="pmonreal@suse.com" date="1698235200">- Update to 1.23.0:
  * Support GPGME_ENCRYPT_ALWAYS_TRUST also for S/MIME. [T6559]
  * New keylist mode GPGME_KEYLIST_MODE_WITH_V5FPR. [T6705]
  * New key capability flags has_*. [T6748]
  * gpgme-tool: Support use of Windows HANDLE. [T6634]
  * qt: Support refreshing keys via WKD. [T6672]
  * qt: Handle cancel in changeexpiryjob. [T6754]
  * Remove patches fixed upstream:
  - gpgme-qt-tests-Fix-build-in-source-directory.patch
  - gpgme-build-Suggest-out-of-source-build.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1761134400">- Treat empty DISPLAY variable as unset. [bsc#1252425, bsc#1231055]
  * To avoid gpgme constructing an invalid gpg command line when
    the DISPLAY variable is empty it can be treated as unset.
  * Add gpgme-Treat-empty-DISPLAY-variable-as-unset.patch
  * Reported upstream: dev.gnupg.org/T7919</changelog>
</package>
<package pkgid="dee13bf6e11c005d4036d1410636c835abd03336d1cd0a7485a45a5b63069c97" name="gpgme" arch="x86_64">
  <version epoch="0" ver="1.23.0" rel="150600.3.5.1"/>
  <changelog author="code@bnavigator.de" date="1616673600">- Can't assume non-existence of python38 macros in Leap.
  gh#openSUSE/python-rpm-macros#107
  Test for suse_version instead. Only Tumbleweed has and needs the
  python_subpackage_only support.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1625659200">- gpgme 1.16.0:
  * New context flag "cert-expire"
  * New data flags "io-buffer-size" and "sensitive"
  * cpp,qt: Add support for trust signatures
  * qt: Add support for flags in LDAP server options
  * qt: Fix too high memory consumption due to QProcess
  * qt: Do not set empty base DN as query of keyserver URL
  * qt: Extend SignKeyJob to create signatures with expiration date
  * python: New optional parameter filter_signatures for decrypt
- run all tests again
- add patches to fix tests:
  * gpgme-1.16.0-Use-after-free-in-t-edit-sign-test.patch
  * gpgme-1.16.0-t-various-testSignKeyWithExpiration-32-bit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1628164800">- Fix build with glibc 2.34: [bsc#1189089]
  * Use glibc's closefrom.
  * Add gpgme-use-glibc-closefrom.patch</changelog>
  <changelog author="code@bnavigator.de" date="1640347200">- Add patches to support building bindings packages for
  Python 3.10
  * gpgme-D545-python310.patch -- https://dev.gnupg.org/D545
  * gpgme-D546-python310.patch -- https://dev.gnupg.org/D546</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1660824000">- gpgme 1.18.0
  * New keylist mode to force refresh via external methods
  * The keylist operations now create an import result to report the
    result of the locate keylist modes
  * core: Return BAD_PASSPHRASE error code on symmetric decryption
    failure
  * cpp, qt: Do not export internal symbols anymore
  * cpp, qt: Support revocation of own OpenPGP keys
  * qt: The file name of (signed and) encrypted data can now be set
  * cpp, qt: Support setting the primary user ID
  * python: Fix segv(NULL) when inspecting contect after exeception
- includes changes from version 1.17.1:
  * qt: Fix a bug in the ABI compatibility of 1.17.0
- includes changes from 1.17.0:
  * New context flag "key-origin"
  * New context flag "import-filter"
  * New export mode to export secret subkeys
  * Detect errors during the export of secret keys
  * New function gpgme_op_receive_keys to import keys from a keyserver
    without first running a key listing
  * Detect bad passphrase error in certificate import
  * Allow setting --key-origin when importing keys
  * Support components "keyboxd", "gpg-agent", "scdaemon", "dirmngr",
    "pinentry", and "socketdir" in gpgme_get_dirinfo
  * Under Unix use poll(2) instead of select(2), when available.
  * Fix results returned by gpgme_data_* functions
  * Support closefrom also for glibc
    (drop upstream gpgme-use-glibc-closefrom.patch
  * cpp,qt: Add support for export of secret keys and secret subkeys.
  * cpp,qt: Support for adding existing subkeys to other keys
  * qt: Extend ChangeExpiryJob to change expiration of primary key
    and of subkeys at the same time
  * qt: Support WKD lookup without implicit import
  * qt: Allow specifying an import filter when importing keys
  * qt: Allow retrieving the default value of a config entry
- drop patches included upstream
  * gpgme-1.16.0-Use-after-free-in-t-edit-sign-test.patch
  * gpgme-1.16.0-t-various-testSignKeyWithExpiration-32-bit.patch
- add patches to fix tests:
  * gpgme-1.18.0-T6137-qt_test.patch</changelog>
  <changelog author="code@bnavigator.de" date="1667908800">- Add gpgme-suse-nobetasuffix.patch
  * remove "-unknown" suffix from version string
  * boo#1205197</changelog>
  <changelog author="dmueller@suse.com" date="1674302400">- add python311.patch to build language bindings for python 3.11</changelog>
  <changelog author="pmonreal@suse.com" date="1674475200">- Update upstream keyring: https://gnupg.org/signature_key.asc</changelog>
  <changelog author="dmueller@suse.com" date="1678449600">- drop python2 subpackage handling. we do not support python 2.x
  anymore, and if we would it would happen via singlespec</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 1.19.0:
  * New context flag "no-auto-check-trustdb". [T6261]
  * Optionally, build QGpgME for Qt 6
  * Support component "gpgtar-name" in gpgme_get_dirinfo. [T6342]
  * Extended gpgme_op_encrypt*, gpgme_op_encrypt_sign*, and
    gpgme_op_sign* to allow creating an encrypted and/or signed
    archive. [T6342]
  * Extended gpgme_op_decrypt*, gpgme_op_decrypt_verify*,
    and gpgme_op_verify* to allow extracting an encrypted and/or
    signed archive. [T6342]
  * cpp: Handle error when trying to sign expired keys. [T6155]
  * cpp: Support encryption flags ThrowKeyIds, EncryptWrap, and
    WantAddress. [T6359]
  * cpp, qt: Fix building with C++11.  [T6141]
  * qt: Fix problem with expiration dates after 2038-01-19 on 32-bit
    systems  when adding an existing subkey to another key. [T6137]
  * cpp: Allow setting the curve to use when generating ECC keys
    for smart cards. [T4429]
  * qt: Extend ListAllKeysJob to allow disabling the automatic
    trust database check when listing all keys. [T6261]
  * qt: Allow deferred start of import jobs. [T6323]
  * qt: Support creating and extracting signed and encrypted
    archives. [T6342]
  * Rebase gpgme-suse-nobetasuffix.patch
  * Remove patches upstream:
  - gpgme-D546-python310.patch
  - gpgme-1.18.0-T6137-qt_test.patch
  - python311.patch</changelog>
  <changelog author="christophe@krop.fr" date="1681214400">- Add a Qt6 flavor to build Qt6 bindings
- Use %ldconfig_scriptlets</changelog>
  <changelog author="pmonreal@suse.com" date="1682078400">- Update to 1.20.0:
  * On Windows, the gettext functions provided by gpgrt are switched
    into utf8 mode, so that all localized texts returned by GpgME or
    gpgrt, e.g. the texts for error codes are now UTF-8 encoded. [T5960]
  * Key::canSign now returns false for OpenPGP keys without signing
    (sub)key. [T6456]
  * The new macOS Homebrew location is now by default supported. [T6440]
  * Fix regression in 1.19.0.
  * Fix invocation of gpgtar on Windows.
  * Interface changes relative to the 1.19.0 release:
  - gpgme_subkey_t              EXTENDED: New field 'can_renc'.
  - gpgme_subkey_t              EXTENDED: New field 'can_timestamp'.
  - gpgme_subkey_t              EXTENDED: New field 'is_group_owned'.
  - cpp: Subkey::canRenc        NEW.
  - cpp: Subkey::canTimestamp   NEW.
  - cpp: Subkey::isGroupOwned   NEW.
  - cpp: Key::canReallySign     DEPRECATED.
  * Release-info: https://dev.gnupg.org/T6463</changelog>
  <changelog author="pmonreal@suse.com" date="1688990400">- Update to 1.21.0
  * Extended gpgme_op_encrypt, gpgme_op_encrypt_sign, and gpgme_op_sign
    to allow writing the output directly to a file. [T6530]
  * Extended gpgme_op_decrypt and gpgme_op_verify to allow reading the
    input data directly from files. [T6530]
  * For key signing and uid revoking allow an empty user id. [rMfbc3963d62]
  * Pass an input-size-hint also to the gpgsm engine. [T6534]
  * qt: Allow writing the created archives directly to a file. [T6530]
  * qt: Allow reading the signed/encrypted archive to decrypt
    or verify directly from a file. [T6530]
  * qt: Qt Jobs working with QIODeviceDataProvider now properly
    handle input-size hints and progress for files larger.
    2^32 bytes in 32 bit builds. [T6534]
  * cpp: Error::isCanceled now also returns true for error code
    GPG_ERR_FULLY_CANCELED. [T6510]
  * python: Fix wrong use of write. [T6501]
  * Interface changes relative to the 1.20.0 release:
  - cpp: Data::setFlag                            NEW.
  - cpp: Data::setSizeHint                        NEW.
  - qt: Job::startIt                              NEW.
  - qt: DecryptVerifyArchiveJob::setInputFile     NEW.
  - qt: DecryptVerifyArchiveJob::inputFile        NEW.
  - qt: EncryptArchiveJob::setRecipients          NEW.
  - qt: EncryptArchiveJob::recipients             NEW.
  - qt: EncryptArchiveJob::setInputPaths          NEW.
  - qt: EncryptArchiveJob::inputPaths             NEW.
  - qt: EncryptArchiveJob::setOutputFile          NEW.
  - qt: EncryptArchiveJob::outputFile             NEW.
  - qt: EncryptArchiveJob::setEncryptionFlags     NEW.
  - qt: EncryptArchiveJob::encryptionFlags        NEW.
  - qt: SignArchiveJob::setSigners                NEW.
  - qt: SignArchiveJob::signers                   NEW.
  - qt: SignArchiveJob::setInputPaths             NEW.
  - qt: SignArchiveJob::inputPaths                NEW.
  - qt: SignArchiveJob::setOutputFile             NEW.
  - qt: SignArchiveJob::outputFile                NEW.
  - qt: SignEncryptArchiveJob::setSigners         NEW.
  - qt: SignEncryptArchiveJob::signers            NEW.
  - qt: SignEncryptArchiveJob::setRecipients      NEW.
  - qt: SignEncryptArchiveJob::recipients         NEW.
  - qt: SignEncryptArchiveJob::setInputPaths      NEW.
  - qt: SignEncryptArchiveJob::inputPaths         NEW.
  - qt: SignEncryptArchiveJob::setOutputFile      NEW.
  - qt: SignEncryptArchiveJob::outputFile         NEW.
  - qt: SignEncryptArchiveJob::setEncryptionFlags NEW.
  - qt: SignEncryptArchiveJob::encryptionFlags    NEW.</changelog>
  <changelog author="schwab@suse.de" date="1691064000">- Run testsuite in qemu build</changelog>
  <changelog author="pmonreal@suse.com" date="1692705600">- Update to 1.22.0:
  * Prevent wrong plaintext when verifying clearsigned signature.
  * Return bad data error instead of general error on unexpected data.
  * Take care of offline mode for all operations of gpgsm engine.
  * Prepare the use of the forthcoming libassuan version 3.
  * New configure option --with-libtool-modification.
  * cpp: Expose gpgme_decrypt_result_t.is_mime.
  * qt: Clean up after failure or cancel of sign/encrypt archive operation.
  * qt: Add setInputEncoding to QGpgMe::EncryptJob.
  * qt: Make toLogString helper public.
  * Interface changes relative to the 1.21.0 release:
  - qt: EncryptJob::setInputEncoding           NEW.
  - qt: DecryptionResult::isMime               NEW.
  - qt: toLogString                            NEW.</changelog>
  <changelog author="pmonreal@suse.com" date="1692705601">- Fix builds with qt and qt6 [T6673]:
  * qt,tests: Fix build in source directory. Include Qt binding
    sources before C++ binding sources and C sources. This fixes
    the problem that the debug.h in the C sources was found before
    the one in the Qt bindings.
  * build: Suggest out-of-source build. Suggest to run configure
    from a build subdirectory.
  * Add patches:
  - gpgme-qt-tests-Fix-build-in-source-directory.patch
  - gpgme-build-Suggest-out-of-source-build.patch</changelog>
  <changelog author="christophe@krop.fr" date="1695470400">- Use GCC 12 for building the Qt6 library. The default compiler
  is too old.
- Use '%{without xxx}' rather than '!%{with xxx}' in spec file</changelog>
  <changelog author="christophe@krop.fr" date="1695470401">- Use GCC 12 for building the Qt6 library on Leap 15. The
  default compiler is too old.
- Use '%{without xxx}' rather than '!%{with xxx}' in spec file</changelog>
  <changelog author="pmonreal@suse.com" date="1698235200">- Update to 1.23.0:
  * Support GPGME_ENCRYPT_ALWAYS_TRUST also for S/MIME. [T6559]
  * New keylist mode GPGME_KEYLIST_MODE_WITH_V5FPR. [T6705]
  * New key capability flags has_*. [T6748]
  * gpgme-tool: Support use of Windows HANDLE. [T6634]
  * qt: Support refreshing keys via WKD. [T6672]
  * qt: Handle cancel in changeexpiryjob. [T6754]
  * Remove patches fixed upstream:
  - gpgme-qt-tests-Fix-build-in-source-directory.patch
  - gpgme-build-Suggest-out-of-source-build.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1761134400">- Treat empty DISPLAY variable as unset. [bsc#1252425, bsc#1231055]
  * To avoid gpgme constructing an invalid gpg command line when
    the DISPLAY variable is empty it can be treated as unset.
  * Add gpgme-Treat-empty-DISPLAY-variable-as-unset.patch
  * Reported upstream: dev.gnupg.org/T7919</changelog>
</package>
<package pkgid="aeef1db29fef38828f61a5c177342b7c74f98dccecc45acadb2ffbe892624692" name="gpgmeqt" arch="src">
  <version epoch="0" ver="1.23.0" rel="150600.3.5.1"/>
  <changelog author="code@bnavigator.de" date="1616673600">- Can't assume non-existence of python38 macros in Leap.
  gh#openSUSE/python-rpm-macros#107
  Test for suse_version instead. Only Tumbleweed has and needs the
  python_subpackage_only support.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1625659200">- gpgme 1.16.0:
  * New context flag "cert-expire"
  * New data flags "io-buffer-size" and "sensitive"
  * cpp,qt: Add support for trust signatures
  * qt: Add support for flags in LDAP server options
  * qt: Fix too high memory consumption due to QProcess
  * qt: Do not set empty base DN as query of keyserver URL
  * qt: Extend SignKeyJob to create signatures with expiration date
  * python: New optional parameter filter_signatures for decrypt
- run all tests again
- add patches to fix tests:
  * gpgme-1.16.0-Use-after-free-in-t-edit-sign-test.patch
  * gpgme-1.16.0-t-various-testSignKeyWithExpiration-32-bit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1628164800">- Fix build with glibc 2.34: [bsc#1189089]
  * Use glibc's closefrom.
  * Add gpgme-use-glibc-closefrom.patch</changelog>
  <changelog author="code@bnavigator.de" date="1640347200">- Add patches to support building bindings packages for
  Python 3.10
  * gpgme-D545-python310.patch -- https://dev.gnupg.org/D545
  * gpgme-D546-python310.patch -- https://dev.gnupg.org/D546</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1660824000">- gpgme 1.18.0
  * New keylist mode to force refresh via external methods
  * The keylist operations now create an import result to report the
    result of the locate keylist modes
  * core: Return BAD_PASSPHRASE error code on symmetric decryption
    failure
  * cpp, qt: Do not export internal symbols anymore
  * cpp, qt: Support revocation of own OpenPGP keys
  * qt: The file name of (signed and) encrypted data can now be set
  * cpp, qt: Support setting the primary user ID
  * python: Fix segv(NULL) when inspecting contect after exeception
- includes changes from version 1.17.1:
  * qt: Fix a bug in the ABI compatibility of 1.17.0
- includes changes from 1.17.0:
  * New context flag "key-origin"
  * New context flag "import-filter"
  * New export mode to export secret subkeys
  * Detect errors during the export of secret keys
  * New function gpgme_op_receive_keys to import keys from a keyserver
    without first running a key listing
  * Detect bad passphrase error in certificate import
  * Allow setting --key-origin when importing keys
  * Support components "keyboxd", "gpg-agent", "scdaemon", "dirmngr",
    "pinentry", and "socketdir" in gpgme_get_dirinfo
  * Under Unix use poll(2) instead of select(2), when available.
  * Fix results returned by gpgme_data_* functions
  * Support closefrom also for glibc
    (drop upstream gpgme-use-glibc-closefrom.patch
  * cpp,qt: Add support for export of secret keys and secret subkeys.
  * cpp,qt: Support for adding existing subkeys to other keys
  * qt: Extend ChangeExpiryJob to change expiration of primary key
    and of subkeys at the same time
  * qt: Support WKD lookup without implicit import
  * qt: Allow specifying an import filter when importing keys
  * qt: Allow retrieving the default value of a config entry
- drop patches included upstream
  * gpgme-1.16.0-Use-after-free-in-t-edit-sign-test.patch
  * gpgme-1.16.0-t-various-testSignKeyWithExpiration-32-bit.patch
- add patches to fix tests:
  * gpgme-1.18.0-T6137-qt_test.patch</changelog>
  <changelog author="code@bnavigator.de" date="1667908800">- Add gpgme-suse-nobetasuffix.patch
  * remove "-unknown" suffix from version string
  * boo#1205197</changelog>
  <changelog author="dmueller@suse.com" date="1674302400">- add python311.patch to build language bindings for python 3.11</changelog>
  <changelog author="pmonreal@suse.com" date="1674475200">- Update upstream keyring: https://gnupg.org/signature_key.asc</changelog>
  <changelog author="dmueller@suse.com" date="1678449600">- drop python2 subpackage handling. we do not support python 2.x
  anymore, and if we would it would happen via singlespec</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 1.19.0:
  * New context flag "no-auto-check-trustdb". [T6261]
  * Optionally, build QGpgME for Qt 6
  * Support component "gpgtar-name" in gpgme_get_dirinfo. [T6342]
  * Extended gpgme_op_encrypt*, gpgme_op_encrypt_sign*, and
    gpgme_op_sign* to allow creating an encrypted and/or signed
    archive. [T6342]
  * Extended gpgme_op_decrypt*, gpgme_op_decrypt_verify*,
    and gpgme_op_verify* to allow extracting an encrypted and/or
    signed archive. [T6342]
  * cpp: Handle error when trying to sign expired keys. [T6155]
  * cpp: Support encryption flags ThrowKeyIds, EncryptWrap, and
    WantAddress. [T6359]
  * cpp, qt: Fix building with C++11.  [T6141]
  * qt: Fix problem with expiration dates after 2038-01-19 on 32-bit
    systems  when adding an existing subkey to another key. [T6137]
  * cpp: Allow setting the curve to use when generating ECC keys
    for smart cards. [T4429]
  * qt: Extend ListAllKeysJob to allow disabling the automatic
    trust database check when listing all keys. [T6261]
  * qt: Allow deferred start of import jobs. [T6323]
  * qt: Support creating and extracting signed and encrypted
    archives. [T6342]
  * Rebase gpgme-suse-nobetasuffix.patch
  * Remove patches upstream:
  - gpgme-D546-python310.patch
  - gpgme-1.18.0-T6137-qt_test.patch
  - python311.patch</changelog>
  <changelog author="christophe@krop.fr" date="1681214400">- Add a Qt6 flavor to build Qt6 bindings
- Use %ldconfig_scriptlets</changelog>
  <changelog author="pmonreal@suse.com" date="1682078400">- Update to 1.20.0:
  * On Windows, the gettext functions provided by gpgrt are switched
    into utf8 mode, so that all localized texts returned by GpgME or
    gpgrt, e.g. the texts for error codes are now UTF-8 encoded. [T5960]
  * Key::canSign now returns false for OpenPGP keys without signing
    (sub)key. [T6456]
  * The new macOS Homebrew location is now by default supported. [T6440]
  * Fix regression in 1.19.0.
  * Fix invocation of gpgtar on Windows.
  * Interface changes relative to the 1.19.0 release:
  - gpgme_subkey_t              EXTENDED: New field 'can_renc'.
  - gpgme_subkey_t              EXTENDED: New field 'can_timestamp'.
  - gpgme_subkey_t              EXTENDED: New field 'is_group_owned'.
  - cpp: Subkey::canRenc        NEW.
  - cpp: Subkey::canTimestamp   NEW.
  - cpp: Subkey::isGroupOwned   NEW.
  - cpp: Key::canReallySign     DEPRECATED.
  * Release-info: https://dev.gnupg.org/T6463</changelog>
  <changelog author="pmonreal@suse.com" date="1688990400">- Update to 1.21.0
  * Extended gpgme_op_encrypt, gpgme_op_encrypt_sign, and gpgme_op_sign
    to allow writing the output directly to a file. [T6530]
  * Extended gpgme_op_decrypt and gpgme_op_verify to allow reading the
    input data directly from files. [T6530]
  * For key signing and uid revoking allow an empty user id. [rMfbc3963d62]
  * Pass an input-size-hint also to the gpgsm engine. [T6534]
  * qt: Allow writing the created archives directly to a file. [T6530]
  * qt: Allow reading the signed/encrypted archive to decrypt
    or verify directly from a file. [T6530]
  * qt: Qt Jobs working with QIODeviceDataProvider now properly
    handle input-size hints and progress for files larger.
    2^32 bytes in 32 bit builds. [T6534]
  * cpp: Error::isCanceled now also returns true for error code
    GPG_ERR_FULLY_CANCELED. [T6510]
  * python: Fix wrong use of write. [T6501]
  * Interface changes relative to the 1.20.0 release:
  - cpp: Data::setFlag                            NEW.
  - cpp: Data::setSizeHint                        NEW.
  - qt: Job::startIt                              NEW.
  - qt: DecryptVerifyArchiveJob::setInputFile     NEW.
  - qt: DecryptVerifyArchiveJob::inputFile        NEW.
  - qt: EncryptArchiveJob::setRecipients          NEW.
  - qt: EncryptArchiveJob::recipients             NEW.
  - qt: EncryptArchiveJob::setInputPaths          NEW.
  - qt: EncryptArchiveJob::inputPaths             NEW.
  - qt: EncryptArchiveJob::setOutputFile          NEW.
  - qt: EncryptArchiveJob::outputFile             NEW.
  - qt: EncryptArchiveJob::setEncryptionFlags     NEW.
  - qt: EncryptArchiveJob::encryptionFlags        NEW.
  - qt: SignArchiveJob::setSigners                NEW.
  - qt: SignArchiveJob::signers                   NEW.
  - qt: SignArchiveJob::setInputPaths             NEW.
  - qt: SignArchiveJob::inputPaths                NEW.
  - qt: SignArchiveJob::setOutputFile             NEW.
  - qt: SignArchiveJob::outputFile                NEW.
  - qt: SignEncryptArchiveJob::setSigners         NEW.
  - qt: SignEncryptArchiveJob::signers            NEW.
  - qt: SignEncryptArchiveJob::setRecipients      NEW.
  - qt: SignEncryptArchiveJob::recipients         NEW.
  - qt: SignEncryptArchiveJob::setInputPaths      NEW.
  - qt: SignEncryptArchiveJob::inputPaths         NEW.
  - qt: SignEncryptArchiveJob::setOutputFile      NEW.
  - qt: SignEncryptArchiveJob::outputFile         NEW.
  - qt: SignEncryptArchiveJob::setEncryptionFlags NEW.
  - qt: SignEncryptArchiveJob::encryptionFlags    NEW.</changelog>
  <changelog author="schwab@suse.de" date="1691064000">- Run testsuite in qemu build</changelog>
  <changelog author="pmonreal@suse.com" date="1692705600">- Update to 1.22.0:
  * Prevent wrong plaintext when verifying clearsigned signature.
  * Return bad data error instead of general error on unexpected data.
  * Take care of offline mode for all operations of gpgsm engine.
  * Prepare the use of the forthcoming libassuan version 3.
  * New configure option --with-libtool-modification.
  * cpp: Expose gpgme_decrypt_result_t.is_mime.
  * qt: Clean up after failure or cancel of sign/encrypt archive operation.
  * qt: Add setInputEncoding to QGpgMe::EncryptJob.
  * qt: Make toLogString helper public.
  * Interface changes relative to the 1.21.0 release:
  - qt: EncryptJob::setInputEncoding           NEW.
  - qt: DecryptionResult::isMime               NEW.
  - qt: toLogString                            NEW.</changelog>
  <changelog author="pmonreal@suse.com" date="1692705601">- Fix builds with qt and qt6 [T6673]:
  * qt,tests: Fix build in source directory. Include Qt binding
    sources before C++ binding sources and C sources. This fixes
    the problem that the debug.h in the C sources was found before
    the one in the Qt bindings.
  * build: Suggest out-of-source build. Suggest to run configure
    from a build subdirectory.
  * Add patches:
  - gpgme-qt-tests-Fix-build-in-source-directory.patch
  - gpgme-build-Suggest-out-of-source-build.patch</changelog>
  <changelog author="christophe@krop.fr" date="1695470400">- Use GCC 12 for building the Qt6 library. The default compiler
  is too old.
- Use '%{without xxx}' rather than '!%{with xxx}' in spec file</changelog>
  <changelog author="christophe@krop.fr" date="1695470401">- Use GCC 12 for building the Qt6 library on Leap 15. The
  default compiler is too old.
- Use '%{without xxx}' rather than '!%{with xxx}' in spec file</changelog>
  <changelog author="pmonreal@suse.com" date="1698235200">- Update to 1.23.0:
  * Support GPGME_ENCRYPT_ALWAYS_TRUST also for S/MIME. [T6559]
  * New keylist mode GPGME_KEYLIST_MODE_WITH_V5FPR. [T6705]
  * New key capability flags has_*. [T6748]
  * gpgme-tool: Support use of Windows HANDLE. [T6634]
  * qt: Support refreshing keys via WKD. [T6672]
  * qt: Handle cancel in changeexpiryjob. [T6754]
  * Remove patches fixed upstream:
  - gpgme-qt-tests-Fix-build-in-source-directory.patch
  - gpgme-build-Suggest-out-of-source-build.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1761134400">- Treat empty DISPLAY variable as unset. [bsc#1252425, bsc#1231055]
  * To avoid gpgme constructing an invalid gpg command line when
    the DISPLAY variable is empty it can be treated as unset.
  * Add gpgme-Treat-empty-DISPLAY-variable-as-unset.patch
  * Reported upstream: dev.gnupg.org/T7919</changelog>
</package>
<package pkgid="16b5d627e989b74fdeac60c174255331fb58d9dff4ef47a5d6bdd4a6ee71dc6b" name="grpc" arch="src">
  <version epoch="0" ver="1.25.0" rel="150200.3.10.1"/>
  <changelog author="jengelh@inai.de" date="1526644800">- Switch to plain makefiles since they generate more shared libs.
- Remove grpc-build.diff, grpc-versioning.diff.</changelog>
  <changelog author="tbechtold@suse.com" date="1527249600">- build grpc python module for python2 and python3
  * add 0001-Allow-building-the-python-module-with-system-openssl.patch
  * add 0002-Allow-building-the-python-module-with-system-zlib.patch
  * add 0003-Allow-building-the-python-module-with-system-cares.patch</changelog>
  <changelog author="jengelh@inai.de" date="1529755200">- Throw out silly -Werror in release builds.</changelog>
  <changelog author="tbechtold@suse.com" date="1541937600">- update to 1.15.1:
  * Document SSL portability and performance considerations. See
    https://github.com/grpc/grpc/blob/master/doc/ssl-performance.md .
  * Simplify call arena size growth.
  * PF: Check connectivity state before watching.
  * Added system roots feature to load roots from OS trust store.
  * Fix re-resolution in pick first.
  * Allow error strings in final_info to propagate to filters on
    call destruction.
  * Add resolver executor.
  * Data race fix for lockfree_event.
  * Channelz: Expose new Core API.
  * cmake: disable assembly optimizations only when necessary.
  * C++ sync server: Return status RESOURCE_EXHAUSTED if no
    thread quota available.
  * Use correct target name for gflags-config.cmake.
  * Make should generate pkg-config file for gpr as well.
  * Restrict the number of threads in C++ sync server.
  * Allow reset of connection backoff.
- update to 1.14.2:
  * Add TROUBLESHOOTING.md guide
  * Fixed gRPC channels blocking indefinitely and not respecting
    deadlines on network disconnect.
  * Add user guide for keepalive.
  * Fix GRPC_ARG_HTTP2_MIN_RECV_PING_INTERVAL_WITHOUT_DATA_MS doc
    to restrict usage to server.
  * Fixed ordering in adding pending picks to Round Robin LB.
  * Implement local channel/server credentials for UDS connections.
  * Allow extra copy in zero-copy protector integrity-only mode.
  * Update to use the canonical version of LB proto.
  * Prefer using https_proxy over http_proxy.
  * Refactor to put c-ares queries under a combiner.
  * Remove already_closed parameter from fd_orphan.
  * Add channel arg to enable/disable http proxy.
  * Fix shutdown of closed fd when c-ares opens a second fd.
  * Fixed segmentation fault when product name from BIOS is empty.
  * Introduce server-side load reporting service.
  * Reorder steps in ServerBuilder::BuildAndStart().
  * Support Per-Method Codegen Generic on Server Side.
  * Protobuf-related headers are available in a subspec of
    gRPC-C++ podspec.
- update to 1.13.1:
  * gRPC stats will only be collected for debug builds or if
    GRPC_COLLECT_STATS is defined. It will be disabled for opt
    builds.
  * Fix for Issue #13553. Unlimited can now be set as the max
    receive message length.
  * cmake install now also installs should also installs the
    roots.pem file.
- Drop 0001-Allow-building-the-python-module-with-system-openssl.patch
  Applied upstream
- Drop 0002-Allow-building-the-python-module-with-system-zlib.patch
  Applied upstream
- 0003-Allow-building-the-python-module-with-system-cares.patch
  Applied upstream</changelog>
  <changelog author="jengelh@inai.de" date="1541937601">- Update to new upstream release 1.16
  * Keepalive watchdog firing should return status UNAVAILABLE.
  * Set TCP_USER_TIMEOUT socket option for Linux.
  * Turn loading system root certificate as default.
  * Change pick_first to not unref unselected subchannels.
  * cmake: prevent C core from depending on libstdc++.
  * Implement Watch method in health check service.</changelog>
  <changelog author="mrostecki@suse.de" date="1546862400">- Add grpc-source package - some Go programs using gRPC need
  protobuf definitions which are included inside the source code,
  but are not included in the devel package.</changelog>
  <changelog author="jengelh@inai.de" date="1552737600">- Update to new upstream release 1.19.1
  * Use 32-bit nanopb fields.
  * Avoid SRV and TXT lookups for localhost.
  * Set c-ares as the default resolver.</changelog>
  <changelog author="sbrabec@suse.com" date="1555070400">- Fix typo in Groups.</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 1.21.3
  * Add SPIFFE security stack to gRPC.
  * Re-enable ALPN check in gRPC C core SSL stack.</changelog>
  <changelog author="jengelh@inai.de" date="1566129600">- Update to new upstream release 1.23 [boo#1144068]
  * Fixed a bug where POST_RECV_MESSAGE was not being triggered.
  * Renamed root certificate bundle in gRPC-C++ pod.
  * Increased lower bound on DNS re-resolution period to 30 seconds.
  * Fixed a segfault when forking while using gevent.
  * Added channel idleness support
  * Added threadpool support</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Disable LTO because it's broken.</changelog>
  <changelog author="jengelh@inai.de" date="1570017600">- Update to release 1.23.1
  * Unspecific refinements, improvements, and bug fixes.
- Add gettid.patch
- Split libgrpc into libgrpc++ because that has a SO version
  group of its own.
- Bump libgrpc6 to libgrpc7 as there is actually .so.7 files.
  Add suitable Conflicts markers.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1570708800">- Make sure that patches are included in the source package.
- Filter out several rpmlintrc warnings for the source package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1572955200">- Add patch which replaces BoringSSL with OpenSSL as the SSL
  library when grpc is used as a Bazel dependency:
  * 0001-bazel-Replace-boringssl-with-openssl.patch</changelog>
  <changelog author="mrostecki@opensuse.org" date="1573473600">- Define BoringSSL as a Bazel dependency in WORKSPACE instead of
  grpc_deps.bzl - using new_local_repository function is now always
  allowed in imported modules.</changelog>
  <changelog author="jengelh@inai.de" date="1576497600">- Update to release 1.25
  * Change RR to consider a subchannel in TF if it has failed
    since it was READY.
  * Do not create streams after a GOAWAY has been received.
  * Prevent HTTP2 parser from queueing a lot of induced frames.
- Drop gettid.patch</changelog>
  <changelog author="mrostecki@opensuse.org" date="1578571200">- Remove patch for Bazel files, which is not needed anymore:
  * 0001-bazel-Replace-boringssl-with-openssl.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1584014400">- Add conditional to build without python2 if needed</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1649160000">- Update in SLE-15 (bsc#1197726)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1772193600">- Add ignore-connection-aborted-errors-on-accept.patch to backport
  changes required by the security fix
- Add CVE-2023-33953.patch to fix unbounded memory and CPU consumption
  in the HPACK parser leads to remote DoS (bsc#1214148, CVE-2023-33953)</changelog>
</package>
<package pkgid="49f6e9578e4f3c4a00bdf16992eb3f6541210010b9483a9e48b75e0601e6131c" name="grub2" arch="src">
  <version epoch="0" ver="2.12" rel="150700.19.13.2"/>
  <changelog author="mchang@suse.com" date="1730462400">- Fix grub.cfg is loaded from an unexpected fallback directory instead of the
  root directory during PXE boot when grub is loaded from the tftp root
  directory (bsc#1232391)
  * 0001-kern-main-Fix-cmdpath-in-root-directory.patch
  * grub2.spec: Refine PPC grub.elf early config to derive root from cmdpath
    directly, avoiding the unneeded search</changelog>
  <changelog author="mchang@suse.com" date="1730894400">- Fix xen package contains debug_info files with the .module suffix by moving
  them to a separate xen-debug subpackage (bsc#1232573)</changelog>
  <changelog author="mchang@suse.com" date="1731067200">- Do not enable blscfg on s390-emu
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1731067201">- Fix previous change as the variable has to be set earlier
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1731499200">- Revert the patches related to BLS support in grub2-mkconfig, as they are not
  relevant to the current BLS integration and cause issues in older KIWI
  versions, which actively force it to be enabled by default (bsc#1233196)
  * 0002-Add-BLS-support-to-grub-mkconfig.patch
  * 0003-Add-grub2-switch-to-blscfg.patch
  * 0007-grub-switch-to-blscfg-adapt-to-openSUSE.patch
  * 0008-blscfg-reading-bls-fragments-if-boot-present.patch
  * 0009-10_linux-Some-refinement-for-BLS.patch
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1733486400">- Fix missing requires in SLE package (bsc#1234264) (bsc#1234272)</changelog>
  <changelog author="mchang@suse.com" date="1733659200">- Update PowerPC SBAT patches to upstream (bsc#1233730)
  * 0007-grub-mkimage-Create-new-ELF-note-for-SBAT.patch
  * 0008-grub-mkimage-Add-SBAT-metadata-into-ELF-note-for-Pow.patch
- Replaced patches
  * 0007-mkimage-create-new-ELF-Note-for-SBAT.patch
  * 0008-mkimage-adding-sbat-data-into-sbat-ELF-Note-on-power.patch</changelog>
  <changelog author="mchang@suse.com" date="1739448000">- Fix out of memory issue on PowerPC by increasing RMA size (bsc#1236744)
  * 0001-powerpc-increase-MIN-RMA-size-for-CAS-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1739534400">- Security fixes for 2024
  * 0001-misc-Implement-grub_strlcpy.patch
- Fix CVE-2024-45781 (bsc#1233617)
  * 0002-fs-ufs-Fix-a-heap-OOB-write.patch
- Fix CVE-2024-56737 (bsc#1234958)
- Fix CVE-2024-45782 (bsc#1233615)
  * 0003-fs-hfs-Fix-stack-OOB-write-with-grub_strcpy.patch
- Fix CVE-2024-45780 (bsc#1233614)
  * 0004-fs-tar-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2024-45783 (bsc#1233616)
  * 0005-fs-hfsplus-Set-a-grub_errno-if-mount-fails.patch
  * 0006-kern-file-Ensure-file-data-is-set.patch
  * 0007-kern-file-Implement-filesystem-reference-counting.patch
- Fix CVE-2025-0624 (bsc#1236316)
  * 0008-net-Fix-OOB-write-in-grub_net_search_config_file.patch
- Fix CVE-2024-45774 (bsc#1233609)
  * 0009-video-readers-jpeg-Do-not-permit-duplicate-SOF0-mark.patch
- Fix CVE-2024-45775 (bsc#1233610)
  * 0010-commands-extcmd-Missing-check-for-failed-allocation.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0011-commands-pgp-Unregister-the-check_signatures-hooks-o.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0012-normal-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0013-gettext-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2024-45776 (bsc#1233612)
  * 0014-gettext-Integer-overflow-leads-to-heap-OOB-write-or-.patch
- Fix CVE-2024-45777 (bsc#1233613)
  * 0015-gettext-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2025-0690 (bsc#1237012)
  * 0016-commands-read-Fix-an-integer-overflow-when-supplying.patch
- Fix CVE-2025-1118 (bsc#1237013)
  * 0017-commands-minicmd-Block-the-dump-command-in-lockdown-.patch
- Fix CVE-2024-45778 (bsc#1233606)
- Fix CVE-2024-45779 (bsc#1233608)
  * 0018-fs-bfs-Disable-under-lockdown.patch
- Fix CVE-2025-0677 (bsc#1237002)
- Fix CVE-2025-0684 (bsc#1237008)
- Fix CVE-2025-0685 (bsc#1237009)
- Fix CVE-2025-0686 (bsc#1237010)
- Fix CVE-2025-0689 (bsc#1237011)
  * 0019-fs-Disable-many-filesystems-under-lockdown.patch
- Fix CVE-2025-1125 (bsc#1237014)
- Fix CVE-2025-0678 (bsc#1237006)
  * 0020-fs-Prevent-overflows-when-allocating-memory-for-arra.patch
- Updated to upstream version
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch
- Bump upstream SBAT generation to 5</changelog>
  <changelog author="mchang@suse.com" date="1741003200">- Cherry-pick upstream XFS fixes
  * 0001-fs-xfs-Add-new-superblock-features-added-in-Linux-6..patch
  * 0002-fs-xfs-Fix-grub_xfs_iterate_dir-return-value-in-case.patch
- Fix "attempt to read of write outside of partition" error message (bsc#1237844)
  * 0003-fs-xfs-fix-large-extent-counters-incompat-feature-su.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348800">- Fix zfs.mo not found message when booting on legacy BIOS (bsc#1237865)
  * 0001-autofs-Ignore-zfs-not-found.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348801">- Pass through PAES cipher as AES on s390x-emu (jsc#PED-10950)
  * 0001-s390x-emu-Pass-through-PAES-cipher-as-AES.patch</changelog>
  <changelog author="mchang@suse.com" date="1741694400">- Update patches for Power guest secure boot with key management (jsc#PED-3520)
  (jsc#PED-9892)
  * 0001-ieee1275-adding-failure-check-condition-on-ibm-secur.patch
  * 0002-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0003-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0004-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0005-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0006-powerpc_ieee1275-set-use_static_keys-flag.patch
  * 0007-appendedsig-Reads-the-default-DB-keys-from-ELF-Note.patch
  * 0008-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0009-appendedsig-documentation.patch
- Remove patches
  * 0001-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0002-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0003-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0004-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0005-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0006-appendedsig-documentation.patch</changelog>
  <changelog author="mchang@suse.com" date="1742212800">- Refresh PPC NVMEoF ofpath related patches to newer revision
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
- Patch refreshed
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch
- Patch obsoleted
  * 0004-ofpath-controller-name-update.patch
  * 0001-squash-ieee1275-ofpath-enable-NVMeoF-logical-device-.patch
- Fix segmentation fault error in grub2-probe with target=hints_string
  (bsc#1235971) (bsc#1235958) (bsc#1239651)
  * 0001-ofpath-Add-error-check-in-NVMEoF-device-translation.patch</changelog>
  <changelog author="mchang@suse.com" date="1745409600">- Fix PPC CAS reboot failure work when initiated via submenu (bsc#1241132)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1746446400">- Fix CVE-2025-4382: TPM auto-decryption data exposure (bsc#1242971)
  * 0001-kern-rescue_reader-Block-the-rescue-mode-until-the-C.patch
  * 0002-commands-search-Introduce-the-cryptodisk-only-argume.patch
  * 0003-disk-diskfilter-Introduce-the-cryptocheck-command.patch
  * 0004-commands-search-Add-the-diskfilter-support.patch
  * 0005-docs-Document-available-crypto-disks-checks.patch
  * 0006-disk-cryptodisk-Add-the-erase-secrets-function.patch
  * 0007-disk-cryptodisk-Wipe-the-passphrase-from-memory.patch
  * 0008-cryptocheck-Add-quiet-option.patch
- patch rebased
  * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch
  * 0004-Key-revocation-on-out-of-bound-file-access.patch
- patch refrehed
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch</changelog>
  <changelog author="mchang@suse.com" date="1747742400">- Fix incorrect nvme disks and boot order in bootlist output (bsc#1237174)
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch</changelog>
  <changelog author="mchang@suse.com" date="1752667200">- Fix test -f and -s do not work properly over the network files served via
  tftp and http (bsc#1246157) (bsc#1246237)
  * 0001-test-Fix-f-test-on-files-over-network.patch
  * 0002-http-Return-HTTP-status-code-in-http_establish.patch
  * 0003-docs-Clarify-test-for-files-on-TFTP-and-HTTP.patch
  * 0004-tftp-Fix-hang-when-file-is-a-directory.patch</changelog>
  <changelog author="glin@suse.com" date="1754049600">- Fix CVE-2024-56738: side-channel attack due to not constant-time
  algorithm in grub_crypto_memcmp (bsc#1234959)
  * grub2-constant-time-grub_crypto_memcmp.patch</changelog>
  <changelog author="mchang@suse.com" date="1754308800">- Skip mount point in grub_find_device function (bsc#1246231)
  * 0001-getroot-Skip-mount-points-in-grub_find_device.patch</changelog>
</package>
<package pkgid="dffa919245d82e01f6cb8b758cbb98bc6e690014f8f8e5e86c8248d22c789206" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.12" rel="150700.19.13.2"/>
  <changelog author="mchang@suse.com" date="1730462400">- Fix grub.cfg is loaded from an unexpected fallback directory instead of the
  root directory during PXE boot when grub is loaded from the tftp root
  directory (bsc#1232391)
  * 0001-kern-main-Fix-cmdpath-in-root-directory.patch
  * grub2.spec: Refine PPC grub.elf early config to derive root from cmdpath
    directly, avoiding the unneeded search</changelog>
  <changelog author="mchang@suse.com" date="1730894400">- Fix xen package contains debug_info files with the .module suffix by moving
  them to a separate xen-debug subpackage (bsc#1232573)</changelog>
  <changelog author="mchang@suse.com" date="1731067200">- Do not enable blscfg on s390-emu
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1731067201">- Fix previous change as the variable has to be set earlier
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1731499200">- Revert the patches related to BLS support in grub2-mkconfig, as they are not
  relevant to the current BLS integration and cause issues in older KIWI
  versions, which actively force it to be enabled by default (bsc#1233196)
  * 0002-Add-BLS-support-to-grub-mkconfig.patch
  * 0003-Add-grub2-switch-to-blscfg.patch
  * 0007-grub-switch-to-blscfg-adapt-to-openSUSE.patch
  * 0008-blscfg-reading-bls-fragments-if-boot-present.patch
  * 0009-10_linux-Some-refinement-for-BLS.patch
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1733486400">- Fix missing requires in SLE package (bsc#1234264) (bsc#1234272)</changelog>
  <changelog author="mchang@suse.com" date="1733659200">- Update PowerPC SBAT patches to upstream (bsc#1233730)
  * 0007-grub-mkimage-Create-new-ELF-note-for-SBAT.patch
  * 0008-grub-mkimage-Add-SBAT-metadata-into-ELF-note-for-Pow.patch
- Replaced patches
  * 0007-mkimage-create-new-ELF-Note-for-SBAT.patch
  * 0008-mkimage-adding-sbat-data-into-sbat-ELF-Note-on-power.patch</changelog>
  <changelog author="mchang@suse.com" date="1739448000">- Fix out of memory issue on PowerPC by increasing RMA size (bsc#1236744)
  * 0001-powerpc-increase-MIN-RMA-size-for-CAS-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1739534400">- Security fixes for 2024
  * 0001-misc-Implement-grub_strlcpy.patch
- Fix CVE-2024-45781 (bsc#1233617)
  * 0002-fs-ufs-Fix-a-heap-OOB-write.patch
- Fix CVE-2024-56737 (bsc#1234958)
- Fix CVE-2024-45782 (bsc#1233615)
  * 0003-fs-hfs-Fix-stack-OOB-write-with-grub_strcpy.patch
- Fix CVE-2024-45780 (bsc#1233614)
  * 0004-fs-tar-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2024-45783 (bsc#1233616)
  * 0005-fs-hfsplus-Set-a-grub_errno-if-mount-fails.patch
  * 0006-kern-file-Ensure-file-data-is-set.patch
  * 0007-kern-file-Implement-filesystem-reference-counting.patch
- Fix CVE-2025-0624 (bsc#1236316)
  * 0008-net-Fix-OOB-write-in-grub_net_search_config_file.patch
- Fix CVE-2024-45774 (bsc#1233609)
  * 0009-video-readers-jpeg-Do-not-permit-duplicate-SOF0-mark.patch
- Fix CVE-2024-45775 (bsc#1233610)
  * 0010-commands-extcmd-Missing-check-for-failed-allocation.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0011-commands-pgp-Unregister-the-check_signatures-hooks-o.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0012-normal-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0013-gettext-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2024-45776 (bsc#1233612)
  * 0014-gettext-Integer-overflow-leads-to-heap-OOB-write-or-.patch
- Fix CVE-2024-45777 (bsc#1233613)
  * 0015-gettext-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2025-0690 (bsc#1237012)
  * 0016-commands-read-Fix-an-integer-overflow-when-supplying.patch
- Fix CVE-2025-1118 (bsc#1237013)
  * 0017-commands-minicmd-Block-the-dump-command-in-lockdown-.patch
- Fix CVE-2024-45778 (bsc#1233606)
- Fix CVE-2024-45779 (bsc#1233608)
  * 0018-fs-bfs-Disable-under-lockdown.patch
- Fix CVE-2025-0677 (bsc#1237002)
- Fix CVE-2025-0684 (bsc#1237008)
- Fix CVE-2025-0685 (bsc#1237009)
- Fix CVE-2025-0686 (bsc#1237010)
- Fix CVE-2025-0689 (bsc#1237011)
  * 0019-fs-Disable-many-filesystems-under-lockdown.patch
- Fix CVE-2025-1125 (bsc#1237014)
- Fix CVE-2025-0678 (bsc#1237006)
  * 0020-fs-Prevent-overflows-when-allocating-memory-for-arra.patch
- Updated to upstream version
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch
- Bump upstream SBAT generation to 5</changelog>
  <changelog author="mchang@suse.com" date="1741003200">- Cherry-pick upstream XFS fixes
  * 0001-fs-xfs-Add-new-superblock-features-added-in-Linux-6..patch
  * 0002-fs-xfs-Fix-grub_xfs_iterate_dir-return-value-in-case.patch
- Fix "attempt to read of write outside of partition" error message (bsc#1237844)
  * 0003-fs-xfs-fix-large-extent-counters-incompat-feature-su.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348800">- Fix zfs.mo not found message when booting on legacy BIOS (bsc#1237865)
  * 0001-autofs-Ignore-zfs-not-found.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348801">- Pass through PAES cipher as AES on s390x-emu (jsc#PED-10950)
  * 0001-s390x-emu-Pass-through-PAES-cipher-as-AES.patch</changelog>
  <changelog author="mchang@suse.com" date="1741694400">- Update patches for Power guest secure boot with key management (jsc#PED-3520)
  (jsc#PED-9892)
  * 0001-ieee1275-adding-failure-check-condition-on-ibm-secur.patch
  * 0002-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0003-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0004-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0005-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0006-powerpc_ieee1275-set-use_static_keys-flag.patch
  * 0007-appendedsig-Reads-the-default-DB-keys-from-ELF-Note.patch
  * 0008-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0009-appendedsig-documentation.patch
- Remove patches
  * 0001-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0002-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0003-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0004-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0005-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0006-appendedsig-documentation.patch</changelog>
  <changelog author="mchang@suse.com" date="1742212800">- Refresh PPC NVMEoF ofpath related patches to newer revision
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
- Patch refreshed
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch
- Patch obsoleted
  * 0004-ofpath-controller-name-update.patch
  * 0001-squash-ieee1275-ofpath-enable-NVMeoF-logical-device-.patch
- Fix segmentation fault error in grub2-probe with target=hints_string
  (bsc#1235971) (bsc#1235958) (bsc#1239651)
  * 0001-ofpath-Add-error-check-in-NVMEoF-device-translation.patch</changelog>
  <changelog author="mchang@suse.com" date="1745409600">- Fix PPC CAS reboot failure work when initiated via submenu (bsc#1241132)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1746446400">- Fix CVE-2025-4382: TPM auto-decryption data exposure (bsc#1242971)
  * 0001-kern-rescue_reader-Block-the-rescue-mode-until-the-C.patch
  * 0002-commands-search-Introduce-the-cryptodisk-only-argume.patch
  * 0003-disk-diskfilter-Introduce-the-cryptocheck-command.patch
  * 0004-commands-search-Add-the-diskfilter-support.patch
  * 0005-docs-Document-available-crypto-disks-checks.patch
  * 0006-disk-cryptodisk-Add-the-erase-secrets-function.patch
  * 0007-disk-cryptodisk-Wipe-the-passphrase-from-memory.patch
  * 0008-cryptocheck-Add-quiet-option.patch
- patch rebased
  * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch
  * 0004-Key-revocation-on-out-of-bound-file-access.patch
- patch refrehed
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch</changelog>
  <changelog author="mchang@suse.com" date="1747742400">- Fix incorrect nvme disks and boot order in bootlist output (bsc#1237174)
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch</changelog>
  <changelog author="mchang@suse.com" date="1752667200">- Fix test -f and -s do not work properly over the network files served via
  tftp and http (bsc#1246157) (bsc#1246237)
  * 0001-test-Fix-f-test-on-files-over-network.patch
  * 0002-http-Return-HTTP-status-code-in-http_establish.patch
  * 0003-docs-Clarify-test-for-files-on-TFTP-and-HTTP.patch
  * 0004-tftp-Fix-hang-when-file-is-a-directory.patch</changelog>
  <changelog author="glin@suse.com" date="1754049600">- Fix CVE-2024-56738: side-channel attack due to not constant-time
  algorithm in grub_crypto_memcmp (bsc#1234959)
  * grub2-constant-time-grub_crypto_memcmp.patch</changelog>
  <changelog author="mchang@suse.com" date="1754308800">- Skip mount point in grub_find_device function (bsc#1246231)
  * 0001-getroot-Skip-mount-points-in-grub_find_device.patch</changelog>
</package>
<package pkgid="a3f4fa120fff6ea59bc4543a277b98353ae0271e79212e553a9e36c69eb39a56" name="grub2" arch="src">
  <version epoch="0" ver="2.12" rel="150700.19.16.1"/>
  <changelog author="mchang@suse.com" date="1730894400">- Fix xen package contains debug_info files with the .module suffix by moving
  them to a separate xen-debug subpackage (bsc#1232573)</changelog>
  <changelog author="mchang@suse.com" date="1731067200">- Do not enable blscfg on s390-emu
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1731067201">- Fix previous change as the variable has to be set earlier
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1731499200">- Revert the patches related to BLS support in grub2-mkconfig, as they are not
  relevant to the current BLS integration and cause issues in older KIWI
  versions, which actively force it to be enabled by default (bsc#1233196)
  * 0002-Add-BLS-support-to-grub-mkconfig.patch
  * 0003-Add-grub2-switch-to-blscfg.patch
  * 0007-grub-switch-to-blscfg-adapt-to-openSUSE.patch
  * 0008-blscfg-reading-bls-fragments-if-boot-present.patch
  * 0009-10_linux-Some-refinement-for-BLS.patch
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1733486400">- Fix missing requires in SLE package (bsc#1234264) (bsc#1234272)</changelog>
  <changelog author="mchang@suse.com" date="1733659200">- Update PowerPC SBAT patches to upstream (bsc#1233730)
  * 0007-grub-mkimage-Create-new-ELF-note-for-SBAT.patch
  * 0008-grub-mkimage-Add-SBAT-metadata-into-ELF-note-for-Pow.patch
- Replaced patches
  * 0007-mkimage-create-new-ELF-Note-for-SBAT.patch
  * 0008-mkimage-adding-sbat-data-into-sbat-ELF-Note-on-power.patch</changelog>
  <changelog author="mchang@suse.com" date="1739448000">- Fix out of memory issue on PowerPC by increasing RMA size (bsc#1236744)
  * 0001-powerpc-increase-MIN-RMA-size-for-CAS-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1739534400">- Security fixes for 2024
  * 0001-misc-Implement-grub_strlcpy.patch
- Fix CVE-2024-45781 (bsc#1233617)
  * 0002-fs-ufs-Fix-a-heap-OOB-write.patch
- Fix CVE-2024-56737 (bsc#1234958)
- Fix CVE-2024-45782 (bsc#1233615)
  * 0003-fs-hfs-Fix-stack-OOB-write-with-grub_strcpy.patch
- Fix CVE-2024-45780 (bsc#1233614)
  * 0004-fs-tar-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2024-45783 (bsc#1233616)
  * 0005-fs-hfsplus-Set-a-grub_errno-if-mount-fails.patch
  * 0006-kern-file-Ensure-file-data-is-set.patch
  * 0007-kern-file-Implement-filesystem-reference-counting.patch
- Fix CVE-2025-0624 (bsc#1236316)
  * 0008-net-Fix-OOB-write-in-grub_net_search_config_file.patch
- Fix CVE-2024-45774 (bsc#1233609)
  * 0009-video-readers-jpeg-Do-not-permit-duplicate-SOF0-mark.patch
- Fix CVE-2024-45775 (bsc#1233610)
  * 0010-commands-extcmd-Missing-check-for-failed-allocation.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0011-commands-pgp-Unregister-the-check_signatures-hooks-o.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0012-normal-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0013-gettext-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2024-45776 (bsc#1233612)
  * 0014-gettext-Integer-overflow-leads-to-heap-OOB-write-or-.patch
- Fix CVE-2024-45777 (bsc#1233613)
  * 0015-gettext-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2025-0690 (bsc#1237012)
  * 0016-commands-read-Fix-an-integer-overflow-when-supplying.patch
- Fix CVE-2025-1118 (bsc#1237013)
  * 0017-commands-minicmd-Block-the-dump-command-in-lockdown-.patch
- Fix CVE-2024-45778 (bsc#1233606)
- Fix CVE-2024-45779 (bsc#1233608)
  * 0018-fs-bfs-Disable-under-lockdown.patch
- Fix CVE-2025-0677 (bsc#1237002)
- Fix CVE-2025-0684 (bsc#1237008)
- Fix CVE-2025-0685 (bsc#1237009)
- Fix CVE-2025-0686 (bsc#1237010)
- Fix CVE-2025-0689 (bsc#1237011)
  * 0019-fs-Disable-many-filesystems-under-lockdown.patch
- Fix CVE-2025-1125 (bsc#1237014)
- Fix CVE-2025-0678 (bsc#1237006)
  * 0020-fs-Prevent-overflows-when-allocating-memory-for-arra.patch
- Updated to upstream version
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch
- Bump upstream SBAT generation to 5</changelog>
  <changelog author="mchang@suse.com" date="1741003200">- Cherry-pick upstream XFS fixes
  * 0001-fs-xfs-Add-new-superblock-features-added-in-Linux-6..patch
  * 0002-fs-xfs-Fix-grub_xfs_iterate_dir-return-value-in-case.patch
- Fix "attempt to read of write outside of partition" error message (bsc#1237844)
  * 0003-fs-xfs-fix-large-extent-counters-incompat-feature-su.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348800">- Fix zfs.mo not found message when booting on legacy BIOS (bsc#1237865)
  * 0001-autofs-Ignore-zfs-not-found.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348801">- Pass through PAES cipher as AES on s390x-emu (jsc#PED-10950)
  * 0001-s390x-emu-Pass-through-PAES-cipher-as-AES.patch</changelog>
  <changelog author="mchang@suse.com" date="1741694400">- Update patches for Power guest secure boot with key management (jsc#PED-3520)
  (jsc#PED-9892)
  * 0001-ieee1275-adding-failure-check-condition-on-ibm-secur.patch
  * 0002-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0003-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0004-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0005-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0006-powerpc_ieee1275-set-use_static_keys-flag.patch
  * 0007-appendedsig-Reads-the-default-DB-keys-from-ELF-Note.patch
  * 0008-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0009-appendedsig-documentation.patch
- Remove patches
  * 0001-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0002-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0003-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0004-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0005-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0006-appendedsig-documentation.patch</changelog>
  <changelog author="mchang@suse.com" date="1742212800">- Refresh PPC NVMEoF ofpath related patches to newer revision
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
- Patch refreshed
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch
- Patch obsoleted
  * 0004-ofpath-controller-name-update.patch
  * 0001-squash-ieee1275-ofpath-enable-NVMeoF-logical-device-.patch
- Fix segmentation fault error in grub2-probe with target=hints_string
  (bsc#1235971) (bsc#1235958) (bsc#1239651)
  * 0001-ofpath-Add-error-check-in-NVMEoF-device-translation.patch</changelog>
  <changelog author="mchang@suse.com" date="1745409600">- Fix PPC CAS reboot failure work when initiated via submenu (bsc#1241132)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1746446400">- Fix CVE-2025-4382: TPM auto-decryption data exposure (bsc#1242971)
  * 0001-kern-rescue_reader-Block-the-rescue-mode-until-the-C.patch
  * 0002-commands-search-Introduce-the-cryptodisk-only-argume.patch
  * 0003-disk-diskfilter-Introduce-the-cryptocheck-command.patch
  * 0004-commands-search-Add-the-diskfilter-support.patch
  * 0005-docs-Document-available-crypto-disks-checks.patch
  * 0006-disk-cryptodisk-Add-the-erase-secrets-function.patch
  * 0007-disk-cryptodisk-Wipe-the-passphrase-from-memory.patch
  * 0008-cryptocheck-Add-quiet-option.patch
- patch rebased
  * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch
  * 0004-Key-revocation-on-out-of-bound-file-access.patch
- patch refrehed
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch</changelog>
  <changelog author="mchang@suse.com" date="1747742400">- Fix incorrect nvme disks and boot order in bootlist output (bsc#1237174)
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch</changelog>
  <changelog author="mchang@suse.com" date="1752667200">- Fix test -f and -s do not work properly over the network files served via
  tftp and http (bsc#1246157) (bsc#1246237)
  * 0001-test-Fix-f-test-on-files-over-network.patch
  * 0002-http-Return-HTTP-status-code-in-http_establish.patch
  * 0003-docs-Clarify-test-for-files-on-TFTP-and-HTTP.patch
  * 0004-tftp-Fix-hang-when-file-is-a-directory.patch</changelog>
  <changelog author="glin@suse.com" date="1754049600">- Fix CVE-2024-56738: side-channel attack due to not constant-time
  algorithm in grub_crypto_memcmp (bsc#1234959)
  * grub2-constant-time-grub_crypto_memcmp.patch</changelog>
  <changelog author="mchang@suse.com" date="1754308800">- Skip mount point in grub_find_device function (bsc#1246231)
  * 0001-getroot-Skip-mount-points-in-grub_find_device.patch</changelog>
  <changelog author="mchang@suse.com" date="1758542400">- Fix boot hangs in setting up serial console when ACPI SPCR table is present
  and redirection is disabled (bsc#1249088)
  * 0001-term-ns8250-spcr-Return-if-redirection-is-disabled.patch</changelog>
</package>
<package pkgid="97419452dc37dcab14d0dc7a783861cdb9dcd17dbd6acf8d8caf555cb8440ad7" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.12" rel="150700.19.16.1"/>
  <changelog author="mchang@suse.com" date="1730894400">- Fix xen package contains debug_info files with the .module suffix by moving
  them to a separate xen-debug subpackage (bsc#1232573)</changelog>
  <changelog author="mchang@suse.com" date="1731067200">- Do not enable blscfg on s390-emu
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1731067201">- Fix previous change as the variable has to be set earlier
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1731499200">- Revert the patches related to BLS support in grub2-mkconfig, as they are not
  relevant to the current BLS integration and cause issues in older KIWI
  versions, which actively force it to be enabled by default (bsc#1233196)
  * 0002-Add-BLS-support-to-grub-mkconfig.patch
  * 0003-Add-grub2-switch-to-blscfg.patch
  * 0007-grub-switch-to-blscfg-adapt-to-openSUSE.patch
  * 0008-blscfg-reading-bls-fragments-if-boot-present.patch
  * 0009-10_linux-Some-refinement-for-BLS.patch
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1733486400">- Fix missing requires in SLE package (bsc#1234264) (bsc#1234272)</changelog>
  <changelog author="mchang@suse.com" date="1733659200">- Update PowerPC SBAT patches to upstream (bsc#1233730)
  * 0007-grub-mkimage-Create-new-ELF-note-for-SBAT.patch
  * 0008-grub-mkimage-Add-SBAT-metadata-into-ELF-note-for-Pow.patch
- Replaced patches
  * 0007-mkimage-create-new-ELF-Note-for-SBAT.patch
  * 0008-mkimage-adding-sbat-data-into-sbat-ELF-Note-on-power.patch</changelog>
  <changelog author="mchang@suse.com" date="1739448000">- Fix out of memory issue on PowerPC by increasing RMA size (bsc#1236744)
  * 0001-powerpc-increase-MIN-RMA-size-for-CAS-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1739534400">- Security fixes for 2024
  * 0001-misc-Implement-grub_strlcpy.patch
- Fix CVE-2024-45781 (bsc#1233617)
  * 0002-fs-ufs-Fix-a-heap-OOB-write.patch
- Fix CVE-2024-56737 (bsc#1234958)
- Fix CVE-2024-45782 (bsc#1233615)
  * 0003-fs-hfs-Fix-stack-OOB-write-with-grub_strcpy.patch
- Fix CVE-2024-45780 (bsc#1233614)
  * 0004-fs-tar-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2024-45783 (bsc#1233616)
  * 0005-fs-hfsplus-Set-a-grub_errno-if-mount-fails.patch
  * 0006-kern-file-Ensure-file-data-is-set.patch
  * 0007-kern-file-Implement-filesystem-reference-counting.patch
- Fix CVE-2025-0624 (bsc#1236316)
  * 0008-net-Fix-OOB-write-in-grub_net_search_config_file.patch
- Fix CVE-2024-45774 (bsc#1233609)
  * 0009-video-readers-jpeg-Do-not-permit-duplicate-SOF0-mark.patch
- Fix CVE-2024-45775 (bsc#1233610)
  * 0010-commands-extcmd-Missing-check-for-failed-allocation.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0011-commands-pgp-Unregister-the-check_signatures-hooks-o.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0012-normal-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0013-gettext-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2024-45776 (bsc#1233612)
  * 0014-gettext-Integer-overflow-leads-to-heap-OOB-write-or-.patch
- Fix CVE-2024-45777 (bsc#1233613)
  * 0015-gettext-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2025-0690 (bsc#1237012)
  * 0016-commands-read-Fix-an-integer-overflow-when-supplying.patch
- Fix CVE-2025-1118 (bsc#1237013)
  * 0017-commands-minicmd-Block-the-dump-command-in-lockdown-.patch
- Fix CVE-2024-45778 (bsc#1233606)
- Fix CVE-2024-45779 (bsc#1233608)
  * 0018-fs-bfs-Disable-under-lockdown.patch
- Fix CVE-2025-0677 (bsc#1237002)
- Fix CVE-2025-0684 (bsc#1237008)
- Fix CVE-2025-0685 (bsc#1237009)
- Fix CVE-2025-0686 (bsc#1237010)
- Fix CVE-2025-0689 (bsc#1237011)
  * 0019-fs-Disable-many-filesystems-under-lockdown.patch
- Fix CVE-2025-1125 (bsc#1237014)
- Fix CVE-2025-0678 (bsc#1237006)
  * 0020-fs-Prevent-overflows-when-allocating-memory-for-arra.patch
- Updated to upstream version
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch
- Bump upstream SBAT generation to 5</changelog>
  <changelog author="mchang@suse.com" date="1741003200">- Cherry-pick upstream XFS fixes
  * 0001-fs-xfs-Add-new-superblock-features-added-in-Linux-6..patch
  * 0002-fs-xfs-Fix-grub_xfs_iterate_dir-return-value-in-case.patch
- Fix "attempt to read of write outside of partition" error message (bsc#1237844)
  * 0003-fs-xfs-fix-large-extent-counters-incompat-feature-su.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348800">- Fix zfs.mo not found message when booting on legacy BIOS (bsc#1237865)
  * 0001-autofs-Ignore-zfs-not-found.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348801">- Pass through PAES cipher as AES on s390x-emu (jsc#PED-10950)
  * 0001-s390x-emu-Pass-through-PAES-cipher-as-AES.patch</changelog>
  <changelog author="mchang@suse.com" date="1741694400">- Update patches for Power guest secure boot with key management (jsc#PED-3520)
  (jsc#PED-9892)
  * 0001-ieee1275-adding-failure-check-condition-on-ibm-secur.patch
  * 0002-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0003-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0004-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0005-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0006-powerpc_ieee1275-set-use_static_keys-flag.patch
  * 0007-appendedsig-Reads-the-default-DB-keys-from-ELF-Note.patch
  * 0008-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0009-appendedsig-documentation.patch
- Remove patches
  * 0001-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0002-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0003-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0004-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0005-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0006-appendedsig-documentation.patch</changelog>
  <changelog author="mchang@suse.com" date="1742212800">- Refresh PPC NVMEoF ofpath related patches to newer revision
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
- Patch refreshed
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch
- Patch obsoleted
  * 0004-ofpath-controller-name-update.patch
  * 0001-squash-ieee1275-ofpath-enable-NVMeoF-logical-device-.patch
- Fix segmentation fault error in grub2-probe with target=hints_string
  (bsc#1235971) (bsc#1235958) (bsc#1239651)
  * 0001-ofpath-Add-error-check-in-NVMEoF-device-translation.patch</changelog>
  <changelog author="mchang@suse.com" date="1745409600">- Fix PPC CAS reboot failure work when initiated via submenu (bsc#1241132)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1746446400">- Fix CVE-2025-4382: TPM auto-decryption data exposure (bsc#1242971)
  * 0001-kern-rescue_reader-Block-the-rescue-mode-until-the-C.patch
  * 0002-commands-search-Introduce-the-cryptodisk-only-argume.patch
  * 0003-disk-diskfilter-Introduce-the-cryptocheck-command.patch
  * 0004-commands-search-Add-the-diskfilter-support.patch
  * 0005-docs-Document-available-crypto-disks-checks.patch
  * 0006-disk-cryptodisk-Add-the-erase-secrets-function.patch
  * 0007-disk-cryptodisk-Wipe-the-passphrase-from-memory.patch
  * 0008-cryptocheck-Add-quiet-option.patch
- patch rebased
  * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch
  * 0004-Key-revocation-on-out-of-bound-file-access.patch
- patch refrehed
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch</changelog>
  <changelog author="mchang@suse.com" date="1747742400">- Fix incorrect nvme disks and boot order in bootlist output (bsc#1237174)
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch</changelog>
  <changelog author="mchang@suse.com" date="1752667200">- Fix test -f and -s do not work properly over the network files served via
  tftp and http (bsc#1246157) (bsc#1246237)
  * 0001-test-Fix-f-test-on-files-over-network.patch
  * 0002-http-Return-HTTP-status-code-in-http_establish.patch
  * 0003-docs-Clarify-test-for-files-on-TFTP-and-HTTP.patch
  * 0004-tftp-Fix-hang-when-file-is-a-directory.patch</changelog>
  <changelog author="glin@suse.com" date="1754049600">- Fix CVE-2024-56738: side-channel attack due to not constant-time
  algorithm in grub_crypto_memcmp (bsc#1234959)
  * grub2-constant-time-grub_crypto_memcmp.patch</changelog>
  <changelog author="mchang@suse.com" date="1754308800">- Skip mount point in grub_find_device function (bsc#1246231)
  * 0001-getroot-Skip-mount-points-in-grub_find_device.patch</changelog>
  <changelog author="mchang@suse.com" date="1758542400">- Fix boot hangs in setting up serial console when ACPI SPCR table is present
  and redirection is disabled (bsc#1249088)
  * 0001-term-ns8250-spcr-Return-if-redirection-is-disabled.patch</changelog>
</package>
<package pkgid="7635de048334e649156d1f6e84c0591be1877ef8df3ed2e5a59bebaefd56b23c" name="grub2" arch="src">
  <version epoch="0" ver="2.12" rel="150700.19.19.1"/>
  <changelog author="mchang@suse.com" date="1731067200">- Fix previous change as the variable has to be set earlier
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1731499200">- Revert the patches related to BLS support in grub2-mkconfig, as they are not
  relevant to the current BLS integration and cause issues in older KIWI
  versions, which actively force it to be enabled by default (bsc#1233196)
  * 0002-Add-BLS-support-to-grub-mkconfig.patch
  * 0003-Add-grub2-switch-to-blscfg.patch
  * 0007-grub-switch-to-blscfg-adapt-to-openSUSE.patch
  * 0008-blscfg-reading-bls-fragments-if-boot-present.patch
  * 0009-10_linux-Some-refinement-for-BLS.patch
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1733486400">- Fix missing requires in SLE package (bsc#1234264) (bsc#1234272)</changelog>
  <changelog author="mchang@suse.com" date="1733659200">- Update PowerPC SBAT patches to upstream (bsc#1233730)
  * 0007-grub-mkimage-Create-new-ELF-note-for-SBAT.patch
  * 0008-grub-mkimage-Add-SBAT-metadata-into-ELF-note-for-Pow.patch
- Replaced patches
  * 0007-mkimage-create-new-ELF-Note-for-SBAT.patch
  * 0008-mkimage-adding-sbat-data-into-sbat-ELF-Note-on-power.patch</changelog>
  <changelog author="mchang@suse.com" date="1739448000">- Fix out of memory issue on PowerPC by increasing RMA size (bsc#1236744)
  * 0001-powerpc-increase-MIN-RMA-size-for-CAS-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1739534400">- Security fixes for 2024
  * 0001-misc-Implement-grub_strlcpy.patch
- Fix CVE-2024-45781 (bsc#1233617)
  * 0002-fs-ufs-Fix-a-heap-OOB-write.patch
- Fix CVE-2024-56737 (bsc#1234958)
- Fix CVE-2024-45782 (bsc#1233615)
  * 0003-fs-hfs-Fix-stack-OOB-write-with-grub_strcpy.patch
- Fix CVE-2024-45780 (bsc#1233614)
  * 0004-fs-tar-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2024-45783 (bsc#1233616)
  * 0005-fs-hfsplus-Set-a-grub_errno-if-mount-fails.patch
  * 0006-kern-file-Ensure-file-data-is-set.patch
  * 0007-kern-file-Implement-filesystem-reference-counting.patch
- Fix CVE-2025-0624 (bsc#1236316)
  * 0008-net-Fix-OOB-write-in-grub_net_search_config_file.patch
- Fix CVE-2024-45774 (bsc#1233609)
  * 0009-video-readers-jpeg-Do-not-permit-duplicate-SOF0-mark.patch
- Fix CVE-2024-45775 (bsc#1233610)
  * 0010-commands-extcmd-Missing-check-for-failed-allocation.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0011-commands-pgp-Unregister-the-check_signatures-hooks-o.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0012-normal-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0013-gettext-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2024-45776 (bsc#1233612)
  * 0014-gettext-Integer-overflow-leads-to-heap-OOB-write-or-.patch
- Fix CVE-2024-45777 (bsc#1233613)
  * 0015-gettext-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2025-0690 (bsc#1237012)
  * 0016-commands-read-Fix-an-integer-overflow-when-supplying.patch
- Fix CVE-2025-1118 (bsc#1237013)
  * 0017-commands-minicmd-Block-the-dump-command-in-lockdown-.patch
- Fix CVE-2024-45778 (bsc#1233606)
- Fix CVE-2024-45779 (bsc#1233608)
  * 0018-fs-bfs-Disable-under-lockdown.patch
- Fix CVE-2025-0677 (bsc#1237002)
- Fix CVE-2025-0684 (bsc#1237008)
- Fix CVE-2025-0685 (bsc#1237009)
- Fix CVE-2025-0686 (bsc#1237010)
- Fix CVE-2025-0689 (bsc#1237011)
  * 0019-fs-Disable-many-filesystems-under-lockdown.patch
- Fix CVE-2025-1125 (bsc#1237014)
- Fix CVE-2025-0678 (bsc#1237006)
  * 0020-fs-Prevent-overflows-when-allocating-memory-for-arra.patch
- Updated to upstream version
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch
- Bump upstream SBAT generation to 5</changelog>
  <changelog author="mchang@suse.com" date="1741003200">- Cherry-pick upstream XFS fixes
  * 0001-fs-xfs-Add-new-superblock-features-added-in-Linux-6..patch
  * 0002-fs-xfs-Fix-grub_xfs_iterate_dir-return-value-in-case.patch
- Fix "attempt to read of write outside of partition" error message (bsc#1237844)
  * 0003-fs-xfs-fix-large-extent-counters-incompat-feature-su.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348800">- Fix zfs.mo not found message when booting on legacy BIOS (bsc#1237865)
  * 0001-autofs-Ignore-zfs-not-found.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348801">- Pass through PAES cipher as AES on s390x-emu (jsc#PED-10950)
  * 0001-s390x-emu-Pass-through-PAES-cipher-as-AES.patch</changelog>
  <changelog author="mchang@suse.com" date="1741694400">- Update patches for Power guest secure boot with key management (jsc#PED-3520)
  (jsc#PED-9892)
  * 0001-ieee1275-adding-failure-check-condition-on-ibm-secur.patch
  * 0002-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0003-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0004-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0005-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0006-powerpc_ieee1275-set-use_static_keys-flag.patch
  * 0007-appendedsig-Reads-the-default-DB-keys-from-ELF-Note.patch
  * 0008-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0009-appendedsig-documentation.patch
- Remove patches
  * 0001-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0002-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0003-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0004-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0005-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0006-appendedsig-documentation.patch</changelog>
  <changelog author="mchang@suse.com" date="1742212800">- Refresh PPC NVMEoF ofpath related patches to newer revision
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
- Patch refreshed
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch
- Patch obsoleted
  * 0004-ofpath-controller-name-update.patch
  * 0001-squash-ieee1275-ofpath-enable-NVMeoF-logical-device-.patch
- Fix segmentation fault error in grub2-probe with target=hints_string
  (bsc#1235971) (bsc#1235958) (bsc#1239651)
  * 0001-ofpath-Add-error-check-in-NVMEoF-device-translation.patch</changelog>
  <changelog author="mchang@suse.com" date="1745409600">- Fix PPC CAS reboot failure work when initiated via submenu (bsc#1241132)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1746446400">- Fix CVE-2025-4382: TPM auto-decryption data exposure (bsc#1242971)
  * 0001-kern-rescue_reader-Block-the-rescue-mode-until-the-C.patch
  * 0002-commands-search-Introduce-the-cryptodisk-only-argume.patch
  * 0003-disk-diskfilter-Introduce-the-cryptocheck-command.patch
  * 0004-commands-search-Add-the-diskfilter-support.patch
  * 0005-docs-Document-available-crypto-disks-checks.patch
  * 0006-disk-cryptodisk-Add-the-erase-secrets-function.patch
  * 0007-disk-cryptodisk-Wipe-the-passphrase-from-memory.patch
  * 0008-cryptocheck-Add-quiet-option.patch
- patch rebased
  * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch
  * 0004-Key-revocation-on-out-of-bound-file-access.patch
- patch refrehed
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch</changelog>
  <changelog author="mchang@suse.com" date="1747742400">- Fix incorrect nvme disks and boot order in bootlist output (bsc#1237174)
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch</changelog>
  <changelog author="mchang@suse.com" date="1752667200">- Fix test -f and -s do not work properly over the network files served via
  tftp and http (bsc#1246157) (bsc#1246237)
  * 0001-test-Fix-f-test-on-files-over-network.patch
  * 0002-http-Return-HTTP-status-code-in-http_establish.patch
  * 0003-docs-Clarify-test-for-files-on-TFTP-and-HTTP.patch
  * 0004-tftp-Fix-hang-when-file-is-a-directory.patch</changelog>
  <changelog author="glin@suse.com" date="1754049600">- Fix CVE-2024-56738: side-channel attack due to not constant-time
  algorithm in grub_crypto_memcmp (bsc#1234959)
  * grub2-constant-time-grub_crypto_memcmp.patch</changelog>
  <changelog author="mchang@suse.com" date="1754308800">- Skip mount point in grub_find_device function (bsc#1246231)
  * 0001-getroot-Skip-mount-points-in-grub_find_device.patch</changelog>
  <changelog author="mchang@suse.com" date="1758542400">- Fix boot hangs in setting up serial console when ACPI SPCR table is present
  and redirection is disabled (bsc#1249088)
  * 0001-term-ns8250-spcr-Return-if-redirection-is-disabled.patch</changelog>
  <changelog author="mchang@suse.com" date="1761048000">- Fix timeout when loading initrd via http after PPC CAS reboot (bsc#1245953)
  * 0001-tcp-Fix-TCP-port-number-reused-on-reboot.patch</changelog>
  <changelog author="mchang@suse.com" date="1762948800">- Fix CVE-2025-54771 (bsc#1252931)
  * 0001-kern-file-Call-grub_dl_unref-after-fs-fs_close.patch
- Fix CVE-2025-54770 (bsc#1252930)
  * 0002-net-net-Unregister-net_set_vlan-command-on-unload.patch
- Fix CVE-2025-61662 (bsc#1252933)
  * 0003-gettext-gettext-Unregister-gettext-command-on-module.patch
- Fix CVE-2025-61663 (bsc#1252934)
- Fix CVE-2025-61664 (bsc#1252935)
  * 0004-normal-main-Unregister-commands-on-module-unload.patch
  * 0005-tests-lib-functional_test-Unregister-commands-on-mod.patch
- Fix CVE-2025-61661 (bsc#1252932)
  * 0006-commands-usbtest-Use-correct-string-length-field.patch
  * 0007-commands-usbtest-Ensure-string-length-is-sufficient-.patch
- Bump upstream SBAT generation to 6</changelog>
</package>
<package pkgid="cf713e03e6da7ed3185526c2992fea30603d9b35912572c6392bfda07706bd56" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.12" rel="150700.19.19.1"/>
  <changelog author="mchang@suse.com" date="1731067200">- Fix previous change as the variable has to be set earlier
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1731499200">- Revert the patches related to BLS support in grub2-mkconfig, as they are not
  relevant to the current BLS integration and cause issues in older KIWI
  versions, which actively force it to be enabled by default (bsc#1233196)
  * 0002-Add-BLS-support-to-grub-mkconfig.patch
  * 0003-Add-grub2-switch-to-blscfg.patch
  * 0007-grub-switch-to-blscfg-adapt-to-openSUSE.patch
  * 0008-blscfg-reading-bls-fragments-if-boot-present.patch
  * 0009-10_linux-Some-refinement-for-BLS.patch
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1733486400">- Fix missing requires in SLE package (bsc#1234264) (bsc#1234272)</changelog>
  <changelog author="mchang@suse.com" date="1733659200">- Update PowerPC SBAT patches to upstream (bsc#1233730)
  * 0007-grub-mkimage-Create-new-ELF-note-for-SBAT.patch
  * 0008-grub-mkimage-Add-SBAT-metadata-into-ELF-note-for-Pow.patch
- Replaced patches
  * 0007-mkimage-create-new-ELF-Note-for-SBAT.patch
  * 0008-mkimage-adding-sbat-data-into-sbat-ELF-Note-on-power.patch</changelog>
  <changelog author="mchang@suse.com" date="1739448000">- Fix out of memory issue on PowerPC by increasing RMA size (bsc#1236744)
  * 0001-powerpc-increase-MIN-RMA-size-for-CAS-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1739534400">- Security fixes for 2024
  * 0001-misc-Implement-grub_strlcpy.patch
- Fix CVE-2024-45781 (bsc#1233617)
  * 0002-fs-ufs-Fix-a-heap-OOB-write.patch
- Fix CVE-2024-56737 (bsc#1234958)
- Fix CVE-2024-45782 (bsc#1233615)
  * 0003-fs-hfs-Fix-stack-OOB-write-with-grub_strcpy.patch
- Fix CVE-2024-45780 (bsc#1233614)
  * 0004-fs-tar-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2024-45783 (bsc#1233616)
  * 0005-fs-hfsplus-Set-a-grub_errno-if-mount-fails.patch
  * 0006-kern-file-Ensure-file-data-is-set.patch
  * 0007-kern-file-Implement-filesystem-reference-counting.patch
- Fix CVE-2025-0624 (bsc#1236316)
  * 0008-net-Fix-OOB-write-in-grub_net_search_config_file.patch
- Fix CVE-2024-45774 (bsc#1233609)
  * 0009-video-readers-jpeg-Do-not-permit-duplicate-SOF0-mark.patch
- Fix CVE-2024-45775 (bsc#1233610)
  * 0010-commands-extcmd-Missing-check-for-failed-allocation.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0011-commands-pgp-Unregister-the-check_signatures-hooks-o.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0012-normal-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0013-gettext-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2024-45776 (bsc#1233612)
  * 0014-gettext-Integer-overflow-leads-to-heap-OOB-write-or-.patch
- Fix CVE-2024-45777 (bsc#1233613)
  * 0015-gettext-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2025-0690 (bsc#1237012)
  * 0016-commands-read-Fix-an-integer-overflow-when-supplying.patch
- Fix CVE-2025-1118 (bsc#1237013)
  * 0017-commands-minicmd-Block-the-dump-command-in-lockdown-.patch
- Fix CVE-2024-45778 (bsc#1233606)
- Fix CVE-2024-45779 (bsc#1233608)
  * 0018-fs-bfs-Disable-under-lockdown.patch
- Fix CVE-2025-0677 (bsc#1237002)
- Fix CVE-2025-0684 (bsc#1237008)
- Fix CVE-2025-0685 (bsc#1237009)
- Fix CVE-2025-0686 (bsc#1237010)
- Fix CVE-2025-0689 (bsc#1237011)
  * 0019-fs-Disable-many-filesystems-under-lockdown.patch
- Fix CVE-2025-1125 (bsc#1237014)
- Fix CVE-2025-0678 (bsc#1237006)
  * 0020-fs-Prevent-overflows-when-allocating-memory-for-arra.patch
- Updated to upstream version
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch
- Bump upstream SBAT generation to 5</changelog>
  <changelog author="mchang@suse.com" date="1741003200">- Cherry-pick upstream XFS fixes
  * 0001-fs-xfs-Add-new-superblock-features-added-in-Linux-6..patch
  * 0002-fs-xfs-Fix-grub_xfs_iterate_dir-return-value-in-case.patch
- Fix "attempt to read of write outside of partition" error message (bsc#1237844)
  * 0003-fs-xfs-fix-large-extent-counters-incompat-feature-su.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348800">- Fix zfs.mo not found message when booting on legacy BIOS (bsc#1237865)
  * 0001-autofs-Ignore-zfs-not-found.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348801">- Pass through PAES cipher as AES on s390x-emu (jsc#PED-10950)
  * 0001-s390x-emu-Pass-through-PAES-cipher-as-AES.patch</changelog>
  <changelog author="mchang@suse.com" date="1741694400">- Update patches for Power guest secure boot with key management (jsc#PED-3520)
  (jsc#PED-9892)
  * 0001-ieee1275-adding-failure-check-condition-on-ibm-secur.patch
  * 0002-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0003-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0004-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0005-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0006-powerpc_ieee1275-set-use_static_keys-flag.patch
  * 0007-appendedsig-Reads-the-default-DB-keys-from-ELF-Note.patch
  * 0008-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0009-appendedsig-documentation.patch
- Remove patches
  * 0001-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0002-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0003-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0004-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0005-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0006-appendedsig-documentation.patch</changelog>
  <changelog author="mchang@suse.com" date="1742212800">- Refresh PPC NVMEoF ofpath related patches to newer revision
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
- Patch refreshed
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch
- Patch obsoleted
  * 0004-ofpath-controller-name-update.patch
  * 0001-squash-ieee1275-ofpath-enable-NVMeoF-logical-device-.patch
- Fix segmentation fault error in grub2-probe with target=hints_string
  (bsc#1235971) (bsc#1235958) (bsc#1239651)
  * 0001-ofpath-Add-error-check-in-NVMEoF-device-translation.patch</changelog>
  <changelog author="mchang@suse.com" date="1745409600">- Fix PPC CAS reboot failure work when initiated via submenu (bsc#1241132)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1746446400">- Fix CVE-2025-4382: TPM auto-decryption data exposure (bsc#1242971)
  * 0001-kern-rescue_reader-Block-the-rescue-mode-until-the-C.patch
  * 0002-commands-search-Introduce-the-cryptodisk-only-argume.patch
  * 0003-disk-diskfilter-Introduce-the-cryptocheck-command.patch
  * 0004-commands-search-Add-the-diskfilter-support.patch
  * 0005-docs-Document-available-crypto-disks-checks.patch
  * 0006-disk-cryptodisk-Add-the-erase-secrets-function.patch
  * 0007-disk-cryptodisk-Wipe-the-passphrase-from-memory.patch
  * 0008-cryptocheck-Add-quiet-option.patch
- patch rebased
  * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch
  * 0004-Key-revocation-on-out-of-bound-file-access.patch
- patch refrehed
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch</changelog>
  <changelog author="mchang@suse.com" date="1747742400">- Fix incorrect nvme disks and boot order in bootlist output (bsc#1237174)
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch</changelog>
  <changelog author="mchang@suse.com" date="1752667200">- Fix test -f and -s do not work properly over the network files served via
  tftp and http (bsc#1246157) (bsc#1246237)
  * 0001-test-Fix-f-test-on-files-over-network.patch
  * 0002-http-Return-HTTP-status-code-in-http_establish.patch
  * 0003-docs-Clarify-test-for-files-on-TFTP-and-HTTP.patch
  * 0004-tftp-Fix-hang-when-file-is-a-directory.patch</changelog>
  <changelog author="glin@suse.com" date="1754049600">- Fix CVE-2024-56738: side-channel attack due to not constant-time
  algorithm in grub_crypto_memcmp (bsc#1234959)
  * grub2-constant-time-grub_crypto_memcmp.patch</changelog>
  <changelog author="mchang@suse.com" date="1754308800">- Skip mount point in grub_find_device function (bsc#1246231)
  * 0001-getroot-Skip-mount-points-in-grub_find_device.patch</changelog>
  <changelog author="mchang@suse.com" date="1758542400">- Fix boot hangs in setting up serial console when ACPI SPCR table is present
  and redirection is disabled (bsc#1249088)
  * 0001-term-ns8250-spcr-Return-if-redirection-is-disabled.patch</changelog>
  <changelog author="mchang@suse.com" date="1761048000">- Fix timeout when loading initrd via http after PPC CAS reboot (bsc#1245953)
  * 0001-tcp-Fix-TCP-port-number-reused-on-reboot.patch</changelog>
  <changelog author="mchang@suse.com" date="1762948800">- Fix CVE-2025-54771 (bsc#1252931)
  * 0001-kern-file-Call-grub_dl_unref-after-fs-fs_close.patch
- Fix CVE-2025-54770 (bsc#1252930)
  * 0002-net-net-Unregister-net_set_vlan-command-on-unload.patch
- Fix CVE-2025-61662 (bsc#1252933)
  * 0003-gettext-gettext-Unregister-gettext-command-on-module.patch
- Fix CVE-2025-61663 (bsc#1252934)
- Fix CVE-2025-61664 (bsc#1252935)
  * 0004-normal-main-Unregister-commands-on-module-unload.patch
  * 0005-tests-lib-functional_test-Unregister-commands-on-mod.patch
- Fix CVE-2025-61661 (bsc#1252932)
  * 0006-commands-usbtest-Use-correct-string-length-field.patch
  * 0007-commands-usbtest-Ensure-string-length-is-sufficient-.patch
- Bump upstream SBAT generation to 6</changelog>
</package>
<package pkgid="e156d2e2e1b1776ef8c167418da3e49b2cd200d089dcbe96d4b03adb859367b3" name="grub2" arch="src">
  <version epoch="0" ver="2.12" rel="150700.19.26.1"/>
  <changelog author="mchang@suse.com" date="1733659200">- Update PowerPC SBAT patches to upstream (bsc#1233730)
  * 0007-grub-mkimage-Create-new-ELF-note-for-SBAT.patch
  * 0008-grub-mkimage-Add-SBAT-metadata-into-ELF-note-for-Pow.patch
- Replaced patches
  * 0007-mkimage-create-new-ELF-Note-for-SBAT.patch
  * 0008-mkimage-adding-sbat-data-into-sbat-ELF-Note-on-power.patch</changelog>
  <changelog author="mchang@suse.com" date="1739448000">- Fix out of memory issue on PowerPC by increasing RMA size (bsc#1236744)
  * 0001-powerpc-increase-MIN-RMA-size-for-CAS-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1739534400">- Security fixes for 2024
  * 0001-misc-Implement-grub_strlcpy.patch
- Fix CVE-2024-45781 (bsc#1233617)
  * 0002-fs-ufs-Fix-a-heap-OOB-write.patch
- Fix CVE-2024-56737 (bsc#1234958)
- Fix CVE-2024-45782 (bsc#1233615)
  * 0003-fs-hfs-Fix-stack-OOB-write-with-grub_strcpy.patch
- Fix CVE-2024-45780 (bsc#1233614)
  * 0004-fs-tar-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2024-45783 (bsc#1233616)
  * 0005-fs-hfsplus-Set-a-grub_errno-if-mount-fails.patch
  * 0006-kern-file-Ensure-file-data-is-set.patch
  * 0007-kern-file-Implement-filesystem-reference-counting.patch
- Fix CVE-2025-0624 (bsc#1236316)
  * 0008-net-Fix-OOB-write-in-grub_net_search_config_file.patch
- Fix CVE-2024-45774 (bsc#1233609)
  * 0009-video-readers-jpeg-Do-not-permit-duplicate-SOF0-mark.patch
- Fix CVE-2024-45775 (bsc#1233610)
  * 0010-commands-extcmd-Missing-check-for-failed-allocation.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0011-commands-pgp-Unregister-the-check_signatures-hooks-o.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0012-normal-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0013-gettext-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2024-45776 (bsc#1233612)
  * 0014-gettext-Integer-overflow-leads-to-heap-OOB-write-or-.patch
- Fix CVE-2024-45777 (bsc#1233613)
  * 0015-gettext-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2025-0690 (bsc#1237012)
  * 0016-commands-read-Fix-an-integer-overflow-when-supplying.patch
- Fix CVE-2025-1118 (bsc#1237013)
  * 0017-commands-minicmd-Block-the-dump-command-in-lockdown-.patch
- Fix CVE-2024-45778 (bsc#1233606)
- Fix CVE-2024-45779 (bsc#1233608)
  * 0018-fs-bfs-Disable-under-lockdown.patch
- Fix CVE-2025-0677 (bsc#1237002)
- Fix CVE-2025-0684 (bsc#1237008)
- Fix CVE-2025-0685 (bsc#1237009)
- Fix CVE-2025-0686 (bsc#1237010)
- Fix CVE-2025-0689 (bsc#1237011)
  * 0019-fs-Disable-many-filesystems-under-lockdown.patch
- Fix CVE-2025-1125 (bsc#1237014)
- Fix CVE-2025-0678 (bsc#1237006)
  * 0020-fs-Prevent-overflows-when-allocating-memory-for-arra.patch
- Updated to upstream version
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch
- Bump upstream SBAT generation to 5</changelog>
  <changelog author="mchang@suse.com" date="1741003200">- Cherry-pick upstream XFS fixes
  * 0001-fs-xfs-Add-new-superblock-features-added-in-Linux-6..patch
  * 0002-fs-xfs-Fix-grub_xfs_iterate_dir-return-value-in-case.patch
- Fix "attempt to read of write outside of partition" error message (bsc#1237844)
  * 0003-fs-xfs-fix-large-extent-counters-incompat-feature-su.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348800">- Fix zfs.mo not found message when booting on legacy BIOS (bsc#1237865)
  * 0001-autofs-Ignore-zfs-not-found.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348801">- Pass through PAES cipher as AES on s390x-emu (jsc#PED-10950)
  * 0001-s390x-emu-Pass-through-PAES-cipher-as-AES.patch</changelog>
  <changelog author="mchang@suse.com" date="1741694400">- Update patches for Power guest secure boot with key management (jsc#PED-3520)
  (jsc#PED-9892)
  * 0001-ieee1275-adding-failure-check-condition-on-ibm-secur.patch
  * 0002-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0003-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0004-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0005-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0006-powerpc_ieee1275-set-use_static_keys-flag.patch
  * 0007-appendedsig-Reads-the-default-DB-keys-from-ELF-Note.patch
  * 0008-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0009-appendedsig-documentation.patch
- Remove patches
  * 0001-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0002-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0003-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0004-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0005-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0006-appendedsig-documentation.patch</changelog>
  <changelog author="mchang@suse.com" date="1742212800">- Refresh PPC NVMEoF ofpath related patches to newer revision
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
- Patch refreshed
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch
- Patch obsoleted
  * 0004-ofpath-controller-name-update.patch
  * 0001-squash-ieee1275-ofpath-enable-NVMeoF-logical-device-.patch
- Fix segmentation fault error in grub2-probe with target=hints_string
  (bsc#1235971) (bsc#1235958) (bsc#1239651)
  * 0001-ofpath-Add-error-check-in-NVMEoF-device-translation.patch</changelog>
  <changelog author="mchang@suse.com" date="1745409600">- Fix PPC CAS reboot failure work when initiated via submenu (bsc#1241132)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1746446400">- Fix CVE-2025-4382: TPM auto-decryption data exposure (bsc#1242971)
  * 0001-kern-rescue_reader-Block-the-rescue-mode-until-the-C.patch
  * 0002-commands-search-Introduce-the-cryptodisk-only-argume.patch
  * 0003-disk-diskfilter-Introduce-the-cryptocheck-command.patch
  * 0004-commands-search-Add-the-diskfilter-support.patch
  * 0005-docs-Document-available-crypto-disks-checks.patch
  * 0006-disk-cryptodisk-Add-the-erase-secrets-function.patch
  * 0007-disk-cryptodisk-Wipe-the-passphrase-from-memory.patch
  * 0008-cryptocheck-Add-quiet-option.patch
- patch rebased
  * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch
  * 0004-Key-revocation-on-out-of-bound-file-access.patch
- patch refrehed
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch</changelog>
  <changelog author="mchang@suse.com" date="1747742400">- Fix incorrect nvme disks and boot order in bootlist output (bsc#1237174)
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch</changelog>
  <changelog author="mchang@suse.com" date="1752667200">- Fix test -f and -s do not work properly over the network files served via
  tftp and http (bsc#1246157) (bsc#1246237)
  * 0001-test-Fix-f-test-on-files-over-network.patch
  * 0002-http-Return-HTTP-status-code-in-http_establish.patch
  * 0003-docs-Clarify-test-for-files-on-TFTP-and-HTTP.patch
  * 0004-tftp-Fix-hang-when-file-is-a-directory.patch</changelog>
  <changelog author="glin@suse.com" date="1754049600">- Fix CVE-2024-56738: side-channel attack due to not constant-time
  algorithm in grub_crypto_memcmp (bsc#1234959)
  * grub2-constant-time-grub_crypto_memcmp.patch</changelog>
  <changelog author="mchang@suse.com" date="1754308800">- Skip mount point in grub_find_device function (bsc#1246231)
  * 0001-getroot-Skip-mount-points-in-grub_find_device.patch</changelog>
  <changelog author="mchang@suse.com" date="1758542400">- Fix boot hangs in setting up serial console when ACPI SPCR table is present
  and redirection is disabled (bsc#1249088)
  * 0001-term-ns8250-spcr-Return-if-redirection-is-disabled.patch</changelog>
  <changelog author="mchang@suse.com" date="1761048000">- Fix timeout when loading initrd via http after PPC CAS reboot (bsc#1245953)
  * 0001-tcp-Fix-TCP-port-number-reused-on-reboot.patch</changelog>
  <changelog author="mchang@suse.com" date="1762948800">- Fix CVE-2025-54771 (bsc#1252931)
  * 0001-kern-file-Call-grub_dl_unref-after-fs-fs_close.patch
- Fix CVE-2025-54770 (bsc#1252930)
  * 0002-net-net-Unregister-net_set_vlan-command-on-unload.patch
- Fix CVE-2025-61662 (bsc#1252933)
  * 0003-gettext-gettext-Unregister-gettext-command-on-module.patch
- Fix CVE-2025-61663 (bsc#1252934)
- Fix CVE-2025-61664 (bsc#1252935)
  * 0004-normal-main-Unregister-commands-on-module-unload.patch
  * 0005-tests-lib-functional_test-Unregister-commands-on-mod.patch
- Fix CVE-2025-61661 (bsc#1252932)
  * 0006-commands-usbtest-Use-correct-string-length-field.patch
  * 0007-commands-usbtest-Ensure-string-length-is-sufficient-.patch
- Bump upstream SBAT generation to 6</changelog>
  <changelog author="mchang@suse.com" date="1770638400">- Fix error "grub-core/script/lexer.c:352:out of memory" after PowerPC CAS
  Reboot (bsc#1254299)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1770811200">- Backport upstream's commit to prevent BIOS assert (bsc#1258022)
  * 0001-kern-efi-mm-Change-grub_efi_mm_add_regions-to-keep-t.patch</changelog>
  <changelog author="mchang@suse.com" date="1771934400">- Support dm multipath bootlist on PowerPC (bsc#1254415)
  * 0001-ieee1275-support-dm-multipath-bootlist.patch</changelog>
</package>
<package pkgid="eaf6f929e0d3a0ff4c4ed10d4fae1662125dd280b6e97f37a20c5b4ff8192c35" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.12" rel="150700.19.26.1"/>
  <changelog author="mchang@suse.com" date="1733659200">- Update PowerPC SBAT patches to upstream (bsc#1233730)
  * 0007-grub-mkimage-Create-new-ELF-note-for-SBAT.patch
  * 0008-grub-mkimage-Add-SBAT-metadata-into-ELF-note-for-Pow.patch
- Replaced patches
  * 0007-mkimage-create-new-ELF-Note-for-SBAT.patch
  * 0008-mkimage-adding-sbat-data-into-sbat-ELF-Note-on-power.patch</changelog>
  <changelog author="mchang@suse.com" date="1739448000">- Fix out of memory issue on PowerPC by increasing RMA size (bsc#1236744)
  * 0001-powerpc-increase-MIN-RMA-size-for-CAS-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1739534400">- Security fixes for 2024
  * 0001-misc-Implement-grub_strlcpy.patch
- Fix CVE-2024-45781 (bsc#1233617)
  * 0002-fs-ufs-Fix-a-heap-OOB-write.patch
- Fix CVE-2024-56737 (bsc#1234958)
- Fix CVE-2024-45782 (bsc#1233615)
  * 0003-fs-hfs-Fix-stack-OOB-write-with-grub_strcpy.patch
- Fix CVE-2024-45780 (bsc#1233614)
  * 0004-fs-tar-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2024-45783 (bsc#1233616)
  * 0005-fs-hfsplus-Set-a-grub_errno-if-mount-fails.patch
  * 0006-kern-file-Ensure-file-data-is-set.patch
  * 0007-kern-file-Implement-filesystem-reference-counting.patch
- Fix CVE-2025-0624 (bsc#1236316)
  * 0008-net-Fix-OOB-write-in-grub_net_search_config_file.patch
- Fix CVE-2024-45774 (bsc#1233609)
  * 0009-video-readers-jpeg-Do-not-permit-duplicate-SOF0-mark.patch
- Fix CVE-2024-45775 (bsc#1233610)
  * 0010-commands-extcmd-Missing-check-for-failed-allocation.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0011-commands-pgp-Unregister-the-check_signatures-hooks-o.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0012-normal-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0013-gettext-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2024-45776 (bsc#1233612)
  * 0014-gettext-Integer-overflow-leads-to-heap-OOB-write-or-.patch
- Fix CVE-2024-45777 (bsc#1233613)
  * 0015-gettext-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2025-0690 (bsc#1237012)
  * 0016-commands-read-Fix-an-integer-overflow-when-supplying.patch
- Fix CVE-2025-1118 (bsc#1237013)
  * 0017-commands-minicmd-Block-the-dump-command-in-lockdown-.patch
- Fix CVE-2024-45778 (bsc#1233606)
- Fix CVE-2024-45779 (bsc#1233608)
  * 0018-fs-bfs-Disable-under-lockdown.patch
- Fix CVE-2025-0677 (bsc#1237002)
- Fix CVE-2025-0684 (bsc#1237008)
- Fix CVE-2025-0685 (bsc#1237009)
- Fix CVE-2025-0686 (bsc#1237010)
- Fix CVE-2025-0689 (bsc#1237011)
  * 0019-fs-Disable-many-filesystems-under-lockdown.patch
- Fix CVE-2025-1125 (bsc#1237014)
- Fix CVE-2025-0678 (bsc#1237006)
  * 0020-fs-Prevent-overflows-when-allocating-memory-for-arra.patch
- Updated to upstream version
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch
- Bump upstream SBAT generation to 5</changelog>
  <changelog author="mchang@suse.com" date="1741003200">- Cherry-pick upstream XFS fixes
  * 0001-fs-xfs-Add-new-superblock-features-added-in-Linux-6..patch
  * 0002-fs-xfs-Fix-grub_xfs_iterate_dir-return-value-in-case.patch
- Fix "attempt to read of write outside of partition" error message (bsc#1237844)
  * 0003-fs-xfs-fix-large-extent-counters-incompat-feature-su.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348800">- Fix zfs.mo not found message when booting on legacy BIOS (bsc#1237865)
  * 0001-autofs-Ignore-zfs-not-found.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348801">- Pass through PAES cipher as AES on s390x-emu (jsc#PED-10950)
  * 0001-s390x-emu-Pass-through-PAES-cipher-as-AES.patch</changelog>
  <changelog author="mchang@suse.com" date="1741694400">- Update patches for Power guest secure boot with key management (jsc#PED-3520)
  (jsc#PED-9892)
  * 0001-ieee1275-adding-failure-check-condition-on-ibm-secur.patch
  * 0002-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0003-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0004-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0005-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0006-powerpc_ieee1275-set-use_static_keys-flag.patch
  * 0007-appendedsig-Reads-the-default-DB-keys-from-ELF-Note.patch
  * 0008-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0009-appendedsig-documentation.patch
- Remove patches
  * 0001-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0002-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0003-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0004-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0005-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0006-appendedsig-documentation.patch</changelog>
  <changelog author="mchang@suse.com" date="1742212800">- Refresh PPC NVMEoF ofpath related patches to newer revision
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
- Patch refreshed
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch
- Patch obsoleted
  * 0004-ofpath-controller-name-update.patch
  * 0001-squash-ieee1275-ofpath-enable-NVMeoF-logical-device-.patch
- Fix segmentation fault error in grub2-probe with target=hints_string
  (bsc#1235971) (bsc#1235958) (bsc#1239651)
  * 0001-ofpath-Add-error-check-in-NVMEoF-device-translation.patch</changelog>
  <changelog author="mchang@suse.com" date="1745409600">- Fix PPC CAS reboot failure work when initiated via submenu (bsc#1241132)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1746446400">- Fix CVE-2025-4382: TPM auto-decryption data exposure (bsc#1242971)
  * 0001-kern-rescue_reader-Block-the-rescue-mode-until-the-C.patch
  * 0002-commands-search-Introduce-the-cryptodisk-only-argume.patch
  * 0003-disk-diskfilter-Introduce-the-cryptocheck-command.patch
  * 0004-commands-search-Add-the-diskfilter-support.patch
  * 0005-docs-Document-available-crypto-disks-checks.patch
  * 0006-disk-cryptodisk-Add-the-erase-secrets-function.patch
  * 0007-disk-cryptodisk-Wipe-the-passphrase-from-memory.patch
  * 0008-cryptocheck-Add-quiet-option.patch
- patch rebased
  * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch
  * 0004-Key-revocation-on-out-of-bound-file-access.patch
- patch refrehed
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch</changelog>
  <changelog author="mchang@suse.com" date="1747742400">- Fix incorrect nvme disks and boot order in bootlist output (bsc#1237174)
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch</changelog>
  <changelog author="mchang@suse.com" date="1752667200">- Fix test -f and -s do not work properly over the network files served via
  tftp and http (bsc#1246157) (bsc#1246237)
  * 0001-test-Fix-f-test-on-files-over-network.patch
  * 0002-http-Return-HTTP-status-code-in-http_establish.patch
  * 0003-docs-Clarify-test-for-files-on-TFTP-and-HTTP.patch
  * 0004-tftp-Fix-hang-when-file-is-a-directory.patch</changelog>
  <changelog author="glin@suse.com" date="1754049600">- Fix CVE-2024-56738: side-channel attack due to not constant-time
  algorithm in grub_crypto_memcmp (bsc#1234959)
  * grub2-constant-time-grub_crypto_memcmp.patch</changelog>
  <changelog author="mchang@suse.com" date="1754308800">- Skip mount point in grub_find_device function (bsc#1246231)
  * 0001-getroot-Skip-mount-points-in-grub_find_device.patch</changelog>
  <changelog author="mchang@suse.com" date="1758542400">- Fix boot hangs in setting up serial console when ACPI SPCR table is present
  and redirection is disabled (bsc#1249088)
  * 0001-term-ns8250-spcr-Return-if-redirection-is-disabled.patch</changelog>
  <changelog author="mchang@suse.com" date="1761048000">- Fix timeout when loading initrd via http after PPC CAS reboot (bsc#1245953)
  * 0001-tcp-Fix-TCP-port-number-reused-on-reboot.patch</changelog>
  <changelog author="mchang@suse.com" date="1762948800">- Fix CVE-2025-54771 (bsc#1252931)
  * 0001-kern-file-Call-grub_dl_unref-after-fs-fs_close.patch
- Fix CVE-2025-54770 (bsc#1252930)
  * 0002-net-net-Unregister-net_set_vlan-command-on-unload.patch
- Fix CVE-2025-61662 (bsc#1252933)
  * 0003-gettext-gettext-Unregister-gettext-command-on-module.patch
- Fix CVE-2025-61663 (bsc#1252934)
- Fix CVE-2025-61664 (bsc#1252935)
  * 0004-normal-main-Unregister-commands-on-module-unload.patch
  * 0005-tests-lib-functional_test-Unregister-commands-on-mod.patch
- Fix CVE-2025-61661 (bsc#1252932)
  * 0006-commands-usbtest-Use-correct-string-length-field.patch
  * 0007-commands-usbtest-Ensure-string-length-is-sufficient-.patch
- Bump upstream SBAT generation to 6</changelog>
  <changelog author="mchang@suse.com" date="1770638400">- Fix error "grub-core/script/lexer.c:352:out of memory" after PowerPC CAS
  Reboot (bsc#1254299)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1770811200">- Backport upstream's commit to prevent BIOS assert (bsc#1258022)
  * 0001-kern-efi-mm-Change-grub_efi_mm_add_regions-to-keep-t.patch</changelog>
  <changelog author="mchang@suse.com" date="1771934400">- Support dm multipath bootlist on PowerPC (bsc#1254415)
  * 0001-ieee1275-support-dm-multipath-bootlist.patch</changelog>
</package>
<package pkgid="4f03cf252c4768109dc2cb800d6ad8edac9f0c7bad53ebcde75665a1eddff23f" name="grub2" arch="src">
  <version epoch="0" ver="2.12" rel="150700.19.29.1"/>
  <changelog author="mchang@suse.com" date="1741003200">- Cherry-pick upstream XFS fixes
  * 0001-fs-xfs-Add-new-superblock-features-added-in-Linux-6..patch
  * 0002-fs-xfs-Fix-grub_xfs_iterate_dir-return-value-in-case.patch
- Fix "attempt to read of write outside of partition" error message (bsc#1237844)
  * 0003-fs-xfs-fix-large-extent-counters-incompat-feature-su.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348800">- Fix zfs.mo not found message when booting on legacy BIOS (bsc#1237865)
  * 0001-autofs-Ignore-zfs-not-found.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348801">- Pass through PAES cipher as AES on s390x-emu (jsc#PED-10950)
  * 0001-s390x-emu-Pass-through-PAES-cipher-as-AES.patch</changelog>
  <changelog author="mchang@suse.com" date="1741694400">- Update patches for Power guest secure boot with key management (jsc#PED-3520)
  (jsc#PED-9892)
  * 0001-ieee1275-adding-failure-check-condition-on-ibm-secur.patch
  * 0002-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0003-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0004-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0005-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0006-powerpc_ieee1275-set-use_static_keys-flag.patch
  * 0007-appendedsig-Reads-the-default-DB-keys-from-ELF-Note.patch
  * 0008-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0009-appendedsig-documentation.patch
- Remove patches
  * 0001-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0002-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0003-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0004-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0005-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0006-appendedsig-documentation.patch</changelog>
  <changelog author="mchang@suse.com" date="1742212800">- Refresh PPC NVMEoF ofpath related patches to newer revision
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
- Patch refreshed
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch
- Patch obsoleted
  * 0004-ofpath-controller-name-update.patch
  * 0001-squash-ieee1275-ofpath-enable-NVMeoF-logical-device-.patch
- Fix segmentation fault error in grub2-probe with target=hints_string
  (bsc#1235971) (bsc#1235958) (bsc#1239651)
  * 0001-ofpath-Add-error-check-in-NVMEoF-device-translation.patch</changelog>
  <changelog author="mchang@suse.com" date="1745409600">- Fix PPC CAS reboot failure work when initiated via submenu (bsc#1241132)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1746446400">- Fix CVE-2025-4382: TPM auto-decryption data exposure (bsc#1242971)
  * 0001-kern-rescue_reader-Block-the-rescue-mode-until-the-C.patch
  * 0002-commands-search-Introduce-the-cryptodisk-only-argume.patch
  * 0003-disk-diskfilter-Introduce-the-cryptocheck-command.patch
  * 0004-commands-search-Add-the-diskfilter-support.patch
  * 0005-docs-Document-available-crypto-disks-checks.patch
  * 0006-disk-cryptodisk-Add-the-erase-secrets-function.patch
  * 0007-disk-cryptodisk-Wipe-the-passphrase-from-memory.patch
  * 0008-cryptocheck-Add-quiet-option.patch
- patch rebased
  * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch
  * 0004-Key-revocation-on-out-of-bound-file-access.patch
- patch refrehed
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch</changelog>
  <changelog author="mchang@suse.com" date="1747742400">- Fix incorrect nvme disks and boot order in bootlist output (bsc#1237174)
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch</changelog>
  <changelog author="mchang@suse.com" date="1752667200">- Fix test -f and -s do not work properly over the network files served via
  tftp and http (bsc#1246157) (bsc#1246237)
  * 0001-test-Fix-f-test-on-files-over-network.patch
  * 0002-http-Return-HTTP-status-code-in-http_establish.patch
  * 0003-docs-Clarify-test-for-files-on-TFTP-and-HTTP.patch
  * 0004-tftp-Fix-hang-when-file-is-a-directory.patch</changelog>
  <changelog author="glin@suse.com" date="1754049600">- Fix CVE-2024-56738: side-channel attack due to not constant-time
  algorithm in grub_crypto_memcmp (bsc#1234959)
  * grub2-constant-time-grub_crypto_memcmp.patch</changelog>
  <changelog author="mchang@suse.com" date="1754308800">- Skip mount point in grub_find_device function (bsc#1246231)
  * 0001-getroot-Skip-mount-points-in-grub_find_device.patch</changelog>
  <changelog author="mchang@suse.com" date="1758542400">- Fix boot hangs in setting up serial console when ACPI SPCR table is present
  and redirection is disabled (bsc#1249088)
  * 0001-term-ns8250-spcr-Return-if-redirection-is-disabled.patch</changelog>
  <changelog author="mchang@suse.com" date="1761048000">- Fix timeout when loading initrd via http after PPC CAS reboot (bsc#1245953)
  * 0001-tcp-Fix-TCP-port-number-reused-on-reboot.patch</changelog>
  <changelog author="mchang@suse.com" date="1762948800">- Fix CVE-2025-54771 (bsc#1252931)
  * 0001-kern-file-Call-grub_dl_unref-after-fs-fs_close.patch
- Fix CVE-2025-54770 (bsc#1252930)
  * 0002-net-net-Unregister-net_set_vlan-command-on-unload.patch
- Fix CVE-2025-61662 (bsc#1252933)
  * 0003-gettext-gettext-Unregister-gettext-command-on-module.patch
- Fix CVE-2025-61663 (bsc#1252934)
- Fix CVE-2025-61664 (bsc#1252935)
  * 0004-normal-main-Unregister-commands-on-module-unload.patch
  * 0005-tests-lib-functional_test-Unregister-commands-on-mod.patch
- Fix CVE-2025-61661 (bsc#1252932)
  * 0006-commands-usbtest-Use-correct-string-length-field.patch
  * 0007-commands-usbtest-Ensure-string-length-is-sufficient-.patch
- Bump upstream SBAT generation to 6</changelog>
  <changelog author="mchang@suse.com" date="1770638400">- Fix error "grub-core/script/lexer.c:352:out of memory" after PowerPC CAS
  Reboot (bsc#1254299)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1770811200">- Backport upstream's commit to prevent BIOS assert (bsc#1258022)
  * 0001-kern-efi-mm-Change-grub_efi_mm_add_regions-to-keep-t.patch</changelog>
  <changelog author="mchang@suse.com" date="1771934400">- Support dm multipath bootlist on PowerPC (bsc#1254415)
  * 0001-ieee1275-support-dm-multipath-bootlist.patch</changelog>
  <changelog author="mchang@suse.com" date="1775563200">- Fix double free in xen booting if root filesystem is Btrfs (bsc#1259543)
  * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  * grub2-btrfs-09-get-default-subvolume.patch</changelog>
  <changelog author="mchang@suse.com" date="1775736000">- Fix PowerPC network boot prefix to correctly locate grub.cfg (bsc#1249385)
  * 0001-ieee1275-Use-net-config-for-boot-location-instead-of.patch</changelog>
  <changelog author="mchang@suse.com" date="1776081600">- Fix missing install device check in grub2-install on PowerPC which could lead
  to bootlist corruption (bsc#1221126)
  * 0001-Mandatory-install-device-check-for-PowerPC.patch</changelog>
</package>
<package pkgid="87850494575bac74ed96363adb72641a8882ec2df42be849922930ba522f73df" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.12" rel="150700.19.29.1"/>
  <changelog author="mchang@suse.com" date="1741003200">- Cherry-pick upstream XFS fixes
  * 0001-fs-xfs-Add-new-superblock-features-added-in-Linux-6..patch
  * 0002-fs-xfs-Fix-grub_xfs_iterate_dir-return-value-in-case.patch
- Fix "attempt to read of write outside of partition" error message (bsc#1237844)
  * 0003-fs-xfs-fix-large-extent-counters-incompat-feature-su.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348800">- Fix zfs.mo not found message when booting on legacy BIOS (bsc#1237865)
  * 0001-autofs-Ignore-zfs-not-found.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348801">- Pass through PAES cipher as AES on s390x-emu (jsc#PED-10950)
  * 0001-s390x-emu-Pass-through-PAES-cipher-as-AES.patch</changelog>
  <changelog author="mchang@suse.com" date="1741694400">- Update patches for Power guest secure boot with key management (jsc#PED-3520)
  (jsc#PED-9892)
  * 0001-ieee1275-adding-failure-check-condition-on-ibm-secur.patch
  * 0002-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0003-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0004-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0005-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0006-powerpc_ieee1275-set-use_static_keys-flag.patch
  * 0007-appendedsig-Reads-the-default-DB-keys-from-ELF-Note.patch
  * 0008-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0009-appendedsig-documentation.patch
- Remove patches
  * 0001-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0002-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0003-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0004-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0005-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0006-appendedsig-documentation.patch</changelog>
  <changelog author="mchang@suse.com" date="1742212800">- Refresh PPC NVMEoF ofpath related patches to newer revision
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
- Patch refreshed
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch
- Patch obsoleted
  * 0004-ofpath-controller-name-update.patch
  * 0001-squash-ieee1275-ofpath-enable-NVMeoF-logical-device-.patch
- Fix segmentation fault error in grub2-probe with target=hints_string
  (bsc#1235971) (bsc#1235958) (bsc#1239651)
  * 0001-ofpath-Add-error-check-in-NVMEoF-device-translation.patch</changelog>
  <changelog author="mchang@suse.com" date="1745409600">- Fix PPC CAS reboot failure work when initiated via submenu (bsc#1241132)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1746446400">- Fix CVE-2025-4382: TPM auto-decryption data exposure (bsc#1242971)
  * 0001-kern-rescue_reader-Block-the-rescue-mode-until-the-C.patch
  * 0002-commands-search-Introduce-the-cryptodisk-only-argume.patch
  * 0003-disk-diskfilter-Introduce-the-cryptocheck-command.patch
  * 0004-commands-search-Add-the-diskfilter-support.patch
  * 0005-docs-Document-available-crypto-disks-checks.patch
  * 0006-disk-cryptodisk-Add-the-erase-secrets-function.patch
  * 0007-disk-cryptodisk-Wipe-the-passphrase-from-memory.patch
  * 0008-cryptocheck-Add-quiet-option.patch
- patch rebased
  * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch
  * 0004-Key-revocation-on-out-of-bound-file-access.patch
- patch refrehed
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch</changelog>
  <changelog author="mchang@suse.com" date="1747742400">- Fix incorrect nvme disks and boot order in bootlist output (bsc#1237174)
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch</changelog>
  <changelog author="mchang@suse.com" date="1752667200">- Fix test -f and -s do not work properly over the network files served via
  tftp and http (bsc#1246157) (bsc#1246237)
  * 0001-test-Fix-f-test-on-files-over-network.patch
  * 0002-http-Return-HTTP-status-code-in-http_establish.patch
  * 0003-docs-Clarify-test-for-files-on-TFTP-and-HTTP.patch
  * 0004-tftp-Fix-hang-when-file-is-a-directory.patch</changelog>
  <changelog author="glin@suse.com" date="1754049600">- Fix CVE-2024-56738: side-channel attack due to not constant-time
  algorithm in grub_crypto_memcmp (bsc#1234959)
  * grub2-constant-time-grub_crypto_memcmp.patch</changelog>
  <changelog author="mchang@suse.com" date="1754308800">- Skip mount point in grub_find_device function (bsc#1246231)
  * 0001-getroot-Skip-mount-points-in-grub_find_device.patch</changelog>
  <changelog author="mchang@suse.com" date="1758542400">- Fix boot hangs in setting up serial console when ACPI SPCR table is present
  and redirection is disabled (bsc#1249088)
  * 0001-term-ns8250-spcr-Return-if-redirection-is-disabled.patch</changelog>
  <changelog author="mchang@suse.com" date="1761048000">- Fix timeout when loading initrd via http after PPC CAS reboot (bsc#1245953)
  * 0001-tcp-Fix-TCP-port-number-reused-on-reboot.patch</changelog>
  <changelog author="mchang@suse.com" date="1762948800">- Fix CVE-2025-54771 (bsc#1252931)
  * 0001-kern-file-Call-grub_dl_unref-after-fs-fs_close.patch
- Fix CVE-2025-54770 (bsc#1252930)
  * 0002-net-net-Unregister-net_set_vlan-command-on-unload.patch
- Fix CVE-2025-61662 (bsc#1252933)
  * 0003-gettext-gettext-Unregister-gettext-command-on-module.patch
- Fix CVE-2025-61663 (bsc#1252934)
- Fix CVE-2025-61664 (bsc#1252935)
  * 0004-normal-main-Unregister-commands-on-module-unload.patch
  * 0005-tests-lib-functional_test-Unregister-commands-on-mod.patch
- Fix CVE-2025-61661 (bsc#1252932)
  * 0006-commands-usbtest-Use-correct-string-length-field.patch
  * 0007-commands-usbtest-Ensure-string-length-is-sufficient-.patch
- Bump upstream SBAT generation to 6</changelog>
  <changelog author="mchang@suse.com" date="1770638400">- Fix error "grub-core/script/lexer.c:352:out of memory" after PowerPC CAS
  Reboot (bsc#1254299)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1770811200">- Backport upstream's commit to prevent BIOS assert (bsc#1258022)
  * 0001-kern-efi-mm-Change-grub_efi_mm_add_regions-to-keep-t.patch</changelog>
  <changelog author="mchang@suse.com" date="1771934400">- Support dm multipath bootlist on PowerPC (bsc#1254415)
  * 0001-ieee1275-support-dm-multipath-bootlist.patch</changelog>
  <changelog author="mchang@suse.com" date="1775563200">- Fix double free in xen booting if root filesystem is Btrfs (bsc#1259543)
  * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  * grub2-btrfs-09-get-default-subvolume.patch</changelog>
  <changelog author="mchang@suse.com" date="1775736000">- Fix PowerPC network boot prefix to correctly locate grub.cfg (bsc#1249385)
  * 0001-ieee1275-Use-net-config-for-boot-location-instead-of.patch</changelog>
  <changelog author="mchang@suse.com" date="1776081600">- Fix missing install device check in grub2-install on PowerPC which could lead
  to bootlist corruption (bsc#1221126)
  * 0001-Mandatory-install-device-check-for-PowerPC.patch</changelog>
</package>
<package pkgid="a09e3a1c91eb430ea7a9741b2afc47ffb4b7857a07de3f14c6abaf9959b87156" name="grub2" arch="src">
  <version epoch="0" ver="2.12" rel="150700.19.3.1"/>
  <changelog author="mchang@suse.com" date="1729684800">- Fix error: /boot/grub2/x86_64-efi/bli.mod not found (bsc#1231591)</changelog>
  <changelog author="mchang@suse.com" date="1730289600">- Enable support of Radix, Xive and Radix_gtse on Power (jsc#PED-9881)
  * 0001-kern-ieee1275-init-Add-IEEE-1275-Radix-support-for-K.patch</changelog>
  <changelog author="mchang@suse.com" date="1730289601">- Fix CVE-2024-49504 (bsc#1229163) (bsc#1229164)
- Restrict CLI access if the encrypted root device is automatically unlocked by
  the TPM. LUKS password authentication is required for access to be granted
  * 0001-cli_lock-Add-build-option-to-block-command-line-inte.patch
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch
- Obsolete, as CLI access is now locked and granted access no longer requires
  the previous restrictions
  * 0002-Restrict-file-access-on-cryptodisk-print.patch
  * 0003-Restrict-ls-and-auto-file-completion-on-cryptodisk-p.patch
- Rediff
  * 0004-Key-revocation-on-out-of-bound-file-access.patch</changelog>
  <changelog author="mchang@suse.com" date="1730462400">- Fix grub.cfg is loaded from an unexpected fallback directory instead of the
  root directory during PXE boot when grub is loaded from the tftp root
  directory (bsc#1232391)
  * 0001-kern-main-Fix-cmdpath-in-root-directory.patch
  * grub2.spec: Refine PPC grub.elf early config to derive root from cmdpath
    directly, avoiding the unneeded search</changelog>
  <changelog author="mchang@suse.com" date="1730894400">- Fix xen package contains debug_info files with the .module suffix by moving
  them to a separate xen-debug subpackage (bsc#1232573)</changelog>
  <changelog author="mchang@suse.com" date="1731067200">- Do not enable blscfg on s390-emu
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1731067201">- Fix previous change as the variable has to be set earlier
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1731499200">- Revert the patches related to BLS support in grub2-mkconfig, as they are not
  relevant to the current BLS integration and cause issues in older KIWI
  versions, which actively force it to be enabled by default (bsc#1233196)
  * 0002-Add-BLS-support-to-grub-mkconfig.patch
  * 0003-Add-grub2-switch-to-blscfg.patch
  * 0007-grub-switch-to-blscfg-adapt-to-openSUSE.patch
  * 0008-blscfg-reading-bls-fragments-if-boot-present.patch
  * 0009-10_linux-Some-refinement-for-BLS.patch
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1733486400">- Fix missing requires in SLE package (bsc#1234264) (bsc#1234272)</changelog>
  <changelog author="mchang@suse.com" date="1733659200">- Update PowerPC SBAT patches to upstream (bsc#1233730)
  * 0007-grub-mkimage-Create-new-ELF-note-for-SBAT.patch
  * 0008-grub-mkimage-Add-SBAT-metadata-into-ELF-note-for-Pow.patch
- Replaced patches
  * 0007-mkimage-create-new-ELF-Note-for-SBAT.patch
  * 0008-mkimage-adding-sbat-data-into-sbat-ELF-Note-on-power.patch</changelog>
  <changelog author="mchang@suse.com" date="1739448000">- Fix out of memory issue on PowerPC by increasing RMA size (bsc#1236744)
  * 0001-powerpc-increase-MIN-RMA-size-for-CAS-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1739534400">- Security fixes for 2024
  * 0001-misc-Implement-grub_strlcpy.patch
- Fix CVE-2024-45781 (bsc#1233617)
  * 0002-fs-ufs-Fix-a-heap-OOB-write.patch
- Fix CVE-2024-56737 (bsc#1234958)
- Fix CVE-2024-45782 (bsc#1233615)
  * 0003-fs-hfs-Fix-stack-OOB-write-with-grub_strcpy.patch
- Fix CVE-2024-45780 (bsc#1233614)
  * 0004-fs-tar-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2024-45783 (bsc#1233616)
  * 0005-fs-hfsplus-Set-a-grub_errno-if-mount-fails.patch
  * 0006-kern-file-Ensure-file-data-is-set.patch
  * 0007-kern-file-Implement-filesystem-reference-counting.patch
- Fix CVE-2025-0624 (bsc#1236316)
  * 0008-net-Fix-OOB-write-in-grub_net_search_config_file.patch
- Fix CVE-2024-45774 (bsc#1233609)
  * 0009-video-readers-jpeg-Do-not-permit-duplicate-SOF0-mark.patch
- Fix CVE-2024-45775 (bsc#1233610)
  * 0010-commands-extcmd-Missing-check-for-failed-allocation.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0011-commands-pgp-Unregister-the-check_signatures-hooks-o.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0012-normal-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0013-gettext-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2024-45776 (bsc#1233612)
  * 0014-gettext-Integer-overflow-leads-to-heap-OOB-write-or-.patch
- Fix CVE-2024-45777 (bsc#1233613)
  * 0015-gettext-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2025-0690 (bsc#1237012)
  * 0016-commands-read-Fix-an-integer-overflow-when-supplying.patch
- Fix CVE-2025-1118 (bsc#1237013)
  * 0017-commands-minicmd-Block-the-dump-command-in-lockdown-.patch
- Fix CVE-2024-45778 (bsc#1233606)
- Fix CVE-2024-45779 (bsc#1233608)
  * 0018-fs-bfs-Disable-under-lockdown.patch
- Fix CVE-2025-0677 (bsc#1237002)
- Fix CVE-2025-0684 (bsc#1237008)
- Fix CVE-2025-0685 (bsc#1237009)
- Fix CVE-2025-0686 (bsc#1237010)
- Fix CVE-2025-0689 (bsc#1237011)
  * 0019-fs-Disable-many-filesystems-under-lockdown.patch
- Fix CVE-2025-1125 (bsc#1237014)
- Fix CVE-2025-0678 (bsc#1237006)
  * 0020-fs-Prevent-overflows-when-allocating-memory-for-arra.patch
- Updated to upstream version
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch
- Bump upstream SBAT generation to 5</changelog>
  <changelog author="mchang@suse.com" date="1741003200">- Cherry-pick upstream XFS fixes
  * 0001-fs-xfs-Add-new-superblock-features-added-in-Linux-6..patch
  * 0002-fs-xfs-Fix-grub_xfs_iterate_dir-return-value-in-case.patch
- Fix "attempt to read of write outside of partition" error message (bsc#1237844)
  * 0003-fs-xfs-fix-large-extent-counters-incompat-feature-su.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348800">- Fix zfs.mo not found message when booting on legacy BIOS (bsc#1237865)
  * 0001-autofs-Ignore-zfs-not-found.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348801">- Pass through PAES cipher as AES on s390x-emu (jsc#PED-10950)
  * 0001-s390x-emu-Pass-through-PAES-cipher-as-AES.patch</changelog>
  <changelog author="mchang@suse.com" date="1741694400">- Update patches for Power guest secure boot with key management (jsc#PED-3520)
  (jsc#PED-9892)
  * 0001-ieee1275-adding-failure-check-condition-on-ibm-secur.patch
  * 0002-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0003-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0004-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0005-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0006-powerpc_ieee1275-set-use_static_keys-flag.patch
  * 0007-appendedsig-Reads-the-default-DB-keys-from-ELF-Note.patch
  * 0008-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0009-appendedsig-documentation.patch
- Remove patches
  * 0001-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0002-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0003-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0004-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0005-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0006-appendedsig-documentation.patch</changelog>
  <changelog author="mchang@suse.com" date="1742212800">- Refresh PPC NVMEoF ofpath related patches to newer revision
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
- Patch refreshed
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch
- Patch obsoleted
  * 0004-ofpath-controller-name-update.patch
  * 0001-squash-ieee1275-ofpath-enable-NVMeoF-logical-device-.patch
- Fix segmentation fault error in grub2-probe with target=hints_string
  (bsc#1235971) (bsc#1235958) (bsc#1239651)
  * 0001-ofpath-Add-error-check-in-NVMEoF-device-translation.patch</changelog>
  <changelog author="mchang@suse.com" date="1745409600">- Fix PPC CAS reboot failure work when initiated via submenu (bsc#1241132)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1746446400">- Fix CVE-2025-4382: TPM auto-decryption data exposure (bsc#1242971)
  * 0001-kern-rescue_reader-Block-the-rescue-mode-until-the-C.patch
  * 0002-commands-search-Introduce-the-cryptodisk-only-argume.patch
  * 0003-disk-diskfilter-Introduce-the-cryptocheck-command.patch
  * 0004-commands-search-Add-the-diskfilter-support.patch
  * 0005-docs-Document-available-crypto-disks-checks.patch
  * 0006-disk-cryptodisk-Add-the-erase-secrets-function.patch
  * 0007-disk-cryptodisk-Wipe-the-passphrase-from-memory.patch
  * 0008-cryptocheck-Add-quiet-option.patch
- patch rebased
  * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch
  * 0004-Key-revocation-on-out-of-bound-file-access.patch
- patch refrehed
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch</changelog>
  <changelog author="mchang@suse.com" date="1747742400">- Fix incorrect nvme disks and boot order in bootlist output (bsc#1237174)
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch</changelog>
</package>
<package pkgid="2ef18172f033f7672e53c33378b1ff5ee69ce7c6f1ee0c4327de7f8cb9d9898f" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.12" rel="150700.19.3.1"/>
  <changelog author="mchang@suse.com" date="1729684800">- Fix error: /boot/grub2/x86_64-efi/bli.mod not found (bsc#1231591)</changelog>
  <changelog author="mchang@suse.com" date="1730289600">- Enable support of Radix, Xive and Radix_gtse on Power (jsc#PED-9881)
  * 0001-kern-ieee1275-init-Add-IEEE-1275-Radix-support-for-K.patch</changelog>
  <changelog author="mchang@suse.com" date="1730289601">- Fix CVE-2024-49504 (bsc#1229163) (bsc#1229164)
- Restrict CLI access if the encrypted root device is automatically unlocked by
  the TPM. LUKS password authentication is required for access to be granted
  * 0001-cli_lock-Add-build-option-to-block-command-line-inte.patch
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch
- Obsolete, as CLI access is now locked and granted access no longer requires
  the previous restrictions
  * 0002-Restrict-file-access-on-cryptodisk-print.patch
  * 0003-Restrict-ls-and-auto-file-completion-on-cryptodisk-p.patch
- Rediff
  * 0004-Key-revocation-on-out-of-bound-file-access.patch</changelog>
  <changelog author="mchang@suse.com" date="1730462400">- Fix grub.cfg is loaded from an unexpected fallback directory instead of the
  root directory during PXE boot when grub is loaded from the tftp root
  directory (bsc#1232391)
  * 0001-kern-main-Fix-cmdpath-in-root-directory.patch
  * grub2.spec: Refine PPC grub.elf early config to derive root from cmdpath
    directly, avoiding the unneeded search</changelog>
  <changelog author="mchang@suse.com" date="1730894400">- Fix xen package contains debug_info files with the .module suffix by moving
  them to a separate xen-debug subpackage (bsc#1232573)</changelog>
  <changelog author="mchang@suse.com" date="1731067200">- Do not enable blscfg on s390-emu
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1731067201">- Fix previous change as the variable has to be set earlier
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1731499200">- Revert the patches related to BLS support in grub2-mkconfig, as they are not
  relevant to the current BLS integration and cause issues in older KIWI
  versions, which actively force it to be enabled by default (bsc#1233196)
  * 0002-Add-BLS-support-to-grub-mkconfig.patch
  * 0003-Add-grub2-switch-to-blscfg.patch
  * 0007-grub-switch-to-blscfg-adapt-to-openSUSE.patch
  * 0008-blscfg-reading-bls-fragments-if-boot-present.patch
  * 0009-10_linux-Some-refinement-for-BLS.patch
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1733486400">- Fix missing requires in SLE package (bsc#1234264) (bsc#1234272)</changelog>
  <changelog author="mchang@suse.com" date="1733659200">- Update PowerPC SBAT patches to upstream (bsc#1233730)
  * 0007-grub-mkimage-Create-new-ELF-note-for-SBAT.patch
  * 0008-grub-mkimage-Add-SBAT-metadata-into-ELF-note-for-Pow.patch
- Replaced patches
  * 0007-mkimage-create-new-ELF-Note-for-SBAT.patch
  * 0008-mkimage-adding-sbat-data-into-sbat-ELF-Note-on-power.patch</changelog>
  <changelog author="mchang@suse.com" date="1739448000">- Fix out of memory issue on PowerPC by increasing RMA size (bsc#1236744)
  * 0001-powerpc-increase-MIN-RMA-size-for-CAS-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1739534400">- Security fixes for 2024
  * 0001-misc-Implement-grub_strlcpy.patch
- Fix CVE-2024-45781 (bsc#1233617)
  * 0002-fs-ufs-Fix-a-heap-OOB-write.patch
- Fix CVE-2024-56737 (bsc#1234958)
- Fix CVE-2024-45782 (bsc#1233615)
  * 0003-fs-hfs-Fix-stack-OOB-write-with-grub_strcpy.patch
- Fix CVE-2024-45780 (bsc#1233614)
  * 0004-fs-tar-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2024-45783 (bsc#1233616)
  * 0005-fs-hfsplus-Set-a-grub_errno-if-mount-fails.patch
  * 0006-kern-file-Ensure-file-data-is-set.patch
  * 0007-kern-file-Implement-filesystem-reference-counting.patch
- Fix CVE-2025-0624 (bsc#1236316)
  * 0008-net-Fix-OOB-write-in-grub_net_search_config_file.patch
- Fix CVE-2024-45774 (bsc#1233609)
  * 0009-video-readers-jpeg-Do-not-permit-duplicate-SOF0-mark.patch
- Fix CVE-2024-45775 (bsc#1233610)
  * 0010-commands-extcmd-Missing-check-for-failed-allocation.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0011-commands-pgp-Unregister-the-check_signatures-hooks-o.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0012-normal-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0013-gettext-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2024-45776 (bsc#1233612)
  * 0014-gettext-Integer-overflow-leads-to-heap-OOB-write-or-.patch
- Fix CVE-2024-45777 (bsc#1233613)
  * 0015-gettext-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2025-0690 (bsc#1237012)
  * 0016-commands-read-Fix-an-integer-overflow-when-supplying.patch
- Fix CVE-2025-1118 (bsc#1237013)
  * 0017-commands-minicmd-Block-the-dump-command-in-lockdown-.patch
- Fix CVE-2024-45778 (bsc#1233606)
- Fix CVE-2024-45779 (bsc#1233608)
  * 0018-fs-bfs-Disable-under-lockdown.patch
- Fix CVE-2025-0677 (bsc#1237002)
- Fix CVE-2025-0684 (bsc#1237008)
- Fix CVE-2025-0685 (bsc#1237009)
- Fix CVE-2025-0686 (bsc#1237010)
- Fix CVE-2025-0689 (bsc#1237011)
  * 0019-fs-Disable-many-filesystems-under-lockdown.patch
- Fix CVE-2025-1125 (bsc#1237014)
- Fix CVE-2025-0678 (bsc#1237006)
  * 0020-fs-Prevent-overflows-when-allocating-memory-for-arra.patch
- Updated to upstream version
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch
- Bump upstream SBAT generation to 5</changelog>
  <changelog author="mchang@suse.com" date="1741003200">- Cherry-pick upstream XFS fixes
  * 0001-fs-xfs-Add-new-superblock-features-added-in-Linux-6..patch
  * 0002-fs-xfs-Fix-grub_xfs_iterate_dir-return-value-in-case.patch
- Fix "attempt to read of write outside of partition" error message (bsc#1237844)
  * 0003-fs-xfs-fix-large-extent-counters-incompat-feature-su.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348800">- Fix zfs.mo not found message when booting on legacy BIOS (bsc#1237865)
  * 0001-autofs-Ignore-zfs-not-found.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348801">- Pass through PAES cipher as AES on s390x-emu (jsc#PED-10950)
  * 0001-s390x-emu-Pass-through-PAES-cipher-as-AES.patch</changelog>
  <changelog author="mchang@suse.com" date="1741694400">- Update patches for Power guest secure boot with key management (jsc#PED-3520)
  (jsc#PED-9892)
  * 0001-ieee1275-adding-failure-check-condition-on-ibm-secur.patch
  * 0002-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0003-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0004-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0005-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0006-powerpc_ieee1275-set-use_static_keys-flag.patch
  * 0007-appendedsig-Reads-the-default-DB-keys-from-ELF-Note.patch
  * 0008-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0009-appendedsig-documentation.patch
- Remove patches
  * 0001-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0002-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0003-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0004-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0005-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0006-appendedsig-documentation.patch</changelog>
  <changelog author="mchang@suse.com" date="1742212800">- Refresh PPC NVMEoF ofpath related patches to newer revision
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
- Patch refreshed
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch
- Patch obsoleted
  * 0004-ofpath-controller-name-update.patch
  * 0001-squash-ieee1275-ofpath-enable-NVMeoF-logical-device-.patch
- Fix segmentation fault error in grub2-probe with target=hints_string
  (bsc#1235971) (bsc#1235958) (bsc#1239651)
  * 0001-ofpath-Add-error-check-in-NVMEoF-device-translation.patch</changelog>
  <changelog author="mchang@suse.com" date="1745409600">- Fix PPC CAS reboot failure work when initiated via submenu (bsc#1241132)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1746446400">- Fix CVE-2025-4382: TPM auto-decryption data exposure (bsc#1242971)
  * 0001-kern-rescue_reader-Block-the-rescue-mode-until-the-C.patch
  * 0002-commands-search-Introduce-the-cryptodisk-only-argume.patch
  * 0003-disk-diskfilter-Introduce-the-cryptocheck-command.patch
  * 0004-commands-search-Add-the-diskfilter-support.patch
  * 0005-docs-Document-available-crypto-disks-checks.patch
  * 0006-disk-cryptodisk-Add-the-erase-secrets-function.patch
  * 0007-disk-cryptodisk-Wipe-the-passphrase-from-memory.patch
  * 0008-cryptocheck-Add-quiet-option.patch
- patch rebased
  * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch
  * 0004-Key-revocation-on-out-of-bound-file-access.patch
- patch refrehed
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch</changelog>
  <changelog author="mchang@suse.com" date="1747742400">- Fix incorrect nvme disks and boot order in bootlist output (bsc#1237174)
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch</changelog>
</package>
<package pkgid="cdf877b0f5db75f5c83e6c269d7e8f8f5481f9af27534e111838f47b4281b83e" name="grub2-i386-pc" arch="noarch">
  <version epoch="0" ver="2.12" rel="150700.19.13.2"/>
  <changelog author="mchang@suse.com" date="1730462400">- Fix grub.cfg is loaded from an unexpected fallback directory instead of the
  root directory during PXE boot when grub is loaded from the tftp root
  directory (bsc#1232391)
  * 0001-kern-main-Fix-cmdpath-in-root-directory.patch
  * grub2.spec: Refine PPC grub.elf early config to derive root from cmdpath
    directly, avoiding the unneeded search</changelog>
  <changelog author="mchang@suse.com" date="1730894400">- Fix xen package contains debug_info files with the .module suffix by moving
  them to a separate xen-debug subpackage (bsc#1232573)</changelog>
  <changelog author="mchang@suse.com" date="1731067200">- Do not enable blscfg on s390-emu
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1731067201">- Fix previous change as the variable has to be set earlier
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1731499200">- Revert the patches related to BLS support in grub2-mkconfig, as they are not
  relevant to the current BLS integration and cause issues in older KIWI
  versions, which actively force it to be enabled by default (bsc#1233196)
  * 0002-Add-BLS-support-to-grub-mkconfig.patch
  * 0003-Add-grub2-switch-to-blscfg.patch
  * 0007-grub-switch-to-blscfg-adapt-to-openSUSE.patch
  * 0008-blscfg-reading-bls-fragments-if-boot-present.patch
  * 0009-10_linux-Some-refinement-for-BLS.patch
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1733486400">- Fix missing requires in SLE package (bsc#1234264) (bsc#1234272)</changelog>
  <changelog author="mchang@suse.com" date="1733659200">- Update PowerPC SBAT patches to upstream (bsc#1233730)
  * 0007-grub-mkimage-Create-new-ELF-note-for-SBAT.patch
  * 0008-grub-mkimage-Add-SBAT-metadata-into-ELF-note-for-Pow.patch
- Replaced patches
  * 0007-mkimage-create-new-ELF-Note-for-SBAT.patch
  * 0008-mkimage-adding-sbat-data-into-sbat-ELF-Note-on-power.patch</changelog>
  <changelog author="mchang@suse.com" date="1739448000">- Fix out of memory issue on PowerPC by increasing RMA size (bsc#1236744)
  * 0001-powerpc-increase-MIN-RMA-size-for-CAS-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1739534400">- Security fixes for 2024
  * 0001-misc-Implement-grub_strlcpy.patch
- Fix CVE-2024-45781 (bsc#1233617)
  * 0002-fs-ufs-Fix-a-heap-OOB-write.patch
- Fix CVE-2024-56737 (bsc#1234958)
- Fix CVE-2024-45782 (bsc#1233615)
  * 0003-fs-hfs-Fix-stack-OOB-write-with-grub_strcpy.patch
- Fix CVE-2024-45780 (bsc#1233614)
  * 0004-fs-tar-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2024-45783 (bsc#1233616)
  * 0005-fs-hfsplus-Set-a-grub_errno-if-mount-fails.patch
  * 0006-kern-file-Ensure-file-data-is-set.patch
  * 0007-kern-file-Implement-filesystem-reference-counting.patch
- Fix CVE-2025-0624 (bsc#1236316)
  * 0008-net-Fix-OOB-write-in-grub_net_search_config_file.patch
- Fix CVE-2024-45774 (bsc#1233609)
  * 0009-video-readers-jpeg-Do-not-permit-duplicate-SOF0-mark.patch
- Fix CVE-2024-45775 (bsc#1233610)
  * 0010-commands-extcmd-Missing-check-for-failed-allocation.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0011-commands-pgp-Unregister-the-check_signatures-hooks-o.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0012-normal-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0013-gettext-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2024-45776 (bsc#1233612)
  * 0014-gettext-Integer-overflow-leads-to-heap-OOB-write-or-.patch
- Fix CVE-2024-45777 (bsc#1233613)
  * 0015-gettext-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2025-0690 (bsc#1237012)
  * 0016-commands-read-Fix-an-integer-overflow-when-supplying.patch
- Fix CVE-2025-1118 (bsc#1237013)
  * 0017-commands-minicmd-Block-the-dump-command-in-lockdown-.patch
- Fix CVE-2024-45778 (bsc#1233606)
- Fix CVE-2024-45779 (bsc#1233608)
  * 0018-fs-bfs-Disable-under-lockdown.patch
- Fix CVE-2025-0677 (bsc#1237002)
- Fix CVE-2025-0684 (bsc#1237008)
- Fix CVE-2025-0685 (bsc#1237009)
- Fix CVE-2025-0686 (bsc#1237010)
- Fix CVE-2025-0689 (bsc#1237011)
  * 0019-fs-Disable-many-filesystems-under-lockdown.patch
- Fix CVE-2025-1125 (bsc#1237014)
- Fix CVE-2025-0678 (bsc#1237006)
  * 0020-fs-Prevent-overflows-when-allocating-memory-for-arra.patch
- Updated to upstream version
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch
- Bump upstream SBAT generation to 5</changelog>
  <changelog author="mchang@suse.com" date="1741003200">- Cherry-pick upstream XFS fixes
  * 0001-fs-xfs-Add-new-superblock-features-added-in-Linux-6..patch
  * 0002-fs-xfs-Fix-grub_xfs_iterate_dir-return-value-in-case.patch
- Fix "attempt to read of write outside of partition" error message (bsc#1237844)
  * 0003-fs-xfs-fix-large-extent-counters-incompat-feature-su.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348800">- Fix zfs.mo not found message when booting on legacy BIOS (bsc#1237865)
  * 0001-autofs-Ignore-zfs-not-found.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348801">- Pass through PAES cipher as AES on s390x-emu (jsc#PED-10950)
  * 0001-s390x-emu-Pass-through-PAES-cipher-as-AES.patch</changelog>
  <changelog author="mchang@suse.com" date="1741694400">- Update patches for Power guest secure boot with key management (jsc#PED-3520)
  (jsc#PED-9892)
  * 0001-ieee1275-adding-failure-check-condition-on-ibm-secur.patch
  * 0002-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0003-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0004-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0005-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0006-powerpc_ieee1275-set-use_static_keys-flag.patch
  * 0007-appendedsig-Reads-the-default-DB-keys-from-ELF-Note.patch
  * 0008-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0009-appendedsig-documentation.patch
- Remove patches
  * 0001-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0002-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0003-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0004-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0005-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0006-appendedsig-documentation.patch</changelog>
  <changelog author="mchang@suse.com" date="1742212800">- Refresh PPC NVMEoF ofpath related patches to newer revision
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
- Patch refreshed
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch
- Patch obsoleted
  * 0004-ofpath-controller-name-update.patch
  * 0001-squash-ieee1275-ofpath-enable-NVMeoF-logical-device-.patch
- Fix segmentation fault error in grub2-probe with target=hints_string
  (bsc#1235971) (bsc#1235958) (bsc#1239651)
  * 0001-ofpath-Add-error-check-in-NVMEoF-device-translation.patch</changelog>
  <changelog author="mchang@suse.com" date="1745409600">- Fix PPC CAS reboot failure work when initiated via submenu (bsc#1241132)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1746446400">- Fix CVE-2025-4382: TPM auto-decryption data exposure (bsc#1242971)
  * 0001-kern-rescue_reader-Block-the-rescue-mode-until-the-C.patch
  * 0002-commands-search-Introduce-the-cryptodisk-only-argume.patch
  * 0003-disk-diskfilter-Introduce-the-cryptocheck-command.patch
  * 0004-commands-search-Add-the-diskfilter-support.patch
  * 0005-docs-Document-available-crypto-disks-checks.patch
  * 0006-disk-cryptodisk-Add-the-erase-secrets-function.patch
  * 0007-disk-cryptodisk-Wipe-the-passphrase-from-memory.patch
  * 0008-cryptocheck-Add-quiet-option.patch
- patch rebased
  * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch
  * 0004-Key-revocation-on-out-of-bound-file-access.patch
- patch refrehed
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch</changelog>
  <changelog author="mchang@suse.com" date="1747742400">- Fix incorrect nvme disks and boot order in bootlist output (bsc#1237174)
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch</changelog>
  <changelog author="mchang@suse.com" date="1752667200">- Fix test -f and -s do not work properly over the network files served via
  tftp and http (bsc#1246157) (bsc#1246237)
  * 0001-test-Fix-f-test-on-files-over-network.patch
  * 0002-http-Return-HTTP-status-code-in-http_establish.patch
  * 0003-docs-Clarify-test-for-files-on-TFTP-and-HTTP.patch
  * 0004-tftp-Fix-hang-when-file-is-a-directory.patch</changelog>
  <changelog author="glin@suse.com" date="1754049600">- Fix CVE-2024-56738: side-channel attack due to not constant-time
  algorithm in grub_crypto_memcmp (bsc#1234959)
  * grub2-constant-time-grub_crypto_memcmp.patch</changelog>
  <changelog author="mchang@suse.com" date="1754308800">- Skip mount point in grub_find_device function (bsc#1246231)
  * 0001-getroot-Skip-mount-points-in-grub_find_device.patch</changelog>
</package>
<package pkgid="3a0828773902e1c8bdad60e9df15f7206b6e613d05d77950dc8c3d299cab510c" name="grub2-i386-pc" arch="noarch">
  <version epoch="0" ver="2.12" rel="150700.19.16.1"/>
  <changelog author="mchang@suse.com" date="1730894400">- Fix xen package contains debug_info files with the .module suffix by moving
  them to a separate xen-debug subpackage (bsc#1232573)</changelog>
  <changelog author="mchang@suse.com" date="1731067200">- Do not enable blscfg on s390-emu
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1731067201">- Fix previous change as the variable has to be set earlier
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1731499200">- Revert the patches related to BLS support in grub2-mkconfig, as they are not
  relevant to the current BLS integration and cause issues in older KIWI
  versions, which actively force it to be enabled by default (bsc#1233196)
  * 0002-Add-BLS-support-to-grub-mkconfig.patch
  * 0003-Add-grub2-switch-to-blscfg.patch
  * 0007-grub-switch-to-blscfg-adapt-to-openSUSE.patch
  * 0008-blscfg-reading-bls-fragments-if-boot-present.patch
  * 0009-10_linux-Some-refinement-for-BLS.patch
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1733486400">- Fix missing requires in SLE package (bsc#1234264) (bsc#1234272)</changelog>
  <changelog author="mchang@suse.com" date="1733659200">- Update PowerPC SBAT patches to upstream (bsc#1233730)
  * 0007-grub-mkimage-Create-new-ELF-note-for-SBAT.patch
  * 0008-grub-mkimage-Add-SBAT-metadata-into-ELF-note-for-Pow.patch
- Replaced patches
  * 0007-mkimage-create-new-ELF-Note-for-SBAT.patch
  * 0008-mkimage-adding-sbat-data-into-sbat-ELF-Note-on-power.patch</changelog>
  <changelog author="mchang@suse.com" date="1739448000">- Fix out of memory issue on PowerPC by increasing RMA size (bsc#1236744)
  * 0001-powerpc-increase-MIN-RMA-size-for-CAS-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1739534400">- Security fixes for 2024
  * 0001-misc-Implement-grub_strlcpy.patch
- Fix CVE-2024-45781 (bsc#1233617)
  * 0002-fs-ufs-Fix-a-heap-OOB-write.patch
- Fix CVE-2024-56737 (bsc#1234958)
- Fix CVE-2024-45782 (bsc#1233615)
  * 0003-fs-hfs-Fix-stack-OOB-write-with-grub_strcpy.patch
- Fix CVE-2024-45780 (bsc#1233614)
  * 0004-fs-tar-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2024-45783 (bsc#1233616)
  * 0005-fs-hfsplus-Set-a-grub_errno-if-mount-fails.patch
  * 0006-kern-file-Ensure-file-data-is-set.patch
  * 0007-kern-file-Implement-filesystem-reference-counting.patch
- Fix CVE-2025-0624 (bsc#1236316)
  * 0008-net-Fix-OOB-write-in-grub_net_search_config_file.patch
- Fix CVE-2024-45774 (bsc#1233609)
  * 0009-video-readers-jpeg-Do-not-permit-duplicate-SOF0-mark.patch
- Fix CVE-2024-45775 (bsc#1233610)
  * 0010-commands-extcmd-Missing-check-for-failed-allocation.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0011-commands-pgp-Unregister-the-check_signatures-hooks-o.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0012-normal-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0013-gettext-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2024-45776 (bsc#1233612)
  * 0014-gettext-Integer-overflow-leads-to-heap-OOB-write-or-.patch
- Fix CVE-2024-45777 (bsc#1233613)
  * 0015-gettext-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2025-0690 (bsc#1237012)
  * 0016-commands-read-Fix-an-integer-overflow-when-supplying.patch
- Fix CVE-2025-1118 (bsc#1237013)
  * 0017-commands-minicmd-Block-the-dump-command-in-lockdown-.patch
- Fix CVE-2024-45778 (bsc#1233606)
- Fix CVE-2024-45779 (bsc#1233608)
  * 0018-fs-bfs-Disable-under-lockdown.patch
- Fix CVE-2025-0677 (bsc#1237002)
- Fix CVE-2025-0684 (bsc#1237008)
- Fix CVE-2025-0685 (bsc#1237009)
- Fix CVE-2025-0686 (bsc#1237010)
- Fix CVE-2025-0689 (bsc#1237011)
  * 0019-fs-Disable-many-filesystems-under-lockdown.patch
- Fix CVE-2025-1125 (bsc#1237014)
- Fix CVE-2025-0678 (bsc#1237006)
  * 0020-fs-Prevent-overflows-when-allocating-memory-for-arra.patch
- Updated to upstream version
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch
- Bump upstream SBAT generation to 5</changelog>
  <changelog author="mchang@suse.com" date="1741003200">- Cherry-pick upstream XFS fixes
  * 0001-fs-xfs-Add-new-superblock-features-added-in-Linux-6..patch
  * 0002-fs-xfs-Fix-grub_xfs_iterate_dir-return-value-in-case.patch
- Fix "attempt to read of write outside of partition" error message (bsc#1237844)
  * 0003-fs-xfs-fix-large-extent-counters-incompat-feature-su.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348800">- Fix zfs.mo not found message when booting on legacy BIOS (bsc#1237865)
  * 0001-autofs-Ignore-zfs-not-found.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348801">- Pass through PAES cipher as AES on s390x-emu (jsc#PED-10950)
  * 0001-s390x-emu-Pass-through-PAES-cipher-as-AES.patch</changelog>
  <changelog author="mchang@suse.com" date="1741694400">- Update patches for Power guest secure boot with key management (jsc#PED-3520)
  (jsc#PED-9892)
  * 0001-ieee1275-adding-failure-check-condition-on-ibm-secur.patch
  * 0002-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0003-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0004-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0005-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0006-powerpc_ieee1275-set-use_static_keys-flag.patch
  * 0007-appendedsig-Reads-the-default-DB-keys-from-ELF-Note.patch
  * 0008-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0009-appendedsig-documentation.patch
- Remove patches
  * 0001-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0002-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0003-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0004-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0005-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0006-appendedsig-documentation.patch</changelog>
  <changelog author="mchang@suse.com" date="1742212800">- Refresh PPC NVMEoF ofpath related patches to newer revision
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
- Patch refreshed
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch
- Patch obsoleted
  * 0004-ofpath-controller-name-update.patch
  * 0001-squash-ieee1275-ofpath-enable-NVMeoF-logical-device-.patch
- Fix segmentation fault error in grub2-probe with target=hints_string
  (bsc#1235971) (bsc#1235958) (bsc#1239651)
  * 0001-ofpath-Add-error-check-in-NVMEoF-device-translation.patch</changelog>
  <changelog author="mchang@suse.com" date="1745409600">- Fix PPC CAS reboot failure work when initiated via submenu (bsc#1241132)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1746446400">- Fix CVE-2025-4382: TPM auto-decryption data exposure (bsc#1242971)
  * 0001-kern-rescue_reader-Block-the-rescue-mode-until-the-C.patch
  * 0002-commands-search-Introduce-the-cryptodisk-only-argume.patch
  * 0003-disk-diskfilter-Introduce-the-cryptocheck-command.patch
  * 0004-commands-search-Add-the-diskfilter-support.patch
  * 0005-docs-Document-available-crypto-disks-checks.patch
  * 0006-disk-cryptodisk-Add-the-erase-secrets-function.patch
  * 0007-disk-cryptodisk-Wipe-the-passphrase-from-memory.patch
  * 0008-cryptocheck-Add-quiet-option.patch
- patch rebased
  * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch
  * 0004-Key-revocation-on-out-of-bound-file-access.patch
- patch refrehed
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch</changelog>
  <changelog author="mchang@suse.com" date="1747742400">- Fix incorrect nvme disks and boot order in bootlist output (bsc#1237174)
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch</changelog>
  <changelog author="mchang@suse.com" date="1752667200">- Fix test -f and -s do not work properly over the network files served via
  tftp and http (bsc#1246157) (bsc#1246237)
  * 0001-test-Fix-f-test-on-files-over-network.patch
  * 0002-http-Return-HTTP-status-code-in-http_establish.patch
  * 0003-docs-Clarify-test-for-files-on-TFTP-and-HTTP.patch
  * 0004-tftp-Fix-hang-when-file-is-a-directory.patch</changelog>
  <changelog author="glin@suse.com" date="1754049600">- Fix CVE-2024-56738: side-channel attack due to not constant-time
  algorithm in grub_crypto_memcmp (bsc#1234959)
  * grub2-constant-time-grub_crypto_memcmp.patch</changelog>
  <changelog author="mchang@suse.com" date="1754308800">- Skip mount point in grub_find_device function (bsc#1246231)
  * 0001-getroot-Skip-mount-points-in-grub_find_device.patch</changelog>
  <changelog author="mchang@suse.com" date="1758542400">- Fix boot hangs in setting up serial console when ACPI SPCR table is present
  and redirection is disabled (bsc#1249088)
  * 0001-term-ns8250-spcr-Return-if-redirection-is-disabled.patch</changelog>
</package>
<package pkgid="ac76972f1700881d79f22c510661dadf32d8746f59b329fc51bc4a73793e70c0" name="grub2-i386-pc" arch="noarch">
  <version epoch="0" ver="2.12" rel="150700.19.19.1"/>
  <changelog author="mchang@suse.com" date="1731067200">- Fix previous change as the variable has to be set earlier
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1731499200">- Revert the patches related to BLS support in grub2-mkconfig, as they are not
  relevant to the current BLS integration and cause issues in older KIWI
  versions, which actively force it to be enabled by default (bsc#1233196)
  * 0002-Add-BLS-support-to-grub-mkconfig.patch
  * 0003-Add-grub2-switch-to-blscfg.patch
  * 0007-grub-switch-to-blscfg-adapt-to-openSUSE.patch
  * 0008-blscfg-reading-bls-fragments-if-boot-present.patch
  * 0009-10_linux-Some-refinement-for-BLS.patch
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1733486400">- Fix missing requires in SLE package (bsc#1234264) (bsc#1234272)</changelog>
  <changelog author="mchang@suse.com" date="1733659200">- Update PowerPC SBAT patches to upstream (bsc#1233730)
  * 0007-grub-mkimage-Create-new-ELF-note-for-SBAT.patch
  * 0008-grub-mkimage-Add-SBAT-metadata-into-ELF-note-for-Pow.patch
- Replaced patches
  * 0007-mkimage-create-new-ELF-Note-for-SBAT.patch
  * 0008-mkimage-adding-sbat-data-into-sbat-ELF-Note-on-power.patch</changelog>
  <changelog author="mchang@suse.com" date="1739448000">- Fix out of memory issue on PowerPC by increasing RMA size (bsc#1236744)
  * 0001-powerpc-increase-MIN-RMA-size-for-CAS-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1739534400">- Security fixes for 2024
  * 0001-misc-Implement-grub_strlcpy.patch
- Fix CVE-2024-45781 (bsc#1233617)
  * 0002-fs-ufs-Fix-a-heap-OOB-write.patch
- Fix CVE-2024-56737 (bsc#1234958)
- Fix CVE-2024-45782 (bsc#1233615)
  * 0003-fs-hfs-Fix-stack-OOB-write-with-grub_strcpy.patch
- Fix CVE-2024-45780 (bsc#1233614)
  * 0004-fs-tar-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2024-45783 (bsc#1233616)
  * 0005-fs-hfsplus-Set-a-grub_errno-if-mount-fails.patch
  * 0006-kern-file-Ensure-file-data-is-set.patch
  * 0007-kern-file-Implement-filesystem-reference-counting.patch
- Fix CVE-2025-0624 (bsc#1236316)
  * 0008-net-Fix-OOB-write-in-grub_net_search_config_file.patch
- Fix CVE-2024-45774 (bsc#1233609)
  * 0009-video-readers-jpeg-Do-not-permit-duplicate-SOF0-mark.patch
- Fix CVE-2024-45775 (bsc#1233610)
  * 0010-commands-extcmd-Missing-check-for-failed-allocation.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0011-commands-pgp-Unregister-the-check_signatures-hooks-o.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0012-normal-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0013-gettext-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2024-45776 (bsc#1233612)
  * 0014-gettext-Integer-overflow-leads-to-heap-OOB-write-or-.patch
- Fix CVE-2024-45777 (bsc#1233613)
  * 0015-gettext-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2025-0690 (bsc#1237012)
  * 0016-commands-read-Fix-an-integer-overflow-when-supplying.patch
- Fix CVE-2025-1118 (bsc#1237013)
  * 0017-commands-minicmd-Block-the-dump-command-in-lockdown-.patch
- Fix CVE-2024-45778 (bsc#1233606)
- Fix CVE-2024-45779 (bsc#1233608)
  * 0018-fs-bfs-Disable-under-lockdown.patch
- Fix CVE-2025-0677 (bsc#1237002)
- Fix CVE-2025-0684 (bsc#1237008)
- Fix CVE-2025-0685 (bsc#1237009)
- Fix CVE-2025-0686 (bsc#1237010)
- Fix CVE-2025-0689 (bsc#1237011)
  * 0019-fs-Disable-many-filesystems-under-lockdown.patch
- Fix CVE-2025-1125 (bsc#1237014)
- Fix CVE-2025-0678 (bsc#1237006)
  * 0020-fs-Prevent-overflows-when-allocating-memory-for-arra.patch
- Updated to upstream version
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch
- Bump upstream SBAT generation to 5</changelog>
  <changelog author="mchang@suse.com" date="1741003200">- Cherry-pick upstream XFS fixes
  * 0001-fs-xfs-Add-new-superblock-features-added-in-Linux-6..patch
  * 0002-fs-xfs-Fix-grub_xfs_iterate_dir-return-value-in-case.patch
- Fix "attempt to read of write outside of partition" error message (bsc#1237844)
  * 0003-fs-xfs-fix-large-extent-counters-incompat-feature-su.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348800">- Fix zfs.mo not found message when booting on legacy BIOS (bsc#1237865)
  * 0001-autofs-Ignore-zfs-not-found.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348801">- Pass through PAES cipher as AES on s390x-emu (jsc#PED-10950)
  * 0001-s390x-emu-Pass-through-PAES-cipher-as-AES.patch</changelog>
  <changelog author="mchang@suse.com" date="1741694400">- Update patches for Power guest secure boot with key management (jsc#PED-3520)
  (jsc#PED-9892)
  * 0001-ieee1275-adding-failure-check-condition-on-ibm-secur.patch
  * 0002-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0003-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0004-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0005-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0006-powerpc_ieee1275-set-use_static_keys-flag.patch
  * 0007-appendedsig-Reads-the-default-DB-keys-from-ELF-Note.patch
  * 0008-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0009-appendedsig-documentation.patch
- Remove patches
  * 0001-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0002-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0003-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0004-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0005-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0006-appendedsig-documentation.patch</changelog>
  <changelog author="mchang@suse.com" date="1742212800">- Refresh PPC NVMEoF ofpath related patches to newer revision
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
- Patch refreshed
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch
- Patch obsoleted
  * 0004-ofpath-controller-name-update.patch
  * 0001-squash-ieee1275-ofpath-enable-NVMeoF-logical-device-.patch
- Fix segmentation fault error in grub2-probe with target=hints_string
  (bsc#1235971) (bsc#1235958) (bsc#1239651)
  * 0001-ofpath-Add-error-check-in-NVMEoF-device-translation.patch</changelog>
  <changelog author="mchang@suse.com" date="1745409600">- Fix PPC CAS reboot failure work when initiated via submenu (bsc#1241132)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1746446400">- Fix CVE-2025-4382: TPM auto-decryption data exposure (bsc#1242971)
  * 0001-kern-rescue_reader-Block-the-rescue-mode-until-the-C.patch
  * 0002-commands-search-Introduce-the-cryptodisk-only-argume.patch
  * 0003-disk-diskfilter-Introduce-the-cryptocheck-command.patch
  * 0004-commands-search-Add-the-diskfilter-support.patch
  * 0005-docs-Document-available-crypto-disks-checks.patch
  * 0006-disk-cryptodisk-Add-the-erase-secrets-function.patch
  * 0007-disk-cryptodisk-Wipe-the-passphrase-from-memory.patch
  * 0008-cryptocheck-Add-quiet-option.patch
- patch rebased
  * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch
  * 0004-Key-revocation-on-out-of-bound-file-access.patch
- patch refrehed
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch</changelog>
  <changelog author="mchang@suse.com" date="1747742400">- Fix incorrect nvme disks and boot order in bootlist output (bsc#1237174)
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch</changelog>
  <changelog author="mchang@suse.com" date="1752667200">- Fix test -f and -s do not work properly over the network files served via
  tftp and http (bsc#1246157) (bsc#1246237)
  * 0001-test-Fix-f-test-on-files-over-network.patch
  * 0002-http-Return-HTTP-status-code-in-http_establish.patch
  * 0003-docs-Clarify-test-for-files-on-TFTP-and-HTTP.patch
  * 0004-tftp-Fix-hang-when-file-is-a-directory.patch</changelog>
  <changelog author="glin@suse.com" date="1754049600">- Fix CVE-2024-56738: side-channel attack due to not constant-time
  algorithm in grub_crypto_memcmp (bsc#1234959)
  * grub2-constant-time-grub_crypto_memcmp.patch</changelog>
  <changelog author="mchang@suse.com" date="1754308800">- Skip mount point in grub_find_device function (bsc#1246231)
  * 0001-getroot-Skip-mount-points-in-grub_find_device.patch</changelog>
  <changelog author="mchang@suse.com" date="1758542400">- Fix boot hangs in setting up serial console when ACPI SPCR table is present
  and redirection is disabled (bsc#1249088)
  * 0001-term-ns8250-spcr-Return-if-redirection-is-disabled.patch</changelog>
  <changelog author="mchang@suse.com" date="1761048000">- Fix timeout when loading initrd via http after PPC CAS reboot (bsc#1245953)
  * 0001-tcp-Fix-TCP-port-number-reused-on-reboot.patch</changelog>
  <changelog author="mchang@suse.com" date="1762948800">- Fix CVE-2025-54771 (bsc#1252931)
  * 0001-kern-file-Call-grub_dl_unref-after-fs-fs_close.patch
- Fix CVE-2025-54770 (bsc#1252930)
  * 0002-net-net-Unregister-net_set_vlan-command-on-unload.patch
- Fix CVE-2025-61662 (bsc#1252933)
  * 0003-gettext-gettext-Unregister-gettext-command-on-module.patch
- Fix CVE-2025-61663 (bsc#1252934)
- Fix CVE-2025-61664 (bsc#1252935)
  * 0004-normal-main-Unregister-commands-on-module-unload.patch
  * 0005-tests-lib-functional_test-Unregister-commands-on-mod.patch
- Fix CVE-2025-61661 (bsc#1252932)
  * 0006-commands-usbtest-Use-correct-string-length-field.patch
  * 0007-commands-usbtest-Ensure-string-length-is-sufficient-.patch
- Bump upstream SBAT generation to 6</changelog>
</package>
<package pkgid="2ad08bf72e96bf6de4191c36f36b7faa634389d31c712681462d836723063527" name="grub2-i386-pc" arch="noarch">
  <version epoch="0" ver="2.12" rel="150700.19.26.1"/>
  <changelog author="mchang@suse.com" date="1733659200">- Update PowerPC SBAT patches to upstream (bsc#1233730)
  * 0007-grub-mkimage-Create-new-ELF-note-for-SBAT.patch
  * 0008-grub-mkimage-Add-SBAT-metadata-into-ELF-note-for-Pow.patch
- Replaced patches
  * 0007-mkimage-create-new-ELF-Note-for-SBAT.patch
  * 0008-mkimage-adding-sbat-data-into-sbat-ELF-Note-on-power.patch</changelog>
  <changelog author="mchang@suse.com" date="1739448000">- Fix out of memory issue on PowerPC by increasing RMA size (bsc#1236744)
  * 0001-powerpc-increase-MIN-RMA-size-for-CAS-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1739534400">- Security fixes for 2024
  * 0001-misc-Implement-grub_strlcpy.patch
- Fix CVE-2024-45781 (bsc#1233617)
  * 0002-fs-ufs-Fix-a-heap-OOB-write.patch
- Fix CVE-2024-56737 (bsc#1234958)
- Fix CVE-2024-45782 (bsc#1233615)
  * 0003-fs-hfs-Fix-stack-OOB-write-with-grub_strcpy.patch
- Fix CVE-2024-45780 (bsc#1233614)
  * 0004-fs-tar-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2024-45783 (bsc#1233616)
  * 0005-fs-hfsplus-Set-a-grub_errno-if-mount-fails.patch
  * 0006-kern-file-Ensure-file-data-is-set.patch
  * 0007-kern-file-Implement-filesystem-reference-counting.patch
- Fix CVE-2025-0624 (bsc#1236316)
  * 0008-net-Fix-OOB-write-in-grub_net_search_config_file.patch
- Fix CVE-2024-45774 (bsc#1233609)
  * 0009-video-readers-jpeg-Do-not-permit-duplicate-SOF0-mark.patch
- Fix CVE-2024-45775 (bsc#1233610)
  * 0010-commands-extcmd-Missing-check-for-failed-allocation.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0011-commands-pgp-Unregister-the-check_signatures-hooks-o.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0012-normal-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0013-gettext-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2024-45776 (bsc#1233612)
  * 0014-gettext-Integer-overflow-leads-to-heap-OOB-write-or-.patch
- Fix CVE-2024-45777 (bsc#1233613)
  * 0015-gettext-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2025-0690 (bsc#1237012)
  * 0016-commands-read-Fix-an-integer-overflow-when-supplying.patch
- Fix CVE-2025-1118 (bsc#1237013)
  * 0017-commands-minicmd-Block-the-dump-command-in-lockdown-.patch
- Fix CVE-2024-45778 (bsc#1233606)
- Fix CVE-2024-45779 (bsc#1233608)
  * 0018-fs-bfs-Disable-under-lockdown.patch
- Fix CVE-2025-0677 (bsc#1237002)
- Fix CVE-2025-0684 (bsc#1237008)
- Fix CVE-2025-0685 (bsc#1237009)
- Fix CVE-2025-0686 (bsc#1237010)
- Fix CVE-2025-0689 (bsc#1237011)
  * 0019-fs-Disable-many-filesystems-under-lockdown.patch
- Fix CVE-2025-1125 (bsc#1237014)
- Fix CVE-2025-0678 (bsc#1237006)
  * 0020-fs-Prevent-overflows-when-allocating-memory-for-arra.patch
- Updated to upstream version
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch
- Bump upstream SBAT generation to 5</changelog>
  <changelog author="mchang@suse.com" date="1741003200">- Cherry-pick upstream XFS fixes
  * 0001-fs-xfs-Add-new-superblock-features-added-in-Linux-6..patch
  * 0002-fs-xfs-Fix-grub_xfs_iterate_dir-return-value-in-case.patch
- Fix "attempt to read of write outside of partition" error message (bsc#1237844)
  * 0003-fs-xfs-fix-large-extent-counters-incompat-feature-su.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348800">- Fix zfs.mo not found message when booting on legacy BIOS (bsc#1237865)
  * 0001-autofs-Ignore-zfs-not-found.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348801">- Pass through PAES cipher as AES on s390x-emu (jsc#PED-10950)
  * 0001-s390x-emu-Pass-through-PAES-cipher-as-AES.patch</changelog>
  <changelog author="mchang@suse.com" date="1741694400">- Update patches for Power guest secure boot with key management (jsc#PED-3520)
  (jsc#PED-9892)
  * 0001-ieee1275-adding-failure-check-condition-on-ibm-secur.patch
  * 0002-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0003-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0004-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0005-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0006-powerpc_ieee1275-set-use_static_keys-flag.patch
  * 0007-appendedsig-Reads-the-default-DB-keys-from-ELF-Note.patch
  * 0008-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0009-appendedsig-documentation.patch
- Remove patches
  * 0001-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0002-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0003-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0004-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0005-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0006-appendedsig-documentation.patch</changelog>
  <changelog author="mchang@suse.com" date="1742212800">- Refresh PPC NVMEoF ofpath related patches to newer revision
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
- Patch refreshed
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch
- Patch obsoleted
  * 0004-ofpath-controller-name-update.patch
  * 0001-squash-ieee1275-ofpath-enable-NVMeoF-logical-device-.patch
- Fix segmentation fault error in grub2-probe with target=hints_string
  (bsc#1235971) (bsc#1235958) (bsc#1239651)
  * 0001-ofpath-Add-error-check-in-NVMEoF-device-translation.patch</changelog>
  <changelog author="mchang@suse.com" date="1745409600">- Fix PPC CAS reboot failure work when initiated via submenu (bsc#1241132)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1746446400">- Fix CVE-2025-4382: TPM auto-decryption data exposure (bsc#1242971)
  * 0001-kern-rescue_reader-Block-the-rescue-mode-until-the-C.patch
  * 0002-commands-search-Introduce-the-cryptodisk-only-argume.patch
  * 0003-disk-diskfilter-Introduce-the-cryptocheck-command.patch
  * 0004-commands-search-Add-the-diskfilter-support.patch
  * 0005-docs-Document-available-crypto-disks-checks.patch
  * 0006-disk-cryptodisk-Add-the-erase-secrets-function.patch
  * 0007-disk-cryptodisk-Wipe-the-passphrase-from-memory.patch
  * 0008-cryptocheck-Add-quiet-option.patch
- patch rebased
  * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch
  * 0004-Key-revocation-on-out-of-bound-file-access.patch
- patch refrehed
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch</changelog>
  <changelog author="mchang@suse.com" date="1747742400">- Fix incorrect nvme disks and boot order in bootlist output (bsc#1237174)
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch</changelog>
  <changelog author="mchang@suse.com" date="1752667200">- Fix test -f and -s do not work properly over the network files served via
  tftp and http (bsc#1246157) (bsc#1246237)
  * 0001-test-Fix-f-test-on-files-over-network.patch
  * 0002-http-Return-HTTP-status-code-in-http_establish.patch
  * 0003-docs-Clarify-test-for-files-on-TFTP-and-HTTP.patch
  * 0004-tftp-Fix-hang-when-file-is-a-directory.patch</changelog>
  <changelog author="glin@suse.com" date="1754049600">- Fix CVE-2024-56738: side-channel attack due to not constant-time
  algorithm in grub_crypto_memcmp (bsc#1234959)
  * grub2-constant-time-grub_crypto_memcmp.patch</changelog>
  <changelog author="mchang@suse.com" date="1754308800">- Skip mount point in grub_find_device function (bsc#1246231)
  * 0001-getroot-Skip-mount-points-in-grub_find_device.patch</changelog>
  <changelog author="mchang@suse.com" date="1758542400">- Fix boot hangs in setting up serial console when ACPI SPCR table is present
  and redirection is disabled (bsc#1249088)
  * 0001-term-ns8250-spcr-Return-if-redirection-is-disabled.patch</changelog>
  <changelog author="mchang@suse.com" date="1761048000">- Fix timeout when loading initrd via http after PPC CAS reboot (bsc#1245953)
  * 0001-tcp-Fix-TCP-port-number-reused-on-reboot.patch</changelog>
  <changelog author="mchang@suse.com" date="1762948800">- Fix CVE-2025-54771 (bsc#1252931)
  * 0001-kern-file-Call-grub_dl_unref-after-fs-fs_close.patch
- Fix CVE-2025-54770 (bsc#1252930)
  * 0002-net-net-Unregister-net_set_vlan-command-on-unload.patch
- Fix CVE-2025-61662 (bsc#1252933)
  * 0003-gettext-gettext-Unregister-gettext-command-on-module.patch
- Fix CVE-2025-61663 (bsc#1252934)
- Fix CVE-2025-61664 (bsc#1252935)
  * 0004-normal-main-Unregister-commands-on-module-unload.patch
  * 0005-tests-lib-functional_test-Unregister-commands-on-mod.patch
- Fix CVE-2025-61661 (bsc#1252932)
  * 0006-commands-usbtest-Use-correct-string-length-field.patch
  * 0007-commands-usbtest-Ensure-string-length-is-sufficient-.patch
- Bump upstream SBAT generation to 6</changelog>
  <changelog author="mchang@suse.com" date="1770638400">- Fix error "grub-core/script/lexer.c:352:out of memory" after PowerPC CAS
  Reboot (bsc#1254299)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1770811200">- Backport upstream's commit to prevent BIOS assert (bsc#1258022)
  * 0001-kern-efi-mm-Change-grub_efi_mm_add_regions-to-keep-t.patch</changelog>
  <changelog author="mchang@suse.com" date="1771934400">- Support dm multipath bootlist on PowerPC (bsc#1254415)
  * 0001-ieee1275-support-dm-multipath-bootlist.patch</changelog>
</package>
<package pkgid="be954a5ccc12fd4f4efbe259a94368d5429d601a6b6166effd2f038c4ef934d7" name="grub2-i386-pc" arch="noarch">
  <version epoch="0" ver="2.12" rel="150700.19.29.1"/>
  <changelog author="mchang@suse.com" date="1741003200">- Cherry-pick upstream XFS fixes
  * 0001-fs-xfs-Add-new-superblock-features-added-in-Linux-6..patch
  * 0002-fs-xfs-Fix-grub_xfs_iterate_dir-return-value-in-case.patch
- Fix "attempt to read of write outside of partition" error message (bsc#1237844)
  * 0003-fs-xfs-fix-large-extent-counters-incompat-feature-su.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348800">- Fix zfs.mo not found message when booting on legacy BIOS (bsc#1237865)
  * 0001-autofs-Ignore-zfs-not-found.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348801">- Pass through PAES cipher as AES on s390x-emu (jsc#PED-10950)
  * 0001-s390x-emu-Pass-through-PAES-cipher-as-AES.patch</changelog>
  <changelog author="mchang@suse.com" date="1741694400">- Update patches for Power guest secure boot with key management (jsc#PED-3520)
  (jsc#PED-9892)
  * 0001-ieee1275-adding-failure-check-condition-on-ibm-secur.patch
  * 0002-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0003-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0004-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0005-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0006-powerpc_ieee1275-set-use_static_keys-flag.patch
  * 0007-appendedsig-Reads-the-default-DB-keys-from-ELF-Note.patch
  * 0008-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0009-appendedsig-documentation.patch
- Remove patches
  * 0001-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0002-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0003-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0004-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0005-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0006-appendedsig-documentation.patch</changelog>
  <changelog author="mchang@suse.com" date="1742212800">- Refresh PPC NVMEoF ofpath related patches to newer revision
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
- Patch refreshed
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch
- Patch obsoleted
  * 0004-ofpath-controller-name-update.patch
  * 0001-squash-ieee1275-ofpath-enable-NVMeoF-logical-device-.patch
- Fix segmentation fault error in grub2-probe with target=hints_string
  (bsc#1235971) (bsc#1235958) (bsc#1239651)
  * 0001-ofpath-Add-error-check-in-NVMEoF-device-translation.patch</changelog>
  <changelog author="mchang@suse.com" date="1745409600">- Fix PPC CAS reboot failure work when initiated via submenu (bsc#1241132)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1746446400">- Fix CVE-2025-4382: TPM auto-decryption data exposure (bsc#1242971)
  * 0001-kern-rescue_reader-Block-the-rescue-mode-until-the-C.patch
  * 0002-commands-search-Introduce-the-cryptodisk-only-argume.patch
  * 0003-disk-diskfilter-Introduce-the-cryptocheck-command.patch
  * 0004-commands-search-Add-the-diskfilter-support.patch
  * 0005-docs-Document-available-crypto-disks-checks.patch
  * 0006-disk-cryptodisk-Add-the-erase-secrets-function.patch
  * 0007-disk-cryptodisk-Wipe-the-passphrase-from-memory.patch
  * 0008-cryptocheck-Add-quiet-option.patch
- patch rebased
  * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch
  * 0004-Key-revocation-on-out-of-bound-file-access.patch
- patch refrehed
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch</changelog>
  <changelog author="mchang@suse.com" date="1747742400">- Fix incorrect nvme disks and boot order in bootlist output (bsc#1237174)
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch</changelog>
  <changelog author="mchang@suse.com" date="1752667200">- Fix test -f and -s do not work properly over the network files served via
  tftp and http (bsc#1246157) (bsc#1246237)
  * 0001-test-Fix-f-test-on-files-over-network.patch
  * 0002-http-Return-HTTP-status-code-in-http_establish.patch
  * 0003-docs-Clarify-test-for-files-on-TFTP-and-HTTP.patch
  * 0004-tftp-Fix-hang-when-file-is-a-directory.patch</changelog>
  <changelog author="glin@suse.com" date="1754049600">- Fix CVE-2024-56738: side-channel attack due to not constant-time
  algorithm in grub_crypto_memcmp (bsc#1234959)
  * grub2-constant-time-grub_crypto_memcmp.patch</changelog>
  <changelog author="mchang@suse.com" date="1754308800">- Skip mount point in grub_find_device function (bsc#1246231)
  * 0001-getroot-Skip-mount-points-in-grub_find_device.patch</changelog>
  <changelog author="mchang@suse.com" date="1758542400">- Fix boot hangs in setting up serial console when ACPI SPCR table is present
  and redirection is disabled (bsc#1249088)
  * 0001-term-ns8250-spcr-Return-if-redirection-is-disabled.patch</changelog>
  <changelog author="mchang@suse.com" date="1761048000">- Fix timeout when loading initrd via http after PPC CAS reboot (bsc#1245953)
  * 0001-tcp-Fix-TCP-port-number-reused-on-reboot.patch</changelog>
  <changelog author="mchang@suse.com" date="1762948800">- Fix CVE-2025-54771 (bsc#1252931)
  * 0001-kern-file-Call-grub_dl_unref-after-fs-fs_close.patch
- Fix CVE-2025-54770 (bsc#1252930)
  * 0002-net-net-Unregister-net_set_vlan-command-on-unload.patch
- Fix CVE-2025-61662 (bsc#1252933)
  * 0003-gettext-gettext-Unregister-gettext-command-on-module.patch
- Fix CVE-2025-61663 (bsc#1252934)
- Fix CVE-2025-61664 (bsc#1252935)
  * 0004-normal-main-Unregister-commands-on-module-unload.patch
  * 0005-tests-lib-functional_test-Unregister-commands-on-mod.patch
- Fix CVE-2025-61661 (bsc#1252932)
  * 0006-commands-usbtest-Use-correct-string-length-field.patch
  * 0007-commands-usbtest-Ensure-string-length-is-sufficient-.patch
- Bump upstream SBAT generation to 6</changelog>
  <changelog author="mchang@suse.com" date="1770638400">- Fix error "grub-core/script/lexer.c:352:out of memory" after PowerPC CAS
  Reboot (bsc#1254299)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1770811200">- Backport upstream's commit to prevent BIOS assert (bsc#1258022)
  * 0001-kern-efi-mm-Change-grub_efi_mm_add_regions-to-keep-t.patch</changelog>
  <changelog author="mchang@suse.com" date="1771934400">- Support dm multipath bootlist on PowerPC (bsc#1254415)
  * 0001-ieee1275-support-dm-multipath-bootlist.patch</changelog>
  <changelog author="mchang@suse.com" date="1775563200">- Fix double free in xen booting if root filesystem is Btrfs (bsc#1259543)
  * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  * grub2-btrfs-09-get-default-subvolume.patch</changelog>
  <changelog author="mchang@suse.com" date="1775736000">- Fix PowerPC network boot prefix to correctly locate grub.cfg (bsc#1249385)
  * 0001-ieee1275-Use-net-config-for-boot-location-instead-of.patch</changelog>
  <changelog author="mchang@suse.com" date="1776081600">- Fix missing install device check in grub2-install on PowerPC which could lead
  to bootlist corruption (bsc#1221126)
  * 0001-Mandatory-install-device-check-for-PowerPC.patch</changelog>
</package>
<package pkgid="968cc9a07f3000059c4338d4a8dcb3383b0a3024db2ab94ee195745229782f83" name="grub2-i386-pc" arch="noarch">
  <version epoch="0" ver="2.12" rel="150700.19.3.1"/>
  <changelog author="mchang@suse.com" date="1729684800">- Fix error: /boot/grub2/x86_64-efi/bli.mod not found (bsc#1231591)</changelog>
  <changelog author="mchang@suse.com" date="1730289600">- Enable support of Radix, Xive and Radix_gtse on Power (jsc#PED-9881)
  * 0001-kern-ieee1275-init-Add-IEEE-1275-Radix-support-for-K.patch</changelog>
  <changelog author="mchang@suse.com" date="1730289601">- Fix CVE-2024-49504 (bsc#1229163) (bsc#1229164)
- Restrict CLI access if the encrypted root device is automatically unlocked by
  the TPM. LUKS password authentication is required for access to be granted
  * 0001-cli_lock-Add-build-option-to-block-command-line-inte.patch
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch
- Obsolete, as CLI access is now locked and granted access no longer requires
  the previous restrictions
  * 0002-Restrict-file-access-on-cryptodisk-print.patch
  * 0003-Restrict-ls-and-auto-file-completion-on-cryptodisk-p.patch
- Rediff
  * 0004-Key-revocation-on-out-of-bound-file-access.patch</changelog>
  <changelog author="mchang@suse.com" date="1730462400">- Fix grub.cfg is loaded from an unexpected fallback directory instead of the
  root directory during PXE boot when grub is loaded from the tftp root
  directory (bsc#1232391)
  * 0001-kern-main-Fix-cmdpath-in-root-directory.patch
  * grub2.spec: Refine PPC grub.elf early config to derive root from cmdpath
    directly, avoiding the unneeded search</changelog>
  <changelog author="mchang@suse.com" date="1730894400">- Fix xen package contains debug_info files with the .module suffix by moving
  them to a separate xen-debug subpackage (bsc#1232573)</changelog>
  <changelog author="mchang@suse.com" date="1731067200">- Do not enable blscfg on s390-emu
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1731067201">- Fix previous change as the variable has to be set earlier
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1731499200">- Revert the patches related to BLS support in grub2-mkconfig, as they are not
  relevant to the current BLS integration and cause issues in older KIWI
  versions, which actively force it to be enabled by default (bsc#1233196)
  * 0002-Add-BLS-support-to-grub-mkconfig.patch
  * 0003-Add-grub2-switch-to-blscfg.patch
  * 0007-grub-switch-to-blscfg-adapt-to-openSUSE.patch
  * 0008-blscfg-reading-bls-fragments-if-boot-present.patch
  * 0009-10_linux-Some-refinement-for-BLS.patch
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1733486400">- Fix missing requires in SLE package (bsc#1234264) (bsc#1234272)</changelog>
  <changelog author="mchang@suse.com" date="1733659200">- Update PowerPC SBAT patches to upstream (bsc#1233730)
  * 0007-grub-mkimage-Create-new-ELF-note-for-SBAT.patch
  * 0008-grub-mkimage-Add-SBAT-metadata-into-ELF-note-for-Pow.patch
- Replaced patches
  * 0007-mkimage-create-new-ELF-Note-for-SBAT.patch
  * 0008-mkimage-adding-sbat-data-into-sbat-ELF-Note-on-power.patch</changelog>
  <changelog author="mchang@suse.com" date="1739448000">- Fix out of memory issue on PowerPC by increasing RMA size (bsc#1236744)
  * 0001-powerpc-increase-MIN-RMA-size-for-CAS-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1739534400">- Security fixes for 2024
  * 0001-misc-Implement-grub_strlcpy.patch
- Fix CVE-2024-45781 (bsc#1233617)
  * 0002-fs-ufs-Fix-a-heap-OOB-write.patch
- Fix CVE-2024-56737 (bsc#1234958)
- Fix CVE-2024-45782 (bsc#1233615)
  * 0003-fs-hfs-Fix-stack-OOB-write-with-grub_strcpy.patch
- Fix CVE-2024-45780 (bsc#1233614)
  * 0004-fs-tar-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2024-45783 (bsc#1233616)
  * 0005-fs-hfsplus-Set-a-grub_errno-if-mount-fails.patch
  * 0006-kern-file-Ensure-file-data-is-set.patch
  * 0007-kern-file-Implement-filesystem-reference-counting.patch
- Fix CVE-2025-0624 (bsc#1236316)
  * 0008-net-Fix-OOB-write-in-grub_net_search_config_file.patch
- Fix CVE-2024-45774 (bsc#1233609)
  * 0009-video-readers-jpeg-Do-not-permit-duplicate-SOF0-mark.patch
- Fix CVE-2024-45775 (bsc#1233610)
  * 0010-commands-extcmd-Missing-check-for-failed-allocation.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0011-commands-pgp-Unregister-the-check_signatures-hooks-o.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0012-normal-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0013-gettext-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2024-45776 (bsc#1233612)
  * 0014-gettext-Integer-overflow-leads-to-heap-OOB-write-or-.patch
- Fix CVE-2024-45777 (bsc#1233613)
  * 0015-gettext-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2025-0690 (bsc#1237012)
  * 0016-commands-read-Fix-an-integer-overflow-when-supplying.patch
- Fix CVE-2025-1118 (bsc#1237013)
  * 0017-commands-minicmd-Block-the-dump-command-in-lockdown-.patch
- Fix CVE-2024-45778 (bsc#1233606)
- Fix CVE-2024-45779 (bsc#1233608)
  * 0018-fs-bfs-Disable-under-lockdown.patch
- Fix CVE-2025-0677 (bsc#1237002)
- Fix CVE-2025-0684 (bsc#1237008)
- Fix CVE-2025-0685 (bsc#1237009)
- Fix CVE-2025-0686 (bsc#1237010)
- Fix CVE-2025-0689 (bsc#1237011)
  * 0019-fs-Disable-many-filesystems-under-lockdown.patch
- Fix CVE-2025-1125 (bsc#1237014)
- Fix CVE-2025-0678 (bsc#1237006)
  * 0020-fs-Prevent-overflows-when-allocating-memory-for-arra.patch
- Updated to upstream version
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch
- Bump upstream SBAT generation to 5</changelog>
  <changelog author="mchang@suse.com" date="1741003200">- Cherry-pick upstream XFS fixes
  * 0001-fs-xfs-Add-new-superblock-features-added-in-Linux-6..patch
  * 0002-fs-xfs-Fix-grub_xfs_iterate_dir-return-value-in-case.patch
- Fix "attempt to read of write outside of partition" error message (bsc#1237844)
  * 0003-fs-xfs-fix-large-extent-counters-incompat-feature-su.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348800">- Fix zfs.mo not found message when booting on legacy BIOS (bsc#1237865)
  * 0001-autofs-Ignore-zfs-not-found.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348801">- Pass through PAES cipher as AES on s390x-emu (jsc#PED-10950)
  * 0001-s390x-emu-Pass-through-PAES-cipher-as-AES.patch</changelog>
  <changelog author="mchang@suse.com" date="1741694400">- Update patches for Power guest secure boot with key management (jsc#PED-3520)
  (jsc#PED-9892)
  * 0001-ieee1275-adding-failure-check-condition-on-ibm-secur.patch
  * 0002-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0003-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0004-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0005-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0006-powerpc_ieee1275-set-use_static_keys-flag.patch
  * 0007-appendedsig-Reads-the-default-DB-keys-from-ELF-Note.patch
  * 0008-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0009-appendedsig-documentation.patch
- Remove patches
  * 0001-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0002-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0003-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0004-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0005-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0006-appendedsig-documentation.patch</changelog>
  <changelog author="mchang@suse.com" date="1742212800">- Refresh PPC NVMEoF ofpath related patches to newer revision
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
- Patch refreshed
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch
- Patch obsoleted
  * 0004-ofpath-controller-name-update.patch
  * 0001-squash-ieee1275-ofpath-enable-NVMeoF-logical-device-.patch
- Fix segmentation fault error in grub2-probe with target=hints_string
  (bsc#1235971) (bsc#1235958) (bsc#1239651)
  * 0001-ofpath-Add-error-check-in-NVMEoF-device-translation.patch</changelog>
  <changelog author="mchang@suse.com" date="1745409600">- Fix PPC CAS reboot failure work when initiated via submenu (bsc#1241132)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1746446400">- Fix CVE-2025-4382: TPM auto-decryption data exposure (bsc#1242971)
  * 0001-kern-rescue_reader-Block-the-rescue-mode-until-the-C.patch
  * 0002-commands-search-Introduce-the-cryptodisk-only-argume.patch
  * 0003-disk-diskfilter-Introduce-the-cryptocheck-command.patch
  * 0004-commands-search-Add-the-diskfilter-support.patch
  * 0005-docs-Document-available-crypto-disks-checks.patch
  * 0006-disk-cryptodisk-Add-the-erase-secrets-function.patch
  * 0007-disk-cryptodisk-Wipe-the-passphrase-from-memory.patch
  * 0008-cryptocheck-Add-quiet-option.patch
- patch rebased
  * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch
  * 0004-Key-revocation-on-out-of-bound-file-access.patch
- patch refrehed
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch</changelog>
  <changelog author="mchang@suse.com" date="1747742400">- Fix incorrect nvme disks and boot order in bootlist output (bsc#1237174)
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch</changelog>
</package>
<package pkgid="cec7d59f7d16d34fa9da68b502e63a12918c7ddf4d794573565987a176dc5811" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.12" rel="150700.19.13.2"/>
  <changelog author="mchang@suse.com" date="1730462400">- Fix grub.cfg is loaded from an unexpected fallback directory instead of the
  root directory during PXE boot when grub is loaded from the tftp root
  directory (bsc#1232391)
  * 0001-kern-main-Fix-cmdpath-in-root-directory.patch
  * grub2.spec: Refine PPC grub.elf early config to derive root from cmdpath
    directly, avoiding the unneeded search</changelog>
  <changelog author="mchang@suse.com" date="1730894400">- Fix xen package contains debug_info files with the .module suffix by moving
  them to a separate xen-debug subpackage (bsc#1232573)</changelog>
  <changelog author="mchang@suse.com" date="1731067200">- Do not enable blscfg on s390-emu
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1731067201">- Fix previous change as the variable has to be set earlier
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1731499200">- Revert the patches related to BLS support in grub2-mkconfig, as they are not
  relevant to the current BLS integration and cause issues in older KIWI
  versions, which actively force it to be enabled by default (bsc#1233196)
  * 0002-Add-BLS-support-to-grub-mkconfig.patch
  * 0003-Add-grub2-switch-to-blscfg.patch
  * 0007-grub-switch-to-blscfg-adapt-to-openSUSE.patch
  * 0008-blscfg-reading-bls-fragments-if-boot-present.patch
  * 0009-10_linux-Some-refinement-for-BLS.patch
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1733486400">- Fix missing requires in SLE package (bsc#1234264) (bsc#1234272)</changelog>
  <changelog author="mchang@suse.com" date="1733659200">- Update PowerPC SBAT patches to upstream (bsc#1233730)
  * 0007-grub-mkimage-Create-new-ELF-note-for-SBAT.patch
  * 0008-grub-mkimage-Add-SBAT-metadata-into-ELF-note-for-Pow.patch
- Replaced patches
  * 0007-mkimage-create-new-ELF-Note-for-SBAT.patch
  * 0008-mkimage-adding-sbat-data-into-sbat-ELF-Note-on-power.patch</changelog>
  <changelog author="mchang@suse.com" date="1739448000">- Fix out of memory issue on PowerPC by increasing RMA size (bsc#1236744)
  * 0001-powerpc-increase-MIN-RMA-size-for-CAS-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1739534400">- Security fixes for 2024
  * 0001-misc-Implement-grub_strlcpy.patch
- Fix CVE-2024-45781 (bsc#1233617)
  * 0002-fs-ufs-Fix-a-heap-OOB-write.patch
- Fix CVE-2024-56737 (bsc#1234958)
- Fix CVE-2024-45782 (bsc#1233615)
  * 0003-fs-hfs-Fix-stack-OOB-write-with-grub_strcpy.patch
- Fix CVE-2024-45780 (bsc#1233614)
  * 0004-fs-tar-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2024-45783 (bsc#1233616)
  * 0005-fs-hfsplus-Set-a-grub_errno-if-mount-fails.patch
  * 0006-kern-file-Ensure-file-data-is-set.patch
  * 0007-kern-file-Implement-filesystem-reference-counting.patch
- Fix CVE-2025-0624 (bsc#1236316)
  * 0008-net-Fix-OOB-write-in-grub_net_search_config_file.patch
- Fix CVE-2024-45774 (bsc#1233609)
  * 0009-video-readers-jpeg-Do-not-permit-duplicate-SOF0-mark.patch
- Fix CVE-2024-45775 (bsc#1233610)
  * 0010-commands-extcmd-Missing-check-for-failed-allocation.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0011-commands-pgp-Unregister-the-check_signatures-hooks-o.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0012-normal-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0013-gettext-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2024-45776 (bsc#1233612)
  * 0014-gettext-Integer-overflow-leads-to-heap-OOB-write-or-.patch
- Fix CVE-2024-45777 (bsc#1233613)
  * 0015-gettext-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2025-0690 (bsc#1237012)
  * 0016-commands-read-Fix-an-integer-overflow-when-supplying.patch
- Fix CVE-2025-1118 (bsc#1237013)
  * 0017-commands-minicmd-Block-the-dump-command-in-lockdown-.patch
- Fix CVE-2024-45778 (bsc#1233606)
- Fix CVE-2024-45779 (bsc#1233608)
  * 0018-fs-bfs-Disable-under-lockdown.patch
- Fix CVE-2025-0677 (bsc#1237002)
- Fix CVE-2025-0684 (bsc#1237008)
- Fix CVE-2025-0685 (bsc#1237009)
- Fix CVE-2025-0686 (bsc#1237010)
- Fix CVE-2025-0689 (bsc#1237011)
  * 0019-fs-Disable-many-filesystems-under-lockdown.patch
- Fix CVE-2025-1125 (bsc#1237014)
- Fix CVE-2025-0678 (bsc#1237006)
  * 0020-fs-Prevent-overflows-when-allocating-memory-for-arra.patch
- Updated to upstream version
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch
- Bump upstream SBAT generation to 5</changelog>
  <changelog author="mchang@suse.com" date="1741003200">- Cherry-pick upstream XFS fixes
  * 0001-fs-xfs-Add-new-superblock-features-added-in-Linux-6..patch
  * 0002-fs-xfs-Fix-grub_xfs_iterate_dir-return-value-in-case.patch
- Fix "attempt to read of write outside of partition" error message (bsc#1237844)
  * 0003-fs-xfs-fix-large-extent-counters-incompat-feature-su.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348800">- Fix zfs.mo not found message when booting on legacy BIOS (bsc#1237865)
  * 0001-autofs-Ignore-zfs-not-found.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348801">- Pass through PAES cipher as AES on s390x-emu (jsc#PED-10950)
  * 0001-s390x-emu-Pass-through-PAES-cipher-as-AES.patch</changelog>
  <changelog author="mchang@suse.com" date="1741694400">- Update patches for Power guest secure boot with key management (jsc#PED-3520)
  (jsc#PED-9892)
  * 0001-ieee1275-adding-failure-check-condition-on-ibm-secur.patch
  * 0002-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0003-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0004-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0005-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0006-powerpc_ieee1275-set-use_static_keys-flag.patch
  * 0007-appendedsig-Reads-the-default-DB-keys-from-ELF-Note.patch
  * 0008-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0009-appendedsig-documentation.patch
- Remove patches
  * 0001-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0002-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0003-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0004-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0005-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0006-appendedsig-documentation.patch</changelog>
  <changelog author="mchang@suse.com" date="1742212800">- Refresh PPC NVMEoF ofpath related patches to newer revision
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
- Patch refreshed
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch
- Patch obsoleted
  * 0004-ofpath-controller-name-update.patch
  * 0001-squash-ieee1275-ofpath-enable-NVMeoF-logical-device-.patch
- Fix segmentation fault error in grub2-probe with target=hints_string
  (bsc#1235971) (bsc#1235958) (bsc#1239651)
  * 0001-ofpath-Add-error-check-in-NVMEoF-device-translation.patch</changelog>
  <changelog author="mchang@suse.com" date="1745409600">- Fix PPC CAS reboot failure work when initiated via submenu (bsc#1241132)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1746446400">- Fix CVE-2025-4382: TPM auto-decryption data exposure (bsc#1242971)
  * 0001-kern-rescue_reader-Block-the-rescue-mode-until-the-C.patch
  * 0002-commands-search-Introduce-the-cryptodisk-only-argume.patch
  * 0003-disk-diskfilter-Introduce-the-cryptocheck-command.patch
  * 0004-commands-search-Add-the-diskfilter-support.patch
  * 0005-docs-Document-available-crypto-disks-checks.patch
  * 0006-disk-cryptodisk-Add-the-erase-secrets-function.patch
  * 0007-disk-cryptodisk-Wipe-the-passphrase-from-memory.patch
  * 0008-cryptocheck-Add-quiet-option.patch
- patch rebased
  * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch
  * 0004-Key-revocation-on-out-of-bound-file-access.patch
- patch refrehed
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch</changelog>
  <changelog author="mchang@suse.com" date="1747742400">- Fix incorrect nvme disks and boot order in bootlist output (bsc#1237174)
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch</changelog>
  <changelog author="mchang@suse.com" date="1752667200">- Fix test -f and -s do not work properly over the network files served via
  tftp and http (bsc#1246157) (bsc#1246237)
  * 0001-test-Fix-f-test-on-files-over-network.patch
  * 0002-http-Return-HTTP-status-code-in-http_establish.patch
  * 0003-docs-Clarify-test-for-files-on-TFTP-and-HTTP.patch
  * 0004-tftp-Fix-hang-when-file-is-a-directory.patch</changelog>
  <changelog author="glin@suse.com" date="1754049600">- Fix CVE-2024-56738: side-channel attack due to not constant-time
  algorithm in grub_crypto_memcmp (bsc#1234959)
  * grub2-constant-time-grub_crypto_memcmp.patch</changelog>
  <changelog author="mchang@suse.com" date="1754308800">- Skip mount point in grub_find_device function (bsc#1246231)
  * 0001-getroot-Skip-mount-points-in-grub_find_device.patch</changelog>
</package>
<package pkgid="b6f636a9fafe17660c67b65cd338cfb698e14e8a890aa78dc8aaef91e40edb99" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.12" rel="150700.19.16.1"/>
  <changelog author="mchang@suse.com" date="1730894400">- Fix xen package contains debug_info files with the .module suffix by moving
  them to a separate xen-debug subpackage (bsc#1232573)</changelog>
  <changelog author="mchang@suse.com" date="1731067200">- Do not enable blscfg on s390-emu
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1731067201">- Fix previous change as the variable has to be set earlier
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1731499200">- Revert the patches related to BLS support in grub2-mkconfig, as they are not
  relevant to the current BLS integration and cause issues in older KIWI
  versions, which actively force it to be enabled by default (bsc#1233196)
  * 0002-Add-BLS-support-to-grub-mkconfig.patch
  * 0003-Add-grub2-switch-to-blscfg.patch
  * 0007-grub-switch-to-blscfg-adapt-to-openSUSE.patch
  * 0008-blscfg-reading-bls-fragments-if-boot-present.patch
  * 0009-10_linux-Some-refinement-for-BLS.patch
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1733486400">- Fix missing requires in SLE package (bsc#1234264) (bsc#1234272)</changelog>
  <changelog author="mchang@suse.com" date="1733659200">- Update PowerPC SBAT patches to upstream (bsc#1233730)
  * 0007-grub-mkimage-Create-new-ELF-note-for-SBAT.patch
  * 0008-grub-mkimage-Add-SBAT-metadata-into-ELF-note-for-Pow.patch
- Replaced patches
  * 0007-mkimage-create-new-ELF-Note-for-SBAT.patch
  * 0008-mkimage-adding-sbat-data-into-sbat-ELF-Note-on-power.patch</changelog>
  <changelog author="mchang@suse.com" date="1739448000">- Fix out of memory issue on PowerPC by increasing RMA size (bsc#1236744)
  * 0001-powerpc-increase-MIN-RMA-size-for-CAS-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1739534400">- Security fixes for 2024
  * 0001-misc-Implement-grub_strlcpy.patch
- Fix CVE-2024-45781 (bsc#1233617)
  * 0002-fs-ufs-Fix-a-heap-OOB-write.patch
- Fix CVE-2024-56737 (bsc#1234958)
- Fix CVE-2024-45782 (bsc#1233615)
  * 0003-fs-hfs-Fix-stack-OOB-write-with-grub_strcpy.patch
- Fix CVE-2024-45780 (bsc#1233614)
  * 0004-fs-tar-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2024-45783 (bsc#1233616)
  * 0005-fs-hfsplus-Set-a-grub_errno-if-mount-fails.patch
  * 0006-kern-file-Ensure-file-data-is-set.patch
  * 0007-kern-file-Implement-filesystem-reference-counting.patch
- Fix CVE-2025-0624 (bsc#1236316)
  * 0008-net-Fix-OOB-write-in-grub_net_search_config_file.patch
- Fix CVE-2024-45774 (bsc#1233609)
  * 0009-video-readers-jpeg-Do-not-permit-duplicate-SOF0-mark.patch
- Fix CVE-2024-45775 (bsc#1233610)
  * 0010-commands-extcmd-Missing-check-for-failed-allocation.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0011-commands-pgp-Unregister-the-check_signatures-hooks-o.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0012-normal-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0013-gettext-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2024-45776 (bsc#1233612)
  * 0014-gettext-Integer-overflow-leads-to-heap-OOB-write-or-.patch
- Fix CVE-2024-45777 (bsc#1233613)
  * 0015-gettext-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2025-0690 (bsc#1237012)
  * 0016-commands-read-Fix-an-integer-overflow-when-supplying.patch
- Fix CVE-2025-1118 (bsc#1237013)
  * 0017-commands-minicmd-Block-the-dump-command-in-lockdown-.patch
- Fix CVE-2024-45778 (bsc#1233606)
- Fix CVE-2024-45779 (bsc#1233608)
  * 0018-fs-bfs-Disable-under-lockdown.patch
- Fix CVE-2025-0677 (bsc#1237002)
- Fix CVE-2025-0684 (bsc#1237008)
- Fix CVE-2025-0685 (bsc#1237009)
- Fix CVE-2025-0686 (bsc#1237010)
- Fix CVE-2025-0689 (bsc#1237011)
  * 0019-fs-Disable-many-filesystems-under-lockdown.patch
- Fix CVE-2025-1125 (bsc#1237014)
- Fix CVE-2025-0678 (bsc#1237006)
  * 0020-fs-Prevent-overflows-when-allocating-memory-for-arra.patch
- Updated to upstream version
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch
- Bump upstream SBAT generation to 5</changelog>
  <changelog author="mchang@suse.com" date="1741003200">- Cherry-pick upstream XFS fixes
  * 0001-fs-xfs-Add-new-superblock-features-added-in-Linux-6..patch
  * 0002-fs-xfs-Fix-grub_xfs_iterate_dir-return-value-in-case.patch
- Fix "attempt to read of write outside of partition" error message (bsc#1237844)
  * 0003-fs-xfs-fix-large-extent-counters-incompat-feature-su.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348800">- Fix zfs.mo not found message when booting on legacy BIOS (bsc#1237865)
  * 0001-autofs-Ignore-zfs-not-found.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348801">- Pass through PAES cipher as AES on s390x-emu (jsc#PED-10950)
  * 0001-s390x-emu-Pass-through-PAES-cipher-as-AES.patch</changelog>
  <changelog author="mchang@suse.com" date="1741694400">- Update patches for Power guest secure boot with key management (jsc#PED-3520)
  (jsc#PED-9892)
  * 0001-ieee1275-adding-failure-check-condition-on-ibm-secur.patch
  * 0002-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0003-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0004-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0005-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0006-powerpc_ieee1275-set-use_static_keys-flag.patch
  * 0007-appendedsig-Reads-the-default-DB-keys-from-ELF-Note.patch
  * 0008-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0009-appendedsig-documentation.patch
- Remove patches
  * 0001-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0002-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0003-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0004-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0005-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0006-appendedsig-documentation.patch</changelog>
  <changelog author="mchang@suse.com" date="1742212800">- Refresh PPC NVMEoF ofpath related patches to newer revision
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
- Patch refreshed
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch
- Patch obsoleted
  * 0004-ofpath-controller-name-update.patch
  * 0001-squash-ieee1275-ofpath-enable-NVMeoF-logical-device-.patch
- Fix segmentation fault error in grub2-probe with target=hints_string
  (bsc#1235971) (bsc#1235958) (bsc#1239651)
  * 0001-ofpath-Add-error-check-in-NVMEoF-device-translation.patch</changelog>
  <changelog author="mchang@suse.com" date="1745409600">- Fix PPC CAS reboot failure work when initiated via submenu (bsc#1241132)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1746446400">- Fix CVE-2025-4382: TPM auto-decryption data exposure (bsc#1242971)
  * 0001-kern-rescue_reader-Block-the-rescue-mode-until-the-C.patch
  * 0002-commands-search-Introduce-the-cryptodisk-only-argume.patch
  * 0003-disk-diskfilter-Introduce-the-cryptocheck-command.patch
  * 0004-commands-search-Add-the-diskfilter-support.patch
  * 0005-docs-Document-available-crypto-disks-checks.patch
  * 0006-disk-cryptodisk-Add-the-erase-secrets-function.patch
  * 0007-disk-cryptodisk-Wipe-the-passphrase-from-memory.patch
  * 0008-cryptocheck-Add-quiet-option.patch
- patch rebased
  * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch
  * 0004-Key-revocation-on-out-of-bound-file-access.patch
- patch refrehed
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch</changelog>
  <changelog author="mchang@suse.com" date="1747742400">- Fix incorrect nvme disks and boot order in bootlist output (bsc#1237174)
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch</changelog>
  <changelog author="mchang@suse.com" date="1752667200">- Fix test -f and -s do not work properly over the network files served via
  tftp and http (bsc#1246157) (bsc#1246237)
  * 0001-test-Fix-f-test-on-files-over-network.patch
  * 0002-http-Return-HTTP-status-code-in-http_establish.patch
  * 0003-docs-Clarify-test-for-files-on-TFTP-and-HTTP.patch
  * 0004-tftp-Fix-hang-when-file-is-a-directory.patch</changelog>
  <changelog author="glin@suse.com" date="1754049600">- Fix CVE-2024-56738: side-channel attack due to not constant-time
  algorithm in grub_crypto_memcmp (bsc#1234959)
  * grub2-constant-time-grub_crypto_memcmp.patch</changelog>
  <changelog author="mchang@suse.com" date="1754308800">- Skip mount point in grub_find_device function (bsc#1246231)
  * 0001-getroot-Skip-mount-points-in-grub_find_device.patch</changelog>
  <changelog author="mchang@suse.com" date="1758542400">- Fix boot hangs in setting up serial console when ACPI SPCR table is present
  and redirection is disabled (bsc#1249088)
  * 0001-term-ns8250-spcr-Return-if-redirection-is-disabled.patch</changelog>
</package>
<package pkgid="c0211ac6794b15f6caff96bcb6317e221956d54e78573c5c81057242ee22b2d5" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.12" rel="150700.19.19.1"/>
  <changelog author="mchang@suse.com" date="1731067200">- Fix previous change as the variable has to be set earlier
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1731499200">- Revert the patches related to BLS support in grub2-mkconfig, as they are not
  relevant to the current BLS integration and cause issues in older KIWI
  versions, which actively force it to be enabled by default (bsc#1233196)
  * 0002-Add-BLS-support-to-grub-mkconfig.patch
  * 0003-Add-grub2-switch-to-blscfg.patch
  * 0007-grub-switch-to-blscfg-adapt-to-openSUSE.patch
  * 0008-blscfg-reading-bls-fragments-if-boot-present.patch
  * 0009-10_linux-Some-refinement-for-BLS.patch
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1733486400">- Fix missing requires in SLE package (bsc#1234264) (bsc#1234272)</changelog>
  <changelog author="mchang@suse.com" date="1733659200">- Update PowerPC SBAT patches to upstream (bsc#1233730)
  * 0007-grub-mkimage-Create-new-ELF-note-for-SBAT.patch
  * 0008-grub-mkimage-Add-SBAT-metadata-into-ELF-note-for-Pow.patch
- Replaced patches
  * 0007-mkimage-create-new-ELF-Note-for-SBAT.patch
  * 0008-mkimage-adding-sbat-data-into-sbat-ELF-Note-on-power.patch</changelog>
  <changelog author="mchang@suse.com" date="1739448000">- Fix out of memory issue on PowerPC by increasing RMA size (bsc#1236744)
  * 0001-powerpc-increase-MIN-RMA-size-for-CAS-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1739534400">- Security fixes for 2024
  * 0001-misc-Implement-grub_strlcpy.patch
- Fix CVE-2024-45781 (bsc#1233617)
  * 0002-fs-ufs-Fix-a-heap-OOB-write.patch
- Fix CVE-2024-56737 (bsc#1234958)
- Fix CVE-2024-45782 (bsc#1233615)
  * 0003-fs-hfs-Fix-stack-OOB-write-with-grub_strcpy.patch
- Fix CVE-2024-45780 (bsc#1233614)
  * 0004-fs-tar-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2024-45783 (bsc#1233616)
  * 0005-fs-hfsplus-Set-a-grub_errno-if-mount-fails.patch
  * 0006-kern-file-Ensure-file-data-is-set.patch
  * 0007-kern-file-Implement-filesystem-reference-counting.patch
- Fix CVE-2025-0624 (bsc#1236316)
  * 0008-net-Fix-OOB-write-in-grub_net_search_config_file.patch
- Fix CVE-2024-45774 (bsc#1233609)
  * 0009-video-readers-jpeg-Do-not-permit-duplicate-SOF0-mark.patch
- Fix CVE-2024-45775 (bsc#1233610)
  * 0010-commands-extcmd-Missing-check-for-failed-allocation.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0011-commands-pgp-Unregister-the-check_signatures-hooks-o.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0012-normal-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0013-gettext-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2024-45776 (bsc#1233612)
  * 0014-gettext-Integer-overflow-leads-to-heap-OOB-write-or-.patch
- Fix CVE-2024-45777 (bsc#1233613)
  * 0015-gettext-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2025-0690 (bsc#1237012)
  * 0016-commands-read-Fix-an-integer-overflow-when-supplying.patch
- Fix CVE-2025-1118 (bsc#1237013)
  * 0017-commands-minicmd-Block-the-dump-command-in-lockdown-.patch
- Fix CVE-2024-45778 (bsc#1233606)
- Fix CVE-2024-45779 (bsc#1233608)
  * 0018-fs-bfs-Disable-under-lockdown.patch
- Fix CVE-2025-0677 (bsc#1237002)
- Fix CVE-2025-0684 (bsc#1237008)
- Fix CVE-2025-0685 (bsc#1237009)
- Fix CVE-2025-0686 (bsc#1237010)
- Fix CVE-2025-0689 (bsc#1237011)
  * 0019-fs-Disable-many-filesystems-under-lockdown.patch
- Fix CVE-2025-1125 (bsc#1237014)
- Fix CVE-2025-0678 (bsc#1237006)
  * 0020-fs-Prevent-overflows-when-allocating-memory-for-arra.patch
- Updated to upstream version
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch
- Bump upstream SBAT generation to 5</changelog>
  <changelog author="mchang@suse.com" date="1741003200">- Cherry-pick upstream XFS fixes
  * 0001-fs-xfs-Add-new-superblock-features-added-in-Linux-6..patch
  * 0002-fs-xfs-Fix-grub_xfs_iterate_dir-return-value-in-case.patch
- Fix "attempt to read of write outside of partition" error message (bsc#1237844)
  * 0003-fs-xfs-fix-large-extent-counters-incompat-feature-su.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348800">- Fix zfs.mo not found message when booting on legacy BIOS (bsc#1237865)
  * 0001-autofs-Ignore-zfs-not-found.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348801">- Pass through PAES cipher as AES on s390x-emu (jsc#PED-10950)
  * 0001-s390x-emu-Pass-through-PAES-cipher-as-AES.patch</changelog>
  <changelog author="mchang@suse.com" date="1741694400">- Update patches for Power guest secure boot with key management (jsc#PED-3520)
  (jsc#PED-9892)
  * 0001-ieee1275-adding-failure-check-condition-on-ibm-secur.patch
  * 0002-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0003-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0004-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0005-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0006-powerpc_ieee1275-set-use_static_keys-flag.patch
  * 0007-appendedsig-Reads-the-default-DB-keys-from-ELF-Note.patch
  * 0008-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0009-appendedsig-documentation.patch
- Remove patches
  * 0001-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0002-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0003-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0004-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0005-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0006-appendedsig-documentation.patch</changelog>
  <changelog author="mchang@suse.com" date="1742212800">- Refresh PPC NVMEoF ofpath related patches to newer revision
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
- Patch refreshed
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch
- Patch obsoleted
  * 0004-ofpath-controller-name-update.patch
  * 0001-squash-ieee1275-ofpath-enable-NVMeoF-logical-device-.patch
- Fix segmentation fault error in grub2-probe with target=hints_string
  (bsc#1235971) (bsc#1235958) (bsc#1239651)
  * 0001-ofpath-Add-error-check-in-NVMEoF-device-translation.patch</changelog>
  <changelog author="mchang@suse.com" date="1745409600">- Fix PPC CAS reboot failure work when initiated via submenu (bsc#1241132)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1746446400">- Fix CVE-2025-4382: TPM auto-decryption data exposure (bsc#1242971)
  * 0001-kern-rescue_reader-Block-the-rescue-mode-until-the-C.patch
  * 0002-commands-search-Introduce-the-cryptodisk-only-argume.patch
  * 0003-disk-diskfilter-Introduce-the-cryptocheck-command.patch
  * 0004-commands-search-Add-the-diskfilter-support.patch
  * 0005-docs-Document-available-crypto-disks-checks.patch
  * 0006-disk-cryptodisk-Add-the-erase-secrets-function.patch
  * 0007-disk-cryptodisk-Wipe-the-passphrase-from-memory.patch
  * 0008-cryptocheck-Add-quiet-option.patch
- patch rebased
  * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch
  * 0004-Key-revocation-on-out-of-bound-file-access.patch
- patch refrehed
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch</changelog>
  <changelog author="mchang@suse.com" date="1747742400">- Fix incorrect nvme disks and boot order in bootlist output (bsc#1237174)
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch</changelog>
  <changelog author="mchang@suse.com" date="1752667200">- Fix test -f and -s do not work properly over the network files served via
  tftp and http (bsc#1246157) (bsc#1246237)
  * 0001-test-Fix-f-test-on-files-over-network.patch
  * 0002-http-Return-HTTP-status-code-in-http_establish.patch
  * 0003-docs-Clarify-test-for-files-on-TFTP-and-HTTP.patch
  * 0004-tftp-Fix-hang-when-file-is-a-directory.patch</changelog>
  <changelog author="glin@suse.com" date="1754049600">- Fix CVE-2024-56738: side-channel attack due to not constant-time
  algorithm in grub_crypto_memcmp (bsc#1234959)
  * grub2-constant-time-grub_crypto_memcmp.patch</changelog>
  <changelog author="mchang@suse.com" date="1754308800">- Skip mount point in grub_find_device function (bsc#1246231)
  * 0001-getroot-Skip-mount-points-in-grub_find_device.patch</changelog>
  <changelog author="mchang@suse.com" date="1758542400">- Fix boot hangs in setting up serial console when ACPI SPCR table is present
  and redirection is disabled (bsc#1249088)
  * 0001-term-ns8250-spcr-Return-if-redirection-is-disabled.patch</changelog>
  <changelog author="mchang@suse.com" date="1761048000">- Fix timeout when loading initrd via http after PPC CAS reboot (bsc#1245953)
  * 0001-tcp-Fix-TCP-port-number-reused-on-reboot.patch</changelog>
  <changelog author="mchang@suse.com" date="1762948800">- Fix CVE-2025-54771 (bsc#1252931)
  * 0001-kern-file-Call-grub_dl_unref-after-fs-fs_close.patch
- Fix CVE-2025-54770 (bsc#1252930)
  * 0002-net-net-Unregister-net_set_vlan-command-on-unload.patch
- Fix CVE-2025-61662 (bsc#1252933)
  * 0003-gettext-gettext-Unregister-gettext-command-on-module.patch
- Fix CVE-2025-61663 (bsc#1252934)
- Fix CVE-2025-61664 (bsc#1252935)
  * 0004-normal-main-Unregister-commands-on-module-unload.patch
  * 0005-tests-lib-functional_test-Unregister-commands-on-mod.patch
- Fix CVE-2025-61661 (bsc#1252932)
  * 0006-commands-usbtest-Use-correct-string-length-field.patch
  * 0007-commands-usbtest-Ensure-string-length-is-sufficient-.patch
- Bump upstream SBAT generation to 6</changelog>
</package>
<package pkgid="1abf540887bc076ce86e274109deb46a4df348b14ec32fe0cfc6269c521eacb5" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.12" rel="150700.19.26.1"/>
  <changelog author="mchang@suse.com" date="1733659200">- Update PowerPC SBAT patches to upstream (bsc#1233730)
  * 0007-grub-mkimage-Create-new-ELF-note-for-SBAT.patch
  * 0008-grub-mkimage-Add-SBAT-metadata-into-ELF-note-for-Pow.patch
- Replaced patches
  * 0007-mkimage-create-new-ELF-Note-for-SBAT.patch
  * 0008-mkimage-adding-sbat-data-into-sbat-ELF-Note-on-power.patch</changelog>
  <changelog author="mchang@suse.com" date="1739448000">- Fix out of memory issue on PowerPC by increasing RMA size (bsc#1236744)
  * 0001-powerpc-increase-MIN-RMA-size-for-CAS-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1739534400">- Security fixes for 2024
  * 0001-misc-Implement-grub_strlcpy.patch
- Fix CVE-2024-45781 (bsc#1233617)
  * 0002-fs-ufs-Fix-a-heap-OOB-write.patch
- Fix CVE-2024-56737 (bsc#1234958)
- Fix CVE-2024-45782 (bsc#1233615)
  * 0003-fs-hfs-Fix-stack-OOB-write-with-grub_strcpy.patch
- Fix CVE-2024-45780 (bsc#1233614)
  * 0004-fs-tar-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2024-45783 (bsc#1233616)
  * 0005-fs-hfsplus-Set-a-grub_errno-if-mount-fails.patch
  * 0006-kern-file-Ensure-file-data-is-set.patch
  * 0007-kern-file-Implement-filesystem-reference-counting.patch
- Fix CVE-2025-0624 (bsc#1236316)
  * 0008-net-Fix-OOB-write-in-grub_net_search_config_file.patch
- Fix CVE-2024-45774 (bsc#1233609)
  * 0009-video-readers-jpeg-Do-not-permit-duplicate-SOF0-mark.patch
- Fix CVE-2024-45775 (bsc#1233610)
  * 0010-commands-extcmd-Missing-check-for-failed-allocation.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0011-commands-pgp-Unregister-the-check_signatures-hooks-o.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0012-normal-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0013-gettext-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2024-45776 (bsc#1233612)
  * 0014-gettext-Integer-overflow-leads-to-heap-OOB-write-or-.patch
- Fix CVE-2024-45777 (bsc#1233613)
  * 0015-gettext-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2025-0690 (bsc#1237012)
  * 0016-commands-read-Fix-an-integer-overflow-when-supplying.patch
- Fix CVE-2025-1118 (bsc#1237013)
  * 0017-commands-minicmd-Block-the-dump-command-in-lockdown-.patch
- Fix CVE-2024-45778 (bsc#1233606)
- Fix CVE-2024-45779 (bsc#1233608)
  * 0018-fs-bfs-Disable-under-lockdown.patch
- Fix CVE-2025-0677 (bsc#1237002)
- Fix CVE-2025-0684 (bsc#1237008)
- Fix CVE-2025-0685 (bsc#1237009)
- Fix CVE-2025-0686 (bsc#1237010)
- Fix CVE-2025-0689 (bsc#1237011)
  * 0019-fs-Disable-many-filesystems-under-lockdown.patch
- Fix CVE-2025-1125 (bsc#1237014)
- Fix CVE-2025-0678 (bsc#1237006)
  * 0020-fs-Prevent-overflows-when-allocating-memory-for-arra.patch
- Updated to upstream version
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch
- Bump upstream SBAT generation to 5</changelog>
  <changelog author="mchang@suse.com" date="1741003200">- Cherry-pick upstream XFS fixes
  * 0001-fs-xfs-Add-new-superblock-features-added-in-Linux-6..patch
  * 0002-fs-xfs-Fix-grub_xfs_iterate_dir-return-value-in-case.patch
- Fix "attempt to read of write outside of partition" error message (bsc#1237844)
  * 0003-fs-xfs-fix-large-extent-counters-incompat-feature-su.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348800">- Fix zfs.mo not found message when booting on legacy BIOS (bsc#1237865)
  * 0001-autofs-Ignore-zfs-not-found.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348801">- Pass through PAES cipher as AES on s390x-emu (jsc#PED-10950)
  * 0001-s390x-emu-Pass-through-PAES-cipher-as-AES.patch</changelog>
  <changelog author="mchang@suse.com" date="1741694400">- Update patches for Power guest secure boot with key management (jsc#PED-3520)
  (jsc#PED-9892)
  * 0001-ieee1275-adding-failure-check-condition-on-ibm-secur.patch
  * 0002-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0003-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0004-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0005-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0006-powerpc_ieee1275-set-use_static_keys-flag.patch
  * 0007-appendedsig-Reads-the-default-DB-keys-from-ELF-Note.patch
  * 0008-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0009-appendedsig-documentation.patch
- Remove patches
  * 0001-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0002-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0003-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0004-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0005-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0006-appendedsig-documentation.patch</changelog>
  <changelog author="mchang@suse.com" date="1742212800">- Refresh PPC NVMEoF ofpath related patches to newer revision
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
- Patch refreshed
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch
- Patch obsoleted
  * 0004-ofpath-controller-name-update.patch
  * 0001-squash-ieee1275-ofpath-enable-NVMeoF-logical-device-.patch
- Fix segmentation fault error in grub2-probe with target=hints_string
  (bsc#1235971) (bsc#1235958) (bsc#1239651)
  * 0001-ofpath-Add-error-check-in-NVMEoF-device-translation.patch</changelog>
  <changelog author="mchang@suse.com" date="1745409600">- Fix PPC CAS reboot failure work when initiated via submenu (bsc#1241132)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1746446400">- Fix CVE-2025-4382: TPM auto-decryption data exposure (bsc#1242971)
  * 0001-kern-rescue_reader-Block-the-rescue-mode-until-the-C.patch
  * 0002-commands-search-Introduce-the-cryptodisk-only-argume.patch
  * 0003-disk-diskfilter-Introduce-the-cryptocheck-command.patch
  * 0004-commands-search-Add-the-diskfilter-support.patch
  * 0005-docs-Document-available-crypto-disks-checks.patch
  * 0006-disk-cryptodisk-Add-the-erase-secrets-function.patch
  * 0007-disk-cryptodisk-Wipe-the-passphrase-from-memory.patch
  * 0008-cryptocheck-Add-quiet-option.patch
- patch rebased
  * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch
  * 0004-Key-revocation-on-out-of-bound-file-access.patch
- patch refrehed
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch</changelog>
  <changelog author="mchang@suse.com" date="1747742400">- Fix incorrect nvme disks and boot order in bootlist output (bsc#1237174)
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch</changelog>
  <changelog author="mchang@suse.com" date="1752667200">- Fix test -f and -s do not work properly over the network files served via
  tftp and http (bsc#1246157) (bsc#1246237)
  * 0001-test-Fix-f-test-on-files-over-network.patch
  * 0002-http-Return-HTTP-status-code-in-http_establish.patch
  * 0003-docs-Clarify-test-for-files-on-TFTP-and-HTTP.patch
  * 0004-tftp-Fix-hang-when-file-is-a-directory.patch</changelog>
  <changelog author="glin@suse.com" date="1754049600">- Fix CVE-2024-56738: side-channel attack due to not constant-time
  algorithm in grub_crypto_memcmp (bsc#1234959)
  * grub2-constant-time-grub_crypto_memcmp.patch</changelog>
  <changelog author="mchang@suse.com" date="1754308800">- Skip mount point in grub_find_device function (bsc#1246231)
  * 0001-getroot-Skip-mount-points-in-grub_find_device.patch</changelog>
  <changelog author="mchang@suse.com" date="1758542400">- Fix boot hangs in setting up serial console when ACPI SPCR table is present
  and redirection is disabled (bsc#1249088)
  * 0001-term-ns8250-spcr-Return-if-redirection-is-disabled.patch</changelog>
  <changelog author="mchang@suse.com" date="1761048000">- Fix timeout when loading initrd via http after PPC CAS reboot (bsc#1245953)
  * 0001-tcp-Fix-TCP-port-number-reused-on-reboot.patch</changelog>
  <changelog author="mchang@suse.com" date="1762948800">- Fix CVE-2025-54771 (bsc#1252931)
  * 0001-kern-file-Call-grub_dl_unref-after-fs-fs_close.patch
- Fix CVE-2025-54770 (bsc#1252930)
  * 0002-net-net-Unregister-net_set_vlan-command-on-unload.patch
- Fix CVE-2025-61662 (bsc#1252933)
  * 0003-gettext-gettext-Unregister-gettext-command-on-module.patch
- Fix CVE-2025-61663 (bsc#1252934)
- Fix CVE-2025-61664 (bsc#1252935)
  * 0004-normal-main-Unregister-commands-on-module-unload.patch
  * 0005-tests-lib-functional_test-Unregister-commands-on-mod.patch
- Fix CVE-2025-61661 (bsc#1252932)
  * 0006-commands-usbtest-Use-correct-string-length-field.patch
  * 0007-commands-usbtest-Ensure-string-length-is-sufficient-.patch
- Bump upstream SBAT generation to 6</changelog>
  <changelog author="mchang@suse.com" date="1770638400">- Fix error "grub-core/script/lexer.c:352:out of memory" after PowerPC CAS
  Reboot (bsc#1254299)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1770811200">- Backport upstream's commit to prevent BIOS assert (bsc#1258022)
  * 0001-kern-efi-mm-Change-grub_efi_mm_add_regions-to-keep-t.patch</changelog>
  <changelog author="mchang@suse.com" date="1771934400">- Support dm multipath bootlist on PowerPC (bsc#1254415)
  * 0001-ieee1275-support-dm-multipath-bootlist.patch</changelog>
</package>
<package pkgid="cc24f298325e1e5d02bcb8487114e3df90548dc0a74f041b9c491036fd55a486" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.12" rel="150700.19.29.1"/>
  <changelog author="mchang@suse.com" date="1741003200">- Cherry-pick upstream XFS fixes
  * 0001-fs-xfs-Add-new-superblock-features-added-in-Linux-6..patch
  * 0002-fs-xfs-Fix-grub_xfs_iterate_dir-return-value-in-case.patch
- Fix "attempt to read of write outside of partition" error message (bsc#1237844)
  * 0003-fs-xfs-fix-large-extent-counters-incompat-feature-su.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348800">- Fix zfs.mo not found message when booting on legacy BIOS (bsc#1237865)
  * 0001-autofs-Ignore-zfs-not-found.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348801">- Pass through PAES cipher as AES on s390x-emu (jsc#PED-10950)
  * 0001-s390x-emu-Pass-through-PAES-cipher-as-AES.patch</changelog>
  <changelog author="mchang@suse.com" date="1741694400">- Update patches for Power guest secure boot with key management (jsc#PED-3520)
  (jsc#PED-9892)
  * 0001-ieee1275-adding-failure-check-condition-on-ibm-secur.patch
  * 0002-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0003-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0004-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0005-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0006-powerpc_ieee1275-set-use_static_keys-flag.patch
  * 0007-appendedsig-Reads-the-default-DB-keys-from-ELF-Note.patch
  * 0008-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0009-appendedsig-documentation.patch
- Remove patches
  * 0001-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0002-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0003-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0004-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0005-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0006-appendedsig-documentation.patch</changelog>
  <changelog author="mchang@suse.com" date="1742212800">- Refresh PPC NVMEoF ofpath related patches to newer revision
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
- Patch refreshed
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch
- Patch obsoleted
  * 0004-ofpath-controller-name-update.patch
  * 0001-squash-ieee1275-ofpath-enable-NVMeoF-logical-device-.patch
- Fix segmentation fault error in grub2-probe with target=hints_string
  (bsc#1235971) (bsc#1235958) (bsc#1239651)
  * 0001-ofpath-Add-error-check-in-NVMEoF-device-translation.patch</changelog>
  <changelog author="mchang@suse.com" date="1745409600">- Fix PPC CAS reboot failure work when initiated via submenu (bsc#1241132)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1746446400">- Fix CVE-2025-4382: TPM auto-decryption data exposure (bsc#1242971)
  * 0001-kern-rescue_reader-Block-the-rescue-mode-until-the-C.patch
  * 0002-commands-search-Introduce-the-cryptodisk-only-argume.patch
  * 0003-disk-diskfilter-Introduce-the-cryptocheck-command.patch
  * 0004-commands-search-Add-the-diskfilter-support.patch
  * 0005-docs-Document-available-crypto-disks-checks.patch
  * 0006-disk-cryptodisk-Add-the-erase-secrets-function.patch
  * 0007-disk-cryptodisk-Wipe-the-passphrase-from-memory.patch
  * 0008-cryptocheck-Add-quiet-option.patch
- patch rebased
  * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch
  * 0004-Key-revocation-on-out-of-bound-file-access.patch
- patch refrehed
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch</changelog>
  <changelog author="mchang@suse.com" date="1747742400">- Fix incorrect nvme disks and boot order in bootlist output (bsc#1237174)
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch</changelog>
  <changelog author="mchang@suse.com" date="1752667200">- Fix test -f and -s do not work properly over the network files served via
  tftp and http (bsc#1246157) (bsc#1246237)
  * 0001-test-Fix-f-test-on-files-over-network.patch
  * 0002-http-Return-HTTP-status-code-in-http_establish.patch
  * 0003-docs-Clarify-test-for-files-on-TFTP-and-HTTP.patch
  * 0004-tftp-Fix-hang-when-file-is-a-directory.patch</changelog>
  <changelog author="glin@suse.com" date="1754049600">- Fix CVE-2024-56738: side-channel attack due to not constant-time
  algorithm in grub_crypto_memcmp (bsc#1234959)
  * grub2-constant-time-grub_crypto_memcmp.patch</changelog>
  <changelog author="mchang@suse.com" date="1754308800">- Skip mount point in grub_find_device function (bsc#1246231)
  * 0001-getroot-Skip-mount-points-in-grub_find_device.patch</changelog>
  <changelog author="mchang@suse.com" date="1758542400">- Fix boot hangs in setting up serial console when ACPI SPCR table is present
  and redirection is disabled (bsc#1249088)
  * 0001-term-ns8250-spcr-Return-if-redirection-is-disabled.patch</changelog>
  <changelog author="mchang@suse.com" date="1761048000">- Fix timeout when loading initrd via http after PPC CAS reboot (bsc#1245953)
  * 0001-tcp-Fix-TCP-port-number-reused-on-reboot.patch</changelog>
  <changelog author="mchang@suse.com" date="1762948800">- Fix CVE-2025-54771 (bsc#1252931)
  * 0001-kern-file-Call-grub_dl_unref-after-fs-fs_close.patch
- Fix CVE-2025-54770 (bsc#1252930)
  * 0002-net-net-Unregister-net_set_vlan-command-on-unload.patch
- Fix CVE-2025-61662 (bsc#1252933)
  * 0003-gettext-gettext-Unregister-gettext-command-on-module.patch
- Fix CVE-2025-61663 (bsc#1252934)
- Fix CVE-2025-61664 (bsc#1252935)
  * 0004-normal-main-Unregister-commands-on-module-unload.patch
  * 0005-tests-lib-functional_test-Unregister-commands-on-mod.patch
- Fix CVE-2025-61661 (bsc#1252932)
  * 0006-commands-usbtest-Use-correct-string-length-field.patch
  * 0007-commands-usbtest-Ensure-string-length-is-sufficient-.patch
- Bump upstream SBAT generation to 6</changelog>
  <changelog author="mchang@suse.com" date="1770638400">- Fix error "grub-core/script/lexer.c:352:out of memory" after PowerPC CAS
  Reboot (bsc#1254299)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1770811200">- Backport upstream's commit to prevent BIOS assert (bsc#1258022)
  * 0001-kern-efi-mm-Change-grub_efi_mm_add_regions-to-keep-t.patch</changelog>
  <changelog author="mchang@suse.com" date="1771934400">- Support dm multipath bootlist on PowerPC (bsc#1254415)
  * 0001-ieee1275-support-dm-multipath-bootlist.patch</changelog>
  <changelog author="mchang@suse.com" date="1775563200">- Fix double free in xen booting if root filesystem is Btrfs (bsc#1259543)
  * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  * grub2-btrfs-09-get-default-subvolume.patch</changelog>
  <changelog author="mchang@suse.com" date="1775736000">- Fix PowerPC network boot prefix to correctly locate grub.cfg (bsc#1249385)
  * 0001-ieee1275-Use-net-config-for-boot-location-instead-of.patch</changelog>
  <changelog author="mchang@suse.com" date="1776081600">- Fix missing install device check in grub2-install on PowerPC which could lead
  to bootlist corruption (bsc#1221126)
  * 0001-Mandatory-install-device-check-for-PowerPC.patch</changelog>
</package>
<package pkgid="fc7100cae7b47269f72188b40e367ce18de2811b03fdc59bede98e092f4f5d94" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.12" rel="150700.19.3.1"/>
  <changelog author="mchang@suse.com" date="1729684800">- Fix error: /boot/grub2/x86_64-efi/bli.mod not found (bsc#1231591)</changelog>
  <changelog author="mchang@suse.com" date="1730289600">- Enable support of Radix, Xive and Radix_gtse on Power (jsc#PED-9881)
  * 0001-kern-ieee1275-init-Add-IEEE-1275-Radix-support-for-K.patch</changelog>
  <changelog author="mchang@suse.com" date="1730289601">- Fix CVE-2024-49504 (bsc#1229163) (bsc#1229164)
- Restrict CLI access if the encrypted root device is automatically unlocked by
  the TPM. LUKS password authentication is required for access to be granted
  * 0001-cli_lock-Add-build-option-to-block-command-line-inte.patch
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch
- Obsolete, as CLI access is now locked and granted access no longer requires
  the previous restrictions
  * 0002-Restrict-file-access-on-cryptodisk-print.patch
  * 0003-Restrict-ls-and-auto-file-completion-on-cryptodisk-p.patch
- Rediff
  * 0004-Key-revocation-on-out-of-bound-file-access.patch</changelog>
  <changelog author="mchang@suse.com" date="1730462400">- Fix grub.cfg is loaded from an unexpected fallback directory instead of the
  root directory during PXE boot when grub is loaded from the tftp root
  directory (bsc#1232391)
  * 0001-kern-main-Fix-cmdpath-in-root-directory.patch
  * grub2.spec: Refine PPC grub.elf early config to derive root from cmdpath
    directly, avoiding the unneeded search</changelog>
  <changelog author="mchang@suse.com" date="1730894400">- Fix xen package contains debug_info files with the .module suffix by moving
  them to a separate xen-debug subpackage (bsc#1232573)</changelog>
  <changelog author="mchang@suse.com" date="1731067200">- Do not enable blscfg on s390-emu
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1731067201">- Fix previous change as the variable has to be set earlier
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1731499200">- Revert the patches related to BLS support in grub2-mkconfig, as they are not
  relevant to the current BLS integration and cause issues in older KIWI
  versions, which actively force it to be enabled by default (bsc#1233196)
  * 0002-Add-BLS-support-to-grub-mkconfig.patch
  * 0003-Add-grub2-switch-to-blscfg.patch
  * 0007-grub-switch-to-blscfg-adapt-to-openSUSE.patch
  * 0008-blscfg-reading-bls-fragments-if-boot-present.patch
  * 0009-10_linux-Some-refinement-for-BLS.patch
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1733486400">- Fix missing requires in SLE package (bsc#1234264) (bsc#1234272)</changelog>
  <changelog author="mchang@suse.com" date="1733659200">- Update PowerPC SBAT patches to upstream (bsc#1233730)
  * 0007-grub-mkimage-Create-new-ELF-note-for-SBAT.patch
  * 0008-grub-mkimage-Add-SBAT-metadata-into-ELF-note-for-Pow.patch
- Replaced patches
  * 0007-mkimage-create-new-ELF-Note-for-SBAT.patch
  * 0008-mkimage-adding-sbat-data-into-sbat-ELF-Note-on-power.patch</changelog>
  <changelog author="mchang@suse.com" date="1739448000">- Fix out of memory issue on PowerPC by increasing RMA size (bsc#1236744)
  * 0001-powerpc-increase-MIN-RMA-size-for-CAS-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1739534400">- Security fixes for 2024
  * 0001-misc-Implement-grub_strlcpy.patch
- Fix CVE-2024-45781 (bsc#1233617)
  * 0002-fs-ufs-Fix-a-heap-OOB-write.patch
- Fix CVE-2024-56737 (bsc#1234958)
- Fix CVE-2024-45782 (bsc#1233615)
  * 0003-fs-hfs-Fix-stack-OOB-write-with-grub_strcpy.patch
- Fix CVE-2024-45780 (bsc#1233614)
  * 0004-fs-tar-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2024-45783 (bsc#1233616)
  * 0005-fs-hfsplus-Set-a-grub_errno-if-mount-fails.patch
  * 0006-kern-file-Ensure-file-data-is-set.patch
  * 0007-kern-file-Implement-filesystem-reference-counting.patch
- Fix CVE-2025-0624 (bsc#1236316)
  * 0008-net-Fix-OOB-write-in-grub_net_search_config_file.patch
- Fix CVE-2024-45774 (bsc#1233609)
  * 0009-video-readers-jpeg-Do-not-permit-duplicate-SOF0-mark.patch
- Fix CVE-2024-45775 (bsc#1233610)
  * 0010-commands-extcmd-Missing-check-for-failed-allocation.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0011-commands-pgp-Unregister-the-check_signatures-hooks-o.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0012-normal-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0013-gettext-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2024-45776 (bsc#1233612)
  * 0014-gettext-Integer-overflow-leads-to-heap-OOB-write-or-.patch
- Fix CVE-2024-45777 (bsc#1233613)
  * 0015-gettext-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2025-0690 (bsc#1237012)
  * 0016-commands-read-Fix-an-integer-overflow-when-supplying.patch
- Fix CVE-2025-1118 (bsc#1237013)
  * 0017-commands-minicmd-Block-the-dump-command-in-lockdown-.patch
- Fix CVE-2024-45778 (bsc#1233606)
- Fix CVE-2024-45779 (bsc#1233608)
  * 0018-fs-bfs-Disable-under-lockdown.patch
- Fix CVE-2025-0677 (bsc#1237002)
- Fix CVE-2025-0684 (bsc#1237008)
- Fix CVE-2025-0685 (bsc#1237009)
- Fix CVE-2025-0686 (bsc#1237010)
- Fix CVE-2025-0689 (bsc#1237011)
  * 0019-fs-Disable-many-filesystems-under-lockdown.patch
- Fix CVE-2025-1125 (bsc#1237014)
- Fix CVE-2025-0678 (bsc#1237006)
  * 0020-fs-Prevent-overflows-when-allocating-memory-for-arra.patch
- Updated to upstream version
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch
- Bump upstream SBAT generation to 5</changelog>
  <changelog author="mchang@suse.com" date="1741003200">- Cherry-pick upstream XFS fixes
  * 0001-fs-xfs-Add-new-superblock-features-added-in-Linux-6..patch
  * 0002-fs-xfs-Fix-grub_xfs_iterate_dir-return-value-in-case.patch
- Fix "attempt to read of write outside of partition" error message (bsc#1237844)
  * 0003-fs-xfs-fix-large-extent-counters-incompat-feature-su.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348800">- Fix zfs.mo not found message when booting on legacy BIOS (bsc#1237865)
  * 0001-autofs-Ignore-zfs-not-found.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348801">- Pass through PAES cipher as AES on s390x-emu (jsc#PED-10950)
  * 0001-s390x-emu-Pass-through-PAES-cipher-as-AES.patch</changelog>
  <changelog author="mchang@suse.com" date="1741694400">- Update patches for Power guest secure boot with key management (jsc#PED-3520)
  (jsc#PED-9892)
  * 0001-ieee1275-adding-failure-check-condition-on-ibm-secur.patch
  * 0002-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0003-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0004-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0005-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0006-powerpc_ieee1275-set-use_static_keys-flag.patch
  * 0007-appendedsig-Reads-the-default-DB-keys-from-ELF-Note.patch
  * 0008-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0009-appendedsig-documentation.patch
- Remove patches
  * 0001-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0002-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0003-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0004-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0005-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0006-appendedsig-documentation.patch</changelog>
  <changelog author="mchang@suse.com" date="1742212800">- Refresh PPC NVMEoF ofpath related patches to newer revision
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
- Patch refreshed
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch
- Patch obsoleted
  * 0004-ofpath-controller-name-update.patch
  * 0001-squash-ieee1275-ofpath-enable-NVMeoF-logical-device-.patch
- Fix segmentation fault error in grub2-probe with target=hints_string
  (bsc#1235971) (bsc#1235958) (bsc#1239651)
  * 0001-ofpath-Add-error-check-in-NVMEoF-device-translation.patch</changelog>
  <changelog author="mchang@suse.com" date="1745409600">- Fix PPC CAS reboot failure work when initiated via submenu (bsc#1241132)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1746446400">- Fix CVE-2025-4382: TPM auto-decryption data exposure (bsc#1242971)
  * 0001-kern-rescue_reader-Block-the-rescue-mode-until-the-C.patch
  * 0002-commands-search-Introduce-the-cryptodisk-only-argume.patch
  * 0003-disk-diskfilter-Introduce-the-cryptocheck-command.patch
  * 0004-commands-search-Add-the-diskfilter-support.patch
  * 0005-docs-Document-available-crypto-disks-checks.patch
  * 0006-disk-cryptodisk-Add-the-erase-secrets-function.patch
  * 0007-disk-cryptodisk-Wipe-the-passphrase-from-memory.patch
  * 0008-cryptocheck-Add-quiet-option.patch
- patch rebased
  * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch
  * 0004-Key-revocation-on-out-of-bound-file-access.patch
- patch refrehed
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch</changelog>
  <changelog author="mchang@suse.com" date="1747742400">- Fix incorrect nvme disks and boot order in bootlist output (bsc#1237174)
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch</changelog>
</package>
<package pkgid="14f89ea11890f1df2c7710d6c70e0c832bf54b70771a8b629c2119da5a358c9f" name="grub2-systemd-sleep-plugin" arch="noarch">
  <version epoch="0" ver="2.12" rel="150700.19.13.2"/>
  <changelog author="mchang@suse.com" date="1730462400">- Fix grub.cfg is loaded from an unexpected fallback directory instead of the
  root directory during PXE boot when grub is loaded from the tftp root
  directory (bsc#1232391)
  * 0001-kern-main-Fix-cmdpath-in-root-directory.patch
  * grub2.spec: Refine PPC grub.elf early config to derive root from cmdpath
    directly, avoiding the unneeded search</changelog>
  <changelog author="mchang@suse.com" date="1730894400">- Fix xen package contains debug_info files with the .module suffix by moving
  them to a separate xen-debug subpackage (bsc#1232573)</changelog>
  <changelog author="mchang@suse.com" date="1731067200">- Do not enable blscfg on s390-emu
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1731067201">- Fix previous change as the variable has to be set earlier
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1731499200">- Revert the patches related to BLS support in grub2-mkconfig, as they are not
  relevant to the current BLS integration and cause issues in older KIWI
  versions, which actively force it to be enabled by default (bsc#1233196)
  * 0002-Add-BLS-support-to-grub-mkconfig.patch
  * 0003-Add-grub2-switch-to-blscfg.patch
  * 0007-grub-switch-to-blscfg-adapt-to-openSUSE.patch
  * 0008-blscfg-reading-bls-fragments-if-boot-present.patch
  * 0009-10_linux-Some-refinement-for-BLS.patch
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1733486400">- Fix missing requires in SLE package (bsc#1234264) (bsc#1234272)</changelog>
  <changelog author="mchang@suse.com" date="1733659200">- Update PowerPC SBAT patches to upstream (bsc#1233730)
  * 0007-grub-mkimage-Create-new-ELF-note-for-SBAT.patch
  * 0008-grub-mkimage-Add-SBAT-metadata-into-ELF-note-for-Pow.patch
- Replaced patches
  * 0007-mkimage-create-new-ELF-Note-for-SBAT.patch
  * 0008-mkimage-adding-sbat-data-into-sbat-ELF-Note-on-power.patch</changelog>
  <changelog author="mchang@suse.com" date="1739448000">- Fix out of memory issue on PowerPC by increasing RMA size (bsc#1236744)
  * 0001-powerpc-increase-MIN-RMA-size-for-CAS-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1739534400">- Security fixes for 2024
  * 0001-misc-Implement-grub_strlcpy.patch
- Fix CVE-2024-45781 (bsc#1233617)
  * 0002-fs-ufs-Fix-a-heap-OOB-write.patch
- Fix CVE-2024-56737 (bsc#1234958)
- Fix CVE-2024-45782 (bsc#1233615)
  * 0003-fs-hfs-Fix-stack-OOB-write-with-grub_strcpy.patch
- Fix CVE-2024-45780 (bsc#1233614)
  * 0004-fs-tar-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2024-45783 (bsc#1233616)
  * 0005-fs-hfsplus-Set-a-grub_errno-if-mount-fails.patch
  * 0006-kern-file-Ensure-file-data-is-set.patch
  * 0007-kern-file-Implement-filesystem-reference-counting.patch
- Fix CVE-2025-0624 (bsc#1236316)
  * 0008-net-Fix-OOB-write-in-grub_net_search_config_file.patch
- Fix CVE-2024-45774 (bsc#1233609)
  * 0009-video-readers-jpeg-Do-not-permit-duplicate-SOF0-mark.patch
- Fix CVE-2024-45775 (bsc#1233610)
  * 0010-commands-extcmd-Missing-check-for-failed-allocation.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0011-commands-pgp-Unregister-the-check_signatures-hooks-o.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0012-normal-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0013-gettext-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2024-45776 (bsc#1233612)
  * 0014-gettext-Integer-overflow-leads-to-heap-OOB-write-or-.patch
- Fix CVE-2024-45777 (bsc#1233613)
  * 0015-gettext-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2025-0690 (bsc#1237012)
  * 0016-commands-read-Fix-an-integer-overflow-when-supplying.patch
- Fix CVE-2025-1118 (bsc#1237013)
  * 0017-commands-minicmd-Block-the-dump-command-in-lockdown-.patch
- Fix CVE-2024-45778 (bsc#1233606)
- Fix CVE-2024-45779 (bsc#1233608)
  * 0018-fs-bfs-Disable-under-lockdown.patch
- Fix CVE-2025-0677 (bsc#1237002)
- Fix CVE-2025-0684 (bsc#1237008)
- Fix CVE-2025-0685 (bsc#1237009)
- Fix CVE-2025-0686 (bsc#1237010)
- Fix CVE-2025-0689 (bsc#1237011)
  * 0019-fs-Disable-many-filesystems-under-lockdown.patch
- Fix CVE-2025-1125 (bsc#1237014)
- Fix CVE-2025-0678 (bsc#1237006)
  * 0020-fs-Prevent-overflows-when-allocating-memory-for-arra.patch
- Updated to upstream version
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch
- Bump upstream SBAT generation to 5</changelog>
  <changelog author="mchang@suse.com" date="1741003200">- Cherry-pick upstream XFS fixes
  * 0001-fs-xfs-Add-new-superblock-features-added-in-Linux-6..patch
  * 0002-fs-xfs-Fix-grub_xfs_iterate_dir-return-value-in-case.patch
- Fix "attempt to read of write outside of partition" error message (bsc#1237844)
  * 0003-fs-xfs-fix-large-extent-counters-incompat-feature-su.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348800">- Fix zfs.mo not found message when booting on legacy BIOS (bsc#1237865)
  * 0001-autofs-Ignore-zfs-not-found.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348801">- Pass through PAES cipher as AES on s390x-emu (jsc#PED-10950)
  * 0001-s390x-emu-Pass-through-PAES-cipher-as-AES.patch</changelog>
  <changelog author="mchang@suse.com" date="1741694400">- Update patches for Power guest secure boot with key management (jsc#PED-3520)
  (jsc#PED-9892)
  * 0001-ieee1275-adding-failure-check-condition-on-ibm-secur.patch
  * 0002-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0003-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0004-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0005-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0006-powerpc_ieee1275-set-use_static_keys-flag.patch
  * 0007-appendedsig-Reads-the-default-DB-keys-from-ELF-Note.patch
  * 0008-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0009-appendedsig-documentation.patch
- Remove patches
  * 0001-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0002-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0003-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0004-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0005-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0006-appendedsig-documentation.patch</changelog>
  <changelog author="mchang@suse.com" date="1742212800">- Refresh PPC NVMEoF ofpath related patches to newer revision
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
- Patch refreshed
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch
- Patch obsoleted
  * 0004-ofpath-controller-name-update.patch
  * 0001-squash-ieee1275-ofpath-enable-NVMeoF-logical-device-.patch
- Fix segmentation fault error in grub2-probe with target=hints_string
  (bsc#1235971) (bsc#1235958) (bsc#1239651)
  * 0001-ofpath-Add-error-check-in-NVMEoF-device-translation.patch</changelog>
  <changelog author="mchang@suse.com" date="1745409600">- Fix PPC CAS reboot failure work when initiated via submenu (bsc#1241132)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1746446400">- Fix CVE-2025-4382: TPM auto-decryption data exposure (bsc#1242971)
  * 0001-kern-rescue_reader-Block-the-rescue-mode-until-the-C.patch
  * 0002-commands-search-Introduce-the-cryptodisk-only-argume.patch
  * 0003-disk-diskfilter-Introduce-the-cryptocheck-command.patch
  * 0004-commands-search-Add-the-diskfilter-support.patch
  * 0005-docs-Document-available-crypto-disks-checks.patch
  * 0006-disk-cryptodisk-Add-the-erase-secrets-function.patch
  * 0007-disk-cryptodisk-Wipe-the-passphrase-from-memory.patch
  * 0008-cryptocheck-Add-quiet-option.patch
- patch rebased
  * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch
  * 0004-Key-revocation-on-out-of-bound-file-access.patch
- patch refrehed
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch</changelog>
  <changelog author="mchang@suse.com" date="1747742400">- Fix incorrect nvme disks and boot order in bootlist output (bsc#1237174)
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch</changelog>
  <changelog author="mchang@suse.com" date="1752667200">- Fix test -f and -s do not work properly over the network files served via
  tftp and http (bsc#1246157) (bsc#1246237)
  * 0001-test-Fix-f-test-on-files-over-network.patch
  * 0002-http-Return-HTTP-status-code-in-http_establish.patch
  * 0003-docs-Clarify-test-for-files-on-TFTP-and-HTTP.patch
  * 0004-tftp-Fix-hang-when-file-is-a-directory.patch</changelog>
  <changelog author="glin@suse.com" date="1754049600">- Fix CVE-2024-56738: side-channel attack due to not constant-time
  algorithm in grub_crypto_memcmp (bsc#1234959)
  * grub2-constant-time-grub_crypto_memcmp.patch</changelog>
  <changelog author="mchang@suse.com" date="1754308800">- Skip mount point in grub_find_device function (bsc#1246231)
  * 0001-getroot-Skip-mount-points-in-grub_find_device.patch</changelog>
</package>
<package pkgid="0490aa6945bfc8b4b79a6a536127a11678f5f40edc7fb790496066a23bed9e3e" name="grub2-systemd-sleep-plugin" arch="noarch">
  <version epoch="0" ver="2.12" rel="150700.19.16.1"/>
  <changelog author="mchang@suse.com" date="1730894400">- Fix xen package contains debug_info files with the .module suffix by moving
  them to a separate xen-debug subpackage (bsc#1232573)</changelog>
  <changelog author="mchang@suse.com" date="1731067200">- Do not enable blscfg on s390-emu
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1731067201">- Fix previous change as the variable has to be set earlier
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1731499200">- Revert the patches related to BLS support in grub2-mkconfig, as they are not
  relevant to the current BLS integration and cause issues in older KIWI
  versions, which actively force it to be enabled by default (bsc#1233196)
  * 0002-Add-BLS-support-to-grub-mkconfig.patch
  * 0003-Add-grub2-switch-to-blscfg.patch
  * 0007-grub-switch-to-blscfg-adapt-to-openSUSE.patch
  * 0008-blscfg-reading-bls-fragments-if-boot-present.patch
  * 0009-10_linux-Some-refinement-for-BLS.patch
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1733486400">- Fix missing requires in SLE package (bsc#1234264) (bsc#1234272)</changelog>
  <changelog author="mchang@suse.com" date="1733659200">- Update PowerPC SBAT patches to upstream (bsc#1233730)
  * 0007-grub-mkimage-Create-new-ELF-note-for-SBAT.patch
  * 0008-grub-mkimage-Add-SBAT-metadata-into-ELF-note-for-Pow.patch
- Replaced patches
  * 0007-mkimage-create-new-ELF-Note-for-SBAT.patch
  * 0008-mkimage-adding-sbat-data-into-sbat-ELF-Note-on-power.patch</changelog>
  <changelog author="mchang@suse.com" date="1739448000">- Fix out of memory issue on PowerPC by increasing RMA size (bsc#1236744)
  * 0001-powerpc-increase-MIN-RMA-size-for-CAS-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1739534400">- Security fixes for 2024
  * 0001-misc-Implement-grub_strlcpy.patch
- Fix CVE-2024-45781 (bsc#1233617)
  * 0002-fs-ufs-Fix-a-heap-OOB-write.patch
- Fix CVE-2024-56737 (bsc#1234958)
- Fix CVE-2024-45782 (bsc#1233615)
  * 0003-fs-hfs-Fix-stack-OOB-write-with-grub_strcpy.patch
- Fix CVE-2024-45780 (bsc#1233614)
  * 0004-fs-tar-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2024-45783 (bsc#1233616)
  * 0005-fs-hfsplus-Set-a-grub_errno-if-mount-fails.patch
  * 0006-kern-file-Ensure-file-data-is-set.patch
  * 0007-kern-file-Implement-filesystem-reference-counting.patch
- Fix CVE-2025-0624 (bsc#1236316)
  * 0008-net-Fix-OOB-write-in-grub_net_search_config_file.patch
- Fix CVE-2024-45774 (bsc#1233609)
  * 0009-video-readers-jpeg-Do-not-permit-duplicate-SOF0-mark.patch
- Fix CVE-2024-45775 (bsc#1233610)
  * 0010-commands-extcmd-Missing-check-for-failed-allocation.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0011-commands-pgp-Unregister-the-check_signatures-hooks-o.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0012-normal-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0013-gettext-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2024-45776 (bsc#1233612)
  * 0014-gettext-Integer-overflow-leads-to-heap-OOB-write-or-.patch
- Fix CVE-2024-45777 (bsc#1233613)
  * 0015-gettext-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2025-0690 (bsc#1237012)
  * 0016-commands-read-Fix-an-integer-overflow-when-supplying.patch
- Fix CVE-2025-1118 (bsc#1237013)
  * 0017-commands-minicmd-Block-the-dump-command-in-lockdown-.patch
- Fix CVE-2024-45778 (bsc#1233606)
- Fix CVE-2024-45779 (bsc#1233608)
  * 0018-fs-bfs-Disable-under-lockdown.patch
- Fix CVE-2025-0677 (bsc#1237002)
- Fix CVE-2025-0684 (bsc#1237008)
- Fix CVE-2025-0685 (bsc#1237009)
- Fix CVE-2025-0686 (bsc#1237010)
- Fix CVE-2025-0689 (bsc#1237011)
  * 0019-fs-Disable-many-filesystems-under-lockdown.patch
- Fix CVE-2025-1125 (bsc#1237014)
- Fix CVE-2025-0678 (bsc#1237006)
  * 0020-fs-Prevent-overflows-when-allocating-memory-for-arra.patch
- Updated to upstream version
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch
- Bump upstream SBAT generation to 5</changelog>
  <changelog author="mchang@suse.com" date="1741003200">- Cherry-pick upstream XFS fixes
  * 0001-fs-xfs-Add-new-superblock-features-added-in-Linux-6..patch
  * 0002-fs-xfs-Fix-grub_xfs_iterate_dir-return-value-in-case.patch
- Fix "attempt to read of write outside of partition" error message (bsc#1237844)
  * 0003-fs-xfs-fix-large-extent-counters-incompat-feature-su.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348800">- Fix zfs.mo not found message when booting on legacy BIOS (bsc#1237865)
  * 0001-autofs-Ignore-zfs-not-found.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348801">- Pass through PAES cipher as AES on s390x-emu (jsc#PED-10950)
  * 0001-s390x-emu-Pass-through-PAES-cipher-as-AES.patch</changelog>
  <changelog author="mchang@suse.com" date="1741694400">- Update patches for Power guest secure boot with key management (jsc#PED-3520)
  (jsc#PED-9892)
  * 0001-ieee1275-adding-failure-check-condition-on-ibm-secur.patch
  * 0002-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0003-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0004-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0005-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0006-powerpc_ieee1275-set-use_static_keys-flag.patch
  * 0007-appendedsig-Reads-the-default-DB-keys-from-ELF-Note.patch
  * 0008-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0009-appendedsig-documentation.patch
- Remove patches
  * 0001-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0002-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0003-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0004-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0005-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0006-appendedsig-documentation.patch</changelog>
  <changelog author="mchang@suse.com" date="1742212800">- Refresh PPC NVMEoF ofpath related patches to newer revision
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
- Patch refreshed
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch
- Patch obsoleted
  * 0004-ofpath-controller-name-update.patch
  * 0001-squash-ieee1275-ofpath-enable-NVMeoF-logical-device-.patch
- Fix segmentation fault error in grub2-probe with target=hints_string
  (bsc#1235971) (bsc#1235958) (bsc#1239651)
  * 0001-ofpath-Add-error-check-in-NVMEoF-device-translation.patch</changelog>
  <changelog author="mchang@suse.com" date="1745409600">- Fix PPC CAS reboot failure work when initiated via submenu (bsc#1241132)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1746446400">- Fix CVE-2025-4382: TPM auto-decryption data exposure (bsc#1242971)
  * 0001-kern-rescue_reader-Block-the-rescue-mode-until-the-C.patch
  * 0002-commands-search-Introduce-the-cryptodisk-only-argume.patch
  * 0003-disk-diskfilter-Introduce-the-cryptocheck-command.patch
  * 0004-commands-search-Add-the-diskfilter-support.patch
  * 0005-docs-Document-available-crypto-disks-checks.patch
  * 0006-disk-cryptodisk-Add-the-erase-secrets-function.patch
  * 0007-disk-cryptodisk-Wipe-the-passphrase-from-memory.patch
  * 0008-cryptocheck-Add-quiet-option.patch
- patch rebased
  * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch
  * 0004-Key-revocation-on-out-of-bound-file-access.patch
- patch refrehed
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch</changelog>
  <changelog author="mchang@suse.com" date="1747742400">- Fix incorrect nvme disks and boot order in bootlist output (bsc#1237174)
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch</changelog>
  <changelog author="mchang@suse.com" date="1752667200">- Fix test -f and -s do not work properly over the network files served via
  tftp and http (bsc#1246157) (bsc#1246237)
  * 0001-test-Fix-f-test-on-files-over-network.patch
  * 0002-http-Return-HTTP-status-code-in-http_establish.patch
  * 0003-docs-Clarify-test-for-files-on-TFTP-and-HTTP.patch
  * 0004-tftp-Fix-hang-when-file-is-a-directory.patch</changelog>
  <changelog author="glin@suse.com" date="1754049600">- Fix CVE-2024-56738: side-channel attack due to not constant-time
  algorithm in grub_crypto_memcmp (bsc#1234959)
  * grub2-constant-time-grub_crypto_memcmp.patch</changelog>
  <changelog author="mchang@suse.com" date="1754308800">- Skip mount point in grub_find_device function (bsc#1246231)
  * 0001-getroot-Skip-mount-points-in-grub_find_device.patch</changelog>
  <changelog author="mchang@suse.com" date="1758542400">- Fix boot hangs in setting up serial console when ACPI SPCR table is present
  and redirection is disabled (bsc#1249088)
  * 0001-term-ns8250-spcr-Return-if-redirection-is-disabled.patch</changelog>
</package>
<package pkgid="95f4c155f40ac8c15b005d11567667a304e863b3b0206beb614a5f3fd1e31743" name="grub2-systemd-sleep-plugin" arch="noarch">
  <version epoch="0" ver="2.12" rel="150700.19.19.1"/>
  <changelog author="mchang@suse.com" date="1731067200">- Fix previous change as the variable has to be set earlier
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1731499200">- Revert the patches related to BLS support in grub2-mkconfig, as they are not
  relevant to the current BLS integration and cause issues in older KIWI
  versions, which actively force it to be enabled by default (bsc#1233196)
  * 0002-Add-BLS-support-to-grub-mkconfig.patch
  * 0003-Add-grub2-switch-to-blscfg.patch
  * 0007-grub-switch-to-blscfg-adapt-to-openSUSE.patch
  * 0008-blscfg-reading-bls-fragments-if-boot-present.patch
  * 0009-10_linux-Some-refinement-for-BLS.patch
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1733486400">- Fix missing requires in SLE package (bsc#1234264) (bsc#1234272)</changelog>
  <changelog author="mchang@suse.com" date="1733659200">- Update PowerPC SBAT patches to upstream (bsc#1233730)
  * 0007-grub-mkimage-Create-new-ELF-note-for-SBAT.patch
  * 0008-grub-mkimage-Add-SBAT-metadata-into-ELF-note-for-Pow.patch
- Replaced patches
  * 0007-mkimage-create-new-ELF-Note-for-SBAT.patch
  * 0008-mkimage-adding-sbat-data-into-sbat-ELF-Note-on-power.patch</changelog>
  <changelog author="mchang@suse.com" date="1739448000">- Fix out of memory issue on PowerPC by increasing RMA size (bsc#1236744)
  * 0001-powerpc-increase-MIN-RMA-size-for-CAS-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1739534400">- Security fixes for 2024
  * 0001-misc-Implement-grub_strlcpy.patch
- Fix CVE-2024-45781 (bsc#1233617)
  * 0002-fs-ufs-Fix-a-heap-OOB-write.patch
- Fix CVE-2024-56737 (bsc#1234958)
- Fix CVE-2024-45782 (bsc#1233615)
  * 0003-fs-hfs-Fix-stack-OOB-write-with-grub_strcpy.patch
- Fix CVE-2024-45780 (bsc#1233614)
  * 0004-fs-tar-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2024-45783 (bsc#1233616)
  * 0005-fs-hfsplus-Set-a-grub_errno-if-mount-fails.patch
  * 0006-kern-file-Ensure-file-data-is-set.patch
  * 0007-kern-file-Implement-filesystem-reference-counting.patch
- Fix CVE-2025-0624 (bsc#1236316)
  * 0008-net-Fix-OOB-write-in-grub_net_search_config_file.patch
- Fix CVE-2024-45774 (bsc#1233609)
  * 0009-video-readers-jpeg-Do-not-permit-duplicate-SOF0-mark.patch
- Fix CVE-2024-45775 (bsc#1233610)
  * 0010-commands-extcmd-Missing-check-for-failed-allocation.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0011-commands-pgp-Unregister-the-check_signatures-hooks-o.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0012-normal-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0013-gettext-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2024-45776 (bsc#1233612)
  * 0014-gettext-Integer-overflow-leads-to-heap-OOB-write-or-.patch
- Fix CVE-2024-45777 (bsc#1233613)
  * 0015-gettext-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2025-0690 (bsc#1237012)
  * 0016-commands-read-Fix-an-integer-overflow-when-supplying.patch
- Fix CVE-2025-1118 (bsc#1237013)
  * 0017-commands-minicmd-Block-the-dump-command-in-lockdown-.patch
- Fix CVE-2024-45778 (bsc#1233606)
- Fix CVE-2024-45779 (bsc#1233608)
  * 0018-fs-bfs-Disable-under-lockdown.patch
- Fix CVE-2025-0677 (bsc#1237002)
- Fix CVE-2025-0684 (bsc#1237008)
- Fix CVE-2025-0685 (bsc#1237009)
- Fix CVE-2025-0686 (bsc#1237010)
- Fix CVE-2025-0689 (bsc#1237011)
  * 0019-fs-Disable-many-filesystems-under-lockdown.patch
- Fix CVE-2025-1125 (bsc#1237014)
- Fix CVE-2025-0678 (bsc#1237006)
  * 0020-fs-Prevent-overflows-when-allocating-memory-for-arra.patch
- Updated to upstream version
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch
- Bump upstream SBAT generation to 5</changelog>
  <changelog author="mchang@suse.com" date="1741003200">- Cherry-pick upstream XFS fixes
  * 0001-fs-xfs-Add-new-superblock-features-added-in-Linux-6..patch
  * 0002-fs-xfs-Fix-grub_xfs_iterate_dir-return-value-in-case.patch
- Fix "attempt to read of write outside of partition" error message (bsc#1237844)
  * 0003-fs-xfs-fix-large-extent-counters-incompat-feature-su.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348800">- Fix zfs.mo not found message when booting on legacy BIOS (bsc#1237865)
  * 0001-autofs-Ignore-zfs-not-found.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348801">- Pass through PAES cipher as AES on s390x-emu (jsc#PED-10950)
  * 0001-s390x-emu-Pass-through-PAES-cipher-as-AES.patch</changelog>
  <changelog author="mchang@suse.com" date="1741694400">- Update patches for Power guest secure boot with key management (jsc#PED-3520)
  (jsc#PED-9892)
  * 0001-ieee1275-adding-failure-check-condition-on-ibm-secur.patch
  * 0002-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0003-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0004-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0005-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0006-powerpc_ieee1275-set-use_static_keys-flag.patch
  * 0007-appendedsig-Reads-the-default-DB-keys-from-ELF-Note.patch
  * 0008-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0009-appendedsig-documentation.patch
- Remove patches
  * 0001-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0002-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0003-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0004-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0005-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0006-appendedsig-documentation.patch</changelog>
  <changelog author="mchang@suse.com" date="1742212800">- Refresh PPC NVMEoF ofpath related patches to newer revision
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
- Patch refreshed
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch
- Patch obsoleted
  * 0004-ofpath-controller-name-update.patch
  * 0001-squash-ieee1275-ofpath-enable-NVMeoF-logical-device-.patch
- Fix segmentation fault error in grub2-probe with target=hints_string
  (bsc#1235971) (bsc#1235958) (bsc#1239651)
  * 0001-ofpath-Add-error-check-in-NVMEoF-device-translation.patch</changelog>
  <changelog author="mchang@suse.com" date="1745409600">- Fix PPC CAS reboot failure work when initiated via submenu (bsc#1241132)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1746446400">- Fix CVE-2025-4382: TPM auto-decryption data exposure (bsc#1242971)
  * 0001-kern-rescue_reader-Block-the-rescue-mode-until-the-C.patch
  * 0002-commands-search-Introduce-the-cryptodisk-only-argume.patch
  * 0003-disk-diskfilter-Introduce-the-cryptocheck-command.patch
  * 0004-commands-search-Add-the-diskfilter-support.patch
  * 0005-docs-Document-available-crypto-disks-checks.patch
  * 0006-disk-cryptodisk-Add-the-erase-secrets-function.patch
  * 0007-disk-cryptodisk-Wipe-the-passphrase-from-memory.patch
  * 0008-cryptocheck-Add-quiet-option.patch
- patch rebased
  * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch
  * 0004-Key-revocation-on-out-of-bound-file-access.patch
- patch refrehed
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch</changelog>
  <changelog author="mchang@suse.com" date="1747742400">- Fix incorrect nvme disks and boot order in bootlist output (bsc#1237174)
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch</changelog>
  <changelog author="mchang@suse.com" date="1752667200">- Fix test -f and -s do not work properly over the network files served via
  tftp and http (bsc#1246157) (bsc#1246237)
  * 0001-test-Fix-f-test-on-files-over-network.patch
  * 0002-http-Return-HTTP-status-code-in-http_establish.patch
  * 0003-docs-Clarify-test-for-files-on-TFTP-and-HTTP.patch
  * 0004-tftp-Fix-hang-when-file-is-a-directory.patch</changelog>
  <changelog author="glin@suse.com" date="1754049600">- Fix CVE-2024-56738: side-channel attack due to not constant-time
  algorithm in grub_crypto_memcmp (bsc#1234959)
  * grub2-constant-time-grub_crypto_memcmp.patch</changelog>
  <changelog author="mchang@suse.com" date="1754308800">- Skip mount point in grub_find_device function (bsc#1246231)
  * 0001-getroot-Skip-mount-points-in-grub_find_device.patch</changelog>
  <changelog author="mchang@suse.com" date="1758542400">- Fix boot hangs in setting up serial console when ACPI SPCR table is present
  and redirection is disabled (bsc#1249088)
  * 0001-term-ns8250-spcr-Return-if-redirection-is-disabled.patch</changelog>
  <changelog author="mchang@suse.com" date="1761048000">- Fix timeout when loading initrd via http after PPC CAS reboot (bsc#1245953)
  * 0001-tcp-Fix-TCP-port-number-reused-on-reboot.patch</changelog>
  <changelog author="mchang@suse.com" date="1762948800">- Fix CVE-2025-54771 (bsc#1252931)
  * 0001-kern-file-Call-grub_dl_unref-after-fs-fs_close.patch
- Fix CVE-2025-54770 (bsc#1252930)
  * 0002-net-net-Unregister-net_set_vlan-command-on-unload.patch
- Fix CVE-2025-61662 (bsc#1252933)
  * 0003-gettext-gettext-Unregister-gettext-command-on-module.patch
- Fix CVE-2025-61663 (bsc#1252934)
- Fix CVE-2025-61664 (bsc#1252935)
  * 0004-normal-main-Unregister-commands-on-module-unload.patch
  * 0005-tests-lib-functional_test-Unregister-commands-on-mod.patch
- Fix CVE-2025-61661 (bsc#1252932)
  * 0006-commands-usbtest-Use-correct-string-length-field.patch
  * 0007-commands-usbtest-Ensure-string-length-is-sufficient-.patch
- Bump upstream SBAT generation to 6</changelog>
</package>
<package pkgid="59279997943b86db5e429d17aa3e52fbdabd94e6623b903c69e7d09799103349" name="grub2-systemd-sleep-plugin" arch="noarch">
  <version epoch="0" ver="2.12" rel="150700.19.26.1"/>
  <changelog author="mchang@suse.com" date="1733659200">- Update PowerPC SBAT patches to upstream (bsc#1233730)
  * 0007-grub-mkimage-Create-new-ELF-note-for-SBAT.patch
  * 0008-grub-mkimage-Add-SBAT-metadata-into-ELF-note-for-Pow.patch
- Replaced patches
  * 0007-mkimage-create-new-ELF-Note-for-SBAT.patch
  * 0008-mkimage-adding-sbat-data-into-sbat-ELF-Note-on-power.patch</changelog>
  <changelog author="mchang@suse.com" date="1739448000">- Fix out of memory issue on PowerPC by increasing RMA size (bsc#1236744)
  * 0001-powerpc-increase-MIN-RMA-size-for-CAS-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1739534400">- Security fixes for 2024
  * 0001-misc-Implement-grub_strlcpy.patch
- Fix CVE-2024-45781 (bsc#1233617)
  * 0002-fs-ufs-Fix-a-heap-OOB-write.patch
- Fix CVE-2024-56737 (bsc#1234958)
- Fix CVE-2024-45782 (bsc#1233615)
  * 0003-fs-hfs-Fix-stack-OOB-write-with-grub_strcpy.patch
- Fix CVE-2024-45780 (bsc#1233614)
  * 0004-fs-tar-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2024-45783 (bsc#1233616)
  * 0005-fs-hfsplus-Set-a-grub_errno-if-mount-fails.patch
  * 0006-kern-file-Ensure-file-data-is-set.patch
  * 0007-kern-file-Implement-filesystem-reference-counting.patch
- Fix CVE-2025-0624 (bsc#1236316)
  * 0008-net-Fix-OOB-write-in-grub_net_search_config_file.patch
- Fix CVE-2024-45774 (bsc#1233609)
  * 0009-video-readers-jpeg-Do-not-permit-duplicate-SOF0-mark.patch
- Fix CVE-2024-45775 (bsc#1233610)
  * 0010-commands-extcmd-Missing-check-for-failed-allocation.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0011-commands-pgp-Unregister-the-check_signatures-hooks-o.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0012-normal-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0013-gettext-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2024-45776 (bsc#1233612)
  * 0014-gettext-Integer-overflow-leads-to-heap-OOB-write-or-.patch
- Fix CVE-2024-45777 (bsc#1233613)
  * 0015-gettext-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2025-0690 (bsc#1237012)
  * 0016-commands-read-Fix-an-integer-overflow-when-supplying.patch
- Fix CVE-2025-1118 (bsc#1237013)
  * 0017-commands-minicmd-Block-the-dump-command-in-lockdown-.patch
- Fix CVE-2024-45778 (bsc#1233606)
- Fix CVE-2024-45779 (bsc#1233608)
  * 0018-fs-bfs-Disable-under-lockdown.patch
- Fix CVE-2025-0677 (bsc#1237002)
- Fix CVE-2025-0684 (bsc#1237008)
- Fix CVE-2025-0685 (bsc#1237009)
- Fix CVE-2025-0686 (bsc#1237010)
- Fix CVE-2025-0689 (bsc#1237011)
  * 0019-fs-Disable-many-filesystems-under-lockdown.patch
- Fix CVE-2025-1125 (bsc#1237014)
- Fix CVE-2025-0678 (bsc#1237006)
  * 0020-fs-Prevent-overflows-when-allocating-memory-for-arra.patch
- Updated to upstream version
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch
- Bump upstream SBAT generation to 5</changelog>
  <changelog author="mchang@suse.com" date="1741003200">- Cherry-pick upstream XFS fixes
  * 0001-fs-xfs-Add-new-superblock-features-added-in-Linux-6..patch
  * 0002-fs-xfs-Fix-grub_xfs_iterate_dir-return-value-in-case.patch
- Fix "attempt to read of write outside of partition" error message (bsc#1237844)
  * 0003-fs-xfs-fix-large-extent-counters-incompat-feature-su.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348800">- Fix zfs.mo not found message when booting on legacy BIOS (bsc#1237865)
  * 0001-autofs-Ignore-zfs-not-found.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348801">- Pass through PAES cipher as AES on s390x-emu (jsc#PED-10950)
  * 0001-s390x-emu-Pass-through-PAES-cipher-as-AES.patch</changelog>
  <changelog author="mchang@suse.com" date="1741694400">- Update patches for Power guest secure boot with key management (jsc#PED-3520)
  (jsc#PED-9892)
  * 0001-ieee1275-adding-failure-check-condition-on-ibm-secur.patch
  * 0002-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0003-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0004-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0005-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0006-powerpc_ieee1275-set-use_static_keys-flag.patch
  * 0007-appendedsig-Reads-the-default-DB-keys-from-ELF-Note.patch
  * 0008-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0009-appendedsig-documentation.patch
- Remove patches
  * 0001-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0002-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0003-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0004-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0005-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0006-appendedsig-documentation.patch</changelog>
  <changelog author="mchang@suse.com" date="1742212800">- Refresh PPC NVMEoF ofpath related patches to newer revision
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
- Patch refreshed
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch
- Patch obsoleted
  * 0004-ofpath-controller-name-update.patch
  * 0001-squash-ieee1275-ofpath-enable-NVMeoF-logical-device-.patch
- Fix segmentation fault error in grub2-probe with target=hints_string
  (bsc#1235971) (bsc#1235958) (bsc#1239651)
  * 0001-ofpath-Add-error-check-in-NVMEoF-device-translation.patch</changelog>
  <changelog author="mchang@suse.com" date="1745409600">- Fix PPC CAS reboot failure work when initiated via submenu (bsc#1241132)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1746446400">- Fix CVE-2025-4382: TPM auto-decryption data exposure (bsc#1242971)
  * 0001-kern-rescue_reader-Block-the-rescue-mode-until-the-C.patch
  * 0002-commands-search-Introduce-the-cryptodisk-only-argume.patch
  * 0003-disk-diskfilter-Introduce-the-cryptocheck-command.patch
  * 0004-commands-search-Add-the-diskfilter-support.patch
  * 0005-docs-Document-available-crypto-disks-checks.patch
  * 0006-disk-cryptodisk-Add-the-erase-secrets-function.patch
  * 0007-disk-cryptodisk-Wipe-the-passphrase-from-memory.patch
  * 0008-cryptocheck-Add-quiet-option.patch
- patch rebased
  * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch
  * 0004-Key-revocation-on-out-of-bound-file-access.patch
- patch refrehed
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch</changelog>
  <changelog author="mchang@suse.com" date="1747742400">- Fix incorrect nvme disks and boot order in bootlist output (bsc#1237174)
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch</changelog>
  <changelog author="mchang@suse.com" date="1752667200">- Fix test -f and -s do not work properly over the network files served via
  tftp and http (bsc#1246157) (bsc#1246237)
  * 0001-test-Fix-f-test-on-files-over-network.patch
  * 0002-http-Return-HTTP-status-code-in-http_establish.patch
  * 0003-docs-Clarify-test-for-files-on-TFTP-and-HTTP.patch
  * 0004-tftp-Fix-hang-when-file-is-a-directory.patch</changelog>
  <changelog author="glin@suse.com" date="1754049600">- Fix CVE-2024-56738: side-channel attack due to not constant-time
  algorithm in grub_crypto_memcmp (bsc#1234959)
  * grub2-constant-time-grub_crypto_memcmp.patch</changelog>
  <changelog author="mchang@suse.com" date="1754308800">- Skip mount point in grub_find_device function (bsc#1246231)
  * 0001-getroot-Skip-mount-points-in-grub_find_device.patch</changelog>
  <changelog author="mchang@suse.com" date="1758542400">- Fix boot hangs in setting up serial console when ACPI SPCR table is present
  and redirection is disabled (bsc#1249088)
  * 0001-term-ns8250-spcr-Return-if-redirection-is-disabled.patch</changelog>
  <changelog author="mchang@suse.com" date="1761048000">- Fix timeout when loading initrd via http after PPC CAS reboot (bsc#1245953)
  * 0001-tcp-Fix-TCP-port-number-reused-on-reboot.patch</changelog>
  <changelog author="mchang@suse.com" date="1762948800">- Fix CVE-2025-54771 (bsc#1252931)
  * 0001-kern-file-Call-grub_dl_unref-after-fs-fs_close.patch
- Fix CVE-2025-54770 (bsc#1252930)
  * 0002-net-net-Unregister-net_set_vlan-command-on-unload.patch
- Fix CVE-2025-61662 (bsc#1252933)
  * 0003-gettext-gettext-Unregister-gettext-command-on-module.patch
- Fix CVE-2025-61663 (bsc#1252934)
- Fix CVE-2025-61664 (bsc#1252935)
  * 0004-normal-main-Unregister-commands-on-module-unload.patch
  * 0005-tests-lib-functional_test-Unregister-commands-on-mod.patch
- Fix CVE-2025-61661 (bsc#1252932)
  * 0006-commands-usbtest-Use-correct-string-length-field.patch
  * 0007-commands-usbtest-Ensure-string-length-is-sufficient-.patch
- Bump upstream SBAT generation to 6</changelog>
  <changelog author="mchang@suse.com" date="1770638400">- Fix error "grub-core/script/lexer.c:352:out of memory" after PowerPC CAS
  Reboot (bsc#1254299)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1770811200">- Backport upstream's commit to prevent BIOS assert (bsc#1258022)
  * 0001-kern-efi-mm-Change-grub_efi_mm_add_regions-to-keep-t.patch</changelog>
  <changelog author="mchang@suse.com" date="1771934400">- Support dm multipath bootlist on PowerPC (bsc#1254415)
  * 0001-ieee1275-support-dm-multipath-bootlist.patch</changelog>
</package>
<package pkgid="d5dcff86b529c075805adf560e52b8dfd36223e2d5511cd56d13f779ad2c7ed7" name="grub2-systemd-sleep-plugin" arch="noarch">
  <version epoch="0" ver="2.12" rel="150700.19.29.1"/>
  <changelog author="mchang@suse.com" date="1741003200">- Cherry-pick upstream XFS fixes
  * 0001-fs-xfs-Add-new-superblock-features-added-in-Linux-6..patch
  * 0002-fs-xfs-Fix-grub_xfs_iterate_dir-return-value-in-case.patch
- Fix "attempt to read of write outside of partition" error message (bsc#1237844)
  * 0003-fs-xfs-fix-large-extent-counters-incompat-feature-su.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348800">- Fix zfs.mo not found message when booting on legacy BIOS (bsc#1237865)
  * 0001-autofs-Ignore-zfs-not-found.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348801">- Pass through PAES cipher as AES on s390x-emu (jsc#PED-10950)
  * 0001-s390x-emu-Pass-through-PAES-cipher-as-AES.patch</changelog>
  <changelog author="mchang@suse.com" date="1741694400">- Update patches for Power guest secure boot with key management (jsc#PED-3520)
  (jsc#PED-9892)
  * 0001-ieee1275-adding-failure-check-condition-on-ibm-secur.patch
  * 0002-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0003-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0004-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0005-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0006-powerpc_ieee1275-set-use_static_keys-flag.patch
  * 0007-appendedsig-Reads-the-default-DB-keys-from-ELF-Note.patch
  * 0008-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0009-appendedsig-documentation.patch
- Remove patches
  * 0001-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0002-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0003-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0004-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0005-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0006-appendedsig-documentation.patch</changelog>
  <changelog author="mchang@suse.com" date="1742212800">- Refresh PPC NVMEoF ofpath related patches to newer revision
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
- Patch refreshed
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch
- Patch obsoleted
  * 0004-ofpath-controller-name-update.patch
  * 0001-squash-ieee1275-ofpath-enable-NVMeoF-logical-device-.patch
- Fix segmentation fault error in grub2-probe with target=hints_string
  (bsc#1235971) (bsc#1235958) (bsc#1239651)
  * 0001-ofpath-Add-error-check-in-NVMEoF-device-translation.patch</changelog>
  <changelog author="mchang@suse.com" date="1745409600">- Fix PPC CAS reboot failure work when initiated via submenu (bsc#1241132)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1746446400">- Fix CVE-2025-4382: TPM auto-decryption data exposure (bsc#1242971)
  * 0001-kern-rescue_reader-Block-the-rescue-mode-until-the-C.patch
  * 0002-commands-search-Introduce-the-cryptodisk-only-argume.patch
  * 0003-disk-diskfilter-Introduce-the-cryptocheck-command.patch
  * 0004-commands-search-Add-the-diskfilter-support.patch
  * 0005-docs-Document-available-crypto-disks-checks.patch
  * 0006-disk-cryptodisk-Add-the-erase-secrets-function.patch
  * 0007-disk-cryptodisk-Wipe-the-passphrase-from-memory.patch
  * 0008-cryptocheck-Add-quiet-option.patch
- patch rebased
  * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch
  * 0004-Key-revocation-on-out-of-bound-file-access.patch
- patch refrehed
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch</changelog>
  <changelog author="mchang@suse.com" date="1747742400">- Fix incorrect nvme disks and boot order in bootlist output (bsc#1237174)
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch</changelog>
  <changelog author="mchang@suse.com" date="1752667200">- Fix test -f and -s do not work properly over the network files served via
  tftp and http (bsc#1246157) (bsc#1246237)
  * 0001-test-Fix-f-test-on-files-over-network.patch
  * 0002-http-Return-HTTP-status-code-in-http_establish.patch
  * 0003-docs-Clarify-test-for-files-on-TFTP-and-HTTP.patch
  * 0004-tftp-Fix-hang-when-file-is-a-directory.patch</changelog>
  <changelog author="glin@suse.com" date="1754049600">- Fix CVE-2024-56738: side-channel attack due to not constant-time
  algorithm in grub_crypto_memcmp (bsc#1234959)
  * grub2-constant-time-grub_crypto_memcmp.patch</changelog>
  <changelog author="mchang@suse.com" date="1754308800">- Skip mount point in grub_find_device function (bsc#1246231)
  * 0001-getroot-Skip-mount-points-in-grub_find_device.patch</changelog>
  <changelog author="mchang@suse.com" date="1758542400">- Fix boot hangs in setting up serial console when ACPI SPCR table is present
  and redirection is disabled (bsc#1249088)
  * 0001-term-ns8250-spcr-Return-if-redirection-is-disabled.patch</changelog>
  <changelog author="mchang@suse.com" date="1761048000">- Fix timeout when loading initrd via http after PPC CAS reboot (bsc#1245953)
  * 0001-tcp-Fix-TCP-port-number-reused-on-reboot.patch</changelog>
  <changelog author="mchang@suse.com" date="1762948800">- Fix CVE-2025-54771 (bsc#1252931)
  * 0001-kern-file-Call-grub_dl_unref-after-fs-fs_close.patch
- Fix CVE-2025-54770 (bsc#1252930)
  * 0002-net-net-Unregister-net_set_vlan-command-on-unload.patch
- Fix CVE-2025-61662 (bsc#1252933)
  * 0003-gettext-gettext-Unregister-gettext-command-on-module.patch
- Fix CVE-2025-61663 (bsc#1252934)
- Fix CVE-2025-61664 (bsc#1252935)
  * 0004-normal-main-Unregister-commands-on-module-unload.patch
  * 0005-tests-lib-functional_test-Unregister-commands-on-mod.patch
- Fix CVE-2025-61661 (bsc#1252932)
  * 0006-commands-usbtest-Use-correct-string-length-field.patch
  * 0007-commands-usbtest-Ensure-string-length-is-sufficient-.patch
- Bump upstream SBAT generation to 6</changelog>
  <changelog author="mchang@suse.com" date="1770638400">- Fix error "grub-core/script/lexer.c:352:out of memory" after PowerPC CAS
  Reboot (bsc#1254299)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1770811200">- Backport upstream's commit to prevent BIOS assert (bsc#1258022)
  * 0001-kern-efi-mm-Change-grub_efi_mm_add_regions-to-keep-t.patch</changelog>
  <changelog author="mchang@suse.com" date="1771934400">- Support dm multipath bootlist on PowerPC (bsc#1254415)
  * 0001-ieee1275-support-dm-multipath-bootlist.patch</changelog>
  <changelog author="mchang@suse.com" date="1775563200">- Fix double free in xen booting if root filesystem is Btrfs (bsc#1259543)
  * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  * grub2-btrfs-09-get-default-subvolume.patch</changelog>
  <changelog author="mchang@suse.com" date="1775736000">- Fix PowerPC network boot prefix to correctly locate grub.cfg (bsc#1249385)
  * 0001-ieee1275-Use-net-config-for-boot-location-instead-of.patch</changelog>
  <changelog author="mchang@suse.com" date="1776081600">- Fix missing install device check in grub2-install on PowerPC which could lead
  to bootlist corruption (bsc#1221126)
  * 0001-Mandatory-install-device-check-for-PowerPC.patch</changelog>
</package>
<package pkgid="101c4f3d4b287c5da6abde9abc9e9e1e60223f5a1fcbcbe2aed052ef7130ed96" name="grub2-systemd-sleep-plugin" arch="noarch">
  <version epoch="0" ver="2.12" rel="150700.19.3.1"/>
  <changelog author="mchang@suse.com" date="1729684800">- Fix error: /boot/grub2/x86_64-efi/bli.mod not found (bsc#1231591)</changelog>
  <changelog author="mchang@suse.com" date="1730289600">- Enable support of Radix, Xive and Radix_gtse on Power (jsc#PED-9881)
  * 0001-kern-ieee1275-init-Add-IEEE-1275-Radix-support-for-K.patch</changelog>
  <changelog author="mchang@suse.com" date="1730289601">- Fix CVE-2024-49504 (bsc#1229163) (bsc#1229164)
- Restrict CLI access if the encrypted root device is automatically unlocked by
  the TPM. LUKS password authentication is required for access to be granted
  * 0001-cli_lock-Add-build-option-to-block-command-line-inte.patch
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch
- Obsolete, as CLI access is now locked and granted access no longer requires
  the previous restrictions
  * 0002-Restrict-file-access-on-cryptodisk-print.patch
  * 0003-Restrict-ls-and-auto-file-completion-on-cryptodisk-p.patch
- Rediff
  * 0004-Key-revocation-on-out-of-bound-file-access.patch</changelog>
  <changelog author="mchang@suse.com" date="1730462400">- Fix grub.cfg is loaded from an unexpected fallback directory instead of the
  root directory during PXE boot when grub is loaded from the tftp root
  directory (bsc#1232391)
  * 0001-kern-main-Fix-cmdpath-in-root-directory.patch
  * grub2.spec: Refine PPC grub.elf early config to derive root from cmdpath
    directly, avoiding the unneeded search</changelog>
  <changelog author="mchang@suse.com" date="1730894400">- Fix xen package contains debug_info files with the .module suffix by moving
  them to a separate xen-debug subpackage (bsc#1232573)</changelog>
  <changelog author="mchang@suse.com" date="1731067200">- Do not enable blscfg on s390-emu
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1731067201">- Fix previous change as the variable has to be set earlier
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1731499200">- Revert the patches related to BLS support in grub2-mkconfig, as they are not
  relevant to the current BLS integration and cause issues in older KIWI
  versions, which actively force it to be enabled by default (bsc#1233196)
  * 0002-Add-BLS-support-to-grub-mkconfig.patch
  * 0003-Add-grub2-switch-to-blscfg.patch
  * 0007-grub-switch-to-blscfg-adapt-to-openSUSE.patch
  * 0008-blscfg-reading-bls-fragments-if-boot-present.patch
  * 0009-10_linux-Some-refinement-for-BLS.patch
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1733486400">- Fix missing requires in SLE package (bsc#1234264) (bsc#1234272)</changelog>
  <changelog author="mchang@suse.com" date="1733659200">- Update PowerPC SBAT patches to upstream (bsc#1233730)
  * 0007-grub-mkimage-Create-new-ELF-note-for-SBAT.patch
  * 0008-grub-mkimage-Add-SBAT-metadata-into-ELF-note-for-Pow.patch
- Replaced patches
  * 0007-mkimage-create-new-ELF-Note-for-SBAT.patch
  * 0008-mkimage-adding-sbat-data-into-sbat-ELF-Note-on-power.patch</changelog>
  <changelog author="mchang@suse.com" date="1739448000">- Fix out of memory issue on PowerPC by increasing RMA size (bsc#1236744)
  * 0001-powerpc-increase-MIN-RMA-size-for-CAS-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1739534400">- Security fixes for 2024
  * 0001-misc-Implement-grub_strlcpy.patch
- Fix CVE-2024-45781 (bsc#1233617)
  * 0002-fs-ufs-Fix-a-heap-OOB-write.patch
- Fix CVE-2024-56737 (bsc#1234958)
- Fix CVE-2024-45782 (bsc#1233615)
  * 0003-fs-hfs-Fix-stack-OOB-write-with-grub_strcpy.patch
- Fix CVE-2024-45780 (bsc#1233614)
  * 0004-fs-tar-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2024-45783 (bsc#1233616)
  * 0005-fs-hfsplus-Set-a-grub_errno-if-mount-fails.patch
  * 0006-kern-file-Ensure-file-data-is-set.patch
  * 0007-kern-file-Implement-filesystem-reference-counting.patch
- Fix CVE-2025-0624 (bsc#1236316)
  * 0008-net-Fix-OOB-write-in-grub_net_search_config_file.patch
- Fix CVE-2024-45774 (bsc#1233609)
  * 0009-video-readers-jpeg-Do-not-permit-duplicate-SOF0-mark.patch
- Fix CVE-2024-45775 (bsc#1233610)
  * 0010-commands-extcmd-Missing-check-for-failed-allocation.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0011-commands-pgp-Unregister-the-check_signatures-hooks-o.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0012-normal-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0013-gettext-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2024-45776 (bsc#1233612)
  * 0014-gettext-Integer-overflow-leads-to-heap-OOB-write-or-.patch
- Fix CVE-2024-45777 (bsc#1233613)
  * 0015-gettext-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2025-0690 (bsc#1237012)
  * 0016-commands-read-Fix-an-integer-overflow-when-supplying.patch
- Fix CVE-2025-1118 (bsc#1237013)
  * 0017-commands-minicmd-Block-the-dump-command-in-lockdown-.patch
- Fix CVE-2024-45778 (bsc#1233606)
- Fix CVE-2024-45779 (bsc#1233608)
  * 0018-fs-bfs-Disable-under-lockdown.patch
- Fix CVE-2025-0677 (bsc#1237002)
- Fix CVE-2025-0684 (bsc#1237008)
- Fix CVE-2025-0685 (bsc#1237009)
- Fix CVE-2025-0686 (bsc#1237010)
- Fix CVE-2025-0689 (bsc#1237011)
  * 0019-fs-Disable-many-filesystems-under-lockdown.patch
- Fix CVE-2025-1125 (bsc#1237014)
- Fix CVE-2025-0678 (bsc#1237006)
  * 0020-fs-Prevent-overflows-when-allocating-memory-for-arra.patch
- Updated to upstream version
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch
- Bump upstream SBAT generation to 5</changelog>
  <changelog author="mchang@suse.com" date="1741003200">- Cherry-pick upstream XFS fixes
  * 0001-fs-xfs-Add-new-superblock-features-added-in-Linux-6..patch
  * 0002-fs-xfs-Fix-grub_xfs_iterate_dir-return-value-in-case.patch
- Fix "attempt to read of write outside of partition" error message (bsc#1237844)
  * 0003-fs-xfs-fix-large-extent-counters-incompat-feature-su.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348800">- Fix zfs.mo not found message when booting on legacy BIOS (bsc#1237865)
  * 0001-autofs-Ignore-zfs-not-found.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348801">- Pass through PAES cipher as AES on s390x-emu (jsc#PED-10950)
  * 0001-s390x-emu-Pass-through-PAES-cipher-as-AES.patch</changelog>
  <changelog author="mchang@suse.com" date="1741694400">- Update patches for Power guest secure boot with key management (jsc#PED-3520)
  (jsc#PED-9892)
  * 0001-ieee1275-adding-failure-check-condition-on-ibm-secur.patch
  * 0002-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0003-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0004-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0005-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0006-powerpc_ieee1275-set-use_static_keys-flag.patch
  * 0007-appendedsig-Reads-the-default-DB-keys-from-ELF-Note.patch
  * 0008-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0009-appendedsig-documentation.patch
- Remove patches
  * 0001-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0002-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0003-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0004-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0005-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0006-appendedsig-documentation.patch</changelog>
  <changelog author="mchang@suse.com" date="1742212800">- Refresh PPC NVMEoF ofpath related patches to newer revision
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
- Patch refreshed
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch
- Patch obsoleted
  * 0004-ofpath-controller-name-update.patch
  * 0001-squash-ieee1275-ofpath-enable-NVMeoF-logical-device-.patch
- Fix segmentation fault error in grub2-probe with target=hints_string
  (bsc#1235971) (bsc#1235958) (bsc#1239651)
  * 0001-ofpath-Add-error-check-in-NVMEoF-device-translation.patch</changelog>
  <changelog author="mchang@suse.com" date="1745409600">- Fix PPC CAS reboot failure work when initiated via submenu (bsc#1241132)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1746446400">- Fix CVE-2025-4382: TPM auto-decryption data exposure (bsc#1242971)
  * 0001-kern-rescue_reader-Block-the-rescue-mode-until-the-C.patch
  * 0002-commands-search-Introduce-the-cryptodisk-only-argume.patch
  * 0003-disk-diskfilter-Introduce-the-cryptocheck-command.patch
  * 0004-commands-search-Add-the-diskfilter-support.patch
  * 0005-docs-Document-available-crypto-disks-checks.patch
  * 0006-disk-cryptodisk-Add-the-erase-secrets-function.patch
  * 0007-disk-cryptodisk-Wipe-the-passphrase-from-memory.patch
  * 0008-cryptocheck-Add-quiet-option.patch
- patch rebased
  * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch
  * 0004-Key-revocation-on-out-of-bound-file-access.patch
- patch refrehed
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch</changelog>
  <changelog author="mchang@suse.com" date="1747742400">- Fix incorrect nvme disks and boot order in bootlist output (bsc#1237174)
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch</changelog>
</package>
<package pkgid="c66787a19e5ff79ef2c898d56072e3913893cb8d3937c07c0ca69f10241a3df6" name="grub2-x86_64-efi" arch="noarch">
  <version epoch="0" ver="2.12" rel="150700.19.13.2"/>
  <changelog author="mchang@suse.com" date="1730462400">- Fix grub.cfg is loaded from an unexpected fallback directory instead of the
  root directory during PXE boot when grub is loaded from the tftp root
  directory (bsc#1232391)
  * 0001-kern-main-Fix-cmdpath-in-root-directory.patch
  * grub2.spec: Refine PPC grub.elf early config to derive root from cmdpath
    directly, avoiding the unneeded search</changelog>
  <changelog author="mchang@suse.com" date="1730894400">- Fix xen package contains debug_info files with the .module suffix by moving
  them to a separate xen-debug subpackage (bsc#1232573)</changelog>
  <changelog author="mchang@suse.com" date="1731067200">- Do not enable blscfg on s390-emu
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1731067201">- Fix previous change as the variable has to be set earlier
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1731499200">- Revert the patches related to BLS support in grub2-mkconfig, as they are not
  relevant to the current BLS integration and cause issues in older KIWI
  versions, which actively force it to be enabled by default (bsc#1233196)
  * 0002-Add-BLS-support-to-grub-mkconfig.patch
  * 0003-Add-grub2-switch-to-blscfg.patch
  * 0007-grub-switch-to-blscfg-adapt-to-openSUSE.patch
  * 0008-blscfg-reading-bls-fragments-if-boot-present.patch
  * 0009-10_linux-Some-refinement-for-BLS.patch
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1733486400">- Fix missing requires in SLE package (bsc#1234264) (bsc#1234272)</changelog>
  <changelog author="mchang@suse.com" date="1733659200">- Update PowerPC SBAT patches to upstream (bsc#1233730)
  * 0007-grub-mkimage-Create-new-ELF-note-for-SBAT.patch
  * 0008-grub-mkimage-Add-SBAT-metadata-into-ELF-note-for-Pow.patch
- Replaced patches
  * 0007-mkimage-create-new-ELF-Note-for-SBAT.patch
  * 0008-mkimage-adding-sbat-data-into-sbat-ELF-Note-on-power.patch</changelog>
  <changelog author="mchang@suse.com" date="1739448000">- Fix out of memory issue on PowerPC by increasing RMA size (bsc#1236744)
  * 0001-powerpc-increase-MIN-RMA-size-for-CAS-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1739534400">- Security fixes for 2024
  * 0001-misc-Implement-grub_strlcpy.patch
- Fix CVE-2024-45781 (bsc#1233617)
  * 0002-fs-ufs-Fix-a-heap-OOB-write.patch
- Fix CVE-2024-56737 (bsc#1234958)
- Fix CVE-2024-45782 (bsc#1233615)
  * 0003-fs-hfs-Fix-stack-OOB-write-with-grub_strcpy.patch
- Fix CVE-2024-45780 (bsc#1233614)
  * 0004-fs-tar-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2024-45783 (bsc#1233616)
  * 0005-fs-hfsplus-Set-a-grub_errno-if-mount-fails.patch
  * 0006-kern-file-Ensure-file-data-is-set.patch
  * 0007-kern-file-Implement-filesystem-reference-counting.patch
- Fix CVE-2025-0624 (bsc#1236316)
  * 0008-net-Fix-OOB-write-in-grub_net_search_config_file.patch
- Fix CVE-2024-45774 (bsc#1233609)
  * 0009-video-readers-jpeg-Do-not-permit-duplicate-SOF0-mark.patch
- Fix CVE-2024-45775 (bsc#1233610)
  * 0010-commands-extcmd-Missing-check-for-failed-allocation.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0011-commands-pgp-Unregister-the-check_signatures-hooks-o.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0012-normal-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0013-gettext-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2024-45776 (bsc#1233612)
  * 0014-gettext-Integer-overflow-leads-to-heap-OOB-write-or-.patch
- Fix CVE-2024-45777 (bsc#1233613)
  * 0015-gettext-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2025-0690 (bsc#1237012)
  * 0016-commands-read-Fix-an-integer-overflow-when-supplying.patch
- Fix CVE-2025-1118 (bsc#1237013)
  * 0017-commands-minicmd-Block-the-dump-command-in-lockdown-.patch
- Fix CVE-2024-45778 (bsc#1233606)
- Fix CVE-2024-45779 (bsc#1233608)
  * 0018-fs-bfs-Disable-under-lockdown.patch
- Fix CVE-2025-0677 (bsc#1237002)
- Fix CVE-2025-0684 (bsc#1237008)
- Fix CVE-2025-0685 (bsc#1237009)
- Fix CVE-2025-0686 (bsc#1237010)
- Fix CVE-2025-0689 (bsc#1237011)
  * 0019-fs-Disable-many-filesystems-under-lockdown.patch
- Fix CVE-2025-1125 (bsc#1237014)
- Fix CVE-2025-0678 (bsc#1237006)
  * 0020-fs-Prevent-overflows-when-allocating-memory-for-arra.patch
- Updated to upstream version
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch
- Bump upstream SBAT generation to 5</changelog>
  <changelog author="mchang@suse.com" date="1741003200">- Cherry-pick upstream XFS fixes
  * 0001-fs-xfs-Add-new-superblock-features-added-in-Linux-6..patch
  * 0002-fs-xfs-Fix-grub_xfs_iterate_dir-return-value-in-case.patch
- Fix "attempt to read of write outside of partition" error message (bsc#1237844)
  * 0003-fs-xfs-fix-large-extent-counters-incompat-feature-su.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348800">- Fix zfs.mo not found message when booting on legacy BIOS (bsc#1237865)
  * 0001-autofs-Ignore-zfs-not-found.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348801">- Pass through PAES cipher as AES on s390x-emu (jsc#PED-10950)
  * 0001-s390x-emu-Pass-through-PAES-cipher-as-AES.patch</changelog>
  <changelog author="mchang@suse.com" date="1741694400">- Update patches for Power guest secure boot with key management (jsc#PED-3520)
  (jsc#PED-9892)
  * 0001-ieee1275-adding-failure-check-condition-on-ibm-secur.patch
  * 0002-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0003-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0004-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0005-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0006-powerpc_ieee1275-set-use_static_keys-flag.patch
  * 0007-appendedsig-Reads-the-default-DB-keys-from-ELF-Note.patch
  * 0008-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0009-appendedsig-documentation.patch
- Remove patches
  * 0001-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0002-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0003-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0004-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0005-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0006-appendedsig-documentation.patch</changelog>
  <changelog author="mchang@suse.com" date="1742212800">- Refresh PPC NVMEoF ofpath related patches to newer revision
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
- Patch refreshed
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch
- Patch obsoleted
  * 0004-ofpath-controller-name-update.patch
  * 0001-squash-ieee1275-ofpath-enable-NVMeoF-logical-device-.patch
- Fix segmentation fault error in grub2-probe with target=hints_string
  (bsc#1235971) (bsc#1235958) (bsc#1239651)
  * 0001-ofpath-Add-error-check-in-NVMEoF-device-translation.patch</changelog>
  <changelog author="mchang@suse.com" date="1745409600">- Fix PPC CAS reboot failure work when initiated via submenu (bsc#1241132)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1746446400">- Fix CVE-2025-4382: TPM auto-decryption data exposure (bsc#1242971)
  * 0001-kern-rescue_reader-Block-the-rescue-mode-until-the-C.patch
  * 0002-commands-search-Introduce-the-cryptodisk-only-argume.patch
  * 0003-disk-diskfilter-Introduce-the-cryptocheck-command.patch
  * 0004-commands-search-Add-the-diskfilter-support.patch
  * 0005-docs-Document-available-crypto-disks-checks.patch
  * 0006-disk-cryptodisk-Add-the-erase-secrets-function.patch
  * 0007-disk-cryptodisk-Wipe-the-passphrase-from-memory.patch
  * 0008-cryptocheck-Add-quiet-option.patch
- patch rebased
  * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch
  * 0004-Key-revocation-on-out-of-bound-file-access.patch
- patch refrehed
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch</changelog>
  <changelog author="mchang@suse.com" date="1747742400">- Fix incorrect nvme disks and boot order in bootlist output (bsc#1237174)
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch</changelog>
  <changelog author="mchang@suse.com" date="1752667200">- Fix test -f and -s do not work properly over the network files served via
  tftp and http (bsc#1246157) (bsc#1246237)
  * 0001-test-Fix-f-test-on-files-over-network.patch
  * 0002-http-Return-HTTP-status-code-in-http_establish.patch
  * 0003-docs-Clarify-test-for-files-on-TFTP-and-HTTP.patch
  * 0004-tftp-Fix-hang-when-file-is-a-directory.patch</changelog>
  <changelog author="glin@suse.com" date="1754049600">- Fix CVE-2024-56738: side-channel attack due to not constant-time
  algorithm in grub_crypto_memcmp (bsc#1234959)
  * grub2-constant-time-grub_crypto_memcmp.patch</changelog>
  <changelog author="mchang@suse.com" date="1754308800">- Skip mount point in grub_find_device function (bsc#1246231)
  * 0001-getroot-Skip-mount-points-in-grub_find_device.patch</changelog>
</package>
<package pkgid="7f35c9935619e5b639e2d39cc8d86e3a9516b677b149f6cbcfefebed0b6a64f7" name="grub2-x86_64-efi" arch="noarch">
  <version epoch="0" ver="2.12" rel="150700.19.16.1"/>
  <changelog author="mchang@suse.com" date="1730894400">- Fix xen package contains debug_info files with the .module suffix by moving
  them to a separate xen-debug subpackage (bsc#1232573)</changelog>
  <changelog author="mchang@suse.com" date="1731067200">- Do not enable blscfg on s390-emu
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1731067201">- Fix previous change as the variable has to be set earlier
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1731499200">- Revert the patches related to BLS support in grub2-mkconfig, as they are not
  relevant to the current BLS integration and cause issues in older KIWI
  versions, which actively force it to be enabled by default (bsc#1233196)
  * 0002-Add-BLS-support-to-grub-mkconfig.patch
  * 0003-Add-grub2-switch-to-blscfg.patch
  * 0007-grub-switch-to-blscfg-adapt-to-openSUSE.patch
  * 0008-blscfg-reading-bls-fragments-if-boot-present.patch
  * 0009-10_linux-Some-refinement-for-BLS.patch
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1733486400">- Fix missing requires in SLE package (bsc#1234264) (bsc#1234272)</changelog>
  <changelog author="mchang@suse.com" date="1733659200">- Update PowerPC SBAT patches to upstream (bsc#1233730)
  * 0007-grub-mkimage-Create-new-ELF-note-for-SBAT.patch
  * 0008-grub-mkimage-Add-SBAT-metadata-into-ELF-note-for-Pow.patch
- Replaced patches
  * 0007-mkimage-create-new-ELF-Note-for-SBAT.patch
  * 0008-mkimage-adding-sbat-data-into-sbat-ELF-Note-on-power.patch</changelog>
  <changelog author="mchang@suse.com" date="1739448000">- Fix out of memory issue on PowerPC by increasing RMA size (bsc#1236744)
  * 0001-powerpc-increase-MIN-RMA-size-for-CAS-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1739534400">- Security fixes for 2024
  * 0001-misc-Implement-grub_strlcpy.patch
- Fix CVE-2024-45781 (bsc#1233617)
  * 0002-fs-ufs-Fix-a-heap-OOB-write.patch
- Fix CVE-2024-56737 (bsc#1234958)
- Fix CVE-2024-45782 (bsc#1233615)
  * 0003-fs-hfs-Fix-stack-OOB-write-with-grub_strcpy.patch
- Fix CVE-2024-45780 (bsc#1233614)
  * 0004-fs-tar-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2024-45783 (bsc#1233616)
  * 0005-fs-hfsplus-Set-a-grub_errno-if-mount-fails.patch
  * 0006-kern-file-Ensure-file-data-is-set.patch
  * 0007-kern-file-Implement-filesystem-reference-counting.patch
- Fix CVE-2025-0624 (bsc#1236316)
  * 0008-net-Fix-OOB-write-in-grub_net_search_config_file.patch
- Fix CVE-2024-45774 (bsc#1233609)
  * 0009-video-readers-jpeg-Do-not-permit-duplicate-SOF0-mark.patch
- Fix CVE-2024-45775 (bsc#1233610)
  * 0010-commands-extcmd-Missing-check-for-failed-allocation.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0011-commands-pgp-Unregister-the-check_signatures-hooks-o.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0012-normal-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0013-gettext-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2024-45776 (bsc#1233612)
  * 0014-gettext-Integer-overflow-leads-to-heap-OOB-write-or-.patch
- Fix CVE-2024-45777 (bsc#1233613)
  * 0015-gettext-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2025-0690 (bsc#1237012)
  * 0016-commands-read-Fix-an-integer-overflow-when-supplying.patch
- Fix CVE-2025-1118 (bsc#1237013)
  * 0017-commands-minicmd-Block-the-dump-command-in-lockdown-.patch
- Fix CVE-2024-45778 (bsc#1233606)
- Fix CVE-2024-45779 (bsc#1233608)
  * 0018-fs-bfs-Disable-under-lockdown.patch
- Fix CVE-2025-0677 (bsc#1237002)
- Fix CVE-2025-0684 (bsc#1237008)
- Fix CVE-2025-0685 (bsc#1237009)
- Fix CVE-2025-0686 (bsc#1237010)
- Fix CVE-2025-0689 (bsc#1237011)
  * 0019-fs-Disable-many-filesystems-under-lockdown.patch
- Fix CVE-2025-1125 (bsc#1237014)
- Fix CVE-2025-0678 (bsc#1237006)
  * 0020-fs-Prevent-overflows-when-allocating-memory-for-arra.patch
- Updated to upstream version
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch
- Bump upstream SBAT generation to 5</changelog>
  <changelog author="mchang@suse.com" date="1741003200">- Cherry-pick upstream XFS fixes
  * 0001-fs-xfs-Add-new-superblock-features-added-in-Linux-6..patch
  * 0002-fs-xfs-Fix-grub_xfs_iterate_dir-return-value-in-case.patch
- Fix "attempt to read of write outside of partition" error message (bsc#1237844)
  * 0003-fs-xfs-fix-large-extent-counters-incompat-feature-su.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348800">- Fix zfs.mo not found message when booting on legacy BIOS (bsc#1237865)
  * 0001-autofs-Ignore-zfs-not-found.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348801">- Pass through PAES cipher as AES on s390x-emu (jsc#PED-10950)
  * 0001-s390x-emu-Pass-through-PAES-cipher-as-AES.patch</changelog>
  <changelog author="mchang@suse.com" date="1741694400">- Update patches for Power guest secure boot with key management (jsc#PED-3520)
  (jsc#PED-9892)
  * 0001-ieee1275-adding-failure-check-condition-on-ibm-secur.patch
  * 0002-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0003-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0004-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0005-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0006-powerpc_ieee1275-set-use_static_keys-flag.patch
  * 0007-appendedsig-Reads-the-default-DB-keys-from-ELF-Note.patch
  * 0008-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0009-appendedsig-documentation.patch
- Remove patches
  * 0001-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0002-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0003-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0004-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0005-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0006-appendedsig-documentation.patch</changelog>
  <changelog author="mchang@suse.com" date="1742212800">- Refresh PPC NVMEoF ofpath related patches to newer revision
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
- Patch refreshed
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch
- Patch obsoleted
  * 0004-ofpath-controller-name-update.patch
  * 0001-squash-ieee1275-ofpath-enable-NVMeoF-logical-device-.patch
- Fix segmentation fault error in grub2-probe with target=hints_string
  (bsc#1235971) (bsc#1235958) (bsc#1239651)
  * 0001-ofpath-Add-error-check-in-NVMEoF-device-translation.patch</changelog>
  <changelog author="mchang@suse.com" date="1745409600">- Fix PPC CAS reboot failure work when initiated via submenu (bsc#1241132)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1746446400">- Fix CVE-2025-4382: TPM auto-decryption data exposure (bsc#1242971)
  * 0001-kern-rescue_reader-Block-the-rescue-mode-until-the-C.patch
  * 0002-commands-search-Introduce-the-cryptodisk-only-argume.patch
  * 0003-disk-diskfilter-Introduce-the-cryptocheck-command.patch
  * 0004-commands-search-Add-the-diskfilter-support.patch
  * 0005-docs-Document-available-crypto-disks-checks.patch
  * 0006-disk-cryptodisk-Add-the-erase-secrets-function.patch
  * 0007-disk-cryptodisk-Wipe-the-passphrase-from-memory.patch
  * 0008-cryptocheck-Add-quiet-option.patch
- patch rebased
  * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch
  * 0004-Key-revocation-on-out-of-bound-file-access.patch
- patch refrehed
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch</changelog>
  <changelog author="mchang@suse.com" date="1747742400">- Fix incorrect nvme disks and boot order in bootlist output (bsc#1237174)
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch</changelog>
  <changelog author="mchang@suse.com" date="1752667200">- Fix test -f and -s do not work properly over the network files served via
  tftp and http (bsc#1246157) (bsc#1246237)
  * 0001-test-Fix-f-test-on-files-over-network.patch
  * 0002-http-Return-HTTP-status-code-in-http_establish.patch
  * 0003-docs-Clarify-test-for-files-on-TFTP-and-HTTP.patch
  * 0004-tftp-Fix-hang-when-file-is-a-directory.patch</changelog>
  <changelog author="glin@suse.com" date="1754049600">- Fix CVE-2024-56738: side-channel attack due to not constant-time
  algorithm in grub_crypto_memcmp (bsc#1234959)
  * grub2-constant-time-grub_crypto_memcmp.patch</changelog>
  <changelog author="mchang@suse.com" date="1754308800">- Skip mount point in grub_find_device function (bsc#1246231)
  * 0001-getroot-Skip-mount-points-in-grub_find_device.patch</changelog>
  <changelog author="mchang@suse.com" date="1758542400">- Fix boot hangs in setting up serial console when ACPI SPCR table is present
  and redirection is disabled (bsc#1249088)
  * 0001-term-ns8250-spcr-Return-if-redirection-is-disabled.patch</changelog>
</package>
<package pkgid="e0bec3741c4947c92322bc1706c1787cd5e78c4f7c33bbf5f52b4982ff25b7de" name="grub2-x86_64-efi" arch="noarch">
  <version epoch="0" ver="2.12" rel="150700.19.19.1"/>
  <changelog author="mchang@suse.com" date="1731067200">- Fix previous change as the variable has to be set earlier
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1731499200">- Revert the patches related to BLS support in grub2-mkconfig, as they are not
  relevant to the current BLS integration and cause issues in older KIWI
  versions, which actively force it to be enabled by default (bsc#1233196)
  * 0002-Add-BLS-support-to-grub-mkconfig.patch
  * 0003-Add-grub2-switch-to-blscfg.patch
  * 0007-grub-switch-to-blscfg-adapt-to-openSUSE.patch
  * 0008-blscfg-reading-bls-fragments-if-boot-present.patch
  * 0009-10_linux-Some-refinement-for-BLS.patch
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1733486400">- Fix missing requires in SLE package (bsc#1234264) (bsc#1234272)</changelog>
  <changelog author="mchang@suse.com" date="1733659200">- Update PowerPC SBAT patches to upstream (bsc#1233730)
  * 0007-grub-mkimage-Create-new-ELF-note-for-SBAT.patch
  * 0008-grub-mkimage-Add-SBAT-metadata-into-ELF-note-for-Pow.patch
- Replaced patches
  * 0007-mkimage-create-new-ELF-Note-for-SBAT.patch
  * 0008-mkimage-adding-sbat-data-into-sbat-ELF-Note-on-power.patch</changelog>
  <changelog author="mchang@suse.com" date="1739448000">- Fix out of memory issue on PowerPC by increasing RMA size (bsc#1236744)
  * 0001-powerpc-increase-MIN-RMA-size-for-CAS-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1739534400">- Security fixes for 2024
  * 0001-misc-Implement-grub_strlcpy.patch
- Fix CVE-2024-45781 (bsc#1233617)
  * 0002-fs-ufs-Fix-a-heap-OOB-write.patch
- Fix CVE-2024-56737 (bsc#1234958)
- Fix CVE-2024-45782 (bsc#1233615)
  * 0003-fs-hfs-Fix-stack-OOB-write-with-grub_strcpy.patch
- Fix CVE-2024-45780 (bsc#1233614)
  * 0004-fs-tar-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2024-45783 (bsc#1233616)
  * 0005-fs-hfsplus-Set-a-grub_errno-if-mount-fails.patch
  * 0006-kern-file-Ensure-file-data-is-set.patch
  * 0007-kern-file-Implement-filesystem-reference-counting.patch
- Fix CVE-2025-0624 (bsc#1236316)
  * 0008-net-Fix-OOB-write-in-grub_net_search_config_file.patch
- Fix CVE-2024-45774 (bsc#1233609)
  * 0009-video-readers-jpeg-Do-not-permit-duplicate-SOF0-mark.patch
- Fix CVE-2024-45775 (bsc#1233610)
  * 0010-commands-extcmd-Missing-check-for-failed-allocation.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0011-commands-pgp-Unregister-the-check_signatures-hooks-o.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0012-normal-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0013-gettext-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2024-45776 (bsc#1233612)
  * 0014-gettext-Integer-overflow-leads-to-heap-OOB-write-or-.patch
- Fix CVE-2024-45777 (bsc#1233613)
  * 0015-gettext-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2025-0690 (bsc#1237012)
  * 0016-commands-read-Fix-an-integer-overflow-when-supplying.patch
- Fix CVE-2025-1118 (bsc#1237013)
  * 0017-commands-minicmd-Block-the-dump-command-in-lockdown-.patch
- Fix CVE-2024-45778 (bsc#1233606)
- Fix CVE-2024-45779 (bsc#1233608)
  * 0018-fs-bfs-Disable-under-lockdown.patch
- Fix CVE-2025-0677 (bsc#1237002)
- Fix CVE-2025-0684 (bsc#1237008)
- Fix CVE-2025-0685 (bsc#1237009)
- Fix CVE-2025-0686 (bsc#1237010)
- Fix CVE-2025-0689 (bsc#1237011)
  * 0019-fs-Disable-many-filesystems-under-lockdown.patch
- Fix CVE-2025-1125 (bsc#1237014)
- Fix CVE-2025-0678 (bsc#1237006)
  * 0020-fs-Prevent-overflows-when-allocating-memory-for-arra.patch
- Updated to upstream version
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch
- Bump upstream SBAT generation to 5</changelog>
  <changelog author="mchang@suse.com" date="1741003200">- Cherry-pick upstream XFS fixes
  * 0001-fs-xfs-Add-new-superblock-features-added-in-Linux-6..patch
  * 0002-fs-xfs-Fix-grub_xfs_iterate_dir-return-value-in-case.patch
- Fix "attempt to read of write outside of partition" error message (bsc#1237844)
  * 0003-fs-xfs-fix-large-extent-counters-incompat-feature-su.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348800">- Fix zfs.mo not found message when booting on legacy BIOS (bsc#1237865)
  * 0001-autofs-Ignore-zfs-not-found.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348801">- Pass through PAES cipher as AES on s390x-emu (jsc#PED-10950)
  * 0001-s390x-emu-Pass-through-PAES-cipher-as-AES.patch</changelog>
  <changelog author="mchang@suse.com" date="1741694400">- Update patches for Power guest secure boot with key management (jsc#PED-3520)
  (jsc#PED-9892)
  * 0001-ieee1275-adding-failure-check-condition-on-ibm-secur.patch
  * 0002-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0003-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0004-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0005-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0006-powerpc_ieee1275-set-use_static_keys-flag.patch
  * 0007-appendedsig-Reads-the-default-DB-keys-from-ELF-Note.patch
  * 0008-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0009-appendedsig-documentation.patch
- Remove patches
  * 0001-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0002-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0003-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0004-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0005-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0006-appendedsig-documentation.patch</changelog>
  <changelog author="mchang@suse.com" date="1742212800">- Refresh PPC NVMEoF ofpath related patches to newer revision
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
- Patch refreshed
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch
- Patch obsoleted
  * 0004-ofpath-controller-name-update.patch
  * 0001-squash-ieee1275-ofpath-enable-NVMeoF-logical-device-.patch
- Fix segmentation fault error in grub2-probe with target=hints_string
  (bsc#1235971) (bsc#1235958) (bsc#1239651)
  * 0001-ofpath-Add-error-check-in-NVMEoF-device-translation.patch</changelog>
  <changelog author="mchang@suse.com" date="1745409600">- Fix PPC CAS reboot failure work when initiated via submenu (bsc#1241132)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1746446400">- Fix CVE-2025-4382: TPM auto-decryption data exposure (bsc#1242971)
  * 0001-kern-rescue_reader-Block-the-rescue-mode-until-the-C.patch
  * 0002-commands-search-Introduce-the-cryptodisk-only-argume.patch
  * 0003-disk-diskfilter-Introduce-the-cryptocheck-command.patch
  * 0004-commands-search-Add-the-diskfilter-support.patch
  * 0005-docs-Document-available-crypto-disks-checks.patch
  * 0006-disk-cryptodisk-Add-the-erase-secrets-function.patch
  * 0007-disk-cryptodisk-Wipe-the-passphrase-from-memory.patch
  * 0008-cryptocheck-Add-quiet-option.patch
- patch rebased
  * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch
  * 0004-Key-revocation-on-out-of-bound-file-access.patch
- patch refrehed
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch</changelog>
  <changelog author="mchang@suse.com" date="1747742400">- Fix incorrect nvme disks and boot order in bootlist output (bsc#1237174)
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch</changelog>
  <changelog author="mchang@suse.com" date="1752667200">- Fix test -f and -s do not work properly over the network files served via
  tftp and http (bsc#1246157) (bsc#1246237)
  * 0001-test-Fix-f-test-on-files-over-network.patch
  * 0002-http-Return-HTTP-status-code-in-http_establish.patch
  * 0003-docs-Clarify-test-for-files-on-TFTP-and-HTTP.patch
  * 0004-tftp-Fix-hang-when-file-is-a-directory.patch</changelog>
  <changelog author="glin@suse.com" date="1754049600">- Fix CVE-2024-56738: side-channel attack due to not constant-time
  algorithm in grub_crypto_memcmp (bsc#1234959)
  * grub2-constant-time-grub_crypto_memcmp.patch</changelog>
  <changelog author="mchang@suse.com" date="1754308800">- Skip mount point in grub_find_device function (bsc#1246231)
  * 0001-getroot-Skip-mount-points-in-grub_find_device.patch</changelog>
  <changelog author="mchang@suse.com" date="1758542400">- Fix boot hangs in setting up serial console when ACPI SPCR table is present
  and redirection is disabled (bsc#1249088)
  * 0001-term-ns8250-spcr-Return-if-redirection-is-disabled.patch</changelog>
  <changelog author="mchang@suse.com" date="1761048000">- Fix timeout when loading initrd via http after PPC CAS reboot (bsc#1245953)
  * 0001-tcp-Fix-TCP-port-number-reused-on-reboot.patch</changelog>
  <changelog author="mchang@suse.com" date="1762948800">- Fix CVE-2025-54771 (bsc#1252931)
  * 0001-kern-file-Call-grub_dl_unref-after-fs-fs_close.patch
- Fix CVE-2025-54770 (bsc#1252930)
  * 0002-net-net-Unregister-net_set_vlan-command-on-unload.patch
- Fix CVE-2025-61662 (bsc#1252933)
  * 0003-gettext-gettext-Unregister-gettext-command-on-module.patch
- Fix CVE-2025-61663 (bsc#1252934)
- Fix CVE-2025-61664 (bsc#1252935)
  * 0004-normal-main-Unregister-commands-on-module-unload.patch
  * 0005-tests-lib-functional_test-Unregister-commands-on-mod.patch
- Fix CVE-2025-61661 (bsc#1252932)
  * 0006-commands-usbtest-Use-correct-string-length-field.patch
  * 0007-commands-usbtest-Ensure-string-length-is-sufficient-.patch
- Bump upstream SBAT generation to 6</changelog>
</package>
<package pkgid="00ded78dee72dc9a3e8147a5416d77f81d2a327e0623caa07a57093a2f6163f7" name="grub2-x86_64-efi" arch="noarch">
  <version epoch="0" ver="2.12" rel="150700.19.26.1"/>
  <changelog author="mchang@suse.com" date="1733659200">- Update PowerPC SBAT patches to upstream (bsc#1233730)
  * 0007-grub-mkimage-Create-new-ELF-note-for-SBAT.patch
  * 0008-grub-mkimage-Add-SBAT-metadata-into-ELF-note-for-Pow.patch
- Replaced patches
  * 0007-mkimage-create-new-ELF-Note-for-SBAT.patch
  * 0008-mkimage-adding-sbat-data-into-sbat-ELF-Note-on-power.patch</changelog>
  <changelog author="mchang@suse.com" date="1739448000">- Fix out of memory issue on PowerPC by increasing RMA size (bsc#1236744)
  * 0001-powerpc-increase-MIN-RMA-size-for-CAS-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1739534400">- Security fixes for 2024
  * 0001-misc-Implement-grub_strlcpy.patch
- Fix CVE-2024-45781 (bsc#1233617)
  * 0002-fs-ufs-Fix-a-heap-OOB-write.patch
- Fix CVE-2024-56737 (bsc#1234958)
- Fix CVE-2024-45782 (bsc#1233615)
  * 0003-fs-hfs-Fix-stack-OOB-write-with-grub_strcpy.patch
- Fix CVE-2024-45780 (bsc#1233614)
  * 0004-fs-tar-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2024-45783 (bsc#1233616)
  * 0005-fs-hfsplus-Set-a-grub_errno-if-mount-fails.patch
  * 0006-kern-file-Ensure-file-data-is-set.patch
  * 0007-kern-file-Implement-filesystem-reference-counting.patch
- Fix CVE-2025-0624 (bsc#1236316)
  * 0008-net-Fix-OOB-write-in-grub_net_search_config_file.patch
- Fix CVE-2024-45774 (bsc#1233609)
  * 0009-video-readers-jpeg-Do-not-permit-duplicate-SOF0-mark.patch
- Fix CVE-2024-45775 (bsc#1233610)
  * 0010-commands-extcmd-Missing-check-for-failed-allocation.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0011-commands-pgp-Unregister-the-check_signatures-hooks-o.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0012-normal-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0013-gettext-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2024-45776 (bsc#1233612)
  * 0014-gettext-Integer-overflow-leads-to-heap-OOB-write-or-.patch
- Fix CVE-2024-45777 (bsc#1233613)
  * 0015-gettext-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2025-0690 (bsc#1237012)
  * 0016-commands-read-Fix-an-integer-overflow-when-supplying.patch
- Fix CVE-2025-1118 (bsc#1237013)
  * 0017-commands-minicmd-Block-the-dump-command-in-lockdown-.patch
- Fix CVE-2024-45778 (bsc#1233606)
- Fix CVE-2024-45779 (bsc#1233608)
  * 0018-fs-bfs-Disable-under-lockdown.patch
- Fix CVE-2025-0677 (bsc#1237002)
- Fix CVE-2025-0684 (bsc#1237008)
- Fix CVE-2025-0685 (bsc#1237009)
- Fix CVE-2025-0686 (bsc#1237010)
- Fix CVE-2025-0689 (bsc#1237011)
  * 0019-fs-Disable-many-filesystems-under-lockdown.patch
- Fix CVE-2025-1125 (bsc#1237014)
- Fix CVE-2025-0678 (bsc#1237006)
  * 0020-fs-Prevent-overflows-when-allocating-memory-for-arra.patch
- Updated to upstream version
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch
- Bump upstream SBAT generation to 5</changelog>
  <changelog author="mchang@suse.com" date="1741003200">- Cherry-pick upstream XFS fixes
  * 0001-fs-xfs-Add-new-superblock-features-added-in-Linux-6..patch
  * 0002-fs-xfs-Fix-grub_xfs_iterate_dir-return-value-in-case.patch
- Fix "attempt to read of write outside of partition" error message (bsc#1237844)
  * 0003-fs-xfs-fix-large-extent-counters-incompat-feature-su.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348800">- Fix zfs.mo not found message when booting on legacy BIOS (bsc#1237865)
  * 0001-autofs-Ignore-zfs-not-found.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348801">- Pass through PAES cipher as AES on s390x-emu (jsc#PED-10950)
  * 0001-s390x-emu-Pass-through-PAES-cipher-as-AES.patch</changelog>
  <changelog author="mchang@suse.com" date="1741694400">- Update patches for Power guest secure boot with key management (jsc#PED-3520)
  (jsc#PED-9892)
  * 0001-ieee1275-adding-failure-check-condition-on-ibm-secur.patch
  * 0002-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0003-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0004-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0005-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0006-powerpc_ieee1275-set-use_static_keys-flag.patch
  * 0007-appendedsig-Reads-the-default-DB-keys-from-ELF-Note.patch
  * 0008-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0009-appendedsig-documentation.patch
- Remove patches
  * 0001-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0002-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0003-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0004-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0005-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0006-appendedsig-documentation.patch</changelog>
  <changelog author="mchang@suse.com" date="1742212800">- Refresh PPC NVMEoF ofpath related patches to newer revision
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
- Patch refreshed
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch
- Patch obsoleted
  * 0004-ofpath-controller-name-update.patch
  * 0001-squash-ieee1275-ofpath-enable-NVMeoF-logical-device-.patch
- Fix segmentation fault error in grub2-probe with target=hints_string
  (bsc#1235971) (bsc#1235958) (bsc#1239651)
  * 0001-ofpath-Add-error-check-in-NVMEoF-device-translation.patch</changelog>
  <changelog author="mchang@suse.com" date="1745409600">- Fix PPC CAS reboot failure work when initiated via submenu (bsc#1241132)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1746446400">- Fix CVE-2025-4382: TPM auto-decryption data exposure (bsc#1242971)
  * 0001-kern-rescue_reader-Block-the-rescue-mode-until-the-C.patch
  * 0002-commands-search-Introduce-the-cryptodisk-only-argume.patch
  * 0003-disk-diskfilter-Introduce-the-cryptocheck-command.patch
  * 0004-commands-search-Add-the-diskfilter-support.patch
  * 0005-docs-Document-available-crypto-disks-checks.patch
  * 0006-disk-cryptodisk-Add-the-erase-secrets-function.patch
  * 0007-disk-cryptodisk-Wipe-the-passphrase-from-memory.patch
  * 0008-cryptocheck-Add-quiet-option.patch
- patch rebased
  * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch
  * 0004-Key-revocation-on-out-of-bound-file-access.patch
- patch refrehed
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch</changelog>
  <changelog author="mchang@suse.com" date="1747742400">- Fix incorrect nvme disks and boot order in bootlist output (bsc#1237174)
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch</changelog>
  <changelog author="mchang@suse.com" date="1752667200">- Fix test -f and -s do not work properly over the network files served via
  tftp and http (bsc#1246157) (bsc#1246237)
  * 0001-test-Fix-f-test-on-files-over-network.patch
  * 0002-http-Return-HTTP-status-code-in-http_establish.patch
  * 0003-docs-Clarify-test-for-files-on-TFTP-and-HTTP.patch
  * 0004-tftp-Fix-hang-when-file-is-a-directory.patch</changelog>
  <changelog author="glin@suse.com" date="1754049600">- Fix CVE-2024-56738: side-channel attack due to not constant-time
  algorithm in grub_crypto_memcmp (bsc#1234959)
  * grub2-constant-time-grub_crypto_memcmp.patch</changelog>
  <changelog author="mchang@suse.com" date="1754308800">- Skip mount point in grub_find_device function (bsc#1246231)
  * 0001-getroot-Skip-mount-points-in-grub_find_device.patch</changelog>
  <changelog author="mchang@suse.com" date="1758542400">- Fix boot hangs in setting up serial console when ACPI SPCR table is present
  and redirection is disabled (bsc#1249088)
  * 0001-term-ns8250-spcr-Return-if-redirection-is-disabled.patch</changelog>
  <changelog author="mchang@suse.com" date="1761048000">- Fix timeout when loading initrd via http after PPC CAS reboot (bsc#1245953)
  * 0001-tcp-Fix-TCP-port-number-reused-on-reboot.patch</changelog>
  <changelog author="mchang@suse.com" date="1762948800">- Fix CVE-2025-54771 (bsc#1252931)
  * 0001-kern-file-Call-grub_dl_unref-after-fs-fs_close.patch
- Fix CVE-2025-54770 (bsc#1252930)
  * 0002-net-net-Unregister-net_set_vlan-command-on-unload.patch
- Fix CVE-2025-61662 (bsc#1252933)
  * 0003-gettext-gettext-Unregister-gettext-command-on-module.patch
- Fix CVE-2025-61663 (bsc#1252934)
- Fix CVE-2025-61664 (bsc#1252935)
  * 0004-normal-main-Unregister-commands-on-module-unload.patch
  * 0005-tests-lib-functional_test-Unregister-commands-on-mod.patch
- Fix CVE-2025-61661 (bsc#1252932)
  * 0006-commands-usbtest-Use-correct-string-length-field.patch
  * 0007-commands-usbtest-Ensure-string-length-is-sufficient-.patch
- Bump upstream SBAT generation to 6</changelog>
  <changelog author="mchang@suse.com" date="1770638400">- Fix error "grub-core/script/lexer.c:352:out of memory" after PowerPC CAS
  Reboot (bsc#1254299)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1770811200">- Backport upstream's commit to prevent BIOS assert (bsc#1258022)
  * 0001-kern-efi-mm-Change-grub_efi_mm_add_regions-to-keep-t.patch</changelog>
  <changelog author="mchang@suse.com" date="1771934400">- Support dm multipath bootlist on PowerPC (bsc#1254415)
  * 0001-ieee1275-support-dm-multipath-bootlist.patch</changelog>
</package>
<package pkgid="b0469835654b1846a7f3f954a31bd2001854357b007a86f27d0c0ad6fb1458fa" name="grub2-x86_64-efi" arch="noarch">
  <version epoch="0" ver="2.12" rel="150700.19.29.1"/>
  <changelog author="mchang@suse.com" date="1741003200">- Cherry-pick upstream XFS fixes
  * 0001-fs-xfs-Add-new-superblock-features-added-in-Linux-6..patch
  * 0002-fs-xfs-Fix-grub_xfs_iterate_dir-return-value-in-case.patch
- Fix "attempt to read of write outside of partition" error message (bsc#1237844)
  * 0003-fs-xfs-fix-large-extent-counters-incompat-feature-su.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348800">- Fix zfs.mo not found message when booting on legacy BIOS (bsc#1237865)
  * 0001-autofs-Ignore-zfs-not-found.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348801">- Pass through PAES cipher as AES on s390x-emu (jsc#PED-10950)
  * 0001-s390x-emu-Pass-through-PAES-cipher-as-AES.patch</changelog>
  <changelog author="mchang@suse.com" date="1741694400">- Update patches for Power guest secure boot with key management (jsc#PED-3520)
  (jsc#PED-9892)
  * 0001-ieee1275-adding-failure-check-condition-on-ibm-secur.patch
  * 0002-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0003-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0004-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0005-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0006-powerpc_ieee1275-set-use_static_keys-flag.patch
  * 0007-appendedsig-Reads-the-default-DB-keys-from-ELF-Note.patch
  * 0008-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0009-appendedsig-documentation.patch
- Remove patches
  * 0001-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0002-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0003-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0004-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0005-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0006-appendedsig-documentation.patch</changelog>
  <changelog author="mchang@suse.com" date="1742212800">- Refresh PPC NVMEoF ofpath related patches to newer revision
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
- Patch refreshed
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch
- Patch obsoleted
  * 0004-ofpath-controller-name-update.patch
  * 0001-squash-ieee1275-ofpath-enable-NVMeoF-logical-device-.patch
- Fix segmentation fault error in grub2-probe with target=hints_string
  (bsc#1235971) (bsc#1235958) (bsc#1239651)
  * 0001-ofpath-Add-error-check-in-NVMEoF-device-translation.patch</changelog>
  <changelog author="mchang@suse.com" date="1745409600">- Fix PPC CAS reboot failure work when initiated via submenu (bsc#1241132)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1746446400">- Fix CVE-2025-4382: TPM auto-decryption data exposure (bsc#1242971)
  * 0001-kern-rescue_reader-Block-the-rescue-mode-until-the-C.patch
  * 0002-commands-search-Introduce-the-cryptodisk-only-argume.patch
  * 0003-disk-diskfilter-Introduce-the-cryptocheck-command.patch
  * 0004-commands-search-Add-the-diskfilter-support.patch
  * 0005-docs-Document-available-crypto-disks-checks.patch
  * 0006-disk-cryptodisk-Add-the-erase-secrets-function.patch
  * 0007-disk-cryptodisk-Wipe-the-passphrase-from-memory.patch
  * 0008-cryptocheck-Add-quiet-option.patch
- patch rebased
  * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch
  * 0004-Key-revocation-on-out-of-bound-file-access.patch
- patch refrehed
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch</changelog>
  <changelog author="mchang@suse.com" date="1747742400">- Fix incorrect nvme disks and boot order in bootlist output (bsc#1237174)
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch</changelog>
  <changelog author="mchang@suse.com" date="1752667200">- Fix test -f and -s do not work properly over the network files served via
  tftp and http (bsc#1246157) (bsc#1246237)
  * 0001-test-Fix-f-test-on-files-over-network.patch
  * 0002-http-Return-HTTP-status-code-in-http_establish.patch
  * 0003-docs-Clarify-test-for-files-on-TFTP-and-HTTP.patch
  * 0004-tftp-Fix-hang-when-file-is-a-directory.patch</changelog>
  <changelog author="glin@suse.com" date="1754049600">- Fix CVE-2024-56738: side-channel attack due to not constant-time
  algorithm in grub_crypto_memcmp (bsc#1234959)
  * grub2-constant-time-grub_crypto_memcmp.patch</changelog>
  <changelog author="mchang@suse.com" date="1754308800">- Skip mount point in grub_find_device function (bsc#1246231)
  * 0001-getroot-Skip-mount-points-in-grub_find_device.patch</changelog>
  <changelog author="mchang@suse.com" date="1758542400">- Fix boot hangs in setting up serial console when ACPI SPCR table is present
  and redirection is disabled (bsc#1249088)
  * 0001-term-ns8250-spcr-Return-if-redirection-is-disabled.patch</changelog>
  <changelog author="mchang@suse.com" date="1761048000">- Fix timeout when loading initrd via http after PPC CAS reboot (bsc#1245953)
  * 0001-tcp-Fix-TCP-port-number-reused-on-reboot.patch</changelog>
  <changelog author="mchang@suse.com" date="1762948800">- Fix CVE-2025-54771 (bsc#1252931)
  * 0001-kern-file-Call-grub_dl_unref-after-fs-fs_close.patch
- Fix CVE-2025-54770 (bsc#1252930)
  * 0002-net-net-Unregister-net_set_vlan-command-on-unload.patch
- Fix CVE-2025-61662 (bsc#1252933)
  * 0003-gettext-gettext-Unregister-gettext-command-on-module.patch
- Fix CVE-2025-61663 (bsc#1252934)
- Fix CVE-2025-61664 (bsc#1252935)
  * 0004-normal-main-Unregister-commands-on-module-unload.patch
  * 0005-tests-lib-functional_test-Unregister-commands-on-mod.patch
- Fix CVE-2025-61661 (bsc#1252932)
  * 0006-commands-usbtest-Use-correct-string-length-field.patch
  * 0007-commands-usbtest-Ensure-string-length-is-sufficient-.patch
- Bump upstream SBAT generation to 6</changelog>
  <changelog author="mchang@suse.com" date="1770638400">- Fix error "grub-core/script/lexer.c:352:out of memory" after PowerPC CAS
  Reboot (bsc#1254299)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1770811200">- Backport upstream's commit to prevent BIOS assert (bsc#1258022)
  * 0001-kern-efi-mm-Change-grub_efi_mm_add_regions-to-keep-t.patch</changelog>
  <changelog author="mchang@suse.com" date="1771934400">- Support dm multipath bootlist on PowerPC (bsc#1254415)
  * 0001-ieee1275-support-dm-multipath-bootlist.patch</changelog>
  <changelog author="mchang@suse.com" date="1775563200">- Fix double free in xen booting if root filesystem is Btrfs (bsc#1259543)
  * grub2-btrfs-01-add-ability-to-boot-from-subvolumes.patch
  * grub2-btrfs-09-get-default-subvolume.patch</changelog>
  <changelog author="mchang@suse.com" date="1775736000">- Fix PowerPC network boot prefix to correctly locate grub.cfg (bsc#1249385)
  * 0001-ieee1275-Use-net-config-for-boot-location-instead-of.patch</changelog>
  <changelog author="mchang@suse.com" date="1776081600">- Fix missing install device check in grub2-install on PowerPC which could lead
  to bootlist corruption (bsc#1221126)
  * 0001-Mandatory-install-device-check-for-PowerPC.patch</changelog>
</package>
<package pkgid="e5fe3ff7964c2cf46c742a8530d412dce9b2be7e9164fb36d47ea17e79696d3f" name="grub2-x86_64-efi" arch="noarch">
  <version epoch="0" ver="2.12" rel="150700.19.3.1"/>
  <changelog author="mchang@suse.com" date="1729684800">- Fix error: /boot/grub2/x86_64-efi/bli.mod not found (bsc#1231591)</changelog>
  <changelog author="mchang@suse.com" date="1730289600">- Enable support of Radix, Xive and Radix_gtse on Power (jsc#PED-9881)
  * 0001-kern-ieee1275-init-Add-IEEE-1275-Radix-support-for-K.patch</changelog>
  <changelog author="mchang@suse.com" date="1730289601">- Fix CVE-2024-49504 (bsc#1229163) (bsc#1229164)
- Restrict CLI access if the encrypted root device is automatically unlocked by
  the TPM. LUKS password authentication is required for access to be granted
  * 0001-cli_lock-Add-build-option-to-block-command-line-inte.patch
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch
- Obsolete, as CLI access is now locked and granted access no longer requires
  the previous restrictions
  * 0002-Restrict-file-access-on-cryptodisk-print.patch
  * 0003-Restrict-ls-and-auto-file-completion-on-cryptodisk-p.patch
- Rediff
  * 0004-Key-revocation-on-out-of-bound-file-access.patch</changelog>
  <changelog author="mchang@suse.com" date="1730462400">- Fix grub.cfg is loaded from an unexpected fallback directory instead of the
  root directory during PXE boot when grub is loaded from the tftp root
  directory (bsc#1232391)
  * 0001-kern-main-Fix-cmdpath-in-root-directory.patch
  * grub2.spec: Refine PPC grub.elf early config to derive root from cmdpath
    directly, avoiding the unneeded search</changelog>
  <changelog author="mchang@suse.com" date="1730894400">- Fix xen package contains debug_info files with the .module suffix by moving
  them to a separate xen-debug subpackage (bsc#1232573)</changelog>
  <changelog author="mchang@suse.com" date="1731067200">- Do not enable blscfg on s390-emu
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1731067201">- Fix previous change as the variable has to be set earlier
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1731499200">- Revert the patches related to BLS support in grub2-mkconfig, as they are not
  relevant to the current BLS integration and cause issues in older KIWI
  versions, which actively force it to be enabled by default (bsc#1233196)
  * 0002-Add-BLS-support-to-grub-mkconfig.patch
  * 0003-Add-grub2-switch-to-blscfg.patch
  * 0007-grub-switch-to-blscfg-adapt-to-openSUSE.patch
  * 0008-blscfg-reading-bls-fragments-if-boot-present.patch
  * 0009-10_linux-Some-refinement-for-BLS.patch
  * 0001-10_linux-Do-not-enable-BLSCFG-on-s390-emu.patch</changelog>
  <changelog author="mchang@suse.com" date="1733486400">- Fix missing requires in SLE package (bsc#1234264) (bsc#1234272)</changelog>
  <changelog author="mchang@suse.com" date="1733659200">- Update PowerPC SBAT patches to upstream (bsc#1233730)
  * 0007-grub-mkimage-Create-new-ELF-note-for-SBAT.patch
  * 0008-grub-mkimage-Add-SBAT-metadata-into-ELF-note-for-Pow.patch
- Replaced patches
  * 0007-mkimage-create-new-ELF-Note-for-SBAT.patch
  * 0008-mkimage-adding-sbat-data-into-sbat-ELF-Note-on-power.patch</changelog>
  <changelog author="mchang@suse.com" date="1739448000">- Fix out of memory issue on PowerPC by increasing RMA size (bsc#1236744)
  * 0001-powerpc-increase-MIN-RMA-size-for-CAS-negotiation.patch</changelog>
  <changelog author="mchang@suse.com" date="1739534400">- Security fixes for 2024
  * 0001-misc-Implement-grub_strlcpy.patch
- Fix CVE-2024-45781 (bsc#1233617)
  * 0002-fs-ufs-Fix-a-heap-OOB-write.patch
- Fix CVE-2024-56737 (bsc#1234958)
- Fix CVE-2024-45782 (bsc#1233615)
  * 0003-fs-hfs-Fix-stack-OOB-write-with-grub_strcpy.patch
- Fix CVE-2024-45780 (bsc#1233614)
  * 0004-fs-tar-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2024-45783 (bsc#1233616)
  * 0005-fs-hfsplus-Set-a-grub_errno-if-mount-fails.patch
  * 0006-kern-file-Ensure-file-data-is-set.patch
  * 0007-kern-file-Implement-filesystem-reference-counting.patch
- Fix CVE-2025-0624 (bsc#1236316)
  * 0008-net-Fix-OOB-write-in-grub_net_search_config_file.patch
- Fix CVE-2024-45774 (bsc#1233609)
  * 0009-video-readers-jpeg-Do-not-permit-duplicate-SOF0-mark.patch
- Fix CVE-2024-45775 (bsc#1233610)
  * 0010-commands-extcmd-Missing-check-for-failed-allocation.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0011-commands-pgp-Unregister-the-check_signatures-hooks-o.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0012-normal-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2025-0622 (bsc#1236317)
  * 0013-gettext-Remove-variables-hooks-on-module-unload.patch
- Fix CVE-2024-45776 (bsc#1233612)
  * 0014-gettext-Integer-overflow-leads-to-heap-OOB-write-or-.patch
- Fix CVE-2024-45777 (bsc#1233613)
  * 0015-gettext-Integer-overflow-leads-to-heap-OOB-write.patch
- Fix CVE-2025-0690 (bsc#1237012)
  * 0016-commands-read-Fix-an-integer-overflow-when-supplying.patch
- Fix CVE-2025-1118 (bsc#1237013)
  * 0017-commands-minicmd-Block-the-dump-command-in-lockdown-.patch
- Fix CVE-2024-45778 (bsc#1233606)
- Fix CVE-2024-45779 (bsc#1233608)
  * 0018-fs-bfs-Disable-under-lockdown.patch
- Fix CVE-2025-0677 (bsc#1237002)
- Fix CVE-2025-0684 (bsc#1237008)
- Fix CVE-2025-0685 (bsc#1237009)
- Fix CVE-2025-0686 (bsc#1237010)
- Fix CVE-2025-0689 (bsc#1237011)
  * 0019-fs-Disable-many-filesystems-under-lockdown.patch
- Fix CVE-2025-1125 (bsc#1237014)
- Fix CVE-2025-0678 (bsc#1237006)
  * 0020-fs-Prevent-overflows-when-allocating-memory-for-arra.patch
- Updated to upstream version
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch
- Bump upstream SBAT generation to 5</changelog>
  <changelog author="mchang@suse.com" date="1741003200">- Cherry-pick upstream XFS fixes
  * 0001-fs-xfs-Add-new-superblock-features-added-in-Linux-6..patch
  * 0002-fs-xfs-Fix-grub_xfs_iterate_dir-return-value-in-case.patch
- Fix "attempt to read of write outside of partition" error message (bsc#1237844)
  * 0003-fs-xfs-fix-large-extent-counters-incompat-feature-su.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348800">- Fix zfs.mo not found message when booting on legacy BIOS (bsc#1237865)
  * 0001-autofs-Ignore-zfs-not-found.patch</changelog>
  <changelog author="mchang@suse.com" date="1741348801">- Pass through PAES cipher as AES on s390x-emu (jsc#PED-10950)
  * 0001-s390x-emu-Pass-through-PAES-cipher-as-AES.patch</changelog>
  <changelog author="mchang@suse.com" date="1741694400">- Update patches for Power guest secure boot with key management (jsc#PED-3520)
  (jsc#PED-9892)
  * 0001-ieee1275-adding-failure-check-condition-on-ibm-secur.patch
  * 0002-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0003-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0004-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0005-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0006-powerpc_ieee1275-set-use_static_keys-flag.patch
  * 0007-appendedsig-Reads-the-default-DB-keys-from-ELF-Note.patch
  * 0008-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0009-appendedsig-documentation.patch
- Remove patches
  * 0001-ieee1275-Platform-Keystore-PKS-Support.patch
  * 0002-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
  * 0003-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
  * 0004-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
  * 0005-appendedsig-The-grub-command-s-trusted-and-distruste.patch
  * 0006-appendedsig-documentation.patch</changelog>
  <changelog author="mchang@suse.com" date="1742212800">- Refresh PPC NVMEoF ofpath related patches to newer revision
  * 0002-ieee1275-ofpath-enable-NVMeoF-logical-device-transla.patch
- Patch refreshed
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch
- Patch obsoleted
  * 0004-ofpath-controller-name-update.patch
  * 0001-squash-ieee1275-ofpath-enable-NVMeoF-logical-device-.patch
- Fix segmentation fault error in grub2-probe with target=hints_string
  (bsc#1235971) (bsc#1235958) (bsc#1239651)
  * 0001-ofpath-Add-error-check-in-NVMEoF-device-translation.patch</changelog>
  <changelog author="mchang@suse.com" date="1745409600">- Fix PPC CAS reboot failure work when initiated via submenu (bsc#1241132)
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch</changelog>
  <changelog author="mchang@suse.com" date="1746446400">- Fix CVE-2025-4382: TPM auto-decryption data exposure (bsc#1242971)
  * 0001-kern-rescue_reader-Block-the-rescue-mode-until-the-C.patch
  * 0002-commands-search-Introduce-the-cryptodisk-only-argume.patch
  * 0003-disk-diskfilter-Introduce-the-cryptocheck-command.patch
  * 0004-commands-search-Add-the-diskfilter-support.patch
  * 0005-docs-Document-available-crypto-disks-checks.patch
  * 0006-disk-cryptodisk-Add-the-erase-secrets-function.patch
  * 0007-disk-cryptodisk-Wipe-the-passphrase-from-memory.patch
  * 0008-cryptocheck-Add-quiet-option.patch
- patch rebased
  * 0001-Improve-TPM-key-protection-on-boot-interruptions.patch
  * 0004-Key-revocation-on-out-of-bound-file-access.patch
- patch refrehed
  * 0001-Fix-PowerPC-CAS-reboot-to-evaluate-menu-context.patch
  * 0002-Requiring-authentication-after-tpm-unlock-for-CLI-ac.patch</changelog>
  <changelog author="mchang@suse.com" date="1747742400">- Fix incorrect nvme disks and boot order in bootlist output (bsc#1237174)
  * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch</changelog>
</package>
<package pkgid="cab186fbe6cf2373ebdc982f4f644019e5ca8f22d4c22a6fe8988d2510a2a74e" name="gstreamer-plugins-bad" arch="src">
  <version epoch="0" ver="1.24.0" rel="150600.4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + asfmux: fix possible unaligned write on 32-bit ARM.
  + d3d11videosink: Fix error on pause and play.
  + d3dvideosink: Fix navigation event leak.
  + decklink: Correctly handle SDK strings on macOS and free
    strings after usage on Linux.
  + dvdspu: Make sure enough data is allocated for the available
    data (bsc#1213126, CVE-2023-37329).
  + fdkaacdec: Support up to 5 rear channels.
  + h265parse: Fix framerate handling.
  + kmssink: Add STM32 LTDC and NXP i.MX8M Plus LCDIFv3
    auto-detection.
  + sdpdemux: ensure that only one srcpad is created per stream.
  + srtpdec: fix critical warnings on shutdown.
  + testsrcbin: Remove spurious caps unref.
  + va: map the mbbrc to correct enum value in get_property().
  + vtenc: apply DTS offset to ensure DTS &lt;= PTS.
  + vtdec: time glitches on h264 playback.
  + waylandsink: Emit "map" signal boarder surface is ready.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + d3d11bufferpool: Fix heavy CPU usage in case of fixed-size pool
  + jpegparser: jpegdecoder: Don't pollute bus and comply with spec
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + webrtcbin: Prevent critical warning when creating an additional
    data channel
  + webrtcstats: Properly report IceCandidate type
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1695124800">- Add patch from upstream to build the package with
  webrtc-audio-processing-1 in Tumbleweed:
  * 0001-Update-code-for-webrtc-audio-processing-1.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audiolatency: Forward latency query and event upstream
  + av1parser: Fix segmentation params update
  + codecparsers: Fix MPEG-1 aspect ratio table
  + d3d11convert: Passthrough allocation query on same caps
  + h264decoder: Update latency dynamically
  + h265parser:
  - Allow partially broken hvcC data
  - Fix possible overflow using max_sub_layers_minus1
    (bsc#1215793, CVE-2023-40476)
  + hlssink2: Always use forward slash separator
  + mdns: Fix a crash on context error
  + mxfdemux: Fix integer overflow causing out of bounds writes
    when handling invalid uncompressed video and check channels for
    AES3 (bsc#1215796, CVE-2023-40474, bsc#1215792, CVE-2023-40475)
  + nvencoder: Fix negotiation error when interlace-mode is
    unspecified
  + rtmp2: Allow NULL flash version, omitting the field
  + rtmp2sink: fix crash if message conversion failed
  + transcodebin: Fixes for upstream selectable support
  + va: Fix in error logs functions mismatches
  + waylandsink:
  - Crop surfaces to their display width height
  - Fix cropping for video with non-square aspect ratio
  + webrtc: Fix docs for create-data-channel action signal
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audiobuffersplit: disable max-silence-time if set to 0
  + libde265: Do not decode the non 4:2:0 8 bits format
  + codecparsers: av1: Clip max tile rows and cols values
    (ZDI-CAN-22226, CVE-2023-44429, bsc#1217211)
  + codecs: h265: Do not free slice header before using it
  + d3d11converter: Fix 10/12bits planar output
  + d3d11decoder: Fix crash on negotiate() when decoder is not
    configured
  + d3d11videosink: Fix toggling between fullscreen and maximized
  + d3d11videosink: Fix window switching in case of fullscreen mode
  + d3d11screencapturesrc: Fix mouse cursor blending
  + decklink: Fix broken COM string conversion
  + decklink: Decklink Device Provider wrongly parses SDK strings
  + gstwayland: Don't depend on wayland-protocols
  + interaudiosrc: Add audio meta to buffers containing
    non-interleaved samples
  + kmssink: Add TIDSS auto-detection
  + mfvideoencoder: Fix typo in template caps
  + mxfdemux: Store GstMXFDemuxEssenceTrack in their own fixed
    allocation (ZDI-CAN-22300 bsc#1217213 CVE-2023-44446)
  + nvcodec: fix bounds for auto-select GPU enumeration
  + openh264: Fail gracefully if openh264 encoder/decoder creation
    fails
  + tsmux: More cleanups
  + tsmux: Fill padding packets with stuffing bytes
  + v4l2codecs: Fix tiled formats stride conversion
  + v4l2videodec: Correctly free caps to avoid memory leak
  + wasapi2: Don't use global volume control object
  + wasapi2device: Ignore activation failed device
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700568000">- Move pkgconfig(dvdnav) and pkgconfig(dvdread) BuildRequires out
  of BUILD_ORIG conditional, and stop passing resindvd=disabled and
  siren=disabled to meson setup, build dvd and siren 7 support in
  main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700740800">- Stop passing sctp=disabled and pass sctp=enabled to meson setup
  instead, enable build of sctp plugin.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + aesenc: Fix IV length addition to output buffer length
  + av1parser: Fix array sizes in scalability structure
    (ZDI-CAN-22300  bsc#1218534)
  + camerabin: Fix source updates with user filters
  + codecparsers: av1: Clip max tile rows and cols values
  + dtlscertificate: Define WINSOCKAPI before including windows.h
  + d3d11: fix building with address sanitizer
  + d3d11screencapturesrc: Fix wrong color with HDR enabled
  + h264decoder: Fix GstVideoCodecFrame leak
  + ladspa: Make RDF parsing truly optional
  + rtponviftimestamp: Fix drop-out-of-segment=false mode
  + qsvdecoder: Fix stream format detection
  + webrtcsdp: Remove fingerprint validation that doesn't make
    sense
  + GstPlay: Automatically flush the bus when disposing the
    signal adapter
  + GstPlayer: Without dispatcher emit signals directly instead
    of via the default main context
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="mlin@suse.com" date="1706011200">- Disable zxing in Leap15
  * Leap 15 can not provide zxing &gt;= 1.4.0, zxing is inherited from
    SLE15 but SLE15 do provide zxing version 1.2.0 only, Factory do
    have zxing-cpp 2.0.0 however it's not an API compatible version.</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + av1parser: Fix potential stack overflow during tile list
    parsing (CVE-2024-0444, bsc#1219453, ZDI-CAN-22300)
  + camerabin: Correctly relink viewfinderbin_queue
  + GstPlay: Fix error details parsing
  + h264decoder: Handle malformed avc/avc3 packets
  + h264decoder: h265decoder: Align with wraparound fix
  + vp8decoder: vp9decoder: av1decoder: mpeg2decoder:
    Fix multiplication wraparound
  + vah264enc/vah264dec issues after recent upgrade to 1.22.8
    from 1.22.7
  + va: fixes for Mesa Gallium drivers in Mesa versions older
    than v23.2
  + vp9parse: Fix critical warning during caps negotiation
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1706875200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)
- added support for oneVPL</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1707134400">- Require libvpl only on supported architectures (x86_64 and aarch64)</changelog>
  <changelog author="dimstar@opensuse.org" date="1709553600">- Disable webrtc audio  processing dependency on s390 s390x ppc64:
  webrtc-autio-processing is excluded on these architectures.</changelog>
  <changelog author="alarrosa@suse.com" date="1709640000">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.
- Remove patch which is already included in this version:
  * 0001-Update-code-for-webrtc-audio-processing-1.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1709726400">- Add new gstreamer plugins to baselibs.conf</changelog>
  <changelog author="dimstar@opensuse.org" date="1709726401">- baselibs.conf: Produce -32bit biarch packages of
  libgstanalytics-1_0-0 and libgstmse-1_0-0: dependencies of
  gstreamer-plugins-bad-32bit.</changelog>
  <changelog author="alarrosa@suse.com" date="1710244800">- Add patch that fixes a crash when initializing gstva, submitted
  to upstream at https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/6319
  (boo#1221150):
  * 0001-Move-PROP_RATE_CONTROL-to-the-end-of-the-array.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1710763200">- Disable the webrtcdsp plugin if webrtc-audio-processing-1 is not
  available (as in s390x).</changelog>
  <changelog author="mgorse@suse.com" date="1747656000">- Add gstreamer-plugins-bad-CVE-2025-3887.patch: fix bounds checks
  in h265parser (boo#1242809 CVE-2025-3887).</changelog>
</package>
<package pkgid="1a93dc6ac259e93bbfc0a85e6163fbbe8761dfccfe1a177b185d7c2d338b8dc7" name="gstreamer-plugins-base" arch="src">
  <version epoch="0" ver="1.24.0" rel="150600.3.11.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
  <changelog author="mgorse@suse.com" date="1736164800">- Add various CVE fixes:
  + CVE-2024-47538.patch (boo#1234415 CVE-2024-47538)
  + CVE-2024-47835.patch (boo#1234450 CVe-2024-47835)
  + CVE-2024-47600.patch (boo#1234453 CVE-2024-47600)
  + CVE-2024-47615.patch (boo#1234456 CVE-2024-47615)
  + CVE-2024-47541.patch (boo#1234459 CVE-2024-47541)
  + CVE-2024-47542.patch (boo#1234460 CVE-2024-47542)</changelog>
  <changelog author="mgorse@suse.com" date="1736251200">- Add CVE-2024-47607.patch: opusdec: Set at most 64 channels to
  NONE position (boo#1234455 CVE-2024-47607).</changelog>
  <changelog author="mgorse@suse.com" date="1749643200">- Add more CVE fixes:
  + CVE-2025-47808.patch (boo#1244404 CVE-2025-47808)
  + CVE-2025-47807.patch (boo#1244403 CVE-2025-47807)
  + CVE-2025-47806.patch (boo#1244407 CVE-2025-47806)</changelog>
</package>
<package pkgid="2e8521a493910993052cff316df7e59c5268597033bc931732b83d153cb5a7b0" name="gstreamer-plugins-base" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.11.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
  <changelog author="mgorse@suse.com" date="1736164800">- Add various CVE fixes:
  + CVE-2024-47538.patch (boo#1234415 CVE-2024-47538)
  + CVE-2024-47835.patch (boo#1234450 CVe-2024-47835)
  + CVE-2024-47600.patch (boo#1234453 CVE-2024-47600)
  + CVE-2024-47615.patch (boo#1234456 CVE-2024-47615)
  + CVE-2024-47541.patch (boo#1234459 CVE-2024-47541)
  + CVE-2024-47542.patch (boo#1234460 CVE-2024-47542)</changelog>
  <changelog author="mgorse@suse.com" date="1736251200">- Add CVE-2024-47607.patch: opusdec: Set at most 64 channels to
  NONE position (boo#1234455 CVE-2024-47607).</changelog>
  <changelog author="mgorse@suse.com" date="1749643200">- Add more CVE fixes:
  + CVE-2025-47808.patch (boo#1244404 CVE-2025-47808)
  + CVE-2025-47807.patch (boo#1244403 CVE-2025-47807)
  + CVE-2025-47806.patch (boo#1244407 CVE-2025-47806)</changelog>
</package>
<package pkgid="d514ef024ce584ac552563d8ac30c7f4e0c8a2c79c05535843ee18f2c63d2fa3" name="gstreamer-plugins-base-devel" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.11.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
  <changelog author="mgorse@suse.com" date="1736164800">- Add various CVE fixes:
  + CVE-2024-47538.patch (boo#1234415 CVE-2024-47538)
  + CVE-2024-47835.patch (boo#1234450 CVe-2024-47835)
  + CVE-2024-47600.patch (boo#1234453 CVE-2024-47600)
  + CVE-2024-47615.patch (boo#1234456 CVE-2024-47615)
  + CVE-2024-47541.patch (boo#1234459 CVE-2024-47541)
  + CVE-2024-47542.patch (boo#1234460 CVE-2024-47542)</changelog>
  <changelog author="mgorse@suse.com" date="1736251200">- Add CVE-2024-47607.patch: opusdec: Set at most 64 channels to
  NONE position (boo#1234455 CVE-2024-47607).</changelog>
  <changelog author="mgorse@suse.com" date="1749643200">- Add more CVE fixes:
  + CVE-2025-47808.patch (boo#1244404 CVE-2025-47808)
  + CVE-2025-47807.patch (boo#1244403 CVE-2025-47807)
  + CVE-2025-47806.patch (boo#1244407 CVE-2025-47806)</changelog>
</package>
<package pkgid="cb9e0a77855d025e3512fcfb94ed258d88331e1582c56721336adf7329458d7d" name="gstreamer-plugins-base-lang" arch="noarch">
  <version epoch="0" ver="1.24.0" rel="150600.3.11.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
  <changelog author="mgorse@suse.com" date="1736164800">- Add various CVE fixes:
  + CVE-2024-47538.patch (boo#1234415 CVE-2024-47538)
  + CVE-2024-47835.patch (boo#1234450 CVe-2024-47835)
  + CVE-2024-47600.patch (boo#1234453 CVE-2024-47600)
  + CVE-2024-47615.patch (boo#1234456 CVE-2024-47615)
  + CVE-2024-47541.patch (boo#1234459 CVE-2024-47541)
  + CVE-2024-47542.patch (boo#1234460 CVE-2024-47542)</changelog>
  <changelog author="mgorse@suse.com" date="1736251200">- Add CVE-2024-47607.patch: opusdec: Set at most 64 channels to
  NONE position (boo#1234455 CVE-2024-47607).</changelog>
  <changelog author="mgorse@suse.com" date="1749643200">- Add more CVE fixes:
  + CVE-2025-47808.patch (boo#1244404 CVE-2025-47808)
  + CVE-2025-47807.patch (boo#1244403 CVE-2025-47807)
  + CVE-2025-47806.patch (boo#1244407 CVE-2025-47806)</changelog>
</package>
<package pkgid="d1467f79284670bc730aa361dfd2ee64eedcfc5fd19c5fb684d6a91229599ae4" name="gstreamer-plugins-good" arch="src">
  <version epoch="0" ver="1.24.0" rel="150600.3.7.1"/>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + deinterlace: silence unused-but-set werror from imported code
  + qtdemux: fix leak of channel_mapping
  + rtpopusdepay: missing sprop-stereo should not assume mono
  + rtpjitterbuffer: Fix invalid memory access in
    rtp_jitter_buffer_pop()
  + rtpptdemux: fix leak of caps when ignoring a pt
  + rtpredenc: quieten warning about ignoring header extensions
  + soup: Fix pre-processor macros in souploader for libsoup-3.0
  + twcc: Note that twcc-stats packet loss counts reordering as
    loss + add some logging
  + video4linux2: Manual backports for RPi users
  + wavparse: handle URI query in any parse state, fixing audio
    track selection issue in GES
  + wavparse: Unset DISCONT buffer flag for divided into multiple
    buffers in push mode</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + deinterlace: various bug fixes for yadif method
  + deinterlace: Refactor greedyh and fix planar formats
  + deinterlace: Prevent race between method configuration and
    latency query
  + gtk video sink: Fix rotation not being applied when paused
  + jpegdec: fix RGB conversion handling
  + matroskademux: improved ProRes video handling
  + matroskamux: Handle multiview-mode/flags/pixel-aspect-ratio
    caps fields correctly when checking caps equality on
    input caps changes
  + rtprtx: don't access type-system per buffer
    (performance optimisation); code cleanups
  + rtpulpfecenc: fix unmatched g_slice_free()
  + rtpvp8depay: fix crash when making GstRTPPacketLost custom
    event
  + qtmux: Don't post an error message if pushing a sample failed
    with FLUSHING (e.g. on pipeline shutdown)
  + soup: Lookup libsoup dylib files on Apple platforms &amp; fix
    Cerbero static build on Android and iOS
  + souphttpsrc: element not present on iOS after 1.20.0 update
  + v4l2tuner: return NULL if no norm set
  + v4l2bufferpool: Fix race condition between qbuf and pool
    streamoff
  + meson: Don't build lame plugin with -Dlame=disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + alpha: fix stride issue when out buffer has padding on right
  + isoff: Fix earliest pts field parse issue
  + matroska-mux: allow width + height changes for
    avc3|hev1|vp8|vp9
  + qt: Fix another instance of Qt/GStreamer both defining GLsync differently
  + qtdemux:
  - Avoid crash on reconfiguring.
  - Guard against timestamp calculation overflow in gap event loop
  - Don't use invalid values from failed trex parsing
  - Possible endless loop
  + rtpjitterbuffer:
  - Only unschedule timers for late packets if they're not RTX
    packets and only once
  - Remove lost timer for out of order packets
  + rtspsrc:
  - SETUP generates 400 Bad Request
  - Retry SETUP with non-compliant URL resolution on "Bad
    Request" and "Not found"
  + rtpst2022-1-fecenc: Drain column packets on EOS
  + rtpvp8depay: If configured to wait for keyframes after packet
    loss, also do that if incomplete frames are detected
  + splitmuxsink: Don't crash on EOS without buffer
  + splitmuxsrc:
  - Stop pad task before cleanup
  - Don't consider unlinked pads when deactivating part
  + soup: libsoup3 makes audio streaming stop
  + v4l2: fix critical when unreferencign buffer with no data
  + v4l2bufferpool: Fix debug trace
  + v4l2object: Add support for Apple's full-range bt709 colorspace
    variant 1:3:5:1
  + v4l2videocodec: workaround for failure to fully drain frames
    preceding MIDSTREAM renegotiation
  + v4l2allocator: Fix invalid imported dmabuf fd
  + videoflip: Fix caps negotiation when method is selected
  + build failure trying to build jack examples
  + examples: don't try and build jack examples if jack was
    disabled
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + flacparse: Fix handling of headers advertising 32bps
  + multiudpsink: allow binding to IPv6 address
  + oss4: Fix debug category initialization
  + qt5:
  - Deactivate context if fill_info fails
  - Initialize GError properly in gst_qt_get_gl_wrapcontext()
  + qtdemux:
  - Check return value from gst_structure_get in PIFF box
  - Use unsigned int types to store result of QT_UINT32
  - Prefill mode fixes
  + rtpjitterbuffer tests: Cast drop-messages-interval type
    properly (fixing it on 32-bit architectures)
  + rtspsrc:
  - Don't replace 404 errors with "no auth protocol found"
  - Fix seek event leaks
  - Fix usage of IPv6 connections in SETUP
  - Only EOS on timeout if all streams are timed out/EOS
  + splitmuxsrc: don't queue data on unlinked pads
  + v4l2: Fix SIGSEGV on 'change state' during 'format change'
  + v4l2videodec: Fix activation of internal pool
  + wavparse:
  - Avoid occasional crash due to referencing freed buffer.
  - Fix crash that occurs in push mode when header chunks are
    corrupted in certain ways.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Add disabled pkgconfig(Qt6Core), pkgconfig(Qt6Gui),
  pkgconfig(Qt6Qml), pkgconfig(Qt6Quick) and
  pkgconfig(Qt6WaylandClient) BuildRequires and pass Dqt6=disabled
  to meson, do not build qt6 support yet.
- Fixed in 1.21.1:
  + avoid integer overflow in WavPack header handling code
    (boo#1201688 CVE-2022-1920).
  + fix integer overflow resulting in heap corruption
    (boo#1201693 CVE-2022-1921).
  + fix integer overflows in zlib/bz2/etc. decompression
    (boo#1201702 boo#1201704 boo#1201706 boo#1201707 boo#1201708
    CVE-2022-1922 CVE-2022-1923 CVE-2022-1924 CVE-2022-1925
    CVE-2022-2122).</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update to version 1.22.1:
  + adaptivedemux2: Fix buffering threshold initialization
  + dashdemux2: the seek operation takes a log time to finish for
    some streams
  + glvideomixer: Keep a reference to the underlying pad
  + qtdemux:
  - Don't emit GstSegment correcting start time when in MSE mode
  - Handle moov atom length=0 case by reading until the end
  + qtdemux, qtmux: Drop av1C version 0 parsing and implement
    version 1 parsing/writing
  + qtmux: Fix assertion on caps update
  + redenc: fix setting of extension ID for twcc
  + rtpssrcdemux: set different stream-id on each src pad
  + rtspsrc: Use the correct vfunc for the push-backchannel-sample
    action signal
  + udpsrc: GstSocketTimestampMessage only for SCM_TIMESTAMPNS
  + v4l2h264dec: Fix Raspberry Pi4 will not play video in
    application
- Rebase patch with quilt.</changelog>
  <changelog author="alarrosa@suse.com" date="1679400000">- Conflict with gstreamer-plugins-ugly &lt; 1.22.0 to ensure we don't
  have conflicts with gstreamer-plugins-ugly 1.20.1 since
  libgstxingmux.so was moved from -ugly to -good (boo#1209541)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + osxvideosink: fix broken aspect ratio and frame drawing region
  + qtdemux: Fix seek adjustment with SNAP_AFTER flag
  + rtpopusdepay, matroskamux: Fix invalid rate while muxing Opus
    in Matroska
  + rtpmanager: twcc: Fix duplicate packet handling
  + rtsp: url: fix incorrect request URI scheme for TLS transport
    methods (regression)
  + rtspsrc:
  - Consider "451: Parameter Not Understood" when handling broken
    control urls
  - fix behavior change with URI protocols in OPTIONS requests
  - Skip PTs with caps incompatible to the global caps
  - rtpjpegdepay: fix logic error when checking if an end of
    image (EOI) tag is present
  + v4l2:
  - Add support for YVU420M format
  - mark JPEG as parsed
- Rebase patch with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + adaptivedemux2: fix critical when using an unsupported URI.
  + dashdemux2: mpdclient: fix divide by 0 if segment has no
    duration.
  + imagesequencesrc: Properly set default location.
  + multifile: error out if no filename was set.
  + osxvideosink: fix deadlock upon closing output window.
  + rtpmanager: rtpsession:
  - Data race leading to critical warnings.
  - Race conditions leading to critical warnings.
  + rtspsrc: Fix handling of * control path.
  + splitmuxsink: Catch invalid DTS to avoid running into problems
    later.
  + splitmuxsrc: Make PTS contiguous by preference.
  + qtdemux: emit no-more-pads after pruning old pads.
  + Revert "qtdemux: fix conditions for end of segment in reverse
    playback" to fix edit list regression.
  + qtdemux: Fix av1C parsing.
  + qtmux: Fix extraction of CEA608 data from S334-1A packets.
  + qtwindow: unref caps in destructor.
  + v4l2:
  - device provider: Fix GMainLoop leak.
  - videodec: Rework dynamic resolution change handling.
  - videodec: Prefer acquired caps over anything downstream.
  + videoflip:
  - Fix setting of method property at construction time.
  - Videoflip 1.22.2 not rotating video when extracting frames.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="jonaski@opensuse.org" date="1686657600">- Add patch to fix bug with data url scheme.
  * adaptivedemux2-uri-data.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + flacparse: Avoid integer overflow in available data check for
    image tags (boo#1213128, CVE-2023-37327).
  + flvmux: use the correct timestamp to calculate wait times.
  + isomp4: Fix (E)AC-3 channel count handling.
  + jpegdec: fixes related to interlaced jpeg.
  + pngdec: Fix wrong colours output from 16bit RGB images.
  + qtmux, qtdemux: fix byte order for opus extension.
  + rtspsrc: Do not try send dropped get/set parameter.
  + qt5, qt6: Add more meson options and eliminate all automagic.
  + qt: glrenderer: don't attempt to use QWindow from non-Qt main
    thread.
  + qml6glsink: Support building on win32.
  + v4l2src: fix support for bayer format.
  + v4l2: Change to query only up to
    V4L2_CID_PRIVATE_BASE+V4L2_CID_MAX_CTRLS.
  + v4l2videodec: treat MPEG-1 format as MPEG-2.
  + v4l2videoenc: support force keyframe event in v4l2 encoder.
  + tests: rtpbin_buffer_list: fix possible unaligned write/read on
    32-bit ARM.
- Add libQt5Gui-private-headers-devel BuildRequires: New
  explicit dependency.
- Rebase reduce-required-meson.patch.
- Drop adaptivedemux2-uri-data.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + adaptivedemux2: Fix early seeking
  + hlsdemux2:
  - Ensure processed webvtt ends with empty new line
  - Don't set a referer when updating playlists
  + matroska: demux: Strip signal byte when encrypted
  + rtspsrc: Fix crash when is-live=false
  + gtk: Fix critical caused by pointer movement when stream is
    getting ready
  + qt6: Set sampler filtering method, fixes bad quality with
    qml6glsink and gstqt6d3d11
  + qtdemux: opus: set entry as sampled
  + v4l2src: handle resolution change when buffers are copied
  + v4l2videodec:
  - Fix handling of initial gaps
  - correctly register v4l2mpeg2dec
  - replace custom QUERY_CAPS handling with getcaps callback
  + videoflip:
  - update orientation tag in auto mode
  - fix critical when tag list is not writable
- Rebase reduce-required-meson.patch.
- Pass qt-egl=disabled to meson, we are not ready for this feature
  yet.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + adaptivedemux2: fix memory leak
  + pulsedeviceprovider: fix incorrect usage of GST_ELEMENT_ERROR
  + qt:
  - Unbreak build with qt-egl enabled but viv_fb missing
  - Fix searching of qt5/qt6 tools with qmake in Meson
  + qtdemux:
  - Fix premature EOS when some files are played in push mode
  - Attach cbcs crypt info at the right moment
  + rtpjitterbuffer: Avoid integer overflow in max saveable packets
    calculation with negative offset
  + videoflip: fix concurrent access when modifying the tag list
  + v4l2:
  - allocator: Don't close foreign dmabuf
  - bufferpool:
    . Fix large encoded stream regression
    . Problems when checking for truncated buffer
  - Fix support for left and top padding
  + v4l2object: clear format lists if source change event is
    received
- Rebase reduce-required-meson.patch
- Add libqt5-linguist BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + adaptivedemux2: Do not submit_transfer when cancelled
  + adaptivedemux2: Call GTasks's return functions for blocking
    tasks
  + flacenc: Correctly handle up to 255 cue entries
  + flvmux: set the src segment position as running time
  + imagesequencesrc: fix deadlock when feeding the same image in
    a loop
  + pngenc: output one frame only in snapshot mode and mark output
    frames as I-frames
  + qmlglsrc: sync on the streaming thread
  + souphttpsrc: Chain up to finalize to fix memory leak
  + wavparse: fix buffer leak with adtl tag
  + v4l2codecs: Avoid QBUF/DQBUF struct timeval .tv_usec
    wrap-around at frame 1000000
  + v4l2codecs: Fix tiled formats stride conversion
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + dcaparse: keep upstream buffer meta
  + rtpklvdepay: Recover after invalid fragmented KLV unit
  + matroska-demux: fix accumulated base offset in segment seeks
  + qtdemux: fix bug report URL
  + qtdemux: Don't overflow sample index
  + qtdemux: Fix reverse playback for pcm audio stream
  + qtdemux: Ignore raw audio streams when adjusting seek
  + qtdemux: Under-seeking to a key unit in certain (encoded by
    Adobe products) ProRes movies (macOS x86_64 &amp; arm64,
    Windows x86_64, ...)
  + rtpac3depay: should output audio/x-ac3 not audio/ac3
  + rtp: Fix incorrect RTP channel order lookup by name
  + v4l2bufferpool: add lock as atomic operation for seek
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + rtpsession: Only warn once if configured latency needs to be
    known but isn't yet
  + rtphdrext-clientaudiolevel: Fix level value being written by
    the extension
  + rtspsrc: set multicast-iface on udpsinks and fix RTCP sink TTL
  + v4l2object: clear old fds when initializing poll during
    opening v4l2 device
  + v4l2src: Consider framerate during caps selection
  + vpxdec: Use appropriate domain and code for decoding errors
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1709640000">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="mgorse@suse.com" date="1736164800">- Add various CVE fixes:
  + CVE-2024-47606_2.patch (boo#1234449 CVE-2024-47606)
  + CVE-2024-47537.patch (boo#1234414 CVE-2024-47537)
  + CVE-2024-47539.patch (boo#1234417 CVE-2024-47539)
  + CVE-2024-47540.patch (boo#1234421 CVE-2024-47540)
  + CVE-2024-47596.patch (boo#1234424 CVE-2024-47596)
  + CVE-2024-47597.patch (boo#1234425 CVE-2024-47597)
  + CVE-2024-47598.patch (boo#1234426 CVE-2024-47598)
  + CVE-2024-47599.patch (boo#1234427 CVE-2024-47599)
  + CVE-2024-47601.patch (boo#1234428 CVE-2024-47601)
  + CVE-2024-47602.patch (boo#1234432 CVE-2024-47602)
  + CVE-2024-47603.patch (boo#1234433 CVE-2024-47603)
  + CVE-2024-47775.patch (boo#1234434 CVE-2024-47775)
  + CVE-2024-47776.patch (boo#1234435 CVE-2024-47776)
  + CVE-2024-47777.patch (boo#1234436 CVE-2024-47777)
  + CVE-2024-47778.patch (boo#1234439 CVE-2024-47778)
  + CVE-2024-47834.patch (boo#1234440 CVE-2024-47834)
  + CVE-2024-47774.patch (boo#1234446 CVE-2024-47774)
  + CVE-2024-47613.patch (boo#1234447 CVE-2024-47613)
  + CVE-2024-47543.patch (boo#1234462 CVE-2024-47543)
  + CVE-2024-47544.patch (boo#1234473 CVE-2024-47544)
  + CVE-2024-47545.patch (boo#1234476 CVE-2024-47545)
  + CVE-2024-47546.patch (boo#1234477 CVE-2024-47546)</changelog>
  <changelog author="mgorse@suse.com" date="1749643200">- Add gstreamer-qt-matrix-flipping.patch: use mvhd transform matrix
  and support for flipping. Adds the byte reader used to fix
  CVE-2025-47183.
- Add more CVE fixes:
  + CVE-2025-47183.patch (boo#1244406 CVE-2025-47183)
  + CVE-2025-47219.patch (boo#1244405 CVE-2025-47219)</changelog>
</package>
<package pkgid="8cb4c928447b4e10c45effc62450b7c5b58f88c4a030b78e849edef2cf3dd757" name="gstreamer-plugins-good" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.7.1"/>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + deinterlace: silence unused-but-set werror from imported code
  + qtdemux: fix leak of channel_mapping
  + rtpopusdepay: missing sprop-stereo should not assume mono
  + rtpjitterbuffer: Fix invalid memory access in
    rtp_jitter_buffer_pop()
  + rtpptdemux: fix leak of caps when ignoring a pt
  + rtpredenc: quieten warning about ignoring header extensions
  + soup: Fix pre-processor macros in souploader for libsoup-3.0
  + twcc: Note that twcc-stats packet loss counts reordering as
    loss + add some logging
  + video4linux2: Manual backports for RPi users
  + wavparse: handle URI query in any parse state, fixing audio
    track selection issue in GES
  + wavparse: Unset DISCONT buffer flag for divided into multiple
    buffers in push mode</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + deinterlace: various bug fixes for yadif method
  + deinterlace: Refactor greedyh and fix planar formats
  + deinterlace: Prevent race between method configuration and
    latency query
  + gtk video sink: Fix rotation not being applied when paused
  + jpegdec: fix RGB conversion handling
  + matroskademux: improved ProRes video handling
  + matroskamux: Handle multiview-mode/flags/pixel-aspect-ratio
    caps fields correctly when checking caps equality on
    input caps changes
  + rtprtx: don't access type-system per buffer
    (performance optimisation); code cleanups
  + rtpulpfecenc: fix unmatched g_slice_free()
  + rtpvp8depay: fix crash when making GstRTPPacketLost custom
    event
  + qtmux: Don't post an error message if pushing a sample failed
    with FLUSHING (e.g. on pipeline shutdown)
  + soup: Lookup libsoup dylib files on Apple platforms &amp; fix
    Cerbero static build on Android and iOS
  + souphttpsrc: element not present on iOS after 1.20.0 update
  + v4l2tuner: return NULL if no norm set
  + v4l2bufferpool: Fix race condition between qbuf and pool
    streamoff
  + meson: Don't build lame plugin with -Dlame=disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + alpha: fix stride issue when out buffer has padding on right
  + isoff: Fix earliest pts field parse issue
  + matroska-mux: allow width + height changes for
    avc3|hev1|vp8|vp9
  + qt: Fix another instance of Qt/GStreamer both defining GLsync differently
  + qtdemux:
  - Avoid crash on reconfiguring.
  - Guard against timestamp calculation overflow in gap event loop
  - Don't use invalid values from failed trex parsing
  - Possible endless loop
  + rtpjitterbuffer:
  - Only unschedule timers for late packets if they're not RTX
    packets and only once
  - Remove lost timer for out of order packets
  + rtspsrc:
  - SETUP generates 400 Bad Request
  - Retry SETUP with non-compliant URL resolution on "Bad
    Request" and "Not found"
  + rtpst2022-1-fecenc: Drain column packets on EOS
  + rtpvp8depay: If configured to wait for keyframes after packet
    loss, also do that if incomplete frames are detected
  + splitmuxsink: Don't crash on EOS without buffer
  + splitmuxsrc:
  - Stop pad task before cleanup
  - Don't consider unlinked pads when deactivating part
  + soup: libsoup3 makes audio streaming stop
  + v4l2: fix critical when unreferencign buffer with no data
  + v4l2bufferpool: Fix debug trace
  + v4l2object: Add support for Apple's full-range bt709 colorspace
    variant 1:3:5:1
  + v4l2videocodec: workaround for failure to fully drain frames
    preceding MIDSTREAM renegotiation
  + v4l2allocator: Fix invalid imported dmabuf fd
  + videoflip: Fix caps negotiation when method is selected
  + build failure trying to build jack examples
  + examples: don't try and build jack examples if jack was
    disabled
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + flacparse: Fix handling of headers advertising 32bps
  + multiudpsink: allow binding to IPv6 address
  + oss4: Fix debug category initialization
  + qt5:
  - Deactivate context if fill_info fails
  - Initialize GError properly in gst_qt_get_gl_wrapcontext()
  + qtdemux:
  - Check return value from gst_structure_get in PIFF box
  - Use unsigned int types to store result of QT_UINT32
  - Prefill mode fixes
  + rtpjitterbuffer tests: Cast drop-messages-interval type
    properly (fixing it on 32-bit architectures)
  + rtspsrc:
  - Don't replace 404 errors with "no auth protocol found"
  - Fix seek event leaks
  - Fix usage of IPv6 connections in SETUP
  - Only EOS on timeout if all streams are timed out/EOS
  + splitmuxsrc: don't queue data on unlinked pads
  + v4l2: Fix SIGSEGV on 'change state' during 'format change'
  + v4l2videodec: Fix activation of internal pool
  + wavparse:
  - Avoid occasional crash due to referencing freed buffer.
  - Fix crash that occurs in push mode when header chunks are
    corrupted in certain ways.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Add disabled pkgconfig(Qt6Core), pkgconfig(Qt6Gui),
  pkgconfig(Qt6Qml), pkgconfig(Qt6Quick) and
  pkgconfig(Qt6WaylandClient) BuildRequires and pass Dqt6=disabled
  to meson, do not build qt6 support yet.
- Fixed in 1.21.1:
  + avoid integer overflow in WavPack header handling code
    (boo#1201688 CVE-2022-1920).
  + fix integer overflow resulting in heap corruption
    (boo#1201693 CVE-2022-1921).
  + fix integer overflows in zlib/bz2/etc. decompression
    (boo#1201702 boo#1201704 boo#1201706 boo#1201707 boo#1201708
    CVE-2022-1922 CVE-2022-1923 CVE-2022-1924 CVE-2022-1925
    CVE-2022-2122).</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update to version 1.22.1:
  + adaptivedemux2: Fix buffering threshold initialization
  + dashdemux2: the seek operation takes a log time to finish for
    some streams
  + glvideomixer: Keep a reference to the underlying pad
  + qtdemux:
  - Don't emit GstSegment correcting start time when in MSE mode
  - Handle moov atom length=0 case by reading until the end
  + qtdemux, qtmux: Drop av1C version 0 parsing and implement
    version 1 parsing/writing
  + qtmux: Fix assertion on caps update
  + redenc: fix setting of extension ID for twcc
  + rtpssrcdemux: set different stream-id on each src pad
  + rtspsrc: Use the correct vfunc for the push-backchannel-sample
    action signal
  + udpsrc: GstSocketTimestampMessage only for SCM_TIMESTAMPNS
  + v4l2h264dec: Fix Raspberry Pi4 will not play video in
    application
- Rebase patch with quilt.</changelog>
  <changelog author="alarrosa@suse.com" date="1679400000">- Conflict with gstreamer-plugins-ugly &lt; 1.22.0 to ensure we don't
  have conflicts with gstreamer-plugins-ugly 1.20.1 since
  libgstxingmux.so was moved from -ugly to -good (boo#1209541)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + osxvideosink: fix broken aspect ratio and frame drawing region
  + qtdemux: Fix seek adjustment with SNAP_AFTER flag
  + rtpopusdepay, matroskamux: Fix invalid rate while muxing Opus
    in Matroska
  + rtpmanager: twcc: Fix duplicate packet handling
  + rtsp: url: fix incorrect request URI scheme for TLS transport
    methods (regression)
  + rtspsrc:
  - Consider "451: Parameter Not Understood" when handling broken
    control urls
  - fix behavior change with URI protocols in OPTIONS requests
  - Skip PTs with caps incompatible to the global caps
  - rtpjpegdepay: fix logic error when checking if an end of
    image (EOI) tag is present
  + v4l2:
  - Add support for YVU420M format
  - mark JPEG as parsed
- Rebase patch with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + adaptivedemux2: fix critical when using an unsupported URI.
  + dashdemux2: mpdclient: fix divide by 0 if segment has no
    duration.
  + imagesequencesrc: Properly set default location.
  + multifile: error out if no filename was set.
  + osxvideosink: fix deadlock upon closing output window.
  + rtpmanager: rtpsession:
  - Data race leading to critical warnings.
  - Race conditions leading to critical warnings.
  + rtspsrc: Fix handling of * control path.
  + splitmuxsink: Catch invalid DTS to avoid running into problems
    later.
  + splitmuxsrc: Make PTS contiguous by preference.
  + qtdemux: emit no-more-pads after pruning old pads.
  + Revert "qtdemux: fix conditions for end of segment in reverse
    playback" to fix edit list regression.
  + qtdemux: Fix av1C parsing.
  + qtmux: Fix extraction of CEA608 data from S334-1A packets.
  + qtwindow: unref caps in destructor.
  + v4l2:
  - device provider: Fix GMainLoop leak.
  - videodec: Rework dynamic resolution change handling.
  - videodec: Prefer acquired caps over anything downstream.
  + videoflip:
  - Fix setting of method property at construction time.
  - Videoflip 1.22.2 not rotating video when extracting frames.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="jonaski@opensuse.org" date="1686657600">- Add patch to fix bug with data url scheme.
  * adaptivedemux2-uri-data.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + flacparse: Avoid integer overflow in available data check for
    image tags (boo#1213128, CVE-2023-37327).
  + flvmux: use the correct timestamp to calculate wait times.
  + isomp4: Fix (E)AC-3 channel count handling.
  + jpegdec: fixes related to interlaced jpeg.
  + pngdec: Fix wrong colours output from 16bit RGB images.
  + qtmux, qtdemux: fix byte order for opus extension.
  + rtspsrc: Do not try send dropped get/set parameter.
  + qt5, qt6: Add more meson options and eliminate all automagic.
  + qt: glrenderer: don't attempt to use QWindow from non-Qt main
    thread.
  + qml6glsink: Support building on win32.
  + v4l2src: fix support for bayer format.
  + v4l2: Change to query only up to
    V4L2_CID_PRIVATE_BASE+V4L2_CID_MAX_CTRLS.
  + v4l2videodec: treat MPEG-1 format as MPEG-2.
  + v4l2videoenc: support force keyframe event in v4l2 encoder.
  + tests: rtpbin_buffer_list: fix possible unaligned write/read on
    32-bit ARM.
- Add libQt5Gui-private-headers-devel BuildRequires: New
  explicit dependency.
- Rebase reduce-required-meson.patch.
- Drop adaptivedemux2-uri-data.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + adaptivedemux2: Fix early seeking
  + hlsdemux2:
  - Ensure processed webvtt ends with empty new line
  - Don't set a referer when updating playlists
  + matroska: demux: Strip signal byte when encrypted
  + rtspsrc: Fix crash when is-live=false
  + gtk: Fix critical caused by pointer movement when stream is
    getting ready
  + qt6: Set sampler filtering method, fixes bad quality with
    qml6glsink and gstqt6d3d11
  + qtdemux: opus: set entry as sampled
  + v4l2src: handle resolution change when buffers are copied
  + v4l2videodec:
  - Fix handling of initial gaps
  - correctly register v4l2mpeg2dec
  - replace custom QUERY_CAPS handling with getcaps callback
  + videoflip:
  - update orientation tag in auto mode
  - fix critical when tag list is not writable
- Rebase reduce-required-meson.patch.
- Pass qt-egl=disabled to meson, we are not ready for this feature
  yet.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + adaptivedemux2: fix memory leak
  + pulsedeviceprovider: fix incorrect usage of GST_ELEMENT_ERROR
  + qt:
  - Unbreak build with qt-egl enabled but viv_fb missing
  - Fix searching of qt5/qt6 tools with qmake in Meson
  + qtdemux:
  - Fix premature EOS when some files are played in push mode
  - Attach cbcs crypt info at the right moment
  + rtpjitterbuffer: Avoid integer overflow in max saveable packets
    calculation with negative offset
  + videoflip: fix concurrent access when modifying the tag list
  + v4l2:
  - allocator: Don't close foreign dmabuf
  - bufferpool:
    . Fix large encoded stream regression
    . Problems when checking for truncated buffer
  - Fix support for left and top padding
  + v4l2object: clear format lists if source change event is
    received
- Rebase reduce-required-meson.patch
- Add libqt5-linguist BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + adaptivedemux2: Do not submit_transfer when cancelled
  + adaptivedemux2: Call GTasks's return functions for blocking
    tasks
  + flacenc: Correctly handle up to 255 cue entries
  + flvmux: set the src segment position as running time
  + imagesequencesrc: fix deadlock when feeding the same image in
    a loop
  + pngenc: output one frame only in snapshot mode and mark output
    frames as I-frames
  + qmlglsrc: sync on the streaming thread
  + souphttpsrc: Chain up to finalize to fix memory leak
  + wavparse: fix buffer leak with adtl tag
  + v4l2codecs: Avoid QBUF/DQBUF struct timeval .tv_usec
    wrap-around at frame 1000000
  + v4l2codecs: Fix tiled formats stride conversion
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + dcaparse: keep upstream buffer meta
  + rtpklvdepay: Recover after invalid fragmented KLV unit
  + matroska-demux: fix accumulated base offset in segment seeks
  + qtdemux: fix bug report URL
  + qtdemux: Don't overflow sample index
  + qtdemux: Fix reverse playback for pcm audio stream
  + qtdemux: Ignore raw audio streams when adjusting seek
  + qtdemux: Under-seeking to a key unit in certain (encoded by
    Adobe products) ProRes movies (macOS x86_64 &amp; arm64,
    Windows x86_64, ...)
  + rtpac3depay: should output audio/x-ac3 not audio/ac3
  + rtp: Fix incorrect RTP channel order lookup by name
  + v4l2bufferpool: add lock as atomic operation for seek
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + rtpsession: Only warn once if configured latency needs to be
    known but isn't yet
  + rtphdrext-clientaudiolevel: Fix level value being written by
    the extension
  + rtspsrc: set multicast-iface on udpsinks and fix RTCP sink TTL
  + v4l2object: clear old fds when initializing poll during
    opening v4l2 device
  + v4l2src: Consider framerate during caps selection
  + vpxdec: Use appropriate domain and code for decoding errors
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1709640000">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="mgorse@suse.com" date="1736164800">- Add various CVE fixes:
  + CVE-2024-47606_2.patch (boo#1234449 CVE-2024-47606)
  + CVE-2024-47537.patch (boo#1234414 CVE-2024-47537)
  + CVE-2024-47539.patch (boo#1234417 CVE-2024-47539)
  + CVE-2024-47540.patch (boo#1234421 CVE-2024-47540)
  + CVE-2024-47596.patch (boo#1234424 CVE-2024-47596)
  + CVE-2024-47597.patch (boo#1234425 CVE-2024-47597)
  + CVE-2024-47598.patch (boo#1234426 CVE-2024-47598)
  + CVE-2024-47599.patch (boo#1234427 CVE-2024-47599)
  + CVE-2024-47601.patch (boo#1234428 CVE-2024-47601)
  + CVE-2024-47602.patch (boo#1234432 CVE-2024-47602)
  + CVE-2024-47603.patch (boo#1234433 CVE-2024-47603)
  + CVE-2024-47775.patch (boo#1234434 CVE-2024-47775)
  + CVE-2024-47776.patch (boo#1234435 CVE-2024-47776)
  + CVE-2024-47777.patch (boo#1234436 CVE-2024-47777)
  + CVE-2024-47778.patch (boo#1234439 CVE-2024-47778)
  + CVE-2024-47834.patch (boo#1234440 CVE-2024-47834)
  + CVE-2024-47774.patch (boo#1234446 CVE-2024-47774)
  + CVE-2024-47613.patch (boo#1234447 CVE-2024-47613)
  + CVE-2024-47543.patch (boo#1234462 CVE-2024-47543)
  + CVE-2024-47544.patch (boo#1234473 CVE-2024-47544)
  + CVE-2024-47545.patch (boo#1234476 CVE-2024-47545)
  + CVE-2024-47546.patch (boo#1234477 CVE-2024-47546)</changelog>
  <changelog author="mgorse@suse.com" date="1749643200">- Add gstreamer-qt-matrix-flipping.patch: use mvhd transform matrix
  and support for flipping. Adds the byte reader used to fix
  CVE-2025-47183.
- Add more CVE fixes:
  + CVE-2025-47183.patch (boo#1244406 CVE-2025-47183)
  + CVE-2025-47219.patch (boo#1244405 CVE-2025-47219)</changelog>
</package>
<package pkgid="7ef43a0d28c8f5916c1b360f69f9d8a5561313798b96a6698f9abec6baca261e" name="gstreamer-plugins-good-lang" arch="noarch">
  <version epoch="0" ver="1.24.0" rel="150600.3.7.1"/>
  <changelog author="alarrosa@suse.com" date="1652097600">- Update to version 1.20.2:
  + deinterlace: silence unused-but-set werror from imported code
  + qtdemux: fix leak of channel_mapping
  + rtpopusdepay: missing sprop-stereo should not assume mono
  + rtpjitterbuffer: Fix invalid memory access in
    rtp_jitter_buffer_pop()
  + rtpptdemux: fix leak of caps when ignoring a pt
  + rtpredenc: quieten warning about ignoring header extensions
  + soup: Fix pre-processor macros in souploader for libsoup-3.0
  + twcc: Note that twcc-stats packet loss counts reordering as
    loss + add some logging
  + video4linux2: Manual backports for RPi users
  + wavparse: handle URI query in any parse state, fixing audio
    track selection issue in GES
  + wavparse: Unset DISCONT buffer flag for divided into multiple
    buffers in push mode</changelog>
  <changelog author="ukbeast89@protonmail.com" date="1655899200">- Update to version 1.20.3:
  + deinterlace: various bug fixes for yadif method
  + deinterlace: Refactor greedyh and fix planar formats
  + deinterlace: Prevent race between method configuration and
    latency query
  + gtk video sink: Fix rotation not being applied when paused
  + jpegdec: fix RGB conversion handling
  + matroskademux: improved ProRes video handling
  + matroskamux: Handle multiview-mode/flags/pixel-aspect-ratio
    caps fields correctly when checking caps equality on
    input caps changes
  + rtprtx: don't access type-system per buffer
    (performance optimisation); code cleanups
  + rtpulpfecenc: fix unmatched g_slice_free()
  + rtpvp8depay: fix crash when making GstRTPPacketLost custom
    event
  + qtmux: Don't post an error message if pushing a sample failed
    with FLUSHING (e.g. on pipeline shutdown)
  + soup: Lookup libsoup dylib files on Apple platforms &amp; fix
    Cerbero static build on Android and iOS
  + souphttpsrc: element not present on iOS after 1.20.0 update
  + v4l2tuner: return NULL if no norm set
  + v4l2bufferpool: Fix race condition between qbuf and pool
    streamoff
  + meson: Don't build lame plugin with -Dlame=disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + alpha: fix stride issue when out buffer has padding on right
  + isoff: Fix earliest pts field parse issue
  + matroska-mux: allow width + height changes for
    avc3|hev1|vp8|vp9
  + qt: Fix another instance of Qt/GStreamer both defining GLsync differently
  + qtdemux:
  - Avoid crash on reconfiguring.
  - Guard against timestamp calculation overflow in gap event loop
  - Don't use invalid values from failed trex parsing
  - Possible endless loop
  + rtpjitterbuffer:
  - Only unschedule timers for late packets if they're not RTX
    packets and only once
  - Remove lost timer for out of order packets
  + rtspsrc:
  - SETUP generates 400 Bad Request
  - Retry SETUP with non-compliant URL resolution on "Bad
    Request" and "Not found"
  + rtpst2022-1-fecenc: Drain column packets on EOS
  + rtpvp8depay: If configured to wait for keyframes after packet
    loss, also do that if incomplete frames are detected
  + splitmuxsink: Don't crash on EOS without buffer
  + splitmuxsrc:
  - Stop pad task before cleanup
  - Don't consider unlinked pads when deactivating part
  + soup: libsoup3 makes audio streaming stop
  + v4l2: fix critical when unreferencign buffer with no data
  + v4l2bufferpool: Fix debug trace
  + v4l2object: Add support for Apple's full-range bt709 colorspace
    variant 1:3:5:1
  + v4l2videocodec: workaround for failure to fully drain frames
    preceding MIDSTREAM renegotiation
  + v4l2allocator: Fix invalid imported dmabuf fd
  + videoflip: Fix caps negotiation when method is selected
  + build failure trying to build jack examples
  + examples: don't try and build jack examples if jack was
    disabled
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + flacparse: Fix handling of headers advertising 32bps
  + multiudpsink: allow binding to IPv6 address
  + oss4: Fix debug category initialization
  + qt5:
  - Deactivate context if fill_info fails
  - Initialize GError properly in gst_qt_get_gl_wrapcontext()
  + qtdemux:
  - Check return value from gst_structure_get in PIFF box
  - Use unsigned int types to store result of QT_UINT32
  - Prefill mode fixes
  + rtpjitterbuffer tests: Cast drop-messages-interval type
    properly (fixing it on 32-bit architectures)
  + rtspsrc:
  - Don't replace 404 errors with "no auth protocol found"
  - Fix seek event leaks
  - Fix usage of IPv6 connections in SETUP
  - Only EOS on timeout if all streams are timed out/EOS
  + splitmuxsrc: don't queue data on unlinked pads
  + v4l2: Fix SIGSEGV on 'change state' during 'format change'
  + v4l2videodec: Fix activation of internal pool
  + wavparse:
  - Avoid occasional crash due to referencing freed buffer.
  - Fix crash that occurs in push mode when header chunks are
    corrupted in certain ways.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Add disabled pkgconfig(Qt6Core), pkgconfig(Qt6Gui),
  pkgconfig(Qt6Qml), pkgconfig(Qt6Quick) and
  pkgconfig(Qt6WaylandClient) BuildRequires and pass Dqt6=disabled
  to meson, do not build qt6 support yet.
- Fixed in 1.21.1:
  + avoid integer overflow in WavPack header handling code
    (boo#1201688 CVE-2022-1920).
  + fix integer overflow resulting in heap corruption
    (boo#1201693 CVE-2022-1921).
  + fix integer overflows in zlib/bz2/etc. decompression
    (boo#1201702 boo#1201704 boo#1201706 boo#1201707 boo#1201708
    CVE-2022-1922 CVE-2022-1923 CVE-2022-1924 CVE-2022-1925
    CVE-2022-2122).</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update to version 1.22.1:
  + adaptivedemux2: Fix buffering threshold initialization
  + dashdemux2: the seek operation takes a log time to finish for
    some streams
  + glvideomixer: Keep a reference to the underlying pad
  + qtdemux:
  - Don't emit GstSegment correcting start time when in MSE mode
  - Handle moov atom length=0 case by reading until the end
  + qtdemux, qtmux: Drop av1C version 0 parsing and implement
    version 1 parsing/writing
  + qtmux: Fix assertion on caps update
  + redenc: fix setting of extension ID for twcc
  + rtpssrcdemux: set different stream-id on each src pad
  + rtspsrc: Use the correct vfunc for the push-backchannel-sample
    action signal
  + udpsrc: GstSocketTimestampMessage only for SCM_TIMESTAMPNS
  + v4l2h264dec: Fix Raspberry Pi4 will not play video in
    application
- Rebase patch with quilt.</changelog>
  <changelog author="alarrosa@suse.com" date="1679400000">- Conflict with gstreamer-plugins-ugly &lt; 1.22.0 to ensure we don't
  have conflicts with gstreamer-plugins-ugly 1.20.1 since
  libgstxingmux.so was moved from -ugly to -good (boo#1209541)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + osxvideosink: fix broken aspect ratio and frame drawing region
  + qtdemux: Fix seek adjustment with SNAP_AFTER flag
  + rtpopusdepay, matroskamux: Fix invalid rate while muxing Opus
    in Matroska
  + rtpmanager: twcc: Fix duplicate packet handling
  + rtsp: url: fix incorrect request URI scheme for TLS transport
    methods (regression)
  + rtspsrc:
  - Consider "451: Parameter Not Understood" when handling broken
    control urls
  - fix behavior change with URI protocols in OPTIONS requests
  - Skip PTs with caps incompatible to the global caps
  - rtpjpegdepay: fix logic error when checking if an end of
    image (EOI) tag is present
  + v4l2:
  - Add support for YVU420M format
  - mark JPEG as parsed
- Rebase patch with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + adaptivedemux2: fix critical when using an unsupported URI.
  + dashdemux2: mpdclient: fix divide by 0 if segment has no
    duration.
  + imagesequencesrc: Properly set default location.
  + multifile: error out if no filename was set.
  + osxvideosink: fix deadlock upon closing output window.
  + rtpmanager: rtpsession:
  - Data race leading to critical warnings.
  - Race conditions leading to critical warnings.
  + rtspsrc: Fix handling of * control path.
  + splitmuxsink: Catch invalid DTS to avoid running into problems
    later.
  + splitmuxsrc: Make PTS contiguous by preference.
  + qtdemux: emit no-more-pads after pruning old pads.
  + Revert "qtdemux: fix conditions for end of segment in reverse
    playback" to fix edit list regression.
  + qtdemux: Fix av1C parsing.
  + qtmux: Fix extraction of CEA608 data from S334-1A packets.
  + qtwindow: unref caps in destructor.
  + v4l2:
  - device provider: Fix GMainLoop leak.
  - videodec: Rework dynamic resolution change handling.
  - videodec: Prefer acquired caps over anything downstream.
  + videoflip:
  - Fix setting of method property at construction time.
  - Videoflip 1.22.2 not rotating video when extracting frames.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="jonaski@opensuse.org" date="1686657600">- Add patch to fix bug with data url scheme.
  * adaptivedemux2-uri-data.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + flacparse: Avoid integer overflow in available data check for
    image tags (boo#1213128, CVE-2023-37327).
  + flvmux: use the correct timestamp to calculate wait times.
  + isomp4: Fix (E)AC-3 channel count handling.
  + jpegdec: fixes related to interlaced jpeg.
  + pngdec: Fix wrong colours output from 16bit RGB images.
  + qtmux, qtdemux: fix byte order for opus extension.
  + rtspsrc: Do not try send dropped get/set parameter.
  + qt5, qt6: Add more meson options and eliminate all automagic.
  + qt: glrenderer: don't attempt to use QWindow from non-Qt main
    thread.
  + qml6glsink: Support building on win32.
  + v4l2src: fix support for bayer format.
  + v4l2: Change to query only up to
    V4L2_CID_PRIVATE_BASE+V4L2_CID_MAX_CTRLS.
  + v4l2videodec: treat MPEG-1 format as MPEG-2.
  + v4l2videoenc: support force keyframe event in v4l2 encoder.
  + tests: rtpbin_buffer_list: fix possible unaligned write/read on
    32-bit ARM.
- Add libQt5Gui-private-headers-devel BuildRequires: New
  explicit dependency.
- Rebase reduce-required-meson.patch.
- Drop adaptivedemux2-uri-data.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + adaptivedemux2: Fix early seeking
  + hlsdemux2:
  - Ensure processed webvtt ends with empty new line
  - Don't set a referer when updating playlists
  + matroska: demux: Strip signal byte when encrypted
  + rtspsrc: Fix crash when is-live=false
  + gtk: Fix critical caused by pointer movement when stream is
    getting ready
  + qt6: Set sampler filtering method, fixes bad quality with
    qml6glsink and gstqt6d3d11
  + qtdemux: opus: set entry as sampled
  + v4l2src: handle resolution change when buffers are copied
  + v4l2videodec:
  - Fix handling of initial gaps
  - correctly register v4l2mpeg2dec
  - replace custom QUERY_CAPS handling with getcaps callback
  + videoflip:
  - update orientation tag in auto mode
  - fix critical when tag list is not writable
- Rebase reduce-required-meson.patch.
- Pass qt-egl=disabled to meson, we are not ready for this feature
  yet.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + adaptivedemux2: fix memory leak
  + pulsedeviceprovider: fix incorrect usage of GST_ELEMENT_ERROR
  + qt:
  - Unbreak build with qt-egl enabled but viv_fb missing
  - Fix searching of qt5/qt6 tools with qmake in Meson
  + qtdemux:
  - Fix premature EOS when some files are played in push mode
  - Attach cbcs crypt info at the right moment
  + rtpjitterbuffer: Avoid integer overflow in max saveable packets
    calculation with negative offset
  + videoflip: fix concurrent access when modifying the tag list
  + v4l2:
  - allocator: Don't close foreign dmabuf
  - bufferpool:
    . Fix large encoded stream regression
    . Problems when checking for truncated buffer
  - Fix support for left and top padding
  + v4l2object: clear format lists if source change event is
    received
- Rebase reduce-required-meson.patch
- Add libqt5-linguist BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + adaptivedemux2: Do not submit_transfer when cancelled
  + adaptivedemux2: Call GTasks's return functions for blocking
    tasks
  + flacenc: Correctly handle up to 255 cue entries
  + flvmux: set the src segment position as running time
  + imagesequencesrc: fix deadlock when feeding the same image in
    a loop
  + pngenc: output one frame only in snapshot mode and mark output
    frames as I-frames
  + qmlglsrc: sync on the streaming thread
  + souphttpsrc: Chain up to finalize to fix memory leak
  + wavparse: fix buffer leak with adtl tag
  + v4l2codecs: Avoid QBUF/DQBUF struct timeval .tv_usec
    wrap-around at frame 1000000
  + v4l2codecs: Fix tiled formats stride conversion
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + dcaparse: keep upstream buffer meta
  + rtpklvdepay: Recover after invalid fragmented KLV unit
  + matroska-demux: fix accumulated base offset in segment seeks
  + qtdemux: fix bug report URL
  + qtdemux: Don't overflow sample index
  + qtdemux: Fix reverse playback for pcm audio stream
  + qtdemux: Ignore raw audio streams when adjusting seek
  + qtdemux: Under-seeking to a key unit in certain (encoded by
    Adobe products) ProRes movies (macOS x86_64 &amp; arm64,
    Windows x86_64, ...)
  + rtpac3depay: should output audio/x-ac3 not audio/ac3
  + rtp: Fix incorrect RTP channel order lookup by name
  + v4l2bufferpool: add lock as atomic operation for seek
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + rtpsession: Only warn once if configured latency needs to be
    known but isn't yet
  + rtphdrext-clientaudiolevel: Fix level value being written by
    the extension
  + rtspsrc: set multicast-iface on udpsinks and fix RTCP sink TTL
  + v4l2object: clear old fds when initializing poll during
    opening v4l2 device
  + v4l2src: Consider framerate during caps selection
  + vpxdec: Use appropriate domain and code for decoding errors
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1709640000">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="mgorse@suse.com" date="1736164800">- Add various CVE fixes:
  + CVE-2024-47606_2.patch (boo#1234449 CVE-2024-47606)
  + CVE-2024-47537.patch (boo#1234414 CVE-2024-47537)
  + CVE-2024-47539.patch (boo#1234417 CVE-2024-47539)
  + CVE-2024-47540.patch (boo#1234421 CVE-2024-47540)
  + CVE-2024-47596.patch (boo#1234424 CVE-2024-47596)
  + CVE-2024-47597.patch (boo#1234425 CVE-2024-47597)
  + CVE-2024-47598.patch (boo#1234426 CVE-2024-47598)
  + CVE-2024-47599.patch (boo#1234427 CVE-2024-47599)
  + CVE-2024-47601.patch (boo#1234428 CVE-2024-47601)
  + CVE-2024-47602.patch (boo#1234432 CVE-2024-47602)
  + CVE-2024-47603.patch (boo#1234433 CVE-2024-47603)
  + CVE-2024-47775.patch (boo#1234434 CVE-2024-47775)
  + CVE-2024-47776.patch (boo#1234435 CVE-2024-47776)
  + CVE-2024-47777.patch (boo#1234436 CVE-2024-47777)
  + CVE-2024-47778.patch (boo#1234439 CVE-2024-47778)
  + CVE-2024-47834.patch (boo#1234440 CVE-2024-47834)
  + CVE-2024-47774.patch (boo#1234446 CVE-2024-47774)
  + CVE-2024-47613.patch (boo#1234447 CVE-2024-47613)
  + CVE-2024-47543.patch (boo#1234462 CVE-2024-47543)
  + CVE-2024-47544.patch (boo#1234473 CVE-2024-47544)
  + CVE-2024-47545.patch (boo#1234476 CVE-2024-47545)
  + CVE-2024-47546.patch (boo#1234477 CVE-2024-47546)</changelog>
  <changelog author="mgorse@suse.com" date="1749643200">- Add gstreamer-qt-matrix-flipping.patch: use mvhd transform matrix
  and support for flipping. Adds the byte reader used to fix
  CVE-2025-47183.
- Add more CVE fixes:
  + CVE-2025-47183.patch (boo#1244406 CVE-2025-47183)
  + CVE-2025-47219.patch (boo#1244405 CVE-2025-47219)</changelog>
</package>
<package pkgid="52e506e73f9a64b06988f9c5deb9c2f84ba050ef040035f697bc1d0881de6b02" name="gtk3" arch="src">
  <version epoch="0" ver="3.24.43" rel="150600.3.10.1"/>
  <changelog author="dimstar@opensuse.org" date="1669809600">- Update to version 3.24.35:
  + GtkFontChooserWidget: Fix a critical.
  + GtkAccelLabel: Differentiate keypad keysyms in accelerators.
  + Input:
  - Recognize stylus devices as pens.
  - Fix problems with motion compression.
  + Windows: Build system improvements.
  + Wayland:
  - Fix problems with unreliable DND.
  - Use GLES if required.
  - Add support for titlebar gestures.
  - Refactor handling of IM client updates.
  - Fix cursor hotspots with scaled surfaces.
  - Use the xdg-activation protocol.
  - Load cursors on demand.
  - Fix cursor size on hi-dpi displays.
  + MacOS: Use a CVDisplayLink based frame clock.
  + Updated translations.
- Drop upstream merged patch
  gtk3-gdkwayland-Update-selections-offer-before-updating-dnd.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1670241600">- Update to version 3.24.35+10:
  + Flush drawable surface when getting a pixbuf.
  + wayland: Look for cursor themes in $HOME (boo#1206001).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1672315200">- Update to version 3.24.36:
  + GtkLabel: Tweak selection behavior.
  + GtkEmojiChooser: Properly handle empty recent section.
  + GtkFileChooser: Make ~ key work regardless of dead keys.
  + Wayland:
  - Fix problems with X&lt;&gt;Wayland DND.
  - Revert cursor changes from 3.24.35.
  - Fix handling of surrounding text in input.
  + Updated translation.
- Switch from Autotools to Meson, dropping libtool build
  requirement while adding meson and ninja. And replace configure,
  make_build, and make_install macros with meson, meson_build and
  meson_install.
- Adopt the use of autosetup and autopatch macro facilities to
  improve package maintainability.
- Drop multibuild facility due to the fact that Gtk 3 Meson build
  scripts can't fully disable some components. And, at least for
  now, we cannot achieve the same degree of modularity we had with
  Autotools.
- Drop macros.gtk3 file as no package (if it ever had any) consumes
  its macros.
- After switching to Meson, the build doesn't produce a Wayland
  Input Method module anymore, at least not as a standalone. Update
  baselibs.conf accordingly. And some GResource files are now being
  provided in the devel package for working with emojis.
- Define __provides_exclude_from macro with ^%{_libdir}/gtk-3.0 as
  its value to prevent the automatic provision generator to offer
  private modules as requirable symbols.
- Make cloudproviders to be easily switchable, through bcond
  facility, to allow people to test it, or for maintainers to turn
  it on and off easily.
- Make gettext-its-gtk3 and gtk3-devel-doc sub-packages
  arch-independent (noarch), as they don't contain any binaries.
- Convert IM modules cache update post(un) scriptlets to RPM
  file triggers. Though we had good results with icon cache update
  scriptlets previously, we still can't use transfiletriggers to
  trigger the cache update only once, post transaction, because
  Zypper is still working on implementing support for them.
- Refresh patch with Quilt: gtk3-revert-forced-xftdpi.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1677844800">- Update to version 3.24.37:
  + Support the file transfer portal for copy-paste and DND
  + Treat XKB_MODE_NAME_LODO as super key
  + Refactor startup notification handling to be in sync with GTK 4
  + GL: Synchronie when calling MakeCurrent
  + CSS: Fix a problem with stopping animations
  + Wayland: Drop the legacy text input module
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1678190400">- Prepend gtk3 to binary_version and _immoduledir macro names to
  avoid possible name clash now that they are being defined in the
  macros.gtk3 file instead of the spec file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1679400000">- Re-add macros.gtk3: there are quite a few consumers left
  requiring the defined macros.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681128000">- Deprecate %gtk_immodule_(requires|post|postun) macros defined in
  the macros.gtk3 file. Since we are using RPM file triggers to
  provide their functionality, without nullifying them the commands
  will run twice, once by the file triggers and another time by the
  macros.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682510400">- Update to version 3.24.37+68:
  + application: Clean up signal handlers
  + OLE2 DND: Check if move is supported
  + Address issue 5711 by checking that the context is not NULL
  + wayland:
  - Don't crash without xdg_activation_v1
  - Don't crash on cursor size 0
  + gdkscreen-wayland: Notify initial setting change from
    org.gtk.Settings
  + gdk: Swap Cairo calls when reading back from a GdkWindow
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682942400">- Update to version 3.24.37+70:
  + Fix a crash.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684756800">- Update to version 3.24.38:
  + GtkFileChooser: Avoid warnings with GLib 2.76.
  + Theme: Set caret color in the dark theme.
  + Windows: Fix running under GLES.
  + Wayland:
  - Notify on initial setting changes.
  - Don't crash on 0 size cursors.
  - Don't crash if xdg_activation_v1 is missing.
  + Debugging: Show more information in the inspector.
  + Updated translations.</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
  <changelog author="yfjiang@suse.com" date="1692014400">- Do not use %autopatch to build on SLE where rpm version is not
  ready for the macro.</changelog>
  <changelog author="dimstar@opensuse.org" date="1694520000">- Use RPM ternary operations to specify true/false arguments based
  on build conditions (%[%{with FOO} ? "true" : "false"])</changelog>
  <changelog author="yfjiang@suse.com" date="1696766400">- Revert RPM ternary operations on SLE where rpm version is not
  ready.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701950400">- Update to version 3.24.38+111:
  + [gtk3] Support tiled windows from xdg-shell.
  + Fix a minor issue in the file portal test.
  + wayland: Be more careful when loading cursors.
  + gdk/wayland: Use g_warning_once for cursor scale mismatches.
  + gdk/wayland: Don't fall back directly to 1 for mismatched
    cursor sizes.
  + Updated translations.
- Drop upstream applied patch
  gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
  <changelog author="mgorse@suse.com" date="1721649600">- Add CVE-2024-6655.patch: CVE-2024-6655 Stop looking for modules
  in cwd (bsc#1228120).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1734609600">- Update to version 3.24.43 (bsc#1172879):
  + Stop looking for modules in cwd (bsc#1228120 CVE-2024-6655).
  + Updated translations.
- Changes from version 3.24.42:
  + GtkFileChooser:
  - Avoid warnings about floating refs.
  - Improve performance of recursive search.
  - Populate search model in an idle.
  + GtkGLArea: Fix a regression in transparency handling.
  + Printing: Avoid accessing freed printers.
  + Accessibility: Drop support for the deprecated
    atk_focus_tracker.
  + Wayland:
  - Fix monitor sizes.
  - Fix a crash related to tablet removal.
  - Infer resizable edges for tiled windows.
  - Always commit soon after acking a configure.
  + gdk:
  - Use css cursor names as far as possible.
  - Sync DND cursor use with GTK4.
  + build: Allow building against sysprof-capture-4.
  + Updated translations.
- Changes from version 3.24.41:
  + Fix a crash introduced in the X11 changes in 3.24.40.
  + Build fixes.
  + Wayland: Fix interpretation of gtk-shell protocol.
- Changes from version 3.24.40:
  * Free monitor name on finalize
  * Rework after first review
  * Rework to get rid of get_monitor_by_output
  * Use xorg 'monitor' the right way. See #2013
- Changes from version 3.24.39+23:
  * gdkdisplay-wayland: Init selection before roundtrips
  * Use consistent coordinates in get_toplevel_from_ns_event.
  * emoji: Update data to CLDR v44
  * emoji: Update data to CLDR v43
  * add hi-ja-et-fi-nb-th for gtkemojichooser
  * add bengali language bn.data for gtkemojichooser
  * emoji: Add more locales
  * emoji: Update data to CLDR v40
  * emoji: Fix the convert-emoji program
  * gtkgesture: Preserve accuracy when translating events
  * pathbar: Handle webdav where is the root is a path
  * GtkTooltip: Fix tooltip positioning on X11
  * gdkkeys-win32c: change registry key not found g_warning to g_debug
  * [gtk3/wayland] Expose XDG-shell suspended state via visibility events.
  * [gtk3/wayland] Only request v2 of xdg_wm_base.
  * test-msys2-meson: fix pipeline failure on GTK3
  * wayland: Fix wl_buffer size for custom cursors
  * GtkMenu: Fix positioning when attached to offscreen windows
  * gdk_display_get_monitor_at_window: Check for offscreen windows
  * GdkWindow: check for same impl class in set_transient_for ()
  * [gtk3] Cherry-pick gtkfilechoosernativeportal fixes from gtk4
  * wayland: Avoid more legacy cursor names
  * Fall back to the 'default' cursor
- BuildRequire gettext-devel instead of gettext-tools-mini: the
  - devel provides is part of gettext-tools, but this allows OBS to
  pick the package it deems correct.</changelog>
  <changelog author="yfjiang@suse.com" date="1754568000">- Drop upstreamed CVE-2024-6655.patch.
- Simplify %autopatch section as %autopatch macro is available in
  SLE.</changelog>
  <changelog author="yfjiang@suse.com" date="1754568001">- Add gtk3-gdk_x11_window_get_frame_extents-with-window-borders.patch
  (bsc#1247503).</changelog>
</package>
<package pkgid="dd66c16064dfdeeb4e2a49348a3d342540ed167c86b6619d06b8a5099fe3123a" name="gtk3-data" arch="noarch">
  <version epoch="0" ver="3.24.43" rel="150600.3.10.1"/>
  <changelog author="dimstar@opensuse.org" date="1669809600">- Update to version 3.24.35:
  + GtkFontChooserWidget: Fix a critical.
  + GtkAccelLabel: Differentiate keypad keysyms in accelerators.
  + Input:
  - Recognize stylus devices as pens.
  - Fix problems with motion compression.
  + Windows: Build system improvements.
  + Wayland:
  - Fix problems with unreliable DND.
  - Use GLES if required.
  - Add support for titlebar gestures.
  - Refactor handling of IM client updates.
  - Fix cursor hotspots with scaled surfaces.
  - Use the xdg-activation protocol.
  - Load cursors on demand.
  - Fix cursor size on hi-dpi displays.
  + MacOS: Use a CVDisplayLink based frame clock.
  + Updated translations.
- Drop upstream merged patch
  gtk3-gdkwayland-Update-selections-offer-before-updating-dnd.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1670241600">- Update to version 3.24.35+10:
  + Flush drawable surface when getting a pixbuf.
  + wayland: Look for cursor themes in $HOME (boo#1206001).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1672315200">- Update to version 3.24.36:
  + GtkLabel: Tweak selection behavior.
  + GtkEmojiChooser: Properly handle empty recent section.
  + GtkFileChooser: Make ~ key work regardless of dead keys.
  + Wayland:
  - Fix problems with X&lt;&gt;Wayland DND.
  - Revert cursor changes from 3.24.35.
  - Fix handling of surrounding text in input.
  + Updated translation.
- Switch from Autotools to Meson, dropping libtool build
  requirement while adding meson and ninja. And replace configure,
  make_build, and make_install macros with meson, meson_build and
  meson_install.
- Adopt the use of autosetup and autopatch macro facilities to
  improve package maintainability.
- Drop multibuild facility due to the fact that Gtk 3 Meson build
  scripts can't fully disable some components. And, at least for
  now, we cannot achieve the same degree of modularity we had with
  Autotools.
- Drop macros.gtk3 file as no package (if it ever had any) consumes
  its macros.
- After switching to Meson, the build doesn't produce a Wayland
  Input Method module anymore, at least not as a standalone. Update
  baselibs.conf accordingly. And some GResource files are now being
  provided in the devel package for working with emojis.
- Define __provides_exclude_from macro with ^%{_libdir}/gtk-3.0 as
  its value to prevent the automatic provision generator to offer
  private modules as requirable symbols.
- Make cloudproviders to be easily switchable, through bcond
  facility, to allow people to test it, or for maintainers to turn
  it on and off easily.
- Make gettext-its-gtk3 and gtk3-devel-doc sub-packages
  arch-independent (noarch), as they don't contain any binaries.
- Convert IM modules cache update post(un) scriptlets to RPM
  file triggers. Though we had good results with icon cache update
  scriptlets previously, we still can't use transfiletriggers to
  trigger the cache update only once, post transaction, because
  Zypper is still working on implementing support for them.
- Refresh patch with Quilt: gtk3-revert-forced-xftdpi.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1677844800">- Update to version 3.24.37:
  + Support the file transfer portal for copy-paste and DND
  + Treat XKB_MODE_NAME_LODO as super key
  + Refactor startup notification handling to be in sync with GTK 4
  + GL: Synchronie when calling MakeCurrent
  + CSS: Fix a problem with stopping animations
  + Wayland: Drop the legacy text input module
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1678190400">- Prepend gtk3 to binary_version and _immoduledir macro names to
  avoid possible name clash now that they are being defined in the
  macros.gtk3 file instead of the spec file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1679400000">- Re-add macros.gtk3: there are quite a few consumers left
  requiring the defined macros.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681128000">- Deprecate %gtk_immodule_(requires|post|postun) macros defined in
  the macros.gtk3 file. Since we are using RPM file triggers to
  provide their functionality, without nullifying them the commands
  will run twice, once by the file triggers and another time by the
  macros.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682510400">- Update to version 3.24.37+68:
  + application: Clean up signal handlers
  + OLE2 DND: Check if move is supported
  + Address issue 5711 by checking that the context is not NULL
  + wayland:
  - Don't crash without xdg_activation_v1
  - Don't crash on cursor size 0
  + gdkscreen-wayland: Notify initial setting change from
    org.gtk.Settings
  + gdk: Swap Cairo calls when reading back from a GdkWindow
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682942400">- Update to version 3.24.37+70:
  + Fix a crash.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684756800">- Update to version 3.24.38:
  + GtkFileChooser: Avoid warnings with GLib 2.76.
  + Theme: Set caret color in the dark theme.
  + Windows: Fix running under GLES.
  + Wayland:
  - Notify on initial setting changes.
  - Don't crash on 0 size cursors.
  - Don't crash if xdg_activation_v1 is missing.
  + Debugging: Show more information in the inspector.
  + Updated translations.</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
  <changelog author="yfjiang@suse.com" date="1692014400">- Do not use %autopatch to build on SLE where rpm version is not
  ready for the macro.</changelog>
  <changelog author="dimstar@opensuse.org" date="1694520000">- Use RPM ternary operations to specify true/false arguments based
  on build conditions (%[%{with FOO} ? "true" : "false"])</changelog>
  <changelog author="yfjiang@suse.com" date="1696766400">- Revert RPM ternary operations on SLE where rpm version is not
  ready.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701950400">- Update to version 3.24.38+111:
  + [gtk3] Support tiled windows from xdg-shell.
  + Fix a minor issue in the file portal test.
  + wayland: Be more careful when loading cursors.
  + gdk/wayland: Use g_warning_once for cursor scale mismatches.
  + gdk/wayland: Don't fall back directly to 1 for mismatched
    cursor sizes.
  + Updated translations.
- Drop upstream applied patch
  gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
  <changelog author="mgorse@suse.com" date="1721649600">- Add CVE-2024-6655.patch: CVE-2024-6655 Stop looking for modules
  in cwd (bsc#1228120).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1734609600">- Update to version 3.24.43 (bsc#1172879):
  + Stop looking for modules in cwd (bsc#1228120 CVE-2024-6655).
  + Updated translations.
- Changes from version 3.24.42:
  + GtkFileChooser:
  - Avoid warnings about floating refs.
  - Improve performance of recursive search.
  - Populate search model in an idle.
  + GtkGLArea: Fix a regression in transparency handling.
  + Printing: Avoid accessing freed printers.
  + Accessibility: Drop support for the deprecated
    atk_focus_tracker.
  + Wayland:
  - Fix monitor sizes.
  - Fix a crash related to tablet removal.
  - Infer resizable edges for tiled windows.
  - Always commit soon after acking a configure.
  + gdk:
  - Use css cursor names as far as possible.
  - Sync DND cursor use with GTK4.
  + build: Allow building against sysprof-capture-4.
  + Updated translations.
- Changes from version 3.24.41:
  + Fix a crash introduced in the X11 changes in 3.24.40.
  + Build fixes.
  + Wayland: Fix interpretation of gtk-shell protocol.
- Changes from version 3.24.40:
  * Free monitor name on finalize
  * Rework after first review
  * Rework to get rid of get_monitor_by_output
  * Use xorg 'monitor' the right way. See #2013
- Changes from version 3.24.39+23:
  * gdkdisplay-wayland: Init selection before roundtrips
  * Use consistent coordinates in get_toplevel_from_ns_event.
  * emoji: Update data to CLDR v44
  * emoji: Update data to CLDR v43
  * add hi-ja-et-fi-nb-th for gtkemojichooser
  * add bengali language bn.data for gtkemojichooser
  * emoji: Add more locales
  * emoji: Update data to CLDR v40
  * emoji: Fix the convert-emoji program
  * gtkgesture: Preserve accuracy when translating events
  * pathbar: Handle webdav where is the root is a path
  * GtkTooltip: Fix tooltip positioning on X11
  * gdkkeys-win32c: change registry key not found g_warning to g_debug
  * [gtk3/wayland] Expose XDG-shell suspended state via visibility events.
  * [gtk3/wayland] Only request v2 of xdg_wm_base.
  * test-msys2-meson: fix pipeline failure on GTK3
  * wayland: Fix wl_buffer size for custom cursors
  * GtkMenu: Fix positioning when attached to offscreen windows
  * gdk_display_get_monitor_at_window: Check for offscreen windows
  * GdkWindow: check for same impl class in set_transient_for ()
  * [gtk3] Cherry-pick gtkfilechoosernativeportal fixes from gtk4
  * wayland: Avoid more legacy cursor names
  * Fall back to the 'default' cursor
- BuildRequire gettext-devel instead of gettext-tools-mini: the
  - devel provides is part of gettext-tools, but this allows OBS to
  pick the package it deems correct.</changelog>
  <changelog author="yfjiang@suse.com" date="1754568000">- Drop upstreamed CVE-2024-6655.patch.
- Simplify %autopatch section as %autopatch macro is available in
  SLE.</changelog>
  <changelog author="yfjiang@suse.com" date="1754568001">- Add gtk3-gdk_x11_window_get_frame_extents-with-window-borders.patch
  (bsc#1247503).</changelog>
</package>
<package pkgid="bdc230e51d4c6b0d0f99a856e4a226ff3a441e3ce1aa4b7e5dae1d23f8f7800d" name="gtk3-devel" arch="x86_64">
  <version epoch="0" ver="3.24.43" rel="150600.3.10.1"/>
  <changelog author="dimstar@opensuse.org" date="1669809600">- Update to version 3.24.35:
  + GtkFontChooserWidget: Fix a critical.
  + GtkAccelLabel: Differentiate keypad keysyms in accelerators.
  + Input:
  - Recognize stylus devices as pens.
  - Fix problems with motion compression.
  + Windows: Build system improvements.
  + Wayland:
  - Fix problems with unreliable DND.
  - Use GLES if required.
  - Add support for titlebar gestures.
  - Refactor handling of IM client updates.
  - Fix cursor hotspots with scaled surfaces.
  - Use the xdg-activation protocol.
  - Load cursors on demand.
  - Fix cursor size on hi-dpi displays.
  + MacOS: Use a CVDisplayLink based frame clock.
  + Updated translations.
- Drop upstream merged patch
  gtk3-gdkwayland-Update-selections-offer-before-updating-dnd.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1670241600">- Update to version 3.24.35+10:
  + Flush drawable surface when getting a pixbuf.
  + wayland: Look for cursor themes in $HOME (boo#1206001).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1672315200">- Update to version 3.24.36:
  + GtkLabel: Tweak selection behavior.
  + GtkEmojiChooser: Properly handle empty recent section.
  + GtkFileChooser: Make ~ key work regardless of dead keys.
  + Wayland:
  - Fix problems with X&lt;&gt;Wayland DND.
  - Revert cursor changes from 3.24.35.
  - Fix handling of surrounding text in input.
  + Updated translation.
- Switch from Autotools to Meson, dropping libtool build
  requirement while adding meson and ninja. And replace configure,
  make_build, and make_install macros with meson, meson_build and
  meson_install.
- Adopt the use of autosetup and autopatch macro facilities to
  improve package maintainability.
- Drop multibuild facility due to the fact that Gtk 3 Meson build
  scripts can't fully disable some components. And, at least for
  now, we cannot achieve the same degree of modularity we had with
  Autotools.
- Drop macros.gtk3 file as no package (if it ever had any) consumes
  its macros.
- After switching to Meson, the build doesn't produce a Wayland
  Input Method module anymore, at least not as a standalone. Update
  baselibs.conf accordingly. And some GResource files are now being
  provided in the devel package for working with emojis.
- Define __provides_exclude_from macro with ^%{_libdir}/gtk-3.0 as
  its value to prevent the automatic provision generator to offer
  private modules as requirable symbols.
- Make cloudproviders to be easily switchable, through bcond
  facility, to allow people to test it, or for maintainers to turn
  it on and off easily.
- Make gettext-its-gtk3 and gtk3-devel-doc sub-packages
  arch-independent (noarch), as they don't contain any binaries.
- Convert IM modules cache update post(un) scriptlets to RPM
  file triggers. Though we had good results with icon cache update
  scriptlets previously, we still can't use transfiletriggers to
  trigger the cache update only once, post transaction, because
  Zypper is still working on implementing support for them.
- Refresh patch with Quilt: gtk3-revert-forced-xftdpi.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1677844800">- Update to version 3.24.37:
  + Support the file transfer portal for copy-paste and DND
  + Treat XKB_MODE_NAME_LODO as super key
  + Refactor startup notification handling to be in sync with GTK 4
  + GL: Synchronie when calling MakeCurrent
  + CSS: Fix a problem with stopping animations
  + Wayland: Drop the legacy text input module
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1678190400">- Prepend gtk3 to binary_version and _immoduledir macro names to
  avoid possible name clash now that they are being defined in the
  macros.gtk3 file instead of the spec file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1679400000">- Re-add macros.gtk3: there are quite a few consumers left
  requiring the defined macros.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681128000">- Deprecate %gtk_immodule_(requires|post|postun) macros defined in
  the macros.gtk3 file. Since we are using RPM file triggers to
  provide their functionality, without nullifying them the commands
  will run twice, once by the file triggers and another time by the
  macros.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682510400">- Update to version 3.24.37+68:
  + application: Clean up signal handlers
  + OLE2 DND: Check if move is supported
  + Address issue 5711 by checking that the context is not NULL
  + wayland:
  - Don't crash without xdg_activation_v1
  - Don't crash on cursor size 0
  + gdkscreen-wayland: Notify initial setting change from
    org.gtk.Settings
  + gdk: Swap Cairo calls when reading back from a GdkWindow
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682942400">- Update to version 3.24.37+70:
  + Fix a crash.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684756800">- Update to version 3.24.38:
  + GtkFileChooser: Avoid warnings with GLib 2.76.
  + Theme: Set caret color in the dark theme.
  + Windows: Fix running under GLES.
  + Wayland:
  - Notify on initial setting changes.
  - Don't crash on 0 size cursors.
  - Don't crash if xdg_activation_v1 is missing.
  + Debugging: Show more information in the inspector.
  + Updated translations.</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
  <changelog author="yfjiang@suse.com" date="1692014400">- Do not use %autopatch to build on SLE where rpm version is not
  ready for the macro.</changelog>
  <changelog author="dimstar@opensuse.org" date="1694520000">- Use RPM ternary operations to specify true/false arguments based
  on build conditions (%[%{with FOO} ? "true" : "false"])</changelog>
  <changelog author="yfjiang@suse.com" date="1696766400">- Revert RPM ternary operations on SLE where rpm version is not
  ready.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701950400">- Update to version 3.24.38+111:
  + [gtk3] Support tiled windows from xdg-shell.
  + Fix a minor issue in the file portal test.
  + wayland: Be more careful when loading cursors.
  + gdk/wayland: Use g_warning_once for cursor scale mismatches.
  + gdk/wayland: Don't fall back directly to 1 for mismatched
    cursor sizes.
  + Updated translations.
- Drop upstream applied patch
  gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
  <changelog author="mgorse@suse.com" date="1721649600">- Add CVE-2024-6655.patch: CVE-2024-6655 Stop looking for modules
  in cwd (bsc#1228120).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1734609600">- Update to version 3.24.43 (bsc#1172879):
  + Stop looking for modules in cwd (bsc#1228120 CVE-2024-6655).
  + Updated translations.
- Changes from version 3.24.42:
  + GtkFileChooser:
  - Avoid warnings about floating refs.
  - Improve performance of recursive search.
  - Populate search model in an idle.
  + GtkGLArea: Fix a regression in transparency handling.
  + Printing: Avoid accessing freed printers.
  + Accessibility: Drop support for the deprecated
    atk_focus_tracker.
  + Wayland:
  - Fix monitor sizes.
  - Fix a crash related to tablet removal.
  - Infer resizable edges for tiled windows.
  - Always commit soon after acking a configure.
  + gdk:
  - Use css cursor names as far as possible.
  - Sync DND cursor use with GTK4.
  + build: Allow building against sysprof-capture-4.
  + Updated translations.
- Changes from version 3.24.41:
  + Fix a crash introduced in the X11 changes in 3.24.40.
  + Build fixes.
  + Wayland: Fix interpretation of gtk-shell protocol.
- Changes from version 3.24.40:
  * Free monitor name on finalize
  * Rework after first review
  * Rework to get rid of get_monitor_by_output
  * Use xorg 'monitor' the right way. See #2013
- Changes from version 3.24.39+23:
  * gdkdisplay-wayland: Init selection before roundtrips
  * Use consistent coordinates in get_toplevel_from_ns_event.
  * emoji: Update data to CLDR v44
  * emoji: Update data to CLDR v43
  * add hi-ja-et-fi-nb-th for gtkemojichooser
  * add bengali language bn.data for gtkemojichooser
  * emoji: Add more locales
  * emoji: Update data to CLDR v40
  * emoji: Fix the convert-emoji program
  * gtkgesture: Preserve accuracy when translating events
  * pathbar: Handle webdav where is the root is a path
  * GtkTooltip: Fix tooltip positioning on X11
  * gdkkeys-win32c: change registry key not found g_warning to g_debug
  * [gtk3/wayland] Expose XDG-shell suspended state via visibility events.
  * [gtk3/wayland] Only request v2 of xdg_wm_base.
  * test-msys2-meson: fix pipeline failure on GTK3
  * wayland: Fix wl_buffer size for custom cursors
  * GtkMenu: Fix positioning when attached to offscreen windows
  * gdk_display_get_monitor_at_window: Check for offscreen windows
  * GdkWindow: check for same impl class in set_transient_for ()
  * [gtk3] Cherry-pick gtkfilechoosernativeportal fixes from gtk4
  * wayland: Avoid more legacy cursor names
  * Fall back to the 'default' cursor
- BuildRequire gettext-devel instead of gettext-tools-mini: the
  - devel provides is part of gettext-tools, but this allows OBS to
  pick the package it deems correct.</changelog>
  <changelog author="yfjiang@suse.com" date="1754568000">- Drop upstreamed CVE-2024-6655.patch.
- Simplify %autopatch section as %autopatch macro is available in
  SLE.</changelog>
  <changelog author="yfjiang@suse.com" date="1754568001">- Add gtk3-gdk_x11_window_get_frame_extents-with-window-borders.patch
  (bsc#1247503).</changelog>
</package>
<package pkgid="0fee5d26d2c26ef9d901cd63e3e63f3f667aee35bda8a0007ecab0ed7dad318f" name="gtk3-lang" arch="noarch">
  <version epoch="0" ver="3.24.43" rel="150600.3.10.1"/>
  <changelog author="dimstar@opensuse.org" date="1669809600">- Update to version 3.24.35:
  + GtkFontChooserWidget: Fix a critical.
  + GtkAccelLabel: Differentiate keypad keysyms in accelerators.
  + Input:
  - Recognize stylus devices as pens.
  - Fix problems with motion compression.
  + Windows: Build system improvements.
  + Wayland:
  - Fix problems with unreliable DND.
  - Use GLES if required.
  - Add support for titlebar gestures.
  - Refactor handling of IM client updates.
  - Fix cursor hotspots with scaled surfaces.
  - Use the xdg-activation protocol.
  - Load cursors on demand.
  - Fix cursor size on hi-dpi displays.
  + MacOS: Use a CVDisplayLink based frame clock.
  + Updated translations.
- Drop upstream merged patch
  gtk3-gdkwayland-Update-selections-offer-before-updating-dnd.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1670241600">- Update to version 3.24.35+10:
  + Flush drawable surface when getting a pixbuf.
  + wayland: Look for cursor themes in $HOME (boo#1206001).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1672315200">- Update to version 3.24.36:
  + GtkLabel: Tweak selection behavior.
  + GtkEmojiChooser: Properly handle empty recent section.
  + GtkFileChooser: Make ~ key work regardless of dead keys.
  + Wayland:
  - Fix problems with X&lt;&gt;Wayland DND.
  - Revert cursor changes from 3.24.35.
  - Fix handling of surrounding text in input.
  + Updated translation.
- Switch from Autotools to Meson, dropping libtool build
  requirement while adding meson and ninja. And replace configure,
  make_build, and make_install macros with meson, meson_build and
  meson_install.
- Adopt the use of autosetup and autopatch macro facilities to
  improve package maintainability.
- Drop multibuild facility due to the fact that Gtk 3 Meson build
  scripts can't fully disable some components. And, at least for
  now, we cannot achieve the same degree of modularity we had with
  Autotools.
- Drop macros.gtk3 file as no package (if it ever had any) consumes
  its macros.
- After switching to Meson, the build doesn't produce a Wayland
  Input Method module anymore, at least not as a standalone. Update
  baselibs.conf accordingly. And some GResource files are now being
  provided in the devel package for working with emojis.
- Define __provides_exclude_from macro with ^%{_libdir}/gtk-3.0 as
  its value to prevent the automatic provision generator to offer
  private modules as requirable symbols.
- Make cloudproviders to be easily switchable, through bcond
  facility, to allow people to test it, or for maintainers to turn
  it on and off easily.
- Make gettext-its-gtk3 and gtk3-devel-doc sub-packages
  arch-independent (noarch), as they don't contain any binaries.
- Convert IM modules cache update post(un) scriptlets to RPM
  file triggers. Though we had good results with icon cache update
  scriptlets previously, we still can't use transfiletriggers to
  trigger the cache update only once, post transaction, because
  Zypper is still working on implementing support for them.
- Refresh patch with Quilt: gtk3-revert-forced-xftdpi.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1677844800">- Update to version 3.24.37:
  + Support the file transfer portal for copy-paste and DND
  + Treat XKB_MODE_NAME_LODO as super key
  + Refactor startup notification handling to be in sync with GTK 4
  + GL: Synchronie when calling MakeCurrent
  + CSS: Fix a problem with stopping animations
  + Wayland: Drop the legacy text input module
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1678190400">- Prepend gtk3 to binary_version and _immoduledir macro names to
  avoid possible name clash now that they are being defined in the
  macros.gtk3 file instead of the spec file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1679400000">- Re-add macros.gtk3: there are quite a few consumers left
  requiring the defined macros.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681128000">- Deprecate %gtk_immodule_(requires|post|postun) macros defined in
  the macros.gtk3 file. Since we are using RPM file triggers to
  provide their functionality, without nullifying them the commands
  will run twice, once by the file triggers and another time by the
  macros.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682510400">- Update to version 3.24.37+68:
  + application: Clean up signal handlers
  + OLE2 DND: Check if move is supported
  + Address issue 5711 by checking that the context is not NULL
  + wayland:
  - Don't crash without xdg_activation_v1
  - Don't crash on cursor size 0
  + gdkscreen-wayland: Notify initial setting change from
    org.gtk.Settings
  + gdk: Swap Cairo calls when reading back from a GdkWindow
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682942400">- Update to version 3.24.37+70:
  + Fix a crash.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684756800">- Update to version 3.24.38:
  + GtkFileChooser: Avoid warnings with GLib 2.76.
  + Theme: Set caret color in the dark theme.
  + Windows: Fix running under GLES.
  + Wayland:
  - Notify on initial setting changes.
  - Don't crash on 0 size cursors.
  - Don't crash if xdg_activation_v1 is missing.
  + Debugging: Show more information in the inspector.
  + Updated translations.</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
  <changelog author="yfjiang@suse.com" date="1692014400">- Do not use %autopatch to build on SLE where rpm version is not
  ready for the macro.</changelog>
  <changelog author="dimstar@opensuse.org" date="1694520000">- Use RPM ternary operations to specify true/false arguments based
  on build conditions (%[%{with FOO} ? "true" : "false"])</changelog>
  <changelog author="yfjiang@suse.com" date="1696766400">- Revert RPM ternary operations on SLE where rpm version is not
  ready.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701950400">- Update to version 3.24.38+111:
  + [gtk3] Support tiled windows from xdg-shell.
  + Fix a minor issue in the file portal test.
  + wayland: Be more careful when loading cursors.
  + gdk/wayland: Use g_warning_once for cursor scale mismatches.
  + gdk/wayland: Don't fall back directly to 1 for mismatched
    cursor sizes.
  + Updated translations.
- Drop upstream applied patch
  gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
  <changelog author="mgorse@suse.com" date="1721649600">- Add CVE-2024-6655.patch: CVE-2024-6655 Stop looking for modules
  in cwd (bsc#1228120).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1734609600">- Update to version 3.24.43 (bsc#1172879):
  + Stop looking for modules in cwd (bsc#1228120 CVE-2024-6655).
  + Updated translations.
- Changes from version 3.24.42:
  + GtkFileChooser:
  - Avoid warnings about floating refs.
  - Improve performance of recursive search.
  - Populate search model in an idle.
  + GtkGLArea: Fix a regression in transparency handling.
  + Printing: Avoid accessing freed printers.
  + Accessibility: Drop support for the deprecated
    atk_focus_tracker.
  + Wayland:
  - Fix monitor sizes.
  - Fix a crash related to tablet removal.
  - Infer resizable edges for tiled windows.
  - Always commit soon after acking a configure.
  + gdk:
  - Use css cursor names as far as possible.
  - Sync DND cursor use with GTK4.
  + build: Allow building against sysprof-capture-4.
  + Updated translations.
- Changes from version 3.24.41:
  + Fix a crash introduced in the X11 changes in 3.24.40.
  + Build fixes.
  + Wayland: Fix interpretation of gtk-shell protocol.
- Changes from version 3.24.40:
  * Free monitor name on finalize
  * Rework after first review
  * Rework to get rid of get_monitor_by_output
  * Use xorg 'monitor' the right way. See #2013
- Changes from version 3.24.39+23:
  * gdkdisplay-wayland: Init selection before roundtrips
  * Use consistent coordinates in get_toplevel_from_ns_event.
  * emoji: Update data to CLDR v44
  * emoji: Update data to CLDR v43
  * add hi-ja-et-fi-nb-th for gtkemojichooser
  * add bengali language bn.data for gtkemojichooser
  * emoji: Add more locales
  * emoji: Update data to CLDR v40
  * emoji: Fix the convert-emoji program
  * gtkgesture: Preserve accuracy when translating events
  * pathbar: Handle webdav where is the root is a path
  * GtkTooltip: Fix tooltip positioning on X11
  * gdkkeys-win32c: change registry key not found g_warning to g_debug
  * [gtk3/wayland] Expose XDG-shell suspended state via visibility events.
  * [gtk3/wayland] Only request v2 of xdg_wm_base.
  * test-msys2-meson: fix pipeline failure on GTK3
  * wayland: Fix wl_buffer size for custom cursors
  * GtkMenu: Fix positioning when attached to offscreen windows
  * gdk_display_get_monitor_at_window: Check for offscreen windows
  * GdkWindow: check for same impl class in set_transient_for ()
  * [gtk3] Cherry-pick gtkfilechoosernativeportal fixes from gtk4
  * wayland: Avoid more legacy cursor names
  * Fall back to the 'default' cursor
- BuildRequire gettext-devel instead of gettext-tools-mini: the
  - devel provides is part of gettext-tools, but this allows OBS to
  pick the package it deems correct.</changelog>
  <changelog author="yfjiang@suse.com" date="1754568000">- Drop upstreamed CVE-2024-6655.patch.
- Simplify %autopatch section as %autopatch macro is available in
  SLE.</changelog>
  <changelog author="yfjiang@suse.com" date="1754568001">- Add gtk3-gdk_x11_window_get_frame_extents-with-window-borders.patch
  (bsc#1247503).</changelog>
</package>
<package pkgid="c494311eab37296d5439b46219b90700429eee6d7ec820b29d9e4fe32dc68854" name="gtk3-schema" arch="noarch">
  <version epoch="0" ver="3.24.43" rel="150600.3.10.1"/>
  <changelog author="dimstar@opensuse.org" date="1669809600">- Update to version 3.24.35:
  + GtkFontChooserWidget: Fix a critical.
  + GtkAccelLabel: Differentiate keypad keysyms in accelerators.
  + Input:
  - Recognize stylus devices as pens.
  - Fix problems with motion compression.
  + Windows: Build system improvements.
  + Wayland:
  - Fix problems with unreliable DND.
  - Use GLES if required.
  - Add support for titlebar gestures.
  - Refactor handling of IM client updates.
  - Fix cursor hotspots with scaled surfaces.
  - Use the xdg-activation protocol.
  - Load cursors on demand.
  - Fix cursor size on hi-dpi displays.
  + MacOS: Use a CVDisplayLink based frame clock.
  + Updated translations.
- Drop upstream merged patch
  gtk3-gdkwayland-Update-selections-offer-before-updating-dnd.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1670241600">- Update to version 3.24.35+10:
  + Flush drawable surface when getting a pixbuf.
  + wayland: Look for cursor themes in $HOME (boo#1206001).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1672315200">- Update to version 3.24.36:
  + GtkLabel: Tweak selection behavior.
  + GtkEmojiChooser: Properly handle empty recent section.
  + GtkFileChooser: Make ~ key work regardless of dead keys.
  + Wayland:
  - Fix problems with X&lt;&gt;Wayland DND.
  - Revert cursor changes from 3.24.35.
  - Fix handling of surrounding text in input.
  + Updated translation.
- Switch from Autotools to Meson, dropping libtool build
  requirement while adding meson and ninja. And replace configure,
  make_build, and make_install macros with meson, meson_build and
  meson_install.
- Adopt the use of autosetup and autopatch macro facilities to
  improve package maintainability.
- Drop multibuild facility due to the fact that Gtk 3 Meson build
  scripts can't fully disable some components. And, at least for
  now, we cannot achieve the same degree of modularity we had with
  Autotools.
- Drop macros.gtk3 file as no package (if it ever had any) consumes
  its macros.
- After switching to Meson, the build doesn't produce a Wayland
  Input Method module anymore, at least not as a standalone. Update
  baselibs.conf accordingly. And some GResource files are now being
  provided in the devel package for working with emojis.
- Define __provides_exclude_from macro with ^%{_libdir}/gtk-3.0 as
  its value to prevent the automatic provision generator to offer
  private modules as requirable symbols.
- Make cloudproviders to be easily switchable, through bcond
  facility, to allow people to test it, or for maintainers to turn
  it on and off easily.
- Make gettext-its-gtk3 and gtk3-devel-doc sub-packages
  arch-independent (noarch), as they don't contain any binaries.
- Convert IM modules cache update post(un) scriptlets to RPM
  file triggers. Though we had good results with icon cache update
  scriptlets previously, we still can't use transfiletriggers to
  trigger the cache update only once, post transaction, because
  Zypper is still working on implementing support for them.
- Refresh patch with Quilt: gtk3-revert-forced-xftdpi.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1677844800">- Update to version 3.24.37:
  + Support the file transfer portal for copy-paste and DND
  + Treat XKB_MODE_NAME_LODO as super key
  + Refactor startup notification handling to be in sync with GTK 4
  + GL: Synchronie when calling MakeCurrent
  + CSS: Fix a problem with stopping animations
  + Wayland: Drop the legacy text input module
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1678190400">- Prepend gtk3 to binary_version and _immoduledir macro names to
  avoid possible name clash now that they are being defined in the
  macros.gtk3 file instead of the spec file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1679400000">- Re-add macros.gtk3: there are quite a few consumers left
  requiring the defined macros.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681128000">- Deprecate %gtk_immodule_(requires|post|postun) macros defined in
  the macros.gtk3 file. Since we are using RPM file triggers to
  provide their functionality, without nullifying them the commands
  will run twice, once by the file triggers and another time by the
  macros.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682510400">- Update to version 3.24.37+68:
  + application: Clean up signal handlers
  + OLE2 DND: Check if move is supported
  + Address issue 5711 by checking that the context is not NULL
  + wayland:
  - Don't crash without xdg_activation_v1
  - Don't crash on cursor size 0
  + gdkscreen-wayland: Notify initial setting change from
    org.gtk.Settings
  + gdk: Swap Cairo calls when reading back from a GdkWindow
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682942400">- Update to version 3.24.37+70:
  + Fix a crash.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684756800">- Update to version 3.24.38:
  + GtkFileChooser: Avoid warnings with GLib 2.76.
  + Theme: Set caret color in the dark theme.
  + Windows: Fix running under GLES.
  + Wayland:
  - Notify on initial setting changes.
  - Don't crash on 0 size cursors.
  - Don't crash if xdg_activation_v1 is missing.
  + Debugging: Show more information in the inspector.
  + Updated translations.</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
  <changelog author="yfjiang@suse.com" date="1692014400">- Do not use %autopatch to build on SLE where rpm version is not
  ready for the macro.</changelog>
  <changelog author="dimstar@opensuse.org" date="1694520000">- Use RPM ternary operations to specify true/false arguments based
  on build conditions (%[%{with FOO} ? "true" : "false"])</changelog>
  <changelog author="yfjiang@suse.com" date="1696766400">- Revert RPM ternary operations on SLE where rpm version is not
  ready.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701950400">- Update to version 3.24.38+111:
  + [gtk3] Support tiled windows from xdg-shell.
  + Fix a minor issue in the file portal test.
  + wayland: Be more careful when loading cursors.
  + gdk/wayland: Use g_warning_once for cursor scale mismatches.
  + gdk/wayland: Don't fall back directly to 1 for mismatched
    cursor sizes.
  + Updated translations.
- Drop upstream applied patch
  gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
  <changelog author="mgorse@suse.com" date="1721649600">- Add CVE-2024-6655.patch: CVE-2024-6655 Stop looking for modules
  in cwd (bsc#1228120).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1734609600">- Update to version 3.24.43 (bsc#1172879):
  + Stop looking for modules in cwd (bsc#1228120 CVE-2024-6655).
  + Updated translations.
- Changes from version 3.24.42:
  + GtkFileChooser:
  - Avoid warnings about floating refs.
  - Improve performance of recursive search.
  - Populate search model in an idle.
  + GtkGLArea: Fix a regression in transparency handling.
  + Printing: Avoid accessing freed printers.
  + Accessibility: Drop support for the deprecated
    atk_focus_tracker.
  + Wayland:
  - Fix monitor sizes.
  - Fix a crash related to tablet removal.
  - Infer resizable edges for tiled windows.
  - Always commit soon after acking a configure.
  + gdk:
  - Use css cursor names as far as possible.
  - Sync DND cursor use with GTK4.
  + build: Allow building against sysprof-capture-4.
  + Updated translations.
- Changes from version 3.24.41:
  + Fix a crash introduced in the X11 changes in 3.24.40.
  + Build fixes.
  + Wayland: Fix interpretation of gtk-shell protocol.
- Changes from version 3.24.40:
  * Free monitor name on finalize
  * Rework after first review
  * Rework to get rid of get_monitor_by_output
  * Use xorg 'monitor' the right way. See #2013
- Changes from version 3.24.39+23:
  * gdkdisplay-wayland: Init selection before roundtrips
  * Use consistent coordinates in get_toplevel_from_ns_event.
  * emoji: Update data to CLDR v44
  * emoji: Update data to CLDR v43
  * add hi-ja-et-fi-nb-th for gtkemojichooser
  * add bengali language bn.data for gtkemojichooser
  * emoji: Add more locales
  * emoji: Update data to CLDR v40
  * emoji: Fix the convert-emoji program
  * gtkgesture: Preserve accuracy when translating events
  * pathbar: Handle webdav where is the root is a path
  * GtkTooltip: Fix tooltip positioning on X11
  * gdkkeys-win32c: change registry key not found g_warning to g_debug
  * [gtk3/wayland] Expose XDG-shell suspended state via visibility events.
  * [gtk3/wayland] Only request v2 of xdg_wm_base.
  * test-msys2-meson: fix pipeline failure on GTK3
  * wayland: Fix wl_buffer size for custom cursors
  * GtkMenu: Fix positioning when attached to offscreen windows
  * gdk_display_get_monitor_at_window: Check for offscreen windows
  * GdkWindow: check for same impl class in set_transient_for ()
  * [gtk3] Cherry-pick gtkfilechoosernativeportal fixes from gtk4
  * wayland: Avoid more legacy cursor names
  * Fall back to the 'default' cursor
- BuildRequire gettext-devel instead of gettext-tools-mini: the
  - devel provides is part of gettext-tools, but this allows OBS to
  pick the package it deems correct.</changelog>
  <changelog author="yfjiang@suse.com" date="1754568000">- Drop upstreamed CVE-2024-6655.patch.
- Simplify %autopatch section as %autopatch macro is available in
  SLE.</changelog>
  <changelog author="yfjiang@suse.com" date="1754568001">- Add gtk3-gdk_x11_window_get_frame_extents-with-window-borders.patch
  (bsc#1247503).</changelog>
</package>
<package pkgid="13be0af2576a64d6c2ac18ef69e481cadbc7a1b9201d652a5263e42d8dfd110b" name="gtk3-tools" arch="x86_64">
  <version epoch="0" ver="3.24.43" rel="150600.3.10.1"/>
  <changelog author="dimstar@opensuse.org" date="1669809600">- Update to version 3.24.35:
  + GtkFontChooserWidget: Fix a critical.
  + GtkAccelLabel: Differentiate keypad keysyms in accelerators.
  + Input:
  - Recognize stylus devices as pens.
  - Fix problems with motion compression.
  + Windows: Build system improvements.
  + Wayland:
  - Fix problems with unreliable DND.
  - Use GLES if required.
  - Add support for titlebar gestures.
  - Refactor handling of IM client updates.
  - Fix cursor hotspots with scaled surfaces.
  - Use the xdg-activation protocol.
  - Load cursors on demand.
  - Fix cursor size on hi-dpi displays.
  + MacOS: Use a CVDisplayLink based frame clock.
  + Updated translations.
- Drop upstream merged patch
  gtk3-gdkwayland-Update-selections-offer-before-updating-dnd.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1670241600">- Update to version 3.24.35+10:
  + Flush drawable surface when getting a pixbuf.
  + wayland: Look for cursor themes in $HOME (boo#1206001).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1672315200">- Update to version 3.24.36:
  + GtkLabel: Tweak selection behavior.
  + GtkEmojiChooser: Properly handle empty recent section.
  + GtkFileChooser: Make ~ key work regardless of dead keys.
  + Wayland:
  - Fix problems with X&lt;&gt;Wayland DND.
  - Revert cursor changes from 3.24.35.
  - Fix handling of surrounding text in input.
  + Updated translation.
- Switch from Autotools to Meson, dropping libtool build
  requirement while adding meson and ninja. And replace configure,
  make_build, and make_install macros with meson, meson_build and
  meson_install.
- Adopt the use of autosetup and autopatch macro facilities to
  improve package maintainability.
- Drop multibuild facility due to the fact that Gtk 3 Meson build
  scripts can't fully disable some components. And, at least for
  now, we cannot achieve the same degree of modularity we had with
  Autotools.
- Drop macros.gtk3 file as no package (if it ever had any) consumes
  its macros.
- After switching to Meson, the build doesn't produce a Wayland
  Input Method module anymore, at least not as a standalone. Update
  baselibs.conf accordingly. And some GResource files are now being
  provided in the devel package for working with emojis.
- Define __provides_exclude_from macro with ^%{_libdir}/gtk-3.0 as
  its value to prevent the automatic provision generator to offer
  private modules as requirable symbols.
- Make cloudproviders to be easily switchable, through bcond
  facility, to allow people to test it, or for maintainers to turn
  it on and off easily.
- Make gettext-its-gtk3 and gtk3-devel-doc sub-packages
  arch-independent (noarch), as they don't contain any binaries.
- Convert IM modules cache update post(un) scriptlets to RPM
  file triggers. Though we had good results with icon cache update
  scriptlets previously, we still can't use transfiletriggers to
  trigger the cache update only once, post transaction, because
  Zypper is still working on implementing support for them.
- Refresh patch with Quilt: gtk3-revert-forced-xftdpi.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1677844800">- Update to version 3.24.37:
  + Support the file transfer portal for copy-paste and DND
  + Treat XKB_MODE_NAME_LODO as super key
  + Refactor startup notification handling to be in sync with GTK 4
  + GL: Synchronie when calling MakeCurrent
  + CSS: Fix a problem with stopping animations
  + Wayland: Drop the legacy text input module
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1678190400">- Prepend gtk3 to binary_version and _immoduledir macro names to
  avoid possible name clash now that they are being defined in the
  macros.gtk3 file instead of the spec file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1679400000">- Re-add macros.gtk3: there are quite a few consumers left
  requiring the defined macros.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681128000">- Deprecate %gtk_immodule_(requires|post|postun) macros defined in
  the macros.gtk3 file. Since we are using RPM file triggers to
  provide their functionality, without nullifying them the commands
  will run twice, once by the file triggers and another time by the
  macros.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682510400">- Update to version 3.24.37+68:
  + application: Clean up signal handlers
  + OLE2 DND: Check if move is supported
  + Address issue 5711 by checking that the context is not NULL
  + wayland:
  - Don't crash without xdg_activation_v1
  - Don't crash on cursor size 0
  + gdkscreen-wayland: Notify initial setting change from
    org.gtk.Settings
  + gdk: Swap Cairo calls when reading back from a GdkWindow
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682942400">- Update to version 3.24.37+70:
  + Fix a crash.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684756800">- Update to version 3.24.38:
  + GtkFileChooser: Avoid warnings with GLib 2.76.
  + Theme: Set caret color in the dark theme.
  + Windows: Fix running under GLES.
  + Wayland:
  - Notify on initial setting changes.
  - Don't crash on 0 size cursors.
  - Don't crash if xdg_activation_v1 is missing.
  + Debugging: Show more information in the inspector.
  + Updated translations.</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
  <changelog author="yfjiang@suse.com" date="1692014400">- Do not use %autopatch to build on SLE where rpm version is not
  ready for the macro.</changelog>
  <changelog author="dimstar@opensuse.org" date="1694520000">- Use RPM ternary operations to specify true/false arguments based
  on build conditions (%[%{with FOO} ? "true" : "false"])</changelog>
  <changelog author="yfjiang@suse.com" date="1696766400">- Revert RPM ternary operations on SLE where rpm version is not
  ready.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701950400">- Update to version 3.24.38+111:
  + [gtk3] Support tiled windows from xdg-shell.
  + Fix a minor issue in the file portal test.
  + wayland: Be more careful when loading cursors.
  + gdk/wayland: Use g_warning_once for cursor scale mismatches.
  + gdk/wayland: Don't fall back directly to 1 for mismatched
    cursor sizes.
  + Updated translations.
- Drop upstream applied patch
  gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
  <changelog author="mgorse@suse.com" date="1721649600">- Add CVE-2024-6655.patch: CVE-2024-6655 Stop looking for modules
  in cwd (bsc#1228120).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1734609600">- Update to version 3.24.43 (bsc#1172879):
  + Stop looking for modules in cwd (bsc#1228120 CVE-2024-6655).
  + Updated translations.
- Changes from version 3.24.42:
  + GtkFileChooser:
  - Avoid warnings about floating refs.
  - Improve performance of recursive search.
  - Populate search model in an idle.
  + GtkGLArea: Fix a regression in transparency handling.
  + Printing: Avoid accessing freed printers.
  + Accessibility: Drop support for the deprecated
    atk_focus_tracker.
  + Wayland:
  - Fix monitor sizes.
  - Fix a crash related to tablet removal.
  - Infer resizable edges for tiled windows.
  - Always commit soon after acking a configure.
  + gdk:
  - Use css cursor names as far as possible.
  - Sync DND cursor use with GTK4.
  + build: Allow building against sysprof-capture-4.
  + Updated translations.
- Changes from version 3.24.41:
  + Fix a crash introduced in the X11 changes in 3.24.40.
  + Build fixes.
  + Wayland: Fix interpretation of gtk-shell protocol.
- Changes from version 3.24.40:
  * Free monitor name on finalize
  * Rework after first review
  * Rework to get rid of get_monitor_by_output
  * Use xorg 'monitor' the right way. See #2013
- Changes from version 3.24.39+23:
  * gdkdisplay-wayland: Init selection before roundtrips
  * Use consistent coordinates in get_toplevel_from_ns_event.
  * emoji: Update data to CLDR v44
  * emoji: Update data to CLDR v43
  * add hi-ja-et-fi-nb-th for gtkemojichooser
  * add bengali language bn.data for gtkemojichooser
  * emoji: Add more locales
  * emoji: Update data to CLDR v40
  * emoji: Fix the convert-emoji program
  * gtkgesture: Preserve accuracy when translating events
  * pathbar: Handle webdav where is the root is a path
  * GtkTooltip: Fix tooltip positioning on X11
  * gdkkeys-win32c: change registry key not found g_warning to g_debug
  * [gtk3/wayland] Expose XDG-shell suspended state via visibility events.
  * [gtk3/wayland] Only request v2 of xdg_wm_base.
  * test-msys2-meson: fix pipeline failure on GTK3
  * wayland: Fix wl_buffer size for custom cursors
  * GtkMenu: Fix positioning when attached to offscreen windows
  * gdk_display_get_monitor_at_window: Check for offscreen windows
  * GdkWindow: check for same impl class in set_transient_for ()
  * [gtk3] Cherry-pick gtkfilechoosernativeportal fixes from gtk4
  * wayland: Avoid more legacy cursor names
  * Fall back to the 'default' cursor
- BuildRequire gettext-devel instead of gettext-tools-mini: the
  - devel provides is part of gettext-tools, but this allows OBS to
  pick the package it deems correct.</changelog>
  <changelog author="yfjiang@suse.com" date="1754568000">- Drop upstreamed CVE-2024-6655.patch.
- Simplify %autopatch section as %autopatch macro is available in
  SLE.</changelog>
  <changelog author="yfjiang@suse.com" date="1754568001">- Add gtk3-gdk_x11_window_get_frame_extents-with-window-borders.patch
  (bsc#1247503).</changelog>
</package>
<package pkgid="f6647eefd993cffc9b74cacefb7de089749ce8cc14506bc22f111eeecc4ef88a" name="harfbuzz" arch="src">
  <version epoch="0" ver="8.3.0" rel="150600.3.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1658664000">- harfbuzz 5.0.1, including changes from 5.0.0:
  + Improve for fonts with more than 65535 glyphs
  + Support version 2 of “avar” table
  + Improve support for some Arabic, Hebrew fonts
  + Support for specific script tags to be retained in the
    subsetter, and add “--layout-scripts” option to “hb-subset”
    tool
  + Improved handling of command line options
  + Improve support for multiple tables and font features,
    and font feature specific bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1659528000">- harfbuzz 5.1.0:
  + More extensive buffer tracing messages
  + Fix hb-ft regression in bitmap fonts rendering
  + Support extension promotion of lookups in hb-subset-repacker
  + A new HB_GLYPH_FLAG_SAFE_TO_INSERT_TATWEEL for scripts that use
    elongation (e.g. Arabic) to signify where it is safe to insert
    tatweel glyph without interrupting shaping
  + Add --safe-to-insert-tatweel to hb-shape tool
- add harfbuzz-5.1.0-repacker-fix-signedness-of-char-in-tests.patch
  from upstream to fix ARM and PPC builds</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1663675200">- Update to version 5.2.0:
  + Fix regressions in hb-ft font functions for FT_Faces with
    transformation matrix.
  + The experimental hb-repacker API now supports splitting several
    GPOS subtable types when needed.
  + The HarfBuzz extensions to OpenType font format are now opt-in
    behind build-time flags.
  + The experimental hb-subset variable fonts instantiation API can
    now instantiate more font tables and arbitrary axis locations.
  + Unicode 15 support.
  + Various documentation improvements.
  + The hb-view command line tool now detects WezTerm inline images
    support.
  + Fix FreeType and ICU dependency lookup with meson.
  + New API:
  - +HB_SCRIPT_KAWI
  - +HB_SCRIPT_NAG_MUNDARI
- Drop patch fixed upstream:
  + harfbuzz-5.1.0-repacker-fix-signedness-of-char-in-tests.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1665316800">- Update to version 5.3.0:
  + Don’t add glyphs from dropped MATH or COLR tables to the subset
    glyphs
  + Map rlig to appropriate AAT feature selectors
  + Update USE data files to latest version
  + Check CBDT extents first before outline tables, to help with
    fonts that also include an empty glyf table
  + More work towards variable font instancing in the subsetter
  + Subsetter repacker improvements</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1666353600">- Update to version 5.3.1:
  + Subsetter repacker fixes
  + Adjust Grapheme clusters for Katakana voiced sound marks
  + New hb-subset option --preprocess-face
- Add harfbuzz-5.3.1-Fix_check-symbols_failure.patch: Fix failing
  tests.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1671278400">- Update to version 6.0.0:
  + Add API to pre-process the face and speed up future subsetting
    operations on that face. Provides up to a 95% reduction in
    subsetting times when the same face is subset more than once.
  + Shaping have been speedup by skipping entire lookups when the
    buffer contents don't intersect with the lookup. Shows up to a
    10% speedup in shaping some fonts
  + The HarfBuzz subsetter can now drop axes by pinning them to
    specific values (also referred to as instancing)
- Drop harfbuzz-5.3.1-Fix_check-symbols_failure.patch: Fixed
  upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1675684800">- Add harfbuzz-CVE-2023-25193.patch: limit how far we skip when
  looking back (boo#1207922 CVE-2023-25193).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1676203200">- Update to version 7.0.0:
  + New hb-paint API that is designed mainly to paint COLRv1 glyphs,
    but can be also used as a unified API to paint any of the glyph
    representations supported by HarfBuzz (B/W outlines, color
    layers, or color bitmaps).
  + New hb-cairo API for integrating with cairo graphics library.
    This is provided as a separate harfbuzz-cairo library.
  + Support for instancing CFF2 table
  + Support font emboldening
  + Support feature ranges with AAT shaping
  + Experimental support to cubic curves in glyf table
  + Various subsetter improvements
  + Various documentation improvements
  + Significantly reduced memory use during shaping
  + Greatly reduced memory use during subsetting CFF table
  + New command line utility, hb-info, for querying various font
    information
  + New hb-shape/hb-view options: --glyphs, --color-palette,
  - -font-bold, --font-grade, and --named-instance
  + Miscellaneous fixes and improvements
- harfbuzz-CVE-2023-25193.patch dropped in favor of upstream
  consensus fix</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1676980800">- Update to version 7.0.1:
  + Various build and bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1677844800">- Update to version 7.1.0:
  + New experimental API that uses font variations to expand or
    shrink the text to a given advance
  + Various build and bug fixes.
  + New API: hb_font_set_variation().</changelog>
  <changelog author="Andreas.Stieger@gmx.de" date="1683460800">- update to version 7.2.0:
  + Improve Tifinagh glyph positioning
  + Fix 4.2.0 regression in applying across syllables in syllabic
    scripts.
  + Add flag to avoid glyph substitution closure during subsetting,
    and the corresponding “--no-layout-closure” option to
    “hb-subset” command line tool.
  + Support instancing COLRv1 table
  + Optimize handling of “gvar” table
  + Various subsetter bug fixes and improvements, documentation</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1683806400">- update to version 7.3.0:
  + Speedup applying glyph variation in VarComposites fonts
    (over 40% speedup)
  + Speedup instancing some fonts
    (over 20% speedup in instancing RobotoFlex)
  + Speedup shaping some fonts (over 30% speedup in shaping Roboto
  + Support subsetting VarComposites and beyond-64k fonts
  + New configuration macro HB_MINIMIZE_MEMORY_USAGE to favor
    optimizing memory usage over speed
  + Supporting setting the mapping between old and new glyph
    indices during subsetting
  + Various fixes and improvements</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1689249600">- Update to version 8.0.1:
  + Build fix on 32-bit arm.
  + More speed optimizations:
  - 60% speedup in retaingids subsetting SourceHanSans-VF.
  - 38% speed up in subsetting (beyond-64k) mega-merged Noto.
  - 16% speed up in retain-gid (used for IFT) subsetting of
    NotoSansCJKkr.
- Changes from version 8.0.0:
  + New, experimental, WebAssembly (WASM) shaper, that provides
    greater flexibility over OpenType/AAT/Graphite shaping, using
    WebAssembly embedded inside the font file. Currently WASM
    shaper is disabled by default and needs to be enabled at build
    time.
  + Improvements to Experimental features introduced in earlier
    releases:
  - Support for subsetting beyond-64k and VarComposites fonts.
  - Support for instancing variable fonts with cubic “glyf”
    table.
  - Many big speed optimizations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690891200">- Update to version 8.1.0:
  + Fix long-standing build issue with the AIX compiler and older
    Apple clang.
  + Revert optimization that could cause timeout during subsetting
    with malicious fonts.
  + More optimization work:
  - 45% speed up in shaping Noto Duployan font.
  - 10% speed up in subsetting Noto Duployan font.
  - Another 8% speed up in shaping Gulzar.
  - 5% speed up in loading Roboto.
  + New API: +hb_ot_layout_collect_features_map().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691064000">- Update to version 8.1.1:
  + Fix shaping of contextual rules at the end of string,
    introduced in 8.1.0.
  + Fix stack-overflow in repacker with malicious fonts.
  + 30% speed up loading Noto Duployan font.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 8.2.0:
  + Various build and fuzzing fixes
  + Improvements to COLRv1 painting.
  + New API:
  - hb_paint_color_glyph_func_t
  - hb_paint_funcs_set_color_glyph_func
  - hb_paint_color_glyph</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695038400">- Update to version 8.2.1:
  + Unicode 15.1 support.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697630400">- Update to version 8.2.2:
  + Fix regression from 8.1.0 in shaping fonts with duplicate
    feature tags.
  + Fix regression from 8.2.0 in parsing CSS-style feature strings.
  + Variable fonts instanciation now handles more tables.
  + Various CMake build improvements.
  + Various fixes to build without errors with gcc 4.9.2.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1699704000">- Update to version 8.3.0:
  + Improve memory barrier to fix potential segfaults
  + Various subsetting and instancing fixes.
  + Rename “hb-subset” option “--instance” to “--variations” to
    match the other tools, old option kept as an alias
- -devel: fix no-library-dependency-on libharbuzz-cairo0</changelog>
  <changelog author="mgorse@suse.com" date="1768564800">- Add harfbuzz-CVE-2026-22693.patch: fix a NULL pointer dereference
  (bsc#1256459 CVE-2026-22693).</changelog>
</package>
<package pkgid="c394554d5fc4ed17a5515ee3a6d80077fb29d03eb4bbdef1c46d2f39c6ffdffb" name="harfbuzz-devel" arch="x86_64">
  <version epoch="0" ver="8.3.0" rel="150600.3.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1658664000">- harfbuzz 5.0.1, including changes from 5.0.0:
  + Improve for fonts with more than 65535 glyphs
  + Support version 2 of “avar” table
  + Improve support for some Arabic, Hebrew fonts
  + Support for specific script tags to be retained in the
    subsetter, and add “--layout-scripts” option to “hb-subset”
    tool
  + Improved handling of command line options
  + Improve support for multiple tables and font features,
    and font feature specific bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1659528000">- harfbuzz 5.1.0:
  + More extensive buffer tracing messages
  + Fix hb-ft regression in bitmap fonts rendering
  + Support extension promotion of lookups in hb-subset-repacker
  + A new HB_GLYPH_FLAG_SAFE_TO_INSERT_TATWEEL for scripts that use
    elongation (e.g. Arabic) to signify where it is safe to insert
    tatweel glyph without interrupting shaping
  + Add --safe-to-insert-tatweel to hb-shape tool
- add harfbuzz-5.1.0-repacker-fix-signedness-of-char-in-tests.patch
  from upstream to fix ARM and PPC builds</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1663675200">- Update to version 5.2.0:
  + Fix regressions in hb-ft font functions for FT_Faces with
    transformation matrix.
  + The experimental hb-repacker API now supports splitting several
    GPOS subtable types when needed.
  + The HarfBuzz extensions to OpenType font format are now opt-in
    behind build-time flags.
  + The experimental hb-subset variable fonts instantiation API can
    now instantiate more font tables and arbitrary axis locations.
  + Unicode 15 support.
  + Various documentation improvements.
  + The hb-view command line tool now detects WezTerm inline images
    support.
  + Fix FreeType and ICU dependency lookup with meson.
  + New API:
  - +HB_SCRIPT_KAWI
  - +HB_SCRIPT_NAG_MUNDARI
- Drop patch fixed upstream:
  + harfbuzz-5.1.0-repacker-fix-signedness-of-char-in-tests.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1665316800">- Update to version 5.3.0:
  + Don’t add glyphs from dropped MATH or COLR tables to the subset
    glyphs
  + Map rlig to appropriate AAT feature selectors
  + Update USE data files to latest version
  + Check CBDT extents first before outline tables, to help with
    fonts that also include an empty glyf table
  + More work towards variable font instancing in the subsetter
  + Subsetter repacker improvements</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1666353600">- Update to version 5.3.1:
  + Subsetter repacker fixes
  + Adjust Grapheme clusters for Katakana voiced sound marks
  + New hb-subset option --preprocess-face
- Add harfbuzz-5.3.1-Fix_check-symbols_failure.patch: Fix failing
  tests.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1671278400">- Update to version 6.0.0:
  + Add API to pre-process the face and speed up future subsetting
    operations on that face. Provides up to a 95% reduction in
    subsetting times when the same face is subset more than once.
  + Shaping have been speedup by skipping entire lookups when the
    buffer contents don't intersect with the lookup. Shows up to a
    10% speedup in shaping some fonts
  + The HarfBuzz subsetter can now drop axes by pinning them to
    specific values (also referred to as instancing)
- Drop harfbuzz-5.3.1-Fix_check-symbols_failure.patch: Fixed
  upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1675684800">- Add harfbuzz-CVE-2023-25193.patch: limit how far we skip when
  looking back (boo#1207922 CVE-2023-25193).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1676203200">- Update to version 7.0.0:
  + New hb-paint API that is designed mainly to paint COLRv1 glyphs,
    but can be also used as a unified API to paint any of the glyph
    representations supported by HarfBuzz (B/W outlines, color
    layers, or color bitmaps).
  + New hb-cairo API for integrating with cairo graphics library.
    This is provided as a separate harfbuzz-cairo library.
  + Support for instancing CFF2 table
  + Support font emboldening
  + Support feature ranges with AAT shaping
  + Experimental support to cubic curves in glyf table
  + Various subsetter improvements
  + Various documentation improvements
  + Significantly reduced memory use during shaping
  + Greatly reduced memory use during subsetting CFF table
  + New command line utility, hb-info, for querying various font
    information
  + New hb-shape/hb-view options: --glyphs, --color-palette,
  - -font-bold, --font-grade, and --named-instance
  + Miscellaneous fixes and improvements
- harfbuzz-CVE-2023-25193.patch dropped in favor of upstream
  consensus fix</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1676980800">- Update to version 7.0.1:
  + Various build and bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1677844800">- Update to version 7.1.0:
  + New experimental API that uses font variations to expand or
    shrink the text to a given advance
  + Various build and bug fixes.
  + New API: hb_font_set_variation().</changelog>
  <changelog author="Andreas.Stieger@gmx.de" date="1683460800">- update to version 7.2.0:
  + Improve Tifinagh glyph positioning
  + Fix 4.2.0 regression in applying across syllables in syllabic
    scripts.
  + Add flag to avoid glyph substitution closure during subsetting,
    and the corresponding “--no-layout-closure” option to
    “hb-subset” command line tool.
  + Support instancing COLRv1 table
  + Optimize handling of “gvar” table
  + Various subsetter bug fixes and improvements, documentation</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1683806400">- update to version 7.3.0:
  + Speedup applying glyph variation in VarComposites fonts
    (over 40% speedup)
  + Speedup instancing some fonts
    (over 20% speedup in instancing RobotoFlex)
  + Speedup shaping some fonts (over 30% speedup in shaping Roboto
  + Support subsetting VarComposites and beyond-64k fonts
  + New configuration macro HB_MINIMIZE_MEMORY_USAGE to favor
    optimizing memory usage over speed
  + Supporting setting the mapping between old and new glyph
    indices during subsetting
  + Various fixes and improvements</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1689249600">- Update to version 8.0.1:
  + Build fix on 32-bit arm.
  + More speed optimizations:
  - 60% speedup in retaingids subsetting SourceHanSans-VF.
  - 38% speed up in subsetting (beyond-64k) mega-merged Noto.
  - 16% speed up in retain-gid (used for IFT) subsetting of
    NotoSansCJKkr.
- Changes from version 8.0.0:
  + New, experimental, WebAssembly (WASM) shaper, that provides
    greater flexibility over OpenType/AAT/Graphite shaping, using
    WebAssembly embedded inside the font file. Currently WASM
    shaper is disabled by default and needs to be enabled at build
    time.
  + Improvements to Experimental features introduced in earlier
    releases:
  - Support for subsetting beyond-64k and VarComposites fonts.
  - Support for instancing variable fonts with cubic “glyf”
    table.
  - Many big speed optimizations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690891200">- Update to version 8.1.0:
  + Fix long-standing build issue with the AIX compiler and older
    Apple clang.
  + Revert optimization that could cause timeout during subsetting
    with malicious fonts.
  + More optimization work:
  - 45% speed up in shaping Noto Duployan font.
  - 10% speed up in subsetting Noto Duployan font.
  - Another 8% speed up in shaping Gulzar.
  - 5% speed up in loading Roboto.
  + New API: +hb_ot_layout_collect_features_map().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691064000">- Update to version 8.1.1:
  + Fix shaping of contextual rules at the end of string,
    introduced in 8.1.0.
  + Fix stack-overflow in repacker with malicious fonts.
  + 30% speed up loading Noto Duployan font.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 8.2.0:
  + Various build and fuzzing fixes
  + Improvements to COLRv1 painting.
  + New API:
  - hb_paint_color_glyph_func_t
  - hb_paint_funcs_set_color_glyph_func
  - hb_paint_color_glyph</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695038400">- Update to version 8.2.1:
  + Unicode 15.1 support.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697630400">- Update to version 8.2.2:
  + Fix regression from 8.1.0 in shaping fonts with duplicate
    feature tags.
  + Fix regression from 8.2.0 in parsing CSS-style feature strings.
  + Variable fonts instanciation now handles more tables.
  + Various CMake build improvements.
  + Various fixes to build without errors with gcc 4.9.2.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1699704000">- Update to version 8.3.0:
  + Improve memory barrier to fix potential segfaults
  + Various subsetting and instancing fixes.
  + Rename “hb-subset” option “--instance” to “--variations” to
    match the other tools, old option kept as an alias
- -devel: fix no-library-dependency-on libharbuzz-cairo0</changelog>
  <changelog author="mgorse@suse.com" date="1768564800">- Add harfbuzz-CVE-2026-22693.patch: fix a NULL pointer dereference
  (bsc#1256459 CVE-2026-22693).</changelog>
</package>
<package pkgid="e91e91f0902f26c4359ec06d3972f60af6d39e4883cf326e03dc0811cecb178a" name="haveged" arch="src">
  <version epoch="0" ver="1.9.14" rel="150600.11.3.1"/>
  <changelog author="meissner@suse.com" date="1444392000">- haveged.service: reverted the dependency on systemd-journald.socket
  for now, as it causes a dependency loop. bsc#949728 bsc#950857</changelog>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix missing dependency on coreutils for initrd macros (boo#958562)</changelog>
  <changelog author="psimons@suse.com" date="1466164800">- Add haveged-no-syslog.patch to remedy the potential for deadlocks
  when booting the system: journald reads from /dev/random, which
  receives entropy from haveged, which in turn logs to syslog
  before providing any. Ideally, haveged would provide a proper
  command-line flag to disable use of syslog. Will work with
  upstream to resolve this in a cleaner way. (bnc#959237)
- Remove "After=systemd-random-seed.service" from systemd service
  file to avoid the potential for deadlocks when booting the
  system: systemd-random-seed needs /var to read its previous
  state; mounting /var needs journald; journald needs entropy; and
  entropy is provided by haveged, which needs systemd-random-seed.
  (bnc#959237)</changelog>
  <changelog author="jengelh@inai.de" date="1466337600">- reset rpm groups</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- update to 1.9.2
  * Cross compile fixes
  * Limit watermark max to less than pool size to avoid 100% cpu
    condition
  * Add service.suse init script
- drop fix-enforced-clock-gettime.patch (fixed upstream)
- cleanup with spec-cleaner</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="werner@suse.de" date="1530100800">- Make haveged survive switch root within initrd  (boo#1075359)
  added change-sysroot.patch
  haveged-switch-root.service</changelog>
  <changelog author="werner@suse.de" date="1530532800">- Add patch change-sysroot.patch to
  move forward to socket communication within private network
- Add haveged-switch-root.service which send the new root location
  to running haveged process</changelog>
  <changelog author="mpluskal@suse.com" date="1536667200">- Update to version 1.9.4:
  * Avoid misleading message if cmd socket is in use
  * Implements a command mode and use it for chroot
- Drop upstreamed patches:
  * change-sysroot.patch
- Update project and download url's</changelog>
  <changelog author="jengelh@inai.de" date="1536667201">- Use noun phrase for summary. Grammar fixes to description.</changelog>
  <changelog author="werner@suse.de" date="1537358400">- Add patch f2193587.patch from github pull request (bsc#1134351)
  * Fix segfault on arm machines which do not eport the cache size
    or say it is -1 in sysfs
- Refresh patches</changelog>
  <changelog author="schwab@suse.de" date="1564488000">- get-poolsize.patch: Fix type mismatch in get_poolsize that breaks error
  checking (bsc#1111047)</changelog>
  <changelog author="mpluskal@suse.com" date="1590494400">- Update to version 1.9.8:
  * Fix for Unresolved symbol error_exit in libhavege #20 by pld-gitsync [Jirka Hladky]
  * order after systemd-tmpfiles-setup-dev.service (origin/pr/21) [Christian Hesse]
  * use systemd security features [Christian Hesse]
  * do not run in container [Christian Hesse]
  * do not use carriage return in line break [Christian Hesse]
  * Fixed invalid UTF-8 codes in ChangeLog [Jirka Hladky]
- Changes for version 1.9.5:
  * Added test for /dev/random symlink [Jirka Hladky]
  * Update to automake 1.16 [Jirka Hladky]
  * Fix segv at start [Andrew]
  * Fixed built issue on Cygwin [jbaker6953]
  * Fix segfault on arm machines (origin/pr/7) [Natanael Copa]
  * init.d/Makefile.am - add missing dependency [Jackie Huang]
  * service.redhat - update PIDFile [Pierre-Jean Texier]
  * Fix type mismatch in get_poolsize [Andreas Schwab]
  * Fixup upstream changelog [Nicolas Braud-Santoni]
  * Remove support for CPUID on ia64 (origin/pr/19) [Jeremy Bobbio]
  * Output some progress during CUSUM and RANDOM EXCURSION test [Sven Hartge]
  * Diagnostics capture mode now works correctly [Ethan Rahn]
- Drop upstream patches:
  * f2193587.patch
  * get-poolsize.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1593518400">- Update to 1.9.13:
  * added support for --version [Jirka Hladky]
  * updated systemd service file [Jirka Hladky]
  * fix a memory leak in havege_destroy [Anakin Zhang]
  * updated version reported by program [Jirka Hladky]
  * fix ordering cycle with private tmp [Christian Hesse]
  * Updated systemd service file [Nicolas Braud-Santoni]
  * Bump soname [Nicolas Braud-Santoni]
  * Fix crash on shutdown in threaded mode [Sergei Trofimovich]
  * Fix compilation with --enable-threads [Lars Wendler]</changelog>
  <changelog author="info@paolostivanin.com" date="1609761600">- Update to 1.9.14:
  * made enttest configurable
  * havegecmd.c - new command added to close the communication socket
- Drop haveged-conditional-enttest.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1633953600">- Improvements on the linux kernel random subsystem have made
  the haveged service/daemon obsolete, remove the service files,
  initrd modules and udev rules, the other components
  are still useful.</changelog>
  <changelog author="meissner@suse.com" date="1635854400">- revert last change, e.g. for VMs where we are not being fed entropy
  from the host or similar setups.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- Synchronize haveged instances during switching root (bsc#1203079)
  * Add haveged-switch-root.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1698408000">- Remove haveged-switch-root.service because it's implemented incorrectly and
  neither upstream don't know how to fix it (#77). On the other hand, without
  this service haveged will be started from scratch after switch root so it's
  hopefully no big deal. Also remove patch for bsc#1203079 as it's considered
  as a security threat because of creating fixed name file in world-writable
  directory. [jsc#PED-6184, bsc#1206699]
  * Remove
  - haveged-switch-root.service
  - haveged-switch-root.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765195200">- Fix for bsc#1222296 and bsc#1165294.
- Remove haveged-switch-root.service.
- Add haveged-once.service.
- Add patch files introducing the '--once' flag.
  * introduce-once-1.patch
  * introduce-once-2.patch</changelog>
</package>
<package pkgid="abe7c0e53530bfedc98c766f25334ceae8b802efd9626356605a03bc033e80e1" name="haveged" arch="x86_64">
  <version epoch="0" ver="1.9.14" rel="150600.11.3.1"/>
  <changelog author="meissner@suse.com" date="1444392000">- haveged.service: reverted the dependency on systemd-journald.socket
  for now, as it causes a dependency loop. bsc#949728 bsc#950857</changelog>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix missing dependency on coreutils for initrd macros (boo#958562)</changelog>
  <changelog author="psimons@suse.com" date="1466164800">- Add haveged-no-syslog.patch to remedy the potential for deadlocks
  when booting the system: journald reads from /dev/random, which
  receives entropy from haveged, which in turn logs to syslog
  before providing any. Ideally, haveged would provide a proper
  command-line flag to disable use of syslog. Will work with
  upstream to resolve this in a cleaner way. (bnc#959237)
- Remove "After=systemd-random-seed.service" from systemd service
  file to avoid the potential for deadlocks when booting the
  system: systemd-random-seed needs /var to read its previous
  state; mounting /var needs journald; journald needs entropy; and
  entropy is provided by haveged, which needs systemd-random-seed.
  (bnc#959237)</changelog>
  <changelog author="jengelh@inai.de" date="1466337600">- reset rpm groups</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- update to 1.9.2
  * Cross compile fixes
  * Limit watermark max to less than pool size to avoid 100% cpu
    condition
  * Add service.suse init script
- drop fix-enforced-clock-gettime.patch (fixed upstream)
- cleanup with spec-cleaner</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="werner@suse.de" date="1530100800">- Make haveged survive switch root within initrd  (boo#1075359)
  added change-sysroot.patch
  haveged-switch-root.service</changelog>
  <changelog author="werner@suse.de" date="1530532800">- Add patch change-sysroot.patch to
  move forward to socket communication within private network
- Add haveged-switch-root.service which send the new root location
  to running haveged process</changelog>
  <changelog author="mpluskal@suse.com" date="1536667200">- Update to version 1.9.4:
  * Avoid misleading message if cmd socket is in use
  * Implements a command mode and use it for chroot
- Drop upstreamed patches:
  * change-sysroot.patch
- Update project and download url's</changelog>
  <changelog author="jengelh@inai.de" date="1536667201">- Use noun phrase for summary. Grammar fixes to description.</changelog>
  <changelog author="werner@suse.de" date="1537358400">- Add patch f2193587.patch from github pull request (bsc#1134351)
  * Fix segfault on arm machines which do not eport the cache size
    or say it is -1 in sysfs
- Refresh patches</changelog>
  <changelog author="schwab@suse.de" date="1564488000">- get-poolsize.patch: Fix type mismatch in get_poolsize that breaks error
  checking (bsc#1111047)</changelog>
  <changelog author="mpluskal@suse.com" date="1590494400">- Update to version 1.9.8:
  * Fix for Unresolved symbol error_exit in libhavege #20 by pld-gitsync [Jirka Hladky]
  * order after systemd-tmpfiles-setup-dev.service (origin/pr/21) [Christian Hesse]
  * use systemd security features [Christian Hesse]
  * do not run in container [Christian Hesse]
  * do not use carriage return in line break [Christian Hesse]
  * Fixed invalid UTF-8 codes in ChangeLog [Jirka Hladky]
- Changes for version 1.9.5:
  * Added test for /dev/random symlink [Jirka Hladky]
  * Update to automake 1.16 [Jirka Hladky]
  * Fix segv at start [Andrew]
  * Fixed built issue on Cygwin [jbaker6953]
  * Fix segfault on arm machines (origin/pr/7) [Natanael Copa]
  * init.d/Makefile.am - add missing dependency [Jackie Huang]
  * service.redhat - update PIDFile [Pierre-Jean Texier]
  * Fix type mismatch in get_poolsize [Andreas Schwab]
  * Fixup upstream changelog [Nicolas Braud-Santoni]
  * Remove support for CPUID on ia64 (origin/pr/19) [Jeremy Bobbio]
  * Output some progress during CUSUM and RANDOM EXCURSION test [Sven Hartge]
  * Diagnostics capture mode now works correctly [Ethan Rahn]
- Drop upstream patches:
  * f2193587.patch
  * get-poolsize.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1593518400">- Update to 1.9.13:
  * added support for --version [Jirka Hladky]
  * updated systemd service file [Jirka Hladky]
  * fix a memory leak in havege_destroy [Anakin Zhang]
  * updated version reported by program [Jirka Hladky]
  * fix ordering cycle with private tmp [Christian Hesse]
  * Updated systemd service file [Nicolas Braud-Santoni]
  * Bump soname [Nicolas Braud-Santoni]
  * Fix crash on shutdown in threaded mode [Sergei Trofimovich]
  * Fix compilation with --enable-threads [Lars Wendler]</changelog>
  <changelog author="info@paolostivanin.com" date="1609761600">- Update to 1.9.14:
  * made enttest configurable
  * havegecmd.c - new command added to close the communication socket
- Drop haveged-conditional-enttest.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1633953600">- Improvements on the linux kernel random subsystem have made
  the haveged service/daemon obsolete, remove the service files,
  initrd modules and udev rules, the other components
  are still useful.</changelog>
  <changelog author="meissner@suse.com" date="1635854400">- revert last change, e.g. for VMs where we are not being fed entropy
  from the host or similar setups.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- Synchronize haveged instances during switching root (bsc#1203079)
  * Add haveged-switch-root.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1698408000">- Remove haveged-switch-root.service because it's implemented incorrectly and
  neither upstream don't know how to fix it (#77). On the other hand, without
  this service haveged will be started from scratch after switch root so it's
  hopefully no big deal. Also remove patch for bsc#1203079 as it's considered
  as a security threat because of creating fixed name file in world-writable
  directory. [jsc#PED-6184, bsc#1206699]
  * Remove
  - haveged-switch-root.service
  - haveged-switch-root.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765195200">- Fix for bsc#1222296 and bsc#1165294.
- Remove haveged-switch-root.service.
- Add haveged-once.service.
- Add patch files introducing the '--once' flag.
  * introduce-once-1.patch
  * introduce-once-2.patch</changelog>
</package>
<package pkgid="f3bf720b0128ce7606b1451a1a9265e9fcdfd1940e982d32cfa5d53168df9ccd" name="haveged" arch="src">
  <version epoch="0" ver="1.9.14" rel="150600.11.6.1"/>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix missing dependency on coreutils for initrd macros (boo#958562)</changelog>
  <changelog author="psimons@suse.com" date="1466164800">- Add haveged-no-syslog.patch to remedy the potential for deadlocks
  when booting the system: journald reads from /dev/random, which
  receives entropy from haveged, which in turn logs to syslog
  before providing any. Ideally, haveged would provide a proper
  command-line flag to disable use of syslog. Will work with
  upstream to resolve this in a cleaner way. (bnc#959237)
- Remove "After=systemd-random-seed.service" from systemd service
  file to avoid the potential for deadlocks when booting the
  system: systemd-random-seed needs /var to read its previous
  state; mounting /var needs journald; journald needs entropy; and
  entropy is provided by haveged, which needs systemd-random-seed.
  (bnc#959237)</changelog>
  <changelog author="jengelh@inai.de" date="1466337600">- reset rpm groups</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- update to 1.9.2
  * Cross compile fixes
  * Limit watermark max to less than pool size to avoid 100% cpu
    condition
  * Add service.suse init script
- drop fix-enforced-clock-gettime.patch (fixed upstream)
- cleanup with spec-cleaner</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="werner@suse.de" date="1530100800">- Make haveged survive switch root within initrd  (boo#1075359)
  added change-sysroot.patch
  haveged-switch-root.service</changelog>
  <changelog author="werner@suse.de" date="1530532800">- Add patch change-sysroot.patch to
  move forward to socket communication within private network
- Add haveged-switch-root.service which send the new root location
  to running haveged process</changelog>
  <changelog author="mpluskal@suse.com" date="1536667200">- Update to version 1.9.4:
  * Avoid misleading message if cmd socket is in use
  * Implements a command mode and use it for chroot
- Drop upstreamed patches:
  * change-sysroot.patch
- Update project and download url's</changelog>
  <changelog author="jengelh@inai.de" date="1536667201">- Use noun phrase for summary. Grammar fixes to description.</changelog>
  <changelog author="werner@suse.de" date="1537358400">- Add patch f2193587.patch from github pull request (bsc#1134351)
  * Fix segfault on arm machines which do not eport the cache size
    or say it is -1 in sysfs
- Refresh patches</changelog>
  <changelog author="schwab@suse.de" date="1564488000">- get-poolsize.patch: Fix type mismatch in get_poolsize that breaks error
  checking (bsc#1111047)</changelog>
  <changelog author="mpluskal@suse.com" date="1590494400">- Update to version 1.9.8:
  * Fix for Unresolved symbol error_exit in libhavege #20 by pld-gitsync [Jirka Hladky]
  * order after systemd-tmpfiles-setup-dev.service (origin/pr/21) [Christian Hesse]
  * use systemd security features [Christian Hesse]
  * do not run in container [Christian Hesse]
  * do not use carriage return in line break [Christian Hesse]
  * Fixed invalid UTF-8 codes in ChangeLog [Jirka Hladky]
- Changes for version 1.9.5:
  * Added test for /dev/random symlink [Jirka Hladky]
  * Update to automake 1.16 [Jirka Hladky]
  * Fix segv at start [Andrew]
  * Fixed built issue on Cygwin [jbaker6953]
  * Fix segfault on arm machines (origin/pr/7) [Natanael Copa]
  * init.d/Makefile.am - add missing dependency [Jackie Huang]
  * service.redhat - update PIDFile [Pierre-Jean Texier]
  * Fix type mismatch in get_poolsize [Andreas Schwab]
  * Fixup upstream changelog [Nicolas Braud-Santoni]
  * Remove support for CPUID on ia64 (origin/pr/19) [Jeremy Bobbio]
  * Output some progress during CUSUM and RANDOM EXCURSION test [Sven Hartge]
  * Diagnostics capture mode now works correctly [Ethan Rahn]
- Drop upstream patches:
  * f2193587.patch
  * get-poolsize.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1593518400">- Update to 1.9.13:
  * added support for --version [Jirka Hladky]
  * updated systemd service file [Jirka Hladky]
  * fix a memory leak in havege_destroy [Anakin Zhang]
  * updated version reported by program [Jirka Hladky]
  * fix ordering cycle with private tmp [Christian Hesse]
  * Updated systemd service file [Nicolas Braud-Santoni]
  * Bump soname [Nicolas Braud-Santoni]
  * Fix crash on shutdown in threaded mode [Sergei Trofimovich]
  * Fix compilation with --enable-threads [Lars Wendler]</changelog>
  <changelog author="info@paolostivanin.com" date="1609761600">- Update to 1.9.14:
  * made enttest configurable
  * havegecmd.c - new command added to close the communication socket
- Drop haveged-conditional-enttest.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1633953600">- Improvements on the linux kernel random subsystem have made
  the haveged service/daemon obsolete, remove the service files,
  initrd modules and udev rules, the other components
  are still useful.</changelog>
  <changelog author="meissner@suse.com" date="1635854400">- revert last change, e.g. for VMs where we are not being fed entropy
  from the host or similar setups.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- Synchronize haveged instances during switching root (bsc#1203079)
  * Add haveged-switch-root.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1698408000">- Remove haveged-switch-root.service because it's implemented incorrectly and
  neither upstream don't know how to fix it (#77). On the other hand, without
  this service haveged will be started from scratch after switch root so it's
  hopefully no big deal. Also remove patch for bsc#1203079 as it's considered
  as a security threat because of creating fixed name file in world-writable
  directory. [jsc#PED-6184, bsc#1206699]
  * Remove
  - haveged-switch-root.service
  - haveged-switch-root.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765195200">- Fix for bsc#1222296 and bsc#1165294.
- Remove haveged-switch-root.service.
- Add haveged-once.service.
- Add patch files introducing the '--once' flag.
  * introduce-once-1.patch
  * introduce-once-2.patch</changelog>
  <changelog author="dmueller@suse.com" date="1778587200">- add CVE-2026-41054.patch (bsc#1264086, CVE-2026-41054)</changelog>
</package>
<package pkgid="a6723cb5ef031af36cce48de0fd49e1959a8470cef9858cfd125e2a5f088dd85" name="haveged" arch="x86_64">
  <version epoch="0" ver="1.9.14" rel="150600.11.6.1"/>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix missing dependency on coreutils for initrd macros (boo#958562)</changelog>
  <changelog author="psimons@suse.com" date="1466164800">- Add haveged-no-syslog.patch to remedy the potential for deadlocks
  when booting the system: journald reads from /dev/random, which
  receives entropy from haveged, which in turn logs to syslog
  before providing any. Ideally, haveged would provide a proper
  command-line flag to disable use of syslog. Will work with
  upstream to resolve this in a cleaner way. (bnc#959237)
- Remove "After=systemd-random-seed.service" from systemd service
  file to avoid the potential for deadlocks when booting the
  system: systemd-random-seed needs /var to read its previous
  state; mounting /var needs journald; journald needs entropy; and
  entropy is provided by haveged, which needs systemd-random-seed.
  (bnc#959237)</changelog>
  <changelog author="jengelh@inai.de" date="1466337600">- reset rpm groups</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- update to 1.9.2
  * Cross compile fixes
  * Limit watermark max to less than pool size to avoid 100% cpu
    condition
  * Add service.suse init script
- drop fix-enforced-clock-gettime.patch (fixed upstream)
- cleanup with spec-cleaner</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="werner@suse.de" date="1530100800">- Make haveged survive switch root within initrd  (boo#1075359)
  added change-sysroot.patch
  haveged-switch-root.service</changelog>
  <changelog author="werner@suse.de" date="1530532800">- Add patch change-sysroot.patch to
  move forward to socket communication within private network
- Add haveged-switch-root.service which send the new root location
  to running haveged process</changelog>
  <changelog author="mpluskal@suse.com" date="1536667200">- Update to version 1.9.4:
  * Avoid misleading message if cmd socket is in use
  * Implements a command mode and use it for chroot
- Drop upstreamed patches:
  * change-sysroot.patch
- Update project and download url's</changelog>
  <changelog author="jengelh@inai.de" date="1536667201">- Use noun phrase for summary. Grammar fixes to description.</changelog>
  <changelog author="werner@suse.de" date="1537358400">- Add patch f2193587.patch from github pull request (bsc#1134351)
  * Fix segfault on arm machines which do not eport the cache size
    or say it is -1 in sysfs
- Refresh patches</changelog>
  <changelog author="schwab@suse.de" date="1564488000">- get-poolsize.patch: Fix type mismatch in get_poolsize that breaks error
  checking (bsc#1111047)</changelog>
  <changelog author="mpluskal@suse.com" date="1590494400">- Update to version 1.9.8:
  * Fix for Unresolved symbol error_exit in libhavege #20 by pld-gitsync [Jirka Hladky]
  * order after systemd-tmpfiles-setup-dev.service (origin/pr/21) [Christian Hesse]
  * use systemd security features [Christian Hesse]
  * do not run in container [Christian Hesse]
  * do not use carriage return in line break [Christian Hesse]
  * Fixed invalid UTF-8 codes in ChangeLog [Jirka Hladky]
- Changes for version 1.9.5:
  * Added test for /dev/random symlink [Jirka Hladky]
  * Update to automake 1.16 [Jirka Hladky]
  * Fix segv at start [Andrew]
  * Fixed built issue on Cygwin [jbaker6953]
  * Fix segfault on arm machines (origin/pr/7) [Natanael Copa]
  * init.d/Makefile.am - add missing dependency [Jackie Huang]
  * service.redhat - update PIDFile [Pierre-Jean Texier]
  * Fix type mismatch in get_poolsize [Andreas Schwab]
  * Fixup upstream changelog [Nicolas Braud-Santoni]
  * Remove support for CPUID on ia64 (origin/pr/19) [Jeremy Bobbio]
  * Output some progress during CUSUM and RANDOM EXCURSION test [Sven Hartge]
  * Diagnostics capture mode now works correctly [Ethan Rahn]
- Drop upstream patches:
  * f2193587.patch
  * get-poolsize.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1593518400">- Update to 1.9.13:
  * added support for --version [Jirka Hladky]
  * updated systemd service file [Jirka Hladky]
  * fix a memory leak in havege_destroy [Anakin Zhang]
  * updated version reported by program [Jirka Hladky]
  * fix ordering cycle with private tmp [Christian Hesse]
  * Updated systemd service file [Nicolas Braud-Santoni]
  * Bump soname [Nicolas Braud-Santoni]
  * Fix crash on shutdown in threaded mode [Sergei Trofimovich]
  * Fix compilation with --enable-threads [Lars Wendler]</changelog>
  <changelog author="info@paolostivanin.com" date="1609761600">- Update to 1.9.14:
  * made enttest configurable
  * havegecmd.c - new command added to close the communication socket
- Drop haveged-conditional-enttest.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1633953600">- Improvements on the linux kernel random subsystem have made
  the haveged service/daemon obsolete, remove the service files,
  initrd modules and udev rules, the other components
  are still useful.</changelog>
  <changelog author="meissner@suse.com" date="1635854400">- revert last change, e.g. for VMs where we are not being fed entropy
  from the host or similar setups.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- Synchronize haveged instances during switching root (bsc#1203079)
  * Add haveged-switch-root.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1698408000">- Remove haveged-switch-root.service because it's implemented incorrectly and
  neither upstream don't know how to fix it (#77). On the other hand, without
  this service haveged will be started from scratch after switch root so it's
  hopefully no big deal. Also remove patch for bsc#1203079 as it's considered
  as a security threat because of creating fixed name file in world-writable
  directory. [jsc#PED-6184, bsc#1206699]
  * Remove
  - haveged-switch-root.service
  - haveged-switch-root.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765195200">- Fix for bsc#1222296 and bsc#1165294.
- Remove haveged-switch-root.service.
- Add haveged-once.service.
- Add patch files introducing the '--once' flag.
  * introduce-once-1.patch
  * introduce-once-2.patch</changelog>
  <changelog author="dmueller@suse.com" date="1778587200">- add CVE-2026-41054.patch (bsc#1264086, CVE-2026-41054)</changelog>
</package>
<package pkgid="965d20e00970b889a9289c0a7713ef675bab02e4b5d230698a86778817fd76c3" name="haveged-devel" arch="x86_64">
  <version epoch="0" ver="1.9.14" rel="150600.11.3.1"/>
  <changelog author="meissner@suse.com" date="1444392000">- haveged.service: reverted the dependency on systemd-journald.socket
  for now, as it causes a dependency loop. bsc#949728 bsc#950857</changelog>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix missing dependency on coreutils for initrd macros (boo#958562)</changelog>
  <changelog author="psimons@suse.com" date="1466164800">- Add haveged-no-syslog.patch to remedy the potential for deadlocks
  when booting the system: journald reads from /dev/random, which
  receives entropy from haveged, which in turn logs to syslog
  before providing any. Ideally, haveged would provide a proper
  command-line flag to disable use of syslog. Will work with
  upstream to resolve this in a cleaner way. (bnc#959237)
- Remove "After=systemd-random-seed.service" from systemd service
  file to avoid the potential for deadlocks when booting the
  system: systemd-random-seed needs /var to read its previous
  state; mounting /var needs journald; journald needs entropy; and
  entropy is provided by haveged, which needs systemd-random-seed.
  (bnc#959237)</changelog>
  <changelog author="jengelh@inai.de" date="1466337600">- reset rpm groups</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- update to 1.9.2
  * Cross compile fixes
  * Limit watermark max to less than pool size to avoid 100% cpu
    condition
  * Add service.suse init script
- drop fix-enforced-clock-gettime.patch (fixed upstream)
- cleanup with spec-cleaner</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="werner@suse.de" date="1530100800">- Make haveged survive switch root within initrd  (boo#1075359)
  added change-sysroot.patch
  haveged-switch-root.service</changelog>
  <changelog author="werner@suse.de" date="1530532800">- Add patch change-sysroot.patch to
  move forward to socket communication within private network
- Add haveged-switch-root.service which send the new root location
  to running haveged process</changelog>
  <changelog author="mpluskal@suse.com" date="1536667200">- Update to version 1.9.4:
  * Avoid misleading message if cmd socket is in use
  * Implements a command mode and use it for chroot
- Drop upstreamed patches:
  * change-sysroot.patch
- Update project and download url's</changelog>
  <changelog author="jengelh@inai.de" date="1536667201">- Use noun phrase for summary. Grammar fixes to description.</changelog>
  <changelog author="werner@suse.de" date="1537358400">- Add patch f2193587.patch from github pull request (bsc#1134351)
  * Fix segfault on arm machines which do not eport the cache size
    or say it is -1 in sysfs
- Refresh patches</changelog>
  <changelog author="schwab@suse.de" date="1564488000">- get-poolsize.patch: Fix type mismatch in get_poolsize that breaks error
  checking (bsc#1111047)</changelog>
  <changelog author="mpluskal@suse.com" date="1590494400">- Update to version 1.9.8:
  * Fix for Unresolved symbol error_exit in libhavege #20 by pld-gitsync [Jirka Hladky]
  * order after systemd-tmpfiles-setup-dev.service (origin/pr/21) [Christian Hesse]
  * use systemd security features [Christian Hesse]
  * do not run in container [Christian Hesse]
  * do not use carriage return in line break [Christian Hesse]
  * Fixed invalid UTF-8 codes in ChangeLog [Jirka Hladky]
- Changes for version 1.9.5:
  * Added test for /dev/random symlink [Jirka Hladky]
  * Update to automake 1.16 [Jirka Hladky]
  * Fix segv at start [Andrew]
  * Fixed built issue on Cygwin [jbaker6953]
  * Fix segfault on arm machines (origin/pr/7) [Natanael Copa]
  * init.d/Makefile.am - add missing dependency [Jackie Huang]
  * service.redhat - update PIDFile [Pierre-Jean Texier]
  * Fix type mismatch in get_poolsize [Andreas Schwab]
  * Fixup upstream changelog [Nicolas Braud-Santoni]
  * Remove support for CPUID on ia64 (origin/pr/19) [Jeremy Bobbio]
  * Output some progress during CUSUM and RANDOM EXCURSION test [Sven Hartge]
  * Diagnostics capture mode now works correctly [Ethan Rahn]
- Drop upstream patches:
  * f2193587.patch
  * get-poolsize.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1593518400">- Update to 1.9.13:
  * added support for --version [Jirka Hladky]
  * updated systemd service file [Jirka Hladky]
  * fix a memory leak in havege_destroy [Anakin Zhang]
  * updated version reported by program [Jirka Hladky]
  * fix ordering cycle with private tmp [Christian Hesse]
  * Updated systemd service file [Nicolas Braud-Santoni]
  * Bump soname [Nicolas Braud-Santoni]
  * Fix crash on shutdown in threaded mode [Sergei Trofimovich]
  * Fix compilation with --enable-threads [Lars Wendler]</changelog>
  <changelog author="info@paolostivanin.com" date="1609761600">- Update to 1.9.14:
  * made enttest configurable
  * havegecmd.c - new command added to close the communication socket
- Drop haveged-conditional-enttest.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1633953600">- Improvements on the linux kernel random subsystem have made
  the haveged service/daemon obsolete, remove the service files,
  initrd modules and udev rules, the other components
  are still useful.</changelog>
  <changelog author="meissner@suse.com" date="1635854400">- revert last change, e.g. for VMs where we are not being fed entropy
  from the host or similar setups.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- Synchronize haveged instances during switching root (bsc#1203079)
  * Add haveged-switch-root.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1698408000">- Remove haveged-switch-root.service because it's implemented incorrectly and
  neither upstream don't know how to fix it (#77). On the other hand, without
  this service haveged will be started from scratch after switch root so it's
  hopefully no big deal. Also remove patch for bsc#1203079 as it's considered
  as a security threat because of creating fixed name file in world-writable
  directory. [jsc#PED-6184, bsc#1206699]
  * Remove
  - haveged-switch-root.service
  - haveged-switch-root.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765195200">- Fix for bsc#1222296 and bsc#1165294.
- Remove haveged-switch-root.service.
- Add haveged-once.service.
- Add patch files introducing the '--once' flag.
  * introduce-once-1.patch
  * introduce-once-2.patch</changelog>
</package>
<package pkgid="4b3b30a71cbc6a89260e3e1c1d8f486fd7fa6898fca6221e05f606c4d315ad70" name="haveged-devel" arch="x86_64">
  <version epoch="0" ver="1.9.14" rel="150600.11.6.1"/>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix missing dependency on coreutils for initrd macros (boo#958562)</changelog>
  <changelog author="psimons@suse.com" date="1466164800">- Add haveged-no-syslog.patch to remedy the potential for deadlocks
  when booting the system: journald reads from /dev/random, which
  receives entropy from haveged, which in turn logs to syslog
  before providing any. Ideally, haveged would provide a proper
  command-line flag to disable use of syslog. Will work with
  upstream to resolve this in a cleaner way. (bnc#959237)
- Remove "After=systemd-random-seed.service" from systemd service
  file to avoid the potential for deadlocks when booting the
  system: systemd-random-seed needs /var to read its previous
  state; mounting /var needs journald; journald needs entropy; and
  entropy is provided by haveged, which needs systemd-random-seed.
  (bnc#959237)</changelog>
  <changelog author="jengelh@inai.de" date="1466337600">- reset rpm groups</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- update to 1.9.2
  * Cross compile fixes
  * Limit watermark max to less than pool size to avoid 100% cpu
    condition
  * Add service.suse init script
- drop fix-enforced-clock-gettime.patch (fixed upstream)
- cleanup with spec-cleaner</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="werner@suse.de" date="1530100800">- Make haveged survive switch root within initrd  (boo#1075359)
  added change-sysroot.patch
  haveged-switch-root.service</changelog>
  <changelog author="werner@suse.de" date="1530532800">- Add patch change-sysroot.patch to
  move forward to socket communication within private network
- Add haveged-switch-root.service which send the new root location
  to running haveged process</changelog>
  <changelog author="mpluskal@suse.com" date="1536667200">- Update to version 1.9.4:
  * Avoid misleading message if cmd socket is in use
  * Implements a command mode and use it for chroot
- Drop upstreamed patches:
  * change-sysroot.patch
- Update project and download url's</changelog>
  <changelog author="jengelh@inai.de" date="1536667201">- Use noun phrase for summary. Grammar fixes to description.</changelog>
  <changelog author="werner@suse.de" date="1537358400">- Add patch f2193587.patch from github pull request (bsc#1134351)
  * Fix segfault on arm machines which do not eport the cache size
    or say it is -1 in sysfs
- Refresh patches</changelog>
  <changelog author="schwab@suse.de" date="1564488000">- get-poolsize.patch: Fix type mismatch in get_poolsize that breaks error
  checking (bsc#1111047)</changelog>
  <changelog author="mpluskal@suse.com" date="1590494400">- Update to version 1.9.8:
  * Fix for Unresolved symbol error_exit in libhavege #20 by pld-gitsync [Jirka Hladky]
  * order after systemd-tmpfiles-setup-dev.service (origin/pr/21) [Christian Hesse]
  * use systemd security features [Christian Hesse]
  * do not run in container [Christian Hesse]
  * do not use carriage return in line break [Christian Hesse]
  * Fixed invalid UTF-8 codes in ChangeLog [Jirka Hladky]
- Changes for version 1.9.5:
  * Added test for /dev/random symlink [Jirka Hladky]
  * Update to automake 1.16 [Jirka Hladky]
  * Fix segv at start [Andrew]
  * Fixed built issue on Cygwin [jbaker6953]
  * Fix segfault on arm machines (origin/pr/7) [Natanael Copa]
  * init.d/Makefile.am - add missing dependency [Jackie Huang]
  * service.redhat - update PIDFile [Pierre-Jean Texier]
  * Fix type mismatch in get_poolsize [Andreas Schwab]
  * Fixup upstream changelog [Nicolas Braud-Santoni]
  * Remove support for CPUID on ia64 (origin/pr/19) [Jeremy Bobbio]
  * Output some progress during CUSUM and RANDOM EXCURSION test [Sven Hartge]
  * Diagnostics capture mode now works correctly [Ethan Rahn]
- Drop upstream patches:
  * f2193587.patch
  * get-poolsize.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1593518400">- Update to 1.9.13:
  * added support for --version [Jirka Hladky]
  * updated systemd service file [Jirka Hladky]
  * fix a memory leak in havege_destroy [Anakin Zhang]
  * updated version reported by program [Jirka Hladky]
  * fix ordering cycle with private tmp [Christian Hesse]
  * Updated systemd service file [Nicolas Braud-Santoni]
  * Bump soname [Nicolas Braud-Santoni]
  * Fix crash on shutdown in threaded mode [Sergei Trofimovich]
  * Fix compilation with --enable-threads [Lars Wendler]</changelog>
  <changelog author="info@paolostivanin.com" date="1609761600">- Update to 1.9.14:
  * made enttest configurable
  * havegecmd.c - new command added to close the communication socket
- Drop haveged-conditional-enttest.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1633953600">- Improvements on the linux kernel random subsystem have made
  the haveged service/daemon obsolete, remove the service files,
  initrd modules and udev rules, the other components
  are still useful.</changelog>
  <changelog author="meissner@suse.com" date="1635854400">- revert last change, e.g. for VMs where we are not being fed entropy
  from the host or similar setups.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- Synchronize haveged instances during switching root (bsc#1203079)
  * Add haveged-switch-root.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1698408000">- Remove haveged-switch-root.service because it's implemented incorrectly and
  neither upstream don't know how to fix it (#77). On the other hand, without
  this service haveged will be started from scratch after switch root so it's
  hopefully no big deal. Also remove patch for bsc#1203079 as it's considered
  as a security threat because of creating fixed name file in world-writable
  directory. [jsc#PED-6184, bsc#1206699]
  * Remove
  - haveged-switch-root.service
  - haveged-switch-root.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765195200">- Fix for bsc#1222296 and bsc#1165294.
- Remove haveged-switch-root.service.
- Add haveged-once.service.
- Add patch files introducing the '--once' flag.
  * introduce-once-1.patch
  * introduce-once-2.patch</changelog>
  <changelog author="dmueller@suse.com" date="1778587200">- add CVE-2026-41054.patch (bsc#1264086, CVE-2026-41054)</changelog>
</package>
<package pkgid="241f7e8c9af693643ede6534ddbc5ba496cfea714a85204a179d8194fc7e44ac" name="hdparm" arch="src">
  <version epoch="0" ver="9.62" rel="150400.3.5.2"/>
  <changelog author="rschweikert@suse.com" date="1329566400">- fix license warning, set to SUSE-Permissive</changelog>
  <changelog author="puzel@suse.com" date="1349092800">- update to hdparm-9.42
  - fix ordering of -S -y flags
  - spelling, typo, and formatting fixes for manpage and others
  - set block-count to 1 for Security commands sent via SAT (sgio)
  - use FIGETBSZ to determine filesystem block size for fibmap -- needed for FAT
  - fix master password revcode handling
  - try and fix reg_flags (again!) for old IDE taskfile ioctls
  - fixed '&amp;&amp;' bug in dco_identify code
  - force sector dumps (read-sector, identify, ..) to use le16 output format
  - proper SCT identify info courtesy of Leonid Evdokimov &lt;leon@darkk.net.ru&gt;
  - updated raid1ext4trim.sh-1.5 script
  - avoid HDIO_GETGEO_BIG when possible (doesn't exist in
    linux-2.6.xx and beyond)
  - pad secure erase timeouts by 30minutes rather than 5minutes.</changelog>
  <changelog author="puzel@suse.com" date="1353067200">- update to hdparm-9.43
  - rearrange flag execution so that the idle/standby/sleep "now"
    flags are executed last.</changelog>
  <changelog author="dimstar@opensuse.org" date="1354017600">- Add pkgconfig(udev) BuildRequires: needed in order to dynamically
  extract the right folder for udev rules and scripts.
- Copy the udev rules to %{_udevdir}, identified based on udev.pc.
- Add pkgconfig BuildRequires: needed, as we otherwise end up not
  having pkg-config in the build root, which we rely on to read
  the .pc file.</changelog>
  <changelog author="p.drouand@gmail.com" date="1405771200">- Remove insserv dependency; the package doesn't contain any init
  script</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1411128000">- Fix udev rules, broken script location, scriptlets
  macro usages..</changelog>
  <changelog author="ledest@gmail.com" date="1416225600">- fix bashisms in ultrabayd and udev.idedma.sh scripts
- add patches:
  * hdparm-9.43-fix-bashisms.patch</changelog>
  <changelog author="jengelh@inai.de" date="1418040000">- Use preferred download URL; replace only rpm shell vars with
  macros to go in line with the rest.</changelog>
  <changelog author="p.drouand@gmail.com" date="1421496000">- Update to version 9.45
  * fixed blocksize handling in fibmap code to use result from
    FIGETBSZ in more places
  * fixed divide by zero exception in geom.c
  * tidying up formatting in sgio.c</changelog>
  <changelog author="kstreitova@suse.com" date="1434974400">- update to version 9.48
  * 9.48 - fixed a number of output bugs due to the devslp patch
  * 9.47 - added devslp patch (IDENTIFY word 76) from David Woodhouse.
  - help and manpage fixes from Michal Minar.
  * 9.46 - fix compilation with "musl libc".
  - added "hex:aabbcc.." for binary security passwords.
  - return EIO when read_big_block() fails
  - use llabs() rather than abs() in identify.c
- use spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1470312000">- remove 56-idedma.rules and idedma.sh as none of these scripts
  have any function whatsoever. They rely on the obsolete IDE
  drivers [bsc#991898]
- remove /etc/sysconfig/ide file [bsc#922659]</changelog>
  <changelog author="kstreitova@suse.com" date="1513166400">- update to version 9.52
  * 9.52 - add support for Jmicron USB-SATA bridges
  * 9.51 - New --security-prompt-for-password flag for use with the
    various --security- actions
  - Makefile tweak
  - fix spelling/typos in man page and "removable"
  - fix spelling/typos in --sanitize-crypto-scramble
  - fix NULL password handling in --security-unlock
  * 9.50 - minor fixes for sanitize device stuff
  * 9.49 - add ACS-3 overprovisioning support
  - fix bug in display of security section and use updated
    erase-time values from ACS-3
  - increase timeout on fwdownload to 2 minutes
  - fix bugs from devslp patch
- run spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1524225600">- update to version 9.56
  * 9.56 - fixed byte order for --Istdout so that --Istdin can
    grok it
  - added --Iraw for raw binary output of IDENTIFY data
    to a file
  * 9.55 - added #include &lt;sys/sysmacros.h&gt; for major()/minor()
    macros
  * 9.54 - Partial revert of Jmicron changes, from Jan Friesse.
  * 9.53 - Read Drive Capacity fixes from Iestyn Walters.
  - SET MAX ADDRESS fixes from Tom Yan &lt;tom.ty89@gmail.com&gt;
  - added --security-prompt-for-password to --security-help
    output
  - fwdownload changes from Jihoon Lee.</changelog>
  <changelog author="mvetter@suse.com" date="1539864000">- Update to 9.57:
  * Added --set-sector-size flag, used to change logical sector
    size for drives which support multiple sector sizes.
  * Also updated various bits of hdparm to better cope with
    non-512 byte sectors.
  * Various other minor fixes/enhancements.
- Update hdparm-leak-fix.patch</changelog>
  <changelog author="josua.mayer97@gmail.com" date="1549800000">- Update to 9.58
  * fix segfault with -I onr non-ATA drives.</changelog>
  <changelog author="lnussel@suse.de" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 9.60:
  - support for ioSafe Solo with jMicron bridge, courtesy Matthias-Christian Ott.
  - decode more bits from id[69], courtesy Adrián Kálazi.
  - allow passing of custom LDFLAGS from the environment.
  - add new "static" target.
  - fix --dco-identify max sectors, courtesy of Paul Sultana.
  - get rid of leftover "unknown" variables from identify.c
  - fixed return values from get_log_page_data().</changelog>
  <changelog author="info@paolostivanin.com" date="1619524800">- update to 9.61:
  - fixes for --set-sector-size and reporting of physical/logical sector sizes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620648000">- update to 9.62:
  * work around unexpected sign-extending of left-shifted unsigned
    values by gcc</changelog>
  <changelog author="pgajdos@suse.com" date="1760702400">- package LICENSE.TXT [bsc#1252151]</changelog>
</package>
<package pkgid="c7613e575ad47d614efe785580274deed80d7a6b27d8076d17ed8fa6d6ceca1c" name="hdparm" arch="x86_64">
  <version epoch="0" ver="9.62" rel="150400.3.5.2"/>
  <changelog author="ledest@gmail.com" date="1416225600">- fix bashisms in ultrabayd and udev.idedma.sh scripts
- add patches:
  * hdparm-9.43-fix-bashisms.patch</changelog>
  <changelog author="jengelh@inai.de" date="1418040000">- Use preferred download URL; replace only rpm shell vars with
  macros to go in line with the rest.</changelog>
  <changelog author="p.drouand@gmail.com" date="1421496000">- Update to version 9.45
  * fixed blocksize handling in fibmap code to use result from
    FIGETBSZ in more places
  * fixed divide by zero exception in geom.c
  * tidying up formatting in sgio.c</changelog>
  <changelog author="kstreitova@suse.com" date="1434974400">- update to version 9.48
  * 9.48 - fixed a number of output bugs due to the devslp patch
  * 9.47 - added devslp patch (IDENTIFY word 76) from David Woodhouse.
  - help and manpage fixes from Michal Minar.
  * 9.46 - fix compilation with "musl libc".
  - added "hex:aabbcc.." for binary security passwords.
  - return EIO when read_big_block() fails
  - use llabs() rather than abs() in identify.c
- use spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1470312000">- remove 56-idedma.rules and idedma.sh as none of these scripts
  have any function whatsoever. They rely on the obsolete IDE
  drivers [bsc#991898]
- remove /etc/sysconfig/ide file [bsc#922659]</changelog>
  <changelog author="kstreitova@suse.com" date="1513166400">- update to version 9.52
  * 9.52 - add support for Jmicron USB-SATA bridges
  * 9.51 - New --security-prompt-for-password flag for use with the
    various --security- actions
  - Makefile tweak
  - fix spelling/typos in man page and "removable"
  - fix spelling/typos in --sanitize-crypto-scramble
  - fix NULL password handling in --security-unlock
  * 9.50 - minor fixes for sanitize device stuff
  * 9.49 - add ACS-3 overprovisioning support
  - fix bug in display of security section and use updated
    erase-time values from ACS-3
  - increase timeout on fwdownload to 2 minutes
  - fix bugs from devslp patch
- run spec-cleaner</changelog>
  <changelog author="kstreitova@suse.com" date="1524225600">- update to version 9.56
  * 9.56 - fixed byte order for --Istdout so that --Istdin can
    grok it
  - added --Iraw for raw binary output of IDENTIFY data
    to a file
  * 9.55 - added #include &lt;sys/sysmacros.h&gt; for major()/minor()
    macros
  * 9.54 - Partial revert of Jmicron changes, from Jan Friesse.
  * 9.53 - Read Drive Capacity fixes from Iestyn Walters.
  - SET MAX ADDRESS fixes from Tom Yan &lt;tom.ty89@gmail.com&gt;
  - added --security-prompt-for-password to --security-help
    output
  - fwdownload changes from Jihoon Lee.</changelog>
  <changelog author="mvetter@suse.com" date="1539864000">- Update to 9.57:
  * Added --set-sector-size flag, used to change logical sector
    size for drives which support multiple sector sizes.
  * Also updated various bits of hdparm to better cope with
    non-512 byte sectors.
  * Various other minor fixes/enhancements.
- Update hdparm-leak-fix.patch</changelog>
  <changelog author="josua.mayer97@gmail.com" date="1549800000">- Update to 9.58
  * fix segfault with -I onr non-ATA drives.</changelog>
  <changelog author="lnussel@suse.de" date="1606392000">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 9.60:
  - support for ioSafe Solo with jMicron bridge, courtesy Matthias-Christian Ott.
  - decode more bits from id[69], courtesy Adrián Kálazi.
  - allow passing of custom LDFLAGS from the environment.
  - add new "static" target.
  - fix --dco-identify max sectors, courtesy of Paul Sultana.
  - get rid of leftover "unknown" variables from identify.c
  - fixed return values from get_log_page_data().</changelog>
  <changelog author="info@paolostivanin.com" date="1619524800">- update to 9.61:
  - fixes for --set-sector-size and reporting of physical/logical sector sizes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620648000">- update to 9.62:
  * work around unexpected sign-extending of left-shifted unsigned
    values by gcc</changelog>
  <changelog author="pgajdos@suse.com" date="1760702400">- package LICENSE.TXT [bsc#1252151]</changelog>
</package>
<package pkgid="84110c08e9aa331fcbd490208717c7d935f39e6e18162e88cc7463efd241e63d" name="himmelblau" arch="src">
  <version epoch="0" ver="0.7.17+git.0.1ebdab0" rel="150700.3.3.2"/>
  <changelog author="david.mulder@suse.com" date="1715342400">- Himmelblau requires libopenssl-3 for PRT messages.</changelog>
  <changelog author="david.mulder@suse.com" date="1715774400">- Update to version 0.3.4+git.0.01d099f:
  * Version 0.3.4
  * Only remove cached user if it doesn't exist
  * Use existing user token at refresh
  * Always use the spn of the user for nss requests
  * Generate a fake user token to please SSH
  * Fix aad-tool to handle MFA
  * Fix lib_crypto version
  * Fix user dropping from NSS</changelog>
  <changelog author="david.mulder@suse.com" date="1716206400">- Update to version 0.4.0+git.0.69b64fe:
  * Add github workflows for the 0.4.x branch
  * Do not append to pam_allow_groups automatically
  * Pam Allow Groups must be specified by Object ID
  * Request the correct resource and permissions
  * Improve error output on group lookup failure
  * When faking a uuid for NSS, use a random uuid
  * Fix clippy warning about inefficient use of clone()
  * Remove the initial uid hack, use name mapping
  * Don't stop an MR based on a clippy warning
  * Update Kanidm tracking
  * Modify CI workflows to handle idmap build
  * Add CI job for cargo test
  * Test the new and legacy idmapping
  * Ensure duplicate providers are not started
  * Use the SSSD Idmap code in Himmelblau
  * Specify in conf that pam_allow_groups is required
  * Remove code duplication in Hello PIN auth
  * Fix Device authentication failed after enrollment
  * Update the base64urlsafedata version
  * Update README.md with Matrix contact info
  * Version 0.4.0</changelog>
  <changelog author="david.mulder@suse.com" date="1716379200">- Update to version 0.4.0+git.2.7b57f5e:
  * Always normalize idmap upn inputs</changelog>
  <changelog author="david.mulder@suse.com" date="1716379201">- Update to version 0.4.0+git.4.63e3704:
  * Fix a refresh token leak in debug from msal</changelog>
  <changelog author="david.mulder@suse.com" date="1716984000">- Update to version 0.4.1+git.0.41dd0dc:
  * Version 0.4.1
  * Use latest msal with MFA fixes
  * PhoneAppNotification is not a cred request algorithm
  * The polling_interval is in milliseconds, not seconds
  * OneWaySMS is additionally a valid OTP
  * Relicensing as GPL3, as SSSD source inclusion requires</changelog>
  <changelog author="david.mulder@suse.com" date="1721044800">- Update to version 0.4.3+git.2.6379abc:
  * Specifically use msal 0.2.6
  * Version 0.4.3
  * update libnss requirement from 0.7.0 to 0.8.0
  * himmelblaud stops working after suspend
  * Version 0.4.2
  * Fix ConsolidatedTelephony MFA method</changelog>
  <changelog author="david.mulder@suse.com" date="1725451200">- Update to version 0.5.0+git.0.22f84f0:
  * Update workflows for 0.5.x
  * Update Debian dependencies in README.md
  * Compilation fails on Ubuntu, missing ldb header
  * Fix base32 with kandim updates
  * deps(rust): update base32 requirement from ^0.4.0 to ^0.5.0
  * deps(rust): update scim_proto requirement from ^0.2.1 to ^1.3.2
  * deps(rust): update bindgen requirement from 0.69.4 to 0.70.1
  * Fix CI failures caused by cargo 1.80.1
  * Update to libhimmelblau version 0.2.9
  * deps(rust): update rusqlite requirement from ^0.31.0 to ^0.32.0
  * deps(rust): update tonic requirement from 0.11.0 to 0.12.0
  * update libnss requirement from 0.7.0 to 0.8.0
  * Switch to using libhimmelblau
  * himmelblaud stops working after suspend
  * Update required packages for tumbleweed
  * Disable the SFA fallback by default
  * Fix ConsolidatedTelephony MFA method
  * Use the group ID for the name if no display name
  * Use latest msal with MFA fixes
  * PhoneAppNotification is not a cred request algorithm
  * The polling_interval is in milliseconds, not seconds
  * OneWaySMS is additionally a valid OTP
  * Relicensing as GPL3, as SSSD source inclusion requires
  * Utilize the graph code in msal
  * config: Remove comments about experimental policy enforement
  * Remove the experimental policy code from the id provider
  * Fix a refresh token leak in debug from msal
  * Correct README details
  * Always normalize idmap upn inputs
  * Add video links to the README
  * Minor updates to the Contributing section
  * Add a Installation section to the README
  * Add the new SSSD idmap build deps to the README
  * Add a section about donations
  * Include the Samba Technical matrix channel
  * Add github workflows for the 0.4.x branch
  * Version 0.5.0 bump for main</changelog>
  <changelog author="william.brown@suse.com" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="david.mulder@suse.com" date="1727870400">- Update to version 0.6.0+git.0.b8dae18:
  * Attempt to fix the cargo version in launchpad build
  * Add branch stable-0.6.x to the workflows
  * Install the pam module to the proper location
  * Update README.md
  * Add a debug option to the config
  * Add a pam option for the OpenSSH 2876 workaround
  * Update to the latest libhimmelblau
  * Authorize all users when pam_allow_groups is empty
  * Fix clippy warnings
  * Fix pam echo not displayed via ssh
  * Fix pam failure to register Pin following mfa poll
  * Fork from kanidm
  * Version 0.6.0
  * Add cargo deb build
  * Version 0.5.3
  * Improve the README installation instructions
  * Add `make install` command
  * Improve Debian/Ubuntu install instructions
  * Fix tag push permissions for tag-version workflow
  * Version 0.5.2
  * Add a version check script
  * Version 0.5.1
  * Remove the rustc dependency, breaking rustup
  * Added Debian packaging workflow and files</changelog>
  <changelog author="david.mulder@suse.com" date="1729598400">- Update to version 0.6.14+git.0.bbda0b6:
  * Version 0.6.14
  * postinst should not fail on patch or apparmor update
  * Version 0.6.13
  * Don't use sudo in postinst/postrm scripts for deb
  * Version 0.6.12
  * PAM should be placed first in the stack
  * Match the object ID of the fake user and group
  * Version 0.6.11
  * Move sshd config into it's own debian package
  * Version 0.6.10
  * Allow the graph to start w/out network
  * Add hello_pin_min_length conf option
  * Version 0.6.9
  * Don't attempt SFA fallback if AADSTSError
  * Have libhimmelblau handle the DAG fallback
  * Add a warning to user that SSH needs restarted
  * Version 0.6.8
  * Ensure local users are ignored when CN mapping
  * Ensure DAG is rejected if lifetime expires
  * Version 0.6.7
  * Rework the poll logic to resolve timeout issues
  * Version 0.6.6
  * Add a sshd soft depends for the deb package
  * CN name mapping in PAM and NSS
  * Version 0.6.5
  * Make CN an optional home directory attribute
  * Version 0.6.4
  * Add Ubuntu pam-config for pam_himmelblau
  * Configuration patches for himmelblau on Debian
  * Version 0.6.3
  * Bug in pam which needs defended against
  * Version 0.6.2
  * Never return the Pam result from get_user()
  * Correct installation directory of the deb pam module
  * Makefile typo fixes
  * Add libdbus-1-dev dep
  * Version 0.6.1
  * Debian build requires libdbus-1-dev</changelog>
  <changelog author="david.mulder@suse.com" date="1732536000">- Update to version 0.7.2+git.0.c76ac0e:
  * Version 0.7.2
  * Hello support depends on openssl3
  * Version 0.7.1
  * Fix sshd rpm depends
  * Resolve RPM dependencies automatically
  * Revert "deps(rust): update notify-debouncer-full requirement from 0.3 to 0.4"
  * Add openSUSE Tumbleweed packaging
  * Fix RPM packaging placement of systemd files
  * Remove the failed attempt at debian packaging
  * Add stable-0.7.x to CI workflows
  * deps(rust): update utoipa requirement from 4.0.0 to 4.2.0
  * deps(rust): update hashbrown requirement from 0.14.0 to 0.15.1
  * Remove missing feature causing warnings
  * deps(rust): update notify-debouncer-full requirement from 0.3 to 0.4
  * Specify scopes when making an SSO request
  * Implement logon script for ensuring compliance
  * Option for adding Entra Id users to local groups
  * Configure EL sshd with ChallengeResponseAuthentication yes
  * Add rocky 8 packaging
  * Add RPM packaging for EL9
  * Modify Ubuntu defaults to fix snaps
  * Resolve Libreoffice fails to start on Ubuntu
  * Minor formatting fix
  * Revert RwLock -&gt; Arc&lt;Mutex&gt; change in idmap
  * Ignore broker scopes requests for now
  * Ensure every file specifies the proper license
  * postinst should not fail on patch or apparmor update
  * Install pam module to additional location via make
  * Add sshd config to the Makefile
  * Don't use sudo in postinst/postrm scripts for deb
  * PAM should be placed first in the stack
  * Add the libutf8proc-dev dep for deb
  * Match the object ID of the fake user and group
  * Make it possible to stop the broker service
  * Move sshd config into it's own debian package
  * Allow the graph to start w/out network
  * Add hello_pin_min_length conf option
  * Don't attempt SFA fallback if AADSTSError
  * Have libhimmelblau handle the DAG fallback
  * Add a warning to user that SSH needs restarted
  * Ensure local users are ignored when CN mapping
  * Ensure DAG is rejected if lifetime expires
  * Rework the poll logic to resolve timeout issues
  * Add a sshd soft depends for the deb package
  * CN name mapping in PAM and NSS
  * Make CN an optional home directory attribute
  * Remove the sssd build dependencies
  * Configuration patches for himmelblau on Debian
  * Simplify PAM get_item_string calls
  * Bug in pam which needs defended against
  * Fix deb build by adding Broker service file
  * WIP: Install Ubuntu unix-chkpwd apparmor deps
  * Ensure make install places pam_himmelblau correctly
  * Add Ubuntu pam-config for pam_himmelblau
  * Never return Err(PAM_SUCCESS) from get_user
  * Never return the Pam result from get_user()
  * Revert "Speed up nss requests w/out auth attempt"
  * Speed up nss requests w/out auth attempt
  * Fix some broker responses
  * Fixes for the dbus broker
  * Attempt to fix the cargo version in launchpad build
  * Makefile typo fixes
  * Version 0.7.0
  * Add libdbus-1-dev dep
  * Improve the README installation instructions
  * Add `make install` command
  * Improve Debian/Ubuntu install instructions
  * Fix tag push permissions for tag-version workflow
  * Add a version check script
  * Remove the rustc dependency, breaking rustup
  * Add a debug option to the config
  * DBus requires that the service file match the name
  * Add a pam option for the OpenSSH 2876 workaround
  * Update to the latest libhimmelblau</changelog>
  <changelog author="david.mulder@suse.com" date="1732536001">- Update to version 0.7.4+git.0.d1291c6:
  * Version 0.7.4
  * Fix missing dependency utf8proc_NFKC_Casefold
  * Package Siemens Linux Entra SSO for Himmelblau
  * Add SLE15SP6 packaging
  * Add Fedora 41 packaging
  * Add Fedora Rawhide packaging
  * The tasks daemon needs /etc/groups write access
  * Version 0.7.3
  * Increase the cache timeout to 5 minutes
  * Always fetch and cache the graph url</changelog>
  <changelog author="david.mulder@suse.com" date="1732536002">- Update to version 0.7.5+git.0.8f421b0:
  * Version 0.7.5
  * Remove the org.samba.himmelblau dbus service</changelog>
  <changelog author="david.mulder@suse.com" date="1733140800">- Update to version 0.7.7+git.0.b48d0bb:
  * Version 0.7.7
  * Fix CVE-2024-11738: rustls network-reachable panic in `Acceptor::accept`
    (bsc#1233949).
  * Version 0.7.6
  * Enable module for utf8proc-devel in Rocky8</changelog>
  <changelog author="david.mulder@suse.com" date="1733400000">- Update to version 0.7.9+git.0.93655d2:
  * Version 0.7.9
  * Update to the latest libhimmelblau
  * Version 0.7.8
  * Add a himmelblau.conf man page, and package the man pages
  * Add DAG flow as a fallback for MFA</changelog>
  <changelog author="david.mulder@suse.com" date="1734004800">- Update to version 0.7.13+git.0.d790d31:
  * Version 0.7.13
  * Fix Fedora build dependencies
  * Version 0.7.12
  * Add Debian 12 packaging
  * Update github CI dependencies
  * Version 0.7.11
  * Implement Hello Pin changes via PAM; (jira#PED-11682).
  * Utilize HimmelblauConfig directly in pam and nss
  * Version 0.7.10
  * Add config parsing unit tests
  * Fix incorrect default domain
  * Fix config hsm type Tpm error
  * Include multi-domain important info in himmelblau.conf man</changelog>
  <changelog author="david.mulder@suse.com" date="1737979200">- Update to version 0.7.15+git.0.7a70a0b:
  * Version 0.7.15
  * Fix Credentials leaking in the debug log; (bsc#1236354).
  * Version 0.7.14
  * Update libhimmelblau version
  * Custom domains matching</changelog>
  <changelog author="david.mulder@suse.com" date="1746532800">- Update to version 0.7.16+git.0.f6e7faf:
  * Version 0.7.16
  * Fix CI failure caused by package revision
  * Update sccache-action version to use new cache service
  * CVE-2025-3416: Fix openssl Use After Free; (bsc#1242648).</changelog>
  <changelog author="david.mulder@suse.com" date="1750161600">- Update to version 0.7.17+git.0.1ebdab0:
  * CVE-2025-5791: Stop using deprecated `users` crate; (bsc#1244202).</changelog>
</package>
<package pkgid="e4b4d0df06afe91fa150a5e45ff29833dcad2e77d5cd4703cb988049ff4f8c37" name="himmelblau" arch="x86_64">
  <version epoch="0" ver="0.7.17+git.0.1ebdab0" rel="150700.3.3.2"/>
  <changelog author="david.mulder@suse.com" date="1715342400">- Himmelblau requires libopenssl-3 for PRT messages.</changelog>
  <changelog author="david.mulder@suse.com" date="1715774400">- Update to version 0.3.4+git.0.01d099f:
  * Version 0.3.4
  * Only remove cached user if it doesn't exist
  * Use existing user token at refresh
  * Always use the spn of the user for nss requests
  * Generate a fake user token to please SSH
  * Fix aad-tool to handle MFA
  * Fix lib_crypto version
  * Fix user dropping from NSS</changelog>
  <changelog author="david.mulder@suse.com" date="1716206400">- Update to version 0.4.0+git.0.69b64fe:
  * Add github workflows for the 0.4.x branch
  * Do not append to pam_allow_groups automatically
  * Pam Allow Groups must be specified by Object ID
  * Request the correct resource and permissions
  * Improve error output on group lookup failure
  * When faking a uuid for NSS, use a random uuid
  * Fix clippy warning about inefficient use of clone()
  * Remove the initial uid hack, use name mapping
  * Don't stop an MR based on a clippy warning
  * Update Kanidm tracking
  * Modify CI workflows to handle idmap build
  * Add CI job for cargo test
  * Test the new and legacy idmapping
  * Ensure duplicate providers are not started
  * Use the SSSD Idmap code in Himmelblau
  * Specify in conf that pam_allow_groups is required
  * Remove code duplication in Hello PIN auth
  * Fix Device authentication failed after enrollment
  * Update the base64urlsafedata version
  * Update README.md with Matrix contact info
  * Version 0.4.0</changelog>
  <changelog author="david.mulder@suse.com" date="1716379200">- Update to version 0.4.0+git.2.7b57f5e:
  * Always normalize idmap upn inputs</changelog>
  <changelog author="david.mulder@suse.com" date="1716379201">- Update to version 0.4.0+git.4.63e3704:
  * Fix a refresh token leak in debug from msal</changelog>
  <changelog author="david.mulder@suse.com" date="1716984000">- Update to version 0.4.1+git.0.41dd0dc:
  * Version 0.4.1
  * Use latest msal with MFA fixes
  * PhoneAppNotification is not a cred request algorithm
  * The polling_interval is in milliseconds, not seconds
  * OneWaySMS is additionally a valid OTP
  * Relicensing as GPL3, as SSSD source inclusion requires</changelog>
  <changelog author="david.mulder@suse.com" date="1721044800">- Update to version 0.4.3+git.2.6379abc:
  * Specifically use msal 0.2.6
  * Version 0.4.3
  * update libnss requirement from 0.7.0 to 0.8.0
  * himmelblaud stops working after suspend
  * Version 0.4.2
  * Fix ConsolidatedTelephony MFA method</changelog>
  <changelog author="david.mulder@suse.com" date="1725451200">- Update to version 0.5.0+git.0.22f84f0:
  * Update workflows for 0.5.x
  * Update Debian dependencies in README.md
  * Compilation fails on Ubuntu, missing ldb header
  * Fix base32 with kandim updates
  * deps(rust): update base32 requirement from ^0.4.0 to ^0.5.0
  * deps(rust): update scim_proto requirement from ^0.2.1 to ^1.3.2
  * deps(rust): update bindgen requirement from 0.69.4 to 0.70.1
  * Fix CI failures caused by cargo 1.80.1
  * Update to libhimmelblau version 0.2.9
  * deps(rust): update rusqlite requirement from ^0.31.0 to ^0.32.0
  * deps(rust): update tonic requirement from 0.11.0 to 0.12.0
  * update libnss requirement from 0.7.0 to 0.8.0
  * Switch to using libhimmelblau
  * himmelblaud stops working after suspend
  * Update required packages for tumbleweed
  * Disable the SFA fallback by default
  * Fix ConsolidatedTelephony MFA method
  * Use the group ID for the name if no display name
  * Use latest msal with MFA fixes
  * PhoneAppNotification is not a cred request algorithm
  * The polling_interval is in milliseconds, not seconds
  * OneWaySMS is additionally a valid OTP
  * Relicensing as GPL3, as SSSD source inclusion requires
  * Utilize the graph code in msal
  * config: Remove comments about experimental policy enforement
  * Remove the experimental policy code from the id provider
  * Fix a refresh token leak in debug from msal
  * Correct README details
  * Always normalize idmap upn inputs
  * Add video links to the README
  * Minor updates to the Contributing section
  * Add a Installation section to the README
  * Add the new SSSD idmap build deps to the README
  * Add a section about donations
  * Include the Samba Technical matrix channel
  * Add github workflows for the 0.4.x branch
  * Version 0.5.0 bump for main</changelog>
  <changelog author="william.brown@suse.com" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="david.mulder@suse.com" date="1727870400">- Update to version 0.6.0+git.0.b8dae18:
  * Attempt to fix the cargo version in launchpad build
  * Add branch stable-0.6.x to the workflows
  * Install the pam module to the proper location
  * Update README.md
  * Add a debug option to the config
  * Add a pam option for the OpenSSH 2876 workaround
  * Update to the latest libhimmelblau
  * Authorize all users when pam_allow_groups is empty
  * Fix clippy warnings
  * Fix pam echo not displayed via ssh
  * Fix pam failure to register Pin following mfa poll
  * Fork from kanidm
  * Version 0.6.0
  * Add cargo deb build
  * Version 0.5.3
  * Improve the README installation instructions
  * Add `make install` command
  * Improve Debian/Ubuntu install instructions
  * Fix tag push permissions for tag-version workflow
  * Version 0.5.2
  * Add a version check script
  * Version 0.5.1
  * Remove the rustc dependency, breaking rustup
  * Added Debian packaging workflow and files</changelog>
  <changelog author="david.mulder@suse.com" date="1729598400">- Update to version 0.6.14+git.0.bbda0b6:
  * Version 0.6.14
  * postinst should not fail on patch or apparmor update
  * Version 0.6.13
  * Don't use sudo in postinst/postrm scripts for deb
  * Version 0.6.12
  * PAM should be placed first in the stack
  * Match the object ID of the fake user and group
  * Version 0.6.11
  * Move sshd config into it's own debian package
  * Version 0.6.10
  * Allow the graph to start w/out network
  * Add hello_pin_min_length conf option
  * Version 0.6.9
  * Don't attempt SFA fallback if AADSTSError
  * Have libhimmelblau handle the DAG fallback
  * Add a warning to user that SSH needs restarted
  * Version 0.6.8
  * Ensure local users are ignored when CN mapping
  * Ensure DAG is rejected if lifetime expires
  * Version 0.6.7
  * Rework the poll logic to resolve timeout issues
  * Version 0.6.6
  * Add a sshd soft depends for the deb package
  * CN name mapping in PAM and NSS
  * Version 0.6.5
  * Make CN an optional home directory attribute
  * Version 0.6.4
  * Add Ubuntu pam-config for pam_himmelblau
  * Configuration patches for himmelblau on Debian
  * Version 0.6.3
  * Bug in pam which needs defended against
  * Version 0.6.2
  * Never return the Pam result from get_user()
  * Correct installation directory of the deb pam module
  * Makefile typo fixes
  * Add libdbus-1-dev dep
  * Version 0.6.1
  * Debian build requires libdbus-1-dev</changelog>
  <changelog author="david.mulder@suse.com" date="1732536000">- Update to version 0.7.2+git.0.c76ac0e:
  * Version 0.7.2
  * Hello support depends on openssl3
  * Version 0.7.1
  * Fix sshd rpm depends
  * Resolve RPM dependencies automatically
  * Revert "deps(rust): update notify-debouncer-full requirement from 0.3 to 0.4"
  * Add openSUSE Tumbleweed packaging
  * Fix RPM packaging placement of systemd files
  * Remove the failed attempt at debian packaging
  * Add stable-0.7.x to CI workflows
  * deps(rust): update utoipa requirement from 4.0.0 to 4.2.0
  * deps(rust): update hashbrown requirement from 0.14.0 to 0.15.1
  * Remove missing feature causing warnings
  * deps(rust): update notify-debouncer-full requirement from 0.3 to 0.4
  * Specify scopes when making an SSO request
  * Implement logon script for ensuring compliance
  * Option for adding Entra Id users to local groups
  * Configure EL sshd with ChallengeResponseAuthentication yes
  * Add rocky 8 packaging
  * Add RPM packaging for EL9
  * Modify Ubuntu defaults to fix snaps
  * Resolve Libreoffice fails to start on Ubuntu
  * Minor formatting fix
  * Revert RwLock -&gt; Arc&lt;Mutex&gt; change in idmap
  * Ignore broker scopes requests for now
  * Ensure every file specifies the proper license
  * postinst should not fail on patch or apparmor update
  * Install pam module to additional location via make
  * Add sshd config to the Makefile
  * Don't use sudo in postinst/postrm scripts for deb
  * PAM should be placed first in the stack
  * Add the libutf8proc-dev dep for deb
  * Match the object ID of the fake user and group
  * Make it possible to stop the broker service
  * Move sshd config into it's own debian package
  * Allow the graph to start w/out network
  * Add hello_pin_min_length conf option
  * Don't attempt SFA fallback if AADSTSError
  * Have libhimmelblau handle the DAG fallback
  * Add a warning to user that SSH needs restarted
  * Ensure local users are ignored when CN mapping
  * Ensure DAG is rejected if lifetime expires
  * Rework the poll logic to resolve timeout issues
  * Add a sshd soft depends for the deb package
  * CN name mapping in PAM and NSS
  * Make CN an optional home directory attribute
  * Remove the sssd build dependencies
  * Configuration patches for himmelblau on Debian
  * Simplify PAM get_item_string calls
  * Bug in pam which needs defended against
  * Fix deb build by adding Broker service file
  * WIP: Install Ubuntu unix-chkpwd apparmor deps
  * Ensure make install places pam_himmelblau correctly
  * Add Ubuntu pam-config for pam_himmelblau
  * Never return Err(PAM_SUCCESS) from get_user
  * Never return the Pam result from get_user()
  * Revert "Speed up nss requests w/out auth attempt"
  * Speed up nss requests w/out auth attempt
  * Fix some broker responses
  * Fixes for the dbus broker
  * Attempt to fix the cargo version in launchpad build
  * Makefile typo fixes
  * Version 0.7.0
  * Add libdbus-1-dev dep
  * Improve the README installation instructions
  * Add `make install` command
  * Improve Debian/Ubuntu install instructions
  * Fix tag push permissions for tag-version workflow
  * Add a version check script
  * Remove the rustc dependency, breaking rustup
  * Add a debug option to the config
  * DBus requires that the service file match the name
  * Add a pam option for the OpenSSH 2876 workaround
  * Update to the latest libhimmelblau</changelog>
  <changelog author="david.mulder@suse.com" date="1732536001">- Update to version 0.7.4+git.0.d1291c6:
  * Version 0.7.4
  * Fix missing dependency utf8proc_NFKC_Casefold
  * Package Siemens Linux Entra SSO for Himmelblau
  * Add SLE15SP6 packaging
  * Add Fedora 41 packaging
  * Add Fedora Rawhide packaging
  * The tasks daemon needs /etc/groups write access
  * Version 0.7.3
  * Increase the cache timeout to 5 minutes
  * Always fetch and cache the graph url</changelog>
  <changelog author="david.mulder@suse.com" date="1732536002">- Update to version 0.7.5+git.0.8f421b0:
  * Version 0.7.5
  * Remove the org.samba.himmelblau dbus service</changelog>
  <changelog author="david.mulder@suse.com" date="1733140800">- Update to version 0.7.7+git.0.b48d0bb:
  * Version 0.7.7
  * Fix CVE-2024-11738: rustls network-reachable panic in `Acceptor::accept`
    (bsc#1233949).
  * Version 0.7.6
  * Enable module for utf8proc-devel in Rocky8</changelog>
  <changelog author="david.mulder@suse.com" date="1733400000">- Update to version 0.7.9+git.0.93655d2:
  * Version 0.7.9
  * Update to the latest libhimmelblau
  * Version 0.7.8
  * Add a himmelblau.conf man page, and package the man pages
  * Add DAG flow as a fallback for MFA</changelog>
  <changelog author="david.mulder@suse.com" date="1734004800">- Update to version 0.7.13+git.0.d790d31:
  * Version 0.7.13
  * Fix Fedora build dependencies
  * Version 0.7.12
  * Add Debian 12 packaging
  * Update github CI dependencies
  * Version 0.7.11
  * Implement Hello Pin changes via PAM; (jira#PED-11682).
  * Utilize HimmelblauConfig directly in pam and nss
  * Version 0.7.10
  * Add config parsing unit tests
  * Fix incorrect default domain
  * Fix config hsm type Tpm error
  * Include multi-domain important info in himmelblau.conf man</changelog>
  <changelog author="david.mulder@suse.com" date="1737979200">- Update to version 0.7.15+git.0.7a70a0b:
  * Version 0.7.15
  * Fix Credentials leaking in the debug log; (bsc#1236354).
  * Version 0.7.14
  * Update libhimmelblau version
  * Custom domains matching</changelog>
  <changelog author="david.mulder@suse.com" date="1746532800">- Update to version 0.7.16+git.0.f6e7faf:
  * Version 0.7.16
  * Fix CI failure caused by package revision
  * Update sccache-action version to use new cache service
  * CVE-2025-3416: Fix openssl Use After Free; (bsc#1242648).</changelog>
  <changelog author="david.mulder@suse.com" date="1750161600">- Update to version 0.7.17+git.0.1ebdab0:
  * CVE-2025-5791: Stop using deprecated `users` crate; (bsc#1244202).</changelog>
</package>
<package pkgid="755fd80b8da18e7777412fb4ea2070d920281a50b06b544c4ec1289917499159" name="himmelblau" arch="src">
  <version epoch="0" ver="0.7.18+git.0.8485a75" rel="150700.3.6.1"/>
  <changelog author="david.mulder@suse.com" date="1715774400">- Update to version 0.3.4+git.0.01d099f:
  * Version 0.3.4
  * Only remove cached user if it doesn't exist
  * Use existing user token at refresh
  * Always use the spn of the user for nss requests
  * Generate a fake user token to please SSH
  * Fix aad-tool to handle MFA
  * Fix lib_crypto version
  * Fix user dropping from NSS</changelog>
  <changelog author="david.mulder@suse.com" date="1716206400">- Update to version 0.4.0+git.0.69b64fe:
  * Add github workflows for the 0.4.x branch
  * Do not append to pam_allow_groups automatically
  * Pam Allow Groups must be specified by Object ID
  * Request the correct resource and permissions
  * Improve error output on group lookup failure
  * When faking a uuid for NSS, use a random uuid
  * Fix clippy warning about inefficient use of clone()
  * Remove the initial uid hack, use name mapping
  * Don't stop an MR based on a clippy warning
  * Update Kanidm tracking
  * Modify CI workflows to handle idmap build
  * Add CI job for cargo test
  * Test the new and legacy idmapping
  * Ensure duplicate providers are not started
  * Use the SSSD Idmap code in Himmelblau
  * Specify in conf that pam_allow_groups is required
  * Remove code duplication in Hello PIN auth
  * Fix Device authentication failed after enrollment
  * Update the base64urlsafedata version
  * Update README.md with Matrix contact info
  * Version 0.4.0</changelog>
  <changelog author="david.mulder@suse.com" date="1716379200">- Update to version 0.4.0+git.2.7b57f5e:
  * Always normalize idmap upn inputs</changelog>
  <changelog author="david.mulder@suse.com" date="1716379201">- Update to version 0.4.0+git.4.63e3704:
  * Fix a refresh token leak in debug from msal</changelog>
  <changelog author="david.mulder@suse.com" date="1716984000">- Update to version 0.4.1+git.0.41dd0dc:
  * Version 0.4.1
  * Use latest msal with MFA fixes
  * PhoneAppNotification is not a cred request algorithm
  * The polling_interval is in milliseconds, not seconds
  * OneWaySMS is additionally a valid OTP
  * Relicensing as GPL3, as SSSD source inclusion requires</changelog>
  <changelog author="david.mulder@suse.com" date="1721044800">- Update to version 0.4.3+git.2.6379abc:
  * Specifically use msal 0.2.6
  * Version 0.4.3
  * update libnss requirement from 0.7.0 to 0.8.0
  * himmelblaud stops working after suspend
  * Version 0.4.2
  * Fix ConsolidatedTelephony MFA method</changelog>
  <changelog author="david.mulder@suse.com" date="1725451200">- Update to version 0.5.0+git.0.22f84f0:
  * Update workflows for 0.5.x
  * Update Debian dependencies in README.md
  * Compilation fails on Ubuntu, missing ldb header
  * Fix base32 with kandim updates
  * deps(rust): update base32 requirement from ^0.4.0 to ^0.5.0
  * deps(rust): update scim_proto requirement from ^0.2.1 to ^1.3.2
  * deps(rust): update bindgen requirement from 0.69.4 to 0.70.1
  * Fix CI failures caused by cargo 1.80.1
  * Update to libhimmelblau version 0.2.9
  * deps(rust): update rusqlite requirement from ^0.31.0 to ^0.32.0
  * deps(rust): update tonic requirement from 0.11.0 to 0.12.0
  * update libnss requirement from 0.7.0 to 0.8.0
  * Switch to using libhimmelblau
  * himmelblaud stops working after suspend
  * Update required packages for tumbleweed
  * Disable the SFA fallback by default
  * Fix ConsolidatedTelephony MFA method
  * Use the group ID for the name if no display name
  * Use latest msal with MFA fixes
  * PhoneAppNotification is not a cred request algorithm
  * The polling_interval is in milliseconds, not seconds
  * OneWaySMS is additionally a valid OTP
  * Relicensing as GPL3, as SSSD source inclusion requires
  * Utilize the graph code in msal
  * config: Remove comments about experimental policy enforement
  * Remove the experimental policy code from the id provider
  * Fix a refresh token leak in debug from msal
  * Correct README details
  * Always normalize idmap upn inputs
  * Add video links to the README
  * Minor updates to the Contributing section
  * Add a Installation section to the README
  * Add the new SSSD idmap build deps to the README
  * Add a section about donations
  * Include the Samba Technical matrix channel
  * Add github workflows for the 0.4.x branch
  * Version 0.5.0 bump for main</changelog>
  <changelog author="william.brown@suse.com" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="david.mulder@suse.com" date="1727870400">- Update to version 0.6.0+git.0.b8dae18:
  * Attempt to fix the cargo version in launchpad build
  * Add branch stable-0.6.x to the workflows
  * Install the pam module to the proper location
  * Update README.md
  * Add a debug option to the config
  * Add a pam option for the OpenSSH 2876 workaround
  * Update to the latest libhimmelblau
  * Authorize all users when pam_allow_groups is empty
  * Fix clippy warnings
  * Fix pam echo not displayed via ssh
  * Fix pam failure to register Pin following mfa poll
  * Fork from kanidm
  * Version 0.6.0
  * Add cargo deb build
  * Version 0.5.3
  * Improve the README installation instructions
  * Add `make install` command
  * Improve Debian/Ubuntu install instructions
  * Fix tag push permissions for tag-version workflow
  * Version 0.5.2
  * Add a version check script
  * Version 0.5.1
  * Remove the rustc dependency, breaking rustup
  * Added Debian packaging workflow and files</changelog>
  <changelog author="david.mulder@suse.com" date="1729598400">- Update to version 0.6.14+git.0.bbda0b6:
  * Version 0.6.14
  * postinst should not fail on patch or apparmor update
  * Version 0.6.13
  * Don't use sudo in postinst/postrm scripts for deb
  * Version 0.6.12
  * PAM should be placed first in the stack
  * Match the object ID of the fake user and group
  * Version 0.6.11
  * Move sshd config into it's own debian package
  * Version 0.6.10
  * Allow the graph to start w/out network
  * Add hello_pin_min_length conf option
  * Version 0.6.9
  * Don't attempt SFA fallback if AADSTSError
  * Have libhimmelblau handle the DAG fallback
  * Add a warning to user that SSH needs restarted
  * Version 0.6.8
  * Ensure local users are ignored when CN mapping
  * Ensure DAG is rejected if lifetime expires
  * Version 0.6.7
  * Rework the poll logic to resolve timeout issues
  * Version 0.6.6
  * Add a sshd soft depends for the deb package
  * CN name mapping in PAM and NSS
  * Version 0.6.5
  * Make CN an optional home directory attribute
  * Version 0.6.4
  * Add Ubuntu pam-config for pam_himmelblau
  * Configuration patches for himmelblau on Debian
  * Version 0.6.3
  * Bug in pam which needs defended against
  * Version 0.6.2
  * Never return the Pam result from get_user()
  * Correct installation directory of the deb pam module
  * Makefile typo fixes
  * Add libdbus-1-dev dep
  * Version 0.6.1
  * Debian build requires libdbus-1-dev</changelog>
  <changelog author="david.mulder@suse.com" date="1732536000">- Update to version 0.7.2+git.0.c76ac0e:
  * Version 0.7.2
  * Hello support depends on openssl3
  * Version 0.7.1
  * Fix sshd rpm depends
  * Resolve RPM dependencies automatically
  * Revert "deps(rust): update notify-debouncer-full requirement from 0.3 to 0.4"
  * Add openSUSE Tumbleweed packaging
  * Fix RPM packaging placement of systemd files
  * Remove the failed attempt at debian packaging
  * Add stable-0.7.x to CI workflows
  * deps(rust): update utoipa requirement from 4.0.0 to 4.2.0
  * deps(rust): update hashbrown requirement from 0.14.0 to 0.15.1
  * Remove missing feature causing warnings
  * deps(rust): update notify-debouncer-full requirement from 0.3 to 0.4
  * Specify scopes when making an SSO request
  * Implement logon script for ensuring compliance
  * Option for adding Entra Id users to local groups
  * Configure EL sshd with ChallengeResponseAuthentication yes
  * Add rocky 8 packaging
  * Add RPM packaging for EL9
  * Modify Ubuntu defaults to fix snaps
  * Resolve Libreoffice fails to start on Ubuntu
  * Minor formatting fix
  * Revert RwLock -&gt; Arc&lt;Mutex&gt; change in idmap
  * Ignore broker scopes requests for now
  * Ensure every file specifies the proper license
  * postinst should not fail on patch or apparmor update
  * Install pam module to additional location via make
  * Add sshd config to the Makefile
  * Don't use sudo in postinst/postrm scripts for deb
  * PAM should be placed first in the stack
  * Add the libutf8proc-dev dep for deb
  * Match the object ID of the fake user and group
  * Make it possible to stop the broker service
  * Move sshd config into it's own debian package
  * Allow the graph to start w/out network
  * Add hello_pin_min_length conf option
  * Don't attempt SFA fallback if AADSTSError
  * Have libhimmelblau handle the DAG fallback
  * Add a warning to user that SSH needs restarted
  * Ensure local users are ignored when CN mapping
  * Ensure DAG is rejected if lifetime expires
  * Rework the poll logic to resolve timeout issues
  * Add a sshd soft depends for the deb package
  * CN name mapping in PAM and NSS
  * Make CN an optional home directory attribute
  * Remove the sssd build dependencies
  * Configuration patches for himmelblau on Debian
  * Simplify PAM get_item_string calls
  * Bug in pam which needs defended against
  * Fix deb build by adding Broker service file
  * WIP: Install Ubuntu unix-chkpwd apparmor deps
  * Ensure make install places pam_himmelblau correctly
  * Add Ubuntu pam-config for pam_himmelblau
  * Never return Err(PAM_SUCCESS) from get_user
  * Never return the Pam result from get_user()
  * Revert "Speed up nss requests w/out auth attempt"
  * Speed up nss requests w/out auth attempt
  * Fix some broker responses
  * Fixes for the dbus broker
  * Attempt to fix the cargo version in launchpad build
  * Makefile typo fixes
  * Version 0.7.0
  * Add libdbus-1-dev dep
  * Improve the README installation instructions
  * Add `make install` command
  * Improve Debian/Ubuntu install instructions
  * Fix tag push permissions for tag-version workflow
  * Add a version check script
  * Remove the rustc dependency, breaking rustup
  * Add a debug option to the config
  * DBus requires that the service file match the name
  * Add a pam option for the OpenSSH 2876 workaround
  * Update to the latest libhimmelblau</changelog>
  <changelog author="david.mulder@suse.com" date="1732536001">- Update to version 0.7.4+git.0.d1291c6:
  * Version 0.7.4
  * Fix missing dependency utf8proc_NFKC_Casefold
  * Package Siemens Linux Entra SSO for Himmelblau
  * Add SLE15SP6 packaging
  * Add Fedora 41 packaging
  * Add Fedora Rawhide packaging
  * The tasks daemon needs /etc/groups write access
  * Version 0.7.3
  * Increase the cache timeout to 5 minutes
  * Always fetch and cache the graph url</changelog>
  <changelog author="david.mulder@suse.com" date="1732536002">- Update to version 0.7.5+git.0.8f421b0:
  * Version 0.7.5
  * Remove the org.samba.himmelblau dbus service</changelog>
  <changelog author="david.mulder@suse.com" date="1733140800">- Update to version 0.7.7+git.0.b48d0bb:
  * Version 0.7.7
  * Fix CVE-2024-11738: rustls network-reachable panic in `Acceptor::accept`
    (bsc#1233949).
  * Version 0.7.6
  * Enable module for utf8proc-devel in Rocky8</changelog>
  <changelog author="david.mulder@suse.com" date="1733400000">- Update to version 0.7.9+git.0.93655d2:
  * Version 0.7.9
  * Update to the latest libhimmelblau
  * Version 0.7.8
  * Add a himmelblau.conf man page, and package the man pages
  * Add DAG flow as a fallback for MFA</changelog>
  <changelog author="david.mulder@suse.com" date="1734004800">- Update to version 0.7.13+git.0.d790d31:
  * Version 0.7.13
  * Fix Fedora build dependencies
  * Version 0.7.12
  * Add Debian 12 packaging
  * Update github CI dependencies
  * Version 0.7.11
  * Implement Hello Pin changes via PAM; (jira#PED-11682).
  * Utilize HimmelblauConfig directly in pam and nss
  * Version 0.7.10
  * Add config parsing unit tests
  * Fix incorrect default domain
  * Fix config hsm type Tpm error
  * Include multi-domain important info in himmelblau.conf man</changelog>
  <changelog author="david.mulder@suse.com" date="1737979200">- Update to version 0.7.15+git.0.7a70a0b:
  * Version 0.7.15
  * Fix Credentials leaking in the debug log; (bsc#1236354).
  * Version 0.7.14
  * Update libhimmelblau version
  * Custom domains matching</changelog>
  <changelog author="david.mulder@suse.com" date="1746532800">- Update to version 0.7.16+git.0.f6e7faf:
  * Version 0.7.16
  * Fix CI failure caused by package revision
  * Update sccache-action version to use new cache service
  * CVE-2025-3416: Fix openssl Use After Free; (bsc#1242648).</changelog>
  <changelog author="david.mulder@suse.com" date="1750161600">- Update to version 0.7.17+git.0.1ebdab0:
  * CVE-2025-5791: Stop using deprecated `users` crate; (bsc#1244202).</changelog>
  <changelog author="david.mulder@suse.com" date="1756814400">- Update to version 0.7.18+git.0.8485a75:
  * Version 0.7.18
  * deps(rust): bump tracing-subscriber in the cargo group; (bsc#1249013), (CVE-2025-58160)</changelog>
</package>
<package pkgid="5257324428788e2bccccbe72fa7fd240c74d5a264ece0903f3941be1a7ef44e6" name="himmelblau" arch="x86_64">
  <version epoch="0" ver="0.7.18+git.0.8485a75" rel="150700.3.6.1"/>
  <changelog author="david.mulder@suse.com" date="1715774400">- Update to version 0.3.4+git.0.01d099f:
  * Version 0.3.4
  * Only remove cached user if it doesn't exist
  * Use existing user token at refresh
  * Always use the spn of the user for nss requests
  * Generate a fake user token to please SSH
  * Fix aad-tool to handle MFA
  * Fix lib_crypto version
  * Fix user dropping from NSS</changelog>
  <changelog author="david.mulder@suse.com" date="1716206400">- Update to version 0.4.0+git.0.69b64fe:
  * Add github workflows for the 0.4.x branch
  * Do not append to pam_allow_groups automatically
  * Pam Allow Groups must be specified by Object ID
  * Request the correct resource and permissions
  * Improve error output on group lookup failure
  * When faking a uuid for NSS, use a random uuid
  * Fix clippy warning about inefficient use of clone()
  * Remove the initial uid hack, use name mapping
  * Don't stop an MR based on a clippy warning
  * Update Kanidm tracking
  * Modify CI workflows to handle idmap build
  * Add CI job for cargo test
  * Test the new and legacy idmapping
  * Ensure duplicate providers are not started
  * Use the SSSD Idmap code in Himmelblau
  * Specify in conf that pam_allow_groups is required
  * Remove code duplication in Hello PIN auth
  * Fix Device authentication failed after enrollment
  * Update the base64urlsafedata version
  * Update README.md with Matrix contact info
  * Version 0.4.0</changelog>
  <changelog author="david.mulder@suse.com" date="1716379200">- Update to version 0.4.0+git.2.7b57f5e:
  * Always normalize idmap upn inputs</changelog>
  <changelog author="david.mulder@suse.com" date="1716379201">- Update to version 0.4.0+git.4.63e3704:
  * Fix a refresh token leak in debug from msal</changelog>
  <changelog author="david.mulder@suse.com" date="1716984000">- Update to version 0.4.1+git.0.41dd0dc:
  * Version 0.4.1
  * Use latest msal with MFA fixes
  * PhoneAppNotification is not a cred request algorithm
  * The polling_interval is in milliseconds, not seconds
  * OneWaySMS is additionally a valid OTP
  * Relicensing as GPL3, as SSSD source inclusion requires</changelog>
  <changelog author="david.mulder@suse.com" date="1721044800">- Update to version 0.4.3+git.2.6379abc:
  * Specifically use msal 0.2.6
  * Version 0.4.3
  * update libnss requirement from 0.7.0 to 0.8.0
  * himmelblaud stops working after suspend
  * Version 0.4.2
  * Fix ConsolidatedTelephony MFA method</changelog>
  <changelog author="david.mulder@suse.com" date="1725451200">- Update to version 0.5.0+git.0.22f84f0:
  * Update workflows for 0.5.x
  * Update Debian dependencies in README.md
  * Compilation fails on Ubuntu, missing ldb header
  * Fix base32 with kandim updates
  * deps(rust): update base32 requirement from ^0.4.0 to ^0.5.0
  * deps(rust): update scim_proto requirement from ^0.2.1 to ^1.3.2
  * deps(rust): update bindgen requirement from 0.69.4 to 0.70.1
  * Fix CI failures caused by cargo 1.80.1
  * Update to libhimmelblau version 0.2.9
  * deps(rust): update rusqlite requirement from ^0.31.0 to ^0.32.0
  * deps(rust): update tonic requirement from 0.11.0 to 0.12.0
  * update libnss requirement from 0.7.0 to 0.8.0
  * Switch to using libhimmelblau
  * himmelblaud stops working after suspend
  * Update required packages for tumbleweed
  * Disable the SFA fallback by default
  * Fix ConsolidatedTelephony MFA method
  * Use the group ID for the name if no display name
  * Use latest msal with MFA fixes
  * PhoneAppNotification is not a cred request algorithm
  * The polling_interval is in milliseconds, not seconds
  * OneWaySMS is additionally a valid OTP
  * Relicensing as GPL3, as SSSD source inclusion requires
  * Utilize the graph code in msal
  * config: Remove comments about experimental policy enforement
  * Remove the experimental policy code from the id provider
  * Fix a refresh token leak in debug from msal
  * Correct README details
  * Always normalize idmap upn inputs
  * Add video links to the README
  * Minor updates to the Contributing section
  * Add a Installation section to the README
  * Add the new SSSD idmap build deps to the README
  * Add a section about donations
  * Include the Samba Technical matrix channel
  * Add github workflows for the 0.4.x branch
  * Version 0.5.0 bump for main</changelog>
  <changelog author="william.brown@suse.com" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="david.mulder@suse.com" date="1727870400">- Update to version 0.6.0+git.0.b8dae18:
  * Attempt to fix the cargo version in launchpad build
  * Add branch stable-0.6.x to the workflows
  * Install the pam module to the proper location
  * Update README.md
  * Add a debug option to the config
  * Add a pam option for the OpenSSH 2876 workaround
  * Update to the latest libhimmelblau
  * Authorize all users when pam_allow_groups is empty
  * Fix clippy warnings
  * Fix pam echo not displayed via ssh
  * Fix pam failure to register Pin following mfa poll
  * Fork from kanidm
  * Version 0.6.0
  * Add cargo deb build
  * Version 0.5.3
  * Improve the README installation instructions
  * Add `make install` command
  * Improve Debian/Ubuntu install instructions
  * Fix tag push permissions for tag-version workflow
  * Version 0.5.2
  * Add a version check script
  * Version 0.5.1
  * Remove the rustc dependency, breaking rustup
  * Added Debian packaging workflow and files</changelog>
  <changelog author="david.mulder@suse.com" date="1729598400">- Update to version 0.6.14+git.0.bbda0b6:
  * Version 0.6.14
  * postinst should not fail on patch or apparmor update
  * Version 0.6.13
  * Don't use sudo in postinst/postrm scripts for deb
  * Version 0.6.12
  * PAM should be placed first in the stack
  * Match the object ID of the fake user and group
  * Version 0.6.11
  * Move sshd config into it's own debian package
  * Version 0.6.10
  * Allow the graph to start w/out network
  * Add hello_pin_min_length conf option
  * Version 0.6.9
  * Don't attempt SFA fallback if AADSTSError
  * Have libhimmelblau handle the DAG fallback
  * Add a warning to user that SSH needs restarted
  * Version 0.6.8
  * Ensure local users are ignored when CN mapping
  * Ensure DAG is rejected if lifetime expires
  * Version 0.6.7
  * Rework the poll logic to resolve timeout issues
  * Version 0.6.6
  * Add a sshd soft depends for the deb package
  * CN name mapping in PAM and NSS
  * Version 0.6.5
  * Make CN an optional home directory attribute
  * Version 0.6.4
  * Add Ubuntu pam-config for pam_himmelblau
  * Configuration patches for himmelblau on Debian
  * Version 0.6.3
  * Bug in pam which needs defended against
  * Version 0.6.2
  * Never return the Pam result from get_user()
  * Correct installation directory of the deb pam module
  * Makefile typo fixes
  * Add libdbus-1-dev dep
  * Version 0.6.1
  * Debian build requires libdbus-1-dev</changelog>
  <changelog author="david.mulder@suse.com" date="1732536000">- Update to version 0.7.2+git.0.c76ac0e:
  * Version 0.7.2
  * Hello support depends on openssl3
  * Version 0.7.1
  * Fix sshd rpm depends
  * Resolve RPM dependencies automatically
  * Revert "deps(rust): update notify-debouncer-full requirement from 0.3 to 0.4"
  * Add openSUSE Tumbleweed packaging
  * Fix RPM packaging placement of systemd files
  * Remove the failed attempt at debian packaging
  * Add stable-0.7.x to CI workflows
  * deps(rust): update utoipa requirement from 4.0.0 to 4.2.0
  * deps(rust): update hashbrown requirement from 0.14.0 to 0.15.1
  * Remove missing feature causing warnings
  * deps(rust): update notify-debouncer-full requirement from 0.3 to 0.4
  * Specify scopes when making an SSO request
  * Implement logon script for ensuring compliance
  * Option for adding Entra Id users to local groups
  * Configure EL sshd with ChallengeResponseAuthentication yes
  * Add rocky 8 packaging
  * Add RPM packaging for EL9
  * Modify Ubuntu defaults to fix snaps
  * Resolve Libreoffice fails to start on Ubuntu
  * Minor formatting fix
  * Revert RwLock -&gt; Arc&lt;Mutex&gt; change in idmap
  * Ignore broker scopes requests for now
  * Ensure every file specifies the proper license
  * postinst should not fail on patch or apparmor update
  * Install pam module to additional location via make
  * Add sshd config to the Makefile
  * Don't use sudo in postinst/postrm scripts for deb
  * PAM should be placed first in the stack
  * Add the libutf8proc-dev dep for deb
  * Match the object ID of the fake user and group
  * Make it possible to stop the broker service
  * Move sshd config into it's own debian package
  * Allow the graph to start w/out network
  * Add hello_pin_min_length conf option
  * Don't attempt SFA fallback if AADSTSError
  * Have libhimmelblau handle the DAG fallback
  * Add a warning to user that SSH needs restarted
  * Ensure local users are ignored when CN mapping
  * Ensure DAG is rejected if lifetime expires
  * Rework the poll logic to resolve timeout issues
  * Add a sshd soft depends for the deb package
  * CN name mapping in PAM and NSS
  * Make CN an optional home directory attribute
  * Remove the sssd build dependencies
  * Configuration patches for himmelblau on Debian
  * Simplify PAM get_item_string calls
  * Bug in pam which needs defended against
  * Fix deb build by adding Broker service file
  * WIP: Install Ubuntu unix-chkpwd apparmor deps
  * Ensure make install places pam_himmelblau correctly
  * Add Ubuntu pam-config for pam_himmelblau
  * Never return Err(PAM_SUCCESS) from get_user
  * Never return the Pam result from get_user()
  * Revert "Speed up nss requests w/out auth attempt"
  * Speed up nss requests w/out auth attempt
  * Fix some broker responses
  * Fixes for the dbus broker
  * Attempt to fix the cargo version in launchpad build
  * Makefile typo fixes
  * Version 0.7.0
  * Add libdbus-1-dev dep
  * Improve the README installation instructions
  * Add `make install` command
  * Improve Debian/Ubuntu install instructions
  * Fix tag push permissions for tag-version workflow
  * Add a version check script
  * Remove the rustc dependency, breaking rustup
  * Add a debug option to the config
  * DBus requires that the service file match the name
  * Add a pam option for the OpenSSH 2876 workaround
  * Update to the latest libhimmelblau</changelog>
  <changelog author="david.mulder@suse.com" date="1732536001">- Update to version 0.7.4+git.0.d1291c6:
  * Version 0.7.4
  * Fix missing dependency utf8proc_NFKC_Casefold
  * Package Siemens Linux Entra SSO for Himmelblau
  * Add SLE15SP6 packaging
  * Add Fedora 41 packaging
  * Add Fedora Rawhide packaging
  * The tasks daemon needs /etc/groups write access
  * Version 0.7.3
  * Increase the cache timeout to 5 minutes
  * Always fetch and cache the graph url</changelog>
  <changelog author="david.mulder@suse.com" date="1732536002">- Update to version 0.7.5+git.0.8f421b0:
  * Version 0.7.5
  * Remove the org.samba.himmelblau dbus service</changelog>
  <changelog author="david.mulder@suse.com" date="1733140800">- Update to version 0.7.7+git.0.b48d0bb:
  * Version 0.7.7
  * Fix CVE-2024-11738: rustls network-reachable panic in `Acceptor::accept`
    (bsc#1233949).
  * Version 0.7.6
  * Enable module for utf8proc-devel in Rocky8</changelog>
  <changelog author="david.mulder@suse.com" date="1733400000">- Update to version 0.7.9+git.0.93655d2:
  * Version 0.7.9
  * Update to the latest libhimmelblau
  * Version 0.7.8
  * Add a himmelblau.conf man page, and package the man pages
  * Add DAG flow as a fallback for MFA</changelog>
  <changelog author="david.mulder@suse.com" date="1734004800">- Update to version 0.7.13+git.0.d790d31:
  * Version 0.7.13
  * Fix Fedora build dependencies
  * Version 0.7.12
  * Add Debian 12 packaging
  * Update github CI dependencies
  * Version 0.7.11
  * Implement Hello Pin changes via PAM; (jira#PED-11682).
  * Utilize HimmelblauConfig directly in pam and nss
  * Version 0.7.10
  * Add config parsing unit tests
  * Fix incorrect default domain
  * Fix config hsm type Tpm error
  * Include multi-domain important info in himmelblau.conf man</changelog>
  <changelog author="david.mulder@suse.com" date="1737979200">- Update to version 0.7.15+git.0.7a70a0b:
  * Version 0.7.15
  * Fix Credentials leaking in the debug log; (bsc#1236354).
  * Version 0.7.14
  * Update libhimmelblau version
  * Custom domains matching</changelog>
  <changelog author="david.mulder@suse.com" date="1746532800">- Update to version 0.7.16+git.0.f6e7faf:
  * Version 0.7.16
  * Fix CI failure caused by package revision
  * Update sccache-action version to use new cache service
  * CVE-2025-3416: Fix openssl Use After Free; (bsc#1242648).</changelog>
  <changelog author="david.mulder@suse.com" date="1750161600">- Update to version 0.7.17+git.0.1ebdab0:
  * CVE-2025-5791: Stop using deprecated `users` crate; (bsc#1244202).</changelog>
  <changelog author="david.mulder@suse.com" date="1756814400">- Update to version 0.7.18+git.0.8485a75:
  * Version 0.7.18
  * deps(rust): bump tracing-subscriber in the cargo group; (bsc#1249013), (CVE-2025-58160)</changelog>
</package>
<package pkgid="0a669df0b06daf46839e50bc5b0bf7aae5ce2804dc1cc4d4b2bdb62dc8d9c9c7" name="himmelblau" arch="src">
  <version epoch="0" ver="2.3.9+git0.a9fd29b" rel="150700.3.15.1"/>
  <changelog author="david.mulder@suse.com" date="1716379200">- Update to version 0.4.0+git.4.63e3704:
  * Fix a refresh token leak in debug from msal</changelog>
  <changelog author="david.mulder@suse.com" date="1716984000">- Update to version 0.4.1+git.0.41dd0dc:
  * Version 0.4.1
  * Use latest msal with MFA fixes
  * PhoneAppNotification is not a cred request algorithm
  * The polling_interval is in milliseconds, not seconds
  * OneWaySMS is additionally a valid OTP
  * Relicensing as GPL3, as SSSD source inclusion requires</changelog>
  <changelog author="david.mulder@suse.com" date="1721044800">- Update to version 0.4.3+git.2.6379abc:
  * Specifically use msal 0.2.6
  * Version 0.4.3
  * update libnss requirement from 0.7.0 to 0.8.0
  * himmelblaud stops working after suspend
  * Version 0.4.2
  * Fix ConsolidatedTelephony MFA method</changelog>
  <changelog author="david.mulder@suse.com" date="1725451200">- Update to version 0.5.0+git.0.22f84f0:
  * Update workflows for 0.5.x
  * Update Debian dependencies in README.md
  * Compilation fails on Ubuntu, missing ldb header
  * Fix base32 with kandim updates
  * deps(rust): update base32 requirement from ^0.4.0 to ^0.5.0
  * deps(rust): update scim_proto requirement from ^0.2.1 to ^1.3.2
  * deps(rust): update bindgen requirement from 0.69.4 to 0.70.1
  * Fix CI failures caused by cargo 1.80.1
  * Update to libhimmelblau version 0.2.9
  * deps(rust): update rusqlite requirement from ^0.31.0 to ^0.32.0
  * deps(rust): update tonic requirement from 0.11.0 to 0.12.0
  * update libnss requirement from 0.7.0 to 0.8.0
  * Switch to using libhimmelblau
  * himmelblaud stops working after suspend
  * Update required packages for tumbleweed
  * Disable the SFA fallback by default
  * Fix ConsolidatedTelephony MFA method
  * Use the group ID for the name if no display name
  * Use latest msal with MFA fixes
  * PhoneAppNotification is not a cred request algorithm
  * The polling_interval is in milliseconds, not seconds
  * OneWaySMS is additionally a valid OTP
  * Relicensing as GPL3, as SSSD source inclusion requires
  * Utilize the graph code in msal
  * config: Remove comments about experimental policy enforement
  * Remove the experimental policy code from the id provider
  * Fix a refresh token leak in debug from msal
  * Correct README details
  * Always normalize idmap upn inputs
  * Add video links to the README
  * Minor updates to the Contributing section
  * Add a Installation section to the README
  * Add the new SSSD idmap build deps to the README
  * Add a section about donations
  * Include the Samba Technical matrix channel
  * Add github workflows for the 0.4.x branch
  * Version 0.5.0 bump for main</changelog>
  <changelog author="william.brown@suse.com" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="david.mulder@suse.com" date="1727870400">- Update to version 0.6.0+git.0.b8dae18:
  * Attempt to fix the cargo version in launchpad build
  * Add branch stable-0.6.x to the workflows
  * Install the pam module to the proper location
  * Update README.md
  * Add a debug option to the config
  * Add a pam option for the OpenSSH 2876 workaround
  * Update to the latest libhimmelblau
  * Authorize all users when pam_allow_groups is empty
  * Fix clippy warnings
  * Fix pam echo not displayed via ssh
  * Fix pam failure to register Pin following mfa poll
  * Fork from kanidm
  * Version 0.6.0
  * Add cargo deb build
  * Version 0.5.3
  * Improve the README installation instructions
  * Add `make install` command
  * Improve Debian/Ubuntu install instructions
  * Fix tag push permissions for tag-version workflow
  * Version 0.5.2
  * Add a version check script
  * Version 0.5.1
  * Remove the rustc dependency, breaking rustup
  * Added Debian packaging workflow and files</changelog>
  <changelog author="david.mulder@suse.com" date="1729598400">- Update to version 0.6.14+git.0.bbda0b6:
  * Version 0.6.14
  * postinst should not fail on patch or apparmor update
  * Version 0.6.13
  * Don't use sudo in postinst/postrm scripts for deb
  * Version 0.6.12
  * PAM should be placed first in the stack
  * Match the object ID of the fake user and group
  * Version 0.6.11
  * Move sshd config into it's own debian package
  * Version 0.6.10
  * Allow the graph to start w/out network
  * Add hello_pin_min_length conf option
  * Version 0.6.9
  * Don't attempt SFA fallback if AADSTSError
  * Have libhimmelblau handle the DAG fallback
  * Add a warning to user that SSH needs restarted
  * Version 0.6.8
  * Ensure local users are ignored when CN mapping
  * Ensure DAG is rejected if lifetime expires
  * Version 0.6.7
  * Rework the poll logic to resolve timeout issues
  * Version 0.6.6
  * Add a sshd soft depends for the deb package
  * CN name mapping in PAM and NSS
  * Version 0.6.5
  * Make CN an optional home directory attribute
  * Version 0.6.4
  * Add Ubuntu pam-config for pam_himmelblau
  * Configuration patches for himmelblau on Debian
  * Version 0.6.3
  * Bug in pam which needs defended against
  * Version 0.6.2
  * Never return the Pam result from get_user()
  * Correct installation directory of the deb pam module
  * Makefile typo fixes
  * Add libdbus-1-dev dep
  * Version 0.6.1
  * Debian build requires libdbus-1-dev</changelog>
  <changelog author="david.mulder@suse.com" date="1732536000">- Update to version 0.7.2+git.0.c76ac0e:
  * Version 0.7.2
  * Hello support depends on openssl3
  * Version 0.7.1
  * Fix sshd rpm depends
  * Resolve RPM dependencies automatically
  * Revert "deps(rust): update notify-debouncer-full requirement from 0.3 to 0.4"
  * Add openSUSE Tumbleweed packaging
  * Fix RPM packaging placement of systemd files
  * Remove the failed attempt at debian packaging
  * Add stable-0.7.x to CI workflows
  * deps(rust): update utoipa requirement from 4.0.0 to 4.2.0
  * deps(rust): update hashbrown requirement from 0.14.0 to 0.15.1
  * Remove missing feature causing warnings
  * deps(rust): update notify-debouncer-full requirement from 0.3 to 0.4
  * Specify scopes when making an SSO request
  * Implement logon script for ensuring compliance
  * Option for adding Entra Id users to local groups
  * Configure EL sshd with ChallengeResponseAuthentication yes
  * Add rocky 8 packaging
  * Add RPM packaging for EL9
  * Modify Ubuntu defaults to fix snaps
  * Resolve Libreoffice fails to start on Ubuntu
  * Minor formatting fix
  * Revert RwLock -&gt; Arc&lt;Mutex&gt; change in idmap
  * Ignore broker scopes requests for now
  * Ensure every file specifies the proper license
  * postinst should not fail on patch or apparmor update
  * Install pam module to additional location via make
  * Add sshd config to the Makefile
  * Don't use sudo in postinst/postrm scripts for deb
  * PAM should be placed first in the stack
  * Add the libutf8proc-dev dep for deb
  * Match the object ID of the fake user and group
  * Make it possible to stop the broker service
  * Move sshd config into it's own debian package
  * Allow the graph to start w/out network
  * Add hello_pin_min_length conf option
  * Don't attempt SFA fallback if AADSTSError
  * Have libhimmelblau handle the DAG fallback
  * Add a warning to user that SSH needs restarted
  * Ensure local users are ignored when CN mapping
  * Ensure DAG is rejected if lifetime expires
  * Rework the poll logic to resolve timeout issues
  * Add a sshd soft depends for the deb package
  * CN name mapping in PAM and NSS
  * Make CN an optional home directory attribute
  * Remove the sssd build dependencies
  * Configuration patches for himmelblau on Debian
  * Simplify PAM get_item_string calls
  * Bug in pam which needs defended against
  * Fix deb build by adding Broker service file
  * WIP: Install Ubuntu unix-chkpwd apparmor deps
  * Ensure make install places pam_himmelblau correctly
  * Add Ubuntu pam-config for pam_himmelblau
  * Never return Err(PAM_SUCCESS) from get_user
  * Never return the Pam result from get_user()
  * Revert "Speed up nss requests w/out auth attempt"
  * Speed up nss requests w/out auth attempt
  * Fix some broker responses
  * Fixes for the dbus broker
  * Attempt to fix the cargo version in launchpad build
  * Makefile typo fixes
  * Version 0.7.0
  * Add libdbus-1-dev dep
  * Improve the README installation instructions
  * Add `make install` command
  * Improve Debian/Ubuntu install instructions
  * Fix tag push permissions for tag-version workflow
  * Add a version check script
  * Remove the rustc dependency, breaking rustup
  * Add a debug option to the config
  * DBus requires that the service file match the name
  * Add a pam option for the OpenSSH 2876 workaround
  * Update to the latest libhimmelblau</changelog>
  <changelog author="david.mulder@suse.com" date="1732536001">- Update to version 0.7.4+git.0.d1291c6:
  * Version 0.7.4
  * Fix missing dependency utf8proc_NFKC_Casefold
  * Package Siemens Linux Entra SSO for Himmelblau
  * Add SLE15SP6 packaging
  * Add Fedora 41 packaging
  * Add Fedora Rawhide packaging
  * The tasks daemon needs /etc/groups write access
  * Version 0.7.3
  * Increase the cache timeout to 5 minutes
  * Always fetch and cache the graph url</changelog>
  <changelog author="david.mulder@suse.com" date="1732536002">- Update to version 0.7.5+git.0.8f421b0:
  * Version 0.7.5
  * Remove the org.samba.himmelblau dbus service</changelog>
  <changelog author="david.mulder@suse.com" date="1733140800">- Update to version 0.7.7+git.0.b48d0bb:
  * Version 0.7.7
  * Fix CVE-2024-11738: rustls network-reachable panic in `Acceptor::accept`
    (bsc#1233949).
  * Version 0.7.6
  * Enable module for utf8proc-devel in Rocky8</changelog>
  <changelog author="david.mulder@suse.com" date="1733400000">- Update to version 0.7.9+git.0.93655d2:
  * Version 0.7.9
  * Update to the latest libhimmelblau
  * Version 0.7.8
  * Add a himmelblau.conf man page, and package the man pages
  * Add DAG flow as a fallback for MFA</changelog>
  <changelog author="david.mulder@suse.com" date="1734004800">- Update to version 0.7.13+git.0.d790d31:
  * Version 0.7.13
  * Fix Fedora build dependencies
  * Version 0.7.12
  * Add Debian 12 packaging
  * Update github CI dependencies
  * Version 0.7.11
  * Implement Hello Pin changes via PAM; (jira#PED-11682).
  * Utilize HimmelblauConfig directly in pam and nss
  * Version 0.7.10
  * Add config parsing unit tests
  * Fix incorrect default domain
  * Fix config hsm type Tpm error
  * Include multi-domain important info in himmelblau.conf man</changelog>
  <changelog author="david.mulder@suse.com" date="1737979200">- Update to version 0.7.15+git.0.7a70a0b:
  * Version 0.7.15
  * Fix Credentials leaking in the debug log; (bsc#1236354).
  * Version 0.7.14
  * Update libhimmelblau version
  * Custom domains matching</changelog>
  <changelog author="david.mulder@suse.com" date="1746532800">- Update to version 0.7.16+git.0.f6e7faf:
  * Version 0.7.16
  * Fix CI failure caused by package revision
  * Update sccache-action version to use new cache service
  * CVE-2025-3416: Fix openssl Use After Free; (bsc#1242648).</changelog>
  <changelog author="david.mulder@suse.com" date="1750161600">- Update to version 0.7.17+git.0.1ebdab0:
  * CVE-2025-5791: Stop using deprecated `users` crate; (bsc#1244202).</changelog>
  <changelog author="david.mulder@suse.com" date="1756814400">- Update to version 0.7.18+git.0.8485a75:
  * Version 0.7.18
  * deps(rust): bump tracing-subscriber in the cargo group; (bsc#1249013), (CVE-2025-58160)</changelog>
  <changelog author="david.mulder@suse.com" date="1771934400">- Update to version 2.3.5+git0.9dd526c; (jsc#PED-14511):
  * Better handle Intune API version
  * deps(rust): bump the all-cargo-updates group with 8 updates; (bsc#1257904), (CVE-2026-25727)
  * Update make vet from main branch
  * pam_himmelblau: call split_username once in chauthtok
  * pam_himmelblau: return PAM_IGNORE in chauthtok for local users
  * Don't attempt a DAG when Hello fails with SSPR demand
- Update to version 2.3.4+git0.db5df80:
  * Version 2.3.4
  * cargo vet
  * deps(rust): bump the all-cargo-updates group across 1 directory with 8 updates
  * Revert sketching update (which breaks SLE16 build)
- Update to version 2.3.3+git0.25e8b73:
  * Version 2.3.3
  * cargo vet
  * /var/cache/private/himmelblaud should not be created tmpfiles
  * Updatee python vers for dataclasses dep
  * deps(rust): bump the all-cargo-updates group across 1 directory with 3 updates
  * Generate pin init service file systemd &lt; 250
  * Checkin missing himmelblaud.if file for SELinux
  * Resolve typos in selinux package commands
- Update to version 2.3.2+git0.5a7a598:
  * Compile SELinux policy at install time for cross-distro compatibility
  * Improve PAM configuration on openSUSE/SLE
  * Fix SELinux policy
  * Add a git hook to ensure selinux policy is tested
  * Ignore generated himmelblau-hsm-pin-init service file
  * Refactor SELinux policy for cross-distro compatibility
  * cargo vet
  * Fix NSS lookup for mapped local users
  * Skip OS version compliance checks when min/max values are empty
- Update to version 2.3.1+git0.2418ec2:
  * Version 2.3.1
  * Remove references to qrcodegen (these are 3.x features)
  * QR Greeter compatibility for old GNOME
  * Enable QR greeter automatically
  * ci: Use latest cargo-vet from git to fix CI
  * Fix HSM pin migration failure on Debian/Ubuntu upgrades from v1.4.x
  * Version 2.3.0
  * cargo vet
  * Update make vet from main branch
  * Autostart the daemons on fresh install or upgrade
  * Restart sshd when installing the ssh config
  * Allow tasks daemon to write krb ccache
  * Do not enumerate mapped users in NSS
  * deps(rust): bump the all-cargo-updates group across 1 directory with 8 updates
  * Update libhimmelblau to latest version
  * Fix Tumbleweed build
  * cargo vet
  * Version 2.2.0
  * Update libhimmelblau to 0.8.x series
  * deps(rust): bump the all-cargo-updates group with 17 updates
  * Only use OpenSSH bug workaround for ssh service
  * Fix debug noise from removing user from sudo group
  * systemd: install files to /usr/lib/, not /etc/
  * Version 2.1.0
  * Fix nightly authselect build failure
  * Generate the authselect profiles for each distro
  * Improve pam config handling in aad-tool
  * Make `aad-tool configure-pam` detect location of pam files
  * Version 2.0.5
  * /var/lib/private/himmelblaud should be owned by root
  * Use tmpfiles.d to create himmelblaud private data directory
- Resolve mode mismatch with Chromium package.
- Update to version 2.0.4+git.2.5d26a19:
  * deps(rust): bump the all-cargo-updates group with 13 updates
  * Version 2.0.4
  * Update kanidm_build_profiles mask version
  * Utilize cargo vet from main
  * Add policies cache patch via systemd-tmpfiles
- Update to version 2.0.3+git.4.4f6e025:
  * Fix man page comments about change idmap_range
  * Stub picky-krb for osc build
  * Stub a kanidm_build_profiles which builds in osc
  * Ensure nss cache is created on Ubuntu/Debian
  * Request a user token if NSS hasn't been called
  * Version 2.0.3
  * Add nss cache patch via systemd-tmpfiles
  * Version 2.0.2
  * Recommend `patch` with the pam package
  * Fix passwordless FIDO authentication not being used when available
  * Git workflow updates for stable-2.x
  * Only warn on Intune failure
  * Version 2.0.1
  * Force o365 desktop files to always rebuild
  * Always rebuild the o365 apps
  * Add restart on-failure to systemd services
  * Clarify `domain` SHOULD match login domain
  * Remove warning about `domain` himmelblau.conf opt
  * Pseudo eliminate multi-tenant and domains section
  * Revert "Fix Hello PIN lookup when an alias domain"
  * Comment out `KbdInteractiveAuthentication on` in sshd conf
  * Check the nxset sooner, to avoid unwanted errors
  * Recommend oddjob_mkhomedir with authselect
  * Pin libhimmelblau to 0.7.x
  * Deprecate Fedora 41
  * Cargo vet
  * deps(rust): bump the all-cargo-updates group with 11 updates
  * Bump github/codeql-action from 4.30.8 to 4.31.2
  * Bump cachix/install-nix-action from 31.8.1 to 31.8.2
  * Bump actions/upload-artifact from 4.6.2 to 5.0.0
  * cargo clippy and rebase fix
  * fixup! add extra debug output to NotFound error code
  * force error output to show up in CI logs
  * wrap repeated sources of IdpError::NotFound in helper functions
  * add extra debug output to NotFound error code
  * use direnv for loading the nix devshell
  * We should still encourage mapping by name
  * Add support for Fedora 43
  * Provide a offline 'breakglass' mode
  * cargo clippy
  * Add warning about incorrect nsswitch configuration
  * Distinguish between online and offline token fail
  * Ensure user token uses original name
  * Fix alias domain in auth result causing failure
  * Resolve cargo clippy warnings
  * Only map on cn name for the primary domain
  * Install systemd in build scripts for gen service
  * Fix systemd version parsing
  * cargo vet
  * Update libhimmelblau to 0.7.19
  * Resolve SELinux build failures in nightly (part 2)
  * Rocky container image updates were failing
  * Warn instead of error when no idmap_range specified
  * deps(rust): bump the all-cargo-updates group across 1 directory with 7 updates
  * Trim whitespace from local group names
  * Fix borrowing error
  * Fix reference to local_sudo_group in condition
  * Only run sudo_groups if local_groups does not contain local_sudo_group
  * Leave SELinux in permissive mode for Himmelblau
  * Resolve SELinux build failures in nightly
  * nix: add join_type option to nixos-module settings
  * Build host configuration changes
  * Ensure that hsm_pin isn't present decrypted
  * Document Soft HSM changes to TPM bound
  * Disable SELinux by default on NixOS
  * sh doesn't have `source`
  * Encrypt hsm-pin using systemd-creds
  * Recommend uuid id mapping
  * Improve himmelblau.conf man page formatting
  * Implement Local User Mapping
  * Add o365 dependency for jq
  * Add selinux rules for gdm login
  * Narrow the scope of selinux policy with audit2allow
  * Generate the systemd service files
  * Fix selinux build for SLE16
  * Resolve SLE16 build dependency failure
  * Fix the rawhide build
  * Mask the sshkey-attest package
  * Bump cachix/install-nix-action from 31.7.0 to 31.8.1
  * cargo vet dependency updates
  * deps(rust): bump the all-cargo-updates group across 1 directory with 13 updates
  * Bump actions/dependency-review-action from 4.8.0 to 4.8.1
  * Bump cachix/install-nix-action from 31.7.0 to 31.8.0
  * Bump github/codeql-action from 3.30.5 to 4.30.8
  * Bump ossf/scorecard-action from 2.4.2 to 2.4.3
  * SELinux improvements
  * Fix a typo in package gen scripts
  * cargo fmt
  * Permit NSS response for mapped primary fake group
  * Fix Nix Error With Fuzz
  * Decrease CI fuzzer setup time
  * Document join types
  * Support for Entra registered devices
  * Run `cargo test` in a container
  * Bump cachix/install-nix-action from 31.6.2 to 31.7.0
  * cargo vet
  * deps(rust): bump the all-cargo-updates group across 1 directory with 2 updates
  * Bump github/codeql-action from 3.30.4 to 3.30.5
  * Use pastey crate instead of unmaintained paste
  * cargo vet
  * Pin unmaintained serde_cbor dep to serde_cbor_2
  * Resolve tower-http `cargo audit` warning
  * Replace unmaintained fxhash with own version
  * Resolve warning about workflow top level write permissions
  * Remove dependabot automerge
  * Resolve division by 0 in idmap code
  * deps(rust): bump the all-cargo-updates group across 1 directory with 3 updates
  * [StepSecurity] ci: Harden GitHub Actions
  * Only idmap against initialized domains
  * Resolve invalid init of idmap with same domain
  * Resolve division by 0 in idmap code
  * Add fuzzing of idmap code
  * Add basic fuzzing of the config options
  * cargo clippy
  * Resolve error found by fuzzing
  * cargo vet prune
  * deps(rust): bump regex in the all-cargo-updates group
  * Bump actions/dependency-review-action from 4.7.3 to 4.8.0
  * Bump actions/checkout from 3.6.0 to 5.0.0
  * Bump cachix/cachix-action from 14 to 16
  * Bump ossf/scorecard-action from 2.4.0 to 2.4.2
  * Bump cachix/install-nix-action from 25 to 31
  * Add the OpenSSF Best Practices badge
  * Add scorecard badge
  * [StepSecurity] Apply security best practices
  * Fix group static mapping
  * Move aad-tool idmap cache clear to the idmap cmd
  * Resolve errant "Hello key missing." messages
  * Update flake.nix
  * Slow the dependabot update frequency
  * Audit dependabot updates
  * deps(rust): bump the all-cargo-updates group across 1 directory with 11 updates
  * feat: Add support for aarch64 on Debian-based distributions
  * Resolve possible invalid pointer dereferences
  * Cargo clippy
  * Cargo fmt
  * Avoid revealing account ids in debug log
  * Cause doc links to open in the correct apps
  * Permit opening multiple instances of Word/Excel
  * Modify systray and app close behavior
  * Don't use questionably licensed icons for o365
  * Resolve NixOS CI failure
  * Fix building w/out deprecated interactive feature
  * Update himmelblau.conf.5 sudo_groups example
  * Entra group based sudo access
  * Audited the cargo updates
  * deps(rust): bump the all-cargo-updates group with 6 updates
  * Vet libhimmelblau
  * Add `make vet` command
  * Update deny.toml
  * Remove incompatible licenses from deps
  * Fix RHEL8 package signing
  * Add SBOM generation
  * Add an IRP checklist for security incidents
  * Run the nixos build/release on the correct version
  * Add crate dependency auditing on MR
  * Add some exceptions
  * Initialize cargo vet
  * Remove in-tree kanidm dependencies
  * Fix Hello PIN lookup when an alias domain
  * Raise maximum group lookup from 100 to 999
  * Always work with lowercase account names
  * Modify FUNDING.yml for funding sources
  * Remove glib dependency
  * deps(rust): bump the all-cargo-updates group with 10 updates
  * Add CI check for licenses
  * Update dependabot.yml to target all stable branches
  * Add authselect module for Rocky/Fedora
  * Recommend packages, instead of require
  * Add a Contributing document
  * Add a Code of Conduct
  * add withSelinux flag to nix build, brings SELinux binaries into the build environment.
  * deps(rust): bump tracing-subscriber in the cargo group
  * Don't overwrite the himmelblau.conf on rpm upgrade
  * Add help output to the Makefile
  * Fix building packages with docker in root mode
  * Update to latest libhimmelblau and identity_dbus_broker
  * Make PRT SSO cookie via broker work as well for Edge
  * Make broker work for Edge
  * Generate Office 365 desktop apps
  * Update README
  * Add `make uninstall` command
  * Remove the deprecated tests suite
  * Himmelblau no longer has git submodules
  * Make install using packages
  * Add Debian 13 packages
  * Generate Dockerfiles automatically
  * Add SELinux configuration
  * Himmelblau daemon requires system tss user
  * Add cron dependency for Intune scripts
  * Do not mangle /usr/etc configuration files
  * Fix building packages with docker in root mode
  * deps(rust): bump the all-cargo-updates group with 11 updates
  * deps(rust): bump the all-cargo-updates group with 7 updates
  * Add SLE16 (beta) build target
  * Automatically append to nsswitch.conf in postinst
  * Correct the RPM postinst script syntax
  * Fix Kerberos credential cache permissions
  * Set file owner and group before writing its content
  * Create SECURITY.md
  * deps(rust): bump the all-cargo-updates group with 6 updates
  * Rev the dev version to 2.0.0
  * Ensure alias domains match when checking Intune device id
  * Debian 12 doesn't support ConditionPathExists and notify-reload
  * Write scripts policy to a readable directory
  * Apply Intune policies right after enrollment
  * Add more debug instrumentation
  * Provide device_id to Intune enrollment if not cached
  * Ensure nss cache directory is created during install
  * Remove /var/cache/himmelblaud access from tasks daemon
  * Resolve daemon startup absolute path warnings
  * Delay Intune enrollment on Device Auth fail
  * Do not leak the Intune IW service token in the logs
- Update to version 1.4.2+git.0.52da279:
  * Version 1.4.2
  * Rocky container image updates were failing
  * Revert libhimmelblau unstable update
  * Version 1.4.1
  * Update Intune to use app version 1.2511.7
  * Version 1.4.0
  * Resolve build failures
  * deps(rust): bump the all-cargo-updates group across 1 directory with 6 updates
  * Permit NSS response for mapped primary fake group
- Update to version 1.3.0+git.0.f8cabb7:
  * Resolve errant "Hello key missing." messages
  * Version 1.3.0
  * Fix group static mapping
  * Move aad-tool idmap cache clear to the idmap cmd
  * deps(rust): bump the all-cargo-updates group across 1 directory with 11 updates
  * deps(rust): bump the all-cargo-updates group with 6 updates
  * Fix RHEL8 package signing
  * Fix Hello PIN lookup when an alias domain
  * Raise maximum group lookup from 100 to 999
  * Always work with lowercase account names
  * Revert the self-hosted runner name
  * deps(rust): bump the all-cargo-updates group with 23 updates
- Update to version 1.2.2+git.0.2d04bca:
  * Include latest branch in CI
  * Self hosted runners
  * Version 1.2.2
  * deps(rust): bump tracing-subscriber in the cargo group; (bsc#1249013), (CVE-2025-58160)
  * Version 1.2.1
  * Automatically append to nsswitch.conf in postinst
  * Correct the RPM postinst script syntax
- Update to version 1.2.0+git.0.6befefc:
  * Version 1.2.0
  * Fix Kerberos credential cache permissions; (bsc#1247735), (CVE-2025-54882)
  * Set file owner and group before writing its content
  * Ensure alias domains match when checking Intune device id
  * Debian 12 doesn't support ConditionPathExists and notify-reload
  * Write scripts policy to a readable directory
  * Apply Intune policies right after enrollment
  * Add more debug instrumentation
  * Provide device_id to Intune enrollment if not cached
  * Ensure nss cache directory is created during install
  * Remove /var/cache/himmelblaud access from tasks daemon
  * Resolve daemon startup absolute path warnings
  * Version 1.1.0
  * Delay Intune enrollment on Device Auth fail
  * Do not leak the Intune IW service token in the logs
- Update to version 1.0.0+git.0.d01709b:
  * Fix policy application
  * Add remaining Linux password compliance policies
  * Add custom compliance enforcement
  * deps(rust): bump the all-cargo-updates group with 3 updates
  * deps(rust): bump the all-cargo-updates group with 5 updates
  * Add SLE15SP7 build target
  * Add RHEL 10 build target
  * Fix Intermittent auth issue AADSTSError 16000
  * Remove old utf8proc dependency
  * Add `fedora42` build target
  * Handle PRT expiration and tie to offline auth
  * Correctly delete the Hello keys on bad pin count
  * Add ability to disable Hello PIN per-service
  * Update NixOS support to 25.05
  * Handle disabled device by attempting re-enrollment
  * Always attempt confidential client creds for aad-tool
  * Include HSM option defs in himmelblau.conf man page
  * Update flake.nix
  * Improve the aad-tool cache-clear command
  * Add `mfaSshWorkaroundFlag` configuration option to Nix Flake.
  * Add the ability to remove confidential client creds
  * If bad PIN count is exceeded, delete the Hello key
  * deps(rust): bump the all-cargo-updates group with 4 updates
  * Add instructions for creating developer builds
  * Fix GDM3 first time login password prompt
  * Default HsmType should be soft
  * Add himmelblaud to tss group for TPM startup
  * Enforce strict order for the systemd units
  * Update libhimmelblau and compact_jwt
  * Fix builds w/tpm
  * aad-tool Authentication flow improvements
  * Filter out irrelevant debug in aad-tool
  * Create a unified login experience for aad-tool
  * Utilize confidential creds for aad-tool enumerate
  * himmelblau should get posix attributes w/out delegate user access
  * Always use the Object Id for mapping Group to GID
  * Update enhancement-request.md for SPI donations
  * Update bug_report.md with SPI donation
  * deps(rust): bump the all-cargo-updates group with 4 updates
  * Update build requires in README.md
  * Enforce strict order for the systemd units
  * Update FUNDING.yml with SPI Paypal donation button
  * Don't break from tasks loop when policies fail
  * Enroll in Intune as soon as it is enabled
  * Implement `decoupled hello` behavior
  * Cache encrypted PRT to disk for offline login SSO
  * Update to latest hsm-crypto
  * Enable tpm functionality
  * Allow altering the password and PIN prompt messages
  * Ensure Hello PIN lockout happens when online
  * Cache the build target output to improve build times
  * Easier build selection w/ Makefile
  * Revert mistaken removal from Makefile
  * Make the user wait longer with each incorrect PIN
  * Make the bad PIN count configurable
  * Improve aad-tool manpage
  * aad-tool fails if the user has FIDO2 enabled
  * Offline auth permits authentication with invalid Hello PIN
  * PIN complexity to match Windows
  * Update to latest SSSD idmap code
  * Add aad-tool options for setting posix attrs
  * Add scopes and redirect uris aad-tool application create
  * Add aad-tool commands for managaging extension attrs
  * deps(rust): bump the all-cargo-updates group with 4 updates
  * cargo clippy
  * cargo fmt
  * Utilize the sidtoname call for object id mapping
  * Add commands for listing/creating App registrations
  * Potential fix for code scanning alert no. 2: Workflow does not contain permissions
  * Potential fix for code scanning alert no. 4: Workflow does not contain permissions
  * Potential fix for code scanning alert: Workflow does not contain permissions
  * Never write the app_id to the server config
  * Disable passwordless Fido by default
  * Stop using deprecated `users` crate
  * When group membership lookup fails, use cached groups
  * deps(rust): bump the all-cargo-updates group across 1 directory with 11 updates
  * deps(rust): bump the all-cargo-updates group with 4 updates
  * aad-tool command for enumerating users and groups
  * Name-Based Group Matching in `pam_allow_groups` Leads to Potential Security Bypass
  * Add the configure-pam option to aad-tool man page
  * Add static idmap cache for on-prem to cloud migration
  * Update bug_report.md with request for himmelblau.conf
  * deps(rust): bump the all-cargo-updates group with 2 updates
  * Update crates in a group
  * Update crate bumps
  * Utilize new Intune compliance enforcement via libhimmelblau
  * Correct the README regarding Intune policy compliance
  * Disable Chromium policy
  * Re-enable Intune policy and add scripts and compliance policies
  * himmelblau.conf alias `domain` as `domains`
  * Support Fido auth in pam passwd
  * Add TAP support to himmelblaud and pam passwd
  * Mixed case names should properly identify Hello Key
  * Update linux-entra-sso to latest version
  * Fix group lookup for Entra Id group name
  * Fix mixed case name lookup from PRT cache
  * Crate updates
  * Fix tasks daemon debug output
  * Remove write locks where unecessary
  * Fix deadlock in nss
  * systemd notify fixes
  * Console
  * Address Feedback
  * Order services before gdb/nss-user-target
  * deps(rust): bump rpassword from 7.3.1 to 7.4.0
  * deps(rust): bump tokio from 1.44.2 to 1.45.0
  * deps(rust): bump sha2 from 0.10.8 to 0.10.9
  * deps(rust): bump systemd-journal-logger from 2.2.0 to 2.2.2
  * deps(rust): bump clap from 4.5.31 to 4.5.38
  * Update notify-debouncer-full
  * Update opentelemetry
  * Update dependencies
  * deps(rust): bump time from 0.3.39 to 0.3.41
  * Replace source filter that blacklists files with filter that whitelists files.
  * Mark himmelblau.conf as config in rpm
  * Update README.md
  * Ensure only the base URL is printed to log
  * If unix_user_get fails, wait, and try again
  * Supplying a PRT cookie to SSO doesn't require network
  * Don't send a password prompt if the network is down
  * Auth via MFA if Hello PIN fails 3 times
  * Improve Hello PIN failed auth error
  * Fix rocky9 build
  * deps(rust): bump anyhow from 1.0.96 to 1.0.98
  * deps(rust): bump libc from 0.2.170 to 0.2.172
  * deps(rust): bump cc from 1.2.16 to 1.2.19
  * Update README.md
  * deps(rust): bump tokio from 1.43.0 to 1.44.2
  * deps(rust): bump openssl from 0.10.71 to 0.10.72 in the cargo group
  * deps(rust): bump reqwest from 0.12.12 to 0.12.15
  * Update libhimmelblau in Cargo.lock
  * Fix nss and offline checks for domain aliases
  * Report error when MS Authenticator denies authorization
  * Bail out of invalid offline auth
  * Handle AADSTS errors from BeginAuth response
  * Never dump failed reqwests to the log
  * Update sccache-action version to use new cache service
  * Permit daemon to start when network is down
  * Add an nss cache for when daemon is down
  * Additional pam info cues
  * Proceed with Hello auth even with net down
  * Indicate to the user what the password and PIN are
  * Ensure pam messages are seen
  * Display the minimum PIN length during Hello setup
  * PAM should loop, not die on error
  * Ensure prompt msg remains for confirmation
  * Update bug_report.md
  * Ignore demands for setting up MS Authenticator
  * Login fails if Entra is configured to recommend MS authenticator
  * Add pam configure command to aad-tool
  * Update README.md with pam passwd instructions
  * aad-tool authtest needs to map names
  * Update demo video in README.md
  * Sign RPM packages
  * Ensure the pam module is installed correctly for SLE
  * Improve pam error handling and messaging
  * Only push cachix builds for stable releases
  * Terminate linux-entra-sso when browser terminates
  * On deb, push pam config after install
  * Increase priority of deb PAM passwd for Himmelblau
  * Improve offline state handling
  * Specify request for Entra Id password in PAM
  * QR Greeter also supports gnome-shell 47
  * Fix profile photo loading
  * Clarify pam_allow_groups in himmelblau.conf man page
  * Don't hide debug for pam_allow_groups miss
  * Handle failures in passwordless auth
  * build all root packages
  * split config options that can be defined per-domain from those which are global only
  * configure cachix signing and upload in ci
  * deps(rust): bump serde_json from 1.0.138 to 1.0.140
  * deps(rust): bump serde from 1.0.218 to 1.0.219
  * deps(rust): bump time from 0.3.37 to 0.3.39
  * deps(rust): bump bytes from 1.10.0 to 1.10.1
  * deps(rust): bump pkg-config from 0.3.31 to 0.3.32
  * Entra Id is case insensitive, cache lookup must match
  * deps(rust): bump ring from 0.17.9 to 0.17.13 in the cargo group
  * Support CompanionAppsNotification mfa method
  * QR code for gnome-shell greeter
  * Allow tasks to start if AccountsService dir missing
  * Remove invalid python dependency from sso package
  * Fixes https://github.com/himmelblau-idm/himmelblau/issues/397
  * Clear server config when clearing cache
  * Update version in the Cargo.lock
  * deps(rust): bump async-trait from 0.1.86 to 0.1.87
  * deps(rust): bump chrono from 0.4.39 to 0.4.40
  * Fix himmelblau.conf man page cn_name_mapping entry
  * deps(rust): bump pem from 3.0.4 to 3.0.5
  * deps(rust): bump serde from 1.0.217 to 1.0.218
  * Version 1.0.0
  * deps(rust): bump cc from 1.2.15 to 1.2.16
  * Update workflow versions
- Update to version 0.9.21+git.0.6963ee0:
  * Fix authentication when passkeys are enabled
  * Version 0.9.20
  * Fix Intermittent auth issue AADSTSError 16000
  * Version 0.9.19
  * Disable cookies
  * Version 0.9.18
  * Cache the build target output to improve build times
  * Easier build selection w/ Makefile
  * Never write the app_id to the server config
- Update to version 0.9.17+git.0.4a97692:
  * Version 0.9.17
  * Offline auth permits authentication with invalid Hello PIN; (CVE-2025-53013).
  * Cargo fmt
  * Don't neglect to sign the rpm packages
- Update to version 0.9.16+git.0.aac2205:
  * Disable passwordless Fido by default
  * Stop using deprecated `users` crate
  * Version 0.9.16
  * When group membership lookup fails, use cached groups
  * Just report whether some passwordless type is available
  * Version 0.9.15
  * Name-Based Group Matching in `pam_allow_groups` Leads to Potential Security Bypass
  * Version 0.9.14
  * Support Fido auth in pam passwd
  * Add TAP support to himmelblaud and pam passwd
  * Mixed case names should properly identify Hello Key
  * Remove write locks where unecessary
  * Fix group lookup for Entra Id group name
  * Version 0.9.13
  * Fix mixed case name lookup from PRT cache
- Update to version 0.9.12+git.0.99b5ca6:
  * Version 0.9.12
  * Fix deadlock in nss
  * systemd notify fixes
- Update to version 0.9.11+git.0.04ef9c8:
  * Ensure only the base URL is printed to log
  * Version 0.9.11
  * Supplying a PRT cookie to SSO doesn't require network
  * Improve Hello PIN failed auth error
  * Fix rocky9 build
  * Fix nss and offline checks for domain aliases
  * Report error when MS Authenticator denies authorization
  * Bail out of invalid offline auth
  * Handle AADSTS errors from BeginAuth response
  * Never dump failed reqwests to the log
  * Update sccache-action version to use new cache service
  * Permit daemon to start when network is down
  * Version 0.9.10
  * Add an nss cache for when daemon is down
  * Additional pam info cues
  * Proceed with Hello auth even with net down
  * Indicate to the user what the password and PIN are
  * Specify request for Entra Id password in PAM
  * Ensure pam messages are seen
  * Display the minimum PIN length during Hello setup
  * PAM should loop, not die on error
  * Ensure prompt msg remains for confirmation
- Update to version 0.9.9+git.0.5425b98:
  * Version 0.9.9
  * Ignore demands for setting up MS Authenticator
- Update to version 0.9.8+git.0.3f20b1b:
  * configure cachix signing and upload in ci
  * Version 0.9.8
  * Improve pam error handling and messaging
  * Version 0.9.7
  * Terminate linux-entra-sso when browser terminates
  * On deb, push pam config after install
  * Increase priority of deb PAM passwd for Himmelblau
  * Improve offline state handling
  * QR Greeter also supports gnome-shell 47
  * Version 0.9.6
  * Fix profile photo loading
  * Clarify pam_allow_groups in himmelblau.conf man page
  * Don't hide debug for pam_allow_groups miss
  * Version 0.9.5
  * Handle failures in passwordless auth
- Update to version 0.9.4+git.0.9909238:
  * Version 0.9.4
  * bump ring from 0.17.9 to 0.17.13
  * Entra Id is case insensitive, cache lookup must match
  * Support CompanionAppsNotification mfa method
  * Version 0.9.2
  * QR code for gnome-shell greeter
  * Allow tasks to start if AccountsService dir missing
  * Remove invalid python dependency from sso package
  * Version 0.9.1
  * himmelblaud-tasks stops due to missing dir
  * Clear server config when clearing cache
  * Fix himmelblau.conf man page cn_name_mapping entry
  * Update workflow versions
  * Document the requirements for app_id
  * Properly handle aad error from auth code req
  * Provide a group gid fallback for rfc2307 id map
  * Remove option defs from the default debian himmelblau.conf
  * Ensure tasks daemon creates files w/ correct gid
  * Isolate the name mapping so it only happens if enabled
  * Default to request group info via Edge browser
  * Avoid modifying the cache entries
  * Utilize systemd notify to avoid tasks started fail
  * Ubuntu PAM module configuration to change PIN
  * Resolve migration error `real_gidnumber` missing
  * deps(rust): bump libc from 0.2.169 to 0.2.170
  * deps(rust): bump clap_complete from 4.5.45 to 4.5.46
  * Fix some clippy warnings
  * Cause tasks daemon to honor configured debug
  * Fetch user profile photo via tasks daemon
  * deps(rust): bump clap from 4.5.30 to 4.5.31
  * deps(rust): bump anyhow from 1.0.95 to 1.0.96
  * deps(rust): bump cc from 1.2.14 to 1.2.15
  * Add apparmor whitelisting for nss mapping cache
  * Dramatically improve debug logging
  * Move the NixOS CI to a different workflow (w/out main)
  * Add a sample himmelblau.conf in docs
  * Resolve missed auth code redirect
  * Implement mapped name caching in NSS
  * Add script on-behalf-of flow for logon scripts
  * Update Cargo.lock deps
  * Update installation instructions in the README
  * Donation requests in the issue templates
  * Update README.md with contribute badge
  * Update README.md with contributions statement
  * Create FUNDING.yml
  * Update README.md
  * fix failing test expecting /bin/echo to be available
  * add nixos ci tests
  * Use sd_notify to signal service readiness, prevent startup failures
  * Add build command to Makefile
  * Update documentation
  * Add NixOS Module
  * enable build with nix
  * Implement logon name script mapping
  * deps(rust): update libnss requirement from 0.8.0 to 0.9.0
  * Only the himmelblau-sso package should conflict with intune-portal
  * deps(rust): update gethostname requirement from 0.5.0 to 1.0.0
  * deps(rust): update lru requirement from ^0.12.3 to ^0.13.0
  * deps(rust): update rand requirement from ^0.8.5 to ^0.9.0
  * Fetch the group extension attrs with the group object
  * Ensure access token has the GroupMember.Read.All scope
  * Replace the unix attribute option with a rfc2307 idmap
  * Map the extended attr gidNumber to primary group
  * Permit configuration of an Application for group fetching
  * Use posix attributes synchronized from on-prem AD
  * Fix debug option in himmelblau.conf
  * Add a span around server initialisation for correct log coalescing
  * Fix GOA crash when krb5.conf doesn't include /etc/krb5.conf.d
  * Fix libutf8proc dependency issue on Ubuntu 22.04
  * Fix Credentials leaking in the debug log
  * deps(rust): update rusqlite requirement from ^0.32.0 to ^0.33.0 (#345)
  * Decrease CI build time
  * Fix CI failure caused by package revision
  * Support password changes when demanded
  * Update README.md
  * Entra Id no longer permits SFA enrollment
  * Rewrite the sso code in Rust
  * Add profile photo fetching
  * Version 0.9.0
- Update to version 0.8.3+git.5.1510f5a:
  * Decrease CI build time
  * Fix CI failure caused by package revision
  * Version 0.8.4
  * Fix libutf8proc dependency issue on Ubuntu 22.04
  * Version 0.8.3
  * Fix Credentials leaking in the debug log
- Update to version 0.8.2+git.0.553c632:
  * Version 0.8.2
  * Entra Id no longer permits SFA enrollment
  * Remove SSO python dependencies
  * Version 0.8.1
  * Rewrite the sso code in Rust
- Update to version 0.8.0+git.0.249ba5f:
  * Branch version stable-0.8.x
  * Passwordless auth doesn't provide polling numbers
  * Resolve deadlock introduced by Fido auth
  * Implement NGC Passwordless authentication
  * Remove unused commit checklist
  * deps(rust): update bindgen requirement from 0.70.1 to 0.71.1
  * Update libhimmelblau version
  * Custom domains matching
  * Fix IdmapError to indicate the failure
  * Fix Fedora build dependencies
  * Add Fido MFA
  * Add Debian 12 packaging
  * Disable SELinux labeling on build container volume mounts
  * Update github CI dependencies
  * Implement Hello Pin changes via PAM
  * Formatting fix
  * Utilize HimmelblauConfig directly in pam and nss
  * Add config parsing unit tests
  * Fix incorrect default domain
  * Fix config hsm type Tpm error
  * Include multi-domain important info in himmelblau.conf man
  * Update to the latest libhimmelblau
  * Add DAG flow as a fallback for MFA
  * Fix CVE-2024-11738: rustls network-reachable panic in `Acceptor::accept`
  * Update README.md with build requires
  * Enable module for utf8proc-devel in Rocky8
  * Remove the org.samba.himmelblau dbus service
  * Fix missing dependency utf8proc_NFKC_Casefold
  * The tasks daemon needs /etc/groups write access
  * Revert "Fix Ubuntu PAM fallback to password prompt"
  * Fix Ubuntu PAM fallback to password prompt
  * Increase the cache timeout to 5 minutes
  * Always fetch and cache the graph url
  * Package Siemens Linux Entra SSO for Himmelblau
  * Add Kerberos CCache support
  * Update the tasks daemon man page
  * Add a himmelblau.conf man page, and package the man pages
  * Add SLE15SP6 packaging
  * Add Fedora 41 packaging
  * Add Fedora Rawhide packaging
  * Provide enhancement request template
  * Create an issue template
  * Hello support depends on openssl3
  * Fix sshd rpm depends
  * Resolve RPM dependencies automatically
  * Revert "deps(rust): update notify-debouncer-full requirement from 0.3 to 0.4"
  * Add openSUSE Tumbleweed packaging
  * Fix RPM packaging placement of systemd files
  * Remove the failed attempt at debian packaging
  * Add stable-0.7.x to CI workflows
  * Version 0.8.0</changelog>
  <changelog author="david.mulder@suse.com" date="1773230400">- Fix SELinux module packaging to use standard policy macros (bsc#1258236):
  * Build and install precompiled himmelblaud.pp at package build time
  * Replace custom semodule scriptlets with %selinux_modules_install/uninstall
- Update to version 2.3.8+git0.dec3693 (CVE-2026-31979, bsc#1259548):
  * Version 2.3.8
  * Add PrivateTmp back to Tasks Daemon
  * Drop dead code
  * Drop krb5 ccache dir code
  * Add a TODO comment
  * Drop non working packaged krb5 snippet file
  * Write kerberos config snippet
  * Extend resolver interface to return kerberos config together with TGTs
  * Backport SELinux fixes from main
  * Use libkrimes to store TGTs
- Update to version 2.3.7+git0.81088cd:
  * Version 2.3.7
  * cargo vet
  * Fix AWS-LC has PKCS7_verify Certificate Chain Validation Bypass
  * Revert dependency change which broke the nightly build
  * gen_dockerfiles: only himmelblaud has tpm feature, fix all others
  * fix(build): gen_dockerfiles.py mutates shared features list mid-loop
  * Update to libhimmelblau
  on leap 15.6, selinux-policy-devel doesn't exist</changelog>
  <changelog author="david.mulder@suse.com" date="1775044800">- - Update to version 2.3.9+git0.a9fd29b:
  * cargo vet
  * nss: block local group-name collisions on getgrnam (CVE-2026-34397).
  * update aws-lc-sys to 0.39.0 for security fixes
  * update rustls-webpki to 0.103.10 for CRL revocation fix
  * Version 2.3.9
  * cargo vet
  * packaging: fix if/else block for debian's postrm
  * Update apparmor.unix-chkpwd.local (Issue #1252)
  * When Hello user encounters SSPR demand, be permissive
  * add tests for sudo_groups functionality
  * Fix config tests to ignore local host config
  * Do not clear $NOTIFY_SOCKET when calling sd_ready
  * Fix token cache 24h purge
  * broker: use SSO server nonce for PRT only when provided
  * Fix pam_himmelblau blocking local user password changes (#1199)
  * Remove unused File import
  * Use is_ascii_alphanumeric() for account_id validation
  * Fix path traversal in LoadProfilePhoto AccountsService writes
  * Drop initialization tracing span
  * himmelblau-hsm-pin-init: drop RemainAfterExit=yes
  * Add fallback behavior when consent is required
  * qr-greeter: enable extension without socket noise
  * debian: make install/remove noninteractive; reduce QR postinst noise; soften missing hello prt
  * Never respond with BadRequest without error detail
  * deps(rust): bump the all-cargo-updates group across 1 directory with 7 updates</changelog>
</package>
<package pkgid="d740ea5f2f01b108876598db30c155ed4068d05d8163fadbd3725e3f33068bdf" name="himmelblau" arch="x86_64">
  <version epoch="0" ver="2.3.9+git0.a9fd29b" rel="150700.3.15.1"/>
  <changelog author="david.mulder@suse.com" date="1716379200">- Update to version 0.4.0+git.4.63e3704:
  * Fix a refresh token leak in debug from msal</changelog>
  <changelog author="david.mulder@suse.com" date="1716984000">- Update to version 0.4.1+git.0.41dd0dc:
  * Version 0.4.1
  * Use latest msal with MFA fixes
  * PhoneAppNotification is not a cred request algorithm
  * The polling_interval is in milliseconds, not seconds
  * OneWaySMS is additionally a valid OTP
  * Relicensing as GPL3, as SSSD source inclusion requires</changelog>
  <changelog author="david.mulder@suse.com" date="1721044800">- Update to version 0.4.3+git.2.6379abc:
  * Specifically use msal 0.2.6
  * Version 0.4.3
  * update libnss requirement from 0.7.0 to 0.8.0
  * himmelblaud stops working after suspend
  * Version 0.4.2
  * Fix ConsolidatedTelephony MFA method</changelog>
  <changelog author="david.mulder@suse.com" date="1725451200">- Update to version 0.5.0+git.0.22f84f0:
  * Update workflows for 0.5.x
  * Update Debian dependencies in README.md
  * Compilation fails on Ubuntu, missing ldb header
  * Fix base32 with kandim updates
  * deps(rust): update base32 requirement from ^0.4.0 to ^0.5.0
  * deps(rust): update scim_proto requirement from ^0.2.1 to ^1.3.2
  * deps(rust): update bindgen requirement from 0.69.4 to 0.70.1
  * Fix CI failures caused by cargo 1.80.1
  * Update to libhimmelblau version 0.2.9
  * deps(rust): update rusqlite requirement from ^0.31.0 to ^0.32.0
  * deps(rust): update tonic requirement from 0.11.0 to 0.12.0
  * update libnss requirement from 0.7.0 to 0.8.0
  * Switch to using libhimmelblau
  * himmelblaud stops working after suspend
  * Update required packages for tumbleweed
  * Disable the SFA fallback by default
  * Fix ConsolidatedTelephony MFA method
  * Use the group ID for the name if no display name
  * Use latest msal with MFA fixes
  * PhoneAppNotification is not a cred request algorithm
  * The polling_interval is in milliseconds, not seconds
  * OneWaySMS is additionally a valid OTP
  * Relicensing as GPL3, as SSSD source inclusion requires
  * Utilize the graph code in msal
  * config: Remove comments about experimental policy enforement
  * Remove the experimental policy code from the id provider
  * Fix a refresh token leak in debug from msal
  * Correct README details
  * Always normalize idmap upn inputs
  * Add video links to the README
  * Minor updates to the Contributing section
  * Add a Installation section to the README
  * Add the new SSSD idmap build deps to the README
  * Add a section about donations
  * Include the Samba Technical matrix channel
  * Add github workflows for the 0.4.x branch
  * Version 0.5.0 bump for main</changelog>
  <changelog author="william.brown@suse.com" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="david.mulder@suse.com" date="1727870400">- Update to version 0.6.0+git.0.b8dae18:
  * Attempt to fix the cargo version in launchpad build
  * Add branch stable-0.6.x to the workflows
  * Install the pam module to the proper location
  * Update README.md
  * Add a debug option to the config
  * Add a pam option for the OpenSSH 2876 workaround
  * Update to the latest libhimmelblau
  * Authorize all users when pam_allow_groups is empty
  * Fix clippy warnings
  * Fix pam echo not displayed via ssh
  * Fix pam failure to register Pin following mfa poll
  * Fork from kanidm
  * Version 0.6.0
  * Add cargo deb build
  * Version 0.5.3
  * Improve the README installation instructions
  * Add `make install` command
  * Improve Debian/Ubuntu install instructions
  * Fix tag push permissions for tag-version workflow
  * Version 0.5.2
  * Add a version check script
  * Version 0.5.1
  * Remove the rustc dependency, breaking rustup
  * Added Debian packaging workflow and files</changelog>
  <changelog author="david.mulder@suse.com" date="1729598400">- Update to version 0.6.14+git.0.bbda0b6:
  * Version 0.6.14
  * postinst should not fail on patch or apparmor update
  * Version 0.6.13
  * Don't use sudo in postinst/postrm scripts for deb
  * Version 0.6.12
  * PAM should be placed first in the stack
  * Match the object ID of the fake user and group
  * Version 0.6.11
  * Move sshd config into it's own debian package
  * Version 0.6.10
  * Allow the graph to start w/out network
  * Add hello_pin_min_length conf option
  * Version 0.6.9
  * Don't attempt SFA fallback if AADSTSError
  * Have libhimmelblau handle the DAG fallback
  * Add a warning to user that SSH needs restarted
  * Version 0.6.8
  * Ensure local users are ignored when CN mapping
  * Ensure DAG is rejected if lifetime expires
  * Version 0.6.7
  * Rework the poll logic to resolve timeout issues
  * Version 0.6.6
  * Add a sshd soft depends for the deb package
  * CN name mapping in PAM and NSS
  * Version 0.6.5
  * Make CN an optional home directory attribute
  * Version 0.6.4
  * Add Ubuntu pam-config for pam_himmelblau
  * Configuration patches for himmelblau on Debian
  * Version 0.6.3
  * Bug in pam which needs defended against
  * Version 0.6.2
  * Never return the Pam result from get_user()
  * Correct installation directory of the deb pam module
  * Makefile typo fixes
  * Add libdbus-1-dev dep
  * Version 0.6.1
  * Debian build requires libdbus-1-dev</changelog>
  <changelog author="david.mulder@suse.com" date="1732536000">- Update to version 0.7.2+git.0.c76ac0e:
  * Version 0.7.2
  * Hello support depends on openssl3
  * Version 0.7.1
  * Fix sshd rpm depends
  * Resolve RPM dependencies automatically
  * Revert "deps(rust): update notify-debouncer-full requirement from 0.3 to 0.4"
  * Add openSUSE Tumbleweed packaging
  * Fix RPM packaging placement of systemd files
  * Remove the failed attempt at debian packaging
  * Add stable-0.7.x to CI workflows
  * deps(rust): update utoipa requirement from 4.0.0 to 4.2.0
  * deps(rust): update hashbrown requirement from 0.14.0 to 0.15.1
  * Remove missing feature causing warnings
  * deps(rust): update notify-debouncer-full requirement from 0.3 to 0.4
  * Specify scopes when making an SSO request
  * Implement logon script for ensuring compliance
  * Option for adding Entra Id users to local groups
  * Configure EL sshd with ChallengeResponseAuthentication yes
  * Add rocky 8 packaging
  * Add RPM packaging for EL9
  * Modify Ubuntu defaults to fix snaps
  * Resolve Libreoffice fails to start on Ubuntu
  * Minor formatting fix
  * Revert RwLock -&gt; Arc&lt;Mutex&gt; change in idmap
  * Ignore broker scopes requests for now
  * Ensure every file specifies the proper license
  * postinst should not fail on patch or apparmor update
  * Install pam module to additional location via make
  * Add sshd config to the Makefile
  * Don't use sudo in postinst/postrm scripts for deb
  * PAM should be placed first in the stack
  * Add the libutf8proc-dev dep for deb
  * Match the object ID of the fake user and group
  * Make it possible to stop the broker service
  * Move sshd config into it's own debian package
  * Allow the graph to start w/out network
  * Add hello_pin_min_length conf option
  * Don't attempt SFA fallback if AADSTSError
  * Have libhimmelblau handle the DAG fallback
  * Add a warning to user that SSH needs restarted
  * Ensure local users are ignored when CN mapping
  * Ensure DAG is rejected if lifetime expires
  * Rework the poll logic to resolve timeout issues
  * Add a sshd soft depends for the deb package
  * CN name mapping in PAM and NSS
  * Make CN an optional home directory attribute
  * Remove the sssd build dependencies
  * Configuration patches for himmelblau on Debian
  * Simplify PAM get_item_string calls
  * Bug in pam which needs defended against
  * Fix deb build by adding Broker service file
  * WIP: Install Ubuntu unix-chkpwd apparmor deps
  * Ensure make install places pam_himmelblau correctly
  * Add Ubuntu pam-config for pam_himmelblau
  * Never return Err(PAM_SUCCESS) from get_user
  * Never return the Pam result from get_user()
  * Revert "Speed up nss requests w/out auth attempt"
  * Speed up nss requests w/out auth attempt
  * Fix some broker responses
  * Fixes for the dbus broker
  * Attempt to fix the cargo version in launchpad build
  * Makefile typo fixes
  * Version 0.7.0
  * Add libdbus-1-dev dep
  * Improve the README installation instructions
  * Add `make install` command
  * Improve Debian/Ubuntu install instructions
  * Fix tag push permissions for tag-version workflow
  * Add a version check script
  * Remove the rustc dependency, breaking rustup
  * Add a debug option to the config
  * DBus requires that the service file match the name
  * Add a pam option for the OpenSSH 2876 workaround
  * Update to the latest libhimmelblau</changelog>
  <changelog author="david.mulder@suse.com" date="1732536001">- Update to version 0.7.4+git.0.d1291c6:
  * Version 0.7.4
  * Fix missing dependency utf8proc_NFKC_Casefold
  * Package Siemens Linux Entra SSO for Himmelblau
  * Add SLE15SP6 packaging
  * Add Fedora 41 packaging
  * Add Fedora Rawhide packaging
  * The tasks daemon needs /etc/groups write access
  * Version 0.7.3
  * Increase the cache timeout to 5 minutes
  * Always fetch and cache the graph url</changelog>
  <changelog author="david.mulder@suse.com" date="1732536002">- Update to version 0.7.5+git.0.8f421b0:
  * Version 0.7.5
  * Remove the org.samba.himmelblau dbus service</changelog>
  <changelog author="david.mulder@suse.com" date="1733140800">- Update to version 0.7.7+git.0.b48d0bb:
  * Version 0.7.7
  * Fix CVE-2024-11738: rustls network-reachable panic in `Acceptor::accept`
    (bsc#1233949).
  * Version 0.7.6
  * Enable module for utf8proc-devel in Rocky8</changelog>
  <changelog author="david.mulder@suse.com" date="1733400000">- Update to version 0.7.9+git.0.93655d2:
  * Version 0.7.9
  * Update to the latest libhimmelblau
  * Version 0.7.8
  * Add a himmelblau.conf man page, and package the man pages
  * Add DAG flow as a fallback for MFA</changelog>
  <changelog author="david.mulder@suse.com" date="1734004800">- Update to version 0.7.13+git.0.d790d31:
  * Version 0.7.13
  * Fix Fedora build dependencies
  * Version 0.7.12
  * Add Debian 12 packaging
  * Update github CI dependencies
  * Version 0.7.11
  * Implement Hello Pin changes via PAM; (jira#PED-11682).
  * Utilize HimmelblauConfig directly in pam and nss
  * Version 0.7.10
  * Add config parsing unit tests
  * Fix incorrect default domain
  * Fix config hsm type Tpm error
  * Include multi-domain important info in himmelblau.conf man</changelog>
  <changelog author="david.mulder@suse.com" date="1737979200">- Update to version 0.7.15+git.0.7a70a0b:
  * Version 0.7.15
  * Fix Credentials leaking in the debug log; (bsc#1236354).
  * Version 0.7.14
  * Update libhimmelblau version
  * Custom domains matching</changelog>
  <changelog author="david.mulder@suse.com" date="1746532800">- Update to version 0.7.16+git.0.f6e7faf:
  * Version 0.7.16
  * Fix CI failure caused by package revision
  * Update sccache-action version to use new cache service
  * CVE-2025-3416: Fix openssl Use After Free; (bsc#1242648).</changelog>
  <changelog author="david.mulder@suse.com" date="1750161600">- Update to version 0.7.17+git.0.1ebdab0:
  * CVE-2025-5791: Stop using deprecated `users` crate; (bsc#1244202).</changelog>
  <changelog author="david.mulder@suse.com" date="1756814400">- Update to version 0.7.18+git.0.8485a75:
  * Version 0.7.18
  * deps(rust): bump tracing-subscriber in the cargo group; (bsc#1249013), (CVE-2025-58160)</changelog>
  <changelog author="david.mulder@suse.com" date="1771934400">- Update to version 2.3.5+git0.9dd526c; (jsc#PED-14511):
  * Better handle Intune API version
  * deps(rust): bump the all-cargo-updates group with 8 updates; (bsc#1257904), (CVE-2026-25727)
  * Update make vet from main branch
  * pam_himmelblau: call split_username once in chauthtok
  * pam_himmelblau: return PAM_IGNORE in chauthtok for local users
  * Don't attempt a DAG when Hello fails with SSPR demand
- Update to version 2.3.4+git0.db5df80:
  * Version 2.3.4
  * cargo vet
  * deps(rust): bump the all-cargo-updates group across 1 directory with 8 updates
  * Revert sketching update (which breaks SLE16 build)
- Update to version 2.3.3+git0.25e8b73:
  * Version 2.3.3
  * cargo vet
  * /var/cache/private/himmelblaud should not be created tmpfiles
  * Updatee python vers for dataclasses dep
  * deps(rust): bump the all-cargo-updates group across 1 directory with 3 updates
  * Generate pin init service file systemd &lt; 250
  * Checkin missing himmelblaud.if file for SELinux
  * Resolve typos in selinux package commands
- Update to version 2.3.2+git0.5a7a598:
  * Compile SELinux policy at install time for cross-distro compatibility
  * Improve PAM configuration on openSUSE/SLE
  * Fix SELinux policy
  * Add a git hook to ensure selinux policy is tested
  * Ignore generated himmelblau-hsm-pin-init service file
  * Refactor SELinux policy for cross-distro compatibility
  * cargo vet
  * Fix NSS lookup for mapped local users
  * Skip OS version compliance checks when min/max values are empty
- Update to version 2.3.1+git0.2418ec2:
  * Version 2.3.1
  * Remove references to qrcodegen (these are 3.x features)
  * QR Greeter compatibility for old GNOME
  * Enable QR greeter automatically
  * ci: Use latest cargo-vet from git to fix CI
  * Fix HSM pin migration failure on Debian/Ubuntu upgrades from v1.4.x
  * Version 2.3.0
  * cargo vet
  * Update make vet from main branch
  * Autostart the daemons on fresh install or upgrade
  * Restart sshd when installing the ssh config
  * Allow tasks daemon to write krb ccache
  * Do not enumerate mapped users in NSS
  * deps(rust): bump the all-cargo-updates group across 1 directory with 8 updates
  * Update libhimmelblau to latest version
  * Fix Tumbleweed build
  * cargo vet
  * Version 2.2.0
  * Update libhimmelblau to 0.8.x series
  * deps(rust): bump the all-cargo-updates group with 17 updates
  * Only use OpenSSH bug workaround for ssh service
  * Fix debug noise from removing user from sudo group
  * systemd: install files to /usr/lib/, not /etc/
  * Version 2.1.0
  * Fix nightly authselect build failure
  * Generate the authselect profiles for each distro
  * Improve pam config handling in aad-tool
  * Make `aad-tool configure-pam` detect location of pam files
  * Version 2.0.5
  * /var/lib/private/himmelblaud should be owned by root
  * Use tmpfiles.d to create himmelblaud private data directory
- Resolve mode mismatch with Chromium package.
- Update to version 2.0.4+git.2.5d26a19:
  * deps(rust): bump the all-cargo-updates group with 13 updates
  * Version 2.0.4
  * Update kanidm_build_profiles mask version
  * Utilize cargo vet from main
  * Add policies cache patch via systemd-tmpfiles
- Update to version 2.0.3+git.4.4f6e025:
  * Fix man page comments about change idmap_range
  * Stub picky-krb for osc build
  * Stub a kanidm_build_profiles which builds in osc
  * Ensure nss cache is created on Ubuntu/Debian
  * Request a user token if NSS hasn't been called
  * Version 2.0.3
  * Add nss cache patch via systemd-tmpfiles
  * Version 2.0.2
  * Recommend `patch` with the pam package
  * Fix passwordless FIDO authentication not being used when available
  * Git workflow updates for stable-2.x
  * Only warn on Intune failure
  * Version 2.0.1
  * Force o365 desktop files to always rebuild
  * Always rebuild the o365 apps
  * Add restart on-failure to systemd services
  * Clarify `domain` SHOULD match login domain
  * Remove warning about `domain` himmelblau.conf opt
  * Pseudo eliminate multi-tenant and domains section
  * Revert "Fix Hello PIN lookup when an alias domain"
  * Comment out `KbdInteractiveAuthentication on` in sshd conf
  * Check the nxset sooner, to avoid unwanted errors
  * Recommend oddjob_mkhomedir with authselect
  * Pin libhimmelblau to 0.7.x
  * Deprecate Fedora 41
  * Cargo vet
  * deps(rust): bump the all-cargo-updates group with 11 updates
  * Bump github/codeql-action from 4.30.8 to 4.31.2
  * Bump cachix/install-nix-action from 31.8.1 to 31.8.2
  * Bump actions/upload-artifact from 4.6.2 to 5.0.0
  * cargo clippy and rebase fix
  * fixup! add extra debug output to NotFound error code
  * force error output to show up in CI logs
  * wrap repeated sources of IdpError::NotFound in helper functions
  * add extra debug output to NotFound error code
  * use direnv for loading the nix devshell
  * We should still encourage mapping by name
  * Add support for Fedora 43
  * Provide a offline 'breakglass' mode
  * cargo clippy
  * Add warning about incorrect nsswitch configuration
  * Distinguish between online and offline token fail
  * Ensure user token uses original name
  * Fix alias domain in auth result causing failure
  * Resolve cargo clippy warnings
  * Only map on cn name for the primary domain
  * Install systemd in build scripts for gen service
  * Fix systemd version parsing
  * cargo vet
  * Update libhimmelblau to 0.7.19
  * Resolve SELinux build failures in nightly (part 2)
  * Rocky container image updates were failing
  * Warn instead of error when no idmap_range specified
  * deps(rust): bump the all-cargo-updates group across 1 directory with 7 updates
  * Trim whitespace from local group names
  * Fix borrowing error
  * Fix reference to local_sudo_group in condition
  * Only run sudo_groups if local_groups does not contain local_sudo_group
  * Leave SELinux in permissive mode for Himmelblau
  * Resolve SELinux build failures in nightly
  * nix: add join_type option to nixos-module settings
  * Build host configuration changes
  * Ensure that hsm_pin isn't present decrypted
  * Document Soft HSM changes to TPM bound
  * Disable SELinux by default on NixOS
  * sh doesn't have `source`
  * Encrypt hsm-pin using systemd-creds
  * Recommend uuid id mapping
  * Improve himmelblau.conf man page formatting
  * Implement Local User Mapping
  * Add o365 dependency for jq
  * Add selinux rules for gdm login
  * Narrow the scope of selinux policy with audit2allow
  * Generate the systemd service files
  * Fix selinux build for SLE16
  * Resolve SLE16 build dependency failure
  * Fix the rawhide build
  * Mask the sshkey-attest package
  * Bump cachix/install-nix-action from 31.7.0 to 31.8.1
  * cargo vet dependency updates
  * deps(rust): bump the all-cargo-updates group across 1 directory with 13 updates
  * Bump actions/dependency-review-action from 4.8.0 to 4.8.1
  * Bump cachix/install-nix-action from 31.7.0 to 31.8.0
  * Bump github/codeql-action from 3.30.5 to 4.30.8
  * Bump ossf/scorecard-action from 2.4.2 to 2.4.3
  * SELinux improvements
  * Fix a typo in package gen scripts
  * cargo fmt
  * Permit NSS response for mapped primary fake group
  * Fix Nix Error With Fuzz
  * Decrease CI fuzzer setup time
  * Document join types
  * Support for Entra registered devices
  * Run `cargo test` in a container
  * Bump cachix/install-nix-action from 31.6.2 to 31.7.0
  * cargo vet
  * deps(rust): bump the all-cargo-updates group across 1 directory with 2 updates
  * Bump github/codeql-action from 3.30.4 to 3.30.5
  * Use pastey crate instead of unmaintained paste
  * cargo vet
  * Pin unmaintained serde_cbor dep to serde_cbor_2
  * Resolve tower-http `cargo audit` warning
  * Replace unmaintained fxhash with own version
  * Resolve warning about workflow top level write permissions
  * Remove dependabot automerge
  * Resolve division by 0 in idmap code
  * deps(rust): bump the all-cargo-updates group across 1 directory with 3 updates
  * [StepSecurity] ci: Harden GitHub Actions
  * Only idmap against initialized domains
  * Resolve invalid init of idmap with same domain
  * Resolve division by 0 in idmap code
  * Add fuzzing of idmap code
  * Add basic fuzzing of the config options
  * cargo clippy
  * Resolve error found by fuzzing
  * cargo vet prune
  * deps(rust): bump regex in the all-cargo-updates group
  * Bump actions/dependency-review-action from 4.7.3 to 4.8.0
  * Bump actions/checkout from 3.6.0 to 5.0.0
  * Bump cachix/cachix-action from 14 to 16
  * Bump ossf/scorecard-action from 2.4.0 to 2.4.2
  * Bump cachix/install-nix-action from 25 to 31
  * Add the OpenSSF Best Practices badge
  * Add scorecard badge
  * [StepSecurity] Apply security best practices
  * Fix group static mapping
  * Move aad-tool idmap cache clear to the idmap cmd
  * Resolve errant "Hello key missing." messages
  * Update flake.nix
  * Slow the dependabot update frequency
  * Audit dependabot updates
  * deps(rust): bump the all-cargo-updates group across 1 directory with 11 updates
  * feat: Add support for aarch64 on Debian-based distributions
  * Resolve possible invalid pointer dereferences
  * Cargo clippy
  * Cargo fmt
  * Avoid revealing account ids in debug log
  * Cause doc links to open in the correct apps
  * Permit opening multiple instances of Word/Excel
  * Modify systray and app close behavior
  * Don't use questionably licensed icons for o365
  * Resolve NixOS CI failure
  * Fix building w/out deprecated interactive feature
  * Update himmelblau.conf.5 sudo_groups example
  * Entra group based sudo access
  * Audited the cargo updates
  * deps(rust): bump the all-cargo-updates group with 6 updates
  * Vet libhimmelblau
  * Add `make vet` command
  * Update deny.toml
  * Remove incompatible licenses from deps
  * Fix RHEL8 package signing
  * Add SBOM generation
  * Add an IRP checklist for security incidents
  * Run the nixos build/release on the correct version
  * Add crate dependency auditing on MR
  * Add some exceptions
  * Initialize cargo vet
  * Remove in-tree kanidm dependencies
  * Fix Hello PIN lookup when an alias domain
  * Raise maximum group lookup from 100 to 999
  * Always work with lowercase account names
  * Modify FUNDING.yml for funding sources
  * Remove glib dependency
  * deps(rust): bump the all-cargo-updates group with 10 updates
  * Add CI check for licenses
  * Update dependabot.yml to target all stable branches
  * Add authselect module for Rocky/Fedora
  * Recommend packages, instead of require
  * Add a Contributing document
  * Add a Code of Conduct
  * add withSelinux flag to nix build, brings SELinux binaries into the build environment.
  * deps(rust): bump tracing-subscriber in the cargo group
  * Don't overwrite the himmelblau.conf on rpm upgrade
  * Add help output to the Makefile
  * Fix building packages with docker in root mode
  * Update to latest libhimmelblau and identity_dbus_broker
  * Make PRT SSO cookie via broker work as well for Edge
  * Make broker work for Edge
  * Generate Office 365 desktop apps
  * Update README
  * Add `make uninstall` command
  * Remove the deprecated tests suite
  * Himmelblau no longer has git submodules
  * Make install using packages
  * Add Debian 13 packages
  * Generate Dockerfiles automatically
  * Add SELinux configuration
  * Himmelblau daemon requires system tss user
  * Add cron dependency for Intune scripts
  * Do not mangle /usr/etc configuration files
  * Fix building packages with docker in root mode
  * deps(rust): bump the all-cargo-updates group with 11 updates
  * deps(rust): bump the all-cargo-updates group with 7 updates
  * Add SLE16 (beta) build target
  * Automatically append to nsswitch.conf in postinst
  * Correct the RPM postinst script syntax
  * Fix Kerberos credential cache permissions
  * Set file owner and group before writing its content
  * Create SECURITY.md
  * deps(rust): bump the all-cargo-updates group with 6 updates
  * Rev the dev version to 2.0.0
  * Ensure alias domains match when checking Intune device id
  * Debian 12 doesn't support ConditionPathExists and notify-reload
  * Write scripts policy to a readable directory
  * Apply Intune policies right after enrollment
  * Add more debug instrumentation
  * Provide device_id to Intune enrollment if not cached
  * Ensure nss cache directory is created during install
  * Remove /var/cache/himmelblaud access from tasks daemon
  * Resolve daemon startup absolute path warnings
  * Delay Intune enrollment on Device Auth fail
  * Do not leak the Intune IW service token in the logs
- Update to version 1.4.2+git.0.52da279:
  * Version 1.4.2
  * Rocky container image updates were failing
  * Revert libhimmelblau unstable update
  * Version 1.4.1
  * Update Intune to use app version 1.2511.7
  * Version 1.4.0
  * Resolve build failures
  * deps(rust): bump the all-cargo-updates group across 1 directory with 6 updates
  * Permit NSS response for mapped primary fake group
- Update to version 1.3.0+git.0.f8cabb7:
  * Resolve errant "Hello key missing." messages
  * Version 1.3.0
  * Fix group static mapping
  * Move aad-tool idmap cache clear to the idmap cmd
  * deps(rust): bump the all-cargo-updates group across 1 directory with 11 updates
  * deps(rust): bump the all-cargo-updates group with 6 updates
  * Fix RHEL8 package signing
  * Fix Hello PIN lookup when an alias domain
  * Raise maximum group lookup from 100 to 999
  * Always work with lowercase account names
  * Revert the self-hosted runner name
  * deps(rust): bump the all-cargo-updates group with 23 updates
- Update to version 1.2.2+git.0.2d04bca:
  * Include latest branch in CI
  * Self hosted runners
  * Version 1.2.2
  * deps(rust): bump tracing-subscriber in the cargo group; (bsc#1249013), (CVE-2025-58160)
  * Version 1.2.1
  * Automatically append to nsswitch.conf in postinst
  * Correct the RPM postinst script syntax
- Update to version 1.2.0+git.0.6befefc:
  * Version 1.2.0
  * Fix Kerberos credential cache permissions; (bsc#1247735), (CVE-2025-54882)
  * Set file owner and group before writing its content
  * Ensure alias domains match when checking Intune device id
  * Debian 12 doesn't support ConditionPathExists and notify-reload
  * Write scripts policy to a readable directory
  * Apply Intune policies right after enrollment
  * Add more debug instrumentation
  * Provide device_id to Intune enrollment if not cached
  * Ensure nss cache directory is created during install
  * Remove /var/cache/himmelblaud access from tasks daemon
  * Resolve daemon startup absolute path warnings
  * Version 1.1.0
  * Delay Intune enrollment on Device Auth fail
  * Do not leak the Intune IW service token in the logs
- Update to version 1.0.0+git.0.d01709b:
  * Fix policy application
  * Add remaining Linux password compliance policies
  * Add custom compliance enforcement
  * deps(rust): bump the all-cargo-updates group with 3 updates
  * deps(rust): bump the all-cargo-updates group with 5 updates
  * Add SLE15SP7 build target
  * Add RHEL 10 build target
  * Fix Intermittent auth issue AADSTSError 16000
  * Remove old utf8proc dependency
  * Add `fedora42` build target
  * Handle PRT expiration and tie to offline auth
  * Correctly delete the Hello keys on bad pin count
  * Add ability to disable Hello PIN per-service
  * Update NixOS support to 25.05
  * Handle disabled device by attempting re-enrollment
  * Always attempt confidential client creds for aad-tool
  * Include HSM option defs in himmelblau.conf man page
  * Update flake.nix
  * Improve the aad-tool cache-clear command
  * Add `mfaSshWorkaroundFlag` configuration option to Nix Flake.
  * Add the ability to remove confidential client creds
  * If bad PIN count is exceeded, delete the Hello key
  * deps(rust): bump the all-cargo-updates group with 4 updates
  * Add instructions for creating developer builds
  * Fix GDM3 first time login password prompt
  * Default HsmType should be soft
  * Add himmelblaud to tss group for TPM startup
  * Enforce strict order for the systemd units
  * Update libhimmelblau and compact_jwt
  * Fix builds w/tpm
  * aad-tool Authentication flow improvements
  * Filter out irrelevant debug in aad-tool
  * Create a unified login experience for aad-tool
  * Utilize confidential creds for aad-tool enumerate
  * himmelblau should get posix attributes w/out delegate user access
  * Always use the Object Id for mapping Group to GID
  * Update enhancement-request.md for SPI donations
  * Update bug_report.md with SPI donation
  * deps(rust): bump the all-cargo-updates group with 4 updates
  * Update build requires in README.md
  * Enforce strict order for the systemd units
  * Update FUNDING.yml with SPI Paypal donation button
  * Don't break from tasks loop when policies fail
  * Enroll in Intune as soon as it is enabled
  * Implement `decoupled hello` behavior
  * Cache encrypted PRT to disk for offline login SSO
  * Update to latest hsm-crypto
  * Enable tpm functionality
  * Allow altering the password and PIN prompt messages
  * Ensure Hello PIN lockout happens when online
  * Cache the build target output to improve build times
  * Easier build selection w/ Makefile
  * Revert mistaken removal from Makefile
  * Make the user wait longer with each incorrect PIN
  * Make the bad PIN count configurable
  * Improve aad-tool manpage
  * aad-tool fails if the user has FIDO2 enabled
  * Offline auth permits authentication with invalid Hello PIN
  * PIN complexity to match Windows
  * Update to latest SSSD idmap code
  * Add aad-tool options for setting posix attrs
  * Add scopes and redirect uris aad-tool application create
  * Add aad-tool commands for managaging extension attrs
  * deps(rust): bump the all-cargo-updates group with 4 updates
  * cargo clippy
  * cargo fmt
  * Utilize the sidtoname call for object id mapping
  * Add commands for listing/creating App registrations
  * Potential fix for code scanning alert no. 2: Workflow does not contain permissions
  * Potential fix for code scanning alert no. 4: Workflow does not contain permissions
  * Potential fix for code scanning alert: Workflow does not contain permissions
  * Never write the app_id to the server config
  * Disable passwordless Fido by default
  * Stop using deprecated `users` crate
  * When group membership lookup fails, use cached groups
  * deps(rust): bump the all-cargo-updates group across 1 directory with 11 updates
  * deps(rust): bump the all-cargo-updates group with 4 updates
  * aad-tool command for enumerating users and groups
  * Name-Based Group Matching in `pam_allow_groups` Leads to Potential Security Bypass
  * Add the configure-pam option to aad-tool man page
  * Add static idmap cache for on-prem to cloud migration
  * Update bug_report.md with request for himmelblau.conf
  * deps(rust): bump the all-cargo-updates group with 2 updates
  * Update crates in a group
  * Update crate bumps
  * Utilize new Intune compliance enforcement via libhimmelblau
  * Correct the README regarding Intune policy compliance
  * Disable Chromium policy
  * Re-enable Intune policy and add scripts and compliance policies
  * himmelblau.conf alias `domain` as `domains`
  * Support Fido auth in pam passwd
  * Add TAP support to himmelblaud and pam passwd
  * Mixed case names should properly identify Hello Key
  * Update linux-entra-sso to latest version
  * Fix group lookup for Entra Id group name
  * Fix mixed case name lookup from PRT cache
  * Crate updates
  * Fix tasks daemon debug output
  * Remove write locks where unecessary
  * Fix deadlock in nss
  * systemd notify fixes
  * Console
  * Address Feedback
  * Order services before gdb/nss-user-target
  * deps(rust): bump rpassword from 7.3.1 to 7.4.0
  * deps(rust): bump tokio from 1.44.2 to 1.45.0
  * deps(rust): bump sha2 from 0.10.8 to 0.10.9
  * deps(rust): bump systemd-journal-logger from 2.2.0 to 2.2.2
  * deps(rust): bump clap from 4.5.31 to 4.5.38
  * Update notify-debouncer-full
  * Update opentelemetry
  * Update dependencies
  * deps(rust): bump time from 0.3.39 to 0.3.41
  * Replace source filter that blacklists files with filter that whitelists files.
  * Mark himmelblau.conf as config in rpm
  * Update README.md
  * Ensure only the base URL is printed to log
  * If unix_user_get fails, wait, and try again
  * Supplying a PRT cookie to SSO doesn't require network
  * Don't send a password prompt if the network is down
  * Auth via MFA if Hello PIN fails 3 times
  * Improve Hello PIN failed auth error
  * Fix rocky9 build
  * deps(rust): bump anyhow from 1.0.96 to 1.0.98
  * deps(rust): bump libc from 0.2.170 to 0.2.172
  * deps(rust): bump cc from 1.2.16 to 1.2.19
  * Update README.md
  * deps(rust): bump tokio from 1.43.0 to 1.44.2
  * deps(rust): bump openssl from 0.10.71 to 0.10.72 in the cargo group
  * deps(rust): bump reqwest from 0.12.12 to 0.12.15
  * Update libhimmelblau in Cargo.lock
  * Fix nss and offline checks for domain aliases
  * Report error when MS Authenticator denies authorization
  * Bail out of invalid offline auth
  * Handle AADSTS errors from BeginAuth response
  * Never dump failed reqwests to the log
  * Update sccache-action version to use new cache service
  * Permit daemon to start when network is down
  * Add an nss cache for when daemon is down
  * Additional pam info cues
  * Proceed with Hello auth even with net down
  * Indicate to the user what the password and PIN are
  * Ensure pam messages are seen
  * Display the minimum PIN length during Hello setup
  * PAM should loop, not die on error
  * Ensure prompt msg remains for confirmation
  * Update bug_report.md
  * Ignore demands for setting up MS Authenticator
  * Login fails if Entra is configured to recommend MS authenticator
  * Add pam configure command to aad-tool
  * Update README.md with pam passwd instructions
  * aad-tool authtest needs to map names
  * Update demo video in README.md
  * Sign RPM packages
  * Ensure the pam module is installed correctly for SLE
  * Improve pam error handling and messaging
  * Only push cachix builds for stable releases
  * Terminate linux-entra-sso when browser terminates
  * On deb, push pam config after install
  * Increase priority of deb PAM passwd for Himmelblau
  * Improve offline state handling
  * Specify request for Entra Id password in PAM
  * QR Greeter also supports gnome-shell 47
  * Fix profile photo loading
  * Clarify pam_allow_groups in himmelblau.conf man page
  * Don't hide debug for pam_allow_groups miss
  * Handle failures in passwordless auth
  * build all root packages
  * split config options that can be defined per-domain from those which are global only
  * configure cachix signing and upload in ci
  * deps(rust): bump serde_json from 1.0.138 to 1.0.140
  * deps(rust): bump serde from 1.0.218 to 1.0.219
  * deps(rust): bump time from 0.3.37 to 0.3.39
  * deps(rust): bump bytes from 1.10.0 to 1.10.1
  * deps(rust): bump pkg-config from 0.3.31 to 0.3.32
  * Entra Id is case insensitive, cache lookup must match
  * deps(rust): bump ring from 0.17.9 to 0.17.13 in the cargo group
  * Support CompanionAppsNotification mfa method
  * QR code for gnome-shell greeter
  * Allow tasks to start if AccountsService dir missing
  * Remove invalid python dependency from sso package
  * Fixes https://github.com/himmelblau-idm/himmelblau/issues/397
  * Clear server config when clearing cache
  * Update version in the Cargo.lock
  * deps(rust): bump async-trait from 0.1.86 to 0.1.87
  * deps(rust): bump chrono from 0.4.39 to 0.4.40
  * Fix himmelblau.conf man page cn_name_mapping entry
  * deps(rust): bump pem from 3.0.4 to 3.0.5
  * deps(rust): bump serde from 1.0.217 to 1.0.218
  * Version 1.0.0
  * deps(rust): bump cc from 1.2.15 to 1.2.16
  * Update workflow versions
- Update to version 0.9.21+git.0.6963ee0:
  * Fix authentication when passkeys are enabled
  * Version 0.9.20
  * Fix Intermittent auth issue AADSTSError 16000
  * Version 0.9.19
  * Disable cookies
  * Version 0.9.18
  * Cache the build target output to improve build times
  * Easier build selection w/ Makefile
  * Never write the app_id to the server config
- Update to version 0.9.17+git.0.4a97692:
  * Version 0.9.17
  * Offline auth permits authentication with invalid Hello PIN; (CVE-2025-53013).
  * Cargo fmt
  * Don't neglect to sign the rpm packages
- Update to version 0.9.16+git.0.aac2205:
  * Disable passwordless Fido by default
  * Stop using deprecated `users` crate
  * Version 0.9.16
  * When group membership lookup fails, use cached groups
  * Just report whether some passwordless type is available
  * Version 0.9.15
  * Name-Based Group Matching in `pam_allow_groups` Leads to Potential Security Bypass
  * Version 0.9.14
  * Support Fido auth in pam passwd
  * Add TAP support to himmelblaud and pam passwd
  * Mixed case names should properly identify Hello Key
  * Remove write locks where unecessary
  * Fix group lookup for Entra Id group name
  * Version 0.9.13
  * Fix mixed case name lookup from PRT cache
- Update to version 0.9.12+git.0.99b5ca6:
  * Version 0.9.12
  * Fix deadlock in nss
  * systemd notify fixes
- Update to version 0.9.11+git.0.04ef9c8:
  * Ensure only the base URL is printed to log
  * Version 0.9.11
  * Supplying a PRT cookie to SSO doesn't require network
  * Improve Hello PIN failed auth error
  * Fix rocky9 build
  * Fix nss and offline checks for domain aliases
  * Report error when MS Authenticator denies authorization
  * Bail out of invalid offline auth
  * Handle AADSTS errors from BeginAuth response
  * Never dump failed reqwests to the log
  * Update sccache-action version to use new cache service
  * Permit daemon to start when network is down
  * Version 0.9.10
  * Add an nss cache for when daemon is down
  * Additional pam info cues
  * Proceed with Hello auth even with net down
  * Indicate to the user what the password and PIN are
  * Specify request for Entra Id password in PAM
  * Ensure pam messages are seen
  * Display the minimum PIN length during Hello setup
  * PAM should loop, not die on error
  * Ensure prompt msg remains for confirmation
- Update to version 0.9.9+git.0.5425b98:
  * Version 0.9.9
  * Ignore demands for setting up MS Authenticator
- Update to version 0.9.8+git.0.3f20b1b:
  * configure cachix signing and upload in ci
  * Version 0.9.8
  * Improve pam error handling and messaging
  * Version 0.9.7
  * Terminate linux-entra-sso when browser terminates
  * On deb, push pam config after install
  * Increase priority of deb PAM passwd for Himmelblau
  * Improve offline state handling
  * QR Greeter also supports gnome-shell 47
  * Version 0.9.6
  * Fix profile photo loading
  * Clarify pam_allow_groups in himmelblau.conf man page
  * Don't hide debug for pam_allow_groups miss
  * Version 0.9.5
  * Handle failures in passwordless auth
- Update to version 0.9.4+git.0.9909238:
  * Version 0.9.4
  * bump ring from 0.17.9 to 0.17.13
  * Entra Id is case insensitive, cache lookup must match
  * Support CompanionAppsNotification mfa method
  * Version 0.9.2
  * QR code for gnome-shell greeter
  * Allow tasks to start if AccountsService dir missing
  * Remove invalid python dependency from sso package
  * Version 0.9.1
  * himmelblaud-tasks stops due to missing dir
  * Clear server config when clearing cache
  * Fix himmelblau.conf man page cn_name_mapping entry
  * Update workflow versions
  * Document the requirements for app_id
  * Properly handle aad error from auth code req
  * Provide a group gid fallback for rfc2307 id map
  * Remove option defs from the default debian himmelblau.conf
  * Ensure tasks daemon creates files w/ correct gid
  * Isolate the name mapping so it only happens if enabled
  * Default to request group info via Edge browser
  * Avoid modifying the cache entries
  * Utilize systemd notify to avoid tasks started fail
  * Ubuntu PAM module configuration to change PIN
  * Resolve migration error `real_gidnumber` missing
  * deps(rust): bump libc from 0.2.169 to 0.2.170
  * deps(rust): bump clap_complete from 4.5.45 to 4.5.46
  * Fix some clippy warnings
  * Cause tasks daemon to honor configured debug
  * Fetch user profile photo via tasks daemon
  * deps(rust): bump clap from 4.5.30 to 4.5.31
  * deps(rust): bump anyhow from 1.0.95 to 1.0.96
  * deps(rust): bump cc from 1.2.14 to 1.2.15
  * Add apparmor whitelisting for nss mapping cache
  * Dramatically improve debug logging
  * Move the NixOS CI to a different workflow (w/out main)
  * Add a sample himmelblau.conf in docs
  * Resolve missed auth code redirect
  * Implement mapped name caching in NSS
  * Add script on-behalf-of flow for logon scripts
  * Update Cargo.lock deps
  * Update installation instructions in the README
  * Donation requests in the issue templates
  * Update README.md with contribute badge
  * Update README.md with contributions statement
  * Create FUNDING.yml
  * Update README.md
  * fix failing test expecting /bin/echo to be available
  * add nixos ci tests
  * Use sd_notify to signal service readiness, prevent startup failures
  * Add build command to Makefile
  * Update documentation
  * Add NixOS Module
  * enable build with nix
  * Implement logon name script mapping
  * deps(rust): update libnss requirement from 0.8.0 to 0.9.0
  * Only the himmelblau-sso package should conflict with intune-portal
  * deps(rust): update gethostname requirement from 0.5.0 to 1.0.0
  * deps(rust): update lru requirement from ^0.12.3 to ^0.13.0
  * deps(rust): update rand requirement from ^0.8.5 to ^0.9.0
  * Fetch the group extension attrs with the group object
  * Ensure access token has the GroupMember.Read.All scope
  * Replace the unix attribute option with a rfc2307 idmap
  * Map the extended attr gidNumber to primary group
  * Permit configuration of an Application for group fetching
  * Use posix attributes synchronized from on-prem AD
  * Fix debug option in himmelblau.conf
  * Add a span around server initialisation for correct log coalescing
  * Fix GOA crash when krb5.conf doesn't include /etc/krb5.conf.d
  * Fix libutf8proc dependency issue on Ubuntu 22.04
  * Fix Credentials leaking in the debug log
  * deps(rust): update rusqlite requirement from ^0.32.0 to ^0.33.0 (#345)
  * Decrease CI build time
  * Fix CI failure caused by package revision
  * Support password changes when demanded
  * Update README.md
  * Entra Id no longer permits SFA enrollment
  * Rewrite the sso code in Rust
  * Add profile photo fetching
  * Version 0.9.0
- Update to version 0.8.3+git.5.1510f5a:
  * Decrease CI build time
  * Fix CI failure caused by package revision
  * Version 0.8.4
  * Fix libutf8proc dependency issue on Ubuntu 22.04
  * Version 0.8.3
  * Fix Credentials leaking in the debug log
- Update to version 0.8.2+git.0.553c632:
  * Version 0.8.2
  * Entra Id no longer permits SFA enrollment
  * Remove SSO python dependencies
  * Version 0.8.1
  * Rewrite the sso code in Rust
- Update to version 0.8.0+git.0.249ba5f:
  * Branch version stable-0.8.x
  * Passwordless auth doesn't provide polling numbers
  * Resolve deadlock introduced by Fido auth
  * Implement NGC Passwordless authentication
  * Remove unused commit checklist
  * deps(rust): update bindgen requirement from 0.70.1 to 0.71.1
  * Update libhimmelblau version
  * Custom domains matching
  * Fix IdmapError to indicate the failure
  * Fix Fedora build dependencies
  * Add Fido MFA
  * Add Debian 12 packaging
  * Disable SELinux labeling on build container volume mounts
  * Update github CI dependencies
  * Implement Hello Pin changes via PAM
  * Formatting fix
  * Utilize HimmelblauConfig directly in pam and nss
  * Add config parsing unit tests
  * Fix incorrect default domain
  * Fix config hsm type Tpm error
  * Include multi-domain important info in himmelblau.conf man
  * Update to the latest libhimmelblau
  * Add DAG flow as a fallback for MFA
  * Fix CVE-2024-11738: rustls network-reachable panic in `Acceptor::accept`
  * Update README.md with build requires
  * Enable module for utf8proc-devel in Rocky8
  * Remove the org.samba.himmelblau dbus service
  * Fix missing dependency utf8proc_NFKC_Casefold
  * The tasks daemon needs /etc/groups write access
  * Revert "Fix Ubuntu PAM fallback to password prompt"
  * Fix Ubuntu PAM fallback to password prompt
  * Increase the cache timeout to 5 minutes
  * Always fetch and cache the graph url
  * Package Siemens Linux Entra SSO for Himmelblau
  * Add Kerberos CCache support
  * Update the tasks daemon man page
  * Add a himmelblau.conf man page, and package the man pages
  * Add SLE15SP6 packaging
  * Add Fedora 41 packaging
  * Add Fedora Rawhide packaging
  * Provide enhancement request template
  * Create an issue template
  * Hello support depends on openssl3
  * Fix sshd rpm depends
  * Resolve RPM dependencies automatically
  * Revert "deps(rust): update notify-debouncer-full requirement from 0.3 to 0.4"
  * Add openSUSE Tumbleweed packaging
  * Fix RPM packaging placement of systemd files
  * Remove the failed attempt at debian packaging
  * Add stable-0.7.x to CI workflows
  * Version 0.8.0</changelog>
  <changelog author="david.mulder@suse.com" date="1773230400">- Fix SELinux module packaging to use standard policy macros (bsc#1258236):
  * Build and install precompiled himmelblaud.pp at package build time
  * Replace custom semodule scriptlets with %selinux_modules_install/uninstall
- Update to version 2.3.8+git0.dec3693 (CVE-2026-31979, bsc#1259548):
  * Version 2.3.8
  * Add PrivateTmp back to Tasks Daemon
  * Drop dead code
  * Drop krb5 ccache dir code
  * Add a TODO comment
  * Drop non working packaged krb5 snippet file
  * Write kerberos config snippet
  * Extend resolver interface to return kerberos config together with TGTs
  * Backport SELinux fixes from main
  * Use libkrimes to store TGTs
- Update to version 2.3.7+git0.81088cd:
  * Version 2.3.7
  * cargo vet
  * Fix AWS-LC has PKCS7_verify Certificate Chain Validation Bypass
  * Revert dependency change which broke the nightly build
  * gen_dockerfiles: only himmelblaud has tpm feature, fix all others
  * fix(build): gen_dockerfiles.py mutates shared features list mid-loop
  * Update to libhimmelblau
  on leap 15.6, selinux-policy-devel doesn't exist</changelog>
  <changelog author="david.mulder@suse.com" date="1775044800">- - Update to version 2.3.9+git0.a9fd29b:
  * cargo vet
  * nss: block local group-name collisions on getgrnam (CVE-2026-34397).
  * update aws-lc-sys to 0.39.0 for security fixes
  * update rustls-webpki to 0.103.10 for CRL revocation fix
  * Version 2.3.9
  * cargo vet
  * packaging: fix if/else block for debian's postrm
  * Update apparmor.unix-chkpwd.local (Issue #1252)
  * When Hello user encounters SSPR demand, be permissive
  * add tests for sudo_groups functionality
  * Fix config tests to ignore local host config
  * Do not clear $NOTIFY_SOCKET when calling sd_ready
  * Fix token cache 24h purge
  * broker: use SSO server nonce for PRT only when provided
  * Fix pam_himmelblau blocking local user password changes (#1199)
  * Remove unused File import
  * Use is_ascii_alphanumeric() for account_id validation
  * Fix path traversal in LoadProfilePhoto AccountsService writes
  * Drop initialization tracing span
  * himmelblau-hsm-pin-init: drop RemainAfterExit=yes
  * Add fallback behavior when consent is required
  * qr-greeter: enable extension without socket noise
  * debian: make install/remove noninteractive; reduce QR postinst noise; soften missing hello prt
  * Never respond with BadRequest without error detail
  * deps(rust): bump the all-cargo-updates group across 1 directory with 7 updates</changelog>
</package>
<package pkgid="a51943a0df4c8ee80a040c62af84eec833852c7a8c2865c8b754598bff47b5c4" name="himmelblau-sshd-config" arch="noarch">
  <version epoch="0" ver="0.7.17+git.0.1ebdab0" rel="150700.3.3.2"/>
  <changelog author="david.mulder@suse.com" date="1715342400">- Himmelblau requires libopenssl-3 for PRT messages.</changelog>
  <changelog author="david.mulder@suse.com" date="1715774400">- Update to version 0.3.4+git.0.01d099f:
  * Version 0.3.4
  * Only remove cached user if it doesn't exist
  * Use existing user token at refresh
  * Always use the spn of the user for nss requests
  * Generate a fake user token to please SSH
  * Fix aad-tool to handle MFA
  * Fix lib_crypto version
  * Fix user dropping from NSS</changelog>
  <changelog author="david.mulder@suse.com" date="1716206400">- Update to version 0.4.0+git.0.69b64fe:
  * Add github workflows for the 0.4.x branch
  * Do not append to pam_allow_groups automatically
  * Pam Allow Groups must be specified by Object ID
  * Request the correct resource and permissions
  * Improve error output on group lookup failure
  * When faking a uuid for NSS, use a random uuid
  * Fix clippy warning about inefficient use of clone()
  * Remove the initial uid hack, use name mapping
  * Don't stop an MR based on a clippy warning
  * Update Kanidm tracking
  * Modify CI workflows to handle idmap build
  * Add CI job for cargo test
  * Test the new and legacy idmapping
  * Ensure duplicate providers are not started
  * Use the SSSD Idmap code in Himmelblau
  * Specify in conf that pam_allow_groups is required
  * Remove code duplication in Hello PIN auth
  * Fix Device authentication failed after enrollment
  * Update the base64urlsafedata version
  * Update README.md with Matrix contact info
  * Version 0.4.0</changelog>
  <changelog author="david.mulder@suse.com" date="1716379200">- Update to version 0.4.0+git.2.7b57f5e:
  * Always normalize idmap upn inputs</changelog>
  <changelog author="david.mulder@suse.com" date="1716379201">- Update to version 0.4.0+git.4.63e3704:
  * Fix a refresh token leak in debug from msal</changelog>
  <changelog author="david.mulder@suse.com" date="1716984000">- Update to version 0.4.1+git.0.41dd0dc:
  * Version 0.4.1
  * Use latest msal with MFA fixes
  * PhoneAppNotification is not a cred request algorithm
  * The polling_interval is in milliseconds, not seconds
  * OneWaySMS is additionally a valid OTP
  * Relicensing as GPL3, as SSSD source inclusion requires</changelog>
  <changelog author="david.mulder@suse.com" date="1721044800">- Update to version 0.4.3+git.2.6379abc:
  * Specifically use msal 0.2.6
  * Version 0.4.3
  * update libnss requirement from 0.7.0 to 0.8.0
  * himmelblaud stops working after suspend
  * Version 0.4.2
  * Fix ConsolidatedTelephony MFA method</changelog>
  <changelog author="david.mulder@suse.com" date="1725451200">- Update to version 0.5.0+git.0.22f84f0:
  * Update workflows for 0.5.x
  * Update Debian dependencies in README.md
  * Compilation fails on Ubuntu, missing ldb header
  * Fix base32 with kandim updates
  * deps(rust): update base32 requirement from ^0.4.0 to ^0.5.0
  * deps(rust): update scim_proto requirement from ^0.2.1 to ^1.3.2
  * deps(rust): update bindgen requirement from 0.69.4 to 0.70.1
  * Fix CI failures caused by cargo 1.80.1
  * Update to libhimmelblau version 0.2.9
  * deps(rust): update rusqlite requirement from ^0.31.0 to ^0.32.0
  * deps(rust): update tonic requirement from 0.11.0 to 0.12.0
  * update libnss requirement from 0.7.0 to 0.8.0
  * Switch to using libhimmelblau
  * himmelblaud stops working after suspend
  * Update required packages for tumbleweed
  * Disable the SFA fallback by default
  * Fix ConsolidatedTelephony MFA method
  * Use the group ID for the name if no display name
  * Use latest msal with MFA fixes
  * PhoneAppNotification is not a cred request algorithm
  * The polling_interval is in milliseconds, not seconds
  * OneWaySMS is additionally a valid OTP
  * Relicensing as GPL3, as SSSD source inclusion requires
  * Utilize the graph code in msal
  * config: Remove comments about experimental policy enforement
  * Remove the experimental policy code from the id provider
  * Fix a refresh token leak in debug from msal
  * Correct README details
  * Always normalize idmap upn inputs
  * Add video links to the README
  * Minor updates to the Contributing section
  * Add a Installation section to the README
  * Add the new SSSD idmap build deps to the README
  * Add a section about donations
  * Include the Samba Technical matrix channel
  * Add github workflows for the 0.4.x branch
  * Version 0.5.0 bump for main</changelog>
  <changelog author="william.brown@suse.com" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="david.mulder@suse.com" date="1727870400">- Update to version 0.6.0+git.0.b8dae18:
  * Attempt to fix the cargo version in launchpad build
  * Add branch stable-0.6.x to the workflows
  * Install the pam module to the proper location
  * Update README.md
  * Add a debug option to the config
  * Add a pam option for the OpenSSH 2876 workaround
  * Update to the latest libhimmelblau
  * Authorize all users when pam_allow_groups is empty
  * Fix clippy warnings
  * Fix pam echo not displayed via ssh
  * Fix pam failure to register Pin following mfa poll
  * Fork from kanidm
  * Version 0.6.0
  * Add cargo deb build
  * Version 0.5.3
  * Improve the README installation instructions
  * Add `make install` command
  * Improve Debian/Ubuntu install instructions
  * Fix tag push permissions for tag-version workflow
  * Version 0.5.2
  * Add a version check script
  * Version 0.5.1
  * Remove the rustc dependency, breaking rustup
  * Added Debian packaging workflow and files</changelog>
  <changelog author="david.mulder@suse.com" date="1729598400">- Update to version 0.6.14+git.0.bbda0b6:
  * Version 0.6.14
  * postinst should not fail on patch or apparmor update
  * Version 0.6.13
  * Don't use sudo in postinst/postrm scripts for deb
  * Version 0.6.12
  * PAM should be placed first in the stack
  * Match the object ID of the fake user and group
  * Version 0.6.11
  * Move sshd config into it's own debian package
  * Version 0.6.10
  * Allow the graph to start w/out network
  * Add hello_pin_min_length conf option
  * Version 0.6.9
  * Don't attempt SFA fallback if AADSTSError
  * Have libhimmelblau handle the DAG fallback
  * Add a warning to user that SSH needs restarted
  * Version 0.6.8
  * Ensure local users are ignored when CN mapping
  * Ensure DAG is rejected if lifetime expires
  * Version 0.6.7
  * Rework the poll logic to resolve timeout issues
  * Version 0.6.6
  * Add a sshd soft depends for the deb package
  * CN name mapping in PAM and NSS
  * Version 0.6.5
  * Make CN an optional home directory attribute
  * Version 0.6.4
  * Add Ubuntu pam-config for pam_himmelblau
  * Configuration patches for himmelblau on Debian
  * Version 0.6.3
  * Bug in pam which needs defended against
  * Version 0.6.2
  * Never return the Pam result from get_user()
  * Correct installation directory of the deb pam module
  * Makefile typo fixes
  * Add libdbus-1-dev dep
  * Version 0.6.1
  * Debian build requires libdbus-1-dev</changelog>
  <changelog author="david.mulder@suse.com" date="1732536000">- Update to version 0.7.2+git.0.c76ac0e:
  * Version 0.7.2
  * Hello support depends on openssl3
  * Version 0.7.1
  * Fix sshd rpm depends
  * Resolve RPM dependencies automatically
  * Revert "deps(rust): update notify-debouncer-full requirement from 0.3 to 0.4"
  * Add openSUSE Tumbleweed packaging
  * Fix RPM packaging placement of systemd files
  * Remove the failed attempt at debian packaging
  * Add stable-0.7.x to CI workflows
  * deps(rust): update utoipa requirement from 4.0.0 to 4.2.0
  * deps(rust): update hashbrown requirement from 0.14.0 to 0.15.1
  * Remove missing feature causing warnings
  * deps(rust): update notify-debouncer-full requirement from 0.3 to 0.4
  * Specify scopes when making an SSO request
  * Implement logon script for ensuring compliance
  * Option for adding Entra Id users to local groups
  * Configure EL sshd with ChallengeResponseAuthentication yes
  * Add rocky 8 packaging
  * Add RPM packaging for EL9
  * Modify Ubuntu defaults to fix snaps
  * Resolve Libreoffice fails to start on Ubuntu
  * Minor formatting fix
  * Revert RwLock -&gt; Arc&lt;Mutex&gt; change in idmap
  * Ignore broker scopes requests for now
  * Ensure every file specifies the proper license
  * postinst should not fail on patch or apparmor update
  * Install pam module to additional location via make
  * Add sshd config to the Makefile
  * Don't use sudo in postinst/postrm scripts for deb
  * PAM should be placed first in the stack
  * Add the libutf8proc-dev dep for deb
  * Match the object ID of the fake user and group
  * Make it possible to stop the broker service
  * Move sshd config into it's own debian package
  * Allow the graph to start w/out network
  * Add hello_pin_min_length conf option
  * Don't attempt SFA fallback if AADSTSError
  * Have libhimmelblau handle the DAG fallback
  * Add a warning to user that SSH needs restarted
  * Ensure local users are ignored when CN mapping
  * Ensure DAG is rejected if lifetime expires
  * Rework the poll logic to resolve timeout issues
  * Add a sshd soft depends for the deb package
  * CN name mapping in PAM and NSS
  * Make CN an optional home directory attribute
  * Remove the sssd build dependencies
  * Configuration patches for himmelblau on Debian
  * Simplify PAM get_item_string calls
  * Bug in pam which needs defended against
  * Fix deb build by adding Broker service file
  * WIP: Install Ubuntu unix-chkpwd apparmor deps
  * Ensure make install places pam_himmelblau correctly
  * Add Ubuntu pam-config for pam_himmelblau
  * Never return Err(PAM_SUCCESS) from get_user
  * Never return the Pam result from get_user()
  * Revert "Speed up nss requests w/out auth attempt"
  * Speed up nss requests w/out auth attempt
  * Fix some broker responses
  * Fixes for the dbus broker
  * Attempt to fix the cargo version in launchpad build
  * Makefile typo fixes
  * Version 0.7.0
  * Add libdbus-1-dev dep
  * Improve the README installation instructions
  * Add `make install` command
  * Improve Debian/Ubuntu install instructions
  * Fix tag push permissions for tag-version workflow
  * Add a version check script
  * Remove the rustc dependency, breaking rustup
  * Add a debug option to the config
  * DBus requires that the service file match the name
  * Add a pam option for the OpenSSH 2876 workaround
  * Update to the latest libhimmelblau</changelog>
  <changelog author="david.mulder@suse.com" date="1732536001">- Update to version 0.7.4+git.0.d1291c6:
  * Version 0.7.4
  * Fix missing dependency utf8proc_NFKC_Casefold
  * Package Siemens Linux Entra SSO for Himmelblau
  * Add SLE15SP6 packaging
  * Add Fedora 41 packaging
  * Add Fedora Rawhide packaging
  * The tasks daemon needs /etc/groups write access
  * Version 0.7.3
  * Increase the cache timeout to 5 minutes
  * Always fetch and cache the graph url</changelog>
  <changelog author="david.mulder@suse.com" date="1732536002">- Update to version 0.7.5+git.0.8f421b0:
  * Version 0.7.5
  * Remove the org.samba.himmelblau dbus service</changelog>
  <changelog author="david.mulder@suse.com" date="1733140800">- Update to version 0.7.7+git.0.b48d0bb:
  * Version 0.7.7
  * Fix CVE-2024-11738: rustls network-reachable panic in `Acceptor::accept`
    (bsc#1233949).
  * Version 0.7.6
  * Enable module for utf8proc-devel in Rocky8</changelog>
  <changelog author="david.mulder@suse.com" date="1733400000">- Update to version 0.7.9+git.0.93655d2:
  * Version 0.7.9
  * Update to the latest libhimmelblau
  * Version 0.7.8
  * Add a himmelblau.conf man page, and package the man pages
  * Add DAG flow as a fallback for MFA</changelog>
  <changelog author="david.mulder@suse.com" date="1734004800">- Update to version 0.7.13+git.0.d790d31:
  * Version 0.7.13
  * Fix Fedora build dependencies
  * Version 0.7.12
  * Add Debian 12 packaging
  * Update github CI dependencies
  * Version 0.7.11
  * Implement Hello Pin changes via PAM; (jira#PED-11682).
  * Utilize HimmelblauConfig directly in pam and nss
  * Version 0.7.10
  * Add config parsing unit tests
  * Fix incorrect default domain
  * Fix config hsm type Tpm error
  * Include multi-domain important info in himmelblau.conf man</changelog>
  <changelog author="david.mulder@suse.com" date="1737979200">- Update to version 0.7.15+git.0.7a70a0b:
  * Version 0.7.15
  * Fix Credentials leaking in the debug log; (bsc#1236354).
  * Version 0.7.14
  * Update libhimmelblau version
  * Custom domains matching</changelog>
  <changelog author="david.mulder@suse.com" date="1746532800">- Update to version 0.7.16+git.0.f6e7faf:
  * Version 0.7.16
  * Fix CI failure caused by package revision
  * Update sccache-action version to use new cache service
  * CVE-2025-3416: Fix openssl Use After Free; (bsc#1242648).</changelog>
  <changelog author="david.mulder@suse.com" date="1750161600">- Update to version 0.7.17+git.0.1ebdab0:
  * CVE-2025-5791: Stop using deprecated `users` crate; (bsc#1244202).</changelog>
</package>
<package pkgid="5b3c71644ddbcb4cb2dfc50503977c9a97688a1094b74b169b8365fa92c0e87c" name="himmelblau-sshd-config" arch="noarch">
  <version epoch="0" ver="0.7.18+git.0.8485a75" rel="150700.3.6.1"/>
  <changelog author="david.mulder@suse.com" date="1715774400">- Update to version 0.3.4+git.0.01d099f:
  * Version 0.3.4
  * Only remove cached user if it doesn't exist
  * Use existing user token at refresh
  * Always use the spn of the user for nss requests
  * Generate a fake user token to please SSH
  * Fix aad-tool to handle MFA
  * Fix lib_crypto version
  * Fix user dropping from NSS</changelog>
  <changelog author="david.mulder@suse.com" date="1716206400">- Update to version 0.4.0+git.0.69b64fe:
  * Add github workflows for the 0.4.x branch
  * Do not append to pam_allow_groups automatically
  * Pam Allow Groups must be specified by Object ID
  * Request the correct resource and permissions
  * Improve error output on group lookup failure
  * When faking a uuid for NSS, use a random uuid
  * Fix clippy warning about inefficient use of clone()
  * Remove the initial uid hack, use name mapping
  * Don't stop an MR based on a clippy warning
  * Update Kanidm tracking
  * Modify CI workflows to handle idmap build
  * Add CI job for cargo test
  * Test the new and legacy idmapping
  * Ensure duplicate providers are not started
  * Use the SSSD Idmap code in Himmelblau
  * Specify in conf that pam_allow_groups is required
  * Remove code duplication in Hello PIN auth
  * Fix Device authentication failed after enrollment
  * Update the base64urlsafedata version
  * Update README.md with Matrix contact info
  * Version 0.4.0</changelog>
  <changelog author="david.mulder@suse.com" date="1716379200">- Update to version 0.4.0+git.2.7b57f5e:
  * Always normalize idmap upn inputs</changelog>
  <changelog author="david.mulder@suse.com" date="1716379201">- Update to version 0.4.0+git.4.63e3704:
  * Fix a refresh token leak in debug from msal</changelog>
  <changelog author="david.mulder@suse.com" date="1716984000">- Update to version 0.4.1+git.0.41dd0dc:
  * Version 0.4.1
  * Use latest msal with MFA fixes
  * PhoneAppNotification is not a cred request algorithm
  * The polling_interval is in milliseconds, not seconds
  * OneWaySMS is additionally a valid OTP
  * Relicensing as GPL3, as SSSD source inclusion requires</changelog>
  <changelog author="david.mulder@suse.com" date="1721044800">- Update to version 0.4.3+git.2.6379abc:
  * Specifically use msal 0.2.6
  * Version 0.4.3
  * update libnss requirement from 0.7.0 to 0.8.0
  * himmelblaud stops working after suspend
  * Version 0.4.2
  * Fix ConsolidatedTelephony MFA method</changelog>
  <changelog author="david.mulder@suse.com" date="1725451200">- Update to version 0.5.0+git.0.22f84f0:
  * Update workflows for 0.5.x
  * Update Debian dependencies in README.md
  * Compilation fails on Ubuntu, missing ldb header
  * Fix base32 with kandim updates
  * deps(rust): update base32 requirement from ^0.4.0 to ^0.5.0
  * deps(rust): update scim_proto requirement from ^0.2.1 to ^1.3.2
  * deps(rust): update bindgen requirement from 0.69.4 to 0.70.1
  * Fix CI failures caused by cargo 1.80.1
  * Update to libhimmelblau version 0.2.9
  * deps(rust): update rusqlite requirement from ^0.31.0 to ^0.32.0
  * deps(rust): update tonic requirement from 0.11.0 to 0.12.0
  * update libnss requirement from 0.7.0 to 0.8.0
  * Switch to using libhimmelblau
  * himmelblaud stops working after suspend
  * Update required packages for tumbleweed
  * Disable the SFA fallback by default
  * Fix ConsolidatedTelephony MFA method
  * Use the group ID for the name if no display name
  * Use latest msal with MFA fixes
  * PhoneAppNotification is not a cred request algorithm
  * The polling_interval is in milliseconds, not seconds
  * OneWaySMS is additionally a valid OTP
  * Relicensing as GPL3, as SSSD source inclusion requires
  * Utilize the graph code in msal
  * config: Remove comments about experimental policy enforement
  * Remove the experimental policy code from the id provider
  * Fix a refresh token leak in debug from msal
  * Correct README details
  * Always normalize idmap upn inputs
  * Add video links to the README
  * Minor updates to the Contributing section
  * Add a Installation section to the README
  * Add the new SSSD idmap build deps to the README
  * Add a section about donations
  * Include the Samba Technical matrix channel
  * Add github workflows for the 0.4.x branch
  * Version 0.5.0 bump for main</changelog>
  <changelog author="william.brown@suse.com" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="david.mulder@suse.com" date="1727870400">- Update to version 0.6.0+git.0.b8dae18:
  * Attempt to fix the cargo version in launchpad build
  * Add branch stable-0.6.x to the workflows
  * Install the pam module to the proper location
  * Update README.md
  * Add a debug option to the config
  * Add a pam option for the OpenSSH 2876 workaround
  * Update to the latest libhimmelblau
  * Authorize all users when pam_allow_groups is empty
  * Fix clippy warnings
  * Fix pam echo not displayed via ssh
  * Fix pam failure to register Pin following mfa poll
  * Fork from kanidm
  * Version 0.6.0
  * Add cargo deb build
  * Version 0.5.3
  * Improve the README installation instructions
  * Add `make install` command
  * Improve Debian/Ubuntu install instructions
  * Fix tag push permissions for tag-version workflow
  * Version 0.5.2
  * Add a version check script
  * Version 0.5.1
  * Remove the rustc dependency, breaking rustup
  * Added Debian packaging workflow and files</changelog>
  <changelog author="david.mulder@suse.com" date="1729598400">- Update to version 0.6.14+git.0.bbda0b6:
  * Version 0.6.14
  * postinst should not fail on patch or apparmor update
  * Version 0.6.13
  * Don't use sudo in postinst/postrm scripts for deb
  * Version 0.6.12
  * PAM should be placed first in the stack
  * Match the object ID of the fake user and group
  * Version 0.6.11
  * Move sshd config into it's own debian package
  * Version 0.6.10
  * Allow the graph to start w/out network
  * Add hello_pin_min_length conf option
  * Version 0.6.9
  * Don't attempt SFA fallback if AADSTSError
  * Have libhimmelblau handle the DAG fallback
  * Add a warning to user that SSH needs restarted
  * Version 0.6.8
  * Ensure local users are ignored when CN mapping
  * Ensure DAG is rejected if lifetime expires
  * Version 0.6.7
  * Rework the poll logic to resolve timeout issues
  * Version 0.6.6
  * Add a sshd soft depends for the deb package
  * CN name mapping in PAM and NSS
  * Version 0.6.5
  * Make CN an optional home directory attribute
  * Version 0.6.4
  * Add Ubuntu pam-config for pam_himmelblau
  * Configuration patches for himmelblau on Debian
  * Version 0.6.3
  * Bug in pam which needs defended against
  * Version 0.6.2
  * Never return the Pam result from get_user()
  * Correct installation directory of the deb pam module
  * Makefile typo fixes
  * Add libdbus-1-dev dep
  * Version 0.6.1
  * Debian build requires libdbus-1-dev</changelog>
  <changelog author="david.mulder@suse.com" date="1732536000">- Update to version 0.7.2+git.0.c76ac0e:
  * Version 0.7.2
  * Hello support depends on openssl3
  * Version 0.7.1
  * Fix sshd rpm depends
  * Resolve RPM dependencies automatically
  * Revert "deps(rust): update notify-debouncer-full requirement from 0.3 to 0.4"
  * Add openSUSE Tumbleweed packaging
  * Fix RPM packaging placement of systemd files
  * Remove the failed attempt at debian packaging
  * Add stable-0.7.x to CI workflows
  * deps(rust): update utoipa requirement from 4.0.0 to 4.2.0
  * deps(rust): update hashbrown requirement from 0.14.0 to 0.15.1
  * Remove missing feature causing warnings
  * deps(rust): update notify-debouncer-full requirement from 0.3 to 0.4
  * Specify scopes when making an SSO request
  * Implement logon script for ensuring compliance
  * Option for adding Entra Id users to local groups
  * Configure EL sshd with ChallengeResponseAuthentication yes
  * Add rocky 8 packaging
  * Add RPM packaging for EL9
  * Modify Ubuntu defaults to fix snaps
  * Resolve Libreoffice fails to start on Ubuntu
  * Minor formatting fix
  * Revert RwLock -&gt; Arc&lt;Mutex&gt; change in idmap
  * Ignore broker scopes requests for now
  * Ensure every file specifies the proper license
  * postinst should not fail on patch or apparmor update
  * Install pam module to additional location via make
  * Add sshd config to the Makefile
  * Don't use sudo in postinst/postrm scripts for deb
  * PAM should be placed first in the stack
  * Add the libutf8proc-dev dep for deb
  * Match the object ID of the fake user and group
  * Make it possible to stop the broker service
  * Move sshd config into it's own debian package
  * Allow the graph to start w/out network
  * Add hello_pin_min_length conf option
  * Don't attempt SFA fallback if AADSTSError
  * Have libhimmelblau handle the DAG fallback
  * Add a warning to user that SSH needs restarted
  * Ensure local users are ignored when CN mapping
  * Ensure DAG is rejected if lifetime expires
  * Rework the poll logic to resolve timeout issues
  * Add a sshd soft depends for the deb package
  * CN name mapping in PAM and NSS
  * Make CN an optional home directory attribute
  * Remove the sssd build dependencies
  * Configuration patches for himmelblau on Debian
  * Simplify PAM get_item_string calls
  * Bug in pam which needs defended against
  * Fix deb build by adding Broker service file
  * WIP: Install Ubuntu unix-chkpwd apparmor deps
  * Ensure make install places pam_himmelblau correctly
  * Add Ubuntu pam-config for pam_himmelblau
  * Never return Err(PAM_SUCCESS) from get_user
  * Never return the Pam result from get_user()
  * Revert "Speed up nss requests w/out auth attempt"
  * Speed up nss requests w/out auth attempt
  * Fix some broker responses
  * Fixes for the dbus broker
  * Attempt to fix the cargo version in launchpad build
  * Makefile typo fixes
  * Version 0.7.0
  * Add libdbus-1-dev dep
  * Improve the README installation instructions
  * Add `make install` command
  * Improve Debian/Ubuntu install instructions
  * Fix tag push permissions for tag-version workflow
  * Add a version check script
  * Remove the rustc dependency, breaking rustup
  * Add a debug option to the config
  * DBus requires that the service file match the name
  * Add a pam option for the OpenSSH 2876 workaround
  * Update to the latest libhimmelblau</changelog>
  <changelog author="david.mulder@suse.com" date="1732536001">- Update to version 0.7.4+git.0.d1291c6:
  * Version 0.7.4
  * Fix missing dependency utf8proc_NFKC_Casefold
  * Package Siemens Linux Entra SSO for Himmelblau
  * Add SLE15SP6 packaging
  * Add Fedora 41 packaging
  * Add Fedora Rawhide packaging
  * The tasks daemon needs /etc/groups write access
  * Version 0.7.3
  * Increase the cache timeout to 5 minutes
  * Always fetch and cache the graph url</changelog>
  <changelog author="david.mulder@suse.com" date="1732536002">- Update to version 0.7.5+git.0.8f421b0:
  * Version 0.7.5
  * Remove the org.samba.himmelblau dbus service</changelog>
  <changelog author="david.mulder@suse.com" date="1733140800">- Update to version 0.7.7+git.0.b48d0bb:
  * Version 0.7.7
  * Fix CVE-2024-11738: rustls network-reachable panic in `Acceptor::accept`
    (bsc#1233949).
  * Version 0.7.6
  * Enable module for utf8proc-devel in Rocky8</changelog>
  <changelog author="david.mulder@suse.com" date="1733400000">- Update to version 0.7.9+git.0.93655d2:
  * Version 0.7.9
  * Update to the latest libhimmelblau
  * Version 0.7.8
  * Add a himmelblau.conf man page, and package the man pages
  * Add DAG flow as a fallback for MFA</changelog>
  <changelog author="david.mulder@suse.com" date="1734004800">- Update to version 0.7.13+git.0.d790d31:
  * Version 0.7.13
  * Fix Fedora build dependencies
  * Version 0.7.12
  * Add Debian 12 packaging
  * Update github CI dependencies
  * Version 0.7.11
  * Implement Hello Pin changes via PAM; (jira#PED-11682).
  * Utilize HimmelblauConfig directly in pam and nss
  * Version 0.7.10
  * Add config parsing unit tests
  * Fix incorrect default domain
  * Fix config hsm type Tpm error
  * Include multi-domain important info in himmelblau.conf man</changelog>
  <changelog author="david.mulder@suse.com" date="1737979200">- Update to version 0.7.15+git.0.7a70a0b:
  * Version 0.7.15
  * Fix Credentials leaking in the debug log; (bsc#1236354).
  * Version 0.7.14
  * Update libhimmelblau version
  * Custom domains matching</changelog>
  <changelog author="david.mulder@suse.com" date="1746532800">- Update to version 0.7.16+git.0.f6e7faf:
  * Version 0.7.16
  * Fix CI failure caused by package revision
  * Update sccache-action version to use new cache service
  * CVE-2025-3416: Fix openssl Use After Free; (bsc#1242648).</changelog>
  <changelog author="david.mulder@suse.com" date="1750161600">- Update to version 0.7.17+git.0.1ebdab0:
  * CVE-2025-5791: Stop using deprecated `users` crate; (bsc#1244202).</changelog>
  <changelog author="david.mulder@suse.com" date="1756814400">- Update to version 0.7.18+git.0.8485a75:
  * Version 0.7.18
  * deps(rust): bump tracing-subscriber in the cargo group; (bsc#1249013), (CVE-2025-58160)</changelog>
</package>
<package pkgid="74a90223ef032bf5c872c1db366bdbfed025c4b355cf4dc2bab8840196b10ee1" name="himmelblau-sshd-config" arch="noarch">
  <version epoch="0" ver="2.3.9+git0.a9fd29b" rel="150700.3.15.1"/>
  <changelog author="david.mulder@suse.com" date="1716379200">- Update to version 0.4.0+git.4.63e3704:
  * Fix a refresh token leak in debug from msal</changelog>
  <changelog author="david.mulder@suse.com" date="1716984000">- Update to version 0.4.1+git.0.41dd0dc:
  * Version 0.4.1
  * Use latest msal with MFA fixes
  * PhoneAppNotification is not a cred request algorithm
  * The polling_interval is in milliseconds, not seconds
  * OneWaySMS is additionally a valid OTP
  * Relicensing as GPL3, as SSSD source inclusion requires</changelog>
  <changelog author="david.mulder@suse.com" date="1721044800">- Update to version 0.4.3+git.2.6379abc:
  * Specifically use msal 0.2.6
  * Version 0.4.3
  * update libnss requirement from 0.7.0 to 0.8.0
  * himmelblaud stops working after suspend
  * Version 0.4.2
  * Fix ConsolidatedTelephony MFA method</changelog>
  <changelog author="david.mulder@suse.com" date="1725451200">- Update to version 0.5.0+git.0.22f84f0:
  * Update workflows for 0.5.x
  * Update Debian dependencies in README.md
  * Compilation fails on Ubuntu, missing ldb header
  * Fix base32 with kandim updates
  * deps(rust): update base32 requirement from ^0.4.0 to ^0.5.0
  * deps(rust): update scim_proto requirement from ^0.2.1 to ^1.3.2
  * deps(rust): update bindgen requirement from 0.69.4 to 0.70.1
  * Fix CI failures caused by cargo 1.80.1
  * Update to libhimmelblau version 0.2.9
  * deps(rust): update rusqlite requirement from ^0.31.0 to ^0.32.0
  * deps(rust): update tonic requirement from 0.11.0 to 0.12.0
  * update libnss requirement from 0.7.0 to 0.8.0
  * Switch to using libhimmelblau
  * himmelblaud stops working after suspend
  * Update required packages for tumbleweed
  * Disable the SFA fallback by default
  * Fix ConsolidatedTelephony MFA method
  * Use the group ID for the name if no display name
  * Use latest msal with MFA fixes
  * PhoneAppNotification is not a cred request algorithm
  * The polling_interval is in milliseconds, not seconds
  * OneWaySMS is additionally a valid OTP
  * Relicensing as GPL3, as SSSD source inclusion requires
  * Utilize the graph code in msal
  * config: Remove comments about experimental policy enforement
  * Remove the experimental policy code from the id provider
  * Fix a refresh token leak in debug from msal
  * Correct README details
  * Always normalize idmap upn inputs
  * Add video links to the README
  * Minor updates to the Contributing section
  * Add a Installation section to the README
  * Add the new SSSD idmap build deps to the README
  * Add a section about donations
  * Include the Samba Technical matrix channel
  * Add github workflows for the 0.4.x branch
  * Version 0.5.0 bump for main</changelog>
  <changelog author="william.brown@suse.com" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="david.mulder@suse.com" date="1727870400">- Update to version 0.6.0+git.0.b8dae18:
  * Attempt to fix the cargo version in launchpad build
  * Add branch stable-0.6.x to the workflows
  * Install the pam module to the proper location
  * Update README.md
  * Add a debug option to the config
  * Add a pam option for the OpenSSH 2876 workaround
  * Update to the latest libhimmelblau
  * Authorize all users when pam_allow_groups is empty
  * Fix clippy warnings
  * Fix pam echo not displayed via ssh
  * Fix pam failure to register Pin following mfa poll
  * Fork from kanidm
  * Version 0.6.0
  * Add cargo deb build
  * Version 0.5.3
  * Improve the README installation instructions
  * Add `make install` command
  * Improve Debian/Ubuntu install instructions
  * Fix tag push permissions for tag-version workflow
  * Version 0.5.2
  * Add a version check script
  * Version 0.5.1
  * Remove the rustc dependency, breaking rustup
  * Added Debian packaging workflow and files</changelog>
  <changelog author="david.mulder@suse.com" date="1729598400">- Update to version 0.6.14+git.0.bbda0b6:
  * Version 0.6.14
  * postinst should not fail on patch or apparmor update
  * Version 0.6.13
  * Don't use sudo in postinst/postrm scripts for deb
  * Version 0.6.12
  * PAM should be placed first in the stack
  * Match the object ID of the fake user and group
  * Version 0.6.11
  * Move sshd config into it's own debian package
  * Version 0.6.10
  * Allow the graph to start w/out network
  * Add hello_pin_min_length conf option
  * Version 0.6.9
  * Don't attempt SFA fallback if AADSTSError
  * Have libhimmelblau handle the DAG fallback
  * Add a warning to user that SSH needs restarted
  * Version 0.6.8
  * Ensure local users are ignored when CN mapping
  * Ensure DAG is rejected if lifetime expires
  * Version 0.6.7
  * Rework the poll logic to resolve timeout issues
  * Version 0.6.6
  * Add a sshd soft depends for the deb package
  * CN name mapping in PAM and NSS
  * Version 0.6.5
  * Make CN an optional home directory attribute
  * Version 0.6.4
  * Add Ubuntu pam-config for pam_himmelblau
  * Configuration patches for himmelblau on Debian
  * Version 0.6.3
  * Bug in pam which needs defended against
  * Version 0.6.2
  * Never return the Pam result from get_user()
  * Correct installation directory of the deb pam module
  * Makefile typo fixes
  * Add libdbus-1-dev dep
  * Version 0.6.1
  * Debian build requires libdbus-1-dev</changelog>
  <changelog author="david.mulder@suse.com" date="1732536000">- Update to version 0.7.2+git.0.c76ac0e:
  * Version 0.7.2
  * Hello support depends on openssl3
  * Version 0.7.1
  * Fix sshd rpm depends
  * Resolve RPM dependencies automatically
  * Revert "deps(rust): update notify-debouncer-full requirement from 0.3 to 0.4"
  * Add openSUSE Tumbleweed packaging
  * Fix RPM packaging placement of systemd files
  * Remove the failed attempt at debian packaging
  * Add stable-0.7.x to CI workflows
  * deps(rust): update utoipa requirement from 4.0.0 to 4.2.0
  * deps(rust): update hashbrown requirement from 0.14.0 to 0.15.1
  * Remove missing feature causing warnings
  * deps(rust): update notify-debouncer-full requirement from 0.3 to 0.4
  * Specify scopes when making an SSO request
  * Implement logon script for ensuring compliance
  * Option for adding Entra Id users to local groups
  * Configure EL sshd with ChallengeResponseAuthentication yes
  * Add rocky 8 packaging
  * Add RPM packaging for EL9
  * Modify Ubuntu defaults to fix snaps
  * Resolve Libreoffice fails to start on Ubuntu
  * Minor formatting fix
  * Revert RwLock -&gt; Arc&lt;Mutex&gt; change in idmap
  * Ignore broker scopes requests for now
  * Ensure every file specifies the proper license
  * postinst should not fail on patch or apparmor update
  * Install pam module to additional location via make
  * Add sshd config to the Makefile
  * Don't use sudo in postinst/postrm scripts for deb
  * PAM should be placed first in the stack
  * Add the libutf8proc-dev dep for deb
  * Match the object ID of the fake user and group
  * Make it possible to stop the broker service
  * Move sshd config into it's own debian package
  * Allow the graph to start w/out network
  * Add hello_pin_min_length conf option
  * Don't attempt SFA fallback if AADSTSError
  * Have libhimmelblau handle the DAG fallback
  * Add a warning to user that SSH needs restarted
  * Ensure local users are ignored when CN mapping
  * Ensure DAG is rejected if lifetime expires
  * Rework the poll logic to resolve timeout issues
  * Add a sshd soft depends for the deb package
  * CN name mapping in PAM and NSS
  * Make CN an optional home directory attribute
  * Remove the sssd build dependencies
  * Configuration patches for himmelblau on Debian
  * Simplify PAM get_item_string calls
  * Bug in pam which needs defended against
  * Fix deb build by adding Broker service file
  * WIP: Install Ubuntu unix-chkpwd apparmor deps
  * Ensure make install places pam_himmelblau correctly
  * Add Ubuntu pam-config for pam_himmelblau
  * Never return Err(PAM_SUCCESS) from get_user
  * Never return the Pam result from get_user()
  * Revert "Speed up nss requests w/out auth attempt"
  * Speed up nss requests w/out auth attempt
  * Fix some broker responses
  * Fixes for the dbus broker
  * Attempt to fix the cargo version in launchpad build
  * Makefile typo fixes
  * Version 0.7.0
  * Add libdbus-1-dev dep
  * Improve the README installation instructions
  * Add `make install` command
  * Improve Debian/Ubuntu install instructions
  * Fix tag push permissions for tag-version workflow
  * Add a version check script
  * Remove the rustc dependency, breaking rustup
  * Add a debug option to the config
  * DBus requires that the service file match the name
  * Add a pam option for the OpenSSH 2876 workaround
  * Update to the latest libhimmelblau</changelog>
  <changelog author="david.mulder@suse.com" date="1732536001">- Update to version 0.7.4+git.0.d1291c6:
  * Version 0.7.4
  * Fix missing dependency utf8proc_NFKC_Casefold
  * Package Siemens Linux Entra SSO for Himmelblau
  * Add SLE15SP6 packaging
  * Add Fedora 41 packaging
  * Add Fedora Rawhide packaging
  * The tasks daemon needs /etc/groups write access
  * Version 0.7.3
  * Increase the cache timeout to 5 minutes
  * Always fetch and cache the graph url</changelog>
  <changelog author="david.mulder@suse.com" date="1732536002">- Update to version 0.7.5+git.0.8f421b0:
  * Version 0.7.5
  * Remove the org.samba.himmelblau dbus service</changelog>
  <changelog author="david.mulder@suse.com" date="1733140800">- Update to version 0.7.7+git.0.b48d0bb:
  * Version 0.7.7
  * Fix CVE-2024-11738: rustls network-reachable panic in `Acceptor::accept`
    (bsc#1233949).
  * Version 0.7.6
  * Enable module for utf8proc-devel in Rocky8</changelog>
  <changelog author="david.mulder@suse.com" date="1733400000">- Update to version 0.7.9+git.0.93655d2:
  * Version 0.7.9
  * Update to the latest libhimmelblau
  * Version 0.7.8
  * Add a himmelblau.conf man page, and package the man pages
  * Add DAG flow as a fallback for MFA</changelog>
  <changelog author="david.mulder@suse.com" date="1734004800">- Update to version 0.7.13+git.0.d790d31:
  * Version 0.7.13
  * Fix Fedora build dependencies
  * Version 0.7.12
  * Add Debian 12 packaging
  * Update github CI dependencies
  * Version 0.7.11
  * Implement Hello Pin changes via PAM; (jira#PED-11682).
  * Utilize HimmelblauConfig directly in pam and nss
  * Version 0.7.10
  * Add config parsing unit tests
  * Fix incorrect default domain
  * Fix config hsm type Tpm error
  * Include multi-domain important info in himmelblau.conf man</changelog>
  <changelog author="david.mulder@suse.com" date="1737979200">- Update to version 0.7.15+git.0.7a70a0b:
  * Version 0.7.15
  * Fix Credentials leaking in the debug log; (bsc#1236354).
  * Version 0.7.14
  * Update libhimmelblau version
  * Custom domains matching</changelog>
  <changelog author="david.mulder@suse.com" date="1746532800">- Update to version 0.7.16+git.0.f6e7faf:
  * Version 0.7.16
  * Fix CI failure caused by package revision
  * Update sccache-action version to use new cache service
  * CVE-2025-3416: Fix openssl Use After Free; (bsc#1242648).</changelog>
  <changelog author="david.mulder@suse.com" date="1750161600">- Update to version 0.7.17+git.0.1ebdab0:
  * CVE-2025-5791: Stop using deprecated `users` crate; (bsc#1244202).</changelog>
  <changelog author="david.mulder@suse.com" date="1756814400">- Update to version 0.7.18+git.0.8485a75:
  * Version 0.7.18
  * deps(rust): bump tracing-subscriber in the cargo group; (bsc#1249013), (CVE-2025-58160)</changelog>
  <changelog author="david.mulder@suse.com" date="1771934400">- Update to version 2.3.5+git0.9dd526c; (jsc#PED-14511):
  * Better handle Intune API version
  * deps(rust): bump the all-cargo-updates group with 8 updates; (bsc#1257904), (CVE-2026-25727)
  * Update make vet from main branch
  * pam_himmelblau: call split_username once in chauthtok
  * pam_himmelblau: return PAM_IGNORE in chauthtok for local users
  * Don't attempt a DAG when Hello fails with SSPR demand
- Update to version 2.3.4+git0.db5df80:
  * Version 2.3.4
  * cargo vet
  * deps(rust): bump the all-cargo-updates group across 1 directory with 8 updates
  * Revert sketching update (which breaks SLE16 build)
- Update to version 2.3.3+git0.25e8b73:
  * Version 2.3.3
  * cargo vet
  * /var/cache/private/himmelblaud should not be created tmpfiles
  * Updatee python vers for dataclasses dep
  * deps(rust): bump the all-cargo-updates group across 1 directory with 3 updates
  * Generate pin init service file systemd &lt; 250
  * Checkin missing himmelblaud.if file for SELinux
  * Resolve typos in selinux package commands
- Update to version 2.3.2+git0.5a7a598:
  * Compile SELinux policy at install time for cross-distro compatibility
  * Improve PAM configuration on openSUSE/SLE
  * Fix SELinux policy
  * Add a git hook to ensure selinux policy is tested
  * Ignore generated himmelblau-hsm-pin-init service file
  * Refactor SELinux policy for cross-distro compatibility
  * cargo vet
  * Fix NSS lookup for mapped local users
  * Skip OS version compliance checks when min/max values are empty
- Update to version 2.3.1+git0.2418ec2:
  * Version 2.3.1
  * Remove references to qrcodegen (these are 3.x features)
  * QR Greeter compatibility for old GNOME
  * Enable QR greeter automatically
  * ci: Use latest cargo-vet from git to fix CI
  * Fix HSM pin migration failure on Debian/Ubuntu upgrades from v1.4.x
  * Version 2.3.0
  * cargo vet
  * Update make vet from main branch
  * Autostart the daemons on fresh install or upgrade
  * Restart sshd when installing the ssh config
  * Allow tasks daemon to write krb ccache
  * Do not enumerate mapped users in NSS
  * deps(rust): bump the all-cargo-updates group across 1 directory with 8 updates
  * Update libhimmelblau to latest version
  * Fix Tumbleweed build
  * cargo vet
  * Version 2.2.0
  * Update libhimmelblau to 0.8.x series
  * deps(rust): bump the all-cargo-updates group with 17 updates
  * Only use OpenSSH bug workaround for ssh service
  * Fix debug noise from removing user from sudo group
  * systemd: install files to /usr/lib/, not /etc/
  * Version 2.1.0
  * Fix nightly authselect build failure
  * Generate the authselect profiles for each distro
  * Improve pam config handling in aad-tool
  * Make `aad-tool configure-pam` detect location of pam files
  * Version 2.0.5
  * /var/lib/private/himmelblaud should be owned by root
  * Use tmpfiles.d to create himmelblaud private data directory
- Resolve mode mismatch with Chromium package.
- Update to version 2.0.4+git.2.5d26a19:
  * deps(rust): bump the all-cargo-updates group with 13 updates
  * Version 2.0.4
  * Update kanidm_build_profiles mask version
  * Utilize cargo vet from main
  * Add policies cache patch via systemd-tmpfiles
- Update to version 2.0.3+git.4.4f6e025:
  * Fix man page comments about change idmap_range
  * Stub picky-krb for osc build
  * Stub a kanidm_build_profiles which builds in osc
  * Ensure nss cache is created on Ubuntu/Debian
  * Request a user token if NSS hasn't been called
  * Version 2.0.3
  * Add nss cache patch via systemd-tmpfiles
  * Version 2.0.2
  * Recommend `patch` with the pam package
  * Fix passwordless FIDO authentication not being used when available
  * Git workflow updates for stable-2.x
  * Only warn on Intune failure
  * Version 2.0.1
  * Force o365 desktop files to always rebuild
  * Always rebuild the o365 apps
  * Add restart on-failure to systemd services
  * Clarify `domain` SHOULD match login domain
  * Remove warning about `domain` himmelblau.conf opt
  * Pseudo eliminate multi-tenant and domains section
  * Revert "Fix Hello PIN lookup when an alias domain"
  * Comment out `KbdInteractiveAuthentication on` in sshd conf
  * Check the nxset sooner, to avoid unwanted errors
  * Recommend oddjob_mkhomedir with authselect
  * Pin libhimmelblau to 0.7.x
  * Deprecate Fedora 41
  * Cargo vet
  * deps(rust): bump the all-cargo-updates group with 11 updates
  * Bump github/codeql-action from 4.30.8 to 4.31.2
  * Bump cachix/install-nix-action from 31.8.1 to 31.8.2
  * Bump actions/upload-artifact from 4.6.2 to 5.0.0
  * cargo clippy and rebase fix
  * fixup! add extra debug output to NotFound error code
  * force error output to show up in CI logs
  * wrap repeated sources of IdpError::NotFound in helper functions
  * add extra debug output to NotFound error code
  * use direnv for loading the nix devshell
  * We should still encourage mapping by name
  * Add support for Fedora 43
  * Provide a offline 'breakglass' mode
  * cargo clippy
  * Add warning about incorrect nsswitch configuration
  * Distinguish between online and offline token fail
  * Ensure user token uses original name
  * Fix alias domain in auth result causing failure
  * Resolve cargo clippy warnings
  * Only map on cn name for the primary domain
  * Install systemd in build scripts for gen service
  * Fix systemd version parsing
  * cargo vet
  * Update libhimmelblau to 0.7.19
  * Resolve SELinux build failures in nightly (part 2)
  * Rocky container image updates were failing
  * Warn instead of error when no idmap_range specified
  * deps(rust): bump the all-cargo-updates group across 1 directory with 7 updates
  * Trim whitespace from local group names
  * Fix borrowing error
  * Fix reference to local_sudo_group in condition
  * Only run sudo_groups if local_groups does not contain local_sudo_group
  * Leave SELinux in permissive mode for Himmelblau
  * Resolve SELinux build failures in nightly
  * nix: add join_type option to nixos-module settings
  * Build host configuration changes
  * Ensure that hsm_pin isn't present decrypted
  * Document Soft HSM changes to TPM bound
  * Disable SELinux by default on NixOS
  * sh doesn't have `source`
  * Encrypt hsm-pin using systemd-creds
  * Recommend uuid id mapping
  * Improve himmelblau.conf man page formatting
  * Implement Local User Mapping
  * Add o365 dependency for jq
  * Add selinux rules for gdm login
  * Narrow the scope of selinux policy with audit2allow
  * Generate the systemd service files
  * Fix selinux build for SLE16
  * Resolve SLE16 build dependency failure
  * Fix the rawhide build
  * Mask the sshkey-attest package
  * Bump cachix/install-nix-action from 31.7.0 to 31.8.1
  * cargo vet dependency updates
  * deps(rust): bump the all-cargo-updates group across 1 directory with 13 updates
  * Bump actions/dependency-review-action from 4.8.0 to 4.8.1
  * Bump cachix/install-nix-action from 31.7.0 to 31.8.0
  * Bump github/codeql-action from 3.30.5 to 4.30.8
  * Bump ossf/scorecard-action from 2.4.2 to 2.4.3
  * SELinux improvements
  * Fix a typo in package gen scripts
  * cargo fmt
  * Permit NSS response for mapped primary fake group
  * Fix Nix Error With Fuzz
  * Decrease CI fuzzer setup time
  * Document join types
  * Support for Entra registered devices
  * Run `cargo test` in a container
  * Bump cachix/install-nix-action from 31.6.2 to 31.7.0
  * cargo vet
  * deps(rust): bump the all-cargo-updates group across 1 directory with 2 updates
  * Bump github/codeql-action from 3.30.4 to 3.30.5
  * Use pastey crate instead of unmaintained paste
  * cargo vet
  * Pin unmaintained serde_cbor dep to serde_cbor_2
  * Resolve tower-http `cargo audit` warning
  * Replace unmaintained fxhash with own version
  * Resolve warning about workflow top level write permissions
  * Remove dependabot automerge
  * Resolve division by 0 in idmap code
  * deps(rust): bump the all-cargo-updates group across 1 directory with 3 updates
  * [StepSecurity] ci: Harden GitHub Actions
  * Only idmap against initialized domains
  * Resolve invalid init of idmap with same domain
  * Resolve division by 0 in idmap code
  * Add fuzzing of idmap code
  * Add basic fuzzing of the config options
  * cargo clippy
  * Resolve error found by fuzzing
  * cargo vet prune
  * deps(rust): bump regex in the all-cargo-updates group
  * Bump actions/dependency-review-action from 4.7.3 to 4.8.0
  * Bump actions/checkout from 3.6.0 to 5.0.0
  * Bump cachix/cachix-action from 14 to 16
  * Bump ossf/scorecard-action from 2.4.0 to 2.4.2
  * Bump cachix/install-nix-action from 25 to 31
  * Add the OpenSSF Best Practices badge
  * Add scorecard badge
  * [StepSecurity] Apply security best practices
  * Fix group static mapping
  * Move aad-tool idmap cache clear to the idmap cmd
  * Resolve errant "Hello key missing." messages
  * Update flake.nix
  * Slow the dependabot update frequency
  * Audit dependabot updates
  * deps(rust): bump the all-cargo-updates group across 1 directory with 11 updates
  * feat: Add support for aarch64 on Debian-based distributions
  * Resolve possible invalid pointer dereferences
  * Cargo clippy
  * Cargo fmt
  * Avoid revealing account ids in debug log
  * Cause doc links to open in the correct apps
  * Permit opening multiple instances of Word/Excel
  * Modify systray and app close behavior
  * Don't use questionably licensed icons for o365
  * Resolve NixOS CI failure
  * Fix building w/out deprecated interactive feature
  * Update himmelblau.conf.5 sudo_groups example
  * Entra group based sudo access
  * Audited the cargo updates
  * deps(rust): bump the all-cargo-updates group with 6 updates
  * Vet libhimmelblau
  * Add `make vet` command
  * Update deny.toml
  * Remove incompatible licenses from deps
  * Fix RHEL8 package signing
  * Add SBOM generation
  * Add an IRP checklist for security incidents
  * Run the nixos build/release on the correct version
  * Add crate dependency auditing on MR
  * Add some exceptions
  * Initialize cargo vet
  * Remove in-tree kanidm dependencies
  * Fix Hello PIN lookup when an alias domain
  * Raise maximum group lookup from 100 to 999
  * Always work with lowercase account names
  * Modify FUNDING.yml for funding sources
  * Remove glib dependency
  * deps(rust): bump the all-cargo-updates group with 10 updates
  * Add CI check for licenses
  * Update dependabot.yml to target all stable branches
  * Add authselect module for Rocky/Fedora
  * Recommend packages, instead of require
  * Add a Contributing document
  * Add a Code of Conduct
  * add withSelinux flag to nix build, brings SELinux binaries into the build environment.
  * deps(rust): bump tracing-subscriber in the cargo group
  * Don't overwrite the himmelblau.conf on rpm upgrade
  * Add help output to the Makefile
  * Fix building packages with docker in root mode
  * Update to latest libhimmelblau and identity_dbus_broker
  * Make PRT SSO cookie via broker work as well for Edge
  * Make broker work for Edge
  * Generate Office 365 desktop apps
  * Update README
  * Add `make uninstall` command
  * Remove the deprecated tests suite
  * Himmelblau no longer has git submodules
  * Make install using packages
  * Add Debian 13 packages
  * Generate Dockerfiles automatically
  * Add SELinux configuration
  * Himmelblau daemon requires system tss user
  * Add cron dependency for Intune scripts
  * Do not mangle /usr/etc configuration files
  * Fix building packages with docker in root mode
  * deps(rust): bump the all-cargo-updates group with 11 updates
  * deps(rust): bump the all-cargo-updates group with 7 updates
  * Add SLE16 (beta) build target
  * Automatically append to nsswitch.conf in postinst
  * Correct the RPM postinst script syntax
  * Fix Kerberos credential cache permissions
  * Set file owner and group before writing its content
  * Create SECURITY.md
  * deps(rust): bump the all-cargo-updates group with 6 updates
  * Rev the dev version to 2.0.0
  * Ensure alias domains match when checking Intune device id
  * Debian 12 doesn't support ConditionPathExists and notify-reload
  * Write scripts policy to a readable directory
  * Apply Intune policies right after enrollment
  * Add more debug instrumentation
  * Provide device_id to Intune enrollment if not cached
  * Ensure nss cache directory is created during install
  * Remove /var/cache/himmelblaud access from tasks daemon
  * Resolve daemon startup absolute path warnings
  * Delay Intune enrollment on Device Auth fail
  * Do not leak the Intune IW service token in the logs
- Update to version 1.4.2+git.0.52da279:
  * Version 1.4.2
  * Rocky container image updates were failing
  * Revert libhimmelblau unstable update
  * Version 1.4.1
  * Update Intune to use app version 1.2511.7
  * Version 1.4.0
  * Resolve build failures
  * deps(rust): bump the all-cargo-updates group across 1 directory with 6 updates
  * Permit NSS response for mapped primary fake group
- Update to version 1.3.0+git.0.f8cabb7:
  * Resolve errant "Hello key missing." messages
  * Version 1.3.0
  * Fix group static mapping
  * Move aad-tool idmap cache clear to the idmap cmd
  * deps(rust): bump the all-cargo-updates group across 1 directory with 11 updates
  * deps(rust): bump the all-cargo-updates group with 6 updates
  * Fix RHEL8 package signing
  * Fix Hello PIN lookup when an alias domain
  * Raise maximum group lookup from 100 to 999
  * Always work with lowercase account names
  * Revert the self-hosted runner name
  * deps(rust): bump the all-cargo-updates group with 23 updates
- Update to version 1.2.2+git.0.2d04bca:
  * Include latest branch in CI
  * Self hosted runners
  * Version 1.2.2
  * deps(rust): bump tracing-subscriber in the cargo group; (bsc#1249013), (CVE-2025-58160)
  * Version 1.2.1
  * Automatically append to nsswitch.conf in postinst
  * Correct the RPM postinst script syntax
- Update to version 1.2.0+git.0.6befefc:
  * Version 1.2.0
  * Fix Kerberos credential cache permissions; (bsc#1247735), (CVE-2025-54882)
  * Set file owner and group before writing its content
  * Ensure alias domains match when checking Intune device id
  * Debian 12 doesn't support ConditionPathExists and notify-reload
  * Write scripts policy to a readable directory
  * Apply Intune policies right after enrollment
  * Add more debug instrumentation
  * Provide device_id to Intune enrollment if not cached
  * Ensure nss cache directory is created during install
  * Remove /var/cache/himmelblaud access from tasks daemon
  * Resolve daemon startup absolute path warnings
  * Version 1.1.0
  * Delay Intune enrollment on Device Auth fail
  * Do not leak the Intune IW service token in the logs
- Update to version 1.0.0+git.0.d01709b:
  * Fix policy application
  * Add remaining Linux password compliance policies
  * Add custom compliance enforcement
  * deps(rust): bump the all-cargo-updates group with 3 updates
  * deps(rust): bump the all-cargo-updates group with 5 updates
  * Add SLE15SP7 build target
  * Add RHEL 10 build target
  * Fix Intermittent auth issue AADSTSError 16000
  * Remove old utf8proc dependency
  * Add `fedora42` build target
  * Handle PRT expiration and tie to offline auth
  * Correctly delete the Hello keys on bad pin count
  * Add ability to disable Hello PIN per-service
  * Update NixOS support to 25.05
  * Handle disabled device by attempting re-enrollment
  * Always attempt confidential client creds for aad-tool
  * Include HSM option defs in himmelblau.conf man page
  * Update flake.nix
  * Improve the aad-tool cache-clear command
  * Add `mfaSshWorkaroundFlag` configuration option to Nix Flake.
  * Add the ability to remove confidential client creds
  * If bad PIN count is exceeded, delete the Hello key
  * deps(rust): bump the all-cargo-updates group with 4 updates
  * Add instructions for creating developer builds
  * Fix GDM3 first time login password prompt
  * Default HsmType should be soft
  * Add himmelblaud to tss group for TPM startup
  * Enforce strict order for the systemd units
  * Update libhimmelblau and compact_jwt
  * Fix builds w/tpm
  * aad-tool Authentication flow improvements
  * Filter out irrelevant debug in aad-tool
  * Create a unified login experience for aad-tool
  * Utilize confidential creds for aad-tool enumerate
  * himmelblau should get posix attributes w/out delegate user access
  * Always use the Object Id for mapping Group to GID
  * Update enhancement-request.md for SPI donations
  * Update bug_report.md with SPI donation
  * deps(rust): bump the all-cargo-updates group with 4 updates
  * Update build requires in README.md
  * Enforce strict order for the systemd units
  * Update FUNDING.yml with SPI Paypal donation button
  * Don't break from tasks loop when policies fail
  * Enroll in Intune as soon as it is enabled
  * Implement `decoupled hello` behavior
  * Cache encrypted PRT to disk for offline login SSO
  * Update to latest hsm-crypto
  * Enable tpm functionality
  * Allow altering the password and PIN prompt messages
  * Ensure Hello PIN lockout happens when online
  * Cache the build target output to improve build times
  * Easier build selection w/ Makefile
  * Revert mistaken removal from Makefile
  * Make the user wait longer with each incorrect PIN
  * Make the bad PIN count configurable
  * Improve aad-tool manpage
  * aad-tool fails if the user has FIDO2 enabled
  * Offline auth permits authentication with invalid Hello PIN
  * PIN complexity to match Windows
  * Update to latest SSSD idmap code
  * Add aad-tool options for setting posix attrs
  * Add scopes and redirect uris aad-tool application create
  * Add aad-tool commands for managaging extension attrs
  * deps(rust): bump the all-cargo-updates group with 4 updates
  * cargo clippy
  * cargo fmt
  * Utilize the sidtoname call for object id mapping
  * Add commands for listing/creating App registrations
  * Potential fix for code scanning alert no. 2: Workflow does not contain permissions
  * Potential fix for code scanning alert no. 4: Workflow does not contain permissions
  * Potential fix for code scanning alert: Workflow does not contain permissions
  * Never write the app_id to the server config
  * Disable passwordless Fido by default
  * Stop using deprecated `users` crate
  * When group membership lookup fails, use cached groups
  * deps(rust): bump the all-cargo-updates group across 1 directory with 11 updates
  * deps(rust): bump the all-cargo-updates group with 4 updates
  * aad-tool command for enumerating users and groups
  * Name-Based Group Matching in `pam_allow_groups` Leads to Potential Security Bypass
  * Add the configure-pam option to aad-tool man page
  * Add static idmap cache for on-prem to cloud migration
  * Update bug_report.md with request for himmelblau.conf
  * deps(rust): bump the all-cargo-updates group with 2 updates
  * Update crates in a group
  * Update crate bumps
  * Utilize new Intune compliance enforcement via libhimmelblau
  * Correct the README regarding Intune policy compliance
  * Disable Chromium policy
  * Re-enable Intune policy and add scripts and compliance policies
  * himmelblau.conf alias `domain` as `domains`
  * Support Fido auth in pam passwd
  * Add TAP support to himmelblaud and pam passwd
  * Mixed case names should properly identify Hello Key
  * Update linux-entra-sso to latest version
  * Fix group lookup for Entra Id group name
  * Fix mixed case name lookup from PRT cache
  * Crate updates
  * Fix tasks daemon debug output
  * Remove write locks where unecessary
  * Fix deadlock in nss
  * systemd notify fixes
  * Console
  * Address Feedback
  * Order services before gdb/nss-user-target
  * deps(rust): bump rpassword from 7.3.1 to 7.4.0
  * deps(rust): bump tokio from 1.44.2 to 1.45.0
  * deps(rust): bump sha2 from 0.10.8 to 0.10.9
  * deps(rust): bump systemd-journal-logger from 2.2.0 to 2.2.2
  * deps(rust): bump clap from 4.5.31 to 4.5.38
  * Update notify-debouncer-full
  * Update opentelemetry
  * Update dependencies
  * deps(rust): bump time from 0.3.39 to 0.3.41
  * Replace source filter that blacklists files with filter that whitelists files.
  * Mark himmelblau.conf as config in rpm
  * Update README.md
  * Ensure only the base URL is printed to log
  * If unix_user_get fails, wait, and try again
  * Supplying a PRT cookie to SSO doesn't require network
  * Don't send a password prompt if the network is down
  * Auth via MFA if Hello PIN fails 3 times
  * Improve Hello PIN failed auth error
  * Fix rocky9 build
  * deps(rust): bump anyhow from 1.0.96 to 1.0.98
  * deps(rust): bump libc from 0.2.170 to 0.2.172
  * deps(rust): bump cc from 1.2.16 to 1.2.19
  * Update README.md
  * deps(rust): bump tokio from 1.43.0 to 1.44.2
  * deps(rust): bump openssl from 0.10.71 to 0.10.72 in the cargo group
  * deps(rust): bump reqwest from 0.12.12 to 0.12.15
  * Update libhimmelblau in Cargo.lock
  * Fix nss and offline checks for domain aliases
  * Report error when MS Authenticator denies authorization
  * Bail out of invalid offline auth
  * Handle AADSTS errors from BeginAuth response
  * Never dump failed reqwests to the log
  * Update sccache-action version to use new cache service
  * Permit daemon to start when network is down
  * Add an nss cache for when daemon is down
  * Additional pam info cues
  * Proceed with Hello auth even with net down
  * Indicate to the user what the password and PIN are
  * Ensure pam messages are seen
  * Display the minimum PIN length during Hello setup
  * PAM should loop, not die on error
  * Ensure prompt msg remains for confirmation
  * Update bug_report.md
  * Ignore demands for setting up MS Authenticator
  * Login fails if Entra is configured to recommend MS authenticator
  * Add pam configure command to aad-tool
  * Update README.md with pam passwd instructions
  * aad-tool authtest needs to map names
  * Update demo video in README.md
  * Sign RPM packages
  * Ensure the pam module is installed correctly for SLE
  * Improve pam error handling and messaging
  * Only push cachix builds for stable releases
  * Terminate linux-entra-sso when browser terminates
  * On deb, push pam config after install
  * Increase priority of deb PAM passwd for Himmelblau
  * Improve offline state handling
  * Specify request for Entra Id password in PAM
  * QR Greeter also supports gnome-shell 47
  * Fix profile photo loading
  * Clarify pam_allow_groups in himmelblau.conf man page
  * Don't hide debug for pam_allow_groups miss
  * Handle failures in passwordless auth
  * build all root packages
  * split config options that can be defined per-domain from those which are global only
  * configure cachix signing and upload in ci
  * deps(rust): bump serde_json from 1.0.138 to 1.0.140
  * deps(rust): bump serde from 1.0.218 to 1.0.219
  * deps(rust): bump time from 0.3.37 to 0.3.39
  * deps(rust): bump bytes from 1.10.0 to 1.10.1
  * deps(rust): bump pkg-config from 0.3.31 to 0.3.32
  * Entra Id is case insensitive, cache lookup must match
  * deps(rust): bump ring from 0.17.9 to 0.17.13 in the cargo group
  * Support CompanionAppsNotification mfa method
  * QR code for gnome-shell greeter
  * Allow tasks to start if AccountsService dir missing
  * Remove invalid python dependency from sso package
  * Fixes https://github.com/himmelblau-idm/himmelblau/issues/397
  * Clear server config when clearing cache
  * Update version in the Cargo.lock
  * deps(rust): bump async-trait from 0.1.86 to 0.1.87
  * deps(rust): bump chrono from 0.4.39 to 0.4.40
  * Fix himmelblau.conf man page cn_name_mapping entry
  * deps(rust): bump pem from 3.0.4 to 3.0.5
  * deps(rust): bump serde from 1.0.217 to 1.0.218
  * Version 1.0.0
  * deps(rust): bump cc from 1.2.15 to 1.2.16
  * Update workflow versions
- Update to version 0.9.21+git.0.6963ee0:
  * Fix authentication when passkeys are enabled
  * Version 0.9.20
  * Fix Intermittent auth issue AADSTSError 16000
  * Version 0.9.19
  * Disable cookies
  * Version 0.9.18
  * Cache the build target output to improve build times
  * Easier build selection w/ Makefile
  * Never write the app_id to the server config
- Update to version 0.9.17+git.0.4a97692:
  * Version 0.9.17
  * Offline auth permits authentication with invalid Hello PIN; (CVE-2025-53013).
  * Cargo fmt
  * Don't neglect to sign the rpm packages
- Update to version 0.9.16+git.0.aac2205:
  * Disable passwordless Fido by default
  * Stop using deprecated `users` crate
  * Version 0.9.16
  * When group membership lookup fails, use cached groups
  * Just report whether some passwordless type is available
  * Version 0.9.15
  * Name-Based Group Matching in `pam_allow_groups` Leads to Potential Security Bypass
  * Version 0.9.14
  * Support Fido auth in pam passwd
  * Add TAP support to himmelblaud and pam passwd
  * Mixed case names should properly identify Hello Key
  * Remove write locks where unecessary
  * Fix group lookup for Entra Id group name
  * Version 0.9.13
  * Fix mixed case name lookup from PRT cache
- Update to version 0.9.12+git.0.99b5ca6:
  * Version 0.9.12
  * Fix deadlock in nss
  * systemd notify fixes
- Update to version 0.9.11+git.0.04ef9c8:
  * Ensure only the base URL is printed to log
  * Version 0.9.11
  * Supplying a PRT cookie to SSO doesn't require network
  * Improve Hello PIN failed auth error
  * Fix rocky9 build
  * Fix nss and offline checks for domain aliases
  * Report error when MS Authenticator denies authorization
  * Bail out of invalid offline auth
  * Handle AADSTS errors from BeginAuth response
  * Never dump failed reqwests to the log
  * Update sccache-action version to use new cache service
  * Permit daemon to start when network is down
  * Version 0.9.10
  * Add an nss cache for when daemon is down
  * Additional pam info cues
  * Proceed with Hello auth even with net down
  * Indicate to the user what the password and PIN are
  * Specify request for Entra Id password in PAM
  * Ensure pam messages are seen
  * Display the minimum PIN length during Hello setup
  * PAM should loop, not die on error
  * Ensure prompt msg remains for confirmation
- Update to version 0.9.9+git.0.5425b98:
  * Version 0.9.9
  * Ignore demands for setting up MS Authenticator
- Update to version 0.9.8+git.0.3f20b1b:
  * configure cachix signing and upload in ci
  * Version 0.9.8
  * Improve pam error handling and messaging
  * Version 0.9.7
  * Terminate linux-entra-sso when browser terminates
  * On deb, push pam config after install
  * Increase priority of deb PAM passwd for Himmelblau
  * Improve offline state handling
  * QR Greeter also supports gnome-shell 47
  * Version 0.9.6
  * Fix profile photo loading
  * Clarify pam_allow_groups in himmelblau.conf man page
  * Don't hide debug for pam_allow_groups miss
  * Version 0.9.5
  * Handle failures in passwordless auth
- Update to version 0.9.4+git.0.9909238:
  * Version 0.9.4
  * bump ring from 0.17.9 to 0.17.13
  * Entra Id is case insensitive, cache lookup must match
  * Support CompanionAppsNotification mfa method
  * Version 0.9.2
  * QR code for gnome-shell greeter
  * Allow tasks to start if AccountsService dir missing
  * Remove invalid python dependency from sso package
  * Version 0.9.1
  * himmelblaud-tasks stops due to missing dir
  * Clear server config when clearing cache
  * Fix himmelblau.conf man page cn_name_mapping entry
  * Update workflow versions
  * Document the requirements for app_id
  * Properly handle aad error from auth code req
  * Provide a group gid fallback for rfc2307 id map
  * Remove option defs from the default debian himmelblau.conf
  * Ensure tasks daemon creates files w/ correct gid
  * Isolate the name mapping so it only happens if enabled
  * Default to request group info via Edge browser
  * Avoid modifying the cache entries
  * Utilize systemd notify to avoid tasks started fail
  * Ubuntu PAM module configuration to change PIN
  * Resolve migration error `real_gidnumber` missing
  * deps(rust): bump libc from 0.2.169 to 0.2.170
  * deps(rust): bump clap_complete from 4.5.45 to 4.5.46
  * Fix some clippy warnings
  * Cause tasks daemon to honor configured debug
  * Fetch user profile photo via tasks daemon
  * deps(rust): bump clap from 4.5.30 to 4.5.31
  * deps(rust): bump anyhow from 1.0.95 to 1.0.96
  * deps(rust): bump cc from 1.2.14 to 1.2.15
  * Add apparmor whitelisting for nss mapping cache
  * Dramatically improve debug logging
  * Move the NixOS CI to a different workflow (w/out main)
  * Add a sample himmelblau.conf in docs
  * Resolve missed auth code redirect
  * Implement mapped name caching in NSS
  * Add script on-behalf-of flow for logon scripts
  * Update Cargo.lock deps
  * Update installation instructions in the README
  * Donation requests in the issue templates
  * Update README.md with contribute badge
  * Update README.md with contributions statement
  * Create FUNDING.yml
  * Update README.md
  * fix failing test expecting /bin/echo to be available
  * add nixos ci tests
  * Use sd_notify to signal service readiness, prevent startup failures
  * Add build command to Makefile
  * Update documentation
  * Add NixOS Module
  * enable build with nix
  * Implement logon name script mapping
  * deps(rust): update libnss requirement from 0.8.0 to 0.9.0
  * Only the himmelblau-sso package should conflict with intune-portal
  * deps(rust): update gethostname requirement from 0.5.0 to 1.0.0
  * deps(rust): update lru requirement from ^0.12.3 to ^0.13.0
  * deps(rust): update rand requirement from ^0.8.5 to ^0.9.0
  * Fetch the group extension attrs with the group object
  * Ensure access token has the GroupMember.Read.All scope
  * Replace the unix attribute option with a rfc2307 idmap
  * Map the extended attr gidNumber to primary group
  * Permit configuration of an Application for group fetching
  * Use posix attributes synchronized from on-prem AD
  * Fix debug option in himmelblau.conf
  * Add a span around server initialisation for correct log coalescing
  * Fix GOA crash when krb5.conf doesn't include /etc/krb5.conf.d
  * Fix libutf8proc dependency issue on Ubuntu 22.04
  * Fix Credentials leaking in the debug log
  * deps(rust): update rusqlite requirement from ^0.32.0 to ^0.33.0 (#345)
  * Decrease CI build time
  * Fix CI failure caused by package revision
  * Support password changes when demanded
  * Update README.md
  * Entra Id no longer permits SFA enrollment
  * Rewrite the sso code in Rust
  * Add profile photo fetching
  * Version 0.9.0
- Update to version 0.8.3+git.5.1510f5a:
  * Decrease CI build time
  * Fix CI failure caused by package revision
  * Version 0.8.4
  * Fix libutf8proc dependency issue on Ubuntu 22.04
  * Version 0.8.3
  * Fix Credentials leaking in the debug log
- Update to version 0.8.2+git.0.553c632:
  * Version 0.8.2
  * Entra Id no longer permits SFA enrollment
  * Remove SSO python dependencies
  * Version 0.8.1
  * Rewrite the sso code in Rust
- Update to version 0.8.0+git.0.249ba5f:
  * Branch version stable-0.8.x
  * Passwordless auth doesn't provide polling numbers
  * Resolve deadlock introduced by Fido auth
  * Implement NGC Passwordless authentication
  * Remove unused commit checklist
  * deps(rust): update bindgen requirement from 0.70.1 to 0.71.1
  * Update libhimmelblau version
  * Custom domains matching
  * Fix IdmapError to indicate the failure
  * Fix Fedora build dependencies
  * Add Fido MFA
  * Add Debian 12 packaging
  * Disable SELinux labeling on build container volume mounts
  * Update github CI dependencies
  * Implement Hello Pin changes via PAM
  * Formatting fix
  * Utilize HimmelblauConfig directly in pam and nss
  * Add config parsing unit tests
  * Fix incorrect default domain
  * Fix config hsm type Tpm error
  * Include multi-domain important info in himmelblau.conf man
  * Update to the latest libhimmelblau
  * Add DAG flow as a fallback for MFA
  * Fix CVE-2024-11738: rustls network-reachable panic in `Acceptor::accept`
  * Update README.md with build requires
  * Enable module for utf8proc-devel in Rocky8
  * Remove the org.samba.himmelblau dbus service
  * Fix missing dependency utf8proc_NFKC_Casefold
  * The tasks daemon needs /etc/groups write access
  * Revert "Fix Ubuntu PAM fallback to password prompt"
  * Fix Ubuntu PAM fallback to password prompt
  * Increase the cache timeout to 5 minutes
  * Always fetch and cache the graph url
  * Package Siemens Linux Entra SSO for Himmelblau
  * Add Kerberos CCache support
  * Update the tasks daemon man page
  * Add a himmelblau.conf man page, and package the man pages
  * Add SLE15SP6 packaging
  * Add Fedora 41 packaging
  * Add Fedora Rawhide packaging
  * Provide enhancement request template
  * Create an issue template
  * Hello support depends on openssl3
  * Fix sshd rpm depends
  * Resolve RPM dependencies automatically
  * Revert "deps(rust): update notify-debouncer-full requirement from 0.3 to 0.4"
  * Add openSUSE Tumbleweed packaging
  * Fix RPM packaging placement of systemd files
  * Remove the failed attempt at debian packaging
  * Add stable-0.7.x to CI workflows
  * Version 0.8.0</changelog>
  <changelog author="david.mulder@suse.com" date="1773230400">- Fix SELinux module packaging to use standard policy macros (bsc#1258236):
  * Build and install precompiled himmelblaud.pp at package build time
  * Replace custom semodule scriptlets with %selinux_modules_install/uninstall
- Update to version 2.3.8+git0.dec3693 (CVE-2026-31979, bsc#1259548):
  * Version 2.3.8
  * Add PrivateTmp back to Tasks Daemon
  * Drop dead code
  * Drop krb5 ccache dir code
  * Add a TODO comment
  * Drop non working packaged krb5 snippet file
  * Write kerberos config snippet
  * Extend resolver interface to return kerberos config together with TGTs
  * Backport SELinux fixes from main
  * Use libkrimes to store TGTs
- Update to version 2.3.7+git0.81088cd:
  * Version 2.3.7
  * cargo vet
  * Fix AWS-LC has PKCS7_verify Certificate Chain Validation Bypass
  * Revert dependency change which broke the nightly build
  * gen_dockerfiles: only himmelblaud has tpm feature, fix all others
  * fix(build): gen_dockerfiles.py mutates shared features list mid-loop
  * Update to libhimmelblau
  on leap 15.6, selinux-policy-devel doesn't exist</changelog>
  <changelog author="david.mulder@suse.com" date="1775044800">- - Update to version 2.3.9+git0.a9fd29b:
  * cargo vet
  * nss: block local group-name collisions on getgrnam (CVE-2026-34397).
  * update aws-lc-sys to 0.39.0 for security fixes
  * update rustls-webpki to 0.103.10 for CRL revocation fix
  * Version 2.3.9
  * cargo vet
  * packaging: fix if/else block for debian's postrm
  * Update apparmor.unix-chkpwd.local (Issue #1252)
  * When Hello user encounters SSPR demand, be permissive
  * add tests for sudo_groups functionality
  * Fix config tests to ignore local host config
  * Do not clear $NOTIFY_SOCKET when calling sd_ready
  * Fix token cache 24h purge
  * broker: use SSO server nonce for PRT only when provided
  * Fix pam_himmelblau blocking local user password changes (#1199)
  * Remove unused File import
  * Use is_ascii_alphanumeric() for account_id validation
  * Fix path traversal in LoadProfilePhoto AccountsService writes
  * Drop initialization tracing span
  * himmelblau-hsm-pin-init: drop RemainAfterExit=yes
  * Add fallback behavior when consent is required
  * qr-greeter: enable extension without socket noise
  * debian: make install/remove noninteractive; reduce QR postinst noise; soften missing hello prt
  * Never respond with BadRequest without error detail
  * deps(rust): bump the all-cargo-updates group across 1 directory with 7 updates</changelog>
</package>
<package pkgid="b392383046618594cd24be4d64c4c8f62356f3ae3c6e3469bb934fcdbd2bf0db" name="hplip" arch="src">
  <version epoch="0" ver="3.26.4" rel="150700.4.3.1"/>
  <changelog author="mwilck@suse.com" date="1737633600">- Fix error in ConfigBase handling (bsc#1209401)
  - add hplip-base-fix-error-in-ConfigBase-handling.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1738152000">- Add python3-setuptools BuildRequires: replaces the fix to
  manually inject PYTHON_INCLUDEDIR. Fix needed to build against
  Python 3.13.</changelog>
  <changelog author="hsk17@mail.de" date="1746446400">- Add hplip-3.24.4-gcc15.patch to fix gcc-15 compile time error
  (lp#2096650)</changelog>
  <changelog author="mwilck@suse.com" date="1746619200">- Update to hplip 3.25.2
- Added support for new printers:
  * HP LaserJet Enterprise Flow MFP 8601z
  * HP LaserJet Enterprise Flow MFP 8601z+
  * HP LaserJet Enterprise MFP 8601dn
  * HP Color LaserJet Enterprise MFP 8801dn
  * HP Color LaserJet Enterprise Flow MFP 8801z
  * HP Color LaserJet Enterprise Flow MFP 8801z+
  * HP LaserJet Enterprise 8501dn
  * HP LaserJet Enterprise 8501x
  * HP LaserJet Enterprise 8501x+
  * DEX MFP D826
  * DEX MFP D82640
  * DEX MFP D82650
  * DEX MFP D82660
  * DEX D50145
  * DEX MFP D42540
  * DEX MFP D52645
  * DEX Color D55745
  * DEX Color MFP D57945
  * DEX Color MFP D677
  * DEX Color MFP D67755
  * DEX Color MFP D67765
  * DEX Color MFP D877
  * DEX Color MFP D87740
  * DEX Color MFP D87750
  * DEX Color MFP D87760
  * DEX Color MFP D87770
  * DEX Color MFP D786
  * DEX Colour MFP D78625
  * DEX Color MFP D78630
  * DEX Color MFP D78635
  * DEX MFP D731
  * DEX MFP D73130
  * DEX MFP D73135
  * DEX MFP D73140
- Fix plugin verification with sha256 (lp#2110100)
  * add hplip-utils-Fix-plugin-verification-with-sha256.patch
- Fix C++ compilation on SLE12
  * add hpcups-fix-compilation-on-SLE12.patch</changelog>
  <changelog author="mwilck@suse.com" date="1752580800">- Fix ReDoS issue in  HPLIP's SLP parser (bsc#1245358)
  * add Fix-ReDoS-issue-in-HPLIP-s-SLP-parser.patch</changelog>
  <changelog author="lubos.kocman@suse.com" date="1755172800">- Disable hp-scan-utils on Leap 16.0
  Leap does not want to ship scikit-image -&gt; python-pandas</changelog>
  <changelog author="mwilck@suse.com" date="1755259200">- Updated hplip gpg public key
  fingerprint: 82FF A7C6 AA74 11D9 34BD E173 AC69 536A 2CF3 A243
  https://developers.hp.com/hp-linux-imaging-and-printing/hplipDigitalCertificate.html
- Update to hplip 3.25.6
- Added support for new printers:
  * HP LaserJet Enterprise Flow MFP 8601z
  * HP LaserJet Pro MFP M126a plus
  * HP LaserJet Pro MFP M126nw plus
  * HP LaserJet Pro MFP M126snw plus
  * HP Envy Photo 7200 series
  * HP Envy Photo 7900 series
  * HP OfficeJet Pro 9110 Series
  * HP OfficeJet 9120 Series
  * HP OfficeJet Pro 9120 Series
  * HP OfficeJet Pro 9130 Series</changelog>
  <changelog author="mwilck@suse.com" date="1755259201">- Fix verification of HP plugin with new GPG key (lp#2120738)
  * add hplip-hardcode-new-signing-key-AC69536A2CF3A243.patch
- Fix python crash in hp-setup on compressed PPD file (lp#2120739)
  * add hp-setup-fix-python-crash-when-manually-importing-gz.patch
- Fix missing urllib.URLopener in python 3.14 (lp#2115046)
  * add hplip-no-urlopener.patch
- Only run cupstestppd if explicitly requested with "--with testppd"
  build parameter</changelog>
  <changelog author="mwilck@suse.com" date="1755604800">- Refactor package structure:
  * hplip: full set of utilities. Pulls in almost all subpackages
    to deliver the "traditional" hplip experience
  * hplip-base: small set of basic utilities that can be run
    without GUI. Includes hp-probe and hp-plugin
  * hplip-cups: minimal package for printing, without PPDs or
    setup helpers
  * hplip-sane: scanning support (unchanged)
  * hplip-driver-hpcups: hpcups.drv for generating hpcups PPDs on
    the fly (requires ppdc). The functionality of this package is
    similar to the old (misnamed) "hplip-hpijs" package.
  * hplip-driver-hpijs: hpijs.drv for generating PPDs for the deprecated
    hpijs / foomatic_rip filter. Note that this functionality was not part of
    the late hplip-hpijs package, because upstream hasn't ship foomatic PPDs
    since hplip 3.17.11.
  * hplip-ppds-{hpcups,hpps,postscript,hpijs,fax,plugin}: static PPD
    files for different printer types.
    hplip-ppds-hpcups is an alternative to hplip-driver-hpcups.
  * libhplip0: shared library package, used by hplip-cups and
    hplip-sane
  * hplip-common: configuration files and directories used by
    all hplip packages.
- Other spec file changes:
  * Skip deprecated suse_update_desktop_file by default on TW
  * Don't mess with sane configuration in udev rules
  * Only the hpijs packages depend on foomatic-rip, which is only
    provided by cups-filters-1.x. The other packages can be used
    with cups-filters2.
  * Remove Obsoletes: for ancient predecessor packages
  * Remove outdated comments from spec file
  * Shorten package descriptions
  * Fix a couple of rpmlint issues
- Fix printer probing using avahi (lp#2120947)
  * Add hplip-fix-driver-probing-using-avahi.patch
  * Add hplip-fix-python-crash-in-avahi.py.patch</changelog>
  <changelog author="martin.wilck@suse.com" date="1755777600">- Continue refactoring:
  * move GUI tools to "hplip-utils" subpackage
  * convert "hplip" into an empty metapackage that pulls in hplip-utils
    and all drivers / PPDs (except hpijs PPDs).</changelog>
  <changelog author="jsmeix@suse.com" date="1759147200">- The old and outdated 'hpijs' driver support is finally dropped
  (the 'hpcups' driver is the default driver since 2009)
  so that there is no need for foomatic-filters (boo#1250481)</changelog>
  <changelog author="mwilck@suse.com" date="1759924800">- Drop dependency on cups-ppdc. It isn't necessary, as PPD
  generation on target system is done by cups-driverd.</changelog>
  <changelog author="mwilck@suse.com" date="1759924801">- Update fix for support of new GPG key, as the key has now been
  uploaded to GPG keyservers (lp#2120738)
  * drop hplip-hardcode-new-signing-key-AC69536A2CF3A243.patch
  * update hplip-change-pgp-server.patch
- This fixes CVE-2025-43023 (bsc#1266031)</changelog>
  <changelog author="mwilck@suse.com" date="1759924802">- Move more utilities from hplip-utils to hplip-base.
  * hplip-base now contains all utilities that are not totally useless
    and can run without the Qt GUI.</changelog>
  <changelog author="sbrabec@suse.com" date="1763812800">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="mwilck@suse.com" date="1770120000">- Fix PPD lookup by moving PPDs from manufacturer-PPDs/hplip-fax
  to  manufacturer-PPDs/hplip/fax etc (boo#1257529)</changelog>
  <changelog author="mwilck@suse.com" date="1770120001">- Update to HPLIP 3.25.8
- Added support for the following new Printers:
  * HP LaserJet Enterprise Flow MFP 8601z
  * HP LaserJet Enterprise 5501
  * HP LaserJet Enterprise MFP 5601dn
  * HP LaserJet Enterprise 6500dn
  * HP LaserJet Enterprise 5501n
  * HP LaserJet Enterprise MFP 5601
  * HP LaserJet Enterprise 6500
  * HP LaserJet Enterprise 5502dn
  * HP LaserJet Enterprise MFP 5602dn
  * HP LaserJet Enterprise 6500n
  * HP LaserJet Enterprise 5502
  * HP LaserJet Enterprise MFP 5602f
  * HP LaserJet Enterprise 6501dn
  * HP LaserJet Enterprise X50452dn
  * HP LaserJet Enterprise Flow MFP 5602zfw
  * HP LaserJet Enterprise 6501
  * HP LaserJet Enterprise X50452
  * HP LaserJet Enterprise MFP 5602
  * HP LaserJet Enterprise X60257dn
  * HP LaserJet Enterprise MFP X53052dn
  * HP LaserJet Enterprise Flow MFP X530
  * HP LaserJet Enterprise X60257
  * HP LaserJet Enterprise MFP X53052
  * HP LaserJet Enterprise X60357dn
  * HP LaserJet Enterprise X60357
  * HP LaserJet Enterprise MFP 6600dn
  * HP LaserJet Enterprise Flow MFP 6600zfw
  * HP LaserJet Enterprise MFP 6600
  * HP LaserJet Enterprise Flow MFP 6600zfsw
  * HP LaserJet Enterprise MFP X62757dn
  * HP LaserJet Enterprise Flow MFP X62757zs
  * HP LaserJet Enterprise MFP X62757
  * DEX D50452dn
  * DEX MFP D53052dn
- Drop patches that have been merged upstream:
  * Drop hplip-change-pgp-server.patch
  * Drop hp-setup-fix-python-crash-when-manually-importing-gz.patch
- Fix handling of readfp() and read_filke() for ConfigParser objects,
  avoiding confusing error messages (lp#2139771)
  * Add hplip-fix-handling-of-ConfigParser-.readfp-vs.-read_.patch
  * Drop hplip-base-replace-f-string-with-string.format-for-p.patch
- Fix compiler warnings on SLE15
  * Add Fix-two-compiler-warnings-that-cause-build-failure-o.patch
- Fix "Found No Section" error with python (lp#2095776)
  * Add hplip-base-Fix-Found-No-Section-error-with-python-2..patch
- Renamed patch files to achieve a consistent patch naming according
  to the rules of git-format-patch:
  * Rename change-udev-rules.diff -&gt; hplip-change-udev-rules.patch
  * Rename disable_hp-upgrade.patch -&gt; disable-hp-upgrade.patch
  * Rename add_missing_includes_and_define_GNU_SOURCE.patch
  - &gt; add-missing-includes-and-define-GNU_SOURCE.patch
  * Rename hplip-remove-imageprocessor.diff
  - &gt; hplip-remove-imageprocessor.patch
  * Rename hplip-orblite-return-null.diff -&gt; hplip-orblite-return-null.patch
  * Rename hplip-hpaio-gcc14.patch -&gt; hplip-hpaio-avoid-C99-violations.patch
  * Rename hplip-no-urlopener.patch
  - &gt; URLopener-was-removed-in-Python-3.14-and-hplip-trace.patch
  * Rename hplip-3.24.4-gcc15.patch -&gt; hplip-sane-fix-compilation-with-gcc-15.patch
  Patches are now managed under https://github.com/mwilck/hplip</changelog>
  <changelog author="mlin@suse.com" date="1779192000">- Adjust the version condition not to build scan_utils since
  %suse_version macro has been changed to 1610 in Leap 16.1</changelog>
  <changelog author="mwilck@suse.com" date="1779451200">- Update to HPLIP 3.26.4
- Fix CVE-2026-8631 (bsc#1266023)
- Fix CVE-2026-8632 (bsc#1266024)
- Add support for the following new printers:
  * HP LaserJet Pro MFP 3106sdw
  * HP LaserJet Pro MFP 3105sdw
  * HP Envy 6500e series
  * HP Envy 6500 series
  * HP OfficeJet Pro 9730 Series
  * HP OfficeJet Pro 9730e Series
  * HP OfficeJet Pro 9720 Series
  * HP OfficeJet Pro 9720e Series
  * HP OfficeJet Pro 8130e All-in-One series
  * HP OfficeJet Pro 8130 All-in-One series
  * HP OfficeJet 8130e All-in-One series
  * HP OfficeJet 8130 All-in-One series
  * HP OfficeJet Pro 8120e All-in-One series
  * HP OfficeJet Pro 8120 All-in-One series
  * HP OfficeJet 8120e All-in-One series
  * HP OfficeJet 8120 All-in-One series
  * HP DeskJet Ink Advantage ultra 5800 All-in-One Printer series
  * HP DeskJet Ink Advantage ultra 5100 All-in-One Printer series
  * HP DeskJet 4300e All-in-One Printer series
  * HP DeskJet Ink Advantage 4300 All-in-One Printer series
  * HP DeskJet 4300 All-in-One Printer series
  * HP DeskJet 2900e All-in-One Printer series
  * HP DeskJet Ink Advantage 2900 All-in-One Printer series
  * HP DeskJet 2900 All-in-One Printer series</changelog>
  <changelog author="mwilck@suse.com" date="1779883200">- Undo factory package refactoring for backward compatibility
  on SLE12 and SLE15. This reverts all packaging changes
  since August 19th, keeping the code changes and security fixes.</changelog>
</package>
<package pkgid="6a3ead1213dc33cc2408e8a6526f4cddcc5480e97aa80a28b872f7f330fbd127" name="hplip-devel" arch="x86_64">
  <version epoch="0" ver="3.26.4" rel="150700.4.3.1"/>
  <changelog author="mwilck@suse.com" date="1737633600">- Fix error in ConfigBase handling (bsc#1209401)
  - add hplip-base-fix-error-in-ConfigBase-handling.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1738152000">- Add python3-setuptools BuildRequires: replaces the fix to
  manually inject PYTHON_INCLUDEDIR. Fix needed to build against
  Python 3.13.</changelog>
  <changelog author="hsk17@mail.de" date="1746446400">- Add hplip-3.24.4-gcc15.patch to fix gcc-15 compile time error
  (lp#2096650)</changelog>
  <changelog author="mwilck@suse.com" date="1746619200">- Update to hplip 3.25.2
- Added support for new printers:
  * HP LaserJet Enterprise Flow MFP 8601z
  * HP LaserJet Enterprise Flow MFP 8601z+
  * HP LaserJet Enterprise MFP 8601dn
  * HP Color LaserJet Enterprise MFP 8801dn
  * HP Color LaserJet Enterprise Flow MFP 8801z
  * HP Color LaserJet Enterprise Flow MFP 8801z+
  * HP LaserJet Enterprise 8501dn
  * HP LaserJet Enterprise 8501x
  * HP LaserJet Enterprise 8501x+
  * DEX MFP D826
  * DEX MFP D82640
  * DEX MFP D82650
  * DEX MFP D82660
  * DEX D50145
  * DEX MFP D42540
  * DEX MFP D52645
  * DEX Color D55745
  * DEX Color MFP D57945
  * DEX Color MFP D677
  * DEX Color MFP D67755
  * DEX Color MFP D67765
  * DEX Color MFP D877
  * DEX Color MFP D87740
  * DEX Color MFP D87750
  * DEX Color MFP D87760
  * DEX Color MFP D87770
  * DEX Color MFP D786
  * DEX Colour MFP D78625
  * DEX Color MFP D78630
  * DEX Color MFP D78635
  * DEX MFP D731
  * DEX MFP D73130
  * DEX MFP D73135
  * DEX MFP D73140
- Fix plugin verification with sha256 (lp#2110100)
  * add hplip-utils-Fix-plugin-verification-with-sha256.patch
- Fix C++ compilation on SLE12
  * add hpcups-fix-compilation-on-SLE12.patch</changelog>
  <changelog author="mwilck@suse.com" date="1752580800">- Fix ReDoS issue in  HPLIP's SLP parser (bsc#1245358)
  * add Fix-ReDoS-issue-in-HPLIP-s-SLP-parser.patch</changelog>
  <changelog author="lubos.kocman@suse.com" date="1755172800">- Disable hp-scan-utils on Leap 16.0
  Leap does not want to ship scikit-image -&gt; python-pandas</changelog>
  <changelog author="mwilck@suse.com" date="1755259200">- Updated hplip gpg public key
  fingerprint: 82FF A7C6 AA74 11D9 34BD E173 AC69 536A 2CF3 A243
  https://developers.hp.com/hp-linux-imaging-and-printing/hplipDigitalCertificate.html
- Update to hplip 3.25.6
- Added support for new printers:
  * HP LaserJet Enterprise Flow MFP 8601z
  * HP LaserJet Pro MFP M126a plus
  * HP LaserJet Pro MFP M126nw plus
  * HP LaserJet Pro MFP M126snw plus
  * HP Envy Photo 7200 series
  * HP Envy Photo 7900 series
  * HP OfficeJet Pro 9110 Series
  * HP OfficeJet 9120 Series
  * HP OfficeJet Pro 9120 Series
  * HP OfficeJet Pro 9130 Series</changelog>
  <changelog author="mwilck@suse.com" date="1755259201">- Fix verification of HP plugin with new GPG key (lp#2120738)
  * add hplip-hardcode-new-signing-key-AC69536A2CF3A243.patch
- Fix python crash in hp-setup on compressed PPD file (lp#2120739)
  * add hp-setup-fix-python-crash-when-manually-importing-gz.patch
- Fix missing urllib.URLopener in python 3.14 (lp#2115046)
  * add hplip-no-urlopener.patch
- Only run cupstestppd if explicitly requested with "--with testppd"
  build parameter</changelog>
  <changelog author="mwilck@suse.com" date="1755604800">- Refactor package structure:
  * hplip: full set of utilities. Pulls in almost all subpackages
    to deliver the "traditional" hplip experience
  * hplip-base: small set of basic utilities that can be run
    without GUI. Includes hp-probe and hp-plugin
  * hplip-cups: minimal package for printing, without PPDs or
    setup helpers
  * hplip-sane: scanning support (unchanged)
  * hplip-driver-hpcups: hpcups.drv for generating hpcups PPDs on
    the fly (requires ppdc). The functionality of this package is
    similar to the old (misnamed) "hplip-hpijs" package.
  * hplip-driver-hpijs: hpijs.drv for generating PPDs for the deprecated
    hpijs / foomatic_rip filter. Note that this functionality was not part of
    the late hplip-hpijs package, because upstream hasn't ship foomatic PPDs
    since hplip 3.17.11.
  * hplip-ppds-{hpcups,hpps,postscript,hpijs,fax,plugin}: static PPD
    files for different printer types.
    hplip-ppds-hpcups is an alternative to hplip-driver-hpcups.
  * libhplip0: shared library package, used by hplip-cups and
    hplip-sane
  * hplip-common: configuration files and directories used by
    all hplip packages.
- Other spec file changes:
  * Skip deprecated suse_update_desktop_file by default on TW
  * Don't mess with sane configuration in udev rules
  * Only the hpijs packages depend on foomatic-rip, which is only
    provided by cups-filters-1.x. The other packages can be used
    with cups-filters2.
  * Remove Obsoletes: for ancient predecessor packages
  * Remove outdated comments from spec file
  * Shorten package descriptions
  * Fix a couple of rpmlint issues
- Fix printer probing using avahi (lp#2120947)
  * Add hplip-fix-driver-probing-using-avahi.patch
  * Add hplip-fix-python-crash-in-avahi.py.patch</changelog>
  <changelog author="martin.wilck@suse.com" date="1755777600">- Continue refactoring:
  * move GUI tools to "hplip-utils" subpackage
  * convert "hplip" into an empty metapackage that pulls in hplip-utils
    and all drivers / PPDs (except hpijs PPDs).</changelog>
  <changelog author="jsmeix@suse.com" date="1759147200">- The old and outdated 'hpijs' driver support is finally dropped
  (the 'hpcups' driver is the default driver since 2009)
  so that there is no need for foomatic-filters (boo#1250481)</changelog>
  <changelog author="mwilck@suse.com" date="1759924800">- Drop dependency on cups-ppdc. It isn't necessary, as PPD
  generation on target system is done by cups-driverd.</changelog>
  <changelog author="mwilck@suse.com" date="1759924801">- Update fix for support of new GPG key, as the key has now been
  uploaded to GPG keyservers (lp#2120738)
  * drop hplip-hardcode-new-signing-key-AC69536A2CF3A243.patch
  * update hplip-change-pgp-server.patch
- This fixes CVE-2025-43023 (bsc#1266031)</changelog>
  <changelog author="mwilck@suse.com" date="1759924802">- Move more utilities from hplip-utils to hplip-base.
  * hplip-base now contains all utilities that are not totally useless
    and can run without the Qt GUI.</changelog>
  <changelog author="sbrabec@suse.com" date="1763812800">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="mwilck@suse.com" date="1770120000">- Fix PPD lookup by moving PPDs from manufacturer-PPDs/hplip-fax
  to  manufacturer-PPDs/hplip/fax etc (boo#1257529)</changelog>
  <changelog author="mwilck@suse.com" date="1770120001">- Update to HPLIP 3.25.8
- Added support for the following new Printers:
  * HP LaserJet Enterprise Flow MFP 8601z
  * HP LaserJet Enterprise 5501
  * HP LaserJet Enterprise MFP 5601dn
  * HP LaserJet Enterprise 6500dn
  * HP LaserJet Enterprise 5501n
  * HP LaserJet Enterprise MFP 5601
  * HP LaserJet Enterprise 6500
  * HP LaserJet Enterprise 5502dn
  * HP LaserJet Enterprise MFP 5602dn
  * HP LaserJet Enterprise 6500n
  * HP LaserJet Enterprise 5502
  * HP LaserJet Enterprise MFP 5602f
  * HP LaserJet Enterprise 6501dn
  * HP LaserJet Enterprise X50452dn
  * HP LaserJet Enterprise Flow MFP 5602zfw
  * HP LaserJet Enterprise 6501
  * HP LaserJet Enterprise X50452
  * HP LaserJet Enterprise MFP 5602
  * HP LaserJet Enterprise X60257dn
  * HP LaserJet Enterprise MFP X53052dn
  * HP LaserJet Enterprise Flow MFP X530
  * HP LaserJet Enterprise X60257
  * HP LaserJet Enterprise MFP X53052
  * HP LaserJet Enterprise X60357dn
  * HP LaserJet Enterprise X60357
  * HP LaserJet Enterprise MFP 6600dn
  * HP LaserJet Enterprise Flow MFP 6600zfw
  * HP LaserJet Enterprise MFP 6600
  * HP LaserJet Enterprise Flow MFP 6600zfsw
  * HP LaserJet Enterprise MFP X62757dn
  * HP LaserJet Enterprise Flow MFP X62757zs
  * HP LaserJet Enterprise MFP X62757
  * DEX D50452dn
  * DEX MFP D53052dn
- Drop patches that have been merged upstream:
  * Drop hplip-change-pgp-server.patch
  * Drop hp-setup-fix-python-crash-when-manually-importing-gz.patch
- Fix handling of readfp() and read_filke() for ConfigParser objects,
  avoiding confusing error messages (lp#2139771)
  * Add hplip-fix-handling-of-ConfigParser-.readfp-vs.-read_.patch
  * Drop hplip-base-replace-f-string-with-string.format-for-p.patch
- Fix compiler warnings on SLE15
  * Add Fix-two-compiler-warnings-that-cause-build-failure-o.patch
- Fix "Found No Section" error with python (lp#2095776)
  * Add hplip-base-Fix-Found-No-Section-error-with-python-2..patch
- Renamed patch files to achieve a consistent patch naming according
  to the rules of git-format-patch:
  * Rename change-udev-rules.diff -&gt; hplip-change-udev-rules.patch
  * Rename disable_hp-upgrade.patch -&gt; disable-hp-upgrade.patch
  * Rename add_missing_includes_and_define_GNU_SOURCE.patch
  - &gt; add-missing-includes-and-define-GNU_SOURCE.patch
  * Rename hplip-remove-imageprocessor.diff
  - &gt; hplip-remove-imageprocessor.patch
  * Rename hplip-orblite-return-null.diff -&gt; hplip-orblite-return-null.patch
  * Rename hplip-hpaio-gcc14.patch -&gt; hplip-hpaio-avoid-C99-violations.patch
  * Rename hplip-no-urlopener.patch
  - &gt; URLopener-was-removed-in-Python-3.14-and-hplip-trace.patch
  * Rename hplip-3.24.4-gcc15.patch -&gt; hplip-sane-fix-compilation-with-gcc-15.patch
  Patches are now managed under https://github.com/mwilck/hplip</changelog>
  <changelog author="mlin@suse.com" date="1779192000">- Adjust the version condition not to build scan_utils since
  %suse_version macro has been changed to 1610 in Leap 16.1</changelog>
  <changelog author="mwilck@suse.com" date="1779451200">- Update to HPLIP 3.26.4
- Fix CVE-2026-8631 (bsc#1266023)
- Fix CVE-2026-8632 (bsc#1266024)
- Add support for the following new printers:
  * HP LaserJet Pro MFP 3106sdw
  * HP LaserJet Pro MFP 3105sdw
  * HP Envy 6500e series
  * HP Envy 6500 series
  * HP OfficeJet Pro 9730 Series
  * HP OfficeJet Pro 9730e Series
  * HP OfficeJet Pro 9720 Series
  * HP OfficeJet Pro 9720e Series
  * HP OfficeJet Pro 8130e All-in-One series
  * HP OfficeJet Pro 8130 All-in-One series
  * HP OfficeJet 8130e All-in-One series
  * HP OfficeJet 8130 All-in-One series
  * HP OfficeJet Pro 8120e All-in-One series
  * HP OfficeJet Pro 8120 All-in-One series
  * HP OfficeJet 8120e All-in-One series
  * HP OfficeJet 8120 All-in-One series
  * HP DeskJet Ink Advantage ultra 5800 All-in-One Printer series
  * HP DeskJet Ink Advantage ultra 5100 All-in-One Printer series
  * HP DeskJet 4300e All-in-One Printer series
  * HP DeskJet Ink Advantage 4300 All-in-One Printer series
  * HP DeskJet 4300 All-in-One Printer series
  * HP DeskJet 2900e All-in-One Printer series
  * HP DeskJet Ink Advantage 2900 All-in-One Printer series
  * HP DeskJet 2900 All-in-One Printer series</changelog>
  <changelog author="mwilck@suse.com" date="1779883200">- Undo factory package refactoring for backward compatibility
  on SLE12 and SLE15. This reverts all packaging changes
  since August 19th, keeping the code changes and security fixes.</changelog>
</package>
<package pkgid="ee6ff59d076d10b12e2527c510cd8807e7069c221d8be5f1f9652ac1e4d1f9bf" name="hplip-hpijs" arch="x86_64">
  <version epoch="0" ver="3.26.4" rel="150700.4.3.1"/>
  <changelog author="mwilck@suse.com" date="1737633600">- Fix error in ConfigBase handling (bsc#1209401)
  - add hplip-base-fix-error-in-ConfigBase-handling.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1738152000">- Add python3-setuptools BuildRequires: replaces the fix to
  manually inject PYTHON_INCLUDEDIR. Fix needed to build against
  Python 3.13.</changelog>
  <changelog author="hsk17@mail.de" date="1746446400">- Add hplip-3.24.4-gcc15.patch to fix gcc-15 compile time error
  (lp#2096650)</changelog>
  <changelog author="mwilck@suse.com" date="1746619200">- Update to hplip 3.25.2
- Added support for new printers:
  * HP LaserJet Enterprise Flow MFP 8601z
  * HP LaserJet Enterprise Flow MFP 8601z+
  * HP LaserJet Enterprise MFP 8601dn
  * HP Color LaserJet Enterprise MFP 8801dn
  * HP Color LaserJet Enterprise Flow MFP 8801z
  * HP Color LaserJet Enterprise Flow MFP 8801z+
  * HP LaserJet Enterprise 8501dn
  * HP LaserJet Enterprise 8501x
  * HP LaserJet Enterprise 8501x+
  * DEX MFP D826
  * DEX MFP D82640
  * DEX MFP D82650
  * DEX MFP D82660
  * DEX D50145
  * DEX MFP D42540
  * DEX MFP D52645
  * DEX Color D55745
  * DEX Color MFP D57945
  * DEX Color MFP D677
  * DEX Color MFP D67755
  * DEX Color MFP D67765
  * DEX Color MFP D877
  * DEX Color MFP D87740
  * DEX Color MFP D87750
  * DEX Color MFP D87760
  * DEX Color MFP D87770
  * DEX Color MFP D786
  * DEX Colour MFP D78625
  * DEX Color MFP D78630
  * DEX Color MFP D78635
  * DEX MFP D731
  * DEX MFP D73130
  * DEX MFP D73135
  * DEX MFP D73140
- Fix plugin verification with sha256 (lp#2110100)
  * add hplip-utils-Fix-plugin-verification-with-sha256.patch
- Fix C++ compilation on SLE12
  * add hpcups-fix-compilation-on-SLE12.patch</changelog>
  <changelog author="mwilck@suse.com" date="1752580800">- Fix ReDoS issue in  HPLIP's SLP parser (bsc#1245358)
  * add Fix-ReDoS-issue-in-HPLIP-s-SLP-parser.patch</changelog>
  <changelog author="lubos.kocman@suse.com" date="1755172800">- Disable hp-scan-utils on Leap 16.0
  Leap does not want to ship scikit-image -&gt; python-pandas</changelog>
  <changelog author="mwilck@suse.com" date="1755259200">- Updated hplip gpg public key
  fingerprint: 82FF A7C6 AA74 11D9 34BD E173 AC69 536A 2CF3 A243
  https://developers.hp.com/hp-linux-imaging-and-printing/hplipDigitalCertificate.html
- Update to hplip 3.25.6
- Added support for new printers:
  * HP LaserJet Enterprise Flow MFP 8601z
  * HP LaserJet Pro MFP M126a plus
  * HP LaserJet Pro MFP M126nw plus
  * HP LaserJet Pro MFP M126snw plus
  * HP Envy Photo 7200 series
  * HP Envy Photo 7900 series
  * HP OfficeJet Pro 9110 Series
  * HP OfficeJet 9120 Series
  * HP OfficeJet Pro 9120 Series
  * HP OfficeJet Pro 9130 Series</changelog>
  <changelog author="mwilck@suse.com" date="1755259201">- Fix verification of HP plugin with new GPG key (lp#2120738)
  * add hplip-hardcode-new-signing-key-AC69536A2CF3A243.patch
- Fix python crash in hp-setup on compressed PPD file (lp#2120739)
  * add hp-setup-fix-python-crash-when-manually-importing-gz.patch
- Fix missing urllib.URLopener in python 3.14 (lp#2115046)
  * add hplip-no-urlopener.patch
- Only run cupstestppd if explicitly requested with "--with testppd"
  build parameter</changelog>
  <changelog author="mwilck@suse.com" date="1755604800">- Refactor package structure:
  * hplip: full set of utilities. Pulls in almost all subpackages
    to deliver the "traditional" hplip experience
  * hplip-base: small set of basic utilities that can be run
    without GUI. Includes hp-probe and hp-plugin
  * hplip-cups: minimal package for printing, without PPDs or
    setup helpers
  * hplip-sane: scanning support (unchanged)
  * hplip-driver-hpcups: hpcups.drv for generating hpcups PPDs on
    the fly (requires ppdc). The functionality of this package is
    similar to the old (misnamed) "hplip-hpijs" package.
  * hplip-driver-hpijs: hpijs.drv for generating PPDs for the deprecated
    hpijs / foomatic_rip filter. Note that this functionality was not part of
    the late hplip-hpijs package, because upstream hasn't ship foomatic PPDs
    since hplip 3.17.11.
  * hplip-ppds-{hpcups,hpps,postscript,hpijs,fax,plugin}: static PPD
    files for different printer types.
    hplip-ppds-hpcups is an alternative to hplip-driver-hpcups.
  * libhplip0: shared library package, used by hplip-cups and
    hplip-sane
  * hplip-common: configuration files and directories used by
    all hplip packages.
- Other spec file changes:
  * Skip deprecated suse_update_desktop_file by default on TW
  * Don't mess with sane configuration in udev rules
  * Only the hpijs packages depend on foomatic-rip, which is only
    provided by cups-filters-1.x. The other packages can be used
    with cups-filters2.
  * Remove Obsoletes: for ancient predecessor packages
  * Remove outdated comments from spec file
  * Shorten package descriptions
  * Fix a couple of rpmlint issues
- Fix printer probing using avahi (lp#2120947)
  * Add hplip-fix-driver-probing-using-avahi.patch
  * Add hplip-fix-python-crash-in-avahi.py.patch</changelog>
  <changelog author="martin.wilck@suse.com" date="1755777600">- Continue refactoring:
  * move GUI tools to "hplip-utils" subpackage
  * convert "hplip" into an empty metapackage that pulls in hplip-utils
    and all drivers / PPDs (except hpijs PPDs).</changelog>
  <changelog author="jsmeix@suse.com" date="1759147200">- The old and outdated 'hpijs' driver support is finally dropped
  (the 'hpcups' driver is the default driver since 2009)
  so that there is no need for foomatic-filters (boo#1250481)</changelog>
  <changelog author="mwilck@suse.com" date="1759924800">- Drop dependency on cups-ppdc. It isn't necessary, as PPD
  generation on target system is done by cups-driverd.</changelog>
  <changelog author="mwilck@suse.com" date="1759924801">- Update fix for support of new GPG key, as the key has now been
  uploaded to GPG keyservers (lp#2120738)
  * drop hplip-hardcode-new-signing-key-AC69536A2CF3A243.patch
  * update hplip-change-pgp-server.patch
- This fixes CVE-2025-43023 (bsc#1266031)</changelog>
  <changelog author="mwilck@suse.com" date="1759924802">- Move more utilities from hplip-utils to hplip-base.
  * hplip-base now contains all utilities that are not totally useless
    and can run without the Qt GUI.</changelog>
  <changelog author="sbrabec@suse.com" date="1763812800">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="mwilck@suse.com" date="1770120000">- Fix PPD lookup by moving PPDs from manufacturer-PPDs/hplip-fax
  to  manufacturer-PPDs/hplip/fax etc (boo#1257529)</changelog>
  <changelog author="mwilck@suse.com" date="1770120001">- Update to HPLIP 3.25.8
- Added support for the following new Printers:
  * HP LaserJet Enterprise Flow MFP 8601z
  * HP LaserJet Enterprise 5501
  * HP LaserJet Enterprise MFP 5601dn
  * HP LaserJet Enterprise 6500dn
  * HP LaserJet Enterprise 5501n
  * HP LaserJet Enterprise MFP 5601
  * HP LaserJet Enterprise 6500
  * HP LaserJet Enterprise 5502dn
  * HP LaserJet Enterprise MFP 5602dn
  * HP LaserJet Enterprise 6500n
  * HP LaserJet Enterprise 5502
  * HP LaserJet Enterprise MFP 5602f
  * HP LaserJet Enterprise 6501dn
  * HP LaserJet Enterprise X50452dn
  * HP LaserJet Enterprise Flow MFP 5602zfw
  * HP LaserJet Enterprise 6501
  * HP LaserJet Enterprise X50452
  * HP LaserJet Enterprise MFP 5602
  * HP LaserJet Enterprise X60257dn
  * HP LaserJet Enterprise MFP X53052dn
  * HP LaserJet Enterprise Flow MFP X530
  * HP LaserJet Enterprise X60257
  * HP LaserJet Enterprise MFP X53052
  * HP LaserJet Enterprise X60357dn
  * HP LaserJet Enterprise X60357
  * HP LaserJet Enterprise MFP 6600dn
  * HP LaserJet Enterprise Flow MFP 6600zfw
  * HP LaserJet Enterprise MFP 6600
  * HP LaserJet Enterprise Flow MFP 6600zfsw
  * HP LaserJet Enterprise MFP X62757dn
  * HP LaserJet Enterprise Flow MFP X62757zs
  * HP LaserJet Enterprise MFP X62757
  * DEX D50452dn
  * DEX MFP D53052dn
- Drop patches that have been merged upstream:
  * Drop hplip-change-pgp-server.patch
  * Drop hp-setup-fix-python-crash-when-manually-importing-gz.patch
- Fix handling of readfp() and read_filke() for ConfigParser objects,
  avoiding confusing error messages (lp#2139771)
  * Add hplip-fix-handling-of-ConfigParser-.readfp-vs.-read_.patch
  * Drop hplip-base-replace-f-string-with-string.format-for-p.patch
- Fix compiler warnings on SLE15
  * Add Fix-two-compiler-warnings-that-cause-build-failure-o.patch
- Fix "Found No Section" error with python (lp#2095776)
  * Add hplip-base-Fix-Found-No-Section-error-with-python-2..patch
- Renamed patch files to achieve a consistent patch naming according
  to the rules of git-format-patch:
  * Rename change-udev-rules.diff -&gt; hplip-change-udev-rules.patch
  * Rename disable_hp-upgrade.patch -&gt; disable-hp-upgrade.patch
  * Rename add_missing_includes_and_define_GNU_SOURCE.patch
  - &gt; add-missing-includes-and-define-GNU_SOURCE.patch
  * Rename hplip-remove-imageprocessor.diff
  - &gt; hplip-remove-imageprocessor.patch
  * Rename hplip-orblite-return-null.diff -&gt; hplip-orblite-return-null.patch
  * Rename hplip-hpaio-gcc14.patch -&gt; hplip-hpaio-avoid-C99-violations.patch
  * Rename hplip-no-urlopener.patch
  - &gt; URLopener-was-removed-in-Python-3.14-and-hplip-trace.patch
  * Rename hplip-3.24.4-gcc15.patch -&gt; hplip-sane-fix-compilation-with-gcc-15.patch
  Patches are now managed under https://github.com/mwilck/hplip</changelog>
  <changelog author="mlin@suse.com" date="1779192000">- Adjust the version condition not to build scan_utils since
  %suse_version macro has been changed to 1610 in Leap 16.1</changelog>
  <changelog author="mwilck@suse.com" date="1779451200">- Update to HPLIP 3.26.4
- Fix CVE-2026-8631 (bsc#1266023)
- Fix CVE-2026-8632 (bsc#1266024)
- Add support for the following new printers:
  * HP LaserJet Pro MFP 3106sdw
  * HP LaserJet Pro MFP 3105sdw
  * HP Envy 6500e series
  * HP Envy 6500 series
  * HP OfficeJet Pro 9730 Series
  * HP OfficeJet Pro 9730e Series
  * HP OfficeJet Pro 9720 Series
  * HP OfficeJet Pro 9720e Series
  * HP OfficeJet Pro 8130e All-in-One series
  * HP OfficeJet Pro 8130 All-in-One series
  * HP OfficeJet 8130e All-in-One series
  * HP OfficeJet 8130 All-in-One series
  * HP OfficeJet Pro 8120e All-in-One series
  * HP OfficeJet Pro 8120 All-in-One series
  * HP OfficeJet 8120e All-in-One series
  * HP OfficeJet 8120 All-in-One series
  * HP DeskJet Ink Advantage ultra 5800 All-in-One Printer series
  * HP DeskJet Ink Advantage ultra 5100 All-in-One Printer series
  * HP DeskJet 4300e All-in-One Printer series
  * HP DeskJet Ink Advantage 4300 All-in-One Printer series
  * HP DeskJet 4300 All-in-One Printer series
  * HP DeskJet 2900e All-in-One Printer series
  * HP DeskJet Ink Advantage 2900 All-in-One Printer series
  * HP DeskJet 2900 All-in-One Printer series</changelog>
  <changelog author="mwilck@suse.com" date="1779883200">- Undo factory package refactoring for backward compatibility
  on SLE12 and SLE15. This reverts all packaging changes
  since August 19th, keeping the code changes and security fixes.</changelog>
</package>
<package pkgid="06eafc5db802123549dba16c0846532b223d7282784c2aa443cda11cc4e7d60c" name="hplip-sane" arch="x86_64">
  <version epoch="0" ver="3.26.4" rel="150700.4.3.1"/>
  <changelog author="mwilck@suse.com" date="1737633600">- Fix error in ConfigBase handling (bsc#1209401)
  - add hplip-base-fix-error-in-ConfigBase-handling.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1738152000">- Add python3-setuptools BuildRequires: replaces the fix to
  manually inject PYTHON_INCLUDEDIR. Fix needed to build against
  Python 3.13.</changelog>
  <changelog author="hsk17@mail.de" date="1746446400">- Add hplip-3.24.4-gcc15.patch to fix gcc-15 compile time error
  (lp#2096650)</changelog>
  <changelog author="mwilck@suse.com" date="1746619200">- Update to hplip 3.25.2
- Added support for new printers:
  * HP LaserJet Enterprise Flow MFP 8601z
  * HP LaserJet Enterprise Flow MFP 8601z+
  * HP LaserJet Enterprise MFP 8601dn
  * HP Color LaserJet Enterprise MFP 8801dn
  * HP Color LaserJet Enterprise Flow MFP 8801z
  * HP Color LaserJet Enterprise Flow MFP 8801z+
  * HP LaserJet Enterprise 8501dn
  * HP LaserJet Enterprise 8501x
  * HP LaserJet Enterprise 8501x+
  * DEX MFP D826
  * DEX MFP D82640
  * DEX MFP D82650
  * DEX MFP D82660
  * DEX D50145
  * DEX MFP D42540
  * DEX MFP D52645
  * DEX Color D55745
  * DEX Color MFP D57945
  * DEX Color MFP D677
  * DEX Color MFP D67755
  * DEX Color MFP D67765
  * DEX Color MFP D877
  * DEX Color MFP D87740
  * DEX Color MFP D87750
  * DEX Color MFP D87760
  * DEX Color MFP D87770
  * DEX Color MFP D786
  * DEX Colour MFP D78625
  * DEX Color MFP D78630
  * DEX Color MFP D78635
  * DEX MFP D731
  * DEX MFP D73130
  * DEX MFP D73135
  * DEX MFP D73140
- Fix plugin verification with sha256 (lp#2110100)
  * add hplip-utils-Fix-plugin-verification-with-sha256.patch
- Fix C++ compilation on SLE12
  * add hpcups-fix-compilation-on-SLE12.patch</changelog>
  <changelog author="mwilck@suse.com" date="1752580800">- Fix ReDoS issue in  HPLIP's SLP parser (bsc#1245358)
  * add Fix-ReDoS-issue-in-HPLIP-s-SLP-parser.patch</changelog>
  <changelog author="lubos.kocman@suse.com" date="1755172800">- Disable hp-scan-utils on Leap 16.0
  Leap does not want to ship scikit-image -&gt; python-pandas</changelog>
  <changelog author="mwilck@suse.com" date="1755259200">- Updated hplip gpg public key
  fingerprint: 82FF A7C6 AA74 11D9 34BD E173 AC69 536A 2CF3 A243
  https://developers.hp.com/hp-linux-imaging-and-printing/hplipDigitalCertificate.html
- Update to hplip 3.25.6
- Added support for new printers:
  * HP LaserJet Enterprise Flow MFP 8601z
  * HP LaserJet Pro MFP M126a plus
  * HP LaserJet Pro MFP M126nw plus
  * HP LaserJet Pro MFP M126snw plus
  * HP Envy Photo 7200 series
  * HP Envy Photo 7900 series
  * HP OfficeJet Pro 9110 Series
  * HP OfficeJet 9120 Series
  * HP OfficeJet Pro 9120 Series
  * HP OfficeJet Pro 9130 Series</changelog>
  <changelog author="mwilck@suse.com" date="1755259201">- Fix verification of HP plugin with new GPG key (lp#2120738)
  * add hplip-hardcode-new-signing-key-AC69536A2CF3A243.patch
- Fix python crash in hp-setup on compressed PPD file (lp#2120739)
  * add hp-setup-fix-python-crash-when-manually-importing-gz.patch
- Fix missing urllib.URLopener in python 3.14 (lp#2115046)
  * add hplip-no-urlopener.patch
- Only run cupstestppd if explicitly requested with "--with testppd"
  build parameter</changelog>
  <changelog author="mwilck@suse.com" date="1755604800">- Refactor package structure:
  * hplip: full set of utilities. Pulls in almost all subpackages
    to deliver the "traditional" hplip experience
  * hplip-base: small set of basic utilities that can be run
    without GUI. Includes hp-probe and hp-plugin
  * hplip-cups: minimal package for printing, without PPDs or
    setup helpers
  * hplip-sane: scanning support (unchanged)
  * hplip-driver-hpcups: hpcups.drv for generating hpcups PPDs on
    the fly (requires ppdc). The functionality of this package is
    similar to the old (misnamed) "hplip-hpijs" package.
  * hplip-driver-hpijs: hpijs.drv for generating PPDs for the deprecated
    hpijs / foomatic_rip filter. Note that this functionality was not part of
    the late hplip-hpijs package, because upstream hasn't ship foomatic PPDs
    since hplip 3.17.11.
  * hplip-ppds-{hpcups,hpps,postscript,hpijs,fax,plugin}: static PPD
    files for different printer types.
    hplip-ppds-hpcups is an alternative to hplip-driver-hpcups.
  * libhplip0: shared library package, used by hplip-cups and
    hplip-sane
  * hplip-common: configuration files and directories used by
    all hplip packages.
- Other spec file changes:
  * Skip deprecated suse_update_desktop_file by default on TW
  * Don't mess with sane configuration in udev rules
  * Only the hpijs packages depend on foomatic-rip, which is only
    provided by cups-filters-1.x. The other packages can be used
    with cups-filters2.
  * Remove Obsoletes: for ancient predecessor packages
  * Remove outdated comments from spec file
  * Shorten package descriptions
  * Fix a couple of rpmlint issues
- Fix printer probing using avahi (lp#2120947)
  * Add hplip-fix-driver-probing-using-avahi.patch
  * Add hplip-fix-python-crash-in-avahi.py.patch</changelog>
  <changelog author="martin.wilck@suse.com" date="1755777600">- Continue refactoring:
  * move GUI tools to "hplip-utils" subpackage
  * convert "hplip" into an empty metapackage that pulls in hplip-utils
    and all drivers / PPDs (except hpijs PPDs).</changelog>
  <changelog author="jsmeix@suse.com" date="1759147200">- The old and outdated 'hpijs' driver support is finally dropped
  (the 'hpcups' driver is the default driver since 2009)
  so that there is no need for foomatic-filters (boo#1250481)</changelog>
  <changelog author="mwilck@suse.com" date="1759924800">- Drop dependency on cups-ppdc. It isn't necessary, as PPD
  generation on target system is done by cups-driverd.</changelog>
  <changelog author="mwilck@suse.com" date="1759924801">- Update fix for support of new GPG key, as the key has now been
  uploaded to GPG keyservers (lp#2120738)
  * drop hplip-hardcode-new-signing-key-AC69536A2CF3A243.patch
  * update hplip-change-pgp-server.patch
- This fixes CVE-2025-43023 (bsc#1266031)</changelog>
  <changelog author="mwilck@suse.com" date="1759924802">- Move more utilities from hplip-utils to hplip-base.
  * hplip-base now contains all utilities that are not totally useless
    and can run without the Qt GUI.</changelog>
  <changelog author="sbrabec@suse.com" date="1763812800">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="mwilck@suse.com" date="1770120000">- Fix PPD lookup by moving PPDs from manufacturer-PPDs/hplip-fax
  to  manufacturer-PPDs/hplip/fax etc (boo#1257529)</changelog>
  <changelog author="mwilck@suse.com" date="1770120001">- Update to HPLIP 3.25.8
- Added support for the following new Printers:
  * HP LaserJet Enterprise Flow MFP 8601z
  * HP LaserJet Enterprise 5501
  * HP LaserJet Enterprise MFP 5601dn
  * HP LaserJet Enterprise 6500dn
  * HP LaserJet Enterprise 5501n
  * HP LaserJet Enterprise MFP 5601
  * HP LaserJet Enterprise 6500
  * HP LaserJet Enterprise 5502dn
  * HP LaserJet Enterprise MFP 5602dn
  * HP LaserJet Enterprise 6500n
  * HP LaserJet Enterprise 5502
  * HP LaserJet Enterprise MFP 5602f
  * HP LaserJet Enterprise 6501dn
  * HP LaserJet Enterprise X50452dn
  * HP LaserJet Enterprise Flow MFP 5602zfw
  * HP LaserJet Enterprise 6501
  * HP LaserJet Enterprise X50452
  * HP LaserJet Enterprise MFP 5602
  * HP LaserJet Enterprise X60257dn
  * HP LaserJet Enterprise MFP X53052dn
  * HP LaserJet Enterprise Flow MFP X530
  * HP LaserJet Enterprise X60257
  * HP LaserJet Enterprise MFP X53052
  * HP LaserJet Enterprise X60357dn
  * HP LaserJet Enterprise X60357
  * HP LaserJet Enterprise MFP 6600dn
  * HP LaserJet Enterprise Flow MFP 6600zfw
  * HP LaserJet Enterprise MFP 6600
  * HP LaserJet Enterprise Flow MFP 6600zfsw
  * HP LaserJet Enterprise MFP X62757dn
  * HP LaserJet Enterprise Flow MFP X62757zs
  * HP LaserJet Enterprise MFP X62757
  * DEX D50452dn
  * DEX MFP D53052dn
- Drop patches that have been merged upstream:
  * Drop hplip-change-pgp-server.patch
  * Drop hp-setup-fix-python-crash-when-manually-importing-gz.patch
- Fix handling of readfp() and read_filke() for ConfigParser objects,
  avoiding confusing error messages (lp#2139771)
  * Add hplip-fix-handling-of-ConfigParser-.readfp-vs.-read_.patch
  * Drop hplip-base-replace-f-string-with-string.format-for-p.patch
- Fix compiler warnings on SLE15
  * Add Fix-two-compiler-warnings-that-cause-build-failure-o.patch
- Fix "Found No Section" error with python (lp#2095776)
  * Add hplip-base-Fix-Found-No-Section-error-with-python-2..patch
- Renamed patch files to achieve a consistent patch naming according
  to the rules of git-format-patch:
  * Rename change-udev-rules.diff -&gt; hplip-change-udev-rules.patch
  * Rename disable_hp-upgrade.patch -&gt; disable-hp-upgrade.patch
  * Rename add_missing_includes_and_define_GNU_SOURCE.patch
  - &gt; add-missing-includes-and-define-GNU_SOURCE.patch
  * Rename hplip-remove-imageprocessor.diff
  - &gt; hplip-remove-imageprocessor.patch
  * Rename hplip-orblite-return-null.diff -&gt; hplip-orblite-return-null.patch
  * Rename hplip-hpaio-gcc14.patch -&gt; hplip-hpaio-avoid-C99-violations.patch
  * Rename hplip-no-urlopener.patch
  - &gt; URLopener-was-removed-in-Python-3.14-and-hplip-trace.patch
  * Rename hplip-3.24.4-gcc15.patch -&gt; hplip-sane-fix-compilation-with-gcc-15.patch
  Patches are now managed under https://github.com/mwilck/hplip</changelog>
  <changelog author="mlin@suse.com" date="1779192000">- Adjust the version condition not to build scan_utils since
  %suse_version macro has been changed to 1610 in Leap 16.1</changelog>
  <changelog author="mwilck@suse.com" date="1779451200">- Update to HPLIP 3.26.4
- Fix CVE-2026-8631 (bsc#1266023)
- Fix CVE-2026-8632 (bsc#1266024)
- Add support for the following new printers:
  * HP LaserJet Pro MFP 3106sdw
  * HP LaserJet Pro MFP 3105sdw
  * HP Envy 6500e series
  * HP Envy 6500 series
  * HP OfficeJet Pro 9730 Series
  * HP OfficeJet Pro 9730e Series
  * HP OfficeJet Pro 9720 Series
  * HP OfficeJet Pro 9720e Series
  * HP OfficeJet Pro 8130e All-in-One series
  * HP OfficeJet Pro 8130 All-in-One series
  * HP OfficeJet 8130e All-in-One series
  * HP OfficeJet 8130 All-in-One series
  * HP OfficeJet Pro 8120e All-in-One series
  * HP OfficeJet Pro 8120 All-in-One series
  * HP OfficeJet 8120e All-in-One series
  * HP OfficeJet 8120 All-in-One series
  * HP DeskJet Ink Advantage ultra 5800 All-in-One Printer series
  * HP DeskJet Ink Advantage ultra 5100 All-in-One Printer series
  * HP DeskJet 4300e All-in-One Printer series
  * HP DeskJet Ink Advantage 4300 All-in-One Printer series
  * HP DeskJet 4300 All-in-One Printer series
  * HP DeskJet 2900e All-in-One Printer series
  * HP DeskJet Ink Advantage 2900 All-in-One Printer series
  * HP DeskJet 2900 All-in-One Printer series</changelog>
  <changelog author="mwilck@suse.com" date="1779883200">- Undo factory package refactoring for backward compatibility
  on SLE12 and SLE15. This reverts all packaging changes
  since August 19th, keeping the code changes and security fixes.</changelog>
</package>
<package pkgid="faee6465b868d9b3a21a4e1d37f020845cd04fe7f5c230c6a8e3074e5e008575" name="hplip-udev-rules" arch="x86_64">
  <version epoch="0" ver="3.26.4" rel="150700.4.3.1"/>
  <changelog author="mwilck@suse.com" date="1737633600">- Fix error in ConfigBase handling (bsc#1209401)
  - add hplip-base-fix-error-in-ConfigBase-handling.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1738152000">- Add python3-setuptools BuildRequires: replaces the fix to
  manually inject PYTHON_INCLUDEDIR. Fix needed to build against
  Python 3.13.</changelog>
  <changelog author="hsk17@mail.de" date="1746446400">- Add hplip-3.24.4-gcc15.patch to fix gcc-15 compile time error
  (lp#2096650)</changelog>
  <changelog author="mwilck@suse.com" date="1746619200">- Update to hplip 3.25.2
- Added support for new printers:
  * HP LaserJet Enterprise Flow MFP 8601z
  * HP LaserJet Enterprise Flow MFP 8601z+
  * HP LaserJet Enterprise MFP 8601dn
  * HP Color LaserJet Enterprise MFP 8801dn
  * HP Color LaserJet Enterprise Flow MFP 8801z
  * HP Color LaserJet Enterprise Flow MFP 8801z+
  * HP LaserJet Enterprise 8501dn
  * HP LaserJet Enterprise 8501x
  * HP LaserJet Enterprise 8501x+
  * DEX MFP D826
  * DEX MFP D82640
  * DEX MFP D82650
  * DEX MFP D82660
  * DEX D50145
  * DEX MFP D42540
  * DEX MFP D52645
  * DEX Color D55745
  * DEX Color MFP D57945
  * DEX Color MFP D677
  * DEX Color MFP D67755
  * DEX Color MFP D67765
  * DEX Color MFP D877
  * DEX Color MFP D87740
  * DEX Color MFP D87750
  * DEX Color MFP D87760
  * DEX Color MFP D87770
  * DEX Color MFP D786
  * DEX Colour MFP D78625
  * DEX Color MFP D78630
  * DEX Color MFP D78635
  * DEX MFP D731
  * DEX MFP D73130
  * DEX MFP D73135
  * DEX MFP D73140
- Fix plugin verification with sha256 (lp#2110100)
  * add hplip-utils-Fix-plugin-verification-with-sha256.patch
- Fix C++ compilation on SLE12
  * add hpcups-fix-compilation-on-SLE12.patch</changelog>
  <changelog author="mwilck@suse.com" date="1752580800">- Fix ReDoS issue in  HPLIP's SLP parser (bsc#1245358)
  * add Fix-ReDoS-issue-in-HPLIP-s-SLP-parser.patch</changelog>
  <changelog author="lubos.kocman@suse.com" date="1755172800">- Disable hp-scan-utils on Leap 16.0
  Leap does not want to ship scikit-image -&gt; python-pandas</changelog>
  <changelog author="mwilck@suse.com" date="1755259200">- Updated hplip gpg public key
  fingerprint: 82FF A7C6 AA74 11D9 34BD E173 AC69 536A 2CF3 A243
  https://developers.hp.com/hp-linux-imaging-and-printing/hplipDigitalCertificate.html
- Update to hplip 3.25.6
- Added support for new printers:
  * HP LaserJet Enterprise Flow MFP 8601z
  * HP LaserJet Pro MFP M126a plus
  * HP LaserJet Pro MFP M126nw plus
  * HP LaserJet Pro MFP M126snw plus
  * HP Envy Photo 7200 series
  * HP Envy Photo 7900 series
  * HP OfficeJet Pro 9110 Series
  * HP OfficeJet 9120 Series
  * HP OfficeJet Pro 9120 Series
  * HP OfficeJet Pro 9130 Series</changelog>
  <changelog author="mwilck@suse.com" date="1755259201">- Fix verification of HP plugin with new GPG key (lp#2120738)
  * add hplip-hardcode-new-signing-key-AC69536A2CF3A243.patch
- Fix python crash in hp-setup on compressed PPD file (lp#2120739)
  * add hp-setup-fix-python-crash-when-manually-importing-gz.patch
- Fix missing urllib.URLopener in python 3.14 (lp#2115046)
  * add hplip-no-urlopener.patch
- Only run cupstestppd if explicitly requested with "--with testppd"
  build parameter</changelog>
  <changelog author="mwilck@suse.com" date="1755604800">- Refactor package structure:
  * hplip: full set of utilities. Pulls in almost all subpackages
    to deliver the "traditional" hplip experience
  * hplip-base: small set of basic utilities that can be run
    without GUI. Includes hp-probe and hp-plugin
  * hplip-cups: minimal package for printing, without PPDs or
    setup helpers
  * hplip-sane: scanning support (unchanged)
  * hplip-driver-hpcups: hpcups.drv for generating hpcups PPDs on
    the fly (requires ppdc). The functionality of this package is
    similar to the old (misnamed) "hplip-hpijs" package.
  * hplip-driver-hpijs: hpijs.drv for generating PPDs for the deprecated
    hpijs / foomatic_rip filter. Note that this functionality was not part of
    the late hplip-hpijs package, because upstream hasn't ship foomatic PPDs
    since hplip 3.17.11.
  * hplip-ppds-{hpcups,hpps,postscript,hpijs,fax,plugin}: static PPD
    files for different printer types.
    hplip-ppds-hpcups is an alternative to hplip-driver-hpcups.
  * libhplip0: shared library package, used by hplip-cups and
    hplip-sane
  * hplip-common: configuration files and directories used by
    all hplip packages.
- Other spec file changes:
  * Skip deprecated suse_update_desktop_file by default on TW
  * Don't mess with sane configuration in udev rules
  * Only the hpijs packages depend on foomatic-rip, which is only
    provided by cups-filters-1.x. The other packages can be used
    with cups-filters2.
  * Remove Obsoletes: for ancient predecessor packages
  * Remove outdated comments from spec file
  * Shorten package descriptions
  * Fix a couple of rpmlint issues
- Fix printer probing using avahi (lp#2120947)
  * Add hplip-fix-driver-probing-using-avahi.patch
  * Add hplip-fix-python-crash-in-avahi.py.patch</changelog>
  <changelog author="martin.wilck@suse.com" date="1755777600">- Continue refactoring:
  * move GUI tools to "hplip-utils" subpackage
  * convert "hplip" into an empty metapackage that pulls in hplip-utils
    and all drivers / PPDs (except hpijs PPDs).</changelog>
  <changelog author="jsmeix@suse.com" date="1759147200">- The old and outdated 'hpijs' driver support is finally dropped
  (the 'hpcups' driver is the default driver since 2009)
  so that there is no need for foomatic-filters (boo#1250481)</changelog>
  <changelog author="mwilck@suse.com" date="1759924800">- Drop dependency on cups-ppdc. It isn't necessary, as PPD
  generation on target system is done by cups-driverd.</changelog>
  <changelog author="mwilck@suse.com" date="1759924801">- Update fix for support of new GPG key, as the key has now been
  uploaded to GPG keyservers (lp#2120738)
  * drop hplip-hardcode-new-signing-key-AC69536A2CF3A243.patch
  * update hplip-change-pgp-server.patch
- This fixes CVE-2025-43023 (bsc#1266031)</changelog>
  <changelog author="mwilck@suse.com" date="1759924802">- Move more utilities from hplip-utils to hplip-base.
  * hplip-base now contains all utilities that are not totally useless
    and can run without the Qt GUI.</changelog>
  <changelog author="sbrabec@suse.com" date="1763812800">- Remove unused BuildRequires: update-desktop-files.</changelog>
  <changelog author="mwilck@suse.com" date="1770120000">- Fix PPD lookup by moving PPDs from manufacturer-PPDs/hplip-fax
  to  manufacturer-PPDs/hplip/fax etc (boo#1257529)</changelog>
  <changelog author="mwilck@suse.com" date="1770120001">- Update to HPLIP 3.25.8
- Added support for the following new Printers:
  * HP LaserJet Enterprise Flow MFP 8601z
  * HP LaserJet Enterprise 5501
  * HP LaserJet Enterprise MFP 5601dn
  * HP LaserJet Enterprise 6500dn
  * HP LaserJet Enterprise 5501n
  * HP LaserJet Enterprise MFP 5601
  * HP LaserJet Enterprise 6500
  * HP LaserJet Enterprise 5502dn
  * HP LaserJet Enterprise MFP 5602dn
  * HP LaserJet Enterprise 6500n
  * HP LaserJet Enterprise 5502
  * HP LaserJet Enterprise MFP 5602f
  * HP LaserJet Enterprise 6501dn
  * HP LaserJet Enterprise X50452dn
  * HP LaserJet Enterprise Flow MFP 5602zfw
  * HP LaserJet Enterprise 6501
  * HP LaserJet Enterprise X50452
  * HP LaserJet Enterprise MFP 5602
  * HP LaserJet Enterprise X60257dn
  * HP LaserJet Enterprise MFP X53052dn
  * HP LaserJet Enterprise Flow MFP X530
  * HP LaserJet Enterprise X60257
  * HP LaserJet Enterprise MFP X53052
  * HP LaserJet Enterprise X60357dn
  * HP LaserJet Enterprise X60357
  * HP LaserJet Enterprise MFP 6600dn
  * HP LaserJet Enterprise Flow MFP 6600zfw
  * HP LaserJet Enterprise MFP 6600
  * HP LaserJet Enterprise Flow MFP 6600zfsw
  * HP LaserJet Enterprise MFP X62757dn
  * HP LaserJet Enterprise Flow MFP X62757zs
  * HP LaserJet Enterprise MFP X62757
  * DEX D50452dn
  * DEX MFP D53052dn
- Drop patches that have been merged upstream:
  * Drop hplip-change-pgp-server.patch
  * Drop hp-setup-fix-python-crash-when-manually-importing-gz.patch
- Fix handling of readfp() and read_filke() for ConfigParser objects,
  avoiding confusing error messages (lp#2139771)
  * Add hplip-fix-handling-of-ConfigParser-.readfp-vs.-read_.patch
  * Drop hplip-base-replace-f-string-with-string.format-for-p.patch
- Fix compiler warnings on SLE15
  * Add Fix-two-compiler-warnings-that-cause-build-failure-o.patch
- Fix "Found No Section" error with python (lp#2095776)
  * Add hplip-base-Fix-Found-No-Section-error-with-python-2..patch
- Renamed patch files to achieve a consistent patch naming according
  to the rules of git-format-patch:
  * Rename change-udev-rules.diff -&gt; hplip-change-udev-rules.patch
  * Rename disable_hp-upgrade.patch -&gt; disable-hp-upgrade.patch
  * Rename add_missing_includes_and_define_GNU_SOURCE.patch
  - &gt; add-missing-includes-and-define-GNU_SOURCE.patch
  * Rename hplip-remove-imageprocessor.diff
  - &gt; hplip-remove-imageprocessor.patch
  * Rename hplip-orblite-return-null.diff -&gt; hplip-orblite-return-null.patch
  * Rename hplip-hpaio-gcc14.patch -&gt; hplip-hpaio-avoid-C99-violations.patch
  * Rename hplip-no-urlopener.patch
  - &gt; URLopener-was-removed-in-Python-3.14-and-hplip-trace.patch
  * Rename hplip-3.24.4-gcc15.patch -&gt; hplip-sane-fix-compilation-with-gcc-15.patch
  Patches are now managed under https://github.com/mwilck/hplip</changelog>
  <changelog author="mlin@suse.com" date="1779192000">- Adjust the version condition not to build scan_utils since
  %suse_version macro has been changed to 1610 in Leap 16.1</changelog>
  <changelog author="mwilck@suse.com" date="1779451200">- Update to HPLIP 3.26.4
- Fix CVE-2026-8631 (bsc#1266023)
- Fix CVE-2026-8632 (bsc#1266024)
- Add support for the following new printers:
  * HP LaserJet Pro MFP 3106sdw
  * HP LaserJet Pro MFP 3105sdw
  * HP Envy 6500e series
  * HP Envy 6500 series
  * HP OfficeJet Pro 9730 Series
  * HP OfficeJet Pro 9730e Series
  * HP OfficeJet Pro 9720 Series
  * HP OfficeJet Pro 9720e Series
  * HP OfficeJet Pro 8130e All-in-One series
  * HP OfficeJet Pro 8130 All-in-One series
  * HP OfficeJet 8130e All-in-One series
  * HP OfficeJet 8130 All-in-One series
  * HP OfficeJet Pro 8120e All-in-One series
  * HP OfficeJet Pro 8120 All-in-One series
  * HP OfficeJet 8120e All-in-One series
  * HP OfficeJet 8120 All-in-One series
  * HP DeskJet Ink Advantage ultra 5800 All-in-One Printer series
  * HP DeskJet Ink Advantage ultra 5100 All-in-One Printer series
  * HP DeskJet 4300e All-in-One Printer series
  * HP DeskJet Ink Advantage 4300 All-in-One Printer series
  * HP DeskJet 4300 All-in-One Printer series
  * HP DeskJet 2900e All-in-One Printer series
  * HP DeskJet Ink Advantage 2900 All-in-One Printer series
  * HP DeskJet 2900 All-in-One Printer series</changelog>
  <changelog author="mwilck@suse.com" date="1779883200">- Undo factory package refactoring for backward compatibility
  on SLE12 and SLE15. This reverts all packaging changes
  since August 19th, keeping the code changes and security fixes.</changelog>
</package>
<package pkgid="c39b064eb7b2f1d2c022be5d17f0a371a81ff641995d25a03e2a61ce7f8e5315" name="hwdata" arch="noarch">
  <version epoch="0" ver="0.394" rel="150000.3.77.2"/>
  <changelog author="mpluskal@suse.com" date="1678190400">- update to 0.368:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1680523200">- update to 0.369:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1684238400">- update to 0.370:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1686312000">- update to 0.371:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1689076800">- update to 0.372:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="andrea.manzini@suse.com" date="1692705600">- update to 0.373:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1700049600">- update to 0.376:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1701691200">- update to 0.377:
  * Fixed trailing spaces in pnp.ids</changelog>
  <changelog author="mpluskal@suse.com" date="1704888000">- update to 0.378:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1708084800">- update to 0.379:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1709640000">- update to 0.380:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1715774400">- update to 0.382:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1718625600">- update to 0.383:
  * Update pci and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1724673600">- update to 0.385:
  * Update pci and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1730980800">update to 0.389:
  * Update pci and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1733313600">- update to 0.390:
  * Update pci and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1736337600">- Update to version 0.391:
  * Update pci and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1739880000">- Update to version 0.392:
  * Update pci and vendor ids</changelog>
  <changelog author="andrea.manzini@suse.com" date="1742644800">- Update to version 0.393:
  * Update pci, usb and vendor ids
  * Fix usb.ids encoding and a couple of typos
  * Fix configure to honor --prefix</changelog>
  <changelog author="mpluskal@suse.com" date="1745928000">- Update to version 0.394:
  * Update pci and vendor ids</changelog>
</package>
<package pkgid="f6cf67c2dfe3389fcf10ed8fc447f26e02530febbd90403f16b0035f0aea2440" name="hwdata" arch="src">
  <version epoch="0" ver="0.394" rel="150000.3.77.2"/>
  <changelog author="mpluskal@suse.com" date="1678190400">- update to 0.368:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1680523200">- update to 0.369:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1684238400">- update to 0.370:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1686312000">- update to 0.371:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1689076800">- update to 0.372:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="andrea.manzini@suse.com" date="1692705600">- update to 0.373:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1700049600">- update to 0.376:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1701691200">- update to 0.377:
  * Fixed trailing spaces in pnp.ids</changelog>
  <changelog author="mpluskal@suse.com" date="1704888000">- update to 0.378:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1708084800">- update to 0.379:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1709640000">- update to 0.380:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1715774400">- update to 0.382:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1718625600">- update to 0.383:
  * Update pci and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1724673600">- update to 0.385:
  * Update pci and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1730980800">update to 0.389:
  * Update pci and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1733313600">- update to 0.390:
  * Update pci and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1736337600">- Update to version 0.391:
  * Update pci and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1739880000">- Update to version 0.392:
  * Update pci and vendor ids</changelog>
  <changelog author="andrea.manzini@suse.com" date="1742644800">- Update to version 0.393:
  * Update pci, usb and vendor ids
  * Fix usb.ids encoding and a couple of typos
  * Fix configure to honor --prefix</changelog>
  <changelog author="mpluskal@suse.com" date="1745928000">- Update to version 0.394:
  * Update pci and vendor ids</changelog>
</package>
<package pkgid="cb791836201fb0faa8d986ebc989a7554fd430e7b0e25631de6abd2eff50b475" name="hwinfo" arch="src">
  <version epoch="0" ver="21.88" rel="150500.3.9.2"/>
  <changelog author="wfeldt@opensuse.org" date="1585051200">- merge gh#openSUSE/hwinfo#85
- fix xen detection (bsc#1167561)
- add link to cpuid doc
- 21.69</changelog>
  <changelog author="wfeldt@opensuse.org" date="1587470400">- merge gh#openSUSE/hwinfo#86
- update pci and usb ids (bsc#1169682)
- fix compiler warnings
- 21.70</changelog>
  <changelog author="wfeldt@opensuse.org" date="1605873600">- merge gh#openSUSE/hwinfo#89
- rework network device detection on aarch64 (bsc#1177600,
  bsc#1177261)
- 21.71</changelog>
  <changelog author="wfeldt@opensuse.org" date="1611748800">- merge gh#openSUSE/hwinfo#92
- improve getting video mode info (bsc#1181101)
- try harder to break out of infinite I/O loops
- 21.72</changelog>
  <changelog author="wfeldt@opensuse.org" date="1618315200">- merge gh#openSUSE/hwinfo#95
- don't rely on select() updating its timeout arg (bsc#1184339)
- 21.73</changelog>
  <changelog author="wfeldt@opensuse.org" date="1621339200">- merge gh#openSUSE/hwinfo#98
- update pci and usb ids
- 21.74</changelog>
  <changelog author="wfeldt@opensuse.org" date="1625227200">- merge gh#openSUSE/hwinfo#100
- recognize loongarch64 architecture
- 21.75</changelog>
  <changelog author="wfeldt@opensuse.org" date="1627041600">- merge gh#openSUSE/hwinfo#104
- Fix timezone issue in SOURCE_DATE_EPOCH code
- 21.76</changelog>
  <changelog author="wfeldt@opensuse.org" date="1633089600">- merge gh#openSUSE/hwinfo#105
- Use license file from gnu.org
- Fix spelling
- Add missing final newline
- Trim excess whitespace
- Simple maintenance improvements
- 21.77</changelog>
  <changelog author="wfeldt@opensuse.org" date="1636632000">- merge gh#openSUSE/hwinfo#106
- Always read numerical 32bit serial number from EDID header.
  Override this with ASCII serial number from display descriptor,
  if available.
- Display numerical 32bit serial number for monitors without serial
  number display descriptor
- 21.78</changelog>
  <changelog author="wfeldt@opensuse.org" date="1639483200">- merge gh#openSUSE/hwinfo#108
- Donot close the open tray after read_cdrom_info.
- Donot close the open tray after read.
- 21.79</changelog>
  <changelog author="wfeldt@opensuse.org" date="1639742400">- merge gh#openSUSE/hwinfo#109
- fix logic around cdrom detection
- 21.80</changelog>
  <changelog author="wfeldt@opensuse.org" date="1649851200">- merge gh#openSUSE/hwinfo#112
- fix bug in determining serial console device name (bsc#1198043)
- 21.81</changelog>
  <changelog author="wfeldt@opensuse.org" date="1655985600">- merge gh#openSUSE/hwinfo#113
- Keep NVMe's namespace output consistency when
  nvme_core.multipath=1 (bsc#1199948)
- 21.82</changelog>
  <changelog author="wfeldt@opensuse.org" date="1659700800">- merge gh#openSUSE/hwinfo#115
- improve treatment of NVME devices (bsc#1200975)
- fix compiler warnings
- 21.83</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673265600">- merge gh#openSUSE/hwinfo#127
- create xen usb controller device if necessary (bsc#1204294)
- 21.84</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688385600">- merge gh#openSUSE/hwinfo#132
- avoid linking problems with libsamba (bsc#1212756)
- 21.85</changelog>
  <changelog author="wfeldt@opensuse.org" date="1742385600">- merge gh#openSUSE/hwinfo#151
- do not overdo usb device de-duplication (bsc#1239663)
- 21.86</changelog>
  <changelog author="wfeldt@opensuse.org" date="1742817600">- merge gh#openSUSE/hwinfo#152
- avoid reporting of spurious usb storage devices (bsc#1223330)
- 21.87</changelog>
  <changelog author="wfeldt@opensuse.org" date="1744027200">- merge gh#openSUSE/hwinfo#156
- fix network card detection on aarch64 (bsc#1240648)
- 21.88</changelog>
</package>
<package pkgid="43a229b4da331ee2c2e8875efbda98074556e688002e38529e75f41974b8b5fe" name="hwinfo" arch="x86_64">
  <version epoch="0" ver="21.88" rel="150500.3.9.2"/>
  <changelog author="wfeldt@opensuse.org" date="1585051200">- merge gh#openSUSE/hwinfo#85
- fix xen detection (bsc#1167561)
- add link to cpuid doc
- 21.69</changelog>
  <changelog author="wfeldt@opensuse.org" date="1587470400">- merge gh#openSUSE/hwinfo#86
- update pci and usb ids (bsc#1169682)
- fix compiler warnings
- 21.70</changelog>
  <changelog author="wfeldt@opensuse.org" date="1605873600">- merge gh#openSUSE/hwinfo#89
- rework network device detection on aarch64 (bsc#1177600,
  bsc#1177261)
- 21.71</changelog>
  <changelog author="wfeldt@opensuse.org" date="1611748800">- merge gh#openSUSE/hwinfo#92
- improve getting video mode info (bsc#1181101)
- try harder to break out of infinite I/O loops
- 21.72</changelog>
  <changelog author="wfeldt@opensuse.org" date="1618315200">- merge gh#openSUSE/hwinfo#95
- don't rely on select() updating its timeout arg (bsc#1184339)
- 21.73</changelog>
  <changelog author="wfeldt@opensuse.org" date="1621339200">- merge gh#openSUSE/hwinfo#98
- update pci and usb ids
- 21.74</changelog>
  <changelog author="wfeldt@opensuse.org" date="1625227200">- merge gh#openSUSE/hwinfo#100
- recognize loongarch64 architecture
- 21.75</changelog>
  <changelog author="wfeldt@opensuse.org" date="1627041600">- merge gh#openSUSE/hwinfo#104
- Fix timezone issue in SOURCE_DATE_EPOCH code
- 21.76</changelog>
  <changelog author="wfeldt@opensuse.org" date="1633089600">- merge gh#openSUSE/hwinfo#105
- Use license file from gnu.org
- Fix spelling
- Add missing final newline
- Trim excess whitespace
- Simple maintenance improvements
- 21.77</changelog>
  <changelog author="wfeldt@opensuse.org" date="1636632000">- merge gh#openSUSE/hwinfo#106
- Always read numerical 32bit serial number from EDID header.
  Override this with ASCII serial number from display descriptor,
  if available.
- Display numerical 32bit serial number for monitors without serial
  number display descriptor
- 21.78</changelog>
  <changelog author="wfeldt@opensuse.org" date="1639483200">- merge gh#openSUSE/hwinfo#108
- Donot close the open tray after read_cdrom_info.
- Donot close the open tray after read.
- 21.79</changelog>
  <changelog author="wfeldt@opensuse.org" date="1639742400">- merge gh#openSUSE/hwinfo#109
- fix logic around cdrom detection
- 21.80</changelog>
  <changelog author="wfeldt@opensuse.org" date="1649851200">- merge gh#openSUSE/hwinfo#112
- fix bug in determining serial console device name (bsc#1198043)
- 21.81</changelog>
  <changelog author="wfeldt@opensuse.org" date="1655985600">- merge gh#openSUSE/hwinfo#113
- Keep NVMe's namespace output consistency when
  nvme_core.multipath=1 (bsc#1199948)
- 21.82</changelog>
  <changelog author="wfeldt@opensuse.org" date="1659700800">- merge gh#openSUSE/hwinfo#115
- improve treatment of NVME devices (bsc#1200975)
- fix compiler warnings
- 21.83</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673265600">- merge gh#openSUSE/hwinfo#127
- create xen usb controller device if necessary (bsc#1204294)
- 21.84</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688385600">- merge gh#openSUSE/hwinfo#132
- avoid linking problems with libsamba (bsc#1212756)
- 21.85</changelog>
  <changelog author="wfeldt@opensuse.org" date="1742385600">- merge gh#openSUSE/hwinfo#151
- do not overdo usb device de-duplication (bsc#1239663)
- 21.86</changelog>
  <changelog author="wfeldt@opensuse.org" date="1742817600">- merge gh#openSUSE/hwinfo#152
- avoid reporting of spurious usb storage devices (bsc#1223330)
- 21.87</changelog>
  <changelog author="wfeldt@opensuse.org" date="1744027200">- merge gh#openSUSE/hwinfo#156
- fix network card detection on aarch64 (bsc#1240648)
- 21.88</changelog>
</package>
<package pkgid="91c11ed1b2ac46657f5acc7eea515196df0de699b90e30b4a1a9174e61690c80" name="hwinfo" arch="src">
  <version epoch="0" ver="21.89" rel="150500.3.12.1"/>
  <changelog author="wfeldt@opensuse.org" date="1587470400">- merge gh#openSUSE/hwinfo#86
- update pci and usb ids (bsc#1169682)
- fix compiler warnings
- 21.70</changelog>
  <changelog author="wfeldt@opensuse.org" date="1605873600">- merge gh#openSUSE/hwinfo#89
- rework network device detection on aarch64 (bsc#1177600,
  bsc#1177261)
- 21.71</changelog>
  <changelog author="wfeldt@opensuse.org" date="1611748800">- merge gh#openSUSE/hwinfo#92
- improve getting video mode info (bsc#1181101)
- try harder to break out of infinite I/O loops
- 21.72</changelog>
  <changelog author="wfeldt@opensuse.org" date="1618315200">- merge gh#openSUSE/hwinfo#95
- don't rely on select() updating its timeout arg (bsc#1184339)
- 21.73</changelog>
  <changelog author="wfeldt@opensuse.org" date="1621339200">- merge gh#openSUSE/hwinfo#98
- update pci and usb ids
- 21.74</changelog>
  <changelog author="wfeldt@opensuse.org" date="1625227200">- merge gh#openSUSE/hwinfo#100
- recognize loongarch64 architecture
- 21.75</changelog>
  <changelog author="wfeldt@opensuse.org" date="1627041600">- merge gh#openSUSE/hwinfo#104
- Fix timezone issue in SOURCE_DATE_EPOCH code
- 21.76</changelog>
  <changelog author="wfeldt@opensuse.org" date="1633089600">- merge gh#openSUSE/hwinfo#105
- Use license file from gnu.org
- Fix spelling
- Add missing final newline
- Trim excess whitespace
- Simple maintenance improvements
- 21.77</changelog>
  <changelog author="wfeldt@opensuse.org" date="1636632000">- merge gh#openSUSE/hwinfo#106
- Always read numerical 32bit serial number from EDID header.
  Override this with ASCII serial number from display descriptor,
  if available.
- Display numerical 32bit serial number for monitors without serial
  number display descriptor
- 21.78</changelog>
  <changelog author="wfeldt@opensuse.org" date="1639483200">- merge gh#openSUSE/hwinfo#108
- Donot close the open tray after read_cdrom_info.
- Donot close the open tray after read.
- 21.79</changelog>
  <changelog author="wfeldt@opensuse.org" date="1639742400">- merge gh#openSUSE/hwinfo#109
- fix logic around cdrom detection
- 21.80</changelog>
  <changelog author="wfeldt@opensuse.org" date="1649851200">- merge gh#openSUSE/hwinfo#112
- fix bug in determining serial console device name (bsc#1198043)
- 21.81</changelog>
  <changelog author="wfeldt@opensuse.org" date="1655985600">- merge gh#openSUSE/hwinfo#113
- Keep NVMe's namespace output consistency when
  nvme_core.multipath=1 (bsc#1199948)
- 21.82</changelog>
  <changelog author="wfeldt@opensuse.org" date="1659700800">- merge gh#openSUSE/hwinfo#115
- improve treatment of NVME devices (bsc#1200975)
- fix compiler warnings
- 21.83</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673265600">- merge gh#openSUSE/hwinfo#127
- create xen usb controller device if necessary (bsc#1204294)
- 21.84</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688385600">- merge gh#openSUSE/hwinfo#132
- avoid linking problems with libsamba (bsc#1212756)
- 21.85</changelog>
  <changelog author="wfeldt@opensuse.org" date="1742385600">- merge gh#openSUSE/hwinfo#151
- do not overdo usb device de-duplication (bsc#1239663)
- 21.86</changelog>
  <changelog author="wfeldt@opensuse.org" date="1742817600">- merge gh#openSUSE/hwinfo#152
- avoid reporting of spurious usb storage devices (bsc#1223330)
- 21.87</changelog>
  <changelog author="wfeldt@opensuse.org" date="1744027200">- merge gh#openSUSE/hwinfo#156
- fix network card detection on aarch64 (bsc#1240648)
- 21.88</changelog>
  <changelog author="wfeldt@opensuse.org" date="1751976000">- merge gh#openSUSE/hwinfo#168
- fix usb network card detection (bsc#1245950)
- 21.89</changelog>
</package>
<package pkgid="c317cb92b23549f431aec4eed80d404afb3696fd383e59762bfd438a39d7affb" name="hwinfo" arch="x86_64">
  <version epoch="0" ver="21.89" rel="150500.3.12.1"/>
  <changelog author="wfeldt@opensuse.org" date="1587470400">- merge gh#openSUSE/hwinfo#86
- update pci and usb ids (bsc#1169682)
- fix compiler warnings
- 21.70</changelog>
  <changelog author="wfeldt@opensuse.org" date="1605873600">- merge gh#openSUSE/hwinfo#89
- rework network device detection on aarch64 (bsc#1177600,
  bsc#1177261)
- 21.71</changelog>
  <changelog author="wfeldt@opensuse.org" date="1611748800">- merge gh#openSUSE/hwinfo#92
- improve getting video mode info (bsc#1181101)
- try harder to break out of infinite I/O loops
- 21.72</changelog>
  <changelog author="wfeldt@opensuse.org" date="1618315200">- merge gh#openSUSE/hwinfo#95
- don't rely on select() updating its timeout arg (bsc#1184339)
- 21.73</changelog>
  <changelog author="wfeldt@opensuse.org" date="1621339200">- merge gh#openSUSE/hwinfo#98
- update pci and usb ids
- 21.74</changelog>
  <changelog author="wfeldt@opensuse.org" date="1625227200">- merge gh#openSUSE/hwinfo#100
- recognize loongarch64 architecture
- 21.75</changelog>
  <changelog author="wfeldt@opensuse.org" date="1627041600">- merge gh#openSUSE/hwinfo#104
- Fix timezone issue in SOURCE_DATE_EPOCH code
- 21.76</changelog>
  <changelog author="wfeldt@opensuse.org" date="1633089600">- merge gh#openSUSE/hwinfo#105
- Use license file from gnu.org
- Fix spelling
- Add missing final newline
- Trim excess whitespace
- Simple maintenance improvements
- 21.77</changelog>
  <changelog author="wfeldt@opensuse.org" date="1636632000">- merge gh#openSUSE/hwinfo#106
- Always read numerical 32bit serial number from EDID header.
  Override this with ASCII serial number from display descriptor,
  if available.
- Display numerical 32bit serial number for monitors without serial
  number display descriptor
- 21.78</changelog>
  <changelog author="wfeldt@opensuse.org" date="1639483200">- merge gh#openSUSE/hwinfo#108
- Donot close the open tray after read_cdrom_info.
- Donot close the open tray after read.
- 21.79</changelog>
  <changelog author="wfeldt@opensuse.org" date="1639742400">- merge gh#openSUSE/hwinfo#109
- fix logic around cdrom detection
- 21.80</changelog>
  <changelog author="wfeldt@opensuse.org" date="1649851200">- merge gh#openSUSE/hwinfo#112
- fix bug in determining serial console device name (bsc#1198043)
- 21.81</changelog>
  <changelog author="wfeldt@opensuse.org" date="1655985600">- merge gh#openSUSE/hwinfo#113
- Keep NVMe's namespace output consistency when
  nvme_core.multipath=1 (bsc#1199948)
- 21.82</changelog>
  <changelog author="wfeldt@opensuse.org" date="1659700800">- merge gh#openSUSE/hwinfo#115
- improve treatment of NVME devices (bsc#1200975)
- fix compiler warnings
- 21.83</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673265600">- merge gh#openSUSE/hwinfo#127
- create xen usb controller device if necessary (bsc#1204294)
- 21.84</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688385600">- merge gh#openSUSE/hwinfo#132
- avoid linking problems with libsamba (bsc#1212756)
- 21.85</changelog>
  <changelog author="wfeldt@opensuse.org" date="1742385600">- merge gh#openSUSE/hwinfo#151
- do not overdo usb device de-duplication (bsc#1239663)
- 21.86</changelog>
  <changelog author="wfeldt@opensuse.org" date="1742817600">- merge gh#openSUSE/hwinfo#152
- avoid reporting of spurious usb storage devices (bsc#1223330)
- 21.87</changelog>
  <changelog author="wfeldt@opensuse.org" date="1744027200">- merge gh#openSUSE/hwinfo#156
- fix network card detection on aarch64 (bsc#1240648)
- 21.88</changelog>
  <changelog author="wfeldt@opensuse.org" date="1751976000">- merge gh#openSUSE/hwinfo#168
- fix usb network card detection (bsc#1245950)
- 21.89</changelog>
</package>
<package pkgid="44b5f9374353d268fa638563b68d92ffd8ccfaf8a4ef54d062f4222fae8c9c65" name="hwinfo-devel" arch="x86_64">
  <version epoch="0" ver="21.88" rel="150500.3.9.2"/>
  <changelog author="wfeldt@opensuse.org" date="1585051200">- merge gh#openSUSE/hwinfo#85
- fix xen detection (bsc#1167561)
- add link to cpuid doc
- 21.69</changelog>
  <changelog author="wfeldt@opensuse.org" date="1587470400">- merge gh#openSUSE/hwinfo#86
- update pci and usb ids (bsc#1169682)
- fix compiler warnings
- 21.70</changelog>
  <changelog author="wfeldt@opensuse.org" date="1605873600">- merge gh#openSUSE/hwinfo#89
- rework network device detection on aarch64 (bsc#1177600,
  bsc#1177261)
- 21.71</changelog>
  <changelog author="wfeldt@opensuse.org" date="1611748800">- merge gh#openSUSE/hwinfo#92
- improve getting video mode info (bsc#1181101)
- try harder to break out of infinite I/O loops
- 21.72</changelog>
  <changelog author="wfeldt@opensuse.org" date="1618315200">- merge gh#openSUSE/hwinfo#95
- don't rely on select() updating its timeout arg (bsc#1184339)
- 21.73</changelog>
  <changelog author="wfeldt@opensuse.org" date="1621339200">- merge gh#openSUSE/hwinfo#98
- update pci and usb ids
- 21.74</changelog>
  <changelog author="wfeldt@opensuse.org" date="1625227200">- merge gh#openSUSE/hwinfo#100
- recognize loongarch64 architecture
- 21.75</changelog>
  <changelog author="wfeldt@opensuse.org" date="1627041600">- merge gh#openSUSE/hwinfo#104
- Fix timezone issue in SOURCE_DATE_EPOCH code
- 21.76</changelog>
  <changelog author="wfeldt@opensuse.org" date="1633089600">- merge gh#openSUSE/hwinfo#105
- Use license file from gnu.org
- Fix spelling
- Add missing final newline
- Trim excess whitespace
- Simple maintenance improvements
- 21.77</changelog>
  <changelog author="wfeldt@opensuse.org" date="1636632000">- merge gh#openSUSE/hwinfo#106
- Always read numerical 32bit serial number from EDID header.
  Override this with ASCII serial number from display descriptor,
  if available.
- Display numerical 32bit serial number for monitors without serial
  number display descriptor
- 21.78</changelog>
  <changelog author="wfeldt@opensuse.org" date="1639483200">- merge gh#openSUSE/hwinfo#108
- Donot close the open tray after read_cdrom_info.
- Donot close the open tray after read.
- 21.79</changelog>
  <changelog author="wfeldt@opensuse.org" date="1639742400">- merge gh#openSUSE/hwinfo#109
- fix logic around cdrom detection
- 21.80</changelog>
  <changelog author="wfeldt@opensuse.org" date="1649851200">- merge gh#openSUSE/hwinfo#112
- fix bug in determining serial console device name (bsc#1198043)
- 21.81</changelog>
  <changelog author="wfeldt@opensuse.org" date="1655985600">- merge gh#openSUSE/hwinfo#113
- Keep NVMe's namespace output consistency when
  nvme_core.multipath=1 (bsc#1199948)
- 21.82</changelog>
  <changelog author="wfeldt@opensuse.org" date="1659700800">- merge gh#openSUSE/hwinfo#115
- improve treatment of NVME devices (bsc#1200975)
- fix compiler warnings
- 21.83</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673265600">- merge gh#openSUSE/hwinfo#127
- create xen usb controller device if necessary (bsc#1204294)
- 21.84</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688385600">- merge gh#openSUSE/hwinfo#132
- avoid linking problems with libsamba (bsc#1212756)
- 21.85</changelog>
  <changelog author="wfeldt@opensuse.org" date="1742385600">- merge gh#openSUSE/hwinfo#151
- do not overdo usb device de-duplication (bsc#1239663)
- 21.86</changelog>
  <changelog author="wfeldt@opensuse.org" date="1742817600">- merge gh#openSUSE/hwinfo#152
- avoid reporting of spurious usb storage devices (bsc#1223330)
- 21.87</changelog>
  <changelog author="wfeldt@opensuse.org" date="1744027200">- merge gh#openSUSE/hwinfo#156
- fix network card detection on aarch64 (bsc#1240648)
- 21.88</changelog>
</package>
<package pkgid="deb9d6a6d42fc290b43c208db3fb6b4d059a745c33b8ed9a682204d2f111c9bd" name="hwinfo-devel" arch="x86_64">
  <version epoch="0" ver="21.89" rel="150500.3.12.1"/>
  <changelog author="wfeldt@opensuse.org" date="1587470400">- merge gh#openSUSE/hwinfo#86
- update pci and usb ids (bsc#1169682)
- fix compiler warnings
- 21.70</changelog>
  <changelog author="wfeldt@opensuse.org" date="1605873600">- merge gh#openSUSE/hwinfo#89
- rework network device detection on aarch64 (bsc#1177600,
  bsc#1177261)
- 21.71</changelog>
  <changelog author="wfeldt@opensuse.org" date="1611748800">- merge gh#openSUSE/hwinfo#92
- improve getting video mode info (bsc#1181101)
- try harder to break out of infinite I/O loops
- 21.72</changelog>
  <changelog author="wfeldt@opensuse.org" date="1618315200">- merge gh#openSUSE/hwinfo#95
- don't rely on select() updating its timeout arg (bsc#1184339)
- 21.73</changelog>
  <changelog author="wfeldt@opensuse.org" date="1621339200">- merge gh#openSUSE/hwinfo#98
- update pci and usb ids
- 21.74</changelog>
  <changelog author="wfeldt@opensuse.org" date="1625227200">- merge gh#openSUSE/hwinfo#100
- recognize loongarch64 architecture
- 21.75</changelog>
  <changelog author="wfeldt@opensuse.org" date="1627041600">- merge gh#openSUSE/hwinfo#104
- Fix timezone issue in SOURCE_DATE_EPOCH code
- 21.76</changelog>
  <changelog author="wfeldt@opensuse.org" date="1633089600">- merge gh#openSUSE/hwinfo#105
- Use license file from gnu.org
- Fix spelling
- Add missing final newline
- Trim excess whitespace
- Simple maintenance improvements
- 21.77</changelog>
  <changelog author="wfeldt@opensuse.org" date="1636632000">- merge gh#openSUSE/hwinfo#106
- Always read numerical 32bit serial number from EDID header.
  Override this with ASCII serial number from display descriptor,
  if available.
- Display numerical 32bit serial number for monitors without serial
  number display descriptor
- 21.78</changelog>
  <changelog author="wfeldt@opensuse.org" date="1639483200">- merge gh#openSUSE/hwinfo#108
- Donot close the open tray after read_cdrom_info.
- Donot close the open tray after read.
- 21.79</changelog>
  <changelog author="wfeldt@opensuse.org" date="1639742400">- merge gh#openSUSE/hwinfo#109
- fix logic around cdrom detection
- 21.80</changelog>
  <changelog author="wfeldt@opensuse.org" date="1649851200">- merge gh#openSUSE/hwinfo#112
- fix bug in determining serial console device name (bsc#1198043)
- 21.81</changelog>
  <changelog author="wfeldt@opensuse.org" date="1655985600">- merge gh#openSUSE/hwinfo#113
- Keep NVMe's namespace output consistency when
  nvme_core.multipath=1 (bsc#1199948)
- 21.82</changelog>
  <changelog author="wfeldt@opensuse.org" date="1659700800">- merge gh#openSUSE/hwinfo#115
- improve treatment of NVME devices (bsc#1200975)
- fix compiler warnings
- 21.83</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673265600">- merge gh#openSUSE/hwinfo#127
- create xen usb controller device if necessary (bsc#1204294)
- 21.84</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688385600">- merge gh#openSUSE/hwinfo#132
- avoid linking problems with libsamba (bsc#1212756)
- 21.85</changelog>
  <changelog author="wfeldt@opensuse.org" date="1742385600">- merge gh#openSUSE/hwinfo#151
- do not overdo usb device de-duplication (bsc#1239663)
- 21.86</changelog>
  <changelog author="wfeldt@opensuse.org" date="1742817600">- merge gh#openSUSE/hwinfo#152
- avoid reporting of spurious usb storage devices (bsc#1223330)
- 21.87</changelog>
  <changelog author="wfeldt@opensuse.org" date="1744027200">- merge gh#openSUSE/hwinfo#156
- fix network card detection on aarch64 (bsc#1240648)
- 21.88</changelog>
  <changelog author="wfeldt@opensuse.org" date="1751976000">- merge gh#openSUSE/hwinfo#168
- fix usb network card detection (bsc#1245950)
- 21.89</changelog>
</package>
<package pkgid="6719fc8fbb0eed8667368748439f9f70732c1ba6f60e114819b572b11549bf4e" name="hyper-v" arch="src">
  <version epoch="0" ver="9" rel="150700.3.3.2"/>
  <changelog author="ohering@suse.de" date="1462363200">- add Conflicts with kernel &lt; 4.2 (fate#320485)
- vss: fix the write()'s argument: error -&gt; vss_msg
- remove repeated HV_FCOPY string
- report ENOSPC errors in hv_fcopy_daemon
- fcopy: full handshake support
- vss: full handshake support
- vss: use misc char device to communicate with kernel
- kvp: use misc char device to communicate with kernel</changelog>
  <changelog author="ohering@suse.de" date="1498651200">- Check VSS daemon is listening before a hot backup (bnc#1029693)
- fix a compile warning in snprintf
- kvp: ensure kvp device fd is closed on exec
- lsvmbus: add pci pass-through UUID</changelog>
  <changelog author="ohering@suse.de" date="1515412800">- update buffer handling in hv_fcopy_daemon
- remove unnecessary header files and netlink related code
- Avoid reading past allocated blocks from KVP file (bnc#1087658)
- fix snprintf warning in kvp_daemon
- properly handle long paths
- kvp: configurable external scripts path
- vss: Thaw the filesystem and continue if freeze call has timed out
- vss: Skip freezing filesystems backed by loop</changelog>
  <changelog author="ohering@suse.de" date="1526990400">- Update lsvmbus interpreter from env(1) to python3(1) (bsc#1093910)</changelog>
  <changelog author="schwab@suse.de" date="1533211200">- hyper-v.tools.hv.hv_vss_daemon.c: Include &lt;sys/sysmacros.h&gt; for major</changelog>
  <changelog author="ohering@suse.de" date="1537876800">- vss: fix loop device detection (07136793)
- Fix IP reporting by KVP daemon with SRIOV (4ba63412)
- Fix a bug in the key delete code (86503bd3)
- fix compiler warnings about major/target_fname (1330fc35)
- PRIVATE hyper-v.compare-with-upstream.sh</changelog>
  <changelog author="ohering@suse.de" date="1539000000">- Update lsvmbus interpreter from python3(1) to python(1)
  because SLE12 lacks python3 support (bsc#1093910)</changelog>
  <changelog author="ohering@suse.de" date="1539086400">- fcopy: set 'error' in case an unknown operation was requested (c2d68afb)</changelog>
  <changelog author="ohering@suse.de" date="1574856000">- async name resolution in kvp_daemon (bsc#1100758)
- kvp: eliminate 'may be used uninitialized' warning (89eb4d8d)
- fix typos in toolchain (2d35c660)
- fixed Python pep8/flake8 warnings for lsvmbus (5912e791)
- Replace GPLv2 boilerplate/reference with SPDX (43aa3132)
- Fix a warning of buffer overflow with gcc 8.0.1 (4fcba780)</changelog>
  <changelog author="ohering@suse.de" date="1575028800">- Update lsvmbus interpreter from python(1) to python3(1) again
  because only SLE12 lacked proper python3 support (bsc#1093910)</changelog>
  <changelog author="ohering@suse.de" date="1582200000">- Revert previous non-upstream change for async name resolution
  Just use gethostname via hyper-v.kvp.gethostname.patch (bsc#1100758)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1595419200">- Enable build on aarch64</changelog>
  <changelog author="ohering@suse.de" date="1595419201">- Remove dependency to network-online.target now that gethostname
  is used in kvp_daemon (bsc#1174443, bsc#1174444)
- Reopen the devices if read() or write() returns errors (9fc3c01a)
- Use either python2 or python3 for lsvmbus (bsc#1093910)
- Remove sysv init scripts</changelog>
  <changelog author="ohering@suse.de" date="1597924800">- Allow daemon restart again (bsc#1116957)
  Since some time the kernel moved from netlink sockets to char
  devices, which is supposed to handle a connection reopen for the
  kernel&lt;-&gt;daemon interface</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="pgajdos@suse.com" date="1713873600">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="ohering@suse.de" date="1729598400">- Add memory allocation check in hv_fcopy_start (94e86b17)
- suppress the invalid warning for packed member alignment (207e03b0)
- Add new fcopy application based on uio driver (82b0945c)
- Add vmbus_bufring (45bab4d7)
- kvp: Handle IPv4 and Ipv6 combination for keyfile format (f971f6dd)
- kvp: Some small fixes for handling NM keyfiles (c3803203)
- kvp: Support for keyfile based connection profile (42999c90)
- kvp: remove unnecessary (void*) conversions (22589542)
- Remove an extraneous "the" (f15f39fa)
- change http to https in hv_kvp_daemon.c (fa52a4b2)
- replace the copy of include/linux/hyperv.h with include/uapi/linux/hyperv.h (6de74d10)
- merge individual udev rules files into a single rules file
- package only files, not directories already owned by filesystem.rpm
- remove braces from rpm spec macros
- remove obsolete Group tag
- replace RPM_BUILD_ROOT with buildroot
- use a meaningful name for the UAPI include file
- use a meaningful variable name for ifcfg in hv_set_ifconfig.sh</changelog>
  <changelog author="ohering@suse.de" date="1735732800">- update route parsing in kvp daemon (9bbb8a07)
- reduce resource usage in hv_kvp_daemon (175c71c2)
- reduce resouce usage in hv_get_dns_info helper (a4d024fe)
- hv_kvp_daemon: Pass NIC name to hv_get_dns_info as well (07dfa6e8)
- terminate fcopy daemon if read from uio fails (a9640fcd)
- change permissions of NetworkManager configuration file (91ae69c7)
- Fix a complier warning in the fcopy uio daemon (cb1b78f1)
- remove obsolete kvptest.ps1.txt which failed since a decade
- remove obsolete rpm postinstall code for SLE11SP2</changelog>
  <changelog author="ohering@suse.de" date="1749211200">- Enable debug logs for hv_kvp_daemon (a9c0b33e) (bsc#1244154)</changelog>
  <changelog author="ohering@suse.de" date="1753012800">- fcopy: Fix irregularities with size of ring buffer (a4131a50)
- fcopy: Fix incorrect file path conversion (0d86a8d6)</changelog>
</package>
<package pkgid="7efedab64bc4d7475c0aa3f6331facb368e561f0a5cd0d742b523af2c6a59ec3" name="hyper-v" arch="x86_64">
  <version epoch="0" ver="9" rel="150700.3.3.2"/>
  <changelog author="ohering@suse.de" date="1462363200">- add Conflicts with kernel &lt; 4.2 (fate#320485)
- vss: fix the write()'s argument: error -&gt; vss_msg
- remove repeated HV_FCOPY string
- report ENOSPC errors in hv_fcopy_daemon
- fcopy: full handshake support
- vss: full handshake support
- vss: use misc char device to communicate with kernel
- kvp: use misc char device to communicate with kernel</changelog>
  <changelog author="ohering@suse.de" date="1498651200">- Check VSS daemon is listening before a hot backup (bnc#1029693)
- fix a compile warning in snprintf
- kvp: ensure kvp device fd is closed on exec
- lsvmbus: add pci pass-through UUID</changelog>
  <changelog author="ohering@suse.de" date="1515412800">- update buffer handling in hv_fcopy_daemon
- remove unnecessary header files and netlink related code
- Avoid reading past allocated blocks from KVP file (bnc#1087658)
- fix snprintf warning in kvp_daemon
- properly handle long paths
- kvp: configurable external scripts path
- vss: Thaw the filesystem and continue if freeze call has timed out
- vss: Skip freezing filesystems backed by loop</changelog>
  <changelog author="ohering@suse.de" date="1526990400">- Update lsvmbus interpreter from env(1) to python3(1) (bsc#1093910)</changelog>
  <changelog author="schwab@suse.de" date="1533211200">- hyper-v.tools.hv.hv_vss_daemon.c: Include &lt;sys/sysmacros.h&gt; for major</changelog>
  <changelog author="ohering@suse.de" date="1537876800">- vss: fix loop device detection (07136793)
- Fix IP reporting by KVP daemon with SRIOV (4ba63412)
- Fix a bug in the key delete code (86503bd3)
- fix compiler warnings about major/target_fname (1330fc35)
- PRIVATE hyper-v.compare-with-upstream.sh</changelog>
  <changelog author="ohering@suse.de" date="1539000000">- Update lsvmbus interpreter from python3(1) to python(1)
  because SLE12 lacks python3 support (bsc#1093910)</changelog>
  <changelog author="ohering@suse.de" date="1539086400">- fcopy: set 'error' in case an unknown operation was requested (c2d68afb)</changelog>
  <changelog author="ohering@suse.de" date="1574856000">- async name resolution in kvp_daemon (bsc#1100758)
- kvp: eliminate 'may be used uninitialized' warning (89eb4d8d)
- fix typos in toolchain (2d35c660)
- fixed Python pep8/flake8 warnings for lsvmbus (5912e791)
- Replace GPLv2 boilerplate/reference with SPDX (43aa3132)
- Fix a warning of buffer overflow with gcc 8.0.1 (4fcba780)</changelog>
  <changelog author="ohering@suse.de" date="1575028800">- Update lsvmbus interpreter from python(1) to python3(1) again
  because only SLE12 lacked proper python3 support (bsc#1093910)</changelog>
  <changelog author="ohering@suse.de" date="1582200000">- Revert previous non-upstream change for async name resolution
  Just use gethostname via hyper-v.kvp.gethostname.patch (bsc#1100758)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1595419200">- Enable build on aarch64</changelog>
  <changelog author="ohering@suse.de" date="1595419201">- Remove dependency to network-online.target now that gethostname
  is used in kvp_daemon (bsc#1174443, bsc#1174444)
- Reopen the devices if read() or write() returns errors (9fc3c01a)
- Use either python2 or python3 for lsvmbus (bsc#1093910)
- Remove sysv init scripts</changelog>
  <changelog author="ohering@suse.de" date="1597924800">- Allow daemon restart again (bsc#1116957)
  Since some time the kernel moved from netlink sockets to char
  devices, which is supposed to handle a connection reopen for the
  kernel&lt;-&gt;daemon interface</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="pgajdos@suse.com" date="1713873600">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="ohering@suse.de" date="1729598400">- Add memory allocation check in hv_fcopy_start (94e86b17)
- suppress the invalid warning for packed member alignment (207e03b0)
- Add new fcopy application based on uio driver (82b0945c)
- Add vmbus_bufring (45bab4d7)
- kvp: Handle IPv4 and Ipv6 combination for keyfile format (f971f6dd)
- kvp: Some small fixes for handling NM keyfiles (c3803203)
- kvp: Support for keyfile based connection profile (42999c90)
- kvp: remove unnecessary (void*) conversions (22589542)
- Remove an extraneous "the" (f15f39fa)
- change http to https in hv_kvp_daemon.c (fa52a4b2)
- replace the copy of include/linux/hyperv.h with include/uapi/linux/hyperv.h (6de74d10)
- merge individual udev rules files into a single rules file
- package only files, not directories already owned by filesystem.rpm
- remove braces from rpm spec macros
- remove obsolete Group tag
- replace RPM_BUILD_ROOT with buildroot
- use a meaningful name for the UAPI include file
- use a meaningful variable name for ifcfg in hv_set_ifconfig.sh</changelog>
  <changelog author="ohering@suse.de" date="1735732800">- update route parsing in kvp daemon (9bbb8a07)
- reduce resource usage in hv_kvp_daemon (175c71c2)
- reduce resouce usage in hv_get_dns_info helper (a4d024fe)
- hv_kvp_daemon: Pass NIC name to hv_get_dns_info as well (07dfa6e8)
- terminate fcopy daemon if read from uio fails (a9640fcd)
- change permissions of NetworkManager configuration file (91ae69c7)
- Fix a complier warning in the fcopy uio daemon (cb1b78f1)
- remove obsolete kvptest.ps1.txt which failed since a decade
- remove obsolete rpm postinstall code for SLE11SP2</changelog>
  <changelog author="ohering@suse.de" date="1749211200">- Enable debug logs for hv_kvp_daemon (a9c0b33e) (bsc#1244154)</changelog>
  <changelog author="ohering@suse.de" date="1753012800">- fcopy: Fix irregularities with size of ring buffer (a4131a50)
- fcopy: Fix incorrect file path conversion (0d86a8d6)</changelog>
</package>
<package pkgid="952d019091849d3ad5efd18710f416844483151582d1cef3faf8e5121b048186" name="hyper-v" arch="src">
  <version epoch="0" ver="9" rel="150700.3.5.1"/>
  <changelog author="ohering@suse.de" date="1462363200">- add Conflicts with kernel &lt; 4.2 (fate#320485)
- vss: fix the write()'s argument: error -&gt; vss_msg
- remove repeated HV_FCOPY string
- report ENOSPC errors in hv_fcopy_daemon
- fcopy: full handshake support
- vss: full handshake support
- vss: use misc char device to communicate with kernel
- kvp: use misc char device to communicate with kernel</changelog>
  <changelog author="ohering@suse.de" date="1498651200">- Check VSS daemon is listening before a hot backup (bnc#1029693)
- fix a compile warning in snprintf
- kvp: ensure kvp device fd is closed on exec
- lsvmbus: add pci pass-through UUID</changelog>
  <changelog author="ohering@suse.de" date="1515412800">- update buffer handling in hv_fcopy_daemon
- remove unnecessary header files and netlink related code
- Avoid reading past allocated blocks from KVP file (bnc#1087658)
- fix snprintf warning in kvp_daemon
- properly handle long paths
- kvp: configurable external scripts path
- vss: Thaw the filesystem and continue if freeze call has timed out
- vss: Skip freezing filesystems backed by loop</changelog>
  <changelog author="ohering@suse.de" date="1526990400">- Update lsvmbus interpreter from env(1) to python3(1) (bsc#1093910)</changelog>
  <changelog author="schwab@suse.de" date="1533211200">- hyper-v.tools.hv.hv_vss_daemon.c: Include &lt;sys/sysmacros.h&gt; for major</changelog>
  <changelog author="ohering@suse.de" date="1537876800">- vss: fix loop device detection (07136793)
- Fix IP reporting by KVP daemon with SRIOV (4ba63412)
- Fix a bug in the key delete code (86503bd3)
- fix compiler warnings about major/target_fname (1330fc35)
- PRIVATE hyper-v.compare-with-upstream.sh</changelog>
  <changelog author="ohering@suse.de" date="1539000000">- Update lsvmbus interpreter from python3(1) to python(1)
  because SLE12 lacks python3 support (bsc#1093910)</changelog>
  <changelog author="ohering@suse.de" date="1539086400">- fcopy: set 'error' in case an unknown operation was requested (c2d68afb)</changelog>
  <changelog author="ohering@suse.de" date="1574856000">- async name resolution in kvp_daemon (bsc#1100758)
- kvp: eliminate 'may be used uninitialized' warning (89eb4d8d)
- fix typos in toolchain (2d35c660)
- fixed Python pep8/flake8 warnings for lsvmbus (5912e791)
- Replace GPLv2 boilerplate/reference with SPDX (43aa3132)
- Fix a warning of buffer overflow with gcc 8.0.1 (4fcba780)</changelog>
  <changelog author="ohering@suse.de" date="1575028800">- Update lsvmbus interpreter from python(1) to python3(1) again
  because only SLE12 lacked proper python3 support (bsc#1093910)</changelog>
  <changelog author="ohering@suse.de" date="1582200000">- Revert previous non-upstream change for async name resolution
  Just use gethostname via hyper-v.kvp.gethostname.patch (bsc#1100758)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1595419200">- Enable build on aarch64</changelog>
  <changelog author="ohering@suse.de" date="1595419201">- Remove dependency to network-online.target now that gethostname
  is used in kvp_daemon (bsc#1174443, bsc#1174444)
- Reopen the devices if read() or write() returns errors (9fc3c01a)
- Use either python2 or python3 for lsvmbus (bsc#1093910)
- Remove sysv init scripts</changelog>
  <changelog author="ohering@suse.de" date="1597924800">- Allow daemon restart again (bsc#1116957)
  Since some time the kernel moved from netlink sockets to char
  devices, which is supposed to handle a connection reopen for the
  kernel&lt;-&gt;daemon interface</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="pgajdos@suse.com" date="1713873600">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="ohering@suse.de" date="1729598400">- Add memory allocation check in hv_fcopy_start (94e86b17)
- suppress the invalid warning for packed member alignment (207e03b0)
- Add new fcopy application based on uio driver (82b0945c)
- Add vmbus_bufring (45bab4d7)
- kvp: Handle IPv4 and Ipv6 combination for keyfile format (f971f6dd)
- kvp: Some small fixes for handling NM keyfiles (c3803203)
- kvp: Support for keyfile based connection profile (42999c90)
- kvp: remove unnecessary (void*) conversions (22589542)
- Remove an extraneous "the" (f15f39fa)
- change http to https in hv_kvp_daemon.c (fa52a4b2)
- replace the copy of include/linux/hyperv.h with include/uapi/linux/hyperv.h (6de74d10)
- merge individual udev rules files into a single rules file
- package only files, not directories already owned by filesystem.rpm
- remove braces from rpm spec macros
- remove obsolete Group tag
- replace RPM_BUILD_ROOT with buildroot
- use a meaningful name for the UAPI include file
- use a meaningful variable name for ifcfg in hv_set_ifconfig.sh</changelog>
  <changelog author="ohering@suse.de" date="1735732800">- update route parsing in kvp daemon (9bbb8a07)
- reduce resource usage in hv_kvp_daemon (175c71c2)
- reduce resouce usage in hv_get_dns_info helper (a4d024fe)
- hv_kvp_daemon: Pass NIC name to hv_get_dns_info as well (07dfa6e8)
- terminate fcopy daemon if read from uio fails (a9640fcd)
- change permissions of NetworkManager configuration file (91ae69c7)
- Fix a complier warning in the fcopy uio daemon (cb1b78f1)
- remove obsolete kvptest.ps1.txt which failed since a decade
- remove obsolete rpm postinstall code for SLE11SP2</changelog>
  <changelog author="ohering@suse.de" date="1749211200">- Enable debug logs for hv_kvp_daemon (a9c0b33e) (bsc#1244154)</changelog>
  <changelog author="ohering@suse.de" date="1753012800">- fcopy: Fix irregularities with size of ring buffer (a4131a50)
- fcopy: Fix incorrect file path conversion (0d86a8d6)</changelog>
</package>
<package pkgid="f296b8415c3804bd50cd0aa93df0f7107e600907d2e75cfabe34e0f4e8bfe9fe" name="hyper-v" arch="x86_64">
  <version epoch="0" ver="9" rel="150700.3.5.1"/>
  <changelog author="ohering@suse.de" date="1462363200">- add Conflicts with kernel &lt; 4.2 (fate#320485)
- vss: fix the write()'s argument: error -&gt; vss_msg
- remove repeated HV_FCOPY string
- report ENOSPC errors in hv_fcopy_daemon
- fcopy: full handshake support
- vss: full handshake support
- vss: use misc char device to communicate with kernel
- kvp: use misc char device to communicate with kernel</changelog>
  <changelog author="ohering@suse.de" date="1498651200">- Check VSS daemon is listening before a hot backup (bnc#1029693)
- fix a compile warning in snprintf
- kvp: ensure kvp device fd is closed on exec
- lsvmbus: add pci pass-through UUID</changelog>
  <changelog author="ohering@suse.de" date="1515412800">- update buffer handling in hv_fcopy_daemon
- remove unnecessary header files and netlink related code
- Avoid reading past allocated blocks from KVP file (bnc#1087658)
- fix snprintf warning in kvp_daemon
- properly handle long paths
- kvp: configurable external scripts path
- vss: Thaw the filesystem and continue if freeze call has timed out
- vss: Skip freezing filesystems backed by loop</changelog>
  <changelog author="ohering@suse.de" date="1526990400">- Update lsvmbus interpreter from env(1) to python3(1) (bsc#1093910)</changelog>
  <changelog author="schwab@suse.de" date="1533211200">- hyper-v.tools.hv.hv_vss_daemon.c: Include &lt;sys/sysmacros.h&gt; for major</changelog>
  <changelog author="ohering@suse.de" date="1537876800">- vss: fix loop device detection (07136793)
- Fix IP reporting by KVP daemon with SRIOV (4ba63412)
- Fix a bug in the key delete code (86503bd3)
- fix compiler warnings about major/target_fname (1330fc35)
- PRIVATE hyper-v.compare-with-upstream.sh</changelog>
  <changelog author="ohering@suse.de" date="1539000000">- Update lsvmbus interpreter from python3(1) to python(1)
  because SLE12 lacks python3 support (bsc#1093910)</changelog>
  <changelog author="ohering@suse.de" date="1539086400">- fcopy: set 'error' in case an unknown operation was requested (c2d68afb)</changelog>
  <changelog author="ohering@suse.de" date="1574856000">- async name resolution in kvp_daemon (bsc#1100758)
- kvp: eliminate 'may be used uninitialized' warning (89eb4d8d)
- fix typos in toolchain (2d35c660)
- fixed Python pep8/flake8 warnings for lsvmbus (5912e791)
- Replace GPLv2 boilerplate/reference with SPDX (43aa3132)
- Fix a warning of buffer overflow with gcc 8.0.1 (4fcba780)</changelog>
  <changelog author="ohering@suse.de" date="1575028800">- Update lsvmbus interpreter from python(1) to python3(1) again
  because only SLE12 lacked proper python3 support (bsc#1093910)</changelog>
  <changelog author="ohering@suse.de" date="1582200000">- Revert previous non-upstream change for async name resolution
  Just use gethostname via hyper-v.kvp.gethostname.patch (bsc#1100758)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1595419200">- Enable build on aarch64</changelog>
  <changelog author="ohering@suse.de" date="1595419201">- Remove dependency to network-online.target now that gethostname
  is used in kvp_daemon (bsc#1174443, bsc#1174444)
- Reopen the devices if read() or write() returns errors (9fc3c01a)
- Use either python2 or python3 for lsvmbus (bsc#1093910)
- Remove sysv init scripts</changelog>
  <changelog author="ohering@suse.de" date="1597924800">- Allow daemon restart again (bsc#1116957)
  Since some time the kernel moved from netlink sockets to char
  devices, which is supposed to handle a connection reopen for the
  kernel&lt;-&gt;daemon interface</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="pgajdos@suse.com" date="1713873600">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="ohering@suse.de" date="1729598400">- Add memory allocation check in hv_fcopy_start (94e86b17)
- suppress the invalid warning for packed member alignment (207e03b0)
- Add new fcopy application based on uio driver (82b0945c)
- Add vmbus_bufring (45bab4d7)
- kvp: Handle IPv4 and Ipv6 combination for keyfile format (f971f6dd)
- kvp: Some small fixes for handling NM keyfiles (c3803203)
- kvp: Support for keyfile based connection profile (42999c90)
- kvp: remove unnecessary (void*) conversions (22589542)
- Remove an extraneous "the" (f15f39fa)
- change http to https in hv_kvp_daemon.c (fa52a4b2)
- replace the copy of include/linux/hyperv.h with include/uapi/linux/hyperv.h (6de74d10)
- merge individual udev rules files into a single rules file
- package only files, not directories already owned by filesystem.rpm
- remove braces from rpm spec macros
- remove obsolete Group tag
- replace RPM_BUILD_ROOT with buildroot
- use a meaningful name for the UAPI include file
- use a meaningful variable name for ifcfg in hv_set_ifconfig.sh</changelog>
  <changelog author="ohering@suse.de" date="1735732800">- update route parsing in kvp daemon (9bbb8a07)
- reduce resource usage in hv_kvp_daemon (175c71c2)
- reduce resouce usage in hv_get_dns_info helper (a4d024fe)
- hv_kvp_daemon: Pass NIC name to hv_get_dns_info as well (07dfa6e8)
- terminate fcopy daemon if read from uio fails (a9640fcd)
- change permissions of NetworkManager configuration file (91ae69c7)
- Fix a complier warning in the fcopy uio daemon (cb1b78f1)
- remove obsolete kvptest.ps1.txt which failed since a decade
- remove obsolete rpm postinstall code for SLE11SP2</changelog>
  <changelog author="ohering@suse.de" date="1749211200">- Enable debug logs for hv_kvp_daemon (a9c0b33e) (bsc#1244154)</changelog>
  <changelog author="ohering@suse.de" date="1753012800">- fcopy: Fix irregularities with size of ring buffer (a4131a50)
- fcopy: Fix incorrect file path conversion (0d86a8d6)</changelog>
</package>
<package pkgid="32a803a7d2a2926c005544f99e0890843205d7a6b36d288c963c8558c273524b" name="icewm" arch="src">
  <version epoch="0" ver="1.4.2" rel="150000.7.18.1"/>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="qkzhu@suse.com" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
  <changelog author="yfjiang@suse.com" date="1584360000">- Improve build tag consistency between SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
  * Recommend polkit-gnome to both Leap and SLE.
  * Disable icewm-preferences.patch for Leap. The patch makes sense
    to icewm-config-upstream while Leap uses icewm-theme-branding
    the provide the theme.</changelog>
  <changelog author="yfjiang@suse.com" date="1586865600">- Explicitly require icewm-theme-branding on SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
- Add Conflicts between icewm-config-upstream and icewm-theme-branding.</changelog>
  <changelog author="meissner@suse.com" date="1596024000">- removed conflict on theming to make the transition work (bsc#1173441 bsc#1170420)</changelog>
  <changelog author="yfjiang@suse.com" date="1649764800">- Add icewm-build-with-glib2-ver-gt-2.67.3.patch:
  A later glib2 update will cause icewm failed to build by including
  gdk-pixbuf-xlib with extern "C" annotation:
  https://gitlab.gnome.org/GNOME/glib/-/commit/51003d409bb4b6c9a8540f70b92f8045abc4f0c9?merge_request_iid=1715
  The patch aims to remove the annotation caused the issue
  (bsc#1197729).</changelog>
  <changelog author="yfjiang@suse.com" date="1744891200">- Add icewm-translation-update.patch: Update the latest translation
  from https://l10n.opensuse.org/projects/icewm/icewm-1-4-branch/.</changelog>
</package>
<package pkgid="9007b1a36bd7f2f04684654720b171d34eb611303c9d75739ce8068dad3f671e" name="icewm" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="150000.7.18.1"/>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="qkzhu@suse.com" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
  <changelog author="yfjiang@suse.com" date="1584360000">- Improve build tag consistency between SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
  * Recommend polkit-gnome to both Leap and SLE.
  * Disable icewm-preferences.patch for Leap. The patch makes sense
    to icewm-config-upstream while Leap uses icewm-theme-branding
    the provide the theme.</changelog>
  <changelog author="yfjiang@suse.com" date="1586865600">- Explicitly require icewm-theme-branding on SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
- Add Conflicts between icewm-config-upstream and icewm-theme-branding.</changelog>
  <changelog author="meissner@suse.com" date="1596024000">- removed conflict on theming to make the transition work (bsc#1173441 bsc#1170420)</changelog>
  <changelog author="yfjiang@suse.com" date="1649764800">- Add icewm-build-with-glib2-ver-gt-2.67.3.patch:
  A later glib2 update will cause icewm failed to build by including
  gdk-pixbuf-xlib with extern "C" annotation:
  https://gitlab.gnome.org/GNOME/glib/-/commit/51003d409bb4b6c9a8540f70b92f8045abc4f0c9?merge_request_iid=1715
  The patch aims to remove the annotation caused the issue
  (bsc#1197729).</changelog>
  <changelog author="yfjiang@suse.com" date="1744891200">- Add icewm-translation-update.patch: Update the latest translation
  from https://l10n.opensuse.org/projects/icewm/icewm-1-4-branch/.</changelog>
</package>
<package pkgid="525e953297b833352cb6b61488a65a37cbe9df99ec875fe469a6dea4b9bc5005" name="icewm-default" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="150000.7.18.1"/>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="qkzhu@suse.com" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
  <changelog author="yfjiang@suse.com" date="1584360000">- Improve build tag consistency between SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
  * Recommend polkit-gnome to both Leap and SLE.
  * Disable icewm-preferences.patch for Leap. The patch makes sense
    to icewm-config-upstream while Leap uses icewm-theme-branding
    the provide the theme.</changelog>
  <changelog author="yfjiang@suse.com" date="1586865600">- Explicitly require icewm-theme-branding on SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
- Add Conflicts between icewm-config-upstream and icewm-theme-branding.</changelog>
  <changelog author="meissner@suse.com" date="1596024000">- removed conflict on theming to make the transition work (bsc#1173441 bsc#1170420)</changelog>
  <changelog author="yfjiang@suse.com" date="1649764800">- Add icewm-build-with-glib2-ver-gt-2.67.3.patch:
  A later glib2 update will cause icewm failed to build by including
  gdk-pixbuf-xlib with extern "C" annotation:
  https://gitlab.gnome.org/GNOME/glib/-/commit/51003d409bb4b6c9a8540f70b92f8045abc4f0c9?merge_request_iid=1715
  The patch aims to remove the annotation caused the issue
  (bsc#1197729).</changelog>
  <changelog author="yfjiang@suse.com" date="1744891200">- Add icewm-translation-update.patch: Update the latest translation
  from https://l10n.opensuse.org/projects/icewm/icewm-1-4-branch/.</changelog>
</package>
<package pkgid="40da3dada249f6c6bd33aec998f46e524c81b0a0274322b11f34a0015cd05023" name="icewm-lang" arch="noarch">
  <version epoch="0" ver="1.4.2" rel="150000.7.18.1"/>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="qkzhu@suse.com" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
  <changelog author="yfjiang@suse.com" date="1584360000">- Improve build tag consistency between SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
  * Recommend polkit-gnome to both Leap and SLE.
  * Disable icewm-preferences.patch for Leap. The patch makes sense
    to icewm-config-upstream while Leap uses icewm-theme-branding
    the provide the theme.</changelog>
  <changelog author="yfjiang@suse.com" date="1586865600">- Explicitly require icewm-theme-branding on SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
- Add Conflicts between icewm-config-upstream and icewm-theme-branding.</changelog>
  <changelog author="meissner@suse.com" date="1596024000">- removed conflict on theming to make the transition work (bsc#1173441 bsc#1170420)</changelog>
  <changelog author="yfjiang@suse.com" date="1649764800">- Add icewm-build-with-glib2-ver-gt-2.67.3.patch:
  A later glib2 update will cause icewm failed to build by including
  gdk-pixbuf-xlib with extern "C" annotation:
  https://gitlab.gnome.org/GNOME/glib/-/commit/51003d409bb4b6c9a8540f70b92f8045abc4f0c9?merge_request_iid=1715
  The patch aims to remove the annotation caused the issue
  (bsc#1197729).</changelog>
  <changelog author="yfjiang@suse.com" date="1744891200">- Add icewm-translation-update.patch: Update the latest translation
  from https://l10n.opensuse.org/projects/icewm/icewm-1-4-branch/.</changelog>
</package>
<package pkgid="5ae2760f03276b19cfbfae4e34db9e889a4c6f4682340140904a38771cf75e8d" name="icewm-lite" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="150000.7.18.1"/>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="qkzhu@suse.com" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
  <changelog author="yfjiang@suse.com" date="1584360000">- Improve build tag consistency between SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
  * Recommend polkit-gnome to both Leap and SLE.
  * Disable icewm-preferences.patch for Leap. The patch makes sense
    to icewm-config-upstream while Leap uses icewm-theme-branding
    the provide the theme.</changelog>
  <changelog author="yfjiang@suse.com" date="1586865600">- Explicitly require icewm-theme-branding on SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
- Add Conflicts between icewm-config-upstream and icewm-theme-branding.</changelog>
  <changelog author="meissner@suse.com" date="1596024000">- removed conflict on theming to make the transition work (bsc#1173441 bsc#1170420)</changelog>
  <changelog author="yfjiang@suse.com" date="1649764800">- Add icewm-build-with-glib2-ver-gt-2.67.3.patch:
  A later glib2 update will cause icewm failed to build by including
  gdk-pixbuf-xlib with extern "C" annotation:
  https://gitlab.gnome.org/GNOME/glib/-/commit/51003d409bb4b6c9a8540f70b92f8045abc4f0c9?merge_request_iid=1715
  The patch aims to remove the annotation caused the issue
  (bsc#1197729).</changelog>
  <changelog author="yfjiang@suse.com" date="1744891200">- Add icewm-translation-update.patch: Update the latest translation
  from https://l10n.opensuse.org/projects/icewm/icewm-1-4-branch/.</changelog>
</package>
<package pkgid="43c61840fc338e7e9a19c402b962ac4d89c2925c995f480cc2fb679a4686990c" name="icu" arch="src">
  <version epoch="0" ver="60.2" rel="150000.3.18.1"/>
  <changelog author="jengelh@inai.de" date="1413028800">- Update to new upstream release 54.1
  * Unicode 7.0: Unicode 7.0 adds a total of 2,834 characters,
  encompassing 23 new scripts, two currency symbols (manat &amp;
  ruble), many new pictographic and geometric symbols, and
  character additions to many existing scripts.
  * CLDR 26: 77 languages with 100% modern coverage, more &amp; improved
  data, many more measurement units.
- Remove icu-rpmlint.diff (solved differently upstream),
  icu-fix-tests-depending-on-date.patch (solved differently
  upstream, also take note of
  http://bugs.icu-project.org/trac/ticket/10937 it may need to be
  reinstated)</changelog>
  <changelog author="tchvatal@suse.com" date="1430222400">- Version bump to latest release 55.1:
  * support of CLDR 27 (with a major cleanup of region locales, among many
    other improvements), formatting for scientific notation ("1.2 × 10³")
  * update to Unicode 7.0 data for spoof-checking
  * Various performance enhancements
  * Full upstream changelog:
    http://site.icu-project.org/download/55
- Refresh the soname versioning patch:
  * icu-versioning.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1430222401">- Update baselibs.conf</changelog>
  <changelog author="jengelh@inai.de" date="1444392000">- Update to new upstream release 56.1
  * CLDR 28: For details of the many changes in CLDR, see CLDR 28.
  * Unicode data updated to Unicode 8.0: 41 new emoji characters,
  5,771 new ideographs for Chinese/Japanese/Korean, 6 new scripts,
  improved character properties data, etc.
  * ICU data size reduced by about 7.2% (1.8MB) via sharing string
  values across resource bundles.
  * DateIntervalFormat now handles intervals with seconds, and sets
  FieldPosition more consistently.
  * DateFormat::createInstanceForSkeleton() caches DateFormat
  patterns rather than DateTimePatternGenerator instances, for
  better performance (for cache hits) and lower heap memory
  consumption.
  * StringSearch (based on collation) defaults to matches on
  normalization boundaries rather than grapheme cluster boundaries,
  which yields more matches on Indic text.
  * RuleBasedNumberFormat (spelled-out numbers) now handles
  infinity, NaN.
  * Most of the old Normalizer/unorm.h had been replaced by
  (and reimplemented via) Normalizer2, and is now deprecated.
  * COLON has been withdrawn as a date pattern character
  corresponding to the date field [UDAT_]TIME_SEPARATOR_FIELD;
  there is currently no pattern character corresponding to that
  field.
  * Support for locale key "cf" to specify currency format style,
  and interaction with NumberFormat values for UNumberFormatStyle.
- Drop icu-remove-datetime.patch (merged upstream)</changelog>
  <changelog author="jengelh@inai.de" date="1458907200">- Update to new upstream release 57.1
  * CLDR 29 support
  * Grapheme/word/line breaking for emoji sequences, based on
  Unicode 9 proposed rules.
  * Four new Unicode emoji properties
  * DateFormat day period formatting of "noon", "at night", etc. via
  new pattern characters b &amp; B, and DateTimePatternGenerator
  support of C for selecting the customary form.
  * RelativeDateTimeFormatter: Simpler formatting API.
  * New simple &amp; fast SimpleFormatter class for a trivial subset of
  MessageFormat as used in CLDR data.</changelog>
  <changelog author="jengelh@inai.de" date="1477051200">- Update to new upstream release 58.1
  * CLDR 30.0.2: For details of the many changes in CLDR, see
  CLDR 30. Some things to note:
  * For some combinations of numbering system (arab, arabext, latn)
  and/or locale (ar, fa, he), there were changes to the
  bidirectional control characters used with certain symbols
  (percent, minus, plus), and changes to number patterns (currency
  and/or percent, including addition of bidirectional control
  characters in some cases).
  * Thhe bidirectional controls used for such purposes include U+061C
  ARABIC LETTER MARK (ALM), which requires use of the bidirectional
  algorithm from Unicode 6.3 or later.
  * The time separator for Norwegian locales (nb, nn) was changed to
  be ':' throughout.
  * Unicode 9.0: Version 9.0 adds exactly 7,500 characters, for a
  total of 128,172 characters. These additions include six new
  scripts, 19 symbols for the new 4K TV standard, and 72 new
  emoji characters.
  * Draft Emoji 4.0 data
  * Emoji updates for word &amp; line breaking
  * UBiDiTransform/BidiTransform API for convenient transformation of
  text between different Bidi layouts.
  * MeasureFormat API for measurement unit display names
  * Most COUNT and LIMIT enum constants have been deprecated
  * SpoofChecker: Handling of "whole script confusables" has been
  removed from ICU, in accordance with its removal from UTS #39
  Version 9.0.0 and the removal of the corresponding Unicode data
  file.
  * Greek uppercasing ("el" locale ID) removes most diacritics.
  * More robust locale data loading across ICU implementation code.
  * Reduced heap memory usage in DateTimePatternGenerator</changelog>
  <changelog author="idonmez@suse.com" date="1481371200">- Update to new upstream release 58.2
  * CLDR 30.0.3:
    + Fix incorrect data for number of Cantonese speakers in China.
    + Hani_Latn transform was not updated with Unihan 9.0 kMandarin
    readings.
  * Time zone database version 2016j
  * #12815 uspoof_getSkeleton sets backwards-incompatible illegal
    argument exception
  * #12825 uspoof_check goes into an "infinite loop" when U+30FB
    is in an input string
  * #12832 GreekUpper::toUpper skips the final character on a
    non-terminated UTF-8 string
  * #12849 u_strToTitle returns incorrect length if destination
    is NULL</changelog>
  <changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 59.1
  * Emoji 5.0 data
  * CLDR 31.0.1
  * * GMT and UTC are no longer unified, and CLDR provides
    distinct UTC display names, avoiding confusion with standard
    (winter) time in Britain.
  * New case mapping API (C++ &amp; Java classes CaseMap) supports
    styled text
  * ICU4C now uses and requires C++11 language features and
    libraries.
  * ICU4C has also moved to char16_t as the type for UTF-16. This
    is a breaking change. Please see the detail section below.</changelog>
  <changelog author="rguenther@suse.com" date="1495022400">- Add icu-avoid-x87-excess-precision.diff to avoid
  FixedPrecision::initVisibleDigits failure on i586 with GCC 7.
  (bnc#1030253)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- xlocale.patch: don't use obsolete &lt;xlocale.h&gt;</changelog>
  <changelog author="jengelh@inai.de" date="1501675200">- refresh icu-avoid-x87-excess-precision.diff with p1</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 60.2
  * ICU 60 provides full support for the Unicode 10.0 release
    with many new characters and many property improvements.
    Locale data is updated to CLDR 32, which adds several
    languages and data improvements. A new number formatting API
    has been added.</changelog>
  <changelog author="jengelh@inai.de" date="1514289600">- Drop dangling symlinks /usr/lib64/icu/*.inc</changelog>
  <changelog author="kukuk@suse.de" date="1566388800">- Remove old obsoletes/provides for migration from very old
  products, as they break our shared library policy (bsc#1146907).</changelog>
  <changelog author="qzhao@suse.com" date="1576497600">- Add Japanese-era-Reiwa-support-in-ICU4C-60.patch:
  Porting upstream's Japanese new era name support.
  (bnc#1103893, fate#325570, fate#325419)</changelog>
  <changelog author="qzhao@suse.com" date="1590926400">- Update icu.spec:
  Add "Provides:libicu = %version" for libicu to Make .Net core can
  install successfully.
  (bsc#1167603, bsc#1161007)</changelog>
  <changelog author="qzhao@suse.com" date="1593518400">- Add icu-CVE-2020-10531.patch:
  Fix potential integer overflow in UnicodeString:doAppend.
  (CVE-2020-10531, bsc#1166844).</changelog>
  <changelog author="qzhao@suse.com" date="1660305600">- Add icu-CVE-2020-21913.patch:
  Backport 727505bdd from upstream, use LocalMemory for cmd to prevent
  use after free.
  (CVE-2020-21913, bsc#1193951)</changelog>
  <changelog author="qzhao@suse.com" date="1749816000">- Add icu-CVE-2025-5222-shim-dd72356.patch:
  Backport dd72356 from upstream, ICU-11276 Adding UChar* method in
  CharString. To prepare dependence code for CVE-2025-5222 fix.
  (CVE-2025-5222, bsc#1243721)</changelog>
  <changelog author="qzhao@suse.com" date="1749816001">- Add icu-CVE-2025-5222.patch:
  Backport 2c667e3 from upstream, ICU-22973 Fix buffer overflow by
  using CharString.
  (CVE-2025-5222, bsc#1243721)</changelog>
</package>
<package pkgid="338345f83f7956feafcf9c4acd7c101769046bb5459a4ab1403bd35ffb774daa" name="icu" arch="src">
  <version epoch="0" ver="65.1" rel="150200.4.15.1"/>
  <changelog author="jengelh@inai.de" date="1477051200">- Update to new upstream release 58.1
  * CLDR 30.0.2: For details of the many changes in CLDR, see
  CLDR 30. Some things to note:
  * For some combinations of numbering system (arab, arabext, latn)
  and/or locale (ar, fa, he), there were changes to the
  bidirectional control characters used with certain symbols
  (percent, minus, plus), and changes to number patterns (currency
  and/or percent, including addition of bidirectional control
  characters in some cases).
  * Thhe bidirectional controls used for such purposes include U+061C
  ARABIC LETTER MARK (ALM), which requires use of the bidirectional
  algorithm from Unicode 6.3 or later.
  * The time separator for Norwegian locales (nb, nn) was changed to
  be ':' throughout.
  * Unicode 9.0: Version 9.0 adds exactly 7,500 characters, for a
  total of 128,172 characters. These additions include six new
  scripts, 19 symbols for the new 4K TV standard, and 72 new
  emoji characters.
  * Draft Emoji 4.0 data
  * Emoji updates for word &amp; line breaking
  * UBiDiTransform/BidiTransform API for convenient transformation of
  text between different Bidi layouts.
  * MeasureFormat API for measurement unit display names
  * Most COUNT and LIMIT enum constants have been deprecated
  * SpoofChecker: Handling of "whole script confusables" has been
  removed from ICU, in accordance with its removal from UTS #39
  Version 9.0.0 and the removal of the corresponding Unicode data
  file.
  * Greek uppercasing ("el" locale ID) removes most diacritics.
  * More robust locale data loading across ICU implementation code.
  * Reduced heap memory usage in DateTimePatternGenerator</changelog>
  <changelog author="idonmez@suse.com" date="1481371200">- Update to new upstream release 58.2
  * CLDR 30.0.3:
    + Fix incorrect data for number of Cantonese speakers in China.
    + Hani_Latn transform was not updated with Unihan 9.0 kMandarin
    readings.
  * Time zone database version 2016j
  * #12815 uspoof_getSkeleton sets backwards-incompatible illegal
    argument exception
  * #12825 uspoof_check goes into an "infinite loop" when U+30FB
    is in an input string
  * #12832 GreekUpper::toUpper skips the final character on a
    non-terminated UTF-8 string
  * #12849 u_strToTitle returns incorrect length if destination
    is NULL</changelog>
  <changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 59.1
  * Emoji 5.0 data
  * CLDR 31.0.1
  * * GMT and UTC are no longer unified, and CLDR provides
    distinct UTC display names, avoiding confusion with standard
    (winter) time in Britain.
  * New case mapping API (C++ &amp; Java classes CaseMap) supports
    styled text
  * ICU4C now uses and requires C++11 language features and
    libraries.
  * ICU4C has also moved to char16_t as the type for UTF-16. This
    is a breaking change. Please see the detail section below.</changelog>
  <changelog author="rguenther@suse.com" date="1495022400">- Add icu-avoid-x87-excess-precision.diff to avoid
  FixedPrecision::initVisibleDigits failure on i586 with GCC 7.
  (bnc#1030253)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- xlocale.patch: don't use obsolete &lt;xlocale.h&gt;</changelog>
  <changelog author="jengelh@inai.de" date="1501675200">- refresh icu-avoid-x87-excess-precision.diff with p1</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 60.2
  * ICU 60 provides full support for the Unicode 10.0 release
    with many new characters and many property improvements.
    Locale data is updated to CLDR 32, which adds several
    languages and data improvements. A new number formatting API
    has been added.</changelog>
  <changelog author="jengelh@inai.de" date="1514289600">- Drop dangling symlinks /usr/lib64/icu/*.inc</changelog>
  <changelog author="jengelh@inai.de" date="1522843200">- Update to new upstream release 61.1
  * ICU 61 upgrades to CLDR 33 locale data.
- Add icu-number-grouping.diff</changelog>
  <changelog author="jengelh@inai.de" date="1528113600">- Add icu-susevers.diff and disable UTF-8 assumption
  [boo#1095425]</changelog>
  <changelog author="jengelh@inai.de" date="1532865600">- Update to new upstream release 62.1
  * Unicode 11: 684 new characters, including 7 new scripts,
    Mtavruli Georgian capital letters, 5 new Han characters, and
    66 new emoji characters.
  * CLDR 33.1
  * Under-the-hood overhaul of number parsing. Behavior is mostly
    compatible with previous versions, but there are some known
    differences.
- Remove xlocale.patch (code to patch is gone),
  icu-number-grouping.diff (merged upstream)</changelog>
  <changelog author="idonmez@suse.com" date="1539777600">- Update to new upstream release 63.1
  * CLDR 34
    + Segmentation rules and emoji sort order adjusted for
    Unicode 11
    + Somali and Javanese data now up to moderate level
    (document content)
    + Tongan, Konkani, Maori, Dzongkha, Tatar, Kurdish (ku),
    and Xhosa data now up to basic level
    + Many data additions and corrections in many other
    languages
    + The following languages have been added to ICU: Sindhi,
    Maori, Turkmen, Javanese, Interlingua, Kurdish (ku), Xhosa
  * New currency: Venezuela's Bolívar Soberano (VES)
  * New Japanese calendar era from 2019: CLDR and ICU include
    data for testing that can be enabled.
    (ICU #12973, CLDR #10750)
  * To enable CLDR new Japanese era placeholder name, set
    environment variable (and Java system property for ICU4J)
    ICU_ENABLE_TENTATIVE_ERA=true.
  * New API for number and currency range formatting
    (class NumberRangeFormatter, #11276)
  * Support for additional Unicode properties:
    Indic_Positional_Category &amp; Indic_Syllabic_Category (#8966)
    and Vertical_Orientation (#12850)
  * New API for code point maps and tries, mapping Unicode
    code points (U+0000..U+10FFFF) to integer values. (#13530)
  * Java classes CodePointMap, CodePointTrie, MutableCodePointTrie
  * C types UCPMap, UCPTrie, UMutableCPTrie
  * New API for getting a UnicodeSet per binary property and a code
    point map per enumerated/int-value property. (#20086)
  * Full conformance with UAX #14 Line Breaking
    (required BreakIterator feature work). (#7270)
  * C++ Locale class
    + Additional functions forLanguageTag()/toLanguageTag(),
    and functions that are easier and safer to use by using
    StringPiece and ByteSink rather than raw buffers. (#13417)
    + Move semantics. (#13645)
  * Various Out-Of-Memory (OOM) issues have been fixed.
- Refresh icu-versioning.diff</changelog>
  <changelog author="jengelh@inai.de" date="1554120000">- Update to new upstream release 64.1
  * Updates to Unicode 12 and to CLDR 35 locale data with many
    additions and corrections, and some new languages. ICU adds a
    data filtering/subsetting mechanism, improved formatting API,
    and a C++ LocaleBuilder.
- New python3 dependency to build intermediate file
  test/testdata/rules.mk.</changelog>
  <changelog author="jengelh@inai.de" date="1555588800">- Update to new upstream release 64.2
  * This maintenance update for ICU 64 includes draft Unicode
    12.1 update, CLDR 35.1 locale data and support for the new
    Japanese era Reiwa (令和). (boo#1112183, bnc#1103893,
    FATE#325570, bnc#1103893, fate#325570, fate#325419)</changelog>
  <changelog author="idonmez@suse.com" date="1557835200">- Add 075cefb2e21f57f4cac1bc2868e93dd1b8c077cc.patch to fix a
  regression with the C.UTF-8 locale
  https://unicode-org.atlassian.net/browse/ICU-20575</changelog>
  <changelog author="kukuk@suse.de" date="1566388800">- Remove old obsoletes/provides for migration from very old
  products, as they break our shared library policy (bsc#1146907).</changelog>
  <changelog author="jengelh@inai.de" date="1570276800">- Update to release 65.1 (jsc#SLE-11118).
  * Updated to CLDR 36 locale data with many additions and
    corrections, and some new measurement units.
  * The Java LocaleMatcher API is improved, and ported to C++.
- Drop 075cefb2e21f57f4cac1bc2868e93dd1b8c077cc.patch
  (merged)</changelog>
  <changelog author="qzhao@suse.com" date="1590926400">- Update icu.spec:
  Add "Provides:libicu = %version" for libicu to Make .Net core can
  install successfully.
  (bsc#1167603, bsc#1161007)</changelog>
  <changelog author="qzhao@suse.com" date="1660305600">- Add icu-CVE-2020-21913.patch:
  Backport 727505bdd from upstream, use LocalMemory for cmd to prevent
  use after free.
  (CVE-2020-21913, bsc#1193951)</changelog>
  <changelog author="qzhao@suse.com" date="1749816000">- Add icu-CVE-2025-5222.patch:
  Backport 2c667e3 from upstream, ICU-22973 Fix buffer overflow by
  using CharString.
  (CVE-2025-5222, bsc#1243721)</changelog>
</package>
<package pkgid="5f670e0a800b522266d476ac473c81a5b751300261795c716fc914b475ab6ebb" name="infiniband-diags" arch="x86_64">
  <version epoch="0" ver="54.0" rel="150700.3.2.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="schwab@suse.de" date="1647518400">- util-Add-barriers-support-for-RISC-V.patch: Backport from upstream: Add
  barriers support for RISC-V</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1648555200">- Update to v39.1
  - Major fixes for hns provider
  - Bug fixes for all providers
  - systemd hardening
  - NDR rate support
- Dropped srp_daemon-Detect-proper-path-to-systemctl.patch
  as it was fixed upstream</changelog>
  <changelog author="dmueller@suse.com" date="1659960000">- skip valgrind on riscv64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1663070400">- Update to v42.0
  - Fixes for all providers
- Dropped patches merged upstream:
  - util-Add-barriers-support-for-RISC-V.patch
  - cmake-Make-modprobe.d-path-configurable.patch
- Update gen-pandoc.sh to support python3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1665662400">- Add rdma-ndd-disable-systemd-ProtectHostName-feature.patch to fix issue
  where rdma-ndd would not be aware of dynamic hostnames retrived through DHCP</changelog>
  <changelog author="nicolas.morey@suse.com" date="1681905600">- Update to v45.0
  - Fixes for all providers
  - Support for Microsoft Azure Network Adapter
- Drop rdma-ndd-disable-systemd-ProtectHostName-feature.patch
  as it was fixed upstream.
- Refresh against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-Update-kernel-headers.patch</changelog>
  <changelog author="nicolas.morey@suse.com" date="1690200000">- Update to v47.0
  - Fixes for all providers</changelog>
  <changelog author="nicolas.morey@suse.com" date="1691064000">- Drop patches adding support for cxgb3 (EOL, removed from kernel 5.5)
  - cxgb3-fix-declaration-of-free_context.patch
  - cxgb3-fix-support-for-new-uquery-API.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-Update-kernel-headers.patch
- Update baselibs=.conf accordingly</changelog>
  <changelog author="jengelh@inai.de" date="1692792000">- Add missing-quoting.patch
- Use normal GNU tar option syntax
- Remove old RPM spec logic (%defattr)</changelog>
  <changelog author="nicolas.morey@suse.com" date="1695384000">- Update to v48.0
  - No release notes available.
- Drop missing-quoting.patch which was fixed upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1700913600">- Update to v49.0 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1705924800">- Update to v49.1 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1707912000">- Add kernel-boot-do-not-load-module-unsupported-on-s390.patch
  to prevent autoload of module not supported on s390. (bsc#1219805)</changelog>
  <changelog author="nicolas.morey@suse.com" date="1719316800">- Update to rdma-core v52.0
  - No release notes available
- Add upstream patch Added-suffix-libdrm-to-CMakeLists.txt-for-drm.patch
  to fix libdrm detection.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1723464000">- Update to rdma-core v53.0
  - No release notes available
- Remove Added-suffix-libdrm-to-CMakeLists.txt-for-drm.patch
  as it was merged upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1728561600">- Update to rdma-core v54.0
  - No release notes available</changelog>
</package>
<package pkgid="02328687c491406cafe6e33cfd43abd54992229fd510766d4ca8e3bcda4fc5ef" name="inotify-tools" arch="src">
  <version epoch="0" ver="3.21.9.6" rel="150400.3.3.3"/>
  <changelog author="stephan.barth@suse.com" date="1377604800">- initial package</changelog>
  <changelog author="stephan.barth@suse.com" date="1378123200">- some spec file clean up:
  - explicitly list file names
  - removed unneeded BuildRequires and %changelog for the -devel
    sub-package
  - removed pointless %lang_package tag
  - specified upstream download URI in the URL tag
- inotify-return.patch:
  specifies a return value for a function to fix a build error
  (no-return-in-nonvoid-function)</changelog>
  <changelog author="stephan.barth@suse.com" date="1378728000">- removed %clean section
- enabled doxygen in configure and split up doc package
- added fdupes call for doc (doxygen) files
- added %check section with simple "make check"
- moved .so files to the main package
- added --disable-static to configure and remove .la file
- replaced RPM_BUILD_ROOT with %buildroot</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1424952000">- Updated download location</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1425643200">- Splitted off the shared library</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1426680000">- Added inotify-tools-no-timestamp-in-doc.patch to remove date and time
  from the doxygen-generated documentation files.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1426680001">- Build noarch package for doc only for newer suse version, otherwise
  build fails.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1426852800">- Do not longer provide lib%{name}
- Package COPYING</changelog>
  <changelog author="schwab@suse.de" date="1445256000">- reserved-identifier.patch: fix invalid use of reserved identifier</changelog>
  <changelog author="adrian@suse.de" date="1535716800">- update to version 3.20.1
  * no changelog
  * drop upstreamed patch reserved-identifier.patch</changelog>
  <changelog author="dmueller@suse.com" date="1549195200">- adjust source to the github download url</changelog>
  <changelog author="bwiedemann@suse.com" date="1554379200">- Update inotify-tools-no-timestamp-in-doc.patch
  because doxygen footers are no more an issue and man page
  date needs to be normalized (boo#1047218)</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 3.20.2:
  * New maintainer
  * Fix potential buffer overflow
  * gcc 9 support
- remove inotify-tools-no-timestamp-in-doc.patch
  inotify-return.patch (merged upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 3.20.11.0:
  * Added --no-dereference to watch a symlink
  * bugfixes</changelog>
  <changelog author="dmueller@suse.com" date="1632744000">- update to 3.21.9.5:
  * Fix Wrong pointer passed to realloc
  * Fix offset compiler warning
  * various static code analyse annotations and fixes</changelog>
  <changelog author="dmueller@suse.com" date="1634385600">- update to 3.21.9.6 (jsc#SLE-21025):
  * update path for includes in stats.h
  * Fix spellings in manpages</changelog>
  <changelog author="dmueller@suse.com" date="1758024000">- add inotifywait-nullterminate.patch (bsc#1249617)</changelog>
</package>
<package pkgid="9f28dc4ace15d6f298f21c5302d1527e0cab7573308e30f7b197d7e7c68c65a4" name="inotify-tools" arch="x86_64">
  <version epoch="0" ver="3.21.9.6" rel="150400.3.3.3"/>
  <changelog author="jweberhofer@weberhofer.at" date="1424952000">- Updated download location</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1425643200">- Splitted off the shared library</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1426680000">- Added inotify-tools-no-timestamp-in-doc.patch to remove date and time
  from the doxygen-generated documentation files.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1426680001">- Build noarch package for doc only for newer suse version, otherwise
  build fails.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1426852800">- Do not longer provide lib%{name}
- Package COPYING</changelog>
  <changelog author="schwab@suse.de" date="1445256000">- reserved-identifier.patch: fix invalid use of reserved identifier</changelog>
  <changelog author="adrian@suse.de" date="1535716800">- update to version 3.20.1
  * no changelog
  * drop upstreamed patch reserved-identifier.patch</changelog>
  <changelog author="dmueller@suse.com" date="1549195200">- adjust source to the github download url</changelog>
  <changelog author="bwiedemann@suse.com" date="1554379200">- Update inotify-tools-no-timestamp-in-doc.patch
  because doxygen footers are no more an issue and man page
  date needs to be normalized (boo#1047218)</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 3.20.2:
  * New maintainer
  * Fix potential buffer overflow
  * gcc 9 support
- remove inotify-tools-no-timestamp-in-doc.patch
  inotify-return.patch (merged upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 3.20.11.0:
  * Added --no-dereference to watch a symlink
  * bugfixes</changelog>
  <changelog author="dmueller@suse.com" date="1632744000">- update to 3.21.9.5:
  * Fix Wrong pointer passed to realloc
  * Fix offset compiler warning
  * various static code analyse annotations and fixes</changelog>
  <changelog author="dmueller@suse.com" date="1634385600">- update to 3.21.9.6 (jsc#SLE-21025):
  * update path for includes in stats.h
  * Fix spellings in manpages</changelog>
  <changelog author="dmueller@suse.com" date="1758024000">- add inotifywait-nullterminate.patch (bsc#1249617)</changelog>
</package>
<package pkgid="17229bb050b663e2d3096b1f9a82c78d86d388159a589ac6278c9130c4a2cdef" name="inotify-tools-devel" arch="x86_64">
  <version epoch="0" ver="3.21.9.6" rel="150400.3.3.3"/>
  <changelog author="jweberhofer@weberhofer.at" date="1424952000">- Updated download location</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1425643200">- Splitted off the shared library</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1426680000">- Added inotify-tools-no-timestamp-in-doc.patch to remove date and time
  from the doxygen-generated documentation files.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1426680001">- Build noarch package for doc only for newer suse version, otherwise
  build fails.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1426852800">- Do not longer provide lib%{name}
- Package COPYING</changelog>
  <changelog author="schwab@suse.de" date="1445256000">- reserved-identifier.patch: fix invalid use of reserved identifier</changelog>
  <changelog author="adrian@suse.de" date="1535716800">- update to version 3.20.1
  * no changelog
  * drop upstreamed patch reserved-identifier.patch</changelog>
  <changelog author="dmueller@suse.com" date="1549195200">- adjust source to the github download url</changelog>
  <changelog author="bwiedemann@suse.com" date="1554379200">- Update inotify-tools-no-timestamp-in-doc.patch
  because doxygen footers are no more an issue and man page
  date needs to be normalized (boo#1047218)</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 3.20.2:
  * New maintainer
  * Fix potential buffer overflow
  * gcc 9 support
- remove inotify-tools-no-timestamp-in-doc.patch
  inotify-return.patch (merged upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 3.20.11.0:
  * Added --no-dereference to watch a symlink
  * bugfixes</changelog>
  <changelog author="dmueller@suse.com" date="1632744000">- update to 3.21.9.5:
  * Fix Wrong pointer passed to realloc
  * Fix offset compiler warning
  * various static code analyse annotations and fixes</changelog>
  <changelog author="dmueller@suse.com" date="1634385600">- update to 3.21.9.6 (jsc#SLE-21025):
  * update path for includes in stats.h
  * Fix spellings in manpages</changelog>
  <changelog author="dmueller@suse.com" date="1758024000">- add inotifywait-nullterminate.patch (bsc#1249617)</changelog>
</package>
<package pkgid="cb933f450211d624acd40cf82f56263c8f5da656e664f5fba92d8183e1030acc" name="installation-images-SLES" arch="src">
  <version epoch="0" ver="16.60.7" rel="150700.3.5.2"/>
  <changelog author="wfeldt@opensuse.org" date="1702555200">- merge gh#openSUSE/installation-images#676
- include complete system-role-common-criteria package
  (bsc#1217968)
- 16.59.4</changelog>
  <changelog author="wfeldt@opensuse.org" date="1705665600">- merge gh#openSUSE/installation-images#688
- use kernel-firmware-all instead of kernel-firmware (bsc#1214789)
- 16.59.5</changelog>
  <changelog author="wfeldt@opensuse.org" date="1707134400">- merge gh#openSUSE/installation-images#690
- change HMC console name from ttyS1 to ttysclp0 (bsc#1203405)
- 16.59.6</changelog>
  <changelog author="wfeldt@opensuse.org" date="1707480000">- merge gh#openSUSE/installation-images#694
- s390-tools now available for non-s390x archs (jsc#PED-7136,
  jsc#PED-7138)</changelog>
  <changelog author="wfeldt@opensuse.org" date="1707480001">- merge gh#openSUSE/installation-images#695
- remove explicit dependency on libopenssl*-hmac (bsc#1219762)
- 16.59.7</changelog>
  <changelog author="wfeldt@opensuse.org" date="1707739200">- merge gh#openSUSE/installation-images#697
- no libcryptsetup12-hmac, libgcrypt20-hmac anymore (bsc#1219762)
- 16.59.8</changelog>
  <changelog author="wfeldt@opensuse.org" date="1710936000">- merge gh#openSUSE/installation-images#699
- no more libstoragemgmt-netapp-plugin (bsc#1221699, jsc#PED-7948)
- 16.59.9</changelog>
  <changelog author="wfeldt@opensuse.org" date="1710936001">- merge gh#openSUSE/installation-images#701
- add spi drivers and pl330 (bsc#1221603)
- 16.59.10</changelog>
  <changelog author="wfeldt@opensuse.org" date="1712750400">- merge gh#openSUSE/installation-images#705
- drop unused wget (bsc#1215290, bsc#1222611)
- avoid using libpxbackend-1_0-mini (bsc#1215290, bsc#1222611)
- BuildConflict libpxbackend-1_0-mini (bsc#1215290, bsc#1222611)
- 16.59.11</changelog>
  <changelog author="wfeldt@opensuse.org" date="1715083200">- merge gh#openSUSE/installation-images#712
- increase XZ compression level for initrd (bsc#1223982)
- support ZSTD compression for initrd
- 16.59.12</changelog>
  <changelog author="wfeldt@opensuse.org" date="1715169600">- merge gh#openSUSE/installation-images#713
- refresh ssh_host_rsa_key (jsc#PED-129)
- 16.59.13</changelog>
  <changelog author="wfeldt@opensuse.org" date="1720699200">- merge gh#openSUSE/installation-images#725
- require libsolv-tools explicitly (bsc#1227672)
- 16.60.0</changelog>
  <changelog author="wfeldt@opensuse.org" date="1721736000">- merge gh#openSUSE/installation-images#729
- make some compression settings configurable (bsc#1223982,
  jsc#PED-8374)
- limit compression in OBS to 4 threads
- ppc64: optimize for medium compressed initrd size
- fix perl issue in test case
- 16.60.1</changelog>
  <changelog author="wfeldt@opensuse.org" date="1722600000">- merge gh#openSUSE/installation-images#733
- Revert "drop unused wget (bsc#1215290)" (bsc#1228736)
- 16.60.2</changelog>
  <changelog author="wfeldt@opensuse.org" date="1730980800">- merge gh#openSUSE/installation-images#743
- add pfcp module (bsc#1233043)
- 16.60.3</changelog>
  <changelog author="wfeldt@opensuse.org" date="1732795200">- merge gh#openSUSE/installation-images#747
- Drop gamin-server BuildRequires: no longer relevant
- add extra sync before removing zram swap device (bsc#1233893)
- 16.60.4</changelog>
  <changelog author="wfeldt@opensuse.org" date="1736337600">- merge gh#openSUSE/installation-images#750
- fix zram setup taking new module dependencies into account
  (bsc#1235440)
- another libpxbackend workaround
- 16.60.5</changelog>
  <changelog author="wfeldt@opensuse.org" date="1747224000">- merge gh#openSUSE/installation-images#761
- add firmware file iwlwifi-gl-c0-fm-c0-92.ucode explicitly
  (bsc#1243020)
- 16.60.6</changelog>
  <changelog author="wfeldt@opensuse.org" date="1755691200">- merge gh#openSUSE/installation-images#766
- add libopenssl-3-fips-provider to make fips work (bsc#1244208)</changelog>
  <changelog author="wfeldt@opensuse.org" date="1755691201">- merge gh#openSUSE/installation-images#767
- add uio_hv_generic.ko to module config
- 16.60.7</changelog>
</package>
<package pkgid="3284db3d8a33afc4c73819193ce74d13c3d2d98744ed7f4d59478c3f5b676c79" name="intel-SINIT" arch="noarch">
  <version epoch="0" ver="2.3" rel="150000.4.5.2"/>
  <changelog author="meissner@novell.com" date="1304078400">- imported SINITS from http://sourceforge.net/projects/tboot/
  FATE#311820</changelog>
  <changelog author="coolo@novell.com" date="1307534400">- fix license (seems autobuild overwritten)</changelog>
  <changelog author="meissner@suse.com" date="1392811200">- fixed license to be SUSE-Firmware</changelog>
  <changelog author="meissner@suse.com" date="1392811201">- Updated to current zipfiles available from
  http://software.intel.com/en-us/articles/intel-trusted-execution-technology/</changelog>
  <changelog author="jengelh@inai.de" date="1413288000">- Specfile cleanup: avoid %fdupes on buildroot, simplify %install.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1494417600">- Updated to current zipfiles available from
  https://software.intel.com/en-us/articles/intel-trusted-execution-technology
  (new: 5th - 7th gen series broadwell/skylake/kaby lake)
- Rewrote package description and summary (was partly copied from tboot, and
  thus wrong), to be more clear and descriptive.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1511784000">- Correctly install SINIT files ending in lower case .bin into /usr/lib/sinit,
  instead of into the documentation dirs.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1760961600">- copy license files into uniquely named files and mark them as licenses for
  the package (bsc#1252152).</changelog>
</package>
<package pkgid="8780cee421dcd06ea6fb52e504a69a73a683ad104190e6ade6ec27a3268f7ca9" name="intel-SINIT" arch="src">
  <version epoch="0" ver="2.3" rel="150000.4.5.2"/>
  <changelog author="meissner@novell.com" date="1304078400">- imported SINITS from http://sourceforge.net/projects/tboot/
  FATE#311820</changelog>
  <changelog author="coolo@novell.com" date="1307534400">- fix license (seems autobuild overwritten)</changelog>
  <changelog author="meissner@suse.com" date="1392811200">- fixed license to be SUSE-Firmware</changelog>
  <changelog author="meissner@suse.com" date="1392811201">- Updated to current zipfiles available from
  http://software.intel.com/en-us/articles/intel-trusted-execution-technology/</changelog>
  <changelog author="jengelh@inai.de" date="1413288000">- Specfile cleanup: avoid %fdupes on buildroot, simplify %install.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1494417600">- Updated to current zipfiles available from
  https://software.intel.com/en-us/articles/intel-trusted-execution-technology
  (new: 5th - 7th gen series broadwell/skylake/kaby lake)
- Rewrote package description and summary (was partly copied from tboot, and
  thus wrong), to be more clear and descriptive.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1511784000">- Correctly install SINIT files ending in lower case .bin into /usr/lib/sinit,
  instead of into the documentation dirs.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1760961600">- copy license files into uniquely named files and mark them as licenses for
  the package (bsc#1252152).</changelog>
</package>
<package pkgid="fca4934a095c8dde9b9c2a3af58a318732b05967cb758b5acda55306a3001ee4" name="iotop" arch="noarch">
  <version epoch="0" ver="0.6" rel="150000.4.12.1"/>
  <changelog author="pth@suse.de" date="1283860800">- Rename alignment patch.</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1301313600">- update to 0.4.3:
  * the netlink message parsing code was fixed to accept alignment padding
  * UTF-8 output is now forced even if the locale is misconfigured
  * the semantic of the 'a' key was changed to show stats since iotop was
    started
- changes from 0.4.2:
  * workaround for an ncurses bug where UTF-8 strings are misprinted
  * ioprio support for the armel and hppa architectures was added
  * a possible incompatibility with Linux 2.6.37 on 64-bit systems was fixed
  * iotop does not crash anymore when the locale is incorrectly configured</changelog>
  <changelog author="saschpe@suse.de" date="1301486400">- Remove authors from %%description
- Change "python ./setup.py" calls to "python setup.py"</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1320062400">- update to 0.4.4:
  * cosmetic fixes, including a better error message when missing root
    credentials</changelog>
  <changelog author="zaitor@opensuse.org" date="1362312000">- Update to version 0.5:
  + Adapt the display to the maximum pid width.
  + Include both total and actual disk bandwidth in the summary.
  + Conversion to Python 3.
  + Installation to sbin instead of bin.</changelog>
  <changelog author="pth@suse.de" date="1372334400">- Update to 0.6:
  * Clean up the terminal on exit
  * Stop busy looping on exit in certain conditions
  * Restored UTF-8 support with python2
  * Releases are now gpg signed with key "4096R/4D23A27E 2013-05-26"</changelog>
  <changelog author="mpluskal@suse.com" date="1426507200">- Cleanup spec file with spec-cleaner
- Remove no longer needed iotop-rpmlintrc
- Build cleanup
- Add gpg signature
- Use fdupes to remove duplicates</changelog>
  <changelog author="mvetter@suse.com" date="1519214400">- bsc#1081915: Port to python3:
  * Add iotop-0.6-python3_build.patch: Upstream commit to fix
    python build by replacing itervalues() with values(). ID is
    99c8d7cedce81f17b851954d94bfa73787300599
  * Add iotop-0.6-python3-header.patch: Replace header to use
    python3
- Add iotop-0.6-noendcurses.patch: to prevent problems when closing
  terminal while running iotop (rh#1035503)
- Run spec-cleaner:
  * Remove py_requires
  * Use man macro
- Drop condition around noarch</changelog>
  <changelog author="ldevulder@suse.com" date="1527595200">- Add iotop-0.60-fix-proc-status-split.patch: Upstream commit to
  fix crash when /proc/*/status doesn't have tab character (this
  can be the case with vserver kernels)
- Add iotop-0.6-ignore-invalid-lines-in-proc-status.patch: Upstream
  commit to fix crash when /proc/*/status has invalid lines</changelog>
  <changelog author="angel.yankov@suse.com" date="1745582400">- Detect the kernel.task_delayacct sysctl value [bsc#1241104]
  * Automatically hide SWAPIN/IO columns when unavailable
  * Add iotop-kernel-task-delayacct.patch
  * Add iotop-hide-swapin-unavailable.patch</changelog>
</package>
<package pkgid="73abe498204f5b6f0e04ba1ec03947978b9723645cdff82c0a4709643fa98b0f" name="iotop" arch="src">
  <version epoch="0" ver="0.6" rel="150000.4.12.1"/>
  <changelog author="pth@suse.de" date="1202299200">- Initial package</changelog>
  <changelog author="pth@suse.de" date="1202817600">- Add missing requires for python-curses</changelog>
  <changelog author="pth@suse.de" date="1205496000">- Include a copy of GPL2 (bnc#370246).</changelog>
  <changelog author="aj@suse.de" date="1205928000">- Fix build (really include COPYING).
- Fix rpmlint warnings about "useless-explicit-requires python" and
  "redundant-prefix-tag"</changelog>
  <changelog author="pth@suse.de" date="1215691200">- Update to 0.2.1. Changes since 0.1:
  - 0.2.1:
  * UTF-8 strings are now correctly handled
  - 0.2
  * Misconfigured terminals (TERM=xterm-color) are tolerated
  * Added the --only option to only show processes or threads actually
    doing I/O
  * Typing 'o' dynamically toggles the --only option
  * Cosmetic fixes as well as minor bug fixes
  * Re-organized code to import vanilla pynl80211
  * Added workaround KERNBUG display in -P</changelog>
  <changelog author="pth@suse.de" date="1218456000">- Add rpmlintrc file.</changelog>
  <changelog author="pth@suse.de" date="1218542400">- Remove py_requires and the rpmlintrc filters for warnings
  resulting from the use of it.
- Remove superfluous BuildRequires for python.</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="pth@suse.de" date="1283428800">- Add py_requires
- Update to 0.4.1. Changes since 0.2.1:
  o Portability fix
  o Better reporting of missing requirements
  0.4
  ~~~
  o Compatibility with python2.4 using the ctypes module
  o Stopped using setuptools in favor of straight distutils
  0.3.2
  ~~~~~
  o Split long command lines in the middle instead of cutting them at the end
  o Added a heuristic to detect kernels without CONFIG_TASK_DELAY_ACCT
  o The I/O nice of a process/thread can be changed with the 'i' key
  0.3.1
  ~~~~~
  o Fixed the ioprio syscall detection when running on i386/x86_64
  o Fixed interaction between --accumulated and --only
  o Fixed column sorting with --accumulated
  0.3
  ~~~
  o -P is now fully implemented and is dynamically toggled with 'p'
  o Show the I/O priority
  o Added the --accumulated, --kilobytes, --time and --quiet options</changelog>
  <changelog author="pth@suse.de" date="1283774400">- Apply patch from author to adapt iotop to different alignments
  on 64 Bit systems (bnc#617281).</changelog>
  <changelog author="pth@suse.de" date="1283860800">- Rename alignment patch.</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1301313600">- update to 0.4.3:
  * the netlink message parsing code was fixed to accept alignment padding
  * UTF-8 output is now forced even if the locale is misconfigured
  * the semantic of the 'a' key was changed to show stats since iotop was
    started
- changes from 0.4.2:
  * workaround for an ncurses bug where UTF-8 strings are misprinted
  * ioprio support for the armel and hppa architectures was added
  * a possible incompatibility with Linux 2.6.37 on 64-bit systems was fixed
  * iotop does not crash anymore when the locale is incorrectly configured</changelog>
  <changelog author="saschpe@suse.de" date="1301486400">- Remove authors from %%description
- Change "python ./setup.py" calls to "python setup.py"</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1320062400">- update to 0.4.4:
  * cosmetic fixes, including a better error message when missing root
    credentials</changelog>
  <changelog author="zaitor@opensuse.org" date="1362312000">- Update to version 0.5:
  + Adapt the display to the maximum pid width.
  + Include both total and actual disk bandwidth in the summary.
  + Conversion to Python 3.
  + Installation to sbin instead of bin.</changelog>
  <changelog author="pth@suse.de" date="1372334400">- Update to 0.6:
  * Clean up the terminal on exit
  * Stop busy looping on exit in certain conditions
  * Restored UTF-8 support with python2
  * Releases are now gpg signed with key "4096R/4D23A27E 2013-05-26"</changelog>
  <changelog author="mpluskal@suse.com" date="1426507200">- Cleanup spec file with spec-cleaner
- Remove no longer needed iotop-rpmlintrc
- Build cleanup
- Add gpg signature
- Use fdupes to remove duplicates</changelog>
  <changelog author="mvetter@suse.com" date="1519214400">- bsc#1081915: Port to python3:
  * Add iotop-0.6-python3_build.patch: Upstream commit to fix
    python build by replacing itervalues() with values(). ID is
    99c8d7cedce81f17b851954d94bfa73787300599
  * Add iotop-0.6-python3-header.patch: Replace header to use
    python3
- Add iotop-0.6-noendcurses.patch: to prevent problems when closing
  terminal while running iotop (rh#1035503)
- Run spec-cleaner:
  * Remove py_requires
  * Use man macro
- Drop condition around noarch</changelog>
  <changelog author="ldevulder@suse.com" date="1527595200">- Add iotop-0.60-fix-proc-status-split.patch: Upstream commit to
  fix crash when /proc/*/status doesn't have tab character (this
  can be the case with vserver kernels)
- Add iotop-0.6-ignore-invalid-lines-in-proc-status.patch: Upstream
  commit to fix crash when /proc/*/status has invalid lines</changelog>
  <changelog author="angel.yankov@suse.com" date="1745582400">- Detect the kernel.task_delayacct sysctl value [bsc#1241104]
  * Automatically hide SWAPIN/IO columns when unavailable
  * Add iotop-kernel-task-delayacct.patch
  * Add iotop-hide-swapin-unavailable.patch</changelog>
</package>
<package pkgid="6921c814d8c8ce69696b521b282d525fe809d9d04c3f4582abaa61b28edf7e86" name="iotop" arch="noarch">
  <version epoch="0" ver="0.6" rel="150000.4.6.2"/>
  <changelog author="pth@suse.de" date="1283860800">- Rename alignment patch.</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1301313600">- update to 0.4.3:
  * the netlink message parsing code was fixed to accept alignment padding
  * UTF-8 output is now forced even if the locale is misconfigured
  * the semantic of the 'a' key was changed to show stats since iotop was
    started
- changes from 0.4.2:
  * workaround for an ncurses bug where UTF-8 strings are misprinted
  * ioprio support for the armel and hppa architectures was added
  * a possible incompatibility with Linux 2.6.37 on 64-bit systems was fixed
  * iotop does not crash anymore when the locale is incorrectly configured</changelog>
  <changelog author="saschpe@suse.de" date="1301486400">- Remove authors from %%description
- Change "python ./setup.py" calls to "python setup.py"</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1320062400">- update to 0.4.4:
  * cosmetic fixes, including a better error message when missing root
    credentials</changelog>
  <changelog author="zaitor@opensuse.org" date="1362312000">- Update to version 0.5:
  + Adapt the display to the maximum pid width.
  + Include both total and actual disk bandwidth in the summary.
  + Conversion to Python 3.
  + Installation to sbin instead of bin.</changelog>
  <changelog author="pth@suse.de" date="1372334400">- Update to 0.6:
  * Clean up the terminal on exit
  * Stop busy looping on exit in certain conditions
  * Restored UTF-8 support with python2
  * Releases are now gpg signed with key "4096R/4D23A27E 2013-05-26"</changelog>
  <changelog author="mpluskal@suse.com" date="1426507200">- Cleanup spec file with spec-cleaner
- Remove no longer needed iotop-rpmlintrc
- Build cleanup
- Add gpg signature
- Use fdupes to remove duplicates</changelog>
  <changelog author="mvetter@suse.com" date="1519214400">- bsc#1081915: Port to python3:
  * Add iotop-0.6-python3_build.patch: Upstream commit to fix
    python build by replacing itervalues() with values(). ID is
    99c8d7cedce81f17b851954d94bfa73787300599
  * Add iotop-0.6-python3-header.patch: Replace header to use
    python3
- Add iotop-0.6-noendcurses.patch: to prevent problems when closing
  terminal while running iotop (rh#1035503)
- Run spec-cleaner:
  * Remove py_requires
  * Use man macro
- Drop condition around noarch</changelog>
  <changelog author="ldevulder@suse.com" date="1527595200">- Add iotop-0.60-fix-proc-status-split.patch: Upstream commit to
  fix crash when /proc/*/status doesn't have tab character (this
  can be the case with vserver kernels)
- Add iotop-0.6-ignore-invalid-lines-in-proc-status.patch: Upstream
  commit to fix crash when /proc/*/status has invalid lines</changelog>
  <changelog author="angel.yankov@suse.com" date="1745582400">- Detect the kernel.task_delayacct sysctl value [bsc#1241104]
  * Automatically hide SWAPIN/IO columns when unavailable
  * Add iotop-kernel-task-delayacct.patch
  * Add iotop-hide-swapin-unavailable.patch</changelog>
</package>
<package pkgid="94fb584b6051361eee83fadb6fce6c260dcfe0a4af6e178907496e01114b593d" name="iotop" arch="src">
  <version epoch="0" ver="0.6" rel="150000.4.6.2"/>
  <changelog author="pth@suse.de" date="1202299200">- Initial package</changelog>
  <changelog author="pth@suse.de" date="1202817600">- Add missing requires for python-curses</changelog>
  <changelog author="pth@suse.de" date="1205496000">- Include a copy of GPL2 (bnc#370246).</changelog>
  <changelog author="aj@suse.de" date="1205928000">- Fix build (really include COPYING).
- Fix rpmlint warnings about "useless-explicit-requires python" and
  "redundant-prefix-tag"</changelog>
  <changelog author="pth@suse.de" date="1215691200">- Update to 0.2.1. Changes since 0.1:
  - 0.2.1:
  * UTF-8 strings are now correctly handled
  - 0.2
  * Misconfigured terminals (TERM=xterm-color) are tolerated
  * Added the --only option to only show processes or threads actually
    doing I/O
  * Typing 'o' dynamically toggles the --only option
  * Cosmetic fixes as well as minor bug fixes
  * Re-organized code to import vanilla pynl80211
  * Added workaround KERNBUG display in -P</changelog>
  <changelog author="pth@suse.de" date="1218456000">- Add rpmlintrc file.</changelog>
  <changelog author="pth@suse.de" date="1218542400">- Remove py_requires and the rpmlintrc filters for warnings
  resulting from the use of it.
- Remove superfluous BuildRequires for python.</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="pth@suse.de" date="1283428800">- Add py_requires
- Update to 0.4.1. Changes since 0.2.1:
  o Portability fix
  o Better reporting of missing requirements
  0.4
  ~~~
  o Compatibility with python2.4 using the ctypes module
  o Stopped using setuptools in favor of straight distutils
  0.3.2
  ~~~~~
  o Split long command lines in the middle instead of cutting them at the end
  o Added a heuristic to detect kernels without CONFIG_TASK_DELAY_ACCT
  o The I/O nice of a process/thread can be changed with the 'i' key
  0.3.1
  ~~~~~
  o Fixed the ioprio syscall detection when running on i386/x86_64
  o Fixed interaction between --accumulated and --only
  o Fixed column sorting with --accumulated
  0.3
  ~~~
  o -P is now fully implemented and is dynamically toggled with 'p'
  o Show the I/O priority
  o Added the --accumulated, --kilobytes, --time and --quiet options</changelog>
  <changelog author="pth@suse.de" date="1283774400">- Apply patch from author to adapt iotop to different alignments
  on 64 Bit systems (bnc#617281).</changelog>
  <changelog author="pth@suse.de" date="1283860800">- Rename alignment patch.</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1301313600">- update to 0.4.3:
  * the netlink message parsing code was fixed to accept alignment padding
  * UTF-8 output is now forced even if the locale is misconfigured
  * the semantic of the 'a' key was changed to show stats since iotop was
    started
- changes from 0.4.2:
  * workaround for an ncurses bug where UTF-8 strings are misprinted
  * ioprio support for the armel and hppa architectures was added
  * a possible incompatibility with Linux 2.6.37 on 64-bit systems was fixed
  * iotop does not crash anymore when the locale is incorrectly configured</changelog>
  <changelog author="saschpe@suse.de" date="1301486400">- Remove authors from %%description
- Change "python ./setup.py" calls to "python setup.py"</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1320062400">- update to 0.4.4:
  * cosmetic fixes, including a better error message when missing root
    credentials</changelog>
  <changelog author="zaitor@opensuse.org" date="1362312000">- Update to version 0.5:
  + Adapt the display to the maximum pid width.
  + Include both total and actual disk bandwidth in the summary.
  + Conversion to Python 3.
  + Installation to sbin instead of bin.</changelog>
  <changelog author="pth@suse.de" date="1372334400">- Update to 0.6:
  * Clean up the terminal on exit
  * Stop busy looping on exit in certain conditions
  * Restored UTF-8 support with python2
  * Releases are now gpg signed with key "4096R/4D23A27E 2013-05-26"</changelog>
  <changelog author="mpluskal@suse.com" date="1426507200">- Cleanup spec file with spec-cleaner
- Remove no longer needed iotop-rpmlintrc
- Build cleanup
- Add gpg signature
- Use fdupes to remove duplicates</changelog>
  <changelog author="mvetter@suse.com" date="1519214400">- bsc#1081915: Port to python3:
  * Add iotop-0.6-python3_build.patch: Upstream commit to fix
    python build by replacing itervalues() with values(). ID is
    99c8d7cedce81f17b851954d94bfa73787300599
  * Add iotop-0.6-python3-header.patch: Replace header to use
    python3
- Add iotop-0.6-noendcurses.patch: to prevent problems when closing
  terminal while running iotop (rh#1035503)
- Run spec-cleaner:
  * Remove py_requires
  * Use man macro
- Drop condition around noarch</changelog>
  <changelog author="ldevulder@suse.com" date="1527595200">- Add iotop-0.60-fix-proc-status-split.patch: Upstream commit to
  fix crash when /proc/*/status doesn't have tab character (this
  can be the case with vserver kernels)
- Add iotop-0.6-ignore-invalid-lines-in-proc-status.patch: Upstream
  commit to fix crash when /proc/*/status has invalid lines</changelog>
  <changelog author="angel.yankov@suse.com" date="1745582400">- Detect the kernel.task_delayacct sysctl value [bsc#1241104]
  * Automatically hide SWAPIN/IO columns when unavailable
  * Add iotop-kernel-task-delayacct.patch
  * Add iotop-hide-swapin-unavailable.patch</changelog>
</package>
<package pkgid="559aa482cb9496ec8b571e17d0696585d7a0a4ee7449a4c00a1d50f81ab0906e" name="ipmitool" arch="src">
  <version epoch="0" ver="1.8.19.13.gbe11d94" rel="150700.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1532692800">- Use noun phrase in summary.</changelog>
  <changelog author="trenn@suse.de" date="1537963200">- Update to latest git HEAD revision of 1.8.18 version
    commit 6f336d04f14b420822902dca7ef595cd49847d21
    Date:   Mon Sep 24 15:41:00 2018 +0200
- Change git repo and URL in spec from sourceforge to github
- Add download of iana pen list via _service
  from www.iana.org which is used to
  create a C include file at build time (lib/ipmi_pen_list.inc.c)
  Downloaded file added:
  A enterprise-numbers
- Add possiblity to create the include file from an already
  downloaded, local file
  A create_pen_list_from_local_file.patch</changelog>
  <changelog author="trenn@suse.de" date="1567425600">- Enable USB interface by explicit passing --enable-intf-usb (jira#SLE-7780)
- Enable free interface by adding freeipmi-devel package to
  build requires</changelog>
  <changelog author="trenn@suse.de" date="1581336000">- bsc#1163026
- CVE-2020-5208
- Use license macro for COPYING, instead of doc
- Add ChangeLog mainline log to docs for shorter
  obs changelogs. This will be the last more detailed
  changelog, due to more important buffer overflow patches.
  Otherwise this changelog will not include (mainline) changes
  anymore.
- Update to version 1.8.18+git20200204.7ccea28:
  * fru, sdr: Fix id_string buffer overflows
  * lanp: Fix buffer overflows in get_lan_param_select
  * channel: Fix buffer overflow
  * session: Fix buffer overflow in ipmi_get_session_info
  * fru: Fix buffer overflow in ipmi_spd_print_fru
  * fru: Fix buffer overflow vulnerabilities
  * chassis: bootmbox: Refix 62a04390
  * configure: Drop requirement for curses et. al libs
- Add a configure option to disable IANA PEN database internet download
  A    autotools_define_DOWNLOAD.diff
  D    create_pen_list_from_local_file.patch
- New pen database:
  M    enterprise-numbers
- Patches adjusted to latest mainline code:
  M    fix_file_permissions.patch
  M    ipmitool_adjust_suse_paths.patch
  M    several_more_compile_fixes.patch</changelog>
  <changelog author="idonmez@suse.com" date="1581422400">- Don't hardcode /usr but use rpm variables</changelog>
  <changelog author="kkaempf@suse.com" date="1600862400">- Update to version 1.8.18+git20200916.1245aaa387dc:
  * fru: Fix crashes on 6-bit ASCII strings
  * Refix 6e037d6bfbbb93b349c8ca331ebde03a837f76bf
  * oem: Add product ID for YADRO VEGMAN
  * configure.ac: add '--location' for curl to follow location
  * configure.ac: replace '-#' by '--progress-bar' with curl
  * log: refix 16f937a1: Add missing header changes
  * Add version info to debug output
  * doc, ci: Fix an error in package name for Windows
  * doc: Fix a small typo in INSTALL
  * RPM support: updated spec file changelog</changelog>
  <changelog author="kkaempf@suse.com" date="1600862401">- clean up patches
  rename fwum_enhance_output.patch
  to 0001-Enhance-fwum-output.patch
  rename fix_file_permissions.patch
  to 0002-Fix-file-permissions.patch
  rename several_more_compile_fixes.patch
  to 0003-Cleanup-and-compiler-issues-only-no-functional-chang.patch
  rename ipmitool_adjust_suse_paths.patch
  to 0004-Adjust-SUSE-paths.patch
  rename hpm_x_compatibility_msg_is_debug_only.patch
  to 0005-HPM-x-compatibility-message-is-DEBUG-only.patch
  rename autotools_define_DOWNLOAD.diff
  to 0006-Make-IANA-PEN-download-configurable-fix-uninitalized.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1611835200">- When really starting the daemon, in lib/helper.c::ipmi_start_daemon()
  stdin/stdout/stderr are redirected to /dev/null and this is checked
  but the check for stderr tests for STDOUT_FILENO. This is, most
  likely, a copy-paste error.
  [bsc#1175328, 0007-bsc#1175328-check-for-correct-fd.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1611835201">- Do not append the device number to the PIDFILE pathname
  as this will confuse systemd.
  [bsc#1181063, 0008-bsc#1181063-dont-parametrize-pidfile-name.patch]</changelog>
  <changelog author="trenn@suse.de" date="1612353600">- Fixes (bsc#1179133) lanplus: hanging on getting cipher suites for 10 seconds
  A lanplus-don-t-retry-pre-session-Get-cipher-suites.patch</changelog>
  <changelog author="trenn@suse.de" date="1619611200">- Use /run instead of /var/run (bsc#1185162)
  A Use-run-instead-of-var-run.patch
  Be aware that the patch has been submitted mainstream, therefore
  the git hash tag, but may not have been accepted.</changelog>
  <changelog author="trenn@suse.de" date="1621944000">- Correct /etc/ipmievd config file to point to the new pidfile in /run
  not /var/run</changelog>
  <changelog author="trenn@suse.de" date="1625745600">- Update to version 1.8.18+git20210622.11c7605:
  * Fix codefactor-io / CodeFactor warnings
  * Use /run instead of /var/run
  * oem: Update product IDs for YADRO
  * lan: Add processing of get/set specific CCs
  * lan: Refactor pointer style
  * doc: update lanplus doc to reflect default cipher suite change
  * ekanalyzer: Fix internal use area off-by-one bug
  * ekanalyzer frushow: Fix internal area size calc
  * sel: Fix "power supply inactive" flag offset
  * free: Fix implicit function declarations
  * Convert line endings to LF
- Update source file:
  M    enterprise-numbers
- Adopt to latest sources:
  M    0003-Cleanup-and-compiler-issues-only-no-functional-chang.patch
- Remove mainline patches:
  D    0007-bsc#1175328-check-for-correct-fd.patch
  D    0008-bsc#1181063-dont-parametrize-pidfile-name.patch
  D    Use-run-instead-of-var-run.patch
  D    lanplus-don-t-retry-pre-session-Get-cipher-suites.patch
- Config file in /etc must not be executable
  /etc/bmc-snmp-proxy
- Enhance _service file to always get latest sources and get the
  version correctly parsed</changelog>
  <changelog author="trenn@suse.de" date="1628683200">- Update to version 1.8.18.238.gb7adc1d:
  * ipmi_mc: Fix the IPM_DEV_FWREV1_MAJOR_MASK
- Use %{?systemd_ordering} instead of %{?systemd_requires}</changelog>
  <changelog author="moritz.kodytek@suse.com" date="1652184000">- Update to version 1.8.18.249.g4d25a93:
  * man: Update the text for -C option
  * chassis restart_cause: Add new causes
  * sel: Remove redundant "Reserve SEL"
  * sdr: Fix modifier unit
  * Refactor bridging level detection to dedicated function
  * Fix double bridge detection in get_max_(req|rsp)_data_size()</changelog>
  <changelog author="trenn@suse.de" date="1662552000">- Update to version 1.8.19.0.g19d7878:
  * Release Version 1.8.19
  * Cast type before the left shift
  * sel: Fix the deasserted thresholds inequality</changelog>
  <changelog author="trenn@suse.de" date="1690200000">- Fix: ipmitool duplicates the timestamp (bsc#1213390)
  A    Fix-time-format-for-sel-list-v.patch
- Remove: Make-IANA-PEN-download-configurable (is mainline)
  D 0006-Make-IANA-PEN-download-configurable-fix-uninitalized.patch
- Update to version 1.8.19.13.gbe11d94:
  * configure.ac: allow disabling registry downloads
  * lan: channel: Fix set alert on/off
  * make: use correct docdir variable provided by autotools
  * Do not require the IANA PEN registry file
  * configure.ac: fix readline static build
  * Update github actions for modern OSes
  * Update macos target name in github actions
  * delloem: Fix the unalign bug in arm64
  * lanplus: Realloc the msg if the payload_length gets updated
  * fru print: Add area checksum verification
  * fru: Add decoder for multirec system mgmt records
  * Fix enterprise-numbers URL
  * Update issue templates</changelog>
  <changelog author="trenn@suse.de" date="1698753600">- bsc#1216556 L3: ipmitool: Unsupported LAN Parameter
    lookup error SLE15 SP4+
  Fix regression introduced by 351dad24a26f56580ba6
  lan: Add processing of get/set specific CCs:
  https://github.com/ipmitool/ipmitool/pull/388
  https://github.com/ipmitool/ipmitool/pull/389
  Be aware: Even the pullrequest is open for a while, this patch is not
  integrated in latest mainstream master branch.
  A    lanp-Fix-error-response-from-Unsupported-Parameter-lookup.patch.txt
  M    enterprise-numbers</changelog>
  <changelog author="mjambor@suse.com" date="1720612800">- Added ipmitool-fix_init_from_incompat_ptr_type.patch fixing a type
  which led to assignment from incompatible pointer type which is an
  error in GCC 14 [boo#1225992]</changelog>
  <changelog author="trenn@suse.de" date="1773748800">- Fix bad pid file creation in ipmievd by removing the interface
  number from the file name (bsc#1259310)
  A fix_pid_file.patch</changelog>
</package>
<package pkgid="7a9ceb461e18ef87f6ac92d332df1c6992f6ea9007579234427ecd2efceb74cd" name="ipmitool" arch="x86_64">
  <version epoch="0" ver="1.8.19.13.gbe11d94" rel="150700.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1532692800">- Use noun phrase in summary.</changelog>
  <changelog author="trenn@suse.de" date="1537963200">- Update to latest git HEAD revision of 1.8.18 version
    commit 6f336d04f14b420822902dca7ef595cd49847d21
    Date:   Mon Sep 24 15:41:00 2018 +0200
- Change git repo and URL in spec from sourceforge to github
- Add download of iana pen list via _service
  from www.iana.org which is used to
  create a C include file at build time (lib/ipmi_pen_list.inc.c)
  Downloaded file added:
  A enterprise-numbers
- Add possiblity to create the include file from an already
  downloaded, local file
  A create_pen_list_from_local_file.patch</changelog>
  <changelog author="trenn@suse.de" date="1567425600">- Enable USB interface by explicit passing --enable-intf-usb (jira#SLE-7780)
- Enable free interface by adding freeipmi-devel package to
  build requires</changelog>
  <changelog author="trenn@suse.de" date="1581336000">- bsc#1163026
- CVE-2020-5208
- Use license macro for COPYING, instead of doc
- Add ChangeLog mainline log to docs for shorter
  obs changelogs. This will be the last more detailed
  changelog, due to more important buffer overflow patches.
  Otherwise this changelog will not include (mainline) changes
  anymore.
- Update to version 1.8.18+git20200204.7ccea28:
  * fru, sdr: Fix id_string buffer overflows
  * lanp: Fix buffer overflows in get_lan_param_select
  * channel: Fix buffer overflow
  * session: Fix buffer overflow in ipmi_get_session_info
  * fru: Fix buffer overflow in ipmi_spd_print_fru
  * fru: Fix buffer overflow vulnerabilities
  * chassis: bootmbox: Refix 62a04390
  * configure: Drop requirement for curses et. al libs
- Add a configure option to disable IANA PEN database internet download
  A    autotools_define_DOWNLOAD.diff
  D    create_pen_list_from_local_file.patch
- New pen database:
  M    enterprise-numbers
- Patches adjusted to latest mainline code:
  M    fix_file_permissions.patch
  M    ipmitool_adjust_suse_paths.patch
  M    several_more_compile_fixes.patch</changelog>
  <changelog author="idonmez@suse.com" date="1581422400">- Don't hardcode /usr but use rpm variables</changelog>
  <changelog author="kkaempf@suse.com" date="1600862400">- Update to version 1.8.18+git20200916.1245aaa387dc:
  * fru: Fix crashes on 6-bit ASCII strings
  * Refix 6e037d6bfbbb93b349c8ca331ebde03a837f76bf
  * oem: Add product ID for YADRO VEGMAN
  * configure.ac: add '--location' for curl to follow location
  * configure.ac: replace '-#' by '--progress-bar' with curl
  * log: refix 16f937a1: Add missing header changes
  * Add version info to debug output
  * doc, ci: Fix an error in package name for Windows
  * doc: Fix a small typo in INSTALL
  * RPM support: updated spec file changelog</changelog>
  <changelog author="kkaempf@suse.com" date="1600862401">- clean up patches
  rename fwum_enhance_output.patch
  to 0001-Enhance-fwum-output.patch
  rename fix_file_permissions.patch
  to 0002-Fix-file-permissions.patch
  rename several_more_compile_fixes.patch
  to 0003-Cleanup-and-compiler-issues-only-no-functional-chang.patch
  rename ipmitool_adjust_suse_paths.patch
  to 0004-Adjust-SUSE-paths.patch
  rename hpm_x_compatibility_msg_is_debug_only.patch
  to 0005-HPM-x-compatibility-message-is-DEBUG-only.patch
  rename autotools_define_DOWNLOAD.diff
  to 0006-Make-IANA-PEN-download-configurable-fix-uninitalized.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1611835200">- When really starting the daemon, in lib/helper.c::ipmi_start_daemon()
  stdin/stdout/stderr are redirected to /dev/null and this is checked
  but the check for stderr tests for STDOUT_FILENO. This is, most
  likely, a copy-paste error.
  [bsc#1175328, 0007-bsc#1175328-check-for-correct-fd.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1611835201">- Do not append the device number to the PIDFILE pathname
  as this will confuse systemd.
  [bsc#1181063, 0008-bsc#1181063-dont-parametrize-pidfile-name.patch]</changelog>
  <changelog author="trenn@suse.de" date="1612353600">- Fixes (bsc#1179133) lanplus: hanging on getting cipher suites for 10 seconds
  A lanplus-don-t-retry-pre-session-Get-cipher-suites.patch</changelog>
  <changelog author="trenn@suse.de" date="1619611200">- Use /run instead of /var/run (bsc#1185162)
  A Use-run-instead-of-var-run.patch
  Be aware that the patch has been submitted mainstream, therefore
  the git hash tag, but may not have been accepted.</changelog>
  <changelog author="trenn@suse.de" date="1621944000">- Correct /etc/ipmievd config file to point to the new pidfile in /run
  not /var/run</changelog>
  <changelog author="trenn@suse.de" date="1625745600">- Update to version 1.8.18+git20210622.11c7605:
  * Fix codefactor-io / CodeFactor warnings
  * Use /run instead of /var/run
  * oem: Update product IDs for YADRO
  * lan: Add processing of get/set specific CCs
  * lan: Refactor pointer style
  * doc: update lanplus doc to reflect default cipher suite change
  * ekanalyzer: Fix internal use area off-by-one bug
  * ekanalyzer frushow: Fix internal area size calc
  * sel: Fix "power supply inactive" flag offset
  * free: Fix implicit function declarations
  * Convert line endings to LF
- Update source file:
  M    enterprise-numbers
- Adopt to latest sources:
  M    0003-Cleanup-and-compiler-issues-only-no-functional-chang.patch
- Remove mainline patches:
  D    0007-bsc#1175328-check-for-correct-fd.patch
  D    0008-bsc#1181063-dont-parametrize-pidfile-name.patch
  D    Use-run-instead-of-var-run.patch
  D    lanplus-don-t-retry-pre-session-Get-cipher-suites.patch
- Config file in /etc must not be executable
  /etc/bmc-snmp-proxy
- Enhance _service file to always get latest sources and get the
  version correctly parsed</changelog>
  <changelog author="trenn@suse.de" date="1628683200">- Update to version 1.8.18.238.gb7adc1d:
  * ipmi_mc: Fix the IPM_DEV_FWREV1_MAJOR_MASK
- Use %{?systemd_ordering} instead of %{?systemd_requires}</changelog>
  <changelog author="moritz.kodytek@suse.com" date="1652184000">- Update to version 1.8.18.249.g4d25a93:
  * man: Update the text for -C option
  * chassis restart_cause: Add new causes
  * sel: Remove redundant "Reserve SEL"
  * sdr: Fix modifier unit
  * Refactor bridging level detection to dedicated function
  * Fix double bridge detection in get_max_(req|rsp)_data_size()</changelog>
  <changelog author="trenn@suse.de" date="1662552000">- Update to version 1.8.19.0.g19d7878:
  * Release Version 1.8.19
  * Cast type before the left shift
  * sel: Fix the deasserted thresholds inequality</changelog>
  <changelog author="trenn@suse.de" date="1690200000">- Fix: ipmitool duplicates the timestamp (bsc#1213390)
  A    Fix-time-format-for-sel-list-v.patch
- Remove: Make-IANA-PEN-download-configurable (is mainline)
  D 0006-Make-IANA-PEN-download-configurable-fix-uninitalized.patch
- Update to version 1.8.19.13.gbe11d94:
  * configure.ac: allow disabling registry downloads
  * lan: channel: Fix set alert on/off
  * make: use correct docdir variable provided by autotools
  * Do not require the IANA PEN registry file
  * configure.ac: fix readline static build
  * Update github actions for modern OSes
  * Update macos target name in github actions
  * delloem: Fix the unalign bug in arm64
  * lanplus: Realloc the msg if the payload_length gets updated
  * fru print: Add area checksum verification
  * fru: Add decoder for multirec system mgmt records
  * Fix enterprise-numbers URL
  * Update issue templates</changelog>
  <changelog author="trenn@suse.de" date="1698753600">- bsc#1216556 L3: ipmitool: Unsupported LAN Parameter
    lookup error SLE15 SP4+
  Fix regression introduced by 351dad24a26f56580ba6
  lan: Add processing of get/set specific CCs:
  https://github.com/ipmitool/ipmitool/pull/388
  https://github.com/ipmitool/ipmitool/pull/389
  Be aware: Even the pullrequest is open for a while, this patch is not
  integrated in latest mainstream master branch.
  A    lanp-Fix-error-response-from-Unsupported-Parameter-lookup.patch.txt
  M    enterprise-numbers</changelog>
  <changelog author="mjambor@suse.com" date="1720612800">- Added ipmitool-fix_init_from_incompat_ptr_type.patch fixing a type
  which led to assignment from incompatible pointer type which is an
  error in GCC 14 [boo#1225992]</changelog>
  <changelog author="trenn@suse.de" date="1773748800">- Fix bad pid file creation in ipmievd by removing the interface
  number from the file name (bsc#1259310)
  A fix_pid_file.patch</changelog>
</package>
<package pkgid="220149dfb5a1a317a7c1105aa43ecc7eee96d709172ee5edbc7aed5c38a2ecf0" name="iproute2" arch="src">
  <version epoch="0" ver="6.4" rel="150600.7.12.1"/>
  <changelog author="mkubecek@suse.cz" date="1547726400">- VF stats backport for SLE15-SP1 (fate#326021 bsc#1104003):
  ip-Add-violation-counters-to-VF-statisctics.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1569499200">- upgrade to upstream version 5.3 (jsc#SLE-7290)
  * replace upstream tarball and signature
  * import specfile updates from Factory package
  * drop mainline backports contained in 5.3:
  - bpf-remove-obsolete-samples.patch
  - utils-return-default-family-when-rtm_family-is-not-R.patch
  - Really-fix-get_addr-and-get_prefix-error-messages.patch
  - iproute-Add-support-for-extended-ack-to-rtnl_talk.patch
  - ss-enclose-IPv6-address-in-brackets.patch
  - lib-fix-extended-ack-with-and-without-libmnl.patch
  - lib-need-to-pass-LIBMNL-flag.patch
  - tc-ip-more-Makefile-updates-for-LIBMNL.patch
  - change-how-Config-is-used-in-Makefile-s.patch
  - lib-Dump-ext-ack-string-by-default.patch
  - bpf-unbreak-libelf-linkage-for-bpf-obj-loader.patch
  - libnetlink-Fix-extack-attribute-parsing.patch
  - ifstat-Fix-memleak-in-dump_kern_db-for-json-output.patch
  - ss-Fix-potential-memleak-in-unix_stats_print.patch
  - utils-Move-BIT-macro-to-common-header.patch
  - rdma-Add-basic-infrastructure-for-RDMA-tool.patch
  - rdma-Add-dev-object.patch
  - rdma-Add-link-object.patch
  - rdma-Add-json-and-pretty-outputs.patch
  - rdma-Implement-json-output-for-dev-object.patch
  - rdma-Add-json-output-to-link-object.patch
  - rdma-Add-initial-manual-for-the-tool.patch
  - iproute-Fix-for-missing-Oifs-display.patch
  - ipmaddr-Avoid-accessing-uninitialized-data.patch
  - rdma-fix-duplicate-initialization-in-port_names.patch
  - ss-Fix-for-added-diag-support-check.patch
  - link_gre6-Fix-for-changing-tclass-flowlabel.patch
  - iplink-check-for-message-truncation-in-iplink_get.patch
  - iplink-double-the-buffer-size-also-in-iplink_get.patch
  - tc-actions-store-and-dump-correct-length-of-user-coo.patch
  - json_writer-add-new-json-handlers-null-float-with-fo.patch
  - doc-remove-obsolete-ip-tunnels-documentation.patch
  - doc-remove-outdated-ss-documentation.patch
  - doc-remove-outdated-arpd-documentation.patch
  - doc-remove-outdated-nstat-rtstat-documentation.patch
  - doc-remove-outdated-tc-filters-documentation.patch
  - doc-remove-outdated-IPv6-flow-label-document.patch
  - doc-drop-old-ip-command-documentation.patch
  - ss-Distinguish-between-IPv4-and-IPv6-wildcard-socket.patch
  - ip-maddr-fix-filtering-by-device.patch
  - man-add-additional-explainations-for-ss.patch
  - lib-libnetlink-re-malloc-buff-if-size-is-not-enough.patch
  - lib-libnetlink-update-rtnl_talk-to-support-malloc-bu.patch
  - tc-move-action-cookie-print-out-of-the-stats-if.patch
  - tc-remove-action-cookie-len-from-printout.patch
  - link_gre6-Detect-invalid-encaplimit-values.patch
  - man-tc-csum.8-Fix-inconsistency-in-example-descripti.patch
  - tc-bash-completion-add-missing-classid-keyword.patch
  - tc-fix-command-tc-actions-del-hang-issue.patch
  - gre-ip6tnl-tunnel-Fix-noencap-support.patch
  - Restore-no-print-directory-option-for-silent-builds.patch
  - iplink-Validate-minimum-tx-rate-is-less-than-maximum.patch
  - ipaddress-Make-sure-VF-min-max-rate-API-is-supported.patch
  - rdma-Reduce-scope-of-_dev_map_lookup-call.patch
  - rdma-Protect-dev_map_lookup-from-wrong-input.patch
  - rdma-Move-per-device-handler-function-to-generic-cod.patch
  - rdma-Fix-misspelled-SYS_IMAGE_GUID.patch
  - rdma-Check-that-port-index-exists-before-operate-on-.patch
  - rdma-Rename-free-function-to-be-rd_cleanup.patch
  - rdma-Rename-rd_free_devmap-to-be-rd_free.patch
  - rdma-Move-link-execution-logic-to-common-code.patch
  - rdma-Add-option-to-provide-sign-for-the-port-number.patch
  - rdma-Make-visible-the-number-of-arguments.patch
  - rdma-Add-filtering-infrastructure.patch
  - rdma-Set-pointer-to-device-name-position.patch
  - rdma-Add-resource-tracking-summary.patch
  - rdma-Add-QP-resource-tracking-information.patch
  - rdma-Check-return-value-of-strdup-call.patch
  - README-update-location-of-git-repositories-remove-br.patch
  - Remove-leftovers-from-removed-Latex-documentation.patch
  - README-re-add-updated-information-link.patch
  - rdma-Avoid-memory-leak-for-skipper-resource.patch
  - ip-link-Fix-use-after-free-in-nl_get_ll_addr_len.patch
  - ip-address-Fix-negative-prints-of-large-TX-rate-limi.patch
  - devlink-fix-port-new-monitoring-message-typo.patch
  - rdma-Add-CM_ID-resource-tracking-information.patch
  - rdma-Add-CQ-resource-tracking-information.patch
  - rdma-Add-MR-resource-tracking-information.patch
  - rdma-Add-PD-resource-tracking-information.patch
  - rdma-Ignore-unknown-netlink-attributes.patch
  - bridge-fix-typo-in-hairpin-error-message.patch
  - iproute-Abort-if-nexthop-cannot-be-parsed.patch
  - iplink_vrf-Save-device-index-from-response-for-retur.patch
  - rdma-Print-net-device-name-and-index-for-RDMA-device.patch
  - rdma-print-driver-resource-attributes.patch
  - rdma-sync-some-IP-headers-with-glibc.patch
  - devlink-CTRL_ATTR_FAMILY_ID-is-a-u16.patch
  - ip-Add-violation-counters-to-VF-statisctics.patch
  - ip-route-Fix-segfault-with-many-nexthops.patch
  - rdma-Fix-representation-of-PortInfo-CapabilityMask.patch
  - macsec-fix-off-by-one-when-parsing-attributes.patch
  - rdma-Fix-for-ineffective-check-in-add_filter.patch
  - ip-route-Fix-for-memleak-in-error-path.patch
  - rdma-Don-t-pass-garbage-to-rd_check_is_filtered.patch
  - ip-route-Fix-parse_encap_seg6-srh-parsing.patch
  - rdma-Refresh-help-section-of-resource-information.patch
  - tc-f_u32-allow-skip_hw-and-skip_sw-flags-to-be-last.patch
  - ip-route-Fix-nexthop-encap-parsing.patch
  - rdma-Fix-broken-32-bit-compilation.patch
  - rdma-Fix-incorrectly-handled-NLA-validation.patch
  - rdma-Introduce-command-execution-helper-with-require.patch
  - rdma-Add-an-option-to-rename-IB-device-interface.patch
  - rdma-Add-print-of-link-CapabilityMask2-flags.patch
  * drop non-upstream patches obsoleted by rebase to 5.3:
  - sync-UAPI-header-copies-with-SLE15-SP1.patch
  - man-fix-documentation-references-in-manual-pages.patch
  * refresh remaining patches:
  - adjust-installation-directories-for-openSUSE-SLE.patch
  - use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  - add-explicit-typecast-to-avoid-gcc-warning.patch
  - xfrm-support-displaying-transformations-used-for-Mob.patch
  - split-link-and-compile-steps-for-binaries.patch
  - examples-fix-bashisms-in-example-script.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1578484800">- follow-up fixes backported from upstream (bsc#1160242):
  bpf-replace-snprintf-with-asprintf-when-dealing-with.patch
  bridge-Deduplicate-vlan-show-functions.patch
  bridge-Fix-BRIDGE_VLAN_TUNNEL-attribute-sizes.patch
  bridge-Fix-src_vni-argument-in-man-page.patch
  bridge-Fix-tunnelshow-json-output.patch
  bridge-Fix-typo-in-error-messages.patch
  bridge-Fix-vni-printing.patch
  devlink-Add-a-new-time-stamp-format-for-health-repor.patch
  devlink-Add-helper-for-left-justification-print.patch
  devlink-Fix-fmsg-nesting-in-non-JSON-output.patch
  devlink-Fix-inconsistency-between-command-input-and-.patch
  devlink-Left-justification-on-FMSG-output.patch
  devlink-Print-health-reporter-s-dump-time-stamp-in-a.patch
  devlink-allow-full-range-of-resource-sizes.patch
  devlink-require-resource-parameters.patch
  introduce-print_masked_u16-and-print_masked_u32.patch
  ip-fix-ip-route-show-json-output-for-multipath-nexth.patch
  ip-xfrm-if_id-ve-value-is-error.patch
  json_print-Remove-declaration-without-implementation.patch
  sync-UAPI-header-copies-with-SLE15-SP2.patch
  tc-fix-segmentation-fault-on-gact-action.patch
  tc-fix-warning-in-tc-q_pie.c.patch
  tc-flower-fix-output-for-ip-tos-and-ttl.patch
  tc-fq_codel-fix-missing-statistic-in-JSON-output.patch
  tc-pie-add-dq_rate_estimator-option.patch
  tc_util-add-an-option-to-print-masked-numbers-with-w.patch
  tc_util-add-functions-for-big-endian-masked-numbers.patch
  tc_util-introduce-a-function-to-print-JSON-non-JSON-.patch
  testsuite-Fix-line-count-test.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1578484801">- support alternative names as we already support them in SLE15-SP2
  kernel (jsc#SLE-7290):
  lib-ll_map-cache-alternative-names.patch
  ip-add-support-for-alternative-name-addition-deletio.patch
  ip-allow-to-use-alternative-names-as-handle.patch
  ip-fix-oneline-output.patch</changelog>
  <changelog author="kukuk@suse.com" date="1586347200">- Move arpd into own subpackage to avoid libdb dependency
  [jsc#SLE-12189]</changelog>
  <changelog author="mkubecek@suse.cz" date="1587729600">- follow-up fixes backported from upstream (bsc#1160242):
  ip-fix-link-type-and-vlan-oneline-output.patch
  ip-xfrm-Fix-help-messages.patch
  ip-link-xstats-fix-TX-IGMP-reports-string.patch
  erspan-set-erspan_ver-to-1-by-default.patch
  xfrm-not-try-to-delete-ipcomp-states-when-using-dele.patch
  nexthop-fix-error-reporting-in-filter-dump.patch
- refresh:
  xfrm-support-displaying-transformations-used-for-Mob.patch
- fix duplicated patch metadata:
  introduce-print_masked_u16-and-print_masked_u32.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633089600">- follow-up fixes backported from upstream (bsc#1160242):
  ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633348800">- follow-up fixes backported from upstream (bsc#1160242):
  ss-fix-end-of-line-printing-in-misc-ss.c.patch
  xfrm-also-check-for-ipv6-state-in-xfrm_state_keep.patch
  bridge-Fix-typo.patch
  bridge-Fix-output-with-empty-vlan-lists.patch
  tc-action-fix-time-values-output-in-JSON-format.patch
  Revert-bpf-replace-snprintf-with-asprintf-when-deali.patch
  bpf-Fixes-a-snprintf-truncation-warning.patch
  tipc-fixed-a-compile-warning-in-tipc-link.c.patch
  ip-xfrm-update-man-page-on-setting-printing-XFRMA_IF.patch
  bridge-fdb-show-fix-fdb-entry-state-output-for-json-.patch
  ip-link-Fix-indenting-in-help-text.patch
  ip-iplink_ipoib.c-Remove-extra-spaces.patch
  devlink-fix-uninitialized-warning.patch
  bridge-fix-string-length-warning.patch
  f_u32-fix-compiler-gcc-10-compiler-warning.patch
  rdma-Fix-statistics-bind-unbing-argument-handling.patch
  lib-namespace-fix-ip-all-netns-return-code.patch
  lib-bpf-Fix-and-simplify-bpf_mnt_check_target.patch
  lib-fs-avoid-double-call-to-mkdir-on-make_path.patch
  q_cake-Fix-incorrect-printing-of-signed-values-in-cl.patch
  ip-xfrm-limit-the-length-of-the-security-context-nam.patch
  erspan-fix-JSON-output.patch
  devlink-always-check-strslashrsplit-return-value.patch
  nexthop-fix-memory-leak-in-add_nh_group_attr.patch
  rdma-stat-initialize-ret-in-stat_qp_show_parse_cb.patch
  rdma-stat-fix-return-code.patch
  lib-bpf_legacy-treat-0-as-a-valid-file-descriptor.patch
  lib-bpf_legacy-fix-missing-socket-close-when-connect.patch
  ip-drop-2-char-command-assumption.patch
  man-fix-syntax-for-ip-link-property.patch
  lib-bpf_legacy-avoid-to-pass-invalid-argument-to-clo.patch
  ip-route-ignore-ENOENT-during-save-if-RT_TABLE_MAIN-.patch
  libnetlink-check-error-handler-is-present-before-a-c.patch
  ipmonitor-Fix-recvmsg-with-ancillary-data.patch
  tc-u32-Fix-key-folding-in-sample-option.patch
  man-bridge-fix-the-typo-to-change-c-lor-into-c-olor-.patch
  ss-fix-fallback-to-procfs-for-raw-sockets.patch
  iptuntap-fix-multi-queue-flag-display.patch
  tc-f_flower-fix-port-range-parsing.patch
  lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
- refresh:
  ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633435200">- upgrade to upstream version 5.14 (jsc#SLE-17360 jsc#SLE-18994
  jsc#SLE-19271)
  * replace upstream tarball and signature
  * update specfile with changes from Factory package
  * drop mainline backports contained in 5.14:
  - Revert-bpf-replace-snprintf-with-asprintf-when-deali.patch
  - bpf-Fixes-a-snprintf-truncation-warning.patch
  - bpf-replace-snprintf-with-asprintf-when-dealing-with.patch
  - bridge-Deduplicate-vlan-show-functions.patch
  - bridge-Fix-BRIDGE_VLAN_TUNNEL-attribute-sizes.patch
  - bridge-Fix-output-with-empty-vlan-lists.patch
  - bridge-Fix-src_vni-argument-in-man-page.patch
  - bridge-Fix-tunnelshow-json-output.patch
  - bridge-Fix-typo-in-error-messages.patch
  - bridge-Fix-typo.patch
  - bridge-Fix-vni-printing.patch
  - bridge-fdb-show-fix-fdb-entry-state-output-for-json-.patch
  - bridge-fix-string-length-warning.patch
  - devlink-Add-a-new-time-stamp-format-for-health-repor.patch
  - devlink-Add-helper-for-left-justification-print.patch
  - devlink-Fix-fmsg-nesting-in-non-JSON-output.patch
  - devlink-Fix-inconsistency-between-command-input-and-.patch
  - devlink-Left-justification-on-FMSG-output.patch
  - devlink-Print-health-reporter-s-dump-time-stamp-in-a.patch
  - devlink-allow-full-range-of-resource-sizes.patch
  - devlink-always-check-strslashrsplit-return-value.patch
  - devlink-fix-uninitialized-warning.patch
  - devlink-require-resource-parameters.patch
  - erspan-fix-JSON-output.patch
  - erspan-set-erspan_ver-to-1-by-default.patch
  - f_u32-fix-compiler-gcc-10-compiler-warning.patch
  - introduce-print_masked_u16-and-print_masked_u32.patch
  - ip-add-support-for-alternative-name-addition-deletio.patch
  - ip-allow-to-use-alternative-names-as-handle.patch
  - ip-drop-2-char-command-assumption.patch
  - ip-fix-ip-route-show-json-output-for-multipath-nexth.patch
  - ip-fix-link-type-and-vlan-oneline-output.patch
  - ip-fix-oneline-output.patch
  - ip-iplink_ipoib.c-Remove-extra-spaces.patch
  - ip-link-Fix-indenting-in-help-text.patch
  - ip-link-xstats-fix-TX-IGMP-reports-string.patch
  - ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  - ip-route-ignore-ENOENT-during-save-if-RT_TABLE_MAIN-.patch
  - ip-xfrm-Fix-help-messages.patch
  - ip-xfrm-if_id-ve-value-is-error.patch
  - ip-xfrm-limit-the-length-of-the-security-context-nam.patch
  - ip-xfrm-update-man-page-on-setting-printing-XFRMA_IF.patch
  - ipmonitor-Fix-recvmsg-with-ancillary-data.patch
  - json_print-Remove-declaration-without-implementation.patch
  - lib-bpf-Fix-and-simplify-bpf_mnt_check_target.patch
  - lib-bpf_legacy-avoid-to-pass-invalid-argument-to-clo.patch
  - lib-bpf_legacy-fix-missing-socket-close-when-connect.patch
  - lib-bpf_legacy-treat-0-as-a-valid-file-descriptor.patch
  - lib-fs-avoid-double-call-to-mkdir-on-make_path.patch
  - lib-ll_map-cache-alternative-names.patch
  - lib-namespace-fix-ip-all-netns-return-code.patch
  - libnetlink-check-error-handler-is-present-before-a-c.patch
  - man-bridge-fix-the-typo-to-change-c-lor-into-c-olor-.patch
  - man-fix-syntax-for-ip-link-property.patch
  - nexthop-fix-error-reporting-in-filter-dump.patch
  - nexthop-fix-memory-leak-in-add_nh_group_attr.patch
  - q_cake-Fix-incorrect-printing-of-signed-values-in-cl.patch
  - rdma-Fix-statistics-bind-unbing-argument-handling.patch
  - rdma-stat-fix-return-code.patch
  - rdma-stat-initialize-ret-in-stat_qp_show_parse_cb.patch
  - ss-fix-end-of-line-printing-in-misc-ss.c.patch
  - ss-fix-fallback-to-procfs-for-raw-sockets.patch
  - tc-action-fix-time-values-output-in-JSON-format.patch
  - tc-fix-segmentation-fault-on-gact-action.patch
  - tc-fix-warning-in-tc-q_pie.c.patch
  - tc-flower-fix-output-for-ip-tos-and-ttl.patch
  - tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch
  - tc-fq_codel-fix-missing-statistic-in-JSON-output.patch
  - tc-pie-add-dq_rate_estimator-option.patch
  - tc-u32-Fix-key-folding-in-sample-option.patch
  - tc_util-add-an-option-to-print-masked-numbers-with-w.patch
  - tc_util-add-functions-for-big-endian-masked-numbers.patch
  - tc_util-introduce-a-function-to-print-JSON-non-JSON-.patch
  - testsuite-Fix-line-count-test.patch
  - tipc-fixed-a-compile-warning-in-tipc-link.c.patch
  - xfrm-also-check-for-ipv6-state-in-xfrm_state_keep.patch
  - xfrm-not-try-to-delete-ipcomp-states-when-using-dele.patch
  * drop non-upstream patches obsoleted by rebase to 5.14:
  - sync-UAPI-header-copies-with-SLE15-SP2.patch
  - examples-fix-bashisms-in-example-script.patch
  * refresh remaining patches:
  - lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
  - split-link-and-compile-steps-for-binaries.patch
  - tc-f_flower-fix-port-range-parsing.patch
  - xfrm-support-displaying-transformations-used-for-Mob.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633435201">- follow-up fixes backported from upstream (bsc#1191316):
  tree-wide-fix-some-typos-found-by-Lintian.patch
  configure-restore-backward-compatibility.patch
  man-ip-link-remove-double-of.patch
  mptcp-unbreak-JSON-endpoint-list.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1705492800">- upgrade to upstream version 6.4 (jsc#PED-6820 jsc#PED-6844)
  * for detailed list of changes between 5.14 and 6.4, see Factory
    package changelog
  * replace upstream tarball and signature
  * update specfile with changes from Factory package
  * drop mainline backports contained in 6.4:
  - tree-wide-fix-some-typos-found-by-Lintian.patch
  - configure-restore-backward-compatibility.patch
  - man-ip-link-remove-double-of.patch
  - iptuntap-fix-multi-queue-flag-display.patch
  - tc-f_flower-fix-port-range-parsing.patch
  - lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
  - mptcp-unbreak-JSON-endpoint-list.patch
  * drop non-upstream patch obsoleted by rebase to 6.4:
  - xfrm-support-displaying-transformations-used-for-Mob.patch
  * refresh remaining patches:
  - adjust-installation-directories-for-openSUSE-SLE.patch
  - use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  - add-explicit-typecast-to-avoid-gcc-warning.patch
  - split-link-and-compile-steps-for-binaries.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1713873600">- iproute2.spec: ensure execute permissions of supplied scripts
  (fixes IBS build failure)</changelog>
  <changelog author="mkubecek@suse.cz" date="1713873601">- support display of bound but unconnected sockets (bsc#1204562)
  * ss-Add-support-for-dumping-TCP-bound-inactive-socket.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1742385600">- avoid spurious cgroup warning (bsc#1234383):
  - ss-Tone-down-cgroup-path-resolution.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1746792000">- add post-6.4 follow-up fixes (bsc#1243005):
  * bpf-fix-warning-from-basename.patch
  * bridge-fdb-add-an-error-print-for-unknown-command.patch
  * bridge-vni-Accept-del-command.patch
  * bridge-vni-Fix-duplicate-group-and-remote-error-mess.patch
  * bridge-vni-Fix-vni-filter-help-strings.patch
  * bridge-vni-Remove-dead-code-in-group-argument-parsin.patch
  * bridge-vni-Report-duplicate-vni-argument-using-dupar.patch
  * f_flower-Treat-port-0-as-valid.patch
  * genl-ctrl.c-spelling-fix-in-error-message.patch
  * ip-Add-missing-echo-option-to-usage.patch
  * ip-Add-missing-stats-command-to-usage.patch
  * ip-ipmroute-use-preferred_family-to-get-prefix.patch
  * ip-remove-non-existent-amt-subcommand-from-usage.patch
  * iplink-fix-fd-leak-when-playing-with-netns.patch
  * iplink_bridge-fix-incorrect-root-id-dump.patch
  * iplink_xstats-spelling-fix-in-error-message.patch
  * iproute2-fix-type-incompatibility-in-ifstat.c.patch
  * iproute2-prevent-memory-leak.patch
  * libnetlink-validate-nlmsg-header-length-first.patch
  * man-devlink-resource-add-missing-words-in-the-exampl.patch
  * mnl_utils-sanitize-incoming-netlink-payload-size-in-.patch
  * rdma-Fix-help-information-of-rdma-resource.patch
  * rdma-Fix-the-error-of-accessing-string-variable-outs.patch
  * rdma-use-print_XXX-instead-of-COLOR_NONE.patch
  * ss-Fix-socket-type-check-in-packet_show_line.patch
  * ss-fix-directory-leak-when-T-option-is-used.patch
  * ss-mptcp-display-info-counters-as-unsigned.patch
  * ss-prevent-Process-column-from-being-printed-unless-.patch
  * tc-taprio-don-t-print-netlink-attributes-which-weren.patch
  * tc-taprio-fix-JSON-output-when-TCA_TAPRIO_ATTR_ADMIN.patch
  * tc-taprio-fix-parsing-of-fp-option-when-it-doesn-t-a.patch
  * vdpa-consume-device_features-parameter.patch
- add to blacklist:
  * af0ea2cd0b9e (duplicate of 92eac7e4bf14)
- refresh:
  * ss-Add-support-for-dumping-TCP-bound-inactive-socket.patch
  * add-explicit-typecast-to-avoid-gcc-warning.patch
  * use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1746878400">- add post-6.4 follow-up fix (bsc#1243005)
  * ss-show-extra-info-when-processes-is-not-used.patch</changelog>
  <changelog author="sjaeckel@suse.de" date="1756296000">- devlink: support ipsec_crypto and ipsec_packet cap (bsc#1248660)
  * add Update-kernel-headers.patch
  * add devlink-Support-setting-port-function-ipsec_crypto-c.patch
  * add devlink-Support-setting-port-function-ipsec_packet-c.patch
  * refresh ss-Tone-down-cgroup-path-resolution.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1757592000">- sync UAPI header copies with SLE15-SP6 kernel
  * sync-UAPI-header-copies-with-SLE15-SP6.patch
- drop Update-kernel-headers.patch
  (no longer needed with full UAPI sync)</changelog>
  <changelog author="mkubecek@suse.cz" date="1757592001">- add post-6.4 follow-up fixes (bsc#1243005)
  * patches/bond-fix-stack-smash-in-xstats.patch
  * patches/tc-gred-fix-debug-print.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1775649600">- add CVE fix (CVE-2024-58251 bsc#1254324)
  * ss-escape-characters-in-command-name.patch</changelog>
</package>
<package pkgid="609636108d6803779e318ccd626b5a20594a54b3ead890d47e6a546d9b571bbd" name="iproute2" arch="x86_64">
  <version epoch="0" ver="6.4" rel="150600.7.12.1"/>
  <changelog author="mkubecek@suse.cz" date="1547726400">- VF stats backport for SLE15-SP1 (fate#326021 bsc#1104003):
  ip-Add-violation-counters-to-VF-statisctics.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1569499200">- upgrade to upstream version 5.3 (jsc#SLE-7290)
  * replace upstream tarball and signature
  * import specfile updates from Factory package
  * drop mainline backports contained in 5.3:
  - bpf-remove-obsolete-samples.patch
  - utils-return-default-family-when-rtm_family-is-not-R.patch
  - Really-fix-get_addr-and-get_prefix-error-messages.patch
  - iproute-Add-support-for-extended-ack-to-rtnl_talk.patch
  - ss-enclose-IPv6-address-in-brackets.patch
  - lib-fix-extended-ack-with-and-without-libmnl.patch
  - lib-need-to-pass-LIBMNL-flag.patch
  - tc-ip-more-Makefile-updates-for-LIBMNL.patch
  - change-how-Config-is-used-in-Makefile-s.patch
  - lib-Dump-ext-ack-string-by-default.patch
  - bpf-unbreak-libelf-linkage-for-bpf-obj-loader.patch
  - libnetlink-Fix-extack-attribute-parsing.patch
  - ifstat-Fix-memleak-in-dump_kern_db-for-json-output.patch
  - ss-Fix-potential-memleak-in-unix_stats_print.patch
  - utils-Move-BIT-macro-to-common-header.patch
  - rdma-Add-basic-infrastructure-for-RDMA-tool.patch
  - rdma-Add-dev-object.patch
  - rdma-Add-link-object.patch
  - rdma-Add-json-and-pretty-outputs.patch
  - rdma-Implement-json-output-for-dev-object.patch
  - rdma-Add-json-output-to-link-object.patch
  - rdma-Add-initial-manual-for-the-tool.patch
  - iproute-Fix-for-missing-Oifs-display.patch
  - ipmaddr-Avoid-accessing-uninitialized-data.patch
  - rdma-fix-duplicate-initialization-in-port_names.patch
  - ss-Fix-for-added-diag-support-check.patch
  - link_gre6-Fix-for-changing-tclass-flowlabel.patch
  - iplink-check-for-message-truncation-in-iplink_get.patch
  - iplink-double-the-buffer-size-also-in-iplink_get.patch
  - tc-actions-store-and-dump-correct-length-of-user-coo.patch
  - json_writer-add-new-json-handlers-null-float-with-fo.patch
  - doc-remove-obsolete-ip-tunnels-documentation.patch
  - doc-remove-outdated-ss-documentation.patch
  - doc-remove-outdated-arpd-documentation.patch
  - doc-remove-outdated-nstat-rtstat-documentation.patch
  - doc-remove-outdated-tc-filters-documentation.patch
  - doc-remove-outdated-IPv6-flow-label-document.patch
  - doc-drop-old-ip-command-documentation.patch
  - ss-Distinguish-between-IPv4-and-IPv6-wildcard-socket.patch
  - ip-maddr-fix-filtering-by-device.patch
  - man-add-additional-explainations-for-ss.patch
  - lib-libnetlink-re-malloc-buff-if-size-is-not-enough.patch
  - lib-libnetlink-update-rtnl_talk-to-support-malloc-bu.patch
  - tc-move-action-cookie-print-out-of-the-stats-if.patch
  - tc-remove-action-cookie-len-from-printout.patch
  - link_gre6-Detect-invalid-encaplimit-values.patch
  - man-tc-csum.8-Fix-inconsistency-in-example-descripti.patch
  - tc-bash-completion-add-missing-classid-keyword.patch
  - tc-fix-command-tc-actions-del-hang-issue.patch
  - gre-ip6tnl-tunnel-Fix-noencap-support.patch
  - Restore-no-print-directory-option-for-silent-builds.patch
  - iplink-Validate-minimum-tx-rate-is-less-than-maximum.patch
  - ipaddress-Make-sure-VF-min-max-rate-API-is-supported.patch
  - rdma-Reduce-scope-of-_dev_map_lookup-call.patch
  - rdma-Protect-dev_map_lookup-from-wrong-input.patch
  - rdma-Move-per-device-handler-function-to-generic-cod.patch
  - rdma-Fix-misspelled-SYS_IMAGE_GUID.patch
  - rdma-Check-that-port-index-exists-before-operate-on-.patch
  - rdma-Rename-free-function-to-be-rd_cleanup.patch
  - rdma-Rename-rd_free_devmap-to-be-rd_free.patch
  - rdma-Move-link-execution-logic-to-common-code.patch
  - rdma-Add-option-to-provide-sign-for-the-port-number.patch
  - rdma-Make-visible-the-number-of-arguments.patch
  - rdma-Add-filtering-infrastructure.patch
  - rdma-Set-pointer-to-device-name-position.patch
  - rdma-Add-resource-tracking-summary.patch
  - rdma-Add-QP-resource-tracking-information.patch
  - rdma-Check-return-value-of-strdup-call.patch
  - README-update-location-of-git-repositories-remove-br.patch
  - Remove-leftovers-from-removed-Latex-documentation.patch
  - README-re-add-updated-information-link.patch
  - rdma-Avoid-memory-leak-for-skipper-resource.patch
  - ip-link-Fix-use-after-free-in-nl_get_ll_addr_len.patch
  - ip-address-Fix-negative-prints-of-large-TX-rate-limi.patch
  - devlink-fix-port-new-monitoring-message-typo.patch
  - rdma-Add-CM_ID-resource-tracking-information.patch
  - rdma-Add-CQ-resource-tracking-information.patch
  - rdma-Add-MR-resource-tracking-information.patch
  - rdma-Add-PD-resource-tracking-information.patch
  - rdma-Ignore-unknown-netlink-attributes.patch
  - bridge-fix-typo-in-hairpin-error-message.patch
  - iproute-Abort-if-nexthop-cannot-be-parsed.patch
  - iplink_vrf-Save-device-index-from-response-for-retur.patch
  - rdma-Print-net-device-name-and-index-for-RDMA-device.patch
  - rdma-print-driver-resource-attributes.patch
  - rdma-sync-some-IP-headers-with-glibc.patch
  - devlink-CTRL_ATTR_FAMILY_ID-is-a-u16.patch
  - ip-Add-violation-counters-to-VF-statisctics.patch
  - ip-route-Fix-segfault-with-many-nexthops.patch
  - rdma-Fix-representation-of-PortInfo-CapabilityMask.patch
  - macsec-fix-off-by-one-when-parsing-attributes.patch
  - rdma-Fix-for-ineffective-check-in-add_filter.patch
  - ip-route-Fix-for-memleak-in-error-path.patch
  - rdma-Don-t-pass-garbage-to-rd_check_is_filtered.patch
  - ip-route-Fix-parse_encap_seg6-srh-parsing.patch
  - rdma-Refresh-help-section-of-resource-information.patch
  - tc-f_u32-allow-skip_hw-and-skip_sw-flags-to-be-last.patch
  - ip-route-Fix-nexthop-encap-parsing.patch
  - rdma-Fix-broken-32-bit-compilation.patch
  - rdma-Fix-incorrectly-handled-NLA-validation.patch
  - rdma-Introduce-command-execution-helper-with-require.patch
  - rdma-Add-an-option-to-rename-IB-device-interface.patch
  - rdma-Add-print-of-link-CapabilityMask2-flags.patch
  * drop non-upstream patches obsoleted by rebase to 5.3:
  - sync-UAPI-header-copies-with-SLE15-SP1.patch
  - man-fix-documentation-references-in-manual-pages.patch
  * refresh remaining patches:
  - adjust-installation-directories-for-openSUSE-SLE.patch
  - use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  - add-explicit-typecast-to-avoid-gcc-warning.patch
  - xfrm-support-displaying-transformations-used-for-Mob.patch
  - split-link-and-compile-steps-for-binaries.patch
  - examples-fix-bashisms-in-example-script.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1578484800">- follow-up fixes backported from upstream (bsc#1160242):
  bpf-replace-snprintf-with-asprintf-when-dealing-with.patch
  bridge-Deduplicate-vlan-show-functions.patch
  bridge-Fix-BRIDGE_VLAN_TUNNEL-attribute-sizes.patch
  bridge-Fix-src_vni-argument-in-man-page.patch
  bridge-Fix-tunnelshow-json-output.patch
  bridge-Fix-typo-in-error-messages.patch
  bridge-Fix-vni-printing.patch
  devlink-Add-a-new-time-stamp-format-for-health-repor.patch
  devlink-Add-helper-for-left-justification-print.patch
  devlink-Fix-fmsg-nesting-in-non-JSON-output.patch
  devlink-Fix-inconsistency-between-command-input-and-.patch
  devlink-Left-justification-on-FMSG-output.patch
  devlink-Print-health-reporter-s-dump-time-stamp-in-a.patch
  devlink-allow-full-range-of-resource-sizes.patch
  devlink-require-resource-parameters.patch
  introduce-print_masked_u16-and-print_masked_u32.patch
  ip-fix-ip-route-show-json-output-for-multipath-nexth.patch
  ip-xfrm-if_id-ve-value-is-error.patch
  json_print-Remove-declaration-without-implementation.patch
  sync-UAPI-header-copies-with-SLE15-SP2.patch
  tc-fix-segmentation-fault-on-gact-action.patch
  tc-fix-warning-in-tc-q_pie.c.patch
  tc-flower-fix-output-for-ip-tos-and-ttl.patch
  tc-fq_codel-fix-missing-statistic-in-JSON-output.patch
  tc-pie-add-dq_rate_estimator-option.patch
  tc_util-add-an-option-to-print-masked-numbers-with-w.patch
  tc_util-add-functions-for-big-endian-masked-numbers.patch
  tc_util-introduce-a-function-to-print-JSON-non-JSON-.patch
  testsuite-Fix-line-count-test.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1578484801">- support alternative names as we already support them in SLE15-SP2
  kernel (jsc#SLE-7290):
  lib-ll_map-cache-alternative-names.patch
  ip-add-support-for-alternative-name-addition-deletio.patch
  ip-allow-to-use-alternative-names-as-handle.patch
  ip-fix-oneline-output.patch</changelog>
  <changelog author="kukuk@suse.com" date="1586347200">- Move arpd into own subpackage to avoid libdb dependency
  [jsc#SLE-12189]</changelog>
  <changelog author="mkubecek@suse.cz" date="1587729600">- follow-up fixes backported from upstream (bsc#1160242):
  ip-fix-link-type-and-vlan-oneline-output.patch
  ip-xfrm-Fix-help-messages.patch
  ip-link-xstats-fix-TX-IGMP-reports-string.patch
  erspan-set-erspan_ver-to-1-by-default.patch
  xfrm-not-try-to-delete-ipcomp-states-when-using-dele.patch
  nexthop-fix-error-reporting-in-filter-dump.patch
- refresh:
  xfrm-support-displaying-transformations-used-for-Mob.patch
- fix duplicated patch metadata:
  introduce-print_masked_u16-and-print_masked_u32.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633089600">- follow-up fixes backported from upstream (bsc#1160242):
  ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633348800">- follow-up fixes backported from upstream (bsc#1160242):
  ss-fix-end-of-line-printing-in-misc-ss.c.patch
  xfrm-also-check-for-ipv6-state-in-xfrm_state_keep.patch
  bridge-Fix-typo.patch
  bridge-Fix-output-with-empty-vlan-lists.patch
  tc-action-fix-time-values-output-in-JSON-format.patch
  Revert-bpf-replace-snprintf-with-asprintf-when-deali.patch
  bpf-Fixes-a-snprintf-truncation-warning.patch
  tipc-fixed-a-compile-warning-in-tipc-link.c.patch
  ip-xfrm-update-man-page-on-setting-printing-XFRMA_IF.patch
  bridge-fdb-show-fix-fdb-entry-state-output-for-json-.patch
  ip-link-Fix-indenting-in-help-text.patch
  ip-iplink_ipoib.c-Remove-extra-spaces.patch
  devlink-fix-uninitialized-warning.patch
  bridge-fix-string-length-warning.patch
  f_u32-fix-compiler-gcc-10-compiler-warning.patch
  rdma-Fix-statistics-bind-unbing-argument-handling.patch
  lib-namespace-fix-ip-all-netns-return-code.patch
  lib-bpf-Fix-and-simplify-bpf_mnt_check_target.patch
  lib-fs-avoid-double-call-to-mkdir-on-make_path.patch
  q_cake-Fix-incorrect-printing-of-signed-values-in-cl.patch
  ip-xfrm-limit-the-length-of-the-security-context-nam.patch
  erspan-fix-JSON-output.patch
  devlink-always-check-strslashrsplit-return-value.patch
  nexthop-fix-memory-leak-in-add_nh_group_attr.patch
  rdma-stat-initialize-ret-in-stat_qp_show_parse_cb.patch
  rdma-stat-fix-return-code.patch
  lib-bpf_legacy-treat-0-as-a-valid-file-descriptor.patch
  lib-bpf_legacy-fix-missing-socket-close-when-connect.patch
  ip-drop-2-char-command-assumption.patch
  man-fix-syntax-for-ip-link-property.patch
  lib-bpf_legacy-avoid-to-pass-invalid-argument-to-clo.patch
  ip-route-ignore-ENOENT-during-save-if-RT_TABLE_MAIN-.patch
  libnetlink-check-error-handler-is-present-before-a-c.patch
  ipmonitor-Fix-recvmsg-with-ancillary-data.patch
  tc-u32-Fix-key-folding-in-sample-option.patch
  man-bridge-fix-the-typo-to-change-c-lor-into-c-olor-.patch
  ss-fix-fallback-to-procfs-for-raw-sockets.patch
  iptuntap-fix-multi-queue-flag-display.patch
  tc-f_flower-fix-port-range-parsing.patch
  lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
- refresh:
  ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633435200">- upgrade to upstream version 5.14 (jsc#SLE-17360 jsc#SLE-18994
  jsc#SLE-19271)
  * replace upstream tarball and signature
  * update specfile with changes from Factory package
  * drop mainline backports contained in 5.14:
  - Revert-bpf-replace-snprintf-with-asprintf-when-deali.patch
  - bpf-Fixes-a-snprintf-truncation-warning.patch
  - bpf-replace-snprintf-with-asprintf-when-dealing-with.patch
  - bridge-Deduplicate-vlan-show-functions.patch
  - bridge-Fix-BRIDGE_VLAN_TUNNEL-attribute-sizes.patch
  - bridge-Fix-output-with-empty-vlan-lists.patch
  - bridge-Fix-src_vni-argument-in-man-page.patch
  - bridge-Fix-tunnelshow-json-output.patch
  - bridge-Fix-typo-in-error-messages.patch
  - bridge-Fix-typo.patch
  - bridge-Fix-vni-printing.patch
  - bridge-fdb-show-fix-fdb-entry-state-output-for-json-.patch
  - bridge-fix-string-length-warning.patch
  - devlink-Add-a-new-time-stamp-format-for-health-repor.patch
  - devlink-Add-helper-for-left-justification-print.patch
  - devlink-Fix-fmsg-nesting-in-non-JSON-output.patch
  - devlink-Fix-inconsistency-between-command-input-and-.patch
  - devlink-Left-justification-on-FMSG-output.patch
  - devlink-Print-health-reporter-s-dump-time-stamp-in-a.patch
  - devlink-allow-full-range-of-resource-sizes.patch
  - devlink-always-check-strslashrsplit-return-value.patch
  - devlink-fix-uninitialized-warning.patch
  - devlink-require-resource-parameters.patch
  - erspan-fix-JSON-output.patch
  - erspan-set-erspan_ver-to-1-by-default.patch
  - f_u32-fix-compiler-gcc-10-compiler-warning.patch
  - introduce-print_masked_u16-and-print_masked_u32.patch
  - ip-add-support-for-alternative-name-addition-deletio.patch
  - ip-allow-to-use-alternative-names-as-handle.patch
  - ip-drop-2-char-command-assumption.patch
  - ip-fix-ip-route-show-json-output-for-multipath-nexth.patch
  - ip-fix-link-type-and-vlan-oneline-output.patch
  - ip-fix-oneline-output.patch
  - ip-iplink_ipoib.c-Remove-extra-spaces.patch
  - ip-link-Fix-indenting-in-help-text.patch
  - ip-link-xstats-fix-TX-IGMP-reports-string.patch
  - ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  - ip-route-ignore-ENOENT-during-save-if-RT_TABLE_MAIN-.patch
  - ip-xfrm-Fix-help-messages.patch
  - ip-xfrm-if_id-ve-value-is-error.patch
  - ip-xfrm-limit-the-length-of-the-security-context-nam.patch
  - ip-xfrm-update-man-page-on-setting-printing-XFRMA_IF.patch
  - ipmonitor-Fix-recvmsg-with-ancillary-data.patch
  - json_print-Remove-declaration-without-implementation.patch
  - lib-bpf-Fix-and-simplify-bpf_mnt_check_target.patch
  - lib-bpf_legacy-avoid-to-pass-invalid-argument-to-clo.patch
  - lib-bpf_legacy-fix-missing-socket-close-when-connect.patch
  - lib-bpf_legacy-treat-0-as-a-valid-file-descriptor.patch
  - lib-fs-avoid-double-call-to-mkdir-on-make_path.patch
  - lib-ll_map-cache-alternative-names.patch
  - lib-namespace-fix-ip-all-netns-return-code.patch
  - libnetlink-check-error-handler-is-present-before-a-c.patch
  - man-bridge-fix-the-typo-to-change-c-lor-into-c-olor-.patch
  - man-fix-syntax-for-ip-link-property.patch
  - nexthop-fix-error-reporting-in-filter-dump.patch
  - nexthop-fix-memory-leak-in-add_nh_group_attr.patch
  - q_cake-Fix-incorrect-printing-of-signed-values-in-cl.patch
  - rdma-Fix-statistics-bind-unbing-argument-handling.patch
  - rdma-stat-fix-return-code.patch
  - rdma-stat-initialize-ret-in-stat_qp_show_parse_cb.patch
  - ss-fix-end-of-line-printing-in-misc-ss.c.patch
  - ss-fix-fallback-to-procfs-for-raw-sockets.patch
  - tc-action-fix-time-values-output-in-JSON-format.patch
  - tc-fix-segmentation-fault-on-gact-action.patch
  - tc-fix-warning-in-tc-q_pie.c.patch
  - tc-flower-fix-output-for-ip-tos-and-ttl.patch
  - tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch
  - tc-fq_codel-fix-missing-statistic-in-JSON-output.patch
  - tc-pie-add-dq_rate_estimator-option.patch
  - tc-u32-Fix-key-folding-in-sample-option.patch
  - tc_util-add-an-option-to-print-masked-numbers-with-w.patch
  - tc_util-add-functions-for-big-endian-masked-numbers.patch
  - tc_util-introduce-a-function-to-print-JSON-non-JSON-.patch
  - testsuite-Fix-line-count-test.patch
  - tipc-fixed-a-compile-warning-in-tipc-link.c.patch
  - xfrm-also-check-for-ipv6-state-in-xfrm_state_keep.patch
  - xfrm-not-try-to-delete-ipcomp-states-when-using-dele.patch
  * drop non-upstream patches obsoleted by rebase to 5.14:
  - sync-UAPI-header-copies-with-SLE15-SP2.patch
  - examples-fix-bashisms-in-example-script.patch
  * refresh remaining patches:
  - lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
  - split-link-and-compile-steps-for-binaries.patch
  - tc-f_flower-fix-port-range-parsing.patch
  - xfrm-support-displaying-transformations-used-for-Mob.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633435201">- follow-up fixes backported from upstream (bsc#1191316):
  tree-wide-fix-some-typos-found-by-Lintian.patch
  configure-restore-backward-compatibility.patch
  man-ip-link-remove-double-of.patch
  mptcp-unbreak-JSON-endpoint-list.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1705492800">- upgrade to upstream version 6.4 (jsc#PED-6820 jsc#PED-6844)
  * for detailed list of changes between 5.14 and 6.4, see Factory
    package changelog
  * replace upstream tarball and signature
  * update specfile with changes from Factory package
  * drop mainline backports contained in 6.4:
  - tree-wide-fix-some-typos-found-by-Lintian.patch
  - configure-restore-backward-compatibility.patch
  - man-ip-link-remove-double-of.patch
  - iptuntap-fix-multi-queue-flag-display.patch
  - tc-f_flower-fix-port-range-parsing.patch
  - lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
  - mptcp-unbreak-JSON-endpoint-list.patch
  * drop non-upstream patch obsoleted by rebase to 6.4:
  - xfrm-support-displaying-transformations-used-for-Mob.patch
  * refresh remaining patches:
  - adjust-installation-directories-for-openSUSE-SLE.patch
  - use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  - add-explicit-typecast-to-avoid-gcc-warning.patch
  - split-link-and-compile-steps-for-binaries.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1713873600">- iproute2.spec: ensure execute permissions of supplied scripts
  (fixes IBS build failure)</changelog>
  <changelog author="mkubecek@suse.cz" date="1713873601">- support display of bound but unconnected sockets (bsc#1204562)
  * ss-Add-support-for-dumping-TCP-bound-inactive-socket.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1742385600">- avoid spurious cgroup warning (bsc#1234383):
  - ss-Tone-down-cgroup-path-resolution.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1746792000">- add post-6.4 follow-up fixes (bsc#1243005):
  * bpf-fix-warning-from-basename.patch
  * bridge-fdb-add-an-error-print-for-unknown-command.patch
  * bridge-vni-Accept-del-command.patch
  * bridge-vni-Fix-duplicate-group-and-remote-error-mess.patch
  * bridge-vni-Fix-vni-filter-help-strings.patch
  * bridge-vni-Remove-dead-code-in-group-argument-parsin.patch
  * bridge-vni-Report-duplicate-vni-argument-using-dupar.patch
  * f_flower-Treat-port-0-as-valid.patch
  * genl-ctrl.c-spelling-fix-in-error-message.patch
  * ip-Add-missing-echo-option-to-usage.patch
  * ip-Add-missing-stats-command-to-usage.patch
  * ip-ipmroute-use-preferred_family-to-get-prefix.patch
  * ip-remove-non-existent-amt-subcommand-from-usage.patch
  * iplink-fix-fd-leak-when-playing-with-netns.patch
  * iplink_bridge-fix-incorrect-root-id-dump.patch
  * iplink_xstats-spelling-fix-in-error-message.patch
  * iproute2-fix-type-incompatibility-in-ifstat.c.patch
  * iproute2-prevent-memory-leak.patch
  * libnetlink-validate-nlmsg-header-length-first.patch
  * man-devlink-resource-add-missing-words-in-the-exampl.patch
  * mnl_utils-sanitize-incoming-netlink-payload-size-in-.patch
  * rdma-Fix-help-information-of-rdma-resource.patch
  * rdma-Fix-the-error-of-accessing-string-variable-outs.patch
  * rdma-use-print_XXX-instead-of-COLOR_NONE.patch
  * ss-Fix-socket-type-check-in-packet_show_line.patch
  * ss-fix-directory-leak-when-T-option-is-used.patch
  * ss-mptcp-display-info-counters-as-unsigned.patch
  * ss-prevent-Process-column-from-being-printed-unless-.patch
  * tc-taprio-don-t-print-netlink-attributes-which-weren.patch
  * tc-taprio-fix-JSON-output-when-TCA_TAPRIO_ATTR_ADMIN.patch
  * tc-taprio-fix-parsing-of-fp-option-when-it-doesn-t-a.patch
  * vdpa-consume-device_features-parameter.patch
- add to blacklist:
  * af0ea2cd0b9e (duplicate of 92eac7e4bf14)
- refresh:
  * ss-Add-support-for-dumping-TCP-bound-inactive-socket.patch
  * add-explicit-typecast-to-avoid-gcc-warning.patch
  * use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1746878400">- add post-6.4 follow-up fix (bsc#1243005)
  * ss-show-extra-info-when-processes-is-not-used.patch</changelog>
  <changelog author="sjaeckel@suse.de" date="1756296000">- devlink: support ipsec_crypto and ipsec_packet cap (bsc#1248660)
  * add Update-kernel-headers.patch
  * add devlink-Support-setting-port-function-ipsec_crypto-c.patch
  * add devlink-Support-setting-port-function-ipsec_packet-c.patch
  * refresh ss-Tone-down-cgroup-path-resolution.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1757592000">- sync UAPI header copies with SLE15-SP6 kernel
  * sync-UAPI-header-copies-with-SLE15-SP6.patch
- drop Update-kernel-headers.patch
  (no longer needed with full UAPI sync)</changelog>
  <changelog author="mkubecek@suse.cz" date="1757592001">- add post-6.4 follow-up fixes (bsc#1243005)
  * patches/bond-fix-stack-smash-in-xstats.patch
  * patches/tc-gred-fix-debug-print.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1775649600">- add CVE fix (CVE-2024-58251 bsc#1254324)
  * ss-escape-characters-in-command-name.patch</changelog>
</package>
<package pkgid="fa10f9b5fd4e85fed95685cdf2ab8c7bcd18c0292201541a5e608c03afc955b9" name="iproute2" arch="src">
  <version epoch="0" ver="6.4" rel="150600.7.9.1"/>
  <changelog author="mkubecek@suse.cz" date="1547726400">- RDMA backport for SLE15-SP1 (fate#326021 bsc#1104003):
  sync-UAPI-header-copies-with-SLE15-SP1.patch
  bpf-remove-obsolete-samples.patch
  json_writer-add-new-json-handlers-null-float-with-fo.patch
  rdma-Move-per-device-handler-function-to-generic-cod.patch
  rdma-Rename-free-function-to-be-rd_cleanup.patch
  rdma-Rename-rd_free_devmap-to-be-rd_free.patch
  rdma-Move-link-execution-logic-to-common-code.patch
  rdma-Add-option-to-provide-sign-for-the-port-number.patch
  rdma-Make-visible-the-number-of-arguments.patch
  rdma-Set-pointer-to-device-name-position.patch
  rdma-Add-filtering-infrastructure.patch
  rdma-Add-resource-tracking-summary.patch
  rdma-Add-QP-resource-tracking-information.patch
  rdma-Avoid-memory-leak-for-skipper-resource.patch
  rdma-Add-CM_ID-resource-tracking-information.patch
  rdma-Add-CQ-resource-tracking-information.patch
  rdma-Add-MR-resource-tracking-information.patch
  rdma-Add-PD-resource-tracking-information.patch
  rdma-Print-net-device-name-and-index-for-RDMA-device.patch
  rdma-print-driver-resource-attributes.patch
  rdma-sync-some-IP-headers-with-glibc.patch
  rdma-Fix-for-ineffective-check-in-add_filter.patch
  rdma-Don-t-pass-garbage-to-rd_check_is_filtered.patch
  rdma-Refresh-help-section-of-resource-information.patch
  rdma-Introduce-command-execution-helper-with-require.patch
  rdma-Add-an-option-to-rename-IB-device-interface.patch
  rdma-Add-print-of-link-CapabilityMask2-flags.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547726401">- VF stats backport for SLE15-SP1 (fate#326021 bsc#1104003):
  ip-Add-violation-counters-to-VF-statisctics.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1569499200">- upgrade to upstream version 5.3 (jsc#SLE-7290)
  * replace upstream tarball and signature
  * import specfile updates from Factory package
  * drop mainline backports contained in 5.3:
  - bpf-remove-obsolete-samples.patch
  - utils-return-default-family-when-rtm_family-is-not-R.patch
  - Really-fix-get_addr-and-get_prefix-error-messages.patch
  - iproute-Add-support-for-extended-ack-to-rtnl_talk.patch
  - ss-enclose-IPv6-address-in-brackets.patch
  - lib-fix-extended-ack-with-and-without-libmnl.patch
  - lib-need-to-pass-LIBMNL-flag.patch
  - tc-ip-more-Makefile-updates-for-LIBMNL.patch
  - change-how-Config-is-used-in-Makefile-s.patch
  - lib-Dump-ext-ack-string-by-default.patch
  - bpf-unbreak-libelf-linkage-for-bpf-obj-loader.patch
  - libnetlink-Fix-extack-attribute-parsing.patch
  - ifstat-Fix-memleak-in-dump_kern_db-for-json-output.patch
  - ss-Fix-potential-memleak-in-unix_stats_print.patch
  - utils-Move-BIT-macro-to-common-header.patch
  - rdma-Add-basic-infrastructure-for-RDMA-tool.patch
  - rdma-Add-dev-object.patch
  - rdma-Add-link-object.patch
  - rdma-Add-json-and-pretty-outputs.patch
  - rdma-Implement-json-output-for-dev-object.patch
  - rdma-Add-json-output-to-link-object.patch
  - rdma-Add-initial-manual-for-the-tool.patch
  - iproute-Fix-for-missing-Oifs-display.patch
  - ipmaddr-Avoid-accessing-uninitialized-data.patch
  - rdma-fix-duplicate-initialization-in-port_names.patch
  - ss-Fix-for-added-diag-support-check.patch
  - link_gre6-Fix-for-changing-tclass-flowlabel.patch
  - iplink-check-for-message-truncation-in-iplink_get.patch
  - iplink-double-the-buffer-size-also-in-iplink_get.patch
  - tc-actions-store-and-dump-correct-length-of-user-coo.patch
  - json_writer-add-new-json-handlers-null-float-with-fo.patch
  - doc-remove-obsolete-ip-tunnels-documentation.patch
  - doc-remove-outdated-ss-documentation.patch
  - doc-remove-outdated-arpd-documentation.patch
  - doc-remove-outdated-nstat-rtstat-documentation.patch
  - doc-remove-outdated-tc-filters-documentation.patch
  - doc-remove-outdated-IPv6-flow-label-document.patch
  - doc-drop-old-ip-command-documentation.patch
  - ss-Distinguish-between-IPv4-and-IPv6-wildcard-socket.patch
  - ip-maddr-fix-filtering-by-device.patch
  - man-add-additional-explainations-for-ss.patch
  - lib-libnetlink-re-malloc-buff-if-size-is-not-enough.patch
  - lib-libnetlink-update-rtnl_talk-to-support-malloc-bu.patch
  - tc-move-action-cookie-print-out-of-the-stats-if.patch
  - tc-remove-action-cookie-len-from-printout.patch
  - link_gre6-Detect-invalid-encaplimit-values.patch
  - man-tc-csum.8-Fix-inconsistency-in-example-descripti.patch
  - tc-bash-completion-add-missing-classid-keyword.patch
  - tc-fix-command-tc-actions-del-hang-issue.patch
  - gre-ip6tnl-tunnel-Fix-noencap-support.patch
  - Restore-no-print-directory-option-for-silent-builds.patch
  - iplink-Validate-minimum-tx-rate-is-less-than-maximum.patch
  - ipaddress-Make-sure-VF-min-max-rate-API-is-supported.patch
  - rdma-Reduce-scope-of-_dev_map_lookup-call.patch
  - rdma-Protect-dev_map_lookup-from-wrong-input.patch
  - rdma-Move-per-device-handler-function-to-generic-cod.patch
  - rdma-Fix-misspelled-SYS_IMAGE_GUID.patch
  - rdma-Check-that-port-index-exists-before-operate-on-.patch
  - rdma-Rename-free-function-to-be-rd_cleanup.patch
  - rdma-Rename-rd_free_devmap-to-be-rd_free.patch
  - rdma-Move-link-execution-logic-to-common-code.patch
  - rdma-Add-option-to-provide-sign-for-the-port-number.patch
  - rdma-Make-visible-the-number-of-arguments.patch
  - rdma-Add-filtering-infrastructure.patch
  - rdma-Set-pointer-to-device-name-position.patch
  - rdma-Add-resource-tracking-summary.patch
  - rdma-Add-QP-resource-tracking-information.patch
  - rdma-Check-return-value-of-strdup-call.patch
  - README-update-location-of-git-repositories-remove-br.patch
  - Remove-leftovers-from-removed-Latex-documentation.patch
  - README-re-add-updated-information-link.patch
  - rdma-Avoid-memory-leak-for-skipper-resource.patch
  - ip-link-Fix-use-after-free-in-nl_get_ll_addr_len.patch
  - ip-address-Fix-negative-prints-of-large-TX-rate-limi.patch
  - devlink-fix-port-new-monitoring-message-typo.patch
  - rdma-Add-CM_ID-resource-tracking-information.patch
  - rdma-Add-CQ-resource-tracking-information.patch
  - rdma-Add-MR-resource-tracking-information.patch
  - rdma-Add-PD-resource-tracking-information.patch
  - rdma-Ignore-unknown-netlink-attributes.patch
  - bridge-fix-typo-in-hairpin-error-message.patch
  - iproute-Abort-if-nexthop-cannot-be-parsed.patch
  - iplink_vrf-Save-device-index-from-response-for-retur.patch
  - rdma-Print-net-device-name-and-index-for-RDMA-device.patch
  - rdma-print-driver-resource-attributes.patch
  - rdma-sync-some-IP-headers-with-glibc.patch
  - devlink-CTRL_ATTR_FAMILY_ID-is-a-u16.patch
  - ip-Add-violation-counters-to-VF-statisctics.patch
  - ip-route-Fix-segfault-with-many-nexthops.patch
  - rdma-Fix-representation-of-PortInfo-CapabilityMask.patch
  - macsec-fix-off-by-one-when-parsing-attributes.patch
  - rdma-Fix-for-ineffective-check-in-add_filter.patch
  - ip-route-Fix-for-memleak-in-error-path.patch
  - rdma-Don-t-pass-garbage-to-rd_check_is_filtered.patch
  - ip-route-Fix-parse_encap_seg6-srh-parsing.patch
  - rdma-Refresh-help-section-of-resource-information.patch
  - tc-f_u32-allow-skip_hw-and-skip_sw-flags-to-be-last.patch
  - ip-route-Fix-nexthop-encap-parsing.patch
  - rdma-Fix-broken-32-bit-compilation.patch
  - rdma-Fix-incorrectly-handled-NLA-validation.patch
  - rdma-Introduce-command-execution-helper-with-require.patch
  - rdma-Add-an-option-to-rename-IB-device-interface.patch
  - rdma-Add-print-of-link-CapabilityMask2-flags.patch
  * drop non-upstream patches obsoleted by rebase to 5.3:
  - sync-UAPI-header-copies-with-SLE15-SP1.patch
  - man-fix-documentation-references-in-manual-pages.patch
  * refresh remaining patches:
  - adjust-installation-directories-for-openSUSE-SLE.patch
  - use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  - add-explicit-typecast-to-avoid-gcc-warning.patch
  - xfrm-support-displaying-transformations-used-for-Mob.patch
  - split-link-and-compile-steps-for-binaries.patch
  - examples-fix-bashisms-in-example-script.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1578484800">- follow-up fixes backported from upstream (bsc#1160242):
  bpf-replace-snprintf-with-asprintf-when-dealing-with.patch
  bridge-Deduplicate-vlan-show-functions.patch
  bridge-Fix-BRIDGE_VLAN_TUNNEL-attribute-sizes.patch
  bridge-Fix-src_vni-argument-in-man-page.patch
  bridge-Fix-tunnelshow-json-output.patch
  bridge-Fix-typo-in-error-messages.patch
  bridge-Fix-vni-printing.patch
  devlink-Add-a-new-time-stamp-format-for-health-repor.patch
  devlink-Add-helper-for-left-justification-print.patch
  devlink-Fix-fmsg-nesting-in-non-JSON-output.patch
  devlink-Fix-inconsistency-between-command-input-and-.patch
  devlink-Left-justification-on-FMSG-output.patch
  devlink-Print-health-reporter-s-dump-time-stamp-in-a.patch
  devlink-allow-full-range-of-resource-sizes.patch
  devlink-require-resource-parameters.patch
  introduce-print_masked_u16-and-print_masked_u32.patch
  ip-fix-ip-route-show-json-output-for-multipath-nexth.patch
  ip-xfrm-if_id-ve-value-is-error.patch
  json_print-Remove-declaration-without-implementation.patch
  sync-UAPI-header-copies-with-SLE15-SP2.patch
  tc-fix-segmentation-fault-on-gact-action.patch
  tc-fix-warning-in-tc-q_pie.c.patch
  tc-flower-fix-output-for-ip-tos-and-ttl.patch
  tc-fq_codel-fix-missing-statistic-in-JSON-output.patch
  tc-pie-add-dq_rate_estimator-option.patch
  tc_util-add-an-option-to-print-masked-numbers-with-w.patch
  tc_util-add-functions-for-big-endian-masked-numbers.patch
  tc_util-introduce-a-function-to-print-JSON-non-JSON-.patch
  testsuite-Fix-line-count-test.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1578484801">- support alternative names as we already support them in SLE15-SP2
  kernel (jsc#SLE-7290):
  lib-ll_map-cache-alternative-names.patch
  ip-add-support-for-alternative-name-addition-deletio.patch
  ip-allow-to-use-alternative-names-as-handle.patch
  ip-fix-oneline-output.patch</changelog>
  <changelog author="kukuk@suse.com" date="1586347200">- Move arpd into own subpackage to avoid libdb dependency
  [jsc#SLE-12189]</changelog>
  <changelog author="mkubecek@suse.cz" date="1587729600">- follow-up fixes backported from upstream (bsc#1160242):
  ip-fix-link-type-and-vlan-oneline-output.patch
  ip-xfrm-Fix-help-messages.patch
  ip-link-xstats-fix-TX-IGMP-reports-string.patch
  erspan-set-erspan_ver-to-1-by-default.patch
  xfrm-not-try-to-delete-ipcomp-states-when-using-dele.patch
  nexthop-fix-error-reporting-in-filter-dump.patch
- refresh:
  xfrm-support-displaying-transformations-used-for-Mob.patch
- fix duplicated patch metadata:
  introduce-print_masked_u16-and-print_masked_u32.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633089600">- follow-up fixes backported from upstream (bsc#1160242):
  ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633348800">- follow-up fixes backported from upstream (bsc#1160242):
  ss-fix-end-of-line-printing-in-misc-ss.c.patch
  xfrm-also-check-for-ipv6-state-in-xfrm_state_keep.patch
  bridge-Fix-typo.patch
  bridge-Fix-output-with-empty-vlan-lists.patch
  tc-action-fix-time-values-output-in-JSON-format.patch
  Revert-bpf-replace-snprintf-with-asprintf-when-deali.patch
  bpf-Fixes-a-snprintf-truncation-warning.patch
  tipc-fixed-a-compile-warning-in-tipc-link.c.patch
  ip-xfrm-update-man-page-on-setting-printing-XFRMA_IF.patch
  bridge-fdb-show-fix-fdb-entry-state-output-for-json-.patch
  ip-link-Fix-indenting-in-help-text.patch
  ip-iplink_ipoib.c-Remove-extra-spaces.patch
  devlink-fix-uninitialized-warning.patch
  bridge-fix-string-length-warning.patch
  f_u32-fix-compiler-gcc-10-compiler-warning.patch
  rdma-Fix-statistics-bind-unbing-argument-handling.patch
  lib-namespace-fix-ip-all-netns-return-code.patch
  lib-bpf-Fix-and-simplify-bpf_mnt_check_target.patch
  lib-fs-avoid-double-call-to-mkdir-on-make_path.patch
  q_cake-Fix-incorrect-printing-of-signed-values-in-cl.patch
  ip-xfrm-limit-the-length-of-the-security-context-nam.patch
  erspan-fix-JSON-output.patch
  devlink-always-check-strslashrsplit-return-value.patch
  nexthop-fix-memory-leak-in-add_nh_group_attr.patch
  rdma-stat-initialize-ret-in-stat_qp_show_parse_cb.patch
  rdma-stat-fix-return-code.patch
  lib-bpf_legacy-treat-0-as-a-valid-file-descriptor.patch
  lib-bpf_legacy-fix-missing-socket-close-when-connect.patch
  ip-drop-2-char-command-assumption.patch
  man-fix-syntax-for-ip-link-property.patch
  lib-bpf_legacy-avoid-to-pass-invalid-argument-to-clo.patch
  ip-route-ignore-ENOENT-during-save-if-RT_TABLE_MAIN-.patch
  libnetlink-check-error-handler-is-present-before-a-c.patch
  ipmonitor-Fix-recvmsg-with-ancillary-data.patch
  tc-u32-Fix-key-folding-in-sample-option.patch
  man-bridge-fix-the-typo-to-change-c-lor-into-c-olor-.patch
  ss-fix-fallback-to-procfs-for-raw-sockets.patch
  iptuntap-fix-multi-queue-flag-display.patch
  tc-f_flower-fix-port-range-parsing.patch
  lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
- refresh:
  ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633435200">- upgrade to upstream version 5.14 (jsc#SLE-17360 jsc#SLE-18994
  jsc#SLE-19271)
  * replace upstream tarball and signature
  * update specfile with changes from Factory package
  * drop mainline backports contained in 5.14:
  - Revert-bpf-replace-snprintf-with-asprintf-when-deali.patch
  - bpf-Fixes-a-snprintf-truncation-warning.patch
  - bpf-replace-snprintf-with-asprintf-when-dealing-with.patch
  - bridge-Deduplicate-vlan-show-functions.patch
  - bridge-Fix-BRIDGE_VLAN_TUNNEL-attribute-sizes.patch
  - bridge-Fix-output-with-empty-vlan-lists.patch
  - bridge-Fix-src_vni-argument-in-man-page.patch
  - bridge-Fix-tunnelshow-json-output.patch
  - bridge-Fix-typo-in-error-messages.patch
  - bridge-Fix-typo.patch
  - bridge-Fix-vni-printing.patch
  - bridge-fdb-show-fix-fdb-entry-state-output-for-json-.patch
  - bridge-fix-string-length-warning.patch
  - devlink-Add-a-new-time-stamp-format-for-health-repor.patch
  - devlink-Add-helper-for-left-justification-print.patch
  - devlink-Fix-fmsg-nesting-in-non-JSON-output.patch
  - devlink-Fix-inconsistency-between-command-input-and-.patch
  - devlink-Left-justification-on-FMSG-output.patch
  - devlink-Print-health-reporter-s-dump-time-stamp-in-a.patch
  - devlink-allow-full-range-of-resource-sizes.patch
  - devlink-always-check-strslashrsplit-return-value.patch
  - devlink-fix-uninitialized-warning.patch
  - devlink-require-resource-parameters.patch
  - erspan-fix-JSON-output.patch
  - erspan-set-erspan_ver-to-1-by-default.patch
  - f_u32-fix-compiler-gcc-10-compiler-warning.patch
  - introduce-print_masked_u16-and-print_masked_u32.patch
  - ip-add-support-for-alternative-name-addition-deletio.patch
  - ip-allow-to-use-alternative-names-as-handle.patch
  - ip-drop-2-char-command-assumption.patch
  - ip-fix-ip-route-show-json-output-for-multipath-nexth.patch
  - ip-fix-link-type-and-vlan-oneline-output.patch
  - ip-fix-oneline-output.patch
  - ip-iplink_ipoib.c-Remove-extra-spaces.patch
  - ip-link-Fix-indenting-in-help-text.patch
  - ip-link-xstats-fix-TX-IGMP-reports-string.patch
  - ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  - ip-route-ignore-ENOENT-during-save-if-RT_TABLE_MAIN-.patch
  - ip-xfrm-Fix-help-messages.patch
  - ip-xfrm-if_id-ve-value-is-error.patch
  - ip-xfrm-limit-the-length-of-the-security-context-nam.patch
  - ip-xfrm-update-man-page-on-setting-printing-XFRMA_IF.patch
  - ipmonitor-Fix-recvmsg-with-ancillary-data.patch
  - json_print-Remove-declaration-without-implementation.patch
  - lib-bpf-Fix-and-simplify-bpf_mnt_check_target.patch
  - lib-bpf_legacy-avoid-to-pass-invalid-argument-to-clo.patch
  - lib-bpf_legacy-fix-missing-socket-close-when-connect.patch
  - lib-bpf_legacy-treat-0-as-a-valid-file-descriptor.patch
  - lib-fs-avoid-double-call-to-mkdir-on-make_path.patch
  - lib-ll_map-cache-alternative-names.patch
  - lib-namespace-fix-ip-all-netns-return-code.patch
  - libnetlink-check-error-handler-is-present-before-a-c.patch
  - man-bridge-fix-the-typo-to-change-c-lor-into-c-olor-.patch
  - man-fix-syntax-for-ip-link-property.patch
  - nexthop-fix-error-reporting-in-filter-dump.patch
  - nexthop-fix-memory-leak-in-add_nh_group_attr.patch
  - q_cake-Fix-incorrect-printing-of-signed-values-in-cl.patch
  - rdma-Fix-statistics-bind-unbing-argument-handling.patch
  - rdma-stat-fix-return-code.patch
  - rdma-stat-initialize-ret-in-stat_qp_show_parse_cb.patch
  - ss-fix-end-of-line-printing-in-misc-ss.c.patch
  - ss-fix-fallback-to-procfs-for-raw-sockets.patch
  - tc-action-fix-time-values-output-in-JSON-format.patch
  - tc-fix-segmentation-fault-on-gact-action.patch
  - tc-fix-warning-in-tc-q_pie.c.patch
  - tc-flower-fix-output-for-ip-tos-and-ttl.patch
  - tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch
  - tc-fq_codel-fix-missing-statistic-in-JSON-output.patch
  - tc-pie-add-dq_rate_estimator-option.patch
  - tc-u32-Fix-key-folding-in-sample-option.patch
  - tc_util-add-an-option-to-print-masked-numbers-with-w.patch
  - tc_util-add-functions-for-big-endian-masked-numbers.patch
  - tc_util-introduce-a-function-to-print-JSON-non-JSON-.patch
  - testsuite-Fix-line-count-test.patch
  - tipc-fixed-a-compile-warning-in-tipc-link.c.patch
  - xfrm-also-check-for-ipv6-state-in-xfrm_state_keep.patch
  - xfrm-not-try-to-delete-ipcomp-states-when-using-dele.patch
  * drop non-upstream patches obsoleted by rebase to 5.14:
  - sync-UAPI-header-copies-with-SLE15-SP2.patch
  - examples-fix-bashisms-in-example-script.patch
  * refresh remaining patches:
  - lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
  - split-link-and-compile-steps-for-binaries.patch
  - tc-f_flower-fix-port-range-parsing.patch
  - xfrm-support-displaying-transformations-used-for-Mob.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633435201">- follow-up fixes backported from upstream (bsc#1191316):
  tree-wide-fix-some-typos-found-by-Lintian.patch
  configure-restore-backward-compatibility.patch
  man-ip-link-remove-double-of.patch
  mptcp-unbreak-JSON-endpoint-list.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1705492800">- upgrade to upstream version 6.4 (jsc#PED-6820 jsc#PED-6844)
  * for detailed list of changes between 5.14 and 6.4, see Factory
    package changelog
  * replace upstream tarball and signature
  * update specfile with changes from Factory package
  * drop mainline backports contained in 6.4:
  - tree-wide-fix-some-typos-found-by-Lintian.patch
  - configure-restore-backward-compatibility.patch
  - man-ip-link-remove-double-of.patch
  - iptuntap-fix-multi-queue-flag-display.patch
  - tc-f_flower-fix-port-range-parsing.patch
  - lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
  - mptcp-unbreak-JSON-endpoint-list.patch
  * drop non-upstream patch obsoleted by rebase to 6.4:
  - xfrm-support-displaying-transformations-used-for-Mob.patch
  * refresh remaining patches:
  - adjust-installation-directories-for-openSUSE-SLE.patch
  - use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  - add-explicit-typecast-to-avoid-gcc-warning.patch
  - split-link-and-compile-steps-for-binaries.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1713873600">- iproute2.spec: ensure execute permissions of supplied scripts
  (fixes IBS build failure)</changelog>
  <changelog author="mkubecek@suse.cz" date="1713873601">- support display of bound but unconnected sockets (bsc#1204562)
  * ss-Add-support-for-dumping-TCP-bound-inactive-socket.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1742385600">- avoid spurious cgroup warning (bsc#1234383):
  - ss-Tone-down-cgroup-path-resolution.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1746792000">- add post-6.4 follow-up fixes (bsc#1243005):
  * bpf-fix-warning-from-basename.patch
  * bridge-fdb-add-an-error-print-for-unknown-command.patch
  * bridge-vni-Accept-del-command.patch
  * bridge-vni-Fix-duplicate-group-and-remote-error-mess.patch
  * bridge-vni-Fix-vni-filter-help-strings.patch
  * bridge-vni-Remove-dead-code-in-group-argument-parsin.patch
  * bridge-vni-Report-duplicate-vni-argument-using-dupar.patch
  * f_flower-Treat-port-0-as-valid.patch
  * genl-ctrl.c-spelling-fix-in-error-message.patch
  * ip-Add-missing-echo-option-to-usage.patch
  * ip-Add-missing-stats-command-to-usage.patch
  * ip-ipmroute-use-preferred_family-to-get-prefix.patch
  * ip-remove-non-existent-amt-subcommand-from-usage.patch
  * iplink-fix-fd-leak-when-playing-with-netns.patch
  * iplink_bridge-fix-incorrect-root-id-dump.patch
  * iplink_xstats-spelling-fix-in-error-message.patch
  * iproute2-fix-type-incompatibility-in-ifstat.c.patch
  * iproute2-prevent-memory-leak.patch
  * libnetlink-validate-nlmsg-header-length-first.patch
  * man-devlink-resource-add-missing-words-in-the-exampl.patch
  * mnl_utils-sanitize-incoming-netlink-payload-size-in-.patch
  * rdma-Fix-help-information-of-rdma-resource.patch
  * rdma-Fix-the-error-of-accessing-string-variable-outs.patch
  * rdma-use-print_XXX-instead-of-COLOR_NONE.patch
  * ss-Fix-socket-type-check-in-packet_show_line.patch
  * ss-fix-directory-leak-when-T-option-is-used.patch
  * ss-mptcp-display-info-counters-as-unsigned.patch
  * ss-prevent-Process-column-from-being-printed-unless-.patch
  * tc-taprio-don-t-print-netlink-attributes-which-weren.patch
  * tc-taprio-fix-JSON-output-when-TCA_TAPRIO_ATTR_ADMIN.patch
  * tc-taprio-fix-parsing-of-fp-option-when-it-doesn-t-a.patch
  * vdpa-consume-device_features-parameter.patch
- add to blacklist:
  * af0ea2cd0b9e (duplicate of 92eac7e4bf14)
- refresh:
  * ss-Add-support-for-dumping-TCP-bound-inactive-socket.patch
  * add-explicit-typecast-to-avoid-gcc-warning.patch
  * use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1746878400">- add post-6.4 follow-up fix (bsc#1243005)
  * ss-show-extra-info-when-processes-is-not-used.patch</changelog>
  <changelog author="sjaeckel@suse.de" date="1756296000">- devlink: support ipsec_crypto and ipsec_packet cap (bsc#1248660)
  * add Update-kernel-headers.patch
  * add devlink-Support-setting-port-function-ipsec_crypto-c.patch
  * add devlink-Support-setting-port-function-ipsec_packet-c.patch
  * refresh ss-Tone-down-cgroup-path-resolution.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1757592000">- sync UAPI header copies with SLE15-SP6 kernel
  * sync-UAPI-header-copies-with-SLE15-SP6.patch
- drop Update-kernel-headers.patch
  (no longer needed with full UAPI sync)</changelog>
  <changelog author="mkubecek@suse.cz" date="1757592001">- add post-6.4 follow-up fixes (bsc#1243005)
  * patches/bond-fix-stack-smash-in-xstats.patch
  * patches/tc-gred-fix-debug-print.patch</changelog>
</package>
<package pkgid="8e14cab1bf3f8e78d1204b41cafb3014eff39d7dcccee083ea5f0dc6a211ead2" name="iproute2" arch="x86_64">
  <version epoch="0" ver="6.4" rel="150600.7.9.1"/>
  <changelog author="mkubecek@suse.cz" date="1547726400">- RDMA backport for SLE15-SP1 (fate#326021 bsc#1104003):
  sync-UAPI-header-copies-with-SLE15-SP1.patch
  bpf-remove-obsolete-samples.patch
  json_writer-add-new-json-handlers-null-float-with-fo.patch
  rdma-Move-per-device-handler-function-to-generic-cod.patch
  rdma-Rename-free-function-to-be-rd_cleanup.patch
  rdma-Rename-rd_free_devmap-to-be-rd_free.patch
  rdma-Move-link-execution-logic-to-common-code.patch
  rdma-Add-option-to-provide-sign-for-the-port-number.patch
  rdma-Make-visible-the-number-of-arguments.patch
  rdma-Set-pointer-to-device-name-position.patch
  rdma-Add-filtering-infrastructure.patch
  rdma-Add-resource-tracking-summary.patch
  rdma-Add-QP-resource-tracking-information.patch
  rdma-Avoid-memory-leak-for-skipper-resource.patch
  rdma-Add-CM_ID-resource-tracking-information.patch
  rdma-Add-CQ-resource-tracking-information.patch
  rdma-Add-MR-resource-tracking-information.patch
  rdma-Add-PD-resource-tracking-information.patch
  rdma-Print-net-device-name-and-index-for-RDMA-device.patch
  rdma-print-driver-resource-attributes.patch
  rdma-sync-some-IP-headers-with-glibc.patch
  rdma-Fix-for-ineffective-check-in-add_filter.patch
  rdma-Don-t-pass-garbage-to-rd_check_is_filtered.patch
  rdma-Refresh-help-section-of-resource-information.patch
  rdma-Introduce-command-execution-helper-with-require.patch
  rdma-Add-an-option-to-rename-IB-device-interface.patch
  rdma-Add-print-of-link-CapabilityMask2-flags.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547726401">- VF stats backport for SLE15-SP1 (fate#326021 bsc#1104003):
  ip-Add-violation-counters-to-VF-statisctics.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1569499200">- upgrade to upstream version 5.3 (jsc#SLE-7290)
  * replace upstream tarball and signature
  * import specfile updates from Factory package
  * drop mainline backports contained in 5.3:
  - bpf-remove-obsolete-samples.patch
  - utils-return-default-family-when-rtm_family-is-not-R.patch
  - Really-fix-get_addr-and-get_prefix-error-messages.patch
  - iproute-Add-support-for-extended-ack-to-rtnl_talk.patch
  - ss-enclose-IPv6-address-in-brackets.patch
  - lib-fix-extended-ack-with-and-without-libmnl.patch
  - lib-need-to-pass-LIBMNL-flag.patch
  - tc-ip-more-Makefile-updates-for-LIBMNL.patch
  - change-how-Config-is-used-in-Makefile-s.patch
  - lib-Dump-ext-ack-string-by-default.patch
  - bpf-unbreak-libelf-linkage-for-bpf-obj-loader.patch
  - libnetlink-Fix-extack-attribute-parsing.patch
  - ifstat-Fix-memleak-in-dump_kern_db-for-json-output.patch
  - ss-Fix-potential-memleak-in-unix_stats_print.patch
  - utils-Move-BIT-macro-to-common-header.patch
  - rdma-Add-basic-infrastructure-for-RDMA-tool.patch
  - rdma-Add-dev-object.patch
  - rdma-Add-link-object.patch
  - rdma-Add-json-and-pretty-outputs.patch
  - rdma-Implement-json-output-for-dev-object.patch
  - rdma-Add-json-output-to-link-object.patch
  - rdma-Add-initial-manual-for-the-tool.patch
  - iproute-Fix-for-missing-Oifs-display.patch
  - ipmaddr-Avoid-accessing-uninitialized-data.patch
  - rdma-fix-duplicate-initialization-in-port_names.patch
  - ss-Fix-for-added-diag-support-check.patch
  - link_gre6-Fix-for-changing-tclass-flowlabel.patch
  - iplink-check-for-message-truncation-in-iplink_get.patch
  - iplink-double-the-buffer-size-also-in-iplink_get.patch
  - tc-actions-store-and-dump-correct-length-of-user-coo.patch
  - json_writer-add-new-json-handlers-null-float-with-fo.patch
  - doc-remove-obsolete-ip-tunnels-documentation.patch
  - doc-remove-outdated-ss-documentation.patch
  - doc-remove-outdated-arpd-documentation.patch
  - doc-remove-outdated-nstat-rtstat-documentation.patch
  - doc-remove-outdated-tc-filters-documentation.patch
  - doc-remove-outdated-IPv6-flow-label-document.patch
  - doc-drop-old-ip-command-documentation.patch
  - ss-Distinguish-between-IPv4-and-IPv6-wildcard-socket.patch
  - ip-maddr-fix-filtering-by-device.patch
  - man-add-additional-explainations-for-ss.patch
  - lib-libnetlink-re-malloc-buff-if-size-is-not-enough.patch
  - lib-libnetlink-update-rtnl_talk-to-support-malloc-bu.patch
  - tc-move-action-cookie-print-out-of-the-stats-if.patch
  - tc-remove-action-cookie-len-from-printout.patch
  - link_gre6-Detect-invalid-encaplimit-values.patch
  - man-tc-csum.8-Fix-inconsistency-in-example-descripti.patch
  - tc-bash-completion-add-missing-classid-keyword.patch
  - tc-fix-command-tc-actions-del-hang-issue.patch
  - gre-ip6tnl-tunnel-Fix-noencap-support.patch
  - Restore-no-print-directory-option-for-silent-builds.patch
  - iplink-Validate-minimum-tx-rate-is-less-than-maximum.patch
  - ipaddress-Make-sure-VF-min-max-rate-API-is-supported.patch
  - rdma-Reduce-scope-of-_dev_map_lookup-call.patch
  - rdma-Protect-dev_map_lookup-from-wrong-input.patch
  - rdma-Move-per-device-handler-function-to-generic-cod.patch
  - rdma-Fix-misspelled-SYS_IMAGE_GUID.patch
  - rdma-Check-that-port-index-exists-before-operate-on-.patch
  - rdma-Rename-free-function-to-be-rd_cleanup.patch
  - rdma-Rename-rd_free_devmap-to-be-rd_free.patch
  - rdma-Move-link-execution-logic-to-common-code.patch
  - rdma-Add-option-to-provide-sign-for-the-port-number.patch
  - rdma-Make-visible-the-number-of-arguments.patch
  - rdma-Add-filtering-infrastructure.patch
  - rdma-Set-pointer-to-device-name-position.patch
  - rdma-Add-resource-tracking-summary.patch
  - rdma-Add-QP-resource-tracking-information.patch
  - rdma-Check-return-value-of-strdup-call.patch
  - README-update-location-of-git-repositories-remove-br.patch
  - Remove-leftovers-from-removed-Latex-documentation.patch
  - README-re-add-updated-information-link.patch
  - rdma-Avoid-memory-leak-for-skipper-resource.patch
  - ip-link-Fix-use-after-free-in-nl_get_ll_addr_len.patch
  - ip-address-Fix-negative-prints-of-large-TX-rate-limi.patch
  - devlink-fix-port-new-monitoring-message-typo.patch
  - rdma-Add-CM_ID-resource-tracking-information.patch
  - rdma-Add-CQ-resource-tracking-information.patch
  - rdma-Add-MR-resource-tracking-information.patch
  - rdma-Add-PD-resource-tracking-information.patch
  - rdma-Ignore-unknown-netlink-attributes.patch
  - bridge-fix-typo-in-hairpin-error-message.patch
  - iproute-Abort-if-nexthop-cannot-be-parsed.patch
  - iplink_vrf-Save-device-index-from-response-for-retur.patch
  - rdma-Print-net-device-name-and-index-for-RDMA-device.patch
  - rdma-print-driver-resource-attributes.patch
  - rdma-sync-some-IP-headers-with-glibc.patch
  - devlink-CTRL_ATTR_FAMILY_ID-is-a-u16.patch
  - ip-Add-violation-counters-to-VF-statisctics.patch
  - ip-route-Fix-segfault-with-many-nexthops.patch
  - rdma-Fix-representation-of-PortInfo-CapabilityMask.patch
  - macsec-fix-off-by-one-when-parsing-attributes.patch
  - rdma-Fix-for-ineffective-check-in-add_filter.patch
  - ip-route-Fix-for-memleak-in-error-path.patch
  - rdma-Don-t-pass-garbage-to-rd_check_is_filtered.patch
  - ip-route-Fix-parse_encap_seg6-srh-parsing.patch
  - rdma-Refresh-help-section-of-resource-information.patch
  - tc-f_u32-allow-skip_hw-and-skip_sw-flags-to-be-last.patch
  - ip-route-Fix-nexthop-encap-parsing.patch
  - rdma-Fix-broken-32-bit-compilation.patch
  - rdma-Fix-incorrectly-handled-NLA-validation.patch
  - rdma-Introduce-command-execution-helper-with-require.patch
  - rdma-Add-an-option-to-rename-IB-device-interface.patch
  - rdma-Add-print-of-link-CapabilityMask2-flags.patch
  * drop non-upstream patches obsoleted by rebase to 5.3:
  - sync-UAPI-header-copies-with-SLE15-SP1.patch
  - man-fix-documentation-references-in-manual-pages.patch
  * refresh remaining patches:
  - adjust-installation-directories-for-openSUSE-SLE.patch
  - use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  - add-explicit-typecast-to-avoid-gcc-warning.patch
  - xfrm-support-displaying-transformations-used-for-Mob.patch
  - split-link-and-compile-steps-for-binaries.patch
  - examples-fix-bashisms-in-example-script.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1578484800">- follow-up fixes backported from upstream (bsc#1160242):
  bpf-replace-snprintf-with-asprintf-when-dealing-with.patch
  bridge-Deduplicate-vlan-show-functions.patch
  bridge-Fix-BRIDGE_VLAN_TUNNEL-attribute-sizes.patch
  bridge-Fix-src_vni-argument-in-man-page.patch
  bridge-Fix-tunnelshow-json-output.patch
  bridge-Fix-typo-in-error-messages.patch
  bridge-Fix-vni-printing.patch
  devlink-Add-a-new-time-stamp-format-for-health-repor.patch
  devlink-Add-helper-for-left-justification-print.patch
  devlink-Fix-fmsg-nesting-in-non-JSON-output.patch
  devlink-Fix-inconsistency-between-command-input-and-.patch
  devlink-Left-justification-on-FMSG-output.patch
  devlink-Print-health-reporter-s-dump-time-stamp-in-a.patch
  devlink-allow-full-range-of-resource-sizes.patch
  devlink-require-resource-parameters.patch
  introduce-print_masked_u16-and-print_masked_u32.patch
  ip-fix-ip-route-show-json-output-for-multipath-nexth.patch
  ip-xfrm-if_id-ve-value-is-error.patch
  json_print-Remove-declaration-without-implementation.patch
  sync-UAPI-header-copies-with-SLE15-SP2.patch
  tc-fix-segmentation-fault-on-gact-action.patch
  tc-fix-warning-in-tc-q_pie.c.patch
  tc-flower-fix-output-for-ip-tos-and-ttl.patch
  tc-fq_codel-fix-missing-statistic-in-JSON-output.patch
  tc-pie-add-dq_rate_estimator-option.patch
  tc_util-add-an-option-to-print-masked-numbers-with-w.patch
  tc_util-add-functions-for-big-endian-masked-numbers.patch
  tc_util-introduce-a-function-to-print-JSON-non-JSON-.patch
  testsuite-Fix-line-count-test.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1578484801">- support alternative names as we already support them in SLE15-SP2
  kernel (jsc#SLE-7290):
  lib-ll_map-cache-alternative-names.patch
  ip-add-support-for-alternative-name-addition-deletio.patch
  ip-allow-to-use-alternative-names-as-handle.patch
  ip-fix-oneline-output.patch</changelog>
  <changelog author="kukuk@suse.com" date="1586347200">- Move arpd into own subpackage to avoid libdb dependency
  [jsc#SLE-12189]</changelog>
  <changelog author="mkubecek@suse.cz" date="1587729600">- follow-up fixes backported from upstream (bsc#1160242):
  ip-fix-link-type-and-vlan-oneline-output.patch
  ip-xfrm-Fix-help-messages.patch
  ip-link-xstats-fix-TX-IGMP-reports-string.patch
  erspan-set-erspan_ver-to-1-by-default.patch
  xfrm-not-try-to-delete-ipcomp-states-when-using-dele.patch
  nexthop-fix-error-reporting-in-filter-dump.patch
- refresh:
  xfrm-support-displaying-transformations-used-for-Mob.patch
- fix duplicated patch metadata:
  introduce-print_masked_u16-and-print_masked_u32.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633089600">- follow-up fixes backported from upstream (bsc#1160242):
  ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633348800">- follow-up fixes backported from upstream (bsc#1160242):
  ss-fix-end-of-line-printing-in-misc-ss.c.patch
  xfrm-also-check-for-ipv6-state-in-xfrm_state_keep.patch
  bridge-Fix-typo.patch
  bridge-Fix-output-with-empty-vlan-lists.patch
  tc-action-fix-time-values-output-in-JSON-format.patch
  Revert-bpf-replace-snprintf-with-asprintf-when-deali.patch
  bpf-Fixes-a-snprintf-truncation-warning.patch
  tipc-fixed-a-compile-warning-in-tipc-link.c.patch
  ip-xfrm-update-man-page-on-setting-printing-XFRMA_IF.patch
  bridge-fdb-show-fix-fdb-entry-state-output-for-json-.patch
  ip-link-Fix-indenting-in-help-text.patch
  ip-iplink_ipoib.c-Remove-extra-spaces.patch
  devlink-fix-uninitialized-warning.patch
  bridge-fix-string-length-warning.patch
  f_u32-fix-compiler-gcc-10-compiler-warning.patch
  rdma-Fix-statistics-bind-unbing-argument-handling.patch
  lib-namespace-fix-ip-all-netns-return-code.patch
  lib-bpf-Fix-and-simplify-bpf_mnt_check_target.patch
  lib-fs-avoid-double-call-to-mkdir-on-make_path.patch
  q_cake-Fix-incorrect-printing-of-signed-values-in-cl.patch
  ip-xfrm-limit-the-length-of-the-security-context-nam.patch
  erspan-fix-JSON-output.patch
  devlink-always-check-strslashrsplit-return-value.patch
  nexthop-fix-memory-leak-in-add_nh_group_attr.patch
  rdma-stat-initialize-ret-in-stat_qp_show_parse_cb.patch
  rdma-stat-fix-return-code.patch
  lib-bpf_legacy-treat-0-as-a-valid-file-descriptor.patch
  lib-bpf_legacy-fix-missing-socket-close-when-connect.patch
  ip-drop-2-char-command-assumption.patch
  man-fix-syntax-for-ip-link-property.patch
  lib-bpf_legacy-avoid-to-pass-invalid-argument-to-clo.patch
  ip-route-ignore-ENOENT-during-save-if-RT_TABLE_MAIN-.patch
  libnetlink-check-error-handler-is-present-before-a-c.patch
  ipmonitor-Fix-recvmsg-with-ancillary-data.patch
  tc-u32-Fix-key-folding-in-sample-option.patch
  man-bridge-fix-the-typo-to-change-c-lor-into-c-olor-.patch
  ss-fix-fallback-to-procfs-for-raw-sockets.patch
  iptuntap-fix-multi-queue-flag-display.patch
  tc-f_flower-fix-port-range-parsing.patch
  lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
- refresh:
  ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633435200">- upgrade to upstream version 5.14 (jsc#SLE-17360 jsc#SLE-18994
  jsc#SLE-19271)
  * replace upstream tarball and signature
  * update specfile with changes from Factory package
  * drop mainline backports contained in 5.14:
  - Revert-bpf-replace-snprintf-with-asprintf-when-deali.patch
  - bpf-Fixes-a-snprintf-truncation-warning.patch
  - bpf-replace-snprintf-with-asprintf-when-dealing-with.patch
  - bridge-Deduplicate-vlan-show-functions.patch
  - bridge-Fix-BRIDGE_VLAN_TUNNEL-attribute-sizes.patch
  - bridge-Fix-output-with-empty-vlan-lists.patch
  - bridge-Fix-src_vni-argument-in-man-page.patch
  - bridge-Fix-tunnelshow-json-output.patch
  - bridge-Fix-typo-in-error-messages.patch
  - bridge-Fix-typo.patch
  - bridge-Fix-vni-printing.patch
  - bridge-fdb-show-fix-fdb-entry-state-output-for-json-.patch
  - bridge-fix-string-length-warning.patch
  - devlink-Add-a-new-time-stamp-format-for-health-repor.patch
  - devlink-Add-helper-for-left-justification-print.patch
  - devlink-Fix-fmsg-nesting-in-non-JSON-output.patch
  - devlink-Fix-inconsistency-between-command-input-and-.patch
  - devlink-Left-justification-on-FMSG-output.patch
  - devlink-Print-health-reporter-s-dump-time-stamp-in-a.patch
  - devlink-allow-full-range-of-resource-sizes.patch
  - devlink-always-check-strslashrsplit-return-value.patch
  - devlink-fix-uninitialized-warning.patch
  - devlink-require-resource-parameters.patch
  - erspan-fix-JSON-output.patch
  - erspan-set-erspan_ver-to-1-by-default.patch
  - f_u32-fix-compiler-gcc-10-compiler-warning.patch
  - introduce-print_masked_u16-and-print_masked_u32.patch
  - ip-add-support-for-alternative-name-addition-deletio.patch
  - ip-allow-to-use-alternative-names-as-handle.patch
  - ip-drop-2-char-command-assumption.patch
  - ip-fix-ip-route-show-json-output-for-multipath-nexth.patch
  - ip-fix-link-type-and-vlan-oneline-output.patch
  - ip-fix-oneline-output.patch
  - ip-iplink_ipoib.c-Remove-extra-spaces.patch
  - ip-link-Fix-indenting-in-help-text.patch
  - ip-link-xstats-fix-TX-IGMP-reports-string.patch
  - ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  - ip-route-ignore-ENOENT-during-save-if-RT_TABLE_MAIN-.patch
  - ip-xfrm-Fix-help-messages.patch
  - ip-xfrm-if_id-ve-value-is-error.patch
  - ip-xfrm-limit-the-length-of-the-security-context-nam.patch
  - ip-xfrm-update-man-page-on-setting-printing-XFRMA_IF.patch
  - ipmonitor-Fix-recvmsg-with-ancillary-data.patch
  - json_print-Remove-declaration-without-implementation.patch
  - lib-bpf-Fix-and-simplify-bpf_mnt_check_target.patch
  - lib-bpf_legacy-avoid-to-pass-invalid-argument-to-clo.patch
  - lib-bpf_legacy-fix-missing-socket-close-when-connect.patch
  - lib-bpf_legacy-treat-0-as-a-valid-file-descriptor.patch
  - lib-fs-avoid-double-call-to-mkdir-on-make_path.patch
  - lib-ll_map-cache-alternative-names.patch
  - lib-namespace-fix-ip-all-netns-return-code.patch
  - libnetlink-check-error-handler-is-present-before-a-c.patch
  - man-bridge-fix-the-typo-to-change-c-lor-into-c-olor-.patch
  - man-fix-syntax-for-ip-link-property.patch
  - nexthop-fix-error-reporting-in-filter-dump.patch
  - nexthop-fix-memory-leak-in-add_nh_group_attr.patch
  - q_cake-Fix-incorrect-printing-of-signed-values-in-cl.patch
  - rdma-Fix-statistics-bind-unbing-argument-handling.patch
  - rdma-stat-fix-return-code.patch
  - rdma-stat-initialize-ret-in-stat_qp_show_parse_cb.patch
  - ss-fix-end-of-line-printing-in-misc-ss.c.patch
  - ss-fix-fallback-to-procfs-for-raw-sockets.patch
  - tc-action-fix-time-values-output-in-JSON-format.patch
  - tc-fix-segmentation-fault-on-gact-action.patch
  - tc-fix-warning-in-tc-q_pie.c.patch
  - tc-flower-fix-output-for-ip-tos-and-ttl.patch
  - tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch
  - tc-fq_codel-fix-missing-statistic-in-JSON-output.patch
  - tc-pie-add-dq_rate_estimator-option.patch
  - tc-u32-Fix-key-folding-in-sample-option.patch
  - tc_util-add-an-option-to-print-masked-numbers-with-w.patch
  - tc_util-add-functions-for-big-endian-masked-numbers.patch
  - tc_util-introduce-a-function-to-print-JSON-non-JSON-.patch
  - testsuite-Fix-line-count-test.patch
  - tipc-fixed-a-compile-warning-in-tipc-link.c.patch
  - xfrm-also-check-for-ipv6-state-in-xfrm_state_keep.patch
  - xfrm-not-try-to-delete-ipcomp-states-when-using-dele.patch
  * drop non-upstream patches obsoleted by rebase to 5.14:
  - sync-UAPI-header-copies-with-SLE15-SP2.patch
  - examples-fix-bashisms-in-example-script.patch
  * refresh remaining patches:
  - lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
  - split-link-and-compile-steps-for-binaries.patch
  - tc-f_flower-fix-port-range-parsing.patch
  - xfrm-support-displaying-transformations-used-for-Mob.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633435201">- follow-up fixes backported from upstream (bsc#1191316):
  tree-wide-fix-some-typos-found-by-Lintian.patch
  configure-restore-backward-compatibility.patch
  man-ip-link-remove-double-of.patch
  mptcp-unbreak-JSON-endpoint-list.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1705492800">- upgrade to upstream version 6.4 (jsc#PED-6820 jsc#PED-6844)
  * for detailed list of changes between 5.14 and 6.4, see Factory
    package changelog
  * replace upstream tarball and signature
  * update specfile with changes from Factory package
  * drop mainline backports contained in 6.4:
  - tree-wide-fix-some-typos-found-by-Lintian.patch
  - configure-restore-backward-compatibility.patch
  - man-ip-link-remove-double-of.patch
  - iptuntap-fix-multi-queue-flag-display.patch
  - tc-f_flower-fix-port-range-parsing.patch
  - lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
  - mptcp-unbreak-JSON-endpoint-list.patch
  * drop non-upstream patch obsoleted by rebase to 6.4:
  - xfrm-support-displaying-transformations-used-for-Mob.patch
  * refresh remaining patches:
  - adjust-installation-directories-for-openSUSE-SLE.patch
  - use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  - add-explicit-typecast-to-avoid-gcc-warning.patch
  - split-link-and-compile-steps-for-binaries.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1713873600">- iproute2.spec: ensure execute permissions of supplied scripts
  (fixes IBS build failure)</changelog>
  <changelog author="mkubecek@suse.cz" date="1713873601">- support display of bound but unconnected sockets (bsc#1204562)
  * ss-Add-support-for-dumping-TCP-bound-inactive-socket.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1742385600">- avoid spurious cgroup warning (bsc#1234383):
  - ss-Tone-down-cgroup-path-resolution.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1746792000">- add post-6.4 follow-up fixes (bsc#1243005):
  * bpf-fix-warning-from-basename.patch
  * bridge-fdb-add-an-error-print-for-unknown-command.patch
  * bridge-vni-Accept-del-command.patch
  * bridge-vni-Fix-duplicate-group-and-remote-error-mess.patch
  * bridge-vni-Fix-vni-filter-help-strings.patch
  * bridge-vni-Remove-dead-code-in-group-argument-parsin.patch
  * bridge-vni-Report-duplicate-vni-argument-using-dupar.patch
  * f_flower-Treat-port-0-as-valid.patch
  * genl-ctrl.c-spelling-fix-in-error-message.patch
  * ip-Add-missing-echo-option-to-usage.patch
  * ip-Add-missing-stats-command-to-usage.patch
  * ip-ipmroute-use-preferred_family-to-get-prefix.patch
  * ip-remove-non-existent-amt-subcommand-from-usage.patch
  * iplink-fix-fd-leak-when-playing-with-netns.patch
  * iplink_bridge-fix-incorrect-root-id-dump.patch
  * iplink_xstats-spelling-fix-in-error-message.patch
  * iproute2-fix-type-incompatibility-in-ifstat.c.patch
  * iproute2-prevent-memory-leak.patch
  * libnetlink-validate-nlmsg-header-length-first.patch
  * man-devlink-resource-add-missing-words-in-the-exampl.patch
  * mnl_utils-sanitize-incoming-netlink-payload-size-in-.patch
  * rdma-Fix-help-information-of-rdma-resource.patch
  * rdma-Fix-the-error-of-accessing-string-variable-outs.patch
  * rdma-use-print_XXX-instead-of-COLOR_NONE.patch
  * ss-Fix-socket-type-check-in-packet_show_line.patch
  * ss-fix-directory-leak-when-T-option-is-used.patch
  * ss-mptcp-display-info-counters-as-unsigned.patch
  * ss-prevent-Process-column-from-being-printed-unless-.patch
  * tc-taprio-don-t-print-netlink-attributes-which-weren.patch
  * tc-taprio-fix-JSON-output-when-TCA_TAPRIO_ATTR_ADMIN.patch
  * tc-taprio-fix-parsing-of-fp-option-when-it-doesn-t-a.patch
  * vdpa-consume-device_features-parameter.patch
- add to blacklist:
  * af0ea2cd0b9e (duplicate of 92eac7e4bf14)
- refresh:
  * ss-Add-support-for-dumping-TCP-bound-inactive-socket.patch
  * add-explicit-typecast-to-avoid-gcc-warning.patch
  * use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1746878400">- add post-6.4 follow-up fix (bsc#1243005)
  * ss-show-extra-info-when-processes-is-not-used.patch</changelog>
  <changelog author="sjaeckel@suse.de" date="1756296000">- devlink: support ipsec_crypto and ipsec_packet cap (bsc#1248660)
  * add Update-kernel-headers.patch
  * add devlink-Support-setting-port-function-ipsec_crypto-c.patch
  * add devlink-Support-setting-port-function-ipsec_packet-c.patch
  * refresh ss-Tone-down-cgroup-path-resolution.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1757592000">- sync UAPI header copies with SLE15-SP6 kernel
  * sync-UAPI-header-copies-with-SLE15-SP6.patch
- drop Update-kernel-headers.patch
  (no longer needed with full UAPI sync)</changelog>
  <changelog author="mkubecek@suse.cz" date="1757592001">- add post-6.4 follow-up fixes (bsc#1243005)
  * patches/bond-fix-stack-smash-in-xstats.patch
  * patches/tc-gred-fix-debug-print.patch</changelog>
</package>
<package pkgid="1f37bb808957ba5e950a6e7435f17c93b58efda8b10f3ec3555bccbc3dc46e34" name="iproute2-arpd" arch="x86_64">
  <version epoch="0" ver="6.4" rel="150600.7.12.1"/>
  <changelog author="mkubecek@suse.cz" date="1547726400">- VF stats backport for SLE15-SP1 (fate#326021 bsc#1104003):
  ip-Add-violation-counters-to-VF-statisctics.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1569499200">- upgrade to upstream version 5.3 (jsc#SLE-7290)
  * replace upstream tarball and signature
  * import specfile updates from Factory package
  * drop mainline backports contained in 5.3:
  - bpf-remove-obsolete-samples.patch
  - utils-return-default-family-when-rtm_family-is-not-R.patch
  - Really-fix-get_addr-and-get_prefix-error-messages.patch
  - iproute-Add-support-for-extended-ack-to-rtnl_talk.patch
  - ss-enclose-IPv6-address-in-brackets.patch
  - lib-fix-extended-ack-with-and-without-libmnl.patch
  - lib-need-to-pass-LIBMNL-flag.patch
  - tc-ip-more-Makefile-updates-for-LIBMNL.patch
  - change-how-Config-is-used-in-Makefile-s.patch
  - lib-Dump-ext-ack-string-by-default.patch
  - bpf-unbreak-libelf-linkage-for-bpf-obj-loader.patch
  - libnetlink-Fix-extack-attribute-parsing.patch
  - ifstat-Fix-memleak-in-dump_kern_db-for-json-output.patch
  - ss-Fix-potential-memleak-in-unix_stats_print.patch
  - utils-Move-BIT-macro-to-common-header.patch
  - rdma-Add-basic-infrastructure-for-RDMA-tool.patch
  - rdma-Add-dev-object.patch
  - rdma-Add-link-object.patch
  - rdma-Add-json-and-pretty-outputs.patch
  - rdma-Implement-json-output-for-dev-object.patch
  - rdma-Add-json-output-to-link-object.patch
  - rdma-Add-initial-manual-for-the-tool.patch
  - iproute-Fix-for-missing-Oifs-display.patch
  - ipmaddr-Avoid-accessing-uninitialized-data.patch
  - rdma-fix-duplicate-initialization-in-port_names.patch
  - ss-Fix-for-added-diag-support-check.patch
  - link_gre6-Fix-for-changing-tclass-flowlabel.patch
  - iplink-check-for-message-truncation-in-iplink_get.patch
  - iplink-double-the-buffer-size-also-in-iplink_get.patch
  - tc-actions-store-and-dump-correct-length-of-user-coo.patch
  - json_writer-add-new-json-handlers-null-float-with-fo.patch
  - doc-remove-obsolete-ip-tunnels-documentation.patch
  - doc-remove-outdated-ss-documentation.patch
  - doc-remove-outdated-arpd-documentation.patch
  - doc-remove-outdated-nstat-rtstat-documentation.patch
  - doc-remove-outdated-tc-filters-documentation.patch
  - doc-remove-outdated-IPv6-flow-label-document.patch
  - doc-drop-old-ip-command-documentation.patch
  - ss-Distinguish-between-IPv4-and-IPv6-wildcard-socket.patch
  - ip-maddr-fix-filtering-by-device.patch
  - man-add-additional-explainations-for-ss.patch
  - lib-libnetlink-re-malloc-buff-if-size-is-not-enough.patch
  - lib-libnetlink-update-rtnl_talk-to-support-malloc-bu.patch
  - tc-move-action-cookie-print-out-of-the-stats-if.patch
  - tc-remove-action-cookie-len-from-printout.patch
  - link_gre6-Detect-invalid-encaplimit-values.patch
  - man-tc-csum.8-Fix-inconsistency-in-example-descripti.patch
  - tc-bash-completion-add-missing-classid-keyword.patch
  - tc-fix-command-tc-actions-del-hang-issue.patch
  - gre-ip6tnl-tunnel-Fix-noencap-support.patch
  - Restore-no-print-directory-option-for-silent-builds.patch
  - iplink-Validate-minimum-tx-rate-is-less-than-maximum.patch
  - ipaddress-Make-sure-VF-min-max-rate-API-is-supported.patch
  - rdma-Reduce-scope-of-_dev_map_lookup-call.patch
  - rdma-Protect-dev_map_lookup-from-wrong-input.patch
  - rdma-Move-per-device-handler-function-to-generic-cod.patch
  - rdma-Fix-misspelled-SYS_IMAGE_GUID.patch
  - rdma-Check-that-port-index-exists-before-operate-on-.patch
  - rdma-Rename-free-function-to-be-rd_cleanup.patch
  - rdma-Rename-rd_free_devmap-to-be-rd_free.patch
  - rdma-Move-link-execution-logic-to-common-code.patch
  - rdma-Add-option-to-provide-sign-for-the-port-number.patch
  - rdma-Make-visible-the-number-of-arguments.patch
  - rdma-Add-filtering-infrastructure.patch
  - rdma-Set-pointer-to-device-name-position.patch
  - rdma-Add-resource-tracking-summary.patch
  - rdma-Add-QP-resource-tracking-information.patch
  - rdma-Check-return-value-of-strdup-call.patch
  - README-update-location-of-git-repositories-remove-br.patch
  - Remove-leftovers-from-removed-Latex-documentation.patch
  - README-re-add-updated-information-link.patch
  - rdma-Avoid-memory-leak-for-skipper-resource.patch
  - ip-link-Fix-use-after-free-in-nl_get_ll_addr_len.patch
  - ip-address-Fix-negative-prints-of-large-TX-rate-limi.patch
  - devlink-fix-port-new-monitoring-message-typo.patch
  - rdma-Add-CM_ID-resource-tracking-information.patch
  - rdma-Add-CQ-resource-tracking-information.patch
  - rdma-Add-MR-resource-tracking-information.patch
  - rdma-Add-PD-resource-tracking-information.patch
  - rdma-Ignore-unknown-netlink-attributes.patch
  - bridge-fix-typo-in-hairpin-error-message.patch
  - iproute-Abort-if-nexthop-cannot-be-parsed.patch
  - iplink_vrf-Save-device-index-from-response-for-retur.patch
  - rdma-Print-net-device-name-and-index-for-RDMA-device.patch
  - rdma-print-driver-resource-attributes.patch
  - rdma-sync-some-IP-headers-with-glibc.patch
  - devlink-CTRL_ATTR_FAMILY_ID-is-a-u16.patch
  - ip-Add-violation-counters-to-VF-statisctics.patch
  - ip-route-Fix-segfault-with-many-nexthops.patch
  - rdma-Fix-representation-of-PortInfo-CapabilityMask.patch
  - macsec-fix-off-by-one-when-parsing-attributes.patch
  - rdma-Fix-for-ineffective-check-in-add_filter.patch
  - ip-route-Fix-for-memleak-in-error-path.patch
  - rdma-Don-t-pass-garbage-to-rd_check_is_filtered.patch
  - ip-route-Fix-parse_encap_seg6-srh-parsing.patch
  - rdma-Refresh-help-section-of-resource-information.patch
  - tc-f_u32-allow-skip_hw-and-skip_sw-flags-to-be-last.patch
  - ip-route-Fix-nexthop-encap-parsing.patch
  - rdma-Fix-broken-32-bit-compilation.patch
  - rdma-Fix-incorrectly-handled-NLA-validation.patch
  - rdma-Introduce-command-execution-helper-with-require.patch
  - rdma-Add-an-option-to-rename-IB-device-interface.patch
  - rdma-Add-print-of-link-CapabilityMask2-flags.patch
  * drop non-upstream patches obsoleted by rebase to 5.3:
  - sync-UAPI-header-copies-with-SLE15-SP1.patch
  - man-fix-documentation-references-in-manual-pages.patch
  * refresh remaining patches:
  - adjust-installation-directories-for-openSUSE-SLE.patch
  - use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  - add-explicit-typecast-to-avoid-gcc-warning.patch
  - xfrm-support-displaying-transformations-used-for-Mob.patch
  - split-link-and-compile-steps-for-binaries.patch
  - examples-fix-bashisms-in-example-script.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1578484800">- follow-up fixes backported from upstream (bsc#1160242):
  bpf-replace-snprintf-with-asprintf-when-dealing-with.patch
  bridge-Deduplicate-vlan-show-functions.patch
  bridge-Fix-BRIDGE_VLAN_TUNNEL-attribute-sizes.patch
  bridge-Fix-src_vni-argument-in-man-page.patch
  bridge-Fix-tunnelshow-json-output.patch
  bridge-Fix-typo-in-error-messages.patch
  bridge-Fix-vni-printing.patch
  devlink-Add-a-new-time-stamp-format-for-health-repor.patch
  devlink-Add-helper-for-left-justification-print.patch
  devlink-Fix-fmsg-nesting-in-non-JSON-output.patch
  devlink-Fix-inconsistency-between-command-input-and-.patch
  devlink-Left-justification-on-FMSG-output.patch
  devlink-Print-health-reporter-s-dump-time-stamp-in-a.patch
  devlink-allow-full-range-of-resource-sizes.patch
  devlink-require-resource-parameters.patch
  introduce-print_masked_u16-and-print_masked_u32.patch
  ip-fix-ip-route-show-json-output-for-multipath-nexth.patch
  ip-xfrm-if_id-ve-value-is-error.patch
  json_print-Remove-declaration-without-implementation.patch
  sync-UAPI-header-copies-with-SLE15-SP2.patch
  tc-fix-segmentation-fault-on-gact-action.patch
  tc-fix-warning-in-tc-q_pie.c.patch
  tc-flower-fix-output-for-ip-tos-and-ttl.patch
  tc-fq_codel-fix-missing-statistic-in-JSON-output.patch
  tc-pie-add-dq_rate_estimator-option.patch
  tc_util-add-an-option-to-print-masked-numbers-with-w.patch
  tc_util-add-functions-for-big-endian-masked-numbers.patch
  tc_util-introduce-a-function-to-print-JSON-non-JSON-.patch
  testsuite-Fix-line-count-test.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1578484801">- support alternative names as we already support them in SLE15-SP2
  kernel (jsc#SLE-7290):
  lib-ll_map-cache-alternative-names.patch
  ip-add-support-for-alternative-name-addition-deletio.patch
  ip-allow-to-use-alternative-names-as-handle.patch
  ip-fix-oneline-output.patch</changelog>
  <changelog author="kukuk@suse.com" date="1586347200">- Move arpd into own subpackage to avoid libdb dependency
  [jsc#SLE-12189]</changelog>
  <changelog author="mkubecek@suse.cz" date="1587729600">- follow-up fixes backported from upstream (bsc#1160242):
  ip-fix-link-type-and-vlan-oneline-output.patch
  ip-xfrm-Fix-help-messages.patch
  ip-link-xstats-fix-TX-IGMP-reports-string.patch
  erspan-set-erspan_ver-to-1-by-default.patch
  xfrm-not-try-to-delete-ipcomp-states-when-using-dele.patch
  nexthop-fix-error-reporting-in-filter-dump.patch
- refresh:
  xfrm-support-displaying-transformations-used-for-Mob.patch
- fix duplicated patch metadata:
  introduce-print_masked_u16-and-print_masked_u32.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633089600">- follow-up fixes backported from upstream (bsc#1160242):
  ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633348800">- follow-up fixes backported from upstream (bsc#1160242):
  ss-fix-end-of-line-printing-in-misc-ss.c.patch
  xfrm-also-check-for-ipv6-state-in-xfrm_state_keep.patch
  bridge-Fix-typo.patch
  bridge-Fix-output-with-empty-vlan-lists.patch
  tc-action-fix-time-values-output-in-JSON-format.patch
  Revert-bpf-replace-snprintf-with-asprintf-when-deali.patch
  bpf-Fixes-a-snprintf-truncation-warning.patch
  tipc-fixed-a-compile-warning-in-tipc-link.c.patch
  ip-xfrm-update-man-page-on-setting-printing-XFRMA_IF.patch
  bridge-fdb-show-fix-fdb-entry-state-output-for-json-.patch
  ip-link-Fix-indenting-in-help-text.patch
  ip-iplink_ipoib.c-Remove-extra-spaces.patch
  devlink-fix-uninitialized-warning.patch
  bridge-fix-string-length-warning.patch
  f_u32-fix-compiler-gcc-10-compiler-warning.patch
  rdma-Fix-statistics-bind-unbing-argument-handling.patch
  lib-namespace-fix-ip-all-netns-return-code.patch
  lib-bpf-Fix-and-simplify-bpf_mnt_check_target.patch
  lib-fs-avoid-double-call-to-mkdir-on-make_path.patch
  q_cake-Fix-incorrect-printing-of-signed-values-in-cl.patch
  ip-xfrm-limit-the-length-of-the-security-context-nam.patch
  erspan-fix-JSON-output.patch
  devlink-always-check-strslashrsplit-return-value.patch
  nexthop-fix-memory-leak-in-add_nh_group_attr.patch
  rdma-stat-initialize-ret-in-stat_qp_show_parse_cb.patch
  rdma-stat-fix-return-code.patch
  lib-bpf_legacy-treat-0-as-a-valid-file-descriptor.patch
  lib-bpf_legacy-fix-missing-socket-close-when-connect.patch
  ip-drop-2-char-command-assumption.patch
  man-fix-syntax-for-ip-link-property.patch
  lib-bpf_legacy-avoid-to-pass-invalid-argument-to-clo.patch
  ip-route-ignore-ENOENT-during-save-if-RT_TABLE_MAIN-.patch
  libnetlink-check-error-handler-is-present-before-a-c.patch
  ipmonitor-Fix-recvmsg-with-ancillary-data.patch
  tc-u32-Fix-key-folding-in-sample-option.patch
  man-bridge-fix-the-typo-to-change-c-lor-into-c-olor-.patch
  ss-fix-fallback-to-procfs-for-raw-sockets.patch
  iptuntap-fix-multi-queue-flag-display.patch
  tc-f_flower-fix-port-range-parsing.patch
  lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
- refresh:
  ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633435200">- upgrade to upstream version 5.14 (jsc#SLE-17360 jsc#SLE-18994
  jsc#SLE-19271)
  * replace upstream tarball and signature
  * update specfile with changes from Factory package
  * drop mainline backports contained in 5.14:
  - Revert-bpf-replace-snprintf-with-asprintf-when-deali.patch
  - bpf-Fixes-a-snprintf-truncation-warning.patch
  - bpf-replace-snprintf-with-asprintf-when-dealing-with.patch
  - bridge-Deduplicate-vlan-show-functions.patch
  - bridge-Fix-BRIDGE_VLAN_TUNNEL-attribute-sizes.patch
  - bridge-Fix-output-with-empty-vlan-lists.patch
  - bridge-Fix-src_vni-argument-in-man-page.patch
  - bridge-Fix-tunnelshow-json-output.patch
  - bridge-Fix-typo-in-error-messages.patch
  - bridge-Fix-typo.patch
  - bridge-Fix-vni-printing.patch
  - bridge-fdb-show-fix-fdb-entry-state-output-for-json-.patch
  - bridge-fix-string-length-warning.patch
  - devlink-Add-a-new-time-stamp-format-for-health-repor.patch
  - devlink-Add-helper-for-left-justification-print.patch
  - devlink-Fix-fmsg-nesting-in-non-JSON-output.patch
  - devlink-Fix-inconsistency-between-command-input-and-.patch
  - devlink-Left-justification-on-FMSG-output.patch
  - devlink-Print-health-reporter-s-dump-time-stamp-in-a.patch
  - devlink-allow-full-range-of-resource-sizes.patch
  - devlink-always-check-strslashrsplit-return-value.patch
  - devlink-fix-uninitialized-warning.patch
  - devlink-require-resource-parameters.patch
  - erspan-fix-JSON-output.patch
  - erspan-set-erspan_ver-to-1-by-default.patch
  - f_u32-fix-compiler-gcc-10-compiler-warning.patch
  - introduce-print_masked_u16-and-print_masked_u32.patch
  - ip-add-support-for-alternative-name-addition-deletio.patch
  - ip-allow-to-use-alternative-names-as-handle.patch
  - ip-drop-2-char-command-assumption.patch
  - ip-fix-ip-route-show-json-output-for-multipath-nexth.patch
  - ip-fix-link-type-and-vlan-oneline-output.patch
  - ip-fix-oneline-output.patch
  - ip-iplink_ipoib.c-Remove-extra-spaces.patch
  - ip-link-Fix-indenting-in-help-text.patch
  - ip-link-xstats-fix-TX-IGMP-reports-string.patch
  - ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  - ip-route-ignore-ENOENT-during-save-if-RT_TABLE_MAIN-.patch
  - ip-xfrm-Fix-help-messages.patch
  - ip-xfrm-if_id-ve-value-is-error.patch
  - ip-xfrm-limit-the-length-of-the-security-context-nam.patch
  - ip-xfrm-update-man-page-on-setting-printing-XFRMA_IF.patch
  - ipmonitor-Fix-recvmsg-with-ancillary-data.patch
  - json_print-Remove-declaration-without-implementation.patch
  - lib-bpf-Fix-and-simplify-bpf_mnt_check_target.patch
  - lib-bpf_legacy-avoid-to-pass-invalid-argument-to-clo.patch
  - lib-bpf_legacy-fix-missing-socket-close-when-connect.patch
  - lib-bpf_legacy-treat-0-as-a-valid-file-descriptor.patch
  - lib-fs-avoid-double-call-to-mkdir-on-make_path.patch
  - lib-ll_map-cache-alternative-names.patch
  - lib-namespace-fix-ip-all-netns-return-code.patch
  - libnetlink-check-error-handler-is-present-before-a-c.patch
  - man-bridge-fix-the-typo-to-change-c-lor-into-c-olor-.patch
  - man-fix-syntax-for-ip-link-property.patch
  - nexthop-fix-error-reporting-in-filter-dump.patch
  - nexthop-fix-memory-leak-in-add_nh_group_attr.patch
  - q_cake-Fix-incorrect-printing-of-signed-values-in-cl.patch
  - rdma-Fix-statistics-bind-unbing-argument-handling.patch
  - rdma-stat-fix-return-code.patch
  - rdma-stat-initialize-ret-in-stat_qp_show_parse_cb.patch
  - ss-fix-end-of-line-printing-in-misc-ss.c.patch
  - ss-fix-fallback-to-procfs-for-raw-sockets.patch
  - tc-action-fix-time-values-output-in-JSON-format.patch
  - tc-fix-segmentation-fault-on-gact-action.patch
  - tc-fix-warning-in-tc-q_pie.c.patch
  - tc-flower-fix-output-for-ip-tos-and-ttl.patch
  - tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch
  - tc-fq_codel-fix-missing-statistic-in-JSON-output.patch
  - tc-pie-add-dq_rate_estimator-option.patch
  - tc-u32-Fix-key-folding-in-sample-option.patch
  - tc_util-add-an-option-to-print-masked-numbers-with-w.patch
  - tc_util-add-functions-for-big-endian-masked-numbers.patch
  - tc_util-introduce-a-function-to-print-JSON-non-JSON-.patch
  - testsuite-Fix-line-count-test.patch
  - tipc-fixed-a-compile-warning-in-tipc-link.c.patch
  - xfrm-also-check-for-ipv6-state-in-xfrm_state_keep.patch
  - xfrm-not-try-to-delete-ipcomp-states-when-using-dele.patch
  * drop non-upstream patches obsoleted by rebase to 5.14:
  - sync-UAPI-header-copies-with-SLE15-SP2.patch
  - examples-fix-bashisms-in-example-script.patch
  * refresh remaining patches:
  - lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
  - split-link-and-compile-steps-for-binaries.patch
  - tc-f_flower-fix-port-range-parsing.patch
  - xfrm-support-displaying-transformations-used-for-Mob.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633435201">- follow-up fixes backported from upstream (bsc#1191316):
  tree-wide-fix-some-typos-found-by-Lintian.patch
  configure-restore-backward-compatibility.patch
  man-ip-link-remove-double-of.patch
  mptcp-unbreak-JSON-endpoint-list.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1705492800">- upgrade to upstream version 6.4 (jsc#PED-6820 jsc#PED-6844)
  * for detailed list of changes between 5.14 and 6.4, see Factory
    package changelog
  * replace upstream tarball and signature
  * update specfile with changes from Factory package
  * drop mainline backports contained in 6.4:
  - tree-wide-fix-some-typos-found-by-Lintian.patch
  - configure-restore-backward-compatibility.patch
  - man-ip-link-remove-double-of.patch
  - iptuntap-fix-multi-queue-flag-display.patch
  - tc-f_flower-fix-port-range-parsing.patch
  - lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
  - mptcp-unbreak-JSON-endpoint-list.patch
  * drop non-upstream patch obsoleted by rebase to 6.4:
  - xfrm-support-displaying-transformations-used-for-Mob.patch
  * refresh remaining patches:
  - adjust-installation-directories-for-openSUSE-SLE.patch
  - use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  - add-explicit-typecast-to-avoid-gcc-warning.patch
  - split-link-and-compile-steps-for-binaries.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1713873600">- iproute2.spec: ensure execute permissions of supplied scripts
  (fixes IBS build failure)</changelog>
  <changelog author="mkubecek@suse.cz" date="1713873601">- support display of bound but unconnected sockets (bsc#1204562)
  * ss-Add-support-for-dumping-TCP-bound-inactive-socket.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1742385600">- avoid spurious cgroup warning (bsc#1234383):
  - ss-Tone-down-cgroup-path-resolution.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1746792000">- add post-6.4 follow-up fixes (bsc#1243005):
  * bpf-fix-warning-from-basename.patch
  * bridge-fdb-add-an-error-print-for-unknown-command.patch
  * bridge-vni-Accept-del-command.patch
  * bridge-vni-Fix-duplicate-group-and-remote-error-mess.patch
  * bridge-vni-Fix-vni-filter-help-strings.patch
  * bridge-vni-Remove-dead-code-in-group-argument-parsin.patch
  * bridge-vni-Report-duplicate-vni-argument-using-dupar.patch
  * f_flower-Treat-port-0-as-valid.patch
  * genl-ctrl.c-spelling-fix-in-error-message.patch
  * ip-Add-missing-echo-option-to-usage.patch
  * ip-Add-missing-stats-command-to-usage.patch
  * ip-ipmroute-use-preferred_family-to-get-prefix.patch
  * ip-remove-non-existent-amt-subcommand-from-usage.patch
  * iplink-fix-fd-leak-when-playing-with-netns.patch
  * iplink_bridge-fix-incorrect-root-id-dump.patch
  * iplink_xstats-spelling-fix-in-error-message.patch
  * iproute2-fix-type-incompatibility-in-ifstat.c.patch
  * iproute2-prevent-memory-leak.patch
  * libnetlink-validate-nlmsg-header-length-first.patch
  * man-devlink-resource-add-missing-words-in-the-exampl.patch
  * mnl_utils-sanitize-incoming-netlink-payload-size-in-.patch
  * rdma-Fix-help-information-of-rdma-resource.patch
  * rdma-Fix-the-error-of-accessing-string-variable-outs.patch
  * rdma-use-print_XXX-instead-of-COLOR_NONE.patch
  * ss-Fix-socket-type-check-in-packet_show_line.patch
  * ss-fix-directory-leak-when-T-option-is-used.patch
  * ss-mptcp-display-info-counters-as-unsigned.patch
  * ss-prevent-Process-column-from-being-printed-unless-.patch
  * tc-taprio-don-t-print-netlink-attributes-which-weren.patch
  * tc-taprio-fix-JSON-output-when-TCA_TAPRIO_ATTR_ADMIN.patch
  * tc-taprio-fix-parsing-of-fp-option-when-it-doesn-t-a.patch
  * vdpa-consume-device_features-parameter.patch
- add to blacklist:
  * af0ea2cd0b9e (duplicate of 92eac7e4bf14)
- refresh:
  * ss-Add-support-for-dumping-TCP-bound-inactive-socket.patch
  * add-explicit-typecast-to-avoid-gcc-warning.patch
  * use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1746878400">- add post-6.4 follow-up fix (bsc#1243005)
  * ss-show-extra-info-when-processes-is-not-used.patch</changelog>
  <changelog author="sjaeckel@suse.de" date="1756296000">- devlink: support ipsec_crypto and ipsec_packet cap (bsc#1248660)
  * add Update-kernel-headers.patch
  * add devlink-Support-setting-port-function-ipsec_crypto-c.patch
  * add devlink-Support-setting-port-function-ipsec_packet-c.patch
  * refresh ss-Tone-down-cgroup-path-resolution.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1757592000">- sync UAPI header copies with SLE15-SP6 kernel
  * sync-UAPI-header-copies-with-SLE15-SP6.patch
- drop Update-kernel-headers.patch
  (no longer needed with full UAPI sync)</changelog>
  <changelog author="mkubecek@suse.cz" date="1757592001">- add post-6.4 follow-up fixes (bsc#1243005)
  * patches/bond-fix-stack-smash-in-xstats.patch
  * patches/tc-gred-fix-debug-print.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1775649600">- add CVE fix (CVE-2024-58251 bsc#1254324)
  * ss-escape-characters-in-command-name.patch</changelog>
</package>
<package pkgid="f09a4beafcceb57ae03eba9123696f3ac6df446d9b17356b7f8b0eff69270679" name="iproute2-arpd" arch="x86_64">
  <version epoch="0" ver="6.4" rel="150600.7.9.1"/>
  <changelog author="mkubecek@suse.cz" date="1547726400">- RDMA backport for SLE15-SP1 (fate#326021 bsc#1104003):
  sync-UAPI-header-copies-with-SLE15-SP1.patch
  bpf-remove-obsolete-samples.patch
  json_writer-add-new-json-handlers-null-float-with-fo.patch
  rdma-Move-per-device-handler-function-to-generic-cod.patch
  rdma-Rename-free-function-to-be-rd_cleanup.patch
  rdma-Rename-rd_free_devmap-to-be-rd_free.patch
  rdma-Move-link-execution-logic-to-common-code.patch
  rdma-Add-option-to-provide-sign-for-the-port-number.patch
  rdma-Make-visible-the-number-of-arguments.patch
  rdma-Set-pointer-to-device-name-position.patch
  rdma-Add-filtering-infrastructure.patch
  rdma-Add-resource-tracking-summary.patch
  rdma-Add-QP-resource-tracking-information.patch
  rdma-Avoid-memory-leak-for-skipper-resource.patch
  rdma-Add-CM_ID-resource-tracking-information.patch
  rdma-Add-CQ-resource-tracking-information.patch
  rdma-Add-MR-resource-tracking-information.patch
  rdma-Add-PD-resource-tracking-information.patch
  rdma-Print-net-device-name-and-index-for-RDMA-device.patch
  rdma-print-driver-resource-attributes.patch
  rdma-sync-some-IP-headers-with-glibc.patch
  rdma-Fix-for-ineffective-check-in-add_filter.patch
  rdma-Don-t-pass-garbage-to-rd_check_is_filtered.patch
  rdma-Refresh-help-section-of-resource-information.patch
  rdma-Introduce-command-execution-helper-with-require.patch
  rdma-Add-an-option-to-rename-IB-device-interface.patch
  rdma-Add-print-of-link-CapabilityMask2-flags.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547726401">- VF stats backport for SLE15-SP1 (fate#326021 bsc#1104003):
  ip-Add-violation-counters-to-VF-statisctics.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1569499200">- upgrade to upstream version 5.3 (jsc#SLE-7290)
  * replace upstream tarball and signature
  * import specfile updates from Factory package
  * drop mainline backports contained in 5.3:
  - bpf-remove-obsolete-samples.patch
  - utils-return-default-family-when-rtm_family-is-not-R.patch
  - Really-fix-get_addr-and-get_prefix-error-messages.patch
  - iproute-Add-support-for-extended-ack-to-rtnl_talk.patch
  - ss-enclose-IPv6-address-in-brackets.patch
  - lib-fix-extended-ack-with-and-without-libmnl.patch
  - lib-need-to-pass-LIBMNL-flag.patch
  - tc-ip-more-Makefile-updates-for-LIBMNL.patch
  - change-how-Config-is-used-in-Makefile-s.patch
  - lib-Dump-ext-ack-string-by-default.patch
  - bpf-unbreak-libelf-linkage-for-bpf-obj-loader.patch
  - libnetlink-Fix-extack-attribute-parsing.patch
  - ifstat-Fix-memleak-in-dump_kern_db-for-json-output.patch
  - ss-Fix-potential-memleak-in-unix_stats_print.patch
  - utils-Move-BIT-macro-to-common-header.patch
  - rdma-Add-basic-infrastructure-for-RDMA-tool.patch
  - rdma-Add-dev-object.patch
  - rdma-Add-link-object.patch
  - rdma-Add-json-and-pretty-outputs.patch
  - rdma-Implement-json-output-for-dev-object.patch
  - rdma-Add-json-output-to-link-object.patch
  - rdma-Add-initial-manual-for-the-tool.patch
  - iproute-Fix-for-missing-Oifs-display.patch
  - ipmaddr-Avoid-accessing-uninitialized-data.patch
  - rdma-fix-duplicate-initialization-in-port_names.patch
  - ss-Fix-for-added-diag-support-check.patch
  - link_gre6-Fix-for-changing-tclass-flowlabel.patch
  - iplink-check-for-message-truncation-in-iplink_get.patch
  - iplink-double-the-buffer-size-also-in-iplink_get.patch
  - tc-actions-store-and-dump-correct-length-of-user-coo.patch
  - json_writer-add-new-json-handlers-null-float-with-fo.patch
  - doc-remove-obsolete-ip-tunnels-documentation.patch
  - doc-remove-outdated-ss-documentation.patch
  - doc-remove-outdated-arpd-documentation.patch
  - doc-remove-outdated-nstat-rtstat-documentation.patch
  - doc-remove-outdated-tc-filters-documentation.patch
  - doc-remove-outdated-IPv6-flow-label-document.patch
  - doc-drop-old-ip-command-documentation.patch
  - ss-Distinguish-between-IPv4-and-IPv6-wildcard-socket.patch
  - ip-maddr-fix-filtering-by-device.patch
  - man-add-additional-explainations-for-ss.patch
  - lib-libnetlink-re-malloc-buff-if-size-is-not-enough.patch
  - lib-libnetlink-update-rtnl_talk-to-support-malloc-bu.patch
  - tc-move-action-cookie-print-out-of-the-stats-if.patch
  - tc-remove-action-cookie-len-from-printout.patch
  - link_gre6-Detect-invalid-encaplimit-values.patch
  - man-tc-csum.8-Fix-inconsistency-in-example-descripti.patch
  - tc-bash-completion-add-missing-classid-keyword.patch
  - tc-fix-command-tc-actions-del-hang-issue.patch
  - gre-ip6tnl-tunnel-Fix-noencap-support.patch
  - Restore-no-print-directory-option-for-silent-builds.patch
  - iplink-Validate-minimum-tx-rate-is-less-than-maximum.patch
  - ipaddress-Make-sure-VF-min-max-rate-API-is-supported.patch
  - rdma-Reduce-scope-of-_dev_map_lookup-call.patch
  - rdma-Protect-dev_map_lookup-from-wrong-input.patch
  - rdma-Move-per-device-handler-function-to-generic-cod.patch
  - rdma-Fix-misspelled-SYS_IMAGE_GUID.patch
  - rdma-Check-that-port-index-exists-before-operate-on-.patch
  - rdma-Rename-free-function-to-be-rd_cleanup.patch
  - rdma-Rename-rd_free_devmap-to-be-rd_free.patch
  - rdma-Move-link-execution-logic-to-common-code.patch
  - rdma-Add-option-to-provide-sign-for-the-port-number.patch
  - rdma-Make-visible-the-number-of-arguments.patch
  - rdma-Add-filtering-infrastructure.patch
  - rdma-Set-pointer-to-device-name-position.patch
  - rdma-Add-resource-tracking-summary.patch
  - rdma-Add-QP-resource-tracking-information.patch
  - rdma-Check-return-value-of-strdup-call.patch
  - README-update-location-of-git-repositories-remove-br.patch
  - Remove-leftovers-from-removed-Latex-documentation.patch
  - README-re-add-updated-information-link.patch
  - rdma-Avoid-memory-leak-for-skipper-resource.patch
  - ip-link-Fix-use-after-free-in-nl_get_ll_addr_len.patch
  - ip-address-Fix-negative-prints-of-large-TX-rate-limi.patch
  - devlink-fix-port-new-monitoring-message-typo.patch
  - rdma-Add-CM_ID-resource-tracking-information.patch
  - rdma-Add-CQ-resource-tracking-information.patch
  - rdma-Add-MR-resource-tracking-information.patch
  - rdma-Add-PD-resource-tracking-information.patch
  - rdma-Ignore-unknown-netlink-attributes.patch
  - bridge-fix-typo-in-hairpin-error-message.patch
  - iproute-Abort-if-nexthop-cannot-be-parsed.patch
  - iplink_vrf-Save-device-index-from-response-for-retur.patch
  - rdma-Print-net-device-name-and-index-for-RDMA-device.patch
  - rdma-print-driver-resource-attributes.patch
  - rdma-sync-some-IP-headers-with-glibc.patch
  - devlink-CTRL_ATTR_FAMILY_ID-is-a-u16.patch
  - ip-Add-violation-counters-to-VF-statisctics.patch
  - ip-route-Fix-segfault-with-many-nexthops.patch
  - rdma-Fix-representation-of-PortInfo-CapabilityMask.patch
  - macsec-fix-off-by-one-when-parsing-attributes.patch
  - rdma-Fix-for-ineffective-check-in-add_filter.patch
  - ip-route-Fix-for-memleak-in-error-path.patch
  - rdma-Don-t-pass-garbage-to-rd_check_is_filtered.patch
  - ip-route-Fix-parse_encap_seg6-srh-parsing.patch
  - rdma-Refresh-help-section-of-resource-information.patch
  - tc-f_u32-allow-skip_hw-and-skip_sw-flags-to-be-last.patch
  - ip-route-Fix-nexthop-encap-parsing.patch
  - rdma-Fix-broken-32-bit-compilation.patch
  - rdma-Fix-incorrectly-handled-NLA-validation.patch
  - rdma-Introduce-command-execution-helper-with-require.patch
  - rdma-Add-an-option-to-rename-IB-device-interface.patch
  - rdma-Add-print-of-link-CapabilityMask2-flags.patch
  * drop non-upstream patches obsoleted by rebase to 5.3:
  - sync-UAPI-header-copies-with-SLE15-SP1.patch
  - man-fix-documentation-references-in-manual-pages.patch
  * refresh remaining patches:
  - adjust-installation-directories-for-openSUSE-SLE.patch
  - use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  - add-explicit-typecast-to-avoid-gcc-warning.patch
  - xfrm-support-displaying-transformations-used-for-Mob.patch
  - split-link-and-compile-steps-for-binaries.patch
  - examples-fix-bashisms-in-example-script.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1578484800">- follow-up fixes backported from upstream (bsc#1160242):
  bpf-replace-snprintf-with-asprintf-when-dealing-with.patch
  bridge-Deduplicate-vlan-show-functions.patch
  bridge-Fix-BRIDGE_VLAN_TUNNEL-attribute-sizes.patch
  bridge-Fix-src_vni-argument-in-man-page.patch
  bridge-Fix-tunnelshow-json-output.patch
  bridge-Fix-typo-in-error-messages.patch
  bridge-Fix-vni-printing.patch
  devlink-Add-a-new-time-stamp-format-for-health-repor.patch
  devlink-Add-helper-for-left-justification-print.patch
  devlink-Fix-fmsg-nesting-in-non-JSON-output.patch
  devlink-Fix-inconsistency-between-command-input-and-.patch
  devlink-Left-justification-on-FMSG-output.patch
  devlink-Print-health-reporter-s-dump-time-stamp-in-a.patch
  devlink-allow-full-range-of-resource-sizes.patch
  devlink-require-resource-parameters.patch
  introduce-print_masked_u16-and-print_masked_u32.patch
  ip-fix-ip-route-show-json-output-for-multipath-nexth.patch
  ip-xfrm-if_id-ve-value-is-error.patch
  json_print-Remove-declaration-without-implementation.patch
  sync-UAPI-header-copies-with-SLE15-SP2.patch
  tc-fix-segmentation-fault-on-gact-action.patch
  tc-fix-warning-in-tc-q_pie.c.patch
  tc-flower-fix-output-for-ip-tos-and-ttl.patch
  tc-fq_codel-fix-missing-statistic-in-JSON-output.patch
  tc-pie-add-dq_rate_estimator-option.patch
  tc_util-add-an-option-to-print-masked-numbers-with-w.patch
  tc_util-add-functions-for-big-endian-masked-numbers.patch
  tc_util-introduce-a-function-to-print-JSON-non-JSON-.patch
  testsuite-Fix-line-count-test.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1578484801">- support alternative names as we already support them in SLE15-SP2
  kernel (jsc#SLE-7290):
  lib-ll_map-cache-alternative-names.patch
  ip-add-support-for-alternative-name-addition-deletio.patch
  ip-allow-to-use-alternative-names-as-handle.patch
  ip-fix-oneline-output.patch</changelog>
  <changelog author="kukuk@suse.com" date="1586347200">- Move arpd into own subpackage to avoid libdb dependency
  [jsc#SLE-12189]</changelog>
  <changelog author="mkubecek@suse.cz" date="1587729600">- follow-up fixes backported from upstream (bsc#1160242):
  ip-fix-link-type-and-vlan-oneline-output.patch
  ip-xfrm-Fix-help-messages.patch
  ip-link-xstats-fix-TX-IGMP-reports-string.patch
  erspan-set-erspan_ver-to-1-by-default.patch
  xfrm-not-try-to-delete-ipcomp-states-when-using-dele.patch
  nexthop-fix-error-reporting-in-filter-dump.patch
- refresh:
  xfrm-support-displaying-transformations-used-for-Mob.patch
- fix duplicated patch metadata:
  introduce-print_masked_u16-and-print_masked_u32.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633089600">- follow-up fixes backported from upstream (bsc#1160242):
  ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633348800">- follow-up fixes backported from upstream (bsc#1160242):
  ss-fix-end-of-line-printing-in-misc-ss.c.patch
  xfrm-also-check-for-ipv6-state-in-xfrm_state_keep.patch
  bridge-Fix-typo.patch
  bridge-Fix-output-with-empty-vlan-lists.patch
  tc-action-fix-time-values-output-in-JSON-format.patch
  Revert-bpf-replace-snprintf-with-asprintf-when-deali.patch
  bpf-Fixes-a-snprintf-truncation-warning.patch
  tipc-fixed-a-compile-warning-in-tipc-link.c.patch
  ip-xfrm-update-man-page-on-setting-printing-XFRMA_IF.patch
  bridge-fdb-show-fix-fdb-entry-state-output-for-json-.patch
  ip-link-Fix-indenting-in-help-text.patch
  ip-iplink_ipoib.c-Remove-extra-spaces.patch
  devlink-fix-uninitialized-warning.patch
  bridge-fix-string-length-warning.patch
  f_u32-fix-compiler-gcc-10-compiler-warning.patch
  rdma-Fix-statistics-bind-unbing-argument-handling.patch
  lib-namespace-fix-ip-all-netns-return-code.patch
  lib-bpf-Fix-and-simplify-bpf_mnt_check_target.patch
  lib-fs-avoid-double-call-to-mkdir-on-make_path.patch
  q_cake-Fix-incorrect-printing-of-signed-values-in-cl.patch
  ip-xfrm-limit-the-length-of-the-security-context-nam.patch
  erspan-fix-JSON-output.patch
  devlink-always-check-strslashrsplit-return-value.patch
  nexthop-fix-memory-leak-in-add_nh_group_attr.patch
  rdma-stat-initialize-ret-in-stat_qp_show_parse_cb.patch
  rdma-stat-fix-return-code.patch
  lib-bpf_legacy-treat-0-as-a-valid-file-descriptor.patch
  lib-bpf_legacy-fix-missing-socket-close-when-connect.patch
  ip-drop-2-char-command-assumption.patch
  man-fix-syntax-for-ip-link-property.patch
  lib-bpf_legacy-avoid-to-pass-invalid-argument-to-clo.patch
  ip-route-ignore-ENOENT-during-save-if-RT_TABLE_MAIN-.patch
  libnetlink-check-error-handler-is-present-before-a-c.patch
  ipmonitor-Fix-recvmsg-with-ancillary-data.patch
  tc-u32-Fix-key-folding-in-sample-option.patch
  man-bridge-fix-the-typo-to-change-c-lor-into-c-olor-.patch
  ss-fix-fallback-to-procfs-for-raw-sockets.patch
  iptuntap-fix-multi-queue-flag-display.patch
  tc-f_flower-fix-port-range-parsing.patch
  lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
- refresh:
  ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633435200">- upgrade to upstream version 5.14 (jsc#SLE-17360 jsc#SLE-18994
  jsc#SLE-19271)
  * replace upstream tarball and signature
  * update specfile with changes from Factory package
  * drop mainline backports contained in 5.14:
  - Revert-bpf-replace-snprintf-with-asprintf-when-deali.patch
  - bpf-Fixes-a-snprintf-truncation-warning.patch
  - bpf-replace-snprintf-with-asprintf-when-dealing-with.patch
  - bridge-Deduplicate-vlan-show-functions.patch
  - bridge-Fix-BRIDGE_VLAN_TUNNEL-attribute-sizes.patch
  - bridge-Fix-output-with-empty-vlan-lists.patch
  - bridge-Fix-src_vni-argument-in-man-page.patch
  - bridge-Fix-tunnelshow-json-output.patch
  - bridge-Fix-typo-in-error-messages.patch
  - bridge-Fix-typo.patch
  - bridge-Fix-vni-printing.patch
  - bridge-fdb-show-fix-fdb-entry-state-output-for-json-.patch
  - bridge-fix-string-length-warning.patch
  - devlink-Add-a-new-time-stamp-format-for-health-repor.patch
  - devlink-Add-helper-for-left-justification-print.patch
  - devlink-Fix-fmsg-nesting-in-non-JSON-output.patch
  - devlink-Fix-inconsistency-between-command-input-and-.patch
  - devlink-Left-justification-on-FMSG-output.patch
  - devlink-Print-health-reporter-s-dump-time-stamp-in-a.patch
  - devlink-allow-full-range-of-resource-sizes.patch
  - devlink-always-check-strslashrsplit-return-value.patch
  - devlink-fix-uninitialized-warning.patch
  - devlink-require-resource-parameters.patch
  - erspan-fix-JSON-output.patch
  - erspan-set-erspan_ver-to-1-by-default.patch
  - f_u32-fix-compiler-gcc-10-compiler-warning.patch
  - introduce-print_masked_u16-and-print_masked_u32.patch
  - ip-add-support-for-alternative-name-addition-deletio.patch
  - ip-allow-to-use-alternative-names-as-handle.patch
  - ip-drop-2-char-command-assumption.patch
  - ip-fix-ip-route-show-json-output-for-multipath-nexth.patch
  - ip-fix-link-type-and-vlan-oneline-output.patch
  - ip-fix-oneline-output.patch
  - ip-iplink_ipoib.c-Remove-extra-spaces.patch
  - ip-link-Fix-indenting-in-help-text.patch
  - ip-link-xstats-fix-TX-IGMP-reports-string.patch
  - ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  - ip-route-ignore-ENOENT-during-save-if-RT_TABLE_MAIN-.patch
  - ip-xfrm-Fix-help-messages.patch
  - ip-xfrm-if_id-ve-value-is-error.patch
  - ip-xfrm-limit-the-length-of-the-security-context-nam.patch
  - ip-xfrm-update-man-page-on-setting-printing-XFRMA_IF.patch
  - ipmonitor-Fix-recvmsg-with-ancillary-data.patch
  - json_print-Remove-declaration-without-implementation.patch
  - lib-bpf-Fix-and-simplify-bpf_mnt_check_target.patch
  - lib-bpf_legacy-avoid-to-pass-invalid-argument-to-clo.patch
  - lib-bpf_legacy-fix-missing-socket-close-when-connect.patch
  - lib-bpf_legacy-treat-0-as-a-valid-file-descriptor.patch
  - lib-fs-avoid-double-call-to-mkdir-on-make_path.patch
  - lib-ll_map-cache-alternative-names.patch
  - lib-namespace-fix-ip-all-netns-return-code.patch
  - libnetlink-check-error-handler-is-present-before-a-c.patch
  - man-bridge-fix-the-typo-to-change-c-lor-into-c-olor-.patch
  - man-fix-syntax-for-ip-link-property.patch
  - nexthop-fix-error-reporting-in-filter-dump.patch
  - nexthop-fix-memory-leak-in-add_nh_group_attr.patch
  - q_cake-Fix-incorrect-printing-of-signed-values-in-cl.patch
  - rdma-Fix-statistics-bind-unbing-argument-handling.patch
  - rdma-stat-fix-return-code.patch
  - rdma-stat-initialize-ret-in-stat_qp_show_parse_cb.patch
  - ss-fix-end-of-line-printing-in-misc-ss.c.patch
  - ss-fix-fallback-to-procfs-for-raw-sockets.patch
  - tc-action-fix-time-values-output-in-JSON-format.patch
  - tc-fix-segmentation-fault-on-gact-action.patch
  - tc-fix-warning-in-tc-q_pie.c.patch
  - tc-flower-fix-output-for-ip-tos-and-ttl.patch
  - tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch
  - tc-fq_codel-fix-missing-statistic-in-JSON-output.patch
  - tc-pie-add-dq_rate_estimator-option.patch
  - tc-u32-Fix-key-folding-in-sample-option.patch
  - tc_util-add-an-option-to-print-masked-numbers-with-w.patch
  - tc_util-add-functions-for-big-endian-masked-numbers.patch
  - tc_util-introduce-a-function-to-print-JSON-non-JSON-.patch
  - testsuite-Fix-line-count-test.patch
  - tipc-fixed-a-compile-warning-in-tipc-link.c.patch
  - xfrm-also-check-for-ipv6-state-in-xfrm_state_keep.patch
  - xfrm-not-try-to-delete-ipcomp-states-when-using-dele.patch
  * drop non-upstream patches obsoleted by rebase to 5.14:
  - sync-UAPI-header-copies-with-SLE15-SP2.patch
  - examples-fix-bashisms-in-example-script.patch
  * refresh remaining patches:
  - lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
  - split-link-and-compile-steps-for-binaries.patch
  - tc-f_flower-fix-port-range-parsing.patch
  - xfrm-support-displaying-transformations-used-for-Mob.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633435201">- follow-up fixes backported from upstream (bsc#1191316):
  tree-wide-fix-some-typos-found-by-Lintian.patch
  configure-restore-backward-compatibility.patch
  man-ip-link-remove-double-of.patch
  mptcp-unbreak-JSON-endpoint-list.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1705492800">- upgrade to upstream version 6.4 (jsc#PED-6820 jsc#PED-6844)
  * for detailed list of changes between 5.14 and 6.4, see Factory
    package changelog
  * replace upstream tarball and signature
  * update specfile with changes from Factory package
  * drop mainline backports contained in 6.4:
  - tree-wide-fix-some-typos-found-by-Lintian.patch
  - configure-restore-backward-compatibility.patch
  - man-ip-link-remove-double-of.patch
  - iptuntap-fix-multi-queue-flag-display.patch
  - tc-f_flower-fix-port-range-parsing.patch
  - lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
  - mptcp-unbreak-JSON-endpoint-list.patch
  * drop non-upstream patch obsoleted by rebase to 6.4:
  - xfrm-support-displaying-transformations-used-for-Mob.patch
  * refresh remaining patches:
  - adjust-installation-directories-for-openSUSE-SLE.patch
  - use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  - add-explicit-typecast-to-avoid-gcc-warning.patch
  - split-link-and-compile-steps-for-binaries.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1713873600">- iproute2.spec: ensure execute permissions of supplied scripts
  (fixes IBS build failure)</changelog>
  <changelog author="mkubecek@suse.cz" date="1713873601">- support display of bound but unconnected sockets (bsc#1204562)
  * ss-Add-support-for-dumping-TCP-bound-inactive-socket.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1742385600">- avoid spurious cgroup warning (bsc#1234383):
  - ss-Tone-down-cgroup-path-resolution.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1746792000">- add post-6.4 follow-up fixes (bsc#1243005):
  * bpf-fix-warning-from-basename.patch
  * bridge-fdb-add-an-error-print-for-unknown-command.patch
  * bridge-vni-Accept-del-command.patch
  * bridge-vni-Fix-duplicate-group-and-remote-error-mess.patch
  * bridge-vni-Fix-vni-filter-help-strings.patch
  * bridge-vni-Remove-dead-code-in-group-argument-parsin.patch
  * bridge-vni-Report-duplicate-vni-argument-using-dupar.patch
  * f_flower-Treat-port-0-as-valid.patch
  * genl-ctrl.c-spelling-fix-in-error-message.patch
  * ip-Add-missing-echo-option-to-usage.patch
  * ip-Add-missing-stats-command-to-usage.patch
  * ip-ipmroute-use-preferred_family-to-get-prefix.patch
  * ip-remove-non-existent-amt-subcommand-from-usage.patch
  * iplink-fix-fd-leak-when-playing-with-netns.patch
  * iplink_bridge-fix-incorrect-root-id-dump.patch
  * iplink_xstats-spelling-fix-in-error-message.patch
  * iproute2-fix-type-incompatibility-in-ifstat.c.patch
  * iproute2-prevent-memory-leak.patch
  * libnetlink-validate-nlmsg-header-length-first.patch
  * man-devlink-resource-add-missing-words-in-the-exampl.patch
  * mnl_utils-sanitize-incoming-netlink-payload-size-in-.patch
  * rdma-Fix-help-information-of-rdma-resource.patch
  * rdma-Fix-the-error-of-accessing-string-variable-outs.patch
  * rdma-use-print_XXX-instead-of-COLOR_NONE.patch
  * ss-Fix-socket-type-check-in-packet_show_line.patch
  * ss-fix-directory-leak-when-T-option-is-used.patch
  * ss-mptcp-display-info-counters-as-unsigned.patch
  * ss-prevent-Process-column-from-being-printed-unless-.patch
  * tc-taprio-don-t-print-netlink-attributes-which-weren.patch
  * tc-taprio-fix-JSON-output-when-TCA_TAPRIO_ATTR_ADMIN.patch
  * tc-taprio-fix-parsing-of-fp-option-when-it-doesn-t-a.patch
  * vdpa-consume-device_features-parameter.patch
- add to blacklist:
  * af0ea2cd0b9e (duplicate of 92eac7e4bf14)
- refresh:
  * ss-Add-support-for-dumping-TCP-bound-inactive-socket.patch
  * add-explicit-typecast-to-avoid-gcc-warning.patch
  * use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1746878400">- add post-6.4 follow-up fix (bsc#1243005)
  * ss-show-extra-info-when-processes-is-not-used.patch</changelog>
  <changelog author="sjaeckel@suse.de" date="1756296000">- devlink: support ipsec_crypto and ipsec_packet cap (bsc#1248660)
  * add Update-kernel-headers.patch
  * add devlink-Support-setting-port-function-ipsec_crypto-c.patch
  * add devlink-Support-setting-port-function-ipsec_packet-c.patch
  * refresh ss-Tone-down-cgroup-path-resolution.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1757592000">- sync UAPI header copies with SLE15-SP6 kernel
  * sync-UAPI-header-copies-with-SLE15-SP6.patch
- drop Update-kernel-headers.patch
  (no longer needed with full UAPI sync)</changelog>
  <changelog author="mkubecek@suse.cz" date="1757592001">- add post-6.4 follow-up fixes (bsc#1243005)
  * patches/bond-fix-stack-smash-in-xstats.patch
  * patches/tc-gred-fix-debug-print.patch</changelog>
</package>
<package pkgid="ac321573b6ce4fae9464d95991a208b06a2f5545534365d4ee1d020df2f8c390" name="iproute2-bash-completion" arch="x86_64">
  <version epoch="0" ver="6.4" rel="150600.7.12.1"/>
  <changelog author="mkubecek@suse.cz" date="1547726400">- VF stats backport for SLE15-SP1 (fate#326021 bsc#1104003):
  ip-Add-violation-counters-to-VF-statisctics.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1569499200">- upgrade to upstream version 5.3 (jsc#SLE-7290)
  * replace upstream tarball and signature
  * import specfile updates from Factory package
  * drop mainline backports contained in 5.3:
  - bpf-remove-obsolete-samples.patch
  - utils-return-default-family-when-rtm_family-is-not-R.patch
  - Really-fix-get_addr-and-get_prefix-error-messages.patch
  - iproute-Add-support-for-extended-ack-to-rtnl_talk.patch
  - ss-enclose-IPv6-address-in-brackets.patch
  - lib-fix-extended-ack-with-and-without-libmnl.patch
  - lib-need-to-pass-LIBMNL-flag.patch
  - tc-ip-more-Makefile-updates-for-LIBMNL.patch
  - change-how-Config-is-used-in-Makefile-s.patch
  - lib-Dump-ext-ack-string-by-default.patch
  - bpf-unbreak-libelf-linkage-for-bpf-obj-loader.patch
  - libnetlink-Fix-extack-attribute-parsing.patch
  - ifstat-Fix-memleak-in-dump_kern_db-for-json-output.patch
  - ss-Fix-potential-memleak-in-unix_stats_print.patch
  - utils-Move-BIT-macro-to-common-header.patch
  - rdma-Add-basic-infrastructure-for-RDMA-tool.patch
  - rdma-Add-dev-object.patch
  - rdma-Add-link-object.patch
  - rdma-Add-json-and-pretty-outputs.patch
  - rdma-Implement-json-output-for-dev-object.patch
  - rdma-Add-json-output-to-link-object.patch
  - rdma-Add-initial-manual-for-the-tool.patch
  - iproute-Fix-for-missing-Oifs-display.patch
  - ipmaddr-Avoid-accessing-uninitialized-data.patch
  - rdma-fix-duplicate-initialization-in-port_names.patch
  - ss-Fix-for-added-diag-support-check.patch
  - link_gre6-Fix-for-changing-tclass-flowlabel.patch
  - iplink-check-for-message-truncation-in-iplink_get.patch
  - iplink-double-the-buffer-size-also-in-iplink_get.patch
  - tc-actions-store-and-dump-correct-length-of-user-coo.patch
  - json_writer-add-new-json-handlers-null-float-with-fo.patch
  - doc-remove-obsolete-ip-tunnels-documentation.patch
  - doc-remove-outdated-ss-documentation.patch
  - doc-remove-outdated-arpd-documentation.patch
  - doc-remove-outdated-nstat-rtstat-documentation.patch
  - doc-remove-outdated-tc-filters-documentation.patch
  - doc-remove-outdated-IPv6-flow-label-document.patch
  - doc-drop-old-ip-command-documentation.patch
  - ss-Distinguish-between-IPv4-and-IPv6-wildcard-socket.patch
  - ip-maddr-fix-filtering-by-device.patch
  - man-add-additional-explainations-for-ss.patch
  - lib-libnetlink-re-malloc-buff-if-size-is-not-enough.patch
  - lib-libnetlink-update-rtnl_talk-to-support-malloc-bu.patch
  - tc-move-action-cookie-print-out-of-the-stats-if.patch
  - tc-remove-action-cookie-len-from-printout.patch
  - link_gre6-Detect-invalid-encaplimit-values.patch
  - man-tc-csum.8-Fix-inconsistency-in-example-descripti.patch
  - tc-bash-completion-add-missing-classid-keyword.patch
  - tc-fix-command-tc-actions-del-hang-issue.patch
  - gre-ip6tnl-tunnel-Fix-noencap-support.patch
  - Restore-no-print-directory-option-for-silent-builds.patch
  - iplink-Validate-minimum-tx-rate-is-less-than-maximum.patch
  - ipaddress-Make-sure-VF-min-max-rate-API-is-supported.patch
  - rdma-Reduce-scope-of-_dev_map_lookup-call.patch
  - rdma-Protect-dev_map_lookup-from-wrong-input.patch
  - rdma-Move-per-device-handler-function-to-generic-cod.patch
  - rdma-Fix-misspelled-SYS_IMAGE_GUID.patch
  - rdma-Check-that-port-index-exists-before-operate-on-.patch
  - rdma-Rename-free-function-to-be-rd_cleanup.patch
  - rdma-Rename-rd_free_devmap-to-be-rd_free.patch
  - rdma-Move-link-execution-logic-to-common-code.patch
  - rdma-Add-option-to-provide-sign-for-the-port-number.patch
  - rdma-Make-visible-the-number-of-arguments.patch
  - rdma-Add-filtering-infrastructure.patch
  - rdma-Set-pointer-to-device-name-position.patch
  - rdma-Add-resource-tracking-summary.patch
  - rdma-Add-QP-resource-tracking-information.patch
  - rdma-Check-return-value-of-strdup-call.patch
  - README-update-location-of-git-repositories-remove-br.patch
  - Remove-leftovers-from-removed-Latex-documentation.patch
  - README-re-add-updated-information-link.patch
  - rdma-Avoid-memory-leak-for-skipper-resource.patch
  - ip-link-Fix-use-after-free-in-nl_get_ll_addr_len.patch
  - ip-address-Fix-negative-prints-of-large-TX-rate-limi.patch
  - devlink-fix-port-new-monitoring-message-typo.patch
  - rdma-Add-CM_ID-resource-tracking-information.patch
  - rdma-Add-CQ-resource-tracking-information.patch
  - rdma-Add-MR-resource-tracking-information.patch
  - rdma-Add-PD-resource-tracking-information.patch
  - rdma-Ignore-unknown-netlink-attributes.patch
  - bridge-fix-typo-in-hairpin-error-message.patch
  - iproute-Abort-if-nexthop-cannot-be-parsed.patch
  - iplink_vrf-Save-device-index-from-response-for-retur.patch
  - rdma-Print-net-device-name-and-index-for-RDMA-device.patch
  - rdma-print-driver-resource-attributes.patch
  - rdma-sync-some-IP-headers-with-glibc.patch
  - devlink-CTRL_ATTR_FAMILY_ID-is-a-u16.patch
  - ip-Add-violation-counters-to-VF-statisctics.patch
  - ip-route-Fix-segfault-with-many-nexthops.patch
  - rdma-Fix-representation-of-PortInfo-CapabilityMask.patch
  - macsec-fix-off-by-one-when-parsing-attributes.patch
  - rdma-Fix-for-ineffective-check-in-add_filter.patch
  - ip-route-Fix-for-memleak-in-error-path.patch
  - rdma-Don-t-pass-garbage-to-rd_check_is_filtered.patch
  - ip-route-Fix-parse_encap_seg6-srh-parsing.patch
  - rdma-Refresh-help-section-of-resource-information.patch
  - tc-f_u32-allow-skip_hw-and-skip_sw-flags-to-be-last.patch
  - ip-route-Fix-nexthop-encap-parsing.patch
  - rdma-Fix-broken-32-bit-compilation.patch
  - rdma-Fix-incorrectly-handled-NLA-validation.patch
  - rdma-Introduce-command-execution-helper-with-require.patch
  - rdma-Add-an-option-to-rename-IB-device-interface.patch
  - rdma-Add-print-of-link-CapabilityMask2-flags.patch
  * drop non-upstream patches obsoleted by rebase to 5.3:
  - sync-UAPI-header-copies-with-SLE15-SP1.patch
  - man-fix-documentation-references-in-manual-pages.patch
  * refresh remaining patches:
  - adjust-installation-directories-for-openSUSE-SLE.patch
  - use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  - add-explicit-typecast-to-avoid-gcc-warning.patch
  - xfrm-support-displaying-transformations-used-for-Mob.patch
  - split-link-and-compile-steps-for-binaries.patch
  - examples-fix-bashisms-in-example-script.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1578484800">- follow-up fixes backported from upstream (bsc#1160242):
  bpf-replace-snprintf-with-asprintf-when-dealing-with.patch
  bridge-Deduplicate-vlan-show-functions.patch
  bridge-Fix-BRIDGE_VLAN_TUNNEL-attribute-sizes.patch
  bridge-Fix-src_vni-argument-in-man-page.patch
  bridge-Fix-tunnelshow-json-output.patch
  bridge-Fix-typo-in-error-messages.patch
  bridge-Fix-vni-printing.patch
  devlink-Add-a-new-time-stamp-format-for-health-repor.patch
  devlink-Add-helper-for-left-justification-print.patch
  devlink-Fix-fmsg-nesting-in-non-JSON-output.patch
  devlink-Fix-inconsistency-between-command-input-and-.patch
  devlink-Left-justification-on-FMSG-output.patch
  devlink-Print-health-reporter-s-dump-time-stamp-in-a.patch
  devlink-allow-full-range-of-resource-sizes.patch
  devlink-require-resource-parameters.patch
  introduce-print_masked_u16-and-print_masked_u32.patch
  ip-fix-ip-route-show-json-output-for-multipath-nexth.patch
  ip-xfrm-if_id-ve-value-is-error.patch
  json_print-Remove-declaration-without-implementation.patch
  sync-UAPI-header-copies-with-SLE15-SP2.patch
  tc-fix-segmentation-fault-on-gact-action.patch
  tc-fix-warning-in-tc-q_pie.c.patch
  tc-flower-fix-output-for-ip-tos-and-ttl.patch
  tc-fq_codel-fix-missing-statistic-in-JSON-output.patch
  tc-pie-add-dq_rate_estimator-option.patch
  tc_util-add-an-option-to-print-masked-numbers-with-w.patch
  tc_util-add-functions-for-big-endian-masked-numbers.patch
  tc_util-introduce-a-function-to-print-JSON-non-JSON-.patch
  testsuite-Fix-line-count-test.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1578484801">- support alternative names as we already support them in SLE15-SP2
  kernel (jsc#SLE-7290):
  lib-ll_map-cache-alternative-names.patch
  ip-add-support-for-alternative-name-addition-deletio.patch
  ip-allow-to-use-alternative-names-as-handle.patch
  ip-fix-oneline-output.patch</changelog>
  <changelog author="kukuk@suse.com" date="1586347200">- Move arpd into own subpackage to avoid libdb dependency
  [jsc#SLE-12189]</changelog>
  <changelog author="mkubecek@suse.cz" date="1587729600">- follow-up fixes backported from upstream (bsc#1160242):
  ip-fix-link-type-and-vlan-oneline-output.patch
  ip-xfrm-Fix-help-messages.patch
  ip-link-xstats-fix-TX-IGMP-reports-string.patch
  erspan-set-erspan_ver-to-1-by-default.patch
  xfrm-not-try-to-delete-ipcomp-states-when-using-dele.patch
  nexthop-fix-error-reporting-in-filter-dump.patch
- refresh:
  xfrm-support-displaying-transformations-used-for-Mob.patch
- fix duplicated patch metadata:
  introduce-print_masked_u16-and-print_masked_u32.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633089600">- follow-up fixes backported from upstream (bsc#1160242):
  ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633348800">- follow-up fixes backported from upstream (bsc#1160242):
  ss-fix-end-of-line-printing-in-misc-ss.c.patch
  xfrm-also-check-for-ipv6-state-in-xfrm_state_keep.patch
  bridge-Fix-typo.patch
  bridge-Fix-output-with-empty-vlan-lists.patch
  tc-action-fix-time-values-output-in-JSON-format.patch
  Revert-bpf-replace-snprintf-with-asprintf-when-deali.patch
  bpf-Fixes-a-snprintf-truncation-warning.patch
  tipc-fixed-a-compile-warning-in-tipc-link.c.patch
  ip-xfrm-update-man-page-on-setting-printing-XFRMA_IF.patch
  bridge-fdb-show-fix-fdb-entry-state-output-for-json-.patch
  ip-link-Fix-indenting-in-help-text.patch
  ip-iplink_ipoib.c-Remove-extra-spaces.patch
  devlink-fix-uninitialized-warning.patch
  bridge-fix-string-length-warning.patch
  f_u32-fix-compiler-gcc-10-compiler-warning.patch
  rdma-Fix-statistics-bind-unbing-argument-handling.patch
  lib-namespace-fix-ip-all-netns-return-code.patch
  lib-bpf-Fix-and-simplify-bpf_mnt_check_target.patch
  lib-fs-avoid-double-call-to-mkdir-on-make_path.patch
  q_cake-Fix-incorrect-printing-of-signed-values-in-cl.patch
  ip-xfrm-limit-the-length-of-the-security-context-nam.patch
  erspan-fix-JSON-output.patch
  devlink-always-check-strslashrsplit-return-value.patch
  nexthop-fix-memory-leak-in-add_nh_group_attr.patch
  rdma-stat-initialize-ret-in-stat_qp_show_parse_cb.patch
  rdma-stat-fix-return-code.patch
  lib-bpf_legacy-treat-0-as-a-valid-file-descriptor.patch
  lib-bpf_legacy-fix-missing-socket-close-when-connect.patch
  ip-drop-2-char-command-assumption.patch
  man-fix-syntax-for-ip-link-property.patch
  lib-bpf_legacy-avoid-to-pass-invalid-argument-to-clo.patch
  ip-route-ignore-ENOENT-during-save-if-RT_TABLE_MAIN-.patch
  libnetlink-check-error-handler-is-present-before-a-c.patch
  ipmonitor-Fix-recvmsg-with-ancillary-data.patch
  tc-u32-Fix-key-folding-in-sample-option.patch
  man-bridge-fix-the-typo-to-change-c-lor-into-c-olor-.patch
  ss-fix-fallback-to-procfs-for-raw-sockets.patch
  iptuntap-fix-multi-queue-flag-display.patch
  tc-f_flower-fix-port-range-parsing.patch
  lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
- refresh:
  ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633435200">- upgrade to upstream version 5.14 (jsc#SLE-17360 jsc#SLE-18994
  jsc#SLE-19271)
  * replace upstream tarball and signature
  * update specfile with changes from Factory package
  * drop mainline backports contained in 5.14:
  - Revert-bpf-replace-snprintf-with-asprintf-when-deali.patch
  - bpf-Fixes-a-snprintf-truncation-warning.patch
  - bpf-replace-snprintf-with-asprintf-when-dealing-with.patch
  - bridge-Deduplicate-vlan-show-functions.patch
  - bridge-Fix-BRIDGE_VLAN_TUNNEL-attribute-sizes.patch
  - bridge-Fix-output-with-empty-vlan-lists.patch
  - bridge-Fix-src_vni-argument-in-man-page.patch
  - bridge-Fix-tunnelshow-json-output.patch
  - bridge-Fix-typo-in-error-messages.patch
  - bridge-Fix-typo.patch
  - bridge-Fix-vni-printing.patch
  - bridge-fdb-show-fix-fdb-entry-state-output-for-json-.patch
  - bridge-fix-string-length-warning.patch
  - devlink-Add-a-new-time-stamp-format-for-health-repor.patch
  - devlink-Add-helper-for-left-justification-print.patch
  - devlink-Fix-fmsg-nesting-in-non-JSON-output.patch
  - devlink-Fix-inconsistency-between-command-input-and-.patch
  - devlink-Left-justification-on-FMSG-output.patch
  - devlink-Print-health-reporter-s-dump-time-stamp-in-a.patch
  - devlink-allow-full-range-of-resource-sizes.patch
  - devlink-always-check-strslashrsplit-return-value.patch
  - devlink-fix-uninitialized-warning.patch
  - devlink-require-resource-parameters.patch
  - erspan-fix-JSON-output.patch
  - erspan-set-erspan_ver-to-1-by-default.patch
  - f_u32-fix-compiler-gcc-10-compiler-warning.patch
  - introduce-print_masked_u16-and-print_masked_u32.patch
  - ip-add-support-for-alternative-name-addition-deletio.patch
  - ip-allow-to-use-alternative-names-as-handle.patch
  - ip-drop-2-char-command-assumption.patch
  - ip-fix-ip-route-show-json-output-for-multipath-nexth.patch
  - ip-fix-link-type-and-vlan-oneline-output.patch
  - ip-fix-oneline-output.patch
  - ip-iplink_ipoib.c-Remove-extra-spaces.patch
  - ip-link-Fix-indenting-in-help-text.patch
  - ip-link-xstats-fix-TX-IGMP-reports-string.patch
  - ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  - ip-route-ignore-ENOENT-during-save-if-RT_TABLE_MAIN-.patch
  - ip-xfrm-Fix-help-messages.patch
  - ip-xfrm-if_id-ve-value-is-error.patch
  - ip-xfrm-limit-the-length-of-the-security-context-nam.patch
  - ip-xfrm-update-man-page-on-setting-printing-XFRMA_IF.patch
  - ipmonitor-Fix-recvmsg-with-ancillary-data.patch
  - json_print-Remove-declaration-without-implementation.patch
  - lib-bpf-Fix-and-simplify-bpf_mnt_check_target.patch
  - lib-bpf_legacy-avoid-to-pass-invalid-argument-to-clo.patch
  - lib-bpf_legacy-fix-missing-socket-close-when-connect.patch
  - lib-bpf_legacy-treat-0-as-a-valid-file-descriptor.patch
  - lib-fs-avoid-double-call-to-mkdir-on-make_path.patch
  - lib-ll_map-cache-alternative-names.patch
  - lib-namespace-fix-ip-all-netns-return-code.patch
  - libnetlink-check-error-handler-is-present-before-a-c.patch
  - man-bridge-fix-the-typo-to-change-c-lor-into-c-olor-.patch
  - man-fix-syntax-for-ip-link-property.patch
  - nexthop-fix-error-reporting-in-filter-dump.patch
  - nexthop-fix-memory-leak-in-add_nh_group_attr.patch
  - q_cake-Fix-incorrect-printing-of-signed-values-in-cl.patch
  - rdma-Fix-statistics-bind-unbing-argument-handling.patch
  - rdma-stat-fix-return-code.patch
  - rdma-stat-initialize-ret-in-stat_qp_show_parse_cb.patch
  - ss-fix-end-of-line-printing-in-misc-ss.c.patch
  - ss-fix-fallback-to-procfs-for-raw-sockets.patch
  - tc-action-fix-time-values-output-in-JSON-format.patch
  - tc-fix-segmentation-fault-on-gact-action.patch
  - tc-fix-warning-in-tc-q_pie.c.patch
  - tc-flower-fix-output-for-ip-tos-and-ttl.patch
  - tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch
  - tc-fq_codel-fix-missing-statistic-in-JSON-output.patch
  - tc-pie-add-dq_rate_estimator-option.patch
  - tc-u32-Fix-key-folding-in-sample-option.patch
  - tc_util-add-an-option-to-print-masked-numbers-with-w.patch
  - tc_util-add-functions-for-big-endian-masked-numbers.patch
  - tc_util-introduce-a-function-to-print-JSON-non-JSON-.patch
  - testsuite-Fix-line-count-test.patch
  - tipc-fixed-a-compile-warning-in-tipc-link.c.patch
  - xfrm-also-check-for-ipv6-state-in-xfrm_state_keep.patch
  - xfrm-not-try-to-delete-ipcomp-states-when-using-dele.patch
  * drop non-upstream patches obsoleted by rebase to 5.14:
  - sync-UAPI-header-copies-with-SLE15-SP2.patch
  - examples-fix-bashisms-in-example-script.patch
  * refresh remaining patches:
  - lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
  - split-link-and-compile-steps-for-binaries.patch
  - tc-f_flower-fix-port-range-parsing.patch
  - xfrm-support-displaying-transformations-used-for-Mob.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633435201">- follow-up fixes backported from upstream (bsc#1191316):
  tree-wide-fix-some-typos-found-by-Lintian.patch
  configure-restore-backward-compatibility.patch
  man-ip-link-remove-double-of.patch
  mptcp-unbreak-JSON-endpoint-list.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1705492800">- upgrade to upstream version 6.4 (jsc#PED-6820 jsc#PED-6844)
  * for detailed list of changes between 5.14 and 6.4, see Factory
    package changelog
  * replace upstream tarball and signature
  * update specfile with changes from Factory package
  * drop mainline backports contained in 6.4:
  - tree-wide-fix-some-typos-found-by-Lintian.patch
  - configure-restore-backward-compatibility.patch
  - man-ip-link-remove-double-of.patch
  - iptuntap-fix-multi-queue-flag-display.patch
  - tc-f_flower-fix-port-range-parsing.patch
  - lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
  - mptcp-unbreak-JSON-endpoint-list.patch
  * drop non-upstream patch obsoleted by rebase to 6.4:
  - xfrm-support-displaying-transformations-used-for-Mob.patch
  * refresh remaining patches:
  - adjust-installation-directories-for-openSUSE-SLE.patch
  - use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  - add-explicit-typecast-to-avoid-gcc-warning.patch
  - split-link-and-compile-steps-for-binaries.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1713873600">- iproute2.spec: ensure execute permissions of supplied scripts
  (fixes IBS build failure)</changelog>
  <changelog author="mkubecek@suse.cz" date="1713873601">- support display of bound but unconnected sockets (bsc#1204562)
  * ss-Add-support-for-dumping-TCP-bound-inactive-socket.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1742385600">- avoid spurious cgroup warning (bsc#1234383):
  - ss-Tone-down-cgroup-path-resolution.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1746792000">- add post-6.4 follow-up fixes (bsc#1243005):
  * bpf-fix-warning-from-basename.patch
  * bridge-fdb-add-an-error-print-for-unknown-command.patch
  * bridge-vni-Accept-del-command.patch
  * bridge-vni-Fix-duplicate-group-and-remote-error-mess.patch
  * bridge-vni-Fix-vni-filter-help-strings.patch
  * bridge-vni-Remove-dead-code-in-group-argument-parsin.patch
  * bridge-vni-Report-duplicate-vni-argument-using-dupar.patch
  * f_flower-Treat-port-0-as-valid.patch
  * genl-ctrl.c-spelling-fix-in-error-message.patch
  * ip-Add-missing-echo-option-to-usage.patch
  * ip-Add-missing-stats-command-to-usage.patch
  * ip-ipmroute-use-preferred_family-to-get-prefix.patch
  * ip-remove-non-existent-amt-subcommand-from-usage.patch
  * iplink-fix-fd-leak-when-playing-with-netns.patch
  * iplink_bridge-fix-incorrect-root-id-dump.patch
  * iplink_xstats-spelling-fix-in-error-message.patch
  * iproute2-fix-type-incompatibility-in-ifstat.c.patch
  * iproute2-prevent-memory-leak.patch
  * libnetlink-validate-nlmsg-header-length-first.patch
  * man-devlink-resource-add-missing-words-in-the-exampl.patch
  * mnl_utils-sanitize-incoming-netlink-payload-size-in-.patch
  * rdma-Fix-help-information-of-rdma-resource.patch
  * rdma-Fix-the-error-of-accessing-string-variable-outs.patch
  * rdma-use-print_XXX-instead-of-COLOR_NONE.patch
  * ss-Fix-socket-type-check-in-packet_show_line.patch
  * ss-fix-directory-leak-when-T-option-is-used.patch
  * ss-mptcp-display-info-counters-as-unsigned.patch
  * ss-prevent-Process-column-from-being-printed-unless-.patch
  * tc-taprio-don-t-print-netlink-attributes-which-weren.patch
  * tc-taprio-fix-JSON-output-when-TCA_TAPRIO_ATTR_ADMIN.patch
  * tc-taprio-fix-parsing-of-fp-option-when-it-doesn-t-a.patch
  * vdpa-consume-device_features-parameter.patch
- add to blacklist:
  * af0ea2cd0b9e (duplicate of 92eac7e4bf14)
- refresh:
  * ss-Add-support-for-dumping-TCP-bound-inactive-socket.patch
  * add-explicit-typecast-to-avoid-gcc-warning.patch
  * use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1746878400">- add post-6.4 follow-up fix (bsc#1243005)
  * ss-show-extra-info-when-processes-is-not-used.patch</changelog>
  <changelog author="sjaeckel@suse.de" date="1756296000">- devlink: support ipsec_crypto and ipsec_packet cap (bsc#1248660)
  * add Update-kernel-headers.patch
  * add devlink-Support-setting-port-function-ipsec_crypto-c.patch
  * add devlink-Support-setting-port-function-ipsec_packet-c.patch
  * refresh ss-Tone-down-cgroup-path-resolution.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1757592000">- sync UAPI header copies with SLE15-SP6 kernel
  * sync-UAPI-header-copies-with-SLE15-SP6.patch
- drop Update-kernel-headers.patch
  (no longer needed with full UAPI sync)</changelog>
  <changelog author="mkubecek@suse.cz" date="1757592001">- add post-6.4 follow-up fixes (bsc#1243005)
  * patches/bond-fix-stack-smash-in-xstats.patch
  * patches/tc-gred-fix-debug-print.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1775649600">- add CVE fix (CVE-2024-58251 bsc#1254324)
  * ss-escape-characters-in-command-name.patch</changelog>
</package>
<package pkgid="a3eff5d78fe7304231dc42489217f9abe98f5e1f6e38d468e6d8d51ff8d89475" name="iproute2-bash-completion" arch="x86_64">
  <version epoch="0" ver="6.4" rel="150600.7.9.1"/>
  <changelog author="mkubecek@suse.cz" date="1547726400">- RDMA backport for SLE15-SP1 (fate#326021 bsc#1104003):
  sync-UAPI-header-copies-with-SLE15-SP1.patch
  bpf-remove-obsolete-samples.patch
  json_writer-add-new-json-handlers-null-float-with-fo.patch
  rdma-Move-per-device-handler-function-to-generic-cod.patch
  rdma-Rename-free-function-to-be-rd_cleanup.patch
  rdma-Rename-rd_free_devmap-to-be-rd_free.patch
  rdma-Move-link-execution-logic-to-common-code.patch
  rdma-Add-option-to-provide-sign-for-the-port-number.patch
  rdma-Make-visible-the-number-of-arguments.patch
  rdma-Set-pointer-to-device-name-position.patch
  rdma-Add-filtering-infrastructure.patch
  rdma-Add-resource-tracking-summary.patch
  rdma-Add-QP-resource-tracking-information.patch
  rdma-Avoid-memory-leak-for-skipper-resource.patch
  rdma-Add-CM_ID-resource-tracking-information.patch
  rdma-Add-CQ-resource-tracking-information.patch
  rdma-Add-MR-resource-tracking-information.patch
  rdma-Add-PD-resource-tracking-information.patch
  rdma-Print-net-device-name-and-index-for-RDMA-device.patch
  rdma-print-driver-resource-attributes.patch
  rdma-sync-some-IP-headers-with-glibc.patch
  rdma-Fix-for-ineffective-check-in-add_filter.patch
  rdma-Don-t-pass-garbage-to-rd_check_is_filtered.patch
  rdma-Refresh-help-section-of-resource-information.patch
  rdma-Introduce-command-execution-helper-with-require.patch
  rdma-Add-an-option-to-rename-IB-device-interface.patch
  rdma-Add-print-of-link-CapabilityMask2-flags.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547726401">- VF stats backport for SLE15-SP1 (fate#326021 bsc#1104003):
  ip-Add-violation-counters-to-VF-statisctics.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1569499200">- upgrade to upstream version 5.3 (jsc#SLE-7290)
  * replace upstream tarball and signature
  * import specfile updates from Factory package
  * drop mainline backports contained in 5.3:
  - bpf-remove-obsolete-samples.patch
  - utils-return-default-family-when-rtm_family-is-not-R.patch
  - Really-fix-get_addr-and-get_prefix-error-messages.patch
  - iproute-Add-support-for-extended-ack-to-rtnl_talk.patch
  - ss-enclose-IPv6-address-in-brackets.patch
  - lib-fix-extended-ack-with-and-without-libmnl.patch
  - lib-need-to-pass-LIBMNL-flag.patch
  - tc-ip-more-Makefile-updates-for-LIBMNL.patch
  - change-how-Config-is-used-in-Makefile-s.patch
  - lib-Dump-ext-ack-string-by-default.patch
  - bpf-unbreak-libelf-linkage-for-bpf-obj-loader.patch
  - libnetlink-Fix-extack-attribute-parsing.patch
  - ifstat-Fix-memleak-in-dump_kern_db-for-json-output.patch
  - ss-Fix-potential-memleak-in-unix_stats_print.patch
  - utils-Move-BIT-macro-to-common-header.patch
  - rdma-Add-basic-infrastructure-for-RDMA-tool.patch
  - rdma-Add-dev-object.patch
  - rdma-Add-link-object.patch
  - rdma-Add-json-and-pretty-outputs.patch
  - rdma-Implement-json-output-for-dev-object.patch
  - rdma-Add-json-output-to-link-object.patch
  - rdma-Add-initial-manual-for-the-tool.patch
  - iproute-Fix-for-missing-Oifs-display.patch
  - ipmaddr-Avoid-accessing-uninitialized-data.patch
  - rdma-fix-duplicate-initialization-in-port_names.patch
  - ss-Fix-for-added-diag-support-check.patch
  - link_gre6-Fix-for-changing-tclass-flowlabel.patch
  - iplink-check-for-message-truncation-in-iplink_get.patch
  - iplink-double-the-buffer-size-also-in-iplink_get.patch
  - tc-actions-store-and-dump-correct-length-of-user-coo.patch
  - json_writer-add-new-json-handlers-null-float-with-fo.patch
  - doc-remove-obsolete-ip-tunnels-documentation.patch
  - doc-remove-outdated-ss-documentation.patch
  - doc-remove-outdated-arpd-documentation.patch
  - doc-remove-outdated-nstat-rtstat-documentation.patch
  - doc-remove-outdated-tc-filters-documentation.patch
  - doc-remove-outdated-IPv6-flow-label-document.patch
  - doc-drop-old-ip-command-documentation.patch
  - ss-Distinguish-between-IPv4-and-IPv6-wildcard-socket.patch
  - ip-maddr-fix-filtering-by-device.patch
  - man-add-additional-explainations-for-ss.patch
  - lib-libnetlink-re-malloc-buff-if-size-is-not-enough.patch
  - lib-libnetlink-update-rtnl_talk-to-support-malloc-bu.patch
  - tc-move-action-cookie-print-out-of-the-stats-if.patch
  - tc-remove-action-cookie-len-from-printout.patch
  - link_gre6-Detect-invalid-encaplimit-values.patch
  - man-tc-csum.8-Fix-inconsistency-in-example-descripti.patch
  - tc-bash-completion-add-missing-classid-keyword.patch
  - tc-fix-command-tc-actions-del-hang-issue.patch
  - gre-ip6tnl-tunnel-Fix-noencap-support.patch
  - Restore-no-print-directory-option-for-silent-builds.patch
  - iplink-Validate-minimum-tx-rate-is-less-than-maximum.patch
  - ipaddress-Make-sure-VF-min-max-rate-API-is-supported.patch
  - rdma-Reduce-scope-of-_dev_map_lookup-call.patch
  - rdma-Protect-dev_map_lookup-from-wrong-input.patch
  - rdma-Move-per-device-handler-function-to-generic-cod.patch
  - rdma-Fix-misspelled-SYS_IMAGE_GUID.patch
  - rdma-Check-that-port-index-exists-before-operate-on-.patch
  - rdma-Rename-free-function-to-be-rd_cleanup.patch
  - rdma-Rename-rd_free_devmap-to-be-rd_free.patch
  - rdma-Move-link-execution-logic-to-common-code.patch
  - rdma-Add-option-to-provide-sign-for-the-port-number.patch
  - rdma-Make-visible-the-number-of-arguments.patch
  - rdma-Add-filtering-infrastructure.patch
  - rdma-Set-pointer-to-device-name-position.patch
  - rdma-Add-resource-tracking-summary.patch
  - rdma-Add-QP-resource-tracking-information.patch
  - rdma-Check-return-value-of-strdup-call.patch
  - README-update-location-of-git-repositories-remove-br.patch
  - Remove-leftovers-from-removed-Latex-documentation.patch
  - README-re-add-updated-information-link.patch
  - rdma-Avoid-memory-leak-for-skipper-resource.patch
  - ip-link-Fix-use-after-free-in-nl_get_ll_addr_len.patch
  - ip-address-Fix-negative-prints-of-large-TX-rate-limi.patch
  - devlink-fix-port-new-monitoring-message-typo.patch
  - rdma-Add-CM_ID-resource-tracking-information.patch
  - rdma-Add-CQ-resource-tracking-information.patch
  - rdma-Add-MR-resource-tracking-information.patch
  - rdma-Add-PD-resource-tracking-information.patch
  - rdma-Ignore-unknown-netlink-attributes.patch
  - bridge-fix-typo-in-hairpin-error-message.patch
  - iproute-Abort-if-nexthop-cannot-be-parsed.patch
  - iplink_vrf-Save-device-index-from-response-for-retur.patch
  - rdma-Print-net-device-name-and-index-for-RDMA-device.patch
  - rdma-print-driver-resource-attributes.patch
  - rdma-sync-some-IP-headers-with-glibc.patch
  - devlink-CTRL_ATTR_FAMILY_ID-is-a-u16.patch
  - ip-Add-violation-counters-to-VF-statisctics.patch
  - ip-route-Fix-segfault-with-many-nexthops.patch
  - rdma-Fix-representation-of-PortInfo-CapabilityMask.patch
  - macsec-fix-off-by-one-when-parsing-attributes.patch
  - rdma-Fix-for-ineffective-check-in-add_filter.patch
  - ip-route-Fix-for-memleak-in-error-path.patch
  - rdma-Don-t-pass-garbage-to-rd_check_is_filtered.patch
  - ip-route-Fix-parse_encap_seg6-srh-parsing.patch
  - rdma-Refresh-help-section-of-resource-information.patch
  - tc-f_u32-allow-skip_hw-and-skip_sw-flags-to-be-last.patch
  - ip-route-Fix-nexthop-encap-parsing.patch
  - rdma-Fix-broken-32-bit-compilation.patch
  - rdma-Fix-incorrectly-handled-NLA-validation.patch
  - rdma-Introduce-command-execution-helper-with-require.patch
  - rdma-Add-an-option-to-rename-IB-device-interface.patch
  - rdma-Add-print-of-link-CapabilityMask2-flags.patch
  * drop non-upstream patches obsoleted by rebase to 5.3:
  - sync-UAPI-header-copies-with-SLE15-SP1.patch
  - man-fix-documentation-references-in-manual-pages.patch
  * refresh remaining patches:
  - adjust-installation-directories-for-openSUSE-SLE.patch
  - use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  - add-explicit-typecast-to-avoid-gcc-warning.patch
  - xfrm-support-displaying-transformations-used-for-Mob.patch
  - split-link-and-compile-steps-for-binaries.patch
  - examples-fix-bashisms-in-example-script.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1578484800">- follow-up fixes backported from upstream (bsc#1160242):
  bpf-replace-snprintf-with-asprintf-when-dealing-with.patch
  bridge-Deduplicate-vlan-show-functions.patch
  bridge-Fix-BRIDGE_VLAN_TUNNEL-attribute-sizes.patch
  bridge-Fix-src_vni-argument-in-man-page.patch
  bridge-Fix-tunnelshow-json-output.patch
  bridge-Fix-typo-in-error-messages.patch
  bridge-Fix-vni-printing.patch
  devlink-Add-a-new-time-stamp-format-for-health-repor.patch
  devlink-Add-helper-for-left-justification-print.patch
  devlink-Fix-fmsg-nesting-in-non-JSON-output.patch
  devlink-Fix-inconsistency-between-command-input-and-.patch
  devlink-Left-justification-on-FMSG-output.patch
  devlink-Print-health-reporter-s-dump-time-stamp-in-a.patch
  devlink-allow-full-range-of-resource-sizes.patch
  devlink-require-resource-parameters.patch
  introduce-print_masked_u16-and-print_masked_u32.patch
  ip-fix-ip-route-show-json-output-for-multipath-nexth.patch
  ip-xfrm-if_id-ve-value-is-error.patch
  json_print-Remove-declaration-without-implementation.patch
  sync-UAPI-header-copies-with-SLE15-SP2.patch
  tc-fix-segmentation-fault-on-gact-action.patch
  tc-fix-warning-in-tc-q_pie.c.patch
  tc-flower-fix-output-for-ip-tos-and-ttl.patch
  tc-fq_codel-fix-missing-statistic-in-JSON-output.patch
  tc-pie-add-dq_rate_estimator-option.patch
  tc_util-add-an-option-to-print-masked-numbers-with-w.patch
  tc_util-add-functions-for-big-endian-masked-numbers.patch
  tc_util-introduce-a-function-to-print-JSON-non-JSON-.patch
  testsuite-Fix-line-count-test.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1578484801">- support alternative names as we already support them in SLE15-SP2
  kernel (jsc#SLE-7290):
  lib-ll_map-cache-alternative-names.patch
  ip-add-support-for-alternative-name-addition-deletio.patch
  ip-allow-to-use-alternative-names-as-handle.patch
  ip-fix-oneline-output.patch</changelog>
  <changelog author="kukuk@suse.com" date="1586347200">- Move arpd into own subpackage to avoid libdb dependency
  [jsc#SLE-12189]</changelog>
  <changelog author="mkubecek@suse.cz" date="1587729600">- follow-up fixes backported from upstream (bsc#1160242):
  ip-fix-link-type-and-vlan-oneline-output.patch
  ip-xfrm-Fix-help-messages.patch
  ip-link-xstats-fix-TX-IGMP-reports-string.patch
  erspan-set-erspan_ver-to-1-by-default.patch
  xfrm-not-try-to-delete-ipcomp-states-when-using-dele.patch
  nexthop-fix-error-reporting-in-filter-dump.patch
- refresh:
  xfrm-support-displaying-transformations-used-for-Mob.patch
- fix duplicated patch metadata:
  introduce-print_masked_u16-and-print_masked_u32.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633089600">- follow-up fixes backported from upstream (bsc#1160242):
  ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633348800">- follow-up fixes backported from upstream (bsc#1160242):
  ss-fix-end-of-line-printing-in-misc-ss.c.patch
  xfrm-also-check-for-ipv6-state-in-xfrm_state_keep.patch
  bridge-Fix-typo.patch
  bridge-Fix-output-with-empty-vlan-lists.patch
  tc-action-fix-time-values-output-in-JSON-format.patch
  Revert-bpf-replace-snprintf-with-asprintf-when-deali.patch
  bpf-Fixes-a-snprintf-truncation-warning.patch
  tipc-fixed-a-compile-warning-in-tipc-link.c.patch
  ip-xfrm-update-man-page-on-setting-printing-XFRMA_IF.patch
  bridge-fdb-show-fix-fdb-entry-state-output-for-json-.patch
  ip-link-Fix-indenting-in-help-text.patch
  ip-iplink_ipoib.c-Remove-extra-spaces.patch
  devlink-fix-uninitialized-warning.patch
  bridge-fix-string-length-warning.patch
  f_u32-fix-compiler-gcc-10-compiler-warning.patch
  rdma-Fix-statistics-bind-unbing-argument-handling.patch
  lib-namespace-fix-ip-all-netns-return-code.patch
  lib-bpf-Fix-and-simplify-bpf_mnt_check_target.patch
  lib-fs-avoid-double-call-to-mkdir-on-make_path.patch
  q_cake-Fix-incorrect-printing-of-signed-values-in-cl.patch
  ip-xfrm-limit-the-length-of-the-security-context-nam.patch
  erspan-fix-JSON-output.patch
  devlink-always-check-strslashrsplit-return-value.patch
  nexthop-fix-memory-leak-in-add_nh_group_attr.patch
  rdma-stat-initialize-ret-in-stat_qp_show_parse_cb.patch
  rdma-stat-fix-return-code.patch
  lib-bpf_legacy-treat-0-as-a-valid-file-descriptor.patch
  lib-bpf_legacy-fix-missing-socket-close-when-connect.patch
  ip-drop-2-char-command-assumption.patch
  man-fix-syntax-for-ip-link-property.patch
  lib-bpf_legacy-avoid-to-pass-invalid-argument-to-clo.patch
  ip-route-ignore-ENOENT-during-save-if-RT_TABLE_MAIN-.patch
  libnetlink-check-error-handler-is-present-before-a-c.patch
  ipmonitor-Fix-recvmsg-with-ancillary-data.patch
  tc-u32-Fix-key-folding-in-sample-option.patch
  man-bridge-fix-the-typo-to-change-c-lor-into-c-olor-.patch
  ss-fix-fallback-to-procfs-for-raw-sockets.patch
  iptuntap-fix-multi-queue-flag-display.patch
  tc-f_flower-fix-port-range-parsing.patch
  lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
- refresh:
  ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633435200">- upgrade to upstream version 5.14 (jsc#SLE-17360 jsc#SLE-18994
  jsc#SLE-19271)
  * replace upstream tarball and signature
  * update specfile with changes from Factory package
  * drop mainline backports contained in 5.14:
  - Revert-bpf-replace-snprintf-with-asprintf-when-deali.patch
  - bpf-Fixes-a-snprintf-truncation-warning.patch
  - bpf-replace-snprintf-with-asprintf-when-dealing-with.patch
  - bridge-Deduplicate-vlan-show-functions.patch
  - bridge-Fix-BRIDGE_VLAN_TUNNEL-attribute-sizes.patch
  - bridge-Fix-output-with-empty-vlan-lists.patch
  - bridge-Fix-src_vni-argument-in-man-page.patch
  - bridge-Fix-tunnelshow-json-output.patch
  - bridge-Fix-typo-in-error-messages.patch
  - bridge-Fix-typo.patch
  - bridge-Fix-vni-printing.patch
  - bridge-fdb-show-fix-fdb-entry-state-output-for-json-.patch
  - bridge-fix-string-length-warning.patch
  - devlink-Add-a-new-time-stamp-format-for-health-repor.patch
  - devlink-Add-helper-for-left-justification-print.patch
  - devlink-Fix-fmsg-nesting-in-non-JSON-output.patch
  - devlink-Fix-inconsistency-between-command-input-and-.patch
  - devlink-Left-justification-on-FMSG-output.patch
  - devlink-Print-health-reporter-s-dump-time-stamp-in-a.patch
  - devlink-allow-full-range-of-resource-sizes.patch
  - devlink-always-check-strslashrsplit-return-value.patch
  - devlink-fix-uninitialized-warning.patch
  - devlink-require-resource-parameters.patch
  - erspan-fix-JSON-output.patch
  - erspan-set-erspan_ver-to-1-by-default.patch
  - f_u32-fix-compiler-gcc-10-compiler-warning.patch
  - introduce-print_masked_u16-and-print_masked_u32.patch
  - ip-add-support-for-alternative-name-addition-deletio.patch
  - ip-allow-to-use-alternative-names-as-handle.patch
  - ip-drop-2-char-command-assumption.patch
  - ip-fix-ip-route-show-json-output-for-multipath-nexth.patch
  - ip-fix-link-type-and-vlan-oneline-output.patch
  - ip-fix-oneline-output.patch
  - ip-iplink_ipoib.c-Remove-extra-spaces.patch
  - ip-link-Fix-indenting-in-help-text.patch
  - ip-link-xstats-fix-TX-IGMP-reports-string.patch
  - ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  - ip-route-ignore-ENOENT-during-save-if-RT_TABLE_MAIN-.patch
  - ip-xfrm-Fix-help-messages.patch
  - ip-xfrm-if_id-ve-value-is-error.patch
  - ip-xfrm-limit-the-length-of-the-security-context-nam.patch
  - ip-xfrm-update-man-page-on-setting-printing-XFRMA_IF.patch
  - ipmonitor-Fix-recvmsg-with-ancillary-data.patch
  - json_print-Remove-declaration-without-implementation.patch
  - lib-bpf-Fix-and-simplify-bpf_mnt_check_target.patch
  - lib-bpf_legacy-avoid-to-pass-invalid-argument-to-clo.patch
  - lib-bpf_legacy-fix-missing-socket-close-when-connect.patch
  - lib-bpf_legacy-treat-0-as-a-valid-file-descriptor.patch
  - lib-fs-avoid-double-call-to-mkdir-on-make_path.patch
  - lib-ll_map-cache-alternative-names.patch
  - lib-namespace-fix-ip-all-netns-return-code.patch
  - libnetlink-check-error-handler-is-present-before-a-c.patch
  - man-bridge-fix-the-typo-to-change-c-lor-into-c-olor-.patch
  - man-fix-syntax-for-ip-link-property.patch
  - nexthop-fix-error-reporting-in-filter-dump.patch
  - nexthop-fix-memory-leak-in-add_nh_group_attr.patch
  - q_cake-Fix-incorrect-printing-of-signed-values-in-cl.patch
  - rdma-Fix-statistics-bind-unbing-argument-handling.patch
  - rdma-stat-fix-return-code.patch
  - rdma-stat-initialize-ret-in-stat_qp_show_parse_cb.patch
  - ss-fix-end-of-line-printing-in-misc-ss.c.patch
  - ss-fix-fallback-to-procfs-for-raw-sockets.patch
  - tc-action-fix-time-values-output-in-JSON-format.patch
  - tc-fix-segmentation-fault-on-gact-action.patch
  - tc-fix-warning-in-tc-q_pie.c.patch
  - tc-flower-fix-output-for-ip-tos-and-ttl.patch
  - tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch
  - tc-fq_codel-fix-missing-statistic-in-JSON-output.patch
  - tc-pie-add-dq_rate_estimator-option.patch
  - tc-u32-Fix-key-folding-in-sample-option.patch
  - tc_util-add-an-option-to-print-masked-numbers-with-w.patch
  - tc_util-add-functions-for-big-endian-masked-numbers.patch
  - tc_util-introduce-a-function-to-print-JSON-non-JSON-.patch
  - testsuite-Fix-line-count-test.patch
  - tipc-fixed-a-compile-warning-in-tipc-link.c.patch
  - xfrm-also-check-for-ipv6-state-in-xfrm_state_keep.patch
  - xfrm-not-try-to-delete-ipcomp-states-when-using-dele.patch
  * drop non-upstream patches obsoleted by rebase to 5.14:
  - sync-UAPI-header-copies-with-SLE15-SP2.patch
  - examples-fix-bashisms-in-example-script.patch
  * refresh remaining patches:
  - lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
  - split-link-and-compile-steps-for-binaries.patch
  - tc-f_flower-fix-port-range-parsing.patch
  - xfrm-support-displaying-transformations-used-for-Mob.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633435201">- follow-up fixes backported from upstream (bsc#1191316):
  tree-wide-fix-some-typos-found-by-Lintian.patch
  configure-restore-backward-compatibility.patch
  man-ip-link-remove-double-of.patch
  mptcp-unbreak-JSON-endpoint-list.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1705492800">- upgrade to upstream version 6.4 (jsc#PED-6820 jsc#PED-6844)
  * for detailed list of changes between 5.14 and 6.4, see Factory
    package changelog
  * replace upstream tarball and signature
  * update specfile with changes from Factory package
  * drop mainline backports contained in 6.4:
  - tree-wide-fix-some-typos-found-by-Lintian.patch
  - configure-restore-backward-compatibility.patch
  - man-ip-link-remove-double-of.patch
  - iptuntap-fix-multi-queue-flag-display.patch
  - tc-f_flower-fix-port-range-parsing.patch
  - lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
  - mptcp-unbreak-JSON-endpoint-list.patch
  * drop non-upstream patch obsoleted by rebase to 6.4:
  - xfrm-support-displaying-transformations-used-for-Mob.patch
  * refresh remaining patches:
  - adjust-installation-directories-for-openSUSE-SLE.patch
  - use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  - add-explicit-typecast-to-avoid-gcc-warning.patch
  - split-link-and-compile-steps-for-binaries.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1713873600">- iproute2.spec: ensure execute permissions of supplied scripts
  (fixes IBS build failure)</changelog>
  <changelog author="mkubecek@suse.cz" date="1713873601">- support display of bound but unconnected sockets (bsc#1204562)
  * ss-Add-support-for-dumping-TCP-bound-inactive-socket.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1742385600">- avoid spurious cgroup warning (bsc#1234383):
  - ss-Tone-down-cgroup-path-resolution.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1746792000">- add post-6.4 follow-up fixes (bsc#1243005):
  * bpf-fix-warning-from-basename.patch
  * bridge-fdb-add-an-error-print-for-unknown-command.patch
  * bridge-vni-Accept-del-command.patch
  * bridge-vni-Fix-duplicate-group-and-remote-error-mess.patch
  * bridge-vni-Fix-vni-filter-help-strings.patch
  * bridge-vni-Remove-dead-code-in-group-argument-parsin.patch
  * bridge-vni-Report-duplicate-vni-argument-using-dupar.patch
  * f_flower-Treat-port-0-as-valid.patch
  * genl-ctrl.c-spelling-fix-in-error-message.patch
  * ip-Add-missing-echo-option-to-usage.patch
  * ip-Add-missing-stats-command-to-usage.patch
  * ip-ipmroute-use-preferred_family-to-get-prefix.patch
  * ip-remove-non-existent-amt-subcommand-from-usage.patch
  * iplink-fix-fd-leak-when-playing-with-netns.patch
  * iplink_bridge-fix-incorrect-root-id-dump.patch
  * iplink_xstats-spelling-fix-in-error-message.patch
  * iproute2-fix-type-incompatibility-in-ifstat.c.patch
  * iproute2-prevent-memory-leak.patch
  * libnetlink-validate-nlmsg-header-length-first.patch
  * man-devlink-resource-add-missing-words-in-the-exampl.patch
  * mnl_utils-sanitize-incoming-netlink-payload-size-in-.patch
  * rdma-Fix-help-information-of-rdma-resource.patch
  * rdma-Fix-the-error-of-accessing-string-variable-outs.patch
  * rdma-use-print_XXX-instead-of-COLOR_NONE.patch
  * ss-Fix-socket-type-check-in-packet_show_line.patch
  * ss-fix-directory-leak-when-T-option-is-used.patch
  * ss-mptcp-display-info-counters-as-unsigned.patch
  * ss-prevent-Process-column-from-being-printed-unless-.patch
  * tc-taprio-don-t-print-netlink-attributes-which-weren.patch
  * tc-taprio-fix-JSON-output-when-TCA_TAPRIO_ATTR_ADMIN.patch
  * tc-taprio-fix-parsing-of-fp-option-when-it-doesn-t-a.patch
  * vdpa-consume-device_features-parameter.patch
- add to blacklist:
  * af0ea2cd0b9e (duplicate of 92eac7e4bf14)
- refresh:
  * ss-Add-support-for-dumping-TCP-bound-inactive-socket.patch
  * add-explicit-typecast-to-avoid-gcc-warning.patch
  * use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1746878400">- add post-6.4 follow-up fix (bsc#1243005)
  * ss-show-extra-info-when-processes-is-not-used.patch</changelog>
  <changelog author="sjaeckel@suse.de" date="1756296000">- devlink: support ipsec_crypto and ipsec_packet cap (bsc#1248660)
  * add Update-kernel-headers.patch
  * add devlink-Support-setting-port-function-ipsec_crypto-c.patch
  * add devlink-Support-setting-port-function-ipsec_packet-c.patch
  * refresh ss-Tone-down-cgroup-path-resolution.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1757592000">- sync UAPI header copies with SLE15-SP6 kernel
  * sync-UAPI-header-copies-with-SLE15-SP6.patch
- drop Update-kernel-headers.patch
  (no longer needed with full UAPI sync)</changelog>
  <changelog author="mkubecek@suse.cz" date="1757592001">- add post-6.4 follow-up fixes (bsc#1243005)
  * patches/bond-fix-stack-smash-in-xstats.patch
  * patches/tc-gred-fix-debug-print.patch</changelog>
</package>
<package pkgid="d636dbdd4e965f8a2f310b47af01bca7dbcfc2dec34571b81e19fc229ee84893" name="iputils" arch="src">
  <version epoch="0" ver="20221126" rel="150500.3.11.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1594555200">- remove unneeded libidn build dependency (boo#1174049)</changelog>
  <changelog author="pvorel@suse.cz" date="1597406400">- Remove 2 old patches (iputils-sec-ping-unblock.diff, iputils-ping-interrupt.diff)
  Although not documented, they both belong to bsc#674304. Fix from 2011 was
  resolved upstream in commit 810dd7f ("ping,ping6: Unmask signals on
  start-up.") [1], released in s20121112.
- Use %autosetup -p1</changelog>
  <changelog author="pvorel@suse.cz" date="1598270400">- Update to version s20200821
  https://github.com/iputils/iputils/releases/tag/s20200821
- Remove BuildRequires libopenssl-devel (added md5 implementation thus not needed)
- Remove patches from this release
  (arping-revert-partially-fix-sent-vs-received-package.patch,
  arping-fix-f-quit-on-first-reply-regression.patch)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1602072000">- No longer invoke permissions macros for ping. It now uses ICMP_PROTO sockets
  (bsc#1174504).</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1603108800">- Reference meson's build subdirectory as %_vpath_builddir, to
  line up with meson's structure.</changelog>
  <changelog author="pvorel@suse.cz" date="1612267200">- Update to version 20210202
  https://github.com/iputils/iputils/releases/tag/20210202
- Version scheme change: dropped leading 's', update that change</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1615896000">- Binaries were found to be not optimized or built
  with proper %optflags.</changelog>
  <changelog author="pvorel@suse.cz" date="1626955200">- Update to version 20210722
  https://github.com/iputils/iputils/releases/tag/20210722
- Use rarpd.service from upstream (removes PrivateUsers=yes, which fixes broken
  start of the service, adds DynamicUser=yes for more security)
- Add BuildRequires:  iproute2 (required for running tests)</changelog>
  <changelog author="jsegitz@suse.com" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_rdisc.service.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="pvorel@suse.cz" date="1639569600">- Update to version 20211215
  https://github.com/iputils/iputils/releases/tag/20211215
- rarpd and rdisc are going to be removed in next release
  (https://github.com/iputils/iputils/issues/363)
  therefore don't pack it since this release
- Drop harden_rdisc.service.patch, which was 1) merged upstream
  4bb0ace ("systemd: Add ProtectHostname, ProtectKernelLogs")
  for all services
  2) we don't build rdisc since this release</changelog>
  <changelog author="pgajdos@suse.com" date="1643112000">- temporarily reintroduce rarpd and rdisc tools to get them into
  15sp4 [jsc#SLE-23521]</changelog>
  <changelog author="pgajdos@suse.com" date="1644840000">- rarpd and rdisc tools are now disabled again [jsc#SLE-23521]</changelog>
  <changelog author="pvorel@suse.cz" date="1664798400">- Backport 2 fixes for bsc#1203957:
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1669464000">- Update to version 20221126
  https://github.com/iputils/iputils/releases/tag/20221126
- Update configure variables (ninfod, rarpd and rdisc were removed from
  upstream in next release =&gt; remove -DBUILD_NINFOD=false -DBUILD_RARPD=false
  - DBUILD_RDISC=false)
- Remove 2 backported fixes from this release
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716465600">- Backport upstream fix for bsc#1224877
  4db1de6 ("arping: Fix 1s delay on exit for unsolicited arpings")
  0001-arping-Fix-1s-delay-on-exit-for-unsolicited-arpings.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716811200">- Backport proposed fix for regression in upstream commit 4db1de6 (bsc#1224877)
  0002-arping-Fix-unsolicited-ARP-regressions-on-c-1.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1717416000">- Update 0002-arping-Fix-unsolicited-ARP-regressions-on-c-1.patch
  after upstream merged the fix, update git commit hashes.</changelog>
  <changelog author="angel.yankov@suse.com" date="1747137600">- Security fix [bsc#1242300, CVE-2025-47268]
  * integer overflow in RTT calculation can lead to undefined behavior
  * Add iputils-CVE-2025-47268.patch</changelog>
</package>
<package pkgid="65ee7f0740af5ac8dea0504421fa5e305124c7ba2f8075ce4e8c6f9a37f30cd9" name="iputils" arch="x86_64">
  <version epoch="0" ver="20221126" rel="150500.3.11.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1594555200">- remove unneeded libidn build dependency (boo#1174049)</changelog>
  <changelog author="pvorel@suse.cz" date="1597406400">- Remove 2 old patches (iputils-sec-ping-unblock.diff, iputils-ping-interrupt.diff)
  Although not documented, they both belong to bsc#674304. Fix from 2011 was
  resolved upstream in commit 810dd7f ("ping,ping6: Unmask signals on
  start-up.") [1], released in s20121112.
- Use %autosetup -p1</changelog>
  <changelog author="pvorel@suse.cz" date="1598270400">- Update to version s20200821
  https://github.com/iputils/iputils/releases/tag/s20200821
- Remove BuildRequires libopenssl-devel (added md5 implementation thus not needed)
- Remove patches from this release
  (arping-revert-partially-fix-sent-vs-received-package.patch,
  arping-fix-f-quit-on-first-reply-regression.patch)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1602072000">- No longer invoke permissions macros for ping. It now uses ICMP_PROTO sockets
  (bsc#1174504).</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1603108800">- Reference meson's build subdirectory as %_vpath_builddir, to
  line up with meson's structure.</changelog>
  <changelog author="pvorel@suse.cz" date="1612267200">- Update to version 20210202
  https://github.com/iputils/iputils/releases/tag/20210202
- Version scheme change: dropped leading 's', update that change</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1615896000">- Binaries were found to be not optimized or built
  with proper %optflags.</changelog>
  <changelog author="pvorel@suse.cz" date="1626955200">- Update to version 20210722
  https://github.com/iputils/iputils/releases/tag/20210722
- Use rarpd.service from upstream (removes PrivateUsers=yes, which fixes broken
  start of the service, adds DynamicUser=yes for more security)
- Add BuildRequires:  iproute2 (required for running tests)</changelog>
  <changelog author="jsegitz@suse.com" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_rdisc.service.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="pvorel@suse.cz" date="1639569600">- Update to version 20211215
  https://github.com/iputils/iputils/releases/tag/20211215
- rarpd and rdisc are going to be removed in next release
  (https://github.com/iputils/iputils/issues/363)
  therefore don't pack it since this release
- Drop harden_rdisc.service.patch, which was 1) merged upstream
  4bb0ace ("systemd: Add ProtectHostname, ProtectKernelLogs")
  for all services
  2) we don't build rdisc since this release</changelog>
  <changelog author="pgajdos@suse.com" date="1643112000">- temporarily reintroduce rarpd and rdisc tools to get them into
  15sp4 [jsc#SLE-23521]</changelog>
  <changelog author="pgajdos@suse.com" date="1644840000">- rarpd and rdisc tools are now disabled again [jsc#SLE-23521]</changelog>
  <changelog author="pvorel@suse.cz" date="1664798400">- Backport 2 fixes for bsc#1203957:
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1669464000">- Update to version 20221126
  https://github.com/iputils/iputils/releases/tag/20221126
- Update configure variables (ninfod, rarpd and rdisc were removed from
  upstream in next release =&gt; remove -DBUILD_NINFOD=false -DBUILD_RARPD=false
  - DBUILD_RDISC=false)
- Remove 2 backported fixes from this release
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716465600">- Backport upstream fix for bsc#1224877
  4db1de6 ("arping: Fix 1s delay on exit for unsolicited arpings")
  0001-arping-Fix-1s-delay-on-exit-for-unsolicited-arpings.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716811200">- Backport proposed fix for regression in upstream commit 4db1de6 (bsc#1224877)
  0002-arping-Fix-unsolicited-ARP-regressions-on-c-1.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1717416000">- Update 0002-arping-Fix-unsolicited-ARP-regressions-on-c-1.patch
  after upstream merged the fix, update git commit hashes.</changelog>
  <changelog author="angel.yankov@suse.com" date="1747137600">- Security fix [bsc#1242300, CVE-2025-47268]
  * integer overflow in RTT calculation can lead to undefined behavior
  * Add iputils-CVE-2025-47268.patch</changelog>
</package>
<package pkgid="60fb88b4b87ce846546abf70deac3b7dc069ae62a4123cbc073d29e5e973ca9a" name="iputils" arch="src">
  <version epoch="0" ver="20221126" rel="150500.3.14.1"/>
  <changelog author="pvorel@suse.cz" date="1597406400">- Remove 2 old patches (iputils-sec-ping-unblock.diff, iputils-ping-interrupt.diff)
  Although not documented, they both belong to bsc#674304. Fix from 2011 was
  resolved upstream in commit 810dd7f ("ping,ping6: Unmask signals on
  start-up.") [1], released in s20121112.
- Use %autosetup -p1</changelog>
  <changelog author="pvorel@suse.cz" date="1598270400">- Update to version s20200821
  https://github.com/iputils/iputils/releases/tag/s20200821
- Remove BuildRequires libopenssl-devel (added md5 implementation thus not needed)
- Remove patches from this release
  (arping-revert-partially-fix-sent-vs-received-package.patch,
  arping-fix-f-quit-on-first-reply-regression.patch)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1602072000">- No longer invoke permissions macros for ping. It now uses ICMP_PROTO sockets
  (bsc#1174504).</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1603108800">- Reference meson's build subdirectory as %_vpath_builddir, to
  line up with meson's structure.</changelog>
  <changelog author="pvorel@suse.cz" date="1612267200">- Update to version 20210202
  https://github.com/iputils/iputils/releases/tag/20210202
- Version scheme change: dropped leading 's', update that change</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1615896000">- Binaries were found to be not optimized or built
  with proper %optflags.</changelog>
  <changelog author="pvorel@suse.cz" date="1626955200">- Update to version 20210722
  https://github.com/iputils/iputils/releases/tag/20210722
- Use rarpd.service from upstream (removes PrivateUsers=yes, which fixes broken
  start of the service, adds DynamicUser=yes for more security)
- Add BuildRequires:  iproute2 (required for running tests)</changelog>
  <changelog author="jsegitz@suse.com" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_rdisc.service.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="pvorel@suse.cz" date="1639569600">- Update to version 20211215
  https://github.com/iputils/iputils/releases/tag/20211215
- rarpd and rdisc are going to be removed in next release
  (https://github.com/iputils/iputils/issues/363)
  therefore don't pack it since this release
- Drop harden_rdisc.service.patch, which was 1) merged upstream
  4bb0ace ("systemd: Add ProtectHostname, ProtectKernelLogs")
  for all services
  2) we don't build rdisc since this release</changelog>
  <changelog author="pgajdos@suse.com" date="1643112000">- temporarily reintroduce rarpd and rdisc tools to get them into
  15sp4 [jsc#SLE-23521]</changelog>
  <changelog author="pgajdos@suse.com" date="1644840000">- rarpd and rdisc tools are now disabled again [jsc#SLE-23521]</changelog>
  <changelog author="pvorel@suse.cz" date="1664798400">- Backport 2 fixes for bsc#1203957:
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1669464000">- Update to version 20221126
  https://github.com/iputils/iputils/releases/tag/20221126
- Update configure variables (ninfod, rarpd and rdisc were removed from
  upstream in next release =&gt; remove -DBUILD_NINFOD=false -DBUILD_RARPD=false
  - DBUILD_RDISC=false)
- Remove 2 backported fixes from this release
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716465600">- Backport upstream fix for bsc#1224877
  4db1de6 ("arping: Fix 1s delay on exit for unsolicited arpings")
  0001-arping-Fix-1s-delay-on-exit-for-unsolicited-arpings.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716811200">- Backport proposed fix for regression in upstream commit 4db1de6 (bsc#1224877)
  0002-arping-Fix-unsolicited-ARP-regressions-on-c-1.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1717416000">- Update 0002-arping-Fix-unsolicited-ARP-regressions-on-c-1.patch
  after upstream merged the fix, update git commit hashes.</changelog>
  <changelog author="angel.yankov@suse.com" date="1747137600">- Security fix [bsc#1242300, CVE-2025-47268]
  * integer overflow in RTT calculation can lead to undefined behavior
  * Add iputils-CVE-2025-47268.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1749556800">- Security fix [bsc#1243772, CVE-2025-48964]
  * Fix  integer overflow in ping statistics via zero timestamp
  * Add iputils-CVE-2025-48964_01.patch
  * Add iputils-CVE-2025-48964_02.patch
  * Add iputils-CVE-2025-48964_03.patch
  * Add iputils-CVE-2025-48964_04.patch
  * Add iputils-CVE-2025-48964_regression.patch</changelog>
</package>
<package pkgid="0253ab058ee4b1f58174e5748715f62afd2b51d469810f7691bb1188f804a7ca" name="iputils" arch="x86_64">
  <version epoch="0" ver="20221126" rel="150500.3.14.1"/>
  <changelog author="pvorel@suse.cz" date="1597406400">- Remove 2 old patches (iputils-sec-ping-unblock.diff, iputils-ping-interrupt.diff)
  Although not documented, they both belong to bsc#674304. Fix from 2011 was
  resolved upstream in commit 810dd7f ("ping,ping6: Unmask signals on
  start-up.") [1], released in s20121112.
- Use %autosetup -p1</changelog>
  <changelog author="pvorel@suse.cz" date="1598270400">- Update to version s20200821
  https://github.com/iputils/iputils/releases/tag/s20200821
- Remove BuildRequires libopenssl-devel (added md5 implementation thus not needed)
- Remove patches from this release
  (arping-revert-partially-fix-sent-vs-received-package.patch,
  arping-fix-f-quit-on-first-reply-regression.patch)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1602072000">- No longer invoke permissions macros for ping. It now uses ICMP_PROTO sockets
  (bsc#1174504).</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1603108800">- Reference meson's build subdirectory as %_vpath_builddir, to
  line up with meson's structure.</changelog>
  <changelog author="pvorel@suse.cz" date="1612267200">- Update to version 20210202
  https://github.com/iputils/iputils/releases/tag/20210202
- Version scheme change: dropped leading 's', update that change</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1615896000">- Binaries were found to be not optimized or built
  with proper %optflags.</changelog>
  <changelog author="pvorel@suse.cz" date="1626955200">- Update to version 20210722
  https://github.com/iputils/iputils/releases/tag/20210722
- Use rarpd.service from upstream (removes PrivateUsers=yes, which fixes broken
  start of the service, adds DynamicUser=yes for more security)
- Add BuildRequires:  iproute2 (required for running tests)</changelog>
  <changelog author="jsegitz@suse.com" date="1632312000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_rdisc.service.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="pvorel@suse.cz" date="1639569600">- Update to version 20211215
  https://github.com/iputils/iputils/releases/tag/20211215
- rarpd and rdisc are going to be removed in next release
  (https://github.com/iputils/iputils/issues/363)
  therefore don't pack it since this release
- Drop harden_rdisc.service.patch, which was 1) merged upstream
  4bb0ace ("systemd: Add ProtectHostname, ProtectKernelLogs")
  for all services
  2) we don't build rdisc since this release</changelog>
  <changelog author="pgajdos@suse.com" date="1643112000">- temporarily reintroduce rarpd and rdisc tools to get them into
  15sp4 [jsc#SLE-23521]</changelog>
  <changelog author="pgajdos@suse.com" date="1644840000">- rarpd and rdisc tools are now disabled again [jsc#SLE-23521]</changelog>
  <changelog author="pvorel@suse.cz" date="1664798400">- Backport 2 fixes for bsc#1203957:
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1669464000">- Update to version 20221126
  https://github.com/iputils/iputils/releases/tag/20221126
- Update configure variables (ninfod, rarpd and rdisc were removed from
  upstream in next release =&gt; remove -DBUILD_NINFOD=false -DBUILD_RARPD=false
  - DBUILD_RDISC=false)
- Remove 2 backported fixes from this release
  0001-ping-Add-SA_RESTART-to-sa_flags.patch
  0002-ping-Make-ping_rts-struct-static.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716465600">- Backport upstream fix for bsc#1224877
  4db1de6 ("arping: Fix 1s delay on exit for unsolicited arpings")
  0001-arping-Fix-1s-delay-on-exit-for-unsolicited-arpings.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1716811200">- Backport proposed fix for regression in upstream commit 4db1de6 (bsc#1224877)
  0002-arping-Fix-unsolicited-ARP-regressions-on-c-1.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1717416000">- Update 0002-arping-Fix-unsolicited-ARP-regressions-on-c-1.patch
  after upstream merged the fix, update git commit hashes.</changelog>
  <changelog author="angel.yankov@suse.com" date="1747137600">- Security fix [bsc#1242300, CVE-2025-47268]
  * integer overflow in RTT calculation can lead to undefined behavior
  * Add iputils-CVE-2025-47268.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1749556800">- Security fix [bsc#1243772, CVE-2025-48964]
  * Fix  integer overflow in ping statistics via zero timestamp
  * Add iputils-CVE-2025-48964_01.patch
  * Add iputils-CVE-2025-48964_02.patch
  * Add iputils-CVE-2025-48964_03.patch
  * Add iputils-CVE-2025-48964_04.patch
  * Add iputils-CVE-2025-48964_regression.patch</changelog>
</package>
<package pkgid="4c8b1fb1d3f86944e1b5e1445dea7c8c8152743b50e0083ad3eeaae2ef859b0a" name="ipw-firmware" arch="noarch">
  <version epoch="0" ver="9" rel="150000.3.3.1"/>
  <changelog author="cthiel@suse.de" date="1141819200">- Prereq module-init-tools and grep, to make %post scripts work</changelog>
  <changelog author="jg@suse.de" date="1142856000">- fixed Supplements (bug 159079)</changelog>
  <changelog author="seife@suse.de" date="1154952000">- added ipw2000 firmware version 3.0 (for kernel 2.6.18)</changelog>
  <changelog author="jg@suse.de" date="1170417600">- reload modules after installation only when necessary
  (bug 210964)
- updated ipw3945 ucode to version 1.14.2, changes:
  * Fixed a fairly significant problem with some tuners not being
    able to lock properly onto a channel's frequency on B/G band.
  * Fixed a problem regarding power management.
  * Fxied lame scan results problem on Bugzilla #1085.</changelog>
  <changelog author="jg@suse.de" date="1174046400">- removed /lib/firmware from filelist</changelog>
  <changelog author="hschaa@suse.de" date="1205236800">- Remove ipw3945-firmware as ipw3945-kmp is not shipped anymore
  with 11.0 due to its successor iwl3945</changelog>
  <changelog author="seife@opensuse.org" date="1260360000">- upgrade ipw2200 firmware to version 3.1</changelog>
  <changelog author="coolo@suse.com" date="1323864000">- as spdx.org has no concept of firmware, we decided to mark it as
  SUSE-Firmware</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1359806400">- PreReq modutils instead of module-init-tools otherwise
  we cannot switch to kmod cleanly</changelog>
  <changelog author="pgajdos@suse.com" date="1762430400">- mark LICENSE.ipw2200 as %license [bsc#1252153]</changelog>
</package>
<package pkgid="265dc8847e5cdcbddc01a9ea522220a8ae6b082df6d921dc74893bc9a561f60a" name="ipw-firmware" arch="src">
  <version epoch="0" ver="9" rel="150000.3.3.1"/>
  <changelog author="jg@suse.de" date="1096372800">- updated ipw2100 firmware to version 1.3 (needed for latest
  ipw2100 driver)</changelog>
  <changelog author="jg@suse.de" date="1096632000">- moved firmware binaries to /lib/firmware (bug 46583)
- reloading ipw modules after installation, so the modules get
  reinitialized with the firmware (bug 46556)</changelog>
  <changelog author="jg@suse.de" date="1103112000">- updated ipw2200 firmware to version 2.1</changelog>
  <changelog author="jg@suse.de" date="1105531200">- updated ipw2200 firmware to version 2.2</changelog>
  <changelog author="jg@suse.de" date="1121256000">- updated ipw2200 firmware to version 2.3</changelog>
  <changelog author="ro@suse.de" date="1124452800">- removed dropped hotplug package from nfb and requires</changelog>
  <changelog author="jg@suse.de" date="1131451200">- added ipw2200 firmware version 2.4 (latest version)
- added ipw2200 firmware version 2.2 (needed for ipw2200 version
  that comes with kernel 2.6.14)</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="jg@suse.de" date="1141041600">- added ipw3945 firmware</changelog>
  <changelog author="agruen@suse.de" date="1141732800">- Add modalias tags (155357).</changelog>
  <changelog author="cthiel@suse.de" date="1141819200">- Prereq module-init-tools and grep, to make %post scripts work</changelog>
  <changelog author="jg@suse.de" date="1142856000">- fixed Supplements (bug 159079)</changelog>
  <changelog author="seife@suse.de" date="1154952000">- added ipw2000 firmware version 3.0 (for kernel 2.6.18)</changelog>
  <changelog author="jg@suse.de" date="1170417600">- reload modules after installation only when necessary
  (bug 210964)
- updated ipw3945 ucode to version 1.14.2, changes:
  * Fixed a fairly significant problem with some tuners not being
    able to lock properly onto a channel's frequency on B/G band.
  * Fixed a problem regarding power management.
  * Fxied lame scan results problem on Bugzilla #1085.</changelog>
  <changelog author="jg@suse.de" date="1174046400">- removed /lib/firmware from filelist</changelog>
  <changelog author="hschaa@suse.de" date="1205236800">- Remove ipw3945-firmware as ipw3945-kmp is not shipped anymore
  with 11.0 due to its successor iwl3945</changelog>
  <changelog author="seife@opensuse.org" date="1260360000">- upgrade ipw2200 firmware to version 3.1</changelog>
  <changelog author="coolo@suse.com" date="1323864000">- as spdx.org has no concept of firmware, we decided to mark it as
  SUSE-Firmware</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1359806400">- PreReq modutils instead of module-init-tools otherwise
  we cannot switch to kmod cleanly</changelog>
  <changelog author="pgajdos@suse.com" date="1762430400">- mark LICENSE.ipw2200 as %license [bsc#1252153]</changelog>
</package>
<package pkgid="7c5903dde7462516f052d275ab3891552f0bf3e019436499a27c9323a3ace9e9" name="iscsiuio" arch="x86_64">
  <version epoch="0" ver="0.7.8.8" rel="150700.57.3.1"/>
  <changelog author="lduncan@suse.com" date="1652443200">- Set initiatorname in %post (at end of install), for cases
  where root is read-only at startup time (bsc#1198457)</changelog>
  <changelog author="lduncan@suse.com" date="1655467200">- For Tumbleweed, moved logrotate files from user-specific
  directory /etc/logrotate.d to vendor-specific
  /usr/etc/logrotate.d
  (for Stefan Schubert &lt;schubi@suse.com&gt;)</changelog>
  <changelog author="lduncan@suse.com" date="1657108800">- Modify SPEC file so systemd unit files are mode 644 (not 755)
  (bsc#1200570)</changelog>
  <changelog author="lduncan@suse.com" date="1664193600">- Update to upstream version 2.1.8, which includes some bug fixes,
  and adds the ability to build using meson. The SPEC file was
  updated to use meson.
  Also, some files have moved:
  * the "lock" file has moved from /etc/iscsi to /var/lock/iscsi
  * the "database files" have moved from /etc/iscsi to
    /var/lib/iscsi</changelog>
  <changelog author="lduncan@suse.com" date="1668600000">- Updated to latest upstream. Changes:
  * iscsid/iscsiuio: fix OOM adjustment (github issue #377)</changelog>
  <changelog author="lduncan@suse.com" date="1670414400">- Moving DB files from /etc/iscsi/* to /var/lib/iscsi/* for
  SLE-15-SP5 and forward, as is done in Tumbleweed.
- Added /etc/iscsi/README.DB-files-moved, and added SPEC file
  changes to support this, including a post-install script to
  move the DB files, only installed if DB files are moved.
- Renamed shared library from libopeniscsiusr0_2_0 to
  libopeniscsiusr0, to correctly match SONAME in library.</changelog>
  <changelog author="lduncan@suse.com" date="1671451200">- Updated SPEC file dependencies for libopeniscsiusr to avoid
  conflicting package installation.</changelog>
  <changelog author="lduncan@suse.com" date="1671624000">- Update iscsid.service so it starts iscsid.socket, if needed
  (bsc#1206132).</changelog>
  <changelog author="lduncan@suse.com" date="1677326400">- Build system: meson builds were ignoring optflags, and other
  passed in compiler options.</changelog>
  <changelog author="lduncan@suse.com" date="1681732800">- Remove "--strip" in SPEC file for meson build, so that
  debuginfo is generated. (from mwilck) (bsc#1210536)</changelog>
  <changelog author="lduncan@suse.com" date="1686830400">- Upgrade to upstream version 2.1.9 with tag "2.1.9-suse"
  (bsc#1210514), replacing open-iscsi-2.1.8-suse.tar.bz2 with
  open-iscsi-2.1.9-suse.tar.bz2, and resetting
  open-iscsi-SUSE-latest.diff.bz2. A summary from the ChangeLog
  file:
  * Fix discoveryd compiler warning
  * Sync iscsi_if.h with kernel
  * Handle old DB records correctly
  * Make IQN configuration for iscsi-iname
  * remove OFFLOAD_BOOT_SUPPORTED, which is always true
  * Use UUID for IPC, not "root"
  * do not support SHA3 for libressl
  * build meson cleanups, including changing default DB home
  * Updated README about NOPs
  * Remove "BindTo" in systemd service file
  * Some iscsiuio fixes, including licensing and memory leaks
    (bsc#1210514)
  * Small netlink fixes
  * Fix OOM adjustment
  * Some error recovery fixes
  * Some spelling fixes</changelog>
  <changelog author="lduncan@suse.com" date="1687262400">- Fix iscsiuio build version by updating iscsiuio/meson.build
  and RPM SPEC file (bsc#1210514), updating
  open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1698235200">- Updated to latest upstream, which includes (bsc#1210514):
  * several fixes to harden iscsiuio, including:
  - logging now uses syslog
  - shutdown now waits for helper threads to complete
  - netlink socket cleanup
  * some minor bug fixes, some helping builds on musl
  This updates iscsiuio version to 0.7.8.8.
  This updates open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1703073600">- Updated to latest upstream: two small changes, with no known
  functional changes:
  * Incorrect documentation for `iscsiadm -m session` print level
    (upstream issue #432)
  * Stop using deprecated inet_aton and inet_ntoa (upstream issue
    [#435])
- Also, stopped using pre-prepared tarballs for the build, instead
  now using a service file to get latest SUSE srouces directly.
  This removed these two files:
  * open-iscsi-2.1.9-suse.tar.bz2, and
  * open-iscsi-SUSE-latest.diff.bz2
  whcih were both created by a shell script, and added a service-
  file-generated file of the form:
  * open-iscsi-2.1.9.suse+TAG_OFFSET.tar.xz
  where TAG_OFFSET is of the form "COMMIT_COUNT.HASH", where
  COMMIT_COUNT is the count of commits since 2.1.9-suse (in this
  case), and HASH is the git commit hash being used.</changelog>
  <changelog author="lduncan@suse.com" date="1727697600">- Update to version 2.1.10.suse+51.fea0fde82ed1:
  * Incudes upstream version 2.1.10 plus some fixes
  * Fix firmware targets startup to always be "onboot" (#482)
    (bsc#1228084)
  * Change a discovery function to void return type (#481)
  * Fix gcc issues (#480)
  * Bugfix read specific sysfs value "off" of session attribute (#466)
  * Fix bug where abort_tmo read failures were ignored. (#467)
  * grammar nitpicks (#464)
  * Fix memory leak in iscsi_check_session_use_count (#465)
  * improve the comments in idbm_lock() (#458)
  * Make it visible when memory allocation failure (#457)
  * Better handle multiple iscsiadm commands (#453)
  * iscsiadm: allow hostnames in node-mode commands (#451)
  * Modify how workqueue priority is set (#445)
  * Fix authmethod check by printing a warning message when CHAP used and authmethod=None (#443)
  * iscsid: Rescan devices on relogin (#444)
  * Adds missing characters in README. (#440)
  * Turn off iSCSI NOP-Outs, by default.
  * fix: add usr/iscsid_req.h missinig underline (#431) (#436)</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="lduncan@suse.com" date="1744027200">- Update to version 2.1.11.suse+65.65365e1cdedb:
  * doc: fixup iscsiadm man page option for -r (#501)
  * Modify log function to print session id (#498)
  * Fix minor typo ("authenticaton") (#500)
  * Preparing for version 2.1.11 (#499)
  * iscsid: Rate limit session reopen log messages (#492)
  * IPv6 support for iBFT iSCSI boot (#493)
  * Improve iscsiadm command line parsing messages (#494)
  * More testing cleanup, and fix dprint test usage (#491)
  * Fix a typo in test/README (#486)
  * iscsid: Fix hang during login with scan=manual (#485)
  * fix 4 issues which are finded when building with clang 17 (#478)</changelog>
  <changelog author="lduncan@suse.com" date="1744027201">- Change SPEC file so that open-iscsi lock files always go
  in /run/lock/iscsi (bsc#1239107)</changelog>
  <changelog author="lduncan@suse.com" date="1744804800">- Update to version 2.1.11.suse+66.13c070123738:
  * Fix iscsid.conf NOP configuration (bsc#1240541)</changelog>
  <changelog author="lduncan@suse.com" date="1752408000">- Update to version 2.1.11.suse+73.1723affc61eb:
  * README for rpm build directory
  * Fix issue with IPv6 adapter interfaces (#508, bsc#1240969)
  * fwparam_ppc.c: Fix the calloc-transposed-args issue (#504)
  * Makefile: fix "No rule to make target 'iscsiuio/Makefile.in" issue (#506)
  * Fix typo in initiator.c (#507)
- Fixed some issues in this changes file
  * One date had incorrect format from 2014
  * Two separator lines were formatted incrrectly</changelog>
</package>
<package pkgid="43bed1e4f50ab2d49a109cc17c8313308bf8482858483bf603481845bb89a235" name="jasper" arch="src">
  <version epoch="0" ver="2.0.14" rel="150000.3.37.1"/>
  <changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
  <changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
  <changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.
  * bsc#1010960, CVE-2016-9387: jas_seq.c:90: jas_matrix&lt;= yend'
    failed.</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Upgrade to 2.0.14
  * Soname and package name change libjasper1 to libjasper4
  * Security fixes:
    + CVE-2016-9557 jasper: Signed integer overflow in jas_image.c
- Removed patches:
  * jasper-1.900.1-uninitialized.patch
    + not needed any more
  * jasper-CVE-2016-10251.patch
  * jasper-CVE-2016-8654.patch
  * jasper-CVE-2016-9262.patch
  * jasper-CVE-2016-9395.patch
  * jasper-CVE-2016-9560.patch
  * jasper-CVE-2016-9583.patch
  * jasper-CVE-2016-9591.patch
  * jasper-CVE-2016-9600.patch
  * jasper-CVE-2017-1000050.patch
  * jasper-CVE-2017-5498.patch
  * jasper-CVE-2017-6850.patch
    + Fixed upstream
- Added patches:
  * 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
    + fix assertion failure JPC_NOMINALGAIN() which can be caused
    by a crafted JP2 file.
  * 0001-Added-a-fix-from-nrusch-to-allow-JasPer-to-be-build-.patch
    + allow JasPer to be build with CMake 2.x as well as CMake 3.x.</changelog>
  <changelog author="fstrba@suse.com" date="1522324801">- Added patch:
  * jasper-CVE-2018-9055.patch
    + fix CVE-2018-9055, bsc#1087020: jasper: denial of service via
    a reachable assertion in the function jpc_firstone in
    libjasper/jpc/jpc_math.c.</changelog>
  <changelog author="mvetter@suse.com" date="1552392000">- bsc#1117511 CVE-2018-19539 Fix access violation in jas_image_readcmpt:
  * Add jasper-CVE-2018-19539.patch</changelog>
  <changelog author="mvetter@suse.com" date="1553860800">- bsc#1117505 CVE-2018-19542 Fix NULL pointer dereference jp2_decode:
  Add jasper-CVE-2018-19542.patch
- bsc#1010783 CVE-2016-9396 Fix reachable assertion in jpc_cox_getcompparms:
  * Rename 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
  to jasper-CVE-2016-9396.patch</changelog>
  <changelog author="mvetter@suse.com" date="1559822400">- bsc#1117508 CVE-2018-19540: Fix heap based overflow in jas_icctxtdesc_input
  Add jasper-CVE-2018-19540.patch: Make sure asclen is at least 1
- bsc#1117507 CVE-2018-19541: Fix heap based overread in jas_image_depalettize
  Add jasper-CVE-2018-19541.patch: Check number of lutents</changelog>
  <changelog author="adam.majer@suse.de" date="1569844800">- jasper-CVE-2018-19541.patch: verify color palette information
  in j2 files when it's read from the file as per specifications
  of JPEG2000. (bsc#1117507)</changelog>
  <changelog author="mvetter@suse.com" date="1584446400">- bsc#1092115 CVE-2018-9154: Fix possible denial of service
  Add jasper-CVE-2018-9154.patch: dont abort in jpc_dec_process_sot()</changelog>
  <changelog author="mvetter@suse.com" date="1597320000">- bsc#1010980 CVE-2016-9399: Fix assert in calcstepsizes
  Add jasper-CVE-2016-9399.patch
- bsc#1020451 CVE-2017-5499: Validate component depth bit
  Add jasper-CVE-2017-5499.patch
- bsc#1020456 CVE-2017-5503, bsc#1020458 CVE-2017-5504, bsc#1020460 CVE-2017-5505:
  Check bounds in jas_seq2d_bindsub()
  Add jasper-CVE-2017-5503-CVE-2017-5504-CVE-2017-5505.patch</changelog>
  <changelog author="mvetter@suse.com" date="1597665600">- bsc#1120807 CVE-2018-20570: Fix heap based buffer over-read in jp2_encode
  Add jasper-CVE-2018-20570.patch
- bsc#1120805 CVE-2018-20622: Fix memory leak in jas_malloc.c
  Add jasper-CVE-2018-20622.patch
- bsc#1117328 CVE-2018-19543, bsc#1045450 CVE-2017-9782: Fix numchans mixup
  Add jasper-CVE-2018-19543-CVE-2017-9782.patch
- bsc#1115637 CVE-2018-19139: Fix mem leaks by registering jpc_unk_destroyparms
  Add jasper-CVE-2018-19139.patch
- bsc#1114498 CVE-2018-18873: Fix null pointer deref in ras_putdatastd
  Add jasper-CVE-2018-18873.patch
- bsc#1088278 CVE-2018-9252: Fix reachable assertion in jpc_abstorelstepsize
  Add jasper-CVE-2018-9252.patch
- bsc#1057152 CVE-2017-14132: Fix heap base overflow in by checking components
  Add jasper-CVE-2017-14132.patch</changelog>
  <changelog author="mvetter@suse.com" date="1598443200">- bsc#1010979 CVE-2016-9398: Use new fix from upstream where we
  actually check for allowed value range instead of just negating
  Add jasper-CVE-2016-9398-upstream.patch</changelog>
  <changelog author="mvetter@suse.com" date="1612785600">- bsc#1179748 CVE-2020-27828: Fix heap overflow by checking maxrlvls
  Add jasper-CVE-2020-27828.patch
- bsc#1181483 CVE-2021-3272: Fix heap overflow by ensuring number
  of channels matches image components
  Add jasper-CVE-2021-3272.patch</changelog>
  <changelog author="mvetter@suse.com" date="1643803200">- bsc#1188437 CVE-2021-27845: Fix divide-by-zery in cp_create()
  Add jasper-CVE-2021-27845.patch</changelog>
  <changelog author="mvetter@suse.com" date="1650542400">- bsc#1184757 CVE-2021-3467: Fix NULL pointer deref in jp2_decode()
  Add jasper-CVE-2021-3467.patch
- bsc#1184798 CVE-2021-3443: Fix NULL pointer derefin jp2_decode()
  Add jasper-CVE-2021-3443.patch
- bsc#1182104 CVE-2021-26927: Fix NULL pointer deref in jp2_decode()
  bsc#1182105 CVE-2021-26926: Fix Out of bounds read in jp2_decode()
  Add jasper-CVE-2021-26926-CVE-2021-26927.patch</changelog>
  <changelog author="mvetter@suse.com" date="1663329600">- security update:
  * CVE-2022-2963 [bsc#1202642]
    + jasper-CVE-2022-2963.patch</changelog>
  <changelog author="mvetter@suse.com" date="1705320000">- bsc#1218802 CVE-2023-51257:
  Fix invalid memory write on jas_icctxt_input()
  Add jasper-CVE-CVE-2023-51257.patch</changelog>
  <changelog author="mvetter@suse.com" date="1713528000">- bsc#1223155 CVE-2024-31744:
  Add missing check to jpc_dec_process_sod()
  Add jasper-CVE-2024-31744.patch</changelog>
  <changelog author="mvetter@suse.com" date="1755259200">- bsc#1247904 CVE-2025-8835:
  Fix NULL pointer dereference in function jas_image_chclrspc
  Add jasper-CVE-2025-8835.patch
- bsc#1247902 CVE-2025-8836:
  Fix assertion failure in the jpc_floorlog2 function
  Add jasper-CVE-2025-8836.patch
- bsc#1247901 CVE-2025-8837:
  Fix use-after-free in function jpc_dec_dump
  Add jasper-CVE-2025-8837.patch</changelog>
</package>
<package pkgid="2a53fcaa5ba828c027371c0e35fb99a8c7cac7506ea80540668c912b85c4350d" name="jasper" arch="src">
  <version epoch="0" ver="2.0.14" rel="150000.3.40.1"/>
  <changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
  <changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.
  * bsc#1010960, CVE-2016-9387: jas_seq.c:90: jas_matrix&lt;= yend'
    failed.</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Upgrade to 2.0.14
  * Soname and package name change libjasper1 to libjasper4
  * Security fixes:
    + CVE-2016-9557 jasper: Signed integer overflow in jas_image.c
- Removed patches:
  * jasper-1.900.1-uninitialized.patch
    + not needed any more
  * jasper-CVE-2016-10251.patch
  * jasper-CVE-2016-8654.patch
  * jasper-CVE-2016-9262.patch
  * jasper-CVE-2016-9395.patch
  * jasper-CVE-2016-9560.patch
  * jasper-CVE-2016-9583.patch
  * jasper-CVE-2016-9591.patch
  * jasper-CVE-2016-9600.patch
  * jasper-CVE-2017-1000050.patch
  * jasper-CVE-2017-5498.patch
  * jasper-CVE-2017-6850.patch
    + Fixed upstream
- Added patches:
  * 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
    + fix assertion failure JPC_NOMINALGAIN() which can be caused
    by a crafted JP2 file.
  * 0001-Added-a-fix-from-nrusch-to-allow-JasPer-to-be-build-.patch
    + allow JasPer to be build with CMake 2.x as well as CMake 3.x.</changelog>
  <changelog author="fstrba@suse.com" date="1522324801">- Added patch:
  * jasper-CVE-2018-9055.patch
    + fix CVE-2018-9055, bsc#1087020: jasper: denial of service via
    a reachable assertion in the function jpc_firstone in
    libjasper/jpc/jpc_math.c.</changelog>
  <changelog author="mvetter@suse.com" date="1552392000">- bsc#1117511 CVE-2018-19539 Fix access violation in jas_image_readcmpt:
  * Add jasper-CVE-2018-19539.patch</changelog>
  <changelog author="mvetter@suse.com" date="1553860800">- bsc#1117505 CVE-2018-19542 Fix NULL pointer dereference jp2_decode:
  Add jasper-CVE-2018-19542.patch
- bsc#1010783 CVE-2016-9396 Fix reachable assertion in jpc_cox_getcompparms:
  * Rename 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
  to jasper-CVE-2016-9396.patch</changelog>
  <changelog author="mvetter@suse.com" date="1559822400">- bsc#1117508 CVE-2018-19540: Fix heap based overflow in jas_icctxtdesc_input
  Add jasper-CVE-2018-19540.patch: Make sure asclen is at least 1
- bsc#1117507 CVE-2018-19541: Fix heap based overread in jas_image_depalettize
  Add jasper-CVE-2018-19541.patch: Check number of lutents</changelog>
  <changelog author="adam.majer@suse.de" date="1569844800">- jasper-CVE-2018-19541.patch: verify color palette information
  in j2 files when it's read from the file as per specifications
  of JPEG2000. (bsc#1117507)</changelog>
  <changelog author="mvetter@suse.com" date="1584446400">- bsc#1092115 CVE-2018-9154: Fix possible denial of service
  Add jasper-CVE-2018-9154.patch: dont abort in jpc_dec_process_sot()</changelog>
  <changelog author="mvetter@suse.com" date="1597320000">- bsc#1010980 CVE-2016-9399: Fix assert in calcstepsizes
  Add jasper-CVE-2016-9399.patch
- bsc#1020451 CVE-2017-5499: Validate component depth bit
  Add jasper-CVE-2017-5499.patch
- bsc#1020456 CVE-2017-5503, bsc#1020458 CVE-2017-5504, bsc#1020460 CVE-2017-5505:
  Check bounds in jas_seq2d_bindsub()
  Add jasper-CVE-2017-5503-CVE-2017-5504-CVE-2017-5505.patch</changelog>
  <changelog author="mvetter@suse.com" date="1597665600">- bsc#1120807 CVE-2018-20570: Fix heap based buffer over-read in jp2_encode
  Add jasper-CVE-2018-20570.patch
- bsc#1120805 CVE-2018-20622: Fix memory leak in jas_malloc.c
  Add jasper-CVE-2018-20622.patch
- bsc#1117328 CVE-2018-19543, bsc#1045450 CVE-2017-9782: Fix numchans mixup
  Add jasper-CVE-2018-19543-CVE-2017-9782.patch
- bsc#1115637 CVE-2018-19139: Fix mem leaks by registering jpc_unk_destroyparms
  Add jasper-CVE-2018-19139.patch
- bsc#1114498 CVE-2018-18873: Fix null pointer deref in ras_putdatastd
  Add jasper-CVE-2018-18873.patch
- bsc#1088278 CVE-2018-9252: Fix reachable assertion in jpc_abstorelstepsize
  Add jasper-CVE-2018-9252.patch
- bsc#1057152 CVE-2017-14132: Fix heap base overflow in by checking components
  Add jasper-CVE-2017-14132.patch</changelog>
  <changelog author="mvetter@suse.com" date="1598443200">- bsc#1010979 CVE-2016-9398: Use new fix from upstream where we
  actually check for allowed value range instead of just negating
  Add jasper-CVE-2016-9398-upstream.patch</changelog>
  <changelog author="mvetter@suse.com" date="1612785600">- bsc#1179748 CVE-2020-27828: Fix heap overflow by checking maxrlvls
  Add jasper-CVE-2020-27828.patch
- bsc#1181483 CVE-2021-3272: Fix heap overflow by ensuring number
  of channels matches image components
  Add jasper-CVE-2021-3272.patch</changelog>
  <changelog author="mvetter@suse.com" date="1643803200">- bsc#1188437 CVE-2021-27845: Fix divide-by-zery in cp_create()
  Add jasper-CVE-2021-27845.patch</changelog>
  <changelog author="mvetter@suse.com" date="1650542400">- bsc#1184757 CVE-2021-3467: Fix NULL pointer deref in jp2_decode()
  Add jasper-CVE-2021-3467.patch
- bsc#1184798 CVE-2021-3443: Fix NULL pointer derefin jp2_decode()
  Add jasper-CVE-2021-3443.patch
- bsc#1182104 CVE-2021-26927: Fix NULL pointer deref in jp2_decode()
  bsc#1182105 CVE-2021-26926: Fix Out of bounds read in jp2_decode()
  Add jasper-CVE-2021-26926-CVE-2021-26927.patch</changelog>
  <changelog author="mvetter@suse.com" date="1663329600">- security update:
  * CVE-2022-2963 [bsc#1202642]
    + jasper-CVE-2022-2963.patch</changelog>
  <changelog author="mvetter@suse.com" date="1705320000">- bsc#1218802 CVE-2023-51257:
  Fix invalid memory write on jas_icctxt_input()
  Add jasper-CVE-CVE-2023-51257.patch</changelog>
  <changelog author="mvetter@suse.com" date="1713528000">- bsc#1223155 CVE-2024-31744:
  Add missing check to jpc_dec_process_sod()
  Add jasper-CVE-2024-31744.patch</changelog>
  <changelog author="mvetter@suse.com" date="1755259200">- bsc#1247904 CVE-2025-8835:
  Fix NULL pointer dereference in function jas_image_chclrspc
  Add jasper-CVE-2025-8835.patch
- bsc#1247902 CVE-2025-8836:
  Fix assertion failure in the jpc_floorlog2 function
  Add jasper-CVE-2025-8836.patch
- bsc#1247901 CVE-2025-8837:
  Fix use-after-free in function jpc_dec_dump
  Add jasper-CVE-2025-8837.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1760702400">- use %license tag [bsc#1252155]</changelog>
</package>




















<package pkgid="cbc76ca78b7fe4be5fa25f478ad546447d011a996f212141c52784f32b56fd7f" name="java-25-openjdk" arch="src">
  <version epoch="0" ver="25.0.1.0" rel="150700.15.4.1"/>
  <changelog author="fstrba@suse.com" date="1757505600">- Initial packaging of OpenJDK 25
  * JEPs included:
    + 470: PEM Encodings of Cryptographic Objects (Preview)
    + 502: Stable Values (Preview)
    + 503: Remove the 32-bit x86 Port
    + 505: Structured Concurrency (Fifth Preview)
    + 506: Scoped Values
    + 507: Primitive Types in Patterns, instanceof, and switch
    (Third Preview)
    + 508: Vector API (Tenth Incubator)
    + 509: JFR CPU-Time Profiling (Experimental)
    + 510: Key Derivation Function API
    + 511: Module Import Declarations
    + 512: Compact Source Files and Instance Main Methods
    + 513: Flexible Constructor Bodies
    + 514: Ahead-of-Time Command-Line Ergonomics
    + 515: Ahead-of-Time Method Profiling
    + 518: JFR Cooperative Sampling
    + 519: Compact Object Headers
    + 520: JFR Method Timing &amp; Tracing
    + 521: Generational Shenandoah</changelog>
  <changelog author="fstrba@suse.com" date="1758196800">- Added patch:
  * fips.patch
    + forward port the FIPS support from OpenJDK 21</changelog>
  <changelog author="fstrba@suse.com" date="1761134400">- Update to upstream tag jdk-25.0.1+8 (October 2025 CPU)
  * Security fixes:
    + JDK-8360937, CVE-2025-53057, bsc#1252414: Enhance certificate
    handling
    + JDK-8356294, CVE-2025-53066, bsc#1252417: Enhance Path
    Factories
    + JDK-8359454, CVE-2025-61748, bsc#1252418: Enhance String
    handling
    + JDK-8352637: Enhance bytecode verification
  * Other fixes:
    + JDK-8367031: [backout] Change java.time month/day field types
    to 'byte'
    + JDK-8368308: ISO 4217 Amendment 180 Update
    + JDK-8366223: ZGC:
    ZPageAllocator::cleanup_failed_commit_multi_partition is
    broken
    + JDK-8360647: [XWayland] [OL10] NumPad keys are not triggered
    + JDK-8361212: Remove AffirmTrust root CAs
    + JDK-8356587: Missing object ID X in pool jdk.types.Method
    + JDK-8360679: Shenandoah: AOT saved adapter calls into broken
    GC barrier stub
    + JDK-8362882: Update SubmissionPublisher() specification to
    reflect use of ForkJoinPool.asyncCommonPool()
    + JDK-8315131: Clarify VarHandle set/get access on 32-bit
    platforms
    + JDK-8362109: Change milestone to fcs for all releases
    + JDK-8358819: The first year is not displayed correctly in
    Japanese Calendar
    + JDK-8361829: [TESTBUG] RISC-V: compiler/vectorization/runner/
    /BasicIntOpTest.java fails with RVV but not Zvbb
    + JDK-8361532: RISC-V: Several vector tests fail after
    JDK-8354383
    + JDK-8357826: Avoid running some jtreg tests when asan is
    configured
    + JDK-8358577: Test serviceability/jvmti/thread/
    /GetCurrentContendedMonitor/contmon01/contmon01.java failed:
    unexpexcted monitor object
    + JDK-8360533: ContainerRuntimeVersionTestUtils
    fromVersionString fails with some docker versions
    + JDK-8358452: JNI exception pending in
    Java_sun_awt_screencast_ScreencastHelper_remoteDesktopKeyImpl
    of screencast_pipewire.c:1214 (ID: 51119)
    + JDK-8359270: C2: alignment check should consider base offset
    when emitting arraycopy runtime call
    + JDK-8359596: Behavior change when both -Xlint:options and
  - Xlint:-options flags are given
    + JDK-8360179: RISC-V: Only enable BigInteger intrinsics when
    AvoidUnalignedAccess == false
    + JDK-8359218: RISC-V: Only enable CRC32 intrinsic when
    AvoidUnalignedAccess == false
    + JDK-8359059: Bump version numbers for 25.0.1</changelog>
</package>
<package pkgid="5291c3cb91bb0524e9c092bd4e3db96198b6f67c97e49ac31759f6e1ca93848d" name="java-25-openjdk" arch="x86_64">
  <version epoch="0" ver="25.0.1.0" rel="150700.15.4.1"/>
  <changelog author="fstrba@suse.com" date="1757505600">- Initial packaging of OpenJDK 25
  * JEPs included:
    + 470: PEM Encodings of Cryptographic Objects (Preview)
    + 502: Stable Values (Preview)
    + 503: Remove the 32-bit x86 Port
    + 505: Structured Concurrency (Fifth Preview)
    + 506: Scoped Values
    + 507: Primitive Types in Patterns, instanceof, and switch
    (Third Preview)
    + 508: Vector API (Tenth Incubator)
    + 509: JFR CPU-Time Profiling (Experimental)
    + 510: Key Derivation Function API
    + 511: Module Import Declarations
    + 512: Compact Source Files and Instance Main Methods
    + 513: Flexible Constructor Bodies
    + 514: Ahead-of-Time Command-Line Ergonomics
    + 515: Ahead-of-Time Method Profiling
    + 518: JFR Cooperative Sampling
    + 519: Compact Object Headers
    + 520: JFR Method Timing &amp; Tracing
    + 521: Generational Shenandoah</changelog>
  <changelog author="fstrba@suse.com" date="1758196800">- Added patch:
  * fips.patch
    + forward port the FIPS support from OpenJDK 21</changelog>
  <changelog author="fstrba@suse.com" date="1761134400">- Update to upstream tag jdk-25.0.1+8 (October 2025 CPU)
  * Security fixes:
    + JDK-8360937, CVE-2025-53057, bsc#1252414: Enhance certificate
    handling
    + JDK-8356294, CVE-2025-53066, bsc#1252417: Enhance Path
    Factories
    + JDK-8359454, CVE-2025-61748, bsc#1252418: Enhance String
    handling
    + JDK-8352637: Enhance bytecode verification
  * Other fixes:
    + JDK-8367031: [backout] Change java.time month/day field types
    to 'byte'
    + JDK-8368308: ISO 4217 Amendment 180 Update
    + JDK-8366223: ZGC:
    ZPageAllocator::cleanup_failed_commit_multi_partition is
    broken
    + JDK-8360647: [XWayland] [OL10] NumPad keys are not triggered
    + JDK-8361212: Remove AffirmTrust root CAs
    + JDK-8356587: Missing object ID X in pool jdk.types.Method
    + JDK-8360679: Shenandoah: AOT saved adapter calls into broken
    GC barrier stub
    + JDK-8362882: Update SubmissionPublisher() specification to
    reflect use of ForkJoinPool.asyncCommonPool()
    + JDK-8315131: Clarify VarHandle set/get access on 32-bit
    platforms
    + JDK-8362109: Change milestone to fcs for all releases
    + JDK-8358819: The first year is not displayed correctly in
    Japanese Calendar
    + JDK-8361829: [TESTBUG] RISC-V: compiler/vectorization/runner/
    /BasicIntOpTest.java fails with RVV but not Zvbb
    + JDK-8361532: RISC-V: Several vector tests fail after
    JDK-8354383
    + JDK-8357826: Avoid running some jtreg tests when asan is
    configured
    + JDK-8358577: Test serviceability/jvmti/thread/
    /GetCurrentContendedMonitor/contmon01/contmon01.java failed:
    unexpexcted monitor object
    + JDK-8360533: ContainerRuntimeVersionTestUtils
    fromVersionString fails with some docker versions
    + JDK-8358452: JNI exception pending in
    Java_sun_awt_screencast_ScreencastHelper_remoteDesktopKeyImpl
    of screencast_pipewire.c:1214 (ID: 51119)
    + JDK-8359270: C2: alignment check should consider base offset
    when emitting arraycopy runtime call
    + JDK-8359596: Behavior change when both -Xlint:options and
  - Xlint:-options flags are given
    + JDK-8360179: RISC-V: Only enable BigInteger intrinsics when
    AvoidUnalignedAccess == false
    + JDK-8359218: RISC-V: Only enable CRC32 intrinsic when
    AvoidUnalignedAccess == false
    + JDK-8359059: Bump version numbers for 25.0.1</changelog>
</package>
<package pkgid="04bc75ea56a1a92bd1e0e795d73ad080e1db87aef978beafe556b90a745e7491" name="java-25-openjdk" arch="src">
  <version epoch="0" ver="25.0.2.0" rel="150700.15.7.1"/>
  <changelog author="fstrba@suse.com" date="1757505600">- Initial packaging of OpenJDK 25
  * JEPs included:
    + 470: PEM Encodings of Cryptographic Objects (Preview)
    + 502: Stable Values (Preview)
    + 503: Remove the 32-bit x86 Port
    + 505: Structured Concurrency (Fifth Preview)
    + 506: Scoped Values
    + 507: Primitive Types in Patterns, instanceof, and switch
    (Third Preview)
    + 508: Vector API (Tenth Incubator)
    + 509: JFR CPU-Time Profiling (Experimental)
    + 510: Key Derivation Function API
    + 511: Module Import Declarations
    + 512: Compact Source Files and Instance Main Methods
    + 513: Flexible Constructor Bodies
    + 514: Ahead-of-Time Command-Line Ergonomics
    + 515: Ahead-of-Time Method Profiling
    + 518: JFR Cooperative Sampling
    + 519: Compact Object Headers
    + 520: JFR Method Timing &amp; Tracing
    + 521: Generational Shenandoah</changelog>
  <changelog author="fstrba@suse.com" date="1758196800">- Added patch:
  * fips.patch
    + forward port the FIPS support from OpenJDK 21</changelog>
  <changelog author="fstrba@suse.com" date="1761134400">- Update to upstream tag jdk-25.0.1+8 (October 2025 CPU)
  * Security fixes:
    + JDK-8360937, CVE-2025-53057, bsc#1252414: Enhance certificate
    handling
    + JDK-8356294, CVE-2025-53066, bsc#1252417: Enhance Path
    Factories
    + JDK-8359454, CVE-2025-61748, bsc#1252418: Enhance String
    handling
    + JDK-8352637: Enhance bytecode verification
  * Other fixes:
    + JDK-8367031: [backout] Change java.time month/day field types
    to 'byte'
    + JDK-8368308: ISO 4217 Amendment 180 Update
    + JDK-8366223: ZGC:
    ZPageAllocator::cleanup_failed_commit_multi_partition is
    broken
    + JDK-8360647: [XWayland] [OL10] NumPad keys are not triggered
    + JDK-8361212: Remove AffirmTrust root CAs
    + JDK-8356587: Missing object ID X in pool jdk.types.Method
    + JDK-8360679: Shenandoah: AOT saved adapter calls into broken
    GC barrier stub
    + JDK-8362882: Update SubmissionPublisher() specification to
    reflect use of ForkJoinPool.asyncCommonPool()
    + JDK-8315131: Clarify VarHandle set/get access on 32-bit
    platforms
    + JDK-8362109: Change milestone to fcs for all releases
    + JDK-8358819: The first year is not displayed correctly in
    Japanese Calendar
    + JDK-8361829: [TESTBUG] RISC-V: compiler/vectorization/runner/
    /BasicIntOpTest.java fails with RVV but not Zvbb
    + JDK-8361532: RISC-V: Several vector tests fail after
    JDK-8354383
    + JDK-8357826: Avoid running some jtreg tests when asan is
    configured
    + JDK-8358577: Test serviceability/jvmti/thread/
    /GetCurrentContendedMonitor/contmon01/contmon01.java failed:
    unexpexcted monitor object
    + JDK-8360533: ContainerRuntimeVersionTestUtils
    fromVersionString fails with some docker versions
    + JDK-8358452: JNI exception pending in
    Java_sun_awt_screencast_ScreencastHelper_remoteDesktopKeyImpl
    of screencast_pipewire.c:1214 (ID: 51119)
    + JDK-8359270: C2: alignment check should consider base offset
    when emitting arraycopy runtime call
    + JDK-8359596: Behavior change when both -Xlint:options and
  - Xlint:-options flags are given
    + JDK-8360179: RISC-V: Only enable BigInteger intrinsics when
    AvoidUnalignedAccess == false
    + JDK-8359218: RISC-V: Only enable CRC32 intrinsic when
    AvoidUnalignedAccess == false
    + JDK-8359059: Bump version numbers for 25.0.1</changelog>
  <changelog author="fstrba@suse.com" date="1768392000">- Do not depend on update-desktop-files (jsc#PED-14507 and
  jsc#PED-15221)</changelog>
  <changelog author="fstrba@suse.com" date="1769428800">- Update to upstream tag jdk-25.0.2+10 (January 2026 CPU)
  * CVEs
    + CVE-2026-21925, bsc#1257034
    + CVE-2026-21932, bsc#1257036
    + CVE-2026-21933, bsc#1257037
    + CVE-2026-21945, bsc#1257038
  * Changes
    + JDK-8023263: [TESTBUG] Test closed/java/awt/Focus/
    /InactiveWindowTest/InactiveFocusRace fails due to not enough
    time to initialize graphic components
    + JDK-8162380: [TEST_BUG] MouseEvent/.../
    /AltGraphModifierTest.java has only "Fail" button
    + JDK-8201778: Speed up test
    javax/net/ssl/DTLS/PacketLossRetransmission.java
    + JDK-8265429: Improve GCM encryption
    + JDK-8277444: Data race between
    JvmtiClassFileReconstituter::copy_bytecodes and class linking
    + JDK-8279005: sun/tools/jstat tests do not check for test case
    exit codes after JDK-8245129
    + JDK-8304811: vmTestbase/vm/mlvm/indy/func/jvmti/
    /stepBreakPopReturn/INDIFY_Test.java fails with
    JVMTI_ERROR_TYPE_MISMATCH
    + JDK-8305567: serviceability/tmtools/jstat/GcTest01.java
    failed  utils.JstatGcResults.assertConsistency
    + JDK-8317801: java/net/Socket/asyncClose/Race.java fails
    intermittently (aix)
    + JDK-8320836: jtreg gtest runs should limit heap size
    + JDK-8325766: Extend CertificateBuilder to create trust and
    end entity certificates programmatically
    + JDK-8333526: Restructure java/nio/channels/DatagramChannel/
    /StressNativeSignal.java to a fail fast exception handling
    policy
    + JDK-8333783: java/nio/channels/FileChannel/directio/
    /DirectIOTest.java is unstable with AV software
    + JDK-8334238: Enhance AddLShortcutTest jpackage test
    + JDK-8335986: Test javax/swing/JCheckBox/4449413/
    /bug4449413.java fails on Windows 11 x64 because RBMenuItem's
    and CBMenuItem's checkmark on the left side are not visible
    + JDK-8341496: Improve JMX connections
    + JDK-8343218: Add option to disable allocating interface and
    abstract classes in non-class metaspace
    + JDK-8343546: GHA: Cache required dependencies in master-branch
    workflow
    + JDK-8345810: Custom launchers must be linked with pthread to
    avoid dynamic linker issues
    + JDK-8346753: Test javax/swing/JMenuItem/RightLeftOrientation/
    /RightLeftOrientation.java fails on Windows Server 2025 x64
    because the icons of RBMenuItem and CBMenuItem are not visible
    in Nimbus LookAndFeel
    + JDK-8346839: [TESTBUG] "java/awt/textfield/setechochartest4/
    /setechochartest4.java" failed because the test frame
    disappears on clicking "Click Several Times" button
    + JDK-8346884: Add since checker test to jdk.editpad
    + JDK-8346952: GetGraphicsStressTest.java fails: Native
    resources unavailable
    + JDK-8347277: java/awt/Focus/ComponentLostFocusTest.java fails
    intermittently
    + JDK-8349188: LineBorder does not scale correctly
    + JDK-8350621: Code cache stops scheduling GC
    + JDK-8351487: [ubsan] jvmti.h runtime error: load of value
    which is not a valid value
    + JDK-8352016: Improve
    java/lang/RuntimeTests/RuntimeExitLogTest.java
    + JDK-8354348: Enable Extended EVEX to REX2/REX demotion for
    commutative operations with same dst and src2
    + JDK-8354415: [Ubuntu25.04] api/java_awt/GraphicsDevice/
    /indexTGF.html#SetDisplayMode -
    setDisplayMode_REFRESH_RATE_UNKNOWN fails: Height is different
    on vnc
    + JDK-8354447: Missing test for retroactive
    @SuppressWarnings("dangling-doc-comments") behavior
    + JDK-8354646: java.awt.TextField allows to identify the spaces
    in a password when double clicked at the starting and end of
    the text
    + JDK-8355478: DoubleActionESC.java fails intermittently
    + JDK-8356324: JVM crash (SIGSEGV at
    ClassListParser::resolve_indy_impl) during -Xshare:dump
    starting from 21.0.5
    + JDK-8356897: Update NSS library to 3.111
    + JDK-8357064: cds/appcds/ArchiveRelocationTest.java failed
    with missing expected output
    + JDK-8357141: Update to use jtreg 7.5.2
    + JDK-8357382: runtime/cds/appcds/aotClassLinking/
    /BulkLoaderTest.java#aot fails with Xcomp and C1
    + JDK-8357396: Refactor nmethod::make_not_entrant to use Enum
    instead of "const char*"
    + JDK-8357691: File blocked.certs contains bad content when
    boot jdk 25 is used, sun/security/lib/CheckBlockedCerts.java
    failing
    + JDK-8357694: RISC-V: Several IR verification tests fail when
    vlen=128
    + JDK-8357799: Improve instructions for
    JFileChooser/HTMLFileName.java
    + JDK-8357816: Add test from JDK-8350576
    + JDK-8357822: C2: Multiple string optimization tests are no
    longer testing string concatenation optimizations
    + JDK-8357959: (bf) ByteBuffer.allocateDirect initialization
    can result in large TTSP spikes
    + JDK-8358048: java/net/httpclient/HttpsTunnelAuthTest.java
    incorrectly calls Thread::stop
    + JDK-8358340: Support CDS heap archive with Generational
    Shenandoah
    + JDK-8358532: JFileChooser in GTK L&amp;F still displays HTML
    filename
    + JDK-8358535: Changes in ClassValue (JDK-8351996) caused a
    1-9% regression in Renaissance-PageRank
    + JDK-8358556: Assert when running with -XX:-UseLibmIntrinsic
    + JDK-8358685: [TEST] AOTLoggingTag.java failed with missing
    log message
    + JDK-8358697: TextLayout/MyanmarTextTest.java passes if no
    Myanmar font is found
    + JDK-8358723: jpackage signing issues: the main launcher
    doesn't have entitlements
    + JDK-8358748: Large page size initialization fails with assert
    "page_size must be a power of 2"
    + JDK-8358751: C2: Recursive inlining check for compiled lambda
    forms is broken
    + JDK-8358813: JPasswordField identifies spaces in password via
    delete shortcuts
    + JDK-8359061: Update and ProblemList manual test
    java/awt/Cursor/CursorDragTest/ListDragCursor.java
    + JDK-8359104: gc/TestAlwaysPreTouchBehavior.java#&lt;gcname&gt;
    fails on Linux
    + JDK-8359105: RISC-V: No need for acquire fence in safepoint
    poll during JNI calls
    + JDK-8359127: Amend java/nio/channels/DatagramChannel/
    /PromiscuousIPv6.java to use @requires for OS platform
    selection
    + JDK-8359167: Remove unused test/hotspot/jtreg/vmTestbase/nsk/
    /share/jpda/BindServer.java
    + JDK-8359207: Remove runtime/signal/TestSigusr2.java since it
    is always skipped
    + JDK-8359423: Improve error message in case of missing jsa
    shared archive
    + JDK-8359428: Test 'javax/swing/JTabbedPane/bug4499556.java'
    failed because after selecting one of L&amp;F items, the test case
    automatically failed when clicking on L&amp;F Menu button again
    + JDK-8359449: [TEST] open/test/jdk/java/io/File/SymLinks.java
    Refactor extract method for Windows specific test
    + JDK-8359477: com/sun/net/httpserver/Test12.java appears to
    have a temp file race
    + JDK-8359501: Enhance Handling of URIs
    + JDK-8359687: Use PassFailJFrame for
    java/awt/print/Dialog/DialogType.java
    + JDK-8359690: New test TestCPUTimeSampleThrottling still fails
    intermittently
    + JDK-8359735: [Ubuntu 25.10] java/lang/ProcessBuilder/
    /Basic.java, java/lang/ProcessHandle/InfoTest.java fail due to
    rust-coreutils
    + JDK-8359827: Test runtime/Thread/ThreadCountLimit.java need
    loop increasing the limit
    + JDK-8360022: ClassRefDupInConstantPoolTest.java fails when
    running in repeat
    + JDK-8360090: [TEST] RISC-V: disable some cds tests on qemu
    + JDK-8360178: TestArguments.atojulong gtest has incorrect
    format string
    + JDK-8360219: [AIX] assert(locals_base &gt;= l2) failed: bad
    placement
    + JDK-8360255: runtime/jni/checked/TestLargeUTF8Length.java
    fails with -XX:-CompactStrings
    + JDK-8360408: [TEST] Use @requires tag instead of exiting
    based on "os.name" property value for
    sun/net/www/protocol/file/FileURLTest.java
    + JDK-8360411: [TEST] open/test/jdk/java/io/File/
    /MaxPathLength.java Refactor extract method to encapsulate
    Windows specific test logic
    + JDK-8360518: Docker tests do not work when asan is configured
    + JDK-8360520: RISC-V: C1: Fix primitive array clone intrinsic
    regression after JDK-8333154
    + JDK-8360664: Null pointer dereference in src/hotspot/share/
    /prims/jvmtiTagMap.cpp in
    IterateOverHeapObjectClosure::do_object()
    + JDK-8360783: CTW: Skip deoptimization between tiers
    + JDK-8360791: [ubsan] Adjust signal handling
    + JDK-8360867: CTW: Disable inline cache verification
    + JDK-8360981: Remove use of Thread.stop in
    test/jdk/java/net/Socket/DeadlockTest.java
    + JDK-8361112: Use exact float -&gt; Float16 conversion method in
    Float16 tests
    + JDK-8361180: Disable CompiledDirectCall verification with
  - VerifyInlineCaches
    + JDK-8361198: [AIX] fix misleading error output in
    thread_cpu_time_unchecked
    + JDK-8361211: C2: Final graph reshaping generates unencodeable
    klass constants
    + JDK-8361215: Add AOT test case: verification constraint
    classes are excluded
    + JDK-8361253: CommandLineOptionTest library should report
    observed values on failure
    + JDK-8361255: CTW: Tolerate more NCDFE problems
    + JDK-8361298: SwingUtilities/bug4967768.java fails where
    character P is not underline
    + JDK-8361314: Test serviceability/jvmti/VMEvent/MyPackage/
    /VMEventRecursionTest.java FATAL ERROR in native method:
    Failed during the GetClassSignature call
    + JDK-8361367: AOT ExcludedClasses.java test failed with
    missing constant pool logs
    + JDK-8361423: Add IPSupport::printPlatformSupport to
    java/net/NetworkInterface/IPv4Only.java
    + JDK-8361449: RISC-V: Code cleanup for native call
    + JDK-8361478: GHA: Use MSYS2 from GHA runners
    + JDK-8361494: [IR Framework] Escape too much in replacement of
    placeholder
    + JDK-8361497: Scoped Values: orElse and orElseThrow do not
    access the cache
    + JDK-8361504: RISC-V: Make C1 clone intrinsic platform guard
    more specific
    + JDK-8361520: Stabilize SystemGC benchmarks
    + JDK-8361599: [PPC64] enable missing tests via jtreg requires
    + JDK-8361711: Add library name configurability to
    PKCS11Test.java
    + JDK-8361748: Enforce limits on the size of an XBM image
    + JDK-8361839: Problemlist BogusFocusableWindowState due to
    failures in the CI pipeline
    + JDK-8361868: [GCC static analyzer] complains about missing
    calloc - NULL checks in p11_util.c
    + JDK-8361871: [GCC static analyzer] complains about use of
    uninitialized value ckpObject in p11_util.c
    + JDK-8361888: [GCC static analyzer] ProcessImpl_md.c
    Java_java_lang_ProcessImpl_forkAndExec error: use of
    uninitialized value '*(ChildStuff *)p.mode
    + JDK-8361892: AArch64: Incorrect matching rule leading to
    improper oop instruction encoding
    + JDK-8361897: gc/z/TestUncommit.java fails with Uncommitted
    too slow
    + JDK-8361948: Shenandoah: region free capacity unit mismatch
    + JDK-8361950: Update to use jtreg 8
    + JDK-8361959: [GCC static analyzer] java_props_md.c  leak of
    'temp'  variable is reported
    + JDK-8362107: Update the Jan CPU26_01 release date in master
    branch after forking Oct CPU25_10
    + JDK-8362123: ClassLoader Leak via
    Executors.newSingleThreadExecutor(...)
    + JDK-8362169: Pointer passed to upcall may get wrong scope
    + JDK-8362204: test/jdk/sun/awt/font/TestDevTransform.java
    fails on Ubuntu 24.04
    + JDK-8362207: Add more test cases for possible double-rounding
    in fma
    + JDK-8362282: runtime/logging/StressAsyncUL.java failed with
    exitValue = 134
    + JDK-8362308: Enhance Bitmap operations
    + JDK-8362379: Test serviceability/HeapDump/
    /UnmountedVThreadNativeMethodAtTop.java should mark as /native
    + JDK-8362390: AIX make fails in awt_GraphicsEnv.c
    + JDK-8362482: [TESTBUG] serviceability/HeapDump/
    /UnmountedVThreadNativeMethodAtTop.java: System.gc() does not
    provide full GC
    + JDK-8362501: Update test/hotspot/jtreg/applications/jcstress/
    /README
    + JDK-8362515: RISC-V: cleanup NativeFarCall
    + JDK-8362516: Support of GCC static analyzer (-fanalyzer)
    + JDK-8362530: VM crash with -XX:+PrintTieredEvents when
    collecting AOT profiling
    + JDK-8362532: Test gc/g1/plab/* duplicate command-line options
    + JDK-8362533: Tests sun/management/jmxremote/bootstrap/*
    duplicate VM flags
    + JDK-8362581: Timeouts in
    java/nio/channels/SocketChannel/OpenLeak.java on UNIX
    + JDK-8362582: GHA: Increase bundle retention time to deal with
    infra overload better
    + JDK-8362596: RISC-V: Improve _vectorizedHashCode intrinsic
    + JDK-8362602: Add test.timeout.factor to CompileFactory to
    avoid test timeouts
    + JDK-8362632: Improve HttpServer Request handling
    + JDK-8362834: Several runtime/Thread tests should mark as
    /native
    + JDK-8362836: JFR: Broken pipe in
    jdk/jfr/event/io/TestIOTopFrame.java
    + JDK-8362838: RISC-V: Incorrect matching rule leading to
    improper oop instruction encoding
    + JDK-8362855: Test java/net/ipv6tests/TcpTest.java should
    report SkippedException when there no ia4addr  or ia6addr
    + JDK-8362889: [GCC static analyzer] leak in
    libstringPlatformChars.c
    + JDK-8362972: C2 fails with unexpected node in SuperWord
    truncation: IsFiniteF, IsFiniteD
    + JDK-8363676: [GCC static analyzer] missing return value check
    of malloc in OGLContext_SetTransform
    + JDK-8363696: Update the release version and date for OpenJDK
    25u
    + JDK-8363720: Follow up to JDK-8360411 with post review
    comments
    + JDK-8363895: Minimal build fails with slowdebug builds after
    JDK-8354887
    + JDK-8363898: RISC-V: TestRangeCheckHoistingScaledIV.java
    fails after JDK-8355293 when running without RVV
    + JDK-8363910: Avoid tuning for Power10 CPUs on Linux ppc64le
    when gcc &lt; 10 is used
    + JDK-8363928: Specifying AOTCacheOutput with a blank path
    causes the JVM to crash
    + JDK-8363965: GHA: Switch cross-compiling sysroots to Debian
    bookworm
    + JDK-8363966: GHA: Switch cross-compiling sysroots to Debian
    trixie
    + JDK-8364090: Dump JFR recording on CrashOnOutOfMemoryError
    + JDK-8364111: InstanceMirrorKlass iterators should handle CDS
    and hidden classes consistently
    + JDK-8364114: Test
    TestHugePageDecisionsAtVMStartup.java#LP_enabled fails when no
    free hugepage
    + JDK-8364120: RISC-V: unify the usage of
    MacroAssembler::instruction_size
    + JDK-8364150: RISC-V: Leftover for JDK-8343430 removing old
    trampoline call
    + JDK-8364177: JDK fails to build due to undefined symbol in
    libpng on LoongArch64
    + JDK-8364184: [REDO] AArch64: [VectorAPI] sve vector math
    operations are not supported after JDK-8353217
    + JDK-8364190: JFR: RemoteRecordingStream withers don't work
    + JDK-8364198: NMT should have a better corruption message
    + JDK-8364199: Enhance list of environment variables printed in
    hserr/hsinfo file
    + JDK-8364212: Shenandoah: Rework archived objects loading
    + JDK-8364214: Enhance polygon data support
    + JDK-8364235: Fix for JDK-8361447 breaks the alignment
    requirements for GuardedMemory
    + JDK-8364257: JFR: User-defined events and settings with a
    one-letter name cannot be configured
    + JDK-8364263: HttpClient: Improve encapsulation of ProxyServer
    + JDK-8364296: Set IntelJccErratumMitigation flag ergonomically
    + JDK-8364352: Some tests fail when using a limited number of
    pregenerated .jsa CDS archives
    + JDK-8364454: ProblemList runtime/cds/DeterministicDump.java
    on macos for JDK-8363986
    + JDK-8364503: gc/g1/TestCodeCacheUnloadDuringConcCycle.java
    fails because of race printing to stdout
    + JDK-8364514: [asan] runtime/jni/checked/
    /TestCharArrayReleasing.java heap-buffer-overflow
    + JDK-8364556: JFR:  Disable SymbolTableStatistics and
    StringTableStatistics in default.jfc
    + JDK-8364597: Replace THL A29 Limited with Tencent
    + JDK-8364611: (process) Child process SIGPIPE signal
    disposition should be default
    + JDK-8364660: ClassVerifier::ends_in_athrow() should be removed
    + JDK-8364764: java/nio/channels/vthread/BlockingChannelOps.java
    subtests timed out
    + JDK-8364786: Test java/net/vthread/HttpALot.java
    intermittently fails - 24999 handled, expected 25000
    + JDK-8364984: Many jpackage tests are failing on Linux after
    JDK-8334238
    + JDK-8364993: JFR: Disable jdk.ModuleExport in default.jfc
    + JDK-8364996: java/awt/font/FontNames/LocaleFamilyNames.java
    times out on Windows
    + JDK-8365058: Enhance CopyOnWriteArraySet
    + JDK-8365071: ARM32: JFR intrinsic jvm_commit triggers C2
    regalloc assert
    + JDK-8365086: CookieStore.getURIs() and get(URI) should return
    an immutable List
    + JDK-8365165: Zap C-heap memory at delete/free
    + JDK-8365166: ARM32: missing os::fetch_bcp_from_context
    implementation
    + JDK-8365168: Use 64-bit aligned addresses for CK_ULONG access
    in PKCS11 native key code
    + JDK-8365200: RISC-V: compiler/loopopts/superword/
    /TestGeneralizedReductions.java fails with Zvbb and vlen=128
    + JDK-8365206: RISC-V: compiler/c2/irTests/
    /TestFloat16ScalarOperations.java is failing on riscv64
    + JDK-8365240: [asan] exclude some tests when using asan
    enabled binaries
    + JDK-8365260: Problemlist 1 test due to failures in the CI
    pipeline
    + JDK-8365265: x86 short forward jump exceeds 8-bit offset in
    methodHandles_x86.cpp when using Intel APX
    + JDK-8365271: Improve Swing supports
    + JDK-8365280: Enhance JOptionPane
    + JDK-8365302: RISC-V: compiler/loopopts/superword/
    /TestAlignVector.java fails when vlen=128
    + JDK-8365307: AIX make fails after JDK-8364611
    + JDK-8365312: GCC 12 cannot compile SVE on aarch64 with
    auto-var-init pattern
    + JDK-8365389: Remove static color fields from SwingUtilities3
    and WindowsMenuItemUI
    + JDK-8365425: [macos26] javax/swing/JInternalFrame/8160248/
    /JInternalFrameDraggingTest.java fails on macOS 26
    + JDK-8365442: [asan] runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java fails
    + JDK-8365468: EagerJVMCI should only apply to the
    CompilerBroker JVMCI runtime
    + JDK-8365487: [asan] some oops (mode) related tests fail
    + JDK-8365543: UnixNativeDispatcher.init should lookup open64at
    and stat64at on AIX
    + JDK-8365571: GenShen: PLAB promotions may remain disabled for
    evacuation threads
    + JDK-8365615: Improve JMenuBar/RightLeftOrientation.java
    + JDK-8365638: JFR: Add --exact for debugging out-of-order
    events
    + JDK-8365660: test/jdk/sun/security/pkcs11/KeyAgreement/ tests
    skipped without SkipException
    + JDK-8365700: Jar --validate without any --file option leaves
    around a temporary file /tmp/tmpJar&lt;number&gt;.jar
    + JDK-8365726: Test crashed with assert in C1 thread: Possible
    safepoint reached by thread that does not allow it
    + JDK-8365772: RISC-V: correctly prereserve NaN payload when
    converting from float to float16 in vector way
    + JDK-8365790: Shutdown hook for application image does not
    work on Windows
    + JDK-8365811: test/jdk/java/net/CookieHandler/B6644726.java
    failure - "Should have 5 cookies. Got only 4, expires probably
    didn't parse correctly"
    + JDK-8365823: Revert storing abstract and interface Klasses to
    non-class metaspace
    + JDK-8365834: Mark java/net/httpclient/ManyRequests.java  as
    intermittent
    + JDK-8365841: RISC-V: Several IR verification tests fail after
    JDK-8350960 without Zvfh
    + JDK-8365844: RISC-V: TestBadFormat.java fails when running
    without RVV
    + JDK-8365863: /test/jdk/sun/security/pkcs11/Cipher tests skip
    without SkippedException
    + JDK-8365913: Support latest MSC_VER in abstract_vm_version.cpp
    + JDK-8365919: Replace currentTimeMillis with nanoTime in
    Stresser.java
    + JDK-8365926: RISC-V: Performance regression in renaissance
    (chi-square)
    + JDK-8365956: GenShen: Adaptive tenuring threshold algorithm
    may raise threshold prematurely
    + JDK-8365983: Tests should throw SkippedException when SCTP
    not supported
    + JDK-8366028: MethodType::fromMethodDescriptorString should
    not throw UnsupportedOperationException for invalid
    descriptors
    + JDK-8366029: Do not add -XX:VerifyArchivedFields by default
    to CDS tests
    + JDK-8366031: Mark com/sun/nio/sctp/SctpChannel/
    /CloseDescriptors.java as intermittent
    + JDK-8366075: Problemlist 2 tests due to failures in the CI
    pipeline
    + JDK-8366092: [GCC static analyzer] UnixOperatingSystem.c
    warning: use of uninitialized value 'systemTicks'
    + JDK-8366147: ZGC:
    ZPageAllocator::cleanup_failed_commit_single_partition may
    leak memory
    + JDK-8366159: SkippedException is treated as a pass for
    pkcs11/KeyStore, pkcs11/SecretKeyFactory and
    pkcs11/SecureRandom
    + JDK-8366208: Unexpected exception in
    sun.java2d.cmm.lcms.LCMSImageLayout
    + JDK-8366229: runtime/Thread/TooSmallStackSize.java runs with
    all collectors
    + JDK-8366250: Problemlist 3 tests due to failures in the CI
    pipeline
    + JDK-8366340: Problemlist 1 test due to failures in the CI
    pipeline
    + JDK-8366342: Key generator and key pair generator tests
    skipping, but showing as passed
    + JDK-8366359: Test should throw SkippedException when there is
    no lpstat
    + JDK-8366365: [test] test/lib-test/jdk/test/whitebox/
    /CPUInfoTest.java should be updated
    + JDK-8366434: THP not working properly with G1 after
    JDK-8345655
    + JDK-8366446: Test java/awt/geom/ConcurrentDrawPolygonTest.java
    fails intermittently
    + JDK-8366537: Test "java/util/TimeZone/
    /DefaultTimeZoneTest.java" is not updating the zone ID as
    expected
    + JDK-8366558: Gtests leave /tmp/cgroups-test* files
    + JDK-8366694: Test JdbStopInNotificationThreadTest.java timed
    out after 60 second
    + JDK-8366750: Remove test 'java/awt/Choice/
    /ChoiceMouseWheelTest/ChoiceMouseWheelTest.java' from
    problemlist
    + JDK-8366764: Deproblemlist java/awt/ScrollPane/
    /ScrollPositionTest.java
    + JDK-8366800: Problemlist 1 test due to failures in the CI
    pipeline
    + JDK-8366844: Update and automate
    MouseDraggedOriginatedByScrollBarTest.java
    + JDK-8366850: Test com/sun/jdi/
    /JdbStopInNotificationThreadTest.java failed
    + JDK-8366893: java/lang/Thread/virtual/stress/
    /GetStackTraceALotWhenPinned.java timed out on macos-aarch64
    + JDK-8366948: AOT cache creation crashes when iterating
    training data
    + JDK-8366980: TestTransparentHugePagesHeap.java fails when run
    with -UseCompressedOops
    + JDK-8367017: Remove legacy checks from WrappedToolkitTest and
    convert from bash
    + JDK-8367021: Regression in LocaleDataTest refactoring
    + JDK-8367048: RISC-V: Correct pipeline descriptions of the
    architecture
    + JDK-8367066: RISC-V: refine register selection in
    MacroAssembler:: decode_klass_not_null
    + JDK-8367098: RISC-V: sync CPU features with related JVM flags
    for dependant ones
    + JDK-8367131: Test com/sun/jdi/ThreadMemoryLeakTest.java fails
    on 32 bits
    + JDK-8367133: DTLS: fragmentation of Finished message results
    in handshake failure
    + JDK-8367137: RISC-V: Detect Zicboz block size via hwprobe
    + JDK-8367237: Thread-Safety Usage Warning for
    java.text.Collator Classes
    + JDK-8367277: Fix copyright header in
    JMXInterfaceBindingTest.java
    + JDK-8367313: CTW: Execute in AWT headless mode
    + JDK-8367333: C2: Vector math operation intrinsification
    failure
    + JDK-8367348: Enhance PassFailJFrame to support links in HTML
    + JDK-8367378: GenShen: Missing timing stats when old mark
    buffers are flushed during final update refs
    + JDK-8367384: The ICC_Profile class may throw exceptions
    during serialization
    + JDK-8367598: Switch to CRC32C for SEED calculation in
    jdk.test.lib.Utils
    + JDK-8367616: RISC-V: Auto-enable Zicboz extension for debug
    builds
    + JDK-8367689: Revert removal of several compilation-related
    vmStructs fields
    + JDK-8367692: RISC-V: Align post call nop
    + JDK-8367694: Fix jtreg test failure when Intel APX is enabled
    for KNL platforms
    + JDK-8367780: Enable UseAPX on Intel CPUs only when both APX_F
    and APX_NCI_NDD_NF cpuid features are present
    + JDK-8367782: VerifyJarEntryName.java: Fix modifyJarEntryName
    to operate on bytes and re-introduce verifySignatureEntryName
    + JDK-8367869: Test java/io/FileDescriptor/Sync.java timed out
    + JDK-8367904: Test java/net/InetAddress/ptr/Lookup.java should
    throw SkippedException
    + JDK-8367948: JFR: MethodTrace threshold setting has no effect
    + JDK-8367953: JFR sampler threads does not appear in thread
    dump
    + JDK-8367969: C2: compiler/vectorapi/TestVectorMathLib.java
    fails without UnlockDiagnosticVMOptions
    + JDK-8367988: NewFileSystemTests.readOnlyZipFileFailure fails
    when run by root user
    + JDK-8368032: Enhance Certificate Checking
    + JDK-8368071: Compilation throughput regressed 2X-8X after
    JDK-8355003
    + JDK-8368152: Shenandoah: Incorrect behavior at end of
    degenerated cycle
    + JDK-8368192: Test java/lang/ProcessBuilder/Basic.java#id0
    fails with Exception: Stack trace
    + JDK-8368366: RISC-V: AlignVector is mistakenly set to
    AvoidUnalignedAccesses
    + JDK-8368367: Test jdk/jfr/event/gc/detailed/
    /TestGCHeapMemoryUsageEvent.java fails  jdk.GCHeapMemoryUsage
    "expected 0 &gt; 0"
    + JDK-8368565: Adjust comment regarding dependency of libjvm.so
    to librt
    + JDK-8368606: Printer lookup returns empty on AIX platform due
    to uninitialized results list
    + JDK-8368668: Several vmTestbase/vm/gc/compact tests timed out
    on large memory machine
    + JDK-8368670: Deadlock in JFR on event register + class load
    + JDK-8368698: runtime/cds/appcds/aotCache/OldClassSupport.java
    assert(can_add()) failed: Cannot add TrainingData objects
    + JDK-8368732: RISC-V: Detect support for misaligned vector
    access via hwprobe
    + JDK-8368890: open/test/jdk/tools/jpackage/macosx/
    /NameWithSpaceTest.java fails randomly
    + JDK-8368893: RISC-V: crash after JDK-8352673 on fastdebug
    version
    + JDK-8368960: Adjust java UL logging in the build
    + JDK-8368982: Test sun/security/tools/jarsigner/EC.java
    completed and timed out
    + JDK-8369078: Fix faulty test conversion in
    IllegalCharsetName.java
    + JDK-8369184: SimpleTimeZone equals() Returns True for Unequal
    Instances with Different hashCode Values
    + JDK-8369190: JavaFrameAnchor on AArch64 has unnecessary
    barriers and wrong store order in MacroAssembler
    + JDK-8369226: GHA: Switch to MacOS 15
    + JDK-8369319: java/net/httpclient/CancelRequestTest.java fails
    intermittently
    + JDK-8369450: [Ubuntu 25.10] openjdk fails to build due to
    rust-coreutils date
    + JDK-8369487: Revert EA option for build promotion
    + JDK-8369506: Bytecode rewriting causes Java heap corruption
    on AArch64
    + JDK-8369560: Slowdebug build without CDS fails
    + JDK-8369563: Gtest dll_address_to_function_and_library_name
    has issues with stripped pdb files
    + JDK-8369616: JavaFrameAnchor on RISC-V has unnecessary
    barriers and wrong store order in MacroAssembler
    + JDK-8369656: Calling CompletableFuture.join() could execute
    task in common pool
    + JDK-8369657: [AIX] TOC overflow in static-launcher build when
    building slowdebug after JDK-8352064
    + JDK-8369853: jpackage signing tests fail after JDK-8358723
    + JDK-8369868: Compilation error in Win8365790Test.java with
    JDK-8358723 fix resulting in CI tier3 failure
    + JDK-8369946: Bytecode rewriting causes Java heap corruption
    on PPC
    + JDK-8369947: Bytecode rewriting causes Java heap corruption
    on RISC-V
    + JDK-8369979: Flag UsePopCountInstruction was accidentally
    disabled on PPC64
    + JDK-8370048: Shenandoah: Deprecated ShenandoahPacing option
    + JDK-8370049: [s390x] G1 barrier compareAndExchange does not
    return old value when compareExchange fails
    + JDK-8370318: AES-GCM vector intrinsic may read out of bounds
    (x86_64, AVX-512)
    + JDK-8370331: Problemlist 2 tests due to failures in the CI
    pipeline
    + JDK-8370428: Change milestone to fcs for all releases
    + JDK-8370465: Right to Left Orientation Issues with MenuItem
    Component
    + JDK-8371094: --mac-signing-key-user-name no longer works
    + JDK-8371425: Include folder names in vscode workspace virtual
    folders
    + JDK-8371697: test/jdk/java/nio/file/FileStore/Basic.java
    fails after 8360887 on linux
    + JDK-8372753: jpackage ignores --file-associations option with
    predefined app image</changelog>
</package>
<package pkgid="2791b846b1cf162e7a35a724ef44cc8890df5912f7d7d69848a742cd4ec3171e" name="java-25-openjdk" arch="x86_64">
  <version epoch="0" ver="25.0.2.0" rel="150700.15.7.1"/>
  <changelog author="fstrba@suse.com" date="1757505600">- Initial packaging of OpenJDK 25
  * JEPs included:
    + 470: PEM Encodings of Cryptographic Objects (Preview)
    + 502: Stable Values (Preview)
    + 503: Remove the 32-bit x86 Port
    + 505: Structured Concurrency (Fifth Preview)
    + 506: Scoped Values
    + 507: Primitive Types in Patterns, instanceof, and switch
    (Third Preview)
    + 508: Vector API (Tenth Incubator)
    + 509: JFR CPU-Time Profiling (Experimental)
    + 510: Key Derivation Function API
    + 511: Module Import Declarations
    + 512: Compact Source Files and Instance Main Methods
    + 513: Flexible Constructor Bodies
    + 514: Ahead-of-Time Command-Line Ergonomics
    + 515: Ahead-of-Time Method Profiling
    + 518: JFR Cooperative Sampling
    + 519: Compact Object Headers
    + 520: JFR Method Timing &amp; Tracing
    + 521: Generational Shenandoah</changelog>
  <changelog author="fstrba@suse.com" date="1758196800">- Added patch:
  * fips.patch
    + forward port the FIPS support from OpenJDK 21</changelog>
  <changelog author="fstrba@suse.com" date="1761134400">- Update to upstream tag jdk-25.0.1+8 (October 2025 CPU)
  * Security fixes:
    + JDK-8360937, CVE-2025-53057, bsc#1252414: Enhance certificate
    handling
    + JDK-8356294, CVE-2025-53066, bsc#1252417: Enhance Path
    Factories
    + JDK-8359454, CVE-2025-61748, bsc#1252418: Enhance String
    handling
    + JDK-8352637: Enhance bytecode verification
  * Other fixes:
    + JDK-8367031: [backout] Change java.time month/day field types
    to 'byte'
    + JDK-8368308: ISO 4217 Amendment 180 Update
    + JDK-8366223: ZGC:
    ZPageAllocator::cleanup_failed_commit_multi_partition is
    broken
    + JDK-8360647: [XWayland] [OL10] NumPad keys are not triggered
    + JDK-8361212: Remove AffirmTrust root CAs
    + JDK-8356587: Missing object ID X in pool jdk.types.Method
    + JDK-8360679: Shenandoah: AOT saved adapter calls into broken
    GC barrier stub
    + JDK-8362882: Update SubmissionPublisher() specification to
    reflect use of ForkJoinPool.asyncCommonPool()
    + JDK-8315131: Clarify VarHandle set/get access on 32-bit
    platforms
    + JDK-8362109: Change milestone to fcs for all releases
    + JDK-8358819: The first year is not displayed correctly in
    Japanese Calendar
    + JDK-8361829: [TESTBUG] RISC-V: compiler/vectorization/runner/
    /BasicIntOpTest.java fails with RVV but not Zvbb
    + JDK-8361532: RISC-V: Several vector tests fail after
    JDK-8354383
    + JDK-8357826: Avoid running some jtreg tests when asan is
    configured
    + JDK-8358577: Test serviceability/jvmti/thread/
    /GetCurrentContendedMonitor/contmon01/contmon01.java failed:
    unexpexcted monitor object
    + JDK-8360533: ContainerRuntimeVersionTestUtils
    fromVersionString fails with some docker versions
    + JDK-8358452: JNI exception pending in
    Java_sun_awt_screencast_ScreencastHelper_remoteDesktopKeyImpl
    of screencast_pipewire.c:1214 (ID: 51119)
    + JDK-8359270: C2: alignment check should consider base offset
    when emitting arraycopy runtime call
    + JDK-8359596: Behavior change when both -Xlint:options and
  - Xlint:-options flags are given
    + JDK-8360179: RISC-V: Only enable BigInteger intrinsics when
    AvoidUnalignedAccess == false
    + JDK-8359218: RISC-V: Only enable CRC32 intrinsic when
    AvoidUnalignedAccess == false
    + JDK-8359059: Bump version numbers for 25.0.1</changelog>
  <changelog author="fstrba@suse.com" date="1768392000">- Do not depend on update-desktop-files (jsc#PED-14507 and
  jsc#PED-15221)</changelog>
  <changelog author="fstrba@suse.com" date="1769428800">- Update to upstream tag jdk-25.0.2+10 (January 2026 CPU)
  * CVEs
    + CVE-2026-21925, bsc#1257034
    + CVE-2026-21932, bsc#1257036
    + CVE-2026-21933, bsc#1257037
    + CVE-2026-21945, bsc#1257038
  * Changes
    + JDK-8023263: [TESTBUG] Test closed/java/awt/Focus/
    /InactiveWindowTest/InactiveFocusRace fails due to not enough
    time to initialize graphic components
    + JDK-8162380: [TEST_BUG] MouseEvent/.../
    /AltGraphModifierTest.java has only "Fail" button
    + JDK-8201778: Speed up test
    javax/net/ssl/DTLS/PacketLossRetransmission.java
    + JDK-8265429: Improve GCM encryption
    + JDK-8277444: Data race between
    JvmtiClassFileReconstituter::copy_bytecodes and class linking
    + JDK-8279005: sun/tools/jstat tests do not check for test case
    exit codes after JDK-8245129
    + JDK-8304811: vmTestbase/vm/mlvm/indy/func/jvmti/
    /stepBreakPopReturn/INDIFY_Test.java fails with
    JVMTI_ERROR_TYPE_MISMATCH
    + JDK-8305567: serviceability/tmtools/jstat/GcTest01.java
    failed  utils.JstatGcResults.assertConsistency
    + JDK-8317801: java/net/Socket/asyncClose/Race.java fails
    intermittently (aix)
    + JDK-8320836: jtreg gtest runs should limit heap size
    + JDK-8325766: Extend CertificateBuilder to create trust and
    end entity certificates programmatically
    + JDK-8333526: Restructure java/nio/channels/DatagramChannel/
    /StressNativeSignal.java to a fail fast exception handling
    policy
    + JDK-8333783: java/nio/channels/FileChannel/directio/
    /DirectIOTest.java is unstable with AV software
    + JDK-8334238: Enhance AddLShortcutTest jpackage test
    + JDK-8335986: Test javax/swing/JCheckBox/4449413/
    /bug4449413.java fails on Windows 11 x64 because RBMenuItem's
    and CBMenuItem's checkmark on the left side are not visible
    + JDK-8341496: Improve JMX connections
    + JDK-8343218: Add option to disable allocating interface and
    abstract classes in non-class metaspace
    + JDK-8343546: GHA: Cache required dependencies in master-branch
    workflow
    + JDK-8345810: Custom launchers must be linked with pthread to
    avoid dynamic linker issues
    + JDK-8346753: Test javax/swing/JMenuItem/RightLeftOrientation/
    /RightLeftOrientation.java fails on Windows Server 2025 x64
    because the icons of RBMenuItem and CBMenuItem are not visible
    in Nimbus LookAndFeel
    + JDK-8346839: [TESTBUG] "java/awt/textfield/setechochartest4/
    /setechochartest4.java" failed because the test frame
    disappears on clicking "Click Several Times" button
    + JDK-8346884: Add since checker test to jdk.editpad
    + JDK-8346952: GetGraphicsStressTest.java fails: Native
    resources unavailable
    + JDK-8347277: java/awt/Focus/ComponentLostFocusTest.java fails
    intermittently
    + JDK-8349188: LineBorder does not scale correctly
    + JDK-8350621: Code cache stops scheduling GC
    + JDK-8351487: [ubsan] jvmti.h runtime error: load of value
    which is not a valid value
    + JDK-8352016: Improve
    java/lang/RuntimeTests/RuntimeExitLogTest.java
    + JDK-8354348: Enable Extended EVEX to REX2/REX demotion for
    commutative operations with same dst and src2
    + JDK-8354415: [Ubuntu25.04] api/java_awt/GraphicsDevice/
    /indexTGF.html#SetDisplayMode -
    setDisplayMode_REFRESH_RATE_UNKNOWN fails: Height is different
    on vnc
    + JDK-8354447: Missing test for retroactive
    @SuppressWarnings("dangling-doc-comments") behavior
    + JDK-8354646: java.awt.TextField allows to identify the spaces
    in a password when double clicked at the starting and end of
    the text
    + JDK-8355478: DoubleActionESC.java fails intermittently
    + JDK-8356324: JVM crash (SIGSEGV at
    ClassListParser::resolve_indy_impl) during -Xshare:dump
    starting from 21.0.5
    + JDK-8356897: Update NSS library to 3.111
    + JDK-8357064: cds/appcds/ArchiveRelocationTest.java failed
    with missing expected output
    + JDK-8357141: Update to use jtreg 7.5.2
    + JDK-8357382: runtime/cds/appcds/aotClassLinking/
    /BulkLoaderTest.java#aot fails with Xcomp and C1
    + JDK-8357396: Refactor nmethod::make_not_entrant to use Enum
    instead of "const char*"
    + JDK-8357691: File blocked.certs contains bad content when
    boot jdk 25 is used, sun/security/lib/CheckBlockedCerts.java
    failing
    + JDK-8357694: RISC-V: Several IR verification tests fail when
    vlen=128
    + JDK-8357799: Improve instructions for
    JFileChooser/HTMLFileName.java
    + JDK-8357816: Add test from JDK-8350576
    + JDK-8357822: C2: Multiple string optimization tests are no
    longer testing string concatenation optimizations
    + JDK-8357959: (bf) ByteBuffer.allocateDirect initialization
    can result in large TTSP spikes
    + JDK-8358048: java/net/httpclient/HttpsTunnelAuthTest.java
    incorrectly calls Thread::stop
    + JDK-8358340: Support CDS heap archive with Generational
    Shenandoah
    + JDK-8358532: JFileChooser in GTK L&amp;F still displays HTML
    filename
    + JDK-8358535: Changes in ClassValue (JDK-8351996) caused a
    1-9% regression in Renaissance-PageRank
    + JDK-8358556: Assert when running with -XX:-UseLibmIntrinsic
    + JDK-8358685: [TEST] AOTLoggingTag.java failed with missing
    log message
    + JDK-8358697: TextLayout/MyanmarTextTest.java passes if no
    Myanmar font is found
    + JDK-8358723: jpackage signing issues: the main launcher
    doesn't have entitlements
    + JDK-8358748: Large page size initialization fails with assert
    "page_size must be a power of 2"
    + JDK-8358751: C2: Recursive inlining check for compiled lambda
    forms is broken
    + JDK-8358813: JPasswordField identifies spaces in password via
    delete shortcuts
    + JDK-8359061: Update and ProblemList manual test
    java/awt/Cursor/CursorDragTest/ListDragCursor.java
    + JDK-8359104: gc/TestAlwaysPreTouchBehavior.java#&lt;gcname&gt;
    fails on Linux
    + JDK-8359105: RISC-V: No need for acquire fence in safepoint
    poll during JNI calls
    + JDK-8359127: Amend java/nio/channels/DatagramChannel/
    /PromiscuousIPv6.java to use @requires for OS platform
    selection
    + JDK-8359167: Remove unused test/hotspot/jtreg/vmTestbase/nsk/
    /share/jpda/BindServer.java
    + JDK-8359207: Remove runtime/signal/TestSigusr2.java since it
    is always skipped
    + JDK-8359423: Improve error message in case of missing jsa
    shared archive
    + JDK-8359428: Test 'javax/swing/JTabbedPane/bug4499556.java'
    failed because after selecting one of L&amp;F items, the test case
    automatically failed when clicking on L&amp;F Menu button again
    + JDK-8359449: [TEST] open/test/jdk/java/io/File/SymLinks.java
    Refactor extract method for Windows specific test
    + JDK-8359477: com/sun/net/httpserver/Test12.java appears to
    have a temp file race
    + JDK-8359501: Enhance Handling of URIs
    + JDK-8359687: Use PassFailJFrame for
    java/awt/print/Dialog/DialogType.java
    + JDK-8359690: New test TestCPUTimeSampleThrottling still fails
    intermittently
    + JDK-8359735: [Ubuntu 25.10] java/lang/ProcessBuilder/
    /Basic.java, java/lang/ProcessHandle/InfoTest.java fail due to
    rust-coreutils
    + JDK-8359827: Test runtime/Thread/ThreadCountLimit.java need
    loop increasing the limit
    + JDK-8360022: ClassRefDupInConstantPoolTest.java fails when
    running in repeat
    + JDK-8360090: [TEST] RISC-V: disable some cds tests on qemu
    + JDK-8360178: TestArguments.atojulong gtest has incorrect
    format string
    + JDK-8360219: [AIX] assert(locals_base &gt;= l2) failed: bad
    placement
    + JDK-8360255: runtime/jni/checked/TestLargeUTF8Length.java
    fails with -XX:-CompactStrings
    + JDK-8360408: [TEST] Use @requires tag instead of exiting
    based on "os.name" property value for
    sun/net/www/protocol/file/FileURLTest.java
    + JDK-8360411: [TEST] open/test/jdk/java/io/File/
    /MaxPathLength.java Refactor extract method to encapsulate
    Windows specific test logic
    + JDK-8360518: Docker tests do not work when asan is configured
    + JDK-8360520: RISC-V: C1: Fix primitive array clone intrinsic
    regression after JDK-8333154
    + JDK-8360664: Null pointer dereference in src/hotspot/share/
    /prims/jvmtiTagMap.cpp in
    IterateOverHeapObjectClosure::do_object()
    + JDK-8360783: CTW: Skip deoptimization between tiers
    + JDK-8360791: [ubsan] Adjust signal handling
    + JDK-8360867: CTW: Disable inline cache verification
    + JDK-8360981: Remove use of Thread.stop in
    test/jdk/java/net/Socket/DeadlockTest.java
    + JDK-8361112: Use exact float -&gt; Float16 conversion method in
    Float16 tests
    + JDK-8361180: Disable CompiledDirectCall verification with
  - VerifyInlineCaches
    + JDK-8361198: [AIX] fix misleading error output in
    thread_cpu_time_unchecked
    + JDK-8361211: C2: Final graph reshaping generates unencodeable
    klass constants
    + JDK-8361215: Add AOT test case: verification constraint
    classes are excluded
    + JDK-8361253: CommandLineOptionTest library should report
    observed values on failure
    + JDK-8361255: CTW: Tolerate more NCDFE problems
    + JDK-8361298: SwingUtilities/bug4967768.java fails where
    character P is not underline
    + JDK-8361314: Test serviceability/jvmti/VMEvent/MyPackage/
    /VMEventRecursionTest.java FATAL ERROR in native method:
    Failed during the GetClassSignature call
    + JDK-8361367: AOT ExcludedClasses.java test failed with
    missing constant pool logs
    + JDK-8361423: Add IPSupport::printPlatformSupport to
    java/net/NetworkInterface/IPv4Only.java
    + JDK-8361449: RISC-V: Code cleanup for native call
    + JDK-8361478: GHA: Use MSYS2 from GHA runners
    + JDK-8361494: [IR Framework] Escape too much in replacement of
    placeholder
    + JDK-8361497: Scoped Values: orElse and orElseThrow do not
    access the cache
    + JDK-8361504: RISC-V: Make C1 clone intrinsic platform guard
    more specific
    + JDK-8361520: Stabilize SystemGC benchmarks
    + JDK-8361599: [PPC64] enable missing tests via jtreg requires
    + JDK-8361711: Add library name configurability to
    PKCS11Test.java
    + JDK-8361748: Enforce limits on the size of an XBM image
    + JDK-8361839: Problemlist BogusFocusableWindowState due to
    failures in the CI pipeline
    + JDK-8361868: [GCC static analyzer] complains about missing
    calloc - NULL checks in p11_util.c
    + JDK-8361871: [GCC static analyzer] complains about use of
    uninitialized value ckpObject in p11_util.c
    + JDK-8361888: [GCC static analyzer] ProcessImpl_md.c
    Java_java_lang_ProcessImpl_forkAndExec error: use of
    uninitialized value '*(ChildStuff *)p.mode
    + JDK-8361892: AArch64: Incorrect matching rule leading to
    improper oop instruction encoding
    + JDK-8361897: gc/z/TestUncommit.java fails with Uncommitted
    too slow
    + JDK-8361948: Shenandoah: region free capacity unit mismatch
    + JDK-8361950: Update to use jtreg 8
    + JDK-8361959: [GCC static analyzer] java_props_md.c  leak of
    'temp'  variable is reported
    + JDK-8362107: Update the Jan CPU26_01 release date in master
    branch after forking Oct CPU25_10
    + JDK-8362123: ClassLoader Leak via
    Executors.newSingleThreadExecutor(...)
    + JDK-8362169: Pointer passed to upcall may get wrong scope
    + JDK-8362204: test/jdk/sun/awt/font/TestDevTransform.java
    fails on Ubuntu 24.04
    + JDK-8362207: Add more test cases for possible double-rounding
    in fma
    + JDK-8362282: runtime/logging/StressAsyncUL.java failed with
    exitValue = 134
    + JDK-8362308: Enhance Bitmap operations
    + JDK-8362379: Test serviceability/HeapDump/
    /UnmountedVThreadNativeMethodAtTop.java should mark as /native
    + JDK-8362390: AIX make fails in awt_GraphicsEnv.c
    + JDK-8362482: [TESTBUG] serviceability/HeapDump/
    /UnmountedVThreadNativeMethodAtTop.java: System.gc() does not
    provide full GC
    + JDK-8362501: Update test/hotspot/jtreg/applications/jcstress/
    /README
    + JDK-8362515: RISC-V: cleanup NativeFarCall
    + JDK-8362516: Support of GCC static analyzer (-fanalyzer)
    + JDK-8362530: VM crash with -XX:+PrintTieredEvents when
    collecting AOT profiling
    + JDK-8362532: Test gc/g1/plab/* duplicate command-line options
    + JDK-8362533: Tests sun/management/jmxremote/bootstrap/*
    duplicate VM flags
    + JDK-8362581: Timeouts in
    java/nio/channels/SocketChannel/OpenLeak.java on UNIX
    + JDK-8362582: GHA: Increase bundle retention time to deal with
    infra overload better
    + JDK-8362596: RISC-V: Improve _vectorizedHashCode intrinsic
    + JDK-8362602: Add test.timeout.factor to CompileFactory to
    avoid test timeouts
    + JDK-8362632: Improve HttpServer Request handling
    + JDK-8362834: Several runtime/Thread tests should mark as
    /native
    + JDK-8362836: JFR: Broken pipe in
    jdk/jfr/event/io/TestIOTopFrame.java
    + JDK-8362838: RISC-V: Incorrect matching rule leading to
    improper oop instruction encoding
    + JDK-8362855: Test java/net/ipv6tests/TcpTest.java should
    report SkippedException when there no ia4addr  or ia6addr
    + JDK-8362889: [GCC static analyzer] leak in
    libstringPlatformChars.c
    + JDK-8362972: C2 fails with unexpected node in SuperWord
    truncation: IsFiniteF, IsFiniteD
    + JDK-8363676: [GCC static analyzer] missing return value check
    of malloc in OGLContext_SetTransform
    + JDK-8363696: Update the release version and date for OpenJDK
    25u
    + JDK-8363720: Follow up to JDK-8360411 with post review
    comments
    + JDK-8363895: Minimal build fails with slowdebug builds after
    JDK-8354887
    + JDK-8363898: RISC-V: TestRangeCheckHoistingScaledIV.java
    fails after JDK-8355293 when running without RVV
    + JDK-8363910: Avoid tuning for Power10 CPUs on Linux ppc64le
    when gcc &lt; 10 is used
    + JDK-8363928: Specifying AOTCacheOutput with a blank path
    causes the JVM to crash
    + JDK-8363965: GHA: Switch cross-compiling sysroots to Debian
    bookworm
    + JDK-8363966: GHA: Switch cross-compiling sysroots to Debian
    trixie
    + JDK-8364090: Dump JFR recording on CrashOnOutOfMemoryError
    + JDK-8364111: InstanceMirrorKlass iterators should handle CDS
    and hidden classes consistently
    + JDK-8364114: Test
    TestHugePageDecisionsAtVMStartup.java#LP_enabled fails when no
    free hugepage
    + JDK-8364120: RISC-V: unify the usage of
    MacroAssembler::instruction_size
    + JDK-8364150: RISC-V: Leftover for JDK-8343430 removing old
    trampoline call
    + JDK-8364177: JDK fails to build due to undefined symbol in
    libpng on LoongArch64
    + JDK-8364184: [REDO] AArch64: [VectorAPI] sve vector math
    operations are not supported after JDK-8353217
    + JDK-8364190: JFR: RemoteRecordingStream withers don't work
    + JDK-8364198: NMT should have a better corruption message
    + JDK-8364199: Enhance list of environment variables printed in
    hserr/hsinfo file
    + JDK-8364212: Shenandoah: Rework archived objects loading
    + JDK-8364214: Enhance polygon data support
    + JDK-8364235: Fix for JDK-8361447 breaks the alignment
    requirements for GuardedMemory
    + JDK-8364257: JFR: User-defined events and settings with a
    one-letter name cannot be configured
    + JDK-8364263: HttpClient: Improve encapsulation of ProxyServer
    + JDK-8364296: Set IntelJccErratumMitigation flag ergonomically
    + JDK-8364352: Some tests fail when using a limited number of
    pregenerated .jsa CDS archives
    + JDK-8364454: ProblemList runtime/cds/DeterministicDump.java
    on macos for JDK-8363986
    + JDK-8364503: gc/g1/TestCodeCacheUnloadDuringConcCycle.java
    fails because of race printing to stdout
    + JDK-8364514: [asan] runtime/jni/checked/
    /TestCharArrayReleasing.java heap-buffer-overflow
    + JDK-8364556: JFR:  Disable SymbolTableStatistics and
    StringTableStatistics in default.jfc
    + JDK-8364597: Replace THL A29 Limited with Tencent
    + JDK-8364611: (process) Child process SIGPIPE signal
    disposition should be default
    + JDK-8364660: ClassVerifier::ends_in_athrow() should be removed
    + JDK-8364764: java/nio/channels/vthread/BlockingChannelOps.java
    subtests timed out
    + JDK-8364786: Test java/net/vthread/HttpALot.java
    intermittently fails - 24999 handled, expected 25000
    + JDK-8364984: Many jpackage tests are failing on Linux after
    JDK-8334238
    + JDK-8364993: JFR: Disable jdk.ModuleExport in default.jfc
    + JDK-8364996: java/awt/font/FontNames/LocaleFamilyNames.java
    times out on Windows
    + JDK-8365058: Enhance CopyOnWriteArraySet
    + JDK-8365071: ARM32: JFR intrinsic jvm_commit triggers C2
    regalloc assert
    + JDK-8365086: CookieStore.getURIs() and get(URI) should return
    an immutable List
    + JDK-8365165: Zap C-heap memory at delete/free
    + JDK-8365166: ARM32: missing os::fetch_bcp_from_context
    implementation
    + JDK-8365168: Use 64-bit aligned addresses for CK_ULONG access
    in PKCS11 native key code
    + JDK-8365200: RISC-V: compiler/loopopts/superword/
    /TestGeneralizedReductions.java fails with Zvbb and vlen=128
    + JDK-8365206: RISC-V: compiler/c2/irTests/
    /TestFloat16ScalarOperations.java is failing on riscv64
    + JDK-8365240: [asan] exclude some tests when using asan
    enabled binaries
    + JDK-8365260: Problemlist 1 test due to failures in the CI
    pipeline
    + JDK-8365265: x86 short forward jump exceeds 8-bit offset in
    methodHandles_x86.cpp when using Intel APX
    + JDK-8365271: Improve Swing supports
    + JDK-8365280: Enhance JOptionPane
    + JDK-8365302: RISC-V: compiler/loopopts/superword/
    /TestAlignVector.java fails when vlen=128
    + JDK-8365307: AIX make fails after JDK-8364611
    + JDK-8365312: GCC 12 cannot compile SVE on aarch64 with
    auto-var-init pattern
    + JDK-8365389: Remove static color fields from SwingUtilities3
    and WindowsMenuItemUI
    + JDK-8365425: [macos26] javax/swing/JInternalFrame/8160248/
    /JInternalFrameDraggingTest.java fails on macOS 26
    + JDK-8365442: [asan] runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java fails
    + JDK-8365468: EagerJVMCI should only apply to the
    CompilerBroker JVMCI runtime
    + JDK-8365487: [asan] some oops (mode) related tests fail
    + JDK-8365543: UnixNativeDispatcher.init should lookup open64at
    and stat64at on AIX
    + JDK-8365571: GenShen: PLAB promotions may remain disabled for
    evacuation threads
    + JDK-8365615: Improve JMenuBar/RightLeftOrientation.java
    + JDK-8365638: JFR: Add --exact for debugging out-of-order
    events
    + JDK-8365660: test/jdk/sun/security/pkcs11/KeyAgreement/ tests
    skipped without SkipException
    + JDK-8365700: Jar --validate without any --file option leaves
    around a temporary file /tmp/tmpJar&lt;number&gt;.jar
    + JDK-8365726: Test crashed with assert in C1 thread: Possible
    safepoint reached by thread that does not allow it
    + JDK-8365772: RISC-V: correctly prereserve NaN payload when
    converting from float to float16 in vector way
    + JDK-8365790: Shutdown hook for application image does not
    work on Windows
    + JDK-8365811: test/jdk/java/net/CookieHandler/B6644726.java
    failure - "Should have 5 cookies. Got only 4, expires probably
    didn't parse correctly"
    + JDK-8365823: Revert storing abstract and interface Klasses to
    non-class metaspace
    + JDK-8365834: Mark java/net/httpclient/ManyRequests.java  as
    intermittent
    + JDK-8365841: RISC-V: Several IR verification tests fail after
    JDK-8350960 without Zvfh
    + JDK-8365844: RISC-V: TestBadFormat.java fails when running
    without RVV
    + JDK-8365863: /test/jdk/sun/security/pkcs11/Cipher tests skip
    without SkippedException
    + JDK-8365913: Support latest MSC_VER in abstract_vm_version.cpp
    + JDK-8365919: Replace currentTimeMillis with nanoTime in
    Stresser.java
    + JDK-8365926: RISC-V: Performance regression in renaissance
    (chi-square)
    + JDK-8365956: GenShen: Adaptive tenuring threshold algorithm
    may raise threshold prematurely
    + JDK-8365983: Tests should throw SkippedException when SCTP
    not supported
    + JDK-8366028: MethodType::fromMethodDescriptorString should
    not throw UnsupportedOperationException for invalid
    descriptors
    + JDK-8366029: Do not add -XX:VerifyArchivedFields by default
    to CDS tests
    + JDK-8366031: Mark com/sun/nio/sctp/SctpChannel/
    /CloseDescriptors.java as intermittent
    + JDK-8366075: Problemlist 2 tests due to failures in the CI
    pipeline
    + JDK-8366092: [GCC static analyzer] UnixOperatingSystem.c
    warning: use of uninitialized value 'systemTicks'
    + JDK-8366147: ZGC:
    ZPageAllocator::cleanup_failed_commit_single_partition may
    leak memory
    + JDK-8366159: SkippedException is treated as a pass for
    pkcs11/KeyStore, pkcs11/SecretKeyFactory and
    pkcs11/SecureRandom
    + JDK-8366208: Unexpected exception in
    sun.java2d.cmm.lcms.LCMSImageLayout
    + JDK-8366229: runtime/Thread/TooSmallStackSize.java runs with
    all collectors
    + JDK-8366250: Problemlist 3 tests due to failures in the CI
    pipeline
    + JDK-8366340: Problemlist 1 test due to failures in the CI
    pipeline
    + JDK-8366342: Key generator and key pair generator tests
    skipping, but showing as passed
    + JDK-8366359: Test should throw SkippedException when there is
    no lpstat
    + JDK-8366365: [test] test/lib-test/jdk/test/whitebox/
    /CPUInfoTest.java should be updated
    + JDK-8366434: THP not working properly with G1 after
    JDK-8345655
    + JDK-8366446: Test java/awt/geom/ConcurrentDrawPolygonTest.java
    fails intermittently
    + JDK-8366537: Test "java/util/TimeZone/
    /DefaultTimeZoneTest.java" is not updating the zone ID as
    expected
    + JDK-8366558: Gtests leave /tmp/cgroups-test* files
    + JDK-8366694: Test JdbStopInNotificationThreadTest.java timed
    out after 60 second
    + JDK-8366750: Remove test 'java/awt/Choice/
    /ChoiceMouseWheelTest/ChoiceMouseWheelTest.java' from
    problemlist
    + JDK-8366764: Deproblemlist java/awt/ScrollPane/
    /ScrollPositionTest.java
    + JDK-8366800: Problemlist 1 test due to failures in the CI
    pipeline
    + JDK-8366844: Update and automate
    MouseDraggedOriginatedByScrollBarTest.java
    + JDK-8366850: Test com/sun/jdi/
    /JdbStopInNotificationThreadTest.java failed
    + JDK-8366893: java/lang/Thread/virtual/stress/
    /GetStackTraceALotWhenPinned.java timed out on macos-aarch64
    + JDK-8366948: AOT cache creation crashes when iterating
    training data
    + JDK-8366980: TestTransparentHugePagesHeap.java fails when run
    with -UseCompressedOops
    + JDK-8367017: Remove legacy checks from WrappedToolkitTest and
    convert from bash
    + JDK-8367021: Regression in LocaleDataTest refactoring
    + JDK-8367048: RISC-V: Correct pipeline descriptions of the
    architecture
    + JDK-8367066: RISC-V: refine register selection in
    MacroAssembler:: decode_klass_not_null
    + JDK-8367098: RISC-V: sync CPU features with related JVM flags
    for dependant ones
    + JDK-8367131: Test com/sun/jdi/ThreadMemoryLeakTest.java fails
    on 32 bits
    + JDK-8367133: DTLS: fragmentation of Finished message results
    in handshake failure
    + JDK-8367137: RISC-V: Detect Zicboz block size via hwprobe
    + JDK-8367237: Thread-Safety Usage Warning for
    java.text.Collator Classes
    + JDK-8367277: Fix copyright header in
    JMXInterfaceBindingTest.java
    + JDK-8367313: CTW: Execute in AWT headless mode
    + JDK-8367333: C2: Vector math operation intrinsification
    failure
    + JDK-8367348: Enhance PassFailJFrame to support links in HTML
    + JDK-8367378: GenShen: Missing timing stats when old mark
    buffers are flushed during final update refs
    + JDK-8367384: The ICC_Profile class may throw exceptions
    during serialization
    + JDK-8367598: Switch to CRC32C for SEED calculation in
    jdk.test.lib.Utils
    + JDK-8367616: RISC-V: Auto-enable Zicboz extension for debug
    builds
    + JDK-8367689: Revert removal of several compilation-related
    vmStructs fields
    + JDK-8367692: RISC-V: Align post call nop
    + JDK-8367694: Fix jtreg test failure when Intel APX is enabled
    for KNL platforms
    + JDK-8367780: Enable UseAPX on Intel CPUs only when both APX_F
    and APX_NCI_NDD_NF cpuid features are present
    + JDK-8367782: VerifyJarEntryName.java: Fix modifyJarEntryName
    to operate on bytes and re-introduce verifySignatureEntryName
    + JDK-8367869: Test java/io/FileDescriptor/Sync.java timed out
    + JDK-8367904: Test java/net/InetAddress/ptr/Lookup.java should
    throw SkippedException
    + JDK-8367948: JFR: MethodTrace threshold setting has no effect
    + JDK-8367953: JFR sampler threads does not appear in thread
    dump
    + JDK-8367969: C2: compiler/vectorapi/TestVectorMathLib.java
    fails without UnlockDiagnosticVMOptions
    + JDK-8367988: NewFileSystemTests.readOnlyZipFileFailure fails
    when run by root user
    + JDK-8368032: Enhance Certificate Checking
    + JDK-8368071: Compilation throughput regressed 2X-8X after
    JDK-8355003
    + JDK-8368152: Shenandoah: Incorrect behavior at end of
    degenerated cycle
    + JDK-8368192: Test java/lang/ProcessBuilder/Basic.java#id0
    fails with Exception: Stack trace
    + JDK-8368366: RISC-V: AlignVector is mistakenly set to
    AvoidUnalignedAccesses
    + JDK-8368367: Test jdk/jfr/event/gc/detailed/
    /TestGCHeapMemoryUsageEvent.java fails  jdk.GCHeapMemoryUsage
    "expected 0 &gt; 0"
    + JDK-8368565: Adjust comment regarding dependency of libjvm.so
    to librt
    + JDK-8368606: Printer lookup returns empty on AIX platform due
    to uninitialized results list
    + JDK-8368668: Several vmTestbase/vm/gc/compact tests timed out
    on large memory machine
    + JDK-8368670: Deadlock in JFR on event register + class load
    + JDK-8368698: runtime/cds/appcds/aotCache/OldClassSupport.java
    assert(can_add()) failed: Cannot add TrainingData objects
    + JDK-8368732: RISC-V: Detect support for misaligned vector
    access via hwprobe
    + JDK-8368890: open/test/jdk/tools/jpackage/macosx/
    /NameWithSpaceTest.java fails randomly
    + JDK-8368893: RISC-V: crash after JDK-8352673 on fastdebug
    version
    + JDK-8368960: Adjust java UL logging in the build
    + JDK-8368982: Test sun/security/tools/jarsigner/EC.java
    completed and timed out
    + JDK-8369078: Fix faulty test conversion in
    IllegalCharsetName.java
    + JDK-8369184: SimpleTimeZone equals() Returns True for Unequal
    Instances with Different hashCode Values
    + JDK-8369190: JavaFrameAnchor on AArch64 has unnecessary
    barriers and wrong store order in MacroAssembler
    + JDK-8369226: GHA: Switch to MacOS 15
    + JDK-8369319: java/net/httpclient/CancelRequestTest.java fails
    intermittently
    + JDK-8369450: [Ubuntu 25.10] openjdk fails to build due to
    rust-coreutils date
    + JDK-8369487: Revert EA option for build promotion
    + JDK-8369506: Bytecode rewriting causes Java heap corruption
    on AArch64
    + JDK-8369560: Slowdebug build without CDS fails
    + JDK-8369563: Gtest dll_address_to_function_and_library_name
    has issues with stripped pdb files
    + JDK-8369616: JavaFrameAnchor on RISC-V has unnecessary
    barriers and wrong store order in MacroAssembler
    + JDK-8369656: Calling CompletableFuture.join() could execute
    task in common pool
    + JDK-8369657: [AIX] TOC overflow in static-launcher build when
    building slowdebug after JDK-8352064
    + JDK-8369853: jpackage signing tests fail after JDK-8358723
    + JDK-8369868: Compilation error in Win8365790Test.java with
    JDK-8358723 fix resulting in CI tier3 failure
    + JDK-8369946: Bytecode rewriting causes Java heap corruption
    on PPC
    + JDK-8369947: Bytecode rewriting causes Java heap corruption
    on RISC-V
    + JDK-8369979: Flag UsePopCountInstruction was accidentally
    disabled on PPC64
    + JDK-8370048: Shenandoah: Deprecated ShenandoahPacing option
    + JDK-8370049: [s390x] G1 barrier compareAndExchange does not
    return old value when compareExchange fails
    + JDK-8370318: AES-GCM vector intrinsic may read out of bounds
    (x86_64, AVX-512)
    + JDK-8370331: Problemlist 2 tests due to failures in the CI
    pipeline
    + JDK-8370428: Change milestone to fcs for all releases
    + JDK-8370465: Right to Left Orientation Issues with MenuItem
    Component
    + JDK-8371094: --mac-signing-key-user-name no longer works
    + JDK-8371425: Include folder names in vscode workspace virtual
    folders
    + JDK-8371697: test/jdk/java/nio/file/FileStore/Basic.java
    fails after 8360887 on linux
    + JDK-8372753: jpackage ignores --file-associations option with
    predefined app image</changelog>
</package>
<package pkgid="165b49c907e0c5afebd384cf5fd069e8d0b281d9d4ced5573b8da72c47facee1" name="java-25-openjdk" arch="src">
  <version epoch="0" ver="25.0.3.0" rel="150700.15.10.1"/>
  <changelog author="fstrba@suse.com" date="1757505600">- Initial packaging of OpenJDK 25
  * JEPs included:
    + 470: PEM Encodings of Cryptographic Objects (Preview)
    + 502: Stable Values (Preview)
    + 503: Remove the 32-bit x86 Port
    + 505: Structured Concurrency (Fifth Preview)
    + 506: Scoped Values
    + 507: Primitive Types in Patterns, instanceof, and switch
    (Third Preview)
    + 508: Vector API (Tenth Incubator)
    + 509: JFR CPU-Time Profiling (Experimental)
    + 510: Key Derivation Function API
    + 511: Module Import Declarations
    + 512: Compact Source Files and Instance Main Methods
    + 513: Flexible Constructor Bodies
    + 514: Ahead-of-Time Command-Line Ergonomics
    + 515: Ahead-of-Time Method Profiling
    + 518: JFR Cooperative Sampling
    + 519: Compact Object Headers
    + 520: JFR Method Timing &amp; Tracing
    + 521: Generational Shenandoah</changelog>
  <changelog author="fstrba@suse.com" date="1758196800">- Added patch:
  * fips.patch
    + forward port the FIPS support from OpenJDK 21</changelog>
  <changelog author="fstrba@suse.com" date="1761134400">- Update to upstream tag jdk-25.0.1+8 (October 2025 CPU)
  * Security fixes:
    + JDK-8360937, CVE-2025-53057, bsc#1252414: Enhance certificate
    handling
    + JDK-8356294, CVE-2025-53066, bsc#1252417: Enhance Path
    Factories
    + JDK-8359454, CVE-2025-61748, bsc#1252418: Enhance String
    handling
    + JDK-8352637: Enhance bytecode verification
  * Other fixes:
    + JDK-8367031: [backout] Change java.time month/day field types
    to 'byte'
    + JDK-8368308: ISO 4217 Amendment 180 Update
    + JDK-8366223: ZGC:
    ZPageAllocator::cleanup_failed_commit_multi_partition is
    broken
    + JDK-8360647: [XWayland] [OL10] NumPad keys are not triggered
    + JDK-8361212: Remove AffirmTrust root CAs
    + JDK-8356587: Missing object ID X in pool jdk.types.Method
    + JDK-8360679: Shenandoah: AOT saved adapter calls into broken
    GC barrier stub
    + JDK-8362882: Update SubmissionPublisher() specification to
    reflect use of ForkJoinPool.asyncCommonPool()
    + JDK-8315131: Clarify VarHandle set/get access on 32-bit
    platforms
    + JDK-8362109: Change milestone to fcs for all releases
    + JDK-8358819: The first year is not displayed correctly in
    Japanese Calendar
    + JDK-8361829: [TESTBUG] RISC-V: compiler/vectorization/runner/
    /BasicIntOpTest.java fails with RVV but not Zvbb
    + JDK-8361532: RISC-V: Several vector tests fail after
    JDK-8354383
    + JDK-8357826: Avoid running some jtreg tests when asan is
    configured
    + JDK-8358577: Test serviceability/jvmti/thread/
    /GetCurrentContendedMonitor/contmon01/contmon01.java failed:
    unexpexcted monitor object
    + JDK-8360533: ContainerRuntimeVersionTestUtils
    fromVersionString fails with some docker versions
    + JDK-8358452: JNI exception pending in
    Java_sun_awt_screencast_ScreencastHelper_remoteDesktopKeyImpl
    of screencast_pipewire.c:1214 (ID: 51119)
    + JDK-8359270: C2: alignment check should consider base offset
    when emitting arraycopy runtime call
    + JDK-8359596: Behavior change when both -Xlint:options and
  - Xlint:-options flags are given
    + JDK-8360179: RISC-V: Only enable BigInteger intrinsics when
    AvoidUnalignedAccess == false
    + JDK-8359218: RISC-V: Only enable CRC32 intrinsic when
    AvoidUnalignedAccess == false
    + JDK-8359059: Bump version numbers for 25.0.1</changelog>
  <changelog author="fstrba@suse.com" date="1768392000">- Do not depend on update-desktop-files (jsc#PED-14507 and
  jsc#PED-15221)</changelog>
  <changelog author="fstrba@suse.com" date="1769428800">- Update to upstream tag jdk-25.0.2+10 (January 2026 CPU)
  * CVEs
    + CVE-2026-21925, bsc#1257034
    + CVE-2026-21932, bsc#1257036
    + CVE-2026-21933, bsc#1257037
    + CVE-2026-21945, bsc#1257038
  * Changes
    + JDK-8023263: [TESTBUG] Test closed/java/awt/Focus/
    /InactiveWindowTest/InactiveFocusRace fails due to not enough
    time to initialize graphic components
    + JDK-8162380: [TEST_BUG] MouseEvent/.../
    /AltGraphModifierTest.java has only "Fail" button
    + JDK-8201778: Speed up test
    javax/net/ssl/DTLS/PacketLossRetransmission.java
    + JDK-8265429: Improve GCM encryption
    + JDK-8277444: Data race between
    JvmtiClassFileReconstituter::copy_bytecodes and class linking
    + JDK-8279005: sun/tools/jstat tests do not check for test case
    exit codes after JDK-8245129
    + JDK-8304811: vmTestbase/vm/mlvm/indy/func/jvmti/
    /stepBreakPopReturn/INDIFY_Test.java fails with
    JVMTI_ERROR_TYPE_MISMATCH
    + JDK-8305567: serviceability/tmtools/jstat/GcTest01.java
    failed  utils.JstatGcResults.assertConsistency
    + JDK-8317801: java/net/Socket/asyncClose/Race.java fails
    intermittently (aix)
    + JDK-8320836: jtreg gtest runs should limit heap size
    + JDK-8325766: Extend CertificateBuilder to create trust and
    end entity certificates programmatically
    + JDK-8333526: Restructure java/nio/channels/DatagramChannel/
    /StressNativeSignal.java to a fail fast exception handling
    policy
    + JDK-8333783: java/nio/channels/FileChannel/directio/
    /DirectIOTest.java is unstable with AV software
    + JDK-8334238: Enhance AddLShortcutTest jpackage test
    + JDK-8335986: Test javax/swing/JCheckBox/4449413/
    /bug4449413.java fails on Windows 11 x64 because RBMenuItem's
    and CBMenuItem's checkmark on the left side are not visible
    + JDK-8341496: Improve JMX connections
    + JDK-8343218: Add option to disable allocating interface and
    abstract classes in non-class metaspace
    + JDK-8343546: GHA: Cache required dependencies in master-branch
    workflow
    + JDK-8345810: Custom launchers must be linked with pthread to
    avoid dynamic linker issues
    + JDK-8346753: Test javax/swing/JMenuItem/RightLeftOrientation/
    /RightLeftOrientation.java fails on Windows Server 2025 x64
    because the icons of RBMenuItem and CBMenuItem are not visible
    in Nimbus LookAndFeel
    + JDK-8346839: [TESTBUG] "java/awt/textfield/setechochartest4/
    /setechochartest4.java" failed because the test frame
    disappears on clicking "Click Several Times" button
    + JDK-8346884: Add since checker test to jdk.editpad
    + JDK-8346952: GetGraphicsStressTest.java fails: Native
    resources unavailable
    + JDK-8347277: java/awt/Focus/ComponentLostFocusTest.java fails
    intermittently
    + JDK-8349188: LineBorder does not scale correctly
    + JDK-8350621: Code cache stops scheduling GC
    + JDK-8351487: [ubsan] jvmti.h runtime error: load of value
    which is not a valid value
    + JDK-8352016: Improve
    java/lang/RuntimeTests/RuntimeExitLogTest.java
    + JDK-8354348: Enable Extended EVEX to REX2/REX demotion for
    commutative operations with same dst and src2
    + JDK-8354415: [Ubuntu25.04] api/java_awt/GraphicsDevice/
    /indexTGF.html#SetDisplayMode -
    setDisplayMode_REFRESH_RATE_UNKNOWN fails: Height is different
    on vnc
    + JDK-8354447: Missing test for retroactive
    @SuppressWarnings("dangling-doc-comments") behavior
    + JDK-8354646: java.awt.TextField allows to identify the spaces
    in a password when double clicked at the starting and end of
    the text
    + JDK-8355478: DoubleActionESC.java fails intermittently
    + JDK-8356324: JVM crash (SIGSEGV at
    ClassListParser::resolve_indy_impl) during -Xshare:dump
    starting from 21.0.5
    + JDK-8356897: Update NSS library to 3.111
    + JDK-8357064: cds/appcds/ArchiveRelocationTest.java failed
    with missing expected output
    + JDK-8357141: Update to use jtreg 7.5.2
    + JDK-8357382: runtime/cds/appcds/aotClassLinking/
    /BulkLoaderTest.java#aot fails with Xcomp and C1
    + JDK-8357396: Refactor nmethod::make_not_entrant to use Enum
    instead of "const char*"
    + JDK-8357691: File blocked.certs contains bad content when
    boot jdk 25 is used, sun/security/lib/CheckBlockedCerts.java
    failing
    + JDK-8357694: RISC-V: Several IR verification tests fail when
    vlen=128
    + JDK-8357799: Improve instructions for
    JFileChooser/HTMLFileName.java
    + JDK-8357816: Add test from JDK-8350576
    + JDK-8357822: C2: Multiple string optimization tests are no
    longer testing string concatenation optimizations
    + JDK-8357959: (bf) ByteBuffer.allocateDirect initialization
    can result in large TTSP spikes
    + JDK-8358048: java/net/httpclient/HttpsTunnelAuthTest.java
    incorrectly calls Thread::stop
    + JDK-8358340: Support CDS heap archive with Generational
    Shenandoah
    + JDK-8358532: JFileChooser in GTK L&amp;F still displays HTML
    filename
    + JDK-8358535: Changes in ClassValue (JDK-8351996) caused a
    1-9% regression in Renaissance-PageRank
    + JDK-8358556: Assert when running with -XX:-UseLibmIntrinsic
    + JDK-8358685: [TEST] AOTLoggingTag.java failed with missing
    log message
    + JDK-8358697: TextLayout/MyanmarTextTest.java passes if no
    Myanmar font is found
    + JDK-8358723: jpackage signing issues: the main launcher
    doesn't have entitlements
    + JDK-8358748: Large page size initialization fails with assert
    "page_size must be a power of 2"
    + JDK-8358751: C2: Recursive inlining check for compiled lambda
    forms is broken
    + JDK-8358813: JPasswordField identifies spaces in password via
    delete shortcuts
    + JDK-8359061: Update and ProblemList manual test
    java/awt/Cursor/CursorDragTest/ListDragCursor.java
    + JDK-8359104: gc/TestAlwaysPreTouchBehavior.java#&lt;gcname&gt;
    fails on Linux
    + JDK-8359105: RISC-V: No need for acquire fence in safepoint
    poll during JNI calls
    + JDK-8359127: Amend java/nio/channels/DatagramChannel/
    /PromiscuousIPv6.java to use @requires for OS platform
    selection
    + JDK-8359167: Remove unused test/hotspot/jtreg/vmTestbase/nsk/
    /share/jpda/BindServer.java
    + JDK-8359207: Remove runtime/signal/TestSigusr2.java since it
    is always skipped
    + JDK-8359423: Improve error message in case of missing jsa
    shared archive
    + JDK-8359428: Test 'javax/swing/JTabbedPane/bug4499556.java'
    failed because after selecting one of L&amp;F items, the test case
    automatically failed when clicking on L&amp;F Menu button again
    + JDK-8359449: [TEST] open/test/jdk/java/io/File/SymLinks.java
    Refactor extract method for Windows specific test
    + JDK-8359477: com/sun/net/httpserver/Test12.java appears to
    have a temp file race
    + JDK-8359501: Enhance Handling of URIs
    + JDK-8359687: Use PassFailJFrame for
    java/awt/print/Dialog/DialogType.java
    + JDK-8359690: New test TestCPUTimeSampleThrottling still fails
    intermittently
    + JDK-8359735: [Ubuntu 25.10] java/lang/ProcessBuilder/
    /Basic.java, java/lang/ProcessHandle/InfoTest.java fail due to
    rust-coreutils
    + JDK-8359827: Test runtime/Thread/ThreadCountLimit.java need
    loop increasing the limit
    + JDK-8360022: ClassRefDupInConstantPoolTest.java fails when
    running in repeat
    + JDK-8360090: [TEST] RISC-V: disable some cds tests on qemu
    + JDK-8360178: TestArguments.atojulong gtest has incorrect
    format string
    + JDK-8360219: [AIX] assert(locals_base &gt;= l2) failed: bad
    placement
    + JDK-8360255: runtime/jni/checked/TestLargeUTF8Length.java
    fails with -XX:-CompactStrings
    + JDK-8360408: [TEST] Use @requires tag instead of exiting
    based on "os.name" property value for
    sun/net/www/protocol/file/FileURLTest.java
    + JDK-8360411: [TEST] open/test/jdk/java/io/File/
    /MaxPathLength.java Refactor extract method to encapsulate
    Windows specific test logic
    + JDK-8360518: Docker tests do not work when asan is configured
    + JDK-8360520: RISC-V: C1: Fix primitive array clone intrinsic
    regression after JDK-8333154
    + JDK-8360664: Null pointer dereference in src/hotspot/share/
    /prims/jvmtiTagMap.cpp in
    IterateOverHeapObjectClosure::do_object()
    + JDK-8360783: CTW: Skip deoptimization between tiers
    + JDK-8360791: [ubsan] Adjust signal handling
    + JDK-8360867: CTW: Disable inline cache verification
    + JDK-8360981: Remove use of Thread.stop in
    test/jdk/java/net/Socket/DeadlockTest.java
    + JDK-8361112: Use exact float -&gt; Float16 conversion method in
    Float16 tests
    + JDK-8361180: Disable CompiledDirectCall verification with
  - VerifyInlineCaches
    + JDK-8361198: [AIX] fix misleading error output in
    thread_cpu_time_unchecked
    + JDK-8361211: C2: Final graph reshaping generates unencodeable
    klass constants
    + JDK-8361215: Add AOT test case: verification constraint
    classes are excluded
    + JDK-8361253: CommandLineOptionTest library should report
    observed values on failure
    + JDK-8361255: CTW: Tolerate more NCDFE problems
    + JDK-8361298: SwingUtilities/bug4967768.java fails where
    character P is not underline
    + JDK-8361314: Test serviceability/jvmti/VMEvent/MyPackage/
    /VMEventRecursionTest.java FATAL ERROR in native method:
    Failed during the GetClassSignature call
    + JDK-8361367: AOT ExcludedClasses.java test failed with
    missing constant pool logs
    + JDK-8361423: Add IPSupport::printPlatformSupport to
    java/net/NetworkInterface/IPv4Only.java
    + JDK-8361449: RISC-V: Code cleanup for native call
    + JDK-8361478: GHA: Use MSYS2 from GHA runners
    + JDK-8361494: [IR Framework] Escape too much in replacement of
    placeholder
    + JDK-8361497: Scoped Values: orElse and orElseThrow do not
    access the cache
    + JDK-8361504: RISC-V: Make C1 clone intrinsic platform guard
    more specific
    + JDK-8361520: Stabilize SystemGC benchmarks
    + JDK-8361599: [PPC64] enable missing tests via jtreg requires
    + JDK-8361711: Add library name configurability to
    PKCS11Test.java
    + JDK-8361748: Enforce limits on the size of an XBM image
    + JDK-8361839: Problemlist BogusFocusableWindowState due to
    failures in the CI pipeline
    + JDK-8361868: [GCC static analyzer] complains about missing
    calloc - NULL checks in p11_util.c
    + JDK-8361871: [GCC static analyzer] complains about use of
    uninitialized value ckpObject in p11_util.c
    + JDK-8361888: [GCC static analyzer] ProcessImpl_md.c
    Java_java_lang_ProcessImpl_forkAndExec error: use of
    uninitialized value '*(ChildStuff *)p.mode
    + JDK-8361892: AArch64: Incorrect matching rule leading to
    improper oop instruction encoding
    + JDK-8361897: gc/z/TestUncommit.java fails with Uncommitted
    too slow
    + JDK-8361948: Shenandoah: region free capacity unit mismatch
    + JDK-8361950: Update to use jtreg 8
    + JDK-8361959: [GCC static analyzer] java_props_md.c  leak of
    'temp'  variable is reported
    + JDK-8362107: Update the Jan CPU26_01 release date in master
    branch after forking Oct CPU25_10
    + JDK-8362123: ClassLoader Leak via
    Executors.newSingleThreadExecutor(...)
    + JDK-8362169: Pointer passed to upcall may get wrong scope
    + JDK-8362204: test/jdk/sun/awt/font/TestDevTransform.java
    fails on Ubuntu 24.04
    + JDK-8362207: Add more test cases for possible double-rounding
    in fma
    + JDK-8362282: runtime/logging/StressAsyncUL.java failed with
    exitValue = 134
    + JDK-8362308: Enhance Bitmap operations
    + JDK-8362379: Test serviceability/HeapDump/
    /UnmountedVThreadNativeMethodAtTop.java should mark as /native
    + JDK-8362390: AIX make fails in awt_GraphicsEnv.c
    + JDK-8362482: [TESTBUG] serviceability/HeapDump/
    /UnmountedVThreadNativeMethodAtTop.java: System.gc() does not
    provide full GC
    + JDK-8362501: Update test/hotspot/jtreg/applications/jcstress/
    /README
    + JDK-8362515: RISC-V: cleanup NativeFarCall
    + JDK-8362516: Support of GCC static analyzer (-fanalyzer)
    + JDK-8362530: VM crash with -XX:+PrintTieredEvents when
    collecting AOT profiling
    + JDK-8362532: Test gc/g1/plab/* duplicate command-line options
    + JDK-8362533: Tests sun/management/jmxremote/bootstrap/*
    duplicate VM flags
    + JDK-8362581: Timeouts in
    java/nio/channels/SocketChannel/OpenLeak.java on UNIX
    + JDK-8362582: GHA: Increase bundle retention time to deal with
    infra overload better
    + JDK-8362596: RISC-V: Improve _vectorizedHashCode intrinsic
    + JDK-8362602: Add test.timeout.factor to CompileFactory to
    avoid test timeouts
    + JDK-8362632: Improve HttpServer Request handling
    + JDK-8362834: Several runtime/Thread tests should mark as
    /native
    + JDK-8362836: JFR: Broken pipe in
    jdk/jfr/event/io/TestIOTopFrame.java
    + JDK-8362838: RISC-V: Incorrect matching rule leading to
    improper oop instruction encoding
    + JDK-8362855: Test java/net/ipv6tests/TcpTest.java should
    report SkippedException when there no ia4addr  or ia6addr
    + JDK-8362889: [GCC static analyzer] leak in
    libstringPlatformChars.c
    + JDK-8362972: C2 fails with unexpected node in SuperWord
    truncation: IsFiniteF, IsFiniteD
    + JDK-8363676: [GCC static analyzer] missing return value check
    of malloc in OGLContext_SetTransform
    + JDK-8363696: Update the release version and date for OpenJDK
    25u
    + JDK-8363720: Follow up to JDK-8360411 with post review
    comments
    + JDK-8363895: Minimal build fails with slowdebug builds after
    JDK-8354887
    + JDK-8363898: RISC-V: TestRangeCheckHoistingScaledIV.java
    fails after JDK-8355293 when running without RVV
    + JDK-8363910: Avoid tuning for Power10 CPUs on Linux ppc64le
    when gcc &lt; 10 is used
    + JDK-8363928: Specifying AOTCacheOutput with a blank path
    causes the JVM to crash
    + JDK-8363965: GHA: Switch cross-compiling sysroots to Debian
    bookworm
    + JDK-8363966: GHA: Switch cross-compiling sysroots to Debian
    trixie
    + JDK-8364090: Dump JFR recording on CrashOnOutOfMemoryError
    + JDK-8364111: InstanceMirrorKlass iterators should handle CDS
    and hidden classes consistently
    + JDK-8364114: Test
    TestHugePageDecisionsAtVMStartup.java#LP_enabled fails when no
    free hugepage
    + JDK-8364120: RISC-V: unify the usage of
    MacroAssembler::instruction_size
    + JDK-8364150: RISC-V: Leftover for JDK-8343430 removing old
    trampoline call
    + JDK-8364177: JDK fails to build due to undefined symbol in
    libpng on LoongArch64
    + JDK-8364184: [REDO] AArch64: [VectorAPI] sve vector math
    operations are not supported after JDK-8353217
    + JDK-8364190: JFR: RemoteRecordingStream withers don't work
    + JDK-8364198: NMT should have a better corruption message
    + JDK-8364199: Enhance list of environment variables printed in
    hserr/hsinfo file
    + JDK-8364212: Shenandoah: Rework archived objects loading
    + JDK-8364214: Enhance polygon data support
    + JDK-8364235: Fix for JDK-8361447 breaks the alignment
    requirements for GuardedMemory
    + JDK-8364257: JFR: User-defined events and settings with a
    one-letter name cannot be configured
    + JDK-8364263: HttpClient: Improve encapsulation of ProxyServer
    + JDK-8364296: Set IntelJccErratumMitigation flag ergonomically
    + JDK-8364352: Some tests fail when using a limited number of
    pregenerated .jsa CDS archives
    + JDK-8364454: ProblemList runtime/cds/DeterministicDump.java
    on macos for JDK-8363986
    + JDK-8364503: gc/g1/TestCodeCacheUnloadDuringConcCycle.java
    fails because of race printing to stdout
    + JDK-8364514: [asan] runtime/jni/checked/
    /TestCharArrayReleasing.java heap-buffer-overflow
    + JDK-8364556: JFR:  Disable SymbolTableStatistics and
    StringTableStatistics in default.jfc
    + JDK-8364597: Replace THL A29 Limited with Tencent
    + JDK-8364611: (process) Child process SIGPIPE signal
    disposition should be default
    + JDK-8364660: ClassVerifier::ends_in_athrow() should be removed
    + JDK-8364764: java/nio/channels/vthread/BlockingChannelOps.java
    subtests timed out
    + JDK-8364786: Test java/net/vthread/HttpALot.java
    intermittently fails - 24999 handled, expected 25000
    + JDK-8364984: Many jpackage tests are failing on Linux after
    JDK-8334238
    + JDK-8364993: JFR: Disable jdk.ModuleExport in default.jfc
    + JDK-8364996: java/awt/font/FontNames/LocaleFamilyNames.java
    times out on Windows
    + JDK-8365058: Enhance CopyOnWriteArraySet
    + JDK-8365071: ARM32: JFR intrinsic jvm_commit triggers C2
    regalloc assert
    + JDK-8365086: CookieStore.getURIs() and get(URI) should return
    an immutable List
    + JDK-8365165: Zap C-heap memory at delete/free
    + JDK-8365166: ARM32: missing os::fetch_bcp_from_context
    implementation
    + JDK-8365168: Use 64-bit aligned addresses for CK_ULONG access
    in PKCS11 native key code
    + JDK-8365200: RISC-V: compiler/loopopts/superword/
    /TestGeneralizedReductions.java fails with Zvbb and vlen=128
    + JDK-8365206: RISC-V: compiler/c2/irTests/
    /TestFloat16ScalarOperations.java is failing on riscv64
    + JDK-8365240: [asan] exclude some tests when using asan
    enabled binaries
    + JDK-8365260: Problemlist 1 test due to failures in the CI
    pipeline
    + JDK-8365265: x86 short forward jump exceeds 8-bit offset in
    methodHandles_x86.cpp when using Intel APX
    + JDK-8365271: Improve Swing supports
    + JDK-8365280: Enhance JOptionPane
    + JDK-8365302: RISC-V: compiler/loopopts/superword/
    /TestAlignVector.java fails when vlen=128
    + JDK-8365307: AIX make fails after JDK-8364611
    + JDK-8365312: GCC 12 cannot compile SVE on aarch64 with
    auto-var-init pattern
    + JDK-8365389: Remove static color fields from SwingUtilities3
    and WindowsMenuItemUI
    + JDK-8365425: [macos26] javax/swing/JInternalFrame/8160248/
    /JInternalFrameDraggingTest.java fails on macOS 26
    + JDK-8365442: [asan] runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java fails
    + JDK-8365468: EagerJVMCI should only apply to the
    CompilerBroker JVMCI runtime
    + JDK-8365487: [asan] some oops (mode) related tests fail
    + JDK-8365543: UnixNativeDispatcher.init should lookup open64at
    and stat64at on AIX
    + JDK-8365571: GenShen: PLAB promotions may remain disabled for
    evacuation threads
    + JDK-8365615: Improve JMenuBar/RightLeftOrientation.java
    + JDK-8365638: JFR: Add --exact for debugging out-of-order
    events
    + JDK-8365660: test/jdk/sun/security/pkcs11/KeyAgreement/ tests
    skipped without SkipException
    + JDK-8365700: Jar --validate without any --file option leaves
    around a temporary file /tmp/tmpJar&lt;number&gt;.jar
    + JDK-8365726: Test crashed with assert in C1 thread: Possible
    safepoint reached by thread that does not allow it
    + JDK-8365772: RISC-V: correctly prereserve NaN payload when
    converting from float to float16 in vector way
    + JDK-8365790: Shutdown hook for application image does not
    work on Windows
    + JDK-8365811: test/jdk/java/net/CookieHandler/B6644726.java
    failure - "Should have 5 cookies. Got only 4, expires probably
    didn't parse correctly"
    + JDK-8365823: Revert storing abstract and interface Klasses to
    non-class metaspace
    + JDK-8365834: Mark java/net/httpclient/ManyRequests.java  as
    intermittent
    + JDK-8365841: RISC-V: Several IR verification tests fail after
    JDK-8350960 without Zvfh
    + JDK-8365844: RISC-V: TestBadFormat.java fails when running
    without RVV
    + JDK-8365863: /test/jdk/sun/security/pkcs11/Cipher tests skip
    without SkippedException
    + JDK-8365913: Support latest MSC_VER in abstract_vm_version.cpp
    + JDK-8365919: Replace currentTimeMillis with nanoTime in
    Stresser.java
    + JDK-8365926: RISC-V: Performance regression in renaissance
    (chi-square)
    + JDK-8365956: GenShen: Adaptive tenuring threshold algorithm
    may raise threshold prematurely
    + JDK-8365983: Tests should throw SkippedException when SCTP
    not supported
    + JDK-8366028: MethodType::fromMethodDescriptorString should
    not throw UnsupportedOperationException for invalid
    descriptors
    + JDK-8366029: Do not add -XX:VerifyArchivedFields by default
    to CDS tests
    + JDK-8366031: Mark com/sun/nio/sctp/SctpChannel/
    /CloseDescriptors.java as intermittent
    + JDK-8366075: Problemlist 2 tests due to failures in the CI
    pipeline
    + JDK-8366092: [GCC static analyzer] UnixOperatingSystem.c
    warning: use of uninitialized value 'systemTicks'
    + JDK-8366147: ZGC:
    ZPageAllocator::cleanup_failed_commit_single_partition may
    leak memory
    + JDK-8366159: SkippedException is treated as a pass for
    pkcs11/KeyStore, pkcs11/SecretKeyFactory and
    pkcs11/SecureRandom
    + JDK-8366208: Unexpected exception in
    sun.java2d.cmm.lcms.LCMSImageLayout
    + JDK-8366229: runtime/Thread/TooSmallStackSize.java runs with
    all collectors
    + JDK-8366250: Problemlist 3 tests due to failures in the CI
    pipeline
    + JDK-8366340: Problemlist 1 test due to failures in the CI
    pipeline
    + JDK-8366342: Key generator and key pair generator tests
    skipping, but showing as passed
    + JDK-8366359: Test should throw SkippedException when there is
    no lpstat
    + JDK-8366365: [test] test/lib-test/jdk/test/whitebox/
    /CPUInfoTest.java should be updated
    + JDK-8366434: THP not working properly with G1 after
    JDK-8345655
    + JDK-8366446: Test java/awt/geom/ConcurrentDrawPolygonTest.java
    fails intermittently
    + JDK-8366537: Test "java/util/TimeZone/
    /DefaultTimeZoneTest.java" is not updating the zone ID as
    expected
    + JDK-8366558: Gtests leave /tmp/cgroups-test* files
    + JDK-8366694: Test JdbStopInNotificationThreadTest.java timed
    out after 60 second
    + JDK-8366750: Remove test 'java/awt/Choice/
    /ChoiceMouseWheelTest/ChoiceMouseWheelTest.java' from
    problemlist
    + JDK-8366764: Deproblemlist java/awt/ScrollPane/
    /ScrollPositionTest.java
    + JDK-8366800: Problemlist 1 test due to failures in the CI
    pipeline
    + JDK-8366844: Update and automate
    MouseDraggedOriginatedByScrollBarTest.java
    + JDK-8366850: Test com/sun/jdi/
    /JdbStopInNotificationThreadTest.java failed
    + JDK-8366893: java/lang/Thread/virtual/stress/
    /GetStackTraceALotWhenPinned.java timed out on macos-aarch64
    + JDK-8366948: AOT cache creation crashes when iterating
    training data
    + JDK-8366980: TestTransparentHugePagesHeap.java fails when run
    with -UseCompressedOops
    + JDK-8367017: Remove legacy checks from WrappedToolkitTest and
    convert from bash
    + JDK-8367021: Regression in LocaleDataTest refactoring
    + JDK-8367048: RISC-V: Correct pipeline descriptions of the
    architecture
    + JDK-8367066: RISC-V: refine register selection in
    MacroAssembler:: decode_klass_not_null
    + JDK-8367098: RISC-V: sync CPU features with related JVM flags
    for dependant ones
    + JDK-8367131: Test com/sun/jdi/ThreadMemoryLeakTest.java fails
    on 32 bits
    + JDK-8367133: DTLS: fragmentation of Finished message results
    in handshake failure
    + JDK-8367137: RISC-V: Detect Zicboz block size via hwprobe
    + JDK-8367237: Thread-Safety Usage Warning for
    java.text.Collator Classes
    + JDK-8367277: Fix copyright header in
    JMXInterfaceBindingTest.java
    + JDK-8367313: CTW: Execute in AWT headless mode
    + JDK-8367333: C2: Vector math operation intrinsification
    failure
    + JDK-8367348: Enhance PassFailJFrame to support links in HTML
    + JDK-8367378: GenShen: Missing timing stats when old mark
    buffers are flushed during final update refs
    + JDK-8367384: The ICC_Profile class may throw exceptions
    during serialization
    + JDK-8367598: Switch to CRC32C for SEED calculation in
    jdk.test.lib.Utils
    + JDK-8367616: RISC-V: Auto-enable Zicboz extension for debug
    builds
    + JDK-8367689: Revert removal of several compilation-related
    vmStructs fields
    + JDK-8367692: RISC-V: Align post call nop
    + JDK-8367694: Fix jtreg test failure when Intel APX is enabled
    for KNL platforms
    + JDK-8367780: Enable UseAPX on Intel CPUs only when both APX_F
    and APX_NCI_NDD_NF cpuid features are present
    + JDK-8367782: VerifyJarEntryName.java: Fix modifyJarEntryName
    to operate on bytes and re-introduce verifySignatureEntryName
    + JDK-8367869: Test java/io/FileDescriptor/Sync.java timed out
    + JDK-8367904: Test java/net/InetAddress/ptr/Lookup.java should
    throw SkippedException
    + JDK-8367948: JFR: MethodTrace threshold setting has no effect
    + JDK-8367953: JFR sampler threads does not appear in thread
    dump
    + JDK-8367969: C2: compiler/vectorapi/TestVectorMathLib.java
    fails without UnlockDiagnosticVMOptions
    + JDK-8367988: NewFileSystemTests.readOnlyZipFileFailure fails
    when run by root user
    + JDK-8368032: Enhance Certificate Checking
    + JDK-8368071: Compilation throughput regressed 2X-8X after
    JDK-8355003
    + JDK-8368152: Shenandoah: Incorrect behavior at end of
    degenerated cycle
    + JDK-8368192: Test java/lang/ProcessBuilder/Basic.java#id0
    fails with Exception: Stack trace
    + JDK-8368366: RISC-V: AlignVector is mistakenly set to
    AvoidUnalignedAccesses
    + JDK-8368367: Test jdk/jfr/event/gc/detailed/
    /TestGCHeapMemoryUsageEvent.java fails  jdk.GCHeapMemoryUsage
    "expected 0 &gt; 0"
    + JDK-8368565: Adjust comment regarding dependency of libjvm.so
    to librt
    + JDK-8368606: Printer lookup returns empty on AIX platform due
    to uninitialized results list
    + JDK-8368668: Several vmTestbase/vm/gc/compact tests timed out
    on large memory machine
    + JDK-8368670: Deadlock in JFR on event register + class load
    + JDK-8368698: runtime/cds/appcds/aotCache/OldClassSupport.java
    assert(can_add()) failed: Cannot add TrainingData objects
    + JDK-8368732: RISC-V: Detect support for misaligned vector
    access via hwprobe
    + JDK-8368890: open/test/jdk/tools/jpackage/macosx/
    /NameWithSpaceTest.java fails randomly
    + JDK-8368893: RISC-V: crash after JDK-8352673 on fastdebug
    version
    + JDK-8368960: Adjust java UL logging in the build
    + JDK-8368982: Test sun/security/tools/jarsigner/EC.java
    completed and timed out
    + JDK-8369078: Fix faulty test conversion in
    IllegalCharsetName.java
    + JDK-8369184: SimpleTimeZone equals() Returns True for Unequal
    Instances with Different hashCode Values
    + JDK-8369190: JavaFrameAnchor on AArch64 has unnecessary
    barriers and wrong store order in MacroAssembler
    + JDK-8369226: GHA: Switch to MacOS 15
    + JDK-8369319: java/net/httpclient/CancelRequestTest.java fails
    intermittently
    + JDK-8369450: [Ubuntu 25.10] openjdk fails to build due to
    rust-coreutils date
    + JDK-8369487: Revert EA option for build promotion
    + JDK-8369506: Bytecode rewriting causes Java heap corruption
    on AArch64
    + JDK-8369560: Slowdebug build without CDS fails
    + JDK-8369563: Gtest dll_address_to_function_and_library_name
    has issues with stripped pdb files
    + JDK-8369616: JavaFrameAnchor on RISC-V has unnecessary
    barriers and wrong store order in MacroAssembler
    + JDK-8369656: Calling CompletableFuture.join() could execute
    task in common pool
    + JDK-8369657: [AIX] TOC overflow in static-launcher build when
    building slowdebug after JDK-8352064
    + JDK-8369853: jpackage signing tests fail after JDK-8358723
    + JDK-8369868: Compilation error in Win8365790Test.java with
    JDK-8358723 fix resulting in CI tier3 failure
    + JDK-8369946: Bytecode rewriting causes Java heap corruption
    on PPC
    + JDK-8369947: Bytecode rewriting causes Java heap corruption
    on RISC-V
    + JDK-8369979: Flag UsePopCountInstruction was accidentally
    disabled on PPC64
    + JDK-8370048: Shenandoah: Deprecated ShenandoahPacing option
    + JDK-8370049: [s390x] G1 barrier compareAndExchange does not
    return old value when compareExchange fails
    + JDK-8370318: AES-GCM vector intrinsic may read out of bounds
    (x86_64, AVX-512)
    + JDK-8370331: Problemlist 2 tests due to failures in the CI
    pipeline
    + JDK-8370428: Change milestone to fcs for all releases
    + JDK-8370465: Right to Left Orientation Issues with MenuItem
    Component
    + JDK-8371094: --mac-signing-key-user-name no longer works
    + JDK-8371425: Include folder names in vscode workspace virtual
    folders
    + JDK-8371697: test/jdk/java/nio/file/FileStore/Basic.java
    fails after 8360887 on linux
    + JDK-8372753: jpackage ignores --file-associations option with
    predefined app image</changelog>
  <changelog author="fstrba@suse.com" date="1773662400">- Provide the timezone-java and tzdata-java (jsc#PED-15898)</changelog>
  <changelog author="fstrba@suse.com" date="1774353600">- Migrate to the new logic of FIPS patch developed by RedHat in
  https://github.com/rh-openjdk/jdk/tree/fips-25u
- Add the sources of /nss-native-fips-key-import-export-adapter
  * This native library is an adapter for OpenJDK to use the NSS
    PKCS #11 software token (libsoftokn3.so) in FIPS mode. It
    provides support to import and export secret and private key
    material in plain. This enables Java applications to manage
    PKCS #12 key stores through the java.security.KeyStore API and
    benefit from FIPS-certified cryptography. Note: this library
    replaces the Java FIPS Key Importer Exporter in previous
    versions of this package (FIPSKeyImporter.java).
- Modified patch:
  * fips.patch
    + diff the https://github.com/rh-openjdk/jdk/tree/fips-25u
    to the release tag jdk-25.0.2-ga and adapt for SUSE
- Added patches:
  * nssadapter-Allow-overriding-of-gcc-name.patch
    + Allow specifying CC variables on system where the default
    gcc is too old for the features needed in the nssadapter
  * nssadapter-Fix-build-on-openSUSE.patch
    + make the build work well with SUSE packaging of NSS
  * 0001-Don-t-make-missing-system-crypto-policies-fatal.patch
    + prevent OpenJDK from throwing exception if an "include"d
    security config file is missing.
    + Allows the same package running on systems that don't provide
    the crypto-policies package as well as on those that provide
    it
- Add create-crypto-properties-files.bash that generates during the
  build the config files for different fips and non-fips scenarios
- Add TestSecurityProperties.java to test the loading of system
  security properties where applicable</changelog>
  <changelog author="fstrba@suse.com" date="1777204800">- Update to upstream tag jdk-25.0.3+9 (April 2026 CPU)
  * CVEs
    + CVE-2026-22007 (bsc#1262490)
    + CVE-2026-22008 (bsc#1262493)
    + CVE-2026-22013 (bsc#1262494)
    + CVE-2026-22016 (bsc#1262495)
    + CVE-2026-22018 (bsc#1262496)
    + CVE-2026-22021 (bsc#1262497)
    + CVE-2026-23865 (bsc#1259118)
    + CVE-2026-34268 (bsc#1262500)
    + CVE-2026-34282 (bsc#1262501)
  * Changes
    + JDK-7191877: TEST_BUG: java/rmi/transport/checkLeaseInfoLeak/
    /CheckLeaseLeak.java failing intermittently
    + JDK-8030957: AIX: Implement OperatingSystemMXBean
    .getSystemCpuLoad() and .getProcessCpuLoad() on AIX
    + JDK-8068378: [TEST_BUG]The java/awt/Modal/PrintDialogsTest/
    /PrintDialogsTest.java instruction need to update
    + JDK-8183336: Better cleanup for jdk/test/java/lang/module/
    /customfs/ModulesInCustomFileSystem.java
    + JDK-8212084: G1: Implement UseGCOverheadLimit
    + JDK-8244336: Restrict algorithms at JCE layer
    + JDK-8246037: Shenandoah: update man pages to mention
  - XX:+UseShenandoahGC
    + JDK-8255463: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed with
    ThreadTimeoutException
    + JDK-8256289: java/awt/Focus/AppletInitialFocusTest/
    /AppletInitialFocusTest1.java failed with "RuntimeException:
    Wrong focus owner:
    java.awt.Button[button1,41,36,56x23,label=Button1]"
    + JDK-8274082: Wrong test name in jtreg run tag for
    java/awt/print/PrinterJob/SwingUIText.java
    + JDK-8286258: [Accessibility,macOS,VoiceOver] VoiceOver reads
    the spinner value wrong and sometime partially
    + JDK-8286865: vmTestbase/vm/mlvm/meth/stress/jni/nativeAndMH/
    /Test.java fails with Out of space in CodeCache
    + JDK-8287062: com/sun/jndi/ldap/LdapPoolTimeoutTest.java
    failed due to different timeout message
    + JDK-8293484: AArch64:
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails on CPU
    with SHA512 feature support
    + JDK-8299304: Test "java/awt/print/PrinterJob/
    /PageDialogTest.java" fails on macOS 13 x64 because the Page
    Dialog blocks the Toolkit
    + JDK-8307495: Specialize atomic bitset functions for aix-ppc
    + JDK-8313770: jdk/internal/platform/docker/
    /TestSystemMetrics.java fails on Ubuntu
    + JDK-8316274: javax/swing/ButtonGroup/
    /TestButtonGroupFocusTraversal.java fails in Ubuntu 23.10 with
    Motif LAF
    + JDK-8317838: java/nio/channels/Channels/
    /SocketChannelStreams.java running into timeout (aix)
    + JDK-8318662: Refactor some jdk/java/net/httpclient/http2
    tests to JUnit
    + JDK-8320677: Printer tests use invalid '@run main/manual=yesno
    + JDK-8333857: Test sun/security/ssl/SSLSessionImpl/
    /ResumeChecksServer.java failed: Existing session was used
    + JDK-8333871: Check return values of sysinfo
    + JDK-8334928: Test sun/security/ssl/SSLSocketImpl/
    /ReuseAddr.java failed: java.net.BindException: Address
    already in use
    + JDK-8335646: Nimbus : JLabel not painted with LAF defined
    foreground color on Ubuntu 24.04
    + JDK-8336695: Update Commons BCEL to Version 6.10.0
    + JDK-8339791: Refactor MiscUndecorated/ActiveAWTWindowTest.java
    + JDK-8341039: compiler/cha/TypeProfileFinalMethod.java fails
    with assertEquals expected: 0 but was: 2
    + JDK-8342175: MemoryEaterMT fails intermittently with
    ExceptionInInitializerError
    + JDK-8342401: [TESTBUG] javax/swing/JSpinner/8223788/
    /JSpinnerButtonFocusTest.java test fails in ubuntu 22.04 on
    SBR Hosts
    + JDK-8342640: GenShen: Silently ignoring
    ShenandoahGCHeuristics considered poor user-experience
    + JDK-8342659: Test vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    failed: Class nsk.share.jdi.TestClass1 was not unloaded
    + JDK-8343316: Review and update tests using explicit provider
    names
    + JDK-8343340: Swapping checking do not work for
    MetricsMemoryTester failcount
    + JDK-8343474: [updates] Customize README.md to specifics of
    update project
    + JDK-8344073: Test runtime/cds/appcds/
    /TestParallelGCWithCDS.java#id0 failed
    + JDK-8346154: [XWayland] Some tests fail intermittently in the
    CI, but not locally
    + JDK-8346962: Test CRLReadTimeout.java fails with -Xcomp on a
    fastdebug build
    + JDK-8348014: Enhance certificate processing
    + JDK-8349192: jvmti/scenarios/contention/TC05/tc05t001 fails:
    ERROR: tc05t001.cpp, 281: (waitedThreadCpuTime -
    waitThreadCpuTime) &lt; (EXPECTED_ACCURACY * 1000000)
    + JDK-8352149: Test java/awt/Frame/MultiScreenTest.java fails:
    Window list is empty
    + JDK-8353755: Add a helper method to Util - findComponent()
    + JDK-8354244: Use random data in MinMaxRed_Long data arrays
    + JDK-8354469: Keytool exposes the password in plain text when
    command is piped using | grep
    + JDK-8354894: java/lang/Thread/virtual/Starvation.java timeout
    on server with high CPUs
    + JDK-8354937: Cleanup some sparc related coding in os_linux
    + JDK-8356548: Use ClassFile API instead of ASM to transform
    classes in tests
    + JDK-8356868: Not all cgroup parameters are made available
    + JDK-8357277: Update OpenSSL library for interop tests
    + JDK-8357380: java/lang/StringBuilder/RacingSBThreads.java
    times out with C1
    + JDK-8357390: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java Test failing on Ubuntu 24.04 Vm Hosts
    used by Oracle's internal CI system
    + JDK-8357470: src/java.base/share/classes/sun/security/util/
    /Debug.java implement the test for args.toLowerCase
    + JDK-8357570: [macOS] os::Bsd::available_memory() might return
    too low values
    + JDK-8357591: Re-enable CDS test cases for jvmci after
    JDK-8345826
    + JDK-8358058: sun/java2d/OpenGL/DrawImageBg.java Test fails
    intermittently
    + JDK-8358159: Empty mode/padding in cipher transformations
    + JDK-8358529: GenShen: Heuristics do not respond to changes in
    SoftMaxHeapSize
    + JDK-8358679: [asan] vmTestbase/nsk/jvmti tests show memory
    issues
    + JDK-8358686: CDS and AOT can cause buffer truncation warning
    even when logging is disabled
    + JDK-8358735: GenShen: block_start() may be incorrect after
    class unloading
    + JDK-8358756: [s390x] Test StartupOutput.java crash due to
    CodeCache size
    + JDK-8358801: javac produces class that does not pass verifier.
    + JDK-8359064: Expose reason for marking nmethod non-entrant to
    JVMCI client
    + JDK-8359182: Use @requires instead of SkippedException for
    MaxPath.java
    + JDK-8359388: Stricter checking for cipher transformations
    + JDK-8359418: Test "javax/swing/text/GlyphView/bug4188841.java"
    failed because the phrase of text pane does not match the
    instructions
    + JDK-8359472: JVM crashes when attaching a dynamic agent
    before JVMTI_PHASE_LIVE
    + JDK-8359707: Add classfile modification code to
    RedefineClassHelper
    + JDK-8359868: Shenandoah: Free threshold heuristic does not
    use SoftMaxHeapSize
    + JDK-8359978: Test javax/net/ssl/SSLSocket/Tls13PacketSize.java
    failed again with java.net.SocketException: An established
    connection was aborted by the software in your host machine
    + JDK-8360049: CodeInvalidationReasonTest.java fails with ZGC
    on AArch64
    + JDK-8360160: ubuntu-22-04 machine is failing client tests
    + JDK-8360169: Problem list CodeInvalidationReasonTest.java on
    linux-riscv64 until JDK-8360168 is fixed
    + JDK-8360271: String.indexOf intrinsics fail with
    +EnableX86ECoreOpts and -CompactStrings
    + JDK-8360395: sun/security/tools/keytool/i18n.java user
    country is current user location instead of the language
    + JDK-8360539: DTLS handshakes fails due to improper cookie
    validation logic
    + JDK-8360562: sun/security/tools/keytool/i18n.java add an
    ability to add comment for failures
    + JDK-8360702: runtime/Thread/AsyncExceptionTest.java timed out
    + JDK-8360882: Tests throw SkippedException when they should
    fail
    + JDK-8361067: Test ExtraButtonDrag.java requires frame.dispose
    in finally block
    + JDK-8361106: [TEST] com/sun/net/httpserver/Test9.java fails
    with java.nio.file.FileSystemException
    + JDK-8361363: ShenandoahAsserts::print_obj() does not work for
    forwarded objects and UseCompactObjectHeaders
    + JDK-8361381: GlyphLayout behavior differs on JDK 11+ compared
    to JDK 8
    + JDK-8361492: [IR Framework] Has too restrictive regex for
    load and store
    + JDK-8361521: BogusFocusableWindowState.java fails with
    StackOverflowError on Linux
    + JDK-8361530: Test javax/swing/GraphicsConfigNotifier/
    /StalePreferredSize.java timed out
    + JDK-8361613: System.console() should only be available for
    interactive terminal
    + JDK-8361894: sun/security/krb5/config/native/
    /TestDynamicStore.java ensure that the test is run with sudo
    + JDK-8362284: RISC-V: cleanup NativeMovRegMem
    + JDK-8362979: C2 fails with unexpected node in SuperWord
    truncation: CmpLTMask, RoundF
    + JDK-8363950: Incorrect jtreg header in TestLayoutVsICU.java
    + JDK-8364373: Transform Affine transformations
    + JDK-8364465: Enhance behavior of some intrinsics
    + JDK-8364580: Test compiler/vectorization/
    /TestSubwordTruncation.java fails on platforms without
    RoundF/RoundD
    + JDK-8364741: [asan] runtime/ErrorHandling/
    /PrintVMInfoAtExitTest.java fails because output differs
    slightly
    + JDK-8364756: JFR: Improve slow tests
    + JDK-8364936: Shenandoah: Switch nmethod entry barriers to
    conc_instruction_and_data_patch
    + JDK-8365065: cancelled ForkJoinPool tasks no longer throw
    CancellationException
    + JDK-8365184: sun/tools/jhsdb/
    /HeapDumpTestWithActiveProcess.java Re-enable SerialGC flag on
    debuggee process
    + JDK-8365305: The ARIA role ‘contentinfo’ is not valid for the
    element &lt;footer&gt;
    + JDK-8365398: TEST_BUG: java/rmi/transport/checkLeaseInfoLeak/
    /CheckLeaseLeak.java failing intermittently
    + JDK-8365526: Crash with null Symbol passed to
    SystemDictionary::resolve_or_null
    + JDK-8365570: C2 fails assert(false) failed: Unexpected node
    in SuperWord truncation: CastII
    + JDK-8365776: Convert JShell tests to use JUnit instead of
    TestNG
    + JDK-8365861: test/jdk/sun/security/pkcs11/Provider/ tests
    skipped without SkippedException
    + JDK-8365972: JFR: ThreadDump and ClassLoaderStatistics events
    may cause back to back rotations
    + JDK-8366082: Improve queue size computation in CPU-time
    sampler
    + JDK-8366128: jdk/jdk/nio/zipfs/TestPosix.java::testJarFile
    uses wrong file
    + JDK-8366182: Some PKCS11Tests are being skipped when they
    shouldn't
    + JDK-8366261: Provide utility methods for
    sun.security.util.Password
    + JDK-8366278: Form control element &lt;select&gt; has no associated
    label
    + JDK-8366369: Add @requires linux for GTK L&amp;F tests
    + JDK-8366486: Test jdk/jfr/event/profiling/
    /TestCPUTimeSampleMultipleRecordings.java is timing out
    + JDK-8366733: Re-examine older java.text NF, DF, and DFS
    serialization tests
    + JDK-8366747: RISC-V: Improve VerifyMethodHandles for method
    handle linkers
    + JDK-8366817: test/jdk/javax/net/ssl/TLSCommon/interop/
    /JdkProcServer.java and JdkProcClient.java should not delete
    logs
    + JDK-8366874: Test gc/arguments/TestParallelGCErgo.java fails
    with UseTransparentHugePages
    + JDK-8366878: Improve flags of
    compiler/loopopts/superword/TestAlignVectorFuzzer.java
    + JDK-8366908: Use a different class for testing JDK-8351654
    + JDK-8366938: Test runtime/handshake/HandshakeTimeoutTest.java
    crashed
    + JDK-8366951: Test runtime/logging/StressAsyncUL.java is
    timing out
    + JDK-8367135: Test compiler/loopstripmining/
    /CheckLoopStripMining.java needs internal timeouts adjusted
    + JDK-8367271: Add parsing tests to DateFormat JMH benchmark
    + JDK-8367278: Test compiler/startup/StartupOutput.java timed
    out after completion on Windows
    + JDK-8367302: New test jdk/jfr/event/profiling/
    /TestCPUTimeSampleQueueAutoSizes.java from JDK-8366082 is
    failing
    + JDK-8367371: Remove @requires vm.opt.UseLargePages from
    InternSharedString.java test
    + JDK-8367372: Test 'test/hotspot/jtreg/gc/
    /TestObjectAlignmentCardSize.java' fails on 32 bit systems
    + JDK-8367463: Improved Arena allocations
    + JDK-8367583: sun/security/util/AlgorithmConstraints/
    /InvalidCryptoDisabledAlgos.java fails after JDK-8244336
    + JDK-8367772: Refactor createUI in PassFailJFrame
    + JDK-8367784: java/awt/Focus/InitialFocusTest/
    /InitialFocusTest1.java failed with Wrong focus owner
    + JDK-8367862: debug.cpp: Do not print help message for methods
    ifdef'd out
    + JDK-8367901: Calendar.roll(hour, 24) returns wrong result
    + JDK-8367994: test/jdk/sun/security/pkcs11/Signature/ tests
    pass when they should skip
    + JDK-8368029: Several tests in httpserver/simpleserver should
    throw SkipException
    + JDK-8368182: AOT cache creation fails with class defined by
    JNI
    + JDK-8368328: CompactNumberFormat.clone does not produce
    independent instances
    + JDK-8368335: Refactor the rest of Locale TestNG based tests
    to JUnit
    + JDK-8368498: Use JUnit instead of TestNG for jdk_text tests
    + JDK-8368500: ContextClassLoader cannot be reset on threads in
    ForkJoinPool.commonPool()
    + JDK-8368551: Core dump warning may be confusing
    + JDK-8368625: com/sun/net/httpserver/
    /ServerStopTerminationTest.java fails intermittently
    + JDK-8368677: acvp test should throw SkippedException when no
    ACVP-Server available
    + JDK-8368683: [process] Increase jtreg debug output
    maxOutputSize for TreeTest
    + JDK-8368754: runtime/cds/appcds/SignedJar.java log regex is
    too strict
    + JDK-8368787: Error reporting: hs_err files should show
    instructions when referencing code in nmethods
    + JDK-8368866: compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java intermittent timed out
    + JDK-8368882: NPE during text drawing on machine with JP locale
    + JDK-8368885: NMT CommandLine tests can check for error better
    + JDK-8368892: Make JEditorPane/TestBrowserBGColor.java headless
    + JDK-8369032: Add test to ensure serialized ICC_Profile stores
    only necessary optional data
    + JDK-8369050: DecimalFormat Rounding Errors for Fractional
    Ties Near Zero
    + JDK-8369227: Virtual thread stuck in PARKED state
    + JDK-8369255: Assess and remedy any unsafe usage of the
    Semaphores used by JFR
    + JDK-8369282: Distrust TLS server certificates anchored by
    Chunghwa ePKI Root CA
    + JDK-8369335: Two  sun/java2d/OpenGL tests fail on Windows
    after JDK-8358058
    + JDK-8369505: jhsdb jstack cannot handle continuation stub
    + JDK-8369516: Delete duplicate imaging test
    + JDK-8369575: Enhance crypto algorithm support
    + JDK-8369804: TestGenerators.java fails with
    IllegalArgumentException: bound must be greater than origin
    + JDK-8369851: Remove darcy author tags from langtools tests
    + JDK-8369858: Remove darcy author tags from jdk tests
    + JDK-8369881: C2: Unexpected node in SuperWord truncation:
    ReverseBytesS, ReverseBytesUS
    + JDK-8369911: Test sun/java2d/marlin/
    /ClipShapeTest.java#CubicDoDash, #Cubic and #Poly fail
    intermittent
    + JDK-8369991: Thread blocking during JFR emergency dump must
    be in safepoint safe state
    + JDK-8370036: TestJhsdbJstackWithVirtualThread.java fails when
    run with -showversion
    + JDK-8370064: Test runtime/NMT/
    /CheckForProperDetailStackTrace.java fails on Windows when
    using stripped pdb files
    + JDK-8370197: Add missing @Override annotations in
    com.sun.beans package
    + JDK-8370201: Test serviceability/sa/
    /TestJhsdbJstackWithVirtualThread.java fails due to VM
    warnings
    + JDK-8370203: Add jcmd AOT.end_recording diagnostic command
    + JDK-8370240: [PPC64] jhsdb jstack cannot handle continuation
    stub
    + JDK-8370242: JFR: Clear event reference eagerly when using
    EventStream
    + JDK-8370244: [PPC64] Several vector tests fail on Power8
    + JDK-8370325: G1: Disallow GC for TLAB allocation
    + JDK-8370378: Some compiler tests inadvertently exclude
    particular platforms
    + JDK-8370393: Cleanup handling of ancient Windows versions
    from GetJavaProperties java_props_md
    + JDK-8370405: C2: mismatched store from MergeStores wrongly
    scalarized in allocation elimination
    + JDK-8370492: [Linux] Update cpu shares to cpu.weight mapping
    function
    + JDK-8370511: test/jdk/javax/swing/JSlider/bug4382876.java
    does not release previously pressed keys
    + JDK-8370529: Enhance Path Factories Redux
    + JDK-8370572: Cgroups hierarchical memory limit is not honored
    after JDK-8322420
    + JDK-8370579: PPC: fix inswri immediate argument order
    + JDK-8370615: Improve Kerberos credentialing
    + JDK-8370636: com/sun/jdi/TwoThreadsTest.java should wait for
    completion of all threads
    + JDK-8370646: TestLargeUTF8Length.java needs lots of memory
    + JDK-8370649: Add intermittent tag for
    gc/shenandoah/generational/TestOldGrowthTriggers.java
    + JDK-8370708: RISC-V: Add VerifyStackAtCalls
    + JDK-8370730: Test serviceability/attach/EarlyDynamicLoad/
    /EarlyDynamicLoad.java needs to be resilient about warnings
    + JDK-8370732: Use WhiteBox.getWhiteBox().fullGC() to provoking
    gc for nsk/jvmti tests
    + JDK-8370887: DelayScheduler.replace method may break the
    4-ary heap in certain scenarios
    + JDK-8370905: Update vm.defmeth tests to use virtual threads
    + JDK-8370942: test/jdk/java/security/Provider/NewInstance.java
    and /test/jdk/java/security/cert/CertStore/NoLDAP.java may
    skip without notifying
    + JDK-8370966: Create regression test for the hierarchical
    memory limit fix in JDK-8370572
    + JDK-8370986: Enhance Zip file reading
    + JDK-8370995: Enhance ZipFile usage
    + JDK-8371014: Dump JFR recording on CrashOnOutOfMemoryError is
    incorrectly implemented
    + JDK-8371103: vmTestbase/nsk/jvmti/scenarios/events/EM02/
    /em02t006/TestDescription.java failing
    + JDK-8371262: sun/security/pkcs11/Cipher/KeyWrap tests may
    silently skip
    + JDK-8371316: Adjust assertion (GC pause time cannot be
    smaller than the sum of each phase) in G1GCPhaseTimes::print
    + JDK-8371349: Update NSS library to 3.117
    + JDK-8371364: Refactor javax/swing/JFileChooser/
    /FileSizeCheck.java to use Util.findComponent()
    + JDK-8371365: Update javax/swing/JFileChooser/bug4759934.java
    to use Util.findComponent()
    + JDK-8371366: java/net/httpclient/whitebox/
    /RawChannelTestDriver.java fails intermittently in jtreg
    timeout
    + JDK-8371368: SIGSEGV in JfrVframeStream::next_vframe() on
    arm64
    + JDK-8371383: Test sun/security/tools/jarsigner/
    /DefaultOptions.java failed due to
    CertificateNotYetValidException
    + JDK-8371385: compiler/escapeAnalysis/
    /TestRematerializeObjects.java fails in case of
  - XX:-UseUnalignedAccesses
    + JDK-8371420: Still sporadic failures of
    gc/TestAlwaysPreTouchBehavior.java#&lt;gcname&gt; on Linux after
    JDK-8359104
    + JDK-8371485: ProblemList awt/Mixing/AWT_Mixing/
    /JTableInGlassPaneOverlapping.java for linux
    + JDK-8371559: Intermittent timeouts in test
    javax/net/ssl/Stapling/HttpsUrlConnClient.java
    + JDK-8371608: Jtreg test jdk/internal/vm/Continuation/Fuzz.java
    sometimes fails with (fast)debug binaries
    + JDK-8371759: Add missing @Override annotations in
    com.sun.imageio package
    + JDK-8371769: TestMemoryInvisibleParent.java fails with
    java.nio.file.AccessDeniedException
    + JDK-8371830: Enhance certificate chain validation
    + JDK-8371854: Shenandoah: Simplify WALK_FORWARD_IN_BLOCK_START
    use
    + JDK-8371864: GaloisCounterMode.implGCMCrypt0 AVX512/AVX2
    intrinsics stubs cause AES-GCM encryption failure for certain
    payload sizes
    + JDK-8371895: Lower GCTimeLimit in TestUseGCOverheadLimit.java
    + JDK-8371935: Enhance key generation
    + JDK-8371944: AOT configuration is corrupted when app closes
    System.out
    + JDK-8371948: TestStackOverflowDuringInit.java fails xss too
    small on linux-aarch64
    + JDK-8371966: RISC-V: Incorrect pointer dereference in
    TemplateInterpreterGenerator::generate_native_entry
    + JDK-8371967: Add Visual Studio 2026 to build toolchain for
    Windows
    + JDK-8371978: tools/jar/ReproducibleJar.java fails on XFS
    + JDK-8372012: java/nio/file/attribute/BasicFileAttributeView/
    /SetTimesNanos.java should check ability to create links
    + JDK-8372046: compiler/floatingpoint/
    /TestSubNodeFloatDoubleNegation.java fails IR verification
    + JDK-8372048: Performance improvement on Linux remote desktop
    + JDK-8372110: GenShen: Fix erroneous assert
    + JDK-8372120: Add missing sound keyword to MIDI tests
    + JDK-8372147: ConnectionFlowControlTest should use
    HttpResponse.connectionLabel()
    + JDK-8372321: TestBackToBackSensitive fails intermittently
    after JDK-8365972
    + JDK-8372348: Adjust some UL / JFR string deduplication output
    messages
    + JDK-8372412: Increase buffer size for ring-buffer events in
    CollectedHeap
    + JDK-8372441: JFR: Improve logging of TestBackToBackSensitive
    + JDK-8372534: Update Libpng to 1.6.51
    + JDK-8372586: Crashes on ppc64(le) after JDK-8371368
    + JDK-8372589: VM crashes on init when NonNMethodCodeHeapSize
    is set too small and UseTransparentHugePages is enabled
    + JDK-8372591: assert(!current-&gt;cont_fastpath() ||
    freeze.check_valid_fast_path()) failed
    + JDK-8372609: Bug4944439 does not enforce locale correctly
    + JDK-8372661: Add a null-safe static factory method to
    "jdk.test.lib.net.SimpleSSLContext"
    + JDK-8372704: ThreadMXBean.getThreadUserTime may return total
    time
    + JDK-8372710: Update ProcessBuilder/Basic regex
    + JDK-8372733: GHA: Bump to Ubuntu 24.04
    + JDK-8372756: Mouse additional buttons and horizontal
    scrolling are broken on XWayland GNOME &gt;= 47 after JDK-8351907
    + JDK-8372835: WorkQueue::push is missing an acquire-fence
    + JDK-8372857: Improve debuggability of
    java/rmi/server/RemoteServer/AddrInUse.java test
    + JDK-8372860: TestCodeCacheUnloadDuringConcCycle fails on ARM32
    + JDK-8372977: Unnecessary gthread-2.0 loading
    + JDK-8372988: Test runtime/Nestmates/membership/
    /TestNestHostErrorWithMultiThread.java failed: Unexpected
    interrupt
    + JDK-8373021: aarch64: MacroAssembler::arrays_equals reads out
    of bounds
    + JDK-8373101: JdkClient and JdkServer test classes ignore
    namedGroups field
    + JDK-8373106: JFR suspend/resume deadlock on macOS in pthreads
    library
    + JDK-8373290: Update FreeType to 2.14.1
    + JDK-8373429: gc/g1/TestCodeCacheUnloadDuringConcCycle fails
    on various platforms
    + JDK-8373476: (tz) Update Timezone Data to 2025c
    + JDK-8373485: JFR Crash during sampling:
    assert(jt-&gt;has_last_Java_frame()) failed: invariant
    + JDK-8373525: C2: assert(_base == Long) failed: Not a Long
    + JDK-8373537: Migrate "test/jdk/com/sun/net/httpserver/" to
    null-safe "SimpleSSLContext" methods
    + JDK-8373593: Support latest  VS2026 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8373623: Refactor Serialization tests for Records to JUnit
    + JDK-8373630: r18_tls should not be modified on Windows AArch64
    + JDK-8373632: Some sound tests failing in CI due to lack of
    sound key
    + JDK-8373704: Improve "SocketException: Protocol family
    unavailable" message
    + JDK-8373716: Refactor further java/util tests from TestNG to
    JUnit
    + JDK-8373727: New XBM images parser regression: only the first
    line of the bitmap array is parsed
    + JDK-8373793: TestDynamicStore.java '/manual' disables use of
    '/timeout'
    + JDK-8373807: test/jdk/java/net/httpclient/websocket/
    /DummyWebSocketServer.java getURI() uses "localhost"
    + JDK-8373832: Test java/lang/invoke/TestVHInvokerCaching.java
    tests nothing
    + JDK-8373869: Refactor java/net/httpclient/
    /ThrowingPushPromises*.java tests to use JUnit5
    + JDK-8373931: Test javax/sound/sampled/Clip/
    /AutoCloseTimeCheck.java timed out
    + JDK-8373946: Synth ProgressBarUI implementation confuses
    background painting with border painting
    + JDK-8373984: Check for macos 11 in CGraphicsDevice.m can be
    removed
    + JDK-8373998: RISC-V: simple optimization of ConvHF2F
    + JDK-8374056: RISC-V: Fix argument passing for the
    RiscvFlushIcache::flush
    + JDK-8374178: Missing include in systemDictionary.cpp after
    JDK-8365526
    + JDK-8374433: java/util/Locale/PreserveTagCase.java does not
    run any tests
    + JDK-8374434: Several JShell tests report JUnit discovery
    warnings
    + JDK-8374525: RISC-V: Several masked float16 vector operations
    are not supported
    + JDK-8374555: No need for visible input warning in
    s.s.u.Password when not reading from System.in
    + JDK-8374557: Enhance TLS connection handling
    + JDK-8374642: EscapeHash macro fails with GNU make 4.3 and 4.4
    + JDK-8374644: Regression in GZIPInputStream performance after
    JDK-7036144
    + JDK-8374711: Hotspot runtime/CommandLine/OptionsValidation/
    /TestOptionsWithRanges fails without printing the option name
    + JDK-8374872: Cleanup outdated SAP AG copyright header info
    + JDK-8374875: Improve perfMemory warning about 'Insufficient
    space for shared memory file'
    + JDK-8375057: Update HarfBuzz to 12.3.2
    + JDK-8375063: Update Libpng to 1.6.54
    + JDK-8375094: RISC-V: Fix client builds after JDK-8368732
    + JDK-8375231: Refactor util/ServiceLoader tests to use JUnit
    + JDK-8375232: Refactor util/StringJoiner tests to use JUnit
    + JDK-8375233: Refactor util/Vector tests to use JUnit
    + JDK-8375311: Some builds are missing debug helpers
    + JDK-8375530: PPC64: incorrect quick
    verify_method_data_pointer check causes poor performance in
    debug build
    + JDK-8375549: ConcurrentModificationException if
    jdk.crypto.disabledAlgorithms has multiple entries with known
    oid
    + JDK-8375598: VM crashes with "assert((labs(val) &amp;
    0xFFFFFFFF00000000) == 0 || dest == (address)-1) failed: must
    be 32bit offset or -1" when using too high value for
    NonNMethodCodeHeapSize
    + JDK-8375657: RISC-V: Need to check size in
    SharedRuntime::is_wide_vector
    + JDK-8375742: Test java/lang/invoke/MethodHandleProxies/
    /Driver.java does not run Unnamed.java
    + JDK-8375963: [25u] Set designator
    DEFAULT_PROMOTED_VERSION_PRE=ea in jdk25u-dev
    + JDK-8375999: com/sun/jndi/ldap/LdapPoolTimeoutTest.java fails
    sporadically on Windows
    + JDK-8376572: RISC-V: Interpreter: Load array index as signed
    int
    + JDK-8376688: Gtest
    os.attempt_reserve_memory_between_small_range_fill_hole_vm
    fails on AIX 7.3
    + JDK-8376889: Enhance JfrRecorder::on_create_vm_3() assert
    output
    + JDK-8377347: jdk/jfr/event/gc/detailed/
    /TestZAllocationStallEvent.java intermittent OOME
    + JDK-8377509: Add licenses for gcc 14.2.0
    + JDK-8377526: Update Libpng to 1.6.55
    + JDK-8377811: [25u] G1: Optional Evacuations may evacuate
    pinned objects
    + JDK-8377898: Hotspot build on AIX with unused-functions
    warning reports some unused functions
    + JDK-8377905: gcc.md included with every build
    + JDK-8378113: Add sun/java2d/OpenGL/ScaleParamsOOB.java to the
    ProblemList.txt file
    + JDK-8378218: MSYS2 reports cygwin triplet causing bash
    configure failure
    + JDK-8378353: [PPC64] StringCoding.countPositives causes
    errors when the length is not a proper 32 bit int
    + JDK-8378623: Use unique font names in FormatCharAdvanceTest
    + JDK-8378631: Update Zlib Data Compression Library to Version
    1.3.2
    + JDK-8378823: AIX build fails after zlib updated by JDK-8378631
    + JDK-8378853: [25u] Make backport of JDK-8244336 comply with
    differences in CSR
    + JDK-8379035: (tz) Update Timezone Data to 2026a
    + JDK-8379158: Update FreeType to 2.14.2
    + JDK-8379256: Update GIFlib to 6.1.1
    + JDK-8380078: Update GIFlib to 6.1.2
    + JDK-8380959: Update Libpng to 1.6.56
    + JDK-8382047: Update Libpng to 1.6.57
    + JDK-8382438: [25u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 25.0.3</changelog>
</package>
<package pkgid="dce5dfeef27641182bd7b724cbdb9e266c53d6478237f608754239385735c530" name="java-25-openjdk" arch="x86_64">
  <version epoch="0" ver="25.0.3.0" rel="150700.15.10.1"/>
  <changelog author="fstrba@suse.com" date="1757505600">- Initial packaging of OpenJDK 25
  * JEPs included:
    + 470: PEM Encodings of Cryptographic Objects (Preview)
    + 502: Stable Values (Preview)
    + 503: Remove the 32-bit x86 Port
    + 505: Structured Concurrency (Fifth Preview)
    + 506: Scoped Values
    + 507: Primitive Types in Patterns, instanceof, and switch
    (Third Preview)
    + 508: Vector API (Tenth Incubator)
    + 509: JFR CPU-Time Profiling (Experimental)
    + 510: Key Derivation Function API
    + 511: Module Import Declarations
    + 512: Compact Source Files and Instance Main Methods
    + 513: Flexible Constructor Bodies
    + 514: Ahead-of-Time Command-Line Ergonomics
    + 515: Ahead-of-Time Method Profiling
    + 518: JFR Cooperative Sampling
    + 519: Compact Object Headers
    + 520: JFR Method Timing &amp; Tracing
    + 521: Generational Shenandoah</changelog>
  <changelog author="fstrba@suse.com" date="1758196800">- Added patch:
  * fips.patch
    + forward port the FIPS support from OpenJDK 21</changelog>
  <changelog author="fstrba@suse.com" date="1761134400">- Update to upstream tag jdk-25.0.1+8 (October 2025 CPU)
  * Security fixes:
    + JDK-8360937, CVE-2025-53057, bsc#1252414: Enhance certificate
    handling
    + JDK-8356294, CVE-2025-53066, bsc#1252417: Enhance Path
    Factories
    + JDK-8359454, CVE-2025-61748, bsc#1252418: Enhance String
    handling
    + JDK-8352637: Enhance bytecode verification
  * Other fixes:
    + JDK-8367031: [backout] Change java.time month/day field types
    to 'byte'
    + JDK-8368308: ISO 4217 Amendment 180 Update
    + JDK-8366223: ZGC:
    ZPageAllocator::cleanup_failed_commit_multi_partition is
    broken
    + JDK-8360647: [XWayland] [OL10] NumPad keys are not triggered
    + JDK-8361212: Remove AffirmTrust root CAs
    + JDK-8356587: Missing object ID X in pool jdk.types.Method
    + JDK-8360679: Shenandoah: AOT saved adapter calls into broken
    GC barrier stub
    + JDK-8362882: Update SubmissionPublisher() specification to
    reflect use of ForkJoinPool.asyncCommonPool()
    + JDK-8315131: Clarify VarHandle set/get access on 32-bit
    platforms
    + JDK-8362109: Change milestone to fcs for all releases
    + JDK-8358819: The first year is not displayed correctly in
    Japanese Calendar
    + JDK-8361829: [TESTBUG] RISC-V: compiler/vectorization/runner/
    /BasicIntOpTest.java fails with RVV but not Zvbb
    + JDK-8361532: RISC-V: Several vector tests fail after
    JDK-8354383
    + JDK-8357826: Avoid running some jtreg tests when asan is
    configured
    + JDK-8358577: Test serviceability/jvmti/thread/
    /GetCurrentContendedMonitor/contmon01/contmon01.java failed:
    unexpexcted monitor object
    + JDK-8360533: ContainerRuntimeVersionTestUtils
    fromVersionString fails with some docker versions
    + JDK-8358452: JNI exception pending in
    Java_sun_awt_screencast_ScreencastHelper_remoteDesktopKeyImpl
    of screencast_pipewire.c:1214 (ID: 51119)
    + JDK-8359270: C2: alignment check should consider base offset
    when emitting arraycopy runtime call
    + JDK-8359596: Behavior change when both -Xlint:options and
  - Xlint:-options flags are given
    + JDK-8360179: RISC-V: Only enable BigInteger intrinsics when
    AvoidUnalignedAccess == false
    + JDK-8359218: RISC-V: Only enable CRC32 intrinsic when
    AvoidUnalignedAccess == false
    + JDK-8359059: Bump version numbers for 25.0.1</changelog>
  <changelog author="fstrba@suse.com" date="1768392000">- Do not depend on update-desktop-files (jsc#PED-14507 and
  jsc#PED-15221)</changelog>
  <changelog author="fstrba@suse.com" date="1769428800">- Update to upstream tag jdk-25.0.2+10 (January 2026 CPU)
  * CVEs
    + CVE-2026-21925, bsc#1257034
    + CVE-2026-21932, bsc#1257036
    + CVE-2026-21933, bsc#1257037
    + CVE-2026-21945, bsc#1257038
  * Changes
    + JDK-8023263: [TESTBUG] Test closed/java/awt/Focus/
    /InactiveWindowTest/InactiveFocusRace fails due to not enough
    time to initialize graphic components
    + JDK-8162380: [TEST_BUG] MouseEvent/.../
    /AltGraphModifierTest.java has only "Fail" button
    + JDK-8201778: Speed up test
    javax/net/ssl/DTLS/PacketLossRetransmission.java
    + JDK-8265429: Improve GCM encryption
    + JDK-8277444: Data race between
    JvmtiClassFileReconstituter::copy_bytecodes and class linking
    + JDK-8279005: sun/tools/jstat tests do not check for test case
    exit codes after JDK-8245129
    + JDK-8304811: vmTestbase/vm/mlvm/indy/func/jvmti/
    /stepBreakPopReturn/INDIFY_Test.java fails with
    JVMTI_ERROR_TYPE_MISMATCH
    + JDK-8305567: serviceability/tmtools/jstat/GcTest01.java
    failed  utils.JstatGcResults.assertConsistency
    + JDK-8317801: java/net/Socket/asyncClose/Race.java fails
    intermittently (aix)
    + JDK-8320836: jtreg gtest runs should limit heap size
    + JDK-8325766: Extend CertificateBuilder to create trust and
    end entity certificates programmatically
    + JDK-8333526: Restructure java/nio/channels/DatagramChannel/
    /StressNativeSignal.java to a fail fast exception handling
    policy
    + JDK-8333783: java/nio/channels/FileChannel/directio/
    /DirectIOTest.java is unstable with AV software
    + JDK-8334238: Enhance AddLShortcutTest jpackage test
    + JDK-8335986: Test javax/swing/JCheckBox/4449413/
    /bug4449413.java fails on Windows 11 x64 because RBMenuItem's
    and CBMenuItem's checkmark on the left side are not visible
    + JDK-8341496: Improve JMX connections
    + JDK-8343218: Add option to disable allocating interface and
    abstract classes in non-class metaspace
    + JDK-8343546: GHA: Cache required dependencies in master-branch
    workflow
    + JDK-8345810: Custom launchers must be linked with pthread to
    avoid dynamic linker issues
    + JDK-8346753: Test javax/swing/JMenuItem/RightLeftOrientation/
    /RightLeftOrientation.java fails on Windows Server 2025 x64
    because the icons of RBMenuItem and CBMenuItem are not visible
    in Nimbus LookAndFeel
    + JDK-8346839: [TESTBUG] "java/awt/textfield/setechochartest4/
    /setechochartest4.java" failed because the test frame
    disappears on clicking "Click Several Times" button
    + JDK-8346884: Add since checker test to jdk.editpad
    + JDK-8346952: GetGraphicsStressTest.java fails: Native
    resources unavailable
    + JDK-8347277: java/awt/Focus/ComponentLostFocusTest.java fails
    intermittently
    + JDK-8349188: LineBorder does not scale correctly
    + JDK-8350621: Code cache stops scheduling GC
    + JDK-8351487: [ubsan] jvmti.h runtime error: load of value
    which is not a valid value
    + JDK-8352016: Improve
    java/lang/RuntimeTests/RuntimeExitLogTest.java
    + JDK-8354348: Enable Extended EVEX to REX2/REX demotion for
    commutative operations with same dst and src2
    + JDK-8354415: [Ubuntu25.04] api/java_awt/GraphicsDevice/
    /indexTGF.html#SetDisplayMode -
    setDisplayMode_REFRESH_RATE_UNKNOWN fails: Height is different
    on vnc
    + JDK-8354447: Missing test for retroactive
    @SuppressWarnings("dangling-doc-comments") behavior
    + JDK-8354646: java.awt.TextField allows to identify the spaces
    in a password when double clicked at the starting and end of
    the text
    + JDK-8355478: DoubleActionESC.java fails intermittently
    + JDK-8356324: JVM crash (SIGSEGV at
    ClassListParser::resolve_indy_impl) during -Xshare:dump
    starting from 21.0.5
    + JDK-8356897: Update NSS library to 3.111
    + JDK-8357064: cds/appcds/ArchiveRelocationTest.java failed
    with missing expected output
    + JDK-8357141: Update to use jtreg 7.5.2
    + JDK-8357382: runtime/cds/appcds/aotClassLinking/
    /BulkLoaderTest.java#aot fails with Xcomp and C1
    + JDK-8357396: Refactor nmethod::make_not_entrant to use Enum
    instead of "const char*"
    + JDK-8357691: File blocked.certs contains bad content when
    boot jdk 25 is used, sun/security/lib/CheckBlockedCerts.java
    failing
    + JDK-8357694: RISC-V: Several IR verification tests fail when
    vlen=128
    + JDK-8357799: Improve instructions for
    JFileChooser/HTMLFileName.java
    + JDK-8357816: Add test from JDK-8350576
    + JDK-8357822: C2: Multiple string optimization tests are no
    longer testing string concatenation optimizations
    + JDK-8357959: (bf) ByteBuffer.allocateDirect initialization
    can result in large TTSP spikes
    + JDK-8358048: java/net/httpclient/HttpsTunnelAuthTest.java
    incorrectly calls Thread::stop
    + JDK-8358340: Support CDS heap archive with Generational
    Shenandoah
    + JDK-8358532: JFileChooser in GTK L&amp;F still displays HTML
    filename
    + JDK-8358535: Changes in ClassValue (JDK-8351996) caused a
    1-9% regression in Renaissance-PageRank
    + JDK-8358556: Assert when running with -XX:-UseLibmIntrinsic
    + JDK-8358685: [TEST] AOTLoggingTag.java failed with missing
    log message
    + JDK-8358697: TextLayout/MyanmarTextTest.java passes if no
    Myanmar font is found
    + JDK-8358723: jpackage signing issues: the main launcher
    doesn't have entitlements
    + JDK-8358748: Large page size initialization fails with assert
    "page_size must be a power of 2"
    + JDK-8358751: C2: Recursive inlining check for compiled lambda
    forms is broken
    + JDK-8358813: JPasswordField identifies spaces in password via
    delete shortcuts
    + JDK-8359061: Update and ProblemList manual test
    java/awt/Cursor/CursorDragTest/ListDragCursor.java
    + JDK-8359104: gc/TestAlwaysPreTouchBehavior.java#&lt;gcname&gt;
    fails on Linux
    + JDK-8359105: RISC-V: No need for acquire fence in safepoint
    poll during JNI calls
    + JDK-8359127: Amend java/nio/channels/DatagramChannel/
    /PromiscuousIPv6.java to use @requires for OS platform
    selection
    + JDK-8359167: Remove unused test/hotspot/jtreg/vmTestbase/nsk/
    /share/jpda/BindServer.java
    + JDK-8359207: Remove runtime/signal/TestSigusr2.java since it
    is always skipped
    + JDK-8359423: Improve error message in case of missing jsa
    shared archive
    + JDK-8359428: Test 'javax/swing/JTabbedPane/bug4499556.java'
    failed because after selecting one of L&amp;F items, the test case
    automatically failed when clicking on L&amp;F Menu button again
    + JDK-8359449: [TEST] open/test/jdk/java/io/File/SymLinks.java
    Refactor extract method for Windows specific test
    + JDK-8359477: com/sun/net/httpserver/Test12.java appears to
    have a temp file race
    + JDK-8359501: Enhance Handling of URIs
    + JDK-8359687: Use PassFailJFrame for
    java/awt/print/Dialog/DialogType.java
    + JDK-8359690: New test TestCPUTimeSampleThrottling still fails
    intermittently
    + JDK-8359735: [Ubuntu 25.10] java/lang/ProcessBuilder/
    /Basic.java, java/lang/ProcessHandle/InfoTest.java fail due to
    rust-coreutils
    + JDK-8359827: Test runtime/Thread/ThreadCountLimit.java need
    loop increasing the limit
    + JDK-8360022: ClassRefDupInConstantPoolTest.java fails when
    running in repeat
    + JDK-8360090: [TEST] RISC-V: disable some cds tests on qemu
    + JDK-8360178: TestArguments.atojulong gtest has incorrect
    format string
    + JDK-8360219: [AIX] assert(locals_base &gt;= l2) failed: bad
    placement
    + JDK-8360255: runtime/jni/checked/TestLargeUTF8Length.java
    fails with -XX:-CompactStrings
    + JDK-8360408: [TEST] Use @requires tag instead of exiting
    based on "os.name" property value for
    sun/net/www/protocol/file/FileURLTest.java
    + JDK-8360411: [TEST] open/test/jdk/java/io/File/
    /MaxPathLength.java Refactor extract method to encapsulate
    Windows specific test logic
    + JDK-8360518: Docker tests do not work when asan is configured
    + JDK-8360520: RISC-V: C1: Fix primitive array clone intrinsic
    regression after JDK-8333154
    + JDK-8360664: Null pointer dereference in src/hotspot/share/
    /prims/jvmtiTagMap.cpp in
    IterateOverHeapObjectClosure::do_object()
    + JDK-8360783: CTW: Skip deoptimization between tiers
    + JDK-8360791: [ubsan] Adjust signal handling
    + JDK-8360867: CTW: Disable inline cache verification
    + JDK-8360981: Remove use of Thread.stop in
    test/jdk/java/net/Socket/DeadlockTest.java
    + JDK-8361112: Use exact float -&gt; Float16 conversion method in
    Float16 tests
    + JDK-8361180: Disable CompiledDirectCall verification with
  - VerifyInlineCaches
    + JDK-8361198: [AIX] fix misleading error output in
    thread_cpu_time_unchecked
    + JDK-8361211: C2: Final graph reshaping generates unencodeable
    klass constants
    + JDK-8361215: Add AOT test case: verification constraint
    classes are excluded
    + JDK-8361253: CommandLineOptionTest library should report
    observed values on failure
    + JDK-8361255: CTW: Tolerate more NCDFE problems
    + JDK-8361298: SwingUtilities/bug4967768.java fails where
    character P is not underline
    + JDK-8361314: Test serviceability/jvmti/VMEvent/MyPackage/
    /VMEventRecursionTest.java FATAL ERROR in native method:
    Failed during the GetClassSignature call
    + JDK-8361367: AOT ExcludedClasses.java test failed with
    missing constant pool logs
    + JDK-8361423: Add IPSupport::printPlatformSupport to
    java/net/NetworkInterface/IPv4Only.java
    + JDK-8361449: RISC-V: Code cleanup for native call
    + JDK-8361478: GHA: Use MSYS2 from GHA runners
    + JDK-8361494: [IR Framework] Escape too much in replacement of
    placeholder
    + JDK-8361497: Scoped Values: orElse and orElseThrow do not
    access the cache
    + JDK-8361504: RISC-V: Make C1 clone intrinsic platform guard
    more specific
    + JDK-8361520: Stabilize SystemGC benchmarks
    + JDK-8361599: [PPC64] enable missing tests via jtreg requires
    + JDK-8361711: Add library name configurability to
    PKCS11Test.java
    + JDK-8361748: Enforce limits on the size of an XBM image
    + JDK-8361839: Problemlist BogusFocusableWindowState due to
    failures in the CI pipeline
    + JDK-8361868: [GCC static analyzer] complains about missing
    calloc - NULL checks in p11_util.c
    + JDK-8361871: [GCC static analyzer] complains about use of
    uninitialized value ckpObject in p11_util.c
    + JDK-8361888: [GCC static analyzer] ProcessImpl_md.c
    Java_java_lang_ProcessImpl_forkAndExec error: use of
    uninitialized value '*(ChildStuff *)p.mode
    + JDK-8361892: AArch64: Incorrect matching rule leading to
    improper oop instruction encoding
    + JDK-8361897: gc/z/TestUncommit.java fails with Uncommitted
    too slow
    + JDK-8361948: Shenandoah: region free capacity unit mismatch
    + JDK-8361950: Update to use jtreg 8
    + JDK-8361959: [GCC static analyzer] java_props_md.c  leak of
    'temp'  variable is reported
    + JDK-8362107: Update the Jan CPU26_01 release date in master
    branch after forking Oct CPU25_10
    + JDK-8362123: ClassLoader Leak via
    Executors.newSingleThreadExecutor(...)
    + JDK-8362169: Pointer passed to upcall may get wrong scope
    + JDK-8362204: test/jdk/sun/awt/font/TestDevTransform.java
    fails on Ubuntu 24.04
    + JDK-8362207: Add more test cases for possible double-rounding
    in fma
    + JDK-8362282: runtime/logging/StressAsyncUL.java failed with
    exitValue = 134
    + JDK-8362308: Enhance Bitmap operations
    + JDK-8362379: Test serviceability/HeapDump/
    /UnmountedVThreadNativeMethodAtTop.java should mark as /native
    + JDK-8362390: AIX make fails in awt_GraphicsEnv.c
    + JDK-8362482: [TESTBUG] serviceability/HeapDump/
    /UnmountedVThreadNativeMethodAtTop.java: System.gc() does not
    provide full GC
    + JDK-8362501: Update test/hotspot/jtreg/applications/jcstress/
    /README
    + JDK-8362515: RISC-V: cleanup NativeFarCall
    + JDK-8362516: Support of GCC static analyzer (-fanalyzer)
    + JDK-8362530: VM crash with -XX:+PrintTieredEvents when
    collecting AOT profiling
    + JDK-8362532: Test gc/g1/plab/* duplicate command-line options
    + JDK-8362533: Tests sun/management/jmxremote/bootstrap/*
    duplicate VM flags
    + JDK-8362581: Timeouts in
    java/nio/channels/SocketChannel/OpenLeak.java on UNIX
    + JDK-8362582: GHA: Increase bundle retention time to deal with
    infra overload better
    + JDK-8362596: RISC-V: Improve _vectorizedHashCode intrinsic
    + JDK-8362602: Add test.timeout.factor to CompileFactory to
    avoid test timeouts
    + JDK-8362632: Improve HttpServer Request handling
    + JDK-8362834: Several runtime/Thread tests should mark as
    /native
    + JDK-8362836: JFR: Broken pipe in
    jdk/jfr/event/io/TestIOTopFrame.java
    + JDK-8362838: RISC-V: Incorrect matching rule leading to
    improper oop instruction encoding
    + JDK-8362855: Test java/net/ipv6tests/TcpTest.java should
    report SkippedException when there no ia4addr  or ia6addr
    + JDK-8362889: [GCC static analyzer] leak in
    libstringPlatformChars.c
    + JDK-8362972: C2 fails with unexpected node in SuperWord
    truncation: IsFiniteF, IsFiniteD
    + JDK-8363676: [GCC static analyzer] missing return value check
    of malloc in OGLContext_SetTransform
    + JDK-8363696: Update the release version and date for OpenJDK
    25u
    + JDK-8363720: Follow up to JDK-8360411 with post review
    comments
    + JDK-8363895: Minimal build fails with slowdebug builds after
    JDK-8354887
    + JDK-8363898: RISC-V: TestRangeCheckHoistingScaledIV.java
    fails after JDK-8355293 when running without RVV
    + JDK-8363910: Avoid tuning for Power10 CPUs on Linux ppc64le
    when gcc &lt; 10 is used
    + JDK-8363928: Specifying AOTCacheOutput with a blank path
    causes the JVM to crash
    + JDK-8363965: GHA: Switch cross-compiling sysroots to Debian
    bookworm
    + JDK-8363966: GHA: Switch cross-compiling sysroots to Debian
    trixie
    + JDK-8364090: Dump JFR recording on CrashOnOutOfMemoryError
    + JDK-8364111: InstanceMirrorKlass iterators should handle CDS
    and hidden classes consistently
    + JDK-8364114: Test
    TestHugePageDecisionsAtVMStartup.java#LP_enabled fails when no
    free hugepage
    + JDK-8364120: RISC-V: unify the usage of
    MacroAssembler::instruction_size
    + JDK-8364150: RISC-V: Leftover for JDK-8343430 removing old
    trampoline call
    + JDK-8364177: JDK fails to build due to undefined symbol in
    libpng on LoongArch64
    + JDK-8364184: [REDO] AArch64: [VectorAPI] sve vector math
    operations are not supported after JDK-8353217
    + JDK-8364190: JFR: RemoteRecordingStream withers don't work
    + JDK-8364198: NMT should have a better corruption message
    + JDK-8364199: Enhance list of environment variables printed in
    hserr/hsinfo file
    + JDK-8364212: Shenandoah: Rework archived objects loading
    + JDK-8364214: Enhance polygon data support
    + JDK-8364235: Fix for JDK-8361447 breaks the alignment
    requirements for GuardedMemory
    + JDK-8364257: JFR: User-defined events and settings with a
    one-letter name cannot be configured
    + JDK-8364263: HttpClient: Improve encapsulation of ProxyServer
    + JDK-8364296: Set IntelJccErratumMitigation flag ergonomically
    + JDK-8364352: Some tests fail when using a limited number of
    pregenerated .jsa CDS archives
    + JDK-8364454: ProblemList runtime/cds/DeterministicDump.java
    on macos for JDK-8363986
    + JDK-8364503: gc/g1/TestCodeCacheUnloadDuringConcCycle.java
    fails because of race printing to stdout
    + JDK-8364514: [asan] runtime/jni/checked/
    /TestCharArrayReleasing.java heap-buffer-overflow
    + JDK-8364556: JFR:  Disable SymbolTableStatistics and
    StringTableStatistics in default.jfc
    + JDK-8364597: Replace THL A29 Limited with Tencent
    + JDK-8364611: (process) Child process SIGPIPE signal
    disposition should be default
    + JDK-8364660: ClassVerifier::ends_in_athrow() should be removed
    + JDK-8364764: java/nio/channels/vthread/BlockingChannelOps.java
    subtests timed out
    + JDK-8364786: Test java/net/vthread/HttpALot.java
    intermittently fails - 24999 handled, expected 25000
    + JDK-8364984: Many jpackage tests are failing on Linux after
    JDK-8334238
    + JDK-8364993: JFR: Disable jdk.ModuleExport in default.jfc
    + JDK-8364996: java/awt/font/FontNames/LocaleFamilyNames.java
    times out on Windows
    + JDK-8365058: Enhance CopyOnWriteArraySet
    + JDK-8365071: ARM32: JFR intrinsic jvm_commit triggers C2
    regalloc assert
    + JDK-8365086: CookieStore.getURIs() and get(URI) should return
    an immutable List
    + JDK-8365165: Zap C-heap memory at delete/free
    + JDK-8365166: ARM32: missing os::fetch_bcp_from_context
    implementation
    + JDK-8365168: Use 64-bit aligned addresses for CK_ULONG access
    in PKCS11 native key code
    + JDK-8365200: RISC-V: compiler/loopopts/superword/
    /TestGeneralizedReductions.java fails with Zvbb and vlen=128
    + JDK-8365206: RISC-V: compiler/c2/irTests/
    /TestFloat16ScalarOperations.java is failing on riscv64
    + JDK-8365240: [asan] exclude some tests when using asan
    enabled binaries
    + JDK-8365260: Problemlist 1 test due to failures in the CI
    pipeline
    + JDK-8365265: x86 short forward jump exceeds 8-bit offset in
    methodHandles_x86.cpp when using Intel APX
    + JDK-8365271: Improve Swing supports
    + JDK-8365280: Enhance JOptionPane
    + JDK-8365302: RISC-V: compiler/loopopts/superword/
    /TestAlignVector.java fails when vlen=128
    + JDK-8365307: AIX make fails after JDK-8364611
    + JDK-8365312: GCC 12 cannot compile SVE on aarch64 with
    auto-var-init pattern
    + JDK-8365389: Remove static color fields from SwingUtilities3
    and WindowsMenuItemUI
    + JDK-8365425: [macos26] javax/swing/JInternalFrame/8160248/
    /JInternalFrameDraggingTest.java fails on macOS 26
    + JDK-8365442: [asan] runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java fails
    + JDK-8365468: EagerJVMCI should only apply to the
    CompilerBroker JVMCI runtime
    + JDK-8365487: [asan] some oops (mode) related tests fail
    + JDK-8365543: UnixNativeDispatcher.init should lookup open64at
    and stat64at on AIX
    + JDK-8365571: GenShen: PLAB promotions may remain disabled for
    evacuation threads
    + JDK-8365615: Improve JMenuBar/RightLeftOrientation.java
    + JDK-8365638: JFR: Add --exact for debugging out-of-order
    events
    + JDK-8365660: test/jdk/sun/security/pkcs11/KeyAgreement/ tests
    skipped without SkipException
    + JDK-8365700: Jar --validate without any --file option leaves
    around a temporary file /tmp/tmpJar&lt;number&gt;.jar
    + JDK-8365726: Test crashed with assert in C1 thread: Possible
    safepoint reached by thread that does not allow it
    + JDK-8365772: RISC-V: correctly prereserve NaN payload when
    converting from float to float16 in vector way
    + JDK-8365790: Shutdown hook for application image does not
    work on Windows
    + JDK-8365811: test/jdk/java/net/CookieHandler/B6644726.java
    failure - "Should have 5 cookies. Got only 4, expires probably
    didn't parse correctly"
    + JDK-8365823: Revert storing abstract and interface Klasses to
    non-class metaspace
    + JDK-8365834: Mark java/net/httpclient/ManyRequests.java  as
    intermittent
    + JDK-8365841: RISC-V: Several IR verification tests fail after
    JDK-8350960 without Zvfh
    + JDK-8365844: RISC-V: TestBadFormat.java fails when running
    without RVV
    + JDK-8365863: /test/jdk/sun/security/pkcs11/Cipher tests skip
    without SkippedException
    + JDK-8365913: Support latest MSC_VER in abstract_vm_version.cpp
    + JDK-8365919: Replace currentTimeMillis with nanoTime in
    Stresser.java
    + JDK-8365926: RISC-V: Performance regression in renaissance
    (chi-square)
    + JDK-8365956: GenShen: Adaptive tenuring threshold algorithm
    may raise threshold prematurely
    + JDK-8365983: Tests should throw SkippedException when SCTP
    not supported
    + JDK-8366028: MethodType::fromMethodDescriptorString should
    not throw UnsupportedOperationException for invalid
    descriptors
    + JDK-8366029: Do not add -XX:VerifyArchivedFields by default
    to CDS tests
    + JDK-8366031: Mark com/sun/nio/sctp/SctpChannel/
    /CloseDescriptors.java as intermittent
    + JDK-8366075: Problemlist 2 tests due to failures in the CI
    pipeline
    + JDK-8366092: [GCC static analyzer] UnixOperatingSystem.c
    warning: use of uninitialized value 'systemTicks'
    + JDK-8366147: ZGC:
    ZPageAllocator::cleanup_failed_commit_single_partition may
    leak memory
    + JDK-8366159: SkippedException is treated as a pass for
    pkcs11/KeyStore, pkcs11/SecretKeyFactory and
    pkcs11/SecureRandom
    + JDK-8366208: Unexpected exception in
    sun.java2d.cmm.lcms.LCMSImageLayout
    + JDK-8366229: runtime/Thread/TooSmallStackSize.java runs with
    all collectors
    + JDK-8366250: Problemlist 3 tests due to failures in the CI
    pipeline
    + JDK-8366340: Problemlist 1 test due to failures in the CI
    pipeline
    + JDK-8366342: Key generator and key pair generator tests
    skipping, but showing as passed
    + JDK-8366359: Test should throw SkippedException when there is
    no lpstat
    + JDK-8366365: [test] test/lib-test/jdk/test/whitebox/
    /CPUInfoTest.java should be updated
    + JDK-8366434: THP not working properly with G1 after
    JDK-8345655
    + JDK-8366446: Test java/awt/geom/ConcurrentDrawPolygonTest.java
    fails intermittently
    + JDK-8366537: Test "java/util/TimeZone/
    /DefaultTimeZoneTest.java" is not updating the zone ID as
    expected
    + JDK-8366558: Gtests leave /tmp/cgroups-test* files
    + JDK-8366694: Test JdbStopInNotificationThreadTest.java timed
    out after 60 second
    + JDK-8366750: Remove test 'java/awt/Choice/
    /ChoiceMouseWheelTest/ChoiceMouseWheelTest.java' from
    problemlist
    + JDK-8366764: Deproblemlist java/awt/ScrollPane/
    /ScrollPositionTest.java
    + JDK-8366800: Problemlist 1 test due to failures in the CI
    pipeline
    + JDK-8366844: Update and automate
    MouseDraggedOriginatedByScrollBarTest.java
    + JDK-8366850: Test com/sun/jdi/
    /JdbStopInNotificationThreadTest.java failed
    + JDK-8366893: java/lang/Thread/virtual/stress/
    /GetStackTraceALotWhenPinned.java timed out on macos-aarch64
    + JDK-8366948: AOT cache creation crashes when iterating
    training data
    + JDK-8366980: TestTransparentHugePagesHeap.java fails when run
    with -UseCompressedOops
    + JDK-8367017: Remove legacy checks from WrappedToolkitTest and
    convert from bash
    + JDK-8367021: Regression in LocaleDataTest refactoring
    + JDK-8367048: RISC-V: Correct pipeline descriptions of the
    architecture
    + JDK-8367066: RISC-V: refine register selection in
    MacroAssembler:: decode_klass_not_null
    + JDK-8367098: RISC-V: sync CPU features with related JVM flags
    for dependant ones
    + JDK-8367131: Test com/sun/jdi/ThreadMemoryLeakTest.java fails
    on 32 bits
    + JDK-8367133: DTLS: fragmentation of Finished message results
    in handshake failure
    + JDK-8367137: RISC-V: Detect Zicboz block size via hwprobe
    + JDK-8367237: Thread-Safety Usage Warning for
    java.text.Collator Classes
    + JDK-8367277: Fix copyright header in
    JMXInterfaceBindingTest.java
    + JDK-8367313: CTW: Execute in AWT headless mode
    + JDK-8367333: C2: Vector math operation intrinsification
    failure
    + JDK-8367348: Enhance PassFailJFrame to support links in HTML
    + JDK-8367378: GenShen: Missing timing stats when old mark
    buffers are flushed during final update refs
    + JDK-8367384: The ICC_Profile class may throw exceptions
    during serialization
    + JDK-8367598: Switch to CRC32C for SEED calculation in
    jdk.test.lib.Utils
    + JDK-8367616: RISC-V: Auto-enable Zicboz extension for debug
    builds
    + JDK-8367689: Revert removal of several compilation-related
    vmStructs fields
    + JDK-8367692: RISC-V: Align post call nop
    + JDK-8367694: Fix jtreg test failure when Intel APX is enabled
    for KNL platforms
    + JDK-8367780: Enable UseAPX on Intel CPUs only when both APX_F
    and APX_NCI_NDD_NF cpuid features are present
    + JDK-8367782: VerifyJarEntryName.java: Fix modifyJarEntryName
    to operate on bytes and re-introduce verifySignatureEntryName
    + JDK-8367869: Test java/io/FileDescriptor/Sync.java timed out
    + JDK-8367904: Test java/net/InetAddress/ptr/Lookup.java should
    throw SkippedException
    + JDK-8367948: JFR: MethodTrace threshold setting has no effect
    + JDK-8367953: JFR sampler threads does not appear in thread
    dump
    + JDK-8367969: C2: compiler/vectorapi/TestVectorMathLib.java
    fails without UnlockDiagnosticVMOptions
    + JDK-8367988: NewFileSystemTests.readOnlyZipFileFailure fails
    when run by root user
    + JDK-8368032: Enhance Certificate Checking
    + JDK-8368071: Compilation throughput regressed 2X-8X after
    JDK-8355003
    + JDK-8368152: Shenandoah: Incorrect behavior at end of
    degenerated cycle
    + JDK-8368192: Test java/lang/ProcessBuilder/Basic.java#id0
    fails with Exception: Stack trace
    + JDK-8368366: RISC-V: AlignVector is mistakenly set to
    AvoidUnalignedAccesses
    + JDK-8368367: Test jdk/jfr/event/gc/detailed/
    /TestGCHeapMemoryUsageEvent.java fails  jdk.GCHeapMemoryUsage
    "expected 0 &gt; 0"
    + JDK-8368565: Adjust comment regarding dependency of libjvm.so
    to librt
    + JDK-8368606: Printer lookup returns empty on AIX platform due
    to uninitialized results list
    + JDK-8368668: Several vmTestbase/vm/gc/compact tests timed out
    on large memory machine
    + JDK-8368670: Deadlock in JFR on event register + class load
    + JDK-8368698: runtime/cds/appcds/aotCache/OldClassSupport.java
    assert(can_add()) failed: Cannot add TrainingData objects
    + JDK-8368732: RISC-V: Detect support for misaligned vector
    access via hwprobe
    + JDK-8368890: open/test/jdk/tools/jpackage/macosx/
    /NameWithSpaceTest.java fails randomly
    + JDK-8368893: RISC-V: crash after JDK-8352673 on fastdebug
    version
    + JDK-8368960: Adjust java UL logging in the build
    + JDK-8368982: Test sun/security/tools/jarsigner/EC.java
    completed and timed out
    + JDK-8369078: Fix faulty test conversion in
    IllegalCharsetName.java
    + JDK-8369184: SimpleTimeZone equals() Returns True for Unequal
    Instances with Different hashCode Values
    + JDK-8369190: JavaFrameAnchor on AArch64 has unnecessary
    barriers and wrong store order in MacroAssembler
    + JDK-8369226: GHA: Switch to MacOS 15
    + JDK-8369319: java/net/httpclient/CancelRequestTest.java fails
    intermittently
    + JDK-8369450: [Ubuntu 25.10] openjdk fails to build due to
    rust-coreutils date
    + JDK-8369487: Revert EA option for build promotion
    + JDK-8369506: Bytecode rewriting causes Java heap corruption
    on AArch64
    + JDK-8369560: Slowdebug build without CDS fails
    + JDK-8369563: Gtest dll_address_to_function_and_library_name
    has issues with stripped pdb files
    + JDK-8369616: JavaFrameAnchor on RISC-V has unnecessary
    barriers and wrong store order in MacroAssembler
    + JDK-8369656: Calling CompletableFuture.join() could execute
    task in common pool
    + JDK-8369657: [AIX] TOC overflow in static-launcher build when
    building slowdebug after JDK-8352064
    + JDK-8369853: jpackage signing tests fail after JDK-8358723
    + JDK-8369868: Compilation error in Win8365790Test.java with
    JDK-8358723 fix resulting in CI tier3 failure
    + JDK-8369946: Bytecode rewriting causes Java heap corruption
    on PPC
    + JDK-8369947: Bytecode rewriting causes Java heap corruption
    on RISC-V
    + JDK-8369979: Flag UsePopCountInstruction was accidentally
    disabled on PPC64
    + JDK-8370048: Shenandoah: Deprecated ShenandoahPacing option
    + JDK-8370049: [s390x] G1 barrier compareAndExchange does not
    return old value when compareExchange fails
    + JDK-8370318: AES-GCM vector intrinsic may read out of bounds
    (x86_64, AVX-512)
    + JDK-8370331: Problemlist 2 tests due to failures in the CI
    pipeline
    + JDK-8370428: Change milestone to fcs for all releases
    + JDK-8370465: Right to Left Orientation Issues with MenuItem
    Component
    + JDK-8371094: --mac-signing-key-user-name no longer works
    + JDK-8371425: Include folder names in vscode workspace virtual
    folders
    + JDK-8371697: test/jdk/java/nio/file/FileStore/Basic.java
    fails after 8360887 on linux
    + JDK-8372753: jpackage ignores --file-associations option with
    predefined app image</changelog>
  <changelog author="fstrba@suse.com" date="1773662400">- Provide the timezone-java and tzdata-java (jsc#PED-15898)</changelog>
  <changelog author="fstrba@suse.com" date="1774353600">- Migrate to the new logic of FIPS patch developed by RedHat in
  https://github.com/rh-openjdk/jdk/tree/fips-25u
- Add the sources of /nss-native-fips-key-import-export-adapter
  * This native library is an adapter for OpenJDK to use the NSS
    PKCS #11 software token (libsoftokn3.so) in FIPS mode. It
    provides support to import and export secret and private key
    material in plain. This enables Java applications to manage
    PKCS #12 key stores through the java.security.KeyStore API and
    benefit from FIPS-certified cryptography. Note: this library
    replaces the Java FIPS Key Importer Exporter in previous
    versions of this package (FIPSKeyImporter.java).
- Modified patch:
  * fips.patch
    + diff the https://github.com/rh-openjdk/jdk/tree/fips-25u
    to the release tag jdk-25.0.2-ga and adapt for SUSE
- Added patches:
  * nssadapter-Allow-overriding-of-gcc-name.patch
    + Allow specifying CC variables on system where the default
    gcc is too old for the features needed in the nssadapter
  * nssadapter-Fix-build-on-openSUSE.patch
    + make the build work well with SUSE packaging of NSS
  * 0001-Don-t-make-missing-system-crypto-policies-fatal.patch
    + prevent OpenJDK from throwing exception if an "include"d
    security config file is missing.
    + Allows the same package running on systems that don't provide
    the crypto-policies package as well as on those that provide
    it
- Add create-crypto-properties-files.bash that generates during the
  build the config files for different fips and non-fips scenarios
- Add TestSecurityProperties.java to test the loading of system
  security properties where applicable</changelog>
  <changelog author="fstrba@suse.com" date="1777204800">- Update to upstream tag jdk-25.0.3+9 (April 2026 CPU)
  * CVEs
    + CVE-2026-22007 (bsc#1262490)
    + CVE-2026-22008 (bsc#1262493)
    + CVE-2026-22013 (bsc#1262494)
    + CVE-2026-22016 (bsc#1262495)
    + CVE-2026-22018 (bsc#1262496)
    + CVE-2026-22021 (bsc#1262497)
    + CVE-2026-23865 (bsc#1259118)
    + CVE-2026-34268 (bsc#1262500)
    + CVE-2026-34282 (bsc#1262501)
  * Changes
    + JDK-7191877: TEST_BUG: java/rmi/transport/checkLeaseInfoLeak/
    /CheckLeaseLeak.java failing intermittently
    + JDK-8030957: AIX: Implement OperatingSystemMXBean
    .getSystemCpuLoad() and .getProcessCpuLoad() on AIX
    + JDK-8068378: [TEST_BUG]The java/awt/Modal/PrintDialogsTest/
    /PrintDialogsTest.java instruction need to update
    + JDK-8183336: Better cleanup for jdk/test/java/lang/module/
    /customfs/ModulesInCustomFileSystem.java
    + JDK-8212084: G1: Implement UseGCOverheadLimit
    + JDK-8244336: Restrict algorithms at JCE layer
    + JDK-8246037: Shenandoah: update man pages to mention
  - XX:+UseShenandoahGC
    + JDK-8255463: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed with
    ThreadTimeoutException
    + JDK-8256289: java/awt/Focus/AppletInitialFocusTest/
    /AppletInitialFocusTest1.java failed with "RuntimeException:
    Wrong focus owner:
    java.awt.Button[button1,41,36,56x23,label=Button1]"
    + JDK-8274082: Wrong test name in jtreg run tag for
    java/awt/print/PrinterJob/SwingUIText.java
    + JDK-8286258: [Accessibility,macOS,VoiceOver] VoiceOver reads
    the spinner value wrong and sometime partially
    + JDK-8286865: vmTestbase/vm/mlvm/meth/stress/jni/nativeAndMH/
    /Test.java fails with Out of space in CodeCache
    + JDK-8287062: com/sun/jndi/ldap/LdapPoolTimeoutTest.java
    failed due to different timeout message
    + JDK-8293484: AArch64:
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails on CPU
    with SHA512 feature support
    + JDK-8299304: Test "java/awt/print/PrinterJob/
    /PageDialogTest.java" fails on macOS 13 x64 because the Page
    Dialog blocks the Toolkit
    + JDK-8307495: Specialize atomic bitset functions for aix-ppc
    + JDK-8313770: jdk/internal/platform/docker/
    /TestSystemMetrics.java fails on Ubuntu
    + JDK-8316274: javax/swing/ButtonGroup/
    /TestButtonGroupFocusTraversal.java fails in Ubuntu 23.10 with
    Motif LAF
    + JDK-8317838: java/nio/channels/Channels/
    /SocketChannelStreams.java running into timeout (aix)
    + JDK-8318662: Refactor some jdk/java/net/httpclient/http2
    tests to JUnit
    + JDK-8320677: Printer tests use invalid '@run main/manual=yesno
    + JDK-8333857: Test sun/security/ssl/SSLSessionImpl/
    /ResumeChecksServer.java failed: Existing session was used
    + JDK-8333871: Check return values of sysinfo
    + JDK-8334928: Test sun/security/ssl/SSLSocketImpl/
    /ReuseAddr.java failed: java.net.BindException: Address
    already in use
    + JDK-8335646: Nimbus : JLabel not painted with LAF defined
    foreground color on Ubuntu 24.04
    + JDK-8336695: Update Commons BCEL to Version 6.10.0
    + JDK-8339791: Refactor MiscUndecorated/ActiveAWTWindowTest.java
    + JDK-8341039: compiler/cha/TypeProfileFinalMethod.java fails
    with assertEquals expected: 0 but was: 2
    + JDK-8342175: MemoryEaterMT fails intermittently with
    ExceptionInInitializerError
    + JDK-8342401: [TESTBUG] javax/swing/JSpinner/8223788/
    /JSpinnerButtonFocusTest.java test fails in ubuntu 22.04 on
    SBR Hosts
    + JDK-8342640: GenShen: Silently ignoring
    ShenandoahGCHeuristics considered poor user-experience
    + JDK-8342659: Test vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    failed: Class nsk.share.jdi.TestClass1 was not unloaded
    + JDK-8343316: Review and update tests using explicit provider
    names
    + JDK-8343340: Swapping checking do not work for
    MetricsMemoryTester failcount
    + JDK-8343474: [updates] Customize README.md to specifics of
    update project
    + JDK-8344073: Test runtime/cds/appcds/
    /TestParallelGCWithCDS.java#id0 failed
    + JDK-8346154: [XWayland] Some tests fail intermittently in the
    CI, but not locally
    + JDK-8346962: Test CRLReadTimeout.java fails with -Xcomp on a
    fastdebug build
    + JDK-8348014: Enhance certificate processing
    + JDK-8349192: jvmti/scenarios/contention/TC05/tc05t001 fails:
    ERROR: tc05t001.cpp, 281: (waitedThreadCpuTime -
    waitThreadCpuTime) &lt; (EXPECTED_ACCURACY * 1000000)
    + JDK-8352149: Test java/awt/Frame/MultiScreenTest.java fails:
    Window list is empty
    + JDK-8353755: Add a helper method to Util - findComponent()
    + JDK-8354244: Use random data in MinMaxRed_Long data arrays
    + JDK-8354469: Keytool exposes the password in plain text when
    command is piped using | grep
    + JDK-8354894: java/lang/Thread/virtual/Starvation.java timeout
    on server with high CPUs
    + JDK-8354937: Cleanup some sparc related coding in os_linux
    + JDK-8356548: Use ClassFile API instead of ASM to transform
    classes in tests
    + JDK-8356868: Not all cgroup parameters are made available
    + JDK-8357277: Update OpenSSL library for interop tests
    + JDK-8357380: java/lang/StringBuilder/RacingSBThreads.java
    times out with C1
    + JDK-8357390: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java Test failing on Ubuntu 24.04 Vm Hosts
    used by Oracle's internal CI system
    + JDK-8357470: src/java.base/share/classes/sun/security/util/
    /Debug.java implement the test for args.toLowerCase
    + JDK-8357570: [macOS] os::Bsd::available_memory() might return
    too low values
    + JDK-8357591: Re-enable CDS test cases for jvmci after
    JDK-8345826
    + JDK-8358058: sun/java2d/OpenGL/DrawImageBg.java Test fails
    intermittently
    + JDK-8358159: Empty mode/padding in cipher transformations
    + JDK-8358529: GenShen: Heuristics do not respond to changes in
    SoftMaxHeapSize
    + JDK-8358679: [asan] vmTestbase/nsk/jvmti tests show memory
    issues
    + JDK-8358686: CDS and AOT can cause buffer truncation warning
    even when logging is disabled
    + JDK-8358735: GenShen: block_start() may be incorrect after
    class unloading
    + JDK-8358756: [s390x] Test StartupOutput.java crash due to
    CodeCache size
    + JDK-8358801: javac produces class that does not pass verifier.
    + JDK-8359064: Expose reason for marking nmethod non-entrant to
    JVMCI client
    + JDK-8359182: Use @requires instead of SkippedException for
    MaxPath.java
    + JDK-8359388: Stricter checking for cipher transformations
    + JDK-8359418: Test "javax/swing/text/GlyphView/bug4188841.java"
    failed because the phrase of text pane does not match the
    instructions
    + JDK-8359472: JVM crashes when attaching a dynamic agent
    before JVMTI_PHASE_LIVE
    + JDK-8359707: Add classfile modification code to
    RedefineClassHelper
    + JDK-8359868: Shenandoah: Free threshold heuristic does not
    use SoftMaxHeapSize
    + JDK-8359978: Test javax/net/ssl/SSLSocket/Tls13PacketSize.java
    failed again with java.net.SocketException: An established
    connection was aborted by the software in your host machine
    + JDK-8360049: CodeInvalidationReasonTest.java fails with ZGC
    on AArch64
    + JDK-8360160: ubuntu-22-04 machine is failing client tests
    + JDK-8360169: Problem list CodeInvalidationReasonTest.java on
    linux-riscv64 until JDK-8360168 is fixed
    + JDK-8360271: String.indexOf intrinsics fail with
    +EnableX86ECoreOpts and -CompactStrings
    + JDK-8360395: sun/security/tools/keytool/i18n.java user
    country is current user location instead of the language
    + JDK-8360539: DTLS handshakes fails due to improper cookie
    validation logic
    + JDK-8360562: sun/security/tools/keytool/i18n.java add an
    ability to add comment for failures
    + JDK-8360702: runtime/Thread/AsyncExceptionTest.java timed out
    + JDK-8360882: Tests throw SkippedException when they should
    fail
    + JDK-8361067: Test ExtraButtonDrag.java requires frame.dispose
    in finally block
    + JDK-8361106: [TEST] com/sun/net/httpserver/Test9.java fails
    with java.nio.file.FileSystemException
    + JDK-8361363: ShenandoahAsserts::print_obj() does not work for
    forwarded objects and UseCompactObjectHeaders
    + JDK-8361381: GlyphLayout behavior differs on JDK 11+ compared
    to JDK 8
    + JDK-8361492: [IR Framework] Has too restrictive regex for
    load and store
    + JDK-8361521: BogusFocusableWindowState.java fails with
    StackOverflowError on Linux
    + JDK-8361530: Test javax/swing/GraphicsConfigNotifier/
    /StalePreferredSize.java timed out
    + JDK-8361613: System.console() should only be available for
    interactive terminal
    + JDK-8361894: sun/security/krb5/config/native/
    /TestDynamicStore.java ensure that the test is run with sudo
    + JDK-8362284: RISC-V: cleanup NativeMovRegMem
    + JDK-8362979: C2 fails with unexpected node in SuperWord
    truncation: CmpLTMask, RoundF
    + JDK-8363950: Incorrect jtreg header in TestLayoutVsICU.java
    + JDK-8364373: Transform Affine transformations
    + JDK-8364465: Enhance behavior of some intrinsics
    + JDK-8364580: Test compiler/vectorization/
    /TestSubwordTruncation.java fails on platforms without
    RoundF/RoundD
    + JDK-8364741: [asan] runtime/ErrorHandling/
    /PrintVMInfoAtExitTest.java fails because output differs
    slightly
    + JDK-8364756: JFR: Improve slow tests
    + JDK-8364936: Shenandoah: Switch nmethod entry barriers to
    conc_instruction_and_data_patch
    + JDK-8365065: cancelled ForkJoinPool tasks no longer throw
    CancellationException
    + JDK-8365184: sun/tools/jhsdb/
    /HeapDumpTestWithActiveProcess.java Re-enable SerialGC flag on
    debuggee process
    + JDK-8365305: The ARIA role ‘contentinfo’ is not valid for the
    element &lt;footer&gt;
    + JDK-8365398: TEST_BUG: java/rmi/transport/checkLeaseInfoLeak/
    /CheckLeaseLeak.java failing intermittently
    + JDK-8365526: Crash with null Symbol passed to
    SystemDictionary::resolve_or_null
    + JDK-8365570: C2 fails assert(false) failed: Unexpected node
    in SuperWord truncation: CastII
    + JDK-8365776: Convert JShell tests to use JUnit instead of
    TestNG
    + JDK-8365861: test/jdk/sun/security/pkcs11/Provider/ tests
    skipped without SkippedException
    + JDK-8365972: JFR: ThreadDump and ClassLoaderStatistics events
    may cause back to back rotations
    + JDK-8366082: Improve queue size computation in CPU-time
    sampler
    + JDK-8366128: jdk/jdk/nio/zipfs/TestPosix.java::testJarFile
    uses wrong file
    + JDK-8366182: Some PKCS11Tests are being skipped when they
    shouldn't
    + JDK-8366261: Provide utility methods for
    sun.security.util.Password
    + JDK-8366278: Form control element &lt;select&gt; has no associated
    label
    + JDK-8366369: Add @requires linux for GTK L&amp;F tests
    + JDK-8366486: Test jdk/jfr/event/profiling/
    /TestCPUTimeSampleMultipleRecordings.java is timing out
    + JDK-8366733: Re-examine older java.text NF, DF, and DFS
    serialization tests
    + JDK-8366747: RISC-V: Improve VerifyMethodHandles for method
    handle linkers
    + JDK-8366817: test/jdk/javax/net/ssl/TLSCommon/interop/
    /JdkProcServer.java and JdkProcClient.java should not delete
    logs
    + JDK-8366874: Test gc/arguments/TestParallelGCErgo.java fails
    with UseTransparentHugePages
    + JDK-8366878: Improve flags of
    compiler/loopopts/superword/TestAlignVectorFuzzer.java
    + JDK-8366908: Use a different class for testing JDK-8351654
    + JDK-8366938: Test runtime/handshake/HandshakeTimeoutTest.java
    crashed
    + JDK-8366951: Test runtime/logging/StressAsyncUL.java is
    timing out
    + JDK-8367135: Test compiler/loopstripmining/
    /CheckLoopStripMining.java needs internal timeouts adjusted
    + JDK-8367271: Add parsing tests to DateFormat JMH benchmark
    + JDK-8367278: Test compiler/startup/StartupOutput.java timed
    out after completion on Windows
    + JDK-8367302: New test jdk/jfr/event/profiling/
    /TestCPUTimeSampleQueueAutoSizes.java from JDK-8366082 is
    failing
    + JDK-8367371: Remove @requires vm.opt.UseLargePages from
    InternSharedString.java test
    + JDK-8367372: Test 'test/hotspot/jtreg/gc/
    /TestObjectAlignmentCardSize.java' fails on 32 bit systems
    + JDK-8367463: Improved Arena allocations
    + JDK-8367583: sun/security/util/AlgorithmConstraints/
    /InvalidCryptoDisabledAlgos.java fails after JDK-8244336
    + JDK-8367772: Refactor createUI in PassFailJFrame
    + JDK-8367784: java/awt/Focus/InitialFocusTest/
    /InitialFocusTest1.java failed with Wrong focus owner
    + JDK-8367862: debug.cpp: Do not print help message for methods
    ifdef'd out
    + JDK-8367901: Calendar.roll(hour, 24) returns wrong result
    + JDK-8367994: test/jdk/sun/security/pkcs11/Signature/ tests
    pass when they should skip
    + JDK-8368029: Several tests in httpserver/simpleserver should
    throw SkipException
    + JDK-8368182: AOT cache creation fails with class defined by
    JNI
    + JDK-8368328: CompactNumberFormat.clone does not produce
    independent instances
    + JDK-8368335: Refactor the rest of Locale TestNG based tests
    to JUnit
    + JDK-8368498: Use JUnit instead of TestNG for jdk_text tests
    + JDK-8368500: ContextClassLoader cannot be reset on threads in
    ForkJoinPool.commonPool()
    + JDK-8368551: Core dump warning may be confusing
    + JDK-8368625: com/sun/net/httpserver/
    /ServerStopTerminationTest.java fails intermittently
    + JDK-8368677: acvp test should throw SkippedException when no
    ACVP-Server available
    + JDK-8368683: [process] Increase jtreg debug output
    maxOutputSize for TreeTest
    + JDK-8368754: runtime/cds/appcds/SignedJar.java log regex is
    too strict
    + JDK-8368787: Error reporting: hs_err files should show
    instructions when referencing code in nmethods
    + JDK-8368866: compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java intermittent timed out
    + JDK-8368882: NPE during text drawing on machine with JP locale
    + JDK-8368885: NMT CommandLine tests can check for error better
    + JDK-8368892: Make JEditorPane/TestBrowserBGColor.java headless
    + JDK-8369032: Add test to ensure serialized ICC_Profile stores
    only necessary optional data
    + JDK-8369050: DecimalFormat Rounding Errors for Fractional
    Ties Near Zero
    + JDK-8369227: Virtual thread stuck in PARKED state
    + JDK-8369255: Assess and remedy any unsafe usage of the
    Semaphores used by JFR
    + JDK-8369282: Distrust TLS server certificates anchored by
    Chunghwa ePKI Root CA
    + JDK-8369335: Two  sun/java2d/OpenGL tests fail on Windows
    after JDK-8358058
    + JDK-8369505: jhsdb jstack cannot handle continuation stub
    + JDK-8369516: Delete duplicate imaging test
    + JDK-8369575: Enhance crypto algorithm support
    + JDK-8369804: TestGenerators.java fails with
    IllegalArgumentException: bound must be greater than origin
    + JDK-8369851: Remove darcy author tags from langtools tests
    + JDK-8369858: Remove darcy author tags from jdk tests
    + JDK-8369881: C2: Unexpected node in SuperWord truncation:
    ReverseBytesS, ReverseBytesUS
    + JDK-8369911: Test sun/java2d/marlin/
    /ClipShapeTest.java#CubicDoDash, #Cubic and #Poly fail
    intermittent
    + JDK-8369991: Thread blocking during JFR emergency dump must
    be in safepoint safe state
    + JDK-8370036: TestJhsdbJstackWithVirtualThread.java fails when
    run with -showversion
    + JDK-8370064: Test runtime/NMT/
    /CheckForProperDetailStackTrace.java fails on Windows when
    using stripped pdb files
    + JDK-8370197: Add missing @Override annotations in
    com.sun.beans package
    + JDK-8370201: Test serviceability/sa/
    /TestJhsdbJstackWithVirtualThread.java fails due to VM
    warnings
    + JDK-8370203: Add jcmd AOT.end_recording diagnostic command
    + JDK-8370240: [PPC64] jhsdb jstack cannot handle continuation
    stub
    + JDK-8370242: JFR: Clear event reference eagerly when using
    EventStream
    + JDK-8370244: [PPC64] Several vector tests fail on Power8
    + JDK-8370325: G1: Disallow GC for TLAB allocation
    + JDK-8370378: Some compiler tests inadvertently exclude
    particular platforms
    + JDK-8370393: Cleanup handling of ancient Windows versions
    from GetJavaProperties java_props_md
    + JDK-8370405: C2: mismatched store from MergeStores wrongly
    scalarized in allocation elimination
    + JDK-8370492: [Linux] Update cpu shares to cpu.weight mapping
    function
    + JDK-8370511: test/jdk/javax/swing/JSlider/bug4382876.java
    does not release previously pressed keys
    + JDK-8370529: Enhance Path Factories Redux
    + JDK-8370572: Cgroups hierarchical memory limit is not honored
    after JDK-8322420
    + JDK-8370579: PPC: fix inswri immediate argument order
    + JDK-8370615: Improve Kerberos credentialing
    + JDK-8370636: com/sun/jdi/TwoThreadsTest.java should wait for
    completion of all threads
    + JDK-8370646: TestLargeUTF8Length.java needs lots of memory
    + JDK-8370649: Add intermittent tag for
    gc/shenandoah/generational/TestOldGrowthTriggers.java
    + JDK-8370708: RISC-V: Add VerifyStackAtCalls
    + JDK-8370730: Test serviceability/attach/EarlyDynamicLoad/
    /EarlyDynamicLoad.java needs to be resilient about warnings
    + JDK-8370732: Use WhiteBox.getWhiteBox().fullGC() to provoking
    gc for nsk/jvmti tests
    + JDK-8370887: DelayScheduler.replace method may break the
    4-ary heap in certain scenarios
    + JDK-8370905: Update vm.defmeth tests to use virtual threads
    + JDK-8370942: test/jdk/java/security/Provider/NewInstance.java
    and /test/jdk/java/security/cert/CertStore/NoLDAP.java may
    skip without notifying
    + JDK-8370966: Create regression test for the hierarchical
    memory limit fix in JDK-8370572
    + JDK-8370986: Enhance Zip file reading
    + JDK-8370995: Enhance ZipFile usage
    + JDK-8371014: Dump JFR recording on CrashOnOutOfMemoryError is
    incorrectly implemented
    + JDK-8371103: vmTestbase/nsk/jvmti/scenarios/events/EM02/
    /em02t006/TestDescription.java failing
    + JDK-8371262: sun/security/pkcs11/Cipher/KeyWrap tests may
    silently skip
    + JDK-8371316: Adjust assertion (GC pause time cannot be
    smaller than the sum of each phase) in G1GCPhaseTimes::print
    + JDK-8371349: Update NSS library to 3.117
    + JDK-8371364: Refactor javax/swing/JFileChooser/
    /FileSizeCheck.java to use Util.findComponent()
    + JDK-8371365: Update javax/swing/JFileChooser/bug4759934.java
    to use Util.findComponent()
    + JDK-8371366: java/net/httpclient/whitebox/
    /RawChannelTestDriver.java fails intermittently in jtreg
    timeout
    + JDK-8371368: SIGSEGV in JfrVframeStream::next_vframe() on
    arm64
    + JDK-8371383: Test sun/security/tools/jarsigner/
    /DefaultOptions.java failed due to
    CertificateNotYetValidException
    + JDK-8371385: compiler/escapeAnalysis/
    /TestRematerializeObjects.java fails in case of
  - XX:-UseUnalignedAccesses
    + JDK-8371420: Still sporadic failures of
    gc/TestAlwaysPreTouchBehavior.java#&lt;gcname&gt; on Linux after
    JDK-8359104
    + JDK-8371485: ProblemList awt/Mixing/AWT_Mixing/
    /JTableInGlassPaneOverlapping.java for linux
    + JDK-8371559: Intermittent timeouts in test
    javax/net/ssl/Stapling/HttpsUrlConnClient.java
    + JDK-8371608: Jtreg test jdk/internal/vm/Continuation/Fuzz.java
    sometimes fails with (fast)debug binaries
    + JDK-8371759: Add missing @Override annotations in
    com.sun.imageio package
    + JDK-8371769: TestMemoryInvisibleParent.java fails with
    java.nio.file.AccessDeniedException
    + JDK-8371830: Enhance certificate chain validation
    + JDK-8371854: Shenandoah: Simplify WALK_FORWARD_IN_BLOCK_START
    use
    + JDK-8371864: GaloisCounterMode.implGCMCrypt0 AVX512/AVX2
    intrinsics stubs cause AES-GCM encryption failure for certain
    payload sizes
    + JDK-8371895: Lower GCTimeLimit in TestUseGCOverheadLimit.java
    + JDK-8371935: Enhance key generation
    + JDK-8371944: AOT configuration is corrupted when app closes
    System.out
    + JDK-8371948: TestStackOverflowDuringInit.java fails xss too
    small on linux-aarch64
    + JDK-8371966: RISC-V: Incorrect pointer dereference in
    TemplateInterpreterGenerator::generate_native_entry
    + JDK-8371967: Add Visual Studio 2026 to build toolchain for
    Windows
    + JDK-8371978: tools/jar/ReproducibleJar.java fails on XFS
    + JDK-8372012: java/nio/file/attribute/BasicFileAttributeView/
    /SetTimesNanos.java should check ability to create links
    + JDK-8372046: compiler/floatingpoint/
    /TestSubNodeFloatDoubleNegation.java fails IR verification
    + JDK-8372048: Performance improvement on Linux remote desktop
    + JDK-8372110: GenShen: Fix erroneous assert
    + JDK-8372120: Add missing sound keyword to MIDI tests
    + JDK-8372147: ConnectionFlowControlTest should use
    HttpResponse.connectionLabel()
    + JDK-8372321: TestBackToBackSensitive fails intermittently
    after JDK-8365972
    + JDK-8372348: Adjust some UL / JFR string deduplication output
    messages
    + JDK-8372412: Increase buffer size for ring-buffer events in
    CollectedHeap
    + JDK-8372441: JFR: Improve logging of TestBackToBackSensitive
    + JDK-8372534: Update Libpng to 1.6.51
    + JDK-8372586: Crashes on ppc64(le) after JDK-8371368
    + JDK-8372589: VM crashes on init when NonNMethodCodeHeapSize
    is set too small and UseTransparentHugePages is enabled
    + JDK-8372591: assert(!current-&gt;cont_fastpath() ||
    freeze.check_valid_fast_path()) failed
    + JDK-8372609: Bug4944439 does not enforce locale correctly
    + JDK-8372661: Add a null-safe static factory method to
    "jdk.test.lib.net.SimpleSSLContext"
    + JDK-8372704: ThreadMXBean.getThreadUserTime may return total
    time
    + JDK-8372710: Update ProcessBuilder/Basic regex
    + JDK-8372733: GHA: Bump to Ubuntu 24.04
    + JDK-8372756: Mouse additional buttons and horizontal
    scrolling are broken on XWayland GNOME &gt;= 47 after JDK-8351907
    + JDK-8372835: WorkQueue::push is missing an acquire-fence
    + JDK-8372857: Improve debuggability of
    java/rmi/server/RemoteServer/AddrInUse.java test
    + JDK-8372860: TestCodeCacheUnloadDuringConcCycle fails on ARM32
    + JDK-8372977: Unnecessary gthread-2.0 loading
    + JDK-8372988: Test runtime/Nestmates/membership/
    /TestNestHostErrorWithMultiThread.java failed: Unexpected
    interrupt
    + JDK-8373021: aarch64: MacroAssembler::arrays_equals reads out
    of bounds
    + JDK-8373101: JdkClient and JdkServer test classes ignore
    namedGroups field
    + JDK-8373106: JFR suspend/resume deadlock on macOS in pthreads
    library
    + JDK-8373290: Update FreeType to 2.14.1
    + JDK-8373429: gc/g1/TestCodeCacheUnloadDuringConcCycle fails
    on various platforms
    + JDK-8373476: (tz) Update Timezone Data to 2025c
    + JDK-8373485: JFR Crash during sampling:
    assert(jt-&gt;has_last_Java_frame()) failed: invariant
    + JDK-8373525: C2: assert(_base == Long) failed: Not a Long
    + JDK-8373537: Migrate "test/jdk/com/sun/net/httpserver/" to
    null-safe "SimpleSSLContext" methods
    + JDK-8373593: Support latest  VS2026 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8373623: Refactor Serialization tests for Records to JUnit
    + JDK-8373630: r18_tls should not be modified on Windows AArch64
    + JDK-8373632: Some sound tests failing in CI due to lack of
    sound key
    + JDK-8373704: Improve "SocketException: Protocol family
    unavailable" message
    + JDK-8373716: Refactor further java/util tests from TestNG to
    JUnit
    + JDK-8373727: New XBM images parser regression: only the first
    line of the bitmap array is parsed
    + JDK-8373793: TestDynamicStore.java '/manual' disables use of
    '/timeout'
    + JDK-8373807: test/jdk/java/net/httpclient/websocket/
    /DummyWebSocketServer.java getURI() uses "localhost"
    + JDK-8373832: Test java/lang/invoke/TestVHInvokerCaching.java
    tests nothing
    + JDK-8373869: Refactor java/net/httpclient/
    /ThrowingPushPromises*.java tests to use JUnit5
    + JDK-8373931: Test javax/sound/sampled/Clip/
    /AutoCloseTimeCheck.java timed out
    + JDK-8373946: Synth ProgressBarUI implementation confuses
    background painting with border painting
    + JDK-8373984: Check for macos 11 in CGraphicsDevice.m can be
    removed
    + JDK-8373998: RISC-V: simple optimization of ConvHF2F
    + JDK-8374056: RISC-V: Fix argument passing for the
    RiscvFlushIcache::flush
    + JDK-8374178: Missing include in systemDictionary.cpp after
    JDK-8365526
    + JDK-8374433: java/util/Locale/PreserveTagCase.java does not
    run any tests
    + JDK-8374434: Several JShell tests report JUnit discovery
    warnings
    + JDK-8374525: RISC-V: Several masked float16 vector operations
    are not supported
    + JDK-8374555: No need for visible input warning in
    s.s.u.Password when not reading from System.in
    + JDK-8374557: Enhance TLS connection handling
    + JDK-8374642: EscapeHash macro fails with GNU make 4.3 and 4.4
    + JDK-8374644: Regression in GZIPInputStream performance after
    JDK-7036144
    + JDK-8374711: Hotspot runtime/CommandLine/OptionsValidation/
    /TestOptionsWithRanges fails without printing the option name
    + JDK-8374872: Cleanup outdated SAP AG copyright header info
    + JDK-8374875: Improve perfMemory warning about 'Insufficient
    space for shared memory file'
    + JDK-8375057: Update HarfBuzz to 12.3.2
    + JDK-8375063: Update Libpng to 1.6.54
    + JDK-8375094: RISC-V: Fix client builds after JDK-8368732
    + JDK-8375231: Refactor util/ServiceLoader tests to use JUnit
    + JDK-8375232: Refactor util/StringJoiner tests to use JUnit
    + JDK-8375233: Refactor util/Vector tests to use JUnit
    + JDK-8375311: Some builds are missing debug helpers
    + JDK-8375530: PPC64: incorrect quick
    verify_method_data_pointer check causes poor performance in
    debug build
    + JDK-8375549: ConcurrentModificationException if
    jdk.crypto.disabledAlgorithms has multiple entries with known
    oid
    + JDK-8375598: VM crashes with "assert((labs(val) &amp;
    0xFFFFFFFF00000000) == 0 || dest == (address)-1) failed: must
    be 32bit offset or -1" when using too high value for
    NonNMethodCodeHeapSize
    + JDK-8375657: RISC-V: Need to check size in
    SharedRuntime::is_wide_vector
    + JDK-8375742: Test java/lang/invoke/MethodHandleProxies/
    /Driver.java does not run Unnamed.java
    + JDK-8375963: [25u] Set designator
    DEFAULT_PROMOTED_VERSION_PRE=ea in jdk25u-dev
    + JDK-8375999: com/sun/jndi/ldap/LdapPoolTimeoutTest.java fails
    sporadically on Windows
    + JDK-8376572: RISC-V: Interpreter: Load array index as signed
    int
    + JDK-8376688: Gtest
    os.attempt_reserve_memory_between_small_range_fill_hole_vm
    fails on AIX 7.3
    + JDK-8376889: Enhance JfrRecorder::on_create_vm_3() assert
    output
    + JDK-8377347: jdk/jfr/event/gc/detailed/
    /TestZAllocationStallEvent.java intermittent OOME
    + JDK-8377509: Add licenses for gcc 14.2.0
    + JDK-8377526: Update Libpng to 1.6.55
    + JDK-8377811: [25u] G1: Optional Evacuations may evacuate
    pinned objects
    + JDK-8377898: Hotspot build on AIX with unused-functions
    warning reports some unused functions
    + JDK-8377905: gcc.md included with every build
    + JDK-8378113: Add sun/java2d/OpenGL/ScaleParamsOOB.java to the
    ProblemList.txt file
    + JDK-8378218: MSYS2 reports cygwin triplet causing bash
    configure failure
    + JDK-8378353: [PPC64] StringCoding.countPositives causes
    errors when the length is not a proper 32 bit int
    + JDK-8378623: Use unique font names in FormatCharAdvanceTest
    + JDK-8378631: Update Zlib Data Compression Library to Version
    1.3.2
    + JDK-8378823: AIX build fails after zlib updated by JDK-8378631
    + JDK-8378853: [25u] Make backport of JDK-8244336 comply with
    differences in CSR
    + JDK-8379035: (tz) Update Timezone Data to 2026a
    + JDK-8379158: Update FreeType to 2.14.2
    + JDK-8379256: Update GIFlib to 6.1.1
    + JDK-8380078: Update GIFlib to 6.1.2
    + JDK-8380959: Update Libpng to 1.6.56
    + JDK-8382047: Update Libpng to 1.6.57
    + JDK-8382438: [25u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 25.0.3</changelog>
</package>
<package pkgid="a842ae42a9c1395b1577a9b9e77557e2ea28ffa4916233a483b0e3cb4bf1cd1d" name="java-25-openjdk-demo" arch="x86_64">
  <version epoch="0" ver="25.0.1.0" rel="150700.15.4.1"/>
  <changelog author="fstrba@suse.com" date="1757505600">- Initial packaging of OpenJDK 25
  * JEPs included:
    + 470: PEM Encodings of Cryptographic Objects (Preview)
    + 502: Stable Values (Preview)
    + 503: Remove the 32-bit x86 Port
    + 505: Structured Concurrency (Fifth Preview)
    + 506: Scoped Values
    + 507: Primitive Types in Patterns, instanceof, and switch
    (Third Preview)
    + 508: Vector API (Tenth Incubator)
    + 509: JFR CPU-Time Profiling (Experimental)
    + 510: Key Derivation Function API
    + 511: Module Import Declarations
    + 512: Compact Source Files and Instance Main Methods
    + 513: Flexible Constructor Bodies
    + 514: Ahead-of-Time Command-Line Ergonomics
    + 515: Ahead-of-Time Method Profiling
    + 518: JFR Cooperative Sampling
    + 519: Compact Object Headers
    + 520: JFR Method Timing &amp; Tracing
    + 521: Generational Shenandoah</changelog>
  <changelog author="fstrba@suse.com" date="1758196800">- Added patch:
  * fips.patch
    + forward port the FIPS support from OpenJDK 21</changelog>
  <changelog author="fstrba@suse.com" date="1761134400">- Update to upstream tag jdk-25.0.1+8 (October 2025 CPU)
  * Security fixes:
    + JDK-8360937, CVE-2025-53057, bsc#1252414: Enhance certificate
    handling
    + JDK-8356294, CVE-2025-53066, bsc#1252417: Enhance Path
    Factories
    + JDK-8359454, CVE-2025-61748, bsc#1252418: Enhance String
    handling
    + JDK-8352637: Enhance bytecode verification
  * Other fixes:
    + JDK-8367031: [backout] Change java.time month/day field types
    to 'byte'
    + JDK-8368308: ISO 4217 Amendment 180 Update
    + JDK-8366223: ZGC:
    ZPageAllocator::cleanup_failed_commit_multi_partition is
    broken
    + JDK-8360647: [XWayland] [OL10] NumPad keys are not triggered
    + JDK-8361212: Remove AffirmTrust root CAs
    + JDK-8356587: Missing object ID X in pool jdk.types.Method
    + JDK-8360679: Shenandoah: AOT saved adapter calls into broken
    GC barrier stub
    + JDK-8362882: Update SubmissionPublisher() specification to
    reflect use of ForkJoinPool.asyncCommonPool()
    + JDK-8315131: Clarify VarHandle set/get access on 32-bit
    platforms
    + JDK-8362109: Change milestone to fcs for all releases
    + JDK-8358819: The first year is not displayed correctly in
    Japanese Calendar
    + JDK-8361829: [TESTBUG] RISC-V: compiler/vectorization/runner/
    /BasicIntOpTest.java fails with RVV but not Zvbb
    + JDK-8361532: RISC-V: Several vector tests fail after
    JDK-8354383
    + JDK-8357826: Avoid running some jtreg tests when asan is
    configured
    + JDK-8358577: Test serviceability/jvmti/thread/
    /GetCurrentContendedMonitor/contmon01/contmon01.java failed:
    unexpexcted monitor object
    + JDK-8360533: ContainerRuntimeVersionTestUtils
    fromVersionString fails with some docker versions
    + JDK-8358452: JNI exception pending in
    Java_sun_awt_screencast_ScreencastHelper_remoteDesktopKeyImpl
    of screencast_pipewire.c:1214 (ID: 51119)
    + JDK-8359270: C2: alignment check should consider base offset
    when emitting arraycopy runtime call
    + JDK-8359596: Behavior change when both -Xlint:options and
  - Xlint:-options flags are given
    + JDK-8360179: RISC-V: Only enable BigInteger intrinsics when
    AvoidUnalignedAccess == false
    + JDK-8359218: RISC-V: Only enable CRC32 intrinsic when
    AvoidUnalignedAccess == false
    + JDK-8359059: Bump version numbers for 25.0.1</changelog>
</package>
<package pkgid="69e7944341a7f8dddd560ea90458c5629a32e817111ce8ded61814ed60891640" name="java-25-openjdk-demo" arch="x86_64">
  <version epoch="0" ver="25.0.2.0" rel="150700.15.7.1"/>
  <changelog author="fstrba@suse.com" date="1757505600">- Initial packaging of OpenJDK 25
  * JEPs included:
    + 470: PEM Encodings of Cryptographic Objects (Preview)
    + 502: Stable Values (Preview)
    + 503: Remove the 32-bit x86 Port
    + 505: Structured Concurrency (Fifth Preview)
    + 506: Scoped Values
    + 507: Primitive Types in Patterns, instanceof, and switch
    (Third Preview)
    + 508: Vector API (Tenth Incubator)
    + 509: JFR CPU-Time Profiling (Experimental)
    + 510: Key Derivation Function API
    + 511: Module Import Declarations
    + 512: Compact Source Files and Instance Main Methods
    + 513: Flexible Constructor Bodies
    + 514: Ahead-of-Time Command-Line Ergonomics
    + 515: Ahead-of-Time Method Profiling
    + 518: JFR Cooperative Sampling
    + 519: Compact Object Headers
    + 520: JFR Method Timing &amp; Tracing
    + 521: Generational Shenandoah</changelog>
  <changelog author="fstrba@suse.com" date="1758196800">- Added patch:
  * fips.patch
    + forward port the FIPS support from OpenJDK 21</changelog>
  <changelog author="fstrba@suse.com" date="1761134400">- Update to upstream tag jdk-25.0.1+8 (October 2025 CPU)
  * Security fixes:
    + JDK-8360937, CVE-2025-53057, bsc#1252414: Enhance certificate
    handling
    + JDK-8356294, CVE-2025-53066, bsc#1252417: Enhance Path
    Factories
    + JDK-8359454, CVE-2025-61748, bsc#1252418: Enhance String
    handling
    + JDK-8352637: Enhance bytecode verification
  * Other fixes:
    + JDK-8367031: [backout] Change java.time month/day field types
    to 'byte'
    + JDK-8368308: ISO 4217 Amendment 180 Update
    + JDK-8366223: ZGC:
    ZPageAllocator::cleanup_failed_commit_multi_partition is
    broken
    + JDK-8360647: [XWayland] [OL10] NumPad keys are not triggered
    + JDK-8361212: Remove AffirmTrust root CAs
    + JDK-8356587: Missing object ID X in pool jdk.types.Method
    + JDK-8360679: Shenandoah: AOT saved adapter calls into broken
    GC barrier stub
    + JDK-8362882: Update SubmissionPublisher() specification to
    reflect use of ForkJoinPool.asyncCommonPool()
    + JDK-8315131: Clarify VarHandle set/get access on 32-bit
    platforms
    + JDK-8362109: Change milestone to fcs for all releases
    + JDK-8358819: The first year is not displayed correctly in
    Japanese Calendar
    + JDK-8361829: [TESTBUG] RISC-V: compiler/vectorization/runner/
    /BasicIntOpTest.java fails with RVV but not Zvbb
    + JDK-8361532: RISC-V: Several vector tests fail after
    JDK-8354383
    + JDK-8357826: Avoid running some jtreg tests when asan is
    configured
    + JDK-8358577: Test serviceability/jvmti/thread/
    /GetCurrentContendedMonitor/contmon01/contmon01.java failed:
    unexpexcted monitor object
    + JDK-8360533: ContainerRuntimeVersionTestUtils
    fromVersionString fails with some docker versions
    + JDK-8358452: JNI exception pending in
    Java_sun_awt_screencast_ScreencastHelper_remoteDesktopKeyImpl
    of screencast_pipewire.c:1214 (ID: 51119)
    + JDK-8359270: C2: alignment check should consider base offset
    when emitting arraycopy runtime call
    + JDK-8359596: Behavior change when both -Xlint:options and
  - Xlint:-options flags are given
    + JDK-8360179: RISC-V: Only enable BigInteger intrinsics when
    AvoidUnalignedAccess == false
    + JDK-8359218: RISC-V: Only enable CRC32 intrinsic when
    AvoidUnalignedAccess == false
    + JDK-8359059: Bump version numbers for 25.0.1</changelog>
  <changelog author="fstrba@suse.com" date="1768392000">- Do not depend on update-desktop-files (jsc#PED-14507 and
  jsc#PED-15221)</changelog>
  <changelog author="fstrba@suse.com" date="1769428800">- Update to upstream tag jdk-25.0.2+10 (January 2026 CPU)
  * CVEs
    + CVE-2026-21925, bsc#1257034
    + CVE-2026-21932, bsc#1257036
    + CVE-2026-21933, bsc#1257037
    + CVE-2026-21945, bsc#1257038
  * Changes
    + JDK-8023263: [TESTBUG] Test closed/java/awt/Focus/
    /InactiveWindowTest/InactiveFocusRace fails due to not enough
    time to initialize graphic components
    + JDK-8162380: [TEST_BUG] MouseEvent/.../
    /AltGraphModifierTest.java has only "Fail" button
    + JDK-8201778: Speed up test
    javax/net/ssl/DTLS/PacketLossRetransmission.java
    + JDK-8265429: Improve GCM encryption
    + JDK-8277444: Data race between
    JvmtiClassFileReconstituter::copy_bytecodes and class linking
    + JDK-8279005: sun/tools/jstat tests do not check for test case
    exit codes after JDK-8245129
    + JDK-8304811: vmTestbase/vm/mlvm/indy/func/jvmti/
    /stepBreakPopReturn/INDIFY_Test.java fails with
    JVMTI_ERROR_TYPE_MISMATCH
    + JDK-8305567: serviceability/tmtools/jstat/GcTest01.java
    failed  utils.JstatGcResults.assertConsistency
    + JDK-8317801: java/net/Socket/asyncClose/Race.java fails
    intermittently (aix)
    + JDK-8320836: jtreg gtest runs should limit heap size
    + JDK-8325766: Extend CertificateBuilder to create trust and
    end entity certificates programmatically
    + JDK-8333526: Restructure java/nio/channels/DatagramChannel/
    /StressNativeSignal.java to a fail fast exception handling
    policy
    + JDK-8333783: java/nio/channels/FileChannel/directio/
    /DirectIOTest.java is unstable with AV software
    + JDK-8334238: Enhance AddLShortcutTest jpackage test
    + JDK-8335986: Test javax/swing/JCheckBox/4449413/
    /bug4449413.java fails on Windows 11 x64 because RBMenuItem's
    and CBMenuItem's checkmark on the left side are not visible
    + JDK-8341496: Improve JMX connections
    + JDK-8343218: Add option to disable allocating interface and
    abstract classes in non-class metaspace
    + JDK-8343546: GHA: Cache required dependencies in master-branch
    workflow
    + JDK-8345810: Custom launchers must be linked with pthread to
    avoid dynamic linker issues
    + JDK-8346753: Test javax/swing/JMenuItem/RightLeftOrientation/
    /RightLeftOrientation.java fails on Windows Server 2025 x64
    because the icons of RBMenuItem and CBMenuItem are not visible
    in Nimbus LookAndFeel
    + JDK-8346839: [TESTBUG] "java/awt/textfield/setechochartest4/
    /setechochartest4.java" failed because the test frame
    disappears on clicking "Click Several Times" button
    + JDK-8346884: Add since checker test to jdk.editpad
    + JDK-8346952: GetGraphicsStressTest.java fails: Native
    resources unavailable
    + JDK-8347277: java/awt/Focus/ComponentLostFocusTest.java fails
    intermittently
    + JDK-8349188: LineBorder does not scale correctly
    + JDK-8350621: Code cache stops scheduling GC
    + JDK-8351487: [ubsan] jvmti.h runtime error: load of value
    which is not a valid value
    + JDK-8352016: Improve
    java/lang/RuntimeTests/RuntimeExitLogTest.java
    + JDK-8354348: Enable Extended EVEX to REX2/REX demotion for
    commutative operations with same dst and src2
    + JDK-8354415: [Ubuntu25.04] api/java_awt/GraphicsDevice/
    /indexTGF.html#SetDisplayMode -
    setDisplayMode_REFRESH_RATE_UNKNOWN fails: Height is different
    on vnc
    + JDK-8354447: Missing test for retroactive
    @SuppressWarnings("dangling-doc-comments") behavior
    + JDK-8354646: java.awt.TextField allows to identify the spaces
    in a password when double clicked at the starting and end of
    the text
    + JDK-8355478: DoubleActionESC.java fails intermittently
    + JDK-8356324: JVM crash (SIGSEGV at
    ClassListParser::resolve_indy_impl) during -Xshare:dump
    starting from 21.0.5
    + JDK-8356897: Update NSS library to 3.111
    + JDK-8357064: cds/appcds/ArchiveRelocationTest.java failed
    with missing expected output
    + JDK-8357141: Update to use jtreg 7.5.2
    + JDK-8357382: runtime/cds/appcds/aotClassLinking/
    /BulkLoaderTest.java#aot fails with Xcomp and C1
    + JDK-8357396: Refactor nmethod::make_not_entrant to use Enum
    instead of "const char*"
    + JDK-8357691: File blocked.certs contains bad content when
    boot jdk 25 is used, sun/security/lib/CheckBlockedCerts.java
    failing
    + JDK-8357694: RISC-V: Several IR verification tests fail when
    vlen=128
    + JDK-8357799: Improve instructions for
    JFileChooser/HTMLFileName.java
    + JDK-8357816: Add test from JDK-8350576
    + JDK-8357822: C2: Multiple string optimization tests are no
    longer testing string concatenation optimizations
    + JDK-8357959: (bf) ByteBuffer.allocateDirect initialization
    can result in large TTSP spikes
    + JDK-8358048: java/net/httpclient/HttpsTunnelAuthTest.java
    incorrectly calls Thread::stop
    + JDK-8358340: Support CDS heap archive with Generational
    Shenandoah
    + JDK-8358532: JFileChooser in GTK L&amp;F still displays HTML
    filename
    + JDK-8358535: Changes in ClassValue (JDK-8351996) caused a
    1-9% regression in Renaissance-PageRank
    + JDK-8358556: Assert when running with -XX:-UseLibmIntrinsic
    + JDK-8358685: [TEST] AOTLoggingTag.java failed with missing
    log message
    + JDK-8358697: TextLayout/MyanmarTextTest.java passes if no
    Myanmar font is found
    + JDK-8358723: jpackage signing issues: the main launcher
    doesn't have entitlements
    + JDK-8358748: Large page size initialization fails with assert
    "page_size must be a power of 2"
    + JDK-8358751: C2: Recursive inlining check for compiled lambda
    forms is broken
    + JDK-8358813: JPasswordField identifies spaces in password via
    delete shortcuts
    + JDK-8359061: Update and ProblemList manual test
    java/awt/Cursor/CursorDragTest/ListDragCursor.java
    + JDK-8359104: gc/TestAlwaysPreTouchBehavior.java#&lt;gcname&gt;
    fails on Linux
    + JDK-8359105: RISC-V: No need for acquire fence in safepoint
    poll during JNI calls
    + JDK-8359127: Amend java/nio/channels/DatagramChannel/
    /PromiscuousIPv6.java to use @requires for OS platform
    selection
    + JDK-8359167: Remove unused test/hotspot/jtreg/vmTestbase/nsk/
    /share/jpda/BindServer.java
    + JDK-8359207: Remove runtime/signal/TestSigusr2.java since it
    is always skipped
    + JDK-8359423: Improve error message in case of missing jsa
    shared archive
    + JDK-8359428: Test 'javax/swing/JTabbedPane/bug4499556.java'
    failed because after selecting one of L&amp;F items, the test case
    automatically failed when clicking on L&amp;F Menu button again
    + JDK-8359449: [TEST] open/test/jdk/java/io/File/SymLinks.java
    Refactor extract method for Windows specific test
    + JDK-8359477: com/sun/net/httpserver/Test12.java appears to
    have a temp file race
    + JDK-8359501: Enhance Handling of URIs
    + JDK-8359687: Use PassFailJFrame for
    java/awt/print/Dialog/DialogType.java
    + JDK-8359690: New test TestCPUTimeSampleThrottling still fails
    intermittently
    + JDK-8359735: [Ubuntu 25.10] java/lang/ProcessBuilder/
    /Basic.java, java/lang/ProcessHandle/InfoTest.java fail due to
    rust-coreutils
    + JDK-8359827: Test runtime/Thread/ThreadCountLimit.java need
    loop increasing the limit
    + JDK-8360022: ClassRefDupInConstantPoolTest.java fails when
    running in repeat
    + JDK-8360090: [TEST] RISC-V: disable some cds tests on qemu
    + JDK-8360178: TestArguments.atojulong gtest has incorrect
    format string
    + JDK-8360219: [AIX] assert(locals_base &gt;= l2) failed: bad
    placement
    + JDK-8360255: runtime/jni/checked/TestLargeUTF8Length.java
    fails with -XX:-CompactStrings
    + JDK-8360408: [TEST] Use @requires tag instead of exiting
    based on "os.name" property value for
    sun/net/www/protocol/file/FileURLTest.java
    + JDK-8360411: [TEST] open/test/jdk/java/io/File/
    /MaxPathLength.java Refactor extract method to encapsulate
    Windows specific test logic
    + JDK-8360518: Docker tests do not work when asan is configured
    + JDK-8360520: RISC-V: C1: Fix primitive array clone intrinsic
    regression after JDK-8333154
    + JDK-8360664: Null pointer dereference in src/hotspot/share/
    /prims/jvmtiTagMap.cpp in
    IterateOverHeapObjectClosure::do_object()
    + JDK-8360783: CTW: Skip deoptimization between tiers
    + JDK-8360791: [ubsan] Adjust signal handling
    + JDK-8360867: CTW: Disable inline cache verification
    + JDK-8360981: Remove use of Thread.stop in
    test/jdk/java/net/Socket/DeadlockTest.java
    + JDK-8361112: Use exact float -&gt; Float16 conversion method in
    Float16 tests
    + JDK-8361180: Disable CompiledDirectCall verification with
  - VerifyInlineCaches
    + JDK-8361198: [AIX] fix misleading error output in
    thread_cpu_time_unchecked
    + JDK-8361211: C2: Final graph reshaping generates unencodeable
    klass constants
    + JDK-8361215: Add AOT test case: verification constraint
    classes are excluded
    + JDK-8361253: CommandLineOptionTest library should report
    observed values on failure
    + JDK-8361255: CTW: Tolerate more NCDFE problems
    + JDK-8361298: SwingUtilities/bug4967768.java fails where
    character P is not underline
    + JDK-8361314: Test serviceability/jvmti/VMEvent/MyPackage/
    /VMEventRecursionTest.java FATAL ERROR in native method:
    Failed during the GetClassSignature call
    + JDK-8361367: AOT ExcludedClasses.java test failed with
    missing constant pool logs
    + JDK-8361423: Add IPSupport::printPlatformSupport to
    java/net/NetworkInterface/IPv4Only.java
    + JDK-8361449: RISC-V: Code cleanup for native call
    + JDK-8361478: GHA: Use MSYS2 from GHA runners
    + JDK-8361494: [IR Framework] Escape too much in replacement of
    placeholder
    + JDK-8361497: Scoped Values: orElse and orElseThrow do not
    access the cache
    + JDK-8361504: RISC-V: Make C1 clone intrinsic platform guard
    more specific
    + JDK-8361520: Stabilize SystemGC benchmarks
    + JDK-8361599: [PPC64] enable missing tests via jtreg requires
    + JDK-8361711: Add library name configurability to
    PKCS11Test.java
    + JDK-8361748: Enforce limits on the size of an XBM image
    + JDK-8361839: Problemlist BogusFocusableWindowState due to
    failures in the CI pipeline
    + JDK-8361868: [GCC static analyzer] complains about missing
    calloc - NULL checks in p11_util.c
    + JDK-8361871: [GCC static analyzer] complains about use of
    uninitialized value ckpObject in p11_util.c
    + JDK-8361888: [GCC static analyzer] ProcessImpl_md.c
    Java_java_lang_ProcessImpl_forkAndExec error: use of
    uninitialized value '*(ChildStuff *)p.mode
    + JDK-8361892: AArch64: Incorrect matching rule leading to
    improper oop instruction encoding
    + JDK-8361897: gc/z/TestUncommit.java fails with Uncommitted
    too slow
    + JDK-8361948: Shenandoah: region free capacity unit mismatch
    + JDK-8361950: Update to use jtreg 8
    + JDK-8361959: [GCC static analyzer] java_props_md.c  leak of
    'temp'  variable is reported
    + JDK-8362107: Update the Jan CPU26_01 release date in master
    branch after forking Oct CPU25_10
    + JDK-8362123: ClassLoader Leak via
    Executors.newSingleThreadExecutor(...)
    + JDK-8362169: Pointer passed to upcall may get wrong scope
    + JDK-8362204: test/jdk/sun/awt/font/TestDevTransform.java
    fails on Ubuntu 24.04
    + JDK-8362207: Add more test cases for possible double-rounding
    in fma
    + JDK-8362282: runtime/logging/StressAsyncUL.java failed with
    exitValue = 134
    + JDK-8362308: Enhance Bitmap operations
    + JDK-8362379: Test serviceability/HeapDump/
    /UnmountedVThreadNativeMethodAtTop.java should mark as /native
    + JDK-8362390: AIX make fails in awt_GraphicsEnv.c
    + JDK-8362482: [TESTBUG] serviceability/HeapDump/
    /UnmountedVThreadNativeMethodAtTop.java: System.gc() does not
    provide full GC
    + JDK-8362501: Update test/hotspot/jtreg/applications/jcstress/
    /README
    + JDK-8362515: RISC-V: cleanup NativeFarCall
    + JDK-8362516: Support of GCC static analyzer (-fanalyzer)
    + JDK-8362530: VM crash with -XX:+PrintTieredEvents when
    collecting AOT profiling
    + JDK-8362532: Test gc/g1/plab/* duplicate command-line options
    + JDK-8362533: Tests sun/management/jmxremote/bootstrap/*
    duplicate VM flags
    + JDK-8362581: Timeouts in
    java/nio/channels/SocketChannel/OpenLeak.java on UNIX
    + JDK-8362582: GHA: Increase bundle retention time to deal with
    infra overload better
    + JDK-8362596: RISC-V: Improve _vectorizedHashCode intrinsic
    + JDK-8362602: Add test.timeout.factor to CompileFactory to
    avoid test timeouts
    + JDK-8362632: Improve HttpServer Request handling
    + JDK-8362834: Several runtime/Thread tests should mark as
    /native
    + JDK-8362836: JFR: Broken pipe in
    jdk/jfr/event/io/TestIOTopFrame.java
    + JDK-8362838: RISC-V: Incorrect matching rule leading to
    improper oop instruction encoding
    + JDK-8362855: Test java/net/ipv6tests/TcpTest.java should
    report SkippedException when there no ia4addr  or ia6addr
    + JDK-8362889: [GCC static analyzer] leak in
    libstringPlatformChars.c
    + JDK-8362972: C2 fails with unexpected node in SuperWord
    truncation: IsFiniteF, IsFiniteD
    + JDK-8363676: [GCC static analyzer] missing return value check
    of malloc in OGLContext_SetTransform
    + JDK-8363696: Update the release version and date for OpenJDK
    25u
    + JDK-8363720: Follow up to JDK-8360411 with post review
    comments
    + JDK-8363895: Minimal build fails with slowdebug builds after
    JDK-8354887
    + JDK-8363898: RISC-V: TestRangeCheckHoistingScaledIV.java
    fails after JDK-8355293 when running without RVV
    + JDK-8363910: Avoid tuning for Power10 CPUs on Linux ppc64le
    when gcc &lt; 10 is used
    + JDK-8363928: Specifying AOTCacheOutput with a blank path
    causes the JVM to crash
    + JDK-8363965: GHA: Switch cross-compiling sysroots to Debian
    bookworm
    + JDK-8363966: GHA: Switch cross-compiling sysroots to Debian
    trixie
    + JDK-8364090: Dump JFR recording on CrashOnOutOfMemoryError
    + JDK-8364111: InstanceMirrorKlass iterators should handle CDS
    and hidden classes consistently
    + JDK-8364114: Test
    TestHugePageDecisionsAtVMStartup.java#LP_enabled fails when no
    free hugepage
    + JDK-8364120: RISC-V: unify the usage of
    MacroAssembler::instruction_size
    + JDK-8364150: RISC-V: Leftover for JDK-8343430 removing old
    trampoline call
    + JDK-8364177: JDK fails to build due to undefined symbol in
    libpng on LoongArch64
    + JDK-8364184: [REDO] AArch64: [VectorAPI] sve vector math
    operations are not supported after JDK-8353217
    + JDK-8364190: JFR: RemoteRecordingStream withers don't work
    + JDK-8364198: NMT should have a better corruption message
    + JDK-8364199: Enhance list of environment variables printed in
    hserr/hsinfo file
    + JDK-8364212: Shenandoah: Rework archived objects loading
    + JDK-8364214: Enhance polygon data support
    + JDK-8364235: Fix for JDK-8361447 breaks the alignment
    requirements for GuardedMemory
    + JDK-8364257: JFR: User-defined events and settings with a
    one-letter name cannot be configured
    + JDK-8364263: HttpClient: Improve encapsulation of ProxyServer
    + JDK-8364296: Set IntelJccErratumMitigation flag ergonomically
    + JDK-8364352: Some tests fail when using a limited number of
    pregenerated .jsa CDS archives
    + JDK-8364454: ProblemList runtime/cds/DeterministicDump.java
    on macos for JDK-8363986
    + JDK-8364503: gc/g1/TestCodeCacheUnloadDuringConcCycle.java
    fails because of race printing to stdout
    + JDK-8364514: [asan] runtime/jni/checked/
    /TestCharArrayReleasing.java heap-buffer-overflow
    + JDK-8364556: JFR:  Disable SymbolTableStatistics and
    StringTableStatistics in default.jfc
    + JDK-8364597: Replace THL A29 Limited with Tencent
    + JDK-8364611: (process) Child process SIGPIPE signal
    disposition should be default
    + JDK-8364660: ClassVerifier::ends_in_athrow() should be removed
    + JDK-8364764: java/nio/channels/vthread/BlockingChannelOps.java
    subtests timed out
    + JDK-8364786: Test java/net/vthread/HttpALot.java
    intermittently fails - 24999 handled, expected 25000
    + JDK-8364984: Many jpackage tests are failing on Linux after
    JDK-8334238
    + JDK-8364993: JFR: Disable jdk.ModuleExport in default.jfc
    + JDK-8364996: java/awt/font/FontNames/LocaleFamilyNames.java
    times out on Windows
    + JDK-8365058: Enhance CopyOnWriteArraySet
    + JDK-8365071: ARM32: JFR intrinsic jvm_commit triggers C2
    regalloc assert
    + JDK-8365086: CookieStore.getURIs() and get(URI) should return
    an immutable List
    + JDK-8365165: Zap C-heap memory at delete/free
    + JDK-8365166: ARM32: missing os::fetch_bcp_from_context
    implementation
    + JDK-8365168: Use 64-bit aligned addresses for CK_ULONG access
    in PKCS11 native key code
    + JDK-8365200: RISC-V: compiler/loopopts/superword/
    /TestGeneralizedReductions.java fails with Zvbb and vlen=128
    + JDK-8365206: RISC-V: compiler/c2/irTests/
    /TestFloat16ScalarOperations.java is failing on riscv64
    + JDK-8365240: [asan] exclude some tests when using asan
    enabled binaries
    + JDK-8365260: Problemlist 1 test due to failures in the CI
    pipeline
    + JDK-8365265: x86 short forward jump exceeds 8-bit offset in
    methodHandles_x86.cpp when using Intel APX
    + JDK-8365271: Improve Swing supports
    + JDK-8365280: Enhance JOptionPane
    + JDK-8365302: RISC-V: compiler/loopopts/superword/
    /TestAlignVector.java fails when vlen=128
    + JDK-8365307: AIX make fails after JDK-8364611
    + JDK-8365312: GCC 12 cannot compile SVE on aarch64 with
    auto-var-init pattern
    + JDK-8365389: Remove static color fields from SwingUtilities3
    and WindowsMenuItemUI
    + JDK-8365425: [macos26] javax/swing/JInternalFrame/8160248/
    /JInternalFrameDraggingTest.java fails on macOS 26
    + JDK-8365442: [asan] runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java fails
    + JDK-8365468: EagerJVMCI should only apply to the
    CompilerBroker JVMCI runtime
    + JDK-8365487: [asan] some oops (mode) related tests fail
    + JDK-8365543: UnixNativeDispatcher.init should lookup open64at
    and stat64at on AIX
    + JDK-8365571: GenShen: PLAB promotions may remain disabled for
    evacuation threads
    + JDK-8365615: Improve JMenuBar/RightLeftOrientation.java
    + JDK-8365638: JFR: Add --exact for debugging out-of-order
    events
    + JDK-8365660: test/jdk/sun/security/pkcs11/KeyAgreement/ tests
    skipped without SkipException
    + JDK-8365700: Jar --validate without any --file option leaves
    around a temporary file /tmp/tmpJar&lt;number&gt;.jar
    + JDK-8365726: Test crashed with assert in C1 thread: Possible
    safepoint reached by thread that does not allow it
    + JDK-8365772: RISC-V: correctly prereserve NaN payload when
    converting from float to float16 in vector way
    + JDK-8365790: Shutdown hook for application image does not
    work on Windows
    + JDK-8365811: test/jdk/java/net/CookieHandler/B6644726.java
    failure - "Should have 5 cookies. Got only 4, expires probably
    didn't parse correctly"
    + JDK-8365823: Revert storing abstract and interface Klasses to
    non-class metaspace
    + JDK-8365834: Mark java/net/httpclient/ManyRequests.java  as
    intermittent
    + JDK-8365841: RISC-V: Several IR verification tests fail after
    JDK-8350960 without Zvfh
    + JDK-8365844: RISC-V: TestBadFormat.java fails when running
    without RVV
    + JDK-8365863: /test/jdk/sun/security/pkcs11/Cipher tests skip
    without SkippedException
    + JDK-8365913: Support latest MSC_VER in abstract_vm_version.cpp
    + JDK-8365919: Replace currentTimeMillis with nanoTime in
    Stresser.java
    + JDK-8365926: RISC-V: Performance regression in renaissance
    (chi-square)
    + JDK-8365956: GenShen: Adaptive tenuring threshold algorithm
    may raise threshold prematurely
    + JDK-8365983: Tests should throw SkippedException when SCTP
    not supported
    + JDK-8366028: MethodType::fromMethodDescriptorString should
    not throw UnsupportedOperationException for invalid
    descriptors
    + JDK-8366029: Do not add -XX:VerifyArchivedFields by default
    to CDS tests
    + JDK-8366031: Mark com/sun/nio/sctp/SctpChannel/
    /CloseDescriptors.java as intermittent
    + JDK-8366075: Problemlist 2 tests due to failures in the CI
    pipeline
    + JDK-8366092: [GCC static analyzer] UnixOperatingSystem.c
    warning: use of uninitialized value 'systemTicks'
    + JDK-8366147: ZGC:
    ZPageAllocator::cleanup_failed_commit_single_partition may
    leak memory
    + JDK-8366159: SkippedException is treated as a pass for
    pkcs11/KeyStore, pkcs11/SecretKeyFactory and
    pkcs11/SecureRandom
    + JDK-8366208: Unexpected exception in
    sun.java2d.cmm.lcms.LCMSImageLayout
    + JDK-8366229: runtime/Thread/TooSmallStackSize.java runs with
    all collectors
    + JDK-8366250: Problemlist 3 tests due to failures in the CI
    pipeline
    + JDK-8366340: Problemlist 1 test due to failures in the CI
    pipeline
    + JDK-8366342: Key generator and key pair generator tests
    skipping, but showing as passed
    + JDK-8366359: Test should throw SkippedException when there is
    no lpstat
    + JDK-8366365: [test] test/lib-test/jdk/test/whitebox/
    /CPUInfoTest.java should be updated
    + JDK-8366434: THP not working properly with G1 after
    JDK-8345655
    + JDK-8366446: Test java/awt/geom/ConcurrentDrawPolygonTest.java
    fails intermittently
    + JDK-8366537: Test "java/util/TimeZone/
    /DefaultTimeZoneTest.java" is not updating the zone ID as
    expected
    + JDK-8366558: Gtests leave /tmp/cgroups-test* files
    + JDK-8366694: Test JdbStopInNotificationThreadTest.java timed
    out after 60 second
    + JDK-8366750: Remove test 'java/awt/Choice/
    /ChoiceMouseWheelTest/ChoiceMouseWheelTest.java' from
    problemlist
    + JDK-8366764: Deproblemlist java/awt/ScrollPane/
    /ScrollPositionTest.java
    + JDK-8366800: Problemlist 1 test due to failures in the CI
    pipeline
    + JDK-8366844: Update and automate
    MouseDraggedOriginatedByScrollBarTest.java
    + JDK-8366850: Test com/sun/jdi/
    /JdbStopInNotificationThreadTest.java failed
    + JDK-8366893: java/lang/Thread/virtual/stress/
    /GetStackTraceALotWhenPinned.java timed out on macos-aarch64
    + JDK-8366948: AOT cache creation crashes when iterating
    training data
    + JDK-8366980: TestTransparentHugePagesHeap.java fails when run
    with -UseCompressedOops
    + JDK-8367017: Remove legacy checks from WrappedToolkitTest and
    convert from bash
    + JDK-8367021: Regression in LocaleDataTest refactoring
    + JDK-8367048: RISC-V: Correct pipeline descriptions of the
    architecture
    + JDK-8367066: RISC-V: refine register selection in
    MacroAssembler:: decode_klass_not_null
    + JDK-8367098: RISC-V: sync CPU features with related JVM flags
    for dependant ones
    + JDK-8367131: Test com/sun/jdi/ThreadMemoryLeakTest.java fails
    on 32 bits
    + JDK-8367133: DTLS: fragmentation of Finished message results
    in handshake failure
    + JDK-8367137: RISC-V: Detect Zicboz block size via hwprobe
    + JDK-8367237: Thread-Safety Usage Warning for
    java.text.Collator Classes
    + JDK-8367277: Fix copyright header in
    JMXInterfaceBindingTest.java
    + JDK-8367313: CTW: Execute in AWT headless mode
    + JDK-8367333: C2: Vector math operation intrinsification
    failure
    + JDK-8367348: Enhance PassFailJFrame to support links in HTML
    + JDK-8367378: GenShen: Missing timing stats when old mark
    buffers are flushed during final update refs
    + JDK-8367384: The ICC_Profile class may throw exceptions
    during serialization
    + JDK-8367598: Switch to CRC32C for SEED calculation in
    jdk.test.lib.Utils
    + JDK-8367616: RISC-V: Auto-enable Zicboz extension for debug
    builds
    + JDK-8367689: Revert removal of several compilation-related
    vmStructs fields
    + JDK-8367692: RISC-V: Align post call nop
    + JDK-8367694: Fix jtreg test failure when Intel APX is enabled
    for KNL platforms
    + JDK-8367780: Enable UseAPX on Intel CPUs only when both APX_F
    and APX_NCI_NDD_NF cpuid features are present
    + JDK-8367782: VerifyJarEntryName.java: Fix modifyJarEntryName
    to operate on bytes and re-introduce verifySignatureEntryName
    + JDK-8367869: Test java/io/FileDescriptor/Sync.java timed out
    + JDK-8367904: Test java/net/InetAddress/ptr/Lookup.java should
    throw SkippedException
    + JDK-8367948: JFR: MethodTrace threshold setting has no effect
    + JDK-8367953: JFR sampler threads does not appear in thread
    dump
    + JDK-8367969: C2: compiler/vectorapi/TestVectorMathLib.java
    fails without UnlockDiagnosticVMOptions
    + JDK-8367988: NewFileSystemTests.readOnlyZipFileFailure fails
    when run by root user
    + JDK-8368032: Enhance Certificate Checking
    + JDK-8368071: Compilation throughput regressed 2X-8X after
    JDK-8355003
    + JDK-8368152: Shenandoah: Incorrect behavior at end of
    degenerated cycle
    + JDK-8368192: Test java/lang/ProcessBuilder/Basic.java#id0
    fails with Exception: Stack trace
    + JDK-8368366: RISC-V: AlignVector is mistakenly set to
    AvoidUnalignedAccesses
    + JDK-8368367: Test jdk/jfr/event/gc/detailed/
    /TestGCHeapMemoryUsageEvent.java fails  jdk.GCHeapMemoryUsage
    "expected 0 &gt; 0"
    + JDK-8368565: Adjust comment regarding dependency of libjvm.so
    to librt
    + JDK-8368606: Printer lookup returns empty on AIX platform due
    to uninitialized results list
    + JDK-8368668: Several vmTestbase/vm/gc/compact tests timed out
    on large memory machine
    + JDK-8368670: Deadlock in JFR on event register + class load
    + JDK-8368698: runtime/cds/appcds/aotCache/OldClassSupport.java
    assert(can_add()) failed: Cannot add TrainingData objects
    + JDK-8368732: RISC-V: Detect support for misaligned vector
    access via hwprobe
    + JDK-8368890: open/test/jdk/tools/jpackage/macosx/
    /NameWithSpaceTest.java fails randomly
    + JDK-8368893: RISC-V: crash after JDK-8352673 on fastdebug
    version
    + JDK-8368960: Adjust java UL logging in the build
    + JDK-8368982: Test sun/security/tools/jarsigner/EC.java
    completed and timed out
    + JDK-8369078: Fix faulty test conversion in
    IllegalCharsetName.java
    + JDK-8369184: SimpleTimeZone equals() Returns True for Unequal
    Instances with Different hashCode Values
    + JDK-8369190: JavaFrameAnchor on AArch64 has unnecessary
    barriers and wrong store order in MacroAssembler
    + JDK-8369226: GHA: Switch to MacOS 15
    + JDK-8369319: java/net/httpclient/CancelRequestTest.java fails
    intermittently
    + JDK-8369450: [Ubuntu 25.10] openjdk fails to build due to
    rust-coreutils date
    + JDK-8369487: Revert EA option for build promotion
    + JDK-8369506: Bytecode rewriting causes Java heap corruption
    on AArch64
    + JDK-8369560: Slowdebug build without CDS fails
    + JDK-8369563: Gtest dll_address_to_function_and_library_name
    has issues with stripped pdb files
    + JDK-8369616: JavaFrameAnchor on RISC-V has unnecessary
    barriers and wrong store order in MacroAssembler
    + JDK-8369656: Calling CompletableFuture.join() could execute
    task in common pool
    + JDK-8369657: [AIX] TOC overflow in static-launcher build when
    building slowdebug after JDK-8352064
    + JDK-8369853: jpackage signing tests fail after JDK-8358723
    + JDK-8369868: Compilation error in Win8365790Test.java with
    JDK-8358723 fix resulting in CI tier3 failure
    + JDK-8369946: Bytecode rewriting causes Java heap corruption
    on PPC
    + JDK-8369947: Bytecode rewriting causes Java heap corruption
    on RISC-V
    + JDK-8369979: Flag UsePopCountInstruction was accidentally
    disabled on PPC64
    + JDK-8370048: Shenandoah: Deprecated ShenandoahPacing option
    + JDK-8370049: [s390x] G1 barrier compareAndExchange does not
    return old value when compareExchange fails
    + JDK-8370318: AES-GCM vector intrinsic may read out of bounds
    (x86_64, AVX-512)
    + JDK-8370331: Problemlist 2 tests due to failures in the CI
    pipeline
    + JDK-8370428: Change milestone to fcs for all releases
    + JDK-8370465: Right to Left Orientation Issues with MenuItem
    Component
    + JDK-8371094: --mac-signing-key-user-name no longer works
    + JDK-8371425: Include folder names in vscode workspace virtual
    folders
    + JDK-8371697: test/jdk/java/nio/file/FileStore/Basic.java
    fails after 8360887 on linux
    + JDK-8372753: jpackage ignores --file-associations option with
    predefined app image</changelog>
</package>
<package pkgid="bfb3c994e97a51b45ae90a1854e289f53df9d85430e8e1300b11d7def6686842" name="java-25-openjdk-demo" arch="x86_64">
  <version epoch="0" ver="25.0.3.0" rel="150700.15.10.1"/>
  <changelog author="fstrba@suse.com" date="1757505600">- Initial packaging of OpenJDK 25
  * JEPs included:
    + 470: PEM Encodings of Cryptographic Objects (Preview)
    + 502: Stable Values (Preview)
    + 503: Remove the 32-bit x86 Port
    + 505: Structured Concurrency (Fifth Preview)
    + 506: Scoped Values
    + 507: Primitive Types in Patterns, instanceof, and switch
    (Third Preview)
    + 508: Vector API (Tenth Incubator)
    + 509: JFR CPU-Time Profiling (Experimental)
    + 510: Key Derivation Function API
    + 511: Module Import Declarations
    + 512: Compact Source Files and Instance Main Methods
    + 513: Flexible Constructor Bodies
    + 514: Ahead-of-Time Command-Line Ergonomics
    + 515: Ahead-of-Time Method Profiling
    + 518: JFR Cooperative Sampling
    + 519: Compact Object Headers
    + 520: JFR Method Timing &amp; Tracing
    + 521: Generational Shenandoah</changelog>
  <changelog author="fstrba@suse.com" date="1758196800">- Added patch:
  * fips.patch
    + forward port the FIPS support from OpenJDK 21</changelog>
  <changelog author="fstrba@suse.com" date="1761134400">- Update to upstream tag jdk-25.0.1+8 (October 2025 CPU)
  * Security fixes:
    + JDK-8360937, CVE-2025-53057, bsc#1252414: Enhance certificate
    handling
    + JDK-8356294, CVE-2025-53066, bsc#1252417: Enhance Path
    Factories
    + JDK-8359454, CVE-2025-61748, bsc#1252418: Enhance String
    handling
    + JDK-8352637: Enhance bytecode verification
  * Other fixes:
    + JDK-8367031: [backout] Change java.time month/day field types
    to 'byte'
    + JDK-8368308: ISO 4217 Amendment 180 Update
    + JDK-8366223: ZGC:
    ZPageAllocator::cleanup_failed_commit_multi_partition is
    broken
    + JDK-8360647: [XWayland] [OL10] NumPad keys are not triggered
    + JDK-8361212: Remove AffirmTrust root CAs
    + JDK-8356587: Missing object ID X in pool jdk.types.Method
    + JDK-8360679: Shenandoah: AOT saved adapter calls into broken
    GC barrier stub
    + JDK-8362882: Update SubmissionPublisher() specification to
    reflect use of ForkJoinPool.asyncCommonPool()
    + JDK-8315131: Clarify VarHandle set/get access on 32-bit
    platforms
    + JDK-8362109: Change milestone to fcs for all releases
    + JDK-8358819: The first year is not displayed correctly in
    Japanese Calendar
    + JDK-8361829: [TESTBUG] RISC-V: compiler/vectorization/runner/
    /BasicIntOpTest.java fails with RVV but not Zvbb
    + JDK-8361532: RISC-V: Several vector tests fail after
    JDK-8354383
    + JDK-8357826: Avoid running some jtreg tests when asan is
    configured
    + JDK-8358577: Test serviceability/jvmti/thread/
    /GetCurrentContendedMonitor/contmon01/contmon01.java failed:
    unexpexcted monitor object
    + JDK-8360533: ContainerRuntimeVersionTestUtils
    fromVersionString fails with some docker versions
    + JDK-8358452: JNI exception pending in
    Java_sun_awt_screencast_ScreencastHelper_remoteDesktopKeyImpl
    of screencast_pipewire.c:1214 (ID: 51119)
    + JDK-8359270: C2: alignment check should consider base offset
    when emitting arraycopy runtime call
    + JDK-8359596: Behavior change when both -Xlint:options and
  - Xlint:-options flags are given
    + JDK-8360179: RISC-V: Only enable BigInteger intrinsics when
    AvoidUnalignedAccess == false
    + JDK-8359218: RISC-V: Only enable CRC32 intrinsic when
    AvoidUnalignedAccess == false
    + JDK-8359059: Bump version numbers for 25.0.1</changelog>
  <changelog author="fstrba@suse.com" date="1768392000">- Do not depend on update-desktop-files (jsc#PED-14507 and
  jsc#PED-15221)</changelog>
  <changelog author="fstrba@suse.com" date="1769428800">- Update to upstream tag jdk-25.0.2+10 (January 2026 CPU)
  * CVEs
    + CVE-2026-21925, bsc#1257034
    + CVE-2026-21932, bsc#1257036
    + CVE-2026-21933, bsc#1257037
    + CVE-2026-21945, bsc#1257038
  * Changes
    + JDK-8023263: [TESTBUG] Test closed/java/awt/Focus/
    /InactiveWindowTest/InactiveFocusRace fails due to not enough
    time to initialize graphic components
    + JDK-8162380: [TEST_BUG] MouseEvent/.../
    /AltGraphModifierTest.java has only "Fail" button
    + JDK-8201778: Speed up test
    javax/net/ssl/DTLS/PacketLossRetransmission.java
    + JDK-8265429: Improve GCM encryption
    + JDK-8277444: Data race between
    JvmtiClassFileReconstituter::copy_bytecodes and class linking
    + JDK-8279005: sun/tools/jstat tests do not check for test case
    exit codes after JDK-8245129
    + JDK-8304811: vmTestbase/vm/mlvm/indy/func/jvmti/
    /stepBreakPopReturn/INDIFY_Test.java fails with
    JVMTI_ERROR_TYPE_MISMATCH
    + JDK-8305567: serviceability/tmtools/jstat/GcTest01.java
    failed  utils.JstatGcResults.assertConsistency
    + JDK-8317801: java/net/Socket/asyncClose/Race.java fails
    intermittently (aix)
    + JDK-8320836: jtreg gtest runs should limit heap size
    + JDK-8325766: Extend CertificateBuilder to create trust and
    end entity certificates programmatically
    + JDK-8333526: Restructure java/nio/channels/DatagramChannel/
    /StressNativeSignal.java to a fail fast exception handling
    policy
    + JDK-8333783: java/nio/channels/FileChannel/directio/
    /DirectIOTest.java is unstable with AV software
    + JDK-8334238: Enhance AddLShortcutTest jpackage test
    + JDK-8335986: Test javax/swing/JCheckBox/4449413/
    /bug4449413.java fails on Windows 11 x64 because RBMenuItem's
    and CBMenuItem's checkmark on the left side are not visible
    + JDK-8341496: Improve JMX connections
    + JDK-8343218: Add option to disable allocating interface and
    abstract classes in non-class metaspace
    + JDK-8343546: GHA: Cache required dependencies in master-branch
    workflow
    + JDK-8345810: Custom launchers must be linked with pthread to
    avoid dynamic linker issues
    + JDK-8346753: Test javax/swing/JMenuItem/RightLeftOrientation/
    /RightLeftOrientation.java fails on Windows Server 2025 x64
    because the icons of RBMenuItem and CBMenuItem are not visible
    in Nimbus LookAndFeel
    + JDK-8346839: [TESTBUG] "java/awt/textfield/setechochartest4/
    /setechochartest4.java" failed because the test frame
    disappears on clicking "Click Several Times" button
    + JDK-8346884: Add since checker test to jdk.editpad
    + JDK-8346952: GetGraphicsStressTest.java fails: Native
    resources unavailable
    + JDK-8347277: java/awt/Focus/ComponentLostFocusTest.java fails
    intermittently
    + JDK-8349188: LineBorder does not scale correctly
    + JDK-8350621: Code cache stops scheduling GC
    + JDK-8351487: [ubsan] jvmti.h runtime error: load of value
    which is not a valid value
    + JDK-8352016: Improve
    java/lang/RuntimeTests/RuntimeExitLogTest.java
    + JDK-8354348: Enable Extended EVEX to REX2/REX demotion for
    commutative operations with same dst and src2
    + JDK-8354415: [Ubuntu25.04] api/java_awt/GraphicsDevice/
    /indexTGF.html#SetDisplayMode -
    setDisplayMode_REFRESH_RATE_UNKNOWN fails: Height is different
    on vnc
    + JDK-8354447: Missing test for retroactive
    @SuppressWarnings("dangling-doc-comments") behavior
    + JDK-8354646: java.awt.TextField allows to identify the spaces
    in a password when double clicked at the starting and end of
    the text
    + JDK-8355478: DoubleActionESC.java fails intermittently
    + JDK-8356324: JVM crash (SIGSEGV at
    ClassListParser::resolve_indy_impl) during -Xshare:dump
    starting from 21.0.5
    + JDK-8356897: Update NSS library to 3.111
    + JDK-8357064: cds/appcds/ArchiveRelocationTest.java failed
    with missing expected output
    + JDK-8357141: Update to use jtreg 7.5.2
    + JDK-8357382: runtime/cds/appcds/aotClassLinking/
    /BulkLoaderTest.java#aot fails with Xcomp and C1
    + JDK-8357396: Refactor nmethod::make_not_entrant to use Enum
    instead of "const char*"
    + JDK-8357691: File blocked.certs contains bad content when
    boot jdk 25 is used, sun/security/lib/CheckBlockedCerts.java
    failing
    + JDK-8357694: RISC-V: Several IR verification tests fail when
    vlen=128
    + JDK-8357799: Improve instructions for
    JFileChooser/HTMLFileName.java
    + JDK-8357816: Add test from JDK-8350576
    + JDK-8357822: C2: Multiple string optimization tests are no
    longer testing string concatenation optimizations
    + JDK-8357959: (bf) ByteBuffer.allocateDirect initialization
    can result in large TTSP spikes
    + JDK-8358048: java/net/httpclient/HttpsTunnelAuthTest.java
    incorrectly calls Thread::stop
    + JDK-8358340: Support CDS heap archive with Generational
    Shenandoah
    + JDK-8358532: JFileChooser in GTK L&amp;F still displays HTML
    filename
    + JDK-8358535: Changes in ClassValue (JDK-8351996) caused a
    1-9% regression in Renaissance-PageRank
    + JDK-8358556: Assert when running with -XX:-UseLibmIntrinsic
    + JDK-8358685: [TEST] AOTLoggingTag.java failed with missing
    log message
    + JDK-8358697: TextLayout/MyanmarTextTest.java passes if no
    Myanmar font is found
    + JDK-8358723: jpackage signing issues: the main launcher
    doesn't have entitlements
    + JDK-8358748: Large page size initialization fails with assert
    "page_size must be a power of 2"
    + JDK-8358751: C2: Recursive inlining check for compiled lambda
    forms is broken
    + JDK-8358813: JPasswordField identifies spaces in password via
    delete shortcuts
    + JDK-8359061: Update and ProblemList manual test
    java/awt/Cursor/CursorDragTest/ListDragCursor.java
    + JDK-8359104: gc/TestAlwaysPreTouchBehavior.java#&lt;gcname&gt;
    fails on Linux
    + JDK-8359105: RISC-V: No need for acquire fence in safepoint
    poll during JNI calls
    + JDK-8359127: Amend java/nio/channels/DatagramChannel/
    /PromiscuousIPv6.java to use @requires for OS platform
    selection
    + JDK-8359167: Remove unused test/hotspot/jtreg/vmTestbase/nsk/
    /share/jpda/BindServer.java
    + JDK-8359207: Remove runtime/signal/TestSigusr2.java since it
    is always skipped
    + JDK-8359423: Improve error message in case of missing jsa
    shared archive
    + JDK-8359428: Test 'javax/swing/JTabbedPane/bug4499556.java'
    failed because after selecting one of L&amp;F items, the test case
    automatically failed when clicking on L&amp;F Menu button again
    + JDK-8359449: [TEST] open/test/jdk/java/io/File/SymLinks.java
    Refactor extract method for Windows specific test
    + JDK-8359477: com/sun/net/httpserver/Test12.java appears to
    have a temp file race
    + JDK-8359501: Enhance Handling of URIs
    + JDK-8359687: Use PassFailJFrame for
    java/awt/print/Dialog/DialogType.java
    + JDK-8359690: New test TestCPUTimeSampleThrottling still fails
    intermittently
    + JDK-8359735: [Ubuntu 25.10] java/lang/ProcessBuilder/
    /Basic.java, java/lang/ProcessHandle/InfoTest.java fail due to
    rust-coreutils
    + JDK-8359827: Test runtime/Thread/ThreadCountLimit.java need
    loop increasing the limit
    + JDK-8360022: ClassRefDupInConstantPoolTest.java fails when
    running in repeat
    + JDK-8360090: [TEST] RISC-V: disable some cds tests on qemu
    + JDK-8360178: TestArguments.atojulong gtest has incorrect
    format string
    + JDK-8360219: [AIX] assert(locals_base &gt;= l2) failed: bad
    placement
    + JDK-8360255: runtime/jni/checked/TestLargeUTF8Length.java
    fails with -XX:-CompactStrings
    + JDK-8360408: [TEST] Use @requires tag instead of exiting
    based on "os.name" property value for
    sun/net/www/protocol/file/FileURLTest.java
    + JDK-8360411: [TEST] open/test/jdk/java/io/File/
    /MaxPathLength.java Refactor extract method to encapsulate
    Windows specific test logic
    + JDK-8360518: Docker tests do not work when asan is configured
    + JDK-8360520: RISC-V: C1: Fix primitive array clone intrinsic
    regression after JDK-8333154
    + JDK-8360664: Null pointer dereference in src/hotspot/share/
    /prims/jvmtiTagMap.cpp in
    IterateOverHeapObjectClosure::do_object()
    + JDK-8360783: CTW: Skip deoptimization between tiers
    + JDK-8360791: [ubsan] Adjust signal handling
    + JDK-8360867: CTW: Disable inline cache verification
    + JDK-8360981: Remove use of Thread.stop in
    test/jdk/java/net/Socket/DeadlockTest.java
    + JDK-8361112: Use exact float -&gt; Float16 conversion method in
    Float16 tests
    + JDK-8361180: Disable CompiledDirectCall verification with
  - VerifyInlineCaches
    + JDK-8361198: [AIX] fix misleading error output in
    thread_cpu_time_unchecked
    + JDK-8361211: C2: Final graph reshaping generates unencodeable
    klass constants
    + JDK-8361215: Add AOT test case: verification constraint
    classes are excluded
    + JDK-8361253: CommandLineOptionTest library should report
    observed values on failure
    + JDK-8361255: CTW: Tolerate more NCDFE problems
    + JDK-8361298: SwingUtilities/bug4967768.java fails where
    character P is not underline
    + JDK-8361314: Test serviceability/jvmti/VMEvent/MyPackage/
    /VMEventRecursionTest.java FATAL ERROR in native method:
    Failed during the GetClassSignature call
    + JDK-8361367: AOT ExcludedClasses.java test failed with
    missing constant pool logs
    + JDK-8361423: Add IPSupport::printPlatformSupport to
    java/net/NetworkInterface/IPv4Only.java
    + JDK-8361449: RISC-V: Code cleanup for native call
    + JDK-8361478: GHA: Use MSYS2 from GHA runners
    + JDK-8361494: [IR Framework] Escape too much in replacement of
    placeholder
    + JDK-8361497: Scoped Values: orElse and orElseThrow do not
    access the cache
    + JDK-8361504: RISC-V: Make C1 clone intrinsic platform guard
    more specific
    + JDK-8361520: Stabilize SystemGC benchmarks
    + JDK-8361599: [PPC64] enable missing tests via jtreg requires
    + JDK-8361711: Add library name configurability to
    PKCS11Test.java
    + JDK-8361748: Enforce limits on the size of an XBM image
    + JDK-8361839: Problemlist BogusFocusableWindowState due to
    failures in the CI pipeline
    + JDK-8361868: [GCC static analyzer] complains about missing
    calloc - NULL checks in p11_util.c
    + JDK-8361871: [GCC static analyzer] complains about use of
    uninitialized value ckpObject in p11_util.c
    + JDK-8361888: [GCC static analyzer] ProcessImpl_md.c
    Java_java_lang_ProcessImpl_forkAndExec error: use of
    uninitialized value '*(ChildStuff *)p.mode
    + JDK-8361892: AArch64: Incorrect matching rule leading to
    improper oop instruction encoding
    + JDK-8361897: gc/z/TestUncommit.java fails with Uncommitted
    too slow
    + JDK-8361948: Shenandoah: region free capacity unit mismatch
    + JDK-8361950: Update to use jtreg 8
    + JDK-8361959: [GCC static analyzer] java_props_md.c  leak of
    'temp'  variable is reported
    + JDK-8362107: Update the Jan CPU26_01 release date in master
    branch after forking Oct CPU25_10
    + JDK-8362123: ClassLoader Leak via
    Executors.newSingleThreadExecutor(...)
    + JDK-8362169: Pointer passed to upcall may get wrong scope
    + JDK-8362204: test/jdk/sun/awt/font/TestDevTransform.java
    fails on Ubuntu 24.04
    + JDK-8362207: Add more test cases for possible double-rounding
    in fma
    + JDK-8362282: runtime/logging/StressAsyncUL.java failed with
    exitValue = 134
    + JDK-8362308: Enhance Bitmap operations
    + JDK-8362379: Test serviceability/HeapDump/
    /UnmountedVThreadNativeMethodAtTop.java should mark as /native
    + JDK-8362390: AIX make fails in awt_GraphicsEnv.c
    + JDK-8362482: [TESTBUG] serviceability/HeapDump/
    /UnmountedVThreadNativeMethodAtTop.java: System.gc() does not
    provide full GC
    + JDK-8362501: Update test/hotspot/jtreg/applications/jcstress/
    /README
    + JDK-8362515: RISC-V: cleanup NativeFarCall
    + JDK-8362516: Support of GCC static analyzer (-fanalyzer)
    + JDK-8362530: VM crash with -XX:+PrintTieredEvents when
    collecting AOT profiling
    + JDK-8362532: Test gc/g1/plab/* duplicate command-line options
    + JDK-8362533: Tests sun/management/jmxremote/bootstrap/*
    duplicate VM flags
    + JDK-8362581: Timeouts in
    java/nio/channels/SocketChannel/OpenLeak.java on UNIX
    + JDK-8362582: GHA: Increase bundle retention time to deal with
    infra overload better
    + JDK-8362596: RISC-V: Improve _vectorizedHashCode intrinsic
    + JDK-8362602: Add test.timeout.factor to CompileFactory to
    avoid test timeouts
    + JDK-8362632: Improve HttpServer Request handling
    + JDK-8362834: Several runtime/Thread tests should mark as
    /native
    + JDK-8362836: JFR: Broken pipe in
    jdk/jfr/event/io/TestIOTopFrame.java
    + JDK-8362838: RISC-V: Incorrect matching rule leading to
    improper oop instruction encoding
    + JDK-8362855: Test java/net/ipv6tests/TcpTest.java should
    report SkippedException when there no ia4addr  or ia6addr
    + JDK-8362889: [GCC static analyzer] leak in
    libstringPlatformChars.c
    + JDK-8362972: C2 fails with unexpected node in SuperWord
    truncation: IsFiniteF, IsFiniteD
    + JDK-8363676: [GCC static analyzer] missing return value check
    of malloc in OGLContext_SetTransform
    + JDK-8363696: Update the release version and date for OpenJDK
    25u
    + JDK-8363720: Follow up to JDK-8360411 with post review
    comments
    + JDK-8363895: Minimal build fails with slowdebug builds after
    JDK-8354887
    + JDK-8363898: RISC-V: TestRangeCheckHoistingScaledIV.java
    fails after JDK-8355293 when running without RVV
    + JDK-8363910: Avoid tuning for Power10 CPUs on Linux ppc64le
    when gcc &lt; 10 is used
    + JDK-8363928: Specifying AOTCacheOutput with a blank path
    causes the JVM to crash
    + JDK-8363965: GHA: Switch cross-compiling sysroots to Debian
    bookworm
    + JDK-8363966: GHA: Switch cross-compiling sysroots to Debian
    trixie
    + JDK-8364090: Dump JFR recording on CrashOnOutOfMemoryError
    + JDK-8364111: InstanceMirrorKlass iterators should handle CDS
    and hidden classes consistently
    + JDK-8364114: Test
    TestHugePageDecisionsAtVMStartup.java#LP_enabled fails when no
    free hugepage
    + JDK-8364120: RISC-V: unify the usage of
    MacroAssembler::instruction_size
    + JDK-8364150: RISC-V: Leftover for JDK-8343430 removing old
    trampoline call
    + JDK-8364177: JDK fails to build due to undefined symbol in
    libpng on LoongArch64
    + JDK-8364184: [REDO] AArch64: [VectorAPI] sve vector math
    operations are not supported after JDK-8353217
    + JDK-8364190: JFR: RemoteRecordingStream withers don't work
    + JDK-8364198: NMT should have a better corruption message
    + JDK-8364199: Enhance list of environment variables printed in
    hserr/hsinfo file
    + JDK-8364212: Shenandoah: Rework archived objects loading
    + JDK-8364214: Enhance polygon data support
    + JDK-8364235: Fix for JDK-8361447 breaks the alignment
    requirements for GuardedMemory
    + JDK-8364257: JFR: User-defined events and settings with a
    one-letter name cannot be configured
    + JDK-8364263: HttpClient: Improve encapsulation of ProxyServer
    + JDK-8364296: Set IntelJccErratumMitigation flag ergonomically
    + JDK-8364352: Some tests fail when using a limited number of
    pregenerated .jsa CDS archives
    + JDK-8364454: ProblemList runtime/cds/DeterministicDump.java
    on macos for JDK-8363986
    + JDK-8364503: gc/g1/TestCodeCacheUnloadDuringConcCycle.java
    fails because of race printing to stdout
    + JDK-8364514: [asan] runtime/jni/checked/
    /TestCharArrayReleasing.java heap-buffer-overflow
    + JDK-8364556: JFR:  Disable SymbolTableStatistics and
    StringTableStatistics in default.jfc
    + JDK-8364597: Replace THL A29 Limited with Tencent
    + JDK-8364611: (process) Child process SIGPIPE signal
    disposition should be default
    + JDK-8364660: ClassVerifier::ends_in_athrow() should be removed
    + JDK-8364764: java/nio/channels/vthread/BlockingChannelOps.java
    subtests timed out
    + JDK-8364786: Test java/net/vthread/HttpALot.java
    intermittently fails - 24999 handled, expected 25000
    + JDK-8364984: Many jpackage tests are failing on Linux after
    JDK-8334238
    + JDK-8364993: JFR: Disable jdk.ModuleExport in default.jfc
    + JDK-8364996: java/awt/font/FontNames/LocaleFamilyNames.java
    times out on Windows
    + JDK-8365058: Enhance CopyOnWriteArraySet
    + JDK-8365071: ARM32: JFR intrinsic jvm_commit triggers C2
    regalloc assert
    + JDK-8365086: CookieStore.getURIs() and get(URI) should return
    an immutable List
    + JDK-8365165: Zap C-heap memory at delete/free
    + JDK-8365166: ARM32: missing os::fetch_bcp_from_context
    implementation
    + JDK-8365168: Use 64-bit aligned addresses for CK_ULONG access
    in PKCS11 native key code
    + JDK-8365200: RISC-V: compiler/loopopts/superword/
    /TestGeneralizedReductions.java fails with Zvbb and vlen=128
    + JDK-8365206: RISC-V: compiler/c2/irTests/
    /TestFloat16ScalarOperations.java is failing on riscv64
    + JDK-8365240: [asan] exclude some tests when using asan
    enabled binaries
    + JDK-8365260: Problemlist 1 test due to failures in the CI
    pipeline
    + JDK-8365265: x86 short forward jump exceeds 8-bit offset in
    methodHandles_x86.cpp when using Intel APX
    + JDK-8365271: Improve Swing supports
    + JDK-8365280: Enhance JOptionPane
    + JDK-8365302: RISC-V: compiler/loopopts/superword/
    /TestAlignVector.java fails when vlen=128
    + JDK-8365307: AIX make fails after JDK-8364611
    + JDK-8365312: GCC 12 cannot compile SVE on aarch64 with
    auto-var-init pattern
    + JDK-8365389: Remove static color fields from SwingUtilities3
    and WindowsMenuItemUI
    + JDK-8365425: [macos26] javax/swing/JInternalFrame/8160248/
    /JInternalFrameDraggingTest.java fails on macOS 26
    + JDK-8365442: [asan] runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java fails
    + JDK-8365468: EagerJVMCI should only apply to the
    CompilerBroker JVMCI runtime
    + JDK-8365487: [asan] some oops (mode) related tests fail
    + JDK-8365543: UnixNativeDispatcher.init should lookup open64at
    and stat64at on AIX
    + JDK-8365571: GenShen: PLAB promotions may remain disabled for
    evacuation threads
    + JDK-8365615: Improve JMenuBar/RightLeftOrientation.java
    + JDK-8365638: JFR: Add --exact for debugging out-of-order
    events
    + JDK-8365660: test/jdk/sun/security/pkcs11/KeyAgreement/ tests
    skipped without SkipException
    + JDK-8365700: Jar --validate without any --file option leaves
    around a temporary file /tmp/tmpJar&lt;number&gt;.jar
    + JDK-8365726: Test crashed with assert in C1 thread: Possible
    safepoint reached by thread that does not allow it
    + JDK-8365772: RISC-V: correctly prereserve NaN payload when
    converting from float to float16 in vector way
    + JDK-8365790: Shutdown hook for application image does not
    work on Windows
    + JDK-8365811: test/jdk/java/net/CookieHandler/B6644726.java
    failure - "Should have 5 cookies. Got only 4, expires probably
    didn't parse correctly"
    + JDK-8365823: Revert storing abstract and interface Klasses to
    non-class metaspace
    + JDK-8365834: Mark java/net/httpclient/ManyRequests.java  as
    intermittent
    + JDK-8365841: RISC-V: Several IR verification tests fail after
    JDK-8350960 without Zvfh
    + JDK-8365844: RISC-V: TestBadFormat.java fails when running
    without RVV
    + JDK-8365863: /test/jdk/sun/security/pkcs11/Cipher tests skip
    without SkippedException
    + JDK-8365913: Support latest MSC_VER in abstract_vm_version.cpp
    + JDK-8365919: Replace currentTimeMillis with nanoTime in
    Stresser.java
    + JDK-8365926: RISC-V: Performance regression in renaissance
    (chi-square)
    + JDK-8365956: GenShen: Adaptive tenuring threshold algorithm
    may raise threshold prematurely
    + JDK-8365983: Tests should throw SkippedException when SCTP
    not supported
    + JDK-8366028: MethodType::fromMethodDescriptorString should
    not throw UnsupportedOperationException for invalid
    descriptors
    + JDK-8366029: Do not add -XX:VerifyArchivedFields by default
    to CDS tests
    + JDK-8366031: Mark com/sun/nio/sctp/SctpChannel/
    /CloseDescriptors.java as intermittent
    + JDK-8366075: Problemlist 2 tests due to failures in the CI
    pipeline
    + JDK-8366092: [GCC static analyzer] UnixOperatingSystem.c
    warning: use of uninitialized value 'systemTicks'
    + JDK-8366147: ZGC:
    ZPageAllocator::cleanup_failed_commit_single_partition may
    leak memory
    + JDK-8366159: SkippedException is treated as a pass for
    pkcs11/KeyStore, pkcs11/SecretKeyFactory and
    pkcs11/SecureRandom
    + JDK-8366208: Unexpected exception in
    sun.java2d.cmm.lcms.LCMSImageLayout
    + JDK-8366229: runtime/Thread/TooSmallStackSize.java runs with
    all collectors
    + JDK-8366250: Problemlist 3 tests due to failures in the CI
    pipeline
    + JDK-8366340: Problemlist 1 test due to failures in the CI
    pipeline
    + JDK-8366342: Key generator and key pair generator tests
    skipping, but showing as passed
    + JDK-8366359: Test should throw SkippedException when there is
    no lpstat
    + JDK-8366365: [test] test/lib-test/jdk/test/whitebox/
    /CPUInfoTest.java should be updated
    + JDK-8366434: THP not working properly with G1 after
    JDK-8345655
    + JDK-8366446: Test java/awt/geom/ConcurrentDrawPolygonTest.java
    fails intermittently
    + JDK-8366537: Test "java/util/TimeZone/
    /DefaultTimeZoneTest.java" is not updating the zone ID as
    expected
    + JDK-8366558: Gtests leave /tmp/cgroups-test* files
    + JDK-8366694: Test JdbStopInNotificationThreadTest.java timed
    out after 60 second
    + JDK-8366750: Remove test 'java/awt/Choice/
    /ChoiceMouseWheelTest/ChoiceMouseWheelTest.java' from
    problemlist
    + JDK-8366764: Deproblemlist java/awt/ScrollPane/
    /ScrollPositionTest.java
    + JDK-8366800: Problemlist 1 test due to failures in the CI
    pipeline
    + JDK-8366844: Update and automate
    MouseDraggedOriginatedByScrollBarTest.java
    + JDK-8366850: Test com/sun/jdi/
    /JdbStopInNotificationThreadTest.java failed
    + JDK-8366893: java/lang/Thread/virtual/stress/
    /GetStackTraceALotWhenPinned.java timed out on macos-aarch64
    + JDK-8366948: AOT cache creation crashes when iterating
    training data
    + JDK-8366980: TestTransparentHugePagesHeap.java fails when run
    with -UseCompressedOops
    + JDK-8367017: Remove legacy checks from WrappedToolkitTest and
    convert from bash
    + JDK-8367021: Regression in LocaleDataTest refactoring
    + JDK-8367048: RISC-V: Correct pipeline descriptions of the
    architecture
    + JDK-8367066: RISC-V: refine register selection in
    MacroAssembler:: decode_klass_not_null
    + JDK-8367098: RISC-V: sync CPU features with related JVM flags
    for dependant ones
    + JDK-8367131: Test com/sun/jdi/ThreadMemoryLeakTest.java fails
    on 32 bits
    + JDK-8367133: DTLS: fragmentation of Finished message results
    in handshake failure
    + JDK-8367137: RISC-V: Detect Zicboz block size via hwprobe
    + JDK-8367237: Thread-Safety Usage Warning for
    java.text.Collator Classes
    + JDK-8367277: Fix copyright header in
    JMXInterfaceBindingTest.java
    + JDK-8367313: CTW: Execute in AWT headless mode
    + JDK-8367333: C2: Vector math operation intrinsification
    failure
    + JDK-8367348: Enhance PassFailJFrame to support links in HTML
    + JDK-8367378: GenShen: Missing timing stats when old mark
    buffers are flushed during final update refs
    + JDK-8367384: The ICC_Profile class may throw exceptions
    during serialization
    + JDK-8367598: Switch to CRC32C for SEED calculation in
    jdk.test.lib.Utils
    + JDK-8367616: RISC-V: Auto-enable Zicboz extension for debug
    builds
    + JDK-8367689: Revert removal of several compilation-related
    vmStructs fields
    + JDK-8367692: RISC-V: Align post call nop
    + JDK-8367694: Fix jtreg test failure when Intel APX is enabled
    for KNL platforms
    + JDK-8367780: Enable UseAPX on Intel CPUs only when both APX_F
    and APX_NCI_NDD_NF cpuid features are present
    + JDK-8367782: VerifyJarEntryName.java: Fix modifyJarEntryName
    to operate on bytes and re-introduce verifySignatureEntryName
    + JDK-8367869: Test java/io/FileDescriptor/Sync.java timed out
    + JDK-8367904: Test java/net/InetAddress/ptr/Lookup.java should
    throw SkippedException
    + JDK-8367948: JFR: MethodTrace threshold setting has no effect
    + JDK-8367953: JFR sampler threads does not appear in thread
    dump
    + JDK-8367969: C2: compiler/vectorapi/TestVectorMathLib.java
    fails without UnlockDiagnosticVMOptions
    + JDK-8367988: NewFileSystemTests.readOnlyZipFileFailure fails
    when run by root user
    + JDK-8368032: Enhance Certificate Checking
    + JDK-8368071: Compilation throughput regressed 2X-8X after
    JDK-8355003
    + JDK-8368152: Shenandoah: Incorrect behavior at end of
    degenerated cycle
    + JDK-8368192: Test java/lang/ProcessBuilder/Basic.java#id0
    fails with Exception: Stack trace
    + JDK-8368366: RISC-V: AlignVector is mistakenly set to
    AvoidUnalignedAccesses
    + JDK-8368367: Test jdk/jfr/event/gc/detailed/
    /TestGCHeapMemoryUsageEvent.java fails  jdk.GCHeapMemoryUsage
    "expected 0 &gt; 0"
    + JDK-8368565: Adjust comment regarding dependency of libjvm.so
    to librt
    + JDK-8368606: Printer lookup returns empty on AIX platform due
    to uninitialized results list
    + JDK-8368668: Several vmTestbase/vm/gc/compact tests timed out
    on large memory machine
    + JDK-8368670: Deadlock in JFR on event register + class load
    + JDK-8368698: runtime/cds/appcds/aotCache/OldClassSupport.java
    assert(can_add()) failed: Cannot add TrainingData objects
    + JDK-8368732: RISC-V: Detect support for misaligned vector
    access via hwprobe
    + JDK-8368890: open/test/jdk/tools/jpackage/macosx/
    /NameWithSpaceTest.java fails randomly
    + JDK-8368893: RISC-V: crash after JDK-8352673 on fastdebug
    version
    + JDK-8368960: Adjust java UL logging in the build
    + JDK-8368982: Test sun/security/tools/jarsigner/EC.java
    completed and timed out
    + JDK-8369078: Fix faulty test conversion in
    IllegalCharsetName.java
    + JDK-8369184: SimpleTimeZone equals() Returns True for Unequal
    Instances with Different hashCode Values
    + JDK-8369190: JavaFrameAnchor on AArch64 has unnecessary
    barriers and wrong store order in MacroAssembler
    + JDK-8369226: GHA: Switch to MacOS 15
    + JDK-8369319: java/net/httpclient/CancelRequestTest.java fails
    intermittently
    + JDK-8369450: [Ubuntu 25.10] openjdk fails to build due to
    rust-coreutils date
    + JDK-8369487: Revert EA option for build promotion
    + JDK-8369506: Bytecode rewriting causes Java heap corruption
    on AArch64
    + JDK-8369560: Slowdebug build without CDS fails
    + JDK-8369563: Gtest dll_address_to_function_and_library_name
    has issues with stripped pdb files
    + JDK-8369616: JavaFrameAnchor on RISC-V has unnecessary
    barriers and wrong store order in MacroAssembler
    + JDK-8369656: Calling CompletableFuture.join() could execute
    task in common pool
    + JDK-8369657: [AIX] TOC overflow in static-launcher build when
    building slowdebug after JDK-8352064
    + JDK-8369853: jpackage signing tests fail after JDK-8358723
    + JDK-8369868: Compilation error in Win8365790Test.java with
    JDK-8358723 fix resulting in CI tier3 failure
    + JDK-8369946: Bytecode rewriting causes Java heap corruption
    on PPC
    + JDK-8369947: Bytecode rewriting causes Java heap corruption
    on RISC-V
    + JDK-8369979: Flag UsePopCountInstruction was accidentally
    disabled on PPC64
    + JDK-8370048: Shenandoah: Deprecated ShenandoahPacing option
    + JDK-8370049: [s390x] G1 barrier compareAndExchange does not
    return old value when compareExchange fails
    + JDK-8370318: AES-GCM vector intrinsic may read out of bounds
    (x86_64, AVX-512)
    + JDK-8370331: Problemlist 2 tests due to failures in the CI
    pipeline
    + JDK-8370428: Change milestone to fcs for all releases
    + JDK-8370465: Right to Left Orientation Issues with MenuItem
    Component
    + JDK-8371094: --mac-signing-key-user-name no longer works
    + JDK-8371425: Include folder names in vscode workspace virtual
    folders
    + JDK-8371697: test/jdk/java/nio/file/FileStore/Basic.java
    fails after 8360887 on linux
    + JDK-8372753: jpackage ignores --file-associations option with
    predefined app image</changelog>
  <changelog author="fstrba@suse.com" date="1773662400">- Provide the timezone-java and tzdata-java (jsc#PED-15898)</changelog>
  <changelog author="fstrba@suse.com" date="1774353600">- Migrate to the new logic of FIPS patch developed by RedHat in
  https://github.com/rh-openjdk/jdk/tree/fips-25u
- Add the sources of /nss-native-fips-key-import-export-adapter
  * This native library is an adapter for OpenJDK to use the NSS
    PKCS #11 software token (libsoftokn3.so) in FIPS mode. It
    provides support to import and export secret and private key
    material in plain. This enables Java applications to manage
    PKCS #12 key stores through the java.security.KeyStore API and
    benefit from FIPS-certified cryptography. Note: this library
    replaces the Java FIPS Key Importer Exporter in previous
    versions of this package (FIPSKeyImporter.java).
- Modified patch:
  * fips.patch
    + diff the https://github.com/rh-openjdk/jdk/tree/fips-25u
    to the release tag jdk-25.0.2-ga and adapt for SUSE
- Added patches:
  * nssadapter-Allow-overriding-of-gcc-name.patch
    + Allow specifying CC variables on system where the default
    gcc is too old for the features needed in the nssadapter
  * nssadapter-Fix-build-on-openSUSE.patch
    + make the build work well with SUSE packaging of NSS
  * 0001-Don-t-make-missing-system-crypto-policies-fatal.patch
    + prevent OpenJDK from throwing exception if an "include"d
    security config file is missing.
    + Allows the same package running on systems that don't provide
    the crypto-policies package as well as on those that provide
    it
- Add create-crypto-properties-files.bash that generates during the
  build the config files for different fips and non-fips scenarios
- Add TestSecurityProperties.java to test the loading of system
  security properties where applicable</changelog>
  <changelog author="fstrba@suse.com" date="1777204800">- Update to upstream tag jdk-25.0.3+9 (April 2026 CPU)
  * CVEs
    + CVE-2026-22007 (bsc#1262490)
    + CVE-2026-22008 (bsc#1262493)
    + CVE-2026-22013 (bsc#1262494)
    + CVE-2026-22016 (bsc#1262495)
    + CVE-2026-22018 (bsc#1262496)
    + CVE-2026-22021 (bsc#1262497)
    + CVE-2026-23865 (bsc#1259118)
    + CVE-2026-34268 (bsc#1262500)
    + CVE-2026-34282 (bsc#1262501)
  * Changes
    + JDK-7191877: TEST_BUG: java/rmi/transport/checkLeaseInfoLeak/
    /CheckLeaseLeak.java failing intermittently
    + JDK-8030957: AIX: Implement OperatingSystemMXBean
    .getSystemCpuLoad() and .getProcessCpuLoad() on AIX
    + JDK-8068378: [TEST_BUG]The java/awt/Modal/PrintDialogsTest/
    /PrintDialogsTest.java instruction need to update
    + JDK-8183336: Better cleanup for jdk/test/java/lang/module/
    /customfs/ModulesInCustomFileSystem.java
    + JDK-8212084: G1: Implement UseGCOverheadLimit
    + JDK-8244336: Restrict algorithms at JCE layer
    + JDK-8246037: Shenandoah: update man pages to mention
  - XX:+UseShenandoahGC
    + JDK-8255463: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed with
    ThreadTimeoutException
    + JDK-8256289: java/awt/Focus/AppletInitialFocusTest/
    /AppletInitialFocusTest1.java failed with "RuntimeException:
    Wrong focus owner:
    java.awt.Button[button1,41,36,56x23,label=Button1]"
    + JDK-8274082: Wrong test name in jtreg run tag for
    java/awt/print/PrinterJob/SwingUIText.java
    + JDK-8286258: [Accessibility,macOS,VoiceOver] VoiceOver reads
    the spinner value wrong and sometime partially
    + JDK-8286865: vmTestbase/vm/mlvm/meth/stress/jni/nativeAndMH/
    /Test.java fails with Out of space in CodeCache
    + JDK-8287062: com/sun/jndi/ldap/LdapPoolTimeoutTest.java
    failed due to different timeout message
    + JDK-8293484: AArch64:
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails on CPU
    with SHA512 feature support
    + JDK-8299304: Test "java/awt/print/PrinterJob/
    /PageDialogTest.java" fails on macOS 13 x64 because the Page
    Dialog blocks the Toolkit
    + JDK-8307495: Specialize atomic bitset functions for aix-ppc
    + JDK-8313770: jdk/internal/platform/docker/
    /TestSystemMetrics.java fails on Ubuntu
    + JDK-8316274: javax/swing/ButtonGroup/
    /TestButtonGroupFocusTraversal.java fails in Ubuntu 23.10 with
    Motif LAF
    + JDK-8317838: java/nio/channels/Channels/
    /SocketChannelStreams.java running into timeout (aix)
    + JDK-8318662: Refactor some jdk/java/net/httpclient/http2
    tests to JUnit
    + JDK-8320677: Printer tests use invalid '@run main/manual=yesno
    + JDK-8333857: Test sun/security/ssl/SSLSessionImpl/
    /ResumeChecksServer.java failed: Existing session was used
    + JDK-8333871: Check return values of sysinfo
    + JDK-8334928: Test sun/security/ssl/SSLSocketImpl/
    /ReuseAddr.java failed: java.net.BindException: Address
    already in use
    + JDK-8335646: Nimbus : JLabel not painted with LAF defined
    foreground color on Ubuntu 24.04
    + JDK-8336695: Update Commons BCEL to Version 6.10.0
    + JDK-8339791: Refactor MiscUndecorated/ActiveAWTWindowTest.java
    + JDK-8341039: compiler/cha/TypeProfileFinalMethod.java fails
    with assertEquals expected: 0 but was: 2
    + JDK-8342175: MemoryEaterMT fails intermittently with
    ExceptionInInitializerError
    + JDK-8342401: [TESTBUG] javax/swing/JSpinner/8223788/
    /JSpinnerButtonFocusTest.java test fails in ubuntu 22.04 on
    SBR Hosts
    + JDK-8342640: GenShen: Silently ignoring
    ShenandoahGCHeuristics considered poor user-experience
    + JDK-8342659: Test vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    failed: Class nsk.share.jdi.TestClass1 was not unloaded
    + JDK-8343316: Review and update tests using explicit provider
    names
    + JDK-8343340: Swapping checking do not work for
    MetricsMemoryTester failcount
    + JDK-8343474: [updates] Customize README.md to specifics of
    update project
    + JDK-8344073: Test runtime/cds/appcds/
    /TestParallelGCWithCDS.java#id0 failed
    + JDK-8346154: [XWayland] Some tests fail intermittently in the
    CI, but not locally
    + JDK-8346962: Test CRLReadTimeout.java fails with -Xcomp on a
    fastdebug build
    + JDK-8348014: Enhance certificate processing
    + JDK-8349192: jvmti/scenarios/contention/TC05/tc05t001 fails:
    ERROR: tc05t001.cpp, 281: (waitedThreadCpuTime -
    waitThreadCpuTime) &lt; (EXPECTED_ACCURACY * 1000000)
    + JDK-8352149: Test java/awt/Frame/MultiScreenTest.java fails:
    Window list is empty
    + JDK-8353755: Add a helper method to Util - findComponent()
    + JDK-8354244: Use random data in MinMaxRed_Long data arrays
    + JDK-8354469: Keytool exposes the password in plain text when
    command is piped using | grep
    + JDK-8354894: java/lang/Thread/virtual/Starvation.java timeout
    on server with high CPUs
    + JDK-8354937: Cleanup some sparc related coding in os_linux
    + JDK-8356548: Use ClassFile API instead of ASM to transform
    classes in tests
    + JDK-8356868: Not all cgroup parameters are made available
    + JDK-8357277: Update OpenSSL library for interop tests
    + JDK-8357380: java/lang/StringBuilder/RacingSBThreads.java
    times out with C1
    + JDK-8357390: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java Test failing on Ubuntu 24.04 Vm Hosts
    used by Oracle's internal CI system
    + JDK-8357470: src/java.base/share/classes/sun/security/util/
    /Debug.java implement the test for args.toLowerCase
    + JDK-8357570: [macOS] os::Bsd::available_memory() might return
    too low values
    + JDK-8357591: Re-enable CDS test cases for jvmci after
    JDK-8345826
    + JDK-8358058: sun/java2d/OpenGL/DrawImageBg.java Test fails
    intermittently
    + JDK-8358159: Empty mode/padding in cipher transformations
    + JDK-8358529: GenShen: Heuristics do not respond to changes in
    SoftMaxHeapSize
    + JDK-8358679: [asan] vmTestbase/nsk/jvmti tests show memory
    issues
    + JDK-8358686: CDS and AOT can cause buffer truncation warning
    even when logging is disabled
    + JDK-8358735: GenShen: block_start() may be incorrect after
    class unloading
    + JDK-8358756: [s390x] Test StartupOutput.java crash due to
    CodeCache size
    + JDK-8358801: javac produces class that does not pass verifier.
    + JDK-8359064: Expose reason for marking nmethod non-entrant to
    JVMCI client
    + JDK-8359182: Use @requires instead of SkippedException for
    MaxPath.java
    + JDK-8359388: Stricter checking for cipher transformations
    + JDK-8359418: Test "javax/swing/text/GlyphView/bug4188841.java"
    failed because the phrase of text pane does not match the
    instructions
    + JDK-8359472: JVM crashes when attaching a dynamic agent
    before JVMTI_PHASE_LIVE
    + JDK-8359707: Add classfile modification code to
    RedefineClassHelper
    + JDK-8359868: Shenandoah: Free threshold heuristic does not
    use SoftMaxHeapSize
    + JDK-8359978: Test javax/net/ssl/SSLSocket/Tls13PacketSize.java
    failed again with java.net.SocketException: An established
    connection was aborted by the software in your host machine
    + JDK-8360049: CodeInvalidationReasonTest.java fails with ZGC
    on AArch64
    + JDK-8360160: ubuntu-22-04 machine is failing client tests
    + JDK-8360169: Problem list CodeInvalidationReasonTest.java on
    linux-riscv64 until JDK-8360168 is fixed
    + JDK-8360271: String.indexOf intrinsics fail with
    +EnableX86ECoreOpts and -CompactStrings
    + JDK-8360395: sun/security/tools/keytool/i18n.java user
    country is current user location instead of the language
    + JDK-8360539: DTLS handshakes fails due to improper cookie
    validation logic
    + JDK-8360562: sun/security/tools/keytool/i18n.java add an
    ability to add comment for failures
    + JDK-8360702: runtime/Thread/AsyncExceptionTest.java timed out
    + JDK-8360882: Tests throw SkippedException when they should
    fail
    + JDK-8361067: Test ExtraButtonDrag.java requires frame.dispose
    in finally block
    + JDK-8361106: [TEST] com/sun/net/httpserver/Test9.java fails
    with java.nio.file.FileSystemException
    + JDK-8361363: ShenandoahAsserts::print_obj() does not work for
    forwarded objects and UseCompactObjectHeaders
    + JDK-8361381: GlyphLayout behavior differs on JDK 11+ compared
    to JDK 8
    + JDK-8361492: [IR Framework] Has too restrictive regex for
    load and store
    + JDK-8361521: BogusFocusableWindowState.java fails with
    StackOverflowError on Linux
    + JDK-8361530: Test javax/swing/GraphicsConfigNotifier/
    /StalePreferredSize.java timed out
    + JDK-8361613: System.console() should only be available for
    interactive terminal
    + JDK-8361894: sun/security/krb5/config/native/
    /TestDynamicStore.java ensure that the test is run with sudo
    + JDK-8362284: RISC-V: cleanup NativeMovRegMem
    + JDK-8362979: C2 fails with unexpected node in SuperWord
    truncation: CmpLTMask, RoundF
    + JDK-8363950: Incorrect jtreg header in TestLayoutVsICU.java
    + JDK-8364373: Transform Affine transformations
    + JDK-8364465: Enhance behavior of some intrinsics
    + JDK-8364580: Test compiler/vectorization/
    /TestSubwordTruncation.java fails on platforms without
    RoundF/RoundD
    + JDK-8364741: [asan] runtime/ErrorHandling/
    /PrintVMInfoAtExitTest.java fails because output differs
    slightly
    + JDK-8364756: JFR: Improve slow tests
    + JDK-8364936: Shenandoah: Switch nmethod entry barriers to
    conc_instruction_and_data_patch
    + JDK-8365065: cancelled ForkJoinPool tasks no longer throw
    CancellationException
    + JDK-8365184: sun/tools/jhsdb/
    /HeapDumpTestWithActiveProcess.java Re-enable SerialGC flag on
    debuggee process
    + JDK-8365305: The ARIA role ‘contentinfo’ is not valid for the
    element &lt;footer&gt;
    + JDK-8365398: TEST_BUG: java/rmi/transport/checkLeaseInfoLeak/
    /CheckLeaseLeak.java failing intermittently
    + JDK-8365526: Crash with null Symbol passed to
    SystemDictionary::resolve_or_null
    + JDK-8365570: C2 fails assert(false) failed: Unexpected node
    in SuperWord truncation: CastII
    + JDK-8365776: Convert JShell tests to use JUnit instead of
    TestNG
    + JDK-8365861: test/jdk/sun/security/pkcs11/Provider/ tests
    skipped without SkippedException
    + JDK-8365972: JFR: ThreadDump and ClassLoaderStatistics events
    may cause back to back rotations
    + JDK-8366082: Improve queue size computation in CPU-time
    sampler
    + JDK-8366128: jdk/jdk/nio/zipfs/TestPosix.java::testJarFile
    uses wrong file
    + JDK-8366182: Some PKCS11Tests are being skipped when they
    shouldn't
    + JDK-8366261: Provide utility methods for
    sun.security.util.Password
    + JDK-8366278: Form control element &lt;select&gt; has no associated
    label
    + JDK-8366369: Add @requires linux for GTK L&amp;F tests
    + JDK-8366486: Test jdk/jfr/event/profiling/
    /TestCPUTimeSampleMultipleRecordings.java is timing out
    + JDK-8366733: Re-examine older java.text NF, DF, and DFS
    serialization tests
    + JDK-8366747: RISC-V: Improve VerifyMethodHandles for method
    handle linkers
    + JDK-8366817: test/jdk/javax/net/ssl/TLSCommon/interop/
    /JdkProcServer.java and JdkProcClient.java should not delete
    logs
    + JDK-8366874: Test gc/arguments/TestParallelGCErgo.java fails
    with UseTransparentHugePages
    + JDK-8366878: Improve flags of
    compiler/loopopts/superword/TestAlignVectorFuzzer.java
    + JDK-8366908: Use a different class for testing JDK-8351654
    + JDK-8366938: Test runtime/handshake/HandshakeTimeoutTest.java
    crashed
    + JDK-8366951: Test runtime/logging/StressAsyncUL.java is
    timing out
    + JDK-8367135: Test compiler/loopstripmining/
    /CheckLoopStripMining.java needs internal timeouts adjusted
    + JDK-8367271: Add parsing tests to DateFormat JMH benchmark
    + JDK-8367278: Test compiler/startup/StartupOutput.java timed
    out after completion on Windows
    + JDK-8367302: New test jdk/jfr/event/profiling/
    /TestCPUTimeSampleQueueAutoSizes.java from JDK-8366082 is
    failing
    + JDK-8367371: Remove @requires vm.opt.UseLargePages from
    InternSharedString.java test
    + JDK-8367372: Test 'test/hotspot/jtreg/gc/
    /TestObjectAlignmentCardSize.java' fails on 32 bit systems
    + JDK-8367463: Improved Arena allocations
    + JDK-8367583: sun/security/util/AlgorithmConstraints/
    /InvalidCryptoDisabledAlgos.java fails after JDK-8244336
    + JDK-8367772: Refactor createUI in PassFailJFrame
    + JDK-8367784: java/awt/Focus/InitialFocusTest/
    /InitialFocusTest1.java failed with Wrong focus owner
    + JDK-8367862: debug.cpp: Do not print help message for methods
    ifdef'd out
    + JDK-8367901: Calendar.roll(hour, 24) returns wrong result
    + JDK-8367994: test/jdk/sun/security/pkcs11/Signature/ tests
    pass when they should skip
    + JDK-8368029: Several tests in httpserver/simpleserver should
    throw SkipException
    + JDK-8368182: AOT cache creation fails with class defined by
    JNI
    + JDK-8368328: CompactNumberFormat.clone does not produce
    independent instances
    + JDK-8368335: Refactor the rest of Locale TestNG based tests
    to JUnit
    + JDK-8368498: Use JUnit instead of TestNG for jdk_text tests
    + JDK-8368500: ContextClassLoader cannot be reset on threads in
    ForkJoinPool.commonPool()
    + JDK-8368551: Core dump warning may be confusing
    + JDK-8368625: com/sun/net/httpserver/
    /ServerStopTerminationTest.java fails intermittently
    + JDK-8368677: acvp test should throw SkippedException when no
    ACVP-Server available
    + JDK-8368683: [process] Increase jtreg debug output
    maxOutputSize for TreeTest
    + JDK-8368754: runtime/cds/appcds/SignedJar.java log regex is
    too strict
    + JDK-8368787: Error reporting: hs_err files should show
    instructions when referencing code in nmethods
    + JDK-8368866: compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java intermittent timed out
    + JDK-8368882: NPE during text drawing on machine with JP locale
    + JDK-8368885: NMT CommandLine tests can check for error better
    + JDK-8368892: Make JEditorPane/TestBrowserBGColor.java headless
    + JDK-8369032: Add test to ensure serialized ICC_Profile stores
    only necessary optional data
    + JDK-8369050: DecimalFormat Rounding Errors for Fractional
    Ties Near Zero
    + JDK-8369227: Virtual thread stuck in PARKED state
    + JDK-8369255: Assess and remedy any unsafe usage of the
    Semaphores used by JFR
    + JDK-8369282: Distrust TLS server certificates anchored by
    Chunghwa ePKI Root CA
    + JDK-8369335: Two  sun/java2d/OpenGL tests fail on Windows
    after JDK-8358058
    + JDK-8369505: jhsdb jstack cannot handle continuation stub
    + JDK-8369516: Delete duplicate imaging test
    + JDK-8369575: Enhance crypto algorithm support
    + JDK-8369804: TestGenerators.java fails with
    IllegalArgumentException: bound must be greater than origin
    + JDK-8369851: Remove darcy author tags from langtools tests
    + JDK-8369858: Remove darcy author tags from jdk tests
    + JDK-8369881: C2: Unexpected node in SuperWord truncation:
    ReverseBytesS, ReverseBytesUS
    + JDK-8369911: Test sun/java2d/marlin/
    /ClipShapeTest.java#CubicDoDash, #Cubic and #Poly fail
    intermittent
    + JDK-8369991: Thread blocking during JFR emergency dump must
    be in safepoint safe state
    + JDK-8370036: TestJhsdbJstackWithVirtualThread.java fails when
    run with -showversion
    + JDK-8370064: Test runtime/NMT/
    /CheckForProperDetailStackTrace.java fails on Windows when
    using stripped pdb files
    + JDK-8370197: Add missing @Override annotations in
    com.sun.beans package
    + JDK-8370201: Test serviceability/sa/
    /TestJhsdbJstackWithVirtualThread.java fails due to VM
    warnings
    + JDK-8370203: Add jcmd AOT.end_recording diagnostic command
    + JDK-8370240: [PPC64] jhsdb jstack cannot handle continuation
    stub
    + JDK-8370242: JFR: Clear event reference eagerly when using
    EventStream
    + JDK-8370244: [PPC64] Several vector tests fail on Power8
    + JDK-8370325: G1: Disallow GC for TLAB allocation
    + JDK-8370378: Some compiler tests inadvertently exclude
    particular platforms
    + JDK-8370393: Cleanup handling of ancient Windows versions
    from GetJavaProperties java_props_md
    + JDK-8370405: C2: mismatched store from MergeStores wrongly
    scalarized in allocation elimination
    + JDK-8370492: [Linux] Update cpu shares to cpu.weight mapping
    function
    + JDK-8370511: test/jdk/javax/swing/JSlider/bug4382876.java
    does not release previously pressed keys
    + JDK-8370529: Enhance Path Factories Redux
    + JDK-8370572: Cgroups hierarchical memory limit is not honored
    after JDK-8322420
    + JDK-8370579: PPC: fix inswri immediate argument order
    + JDK-8370615: Improve Kerberos credentialing
    + JDK-8370636: com/sun/jdi/TwoThreadsTest.java should wait for
    completion of all threads
    + JDK-8370646: TestLargeUTF8Length.java needs lots of memory
    + JDK-8370649: Add intermittent tag for
    gc/shenandoah/generational/TestOldGrowthTriggers.java
    + JDK-8370708: RISC-V: Add VerifyStackAtCalls
    + JDK-8370730: Test serviceability/attach/EarlyDynamicLoad/
    /EarlyDynamicLoad.java needs to be resilient about warnings
    + JDK-8370732: Use WhiteBox.getWhiteBox().fullGC() to provoking
    gc for nsk/jvmti tests
    + JDK-8370887: DelayScheduler.replace method may break the
    4-ary heap in certain scenarios
    + JDK-8370905: Update vm.defmeth tests to use virtual threads
    + JDK-8370942: test/jdk/java/security/Provider/NewInstance.java
    and /test/jdk/java/security/cert/CertStore/NoLDAP.java may
    skip without notifying
    + JDK-8370966: Create regression test for the hierarchical
    memory limit fix in JDK-8370572
    + JDK-8370986: Enhance Zip file reading
    + JDK-8370995: Enhance ZipFile usage
    + JDK-8371014: Dump JFR recording on CrashOnOutOfMemoryError is
    incorrectly implemented
    + JDK-8371103: vmTestbase/nsk/jvmti/scenarios/events/EM02/
    /em02t006/TestDescription.java failing
    + JDK-8371262: sun/security/pkcs11/Cipher/KeyWrap tests may
    silently skip
    + JDK-8371316: Adjust assertion (GC pause time cannot be
    smaller than the sum of each phase) in G1GCPhaseTimes::print
    + JDK-8371349: Update NSS library to 3.117
    + JDK-8371364: Refactor javax/swing/JFileChooser/
    /FileSizeCheck.java to use Util.findComponent()
    + JDK-8371365: Update javax/swing/JFileChooser/bug4759934.java
    to use Util.findComponent()
    + JDK-8371366: java/net/httpclient/whitebox/
    /RawChannelTestDriver.java fails intermittently in jtreg
    timeout
    + JDK-8371368: SIGSEGV in JfrVframeStream::next_vframe() on
    arm64
    + JDK-8371383: Test sun/security/tools/jarsigner/
    /DefaultOptions.java failed due to
    CertificateNotYetValidException
    + JDK-8371385: compiler/escapeAnalysis/
    /TestRematerializeObjects.java fails in case of
  - XX:-UseUnalignedAccesses
    + JDK-8371420: Still sporadic failures of
    gc/TestAlwaysPreTouchBehavior.java#&lt;gcname&gt; on Linux after
    JDK-8359104
    + JDK-8371485: ProblemList awt/Mixing/AWT_Mixing/
    /JTableInGlassPaneOverlapping.java for linux
    + JDK-8371559: Intermittent timeouts in test
    javax/net/ssl/Stapling/HttpsUrlConnClient.java
    + JDK-8371608: Jtreg test jdk/internal/vm/Continuation/Fuzz.java
    sometimes fails with (fast)debug binaries
    + JDK-8371759: Add missing @Override annotations in
    com.sun.imageio package
    + JDK-8371769: TestMemoryInvisibleParent.java fails with
    java.nio.file.AccessDeniedException
    + JDK-8371830: Enhance certificate chain validation
    + JDK-8371854: Shenandoah: Simplify WALK_FORWARD_IN_BLOCK_START
    use
    + JDK-8371864: GaloisCounterMode.implGCMCrypt0 AVX512/AVX2
    intrinsics stubs cause AES-GCM encryption failure for certain
    payload sizes
    + JDK-8371895: Lower GCTimeLimit in TestUseGCOverheadLimit.java
    + JDK-8371935: Enhance key generation
    + JDK-8371944: AOT configuration is corrupted when app closes
    System.out
    + JDK-8371948: TestStackOverflowDuringInit.java fails xss too
    small on linux-aarch64
    + JDK-8371966: RISC-V: Incorrect pointer dereference in
    TemplateInterpreterGenerator::generate_native_entry
    + JDK-8371967: Add Visual Studio 2026 to build toolchain for
    Windows
    + JDK-8371978: tools/jar/ReproducibleJar.java fails on XFS
    + JDK-8372012: java/nio/file/attribute/BasicFileAttributeView/
    /SetTimesNanos.java should check ability to create links
    + JDK-8372046: compiler/floatingpoint/
    /TestSubNodeFloatDoubleNegation.java fails IR verification
    + JDK-8372048: Performance improvement on Linux remote desktop
    + JDK-8372110: GenShen: Fix erroneous assert
    + JDK-8372120: Add missing sound keyword to MIDI tests
    + JDK-8372147: ConnectionFlowControlTest should use
    HttpResponse.connectionLabel()
    + JDK-8372321: TestBackToBackSensitive fails intermittently
    after JDK-8365972
    + JDK-8372348: Adjust some UL / JFR string deduplication output
    messages
    + JDK-8372412: Increase buffer size for ring-buffer events in
    CollectedHeap
    + JDK-8372441: JFR: Improve logging of TestBackToBackSensitive
    + JDK-8372534: Update Libpng to 1.6.51
    + JDK-8372586: Crashes on ppc64(le) after JDK-8371368
    + JDK-8372589: VM crashes on init when NonNMethodCodeHeapSize
    is set too small and UseTransparentHugePages is enabled
    + JDK-8372591: assert(!current-&gt;cont_fastpath() ||
    freeze.check_valid_fast_path()) failed
    + JDK-8372609: Bug4944439 does not enforce locale correctly
    + JDK-8372661: Add a null-safe static factory method to
    "jdk.test.lib.net.SimpleSSLContext"
    + JDK-8372704: ThreadMXBean.getThreadUserTime may return total
    time
    + JDK-8372710: Update ProcessBuilder/Basic regex
    + JDK-8372733: GHA: Bump to Ubuntu 24.04
    + JDK-8372756: Mouse additional buttons and horizontal
    scrolling are broken on XWayland GNOME &gt;= 47 after JDK-8351907
    + JDK-8372835: WorkQueue::push is missing an acquire-fence
    + JDK-8372857: Improve debuggability of
    java/rmi/server/RemoteServer/AddrInUse.java test
    + JDK-8372860: TestCodeCacheUnloadDuringConcCycle fails on ARM32
    + JDK-8372977: Unnecessary gthread-2.0 loading
    + JDK-8372988: Test runtime/Nestmates/membership/
    /TestNestHostErrorWithMultiThread.java failed: Unexpected
    interrupt
    + JDK-8373021: aarch64: MacroAssembler::arrays_equals reads out
    of bounds
    + JDK-8373101: JdkClient and JdkServer test classes ignore
    namedGroups field
    + JDK-8373106: JFR suspend/resume deadlock on macOS in pthreads
    library
    + JDK-8373290: Update FreeType to 2.14.1
    + JDK-8373429: gc/g1/TestCodeCacheUnloadDuringConcCycle fails
    on various platforms
    + JDK-8373476: (tz) Update Timezone Data to 2025c
    + JDK-8373485: JFR Crash during sampling:
    assert(jt-&gt;has_last_Java_frame()) failed: invariant
    + JDK-8373525: C2: assert(_base == Long) failed: Not a Long
    + JDK-8373537: Migrate "test/jdk/com/sun/net/httpserver/" to
    null-safe "SimpleSSLContext" methods
    + JDK-8373593: Support latest  VS2026 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8373623: Refactor Serialization tests for Records to JUnit
    + JDK-8373630: r18_tls should not be modified on Windows AArch64
    + JDK-8373632: Some sound tests failing in CI due to lack of
    sound key
    + JDK-8373704: Improve "SocketException: Protocol family
    unavailable" message
    + JDK-8373716: Refactor further java/util tests from TestNG to
    JUnit
    + JDK-8373727: New XBM images parser regression: only the first
    line of the bitmap array is parsed
    + JDK-8373793: TestDynamicStore.java '/manual' disables use of
    '/timeout'
    + JDK-8373807: test/jdk/java/net/httpclient/websocket/
    /DummyWebSocketServer.java getURI() uses "localhost"
    + JDK-8373832: Test java/lang/invoke/TestVHInvokerCaching.java
    tests nothing
    + JDK-8373869: Refactor java/net/httpclient/
    /ThrowingPushPromises*.java tests to use JUnit5
    + JDK-8373931: Test javax/sound/sampled/Clip/
    /AutoCloseTimeCheck.java timed out
    + JDK-8373946: Synth ProgressBarUI implementation confuses
    background painting with border painting
    + JDK-8373984: Check for macos 11 in CGraphicsDevice.m can be
    removed
    + JDK-8373998: RISC-V: simple optimization of ConvHF2F
    + JDK-8374056: RISC-V: Fix argument passing for the
    RiscvFlushIcache::flush
    + JDK-8374178: Missing include in systemDictionary.cpp after
    JDK-8365526
    + JDK-8374433: java/util/Locale/PreserveTagCase.java does not
    run any tests
    + JDK-8374434: Several JShell tests report JUnit discovery
    warnings
    + JDK-8374525: RISC-V: Several masked float16 vector operations
    are not supported
    + JDK-8374555: No need for visible input warning in
    s.s.u.Password when not reading from System.in
    + JDK-8374557: Enhance TLS connection handling
    + JDK-8374642: EscapeHash macro fails with GNU make 4.3 and 4.4
    + JDK-8374644: Regression in GZIPInputStream performance after
    JDK-7036144
    + JDK-8374711: Hotspot runtime/CommandLine/OptionsValidation/
    /TestOptionsWithRanges fails without printing the option name
    + JDK-8374872: Cleanup outdated SAP AG copyright header info
    + JDK-8374875: Improve perfMemory warning about 'Insufficient
    space for shared memory file'
    + JDK-8375057: Update HarfBuzz to 12.3.2
    + JDK-8375063: Update Libpng to 1.6.54
    + JDK-8375094: RISC-V: Fix client builds after JDK-8368732
    + JDK-8375231: Refactor util/ServiceLoader tests to use JUnit
    + JDK-8375232: Refactor util/StringJoiner tests to use JUnit
    + JDK-8375233: Refactor util/Vector tests to use JUnit
    + JDK-8375311: Some builds are missing debug helpers
    + JDK-8375530: PPC64: incorrect quick
    verify_method_data_pointer check causes poor performance in
    debug build
    + JDK-8375549: ConcurrentModificationException if
    jdk.crypto.disabledAlgorithms has multiple entries with known
    oid
    + JDK-8375598: VM crashes with "assert((labs(val) &amp;
    0xFFFFFFFF00000000) == 0 || dest == (address)-1) failed: must
    be 32bit offset or -1" when using too high value for
    NonNMethodCodeHeapSize
    + JDK-8375657: RISC-V: Need to check size in
    SharedRuntime::is_wide_vector
    + JDK-8375742: Test java/lang/invoke/MethodHandleProxies/
    /Driver.java does not run Unnamed.java
    + JDK-8375963: [25u] Set designator
    DEFAULT_PROMOTED_VERSION_PRE=ea in jdk25u-dev
    + JDK-8375999: com/sun/jndi/ldap/LdapPoolTimeoutTest.java fails
    sporadically on Windows
    + JDK-8376572: RISC-V: Interpreter: Load array index as signed
    int
    + JDK-8376688: Gtest
    os.attempt_reserve_memory_between_small_range_fill_hole_vm
    fails on AIX 7.3
    + JDK-8376889: Enhance JfrRecorder::on_create_vm_3() assert
    output
    + JDK-8377347: jdk/jfr/event/gc/detailed/
    /TestZAllocationStallEvent.java intermittent OOME
    + JDK-8377509: Add licenses for gcc 14.2.0
    + JDK-8377526: Update Libpng to 1.6.55
    + JDK-8377811: [25u] G1: Optional Evacuations may evacuate
    pinned objects
    + JDK-8377898: Hotspot build on AIX with unused-functions
    warning reports some unused functions
    + JDK-8377905: gcc.md included with every build
    + JDK-8378113: Add sun/java2d/OpenGL/ScaleParamsOOB.java to the
    ProblemList.txt file
    + JDK-8378218: MSYS2 reports cygwin triplet causing bash
    configure failure
    + JDK-8378353: [PPC64] StringCoding.countPositives causes
    errors when the length is not a proper 32 bit int
    + JDK-8378623: Use unique font names in FormatCharAdvanceTest
    + JDK-8378631: Update Zlib Data Compression Library to Version
    1.3.2
    + JDK-8378823: AIX build fails after zlib updated by JDK-8378631
    + JDK-8378853: [25u] Make backport of JDK-8244336 comply with
    differences in CSR
    + JDK-8379035: (tz) Update Timezone Data to 2026a
    + JDK-8379158: Update FreeType to 2.14.2
    + JDK-8379256: Update GIFlib to 6.1.1
    + JDK-8380078: Update GIFlib to 6.1.2
    + JDK-8380959: Update Libpng to 1.6.56
    + JDK-8382047: Update Libpng to 1.6.57
    + JDK-8382438: [25u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 25.0.3</changelog>
</package>
<package pkgid="89d7a7dbae86ce4d45b7958f62a87952eb69496a8eae571254fc38837e7e3891" name="java-25-openjdk-devel" arch="x86_64">
  <version epoch="0" ver="25.0.1.0" rel="150700.15.4.1"/>
  <changelog author="fstrba@suse.com" date="1757505600">- Initial packaging of OpenJDK 25
  * JEPs included:
    + 470: PEM Encodings of Cryptographic Objects (Preview)
    + 502: Stable Values (Preview)
    + 503: Remove the 32-bit x86 Port
    + 505: Structured Concurrency (Fifth Preview)
    + 506: Scoped Values
    + 507: Primitive Types in Patterns, instanceof, and switch
    (Third Preview)
    + 508: Vector API (Tenth Incubator)
    + 509: JFR CPU-Time Profiling (Experimental)
    + 510: Key Derivation Function API
    + 511: Module Import Declarations
    + 512: Compact Source Files and Instance Main Methods
    + 513: Flexible Constructor Bodies
    + 514: Ahead-of-Time Command-Line Ergonomics
    + 515: Ahead-of-Time Method Profiling
    + 518: JFR Cooperative Sampling
    + 519: Compact Object Headers
    + 520: JFR Method Timing &amp; Tracing
    + 521: Generational Shenandoah</changelog>
  <changelog author="fstrba@suse.com" date="1758196800">- Added patch:
  * fips.patch
    + forward port the FIPS support from OpenJDK 21</changelog>
  <changelog author="fstrba@suse.com" date="1761134400">- Update to upstream tag jdk-25.0.1+8 (October 2025 CPU)
  * Security fixes:
    + JDK-8360937, CVE-2025-53057, bsc#1252414: Enhance certificate
    handling
    + JDK-8356294, CVE-2025-53066, bsc#1252417: Enhance Path
    Factories
    + JDK-8359454, CVE-2025-61748, bsc#1252418: Enhance String
    handling
    + JDK-8352637: Enhance bytecode verification
  * Other fixes:
    + JDK-8367031: [backout] Change java.time month/day field types
    to 'byte'
    + JDK-8368308: ISO 4217 Amendment 180 Update
    + JDK-8366223: ZGC:
    ZPageAllocator::cleanup_failed_commit_multi_partition is
    broken
    + JDK-8360647: [XWayland] [OL10] NumPad keys are not triggered
    + JDK-8361212: Remove AffirmTrust root CAs
    + JDK-8356587: Missing object ID X in pool jdk.types.Method
    + JDK-8360679: Shenandoah: AOT saved adapter calls into broken
    GC barrier stub
    + JDK-8362882: Update SubmissionPublisher() specification to
    reflect use of ForkJoinPool.asyncCommonPool()
    + JDK-8315131: Clarify VarHandle set/get access on 32-bit
    platforms
    + JDK-8362109: Change milestone to fcs for all releases
    + JDK-8358819: The first year is not displayed correctly in
    Japanese Calendar
    + JDK-8361829: [TESTBUG] RISC-V: compiler/vectorization/runner/
    /BasicIntOpTest.java fails with RVV but not Zvbb
    + JDK-8361532: RISC-V: Several vector tests fail after
    JDK-8354383
    + JDK-8357826: Avoid running some jtreg tests when asan is
    configured
    + JDK-8358577: Test serviceability/jvmti/thread/
    /GetCurrentContendedMonitor/contmon01/contmon01.java failed:
    unexpexcted monitor object
    + JDK-8360533: ContainerRuntimeVersionTestUtils
    fromVersionString fails with some docker versions
    + JDK-8358452: JNI exception pending in
    Java_sun_awt_screencast_ScreencastHelper_remoteDesktopKeyImpl
    of screencast_pipewire.c:1214 (ID: 51119)
    + JDK-8359270: C2: alignment check should consider base offset
    when emitting arraycopy runtime call
    + JDK-8359596: Behavior change when both -Xlint:options and
  - Xlint:-options flags are given
    + JDK-8360179: RISC-V: Only enable BigInteger intrinsics when
    AvoidUnalignedAccess == false
    + JDK-8359218: RISC-V: Only enable CRC32 intrinsic when
    AvoidUnalignedAccess == false
    + JDK-8359059: Bump version numbers for 25.0.1</changelog>
</package>
<package pkgid="49f3828386fa6bca2633dfe30acdbf65fb5042534d22c3ade3e3b58869978d57" name="java-25-openjdk-devel" arch="x86_64">
  <version epoch="0" ver="25.0.2.0" rel="150700.15.7.1"/>
  <changelog author="fstrba@suse.com" date="1757505600">- Initial packaging of OpenJDK 25
  * JEPs included:
    + 470: PEM Encodings of Cryptographic Objects (Preview)
    + 502: Stable Values (Preview)
    + 503: Remove the 32-bit x86 Port
    + 505: Structured Concurrency (Fifth Preview)
    + 506: Scoped Values
    + 507: Primitive Types in Patterns, instanceof, and switch
    (Third Preview)
    + 508: Vector API (Tenth Incubator)
    + 509: JFR CPU-Time Profiling (Experimental)
    + 510: Key Derivation Function API
    + 511: Module Import Declarations
    + 512: Compact Source Files and Instance Main Methods
    + 513: Flexible Constructor Bodies
    + 514: Ahead-of-Time Command-Line Ergonomics
    + 515: Ahead-of-Time Method Profiling
    + 518: JFR Cooperative Sampling
    + 519: Compact Object Headers
    + 520: JFR Method Timing &amp; Tracing
    + 521: Generational Shenandoah</changelog>
  <changelog author="fstrba@suse.com" date="1758196800">- Added patch:
  * fips.patch
    + forward port the FIPS support from OpenJDK 21</changelog>
  <changelog author="fstrba@suse.com" date="1761134400">- Update to upstream tag jdk-25.0.1+8 (October 2025 CPU)
  * Security fixes:
    + JDK-8360937, CVE-2025-53057, bsc#1252414: Enhance certificate
    handling
    + JDK-8356294, CVE-2025-53066, bsc#1252417: Enhance Path
    Factories
    + JDK-8359454, CVE-2025-61748, bsc#1252418: Enhance String
    handling
    + JDK-8352637: Enhance bytecode verification
  * Other fixes:
    + JDK-8367031: [backout] Change java.time month/day field types
    to 'byte'
    + JDK-8368308: ISO 4217 Amendment 180 Update
    + JDK-8366223: ZGC:
    ZPageAllocator::cleanup_failed_commit_multi_partition is
    broken
    + JDK-8360647: [XWayland] [OL10] NumPad keys are not triggered
    + JDK-8361212: Remove AffirmTrust root CAs
    + JDK-8356587: Missing object ID X in pool jdk.types.Method
    + JDK-8360679: Shenandoah: AOT saved adapter calls into broken
    GC barrier stub
    + JDK-8362882: Update SubmissionPublisher() specification to
    reflect use of ForkJoinPool.asyncCommonPool()
    + JDK-8315131: Clarify VarHandle set/get access on 32-bit
    platforms
    + JDK-8362109: Change milestone to fcs for all releases
    + JDK-8358819: The first year is not displayed correctly in
    Japanese Calendar
    + JDK-8361829: [TESTBUG] RISC-V: compiler/vectorization/runner/
    /BasicIntOpTest.java fails with RVV but not Zvbb
    + JDK-8361532: RISC-V: Several vector tests fail after
    JDK-8354383
    + JDK-8357826: Avoid running some jtreg tests when asan is
    configured
    + JDK-8358577: Test serviceability/jvmti/thread/
    /GetCurrentContendedMonitor/contmon01/contmon01.java failed:
    unexpexcted monitor object
    + JDK-8360533: ContainerRuntimeVersionTestUtils
    fromVersionString fails with some docker versions
    + JDK-8358452: JNI exception pending in
    Java_sun_awt_screencast_ScreencastHelper_remoteDesktopKeyImpl
    of screencast_pipewire.c:1214 (ID: 51119)
    + JDK-8359270: C2: alignment check should consider base offset
    when emitting arraycopy runtime call
    + JDK-8359596: Behavior change when both -Xlint:options and
  - Xlint:-options flags are given
    + JDK-8360179: RISC-V: Only enable BigInteger intrinsics when
    AvoidUnalignedAccess == false
    + JDK-8359218: RISC-V: Only enable CRC32 intrinsic when
    AvoidUnalignedAccess == false
    + JDK-8359059: Bump version numbers for 25.0.1</changelog>
  <changelog author="fstrba@suse.com" date="1768392000">- Do not depend on update-desktop-files (jsc#PED-14507 and
  jsc#PED-15221)</changelog>
  <changelog author="fstrba@suse.com" date="1769428800">- Update to upstream tag jdk-25.0.2+10 (January 2026 CPU)
  * CVEs
    + CVE-2026-21925, bsc#1257034
    + CVE-2026-21932, bsc#1257036
    + CVE-2026-21933, bsc#1257037
    + CVE-2026-21945, bsc#1257038
  * Changes
    + JDK-8023263: [TESTBUG] Test closed/java/awt/Focus/
    /InactiveWindowTest/InactiveFocusRace fails due to not enough
    time to initialize graphic components
    + JDK-8162380: [TEST_BUG] MouseEvent/.../
    /AltGraphModifierTest.java has only "Fail" button
    + JDK-8201778: Speed up test
    javax/net/ssl/DTLS/PacketLossRetransmission.java
    + JDK-8265429: Improve GCM encryption
    + JDK-8277444: Data race between
    JvmtiClassFileReconstituter::copy_bytecodes and class linking
    + JDK-8279005: sun/tools/jstat tests do not check for test case
    exit codes after JDK-8245129
    + JDK-8304811: vmTestbase/vm/mlvm/indy/func/jvmti/
    /stepBreakPopReturn/INDIFY_Test.java fails with
    JVMTI_ERROR_TYPE_MISMATCH
    + JDK-8305567: serviceability/tmtools/jstat/GcTest01.java
    failed  utils.JstatGcResults.assertConsistency
    + JDK-8317801: java/net/Socket/asyncClose/Race.java fails
    intermittently (aix)
    + JDK-8320836: jtreg gtest runs should limit heap size
    + JDK-8325766: Extend CertificateBuilder to create trust and
    end entity certificates programmatically
    + JDK-8333526: Restructure java/nio/channels/DatagramChannel/
    /StressNativeSignal.java to a fail fast exception handling
    policy
    + JDK-8333783: java/nio/channels/FileChannel/directio/
    /DirectIOTest.java is unstable with AV software
    + JDK-8334238: Enhance AddLShortcutTest jpackage test
    + JDK-8335986: Test javax/swing/JCheckBox/4449413/
    /bug4449413.java fails on Windows 11 x64 because RBMenuItem's
    and CBMenuItem's checkmark on the left side are not visible
    + JDK-8341496: Improve JMX connections
    + JDK-8343218: Add option to disable allocating interface and
    abstract classes in non-class metaspace
    + JDK-8343546: GHA: Cache required dependencies in master-branch
    workflow
    + JDK-8345810: Custom launchers must be linked with pthread to
    avoid dynamic linker issues
    + JDK-8346753: Test javax/swing/JMenuItem/RightLeftOrientation/
    /RightLeftOrientation.java fails on Windows Server 2025 x64
    because the icons of RBMenuItem and CBMenuItem are not visible
    in Nimbus LookAndFeel
    + JDK-8346839: [TESTBUG] "java/awt/textfield/setechochartest4/
    /setechochartest4.java" failed because the test frame
    disappears on clicking "Click Several Times" button
    + JDK-8346884: Add since checker test to jdk.editpad
    + JDK-8346952: GetGraphicsStressTest.java fails: Native
    resources unavailable
    + JDK-8347277: java/awt/Focus/ComponentLostFocusTest.java fails
    intermittently
    + JDK-8349188: LineBorder does not scale correctly
    + JDK-8350621: Code cache stops scheduling GC
    + JDK-8351487: [ubsan] jvmti.h runtime error: load of value
    which is not a valid value
    + JDK-8352016: Improve
    java/lang/RuntimeTests/RuntimeExitLogTest.java
    + JDK-8354348: Enable Extended EVEX to REX2/REX demotion for
    commutative operations with same dst and src2
    + JDK-8354415: [Ubuntu25.04] api/java_awt/GraphicsDevice/
    /indexTGF.html#SetDisplayMode -
    setDisplayMode_REFRESH_RATE_UNKNOWN fails: Height is different
    on vnc
    + JDK-8354447: Missing test for retroactive
    @SuppressWarnings("dangling-doc-comments") behavior
    + JDK-8354646: java.awt.TextField allows to identify the spaces
    in a password when double clicked at the starting and end of
    the text
    + JDK-8355478: DoubleActionESC.java fails intermittently
    + JDK-8356324: JVM crash (SIGSEGV at
    ClassListParser::resolve_indy_impl) during -Xshare:dump
    starting from 21.0.5
    + JDK-8356897: Update NSS library to 3.111
    + JDK-8357064: cds/appcds/ArchiveRelocationTest.java failed
    with missing expected output
    + JDK-8357141: Update to use jtreg 7.5.2
    + JDK-8357382: runtime/cds/appcds/aotClassLinking/
    /BulkLoaderTest.java#aot fails with Xcomp and C1
    + JDK-8357396: Refactor nmethod::make_not_entrant to use Enum
    instead of "const char*"
    + JDK-8357691: File blocked.certs contains bad content when
    boot jdk 25 is used, sun/security/lib/CheckBlockedCerts.java
    failing
    + JDK-8357694: RISC-V: Several IR verification tests fail when
    vlen=128
    + JDK-8357799: Improve instructions for
    JFileChooser/HTMLFileName.java
    + JDK-8357816: Add test from JDK-8350576
    + JDK-8357822: C2: Multiple string optimization tests are no
    longer testing string concatenation optimizations
    + JDK-8357959: (bf) ByteBuffer.allocateDirect initialization
    can result in large TTSP spikes
    + JDK-8358048: java/net/httpclient/HttpsTunnelAuthTest.java
    incorrectly calls Thread::stop
    + JDK-8358340: Support CDS heap archive with Generational
    Shenandoah
    + JDK-8358532: JFileChooser in GTK L&amp;F still displays HTML
    filename
    + JDK-8358535: Changes in ClassValue (JDK-8351996) caused a
    1-9% regression in Renaissance-PageRank
    + JDK-8358556: Assert when running with -XX:-UseLibmIntrinsic
    + JDK-8358685: [TEST] AOTLoggingTag.java failed with missing
    log message
    + JDK-8358697: TextLayout/MyanmarTextTest.java passes if no
    Myanmar font is found
    + JDK-8358723: jpackage signing issues: the main launcher
    doesn't have entitlements
    + JDK-8358748: Large page size initialization fails with assert
    "page_size must be a power of 2"
    + JDK-8358751: C2: Recursive inlining check for compiled lambda
    forms is broken
    + JDK-8358813: JPasswordField identifies spaces in password via
    delete shortcuts
    + JDK-8359061: Update and ProblemList manual test
    java/awt/Cursor/CursorDragTest/ListDragCursor.java
    + JDK-8359104: gc/TestAlwaysPreTouchBehavior.java#&lt;gcname&gt;
    fails on Linux
    + JDK-8359105: RISC-V: No need for acquire fence in safepoint
    poll during JNI calls
    + JDK-8359127: Amend java/nio/channels/DatagramChannel/
    /PromiscuousIPv6.java to use @requires for OS platform
    selection
    + JDK-8359167: Remove unused test/hotspot/jtreg/vmTestbase/nsk/
    /share/jpda/BindServer.java
    + JDK-8359207: Remove runtime/signal/TestSigusr2.java since it
    is always skipped
    + JDK-8359423: Improve error message in case of missing jsa
    shared archive
    + JDK-8359428: Test 'javax/swing/JTabbedPane/bug4499556.java'
    failed because after selecting one of L&amp;F items, the test case
    automatically failed when clicking on L&amp;F Menu button again
    + JDK-8359449: [TEST] open/test/jdk/java/io/File/SymLinks.java
    Refactor extract method for Windows specific test
    + JDK-8359477: com/sun/net/httpserver/Test12.java appears to
    have a temp file race
    + JDK-8359501: Enhance Handling of URIs
    + JDK-8359687: Use PassFailJFrame for
    java/awt/print/Dialog/DialogType.java
    + JDK-8359690: New test TestCPUTimeSampleThrottling still fails
    intermittently
    + JDK-8359735: [Ubuntu 25.10] java/lang/ProcessBuilder/
    /Basic.java, java/lang/ProcessHandle/InfoTest.java fail due to
    rust-coreutils
    + JDK-8359827: Test runtime/Thread/ThreadCountLimit.java need
    loop increasing the limit
    + JDK-8360022: ClassRefDupInConstantPoolTest.java fails when
    running in repeat
    + JDK-8360090: [TEST] RISC-V: disable some cds tests on qemu
    + JDK-8360178: TestArguments.atojulong gtest has incorrect
    format string
    + JDK-8360219: [AIX] assert(locals_base &gt;= l2) failed: bad
    placement
    + JDK-8360255: runtime/jni/checked/TestLargeUTF8Length.java
    fails with -XX:-CompactStrings
    + JDK-8360408: [TEST] Use @requires tag instead of exiting
    based on "os.name" property value for
    sun/net/www/protocol/file/FileURLTest.java
    + JDK-8360411: [TEST] open/test/jdk/java/io/File/
    /MaxPathLength.java Refactor extract method to encapsulate
    Windows specific test logic
    + JDK-8360518: Docker tests do not work when asan is configured
    + JDK-8360520: RISC-V: C1: Fix primitive array clone intrinsic
    regression after JDK-8333154
    + JDK-8360664: Null pointer dereference in src/hotspot/share/
    /prims/jvmtiTagMap.cpp in
    IterateOverHeapObjectClosure::do_object()
    + JDK-8360783: CTW: Skip deoptimization between tiers
    + JDK-8360791: [ubsan] Adjust signal handling
    + JDK-8360867: CTW: Disable inline cache verification
    + JDK-8360981: Remove use of Thread.stop in
    test/jdk/java/net/Socket/DeadlockTest.java
    + JDK-8361112: Use exact float -&gt; Float16 conversion method in
    Float16 tests
    + JDK-8361180: Disable CompiledDirectCall verification with
  - VerifyInlineCaches
    + JDK-8361198: [AIX] fix misleading error output in
    thread_cpu_time_unchecked
    + JDK-8361211: C2: Final graph reshaping generates unencodeable
    klass constants
    + JDK-8361215: Add AOT test case: verification constraint
    classes are excluded
    + JDK-8361253: CommandLineOptionTest library should report
    observed values on failure
    + JDK-8361255: CTW: Tolerate more NCDFE problems
    + JDK-8361298: SwingUtilities/bug4967768.java fails where
    character P is not underline
    + JDK-8361314: Test serviceability/jvmti/VMEvent/MyPackage/
    /VMEventRecursionTest.java FATAL ERROR in native method:
    Failed during the GetClassSignature call
    + JDK-8361367: AOT ExcludedClasses.java test failed with
    missing constant pool logs
    + JDK-8361423: Add IPSupport::printPlatformSupport to
    java/net/NetworkInterface/IPv4Only.java
    + JDK-8361449: RISC-V: Code cleanup for native call
    + JDK-8361478: GHA: Use MSYS2 from GHA runners
    + JDK-8361494: [IR Framework] Escape too much in replacement of
    placeholder
    + JDK-8361497: Scoped Values: orElse and orElseThrow do not
    access the cache
    + JDK-8361504: RISC-V: Make C1 clone intrinsic platform guard
    more specific
    + JDK-8361520: Stabilize SystemGC benchmarks
    + JDK-8361599: [PPC64] enable missing tests via jtreg requires
    + JDK-8361711: Add library name configurability to
    PKCS11Test.java
    + JDK-8361748: Enforce limits on the size of an XBM image
    + JDK-8361839: Problemlist BogusFocusableWindowState due to
    failures in the CI pipeline
    + JDK-8361868: [GCC static analyzer] complains about missing
    calloc - NULL checks in p11_util.c
    + JDK-8361871: [GCC static analyzer] complains about use of
    uninitialized value ckpObject in p11_util.c
    + JDK-8361888: [GCC static analyzer] ProcessImpl_md.c
    Java_java_lang_ProcessImpl_forkAndExec error: use of
    uninitialized value '*(ChildStuff *)p.mode
    + JDK-8361892: AArch64: Incorrect matching rule leading to
    improper oop instruction encoding
    + JDK-8361897: gc/z/TestUncommit.java fails with Uncommitted
    too slow
    + JDK-8361948: Shenandoah: region free capacity unit mismatch
    + JDK-8361950: Update to use jtreg 8
    + JDK-8361959: [GCC static analyzer] java_props_md.c  leak of
    'temp'  variable is reported
    + JDK-8362107: Update the Jan CPU26_01 release date in master
    branch after forking Oct CPU25_10
    + JDK-8362123: ClassLoader Leak via
    Executors.newSingleThreadExecutor(...)
    + JDK-8362169: Pointer passed to upcall may get wrong scope
    + JDK-8362204: test/jdk/sun/awt/font/TestDevTransform.java
    fails on Ubuntu 24.04
    + JDK-8362207: Add more test cases for possible double-rounding
    in fma
    + JDK-8362282: runtime/logging/StressAsyncUL.java failed with
    exitValue = 134
    + JDK-8362308: Enhance Bitmap operations
    + JDK-8362379: Test serviceability/HeapDump/
    /UnmountedVThreadNativeMethodAtTop.java should mark as /native
    + JDK-8362390: AIX make fails in awt_GraphicsEnv.c
    + JDK-8362482: [TESTBUG] serviceability/HeapDump/
    /UnmountedVThreadNativeMethodAtTop.java: System.gc() does not
    provide full GC
    + JDK-8362501: Update test/hotspot/jtreg/applications/jcstress/
    /README
    + JDK-8362515: RISC-V: cleanup NativeFarCall
    + JDK-8362516: Support of GCC static analyzer (-fanalyzer)
    + JDK-8362530: VM crash with -XX:+PrintTieredEvents when
    collecting AOT profiling
    + JDK-8362532: Test gc/g1/plab/* duplicate command-line options
    + JDK-8362533: Tests sun/management/jmxremote/bootstrap/*
    duplicate VM flags
    + JDK-8362581: Timeouts in
    java/nio/channels/SocketChannel/OpenLeak.java on UNIX
    + JDK-8362582: GHA: Increase bundle retention time to deal with
    infra overload better
    + JDK-8362596: RISC-V: Improve _vectorizedHashCode intrinsic
    + JDK-8362602: Add test.timeout.factor to CompileFactory to
    avoid test timeouts
    + JDK-8362632: Improve HttpServer Request handling
    + JDK-8362834: Several runtime/Thread tests should mark as
    /native
    + JDK-8362836: JFR: Broken pipe in
    jdk/jfr/event/io/TestIOTopFrame.java
    + JDK-8362838: RISC-V: Incorrect matching rule leading to
    improper oop instruction encoding
    + JDK-8362855: Test java/net/ipv6tests/TcpTest.java should
    report SkippedException when there no ia4addr  or ia6addr
    + JDK-8362889: [GCC static analyzer] leak in
    libstringPlatformChars.c
    + JDK-8362972: C2 fails with unexpected node in SuperWord
    truncation: IsFiniteF, IsFiniteD
    + JDK-8363676: [GCC static analyzer] missing return value check
    of malloc in OGLContext_SetTransform
    + JDK-8363696: Update the release version and date for OpenJDK
    25u
    + JDK-8363720: Follow up to JDK-8360411 with post review
    comments
    + JDK-8363895: Minimal build fails with slowdebug builds after
    JDK-8354887
    + JDK-8363898: RISC-V: TestRangeCheckHoistingScaledIV.java
    fails after JDK-8355293 when running without RVV
    + JDK-8363910: Avoid tuning for Power10 CPUs on Linux ppc64le
    when gcc &lt; 10 is used
    + JDK-8363928: Specifying AOTCacheOutput with a blank path
    causes the JVM to crash
    + JDK-8363965: GHA: Switch cross-compiling sysroots to Debian
    bookworm
    + JDK-8363966: GHA: Switch cross-compiling sysroots to Debian
    trixie
    + JDK-8364090: Dump JFR recording on CrashOnOutOfMemoryError
    + JDK-8364111: InstanceMirrorKlass iterators should handle CDS
    and hidden classes consistently
    + JDK-8364114: Test
    TestHugePageDecisionsAtVMStartup.java#LP_enabled fails when no
    free hugepage
    + JDK-8364120: RISC-V: unify the usage of
    MacroAssembler::instruction_size
    + JDK-8364150: RISC-V: Leftover for JDK-8343430 removing old
    trampoline call
    + JDK-8364177: JDK fails to build due to undefined symbol in
    libpng on LoongArch64
    + JDK-8364184: [REDO] AArch64: [VectorAPI] sve vector math
    operations are not supported after JDK-8353217
    + JDK-8364190: JFR: RemoteRecordingStream withers don't work
    + JDK-8364198: NMT should have a better corruption message
    + JDK-8364199: Enhance list of environment variables printed in
    hserr/hsinfo file
    + JDK-8364212: Shenandoah: Rework archived objects loading
    + JDK-8364214: Enhance polygon data support
    + JDK-8364235: Fix for JDK-8361447 breaks the alignment
    requirements for GuardedMemory
    + JDK-8364257: JFR: User-defined events and settings with a
    one-letter name cannot be configured
    + JDK-8364263: HttpClient: Improve encapsulation of ProxyServer
    + JDK-8364296: Set IntelJccErratumMitigation flag ergonomically
    + JDK-8364352: Some tests fail when using a limited number of
    pregenerated .jsa CDS archives
    + JDK-8364454: ProblemList runtime/cds/DeterministicDump.java
    on macos for JDK-8363986
    + JDK-8364503: gc/g1/TestCodeCacheUnloadDuringConcCycle.java
    fails because of race printing to stdout
    + JDK-8364514: [asan] runtime/jni/checked/
    /TestCharArrayReleasing.java heap-buffer-overflow
    + JDK-8364556: JFR:  Disable SymbolTableStatistics and
    StringTableStatistics in default.jfc
    + JDK-8364597: Replace THL A29 Limited with Tencent
    + JDK-8364611: (process) Child process SIGPIPE signal
    disposition should be default
    + JDK-8364660: ClassVerifier::ends_in_athrow() should be removed
    + JDK-8364764: java/nio/channels/vthread/BlockingChannelOps.java
    subtests timed out
    + JDK-8364786: Test java/net/vthread/HttpALot.java
    intermittently fails - 24999 handled, expected 25000
    + JDK-8364984: Many jpackage tests are failing on Linux after
    JDK-8334238
    + JDK-8364993: JFR: Disable jdk.ModuleExport in default.jfc
    + JDK-8364996: java/awt/font/FontNames/LocaleFamilyNames.java
    times out on Windows
    + JDK-8365058: Enhance CopyOnWriteArraySet
    + JDK-8365071: ARM32: JFR intrinsic jvm_commit triggers C2
    regalloc assert
    + JDK-8365086: CookieStore.getURIs() and get(URI) should return
    an immutable List
    + JDK-8365165: Zap C-heap memory at delete/free
    + JDK-8365166: ARM32: missing os::fetch_bcp_from_context
    implementation
    + JDK-8365168: Use 64-bit aligned addresses for CK_ULONG access
    in PKCS11 native key code
    + JDK-8365200: RISC-V: compiler/loopopts/superword/
    /TestGeneralizedReductions.java fails with Zvbb and vlen=128
    + JDK-8365206: RISC-V: compiler/c2/irTests/
    /TestFloat16ScalarOperations.java is failing on riscv64
    + JDK-8365240: [asan] exclude some tests when using asan
    enabled binaries
    + JDK-8365260: Problemlist 1 test due to failures in the CI
    pipeline
    + JDK-8365265: x86 short forward jump exceeds 8-bit offset in
    methodHandles_x86.cpp when using Intel APX
    + JDK-8365271: Improve Swing supports
    + JDK-8365280: Enhance JOptionPane
    + JDK-8365302: RISC-V: compiler/loopopts/superword/
    /TestAlignVector.java fails when vlen=128
    + JDK-8365307: AIX make fails after JDK-8364611
    + JDK-8365312: GCC 12 cannot compile SVE on aarch64 with
    auto-var-init pattern
    + JDK-8365389: Remove static color fields from SwingUtilities3
    and WindowsMenuItemUI
    + JDK-8365425: [macos26] javax/swing/JInternalFrame/8160248/
    /JInternalFrameDraggingTest.java fails on macOS 26
    + JDK-8365442: [asan] runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java fails
    + JDK-8365468: EagerJVMCI should only apply to the
    CompilerBroker JVMCI runtime
    + JDK-8365487: [asan] some oops (mode) related tests fail
    + JDK-8365543: UnixNativeDispatcher.init should lookup open64at
    and stat64at on AIX
    + JDK-8365571: GenShen: PLAB promotions may remain disabled for
    evacuation threads
    + JDK-8365615: Improve JMenuBar/RightLeftOrientation.java
    + JDK-8365638: JFR: Add --exact for debugging out-of-order
    events
    + JDK-8365660: test/jdk/sun/security/pkcs11/KeyAgreement/ tests
    skipped without SkipException
    + JDK-8365700: Jar --validate without any --file option leaves
    around a temporary file /tmp/tmpJar&lt;number&gt;.jar
    + JDK-8365726: Test crashed with assert in C1 thread: Possible
    safepoint reached by thread that does not allow it
    + JDK-8365772: RISC-V: correctly prereserve NaN payload when
    converting from float to float16 in vector way
    + JDK-8365790: Shutdown hook for application image does not
    work on Windows
    + JDK-8365811: test/jdk/java/net/CookieHandler/B6644726.java
    failure - "Should have 5 cookies. Got only 4, expires probably
    didn't parse correctly"
    + JDK-8365823: Revert storing abstract and interface Klasses to
    non-class metaspace
    + JDK-8365834: Mark java/net/httpclient/ManyRequests.java  as
    intermittent
    + JDK-8365841: RISC-V: Several IR verification tests fail after
    JDK-8350960 without Zvfh
    + JDK-8365844: RISC-V: TestBadFormat.java fails when running
    without RVV
    + JDK-8365863: /test/jdk/sun/security/pkcs11/Cipher tests skip
    without SkippedException
    + JDK-8365913: Support latest MSC_VER in abstract_vm_version.cpp
    + JDK-8365919: Replace currentTimeMillis with nanoTime in
    Stresser.java
    + JDK-8365926: RISC-V: Performance regression in renaissance
    (chi-square)
    + JDK-8365956: GenShen: Adaptive tenuring threshold algorithm
    may raise threshold prematurely
    + JDK-8365983: Tests should throw SkippedException when SCTP
    not supported
    + JDK-8366028: MethodType::fromMethodDescriptorString should
    not throw UnsupportedOperationException for invalid
    descriptors
    + JDK-8366029: Do not add -XX:VerifyArchivedFields by default
    to CDS tests
    + JDK-8366031: Mark com/sun/nio/sctp/SctpChannel/
    /CloseDescriptors.java as intermittent
    + JDK-8366075: Problemlist 2 tests due to failures in the CI
    pipeline
    + JDK-8366092: [GCC static analyzer] UnixOperatingSystem.c
    warning: use of uninitialized value 'systemTicks'
    + JDK-8366147: ZGC:
    ZPageAllocator::cleanup_failed_commit_single_partition may
    leak memory
    + JDK-8366159: SkippedException is treated as a pass for
    pkcs11/KeyStore, pkcs11/SecretKeyFactory and
    pkcs11/SecureRandom
    + JDK-8366208: Unexpected exception in
    sun.java2d.cmm.lcms.LCMSImageLayout
    + JDK-8366229: runtime/Thread/TooSmallStackSize.java runs with
    all collectors
    + JDK-8366250: Problemlist 3 tests due to failures in the CI
    pipeline
    + JDK-8366340: Problemlist 1 test due to failures in the CI
    pipeline
    + JDK-8366342: Key generator and key pair generator tests
    skipping, but showing as passed
    + JDK-8366359: Test should throw SkippedException when there is
    no lpstat
    + JDK-8366365: [test] test/lib-test/jdk/test/whitebox/
    /CPUInfoTest.java should be updated
    + JDK-8366434: THP not working properly with G1 after
    JDK-8345655
    + JDK-8366446: Test java/awt/geom/ConcurrentDrawPolygonTest.java
    fails intermittently
    + JDK-8366537: Test "java/util/TimeZone/
    /DefaultTimeZoneTest.java" is not updating the zone ID as
    expected
    + JDK-8366558: Gtests leave /tmp/cgroups-test* files
    + JDK-8366694: Test JdbStopInNotificationThreadTest.java timed
    out after 60 second
    + JDK-8366750: Remove test 'java/awt/Choice/
    /ChoiceMouseWheelTest/ChoiceMouseWheelTest.java' from
    problemlist
    + JDK-8366764: Deproblemlist java/awt/ScrollPane/
    /ScrollPositionTest.java
    + JDK-8366800: Problemlist 1 test due to failures in the CI
    pipeline
    + JDK-8366844: Update and automate
    MouseDraggedOriginatedByScrollBarTest.java
    + JDK-8366850: Test com/sun/jdi/
    /JdbStopInNotificationThreadTest.java failed
    + JDK-8366893: java/lang/Thread/virtual/stress/
    /GetStackTraceALotWhenPinned.java timed out on macos-aarch64
    + JDK-8366948: AOT cache creation crashes when iterating
    training data
    + JDK-8366980: TestTransparentHugePagesHeap.java fails when run
    with -UseCompressedOops
    + JDK-8367017: Remove legacy checks from WrappedToolkitTest and
    convert from bash
    + JDK-8367021: Regression in LocaleDataTest refactoring
    + JDK-8367048: RISC-V: Correct pipeline descriptions of the
    architecture
    + JDK-8367066: RISC-V: refine register selection in
    MacroAssembler:: decode_klass_not_null
    + JDK-8367098: RISC-V: sync CPU features with related JVM flags
    for dependant ones
    + JDK-8367131: Test com/sun/jdi/ThreadMemoryLeakTest.java fails
    on 32 bits
    + JDK-8367133: DTLS: fragmentation of Finished message results
    in handshake failure
    + JDK-8367137: RISC-V: Detect Zicboz block size via hwprobe
    + JDK-8367237: Thread-Safety Usage Warning for
    java.text.Collator Classes
    + JDK-8367277: Fix copyright header in
    JMXInterfaceBindingTest.java
    + JDK-8367313: CTW: Execute in AWT headless mode
    + JDK-8367333: C2: Vector math operation intrinsification
    failure
    + JDK-8367348: Enhance PassFailJFrame to support links in HTML
    + JDK-8367378: GenShen: Missing timing stats when old mark
    buffers are flushed during final update refs
    + JDK-8367384: The ICC_Profile class may throw exceptions
    during serialization
    + JDK-8367598: Switch to CRC32C for SEED calculation in
    jdk.test.lib.Utils
    + JDK-8367616: RISC-V: Auto-enable Zicboz extension for debug
    builds
    + JDK-8367689: Revert removal of several compilation-related
    vmStructs fields
    + JDK-8367692: RISC-V: Align post call nop
    + JDK-8367694: Fix jtreg test failure when Intel APX is enabled
    for KNL platforms
    + JDK-8367780: Enable UseAPX on Intel CPUs only when both APX_F
    and APX_NCI_NDD_NF cpuid features are present
    + JDK-8367782: VerifyJarEntryName.java: Fix modifyJarEntryName
    to operate on bytes and re-introduce verifySignatureEntryName
    + JDK-8367869: Test java/io/FileDescriptor/Sync.java timed out
    + JDK-8367904: Test java/net/InetAddress/ptr/Lookup.java should
    throw SkippedException
    + JDK-8367948: JFR: MethodTrace threshold setting has no effect
    + JDK-8367953: JFR sampler threads does not appear in thread
    dump
    + JDK-8367969: C2: compiler/vectorapi/TestVectorMathLib.java
    fails without UnlockDiagnosticVMOptions
    + JDK-8367988: NewFileSystemTests.readOnlyZipFileFailure fails
    when run by root user
    + JDK-8368032: Enhance Certificate Checking
    + JDK-8368071: Compilation throughput regressed 2X-8X after
    JDK-8355003
    + JDK-8368152: Shenandoah: Incorrect behavior at end of
    degenerated cycle
    + JDK-8368192: Test java/lang/ProcessBuilder/Basic.java#id0
    fails with Exception: Stack trace
    + JDK-8368366: RISC-V: AlignVector is mistakenly set to
    AvoidUnalignedAccesses
    + JDK-8368367: Test jdk/jfr/event/gc/detailed/
    /TestGCHeapMemoryUsageEvent.java fails  jdk.GCHeapMemoryUsage
    "expected 0 &gt; 0"
    + JDK-8368565: Adjust comment regarding dependency of libjvm.so
    to librt
    + JDK-8368606: Printer lookup returns empty on AIX platform due
    to uninitialized results list
    + JDK-8368668: Several vmTestbase/vm/gc/compact tests timed out
    on large memory machine
    + JDK-8368670: Deadlock in JFR on event register + class load
    + JDK-8368698: runtime/cds/appcds/aotCache/OldClassSupport.java
    assert(can_add()) failed: Cannot add TrainingData objects
    + JDK-8368732: RISC-V: Detect support for misaligned vector
    access via hwprobe
    + JDK-8368890: open/test/jdk/tools/jpackage/macosx/
    /NameWithSpaceTest.java fails randomly
    + JDK-8368893: RISC-V: crash after JDK-8352673 on fastdebug
    version
    + JDK-8368960: Adjust java UL logging in the build
    + JDK-8368982: Test sun/security/tools/jarsigner/EC.java
    completed and timed out
    + JDK-8369078: Fix faulty test conversion in
    IllegalCharsetName.java
    + JDK-8369184: SimpleTimeZone equals() Returns True for Unequal
    Instances with Different hashCode Values
    + JDK-8369190: JavaFrameAnchor on AArch64 has unnecessary
    barriers and wrong store order in MacroAssembler
    + JDK-8369226: GHA: Switch to MacOS 15
    + JDK-8369319: java/net/httpclient/CancelRequestTest.java fails
    intermittently
    + JDK-8369450: [Ubuntu 25.10] openjdk fails to build due to
    rust-coreutils date
    + JDK-8369487: Revert EA option for build promotion
    + JDK-8369506: Bytecode rewriting causes Java heap corruption
    on AArch64
    + JDK-8369560: Slowdebug build without CDS fails
    + JDK-8369563: Gtest dll_address_to_function_and_library_name
    has issues with stripped pdb files
    + JDK-8369616: JavaFrameAnchor on RISC-V has unnecessary
    barriers and wrong store order in MacroAssembler
    + JDK-8369656: Calling CompletableFuture.join() could execute
    task in common pool
    + JDK-8369657: [AIX] TOC overflow in static-launcher build when
    building slowdebug after JDK-8352064
    + JDK-8369853: jpackage signing tests fail after JDK-8358723
    + JDK-8369868: Compilation error in Win8365790Test.java with
    JDK-8358723 fix resulting in CI tier3 failure
    + JDK-8369946: Bytecode rewriting causes Java heap corruption
    on PPC
    + JDK-8369947: Bytecode rewriting causes Java heap corruption
    on RISC-V
    + JDK-8369979: Flag UsePopCountInstruction was accidentally
    disabled on PPC64
    + JDK-8370048: Shenandoah: Deprecated ShenandoahPacing option
    + JDK-8370049: [s390x] G1 barrier compareAndExchange does not
    return old value when compareExchange fails
    + JDK-8370318: AES-GCM vector intrinsic may read out of bounds
    (x86_64, AVX-512)
    + JDK-8370331: Problemlist 2 tests due to failures in the CI
    pipeline
    + JDK-8370428: Change milestone to fcs for all releases
    + JDK-8370465: Right to Left Orientation Issues with MenuItem
    Component
    + JDK-8371094: --mac-signing-key-user-name no longer works
    + JDK-8371425: Include folder names in vscode workspace virtual
    folders
    + JDK-8371697: test/jdk/java/nio/file/FileStore/Basic.java
    fails after 8360887 on linux
    + JDK-8372753: jpackage ignores --file-associations option with
    predefined app image</changelog>
</package>
<package pkgid="7523c946b112385f236100d6e1d2307ab8d3c257c09682acb24ba4752c848afb" name="java-25-openjdk-devel" arch="x86_64">
  <version epoch="0" ver="25.0.3.0" rel="150700.15.10.1"/>
  <changelog author="fstrba@suse.com" date="1757505600">- Initial packaging of OpenJDK 25
  * JEPs included:
    + 470: PEM Encodings of Cryptographic Objects (Preview)
    + 502: Stable Values (Preview)
    + 503: Remove the 32-bit x86 Port
    + 505: Structured Concurrency (Fifth Preview)
    + 506: Scoped Values
    + 507: Primitive Types in Patterns, instanceof, and switch
    (Third Preview)
    + 508: Vector API (Tenth Incubator)
    + 509: JFR CPU-Time Profiling (Experimental)
    + 510: Key Derivation Function API
    + 511: Module Import Declarations
    + 512: Compact Source Files and Instance Main Methods
    + 513: Flexible Constructor Bodies
    + 514: Ahead-of-Time Command-Line Ergonomics
    + 515: Ahead-of-Time Method Profiling
    + 518: JFR Cooperative Sampling
    + 519: Compact Object Headers
    + 520: JFR Method Timing &amp; Tracing
    + 521: Generational Shenandoah</changelog>
  <changelog author="fstrba@suse.com" date="1758196800">- Added patch:
  * fips.patch
    + forward port the FIPS support from OpenJDK 21</changelog>
  <changelog author="fstrba@suse.com" date="1761134400">- Update to upstream tag jdk-25.0.1+8 (October 2025 CPU)
  * Security fixes:
    + JDK-8360937, CVE-2025-53057, bsc#1252414: Enhance certificate
    handling
    + JDK-8356294, CVE-2025-53066, bsc#1252417: Enhance Path
    Factories
    + JDK-8359454, CVE-2025-61748, bsc#1252418: Enhance String
    handling
    + JDK-8352637: Enhance bytecode verification
  * Other fixes:
    + JDK-8367031: [backout] Change java.time month/day field types
    to 'byte'
    + JDK-8368308: ISO 4217 Amendment 180 Update
    + JDK-8366223: ZGC:
    ZPageAllocator::cleanup_failed_commit_multi_partition is
    broken
    + JDK-8360647: [XWayland] [OL10] NumPad keys are not triggered
    + JDK-8361212: Remove AffirmTrust root CAs
    + JDK-8356587: Missing object ID X in pool jdk.types.Method
    + JDK-8360679: Shenandoah: AOT saved adapter calls into broken
    GC barrier stub
    + JDK-8362882: Update SubmissionPublisher() specification to
    reflect use of ForkJoinPool.asyncCommonPool()
    + JDK-8315131: Clarify VarHandle set/get access on 32-bit
    platforms
    + JDK-8362109: Change milestone to fcs for all releases
    + JDK-8358819: The first year is not displayed correctly in
    Japanese Calendar
    + JDK-8361829: [TESTBUG] RISC-V: compiler/vectorization/runner/
    /BasicIntOpTest.java fails with RVV but not Zvbb
    + JDK-8361532: RISC-V: Several vector tests fail after
    JDK-8354383
    + JDK-8357826: Avoid running some jtreg tests when asan is
    configured
    + JDK-8358577: Test serviceability/jvmti/thread/
    /GetCurrentContendedMonitor/contmon01/contmon01.java failed:
    unexpexcted monitor object
    + JDK-8360533: ContainerRuntimeVersionTestUtils
    fromVersionString fails with some docker versions
    + JDK-8358452: JNI exception pending in
    Java_sun_awt_screencast_ScreencastHelper_remoteDesktopKeyImpl
    of screencast_pipewire.c:1214 (ID: 51119)
    + JDK-8359270: C2: alignment check should consider base offset
    when emitting arraycopy runtime call
    + JDK-8359596: Behavior change when both -Xlint:options and
  - Xlint:-options flags are given
    + JDK-8360179: RISC-V: Only enable BigInteger intrinsics when
    AvoidUnalignedAccess == false
    + JDK-8359218: RISC-V: Only enable CRC32 intrinsic when
    AvoidUnalignedAccess == false
    + JDK-8359059: Bump version numbers for 25.0.1</changelog>
  <changelog author="fstrba@suse.com" date="1768392000">- Do not depend on update-desktop-files (jsc#PED-14507 and
  jsc#PED-15221)</changelog>
  <changelog author="fstrba@suse.com" date="1769428800">- Update to upstream tag jdk-25.0.2+10 (January 2026 CPU)
  * CVEs
    + CVE-2026-21925, bsc#1257034
    + CVE-2026-21932, bsc#1257036
    + CVE-2026-21933, bsc#1257037
    + CVE-2026-21945, bsc#1257038
  * Changes
    + JDK-8023263: [TESTBUG] Test closed/java/awt/Focus/
    /InactiveWindowTest/InactiveFocusRace fails due to not enough
    time to initialize graphic components
    + JDK-8162380: [TEST_BUG] MouseEvent/.../
    /AltGraphModifierTest.java has only "Fail" button
    + JDK-8201778: Speed up test
    javax/net/ssl/DTLS/PacketLossRetransmission.java
    + JDK-8265429: Improve GCM encryption
    + JDK-8277444: Data race between
    JvmtiClassFileReconstituter::copy_bytecodes and class linking
    + JDK-8279005: sun/tools/jstat tests do not check for test case
    exit codes after JDK-8245129
    + JDK-8304811: vmTestbase/vm/mlvm/indy/func/jvmti/
    /stepBreakPopReturn/INDIFY_Test.java fails with
    JVMTI_ERROR_TYPE_MISMATCH
    + JDK-8305567: serviceability/tmtools/jstat/GcTest01.java
    failed  utils.JstatGcResults.assertConsistency
    + JDK-8317801: java/net/Socket/asyncClose/Race.java fails
    intermittently (aix)
    + JDK-8320836: jtreg gtest runs should limit heap size
    + JDK-8325766: Extend CertificateBuilder to create trust and
    end entity certificates programmatically
    + JDK-8333526: Restructure java/nio/channels/DatagramChannel/
    /StressNativeSignal.java to a fail fast exception handling
    policy
    + JDK-8333783: java/nio/channels/FileChannel/directio/
    /DirectIOTest.java is unstable with AV software
    + JDK-8334238: Enhance AddLShortcutTest jpackage test
    + JDK-8335986: Test javax/swing/JCheckBox/4449413/
    /bug4449413.java fails on Windows 11 x64 because RBMenuItem's
    and CBMenuItem's checkmark on the left side are not visible
    + JDK-8341496: Improve JMX connections
    + JDK-8343218: Add option to disable allocating interface and
    abstract classes in non-class metaspace
    + JDK-8343546: GHA: Cache required dependencies in master-branch
    workflow
    + JDK-8345810: Custom launchers must be linked with pthread to
    avoid dynamic linker issues
    + JDK-8346753: Test javax/swing/JMenuItem/RightLeftOrientation/
    /RightLeftOrientation.java fails on Windows Server 2025 x64
    because the icons of RBMenuItem and CBMenuItem are not visible
    in Nimbus LookAndFeel
    + JDK-8346839: [TESTBUG] "java/awt/textfield/setechochartest4/
    /setechochartest4.java" failed because the test frame
    disappears on clicking "Click Several Times" button
    + JDK-8346884: Add since checker test to jdk.editpad
    + JDK-8346952: GetGraphicsStressTest.java fails: Native
    resources unavailable
    + JDK-8347277: java/awt/Focus/ComponentLostFocusTest.java fails
    intermittently
    + JDK-8349188: LineBorder does not scale correctly
    + JDK-8350621: Code cache stops scheduling GC
    + JDK-8351487: [ubsan] jvmti.h runtime error: load of value
    which is not a valid value
    + JDK-8352016: Improve
    java/lang/RuntimeTests/RuntimeExitLogTest.java
    + JDK-8354348: Enable Extended EVEX to REX2/REX demotion for
    commutative operations with same dst and src2
    + JDK-8354415: [Ubuntu25.04] api/java_awt/GraphicsDevice/
    /indexTGF.html#SetDisplayMode -
    setDisplayMode_REFRESH_RATE_UNKNOWN fails: Height is different
    on vnc
    + JDK-8354447: Missing test for retroactive
    @SuppressWarnings("dangling-doc-comments") behavior
    + JDK-8354646: java.awt.TextField allows to identify the spaces
    in a password when double clicked at the starting and end of
    the text
    + JDK-8355478: DoubleActionESC.java fails intermittently
    + JDK-8356324: JVM crash (SIGSEGV at
    ClassListParser::resolve_indy_impl) during -Xshare:dump
    starting from 21.0.5
    + JDK-8356897: Update NSS library to 3.111
    + JDK-8357064: cds/appcds/ArchiveRelocationTest.java failed
    with missing expected output
    + JDK-8357141: Update to use jtreg 7.5.2
    + JDK-8357382: runtime/cds/appcds/aotClassLinking/
    /BulkLoaderTest.java#aot fails with Xcomp and C1
    + JDK-8357396: Refactor nmethod::make_not_entrant to use Enum
    instead of "const char*"
    + JDK-8357691: File blocked.certs contains bad content when
    boot jdk 25 is used, sun/security/lib/CheckBlockedCerts.java
    failing
    + JDK-8357694: RISC-V: Several IR verification tests fail when
    vlen=128
    + JDK-8357799: Improve instructions for
    JFileChooser/HTMLFileName.java
    + JDK-8357816: Add test from JDK-8350576
    + JDK-8357822: C2: Multiple string optimization tests are no
    longer testing string concatenation optimizations
    + JDK-8357959: (bf) ByteBuffer.allocateDirect initialization
    can result in large TTSP spikes
    + JDK-8358048: java/net/httpclient/HttpsTunnelAuthTest.java
    incorrectly calls Thread::stop
    + JDK-8358340: Support CDS heap archive with Generational
    Shenandoah
    + JDK-8358532: JFileChooser in GTK L&amp;F still displays HTML
    filename
    + JDK-8358535: Changes in ClassValue (JDK-8351996) caused a
    1-9% regression in Renaissance-PageRank
    + JDK-8358556: Assert when running with -XX:-UseLibmIntrinsic
    + JDK-8358685: [TEST] AOTLoggingTag.java failed with missing
    log message
    + JDK-8358697: TextLayout/MyanmarTextTest.java passes if no
    Myanmar font is found
    + JDK-8358723: jpackage signing issues: the main launcher
    doesn't have entitlements
    + JDK-8358748: Large page size initialization fails with assert
    "page_size must be a power of 2"
    + JDK-8358751: C2: Recursive inlining check for compiled lambda
    forms is broken
    + JDK-8358813: JPasswordField identifies spaces in password via
    delete shortcuts
    + JDK-8359061: Update and ProblemList manual test
    java/awt/Cursor/CursorDragTest/ListDragCursor.java
    + JDK-8359104: gc/TestAlwaysPreTouchBehavior.java#&lt;gcname&gt;
    fails on Linux
    + JDK-8359105: RISC-V: No need for acquire fence in safepoint
    poll during JNI calls
    + JDK-8359127: Amend java/nio/channels/DatagramChannel/
    /PromiscuousIPv6.java to use @requires for OS platform
    selection
    + JDK-8359167: Remove unused test/hotspot/jtreg/vmTestbase/nsk/
    /share/jpda/BindServer.java
    + JDK-8359207: Remove runtime/signal/TestSigusr2.java since it
    is always skipped
    + JDK-8359423: Improve error message in case of missing jsa
    shared archive
    + JDK-8359428: Test 'javax/swing/JTabbedPane/bug4499556.java'
    failed because after selecting one of L&amp;F items, the test case
    automatically failed when clicking on L&amp;F Menu button again
    + JDK-8359449: [TEST] open/test/jdk/java/io/File/SymLinks.java
    Refactor extract method for Windows specific test
    + JDK-8359477: com/sun/net/httpserver/Test12.java appears to
    have a temp file race
    + JDK-8359501: Enhance Handling of URIs
    + JDK-8359687: Use PassFailJFrame for
    java/awt/print/Dialog/DialogType.java
    + JDK-8359690: New test TestCPUTimeSampleThrottling still fails
    intermittently
    + JDK-8359735: [Ubuntu 25.10] java/lang/ProcessBuilder/
    /Basic.java, java/lang/ProcessHandle/InfoTest.java fail due to
    rust-coreutils
    + JDK-8359827: Test runtime/Thread/ThreadCountLimit.java need
    loop increasing the limit
    + JDK-8360022: ClassRefDupInConstantPoolTest.java fails when
    running in repeat
    + JDK-8360090: [TEST] RISC-V: disable some cds tests on qemu
    + JDK-8360178: TestArguments.atojulong gtest has incorrect
    format string
    + JDK-8360219: [AIX] assert(locals_base &gt;= l2) failed: bad
    placement
    + JDK-8360255: runtime/jni/checked/TestLargeUTF8Length.java
    fails with -XX:-CompactStrings
    + JDK-8360408: [TEST] Use @requires tag instead of exiting
    based on "os.name" property value for
    sun/net/www/protocol/file/FileURLTest.java
    + JDK-8360411: [TEST] open/test/jdk/java/io/File/
    /MaxPathLength.java Refactor extract method to encapsulate
    Windows specific test logic
    + JDK-8360518: Docker tests do not work when asan is configured
    + JDK-8360520: RISC-V: C1: Fix primitive array clone intrinsic
    regression after JDK-8333154
    + JDK-8360664: Null pointer dereference in src/hotspot/share/
    /prims/jvmtiTagMap.cpp in
    IterateOverHeapObjectClosure::do_object()
    + JDK-8360783: CTW: Skip deoptimization between tiers
    + JDK-8360791: [ubsan] Adjust signal handling
    + JDK-8360867: CTW: Disable inline cache verification
    + JDK-8360981: Remove use of Thread.stop in
    test/jdk/java/net/Socket/DeadlockTest.java
    + JDK-8361112: Use exact float -&gt; Float16 conversion method in
    Float16 tests
    + JDK-8361180: Disable CompiledDirectCall verification with
  - VerifyInlineCaches
    + JDK-8361198: [AIX] fix misleading error output in
    thread_cpu_time_unchecked
    + JDK-8361211: C2: Final graph reshaping generates unencodeable
    klass constants
    + JDK-8361215: Add AOT test case: verification constraint
    classes are excluded
    + JDK-8361253: CommandLineOptionTest library should report
    observed values on failure
    + JDK-8361255: CTW: Tolerate more NCDFE problems
    + JDK-8361298: SwingUtilities/bug4967768.java fails where
    character P is not underline
    + JDK-8361314: Test serviceability/jvmti/VMEvent/MyPackage/
    /VMEventRecursionTest.java FATAL ERROR in native method:
    Failed during the GetClassSignature call
    + JDK-8361367: AOT ExcludedClasses.java test failed with
    missing constant pool logs
    + JDK-8361423: Add IPSupport::printPlatformSupport to
    java/net/NetworkInterface/IPv4Only.java
    + JDK-8361449: RISC-V: Code cleanup for native call
    + JDK-8361478: GHA: Use MSYS2 from GHA runners
    + JDK-8361494: [IR Framework] Escape too much in replacement of
    placeholder
    + JDK-8361497: Scoped Values: orElse and orElseThrow do not
    access the cache
    + JDK-8361504: RISC-V: Make C1 clone intrinsic platform guard
    more specific
    + JDK-8361520: Stabilize SystemGC benchmarks
    + JDK-8361599: [PPC64] enable missing tests via jtreg requires
    + JDK-8361711: Add library name configurability to
    PKCS11Test.java
    + JDK-8361748: Enforce limits on the size of an XBM image
    + JDK-8361839: Problemlist BogusFocusableWindowState due to
    failures in the CI pipeline
    + JDK-8361868: [GCC static analyzer] complains about missing
    calloc - NULL checks in p11_util.c
    + JDK-8361871: [GCC static analyzer] complains about use of
    uninitialized value ckpObject in p11_util.c
    + JDK-8361888: [GCC static analyzer] ProcessImpl_md.c
    Java_java_lang_ProcessImpl_forkAndExec error: use of
    uninitialized value '*(ChildStuff *)p.mode
    + JDK-8361892: AArch64: Incorrect matching rule leading to
    improper oop instruction encoding
    + JDK-8361897: gc/z/TestUncommit.java fails with Uncommitted
    too slow
    + JDK-8361948: Shenandoah: region free capacity unit mismatch
    + JDK-8361950: Update to use jtreg 8
    + JDK-8361959: [GCC static analyzer] java_props_md.c  leak of
    'temp'  variable is reported
    + JDK-8362107: Update the Jan CPU26_01 release date in master
    branch after forking Oct CPU25_10
    + JDK-8362123: ClassLoader Leak via
    Executors.newSingleThreadExecutor(...)
    + JDK-8362169: Pointer passed to upcall may get wrong scope
    + JDK-8362204: test/jdk/sun/awt/font/TestDevTransform.java
    fails on Ubuntu 24.04
    + JDK-8362207: Add more test cases for possible double-rounding
    in fma
    + JDK-8362282: runtime/logging/StressAsyncUL.java failed with
    exitValue = 134
    + JDK-8362308: Enhance Bitmap operations
    + JDK-8362379: Test serviceability/HeapDump/
    /UnmountedVThreadNativeMethodAtTop.java should mark as /native
    + JDK-8362390: AIX make fails in awt_GraphicsEnv.c
    + JDK-8362482: [TESTBUG] serviceability/HeapDump/
    /UnmountedVThreadNativeMethodAtTop.java: System.gc() does not
    provide full GC
    + JDK-8362501: Update test/hotspot/jtreg/applications/jcstress/
    /README
    + JDK-8362515: RISC-V: cleanup NativeFarCall
    + JDK-8362516: Support of GCC static analyzer (-fanalyzer)
    + JDK-8362530: VM crash with -XX:+PrintTieredEvents when
    collecting AOT profiling
    + JDK-8362532: Test gc/g1/plab/* duplicate command-line options
    + JDK-8362533: Tests sun/management/jmxremote/bootstrap/*
    duplicate VM flags
    + JDK-8362581: Timeouts in
    java/nio/channels/SocketChannel/OpenLeak.java on UNIX
    + JDK-8362582: GHA: Increase bundle retention time to deal with
    infra overload better
    + JDK-8362596: RISC-V: Improve _vectorizedHashCode intrinsic
    + JDK-8362602: Add test.timeout.factor to CompileFactory to
    avoid test timeouts
    + JDK-8362632: Improve HttpServer Request handling
    + JDK-8362834: Several runtime/Thread tests should mark as
    /native
    + JDK-8362836: JFR: Broken pipe in
    jdk/jfr/event/io/TestIOTopFrame.java
    + JDK-8362838: RISC-V: Incorrect matching rule leading to
    improper oop instruction encoding
    + JDK-8362855: Test java/net/ipv6tests/TcpTest.java should
    report SkippedException when there no ia4addr  or ia6addr
    + JDK-8362889: [GCC static analyzer] leak in
    libstringPlatformChars.c
    + JDK-8362972: C2 fails with unexpected node in SuperWord
    truncation: IsFiniteF, IsFiniteD
    + JDK-8363676: [GCC static analyzer] missing return value check
    of malloc in OGLContext_SetTransform
    + JDK-8363696: Update the release version and date for OpenJDK
    25u
    + JDK-8363720: Follow up to JDK-8360411 with post review
    comments
    + JDK-8363895: Minimal build fails with slowdebug builds after
    JDK-8354887
    + JDK-8363898: RISC-V: TestRangeCheckHoistingScaledIV.java
    fails after JDK-8355293 when running without RVV
    + JDK-8363910: Avoid tuning for Power10 CPUs on Linux ppc64le
    when gcc &lt; 10 is used
    + JDK-8363928: Specifying AOTCacheOutput with a blank path
    causes the JVM to crash
    + JDK-8363965: GHA: Switch cross-compiling sysroots to Debian
    bookworm
    + JDK-8363966: GHA: Switch cross-compiling sysroots to Debian
    trixie
    + JDK-8364090: Dump JFR recording on CrashOnOutOfMemoryError
    + JDK-8364111: InstanceMirrorKlass iterators should handle CDS
    and hidden classes consistently
    + JDK-8364114: Test
    TestHugePageDecisionsAtVMStartup.java#LP_enabled fails when no
    free hugepage
    + JDK-8364120: RISC-V: unify the usage of
    MacroAssembler::instruction_size
    + JDK-8364150: RISC-V: Leftover for JDK-8343430 removing old
    trampoline call
    + JDK-8364177: JDK fails to build due to undefined symbol in
    libpng on LoongArch64
    + JDK-8364184: [REDO] AArch64: [VectorAPI] sve vector math
    operations are not supported after JDK-8353217
    + JDK-8364190: JFR: RemoteRecordingStream withers don't work
    + JDK-8364198: NMT should have a better corruption message
    + JDK-8364199: Enhance list of environment variables printed in
    hserr/hsinfo file
    + JDK-8364212: Shenandoah: Rework archived objects loading
    + JDK-8364214: Enhance polygon data support
    + JDK-8364235: Fix for JDK-8361447 breaks the alignment
    requirements for GuardedMemory
    + JDK-8364257: JFR: User-defined events and settings with a
    one-letter name cannot be configured
    + JDK-8364263: HttpClient: Improve encapsulation of ProxyServer
    + JDK-8364296: Set IntelJccErratumMitigation flag ergonomically
    + JDK-8364352: Some tests fail when using a limited number of
    pregenerated .jsa CDS archives
    + JDK-8364454: ProblemList runtime/cds/DeterministicDump.java
    on macos for JDK-8363986
    + JDK-8364503: gc/g1/TestCodeCacheUnloadDuringConcCycle.java
    fails because of race printing to stdout
    + JDK-8364514: [asan] runtime/jni/checked/
    /TestCharArrayReleasing.java heap-buffer-overflow
    + JDK-8364556: JFR:  Disable SymbolTableStatistics and
    StringTableStatistics in default.jfc
    + JDK-8364597: Replace THL A29 Limited with Tencent
    + JDK-8364611: (process) Child process SIGPIPE signal
    disposition should be default
    + JDK-8364660: ClassVerifier::ends_in_athrow() should be removed
    + JDK-8364764: java/nio/channels/vthread/BlockingChannelOps.java
    subtests timed out
    + JDK-8364786: Test java/net/vthread/HttpALot.java
    intermittently fails - 24999 handled, expected 25000
    + JDK-8364984: Many jpackage tests are failing on Linux after
    JDK-8334238
    + JDK-8364993: JFR: Disable jdk.ModuleExport in default.jfc
    + JDK-8364996: java/awt/font/FontNames/LocaleFamilyNames.java
    times out on Windows
    + JDK-8365058: Enhance CopyOnWriteArraySet
    + JDK-8365071: ARM32: JFR intrinsic jvm_commit triggers C2
    regalloc assert
    + JDK-8365086: CookieStore.getURIs() and get(URI) should return
    an immutable List
    + JDK-8365165: Zap C-heap memory at delete/free
    + JDK-8365166: ARM32: missing os::fetch_bcp_from_context
    implementation
    + JDK-8365168: Use 64-bit aligned addresses for CK_ULONG access
    in PKCS11 native key code
    + JDK-8365200: RISC-V: compiler/loopopts/superword/
    /TestGeneralizedReductions.java fails with Zvbb and vlen=128
    + JDK-8365206: RISC-V: compiler/c2/irTests/
    /TestFloat16ScalarOperations.java is failing on riscv64
    + JDK-8365240: [asan] exclude some tests when using asan
    enabled binaries
    + JDK-8365260: Problemlist 1 test due to failures in the CI
    pipeline
    + JDK-8365265: x86 short forward jump exceeds 8-bit offset in
    methodHandles_x86.cpp when using Intel APX
    + JDK-8365271: Improve Swing supports
    + JDK-8365280: Enhance JOptionPane
    + JDK-8365302: RISC-V: compiler/loopopts/superword/
    /TestAlignVector.java fails when vlen=128
    + JDK-8365307: AIX make fails after JDK-8364611
    + JDK-8365312: GCC 12 cannot compile SVE on aarch64 with
    auto-var-init pattern
    + JDK-8365389: Remove static color fields from SwingUtilities3
    and WindowsMenuItemUI
    + JDK-8365425: [macos26] javax/swing/JInternalFrame/8160248/
    /JInternalFrameDraggingTest.java fails on macOS 26
    + JDK-8365442: [asan] runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java fails
    + JDK-8365468: EagerJVMCI should only apply to the
    CompilerBroker JVMCI runtime
    + JDK-8365487: [asan] some oops (mode) related tests fail
    + JDK-8365543: UnixNativeDispatcher.init should lookup open64at
    and stat64at on AIX
    + JDK-8365571: GenShen: PLAB promotions may remain disabled for
    evacuation threads
    + JDK-8365615: Improve JMenuBar/RightLeftOrientation.java
    + JDK-8365638: JFR: Add --exact for debugging out-of-order
    events
    + JDK-8365660: test/jdk/sun/security/pkcs11/KeyAgreement/ tests
    skipped without SkipException
    + JDK-8365700: Jar --validate without any --file option leaves
    around a temporary file /tmp/tmpJar&lt;number&gt;.jar
    + JDK-8365726: Test crashed with assert in C1 thread: Possible
    safepoint reached by thread that does not allow it
    + JDK-8365772: RISC-V: correctly prereserve NaN payload when
    converting from float to float16 in vector way
    + JDK-8365790: Shutdown hook for application image does not
    work on Windows
    + JDK-8365811: test/jdk/java/net/CookieHandler/B6644726.java
    failure - "Should have 5 cookies. Got only 4, expires probably
    didn't parse correctly"
    + JDK-8365823: Revert storing abstract and interface Klasses to
    non-class metaspace
    + JDK-8365834: Mark java/net/httpclient/ManyRequests.java  as
    intermittent
    + JDK-8365841: RISC-V: Several IR verification tests fail after
    JDK-8350960 without Zvfh
    + JDK-8365844: RISC-V: TestBadFormat.java fails when running
    without RVV
    + JDK-8365863: /test/jdk/sun/security/pkcs11/Cipher tests skip
    without SkippedException
    + JDK-8365913: Support latest MSC_VER in abstract_vm_version.cpp
    + JDK-8365919: Replace currentTimeMillis with nanoTime in
    Stresser.java
    + JDK-8365926: RISC-V: Performance regression in renaissance
    (chi-square)
    + JDK-8365956: GenShen: Adaptive tenuring threshold algorithm
    may raise threshold prematurely
    + JDK-8365983: Tests should throw SkippedException when SCTP
    not supported
    + JDK-8366028: MethodType::fromMethodDescriptorString should
    not throw UnsupportedOperationException for invalid
    descriptors
    + JDK-8366029: Do not add -XX:VerifyArchivedFields by default
    to CDS tests
    + JDK-8366031: Mark com/sun/nio/sctp/SctpChannel/
    /CloseDescriptors.java as intermittent
    + JDK-8366075: Problemlist 2 tests due to failures in the CI
    pipeline
    + JDK-8366092: [GCC static analyzer] UnixOperatingSystem.c
    warning: use of uninitialized value 'systemTicks'
    + JDK-8366147: ZGC:
    ZPageAllocator::cleanup_failed_commit_single_partition may
    leak memory
    + JDK-8366159: SkippedException is treated as a pass for
    pkcs11/KeyStore, pkcs11/SecretKeyFactory and
    pkcs11/SecureRandom
    + JDK-8366208: Unexpected exception in
    sun.java2d.cmm.lcms.LCMSImageLayout
    + JDK-8366229: runtime/Thread/TooSmallStackSize.java runs with
    all collectors
    + JDK-8366250: Problemlist 3 tests due to failures in the CI
    pipeline
    + JDK-8366340: Problemlist 1 test due to failures in the CI
    pipeline
    + JDK-8366342: Key generator and key pair generator tests
    skipping, but showing as passed
    + JDK-8366359: Test should throw SkippedException when there is
    no lpstat
    + JDK-8366365: [test] test/lib-test/jdk/test/whitebox/
    /CPUInfoTest.java should be updated
    + JDK-8366434: THP not working properly with G1 after
    JDK-8345655
    + JDK-8366446: Test java/awt/geom/ConcurrentDrawPolygonTest.java
    fails intermittently
    + JDK-8366537: Test "java/util/TimeZone/
    /DefaultTimeZoneTest.java" is not updating the zone ID as
    expected
    + JDK-8366558: Gtests leave /tmp/cgroups-test* files
    + JDK-8366694: Test JdbStopInNotificationThreadTest.java timed
    out after 60 second
    + JDK-8366750: Remove test 'java/awt/Choice/
    /ChoiceMouseWheelTest/ChoiceMouseWheelTest.java' from
    problemlist
    + JDK-8366764: Deproblemlist java/awt/ScrollPane/
    /ScrollPositionTest.java
    + JDK-8366800: Problemlist 1 test due to failures in the CI
    pipeline
    + JDK-8366844: Update and automate
    MouseDraggedOriginatedByScrollBarTest.java
    + JDK-8366850: Test com/sun/jdi/
    /JdbStopInNotificationThreadTest.java failed
    + JDK-8366893: java/lang/Thread/virtual/stress/
    /GetStackTraceALotWhenPinned.java timed out on macos-aarch64
    + JDK-8366948: AOT cache creation crashes when iterating
    training data
    + JDK-8366980: TestTransparentHugePagesHeap.java fails when run
    with -UseCompressedOops
    + JDK-8367017: Remove legacy checks from WrappedToolkitTest and
    convert from bash
    + JDK-8367021: Regression in LocaleDataTest refactoring
    + JDK-8367048: RISC-V: Correct pipeline descriptions of the
    architecture
    + JDK-8367066: RISC-V: refine register selection in
    MacroAssembler:: decode_klass_not_null
    + JDK-8367098: RISC-V: sync CPU features with related JVM flags
    for dependant ones
    + JDK-8367131: Test com/sun/jdi/ThreadMemoryLeakTest.java fails
    on 32 bits
    + JDK-8367133: DTLS: fragmentation of Finished message results
    in handshake failure
    + JDK-8367137: RISC-V: Detect Zicboz block size via hwprobe
    + JDK-8367237: Thread-Safety Usage Warning for
    java.text.Collator Classes
    + JDK-8367277: Fix copyright header in
    JMXInterfaceBindingTest.java
    + JDK-8367313: CTW: Execute in AWT headless mode
    + JDK-8367333: C2: Vector math operation intrinsification
    failure
    + JDK-8367348: Enhance PassFailJFrame to support links in HTML
    + JDK-8367378: GenShen: Missing timing stats when old mark
    buffers are flushed during final update refs
    + JDK-8367384: The ICC_Profile class may throw exceptions
    during serialization
    + JDK-8367598: Switch to CRC32C for SEED calculation in
    jdk.test.lib.Utils
    + JDK-8367616: RISC-V: Auto-enable Zicboz extension for debug
    builds
    + JDK-8367689: Revert removal of several compilation-related
    vmStructs fields
    + JDK-8367692: RISC-V: Align post call nop
    + JDK-8367694: Fix jtreg test failure when Intel APX is enabled
    for KNL platforms
    + JDK-8367780: Enable UseAPX on Intel CPUs only when both APX_F
    and APX_NCI_NDD_NF cpuid features are present
    + JDK-8367782: VerifyJarEntryName.java: Fix modifyJarEntryName
    to operate on bytes and re-introduce verifySignatureEntryName
    + JDK-8367869: Test java/io/FileDescriptor/Sync.java timed out
    + JDK-8367904: Test java/net/InetAddress/ptr/Lookup.java should
    throw SkippedException
    + JDK-8367948: JFR: MethodTrace threshold setting has no effect
    + JDK-8367953: JFR sampler threads does not appear in thread
    dump
    + JDK-8367969: C2: compiler/vectorapi/TestVectorMathLib.java
    fails without UnlockDiagnosticVMOptions
    + JDK-8367988: NewFileSystemTests.readOnlyZipFileFailure fails
    when run by root user
    + JDK-8368032: Enhance Certificate Checking
    + JDK-8368071: Compilation throughput regressed 2X-8X after
    JDK-8355003
    + JDK-8368152: Shenandoah: Incorrect behavior at end of
    degenerated cycle
    + JDK-8368192: Test java/lang/ProcessBuilder/Basic.java#id0
    fails with Exception: Stack trace
    + JDK-8368366: RISC-V: AlignVector is mistakenly set to
    AvoidUnalignedAccesses
    + JDK-8368367: Test jdk/jfr/event/gc/detailed/
    /TestGCHeapMemoryUsageEvent.java fails  jdk.GCHeapMemoryUsage
    "expected 0 &gt; 0"
    + JDK-8368565: Adjust comment regarding dependency of libjvm.so
    to librt
    + JDK-8368606: Printer lookup returns empty on AIX platform due
    to uninitialized results list
    + JDK-8368668: Several vmTestbase/vm/gc/compact tests timed out
    on large memory machine
    + JDK-8368670: Deadlock in JFR on event register + class load
    + JDK-8368698: runtime/cds/appcds/aotCache/OldClassSupport.java
    assert(can_add()) failed: Cannot add TrainingData objects
    + JDK-8368732: RISC-V: Detect support for misaligned vector
    access via hwprobe
    + JDK-8368890: open/test/jdk/tools/jpackage/macosx/
    /NameWithSpaceTest.java fails randomly
    + JDK-8368893: RISC-V: crash after JDK-8352673 on fastdebug
    version
    + JDK-8368960: Adjust java UL logging in the build
    + JDK-8368982: Test sun/security/tools/jarsigner/EC.java
    completed and timed out
    + JDK-8369078: Fix faulty test conversion in
    IllegalCharsetName.java
    + JDK-8369184: SimpleTimeZone equals() Returns True for Unequal
    Instances with Different hashCode Values
    + JDK-8369190: JavaFrameAnchor on AArch64 has unnecessary
    barriers and wrong store order in MacroAssembler
    + JDK-8369226: GHA: Switch to MacOS 15
    + JDK-8369319: java/net/httpclient/CancelRequestTest.java fails
    intermittently
    + JDK-8369450: [Ubuntu 25.10] openjdk fails to build due to
    rust-coreutils date
    + JDK-8369487: Revert EA option for build promotion
    + JDK-8369506: Bytecode rewriting causes Java heap corruption
    on AArch64
    + JDK-8369560: Slowdebug build without CDS fails
    + JDK-8369563: Gtest dll_address_to_function_and_library_name
    has issues with stripped pdb files
    + JDK-8369616: JavaFrameAnchor on RISC-V has unnecessary
    barriers and wrong store order in MacroAssembler
    + JDK-8369656: Calling CompletableFuture.join() could execute
    task in common pool
    + JDK-8369657: [AIX] TOC overflow in static-launcher build when
    building slowdebug after JDK-8352064
    + JDK-8369853: jpackage signing tests fail after JDK-8358723
    + JDK-8369868: Compilation error in Win8365790Test.java with
    JDK-8358723 fix resulting in CI tier3 failure
    + JDK-8369946: Bytecode rewriting causes Java heap corruption
    on PPC
    + JDK-8369947: Bytecode rewriting causes Java heap corruption
    on RISC-V
    + JDK-8369979: Flag UsePopCountInstruction was accidentally
    disabled on PPC64
    + JDK-8370048: Shenandoah: Deprecated ShenandoahPacing option
    + JDK-8370049: [s390x] G1 barrier compareAndExchange does not
    return old value when compareExchange fails
    + JDK-8370318: AES-GCM vector intrinsic may read out of bounds
    (x86_64, AVX-512)
    + JDK-8370331: Problemlist 2 tests due to failures in the CI
    pipeline
    + JDK-8370428: Change milestone to fcs for all releases
    + JDK-8370465: Right to Left Orientation Issues with MenuItem
    Component
    + JDK-8371094: --mac-signing-key-user-name no longer works
    + JDK-8371425: Include folder names in vscode workspace virtual
    folders
    + JDK-8371697: test/jdk/java/nio/file/FileStore/Basic.java
    fails after 8360887 on linux
    + JDK-8372753: jpackage ignores --file-associations option with
    predefined app image</changelog>
  <changelog author="fstrba@suse.com" date="1773662400">- Provide the timezone-java and tzdata-java (jsc#PED-15898)</changelog>
  <changelog author="fstrba@suse.com" date="1774353600">- Migrate to the new logic of FIPS patch developed by RedHat in
  https://github.com/rh-openjdk/jdk/tree/fips-25u
- Add the sources of /nss-native-fips-key-import-export-adapter
  * This native library is an adapter for OpenJDK to use the NSS
    PKCS #11 software token (libsoftokn3.so) in FIPS mode. It
    provides support to import and export secret and private key
    material in plain. This enables Java applications to manage
    PKCS #12 key stores through the java.security.KeyStore API and
    benefit from FIPS-certified cryptography. Note: this library
    replaces the Java FIPS Key Importer Exporter in previous
    versions of this package (FIPSKeyImporter.java).
- Modified patch:
  * fips.patch
    + diff the https://github.com/rh-openjdk/jdk/tree/fips-25u
    to the release tag jdk-25.0.2-ga and adapt for SUSE
- Added patches:
  * nssadapter-Allow-overriding-of-gcc-name.patch
    + Allow specifying CC variables on system where the default
    gcc is too old for the features needed in the nssadapter
  * nssadapter-Fix-build-on-openSUSE.patch
    + make the build work well with SUSE packaging of NSS
  * 0001-Don-t-make-missing-system-crypto-policies-fatal.patch
    + prevent OpenJDK from throwing exception if an "include"d
    security config file is missing.
    + Allows the same package running on systems that don't provide
    the crypto-policies package as well as on those that provide
    it
- Add create-crypto-properties-files.bash that generates during the
  build the config files for different fips and non-fips scenarios
- Add TestSecurityProperties.java to test the loading of system
  security properties where applicable</changelog>
  <changelog author="fstrba@suse.com" date="1777204800">- Update to upstream tag jdk-25.0.3+9 (April 2026 CPU)
  * CVEs
    + CVE-2026-22007 (bsc#1262490)
    + CVE-2026-22008 (bsc#1262493)
    + CVE-2026-22013 (bsc#1262494)
    + CVE-2026-22016 (bsc#1262495)
    + CVE-2026-22018 (bsc#1262496)
    + CVE-2026-22021 (bsc#1262497)
    + CVE-2026-23865 (bsc#1259118)
    + CVE-2026-34268 (bsc#1262500)
    + CVE-2026-34282 (bsc#1262501)
  * Changes
    + JDK-7191877: TEST_BUG: java/rmi/transport/checkLeaseInfoLeak/
    /CheckLeaseLeak.java failing intermittently
    + JDK-8030957: AIX: Implement OperatingSystemMXBean
    .getSystemCpuLoad() and .getProcessCpuLoad() on AIX
    + JDK-8068378: [TEST_BUG]The java/awt/Modal/PrintDialogsTest/
    /PrintDialogsTest.java instruction need to update
    + JDK-8183336: Better cleanup for jdk/test/java/lang/module/
    /customfs/ModulesInCustomFileSystem.java
    + JDK-8212084: G1: Implement UseGCOverheadLimit
    + JDK-8244336: Restrict algorithms at JCE layer
    + JDK-8246037: Shenandoah: update man pages to mention
  - XX:+UseShenandoahGC
    + JDK-8255463: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed with
    ThreadTimeoutException
    + JDK-8256289: java/awt/Focus/AppletInitialFocusTest/
    /AppletInitialFocusTest1.java failed with "RuntimeException:
    Wrong focus owner:
    java.awt.Button[button1,41,36,56x23,label=Button1]"
    + JDK-8274082: Wrong test name in jtreg run tag for
    java/awt/print/PrinterJob/SwingUIText.java
    + JDK-8286258: [Accessibility,macOS,VoiceOver] VoiceOver reads
    the spinner value wrong and sometime partially
    + JDK-8286865: vmTestbase/vm/mlvm/meth/stress/jni/nativeAndMH/
    /Test.java fails with Out of space in CodeCache
    + JDK-8287062: com/sun/jndi/ldap/LdapPoolTimeoutTest.java
    failed due to different timeout message
    + JDK-8293484: AArch64:
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails on CPU
    with SHA512 feature support
    + JDK-8299304: Test "java/awt/print/PrinterJob/
    /PageDialogTest.java" fails on macOS 13 x64 because the Page
    Dialog blocks the Toolkit
    + JDK-8307495: Specialize atomic bitset functions for aix-ppc
    + JDK-8313770: jdk/internal/platform/docker/
    /TestSystemMetrics.java fails on Ubuntu
    + JDK-8316274: javax/swing/ButtonGroup/
    /TestButtonGroupFocusTraversal.java fails in Ubuntu 23.10 with
    Motif LAF
    + JDK-8317838: java/nio/channels/Channels/
    /SocketChannelStreams.java running into timeout (aix)
    + JDK-8318662: Refactor some jdk/java/net/httpclient/http2
    tests to JUnit
    + JDK-8320677: Printer tests use invalid '@run main/manual=yesno
    + JDK-8333857: Test sun/security/ssl/SSLSessionImpl/
    /ResumeChecksServer.java failed: Existing session was used
    + JDK-8333871: Check return values of sysinfo
    + JDK-8334928: Test sun/security/ssl/SSLSocketImpl/
    /ReuseAddr.java failed: java.net.BindException: Address
    already in use
    + JDK-8335646: Nimbus : JLabel not painted with LAF defined
    foreground color on Ubuntu 24.04
    + JDK-8336695: Update Commons BCEL to Version 6.10.0
    + JDK-8339791: Refactor MiscUndecorated/ActiveAWTWindowTest.java
    + JDK-8341039: compiler/cha/TypeProfileFinalMethod.java fails
    with assertEquals expected: 0 but was: 2
    + JDK-8342175: MemoryEaterMT fails intermittently with
    ExceptionInInitializerError
    + JDK-8342401: [TESTBUG] javax/swing/JSpinner/8223788/
    /JSpinnerButtonFocusTest.java test fails in ubuntu 22.04 on
    SBR Hosts
    + JDK-8342640: GenShen: Silently ignoring
    ShenandoahGCHeuristics considered poor user-experience
    + JDK-8342659: Test vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    failed: Class nsk.share.jdi.TestClass1 was not unloaded
    + JDK-8343316: Review and update tests using explicit provider
    names
    + JDK-8343340: Swapping checking do not work for
    MetricsMemoryTester failcount
    + JDK-8343474: [updates] Customize README.md to specifics of
    update project
    + JDK-8344073: Test runtime/cds/appcds/
    /TestParallelGCWithCDS.java#id0 failed
    + JDK-8346154: [XWayland] Some tests fail intermittently in the
    CI, but not locally
    + JDK-8346962: Test CRLReadTimeout.java fails with -Xcomp on a
    fastdebug build
    + JDK-8348014: Enhance certificate processing
    + JDK-8349192: jvmti/scenarios/contention/TC05/tc05t001 fails:
    ERROR: tc05t001.cpp, 281: (waitedThreadCpuTime -
    waitThreadCpuTime) &lt; (EXPECTED_ACCURACY * 1000000)
    + JDK-8352149: Test java/awt/Frame/MultiScreenTest.java fails:
    Window list is empty
    + JDK-8353755: Add a helper method to Util - findComponent()
    + JDK-8354244: Use random data in MinMaxRed_Long data arrays
    + JDK-8354469: Keytool exposes the password in plain text when
    command is piped using | grep
    + JDK-8354894: java/lang/Thread/virtual/Starvation.java timeout
    on server with high CPUs
    + JDK-8354937: Cleanup some sparc related coding in os_linux
    + JDK-8356548: Use ClassFile API instead of ASM to transform
    classes in tests
    + JDK-8356868: Not all cgroup parameters are made available
    + JDK-8357277: Update OpenSSL library for interop tests
    + JDK-8357380: java/lang/StringBuilder/RacingSBThreads.java
    times out with C1
    + JDK-8357390: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java Test failing on Ubuntu 24.04 Vm Hosts
    used by Oracle's internal CI system
    + JDK-8357470: src/java.base/share/classes/sun/security/util/
    /Debug.java implement the test for args.toLowerCase
    + JDK-8357570: [macOS] os::Bsd::available_memory() might return
    too low values
    + JDK-8357591: Re-enable CDS test cases for jvmci after
    JDK-8345826
    + JDK-8358058: sun/java2d/OpenGL/DrawImageBg.java Test fails
    intermittently
    + JDK-8358159: Empty mode/padding in cipher transformations
    + JDK-8358529: GenShen: Heuristics do not respond to changes in
    SoftMaxHeapSize
    + JDK-8358679: [asan] vmTestbase/nsk/jvmti tests show memory
    issues
    + JDK-8358686: CDS and AOT can cause buffer truncation warning
    even when logging is disabled
    + JDK-8358735: GenShen: block_start() may be incorrect after
    class unloading
    + JDK-8358756: [s390x] Test StartupOutput.java crash due to
    CodeCache size
    + JDK-8358801: javac produces class that does not pass verifier.
    + JDK-8359064: Expose reason for marking nmethod non-entrant to
    JVMCI client
    + JDK-8359182: Use @requires instead of SkippedException for
    MaxPath.java
    + JDK-8359388: Stricter checking for cipher transformations
    + JDK-8359418: Test "javax/swing/text/GlyphView/bug4188841.java"
    failed because the phrase of text pane does not match the
    instructions
    + JDK-8359472: JVM crashes when attaching a dynamic agent
    before JVMTI_PHASE_LIVE
    + JDK-8359707: Add classfile modification code to
    RedefineClassHelper
    + JDK-8359868: Shenandoah: Free threshold heuristic does not
    use SoftMaxHeapSize
    + JDK-8359978: Test javax/net/ssl/SSLSocket/Tls13PacketSize.java
    failed again with java.net.SocketException: An established
    connection was aborted by the software in your host machine
    + JDK-8360049: CodeInvalidationReasonTest.java fails with ZGC
    on AArch64
    + JDK-8360160: ubuntu-22-04 machine is failing client tests
    + JDK-8360169: Problem list CodeInvalidationReasonTest.java on
    linux-riscv64 until JDK-8360168 is fixed
    + JDK-8360271: String.indexOf intrinsics fail with
    +EnableX86ECoreOpts and -CompactStrings
    + JDK-8360395: sun/security/tools/keytool/i18n.java user
    country is current user location instead of the language
    + JDK-8360539: DTLS handshakes fails due to improper cookie
    validation logic
    + JDK-8360562: sun/security/tools/keytool/i18n.java add an
    ability to add comment for failures
    + JDK-8360702: runtime/Thread/AsyncExceptionTest.java timed out
    + JDK-8360882: Tests throw SkippedException when they should
    fail
    + JDK-8361067: Test ExtraButtonDrag.java requires frame.dispose
    in finally block
    + JDK-8361106: [TEST] com/sun/net/httpserver/Test9.java fails
    with java.nio.file.FileSystemException
    + JDK-8361363: ShenandoahAsserts::print_obj() does not work for
    forwarded objects and UseCompactObjectHeaders
    + JDK-8361381: GlyphLayout behavior differs on JDK 11+ compared
    to JDK 8
    + JDK-8361492: [IR Framework] Has too restrictive regex for
    load and store
    + JDK-8361521: BogusFocusableWindowState.java fails with
    StackOverflowError on Linux
    + JDK-8361530: Test javax/swing/GraphicsConfigNotifier/
    /StalePreferredSize.java timed out
    + JDK-8361613: System.console() should only be available for
    interactive terminal
    + JDK-8361894: sun/security/krb5/config/native/
    /TestDynamicStore.java ensure that the test is run with sudo
    + JDK-8362284: RISC-V: cleanup NativeMovRegMem
    + JDK-8362979: C2 fails with unexpected node in SuperWord
    truncation: CmpLTMask, RoundF
    + JDK-8363950: Incorrect jtreg header in TestLayoutVsICU.java
    + JDK-8364373: Transform Affine transformations
    + JDK-8364465: Enhance behavior of some intrinsics
    + JDK-8364580: Test compiler/vectorization/
    /TestSubwordTruncation.java fails on platforms without
    RoundF/RoundD
    + JDK-8364741: [asan] runtime/ErrorHandling/
    /PrintVMInfoAtExitTest.java fails because output differs
    slightly
    + JDK-8364756: JFR: Improve slow tests
    + JDK-8364936: Shenandoah: Switch nmethod entry barriers to
    conc_instruction_and_data_patch
    + JDK-8365065: cancelled ForkJoinPool tasks no longer throw
    CancellationException
    + JDK-8365184: sun/tools/jhsdb/
    /HeapDumpTestWithActiveProcess.java Re-enable SerialGC flag on
    debuggee process
    + JDK-8365305: The ARIA role ‘contentinfo’ is not valid for the
    element &lt;footer&gt;
    + JDK-8365398: TEST_BUG: java/rmi/transport/checkLeaseInfoLeak/
    /CheckLeaseLeak.java failing intermittently
    + JDK-8365526: Crash with null Symbol passed to
    SystemDictionary::resolve_or_null
    + JDK-8365570: C2 fails assert(false) failed: Unexpected node
    in SuperWord truncation: CastII
    + JDK-8365776: Convert JShell tests to use JUnit instead of
    TestNG
    + JDK-8365861: test/jdk/sun/security/pkcs11/Provider/ tests
    skipped without SkippedException
    + JDK-8365972: JFR: ThreadDump and ClassLoaderStatistics events
    may cause back to back rotations
    + JDK-8366082: Improve queue size computation in CPU-time
    sampler
    + JDK-8366128: jdk/jdk/nio/zipfs/TestPosix.java::testJarFile
    uses wrong file
    + JDK-8366182: Some PKCS11Tests are being skipped when they
    shouldn't
    + JDK-8366261: Provide utility methods for
    sun.security.util.Password
    + JDK-8366278: Form control element &lt;select&gt; has no associated
    label
    + JDK-8366369: Add @requires linux for GTK L&amp;F tests
    + JDK-8366486: Test jdk/jfr/event/profiling/
    /TestCPUTimeSampleMultipleRecordings.java is timing out
    + JDK-8366733: Re-examine older java.text NF, DF, and DFS
    serialization tests
    + JDK-8366747: RISC-V: Improve VerifyMethodHandles for method
    handle linkers
    + JDK-8366817: test/jdk/javax/net/ssl/TLSCommon/interop/
    /JdkProcServer.java and JdkProcClient.java should not delete
    logs
    + JDK-8366874: Test gc/arguments/TestParallelGCErgo.java fails
    with UseTransparentHugePages
    + JDK-8366878: Improve flags of
    compiler/loopopts/superword/TestAlignVectorFuzzer.java
    + JDK-8366908: Use a different class for testing JDK-8351654
    + JDK-8366938: Test runtime/handshake/HandshakeTimeoutTest.java
    crashed
    + JDK-8366951: Test runtime/logging/StressAsyncUL.java is
    timing out
    + JDK-8367135: Test compiler/loopstripmining/
    /CheckLoopStripMining.java needs internal timeouts adjusted
    + JDK-8367271: Add parsing tests to DateFormat JMH benchmark
    + JDK-8367278: Test compiler/startup/StartupOutput.java timed
    out after completion on Windows
    + JDK-8367302: New test jdk/jfr/event/profiling/
    /TestCPUTimeSampleQueueAutoSizes.java from JDK-8366082 is
    failing
    + JDK-8367371: Remove @requires vm.opt.UseLargePages from
    InternSharedString.java test
    + JDK-8367372: Test 'test/hotspot/jtreg/gc/
    /TestObjectAlignmentCardSize.java' fails on 32 bit systems
    + JDK-8367463: Improved Arena allocations
    + JDK-8367583: sun/security/util/AlgorithmConstraints/
    /InvalidCryptoDisabledAlgos.java fails after JDK-8244336
    + JDK-8367772: Refactor createUI in PassFailJFrame
    + JDK-8367784: java/awt/Focus/InitialFocusTest/
    /InitialFocusTest1.java failed with Wrong focus owner
    + JDK-8367862: debug.cpp: Do not print help message for methods
    ifdef'd out
    + JDK-8367901: Calendar.roll(hour, 24) returns wrong result
    + JDK-8367994: test/jdk/sun/security/pkcs11/Signature/ tests
    pass when they should skip
    + JDK-8368029: Several tests in httpserver/simpleserver should
    throw SkipException
    + JDK-8368182: AOT cache creation fails with class defined by
    JNI
    + JDK-8368328: CompactNumberFormat.clone does not produce
    independent instances
    + JDK-8368335: Refactor the rest of Locale TestNG based tests
    to JUnit
    + JDK-8368498: Use JUnit instead of TestNG for jdk_text tests
    + JDK-8368500: ContextClassLoader cannot be reset on threads in
    ForkJoinPool.commonPool()
    + JDK-8368551: Core dump warning may be confusing
    + JDK-8368625: com/sun/net/httpserver/
    /ServerStopTerminationTest.java fails intermittently
    + JDK-8368677: acvp test should throw SkippedException when no
    ACVP-Server available
    + JDK-8368683: [process] Increase jtreg debug output
    maxOutputSize for TreeTest
    + JDK-8368754: runtime/cds/appcds/SignedJar.java log regex is
    too strict
    + JDK-8368787: Error reporting: hs_err files should show
    instructions when referencing code in nmethods
    + JDK-8368866: compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java intermittent timed out
    + JDK-8368882: NPE during text drawing on machine with JP locale
    + JDK-8368885: NMT CommandLine tests can check for error better
    + JDK-8368892: Make JEditorPane/TestBrowserBGColor.java headless
    + JDK-8369032: Add test to ensure serialized ICC_Profile stores
    only necessary optional data
    + JDK-8369050: DecimalFormat Rounding Errors for Fractional
    Ties Near Zero
    + JDK-8369227: Virtual thread stuck in PARKED state
    + JDK-8369255: Assess and remedy any unsafe usage of the
    Semaphores used by JFR
    + JDK-8369282: Distrust TLS server certificates anchored by
    Chunghwa ePKI Root CA
    + JDK-8369335: Two  sun/java2d/OpenGL tests fail on Windows
    after JDK-8358058
    + JDK-8369505: jhsdb jstack cannot handle continuation stub
    + JDK-8369516: Delete duplicate imaging test
    + JDK-8369575: Enhance crypto algorithm support
    + JDK-8369804: TestGenerators.java fails with
    IllegalArgumentException: bound must be greater than origin
    + JDK-8369851: Remove darcy author tags from langtools tests
    + JDK-8369858: Remove darcy author tags from jdk tests
    + JDK-8369881: C2: Unexpected node in SuperWord truncation:
    ReverseBytesS, ReverseBytesUS
    + JDK-8369911: Test sun/java2d/marlin/
    /ClipShapeTest.java#CubicDoDash, #Cubic and #Poly fail
    intermittent
    + JDK-8369991: Thread blocking during JFR emergency dump must
    be in safepoint safe state
    + JDK-8370036: TestJhsdbJstackWithVirtualThread.java fails when
    run with -showversion
    + JDK-8370064: Test runtime/NMT/
    /CheckForProperDetailStackTrace.java fails on Windows when
    using stripped pdb files
    + JDK-8370197: Add missing @Override annotations in
    com.sun.beans package
    + JDK-8370201: Test serviceability/sa/
    /TestJhsdbJstackWithVirtualThread.java fails due to VM
    warnings
    + JDK-8370203: Add jcmd AOT.end_recording diagnostic command
    + JDK-8370240: [PPC64] jhsdb jstack cannot handle continuation
    stub
    + JDK-8370242: JFR: Clear event reference eagerly when using
    EventStream
    + JDK-8370244: [PPC64] Several vector tests fail on Power8
    + JDK-8370325: G1: Disallow GC for TLAB allocation
    + JDK-8370378: Some compiler tests inadvertently exclude
    particular platforms
    + JDK-8370393: Cleanup handling of ancient Windows versions
    from GetJavaProperties java_props_md
    + JDK-8370405: C2: mismatched store from MergeStores wrongly
    scalarized in allocation elimination
    + JDK-8370492: [Linux] Update cpu shares to cpu.weight mapping
    function
    + JDK-8370511: test/jdk/javax/swing/JSlider/bug4382876.java
    does not release previously pressed keys
    + JDK-8370529: Enhance Path Factories Redux
    + JDK-8370572: Cgroups hierarchical memory limit is not honored
    after JDK-8322420
    + JDK-8370579: PPC: fix inswri immediate argument order
    + JDK-8370615: Improve Kerberos credentialing
    + JDK-8370636: com/sun/jdi/TwoThreadsTest.java should wait for
    completion of all threads
    + JDK-8370646: TestLargeUTF8Length.java needs lots of memory
    + JDK-8370649: Add intermittent tag for
    gc/shenandoah/generational/TestOldGrowthTriggers.java
    + JDK-8370708: RISC-V: Add VerifyStackAtCalls
    + JDK-8370730: Test serviceability/attach/EarlyDynamicLoad/
    /EarlyDynamicLoad.java needs to be resilient about warnings
    + JDK-8370732: Use WhiteBox.getWhiteBox().fullGC() to provoking
    gc for nsk/jvmti tests
    + JDK-8370887: DelayScheduler.replace method may break the
    4-ary heap in certain scenarios
    + JDK-8370905: Update vm.defmeth tests to use virtual threads
    + JDK-8370942: test/jdk/java/security/Provider/NewInstance.java
    and /test/jdk/java/security/cert/CertStore/NoLDAP.java may
    skip without notifying
    + JDK-8370966: Create regression test for the hierarchical
    memory limit fix in JDK-8370572
    + JDK-8370986: Enhance Zip file reading
    + JDK-8370995: Enhance ZipFile usage
    + JDK-8371014: Dump JFR recording on CrashOnOutOfMemoryError is
    incorrectly implemented
    + JDK-8371103: vmTestbase/nsk/jvmti/scenarios/events/EM02/
    /em02t006/TestDescription.java failing
    + JDK-8371262: sun/security/pkcs11/Cipher/KeyWrap tests may
    silently skip
    + JDK-8371316: Adjust assertion (GC pause time cannot be
    smaller than the sum of each phase) in G1GCPhaseTimes::print
    + JDK-8371349: Update NSS library to 3.117
    + JDK-8371364: Refactor javax/swing/JFileChooser/
    /FileSizeCheck.java to use Util.findComponent()
    + JDK-8371365: Update javax/swing/JFileChooser/bug4759934.java
    to use Util.findComponent()
    + JDK-8371366: java/net/httpclient/whitebox/
    /RawChannelTestDriver.java fails intermittently in jtreg
    timeout
    + JDK-8371368: SIGSEGV in JfrVframeStream::next_vframe() on
    arm64
    + JDK-8371383: Test sun/security/tools/jarsigner/
    /DefaultOptions.java failed due to
    CertificateNotYetValidException
    + JDK-8371385: compiler/escapeAnalysis/
    /TestRematerializeObjects.java fails in case of
  - XX:-UseUnalignedAccesses
    + JDK-8371420: Still sporadic failures of
    gc/TestAlwaysPreTouchBehavior.java#&lt;gcname&gt; on Linux after
    JDK-8359104
    + JDK-8371485: ProblemList awt/Mixing/AWT_Mixing/
    /JTableInGlassPaneOverlapping.java for linux
    + JDK-8371559: Intermittent timeouts in test
    javax/net/ssl/Stapling/HttpsUrlConnClient.java
    + JDK-8371608: Jtreg test jdk/internal/vm/Continuation/Fuzz.java
    sometimes fails with (fast)debug binaries
    + JDK-8371759: Add missing @Override annotations in
    com.sun.imageio package
    + JDK-8371769: TestMemoryInvisibleParent.java fails with
    java.nio.file.AccessDeniedException
    + JDK-8371830: Enhance certificate chain validation
    + JDK-8371854: Shenandoah: Simplify WALK_FORWARD_IN_BLOCK_START
    use
    + JDK-8371864: GaloisCounterMode.implGCMCrypt0 AVX512/AVX2
    intrinsics stubs cause AES-GCM encryption failure for certain
    payload sizes
    + JDK-8371895: Lower GCTimeLimit in TestUseGCOverheadLimit.java
    + JDK-8371935: Enhance key generation
    + JDK-8371944: AOT configuration is corrupted when app closes
    System.out
    + JDK-8371948: TestStackOverflowDuringInit.java fails xss too
    small on linux-aarch64
    + JDK-8371966: RISC-V: Incorrect pointer dereference in
    TemplateInterpreterGenerator::generate_native_entry
    + JDK-8371967: Add Visual Studio 2026 to build toolchain for
    Windows
    + JDK-8371978: tools/jar/ReproducibleJar.java fails on XFS
    + JDK-8372012: java/nio/file/attribute/BasicFileAttributeView/
    /SetTimesNanos.java should check ability to create links
    + JDK-8372046: compiler/floatingpoint/
    /TestSubNodeFloatDoubleNegation.java fails IR verification
    + JDK-8372048: Performance improvement on Linux remote desktop
    + JDK-8372110: GenShen: Fix erroneous assert
    + JDK-8372120: Add missing sound keyword to MIDI tests
    + JDK-8372147: ConnectionFlowControlTest should use
    HttpResponse.connectionLabel()
    + JDK-8372321: TestBackToBackSensitive fails intermittently
    after JDK-8365972
    + JDK-8372348: Adjust some UL / JFR string deduplication output
    messages
    + JDK-8372412: Increase buffer size for ring-buffer events in
    CollectedHeap
    + JDK-8372441: JFR: Improve logging of TestBackToBackSensitive
    + JDK-8372534: Update Libpng to 1.6.51
    + JDK-8372586: Crashes on ppc64(le) after JDK-8371368
    + JDK-8372589: VM crashes on init when NonNMethodCodeHeapSize
    is set too small and UseTransparentHugePages is enabled
    + JDK-8372591: assert(!current-&gt;cont_fastpath() ||
    freeze.check_valid_fast_path()) failed
    + JDK-8372609: Bug4944439 does not enforce locale correctly
    + JDK-8372661: Add a null-safe static factory method to
    "jdk.test.lib.net.SimpleSSLContext"
    + JDK-8372704: ThreadMXBean.getThreadUserTime may return total
    time
    + JDK-8372710: Update ProcessBuilder/Basic regex
    + JDK-8372733: GHA: Bump to Ubuntu 24.04
    + JDK-8372756: Mouse additional buttons and horizontal
    scrolling are broken on XWayland GNOME &gt;= 47 after JDK-8351907
    + JDK-8372835: WorkQueue::push is missing an acquire-fence
    + JDK-8372857: Improve debuggability of
    java/rmi/server/RemoteServer/AddrInUse.java test
    + JDK-8372860: TestCodeCacheUnloadDuringConcCycle fails on ARM32
    + JDK-8372977: Unnecessary gthread-2.0 loading
    + JDK-8372988: Test runtime/Nestmates/membership/
    /TestNestHostErrorWithMultiThread.java failed: Unexpected
    interrupt
    + JDK-8373021: aarch64: MacroAssembler::arrays_equals reads out
    of bounds
    + JDK-8373101: JdkClient and JdkServer test classes ignore
    namedGroups field
    + JDK-8373106: JFR suspend/resume deadlock on macOS in pthreads
    library
    + JDK-8373290: Update FreeType to 2.14.1
    + JDK-8373429: gc/g1/TestCodeCacheUnloadDuringConcCycle fails
    on various platforms
    + JDK-8373476: (tz) Update Timezone Data to 2025c
    + JDK-8373485: JFR Crash during sampling:
    assert(jt-&gt;has_last_Java_frame()) failed: invariant
    + JDK-8373525: C2: assert(_base == Long) failed: Not a Long
    + JDK-8373537: Migrate "test/jdk/com/sun/net/httpserver/" to
    null-safe "SimpleSSLContext" methods
    + JDK-8373593: Support latest  VS2026 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8373623: Refactor Serialization tests for Records to JUnit
    + JDK-8373630: r18_tls should not be modified on Windows AArch64
    + JDK-8373632: Some sound tests failing in CI due to lack of
    sound key
    + JDK-8373704: Improve "SocketException: Protocol family
    unavailable" message
    + JDK-8373716: Refactor further java/util tests from TestNG to
    JUnit
    + JDK-8373727: New XBM images parser regression: only the first
    line of the bitmap array is parsed
    + JDK-8373793: TestDynamicStore.java '/manual' disables use of
    '/timeout'
    + JDK-8373807: test/jdk/java/net/httpclient/websocket/
    /DummyWebSocketServer.java getURI() uses "localhost"
    + JDK-8373832: Test java/lang/invoke/TestVHInvokerCaching.java
    tests nothing
    + JDK-8373869: Refactor java/net/httpclient/
    /ThrowingPushPromises*.java tests to use JUnit5
    + JDK-8373931: Test javax/sound/sampled/Clip/
    /AutoCloseTimeCheck.java timed out
    + JDK-8373946: Synth ProgressBarUI implementation confuses
    background painting with border painting
    + JDK-8373984: Check for macos 11 in CGraphicsDevice.m can be
    removed
    + JDK-8373998: RISC-V: simple optimization of ConvHF2F
    + JDK-8374056: RISC-V: Fix argument passing for the
    RiscvFlushIcache::flush
    + JDK-8374178: Missing include in systemDictionary.cpp after
    JDK-8365526
    + JDK-8374433: java/util/Locale/PreserveTagCase.java does not
    run any tests
    + JDK-8374434: Several JShell tests report JUnit discovery
    warnings
    + JDK-8374525: RISC-V: Several masked float16 vector operations
    are not supported
    + JDK-8374555: No need for visible input warning in
    s.s.u.Password when not reading from System.in
    + JDK-8374557: Enhance TLS connection handling
    + JDK-8374642: EscapeHash macro fails with GNU make 4.3 and 4.4
    + JDK-8374644: Regression in GZIPInputStream performance after
    JDK-7036144
    + JDK-8374711: Hotspot runtime/CommandLine/OptionsValidation/
    /TestOptionsWithRanges fails without printing the option name
    + JDK-8374872: Cleanup outdated SAP AG copyright header info
    + JDK-8374875: Improve perfMemory warning about 'Insufficient
    space for shared memory file'
    + JDK-8375057: Update HarfBuzz to 12.3.2
    + JDK-8375063: Update Libpng to 1.6.54
    + JDK-8375094: RISC-V: Fix client builds after JDK-8368732
    + JDK-8375231: Refactor util/ServiceLoader tests to use JUnit
    + JDK-8375232: Refactor util/StringJoiner tests to use JUnit
    + JDK-8375233: Refactor util/Vector tests to use JUnit
    + JDK-8375311: Some builds are missing debug helpers
    + JDK-8375530: PPC64: incorrect quick
    verify_method_data_pointer check causes poor performance in
    debug build
    + JDK-8375549: ConcurrentModificationException if
    jdk.crypto.disabledAlgorithms has multiple entries with known
    oid
    + JDK-8375598: VM crashes with "assert((labs(val) &amp;
    0xFFFFFFFF00000000) == 0 || dest == (address)-1) failed: must
    be 32bit offset or -1" when using too high value for
    NonNMethodCodeHeapSize
    + JDK-8375657: RISC-V: Need to check size in
    SharedRuntime::is_wide_vector
    + JDK-8375742: Test java/lang/invoke/MethodHandleProxies/
    /Driver.java does not run Unnamed.java
    + JDK-8375963: [25u] Set designator
    DEFAULT_PROMOTED_VERSION_PRE=ea in jdk25u-dev
    + JDK-8375999: com/sun/jndi/ldap/LdapPoolTimeoutTest.java fails
    sporadically on Windows
    + JDK-8376572: RISC-V: Interpreter: Load array index as signed
    int
    + JDK-8376688: Gtest
    os.attempt_reserve_memory_between_small_range_fill_hole_vm
    fails on AIX 7.3
    + JDK-8376889: Enhance JfrRecorder::on_create_vm_3() assert
    output
    + JDK-8377347: jdk/jfr/event/gc/detailed/
    /TestZAllocationStallEvent.java intermittent OOME
    + JDK-8377509: Add licenses for gcc 14.2.0
    + JDK-8377526: Update Libpng to 1.6.55
    + JDK-8377811: [25u] G1: Optional Evacuations may evacuate
    pinned objects
    + JDK-8377898: Hotspot build on AIX with unused-functions
    warning reports some unused functions
    + JDK-8377905: gcc.md included with every build
    + JDK-8378113: Add sun/java2d/OpenGL/ScaleParamsOOB.java to the
    ProblemList.txt file
    + JDK-8378218: MSYS2 reports cygwin triplet causing bash
    configure failure
    + JDK-8378353: [PPC64] StringCoding.countPositives causes
    errors when the length is not a proper 32 bit int
    + JDK-8378623: Use unique font names in FormatCharAdvanceTest
    + JDK-8378631: Update Zlib Data Compression Library to Version
    1.3.2
    + JDK-8378823: AIX build fails after zlib updated by JDK-8378631
    + JDK-8378853: [25u] Make backport of JDK-8244336 comply with
    differences in CSR
    + JDK-8379035: (tz) Update Timezone Data to 2026a
    + JDK-8379158: Update FreeType to 2.14.2
    + JDK-8379256: Update GIFlib to 6.1.1
    + JDK-8380078: Update GIFlib to 6.1.2
    + JDK-8380959: Update Libpng to 1.6.56
    + JDK-8382047: Update Libpng to 1.6.57
    + JDK-8382438: [25u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 25.0.3</changelog>
</package>
<package pkgid="e48f61a359558c8d5032e194ff38ac85fa658dadc2e64d919aa3c9c2781d542e" name="java-25-openjdk-headless" arch="x86_64">
  <version epoch="0" ver="25.0.1.0" rel="150700.15.4.1"/>
  <changelog author="fstrba@suse.com" date="1757505600">- Initial packaging of OpenJDK 25
  * JEPs included:
    + 470: PEM Encodings of Cryptographic Objects (Preview)
    + 502: Stable Values (Preview)
    + 503: Remove the 32-bit x86 Port
    + 505: Structured Concurrency (Fifth Preview)
    + 506: Scoped Values
    + 507: Primitive Types in Patterns, instanceof, and switch
    (Third Preview)
    + 508: Vector API (Tenth Incubator)
    + 509: JFR CPU-Time Profiling (Experimental)
    + 510: Key Derivation Function API
    + 511: Module Import Declarations
    + 512: Compact Source Files and Instance Main Methods
    + 513: Flexible Constructor Bodies
    + 514: Ahead-of-Time Command-Line Ergonomics
    + 515: Ahead-of-Time Method Profiling
    + 518: JFR Cooperative Sampling
    + 519: Compact Object Headers
    + 520: JFR Method Timing &amp; Tracing
    + 521: Generational Shenandoah</changelog>
  <changelog author="fstrba@suse.com" date="1758196800">- Added patch:
  * fips.patch
    + forward port the FIPS support from OpenJDK 21</changelog>
  <changelog author="fstrba@suse.com" date="1761134400">- Update to upstream tag jdk-25.0.1+8 (October 2025 CPU)
  * Security fixes:
    + JDK-8360937, CVE-2025-53057, bsc#1252414: Enhance certificate
    handling
    + JDK-8356294, CVE-2025-53066, bsc#1252417: Enhance Path
    Factories
    + JDK-8359454, CVE-2025-61748, bsc#1252418: Enhance String
    handling
    + JDK-8352637: Enhance bytecode verification
  * Other fixes:
    + JDK-8367031: [backout] Change java.time month/day field types
    to 'byte'
    + JDK-8368308: ISO 4217 Amendment 180 Update
    + JDK-8366223: ZGC:
    ZPageAllocator::cleanup_failed_commit_multi_partition is
    broken
    + JDK-8360647: [XWayland] [OL10] NumPad keys are not triggered
    + JDK-8361212: Remove AffirmTrust root CAs
    + JDK-8356587: Missing object ID X in pool jdk.types.Method
    + JDK-8360679: Shenandoah: AOT saved adapter calls into broken
    GC barrier stub
    + JDK-8362882: Update SubmissionPublisher() specification to
    reflect use of ForkJoinPool.asyncCommonPool()
    + JDK-8315131: Clarify VarHandle set/get access on 32-bit
    platforms
    + JDK-8362109: Change milestone to fcs for all releases
    + JDK-8358819: The first year is not displayed correctly in
    Japanese Calendar
    + JDK-8361829: [TESTBUG] RISC-V: compiler/vectorization/runner/
    /BasicIntOpTest.java fails with RVV but not Zvbb
    + JDK-8361532: RISC-V: Several vector tests fail after
    JDK-8354383
    + JDK-8357826: Avoid running some jtreg tests when asan is
    configured
    + JDK-8358577: Test serviceability/jvmti/thread/
    /GetCurrentContendedMonitor/contmon01/contmon01.java failed:
    unexpexcted monitor object
    + JDK-8360533: ContainerRuntimeVersionTestUtils
    fromVersionString fails with some docker versions
    + JDK-8358452: JNI exception pending in
    Java_sun_awt_screencast_ScreencastHelper_remoteDesktopKeyImpl
    of screencast_pipewire.c:1214 (ID: 51119)
    + JDK-8359270: C2: alignment check should consider base offset
    when emitting arraycopy runtime call
    + JDK-8359596: Behavior change when both -Xlint:options and
  - Xlint:-options flags are given
    + JDK-8360179: RISC-V: Only enable BigInteger intrinsics when
    AvoidUnalignedAccess == false
    + JDK-8359218: RISC-V: Only enable CRC32 intrinsic when
    AvoidUnalignedAccess == false
    + JDK-8359059: Bump version numbers for 25.0.1</changelog>
</package>
<package pkgid="1f24620fdccc153ccf218e92d23cbe78097c1ca225f56db6865634bd89b5eebf" name="java-25-openjdk-headless" arch="x86_64">
  <version epoch="0" ver="25.0.2.0" rel="150700.15.7.1"/>
  <changelog author="fstrba@suse.com" date="1757505600">- Initial packaging of OpenJDK 25
  * JEPs included:
    + 470: PEM Encodings of Cryptographic Objects (Preview)
    + 502: Stable Values (Preview)
    + 503: Remove the 32-bit x86 Port
    + 505: Structured Concurrency (Fifth Preview)
    + 506: Scoped Values
    + 507: Primitive Types in Patterns, instanceof, and switch
    (Third Preview)
    + 508: Vector API (Tenth Incubator)
    + 509: JFR CPU-Time Profiling (Experimental)
    + 510: Key Derivation Function API
    + 511: Module Import Declarations
    + 512: Compact Source Files and Instance Main Methods
    + 513: Flexible Constructor Bodies
    + 514: Ahead-of-Time Command-Line Ergonomics
    + 515: Ahead-of-Time Method Profiling
    + 518: JFR Cooperative Sampling
    + 519: Compact Object Headers
    + 520: JFR Method Timing &amp; Tracing
    + 521: Generational Shenandoah</changelog>
  <changelog author="fstrba@suse.com" date="1758196800">- Added patch:
  * fips.patch
    + forward port the FIPS support from OpenJDK 21</changelog>
  <changelog author="fstrba@suse.com" date="1761134400">- Update to upstream tag jdk-25.0.1+8 (October 2025 CPU)
  * Security fixes:
    + JDK-8360937, CVE-2025-53057, bsc#1252414: Enhance certificate
    handling
    + JDK-8356294, CVE-2025-53066, bsc#1252417: Enhance Path
    Factories
    + JDK-8359454, CVE-2025-61748, bsc#1252418: Enhance String
    handling
    + JDK-8352637: Enhance bytecode verification
  * Other fixes:
    + JDK-8367031: [backout] Change java.time month/day field types
    to 'byte'
    + JDK-8368308: ISO 4217 Amendment 180 Update
    + JDK-8366223: ZGC:
    ZPageAllocator::cleanup_failed_commit_multi_partition is
    broken
    + JDK-8360647: [XWayland] [OL10] NumPad keys are not triggered
    + JDK-8361212: Remove AffirmTrust root CAs
    + JDK-8356587: Missing object ID X in pool jdk.types.Method
    + JDK-8360679: Shenandoah: AOT saved adapter calls into broken
    GC barrier stub
    + JDK-8362882: Update SubmissionPublisher() specification to
    reflect use of ForkJoinPool.asyncCommonPool()
    + JDK-8315131: Clarify VarHandle set/get access on 32-bit
    platforms
    + JDK-8362109: Change milestone to fcs for all releases
    + JDK-8358819: The first year is not displayed correctly in
    Japanese Calendar
    + JDK-8361829: [TESTBUG] RISC-V: compiler/vectorization/runner/
    /BasicIntOpTest.java fails with RVV but not Zvbb
    + JDK-8361532: RISC-V: Several vector tests fail after
    JDK-8354383
    + JDK-8357826: Avoid running some jtreg tests when asan is
    configured
    + JDK-8358577: Test serviceability/jvmti/thread/
    /GetCurrentContendedMonitor/contmon01/contmon01.java failed:
    unexpexcted monitor object
    + JDK-8360533: ContainerRuntimeVersionTestUtils
    fromVersionString fails with some docker versions
    + JDK-8358452: JNI exception pending in
    Java_sun_awt_screencast_ScreencastHelper_remoteDesktopKeyImpl
    of screencast_pipewire.c:1214 (ID: 51119)
    + JDK-8359270: C2: alignment check should consider base offset
    when emitting arraycopy runtime call
    + JDK-8359596: Behavior change when both -Xlint:options and
  - Xlint:-options flags are given
    + JDK-8360179: RISC-V: Only enable BigInteger intrinsics when
    AvoidUnalignedAccess == false
    + JDK-8359218: RISC-V: Only enable CRC32 intrinsic when
    AvoidUnalignedAccess == false
    + JDK-8359059: Bump version numbers for 25.0.1</changelog>
  <changelog author="fstrba@suse.com" date="1768392000">- Do not depend on update-desktop-files (jsc#PED-14507 and
  jsc#PED-15221)</changelog>
  <changelog author="fstrba@suse.com" date="1769428800">- Update to upstream tag jdk-25.0.2+10 (January 2026 CPU)
  * CVEs
    + CVE-2026-21925, bsc#1257034
    + CVE-2026-21932, bsc#1257036
    + CVE-2026-21933, bsc#1257037
    + CVE-2026-21945, bsc#1257038
  * Changes
    + JDK-8023263: [TESTBUG] Test closed/java/awt/Focus/
    /InactiveWindowTest/InactiveFocusRace fails due to not enough
    time to initialize graphic components
    + JDK-8162380: [TEST_BUG] MouseEvent/.../
    /AltGraphModifierTest.java has only "Fail" button
    + JDK-8201778: Speed up test
    javax/net/ssl/DTLS/PacketLossRetransmission.java
    + JDK-8265429: Improve GCM encryption
    + JDK-8277444: Data race between
    JvmtiClassFileReconstituter::copy_bytecodes and class linking
    + JDK-8279005: sun/tools/jstat tests do not check for test case
    exit codes after JDK-8245129
    + JDK-8304811: vmTestbase/vm/mlvm/indy/func/jvmti/
    /stepBreakPopReturn/INDIFY_Test.java fails with
    JVMTI_ERROR_TYPE_MISMATCH
    + JDK-8305567: serviceability/tmtools/jstat/GcTest01.java
    failed  utils.JstatGcResults.assertConsistency
    + JDK-8317801: java/net/Socket/asyncClose/Race.java fails
    intermittently (aix)
    + JDK-8320836: jtreg gtest runs should limit heap size
    + JDK-8325766: Extend CertificateBuilder to create trust and
    end entity certificates programmatically
    + JDK-8333526: Restructure java/nio/channels/DatagramChannel/
    /StressNativeSignal.java to a fail fast exception handling
    policy
    + JDK-8333783: java/nio/channels/FileChannel/directio/
    /DirectIOTest.java is unstable with AV software
    + JDK-8334238: Enhance AddLShortcutTest jpackage test
    + JDK-8335986: Test javax/swing/JCheckBox/4449413/
    /bug4449413.java fails on Windows 11 x64 because RBMenuItem's
    and CBMenuItem's checkmark on the left side are not visible
    + JDK-8341496: Improve JMX connections
    + JDK-8343218: Add option to disable allocating interface and
    abstract classes in non-class metaspace
    + JDK-8343546: GHA: Cache required dependencies in master-branch
    workflow
    + JDK-8345810: Custom launchers must be linked with pthread to
    avoid dynamic linker issues
    + JDK-8346753: Test javax/swing/JMenuItem/RightLeftOrientation/
    /RightLeftOrientation.java fails on Windows Server 2025 x64
    because the icons of RBMenuItem and CBMenuItem are not visible
    in Nimbus LookAndFeel
    + JDK-8346839: [TESTBUG] "java/awt/textfield/setechochartest4/
    /setechochartest4.java" failed because the test frame
    disappears on clicking "Click Several Times" button
    + JDK-8346884: Add since checker test to jdk.editpad
    + JDK-8346952: GetGraphicsStressTest.java fails: Native
    resources unavailable
    + JDK-8347277: java/awt/Focus/ComponentLostFocusTest.java fails
    intermittently
    + JDK-8349188: LineBorder does not scale correctly
    + JDK-8350621: Code cache stops scheduling GC
    + JDK-8351487: [ubsan] jvmti.h runtime error: load of value
    which is not a valid value
    + JDK-8352016: Improve
    java/lang/RuntimeTests/RuntimeExitLogTest.java
    + JDK-8354348: Enable Extended EVEX to REX2/REX demotion for
    commutative operations with same dst and src2
    + JDK-8354415: [Ubuntu25.04] api/java_awt/GraphicsDevice/
    /indexTGF.html#SetDisplayMode -
    setDisplayMode_REFRESH_RATE_UNKNOWN fails: Height is different
    on vnc
    + JDK-8354447: Missing test for retroactive
    @SuppressWarnings("dangling-doc-comments") behavior
    + JDK-8354646: java.awt.TextField allows to identify the spaces
    in a password when double clicked at the starting and end of
    the text
    + JDK-8355478: DoubleActionESC.java fails intermittently
    + JDK-8356324: JVM crash (SIGSEGV at
    ClassListParser::resolve_indy_impl) during -Xshare:dump
    starting from 21.0.5
    + JDK-8356897: Update NSS library to 3.111
    + JDK-8357064: cds/appcds/ArchiveRelocationTest.java failed
    with missing expected output
    + JDK-8357141: Update to use jtreg 7.5.2
    + JDK-8357382: runtime/cds/appcds/aotClassLinking/
    /BulkLoaderTest.java#aot fails with Xcomp and C1
    + JDK-8357396: Refactor nmethod::make_not_entrant to use Enum
    instead of "const char*"
    + JDK-8357691: File blocked.certs contains bad content when
    boot jdk 25 is used, sun/security/lib/CheckBlockedCerts.java
    failing
    + JDK-8357694: RISC-V: Several IR verification tests fail when
    vlen=128
    + JDK-8357799: Improve instructions for
    JFileChooser/HTMLFileName.java
    + JDK-8357816: Add test from JDK-8350576
    + JDK-8357822: C2: Multiple string optimization tests are no
    longer testing string concatenation optimizations
    + JDK-8357959: (bf) ByteBuffer.allocateDirect initialization
    can result in large TTSP spikes
    + JDK-8358048: java/net/httpclient/HttpsTunnelAuthTest.java
    incorrectly calls Thread::stop
    + JDK-8358340: Support CDS heap archive with Generational
    Shenandoah
    + JDK-8358532: JFileChooser in GTK L&amp;F still displays HTML
    filename
    + JDK-8358535: Changes in ClassValue (JDK-8351996) caused a
    1-9% regression in Renaissance-PageRank
    + JDK-8358556: Assert when running with -XX:-UseLibmIntrinsic
    + JDK-8358685: [TEST] AOTLoggingTag.java failed with missing
    log message
    + JDK-8358697: TextLayout/MyanmarTextTest.java passes if no
    Myanmar font is found
    + JDK-8358723: jpackage signing issues: the main launcher
    doesn't have entitlements
    + JDK-8358748: Large page size initialization fails with assert
    "page_size must be a power of 2"
    + JDK-8358751: C2: Recursive inlining check for compiled lambda
    forms is broken
    + JDK-8358813: JPasswordField identifies spaces in password via
    delete shortcuts
    + JDK-8359061: Update and ProblemList manual test
    java/awt/Cursor/CursorDragTest/ListDragCursor.java
    + JDK-8359104: gc/TestAlwaysPreTouchBehavior.java#&lt;gcname&gt;
    fails on Linux
    + JDK-8359105: RISC-V: No need for acquire fence in safepoint
    poll during JNI calls
    + JDK-8359127: Amend java/nio/channels/DatagramChannel/
    /PromiscuousIPv6.java to use @requires for OS platform
    selection
    + JDK-8359167: Remove unused test/hotspot/jtreg/vmTestbase/nsk/
    /share/jpda/BindServer.java
    + JDK-8359207: Remove runtime/signal/TestSigusr2.java since it
    is always skipped
    + JDK-8359423: Improve error message in case of missing jsa
    shared archive
    + JDK-8359428: Test 'javax/swing/JTabbedPane/bug4499556.java'
    failed because after selecting one of L&amp;F items, the test case
    automatically failed when clicking on L&amp;F Menu button again
    + JDK-8359449: [TEST] open/test/jdk/java/io/File/SymLinks.java
    Refactor extract method for Windows specific test
    + JDK-8359477: com/sun/net/httpserver/Test12.java appears to
    have a temp file race
    + JDK-8359501: Enhance Handling of URIs
    + JDK-8359687: Use PassFailJFrame for
    java/awt/print/Dialog/DialogType.java
    + JDK-8359690: New test TestCPUTimeSampleThrottling still fails
    intermittently
    + JDK-8359735: [Ubuntu 25.10] java/lang/ProcessBuilder/
    /Basic.java, java/lang/ProcessHandle/InfoTest.java fail due to
    rust-coreutils
    + JDK-8359827: Test runtime/Thread/ThreadCountLimit.java need
    loop increasing the limit
    + JDK-8360022: ClassRefDupInConstantPoolTest.java fails when
    running in repeat
    + JDK-8360090: [TEST] RISC-V: disable some cds tests on qemu
    + JDK-8360178: TestArguments.atojulong gtest has incorrect
    format string
    + JDK-8360219: [AIX] assert(locals_base &gt;= l2) failed: bad
    placement
    + JDK-8360255: runtime/jni/checked/TestLargeUTF8Length.java
    fails with -XX:-CompactStrings
    + JDK-8360408: [TEST] Use @requires tag instead of exiting
    based on "os.name" property value for
    sun/net/www/protocol/file/FileURLTest.java
    + JDK-8360411: [TEST] open/test/jdk/java/io/File/
    /MaxPathLength.java Refactor extract method to encapsulate
    Windows specific test logic
    + JDK-8360518: Docker tests do not work when asan is configured
    + JDK-8360520: RISC-V: C1: Fix primitive array clone intrinsic
    regression after JDK-8333154
    + JDK-8360664: Null pointer dereference in src/hotspot/share/
    /prims/jvmtiTagMap.cpp in
    IterateOverHeapObjectClosure::do_object()
    + JDK-8360783: CTW: Skip deoptimization between tiers
    + JDK-8360791: [ubsan] Adjust signal handling
    + JDK-8360867: CTW: Disable inline cache verification
    + JDK-8360981: Remove use of Thread.stop in
    test/jdk/java/net/Socket/DeadlockTest.java
    + JDK-8361112: Use exact float -&gt; Float16 conversion method in
    Float16 tests
    + JDK-8361180: Disable CompiledDirectCall verification with
  - VerifyInlineCaches
    + JDK-8361198: [AIX] fix misleading error output in
    thread_cpu_time_unchecked
    + JDK-8361211: C2: Final graph reshaping generates unencodeable
    klass constants
    + JDK-8361215: Add AOT test case: verification constraint
    classes are excluded
    + JDK-8361253: CommandLineOptionTest library should report
    observed values on failure
    + JDK-8361255: CTW: Tolerate more NCDFE problems
    + JDK-8361298: SwingUtilities/bug4967768.java fails where
    character P is not underline
    + JDK-8361314: Test serviceability/jvmti/VMEvent/MyPackage/
    /VMEventRecursionTest.java FATAL ERROR in native method:
    Failed during the GetClassSignature call
    + JDK-8361367: AOT ExcludedClasses.java test failed with
    missing constant pool logs
    + JDK-8361423: Add IPSupport::printPlatformSupport to
    java/net/NetworkInterface/IPv4Only.java
    + JDK-8361449: RISC-V: Code cleanup for native call
    + JDK-8361478: GHA: Use MSYS2 from GHA runners
    + JDK-8361494: [IR Framework] Escape too much in replacement of
    placeholder
    + JDK-8361497: Scoped Values: orElse and orElseThrow do not
    access the cache
    + JDK-8361504: RISC-V: Make C1 clone intrinsic platform guard
    more specific
    + JDK-8361520: Stabilize SystemGC benchmarks
    + JDK-8361599: [PPC64] enable missing tests via jtreg requires
    + JDK-8361711: Add library name configurability to
    PKCS11Test.java
    + JDK-8361748: Enforce limits on the size of an XBM image
    + JDK-8361839: Problemlist BogusFocusableWindowState due to
    failures in the CI pipeline
    + JDK-8361868: [GCC static analyzer] complains about missing
    calloc - NULL checks in p11_util.c
    + JDK-8361871: [GCC static analyzer] complains about use of
    uninitialized value ckpObject in p11_util.c
    + JDK-8361888: [GCC static analyzer] ProcessImpl_md.c
    Java_java_lang_ProcessImpl_forkAndExec error: use of
    uninitialized value '*(ChildStuff *)p.mode
    + JDK-8361892: AArch64: Incorrect matching rule leading to
    improper oop instruction encoding
    + JDK-8361897: gc/z/TestUncommit.java fails with Uncommitted
    too slow
    + JDK-8361948: Shenandoah: region free capacity unit mismatch
    + JDK-8361950: Update to use jtreg 8
    + JDK-8361959: [GCC static analyzer] java_props_md.c  leak of
    'temp'  variable is reported
    + JDK-8362107: Update the Jan CPU26_01 release date in master
    branch after forking Oct CPU25_10
    + JDK-8362123: ClassLoader Leak via
    Executors.newSingleThreadExecutor(...)
    + JDK-8362169: Pointer passed to upcall may get wrong scope
    + JDK-8362204: test/jdk/sun/awt/font/TestDevTransform.java
    fails on Ubuntu 24.04
    + JDK-8362207: Add more test cases for possible double-rounding
    in fma
    + JDK-8362282: runtime/logging/StressAsyncUL.java failed with
    exitValue = 134
    + JDK-8362308: Enhance Bitmap operations
    + JDK-8362379: Test serviceability/HeapDump/
    /UnmountedVThreadNativeMethodAtTop.java should mark as /native
    + JDK-8362390: AIX make fails in awt_GraphicsEnv.c
    + JDK-8362482: [TESTBUG] serviceability/HeapDump/
    /UnmountedVThreadNativeMethodAtTop.java: System.gc() does not
    provide full GC
    + JDK-8362501: Update test/hotspot/jtreg/applications/jcstress/
    /README
    + JDK-8362515: RISC-V: cleanup NativeFarCall
    + JDK-8362516: Support of GCC static analyzer (-fanalyzer)
    + JDK-8362530: VM crash with -XX:+PrintTieredEvents when
    collecting AOT profiling
    + JDK-8362532: Test gc/g1/plab/* duplicate command-line options
    + JDK-8362533: Tests sun/management/jmxremote/bootstrap/*
    duplicate VM flags
    + JDK-8362581: Timeouts in
    java/nio/channels/SocketChannel/OpenLeak.java on UNIX
    + JDK-8362582: GHA: Increase bundle retention time to deal with
    infra overload better
    + JDK-8362596: RISC-V: Improve _vectorizedHashCode intrinsic
    + JDK-8362602: Add test.timeout.factor to CompileFactory to
    avoid test timeouts
    + JDK-8362632: Improve HttpServer Request handling
    + JDK-8362834: Several runtime/Thread tests should mark as
    /native
    + JDK-8362836: JFR: Broken pipe in
    jdk/jfr/event/io/TestIOTopFrame.java
    + JDK-8362838: RISC-V: Incorrect matching rule leading to
    improper oop instruction encoding
    + JDK-8362855: Test java/net/ipv6tests/TcpTest.java should
    report SkippedException when there no ia4addr  or ia6addr
    + JDK-8362889: [GCC static analyzer] leak in
    libstringPlatformChars.c
    + JDK-8362972: C2 fails with unexpected node in SuperWord
    truncation: IsFiniteF, IsFiniteD
    + JDK-8363676: [GCC static analyzer] missing return value check
    of malloc in OGLContext_SetTransform
    + JDK-8363696: Update the release version and date for OpenJDK
    25u
    + JDK-8363720: Follow up to JDK-8360411 with post review
    comments
    + JDK-8363895: Minimal build fails with slowdebug builds after
    JDK-8354887
    + JDK-8363898: RISC-V: TestRangeCheckHoistingScaledIV.java
    fails after JDK-8355293 when running without RVV
    + JDK-8363910: Avoid tuning for Power10 CPUs on Linux ppc64le
    when gcc &lt; 10 is used
    + JDK-8363928: Specifying AOTCacheOutput with a blank path
    causes the JVM to crash
    + JDK-8363965: GHA: Switch cross-compiling sysroots to Debian
    bookworm
    + JDK-8363966: GHA: Switch cross-compiling sysroots to Debian
    trixie
    + JDK-8364090: Dump JFR recording on CrashOnOutOfMemoryError
    + JDK-8364111: InstanceMirrorKlass iterators should handle CDS
    and hidden classes consistently
    + JDK-8364114: Test
    TestHugePageDecisionsAtVMStartup.java#LP_enabled fails when no
    free hugepage
    + JDK-8364120: RISC-V: unify the usage of
    MacroAssembler::instruction_size
    + JDK-8364150: RISC-V: Leftover for JDK-8343430 removing old
    trampoline call
    + JDK-8364177: JDK fails to build due to undefined symbol in
    libpng on LoongArch64
    + JDK-8364184: [REDO] AArch64: [VectorAPI] sve vector math
    operations are not supported after JDK-8353217
    + JDK-8364190: JFR: RemoteRecordingStream withers don't work
    + JDK-8364198: NMT should have a better corruption message
    + JDK-8364199: Enhance list of environment variables printed in
    hserr/hsinfo file
    + JDK-8364212: Shenandoah: Rework archived objects loading
    + JDK-8364214: Enhance polygon data support
    + JDK-8364235: Fix for JDK-8361447 breaks the alignment
    requirements for GuardedMemory
    + JDK-8364257: JFR: User-defined events and settings with a
    one-letter name cannot be configured
    + JDK-8364263: HttpClient: Improve encapsulation of ProxyServer
    + JDK-8364296: Set IntelJccErratumMitigation flag ergonomically
    + JDK-8364352: Some tests fail when using a limited number of
    pregenerated .jsa CDS archives
    + JDK-8364454: ProblemList runtime/cds/DeterministicDump.java
    on macos for JDK-8363986
    + JDK-8364503: gc/g1/TestCodeCacheUnloadDuringConcCycle.java
    fails because of race printing to stdout
    + JDK-8364514: [asan] runtime/jni/checked/
    /TestCharArrayReleasing.java heap-buffer-overflow
    + JDK-8364556: JFR:  Disable SymbolTableStatistics and
    StringTableStatistics in default.jfc
    + JDK-8364597: Replace THL A29 Limited with Tencent
    + JDK-8364611: (process) Child process SIGPIPE signal
    disposition should be default
    + JDK-8364660: ClassVerifier::ends_in_athrow() should be removed
    + JDK-8364764: java/nio/channels/vthread/BlockingChannelOps.java
    subtests timed out
    + JDK-8364786: Test java/net/vthread/HttpALot.java
    intermittently fails - 24999 handled, expected 25000
    + JDK-8364984: Many jpackage tests are failing on Linux after
    JDK-8334238
    + JDK-8364993: JFR: Disable jdk.ModuleExport in default.jfc
    + JDK-8364996: java/awt/font/FontNames/LocaleFamilyNames.java
    times out on Windows
    + JDK-8365058: Enhance CopyOnWriteArraySet
    + JDK-8365071: ARM32: JFR intrinsic jvm_commit triggers C2
    regalloc assert
    + JDK-8365086: CookieStore.getURIs() and get(URI) should return
    an immutable List
    + JDK-8365165: Zap C-heap memory at delete/free
    + JDK-8365166: ARM32: missing os::fetch_bcp_from_context
    implementation
    + JDK-8365168: Use 64-bit aligned addresses for CK_ULONG access
    in PKCS11 native key code
    + JDK-8365200: RISC-V: compiler/loopopts/superword/
    /TestGeneralizedReductions.java fails with Zvbb and vlen=128
    + JDK-8365206: RISC-V: compiler/c2/irTests/
    /TestFloat16ScalarOperations.java is failing on riscv64
    + JDK-8365240: [asan] exclude some tests when using asan
    enabled binaries
    + JDK-8365260: Problemlist 1 test due to failures in the CI
    pipeline
    + JDK-8365265: x86 short forward jump exceeds 8-bit offset in
    methodHandles_x86.cpp when using Intel APX
    + JDK-8365271: Improve Swing supports
    + JDK-8365280: Enhance JOptionPane
    + JDK-8365302: RISC-V: compiler/loopopts/superword/
    /TestAlignVector.java fails when vlen=128
    + JDK-8365307: AIX make fails after JDK-8364611
    + JDK-8365312: GCC 12 cannot compile SVE on aarch64 with
    auto-var-init pattern
    + JDK-8365389: Remove static color fields from SwingUtilities3
    and WindowsMenuItemUI
    + JDK-8365425: [macos26] javax/swing/JInternalFrame/8160248/
    /JInternalFrameDraggingTest.java fails on macOS 26
    + JDK-8365442: [asan] runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java fails
    + JDK-8365468: EagerJVMCI should only apply to the
    CompilerBroker JVMCI runtime
    + JDK-8365487: [asan] some oops (mode) related tests fail
    + JDK-8365543: UnixNativeDispatcher.init should lookup open64at
    and stat64at on AIX
    + JDK-8365571: GenShen: PLAB promotions may remain disabled for
    evacuation threads
    + JDK-8365615: Improve JMenuBar/RightLeftOrientation.java
    + JDK-8365638: JFR: Add --exact for debugging out-of-order
    events
    + JDK-8365660: test/jdk/sun/security/pkcs11/KeyAgreement/ tests
    skipped without SkipException
    + JDK-8365700: Jar --validate without any --file option leaves
    around a temporary file /tmp/tmpJar&lt;number&gt;.jar
    + JDK-8365726: Test crashed with assert in C1 thread: Possible
    safepoint reached by thread that does not allow it
    + JDK-8365772: RISC-V: correctly prereserve NaN payload when
    converting from float to float16 in vector way
    + JDK-8365790: Shutdown hook for application image does not
    work on Windows
    + JDK-8365811: test/jdk/java/net/CookieHandler/B6644726.java
    failure - "Should have 5 cookies. Got only 4, expires probably
    didn't parse correctly"
    + JDK-8365823: Revert storing abstract and interface Klasses to
    non-class metaspace
    + JDK-8365834: Mark java/net/httpclient/ManyRequests.java  as
    intermittent
    + JDK-8365841: RISC-V: Several IR verification tests fail after
    JDK-8350960 without Zvfh
    + JDK-8365844: RISC-V: TestBadFormat.java fails when running
    without RVV
    + JDK-8365863: /test/jdk/sun/security/pkcs11/Cipher tests skip
    without SkippedException
    + JDK-8365913: Support latest MSC_VER in abstract_vm_version.cpp
    + JDK-8365919: Replace currentTimeMillis with nanoTime in
    Stresser.java
    + JDK-8365926: RISC-V: Performance regression in renaissance
    (chi-square)
    + JDK-8365956: GenShen: Adaptive tenuring threshold algorithm
    may raise threshold prematurely
    + JDK-8365983: Tests should throw SkippedException when SCTP
    not supported
    + JDK-8366028: MethodType::fromMethodDescriptorString should
    not throw UnsupportedOperationException for invalid
    descriptors
    + JDK-8366029: Do not add -XX:VerifyArchivedFields by default
    to CDS tests
    + JDK-8366031: Mark com/sun/nio/sctp/SctpChannel/
    /CloseDescriptors.java as intermittent
    + JDK-8366075: Problemlist 2 tests due to failures in the CI
    pipeline
    + JDK-8366092: [GCC static analyzer] UnixOperatingSystem.c
    warning: use of uninitialized value 'systemTicks'
    + JDK-8366147: ZGC:
    ZPageAllocator::cleanup_failed_commit_single_partition may
    leak memory
    + JDK-8366159: SkippedException is treated as a pass for
    pkcs11/KeyStore, pkcs11/SecretKeyFactory and
    pkcs11/SecureRandom
    + JDK-8366208: Unexpected exception in
    sun.java2d.cmm.lcms.LCMSImageLayout
    + JDK-8366229: runtime/Thread/TooSmallStackSize.java runs with
    all collectors
    + JDK-8366250: Problemlist 3 tests due to failures in the CI
    pipeline
    + JDK-8366340: Problemlist 1 test due to failures in the CI
    pipeline
    + JDK-8366342: Key generator and key pair generator tests
    skipping, but showing as passed
    + JDK-8366359: Test should throw SkippedException when there is
    no lpstat
    + JDK-8366365: [test] test/lib-test/jdk/test/whitebox/
    /CPUInfoTest.java should be updated
    + JDK-8366434: THP not working properly with G1 after
    JDK-8345655
    + JDK-8366446: Test java/awt/geom/ConcurrentDrawPolygonTest.java
    fails intermittently
    + JDK-8366537: Test "java/util/TimeZone/
    /DefaultTimeZoneTest.java" is not updating the zone ID as
    expected
    + JDK-8366558: Gtests leave /tmp/cgroups-test* files
    + JDK-8366694: Test JdbStopInNotificationThreadTest.java timed
    out after 60 second
    + JDK-8366750: Remove test 'java/awt/Choice/
    /ChoiceMouseWheelTest/ChoiceMouseWheelTest.java' from
    problemlist
    + JDK-8366764: Deproblemlist java/awt/ScrollPane/
    /ScrollPositionTest.java
    + JDK-8366800: Problemlist 1 test due to failures in the CI
    pipeline
    + JDK-8366844: Update and automate
    MouseDraggedOriginatedByScrollBarTest.java
    + JDK-8366850: Test com/sun/jdi/
    /JdbStopInNotificationThreadTest.java failed
    + JDK-8366893: java/lang/Thread/virtual/stress/
    /GetStackTraceALotWhenPinned.java timed out on macos-aarch64
    + JDK-8366948: AOT cache creation crashes when iterating
    training data
    + JDK-8366980: TestTransparentHugePagesHeap.java fails when run
    with -UseCompressedOops
    + JDK-8367017: Remove legacy checks from WrappedToolkitTest and
    convert from bash
    + JDK-8367021: Regression in LocaleDataTest refactoring
    + JDK-8367048: RISC-V: Correct pipeline descriptions of the
    architecture
    + JDK-8367066: RISC-V: refine register selection in
    MacroAssembler:: decode_klass_not_null
    + JDK-8367098: RISC-V: sync CPU features with related JVM flags
    for dependant ones
    + JDK-8367131: Test com/sun/jdi/ThreadMemoryLeakTest.java fails
    on 32 bits
    + JDK-8367133: DTLS: fragmentation of Finished message results
    in handshake failure
    + JDK-8367137: RISC-V: Detect Zicboz block size via hwprobe
    + JDK-8367237: Thread-Safety Usage Warning for
    java.text.Collator Classes
    + JDK-8367277: Fix copyright header in
    JMXInterfaceBindingTest.java
    + JDK-8367313: CTW: Execute in AWT headless mode
    + JDK-8367333: C2: Vector math operation intrinsification
    failure
    + JDK-8367348: Enhance PassFailJFrame to support links in HTML
    + JDK-8367378: GenShen: Missing timing stats when old mark
    buffers are flushed during final update refs
    + JDK-8367384: The ICC_Profile class may throw exceptions
    during serialization
    + JDK-8367598: Switch to CRC32C for SEED calculation in
    jdk.test.lib.Utils
    + JDK-8367616: RISC-V: Auto-enable Zicboz extension for debug
    builds
    + JDK-8367689: Revert removal of several compilation-related
    vmStructs fields
    + JDK-8367692: RISC-V: Align post call nop
    + JDK-8367694: Fix jtreg test failure when Intel APX is enabled
    for KNL platforms
    + JDK-8367780: Enable UseAPX on Intel CPUs only when both APX_F
    and APX_NCI_NDD_NF cpuid features are present
    + JDK-8367782: VerifyJarEntryName.java: Fix modifyJarEntryName
    to operate on bytes and re-introduce verifySignatureEntryName
    + JDK-8367869: Test java/io/FileDescriptor/Sync.java timed out
    + JDK-8367904: Test java/net/InetAddress/ptr/Lookup.java should
    throw SkippedException
    + JDK-8367948: JFR: MethodTrace threshold setting has no effect
    + JDK-8367953: JFR sampler threads does not appear in thread
    dump
    + JDK-8367969: C2: compiler/vectorapi/TestVectorMathLib.java
    fails without UnlockDiagnosticVMOptions
    + JDK-8367988: NewFileSystemTests.readOnlyZipFileFailure fails
    when run by root user
    + JDK-8368032: Enhance Certificate Checking
    + JDK-8368071: Compilation throughput regressed 2X-8X after
    JDK-8355003
    + JDK-8368152: Shenandoah: Incorrect behavior at end of
    degenerated cycle
    + JDK-8368192: Test java/lang/ProcessBuilder/Basic.java#id0
    fails with Exception: Stack trace
    + JDK-8368366: RISC-V: AlignVector is mistakenly set to
    AvoidUnalignedAccesses
    + JDK-8368367: Test jdk/jfr/event/gc/detailed/
    /TestGCHeapMemoryUsageEvent.java fails  jdk.GCHeapMemoryUsage
    "expected 0 &gt; 0"
    + JDK-8368565: Adjust comment regarding dependency of libjvm.so
    to librt
    + JDK-8368606: Printer lookup returns empty on AIX platform due
    to uninitialized results list
    + JDK-8368668: Several vmTestbase/vm/gc/compact tests timed out
    on large memory machine
    + JDK-8368670: Deadlock in JFR on event register + class load
    + JDK-8368698: runtime/cds/appcds/aotCache/OldClassSupport.java
    assert(can_add()) failed: Cannot add TrainingData objects
    + JDK-8368732: RISC-V: Detect support for misaligned vector
    access via hwprobe
    + JDK-8368890: open/test/jdk/tools/jpackage/macosx/
    /NameWithSpaceTest.java fails randomly
    + JDK-8368893: RISC-V: crash after JDK-8352673 on fastdebug
    version
    + JDK-8368960: Adjust java UL logging in the build
    + JDK-8368982: Test sun/security/tools/jarsigner/EC.java
    completed and timed out
    + JDK-8369078: Fix faulty test conversion in
    IllegalCharsetName.java
    + JDK-8369184: SimpleTimeZone equals() Returns True for Unequal
    Instances with Different hashCode Values
    + JDK-8369190: JavaFrameAnchor on AArch64 has unnecessary
    barriers and wrong store order in MacroAssembler
    + JDK-8369226: GHA: Switch to MacOS 15
    + JDK-8369319: java/net/httpclient/CancelRequestTest.java fails
    intermittently
    + JDK-8369450: [Ubuntu 25.10] openjdk fails to build due to
    rust-coreutils date
    + JDK-8369487: Revert EA option for build promotion
    + JDK-8369506: Bytecode rewriting causes Java heap corruption
    on AArch64
    + JDK-8369560: Slowdebug build without CDS fails
    + JDK-8369563: Gtest dll_address_to_function_and_library_name
    has issues with stripped pdb files
    + JDK-8369616: JavaFrameAnchor on RISC-V has unnecessary
    barriers and wrong store order in MacroAssembler
    + JDK-8369656: Calling CompletableFuture.join() could execute
    task in common pool
    + JDK-8369657: [AIX] TOC overflow in static-launcher build when
    building slowdebug after JDK-8352064
    + JDK-8369853: jpackage signing tests fail after JDK-8358723
    + JDK-8369868: Compilation error in Win8365790Test.java with
    JDK-8358723 fix resulting in CI tier3 failure
    + JDK-8369946: Bytecode rewriting causes Java heap corruption
    on PPC
    + JDK-8369947: Bytecode rewriting causes Java heap corruption
    on RISC-V
    + JDK-8369979: Flag UsePopCountInstruction was accidentally
    disabled on PPC64
    + JDK-8370048: Shenandoah: Deprecated ShenandoahPacing option
    + JDK-8370049: [s390x] G1 barrier compareAndExchange does not
    return old value when compareExchange fails
    + JDK-8370318: AES-GCM vector intrinsic may read out of bounds
    (x86_64, AVX-512)
    + JDK-8370331: Problemlist 2 tests due to failures in the CI
    pipeline
    + JDK-8370428: Change milestone to fcs for all releases
    + JDK-8370465: Right to Left Orientation Issues with MenuItem
    Component
    + JDK-8371094: --mac-signing-key-user-name no longer works
    + JDK-8371425: Include folder names in vscode workspace virtual
    folders
    + JDK-8371697: test/jdk/java/nio/file/FileStore/Basic.java
    fails after 8360887 on linux
    + JDK-8372753: jpackage ignores --file-associations option with
    predefined app image</changelog>
</package>
<package pkgid="bdc47817b2b478d43ae1e406088193fe51707148b377240ef8d7e6b369246f3f" name="java-25-openjdk-headless" arch="x86_64">
  <version epoch="0" ver="25.0.3.0" rel="150700.15.10.1"/>
  <changelog author="fstrba@suse.com" date="1757505600">- Initial packaging of OpenJDK 25
  * JEPs included:
    + 470: PEM Encodings of Cryptographic Objects (Preview)
    + 502: Stable Values (Preview)
    + 503: Remove the 32-bit x86 Port
    + 505: Structured Concurrency (Fifth Preview)
    + 506: Scoped Values
    + 507: Primitive Types in Patterns, instanceof, and switch
    (Third Preview)
    + 508: Vector API (Tenth Incubator)
    + 509: JFR CPU-Time Profiling (Experimental)
    + 510: Key Derivation Function API
    + 511: Module Import Declarations
    + 512: Compact Source Files and Instance Main Methods
    + 513: Flexible Constructor Bodies
    + 514: Ahead-of-Time Command-Line Ergonomics
    + 515: Ahead-of-Time Method Profiling
    + 518: JFR Cooperative Sampling
    + 519: Compact Object Headers
    + 520: JFR Method Timing &amp; Tracing
    + 521: Generational Shenandoah</changelog>
  <changelog author="fstrba@suse.com" date="1758196800">- Added patch:
  * fips.patch
    + forward port the FIPS support from OpenJDK 21</changelog>
  <changelog author="fstrba@suse.com" date="1761134400">- Update to upstream tag jdk-25.0.1+8 (October 2025 CPU)
  * Security fixes:
    + JDK-8360937, CVE-2025-53057, bsc#1252414: Enhance certificate
    handling
    + JDK-8356294, CVE-2025-53066, bsc#1252417: Enhance Path
    Factories
    + JDK-8359454, CVE-2025-61748, bsc#1252418: Enhance String
    handling
    + JDK-8352637: Enhance bytecode verification
  * Other fixes:
    + JDK-8367031: [backout] Change java.time month/day field types
    to 'byte'
    + JDK-8368308: ISO 4217 Amendment 180 Update
    + JDK-8366223: ZGC:
    ZPageAllocator::cleanup_failed_commit_multi_partition is
    broken
    + JDK-8360647: [XWayland] [OL10] NumPad keys are not triggered
    + JDK-8361212: Remove AffirmTrust root CAs
    + JDK-8356587: Missing object ID X in pool jdk.types.Method
    + JDK-8360679: Shenandoah: AOT saved adapter calls into broken
    GC barrier stub
    + JDK-8362882: Update SubmissionPublisher() specification to
    reflect use of ForkJoinPool.asyncCommonPool()
    + JDK-8315131: Clarify VarHandle set/get access on 32-bit
    platforms
    + JDK-8362109: Change milestone to fcs for all releases
    + JDK-8358819: The first year is not displayed correctly in
    Japanese Calendar
    + JDK-8361829: [TESTBUG] RISC-V: compiler/vectorization/runner/
    /BasicIntOpTest.java fails with RVV but not Zvbb
    + JDK-8361532: RISC-V: Several vector tests fail after
    JDK-8354383
    + JDK-8357826: Avoid running some jtreg tests when asan is
    configured
    + JDK-8358577: Test serviceability/jvmti/thread/
    /GetCurrentContendedMonitor/contmon01/contmon01.java failed:
    unexpexcted monitor object
    + JDK-8360533: ContainerRuntimeVersionTestUtils
    fromVersionString fails with some docker versions
    + JDK-8358452: JNI exception pending in
    Java_sun_awt_screencast_ScreencastHelper_remoteDesktopKeyImpl
    of screencast_pipewire.c:1214 (ID: 51119)
    + JDK-8359270: C2: alignment check should consider base offset
    when emitting arraycopy runtime call
    + JDK-8359596: Behavior change when both -Xlint:options and
  - Xlint:-options flags are given
    + JDK-8360179: RISC-V: Only enable BigInteger intrinsics when
    AvoidUnalignedAccess == false
    + JDK-8359218: RISC-V: Only enable CRC32 intrinsic when
    AvoidUnalignedAccess == false
    + JDK-8359059: Bump version numbers for 25.0.1</changelog>
  <changelog author="fstrba@suse.com" date="1768392000">- Do not depend on update-desktop-files (jsc#PED-14507 and
  jsc#PED-15221)</changelog>
  <changelog author="fstrba@suse.com" date="1769428800">- Update to upstream tag jdk-25.0.2+10 (January 2026 CPU)
  * CVEs
    + CVE-2026-21925, bsc#1257034
    + CVE-2026-21932, bsc#1257036
    + CVE-2026-21933, bsc#1257037
    + CVE-2026-21945, bsc#1257038
  * Changes
    + JDK-8023263: [TESTBUG] Test closed/java/awt/Focus/
    /InactiveWindowTest/InactiveFocusRace fails due to not enough
    time to initialize graphic components
    + JDK-8162380: [TEST_BUG] MouseEvent/.../
    /AltGraphModifierTest.java has only "Fail" button
    + JDK-8201778: Speed up test
    javax/net/ssl/DTLS/PacketLossRetransmission.java
    + JDK-8265429: Improve GCM encryption
    + JDK-8277444: Data race between
    JvmtiClassFileReconstituter::copy_bytecodes and class linking
    + JDK-8279005: sun/tools/jstat tests do not check for test case
    exit codes after JDK-8245129
    + JDK-8304811: vmTestbase/vm/mlvm/indy/func/jvmti/
    /stepBreakPopReturn/INDIFY_Test.java fails with
    JVMTI_ERROR_TYPE_MISMATCH
    + JDK-8305567: serviceability/tmtools/jstat/GcTest01.java
    failed  utils.JstatGcResults.assertConsistency
    + JDK-8317801: java/net/Socket/asyncClose/Race.java fails
    intermittently (aix)
    + JDK-8320836: jtreg gtest runs should limit heap size
    + JDK-8325766: Extend CertificateBuilder to create trust and
    end entity certificates programmatically
    + JDK-8333526: Restructure java/nio/channels/DatagramChannel/
    /StressNativeSignal.java to a fail fast exception handling
    policy
    + JDK-8333783: java/nio/channels/FileChannel/directio/
    /DirectIOTest.java is unstable with AV software
    + JDK-8334238: Enhance AddLShortcutTest jpackage test
    + JDK-8335986: Test javax/swing/JCheckBox/4449413/
    /bug4449413.java fails on Windows 11 x64 because RBMenuItem's
    and CBMenuItem's checkmark on the left side are not visible
    + JDK-8341496: Improve JMX connections
    + JDK-8343218: Add option to disable allocating interface and
    abstract classes in non-class metaspace
    + JDK-8343546: GHA: Cache required dependencies in master-branch
    workflow
    + JDK-8345810: Custom launchers must be linked with pthread to
    avoid dynamic linker issues
    + JDK-8346753: Test javax/swing/JMenuItem/RightLeftOrientation/
    /RightLeftOrientation.java fails on Windows Server 2025 x64
    because the icons of RBMenuItem and CBMenuItem are not visible
    in Nimbus LookAndFeel
    + JDK-8346839: [TESTBUG] "java/awt/textfield/setechochartest4/
    /setechochartest4.java" failed because the test frame
    disappears on clicking "Click Several Times" button
    + JDK-8346884: Add since checker test to jdk.editpad
    + JDK-8346952: GetGraphicsStressTest.java fails: Native
    resources unavailable
    + JDK-8347277: java/awt/Focus/ComponentLostFocusTest.java fails
    intermittently
    + JDK-8349188: LineBorder does not scale correctly
    + JDK-8350621: Code cache stops scheduling GC
    + JDK-8351487: [ubsan] jvmti.h runtime error: load of value
    which is not a valid value
    + JDK-8352016: Improve
    java/lang/RuntimeTests/RuntimeExitLogTest.java
    + JDK-8354348: Enable Extended EVEX to REX2/REX demotion for
    commutative operations with same dst and src2
    + JDK-8354415: [Ubuntu25.04] api/java_awt/GraphicsDevice/
    /indexTGF.html#SetDisplayMode -
    setDisplayMode_REFRESH_RATE_UNKNOWN fails: Height is different
    on vnc
    + JDK-8354447: Missing test for retroactive
    @SuppressWarnings("dangling-doc-comments") behavior
    + JDK-8354646: java.awt.TextField allows to identify the spaces
    in a password when double clicked at the starting and end of
    the text
    + JDK-8355478: DoubleActionESC.java fails intermittently
    + JDK-8356324: JVM crash (SIGSEGV at
    ClassListParser::resolve_indy_impl) during -Xshare:dump
    starting from 21.0.5
    + JDK-8356897: Update NSS library to 3.111
    + JDK-8357064: cds/appcds/ArchiveRelocationTest.java failed
    with missing expected output
    + JDK-8357141: Update to use jtreg 7.5.2
    + JDK-8357382: runtime/cds/appcds/aotClassLinking/
    /BulkLoaderTest.java#aot fails with Xcomp and C1
    + JDK-8357396: Refactor nmethod::make_not_entrant to use Enum
    instead of "const char*"
    + JDK-8357691: File blocked.certs contains bad content when
    boot jdk 25 is used, sun/security/lib/CheckBlockedCerts.java
    failing
    + JDK-8357694: RISC-V: Several IR verification tests fail when
    vlen=128
    + JDK-8357799: Improve instructions for
    JFileChooser/HTMLFileName.java
    + JDK-8357816: Add test from JDK-8350576
    + JDK-8357822: C2: Multiple string optimization tests are no
    longer testing string concatenation optimizations
    + JDK-8357959: (bf) ByteBuffer.allocateDirect initialization
    can result in large TTSP spikes
    + JDK-8358048: java/net/httpclient/HttpsTunnelAuthTest.java
    incorrectly calls Thread::stop
    + JDK-8358340: Support CDS heap archive with Generational
    Shenandoah
    + JDK-8358532: JFileChooser in GTK L&amp;F still displays HTML
    filename
    + JDK-8358535: Changes in ClassValue (JDK-8351996) caused a
    1-9% regression in Renaissance-PageRank
    + JDK-8358556: Assert when running with -XX:-UseLibmIntrinsic
    + JDK-8358685: [TEST] AOTLoggingTag.java failed with missing
    log message
    + JDK-8358697: TextLayout/MyanmarTextTest.java passes if no
    Myanmar font is found
    + JDK-8358723: jpackage signing issues: the main launcher
    doesn't have entitlements
    + JDK-8358748: Large page size initialization fails with assert
    "page_size must be a power of 2"
    + JDK-8358751: C2: Recursive inlining check for compiled lambda
    forms is broken
    + JDK-8358813: JPasswordField identifies spaces in password via
    delete shortcuts
    + JDK-8359061: Update and ProblemList manual test
    java/awt/Cursor/CursorDragTest/ListDragCursor.java
    + JDK-8359104: gc/TestAlwaysPreTouchBehavior.java#&lt;gcname&gt;
    fails on Linux
    + JDK-8359105: RISC-V: No need for acquire fence in safepoint
    poll during JNI calls
    + JDK-8359127: Amend java/nio/channels/DatagramChannel/
    /PromiscuousIPv6.java to use @requires for OS platform
    selection
    + JDK-8359167: Remove unused test/hotspot/jtreg/vmTestbase/nsk/
    /share/jpda/BindServer.java
    + JDK-8359207: Remove runtime/signal/TestSigusr2.java since it
    is always skipped
    + JDK-8359423: Improve error message in case of missing jsa
    shared archive
    + JDK-8359428: Test 'javax/swing/JTabbedPane/bug4499556.java'
    failed because after selecting one of L&amp;F items, the test case
    automatically failed when clicking on L&amp;F Menu button again
    + JDK-8359449: [TEST] open/test/jdk/java/io/File/SymLinks.java
    Refactor extract method for Windows specific test
    + JDK-8359477: com/sun/net/httpserver/Test12.java appears to
    have a temp file race
    + JDK-8359501: Enhance Handling of URIs
    + JDK-8359687: Use PassFailJFrame for
    java/awt/print/Dialog/DialogType.java
    + JDK-8359690: New test TestCPUTimeSampleThrottling still fails
    intermittently
    + JDK-8359735: [Ubuntu 25.10] java/lang/ProcessBuilder/
    /Basic.java, java/lang/ProcessHandle/InfoTest.java fail due to
    rust-coreutils
    + JDK-8359827: Test runtime/Thread/ThreadCountLimit.java need
    loop increasing the limit
    + JDK-8360022: ClassRefDupInConstantPoolTest.java fails when
    running in repeat
    + JDK-8360090: [TEST] RISC-V: disable some cds tests on qemu
    + JDK-8360178: TestArguments.atojulong gtest has incorrect
    format string
    + JDK-8360219: [AIX] assert(locals_base &gt;= l2) failed: bad
    placement
    + JDK-8360255: runtime/jni/checked/TestLargeUTF8Length.java
    fails with -XX:-CompactStrings
    + JDK-8360408: [TEST] Use @requires tag instead of exiting
    based on "os.name" property value for
    sun/net/www/protocol/file/FileURLTest.java
    + JDK-8360411: [TEST] open/test/jdk/java/io/File/
    /MaxPathLength.java Refactor extract method to encapsulate
    Windows specific test logic
    + JDK-8360518: Docker tests do not work when asan is configured
    + JDK-8360520: RISC-V: C1: Fix primitive array clone intrinsic
    regression after JDK-8333154
    + JDK-8360664: Null pointer dereference in src/hotspot/share/
    /prims/jvmtiTagMap.cpp in
    IterateOverHeapObjectClosure::do_object()
    + JDK-8360783: CTW: Skip deoptimization between tiers
    + JDK-8360791: [ubsan] Adjust signal handling
    + JDK-8360867: CTW: Disable inline cache verification
    + JDK-8360981: Remove use of Thread.stop in
    test/jdk/java/net/Socket/DeadlockTest.java
    + JDK-8361112: Use exact float -&gt; Float16 conversion method in
    Float16 tests
    + JDK-8361180: Disable CompiledDirectCall verification with
  - VerifyInlineCaches
    + JDK-8361198: [AIX] fix misleading error output in
    thread_cpu_time_unchecked
    + JDK-8361211: C2: Final graph reshaping generates unencodeable
    klass constants
    + JDK-8361215: Add AOT test case: verification constraint
    classes are excluded
    + JDK-8361253: CommandLineOptionTest library should report
    observed values on failure
    + JDK-8361255: CTW: Tolerate more NCDFE problems
    + JDK-8361298: SwingUtilities/bug4967768.java fails where
    character P is not underline
    + JDK-8361314: Test serviceability/jvmti/VMEvent/MyPackage/
    /VMEventRecursionTest.java FATAL ERROR in native method:
    Failed during the GetClassSignature call
    + JDK-8361367: AOT ExcludedClasses.java test failed with
    missing constant pool logs
    + JDK-8361423: Add IPSupport::printPlatformSupport to
    java/net/NetworkInterface/IPv4Only.java
    + JDK-8361449: RISC-V: Code cleanup for native call
    + JDK-8361478: GHA: Use MSYS2 from GHA runners
    + JDK-8361494: [IR Framework] Escape too much in replacement of
    placeholder
    + JDK-8361497: Scoped Values: orElse and orElseThrow do not
    access the cache
    + JDK-8361504: RISC-V: Make C1 clone intrinsic platform guard
    more specific
    + JDK-8361520: Stabilize SystemGC benchmarks
    + JDK-8361599: [PPC64] enable missing tests via jtreg requires
    + JDK-8361711: Add library name configurability to
    PKCS11Test.java
    + JDK-8361748: Enforce limits on the size of an XBM image
    + JDK-8361839: Problemlist BogusFocusableWindowState due to
    failures in the CI pipeline
    + JDK-8361868: [GCC static analyzer] complains about missing
    calloc - NULL checks in p11_util.c
    + JDK-8361871: [GCC static analyzer] complains about use of
    uninitialized value ckpObject in p11_util.c
    + JDK-8361888: [GCC static analyzer] ProcessImpl_md.c
    Java_java_lang_ProcessImpl_forkAndExec error: use of
    uninitialized value '*(ChildStuff *)p.mode
    + JDK-8361892: AArch64: Incorrect matching rule leading to
    improper oop instruction encoding
    + JDK-8361897: gc/z/TestUncommit.java fails with Uncommitted
    too slow
    + JDK-8361948: Shenandoah: region free capacity unit mismatch
    + JDK-8361950: Update to use jtreg 8
    + JDK-8361959: [GCC static analyzer] java_props_md.c  leak of
    'temp'  variable is reported
    + JDK-8362107: Update the Jan CPU26_01 release date in master
    branch after forking Oct CPU25_10
    + JDK-8362123: ClassLoader Leak via
    Executors.newSingleThreadExecutor(...)
    + JDK-8362169: Pointer passed to upcall may get wrong scope
    + JDK-8362204: test/jdk/sun/awt/font/TestDevTransform.java
    fails on Ubuntu 24.04
    + JDK-8362207: Add more test cases for possible double-rounding
    in fma
    + JDK-8362282: runtime/logging/StressAsyncUL.java failed with
    exitValue = 134
    + JDK-8362308: Enhance Bitmap operations
    + JDK-8362379: Test serviceability/HeapDump/
    /UnmountedVThreadNativeMethodAtTop.java should mark as /native
    + JDK-8362390: AIX make fails in awt_GraphicsEnv.c
    + JDK-8362482: [TESTBUG] serviceability/HeapDump/
    /UnmountedVThreadNativeMethodAtTop.java: System.gc() does not
    provide full GC
    + JDK-8362501: Update test/hotspot/jtreg/applications/jcstress/
    /README
    + JDK-8362515: RISC-V: cleanup NativeFarCall
    + JDK-8362516: Support of GCC static analyzer (-fanalyzer)
    + JDK-8362530: VM crash with -XX:+PrintTieredEvents when
    collecting AOT profiling
    + JDK-8362532: Test gc/g1/plab/* duplicate command-line options
    + JDK-8362533: Tests sun/management/jmxremote/bootstrap/*
    duplicate VM flags
    + JDK-8362581: Timeouts in
    java/nio/channels/SocketChannel/OpenLeak.java on UNIX
    + JDK-8362582: GHA: Increase bundle retention time to deal with
    infra overload better
    + JDK-8362596: RISC-V: Improve _vectorizedHashCode intrinsic
    + JDK-8362602: Add test.timeout.factor to CompileFactory to
    avoid test timeouts
    + JDK-8362632: Improve HttpServer Request handling
    + JDK-8362834: Several runtime/Thread tests should mark as
    /native
    + JDK-8362836: JFR: Broken pipe in
    jdk/jfr/event/io/TestIOTopFrame.java
    + JDK-8362838: RISC-V: Incorrect matching rule leading to
    improper oop instruction encoding
    + JDK-8362855: Test java/net/ipv6tests/TcpTest.java should
    report SkippedException when there no ia4addr  or ia6addr
    + JDK-8362889: [GCC static analyzer] leak in
    libstringPlatformChars.c
    + JDK-8362972: C2 fails with unexpected node in SuperWord
    truncation: IsFiniteF, IsFiniteD
    + JDK-8363676: [GCC static analyzer] missing return value check
    of malloc in OGLContext_SetTransform
    + JDK-8363696: Update the release version and date for OpenJDK
    25u
    + JDK-8363720: Follow up to JDK-8360411 with post review
    comments
    + JDK-8363895: Minimal build fails with slowdebug builds after
    JDK-8354887
    + JDK-8363898: RISC-V: TestRangeCheckHoistingScaledIV.java
    fails after JDK-8355293 when running without RVV
    + JDK-8363910: Avoid tuning for Power10 CPUs on Linux ppc64le
    when gcc &lt; 10 is used
    + JDK-8363928: Specifying AOTCacheOutput with a blank path
    causes the JVM to crash
    + JDK-8363965: GHA: Switch cross-compiling sysroots to Debian
    bookworm
    + JDK-8363966: GHA: Switch cross-compiling sysroots to Debian
    trixie
    + JDK-8364090: Dump JFR recording on CrashOnOutOfMemoryError
    + JDK-8364111: InstanceMirrorKlass iterators should handle CDS
    and hidden classes consistently
    + JDK-8364114: Test
    TestHugePageDecisionsAtVMStartup.java#LP_enabled fails when no
    free hugepage
    + JDK-8364120: RISC-V: unify the usage of
    MacroAssembler::instruction_size
    + JDK-8364150: RISC-V: Leftover for JDK-8343430 removing old
    trampoline call
    + JDK-8364177: JDK fails to build due to undefined symbol in
    libpng on LoongArch64
    + JDK-8364184: [REDO] AArch64: [VectorAPI] sve vector math
    operations are not supported after JDK-8353217
    + JDK-8364190: JFR: RemoteRecordingStream withers don't work
    + JDK-8364198: NMT should have a better corruption message
    + JDK-8364199: Enhance list of environment variables printed in
    hserr/hsinfo file
    + JDK-8364212: Shenandoah: Rework archived objects loading
    + JDK-8364214: Enhance polygon data support
    + JDK-8364235: Fix for JDK-8361447 breaks the alignment
    requirements for GuardedMemory
    + JDK-8364257: JFR: User-defined events and settings with a
    one-letter name cannot be configured
    + JDK-8364263: HttpClient: Improve encapsulation of ProxyServer
    + JDK-8364296: Set IntelJccErratumMitigation flag ergonomically
    + JDK-8364352: Some tests fail when using a limited number of
    pregenerated .jsa CDS archives
    + JDK-8364454: ProblemList runtime/cds/DeterministicDump.java
    on macos for JDK-8363986
    + JDK-8364503: gc/g1/TestCodeCacheUnloadDuringConcCycle.java
    fails because of race printing to stdout
    + JDK-8364514: [asan] runtime/jni/checked/
    /TestCharArrayReleasing.java heap-buffer-overflow
    + JDK-8364556: JFR:  Disable SymbolTableStatistics and
    StringTableStatistics in default.jfc
    + JDK-8364597: Replace THL A29 Limited with Tencent
    + JDK-8364611: (process) Child process SIGPIPE signal
    disposition should be default
    + JDK-8364660: ClassVerifier::ends_in_athrow() should be removed
    + JDK-8364764: java/nio/channels/vthread/BlockingChannelOps.java
    subtests timed out
    + JDK-8364786: Test java/net/vthread/HttpALot.java
    intermittently fails - 24999 handled, expected 25000
    + JDK-8364984: Many jpackage tests are failing on Linux after
    JDK-8334238
    + JDK-8364993: JFR: Disable jdk.ModuleExport in default.jfc
    + JDK-8364996: java/awt/font/FontNames/LocaleFamilyNames.java
    times out on Windows
    + JDK-8365058: Enhance CopyOnWriteArraySet
    + JDK-8365071: ARM32: JFR intrinsic jvm_commit triggers C2
    regalloc assert
    + JDK-8365086: CookieStore.getURIs() and get(URI) should return
    an immutable List
    + JDK-8365165: Zap C-heap memory at delete/free
    + JDK-8365166: ARM32: missing os::fetch_bcp_from_context
    implementation
    + JDK-8365168: Use 64-bit aligned addresses for CK_ULONG access
    in PKCS11 native key code
    + JDK-8365200: RISC-V: compiler/loopopts/superword/
    /TestGeneralizedReductions.java fails with Zvbb and vlen=128
    + JDK-8365206: RISC-V: compiler/c2/irTests/
    /TestFloat16ScalarOperations.java is failing on riscv64
    + JDK-8365240: [asan] exclude some tests when using asan
    enabled binaries
    + JDK-8365260: Problemlist 1 test due to failures in the CI
    pipeline
    + JDK-8365265: x86 short forward jump exceeds 8-bit offset in
    methodHandles_x86.cpp when using Intel APX
    + JDK-8365271: Improve Swing supports
    + JDK-8365280: Enhance JOptionPane
    + JDK-8365302: RISC-V: compiler/loopopts/superword/
    /TestAlignVector.java fails when vlen=128
    + JDK-8365307: AIX make fails after JDK-8364611
    + JDK-8365312: GCC 12 cannot compile SVE on aarch64 with
    auto-var-init pattern
    + JDK-8365389: Remove static color fields from SwingUtilities3
    and WindowsMenuItemUI
    + JDK-8365425: [macos26] javax/swing/JInternalFrame/8160248/
    /JInternalFrameDraggingTest.java fails on macOS 26
    + JDK-8365442: [asan] runtime/ErrorHandling/
    /CreateCoredumpOnCrash.java fails
    + JDK-8365468: EagerJVMCI should only apply to the
    CompilerBroker JVMCI runtime
    + JDK-8365487: [asan] some oops (mode) related tests fail
    + JDK-8365543: UnixNativeDispatcher.init should lookup open64at
    and stat64at on AIX
    + JDK-8365571: GenShen: PLAB promotions may remain disabled for
    evacuation threads
    + JDK-8365615: Improve JMenuBar/RightLeftOrientation.java
    + JDK-8365638: JFR: Add --exact for debugging out-of-order
    events
    + JDK-8365660: test/jdk/sun/security/pkcs11/KeyAgreement/ tests
    skipped without SkipException
    + JDK-8365700: Jar --validate without any --file option leaves
    around a temporary file /tmp/tmpJar&lt;number&gt;.jar
    + JDK-8365726: Test crashed with assert in C1 thread: Possible
    safepoint reached by thread that does not allow it
    + JDK-8365772: RISC-V: correctly prereserve NaN payload when
    converting from float to float16 in vector way
    + JDK-8365790: Shutdown hook for application image does not
    work on Windows
    + JDK-8365811: test/jdk/java/net/CookieHandler/B6644726.java
    failure - "Should have 5 cookies. Got only 4, expires probably
    didn't parse correctly"
    + JDK-8365823: Revert storing abstract and interface Klasses to
    non-class metaspace
    + JDK-8365834: Mark java/net/httpclient/ManyRequests.java  as
    intermittent
    + JDK-8365841: RISC-V: Several IR verification tests fail after
    JDK-8350960 without Zvfh
    + JDK-8365844: RISC-V: TestBadFormat.java fails when running
    without RVV
    + JDK-8365863: /test/jdk/sun/security/pkcs11/Cipher tests skip
    without SkippedException
    + JDK-8365913: Support latest MSC_VER in abstract_vm_version.cpp
    + JDK-8365919: Replace currentTimeMillis with nanoTime in
    Stresser.java
    + JDK-8365926: RISC-V: Performance regression in renaissance
    (chi-square)
    + JDK-8365956: GenShen: Adaptive tenuring threshold algorithm
    may raise threshold prematurely
    + JDK-8365983: Tests should throw SkippedException when SCTP
    not supported
    + JDK-8366028: MethodType::fromMethodDescriptorString should
    not throw UnsupportedOperationException for invalid
    descriptors
    + JDK-8366029: Do not add -XX:VerifyArchivedFields by default
    to CDS tests
    + JDK-8366031: Mark com/sun/nio/sctp/SctpChannel/
    /CloseDescriptors.java as intermittent
    + JDK-8366075: Problemlist 2 tests due to failures in the CI
    pipeline
    + JDK-8366092: [GCC static analyzer] UnixOperatingSystem.c
    warning: use of uninitialized value 'systemTicks'
    + JDK-8366147: ZGC:
    ZPageAllocator::cleanup_failed_commit_single_partition may
    leak memory
    + JDK-8366159: SkippedException is treated as a pass for
    pkcs11/KeyStore, pkcs11/SecretKeyFactory and
    pkcs11/SecureRandom
    + JDK-8366208: Unexpected exception in
    sun.java2d.cmm.lcms.LCMSImageLayout
    + JDK-8366229: runtime/Thread/TooSmallStackSize.java runs with
    all collectors
    + JDK-8366250: Problemlist 3 tests due to failures in the CI
    pipeline
    + JDK-8366340: Problemlist 1 test due to failures in the CI
    pipeline
    + JDK-8366342: Key generator and key pair generator tests
    skipping, but showing as passed
    + JDK-8366359: Test should throw SkippedException when there is
    no lpstat
    + JDK-8366365: [test] test/lib-test/jdk/test/whitebox/
    /CPUInfoTest.java should be updated
    + JDK-8366434: THP not working properly with G1 after
    JDK-8345655
    + JDK-8366446: Test java/awt/geom/ConcurrentDrawPolygonTest.java
    fails intermittently
    + JDK-8366537: Test "java/util/TimeZone/
    /DefaultTimeZoneTest.java" is not updating the zone ID as
    expected
    + JDK-8366558: Gtests leave /tmp/cgroups-test* files
    + JDK-8366694: Test JdbStopInNotificationThreadTest.java timed
    out after 60 second
    + JDK-8366750: Remove test 'java/awt/Choice/
    /ChoiceMouseWheelTest/ChoiceMouseWheelTest.java' from
    problemlist
    + JDK-8366764: Deproblemlist java/awt/ScrollPane/
    /ScrollPositionTest.java
    + JDK-8366800: Problemlist 1 test due to failures in the CI
    pipeline
    + JDK-8366844: Update and automate
    MouseDraggedOriginatedByScrollBarTest.java
    + JDK-8366850: Test com/sun/jdi/
    /JdbStopInNotificationThreadTest.java failed
    + JDK-8366893: java/lang/Thread/virtual/stress/
    /GetStackTraceALotWhenPinned.java timed out on macos-aarch64
    + JDK-8366948: AOT cache creation crashes when iterating
    training data
    + JDK-8366980: TestTransparentHugePagesHeap.java fails when run
    with -UseCompressedOops
    + JDK-8367017: Remove legacy checks from WrappedToolkitTest and
    convert from bash
    + JDK-8367021: Regression in LocaleDataTest refactoring
    + JDK-8367048: RISC-V: Correct pipeline descriptions of the
    architecture
    + JDK-8367066: RISC-V: refine register selection in
    MacroAssembler:: decode_klass_not_null
    + JDK-8367098: RISC-V: sync CPU features with related JVM flags
    for dependant ones
    + JDK-8367131: Test com/sun/jdi/ThreadMemoryLeakTest.java fails
    on 32 bits
    + JDK-8367133: DTLS: fragmentation of Finished message results
    in handshake failure
    + JDK-8367137: RISC-V: Detect Zicboz block size via hwprobe
    + JDK-8367237: Thread-Safety Usage Warning for
    java.text.Collator Classes
    + JDK-8367277: Fix copyright header in
    JMXInterfaceBindingTest.java
    + JDK-8367313: CTW: Execute in AWT headless mode
    + JDK-8367333: C2: Vector math operation intrinsification
    failure
    + JDK-8367348: Enhance PassFailJFrame to support links in HTML
    + JDK-8367378: GenShen: Missing timing stats when old mark
    buffers are flushed during final update refs
    + JDK-8367384: The ICC_Profile class may throw exceptions
    during serialization
    + JDK-8367598: Switch to CRC32C for SEED calculation in
    jdk.test.lib.Utils
    + JDK-8367616: RISC-V: Auto-enable Zicboz extension for debug
    builds
    + JDK-8367689: Revert removal of several compilation-related
    vmStructs fields
    + JDK-8367692: RISC-V: Align post call nop
    + JDK-8367694: Fix jtreg test failure when Intel APX is enabled
    for KNL platforms
    + JDK-8367780: Enable UseAPX on Intel CPUs only when both APX_F
    and APX_NCI_NDD_NF cpuid features are present
    + JDK-8367782: VerifyJarEntryName.java: Fix modifyJarEntryName
    to operate on bytes and re-introduce verifySignatureEntryName
    + JDK-8367869: Test java/io/FileDescriptor/Sync.java timed out
    + JDK-8367904: Test java/net/InetAddress/ptr/Lookup.java should
    throw SkippedException
    + JDK-8367948: JFR: MethodTrace threshold setting has no effect
    + JDK-8367953: JFR sampler threads does not appear in thread
    dump
    + JDK-8367969: C2: compiler/vectorapi/TestVectorMathLib.java
    fails without UnlockDiagnosticVMOptions
    + JDK-8367988: NewFileSystemTests.readOnlyZipFileFailure fails
    when run by root user
    + JDK-8368032: Enhance Certificate Checking
    + JDK-8368071: Compilation throughput regressed 2X-8X after
    JDK-8355003
    + JDK-8368152: Shenandoah: Incorrect behavior at end of
    degenerated cycle
    + JDK-8368192: Test java/lang/ProcessBuilder/Basic.java#id0
    fails with Exception: Stack trace
    + JDK-8368366: RISC-V: AlignVector is mistakenly set to
    AvoidUnalignedAccesses
    + JDK-8368367: Test jdk/jfr/event/gc/detailed/
    /TestGCHeapMemoryUsageEvent.java fails  jdk.GCHeapMemoryUsage
    "expected 0 &gt; 0"
    + JDK-8368565: Adjust comment regarding dependency of libjvm.so
    to librt
    + JDK-8368606: Printer lookup returns empty on AIX platform due
    to uninitialized results list
    + JDK-8368668: Several vmTestbase/vm/gc/compact tests timed out
    on large memory machine
    + JDK-8368670: Deadlock in JFR on event register + class load
    + JDK-8368698: runtime/cds/appcds/aotCache/OldClassSupport.java
    assert(can_add()) failed: Cannot add TrainingData objects
    + JDK-8368732: RISC-V: Detect support for misaligned vector
    access via hwprobe
    + JDK-8368890: open/test/jdk/tools/jpackage/macosx/
    /NameWithSpaceTest.java fails randomly
    + JDK-8368893: RISC-V: crash after JDK-8352673 on fastdebug
    version
    + JDK-8368960: Adjust java UL logging in the build
    + JDK-8368982: Test sun/security/tools/jarsigner/EC.java
    completed and timed out
    + JDK-8369078: Fix faulty test conversion in
    IllegalCharsetName.java
    + JDK-8369184: SimpleTimeZone equals() Returns True for Unequal
    Instances with Different hashCode Values
    + JDK-8369190: JavaFrameAnchor on AArch64 has unnecessary
    barriers and wrong store order in MacroAssembler
    + JDK-8369226: GHA: Switch to MacOS 15
    + JDK-8369319: java/net/httpclient/CancelRequestTest.java fails
    intermittently
    + JDK-8369450: [Ubuntu 25.10] openjdk fails to build due to
    rust-coreutils date
    + JDK-8369487: Revert EA option for build promotion
    + JDK-8369506: Bytecode rewriting causes Java heap corruption
    on AArch64
    + JDK-8369560: Slowdebug build without CDS fails
    + JDK-8369563: Gtest dll_address_to_function_and_library_name
    has issues with stripped pdb files
    + JDK-8369616: JavaFrameAnchor on RISC-V has unnecessary
    barriers and wrong store order in MacroAssembler
    + JDK-8369656: Calling CompletableFuture.join() could execute
    task in common pool
    + JDK-8369657: [AIX] TOC overflow in static-launcher build when
    building slowdebug after JDK-8352064
    + JDK-8369853: jpackage signing tests fail after JDK-8358723
    + JDK-8369868: Compilation error in Win8365790Test.java with
    JDK-8358723 fix resulting in CI tier3 failure
    + JDK-8369946: Bytecode rewriting causes Java heap corruption
    on PPC
    + JDK-8369947: Bytecode rewriting causes Java heap corruption
    on RISC-V
    + JDK-8369979: Flag UsePopCountInstruction was accidentally
    disabled on PPC64
    + JDK-8370048: Shenandoah: Deprecated ShenandoahPacing option
    + JDK-8370049: [s390x] G1 barrier compareAndExchange does not
    return old value when compareExchange fails
    + JDK-8370318: AES-GCM vector intrinsic may read out of bounds
    (x86_64, AVX-512)
    + JDK-8370331: Problemlist 2 tests due to failures in the CI
    pipeline
    + JDK-8370428: Change milestone to fcs for all releases
    + JDK-8370465: Right to Left Orientation Issues with MenuItem
    Component
    + JDK-8371094: --mac-signing-key-user-name no longer works
    + JDK-8371425: Include folder names in vscode workspace virtual
    folders
    + JDK-8371697: test/jdk/java/nio/file/FileStore/Basic.java
    fails after 8360887 on linux
    + JDK-8372753: jpackage ignores --file-associations option with
    predefined app image</changelog>
  <changelog author="fstrba@suse.com" date="1773662400">- Provide the timezone-java and tzdata-java (jsc#PED-15898)</changelog>
  <changelog author="fstrba@suse.com" date="1774353600">- Migrate to the new logic of FIPS patch developed by RedHat in
  https://github.com/rh-openjdk/jdk/tree/fips-25u
- Add the sources of /nss-native-fips-key-import-export-adapter
  * This native library is an adapter for OpenJDK to use the NSS
    PKCS #11 software token (libsoftokn3.so) in FIPS mode. It
    provides support to import and export secret and private key
    material in plain. This enables Java applications to manage
    PKCS #12 key stores through the java.security.KeyStore API and
    benefit from FIPS-certified cryptography. Note: this library
    replaces the Java FIPS Key Importer Exporter in previous
    versions of this package (FIPSKeyImporter.java).
- Modified patch:
  * fips.patch
    + diff the https://github.com/rh-openjdk/jdk/tree/fips-25u
    to the release tag jdk-25.0.2-ga and adapt for SUSE
- Added patches:
  * nssadapter-Allow-overriding-of-gcc-name.patch
    + Allow specifying CC variables on system where the default
    gcc is too old for the features needed in the nssadapter
  * nssadapter-Fix-build-on-openSUSE.patch
    + make the build work well with SUSE packaging of NSS
  * 0001-Don-t-make-missing-system-crypto-policies-fatal.patch
    + prevent OpenJDK from throwing exception if an "include"d
    security config file is missing.
    + Allows the same package running on systems that don't provide
    the crypto-policies package as well as on those that provide
    it
- Add create-crypto-properties-files.bash that generates during the
  build the config files for different fips and non-fips scenarios
- Add TestSecurityProperties.java to test the loading of system
  security properties where applicable</changelog>
  <changelog author="fstrba@suse.com" date="1777204800">- Update to upstream tag jdk-25.0.3+9 (April 2026 CPU)
  * CVEs
    + CVE-2026-22007 (bsc#1262490)
    + CVE-2026-22008 (bsc#1262493)
    + CVE-2026-22013 (bsc#1262494)
    + CVE-2026-22016 (bsc#1262495)
    + CVE-2026-22018 (bsc#1262496)
    + CVE-2026-22021 (bsc#1262497)
    + CVE-2026-23865 (bsc#1259118)
    + CVE-2026-34268 (bsc#1262500)
    + CVE-2026-34282 (bsc#1262501)
  * Changes
    + JDK-7191877: TEST_BUG: java/rmi/transport/checkLeaseInfoLeak/
    /CheckLeaseLeak.java failing intermittently
    + JDK-8030957: AIX: Implement OperatingSystemMXBean
    .getSystemCpuLoad() and .getProcessCpuLoad() on AIX
    + JDK-8068378: [TEST_BUG]The java/awt/Modal/PrintDialogsTest/
    /PrintDialogsTest.java instruction need to update
    + JDK-8183336: Better cleanup for jdk/test/java/lang/module/
    /customfs/ModulesInCustomFileSystem.java
    + JDK-8212084: G1: Implement UseGCOverheadLimit
    + JDK-8244336: Restrict algorithms at JCE layer
    + JDK-8246037: Shenandoah: update man pages to mention
  - XX:+UseShenandoahGC
    + JDK-8255463: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed with
    ThreadTimeoutException
    + JDK-8256289: java/awt/Focus/AppletInitialFocusTest/
    /AppletInitialFocusTest1.java failed with "RuntimeException:
    Wrong focus owner:
    java.awt.Button[button1,41,36,56x23,label=Button1]"
    + JDK-8274082: Wrong test name in jtreg run tag for
    java/awt/print/PrinterJob/SwingUIText.java
    + JDK-8286258: [Accessibility,macOS,VoiceOver] VoiceOver reads
    the spinner value wrong and sometime partially
    + JDK-8286865: vmTestbase/vm/mlvm/meth/stress/jni/nativeAndMH/
    /Test.java fails with Out of space in CodeCache
    + JDK-8287062: com/sun/jndi/ldap/LdapPoolTimeoutTest.java
    failed due to different timeout message
    + JDK-8293484: AArch64:
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails on CPU
    with SHA512 feature support
    + JDK-8299304: Test "java/awt/print/PrinterJob/
    /PageDialogTest.java" fails on macOS 13 x64 because the Page
    Dialog blocks the Toolkit
    + JDK-8307495: Specialize atomic bitset functions for aix-ppc
    + JDK-8313770: jdk/internal/platform/docker/
    /TestSystemMetrics.java fails on Ubuntu
    + JDK-8316274: javax/swing/ButtonGroup/
    /TestButtonGroupFocusTraversal.java fails in Ubuntu 23.10 with
    Motif LAF
    + JDK-8317838: java/nio/channels/Channels/
    /SocketChannelStreams.java running into timeout (aix)
    + JDK-8318662: Refactor some jdk/java/net/httpclient/http2
    tests to JUnit
    + JDK-8320677: Printer tests use invalid '@run main/manual=yesno
    + JDK-8333857: Test sun/security/ssl/SSLSessionImpl/
    /ResumeChecksServer.java failed: Existing session was used
    + JDK-8333871: Check return values of sysinfo
    + JDK-8334928: Test sun/security/ssl/SSLSocketImpl/
    /ReuseAddr.java failed: java.net.BindException: Address
    already in use
    + JDK-8335646: Nimbus : JLabel not painted with LAF defined
    foreground color on Ubuntu 24.04
    + JDK-8336695: Update Commons BCEL to Version 6.10.0
    + JDK-8339791: Refactor MiscUndecorated/ActiveAWTWindowTest.java
    + JDK-8341039: compiler/cha/TypeProfileFinalMethod.java fails
    with assertEquals expected: 0 but was: 2
    + JDK-8342175: MemoryEaterMT fails intermittently with
    ExceptionInInitializerError
    + JDK-8342401: [TESTBUG] javax/swing/JSpinner/8223788/
    /JSpinnerButtonFocusTest.java test fails in ubuntu 22.04 on
    SBR Hosts
    + JDK-8342640: GenShen: Silently ignoring
    ShenandoahGCHeuristics considered poor user-experience
    + JDK-8342659: Test vmTestbase/nsk/jdi/ObjectReference/
    /referringObjects/referringObjects002/referringObjects002.java
    failed: Class nsk.share.jdi.TestClass1 was not unloaded
    + JDK-8343316: Review and update tests using explicit provider
    names
    + JDK-8343340: Swapping checking do not work for
    MetricsMemoryTester failcount
    + JDK-8343474: [updates] Customize README.md to specifics of
    update project
    + JDK-8344073: Test runtime/cds/appcds/
    /TestParallelGCWithCDS.java#id0 failed
    + JDK-8346154: [XWayland] Some tests fail intermittently in the
    CI, but not locally
    + JDK-8346962: Test CRLReadTimeout.java fails with -Xcomp on a
    fastdebug build
    + JDK-8348014: Enhance certificate processing
    + JDK-8349192: jvmti/scenarios/contention/TC05/tc05t001 fails:
    ERROR: tc05t001.cpp, 281: (waitedThreadCpuTime -
    waitThreadCpuTime) &lt; (EXPECTED_ACCURACY * 1000000)
    + JDK-8352149: Test java/awt/Frame/MultiScreenTest.java fails:
    Window list is empty
    + JDK-8353755: Add a helper method to Util - findComponent()
    + JDK-8354244: Use random data in MinMaxRed_Long data arrays
    + JDK-8354469: Keytool exposes the password in plain text when
    command is piped using | grep
    + JDK-8354894: java/lang/Thread/virtual/Starvation.java timeout
    on server with high CPUs
    + JDK-8354937: Cleanup some sparc related coding in os_linux
    + JDK-8356548: Use ClassFile API instead of ASM to transform
    classes in tests
    + JDK-8356868: Not all cgroup parameters are made available
    + JDK-8357277: Update OpenSSL library for interop tests
    + JDK-8357380: java/lang/StringBuilder/RacingSBThreads.java
    times out with C1
    + JDK-8357390: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java Test failing on Ubuntu 24.04 Vm Hosts
    used by Oracle's internal CI system
    + JDK-8357470: src/java.base/share/classes/sun/security/util/
    /Debug.java implement the test for args.toLowerCase
    + JDK-8357570: [macOS] os::Bsd::available_memory() might return
    too low values
    + JDK-8357591: Re-enable CDS test cases for jvmci after
    JDK-8345826
    + JDK-8358058: sun/java2d/OpenGL/DrawImageBg.java Test fails
    intermittently
    + JDK-8358159: Empty mode/padding in cipher transformations
    + JDK-8358529: GenShen: Heuristics do not respond to changes in
    SoftMaxHeapSize
    + JDK-8358679: [asan] vmTestbase/nsk/jvmti tests show memory
    issues
    + JDK-8358686: CDS and AOT can cause buffer truncation warning
    even when logging is disabled
    + JDK-8358735: GenShen: block_start() may be incorrect after
    class unloading
    + JDK-8358756: [s390x] Test StartupOutput.java crash due to
    CodeCache size
    + JDK-8358801: javac produces class that does not pass verifier.
    + JDK-8359064: Expose reason for marking nmethod non-entrant to
    JVMCI client
    + JDK-8359182: Use @requires instead of SkippedException for
    MaxPath.java
    + JDK-8359388: Stricter checking for cipher transformations
    + JDK-8359418: Test "javax/swing/text/GlyphView/bug4188841.java"
    failed because the phrase of text pane does not match the
    instructions
    + JDK-8359472: JVM crashes when attaching a dynamic agent
    before JVMTI_PHASE_LIVE
    + JDK-8359707: Add classfile modification code to
    RedefineClassHelper
    + JDK-8359868: Shenandoah: Free threshold heuristic does not
    use SoftMaxHeapSize
    + JDK-8359978: Test javax/net/ssl/SSLSocket/Tls13PacketSize.java
    failed again with java.net.SocketException: An established
    connection was aborted by the software in your host machine
    + JDK-8360049: CodeInvalidationReasonTest.java fails with ZGC
    on AArch64
    + JDK-8360160: ubuntu-22-04 machine is failing client tests
    + JDK-8360169: Problem list CodeInvalidationReasonTest.java on
    linux-riscv64 until JDK-8360168 is fixed
    + JDK-8360271: String.indexOf intrinsics fail with
    +EnableX86ECoreOpts and -CompactStrings
    + JDK-8360395: sun/security/tools/keytool/i18n.java user
    country is current user location instead of the language
    + JDK-8360539: DTLS handshakes fails due to improper cookie
    validation logic
    + JDK-8360562: sun/security/tools/keytool/i18n.java add an
    ability to add comment for failures
    + JDK-8360702: runtime/Thread/AsyncExceptionTest.java timed out
    + JDK-8360882: Tests throw SkippedException when they should
    fail
    + JDK-8361067: Test ExtraButtonDrag.java requires frame.dispose
    in finally block
    + JDK-8361106: [TEST] com/sun/net/httpserver/Test9.java fails
    with java.nio.file.FileSystemException
    + JDK-8361363: ShenandoahAsserts::print_obj() does not work for
    forwarded objects and UseCompactObjectHeaders
    + JDK-8361381: GlyphLayout behavior differs on JDK 11+ compared
    to JDK 8
    + JDK-8361492: [IR Framework] Has too restrictive regex for
    load and store
    + JDK-8361521: BogusFocusableWindowState.java fails with
    StackOverflowError on Linux
    + JDK-8361530: Test javax/swing/GraphicsConfigNotifier/
    /StalePreferredSize.java timed out
    + JDK-8361613: System.console() should only be available for
    interactive terminal
    + JDK-8361894: sun/security/krb5/config/native/
    /TestDynamicStore.java ensure that the test is run with sudo
    + JDK-8362284: RISC-V: cleanup NativeMovRegMem
    + JDK-8362979: C2 fails with unexpected node in SuperWord
    truncation: CmpLTMask, RoundF
    + JDK-8363950: Incorrect jtreg header in TestLayoutVsICU.java
    + JDK-8364373: Transform Affine transformations
    + JDK-8364465: Enhance behavior of some intrinsics
    + JDK-8364580: Test compiler/vectorization/
    /TestSubwordTruncation.java fails on platforms without
    RoundF/RoundD
    + JDK-8364741: [asan] runtime/ErrorHandling/
    /PrintVMInfoAtExitTest.java fails because output differs
    slightly
    + JDK-8364756: JFR: Improve slow tests
    + JDK-8364936: Shenandoah: Switch nmethod entry barriers to
    conc_instruction_and_data_patch
    + JDK-8365065: cancelled ForkJoinPool tasks no longer throw
    CancellationException
    + JDK-8365184: sun/tools/jhsdb/
    /HeapDumpTestWithActiveProcess.java Re-enable SerialGC flag on
    debuggee process
    + JDK-8365305: The ARIA role ‘contentinfo’ is not valid for the
    element &lt;footer&gt;
    + JDK-8365398: TEST_BUG: java/rmi/transport/checkLeaseInfoLeak/
    /CheckLeaseLeak.java failing intermittently
    + JDK-8365526: Crash with null Symbol passed to
    SystemDictionary::resolve_or_null
    + JDK-8365570: C2 fails assert(false) failed: Unexpected node
    in SuperWord truncation: CastII
    + JDK-8365776: Convert JShell tests to use JUnit instead of
    TestNG
    + JDK-8365861: test/jdk/sun/security/pkcs11/Provider/ tests
    skipped without SkippedException
    + JDK-8365972: JFR: ThreadDump and ClassLoaderStatistics events
    may cause back to back rotations
    + JDK-8366082: Improve queue size computation in CPU-time
    sampler
    + JDK-8366128: jdk/jdk/nio/zipfs/TestPosix.java::testJarFile
    uses wrong file
    + JDK-8366182: Some PKCS11Tests are being skipped when they
    shouldn't
    + JDK-8366261: Provide utility methods for
    sun.security.util.Password
    + JDK-8366278: Form control element &lt;select&gt; has no associated
    label
    + JDK-8366369: Add @requires linux for GTK L&amp;F tests
    + JDK-8366486: Test jdk/jfr/event/profiling/
    /TestCPUTimeSampleMultipleRecordings.java is timing out
    + JDK-8366733: Re-examine older java.text NF, DF, and DFS
    serialization tests
    + JDK-8366747: RISC-V: Improve VerifyMethodHandles for method
    handle linkers
    + JDK-8366817: test/jdk/javax/net/ssl/TLSCommon/interop/
    /JdkProcServer.java and JdkProcClient.java should not delete
    logs
    + JDK-8366874: Test gc/arguments/TestParallelGCErgo.java fails
    with UseTransparentHugePages
    + JDK-8366878: Improve flags of
    compiler/loopopts/superword/TestAlignVectorFuzzer.java
    + JDK-8366908: Use a different class for testing JDK-8351654
    + JDK-8366938: Test runtime/handshake/HandshakeTimeoutTest.java
    crashed
    + JDK-8366951: Test runtime/logging/StressAsyncUL.java is
    timing out
    + JDK-8367135: Test compiler/loopstripmining/
    /CheckLoopStripMining.java needs internal timeouts adjusted
    + JDK-8367271: Add parsing tests to DateFormat JMH benchmark
    + JDK-8367278: Test compiler/startup/StartupOutput.java timed
    out after completion on Windows
    + JDK-8367302: New test jdk/jfr/event/profiling/
    /TestCPUTimeSampleQueueAutoSizes.java from JDK-8366082 is
    failing
    + JDK-8367371: Remove @requires vm.opt.UseLargePages from
    InternSharedString.java test
    + JDK-8367372: Test 'test/hotspot/jtreg/gc/
    /TestObjectAlignmentCardSize.java' fails on 32 bit systems
    + JDK-8367463: Improved Arena allocations
    + JDK-8367583: sun/security/util/AlgorithmConstraints/
    /InvalidCryptoDisabledAlgos.java fails after JDK-8244336
    + JDK-8367772: Refactor createUI in PassFailJFrame
    + JDK-8367784: java/awt/Focus/InitialFocusTest/
    /InitialFocusTest1.java failed with Wrong focus owner
    + JDK-8367862: debug.cpp: Do not print help message for methods
    ifdef'd out
    + JDK-8367901: Calendar.roll(hour, 24) returns wrong result
    + JDK-8367994: test/jdk/sun/security/pkcs11/Signature/ tests
    pass when they should skip
    + JDK-8368029: Several tests in httpserver/simpleserver should
    throw SkipException
    + JDK-8368182: AOT cache creation fails with class defined by
    JNI
    + JDK-8368328: CompactNumberFormat.clone does not produce
    independent instances
    + JDK-8368335: Refactor the rest of Locale TestNG based tests
    to JUnit
    + JDK-8368498: Use JUnit instead of TestNG for jdk_text tests
    + JDK-8368500: ContextClassLoader cannot be reset on threads in
    ForkJoinPool.commonPool()
    + JDK-8368551: Core dump warning may be confusing
    + JDK-8368625: com/sun/net/httpserver/
    /ServerStopTerminationTest.java fails intermittently
    + JDK-8368677: acvp test should throw SkippedException when no
    ACVP-Server available
    + JDK-8368683: [process] Increase jtreg debug output
    maxOutputSize for TreeTest
    + JDK-8368754: runtime/cds/appcds/SignedJar.java log regex is
    too strict
    + JDK-8368787: Error reporting: hs_err files should show
    instructions when referencing code in nmethods
    + JDK-8368866: compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java intermittent timed out
    + JDK-8368882: NPE during text drawing on machine with JP locale
    + JDK-8368885: NMT CommandLine tests can check for error better
    + JDK-8368892: Make JEditorPane/TestBrowserBGColor.java headless
    + JDK-8369032: Add test to ensure serialized ICC_Profile stores
    only necessary optional data
    + JDK-8369050: DecimalFormat Rounding Errors for Fractional
    Ties Near Zero
    + JDK-8369227: Virtual thread stuck in PARKED state
    + JDK-8369255: Assess and remedy any unsafe usage of the
    Semaphores used by JFR
    + JDK-8369282: Distrust TLS server certificates anchored by
    Chunghwa ePKI Root CA
    + JDK-8369335: Two  sun/java2d/OpenGL tests fail on Windows
    after JDK-8358058
    + JDK-8369505: jhsdb jstack cannot handle continuation stub
    + JDK-8369516: Delete duplicate imaging test
    + JDK-8369575: Enhance crypto algorithm support
    + JDK-8369804: TestGenerators.java fails with
    IllegalArgumentException: bound must be greater than origin
    + JDK-8369851: Remove darcy author tags from langtools tests
    + JDK-8369858: Remove darcy author tags from jdk tests
    + JDK-8369881: C2: Unexpected node in SuperWord truncation:
    ReverseBytesS, ReverseBytesUS
    + JDK-8369911: Test sun/java2d/marlin/
    /ClipShapeTest.java#CubicDoDash, #Cubic and #Poly fail
    intermittent
    + JDK-8369991: Thread blocking during JFR emergency dump must
    be in safepoint safe state
    + JDK-8370036: TestJhsdbJstackWithVirtualThread.java fails when
    run with -showversion
    + JDK-8370064: Test runtime/NMT/
    /CheckForProperDetailStackTrace.java fails on Windows when
    using stripped pdb files
    + JDK-8370197: Add missing @Override annotations in
    com.sun.beans package
    + JDK-8370201: Test serviceability/sa/
    /TestJhsdbJstackWithVirtualThread.java fails due to VM
    warnings
    + JDK-8370203: Add jcmd AOT.end_recording diagnostic command
    + JDK-8370240: [PPC64] jhsdb jstack cannot handle continuation
    stub
    + JDK-8370242: JFR: Clear event reference eagerly when using
    EventStream
    + JDK-8370244: [PPC64] Several vector tests fail on Power8
    + JDK-8370325: G1: Disallow GC for TLAB allocation
    + JDK-8370378: Some compiler tests inadvertently exclude
    particular platforms
    + JDK-8370393: Cleanup handling of ancient Windows versions
    from GetJavaProperties java_props_md
    + JDK-8370405: C2: mismatched store from MergeStores wrongly
    scalarized in allocation elimination
    + JDK-8370492: [Linux] Update cpu shares to cpu.weight mapping
    function
    + JDK-8370511: test/jdk/javax/swing/JSlider/bug4382876.java
    does not release previously pressed keys
    + JDK-8370529: Enhance Path Factories Redux
    + JDK-8370572: Cgroups hierarchical memory limit is not honored
    after JDK-8322420
    + JDK-8370579: PPC: fix inswri immediate argument order
    + JDK-8370615: Improve Kerberos credentialing
    + JDK-8370636: com/sun/jdi/TwoThreadsTest.java should wait for
    completion of all threads
    + JDK-8370646: TestLargeUTF8Length.java needs lots of memory
    + JDK-8370649: Add intermittent tag for
    gc/shenandoah/generational/TestOldGrowthTriggers.java
    + JDK-8370708: RISC-V: Add VerifyStackAtCalls
    + JDK-8370730: Test serviceability/attach/EarlyDynamicLoad/
    /EarlyDynamicLoad.java needs to be resilient about warnings
    + JDK-8370732: Use WhiteBox.getWhiteBox().fullGC() to provoking
    gc for nsk/jvmti tests
    + JDK-8370887: DelayScheduler.replace method may break the
    4-ary heap in certain scenarios
    + JDK-8370905: Update vm.defmeth tests to use virtual threads
    + JDK-8370942: test/jdk/java/security/Provider/NewInstance.java
    and /test/jdk/java/security/cert/CertStore/NoLDAP.java may
    skip without notifying
    + JDK-8370966: Create regression test for the hierarchical
    memory limit fix in JDK-8370572
    + JDK-8370986: Enhance Zip file reading
    + JDK-8370995: Enhance ZipFile usage
    + JDK-8371014: Dump JFR recording on CrashOnOutOfMemoryError is
    incorrectly implemented
    + JDK-8371103: vmTestbase/nsk/jvmti/scenarios/events/EM02/
    /em02t006/TestDescription.java failing
    + JDK-8371262: sun/security/pkcs11/Cipher/KeyWrap tests may
    silently skip
    + JDK-8371316: Adjust assertion (GC pause time cannot be
    smaller than the sum of each phase) in G1GCPhaseTimes::print
    + JDK-8371349: Update NSS library to 3.117
    + JDK-8371364: Refactor javax/swing/JFileChooser/
    /FileSizeCheck.java to use Util.findComponent()
    + JDK-8371365: Update javax/swing/JFileChooser/bug4759934.java
    to use Util.findComponent()
    + JDK-8371366: java/net/httpclient/whitebox/
    /RawChannelTestDriver.java fails intermittently in jtreg
    timeout
    + JDK-8371368: SIGSEGV in JfrVframeStream::next_vframe() on
    arm64
    + JDK-8371383: Test sun/security/tools/jarsigner/
    /DefaultOptions.java failed due to
    CertificateNotYetValidException
    + JDK-8371385: compiler/escapeAnalysis/
    /TestRematerializeObjects.java fails in case of
  - XX:-UseUnalignedAccesses
    + JDK-8371420: Still sporadic failures of
    gc/TestAlwaysPreTouchBehavior.java#&lt;gcname&gt; on Linux after
    JDK-8359104
    + JDK-8371485: ProblemList awt/Mixing/AWT_Mixing/
    /JTableInGlassPaneOverlapping.java for linux
    + JDK-8371559: Intermittent timeouts in test
    javax/net/ssl/Stapling/HttpsUrlConnClient.java
    + JDK-8371608: Jtreg test jdk/internal/vm/Continuation/Fuzz.java
    sometimes fails with (fast)debug binaries
    + JDK-8371759: Add missing @Override annotations in
    com.sun.imageio package
    + JDK-8371769: TestMemoryInvisibleParent.java fails with
    java.nio.file.AccessDeniedException
    + JDK-8371830: Enhance certificate chain validation
    + JDK-8371854: Shenandoah: Simplify WALK_FORWARD_IN_BLOCK_START
    use
    + JDK-8371864: GaloisCounterMode.implGCMCrypt0 AVX512/AVX2
    intrinsics stubs cause AES-GCM encryption failure for certain
    payload sizes
    + JDK-8371895: Lower GCTimeLimit in TestUseGCOverheadLimit.java
    + JDK-8371935: Enhance key generation
    + JDK-8371944: AOT configuration is corrupted when app closes
    System.out
    + JDK-8371948: TestStackOverflowDuringInit.java fails xss too
    small on linux-aarch64
    + JDK-8371966: RISC-V: Incorrect pointer dereference in
    TemplateInterpreterGenerator::generate_native_entry
    + JDK-8371967: Add Visual Studio 2026 to build toolchain for
    Windows
    + JDK-8371978: tools/jar/ReproducibleJar.java fails on XFS
    + JDK-8372012: java/nio/file/attribute/BasicFileAttributeView/
    /SetTimesNanos.java should check ability to create links
    + JDK-8372046: compiler/floatingpoint/
    /TestSubNodeFloatDoubleNegation.java fails IR verification
    + JDK-8372048: Performance improvement on Linux remote desktop
    + JDK-8372110: GenShen: Fix erroneous assert
    + JDK-8372120: Add missing sound keyword to MIDI tests
    + JDK-8372147: ConnectionFlowControlTest should use
    HttpResponse.connectionLabel()
    + JDK-8372321: TestBackToBackSensitive fails intermittently
    after JDK-8365972
    + JDK-8372348: Adjust some UL / JFR string deduplication output
    messages
    + JDK-8372412: Increase buffer size for ring-buffer events in
    CollectedHeap
    + JDK-8372441: JFR: Improve logging of TestBackToBackSensitive
    + JDK-8372534: Update Libpng to 1.6.51
    + JDK-8372586: Crashes on ppc64(le) after JDK-8371368
    + JDK-8372589: VM crashes on init when NonNMethodCodeHeapSize
    is set too small and UseTransparentHugePages is enabled
    + JDK-8372591: assert(!current-&gt;cont_fastpath() ||
    freeze.check_valid_fast_path()) failed
    + JDK-8372609: Bug4944439 does not enforce locale correctly
    + JDK-8372661: Add a null-safe static factory method to
    "jdk.test.lib.net.SimpleSSLContext"
    + JDK-8372704: ThreadMXBean.getThreadUserTime may return total
    time
    + JDK-8372710: Update ProcessBuilder/Basic regex
    + JDK-8372733: GHA: Bump to Ubuntu 24.04
    + JDK-8372756: Mouse additional buttons and horizontal
    scrolling are broken on XWayland GNOME &gt;= 47 after JDK-8351907
    + JDK-8372835: WorkQueue::push is missing an acquire-fence
    + JDK-8372857: Improve debuggability of
    java/rmi/server/RemoteServer/AddrInUse.java test
    + JDK-8372860: TestCodeCacheUnloadDuringConcCycle fails on ARM32
    + JDK-8372977: Unnecessary gthread-2.0 loading
    + JDK-8372988: Test runtime/Nestmates/membership/
    /TestNestHostErrorWithMultiThread.java failed: Unexpected
    interrupt
    + JDK-8373021: aarch64: MacroAssembler::arrays_equals reads out
    of bounds
    + JDK-8373101: JdkClient and JdkServer test classes ignore
    namedGroups field
    + JDK-8373106: JFR suspend/resume deadlock on macOS in pthreads
    library
    + JDK-8373290: Update FreeType to 2.14.1
    + JDK-8373429: gc/g1/TestCodeCacheUnloadDuringConcCycle fails
    on various platforms
    + JDK-8373476: (tz) Update Timezone Data to 2025c
    + JDK-8373485: JFR Crash during sampling:
    assert(jt-&gt;has_last_Java_frame()) failed: invariant
    + JDK-8373525: C2: assert(_base == Long) failed: Not a Long
    + JDK-8373537: Migrate "test/jdk/com/sun/net/httpserver/" to
    null-safe "SimpleSSLContext" methods
    + JDK-8373593: Support latest  VS2026 MSC_VER in
    abstract_vm_version.cpp
    + JDK-8373623: Refactor Serialization tests for Records to JUnit
    + JDK-8373630: r18_tls should not be modified on Windows AArch64
    + JDK-8373632: Some sound tests failing in CI due to lack of
    sound key
    + JDK-8373704: Improve "SocketException: Protocol family
    unavailable" message
    + JDK-8373716: Refactor further java/util tests from TestNG to
    JUnit
    + JDK-8373727: New XBM images parser regression: only the first
    line of the bitmap array is parsed
    + JDK-8373793: TestDynamicStore.java '/manual' disables use of
    '/timeout'
    + JDK-8373807: test/jdk/java/net/httpclient/websocket/
    /DummyWebSocketServer.java getURI() uses "localhost"
    + JDK-8373832: Test java/lang/invoke/TestVHInvokerCaching.java
    tests nothing
    + JDK-8373869: Refactor java/net/httpclient/
    /ThrowingPushPromises*.java tests to use JUnit5
    + JDK-8373931: Test javax/sound/sampled/Clip/
    /AutoCloseTimeCheck.java timed out
    + JDK-8373946: Synth ProgressBarUI implementation confuses
    background painting with border painting
    + JDK-8373984: Check for macos 11 in CGraphicsDevice.m can be
    removed
    + JDK-8373998: RISC-V: simple optimization of ConvHF2F
    + JDK-8374056: RISC-V: Fix argument passing for the
    RiscvFlushIcache::flush
    + JDK-8374178: Missing include in systemDictionary.cpp after
    JDK-8365526
    + JDK-8374433: java/util/Locale/PreserveTagCase.java does not
    run any tests
    + JDK-8374434: Several JShell tests report JUnit discovery
    warnings
    + JDK-8374525: RISC-V: Several masked float16 vector operations
    are not supported
    + JDK-8374555: No need for visible input warning in
    s.s.u.Password when not reading from System.in
    + JDK-8374557: Enhance TLS connection handling
    + JDK-8374642: EscapeHash macro fails with GNU make 4.3 and 4.4
    + JDK-8374644: Regression in GZIPInputStream performance after
    JDK-7036144
    + JDK-8374711: Hotspot runtime/CommandLine/OptionsValidation/
    /TestOptionsWithRanges fails without printing the option name
    + JDK-8374872: Cleanup outdated SAP AG copyright header info
    + JDK-8374875: Improve perfMemory warning about 'Insufficient
    space for shared memory file'
    + JDK-8375057: Update HarfBuzz to 12.3.2
    + JDK-8375063: Update Libpng to 1.6.54
    + JDK-8375094: RISC-V: Fix client builds after JDK-8368732
    + JDK-8375231: Refactor util/ServiceLoader tests to use JUnit
    + JDK-8375232: Refactor util/StringJoiner tests to use JUnit
    + JDK-8375233: Refactor util/Vector tests to use JUnit
    + JDK-8375311: Some builds are missing debug helpers
    + JDK-8375530: PPC64: incorrect quick
    verify_method_data_pointer check causes poor performance in
    debug build
    + JDK-8375549: ConcurrentModificationException if
    jdk.crypto.disabledAlgorithms has multiple entries with known
    oid
    + JDK-8375598: VM crashes with "assert((labs(val) &amp;
    0xFFFFFFFF00000000) == 0 || dest == (address)-1) failed: must
    be 32bit offset or -1" when using too high value for
    NonNMethodCodeHeapSize
    + JDK-8375657: RISC-V: Need to check size in
    SharedRuntime::is_wide_vector
    + JDK-8375742: Test java/lang/invoke/MethodHandleProxies/
    /Driver.java does not run Unnamed.java
    + JDK-8375963: [25u] Set designator
    DEFAULT_PROMOTED_VERSION_PRE=ea in jdk25u-dev
    + JDK-8375999: com/sun/jndi/ldap/LdapPoolTimeoutTest.java fails
    sporadically on Windows
    + JDK-8376572: RISC-V: Interpreter: Load array index as signed
    int
    + JDK-8376688: Gtest
    os.attempt_reserve_memory_between_small_range_fill_hole_vm
    fails on AIX 7.3
    + JDK-8376889: Enhance JfrRecorder::on_create_vm_3() assert
    output
    + JDK-8377347: jdk/jfr/event/gc/detailed/
    /TestZAllocationStallEvent.java intermittent OOME
    + JDK-8377509: Add licenses for gcc 14.2.0
    + JDK-8377526: Update Libpng to 1.6.55
    + JDK-8377811: [25u] G1: Optional Evacuations may evacuate
    pinned objects
    + JDK-8377898: Hotspot build on AIX with unused-functions
    warning reports some unused functions
    + JDK-8377905: gcc.md included with every build
    + JDK-8378113: Add sun/java2d/OpenGL/ScaleParamsOOB.java to the
    ProblemList.txt file
    + JDK-8378218: MSYS2 reports cygwin triplet causing bash
    configure failure
    + JDK-8378353: [PPC64] StringCoding.countPositives causes
    errors when the length is not a proper 32 bit int
    + JDK-8378623: Use unique font names in FormatCharAdvanceTest
    + JDK-8378631: Update Zlib Data Compression Library to Version
    1.3.2
    + JDK-8378823: AIX build fails after zlib updated by JDK-8378631
    + JDK-8378853: [25u] Make backport of JDK-8244336 comply with
    differences in CSR
    + JDK-8379035: (tz) Update Timezone Data to 2026a
    + JDK-8379158: Update FreeType to 2.14.2
    + JDK-8379256: Update GIFlib to 6.1.1
    + JDK-8380078: Update GIFlib to 6.1.2
    + JDK-8380959: Update Libpng to 1.6.56
    + JDK-8382047: Update Libpng to 1.6.57
    + JDK-8382438: [25u] Remove designator
    DEFAULT_PROMOTED_VERSION_PRE=ea for release 25.0.3</changelog>
</package>
<package pkgid="5cb41c029383ac2d3a6551a3d3a773753052fab6193dabb324501d0921bc2e97" name="javamail" arch="noarch">
  <version epoch="0" ver="1.6.2" rel="150200.3.7.1"/>
  <changelog author="fstrba@suse.com" date="1548158400">- Initial package of javamail 1.5.2
- Install as maven artifacts</changelog>
  <changelog author="fstrba@suse.com" date="1554724800">- Do not depend on the jvnet-parent pom since we are not building
  with maven</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add glassfish-activation-api dependency for relevant distribution
  versions to make buildable with JDK that does not contain the
  JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="fstrba@suse.com" date="1649505600">- Remove all parents, since this package is not built with maven
- Assure that every dependency has a version, or at least "any"
  * fixes use with gradle</changelog>
  <changelog author="fstrba@suse.com" date="1651233600">- Add alias to com.sun.mail:jakarta.mail needed by ant-javamail</changelog>
  <changelog author="gus.kenion@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1725710400">- Update to version 1.6.2
  * Changes in the 1.6.2 release
    + GH 306 Infinite loop parsing invalid ID response
    + GH 307 StringIndexOutOfBoundsException when *.proxy.host
    contains a colon
    + GH 309 Multipart Content-Transfer-Encoding trailing space
    + GH 310 Android app fails to build with JavaMail 1.6.1
    + GH 314 InternetAddress fails to detect illegal square
    brackets in local part
    + GH 315 empty Content-Transfer-Encoding header causes
    IOException
    + GH 316 starttls.enable documentation should reference
    starttls.required prop
    + GH 317 use System.lineSeparator() instead of
    System.getProperty(...)
    + GH 321 URLName.getURL() returns incorrect url.
    + GH 322 Dots in local part of emails not handled properly
    + GH 323 Support loading protocol providers using ServiceLoader
    + GH 326 Apply relaxed Content-Disposition parsing to
    Content-Disposition params
    + GH 330 Attachment filename is ignored
    + GH 332 http proxy support should support authenticating to
    the proxy server
    + GH 333 search with Unicode char throws BadCommandException
    with UTF8=ALLOW
    + GH 334 gimap set labels error with some non english
    characters
  * Changes in the 1.6.1 release
    + GH 262 Some IMAP servers send EXPUNGE responses for unknown
    messages
    + GH 278 BODYSTRUCTURE Parser fails on specific IMAP Server
    response
    + GH 283 clean up connections when closing IMAPStore
    + GH 287 Allow relaxed Content-Disposition parsing
    + GH 289 use a different IMAP tag prefix for each connection
    + GH 291 define JDK 9 module name for JavaMail
    + GH 296 HTTP proxy support needs to use HTTP/1.1
  * Changes in the 1.6.0 release
    + GH  75 MimeMultipart should throw ParseException for parsing
    errors
    + GH  77 MimeMessage.updateHeaders should set the Date header
    if not already set
    + GH  93 Support addressing i18n via RFC 6530/6531/6532
    + GH 104 The UIDFolder interface should have a getter for
    UIDNEXT
    + GH 135 MailHandler should choose a better default subject
    formatter.
    + GH 159 Store, Transport, and Folder should implement
    AutoCloseable
    + GH 174 MailDateFormat changes for version 1.6
    + GH 183 Fix javac warnings
    + GH 209 fails to parse some fetch response that has space
    before final ')'
    + GH 214 IMAP doesn't handle illegal CAPABILITY response after
    LOGIN/AUTHENTICATE
    + GH 226 MailSessionDefinition should use the Repeatable
    annotation for Java EE 8
    + GH 227 IdleManager fails on Android
    + GH 228 Test fails: javax.mail.internet.GetLocalAddressTest
    + GH 229 Tests fail: com.sun.mail.util.WriteTimeoutSocketTest
    + GH 230 MboxFolder.expunge can corrupt mailbox file
    + GH 231 CompactFormatter should handle overridden
    Throwable.toString methods
    + GH 232 Update public API to use generics
    + GH 233 Malformed IMAP FETCH response throws the wrong
    exception
    + GH 234 RFC822.SIZE &gt; 2GB isn't handled
    + GH 237 Protocol#command method call readResponse after
    IOException is thrown
    + GH 238 Possible NPE in Status.&lt;init&gt; line 96
    + GH 239 MailHandler should support 'login' verify type.
    + GH 240 MailHandler support for non-multipart messages
    + GH 241 use of YoungerTerm/OlderTerm on server without WITHIN
    support fails
    + GH 244 The UIDFolder interface should have a MAXUID constant
    + GH 245 java.io.IOException: No content when reading msg with
    empty attachment
    + GH 247 look for resource files in &lt;java.home&gt;/conf on JDK 1.9
    + GH 248 MimeUtility should treat GB2312 as one of the
    supersets GBK or GB18030
    + GH 249 Flags convenience methods
    + GH 250 SMTP support for the CHUNKING extension of RFC 3030
    + GH 251 MimeUtility.unfold squashes multiple spaces
    + GH 252 JavaMail PLAIN authentication should implement RFC 4616
    + GH 253 Support connecting through web proxy servers
    + GH 256 support UIDPLUS UIDNOTSTICKY response code
    + GH 257 SASL authentication should always allow UTF-8 username
    and password
    + GH 258 android-activation MANIFEST has empty
    Bundle-SymbolicName
  * Changes in the 1.5.6 release
    The following bugs have been fixed in the 1.5.6 release.
    + GH 199 Support LogRecord.setMillis being deprecated in JDK 9
    + GH 200 Logging should support LogRecord.getInstant
    + GH 202 Create common super class for logging tests
    + GH 205 NPE by APOP detection when no greeting banner
    + GH 206 Make IMAPProtocol.handleLoginResult protected
    + GH 207 InternetAddress.parse fails for valid domain literal
    address
    + GH 210 unsolicited FETCH response *must* invalidate
    X-GM-LABELS in cache
    + GH 211 MimeBodyPart.isMimeType returns false if type header
    can't be parsed
    + GH 213 NPE in Tomcat ClassLoader causes Session.getInstance
    to fail
    + GH 215 Deadlock in IMAPFolder.doProtocolCommand()
    + GH 216 InternetAddress.getLocalAddress should use
    InetAddress.getCanonicalHostName
    + GH 217 Store finalizers should not talk to server
    + GH 219 MailHandler verify should load additional content
    handlers
    + GH 220 NullPointerException if SASL is enabled on Android
    + GH 221 write timeouts don't work with SSL on Android
    + GH 222 JavaMail allows injection of unwanted headers
    + GH 223 Message.setRecipient(type, null) should remove
    recipients
  * Changes in the 1.5.5 release
    + GH 168 add support for setting GMail labels on messages
    + GH 169 Add spam filter for use with MailHandler.
    + GH 170 Address MailDateFormat issues
    + GH 172 Typo in "mail.stmp.sendpartial"
    + GH 173 mail.mime.encodefilename property should override RFC
    2231 encoding
    + GH 176 IMAP should support a mail.imap.auth.mechanisms
    property like SMTP
    + GH 177 setting mail.&lt;protocol&gt;.auth.mechanisms should
    override mail.&lt;protocol&gt;.auth.&lt;mechanism&gt;.disable
    + GH 178 add support for OAuth 2.0 without SASL
    + GH 179 capability() command doesn't properly transform errors
    + GH 180 MailHandler needs better support for stateful filters.
    + GH 181 add support for IMAP login referrals (RFC 2221)
    + GH 182 whitespace line at beginning confuses InternetHeaders
    + GH 184 Eliminate legacy classes
    + GH 185 IndexOutOfBoundsException reading IMAP literal when
    connection fails
    + GH 186 IdleManager dies with CancelledKeyException
    + GH 187 IdleManager can deadlock when not busy
    + GH 188 IMAP Folder methods throw runtime exceptions when
    connection drops
    + GH 189 InternetAddress doesn't detect some illegal newlines
    + GH 190 Status class doesn't decode mailbox name
    + GH 191 add support for IMAP COMPRESS extension (RFC 4978)
    + GH 194 Empty Gmail X-GM-LABELS list is misparsed
    + GH 195 IMAPMessage.getReceivedDate should check if
    receivedDate is present before loading envelope
    + GH 196 CollectorFormatter descending order data race
    + GH 198 off-by-1 error in Response.readStringList causes early
    termination of parsing FETCH response
    + GH 201 INTERNALDATE FetchProfile Item
    + GH 203 Exchange returns NIL instead of "" for empty
    parameter, causing NPE
  * Changes in the 1.5.4 release
    + GH 149 Include elapsed time, thread id, and sequence for
    logging formatters.
    + GH 153 MailHandlerTest does not check field is static or
    final
    + GH 157 IdleManager can deadlock with frequent notifications
    + GH 158 IdleManager can deadlock when connection fails
    + GH 160 IMAP provider should support the MOVE extension (RFC 6851)
    + GH 162 MODSEQ should be stored in IMAPMessage if CONDSTORE is
    enabled
    + GH 163 Space character lost from end of quoted-printable body
    parts
    + GH 164 GmailMessage extensions are not cached after implicit
    FETCH
    + GH 165 IMAP message sets should be sorted in cases where
    order doesn't matter
    + GH 166 ID command shouldn't escape NIL value
    + GH 167 Make IMAPProtocol class extendable
  * Changes in the 1.5.3 release
    + GH 122 Make constructor of POP3Folder protected to allow
    subclassing
    + GH 123 calling IdleManager.watch twice on same folder fails
    + GH 124 NPE in IMAPFolder.copyUIDMessages when COPYUID not
    returned
    + GH 127 Message-Id leaks current user/hostname of the Java
    process (security)
    + GH 128 IMAP idle breaks interrupt flag
    + GH 129 Date search terms result in wrong greater-than SEARCH
    commands for IMAP
    + GH 131 address similar to (x)&lt;y&gt;(z) will throw
    StringIndexOutOfBoundsException
    + GH 132 Update logging demos to use the new 1.5.2 features
    + GH 133 Use classloader ergonomics in the MailHandler
    + GH 137 ArrayIndexOutOfBoundsException in
    IMAPFolder.copyUIDMessages
    + GH 138 attachment filenames aren't being encoded by default
    + GH 139 Include javadoc example formats for logging.
    + GH 141 SharedFileInputStream has problems with 2GB+ files
    + GH 143 MimeBodyPart with copied DataHandler doesn't always
    set encoding
    + GH 144 skip unusable Store and Transport classes
    + GH 145 long parameter values should be split using RFC 2231
    + GH 146 javax.mail.Authenticator thread safety
    + GH 148 Modify MailHandler to support Google App Engine.
    + GH 150 EXPUNGE response during UID FETCH breaks UID-&gt;seqnum
    mapping
    + GH 151 ArrayIndexOutOfBoundsException caused by out-of-range
    IMAP responses
    + GH 154 write timeouts don't work with a custom SSL socket
    factory
    + GH 155 SMTP SASL DIGEST-MD5 fails on postfix since the last
    reply sent is "*"</changelog>
  <changelog author="fstrba@suse.com" date="1727870400">- Spec file cleanup</changelog>
  <changelog author="fstrba@suse.com" date="1753272000">- Added patch:
  * javamail-CVE-2025-7962.patch
    + backport of upstream fix for bsc#1246873, CVE-2025-7962:
    improper neutralization of \r and \n UTF-8 characters can
    lead to SMTP injection</changelog>
</package>
<package pkgid="1db2b0957e8109dcfebcaa76dd66f5e3f5f5030f905aea267ce89fa0896ed2f5" name="javamail" arch="src">
  <version epoch="0" ver="1.6.2" rel="150200.3.7.1"/>
  <changelog author="fstrba@suse.com" date="1548158400">- Initial package of javamail 1.5.2
- Install as maven artifacts</changelog>
  <changelog author="fstrba@suse.com" date="1554724800">- Do not depend on the jvnet-parent pom since we are not building
  with maven</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add glassfish-activation-api dependency for relevant distribution
  versions to make buildable with JDK that does not contain the
  JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="fstrba@suse.com" date="1649505600">- Remove all parents, since this package is not built with maven
- Assure that every dependency has a version, or at least "any"
  * fixes use with gradle</changelog>
  <changelog author="fstrba@suse.com" date="1651233600">- Add alias to com.sun.mail:jakarta.mail needed by ant-javamail</changelog>
  <changelog author="gus.kenion@suse.com" date="1708516800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1725710400">- Update to version 1.6.2
  * Changes in the 1.6.2 release
    + GH 306 Infinite loop parsing invalid ID response
    + GH 307 StringIndexOutOfBoundsException when *.proxy.host
    contains a colon
    + GH 309 Multipart Content-Transfer-Encoding trailing space
    + GH 310 Android app fails to build with JavaMail 1.6.1
    + GH 314 InternetAddress fails to detect illegal square
    brackets in local part
    + GH 315 empty Content-Transfer-Encoding header causes
    IOException
    + GH 316 starttls.enable documentation should reference
    starttls.required prop
    + GH 317 use System.lineSeparator() instead of
    System.getProperty(...)
    + GH 321 URLName.getURL() returns incorrect url.
    + GH 322 Dots in local part of emails not handled properly
    + GH 323 Support loading protocol providers using ServiceLoader
    + GH 326 Apply relaxed Content-Disposition parsing to
    Content-Disposition params
    + GH 330 Attachment filename is ignored
    + GH 332 http proxy support should support authenticating to
    the proxy server
    + GH 333 search with Unicode char throws BadCommandException
    with UTF8=ALLOW
    + GH 334 gimap set labels error with some non english
    characters
  * Changes in the 1.6.1 release
    + GH 262 Some IMAP servers send EXPUNGE responses for unknown
    messages
    + GH 278 BODYSTRUCTURE Parser fails on specific IMAP Server
    response
    + GH 283 clean up connections when closing IMAPStore
    + GH 287 Allow relaxed Content-Disposition parsing
    + GH 289 use a different IMAP tag prefix for each connection
    + GH 291 define JDK 9 module name for JavaMail
    + GH 296 HTTP proxy support needs to use HTTP/1.1
  * Changes in the 1.6.0 release
    + GH  75 MimeMultipart should throw ParseException for parsing
    errors
    + GH  77 MimeMessage.updateHeaders should set the Date header
    if not already set
    + GH  93 Support addressing i18n via RFC 6530/6531/6532
    + GH 104 The UIDFolder interface should have a getter for
    UIDNEXT
    + GH 135 MailHandler should choose a better default subject
    formatter.
    + GH 159 Store, Transport, and Folder should implement
    AutoCloseable
    + GH 174 MailDateFormat changes for version 1.6
    + GH 183 Fix javac warnings
    + GH 209 fails to parse some fetch response that has space
    before final ')'
    + GH 214 IMAP doesn't handle illegal CAPABILITY response after
    LOGIN/AUTHENTICATE
    + GH 226 MailSessionDefinition should use the Repeatable
    annotation for Java EE 8
    + GH 227 IdleManager fails on Android
    + GH 228 Test fails: javax.mail.internet.GetLocalAddressTest
    + GH 229 Tests fail: com.sun.mail.util.WriteTimeoutSocketTest
    + GH 230 MboxFolder.expunge can corrupt mailbox file
    + GH 231 CompactFormatter should handle overridden
    Throwable.toString methods
    + GH 232 Update public API to use generics
    + GH 233 Malformed IMAP FETCH response throws the wrong
    exception
    + GH 234 RFC822.SIZE &gt; 2GB isn't handled
    + GH 237 Protocol#command method call readResponse after
    IOException is thrown
    + GH 238 Possible NPE in Status.&lt;init&gt; line 96
    + GH 239 MailHandler should support 'login' verify type.
    + GH 240 MailHandler support for non-multipart messages
    + GH 241 use of YoungerTerm/OlderTerm on server without WITHIN
    support fails
    + GH 244 The UIDFolder interface should have a MAXUID constant
    + GH 245 java.io.IOException: No content when reading msg with
    empty attachment
    + GH 247 look for resource files in &lt;java.home&gt;/conf on JDK 1.9
    + GH 248 MimeUtility should treat GB2312 as one of the
    supersets GBK or GB18030
    + GH 249 Flags convenience methods
    + GH 250 SMTP support for the CHUNKING extension of RFC 3030
    + GH 251 MimeUtility.unfold squashes multiple spaces
    + GH 252 JavaMail PLAIN authentication should implement RFC 4616
    + GH 253 Support connecting through web proxy servers
    + GH 256 support UIDPLUS UIDNOTSTICKY response code
    + GH 257 SASL authentication should always allow UTF-8 username
    and password
    + GH 258 android-activation MANIFEST has empty
    Bundle-SymbolicName
  * Changes in the 1.5.6 release
    The following bugs have been fixed in the 1.5.6 release.
    + GH 199 Support LogRecord.setMillis being deprecated in JDK 9
    + GH 200 Logging should support LogRecord.getInstant
    + GH 202 Create common super class for logging tests
    + GH 205 NPE by APOP detection when no greeting banner
    + GH 206 Make IMAPProtocol.handleLoginResult protected
    + GH 207 InternetAddress.parse fails for valid domain literal
    address
    + GH 210 unsolicited FETCH response *must* invalidate
    X-GM-LABELS in cache
    + GH 211 MimeBodyPart.isMimeType returns false if type header
    can't be parsed
    + GH 213 NPE in Tomcat ClassLoader causes Session.getInstance
    to fail
    + GH 215 Deadlock in IMAPFolder.doProtocolCommand()
    + GH 216 InternetAddress.getLocalAddress should use
    InetAddress.getCanonicalHostName
    + GH 217 Store finalizers should not talk to server
    + GH 219 MailHandler verify should load additional content
    handlers
    + GH 220 NullPointerException if SASL is enabled on Android
    + GH 221 write timeouts don't work with SSL on Android
    + GH 222 JavaMail allows injection of unwanted headers
    + GH 223 Message.setRecipient(type, null) should remove
    recipients
  * Changes in the 1.5.5 release
    + GH 168 add support for setting GMail labels on messages
    + GH 169 Add spam filter for use with MailHandler.
    + GH 170 Address MailDateFormat issues
    + GH 172 Typo in "mail.stmp.sendpartial"
    + GH 173 mail.mime.encodefilename property should override RFC
    2231 encoding
    + GH 176 IMAP should support a mail.imap.auth.mechanisms
    property like SMTP
    + GH 177 setting mail.&lt;protocol&gt;.auth.mechanisms should
    override mail.&lt;protocol&gt;.auth.&lt;mechanism&gt;.disable
    + GH 178 add support for OAuth 2.0 without SASL
    + GH 179 capability() command doesn't properly transform errors
    + GH 180 MailHandler needs better support for stateful filters.
    + GH 181 add support for IMAP login referrals (RFC 2221)
    + GH 182 whitespace line at beginning confuses InternetHeaders
    + GH 184 Eliminate legacy classes
    + GH 185 IndexOutOfBoundsException reading IMAP literal when
    connection fails
    + GH 186 IdleManager dies with CancelledKeyException
    + GH 187 IdleManager can deadlock when not busy
    + GH 188 IMAP Folder methods throw runtime exceptions when
    connection drops
    + GH 189 InternetAddress doesn't detect some illegal newlines
    + GH 190 Status class doesn't decode mailbox name
    + GH 191 add support for IMAP COMPRESS extension (RFC 4978)
    + GH 194 Empty Gmail X-GM-LABELS list is misparsed
    + GH 195 IMAPMessage.getReceivedDate should check if
    receivedDate is present before loading envelope
    + GH 196 CollectorFormatter descending order data race
    + GH 198 off-by-1 error in Response.readStringList causes early
    termination of parsing FETCH response
    + GH 201 INTERNALDATE FetchProfile Item
    + GH 203 Exchange returns NIL instead of "" for empty
    parameter, causing NPE
  * Changes in the 1.5.4 release
    + GH 149 Include elapsed time, thread id, and sequence for
    logging formatters.
    + GH 153 MailHandlerTest does not check field is static or
    final
    + GH 157 IdleManager can deadlock with frequent notifications
    + GH 158 IdleManager can deadlock when connection fails
    + GH 160 IMAP provider should support the MOVE extension (RFC 6851)
    + GH 162 MODSEQ should be stored in IMAPMessage if CONDSTORE is
    enabled
    + GH 163 Space character lost from end of quoted-printable body
    parts
    + GH 164 GmailMessage extensions are not cached after implicit
    FETCH
    + GH 165 IMAP message sets should be sorted in cases where
    order doesn't matter
    + GH 166 ID command shouldn't escape NIL value
    + GH 167 Make IMAPProtocol class extendable
  * Changes in the 1.5.3 release
    + GH 122 Make constructor of POP3Folder protected to allow
    subclassing
    + GH 123 calling IdleManager.watch twice on same folder fails
    + GH 124 NPE in IMAPFolder.copyUIDMessages when COPYUID not
    returned
    + GH 127 Message-Id leaks current user/hostname of the Java
    process (security)
    + GH 128 IMAP idle breaks interrupt flag
    + GH 129 Date search terms result in wrong greater-than SEARCH
    commands for IMAP
    + GH 131 address similar to (x)&lt;y&gt;(z) will throw
    StringIndexOutOfBoundsException
    + GH 132 Update logging demos to use the new 1.5.2 features
    + GH 133 Use classloader ergonomics in the MailHandler
    + GH 137 ArrayIndexOutOfBoundsException in
    IMAPFolder.copyUIDMessages
    + GH 138 attachment filenames aren't being encoded by default
    + GH 139 Include javadoc example formats for logging.
    + GH 141 SharedFileInputStream has problems with 2GB+ files
    + GH 143 MimeBodyPart with copied DataHandler doesn't always
    set encoding
    + GH 144 skip unusable Store and Transport classes
    + GH 145 long parameter values should be split using RFC 2231
    + GH 146 javax.mail.Authenticator thread safety
    + GH 148 Modify MailHandler to support Google App Engine.
    + GH 150 EXPUNGE response during UID FETCH breaks UID-&gt;seqnum
    mapping
    + GH 151 ArrayIndexOutOfBoundsException caused by out-of-range
    IMAP responses
    + GH 154 write timeouts don't work with a custom SSL socket
    factory
    + GH 155 SMTP SASL DIGEST-MD5 fails on postfix since the last
    reply sent is "*"</changelog>
  <changelog author="fstrba@suse.com" date="1727870400">- Spec file cleanup</changelog>
  <changelog author="fstrba@suse.com" date="1753272000">- Added patch:
  * javamail-CVE-2025-7962.patch
    + backport of upstream fix for bsc#1246873, CVE-2025-7962:
    improper neutralization of \r and \n UTF-8 characters can
    lead to SMTP injection</changelog>
</package>
<package pkgid="d5efecef0f2a426b7619f17c9e0cb7f5afb77aec28cc4df6bb7019afecde755c" name="jq" arch="src">
  <version epoch="0" ver="1.6" rel="150000.3.12.1"/>
  <changelog author="robert.munteanu@gmail.com" date="1380628800">- Initial packaging of version 1.3</changelog>
  <changelog author="cdenicolo@suse.com" date="1382011200">- license update: MIT and CC-BY-3.0
  documentation is licensed under CC-BY-3.0</changelog>
  <changelog author="prusnak@opensuse.org" date="1402833600">- Updated to 1.4
  + New command line arguments
  * jq --arg-file variable file
  * jq --unbuffered
  * jq -e / --exit-status (set exit status based on outputs)
  * jq -S / --sort-keys (now jq no longer sorts object keys by
    default
  + Syntax changes
  * .. -&gt; like // in XPath (recursive traversal)
  * question mark (e.g., .a?) to suppress errors
  * ."foo" syntax (equivalent to .["foo"])
  * better error handling for .foo
  * added % operator (modulo)
  * allow negation without requiring extra parenthesis
  * more function arguments (up to six)
  + New filters
  * any, all
  * iterables, arrays, objects, scalars, nulls, booleans,
    numbers, strings, values
  + New string built-ins
  * split
  * join (join an array of strings with a given separator string)
  * ltrimstr, rtrimstr
  * startswith, endswith
  * explode, implode
  * fromjson, tojson
  * index, rindex, indices
  + New math functions
  * floor, sqrt, cbrt, etc.
  + Addition of libjq, a C API interface to jq's JSON representation
    and for running jq programs from C applications.</changelog>
  <changelog author="idonmez@suse.com" date="1403870400">- Don't package static libs
- Fix rpath on the main binary</changelog>
  <changelog author="idonmez@suse.com" date="1439899200">- Update to version 1.5
  * Regexp support
  * A proper module system
  * Destructuring syntax
  * Math functions
  * An online streaming parser
  * Minimal I/O builtins (inputs, debug)
  * try/catch for catching and handling errors
  * Tail call optimization
  * Datetime functions
  * Performance enhancements
- Add oniguruma-devel BuildRequires for regexp support</changelog>
  <changelog author="idonmez@suse.com" date="1461585600">- Add CVE-2015-8863.patch to fix a heap overflow bsc#976992</changelog>
  <changelog author="mpluskal@suse.com" date="1468670400">- Make building more verbose
- Run tests</changelog>
  <changelog author="mpluskal@suse.com" date="1483358400">- Update tests dependencies to increase test coverage (bsc#1017157)
  * valgrind based tests were skipped
- Do not run tests in qemu builds, valgrind does not work reliably
  in such conditions</changelog>
  <changelog author="idonmez@suse.com" date="1486123200">- Add CVE-2016-4074.patch to prevent a stack exhaustion
  CVE-2016-4074 bsc#1014176</changelog>
  <changelog author="aavindraa@gmail.com" date="1541160000">- Update to version 1.6
  * Destructuring Alternation
  * many new builtins (see docs)
  * Add support for ASAN and UBSAN
  * Make it easier to use jq with shebangs
  * Add $ENV builtin variable to access environment
  * Add JQ_COLORS env var for configuring the output colors
  * change: Calling jq without a program argument now always assumes
    "." for the program, regardless of stdin/stdout
  * fix: Make sorting stable regardless of qsort.
- cleanup with spec-cleaner
- drop CVE-2015-8863.patch (upstreamed in 8eb1367ca44e772963e704a700ef72ae2e12babd)
- drop CVE-2016-4074.patch (upstreamed in fd4ae8304e23007672af9a37855c7a76de7c78cf)</changelog>
  <changelog author="myen@suse.com" date="1562241600">- Make jq depend on libjq1, so upgrading jq upgrades both
  See: https://github.com/stedolan/jq/issues/1904</changelog>
  <changelog author="ncutler@suse.com" date="1749729600">- Add patch CVE-2024-23337.patch (CVE-2024-23337, bsc#1243450)</changelog>
  <changelog author="ncutler@suse.com" date="1754049600">- Add patches CVE-2025-48060-1.patch and CVE-2025-48060-2.patch
  (CVE-2025-48060, bsc#1244116)</changelog>
  <changelog author="ncutler@suse.com" date="1773144000">- Add patch CVE-2025-9403.patch (CVE-2025-9403, bsc#1248600)</changelog>
</package>
<package pkgid="2517f1b625f43092132261bd5a22d2c4242c2438c83a70ce3b59356db23f1d83" name="jq" arch="x86_64">
  <version epoch="0" ver="1.6" rel="150000.3.12.1"/>
  <changelog author="idonmez@suse.com" date="1439899200">- Update to version 1.5
  * Regexp support
  * A proper module system
  * Destructuring syntax
  * Math functions
  * An online streaming parser
  * Minimal I/O builtins (inputs, debug)
  * try/catch for catching and handling errors
  * Tail call optimization
  * Datetime functions
  * Performance enhancements
- Add oniguruma-devel BuildRequires for regexp support</changelog>
  <changelog author="idonmez@suse.com" date="1461585600">- Add CVE-2015-8863.patch to fix a heap overflow bsc#976992</changelog>
  <changelog author="mpluskal@suse.com" date="1468670400">- Make building more verbose
- Run tests</changelog>
  <changelog author="mpluskal@suse.com" date="1483358400">- Update tests dependencies to increase test coverage (bsc#1017157)
  * valgrind based tests were skipped
- Do not run tests in qemu builds, valgrind does not work reliably
  in such conditions</changelog>
  <changelog author="idonmez@suse.com" date="1486123200">- Add CVE-2016-4074.patch to prevent a stack exhaustion
  CVE-2016-4074 bsc#1014176</changelog>
  <changelog author="aavindraa@gmail.com" date="1541160000">- Update to version 1.6
  * Destructuring Alternation
  * many new builtins (see docs)
  * Add support for ASAN and UBSAN
  * Make it easier to use jq with shebangs
  * Add $ENV builtin variable to access environment
  * Add JQ_COLORS env var for configuring the output colors
  * change: Calling jq without a program argument now always assumes
    "." for the program, regardless of stdin/stdout
  * fix: Make sorting stable regardless of qsort.
- cleanup with spec-cleaner
- drop CVE-2015-8863.patch (upstreamed in 8eb1367ca44e772963e704a700ef72ae2e12babd)
- drop CVE-2016-4074.patch (upstreamed in fd4ae8304e23007672af9a37855c7a76de7c78cf)</changelog>
  <changelog author="myen@suse.com" date="1562241600">- Make jq depend on libjq1, so upgrading jq upgrades both
  See: https://github.com/stedolan/jq/issues/1904</changelog>
  <changelog author="ncutler@suse.com" date="1749729600">- Add patch CVE-2024-23337.patch (CVE-2024-23337, bsc#1243450)</changelog>
  <changelog author="ncutler@suse.com" date="1754049600">- Add patches CVE-2025-48060-1.patch and CVE-2025-48060-2.patch
  (CVE-2025-48060, bsc#1244116)</changelog>
  <changelog author="ncutler@suse.com" date="1773144000">- Add patch CVE-2025-9403.patch (CVE-2025-9403, bsc#1248600)</changelog>
</package>
<package pkgid="353b869645d53855f2e87caf4cf8a2b76451b3ee2cc0bb5387429beaaa22c291" name="jq" arch="src">
  <version epoch="0" ver="1.6" rel="150000.3.6.1"/>
  <changelog author="robert.munteanu@gmail.com" date="1380628800">- Initial packaging of version 1.3</changelog>
  <changelog author="cdenicolo@suse.com" date="1382011200">- license update: MIT and CC-BY-3.0
  documentation is licensed under CC-BY-3.0</changelog>
  <changelog author="prusnak@opensuse.org" date="1402833600">- Updated to 1.4
  + New command line arguments
  * jq --arg-file variable file
  * jq --unbuffered
  * jq -e / --exit-status (set exit status based on outputs)
  * jq -S / --sort-keys (now jq no longer sorts object keys by
    default
  + Syntax changes
  * .. -&gt; like // in XPath (recursive traversal)
  * question mark (e.g., .a?) to suppress errors
  * ."foo" syntax (equivalent to .["foo"])
  * better error handling for .foo
  * added % operator (modulo)
  * allow negation without requiring extra parenthesis
  * more function arguments (up to six)
  + New filters
  * any, all
  * iterables, arrays, objects, scalars, nulls, booleans,
    numbers, strings, values
  + New string built-ins
  * split
  * join (join an array of strings with a given separator string)
  * ltrimstr, rtrimstr
  * startswith, endswith
  * explode, implode
  * fromjson, tojson
  * index, rindex, indices
  + New math functions
  * floor, sqrt, cbrt, etc.
  + Addition of libjq, a C API interface to jq's JSON representation
    and for running jq programs from C applications.</changelog>
  <changelog author="idonmez@suse.com" date="1403870400">- Don't package static libs
- Fix rpath on the main binary</changelog>
  <changelog author="idonmez@suse.com" date="1439899200">- Update to version 1.5
  * Regexp support
  * A proper module system
  * Destructuring syntax
  * Math functions
  * An online streaming parser
  * Minimal I/O builtins (inputs, debug)
  * try/catch for catching and handling errors
  * Tail call optimization
  * Datetime functions
  * Performance enhancements
- Add oniguruma-devel BuildRequires for regexp support</changelog>
  <changelog author="idonmez@suse.com" date="1461585600">- Add CVE-2015-8863.patch to fix a heap overflow bsc#976992</changelog>
  <changelog author="mpluskal@suse.com" date="1468670400">- Make building more verbose
- Run tests</changelog>
  <changelog author="mpluskal@suse.com" date="1483358400">- Update tests dependencies to increase test coverage (bsc#1017157)
  * valgrind based tests were skipped
- Do not run tests in qemu builds, valgrind does not work reliably
  in such conditions</changelog>
  <changelog author="idonmez@suse.com" date="1486123200">- Add CVE-2016-4074.patch to prevent a stack exhaustion
  CVE-2016-4074 bsc#1014176</changelog>
  <changelog author="aavindraa@gmail.com" date="1541160000">- Update to version 1.6
  * Destructuring Alternation
  * many new builtins (see docs)
  * Add support for ASAN and UBSAN
  * Make it easier to use jq with shebangs
  * Add $ENV builtin variable to access environment
  * Add JQ_COLORS env var for configuring the output colors
  * change: Calling jq without a program argument now always assumes
    "." for the program, regardless of stdin/stdout
  * fix: Make sorting stable regardless of qsort.
- cleanup with spec-cleaner
- drop CVE-2015-8863.patch (upstreamed in 8eb1367ca44e772963e704a700ef72ae2e12babd)
- drop CVE-2016-4074.patch (upstreamed in fd4ae8304e23007672af9a37855c7a76de7c78cf)</changelog>
  <changelog author="myen@suse.com" date="1562241600">- Make jq depend on libjq1, so upgrading jq upgrades both
  See: https://github.com/stedolan/jq/issues/1904</changelog>
  <changelog author="ncutler@suse.com" date="1749729600">- Add patch CVE-2024-23337.patch (CVE-2024-23337, bsc#1243450)</changelog>
</package>
<package pkgid="87f327caec9590c5e609dc48fe7791f4ff1bb573522a9d12a993996c69dee603" name="jq" arch="x86_64">
  <version epoch="0" ver="1.6" rel="150000.3.6.1"/>
  <changelog author="prusnak@opensuse.org" date="1402833600">- Updated to 1.4
  + New command line arguments
  * jq --arg-file variable file
  * jq --unbuffered
  * jq -e / --exit-status (set exit status based on outputs)
  * jq -S / --sort-keys (now jq no longer sorts object keys by
    default
  + Syntax changes
  * .. -&gt; like // in XPath (recursive traversal)
  * question mark (e.g., .a?) to suppress errors
  * ."foo" syntax (equivalent to .["foo"])
  * better error handling for .foo
  * added % operator (modulo)
  * allow negation without requiring extra parenthesis
  * more function arguments (up to six)
  + New filters
  * any, all
  * iterables, arrays, objects, scalars, nulls, booleans,
    numbers, strings, values
  + New string built-ins
  * split
  * join (join an array of strings with a given separator string)
  * ltrimstr, rtrimstr
  * startswith, endswith
  * explode, implode
  * fromjson, tojson
  * index, rindex, indices
  + New math functions
  * floor, sqrt, cbrt, etc.
  + Addition of libjq, a C API interface to jq's JSON representation
    and for running jq programs from C applications.</changelog>
  <changelog author="idonmez@suse.com" date="1403870400">- Don't package static libs
- Fix rpath on the main binary</changelog>
  <changelog author="idonmez@suse.com" date="1439899200">- Update to version 1.5
  * Regexp support
  * A proper module system
  * Destructuring syntax
  * Math functions
  * An online streaming parser
  * Minimal I/O builtins (inputs, debug)
  * try/catch for catching and handling errors
  * Tail call optimization
  * Datetime functions
  * Performance enhancements
- Add oniguruma-devel BuildRequires for regexp support</changelog>
  <changelog author="idonmez@suse.com" date="1461585600">- Add CVE-2015-8863.patch to fix a heap overflow bsc#976992</changelog>
  <changelog author="mpluskal@suse.com" date="1468670400">- Make building more verbose
- Run tests</changelog>
  <changelog author="mpluskal@suse.com" date="1483358400">- Update tests dependencies to increase test coverage (bsc#1017157)
  * valgrind based tests were skipped
- Do not run tests in qemu builds, valgrind does not work reliably
  in such conditions</changelog>
  <changelog author="idonmez@suse.com" date="1486123200">- Add CVE-2016-4074.patch to prevent a stack exhaustion
  CVE-2016-4074 bsc#1014176</changelog>
  <changelog author="aavindraa@gmail.com" date="1541160000">- Update to version 1.6
  * Destructuring Alternation
  * many new builtins (see docs)
  * Add support for ASAN and UBSAN
  * Make it easier to use jq with shebangs
  * Add $ENV builtin variable to access environment
  * Add JQ_COLORS env var for configuring the output colors
  * change: Calling jq without a program argument now always assumes
    "." for the program, regardless of stdin/stdout
  * fix: Make sorting stable regardless of qsort.
- cleanup with spec-cleaner
- drop CVE-2015-8863.patch (upstreamed in 8eb1367ca44e772963e704a700ef72ae2e12babd)
- drop CVE-2016-4074.patch (upstreamed in fd4ae8304e23007672af9a37855c7a76de7c78cf)</changelog>
  <changelog author="myen@suse.com" date="1562241600">- Make jq depend on libjq1, so upgrading jq upgrades both
  See: https://github.com/stedolan/jq/issues/1904</changelog>
  <changelog author="ncutler@suse.com" date="1749729600">- Add patch CVE-2024-23337.patch (CVE-2024-23337, bsc#1243450)</changelog>
</package>
<package pkgid="5088f42d2c00f52d5d058b98f6f7fd76e0792494f1272c06a0aaa2e4a2a78bab" name="jq" arch="src">
  <version epoch="0" ver="1.6" rel="150000.3.9.1"/>
  <changelog author="robert.munteanu@gmail.com" date="1380628800">- Initial packaging of version 1.3</changelog>
  <changelog author="cdenicolo@suse.com" date="1382011200">- license update: MIT and CC-BY-3.0
  documentation is licensed under CC-BY-3.0</changelog>
  <changelog author="prusnak@opensuse.org" date="1402833600">- Updated to 1.4
  + New command line arguments
  * jq --arg-file variable file
  * jq --unbuffered
  * jq -e / --exit-status (set exit status based on outputs)
  * jq -S / --sort-keys (now jq no longer sorts object keys by
    default
  + Syntax changes
  * .. -&gt; like // in XPath (recursive traversal)
  * question mark (e.g., .a?) to suppress errors
  * ."foo" syntax (equivalent to .["foo"])
  * better error handling for .foo
  * added % operator (modulo)
  * allow negation without requiring extra parenthesis
  * more function arguments (up to six)
  + New filters
  * any, all
  * iterables, arrays, objects, scalars, nulls, booleans,
    numbers, strings, values
  + New string built-ins
  * split
  * join (join an array of strings with a given separator string)
  * ltrimstr, rtrimstr
  * startswith, endswith
  * explode, implode
  * fromjson, tojson
  * index, rindex, indices
  + New math functions
  * floor, sqrt, cbrt, etc.
  + Addition of libjq, a C API interface to jq's JSON representation
    and for running jq programs from C applications.</changelog>
  <changelog author="idonmez@suse.com" date="1403870400">- Don't package static libs
- Fix rpath on the main binary</changelog>
  <changelog author="idonmez@suse.com" date="1439899200">- Update to version 1.5
  * Regexp support
  * A proper module system
  * Destructuring syntax
  * Math functions
  * An online streaming parser
  * Minimal I/O builtins (inputs, debug)
  * try/catch for catching and handling errors
  * Tail call optimization
  * Datetime functions
  * Performance enhancements
- Add oniguruma-devel BuildRequires for regexp support</changelog>
  <changelog author="idonmez@suse.com" date="1461585600">- Add CVE-2015-8863.patch to fix a heap overflow bsc#976992</changelog>
  <changelog author="mpluskal@suse.com" date="1468670400">- Make building more verbose
- Run tests</changelog>
  <changelog author="mpluskal@suse.com" date="1483358400">- Update tests dependencies to increase test coverage (bsc#1017157)
  * valgrind based tests were skipped
- Do not run tests in qemu builds, valgrind does not work reliably
  in such conditions</changelog>
  <changelog author="idonmez@suse.com" date="1486123200">- Add CVE-2016-4074.patch to prevent a stack exhaustion
  CVE-2016-4074 bsc#1014176</changelog>
  <changelog author="aavindraa@gmail.com" date="1541160000">- Update to version 1.6
  * Destructuring Alternation
  * many new builtins (see docs)
  * Add support for ASAN and UBSAN
  * Make it easier to use jq with shebangs
  * Add $ENV builtin variable to access environment
  * Add JQ_COLORS env var for configuring the output colors
  * change: Calling jq without a program argument now always assumes
    "." for the program, regardless of stdin/stdout
  * fix: Make sorting stable regardless of qsort.
- cleanup with spec-cleaner
- drop CVE-2015-8863.patch (upstreamed in 8eb1367ca44e772963e704a700ef72ae2e12babd)
- drop CVE-2016-4074.patch (upstreamed in fd4ae8304e23007672af9a37855c7a76de7c78cf)</changelog>
  <changelog author="myen@suse.com" date="1562241600">- Make jq depend on libjq1, so upgrading jq upgrades both
  See: https://github.com/stedolan/jq/issues/1904</changelog>
  <changelog author="ncutler@suse.com" date="1749729600">- Add patch CVE-2024-23337.patch (CVE-2024-23337, bsc#1243450)</changelog>
  <changelog author="ncutler@suse.com" date="1754049600">- Add patches CVE-2025-48060-1.patch and CVE-2025-48060-2.patch
  (CVE-2025-48060, bsc#1244116)</changelog>
</package>
<package pkgid="02ebbb348e694094b741efbe98f09697d51b0dff159e5e69321458a25c6fbba1" name="jq" arch="x86_64">
  <version epoch="0" ver="1.6" rel="150000.3.9.1"/>
  <changelog author="idonmez@suse.com" date="1403870400">- Don't package static libs
- Fix rpath on the main binary</changelog>
  <changelog author="idonmez@suse.com" date="1439899200">- Update to version 1.5
  * Regexp support
  * A proper module system
  * Destructuring syntax
  * Math functions
  * An online streaming parser
  * Minimal I/O builtins (inputs, debug)
  * try/catch for catching and handling errors
  * Tail call optimization
  * Datetime functions
  * Performance enhancements
- Add oniguruma-devel BuildRequires for regexp support</changelog>
  <changelog author="idonmez@suse.com" date="1461585600">- Add CVE-2015-8863.patch to fix a heap overflow bsc#976992</changelog>
  <changelog author="mpluskal@suse.com" date="1468670400">- Make building more verbose
- Run tests</changelog>
  <changelog author="mpluskal@suse.com" date="1483358400">- Update tests dependencies to increase test coverage (bsc#1017157)
  * valgrind based tests were skipped
- Do not run tests in qemu builds, valgrind does not work reliably
  in such conditions</changelog>
  <changelog author="idonmez@suse.com" date="1486123200">- Add CVE-2016-4074.patch to prevent a stack exhaustion
  CVE-2016-4074 bsc#1014176</changelog>
  <changelog author="aavindraa@gmail.com" date="1541160000">- Update to version 1.6
  * Destructuring Alternation
  * many new builtins (see docs)
  * Add support for ASAN and UBSAN
  * Make it easier to use jq with shebangs
  * Add $ENV builtin variable to access environment
  * Add JQ_COLORS env var for configuring the output colors
  * change: Calling jq without a program argument now always assumes
    "." for the program, regardless of stdin/stdout
  * fix: Make sorting stable regardless of qsort.
- cleanup with spec-cleaner
- drop CVE-2015-8863.patch (upstreamed in 8eb1367ca44e772963e704a700ef72ae2e12babd)
- drop CVE-2016-4074.patch (upstreamed in fd4ae8304e23007672af9a37855c7a76de7c78cf)</changelog>
  <changelog author="myen@suse.com" date="1562241600">- Make jq depend on libjq1, so upgrading jq upgrades both
  See: https://github.com/stedolan/jq/issues/1904</changelog>
  <changelog author="ncutler@suse.com" date="1749729600">- Add patch CVE-2024-23337.patch (CVE-2024-23337, bsc#1243450)</changelog>
  <changelog author="ncutler@suse.com" date="1754049600">- Add patches CVE-2025-48060-1.patch and CVE-2025-48060-2.patch
  (CVE-2025-48060, bsc#1244116)</changelog>
</package>
<package pkgid="8d61e524ab859374c9d9782dd33f3bc1ba6cb3f4366e539b2aa31a00bad3f506" name="kbd" arch="src">
  <version epoch="0" ver="2.4.0" rel="150700.15.3.1"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578571200">- Use a UTF-8 capable locale, otherwise ckbcomp will not not able
  to do proper uppercase/lowercase conversions.
- Rebase cz-map.patch after UTF-8 changes.
- Skip compression/decompression of maps which are about to be
  discarded later (~30%). Avoid zgrep, which is a shell script
  spawning grep and gunzip for each input file.</changelog>
  <changelog author="sbrabec@suse.com" date="1583236800">- Update to version 2.2.0:
  * setfont: Add option -d to double size of font.
  * kbd_mode: Add -f option and deny dangerous mode switches
    without it.
  * Data files updates.
  * Fix gcc warnings and error with gcc-10 (boo#1160273).
  * Other fixes.
  * For a full list of changes see:
    https://git.kernel.org/pub/scm/linux/kernel/git/legion/kbd.git/log/
- Update home page.
- Refresh patches: kbd-1.15.2-dumpkeys-C-opt.patch,
  kbd-1.15.2-setfont-no-cruft.patch,
  kbd-1.15.5-loadkeys-search-path.patch.</changelog>
  <changelog author="lnussel@suse.de" date="1587470400">- drop broken kbd command as well as guess_encoding (boo#1170067)
- don't use subdirectory for legacy keymaps (boo#1166423)
- use fdupes</changelog>
  <changelog author="jslaby@suse.com" date="1597924800">- add libkeymap-Fix-mk_mapname-for-the-plain-map.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1600344000">- Fix kbd-1.15.5-loadkeys-search-path.patch to prefer xkb keymaps
  (boo#1176302).</changelog>
  <changelog author="sbrabec@suse.com" date="1600344001">- Make kbdsettings working in both bash and dash (boo#1175040).</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1600776000">- Refresh patch to fix build on non-x86 architecture broken
  by previous commit:
  * kbdsettings-nox86.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1600948800">- Update to version 2.3.0:
  * Added libkfont library (internal yet).
  * Added Canadian Multilingual Standard keyboard map.
  * Added us1 that maps Right Alt to AltGr and Shift+Tab to
    Alt+Tab.
  * The dead_macron is used instead of macron in fi.map.
  * Added retries when switching to the console (chvt, openvt).
  * Added option -d to double size of font (setfont).
  * Added long options, help messages.
  * Added solar24x32 font.
  * Updated eurlatgr font.
  * Fixed problems with formatting man pages.
  * Fixed search path error (boo#1176854).
- Refresh partially upstreamed kbd-1.15.2-dumpkeys-C-opt.patch
- Drop upstreamed libkeymap-Fix-mk_mapname-for-the-plain-map.patch
- Refresh kbd-1.15.2-setfont-no-cruft.patch and
  kbd-1.15.5-loadkeys-search-path.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035200">- Do not package libtswrap.so.0: it's only used by the test suite
  in a LD_PRELOAD fashion.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="jslaby@suse.cz" date="1608292800">- Update to version 2.4.0:
  * po: Update cs and sr translations (from translationproject.org)
  * libkfont: Use only KDFONTOP
  * Added support for a few derivatives of neo
  * Fix use-after-free of pipe_cmd
  * Update solar24x32 font
  * vlock's pam config added to destination directory
  * Update sun12x22.psfu
  * libkeymap: unify non/unicode accent_table generation
  * libkeymap: note about --unicode use
  * libkeymap: remove last ushort
  * fi.map: use newly added deadkeys
  * Do not install internal library
  * Additional deadkeys
- Remove kbd-1.15.2-setfont-no-cruft.patch
  The old ioctls were finally dropped.</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Update the installed license file.
  COPYING is a symlink to LICENSE. Let's use this file directly.</changelog>
  <changelog author="kukuk@suse.com" date="1627041600">- Only run kbdsettings.service if /etc/sysconfig/keyboard exists.
  Necessary for image based installations without admin made changes.</changelog>
  <changelog author="fvogt@suse.com" date="1642420800">- Add patch to fix random doubling of font sizes (bsc#1194698):
  * 0001-libkfont-Initialize-kfont_context-options.patch</changelog>
  <changelog author="fvogt@suse.com" date="1645444800">- Fix build without %_distconfdir (see bsc#1195679)</changelog>
  <changelog author="fbui@suse.com" date="1682596800">- Add 'ara' vc keymap (bsc#1210702)
  'ara' is slightly better than 'arabic' as it matches the name of its x11
  layout counterpart. Keep 'arabic' for backward compatibility sake.</changelog>
  <changelog author="sbrabec@suse.com" date="1713355200">- Move legacy keymaps that have no acceptable xkb counterpart and
  its includes back to kbd. (bsc#1194609)</changelog>
  <changelog author="sbrabec@suse.com" date="1735819200">- Remove obsolete parts of suse-add.tar.bz2 (jsc#PED-7977),
  possible BREAKING CHANGES for obscure configurations:
  * Replace consolefonts/Cyr_a8x*.psf with upstream instances.
  * Replace consolefonts/cp850-full-8x*.psfu with upstream
    instances.
  * Drop consolefonts/lat5--*.psfu in favor of upstream
    lat5-*.psfu, exactly the same fonts with a better unimap.
  * Drop consolefonts/lat7.psf as it is lat7a-16.psf in the
    upstream.
  * Drop consolefonts/lt-brim-8x14.psfu in favor of upstream
    lat7a-14.psfu, exactly the same fonts with a better unimap.
  * Drop keymaps/i386/qwerty/Pl02.map in favor of nearly equal
    upstream pl2.map.
  * Drop keymaps/i386/qwerty/br-abnt-alt.map in favor of nearly
    equal upstream br-abnt.map.
  * Drop keymaps/i386/qwerty/tj_alt-UTF8.map that is already
    upstreamed.
  * Drop unimaps/iso07*.uni that is already upstreamed.
- Remove broken KBD_DISABLE_CAPS_LOCK feature (sysconfig.keyboard,
  kbdsettings, boo#1179897, jsc#PED-7814).
  Can be replaced by KEYMAP="{my map} disable.capslock" in
  /etc/vconsole.conf.</changelog>
  <changelog author="sbrabec@suse.com" date="1736164800">- sysconfig.keyboard: KBD_NUMLOCK="bios" works only on systems
  without Secure Boot. Document that. Change the default to
  KBD_NUMLOCK="no". (boo#1212141)
- kbdsettings-nox86.patch: Update and return missing chunk.</changelog>
  <changelog author="sbrabec@suse.com" date="1745150400">- Don't search for resources in the current directory. It can cause
  unwanted side effects or even infinite loop (bsc#1237230,
  kbd-ignore-working-directory-1.patch,
  kbd-ignore-working-directory-2.patch,
  kbd-ignore-working-directory-3.patch).</changelog>
</package>
<package pkgid="c1b5b872482bf362ccc9bbbfd2341fc47309f95ce2a5bb40be93cbf2533de9b9" name="kbd" arch="x86_64">
  <version epoch="0" ver="2.4.0" rel="150700.15.3.1"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578571200">- Use a UTF-8 capable locale, otherwise ckbcomp will not not able
  to do proper uppercase/lowercase conversions.
- Rebase cz-map.patch after UTF-8 changes.
- Skip compression/decompression of maps which are about to be
  discarded later (~30%). Avoid zgrep, which is a shell script
  spawning grep and gunzip for each input file.</changelog>
  <changelog author="sbrabec@suse.com" date="1583236800">- Update to version 2.2.0:
  * setfont: Add option -d to double size of font.
  * kbd_mode: Add -f option and deny dangerous mode switches
    without it.
  * Data files updates.
  * Fix gcc warnings and error with gcc-10 (boo#1160273).
  * Other fixes.
  * For a full list of changes see:
    https://git.kernel.org/pub/scm/linux/kernel/git/legion/kbd.git/log/
- Update home page.
- Refresh patches: kbd-1.15.2-dumpkeys-C-opt.patch,
  kbd-1.15.2-setfont-no-cruft.patch,
  kbd-1.15.5-loadkeys-search-path.patch.</changelog>
  <changelog author="lnussel@suse.de" date="1587470400">- drop broken kbd command as well as guess_encoding (boo#1170067)
- don't use subdirectory for legacy keymaps (boo#1166423)
- use fdupes</changelog>
  <changelog author="jslaby@suse.com" date="1597924800">- add libkeymap-Fix-mk_mapname-for-the-plain-map.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1600344000">- Fix kbd-1.15.5-loadkeys-search-path.patch to prefer xkb keymaps
  (boo#1176302).</changelog>
  <changelog author="sbrabec@suse.com" date="1600344001">- Make kbdsettings working in both bash and dash (boo#1175040).</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1600776000">- Refresh patch to fix build on non-x86 architecture broken
  by previous commit:
  * kbdsettings-nox86.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1600948800">- Update to version 2.3.0:
  * Added libkfont library (internal yet).
  * Added Canadian Multilingual Standard keyboard map.
  * Added us1 that maps Right Alt to AltGr and Shift+Tab to
    Alt+Tab.
  * The dead_macron is used instead of macron in fi.map.
  * Added retries when switching to the console (chvt, openvt).
  * Added option -d to double size of font (setfont).
  * Added long options, help messages.
  * Added solar24x32 font.
  * Updated eurlatgr font.
  * Fixed problems with formatting man pages.
  * Fixed search path error (boo#1176854).
- Refresh partially upstreamed kbd-1.15.2-dumpkeys-C-opt.patch
- Drop upstreamed libkeymap-Fix-mk_mapname-for-the-plain-map.patch
- Refresh kbd-1.15.2-setfont-no-cruft.patch and
  kbd-1.15.5-loadkeys-search-path.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035200">- Do not package libtswrap.so.0: it's only used by the test suite
  in a LD_PRELOAD fashion.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="jslaby@suse.cz" date="1608292800">- Update to version 2.4.0:
  * po: Update cs and sr translations (from translationproject.org)
  * libkfont: Use only KDFONTOP
  * Added support for a few derivatives of neo
  * Fix use-after-free of pipe_cmd
  * Update solar24x32 font
  * vlock's pam config added to destination directory
  * Update sun12x22.psfu
  * libkeymap: unify non/unicode accent_table generation
  * libkeymap: note about --unicode use
  * libkeymap: remove last ushort
  * fi.map: use newly added deadkeys
  * Do not install internal library
  * Additional deadkeys
- Remove kbd-1.15.2-setfont-no-cruft.patch
  The old ioctls were finally dropped.</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Update the installed license file.
  COPYING is a symlink to LICENSE. Let's use this file directly.</changelog>
  <changelog author="kukuk@suse.com" date="1627041600">- Only run kbdsettings.service if /etc/sysconfig/keyboard exists.
  Necessary for image based installations without admin made changes.</changelog>
  <changelog author="fvogt@suse.com" date="1642420800">- Add patch to fix random doubling of font sizes (bsc#1194698):
  * 0001-libkfont-Initialize-kfont_context-options.patch</changelog>
  <changelog author="fvogt@suse.com" date="1645444800">- Fix build without %_distconfdir (see bsc#1195679)</changelog>
  <changelog author="fbui@suse.com" date="1682596800">- Add 'ara' vc keymap (bsc#1210702)
  'ara' is slightly better than 'arabic' as it matches the name of its x11
  layout counterpart. Keep 'arabic' for backward compatibility sake.</changelog>
  <changelog author="sbrabec@suse.com" date="1713355200">- Move legacy keymaps that have no acceptable xkb counterpart and
  its includes back to kbd. (bsc#1194609)</changelog>
  <changelog author="sbrabec@suse.com" date="1735819200">- Remove obsolete parts of suse-add.tar.bz2 (jsc#PED-7977),
  possible BREAKING CHANGES for obscure configurations:
  * Replace consolefonts/Cyr_a8x*.psf with upstream instances.
  * Replace consolefonts/cp850-full-8x*.psfu with upstream
    instances.
  * Drop consolefonts/lat5--*.psfu in favor of upstream
    lat5-*.psfu, exactly the same fonts with a better unimap.
  * Drop consolefonts/lat7.psf as it is lat7a-16.psf in the
    upstream.
  * Drop consolefonts/lt-brim-8x14.psfu in favor of upstream
    lat7a-14.psfu, exactly the same fonts with a better unimap.
  * Drop keymaps/i386/qwerty/Pl02.map in favor of nearly equal
    upstream pl2.map.
  * Drop keymaps/i386/qwerty/br-abnt-alt.map in favor of nearly
    equal upstream br-abnt.map.
  * Drop keymaps/i386/qwerty/tj_alt-UTF8.map that is already
    upstreamed.
  * Drop unimaps/iso07*.uni that is already upstreamed.
- Remove broken KBD_DISABLE_CAPS_LOCK feature (sysconfig.keyboard,
  kbdsettings, boo#1179897, jsc#PED-7814).
  Can be replaced by KEYMAP="{my map} disable.capslock" in
  /etc/vconsole.conf.</changelog>
  <changelog author="sbrabec@suse.com" date="1736164800">- sysconfig.keyboard: KBD_NUMLOCK="bios" works only on systems
  without Secure Boot. Document that. Change the default to
  KBD_NUMLOCK="no". (boo#1212141)
- kbdsettings-nox86.patch: Update and return missing chunk.</changelog>
  <changelog author="sbrabec@suse.com" date="1745150400">- Don't search for resources in the current directory. It can cause
  unwanted side effects or even infinite loop (bsc#1237230,
  kbd-ignore-working-directory-1.patch,
  kbd-ignore-working-directory-2.patch,
  kbd-ignore-working-directory-3.patch).</changelog>
</package>
<package pkgid="570f6120223c701112554a8c29c1409c877793494bc66b8373e51931419ea81e" name="kbd" arch="src">
  <version epoch="0" ver="2.4.0" rel="150700.15.6.1"/>
  <changelog author="sbrabec@suse.com" date="1583236800">- Update to version 2.2.0:
  * setfont: Add option -d to double size of font.
  * kbd_mode: Add -f option and deny dangerous mode switches
    without it.
  * Data files updates.
  * Fix gcc warnings and error with gcc-10 (boo#1160273).
  * Other fixes.
  * For a full list of changes see:
    https://git.kernel.org/pub/scm/linux/kernel/git/legion/kbd.git/log/
- Update home page.
- Refresh patches: kbd-1.15.2-dumpkeys-C-opt.patch,
  kbd-1.15.2-setfont-no-cruft.patch,
  kbd-1.15.5-loadkeys-search-path.patch.</changelog>
  <changelog author="lnussel@suse.de" date="1587470400">- drop broken kbd command as well as guess_encoding (boo#1170067)
- don't use subdirectory for legacy keymaps (boo#1166423)
- use fdupes</changelog>
  <changelog author="jslaby@suse.com" date="1597924800">- add libkeymap-Fix-mk_mapname-for-the-plain-map.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1600344000">- Fix kbd-1.15.5-loadkeys-search-path.patch to prefer xkb keymaps
  (boo#1176302).</changelog>
  <changelog author="sbrabec@suse.com" date="1600344001">- Make kbdsettings working in both bash and dash (boo#1175040).</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1600776000">- Refresh patch to fix build on non-x86 architecture broken
  by previous commit:
  * kbdsettings-nox86.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1600948800">- Update to version 2.3.0:
  * Added libkfont library (internal yet).
  * Added Canadian Multilingual Standard keyboard map.
  * Added us1 that maps Right Alt to AltGr and Shift+Tab to
    Alt+Tab.
  * The dead_macron is used instead of macron in fi.map.
  * Added retries when switching to the console (chvt, openvt).
  * Added option -d to double size of font (setfont).
  * Added long options, help messages.
  * Added solar24x32 font.
  * Updated eurlatgr font.
  * Fixed problems with formatting man pages.
  * Fixed search path error (boo#1176854).
- Refresh partially upstreamed kbd-1.15.2-dumpkeys-C-opt.patch
- Drop upstreamed libkeymap-Fix-mk_mapname-for-the-plain-map.patch
- Refresh kbd-1.15.2-setfont-no-cruft.patch and
  kbd-1.15.5-loadkeys-search-path.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035200">- Do not package libtswrap.so.0: it's only used by the test suite
  in a LD_PRELOAD fashion.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="jslaby@suse.cz" date="1608292800">- Update to version 2.4.0:
  * po: Update cs and sr translations (from translationproject.org)
  * libkfont: Use only KDFONTOP
  * Added support for a few derivatives of neo
  * Fix use-after-free of pipe_cmd
  * Update solar24x32 font
  * vlock's pam config added to destination directory
  * Update sun12x22.psfu
  * libkeymap: unify non/unicode accent_table generation
  * libkeymap: note about --unicode use
  * libkeymap: remove last ushort
  * fi.map: use newly added deadkeys
  * Do not install internal library
  * Additional deadkeys
- Remove kbd-1.15.2-setfont-no-cruft.patch
  The old ioctls were finally dropped.</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Update the installed license file.
  COPYING is a symlink to LICENSE. Let's use this file directly.</changelog>
  <changelog author="kukuk@suse.com" date="1627041600">- Only run kbdsettings.service if /etc/sysconfig/keyboard exists.
  Necessary for image based installations without admin made changes.</changelog>
  <changelog author="fvogt@suse.com" date="1642420800">- Add patch to fix random doubling of font sizes (bsc#1194698):
  * 0001-libkfont-Initialize-kfont_context-options.patch</changelog>
  <changelog author="fvogt@suse.com" date="1645444800">- Fix build without %_distconfdir (see bsc#1195679)</changelog>
  <changelog author="fbui@suse.com" date="1682596800">- Add 'ara' vc keymap (bsc#1210702)
  'ara' is slightly better than 'arabic' as it matches the name of its x11
  layout counterpart. Keep 'arabic' for backward compatibility sake.</changelog>
  <changelog author="sbrabec@suse.com" date="1713355200">- Move legacy keymaps that have no acceptable xkb counterpart and
  its includes back to kbd. (bsc#1194609)</changelog>
  <changelog author="sbrabec@suse.com" date="1735819200">- Remove obsolete parts of suse-add.tar.bz2 (jsc#PED-7977),
  possible BREAKING CHANGES for obscure configurations:
  * Replace consolefonts/Cyr_a8x*.psf with upstream instances.
  * Replace consolefonts/cp850-full-8x*.psfu with upstream
    instances.
  * Drop consolefonts/lat5--*.psfu in favor of upstream
    lat5-*.psfu, exactly the same fonts with a better unimap.
  * Drop consolefonts/lat7.psf as it is lat7a-16.psf in the
    upstream.
  * Drop consolefonts/lt-brim-8x14.psfu in favor of upstream
    lat7a-14.psfu, exactly the same fonts with a better unimap.
  * Drop keymaps/i386/qwerty/Pl02.map in favor of nearly equal
    upstream pl2.map.
  * Drop keymaps/i386/qwerty/br-abnt-alt.map in favor of nearly
    equal upstream br-abnt.map.
  * Drop keymaps/i386/qwerty/tj_alt-UTF8.map that is already
    upstreamed.
  * Drop unimaps/iso07*.uni that is already upstreamed.
- Remove broken KBD_DISABLE_CAPS_LOCK feature (sysconfig.keyboard,
  kbdsettings, boo#1179897, jsc#PED-7814).
  Can be replaced by KEYMAP="{my map} disable.capslock" in
  /etc/vconsole.conf.</changelog>
  <changelog author="sbrabec@suse.com" date="1736164800">- sysconfig.keyboard: KBD_NUMLOCK="bios" works only on systems
  without Secure Boot. Document that. Change the default to
  KBD_NUMLOCK="no". (boo#1212141)
- kbdsettings-nox86.patch: Update and return missing chunk.</changelog>
  <changelog author="sbrabec@suse.com" date="1745150400">- Don't search for resources in the current directory. It can cause
  unwanted side effects or even infinite loop (bsc#1237230,
  kbd-ignore-working-directory-1.patch,
  kbd-ignore-working-directory-2.patch,
  kbd-ignore-working-directory-3.patch).</changelog>
  <changelog author="sndirsch@suse.com" date="1752580800">- dummy update to trigger rebuild after having updated
  console-setup (bsc#1246522); so this needs to be checked in and
  build after checking in console-setup !!!
- kbd-better-error-message-on-unsupported-unicode-value.patch
  * has been extremely useful for debugging that issue</changelog>
</package>
<package pkgid="2421ca8b9ecc498516eddc06830fdb080c46f915b9cfdd18e3e3a51aeb70383e" name="kbd" arch="x86_64">
  <version epoch="0" ver="2.4.0" rel="150700.15.6.1"/>
  <changelog author="sbrabec@suse.com" date="1583236800">- Update to version 2.2.0:
  * setfont: Add option -d to double size of font.
  * kbd_mode: Add -f option and deny dangerous mode switches
    without it.
  * Data files updates.
  * Fix gcc warnings and error with gcc-10 (boo#1160273).
  * Other fixes.
  * For a full list of changes see:
    https://git.kernel.org/pub/scm/linux/kernel/git/legion/kbd.git/log/
- Update home page.
- Refresh patches: kbd-1.15.2-dumpkeys-C-opt.patch,
  kbd-1.15.2-setfont-no-cruft.patch,
  kbd-1.15.5-loadkeys-search-path.patch.</changelog>
  <changelog author="lnussel@suse.de" date="1587470400">- drop broken kbd command as well as guess_encoding (boo#1170067)
- don't use subdirectory for legacy keymaps (boo#1166423)
- use fdupes</changelog>
  <changelog author="jslaby@suse.com" date="1597924800">- add libkeymap-Fix-mk_mapname-for-the-plain-map.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1600344000">- Fix kbd-1.15.5-loadkeys-search-path.patch to prefer xkb keymaps
  (boo#1176302).</changelog>
  <changelog author="sbrabec@suse.com" date="1600344001">- Make kbdsettings working in both bash and dash (boo#1175040).</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1600776000">- Refresh patch to fix build on non-x86 architecture broken
  by previous commit:
  * kbdsettings-nox86.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1600948800">- Update to version 2.3.0:
  * Added libkfont library (internal yet).
  * Added Canadian Multilingual Standard keyboard map.
  * Added us1 that maps Right Alt to AltGr and Shift+Tab to
    Alt+Tab.
  * The dead_macron is used instead of macron in fi.map.
  * Added retries when switching to the console (chvt, openvt).
  * Added option -d to double size of font (setfont).
  * Added long options, help messages.
  * Added solar24x32 font.
  * Updated eurlatgr font.
  * Fixed problems with formatting man pages.
  * Fixed search path error (boo#1176854).
- Refresh partially upstreamed kbd-1.15.2-dumpkeys-C-opt.patch
- Drop upstreamed libkeymap-Fix-mk_mapname-for-the-plain-map.patch
- Refresh kbd-1.15.2-setfont-no-cruft.patch and
  kbd-1.15.5-loadkeys-search-path.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035200">- Do not package libtswrap.so.0: it's only used by the test suite
  in a LD_PRELOAD fashion.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="jslaby@suse.cz" date="1608292800">- Update to version 2.4.0:
  * po: Update cs and sr translations (from translationproject.org)
  * libkfont: Use only KDFONTOP
  * Added support for a few derivatives of neo
  * Fix use-after-free of pipe_cmd
  * Update solar24x32 font
  * vlock's pam config added to destination directory
  * Update sun12x22.psfu
  * libkeymap: unify non/unicode accent_table generation
  * libkeymap: note about --unicode use
  * libkeymap: remove last ushort
  * fi.map: use newly added deadkeys
  * Do not install internal library
  * Additional deadkeys
- Remove kbd-1.15.2-setfont-no-cruft.patch
  The old ioctls were finally dropped.</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Update the installed license file.
  COPYING is a symlink to LICENSE. Let's use this file directly.</changelog>
  <changelog author="kukuk@suse.com" date="1627041600">- Only run kbdsettings.service if /etc/sysconfig/keyboard exists.
  Necessary for image based installations without admin made changes.</changelog>
  <changelog author="fvogt@suse.com" date="1642420800">- Add patch to fix random doubling of font sizes (bsc#1194698):
  * 0001-libkfont-Initialize-kfont_context-options.patch</changelog>
  <changelog author="fvogt@suse.com" date="1645444800">- Fix build without %_distconfdir (see bsc#1195679)</changelog>
  <changelog author="fbui@suse.com" date="1682596800">- Add 'ara' vc keymap (bsc#1210702)
  'ara' is slightly better than 'arabic' as it matches the name of its x11
  layout counterpart. Keep 'arabic' for backward compatibility sake.</changelog>
  <changelog author="sbrabec@suse.com" date="1713355200">- Move legacy keymaps that have no acceptable xkb counterpart and
  its includes back to kbd. (bsc#1194609)</changelog>
  <changelog author="sbrabec@suse.com" date="1735819200">- Remove obsolete parts of suse-add.tar.bz2 (jsc#PED-7977),
  possible BREAKING CHANGES for obscure configurations:
  * Replace consolefonts/Cyr_a8x*.psf with upstream instances.
  * Replace consolefonts/cp850-full-8x*.psfu with upstream
    instances.
  * Drop consolefonts/lat5--*.psfu in favor of upstream
    lat5-*.psfu, exactly the same fonts with a better unimap.
  * Drop consolefonts/lat7.psf as it is lat7a-16.psf in the
    upstream.
  * Drop consolefonts/lt-brim-8x14.psfu in favor of upstream
    lat7a-14.psfu, exactly the same fonts with a better unimap.
  * Drop keymaps/i386/qwerty/Pl02.map in favor of nearly equal
    upstream pl2.map.
  * Drop keymaps/i386/qwerty/br-abnt-alt.map in favor of nearly
    equal upstream br-abnt.map.
  * Drop keymaps/i386/qwerty/tj_alt-UTF8.map that is already
    upstreamed.
  * Drop unimaps/iso07*.uni that is already upstreamed.
- Remove broken KBD_DISABLE_CAPS_LOCK feature (sysconfig.keyboard,
  kbdsettings, boo#1179897, jsc#PED-7814).
  Can be replaced by KEYMAP="{my map} disable.capslock" in
  /etc/vconsole.conf.</changelog>
  <changelog author="sbrabec@suse.com" date="1736164800">- sysconfig.keyboard: KBD_NUMLOCK="bios" works only on systems
  without Secure Boot. Document that. Change the default to
  KBD_NUMLOCK="no". (boo#1212141)
- kbdsettings-nox86.patch: Update and return missing chunk.</changelog>
  <changelog author="sbrabec@suse.com" date="1745150400">- Don't search for resources in the current directory. It can cause
  unwanted side effects or even infinite loop (bsc#1237230,
  kbd-ignore-working-directory-1.patch,
  kbd-ignore-working-directory-2.patch,
  kbd-ignore-working-directory-3.patch).</changelog>
  <changelog author="sndirsch@suse.com" date="1752580800">- dummy update to trigger rebuild after having updated
  console-setup (bsc#1246522); so this needs to be checked in and
  build after checking in console-setup !!!
- kbd-better-error-message-on-unsupported-unicode-value.patch
  * has been extremely useful for debugging that issue</changelog>
</package>
<package pkgid="f0e8305715580b0a21db41f77885bf8be89d46bf6e21f95a5a3feb8e9c05d823" name="kbd-legacy" arch="noarch">
  <version epoch="0" ver="2.4.0" rel="150700.15.3.1"/>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578571200">- Use a UTF-8 capable locale, otherwise ckbcomp will not not able
  to do proper uppercase/lowercase conversions.
- Rebase cz-map.patch after UTF-8 changes.
- Skip compression/decompression of maps which are about to be
  discarded later (~30%). Avoid zgrep, which is a shell script
  spawning grep and gunzip for each input file.</changelog>
  <changelog author="sbrabec@suse.com" date="1583236800">- Update to version 2.2.0:
  * setfont: Add option -d to double size of font.
  * kbd_mode: Add -f option and deny dangerous mode switches
    without it.
  * Data files updates.
  * Fix gcc warnings and error with gcc-10 (boo#1160273).
  * Other fixes.
  * For a full list of changes see:
    https://git.kernel.org/pub/scm/linux/kernel/git/legion/kbd.git/log/
- Update home page.
- Refresh patches: kbd-1.15.2-dumpkeys-C-opt.patch,
  kbd-1.15.2-setfont-no-cruft.patch,
  kbd-1.15.5-loadkeys-search-path.patch.</changelog>
  <changelog author="lnussel@suse.de" date="1587470400">- drop broken kbd command as well as guess_encoding (boo#1170067)
- don't use subdirectory for legacy keymaps (boo#1166423)
- use fdupes</changelog>
  <changelog author="jslaby@suse.com" date="1597924800">- add libkeymap-Fix-mk_mapname-for-the-plain-map.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1600344000">- Fix kbd-1.15.5-loadkeys-search-path.patch to prefer xkb keymaps
  (boo#1176302).</changelog>
  <changelog author="sbrabec@suse.com" date="1600344001">- Make kbdsettings working in both bash and dash (boo#1175040).</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1600776000">- Refresh patch to fix build on non-x86 architecture broken
  by previous commit:
  * kbdsettings-nox86.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1600948800">- Update to version 2.3.0:
  * Added libkfont library (internal yet).
  * Added Canadian Multilingual Standard keyboard map.
  * Added us1 that maps Right Alt to AltGr and Shift+Tab to
    Alt+Tab.
  * The dead_macron is used instead of macron in fi.map.
  * Added retries when switching to the console (chvt, openvt).
  * Added option -d to double size of font (setfont).
  * Added long options, help messages.
  * Added solar24x32 font.
  * Updated eurlatgr font.
  * Fixed problems with formatting man pages.
  * Fixed search path error (boo#1176854).
- Refresh partially upstreamed kbd-1.15.2-dumpkeys-C-opt.patch
- Drop upstreamed libkeymap-Fix-mk_mapname-for-the-plain-map.patch
- Refresh kbd-1.15.2-setfont-no-cruft.patch and
  kbd-1.15.5-loadkeys-search-path.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035200">- Do not package libtswrap.so.0: it's only used by the test suite
  in a LD_PRELOAD fashion.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="jslaby@suse.cz" date="1608292800">- Update to version 2.4.0:
  * po: Update cs and sr translations (from translationproject.org)
  * libkfont: Use only KDFONTOP
  * Added support for a few derivatives of neo
  * Fix use-after-free of pipe_cmd
  * Update solar24x32 font
  * vlock's pam config added to destination directory
  * Update sun12x22.psfu
  * libkeymap: unify non/unicode accent_table generation
  * libkeymap: note about --unicode use
  * libkeymap: remove last ushort
  * fi.map: use newly added deadkeys
  * Do not install internal library
  * Additional deadkeys
- Remove kbd-1.15.2-setfont-no-cruft.patch
  The old ioctls were finally dropped.</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Update the installed license file.
  COPYING is a symlink to LICENSE. Let's use this file directly.</changelog>
  <changelog author="kukuk@suse.com" date="1627041600">- Only run kbdsettings.service if /etc/sysconfig/keyboard exists.
  Necessary for image based installations without admin made changes.</changelog>
  <changelog author="fvogt@suse.com" date="1642420800">- Add patch to fix random doubling of font sizes (bsc#1194698):
  * 0001-libkfont-Initialize-kfont_context-options.patch</changelog>
  <changelog author="fvogt@suse.com" date="1645444800">- Fix build without %_distconfdir (see bsc#1195679)</changelog>
  <changelog author="fbui@suse.com" date="1682596800">- Add 'ara' vc keymap (bsc#1210702)
  'ara' is slightly better than 'arabic' as it matches the name of its x11
  layout counterpart. Keep 'arabic' for backward compatibility sake.</changelog>
  <changelog author="sbrabec@suse.com" date="1713355200">- Move legacy keymaps that have no acceptable xkb counterpart and
  its includes back to kbd. (bsc#1194609)</changelog>
  <changelog author="sbrabec@suse.com" date="1735819200">- Remove obsolete parts of suse-add.tar.bz2 (jsc#PED-7977),
  possible BREAKING CHANGES for obscure configurations:
  * Replace consolefonts/Cyr_a8x*.psf with upstream instances.
  * Replace consolefonts/cp850-full-8x*.psfu with upstream
    instances.
  * Drop consolefonts/lat5--*.psfu in favor of upstream
    lat5-*.psfu, exactly the same fonts with a better unimap.
  * Drop consolefonts/lat7.psf as it is lat7a-16.psf in the
    upstream.
  * Drop consolefonts/lt-brim-8x14.psfu in favor of upstream
    lat7a-14.psfu, exactly the same fonts with a better unimap.
  * Drop keymaps/i386/qwerty/Pl02.map in favor of nearly equal
    upstream pl2.map.
  * Drop keymaps/i386/qwerty/br-abnt-alt.map in favor of nearly
    equal upstream br-abnt.map.
  * Drop keymaps/i386/qwerty/tj_alt-UTF8.map that is already
    upstreamed.
  * Drop unimaps/iso07*.uni that is already upstreamed.
- Remove broken KBD_DISABLE_CAPS_LOCK feature (sysconfig.keyboard,
  kbdsettings, boo#1179897, jsc#PED-7814).
  Can be replaced by KEYMAP="{my map} disable.capslock" in
  /etc/vconsole.conf.</changelog>
  <changelog author="sbrabec@suse.com" date="1736164800">- sysconfig.keyboard: KBD_NUMLOCK="bios" works only on systems
  without Secure Boot. Document that. Change the default to
  KBD_NUMLOCK="no". (boo#1212141)
- kbdsettings-nox86.patch: Update and return missing chunk.</changelog>
  <changelog author="sbrabec@suse.com" date="1745150400">- Don't search for resources in the current directory. It can cause
  unwanted side effects or even infinite loop (bsc#1237230,
  kbd-ignore-working-directory-1.patch,
  kbd-ignore-working-directory-2.patch,
  kbd-ignore-working-directory-3.patch).</changelog>
</package>
<package pkgid="532d3bc4f31851f0fff78965df3f9b207606903c142f77ed4ca992e7fb31a4f4" name="kbd-legacy" arch="noarch">
  <version epoch="0" ver="2.4.0" rel="150700.15.6.1"/>
  <changelog author="sbrabec@suse.com" date="1583236800">- Update to version 2.2.0:
  * setfont: Add option -d to double size of font.
  * kbd_mode: Add -f option and deny dangerous mode switches
    without it.
  * Data files updates.
  * Fix gcc warnings and error with gcc-10 (boo#1160273).
  * Other fixes.
  * For a full list of changes see:
    https://git.kernel.org/pub/scm/linux/kernel/git/legion/kbd.git/log/
- Update home page.
- Refresh patches: kbd-1.15.2-dumpkeys-C-opt.patch,
  kbd-1.15.2-setfont-no-cruft.patch,
  kbd-1.15.5-loadkeys-search-path.patch.</changelog>
  <changelog author="lnussel@suse.de" date="1587470400">- drop broken kbd command as well as guess_encoding (boo#1170067)
- don't use subdirectory for legacy keymaps (boo#1166423)
- use fdupes</changelog>
  <changelog author="jslaby@suse.com" date="1597924800">- add libkeymap-Fix-mk_mapname-for-the-plain-map.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1600344000">- Fix kbd-1.15.5-loadkeys-search-path.patch to prefer xkb keymaps
  (boo#1176302).</changelog>
  <changelog author="sbrabec@suse.com" date="1600344001">- Make kbdsettings working in both bash and dash (boo#1175040).</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1600776000">- Refresh patch to fix build on non-x86 architecture broken
  by previous commit:
  * kbdsettings-nox86.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1600948800">- Update to version 2.3.0:
  * Added libkfont library (internal yet).
  * Added Canadian Multilingual Standard keyboard map.
  * Added us1 that maps Right Alt to AltGr and Shift+Tab to
    Alt+Tab.
  * The dead_macron is used instead of macron in fi.map.
  * Added retries when switching to the console (chvt, openvt).
  * Added option -d to double size of font (setfont).
  * Added long options, help messages.
  * Added solar24x32 font.
  * Updated eurlatgr font.
  * Fixed problems with formatting man pages.
  * Fixed search path error (boo#1176854).
- Refresh partially upstreamed kbd-1.15.2-dumpkeys-C-opt.patch
- Drop upstreamed libkeymap-Fix-mk_mapname-for-the-plain-map.patch
- Refresh kbd-1.15.2-setfont-no-cruft.patch and
  kbd-1.15.5-loadkeys-search-path.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035200">- Do not package libtswrap.so.0: it's only used by the test suite
  in a LD_PRELOAD fashion.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="jslaby@suse.cz" date="1608292800">- Update to version 2.4.0:
  * po: Update cs and sr translations (from translationproject.org)
  * libkfont: Use only KDFONTOP
  * Added support for a few derivatives of neo
  * Fix use-after-free of pipe_cmd
  * Update solar24x32 font
  * vlock's pam config added to destination directory
  * Update sun12x22.psfu
  * libkeymap: unify non/unicode accent_table generation
  * libkeymap: note about --unicode use
  * libkeymap: remove last ushort
  * fi.map: use newly added deadkeys
  * Do not install internal library
  * Additional deadkeys
- Remove kbd-1.15.2-setfont-no-cruft.patch
  The old ioctls were finally dropped.</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Update the installed license file.
  COPYING is a symlink to LICENSE. Let's use this file directly.</changelog>
  <changelog author="kukuk@suse.com" date="1627041600">- Only run kbdsettings.service if /etc/sysconfig/keyboard exists.
  Necessary for image based installations without admin made changes.</changelog>
  <changelog author="fvogt@suse.com" date="1642420800">- Add patch to fix random doubling of font sizes (bsc#1194698):
  * 0001-libkfont-Initialize-kfont_context-options.patch</changelog>
  <changelog author="fvogt@suse.com" date="1645444800">- Fix build without %_distconfdir (see bsc#1195679)</changelog>
  <changelog author="fbui@suse.com" date="1682596800">- Add 'ara' vc keymap (bsc#1210702)
  'ara' is slightly better than 'arabic' as it matches the name of its x11
  layout counterpart. Keep 'arabic' for backward compatibility sake.</changelog>
  <changelog author="sbrabec@suse.com" date="1713355200">- Move legacy keymaps that have no acceptable xkb counterpart and
  its includes back to kbd. (bsc#1194609)</changelog>
  <changelog author="sbrabec@suse.com" date="1735819200">- Remove obsolete parts of suse-add.tar.bz2 (jsc#PED-7977),
  possible BREAKING CHANGES for obscure configurations:
  * Replace consolefonts/Cyr_a8x*.psf with upstream instances.
  * Replace consolefonts/cp850-full-8x*.psfu with upstream
    instances.
  * Drop consolefonts/lat5--*.psfu in favor of upstream
    lat5-*.psfu, exactly the same fonts with a better unimap.
  * Drop consolefonts/lat7.psf as it is lat7a-16.psf in the
    upstream.
  * Drop consolefonts/lt-brim-8x14.psfu in favor of upstream
    lat7a-14.psfu, exactly the same fonts with a better unimap.
  * Drop keymaps/i386/qwerty/Pl02.map in favor of nearly equal
    upstream pl2.map.
  * Drop keymaps/i386/qwerty/br-abnt-alt.map in favor of nearly
    equal upstream br-abnt.map.
  * Drop keymaps/i386/qwerty/tj_alt-UTF8.map that is already
    upstreamed.
  * Drop unimaps/iso07*.uni that is already upstreamed.
- Remove broken KBD_DISABLE_CAPS_LOCK feature (sysconfig.keyboard,
  kbdsettings, boo#1179897, jsc#PED-7814).
  Can be replaced by KEYMAP="{my map} disable.capslock" in
  /etc/vconsole.conf.</changelog>
  <changelog author="sbrabec@suse.com" date="1736164800">- sysconfig.keyboard: KBD_NUMLOCK="bios" works only on systems
  without Secure Boot. Document that. Change the default to
  KBD_NUMLOCK="no". (boo#1212141)
- kbdsettings-nox86.patch: Update and return missing chunk.</changelog>
  <changelog author="sbrabec@suse.com" date="1745150400">- Don't search for resources in the current directory. It can cause
  unwanted side effects or even infinite loop (bsc#1237230,
  kbd-ignore-working-directory-1.patch,
  kbd-ignore-working-directory-2.patch,
  kbd-ignore-working-directory-3.patch).</changelog>
  <changelog author="sndirsch@suse.com" date="1752580800">- dummy update to trigger rebuild after having updated
  console-setup (bsc#1246522); so this needs to be checked in and
  build after checking in console-setup !!!
- kbd-better-error-message-on-unsupported-unicode-value.patch
  * has been extremely useful for debugging that issue</changelog>
</package>
<package pkgid="4910d5e3ffc906ceb3b271c45288145758abb3daea1b2fe0f5ab9d5d9245dfb5" name="kdump" arch="src">
  <version epoch="0" ver="2.0.18+git2.g881ca8c" rel="150700.3.3.2"/>
  <changelog author="jbohac@suse.com" date="1690545600">- upgrade to version 1.9.5
  * SELinux: temporary hack for bsc#1213721</changelog>
  <changelog author="jbohac@suse.com" date="1692964800">- upgrade to version 1.9.6
  * use newer /sys/kernel/fadump/ instead of /sys/kernel/fadump_
  * use kexec -a which falls back to kexec_load(2) automatically
  * update s390 udev rules
  * drop systemd device timeout generator</changelog>
  <changelog author="jbohac@suse.com" date="1694001600">- update calibrate values, newly added SLE15-SP6 values</changelog>
  <changelog author="jbohac@suse.com" date="1697544000">- upgrade to version 1.9.7
  * prevent dracut emergency shell
  * s390: consolidate low-level network configuration with zdev
  * s390: Explicitly request zFCP devices</changelog>
  <changelog author="jbohac@suse.com" date="1698753600">- upgrade to version 1.9.8
  * drop obsolete dependency on systemd-sysvinit (bsc#1216745)</changelog>
  <changelog author="jbohac@suse.com" date="1702468800">- upgrade to version 2.0.0
  * add support for riscv64 (bsc#1204214)
  * mkdumprd: fix the check for updated SSH keys
  * prefer by-path and device-mapper aliases (bsc#1217617)
  * udev: don't reload kdump if kernel handles hotplug (jsc#PED-5077)</changelog>
  <changelog author="schwab@suse.de" date="1702728000">- Update calibrate values for riscv64</changelog>
  <changelog author="jbohac@suse.com" date="1705579200">- upgrade to version 2.0.1
  * load.sh: fix fadump (bsc#1218589)</changelog>
  <changelog author="jbohac@suse.com" date="1708084800">- branched off SLE-15-SP6
- upgrade to version 2.0.1+git2.g4335432:
  * always use nr_cpus, not maxcpus (bsc#1218180)</changelog>
  <changelog author="jbohac@suse.com" date="1709726400">- upgrade to version 2.0.1+git9.gbab000b:
  * prevent mounting root in fadump (bsc#1219958)</changelog>
  <changelog author="jbohac@suse.com" date="1711627200">- upgrade to version 2.0.3+git10.gfdb71b2
  * add a note to README.txt about the flattened format (bsc#1221374)
  * use the same persistent device links as dracut (bsc#1222009, bsc#1219471)
  * remove dracut parse-root.sh hook (bsc#1221288)</changelog>
  <changelog author="jbohac@suse.com" date="1715774400">- upgrade to version kdump-2.0.6+git18.g6fc4531:
  * fadump: use fadump=nocma when user data not filtered out (bsc#1224214)
  * spec: differentiate between uninstall and upgrade in postun/preun (bsc#1191410)
  * spec: return success from pre, post, preun and postun scriplets
    (bsc#1222228)
  * fix spec file BuildRequires for calibraiton builds
  * update calibrate values for SLE-15-SP6</changelog>
  <changelog author="jbohac@suse.com" date="1729684800">- upgrade to version kdump-2.0.10+git0.g62142dd:
  * calibrate: don't add percentage margin on top of LUKS memory (bsc#1229207)
  * start kdump-early earlier using DefaultDependencies=no
  * fadump: avoid re-registration if kernel is hotplug ready (jsc#PED-10822)
  * mkdumprd: use pbl to get default kernel version (boo#1226676)
- copy SLE15-SP6 calibrate values to SP7</changelog>
  <changelog author="jbohac@suse.com" date="1731067200">- upgrade to version 2.0.11:
  * fadump mkinitrd: popagate --debug to the inner dracut call
  * mkdumprd: look for kernel image under /boot as well</changelog>
  <changelog author="jbohac@suse.com" date="1732276800">- upgrade to version 2.0.12:
  * fadump: pass additional parameters for capture kernel (jsc#PED-9889)</changelog>
  <changelog author="jbohac@suse.com" date="1738929600">- upgrade to version 2.0.16:
  * fix KDUMP_AUTO_RESIZE (bsc#1236921)
  * dracut: fix filtering ro keys in kdump_bond_config (bsc#1233137)
  * spec: add dependency on ethtool
  * allow negative KDUMP_KEEP_OLD_DUMPS (bsc#1234845)
- update calibrate values for SP7</changelog>
  <changelog author="jbohac@suse.com" date="1741089600">- upgrade to version 2.0.17
  * fix bonding options (bsc#1235933)
  * don't use wicked to read bond and bridge config
  * prevent KDUMP_NET_TIMEOUT busy loop when DNS fails
  * limit dump file permissions (bsc#1237497, bsc#1237529)</changelog>
  <changelog author="jbohac@suse.com" date="1744718400">- upgrade to version 2.0.18
  * set KDUMP_CPUs to 32 (all CPUs) by default (bsc#1240769, jsc#PED-9894,
    bsc#1237754, bsc#1239999)</changelog>
  <changelog author="jbohac@suse.com" date="1749729600">- upgrade to version 2.0.18+git1.ga389ce7
  * set KDUMP_CPUs to 1 on XEN (bsc#1244289)</changelog>
  <changelog author="jbohac@suse.com" date="1749729601">- upgrade to version 2.0.18+git2.g881ca8c
  * kdumptool calibrate: add per-cpu userspace requirements</changelog>
</package>
<package pkgid="9f910d7b0822777707237687b62b7a023c520bf37c70f8963a383216515c7273" name="kdump" arch="x86_64">
  <version epoch="0" ver="2.0.18+git2.g881ca8c" rel="150700.3.3.2"/>
  <changelog author="jbohac@suse.com" date="1690545600">- upgrade to version 1.9.5
  * SELinux: temporary hack for bsc#1213721</changelog>
  <changelog author="jbohac@suse.com" date="1692964800">- upgrade to version 1.9.6
  * use newer /sys/kernel/fadump/ instead of /sys/kernel/fadump_
  * use kexec -a which falls back to kexec_load(2) automatically
  * update s390 udev rules
  * drop systemd device timeout generator</changelog>
  <changelog author="jbohac@suse.com" date="1694001600">- update calibrate values, newly added SLE15-SP6 values</changelog>
  <changelog author="jbohac@suse.com" date="1697544000">- upgrade to version 1.9.7
  * prevent dracut emergency shell
  * s390: consolidate low-level network configuration with zdev
  * s390: Explicitly request zFCP devices</changelog>
  <changelog author="jbohac@suse.com" date="1698753600">- upgrade to version 1.9.8
  * drop obsolete dependency on systemd-sysvinit (bsc#1216745)</changelog>
  <changelog author="jbohac@suse.com" date="1702468800">- upgrade to version 2.0.0
  * add support for riscv64 (bsc#1204214)
  * mkdumprd: fix the check for updated SSH keys
  * prefer by-path and device-mapper aliases (bsc#1217617)
  * udev: don't reload kdump if kernel handles hotplug (jsc#PED-5077)</changelog>
  <changelog author="schwab@suse.de" date="1702728000">- Update calibrate values for riscv64</changelog>
  <changelog author="jbohac@suse.com" date="1705579200">- upgrade to version 2.0.1
  * load.sh: fix fadump (bsc#1218589)</changelog>
  <changelog author="jbohac@suse.com" date="1708084800">- branched off SLE-15-SP6
- upgrade to version 2.0.1+git2.g4335432:
  * always use nr_cpus, not maxcpus (bsc#1218180)</changelog>
  <changelog author="jbohac@suse.com" date="1709726400">- upgrade to version 2.0.1+git9.gbab000b:
  * prevent mounting root in fadump (bsc#1219958)</changelog>
  <changelog author="jbohac@suse.com" date="1711627200">- upgrade to version 2.0.3+git10.gfdb71b2
  * add a note to README.txt about the flattened format (bsc#1221374)
  * use the same persistent device links as dracut (bsc#1222009, bsc#1219471)
  * remove dracut parse-root.sh hook (bsc#1221288)</changelog>
  <changelog author="jbohac@suse.com" date="1715774400">- upgrade to version kdump-2.0.6+git18.g6fc4531:
  * fadump: use fadump=nocma when user data not filtered out (bsc#1224214)
  * spec: differentiate between uninstall and upgrade in postun/preun (bsc#1191410)
  * spec: return success from pre, post, preun and postun scriplets
    (bsc#1222228)
  * fix spec file BuildRequires for calibraiton builds
  * update calibrate values for SLE-15-SP6</changelog>
  <changelog author="jbohac@suse.com" date="1729684800">- upgrade to version kdump-2.0.10+git0.g62142dd:
  * calibrate: don't add percentage margin on top of LUKS memory (bsc#1229207)
  * start kdump-early earlier using DefaultDependencies=no
  * fadump: avoid re-registration if kernel is hotplug ready (jsc#PED-10822)
  * mkdumprd: use pbl to get default kernel version (boo#1226676)
- copy SLE15-SP6 calibrate values to SP7</changelog>
  <changelog author="jbohac@suse.com" date="1731067200">- upgrade to version 2.0.11:
  * fadump mkinitrd: popagate --debug to the inner dracut call
  * mkdumprd: look for kernel image under /boot as well</changelog>
  <changelog author="jbohac@suse.com" date="1732276800">- upgrade to version 2.0.12:
  * fadump: pass additional parameters for capture kernel (jsc#PED-9889)</changelog>
  <changelog author="jbohac@suse.com" date="1738929600">- upgrade to version 2.0.16:
  * fix KDUMP_AUTO_RESIZE (bsc#1236921)
  * dracut: fix filtering ro keys in kdump_bond_config (bsc#1233137)
  * spec: add dependency on ethtool
  * allow negative KDUMP_KEEP_OLD_DUMPS (bsc#1234845)
- update calibrate values for SP7</changelog>
  <changelog author="jbohac@suse.com" date="1741089600">- upgrade to version 2.0.17
  * fix bonding options (bsc#1235933)
  * don't use wicked to read bond and bridge config
  * prevent KDUMP_NET_TIMEOUT busy loop when DNS fails
  * limit dump file permissions (bsc#1237497, bsc#1237529)</changelog>
  <changelog author="jbohac@suse.com" date="1744718400">- upgrade to version 2.0.18
  * set KDUMP_CPUs to 32 (all CPUs) by default (bsc#1240769, jsc#PED-9894,
    bsc#1237754, bsc#1239999)</changelog>
  <changelog author="jbohac@suse.com" date="1749729600">- upgrade to version 2.0.18+git1.ga389ce7
  * set KDUMP_CPUs to 1 on XEN (bsc#1244289)</changelog>
  <changelog author="jbohac@suse.com" date="1749729601">- upgrade to version 2.0.18+git2.g881ca8c
  * kdumptool calibrate: add per-cpu userspace requirements</changelog>
</package>
<package pkgid="081d2cd6185fb90cb5a16f27b5ae103209b18a54d39703415393a496600f8e04" name="kea" arch="src">
  <version epoch="0" ver="2.6.3" rel="150700.3.3.5"/>
  <changelog author="steven.kowalik@suse.com" date="1587556800">- Switch to Python 3 Sphinx due to Python 2 removal.</changelog>
  <changelog author="jengelh@inai.de" date="1599307200">- Update to release 1.8.0
  * User-defined option definitions were not committed, which was
    fixed.
  * kea-dhcp4 now rejects inbound client messages that have
    neither a hardware address nor a client identifier.
  * Rather than within the 'dhcp-ddns' section, DDNS behavioral
    parameters may now be specified at global, shared-network,
    and subnet scopes.
  * Added support of BOOTP leases with infinite valid lifetime.
  * Added the -N command line switch that enables experimental
    multi-threading support.</changelog>
  <changelog author="jengelh@inai.de" date="1605009600">- Update to release 1.9.1
  * New parameters: ddns-use-conflict-resolution,
    ip-reservations-unique, ddns-update-on-renew,
    cache-threshold, cache-max-age.
  * Support for new IPv6-only-preferred option for DHCPv4.
  * Added support of basic HTTP authentication in HTTP library,
    control agent.</changelog>
  <changelog author="smar@smar.fi" date="1617624000">- Own directory /var/lib/kea, as that is used as default for
  memfile lease store.</changelog>
  <changelog author="jengelh@inai.de" date="1621080000">- Update to release 1.9.7
  * The Control Agent now supports TLS/HTTPS.
  * kea-shell supports TLS/HTTPS.
  * kea-admin now accepts the -P, --port parameter
  * kea-dhcp4 now supports specifying valid-lifetime in
    client classes.</changelog>
  <changelog author="jengelh@inai.de" date="1622721600">- Update to release 1.9.8
  * Kea now recognizes requests sent from vendors that include
    their information in DHCPv6 Vendor Class option (code 16).
  * Fixed the server ignoring the Subnet Selection option
    supplied by a client if its query contained a Relay Agent
    Information (RAI) option without a Link Selection option.</changelog>
  <changelog author="jengelh@inai.de" date="1633348800">- Update to release 2.0.0
  * In Kea 2.0, the HA component has undergone a substantial
    architectural change. When HA+MT is enabled, the DHCPv4 and
    DHCPv6 daemons are now able to open HTTP sockets on their own
    and connect directly to each other, bypassing the Control Agent
    (CA). This eliminates the bottlenecks of sequential UNIX socket
    connection and the need to translate between HTTP and UNIX
    socket connections.
  * A new parameter on-fail gives the operator more control over
    what to do on database connection loss.
  * The length of the "parking lot queue" is now configurable; a
    default value of 256 is used.
  * A new statistic, `packet-queue-size`, has been added that
    reports packet-queue utilization.</changelog>
  <changelog author="jengelh@inai.de" date="1660824000">- Update to release 2.2.0
  * Kea now features full native support for TLS in HA
  * PostgreSQL configuration backend
  * A new hook is dedicated to RBAC.
  * A new hook limits the rate and number of leases.
  * A new DDNS Tuning library adds custom behaviors related to
    Dynamic DNS updates on a per-client basis.
  * The subnet_cmds hook has been expanded with several new
    commands: `subnet4-delta-add`, `subnet4-delta-del`,
    `subnet6-delta-add`, and `subnet6-delta-del`.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1671019200">- Separate documentation into kea-doc package
- Remove following packages from BuildRequires
  * docbook-xsl-stylesheets
  * elinks
  * libxslt-tools</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1688644800">- Add RuntimeDirectory to kea.service
- Update to release 2.4.0
  Breaking Changes:
  * Both MySQL and PostgreSQL database schemas were updated to
    accommodate DHCPv6 Bulk Leasequery support.
  * The values accepted by `operation-target` used in
    `reservation-*` commands have been renamed: primary -&gt;
    memory, alternate -&gt; database.
  * Kea DHCPv4 server can now handle multiple `vivco-suboptions`
    options with different enterprise IDs and multiple vendor
    options.
  * The Discovery of Network-designated Resolvers (DNR) options
    have been implemented for both DHCPv4 and DHCPv6. The options
    allow configuration.
  * Template classes mechanism, similar to spawning classes in
    ISC DHCP, has been implemented.
  * Kea now keeps leases for a period of time after they are
    released.
  * An address reserved in a global reservation must now lie
    within the range of the subnet or shared-network selected by
    Kea.
  * It is now possible to add an "empty" host reservation without
    any attribute.
  * kea-dhcp4 now supports the `offer-lifetime` parameter to
    allow the temporary allocation of leases during DHCPOFFER.
  * Added support for Secure Zero Touch Provisioning options, per
    RFC8572.
  * The kea-dhcp6 `prefix-len` and `pd-pools` list now checks the
    prefix lengths correctly.
  * The preferred lifetime is now calculated as 0.625 *
    `valid-lifetime` unless explicitly specified.
  * The link selection suboption is now optional.
  * See /usr/share/doc/kea/ChangeLog in the kea-doc package for
    details.</changelog>
  <changelog author="rrahl0@proton.me" date="1704715200">- Update to release 2.4.1
  * fix a race condition in FLQ in which kea could crash
  * fix a regression where redetection of interfaces stopped working</changelog>
  <changelog author="jengelh@inai.de" date="1706961600">- Generate "keadhcp" user with sysusers mechanism</changelog>
  <changelog author="jengelh@inai.de" date="1718712000">- Update to release 2.6.0
  * New features:
  * Hub-and-spoke model in High Availability (HA)
  * Ping Check hook, RADIUS hook, Performance Monitoring hook
  * Database connection retry on startup
  * Classless static route option
  * Discovery of Network-designated Resolvers (DNR) options
  * Stash Agent options: ISC DHCP provided a
    `stash-agent-options` mechanism that, when enabled, caused
    the server to remember options inserted by a relay agent
    during the initial exchange with a client.
  * Removals/Changes:
  * Removed autogeneration of subnet-ids
  * `output_options` was renamed to `output-options`</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1728388800">- Update to release 2.6.1
  Bug fixes:
  * Corrected an issue in MySQL config back end that causes
    preferred life time values to be overwritten when updating
    client classes via remote-set-class6. command.
  * Corrected an issue with overlapping enum values for option
    definition data type.  This was causing option definitions of
    type "record", created via config backend commands, to not load
    properly when fetched from the back end.
  * Corrected a bug in storing and fetching the encapsulated DHCP
    options from the configuration backend. These options were
    sometimes not returned when they were specified at the subnet,
    shared network or client class level.
  * Fixed a file descriptor leak in the High Availability hook
    library.
- Only require bison for build and enable regen_files on Tumbleweed
  and SLFO, because bison is too old in SLES/Leap
- Remove leading zeros from %if %{with ...}</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1741867200">- Add patch to fix build with boost 1.87
  (kea-2.6.1-boost_1.87-compat.patch)
- Add BuildRequires for python3-sphinx_rtd_theme to fix docs build</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1742990400">- Update to release 2.6.2
  Bug fixes:
  * Fix for inaccurate statistics: Kea was miscalculating
    declined and assigned leases.
  * Fix for lease conflicts and NAK: Conflicting entries were
    created when two relayed HA instances tried to update a shared
    lease DB at the same time.
  * Fix for `subnetX-del` not removing subnets completely:
    `subnetX-del` was not correctly deleting the subnet declaration
    from the shared network configuration section.
  * Fix for `config-write` and `retry-on-startup` parameter:
    `config-write` was improperly storing the `retry-on-startup`
    parameter in the config file, causing Kea to fail when
    restarting.
  * Fix for incorrect DB schema entry: A typo prevented the
    upgrade script from working in certain circumstances.
  * Fix for mishandling malformed DISCOVER packets:
  * Fix for excessive memory utilization when receiving frequent
    SIGHUP: Kea was storing a history of configs in memory with
    each restart.
  * Fix for `config-set` with `output_options`: `config-set` was
    omitting the `output_options` section when spelled with "_".
  * Fix for store-extended-info breaking lease limits: A specific
    combination of vendor classes and storing extended info caused
    limits to not be applied.
  * Fix for DB connection recovery
  * DB upgrade scripts: DB upgrade could fail on some
    distributions.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1743595200">- Split off services into separate ones to allow more fine grained
  control for e.g. capabilities.
- Tighten access to state and log directories.</changelog>
  <changelog author="jengelh@inai.de" date="1744718400">- Add logic to %post for switching from kea.service to the new
  split units, kea-*.service.
  (Inspiration taken from strongswan.spec.)</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1746014400">- Update owner and perms in %post on modified config files</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1748260800">- Update to release 2.6.3
  Security Fixes:
  * The default configuration for the Kea Control Agent (CA) has
    been updated to enable basic HTTP authentication.  Access to
    the Kea API will thus require a password.
    (CVE-2025-32801, CVE-2025-32802, CVE-2025-32803)
    [bsc#1243240]
  * `kea-dhcp4`, `kea-dhcp6`, `kea-dhcp-ddns`, and
    `kea-ctrl-agent` now only load hook libraries from the
    default installation directory. For ease of use, the path may
    be omitted.
    (CVE-2025-32801)
    [bsc#1243240]
  * The API command `config-write` will now only write to the same
    directory as the configuration file used when Kea was started
    (passed as a `-c` argument).
    (CVE-2025-32802)
    [bsc#1243240]
  * Lease files can now only be loaded from the data directory
    `/var/lib/kea`. This path may be overridden at startup by
    setting the environment variable `KEA_DHCP_DATA_DIR` to the
    desired path. If a path outside the defined data directory is
    used in `lease-database.name`, Kea returns an error and refuses
    to start or, if already running, aborts and exits. For ease of
    use in specifying a custom file name, simply omit the path
    component from `name`.
    (CVE-2025-32802)
    [bsc#1243240]
  * Log files can now only be written to a defined output directory
    `/var/log/kea`. This path may be overridden at startup by
    setting the environment variable `KEA_LOG_FILE_DIR` to the
    desired path. If a path outside the defined output directory is
    used in `loggers.output_options.output`, Kea returns an error
    and refuses to start or, if already running, aborts and exits.
    For ease of use, simply omit the path component from `output`
    and specify only the file name.
    (CVE-2025-32802)
    [bsc#1243240]
  * Files created by Kea now have more restrictive file
    permissions. Write access by group and any access by others is
    now forbidden.
    (CVE-2025-32803)
    [bsc#1243240]
  * Sockets can no longer be created in a world-writable directory,
    such as `/tmp`. Sockets must now be created in the more
    restricted `/var/run/kea`.
    (CVE-2025-32802)
    [bsc#1243240]
  * Many sample configuration files have been updated to reflect
    changes introduced in this release. In the ARM, the Kea
    Security section has been moved to a more prominent location,
    and a new section concerning securing the Kea Control Agent has
    been added.
    (CVE-2025-32801, CVE-2025-32802, CVE-2025-32803)
    [bsc#1243240]
  Other changes:
  * Fix build with the latest Boost 1.87.
    (Obsoletes patch `kea-2.6.1-boost_1.87-compat.patch`)
  * Backported a clarification in the ARM about subnet4-delta-add.
- Remove /run/kea from systemd tmpfiles as the creation of this
  directory is handled by the services.
- Replace 'chmod -h' and 'chown -h' with 'find' as the '-h' isn't
  present in Leap/SLE.
- /run/kea now has mode 0750 for all services.</changelog>
</package>
<package pkgid="03fff4ee7e9ee5f874d11172d42c40f3eb3b15cc699ddf9b84a83e95ad6aadfe" name="kea" arch="src">
  <version epoch="0" ver="2.6.5" rel="150700.3.6.1"/>
  <changelog author="jengelh@inai.de" date="1599307200">- Update to release 1.8.0
  * User-defined option definitions were not committed, which was
    fixed.
  * kea-dhcp4 now rejects inbound client messages that have
    neither a hardware address nor a client identifier.
  * Rather than within the 'dhcp-ddns' section, DDNS behavioral
    parameters may now be specified at global, shared-network,
    and subnet scopes.
  * Added support of BOOTP leases with infinite valid lifetime.
  * Added the -N command line switch that enables experimental
    multi-threading support.</changelog>
  <changelog author="jengelh@inai.de" date="1605009600">- Update to release 1.9.1
  * New parameters: ddns-use-conflict-resolution,
    ip-reservations-unique, ddns-update-on-renew,
    cache-threshold, cache-max-age.
  * Support for new IPv6-only-preferred option for DHCPv4.
  * Added support of basic HTTP authentication in HTTP library,
    control agent.</changelog>
  <changelog author="smar@smar.fi" date="1617624000">- Own directory /var/lib/kea, as that is used as default for
  memfile lease store.</changelog>
  <changelog author="jengelh@inai.de" date="1621080000">- Update to release 1.9.7
  * The Control Agent now supports TLS/HTTPS.
  * kea-shell supports TLS/HTTPS.
  * kea-admin now accepts the -P, --port parameter
  * kea-dhcp4 now supports specifying valid-lifetime in
    client classes.</changelog>
  <changelog author="jengelh@inai.de" date="1622721600">- Update to release 1.9.8
  * Kea now recognizes requests sent from vendors that include
    their information in DHCPv6 Vendor Class option (code 16).
  * Fixed the server ignoring the Subnet Selection option
    supplied by a client if its query contained a Relay Agent
    Information (RAI) option without a Link Selection option.</changelog>
  <changelog author="jengelh@inai.de" date="1633348800">- Update to release 2.0.0
  * In Kea 2.0, the HA component has undergone a substantial
    architectural change. When HA+MT is enabled, the DHCPv4 and
    DHCPv6 daemons are now able to open HTTP sockets on their own
    and connect directly to each other, bypassing the Control Agent
    (CA). This eliminates the bottlenecks of sequential UNIX socket
    connection and the need to translate between HTTP and UNIX
    socket connections.
  * A new parameter on-fail gives the operator more control over
    what to do on database connection loss.
  * The length of the "parking lot queue" is now configurable; a
    default value of 256 is used.
  * A new statistic, `packet-queue-size`, has been added that
    reports packet-queue utilization.</changelog>
  <changelog author="jengelh@inai.de" date="1660824000">- Update to release 2.2.0
  * Kea now features full native support for TLS in HA
  * PostgreSQL configuration backend
  * A new hook is dedicated to RBAC.
  * A new hook limits the rate and number of leases.
  * A new DDNS Tuning library adds custom behaviors related to
    Dynamic DNS updates on a per-client basis.
  * The subnet_cmds hook has been expanded with several new
    commands: `subnet4-delta-add`, `subnet4-delta-del`,
    `subnet6-delta-add`, and `subnet6-delta-del`.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1671019200">- Separate documentation into kea-doc package
- Remove following packages from BuildRequires
  * docbook-xsl-stylesheets
  * elinks
  * libxslt-tools</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1688644800">- Add RuntimeDirectory to kea.service
- Update to release 2.4.0
  Breaking Changes:
  * Both MySQL and PostgreSQL database schemas were updated to
    accommodate DHCPv6 Bulk Leasequery support.
  * The values accepted by `operation-target` used in
    `reservation-*` commands have been renamed: primary -&gt;
    memory, alternate -&gt; database.
  * Kea DHCPv4 server can now handle multiple `vivco-suboptions`
    options with different enterprise IDs and multiple vendor
    options.
  * The Discovery of Network-designated Resolvers (DNR) options
    have been implemented for both DHCPv4 and DHCPv6. The options
    allow configuration.
  * Template classes mechanism, similar to spawning classes in
    ISC DHCP, has been implemented.
  * Kea now keeps leases for a period of time after they are
    released.
  * An address reserved in a global reservation must now lie
    within the range of the subnet or shared-network selected by
    Kea.
  * It is now possible to add an "empty" host reservation without
    any attribute.
  * kea-dhcp4 now supports the `offer-lifetime` parameter to
    allow the temporary allocation of leases during DHCPOFFER.
  * Added support for Secure Zero Touch Provisioning options, per
    RFC8572.
  * The kea-dhcp6 `prefix-len` and `pd-pools` list now checks the
    prefix lengths correctly.
  * The preferred lifetime is now calculated as 0.625 *
    `valid-lifetime` unless explicitly specified.
  * The link selection suboption is now optional.
  * See /usr/share/doc/kea/ChangeLog in the kea-doc package for
    details.</changelog>
  <changelog author="rrahl0@proton.me" date="1704715200">- Update to release 2.4.1
  * fix a race condition in FLQ in which kea could crash
  * fix a regression where redetection of interfaces stopped working</changelog>
  <changelog author="jengelh@inai.de" date="1706961600">- Generate "keadhcp" user with sysusers mechanism</changelog>
  <changelog author="jengelh@inai.de" date="1718712000">- Update to release 2.6.0
  * New features:
  * Hub-and-spoke model in High Availability (HA)
  * Ping Check hook, RADIUS hook, Performance Monitoring hook
  * Database connection retry on startup
  * Classless static route option
  * Discovery of Network-designated Resolvers (DNR) options
  * Stash Agent options: ISC DHCP provided a
    `stash-agent-options` mechanism that, when enabled, caused
    the server to remember options inserted by a relay agent
    during the initial exchange with a client.
  * Removals/Changes:
  * Removed autogeneration of subnet-ids
  * `output_options` was renamed to `output-options`</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1728388800">- Update to release 2.6.1
  Bug fixes:
  * Corrected an issue in MySQL config back end that causes
    preferred life time values to be overwritten when updating
    client classes via remote-set-class6. command.
  * Corrected an issue with overlapping enum values for option
    definition data type.  This was causing option definitions of
    type "record", created via config backend commands, to not load
    properly when fetched from the back end.
  * Corrected a bug in storing and fetching the encapsulated DHCP
    options from the configuration backend. These options were
    sometimes not returned when they were specified at the subnet,
    shared network or client class level.
  * Fixed a file descriptor leak in the High Availability hook
    library.
- Only require bison for build and enable regen_files on Tumbleweed
  and SLFO, because bison is too old in SLES/Leap
- Remove leading zeros from %if %{with ...}</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1741867200">- Add patch to fix build with boost 1.87
  (kea-2.6.1-boost_1.87-compat.patch)
- Add BuildRequires for python3-sphinx_rtd_theme to fix docs build</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1742990400">- Update to release 2.6.2
  Bug fixes:
  * Fix for inaccurate statistics: Kea was miscalculating
    declined and assigned leases.
  * Fix for lease conflicts and NAK: Conflicting entries were
    created when two relayed HA instances tried to update a shared
    lease DB at the same time.
  * Fix for `subnetX-del` not removing subnets completely:
    `subnetX-del` was not correctly deleting the subnet declaration
    from the shared network configuration section.
  * Fix for `config-write` and `retry-on-startup` parameter:
    `config-write` was improperly storing the `retry-on-startup`
    parameter in the config file, causing Kea to fail when
    restarting.
  * Fix for incorrect DB schema entry: A typo prevented the
    upgrade script from working in certain circumstances.
  * Fix for mishandling malformed DISCOVER packets:
  * Fix for excessive memory utilization when receiving frequent
    SIGHUP: Kea was storing a history of configs in memory with
    each restart.
  * Fix for `config-set` with `output_options`: `config-set` was
    omitting the `output_options` section when spelled with "_".
  * Fix for store-extended-info breaking lease limits: A specific
    combination of vendor classes and storing extended info caused
    limits to not be applied.
  * Fix for DB connection recovery
  * DB upgrade scripts: DB upgrade could fail on some
    distributions.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1743595200">- Split off services into separate ones to allow more fine grained
  control for e.g. capabilities.
- Tighten access to state and log directories.</changelog>
  <changelog author="jengelh@inai.de" date="1744718400">- Add logic to %post for switching from kea.service to the new
  split units, kea-*.service.
  (Inspiration taken from strongswan.spec.)</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1746014400">- Update owner and perms in %post on modified config files</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1748260800">- Update to release 2.6.3
  Security Fixes:
  * The default configuration for the Kea Control Agent (CA) has
    been updated to enable basic HTTP authentication.  Access to
    the Kea API will thus require a password.
    (CVE-2025-32801, CVE-2025-32802, CVE-2025-32803)
    [bsc#1243240]
  * `kea-dhcp4`, `kea-dhcp6`, `kea-dhcp-ddns`, and
    `kea-ctrl-agent` now only load hook libraries from the
    default installation directory. For ease of use, the path may
    be omitted.
    (CVE-2025-32801)
    [bsc#1243240]
  * The API command `config-write` will now only write to the same
    directory as the configuration file used when Kea was started
    (passed as a `-c` argument).
    (CVE-2025-32802)
    [bsc#1243240]
  * Lease files can now only be loaded from the data directory
    `/var/lib/kea`. This path may be overridden at startup by
    setting the environment variable `KEA_DHCP_DATA_DIR` to the
    desired path. If a path outside the defined data directory is
    used in `lease-database.name`, Kea returns an error and refuses
    to start or, if already running, aborts and exits. For ease of
    use in specifying a custom file name, simply omit the path
    component from `name`.
    (CVE-2025-32802)
    [bsc#1243240]
  * Log files can now only be written to a defined output directory
    `/var/log/kea`. This path may be overridden at startup by
    setting the environment variable `KEA_LOG_FILE_DIR` to the
    desired path. If a path outside the defined output directory is
    used in `loggers.output_options.output`, Kea returns an error
    and refuses to start or, if already running, aborts and exits.
    For ease of use, simply omit the path component from `output`
    and specify only the file name.
    (CVE-2025-32802)
    [bsc#1243240]
  * Files created by Kea now have more restrictive file
    permissions. Write access by group and any access by others is
    now forbidden.
    (CVE-2025-32803)
    [bsc#1243240]
  * Sockets can no longer be created in a world-writable directory,
    such as `/tmp`. Sockets must now be created in the more
    restricted `/var/run/kea`.
    (CVE-2025-32802)
    [bsc#1243240]
  * Many sample configuration files have been updated to reflect
    changes introduced in this release. In the ARM, the Kea
    Security section has been moved to a more prominent location,
    and a new section concerning securing the Kea Control Agent has
    been added.
    (CVE-2025-32801, CVE-2025-32802, CVE-2025-32803)
    [bsc#1243240]
  Other changes:
  * Fix build with the latest Boost 1.87.
    (Obsoletes patch `kea-2.6.1-boost_1.87-compat.patch`)
  * Backported a clarification in the ARM about subnet4-delta-add.
- Remove /run/kea from systemd tmpfiles as the creation of this
  directory is handled by the services.
- Replace 'chmod -h' and 'chown -h' with 'find' as the '-h' isn't
  present in Leap/SLE.
- /run/kea now has mode 0750 for all services.</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1774526400">- Update to release 2.6.5
  * A large number of bracket pairs in a JSON payload directed to
    any endpoint would result in a stack overflow, due to recursive
    calls when parsing the JSON. This has been fixed.
    (CVE-2026-3608)
    [bsc#1260380]
  * A null dereference is now no longer possible when configuring
    the Control Agent with a socket that lacks the mandatory
    socket-name entry.
  * UNIX sockets are now created as group-writable.
  * Corrected an issue in logging configuration when parsing
    "syslog:"
  * Earlier Kea versions could crash when handling misconfigured
    global reservations. This has been fixed.
  * Support for recent versions of Sphinx has been added.</changelog>
</package>
<package pkgid="50eb6a66b6406a270baebc9d3f2192a14fc48717620b9712252e900ce389af2d" name="kernel-default" arch="src">
  <version epoch="0" ver="6.4.0" rel="150700.53.11.1"/>
  <changelog author="ailiop@suse.com" date="1754913600">- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY
  (git-fixes).
- commit fd58755</changelog>
  <changelog author="ailiop@suse.com" date="1754913601">- sunrpc: fix client side handling of tls alerts (git-fixes).
- commit 4c093f3</changelog>
  <changelog author="ailiop@suse.com" date="1754913602">- NFS: Fix the setting of capabilities when automounting a new
  filesystem (git-fixes).
- commit fabe208</changelog>
  <changelog author="tzimmermann@suse.com" date="1754913603">- drm/amdgpu: Add basic validation for RAS header (bsc#1247252 CVE-2025-38426)
- commit 5d23e74</changelog>
  <changelog author="ailiop@suse.com" date="1754913604">- sched: Add test_and_clear_wake_up_bit() and
  atomic_dec_and_wake_up() (git-fixes).
- commit 3754627</changelog>
  <changelog author="ailiop@suse.com" date="1754913605">- NFS: Fix wakeup of __nfs_lookup_revalidate() in
  unblock_revalidate() (git-fixes).
- commit 80e576f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1754913606">- netlink: avoid infinite retry looping in netlink_unicast()
  (CVE-2025-38465 bsc#1247118).
- net: mana: Set tx_packets to post gso processing packet count
  (bsc#1245731).
- net: mana: Allocate MSI-X vectors dynamically (bsc#1245457).
- net: mana: Allow irq_setup() to skip cpus for affinity
  (bsc#1245457).
- net: mana: explain irq_setup() algorithm (bsc#1245457).
- PCI: hv: Allow dynamic MSI-X vector allocation (bsc#1245457).
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X
  allocations (bsc#1245457).
- net: mana: Add handler for hardware servicing events
  (bsc#1245730).
- net: mana: Expose additional hardware counters for drop and
  TC via ethtool (bsc#1245729).
- hv_netvsc: Use VF's tso_max_size value when data path is VF
  (bsc#1246203).
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE
  (bsc#1246203).
- commit bdd7f41</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1754913607">- net: mana: Add debug logs in MANA network driver (bsc#1246212).
- Refresh
  patches.suse/msft-hv-3280-net-mana-Add-support-for-Multi-Vports-on-Bare-metal.patch.
- commit 1b4ad82</changelog>
  <changelog author="ematsumiya@suse.de" date="1754913608">- [SMB3] send channel sequence number in SMB3 requests after
  reconnects (git-fixes).
- commit baa81e9</changelog>
  <changelog author="ematsumiya@suse.de" date="1754913609">- cifs: reconnect helper should set reconnect for the right
  channel (git-fixes).
- commit ae3173e</changelog>
  <changelog author="ematsumiya@suse.de" date="1754913610">- smb: client: fix potential deadlock when reconnecting channels
  (bsc#1246183, CVE-2025-38244).
- commit fcf601a</changelog>
  <changelog author="ematsumiya@suse.de" date="1754913611">- SMB3: rename macro CIFS_SERVER_IS_CHAN to avoid confusion
  (git-fixes).
- Refresh
  patches.suse/smb-client-fix-use-after-free-of-signing-key.patch.
- commit ee8ada8</changelog>
  <changelog author="petr.pavlu@suse.com" date="1754913612">- module: Fix memory deallocation on error path in move_module()
  (git-fixes).
- commit bb37d39</changelog>
  <changelog author="petr.pavlu@suse.com" date="1754913613">- audit,module: restore audit logging in load failure case
  (git-fixes).
- kABI: Fix the module::name type in audit_context (git-fixes).
- commit 7e23359</changelog>
  <changelog author="petr.pavlu@suse.com" date="1754913614">- module: Remove unnecessary +1 from last_unloaded_module::name
  size (git-fixes).
- commit 3efc8ab</changelog>
  <changelog author="petr.pavlu@suse.com" date="1754913615">- module: Restore the moduleparam prefix length check (git-fixes).
- commit ad2fc48</changelog>
  <changelog author="petr.pavlu@suse.com" date="1754913616">- ring-buffer: Do not allow events in NMI with generic atomic64
  cmpxchg() (git-fixes).
- commit 890fc59</changelog>
  <changelog author="ematsumiya@suse.de" date="1754913617">- smb3: move server check earlier when setting channel sequence
  number (git-fixes).
- commit df2adca</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1754913618">- ice: init flow director before RDMA (bsc#1247712).
- ice: simplify VF MSI-X managing (bsc#1247712).
- ice: enable_rdma devlink param (bsc#1247712).
- ice: treat dyn_allowed only as suggestion (bsc#1247712).
- ice, irdma: move interrupts code to irdma (bsc#1247712).
- ice: get rid of num_lan_msix field (bsc#1247712).
- ice: remove splitting MSI-X between features (bsc#1247712).
- ice: devlink PF MSI-X max and min parameter (bsc#1247712).
- ice: count combined queues using Rx/Tx count (bsc#1247712).
- commit 0afdc75</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1754913619">- ice, irdma: fix an off by one in error handling code
  (bsc#1247712).
- irdma: free iwdev-&gt;rf after removing MSI-X (bsc#1247712).
- ice: Fix signedness bug in ice_init_interrupt_scheme()
  (bsc#1247712).
- commit eba4226</changelog>
</package>
<package pkgid="0001d159551fb5119804d81c560a470c16fe755bd384d629ae2af11acca7ec65" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.53.11.1"/>
  <changelog author="ailiop@suse.com" date="1754913600">- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY
  (git-fixes).
- commit fd58755</changelog>
  <changelog author="ailiop@suse.com" date="1754913601">- sunrpc: fix client side handling of tls alerts (git-fixes).
- commit 4c093f3</changelog>
  <changelog author="ailiop@suse.com" date="1754913602">- NFS: Fix the setting of capabilities when automounting a new
  filesystem (git-fixes).
- commit fabe208</changelog>
  <changelog author="tzimmermann@suse.com" date="1754913603">- drm/amdgpu: Add basic validation for RAS header (bsc#1247252 CVE-2025-38426)
- commit 5d23e74</changelog>
  <changelog author="ailiop@suse.com" date="1754913604">- sched: Add test_and_clear_wake_up_bit() and
  atomic_dec_and_wake_up() (git-fixes).
- commit 3754627</changelog>
  <changelog author="ailiop@suse.com" date="1754913605">- NFS: Fix wakeup of __nfs_lookup_revalidate() in
  unblock_revalidate() (git-fixes).
- commit 80e576f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1754913606">- netlink: avoid infinite retry looping in netlink_unicast()
  (CVE-2025-38465 bsc#1247118).
- net: mana: Set tx_packets to post gso processing packet count
  (bsc#1245731).
- net: mana: Allocate MSI-X vectors dynamically (bsc#1245457).
- net: mana: Allow irq_setup() to skip cpus for affinity
  (bsc#1245457).
- net: mana: explain irq_setup() algorithm (bsc#1245457).
- PCI: hv: Allow dynamic MSI-X vector allocation (bsc#1245457).
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X
  allocations (bsc#1245457).
- net: mana: Add handler for hardware servicing events
  (bsc#1245730).
- net: mana: Expose additional hardware counters for drop and
  TC via ethtool (bsc#1245729).
- hv_netvsc: Use VF's tso_max_size value when data path is VF
  (bsc#1246203).
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE
  (bsc#1246203).
- commit bdd7f41</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1754913607">- net: mana: Add debug logs in MANA network driver (bsc#1246212).
- Refresh
  patches.suse/msft-hv-3280-net-mana-Add-support-for-Multi-Vports-on-Bare-metal.patch.
- commit 1b4ad82</changelog>
  <changelog author="ematsumiya@suse.de" date="1754913608">- [SMB3] send channel sequence number in SMB3 requests after
  reconnects (git-fixes).
- commit baa81e9</changelog>
  <changelog author="ematsumiya@suse.de" date="1754913609">- cifs: reconnect helper should set reconnect for the right
  channel (git-fixes).
- commit ae3173e</changelog>
  <changelog author="ematsumiya@suse.de" date="1754913610">- smb: client: fix potential deadlock when reconnecting channels
  (bsc#1246183, CVE-2025-38244).
- commit fcf601a</changelog>
  <changelog author="ematsumiya@suse.de" date="1754913611">- SMB3: rename macro CIFS_SERVER_IS_CHAN to avoid confusion
  (git-fixes).
- Refresh
  patches.suse/smb-client-fix-use-after-free-of-signing-key.patch.
- commit ee8ada8</changelog>
  <changelog author="petr.pavlu@suse.com" date="1754913612">- module: Fix memory deallocation on error path in move_module()
  (git-fixes).
- commit bb37d39</changelog>
  <changelog author="petr.pavlu@suse.com" date="1754913613">- audit,module: restore audit logging in load failure case
  (git-fixes).
- kABI: Fix the module::name type in audit_context (git-fixes).
- commit 7e23359</changelog>
  <changelog author="petr.pavlu@suse.com" date="1754913614">- module: Remove unnecessary +1 from last_unloaded_module::name
  size (git-fixes).
- commit 3efc8ab</changelog>
  <changelog author="petr.pavlu@suse.com" date="1754913615">- module: Restore the moduleparam prefix length check (git-fixes).
- commit ad2fc48</changelog>
  <changelog author="petr.pavlu@suse.com" date="1754913616">- ring-buffer: Do not allow events in NMI with generic atomic64
  cmpxchg() (git-fixes).
- commit 890fc59</changelog>
  <changelog author="ematsumiya@suse.de" date="1754913617">- smb3: move server check earlier when setting channel sequence
  number (git-fixes).
- commit df2adca</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1754913618">- ice: init flow director before RDMA (bsc#1247712).
- ice: simplify VF MSI-X managing (bsc#1247712).
- ice: enable_rdma devlink param (bsc#1247712).
- ice: treat dyn_allowed only as suggestion (bsc#1247712).
- ice, irdma: move interrupts code to irdma (bsc#1247712).
- ice: get rid of num_lan_msix field (bsc#1247712).
- ice: remove splitting MSI-X between features (bsc#1247712).
- ice: devlink PF MSI-X max and min parameter (bsc#1247712).
- ice: count combined queues using Rx/Tx count (bsc#1247712).
- commit 0afdc75</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1754913619">- ice, irdma: fix an off by one in error handling code
  (bsc#1247712).
- irdma: free iwdev-&gt;rf after removing MSI-X (bsc#1247712).
- ice: Fix signedness bug in ice_init_interrupt_scheme()
  (bsc#1247712).
- commit eba4226</changelog>
</package>
<package pkgid="5a5598a6953f3faaf68e9fa848c752263e6e8687cace04d42661bf3e6ea1867f" name="kernel-default" arch="src">
  <version epoch="0" ver="6.4.0" rel="150700.53.16.1"/>
  <changelog author="dsterba@suse.com" date="1756468800">- net: stmmac: make sure that ptp_rate is not 0 before configuring EST (CVE-2025-38125 bsc#1245710)
- commit 0fcfa4f</changelog>
  <changelog author="dsterba@suse.com" date="1756468801">- smb: client: add NULL check in automount_fullpath (CVE-2025-38208 bsc#1245815)
- commit 04d79fb</changelog>
  <changelog author="dsterba@suse.com" date="1756468802">- drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (CVE-2025-38205 bsc#1246005)
- commit e09f72d</changelog>
  <changelog author="dsterba@suse.com" date="1756468803">- tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (CVE-2025-38184 bsc#1245956)
- commit 263759a</changelog>
  <changelog author="dsterba@suse.com" date="1756468804">- clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (CVE-2025-38160 bsc#1245780)
- commit f8670f7</changelog>
  <changelog author="tiwai@suse.de" date="1756555200">- HID: asus: fix UAF via HID_CLAIMED_INPUT validation (git-fixes).
- HID: multitouch: fix slab out-of-bounds access in
  mt_report_fixup() (git-fixes).
- drm/mediatek: Fix device/node reference count leaks in
  mtk_drm_get_all_drm_priv (git-fixes).
- drm/msm/kms: move snapshot init earlier in KMS init (git-fixes).
- drm/msm: Defer fd_install in SUBMIT ioctl (git-fixes).
- drm/nouveau: remove unused memory target test (git-fixes).
- drm/nouveau: remove unused increment in gm200_flcn_pio_imem_wr
  (git-fixes).
- drm/nouveau: fix error path in nvkm_gsp_fwsec_v2 (git-fixes).
- drm/nouveau/disp: Always accept linear modifier (git-fixes).
- mISDN: hfcpci: Fix warning when deleting uninitialized timer
  (git-fixes).
- Bluetooth: hci_sync: fix set_local_name race condition
  (git-fixes).
- Bluetooth: hci_event: Detect if HCI_EV_NUM_COMP_PKTS is
  unbalanced (git-fixes).
- Bluetooth: hci_event: Mark connection as closed during suspend
  disconnect (git-fixes).
- Bluetooth: hci_event: Treat UNKNOWN_CONN_ID on disconnect as
  success (git-fixes).
- commit f54cbc7</changelog>
  <changelog author="tiwai@suse.de" date="1756555201">- drm/mediatek: Add error handling for old state CRTC in
  atomic_disable (git-fixes).
- drm/msm: update the high bitfield of certain DSI registers
  (git-fixes).
- drm/xe: Don't trigger rebind on initial dma-buf validation
  (git-fixes).
- drm/xe/vm: Clear the scratch_pt pointer on error (git-fixes).
- drm/xe/xe_sync: avoid race during ufence signaling (git-fixes).
- commit ea140bc</changelog>
  <changelog author="joao.povoas@suse.com" date="1756641600">- Update
  patches.suse/drm-imagination-Fix-kernel-crash-when-hard-resetting.patch
  (git-fixes CVE-2025-38521 bsc#1248232).
- Update
  patches.suse/drm-xe-pf-Clear-all-LMTT-pages-on-alloc.patch
  (git-fixes CVE-2025-38511 bsc#1248175).
- Update
  patches.suse/regulator-core-fix-NULL-dereference-on-unbind-due-to.patch
  (stable-fixes CVE-2025-38668 bsc#1248647).
- Update
  patches.suse/wifi-ath12k-Pass-ab-pointer-directly-to-ath12k_dp_tx.patch
  (git-fixes CVE-2025-38605 bsc#1248334).
- commit af57d5e</changelog>
  <changelog author="joao.povoas@suse.com" date="1756641601">- Update
  patches.suse/Bluetooth-btnxpuart-Resolve-TX-timeout-error-in-powe.patch
  (bsc#1230557 CVE-2024-58238 bsc#1242754).
- Update
  patches.suse/HID-quirks-Add-quirk-for-2-Chicony-Electronics-HP-5M.patch
  (stable-fixes CVE-2025-38540 bsc#1248208).
- Update
  patches.suse/PCI-pnv_php-Clean-up-allocated-IRQs-on-unplug.patch
  (bsc#1215199 CVE-2025-38624 bsc#1248617).
- Update
  patches.suse/PM-devfreq-Check-governor-before-using-governor-name.patch
  (git-fixes CVE-2025-38609 bsc#1248337).
- Update
  patches.suse/RDMA-hns-Fix-double-destruction-of-rsv_qp.patch
  (git-fixes CVE-2025-38582 bsc#1248349).
- Update
  patches.suse/arm64-entry-Mask-DAIF-in-cpu_switch_to-call_on_irq_stack.patch
  (git-fixes CVE-2025-38670 bsc#1248655).
- Update
  patches.suse/btrfs-fix-assertion-when-building-free-space-tree.patch
  (git-fixes CVE-2025-38503 bsc#1248183).
- Update
  patches.suse/can-netlink-can_changelink-fix-NULL-pointer-deref-of.patch
  (git-fixes CVE-2025-38665 bsc#1248648).
- Update
  patches.suse/clk-davinci-Add-NULL-check-in-davinci_lpsc_clk_regis.patch
  (git-fixes CVE-2025-38635 bsc#1248573).
- Update
  patches.suse/clk-xilinx-vcu-unregister-pll_post-only-if-registere.patch
  (git-fixes CVE-2025-38583 bsc#1248350).
- Update
  patches.suse/comedi-aio_iiro_16-Fix-bit-shift-out-of-bounds.patch
  (git-fixes CVE-2025-38529 bsc#1248196).
- Update
  patches.suse/comedi-pcl812-Fix-bit-shift-out-of-bounds.patch
  (git-fixes CVE-2025-38530 bsc#1248206).
- Update
  patches.suse/crypto-ccp-Fix-crash-when-rebind-ccp-device-for-ccp..patch
  (git-fixes CVE-2025-38581 bsc#1248345).
- Update
  patches.suse/dmaengine-nbpfaxi-Fix-memory-corruption-in-probe.patch
  (git-fixes CVE-2025-38538 bsc#1248213).
- Update patches.suse/drm-amd-display-Fix-vs-typos.patch
  (git-fixes CVE-2024-26661 bsc#1222323).
- Update
  patches.suse/drm-sched-Increment-job-count-before-swapping-tail-s.patch
  (git-fixes CVE-2025-38515 bsc#1248212).
- Update
  patches.suse/drm-tegra-nvdec-Fix-dma_alloc_coherent-error-check.patch
  (git-fixes CVE-2025-38543 bsc#1248214).
- Update
  patches.suse/fbdev-imxfb-Check-fb_add_videomode-to-prevent-null-p.patch
  (git-fixes CVE-2025-38630 bsc#1248575).
- Update
  patches.suse/hfsplus-remove-mutex_lock-check-in-hfsplus_free_extents.patch
  (git-fixes CVE-2025-38650 bsc#1248746).
- Update
  patches.suse/hwmon-corsair-cpro-Validate-the-size-of-the-received.patch
  (git-fixes CVE-2025-38548 bsc#1248228).
- Update
  patches.suse/i2c-qup-jump-out-of-the-loop-in-case-of-timeout.patch
  (git-fixes CVE-2025-38671 bsc#1248652).
- Update
  patches.suse/ipv6-fix-possible-infinite-loop-in-fib6_info_uses_de.patch
  (git-fixes CVE-2025-38587 bsc#1248361).
- Update
  patches.suse/ipv6-mcast-Delay-put-pmc-idev-in-mld_del_delrec.patch
  (git-fixes CVE-2025-38550 bsc#1248227).
- Update
  patches.suse/ipv6-prevent-infinite-loop-in-rt6_nlmsg_size.patch
  (git-fixes CVE-2025-38588 bsc#1248368).
- Update
  patches.suse/ipv6-reject-malicious-packets-in-ipv6_gso_segment.patch
  (git-fixes CVE-2025-38572 bsc#1248399).
- Update
  patches.suse/iwlwifi-Add-missing-check-for-alloc_ordered_workqueu.patch
  (git-fixes CVE-2025-38602 bsc#1248341).
- Update
  patches.suse/kasan-remove-kasan_find_vm_area-to-prevent-possible-.patch
  (git-fixes CVE-2025-38510 bsc#1248166).
- Update
  patches.suse/ksmbd-fix-out-of-bounds-read-in-smb2_sess_setup.patch
  (bsc#1012628 bsc#1213545 CVE-2023-3867).
- Update
  patches.suse/ksmbd-fix-wrong-next-length-validation-of-ea-b.patch
  (bsc#1012628 CVE-2023-4130 bsc#1248164).
- Update patches.suse/ksmbd-validate-command-request-size.patch
  (bsc#1012628 CVE-2023-4515 bsc#1248180).
- Update
  patches.suse/md-make-rdev_addable-usable-for-rcu-mode.patch
  (git-fixes CVE-2025-38621 bsc#1248609).
- Update
  patches.suse/net-packet-fix-a-race-in-packet_set_ring-and-packet_.patch
  (git-fixes CVE-2025-38617 bsc#1248621).
- Update patches.suse/net-phy-Don-t-register-LEDs-for-genphy.patch
  (git-fixes CVE-2025-38537 bsc#1248229).
- Update
  patches.suse/net-sched-Restrict-conditions-for-adding-duplicating.patch
  (git-fixes CVE-2025-38553 bsc#1248255).
- Update
  patches.suse/net-sched-mqprio-fix-stack-out-of-bounds-write-in-tc.patch
  (git-fixes CVE-2025-38568 bsc#1248386).
- Update
  patches.suse/nilfs2-reject-invalid-file-types-when-reading-inodes.patch
  (git-fixes CVE-2025-38663 bsc#1248636).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/phy-tegra-xusb-Fix-unbalanced-regulator-disable-in-U.patch
  (git-fixes CVE-2025-38535 bsc#1248240).
- Update
  patches.suse/pinctrl-qcom-msm-mark-certain-pins-as-invalid-for-in.patch
  (git-fixes CVE-2025-38516 bsc#1248209).
- Update
  patches.suse/pinmux-fix-race-causing-mux_owner-NULL-with-active-m.patch
  (git-fixes CVE-2025-38632 bsc#1248669).
- Update
  patches.suse/power-supply-cpcap-charger-Fix-null-check-for-power_.patch
  (git-fixes CVE-2025-38634 bsc#1248666).
- Update
  patches.suse/powercap-dtpm_cpu-Fix-NULL-pointer-dereference-in-ge.patch
  (git-fixes CVE-2025-38610 bsc#1248395).
- Update
  patches.suse/powerpc-eeh-Make-EEH-driver-device-hotplug-safe.patch
  (bsc#1215199 CVE-2025-38576 bsc#1248354).
- Update
  patches.suse/staging-fbtft-fix-potential-memory-leak-in-fbtft_fra.patch
  (git-fixes CVE-2025-38612 bsc#1248390).
- Update
  patches.suse/sunrpc-fix-client-side-handling-of-tls-alerts.patch
  (git-fixes CVE-2025-38571 bsc#1248401).
- Update
  patches.suse/sunrpc-fix-handling-of-server-side-tls-alerts.patch
  (git-fixes CVE-2025-38566 bsc#1248374).
- Update
  patches.suse/tls-stop-recv-if-initial-process_rx_list-gave-us-non.patch
  (bsc#1221858 CVE-2024-58239 bsc#1248614).
- Update
  patches.suse/usb-gadget-fix-use-after-free-in-composite_dev_clean.patch
  (git-fixes CVE-2025-38555 bsc#1248297).
- Update
  patches.suse/wifi-ath11k-clear-initialized-flag-for-deinit-ed-srn.patch
  (git-fixes CVE-2025-38601 bsc#1248340).
- Update
  patches.suse/wifi-iwlwifi-Fix-error-code-in-iwl_op_mode_dvm_start.patch
  (git-fixes CVE-2025-38656 bsc#1248643).
- Update
  patches.suse/wifi-mac80211-reject-TDLS-operations-when-station-is.patch
  (git-fixes CVE-2025-38644 bsc#1248748).
- Update
  patches.suse/wifi-mt76-mt7925-Fix-null-ptr-deref-in-mt7925_therma.patch
  (git-fixes CVE-2025-38541 bsc#1248216).
- Update
  patches.suse/wifi-prevent-A-MSDU-attacks-in-mesh-networks.patch
  (stable-fixes CVE-2025-38512 bsc#1248178).
- Update
  patches.suse/wifi-rtl818x-Kill-URBs-before-clearing-tx-status-que.patch
  (git-fixes CVE-2025-38604 bsc#1248333).
- Update
  patches.suse/wifi-rtw89-avoid-NULL-dereference-when-RX-problemati.patch
  (git-fixes CVE-2025-38646 bsc#1248577).
- Update
  patches.suse/wifi-zd1211rw-Fix-potential-NULL-pointer-dereference.patch
  (git-fixes CVE-2025-38513 bsc#1248179).
- commit efc5ee0</changelog>
  <changelog author="nik.borisov@suse.com" date="1756728000">- RAS/AMD/ATL: Include row bit in row retirement (bsc#1242034).
- commit fa3fcbb</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1756728001">- ixgbe: fix ixgbe_orom_civd_info struct layout (bsc#1245410).
- commit 53ae51b</changelog>
  <changelog author="nik.borisov@suse.com" date="1756728002">- RAS/AMD/FMPM: Get masked address (bsc#1242034).
- commit 4171987</changelog>
  <changelog author="nik.borisov@suse.com" date="1756728003">- RAS/AMD/FMPM: Use atl internal.h for INVALID_SPA (bsc#1242034).
- commit ac5d9dc</changelog>
  <changelog author="pmladek@suse.com" date="1756728004">- slab: Decouple slab_debug and no_hash_pointers (bsc#1249022).
- commit 41f928f</changelog>
  <changelog author="jgross@suse.com" date="1756728005">- KVM: Allow CPU to reschedule while setting per-page memory
  attributes (bsc#1248186 CVE-2025-38506).
- commit a7f8a41</changelog>
  <changelog author="nmorey@suse.com" date="1756728006">- RDMA/core: reduce stack using in nldev_stat_get_doit() (git-fixes)
- commit 1ff622a</changelog>
  <changelog author="nmorey@suse.com" date="1756728007">- RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (git-fixes)
- commit 5289b12</changelog>
  <changelog author="jgross@suse.com" date="1756728008">- vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1248511
  CVE-2025-38618).
- commit 0256bd0</changelog>
  <changelog author="tiwai@suse.de" date="1756728009">- staging: media: atomisp: Fix stack buffer overflow in
  gmin_get_var_int() (CVE-2025-38585 bsc#1248355).
- commit f7d8b23</changelog>
  <changelog author="msuchanek@suse.de" date="1757419200">- kernel-subpackage-build: Decompress ghost file when compressed version exists (bsc#1249346)
- commit 40606b5</changelog>
</package>
<package pkgid="23a8a74b75fc614eab96b5e2e538e48d484b3a99241f2073339804007b6a8c4f" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.53.16.1"/>
  <changelog author="dsterba@suse.com" date="1756468800">- net: stmmac: make sure that ptp_rate is not 0 before configuring EST (CVE-2025-38125 bsc#1245710)
- commit 0fcfa4f</changelog>
  <changelog author="dsterba@suse.com" date="1756468801">- smb: client: add NULL check in automount_fullpath (CVE-2025-38208 bsc#1245815)
- commit 04d79fb</changelog>
  <changelog author="dsterba@suse.com" date="1756468802">- drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (CVE-2025-38205 bsc#1246005)
- commit e09f72d</changelog>
  <changelog author="dsterba@suse.com" date="1756468803">- tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (CVE-2025-38184 bsc#1245956)
- commit 263759a</changelog>
  <changelog author="dsterba@suse.com" date="1756468804">- clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (CVE-2025-38160 bsc#1245780)
- commit f8670f7</changelog>
  <changelog author="tiwai@suse.de" date="1756555200">- HID: asus: fix UAF via HID_CLAIMED_INPUT validation (git-fixes).
- HID: multitouch: fix slab out-of-bounds access in
  mt_report_fixup() (git-fixes).
- drm/mediatek: Fix device/node reference count leaks in
  mtk_drm_get_all_drm_priv (git-fixes).
- drm/msm/kms: move snapshot init earlier in KMS init (git-fixes).
- drm/msm: Defer fd_install in SUBMIT ioctl (git-fixes).
- drm/nouveau: remove unused memory target test (git-fixes).
- drm/nouveau: remove unused increment in gm200_flcn_pio_imem_wr
  (git-fixes).
- drm/nouveau: fix error path in nvkm_gsp_fwsec_v2 (git-fixes).
- drm/nouveau/disp: Always accept linear modifier (git-fixes).
- mISDN: hfcpci: Fix warning when deleting uninitialized timer
  (git-fixes).
- Bluetooth: hci_sync: fix set_local_name race condition
  (git-fixes).
- Bluetooth: hci_event: Detect if HCI_EV_NUM_COMP_PKTS is
  unbalanced (git-fixes).
- Bluetooth: hci_event: Mark connection as closed during suspend
  disconnect (git-fixes).
- Bluetooth: hci_event: Treat UNKNOWN_CONN_ID on disconnect as
  success (git-fixes).
- commit f54cbc7</changelog>
  <changelog author="tiwai@suse.de" date="1756555201">- drm/mediatek: Add error handling for old state CRTC in
  atomic_disable (git-fixes).
- drm/msm: update the high bitfield of certain DSI registers
  (git-fixes).
- drm/xe: Don't trigger rebind on initial dma-buf validation
  (git-fixes).
- drm/xe/vm: Clear the scratch_pt pointer on error (git-fixes).
- drm/xe/xe_sync: avoid race during ufence signaling (git-fixes).
- commit ea140bc</changelog>
  <changelog author="joao.povoas@suse.com" date="1756641600">- Update
  patches.suse/drm-imagination-Fix-kernel-crash-when-hard-resetting.patch
  (git-fixes CVE-2025-38521 bsc#1248232).
- Update
  patches.suse/drm-xe-pf-Clear-all-LMTT-pages-on-alloc.patch
  (git-fixes CVE-2025-38511 bsc#1248175).
- Update
  patches.suse/regulator-core-fix-NULL-dereference-on-unbind-due-to.patch
  (stable-fixes CVE-2025-38668 bsc#1248647).
- Update
  patches.suse/wifi-ath12k-Pass-ab-pointer-directly-to-ath12k_dp_tx.patch
  (git-fixes CVE-2025-38605 bsc#1248334).
- commit af57d5e</changelog>
  <changelog author="joao.povoas@suse.com" date="1756641601">- Update
  patches.suse/Bluetooth-btnxpuart-Resolve-TX-timeout-error-in-powe.patch
  (bsc#1230557 CVE-2024-58238 bsc#1242754).
- Update
  patches.suse/HID-quirks-Add-quirk-for-2-Chicony-Electronics-HP-5M.patch
  (stable-fixes CVE-2025-38540 bsc#1248208).
- Update
  patches.suse/PCI-pnv_php-Clean-up-allocated-IRQs-on-unplug.patch
  (bsc#1215199 CVE-2025-38624 bsc#1248617).
- Update
  patches.suse/PM-devfreq-Check-governor-before-using-governor-name.patch
  (git-fixes CVE-2025-38609 bsc#1248337).
- Update
  patches.suse/RDMA-hns-Fix-double-destruction-of-rsv_qp.patch
  (git-fixes CVE-2025-38582 bsc#1248349).
- Update
  patches.suse/arm64-entry-Mask-DAIF-in-cpu_switch_to-call_on_irq_stack.patch
  (git-fixes CVE-2025-38670 bsc#1248655).
- Update
  patches.suse/btrfs-fix-assertion-when-building-free-space-tree.patch
  (git-fixes CVE-2025-38503 bsc#1248183).
- Update
  patches.suse/can-netlink-can_changelink-fix-NULL-pointer-deref-of.patch
  (git-fixes CVE-2025-38665 bsc#1248648).
- Update
  patches.suse/clk-davinci-Add-NULL-check-in-davinci_lpsc_clk_regis.patch
  (git-fixes CVE-2025-38635 bsc#1248573).
- Update
  patches.suse/clk-xilinx-vcu-unregister-pll_post-only-if-registere.patch
  (git-fixes CVE-2025-38583 bsc#1248350).
- Update
  patches.suse/comedi-aio_iiro_16-Fix-bit-shift-out-of-bounds.patch
  (git-fixes CVE-2025-38529 bsc#1248196).
- Update
  patches.suse/comedi-pcl812-Fix-bit-shift-out-of-bounds.patch
  (git-fixes CVE-2025-38530 bsc#1248206).
- Update
  patches.suse/crypto-ccp-Fix-crash-when-rebind-ccp-device-for-ccp..patch
  (git-fixes CVE-2025-38581 bsc#1248345).
- Update
  patches.suse/dmaengine-nbpfaxi-Fix-memory-corruption-in-probe.patch
  (git-fixes CVE-2025-38538 bsc#1248213).
- Update patches.suse/drm-amd-display-Fix-vs-typos.patch
  (git-fixes CVE-2024-26661 bsc#1222323).
- Update
  patches.suse/drm-sched-Increment-job-count-before-swapping-tail-s.patch
  (git-fixes CVE-2025-38515 bsc#1248212).
- Update
  patches.suse/drm-tegra-nvdec-Fix-dma_alloc_coherent-error-check.patch
  (git-fixes CVE-2025-38543 bsc#1248214).
- Update
  patches.suse/fbdev-imxfb-Check-fb_add_videomode-to-prevent-null-p.patch
  (git-fixes CVE-2025-38630 bsc#1248575).
- Update
  patches.suse/hfsplus-remove-mutex_lock-check-in-hfsplus_free_extents.patch
  (git-fixes CVE-2025-38650 bsc#1248746).
- Update
  patches.suse/hwmon-corsair-cpro-Validate-the-size-of-the-received.patch
  (git-fixes CVE-2025-38548 bsc#1248228).
- Update
  patches.suse/i2c-qup-jump-out-of-the-loop-in-case-of-timeout.patch
  (git-fixes CVE-2025-38671 bsc#1248652).
- Update
  patches.suse/ipv6-fix-possible-infinite-loop-in-fib6_info_uses_de.patch
  (git-fixes CVE-2025-38587 bsc#1248361).
- Update
  patches.suse/ipv6-mcast-Delay-put-pmc-idev-in-mld_del_delrec.patch
  (git-fixes CVE-2025-38550 bsc#1248227).
- Update
  patches.suse/ipv6-prevent-infinite-loop-in-rt6_nlmsg_size.patch
  (git-fixes CVE-2025-38588 bsc#1248368).
- Update
  patches.suse/ipv6-reject-malicious-packets-in-ipv6_gso_segment.patch
  (git-fixes CVE-2025-38572 bsc#1248399).
- Update
  patches.suse/iwlwifi-Add-missing-check-for-alloc_ordered_workqueu.patch
  (git-fixes CVE-2025-38602 bsc#1248341).
- Update
  patches.suse/kasan-remove-kasan_find_vm_area-to-prevent-possible-.patch
  (git-fixes CVE-2025-38510 bsc#1248166).
- Update
  patches.suse/ksmbd-fix-out-of-bounds-read-in-smb2_sess_setup.patch
  (bsc#1012628 bsc#1213545 CVE-2023-3867).
- Update
  patches.suse/ksmbd-fix-wrong-next-length-validation-of-ea-b.patch
  (bsc#1012628 CVE-2023-4130 bsc#1248164).
- Update patches.suse/ksmbd-validate-command-request-size.patch
  (bsc#1012628 CVE-2023-4515 bsc#1248180).
- Update
  patches.suse/md-make-rdev_addable-usable-for-rcu-mode.patch
  (git-fixes CVE-2025-38621 bsc#1248609).
- Update
  patches.suse/net-packet-fix-a-race-in-packet_set_ring-and-packet_.patch
  (git-fixes CVE-2025-38617 bsc#1248621).
- Update patches.suse/net-phy-Don-t-register-LEDs-for-genphy.patch
  (git-fixes CVE-2025-38537 bsc#1248229).
- Update
  patches.suse/net-sched-Restrict-conditions-for-adding-duplicating.patch
  (git-fixes CVE-2025-38553 bsc#1248255).
- Update
  patches.suse/net-sched-mqprio-fix-stack-out-of-bounds-write-in-tc.patch
  (git-fixes CVE-2025-38568 bsc#1248386).
- Update
  patches.suse/nilfs2-reject-invalid-file-types-when-reading-inodes.patch
  (git-fixes CVE-2025-38663 bsc#1248636).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/phy-tegra-xusb-Fix-unbalanced-regulator-disable-in-U.patch
  (git-fixes CVE-2025-38535 bsc#1248240).
- Update
  patches.suse/pinctrl-qcom-msm-mark-certain-pins-as-invalid-for-in.patch
  (git-fixes CVE-2025-38516 bsc#1248209).
- Update
  patches.suse/pinmux-fix-race-causing-mux_owner-NULL-with-active-m.patch
  (git-fixes CVE-2025-38632 bsc#1248669).
- Update
  patches.suse/power-supply-cpcap-charger-Fix-null-check-for-power_.patch
  (git-fixes CVE-2025-38634 bsc#1248666).
- Update
  patches.suse/powercap-dtpm_cpu-Fix-NULL-pointer-dereference-in-ge.patch
  (git-fixes CVE-2025-38610 bsc#1248395).
- Update
  patches.suse/powerpc-eeh-Make-EEH-driver-device-hotplug-safe.patch
  (bsc#1215199 CVE-2025-38576 bsc#1248354).
- Update
  patches.suse/staging-fbtft-fix-potential-memory-leak-in-fbtft_fra.patch
  (git-fixes CVE-2025-38612 bsc#1248390).
- Update
  patches.suse/sunrpc-fix-client-side-handling-of-tls-alerts.patch
  (git-fixes CVE-2025-38571 bsc#1248401).
- Update
  patches.suse/sunrpc-fix-handling-of-server-side-tls-alerts.patch
  (git-fixes CVE-2025-38566 bsc#1248374).
- Update
  patches.suse/tls-stop-recv-if-initial-process_rx_list-gave-us-non.patch
  (bsc#1221858 CVE-2024-58239 bsc#1248614).
- Update
  patches.suse/usb-gadget-fix-use-after-free-in-composite_dev_clean.patch
  (git-fixes CVE-2025-38555 bsc#1248297).
- Update
  patches.suse/wifi-ath11k-clear-initialized-flag-for-deinit-ed-srn.patch
  (git-fixes CVE-2025-38601 bsc#1248340).
- Update
  patches.suse/wifi-iwlwifi-Fix-error-code-in-iwl_op_mode_dvm_start.patch
  (git-fixes CVE-2025-38656 bsc#1248643).
- Update
  patches.suse/wifi-mac80211-reject-TDLS-operations-when-station-is.patch
  (git-fixes CVE-2025-38644 bsc#1248748).
- Update
  patches.suse/wifi-mt76-mt7925-Fix-null-ptr-deref-in-mt7925_therma.patch
  (git-fixes CVE-2025-38541 bsc#1248216).
- Update
  patches.suse/wifi-prevent-A-MSDU-attacks-in-mesh-networks.patch
  (stable-fixes CVE-2025-38512 bsc#1248178).
- Update
  patches.suse/wifi-rtl818x-Kill-URBs-before-clearing-tx-status-que.patch
  (git-fixes CVE-2025-38604 bsc#1248333).
- Update
  patches.suse/wifi-rtw89-avoid-NULL-dereference-when-RX-problemati.patch
  (git-fixes CVE-2025-38646 bsc#1248577).
- Update
  patches.suse/wifi-zd1211rw-Fix-potential-NULL-pointer-dereference.patch
  (git-fixes CVE-2025-38513 bsc#1248179).
- commit efc5ee0</changelog>
  <changelog author="nik.borisov@suse.com" date="1756728000">- RAS/AMD/ATL: Include row bit in row retirement (bsc#1242034).
- commit fa3fcbb</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1756728001">- ixgbe: fix ixgbe_orom_civd_info struct layout (bsc#1245410).
- commit 53ae51b</changelog>
  <changelog author="nik.borisov@suse.com" date="1756728002">- RAS/AMD/FMPM: Get masked address (bsc#1242034).
- commit 4171987</changelog>
  <changelog author="nik.borisov@suse.com" date="1756728003">- RAS/AMD/FMPM: Use atl internal.h for INVALID_SPA (bsc#1242034).
- commit ac5d9dc</changelog>
  <changelog author="pmladek@suse.com" date="1756728004">- slab: Decouple slab_debug and no_hash_pointers (bsc#1249022).
- commit 41f928f</changelog>
  <changelog author="jgross@suse.com" date="1756728005">- KVM: Allow CPU to reschedule while setting per-page memory
  attributes (bsc#1248186 CVE-2025-38506).
- commit a7f8a41</changelog>
  <changelog author="nmorey@suse.com" date="1756728006">- RDMA/core: reduce stack using in nldev_stat_get_doit() (git-fixes)
- commit 1ff622a</changelog>
  <changelog author="nmorey@suse.com" date="1756728007">- RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (git-fixes)
- commit 5289b12</changelog>
  <changelog author="jgross@suse.com" date="1756728008">- vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1248511
  CVE-2025-38618).
- commit 0256bd0</changelog>
  <changelog author="tiwai@suse.de" date="1756728009">- staging: media: atomisp: Fix stack buffer overflow in
  gmin_get_var_int() (CVE-2025-38585 bsc#1248355).
- commit f7d8b23</changelog>
  <changelog author="msuchanek@suse.de" date="1757419200">- kernel-subpackage-build: Decompress ghost file when compressed version exists (bsc#1249346)
- commit 40606b5</changelog>
</package>
<package pkgid="1d8d5c3d40bfe3a6f11e36fea321d666b695940ec4c1ebbc76df889247329bd2" name="kernel-default" arch="src">
  <version epoch="0" ver="6.4.0" rel="150700.53.19.1"/>
  <changelog author="pmladek@suse.com" date="1759492800">- kbuild/modpost: Continue processing all unresolved symbols
  when KLP_SYM_RELA is found (bsc#1218644, bsc#1250655).
- commit ec0a51c</changelog>
  <changelog author="ailiop@suse.com" date="1759492801">- Squashfs: fix uninit-value in squashfs_get_parent (git-fixes).
- commit 126861e</changelog>
  <changelog author="pjakobsson@suse.de" date="1759492802">- Replace drm-backport-placeholder with actual jira tickets
  For unknown reasons a portion of the patches didn't get their
  placeholder tag replaced during the drm backport. Let's fix them now.
- Update patches.suse/0001-PCI-Add-pci_get_base_class-helper.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0001-accel-ivpu-Annotate-struct-ivpu_job-with-__counted_b.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0001-drm-prime-Unexport-helpers-for-fd-handle-conversion.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071 bsc#1212533).
- Update
  patches.suse/0001-drm-vmwgfx-Keep-a-gem-reference-to-user-bos-in-surfa.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  CVE-2023-5633, bsc#1216527).
- Update
  patches.suse/0001-mm-factor-out-VMA-stack-and-heap-checks.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0002-PCI-Add-pci_is_vga-helper.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0002-drm-amdkfd-use-vma_is_initial_stack-and-vma_is_initi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0002-drm-sched-Make-sure-we-wait-for-all-dependencies-in-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0002-drm-tests-Use-KUNIT_DEFINE_ACTION_WRAPPER.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0002-fbdev-Simplify-fb_is_primary_device-for-x86.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0003-drm-vc4-tests-Use-KUNIT_DEFINE_ACTION_WRAPPER.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0003-fbdev-Prepare-generic-architecture-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0004-arch-x86-Implement-asm-fb.h-with-generic-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0004-drm-tests-Switch-to-kunit-devices.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0005-drm-modes-replace-deprecated-strncpy-with-strscpy_pa.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0005-drm-ttm-fix-warning-that-we-shouldn-t-mix-and.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0006-accel-ivpu-Use-struct_size.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0006-arch-arm64-Implement-asm-fb.h-with-generic-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0006-drivers-gpu-drm-i915-i915_memcpy.c-fix-missing-inclu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0006-drm-nouveau-kms-nv50-Fix-drm_dp_remove_payload-invoc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0006-drm-rockchip-vop-Add-rv1126-vop_lite-support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0007-accel-ivpu-Remove-configuration-of-MMU-TBU1-and-TBU3.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0007-arch-sparc-Implement-fb_is_primary_device-in-source-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0007-docs-driver-api-properly-format-ToC-headings.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0007-drm-rockchip-dsi-Add-rv1126-MIPI-DSI-support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0007-drm-sched-Call-drm_sched_fence_set_parent-from-drm_s.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0008-accel-ivpu-Add-MMU-support-for-4-level-page-mappings.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0008-accel-ivpu-Document-DRM_IVPU_PARAM_CAPABILITIES.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0008-arch-ia64-Implement-asm-fb.h-with-generic-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0008-drm-atomic-helper-Fix-spelling-mistake-preceeding-pr.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0009-accel-ivpu-Make-DMA-bit-mask-HW-specific.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0009-arch-loongarch-Implement-asm-fb.h-with-generic-helpe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0009-drm-extract-closefb-logic-in-separate-function.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0010-accel-ivpu-Rename-and-cleanup-MMU600-page-tables.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0010-arch-mips-Implement-asm-fb.h-with-generic-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0010-drm-introduce-CLOSEFB-IOCTL.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0011-accel-ivpu-Mark-64-kB-contiguous-areas-as-contiguous.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0011-arch-sparc-Implement-asm-fb.h-with-generic-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0011-drm-doc-describe-PATH-format-for-DP-MST.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0012-accel-qaic-Enable-1-MSI-fallback-mode.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0012-arch-x86-Include-asm-fb.h-in-fbdev-source-file.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0012-drm-bridge-lvds-codec-Implement-atomic_get_input_bus.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0013-accel-qaic-Add-support-for-periodic-timesync.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0013-fbdev-Include-linux-io.h-in-various-drivers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0014-accel-qaic-Support-MHI-QAIC_TIMESYNC-channel.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0014-fbdev-Include-linux-fb.h-instead-of-asm-fb.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0015-drm-rockchip-vop-Use-cleanup-helper-directly-as-dest.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0015-fbdev-Move-framebuffer-I-O-helpers-into-asm-fb.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0016-accel-ivpu-Update-FW-API.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0016-fbdev-Rename-fb_mem-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0017-accel-ivpu-Remove-unneeded-drm_driver-declaration.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0017-drm-radeon-Replace-all-non-returning-strlcpy-with-st.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0017-minmax-add-in_range-macro.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0018-accel-ivpu-Add-dvfs_mode-file-to-debugfs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0018-drm-amd-pm-Replace-all-non-returning-strlcpy-with-st.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0018-drm-i915-Move-abs_diff-to-math.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0018-x86-fbdev-Include-asm-fb.h-as-needed.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0019-accel-ivpu-Remove-reset-from-power-up-sequence.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0019-drm-bridge-panel-Add-a-device-link-between-drm-devic.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0019-drm-display-dp_mst-Replace-all-non-returning-strlcpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0019-drm-panel-edp-Add-AUO-B116XAB01.4-edp-panel-entry.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0020-accel-ivpu-Add-support-for-VPU_JOB_FLAGS_NULL_SUBMIS.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0020-drm-panel-s6d7aa0-remove-the-unneeded-variable-in-s6.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0020-drm-panel-simple-Add-support-for-Mitsubishi-AA084XE0.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0020-drm-rockchip-Replace-all-non-returning-strlcpy-with-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0021-accel-ivpu-Change-test_mode-module-param-to-bitmask.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0021-drm-mediatek-Replace-all-non-returning-strlcpy-with-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0021-drm-panel-Add-driver-for-Visionox-r66451-panel.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0021-drm-panel-JDI-LT070ME05000-drop-broken-link.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0022-accel-ivpu-40xx-Capture-D0i3-entry-host-and-device-t.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0022-drm-komeda-Convert-to-platform-remove-callback-retur.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0022-drm-panel-Add-driver-for-JDI-LPM102A188A.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0022-drm-sun4i-hdmi-Replace-all-non-returning-strlcpy-wit.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0023-accel-ivpu-Pass-D0i3-residency-time-to-the-VPU-firmw.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0023-drm-arm-hdlcd-Convert-to-platform-remove-callback-re.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0023-drm-i2c-tda998x-Replace-all-non-returning-strlcpy-wi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0024-accel-ivpu-Introduce-ivpu_ipc_send_receive_active.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0024-drm-arm-malidp-Convert-to-platform-remove-callback-r.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0024-drm-panfrost-Do-not-check-for-0-return-after-calling.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0024-mm-gup-remove-unused-vmas-parameter-from-get_user_pa.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0025-accel-ivpu-Add-support-for-delayed-D0i3-entry-messag.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0025-doc-uapi-Add-document-describing-dma-buf-semantics.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0025-drm-aspeed-Convert-to-platform-remove-callback-retur.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0026-drm-atmel-hlcdc-Convert-to-platform-remove-callback-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0026-drm-gma500-remove-duplicate-macro-definitions.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0026-drm-v3d-wait-for-all-jobs-to-finish-before-unregiste.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0027-drm-fsl-dcu-Convert-to-platform-remove-callback-retu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0027-drm-panfrost-Remove-incorrect-IS_ERR-check.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0027-fbdev-hitfb-Declare-hitfb_blank-as-static.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0028-drm-gma500-Remove-unused-declarations.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0028-drm-hisilicon-Convert-to-platform-remove-callback-re.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0028-fbdev-metronomefb-Add-MODULE_FIRMWARE-macro.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0029-drm-lima-Convert-to-platform-remove-callback-returni.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0029-drm-repaper-fix-Wvoid-pointer-to-enum-cast-warning.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0029-fbdev-broadsheetfb-Add-MODULE_FIRMWARE-macro.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0030-accel-ivpu-40xx-Allow-to-change-profiling-frequency.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0030-drm-logicvc-Convert-to-platform-remove-callback-retu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0030-drm-tests-Test-default-pitch-fallback.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0030-video-hdmi-Reorder-fields-in-struct-hdmi_avi_infofra.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0031-accel-ivpu-Assure-device-is-off-if-power-up-sequence.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0031-drm-mcde-Convert-to-platform-remove-callback-returni.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0031-drm-tests-Add-KUnit-tests-for-drm_fb_swab.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0031-fbdev-media-Use-GPIO-descriptors-for-VIA-GPIO.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0032-accel-ivpu-Stop-job_done_thread-on-suspend.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0032-drm-meson-Convert-to-platform-remove-callback-return.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0032-drm-tests-Add-KUnit-tests-for-drm_fb_clip_offset.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0032-fbdev-hitfb-Fix-integer-to-pointer-cast.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0033-accel-ivpu-Abort-pending-rx-ipc-on-reset.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0033-drm-mxsfb-Convert-to-platform-remove-callback-return.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0033-drm-tests-Add-KUnit-tests-for-drm_fb_build_fourcc_li.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0033-fbdev-hitfb-Use-NULL-for-pointers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0034-accel-ivpu-Print-CMDQ-errors-after-consumer-timeout.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0034-drm-panel-Convert-to-platform-remove-callback-return.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0034-drm-tests-Add-multi-plane-support-to-conversion_buf_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0034-fbdev-sh_mobile_lcdcfb-Fix-ARGB32-overlay-format-typ.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0035-accel-ivpu-Make-DMA-allocations-for-MMU600-write-com.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0035-drm-panfrost-Convert-to-platform-remove-callback-ret.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0035-drm-tests-Add-KUnit-tests-for-drm_fb_memcpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0035-fbdev-sh7760fb-Fix-Wimplicit-fallthrough-warnings.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0036-accel-ivpu-Simplify-MMU-SYNC-command.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0036-drm-rockchip-Convert-to-platform-remove-callback-ret.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0036-fbdev-sbus-Build-sbuslib.o-if-CONFIG_FB_SBUS-has-bee.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0037-accel-ivpu-Rename-VPU-to-NPU-in-product-strings.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0037-drm-sti-Convert-to-platform-remove-callback-returnin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0037-drm-vkms-Use-drmm_crtc_init_with_planes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0037-fbdev-sbus-Forward-declare-all-necessary-structures-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0038-drm-sched-Add-drm_sched_wqueue_-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0038-drm-stm-Convert-to-platform-remove-callback-returnin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0038-drm-vkms-Use-drmm_mode_config_init.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0038-fbdev-sbus-Add-initializer-macros-and-Kconfig-tokens.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0039-drm-bridge-fsl-ldb-Add-i.MX6SX-support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0039-drm-sched-Convert-drm-scheduler-to-use-a-work-queue-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0039-drm-sun4i-Convert-to-platform-remove-callback-return.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0039-fbdev-bw2-Use-initializer-macro-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0040-drm-sched-Split-free_job-into-own-work-item.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0040-drm-tidss-Convert-to-platform-remove-callback-return.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0040-fbdev-cg14-Use-initializer-macro-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0041-drm-gma500-Use-drm_aperture_remove_conflicting_pci_f.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0041-drm-sched-Add-drm_sched_start_timeout_unlocked-helpe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0041-drm-tiny-Convert-to-platform-remove-callback-returni.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0041-fbdev-cg3-Use-initializer-macro-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0042-drm-sched-Add-a-helper-to-queue-TDR-immediately.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0042-drm-tve200-Convert-to-platform-remove-callback-retur.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0042-fbdev-cg6-Use-initializer-macro-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0042-video-aperture-use-generic-code-to-figure-out-the-vg.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0043-drm-aperture-Remove-primary-argument.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0043-drm-v3d-Convert-to-platform-remove-callback-returnin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0043-fbdev-ffb-Use-initializer-macro-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0043-fbdev-simplefb-Support-memory-region-property.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0044-drm-vc4-Convert-to-platform-remove-callback-returnin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0044-fbdev-leo-Use-initializer-macro-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0044-fbdev-simplefb-Add-support-for-generic-power-domains.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0044-video-aperture-Only-kick-vgacon-when-the-pdev-is-dec.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0045-drm-v3d-update-UAPI-to-match-user-space-for-V3D-7.x.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0045-drm-xlnx-zynqmp_dpsub-Convert-to-platform-remove-cal.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0045-fbdev-p9100-Use-initializer-macro-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0045-video-aperture-Move-vga-handling-to-pci-function.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0046-drm-rcar-du-Convert-to-platform-remove-callback-retu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0046-drm-v3d-fix-up-register-addresses-for-V3D-7.x.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0046-fbdev-tcx-Use-initializer-macro-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0046-video-aperture-Drop-primary-argument.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0047-drm-debugfs-drop-debugfs_init-for-the-render-and-acc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0047-drm-tilcdc-Convert-to-platform-remove-callback-retur.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0047-drm-v3d-add-brcm-2712-v3d-as-a-compatible-V3D-device.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0047-video-aperture-Only-remove-sysfb-on-the-default-vga-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0048-accel-qaic-Quiet-array-bounds-check-on-DMA-abort-mes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0048-drm-debugfs-disallow-debugfs-access-when-device-isn-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0048-drm-omap-Convert-to-platform-remove-callback-returni.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0048-video-aperture-Provide-a-VGA-helper-for-gma500-and-i.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0049-accel-qaic-Support-for-0-resize-slice-execution-in-B.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0049-dma-buf-dma-resv.c-fix-a-typo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0049-drm-ssd130x-Make-default-width-and-height-to-be-cont.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0050-drm-debugfs-rework-debugfs-directory-creation-v5.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0050-drm-panel-nt36523-Add-DCS-backlight-support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0050-drm-sched-Rename-drm_sched_get_cleanup_job-to-be-mor.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0050-drm-ssd130x-Set-the-page-height-value-in-the-device-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0051-drm-debugfs-remove-dev-debugfs_list-and-debugfs_mute.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0051-drm-panel-nt36523-Get-orientation-from-OF.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0051-drm-sched-Move-free-worker-re-queuing-out-of-the-if-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0051-drm-ssd130x-Don-t-allocate-buffers-on-each-plane-upd.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0052-drm-debugfs-rework-drm_debugfs_create_files-implemen.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0052-drm-panel-nt36523-Add-Lenovo-J606F-panel.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0052-drm-sched-Rename-drm_sched_free_job_queue-to-be-more.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0052-drm-ssd130x-Remove-hardcoded-bits-per-pixel-in-ssd13.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0053-accel-ivpu-Move-set-autosuspend-delay-to-HW-specific.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0053-drm-nouveau-debugfs-Move-an-expression-into-a-functi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0053-drm-sched-Rename-drm_sched_run_job_queue_if_ready-an.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0053-drm-virtio-Remove-unused-function-declarations.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0054-accel-ivpu-Remove-duplicated-error-messages.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0054-drm-ingenic-Kconfig-select-REGMAP-and-REGMAP_MMIO.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0054-drm-nouveau-debugfs-Move-a-variable-assignment-behin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0054-drm-sched-Drop-suffix-from-drm_sched_wakeup_if_can_q.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0054-fbdev-smscufx-Use-fb_ops-helpers-for-deferred-I-O.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0055-accel-ivpu-Make-ivpu_pm_init-void.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0055-drm-Do-not-round-to-megabytes-for-greater-than-1MiB-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0055-drm-nouveau-debugfs-Use-seq_putc-in-nouveau_debugfs_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0055-drm-tidss-Add-support-for-AM625-DSS.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0055-fbdev-udlfb-Use-fb_ops-helpers-for-deferred-I-O.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0056-accel-ivpu-Add-information-about-context-on-failure.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0056-drm-msm-Initialize-mmap-offset-after-constructing-th.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0056-drm-nouveau-debugfs-Replace-five-seq_printf-calls-by.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0056-drm-v3d-Implement-show_fdinfo-callback-for-GPU-usage.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0056-fbdev-Add-Kconfig-macro-FB_IOMEM_HELPERS_DEFERRED.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0057-accel-ivpu-Initialize-context-with-SSID-1.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0057-drm-Remove-struct-drm_driver.gem_prime_mmap.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0057-drm-nouveau-bios-power_budget-Move-an-expression-int.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0057-drm-v3d-Expose-the-total-GPU-usage-stats-on-sysfs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0057-fbdev-hyperv_fb-Use-fb_ops-helpers-for-deferred-I-O.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0058-accel-ivpu-Move-ivpu_fw_load-to-ivpu_fw_init.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0058-drm-amdgpu-Remove-struct-drm_driver.gem_prime_mmap.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0058-drm-bridge-it66121-Extend-match-support-for-OF-table.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0058-drm-nouveau-clk-Move-a-variable-assignment-behind-a-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0059-accel-ivpu-37xx-Change-register-rename-leftovers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0059-accel-ivpu-Fix-compilation-with-CONFIG_PM-n.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0059-drm-nouveau-pci-Move-a-variable-assignment-behind-co.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0059-drm-vkms-Add-kernel-doc-to-the-function-vkms_compose.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0060-accel-ivpu-37xx-White-space-cleanup.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0060-drm-nouveau-pci-Move-an-expression-into-a-function-c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0060-drm-sched-Don-t-disturb-the-entity-when-in-RR-mode-s.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0060-drm-vkms-Fix-all-kernel-doc-warnings-of-the-vkms_com.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0061-accel-ivpu-Allocate-vpu_addr-in-gem-open-callback.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0061-accel-ivpu-Move-MMU-register-definitions-to-ivpu_mmu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0061-drm-bridge-lt9611uxc-Add-MODULE_FIRMWARE-macro.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0061-drm-nouveau-therm-Move-an-assignment-statement-behin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0062-accel-ivpu-Fix-locking-in-ivpu_bo_remove_all_bos_fro.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0062-accel-ivpu-Print-information-about-used-workarounds.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0062-dma-buf-heaps-Don-t-assert-held-reservation-lock-for.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0063-accel-ivpu-Remove-support-for-uncached-buffers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0063-drm-gem-Check-for-valid-formats.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0063-udmabuf-Don-t-assert-held-reservation-lock-for-dma-b.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0064-accel-ivpu-Use-GEM-shmem-helper-for-all-buffers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0064-drm-Don-t-assert-held-reservation-lock-for-dma-buf-m.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0064-drm-bridge-analogix-anx78xx-Drop-ID-table.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0064-video-Remove-trailing-whitespaces.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0065-dma-buf-Change-locking-policy-for-mmap.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0065-drm-bridge-Drop-conditionals-around-of_node-pointers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0065-drm-todo-Add-entry-to-clean-up-former-seltests-suite.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0065-video-Move-HP-PARISC-STI-core-code-to-shared-locatio.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0066-arch-parisc-Implement-fb_is_primary_device-under-arc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0066-drm-bridge-Drop-CONFIG_OF-conditionals-around-of_nod.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0066-drm-edid-split-out-drm_eld.h-from-drm_edid.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0066-drm-shmem-helper-Switch-to-reservation-lock.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0067-drm-bridge-tc358764-Use-BIT-macro-for-actual-bits.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0067-drm-bridge-ti-sn65dsi86-Implement-wait_hpd_asserted.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0067-drm-connector-document-DRM_MODE_COLORIMETRY_COUNT.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0067-drm-eld-replace-uint8_t-with-u8.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0068-drm-armada-Include-linux-of.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0068-drm-bridge-it66121-Simplify-probe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0068-drm-bridge-tc358762-Split-register-programming-from-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0068-drm-doc-rfc-No-STAGING-out-of-drivers-staging.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0068-drm-edid-include-drm_eld.h-only-where-required.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0069-drm-armada-Hide-fbdev-support-behind-config-option.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0069-drm-bridge-tc358762-Switch-to-atomic-ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0069-drm-doc-rfc-Mark-Dev_coredump-as-completed.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0069-drm-edid-use-a-temp-variable-for-sads-to-drop-one-le.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0070-drm-armada-Initialize-fbdev-DRM-client.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0070-drm-bridge-tc358762-Instruct-DSI-host-to-generate-HS.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0070-drm-doc-rfc-Mark-DRM_VM_BIND-as-complete.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0070-drm-edid-add-helpers-to-get-set-struct-cea_sad-from-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0071-drm-armada-Implement-fbdev-emulation-as-in-kernel-cl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0071-drm-bridge-tc358762-Guess-the-meaning-of-LCDCTRL-bit.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0071-drm-doc-rfc-Mark-GPU-VA-as-complete.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0071-drm-eld-add-helpers-to-modify-the-SADs-of-an-ELD.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0072-drm-bridge-tc358762-Handle-HS-VS-polarity.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0072-drm-debugfs-Add-inline-to-drm_debugfs_dev_init-to-su.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0072-drm-panel-simple-Add-InnoLux-G070ACE-L01.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0072-drm-sched-Qualify-drm_sched_wakeup-by-drm_sched_enti.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0073-drm-display-Add-missing-OLED-Vesa-brightnesses-defin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0073-drm-i2c-Switch-i2c-drivers-back-to-use-.probe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0073-drm-tests-Zero-initialize-fourccs_out.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0074-drm-bridge-anx7625-Drop-of_gpio-header.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0074-drm-mst-delete-unnecessary-case-in-drm_dp_add_payloa.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0075-drm-mgag200-set-variable-mgag200_modeset-storage-cla.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0075-drm-mst-Refactor-the-flow-for-payload-allocation-rem.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0075-drm-panel-edp-drm-panel-edp-Add-several-generic-edp-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0075-drm-sti-Drop-of_gpio-header.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0076-drm-fix-code-style-for-embedded-structs-in-hdr_metad.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0076-drm-imx-ipuv3-Convert-to-platform-remove-callback-re.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0076-drm-sched-Define-pr_fmt-for-DRM-using-pr_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0076-drm-tve200-Use-devm_platform_ioremap_resource.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0077-drm-ingenic-Convert-to-platform-remove-callback-retu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0077-drm-sched-implement-dynamic-job-flow-control.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0077-drm-scheduler-properly-forward-fence-errors.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0077-drm-sysfs-rename-drm_sysfs_connector_status_event.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0078-drm-bridge_connector-use-drm_kms_helper_connector_ho.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0078-drm-msm-Convert-to-platform-remove-callback-returnin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0078-drm-scheduler-add-drm_sched_entity_error-and-use-rcu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0079-drm-atomic-log-drm_atomic_replace_property_blob_from.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0079-drm-panfrost-Perform-hard-reset-to-recover-GPU-if-so.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0079-drm-shmobile-Convert-to-platform-remove-callback-ret.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0079-drm-tests-Add-test-cases-for-drm_rect_intersect.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0080-drm-atomic-drop-extra-bracket-from-log-messages.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0080-drm-panfrost-Tighten-polling-for-soft-reset-and-powe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0080-drm-ssd130x-Print-the-PWM-s-label-instead-of-its-num.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0080-drm-tests-Add-test-cases-for-drm_rect_calc_hscale.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0081-drm-atomic-log-when-getting-setting-unknown-properti.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0081-drm-panfrost-Implement-ability-to-turn-on-off-GPU-cl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0081-drm-tests-Add-test-cases-for-drm_rect_calc_vscale.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0082-drm-atomic-log-when-CRTC_ID-prop-value-is-invalid.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0082-drm-panfrost-Set-clocks-on-off-during-system-sleep-o.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0082-drm-ssd130x-Use-bool-for-ssd130x_deviceinfo-flags.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0082-drm-tests-Add-test-cases-for-drm_rect_rotate.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0083-drm-atomic-log-on-attempt-to-set-legacy-DPMS-propert.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0083-drm-panfrost-Implement-ability-to-turn-on-off-regula.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0083-drm-test-Add-test-cases-for-drm_rect_rotate_inv.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0083-fbdev-au1200fb-Do-not-display-boot-up-logo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0084-drm-atomic-log-when-page-flip-is-requested-without-C.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0084-drm-panfrost-Set-regulators-on-off-during-system-sle.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0084-fbdev-mmp-mmpfb-Do-not-display-boot-up-logo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0085-drm-atomic-log-errors-in-drm_mode_atomic_ioctl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0085-drm-vc4-Switch-to-container_of_const.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0085-drm-virtio-use-uint64_t-more-in-virtio_gpu_context_i.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0085-fbdev-core-Fix-style-of-code-for-boot-up-logo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0086-drm-kms-log-when-querying-an-object-not-included-in-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0086-drm-uapi-add-explicit-virtgpu-context-debug-name.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0086-drm-vc4-hdmi-Update-all-the-planes-if-the-TV-margins.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0086-fbdev-core-Unexport-logo-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0087-drm-bridge-ps8640-Drop-the-ability-of-ps8640-to-fetc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0087-drm-gpuvm-convert-WARN-to-drm_WARN-variants.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0087-drm-vc4-hdmi-Add-Broadcast-RGB-property-to-allow-ove.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0087-fbdev-core-Move-logo-functions-into-separate-source-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0088-drm-gpuvm-don-t-always-WARN-in-drm_gpuvm_check_overf.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0088-drm-vc4-hdmi-Rename-full-range-helper.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0088-drm-vkms-Reduce-critical-section.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0088-fbdev-core-Remove-empty-internal-helpers-from-fb_log.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0089-drm-gpuvm-export-drm_gpuvm_range_valid.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0089-drm-vc4-hdmi-Swap-CSC-matrix-channels-for-YUV444.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0089-drm-vkms-Enable-ARGB8888-support-for-writeback.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0089-fbdev-core-Clean-up-include-statements-in-fbmem.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0090-drm-buddy-Improve-contiguous-memory-allocation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0090-drm-nouveau-make-use-of-drm_gpuvm_range_valid.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0090-drm-vc4-hdmi-Rework-the-CSC-matrices-organization.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0090-drm-vkms-Isolate-writeback-pixel-conversion-function.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0091-drm-amdgpu-Move-the-size-computations-to-drm-buddy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0091-drm-gpuvm-add-common-dma-resv-per-struct-drm_gpuvm.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0091-drm-vc4-hdmi-Add-a-function-to-retrieve-the-CSC-matr.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0092-drm-i915-Move-the-size-computations-to-drm-buddy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0092-drm-nouveau-make-use-of-the-GPUVM-s-shared-dma-resv.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0092-drm-vc4-hdmi-Add-BT.601-Support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0093-drm-Clear-fd-handle-callbacks-in-struct-drm_driver.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071 bsc#1212533 bsc#1212533).
- Update
  patches.suse/0093-drm-gpuvm-add-drm_gpuvm_flags-to-drm_gpuvm.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0093-drm-panel-Don-t-store-check-prepared-enabled-for-sim.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0093-drm-vc4-hdmi-Add-BT.2020-Support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0094-drm-nouveau-separately-allocate-struct-nouveau_uvmm.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0094-drm-panel-s6e63m0-Don-t-store-check-prepared-enabled.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0095-drm-bridge-dw-hdmi-change-YUV420-selection-logic-at-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0095-drm-gpuvm-reference-count-drm_gpuvm-structures.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0095-drm-panel-otm8009a-Don-t-double-check-prepared-enabl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0095-drm-vkms-allow-full-alpha-blending-on-all-planes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0096-drm-atomic-helper-drm_atomic_helper_shutdown-NULL-sh.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0096-drm-bridge-dw-hdmi-truly-enforce-420-only-formats-wh.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0096-drm-gpuvm-add-an-abstraction-for-a-VM-BO-combination.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0096-drm-vkms-drop-full-alpha-blending-TODO.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0097-drm-bridge-dw-hdmi-remove-dead-code-and-fix-indentat.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0097-drm-doc-rfc-Introduce-the-merge-plan-for-the-Xe-driv.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0097-drm-gpuvm-track-lock-validate-external-evicted-objec.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0097-drm-imx-ipuv3-Call-drm_atomic_helper_shutdown-at-shu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0098-Revert-drm-sched-Define-pr_fmt-for-DRM-using-pr_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0098-drm-ingenic-Call-drm_atomic_helper_shutdown-at-shutd.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0098-drm-panel-st7703-Rename-CMD_UNKNOWN_C6-to-CMD_SETECO.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0099-backlight-bd6107-Rename-struct-bd6107_platform_data..patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0099-drm-amd-display-Fix-Wuninitialized-in-dm_helpers_dp_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0099-drm-format-helper-Cache-buffers-with-struct-drm_form.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0099-drm-panel-st7703-Add-Anbernic-RG353V-V2-Panel-Suppor.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0100-drm-atomic-helper-Add-format-conversion-state-to-sha.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0100-drm-debugfs-Fix-drm_debugfs_remove_files-stub.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0100-drm-meson-set-variables-meson_hdmi_-storage-class-sp.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0101-backlight-gpio_backlight-Rename-field-fbdev-to-dev.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0101-drm-format-helper-Pass-format-conversion-state-to-he.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0101-drm-ssd130x-Store-the-HW-buffer-in-the-driver-privat.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0101-drm-uapi-Document-CTM-matrix-better.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0102-drm-ofdrm-Preallocate-format-conversion-buffer-in-at.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0103-backlight-lv5207lp-Rename-struct-lv5207lp_platform_d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0103-drm-komeda-add-NV12-format-to-support-writeback-laye.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0103-drm-simpledrm-Preallocate-format-conversion-buffer-i.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0103-drm-sysfs-Expose-DRM-connector-id-in-each-connector-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0104-drm-nouveau-nvif-refactor-deprecated-strncpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0104-drm-ssd130x-Preallocate-format-conversion-buffer-in-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0104-drm-sysfs-Link-DRM-connectors-to-corresponding-Type-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0104-fbdev-atyfb-Reorder-backlight-and-framebuffer-init-c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0105-drm-Remove-struct-drm_flip_task-from-DRM-interfaces.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0105-drm-nouveau-core-refactor-deprecated-strncpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0105-drm-sti-sti_hdmi-convert-to-using-is_hdmi-from-displ.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0105-fbdev-atyfb-Use-hardware-device-as-backlight-parent.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0106-drm-Fix-flip-task-docs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0106-drm-nouveau-pm-refactor-deprecated-strncpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0106-drm-rockchip-cdn-dp-call-drm_connector_update_edid_p.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0106-fbdev-aty128fb-Reorder-backlight-and-framebuffer-ini.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0107-drm-bridge-dw-hdmi-cec-Add-arbitration-lost-event.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0107-drm-scheduler-mark-jobs-without-fence-as-canceled.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0107-drm-virtio-Fix-return-value-for-VIRTGPU_CONTEXT_PARA.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0107-fbdev-aty128fb-Use-hardware-device-as-backlight-pare.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0108-drm-dp_mst-Fix-NULL-dereference-during-payload-addit.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0108-drm-test-rearrange-test-entries-in-Kconfig-and-Makef.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0108-drm-udl-delete-dead-code.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0108-fbdev-broadsheetfb-Call-device_remove_file-with-hard.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0109-drm-client-Do-not-acquire-module-reference.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0109-drm-dp_mst-Sanitize-error-return-during-payload-addi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0109-fbdev-ep93xx-fb-Alloc-DMA-memory-from-hardware-devic.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0110-accel-ivpu-Rename-cons-rx_msg_lock.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0110-drm-dp_mst-Tune-down-error-message-during-payload-ad.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0110-fbdev-ep93xx-fb-Output-messages-with-fb_info-and-fb_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0111-accel-ivpu-Do-not-use-irqsave-in-ivpu_ipc_dispatch.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0111-drm-nouveau-devinit-tu102-remove-attempt-at-loading-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0112-accel-ivpu-Do-not-use-cons-aborted-for-job_done_thre.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0112-drm-nouveau-imem-support-allocations-not-preserved-a.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0112-fbdev-fsl-diu-fb-Output-messages-with-fb_-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0113-accel-ivpu-Use-dedicated-work-for-job-timeout-detect.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0113-accel-qaic-Register-for-PCI-driver-at-the-beginning-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0113-drm-nouveau-gr-gf100-lose-contents-of-global-ctxbufs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0113-fbdev-mb862xxfb-Output-messages-with-fb_dbg.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0114-accel-ivpu-Use-threaded-IRQ-to-handle-JOB-done-messa.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0114-accel-qaic-Use-devm_drm_dev_alloc-instead-of-drm_dev.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0114-drm-nouveau-mmu-gp100-always-invalidate-TLBs-at-CACH.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0114-fbdev-metronomefb-Use-hardware-device-for-dev_err.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0115-accel-qaic-Update-MAX_ORDER-use-to-be-inclusive.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0115-drm-nouveau-kms-nv50-fix-mst-payload-alloc-fail-cras.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0115-fbdev-nvidiafb-Reorder-backlight-and-framebuffer-ini.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0116-drm-nouveau-disp-rearrange-output-methods.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0116-drm-print-Handle-NULL-drm-device-in-__drm_printk.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0116-fbdev-nvidiafb-Use-hardware-device-as-backlight-pare.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0117-drm-nouveau-disp-add-output-detect-method.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0117-fbdev-pxa168fb-Do-not-assign-to-struct-fb_info.dev.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0118-drm-nouveau-disp-add-output-method-to-fetch-edid.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0118-drm-panel-nv3051d-Add-Powkiddy-RK2023-Panel-Support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0118-fbdev-radeonfb-Reorder-backlight-and-framebuffer-cle.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0119-drm-nouveau-disp-rename-internal-output-acquire-rele.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0119-drm-panel-elida-kd35t133-trival-update-panel-size-fr.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0119-fbdev-radeonfb-Use-hardware-device-as-backlight-pare.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0120-drm-bridge-tc358768-remove-unused-variable.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0120-drm-nouveau-kms-Add-INHERIT-ioctl-to-nvkm-nvif-for-r.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0120-fbdev-rivafb-Reorder-backlight-and-framebuffer-init-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0121-drm-bridge-lt9211-Do-not-generate-HFP-HBP-HSA-and-EO.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0121-drm-nouveau-disp-shuffle-to-make-upcoming-diffs-pret.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0121-drm-panel-elida-kd35t133-drop-drm_connector_set_orie.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0121-fbdev-rivafb-Use-hardware-device-as-backlight-parent.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0122-drm-bridge-lt9611-Do-not-generate-HFP-HBP-HSA-and-EO.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0122-drm-nouveau-disp-add-acquire_dac.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0122-drm-panel-elida-kd35t133-Drop-shutdown-logic.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0122-fbdev-sh7760fb-Use-fb_dbg-in-sh7760fb_get_color_info.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0123-drm-nouveau-disp-add-acquire_sor-pior.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0123-drm-panel-elida-kd35t133-Drop-prepare-unprepare-logi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0123-fbdev-sh7760fb-Output-messages-with-fb_dbg.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0124-dma-buf-Replace-strlcpy-with-strscpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0124-drm-nouveau-disp-update-SOR-routing-immediately-on-a.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0124-drm-vkms-add-rotate-0-and-reflect-x-property.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0124-fbdev-sh7760fb-Alloc-DMA-memory-from-hardware-device.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0125-drm-nouveau-kms-nv50-pull-some-common-init-out-of-OR.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0125-drm-rockchip-vop2-Add-NV20-and-NV30-support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0125-drm-vkms-add-reflect-y-and-rotate-180-property.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0125-fbdev-sh7760fb-Use-hardware-device-with-dev_-output-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0126-drm-nouveau-kms-nv50-remove-nv_encoder.audio.connect.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0126-drm-rockchip-rk3066_hdmi-Remove-useless-mode_fixup.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0126-drm-vkms-add-rotate-90-property.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0126-fbdev-sm501fb-Output-message-with-fb_err.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0127-drm-nouveau-kms-nv50-keep-output-state-around-until-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0127-drm-rockchip-rk3066_hdmi-Switch-encoder-hooks-to-ato.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0127-drm-vkms-add-rotate-270-property.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0127-fbdev-smscufx-Detect-registered-fb_info-from-refcoun.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0128-drm-nouveau-kms-nv50-move-audio-enable-post-modeset.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0128-drm-vkms-drop-Rotation-TODO.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0128-fbdev-tdfxfb-Set-i2c-adapter-parent-to-hardware-devi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0129-drm-nouveau-disp-add-output-hdmi-config-method.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0129-fbdev-arcfb-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0129-fbdev-core-Pass-Linux-device-to-pm_vt_switch_-functi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0130-drm-arcpgu-Convert-to-platform-remove-callback-retur.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0130-drm-nouveau-disp-move-hdmi-disable-out-of-release.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0130-fbdev-au1200fb-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0130-fbdev-core-Move-framebuffer-and-backlight-helpers-in.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0131-drm-armada-Convert-to-platform-remove-callback-retur.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0131-drm-nouveau-disp-release-outputs-post-modeset.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0131-fbdev-broadsheetfb-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0131-fbdev-core-Add-fb_device_-create-destroy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0132-drm-bridge-cdns-mhdp8546-Improve-error-reporting-in-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0132-drm-nouveau-disp-remove-SOR-routing-updates-from-sup.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0132-fbdev-core-Move-procfs-code-to-separate-file.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0132-fbdev-hecubafb-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0133-drm-bridge-cdns-mhdp8546-Convert-to-platform-remove-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0133-drm-nouveau-disp-add-output-backlight-control-method.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0133-fbdev-core-Move-file-I-O-code-into-separate-file.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0133-fbdev-metronomefb-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0134-drm-bridge-tpd12s015-Convert-to-platform-remove-call.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0134-drm-nouveau-disp-add-output-lvds-config-method.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0134-fbdev-core-Rework-fb-init-code.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0134-fbdev-ps3fb-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0135-drm-etnaviv-Convert-to-platform-remove-callback-retu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0135-drm-nouveau-disp-add-hdmi-audio-hal-function.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0135-fbdev-Make-support-for-userspace-interfaces-configur.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0135-fbdev-smscufx-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0136-drm-imx-dcss-Convert-to-platform-remove-callback-ret.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0136-drm-nouveau-disp-move-dp-aux-pwr-method-to-HAL.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0136-drm-ttm-Don-t-shadow-the-operation-context.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0136-fbdev-udlfb-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0137-drm-imx-lcdc-Convert-to-platform-remove-callback-ret.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0137-drm-nouveau-disp-add-dp-aux-xfer-method.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0137-fbdev-vfb-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0138-drm-ast-Remove-vga2_clone-field.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0138-drm-kmb-Convert-to-platform-remove-callback-returnin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0138-drm-nouveau-disp-add-dp-rates-method.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0138-fbdev-xen-fbfront-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0139-drm-ast-Implement-register-helpers-in-ast_drv.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0139-drm-mediatek-Convert-to-platform-remove-callback-ret.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0139-drm-nouveau-kms-nv50-split-DP-disable-enable-into-tw.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0139-fbdev-Return-number-of-bytes-read-or-written.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0140-drm-ast-Remove-dead-else-branch-in-POST-code.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0140-drm-meson-Convert-to-platform-remove-callback-return.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0140-drm-nouveau-kms-nv50-flush-mst-disables-together.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0140-fbdev-Use-screen_buffer-in-fb_sys_-read-write.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0141-drm-ast-Remove-device-POSTing-and-config-from-chip-d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0141-drm-nouveau-Convert-to-platform-remove-callback-retu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0141-drm-nouveau-kms-nv50-fixup-sink-D3-before-tearing-do.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0141-fbdev-Don-t-re-validate-info-state-in-fb_ops-impleme.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0142-drm-ast-Set-PCI-config-before-accessing-I-O-register.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0142-drm-nouveau-disp-add-dp-train-method.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0142-drm-sprd-Convert-to-platform-remove-callback-returni.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0142-fbdev-Validate-info-screen_-base-buffer-in-fb_ops-im.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0143-drm-ast-Enable-and-unlock-device-access-early-during.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0143-drm-nouveau-disp-move-link-training-out-of-superviso.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0143-fbdev-Move-I-O-read-and-write-code-into-helper-funct.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0144-drm-ast-Set-up-release-action-right-after-enabling-M.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0144-drm-edid-firmware-drop-drm_kms_helper.edid_firmware-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0144-drm-fb-helper-Use-fb_-cfb-sys-_-read-write.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0144-drm-nouveau-disp-add-dp-sst-config-method.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0145-Documentation-vkms-clarify-devres-managed-reference-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0145-drm-ast-Distinguish-among-chip-generations.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0145-drm-nouveau-disp-add-dp-mst-id-get-put-methods.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0145-fbdev-simplefb-Suppress-error-on-missing-power-domai.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0146-drm-ast-Detect-AST-1300-model.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0146-drm-connector-document-enum-drm_connector_tv_mode-DR.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0146-drm-nouveau-disp-move-outp-conn-construction-to-chip.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0146-drm-nouveau-fifo-Remove-duplicated-include-in-chan.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0147-drm-ast-Detect-AST-1400-model.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0147-drm-nouveau-disp-move-outp-init-fini-paths-to-chipse.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0147-drm-rockchip-rk3066_hdmi-include-drm-drm_atomic.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0147-drm-sun4i-rename-sun4i_dotclock-to-sun4i_tcon_dclk.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0148-drm-ast-Detect-AST-2510-model.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0148-drm-gpuvm-Helper-to-get-range-of-unmap-from-a-remap-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0148-drm-nouveau-disp-nv50-skip-DCB_OUTPUT_TV.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0148-drm-sun4i-calculate-proper-DCLK-rate-for-DSI.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0149-drm-ast-Move-widescreen-and-tx-chip-detection-into-s.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0149-drm-nouveau-kms-nv50-create-heads-based-on-nvkm-head.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0149-dt-bindings-gpu-Add-Imagination-Technologies-PowerVR.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0150-drm-ast-Merge-config-and-chip-detection.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0150-drm-imagination-uapi-Add-PowerVR-driver-UAPI.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0150-drm-nouveau-kms-nv50-create-heads-after-outps-conns.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0151-drm-edid-make-read-only-const-array-static.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0151-drm-imagination-Add-skeleton-PowerVR-driver.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0151-drm-nouveau-kms-nv50-name-aux-channels-after-their-c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0151-drm-panel-sharp-ls043t1le01-drop-dummy-functions-and.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0152-drm-imagination-Get-GPU-resources.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0152-drm-nouveau-kms-nv50-create-connectors-based-on-nvkm.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0152-drm-panel-panel-simple-Add-BOE-EV121WXM-N10-1850-pan.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0152-drm-tests-Fix-swapped-drm_framebuffer-tests-paramete.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0153-drivers-firmware-Move-sysfb_init-from-device_initcal.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0153-drm-edid-Add-quirk-for-OSVR-HDK-2.0.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0153-drm-imagination-Add-GPU-register-headers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0153-drm-nouveau-kms-nv50-create-outputs-based-on-nvkm-in.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0154-drm-bridge-samsung-dsim-Drain-command-transfer-FIFO-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0154-drm-imagination-Add-firmware-and-MMU-related-headers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0154-drm-nouveau-kms-nv50-disable-dcb-parsing.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0154-drm-ssd130x-Fix-include-guard-name.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0155-drm-bridge-analogix-anx78xx-Add-missing-definition.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0155-drm-gud-use-vmalloc_array-and-vcalloc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0155-drm-imagination-Add-FWIF-headers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0155-drm-panel-boe-tv101wum-nl6-Remove-extra-delay.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0156-drm-drm_gem.c-Remove-surplus-else-after-return.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0156-drm-imagination-Add-GPU-ID-parsing-and-firmware-load.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0156-drm-panel-boe-tv101wum-nl6-Fine-tune-the-panel-power.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0156-drm-tegra-rgb-Parameterize-V-and-H-sync-polarities.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0157-drm-Add-kms-driver-for-loongson-display-controller.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0157-drm-imagination-Add-GEM-and-VM-related-code.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0158-drm-bridge-tc358768-Default-to-positive-h-v-syncs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0158-drm-imagination-Implement-power-management.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0158-drm-nouveau-nvkm-fini-object-children-in-reverse-ord.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0159-drm-imagination-Implement-firmware-infrastructure-an.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0159-drm-nouveau-nvkm-punt-spurious-irq-messages-to-debug.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0159-gpu-drm-bridge-No-need-to-set-device_driver-owner.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0160-drm-bridge-tc358768-Cleanup-PLL-calculations.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0160-drm-bridge-tc358768-remove-unneeded-semicolon.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0160-drm-imagination-Implement-MIPS-firmware-processor-an.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0160-drm-nouveau-fb-gp102-ga100-switch-to-simpler-vram-si.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0161-accel-ivpu-Initial-debugfs-support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0161-drm-imagination-Implement-free-list-and-HWRT-create-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0161-drm-nouveau-fb-ga102-construct-vidmem-heap-via-new-g.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0161-drm-panel-Modify-innolux-hj110iz-panel-initial-code.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0162-accel-ivpu-Add-firmware-tracing-support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0162-drm-drm_atomic_helper.c-fix-a-typo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0162-drm-imagination-Implement-context-creation-destructi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0162-drm-nouveau-fifo-remove-left-over-references-to-nvkm.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0163-accel-ivpu-Add-debugfs-files-for-testing-device-rese.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0163-drm-imagination-Implement-job-submission-and-schedul.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0163-drm-nouveau-fifo-return-ERR_PTR-from-nvkm_runl_new.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0163-drm-ttm-let-struct-ttm_device_funcs-be-placed-in-rod.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0164-accel-ivpu-Print-firmware-name-and-version.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0164-drm-imagination-Add-firmware-trace-header.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0164-drm-nouveau-fifo-ga100-remove-individual-runlists-ra.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0165-accel-ivpu-Add-fw_name-file-to-debugfs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0165-drm-imagination-Add-firmware-trace-to-debugfs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0165-drm-nouveau-fifo-ga100-add-per-runlist-nonstall-intr.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0165-fbdev-hitfb-Cast-I-O-offset-to-address.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0166-drm-imagination-Add-driver-documentation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0166-drm-nouveau-nvif-fix-potential-double-free.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0166-fbdev-matrox-Remove-trailing-whitespaces.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0167-drm-bridge-tc358768-Attempt-to-fix-DSI-horizontal-ti.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0167-drm-nouveau-kms-don-t-call-drm_dp_cec_set_edid-on-TM.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0167-ipu-v3-Include-linux-io.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0168-drm-i915-display-Use-intel_bo_to_drm_bo-instead-of-o.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0168-drm-nouveau-disp-drop-unused-argument-in-nv50_dp_mod.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0168-drm-sched-Rename-to-drm_sched_can_queue.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0169-drm-bridge-panel-Fix-device-link-for-DRM_BRIDGE_ATTA.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0169-drm-i915-drop-gt-intel_gt.h-include-from-skl_univers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0169-drm-sched-Rename-to-drm_sched_wakeup_if_can_queue.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0169-fbdev-sm712fb-Do-not-include-linux-screen_info.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0170-drm-armada-Call-drm_atomic_helper_shutdown-at-shutdo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0170-drm-i915-aux-add-separate-register-macros-and-functi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0170-drm-panel-Add-Samsung-S6D7AA0-panel-controller-drive.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0170-sysfb-Do-not-include-linux-screen_info.h-from-sysfb-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0171-drm-Call-drm_atomic_helper_shutdown-at-shutdown-time.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0171-drm-bridge-samsung-dsim-Implement-support-for-clock-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0171-drm-i915-aux-rename-dev_priv-to-i915.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0171-fbdev-broadsheetfb-Select-FB_SYS_HELPERS_DEFERRED.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0172-drm-i915-stop-including-i915_utils.h-from-intel_runt.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0172-drm-vc4-Call-drm_atomic_helper_shutdown-at-shutdown-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0172-fbdev-broadsheetfb-Generate-deferred-I-O-ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0173-drm-i915-display-debugfs-entry-to-list-display-capab.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0173-drm-nouveau-constify-pointers-to-hwmon_channel_info.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0173-drm-ssd130x-Call-drm_atomic_helper_shutdown-at-remov.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0173-fbdev-hecubafb-Select-FB_SYS_HELPERS_DEFERRED.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0174-drm-i915-display-Add-framework-to-add-parameters-spe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0174-drm-nouveau-acr-ga102-set-variable-ga102_gsps-storag.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0174-fbdev-hecubafb-Generate-deferred-I-O-ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0175-drm-hisilicon-kirin-Call-drm_atomic_helper_shutdown-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0175-drm-i915-display-Dump-also-display-parameters.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0175-drm-msm-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0175-fbdev-metronomefb-Select-FB_SYS_HELPERS_DEFERRED.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0176-drm-i915-display-Move-enable_fbc-module-parameter-un.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0176-fbdev-metronomefb-Generate-deferred-I-O-ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0177-drm-bridge-dw-hdmi-Replace-all-non-returning-strlcpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0177-drm-i915-display-Move-psr-related-module-parameters-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0177-drm-ssd130x-Drop-_helper-prefix-from-struct-drm_-_he.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0177-fbdev-ssd1307fb-Select-FB_SYS_HELPERS_DEFERRED.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0178-accel-qaic-Remove-size-field-from-struct-qaic_bo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0178-drm-i915-display-Move-vbt_firmware-module-parameter-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0178-drm-panel-samsung-s6d7aa0-use-pointer-for-drm_mode-i.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0178-fbdev-ssd1307fb-Generate-deferred-I-O-ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0179-dma-buf-sw_sync-Replace-all-non-returning-strlcpy-wi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0179-drm-i915-display-Move-lvds_channel_mode-module-param.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0179-drm-simpledrm-Add-support-for-multiple-power-domains.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0179-fbdev-xen-fbfront-Select-FB_SYS_HELPERS_DEFERRED.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0180-drm-bridge-Add-200ms-delay-to-wait-FW-HPD-status-sta.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0180-drm-i915-display-Move-panel_use_ssc-module-parameter.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0180-drm-shmobile-Use-p4cc-to-print-fourcc-codes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0180-fbdev-xen-fbfront-Generate-deferred-I-O-ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0181-drm-i915-display-Move-vbt_sdvo_panel_type-module-par.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0181-drm-imx-dcss-Call-drm_atomic_helper_shutdown-at-shut.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0181-drm-shmobile-Add-support-for-DRM_FORMAT_XRGB8888.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0182-drm-gpuvm-rename-struct-drm_gpuva_manager-to-struct-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0182-drm-i915-display-Move-enable_dc-module-parameter-und.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0182-drm-shmobile-Switch-to-drm_crtc_init_with_planes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0182-drm-virtio-Conditionally-allocate-virtio_gpu_fence.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0183-drm-gpuvm-allow-building-as-module.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0183-drm-i915-display-Move-enable_dpt-module-parameter-un.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0183-drm-shmobile-Add-missing-call-to-drm_fbdev_generic_s.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0183-nouveau-dispnv50-add-cursor-pitch-check.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0184-drm-i915-display-Move-enable_sagv-module-parameter-u.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0184-drm-nouveau-disp-use-drm_kms_helper_connector_hotplu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0184-drm-nouveau-uvmm-rename-umgr-to-base.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0184-drm-shmobile-Make-DRM_SHMOBILE-visible-on-Renesas-So.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0185-drm-bridge-tc358767-Use-devm_clk_get_enabled-helper.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0185-drm-docs-Fix-usage-stats-typos.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0185-drm-gma500-refactor-deprecated-strncpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0185-drm-i915-display-Move-disable_power_well-module-para.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0186-drm-Add-common-fdinfo-helper.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0186-drm-bridge-tfp410-Support-format-negotiation-hooks.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0186-drm-gpuvm-doc-fix-filename-references.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0186-drm-i915-display-Move-enable_ips-module-parameter-un.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0187-drm-bridge-tfp410-Set-input_bus_flags-in-atomic_chec.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0187-drm-i915-display-Move-invert_brightness-module-param.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0187-drm-msm-Switch-to-fdinfo-helper.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0187-drm-nouveau-kms-nv50-hide-unused-variables.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0188-drm-amdgpu-Switch-to-fdinfo-helper.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0188-drm-bridge-mhdp8546-Add-minimal-format-negotiation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0188-drm-bridge-use-drm_bridge_get_edid-instead-of-using-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0188-drm-i915-display-Move-edp_vswing-module-parameter-un.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0189-drm-Add-fdinfo-memory-stats.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0189-drm-bridge-lt9611uxc-use-drm_bridge_get_edid-instead.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0189-drm-bridge-mhdp8546-Set-input_bus_flags-from-atomic_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0189-drm-i915-display-Move-enable_dpcd_backlight-module-p.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0190-drm-bridge-sii902x-Support-format-negotiation-hooks.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0190-drm-i915-display-Move-load_detect_test-parameter-und.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0190-drm-msm-Add-memory-stats-to-fdinfo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0190-drm-tests-Add-calls-to-drm_fb_blit-on-supported-form.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0191-accel-qaic-Update-BO-metadata-in-a-central-location.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0191-drm-bridge-sii902x-Set-input_bus_flags-in-atomic_che.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0191-drm-doc-Relax-fdinfo-string-constraints.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0191-drm-i915-display-Move-force_reset_modeset_test-param.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0191-drm-tests-Add-new-format-conversion-tests-to-better-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0192-accel-qaic-Declare-BO-sliced-after-all-the-operation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0192-drm-bridge-adv7511-Convert-to-use-maple-tree-registe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0192-drm-bridge-tc358767-explicitly-set-readable-register.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0192-drm-gma500-Clear-fbdev-framebuffer-with-fb_memset_io.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0192-drm-i915-display-Move-disable_display-parameter-unde.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0192-drm-tidss-Update-encoder-bridge-chain-connect-model.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0193-accel-qaic-Undo-slicing-setup-done-in-qaic_attach_sl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0193-drm-bridge-cdns-mhdp8546-Fix-the-interrupt-enable-di.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0193-drm-bridge-dpc3433-Convert-to-use-maple-tree-registe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0193-drm-bridge-samsung-dsim-Fix-i.MX8M-enable-flow-to-me.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0193-drm-i915-display-Use-device-parameters-instead-of-mo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0194-accel-qaic-Clean-up-BO-during-flushing-of-transfer-l.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0194-drm-bridge-tc358767-Convert-to-use-maple-tree-regist.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0194-drm-i915-display-Move-verbose_state_checks-under-dis.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0194-drm-ttm-Use-init_on_free-to-delay-release-TTM-BOs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0195-accel-qaic-Create-a-function-to-initialize-BO.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0195-drm-amdgpu-Fix-no-procfs-build.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0195-drm-arm-Make-ARM-devices-menu-depend-on-DRM.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0195-drm-bridge-icn6211-Convert-to-use-maple-tree-registe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0195-drm-i915-display-Move-nuclear_pageflip-under-display.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0196-accel-qaic-Add-QAIC_DETACH_SLICE_BO-IOCTL.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0196-drm-bridge-lt9211-Convert-to-use-maple-tree-register.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0196-drm-bridge-samsung-dsim-fix-blanking-packet-size-cal.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0196-drm-i915-display-Move-enable_dp_mst-under-display.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0196-fbdev-hyperv_fb-Include-linux-screen_info.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0197-drm-bridge-sn65dsi83-Convert-to-use-maple-tree-regis.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0197-drm-execution-context-for-GEM-buffers-v7.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0197-drm-i915-remove-display-device-info-from-i915-capabi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0198-drm-add-drm_exec-selftests-v4.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0198-drm-bridge-samsung-dsim-Fetch-pll-clock-frequency-au.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0198-drm-i915-display-Reset-message-bus-after-each-read-w.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0198-drm-panel-ili9322-Remove-redundant-volatle_reg-opera.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0199-drm-amdkfd-switch-over-to-using-drm_exec-v3.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0199-drm-bridge-samsung-dsim-Select-GENERIC_PHY_MIPI_DPHY.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0199-drm-i915-sprite-move-sprite_name-to-intel_sprite.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0199-drm-panel-ili9322-Convert-to-use-maple-tree-register.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0200-drm-amdgpu-use-drm_exec-for-GEM-and-CSA-handling-v2.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0200-drm-bridge-samsung-dsim-Dynamically-configure-DPHY-t.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0200-drm-i915-lnl-Extend-C10-C20-phy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0200-drm-panel-Add-driver-for-BOE-RM692E5-AMOLED-panel.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0201-drm-amdgpu-use-drm_exec-for-MES-testing.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0201-drm-bridge-samsung-dsim-Support-non-burst-mode.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0201-drm-doc-Document-DRM-device-reset-expectations.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0201-drm-i915-lnl-Fix-check-for-TC-phy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0202-drm-amdgpu-use-the-new-drm_exec-object-for-CS-v3.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0202-drm-i915-display-Abstract-C10-C20-pll-hw-readout.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0202-drm-panel-simple-Add-Ampire-AM-800480L1TMQW-T00H.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0202-drm-vblank-Warn-when-silently-cancelling-vblank-work.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0203-drm-i915-display-Abstract-C10-C20-pll-calculation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0203-drm-loongson-Remove-a-useless-check-in-cursor_plane_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0203-drm-panfrost-Add-cycle-count-GPU-register-definition.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0204-accel-ivpu-Update-debugfs-to-latest-changes-in-DRM.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0204-drm-i915-fix-Makefile-sort-and-indent.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0204-drm-panfrost-Add-fdinfo-support-GPU-load-metrics.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0204-drm-ssd130x-Change-pixel-format-used-to-compute-the-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0204-drm-stm-dsi-Use-devm_platform_ioremap_resource.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0205-accel-ivpu-Compile-ivpu_debugfs.c-conditionally.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0205-drm-i915-move-Makefile-display-debugfs-files-next-to.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0205-drm-panel-ld9040-Use-better-magic-values.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0205-drm-panfrost-Add-fdinfo-support-for-memory-stats.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0206-drm-drm_file-Add-DRM-obj-s-RSS-reporting-function-fo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0206-drm-i915-bios-Clamp-VBT-HDMI-level-shift-on-BDW.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0206-drm-lcdif-Drop-unnecessary-NULL-pointer-check-on-lcd.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0206-drm-panel-ld9040-Register-a-backlight-device.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0207-drm-drv-use-enum-drm_minor_type-when-appropriate.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0207-drm-lcdif-Determine-bus-format-and-flags-in-atomic_c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0207-drm-panfrost-Implement-generic-DRM-object-RSS-report.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0208-drm-amd-pm-Annotate-struct-smu10_voltage_dependency_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0208-drm-file-use-explicit-values-for-enum-drm_minor_type.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0208-drm-i915-Abstract-the-extra-JSL-EHL-DPLL4-power-doma.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0208-drm-lcdif-Check-consistent-bus-format-and-flags-acro.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0209-drm-amdgpu-discovery-Annotate-struct-ip_hw_instance-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0209-drm-i915-Move-the-DPLL-extra-power-domain-handling-u.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0209-drm-lcdif-Add-multiple-encoders-and-first-bridges-su.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0210-drm-i915-Extract-_intel_-enable-disable-_shared_dpll.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0210-drm-i915-selftests-Annotate-struct-perf_series-with-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0210-drm-lcdif-Add-i.MX93-LCDIF-compatible-string.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0211-drm-Switch-i2c-drivers-back-to-use-.probe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0211-drm-i915-Move-the-g45-PEG-band-gap-HPD-workaround-to.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0211-drm-manager-to-keep-track-of-GPUs-VA-mappings.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0211-drm-msm-dpu-Annotate-struct-dpu_hw_intr-with-__count.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0212-drm-debugfs-provide-infrastructure-to-dump-a-DRM-GPU.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0212-drm-i915-hdcp-Rename-HCDP-1.4-enablement-function.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0212-drm-nouveau-pm-Annotate-struct-nvkm_perfdom-with-__c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0212-drm-panel-edp-Convert-to-platform-remove-callback-re.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0213-drm-bridge-display-connector-rename-dp_pwr-to-connec.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0213-drm-i915-hdcp-Convert-intel_hdcp_enable-to-a-blanket.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0213-drm-syncobj-add-IOCTL-to-register-an-eventfd.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0213-drm-vc4-Annotate-struct-vc4_perfmon-with-__counted_b.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0214-drm-bridge-display-connector-handle-hdmi-pwr-supply.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0214-drm-i915-hdcp-Add-more-conditions-to-enable-hdcp.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0214-drm-panel-simple-Drop-prepared_time.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0214-drm-virtio-Annotate-struct-virtio_gpu_object_array-w.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0215-drm-i915-mst-Swap-TRANSCONF-vs.-FECSTALL_DIS_DPTSTRE.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0215-drm-manager-Fix-printk-format-for-size_t.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0215-drm-ttm-Remove-redundant-code-in-ttm_tt_init_fields.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0215-drm-vmwgfx-Annotate-struct-vmw_surface_dirty-with-__.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0216-drm-debugfs-Silence-warning-from-cast.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0216-drm-i915-mst-Disable-transcoder-before-deleting-the-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0216-drm-i915-ttm-Add-I915_BO_PREALLOC.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0216-drm-v3d-Annotate-struct-v3d_perfmon-with-__counted_b.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0217-drm-dp-switch-drm_dp_downstream_-helpers-to-struct-d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0217-drm-i915-display-Set-I915_BO_ALLOC_USER-for-fb.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0217-drm-i915-mst-Clear-ACT-just-before-triggering-payloa.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0217-gpu-host1x-Explicitly-include-correct-DT-includes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0218-drm-Explicitly-include-correct-DT-includes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0218-drm-i915-Add-a-function-to-mmap-framebuffer-obj.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0218-drm-i915-mst-Always-write-CHICKEN_TRANS.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0218-drm-panel-nv3051d-Add-Support-for-Anbernic-351V.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0219-drm-amd-display-Fix-mst-hub-unplug-warning.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0219-drm-i915-display-Add-helper-func-to-get-intel_fbdev-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0219-drm-i915-display-Use-dma_fence-interfaces-instead-of.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0220-drm-arm-komeda-Remove-component-framework-and-add-a-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0220-drm-exynos-dsi-Convert-to-platform-remove-callback-r.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0220-drm-i915-display-Implement-fb_mmap-callback-function.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0220-drm-i915-display-Use-intel_bo_to_drm_bo-instead-of-o.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0221-drm-bridge-samsung-dsim-add-more-mipi-dsi-device-deb.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0221-drm-bridge-tc358767-increase-PLL-lock-time-delay.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0221-drm-i915-Extract-hsw_chicken_trans_reg.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0221-drm-i915-mtl-Disable-stolen-memory-backed-FB-for-A0.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0222-drm-bridge-samsung-dsim-reread-ref-clock-before-conf.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0222-drm-bridge-tc358767-give-VSDELAY-some-positive-value.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0222-drm-i915-Make-IRQ-reset-and-postinstall-multi-gt-awa.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0222-drm-i915-Stop-using-a-reg-variable.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0223-drm-bridge-samsung-dsim-update-PLL-reference-clock.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0223-drm-i915-Extract-mchbar_reg.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0223-drm-i915-gt-Consider-multi-gt-instead-of-to_gt.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0223-drm-ssd130x-Fix-pitch-calculation-in-ssd130x_fb_blit.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0224-drm-bridge-samsung-dsim-adjust-porches-by-rounding-u.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0224-drm-i915-dsi-Remove-dead-GLK-checks.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0224-drm-i915-gem-Consider-multi-gt-instead-of-to_gt.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0224-video-Add-auxiliary-display-drivers-to-Graphics-supp.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0225-drm-bridge-samsung-dsim-calculate-porches-in-Hz.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0225-drm-i915-dsi-Extract-port_ctrl_reg.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0225-drm-i915-selftests-Consider-multi-gt-instead-of-to_g.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0225-fbdev-Move-core-fbdev-symbols-to-a-separate-Kconfig-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0226-drm-i915-Remove-unused-for_each_uabi_class_engine.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0226-drm-i915-mtl-Extend-Wa_22011802037-to-MTL-A-step.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0226-drm-panel-simple-allow-LVDS-format-override.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0226-fbdev-Split-frame-buffer-support-in-FB-and-FB_CORE-s.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0227-Documentation-gpu-fix-Panfrost-documentation-build-w.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0227-drm-Make-FB_CORE-to-be-selected-if-DRM-fbdev-emulati.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0227-drm-i915-Move-for_each_engine-out-of-i915_drv.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0227-drm-i915-mtl-WA-to-clear-RDOP-clock-gating.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0228-drm-i915-dp_mst-Disable-DSC-on-ICL-MST-outputs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0228-drm-i915-mtl-Set-has_llc-0.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0228-drm-rockchip-vop2-Demote-message-in-mod_supported-to.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0229-drm-bridge-it6505-Fix-Kconfig-indentation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0229-drm-i915-display-Support-PSR-entry-VSC-packet-to-be-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0229-drm-i915-mtl-Define-MOCS-and-PAT-tables-for-MTL.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0229-drm-rockchip-vop2-Convert-to-use-maple-tree-register.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0230-drm-bridge-Remove-redundant-i2c_client-in-anx7625-it.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0230-drm-i915-move-display-mutex-inits-to-display-code.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0230-drm-i915-mtl-fix-mocs-selftest.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0231-drm-i915-i915_drv-Use-proper-parameter-naming-in-for.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0231-drm-i915-move-display-spinlock-init-to-display-code.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0231-drm-managed-Clean-up-GFP_-flag-usage-in-drmm_kmalloc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0231-drm-rockchip-remove-redundant-of_match_ptr.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0232-drm-Remove-flag-FBINFO_DEFAULT-from-fbdev-emulation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0232-drm-i915-i915_drv-Use-i915-instead-of-dev_priv-insie.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0232-drm-rockchip-dsi-Use-devm_platform_get_and_ioremap_r.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0233-drm-dp_mst-Add-helper-to-determine-if-an-MST-port-is.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0233-drm-i915-mtl-Add-PTE-encode-function.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0233-fbdev-Remove-FBINFO_DEFAULT-from-static-structs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0234-drm-dp_mst-Factor-out-a-helper-to-check-the-atomic-s.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0234-drm-i915-mtl-workaround-coherency-issue-for-Media.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0234-fbdev-Remove-FBINFO_DEFAULT-from-kzalloc-ed-structs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0235-drm-dp_mst-Swap-the-order-of-checking-root-vs.-non-r.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0235-drm-i915-selftest-Record-GT-error-for-gt-failure.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0235-drm-panel-ltk050h3146w-add-mipi_dsi_device.mode_flag.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0235-fbdev-Remove-FBINFO_DEFAULT-from-devm_kzalloc-ed-str.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0236-drm-dp_mst-Allow-DSC-in-any-Synaptics-last-branch-de.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0236-drm-i915-mtl-Add-workaround-14018778641.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0236-drm-panel-ltk050h3146w-add-support-for-Leadtek-LTK05.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0236-fbdev-Remove-FBINFO_DEFAULT-from-framebuffer_alloc-e.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0237-drm-dp-Add-DP_HBLANK_EXPANSION_CAPABLE-and-DSC_PASST.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0237-drm-i915-dg2-Remove-Wa_15010599737.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0237-drm-i915-hwmon-Get-mutex-and-rpm-ref-just-once-in-hw.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0238-drm-dp_mst-Add-HBLANK-expansion-quirk-for-Synaptics-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0238-drm-i915-guc-Disable-PL1-power-limit-when-loading-Gu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0238-drm-i915-selftests-Align-igt_spinner_create_request-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0239-drm-dp-Add-helpers-to-calculate-the-link-BW-overhead.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0239-drm-i915-hwmon-Block-waiting-for-GuC-reset-to-comple.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0240-drm-i915-dp_mst-Enable-FEC-early-once-it-s-known-DSC.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0240-drm-i915-mtl-Implement-Wa_14019141245.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0241-drm-i915-Migrate-platform-dependent-mock-hugepage-se.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0241-drm-i915-dp-Specify-the-FEC-overhead-as-an-increment.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0241-fbdev-fsl-diu-fb-Remove-flag-FBINFO_DEFAULT.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0242-drm-i915-Use-correct-huge-page-manager-for-MTL.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0242-drm-i915-dp-Pass-actual-BW-overhead-to-m_n-calculati.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0242-fbdev-Remove-FBINFO_FLAG_DEFAULT-from-kzalloc-ed-str.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0243-drm-i915-dp_mst-Account-for-FEC-and-DSC-overhead-dur.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0243-fbdev-Remove-FBINFO_FLAG_DEFAULT-from-framebuffer_al.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0244-drm-i915-dp_mst-Add-atomic-state-for-all-streams-on-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0244-drm-i915-selftest-Update-the-SLPC-selftest.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0244-fbdev-atafb-Remove-flag-FBINFO_FLAG_DEFAULT.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0245-drm-i915-dp_mst-Program-the-DSC-PPS-SDP-for-each-str.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0245-drm-i915-rc6-throw-out-set-wrapper.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0245-fbdev-pxafb-Remove-flag-FBINFO_FLAG_DEFAULT.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0246-drm-i915-dp-Make-sure-the-DSC-PPS-SDP-is-disabled-wh.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0246-i915-pmu-Add-support-for-total-context-runtime-for-G.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0247-drm-i915-dp_mst-Add-missing-DSC-compression-disablin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0247-drm-i915-fdinfo-Enable-fdinfo-for-GuC-backends.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0247-fbdev-Remove-FBINFO_DEFAULT-and-FBINFO_FLAG_DEFAULT.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0248-drm-i915-dp-Rename-intel_ddi_disable_fec_state-to-in.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0248-drm-i915-gt-Use-gt_err-for-GT-info.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0248-fbdev-Document-that-framebuffer_alloc-returns-zero-e.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0249-drm-i915-dp-Wait-for-FEC-detected-status-in-the-sink.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0249-drm-i915-guc-Force-a-reset-on-internal-GuC-error.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0249-drm-i915-selftests-Use-gt_err-for-GT-info.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0249-drm-panel-db7430-remove-unused-variables.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0250-drm-i915-dp-Disable-FEC-ready-flag-in-the-sink.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0250-drm-i915-guc-Consolidate-duplicated-capture-list-cod.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0250-drm-i915-mtl-Adding-DeviceID-for-Arrowlake-S-under-M.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0250-fbdev-Add-fb_ops-init-macros-for-framebuffers-in-DMA.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0251-drm-fbdev-dma-Use-fbdev-DMA-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0251-drm-i915-dp_mst-Handle-the-Synaptics-HBlank-expansio.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0251-drm-i915-gsc-define-gsc-fw.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0251-drm-i915-guc-Capture-list-naming-clean-up.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0252-drm-i915-dp_mst-Enable-decompression-in-the-sink-fro.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0252-drm-i915-guc-Fix-error-capture-for-virtual-engines.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0252-drm-tegra-Use-fbdev-DMA-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0253-drm-i915-dp-Enable-DSC-via-the-connector-decompressi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0253-drm-i915-gt-Wait-longer-for-tasks-in-migrate-selftes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0253-drm-i915-gvt-fix-intel_vgpu_alloc_resource-kernel-do.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0253-drm-tegra-Set-fbdev-FBINFO_VIRTFB-flag.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0254-drm-i915-Add-Wa_14015150844.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0254-drm-i915-dp_mst-Enable-DSC-passthrough.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0254-drm-i915-vma-fix-kernel-doc-function-name-for-i915_v.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0254-drm-tegra-Store-pointer-to-vmap-ed-framebuffer-in-sc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0255-drm-exynos-Use-fbdev-DMA-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0255-drm-i915-dp_mst-Enable-MST-DSC-decompression-for-all.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0255-drm-i915-mtl-Drop-Wa_14017240301.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0255-drm-i915-utils-drop-kernel-doc-from-__wait_for.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0256-drm-exynos-Set-fbdev-FBINFO_VIRTFB-flag.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0256-drm-i915-Factor-out-function-to-clear-pipe-update-fl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0256-drm-i915-Run-relevant-bits-of-debugfs-drop_caches-pe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0256-drm-i915-vma-document-struct-i915_vma_resource-waker.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0257-drm-i915-dp_mst-Force-modeset-CRTC-if-DSC-toggling-r.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0257-drm-i915-gt-skip-WA-verification-for-GEN7_MISCCPCTL-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0257-drm-i915-perf-fix-i915_perf_ioctl_version-kernel-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0257-drm-omapdrm-Set-VM-flags-in-GEM-object-mmap-function.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0258-drm-i915-Add-Wa_18022495364.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0258-drm-i915-dp_mst-Improve-BW-sharing-between-MST-strea.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0258-drm-i915-error-fix-i915_capture_error_state-kernel-d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0258-drm-omapdrm-Use-GEM-mmap-for-fbdev-emulation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0259-drm-i915-dp_mst-Check-BW-limitations-only-after-all-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0259-drm-i915-huc-silence-injected-failure-in-the-load-vi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0259-drm-i915-request-drop-kernel-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0259-drm-omapdrm-Set-fbdev-FBINFO_VIRTFB-flag.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0260-drm-i915-Query-compressed-bpp-properly-using-correct.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0260-drm-i915-gem-fix-i915_gem_object_lookup_rcu-kernel-d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0260-drm-i915-pxp-mtl-Update-pxp-firmware-response-timeou.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0260-fbdev-Remove-FB_DEFAULT_SYS_OPS.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0261-drm-i915-Drop-redundant-modeset-check.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0261-drm-i915-engine-fix-kernel-doc-function-name-for-int.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0261-drm-i915-pxp-mtl-Update-pxp-firmware-packet-size.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0261-fbdev-Harmonize-some-comments-in-linux-fb.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0262-drm-i915-Split-intel_update_crtc-into-two-parts.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0262-drm-i915-context-fix-kernel-doc-parameter-descriptio.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0262-drm-i915-lrc-User-PXP-contexts-requires-runalone-bit.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0262-drm-panel-ld9040-add-backlight-Kconfig-dependency.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0263-drm-ast-Do-not-enable-PCI-resources-multiple-times.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0263-drm-i915-Do-plane-etc.-updates-more-atomically-acros.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0263-drm-i915-gtt-fix-i915_vm_resv_put-kernel-doc-paramet.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0263-drm-i915-refactor-deprecated-strncpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0264-drm-i915-engine-hide-preempt_hang-selftest-member-fr.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0264-drm-i915-gt-Update-RC6-mask-for-mtl_drpc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0264-drm-i915-gvt-Clean-up-zero-initializers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0264-drm-ssd130x-Inline-the-ssd130x_buf_-alloc-free-funct.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0265-drm-i915-gt-remove-a-static-inline-that-requires-inc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0265-drm-i915-guc-add-dbgfs_node-member-kernel-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0265-drm-panelreplay-dpcd-register-definition-for-panelre.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0265-drm-ssd130x-Allocate-buffer-in-the-plane-s-.atomic_c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0266-dma-buf-Fix-the-typo-in-DMA-BUF-statistics-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0266-drm-i915-gem-remove-inlines-from-i915_gem_execbuffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0266-drm-i915-guc-drop-lots-of-kernel-doc-markers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0266-drm-i915-psr-Move-psr-specific-dpcd-init-into-own-fu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0267-drm-amdgpu-Rename-aqua_vanjaram_reg_init.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0267-drm-i915-Add-Wa_18028616096.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0267-drm-i915-guc-add-intel_guc_state_capture-member-docs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0267-drm-i915-panelreplay-Initializaton-and-compute-confi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0268-drm-amd-display-Remove-else-after-return-statement-i.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0268-drm-i915-active-fix-kernel-doc-for-function-paramete.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0268-drm-i915-panelreplay-Enable-panel-replay-dpcd-initia.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0268-drm-i915-perf-Remove-gtt_offset-from-stream-oa_buffe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0269-drm-amd-display-Remove-else-after-return-in-dm_crtc_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0269-drm-i915-Do-not-disable-preemption-for-resets.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0269-drm-i915-panelreplay-enable-disable-panel-replay.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0269-drm-i915-pmu-drop-kernel-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0270-drm-amd-display-Clean-up-style-problems-in-amdgpu_dm.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0270-drm-i915-Avoid-endless-HPD-poll-detect-loop-via-runt.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0270-drm-i915-abstract-plane-protection-check.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0270-drm-i915-pxp-fix-kernel-doc-for-member-dev_link.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0271-drm-amd-display-Remove-redundant-braces-in-amdgpu_dm.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0271-drm-i915-Don-t-change-the-status-of-forced-connector.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0271-drm-i915-remove-excess-functions-from-plane-protecti.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0271-drm-i915-scatterlist-fix-kernel-doc-parameter-docume.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0272-drm-amd-display-Use-seq_puts-in-amdgpu_current_color.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0272-drm-i915-Don-t-change-the-status-of-forced-connector.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0272-drm-i915-mtl-Define-GSC-Proxy-component-interface.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0272-drm-i915-update-in-source-bug-filing-URLs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0273-drm-amd-display-fix-comment-typo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0273-drm-i915-mtl-C20-state-verification.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0273-drm-i915-vdsc-Fix-first_line_bpg_offset-calculation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0273-mei-gsc_proxy-add-gsc-proxy-driver.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0274-drm-amd-Use-attribute-groups-for-PSP-flashing-attrib.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0274-drm-display-dp-Add-helper-function-to-get-DSC-bpp-pr.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0274-drm-i915-dp-Fix-LT-debug-print-in-SDP-CRC-enable.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0274-drm-i915-gsc-add-initial-support-for-GSC-proxy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0275-drm-amd-Make-flashing-messages-quieter.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0275-drm-i915-display-Store-compressed-bpp-in-U6.4-format.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0275-drm-i915-gsc-add-support-for-GSC-proxy-interrupt.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0275-drm-i915-pxp-mtl-intel_pxp_init_hw-needs-runtime-pm-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0276-drm-amd-Convert-USB-C-PD-F-W-attributes-into-groups.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0276-drm-i915-display-Consider-fractional-vdsc-bpp-while-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0276-drm-i915-pxp-Optimize-GET_PARAM-PXP_STATUS.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0276-drm-i915-vma-fix-struct-i915_vma_bindinfo-kernel-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0277-drm-amd-Add-documentation-for-how-to-flash-a-dGPU.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0277-drm-i915-audio-Consider-fractional-vdsc-bpp-while-co.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0277-drm-i915-display-Remove-unused-POWER_DOMAIN_MASK.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0277-drm-i915-gem-fix-function-pointer-member-kernel-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0278-drm-amd-Detect-IFWI-or-PD-upgrade-support-in-psp_ear.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0278-drm-i915-cx0-Add-intel_cx0_get_owned_lane_mask.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0278-drm-i915-dsc-mtl-Add-support-for-fractional-bpp.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0278-drm-i915-scatterlist-fix-kernel-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0279-drm-amd-adjust-whitespace-for-amdgpu_psp.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0279-drm-i915-Simplify-intel_cx0_program_phy_lane-with-lo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0279-drm-i915-dp-Iterate-over-output-bpp-with-fractional-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0279-drm-i915-ttm-fix-i915_ttm_to_gem-kernel-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0280-drm-amdkfd-Access-gpuvm_export_dmabuf-API-to-get-Dma.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0280-drm-i915-cx0-Enable-disable-TX-only-for-owned-PHY-la.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0280-drm-i915-dsc-Add-debugfs-entry-to-validate-DSC-fract.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0280-drm-i915-use-kernel-doc-Werror-when-CONFIG_DRM_I915_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0281-drm-amdgpu-return-an-error-if-query_video_caps-is-no.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0281-drm-i915-cx0-Program-vswing-only-for-owned-lanes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0281-drm-i915-dsc-Allow-DSC-only-with-fractional-bpp-when.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0281-drm-i915-uc-Track-patch-level-versions-on-reduced-ve.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0282-drm-amdgpu-Update-invalid-PTE-flag-setting.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0282-drm-i915-display-Use-int-for-entry-setup-frames.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0282-drm-i915-mtl-Define-GuC-firmware-version-for-MTL.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0283-drm-amdgpu-skip-address-adjustment-for-GFX-RAS-injec.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0283-drm-i915-dp-Tune-down-FEC-detection-timeout-error-me.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0283-drm-i915-guc-Decode-another-GuC-load-failure-case.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0284-drm-amd-display-Clean-up-warnings-in-amdgpu_dm_pp_sm.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0284-drm-i915-guc-Print-status-register-when-waiting-for-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0284-drm-i915-selftest-Simplify-Y-major-tiling-in-blit-se.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0284-drm-i915-xe2lpd-implement-WA-for-underruns-while-ena.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0285-drm-amd-display-Remove-unnecessary-casts-in-amdgpu_d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0285-drm-i915-Eliminate-has_4tile-feature-flag.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0285-drm-i915-panelreplay-Debugfs-support-for-panel-repla.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0285-drm-i915-uc-Enhancements-to-firmware-table-validatio.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0286-drm-amd-display-Clean-up-warnings-in-amdgpu_dm-_mst_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0286-drm-i915-Fix-fractional-bpp-handling-in-intel_link_b.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0286-drm-i915-dp-Consider-output_format-while-computing-d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0286-drm-i915-uc-Reject-duplicate-entries-in-firmware-tab.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0287-drm-amdkfd-Use-KIQ-to-unmap-HIQ.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0287-drm-i915-dp-Move-compressed-bpp-check-with-420-forma.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0287-drm-i915-dsb-DSB-code-refactoring.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0287-drm-i915-uc-Make-unexpected-firmware-versions-an-err.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0288-drm-amdgpu-have-bos-for-PDs-PTS-cpu-accessible-when-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0288-drm-i915-display-keep-struct-intel_display-members-s.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0288-drm-i915-dp_mst-Use-output_format-to-get-the-final-l.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0288-drm-i915-mtl-Drop-FLAT-CCS-check.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0289-drm-amd-amdgpu-Add-cu_occupancy-sysfs-file-to-GFX9.4.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0289-drm-i915-dp-Use-consistent-name-for-link-bpp-and-com.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0289-drm-i915-move-_crtc_clock_get-to-intel_dpll.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0289-drm-i915-mtl-Add-MTL-for-remapping-CCS-FBs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0290-drm-amdkfd-Skip-handle-mapping-SVM-range-with-no-GPU.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0290-drm-i915-add-vlv_pipe_to_phy-helper-to-replace-DPIO_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0290-drm-i915-dp-Update-Bigjoiner-interface-bits-for-comp.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0290-drm-i915-mtl-Fix-the-wa-number-for-Wa_22016670082.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0291-drm-amdgpu-Change-golden-settings-for-GFX-v9.4.3.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0291-drm-i915-convert-vlv_dpio_read-write-from-pipe-to-ph.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0291-drm-i915-intel_cdclk-Add-vdsc-with-bigjoiner-constra.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0291-drm-i915-preparation-for-using-PAT-index.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0292-drm-amdgpu-Fix-error-warnings-in-gmc_v9_0.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0292-drm-i915-dp-Remove-extra-logs-for-printing-DSC-info.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0292-drm-i915-fbc-Split-plane-size-vs.-surface-size-check.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0292-drm-i915-use-pat_index-instead-of-cache_level.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0293-drm-i915-dp-Avoid-forcing-DSC-BPC-for-MST-case.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0293-drm-i915-fbc-Bump-max-surface-size-to-8kx4k-on-icl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0293-drm-i915-pxp-Add-GSC-CS-back-end-resource-init-and-c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0294-drm-amd-display-Block-optimize-on-consecutive-FAMS-e.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0294-drm-i915-dp-Add-functions-to-get-min-max-src-input-b.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0294-drm-i915-fbc-Bump-ivb-FBC-max-surface-size-to-4kx4k.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0294-drm-i915-pxp-Add-MTL-hw-plumbing-enabling-for-KCR-op.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0295-drm-amdgpu-Fix-warnings-in-gfxhub_-v1_0-v1_2.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0295-drm-dp_mst-Store-the-MST-PBN-divider-value-in-fixed-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0295-drm-i915-dp-Check-min-bpc-DSC-limits-for-dsc_force_b.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0295-drm-i915-pxp-Add-MTL-helpers-to-submit-Heci-Cmd-Pack.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0296-drm-amdgpu-Remove-redundant-GFX-v9.4.3-sequence.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0296-drm-dp_mst-Fix-PBN-divider-calculation-for-UHBR-rate.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0296-drm-i915-dp-Avoid-left-shift-of-DSC-output-bpp-by-4.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0296-drm-i915-pxp-Add-GSC-CS-backend-to-send-GSC-fw-messa.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0297-drm-amdgpu-Fix-warnings-in-gfxhub_v2_0.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0297-drm-dp_mst-Add-kunit-tests-for-drm_dp_get_vc_payload.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0297-drm-i915-dp-Rename-helper-to-get-DSC-max-pipe_bpp.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0297-drm-i915-pxp-Add-ARB-session-creation-and-cleanup.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0298-drm-amdgpu-Prefer-dev_warn-over-printk.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0298-drm-i915-dp-Replace-intel_dp_is_uhbr_rate-with-drm_d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0298-drm-i915-dp-Separate-out-functions-for-edp-DP-for-co.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0298-drm-i915-uapi-pxp-Add-a-GET_PARAM-for-PXP.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0299-drm-amdgpu-Fix-warnings-in-gmc_v10_0.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0299-drm-i915-dp-Account-for-channel-coding-efficiency-on.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0299-drm-i915-dp-Add-DSC-BPC-BPP-constraints-while-select.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0299-drm-i915-pxp-On-MTL-KCR-enabling-doesn-t-wait-on-tee.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0300-drm-amdgpu-Fix-errors-warnings-in-gmc_-v6_0-v7_0.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0300-drm-i915-dp-Fix-UHBR-link-M-N-values.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0300-drm-i915-dp-Separate-out-function-to-get-compressed-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0300-drm-i915-pxp-Enable-PXP-with-MTL-GSC-CS.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0301-drm-amdgpu-Fix-warnings-in-gfxhub_v2_1.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0301-drm-i1915-guc-Fix-probe-injection-CI-failures-after-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0301-drm-i915-dp-Get-optimal-link-config-to-have-best-com.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0301-drm-i915-dp_mst-Calculate-the-BW-overhead-in-intel_d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0302-drm-amdgpu-Remove-else-after-return-statement-in-gmc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0302-drm-i915-dp-Check-src-sink-compressed-bpp-limit-for-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0302-drm-i915-dp_mst-Fix-PBN-MTP_TU-size-calculation-for-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0302-drm-i915-guc-Fix-confused-register-capture-list-crea.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0303-drm-amdgpu-Fix-warnings-in-gmc_v11_0.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0303-drm-i915-dp-Check-if-force_dsc_output_format-is-poss.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0303-drm-i915-dp-Report-a-rounded-down-value-as-the-maxim.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0303-drm-i915-hwmon-Silence-UBSAN-uninitialized-bool-vari.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0304-drm-amdgpu-Remove-else-after-return-statement-in-gfx.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0304-drm-i915-Dump-error-capture-to-kernel-log.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0304-drm-i915-display-Remove-unused-POWER_DOMAIN_MODESET.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0304-drm-i915-dp-Simplify-intel_dp_max_data_rate.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0305-drm-amdgpu-vkms-drop-redundant-set-of-fb_modifiers_n.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0305-drm-i915-dp-Reuse-intel_dp_-max-effective-_data_rate.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0305-drm-i915-guc-Dump-error-capture-to-dmesg-on-CTB-erro.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0306-drm-amd-pm-disbale-dcefclk-device-sysnode-on-GFX-v9..patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0306-drm-i915-dsi-assume-BXT-gpio-works-for-non-native-GP.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0306-drm-i915-guc-slpc-Disable-rps_boost-debugfs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0307-drm-amdgpu-Fix-warnings-in-gmc_v8_0.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0307-drm-i915-display-remove-redundant-parameter-from-sdp.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0307-drm-i915-dsi-switch-mipi_exec_gpio-from-dev_priv-to-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0307-drm-i915-mtl-do-not-enable-render-power-gating-on-MT.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0308-drm-amdgpu-Fix-warnings-in-gfxhub_-v3_0-v3_0_3.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0308-drm-i915-display-combine-DP-audio-compute-config-ste.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0308-drm-i915-dsi-clarify-GPIO-exec-sequence.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0308-drm-i915-mtl-Add-MTL-performance-tuning-changes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0309-drm-amdgpu-Fix-errors-warnings-in-gfx_v10_0.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0309-drm-i915-display-add-lock-while-printing-frontbuffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0309-drm-i915-dsi-rename-platform-specific-_exec_gpio-to-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0309-drm-i915-mtl-Extend-Wa_16014892111-to-MTL-A-step.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0310-drm-amdgpu-gfx9-move-update_spm_vmid-out-of-rlc_init.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0310-drm-i915-Fix-memory-leaks-in-function-live_nop_switc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0310-drm-i915-dsi-bxt-icl-GPIO-set-value-do-not-need-gpio.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0310-drm-i915-sdvo-Issue-SetTargetOutput-prior-to-GetAtta.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0311-drm-amdgpu-gfx10-move-update_spm_vmid-out-of-rlc_ini.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0311-drm-i915-dsi-Replace-while-1-with-one-with-clear-exi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0311-drm-i915-pmu-Change-bitmask-of-enabled-events-to-u32.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0311-drm-i915-sdvo-Protect-macro-args.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0312-drm-amdgpu-Increase-soft-IH-ring-size.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0312-drm-i915-dsi-Get-rid-of-redundant-else.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0312-drm-i915-pmu-Support-PMU-for-all-engines.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0312-drm-i915-sdvo-s-sdvo_inputs_mask-sdvo_num_inputs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0313-drm-i915-Don-t-warn-about-zero-N-P-in-_calc_dpll_par.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0313-drm-i915-dsi-Replace-check-with-a-missing-MIPI-seque.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0313-drm-i915-pmu-Skip-sampling-engines-with-no-enabled-c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0314-drm-amdkfd-add-kfd2kgd-debugger-callbacks-for-GC-v9..patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0314-drm-i915-Fully-populate-crtc_state-dpll.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0314-drm-i915-dsi-Remove-GPIO-lookup-table-at-the-end-of-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0314-drm-i915-pmu-Transform-PMU-parking-code-to-be-GT-bas.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0315-drm-amdkfd-restore-debugger-additional-info-for-gfx-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0315-drm-i915-dsi-Fix-wrong-initial-value-for-GPIOs-in-bx.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0315-drm-i915-pmu-Add-reference-counting-to-the-sampling-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0315-drm-i915-sdvo-Pick-the-TV-dotclock-from-adjusted_mod.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0316-drm-amdkfd-enable-watch-points-globally-for-gfx943.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0316-drm-i915-dsi-Extract-common-soc_gpio_set_value-helpe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0316-drm-i915-pmu-Prepare-for-multi-tile-non-engine-count.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0316-drm-i915-sdvo-Fail-gracefully-if-the-TV-dotclock-is-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0317-drm-amdkfd-add-multi-process-debugging-support-for-G.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0317-drm-i915-dsi-Replace-poking-of-VLV-GPIOs-behind-the-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0317-drm-i915-pmu-Export-counters-from-all-tiles.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0317-drm-i915-rpl-Update-pci-ids-for-RPL-P-U.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0318-drm-amdgpu-rename-psp_execute_non_psp_fw_load-and-ma.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0318-drm-i915-dsi-Prepare-soc_gpio_set_value-to-distingui.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0318-drm-i915-mtl-end-support-for-set-caching-ioctl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0318-drm-i915-vma-constify-unbind_fence_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0319-drm-amdgpu-use-psp_execute_load_ip_fw-instead.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0319-drm-i915-display-update-intel_dp_has_audio-to-suppor.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0319-drm-i915-dsi-Replace-poking-of-CHV-GPIOs-behind-the-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0319-fbdev-Add-Kconfig-options-to-select-different-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0320-drm-i915-display-configure-SDP-split-for-DP-MST.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0320-drm-i915-dsi-Combine-checks-in-mipi_exec_gpio.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0320-drm-radeon-ERROR-foo-bar-should-be-foo-bar.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0320-fbdev-Add-initializer-macros-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0321-drm-armada-Use-regular-fbdev-I-O-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0321-drm-i915-iosf-Drop-unused-APIs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0321-drm-i915-regs-split-out-intel_color_regs.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0321-drm-radeon-ERROR-foo-should-be-foo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0322-drm-exynos-Use-regular-fbdev-I-O-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0322-drm-i915-color-move-CHV-CGM-pipe-mode-read-to-intel_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0322-drm-i915-display-Use-int-type-for-entry_setup_frames.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0322-drm-radeon-ERROR-foo-should-be-foo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0323-drm-gma500-Use-regular-fbdev-I-O-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0323-drm-i915-display-Do-not-check-psr2-if-psr-panel-repl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0323-drm-i915-move-HSW-gamma-mode-read-to-intel_color.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0323-drm-radeon-ERROR-that-open-brace-should-be-on-the-pr.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0324-drm-i915-Polish-some-RMWs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0324-drm-i915-move-ILK-CSC-mode-read-to-intel_color.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0324-drm-radeon-ERROR-foo-should-be-foo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0324-drm-radeon-Use-regular-fbdev-I-O-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0325-drm-amdkfd-Update-CWSR-grace-period-for-GFX9.4.3.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0325-drm-fbdev-dma-Use-regular-fbdev-I-O-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0325-drm-i915-Push-audio-enable-disable-further-out.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0325-drm-i915-color-move-SKL-gamma-and-CSC-enable-read-to.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0326-drm-amdgpu-add-watchdog-timer-enablement-for-gfx_v9_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0326-drm-i915-Wrap-g4x-DP-HDMI-audio-enable-disable.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0326-drm-i915-color-move-pre-SKL-gamma-and-CSC-enable-rea.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0326-drm-omapdrm-Use-regular-fbdev-I-O-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- commit 55b06a7</changelog>
  <changelog author="ematsumiya@suse.de" date="1759492803">- cifs: prevent NULL pointer dereference in UTF16 conversion
  (bsc#1250365, CVE-2025-39838).
- commit 5883dcd</changelog>
  <changelog author="ailiop@suse.com" date="1759492804">- Squashfs: add additional inode sanity checking (git-fixes).
- commit fe46811</changelog>
  <changelog author="ailiop@suse.com" date="1759492805">- Squashfs: reject negative file sizes in squashfs_read_inode()
  (git-fixes).
- commit 2f68e78</changelog>
  <changelog author="tiwai@suse.de" date="1759579200">- ALSA: usb-audio: Add DSD support for Comtrue USB Audio device
  (stable-fixes).
- ALSA: usb-audio: Fix build with CONFIG_INPUT=n (git-fixes).
- ALSA: usb-audio: Convert comma to semicolon (git-fixes).
- ALSA: usb-audio: Add mixer quirk for Sony DualSense PS5
  (stable-fixes).
- ALSA: usb-audio: Remove unneeded wmb() in mixer_quirks
  (stable-fixes).
- ALSA: usb-audio: Simplify NULL comparison in mixer_quirks
  (stable-fixes).
- ALSA: usb-audio: Avoid multiple assignments in mixer_quirks
  (stable-fixes).
- ALSA: usb-audio: Drop unnecessary parentheses in mixer_quirks
  (stable-fixes).
- ALSA: usb-audio: Fix block comments in mixer_quirks
  (stable-fixes).
- commit 929e260</changelog>
  <changelog author="tiwai@suse.de" date="1759579201">- ASoC: wcd934x: fix error handling in wcd934x_codec_parse_data()
  (git-fixes).
- ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free
  (git-fixes).
- ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping
  (git-fixes).
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping
  (git-fixes).
- ASoC: Intel: bytcht_es8316: Fix invalid quirk input mapping
  (git-fixes).
- ASoC: qcom: audioreach: fix potential null pointer dereference
  (git-fixes).
- ASoC: imx-hdmi: remove cpu_pdev related code (git-fixes).
- ALSA: lx_core: use int type to store negative error codes
  (git-fixes).
- ALSA: usb-audio: Add mute TLV for playback volumes on more
  devices (stable-fixes).
- ALSA: usb-audio: move mixer_quirks' min_mute into common quirk
  (stable-fixes).
- commit 86dd099</changelog>
  <changelog author="tiwai@suse.de" date="1759579202">- docs: admin-guide: update to current minimum pipe size default
  (git-fixes).
- drivers/base/node: handle error properly in register_one_node()
  (git-fixes).
- Bluetooth: ISO: don't leak skb in ISO_CONT RX (git-fixes).
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (git-fixes).
- Bluetooth: MGMT: Fix not exposing debug UUID on
  MGMT_OP_READ_EXP_FEATURES_INFO (git-fixes).
- drm/radeon/r600_cs: clean up of dead code in r600_cs
  (git-fixes).
- drm/bridge: it6505: select REGMAP_I2C (git-fixes).
- drm/panel: novatek-nt35560: Fix invalid return value
  (git-fixes).
- can: rcar_can: rcar_can_resume(): fix s2ram with PSCI
  (stable-fixes).
- drm/i915/backlight: Return immediately when scale() finds
  invalid parameters (stable-fixes).
- commit 07504f9</changelog>
  <changelog author="tiwai@suse.de" date="1759579203">- maple_tree: fix MAPLE_PARENT_RANGE32 and parent pointer docs
  (git-fixes).
- media: rj54n1cb0c: Fix memleak in rj54n1_probe() (git-fixes).
- media: lirc: Fix error handling in lirc_register() (git-fixes).
- media: zoran: Remove zoran_fh structure (git-fixes).
- drm/amdgpu: remove the redeclaration of variable i (git-fixes).
- drm/msm/dpu: fix incorrect type for ret (git-fixes).
- drm/amdkfd: Fix error code sign for EINVAL in svm_ioctl()
  (git-fixes).
- drm/amd/pm: Disable SCLK switching on Oland with high pixel
  clocks (v3) (git-fixes).
- drm/amd/pm: Disable MCLK switching with non-DC at 120 Hz+ (v2)
  (git-fixes).
- drm/amd/pm: Treat zero vblank time as too short in si_dpm (v3)
  (git-fixes).
- drm/amd/pm: Adjust si_upload_smc_data register programming (v3)
  (git-fixes).
- drm/amd/pm: Fix si_upload_smc_data (v3) (git-fixes).
- drm/amd/pm: Disable ULV even if unsupported (v3) (git-fixes).
- drm/amdgpu: Power up UVD 3 for FW validation (v2) (git-fixes).
- drm/rcar-du: dsi: Fix 1/2/3 lane support (git-fixes).
- drm/amd/display: Remove redundant semicolons (git-fixes).
- firewire: core: fix overlooked update of subsystem ABI version
  (git-fixes).
- commit 2161328</changelog>
  <changelog author="tiwai@suse.de" date="1759579204">- net: nfc: nci: Add parameter validation for packet data
  (git-fixes).
- net: usb: Remove disruptive netif_wake_queue in
  rtl8150_set_multicast (git-fixes).
- wifi: ath11k: HAL SRNG: don't deinitialize and re-initialize
  again (git-fixes).
- wifi: ath10k: avoid unnecessary wait for service ready message
  (git-fixes).
- wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load()
  (git-fixes).
- wifi: rtw89: avoid circular locking dependency in
  ser_state_run() (git-fixes).
- wifi: mac80211: fix Rx packet handling when pubsta information
  is not available (git-fixes).
- wifi: mt76: fix potential memory leak in mt76_wmac_probe()
  (git-fixes).
- wifi: mwifiex: send world regulatory domain to driver
  (git-fixes).
- media: b2c2: Fix use-after-free causing by irq_check_work in
  flexcop_pci_remove (git-fixes).
- media: uvcvideo: Mark invalid entities with id
  UVC_INVALID_ENTITY_ID (git-fixes).
- media: i2c: mt9v111: fix incorrect type for ret (git-fixes).
- media: pci: ivtv: Add missing check after DMA map (git-fixes).
- media: cx18: Add missing check after DMA map (git-fixes).
- media: st-delta: avoid excessive stack usage (git-fixes).
- media: v4l2-subdev: Fix alloc failure check in
  v4l2_subdev_call_state_try() (git-fixes).
- wifi: virt_wifi: Fix page fault on connect (stable-fixes).
- mmc: sdhci-cadence: add Mobileye eyeQ support (stable-fixes).
- usb: core: Add 0x prefix to quirks debug output (stable-fixes).
- commit dbb8904</changelog>
  <changelog author="tiwai@suse.de" date="1759579205">- drivers/base/node: fix double free in register_one_node()
  (git-fixes).
- commit 205d070</changelog>
  <changelog author="tiwai@suse.de" date="1759579206">- Bluetooth: hci_sync: Fix using random address for BIG/PA
  advertisements (git-fixes).
- Bluetooth: ISO: free rx_skb if not consumed (git-fixes).
- wifi: ath12k: fix wrong logging ID used for CE (git-fixes).
- wifi: iwlwifi: Remove redundant header files (git-fixes).
- media: tuner: xc5000: Fix use-after-free in xc5000_release
  (git-fixes).
- media: mc: Fix MUST_CONNECT handling for pads with no links
  (git-fixes).
- drm/panthor: Fix memory leak in panthor_ioctl_group_create()
  (git-fixes).
- ASoC: Intel: sof_sdw: Prevent jump to NULL add_sidecar callback
  (git-fixes).
- ALSA: pcm: Disable bottom softirqs as part of spin_lock_irq()
  on PREEMPT_RT (git-fixes).
- commit 90486f1</changelog>
  <changelog author="tiwai@suse.de" date="1759579207">- wifi: ath12k: fix the fetching of combined rssi (git-fixes).
- commit 75dc6e6</changelog>
  <changelog author="tiwai@suse.de" date="1759665600">- bus: mhi: host: Do not use uninitialized 'dev' pointer in
  mhi_init_irq_setup() (git-fixes).
- iio: imu: inv_icm42600: Drop redundant pm_runtime
  reinitialization in resume (git-fixes).
- iio: consumers: Fix offset handling in
  iio_convert_raw_to_processed() (git-fixes).
- iio: dac: ad5421: use int type to store negative error codes
  (git-fixes).
- iio: dac: ad5360: use int type to store negative error codes
  (git-fixes).
- iio: frequency: adf4350: Fix ADF4350_REG3_12BIT_CLKDIV_MODE
  (git-fixes).
- iio: frequency: adf4350: Fix prescaler usage (git-fixes).
- iio: xilinx-ams: Fix AMS_ALARM_THR_DIRECT_MASK (git-fixes).
- iio: xilinx-ams: Unmask interrupts after updating alarms
  (git-fixes).
- misc: genwqe: Fix incorrect cmd field being reported in error
  (git-fixes).
- uio: uio_pdrv_genirq: Remove MODULE_DEVICE_TABLE (git-fixes).
- thunderbolt: Compare HMAC values in constant time (git-fixes).
- usb: misc: qcom_eud: Access EUD_MODE_MANAGER2 through secure
  calls (git-fixes).
- usb: host: max3421-hcd: Fix error pointer dereference in probe
  cleanup (git-fixes).
- tty: n_gsm: Don't block input queue by waiting MSC (git-fixes).
- serial: max310x: Add error checking in probe() (git-fixes).
- mtd: rawnand: omap2: fix device leak on probe failure
  (git-fixes).
- HID: intel-ish-ipc: Remove redundant ready check after timeout
  function (git-fixes).
- hwrng: ks-sa - fix division by zero in ks_sa_rng_init
  (git-fixes).
- crypto: hisilicon/qm - set NULL to qm-&gt;debug.qm_diff_regs
  (git-fixes).
- crypto: aspeed - Fix dma_unmap_sg() direction (git-fixes).
- crypto: atmel - Fix dma_unmap_sg() direction (git-fixes).
- crypto: hisilicon/qm - check whether the input function and
  PF are on the same device (git-fixes).
- hwrng: nomadik - add ARM_AMBA dependency (git-fixes).
- crypto: keembay - Add missing check after sg_nents_for_len()
  (git-fixes).
- commit 6795b42</changelog>
  <changelog author="tiwai@suse.de" date="1759665601">- usb: vhci-hcd: Prevent suspending virtually attached devices
  (git-fixes).
- Revert "usb: xhci: Avoid Stop Endpoint retry loop if the
  endpoint seems Running" (git-fixes).
- usb: typec: tipd: Clear interrupts first (git-fixes).
- usb: cdns3: cdnsp-pci: remove redundant pci_disable_device()
  call (git-fixes).
- usb: gadget: configfs: Correctly set use_os_string at bind
  (git-fixes).
- usb: phy: twl6030: Fix incorrect type for ret (git-fixes).
- crypto: hisilicon/qm - request reserved interrupt for virtual
  function (git-fixes).
- crypto: hisilicon - re-enable address prefetch after device
  resuming (git-fixes).
- crypto: hisilicon/zip - remove unnecessary validation for
  high-performance mode configurations (git-fixes).
- commit 609ee3a</changelog>
  <changelog author="ohering@suse.de" date="1759752000">- RDMA/mana_ib: Fix DSCP value in modify QP (git-fixes).
- commit ffca68d</changelog>
  <changelog author="joao.povoas@suse.com" date="1759752001">- Update
  patches.suse/RDMA-rxe-Flush-delayed-SKBs-while-releasing-RXE-reso.patch
  (git-fixes CVE-2025-39695 bsc#1249306).
- Update
  patches.suse/drm-amdgpu-check-if-hubbub-is-NULL-in-debugfs-amdgpu.patch
  (stable-fixes CVE-2025-39707 bsc#1249333).
- Update
  patches.suse/drm-mediatek-Add-error-handling-for-old-state-CRTC-i.patch
  (git-fixes CVE-2025-39807 bsc#1249887).
- Update
  patches.suse/drm-msm-Add-error-handling-for-krealloc-in-metadata-.patch
  (stable-fixes CVE-2025-39747 bsc#1249566).
- Update
  patches.suse/drm-xe-Make-dma-fences-compliant-with-the-safe-acces.patch
  (stable-fixes CVE-2025-38703 bsc#1249193).
- Update
  patches.suse/drm-xe-vm-Clear-the-scratch_pt-pointer-on-error.patch
  (git-fixes CVE-2025-39811 bsc#1249915).
- Update
  patches.suse/media-ivsc-Fix-crash-at-shutdown-due-to-missing-mei_.patch
  (git-fixes CVE-2025-39711 bsc#1249274).
- Update
  patches.suse/wifi-ath12k-fix-memory-leak-in-ath12k_service_ready_.patch
  (git-fixes CVE-2025-39890 bsc#1250334).
- commit 06f1002</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1759752002">- ixgbe: fix incorrect map used in eee linkmode (CVE-2025-39922
  bsc#1250722).
- commit 1384a55</changelog>
  <changelog author="tiwai@suse.de" date="1759752003">- wifi: ath12k: Add MODULE_FIRMWARE() entries (bsc#1250952).
- commit fbc86d9</changelog>
</package>
<package pkgid="98b5df7a6b5f6e3ae371c345da199c570ddeb253a27f448a489223a11be58593" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.53.19.1"/>
  <changelog author="pmladek@suse.com" date="1759492800">- kbuild/modpost: Continue processing all unresolved symbols
  when KLP_SYM_RELA is found (bsc#1218644, bsc#1250655).
- commit ec0a51c</changelog>
  <changelog author="ailiop@suse.com" date="1759492801">- Squashfs: fix uninit-value in squashfs_get_parent (git-fixes).
- commit 126861e</changelog>
  <changelog author="pjakobsson@suse.de" date="1759492802">- Replace drm-backport-placeholder with actual jira tickets
  For unknown reasons a portion of the patches didn't get their
  placeholder tag replaced during the drm backport. Let's fix them now.
- Update patches.suse/0001-PCI-Add-pci_get_base_class-helper.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0001-accel-ivpu-Annotate-struct-ivpu_job-with-__counted_b.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0001-drm-prime-Unexport-helpers-for-fd-handle-conversion.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071 bsc#1212533).
- Update
  patches.suse/0001-drm-vmwgfx-Keep-a-gem-reference-to-user-bos-in-surfa.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  CVE-2023-5633, bsc#1216527).
- Update
  patches.suse/0001-mm-factor-out-VMA-stack-and-heap-checks.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0002-PCI-Add-pci_is_vga-helper.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0002-drm-amdkfd-use-vma_is_initial_stack-and-vma_is_initi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0002-drm-sched-Make-sure-we-wait-for-all-dependencies-in-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0002-drm-tests-Use-KUNIT_DEFINE_ACTION_WRAPPER.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0002-fbdev-Simplify-fb_is_primary_device-for-x86.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0003-drm-vc4-tests-Use-KUNIT_DEFINE_ACTION_WRAPPER.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0003-fbdev-Prepare-generic-architecture-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0004-arch-x86-Implement-asm-fb.h-with-generic-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0004-drm-tests-Switch-to-kunit-devices.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0005-drm-modes-replace-deprecated-strncpy-with-strscpy_pa.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0005-drm-ttm-fix-warning-that-we-shouldn-t-mix-and.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0006-accel-ivpu-Use-struct_size.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0006-arch-arm64-Implement-asm-fb.h-with-generic-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0006-drivers-gpu-drm-i915-i915_memcpy.c-fix-missing-inclu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0006-drm-nouveau-kms-nv50-Fix-drm_dp_remove_payload-invoc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0006-drm-rockchip-vop-Add-rv1126-vop_lite-support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0007-accel-ivpu-Remove-configuration-of-MMU-TBU1-and-TBU3.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0007-arch-sparc-Implement-fb_is_primary_device-in-source-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0007-docs-driver-api-properly-format-ToC-headings.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0007-drm-rockchip-dsi-Add-rv1126-MIPI-DSI-support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0007-drm-sched-Call-drm_sched_fence_set_parent-from-drm_s.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0008-accel-ivpu-Add-MMU-support-for-4-level-page-mappings.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0008-accel-ivpu-Document-DRM_IVPU_PARAM_CAPABILITIES.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0008-arch-ia64-Implement-asm-fb.h-with-generic-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0008-drm-atomic-helper-Fix-spelling-mistake-preceeding-pr.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0009-accel-ivpu-Make-DMA-bit-mask-HW-specific.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0009-arch-loongarch-Implement-asm-fb.h-with-generic-helpe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0009-drm-extract-closefb-logic-in-separate-function.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0010-accel-ivpu-Rename-and-cleanup-MMU600-page-tables.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0010-arch-mips-Implement-asm-fb.h-with-generic-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0010-drm-introduce-CLOSEFB-IOCTL.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0011-accel-ivpu-Mark-64-kB-contiguous-areas-as-contiguous.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0011-arch-sparc-Implement-asm-fb.h-with-generic-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0011-drm-doc-describe-PATH-format-for-DP-MST.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0012-accel-qaic-Enable-1-MSI-fallback-mode.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0012-arch-x86-Include-asm-fb.h-in-fbdev-source-file.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0012-drm-bridge-lvds-codec-Implement-atomic_get_input_bus.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0013-accel-qaic-Add-support-for-periodic-timesync.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0013-fbdev-Include-linux-io.h-in-various-drivers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0014-accel-qaic-Support-MHI-QAIC_TIMESYNC-channel.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0014-fbdev-Include-linux-fb.h-instead-of-asm-fb.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0015-drm-rockchip-vop-Use-cleanup-helper-directly-as-dest.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0015-fbdev-Move-framebuffer-I-O-helpers-into-asm-fb.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0016-accel-ivpu-Update-FW-API.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0016-fbdev-Rename-fb_mem-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0017-accel-ivpu-Remove-unneeded-drm_driver-declaration.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0017-drm-radeon-Replace-all-non-returning-strlcpy-with-st.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0017-minmax-add-in_range-macro.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0018-accel-ivpu-Add-dvfs_mode-file-to-debugfs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0018-drm-amd-pm-Replace-all-non-returning-strlcpy-with-st.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0018-drm-i915-Move-abs_diff-to-math.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0018-x86-fbdev-Include-asm-fb.h-as-needed.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0019-accel-ivpu-Remove-reset-from-power-up-sequence.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0019-drm-bridge-panel-Add-a-device-link-between-drm-devic.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0019-drm-display-dp_mst-Replace-all-non-returning-strlcpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0019-drm-panel-edp-Add-AUO-B116XAB01.4-edp-panel-entry.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0020-accel-ivpu-Add-support-for-VPU_JOB_FLAGS_NULL_SUBMIS.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0020-drm-panel-s6d7aa0-remove-the-unneeded-variable-in-s6.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0020-drm-panel-simple-Add-support-for-Mitsubishi-AA084XE0.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0020-drm-rockchip-Replace-all-non-returning-strlcpy-with-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0021-accel-ivpu-Change-test_mode-module-param-to-bitmask.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0021-drm-mediatek-Replace-all-non-returning-strlcpy-with-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0021-drm-panel-Add-driver-for-Visionox-r66451-panel.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0021-drm-panel-JDI-LT070ME05000-drop-broken-link.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0022-accel-ivpu-40xx-Capture-D0i3-entry-host-and-device-t.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0022-drm-komeda-Convert-to-platform-remove-callback-retur.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0022-drm-panel-Add-driver-for-JDI-LPM102A188A.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0022-drm-sun4i-hdmi-Replace-all-non-returning-strlcpy-wit.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0023-accel-ivpu-Pass-D0i3-residency-time-to-the-VPU-firmw.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0023-drm-arm-hdlcd-Convert-to-platform-remove-callback-re.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0023-drm-i2c-tda998x-Replace-all-non-returning-strlcpy-wi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0024-accel-ivpu-Introduce-ivpu_ipc_send_receive_active.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0024-drm-arm-malidp-Convert-to-platform-remove-callback-r.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0024-drm-panfrost-Do-not-check-for-0-return-after-calling.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0024-mm-gup-remove-unused-vmas-parameter-from-get_user_pa.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0025-accel-ivpu-Add-support-for-delayed-D0i3-entry-messag.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0025-doc-uapi-Add-document-describing-dma-buf-semantics.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0025-drm-aspeed-Convert-to-platform-remove-callback-retur.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0026-drm-atmel-hlcdc-Convert-to-platform-remove-callback-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0026-drm-gma500-remove-duplicate-macro-definitions.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0026-drm-v3d-wait-for-all-jobs-to-finish-before-unregiste.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0027-drm-fsl-dcu-Convert-to-platform-remove-callback-retu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0027-drm-panfrost-Remove-incorrect-IS_ERR-check.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0027-fbdev-hitfb-Declare-hitfb_blank-as-static.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0028-drm-gma500-Remove-unused-declarations.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0028-drm-hisilicon-Convert-to-platform-remove-callback-re.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0028-fbdev-metronomefb-Add-MODULE_FIRMWARE-macro.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0029-drm-lima-Convert-to-platform-remove-callback-returni.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0029-drm-repaper-fix-Wvoid-pointer-to-enum-cast-warning.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0029-fbdev-broadsheetfb-Add-MODULE_FIRMWARE-macro.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0030-accel-ivpu-40xx-Allow-to-change-profiling-frequency.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0030-drm-logicvc-Convert-to-platform-remove-callback-retu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0030-drm-tests-Test-default-pitch-fallback.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0030-video-hdmi-Reorder-fields-in-struct-hdmi_avi_infofra.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0031-accel-ivpu-Assure-device-is-off-if-power-up-sequence.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0031-drm-mcde-Convert-to-platform-remove-callback-returni.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0031-drm-tests-Add-KUnit-tests-for-drm_fb_swab.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0031-fbdev-media-Use-GPIO-descriptors-for-VIA-GPIO.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0032-accel-ivpu-Stop-job_done_thread-on-suspend.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0032-drm-meson-Convert-to-platform-remove-callback-return.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0032-drm-tests-Add-KUnit-tests-for-drm_fb_clip_offset.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0032-fbdev-hitfb-Fix-integer-to-pointer-cast.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0033-accel-ivpu-Abort-pending-rx-ipc-on-reset.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0033-drm-mxsfb-Convert-to-platform-remove-callback-return.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0033-drm-tests-Add-KUnit-tests-for-drm_fb_build_fourcc_li.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0033-fbdev-hitfb-Use-NULL-for-pointers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0034-accel-ivpu-Print-CMDQ-errors-after-consumer-timeout.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0034-drm-panel-Convert-to-platform-remove-callback-return.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0034-drm-tests-Add-multi-plane-support-to-conversion_buf_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0034-fbdev-sh_mobile_lcdcfb-Fix-ARGB32-overlay-format-typ.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0035-accel-ivpu-Make-DMA-allocations-for-MMU600-write-com.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0035-drm-panfrost-Convert-to-platform-remove-callback-ret.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0035-drm-tests-Add-KUnit-tests-for-drm_fb_memcpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0035-fbdev-sh7760fb-Fix-Wimplicit-fallthrough-warnings.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0036-accel-ivpu-Simplify-MMU-SYNC-command.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0036-drm-rockchip-Convert-to-platform-remove-callback-ret.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0036-fbdev-sbus-Build-sbuslib.o-if-CONFIG_FB_SBUS-has-bee.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0037-accel-ivpu-Rename-VPU-to-NPU-in-product-strings.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0037-drm-sti-Convert-to-platform-remove-callback-returnin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0037-drm-vkms-Use-drmm_crtc_init_with_planes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0037-fbdev-sbus-Forward-declare-all-necessary-structures-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0038-drm-sched-Add-drm_sched_wqueue_-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0038-drm-stm-Convert-to-platform-remove-callback-returnin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0038-drm-vkms-Use-drmm_mode_config_init.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0038-fbdev-sbus-Add-initializer-macros-and-Kconfig-tokens.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0039-drm-bridge-fsl-ldb-Add-i.MX6SX-support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0039-drm-sched-Convert-drm-scheduler-to-use-a-work-queue-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0039-drm-sun4i-Convert-to-platform-remove-callback-return.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0039-fbdev-bw2-Use-initializer-macro-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0040-drm-sched-Split-free_job-into-own-work-item.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0040-drm-tidss-Convert-to-platform-remove-callback-return.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0040-fbdev-cg14-Use-initializer-macro-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0041-drm-gma500-Use-drm_aperture_remove_conflicting_pci_f.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0041-drm-sched-Add-drm_sched_start_timeout_unlocked-helpe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0041-drm-tiny-Convert-to-platform-remove-callback-returni.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0041-fbdev-cg3-Use-initializer-macro-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0042-drm-sched-Add-a-helper-to-queue-TDR-immediately.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0042-drm-tve200-Convert-to-platform-remove-callback-retur.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0042-fbdev-cg6-Use-initializer-macro-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0042-video-aperture-use-generic-code-to-figure-out-the-vg.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0043-drm-aperture-Remove-primary-argument.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0043-drm-v3d-Convert-to-platform-remove-callback-returnin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0043-fbdev-ffb-Use-initializer-macro-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0043-fbdev-simplefb-Support-memory-region-property.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0044-drm-vc4-Convert-to-platform-remove-callback-returnin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0044-fbdev-leo-Use-initializer-macro-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0044-fbdev-simplefb-Add-support-for-generic-power-domains.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0044-video-aperture-Only-kick-vgacon-when-the-pdev-is-dec.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0045-drm-v3d-update-UAPI-to-match-user-space-for-V3D-7.x.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0045-drm-xlnx-zynqmp_dpsub-Convert-to-platform-remove-cal.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0045-fbdev-p9100-Use-initializer-macro-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0045-video-aperture-Move-vga-handling-to-pci-function.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0046-drm-rcar-du-Convert-to-platform-remove-callback-retu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0046-drm-v3d-fix-up-register-addresses-for-V3D-7.x.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0046-fbdev-tcx-Use-initializer-macro-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0046-video-aperture-Drop-primary-argument.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0047-drm-debugfs-drop-debugfs_init-for-the-render-and-acc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0047-drm-tilcdc-Convert-to-platform-remove-callback-retur.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0047-drm-v3d-add-brcm-2712-v3d-as-a-compatible-V3D-device.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0047-video-aperture-Only-remove-sysfb-on-the-default-vga-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0048-accel-qaic-Quiet-array-bounds-check-on-DMA-abort-mes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0048-drm-debugfs-disallow-debugfs-access-when-device-isn-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0048-drm-omap-Convert-to-platform-remove-callback-returni.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0048-video-aperture-Provide-a-VGA-helper-for-gma500-and-i.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0049-accel-qaic-Support-for-0-resize-slice-execution-in-B.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0049-dma-buf-dma-resv.c-fix-a-typo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0049-drm-ssd130x-Make-default-width-and-height-to-be-cont.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0050-drm-debugfs-rework-debugfs-directory-creation-v5.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0050-drm-panel-nt36523-Add-DCS-backlight-support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0050-drm-sched-Rename-drm_sched_get_cleanup_job-to-be-mor.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0050-drm-ssd130x-Set-the-page-height-value-in-the-device-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0051-drm-debugfs-remove-dev-debugfs_list-and-debugfs_mute.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0051-drm-panel-nt36523-Get-orientation-from-OF.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0051-drm-sched-Move-free-worker-re-queuing-out-of-the-if-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0051-drm-ssd130x-Don-t-allocate-buffers-on-each-plane-upd.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0052-drm-debugfs-rework-drm_debugfs_create_files-implemen.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0052-drm-panel-nt36523-Add-Lenovo-J606F-panel.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0052-drm-sched-Rename-drm_sched_free_job_queue-to-be-more.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0052-drm-ssd130x-Remove-hardcoded-bits-per-pixel-in-ssd13.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0053-accel-ivpu-Move-set-autosuspend-delay-to-HW-specific.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0053-drm-nouveau-debugfs-Move-an-expression-into-a-functi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0053-drm-sched-Rename-drm_sched_run_job_queue_if_ready-an.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0053-drm-virtio-Remove-unused-function-declarations.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0054-accel-ivpu-Remove-duplicated-error-messages.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0054-drm-ingenic-Kconfig-select-REGMAP-and-REGMAP_MMIO.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0054-drm-nouveau-debugfs-Move-a-variable-assignment-behin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0054-drm-sched-Drop-suffix-from-drm_sched_wakeup_if_can_q.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0054-fbdev-smscufx-Use-fb_ops-helpers-for-deferred-I-O.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0055-accel-ivpu-Make-ivpu_pm_init-void.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0055-drm-Do-not-round-to-megabytes-for-greater-than-1MiB-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0055-drm-nouveau-debugfs-Use-seq_putc-in-nouveau_debugfs_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0055-drm-tidss-Add-support-for-AM625-DSS.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0055-fbdev-udlfb-Use-fb_ops-helpers-for-deferred-I-O.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0056-accel-ivpu-Add-information-about-context-on-failure.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0056-drm-msm-Initialize-mmap-offset-after-constructing-th.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0056-drm-nouveau-debugfs-Replace-five-seq_printf-calls-by.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0056-drm-v3d-Implement-show_fdinfo-callback-for-GPU-usage.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0056-fbdev-Add-Kconfig-macro-FB_IOMEM_HELPERS_DEFERRED.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0057-accel-ivpu-Initialize-context-with-SSID-1.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0057-drm-Remove-struct-drm_driver.gem_prime_mmap.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0057-drm-nouveau-bios-power_budget-Move-an-expression-int.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0057-drm-v3d-Expose-the-total-GPU-usage-stats-on-sysfs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0057-fbdev-hyperv_fb-Use-fb_ops-helpers-for-deferred-I-O.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0058-accel-ivpu-Move-ivpu_fw_load-to-ivpu_fw_init.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0058-drm-amdgpu-Remove-struct-drm_driver.gem_prime_mmap.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0058-drm-bridge-it66121-Extend-match-support-for-OF-table.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0058-drm-nouveau-clk-Move-a-variable-assignment-behind-a-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0059-accel-ivpu-37xx-Change-register-rename-leftovers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0059-accel-ivpu-Fix-compilation-with-CONFIG_PM-n.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0059-drm-nouveau-pci-Move-a-variable-assignment-behind-co.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0059-drm-vkms-Add-kernel-doc-to-the-function-vkms_compose.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0060-accel-ivpu-37xx-White-space-cleanup.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0060-drm-nouveau-pci-Move-an-expression-into-a-function-c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0060-drm-sched-Don-t-disturb-the-entity-when-in-RR-mode-s.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0060-drm-vkms-Fix-all-kernel-doc-warnings-of-the-vkms_com.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0061-accel-ivpu-Allocate-vpu_addr-in-gem-open-callback.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0061-accel-ivpu-Move-MMU-register-definitions-to-ivpu_mmu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0061-drm-bridge-lt9611uxc-Add-MODULE_FIRMWARE-macro.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0061-drm-nouveau-therm-Move-an-assignment-statement-behin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0062-accel-ivpu-Fix-locking-in-ivpu_bo_remove_all_bos_fro.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0062-accel-ivpu-Print-information-about-used-workarounds.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0062-dma-buf-heaps-Don-t-assert-held-reservation-lock-for.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0063-accel-ivpu-Remove-support-for-uncached-buffers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0063-drm-gem-Check-for-valid-formats.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0063-udmabuf-Don-t-assert-held-reservation-lock-for-dma-b.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0064-accel-ivpu-Use-GEM-shmem-helper-for-all-buffers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0064-drm-Don-t-assert-held-reservation-lock-for-dma-buf-m.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0064-drm-bridge-analogix-anx78xx-Drop-ID-table.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0064-video-Remove-trailing-whitespaces.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0065-dma-buf-Change-locking-policy-for-mmap.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0065-drm-bridge-Drop-conditionals-around-of_node-pointers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0065-drm-todo-Add-entry-to-clean-up-former-seltests-suite.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0065-video-Move-HP-PARISC-STI-core-code-to-shared-locatio.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0066-arch-parisc-Implement-fb_is_primary_device-under-arc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0066-drm-bridge-Drop-CONFIG_OF-conditionals-around-of_nod.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0066-drm-edid-split-out-drm_eld.h-from-drm_edid.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0066-drm-shmem-helper-Switch-to-reservation-lock.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0067-drm-bridge-tc358764-Use-BIT-macro-for-actual-bits.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0067-drm-bridge-ti-sn65dsi86-Implement-wait_hpd_asserted.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0067-drm-connector-document-DRM_MODE_COLORIMETRY_COUNT.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0067-drm-eld-replace-uint8_t-with-u8.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0068-drm-armada-Include-linux-of.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0068-drm-bridge-it66121-Simplify-probe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0068-drm-bridge-tc358762-Split-register-programming-from-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0068-drm-doc-rfc-No-STAGING-out-of-drivers-staging.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0068-drm-edid-include-drm_eld.h-only-where-required.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0069-drm-armada-Hide-fbdev-support-behind-config-option.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0069-drm-bridge-tc358762-Switch-to-atomic-ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0069-drm-doc-rfc-Mark-Dev_coredump-as-completed.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0069-drm-edid-use-a-temp-variable-for-sads-to-drop-one-le.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0070-drm-armada-Initialize-fbdev-DRM-client.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0070-drm-bridge-tc358762-Instruct-DSI-host-to-generate-HS.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0070-drm-doc-rfc-Mark-DRM_VM_BIND-as-complete.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0070-drm-edid-add-helpers-to-get-set-struct-cea_sad-from-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0071-drm-armada-Implement-fbdev-emulation-as-in-kernel-cl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0071-drm-bridge-tc358762-Guess-the-meaning-of-LCDCTRL-bit.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0071-drm-doc-rfc-Mark-GPU-VA-as-complete.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0071-drm-eld-add-helpers-to-modify-the-SADs-of-an-ELD.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0072-drm-bridge-tc358762-Handle-HS-VS-polarity.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0072-drm-debugfs-Add-inline-to-drm_debugfs_dev_init-to-su.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0072-drm-panel-simple-Add-InnoLux-G070ACE-L01.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0072-drm-sched-Qualify-drm_sched_wakeup-by-drm_sched_enti.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0073-drm-display-Add-missing-OLED-Vesa-brightnesses-defin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0073-drm-i2c-Switch-i2c-drivers-back-to-use-.probe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0073-drm-tests-Zero-initialize-fourccs_out.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0074-drm-bridge-anx7625-Drop-of_gpio-header.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0074-drm-mst-delete-unnecessary-case-in-drm_dp_add_payloa.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0075-drm-mgag200-set-variable-mgag200_modeset-storage-cla.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0075-drm-mst-Refactor-the-flow-for-payload-allocation-rem.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0075-drm-panel-edp-drm-panel-edp-Add-several-generic-edp-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0075-drm-sti-Drop-of_gpio-header.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0076-drm-fix-code-style-for-embedded-structs-in-hdr_metad.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0076-drm-imx-ipuv3-Convert-to-platform-remove-callback-re.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0076-drm-sched-Define-pr_fmt-for-DRM-using-pr_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0076-drm-tve200-Use-devm_platform_ioremap_resource.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0077-drm-ingenic-Convert-to-platform-remove-callback-retu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0077-drm-sched-implement-dynamic-job-flow-control.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0077-drm-scheduler-properly-forward-fence-errors.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0077-drm-sysfs-rename-drm_sysfs_connector_status_event.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0078-drm-bridge_connector-use-drm_kms_helper_connector_ho.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0078-drm-msm-Convert-to-platform-remove-callback-returnin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0078-drm-scheduler-add-drm_sched_entity_error-and-use-rcu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0079-drm-atomic-log-drm_atomic_replace_property_blob_from.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0079-drm-panfrost-Perform-hard-reset-to-recover-GPU-if-so.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0079-drm-shmobile-Convert-to-platform-remove-callback-ret.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0079-drm-tests-Add-test-cases-for-drm_rect_intersect.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0080-drm-atomic-drop-extra-bracket-from-log-messages.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0080-drm-panfrost-Tighten-polling-for-soft-reset-and-powe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0080-drm-ssd130x-Print-the-PWM-s-label-instead-of-its-num.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0080-drm-tests-Add-test-cases-for-drm_rect_calc_hscale.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0081-drm-atomic-log-when-getting-setting-unknown-properti.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0081-drm-panfrost-Implement-ability-to-turn-on-off-GPU-cl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0081-drm-tests-Add-test-cases-for-drm_rect_calc_vscale.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0082-drm-atomic-log-when-CRTC_ID-prop-value-is-invalid.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0082-drm-panfrost-Set-clocks-on-off-during-system-sleep-o.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0082-drm-ssd130x-Use-bool-for-ssd130x_deviceinfo-flags.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0082-drm-tests-Add-test-cases-for-drm_rect_rotate.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0083-drm-atomic-log-on-attempt-to-set-legacy-DPMS-propert.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0083-drm-panfrost-Implement-ability-to-turn-on-off-regula.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0083-drm-test-Add-test-cases-for-drm_rect_rotate_inv.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0083-fbdev-au1200fb-Do-not-display-boot-up-logo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0084-drm-atomic-log-when-page-flip-is-requested-without-C.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0084-drm-panfrost-Set-regulators-on-off-during-system-sle.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0084-fbdev-mmp-mmpfb-Do-not-display-boot-up-logo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0085-drm-atomic-log-errors-in-drm_mode_atomic_ioctl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0085-drm-vc4-Switch-to-container_of_const.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0085-drm-virtio-use-uint64_t-more-in-virtio_gpu_context_i.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0085-fbdev-core-Fix-style-of-code-for-boot-up-logo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0086-drm-kms-log-when-querying-an-object-not-included-in-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0086-drm-uapi-add-explicit-virtgpu-context-debug-name.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0086-drm-vc4-hdmi-Update-all-the-planes-if-the-TV-margins.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0086-fbdev-core-Unexport-logo-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0087-drm-bridge-ps8640-Drop-the-ability-of-ps8640-to-fetc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0087-drm-gpuvm-convert-WARN-to-drm_WARN-variants.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0087-drm-vc4-hdmi-Add-Broadcast-RGB-property-to-allow-ove.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0087-fbdev-core-Move-logo-functions-into-separate-source-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0088-drm-gpuvm-don-t-always-WARN-in-drm_gpuvm_check_overf.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0088-drm-vc4-hdmi-Rename-full-range-helper.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0088-drm-vkms-Reduce-critical-section.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0088-fbdev-core-Remove-empty-internal-helpers-from-fb_log.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0089-drm-gpuvm-export-drm_gpuvm_range_valid.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0089-drm-vc4-hdmi-Swap-CSC-matrix-channels-for-YUV444.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0089-drm-vkms-Enable-ARGB8888-support-for-writeback.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0089-fbdev-core-Clean-up-include-statements-in-fbmem.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0090-drm-buddy-Improve-contiguous-memory-allocation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0090-drm-nouveau-make-use-of-drm_gpuvm_range_valid.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0090-drm-vc4-hdmi-Rework-the-CSC-matrices-organization.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0090-drm-vkms-Isolate-writeback-pixel-conversion-function.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0091-drm-amdgpu-Move-the-size-computations-to-drm-buddy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0091-drm-gpuvm-add-common-dma-resv-per-struct-drm_gpuvm.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0091-drm-vc4-hdmi-Add-a-function-to-retrieve-the-CSC-matr.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0092-drm-i915-Move-the-size-computations-to-drm-buddy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0092-drm-nouveau-make-use-of-the-GPUVM-s-shared-dma-resv.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0092-drm-vc4-hdmi-Add-BT.601-Support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0093-drm-Clear-fd-handle-callbacks-in-struct-drm_driver.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071 bsc#1212533 bsc#1212533).
- Update
  patches.suse/0093-drm-gpuvm-add-drm_gpuvm_flags-to-drm_gpuvm.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0093-drm-panel-Don-t-store-check-prepared-enabled-for-sim.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0093-drm-vc4-hdmi-Add-BT.2020-Support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0094-drm-nouveau-separately-allocate-struct-nouveau_uvmm.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0094-drm-panel-s6e63m0-Don-t-store-check-prepared-enabled.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0095-drm-bridge-dw-hdmi-change-YUV420-selection-logic-at-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0095-drm-gpuvm-reference-count-drm_gpuvm-structures.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0095-drm-panel-otm8009a-Don-t-double-check-prepared-enabl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0095-drm-vkms-allow-full-alpha-blending-on-all-planes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0096-drm-atomic-helper-drm_atomic_helper_shutdown-NULL-sh.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0096-drm-bridge-dw-hdmi-truly-enforce-420-only-formats-wh.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0096-drm-gpuvm-add-an-abstraction-for-a-VM-BO-combination.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0096-drm-vkms-drop-full-alpha-blending-TODO.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0097-drm-bridge-dw-hdmi-remove-dead-code-and-fix-indentat.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0097-drm-doc-rfc-Introduce-the-merge-plan-for-the-Xe-driv.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0097-drm-gpuvm-track-lock-validate-external-evicted-objec.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0097-drm-imx-ipuv3-Call-drm_atomic_helper_shutdown-at-shu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0098-Revert-drm-sched-Define-pr_fmt-for-DRM-using-pr_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0098-drm-ingenic-Call-drm_atomic_helper_shutdown-at-shutd.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0098-drm-panel-st7703-Rename-CMD_UNKNOWN_C6-to-CMD_SETECO.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0099-backlight-bd6107-Rename-struct-bd6107_platform_data..patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0099-drm-amd-display-Fix-Wuninitialized-in-dm_helpers_dp_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0099-drm-format-helper-Cache-buffers-with-struct-drm_form.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0099-drm-panel-st7703-Add-Anbernic-RG353V-V2-Panel-Suppor.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0100-drm-atomic-helper-Add-format-conversion-state-to-sha.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0100-drm-debugfs-Fix-drm_debugfs_remove_files-stub.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0100-drm-meson-set-variables-meson_hdmi_-storage-class-sp.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0101-backlight-gpio_backlight-Rename-field-fbdev-to-dev.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0101-drm-format-helper-Pass-format-conversion-state-to-he.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0101-drm-ssd130x-Store-the-HW-buffer-in-the-driver-privat.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0101-drm-uapi-Document-CTM-matrix-better.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0102-drm-ofdrm-Preallocate-format-conversion-buffer-in-at.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0103-backlight-lv5207lp-Rename-struct-lv5207lp_platform_d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0103-drm-komeda-add-NV12-format-to-support-writeback-laye.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0103-drm-simpledrm-Preallocate-format-conversion-buffer-i.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0103-drm-sysfs-Expose-DRM-connector-id-in-each-connector-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0104-drm-nouveau-nvif-refactor-deprecated-strncpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0104-drm-ssd130x-Preallocate-format-conversion-buffer-in-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0104-drm-sysfs-Link-DRM-connectors-to-corresponding-Type-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0104-fbdev-atyfb-Reorder-backlight-and-framebuffer-init-c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0105-drm-Remove-struct-drm_flip_task-from-DRM-interfaces.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0105-drm-nouveau-core-refactor-deprecated-strncpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0105-drm-sti-sti_hdmi-convert-to-using-is_hdmi-from-displ.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0105-fbdev-atyfb-Use-hardware-device-as-backlight-parent.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0106-drm-Fix-flip-task-docs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0106-drm-nouveau-pm-refactor-deprecated-strncpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0106-drm-rockchip-cdn-dp-call-drm_connector_update_edid_p.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0106-fbdev-aty128fb-Reorder-backlight-and-framebuffer-ini.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0107-drm-bridge-dw-hdmi-cec-Add-arbitration-lost-event.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0107-drm-scheduler-mark-jobs-without-fence-as-canceled.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0107-drm-virtio-Fix-return-value-for-VIRTGPU_CONTEXT_PARA.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0107-fbdev-aty128fb-Use-hardware-device-as-backlight-pare.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0108-drm-dp_mst-Fix-NULL-dereference-during-payload-addit.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0108-drm-test-rearrange-test-entries-in-Kconfig-and-Makef.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0108-drm-udl-delete-dead-code.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0108-fbdev-broadsheetfb-Call-device_remove_file-with-hard.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0109-drm-client-Do-not-acquire-module-reference.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0109-drm-dp_mst-Sanitize-error-return-during-payload-addi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0109-fbdev-ep93xx-fb-Alloc-DMA-memory-from-hardware-devic.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0110-accel-ivpu-Rename-cons-rx_msg_lock.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0110-drm-dp_mst-Tune-down-error-message-during-payload-ad.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0110-fbdev-ep93xx-fb-Output-messages-with-fb_info-and-fb_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0111-accel-ivpu-Do-not-use-irqsave-in-ivpu_ipc_dispatch.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0111-drm-nouveau-devinit-tu102-remove-attempt-at-loading-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0112-accel-ivpu-Do-not-use-cons-aborted-for-job_done_thre.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0112-drm-nouveau-imem-support-allocations-not-preserved-a.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0112-fbdev-fsl-diu-fb-Output-messages-with-fb_-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0113-accel-ivpu-Use-dedicated-work-for-job-timeout-detect.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0113-accel-qaic-Register-for-PCI-driver-at-the-beginning-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0113-drm-nouveau-gr-gf100-lose-contents-of-global-ctxbufs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0113-fbdev-mb862xxfb-Output-messages-with-fb_dbg.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0114-accel-ivpu-Use-threaded-IRQ-to-handle-JOB-done-messa.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0114-accel-qaic-Use-devm_drm_dev_alloc-instead-of-drm_dev.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0114-drm-nouveau-mmu-gp100-always-invalidate-TLBs-at-CACH.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0114-fbdev-metronomefb-Use-hardware-device-for-dev_err.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0115-accel-qaic-Update-MAX_ORDER-use-to-be-inclusive.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0115-drm-nouveau-kms-nv50-fix-mst-payload-alloc-fail-cras.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0115-fbdev-nvidiafb-Reorder-backlight-and-framebuffer-ini.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0116-drm-nouveau-disp-rearrange-output-methods.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0116-drm-print-Handle-NULL-drm-device-in-__drm_printk.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0116-fbdev-nvidiafb-Use-hardware-device-as-backlight-pare.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0117-drm-nouveau-disp-add-output-detect-method.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0117-fbdev-pxa168fb-Do-not-assign-to-struct-fb_info.dev.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0118-drm-nouveau-disp-add-output-method-to-fetch-edid.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0118-drm-panel-nv3051d-Add-Powkiddy-RK2023-Panel-Support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0118-fbdev-radeonfb-Reorder-backlight-and-framebuffer-cle.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0119-drm-nouveau-disp-rename-internal-output-acquire-rele.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0119-drm-panel-elida-kd35t133-trival-update-panel-size-fr.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0119-fbdev-radeonfb-Use-hardware-device-as-backlight-pare.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0120-drm-bridge-tc358768-remove-unused-variable.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0120-drm-nouveau-kms-Add-INHERIT-ioctl-to-nvkm-nvif-for-r.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0120-fbdev-rivafb-Reorder-backlight-and-framebuffer-init-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0121-drm-bridge-lt9211-Do-not-generate-HFP-HBP-HSA-and-EO.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0121-drm-nouveau-disp-shuffle-to-make-upcoming-diffs-pret.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0121-drm-panel-elida-kd35t133-drop-drm_connector_set_orie.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0121-fbdev-rivafb-Use-hardware-device-as-backlight-parent.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0122-drm-bridge-lt9611-Do-not-generate-HFP-HBP-HSA-and-EO.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0122-drm-nouveau-disp-add-acquire_dac.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0122-drm-panel-elida-kd35t133-Drop-shutdown-logic.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0122-fbdev-sh7760fb-Use-fb_dbg-in-sh7760fb_get_color_info.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0123-drm-nouveau-disp-add-acquire_sor-pior.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0123-drm-panel-elida-kd35t133-Drop-prepare-unprepare-logi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0123-fbdev-sh7760fb-Output-messages-with-fb_dbg.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0124-dma-buf-Replace-strlcpy-with-strscpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0124-drm-nouveau-disp-update-SOR-routing-immediately-on-a.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0124-drm-vkms-add-rotate-0-and-reflect-x-property.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0124-fbdev-sh7760fb-Alloc-DMA-memory-from-hardware-device.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0125-drm-nouveau-kms-nv50-pull-some-common-init-out-of-OR.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0125-drm-rockchip-vop2-Add-NV20-and-NV30-support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0125-drm-vkms-add-reflect-y-and-rotate-180-property.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0125-fbdev-sh7760fb-Use-hardware-device-with-dev_-output-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0126-drm-nouveau-kms-nv50-remove-nv_encoder.audio.connect.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0126-drm-rockchip-rk3066_hdmi-Remove-useless-mode_fixup.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0126-drm-vkms-add-rotate-90-property.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0126-fbdev-sm501fb-Output-message-with-fb_err.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0127-drm-nouveau-kms-nv50-keep-output-state-around-until-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0127-drm-rockchip-rk3066_hdmi-Switch-encoder-hooks-to-ato.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0127-drm-vkms-add-rotate-270-property.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0127-fbdev-smscufx-Detect-registered-fb_info-from-refcoun.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0128-drm-nouveau-kms-nv50-move-audio-enable-post-modeset.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0128-drm-vkms-drop-Rotation-TODO.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0128-fbdev-tdfxfb-Set-i2c-adapter-parent-to-hardware-devi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0129-drm-nouveau-disp-add-output-hdmi-config-method.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0129-fbdev-arcfb-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0129-fbdev-core-Pass-Linux-device-to-pm_vt_switch_-functi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0130-drm-arcpgu-Convert-to-platform-remove-callback-retur.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0130-drm-nouveau-disp-move-hdmi-disable-out-of-release.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0130-fbdev-au1200fb-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0130-fbdev-core-Move-framebuffer-and-backlight-helpers-in.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0131-drm-armada-Convert-to-platform-remove-callback-retur.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0131-drm-nouveau-disp-release-outputs-post-modeset.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0131-fbdev-broadsheetfb-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0131-fbdev-core-Add-fb_device_-create-destroy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0132-drm-bridge-cdns-mhdp8546-Improve-error-reporting-in-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0132-drm-nouveau-disp-remove-SOR-routing-updates-from-sup.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0132-fbdev-core-Move-procfs-code-to-separate-file.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0132-fbdev-hecubafb-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0133-drm-bridge-cdns-mhdp8546-Convert-to-platform-remove-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0133-drm-nouveau-disp-add-output-backlight-control-method.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0133-fbdev-core-Move-file-I-O-code-into-separate-file.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0133-fbdev-metronomefb-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0134-drm-bridge-tpd12s015-Convert-to-platform-remove-call.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0134-drm-nouveau-disp-add-output-lvds-config-method.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0134-fbdev-core-Rework-fb-init-code.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0134-fbdev-ps3fb-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0135-drm-etnaviv-Convert-to-platform-remove-callback-retu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0135-drm-nouveau-disp-add-hdmi-audio-hal-function.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0135-fbdev-Make-support-for-userspace-interfaces-configur.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0135-fbdev-smscufx-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0136-drm-imx-dcss-Convert-to-platform-remove-callback-ret.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0136-drm-nouveau-disp-move-dp-aux-pwr-method-to-HAL.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0136-drm-ttm-Don-t-shadow-the-operation-context.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0136-fbdev-udlfb-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0137-drm-imx-lcdc-Convert-to-platform-remove-callback-ret.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0137-drm-nouveau-disp-add-dp-aux-xfer-method.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0137-fbdev-vfb-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0138-drm-ast-Remove-vga2_clone-field.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0138-drm-kmb-Convert-to-platform-remove-callback-returnin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0138-drm-nouveau-disp-add-dp-rates-method.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0138-fbdev-xen-fbfront-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0139-drm-ast-Implement-register-helpers-in-ast_drv.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0139-drm-mediatek-Convert-to-platform-remove-callback-ret.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0139-drm-nouveau-kms-nv50-split-DP-disable-enable-into-tw.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0139-fbdev-Return-number-of-bytes-read-or-written.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0140-drm-ast-Remove-dead-else-branch-in-POST-code.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0140-drm-meson-Convert-to-platform-remove-callback-return.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0140-drm-nouveau-kms-nv50-flush-mst-disables-together.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0140-fbdev-Use-screen_buffer-in-fb_sys_-read-write.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0141-drm-ast-Remove-device-POSTing-and-config-from-chip-d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0141-drm-nouveau-Convert-to-platform-remove-callback-retu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0141-drm-nouveau-kms-nv50-fixup-sink-D3-before-tearing-do.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0141-fbdev-Don-t-re-validate-info-state-in-fb_ops-impleme.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0142-drm-ast-Set-PCI-config-before-accessing-I-O-register.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0142-drm-nouveau-disp-add-dp-train-method.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0142-drm-sprd-Convert-to-platform-remove-callback-returni.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0142-fbdev-Validate-info-screen_-base-buffer-in-fb_ops-im.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0143-drm-ast-Enable-and-unlock-device-access-early-during.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0143-drm-nouveau-disp-move-link-training-out-of-superviso.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0143-fbdev-Move-I-O-read-and-write-code-into-helper-funct.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0144-drm-ast-Set-up-release-action-right-after-enabling-M.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0144-drm-edid-firmware-drop-drm_kms_helper.edid_firmware-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0144-drm-fb-helper-Use-fb_-cfb-sys-_-read-write.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0144-drm-nouveau-disp-add-dp-sst-config-method.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0145-Documentation-vkms-clarify-devres-managed-reference-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0145-drm-ast-Distinguish-among-chip-generations.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0145-drm-nouveau-disp-add-dp-mst-id-get-put-methods.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0145-fbdev-simplefb-Suppress-error-on-missing-power-domai.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0146-drm-ast-Detect-AST-1300-model.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0146-drm-connector-document-enum-drm_connector_tv_mode-DR.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0146-drm-nouveau-disp-move-outp-conn-construction-to-chip.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0146-drm-nouveau-fifo-Remove-duplicated-include-in-chan.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0147-drm-ast-Detect-AST-1400-model.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0147-drm-nouveau-disp-move-outp-init-fini-paths-to-chipse.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0147-drm-rockchip-rk3066_hdmi-include-drm-drm_atomic.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0147-drm-sun4i-rename-sun4i_dotclock-to-sun4i_tcon_dclk.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0148-drm-ast-Detect-AST-2510-model.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0148-drm-gpuvm-Helper-to-get-range-of-unmap-from-a-remap-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0148-drm-nouveau-disp-nv50-skip-DCB_OUTPUT_TV.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0148-drm-sun4i-calculate-proper-DCLK-rate-for-DSI.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0149-drm-ast-Move-widescreen-and-tx-chip-detection-into-s.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0149-drm-nouveau-kms-nv50-create-heads-based-on-nvkm-head.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0149-dt-bindings-gpu-Add-Imagination-Technologies-PowerVR.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0150-drm-ast-Merge-config-and-chip-detection.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0150-drm-imagination-uapi-Add-PowerVR-driver-UAPI.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0150-drm-nouveau-kms-nv50-create-heads-after-outps-conns.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0151-drm-edid-make-read-only-const-array-static.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0151-drm-imagination-Add-skeleton-PowerVR-driver.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0151-drm-nouveau-kms-nv50-name-aux-channels-after-their-c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0151-drm-panel-sharp-ls043t1le01-drop-dummy-functions-and.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0152-drm-imagination-Get-GPU-resources.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0152-drm-nouveau-kms-nv50-create-connectors-based-on-nvkm.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0152-drm-panel-panel-simple-Add-BOE-EV121WXM-N10-1850-pan.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0152-drm-tests-Fix-swapped-drm_framebuffer-tests-paramete.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0153-drivers-firmware-Move-sysfb_init-from-device_initcal.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0153-drm-edid-Add-quirk-for-OSVR-HDK-2.0.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0153-drm-imagination-Add-GPU-register-headers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0153-drm-nouveau-kms-nv50-create-outputs-based-on-nvkm-in.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0154-drm-bridge-samsung-dsim-Drain-command-transfer-FIFO-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0154-drm-imagination-Add-firmware-and-MMU-related-headers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0154-drm-nouveau-kms-nv50-disable-dcb-parsing.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0154-drm-ssd130x-Fix-include-guard-name.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0155-drm-bridge-analogix-anx78xx-Add-missing-definition.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0155-drm-gud-use-vmalloc_array-and-vcalloc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0155-drm-imagination-Add-FWIF-headers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0155-drm-panel-boe-tv101wum-nl6-Remove-extra-delay.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0156-drm-drm_gem.c-Remove-surplus-else-after-return.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0156-drm-imagination-Add-GPU-ID-parsing-and-firmware-load.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0156-drm-panel-boe-tv101wum-nl6-Fine-tune-the-panel-power.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0156-drm-tegra-rgb-Parameterize-V-and-H-sync-polarities.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0157-drm-Add-kms-driver-for-loongson-display-controller.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0157-drm-imagination-Add-GEM-and-VM-related-code.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0158-drm-bridge-tc358768-Default-to-positive-h-v-syncs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0158-drm-imagination-Implement-power-management.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0158-drm-nouveau-nvkm-fini-object-children-in-reverse-ord.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0159-drm-imagination-Implement-firmware-infrastructure-an.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0159-drm-nouveau-nvkm-punt-spurious-irq-messages-to-debug.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0159-gpu-drm-bridge-No-need-to-set-device_driver-owner.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0160-drm-bridge-tc358768-Cleanup-PLL-calculations.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0160-drm-bridge-tc358768-remove-unneeded-semicolon.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0160-drm-imagination-Implement-MIPS-firmware-processor-an.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0160-drm-nouveau-fb-gp102-ga100-switch-to-simpler-vram-si.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0161-accel-ivpu-Initial-debugfs-support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0161-drm-imagination-Implement-free-list-and-HWRT-create-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0161-drm-nouveau-fb-ga102-construct-vidmem-heap-via-new-g.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0161-drm-panel-Modify-innolux-hj110iz-panel-initial-code.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0162-accel-ivpu-Add-firmware-tracing-support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0162-drm-drm_atomic_helper.c-fix-a-typo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0162-drm-imagination-Implement-context-creation-destructi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0162-drm-nouveau-fifo-remove-left-over-references-to-nvkm.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0163-accel-ivpu-Add-debugfs-files-for-testing-device-rese.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0163-drm-imagination-Implement-job-submission-and-schedul.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0163-drm-nouveau-fifo-return-ERR_PTR-from-nvkm_runl_new.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0163-drm-ttm-let-struct-ttm_device_funcs-be-placed-in-rod.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0164-accel-ivpu-Print-firmware-name-and-version.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0164-drm-imagination-Add-firmware-trace-header.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0164-drm-nouveau-fifo-ga100-remove-individual-runlists-ra.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0165-accel-ivpu-Add-fw_name-file-to-debugfs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0165-drm-imagination-Add-firmware-trace-to-debugfs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0165-drm-nouveau-fifo-ga100-add-per-runlist-nonstall-intr.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0165-fbdev-hitfb-Cast-I-O-offset-to-address.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0166-drm-imagination-Add-driver-documentation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0166-drm-nouveau-nvif-fix-potential-double-free.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0166-fbdev-matrox-Remove-trailing-whitespaces.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0167-drm-bridge-tc358768-Attempt-to-fix-DSI-horizontal-ti.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0167-drm-nouveau-kms-don-t-call-drm_dp_cec_set_edid-on-TM.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0167-ipu-v3-Include-linux-io.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0168-drm-i915-display-Use-intel_bo_to_drm_bo-instead-of-o.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0168-drm-nouveau-disp-drop-unused-argument-in-nv50_dp_mod.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0168-drm-sched-Rename-to-drm_sched_can_queue.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0169-drm-bridge-panel-Fix-device-link-for-DRM_BRIDGE_ATTA.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0169-drm-i915-drop-gt-intel_gt.h-include-from-skl_univers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0169-drm-sched-Rename-to-drm_sched_wakeup_if_can_queue.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0169-fbdev-sm712fb-Do-not-include-linux-screen_info.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0170-drm-armada-Call-drm_atomic_helper_shutdown-at-shutdo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0170-drm-i915-aux-add-separate-register-macros-and-functi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0170-drm-panel-Add-Samsung-S6D7AA0-panel-controller-drive.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0170-sysfb-Do-not-include-linux-screen_info.h-from-sysfb-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0171-drm-Call-drm_atomic_helper_shutdown-at-shutdown-time.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0171-drm-bridge-samsung-dsim-Implement-support-for-clock-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0171-drm-i915-aux-rename-dev_priv-to-i915.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0171-fbdev-broadsheetfb-Select-FB_SYS_HELPERS_DEFERRED.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0172-drm-i915-stop-including-i915_utils.h-from-intel_runt.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0172-drm-vc4-Call-drm_atomic_helper_shutdown-at-shutdown-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0172-fbdev-broadsheetfb-Generate-deferred-I-O-ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0173-drm-i915-display-debugfs-entry-to-list-display-capab.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0173-drm-nouveau-constify-pointers-to-hwmon_channel_info.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0173-drm-ssd130x-Call-drm_atomic_helper_shutdown-at-remov.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0173-fbdev-hecubafb-Select-FB_SYS_HELPERS_DEFERRED.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0174-drm-i915-display-Add-framework-to-add-parameters-spe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0174-drm-nouveau-acr-ga102-set-variable-ga102_gsps-storag.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0174-fbdev-hecubafb-Generate-deferred-I-O-ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0175-drm-hisilicon-kirin-Call-drm_atomic_helper_shutdown-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0175-drm-i915-display-Dump-also-display-parameters.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0175-drm-msm-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0175-fbdev-metronomefb-Select-FB_SYS_HELPERS_DEFERRED.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0176-drm-i915-display-Move-enable_fbc-module-parameter-un.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0176-fbdev-metronomefb-Generate-deferred-I-O-ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0177-drm-bridge-dw-hdmi-Replace-all-non-returning-strlcpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0177-drm-i915-display-Move-psr-related-module-parameters-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0177-drm-ssd130x-Drop-_helper-prefix-from-struct-drm_-_he.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0177-fbdev-ssd1307fb-Select-FB_SYS_HELPERS_DEFERRED.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0178-accel-qaic-Remove-size-field-from-struct-qaic_bo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0178-drm-i915-display-Move-vbt_firmware-module-parameter-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0178-drm-panel-samsung-s6d7aa0-use-pointer-for-drm_mode-i.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0178-fbdev-ssd1307fb-Generate-deferred-I-O-ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0179-dma-buf-sw_sync-Replace-all-non-returning-strlcpy-wi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0179-drm-i915-display-Move-lvds_channel_mode-module-param.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0179-drm-simpledrm-Add-support-for-multiple-power-domains.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0179-fbdev-xen-fbfront-Select-FB_SYS_HELPERS_DEFERRED.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0180-drm-bridge-Add-200ms-delay-to-wait-FW-HPD-status-sta.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0180-drm-i915-display-Move-panel_use_ssc-module-parameter.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0180-drm-shmobile-Use-p4cc-to-print-fourcc-codes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0180-fbdev-xen-fbfront-Generate-deferred-I-O-ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0181-drm-i915-display-Move-vbt_sdvo_panel_type-module-par.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0181-drm-imx-dcss-Call-drm_atomic_helper_shutdown-at-shut.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0181-drm-shmobile-Add-support-for-DRM_FORMAT_XRGB8888.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0182-drm-gpuvm-rename-struct-drm_gpuva_manager-to-struct-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0182-drm-i915-display-Move-enable_dc-module-parameter-und.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0182-drm-shmobile-Switch-to-drm_crtc_init_with_planes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0182-drm-virtio-Conditionally-allocate-virtio_gpu_fence.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0183-drm-gpuvm-allow-building-as-module.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0183-drm-i915-display-Move-enable_dpt-module-parameter-un.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0183-drm-shmobile-Add-missing-call-to-drm_fbdev_generic_s.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0183-nouveau-dispnv50-add-cursor-pitch-check.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0184-drm-i915-display-Move-enable_sagv-module-parameter-u.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0184-drm-nouveau-disp-use-drm_kms_helper_connector_hotplu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0184-drm-nouveau-uvmm-rename-umgr-to-base.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0184-drm-shmobile-Make-DRM_SHMOBILE-visible-on-Renesas-So.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0185-drm-bridge-tc358767-Use-devm_clk_get_enabled-helper.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0185-drm-docs-Fix-usage-stats-typos.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0185-drm-gma500-refactor-deprecated-strncpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0185-drm-i915-display-Move-disable_power_well-module-para.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0186-drm-Add-common-fdinfo-helper.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0186-drm-bridge-tfp410-Support-format-negotiation-hooks.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0186-drm-gpuvm-doc-fix-filename-references.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0186-drm-i915-display-Move-enable_ips-module-parameter-un.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0187-drm-bridge-tfp410-Set-input_bus_flags-in-atomic_chec.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0187-drm-i915-display-Move-invert_brightness-module-param.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0187-drm-msm-Switch-to-fdinfo-helper.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0187-drm-nouveau-kms-nv50-hide-unused-variables.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0188-drm-amdgpu-Switch-to-fdinfo-helper.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0188-drm-bridge-mhdp8546-Add-minimal-format-negotiation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0188-drm-bridge-use-drm_bridge_get_edid-instead-of-using-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0188-drm-i915-display-Move-edp_vswing-module-parameter-un.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0189-drm-Add-fdinfo-memory-stats.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0189-drm-bridge-lt9611uxc-use-drm_bridge_get_edid-instead.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0189-drm-bridge-mhdp8546-Set-input_bus_flags-from-atomic_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0189-drm-i915-display-Move-enable_dpcd_backlight-module-p.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0190-drm-bridge-sii902x-Support-format-negotiation-hooks.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0190-drm-i915-display-Move-load_detect_test-parameter-und.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0190-drm-msm-Add-memory-stats-to-fdinfo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0190-drm-tests-Add-calls-to-drm_fb_blit-on-supported-form.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0191-accel-qaic-Update-BO-metadata-in-a-central-location.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0191-drm-bridge-sii902x-Set-input_bus_flags-in-atomic_che.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0191-drm-doc-Relax-fdinfo-string-constraints.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0191-drm-i915-display-Move-force_reset_modeset_test-param.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0191-drm-tests-Add-new-format-conversion-tests-to-better-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0192-accel-qaic-Declare-BO-sliced-after-all-the-operation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0192-drm-bridge-adv7511-Convert-to-use-maple-tree-registe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0192-drm-bridge-tc358767-explicitly-set-readable-register.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0192-drm-gma500-Clear-fbdev-framebuffer-with-fb_memset_io.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0192-drm-i915-display-Move-disable_display-parameter-unde.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0192-drm-tidss-Update-encoder-bridge-chain-connect-model.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0193-accel-qaic-Undo-slicing-setup-done-in-qaic_attach_sl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0193-drm-bridge-cdns-mhdp8546-Fix-the-interrupt-enable-di.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0193-drm-bridge-dpc3433-Convert-to-use-maple-tree-registe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0193-drm-bridge-samsung-dsim-Fix-i.MX8M-enable-flow-to-me.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0193-drm-i915-display-Use-device-parameters-instead-of-mo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0194-accel-qaic-Clean-up-BO-during-flushing-of-transfer-l.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0194-drm-bridge-tc358767-Convert-to-use-maple-tree-regist.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0194-drm-i915-display-Move-verbose_state_checks-under-dis.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0194-drm-ttm-Use-init_on_free-to-delay-release-TTM-BOs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0195-accel-qaic-Create-a-function-to-initialize-BO.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0195-drm-amdgpu-Fix-no-procfs-build.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0195-drm-arm-Make-ARM-devices-menu-depend-on-DRM.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0195-drm-bridge-icn6211-Convert-to-use-maple-tree-registe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0195-drm-i915-display-Move-nuclear_pageflip-under-display.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0196-accel-qaic-Add-QAIC_DETACH_SLICE_BO-IOCTL.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0196-drm-bridge-lt9211-Convert-to-use-maple-tree-register.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0196-drm-bridge-samsung-dsim-fix-blanking-packet-size-cal.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0196-drm-i915-display-Move-enable_dp_mst-under-display.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0196-fbdev-hyperv_fb-Include-linux-screen_info.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0197-drm-bridge-sn65dsi83-Convert-to-use-maple-tree-regis.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0197-drm-execution-context-for-GEM-buffers-v7.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0197-drm-i915-remove-display-device-info-from-i915-capabi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0198-drm-add-drm_exec-selftests-v4.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0198-drm-bridge-samsung-dsim-Fetch-pll-clock-frequency-au.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0198-drm-i915-display-Reset-message-bus-after-each-read-w.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0198-drm-panel-ili9322-Remove-redundant-volatle_reg-opera.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0199-drm-amdkfd-switch-over-to-using-drm_exec-v3.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0199-drm-bridge-samsung-dsim-Select-GENERIC_PHY_MIPI_DPHY.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0199-drm-i915-sprite-move-sprite_name-to-intel_sprite.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0199-drm-panel-ili9322-Convert-to-use-maple-tree-register.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0200-drm-amdgpu-use-drm_exec-for-GEM-and-CSA-handling-v2.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0200-drm-bridge-samsung-dsim-Dynamically-configure-DPHY-t.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0200-drm-i915-lnl-Extend-C10-C20-phy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0200-drm-panel-Add-driver-for-BOE-RM692E5-AMOLED-panel.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0201-drm-amdgpu-use-drm_exec-for-MES-testing.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0201-drm-bridge-samsung-dsim-Support-non-burst-mode.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0201-drm-doc-Document-DRM-device-reset-expectations.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0201-drm-i915-lnl-Fix-check-for-TC-phy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0202-drm-amdgpu-use-the-new-drm_exec-object-for-CS-v3.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0202-drm-i915-display-Abstract-C10-C20-pll-hw-readout.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0202-drm-panel-simple-Add-Ampire-AM-800480L1TMQW-T00H.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0202-drm-vblank-Warn-when-silently-cancelling-vblank-work.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0203-drm-i915-display-Abstract-C10-C20-pll-calculation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0203-drm-loongson-Remove-a-useless-check-in-cursor_plane_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0203-drm-panfrost-Add-cycle-count-GPU-register-definition.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0204-accel-ivpu-Update-debugfs-to-latest-changes-in-DRM.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0204-drm-i915-fix-Makefile-sort-and-indent.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0204-drm-panfrost-Add-fdinfo-support-GPU-load-metrics.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0204-drm-ssd130x-Change-pixel-format-used-to-compute-the-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0204-drm-stm-dsi-Use-devm_platform_ioremap_resource.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0205-accel-ivpu-Compile-ivpu_debugfs.c-conditionally.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0205-drm-i915-move-Makefile-display-debugfs-files-next-to.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0205-drm-panel-ld9040-Use-better-magic-values.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0205-drm-panfrost-Add-fdinfo-support-for-memory-stats.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0206-drm-drm_file-Add-DRM-obj-s-RSS-reporting-function-fo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0206-drm-i915-bios-Clamp-VBT-HDMI-level-shift-on-BDW.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0206-drm-lcdif-Drop-unnecessary-NULL-pointer-check-on-lcd.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0206-drm-panel-ld9040-Register-a-backlight-device.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0207-drm-drv-use-enum-drm_minor_type-when-appropriate.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0207-drm-lcdif-Determine-bus-format-and-flags-in-atomic_c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0207-drm-panfrost-Implement-generic-DRM-object-RSS-report.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0208-drm-amd-pm-Annotate-struct-smu10_voltage_dependency_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0208-drm-file-use-explicit-values-for-enum-drm_minor_type.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0208-drm-i915-Abstract-the-extra-JSL-EHL-DPLL4-power-doma.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0208-drm-lcdif-Check-consistent-bus-format-and-flags-acro.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0209-drm-amdgpu-discovery-Annotate-struct-ip_hw_instance-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0209-drm-i915-Move-the-DPLL-extra-power-domain-handling-u.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0209-drm-lcdif-Add-multiple-encoders-and-first-bridges-su.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0210-drm-i915-Extract-_intel_-enable-disable-_shared_dpll.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0210-drm-i915-selftests-Annotate-struct-perf_series-with-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0210-drm-lcdif-Add-i.MX93-LCDIF-compatible-string.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0211-drm-Switch-i2c-drivers-back-to-use-.probe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0211-drm-i915-Move-the-g45-PEG-band-gap-HPD-workaround-to.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0211-drm-manager-to-keep-track-of-GPUs-VA-mappings.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0211-drm-msm-dpu-Annotate-struct-dpu_hw_intr-with-__count.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0212-drm-debugfs-provide-infrastructure-to-dump-a-DRM-GPU.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0212-drm-i915-hdcp-Rename-HCDP-1.4-enablement-function.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0212-drm-nouveau-pm-Annotate-struct-nvkm_perfdom-with-__c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0212-drm-panel-edp-Convert-to-platform-remove-callback-re.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0213-drm-bridge-display-connector-rename-dp_pwr-to-connec.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0213-drm-i915-hdcp-Convert-intel_hdcp_enable-to-a-blanket.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0213-drm-syncobj-add-IOCTL-to-register-an-eventfd.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0213-drm-vc4-Annotate-struct-vc4_perfmon-with-__counted_b.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0214-drm-bridge-display-connector-handle-hdmi-pwr-supply.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0214-drm-i915-hdcp-Add-more-conditions-to-enable-hdcp.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0214-drm-panel-simple-Drop-prepared_time.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0214-drm-virtio-Annotate-struct-virtio_gpu_object_array-w.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0215-drm-i915-mst-Swap-TRANSCONF-vs.-FECSTALL_DIS_DPTSTRE.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0215-drm-manager-Fix-printk-format-for-size_t.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0215-drm-ttm-Remove-redundant-code-in-ttm_tt_init_fields.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0215-drm-vmwgfx-Annotate-struct-vmw_surface_dirty-with-__.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0216-drm-debugfs-Silence-warning-from-cast.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0216-drm-i915-mst-Disable-transcoder-before-deleting-the-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0216-drm-i915-ttm-Add-I915_BO_PREALLOC.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0216-drm-v3d-Annotate-struct-v3d_perfmon-with-__counted_b.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0217-drm-dp-switch-drm_dp_downstream_-helpers-to-struct-d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0217-drm-i915-display-Set-I915_BO_ALLOC_USER-for-fb.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0217-drm-i915-mst-Clear-ACT-just-before-triggering-payloa.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0217-gpu-host1x-Explicitly-include-correct-DT-includes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0218-drm-Explicitly-include-correct-DT-includes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0218-drm-i915-Add-a-function-to-mmap-framebuffer-obj.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0218-drm-i915-mst-Always-write-CHICKEN_TRANS.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0218-drm-panel-nv3051d-Add-Support-for-Anbernic-351V.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0219-drm-amd-display-Fix-mst-hub-unplug-warning.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0219-drm-i915-display-Add-helper-func-to-get-intel_fbdev-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0219-drm-i915-display-Use-dma_fence-interfaces-instead-of.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0220-drm-arm-komeda-Remove-component-framework-and-add-a-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0220-drm-exynos-dsi-Convert-to-platform-remove-callback-r.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0220-drm-i915-display-Implement-fb_mmap-callback-function.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0220-drm-i915-display-Use-intel_bo_to_drm_bo-instead-of-o.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0221-drm-bridge-samsung-dsim-add-more-mipi-dsi-device-deb.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0221-drm-bridge-tc358767-increase-PLL-lock-time-delay.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0221-drm-i915-Extract-hsw_chicken_trans_reg.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0221-drm-i915-mtl-Disable-stolen-memory-backed-FB-for-A0.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0222-drm-bridge-samsung-dsim-reread-ref-clock-before-conf.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0222-drm-bridge-tc358767-give-VSDELAY-some-positive-value.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0222-drm-i915-Make-IRQ-reset-and-postinstall-multi-gt-awa.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0222-drm-i915-Stop-using-a-reg-variable.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0223-drm-bridge-samsung-dsim-update-PLL-reference-clock.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0223-drm-i915-Extract-mchbar_reg.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0223-drm-i915-gt-Consider-multi-gt-instead-of-to_gt.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0223-drm-ssd130x-Fix-pitch-calculation-in-ssd130x_fb_blit.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0224-drm-bridge-samsung-dsim-adjust-porches-by-rounding-u.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0224-drm-i915-dsi-Remove-dead-GLK-checks.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0224-drm-i915-gem-Consider-multi-gt-instead-of-to_gt.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0224-video-Add-auxiliary-display-drivers-to-Graphics-supp.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0225-drm-bridge-samsung-dsim-calculate-porches-in-Hz.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0225-drm-i915-dsi-Extract-port_ctrl_reg.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0225-drm-i915-selftests-Consider-multi-gt-instead-of-to_g.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0225-fbdev-Move-core-fbdev-symbols-to-a-separate-Kconfig-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0226-drm-i915-Remove-unused-for_each_uabi_class_engine.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0226-drm-i915-mtl-Extend-Wa_22011802037-to-MTL-A-step.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0226-drm-panel-simple-allow-LVDS-format-override.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0226-fbdev-Split-frame-buffer-support-in-FB-and-FB_CORE-s.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0227-Documentation-gpu-fix-Panfrost-documentation-build-w.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0227-drm-Make-FB_CORE-to-be-selected-if-DRM-fbdev-emulati.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0227-drm-i915-Move-for_each_engine-out-of-i915_drv.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0227-drm-i915-mtl-WA-to-clear-RDOP-clock-gating.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0228-drm-i915-dp_mst-Disable-DSC-on-ICL-MST-outputs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0228-drm-i915-mtl-Set-has_llc-0.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0228-drm-rockchip-vop2-Demote-message-in-mod_supported-to.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0229-drm-bridge-it6505-Fix-Kconfig-indentation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0229-drm-i915-display-Support-PSR-entry-VSC-packet-to-be-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0229-drm-i915-mtl-Define-MOCS-and-PAT-tables-for-MTL.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0229-drm-rockchip-vop2-Convert-to-use-maple-tree-register.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0230-drm-bridge-Remove-redundant-i2c_client-in-anx7625-it.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0230-drm-i915-move-display-mutex-inits-to-display-code.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0230-drm-i915-mtl-fix-mocs-selftest.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0231-drm-i915-i915_drv-Use-proper-parameter-naming-in-for.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0231-drm-i915-move-display-spinlock-init-to-display-code.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0231-drm-managed-Clean-up-GFP_-flag-usage-in-drmm_kmalloc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0231-drm-rockchip-remove-redundant-of_match_ptr.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0232-drm-Remove-flag-FBINFO_DEFAULT-from-fbdev-emulation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0232-drm-i915-i915_drv-Use-i915-instead-of-dev_priv-insie.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0232-drm-rockchip-dsi-Use-devm_platform_get_and_ioremap_r.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0233-drm-dp_mst-Add-helper-to-determine-if-an-MST-port-is.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0233-drm-i915-mtl-Add-PTE-encode-function.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0233-fbdev-Remove-FBINFO_DEFAULT-from-static-structs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0234-drm-dp_mst-Factor-out-a-helper-to-check-the-atomic-s.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0234-drm-i915-mtl-workaround-coherency-issue-for-Media.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0234-fbdev-Remove-FBINFO_DEFAULT-from-kzalloc-ed-structs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0235-drm-dp_mst-Swap-the-order-of-checking-root-vs.-non-r.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0235-drm-i915-selftest-Record-GT-error-for-gt-failure.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0235-drm-panel-ltk050h3146w-add-mipi_dsi_device.mode_flag.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0235-fbdev-Remove-FBINFO_DEFAULT-from-devm_kzalloc-ed-str.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0236-drm-dp_mst-Allow-DSC-in-any-Synaptics-last-branch-de.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0236-drm-i915-mtl-Add-workaround-14018778641.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0236-drm-panel-ltk050h3146w-add-support-for-Leadtek-LTK05.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0236-fbdev-Remove-FBINFO_DEFAULT-from-framebuffer_alloc-e.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0237-drm-dp-Add-DP_HBLANK_EXPANSION_CAPABLE-and-DSC_PASST.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0237-drm-i915-dg2-Remove-Wa_15010599737.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0237-drm-i915-hwmon-Get-mutex-and-rpm-ref-just-once-in-hw.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0238-drm-dp_mst-Add-HBLANK-expansion-quirk-for-Synaptics-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0238-drm-i915-guc-Disable-PL1-power-limit-when-loading-Gu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0238-drm-i915-selftests-Align-igt_spinner_create_request-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0239-drm-dp-Add-helpers-to-calculate-the-link-BW-overhead.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0239-drm-i915-hwmon-Block-waiting-for-GuC-reset-to-comple.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0240-drm-i915-dp_mst-Enable-FEC-early-once-it-s-known-DSC.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0240-drm-i915-mtl-Implement-Wa_14019141245.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0241-drm-i915-Migrate-platform-dependent-mock-hugepage-se.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0241-drm-i915-dp-Specify-the-FEC-overhead-as-an-increment.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0241-fbdev-fsl-diu-fb-Remove-flag-FBINFO_DEFAULT.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0242-drm-i915-Use-correct-huge-page-manager-for-MTL.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0242-drm-i915-dp-Pass-actual-BW-overhead-to-m_n-calculati.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0242-fbdev-Remove-FBINFO_FLAG_DEFAULT-from-kzalloc-ed-str.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0243-drm-i915-dp_mst-Account-for-FEC-and-DSC-overhead-dur.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0243-fbdev-Remove-FBINFO_FLAG_DEFAULT-from-framebuffer_al.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0244-drm-i915-dp_mst-Add-atomic-state-for-all-streams-on-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0244-drm-i915-selftest-Update-the-SLPC-selftest.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0244-fbdev-atafb-Remove-flag-FBINFO_FLAG_DEFAULT.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0245-drm-i915-dp_mst-Program-the-DSC-PPS-SDP-for-each-str.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0245-drm-i915-rc6-throw-out-set-wrapper.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0245-fbdev-pxafb-Remove-flag-FBINFO_FLAG_DEFAULT.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0246-drm-i915-dp-Make-sure-the-DSC-PPS-SDP-is-disabled-wh.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0246-i915-pmu-Add-support-for-total-context-runtime-for-G.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0247-drm-i915-dp_mst-Add-missing-DSC-compression-disablin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0247-drm-i915-fdinfo-Enable-fdinfo-for-GuC-backends.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0247-fbdev-Remove-FBINFO_DEFAULT-and-FBINFO_FLAG_DEFAULT.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0248-drm-i915-dp-Rename-intel_ddi_disable_fec_state-to-in.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0248-drm-i915-gt-Use-gt_err-for-GT-info.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0248-fbdev-Document-that-framebuffer_alloc-returns-zero-e.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0249-drm-i915-dp-Wait-for-FEC-detected-status-in-the-sink.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0249-drm-i915-guc-Force-a-reset-on-internal-GuC-error.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0249-drm-i915-selftests-Use-gt_err-for-GT-info.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0249-drm-panel-db7430-remove-unused-variables.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0250-drm-i915-dp-Disable-FEC-ready-flag-in-the-sink.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0250-drm-i915-guc-Consolidate-duplicated-capture-list-cod.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0250-drm-i915-mtl-Adding-DeviceID-for-Arrowlake-S-under-M.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0250-fbdev-Add-fb_ops-init-macros-for-framebuffers-in-DMA.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0251-drm-fbdev-dma-Use-fbdev-DMA-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0251-drm-i915-dp_mst-Handle-the-Synaptics-HBlank-expansio.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0251-drm-i915-gsc-define-gsc-fw.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0251-drm-i915-guc-Capture-list-naming-clean-up.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0252-drm-i915-dp_mst-Enable-decompression-in-the-sink-fro.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0252-drm-i915-guc-Fix-error-capture-for-virtual-engines.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0252-drm-tegra-Use-fbdev-DMA-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0253-drm-i915-dp-Enable-DSC-via-the-connector-decompressi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0253-drm-i915-gt-Wait-longer-for-tasks-in-migrate-selftes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0253-drm-i915-gvt-fix-intel_vgpu_alloc_resource-kernel-do.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0253-drm-tegra-Set-fbdev-FBINFO_VIRTFB-flag.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0254-drm-i915-Add-Wa_14015150844.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0254-drm-i915-dp_mst-Enable-DSC-passthrough.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0254-drm-i915-vma-fix-kernel-doc-function-name-for-i915_v.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0254-drm-tegra-Store-pointer-to-vmap-ed-framebuffer-in-sc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0255-drm-exynos-Use-fbdev-DMA-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0255-drm-i915-dp_mst-Enable-MST-DSC-decompression-for-all.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0255-drm-i915-mtl-Drop-Wa_14017240301.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0255-drm-i915-utils-drop-kernel-doc-from-__wait_for.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0256-drm-exynos-Set-fbdev-FBINFO_VIRTFB-flag.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0256-drm-i915-Factor-out-function-to-clear-pipe-update-fl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0256-drm-i915-Run-relevant-bits-of-debugfs-drop_caches-pe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0256-drm-i915-vma-document-struct-i915_vma_resource-waker.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0257-drm-i915-dp_mst-Force-modeset-CRTC-if-DSC-toggling-r.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0257-drm-i915-gt-skip-WA-verification-for-GEN7_MISCCPCTL-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0257-drm-i915-perf-fix-i915_perf_ioctl_version-kernel-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0257-drm-omapdrm-Set-VM-flags-in-GEM-object-mmap-function.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0258-drm-i915-Add-Wa_18022495364.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0258-drm-i915-dp_mst-Improve-BW-sharing-between-MST-strea.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0258-drm-i915-error-fix-i915_capture_error_state-kernel-d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0258-drm-omapdrm-Use-GEM-mmap-for-fbdev-emulation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0259-drm-i915-dp_mst-Check-BW-limitations-only-after-all-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0259-drm-i915-huc-silence-injected-failure-in-the-load-vi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0259-drm-i915-request-drop-kernel-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0259-drm-omapdrm-Set-fbdev-FBINFO_VIRTFB-flag.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0260-drm-i915-Query-compressed-bpp-properly-using-correct.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0260-drm-i915-gem-fix-i915_gem_object_lookup_rcu-kernel-d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0260-drm-i915-pxp-mtl-Update-pxp-firmware-response-timeou.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0260-fbdev-Remove-FB_DEFAULT_SYS_OPS.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0261-drm-i915-Drop-redundant-modeset-check.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0261-drm-i915-engine-fix-kernel-doc-function-name-for-int.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0261-drm-i915-pxp-mtl-Update-pxp-firmware-packet-size.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0261-fbdev-Harmonize-some-comments-in-linux-fb.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0262-drm-i915-Split-intel_update_crtc-into-two-parts.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0262-drm-i915-context-fix-kernel-doc-parameter-descriptio.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0262-drm-i915-lrc-User-PXP-contexts-requires-runalone-bit.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0262-drm-panel-ld9040-add-backlight-Kconfig-dependency.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0263-drm-ast-Do-not-enable-PCI-resources-multiple-times.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0263-drm-i915-Do-plane-etc.-updates-more-atomically-acros.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0263-drm-i915-gtt-fix-i915_vm_resv_put-kernel-doc-paramet.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0263-drm-i915-refactor-deprecated-strncpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0264-drm-i915-engine-hide-preempt_hang-selftest-member-fr.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0264-drm-i915-gt-Update-RC6-mask-for-mtl_drpc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0264-drm-i915-gvt-Clean-up-zero-initializers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0264-drm-ssd130x-Inline-the-ssd130x_buf_-alloc-free-funct.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0265-drm-i915-gt-remove-a-static-inline-that-requires-inc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0265-drm-i915-guc-add-dbgfs_node-member-kernel-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0265-drm-panelreplay-dpcd-register-definition-for-panelre.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0265-drm-ssd130x-Allocate-buffer-in-the-plane-s-.atomic_c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0266-dma-buf-Fix-the-typo-in-DMA-BUF-statistics-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0266-drm-i915-gem-remove-inlines-from-i915_gem_execbuffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0266-drm-i915-guc-drop-lots-of-kernel-doc-markers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0266-drm-i915-psr-Move-psr-specific-dpcd-init-into-own-fu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0267-drm-amdgpu-Rename-aqua_vanjaram_reg_init.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0267-drm-i915-Add-Wa_18028616096.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0267-drm-i915-guc-add-intel_guc_state_capture-member-docs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0267-drm-i915-panelreplay-Initializaton-and-compute-confi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0268-drm-amd-display-Remove-else-after-return-statement-i.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0268-drm-i915-active-fix-kernel-doc-for-function-paramete.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0268-drm-i915-panelreplay-Enable-panel-replay-dpcd-initia.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0268-drm-i915-perf-Remove-gtt_offset-from-stream-oa_buffe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0269-drm-amd-display-Remove-else-after-return-in-dm_crtc_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0269-drm-i915-Do-not-disable-preemption-for-resets.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0269-drm-i915-panelreplay-enable-disable-panel-replay.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0269-drm-i915-pmu-drop-kernel-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0270-drm-amd-display-Clean-up-style-problems-in-amdgpu_dm.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0270-drm-i915-Avoid-endless-HPD-poll-detect-loop-via-runt.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0270-drm-i915-abstract-plane-protection-check.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0270-drm-i915-pxp-fix-kernel-doc-for-member-dev_link.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0271-drm-amd-display-Remove-redundant-braces-in-amdgpu_dm.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0271-drm-i915-Don-t-change-the-status-of-forced-connector.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0271-drm-i915-remove-excess-functions-from-plane-protecti.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0271-drm-i915-scatterlist-fix-kernel-doc-parameter-docume.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0272-drm-amd-display-Use-seq_puts-in-amdgpu_current_color.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0272-drm-i915-Don-t-change-the-status-of-forced-connector.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0272-drm-i915-mtl-Define-GSC-Proxy-component-interface.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0272-drm-i915-update-in-source-bug-filing-URLs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0273-drm-amd-display-fix-comment-typo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0273-drm-i915-mtl-C20-state-verification.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0273-drm-i915-vdsc-Fix-first_line_bpg_offset-calculation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0273-mei-gsc_proxy-add-gsc-proxy-driver.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0274-drm-amd-Use-attribute-groups-for-PSP-flashing-attrib.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0274-drm-display-dp-Add-helper-function-to-get-DSC-bpp-pr.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0274-drm-i915-dp-Fix-LT-debug-print-in-SDP-CRC-enable.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0274-drm-i915-gsc-add-initial-support-for-GSC-proxy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0275-drm-amd-Make-flashing-messages-quieter.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0275-drm-i915-display-Store-compressed-bpp-in-U6.4-format.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0275-drm-i915-gsc-add-support-for-GSC-proxy-interrupt.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0275-drm-i915-pxp-mtl-intel_pxp_init_hw-needs-runtime-pm-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0276-drm-amd-Convert-USB-C-PD-F-W-attributes-into-groups.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0276-drm-i915-display-Consider-fractional-vdsc-bpp-while-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0276-drm-i915-pxp-Optimize-GET_PARAM-PXP_STATUS.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0276-drm-i915-vma-fix-struct-i915_vma_bindinfo-kernel-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0277-drm-amd-Add-documentation-for-how-to-flash-a-dGPU.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0277-drm-i915-audio-Consider-fractional-vdsc-bpp-while-co.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0277-drm-i915-display-Remove-unused-POWER_DOMAIN_MASK.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0277-drm-i915-gem-fix-function-pointer-member-kernel-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0278-drm-amd-Detect-IFWI-or-PD-upgrade-support-in-psp_ear.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0278-drm-i915-cx0-Add-intel_cx0_get_owned_lane_mask.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0278-drm-i915-dsc-mtl-Add-support-for-fractional-bpp.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0278-drm-i915-scatterlist-fix-kernel-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0279-drm-amd-adjust-whitespace-for-amdgpu_psp.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0279-drm-i915-Simplify-intel_cx0_program_phy_lane-with-lo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0279-drm-i915-dp-Iterate-over-output-bpp-with-fractional-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0279-drm-i915-ttm-fix-i915_ttm_to_gem-kernel-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0280-drm-amdkfd-Access-gpuvm_export_dmabuf-API-to-get-Dma.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0280-drm-i915-cx0-Enable-disable-TX-only-for-owned-PHY-la.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0280-drm-i915-dsc-Add-debugfs-entry-to-validate-DSC-fract.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0280-drm-i915-use-kernel-doc-Werror-when-CONFIG_DRM_I915_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0281-drm-amdgpu-return-an-error-if-query_video_caps-is-no.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0281-drm-i915-cx0-Program-vswing-only-for-owned-lanes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0281-drm-i915-dsc-Allow-DSC-only-with-fractional-bpp-when.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0281-drm-i915-uc-Track-patch-level-versions-on-reduced-ve.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0282-drm-amdgpu-Update-invalid-PTE-flag-setting.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0282-drm-i915-display-Use-int-for-entry-setup-frames.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0282-drm-i915-mtl-Define-GuC-firmware-version-for-MTL.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0283-drm-amdgpu-skip-address-adjustment-for-GFX-RAS-injec.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0283-drm-i915-dp-Tune-down-FEC-detection-timeout-error-me.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0283-drm-i915-guc-Decode-another-GuC-load-failure-case.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0284-drm-amd-display-Clean-up-warnings-in-amdgpu_dm_pp_sm.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0284-drm-i915-guc-Print-status-register-when-waiting-for-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0284-drm-i915-selftest-Simplify-Y-major-tiling-in-blit-se.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0284-drm-i915-xe2lpd-implement-WA-for-underruns-while-ena.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0285-drm-amd-display-Remove-unnecessary-casts-in-amdgpu_d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0285-drm-i915-Eliminate-has_4tile-feature-flag.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0285-drm-i915-panelreplay-Debugfs-support-for-panel-repla.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0285-drm-i915-uc-Enhancements-to-firmware-table-validatio.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0286-drm-amd-display-Clean-up-warnings-in-amdgpu_dm-_mst_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0286-drm-i915-Fix-fractional-bpp-handling-in-intel_link_b.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0286-drm-i915-dp-Consider-output_format-while-computing-d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0286-drm-i915-uc-Reject-duplicate-entries-in-firmware-tab.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0287-drm-amdkfd-Use-KIQ-to-unmap-HIQ.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0287-drm-i915-dp-Move-compressed-bpp-check-with-420-forma.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0287-drm-i915-dsb-DSB-code-refactoring.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0287-drm-i915-uc-Make-unexpected-firmware-versions-an-err.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0288-drm-amdgpu-have-bos-for-PDs-PTS-cpu-accessible-when-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0288-drm-i915-display-keep-struct-intel_display-members-s.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0288-drm-i915-dp_mst-Use-output_format-to-get-the-final-l.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0288-drm-i915-mtl-Drop-FLAT-CCS-check.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0289-drm-amd-amdgpu-Add-cu_occupancy-sysfs-file-to-GFX9.4.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0289-drm-i915-dp-Use-consistent-name-for-link-bpp-and-com.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0289-drm-i915-move-_crtc_clock_get-to-intel_dpll.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0289-drm-i915-mtl-Add-MTL-for-remapping-CCS-FBs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0290-drm-amdkfd-Skip-handle-mapping-SVM-range-with-no-GPU.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0290-drm-i915-add-vlv_pipe_to_phy-helper-to-replace-DPIO_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0290-drm-i915-dp-Update-Bigjoiner-interface-bits-for-comp.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0290-drm-i915-mtl-Fix-the-wa-number-for-Wa_22016670082.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0291-drm-amdgpu-Change-golden-settings-for-GFX-v9.4.3.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0291-drm-i915-convert-vlv_dpio_read-write-from-pipe-to-ph.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0291-drm-i915-intel_cdclk-Add-vdsc-with-bigjoiner-constra.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0291-drm-i915-preparation-for-using-PAT-index.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0292-drm-amdgpu-Fix-error-warnings-in-gmc_v9_0.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0292-drm-i915-dp-Remove-extra-logs-for-printing-DSC-info.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0292-drm-i915-fbc-Split-plane-size-vs.-surface-size-check.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0292-drm-i915-use-pat_index-instead-of-cache_level.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0293-drm-i915-dp-Avoid-forcing-DSC-BPC-for-MST-case.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0293-drm-i915-fbc-Bump-max-surface-size-to-8kx4k-on-icl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0293-drm-i915-pxp-Add-GSC-CS-back-end-resource-init-and-c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0294-drm-amd-display-Block-optimize-on-consecutive-FAMS-e.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0294-drm-i915-dp-Add-functions-to-get-min-max-src-input-b.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0294-drm-i915-fbc-Bump-ivb-FBC-max-surface-size-to-4kx4k.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0294-drm-i915-pxp-Add-MTL-hw-plumbing-enabling-for-KCR-op.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0295-drm-amdgpu-Fix-warnings-in-gfxhub_-v1_0-v1_2.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0295-drm-dp_mst-Store-the-MST-PBN-divider-value-in-fixed-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0295-drm-i915-dp-Check-min-bpc-DSC-limits-for-dsc_force_b.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0295-drm-i915-pxp-Add-MTL-helpers-to-submit-Heci-Cmd-Pack.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0296-drm-amdgpu-Remove-redundant-GFX-v9.4.3-sequence.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0296-drm-dp_mst-Fix-PBN-divider-calculation-for-UHBR-rate.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0296-drm-i915-dp-Avoid-left-shift-of-DSC-output-bpp-by-4.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0296-drm-i915-pxp-Add-GSC-CS-backend-to-send-GSC-fw-messa.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0297-drm-amdgpu-Fix-warnings-in-gfxhub_v2_0.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0297-drm-dp_mst-Add-kunit-tests-for-drm_dp_get_vc_payload.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0297-drm-i915-dp-Rename-helper-to-get-DSC-max-pipe_bpp.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0297-drm-i915-pxp-Add-ARB-session-creation-and-cleanup.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0298-drm-amdgpu-Prefer-dev_warn-over-printk.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0298-drm-i915-dp-Replace-intel_dp_is_uhbr_rate-with-drm_d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0298-drm-i915-dp-Separate-out-functions-for-edp-DP-for-co.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0298-drm-i915-uapi-pxp-Add-a-GET_PARAM-for-PXP.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0299-drm-amdgpu-Fix-warnings-in-gmc_v10_0.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0299-drm-i915-dp-Account-for-channel-coding-efficiency-on.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0299-drm-i915-dp-Add-DSC-BPC-BPP-constraints-while-select.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0299-drm-i915-pxp-On-MTL-KCR-enabling-doesn-t-wait-on-tee.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0300-drm-amdgpu-Fix-errors-warnings-in-gmc_-v6_0-v7_0.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0300-drm-i915-dp-Fix-UHBR-link-M-N-values.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0300-drm-i915-dp-Separate-out-function-to-get-compressed-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0300-drm-i915-pxp-Enable-PXP-with-MTL-GSC-CS.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0301-drm-amdgpu-Fix-warnings-in-gfxhub_v2_1.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0301-drm-i1915-guc-Fix-probe-injection-CI-failures-after-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0301-drm-i915-dp-Get-optimal-link-config-to-have-best-com.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0301-drm-i915-dp_mst-Calculate-the-BW-overhead-in-intel_d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0302-drm-amdgpu-Remove-else-after-return-statement-in-gmc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0302-drm-i915-dp-Check-src-sink-compressed-bpp-limit-for-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0302-drm-i915-dp_mst-Fix-PBN-MTP_TU-size-calculation-for-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0302-drm-i915-guc-Fix-confused-register-capture-list-crea.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0303-drm-amdgpu-Fix-warnings-in-gmc_v11_0.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0303-drm-i915-dp-Check-if-force_dsc_output_format-is-poss.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0303-drm-i915-dp-Report-a-rounded-down-value-as-the-maxim.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0303-drm-i915-hwmon-Silence-UBSAN-uninitialized-bool-vari.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0304-drm-amdgpu-Remove-else-after-return-statement-in-gfx.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0304-drm-i915-Dump-error-capture-to-kernel-log.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0304-drm-i915-display-Remove-unused-POWER_DOMAIN_MODESET.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0304-drm-i915-dp-Simplify-intel_dp_max_data_rate.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0305-drm-amdgpu-vkms-drop-redundant-set-of-fb_modifiers_n.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0305-drm-i915-dp-Reuse-intel_dp_-max-effective-_data_rate.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0305-drm-i915-guc-Dump-error-capture-to-dmesg-on-CTB-erro.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0306-drm-amd-pm-disbale-dcefclk-device-sysnode-on-GFX-v9..patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0306-drm-i915-dsi-assume-BXT-gpio-works-for-non-native-GP.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0306-drm-i915-guc-slpc-Disable-rps_boost-debugfs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0307-drm-amdgpu-Fix-warnings-in-gmc_v8_0.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0307-drm-i915-display-remove-redundant-parameter-from-sdp.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0307-drm-i915-dsi-switch-mipi_exec_gpio-from-dev_priv-to-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0307-drm-i915-mtl-do-not-enable-render-power-gating-on-MT.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0308-drm-amdgpu-Fix-warnings-in-gfxhub_-v3_0-v3_0_3.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0308-drm-i915-display-combine-DP-audio-compute-config-ste.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0308-drm-i915-dsi-clarify-GPIO-exec-sequence.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0308-drm-i915-mtl-Add-MTL-performance-tuning-changes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0309-drm-amdgpu-Fix-errors-warnings-in-gfx_v10_0.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0309-drm-i915-display-add-lock-while-printing-frontbuffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0309-drm-i915-dsi-rename-platform-specific-_exec_gpio-to-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0309-drm-i915-mtl-Extend-Wa_16014892111-to-MTL-A-step.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0310-drm-amdgpu-gfx9-move-update_spm_vmid-out-of-rlc_init.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0310-drm-i915-Fix-memory-leaks-in-function-live_nop_switc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0310-drm-i915-dsi-bxt-icl-GPIO-set-value-do-not-need-gpio.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0310-drm-i915-sdvo-Issue-SetTargetOutput-prior-to-GetAtta.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0311-drm-amdgpu-gfx10-move-update_spm_vmid-out-of-rlc_ini.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0311-drm-i915-dsi-Replace-while-1-with-one-with-clear-exi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0311-drm-i915-pmu-Change-bitmask-of-enabled-events-to-u32.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0311-drm-i915-sdvo-Protect-macro-args.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0312-drm-amdgpu-Increase-soft-IH-ring-size.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0312-drm-i915-dsi-Get-rid-of-redundant-else.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0312-drm-i915-pmu-Support-PMU-for-all-engines.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0312-drm-i915-sdvo-s-sdvo_inputs_mask-sdvo_num_inputs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0313-drm-i915-Don-t-warn-about-zero-N-P-in-_calc_dpll_par.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0313-drm-i915-dsi-Replace-check-with-a-missing-MIPI-seque.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0313-drm-i915-pmu-Skip-sampling-engines-with-no-enabled-c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0314-drm-amdkfd-add-kfd2kgd-debugger-callbacks-for-GC-v9..patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0314-drm-i915-Fully-populate-crtc_state-dpll.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0314-drm-i915-dsi-Remove-GPIO-lookup-table-at-the-end-of-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0314-drm-i915-pmu-Transform-PMU-parking-code-to-be-GT-bas.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0315-drm-amdkfd-restore-debugger-additional-info-for-gfx-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0315-drm-i915-dsi-Fix-wrong-initial-value-for-GPIOs-in-bx.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0315-drm-i915-pmu-Add-reference-counting-to-the-sampling-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0315-drm-i915-sdvo-Pick-the-TV-dotclock-from-adjusted_mod.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0316-drm-amdkfd-enable-watch-points-globally-for-gfx943.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0316-drm-i915-dsi-Extract-common-soc_gpio_set_value-helpe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0316-drm-i915-pmu-Prepare-for-multi-tile-non-engine-count.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0316-drm-i915-sdvo-Fail-gracefully-if-the-TV-dotclock-is-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0317-drm-amdkfd-add-multi-process-debugging-support-for-G.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0317-drm-i915-dsi-Replace-poking-of-VLV-GPIOs-behind-the-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0317-drm-i915-pmu-Export-counters-from-all-tiles.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0317-drm-i915-rpl-Update-pci-ids-for-RPL-P-U.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0318-drm-amdgpu-rename-psp_execute_non_psp_fw_load-and-ma.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0318-drm-i915-dsi-Prepare-soc_gpio_set_value-to-distingui.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0318-drm-i915-mtl-end-support-for-set-caching-ioctl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0318-drm-i915-vma-constify-unbind_fence_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0319-drm-amdgpu-use-psp_execute_load_ip_fw-instead.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0319-drm-i915-display-update-intel_dp_has_audio-to-suppor.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0319-drm-i915-dsi-Replace-poking-of-CHV-GPIOs-behind-the-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0319-fbdev-Add-Kconfig-options-to-select-different-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0320-drm-i915-display-configure-SDP-split-for-DP-MST.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0320-drm-i915-dsi-Combine-checks-in-mipi_exec_gpio.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0320-drm-radeon-ERROR-foo-bar-should-be-foo-bar.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0320-fbdev-Add-initializer-macros-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0321-drm-armada-Use-regular-fbdev-I-O-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0321-drm-i915-iosf-Drop-unused-APIs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0321-drm-i915-regs-split-out-intel_color_regs.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0321-drm-radeon-ERROR-foo-should-be-foo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0322-drm-exynos-Use-regular-fbdev-I-O-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0322-drm-i915-color-move-CHV-CGM-pipe-mode-read-to-intel_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0322-drm-i915-display-Use-int-type-for-entry_setup_frames.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0322-drm-radeon-ERROR-foo-should-be-foo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0323-drm-gma500-Use-regular-fbdev-I-O-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0323-drm-i915-display-Do-not-check-psr2-if-psr-panel-repl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0323-drm-i915-move-HSW-gamma-mode-read-to-intel_color.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0323-drm-radeon-ERROR-that-open-brace-should-be-on-the-pr.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0324-drm-i915-Polish-some-RMWs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0324-drm-i915-move-ILK-CSC-mode-read-to-intel_color.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0324-drm-radeon-ERROR-foo-should-be-foo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0324-drm-radeon-Use-regular-fbdev-I-O-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0325-drm-amdkfd-Update-CWSR-grace-period-for-GFX9.4.3.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0325-drm-fbdev-dma-Use-regular-fbdev-I-O-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0325-drm-i915-Push-audio-enable-disable-further-out.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0325-drm-i915-color-move-SKL-gamma-and-CSC-enable-read-to.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0326-drm-amdgpu-add-watchdog-timer-enablement-for-gfx_v9_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0326-drm-i915-Wrap-g4x-DP-HDMI-audio-enable-disable.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0326-drm-i915-color-move-pre-SKL-gamma-and-CSC-enable-rea.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0326-drm-omapdrm-Use-regular-fbdev-I-O-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- commit 55b06a7</changelog>
  <changelog author="ematsumiya@suse.de" date="1759492803">- cifs: prevent NULL pointer dereference in UTF16 conversion
  (bsc#1250365, CVE-2025-39838).
- commit 5883dcd</changelog>
  <changelog author="ailiop@suse.com" date="1759492804">- Squashfs: add additional inode sanity checking (git-fixes).
- commit fe46811</changelog>
  <changelog author="ailiop@suse.com" date="1759492805">- Squashfs: reject negative file sizes in squashfs_read_inode()
  (git-fixes).
- commit 2f68e78</changelog>
  <changelog author="tiwai@suse.de" date="1759579200">- ALSA: usb-audio: Add DSD support for Comtrue USB Audio device
  (stable-fixes).
- ALSA: usb-audio: Fix build with CONFIG_INPUT=n (git-fixes).
- ALSA: usb-audio: Convert comma to semicolon (git-fixes).
- ALSA: usb-audio: Add mixer quirk for Sony DualSense PS5
  (stable-fixes).
- ALSA: usb-audio: Remove unneeded wmb() in mixer_quirks
  (stable-fixes).
- ALSA: usb-audio: Simplify NULL comparison in mixer_quirks
  (stable-fixes).
- ALSA: usb-audio: Avoid multiple assignments in mixer_quirks
  (stable-fixes).
- ALSA: usb-audio: Drop unnecessary parentheses in mixer_quirks
  (stable-fixes).
- ALSA: usb-audio: Fix block comments in mixer_quirks
  (stable-fixes).
- commit 929e260</changelog>
  <changelog author="tiwai@suse.de" date="1759579201">- ASoC: wcd934x: fix error handling in wcd934x_codec_parse_data()
  (git-fixes).
- ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free
  (git-fixes).
- ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping
  (git-fixes).
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping
  (git-fixes).
- ASoC: Intel: bytcht_es8316: Fix invalid quirk input mapping
  (git-fixes).
- ASoC: qcom: audioreach: fix potential null pointer dereference
  (git-fixes).
- ASoC: imx-hdmi: remove cpu_pdev related code (git-fixes).
- ALSA: lx_core: use int type to store negative error codes
  (git-fixes).
- ALSA: usb-audio: Add mute TLV for playback volumes on more
  devices (stable-fixes).
- ALSA: usb-audio: move mixer_quirks' min_mute into common quirk
  (stable-fixes).
- commit 86dd099</changelog>
  <changelog author="tiwai@suse.de" date="1759579202">- docs: admin-guide: update to current minimum pipe size default
  (git-fixes).
- drivers/base/node: handle error properly in register_one_node()
  (git-fixes).
- Bluetooth: ISO: don't leak skb in ISO_CONT RX (git-fixes).
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (git-fixes).
- Bluetooth: MGMT: Fix not exposing debug UUID on
  MGMT_OP_READ_EXP_FEATURES_INFO (git-fixes).
- drm/radeon/r600_cs: clean up of dead code in r600_cs
  (git-fixes).
- drm/bridge: it6505: select REGMAP_I2C (git-fixes).
- drm/panel: novatek-nt35560: Fix invalid return value
  (git-fixes).
- can: rcar_can: rcar_can_resume(): fix s2ram with PSCI
  (stable-fixes).
- drm/i915/backlight: Return immediately when scale() finds
  invalid parameters (stable-fixes).
- commit 07504f9</changelog>
  <changelog author="tiwai@suse.de" date="1759579203">- maple_tree: fix MAPLE_PARENT_RANGE32 and parent pointer docs
  (git-fixes).
- media: rj54n1cb0c: Fix memleak in rj54n1_probe() (git-fixes).
- media: lirc: Fix error handling in lirc_register() (git-fixes).
- media: zoran: Remove zoran_fh structure (git-fixes).
- drm/amdgpu: remove the redeclaration of variable i (git-fixes).
- drm/msm/dpu: fix incorrect type for ret (git-fixes).
- drm/amdkfd: Fix error code sign for EINVAL in svm_ioctl()
  (git-fixes).
- drm/amd/pm: Disable SCLK switching on Oland with high pixel
  clocks (v3) (git-fixes).
- drm/amd/pm: Disable MCLK switching with non-DC at 120 Hz+ (v2)
  (git-fixes).
- drm/amd/pm: Treat zero vblank time as too short in si_dpm (v3)
  (git-fixes).
- drm/amd/pm: Adjust si_upload_smc_data register programming (v3)
  (git-fixes).
- drm/amd/pm: Fix si_upload_smc_data (v3) (git-fixes).
- drm/amd/pm: Disable ULV even if unsupported (v3) (git-fixes).
- drm/amdgpu: Power up UVD 3 for FW validation (v2) (git-fixes).
- drm/rcar-du: dsi: Fix 1/2/3 lane support (git-fixes).
- drm/amd/display: Remove redundant semicolons (git-fixes).
- firewire: core: fix overlooked update of subsystem ABI version
  (git-fixes).
- commit 2161328</changelog>
  <changelog author="tiwai@suse.de" date="1759579204">- net: nfc: nci: Add parameter validation for packet data
  (git-fixes).
- net: usb: Remove disruptive netif_wake_queue in
  rtl8150_set_multicast (git-fixes).
- wifi: ath11k: HAL SRNG: don't deinitialize and re-initialize
  again (git-fixes).
- wifi: ath10k: avoid unnecessary wait for service ready message
  (git-fixes).
- wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load()
  (git-fixes).
- wifi: rtw89: avoid circular locking dependency in
  ser_state_run() (git-fixes).
- wifi: mac80211: fix Rx packet handling when pubsta information
  is not available (git-fixes).
- wifi: mt76: fix potential memory leak in mt76_wmac_probe()
  (git-fixes).
- wifi: mwifiex: send world regulatory domain to driver
  (git-fixes).
- media: b2c2: Fix use-after-free causing by irq_check_work in
  flexcop_pci_remove (git-fixes).
- media: uvcvideo: Mark invalid entities with id
  UVC_INVALID_ENTITY_ID (git-fixes).
- media: i2c: mt9v111: fix incorrect type for ret (git-fixes).
- media: pci: ivtv: Add missing check after DMA map (git-fixes).
- media: cx18: Add missing check after DMA map (git-fixes).
- media: st-delta: avoid excessive stack usage (git-fixes).
- media: v4l2-subdev: Fix alloc failure check in
  v4l2_subdev_call_state_try() (git-fixes).
- wifi: virt_wifi: Fix page fault on connect (stable-fixes).
- mmc: sdhci-cadence: add Mobileye eyeQ support (stable-fixes).
- usb: core: Add 0x prefix to quirks debug output (stable-fixes).
- commit dbb8904</changelog>
  <changelog author="tiwai@suse.de" date="1759579205">- drivers/base/node: fix double free in register_one_node()
  (git-fixes).
- commit 205d070</changelog>
  <changelog author="tiwai@suse.de" date="1759579206">- Bluetooth: hci_sync: Fix using random address for BIG/PA
  advertisements (git-fixes).
- Bluetooth: ISO: free rx_skb if not consumed (git-fixes).
- wifi: ath12k: fix wrong logging ID used for CE (git-fixes).
- wifi: iwlwifi: Remove redundant header files (git-fixes).
- media: tuner: xc5000: Fix use-after-free in xc5000_release
  (git-fixes).
- media: mc: Fix MUST_CONNECT handling for pads with no links
  (git-fixes).
- drm/panthor: Fix memory leak in panthor_ioctl_group_create()
  (git-fixes).
- ASoC: Intel: sof_sdw: Prevent jump to NULL add_sidecar callback
  (git-fixes).
- ALSA: pcm: Disable bottom softirqs as part of spin_lock_irq()
  on PREEMPT_RT (git-fixes).
- commit 90486f1</changelog>
  <changelog author="tiwai@suse.de" date="1759579207">- wifi: ath12k: fix the fetching of combined rssi (git-fixes).
- commit 75dc6e6</changelog>
  <changelog author="tiwai@suse.de" date="1759665600">- bus: mhi: host: Do not use uninitialized 'dev' pointer in
  mhi_init_irq_setup() (git-fixes).
- iio: imu: inv_icm42600: Drop redundant pm_runtime
  reinitialization in resume (git-fixes).
- iio: consumers: Fix offset handling in
  iio_convert_raw_to_processed() (git-fixes).
- iio: dac: ad5421: use int type to store negative error codes
  (git-fixes).
- iio: dac: ad5360: use int type to store negative error codes
  (git-fixes).
- iio: frequency: adf4350: Fix ADF4350_REG3_12BIT_CLKDIV_MODE
  (git-fixes).
- iio: frequency: adf4350: Fix prescaler usage (git-fixes).
- iio: xilinx-ams: Fix AMS_ALARM_THR_DIRECT_MASK (git-fixes).
- iio: xilinx-ams: Unmask interrupts after updating alarms
  (git-fixes).
- misc: genwqe: Fix incorrect cmd field being reported in error
  (git-fixes).
- uio: uio_pdrv_genirq: Remove MODULE_DEVICE_TABLE (git-fixes).
- thunderbolt: Compare HMAC values in constant time (git-fixes).
- usb: misc: qcom_eud: Access EUD_MODE_MANAGER2 through secure
  calls (git-fixes).
- usb: host: max3421-hcd: Fix error pointer dereference in probe
  cleanup (git-fixes).
- tty: n_gsm: Don't block input queue by waiting MSC (git-fixes).
- serial: max310x: Add error checking in probe() (git-fixes).
- mtd: rawnand: omap2: fix device leak on probe failure
  (git-fixes).
- HID: intel-ish-ipc: Remove redundant ready check after timeout
  function (git-fixes).
- hwrng: ks-sa - fix division by zero in ks_sa_rng_init
  (git-fixes).
- crypto: hisilicon/qm - set NULL to qm-&gt;debug.qm_diff_regs
  (git-fixes).
- crypto: aspeed - Fix dma_unmap_sg() direction (git-fixes).
- crypto: atmel - Fix dma_unmap_sg() direction (git-fixes).
- crypto: hisilicon/qm - check whether the input function and
  PF are on the same device (git-fixes).
- hwrng: nomadik - add ARM_AMBA dependency (git-fixes).
- crypto: keembay - Add missing check after sg_nents_for_len()
  (git-fixes).
- commit 6795b42</changelog>
  <changelog author="tiwai@suse.de" date="1759665601">- usb: vhci-hcd: Prevent suspending virtually attached devices
  (git-fixes).
- Revert "usb: xhci: Avoid Stop Endpoint retry loop if the
  endpoint seems Running" (git-fixes).
- usb: typec: tipd: Clear interrupts first (git-fixes).
- usb: cdns3: cdnsp-pci: remove redundant pci_disable_device()
  call (git-fixes).
- usb: gadget: configfs: Correctly set use_os_string at bind
  (git-fixes).
- usb: phy: twl6030: Fix incorrect type for ret (git-fixes).
- crypto: hisilicon/qm - request reserved interrupt for virtual
  function (git-fixes).
- crypto: hisilicon - re-enable address prefetch after device
  resuming (git-fixes).
- crypto: hisilicon/zip - remove unnecessary validation for
  high-performance mode configurations (git-fixes).
- commit 609ee3a</changelog>
  <changelog author="ohering@suse.de" date="1759752000">- RDMA/mana_ib: Fix DSCP value in modify QP (git-fixes).
- commit ffca68d</changelog>
  <changelog author="joao.povoas@suse.com" date="1759752001">- Update
  patches.suse/RDMA-rxe-Flush-delayed-SKBs-while-releasing-RXE-reso.patch
  (git-fixes CVE-2025-39695 bsc#1249306).
- Update
  patches.suse/drm-amdgpu-check-if-hubbub-is-NULL-in-debugfs-amdgpu.patch
  (stable-fixes CVE-2025-39707 bsc#1249333).
- Update
  patches.suse/drm-mediatek-Add-error-handling-for-old-state-CRTC-i.patch
  (git-fixes CVE-2025-39807 bsc#1249887).
- Update
  patches.suse/drm-msm-Add-error-handling-for-krealloc-in-metadata-.patch
  (stable-fixes CVE-2025-39747 bsc#1249566).
- Update
  patches.suse/drm-xe-Make-dma-fences-compliant-with-the-safe-acces.patch
  (stable-fixes CVE-2025-38703 bsc#1249193).
- Update
  patches.suse/drm-xe-vm-Clear-the-scratch_pt-pointer-on-error.patch
  (git-fixes CVE-2025-39811 bsc#1249915).
- Update
  patches.suse/media-ivsc-Fix-crash-at-shutdown-due-to-missing-mei_.patch
  (git-fixes CVE-2025-39711 bsc#1249274).
- Update
  patches.suse/wifi-ath12k-fix-memory-leak-in-ath12k_service_ready_.patch
  (git-fixes CVE-2025-39890 bsc#1250334).
- commit 06f1002</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1759752002">- ixgbe: fix incorrect map used in eee linkmode (CVE-2025-39922
  bsc#1250722).
- commit 1384a55</changelog>
  <changelog author="tiwai@suse.de" date="1759752003">- wifi: ath12k: Add MODULE_FIRMWARE() entries (bsc#1250952).
- commit fbc86d9</changelog>
</package>
<package pkgid="d46dda9a864cb43c3337fcf71a1c78b0dd2484a562f7a1352b0fd0cc22f37964" name="kernel-default" arch="src">
  <version epoch="0" ver="6.4.0" rel="150700.53.22.1"/>
  <changelog author="hoyeon.lee@suse.com" date="1761912000">- selftests/bpf: Fix a fd leak in error paths in open_netns
  (git-fixes).
- commit 51d3745</changelog>
  <changelog author="clopez@suse.de" date="1761912001">- KVM: x86/mmu: Prevent installing hugepages when mem attributes
  are changing (git-fixes).
- commit 37d594a</changelog>
  <changelog author="fdmanana@suse.com" date="1761912002">- btrfs: avoid potential out-of-bounds in btrfs_encode_fh()
  (git-fixes).
- commit 8cb68fe</changelog>
  <changelog author="fdmanana@suse.com" date="1761912003">- btrfs: fix clearing of BTRFS_FS_RELOC_RUNNING if relocation
  already running (git-fixes).
- commit f5ef369</changelog>
  <changelog author="fdmanana@suse.com" date="1761912004">- btrfs: do not assert we found block group item when creating
  free space tree (bsc#1252918 CVE-2025-40100).
- commit 327502f</changelog>
  <changelog author="dsterba@suse.com" date="1761912005">- net: tun: Update napi-&gt;skb after XDP process (CVE-2025-39984 bsc#1252081)
- commit f5f1c6b</changelog>
  <changelog author="dsterba@suse.com" date="1761912006">- vhost: vringh: Fix copy_to_iter return value check (CVE-2025-40056 bsc#1252826)
- commit 4efa16a</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1761912007">- smb: client: fix potential cfid UAF in smb2_query_info_compound
  (bsc#1248886).
- commit 5e5239d</changelog>
  <changelog author="tiwai@suse.de" date="1761998400">- drm/panel: kingdisplay-kd097d04: Disable EoTp (git-fixes).
- drm/panel: sitronix-st7789v: fix sync flags for t28cp45tn89
  (git-fixes).
- drm/etnaviv: fix flush sequence logic (git-fixes).
- drm/msm/dpu: Fix pixel extension sub-sampling (git-fixes).
- drm/msm/a6xx: Fix GMU firmware parser (git-fixes).
- drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on
  Iceland (git-fixes).
- drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Fiji
  (git-fixes).
- drm/amd/pm: fix smu table id bound check issue in
  smu_cmn_update_table() (git-fixes).
- drm/mediatek: Fix device use-after-free on unbind (git-fixes).
- ASoC: fsl_sai: fix bit order for DSD format (git-fixes).
- ASoC: Intel: avs: Unprepare a stream when XRUN occurs
  (git-fixes).
- ASoC: qdsp6: q6asm: do not sleep while atomic (git-fixes).
- ALSA: usb-audio: fix control pipe direction (git-fixes).
- commit acb4ea2</changelog>
  <changelog author="tiwai@suse.de" date="1761998401">- drm/ast: Clear preserved bits from register output value
  (git-fixes).
- drm/nouveau: Fix race in nouveau_sched_fini() (git-fixes).
- drm/sysfb: Do not dereference NULL pointer in plane reset
  (git-fixes).
- drm/msm/dpu: Require linear modifier for writeback framebuffers
  (git-fixes).
- drm/amdgpu: fix SPDX header on cyan_skillfish_reg_init.c
  (git-fixes).
- drm/radeon: Remove calls to drm_put_dev() (git-fixes).
- drm/radeon: Do not kfree() devres managed rdev (git-fixes).
- ASoC: fsl_sai: Fix sync error in consumer mode (git-fixes).
- drm/amd/display: increase max link count and fix link-&gt;enc
  NULL pointer access (stable-fixes).
- commit e65d412</changelog>
  <changelog author="tiwai@suse.de" date="1762084800">- regulator: bd718x7: Fix voltages scaled by resistor divider
  (git-fixes).
- regmap: slimbus: fix bus_context pointer in regmap init calls
  (git-fixes).
- commit 20abe4b</changelog>
  <changelog author="mhocko@suse.com" date="1762171200">- coresight: trbe: Return NULL pointer for allocation failures
  (CVE-2025-40060 bsc#1252848).
- commit 4543e34</changelog>
  <changelog author="joao.povoas@suse.com" date="1762171201">- Update
  patches.suse/ACPI-x86-s2idle-Catch-multiple-ACPI_TYPE_PACKAGE-obj.patch
  (git-fixes CVE-2023-53708 bsc#1252537).
- Update
  patches.suse/ALSA-usb-audio-Fix-NULL-pointer-deference-in-try_to_.patch
  (git-fixes CVE-2025-40085 bsc#1252873).
- Update
  patches.suse/ALSA-usb-audio-fix-race-condition-to-UAF-in-snd_usbm.patch
  (git-fixes CVE-2025-39997 bsc#1252056).
- Update
  patches.suse/ASoC-qcom-audioreach-fix-potential-null-pointer-dere.patch
  (git-fixes CVE-2025-40013 bsc#1252348).
- Update patches.suse/Bluetooth-MGMT-Fix-possible-UAFs.patch
  (git-fixes CVE-2025-39981 bsc#1252060).
- Update
  patches.suse/Bluetooth-hci_event-Fix-UAF-in-hci_acl_create_conn_s.patch
  (git-fixes CVE-2025-39982 bsc#1252083).
- Update
  patches.suse/HID-amd_sfh-Fix-for-shift-out-of-bounds.patch
  (bsc#1012628 CVE-2023-53703 bsc#1252553).
- Update
  patches.suse/Input-uinput-zero-initialize-uinput_ff_upload_compat.patch
  (git-fixes CVE-2025-40035 bsc#1252866).
- Update patches.suse/NFS-Fix-a-potential-data-corruption.patch
  (git-fixes CVE-2023-53711 bsc#1252536).
- Update
  patches.suse/NFSD-Define-a-proc_layoutcommit-for-the-FlexFiles-layout-type.patch
  (git-fixes CVE-2025-40087 bsc#1252909).
- Update
  patches.suse/PCI-endpoint-pci-epf-test-Add-NULL-check-for-DMA-cha.patch
  (git-fixes CVE-2025-40032 bsc#1252841).
- Update
  patches.suse/RDMA-rxe-Fix-race-in-do_task-when-draining.patch
  (git-fixes CVE-2025-40061 bsc#1252849).
- Update
  patches.suse/Squashfs-fix-uninit-value-in-squashfs_get_parent.patch
  (git-fixes CVE-2025-40049 bsc#1252822).
- Update
  patches.suse/USB-gadget-Fix-the-memory-leak-in-raw_gadget-dr.patch
  (bsc#1012628 CVE-2023-53693 bsc#1252489).
- Update
  patches.suse/afs-Fix-potential-null-pointer-dereference-in-afs_put_server.patch
  (git-fixes CVE-2025-40010 bsc#1252332).
- Update
  patches.suse/arm64-csum-Fix-OoB-access-in-IP-checksum-code-for-ne.patch
  (git-fixes CVE-2023-53726 bsc#1252565).
- Update
  patches.suse/arm64-sme-Use-STR-P-to-clear-FFR-context-field-.patch
  (bsc#1012628 CVE-2023-53713 bsc#1252559).
- Update
  patches.suse/blk-iocost-use-spin_lock_irqsave-in-adjust_inus.patch
  (bsc#1012628 CVE-2023-53730 bsc#1252495).
- Update
  patches.suse/bus-fsl-mc-Check-return-value-of-platform_get_resour.patch
  (git-fixes CVE-2025-40029 bsc#1252772).
- Update
  patches.suse/can-etas_es58x-populate-ndo_change_mtu-to-prevent-bu.patch
  (git-fixes CVE-2025-39988 bsc#1252074).
- Update
  patches.suse/can-hi311x-populate-ndo_change_mtu-to-prevent-buffer.patch
  (git-fixes CVE-2025-39987 bsc#1252079).
- Update
  patches.suse/can-mcba_usb-populate-ndo_change_mtu-to-prevent-buff.patch
  (git-fixes CVE-2025-39985 bsc#1252082).
- Update
  patches.suse/can-peak_usb-fix-shift-out-of-bounds-issue.patch
  (git-fixes CVE-2025-40020 bsc#1252679).
- Update
  patches.suse/can-sun4i_can-populate-ndo_change_mtu-to-prevent-buf.patch
  (git-fixes CVE-2025-39986 bsc#1252078).
- Update
  patches.suse/clk-imx-clk-imx8mp-improve-error-handling-in-im.patch
  (bsc#1012628 CVE-2023-53704 bsc#1252490).
- Update
  patches.suse/clocksource-drivers-cadence-ttc-Fix-memory-leak.patch
  (bsc#1012628 CVE-2023-53725 bsc#1252492).
- Update
  patches.suse/crypto-essiv-Check-ssize-for-decryption-and-in-place.patch
  (git-fixes CVE-2025-40019 bsc#1252678).
- Update
  patches.suse/crypto-hisilicon-qm-set-NULL-to-qm-debug.qm_diff_reg.patch
  (git-fixes CVE-2025-40062 bsc#1252850).
- Update
  patches.suse/drm-amdgpu-Fix-integer-overflow-in-amdgpu_cs_p.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-53707
  bsc#1252632).
- Update
  patches.suse/drm-gma500-Fix-null-dereference-in-hdmi-teardown.patch
  (git-fixes CVE-2025-40011 bsc#1252336).
- Update
  patches.suse/drm-sched-Fix-potential-double-free-in-drm_sched_job.patch
  (git-fixes CVE-2025-40096 bsc#1252902).
- Update
  patches.suse/fbcon-fix-integer-overflow-in-fbcon_do_set_font.patch
  (git-fixes CVE-2025-39967 bsc#1252033).
- Update
  patches.suse/fs-udf-fix-OOB-read-in-lengthAllocDescs-handling.patch
  (git-fixes CVE-2025-40044 bsc#1252785).
- Update
  patches.suse/hfsplus-fix-slab-out-of-bounds-read-in-hfsplus_strcasecmp.patch
  (git-fixes CVE-2025-40088 bsc#1252904).
- Update
  patches.suse/hfsplus-fix-slab-out-of-bounds-read-in-hfsplus_uni2asc_followup.patch
  (git-fixes CVE-2025-40082 bsc#1252775).
- Update
  patches.suse/iommu-vt-d-Disallow-dirty-tracking-if-incoherent-pag.patch
  (git-fixes CVE-2025-40058 bsc#1252854).
- Update
  patches.suse/md-raid1-fix-potential-OOB-in-raid1_remove_disk-8b04.patch
  (jsc#PED-7542 CVE-2023-53722 bsc#1252499).
- Update
  patches.suse/media-b2c2-Fix-use-after-free-causing-by-irq_check_w.patch
  (git-fixes CVE-2025-39996 bsc#1252065).
- Update
  patches.suse/media-i2c-tc358743-Fix-use-after-free-bugs-caused-by.patch
  (git-fixes CVE-2025-39995 bsc#1252064).
- Update
  patches.suse/media-rc-fix-races-with-imon_disconnect.patch
  (git-fixes CVE-2025-39993 bsc#1252070).
- Update
  patches.suse/media-tuner-xc5000-Fix-use-after-free-in-xc5000_rele.patch
  (git-fixes CVE-2025-39994 bsc#1252072).
- Update
  patches.suse/media-uvcvideo-Mark-invalid-entities-with-id-UVC_INV.patch
  (git-fixes CVE-2025-40016 bsc#1252346).
- Update
  patches.suse/misc-fastrpc-fix-possible-map-leak-in-fastrpc_put_ar.patch
  (git-fixes CVE-2025-40036 bsc#1252865).
- Update
  patches.suse/net-nfc-nci-Add-parameter-validation-for-packet-data.patch
  (git-fixes CVE-2025-40043 bsc#1252787).
- Update
  patches.suse/net-sched-cls_u32-Undo-tcf_bind_filter-if-u32_r.patch
  (bsc#1012628 CVE-2023-53733 bsc#1252685).
- Update
  patches.suse/net-sched-fq_pie-avoid-stalls-in-fq_pie_timer.patch
  (bsc#1220419 CVE-2023-53727 bsc#1252566).
- Update
  patches.suse/netlink-fix-potential-deadlock-in-netlink_set_e.patch
  (bsc#1012628 CVE-2023-53731 bsc#1252481).
- Update
  patches.suse/nvdimm-Fix-memleak-of-pmu-attr_groups-in-unregister_-85ae.patch
  (jsc#PED-5853 CVE-2023-53697 bsc#1252534).
- Update
  patches.suse/posix-timers-Ensure-timer-ID-search-loop-limit-.patch
  (bsc#1012628 CVE-2023-53728 bsc#1252668).
- Update
  patches.suse/ring-buffer-Do-not-swap-cpu_buffer-during-resi.patch
  (bsc#1012628 CVE-2023-53718 bsc#1252564).
- Update
  patches.suse/riscv-move-memblock_allow_resize-after-linear-m.patch
  (bsc#1012628 CVE-2023-53699 bsc#1252550).
- Update
  patches.suse/smb-client-fix-crypto-buffers-in-non-linear-memory.patch
  (bsc#1250491 boo#1239206 CVE-2025-40052 bsc#1252851).
- Update
  patches.suse/soc-qcom-qmi_encdec-Restrict-string-length-in-decode.patch
  (git-fixes CVE-2023-53729 bsc#1252496).
- Update
  patches.suse/tty-n_gsm-Don-t-block-input-queue-by-waiting-MSC.patch
  (git-fixes CVE-2025-40071 bsc#1252797).
- Update
  patches.suse/wifi-ath11k-fix-NULL-dereference-in-ath11k_qmi_m3_lo.patch
  (git-fixes CVE-2025-39991 bsc#1252075).
- Update
  patches.suse/wifi-ath12k-Fix-a-NULL-pointer-dereference-in-ath12k.patch
  (git-fixes CVE-2023-53721 bsc#1252561).
- Update
  patches.suse/xfrm-xfrm_alloc_spi-shouldn-t-use-0-as-SPI.patch
  (CVE-2025-39797 bsc#1249608 CVE-2025-39965 bsc#1251967).
- Update
  patches.suse/xsk-fix-refcount-underflow-in-error-path.patch
  (bsc#1012628 CVE-2023-53698 bsc#1252479).
- commit 9042362</changelog>
  <changelog author="joao.povoas@suse.com" date="1762171202">- Update
  patches.suse/fbdev-simplefb-Fix-use-after-free-in-simplefb_detach.patch
  (git-fixes CVE-2025-40037 bsc#1252819).
- Update
  patches.suse/ixgbe-fix-too-early-devlink_free-in-ixgbe_remove.patch
  (git-fixes CVE-2025-40091 bsc#1252915).
- Update
  patches.suse/ixgbevf-fix-mailbox-API-compatibility-by-negotiating.patch
  (bsc#1247222 CVE-2025-40104 bsc#1252921).
- commit 7ff6ed4</changelog>
  <changelog author="clopez@suse.de" date="1762171203">- KVM: x86: Replace static_call_cond() with static_call()
  (git-fixes).
- commit 6bb685c</changelog>
  <changelog author="clopez@suse.de" date="1762171204">- KVM: x86: Introduce kvm_x86_call() to simplify static calls
  of kvm_x86_ops (git-fixes).
- Refresh
  patches.suse/KVM-x86-Don-t-inject-PV-async-PF-if-SEND_ALWAYS-0-an.patch.
- Refresh
  patches.suse/KVM-x86-Exit-to-userspace-if-fastpath-triggers-one-o.patch.
- Refresh patches.suse/KVM-x86-Introduce-kvm_set_mp_state.patch.
- Refresh
  patches.suse/KVM-x86-Route-non-canonical-checks-in-emulator-throu.patch.
- Refresh
  patches.suse/KVM-x86-model-canonical-checks-more-precisely.patch.
- commit 3454959</changelog>
  <changelog author="wqu@suse.com" date="1762257600">- btrfs: fix the incorrect max_bytes value for
  find_lock_delalloc_range() (git-fixes).
- commit 91a9728</changelog>
  <changelog author="jgross@suse.com" date="1762257601">- vhost: vringh: Modify the return value check (CVE-2025-40051
  bsc#1252858).
- commit 80d9f20</changelog>
  <changelog author="clopez@suse.de" date="1762257602">- Delete
  patches.kabi/KVM-x86-pmu-Allow-programming-events-that-match-unsu.patch.
  This avoids a kbuild error in check-patchrv. This patch is not needed
  anyway since 4f5efb71e1f4.
- commit 624b1b2</changelog>
  <changelog author="msuchanek@suse.de" date="1762344000">- kernel-subpackage-spec: Do not doubly-sign modules (bsc#1251930).
- commit 0f034b6</changelog>
</package>
<package pkgid="529197ad34c026d52e3cb09eac83e823ae531a4e07250a23d72c9139d0497252" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.53.22.1"/>
  <changelog author="hoyeon.lee@suse.com" date="1761912000">- selftests/bpf: Fix a fd leak in error paths in open_netns
  (git-fixes).
- commit 51d3745</changelog>
  <changelog author="clopez@suse.de" date="1761912001">- KVM: x86/mmu: Prevent installing hugepages when mem attributes
  are changing (git-fixes).
- commit 37d594a</changelog>
  <changelog author="fdmanana@suse.com" date="1761912002">- btrfs: avoid potential out-of-bounds in btrfs_encode_fh()
  (git-fixes).
- commit 8cb68fe</changelog>
  <changelog author="fdmanana@suse.com" date="1761912003">- btrfs: fix clearing of BTRFS_FS_RELOC_RUNNING if relocation
  already running (git-fixes).
- commit f5ef369</changelog>
  <changelog author="fdmanana@suse.com" date="1761912004">- btrfs: do not assert we found block group item when creating
  free space tree (bsc#1252918 CVE-2025-40100).
- commit 327502f</changelog>
  <changelog author="dsterba@suse.com" date="1761912005">- net: tun: Update napi-&gt;skb after XDP process (CVE-2025-39984 bsc#1252081)
- commit f5f1c6b</changelog>
  <changelog author="dsterba@suse.com" date="1761912006">- vhost: vringh: Fix copy_to_iter return value check (CVE-2025-40056 bsc#1252826)
- commit 4efa16a</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1761912007">- smb: client: fix potential cfid UAF in smb2_query_info_compound
  (bsc#1248886).
- commit 5e5239d</changelog>
  <changelog author="tiwai@suse.de" date="1761998400">- drm/panel: kingdisplay-kd097d04: Disable EoTp (git-fixes).
- drm/panel: sitronix-st7789v: fix sync flags for t28cp45tn89
  (git-fixes).
- drm/etnaviv: fix flush sequence logic (git-fixes).
- drm/msm/dpu: Fix pixel extension sub-sampling (git-fixes).
- drm/msm/a6xx: Fix GMU firmware parser (git-fixes).
- drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on
  Iceland (git-fixes).
- drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Fiji
  (git-fixes).
- drm/amd/pm: fix smu table id bound check issue in
  smu_cmn_update_table() (git-fixes).
- drm/mediatek: Fix device use-after-free on unbind (git-fixes).
- ASoC: fsl_sai: fix bit order for DSD format (git-fixes).
- ASoC: Intel: avs: Unprepare a stream when XRUN occurs
  (git-fixes).
- ASoC: qdsp6: q6asm: do not sleep while atomic (git-fixes).
- ALSA: usb-audio: fix control pipe direction (git-fixes).
- commit acb4ea2</changelog>
  <changelog author="tiwai@suse.de" date="1761998401">- drm/ast: Clear preserved bits from register output value
  (git-fixes).
- drm/nouveau: Fix race in nouveau_sched_fini() (git-fixes).
- drm/sysfb: Do not dereference NULL pointer in plane reset
  (git-fixes).
- drm/msm/dpu: Require linear modifier for writeback framebuffers
  (git-fixes).
- drm/amdgpu: fix SPDX header on cyan_skillfish_reg_init.c
  (git-fixes).
- drm/radeon: Remove calls to drm_put_dev() (git-fixes).
- drm/radeon: Do not kfree() devres managed rdev (git-fixes).
- ASoC: fsl_sai: Fix sync error in consumer mode (git-fixes).
- drm/amd/display: increase max link count and fix link-&gt;enc
  NULL pointer access (stable-fixes).
- commit e65d412</changelog>
  <changelog author="tiwai@suse.de" date="1762084800">- regulator: bd718x7: Fix voltages scaled by resistor divider
  (git-fixes).
- regmap: slimbus: fix bus_context pointer in regmap init calls
  (git-fixes).
- commit 20abe4b</changelog>
  <changelog author="mhocko@suse.com" date="1762171200">- coresight: trbe: Return NULL pointer for allocation failures
  (CVE-2025-40060 bsc#1252848).
- commit 4543e34</changelog>
  <changelog author="joao.povoas@suse.com" date="1762171201">- Update
  patches.suse/ACPI-x86-s2idle-Catch-multiple-ACPI_TYPE_PACKAGE-obj.patch
  (git-fixes CVE-2023-53708 bsc#1252537).
- Update
  patches.suse/ALSA-usb-audio-Fix-NULL-pointer-deference-in-try_to_.patch
  (git-fixes CVE-2025-40085 bsc#1252873).
- Update
  patches.suse/ALSA-usb-audio-fix-race-condition-to-UAF-in-snd_usbm.patch
  (git-fixes CVE-2025-39997 bsc#1252056).
- Update
  patches.suse/ASoC-qcom-audioreach-fix-potential-null-pointer-dere.patch
  (git-fixes CVE-2025-40013 bsc#1252348).
- Update patches.suse/Bluetooth-MGMT-Fix-possible-UAFs.patch
  (git-fixes CVE-2025-39981 bsc#1252060).
- Update
  patches.suse/Bluetooth-hci_event-Fix-UAF-in-hci_acl_create_conn_s.patch
  (git-fixes CVE-2025-39982 bsc#1252083).
- Update
  patches.suse/HID-amd_sfh-Fix-for-shift-out-of-bounds.patch
  (bsc#1012628 CVE-2023-53703 bsc#1252553).
- Update
  patches.suse/Input-uinput-zero-initialize-uinput_ff_upload_compat.patch
  (git-fixes CVE-2025-40035 bsc#1252866).
- Update patches.suse/NFS-Fix-a-potential-data-corruption.patch
  (git-fixes CVE-2023-53711 bsc#1252536).
- Update
  patches.suse/NFSD-Define-a-proc_layoutcommit-for-the-FlexFiles-layout-type.patch
  (git-fixes CVE-2025-40087 bsc#1252909).
- Update
  patches.suse/PCI-endpoint-pci-epf-test-Add-NULL-check-for-DMA-cha.patch
  (git-fixes CVE-2025-40032 bsc#1252841).
- Update
  patches.suse/RDMA-rxe-Fix-race-in-do_task-when-draining.patch
  (git-fixes CVE-2025-40061 bsc#1252849).
- Update
  patches.suse/Squashfs-fix-uninit-value-in-squashfs_get_parent.patch
  (git-fixes CVE-2025-40049 bsc#1252822).
- Update
  patches.suse/USB-gadget-Fix-the-memory-leak-in-raw_gadget-dr.patch
  (bsc#1012628 CVE-2023-53693 bsc#1252489).
- Update
  patches.suse/afs-Fix-potential-null-pointer-dereference-in-afs_put_server.patch
  (git-fixes CVE-2025-40010 bsc#1252332).
- Update
  patches.suse/arm64-csum-Fix-OoB-access-in-IP-checksum-code-for-ne.patch
  (git-fixes CVE-2023-53726 bsc#1252565).
- Update
  patches.suse/arm64-sme-Use-STR-P-to-clear-FFR-context-field-.patch
  (bsc#1012628 CVE-2023-53713 bsc#1252559).
- Update
  patches.suse/blk-iocost-use-spin_lock_irqsave-in-adjust_inus.patch
  (bsc#1012628 CVE-2023-53730 bsc#1252495).
- Update
  patches.suse/bus-fsl-mc-Check-return-value-of-platform_get_resour.patch
  (git-fixes CVE-2025-40029 bsc#1252772).
- Update
  patches.suse/can-etas_es58x-populate-ndo_change_mtu-to-prevent-bu.patch
  (git-fixes CVE-2025-39988 bsc#1252074).
- Update
  patches.suse/can-hi311x-populate-ndo_change_mtu-to-prevent-buffer.patch
  (git-fixes CVE-2025-39987 bsc#1252079).
- Update
  patches.suse/can-mcba_usb-populate-ndo_change_mtu-to-prevent-buff.patch
  (git-fixes CVE-2025-39985 bsc#1252082).
- Update
  patches.suse/can-peak_usb-fix-shift-out-of-bounds-issue.patch
  (git-fixes CVE-2025-40020 bsc#1252679).
- Update
  patches.suse/can-sun4i_can-populate-ndo_change_mtu-to-prevent-buf.patch
  (git-fixes CVE-2025-39986 bsc#1252078).
- Update
  patches.suse/clk-imx-clk-imx8mp-improve-error-handling-in-im.patch
  (bsc#1012628 CVE-2023-53704 bsc#1252490).
- Update
  patches.suse/clocksource-drivers-cadence-ttc-Fix-memory-leak.patch
  (bsc#1012628 CVE-2023-53725 bsc#1252492).
- Update
  patches.suse/crypto-essiv-Check-ssize-for-decryption-and-in-place.patch
  (git-fixes CVE-2025-40019 bsc#1252678).
- Update
  patches.suse/crypto-hisilicon-qm-set-NULL-to-qm-debug.qm_diff_reg.patch
  (git-fixes CVE-2025-40062 bsc#1252850).
- Update
  patches.suse/drm-amdgpu-Fix-integer-overflow-in-amdgpu_cs_p.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-53707
  bsc#1252632).
- Update
  patches.suse/drm-gma500-Fix-null-dereference-in-hdmi-teardown.patch
  (git-fixes CVE-2025-40011 bsc#1252336).
- Update
  patches.suse/drm-sched-Fix-potential-double-free-in-drm_sched_job.patch
  (git-fixes CVE-2025-40096 bsc#1252902).
- Update
  patches.suse/fbcon-fix-integer-overflow-in-fbcon_do_set_font.patch
  (git-fixes CVE-2025-39967 bsc#1252033).
- Update
  patches.suse/fs-udf-fix-OOB-read-in-lengthAllocDescs-handling.patch
  (git-fixes CVE-2025-40044 bsc#1252785).
- Update
  patches.suse/hfsplus-fix-slab-out-of-bounds-read-in-hfsplus_strcasecmp.patch
  (git-fixes CVE-2025-40088 bsc#1252904).
- Update
  patches.suse/hfsplus-fix-slab-out-of-bounds-read-in-hfsplus_uni2asc_followup.patch
  (git-fixes CVE-2025-40082 bsc#1252775).
- Update
  patches.suse/iommu-vt-d-Disallow-dirty-tracking-if-incoherent-pag.patch
  (git-fixes CVE-2025-40058 bsc#1252854).
- Update
  patches.suse/md-raid1-fix-potential-OOB-in-raid1_remove_disk-8b04.patch
  (jsc#PED-7542 CVE-2023-53722 bsc#1252499).
- Update
  patches.suse/media-b2c2-Fix-use-after-free-causing-by-irq_check_w.patch
  (git-fixes CVE-2025-39996 bsc#1252065).
- Update
  patches.suse/media-i2c-tc358743-Fix-use-after-free-bugs-caused-by.patch
  (git-fixes CVE-2025-39995 bsc#1252064).
- Update
  patches.suse/media-rc-fix-races-with-imon_disconnect.patch
  (git-fixes CVE-2025-39993 bsc#1252070).
- Update
  patches.suse/media-tuner-xc5000-Fix-use-after-free-in-xc5000_rele.patch
  (git-fixes CVE-2025-39994 bsc#1252072).
- Update
  patches.suse/media-uvcvideo-Mark-invalid-entities-with-id-UVC_INV.patch
  (git-fixes CVE-2025-40016 bsc#1252346).
- Update
  patches.suse/misc-fastrpc-fix-possible-map-leak-in-fastrpc_put_ar.patch
  (git-fixes CVE-2025-40036 bsc#1252865).
- Update
  patches.suse/net-nfc-nci-Add-parameter-validation-for-packet-data.patch
  (git-fixes CVE-2025-40043 bsc#1252787).
- Update
  patches.suse/net-sched-cls_u32-Undo-tcf_bind_filter-if-u32_r.patch
  (bsc#1012628 CVE-2023-53733 bsc#1252685).
- Update
  patches.suse/net-sched-fq_pie-avoid-stalls-in-fq_pie_timer.patch
  (bsc#1220419 CVE-2023-53727 bsc#1252566).
- Update
  patches.suse/netlink-fix-potential-deadlock-in-netlink_set_e.patch
  (bsc#1012628 CVE-2023-53731 bsc#1252481).
- Update
  patches.suse/nvdimm-Fix-memleak-of-pmu-attr_groups-in-unregister_-85ae.patch
  (jsc#PED-5853 CVE-2023-53697 bsc#1252534).
- Update
  patches.suse/posix-timers-Ensure-timer-ID-search-loop-limit-.patch
  (bsc#1012628 CVE-2023-53728 bsc#1252668).
- Update
  patches.suse/ring-buffer-Do-not-swap-cpu_buffer-during-resi.patch
  (bsc#1012628 CVE-2023-53718 bsc#1252564).
- Update
  patches.suse/riscv-move-memblock_allow_resize-after-linear-m.patch
  (bsc#1012628 CVE-2023-53699 bsc#1252550).
- Update
  patches.suse/smb-client-fix-crypto-buffers-in-non-linear-memory.patch
  (bsc#1250491 boo#1239206 CVE-2025-40052 bsc#1252851).
- Update
  patches.suse/soc-qcom-qmi_encdec-Restrict-string-length-in-decode.patch
  (git-fixes CVE-2023-53729 bsc#1252496).
- Update
  patches.suse/tty-n_gsm-Don-t-block-input-queue-by-waiting-MSC.patch
  (git-fixes CVE-2025-40071 bsc#1252797).
- Update
  patches.suse/wifi-ath11k-fix-NULL-dereference-in-ath11k_qmi_m3_lo.patch
  (git-fixes CVE-2025-39991 bsc#1252075).
- Update
  patches.suse/wifi-ath12k-Fix-a-NULL-pointer-dereference-in-ath12k.patch
  (git-fixes CVE-2023-53721 bsc#1252561).
- Update
  patches.suse/xfrm-xfrm_alloc_spi-shouldn-t-use-0-as-SPI.patch
  (CVE-2025-39797 bsc#1249608 CVE-2025-39965 bsc#1251967).
- Update
  patches.suse/xsk-fix-refcount-underflow-in-error-path.patch
  (bsc#1012628 CVE-2023-53698 bsc#1252479).
- commit 9042362</changelog>
  <changelog author="joao.povoas@suse.com" date="1762171202">- Update
  patches.suse/fbdev-simplefb-Fix-use-after-free-in-simplefb_detach.patch
  (git-fixes CVE-2025-40037 bsc#1252819).
- Update
  patches.suse/ixgbe-fix-too-early-devlink_free-in-ixgbe_remove.patch
  (git-fixes CVE-2025-40091 bsc#1252915).
- Update
  patches.suse/ixgbevf-fix-mailbox-API-compatibility-by-negotiating.patch
  (bsc#1247222 CVE-2025-40104 bsc#1252921).
- commit 7ff6ed4</changelog>
  <changelog author="clopez@suse.de" date="1762171203">- KVM: x86: Replace static_call_cond() with static_call()
  (git-fixes).
- commit 6bb685c</changelog>
  <changelog author="clopez@suse.de" date="1762171204">- KVM: x86: Introduce kvm_x86_call() to simplify static calls
  of kvm_x86_ops (git-fixes).
- Refresh
  patches.suse/KVM-x86-Don-t-inject-PV-async-PF-if-SEND_ALWAYS-0-an.patch.
- Refresh
  patches.suse/KVM-x86-Exit-to-userspace-if-fastpath-triggers-one-o.patch.
- Refresh patches.suse/KVM-x86-Introduce-kvm_set_mp_state.patch.
- Refresh
  patches.suse/KVM-x86-Route-non-canonical-checks-in-emulator-throu.patch.
- Refresh
  patches.suse/KVM-x86-model-canonical-checks-more-precisely.patch.
- commit 3454959</changelog>
  <changelog author="wqu@suse.com" date="1762257600">- btrfs: fix the incorrect max_bytes value for
  find_lock_delalloc_range() (git-fixes).
- commit 91a9728</changelog>
  <changelog author="jgross@suse.com" date="1762257601">- vhost: vringh: Modify the return value check (CVE-2025-40051
  bsc#1252858).
- commit 80d9f20</changelog>
  <changelog author="clopez@suse.de" date="1762257602">- Delete
  patches.kabi/KVM-x86-pmu-Allow-programming-events-that-match-unsu.patch.
  This avoids a kbuild error in check-patchrv. This patch is not needed
  anyway since 4f5efb71e1f4.
- commit 624b1b2</changelog>
  <changelog author="msuchanek@suse.de" date="1762344000">- kernel-subpackage-spec: Do not doubly-sign modules (bsc#1251930).
- commit 0f034b6</changelog>
</package>
<package pkgid="3b226a5a5cc69b6a5fd882b32f0bf3f2f4d841aa312887d1415898dedfcd96a9" name="kernel-default" arch="src">
  <version epoch="0" ver="6.4.0" rel="150700.53.25.1"/>
  <changelog author="mkubecek@suse.cz" date="1764072000">- net: dst: annotate data-races around dst-&gt;output (CVE-2025-40074
  bsc#1252794).
- commit a54672b</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072001">- net: dst: add four helpers to annotate data-races around
  dst-&gt;dev (CVE-2025-40074 bsc#1252794).
- commit d644653</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072002">- ipv4: adopt dst_dev, skb_dst_dev and skb_dst_dev_net[_rcu]
  (CVE-2025-40074 bsc#1252794).
- commit 172fe2b</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072003">- ipv6: adopt dst_dev() helper (CVE-2025-40074 bsc#1252794).
- refresh patches.suse/net-ip6_tunnel-Prevent-perpetual-tunnel-growth.patch
- commit 7eda2f1</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072004">- ipv6: adopt skb_dst_dev() and skb_dst_dev_net[_rcu]() helpers
  (CVE-2025-40074 bsc#1252794).
- commit bef51be</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072005">- ipv6: ip6_mc_input() and ip6_mr_input() cleanups (CVE-2025-40074
  bsc#1252794).
- commit 74e34e6</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072006">- net: Add locking to protect skb-&gt;dev access in ip_output
  (CVE-2025-40074 bsc#1252794).
- commit ba856a3</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072007">- net: dst: introduce dst-&gt;dev_rcu (CVE-2025-40074 bsc#1252794).
- commit bc25dd4</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072008">- kabi: hide dst_entry::dev_rcu (CVE-2025-40074 bsc#1252794).
- commit 7047515</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072009">- ipv4: start using dst_dev_rcu() (CVE-2025-40074 bsc#1252794).
- commit d58640c</changelog>
  <changelog author="rbm@suse.com" date="1764072010">- selftests: net: lib: Do not overwrite error messages
  (bsc#1254235).
- selftests: net: lib: fix shift count out of range (bsc#1254235).
- selftests: net: lib: Move logging from forwarding/lib.sh here
  (bsc#1254235).
- selftests: net: add helper for checking if nettest is available
  (bsc#1254235).
- selftests: net: lib: kill PIDs before del netns (bsc#1254235).
- selftests: lib: tc_rule_stats_get(): Move default to argument
  definition (bsc#1254235).
- selftests: net: lib: remove 'ns' var in setup_ns (bsc#1254235).
- selftests: net: lib: do not set ns var as readonly
  (bsc#1254235).
- selftests: net: lib: remove ns from list after clean-up
  (bsc#1254235).
- selftests: net: lib: ignore possible errors (bsc#1254235).
- selftests: net: lib: set 'i' as local (bsc#1254235).
- selftests: net: lib: avoid error removing empty netns name
  (bsc#1254235).
- selftests: net: lib: support errexit with busywait
  (bsc#1254235).
- selftests/net: use tc rule to filter the na packet
  (bsc#1254235).
- selftests/net/lib: no need to record ns name if it already exist
  (bsc#1254235).
- selftests: net: Unify code of busywait() and slowwait()
  (bsc#1254235).
- selftests: forwarding: Add a test for testing lib.sh
  functionality (bsc#1254235).
- selftests: forwarding: Support for performance sensitive tests
  (bsc#1254235).
- selftests: forwarding: Convert log_test() to recognize RET
  values (bsc#1254235).
- selftests: forwarding: Have RET track kselftest framework
  constants (bsc#1254235).
- selftests: lib: Define more kselftest exit codes (bsc#1254235).
- selftests: forwarding: Change inappropriate log_test_skip()
  calls (bsc#1254235).
- selftests: forwarding.config.sample: Move overrides to lib.sh
  (bsc#1254235).
- selftests: net: libs: Change variable fallback syntax
  (bsc#1254235).
- selftests: forwarding: Parametrize mausezahn delay
  (bsc#1254235).
- selftests/net/forwarding: add slowwait functions (bsc#1254235).
- selftests: forwarding: Remove duplicated lib.sh content
  (bsc#1254235).
- selftests: forwarding: Redefine relative_path variable
  (bsc#1254235).
- selftests: net: List helper scripts in TEST_FILES Makefile
  variable (bsc#1254235).
- selftests/net/lib: update busywait timeout value (bsc#1254235).
- selftests: forwarding: Avoid failures to source net/lib.sh
  (bsc#1254235).
- selftests/net: add variable NS_LIST for lib.sh (bsc#1254235).
- selftests/net: add lib.sh (bsc#1254235).
- commit 3a99ca1</changelog>
  <changelog author="tzimmermann@suse.com" date="1764158400">- drm/xe: Don't allow evicting of BOs in same VM in array of VM binds (bsc#1252923 CVE-2025-40086)
- commit aa2fe0b</changelog>
  <changelog author="tzimmermann@suse.com" date="1764158401">- Fix "drm/xe: Don't allow evicting of BOs in same VM in array of VM binds" (bsc#1252923)
  Fix the following compiler warning:
  * no semicolon at end of struct or union in ../drivers/gpu/drm/xe/xe_vm_types.h
  In file included from ../drivers/gpu/drm/xe/xe_bb.c:16:0:
  ../drivers/gpu/drm/xe/xe_vm_types.h:393:1: warning: no semicolon at end of struct or union
- commit 38ee821</changelog>
  <changelog author="joao.povoas@suse.com" date="1764158402">- Update
  patches.suse/ASoC-Intel-bytcr_rt5640-Fix-invalid-quirk-input-mapp.patch
  (git-fixes CVE-2025-40154 bsc#1253431).
- Update
  patches.suse/ASoC-Intel-bytcr_rt5651-Fix-invalid-quirk-input-mapp.patch
  (git-fixes CVE-2025-40121 bsc#1253367).
- Update
  patches.suse/Bluetooth-ISO-Fix-possible-UAF-on-iso_conn_free.patch
  (git-fixes CVE-2025-40141 bsc#1253352).
- Update
  patches.suse/EDAC-i10nm-Skip-DIMM-enumeration-on-a-disabled-memor.patch
  (git-fixes CVE-2025-40157 bsc#1253423).
- Update
  patches.suse/PM-devfreq-mtk-cci-Fix-potential-error-pointer-deref.patch
  (git-fixes CVE-2025-40156 bsc#1253428).
- Update
  patches.suse/Squashfs-reject-negative-file-sizes-in-squashfs_read_inode.patch
  (git-fixes CVE-2025-40200 bsc#1253448).
- Update
  patches.suse/accel-qaic-Treat-remaining-0-as-error-in-find_and_ma.patch
  (git-fixes CVE-2025-40172 bsc#1253424).
- Update
  patches.suse/bpf-Fix-metadata_dst-leak-__bpf_redirect_neigh_v-4-6.patch
  (git-fixes CVE-2025-40183 bsc#1253441).
- Update
  patches.suse/btrfs-avoid-potential-out-of-bounds-in-btrfs_encode_.patch
  (git-fixes CVE-2025-40205 bsc#1253456).
- Update
  patches.suse/can-hi311x-fix-null-pointer-dereference-when-resumin.patch
  (stable-fixes CVE-2025-40107 bsc#1253018).
- Update
  patches.suse/cpufreq-intel_pstate-Fix-object-lifecycle-issue-in-update_qos_request.patch
  (stable-fixes git-fixes CVE-2025-40194 bsc#1253445).
- Update
  patches.suse/crypto-rng-Ensure-set_ent-is-always-present.patch
  (git-fixes CVE-2025-40109 bsc#1253176).
- Update
  patches.suse/drm-vmwgfx-Fix-Use-after-free-in-validation.patch
  (git-fixes CVE-2025-40111 bsc#1253362).
- Update
  patches.suse/drm-vmwgfx-Fix-a-null-ptr-access-in-the-cursor-snoop.patch
  (git-fixes CVE-2025-40110 bsc#1253275).
- Update
  patches.suse/ext4-avoid-potential-buffer-over-read-in-parse_apply.patch
  (git-fixes CVE-2025-40198 bsc#1253453).
- Update
  patches.suse/hwrng-ks-sa-fix-division-by-zero-in-ks_sa_rng_init.patch
  (git-fixes CVE-2025-40127 bsc#1253369).
- Update
  patches.suse/mailbox-zynqmp-ipi-Fix-out-of-bounds-access-in-mailb.patch
  (git-fixes CVE-2025-40180 bsc#1253440).
- Update
  patches.suse/media-v4l2-subdev-Fix-alloc-failure-check-in-v4l2_su.patch
  (git-fixes CVE-2025-40207 bsc#1253395).
- Update
  patches.suse/net-usb-Remove-disruptive-netif_wake_queue-in-rtl815.patch
  (git-fixes CVE-2025-40140 bsc#1253349).
- Update
  patches.suse/net-usb-asix-hold-PM-usage-ref-to-avoid-PM-MDIO-RTNL.patch
  (git-fixes CVE-2025-40120 bsc#1253360).
- Update
  patches.suse/nvmet-fc-move-lsop-put-work-to-nvmet_fc_ls_req_op.patch
  (bsc#1245193 bsc#1247500 CVE-2025-40171 bsc#1253412).
- Update
  patches.suse/pwm-berlin-Fix-wrong-register-in-suspend-resume.patch
  (git-fixes CVE-2025-40188 bsc#1253449).
- Update
  patches.suse/scsi-mpt3sas-Fix-crash-in-transport-port-remove-by-using-i.patch
  (git-fixes CVE-2025-40115 bsc#1253318).
- Update
  patches.suse/scsi-pm80xx-Fix-array-index-out-of-of-bounds-on-rmmod.patch
  (git-fixes CVE-2025-40118 bsc#1253363).
- Update
  patches.suse/sunrpc-fix-null-pointer-dereference-on-zero-length-checksum.patch
  (git-fixes CVE-2025-40129 bsc#1253472).
- Update
  patches.suse/tcp-Don-t-call-reqsk_fastopen_remove-in-tcp_conn_request.patch
  (git-fixes CVE-2025-40186 bsc#1253438).
- Update
  patches.suse/usb-host-max3421-hcd-Fix-error-pointer-dereference-i.patch
  (git-fixes CVE-2025-40116 bsc#1253324).
- Update
  patches.suse/usbnet-Fix-using-smp_processor_id-in-preemptible-cod.patch
  (git-fixes CVE-2025-40164 bsc#1253407).
- commit d8d3cd1</changelog>
  <changelog author="mkubecek@suse.cz" date="1764158403">- tcp_metrics: use dst_dev_net_rcu() (CVE-2025-40075 bsc#1252795).
- commit fcb52d9</changelog>
  <changelog author="mkubecek@suse.cz" date="1764158404">- smc: Fix use-after-free in __pnet_find_base_ndev()
  (CVE-2025-40064 bsc#1252845).
- commit 2971b90</changelog>
  <changelog author="mkubecek@suse.cz" date="1764158405">- smc: Use __sk_dst_get() and dst_dev_rcu() in in
  smc_clc_prfx_set() (CVE-2025-40139 bsc#1253409).
- commit a7ae1b3</changelog>
  <changelog author="mkubecek@suse.cz" date="1764158406">- smc: Use __sk_dst_get() and dst_dev_rcu() in
  smc_clc_prfx_match() (CVE-2025-40168 bsc#1253427).
- commit 0f10629</changelog>
  <changelog author="mkubecek@suse.cz" date="1764158407">- tls: Use __sk_dst_get() and dst_dev_rcu() in
  get_netdev_for_sock() (CVE-2025-40149 bsc#1253355).
- commit c8fb6ed</changelog>
  <changelog author="hare@suse.de" date="1764244800">- KVM: s390: kABI backport for 'last_sleep_cpu' (bsc#1252352).
- KVM: s390: improve interrupt cpu for wakeup (bsc#1235463).
- commit d323daf</changelog>
</package>
<package pkgid="3b0764bf9263602185c1d6e84f4e85c4e8b329f948869e819515bf543724d589" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.53.25.1"/>
  <changelog author="mkubecek@suse.cz" date="1764072000">- net: dst: annotate data-races around dst-&gt;output (CVE-2025-40074
  bsc#1252794).
- commit a54672b</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072001">- net: dst: add four helpers to annotate data-races around
  dst-&gt;dev (CVE-2025-40074 bsc#1252794).
- commit d644653</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072002">- ipv4: adopt dst_dev, skb_dst_dev and skb_dst_dev_net[_rcu]
  (CVE-2025-40074 bsc#1252794).
- commit 172fe2b</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072003">- ipv6: adopt dst_dev() helper (CVE-2025-40074 bsc#1252794).
- refresh patches.suse/net-ip6_tunnel-Prevent-perpetual-tunnel-growth.patch
- commit 7eda2f1</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072004">- ipv6: adopt skb_dst_dev() and skb_dst_dev_net[_rcu]() helpers
  (CVE-2025-40074 bsc#1252794).
- commit bef51be</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072005">- ipv6: ip6_mc_input() and ip6_mr_input() cleanups (CVE-2025-40074
  bsc#1252794).
- commit 74e34e6</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072006">- net: Add locking to protect skb-&gt;dev access in ip_output
  (CVE-2025-40074 bsc#1252794).
- commit ba856a3</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072007">- net: dst: introduce dst-&gt;dev_rcu (CVE-2025-40074 bsc#1252794).
- commit bc25dd4</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072008">- kabi: hide dst_entry::dev_rcu (CVE-2025-40074 bsc#1252794).
- commit 7047515</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072009">- ipv4: start using dst_dev_rcu() (CVE-2025-40074 bsc#1252794).
- commit d58640c</changelog>
  <changelog author="rbm@suse.com" date="1764072010">- selftests: net: lib: Do not overwrite error messages
  (bsc#1254235).
- selftests: net: lib: fix shift count out of range (bsc#1254235).
- selftests: net: lib: Move logging from forwarding/lib.sh here
  (bsc#1254235).
- selftests: net: add helper for checking if nettest is available
  (bsc#1254235).
- selftests: net: lib: kill PIDs before del netns (bsc#1254235).
- selftests: lib: tc_rule_stats_get(): Move default to argument
  definition (bsc#1254235).
- selftests: net: lib: remove 'ns' var in setup_ns (bsc#1254235).
- selftests: net: lib: do not set ns var as readonly
  (bsc#1254235).
- selftests: net: lib: remove ns from list after clean-up
  (bsc#1254235).
- selftests: net: lib: ignore possible errors (bsc#1254235).
- selftests: net: lib: set 'i' as local (bsc#1254235).
- selftests: net: lib: avoid error removing empty netns name
  (bsc#1254235).
- selftests: net: lib: support errexit with busywait
  (bsc#1254235).
- selftests/net: use tc rule to filter the na packet
  (bsc#1254235).
- selftests/net/lib: no need to record ns name if it already exist
  (bsc#1254235).
- selftests: net: Unify code of busywait() and slowwait()
  (bsc#1254235).
- selftests: forwarding: Add a test for testing lib.sh
  functionality (bsc#1254235).
- selftests: forwarding: Support for performance sensitive tests
  (bsc#1254235).
- selftests: forwarding: Convert log_test() to recognize RET
  values (bsc#1254235).
- selftests: forwarding: Have RET track kselftest framework
  constants (bsc#1254235).
- selftests: lib: Define more kselftest exit codes (bsc#1254235).
- selftests: forwarding: Change inappropriate log_test_skip()
  calls (bsc#1254235).
- selftests: forwarding.config.sample: Move overrides to lib.sh
  (bsc#1254235).
- selftests: net: libs: Change variable fallback syntax
  (bsc#1254235).
- selftests: forwarding: Parametrize mausezahn delay
  (bsc#1254235).
- selftests/net/forwarding: add slowwait functions (bsc#1254235).
- selftests: forwarding: Remove duplicated lib.sh content
  (bsc#1254235).
- selftests: forwarding: Redefine relative_path variable
  (bsc#1254235).
- selftests: net: List helper scripts in TEST_FILES Makefile
  variable (bsc#1254235).
- selftests/net/lib: update busywait timeout value (bsc#1254235).
- selftests: forwarding: Avoid failures to source net/lib.sh
  (bsc#1254235).
- selftests/net: add variable NS_LIST for lib.sh (bsc#1254235).
- selftests/net: add lib.sh (bsc#1254235).
- commit 3a99ca1</changelog>
  <changelog author="tzimmermann@suse.com" date="1764158400">- drm/xe: Don't allow evicting of BOs in same VM in array of VM binds (bsc#1252923 CVE-2025-40086)
- commit aa2fe0b</changelog>
  <changelog author="tzimmermann@suse.com" date="1764158401">- Fix "drm/xe: Don't allow evicting of BOs in same VM in array of VM binds" (bsc#1252923)
  Fix the following compiler warning:
  * no semicolon at end of struct or union in ../drivers/gpu/drm/xe/xe_vm_types.h
  In file included from ../drivers/gpu/drm/xe/xe_bb.c:16:0:
  ../drivers/gpu/drm/xe/xe_vm_types.h:393:1: warning: no semicolon at end of struct or union
- commit 38ee821</changelog>
  <changelog author="joao.povoas@suse.com" date="1764158402">- Update
  patches.suse/ASoC-Intel-bytcr_rt5640-Fix-invalid-quirk-input-mapp.patch
  (git-fixes CVE-2025-40154 bsc#1253431).
- Update
  patches.suse/ASoC-Intel-bytcr_rt5651-Fix-invalid-quirk-input-mapp.patch
  (git-fixes CVE-2025-40121 bsc#1253367).
- Update
  patches.suse/Bluetooth-ISO-Fix-possible-UAF-on-iso_conn_free.patch
  (git-fixes CVE-2025-40141 bsc#1253352).
- Update
  patches.suse/EDAC-i10nm-Skip-DIMM-enumeration-on-a-disabled-memor.patch
  (git-fixes CVE-2025-40157 bsc#1253423).
- Update
  patches.suse/PM-devfreq-mtk-cci-Fix-potential-error-pointer-deref.patch
  (git-fixes CVE-2025-40156 bsc#1253428).
- Update
  patches.suse/Squashfs-reject-negative-file-sizes-in-squashfs_read_inode.patch
  (git-fixes CVE-2025-40200 bsc#1253448).
- Update
  patches.suse/accel-qaic-Treat-remaining-0-as-error-in-find_and_ma.patch
  (git-fixes CVE-2025-40172 bsc#1253424).
- Update
  patches.suse/bpf-Fix-metadata_dst-leak-__bpf_redirect_neigh_v-4-6.patch
  (git-fixes CVE-2025-40183 bsc#1253441).
- Update
  patches.suse/btrfs-avoid-potential-out-of-bounds-in-btrfs_encode_.patch
  (git-fixes CVE-2025-40205 bsc#1253456).
- Update
  patches.suse/can-hi311x-fix-null-pointer-dereference-when-resumin.patch
  (stable-fixes CVE-2025-40107 bsc#1253018).
- Update
  patches.suse/cpufreq-intel_pstate-Fix-object-lifecycle-issue-in-update_qos_request.patch
  (stable-fixes git-fixes CVE-2025-40194 bsc#1253445).
- Update
  patches.suse/crypto-rng-Ensure-set_ent-is-always-present.patch
  (git-fixes CVE-2025-40109 bsc#1253176).
- Update
  patches.suse/drm-vmwgfx-Fix-Use-after-free-in-validation.patch
  (git-fixes CVE-2025-40111 bsc#1253362).
- Update
  patches.suse/drm-vmwgfx-Fix-a-null-ptr-access-in-the-cursor-snoop.patch
  (git-fixes CVE-2025-40110 bsc#1253275).
- Update
  patches.suse/ext4-avoid-potential-buffer-over-read-in-parse_apply.patch
  (git-fixes CVE-2025-40198 bsc#1253453).
- Update
  patches.suse/hwrng-ks-sa-fix-division-by-zero-in-ks_sa_rng_init.patch
  (git-fixes CVE-2025-40127 bsc#1253369).
- Update
  patches.suse/mailbox-zynqmp-ipi-Fix-out-of-bounds-access-in-mailb.patch
  (git-fixes CVE-2025-40180 bsc#1253440).
- Update
  patches.suse/media-v4l2-subdev-Fix-alloc-failure-check-in-v4l2_su.patch
  (git-fixes CVE-2025-40207 bsc#1253395).
- Update
  patches.suse/net-usb-Remove-disruptive-netif_wake_queue-in-rtl815.patch
  (git-fixes CVE-2025-40140 bsc#1253349).
- Update
  patches.suse/net-usb-asix-hold-PM-usage-ref-to-avoid-PM-MDIO-RTNL.patch
  (git-fixes CVE-2025-40120 bsc#1253360).
- Update
  patches.suse/nvmet-fc-move-lsop-put-work-to-nvmet_fc_ls_req_op.patch
  (bsc#1245193 bsc#1247500 CVE-2025-40171 bsc#1253412).
- Update
  patches.suse/pwm-berlin-Fix-wrong-register-in-suspend-resume.patch
  (git-fixes CVE-2025-40188 bsc#1253449).
- Update
  patches.suse/scsi-mpt3sas-Fix-crash-in-transport-port-remove-by-using-i.patch
  (git-fixes CVE-2025-40115 bsc#1253318).
- Update
  patches.suse/scsi-pm80xx-Fix-array-index-out-of-of-bounds-on-rmmod.patch
  (git-fixes CVE-2025-40118 bsc#1253363).
- Update
  patches.suse/sunrpc-fix-null-pointer-dereference-on-zero-length-checksum.patch
  (git-fixes CVE-2025-40129 bsc#1253472).
- Update
  patches.suse/tcp-Don-t-call-reqsk_fastopen_remove-in-tcp_conn_request.patch
  (git-fixes CVE-2025-40186 bsc#1253438).
- Update
  patches.suse/usb-host-max3421-hcd-Fix-error-pointer-dereference-i.patch
  (git-fixes CVE-2025-40116 bsc#1253324).
- Update
  patches.suse/usbnet-Fix-using-smp_processor_id-in-preemptible-cod.patch
  (git-fixes CVE-2025-40164 bsc#1253407).
- commit d8d3cd1</changelog>
  <changelog author="mkubecek@suse.cz" date="1764158403">- tcp_metrics: use dst_dev_net_rcu() (CVE-2025-40075 bsc#1252795).
- commit fcb52d9</changelog>
  <changelog author="mkubecek@suse.cz" date="1764158404">- smc: Fix use-after-free in __pnet_find_base_ndev()
  (CVE-2025-40064 bsc#1252845).
- commit 2971b90</changelog>
  <changelog author="mkubecek@suse.cz" date="1764158405">- smc: Use __sk_dst_get() and dst_dev_rcu() in in
  smc_clc_prfx_set() (CVE-2025-40139 bsc#1253409).
- commit a7ae1b3</changelog>
  <changelog author="mkubecek@suse.cz" date="1764158406">- smc: Use __sk_dst_get() and dst_dev_rcu() in
  smc_clc_prfx_match() (CVE-2025-40168 bsc#1253427).
- commit 0f10629</changelog>
  <changelog author="mkubecek@suse.cz" date="1764158407">- tls: Use __sk_dst_get() and dst_dev_rcu() in
  get_netdev_for_sock() (CVE-2025-40149 bsc#1253355).
- commit c8fb6ed</changelog>
  <changelog author="hare@suse.de" date="1764244800">- KVM: s390: kABI backport for 'last_sleep_cpu' (bsc#1252352).
- KVM: s390: improve interrupt cpu for wakeup (bsc#1235463).
- commit d323daf</changelog>
</package>
<package pkgid="f903e8848cb7f24115bcc6b1d576aecd38281d8c9bc45f808c80b8b1ffd6c67b" name="kernel-default" arch="src">
  <version epoch="0" ver="6.4.0" rel="150700.53.28.1"/>
  <changelog author="joao.povoas@suse.com" date="1768219200">- Update
  patches.suse/1260-drm-amdkfd-Add-missing-gfx11-MQD-manager-callbacks.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-54261
  bsc#1255879).
- Update
  patches.suse/ACPI-video-Fix-use-after-free-in-acpi_video_switch_b.patch
  (git-fixes CVE-2025-40211 bsc#1254126).
- Update
  patches.suse/ALSA-dice-fix-buffer-overflow-in-detect_stream_forma.patch
  (git-fixes CVE-2025-68346 bsc#1255603).
- Update
  patches.suse/ALSA-firewire-motu-add-bounds-check-in-put_user-loop.patch
  (git-fixes CVE-2025-68753 bsc#1256238).
- Update
  patches.suse/ALSA-firewire-motu-fix-buffer-overflow-in-hwdep-read.patch
  (git-fixes CVE-2025-68347 bsc#1255706).
- Update
  patches.suse/ALSA-hda-cs35l41-Fix-NULL-pointer-dereference-in-cs3-c34b04c.patch
  (git-fixes CVE-2025-68345 bsc#1255601).
- Update
  patches.suse/ALSA-pcm-Fix-potential-data-race-at-PCM-memory-.patch
  (bsc#1012628 CVE-2023-54072 bsc#1256291).
- Update
  patches.suse/ALSA-usb-audio-Fix-NULL-pointer-dereference-in-snd_u.patch
  (git-fixes CVE-2025-40275 bsc#1254829).
- Update
  patches.suse/ALSA-usb-audio-Fix-potential-memory-leaks-at-error-p.patch
  (jsc#PED-6045 jsc#PED-6036 jsc#PED-6104 jsc#PED-6114
  jsc#PED-6067 jsc#PED-6123 CVE-2023-54022 bsc#1255545).
- Update
  patches.suse/ALSA-usb-audio-Fix-potential-overflow-of-PCM-transfe.patch
  (stable-fixes CVE-2025-40269 bsc#1255035).
- Update
  patches.suse/ASoC-codecs-wcd-mbhc-v2-fix-resource-leaks-on-c.patch
  (bsc#1012628 CVE-2023-53842 bsc#1254690).
- Update
  patches.suse/Bluetooth-6lowpan-reset-link-local-header-on-ipv6-re.patch
  (git-fixes CVE-2025-40282 bsc#1254850).
- Update
  patches.suse/Bluetooth-ISO-fix-iso_conn-related-locking-and-.patch
  (bsc#1012628 CVE-2023-54164 bsc#1256071).
- Update
  patches.suse/Bluetooth-MGMT-cancel-mesh-send-timer-when-hdev-remo.patch
  (git-fixes CVE-2025-40284 bsc#1254860).
- Update patches.suse/Bluetooth-SCO-Fix-UAF-on-sco_conn_free.patch
  (stable-fixes CVE-2025-40309 bsc#1255065).
- Update
  patches.suse/Bluetooth-bcsp-receive-data-only-if-registered.patch
  (stable-fixes CVE-2025-40308 bsc#1255064).
- Update
  patches.suse/Bluetooth-btusb-reorder-cleanup-in-btusb_disconnect-.patch
  (git-fixes CVE-2025-40283 bsc#1254858).
- Update
  patches.suse/Bluetooth-hci_conn-return-ERR_PTR-instead-of-NU.patch
  (bsc#1012628 CVE-2023-54038 bsc#1255540).
- Update
  patches.suse/Bluetooth-hci_event-validate-skb-length-for-unknown-.patch
  (git-fixes CVE-2025-40301 bsc#1255193).
- Update
  patches.suse/Bluetooth-hci_sock-Prevent-race-in-socket-write-iter.patch
  (git-fixes CVE-2025-68305 bsc#1255169).
- Update
  patches.suse/Bluetooth-hci_sync-Avoid-use-after-free-in-dbg-.patch
  (bsc#1012628 CVE-2023-54210 bsc#1255955).
- Update
  patches.suse/Bluetooth-hci_sync-Avoid-use-after-free-in-dbg-for-h.patch
  (git-fixes CVE-2023-53828 bsc#1254623).
- Update
  patches.suse/Bluetooth-hci_sync-Fix-UAF-in-hci_disconnect_all_syn.patch
  (git-fixes CVE-2023-53762 bsc#1254606).
- Update
  patches.suse/Bluetooth-hci_sync-fix-race-in-hci_cmd_sync_dequeue_.patch
  (git-fixes CVE-2025-40318 bsc#1254798).
- Update
  patches.suse/FS-JFS-Check-for-read-only-mounted-filesystem-i.patch
  (bsc#1012628 CVE-2023-53766 bsc#1255005).
- Update
  patches.suse/HID-hidraw-fix-data-race-on-device-refcount.patch
  (bsc#1012628 CVE-2023-53759 bsc#1254663).
- Update
  patches.suse/HID-uclogic-Correct-devm-device-reference-for-hidinp.patch
  (git-fixes CVE-2023-54207 bsc#1255961).
- Update
  patches.suse/HID-wacom-Use-ktime_t-rather-than-int-when-deal.patch
  (bsc#1012628 CVE-2023-53797 bsc#1254733).
- Update
  patches.suse/Input-cros_ec_keyb-fix-an-invalid-memory-access.patch
  (stable-fixes CVE-2025-40263 bsc#1255077).
- Update
  patches.suse/Input-imx_sc_key-fix-memory-corruption-on-unload.patch
  (git-fixes CVE-2025-40262 bsc#1254840).
- Update
  patches.suse/Input-pegasus-notetaker-fix-potential-out-of-bounds-.patch
  (git-fixes CVE-2025-68217 bsc#1255221).
- Update
  patches.suse/KVM-SVM-Get-source-vCPUs-from-source-VM-for-SEV-ES-i.patch
  (git-fixes CVE-2023-54296 bsc#1255793).
- Update
  patches.suse/KVM-s390-pv-fix-index-value-of-replaced-ASCE.patch
  (bsc#1012628 CVE-2023-54092 bsc#1256370).
- Update patches.suse/MIPS-KVM-Fix-NULL-pointer-dereference.patch
  (bsc#1012628 CVE-2023-54241 bsc#1255838).
- Update patches.suse/NFSD-Fix-crash-in-nfsd4_read_release.patch
  (git-fixes CVE-2025-40324 bsc#1254791).
- Update
  patches.suse/NFSD-free-copynotify-stateid-in-nfs4_free_ol_stateid.patch
  (git-fixes CVE-2025-40273 bsc#1254828).
- Update patches.suse/PCI-DOE-Fix-destroy_work_on_stack-race.patch
  (git-fixes CVE-2023-54235 bsc#1255921).
- Update
  patches.suse/PCI-Free-released-resource-after-coalescing.patch
  (git-fixes CVE-2023-53743 bsc#1254782).
- Update
  patches.suse/PCI-IOV-Add-PCI-rescan-remove-locking-when-enabling-.patch
  (git-fixes CVE-2025-40219 bsc#1254518).
- Update
  patches.suse/PCI-cadence-Check-for-the-existence-of-cdns_pcie-ops.patch
  (stable-fixes CVE-2025-68176 bsc#1255329).
- Update
  patches.suse/RDMA-bnxt_re-Prevent-handling-any-completions-a.patch
  (bsc#1012628 CVE-2023-54048 bsc#1256395).
- Update
  patches.suse/RDMA-efa-Fix-wrong-resources-deallocation-order.patch
  (git-fixes CVE-2023-54201 bsc#1255964).
- Update
  patches.suse/RDMA-irdma-Fix-data-race-on-CQP-completion-stat.patch
  (bsc#1012628 CVE-2023-54302 bsc#1255792).
- Update
  patches.suse/RDMA-irdma-Fix-data-race-on-CQP-request-done.patch
  (bsc#1012628 CVE-2023-54292 bsc#1255800).
- Update
  patches.suse/Revert-IB-isert-Fix-incorrect-release-of-isert-conne.patch
  (git-fixes CVE-2023-54219 bsc#1256231).
- Update
  patches.suse/accel-habanalabs-support-mapping-cb-with-vmalloc-bac.patch
  (stable-fixes CVE-2025-40311 bsc#1255068).
- Update
  patches.suse/accel-qaic-Clean-up-integer-overflow-checking-.patch
  (bsc#1012628 CVE-2023-53778 bsc#1254761).
- Update
  patches.suse/af_unix-Fix-data-race-around-unix_tot_inflight.patch
  (git-fixes CVE-2023-54006 bsc#1255591).
- Update patches.suse/amba-bus-fix-refcount-leak.patch (git-fixes
  CVE-2023-54230 bsc#1255925).
- Update
  patches.suse/amd-amdkfd-resolve-a-race-in-amdgpu_amdkfd_device_fi.patch
  (stable-fixes CVE-2025-40310 bsc#1255041).
- Update
  patches.suse/amdgpu-validate-offset_in_bo-of-drm_amdgpu_gem_.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-53819
  bsc#1254712).
- Update patches.suse/arm64-mm-fix-VA-range-sanity-check.patch
  (bsc#1012628 CVE-2023-53989 bsc#1256302).
- Update
  patches.suse/arm64-set-__exception_irq_entry-with-__irq_entr.patch
  (bsc#1012628 CVE-2023-54322 bsc#1255763).
- Update
  patches.suse/atm-fore200e-Fix-possible-data-race-in-fore200e_open.patch
  (git-fixes CVE-2025-68339 bsc#1255505).
- Update
  patches.suse/audit-fix-possible-soft-lockup-in-__audit_inode_chil.patch
  (git-fixes CVE-2023-54045 bsc#1256285).
- Update
  patches.suse/autofs-fix-memory-leak-of-waitqueues-in-autofs_catat.patch
  (git-fixes CVE-2023-54134 bsc#1256106).
- Update
  patches.suse/backlight-led-bl-Add-devlink-to-supplier-LEDs.patch
  (git-fixes CVE-2025-68758 bsc#1255944).
- Update
  patches.suse/bcache-fixup-btree_cache_wait-list-damage.patch
  (bsc#1012628 CVE-2023-54293 bsc#1255801).
- Update patches.suse/binder-fix-memory-leak-in-binder_init.patch
  (bsc#1012628 CVE-2023-54005 bsc#1255629).
- Update
  patches.suse/blk-cgroup-Fix-NULL-deref-caused-by-blkg_policy_data-being-installed-before-init.patch
  (bsc#1216062 CVE-2023-54271 bsc#1255902).
- Update
  patches.suse/blk-cgroup-hold-queue_lock-when-removing-blkg-.patch
  (bsc#1012628 CVE-2023-54088 bsc#1256263).
- Update
  patches.suse/blk-mq-fix-tags-leak-when-shrink-nr_hw_queues.patch
  (bsc#1216436 CVE-2023-54227 bsc#1255952).
- Update
  patches.suse/block-fix-blktrace-debugfs-entries-leakage.patch
  (bsc#1012628 CVE-2023-54209 bsc#1255963).
- Update
  patches.suse/block-rq_qos-protect-rq_qos-apis-with-a-new-loc.patch
  (bsc#1012628 CVE-2023-53823 bsc#1254691).
- Update
  patches.suse/bpf-Address-KCSAN-report-on-bpf_lru_list.patch
  (bsc#1012628 CVE-2023-54283 bsc#1255809).
- Update
  patches.suse/bpf-Disable-preemption-in-bpf_event_output.patch
  (bsc#1012628 CVE-2023-54173 bsc#1255996).
- Update
  patches.suse/bpf-Disable-preemption-in-bpf_perf_event_outpu.patch
  (bsc#1012628 CVE-2023-54303 bsc#1255785).
- Update
  patches.suse/bpf-Fix-issue-in-verifying-allow_ptr_leaks.patch
  (jsc#PED-6811 CVE-2023-54181 bsc#1255988).
- Update
  patches.suse/bpf-Silence-a-warning-in-btf_type_id_size.patch
  (bsc#1012628 CVE-2023-54247 bsc#1255892).
- Update
  patches.suse/bpf-bpf_sk_storage-Fix-invalid-wait-context-lockdep-.patch
  (jsc#PED-6811 CVE-2023-53857 bsc#1254648).
- Update
  patches.suse/bpf-drop-unnecessary-user-triggerable-WARN_ONCE.patch
  (bsc#1012628 CVE-2023-54145 bsc#1256090).
- Update
  patches.suse/bpf-sockmap-Fix-skb-refcnt-race-after-locking-change.patch
  (jsc#PED-6811 CVE-2023-53836 bsc#1254693).
- Update
  patches.suse/btrfs-fix-incorrect-splitting-in-btrfs_drop_ex.patch
  (bsc#1012628 CVE-2023-54121 bsc#1256267).
- Update
  patches.suse/btrfs-fix-lockdep-splat-and-potential-deadlock-after.patch
  (git-fixes CVE-2023-54224 bsc#1255951).
- Update
  patches.suse/btrfs-fix-race-between-balance-and-cancel-pause.patch
  (bsc#1012628 CVE-2023-54023 bsc#1256301).
- Update
  patches.suse/btrfs-fix-race-when-deleting-free-space-root-fr.patch
  (bsc#1012628 CVE-2023-54067 bsc#1256369).
- Update
  patches.suse/btrfs-fix-race-when-deleting-quota-root-from-th.patch
  (bsc#1012628 CVE-2023-54032 bsc#1255617).
- Update
  patches.suse/btrfs-fix-warning-when-putting-transaction-with.patch
  (bsc#1012628 CVE-2023-53865 bsc#1254762).
- Update
  patches.suse/btrfs-release-path-before-inode-lookup-during-the-in.patch
  (git-fixes CVE-2023-54281 bsc#1255820).
- Update
  patches.suse/btrfs-remove-BUG_ON-s-in-add_new_free_space.patch
  (bsc#1012628 CVE-2023-54185 bsc#1255984).
- Update
  patches.suse/btrfs-set-page-extent-mapped-after-read_folio-in-rel.patch
  (git-fixes CVE-2023-54253 bsc#1255891).
- Update
  patches.suse/btrfs-zoned-fix-memory-leak-after-finding-block.patch
  (bsc#1012628 CVE-2023-54297 bsc#1255795).
- Update
  patches.suse/btrfs-zoned-skip-splitting-and-logical-rewriting-on-.patch
  (bsc#1223731 CVE-2024-26944 CVE-2023-54080 bsc#1256367).
- Update
  patches.suse/can-gs_usb-gs_usb_xmit_callback-fix-handling-of-fail.patch
  (git-fixes CVE-2025-68307 bsc#1255146).
- Update
  patches.suse/can-kvaser_usb-leaf-Fix-potential-infinite-loop-in-c.patch
  (git-fixes CVE-2025-68308 bsc#1255149).
- Update
  patches.suse/cifs-fix-potential-oops-in-cifs_oplock_break.patch
  (bsc#1012628 CVE-2023-54258 bsc#1255886).
- Update
  patches.suse/cifs-fix-session-state-check-in-reconnect-to-a.patch
  (bsc#1012628 CVE-2023-53794 bsc#1255163).
- Update
  patches.suse/clk-clocking-wizard-Fix-Oops-in-clk_wzrd_regist.patch
  (bsc#1012628 CVE-2023-53807 bsc#1254724).
- Update
  patches.suse/clk-imx93-fix-memory-leak-and-missing-unwind-go.patch
  (bsc#1012628 CVE-2023-54221 bsc#1255842).
- Update
  patches.suse/comedi-c6xdigio-Fix-invalid-PNP-driver-unregistratio.patch
  (git-fixes CVE-2025-68332 bsc#1255483).
- Update
  patches.suse/comedi-check-device-s-attached-status-in-compat-ioct.patch
  (git-fixes CVE-2025-68257 bsc#1255167).
- Update
  patches.suse/comedi-multiq3-sanitize-config-options-in-multiq3_at.patch
  (git-fixes CVE-2025-68258 bsc#1255182).
- Update
  patches.suse/comedi-pcl818-fix-null-ptr-deref-in-pcl818_ai_cancel.patch
  (git-fixes CVE-2025-68335 bsc#1255480).
- Update
  patches.suse/crypto-api-Use-work-queue-in-crypto_destroy_instance.patch
  (git-fixes CVE-2023-53799 bsc#1254732).
- Update
  patches.suse/crypto-aspeed-fix-double-free-caused-by-devm.patch
  (git-fixes CVE-2025-68172 bsc#1255253).
- Update
  patches.suse/crypto-asymmetric_keys-prevent-overflow-in-asymmetri.patch
  (git-fixes CVE-2025-68724 bsc#1255550).
- Update
  patches.suse/dccp-Fix-out-of-bounds-access-in-DCCP-error-handler.patch
  (bsc#1220419 CVE-2023-53782 bsc#1254758).
- Update
  patches.suse/dccp-fix-data-race-around-dp-dccps_mss_cache.patch
  (bsc#1012628 CVE-2023-53839 bsc#1254655).
- Update
  patches.suse/devlink-report-devlink_port_type_warn-source-de.patch
  (bsc#1012628 CVE-2023-53841 bsc#1255009).
- Update
  patches.suse/dm-don-t-attempt-to-queue-IO-under-RCU-protection-a9ce.patch
  (jsc#PED-7514 CVE-2023-53860 bsc#1254626).
- Update
  patches.suse/dm-fix-a-race-condition-in-retrieve_deps-f600.patch
  (jsc#PED-7514 CVE-2023-54324 bsc#1255759).
- Update
  patches.suse/driver-soc-xilinx-use-_safe-loop-iterator-to-av.patch
  (bsc#1012628 CVE-2023-54101 bsc#1256153).
- Update
  patches.suse/drm-amd-display-Check-NULL-before-accessing.patch
  (stable-fixes CVE-2025-68286 bsc#1255351).
- Update
  patches.suse/drm-amd-display-Fix-NULL-deref-in-debugfs-odm_combin.patch
  (git-fixes CVE-2025-68180 bsc#1255252).
- Update
  patches.suse/drm-amdgpu-Fix-NULL-pointer-dereference-in-VRAM-logi.patch
  (stable-fixes CVE-2025-40288 bsc#1255057).
- Update
  patches.suse/drm-bridge-dw_hdmi-fix-connector-access-for-scd.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-53784
  bsc#1254765).
- Update
  patches.suse/drm-client-Fix-memory-leak-in-drm_client_target.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-54091
  bsc#1256274).
- Update
  patches.suse/drm-i915-Avoid-lock-inversion-when-pinning-to-GGTT-o.patch
  (git-fixes CVE-2025-68244 bsc#1255190).
- Update
  patches.suse/drm-mediatek-Fix-device-use-after-free-on-unbind.patch
  (git-fixes CVE-2025-40316 bsc#1254797).
- Update
  patches.suse/drm-msm-dp-Drop-aux-devices-together-with-DP-co.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-53851
  bsc#1254695).
- Update
  patches.suse/drm-mxsfb-Disable-overlay-plane-in-mxsfb_plane_overl.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-53864
  bsc#1254754).
- Update
  patches.suse/drm-nouveau-kms-nv50-init-hpd_irq_lock-for-PIOR.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-54263
  bsc#1255883).
- Update
  patches.suse/drm-sched-Fix-deadlock-in-drm_sched_entity_kill_jobs.patch
  (git-fixes CVE-2025-40329 bsc#1254621).
- Update patches.suse/drm-tegra-Add-call-to-put_pid.patch
  (git-fixes CVE-2025-68233 bsc#1255206).
- Update
  patches.suse/drm-ttm-Don-t-leak-a-resource-on-eviction-error.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-54254
  bsc#1255890).
- Update
  patches.suse/drm-ttm-Don-t-leak-a-resource-on-swapout-move-e.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-53844
  bsc#1254649).
- Update
  patches.suse/drm-vgem-fence-Fix-potential-deadlock-on-release.patch
  (git-fixes CVE-2025-68757 bsc#1255943).
- Update
  patches.suse/drm-vmwgfx-Validate-command-header-size-against-SVGA.patch
  (git-fixes CVE-2025-40277 bsc#1254894).
- Update
  patches.suse/erofs-kill-hooked-chains-to-avoid-loops-on-dedu.patch
  (bsc#1012628 CVE-2023-53777 bsc#1254749).
- Update
  patches.suse/exfat-use-kvmalloc_array-kvfree-instead-of-kma.patch
  (bsc#1012628 CVE-2023-54194 bsc#1255974).
- Update
  patches.suse/ext4-correct-grp-validation-in-ext4_mb_good_group.patch
  (bsc#1234163 CVE-2023-53861 bsc#1254678).
- Update
  patches.suse/ext4-fix-BUG-in-ext4_mb_new_inode_pa-due-to-overflow.patch
  (bsc#1219165 CVE-2023-54069 bsc#1256371).
- Update
  patches.suse/ext4-fix-rbtree-traversal-bug-in-ext4_mb_use_pr.patch
  (bsc#1012628 CVE-2023-53813 bsc#1254717).
- Update
  patches.suse/ext4-turn-quotas-off-if-mount-failed-after-enab.patch
  (bsc#1012628 CVE-2023-54153 bsc#1256081).
- Update
  patches.suse/f2fs-fix-to-do-sanity-check-on-direct-node-in-.patch
  (bsc#1012628 CVE-2023-53846 bsc#1254983).
- Update
  patches.suse/fbcon-Set-fb_display-i-mode-to-NULL-when-the-mode-is.patch
  (stable-fixes CVE-2025-40323 bsc#1255094).
- Update
  patches.suse/fbdev-Add-bounds-checking-in-bit_putcs-to-fix-vmallo.patch
  (stable-fixes CVE-2025-40304 bsc#1255034).
- Update
  patches.suse/fbdev-bitblit-bound-check-glyph-index-in-bit_putcs.patch
  (stable-fixes CVE-2025-40322 bsc#1255092).
- Update
  patches.suse/firmware-meson_sm-fix-to-avoid-potential-NULL-pointe.patch
  (git-fixes CVE-2023-54304 bsc#1255786).
- Update
  patches.suse/firmware-stratix10-svc-fix-bug-in-saving-controller-.patch
  (git-fixes CVE-2025-68328 bsc#1255489).
- Update
  patches.suse/fs-Protect-reconfiguration-of-sb-read-write-fr.patch
  (bsc#1012628 CVE-2023-54099 bsc#1256197).
- Update
  patches.suse/fs-jfs-prevent-double-free-in-dbUnmount-after-failed-jfs_remount.patch
  (git-fixes CVE-2023-54127 bsc#1256119).
- Update
  patches.suse/fs-ntfs3-Return-error-for-inconsistent-extende.patch
  (bsc#1012628 CVE-2023-54125 bsc#1256117).
- Update
  patches.suse/fs-sysv-Null-check-to-prevent-null-ptr-deref-b.patch
  (bsc#1012628 CVE-2023-54264 bsc#1255872).
- Update
  patches.suse/gpu-host1x-Fix-race-in-syncpt-alloc-free.patch
  (git-fixes CVE-2025-68732 bsc#1255688).
- Update
  patches.suse/gtp-Fix-use-after-free-in-__gtp_encap_destroy.patch
  (bsc#1012628 CVE-2023-54142 bsc#1256095).
- Update
  patches.suse/hfs-validate-record-offset-in-hfsplus_bmap_alloc.patch
  (git-fixes CVE-2025-40349 bsc#1255280).
- Update
  patches.suse/hfsplus-fix-KMSAN-uninit-value-issue-in-__hfsplus_ext_cache_extent.patch
  (git-fixes CVE-2025-40244 bsc#1255033).
- Update
  patches.suse/hfsplus-fix-KMSAN-uninit-value-issue-in-hfsplus_delete_cat.patch
  (git-fixes CVE-2025-40351 bsc#1255281).
- Update
  patches.suse/hwrng-virtio-Fix-race-on-data_avail-and-actual-.patch
  (bsc#1012628 CVE-2023-53998 bsc#1255578).
- Update
  patches.suse/iavf-use-internal-state-to-free-traffic-IRQs.patch
  (bsc#1012628 CVE-2023-53850 bsc#1254677).
- Update
  patches.suse/ice-prevent-NULL-pointer-deref-during-reload.patch
  (bsc#1012628 CVE-2023-54037 bsc#1255557).
- Update
  patches.suse/igb-clean-up-in-all-error-paths-when-enabling-SR-IOV.patch
  (jsc#PED-4866 CVE-2023-54070 bsc#1256364).
- Update
  patches.suse/igc-Fix-Kernel-Panic-during-ndo_tx_timeout-call.patch
  (bsc#1012628 CVE-2023-54166 bsc#1256074).
- Update
  patches.suse/iio-accel-bmc150-Fix-irq-assumption-regression.patch
  (stable-fixes CVE-2025-68330 bsc#1255493).
- Update
  patches.suse/iio-adc-ina2xx-avoid-NULL-pointer-dereference-.patch
  (bsc#1012628 CVE-2023-53834 bsc#1254660).
- Update
  patches.suse/iio-core-Prevent-invalid-memory-access-when-th.patch
  (bsc#1012628 CVE-2023-54027 bsc#1255579).
- Update
  patches.suse/ima-Handle-error-code-returned-by-ima_filter_rule_ma.patch
  (git-fixes CVE-2025-68740 bsc#1255812).
- Update
  patches.suse/ima-don-t-clear-IMA_DIGSIG-flag-when-setting-or-remo.patch
  (stable-fixes CVE-2025-68183 bsc#1255251).
- Update
  patches.suse/io_uring-net-don-t-overflow-multishot-recv.patch
  (bsc#1215211 CVE-2023-54030 bsc#1255691).
- Update
  patches.suse/iomap-Fix-possible-overflow-condition-in-iomap_write_delalloc_scan.patch
  (jsc#PED-5453 CVE-2023-54285 bsc#1255807).
- Update
  patches.suse/iommufd-IOMMUFD_DESTROY-should-not-increase-the.patch
  (bsc#1012628 CVE-2023-53795 bsc#1254737).
- Update
  patches.suse/iommufd-Set-end-correctly-when-doing-batch-carr.patch
  (bsc#1012628 CVE-2023-54060 bsc#1256379).
- Update
  patches.suse/ionic-remove-WARN_ON-to-prevent-panic_on_warn.patch
  (bsc#1012628 CVE-2023-53994 bsc#1255570).
- Update
  patches.suse/ip6_vti-fix-slab-use-after-free-in-decode_sess.patch
  (bsc#1012628 CVE-2023-53821 bsc#1254669).
- Update
  patches.suse/ipmi-ssif-Fix-a-memory-leak-when-scanning-for-an-ada.patch
  (git-fixes CVE-2023-54064 bsc#1256375).
- Update
  patches.suse/irqchip-mchp-eic-Fix-error-code-in-mchp_eic_domain_a.patch
  (git-fixes CVE-2025-68766 bsc#1255932).
- Update
  patches.suse/isdn-mISDN-hfcsusb-fix-memory-leak-in-hfcsusb_probe.patch
  (git-fixes CVE-2025-68734 bsc#1255538).
- Update
  patches.suse/jfs-Verify-inode-mode-when-loading-from-disk.patch
  (git-fixes CVE-2025-40312 bsc#1255046).
- Update
  patches.suse/jfs-fix-uninitialized-waitqueue-in-transaction-manager.patch
  (git-fixes CVE-2025-68168 bsc#1255100).
- Update
  patches.suse/kcm-Fix-error-handling-for-SOCK_DGRAM-in-kcm_sendmsg.patch
  (bsc#1220419 CVE-2023-53825 bsc#1254707).
- Update
  patches.suse/kcm-Fix-memory-leak-in-error-path-of-kcm_sendmsg.patch
  (bsc#1220419 CVE-2023-54112 bsc#1256354).
- Update
  patches.suse/keys-Fix-linking-a-duplicate-key-to-a-keyring-s.patch
  (bsc#1012628 CVE-2023-54170 bsc#1256045).
- Update
  patches.suse/maple_tree-fix-potential-out-of-bounds-access-i.patch
  (bsc#1012628 CVE-2023-54135 bsc#1256107).
- Update
  patches.suse/md-fix-warning-for-holder-mismatch-from-export_rdev.patch
  (git-fixes CVE-2023-53791 bsc#1254742).
- Update
  patches.suse/md-raid5-cache-fix-a-deadlock-in-r5l_exit_log-a705.patch
  (jsc#PED-7542 CVE-2023-53848 bsc#1254753).
- Update
  patches.suse/media-af9005-Fix-null-ptr-deref-in-af9005_i2c_xfer.patch
  (git-fixes CVE-2023-54314 bsc#1255776).
- Update
  patches.suse/media-anysee-fix-null-ptr-deref-in-anysee_master_xfe.patch
  (git-fixes CVE-2023-54093 bsc#1256273).
- Update
  patches.suse/media-dvb-usb-m920x-Fix-a-potential-memory-leak-in-m.patch
  (git-fixes CVE-2023-54266 bsc#1255875).
- Update
  patches.suse/media-dvb-usb-v2-gl861-Fix-null-ptr-deref-in-gl861_i.patch
  (git-fixes CVE-2023-54066 bsc#1256373).
- Update
  patches.suse/media-imon-make-send_packet-more-robust.patch
  (stable-fixes CVE-2025-68194 bsc#1255325).
- Update
  patches.suse/media-mediatek-vcodec-fix-resource-leaks-in-vdec_msg.patch
  (git-fixes CVE-2023-54143 bsc#1256096).
- Update
  patches.suse/media-tuners-qt1010-replace-BUG_ON-with-a-regular-er.patch
  (git-fixes CVE-2023-54282 bsc#1255810).
- Update
  patches.suse/media-v4l2-core-Fix-a-potential-resource-leak-in-v4l.patch
  (git-fixes CVE-2023-54183 bsc#1255990).
- Update
  patches.suse/misc-fastrpc-Fix-dma_buf-object-leak-in-fastrpc_map_.patch
  (git-fixes CVE-2025-68252 bsc#1255197).
- Update
  patches.suse/misc-pci_endpoint_test-Free-IRQs-before-removin.patch
  (bsc#1012628 CVE-2023-54326 bsc#1255758).
- Update
  patches.suse/mm-secretmem-fix-use-after-free-race-in-fault-handle.patch
  (git-fixes CVE-2025-40272 bsc#1254832).
- Update
  patches.suse/mmc-sunplus-fix-return-value-check-of-mmc_add_.patch
  (bsc#1012628 CVE-2023-54204 bsc#1255967).
- Update
  patches.suse/most-usb-Fix-use-after-free-in-hdm_disconnect.patch
  (git-fixes CVE-2025-40223 bsc#1254957).
- Update
  patches.suse/most-usb-fix-double-free-on-late-probe-failure.patch
  (git-fixes CVE-2025-68290 bsc#1255154).
- Update
  patches.suse/most-usb-hdm_probe-Fix-calling-put_device-before-dev.patch
  (git-fixes CVE-2025-68249 bsc#1255233).
- Update
  patches.suse/mt76-mt7615-Fix-memory-leak-in-mt7615_mcu_wtbl_sta_a.patch
  (git-fixes CVE-2025-68765 bsc#1255931).
- Update
  patches.suse/mt76-mt7921-don-t-assume-adequate-headroom-for-SDIO-.patch
  (git-fixes CVE-2023-53785 bsc#1254918).
- Update
  patches.suse/mtd-rawnand-cadence-fix-DMA-device-NULL-pointer-dere.patch
  (git-fixes CVE-2025-68238 bsc#1255202).
- Update
  patches.suse/mtd-rawnand-fsl_upm-Fix-an-off-by-one-test-in-.patch
  (bsc#1012628 CVE-2023-54104 bsc#1256145).
- Update
  patches.suse/mtdchar-fix-integer-overflow-in-read-write-ioctls.patch
  (git-fixes CVE-2025-68237 bsc#1255203).
- Update
  patches.suse/net-core-remove-unnecessary-frame_sz-check-in-.patch
  (bsc#1012628 CVE-2023-54155 bsc#1256083).
- Update
  patches.suse/net-deal-with-integer-overflows-in-kmalloc_reserve.patch
  (bsc#1215146 CVE-2023-42752 CVE-2023-53752 bsc#1254613).
- Update
  patches.suse/net-do-not-allow-gso_size-to-be-set-to-GSO_BY_.patch
  (bsc#1012628 CVE-2023-54051 bsc#1256394).
- Update
  patches.suse/net-dsa-avoid-suspicious-RCU-usage-for-synced-V.patch
  (bsc#1012628 CVE-2023-54149 bsc#1256085).
- Update
  patches.suse/net-dsa-ocelot-call-dsa_tag_8021q_unregister-u.patch
  (bsc#1012628 CVE-2023-53855 bsc#1254688).
- Update
  patches.suse/net-ethernet-mtk_eth_soc-fix-possible-NULL-pointer-d.patch
  (git-fixes CVE-2023-54240 bsc#1255918).
- Update
  patches.suse/net-hns3-fix-deadlock-issue-when-externel_lb-a.patch
  (bsc#1012628 CVE-2023-54000 bsc#1255564).
- Update
  patches.suse/net-ipa-only-reset-hashed-tables-when-supported.patch
  (bsc#1012628 CVE-2023-54225 bsc#1256234).
- Update
  patches.suse/net-ipv4-fix-one-memleak-in-__inet_del_ifa.patch
  (bsc#1220419 CVE-2023-53995 bsc#1255616).
- Update
  patches.suse/net-mlx5-fix-potential-memory-leak-in-mlx5e_in.patch
  (bsc#1012628 CVE-2023-54106 bsc#1256358).
- Update
  patches.suse/net-mlx5e-Move-representor-neigh-cleanup-to-pr.patch
  (bsc#1012628 CVE-2023-54148 bsc#1256084).
- Update
  patches.suse/net-mlx5e-TC-Fix-internal-port-memory-leak.patch
  (bsc#1012628 CVE-2023-53999 bsc#1255621).
- Update
  patches.suse/net-mlx5e-fix-memory-leak-in-mlx5e_ptp_open.patch
  (bsc#1012628 CVE-2023-54169 bsc#1256050).
- Update
  patches.suse/net-mlx5e-xsk-Fix-invalid-buffer-access-for-le.patch
  (bsc#1012628 CVE-2023-54223 bsc#1256233).
- Update
  patches.suse/net-openvswitch-reject-negative-ifindex.patch
  (bsc#1012628 CVE-2023-53843 bsc#1254705).
- Update
  patches.suse/net-prevent-skb-corruption-on-frag-list-segment.patch
  (bsc#1012628 CVE-2023-54094 bsc#1256292).
- Update
  patches.suse/net-read-sk-sk_family-once-in-sk_mc_loop.patch
  (bsc#1220419 CVE-2023-53831 bsc#1254701).
- Update
  patches.suse/net-sched-taprio-Limit-TCA_TAPRIO_ATTR_SCHED_C.patch
  (bsc#1012628 CVE-2023-54251 bsc#1255888).
- Update
  patches.suse/net-smc-use-smc_lgr_list.lock-to-protect-smc_lgr_lis.patch
  (git-fixes CVE-2023-54318 bsc#1255772).
- Update
  patches.suse/net-usb-qmi_wwan-initialize-MAC-header-offset-in-qmi.patch
  (git-fixes CVE-2025-68192 bsc#1255246).
- Update
  patches.suse/netfilter-nf_tables-fix-underflow-in-chain-refe.patch
  (bsc#1012628 CVE-2023-54035 bsc#1255563).
- Update
  patches.suse/netlink-do-not-hard-code-device-address-lenth-i.patch
  (bsc#1012628 CVE-2023-53863 bsc#1254657).
- Update
  patches.suse/nfp-clean-mc-addresses-in-application-firmware-.patch
  (bsc#1012628 CVE-2023-54133 bsc#1256104).
- Update
  patches.suse/nfs4_setup_readdir-insufficient-locking-for-d_parent-d_inode-dereferencing.patch
  (git-fixes CVE-2025-68185 bsc#1255135).
- Update
  patches.suse/nfsd-move-init-of-percpu-reply_cache_stats-coun.patch
  (bsc#1012628 CVE-2023-54276 bsc#1255907).
- Update
  patches.suse/nilfs2-fix-WARNING-in-mark_buffer_dirty-due-to.patch
  (bsc#1012628 CVE-2023-54140 bsc#1256093).
- Update
  patches.suse/nouveau-firmware-Add-missing-kfree-of-nvkm_falcon_fw.patch
  (git-fixes CVE-2025-68235 bsc#1255209).
- Update
  patches.suse/nvme-core-fix-memory-leak-in-dhchap_ctrl_secret.patch
  (bsc#1012628 CVE-2023-53792 bsc#1254743).
- Update
  patches.suse/nvme-core-fix-memory-leak-in-dhchap_secret_stor.patch
  (bsc#1012628 CVE-2023-53852 bsc#1254653).
- Update
  patches.suse/nvme-fc-use-lock-accessing-port_state-and-rport-stat.patch
  (bsc#1245193 bsc#1247500 CVE-2025-40342 bsc#1255274).
- Update
  patches.suse/nvme-multipath-fix-lockdep-WARN-due-to-partition-sca.patch
  (git-fixes bsc#1233640 CVE-2024-53093 CVE-2025-68218
  bsc#1255245).
- Update
  patches.suse/nvmet-fc-avoid-scheduling-association-deletion-twice.patch
  (bsc#1245193 bsc#1247500 CVE-2025-40343 bsc#1255276).
- Update
  patches.suse/of-overlay-Call-of_changeset_init-early.patch
  (git-fixes CVE-2023-53856 bsc#1254661).
- Update
  patches.suse/of-unittest-fix-null-pointer-dereferencing-in-of_uni.patch
  (git-fixes CVE-2023-54178 bsc#1255992).
- Update
  patches.suse/opp-Fix-use-after-free-in-lazy_opp_tables-after.patch
  (bsc#1012628 CVE-2023-54026 bsc#1255549).
- Update
  patches.suse/orangefs-fix-xattr-related-buffer-overflow.patch
  (git-fixes CVE-2025-40306 bsc#1255062).
- Update
  patches.suse/ovl-fix-null-pointer-dereference-in-ovl_get_acl.patch
  (bsc#1012628 CVE-2023-54313 bsc#1255775).
- Update
  patches.suse/pcmcia-rsrc_nonstatic-Fix-memory-leak-in-nonst.patch
  (bsc#1012628 CVE-2023-54115 bsc#1256121).
- Update patches.suse/perf-tool-x86-Fix-perf_env-memory-leak.patch
  (bsc#1012628 CVE-2023-53793 bsc#1254739).
- Update
  patches.suse/phy-tegra-xusb-Clear-the-driver-reference-in-us.patch
  (bsc#1012628 CVE-2023-54083 bsc#1256368).
- Update
  patches.suse/pinctrl-at91-pio4-check-return-value-of-devm_ka.patch
  (bsc#1012628 CVE-2023-54319 bsc#1255760).
- Update
  patches.suse/pinctrl-freescale-Fix-a-memory-out-of-bounds-wh.patch
  (bsc#1012628 CVE-2023-53750 bsc#1254611).
- Update
  patches.suse/pinctrl-s32cc-fix-uninitialized-memory-in-s32_pinctr.patch
  (git-fixes CVE-2025-68222 bsc#1255218).
- Update
  patches.suse/platform-x86-intel-punit_ipc-fix-memory-corruption.patch
  (git-fixes CVE-2025-68303 bsc#1255122).
- Update
  patches.suse/posix-timers-Prevent-RT-livelock-in-itimer_dele.patch
  (bsc#1012628 CVE-2023-53815 bsc#1254715).
- Update patches.suse/powerpc-64s-Fix-VAS-mm-use-after-free.patch
  (bsc#1012628 CVE-2023-54042 bsc#1255702).
- Update
  patches.suse/powerpc-iommu-Fix-notifiers-being-shared-by-PCI-and-.patch
  (bsc#1065729 CVE-2023-54095 bsc#1256271).
- Update
  patches.suse/powerpc-powernv-sriov-perform-null-check-on-iov.patch
  (bsc#1012628 CVE-2023-54315 bsc#1255769).
- Update
  patches.suse/powerpc-pseries-Rework-lppaca_shared_proc-to-avoid-D.patch
  (bsc#1194869 CVE-2023-54267 bsc#1255899).
- Update
  patches.suse/powerpc-pseries-fix-possible-memory-leak-in-ibmebus_.patch
  (bsc#1194869 CVE-2023-54017 bsc#1255605).
- Update patches.suse/pstore-ram-Add-check-for-kstrdup.patch
  (bsc#1012628 CVE-2023-54189 bsc#1255978).
- Update patches.suse/quota-fix-warning-in-dqgrab.patch
  (bsc#1012628 CVE-2023-54177 bsc#1255993).
- Update patches.suse/rcu-dump-vmalloc-memory-info-safely.patch
  (git-fixes CVE-2023-54113 bsc#1256351).
- Update
  patches.suse/rcuscale-Move-rcu_scale_writer-schedule_timeout_unin.patch
  (git-fixes CVE-2023-54246 bsc#1255915).
- Update
  patches.suse/refscale-Fix-uninitalized-use-of-wait_queue_head_t.patch
  (git-fixes CVE-2023-54316 bsc#1255770).
- Update
  patches.suse/regmap-irq-Fix-out-of-bounds-access-when-alloca.patch
  (bsc#1012628 CVE-2023-53768 bsc#1254599).
- Update
  patches.suse/regmap-slimbus-fix-bus_context-pointer-in-regmap-ini.patch
  (git-fixes CVE-2025-40317 bsc#1254796).
- Update
  patches.suse/regulator-core-Protect-regulator_supply_alias_list-w.patch
  (git-fixes CVE-2025-68354 bsc#1255553).
- Update
  patches.suse/regulator-da9063-fix-null-pointer-deref-with-pa.patch
  (bsc#1012628 CVE-2023-53787 bsc#1254750).
- Update patches.suse/rpmsg-glink-Add-check-for-kstrdup.patch
  (git-fixes CVE-2023-54049 bsc#1256396).
- Update
  patches.suse/s390-dcssblk-fix-kernel-crash-with-list_add-corruption.patch
  (git-fixes bsc#1215344 CVE-2023-54117 bsc#1256348).
- Update
  patches.suse/s390-vmem-split-pages-when-debug-pagealloc-is-.patch
  (bsc#1012628 CVE-2023-54278 bsc#1255911).
- Update
  patches.suse/samples-bpf-Fix-buffer-overflow-in-tcp_basertt.patch
  (bsc#1012628 CVE-2023-54312 bsc#1255774).
- Update
  patches.suse/sched-psi-use-kernfs-polling-functions-for-PSI-.patch
  (bsc#1012628 CVE-2023-54019 bsc#1255636).
- Update
  patches.suse/scsi-qedf-Fix-NULL-dereference-in-error-handlin.patch
  (bsc#1012628 CVE-2023-54289 bsc#1255806).
- Update
  patches.suse/scsi-qla2xxx-Array-index-may-go-out-of-bound.patch
  (bsc#1012628 CVE-2023-54179 bsc#1255994).
- Update
  patches.suse/scsi-qla2xxx-Check-valid-rport-returned-by-fc_b.patch
  (bsc#1012628 CVE-2023-54014 bsc#1256300).
- Update
  patches.suse/scsi-target-core-Fix-target_cmd_counter-leak.patch
  (bsc#1214847 CVE-2023-54154 bsc#1256082).
- Update
  patches.suse/serial-8250-Fix-oops-for-port-pm-on-uart_chang.patch
  (bsc#1012628 CVE-2023-54220 bsc#1255949).
- Update patches.suse/serial-sprd-Fix-DMA-buffer-leak-issue.patch
  (git-fixes CVE-2023-54136 bsc#1256099).
- Update
  patches.suse/sfc-fix-crash-when-reading-stats-while-NIC-is-r.patch
  (bsc#1012628 CVE-2023-54156 bsc#1255704).
- Update
  patches.suse/sh-dma-Fix-DMA-channel-offset-calculation.patch
  (bsc#1012628 CVE-2023-54255 bsc#1255884).
- Update patches.suse/smb-client-fix-missed-ses-refcounting.patch
  (bsc#1012628 CVE-2023-54076 bsc#1256335).
- Update
  patches.suse/smb-client-fix-potential-cfid-UAF-in-smb2_query_info_compound.patch
  (bsc#1248886 CVE-2025-40320 bsc#1254793).
- Update patches.suse/soundwire-fix-enumeration-completion.patch
  (bsc#1012628 CVE-2023-54096 bsc#1256178).
- Update patches.suse/spi-tegra210-quad-Fix-timeout-handling.patch
  (bsc#1253155 CVE-2025-68746 bsc#1255722).
- Update
  patches.suse/staging-r8712-Fix-memory-leak-in-_r8712_init_xm.patch
  (bsc#1012628 CVE-2023-54001 bsc#1255628).
- Update
  patches.suse/thermal-of-fix-double-free-on-unregistration.patch
  (bsc#1012628 CVE-2023-53997 bsc#1255632).
- Update
  patches.suse/tpm-tpm_vtpm_proxy-fix-a-race-condition-in-dev-.patch
  (bsc#1012628 CVE-2023-54309 bsc#1255780).
- Update
  patches.suse/tracing-Fix-memory-leak-of-iter-temp-when-readi.patch
  (bsc#1012628 CVE-2023-54171 bsc#1256034).
- Update
  patches.suse/tracing-Fix-warning-in-trace_buffered_event_dis.patch
  (bsc#1012628 CVE-2023-54211 bsc#1255843).
- Update
  patches.suse/tty-serial-samsung_tty-Fix-a-memory-leak-in-s3c.patch
  (bsc#1012628 CVE-2023-53858 bsc#1254704).
- Update
  patches.suse/usb-cdns3-gadget-Use-after-free-during-failed-initia.patch
  (stable-fixes CVE-2025-40314 bsc#1255072).
- Update
  patches.suse/usb-dwc3-Fix-race-condition-between-concurrent-dwc3_.patch
  (git-fixes CVE-2025-68287 bsc#1255152).
- Update
  patches.suse/usb-gadget-f_eem-Fix-memory-leak-in-eem_unwrap.patch
  (git-fixes CVE-2025-68289 bsc#1255155).
- Update
  patches.suse/usb-gadget-f_fs-Fix-epfile-null-pointer-access-after.patch
  (stable-fixes CVE-2025-40315 bsc#1255083).
- Update
  patches.suse/usb-potential-integer-overflow-in-usbg_make_tpg.patch
  (stable-fixes CVE-2025-68750 bsc#1255814).
- Update
  patches.suse/usb-storage-alauda-Fix-uninit-value-in-alauda_.patch
  (bsc#1012628 CVE-2023-53847 bsc#1254698).
- Update
  patches.suse/usb-storage-sddr55-Reject-out-of-bound-new_pba.patch
  (stable-fixes CVE-2025-40345 bsc#1255279).
- Update
  patches.suse/usb-typec-bus-verify-partner-exists-in-typec_altmode.patch
  (git-fixes CVE-2023-54299 bsc#1255789).
- Update
  patches.suse/usb-uas-fix-urb-unmapping-issue-when-the-uas-device-.patch
  (git-fixes CVE-2025-68331 bsc#1255495).
- Update patches.suse/usbnet-Prevents-free-active-kevent.patch
  (git-fixes CVE-2025-68312 bsc#1255171).
- Update
  patches.suse/vdpa-Add-queue-index-attr-to-vdpa_nl_policy-fo.patch
  (bsc#1012628 CVE-2023-54031 bsc#1255583).
- Update patches.suse/vduse-fix-NULL-pointer-dereference.patch
  (bsc#1012628 CVE-2023-54291 bsc#1255798).
- Update
  patches.suse/vfio-type1-fix-cap_migration-information-leak
  (jsc#PED-7779 jsc#PED-7780 CVE-2023-54137 bsc#1256100).
- Update
  patches.suse/virtio-vdpa-Fix-cpumask-memory-leak-in-virtio_.patch
  (bsc#1012628 CVE-2023-54215 bsc#1255957).
- Update
  patches.suse/virtio_pmem-add-the-missing-REQ_OP_WRITE-for-flush-b.patch
  (git-fixes CVE-2023-54089 bsc#1256268).
- Update
  patches.suse/virtio_vdpa-build-affinity-masks-conditionally.patch
  (git-fixes CVE-2023-54008 bsc#1255630).
- Update
  patches.suse/wifi-ath11k-Add-missing-hw_ops-get_ring_selecto.patch
  (bsc#1012628 CVE-2023-54141 bsc#1256094).
- Update patches.suse/wifi-ath11k-fix-peer-HE-MCS-assignment.patch
  (git-fixes CVE-2025-68380 bsc#1255580).
- Update
  patches.suse/wifi-ath11k-fix-registration-of-6Ghz-only-phy-w.patch
  (bsc#1012628 CVE-2023-54229 bsc#1255924).
- Update
  patches.suse/wifi-ath12k-Fix-memory-leak-in-rx_desc-and-tx_desc.patch
  (git-fixes CVE-2023-54016 bsc#1256279).
- Update
  patches.suse/wifi-ath9k-avoid-referencing-uninit-memory-in-a.patch
  (bsc#1012628 CVE-2023-54300 bsc#1255790).
- Update
  patches.suse/wifi-brcmfmac-fix-crash-while-sending-Action-Frames-.patch
  (git-fixes CVE-2025-40321 bsc#1254795).
- Update
  patches.suse/wifi-cfg80211-ocb-don-t-leave-if-not-joined.patch
  (git-fixes CVE-2023-53992 bsc#1256058).
- Update
  patches.suse/wifi-mt76-mt7921-fix-skb-leak-by-txs-missing-i.patch
  (bsc#1012628 CVE-2023-54052 bsc#1256387).
- Update
  patches.suse/wifi-mwifiex-fix-memory-leak-in-mwifiex_histogram_re.patch
  (git-fixes CVE-2023-53808 bsc#1254723).
- Update
  patches.suse/wifi-rsi-Do-not-configure-WoWlan-in-shutdown-ho.patch
  (bsc#1012628 CVE-2023-54025 bsc#1255558).
- Update
  patches.suse/wifi-rtl818x-Fix-potential-memory-leaks-in-rtl8180_i.patch
  (git-fixes CVE-2025-68759 bsc#1255934).
- Update
  patches.suse/wifi-rtl818x-rtl8187-Fix-potential-buffer-underflow-.patch
  (git-fixes CVE-2025-68362 bsc#1255611).
- Update patches.suse/x86-CPU-AMD-Add-RDSEED-fix-for-Zen5.patch
  (git-fixes CVE-2025-68313 bsc#1255415).
- Update
  patches.suse/x86-CPU-AMD-Add-missing-terminator-for-zen5_rdseed_microco.patch
  (git-fixes CVE-2025-68195 bsc#1255259).
- Update
  patches.suse/x86-hyperv-Disable-IBT-when-hypercall-page-lac.patch
  (bsc#1012628 CVE-2023-54172 bsc#1256033).
- Update
  patches.suse/x86-sev-Make-enc_dec_hypercall-accept-a-size-instead-of-npages
  (bsc#1214635 CVE-2023-53996 bsc#1255618).
- Update patches.suse/xen-speed-up-grant-table-reclaim.patch
  (bsc#1012628 CVE-2023-54081 bsc#1256361).
- Update
  patches.suse/xfrm-also-call-xfrm_state_delete_tunnel-at-destroy-time-fo.patch
  (CVE-2025-40215 bsc#1254959 CVE-2025-40256 bsc#1254851).
- commit c2db288</changelog>
  <changelog author="joao.povoas@suse.com" date="1768219201">- Update
  patches.suse/Bluetooth-MGMT-Fix-OOB-access-in-parse_adv_monitor_p.patch
  (git-fixes CVE-2025-40294 bsc#1255181).
- Update
  patches.suse/Bluetooth-MGMT-fix-crash-in-set_mesh_sync-and-set_me.patch
  (git-fixes CVE-2025-40213 bsc#1253674).
- Update
  patches.suse/Bluetooth-btusb-mediatek-Avoid-btusb_mtk_claim_iso_i.patch
  (git-fixes CVE-2025-68298 bsc#1255124).
- Update
  patches.suse/Bluetooth-btusb-mediatek-Fix-kernel-crash-when-relea.patch
  (git-fixes CVE-2025-68306 bsc#1255145).
- Update
  patches.suse/accel-ivpu-Fix-race-condition-when-unbinding-BOs.patch
  (git-fixes CVE-2025-68749 bsc#1255724).
- Update
  patches.suse/drm-amd-display-increase-max-link-count-and-fix-link.patch
  (stable-fixes CVE-2025-40354 bsc#1255316).
- Update
  patches.suse/drm-amdgpu-atom-Check-kcalloc-for-WS-buffer-in-amdgp.patch
  (stable-fixes CVE-2025-68190 bsc#1255131).
- Update
  patches.suse/drm-amdgpu-fix-gpu-page-fault-after-hibernation-on-P.patch
  (stable-fixes CVE-2025-68230 bsc#1255134).
- Update
  patches.suse/drm-amdgpu-fix-nullptr-err-of-vm_handle_moved.patch
  (stable-fixes CVE-2025-40339 bsc#1255428).
- Update patches.suse/drm-amdgpu-remove-two-invalid-BUG_ON-s.patch
  (stable-fixes CVE-2025-68201 bsc#1255136).
- Update
  patches.suse/drm-amdkfd-Fix-mmap-write-lock-not-release.patch
  (bsc#1243112 CVE-2025-40332 bsc#1255116).
- Update
  patches.suse/drm-mediatek-Disable-AFBC-support-on-Mediatek-DRM-dr.patch
  (git-fixes CVE-2025-68184 bsc#1255220).
- Update
  patches.suse/drm-panthor-Fix-UAF-on-kernel-BO-VA-nodes.patch
  (git-fixes CVE-2025-68747 bsc#1255723).
- Update
  patches.suse/drm-panthor-Fix-kernel-panic-on-partial-unmap-of-a-G.patch
  (git-fixes CVE-2025-40225 bsc#1254827).
- Update
  patches.suse/drm-panthor-Flush-shmem-writes-before-mapping-buffer.patch
  (git-fixes CVE-2025-40276 bsc#1254824).
- Update
  patches.suse/drm-radeon-Do-not-kfree-devres-managed-rdev.patch
  (git-fixes CVE-2025-68170 bsc#1255256).
- Update patches.suse/drm-radeon-Remove-calls-to-drm_put_dev.patch
  (git-fixes CVE-2025-68181 bsc#1255247).
- Update
  patches.suse/drm-radeon-delete-radeon_fence_process-in-is_signale.patch
  (stable-fixes CVE-2025-68223 bsc#1255357).
- Update
  patches.suse/drm-sysfb-Do-not-dereference-NULL-pointer-in-plane-r.patch
  (git-fixes CVE-2025-40360 bsc#1255095).
- Update
  patches.suse/drm-xe-Fix-oops-in-xe_gem_fault-when-running-core_ho.patch
  (stable-fixes CVE-2025-40340 bsc#1254996).
- Update
  patches.suse/drm-xe-guc-Synchronize-Dead-CT-worker-with-unbind.patch
  (git-fixes CVE-2025-68207 bsc#1255234).
- Update
  patches.suse/media-videobuf2-forbid-remove_bufs-when-legacy-filei.patch
  (git-fixes CVE-2025-40302 bsc#1255196).
- Update
  patches.suse/perf-x86-intel-Fix-KASAN-global-out-of-bounds-warning.patch
  (git-fixes CVE-2025-40359 bsc#1255087).
- Update
  patches.suse/x86-CPU-AMD-Add-missing-terminator-for-zen5_rdseed_m.patch
  (git-fixes CVE-2025-68195 bsc#1255259).
- commit 946dbf2</changelog>
  <changelog author="msuchanek@suse.de" date="1768219202">- powerpc/eeh: fix recursive pci_lock_rescan_remove locking in
  EEH event handling (bsc#1253262 ltc#216029).
- commit daa4104</changelog>
  <changelog author="mhocko@suse.com" date="1768219203">- supported.conf: mark ksmbd unsupported
  Based on discussion with Enzo Matsumiya it has tuned out that ksmbd
  module is unsupported but the supported.conf entry is incorrect. Fix
  that.
- commit c800e3f</changelog>
  <changelog author="tiwai@suse.de" date="1768219204">- usb: ohci-nxp: fix device leak on probe failure (git-fixes).
- usb: usb-storage: Maintain minimal modifications to the
  bcdDevice range (git-fixes).
- Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042
  quirk table (stable-fixes).
- drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state()
  (stable-fixes).
- ASoC: bcm: bcm63xx-pcm-whistler: Check return value of
  of_dma_configure() (git-fixes).
- i2c: designware: Disable SMBus interrupts to prevent storms
  from mis-configured firmware (stable-fixes).
- platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to
  VGBS DMI quirks (stable-fixes).
- pinctrl: single: Fix incorrect type for error return variable
  (git-fixes).
- i3c: fix refcount inconsistency in i3c_master_register
  (git-fixes).
- staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE
  parsing (stable-fixes).
- staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie()
  parser (stable-fixes).
- USB: serial: option: move Telit 0x10c7 composition in the
  right place (stable-fixes).
- USB: serial: option: add Telit Cinterion FE910C04 new
  compositions (stable-fixes).
- USB: serial: option: add Foxconn T99W760 (stable-fixes).
- USB: serial: ftdi_sio: match on interface number for jtag
  (stable-fixes).
- usb: usb-storage: No additional quirks need to be added to
  the EL-R12 optical drive (stable-fixes).
- usb: dwc2: fix hang during shutdown if set as peripheral
  (git-fixes).
- usb: xhci: limit run_graceperiod for only usb 3.0 devices
  (stable-fixes).
- usb: typec: ucsi: Handle incorrect num_connectors capability
  (stable-fixes).
- usbip: Fix locking bug in RT-enabled kernels (stable-fixes).
- serial: sprd: Return -EPROBE_DEFER when uart clock is not ready
  (stable-fixes).
- serial: add support of CPCI cards (stable-fixes).
- char: applicom: fix NULL pointer dereference in ac_ioctl
  (stable-fixes).
- iio: adc: ti_am335x_adc: Limit step_avg to valid range for
  gcc complains (stable-fixes).
- fbdev: gbefb: fix to use physical address instead of dma address
  (stable-fixes).
- via_wdt: fix critical boot hang due to unnamed resource
  allocation (stable-fixes).
- ipmi: Fix __scan_channels() failing to rescan channels
  (stable-fixes).
- ipmi: Fix the race between __scan_channels() and
  deliver_response() (stable-fixes).
- reset: fix BIT macro reference (stable-fixes).
- firmware: imx: scu-irq: Init workqueue before request mbox
  channel (stable-fixes).
- HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen
  (stable-fixes).
- mmc: sdhci-msm: Avoid early clock doubling during HS400
  transition (stable-fixes).
- ASoC: qcom: q6apm-dai: set flags to reflect correct operation
  of appl_ptr (git-fixes).
- media: amphion: Remove vpu_vb_is_codecconfig (git-fixes).
- media: verisilicon: Fix CPU stalls on G2 bus error (git-fixes).
- Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE
  (stable-fixes).
- Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV
  (stable-fixes).
- wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840
  tablet (stable-fixes).
- wifi: rtw88: Add USB ID 2001:3329 for D-Link AC13U rev. A1
  (stable-fixes).
- ACPI: property: Use ACPI functions in
  acpi_graph_get_next_endpoint() only (stable-fixes).
- ACPICA: Avoid walking the Namespace if start_node is NULL
  (stable-fixes).
- pinctrl: qcom: msm: Fix deadlock in pinmux configuration
  (stable-fixes).
- platform/x86: acer-wmi: Ignore backlight event (stable-fixes).
- platform/x86/amd: pmc: Add Lenovo Legion Go 2 to pmc quirk list
  (stable-fixes).
- platform/x86/amd/pmc: Add spurious_8042 to Xbox Ally
  (stable-fixes).
- platform/x86: huawei-wmi: add keys for HONOR models
  (stable-fixes).
- HID: elecom: Add support for ELECOM M-XT3URBK (018F)
  (stable-fixes).
- HID: hid-input: Extend Elan ignore battery quirk to USB
  (stable-fixes).
- HID: apple: Add SONiX AK870 PRO to non_apple_keyboards quirk
  list (stable-fixes).
- drm/vmwgfx: Use kref in vmw_bo_dirty (stable-fixes).
- spi: xilinx: increase number of retries before declaring stall
  (stable-fixes).
- spi: imx: keep dma request disabled before dma transfer setup
  (stable-fixes).
- ALSA: usb-audio: Add native DSD quirks for PureAudio DAC series
  (stable-fixes).
- Bluetooth: btrtl: Avoid loading the config file on security
  chips (stable-fixes).
- media: amphion: Make some vpu_v4l2 functions static
  (stable-fixes).
- usb: dwc2: disable platform lowlevel hw resources during
  shutdown (stable-fixes).
- media: amphion: Add a frame flush mode for decoder
  (stable-fixes).
- usb: ohci-nxp: Use helper function devm_clk_get_enabled()
  (stable-fixes).
- drm/tilcdc: request and mapp iomem with devres (stable-fixes).
- media: verisilicon: g2: Use common helpers to compute chroma
  and mv offsets (stable-fixes).
- media: verisilicon: Store chroma and motion vectors offset
  (stable-fixes).
- i3c: master: Inherit DMA masks and parameters from parent device
  (stable-fixes).
- commit bc3be49</changelog>
  <changelog author="tiwai@suse.de" date="1768219205">- pinctrl: single: Fix PIN_CONFIG_BIAS_DISABLE handling
  (stable-fixes).
- Refresh
  patches.suse/pinctrl-single-fix-bias-pull-up-down-handling-in-pin.patch.
- commit bc41b99</changelog>
  <changelog author="tiwai@suse.de" date="1768219206">- drm/amdgpu: Forward VMID reservation errors (git-fixes).
- commit a7344a2</changelog>
  <changelog author="tiwai@suse.de" date="1768219207">- virtio_console: fix order of fields cols and rows
  (stable-fixes).
- commit 0d412d7</changelog>
  <changelog author="tiwai@suse.de" date="1768219208">- drm/sched: Fix race in drm_sched_entity_select_rq() (git-fixes).
- commit d597802</changelog>
  <changelog author="tiwai@suse.de" date="1768219209">- Move out-of-tree patches into the right section
- commit 314797b</changelog>
  <changelog author="petr.pavlu@suse.com" date="1768219210">- tracing: Fix access to trace_event_file (bsc#1254373).
- commit 768b257</changelog>
  <changelog author="dsterba@suse.com" date="1768219211">- bnxt_en: Fix null pointer dereference in bnxt_bs_trace_check_wrap() (CVE-2025-68197 bsc#1255242)
- commit 85b99e2</changelog>
  <changelog author="rgoldwyn@suse.com" date="1768219212">- fuse: fix livelock in synchronous file put from fuseblk workers (CVE-2025-40220 bsc#1254520).
- commit 46a797f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1768219213">- mlx5: Fix default values in create CQ (CVE-2025-68209
  bsc#1255230).
- commit dce9b13</changelog>
  <changelog author="hoyeon.lee@suse.com" date="1768305600">- bpf: Improve program stats run-time calculation (CVE-2025-68742
  bsc#1255707).
- commit 4ed738f</changelog>
  <changelog author="hoyeon.lee@suse.com" date="1768305601">- bpf: Fix invalid prog-&gt;stats access when update_effective_progs
  fails (CVE-2025-68742 bsc#1255707).
- commit 53d4b3c</changelog>
  <changelog author="tiwai@suse.de" date="1768305602">- x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix
  Halo (bsc#1256528).
- x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev
  (bsc#1256528).
- x86/microcode/AMD: Add more known models to entry sign checking
  (bsc#1256528).
- x86/microcode/AMD: Limit Entrysign signature checking to known
  generations (bsc#1256528).
- x86/microcode: Fix Entrysign revision check for Zen1/Naples
  (bsc#1256528).
- x86/microcode/AMD: Add TSA microcode SHAs (bsc#1256528).
- x86/microcode/AMD: Use sha256() instead of init/update/final
  (bsc#1256528).
- x86/microcode/AMD: Clean the cache if update did not load
  microcode (bsc#1256528).
- x86/microcode/AMD: Extend the SHA check to Zen5, block
  loading of any unreleased standalone Zen5 microcode patches
  (bsc#1256528).
- x86/microcode/AMD: Fix __apply_microcode_amd()'s return value
  (bsc#1256528).
- x86/microcode/AMD: Add some forgotten models to the SHA check
  (bsc#1256528).
- x86/microcode/AMD: Load only SHA256-checksummed patches
  (bsc#1256528).
- commit ed14359</changelog>
  <changelog author="tiwai@suse.de" date="1768305603">- x86/microcode/AMD: Select which microcode patch to load
  (bsc#1256528).
- Refresh
  patches.suse/x86-microcode-AMD-Handle-the-case-of-no-BIOS-microcode.patch.
- commit 3b809fe</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1768305604">- mlx5: Fix default values in create CQ (CVE-2025-68209
  bsc#1255230).
- commit e7dee05</changelog>
  <changelog author="jack@suse.cz" date="1768305605">- ext4: use optimized mballoc scanning regardless of inode format
  (bsc#1254378).
- commit aa95fec</changelog>
</package>
<package pkgid="abf75e0f7160100bbe90709e6830c7934f361ed43d7c542d125e6fe4ac02609e" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.53.28.1"/>
  <changelog author="joao.povoas@suse.com" date="1768219200">- Update
  patches.suse/1260-drm-amdkfd-Add-missing-gfx11-MQD-manager-callbacks.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-54261
  bsc#1255879).
- Update
  patches.suse/ACPI-video-Fix-use-after-free-in-acpi_video_switch_b.patch
  (git-fixes CVE-2025-40211 bsc#1254126).
- Update
  patches.suse/ALSA-dice-fix-buffer-overflow-in-detect_stream_forma.patch
  (git-fixes CVE-2025-68346 bsc#1255603).
- Update
  patches.suse/ALSA-firewire-motu-add-bounds-check-in-put_user-loop.patch
  (git-fixes CVE-2025-68753 bsc#1256238).
- Update
  patches.suse/ALSA-firewire-motu-fix-buffer-overflow-in-hwdep-read.patch
  (git-fixes CVE-2025-68347 bsc#1255706).
- Update
  patches.suse/ALSA-hda-cs35l41-Fix-NULL-pointer-dereference-in-cs3-c34b04c.patch
  (git-fixes CVE-2025-68345 bsc#1255601).
- Update
  patches.suse/ALSA-pcm-Fix-potential-data-race-at-PCM-memory-.patch
  (bsc#1012628 CVE-2023-54072 bsc#1256291).
- Update
  patches.suse/ALSA-usb-audio-Fix-NULL-pointer-dereference-in-snd_u.patch
  (git-fixes CVE-2025-40275 bsc#1254829).
- Update
  patches.suse/ALSA-usb-audio-Fix-potential-memory-leaks-at-error-p.patch
  (jsc#PED-6045 jsc#PED-6036 jsc#PED-6104 jsc#PED-6114
  jsc#PED-6067 jsc#PED-6123 CVE-2023-54022 bsc#1255545).
- Update
  patches.suse/ALSA-usb-audio-Fix-potential-overflow-of-PCM-transfe.patch
  (stable-fixes CVE-2025-40269 bsc#1255035).
- Update
  patches.suse/ASoC-codecs-wcd-mbhc-v2-fix-resource-leaks-on-c.patch
  (bsc#1012628 CVE-2023-53842 bsc#1254690).
- Update
  patches.suse/Bluetooth-6lowpan-reset-link-local-header-on-ipv6-re.patch
  (git-fixes CVE-2025-40282 bsc#1254850).
- Update
  patches.suse/Bluetooth-ISO-fix-iso_conn-related-locking-and-.patch
  (bsc#1012628 CVE-2023-54164 bsc#1256071).
- Update
  patches.suse/Bluetooth-MGMT-cancel-mesh-send-timer-when-hdev-remo.patch
  (git-fixes CVE-2025-40284 bsc#1254860).
- Update patches.suse/Bluetooth-SCO-Fix-UAF-on-sco_conn_free.patch
  (stable-fixes CVE-2025-40309 bsc#1255065).
- Update
  patches.suse/Bluetooth-bcsp-receive-data-only-if-registered.patch
  (stable-fixes CVE-2025-40308 bsc#1255064).
- Update
  patches.suse/Bluetooth-btusb-reorder-cleanup-in-btusb_disconnect-.patch
  (git-fixes CVE-2025-40283 bsc#1254858).
- Update
  patches.suse/Bluetooth-hci_conn-return-ERR_PTR-instead-of-NU.patch
  (bsc#1012628 CVE-2023-54038 bsc#1255540).
- Update
  patches.suse/Bluetooth-hci_event-validate-skb-length-for-unknown-.patch
  (git-fixes CVE-2025-40301 bsc#1255193).
- Update
  patches.suse/Bluetooth-hci_sock-Prevent-race-in-socket-write-iter.patch
  (git-fixes CVE-2025-68305 bsc#1255169).
- Update
  patches.suse/Bluetooth-hci_sync-Avoid-use-after-free-in-dbg-.patch
  (bsc#1012628 CVE-2023-54210 bsc#1255955).
- Update
  patches.suse/Bluetooth-hci_sync-Avoid-use-after-free-in-dbg-for-h.patch
  (git-fixes CVE-2023-53828 bsc#1254623).
- Update
  patches.suse/Bluetooth-hci_sync-Fix-UAF-in-hci_disconnect_all_syn.patch
  (git-fixes CVE-2023-53762 bsc#1254606).
- Update
  patches.suse/Bluetooth-hci_sync-fix-race-in-hci_cmd_sync_dequeue_.patch
  (git-fixes CVE-2025-40318 bsc#1254798).
- Update
  patches.suse/FS-JFS-Check-for-read-only-mounted-filesystem-i.patch
  (bsc#1012628 CVE-2023-53766 bsc#1255005).
- Update
  patches.suse/HID-hidraw-fix-data-race-on-device-refcount.patch
  (bsc#1012628 CVE-2023-53759 bsc#1254663).
- Update
  patches.suse/HID-uclogic-Correct-devm-device-reference-for-hidinp.patch
  (git-fixes CVE-2023-54207 bsc#1255961).
- Update
  patches.suse/HID-wacom-Use-ktime_t-rather-than-int-when-deal.patch
  (bsc#1012628 CVE-2023-53797 bsc#1254733).
- Update
  patches.suse/Input-cros_ec_keyb-fix-an-invalid-memory-access.patch
  (stable-fixes CVE-2025-40263 bsc#1255077).
- Update
  patches.suse/Input-imx_sc_key-fix-memory-corruption-on-unload.patch
  (git-fixes CVE-2025-40262 bsc#1254840).
- Update
  patches.suse/Input-pegasus-notetaker-fix-potential-out-of-bounds-.patch
  (git-fixes CVE-2025-68217 bsc#1255221).
- Update
  patches.suse/KVM-SVM-Get-source-vCPUs-from-source-VM-for-SEV-ES-i.patch
  (git-fixes CVE-2023-54296 bsc#1255793).
- Update
  patches.suse/KVM-s390-pv-fix-index-value-of-replaced-ASCE.patch
  (bsc#1012628 CVE-2023-54092 bsc#1256370).
- Update patches.suse/MIPS-KVM-Fix-NULL-pointer-dereference.patch
  (bsc#1012628 CVE-2023-54241 bsc#1255838).
- Update patches.suse/NFSD-Fix-crash-in-nfsd4_read_release.patch
  (git-fixes CVE-2025-40324 bsc#1254791).
- Update
  patches.suse/NFSD-free-copynotify-stateid-in-nfs4_free_ol_stateid.patch
  (git-fixes CVE-2025-40273 bsc#1254828).
- Update patches.suse/PCI-DOE-Fix-destroy_work_on_stack-race.patch
  (git-fixes CVE-2023-54235 bsc#1255921).
- Update
  patches.suse/PCI-Free-released-resource-after-coalescing.patch
  (git-fixes CVE-2023-53743 bsc#1254782).
- Update
  patches.suse/PCI-IOV-Add-PCI-rescan-remove-locking-when-enabling-.patch
  (git-fixes CVE-2025-40219 bsc#1254518).
- Update
  patches.suse/PCI-cadence-Check-for-the-existence-of-cdns_pcie-ops.patch
  (stable-fixes CVE-2025-68176 bsc#1255329).
- Update
  patches.suse/RDMA-bnxt_re-Prevent-handling-any-completions-a.patch
  (bsc#1012628 CVE-2023-54048 bsc#1256395).
- Update
  patches.suse/RDMA-efa-Fix-wrong-resources-deallocation-order.patch
  (git-fixes CVE-2023-54201 bsc#1255964).
- Update
  patches.suse/RDMA-irdma-Fix-data-race-on-CQP-completion-stat.patch
  (bsc#1012628 CVE-2023-54302 bsc#1255792).
- Update
  patches.suse/RDMA-irdma-Fix-data-race-on-CQP-request-done.patch
  (bsc#1012628 CVE-2023-54292 bsc#1255800).
- Update
  patches.suse/Revert-IB-isert-Fix-incorrect-release-of-isert-conne.patch
  (git-fixes CVE-2023-54219 bsc#1256231).
- Update
  patches.suse/accel-habanalabs-support-mapping-cb-with-vmalloc-bac.patch
  (stable-fixes CVE-2025-40311 bsc#1255068).
- Update
  patches.suse/accel-qaic-Clean-up-integer-overflow-checking-.patch
  (bsc#1012628 CVE-2023-53778 bsc#1254761).
- Update
  patches.suse/af_unix-Fix-data-race-around-unix_tot_inflight.patch
  (git-fixes CVE-2023-54006 bsc#1255591).
- Update patches.suse/amba-bus-fix-refcount-leak.patch (git-fixes
  CVE-2023-54230 bsc#1255925).
- Update
  patches.suse/amd-amdkfd-resolve-a-race-in-amdgpu_amdkfd_device_fi.patch
  (stable-fixes CVE-2025-40310 bsc#1255041).
- Update
  patches.suse/amdgpu-validate-offset_in_bo-of-drm_amdgpu_gem_.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-53819
  bsc#1254712).
- Update patches.suse/arm64-mm-fix-VA-range-sanity-check.patch
  (bsc#1012628 CVE-2023-53989 bsc#1256302).
- Update
  patches.suse/arm64-set-__exception_irq_entry-with-__irq_entr.patch
  (bsc#1012628 CVE-2023-54322 bsc#1255763).
- Update
  patches.suse/atm-fore200e-Fix-possible-data-race-in-fore200e_open.patch
  (git-fixes CVE-2025-68339 bsc#1255505).
- Update
  patches.suse/audit-fix-possible-soft-lockup-in-__audit_inode_chil.patch
  (git-fixes CVE-2023-54045 bsc#1256285).
- Update
  patches.suse/autofs-fix-memory-leak-of-waitqueues-in-autofs_catat.patch
  (git-fixes CVE-2023-54134 bsc#1256106).
- Update
  patches.suse/backlight-led-bl-Add-devlink-to-supplier-LEDs.patch
  (git-fixes CVE-2025-68758 bsc#1255944).
- Update
  patches.suse/bcache-fixup-btree_cache_wait-list-damage.patch
  (bsc#1012628 CVE-2023-54293 bsc#1255801).
- Update patches.suse/binder-fix-memory-leak-in-binder_init.patch
  (bsc#1012628 CVE-2023-54005 bsc#1255629).
- Update
  patches.suse/blk-cgroup-Fix-NULL-deref-caused-by-blkg_policy_data-being-installed-before-init.patch
  (bsc#1216062 CVE-2023-54271 bsc#1255902).
- Update
  patches.suse/blk-cgroup-hold-queue_lock-when-removing-blkg-.patch
  (bsc#1012628 CVE-2023-54088 bsc#1256263).
- Update
  patches.suse/blk-mq-fix-tags-leak-when-shrink-nr_hw_queues.patch
  (bsc#1216436 CVE-2023-54227 bsc#1255952).
- Update
  patches.suse/block-fix-blktrace-debugfs-entries-leakage.patch
  (bsc#1012628 CVE-2023-54209 bsc#1255963).
- Update
  patches.suse/block-rq_qos-protect-rq_qos-apis-with-a-new-loc.patch
  (bsc#1012628 CVE-2023-53823 bsc#1254691).
- Update
  patches.suse/bpf-Address-KCSAN-report-on-bpf_lru_list.patch
  (bsc#1012628 CVE-2023-54283 bsc#1255809).
- Update
  patches.suse/bpf-Disable-preemption-in-bpf_event_output.patch
  (bsc#1012628 CVE-2023-54173 bsc#1255996).
- Update
  patches.suse/bpf-Disable-preemption-in-bpf_perf_event_outpu.patch
  (bsc#1012628 CVE-2023-54303 bsc#1255785).
- Update
  patches.suse/bpf-Fix-issue-in-verifying-allow_ptr_leaks.patch
  (jsc#PED-6811 CVE-2023-54181 bsc#1255988).
- Update
  patches.suse/bpf-Silence-a-warning-in-btf_type_id_size.patch
  (bsc#1012628 CVE-2023-54247 bsc#1255892).
- Update
  patches.suse/bpf-bpf_sk_storage-Fix-invalid-wait-context-lockdep-.patch
  (jsc#PED-6811 CVE-2023-53857 bsc#1254648).
- Update
  patches.suse/bpf-drop-unnecessary-user-triggerable-WARN_ONCE.patch
  (bsc#1012628 CVE-2023-54145 bsc#1256090).
- Update
  patches.suse/bpf-sockmap-Fix-skb-refcnt-race-after-locking-change.patch
  (jsc#PED-6811 CVE-2023-53836 bsc#1254693).
- Update
  patches.suse/btrfs-fix-incorrect-splitting-in-btrfs_drop_ex.patch
  (bsc#1012628 CVE-2023-54121 bsc#1256267).
- Update
  patches.suse/btrfs-fix-lockdep-splat-and-potential-deadlock-after.patch
  (git-fixes CVE-2023-54224 bsc#1255951).
- Update
  patches.suse/btrfs-fix-race-between-balance-and-cancel-pause.patch
  (bsc#1012628 CVE-2023-54023 bsc#1256301).
- Update
  patches.suse/btrfs-fix-race-when-deleting-free-space-root-fr.patch
  (bsc#1012628 CVE-2023-54067 bsc#1256369).
- Update
  patches.suse/btrfs-fix-race-when-deleting-quota-root-from-th.patch
  (bsc#1012628 CVE-2023-54032 bsc#1255617).
- Update
  patches.suse/btrfs-fix-warning-when-putting-transaction-with.patch
  (bsc#1012628 CVE-2023-53865 bsc#1254762).
- Update
  patches.suse/btrfs-release-path-before-inode-lookup-during-the-in.patch
  (git-fixes CVE-2023-54281 bsc#1255820).
- Update
  patches.suse/btrfs-remove-BUG_ON-s-in-add_new_free_space.patch
  (bsc#1012628 CVE-2023-54185 bsc#1255984).
- Update
  patches.suse/btrfs-set-page-extent-mapped-after-read_folio-in-rel.patch
  (git-fixes CVE-2023-54253 bsc#1255891).
- Update
  patches.suse/btrfs-zoned-fix-memory-leak-after-finding-block.patch
  (bsc#1012628 CVE-2023-54297 bsc#1255795).
- Update
  patches.suse/btrfs-zoned-skip-splitting-and-logical-rewriting-on-.patch
  (bsc#1223731 CVE-2024-26944 CVE-2023-54080 bsc#1256367).
- Update
  patches.suse/can-gs_usb-gs_usb_xmit_callback-fix-handling-of-fail.patch
  (git-fixes CVE-2025-68307 bsc#1255146).
- Update
  patches.suse/can-kvaser_usb-leaf-Fix-potential-infinite-loop-in-c.patch
  (git-fixes CVE-2025-68308 bsc#1255149).
- Update
  patches.suse/cifs-fix-potential-oops-in-cifs_oplock_break.patch
  (bsc#1012628 CVE-2023-54258 bsc#1255886).
- Update
  patches.suse/cifs-fix-session-state-check-in-reconnect-to-a.patch
  (bsc#1012628 CVE-2023-53794 bsc#1255163).
- Update
  patches.suse/clk-clocking-wizard-Fix-Oops-in-clk_wzrd_regist.patch
  (bsc#1012628 CVE-2023-53807 bsc#1254724).
- Update
  patches.suse/clk-imx93-fix-memory-leak-and-missing-unwind-go.patch
  (bsc#1012628 CVE-2023-54221 bsc#1255842).
- Update
  patches.suse/comedi-c6xdigio-Fix-invalid-PNP-driver-unregistratio.patch
  (git-fixes CVE-2025-68332 bsc#1255483).
- Update
  patches.suse/comedi-check-device-s-attached-status-in-compat-ioct.patch
  (git-fixes CVE-2025-68257 bsc#1255167).
- Update
  patches.suse/comedi-multiq3-sanitize-config-options-in-multiq3_at.patch
  (git-fixes CVE-2025-68258 bsc#1255182).
- Update
  patches.suse/comedi-pcl818-fix-null-ptr-deref-in-pcl818_ai_cancel.patch
  (git-fixes CVE-2025-68335 bsc#1255480).
- Update
  patches.suse/crypto-api-Use-work-queue-in-crypto_destroy_instance.patch
  (git-fixes CVE-2023-53799 bsc#1254732).
- Update
  patches.suse/crypto-aspeed-fix-double-free-caused-by-devm.patch
  (git-fixes CVE-2025-68172 bsc#1255253).
- Update
  patches.suse/crypto-asymmetric_keys-prevent-overflow-in-asymmetri.patch
  (git-fixes CVE-2025-68724 bsc#1255550).
- Update
  patches.suse/dccp-Fix-out-of-bounds-access-in-DCCP-error-handler.patch
  (bsc#1220419 CVE-2023-53782 bsc#1254758).
- Update
  patches.suse/dccp-fix-data-race-around-dp-dccps_mss_cache.patch
  (bsc#1012628 CVE-2023-53839 bsc#1254655).
- Update
  patches.suse/devlink-report-devlink_port_type_warn-source-de.patch
  (bsc#1012628 CVE-2023-53841 bsc#1255009).
- Update
  patches.suse/dm-don-t-attempt-to-queue-IO-under-RCU-protection-a9ce.patch
  (jsc#PED-7514 CVE-2023-53860 bsc#1254626).
- Update
  patches.suse/dm-fix-a-race-condition-in-retrieve_deps-f600.patch
  (jsc#PED-7514 CVE-2023-54324 bsc#1255759).
- Update
  patches.suse/driver-soc-xilinx-use-_safe-loop-iterator-to-av.patch
  (bsc#1012628 CVE-2023-54101 bsc#1256153).
- Update
  patches.suse/drm-amd-display-Check-NULL-before-accessing.patch
  (stable-fixes CVE-2025-68286 bsc#1255351).
- Update
  patches.suse/drm-amd-display-Fix-NULL-deref-in-debugfs-odm_combin.patch
  (git-fixes CVE-2025-68180 bsc#1255252).
- Update
  patches.suse/drm-amdgpu-Fix-NULL-pointer-dereference-in-VRAM-logi.patch
  (stable-fixes CVE-2025-40288 bsc#1255057).
- Update
  patches.suse/drm-bridge-dw_hdmi-fix-connector-access-for-scd.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-53784
  bsc#1254765).
- Update
  patches.suse/drm-client-Fix-memory-leak-in-drm_client_target.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-54091
  bsc#1256274).
- Update
  patches.suse/drm-i915-Avoid-lock-inversion-when-pinning-to-GGTT-o.patch
  (git-fixes CVE-2025-68244 bsc#1255190).
- Update
  patches.suse/drm-mediatek-Fix-device-use-after-free-on-unbind.patch
  (git-fixes CVE-2025-40316 bsc#1254797).
- Update
  patches.suse/drm-msm-dp-Drop-aux-devices-together-with-DP-co.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-53851
  bsc#1254695).
- Update
  patches.suse/drm-mxsfb-Disable-overlay-plane-in-mxsfb_plane_overl.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-53864
  bsc#1254754).
- Update
  patches.suse/drm-nouveau-kms-nv50-init-hpd_irq_lock-for-PIOR.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-54263
  bsc#1255883).
- Update
  patches.suse/drm-sched-Fix-deadlock-in-drm_sched_entity_kill_jobs.patch
  (git-fixes CVE-2025-40329 bsc#1254621).
- Update patches.suse/drm-tegra-Add-call-to-put_pid.patch
  (git-fixes CVE-2025-68233 bsc#1255206).
- Update
  patches.suse/drm-ttm-Don-t-leak-a-resource-on-eviction-error.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-54254
  bsc#1255890).
- Update
  patches.suse/drm-ttm-Don-t-leak-a-resource-on-swapout-move-e.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-53844
  bsc#1254649).
- Update
  patches.suse/drm-vgem-fence-Fix-potential-deadlock-on-release.patch
  (git-fixes CVE-2025-68757 bsc#1255943).
- Update
  patches.suse/drm-vmwgfx-Validate-command-header-size-against-SVGA.patch
  (git-fixes CVE-2025-40277 bsc#1254894).
- Update
  patches.suse/erofs-kill-hooked-chains-to-avoid-loops-on-dedu.patch
  (bsc#1012628 CVE-2023-53777 bsc#1254749).
- Update
  patches.suse/exfat-use-kvmalloc_array-kvfree-instead-of-kma.patch
  (bsc#1012628 CVE-2023-54194 bsc#1255974).
- Update
  patches.suse/ext4-correct-grp-validation-in-ext4_mb_good_group.patch
  (bsc#1234163 CVE-2023-53861 bsc#1254678).
- Update
  patches.suse/ext4-fix-BUG-in-ext4_mb_new_inode_pa-due-to-overflow.patch
  (bsc#1219165 CVE-2023-54069 bsc#1256371).
- Update
  patches.suse/ext4-fix-rbtree-traversal-bug-in-ext4_mb_use_pr.patch
  (bsc#1012628 CVE-2023-53813 bsc#1254717).
- Update
  patches.suse/ext4-turn-quotas-off-if-mount-failed-after-enab.patch
  (bsc#1012628 CVE-2023-54153 bsc#1256081).
- Update
  patches.suse/f2fs-fix-to-do-sanity-check-on-direct-node-in-.patch
  (bsc#1012628 CVE-2023-53846 bsc#1254983).
- Update
  patches.suse/fbcon-Set-fb_display-i-mode-to-NULL-when-the-mode-is.patch
  (stable-fixes CVE-2025-40323 bsc#1255094).
- Update
  patches.suse/fbdev-Add-bounds-checking-in-bit_putcs-to-fix-vmallo.patch
  (stable-fixes CVE-2025-40304 bsc#1255034).
- Update
  patches.suse/fbdev-bitblit-bound-check-glyph-index-in-bit_putcs.patch
  (stable-fixes CVE-2025-40322 bsc#1255092).
- Update
  patches.suse/firmware-meson_sm-fix-to-avoid-potential-NULL-pointe.patch
  (git-fixes CVE-2023-54304 bsc#1255786).
- Update
  patches.suse/firmware-stratix10-svc-fix-bug-in-saving-controller-.patch
  (git-fixes CVE-2025-68328 bsc#1255489).
- Update
  patches.suse/fs-Protect-reconfiguration-of-sb-read-write-fr.patch
  (bsc#1012628 CVE-2023-54099 bsc#1256197).
- Update
  patches.suse/fs-jfs-prevent-double-free-in-dbUnmount-after-failed-jfs_remount.patch
  (git-fixes CVE-2023-54127 bsc#1256119).
- Update
  patches.suse/fs-ntfs3-Return-error-for-inconsistent-extende.patch
  (bsc#1012628 CVE-2023-54125 bsc#1256117).
- Update
  patches.suse/fs-sysv-Null-check-to-prevent-null-ptr-deref-b.patch
  (bsc#1012628 CVE-2023-54264 bsc#1255872).
- Update
  patches.suse/gpu-host1x-Fix-race-in-syncpt-alloc-free.patch
  (git-fixes CVE-2025-68732 bsc#1255688).
- Update
  patches.suse/gtp-Fix-use-after-free-in-__gtp_encap_destroy.patch
  (bsc#1012628 CVE-2023-54142 bsc#1256095).
- Update
  patches.suse/hfs-validate-record-offset-in-hfsplus_bmap_alloc.patch
  (git-fixes CVE-2025-40349 bsc#1255280).
- Update
  patches.suse/hfsplus-fix-KMSAN-uninit-value-issue-in-__hfsplus_ext_cache_extent.patch
  (git-fixes CVE-2025-40244 bsc#1255033).
- Update
  patches.suse/hfsplus-fix-KMSAN-uninit-value-issue-in-hfsplus_delete_cat.patch
  (git-fixes CVE-2025-40351 bsc#1255281).
- Update
  patches.suse/hwrng-virtio-Fix-race-on-data_avail-and-actual-.patch
  (bsc#1012628 CVE-2023-53998 bsc#1255578).
- Update
  patches.suse/iavf-use-internal-state-to-free-traffic-IRQs.patch
  (bsc#1012628 CVE-2023-53850 bsc#1254677).
- Update
  patches.suse/ice-prevent-NULL-pointer-deref-during-reload.patch
  (bsc#1012628 CVE-2023-54037 bsc#1255557).
- Update
  patches.suse/igb-clean-up-in-all-error-paths-when-enabling-SR-IOV.patch
  (jsc#PED-4866 CVE-2023-54070 bsc#1256364).
- Update
  patches.suse/igc-Fix-Kernel-Panic-during-ndo_tx_timeout-call.patch
  (bsc#1012628 CVE-2023-54166 bsc#1256074).
- Update
  patches.suse/iio-accel-bmc150-Fix-irq-assumption-regression.patch
  (stable-fixes CVE-2025-68330 bsc#1255493).
- Update
  patches.suse/iio-adc-ina2xx-avoid-NULL-pointer-dereference-.patch
  (bsc#1012628 CVE-2023-53834 bsc#1254660).
- Update
  patches.suse/iio-core-Prevent-invalid-memory-access-when-th.patch
  (bsc#1012628 CVE-2023-54027 bsc#1255579).
- Update
  patches.suse/ima-Handle-error-code-returned-by-ima_filter_rule_ma.patch
  (git-fixes CVE-2025-68740 bsc#1255812).
- Update
  patches.suse/ima-don-t-clear-IMA_DIGSIG-flag-when-setting-or-remo.patch
  (stable-fixes CVE-2025-68183 bsc#1255251).
- Update
  patches.suse/io_uring-net-don-t-overflow-multishot-recv.patch
  (bsc#1215211 CVE-2023-54030 bsc#1255691).
- Update
  patches.suse/iomap-Fix-possible-overflow-condition-in-iomap_write_delalloc_scan.patch
  (jsc#PED-5453 CVE-2023-54285 bsc#1255807).
- Update
  patches.suse/iommufd-IOMMUFD_DESTROY-should-not-increase-the.patch
  (bsc#1012628 CVE-2023-53795 bsc#1254737).
- Update
  patches.suse/iommufd-Set-end-correctly-when-doing-batch-carr.patch
  (bsc#1012628 CVE-2023-54060 bsc#1256379).
- Update
  patches.suse/ionic-remove-WARN_ON-to-prevent-panic_on_warn.patch
  (bsc#1012628 CVE-2023-53994 bsc#1255570).
- Update
  patches.suse/ip6_vti-fix-slab-use-after-free-in-decode_sess.patch
  (bsc#1012628 CVE-2023-53821 bsc#1254669).
- Update
  patches.suse/ipmi-ssif-Fix-a-memory-leak-when-scanning-for-an-ada.patch
  (git-fixes CVE-2023-54064 bsc#1256375).
- Update
  patches.suse/irqchip-mchp-eic-Fix-error-code-in-mchp_eic_domain_a.patch
  (git-fixes CVE-2025-68766 bsc#1255932).
- Update
  patches.suse/isdn-mISDN-hfcsusb-fix-memory-leak-in-hfcsusb_probe.patch
  (git-fixes CVE-2025-68734 bsc#1255538).
- Update
  patches.suse/jfs-Verify-inode-mode-when-loading-from-disk.patch
  (git-fixes CVE-2025-40312 bsc#1255046).
- Update
  patches.suse/jfs-fix-uninitialized-waitqueue-in-transaction-manager.patch
  (git-fixes CVE-2025-68168 bsc#1255100).
- Update
  patches.suse/kcm-Fix-error-handling-for-SOCK_DGRAM-in-kcm_sendmsg.patch
  (bsc#1220419 CVE-2023-53825 bsc#1254707).
- Update
  patches.suse/kcm-Fix-memory-leak-in-error-path-of-kcm_sendmsg.patch
  (bsc#1220419 CVE-2023-54112 bsc#1256354).
- Update
  patches.suse/keys-Fix-linking-a-duplicate-key-to-a-keyring-s.patch
  (bsc#1012628 CVE-2023-54170 bsc#1256045).
- Update
  patches.suse/maple_tree-fix-potential-out-of-bounds-access-i.patch
  (bsc#1012628 CVE-2023-54135 bsc#1256107).
- Update
  patches.suse/md-fix-warning-for-holder-mismatch-from-export_rdev.patch
  (git-fixes CVE-2023-53791 bsc#1254742).
- Update
  patches.suse/md-raid5-cache-fix-a-deadlock-in-r5l_exit_log-a705.patch
  (jsc#PED-7542 CVE-2023-53848 bsc#1254753).
- Update
  patches.suse/media-af9005-Fix-null-ptr-deref-in-af9005_i2c_xfer.patch
  (git-fixes CVE-2023-54314 bsc#1255776).
- Update
  patches.suse/media-anysee-fix-null-ptr-deref-in-anysee_master_xfe.patch
  (git-fixes CVE-2023-54093 bsc#1256273).
- Update
  patches.suse/media-dvb-usb-m920x-Fix-a-potential-memory-leak-in-m.patch
  (git-fixes CVE-2023-54266 bsc#1255875).
- Update
  patches.suse/media-dvb-usb-v2-gl861-Fix-null-ptr-deref-in-gl861_i.patch
  (git-fixes CVE-2023-54066 bsc#1256373).
- Update
  patches.suse/media-imon-make-send_packet-more-robust.patch
  (stable-fixes CVE-2025-68194 bsc#1255325).
- Update
  patches.suse/media-mediatek-vcodec-fix-resource-leaks-in-vdec_msg.patch
  (git-fixes CVE-2023-54143 bsc#1256096).
- Update
  patches.suse/media-tuners-qt1010-replace-BUG_ON-with-a-regular-er.patch
  (git-fixes CVE-2023-54282 bsc#1255810).
- Update
  patches.suse/media-v4l2-core-Fix-a-potential-resource-leak-in-v4l.patch
  (git-fixes CVE-2023-54183 bsc#1255990).
- Update
  patches.suse/misc-fastrpc-Fix-dma_buf-object-leak-in-fastrpc_map_.patch
  (git-fixes CVE-2025-68252 bsc#1255197).
- Update
  patches.suse/misc-pci_endpoint_test-Free-IRQs-before-removin.patch
  (bsc#1012628 CVE-2023-54326 bsc#1255758).
- Update
  patches.suse/mm-secretmem-fix-use-after-free-race-in-fault-handle.patch
  (git-fixes CVE-2025-40272 bsc#1254832).
- Update
  patches.suse/mmc-sunplus-fix-return-value-check-of-mmc_add_.patch
  (bsc#1012628 CVE-2023-54204 bsc#1255967).
- Update
  patches.suse/most-usb-Fix-use-after-free-in-hdm_disconnect.patch
  (git-fixes CVE-2025-40223 bsc#1254957).
- Update
  patches.suse/most-usb-fix-double-free-on-late-probe-failure.patch
  (git-fixes CVE-2025-68290 bsc#1255154).
- Update
  patches.suse/most-usb-hdm_probe-Fix-calling-put_device-before-dev.patch
  (git-fixes CVE-2025-68249 bsc#1255233).
- Update
  patches.suse/mt76-mt7615-Fix-memory-leak-in-mt7615_mcu_wtbl_sta_a.patch
  (git-fixes CVE-2025-68765 bsc#1255931).
- Update
  patches.suse/mt76-mt7921-don-t-assume-adequate-headroom-for-SDIO-.patch
  (git-fixes CVE-2023-53785 bsc#1254918).
- Update
  patches.suse/mtd-rawnand-cadence-fix-DMA-device-NULL-pointer-dere.patch
  (git-fixes CVE-2025-68238 bsc#1255202).
- Update
  patches.suse/mtd-rawnand-fsl_upm-Fix-an-off-by-one-test-in-.patch
  (bsc#1012628 CVE-2023-54104 bsc#1256145).
- Update
  patches.suse/mtdchar-fix-integer-overflow-in-read-write-ioctls.patch
  (git-fixes CVE-2025-68237 bsc#1255203).
- Update
  patches.suse/net-core-remove-unnecessary-frame_sz-check-in-.patch
  (bsc#1012628 CVE-2023-54155 bsc#1256083).
- Update
  patches.suse/net-deal-with-integer-overflows-in-kmalloc_reserve.patch
  (bsc#1215146 CVE-2023-42752 CVE-2023-53752 bsc#1254613).
- Update
  patches.suse/net-do-not-allow-gso_size-to-be-set-to-GSO_BY_.patch
  (bsc#1012628 CVE-2023-54051 bsc#1256394).
- Update
  patches.suse/net-dsa-avoid-suspicious-RCU-usage-for-synced-V.patch
  (bsc#1012628 CVE-2023-54149 bsc#1256085).
- Update
  patches.suse/net-dsa-ocelot-call-dsa_tag_8021q_unregister-u.patch
  (bsc#1012628 CVE-2023-53855 bsc#1254688).
- Update
  patches.suse/net-ethernet-mtk_eth_soc-fix-possible-NULL-pointer-d.patch
  (git-fixes CVE-2023-54240 bsc#1255918).
- Update
  patches.suse/net-hns3-fix-deadlock-issue-when-externel_lb-a.patch
  (bsc#1012628 CVE-2023-54000 bsc#1255564).
- Update
  patches.suse/net-ipa-only-reset-hashed-tables-when-supported.patch
  (bsc#1012628 CVE-2023-54225 bsc#1256234).
- Update
  patches.suse/net-ipv4-fix-one-memleak-in-__inet_del_ifa.patch
  (bsc#1220419 CVE-2023-53995 bsc#1255616).
- Update
  patches.suse/net-mlx5-fix-potential-memory-leak-in-mlx5e_in.patch
  (bsc#1012628 CVE-2023-54106 bsc#1256358).
- Update
  patches.suse/net-mlx5e-Move-representor-neigh-cleanup-to-pr.patch
  (bsc#1012628 CVE-2023-54148 bsc#1256084).
- Update
  patches.suse/net-mlx5e-TC-Fix-internal-port-memory-leak.patch
  (bsc#1012628 CVE-2023-53999 bsc#1255621).
- Update
  patches.suse/net-mlx5e-fix-memory-leak-in-mlx5e_ptp_open.patch
  (bsc#1012628 CVE-2023-54169 bsc#1256050).
- Update
  patches.suse/net-mlx5e-xsk-Fix-invalid-buffer-access-for-le.patch
  (bsc#1012628 CVE-2023-54223 bsc#1256233).
- Update
  patches.suse/net-openvswitch-reject-negative-ifindex.patch
  (bsc#1012628 CVE-2023-53843 bsc#1254705).
- Update
  patches.suse/net-prevent-skb-corruption-on-frag-list-segment.patch
  (bsc#1012628 CVE-2023-54094 bsc#1256292).
- Update
  patches.suse/net-read-sk-sk_family-once-in-sk_mc_loop.patch
  (bsc#1220419 CVE-2023-53831 bsc#1254701).
- Update
  patches.suse/net-sched-taprio-Limit-TCA_TAPRIO_ATTR_SCHED_C.patch
  (bsc#1012628 CVE-2023-54251 bsc#1255888).
- Update
  patches.suse/net-smc-use-smc_lgr_list.lock-to-protect-smc_lgr_lis.patch
  (git-fixes CVE-2023-54318 bsc#1255772).
- Update
  patches.suse/net-usb-qmi_wwan-initialize-MAC-header-offset-in-qmi.patch
  (git-fixes CVE-2025-68192 bsc#1255246).
- Update
  patches.suse/netfilter-nf_tables-fix-underflow-in-chain-refe.patch
  (bsc#1012628 CVE-2023-54035 bsc#1255563).
- Update
  patches.suse/netlink-do-not-hard-code-device-address-lenth-i.patch
  (bsc#1012628 CVE-2023-53863 bsc#1254657).
- Update
  patches.suse/nfp-clean-mc-addresses-in-application-firmware-.patch
  (bsc#1012628 CVE-2023-54133 bsc#1256104).
- Update
  patches.suse/nfs4_setup_readdir-insufficient-locking-for-d_parent-d_inode-dereferencing.patch
  (git-fixes CVE-2025-68185 bsc#1255135).
- Update
  patches.suse/nfsd-move-init-of-percpu-reply_cache_stats-coun.patch
  (bsc#1012628 CVE-2023-54276 bsc#1255907).
- Update
  patches.suse/nilfs2-fix-WARNING-in-mark_buffer_dirty-due-to.patch
  (bsc#1012628 CVE-2023-54140 bsc#1256093).
- Update
  patches.suse/nouveau-firmware-Add-missing-kfree-of-nvkm_falcon_fw.patch
  (git-fixes CVE-2025-68235 bsc#1255209).
- Update
  patches.suse/nvme-core-fix-memory-leak-in-dhchap_ctrl_secret.patch
  (bsc#1012628 CVE-2023-53792 bsc#1254743).
- Update
  patches.suse/nvme-core-fix-memory-leak-in-dhchap_secret_stor.patch
  (bsc#1012628 CVE-2023-53852 bsc#1254653).
- Update
  patches.suse/nvme-fc-use-lock-accessing-port_state-and-rport-stat.patch
  (bsc#1245193 bsc#1247500 CVE-2025-40342 bsc#1255274).
- Update
  patches.suse/nvme-multipath-fix-lockdep-WARN-due-to-partition-sca.patch
  (git-fixes bsc#1233640 CVE-2024-53093 CVE-2025-68218
  bsc#1255245).
- Update
  patches.suse/nvmet-fc-avoid-scheduling-association-deletion-twice.patch
  (bsc#1245193 bsc#1247500 CVE-2025-40343 bsc#1255276).
- Update
  patches.suse/of-overlay-Call-of_changeset_init-early.patch
  (git-fixes CVE-2023-53856 bsc#1254661).
- Update
  patches.suse/of-unittest-fix-null-pointer-dereferencing-in-of_uni.patch
  (git-fixes CVE-2023-54178 bsc#1255992).
- Update
  patches.suse/opp-Fix-use-after-free-in-lazy_opp_tables-after.patch
  (bsc#1012628 CVE-2023-54026 bsc#1255549).
- Update
  patches.suse/orangefs-fix-xattr-related-buffer-overflow.patch
  (git-fixes CVE-2025-40306 bsc#1255062).
- Update
  patches.suse/ovl-fix-null-pointer-dereference-in-ovl_get_acl.patch
  (bsc#1012628 CVE-2023-54313 bsc#1255775).
- Update
  patches.suse/pcmcia-rsrc_nonstatic-Fix-memory-leak-in-nonst.patch
  (bsc#1012628 CVE-2023-54115 bsc#1256121).
- Update patches.suse/perf-tool-x86-Fix-perf_env-memory-leak.patch
  (bsc#1012628 CVE-2023-53793 bsc#1254739).
- Update
  patches.suse/phy-tegra-xusb-Clear-the-driver-reference-in-us.patch
  (bsc#1012628 CVE-2023-54083 bsc#1256368).
- Update
  patches.suse/pinctrl-at91-pio4-check-return-value-of-devm_ka.patch
  (bsc#1012628 CVE-2023-54319 bsc#1255760).
- Update
  patches.suse/pinctrl-freescale-Fix-a-memory-out-of-bounds-wh.patch
  (bsc#1012628 CVE-2023-53750 bsc#1254611).
- Update
  patches.suse/pinctrl-s32cc-fix-uninitialized-memory-in-s32_pinctr.patch
  (git-fixes CVE-2025-68222 bsc#1255218).
- Update
  patches.suse/platform-x86-intel-punit_ipc-fix-memory-corruption.patch
  (git-fixes CVE-2025-68303 bsc#1255122).
- Update
  patches.suse/posix-timers-Prevent-RT-livelock-in-itimer_dele.patch
  (bsc#1012628 CVE-2023-53815 bsc#1254715).
- Update patches.suse/powerpc-64s-Fix-VAS-mm-use-after-free.patch
  (bsc#1012628 CVE-2023-54042 bsc#1255702).
- Update
  patches.suse/powerpc-iommu-Fix-notifiers-being-shared-by-PCI-and-.patch
  (bsc#1065729 CVE-2023-54095 bsc#1256271).
- Update
  patches.suse/powerpc-powernv-sriov-perform-null-check-on-iov.patch
  (bsc#1012628 CVE-2023-54315 bsc#1255769).
- Update
  patches.suse/powerpc-pseries-Rework-lppaca_shared_proc-to-avoid-D.patch
  (bsc#1194869 CVE-2023-54267 bsc#1255899).
- Update
  patches.suse/powerpc-pseries-fix-possible-memory-leak-in-ibmebus_.patch
  (bsc#1194869 CVE-2023-54017 bsc#1255605).
- Update patches.suse/pstore-ram-Add-check-for-kstrdup.patch
  (bsc#1012628 CVE-2023-54189 bsc#1255978).
- Update patches.suse/quota-fix-warning-in-dqgrab.patch
  (bsc#1012628 CVE-2023-54177 bsc#1255993).
- Update patches.suse/rcu-dump-vmalloc-memory-info-safely.patch
  (git-fixes CVE-2023-54113 bsc#1256351).
- Update
  patches.suse/rcuscale-Move-rcu_scale_writer-schedule_timeout_unin.patch
  (git-fixes CVE-2023-54246 bsc#1255915).
- Update
  patches.suse/refscale-Fix-uninitalized-use-of-wait_queue_head_t.patch
  (git-fixes CVE-2023-54316 bsc#1255770).
- Update
  patches.suse/regmap-irq-Fix-out-of-bounds-access-when-alloca.patch
  (bsc#1012628 CVE-2023-53768 bsc#1254599).
- Update
  patches.suse/regmap-slimbus-fix-bus_context-pointer-in-regmap-ini.patch
  (git-fixes CVE-2025-40317 bsc#1254796).
- Update
  patches.suse/regulator-core-Protect-regulator_supply_alias_list-w.patch
  (git-fixes CVE-2025-68354 bsc#1255553).
- Update
  patches.suse/regulator-da9063-fix-null-pointer-deref-with-pa.patch
  (bsc#1012628 CVE-2023-53787 bsc#1254750).
- Update patches.suse/rpmsg-glink-Add-check-for-kstrdup.patch
  (git-fixes CVE-2023-54049 bsc#1256396).
- Update
  patches.suse/s390-dcssblk-fix-kernel-crash-with-list_add-corruption.patch
  (git-fixes bsc#1215344 CVE-2023-54117 bsc#1256348).
- Update
  patches.suse/s390-vmem-split-pages-when-debug-pagealloc-is-.patch
  (bsc#1012628 CVE-2023-54278 bsc#1255911).
- Update
  patches.suse/samples-bpf-Fix-buffer-overflow-in-tcp_basertt.patch
  (bsc#1012628 CVE-2023-54312 bsc#1255774).
- Update
  patches.suse/sched-psi-use-kernfs-polling-functions-for-PSI-.patch
  (bsc#1012628 CVE-2023-54019 bsc#1255636).
- Update
  patches.suse/scsi-qedf-Fix-NULL-dereference-in-error-handlin.patch
  (bsc#1012628 CVE-2023-54289 bsc#1255806).
- Update
  patches.suse/scsi-qla2xxx-Array-index-may-go-out-of-bound.patch
  (bsc#1012628 CVE-2023-54179 bsc#1255994).
- Update
  patches.suse/scsi-qla2xxx-Check-valid-rport-returned-by-fc_b.patch
  (bsc#1012628 CVE-2023-54014 bsc#1256300).
- Update
  patches.suse/scsi-target-core-Fix-target_cmd_counter-leak.patch
  (bsc#1214847 CVE-2023-54154 bsc#1256082).
- Update
  patches.suse/serial-8250-Fix-oops-for-port-pm-on-uart_chang.patch
  (bsc#1012628 CVE-2023-54220 bsc#1255949).
- Update patches.suse/serial-sprd-Fix-DMA-buffer-leak-issue.patch
  (git-fixes CVE-2023-54136 bsc#1256099).
- Update
  patches.suse/sfc-fix-crash-when-reading-stats-while-NIC-is-r.patch
  (bsc#1012628 CVE-2023-54156 bsc#1255704).
- Update
  patches.suse/sh-dma-Fix-DMA-channel-offset-calculation.patch
  (bsc#1012628 CVE-2023-54255 bsc#1255884).
- Update patches.suse/smb-client-fix-missed-ses-refcounting.patch
  (bsc#1012628 CVE-2023-54076 bsc#1256335).
- Update
  patches.suse/smb-client-fix-potential-cfid-UAF-in-smb2_query_info_compound.patch
  (bsc#1248886 CVE-2025-40320 bsc#1254793).
- Update patches.suse/soundwire-fix-enumeration-completion.patch
  (bsc#1012628 CVE-2023-54096 bsc#1256178).
- Update patches.suse/spi-tegra210-quad-Fix-timeout-handling.patch
  (bsc#1253155 CVE-2025-68746 bsc#1255722).
- Update
  patches.suse/staging-r8712-Fix-memory-leak-in-_r8712_init_xm.patch
  (bsc#1012628 CVE-2023-54001 bsc#1255628).
- Update
  patches.suse/thermal-of-fix-double-free-on-unregistration.patch
  (bsc#1012628 CVE-2023-53997 bsc#1255632).
- Update
  patches.suse/tpm-tpm_vtpm_proxy-fix-a-race-condition-in-dev-.patch
  (bsc#1012628 CVE-2023-54309 bsc#1255780).
- Update
  patches.suse/tracing-Fix-memory-leak-of-iter-temp-when-readi.patch
  (bsc#1012628 CVE-2023-54171 bsc#1256034).
- Update
  patches.suse/tracing-Fix-warning-in-trace_buffered_event_dis.patch
  (bsc#1012628 CVE-2023-54211 bsc#1255843).
- Update
  patches.suse/tty-serial-samsung_tty-Fix-a-memory-leak-in-s3c.patch
  (bsc#1012628 CVE-2023-53858 bsc#1254704).
- Update
  patches.suse/usb-cdns3-gadget-Use-after-free-during-failed-initia.patch
  (stable-fixes CVE-2025-40314 bsc#1255072).
- Update
  patches.suse/usb-dwc3-Fix-race-condition-between-concurrent-dwc3_.patch
  (git-fixes CVE-2025-68287 bsc#1255152).
- Update
  patches.suse/usb-gadget-f_eem-Fix-memory-leak-in-eem_unwrap.patch
  (git-fixes CVE-2025-68289 bsc#1255155).
- Update
  patches.suse/usb-gadget-f_fs-Fix-epfile-null-pointer-access-after.patch
  (stable-fixes CVE-2025-40315 bsc#1255083).
- Update
  patches.suse/usb-potential-integer-overflow-in-usbg_make_tpg.patch
  (stable-fixes CVE-2025-68750 bsc#1255814).
- Update
  patches.suse/usb-storage-alauda-Fix-uninit-value-in-alauda_.patch
  (bsc#1012628 CVE-2023-53847 bsc#1254698).
- Update
  patches.suse/usb-storage-sddr55-Reject-out-of-bound-new_pba.patch
  (stable-fixes CVE-2025-40345 bsc#1255279).
- Update
  patches.suse/usb-typec-bus-verify-partner-exists-in-typec_altmode.patch
  (git-fixes CVE-2023-54299 bsc#1255789).
- Update
  patches.suse/usb-uas-fix-urb-unmapping-issue-when-the-uas-device-.patch
  (git-fixes CVE-2025-68331 bsc#1255495).
- Update patches.suse/usbnet-Prevents-free-active-kevent.patch
  (git-fixes CVE-2025-68312 bsc#1255171).
- Update
  patches.suse/vdpa-Add-queue-index-attr-to-vdpa_nl_policy-fo.patch
  (bsc#1012628 CVE-2023-54031 bsc#1255583).
- Update patches.suse/vduse-fix-NULL-pointer-dereference.patch
  (bsc#1012628 CVE-2023-54291 bsc#1255798).
- Update
  patches.suse/vfio-type1-fix-cap_migration-information-leak
  (jsc#PED-7779 jsc#PED-7780 CVE-2023-54137 bsc#1256100).
- Update
  patches.suse/virtio-vdpa-Fix-cpumask-memory-leak-in-virtio_.patch
  (bsc#1012628 CVE-2023-54215 bsc#1255957).
- Update
  patches.suse/virtio_pmem-add-the-missing-REQ_OP_WRITE-for-flush-b.patch
  (git-fixes CVE-2023-54089 bsc#1256268).
- Update
  patches.suse/virtio_vdpa-build-affinity-masks-conditionally.patch
  (git-fixes CVE-2023-54008 bsc#1255630).
- Update
  patches.suse/wifi-ath11k-Add-missing-hw_ops-get_ring_selecto.patch
  (bsc#1012628 CVE-2023-54141 bsc#1256094).
- Update patches.suse/wifi-ath11k-fix-peer-HE-MCS-assignment.patch
  (git-fixes CVE-2025-68380 bsc#1255580).
- Update
  patches.suse/wifi-ath11k-fix-registration-of-6Ghz-only-phy-w.patch
  (bsc#1012628 CVE-2023-54229 bsc#1255924).
- Update
  patches.suse/wifi-ath12k-Fix-memory-leak-in-rx_desc-and-tx_desc.patch
  (git-fixes CVE-2023-54016 bsc#1256279).
- Update
  patches.suse/wifi-ath9k-avoid-referencing-uninit-memory-in-a.patch
  (bsc#1012628 CVE-2023-54300 bsc#1255790).
- Update
  patches.suse/wifi-brcmfmac-fix-crash-while-sending-Action-Frames-.patch
  (git-fixes CVE-2025-40321 bsc#1254795).
- Update
  patches.suse/wifi-cfg80211-ocb-don-t-leave-if-not-joined.patch
  (git-fixes CVE-2023-53992 bsc#1256058).
- Update
  patches.suse/wifi-mt76-mt7921-fix-skb-leak-by-txs-missing-i.patch
  (bsc#1012628 CVE-2023-54052 bsc#1256387).
- Update
  patches.suse/wifi-mwifiex-fix-memory-leak-in-mwifiex_histogram_re.patch
  (git-fixes CVE-2023-53808 bsc#1254723).
- Update
  patches.suse/wifi-rsi-Do-not-configure-WoWlan-in-shutdown-ho.patch
  (bsc#1012628 CVE-2023-54025 bsc#1255558).
- Update
  patches.suse/wifi-rtl818x-Fix-potential-memory-leaks-in-rtl8180_i.patch
  (git-fixes CVE-2025-68759 bsc#1255934).
- Update
  patches.suse/wifi-rtl818x-rtl8187-Fix-potential-buffer-underflow-.patch
  (git-fixes CVE-2025-68362 bsc#1255611).
- Update patches.suse/x86-CPU-AMD-Add-RDSEED-fix-for-Zen5.patch
  (git-fixes CVE-2025-68313 bsc#1255415).
- Update
  patches.suse/x86-CPU-AMD-Add-missing-terminator-for-zen5_rdseed_microco.patch
  (git-fixes CVE-2025-68195 bsc#1255259).
- Update
  patches.suse/x86-hyperv-Disable-IBT-when-hypercall-page-lac.patch
  (bsc#1012628 CVE-2023-54172 bsc#1256033).
- Update
  patches.suse/x86-sev-Make-enc_dec_hypercall-accept-a-size-instead-of-npages
  (bsc#1214635 CVE-2023-53996 bsc#1255618).
- Update patches.suse/xen-speed-up-grant-table-reclaim.patch
  (bsc#1012628 CVE-2023-54081 bsc#1256361).
- Update
  patches.suse/xfrm-also-call-xfrm_state_delete_tunnel-at-destroy-time-fo.patch
  (CVE-2025-40215 bsc#1254959 CVE-2025-40256 bsc#1254851).
- commit c2db288</changelog>
  <changelog author="joao.povoas@suse.com" date="1768219201">- Update
  patches.suse/Bluetooth-MGMT-Fix-OOB-access-in-parse_adv_monitor_p.patch
  (git-fixes CVE-2025-40294 bsc#1255181).
- Update
  patches.suse/Bluetooth-MGMT-fix-crash-in-set_mesh_sync-and-set_me.patch
  (git-fixes CVE-2025-40213 bsc#1253674).
- Update
  patches.suse/Bluetooth-btusb-mediatek-Avoid-btusb_mtk_claim_iso_i.patch
  (git-fixes CVE-2025-68298 bsc#1255124).
- Update
  patches.suse/Bluetooth-btusb-mediatek-Fix-kernel-crash-when-relea.patch
  (git-fixes CVE-2025-68306 bsc#1255145).
- Update
  patches.suse/accel-ivpu-Fix-race-condition-when-unbinding-BOs.patch
  (git-fixes CVE-2025-68749 bsc#1255724).
- Update
  patches.suse/drm-amd-display-increase-max-link-count-and-fix-link.patch
  (stable-fixes CVE-2025-40354 bsc#1255316).
- Update
  patches.suse/drm-amdgpu-atom-Check-kcalloc-for-WS-buffer-in-amdgp.patch
  (stable-fixes CVE-2025-68190 bsc#1255131).
- Update
  patches.suse/drm-amdgpu-fix-gpu-page-fault-after-hibernation-on-P.patch
  (stable-fixes CVE-2025-68230 bsc#1255134).
- Update
  patches.suse/drm-amdgpu-fix-nullptr-err-of-vm_handle_moved.patch
  (stable-fixes CVE-2025-40339 bsc#1255428).
- Update patches.suse/drm-amdgpu-remove-two-invalid-BUG_ON-s.patch
  (stable-fixes CVE-2025-68201 bsc#1255136).
- Update
  patches.suse/drm-amdkfd-Fix-mmap-write-lock-not-release.patch
  (bsc#1243112 CVE-2025-40332 bsc#1255116).
- Update
  patches.suse/drm-mediatek-Disable-AFBC-support-on-Mediatek-DRM-dr.patch
  (git-fixes CVE-2025-68184 bsc#1255220).
- Update
  patches.suse/drm-panthor-Fix-UAF-on-kernel-BO-VA-nodes.patch
  (git-fixes CVE-2025-68747 bsc#1255723).
- Update
  patches.suse/drm-panthor-Fix-kernel-panic-on-partial-unmap-of-a-G.patch
  (git-fixes CVE-2025-40225 bsc#1254827).
- Update
  patches.suse/drm-panthor-Flush-shmem-writes-before-mapping-buffer.patch
  (git-fixes CVE-2025-40276 bsc#1254824).
- Update
  patches.suse/drm-radeon-Do-not-kfree-devres-managed-rdev.patch
  (git-fixes CVE-2025-68170 bsc#1255256).
- Update patches.suse/drm-radeon-Remove-calls-to-drm_put_dev.patch
  (git-fixes CVE-2025-68181 bsc#1255247).
- Update
  patches.suse/drm-radeon-delete-radeon_fence_process-in-is_signale.patch
  (stable-fixes CVE-2025-68223 bsc#1255357).
- Update
  patches.suse/drm-sysfb-Do-not-dereference-NULL-pointer-in-plane-r.patch
  (git-fixes CVE-2025-40360 bsc#1255095).
- Update
  patches.suse/drm-xe-Fix-oops-in-xe_gem_fault-when-running-core_ho.patch
  (stable-fixes CVE-2025-40340 bsc#1254996).
- Update
  patches.suse/drm-xe-guc-Synchronize-Dead-CT-worker-with-unbind.patch
  (git-fixes CVE-2025-68207 bsc#1255234).
- Update
  patches.suse/media-videobuf2-forbid-remove_bufs-when-legacy-filei.patch
  (git-fixes CVE-2025-40302 bsc#1255196).
- Update
  patches.suse/perf-x86-intel-Fix-KASAN-global-out-of-bounds-warning.patch
  (git-fixes CVE-2025-40359 bsc#1255087).
- Update
  patches.suse/x86-CPU-AMD-Add-missing-terminator-for-zen5_rdseed_m.patch
  (git-fixes CVE-2025-68195 bsc#1255259).
- commit 946dbf2</changelog>
  <changelog author="msuchanek@suse.de" date="1768219202">- powerpc/eeh: fix recursive pci_lock_rescan_remove locking in
  EEH event handling (bsc#1253262 ltc#216029).
- commit daa4104</changelog>
  <changelog author="mhocko@suse.com" date="1768219203">- supported.conf: mark ksmbd unsupported
  Based on discussion with Enzo Matsumiya it has tuned out that ksmbd
  module is unsupported but the supported.conf entry is incorrect. Fix
  that.
- commit c800e3f</changelog>
  <changelog author="tiwai@suse.de" date="1768219204">- usb: ohci-nxp: fix device leak on probe failure (git-fixes).
- usb: usb-storage: Maintain minimal modifications to the
  bcdDevice range (git-fixes).
- Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042
  quirk table (stable-fixes).
- drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state()
  (stable-fixes).
- ASoC: bcm: bcm63xx-pcm-whistler: Check return value of
  of_dma_configure() (git-fixes).
- i2c: designware: Disable SMBus interrupts to prevent storms
  from mis-configured firmware (stable-fixes).
- platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to
  VGBS DMI quirks (stable-fixes).
- pinctrl: single: Fix incorrect type for error return variable
  (git-fixes).
- i3c: fix refcount inconsistency in i3c_master_register
  (git-fixes).
- staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE
  parsing (stable-fixes).
- staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie()
  parser (stable-fixes).
- USB: serial: option: move Telit 0x10c7 composition in the
  right place (stable-fixes).
- USB: serial: option: add Telit Cinterion FE910C04 new
  compositions (stable-fixes).
- USB: serial: option: add Foxconn T99W760 (stable-fixes).
- USB: serial: ftdi_sio: match on interface number for jtag
  (stable-fixes).
- usb: usb-storage: No additional quirks need to be added to
  the EL-R12 optical drive (stable-fixes).
- usb: dwc2: fix hang during shutdown if set as peripheral
  (git-fixes).
- usb: xhci: limit run_graceperiod for only usb 3.0 devices
  (stable-fixes).
- usb: typec: ucsi: Handle incorrect num_connectors capability
  (stable-fixes).
- usbip: Fix locking bug in RT-enabled kernels (stable-fixes).
- serial: sprd: Return -EPROBE_DEFER when uart clock is not ready
  (stable-fixes).
- serial: add support of CPCI cards (stable-fixes).
- char: applicom: fix NULL pointer dereference in ac_ioctl
  (stable-fixes).
- iio: adc: ti_am335x_adc: Limit step_avg to valid range for
  gcc complains (stable-fixes).
- fbdev: gbefb: fix to use physical address instead of dma address
  (stable-fixes).
- via_wdt: fix critical boot hang due to unnamed resource
  allocation (stable-fixes).
- ipmi: Fix __scan_channels() failing to rescan channels
  (stable-fixes).
- ipmi: Fix the race between __scan_channels() and
  deliver_response() (stable-fixes).
- reset: fix BIT macro reference (stable-fixes).
- firmware: imx: scu-irq: Init workqueue before request mbox
  channel (stable-fixes).
- HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen
  (stable-fixes).
- mmc: sdhci-msm: Avoid early clock doubling during HS400
  transition (stable-fixes).
- ASoC: qcom: q6apm-dai: set flags to reflect correct operation
  of appl_ptr (git-fixes).
- media: amphion: Remove vpu_vb_is_codecconfig (git-fixes).
- media: verisilicon: Fix CPU stalls on G2 bus error (git-fixes).
- Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE
  (stable-fixes).
- Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV
  (stable-fixes).
- wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840
  tablet (stable-fixes).
- wifi: rtw88: Add USB ID 2001:3329 for D-Link AC13U rev. A1
  (stable-fixes).
- ACPI: property: Use ACPI functions in
  acpi_graph_get_next_endpoint() only (stable-fixes).
- ACPICA: Avoid walking the Namespace if start_node is NULL
  (stable-fixes).
- pinctrl: qcom: msm: Fix deadlock in pinmux configuration
  (stable-fixes).
- platform/x86: acer-wmi: Ignore backlight event (stable-fixes).
- platform/x86/amd: pmc: Add Lenovo Legion Go 2 to pmc quirk list
  (stable-fixes).
- platform/x86/amd/pmc: Add spurious_8042 to Xbox Ally
  (stable-fixes).
- platform/x86: huawei-wmi: add keys for HONOR models
  (stable-fixes).
- HID: elecom: Add support for ELECOM M-XT3URBK (018F)
  (stable-fixes).
- HID: hid-input: Extend Elan ignore battery quirk to USB
  (stable-fixes).
- HID: apple: Add SONiX AK870 PRO to non_apple_keyboards quirk
  list (stable-fixes).
- drm/vmwgfx: Use kref in vmw_bo_dirty (stable-fixes).
- spi: xilinx: increase number of retries before declaring stall
  (stable-fixes).
- spi: imx: keep dma request disabled before dma transfer setup
  (stable-fixes).
- ALSA: usb-audio: Add native DSD quirks for PureAudio DAC series
  (stable-fixes).
- Bluetooth: btrtl: Avoid loading the config file on security
  chips (stable-fixes).
- media: amphion: Make some vpu_v4l2 functions static
  (stable-fixes).
- usb: dwc2: disable platform lowlevel hw resources during
  shutdown (stable-fixes).
- media: amphion: Add a frame flush mode for decoder
  (stable-fixes).
- usb: ohci-nxp: Use helper function devm_clk_get_enabled()
  (stable-fixes).
- drm/tilcdc: request and mapp iomem with devres (stable-fixes).
- media: verisilicon: g2: Use common helpers to compute chroma
  and mv offsets (stable-fixes).
- media: verisilicon: Store chroma and motion vectors offset
  (stable-fixes).
- i3c: master: Inherit DMA masks and parameters from parent device
  (stable-fixes).
- commit bc3be49</changelog>
  <changelog author="tiwai@suse.de" date="1768219205">- pinctrl: single: Fix PIN_CONFIG_BIAS_DISABLE handling
  (stable-fixes).
- Refresh
  patches.suse/pinctrl-single-fix-bias-pull-up-down-handling-in-pin.patch.
- commit bc41b99</changelog>
  <changelog author="tiwai@suse.de" date="1768219206">- drm/amdgpu: Forward VMID reservation errors (git-fixes).
- commit a7344a2</changelog>
  <changelog author="tiwai@suse.de" date="1768219207">- virtio_console: fix order of fields cols and rows
  (stable-fixes).
- commit 0d412d7</changelog>
  <changelog author="tiwai@suse.de" date="1768219208">- drm/sched: Fix race in drm_sched_entity_select_rq() (git-fixes).
- commit d597802</changelog>
  <changelog author="tiwai@suse.de" date="1768219209">- Move out-of-tree patches into the right section
- commit 314797b</changelog>
  <changelog author="petr.pavlu@suse.com" date="1768219210">- tracing: Fix access to trace_event_file (bsc#1254373).
- commit 768b257</changelog>
  <changelog author="dsterba@suse.com" date="1768219211">- bnxt_en: Fix null pointer dereference in bnxt_bs_trace_check_wrap() (CVE-2025-68197 bsc#1255242)
- commit 85b99e2</changelog>
  <changelog author="rgoldwyn@suse.com" date="1768219212">- fuse: fix livelock in synchronous file put from fuseblk workers (CVE-2025-40220 bsc#1254520).
- commit 46a797f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1768219213">- mlx5: Fix default values in create CQ (CVE-2025-68209
  bsc#1255230).
- commit dce9b13</changelog>
  <changelog author="hoyeon.lee@suse.com" date="1768305600">- bpf: Improve program stats run-time calculation (CVE-2025-68742
  bsc#1255707).
- commit 4ed738f</changelog>
  <changelog author="hoyeon.lee@suse.com" date="1768305601">- bpf: Fix invalid prog-&gt;stats access when update_effective_progs
  fails (CVE-2025-68742 bsc#1255707).
- commit 53d4b3c</changelog>
  <changelog author="tiwai@suse.de" date="1768305602">- x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix
  Halo (bsc#1256528).
- x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev
  (bsc#1256528).
- x86/microcode/AMD: Add more known models to entry sign checking
  (bsc#1256528).
- x86/microcode/AMD: Limit Entrysign signature checking to known
  generations (bsc#1256528).
- x86/microcode: Fix Entrysign revision check for Zen1/Naples
  (bsc#1256528).
- x86/microcode/AMD: Add TSA microcode SHAs (bsc#1256528).
- x86/microcode/AMD: Use sha256() instead of init/update/final
  (bsc#1256528).
- x86/microcode/AMD: Clean the cache if update did not load
  microcode (bsc#1256528).
- x86/microcode/AMD: Extend the SHA check to Zen5, block
  loading of any unreleased standalone Zen5 microcode patches
  (bsc#1256528).
- x86/microcode/AMD: Fix __apply_microcode_amd()'s return value
  (bsc#1256528).
- x86/microcode/AMD: Add some forgotten models to the SHA check
  (bsc#1256528).
- x86/microcode/AMD: Load only SHA256-checksummed patches
  (bsc#1256528).
- commit ed14359</changelog>
  <changelog author="tiwai@suse.de" date="1768305603">- x86/microcode/AMD: Select which microcode patch to load
  (bsc#1256528).
- Refresh
  patches.suse/x86-microcode-AMD-Handle-the-case-of-no-BIOS-microcode.patch.
- commit 3b809fe</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1768305604">- mlx5: Fix default values in create CQ (CVE-2025-68209
  bsc#1255230).
- commit e7dee05</changelog>
  <changelog author="jack@suse.cz" date="1768305605">- ext4: use optimized mballoc scanning regardless of inode format
  (bsc#1254378).
- commit aa95fec</changelog>
</package>
<package pkgid="a8b64840b0ae43da48b4646bbc545fc3b0e0b679d20ab64dcd1b72da2744a925" name="kernel-default" arch="src">
  <version epoch="0" ver="6.4.0" rel="150700.53.3.1"/>
  <changelog author="nmorey@suse.com" date="1748865600">- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (git-fixes)
- commit 0defb73</changelog>
  <changelog author="nmorey@suse.com" date="1748865601">- RDMA/cma: Fix hang when cma_netevent_callback fails to queue_work (git-fixes)
- commit 5748d8f</changelog>
  <changelog author="nmorey@suse.com" date="1748865602">- RDMA/rxe: Fix "trying to register non-static key in rxe_qp_do_cleanup" bug (git-fixes)
- commit 40421b4</changelog>
  <changelog author="msuchanek@suse.de" date="1748865603">- powerpc/pseries/iommu: Fix kmemleak in TCE table userspace view
  (jsc#PED-10539 git-fixes).
- commit 66792c6</changelog>
  <changelog author="jgross@suse.com" date="1748865604">- 9p/net: fix improper handling of bogus negative read/write
  replies (bsc#1243077 CVE-2025-37879).
- commit ac0ef56</changelog>
  <changelog author="jgross@suse.com" date="1748865605">- xenbus: Use kref to track req lifetime (bsc#1243541
  CVE-2025-37949).
- commit 0928f39</changelog>
  <changelog author="ailiop@suse.com" date="1748865606">- Squashfs: check return result of sb_min_blocksize (git-fixes).
- commit 6d6e8d7</changelog>
  <changelog author="ailiop@suse.com" date="1748865607">- afs: Make it possible to find the volumes that are using a
  server (git-fixes).
- commit 7d8a054</changelog>
  <changelog author="ailiop@suse.com" date="1748865608">- afs: Fix the server_list to unuse a displaced server rather
  than putting it (git-fixes).
- commit d3c390a</changelog>
  <changelog author="ailiop@suse.com" date="1748865609">- nilfs2: add pointer check for nilfs_direct_propagate()
  (git-fixes).
- commit eac8f96</changelog>
  <changelog author="ailiop@suse.com" date="1748865610">- nilfs2: do not propagate ENOENT error from
  nilfs_btree_propagate() (git-fixes).
- commit 5591e0d</changelog>
  <changelog author="msuchanek@suse.de" date="1748865611">- Remove debug flavor (bsc#1243919).
  This is only released in Leap, and we don't have Leap 15.7
- commit 4ff5661</changelog>
  <changelog author="dwagner@suse.de" date="1748865612">- nvme-pci: acquire cq_poll_lock in nvme_poll_irqdisable
  (git-fixes bsc#1223096).
- nvme-pci: make nvme_pci_npages_prp() __always_inline
  (git-fixes).
- commit 71f2996</changelog>
  <changelog author="pfalcato@suse.de" date="1748865613">- Refresh
  patches.kabi/icmp-prevent-possible-NULL-dereferences-from-icmp_bu.patch.
- commit d0519a5</changelog>
  <changelog author="pfalcato@suse.de" date="1748865614">- Delete
  patches.kabi/ipv4-icmp-Unmask-upper-DSCP-bits-in-icmp_route_looku.patch.
  It turns out
  patches.suse/ipv4-icmp-Unmask-upper-DSCP-bits-in-icmp_route_looku.patch
  does not need the kABI workaround after all, so removing this patch is
  safe.
- commit 983a766</changelog>
  <changelog author="pmladek@suse.com" date="1748865615">- objtool, panic: Disable SMAP in __stack_chk_fail()
  (bsc#1243963).
- commit 3d95273</changelog>
  <changelog author="pfalcato@suse.de" date="1748865616">- mm/huge_memory: fix dereferencing invalid pmd migration entry
  (CVE-2025-37958 bsc#1243539).
- commit bbe0b9a</changelog>
  <changelog author="pfalcato@suse.de" date="1748865617">- memblock: Accept allocated memory before use in
  memblock_double_array() (CVE-2025-37960 bsc#1243519).
- commit a66a796</changelog>
  <changelog author="msuchanek@suse.de" date="1748865618">- KVM: PPC: Book3S HV: Fix IRQ map warnings with XICS on pSeries
  KVM Guest (bsc#1242205 ltc#212592).
- commit e5a2e22</changelog>
  <changelog author="jgross@suse.com" date="1748952000">- blacklist.conf: add 75ad02318af2 ("Xen/swiotlb: mark xen_swiotlb_fixup() __init")
- Delete patches.suse/Xen-swiotlb-mark-xen_swiotlb_fixup-__init.patch.
- commit c256f05</changelog>
</package>
<package pkgid="58c1150745f293be4ccd419be3b744f1897ea1e981de2497caae54778005ee52" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.53.3.1"/>
  <changelog author="nmorey@suse.com" date="1748865600">- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (git-fixes)
- commit 0defb73</changelog>
  <changelog author="nmorey@suse.com" date="1748865601">- RDMA/cma: Fix hang when cma_netevent_callback fails to queue_work (git-fixes)
- commit 5748d8f</changelog>
  <changelog author="nmorey@suse.com" date="1748865602">- RDMA/rxe: Fix "trying to register non-static key in rxe_qp_do_cleanup" bug (git-fixes)
- commit 40421b4</changelog>
  <changelog author="msuchanek@suse.de" date="1748865603">- powerpc/pseries/iommu: Fix kmemleak in TCE table userspace view
  (jsc#PED-10539 git-fixes).
- commit 66792c6</changelog>
  <changelog author="jgross@suse.com" date="1748865604">- 9p/net: fix improper handling of bogus negative read/write
  replies (bsc#1243077 CVE-2025-37879).
- commit ac0ef56</changelog>
  <changelog author="jgross@suse.com" date="1748865605">- xenbus: Use kref to track req lifetime (bsc#1243541
  CVE-2025-37949).
- commit 0928f39</changelog>
  <changelog author="ailiop@suse.com" date="1748865606">- Squashfs: check return result of sb_min_blocksize (git-fixes).
- commit 6d6e8d7</changelog>
  <changelog author="ailiop@suse.com" date="1748865607">- afs: Make it possible to find the volumes that are using a
  server (git-fixes).
- commit 7d8a054</changelog>
  <changelog author="ailiop@suse.com" date="1748865608">- afs: Fix the server_list to unuse a displaced server rather
  than putting it (git-fixes).
- commit d3c390a</changelog>
  <changelog author="ailiop@suse.com" date="1748865609">- nilfs2: add pointer check for nilfs_direct_propagate()
  (git-fixes).
- commit eac8f96</changelog>
  <changelog author="ailiop@suse.com" date="1748865610">- nilfs2: do not propagate ENOENT error from
  nilfs_btree_propagate() (git-fixes).
- commit 5591e0d</changelog>
  <changelog author="msuchanek@suse.de" date="1748865611">- Remove debug flavor (bsc#1243919).
  This is only released in Leap, and we don't have Leap 15.7
- commit 4ff5661</changelog>
  <changelog author="dwagner@suse.de" date="1748865612">- nvme-pci: acquire cq_poll_lock in nvme_poll_irqdisable
  (git-fixes bsc#1223096).
- nvme-pci: make nvme_pci_npages_prp() __always_inline
  (git-fixes).
- commit 71f2996</changelog>
  <changelog author="pfalcato@suse.de" date="1748865613">- Refresh
  patches.kabi/icmp-prevent-possible-NULL-dereferences-from-icmp_bu.patch.
- commit d0519a5</changelog>
  <changelog author="pfalcato@suse.de" date="1748865614">- Delete
  patches.kabi/ipv4-icmp-Unmask-upper-DSCP-bits-in-icmp_route_looku.patch.
  It turns out
  patches.suse/ipv4-icmp-Unmask-upper-DSCP-bits-in-icmp_route_looku.patch
  does not need the kABI workaround after all, so removing this patch is
  safe.
- commit 983a766</changelog>
  <changelog author="pmladek@suse.com" date="1748865615">- objtool, panic: Disable SMAP in __stack_chk_fail()
  (bsc#1243963).
- commit 3d95273</changelog>
  <changelog author="pfalcato@suse.de" date="1748865616">- mm/huge_memory: fix dereferencing invalid pmd migration entry
  (CVE-2025-37958 bsc#1243539).
- commit bbe0b9a</changelog>
  <changelog author="pfalcato@suse.de" date="1748865617">- memblock: Accept allocated memory before use in
  memblock_double_array() (CVE-2025-37960 bsc#1243519).
- commit a66a796</changelog>
  <changelog author="msuchanek@suse.de" date="1748865618">- KVM: PPC: Book3S HV: Fix IRQ map warnings with XICS on pSeries
  KVM Guest (bsc#1242205 ltc#212592).
- commit e5a2e22</changelog>
  <changelog author="jgross@suse.com" date="1748952000">- blacklist.conf: add 75ad02318af2 ("Xen/swiotlb: mark xen_swiotlb_fixup() __init")
- Delete patches.suse/Xen-swiotlb-mark-xen_swiotlb_fixup-__init.patch.
- commit c256f05</changelog>
</package>
<package pkgid="819213652fa72ac91227ae77afb006ab0f786d019e40a056bc7a7f2f5dff48fc" name="kernel-default" arch="src">
  <version epoch="0" ver="6.4.0" rel="150700.53.31.1"/>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/ALSA-hda-Fix-missing-pointer-check-in-hda_component_.patch
  (git-fixes CVE-2025-40097 bsc#1252900).
- Update
  patches.suse/ASoC-stm32-sai-fix-OF-node-leak-on-probe.patch
  (git-fixes CVE-2025-71081 bsc#1256609).
- Update
  patches.suse/KEYS-trusted-Fix-a-memory-leak-in-tpm2_load_cmd.patch
  (git-fixes CVE-2025-71147 bsc#1257158).
- Update
  patches.suse/btrfs-fix-adding-block-group-to-a-reclaim-list-and-t.patch
  (git-fixes CVE-2024-42103 bsc#1228490).
- Update
  patches.suse/btrfs-fix-invalid-inode-pointer-dereferences-during-.patch
  (git-fixes CVE-2025-38243 bsc#1246184).
- Update
  patches.suse/drm-stm-ltdc-fix-late-dereference-check.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-53714
  bsc#1254465).
- Update
  patches.suse/drm-ttm-Avoid-NULL-pointer-deref-for-evicted-BOs.patch
  (git-fixes CVE-2025-71083 bsc#1256610).
- Update
  patches.suse/ftrace-Also-allocate-and-copy-hash-for-reading-of-filter-f.patch
  (bsc#1250032 CVE-2025-39813 CVE-2025-39689 bsc#1249307).
- Update
  patches.suse/hwmon-w83791d-Convert-macros-to-functions-to-avoid-T.patch
  (git-fixes CVE-2025-71111 bsc#1256728).
- Update
  patches.suse/ipmi-Rework-user-message-limit-handling.patch
  (git-fixes CVE-2025-40202 bsc#1253451).
- Update
  patches.suse/media-adv7842-Avoid-possible-out-of-bounds-array-acc.patch
  (git-fixes CVE-2025-71136 bsc#1256759).
- Update
  patches.suse/media-dvb-usb-dtv5100-fix-out-of-bounds-in-dtv5100_i.patch
  (git-fixes CVE-2025-68819 bsc#1256664).
- Update
  patches.suse/media-vidtv-initialize-local-pointers-upon-transfer-.patch
  (git-fixes CVE-2025-68808 bsc#1256682).
- Update
  patches.suse/perf-x86-intel-Fix-crash-in-icl_update_topdown_event.patch
  (git-fixes CVE-2025-38322 bsc#1246447).
- Update
  patches.suse/platform-chrome-cros_ec_ishtp-Fix-UAF-after-unbindin.patch
  (git-fixes CVE-2025-68804 bsc#1256617).
- Update
  patches.suse/powerpc-64s-slb-Fix-SLB-multihit-issue-during-SLB-preload.patch
  (bac#1236022 ltc#211187 CVE-2025-71078 bsc#1256616).
- Update
  patches.suse/smb-client-fix-warning-when-reconnecting-channel.patch
  (git-fixes CVE-2025-38379 bsc#1247030).
- Update
  patches.suse/tcp_bpf-Call-sk_msg_free-when-tcp_bpf_send_verdict-f.patch
  (bsc#1250705 CVE-2025-39913).
- Update
  patches.suse/trace-fgraph-Fix-the-warning-caused-by-missing-unregister-.patch
  (bsc#1248211 CVE-2025-38539 CVE-2025-39829 bsc#1250082).
- Update
  patches.suse/usb-dwc3-fix-fault-at-system-suspend-if-device-was-a.patch
  (git-fixes CVE-2024-53070 bsc#1233563).
- Update
  patches.suse/usb-typec-ucsi-glink-fix-off-by-one-in-connector_sta.patch
  (git-fixes CVE-2024-53149 bsc#1234842).
- Update
  patches.suse/usb-xhci-Fix-invalid-pointer-dereference-in-Etron-wo.patch
  (git-fixes CVE-2025-37813 bsc#1242909).
- Update
  patches.suse/x86-microcode-AMD-Fix-__apply_microcode_amd-s-return.patch
  (bsc#1256528 CVE-2025-22047 bsc#1241437).
- commit fbc3d71</changelog>
  <changelog author="jslaby@suse.cz" date="1770033601">- x86/fpu: Clear XSTATE_BV in guest XSAVE state whenever XFD[i]=1
  (CVE-2026-23005 bsc#1257245).
- commit 4fcc2d5</changelog>
  <changelog author="tiwai@suse.de" date="1770033602">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit b3a8e60</changelog>
  <changelog author="rgoldwyn@suse.com" date="1770033603">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit 16880ae</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033604">- smb: change return type of cached_dir_lease_break() to bool
  (git-fixes).
- commit da8604d</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033605">- cifs: add new field to track the last access time of cfid
  (git-fixes).
- commit 7328aa8</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033606">- smb: client: update cfid-&gt;last_access_time in
  open_cached_dir_by_dentry() (git-fixes).
- commit 1962196</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033607">- smb: client: remove unused fid_lock (git-fixes).
- commit ed3cf07</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033608">- smb: improve directory cache reuse for readdir operations
  (bsc#1252712).
- commit 20c0243</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033609">- scripts/python/git_sort/git_sort.yaml: add cifs for-next repository
- commit 0d24c51</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033610">- smb: client: split cached_fid bitfields to avoid shared-byte
  RMW races (bsc#1250748,bsc#1257154).
- commit e7ce4ba</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033611">- smb: client: ensure open_cached_dir_by_dentry() only returns
  valid cfid (git-fixes).
- commit d1feafe</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033612">- smb: client: short-circuit in open_cached_dir_by_dentry()
  if !dentry (git-fixes).
- commit 82d6911</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1770120000">- bpf/selftests: test_select_reuseport_kern: Remove unused header
  (bsc#1257603).
- commit 3124f7b</changelog>
  <changelog author="vbabka@suse.cz" date="1770120001">- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP
  allocations (bsc#1254447 bsc#1253087).
- commit e90ec28</changelog>
  <changelog author="rgoldwyn@suse.com" date="1770120002">- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CVE-2026-22984 bsc#1257217).
- commit 7474e34</changelog>
  <changelog author="rgoldwyn@suse.com" date="1770120003">- libceph: return the handler error from mon_handle_auth_done() (CVE-2026-22992 bsc#1257218).
- commit 518f909</changelog>
  <changelog author="rgoldwyn@suse.com" date="1770120004">- libceph: make free_choose_arg_map() resilient to partial allocation (CVE-2026-22991 bsc#1257220).
- commit 2e431bc</changelog>
  <changelog author="rgoldwyn@suse.com" date="1770120005">- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CVE-2026-22990 bsc#1257221).
- commit 0a3e886</changelog>
  <changelog author="tiwai@suse.de" date="1770120006">- Move out-of-tree rt patch into the right section
- commit 125c148</changelog>
</package>
<package pkgid="c561004d700a76aea3050c0bf6d68190c8a088bea33cc726960d6ced6e237051" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.53.31.1"/>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/ALSA-hda-Fix-missing-pointer-check-in-hda_component_.patch
  (git-fixes CVE-2025-40097 bsc#1252900).
- Update
  patches.suse/ASoC-stm32-sai-fix-OF-node-leak-on-probe.patch
  (git-fixes CVE-2025-71081 bsc#1256609).
- Update
  patches.suse/KEYS-trusted-Fix-a-memory-leak-in-tpm2_load_cmd.patch
  (git-fixes CVE-2025-71147 bsc#1257158).
- Update
  patches.suse/btrfs-fix-adding-block-group-to-a-reclaim-list-and-t.patch
  (git-fixes CVE-2024-42103 bsc#1228490).
- Update
  patches.suse/btrfs-fix-invalid-inode-pointer-dereferences-during-.patch
  (git-fixes CVE-2025-38243 bsc#1246184).
- Update
  patches.suse/drm-stm-ltdc-fix-late-dereference-check.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-53714
  bsc#1254465).
- Update
  patches.suse/drm-ttm-Avoid-NULL-pointer-deref-for-evicted-BOs.patch
  (git-fixes CVE-2025-71083 bsc#1256610).
- Update
  patches.suse/ftrace-Also-allocate-and-copy-hash-for-reading-of-filter-f.patch
  (bsc#1250032 CVE-2025-39813 CVE-2025-39689 bsc#1249307).
- Update
  patches.suse/hwmon-w83791d-Convert-macros-to-functions-to-avoid-T.patch
  (git-fixes CVE-2025-71111 bsc#1256728).
- Update
  patches.suse/ipmi-Rework-user-message-limit-handling.patch
  (git-fixes CVE-2025-40202 bsc#1253451).
- Update
  patches.suse/media-adv7842-Avoid-possible-out-of-bounds-array-acc.patch
  (git-fixes CVE-2025-71136 bsc#1256759).
- Update
  patches.suse/media-dvb-usb-dtv5100-fix-out-of-bounds-in-dtv5100_i.patch
  (git-fixes CVE-2025-68819 bsc#1256664).
- Update
  patches.suse/media-vidtv-initialize-local-pointers-upon-transfer-.patch
  (git-fixes CVE-2025-68808 bsc#1256682).
- Update
  patches.suse/perf-x86-intel-Fix-crash-in-icl_update_topdown_event.patch
  (git-fixes CVE-2025-38322 bsc#1246447).
- Update
  patches.suse/platform-chrome-cros_ec_ishtp-Fix-UAF-after-unbindin.patch
  (git-fixes CVE-2025-68804 bsc#1256617).
- Update
  patches.suse/powerpc-64s-slb-Fix-SLB-multihit-issue-during-SLB-preload.patch
  (bac#1236022 ltc#211187 CVE-2025-71078 bsc#1256616).
- Update
  patches.suse/smb-client-fix-warning-when-reconnecting-channel.patch
  (git-fixes CVE-2025-38379 bsc#1247030).
- Update
  patches.suse/tcp_bpf-Call-sk_msg_free-when-tcp_bpf_send_verdict-f.patch
  (bsc#1250705 CVE-2025-39913).
- Update
  patches.suse/trace-fgraph-Fix-the-warning-caused-by-missing-unregister-.patch
  (bsc#1248211 CVE-2025-38539 CVE-2025-39829 bsc#1250082).
- Update
  patches.suse/usb-dwc3-fix-fault-at-system-suspend-if-device-was-a.patch
  (git-fixes CVE-2024-53070 bsc#1233563).
- Update
  patches.suse/usb-typec-ucsi-glink-fix-off-by-one-in-connector_sta.patch
  (git-fixes CVE-2024-53149 bsc#1234842).
- Update
  patches.suse/usb-xhci-Fix-invalid-pointer-dereference-in-Etron-wo.patch
  (git-fixes CVE-2025-37813 bsc#1242909).
- Update
  patches.suse/x86-microcode-AMD-Fix-__apply_microcode_amd-s-return.patch
  (bsc#1256528 CVE-2025-22047 bsc#1241437).
- commit fbc3d71</changelog>
  <changelog author="jslaby@suse.cz" date="1770033601">- x86/fpu: Clear XSTATE_BV in guest XSAVE state whenever XFD[i]=1
  (CVE-2026-23005 bsc#1257245).
- commit 4fcc2d5</changelog>
  <changelog author="tiwai@suse.de" date="1770033602">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit b3a8e60</changelog>
  <changelog author="rgoldwyn@suse.com" date="1770033603">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit 16880ae</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033604">- smb: change return type of cached_dir_lease_break() to bool
  (git-fixes).
- commit da8604d</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033605">- cifs: add new field to track the last access time of cfid
  (git-fixes).
- commit 7328aa8</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033606">- smb: client: update cfid-&gt;last_access_time in
  open_cached_dir_by_dentry() (git-fixes).
- commit 1962196</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033607">- smb: client: remove unused fid_lock (git-fixes).
- commit ed3cf07</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033608">- smb: improve directory cache reuse for readdir operations
  (bsc#1252712).
- commit 20c0243</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033609">- scripts/python/git_sort/git_sort.yaml: add cifs for-next repository
- commit 0d24c51</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033610">- smb: client: split cached_fid bitfields to avoid shared-byte
  RMW races (bsc#1250748,bsc#1257154).
- commit e7ce4ba</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033611">- smb: client: ensure open_cached_dir_by_dentry() only returns
  valid cfid (git-fixes).
- commit d1feafe</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033612">- smb: client: short-circuit in open_cached_dir_by_dentry()
  if !dentry (git-fixes).
- commit 82d6911</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1770120000">- bpf/selftests: test_select_reuseport_kern: Remove unused header
  (bsc#1257603).
- commit 3124f7b</changelog>
  <changelog author="vbabka@suse.cz" date="1770120001">- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP
  allocations (bsc#1254447 bsc#1253087).
- commit e90ec28</changelog>
  <changelog author="rgoldwyn@suse.com" date="1770120002">- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CVE-2026-22984 bsc#1257217).
- commit 7474e34</changelog>
  <changelog author="rgoldwyn@suse.com" date="1770120003">- libceph: return the handler error from mon_handle_auth_done() (CVE-2026-22992 bsc#1257218).
- commit 518f909</changelog>
  <changelog author="rgoldwyn@suse.com" date="1770120004">- libceph: make free_choose_arg_map() resilient to partial allocation (CVE-2026-22991 bsc#1257220).
- commit 2e431bc</changelog>
  <changelog author="rgoldwyn@suse.com" date="1770120005">- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CVE-2026-22990 bsc#1257221).
- commit 0a3e886</changelog>
  <changelog author="tiwai@suse.de" date="1770120006">- Move out-of-tree rt patch into the right section
- commit 125c148</changelog>
</package>
<package pkgid="b399a52f0c19a189545221309e1b113b07e7f0e96f34c0dfd2efa698046ee53d" name="kernel-default" arch="src">
  <version epoch="0" ver="6.4.0" rel="150700.53.34.1"/>
  <changelog author="mwilck@suse.com" date="1773057600">- dm: clear cloned request bio pointer when last clone bio
  completes (git-fixes).
- commit f2572c8</changelog>
  <changelog author="mwilck@suse.com" date="1773057601">- dm mpath: make pg_init_delay_msecs settable (git-fixes).
- commit b5dcc03</changelog>
  <changelog author="ohering@suse.de" date="1773057602">- Add bugnumber to existing mana changes (bsc#1245728 bsc#1251971 bsc#1252266 bsc#1257466)
- net: mana: Ring doorbell at 4 CQ wraparounds (git-fixes).
- PCI: hv: remove unnecessary module_init/exit functions (git-fixes).
- PCI: hv: Remove unused field pci_bus in struct hv_pcibus_device (git-fixes).
- RDMA/mana_ib: Add device-memory support (git-fixes).
- RDMA/mana_ib: Take CQ type from the device type (git-fixes).
- net: mana: Implement ndo_tx_timeout and serialize queue resets per port (bsc#1257472).
- Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump() (git-fixes).
- Drivers: hv: use kmalloc_array() instead of kmalloc() (git-fixes).
- Drivers: hv: Use kmalloc_array() instead of kmalloc() (git-fixes).
- Drivers: hv: Resolve ambiguity in hypervisor version log (git-fixes).
- Drivers: hv: fix missing kernel-doc description for 'size' in request_arr_init() (git-fixes).
- Drivers: hv: remove stale comment (git-fixes).
- net: mana: Support HW link state events (bsc#1253049).
- Drivers: hv: vmbus: Fix typos in vmbus_drv.c (git-fixes).
- Drivers: hv: vmbus: Fix sysfs output format for ring buffer index (git-fixes).
- Drivers: hv: vmbus: Clean up sscanf format specifier in target_cpu_store() (git-fixes).
- Drivers: hv: util: Cosmetic changes for hv_utils_transport.c (git-fixes).
- scsi: storvsc: Remove redundant ternary operators (git-fixes).
- tools/hv: fcopy: Fix irregularities with size of ring buffer (git-fixes).
- x86/hyperv: Fix usage of cpu_online_mask to get valid cpu (git-fixes).
- PCI: hv: Fix warnings for missing export.h header inclusion (git-fixes).
- clocksource: hyper-v: Fix warnings for missing export.h header inclusion (git-fixes).
- x86/hyperv: Fix warnings for missing export.h header inclusion (git-fixes).
- Drivers: hv: Fix the check for HYPERVISOR_CALLBACK_VECTOR (git-fixes).
- Drivers: hv: vmbus: Add comments about races with "channels" sysfs dir (git-fixes).
- PCI: hv: Remove unnecessary flex array in struct pci_packet (git-fixes).
- Drivers: hv: Use kzalloc for panic page allocation (git-fixes).
- uio_hv_generic: Align ring size to system page (git-fixes).
- uio_hv_generic: Use correct size for interrupt and monitor pages (git-fixes).
- Drivers: hv: vmbus: Introduce hv_get_vmbus_root_device() (git-fixes).
- Drivers: hv: vmbus: Get the IRQ number from DeviceTree (git-fixes).
- tools: hv: Enable debug logs for hv_kvp_daemon (git-fixes).
- PCI: hv: Correct a comment (git-fixes).
- x86/hyperv: fix an indentation issue in mshyperv.h (git-fixes).
- x86/hyperv: Use named operands in inline asm (git-fixes).
- commit fbd3c33</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1773144000">- selftests/bpf: add verifier sign extension bound computation
  tests (git-fixes).
- bpf: verifier improvement in 32bit shift sign extension pattern
  (git-fixes).
- commit cbb7102</changelog>
  <changelog author="mkoutny@suse.com" date="1773144001">- cgroup: Show # of subsystem CSSes in cgroup.stat (bsc#1256564
  bsc#1259130).
- commit e9ca9e6</changelog>
  <changelog author="mkoutny@suse.com" date="1773144002">- kabi: cgroup.stat fixup (bsc#1256564 bsc#1259130).
- commit 6ccb250</changelog>
  <changelog author="hare@suse.de" date="1773144003">- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (bsc#1254306).
- commit 165c4b3</changelog>
  <changelog author="hare@suse.de" date="1773144004">- Update config files (bsc#1254306).
- commit 3c7bab7</changelog>
  <changelog author="hare@suse.de" date="1773230400">- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (bsc#1254306).
- commit 43c578c</changelog>
  <changelog author="hare@suse.de" date="1773230401">- Update config files (bsc#1254306).
- commit 6305722</changelog>
  <changelog author="hare@suse.de" date="1773230402">- s390/ipl: Clear SBP flag when bootprog is set (bsc#1258176).
- commit bad7291</changelog>
  <changelog author="mkoutny@suse.com" date="1773230403">- cgroup: Fix incorrect WARN_ON_ONCE() in css_release_work_fn()
  (bsc#1256564 bsc#1259130).
- commit af50ef7</changelog>
  <changelog author="hare@suse.de" date="1773230404">- s390/ctcm: Fix double-kfree (CVE-2025-40253 bsc#1255084).
- commit c330474</changelog>
  <changelog author="hare@suse.de" date="1773230405">- s390/ctcm: Fix double-kfree (CVE-2025-40253 bsc#1255084).
- commit a33e581</changelog>
  <changelog author="nmorey@suse.com" date="1773316800">- RDMA/rtrs-clt: For conn rejection use actual err number (git-fixes)
- commit c91403f</changelog>
  <changelog author="tabraham@suse.com" date="1773316801">- scsi: mpi3mr: Event processing debug improvement (bsc#1251186,
  bsc#1258832).
- commit 4fde182</changelog>
  <changelog author="ddiss@suse.de" date="1773403200">- apparmor: fix race between freeing data and fs accessing it
  (bsc#1258849).
- apparmor: fix race on rawdata dereference (bsc#1258849).
- apparmor: fix differential encoding verification (bsc#1258849).
- apparmor: fix unprivileged local user can do privileged policy
  management (bsc#1258849).
- apparmor: Fix double free of ns_name in aa_replace_profiles()
  (bsc#1258849).
- apparmor: fix missing bounds check on DEFAULT table in
  verify_dfa() (bsc#1258849).
- apparmor: fix side-effect bug in match_char() macro usage
  (bsc#1258849).
- apparmor: fix: limit the number of levels of policy namespaces
  (bsc#1258849).
- apparmor: replace recursive profile removal with iterative
  approach (bsc#1258849).
- apparmor: fix memory leak in verify_header (bsc#1258849).
- apparmor: validate DFA start states are in bounds in unpack_pdb
  (bsc#1258849).
- commit 9f31a2e</changelog>
  <changelog author="tiwai@suse.de" date="1773403201">- ACPI: OSL: fix __iomem type on return from
  acpi_os_map_generic_address() (git-fixes).
- can: hi311x: hi3110_open(): add check for hi3110_power_enable()
  return value (git-fixes).
- net: usb: lan78xx: fix TX byte statistics for small packets
  (git-fixes).
- net: usb: lan78xx: fix silent drop of packets with checksum
  errors (git-fixes).
- qmi_wwan: allow max_mtu above hard_mtu to control rx_urb_size
  (git-fixes).
- remoteproc: sysmon: Correct subsys_name_len type in QMI request
  (git-fixes).
- commit 5d32ac9</changelog>
  <changelog author="ohering@suse.de" date="1773403202">- Add bugnumber to existing mana changes (bsc#1259558 bsc#1259580).
- Drivers: hv: Fix warnings for missing export.h header inclusion (git-fixes).
- Drivers: hv: Allocate interrupt and monitor pages aligned to system page boundary (git-fixes).
- Drivers: hv: Fix bad pointer dereference in hv_get_partition_id (git-fixes).
- hyperv: Convert hypercall statuses to linux error codes (git-fixes).
- drivers/hv: add CPU offlining support (git-fixes).
- drivers/hv: introduce vmbus_channel_set_cpu() (git-fixes).
- cpu: export lockdep_assert_cpus_held() (git-fixes).
- hyperv: Move arch/x86/hyperv/hv_proc.c to drivers/hv (git-fixes).
- hyperv: Move hv_current_partition_id to arch-generic code (git-fixes).
- commit 7492ec1</changelog>
  <changelog author="pfalcato@suse.de" date="1773403203">- sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT
  (CVE-2026-23125 bsc#1258293).
- commit 6e65546</changelog>
</package>
<package pkgid="0dd26fc73cd35a71219ae3ebc0c8012b808258de0ddd95ff1a47525839e33eaa" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.53.34.1"/>
  <changelog author="mwilck@suse.com" date="1773057600">- dm: clear cloned request bio pointer when last clone bio
  completes (git-fixes).
- commit f2572c8</changelog>
  <changelog author="mwilck@suse.com" date="1773057601">- dm mpath: make pg_init_delay_msecs settable (git-fixes).
- commit b5dcc03</changelog>
  <changelog author="ohering@suse.de" date="1773057602">- Add bugnumber to existing mana changes (bsc#1245728 bsc#1251971 bsc#1252266 bsc#1257466)
- net: mana: Ring doorbell at 4 CQ wraparounds (git-fixes).
- PCI: hv: remove unnecessary module_init/exit functions (git-fixes).
- PCI: hv: Remove unused field pci_bus in struct hv_pcibus_device (git-fixes).
- RDMA/mana_ib: Add device-memory support (git-fixes).
- RDMA/mana_ib: Take CQ type from the device type (git-fixes).
- net: mana: Implement ndo_tx_timeout and serialize queue resets per port (bsc#1257472).
- Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump() (git-fixes).
- Drivers: hv: use kmalloc_array() instead of kmalloc() (git-fixes).
- Drivers: hv: Use kmalloc_array() instead of kmalloc() (git-fixes).
- Drivers: hv: Resolve ambiguity in hypervisor version log (git-fixes).
- Drivers: hv: fix missing kernel-doc description for 'size' in request_arr_init() (git-fixes).
- Drivers: hv: remove stale comment (git-fixes).
- net: mana: Support HW link state events (bsc#1253049).
- Drivers: hv: vmbus: Fix typos in vmbus_drv.c (git-fixes).
- Drivers: hv: vmbus: Fix sysfs output format for ring buffer index (git-fixes).
- Drivers: hv: vmbus: Clean up sscanf format specifier in target_cpu_store() (git-fixes).
- Drivers: hv: util: Cosmetic changes for hv_utils_transport.c (git-fixes).
- scsi: storvsc: Remove redundant ternary operators (git-fixes).
- tools/hv: fcopy: Fix irregularities with size of ring buffer (git-fixes).
- x86/hyperv: Fix usage of cpu_online_mask to get valid cpu (git-fixes).
- PCI: hv: Fix warnings for missing export.h header inclusion (git-fixes).
- clocksource: hyper-v: Fix warnings for missing export.h header inclusion (git-fixes).
- x86/hyperv: Fix warnings for missing export.h header inclusion (git-fixes).
- Drivers: hv: Fix the check for HYPERVISOR_CALLBACK_VECTOR (git-fixes).
- Drivers: hv: vmbus: Add comments about races with "channels" sysfs dir (git-fixes).
- PCI: hv: Remove unnecessary flex array in struct pci_packet (git-fixes).
- Drivers: hv: Use kzalloc for panic page allocation (git-fixes).
- uio_hv_generic: Align ring size to system page (git-fixes).
- uio_hv_generic: Use correct size for interrupt and monitor pages (git-fixes).
- Drivers: hv: vmbus: Introduce hv_get_vmbus_root_device() (git-fixes).
- Drivers: hv: vmbus: Get the IRQ number from DeviceTree (git-fixes).
- tools: hv: Enable debug logs for hv_kvp_daemon (git-fixes).
- PCI: hv: Correct a comment (git-fixes).
- x86/hyperv: fix an indentation issue in mshyperv.h (git-fixes).
- x86/hyperv: Use named operands in inline asm (git-fixes).
- commit fbd3c33</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1773144000">- selftests/bpf: add verifier sign extension bound computation
  tests (git-fixes).
- bpf: verifier improvement in 32bit shift sign extension pattern
  (git-fixes).
- commit cbb7102</changelog>
  <changelog author="mkoutny@suse.com" date="1773144001">- cgroup: Show # of subsystem CSSes in cgroup.stat (bsc#1256564
  bsc#1259130).
- commit e9ca9e6</changelog>
  <changelog author="mkoutny@suse.com" date="1773144002">- kabi: cgroup.stat fixup (bsc#1256564 bsc#1259130).
- commit 6ccb250</changelog>
  <changelog author="hare@suse.de" date="1773144003">- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (bsc#1254306).
- commit 165c4b3</changelog>
  <changelog author="hare@suse.de" date="1773144004">- Update config files (bsc#1254306).
- commit 3c7bab7</changelog>
  <changelog author="hare@suse.de" date="1773230400">- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (bsc#1254306).
- commit 43c578c</changelog>
  <changelog author="hare@suse.de" date="1773230401">- Update config files (bsc#1254306).
- commit 6305722</changelog>
  <changelog author="hare@suse.de" date="1773230402">- s390/ipl: Clear SBP flag when bootprog is set (bsc#1258176).
- commit bad7291</changelog>
  <changelog author="mkoutny@suse.com" date="1773230403">- cgroup: Fix incorrect WARN_ON_ONCE() in css_release_work_fn()
  (bsc#1256564 bsc#1259130).
- commit af50ef7</changelog>
  <changelog author="hare@suse.de" date="1773230404">- s390/ctcm: Fix double-kfree (CVE-2025-40253 bsc#1255084).
- commit c330474</changelog>
  <changelog author="hare@suse.de" date="1773230405">- s390/ctcm: Fix double-kfree (CVE-2025-40253 bsc#1255084).
- commit a33e581</changelog>
  <changelog author="nmorey@suse.com" date="1773316800">- RDMA/rtrs-clt: For conn rejection use actual err number (git-fixes)
- commit c91403f</changelog>
  <changelog author="tabraham@suse.com" date="1773316801">- scsi: mpi3mr: Event processing debug improvement (bsc#1251186,
  bsc#1258832).
- commit 4fde182</changelog>
  <changelog author="ddiss@suse.de" date="1773403200">- apparmor: fix race between freeing data and fs accessing it
  (bsc#1258849).
- apparmor: fix race on rawdata dereference (bsc#1258849).
- apparmor: fix differential encoding verification (bsc#1258849).
- apparmor: fix unprivileged local user can do privileged policy
  management (bsc#1258849).
- apparmor: Fix double free of ns_name in aa_replace_profiles()
  (bsc#1258849).
- apparmor: fix missing bounds check on DEFAULT table in
  verify_dfa() (bsc#1258849).
- apparmor: fix side-effect bug in match_char() macro usage
  (bsc#1258849).
- apparmor: fix: limit the number of levels of policy namespaces
  (bsc#1258849).
- apparmor: replace recursive profile removal with iterative
  approach (bsc#1258849).
- apparmor: fix memory leak in verify_header (bsc#1258849).
- apparmor: validate DFA start states are in bounds in unpack_pdb
  (bsc#1258849).
- commit 9f31a2e</changelog>
  <changelog author="tiwai@suse.de" date="1773403201">- ACPI: OSL: fix __iomem type on return from
  acpi_os_map_generic_address() (git-fixes).
- can: hi311x: hi3110_open(): add check for hi3110_power_enable()
  return value (git-fixes).
- net: usb: lan78xx: fix TX byte statistics for small packets
  (git-fixes).
- net: usb: lan78xx: fix silent drop of packets with checksum
  errors (git-fixes).
- qmi_wwan: allow max_mtu above hard_mtu to control rx_urb_size
  (git-fixes).
- remoteproc: sysmon: Correct subsys_name_len type in QMI request
  (git-fixes).
- commit 5d32ac9</changelog>
  <changelog author="ohering@suse.de" date="1773403202">- Add bugnumber to existing mana changes (bsc#1259558 bsc#1259580).
- Drivers: hv: Fix warnings for missing export.h header inclusion (git-fixes).
- Drivers: hv: Allocate interrupt and monitor pages aligned to system page boundary (git-fixes).
- Drivers: hv: Fix bad pointer dereference in hv_get_partition_id (git-fixes).
- hyperv: Convert hypercall statuses to linux error codes (git-fixes).
- drivers/hv: add CPU offlining support (git-fixes).
- drivers/hv: introduce vmbus_channel_set_cpu() (git-fixes).
- cpu: export lockdep_assert_cpus_held() (git-fixes).
- hyperv: Move arch/x86/hyperv/hv_proc.c to drivers/hv (git-fixes).
- hyperv: Move hv_current_partition_id to arch-generic code (git-fixes).
- commit 7492ec1</changelog>
  <changelog author="pfalcato@suse.de" date="1773403203">- sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT
  (CVE-2026-23125 bsc#1258293).
- commit 6e65546</changelog>
</package>
<package pkgid="0840567c551909052035d825e8d728123a14352750056710ee733a024fd4ff59" name="kernel-default" arch="src">
  <version epoch="0" ver="6.4.0" rel="150700.53.37.1"/>
  <changelog author="henrique.carvalho@suse.com" date="1775131200">- smb: client: fix krb5 mount with username option (git-fixes).
- commit 0e79d63</changelog>
  <changelog author="tiwai@suse.de" date="1775217600">- net/x25: Fix overflow when accumulating packets (git-fixes).
- net/x25: Fix potential double free of skb (git-fixes).
- Bluetooth: SMP: derive legacy responder STK authentication
  from MITM state (git-fixes).
- Bluetooth: SMP: force responder MITM requirements before
  building the pairing response (git-fixes).
- Bluetooth: MGMT: validate mesh send advertising payload length
  (git-fixes).
- Bluetooth: hci_event: fix potential UAF in
  hci_le_remote_conn_param_req_evt (git-fixes).
- Bluetooth: MGMT: validate LTK enc_size on load (git-fixes).
- Bluetooth: SCO: fix race conditions in sco_sock_connect()
  (git-fixes).
- Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if
  immediate (git-fixes).
- NFC: pn533: bound the UART receive buffer (git-fixes).
- wifi: iwlwifi: mvm: fix potential out-of-bounds read in
  iwl_mvm_nd_match_info_handler() (git-fixes).
- wifi: wilc1000: fix u8 overflow in SSID scan buffer size
  calculation (git-fixes).
- ASoC: ep93xx: Fix unchecked clk_prepare_enable() and add
  rollback on failure (git-fixes).
- ALSA: caiaq: fix stack out-of-bounds read in init_card
  (git-fixes).
- dmaengine: idxd: Fix freeing the allocated ida too late
  (git-fixes).
- Bluetooth: btintel: serialize btintel_hw_error() with
  hci_req_sync_lock (git-fixes).
- hwmon: axi-fan: don't use driver_override as IRQ name
  (git-fixes).
- ALSA: hda/realtek: Add headset jack quirk for Thinkpad X390
  (stable-fixes).
- ALSA: hda/realtek: add HP Laptop 14s-dr5xxx mute LED quirk
  (stable-fixes).
- ASoC: fsl_easrc: Fix event generation in
  fsl_easrc_iec958_set_reg() (stable-fixes).
- ASoC: fsl_easrc: Fix event generation in
  fsl_easrc_iec958_put_bits() (stable-fixes).
- HID: mcp2221: cancel last I2C command on read error
  (stable-fixes).
- HID: asus: avoid memory leak in asus_report_fixup()
  (stable-fixes).
- HID: magicmouse: avoid memory leak in magicmouse_report_fixup()
  (stable-fixes).
- HID: apple: avoid memory leak in apple_report_fixup()
  (stable-fixes).
- platform/x86: intel-hid: Enable 5-button array on ThinkPad X1
  Fold 16 Gen 1 (stable-fixes).
- platform/x86: intel-hid: Add Dell 14 Plus 2-in-1 to
  dmi_vgbs_allow_list (stable-fixes).
- platform/x86: touchscreen_dmi: Add quirk for y-inverted Goodix
  touchscreen on SUPI S10 (stable-fixes).
- mtd: spi-nor: core: avoid odd length/address writes in 8D-8D-8D
  mode (stable-fixes).
- Bluetooth: hci_sync: Remove remaining dependencies of
  hci_request (stable-fixes).
- Bluetooth: Remove 3 repeated macro definitions (stable-fixes).
- hwmon: (axi-fan-control) Make use of dev_err_probe()
  (stable-fixes).
- hwmon: (axi-fan-control) Use device firmware agnostic API
  (stable-fixes).
- dmaengine: idxd: Remove usage of the deprecated ida_simple_xx()
  API (stable-fixes).
- commit a6c10e6</changelog>
  <changelog author="tiwai@suse.de" date="1775217601">- Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync
  (git-fixes).
- wifi: ath11k: Pass the correct value of each TID during a stop
  AMPDU session (git-fixes).
- ASoC: Intel: boards: fix unmet dependency on PINCTRL
  (git-fixes).
- drm/amdgpu: prevent immediate PASID reuse case (stable-fixes).
- usb: core: new quirk to handle devices with zero configurations
  (stable-fixes).
- drm/amdgpu: fix gpu idle power consumption issue for gfx v12
  (stable-fixes).
- drm/ttm/tests: Fix build failure on PREEMPT_RT (stable-fixes).
- commit 7612e81</changelog>
  <changelog author="tiwai@suse.de" date="1775217602">- mtd: spi-nor: core: avoid odd length/address reads on 8D-8D-8D
  mode (stable-fixes).
- commit 2d1bac8</changelog>
  <changelog author="tiwai@suse.de" date="1775304000">- gpio: mxc: map Both Edge pad wakeup to Rising Edge (git-fixes).
- drm/ioc32: stop speculation on the drm_compat_ioctl path
  (git-fixes).
- drm/ast: dp501: Fix initialization of SCU2C (git-fixes).
- accel/qaic: Handle DBC deactivation if the owner went away
  (git-fixes).
- drm/i915/dp: Use crtc_state-&gt;enhanced_framing properly on
  ivb/hsw CPU eDP (git-fixes).
- crypto: af-alg - fix NULL pointer dereference in scatterwalk
  (git-fixes).
- crypto: caam - fix overflow on long hmac keys (git-fixes).
- crypto: caam - fix DMA corruption on long hmac keys (git-fixes).
- commit 376a907</changelog>
  <changelog author="tiwai@suse.de" date="1775304001">- Revert "drm: Fix use-after-free on framebuffers and property
  blobs when calling drm_dev_unplug" (git-fixes).
- drm/i915/dsi: Don't do DSC horizontal timing adjustments in
  command mode (git-fixes).
- drm/amdgpu: Change AMDGPU_VA_RESERVED_TRAP_SIZE to 64KB
  (git-fixes).
- commit 79130c8</changelog>
  <changelog author="tiwai@suse.de" date="1775390400">- Input: synaptics-rmi4 - fix a locking bug in an error path
  (git-fixes).
- hwmon: (occ) Fix missing newline in occ_show_extended()
  (git-fixes).
- hwmon: (occ) Fix division by zero in occ_show_power_1()
  (git-fixes).
- hwmon: (tps53679) Fix device ID comparison and printing in
  tps53676_identify() (git-fixes).
- hwmon: (pxe1610) Check return value of page-select write in
  probe (git-fixes).
- commit 08cee84</changelog>
  <changelog author="tiwai@suse.de" date="1775476800">- misc: fastrpc: possible double-free of cctx-&gt;remote_heap
  (git-fixes).
- comedi: Reinit dev-&gt;spinlock between attachments to low-level
  drivers (git-fixes).
- comedi: me_daq: Fix potential overrun of firmware buffer
  (git-fixes).
- comedi: me4000: Fix potential overrun of firmware buffer
  (git-fixes).
- comedi: ni_atmio16d: Fix invalid clean-up after failed attach
  (git-fixes).
- iio: dac: ad5770r: fix error return in ad5770r_read_raw()
  (git-fixes).
- iio: accel: fix ADXL355 temperature signature value (git-fixes).
- iio: light: vcnl4035: fix scan buffer on big-endian (git-fixes).
- iio: adc: ti-adc161s626: fix buffer read on big-endian
  (git-fixes).
- iio: imu: bmi160: Remove potential undefined behavior in
  bmi160_config_pin() (git-fixes).
- iio: imu: bno055: fix BNO055_SCAN_CH_COUNT off by one
  (git-fixes).
- iio: gyro: mpu3050: Fix out-of-sequence free_irq() (git-fixes).
- iio: gyro: mpu3050: Move iio_device_register() to correct
  location (git-fixes).
- iio: gyro: mpu3050: Fix irq resource leak (git-fixes).
- iio: gyro: mpu3050: Fix incorrect free_irq() variable
  (git-fixes).
- iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and
  gyroscope only (git-fixes).
- usb: cdns3: gadget: fix state inconsistency on gadget init
  failure (git-fixes).
- usb: ulpi: fix double free in ulpi_register_interface() error
  path (git-fixes).
- usb: cdns3: gadget: fix NULL pointer dereference in ep_queue
  (git-fixes).
- usb: gadget: f_rndis: Protect RNDIS options with mutex
  (git-fixes).
- usb: gadget: f_subset: Fix unbalanced refcnt in geth_free
  (git-fixes).
- usb: dwc2: gadget: Fix spin_lock/unlock mismatch in
  dwc2_hsotg_udc_stop() (git-fixes).
- usb: ehci-brcm: fix sleep during atomic (git-fixes).
- USB: dummy-hcd: Fix interrupt synchronization error (git-fixes).
- USB: dummy-hcd: Fix locking/synchronization error (git-fixes).
- usb: usbtmc: Flush anchored URBs in usbtmc_release (git-fixes).
- usb: gadget: u_ether: Fix race between gether_disconnect and
  eth_stop (git-fixes).
- thunderbolt: Fix property read in nhi_wake_supported()
  (git-fixes).
- commit 4e3d5c2</changelog>
  <changelog author="tiwai@suse.de" date="1775476801">- usb: gadget: uvc: fix NULL pointer dereference during unbind
  race (git-fixes).
- commit 4a9ee96</changelog>
  <changelog author="tiwai@suse.de" date="1775476802">- usb: core: phy: avoid double use of 'usb3-phy' (git-fixes).
- commit 4e8787e</changelog>
  <changelog author="pfalcato@suse.de" date="1775476803">- tls: Purge async_hold in tls_decrypt_async_wait() (CVE-2026-23414
  bsc#1261496).
- commit 1058925</changelog>
  <changelog author="pfalcato@suse.de" date="1775476804">- net/sched: ets: fix divide by zero in the offload path
  (CVE-2026-23379 bsc#1260481).
- commit 3672900</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476805">- icmp: fix NULL pointer dereference in icmp_tag_validation()
  (CVE-2026-23398 bsc#1260730).
- net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled
  (CVE-2026-23293 bsc#1260486).
- commit 05f5f64</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476806">- clsact: Fix use-after-free in init/destroy rollback asymmetry
  (CVE-2026-23413 bsc#1261498).
- commit eaf3b22</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476807">- net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled
  (CVE-2026-23381 bsc#1260471).
- commit 21aa5bd</changelog>
  <changelog author="nik.borisov@suse.com" date="1775476808">- watchdog/perf: properly initialize the turbo mode timestamp and rearm  counter (bsc#1256504).
- commit c8a645c</changelog>
  <changelog author="mkubecek@suse.cz" date="1775563200">- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs
  and shared blocks (CVE-2026-23270 bsc#1259886).
- commit 00821f1</changelog>
  <changelog author="lduncan@suse.com" date="1775563201">- scsi: target: Fix recursive locking in __configfs_open_file()
  (CVE-2026-23292 bsc#1260500).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_session_usage_count() (CVE-2026-23193 bsc#1258414).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_conn_usage_count() (CVE-2026-23216 bsc#1258447).
- commit e7b5dcd</changelog>
  <changelog author="mkubecek@suse.cz" date="1775563202">- net/sched: teql: fix NULL pointer dereference in iptunnel_xmit
  on TEQL slave xmit (CVE-2026-23277 bsc#1259997).
- commit 852cc2c</changelog>
  <changelog author="tiwai@suse.de" date="1775563203">- soc: aspeed: socinfo: Mask table entries for accurate SoC ID
  matching (git-fixes).
- commit df6cd61</changelog>
</package>
<package pkgid="fdc15b2b8d9309244b96c3edfb1e58a9acc6476bd60431d74989a25b2510ef50" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.53.37.1"/>
  <changelog author="henrique.carvalho@suse.com" date="1775131200">- smb: client: fix krb5 mount with username option (git-fixes).
- commit 0e79d63</changelog>
  <changelog author="tiwai@suse.de" date="1775217600">- net/x25: Fix overflow when accumulating packets (git-fixes).
- net/x25: Fix potential double free of skb (git-fixes).
- Bluetooth: SMP: derive legacy responder STK authentication
  from MITM state (git-fixes).
- Bluetooth: SMP: force responder MITM requirements before
  building the pairing response (git-fixes).
- Bluetooth: MGMT: validate mesh send advertising payload length
  (git-fixes).
- Bluetooth: hci_event: fix potential UAF in
  hci_le_remote_conn_param_req_evt (git-fixes).
- Bluetooth: MGMT: validate LTK enc_size on load (git-fixes).
- Bluetooth: SCO: fix race conditions in sco_sock_connect()
  (git-fixes).
- Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if
  immediate (git-fixes).
- NFC: pn533: bound the UART receive buffer (git-fixes).
- wifi: iwlwifi: mvm: fix potential out-of-bounds read in
  iwl_mvm_nd_match_info_handler() (git-fixes).
- wifi: wilc1000: fix u8 overflow in SSID scan buffer size
  calculation (git-fixes).
- ASoC: ep93xx: Fix unchecked clk_prepare_enable() and add
  rollback on failure (git-fixes).
- ALSA: caiaq: fix stack out-of-bounds read in init_card
  (git-fixes).
- dmaengine: idxd: Fix freeing the allocated ida too late
  (git-fixes).
- Bluetooth: btintel: serialize btintel_hw_error() with
  hci_req_sync_lock (git-fixes).
- hwmon: axi-fan: don't use driver_override as IRQ name
  (git-fixes).
- ALSA: hda/realtek: Add headset jack quirk for Thinkpad X390
  (stable-fixes).
- ALSA: hda/realtek: add HP Laptop 14s-dr5xxx mute LED quirk
  (stable-fixes).
- ASoC: fsl_easrc: Fix event generation in
  fsl_easrc_iec958_set_reg() (stable-fixes).
- ASoC: fsl_easrc: Fix event generation in
  fsl_easrc_iec958_put_bits() (stable-fixes).
- HID: mcp2221: cancel last I2C command on read error
  (stable-fixes).
- HID: asus: avoid memory leak in asus_report_fixup()
  (stable-fixes).
- HID: magicmouse: avoid memory leak in magicmouse_report_fixup()
  (stable-fixes).
- HID: apple: avoid memory leak in apple_report_fixup()
  (stable-fixes).
- platform/x86: intel-hid: Enable 5-button array on ThinkPad X1
  Fold 16 Gen 1 (stable-fixes).
- platform/x86: intel-hid: Add Dell 14 Plus 2-in-1 to
  dmi_vgbs_allow_list (stable-fixes).
- platform/x86: touchscreen_dmi: Add quirk for y-inverted Goodix
  touchscreen on SUPI S10 (stable-fixes).
- mtd: spi-nor: core: avoid odd length/address writes in 8D-8D-8D
  mode (stable-fixes).
- Bluetooth: hci_sync: Remove remaining dependencies of
  hci_request (stable-fixes).
- Bluetooth: Remove 3 repeated macro definitions (stable-fixes).
- hwmon: (axi-fan-control) Make use of dev_err_probe()
  (stable-fixes).
- hwmon: (axi-fan-control) Use device firmware agnostic API
  (stable-fixes).
- dmaengine: idxd: Remove usage of the deprecated ida_simple_xx()
  API (stable-fixes).
- commit a6c10e6</changelog>
  <changelog author="tiwai@suse.de" date="1775217601">- Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync
  (git-fixes).
- wifi: ath11k: Pass the correct value of each TID during a stop
  AMPDU session (git-fixes).
- ASoC: Intel: boards: fix unmet dependency on PINCTRL
  (git-fixes).
- drm/amdgpu: prevent immediate PASID reuse case (stable-fixes).
- usb: core: new quirk to handle devices with zero configurations
  (stable-fixes).
- drm/amdgpu: fix gpu idle power consumption issue for gfx v12
  (stable-fixes).
- drm/ttm/tests: Fix build failure on PREEMPT_RT (stable-fixes).
- commit 7612e81</changelog>
  <changelog author="tiwai@suse.de" date="1775217602">- mtd: spi-nor: core: avoid odd length/address reads on 8D-8D-8D
  mode (stable-fixes).
- commit 2d1bac8</changelog>
  <changelog author="tiwai@suse.de" date="1775304000">- gpio: mxc: map Both Edge pad wakeup to Rising Edge (git-fixes).
- drm/ioc32: stop speculation on the drm_compat_ioctl path
  (git-fixes).
- drm/ast: dp501: Fix initialization of SCU2C (git-fixes).
- accel/qaic: Handle DBC deactivation if the owner went away
  (git-fixes).
- drm/i915/dp: Use crtc_state-&gt;enhanced_framing properly on
  ivb/hsw CPU eDP (git-fixes).
- crypto: af-alg - fix NULL pointer dereference in scatterwalk
  (git-fixes).
- crypto: caam - fix overflow on long hmac keys (git-fixes).
- crypto: caam - fix DMA corruption on long hmac keys (git-fixes).
- commit 376a907</changelog>
  <changelog author="tiwai@suse.de" date="1775304001">- Revert "drm: Fix use-after-free on framebuffers and property
  blobs when calling drm_dev_unplug" (git-fixes).
- drm/i915/dsi: Don't do DSC horizontal timing adjustments in
  command mode (git-fixes).
- drm/amdgpu: Change AMDGPU_VA_RESERVED_TRAP_SIZE to 64KB
  (git-fixes).
- commit 79130c8</changelog>
  <changelog author="tiwai@suse.de" date="1775390400">- Input: synaptics-rmi4 - fix a locking bug in an error path
  (git-fixes).
- hwmon: (occ) Fix missing newline in occ_show_extended()
  (git-fixes).
- hwmon: (occ) Fix division by zero in occ_show_power_1()
  (git-fixes).
- hwmon: (tps53679) Fix device ID comparison and printing in
  tps53676_identify() (git-fixes).
- hwmon: (pxe1610) Check return value of page-select write in
  probe (git-fixes).
- commit 08cee84</changelog>
  <changelog author="tiwai@suse.de" date="1775476800">- misc: fastrpc: possible double-free of cctx-&gt;remote_heap
  (git-fixes).
- comedi: Reinit dev-&gt;spinlock between attachments to low-level
  drivers (git-fixes).
- comedi: me_daq: Fix potential overrun of firmware buffer
  (git-fixes).
- comedi: me4000: Fix potential overrun of firmware buffer
  (git-fixes).
- comedi: ni_atmio16d: Fix invalid clean-up after failed attach
  (git-fixes).
- iio: dac: ad5770r: fix error return in ad5770r_read_raw()
  (git-fixes).
- iio: accel: fix ADXL355 temperature signature value (git-fixes).
- iio: light: vcnl4035: fix scan buffer on big-endian (git-fixes).
- iio: adc: ti-adc161s626: fix buffer read on big-endian
  (git-fixes).
- iio: imu: bmi160: Remove potential undefined behavior in
  bmi160_config_pin() (git-fixes).
- iio: imu: bno055: fix BNO055_SCAN_CH_COUNT off by one
  (git-fixes).
- iio: gyro: mpu3050: Fix out-of-sequence free_irq() (git-fixes).
- iio: gyro: mpu3050: Move iio_device_register() to correct
  location (git-fixes).
- iio: gyro: mpu3050: Fix irq resource leak (git-fixes).
- iio: gyro: mpu3050: Fix incorrect free_irq() variable
  (git-fixes).
- iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and
  gyroscope only (git-fixes).
- usb: cdns3: gadget: fix state inconsistency on gadget init
  failure (git-fixes).
- usb: ulpi: fix double free in ulpi_register_interface() error
  path (git-fixes).
- usb: cdns3: gadget: fix NULL pointer dereference in ep_queue
  (git-fixes).
- usb: gadget: f_rndis: Protect RNDIS options with mutex
  (git-fixes).
- usb: gadget: f_subset: Fix unbalanced refcnt in geth_free
  (git-fixes).
- usb: dwc2: gadget: Fix spin_lock/unlock mismatch in
  dwc2_hsotg_udc_stop() (git-fixes).
- usb: ehci-brcm: fix sleep during atomic (git-fixes).
- USB: dummy-hcd: Fix interrupt synchronization error (git-fixes).
- USB: dummy-hcd: Fix locking/synchronization error (git-fixes).
- usb: usbtmc: Flush anchored URBs in usbtmc_release (git-fixes).
- usb: gadget: u_ether: Fix race between gether_disconnect and
  eth_stop (git-fixes).
- thunderbolt: Fix property read in nhi_wake_supported()
  (git-fixes).
- commit 4e3d5c2</changelog>
  <changelog author="tiwai@suse.de" date="1775476801">- usb: gadget: uvc: fix NULL pointer dereference during unbind
  race (git-fixes).
- commit 4a9ee96</changelog>
  <changelog author="tiwai@suse.de" date="1775476802">- usb: core: phy: avoid double use of 'usb3-phy' (git-fixes).
- commit 4e8787e</changelog>
  <changelog author="pfalcato@suse.de" date="1775476803">- tls: Purge async_hold in tls_decrypt_async_wait() (CVE-2026-23414
  bsc#1261496).
- commit 1058925</changelog>
  <changelog author="pfalcato@suse.de" date="1775476804">- net/sched: ets: fix divide by zero in the offload path
  (CVE-2026-23379 bsc#1260481).
- commit 3672900</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476805">- icmp: fix NULL pointer dereference in icmp_tag_validation()
  (CVE-2026-23398 bsc#1260730).
- net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled
  (CVE-2026-23293 bsc#1260486).
- commit 05f5f64</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476806">- clsact: Fix use-after-free in init/destroy rollback asymmetry
  (CVE-2026-23413 bsc#1261498).
- commit eaf3b22</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476807">- net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled
  (CVE-2026-23381 bsc#1260471).
- commit 21aa5bd</changelog>
  <changelog author="nik.borisov@suse.com" date="1775476808">- watchdog/perf: properly initialize the turbo mode timestamp and rearm  counter (bsc#1256504).
- commit c8a645c</changelog>
  <changelog author="mkubecek@suse.cz" date="1775563200">- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs
  and shared blocks (CVE-2026-23270 bsc#1259886).
- commit 00821f1</changelog>
  <changelog author="lduncan@suse.com" date="1775563201">- scsi: target: Fix recursive locking in __configfs_open_file()
  (CVE-2026-23292 bsc#1260500).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_session_usage_count() (CVE-2026-23193 bsc#1258414).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_conn_usage_count() (CVE-2026-23216 bsc#1258447).
- commit e7b5dcd</changelog>
  <changelog author="mkubecek@suse.cz" date="1775563202">- net/sched: teql: fix NULL pointer dereference in iptunnel_xmit
  on TEQL slave xmit (CVE-2026-23277 bsc#1259997).
- commit 852cc2c</changelog>
  <changelog author="tiwai@suse.de" date="1775563203">- soc: aspeed: socinfo: Mask table entries for accurate SoC ID
  matching (git-fixes).
- commit df6cd61</changelog>
</package>
<package pkgid="84c0b6cc1c63313aca80961e8cefd83403f7c7ef140329461fc8288656ba9e03" name="kernel-default" arch="src">
  <version epoch="0" ver="6.4.0" rel="150700.53.40.1"/>
  <changelog author="tiwai@suse.de" date="1775476800">- usb: gadget: uvc: fix NULL pointer dereference during unbind
  race (git-fixes).
- commit 4a9ee96</changelog>
  <changelog author="tiwai@suse.de" date="1775476801">- usb: core: phy: avoid double use of 'usb3-phy' (git-fixes).
- commit 4e8787e</changelog>
  <changelog author="pfalcato@suse.de" date="1775476802">- tls: Purge async_hold in tls_decrypt_async_wait() (CVE-2026-23414
  bsc#1261496).
- commit 1058925</changelog>
  <changelog author="pfalcato@suse.de" date="1775476803">- net/sched: ets: fix divide by zero in the offload path
  (CVE-2026-23379 bsc#1260481).
- commit 3672900</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476804">- icmp: fix NULL pointer dereference in icmp_tag_validation()
  (CVE-2026-23398 bsc#1260730).
- net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled
  (CVE-2026-23293 bsc#1260486).
- commit 05f5f64</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476805">- clsact: Fix use-after-free in init/destroy rollback asymmetry
  (CVE-2026-23413 bsc#1261498).
- commit eaf3b22</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476806">- net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled
  (CVE-2026-23381 bsc#1260471).
- commit 21aa5bd</changelog>
  <changelog author="nik.borisov@suse.com" date="1775476807">- watchdog/perf: properly initialize the turbo mode timestamp and rearm  counter (bsc#1256504).
- commit c8a645c</changelog>
  <changelog author="mkubecek@suse.cz" date="1775563200">- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs
  and shared blocks (CVE-2026-23270 bsc#1259886).
- commit 00821f1</changelog>
  <changelog author="lduncan@suse.com" date="1775563201">- scsi: target: Fix recursive locking in __configfs_open_file()
  (CVE-2026-23292 bsc#1260500).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_session_usage_count() (CVE-2026-23193 bsc#1258414).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_conn_usage_count() (CVE-2026-23216 bsc#1258447).
- commit e7b5dcd</changelog>
  <changelog author="mkubecek@suse.cz" date="1775563202">- net/sched: teql: fix NULL pointer dereference in iptunnel_xmit
  on TEQL slave xmit (CVE-2026-23277 bsc#1259997).
- commit 852cc2c</changelog>
  <changelog author="tiwai@suse.de" date="1775563203">- soc: aspeed: socinfo: Mask table entries for accurate SoC ID
  matching (git-fixes).
- commit df6cd61</changelog>
  <changelog author="nstange@suse.de" date="1777550400">- crypto: scatterwalk - Add memcpy_sglist (bsc#1262573
  CVE-2026-31431).
- commit 28aed48</changelog>
  <changelog author="nstange@suse.de" date="1777550401">- crypto: scatterwalk - Fix memcpy_sglist() to always succeed
  (bsc#1262573 CVE-2026-31431).
- commit c2ad254</changelog>
  <changelog author="nstange@suse.de" date="1777550402">- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- commit 8a67d67</changelog>
  <changelog author="nstange@suse.de" date="1777550403">- crypto: algif_aead - Revert to operating out-of-place
  (bsc#1262573 CVE-2026-31431).
- commit eb1a8c9</changelog>
  <changelog author="nstange@suse.de" date="1777550404">- kABI: Restore af_alg_{count,pull}_tsgl() signatures (bsc#1262573
  CVE-2026-31431).
- commit b418ef6</changelog>
  <changelog author="nstange@suse.de" date="1777636800">- crypto: authenc - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- Refresh
  patches.suse/crypto-authencesn-reject-too-short-AAD-assoclen-8-to.patch
- commit 24731ba</changelog>
  <changelog author="nstange@suse.de" date="1777636801">- crypto: authencesn - Do not place hiseq at end of dst for
  out-of-place decryption (bsc#1262573 CVE-2026-31431).
- commit 2c8047b</changelog>
  <changelog author="nstange@suse.de" date="1777636802">- crypto: authencesn - Fix src offset when decrypting in-place
  (bsc#1262573 CVE-2026-31431).
- commit 4921c60</changelog>
</package>
<package pkgid="9945a1d2e59ac8edc8bd0b184244d11a024e4093e741723830851bd23a863ee5" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.53.40.1"/>
  <changelog author="tiwai@suse.de" date="1775476800">- usb: gadget: uvc: fix NULL pointer dereference during unbind
  race (git-fixes).
- commit 4a9ee96</changelog>
  <changelog author="tiwai@suse.de" date="1775476801">- usb: core: phy: avoid double use of 'usb3-phy' (git-fixes).
- commit 4e8787e</changelog>
  <changelog author="pfalcato@suse.de" date="1775476802">- tls: Purge async_hold in tls_decrypt_async_wait() (CVE-2026-23414
  bsc#1261496).
- commit 1058925</changelog>
  <changelog author="pfalcato@suse.de" date="1775476803">- net/sched: ets: fix divide by zero in the offload path
  (CVE-2026-23379 bsc#1260481).
- commit 3672900</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476804">- icmp: fix NULL pointer dereference in icmp_tag_validation()
  (CVE-2026-23398 bsc#1260730).
- net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled
  (CVE-2026-23293 bsc#1260486).
- commit 05f5f64</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476805">- clsact: Fix use-after-free in init/destroy rollback asymmetry
  (CVE-2026-23413 bsc#1261498).
- commit eaf3b22</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476806">- net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled
  (CVE-2026-23381 bsc#1260471).
- commit 21aa5bd</changelog>
  <changelog author="nik.borisov@suse.com" date="1775476807">- watchdog/perf: properly initialize the turbo mode timestamp and rearm  counter (bsc#1256504).
- commit c8a645c</changelog>
  <changelog author="mkubecek@suse.cz" date="1775563200">- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs
  and shared blocks (CVE-2026-23270 bsc#1259886).
- commit 00821f1</changelog>
  <changelog author="lduncan@suse.com" date="1775563201">- scsi: target: Fix recursive locking in __configfs_open_file()
  (CVE-2026-23292 bsc#1260500).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_session_usage_count() (CVE-2026-23193 bsc#1258414).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_conn_usage_count() (CVE-2026-23216 bsc#1258447).
- commit e7b5dcd</changelog>
  <changelog author="mkubecek@suse.cz" date="1775563202">- net/sched: teql: fix NULL pointer dereference in iptunnel_xmit
  on TEQL slave xmit (CVE-2026-23277 bsc#1259997).
- commit 852cc2c</changelog>
  <changelog author="tiwai@suse.de" date="1775563203">- soc: aspeed: socinfo: Mask table entries for accurate SoC ID
  matching (git-fixes).
- commit df6cd61</changelog>
  <changelog author="nstange@suse.de" date="1777550400">- crypto: scatterwalk - Add memcpy_sglist (bsc#1262573
  CVE-2026-31431).
- commit 28aed48</changelog>
  <changelog author="nstange@suse.de" date="1777550401">- crypto: scatterwalk - Fix memcpy_sglist() to always succeed
  (bsc#1262573 CVE-2026-31431).
- commit c2ad254</changelog>
  <changelog author="nstange@suse.de" date="1777550402">- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- commit 8a67d67</changelog>
  <changelog author="nstange@suse.de" date="1777550403">- crypto: algif_aead - Revert to operating out-of-place
  (bsc#1262573 CVE-2026-31431).
- commit eb1a8c9</changelog>
  <changelog author="nstange@suse.de" date="1777550404">- kABI: Restore af_alg_{count,pull}_tsgl() signatures (bsc#1262573
  CVE-2026-31431).
- commit b418ef6</changelog>
  <changelog author="nstange@suse.de" date="1777636800">- crypto: authenc - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- Refresh
  patches.suse/crypto-authencesn-reject-too-short-AAD-assoclen-8-to.patch
- commit 24731ba</changelog>
  <changelog author="nstange@suse.de" date="1777636801">- crypto: authencesn - Do not place hiseq at end of dst for
  out-of-place decryption (bsc#1262573 CVE-2026-31431).
- commit 2c8047b</changelog>
  <changelog author="nstange@suse.de" date="1777636802">- crypto: authencesn - Fix src offset when decrypting in-place
  (bsc#1262573 CVE-2026-31431).
- commit 4921c60</changelog>
</package>
<package pkgid="d9439d852a739b2828a402de87c00c857803cdb8074617be09a9c83e779a397a" name="kernel-default" arch="src">
  <version epoch="0" ver="6.4.0" rel="150700.53.45.1"/>
  <changelog author="pfalcato@suse.de" date="1775476800">- tls: Purge async_hold in tls_decrypt_async_wait() (CVE-2026-23414
  bsc#1261496).
- commit 1058925</changelog>
  <changelog author="pfalcato@suse.de" date="1775476801">- net/sched: ets: fix divide by zero in the offload path
  (CVE-2026-23379 bsc#1260481).
- commit 3672900</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476802">- icmp: fix NULL pointer dereference in icmp_tag_validation()
  (CVE-2026-23398 bsc#1260730).
- net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled
  (CVE-2026-23293 bsc#1260486).
- commit 05f5f64</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476803">- clsact: Fix use-after-free in init/destroy rollback asymmetry
  (CVE-2026-23413 bsc#1261498).
- commit eaf3b22</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476804">- net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled
  (CVE-2026-23381 bsc#1260471).
- commit 21aa5bd</changelog>
  <changelog author="nik.borisov@suse.com" date="1775476805">- watchdog/perf: properly initialize the turbo mode timestamp and rearm  counter (bsc#1256504).
- commit c8a645c</changelog>
  <changelog author="mkubecek@suse.cz" date="1775563200">- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs
  and shared blocks (CVE-2026-23270 bsc#1259886).
- commit 00821f1</changelog>
  <changelog author="lduncan@suse.com" date="1775563201">- scsi: target: Fix recursive locking in __configfs_open_file()
  (CVE-2026-23292 bsc#1260500).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_session_usage_count() (CVE-2026-23193 bsc#1258414).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_conn_usage_count() (CVE-2026-23216 bsc#1258447).
- commit e7b5dcd</changelog>
  <changelog author="mkubecek@suse.cz" date="1775563202">- net/sched: teql: fix NULL pointer dereference in iptunnel_xmit
  on TEQL slave xmit (CVE-2026-23277 bsc#1259997).
- commit 852cc2c</changelog>
  <changelog author="tiwai@suse.de" date="1775563203">- soc: aspeed: socinfo: Mask table entries for accurate SoC ID
  matching (git-fixes).
- commit df6cd61</changelog>
  <changelog author="nstange@suse.de" date="1777550400">- crypto: scatterwalk - Add memcpy_sglist (bsc#1262573
  CVE-2026-31431).
- commit 28aed48</changelog>
  <changelog author="nstange@suse.de" date="1777550401">- crypto: scatterwalk - Fix memcpy_sglist() to always succeed
  (bsc#1262573 CVE-2026-31431).
- commit c2ad254</changelog>
  <changelog author="nstange@suse.de" date="1777550402">- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- commit 8a67d67</changelog>
  <changelog author="nstange@suse.de" date="1777550403">- crypto: algif_aead - Revert to operating out-of-place
  (bsc#1262573 CVE-2026-31431).
- commit eb1a8c9</changelog>
  <changelog author="nstange@suse.de" date="1777550404">- kABI: Restore af_alg_{count,pull}_tsgl() signatures (bsc#1262573
  CVE-2026-31431).
- commit b418ef6</changelog>
  <changelog author="nstange@suse.de" date="1777636800">- crypto: authenc - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- Refresh
  patches.suse/crypto-authencesn-reject-too-short-AAD-assoclen-8-to.patch
- commit 24731ba</changelog>
  <changelog author="nstange@suse.de" date="1777636801">- crypto: authencesn - Do not place hiseq at end of dst for
  out-of-place decryption (bsc#1262573 CVE-2026-31431).
- commit 2c8047b</changelog>
  <changelog author="nstange@suse.de" date="1777636802">- crypto: authencesn - Fix src offset when decrypting in-place
  (bsc#1262573 CVE-2026-31431).
- commit 4921c60</changelog>
  <changelog author="fmancera@suse.de" date="1778155200">- supported.conf: drop rxrpc and afs_fs (bsc#1264450)
- commit bf6ec71</changelog>
  <changelog author="jeffm@suse.com" date="1778241600">- xfrm: esp: avoid in-place decrypt on shared skb frags (bsc#1264449 bsc#1264450).
- commit 10e4355</changelog>
</package>
<package pkgid="a3587ece53285af2f7f8a9c76392a37b5b1ca77e48079c00edf1b17bdb80dfb1" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.53.45.1"/>
  <changelog author="pfalcato@suse.de" date="1775476800">- tls: Purge async_hold in tls_decrypt_async_wait() (CVE-2026-23414
  bsc#1261496).
- commit 1058925</changelog>
  <changelog author="pfalcato@suse.de" date="1775476801">- net/sched: ets: fix divide by zero in the offload path
  (CVE-2026-23379 bsc#1260481).
- commit 3672900</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476802">- icmp: fix NULL pointer dereference in icmp_tag_validation()
  (CVE-2026-23398 bsc#1260730).
- net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled
  (CVE-2026-23293 bsc#1260486).
- commit 05f5f64</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476803">- clsact: Fix use-after-free in init/destroy rollback asymmetry
  (CVE-2026-23413 bsc#1261498).
- commit eaf3b22</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476804">- net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled
  (CVE-2026-23381 bsc#1260471).
- commit 21aa5bd</changelog>
  <changelog author="nik.borisov@suse.com" date="1775476805">- watchdog/perf: properly initialize the turbo mode timestamp and rearm  counter (bsc#1256504).
- commit c8a645c</changelog>
  <changelog author="mkubecek@suse.cz" date="1775563200">- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs
  and shared blocks (CVE-2026-23270 bsc#1259886).
- commit 00821f1</changelog>
  <changelog author="lduncan@suse.com" date="1775563201">- scsi: target: Fix recursive locking in __configfs_open_file()
  (CVE-2026-23292 bsc#1260500).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_session_usage_count() (CVE-2026-23193 bsc#1258414).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_conn_usage_count() (CVE-2026-23216 bsc#1258447).
- commit e7b5dcd</changelog>
  <changelog author="mkubecek@suse.cz" date="1775563202">- net/sched: teql: fix NULL pointer dereference in iptunnel_xmit
  on TEQL slave xmit (CVE-2026-23277 bsc#1259997).
- commit 852cc2c</changelog>
  <changelog author="tiwai@suse.de" date="1775563203">- soc: aspeed: socinfo: Mask table entries for accurate SoC ID
  matching (git-fixes).
- commit df6cd61</changelog>
  <changelog author="nstange@suse.de" date="1777550400">- crypto: scatterwalk - Add memcpy_sglist (bsc#1262573
  CVE-2026-31431).
- commit 28aed48</changelog>
  <changelog author="nstange@suse.de" date="1777550401">- crypto: scatterwalk - Fix memcpy_sglist() to always succeed
  (bsc#1262573 CVE-2026-31431).
- commit c2ad254</changelog>
  <changelog author="nstange@suse.de" date="1777550402">- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- commit 8a67d67</changelog>
  <changelog author="nstange@suse.de" date="1777550403">- crypto: algif_aead - Revert to operating out-of-place
  (bsc#1262573 CVE-2026-31431).
- commit eb1a8c9</changelog>
  <changelog author="nstange@suse.de" date="1777550404">- kABI: Restore af_alg_{count,pull}_tsgl() signatures (bsc#1262573
  CVE-2026-31431).
- commit b418ef6</changelog>
  <changelog author="nstange@suse.de" date="1777636800">- crypto: authenc - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- Refresh
  patches.suse/crypto-authencesn-reject-too-short-AAD-assoclen-8-to.patch
- commit 24731ba</changelog>
  <changelog author="nstange@suse.de" date="1777636801">- crypto: authencesn - Do not place hiseq at end of dst for
  out-of-place decryption (bsc#1262573 CVE-2026-31431).
- commit 2c8047b</changelog>
  <changelog author="nstange@suse.de" date="1777636802">- crypto: authencesn - Fix src offset when decrypting in-place
  (bsc#1262573 CVE-2026-31431).
- commit 4921c60</changelog>
  <changelog author="fmancera@suse.de" date="1778155200">- supported.conf: drop rxrpc and afs_fs (bsc#1264450)
- commit bf6ec71</changelog>
  <changelog author="jeffm@suse.com" date="1778241600">- xfrm: esp: avoid in-place decrypt on shared skb frags (bsc#1264449 bsc#1264450).
- commit 10e4355</changelog>
</package>
<package pkgid="166dcfe9c86237e9425835101794e46e5bb54f3740d66ea7ab48226cc7e853fe" name="kernel-default" arch="src">
  <version epoch="0" ver="6.4.0" rel="150700.53.52.1"/>
  <changelog author="nik.borisov@suse.com" date="1775476800">- watchdog/perf: properly initialize the turbo mode timestamp and rearm  counter (bsc#1256504).
- commit c8a645c</changelog>
  <changelog author="mkubecek@suse.cz" date="1775563200">- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs
  and shared blocks (CVE-2026-23270 bsc#1259886).
- commit 00821f1</changelog>
  <changelog author="lduncan@suse.com" date="1775563201">- scsi: target: Fix recursive locking in __configfs_open_file()
  (CVE-2026-23292 bsc#1260500).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_session_usage_count() (CVE-2026-23193 bsc#1258414).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_conn_usage_count() (CVE-2026-23216 bsc#1258447).
- commit e7b5dcd</changelog>
  <changelog author="mkubecek@suse.cz" date="1775563202">- net/sched: teql: fix NULL pointer dereference in iptunnel_xmit
  on TEQL slave xmit (CVE-2026-23277 bsc#1259997).
- commit 852cc2c</changelog>
  <changelog author="tiwai@suse.de" date="1775563203">- soc: aspeed: socinfo: Mask table entries for accurate SoC ID
  matching (git-fixes).
- commit df6cd61</changelog>
  <changelog author="nstange@suse.de" date="1777550400">- crypto: scatterwalk - Add memcpy_sglist (bsc#1262573
  CVE-2026-31431).
- commit 28aed48</changelog>
  <changelog author="nstange@suse.de" date="1777550401">- crypto: scatterwalk - Fix memcpy_sglist() to always succeed
  (bsc#1262573 CVE-2026-31431).
- commit c2ad254</changelog>
  <changelog author="nstange@suse.de" date="1777550402">- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- commit 8a67d67</changelog>
  <changelog author="nstange@suse.de" date="1777550403">- crypto: algif_aead - Revert to operating out-of-place
  (bsc#1262573 CVE-2026-31431).
- commit eb1a8c9</changelog>
  <changelog author="nstange@suse.de" date="1777550404">- kABI: Restore af_alg_{count,pull}_tsgl() signatures (bsc#1262573
  CVE-2026-31431).
- commit b418ef6</changelog>
  <changelog author="nstange@suse.de" date="1777636800">- crypto: authenc - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- Refresh
  patches.suse/crypto-authencesn-reject-too-short-AAD-assoclen-8-to.patch
- commit 24731ba</changelog>
  <changelog author="nstange@suse.de" date="1777636801">- crypto: authencesn - Do not place hiseq at end of dst for
  out-of-place decryption (bsc#1262573 CVE-2026-31431).
- commit 2c8047b</changelog>
  <changelog author="nstange@suse.de" date="1777636802">- crypto: authencesn - Fix src offset when decrypting in-place
  (bsc#1262573 CVE-2026-31431).
- commit 4921c60</changelog>
  <changelog author="nik.borisov@suse.com" date="1777982400">- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's  op cache (bsc#1264013 CVE-2025-54518).
- commit 5f11806</changelog>
  <changelog author="fmancera@suse.de" date="1778155200">- supported.conf: drop rxrpc and afs_fs (bsc#1264450)
- commit c00b898</changelog>
  <changelog author="jeffm@suse.com" date="1778241600">- xfrm: esp: avoid in-place decrypt on shared skb frags (bsc#1264449 bsc#1264450).
- commit f187bc6</changelog>
  <changelog author="pfalcato@suse.de" date="1778673600">- net: skbuff: propagate shared-frag marker through pskb_copy()
  (CVE-2026-46300 bsc#1265209).
- commit 4c684ee</changelog>
  <changelog author="mhocko@suse.com" date="1778760000">- io-wq: check that the predecessor is hashed in
  io_wq_remove_pending() (git-fixes).
- commit 447a089</changelog>
  <changelog author="mhocko@suse.com" date="1778846400">- ptrace: slightly saner 'get_dumpable()' logic (bsc#1265308).
- commit a7685e1</changelog>
  <changelog author="mhocko@suse.com" date="1778846401">- kabi assert ptrace: slightly saner 'get_dumpable()' logic
  (bsc#1265308).
- kabi ptrace: slightly saner 'get_dumpable()' logic
  (bsc#1265308).
- commit 51e3e5d</changelog>
</package>
<package pkgid="b0bb8c99412f3b2b0a6b28439d418619d5b6b9757ff2d95baa193a6b5bbe61b2" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.53.52.1"/>
  <changelog author="nik.borisov@suse.com" date="1775476800">- watchdog/perf: properly initialize the turbo mode timestamp and rearm  counter (bsc#1256504).
- commit c8a645c</changelog>
  <changelog author="mkubecek@suse.cz" date="1775563200">- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs
  and shared blocks (CVE-2026-23270 bsc#1259886).
- commit 00821f1</changelog>
  <changelog author="lduncan@suse.com" date="1775563201">- scsi: target: Fix recursive locking in __configfs_open_file()
  (CVE-2026-23292 bsc#1260500).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_session_usage_count() (CVE-2026-23193 bsc#1258414).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_conn_usage_count() (CVE-2026-23216 bsc#1258447).
- commit e7b5dcd</changelog>
  <changelog author="mkubecek@suse.cz" date="1775563202">- net/sched: teql: fix NULL pointer dereference in iptunnel_xmit
  on TEQL slave xmit (CVE-2026-23277 bsc#1259997).
- commit 852cc2c</changelog>
  <changelog author="tiwai@suse.de" date="1775563203">- soc: aspeed: socinfo: Mask table entries for accurate SoC ID
  matching (git-fixes).
- commit df6cd61</changelog>
  <changelog author="nstange@suse.de" date="1777550400">- crypto: scatterwalk - Add memcpy_sglist (bsc#1262573
  CVE-2026-31431).
- commit 28aed48</changelog>
  <changelog author="nstange@suse.de" date="1777550401">- crypto: scatterwalk - Fix memcpy_sglist() to always succeed
  (bsc#1262573 CVE-2026-31431).
- commit c2ad254</changelog>
  <changelog author="nstange@suse.de" date="1777550402">- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- commit 8a67d67</changelog>
  <changelog author="nstange@suse.de" date="1777550403">- crypto: algif_aead - Revert to operating out-of-place
  (bsc#1262573 CVE-2026-31431).
- commit eb1a8c9</changelog>
  <changelog author="nstange@suse.de" date="1777550404">- kABI: Restore af_alg_{count,pull}_tsgl() signatures (bsc#1262573
  CVE-2026-31431).
- commit b418ef6</changelog>
  <changelog author="nstange@suse.de" date="1777636800">- crypto: authenc - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- Refresh
  patches.suse/crypto-authencesn-reject-too-short-AAD-assoclen-8-to.patch
- commit 24731ba</changelog>
  <changelog author="nstange@suse.de" date="1777636801">- crypto: authencesn - Do not place hiseq at end of dst for
  out-of-place decryption (bsc#1262573 CVE-2026-31431).
- commit 2c8047b</changelog>
  <changelog author="nstange@suse.de" date="1777636802">- crypto: authencesn - Fix src offset when decrypting in-place
  (bsc#1262573 CVE-2026-31431).
- commit 4921c60</changelog>
  <changelog author="nik.borisov@suse.com" date="1777982400">- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's  op cache (bsc#1264013 CVE-2025-54518).
- commit 5f11806</changelog>
  <changelog author="fmancera@suse.de" date="1778155200">- supported.conf: drop rxrpc and afs_fs (bsc#1264450)
- commit c00b898</changelog>
  <changelog author="jeffm@suse.com" date="1778241600">- xfrm: esp: avoid in-place decrypt on shared skb frags (bsc#1264449 bsc#1264450).
- commit f187bc6</changelog>
  <changelog author="pfalcato@suse.de" date="1778673600">- net: skbuff: propagate shared-frag marker through pskb_copy()
  (CVE-2026-46300 bsc#1265209).
- commit 4c684ee</changelog>
  <changelog author="mhocko@suse.com" date="1778760000">- io-wq: check that the predecessor is hashed in
  io_wq_remove_pending() (git-fixes).
- commit 447a089</changelog>
  <changelog author="mhocko@suse.com" date="1778846400">- ptrace: slightly saner 'get_dumpable()' logic (bsc#1265308).
- commit a7685e1</changelog>
  <changelog author="mhocko@suse.com" date="1778846401">- kabi assert ptrace: slightly saner 'get_dumpable()' logic
  (bsc#1265308).
- kabi ptrace: slightly saner 'get_dumpable()' logic
  (bsc#1265308).
- commit 51e3e5d</changelog>
</package>
<package pkgid="f351c4e17a5a5ec197ca655adcf985d6279f404194c14b073c2c0e8f51dc86e3" name="kernel-default" arch="src">
  <version epoch="0" ver="6.4.0" rel="150700.53.6.1"/>
  <changelog author="ohering@suse.de" date="1751025600">- scsi: storvsc: Increase the timeouts to storvsc_timeout (git-fixes).
- net: mana: Add support for Multi Vports on Bare metal (bsc#1244229).
- scsi: storvsc: Don't report the host packet status as the hv status (git-fixes).
- commit cde971c</changelog>
  <changelog author="tiwai@suse.de" date="1751025601">- HID: lenovo: Restrict F7/9/11 mode to compact keyboards only
  (git-fixes).
- HID: wacom: fix kobject reference count leak (git-fixes).
- HID: wacom: fix memory leak on sysfs attribute creation failure
  (git-fixes).
- HID: wacom: fix memory leak on kobject creation failure
  (git-fixes).
- wifi: mac80211: fix beacon interval calculation overflow
  (git-fixes).
- commit 8d2d6ad</changelog>
  <changelog author="joao.povoas@suse.com" date="1751025602">- Update
  patches.suse/ASoC-soc-pcm-don-t-use-soc_pcm_ret-on-.prepare-callb.patch
  (stable-fixes CVE-2024-58077 bsc#1239090).
- Update
  patches.suse/Bluetooth-btbcm-Fix-NULL-deref-in-btbcm_get_board_na.patch
  (git-fixes CVE-2024-57988 bsc#1237910).
- Update
  patches.suse/Bluetooth-btrtl-check-for-NULL-in-btrtl_setup_realte.patch
  (git-fixes CVE-2024-57987 bsc#1237905).
- Update
  patches.suse/RDMA-bnxt_re-Add-sanity-checks-on-rdev-validity.patch
  (bsc#1237200 CVE-2025-21901 bsc#1240579).
- Update patches.suse/RDMA-rtrs-Add-missing-deinit-call.patch
  (git-fixes CVE-2025-21805 bsc#1238741).
- Update
  patches.suse/amdkfd-properly-free-gang_ctx_bo-when-failed-to-init.patch
  (git-fixes CVE-2025-21842 bsc#1239063).
- Update
  patches.suse/cxl-mem-Fix-no-cxl_nvd-during-pmem-region-auto-assem.patch
  (jsc#PED-10836 CVE-2024-41085 bsc#1228478).
- Update
  patches.suse/cxl-pci-Skip-to-handle-RAS-errors-if-CXL.mem-device-.patch
  (jsc#PED-10836 CVE-2024-26762 bsc#1230337).
- Update
  patches.suse/drm-amd-display-Fix-invalid-context-error-in-dml-hel.patch
  (git-fixes CVE-2025-37965 bsc#1244174).
- Update
  patches.suse/drm-amdgpu-init-return-value-in-amdgpu_ttm_clear_buf.patch
  (git-fixes CVE-2025-21987 bsc#1240798).
- Update
  patches.suse/drm-amdkfd-Fix-NULL-Pointer-Dereference-in-KFD-queue.patch
  (git-fixes CVE-2025-21940 bsc#1240702).
- Update
  patches.suse/drm-i915-gt-Use-spin_lock_irqsave-in-interruptible-c.patch
  (git-fixes CVE-2025-21849 bsc#1239485).
- Update
  patches.suse/drm-imagination-avoid-deadlock-on-fence-release.patch
  (git-fixes CVE-2025-21911 bsc#1240589).
- Update
  patches.suse/drm-xe-hmm-Don-t-dereference-struct-page-pointers-wi.patch
  (git-fixes CVE-2025-21939 bsc#1240710).
- Update patches.suse/drm-xe-userptr-fix-EFAULT-handling.patch
  (git-fixes CVE-2025-21880 bsc#1240170).
- Update
  patches.suse/gpu-host1x-Fix-a-use-of-uninitialized-mutex.patch
  (git-fixes CVE-2025-21824 bsc#1238478).
- Update
  patches.suse/iommu-Fix-potential-memory-leak-in-iopf_queue_remove.patch
  (git-fixes CVE-2025-21770 bsc#1238495).
- Update
  patches.suse/media-intel-ipu6-remove-cpu-latency-qos-request-on-e.patch
  (git-fixes CVE-2024-58004 bsc#1238508).
- Update
  patches.suse/net-smc-do-not-leave-a-dangling-sk-pointer-in-__smc_create.patch
  (jsc#PED-10299 bsc#1241689 CVE-2024-50293 bsc#1233482).
- Update
  patches.suse/net-smc-fix-lacks-of-icsk_syn_mss-with-IPPROTO_SMC.patch
  (jsc#PED-10299 bsc#1241689 CVE-2024-50034 bsc#1231913).
- Update
  patches.suse/powerpc-pseries-iommu-Don-t-unset-window-if-it-was-n.patch
  (jsc#PED-10539 git-fixes CVE-2025-21713 bsc#1237887).
- Update
  patches.suse/wifi-ath12k-Fix-for-out-of-bound-access-error.patch
  (bsc#1240998 CVE-2024-58015 bsc#1238995).
- Update
  patches.suse/wifi-ath12k-fix-use-after-free-in-ath12k_dp_cc_clean.patch
  (bsc#1240998 CVE-2024-56541 bsc#1235064).
- Update
  patches.suse/wifi-iwlwifi-mvm-avoid-NULL-pointer-dereference-cf704a7.patch
  (git-fixes CVE-2024-58062 bsc#1238965).
- commit 0597d89</changelog>
  <changelog author="joao.povoas@suse.com" date="1751025603">- Update
  patches.suse/HID-uclogic-Add-NULL-check-in-uclogic_input_configur.patch
  (git-fixes CVE-2025-38007 bsc#1244938).
- Update
  patches.suse/RDMA-core-Fix-KASAN-slab-use-after-free-Read-in-ib_r.patch
  (git-fixes CVE-2025-38022 bsc#1245003).
- Update
  patches.suse/RDMA-rxe-Fix-slab-use-after-free-Read-in-rxe_queue_c.patch
  (git-fixes CVE-2025-38024 bsc#1245025).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-csu.patch
  (bsc#1243342 CVE-2025-38059 bsc#1244759).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1236208 CVE-2025-21658).
- Update
  patches.suse/can-bcm-add-locking-for-bcm_op-runtime-updates.patch
  (git-fixes CVE-2025-38004 bsc#1244274).
- Update
  patches.suse/can-bcm-add-missing-rcu-read-protection-for-procfs-c.patch
  (git-fixes CVE-2025-38003 bsc#1244275).
- Update
  patches.suse/crypto-algif_hash-fix-double-free-in-hash_accept.patch
  (git-fixes CVE-2025-38079 bsc#1245217).
- Update
  patches.suse/crypto-lzo-Fix-compression-buffer-overrun.patch
  (stable-fixes CVE-2025-38068 bsc#1245210).
- Update
  patches.suse/dmaengine-idxd-Refactor-remove-call-with-idxd_cleanu.patch
  (git-fixes CVE-2025-38014 bsc#1244732).
- Update
  patches.suse/dmaengine-idxd-fix-memory-leak-in-error-handling-pat-46a5cca.patch
  (git-fixes CVE-2025-38015 bsc#1244789).
- Update
  patches.suse/dmaengine-ti-k3-udma-Add-missing-locking.patch
  (git-fixes CVE-2025-38005 bsc#1244727).
- Update
  patches.suse/drm-amd-display-Increase-block_sequence-array-size.patch
  (stable-fixes CVE-2025-38080 bsc#1244738).
- Update
  patches.suse/ext4-goto-right-label-out_mmap_sem-in-ext4_setattr.patch
  (bsc#1242556 CVE-2025-22120 bsc#1241592).
- Update
  patches.suse/firmware-arm_ffa-Set-dma_mask-for-ffa-devices.patch
  (stable-fixes CVE-2025-38043 bsc#1245081).
- Update patches.suse/media-cx231xx-set-device_caps-for-417.patch
  (stable-fixes CVE-2025-38044 bsc#1245082).
- Update
  patches.suse/net-handshake-Fix-handshake_req_destroy_test1.patch
  (git-fixes CVE-2024-26831 bsc#1223008).
- Update
  patches.suse/net-mlx5e-Disable-MACsec-offload-for-uplink-represen.patch
  (git-fixes CVE-2025-38020 bsc#1245001).
- Update patches.suse/net_sched-prio-fix-a-race-in-prio_tune.patch
  (git-fixes CVE-2025-38083 bsc#1245183).
- Update
  patches.suse/nfs-handle-failure-of-nfs_get_lock_context-in-unlock-path.patch
  (git-fixes CVE-2025-38023 bsc#1245004).
- Update patches.suse/orangefs-Do-not-truncate-file-size.patch
  (git-fixes CVE-2025-38065 bsc#1244906).
- Update
  patches.suse/padata-do-not-leak-refcount-in-reorder_work.patch
  (git-fixes CVE-2025-38031 bsc#1245046).
- Update
  patches.suse/phy-tegra-xusb-Use-a-bitmask-for-UTMI-pad-power-stat.patch
  (git-fixes CVE-2025-38010 bsc#1244996).
- Update
  patches.suse/platform-x86-dell-wmi-sysman-Avoid-buffer-overflow-i.patch
  (git-fixes CVE-2025-38077 bsc#1244736).
- Update
  patches.suse/regulator-max20086-fix-invalid-memory-access.patch
  (git-fixes CVE-2025-38027 bsc#1245042).
- Update
  patches.suse/s390-pci-Fix-duplicate-pci_dev_put-in-disable_slot-w.patch
  (git-fixes bsc#1244145 CVE-2025-37946 bsc#1243506).
- Update
  patches.suse/s390-pci-fix-potential-double-remove-of-hotplug-slot.patch
  (bsc#1244145 CVE-2024-56699 bsc#1235490).
- Update
  patches.suse/sched-numa-fix-memory-leak-due-to-the-overwritten-vma-numab_state.patch
  (git fixes (sched/numa) CVE-2024-56613 bsc#1244176).
- Update
  patches.suse/serial-mctrl_gpio-split-disable_ms-into-sync-and-no_.patch
  (git-fixes CVE-2025-38040 bsc#1245078).
- Update
  patches.suse/spi-rockchip-Fix-register-out-of-bounds-access.patch
  (stable-fixes CVE-2025-38081 bsc#1244739).
- Update
  patches.suse/usb-typec-ucsi-displayport-Fix-NULL-pointer-access.patch
  (git-fixes CVE-2025-37994 bsc#1243823).
- Update
  patches.suse/vhost-scsi-Fix-handling-of-multiple-calls-to-vhost_s.patch
  (git-fixes CVE-2025-22083 bsc#1241414).
- Update
  patches.suse/wifi-cfg80211-fix-out-of-bounds-access-during-multi-.patch
  (git-fixes CVE-2025-37973 bsc#1244172).
- Update patches.suse/wifi-iwlwifi-fix-debug-actions-order.patch
  (stable-fixes CVE-2025-38045 bsc#1245083).
- Update
  patches.suse/wifi-mac80211-Set-n_channels-after-allocating-struct.patch
  (git-fixes CVE-2025-38013 bsc#1244731).
- Update
  patches.suse/wifi-mt76-disable-napi-on-driver-removal.patch
  (git-fixes CVE-2025-38009 bsc#1244995).
- commit fee1c31</changelog>
  <changelog author="tiwai@suse.de" date="1751198400">- i2c: tiny-usb: disable zero-length read messages (git-fixes).
- i2c: robotfuzz-osif: disable zero-length read messages
  (git-fixes).
- drm/i915: fix build error some more (git-fixes).
- ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X507UAR
  (git-fixes).
- ALSA: usb-audio: Fix out-of-bounds read in
  snd_usb_get_audioformat_uac3() (git-fixes).
- ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged
  (stable-fixes).
- ALSA: usb-audio: Rename ALSA kcontrol PCM and PCM1 for the
  KTMicro sound card (stable-fixes).
- ALSA: hda/intel: Add Thinkpad E15 to PM deny list
  (stable-fixes).
- ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330
  (stable-fixes).
- drivers/rapidio/rio_cm.c: prevent possible heap overwrite
  (stable-fixes).
- watchdog: da9052_wdt: respect TWDMIN (stable-fixes).
- watchdog: fix watchdog may detect false positive of softlockup
  (stable-fixes).
- fbcon: Make sure modelist not set on unregistered console
  (stable-fixes).
- bus: fsl-mc: increase MC_CMD_COMPLETION_TIMEOUT_MS value
  (stable-fixes).
- i2c: designware: Invoke runtime suspend on quick slave
  re-registration (stable-fixes).
- i2c: npcm: Add clock toggle recovery (stable-fixes).
- pinctrl: armada-37xx: propagate error from
  armada_37xx_pmx_set_by_name() (stable-fixes).
- pinctrl: armada-37xx: propagate error from
  armada_37xx_gpio_get_direction() (stable-fixes).
- pinctrl: armada-37xx: propagate error from
  armada_37xx_pmx_gpio_set_direction() (stable-fixes).
- pinctrl: armada-37xx: propagate error from
  armada_37xx_gpio_get() (stable-fixes).
- pinctrl: mcp23s08: Reset all pins to input at probe
  (stable-fixes).
- software node: Correct a OOB check in
  software_node_get_reference_args() (stable-fixes).
- wifi: mt76: mt7996: drop fragments with multicast or broadcast
  RA (stable-fixes).
- wifi: mt76: mt7921: add 160 MHz AP for mt7922 device
  (stable-fixes).
- wifi: mt76: mt76x2: Add support for LiteOn WN4516R,WN4519R
  (stable-fixes).
- wifi: ath12k: fix macro definition HAL_RX_MSDU_PKT_LENGTH_GET
  (stable-fixes).
- wifi: ath12k: fix a possible dead lock caused by ab-&gt;base_lock
  (stable-fixes).
- wifi: ath11k: Fix QMI memory reuse logic (stable-fixes).
- wifi: rtw89: leave idle mode when setting WEP encryption for
  AP mode (stable-fixes).
- wifi: mac80211: do not offer a mesh path if forwarding is
  disabled (stable-fixes).
- wifi: iwlwifi: pcie: make sure to lock rxq-&gt;read (stable-fixes).
- wifi: mac80211_hwsim: Prevent tsf from setting if beacon is
  disabled (stable-fixes).
- wifi: ath12k: fix failed to set mhi state error during reboot
  with hardware grouping (stable-fixes).
- wifi: ath12k: fix link valid field initialization in the
  monitor Rx (stable-fixes).
- wifi: ath12k: fix incorrect CE addresses (stable-fixes).
- wifi: ath12k: Pass correct values of center freq1 and center
  freq2 for 160 MHz (stable-fixes).
- wifi: mac80211: VLAN traffic in multicast path (stable-fixes).
- wifi: iwlwifi: Add missing MODULE_FIRMWARE for Qu-c0-jf-b0
  (stable-fixes).
- usbnet: asix AX88772: leave the carrier control to phylink
  (stable-fixes).
- PM: runtime: fix denying of auto suspend in
  pm_suspend_timer_fn() (stable-fixes).
- ACPI: battery: negate current when discharging (stable-fixes).
- ACPICA: Avoid sequence overread in call to strncmp()
  (stable-fixes).
- ACPICA: utilities: Fix overflow check in vsnprintf()
  (stable-fixes).
- ACPICA: fix acpi parse and parseext cache leaks (stable-fixes).
- ACPICA: fix acpi operand cache leak in dswstate.c
  (stable-fixes).
- ACPI: bus: Bail out if acpi_kobj registration fails
  (stable-fixes).
- mmc: Add quirk to disable DDR50 tuning (stable-fixes).
- power: supply: bq27xxx: Retrieve again when busy (stable-fixes).
- power: supply: collie: Fix wakeup source leaks on device unbind
  (stable-fixes).
- ASoC: amd: yc: Add quirk for Lenovo Yoga Pro 7 14ASP9
  (stable-fixes).
- ASoC: tegra210_ahub: Add check to of_device_get_match_data()
  (stable-fixes).
- ASoC: tas2770: Power cycle amp on ISENSE/VSENSE change
  (stable-fixes).
- Input: sparcspkr - avoid unannotated fall-through
  (stable-fixes).
- commit 0dc7dde</changelog>
  <changelog author="tiwai@suse.de" date="1751198401">- drm/xe: Process deferred GGTT node removals on device unwind
  (git-fixes).
- drm/xe/display: Add check for alloc_ordered_workqueue()
  (git-fixes).
- drm/amd: Adjust output for discovery error handling (git-fixes).
- drm/xe/bmg: Update Wa_16023588340 (git-fixes).
- drm/v3d: Avoid NULL pointer dereference in
  `v3d_job_update_stats()` (stable-fixes).
- PCI: Add ACS quirk for Loongson PCIe (stable-fixes).
- wifi: mt76: mt7925: introduce thermal protection (stable-fixes).
- wifi: mac80211: validate SCAN_FLAG_AP in scan request during
  MLO (stable-fixes).
- wifi: rtw89: 8922a: fix TX fail with wrong VCO setting
  (stable-fixes).
- wifi: iwlwifi: mvm: fix beacon CCK flag (stable-fixes).
- wireless: purelifi: plfxlc: fix memory leak in
  plfxlc_usb_wreq_asyn() (stable-fixes).
- wifi: ath12k: using msdu end descriptor to check for rx
  multicast packets (stable-fixes).
- ACPI: Add missing prototype for non CONFIG_SUSPEND/CONFIG_X86
  case (stable-fixes).
- drm/amdgpu: read back register after written for VCN v4.0.5
  (stable-fixes).
- wifi: rtw89: phy: add dummy C2H event handler for report of
  TAS power (stable-fixes).
- drm/xe: Wire up device shutdown handler (stable-fixes).
- commit 59cc8a5</changelog>
  <changelog author="tiwai@suse.de" date="1751198402">- drm/xe/gt: Update handling of xe_force_wake_get return
  (stable-fixes).
- Refresh
  patches.suse/drm-xe-Fix-GT-for-each-engine-workarounds.patch.
- commit 2738ff8</changelog>
  <changelog author="pjakobsson@suse.de" date="1751284800">- drm/amdgpu: csa unmap use uninterruptible lock (CVE-2025-38011
  bsc#1244729).
- commit d370e7c</changelog>
  <changelog author="tiwai@suse.de" date="1751284801">- staging: rtl8723bs: Avoid memset() in aes_cipher() and
  aes_decipher() (git-fixes).
- serial: imx: Restore original RXTL for console to fix data loss
  (git-fixes).
- commit 652de47</changelog>
  <changelog author="tiwai@suse.de" date="1751284802">- serial: core: restore of_node information in sysfs (git-fixes).
- commit 6ac0cc6</changelog>
  <changelog author="osalvador@suse.de" date="1751284803">- mm/hugetlb: unshare page tables during VMA split, not before
  (bsc#1245431).
- commit cdfa193</changelog>
  <changelog author="osalvador@suse.de" date="1751284804">- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
  (bsc#1245431).
- commit 0b96583</changelog>
  <changelog author="osalvador@suse.de" date="1751284805">- mm/hugetlb: unshare page tables during VMA split, not before
  (bsc#1245431).
- commit bf8eb79</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1751284806">- netlink: specs: dpll: replace underscores with dashes in names
  (git-fixes).
- bnxt: properly flush XDP redirect lists (git-fixes).
- e1000e: set fixed clock frequency indication for Nahum 11 and
  Nahum 13 (git-fixes).
- net: ice: Perform accurate aRFS flow match (git-fixes).
- net/mlx5e: Fix leak of Geneve TLV option object (git-fixes).
- net/mlx5: Fix return value when searching for existing flow
  group (git-fixes).
- net/mlx5: Fix ECVF vports unload on shutdown flow (git-fixes).
- net/mlx5: Ensure fw pages are always allocated on same NUMA
  (git-fixes).
- i40e: retry VFLR handling if there is ongoing VF reset
  (git-fixes).
- i40e: return false from i40e_reset_vf if reset is in progress
  (git-fixes).
- gve: add missing NULL check for gve_alloc_pending_packet()
  in TX DQO (git-fixes).
- ice: fix rebuilding the Tx scheduler tree for large queue counts
  (git-fixes).
- ice: create new Tx scheduler nodes for new queues only
  (git-fixes).
- ice: fix Tx scheduler error handling in XDP callback
  (git-fixes).
- net/mlx4_en: Prevent potential integer overflow calculating Hz
  (git-fixes).
- gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt
  (git-fixes).
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid()
  (git-fixes).
- net/mlx5_core: Add error handling
  inmlx5_query_nic_vport_qkey_viol_cntr() (git-fixes).
- idpf: fix null-ptr-deref in idpf_features_check (CVE-2025-38053
  bsc#1244746).
- ice: Fix LACP bonds without SRIOV environment (git-fixes).
- ice: fix vf-&gt;num_mac count with port representors (git-fixes).
- devlink: fix port dump cmd type (git-fixes).
- devlink: Fix referring to hw_addr attribute during state
  validation (git-fixes).
- netlink: fix potential sleeping issue in mqueue_flush_file
  (git-fixes).
- commit 6dccf5f</changelog>
  <changelog author="osalvador@suse.de" date="1751284807">- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
  (bsc#1245431).
- commit dd145d5</changelog>
  <changelog author="ailiop@suse.com" date="1751284808">- nfsd: nfsd4_spo_must_allow() must check this is a v4 compound
  request (git-fixes).
- commit 784f61d</changelog>
  <changelog author="ohering@suse.de" date="1751284809">- add bug reference to existing hv_storvsc change (bsc#1245455).
- net: mana: Record doorbell physical address in PF mode (bsc#1244229).
- commit 1c553b0</changelog>
  <changelog author="tiwai@suse.de" date="1751371200">- rtc: cmos: use spin_lock_irqsave in cmos_interrupt (git-fixes).
- commit d8e756f</changelog>
  <changelog author="pfalcato@suse.de" date="1751371201">- perf/x86/intel: Fix segfault with PEBS-via-PT with sample_freq
  (CVE-2025-38055 bsc#1244747).
- commit 144da01</changelog>
  <changelog author="oneukum@suse.com" date="1751371202">- r8152: add vendor/device ID pair for Dell Alienware AW1022z
  (git-fixes).
- commit 9bd4e20</changelog>
</package>
<package pkgid="d098d50fbe311ebcce7cfcf5111d49233aec7a8b0aacbecbfc14e25569db265d" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.53.6.1"/>
  <changelog author="ohering@suse.de" date="1751025600">- scsi: storvsc: Increase the timeouts to storvsc_timeout (git-fixes).
- net: mana: Add support for Multi Vports on Bare metal (bsc#1244229).
- scsi: storvsc: Don't report the host packet status as the hv status (git-fixes).
- commit cde971c</changelog>
  <changelog author="tiwai@suse.de" date="1751025601">- HID: lenovo: Restrict F7/9/11 mode to compact keyboards only
  (git-fixes).
- HID: wacom: fix kobject reference count leak (git-fixes).
- HID: wacom: fix memory leak on sysfs attribute creation failure
  (git-fixes).
- HID: wacom: fix memory leak on kobject creation failure
  (git-fixes).
- wifi: mac80211: fix beacon interval calculation overflow
  (git-fixes).
- commit 8d2d6ad</changelog>
  <changelog author="joao.povoas@suse.com" date="1751025602">- Update
  patches.suse/ASoC-soc-pcm-don-t-use-soc_pcm_ret-on-.prepare-callb.patch
  (stable-fixes CVE-2024-58077 bsc#1239090).
- Update
  patches.suse/Bluetooth-btbcm-Fix-NULL-deref-in-btbcm_get_board_na.patch
  (git-fixes CVE-2024-57988 bsc#1237910).
- Update
  patches.suse/Bluetooth-btrtl-check-for-NULL-in-btrtl_setup_realte.patch
  (git-fixes CVE-2024-57987 bsc#1237905).
- Update
  patches.suse/RDMA-bnxt_re-Add-sanity-checks-on-rdev-validity.patch
  (bsc#1237200 CVE-2025-21901 bsc#1240579).
- Update patches.suse/RDMA-rtrs-Add-missing-deinit-call.patch
  (git-fixes CVE-2025-21805 bsc#1238741).
- Update
  patches.suse/amdkfd-properly-free-gang_ctx_bo-when-failed-to-init.patch
  (git-fixes CVE-2025-21842 bsc#1239063).
- Update
  patches.suse/cxl-mem-Fix-no-cxl_nvd-during-pmem-region-auto-assem.patch
  (jsc#PED-10836 CVE-2024-41085 bsc#1228478).
- Update
  patches.suse/cxl-pci-Skip-to-handle-RAS-errors-if-CXL.mem-device-.patch
  (jsc#PED-10836 CVE-2024-26762 bsc#1230337).
- Update
  patches.suse/drm-amd-display-Fix-invalid-context-error-in-dml-hel.patch
  (git-fixes CVE-2025-37965 bsc#1244174).
- Update
  patches.suse/drm-amdgpu-init-return-value-in-amdgpu_ttm_clear_buf.patch
  (git-fixes CVE-2025-21987 bsc#1240798).
- Update
  patches.suse/drm-amdkfd-Fix-NULL-Pointer-Dereference-in-KFD-queue.patch
  (git-fixes CVE-2025-21940 bsc#1240702).
- Update
  patches.suse/drm-i915-gt-Use-spin_lock_irqsave-in-interruptible-c.patch
  (git-fixes CVE-2025-21849 bsc#1239485).
- Update
  patches.suse/drm-imagination-avoid-deadlock-on-fence-release.patch
  (git-fixes CVE-2025-21911 bsc#1240589).
- Update
  patches.suse/drm-xe-hmm-Don-t-dereference-struct-page-pointers-wi.patch
  (git-fixes CVE-2025-21939 bsc#1240710).
- Update patches.suse/drm-xe-userptr-fix-EFAULT-handling.patch
  (git-fixes CVE-2025-21880 bsc#1240170).
- Update
  patches.suse/gpu-host1x-Fix-a-use-of-uninitialized-mutex.patch
  (git-fixes CVE-2025-21824 bsc#1238478).
- Update
  patches.suse/iommu-Fix-potential-memory-leak-in-iopf_queue_remove.patch
  (git-fixes CVE-2025-21770 bsc#1238495).
- Update
  patches.suse/media-intel-ipu6-remove-cpu-latency-qos-request-on-e.patch
  (git-fixes CVE-2024-58004 bsc#1238508).
- Update
  patches.suse/net-smc-do-not-leave-a-dangling-sk-pointer-in-__smc_create.patch
  (jsc#PED-10299 bsc#1241689 CVE-2024-50293 bsc#1233482).
- Update
  patches.suse/net-smc-fix-lacks-of-icsk_syn_mss-with-IPPROTO_SMC.patch
  (jsc#PED-10299 bsc#1241689 CVE-2024-50034 bsc#1231913).
- Update
  patches.suse/powerpc-pseries-iommu-Don-t-unset-window-if-it-was-n.patch
  (jsc#PED-10539 git-fixes CVE-2025-21713 bsc#1237887).
- Update
  patches.suse/wifi-ath12k-Fix-for-out-of-bound-access-error.patch
  (bsc#1240998 CVE-2024-58015 bsc#1238995).
- Update
  patches.suse/wifi-ath12k-fix-use-after-free-in-ath12k_dp_cc_clean.patch
  (bsc#1240998 CVE-2024-56541 bsc#1235064).
- Update
  patches.suse/wifi-iwlwifi-mvm-avoid-NULL-pointer-dereference-cf704a7.patch
  (git-fixes CVE-2024-58062 bsc#1238965).
- commit 0597d89</changelog>
  <changelog author="joao.povoas@suse.com" date="1751025603">- Update
  patches.suse/HID-uclogic-Add-NULL-check-in-uclogic_input_configur.patch
  (git-fixes CVE-2025-38007 bsc#1244938).
- Update
  patches.suse/RDMA-core-Fix-KASAN-slab-use-after-free-Read-in-ib_r.patch
  (git-fixes CVE-2025-38022 bsc#1245003).
- Update
  patches.suse/RDMA-rxe-Fix-slab-use-after-free-Read-in-rxe_queue_c.patch
  (git-fixes CVE-2025-38024 bsc#1245025).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-csu.patch
  (bsc#1243342 CVE-2025-38059 bsc#1244759).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1236208 CVE-2025-21658).
- Update
  patches.suse/can-bcm-add-locking-for-bcm_op-runtime-updates.patch
  (git-fixes CVE-2025-38004 bsc#1244274).
- Update
  patches.suse/can-bcm-add-missing-rcu-read-protection-for-procfs-c.patch
  (git-fixes CVE-2025-38003 bsc#1244275).
- Update
  patches.suse/crypto-algif_hash-fix-double-free-in-hash_accept.patch
  (git-fixes CVE-2025-38079 bsc#1245217).
- Update
  patches.suse/crypto-lzo-Fix-compression-buffer-overrun.patch
  (stable-fixes CVE-2025-38068 bsc#1245210).
- Update
  patches.suse/dmaengine-idxd-Refactor-remove-call-with-idxd_cleanu.patch
  (git-fixes CVE-2025-38014 bsc#1244732).
- Update
  patches.suse/dmaengine-idxd-fix-memory-leak-in-error-handling-pat-46a5cca.patch
  (git-fixes CVE-2025-38015 bsc#1244789).
- Update
  patches.suse/dmaengine-ti-k3-udma-Add-missing-locking.patch
  (git-fixes CVE-2025-38005 bsc#1244727).
- Update
  patches.suse/drm-amd-display-Increase-block_sequence-array-size.patch
  (stable-fixes CVE-2025-38080 bsc#1244738).
- Update
  patches.suse/ext4-goto-right-label-out_mmap_sem-in-ext4_setattr.patch
  (bsc#1242556 CVE-2025-22120 bsc#1241592).
- Update
  patches.suse/firmware-arm_ffa-Set-dma_mask-for-ffa-devices.patch
  (stable-fixes CVE-2025-38043 bsc#1245081).
- Update patches.suse/media-cx231xx-set-device_caps-for-417.patch
  (stable-fixes CVE-2025-38044 bsc#1245082).
- Update
  patches.suse/net-handshake-Fix-handshake_req_destroy_test1.patch
  (git-fixes CVE-2024-26831 bsc#1223008).
- Update
  patches.suse/net-mlx5e-Disable-MACsec-offload-for-uplink-represen.patch
  (git-fixes CVE-2025-38020 bsc#1245001).
- Update patches.suse/net_sched-prio-fix-a-race-in-prio_tune.patch
  (git-fixes CVE-2025-38083 bsc#1245183).
- Update
  patches.suse/nfs-handle-failure-of-nfs_get_lock_context-in-unlock-path.patch
  (git-fixes CVE-2025-38023 bsc#1245004).
- Update patches.suse/orangefs-Do-not-truncate-file-size.patch
  (git-fixes CVE-2025-38065 bsc#1244906).
- Update
  patches.suse/padata-do-not-leak-refcount-in-reorder_work.patch
  (git-fixes CVE-2025-38031 bsc#1245046).
- Update
  patches.suse/phy-tegra-xusb-Use-a-bitmask-for-UTMI-pad-power-stat.patch
  (git-fixes CVE-2025-38010 bsc#1244996).
- Update
  patches.suse/platform-x86-dell-wmi-sysman-Avoid-buffer-overflow-i.patch
  (git-fixes CVE-2025-38077 bsc#1244736).
- Update
  patches.suse/regulator-max20086-fix-invalid-memory-access.patch
  (git-fixes CVE-2025-38027 bsc#1245042).
- Update
  patches.suse/s390-pci-Fix-duplicate-pci_dev_put-in-disable_slot-w.patch
  (git-fixes bsc#1244145 CVE-2025-37946 bsc#1243506).
- Update
  patches.suse/s390-pci-fix-potential-double-remove-of-hotplug-slot.patch
  (bsc#1244145 CVE-2024-56699 bsc#1235490).
- Update
  patches.suse/sched-numa-fix-memory-leak-due-to-the-overwritten-vma-numab_state.patch
  (git fixes (sched/numa) CVE-2024-56613 bsc#1244176).
- Update
  patches.suse/serial-mctrl_gpio-split-disable_ms-into-sync-and-no_.patch
  (git-fixes CVE-2025-38040 bsc#1245078).
- Update
  patches.suse/spi-rockchip-Fix-register-out-of-bounds-access.patch
  (stable-fixes CVE-2025-38081 bsc#1244739).
- Update
  patches.suse/usb-typec-ucsi-displayport-Fix-NULL-pointer-access.patch
  (git-fixes CVE-2025-37994 bsc#1243823).
- Update
  patches.suse/vhost-scsi-Fix-handling-of-multiple-calls-to-vhost_s.patch
  (git-fixes CVE-2025-22083 bsc#1241414).
- Update
  patches.suse/wifi-cfg80211-fix-out-of-bounds-access-during-multi-.patch
  (git-fixes CVE-2025-37973 bsc#1244172).
- Update patches.suse/wifi-iwlwifi-fix-debug-actions-order.patch
  (stable-fixes CVE-2025-38045 bsc#1245083).
- Update
  patches.suse/wifi-mac80211-Set-n_channels-after-allocating-struct.patch
  (git-fixes CVE-2025-38013 bsc#1244731).
- Update
  patches.suse/wifi-mt76-disable-napi-on-driver-removal.patch
  (git-fixes CVE-2025-38009 bsc#1244995).
- commit fee1c31</changelog>
  <changelog author="tiwai@suse.de" date="1751198400">- i2c: tiny-usb: disable zero-length read messages (git-fixes).
- i2c: robotfuzz-osif: disable zero-length read messages
  (git-fixes).
- drm/i915: fix build error some more (git-fixes).
- ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X507UAR
  (git-fixes).
- ALSA: usb-audio: Fix out-of-bounds read in
  snd_usb_get_audioformat_uac3() (git-fixes).
- ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged
  (stable-fixes).
- ALSA: usb-audio: Rename ALSA kcontrol PCM and PCM1 for the
  KTMicro sound card (stable-fixes).
- ALSA: hda/intel: Add Thinkpad E15 to PM deny list
  (stable-fixes).
- ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330
  (stable-fixes).
- drivers/rapidio/rio_cm.c: prevent possible heap overwrite
  (stable-fixes).
- watchdog: da9052_wdt: respect TWDMIN (stable-fixes).
- watchdog: fix watchdog may detect false positive of softlockup
  (stable-fixes).
- fbcon: Make sure modelist not set on unregistered console
  (stable-fixes).
- bus: fsl-mc: increase MC_CMD_COMPLETION_TIMEOUT_MS value
  (stable-fixes).
- i2c: designware: Invoke runtime suspend on quick slave
  re-registration (stable-fixes).
- i2c: npcm: Add clock toggle recovery (stable-fixes).
- pinctrl: armada-37xx: propagate error from
  armada_37xx_pmx_set_by_name() (stable-fixes).
- pinctrl: armada-37xx: propagate error from
  armada_37xx_gpio_get_direction() (stable-fixes).
- pinctrl: armada-37xx: propagate error from
  armada_37xx_pmx_gpio_set_direction() (stable-fixes).
- pinctrl: armada-37xx: propagate error from
  armada_37xx_gpio_get() (stable-fixes).
- pinctrl: mcp23s08: Reset all pins to input at probe
  (stable-fixes).
- software node: Correct a OOB check in
  software_node_get_reference_args() (stable-fixes).
- wifi: mt76: mt7996: drop fragments with multicast or broadcast
  RA (stable-fixes).
- wifi: mt76: mt7921: add 160 MHz AP for mt7922 device
  (stable-fixes).
- wifi: mt76: mt76x2: Add support for LiteOn WN4516R,WN4519R
  (stable-fixes).
- wifi: ath12k: fix macro definition HAL_RX_MSDU_PKT_LENGTH_GET
  (stable-fixes).
- wifi: ath12k: fix a possible dead lock caused by ab-&gt;base_lock
  (stable-fixes).
- wifi: ath11k: Fix QMI memory reuse logic (stable-fixes).
- wifi: rtw89: leave idle mode when setting WEP encryption for
  AP mode (stable-fixes).
- wifi: mac80211: do not offer a mesh path if forwarding is
  disabled (stable-fixes).
- wifi: iwlwifi: pcie: make sure to lock rxq-&gt;read (stable-fixes).
- wifi: mac80211_hwsim: Prevent tsf from setting if beacon is
  disabled (stable-fixes).
- wifi: ath12k: fix failed to set mhi state error during reboot
  with hardware grouping (stable-fixes).
- wifi: ath12k: fix link valid field initialization in the
  monitor Rx (stable-fixes).
- wifi: ath12k: fix incorrect CE addresses (stable-fixes).
- wifi: ath12k: Pass correct values of center freq1 and center
  freq2 for 160 MHz (stable-fixes).
- wifi: mac80211: VLAN traffic in multicast path (stable-fixes).
- wifi: iwlwifi: Add missing MODULE_FIRMWARE for Qu-c0-jf-b0
  (stable-fixes).
- usbnet: asix AX88772: leave the carrier control to phylink
  (stable-fixes).
- PM: runtime: fix denying of auto suspend in
  pm_suspend_timer_fn() (stable-fixes).
- ACPI: battery: negate current when discharging (stable-fixes).
- ACPICA: Avoid sequence overread in call to strncmp()
  (stable-fixes).
- ACPICA: utilities: Fix overflow check in vsnprintf()
  (stable-fixes).
- ACPICA: fix acpi parse and parseext cache leaks (stable-fixes).
- ACPICA: fix acpi operand cache leak in dswstate.c
  (stable-fixes).
- ACPI: bus: Bail out if acpi_kobj registration fails
  (stable-fixes).
- mmc: Add quirk to disable DDR50 tuning (stable-fixes).
- power: supply: bq27xxx: Retrieve again when busy (stable-fixes).
- power: supply: collie: Fix wakeup source leaks on device unbind
  (stable-fixes).
- ASoC: amd: yc: Add quirk for Lenovo Yoga Pro 7 14ASP9
  (stable-fixes).
- ASoC: tegra210_ahub: Add check to of_device_get_match_data()
  (stable-fixes).
- ASoC: tas2770: Power cycle amp on ISENSE/VSENSE change
  (stable-fixes).
- Input: sparcspkr - avoid unannotated fall-through
  (stable-fixes).
- commit 0dc7dde</changelog>
  <changelog author="tiwai@suse.de" date="1751198401">- drm/xe: Process deferred GGTT node removals on device unwind
  (git-fixes).
- drm/xe/display: Add check for alloc_ordered_workqueue()
  (git-fixes).
- drm/amd: Adjust output for discovery error handling (git-fixes).
- drm/xe/bmg: Update Wa_16023588340 (git-fixes).
- drm/v3d: Avoid NULL pointer dereference in
  `v3d_job_update_stats()` (stable-fixes).
- PCI: Add ACS quirk for Loongson PCIe (stable-fixes).
- wifi: mt76: mt7925: introduce thermal protection (stable-fixes).
- wifi: mac80211: validate SCAN_FLAG_AP in scan request during
  MLO (stable-fixes).
- wifi: rtw89: 8922a: fix TX fail with wrong VCO setting
  (stable-fixes).
- wifi: iwlwifi: mvm: fix beacon CCK flag (stable-fixes).
- wireless: purelifi: plfxlc: fix memory leak in
  plfxlc_usb_wreq_asyn() (stable-fixes).
- wifi: ath12k: using msdu end descriptor to check for rx
  multicast packets (stable-fixes).
- ACPI: Add missing prototype for non CONFIG_SUSPEND/CONFIG_X86
  case (stable-fixes).
- drm/amdgpu: read back register after written for VCN v4.0.5
  (stable-fixes).
- wifi: rtw89: phy: add dummy C2H event handler for report of
  TAS power (stable-fixes).
- drm/xe: Wire up device shutdown handler (stable-fixes).
- commit 59cc8a5</changelog>
  <changelog author="tiwai@suse.de" date="1751198402">- drm/xe/gt: Update handling of xe_force_wake_get return
  (stable-fixes).
- Refresh
  patches.suse/drm-xe-Fix-GT-for-each-engine-workarounds.patch.
- commit 2738ff8</changelog>
  <changelog author="pjakobsson@suse.de" date="1751284800">- drm/amdgpu: csa unmap use uninterruptible lock (CVE-2025-38011
  bsc#1244729).
- commit d370e7c</changelog>
  <changelog author="tiwai@suse.de" date="1751284801">- staging: rtl8723bs: Avoid memset() in aes_cipher() and
  aes_decipher() (git-fixes).
- serial: imx: Restore original RXTL for console to fix data loss
  (git-fixes).
- commit 652de47</changelog>
  <changelog author="tiwai@suse.de" date="1751284802">- serial: core: restore of_node information in sysfs (git-fixes).
- commit 6ac0cc6</changelog>
  <changelog author="osalvador@suse.de" date="1751284803">- mm/hugetlb: unshare page tables during VMA split, not before
  (bsc#1245431).
- commit cdfa193</changelog>
  <changelog author="osalvador@suse.de" date="1751284804">- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
  (bsc#1245431).
- commit 0b96583</changelog>
  <changelog author="osalvador@suse.de" date="1751284805">- mm/hugetlb: unshare page tables during VMA split, not before
  (bsc#1245431).
- commit bf8eb79</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1751284806">- netlink: specs: dpll: replace underscores with dashes in names
  (git-fixes).
- bnxt: properly flush XDP redirect lists (git-fixes).
- e1000e: set fixed clock frequency indication for Nahum 11 and
  Nahum 13 (git-fixes).
- net: ice: Perform accurate aRFS flow match (git-fixes).
- net/mlx5e: Fix leak of Geneve TLV option object (git-fixes).
- net/mlx5: Fix return value when searching for existing flow
  group (git-fixes).
- net/mlx5: Fix ECVF vports unload on shutdown flow (git-fixes).
- net/mlx5: Ensure fw pages are always allocated on same NUMA
  (git-fixes).
- i40e: retry VFLR handling if there is ongoing VF reset
  (git-fixes).
- i40e: return false from i40e_reset_vf if reset is in progress
  (git-fixes).
- gve: add missing NULL check for gve_alloc_pending_packet()
  in TX DQO (git-fixes).
- ice: fix rebuilding the Tx scheduler tree for large queue counts
  (git-fixes).
- ice: create new Tx scheduler nodes for new queues only
  (git-fixes).
- ice: fix Tx scheduler error handling in XDP callback
  (git-fixes).
- net/mlx4_en: Prevent potential integer overflow calculating Hz
  (git-fixes).
- gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt
  (git-fixes).
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid()
  (git-fixes).
- net/mlx5_core: Add error handling
  inmlx5_query_nic_vport_qkey_viol_cntr() (git-fixes).
- idpf: fix null-ptr-deref in idpf_features_check (CVE-2025-38053
  bsc#1244746).
- ice: Fix LACP bonds without SRIOV environment (git-fixes).
- ice: fix vf-&gt;num_mac count with port representors (git-fixes).
- devlink: fix port dump cmd type (git-fixes).
- devlink: Fix referring to hw_addr attribute during state
  validation (git-fixes).
- netlink: fix potential sleeping issue in mqueue_flush_file
  (git-fixes).
- commit 6dccf5f</changelog>
  <changelog author="osalvador@suse.de" date="1751284807">- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
  (bsc#1245431).
- commit dd145d5</changelog>
  <changelog author="ailiop@suse.com" date="1751284808">- nfsd: nfsd4_spo_must_allow() must check this is a v4 compound
  request (git-fixes).
- commit 784f61d</changelog>
  <changelog author="ohering@suse.de" date="1751284809">- add bug reference to existing hv_storvsc change (bsc#1245455).
- net: mana: Record doorbell physical address in PF mode (bsc#1244229).
- commit 1c553b0</changelog>
  <changelog author="tiwai@suse.de" date="1751371200">- rtc: cmos: use spin_lock_irqsave in cmos_interrupt (git-fixes).
- commit d8e756f</changelog>
  <changelog author="pfalcato@suse.de" date="1751371201">- perf/x86/intel: Fix segfault with PEBS-via-PT with sample_freq
  (CVE-2025-38055 bsc#1244747).
- commit 144da01</changelog>
  <changelog author="oneukum@suse.com" date="1751371202">- r8152: add vendor/device ID pair for Dell Alienware AW1022z
  (git-fixes).
- commit 9bd4e20</changelog>
</package>
<package pkgid="69ec65ac60698d307cdd5049d341af1cd092b060472c9ff3d8e4e8e9711aa245" name="kernel-default-base" arch="src">
  <version epoch="0" ver="6.4.0" rel="150700.53.11.1.150700.17.9.4"/>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
  <changelog author="gmoro@suse.com" date="1686225600">- Add ptp_kvm (bsc#1211969)</changelog>
  <changelog author="fvogt@suse.com" date="1698667200">- Add dummy (boo#1216647)</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Add macvlan</changelog>
  <changelog author="lnussel@suse.com" date="1704715200">- Add dm-crypt for encrypted hard disk support
- Add dmi-sysfs for systemd to receive credentials via smbios</changelog>
  <changelog author="fvogt@suse.com" date="1736856000">- Add virtiofs</changelog>
  <changelog author="fvogt@suse.com" date="1740484800">- Add 9p with support for virtio and xen</changelog>
  <changelog author="fvogt@suse.com" date="1751457600">- Add nvme support (bsc#1245533)</changelog>
  <changelog author="fvogt@suse.com" date="1752667200">- Add modules for confidential compute (bsc#1246502)</changelog>
</package>
<package pkgid="d478b168ff171da810e7a0a6493a781b3df1007bfaea00f494bf178a61129612" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.53.11.1.150700.17.9.4"/>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
  <changelog author="gmoro@suse.com" date="1686225600">- Add ptp_kvm (bsc#1211969)</changelog>
  <changelog author="fvogt@suse.com" date="1698667200">- Add dummy (boo#1216647)</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Add macvlan</changelog>
  <changelog author="lnussel@suse.com" date="1704715200">- Add dm-crypt for encrypted hard disk support
- Add dmi-sysfs for systemd to receive credentials via smbios</changelog>
  <changelog author="fvogt@suse.com" date="1736856000">- Add virtiofs</changelog>
  <changelog author="fvogt@suse.com" date="1740484800">- Add 9p with support for virtio and xen</changelog>
  <changelog author="fvogt@suse.com" date="1751457600">- Add nvme support (bsc#1245533)</changelog>
  <changelog author="fvogt@suse.com" date="1752667200">- Add modules for confidential compute (bsc#1246502)</changelog>
</package>
<package pkgid="e3d2935395882ba56ade4442b3f6c8c2a73da35a15274c2f6ea8dc5d5c7c9d65" name="kernel-default-base" arch="src">
  <version epoch="0" ver="6.4.0" rel="150700.53.16.1.150700.17.11.2"/>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
  <changelog author="gmoro@suse.com" date="1686225600">- Add ptp_kvm (bsc#1211969)</changelog>
  <changelog author="fvogt@suse.com" date="1698667200">- Add dummy (boo#1216647)</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Add macvlan</changelog>
  <changelog author="lnussel@suse.com" date="1704715200">- Add dm-crypt for encrypted hard disk support
- Add dmi-sysfs for systemd to receive credentials via smbios</changelog>
  <changelog author="fvogt@suse.com" date="1736856000">- Add virtiofs</changelog>
  <changelog author="fvogt@suse.com" date="1740484800">- Add 9p with support for virtio and xen</changelog>
  <changelog author="fvogt@suse.com" date="1751457600">- Add nvme support (bsc#1245533)</changelog>
  <changelog author="fvogt@suse.com" date="1752667200">- Add modules for confidential compute (bsc#1246502)</changelog>
</package>
<package pkgid="9a708dc442a802978321e242322e7a12f81ac9c6194d126df96983a0f3687ee3" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.53.16.1.150700.17.11.2"/>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
  <changelog author="gmoro@suse.com" date="1686225600">- Add ptp_kvm (bsc#1211969)</changelog>
  <changelog author="fvogt@suse.com" date="1698667200">- Add dummy (boo#1216647)</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Add macvlan</changelog>
  <changelog author="lnussel@suse.com" date="1704715200">- Add dm-crypt for encrypted hard disk support
- Add dmi-sysfs for systemd to receive credentials via smbios</changelog>
  <changelog author="fvogt@suse.com" date="1736856000">- Add virtiofs</changelog>
  <changelog author="fvogt@suse.com" date="1740484800">- Add 9p with support for virtio and xen</changelog>
  <changelog author="fvogt@suse.com" date="1751457600">- Add nvme support (bsc#1245533)</changelog>
  <changelog author="fvogt@suse.com" date="1752667200">- Add modules for confidential compute (bsc#1246502)</changelog>
</package>
<package pkgid="f26b781d9b5cb9085c61b32d8080a4dfe43cef9f46c82c7004334722b1e66e9b" name="kernel-default-base" arch="src">
  <version epoch="0" ver="6.4.0" rel="150700.53.19.1.150700.17.13.1"/>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
  <changelog author="gmoro@suse.com" date="1686225600">- Add ptp_kvm (bsc#1211969)</changelog>
  <changelog author="fvogt@suse.com" date="1698667200">- Add dummy (boo#1216647)</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Add macvlan</changelog>
  <changelog author="lnussel@suse.com" date="1704715200">- Add dm-crypt for encrypted hard disk support
- Add dmi-sysfs for systemd to receive credentials via smbios</changelog>
  <changelog author="fvogt@suse.com" date="1736856000">- Add virtiofs</changelog>
  <changelog author="fvogt@suse.com" date="1740484800">- Add 9p with support for virtio and xen</changelog>
  <changelog author="fvogt@suse.com" date="1751457600">- Add nvme support (bsc#1245533)</changelog>
  <changelog author="fvogt@suse.com" date="1752667200">- Add modules for confidential compute (bsc#1246502)</changelog>
</package>
<package pkgid="9822c90eaae4e26ecd60eb98ea6baa875e2dc4d80e3407f775ee5b9e499d8015" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.53.19.1.150700.17.13.1"/>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
  <changelog author="gmoro@suse.com" date="1686225600">- Add ptp_kvm (bsc#1211969)</changelog>
  <changelog author="fvogt@suse.com" date="1698667200">- Add dummy (boo#1216647)</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Add macvlan</changelog>
  <changelog author="lnussel@suse.com" date="1704715200">- Add dm-crypt for encrypted hard disk support
- Add dmi-sysfs for systemd to receive credentials via smbios</changelog>
  <changelog author="fvogt@suse.com" date="1736856000">- Add virtiofs</changelog>
  <changelog author="fvogt@suse.com" date="1740484800">- Add 9p with support for virtio and xen</changelog>
  <changelog author="fvogt@suse.com" date="1751457600">- Add nvme support (bsc#1245533)</changelog>
  <changelog author="fvogt@suse.com" date="1752667200">- Add modules for confidential compute (bsc#1246502)</changelog>
</package>
<package pkgid="7fec0ef0d396556dd7f0905a5b02c1dc948a43e30b31832a6e9f49c5ea1d20b3" name="kernel-default-base" arch="src">
  <version epoch="0" ver="6.4.0" rel="150700.53.22.1.150700.17.15.1"/>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
  <changelog author="gmoro@suse.com" date="1686225600">- Add ptp_kvm (bsc#1211969)</changelog>
  <changelog author="fvogt@suse.com" date="1698667200">- Add dummy (boo#1216647)</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Add macvlan</changelog>
  <changelog author="lnussel@suse.com" date="1704715200">- Add dm-crypt for encrypted hard disk support
- Add dmi-sysfs for systemd to receive credentials via smbios</changelog>
  <changelog author="fvogt@suse.com" date="1736856000">- Add virtiofs</changelog>
  <changelog author="fvogt@suse.com" date="1740484800">- Add 9p with support for virtio and xen</changelog>
  <changelog author="fvogt@suse.com" date="1751457600">- Add nvme support (bsc#1245533)</changelog>
  <changelog author="fvogt@suse.com" date="1752667200">- Add modules for confidential compute (bsc#1246502)</changelog>
</package>
<package pkgid="8c7754ab596ae3fdcfead45e81ed272904a2073a9ac2c53200383f38fe76837a" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.53.22.1.150700.17.15.1"/>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
  <changelog author="gmoro@suse.com" date="1686225600">- Add ptp_kvm (bsc#1211969)</changelog>
  <changelog author="fvogt@suse.com" date="1698667200">- Add dummy (boo#1216647)</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Add macvlan</changelog>
  <changelog author="lnussel@suse.com" date="1704715200">- Add dm-crypt for encrypted hard disk support
- Add dmi-sysfs for systemd to receive credentials via smbios</changelog>
  <changelog author="fvogt@suse.com" date="1736856000">- Add virtiofs</changelog>
  <changelog author="fvogt@suse.com" date="1740484800">- Add 9p with support for virtio and xen</changelog>
  <changelog author="fvogt@suse.com" date="1751457600">- Add nvme support (bsc#1245533)</changelog>
  <changelog author="fvogt@suse.com" date="1752667200">- Add modules for confidential compute (bsc#1246502)</changelog>
</package>
<package pkgid="706139a02b074555c164dd508337ab3e2ffc9f163c166164b765eb4b3efab4fe" name="kernel-default-base" arch="src">
  <version epoch="0" ver="6.4.0" rel="150700.53.25.1.150700.17.17.1"/>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
  <changelog author="gmoro@suse.com" date="1686225600">- Add ptp_kvm (bsc#1211969)</changelog>
  <changelog author="fvogt@suse.com" date="1698667200">- Add dummy (boo#1216647)</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Add macvlan</changelog>
  <changelog author="lnussel@suse.com" date="1704715200">- Add dm-crypt for encrypted hard disk support
- Add dmi-sysfs for systemd to receive credentials via smbios</changelog>
  <changelog author="fvogt@suse.com" date="1736856000">- Add virtiofs</changelog>
  <changelog author="fvogt@suse.com" date="1740484800">- Add 9p with support for virtio and xen</changelog>
  <changelog author="fvogt@suse.com" date="1751457600">- Add nvme support (bsc#1245533)</changelog>
  <changelog author="fvogt@suse.com" date="1752667200">- Add modules for confidential compute (bsc#1246502)</changelog>
</package>
<package pkgid="7ac46520d49aa318347ae66d09bfab402157f5dc5710642e3eadba181a76d349" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.53.25.1.150700.17.17.1"/>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
  <changelog author="gmoro@suse.com" date="1686225600">- Add ptp_kvm (bsc#1211969)</changelog>
  <changelog author="fvogt@suse.com" date="1698667200">- Add dummy (boo#1216647)</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Add macvlan</changelog>
  <changelog author="lnussel@suse.com" date="1704715200">- Add dm-crypt for encrypted hard disk support
- Add dmi-sysfs for systemd to receive credentials via smbios</changelog>
  <changelog author="fvogt@suse.com" date="1736856000">- Add virtiofs</changelog>
  <changelog author="fvogt@suse.com" date="1740484800">- Add 9p with support for virtio and xen</changelog>
  <changelog author="fvogt@suse.com" date="1751457600">- Add nvme support (bsc#1245533)</changelog>
  <changelog author="fvogt@suse.com" date="1752667200">- Add modules for confidential compute (bsc#1246502)</changelog>
</package>
<package pkgid="3cf3a3215040a44c3bed1c779b952b0d59eb7855c6fa93db7bb2353473cf7d42" name="kernel-default-base" arch="src">
  <version epoch="0" ver="6.4.0" rel="150700.53.28.1.150700.17.19.1"/>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
  <changelog author="gmoro@suse.com" date="1686225600">- Add ptp_kvm (bsc#1211969)</changelog>
  <changelog author="fvogt@suse.com" date="1698667200">- Add dummy (boo#1216647)</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Add macvlan</changelog>
  <changelog author="lnussel@suse.com" date="1704715200">- Add dm-crypt for encrypted hard disk support
- Add dmi-sysfs for systemd to receive credentials via smbios</changelog>
  <changelog author="fvogt@suse.com" date="1736856000">- Add virtiofs</changelog>
  <changelog author="fvogt@suse.com" date="1740484800">- Add 9p with support for virtio and xen</changelog>
  <changelog author="fvogt@suse.com" date="1751457600">- Add nvme support (bsc#1245533)</changelog>
  <changelog author="fvogt@suse.com" date="1752667200">- Add modules for confidential compute (bsc#1246502)</changelog>
</package>
<package pkgid="12c1eaf49a6c10ab90e7afe1254c6330b2cc5ccd6d62d8be1fff808b1ebd4a08" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.53.28.1.150700.17.19.1"/>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
  <changelog author="gmoro@suse.com" date="1686225600">- Add ptp_kvm (bsc#1211969)</changelog>
  <changelog author="fvogt@suse.com" date="1698667200">- Add dummy (boo#1216647)</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Add macvlan</changelog>
  <changelog author="lnussel@suse.com" date="1704715200">- Add dm-crypt for encrypted hard disk support
- Add dmi-sysfs for systemd to receive credentials via smbios</changelog>
  <changelog author="fvogt@suse.com" date="1736856000">- Add virtiofs</changelog>
  <changelog author="fvogt@suse.com" date="1740484800">- Add 9p with support for virtio and xen</changelog>
  <changelog author="fvogt@suse.com" date="1751457600">- Add nvme support (bsc#1245533)</changelog>
  <changelog author="fvogt@suse.com" date="1752667200">- Add modules for confidential compute (bsc#1246502)</changelog>
</package>
<package pkgid="dc1654063518bbbc9a768ba106dfb441cc3716531f644b61c1ff4f791da6da8f" name="kernel-default-base" arch="src">
  <version epoch="0" ver="6.4.0" rel="150700.53.3.1.150700.17.2.1"/>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
  <changelog author="gmoro@suse.com" date="1686225600">- Add ptp_kvm (bsc#1211969)</changelog>
  <changelog author="fvogt@suse.com" date="1698667200">- Add dummy (boo#1216647)</changelog>
</package>
<package pkgid="8609ba51ffb4aa5e6121628d9acadeaf3f5780de7ae9fcaf94d9d22a99b0f46e" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.53.3.1.150700.17.2.1"/>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
  <changelog author="gmoro@suse.com" date="1686225600">- Add ptp_kvm (bsc#1211969)</changelog>
  <changelog author="fvogt@suse.com" date="1698667200">- Add dummy (boo#1216647)</changelog>
</package>
<package pkgid="fdd3bcfab399f8dfba1eb4b2ec131d6851af483a3b29a60f37da71cfcb44c24a" name="kernel-default-base" arch="src">
  <version epoch="0" ver="6.4.0" rel="150700.53.31.1.150700.17.21.1"/>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
  <changelog author="gmoro@suse.com" date="1686225600">- Add ptp_kvm (bsc#1211969)</changelog>
  <changelog author="fvogt@suse.com" date="1698667200">- Add dummy (boo#1216647)</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Add macvlan</changelog>
  <changelog author="lnussel@suse.com" date="1704715200">- Add dm-crypt for encrypted hard disk support
- Add dmi-sysfs for systemd to receive credentials via smbios</changelog>
  <changelog author="fvogt@suse.com" date="1736856000">- Add virtiofs</changelog>
  <changelog author="fvogt@suse.com" date="1740484800">- Add 9p with support for virtio and xen</changelog>
  <changelog author="fvogt@suse.com" date="1751457600">- Add nvme support (bsc#1245533)</changelog>
  <changelog author="fvogt@suse.com" date="1752667200">- Add modules for confidential compute (bsc#1246502)</changelog>
</package>
<package pkgid="addd9aa2fb36de6b411a02f70aef0bab90e1e7d1aa136e5051d871b0f63c2414" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.53.31.1.150700.17.21.1"/>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
  <changelog author="gmoro@suse.com" date="1686225600">- Add ptp_kvm (bsc#1211969)</changelog>
  <changelog author="fvogt@suse.com" date="1698667200">- Add dummy (boo#1216647)</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Add macvlan</changelog>
  <changelog author="lnussel@suse.com" date="1704715200">- Add dm-crypt for encrypted hard disk support
- Add dmi-sysfs for systemd to receive credentials via smbios</changelog>
  <changelog author="fvogt@suse.com" date="1736856000">- Add virtiofs</changelog>
  <changelog author="fvogt@suse.com" date="1740484800">- Add 9p with support for virtio and xen</changelog>
  <changelog author="fvogt@suse.com" date="1751457600">- Add nvme support (bsc#1245533)</changelog>
  <changelog author="fvogt@suse.com" date="1752667200">- Add modules for confidential compute (bsc#1246502)</changelog>
</package>
<package pkgid="41a3444623f511f1e131e1d264f0e1c42b9bd6be0d64807f4123c1e66ccd90cf" name="kernel-default-base" arch="src">
  <version epoch="0" ver="6.4.0" rel="150700.53.34.1.150700.17.23.1"/>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
  <changelog author="gmoro@suse.com" date="1686225600">- Add ptp_kvm (bsc#1211969)</changelog>
  <changelog author="fvogt@suse.com" date="1698667200">- Add dummy (boo#1216647)</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Add macvlan</changelog>
  <changelog author="lnussel@suse.com" date="1704715200">- Add dm-crypt for encrypted hard disk support
- Add dmi-sysfs for systemd to receive credentials via smbios</changelog>
  <changelog author="fvogt@suse.com" date="1736856000">- Add virtiofs</changelog>
  <changelog author="fvogt@suse.com" date="1740484800">- Add 9p with support for virtio and xen</changelog>
  <changelog author="fvogt@suse.com" date="1751457600">- Add nvme support (bsc#1245533)</changelog>
  <changelog author="fvogt@suse.com" date="1752667200">- Add modules for confidential compute (bsc#1246502)</changelog>
</package>
<package pkgid="6f91786adeb7162da1f17ec14c98edf8c05e64e891b401e0bf94051c93aa49a3" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.53.34.1.150700.17.23.1"/>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
  <changelog author="gmoro@suse.com" date="1686225600">- Add ptp_kvm (bsc#1211969)</changelog>
  <changelog author="fvogt@suse.com" date="1698667200">- Add dummy (boo#1216647)</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Add macvlan</changelog>
  <changelog author="lnussel@suse.com" date="1704715200">- Add dm-crypt for encrypted hard disk support
- Add dmi-sysfs for systemd to receive credentials via smbios</changelog>
  <changelog author="fvogt@suse.com" date="1736856000">- Add virtiofs</changelog>
  <changelog author="fvogt@suse.com" date="1740484800">- Add 9p with support for virtio and xen</changelog>
  <changelog author="fvogt@suse.com" date="1751457600">- Add nvme support (bsc#1245533)</changelog>
  <changelog author="fvogt@suse.com" date="1752667200">- Add modules for confidential compute (bsc#1246502)</changelog>
</package>
<package pkgid="371dd947939af210166176f4b41138b889642871372476c67982007b1ca2ee49" name="kernel-default-base" arch="src">
  <version epoch="0" ver="6.4.0" rel="150700.53.37.1.150700.17.25.1"/>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
  <changelog author="gmoro@suse.com" date="1686225600">- Add ptp_kvm (bsc#1211969)</changelog>
  <changelog author="fvogt@suse.com" date="1698667200">- Add dummy (boo#1216647)</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Add macvlan</changelog>
  <changelog author="lnussel@suse.com" date="1704715200">- Add dm-crypt for encrypted hard disk support
- Add dmi-sysfs for systemd to receive credentials via smbios</changelog>
  <changelog author="fvogt@suse.com" date="1736856000">- Add virtiofs</changelog>
  <changelog author="fvogt@suse.com" date="1740484800">- Add 9p with support for virtio and xen</changelog>
  <changelog author="fvogt@suse.com" date="1751457600">- Add nvme support (bsc#1245533)</changelog>
  <changelog author="fvogt@suse.com" date="1752667200">- Add modules for confidential compute (bsc#1246502)</changelog>
</package>
<package pkgid="b7347499073ffc5cc5ea0260e7756ed0a75ec9515cd801af90a3cc230a09019b" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.53.37.1.150700.17.25.1"/>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
  <changelog author="gmoro@suse.com" date="1686225600">- Add ptp_kvm (bsc#1211969)</changelog>
  <changelog author="fvogt@suse.com" date="1698667200">- Add dummy (boo#1216647)</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Add macvlan</changelog>
  <changelog author="lnussel@suse.com" date="1704715200">- Add dm-crypt for encrypted hard disk support
- Add dmi-sysfs for systemd to receive credentials via smbios</changelog>
  <changelog author="fvogt@suse.com" date="1736856000">- Add virtiofs</changelog>
  <changelog author="fvogt@suse.com" date="1740484800">- Add 9p with support for virtio and xen</changelog>
  <changelog author="fvogt@suse.com" date="1751457600">- Add nvme support (bsc#1245533)</changelog>
  <changelog author="fvogt@suse.com" date="1752667200">- Add modules for confidential compute (bsc#1246502)</changelog>
</package>
<package pkgid="7753c7dc4d5800399ea8cb05721deea64b0c8656a0d015952fa477b3b0645055" name="kernel-default-base" arch="src">
  <version epoch="0" ver="6.4.0" rel="150700.53.40.1.150700.17.27.1"/>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
  <changelog author="gmoro@suse.com" date="1686225600">- Add ptp_kvm (bsc#1211969)</changelog>
  <changelog author="fvogt@suse.com" date="1698667200">- Add dummy (boo#1216647)</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Add macvlan</changelog>
  <changelog author="lnussel@suse.com" date="1704715200">- Add dm-crypt for encrypted hard disk support
- Add dmi-sysfs for systemd to receive credentials via smbios</changelog>
  <changelog author="fvogt@suse.com" date="1736856000">- Add virtiofs</changelog>
  <changelog author="fvogt@suse.com" date="1740484800">- Add 9p with support for virtio and xen</changelog>
  <changelog author="fvogt@suse.com" date="1751457600">- Add nvme support (bsc#1245533)</changelog>
  <changelog author="fvogt@suse.com" date="1752667200">- Add modules for confidential compute (bsc#1246502)</changelog>
</package>
<package pkgid="0bae2a8294d985396ff2682a68dd6984281af1da83e2cbf6cea2b29fb2fc7dd7" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.53.40.1.150700.17.27.1"/>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
  <changelog author="gmoro@suse.com" date="1686225600">- Add ptp_kvm (bsc#1211969)</changelog>
  <changelog author="fvogt@suse.com" date="1698667200">- Add dummy (boo#1216647)</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Add macvlan</changelog>
  <changelog author="lnussel@suse.com" date="1704715200">- Add dm-crypt for encrypted hard disk support
- Add dmi-sysfs for systemd to receive credentials via smbios</changelog>
  <changelog author="fvogt@suse.com" date="1736856000">- Add virtiofs</changelog>
  <changelog author="fvogt@suse.com" date="1740484800">- Add 9p with support for virtio and xen</changelog>
  <changelog author="fvogt@suse.com" date="1751457600">- Add nvme support (bsc#1245533)</changelog>
  <changelog author="fvogt@suse.com" date="1752667200">- Add modules for confidential compute (bsc#1246502)</changelog>
</package>
<package pkgid="045c12665c23c25c4373f3729aa9bd45d08c6d81b0815b430998eda679069eeb" name="kernel-default-base" arch="src">
  <version epoch="0" ver="6.4.0" rel="150700.53.45.1.150700.17.29.2"/>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
  <changelog author="gmoro@suse.com" date="1686225600">- Add ptp_kvm (bsc#1211969)</changelog>
  <changelog author="fvogt@suse.com" date="1698667200">- Add dummy (boo#1216647)</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Add macvlan</changelog>
  <changelog author="lnussel@suse.com" date="1704715200">- Add dm-crypt for encrypted hard disk support
- Add dmi-sysfs for systemd to receive credentials via smbios</changelog>
  <changelog author="fvogt@suse.com" date="1736856000">- Add virtiofs</changelog>
  <changelog author="fvogt@suse.com" date="1740484800">- Add 9p with support for virtio and xen</changelog>
  <changelog author="fvogt@suse.com" date="1751457600">- Add nvme support (bsc#1245533)</changelog>
  <changelog author="fvogt@suse.com" date="1752667200">- Add modules for confidential compute (bsc#1246502)</changelog>
</package>
<package pkgid="3bd7f6ac27dd4a34c02a60c237070cb46968dcca666b2bd4e2d02c64b576a1e8" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.53.45.1.150700.17.29.2"/>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
  <changelog author="gmoro@suse.com" date="1686225600">- Add ptp_kvm (bsc#1211969)</changelog>
  <changelog author="fvogt@suse.com" date="1698667200">- Add dummy (boo#1216647)</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Add macvlan</changelog>
  <changelog author="lnussel@suse.com" date="1704715200">- Add dm-crypt for encrypted hard disk support
- Add dmi-sysfs for systemd to receive credentials via smbios</changelog>
  <changelog author="fvogt@suse.com" date="1736856000">- Add virtiofs</changelog>
  <changelog author="fvogt@suse.com" date="1740484800">- Add 9p with support for virtio and xen</changelog>
  <changelog author="fvogt@suse.com" date="1751457600">- Add nvme support (bsc#1245533)</changelog>
  <changelog author="fvogt@suse.com" date="1752667200">- Add modules for confidential compute (bsc#1246502)</changelog>
</package>
<package pkgid="8e3adb84c98a699eac257c8ff12318e338f3e0158a8e4922693bacc696c52060" name="kernel-default-base" arch="src">
  <version epoch="0" ver="6.4.0" rel="150700.53.52.1.150700.17.31.3"/>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
  <changelog author="gmoro@suse.com" date="1686225600">- Add ptp_kvm (bsc#1211969)</changelog>
  <changelog author="fvogt@suse.com" date="1698667200">- Add dummy (boo#1216647)</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Add macvlan</changelog>
  <changelog author="lnussel@suse.com" date="1704715200">- Add dm-crypt for encrypted hard disk support
- Add dmi-sysfs for systemd to receive credentials via smbios</changelog>
  <changelog author="fvogt@suse.com" date="1736856000">- Add virtiofs</changelog>
  <changelog author="fvogt@suse.com" date="1740484800">- Add 9p with support for virtio and xen</changelog>
  <changelog author="fvogt@suse.com" date="1751457600">- Add nvme support (bsc#1245533)</changelog>
  <changelog author="fvogt@suse.com" date="1752667200">- Add modules for confidential compute (bsc#1246502)</changelog>
</package>
<package pkgid="08830eaf53152e6b0af69a2352ed3124940d19e2a99e48eff3e87661a058d0d4" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.53.52.1.150700.17.31.3"/>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
  <changelog author="gmoro@suse.com" date="1686225600">- Add ptp_kvm (bsc#1211969)</changelog>
  <changelog author="fvogt@suse.com" date="1698667200">- Add dummy (boo#1216647)</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Add macvlan</changelog>
  <changelog author="lnussel@suse.com" date="1704715200">- Add dm-crypt for encrypted hard disk support
- Add dmi-sysfs for systemd to receive credentials via smbios</changelog>
  <changelog author="fvogt@suse.com" date="1736856000">- Add virtiofs</changelog>
  <changelog author="fvogt@suse.com" date="1740484800">- Add 9p with support for virtio and xen</changelog>
  <changelog author="fvogt@suse.com" date="1751457600">- Add nvme support (bsc#1245533)</changelog>
  <changelog author="fvogt@suse.com" date="1752667200">- Add modules for confidential compute (bsc#1246502)</changelog>
</package>
<package pkgid="46b585528f2ca5ada24519fccd1f12ed3ea760cacd7cb5a565ef64fb8a7ae19e" name="kernel-default-base" arch="src">
  <version epoch="0" ver="6.4.0" rel="150700.53.6.1.150700.17.6.1"/>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
  <changelog author="gmoro@suse.com" date="1686225600">- Add ptp_kvm (bsc#1211969)</changelog>
  <changelog author="fvogt@suse.com" date="1698667200">- Add dummy (boo#1216647)</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Add macvlan</changelog>
  <changelog author="lnussel@suse.com" date="1704715200">- Add dm-crypt for encrypted hard disk support
- Add dmi-sysfs for systemd to receive credentials via smbios</changelog>
  <changelog author="fvogt@suse.com" date="1736856000">- Add virtiofs</changelog>
  <changelog author="fvogt@suse.com" date="1740484800">- Add 9p with support for virtio and xen</changelog>
  <changelog author="fvogt@suse.com" date="1751457600">- Add nvme support (bsc#1245533)</changelog>
</package>
<package pkgid="31124b6835f0e51fcaf0232711d971a02c24638b12e86c311ecd332dbad766d9" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.53.6.1.150700.17.6.1"/>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
  <changelog author="gmoro@suse.com" date="1686225600">- Add ptp_kvm (bsc#1211969)</changelog>
  <changelog author="fvogt@suse.com" date="1698667200">- Add dummy (boo#1216647)</changelog>
  <changelog author="fvogt@suse.com" date="1702468800">- Add macvlan</changelog>
  <changelog author="lnussel@suse.com" date="1704715200">- Add dm-crypt for encrypted hard disk support
- Add dmi-sysfs for systemd to receive credentials via smbios</changelog>
  <changelog author="fvogt@suse.com" date="1736856000">- Add virtiofs</changelog>
  <changelog author="fvogt@suse.com" date="1740484800">- Add 9p with support for virtio and xen</changelog>
  <changelog author="fvogt@suse.com" date="1751457600">- Add nvme support (bsc#1245533)</changelog>
</package>
<package pkgid="f3e02365d2e6effdcae76ab27f778f44d2e94e266670ab7a317a2171f55ca6cf" name="kernel-default-devel" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.53.11.1"/>
  <changelog author="ailiop@suse.com" date="1754913600">- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY
  (git-fixes).
- commit fd58755</changelog>
  <changelog author="ailiop@suse.com" date="1754913601">- sunrpc: fix client side handling of tls alerts (git-fixes).
- commit 4c093f3</changelog>
  <changelog author="ailiop@suse.com" date="1754913602">- NFS: Fix the setting of capabilities when automounting a new
  filesystem (git-fixes).
- commit fabe208</changelog>
  <changelog author="tzimmermann@suse.com" date="1754913603">- drm/amdgpu: Add basic validation for RAS header (bsc#1247252 CVE-2025-38426)
- commit 5d23e74</changelog>
  <changelog author="ailiop@suse.com" date="1754913604">- sched: Add test_and_clear_wake_up_bit() and
  atomic_dec_and_wake_up() (git-fixes).
- commit 3754627</changelog>
  <changelog author="ailiop@suse.com" date="1754913605">- NFS: Fix wakeup of __nfs_lookup_revalidate() in
  unblock_revalidate() (git-fixes).
- commit 80e576f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1754913606">- netlink: avoid infinite retry looping in netlink_unicast()
  (CVE-2025-38465 bsc#1247118).
- net: mana: Set tx_packets to post gso processing packet count
  (bsc#1245731).
- net: mana: Allocate MSI-X vectors dynamically (bsc#1245457).
- net: mana: Allow irq_setup() to skip cpus for affinity
  (bsc#1245457).
- net: mana: explain irq_setup() algorithm (bsc#1245457).
- PCI: hv: Allow dynamic MSI-X vector allocation (bsc#1245457).
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X
  allocations (bsc#1245457).
- net: mana: Add handler for hardware servicing events
  (bsc#1245730).
- net: mana: Expose additional hardware counters for drop and
  TC via ethtool (bsc#1245729).
- hv_netvsc: Use VF's tso_max_size value when data path is VF
  (bsc#1246203).
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE
  (bsc#1246203).
- commit bdd7f41</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1754913607">- net: mana: Add debug logs in MANA network driver (bsc#1246212).
- Refresh
  patches.suse/msft-hv-3280-net-mana-Add-support-for-Multi-Vports-on-Bare-metal.patch.
- commit 1b4ad82</changelog>
  <changelog author="ematsumiya@suse.de" date="1754913608">- [SMB3] send channel sequence number in SMB3 requests after
  reconnects (git-fixes).
- commit baa81e9</changelog>
  <changelog author="ematsumiya@suse.de" date="1754913609">- cifs: reconnect helper should set reconnect for the right
  channel (git-fixes).
- commit ae3173e</changelog>
  <changelog author="ematsumiya@suse.de" date="1754913610">- smb: client: fix potential deadlock when reconnecting channels
  (bsc#1246183, CVE-2025-38244).
- commit fcf601a</changelog>
  <changelog author="ematsumiya@suse.de" date="1754913611">- SMB3: rename macro CIFS_SERVER_IS_CHAN to avoid confusion
  (git-fixes).
- Refresh
  patches.suse/smb-client-fix-use-after-free-of-signing-key.patch.
- commit ee8ada8</changelog>
  <changelog author="petr.pavlu@suse.com" date="1754913612">- module: Fix memory deallocation on error path in move_module()
  (git-fixes).
- commit bb37d39</changelog>
  <changelog author="petr.pavlu@suse.com" date="1754913613">- audit,module: restore audit logging in load failure case
  (git-fixes).
- kABI: Fix the module::name type in audit_context (git-fixes).
- commit 7e23359</changelog>
  <changelog author="petr.pavlu@suse.com" date="1754913614">- module: Remove unnecessary +1 from last_unloaded_module::name
  size (git-fixes).
- commit 3efc8ab</changelog>
  <changelog author="petr.pavlu@suse.com" date="1754913615">- module: Restore the moduleparam prefix length check (git-fixes).
- commit ad2fc48</changelog>
  <changelog author="petr.pavlu@suse.com" date="1754913616">- ring-buffer: Do not allow events in NMI with generic atomic64
  cmpxchg() (git-fixes).
- commit 890fc59</changelog>
  <changelog author="ematsumiya@suse.de" date="1754913617">- smb3: move server check earlier when setting channel sequence
  number (git-fixes).
- commit df2adca</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1754913618">- ice: init flow director before RDMA (bsc#1247712).
- ice: simplify VF MSI-X managing (bsc#1247712).
- ice: enable_rdma devlink param (bsc#1247712).
- ice: treat dyn_allowed only as suggestion (bsc#1247712).
- ice, irdma: move interrupts code to irdma (bsc#1247712).
- ice: get rid of num_lan_msix field (bsc#1247712).
- ice: remove splitting MSI-X between features (bsc#1247712).
- ice: devlink PF MSI-X max and min parameter (bsc#1247712).
- ice: count combined queues using Rx/Tx count (bsc#1247712).
- commit 0afdc75</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1754913619">- ice, irdma: fix an off by one in error handling code
  (bsc#1247712).
- irdma: free iwdev-&gt;rf after removing MSI-X (bsc#1247712).
- ice: Fix signedness bug in ice_init_interrupt_scheme()
  (bsc#1247712).
- commit eba4226</changelog>
</package>
<package pkgid="6c4d555dfc45ef796c0ac0f703acaab7008c500d9abeb7629117009b05e7e28c" name="kernel-default-devel" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.53.16.1"/>
  <changelog author="dsterba@suse.com" date="1756468800">- net: stmmac: make sure that ptp_rate is not 0 before configuring EST (CVE-2025-38125 bsc#1245710)
- commit 0fcfa4f</changelog>
  <changelog author="dsterba@suse.com" date="1756468801">- smb: client: add NULL check in automount_fullpath (CVE-2025-38208 bsc#1245815)
- commit 04d79fb</changelog>
  <changelog author="dsterba@suse.com" date="1756468802">- drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (CVE-2025-38205 bsc#1246005)
- commit e09f72d</changelog>
  <changelog author="dsterba@suse.com" date="1756468803">- tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (CVE-2025-38184 bsc#1245956)
- commit 263759a</changelog>
  <changelog author="dsterba@suse.com" date="1756468804">- clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (CVE-2025-38160 bsc#1245780)
- commit f8670f7</changelog>
  <changelog author="tiwai@suse.de" date="1756555200">- HID: asus: fix UAF via HID_CLAIMED_INPUT validation (git-fixes).
- HID: multitouch: fix slab out-of-bounds access in
  mt_report_fixup() (git-fixes).
- drm/mediatek: Fix device/node reference count leaks in
  mtk_drm_get_all_drm_priv (git-fixes).
- drm/msm/kms: move snapshot init earlier in KMS init (git-fixes).
- drm/msm: Defer fd_install in SUBMIT ioctl (git-fixes).
- drm/nouveau: remove unused memory target test (git-fixes).
- drm/nouveau: remove unused increment in gm200_flcn_pio_imem_wr
  (git-fixes).
- drm/nouveau: fix error path in nvkm_gsp_fwsec_v2 (git-fixes).
- drm/nouveau/disp: Always accept linear modifier (git-fixes).
- mISDN: hfcpci: Fix warning when deleting uninitialized timer
  (git-fixes).
- Bluetooth: hci_sync: fix set_local_name race condition
  (git-fixes).
- Bluetooth: hci_event: Detect if HCI_EV_NUM_COMP_PKTS is
  unbalanced (git-fixes).
- Bluetooth: hci_event: Mark connection as closed during suspend
  disconnect (git-fixes).
- Bluetooth: hci_event: Treat UNKNOWN_CONN_ID on disconnect as
  success (git-fixes).
- commit f54cbc7</changelog>
  <changelog author="tiwai@suse.de" date="1756555201">- drm/mediatek: Add error handling for old state CRTC in
  atomic_disable (git-fixes).
- drm/msm: update the high bitfield of certain DSI registers
  (git-fixes).
- drm/xe: Don't trigger rebind on initial dma-buf validation
  (git-fixes).
- drm/xe/vm: Clear the scratch_pt pointer on error (git-fixes).
- drm/xe/xe_sync: avoid race during ufence signaling (git-fixes).
- commit ea140bc</changelog>
  <changelog author="joao.povoas@suse.com" date="1756641600">- Update
  patches.suse/drm-imagination-Fix-kernel-crash-when-hard-resetting.patch
  (git-fixes CVE-2025-38521 bsc#1248232).
- Update
  patches.suse/drm-xe-pf-Clear-all-LMTT-pages-on-alloc.patch
  (git-fixes CVE-2025-38511 bsc#1248175).
- Update
  patches.suse/regulator-core-fix-NULL-dereference-on-unbind-due-to.patch
  (stable-fixes CVE-2025-38668 bsc#1248647).
- Update
  patches.suse/wifi-ath12k-Pass-ab-pointer-directly-to-ath12k_dp_tx.patch
  (git-fixes CVE-2025-38605 bsc#1248334).
- commit af57d5e</changelog>
  <changelog author="joao.povoas@suse.com" date="1756641601">- Update
  patches.suse/Bluetooth-btnxpuart-Resolve-TX-timeout-error-in-powe.patch
  (bsc#1230557 CVE-2024-58238 bsc#1242754).
- Update
  patches.suse/HID-quirks-Add-quirk-for-2-Chicony-Electronics-HP-5M.patch
  (stable-fixes CVE-2025-38540 bsc#1248208).
- Update
  patches.suse/PCI-pnv_php-Clean-up-allocated-IRQs-on-unplug.patch
  (bsc#1215199 CVE-2025-38624 bsc#1248617).
- Update
  patches.suse/PM-devfreq-Check-governor-before-using-governor-name.patch
  (git-fixes CVE-2025-38609 bsc#1248337).
- Update
  patches.suse/RDMA-hns-Fix-double-destruction-of-rsv_qp.patch
  (git-fixes CVE-2025-38582 bsc#1248349).
- Update
  patches.suse/arm64-entry-Mask-DAIF-in-cpu_switch_to-call_on_irq_stack.patch
  (git-fixes CVE-2025-38670 bsc#1248655).
- Update
  patches.suse/btrfs-fix-assertion-when-building-free-space-tree.patch
  (git-fixes CVE-2025-38503 bsc#1248183).
- Update
  patches.suse/can-netlink-can_changelink-fix-NULL-pointer-deref-of.patch
  (git-fixes CVE-2025-38665 bsc#1248648).
- Update
  patches.suse/clk-davinci-Add-NULL-check-in-davinci_lpsc_clk_regis.patch
  (git-fixes CVE-2025-38635 bsc#1248573).
- Update
  patches.suse/clk-xilinx-vcu-unregister-pll_post-only-if-registere.patch
  (git-fixes CVE-2025-38583 bsc#1248350).
- Update
  patches.suse/comedi-aio_iiro_16-Fix-bit-shift-out-of-bounds.patch
  (git-fixes CVE-2025-38529 bsc#1248196).
- Update
  patches.suse/comedi-pcl812-Fix-bit-shift-out-of-bounds.patch
  (git-fixes CVE-2025-38530 bsc#1248206).
- Update
  patches.suse/crypto-ccp-Fix-crash-when-rebind-ccp-device-for-ccp..patch
  (git-fixes CVE-2025-38581 bsc#1248345).
- Update
  patches.suse/dmaengine-nbpfaxi-Fix-memory-corruption-in-probe.patch
  (git-fixes CVE-2025-38538 bsc#1248213).
- Update patches.suse/drm-amd-display-Fix-vs-typos.patch
  (git-fixes CVE-2024-26661 bsc#1222323).
- Update
  patches.suse/drm-sched-Increment-job-count-before-swapping-tail-s.patch
  (git-fixes CVE-2025-38515 bsc#1248212).
- Update
  patches.suse/drm-tegra-nvdec-Fix-dma_alloc_coherent-error-check.patch
  (git-fixes CVE-2025-38543 bsc#1248214).
- Update
  patches.suse/fbdev-imxfb-Check-fb_add_videomode-to-prevent-null-p.patch
  (git-fixes CVE-2025-38630 bsc#1248575).
- Update
  patches.suse/hfsplus-remove-mutex_lock-check-in-hfsplus_free_extents.patch
  (git-fixes CVE-2025-38650 bsc#1248746).
- Update
  patches.suse/hwmon-corsair-cpro-Validate-the-size-of-the-received.patch
  (git-fixes CVE-2025-38548 bsc#1248228).
- Update
  patches.suse/i2c-qup-jump-out-of-the-loop-in-case-of-timeout.patch
  (git-fixes CVE-2025-38671 bsc#1248652).
- Update
  patches.suse/ipv6-fix-possible-infinite-loop-in-fib6_info_uses_de.patch
  (git-fixes CVE-2025-38587 bsc#1248361).
- Update
  patches.suse/ipv6-mcast-Delay-put-pmc-idev-in-mld_del_delrec.patch
  (git-fixes CVE-2025-38550 bsc#1248227).
- Update
  patches.suse/ipv6-prevent-infinite-loop-in-rt6_nlmsg_size.patch
  (git-fixes CVE-2025-38588 bsc#1248368).
- Update
  patches.suse/ipv6-reject-malicious-packets-in-ipv6_gso_segment.patch
  (git-fixes CVE-2025-38572 bsc#1248399).
- Update
  patches.suse/iwlwifi-Add-missing-check-for-alloc_ordered_workqueu.patch
  (git-fixes CVE-2025-38602 bsc#1248341).
- Update
  patches.suse/kasan-remove-kasan_find_vm_area-to-prevent-possible-.patch
  (git-fixes CVE-2025-38510 bsc#1248166).
- Update
  patches.suse/ksmbd-fix-out-of-bounds-read-in-smb2_sess_setup.patch
  (bsc#1012628 bsc#1213545 CVE-2023-3867).
- Update
  patches.suse/ksmbd-fix-wrong-next-length-validation-of-ea-b.patch
  (bsc#1012628 CVE-2023-4130 bsc#1248164).
- Update patches.suse/ksmbd-validate-command-request-size.patch
  (bsc#1012628 CVE-2023-4515 bsc#1248180).
- Update
  patches.suse/md-make-rdev_addable-usable-for-rcu-mode.patch
  (git-fixes CVE-2025-38621 bsc#1248609).
- Update
  patches.suse/net-packet-fix-a-race-in-packet_set_ring-and-packet_.patch
  (git-fixes CVE-2025-38617 bsc#1248621).
- Update patches.suse/net-phy-Don-t-register-LEDs-for-genphy.patch
  (git-fixes CVE-2025-38537 bsc#1248229).
- Update
  patches.suse/net-sched-Restrict-conditions-for-adding-duplicating.patch
  (git-fixes CVE-2025-38553 bsc#1248255).
- Update
  patches.suse/net-sched-mqprio-fix-stack-out-of-bounds-write-in-tc.patch
  (git-fixes CVE-2025-38568 bsc#1248386).
- Update
  patches.suse/nilfs2-reject-invalid-file-types-when-reading-inodes.patch
  (git-fixes CVE-2025-38663 bsc#1248636).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/phy-tegra-xusb-Fix-unbalanced-regulator-disable-in-U.patch
  (git-fixes CVE-2025-38535 bsc#1248240).
- Update
  patches.suse/pinctrl-qcom-msm-mark-certain-pins-as-invalid-for-in.patch
  (git-fixes CVE-2025-38516 bsc#1248209).
- Update
  patches.suse/pinmux-fix-race-causing-mux_owner-NULL-with-active-m.patch
  (git-fixes CVE-2025-38632 bsc#1248669).
- Update
  patches.suse/power-supply-cpcap-charger-Fix-null-check-for-power_.patch
  (git-fixes CVE-2025-38634 bsc#1248666).
- Update
  patches.suse/powercap-dtpm_cpu-Fix-NULL-pointer-dereference-in-ge.patch
  (git-fixes CVE-2025-38610 bsc#1248395).
- Update
  patches.suse/powerpc-eeh-Make-EEH-driver-device-hotplug-safe.patch
  (bsc#1215199 CVE-2025-38576 bsc#1248354).
- Update
  patches.suse/staging-fbtft-fix-potential-memory-leak-in-fbtft_fra.patch
  (git-fixes CVE-2025-38612 bsc#1248390).
- Update
  patches.suse/sunrpc-fix-client-side-handling-of-tls-alerts.patch
  (git-fixes CVE-2025-38571 bsc#1248401).
- Update
  patches.suse/sunrpc-fix-handling-of-server-side-tls-alerts.patch
  (git-fixes CVE-2025-38566 bsc#1248374).
- Update
  patches.suse/tls-stop-recv-if-initial-process_rx_list-gave-us-non.patch
  (bsc#1221858 CVE-2024-58239 bsc#1248614).
- Update
  patches.suse/usb-gadget-fix-use-after-free-in-composite_dev_clean.patch
  (git-fixes CVE-2025-38555 bsc#1248297).
- Update
  patches.suse/wifi-ath11k-clear-initialized-flag-for-deinit-ed-srn.patch
  (git-fixes CVE-2025-38601 bsc#1248340).
- Update
  patches.suse/wifi-iwlwifi-Fix-error-code-in-iwl_op_mode_dvm_start.patch
  (git-fixes CVE-2025-38656 bsc#1248643).
- Update
  patches.suse/wifi-mac80211-reject-TDLS-operations-when-station-is.patch
  (git-fixes CVE-2025-38644 bsc#1248748).
- Update
  patches.suse/wifi-mt76-mt7925-Fix-null-ptr-deref-in-mt7925_therma.patch
  (git-fixes CVE-2025-38541 bsc#1248216).
- Update
  patches.suse/wifi-prevent-A-MSDU-attacks-in-mesh-networks.patch
  (stable-fixes CVE-2025-38512 bsc#1248178).
- Update
  patches.suse/wifi-rtl818x-Kill-URBs-before-clearing-tx-status-que.patch
  (git-fixes CVE-2025-38604 bsc#1248333).
- Update
  patches.suse/wifi-rtw89-avoid-NULL-dereference-when-RX-problemati.patch
  (git-fixes CVE-2025-38646 bsc#1248577).
- Update
  patches.suse/wifi-zd1211rw-Fix-potential-NULL-pointer-dereference.patch
  (git-fixes CVE-2025-38513 bsc#1248179).
- commit efc5ee0</changelog>
  <changelog author="nik.borisov@suse.com" date="1756728000">- RAS/AMD/ATL: Include row bit in row retirement (bsc#1242034).
- commit fa3fcbb</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1756728001">- ixgbe: fix ixgbe_orom_civd_info struct layout (bsc#1245410).
- commit 53ae51b</changelog>
  <changelog author="nik.borisov@suse.com" date="1756728002">- RAS/AMD/FMPM: Get masked address (bsc#1242034).
- commit 4171987</changelog>
  <changelog author="nik.borisov@suse.com" date="1756728003">- RAS/AMD/FMPM: Use atl internal.h for INVALID_SPA (bsc#1242034).
- commit ac5d9dc</changelog>
  <changelog author="pmladek@suse.com" date="1756728004">- slab: Decouple slab_debug and no_hash_pointers (bsc#1249022).
- commit 41f928f</changelog>
  <changelog author="jgross@suse.com" date="1756728005">- KVM: Allow CPU to reschedule while setting per-page memory
  attributes (bsc#1248186 CVE-2025-38506).
- commit a7f8a41</changelog>
  <changelog author="nmorey@suse.com" date="1756728006">- RDMA/core: reduce stack using in nldev_stat_get_doit() (git-fixes)
- commit 1ff622a</changelog>
  <changelog author="nmorey@suse.com" date="1756728007">- RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (git-fixes)
- commit 5289b12</changelog>
  <changelog author="jgross@suse.com" date="1756728008">- vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1248511
  CVE-2025-38618).
- commit 0256bd0</changelog>
  <changelog author="tiwai@suse.de" date="1756728009">- staging: media: atomisp: Fix stack buffer overflow in
  gmin_get_var_int() (CVE-2025-38585 bsc#1248355).
- commit f7d8b23</changelog>
  <changelog author="msuchanek@suse.de" date="1757419200">- kernel-subpackage-build: Decompress ghost file when compressed version exists (bsc#1249346)
- commit 40606b5</changelog>
</package>
<package pkgid="3c90427d388b536fa3619087984db9737898dae89765f840b5956bd3d45c1c8f" name="kernel-default-devel" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.53.19.1"/>
  <changelog author="pmladek@suse.com" date="1759492800">- kbuild/modpost: Continue processing all unresolved symbols
  when KLP_SYM_RELA is found (bsc#1218644, bsc#1250655).
- commit ec0a51c</changelog>
  <changelog author="ailiop@suse.com" date="1759492801">- Squashfs: fix uninit-value in squashfs_get_parent (git-fixes).
- commit 126861e</changelog>
  <changelog author="pjakobsson@suse.de" date="1759492802">- Replace drm-backport-placeholder with actual jira tickets
  For unknown reasons a portion of the patches didn't get their
  placeholder tag replaced during the drm backport. Let's fix them now.
- Update patches.suse/0001-PCI-Add-pci_get_base_class-helper.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0001-accel-ivpu-Annotate-struct-ivpu_job-with-__counted_b.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0001-drm-prime-Unexport-helpers-for-fd-handle-conversion.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071 bsc#1212533).
- Update
  patches.suse/0001-drm-vmwgfx-Keep-a-gem-reference-to-user-bos-in-surfa.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  CVE-2023-5633, bsc#1216527).
- Update
  patches.suse/0001-mm-factor-out-VMA-stack-and-heap-checks.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0002-PCI-Add-pci_is_vga-helper.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0002-drm-amdkfd-use-vma_is_initial_stack-and-vma_is_initi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0002-drm-sched-Make-sure-we-wait-for-all-dependencies-in-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0002-drm-tests-Use-KUNIT_DEFINE_ACTION_WRAPPER.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0002-fbdev-Simplify-fb_is_primary_device-for-x86.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0003-drm-vc4-tests-Use-KUNIT_DEFINE_ACTION_WRAPPER.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0003-fbdev-Prepare-generic-architecture-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0004-arch-x86-Implement-asm-fb.h-with-generic-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0004-drm-tests-Switch-to-kunit-devices.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0005-drm-modes-replace-deprecated-strncpy-with-strscpy_pa.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0005-drm-ttm-fix-warning-that-we-shouldn-t-mix-and.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0006-accel-ivpu-Use-struct_size.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0006-arch-arm64-Implement-asm-fb.h-with-generic-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0006-drivers-gpu-drm-i915-i915_memcpy.c-fix-missing-inclu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0006-drm-nouveau-kms-nv50-Fix-drm_dp_remove_payload-invoc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0006-drm-rockchip-vop-Add-rv1126-vop_lite-support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0007-accel-ivpu-Remove-configuration-of-MMU-TBU1-and-TBU3.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0007-arch-sparc-Implement-fb_is_primary_device-in-source-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0007-docs-driver-api-properly-format-ToC-headings.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0007-drm-rockchip-dsi-Add-rv1126-MIPI-DSI-support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0007-drm-sched-Call-drm_sched_fence_set_parent-from-drm_s.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0008-accel-ivpu-Add-MMU-support-for-4-level-page-mappings.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0008-accel-ivpu-Document-DRM_IVPU_PARAM_CAPABILITIES.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0008-arch-ia64-Implement-asm-fb.h-with-generic-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0008-drm-atomic-helper-Fix-spelling-mistake-preceeding-pr.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0009-accel-ivpu-Make-DMA-bit-mask-HW-specific.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0009-arch-loongarch-Implement-asm-fb.h-with-generic-helpe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0009-drm-extract-closefb-logic-in-separate-function.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0010-accel-ivpu-Rename-and-cleanup-MMU600-page-tables.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0010-arch-mips-Implement-asm-fb.h-with-generic-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0010-drm-introduce-CLOSEFB-IOCTL.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0011-accel-ivpu-Mark-64-kB-contiguous-areas-as-contiguous.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0011-arch-sparc-Implement-asm-fb.h-with-generic-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0011-drm-doc-describe-PATH-format-for-DP-MST.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0012-accel-qaic-Enable-1-MSI-fallback-mode.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0012-arch-x86-Include-asm-fb.h-in-fbdev-source-file.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0012-drm-bridge-lvds-codec-Implement-atomic_get_input_bus.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0013-accel-qaic-Add-support-for-periodic-timesync.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0013-fbdev-Include-linux-io.h-in-various-drivers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0014-accel-qaic-Support-MHI-QAIC_TIMESYNC-channel.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0014-fbdev-Include-linux-fb.h-instead-of-asm-fb.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0015-drm-rockchip-vop-Use-cleanup-helper-directly-as-dest.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0015-fbdev-Move-framebuffer-I-O-helpers-into-asm-fb.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0016-accel-ivpu-Update-FW-API.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0016-fbdev-Rename-fb_mem-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0017-accel-ivpu-Remove-unneeded-drm_driver-declaration.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0017-drm-radeon-Replace-all-non-returning-strlcpy-with-st.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0017-minmax-add-in_range-macro.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0018-accel-ivpu-Add-dvfs_mode-file-to-debugfs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0018-drm-amd-pm-Replace-all-non-returning-strlcpy-with-st.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0018-drm-i915-Move-abs_diff-to-math.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0018-x86-fbdev-Include-asm-fb.h-as-needed.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0019-accel-ivpu-Remove-reset-from-power-up-sequence.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0019-drm-bridge-panel-Add-a-device-link-between-drm-devic.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0019-drm-display-dp_mst-Replace-all-non-returning-strlcpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0019-drm-panel-edp-Add-AUO-B116XAB01.4-edp-panel-entry.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0020-accel-ivpu-Add-support-for-VPU_JOB_FLAGS_NULL_SUBMIS.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0020-drm-panel-s6d7aa0-remove-the-unneeded-variable-in-s6.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0020-drm-panel-simple-Add-support-for-Mitsubishi-AA084XE0.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0020-drm-rockchip-Replace-all-non-returning-strlcpy-with-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0021-accel-ivpu-Change-test_mode-module-param-to-bitmask.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0021-drm-mediatek-Replace-all-non-returning-strlcpy-with-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0021-drm-panel-Add-driver-for-Visionox-r66451-panel.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0021-drm-panel-JDI-LT070ME05000-drop-broken-link.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0022-accel-ivpu-40xx-Capture-D0i3-entry-host-and-device-t.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0022-drm-komeda-Convert-to-platform-remove-callback-retur.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0022-drm-panel-Add-driver-for-JDI-LPM102A188A.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0022-drm-sun4i-hdmi-Replace-all-non-returning-strlcpy-wit.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0023-accel-ivpu-Pass-D0i3-residency-time-to-the-VPU-firmw.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0023-drm-arm-hdlcd-Convert-to-platform-remove-callback-re.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0023-drm-i2c-tda998x-Replace-all-non-returning-strlcpy-wi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0024-accel-ivpu-Introduce-ivpu_ipc_send_receive_active.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0024-drm-arm-malidp-Convert-to-platform-remove-callback-r.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0024-drm-panfrost-Do-not-check-for-0-return-after-calling.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0024-mm-gup-remove-unused-vmas-parameter-from-get_user_pa.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0025-accel-ivpu-Add-support-for-delayed-D0i3-entry-messag.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0025-doc-uapi-Add-document-describing-dma-buf-semantics.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0025-drm-aspeed-Convert-to-platform-remove-callback-retur.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0026-drm-atmel-hlcdc-Convert-to-platform-remove-callback-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0026-drm-gma500-remove-duplicate-macro-definitions.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0026-drm-v3d-wait-for-all-jobs-to-finish-before-unregiste.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0027-drm-fsl-dcu-Convert-to-platform-remove-callback-retu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0027-drm-panfrost-Remove-incorrect-IS_ERR-check.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0027-fbdev-hitfb-Declare-hitfb_blank-as-static.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0028-drm-gma500-Remove-unused-declarations.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0028-drm-hisilicon-Convert-to-platform-remove-callback-re.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0028-fbdev-metronomefb-Add-MODULE_FIRMWARE-macro.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0029-drm-lima-Convert-to-platform-remove-callback-returni.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0029-drm-repaper-fix-Wvoid-pointer-to-enum-cast-warning.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0029-fbdev-broadsheetfb-Add-MODULE_FIRMWARE-macro.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0030-accel-ivpu-40xx-Allow-to-change-profiling-frequency.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0030-drm-logicvc-Convert-to-platform-remove-callback-retu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0030-drm-tests-Test-default-pitch-fallback.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0030-video-hdmi-Reorder-fields-in-struct-hdmi_avi_infofra.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0031-accel-ivpu-Assure-device-is-off-if-power-up-sequence.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0031-drm-mcde-Convert-to-platform-remove-callback-returni.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0031-drm-tests-Add-KUnit-tests-for-drm_fb_swab.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0031-fbdev-media-Use-GPIO-descriptors-for-VIA-GPIO.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0032-accel-ivpu-Stop-job_done_thread-on-suspend.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0032-drm-meson-Convert-to-platform-remove-callback-return.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0032-drm-tests-Add-KUnit-tests-for-drm_fb_clip_offset.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0032-fbdev-hitfb-Fix-integer-to-pointer-cast.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0033-accel-ivpu-Abort-pending-rx-ipc-on-reset.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0033-drm-mxsfb-Convert-to-platform-remove-callback-return.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0033-drm-tests-Add-KUnit-tests-for-drm_fb_build_fourcc_li.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0033-fbdev-hitfb-Use-NULL-for-pointers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0034-accel-ivpu-Print-CMDQ-errors-after-consumer-timeout.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0034-drm-panel-Convert-to-platform-remove-callback-return.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0034-drm-tests-Add-multi-plane-support-to-conversion_buf_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0034-fbdev-sh_mobile_lcdcfb-Fix-ARGB32-overlay-format-typ.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0035-accel-ivpu-Make-DMA-allocations-for-MMU600-write-com.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0035-drm-panfrost-Convert-to-platform-remove-callback-ret.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0035-drm-tests-Add-KUnit-tests-for-drm_fb_memcpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0035-fbdev-sh7760fb-Fix-Wimplicit-fallthrough-warnings.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0036-accel-ivpu-Simplify-MMU-SYNC-command.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0036-drm-rockchip-Convert-to-platform-remove-callback-ret.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0036-fbdev-sbus-Build-sbuslib.o-if-CONFIG_FB_SBUS-has-bee.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0037-accel-ivpu-Rename-VPU-to-NPU-in-product-strings.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0037-drm-sti-Convert-to-platform-remove-callback-returnin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0037-drm-vkms-Use-drmm_crtc_init_with_planes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0037-fbdev-sbus-Forward-declare-all-necessary-structures-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0038-drm-sched-Add-drm_sched_wqueue_-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0038-drm-stm-Convert-to-platform-remove-callback-returnin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0038-drm-vkms-Use-drmm_mode_config_init.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0038-fbdev-sbus-Add-initializer-macros-and-Kconfig-tokens.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0039-drm-bridge-fsl-ldb-Add-i.MX6SX-support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0039-drm-sched-Convert-drm-scheduler-to-use-a-work-queue-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0039-drm-sun4i-Convert-to-platform-remove-callback-return.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0039-fbdev-bw2-Use-initializer-macro-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0040-drm-sched-Split-free_job-into-own-work-item.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0040-drm-tidss-Convert-to-platform-remove-callback-return.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0040-fbdev-cg14-Use-initializer-macro-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0041-drm-gma500-Use-drm_aperture_remove_conflicting_pci_f.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0041-drm-sched-Add-drm_sched_start_timeout_unlocked-helpe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0041-drm-tiny-Convert-to-platform-remove-callback-returni.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0041-fbdev-cg3-Use-initializer-macro-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0042-drm-sched-Add-a-helper-to-queue-TDR-immediately.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0042-drm-tve200-Convert-to-platform-remove-callback-retur.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0042-fbdev-cg6-Use-initializer-macro-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0042-video-aperture-use-generic-code-to-figure-out-the-vg.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0043-drm-aperture-Remove-primary-argument.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0043-drm-v3d-Convert-to-platform-remove-callback-returnin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0043-fbdev-ffb-Use-initializer-macro-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0043-fbdev-simplefb-Support-memory-region-property.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0044-drm-vc4-Convert-to-platform-remove-callback-returnin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0044-fbdev-leo-Use-initializer-macro-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0044-fbdev-simplefb-Add-support-for-generic-power-domains.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0044-video-aperture-Only-kick-vgacon-when-the-pdev-is-dec.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0045-drm-v3d-update-UAPI-to-match-user-space-for-V3D-7.x.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0045-drm-xlnx-zynqmp_dpsub-Convert-to-platform-remove-cal.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0045-fbdev-p9100-Use-initializer-macro-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0045-video-aperture-Move-vga-handling-to-pci-function.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0046-drm-rcar-du-Convert-to-platform-remove-callback-retu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0046-drm-v3d-fix-up-register-addresses-for-V3D-7.x.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0046-fbdev-tcx-Use-initializer-macro-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0046-video-aperture-Drop-primary-argument.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0047-drm-debugfs-drop-debugfs_init-for-the-render-and-acc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0047-drm-tilcdc-Convert-to-platform-remove-callback-retur.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0047-drm-v3d-add-brcm-2712-v3d-as-a-compatible-V3D-device.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0047-video-aperture-Only-remove-sysfb-on-the-default-vga-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0048-accel-qaic-Quiet-array-bounds-check-on-DMA-abort-mes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0048-drm-debugfs-disallow-debugfs-access-when-device-isn-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0048-drm-omap-Convert-to-platform-remove-callback-returni.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0048-video-aperture-Provide-a-VGA-helper-for-gma500-and-i.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0049-accel-qaic-Support-for-0-resize-slice-execution-in-B.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0049-dma-buf-dma-resv.c-fix-a-typo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0049-drm-ssd130x-Make-default-width-and-height-to-be-cont.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0050-drm-debugfs-rework-debugfs-directory-creation-v5.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0050-drm-panel-nt36523-Add-DCS-backlight-support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0050-drm-sched-Rename-drm_sched_get_cleanup_job-to-be-mor.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0050-drm-ssd130x-Set-the-page-height-value-in-the-device-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0051-drm-debugfs-remove-dev-debugfs_list-and-debugfs_mute.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0051-drm-panel-nt36523-Get-orientation-from-OF.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0051-drm-sched-Move-free-worker-re-queuing-out-of-the-if-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0051-drm-ssd130x-Don-t-allocate-buffers-on-each-plane-upd.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0052-drm-debugfs-rework-drm_debugfs_create_files-implemen.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0052-drm-panel-nt36523-Add-Lenovo-J606F-panel.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0052-drm-sched-Rename-drm_sched_free_job_queue-to-be-more.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0052-drm-ssd130x-Remove-hardcoded-bits-per-pixel-in-ssd13.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0053-accel-ivpu-Move-set-autosuspend-delay-to-HW-specific.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0053-drm-nouveau-debugfs-Move-an-expression-into-a-functi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0053-drm-sched-Rename-drm_sched_run_job_queue_if_ready-an.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0053-drm-virtio-Remove-unused-function-declarations.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0054-accel-ivpu-Remove-duplicated-error-messages.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0054-drm-ingenic-Kconfig-select-REGMAP-and-REGMAP_MMIO.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0054-drm-nouveau-debugfs-Move-a-variable-assignment-behin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0054-drm-sched-Drop-suffix-from-drm_sched_wakeup_if_can_q.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0054-fbdev-smscufx-Use-fb_ops-helpers-for-deferred-I-O.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0055-accel-ivpu-Make-ivpu_pm_init-void.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0055-drm-Do-not-round-to-megabytes-for-greater-than-1MiB-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0055-drm-nouveau-debugfs-Use-seq_putc-in-nouveau_debugfs_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0055-drm-tidss-Add-support-for-AM625-DSS.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0055-fbdev-udlfb-Use-fb_ops-helpers-for-deferred-I-O.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0056-accel-ivpu-Add-information-about-context-on-failure.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0056-drm-msm-Initialize-mmap-offset-after-constructing-th.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0056-drm-nouveau-debugfs-Replace-five-seq_printf-calls-by.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0056-drm-v3d-Implement-show_fdinfo-callback-for-GPU-usage.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0056-fbdev-Add-Kconfig-macro-FB_IOMEM_HELPERS_DEFERRED.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0057-accel-ivpu-Initialize-context-with-SSID-1.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0057-drm-Remove-struct-drm_driver.gem_prime_mmap.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0057-drm-nouveau-bios-power_budget-Move-an-expression-int.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0057-drm-v3d-Expose-the-total-GPU-usage-stats-on-sysfs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0057-fbdev-hyperv_fb-Use-fb_ops-helpers-for-deferred-I-O.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0058-accel-ivpu-Move-ivpu_fw_load-to-ivpu_fw_init.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0058-drm-amdgpu-Remove-struct-drm_driver.gem_prime_mmap.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0058-drm-bridge-it66121-Extend-match-support-for-OF-table.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0058-drm-nouveau-clk-Move-a-variable-assignment-behind-a-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0059-accel-ivpu-37xx-Change-register-rename-leftovers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0059-accel-ivpu-Fix-compilation-with-CONFIG_PM-n.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0059-drm-nouveau-pci-Move-a-variable-assignment-behind-co.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0059-drm-vkms-Add-kernel-doc-to-the-function-vkms_compose.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0060-accel-ivpu-37xx-White-space-cleanup.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0060-drm-nouveau-pci-Move-an-expression-into-a-function-c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0060-drm-sched-Don-t-disturb-the-entity-when-in-RR-mode-s.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0060-drm-vkms-Fix-all-kernel-doc-warnings-of-the-vkms_com.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0061-accel-ivpu-Allocate-vpu_addr-in-gem-open-callback.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0061-accel-ivpu-Move-MMU-register-definitions-to-ivpu_mmu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0061-drm-bridge-lt9611uxc-Add-MODULE_FIRMWARE-macro.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0061-drm-nouveau-therm-Move-an-assignment-statement-behin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0062-accel-ivpu-Fix-locking-in-ivpu_bo_remove_all_bos_fro.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0062-accel-ivpu-Print-information-about-used-workarounds.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0062-dma-buf-heaps-Don-t-assert-held-reservation-lock-for.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0063-accel-ivpu-Remove-support-for-uncached-buffers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0063-drm-gem-Check-for-valid-formats.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0063-udmabuf-Don-t-assert-held-reservation-lock-for-dma-b.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0064-accel-ivpu-Use-GEM-shmem-helper-for-all-buffers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0064-drm-Don-t-assert-held-reservation-lock-for-dma-buf-m.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0064-drm-bridge-analogix-anx78xx-Drop-ID-table.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0064-video-Remove-trailing-whitespaces.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0065-dma-buf-Change-locking-policy-for-mmap.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0065-drm-bridge-Drop-conditionals-around-of_node-pointers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0065-drm-todo-Add-entry-to-clean-up-former-seltests-suite.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0065-video-Move-HP-PARISC-STI-core-code-to-shared-locatio.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0066-arch-parisc-Implement-fb_is_primary_device-under-arc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0066-drm-bridge-Drop-CONFIG_OF-conditionals-around-of_nod.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0066-drm-edid-split-out-drm_eld.h-from-drm_edid.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0066-drm-shmem-helper-Switch-to-reservation-lock.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0067-drm-bridge-tc358764-Use-BIT-macro-for-actual-bits.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0067-drm-bridge-ti-sn65dsi86-Implement-wait_hpd_asserted.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0067-drm-connector-document-DRM_MODE_COLORIMETRY_COUNT.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0067-drm-eld-replace-uint8_t-with-u8.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0068-drm-armada-Include-linux-of.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0068-drm-bridge-it66121-Simplify-probe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0068-drm-bridge-tc358762-Split-register-programming-from-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0068-drm-doc-rfc-No-STAGING-out-of-drivers-staging.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0068-drm-edid-include-drm_eld.h-only-where-required.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0069-drm-armada-Hide-fbdev-support-behind-config-option.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0069-drm-bridge-tc358762-Switch-to-atomic-ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0069-drm-doc-rfc-Mark-Dev_coredump-as-completed.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0069-drm-edid-use-a-temp-variable-for-sads-to-drop-one-le.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0070-drm-armada-Initialize-fbdev-DRM-client.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0070-drm-bridge-tc358762-Instruct-DSI-host-to-generate-HS.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0070-drm-doc-rfc-Mark-DRM_VM_BIND-as-complete.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0070-drm-edid-add-helpers-to-get-set-struct-cea_sad-from-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0071-drm-armada-Implement-fbdev-emulation-as-in-kernel-cl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0071-drm-bridge-tc358762-Guess-the-meaning-of-LCDCTRL-bit.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0071-drm-doc-rfc-Mark-GPU-VA-as-complete.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0071-drm-eld-add-helpers-to-modify-the-SADs-of-an-ELD.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0072-drm-bridge-tc358762-Handle-HS-VS-polarity.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0072-drm-debugfs-Add-inline-to-drm_debugfs_dev_init-to-su.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0072-drm-panel-simple-Add-InnoLux-G070ACE-L01.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0072-drm-sched-Qualify-drm_sched_wakeup-by-drm_sched_enti.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0073-drm-display-Add-missing-OLED-Vesa-brightnesses-defin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0073-drm-i2c-Switch-i2c-drivers-back-to-use-.probe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0073-drm-tests-Zero-initialize-fourccs_out.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0074-drm-bridge-anx7625-Drop-of_gpio-header.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0074-drm-mst-delete-unnecessary-case-in-drm_dp_add_payloa.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0075-drm-mgag200-set-variable-mgag200_modeset-storage-cla.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0075-drm-mst-Refactor-the-flow-for-payload-allocation-rem.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0075-drm-panel-edp-drm-panel-edp-Add-several-generic-edp-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0075-drm-sti-Drop-of_gpio-header.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0076-drm-fix-code-style-for-embedded-structs-in-hdr_metad.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0076-drm-imx-ipuv3-Convert-to-platform-remove-callback-re.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0076-drm-sched-Define-pr_fmt-for-DRM-using-pr_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0076-drm-tve200-Use-devm_platform_ioremap_resource.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0077-drm-ingenic-Convert-to-platform-remove-callback-retu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0077-drm-sched-implement-dynamic-job-flow-control.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0077-drm-scheduler-properly-forward-fence-errors.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0077-drm-sysfs-rename-drm_sysfs_connector_status_event.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0078-drm-bridge_connector-use-drm_kms_helper_connector_ho.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0078-drm-msm-Convert-to-platform-remove-callback-returnin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0078-drm-scheduler-add-drm_sched_entity_error-and-use-rcu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0079-drm-atomic-log-drm_atomic_replace_property_blob_from.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0079-drm-panfrost-Perform-hard-reset-to-recover-GPU-if-so.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0079-drm-shmobile-Convert-to-platform-remove-callback-ret.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0079-drm-tests-Add-test-cases-for-drm_rect_intersect.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0080-drm-atomic-drop-extra-bracket-from-log-messages.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0080-drm-panfrost-Tighten-polling-for-soft-reset-and-powe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0080-drm-ssd130x-Print-the-PWM-s-label-instead-of-its-num.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0080-drm-tests-Add-test-cases-for-drm_rect_calc_hscale.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0081-drm-atomic-log-when-getting-setting-unknown-properti.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0081-drm-panfrost-Implement-ability-to-turn-on-off-GPU-cl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0081-drm-tests-Add-test-cases-for-drm_rect_calc_vscale.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0082-drm-atomic-log-when-CRTC_ID-prop-value-is-invalid.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0082-drm-panfrost-Set-clocks-on-off-during-system-sleep-o.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0082-drm-ssd130x-Use-bool-for-ssd130x_deviceinfo-flags.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0082-drm-tests-Add-test-cases-for-drm_rect_rotate.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0083-drm-atomic-log-on-attempt-to-set-legacy-DPMS-propert.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0083-drm-panfrost-Implement-ability-to-turn-on-off-regula.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0083-drm-test-Add-test-cases-for-drm_rect_rotate_inv.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0083-fbdev-au1200fb-Do-not-display-boot-up-logo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0084-drm-atomic-log-when-page-flip-is-requested-without-C.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0084-drm-panfrost-Set-regulators-on-off-during-system-sle.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0084-fbdev-mmp-mmpfb-Do-not-display-boot-up-logo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0085-drm-atomic-log-errors-in-drm_mode_atomic_ioctl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0085-drm-vc4-Switch-to-container_of_const.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0085-drm-virtio-use-uint64_t-more-in-virtio_gpu_context_i.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0085-fbdev-core-Fix-style-of-code-for-boot-up-logo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0086-drm-kms-log-when-querying-an-object-not-included-in-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0086-drm-uapi-add-explicit-virtgpu-context-debug-name.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0086-drm-vc4-hdmi-Update-all-the-planes-if-the-TV-margins.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0086-fbdev-core-Unexport-logo-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0087-drm-bridge-ps8640-Drop-the-ability-of-ps8640-to-fetc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0087-drm-gpuvm-convert-WARN-to-drm_WARN-variants.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0087-drm-vc4-hdmi-Add-Broadcast-RGB-property-to-allow-ove.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0087-fbdev-core-Move-logo-functions-into-separate-source-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0088-drm-gpuvm-don-t-always-WARN-in-drm_gpuvm_check_overf.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0088-drm-vc4-hdmi-Rename-full-range-helper.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0088-drm-vkms-Reduce-critical-section.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0088-fbdev-core-Remove-empty-internal-helpers-from-fb_log.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0089-drm-gpuvm-export-drm_gpuvm_range_valid.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0089-drm-vc4-hdmi-Swap-CSC-matrix-channels-for-YUV444.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0089-drm-vkms-Enable-ARGB8888-support-for-writeback.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0089-fbdev-core-Clean-up-include-statements-in-fbmem.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0090-drm-buddy-Improve-contiguous-memory-allocation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0090-drm-nouveau-make-use-of-drm_gpuvm_range_valid.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0090-drm-vc4-hdmi-Rework-the-CSC-matrices-organization.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0090-drm-vkms-Isolate-writeback-pixel-conversion-function.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0091-drm-amdgpu-Move-the-size-computations-to-drm-buddy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0091-drm-gpuvm-add-common-dma-resv-per-struct-drm_gpuvm.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0091-drm-vc4-hdmi-Add-a-function-to-retrieve-the-CSC-matr.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0092-drm-i915-Move-the-size-computations-to-drm-buddy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0092-drm-nouveau-make-use-of-the-GPUVM-s-shared-dma-resv.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0092-drm-vc4-hdmi-Add-BT.601-Support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0093-drm-Clear-fd-handle-callbacks-in-struct-drm_driver.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071 bsc#1212533 bsc#1212533).
- Update
  patches.suse/0093-drm-gpuvm-add-drm_gpuvm_flags-to-drm_gpuvm.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0093-drm-panel-Don-t-store-check-prepared-enabled-for-sim.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0093-drm-vc4-hdmi-Add-BT.2020-Support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0094-drm-nouveau-separately-allocate-struct-nouveau_uvmm.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0094-drm-panel-s6e63m0-Don-t-store-check-prepared-enabled.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0095-drm-bridge-dw-hdmi-change-YUV420-selection-logic-at-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0095-drm-gpuvm-reference-count-drm_gpuvm-structures.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0095-drm-panel-otm8009a-Don-t-double-check-prepared-enabl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0095-drm-vkms-allow-full-alpha-blending-on-all-planes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0096-drm-atomic-helper-drm_atomic_helper_shutdown-NULL-sh.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0096-drm-bridge-dw-hdmi-truly-enforce-420-only-formats-wh.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0096-drm-gpuvm-add-an-abstraction-for-a-VM-BO-combination.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0096-drm-vkms-drop-full-alpha-blending-TODO.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0097-drm-bridge-dw-hdmi-remove-dead-code-and-fix-indentat.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0097-drm-doc-rfc-Introduce-the-merge-plan-for-the-Xe-driv.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0097-drm-gpuvm-track-lock-validate-external-evicted-objec.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0097-drm-imx-ipuv3-Call-drm_atomic_helper_shutdown-at-shu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0098-Revert-drm-sched-Define-pr_fmt-for-DRM-using-pr_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0098-drm-ingenic-Call-drm_atomic_helper_shutdown-at-shutd.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0098-drm-panel-st7703-Rename-CMD_UNKNOWN_C6-to-CMD_SETECO.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0099-backlight-bd6107-Rename-struct-bd6107_platform_data..patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0099-drm-amd-display-Fix-Wuninitialized-in-dm_helpers_dp_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0099-drm-format-helper-Cache-buffers-with-struct-drm_form.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0099-drm-panel-st7703-Add-Anbernic-RG353V-V2-Panel-Suppor.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0100-drm-atomic-helper-Add-format-conversion-state-to-sha.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0100-drm-debugfs-Fix-drm_debugfs_remove_files-stub.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0100-drm-meson-set-variables-meson_hdmi_-storage-class-sp.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0101-backlight-gpio_backlight-Rename-field-fbdev-to-dev.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0101-drm-format-helper-Pass-format-conversion-state-to-he.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0101-drm-ssd130x-Store-the-HW-buffer-in-the-driver-privat.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0101-drm-uapi-Document-CTM-matrix-better.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0102-drm-ofdrm-Preallocate-format-conversion-buffer-in-at.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0103-backlight-lv5207lp-Rename-struct-lv5207lp_platform_d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0103-drm-komeda-add-NV12-format-to-support-writeback-laye.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0103-drm-simpledrm-Preallocate-format-conversion-buffer-i.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0103-drm-sysfs-Expose-DRM-connector-id-in-each-connector-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0104-drm-nouveau-nvif-refactor-deprecated-strncpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0104-drm-ssd130x-Preallocate-format-conversion-buffer-in-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0104-drm-sysfs-Link-DRM-connectors-to-corresponding-Type-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0104-fbdev-atyfb-Reorder-backlight-and-framebuffer-init-c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0105-drm-Remove-struct-drm_flip_task-from-DRM-interfaces.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0105-drm-nouveau-core-refactor-deprecated-strncpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0105-drm-sti-sti_hdmi-convert-to-using-is_hdmi-from-displ.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0105-fbdev-atyfb-Use-hardware-device-as-backlight-parent.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0106-drm-Fix-flip-task-docs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0106-drm-nouveau-pm-refactor-deprecated-strncpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0106-drm-rockchip-cdn-dp-call-drm_connector_update_edid_p.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0106-fbdev-aty128fb-Reorder-backlight-and-framebuffer-ini.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0107-drm-bridge-dw-hdmi-cec-Add-arbitration-lost-event.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0107-drm-scheduler-mark-jobs-without-fence-as-canceled.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0107-drm-virtio-Fix-return-value-for-VIRTGPU_CONTEXT_PARA.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0107-fbdev-aty128fb-Use-hardware-device-as-backlight-pare.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0108-drm-dp_mst-Fix-NULL-dereference-during-payload-addit.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0108-drm-test-rearrange-test-entries-in-Kconfig-and-Makef.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0108-drm-udl-delete-dead-code.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0108-fbdev-broadsheetfb-Call-device_remove_file-with-hard.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0109-drm-client-Do-not-acquire-module-reference.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0109-drm-dp_mst-Sanitize-error-return-during-payload-addi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0109-fbdev-ep93xx-fb-Alloc-DMA-memory-from-hardware-devic.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0110-accel-ivpu-Rename-cons-rx_msg_lock.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0110-drm-dp_mst-Tune-down-error-message-during-payload-ad.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0110-fbdev-ep93xx-fb-Output-messages-with-fb_info-and-fb_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0111-accel-ivpu-Do-not-use-irqsave-in-ivpu_ipc_dispatch.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0111-drm-nouveau-devinit-tu102-remove-attempt-at-loading-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0112-accel-ivpu-Do-not-use-cons-aborted-for-job_done_thre.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0112-drm-nouveau-imem-support-allocations-not-preserved-a.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0112-fbdev-fsl-diu-fb-Output-messages-with-fb_-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0113-accel-ivpu-Use-dedicated-work-for-job-timeout-detect.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0113-accel-qaic-Register-for-PCI-driver-at-the-beginning-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0113-drm-nouveau-gr-gf100-lose-contents-of-global-ctxbufs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0113-fbdev-mb862xxfb-Output-messages-with-fb_dbg.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0114-accel-ivpu-Use-threaded-IRQ-to-handle-JOB-done-messa.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0114-accel-qaic-Use-devm_drm_dev_alloc-instead-of-drm_dev.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0114-drm-nouveau-mmu-gp100-always-invalidate-TLBs-at-CACH.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0114-fbdev-metronomefb-Use-hardware-device-for-dev_err.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0115-accel-qaic-Update-MAX_ORDER-use-to-be-inclusive.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0115-drm-nouveau-kms-nv50-fix-mst-payload-alloc-fail-cras.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0115-fbdev-nvidiafb-Reorder-backlight-and-framebuffer-ini.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0116-drm-nouveau-disp-rearrange-output-methods.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0116-drm-print-Handle-NULL-drm-device-in-__drm_printk.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0116-fbdev-nvidiafb-Use-hardware-device-as-backlight-pare.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0117-drm-nouveau-disp-add-output-detect-method.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0117-fbdev-pxa168fb-Do-not-assign-to-struct-fb_info.dev.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0118-drm-nouveau-disp-add-output-method-to-fetch-edid.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0118-drm-panel-nv3051d-Add-Powkiddy-RK2023-Panel-Support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0118-fbdev-radeonfb-Reorder-backlight-and-framebuffer-cle.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0119-drm-nouveau-disp-rename-internal-output-acquire-rele.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0119-drm-panel-elida-kd35t133-trival-update-panel-size-fr.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0119-fbdev-radeonfb-Use-hardware-device-as-backlight-pare.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0120-drm-bridge-tc358768-remove-unused-variable.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0120-drm-nouveau-kms-Add-INHERIT-ioctl-to-nvkm-nvif-for-r.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0120-fbdev-rivafb-Reorder-backlight-and-framebuffer-init-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0121-drm-bridge-lt9211-Do-not-generate-HFP-HBP-HSA-and-EO.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0121-drm-nouveau-disp-shuffle-to-make-upcoming-diffs-pret.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0121-drm-panel-elida-kd35t133-drop-drm_connector_set_orie.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0121-fbdev-rivafb-Use-hardware-device-as-backlight-parent.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0122-drm-bridge-lt9611-Do-not-generate-HFP-HBP-HSA-and-EO.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0122-drm-nouveau-disp-add-acquire_dac.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0122-drm-panel-elida-kd35t133-Drop-shutdown-logic.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0122-fbdev-sh7760fb-Use-fb_dbg-in-sh7760fb_get_color_info.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0123-drm-nouveau-disp-add-acquire_sor-pior.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0123-drm-panel-elida-kd35t133-Drop-prepare-unprepare-logi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0123-fbdev-sh7760fb-Output-messages-with-fb_dbg.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0124-dma-buf-Replace-strlcpy-with-strscpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0124-drm-nouveau-disp-update-SOR-routing-immediately-on-a.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0124-drm-vkms-add-rotate-0-and-reflect-x-property.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0124-fbdev-sh7760fb-Alloc-DMA-memory-from-hardware-device.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0125-drm-nouveau-kms-nv50-pull-some-common-init-out-of-OR.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0125-drm-rockchip-vop2-Add-NV20-and-NV30-support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0125-drm-vkms-add-reflect-y-and-rotate-180-property.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0125-fbdev-sh7760fb-Use-hardware-device-with-dev_-output-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0126-drm-nouveau-kms-nv50-remove-nv_encoder.audio.connect.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0126-drm-rockchip-rk3066_hdmi-Remove-useless-mode_fixup.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0126-drm-vkms-add-rotate-90-property.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0126-fbdev-sm501fb-Output-message-with-fb_err.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0127-drm-nouveau-kms-nv50-keep-output-state-around-until-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0127-drm-rockchip-rk3066_hdmi-Switch-encoder-hooks-to-ato.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0127-drm-vkms-add-rotate-270-property.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0127-fbdev-smscufx-Detect-registered-fb_info-from-refcoun.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0128-drm-nouveau-kms-nv50-move-audio-enable-post-modeset.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0128-drm-vkms-drop-Rotation-TODO.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0128-fbdev-tdfxfb-Set-i2c-adapter-parent-to-hardware-devi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0129-drm-nouveau-disp-add-output-hdmi-config-method.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0129-fbdev-arcfb-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0129-fbdev-core-Pass-Linux-device-to-pm_vt_switch_-functi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0130-drm-arcpgu-Convert-to-platform-remove-callback-retur.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0130-drm-nouveau-disp-move-hdmi-disable-out-of-release.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0130-fbdev-au1200fb-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0130-fbdev-core-Move-framebuffer-and-backlight-helpers-in.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0131-drm-armada-Convert-to-platform-remove-callback-retur.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0131-drm-nouveau-disp-release-outputs-post-modeset.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0131-fbdev-broadsheetfb-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0131-fbdev-core-Add-fb_device_-create-destroy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0132-drm-bridge-cdns-mhdp8546-Improve-error-reporting-in-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0132-drm-nouveau-disp-remove-SOR-routing-updates-from-sup.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0132-fbdev-core-Move-procfs-code-to-separate-file.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0132-fbdev-hecubafb-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0133-drm-bridge-cdns-mhdp8546-Convert-to-platform-remove-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0133-drm-nouveau-disp-add-output-backlight-control-method.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0133-fbdev-core-Move-file-I-O-code-into-separate-file.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0133-fbdev-metronomefb-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0134-drm-bridge-tpd12s015-Convert-to-platform-remove-call.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0134-drm-nouveau-disp-add-output-lvds-config-method.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0134-fbdev-core-Rework-fb-init-code.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0134-fbdev-ps3fb-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0135-drm-etnaviv-Convert-to-platform-remove-callback-retu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0135-drm-nouveau-disp-add-hdmi-audio-hal-function.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0135-fbdev-Make-support-for-userspace-interfaces-configur.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0135-fbdev-smscufx-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0136-drm-imx-dcss-Convert-to-platform-remove-callback-ret.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0136-drm-nouveau-disp-move-dp-aux-pwr-method-to-HAL.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0136-drm-ttm-Don-t-shadow-the-operation-context.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0136-fbdev-udlfb-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0137-drm-imx-lcdc-Convert-to-platform-remove-callback-ret.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0137-drm-nouveau-disp-add-dp-aux-xfer-method.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0137-fbdev-vfb-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0138-drm-ast-Remove-vga2_clone-field.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0138-drm-kmb-Convert-to-platform-remove-callback-returnin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0138-drm-nouveau-disp-add-dp-rates-method.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0138-fbdev-xen-fbfront-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0139-drm-ast-Implement-register-helpers-in-ast_drv.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0139-drm-mediatek-Convert-to-platform-remove-callback-ret.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0139-drm-nouveau-kms-nv50-split-DP-disable-enable-into-tw.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0139-fbdev-Return-number-of-bytes-read-or-written.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0140-drm-ast-Remove-dead-else-branch-in-POST-code.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0140-drm-meson-Convert-to-platform-remove-callback-return.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0140-drm-nouveau-kms-nv50-flush-mst-disables-together.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0140-fbdev-Use-screen_buffer-in-fb_sys_-read-write.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0141-drm-ast-Remove-device-POSTing-and-config-from-chip-d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0141-drm-nouveau-Convert-to-platform-remove-callback-retu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0141-drm-nouveau-kms-nv50-fixup-sink-D3-before-tearing-do.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0141-fbdev-Don-t-re-validate-info-state-in-fb_ops-impleme.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0142-drm-ast-Set-PCI-config-before-accessing-I-O-register.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0142-drm-nouveau-disp-add-dp-train-method.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0142-drm-sprd-Convert-to-platform-remove-callback-returni.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0142-fbdev-Validate-info-screen_-base-buffer-in-fb_ops-im.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0143-drm-ast-Enable-and-unlock-device-access-early-during.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0143-drm-nouveau-disp-move-link-training-out-of-superviso.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0143-fbdev-Move-I-O-read-and-write-code-into-helper-funct.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0144-drm-ast-Set-up-release-action-right-after-enabling-M.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0144-drm-edid-firmware-drop-drm_kms_helper.edid_firmware-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0144-drm-fb-helper-Use-fb_-cfb-sys-_-read-write.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0144-drm-nouveau-disp-add-dp-sst-config-method.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0145-Documentation-vkms-clarify-devres-managed-reference-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0145-drm-ast-Distinguish-among-chip-generations.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0145-drm-nouveau-disp-add-dp-mst-id-get-put-methods.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0145-fbdev-simplefb-Suppress-error-on-missing-power-domai.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0146-drm-ast-Detect-AST-1300-model.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0146-drm-connector-document-enum-drm_connector_tv_mode-DR.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0146-drm-nouveau-disp-move-outp-conn-construction-to-chip.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0146-drm-nouveau-fifo-Remove-duplicated-include-in-chan.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0147-drm-ast-Detect-AST-1400-model.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0147-drm-nouveau-disp-move-outp-init-fini-paths-to-chipse.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0147-drm-rockchip-rk3066_hdmi-include-drm-drm_atomic.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0147-drm-sun4i-rename-sun4i_dotclock-to-sun4i_tcon_dclk.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0148-drm-ast-Detect-AST-2510-model.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0148-drm-gpuvm-Helper-to-get-range-of-unmap-from-a-remap-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0148-drm-nouveau-disp-nv50-skip-DCB_OUTPUT_TV.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0148-drm-sun4i-calculate-proper-DCLK-rate-for-DSI.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0149-drm-ast-Move-widescreen-and-tx-chip-detection-into-s.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0149-drm-nouveau-kms-nv50-create-heads-based-on-nvkm-head.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0149-dt-bindings-gpu-Add-Imagination-Technologies-PowerVR.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0150-drm-ast-Merge-config-and-chip-detection.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0150-drm-imagination-uapi-Add-PowerVR-driver-UAPI.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0150-drm-nouveau-kms-nv50-create-heads-after-outps-conns.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0151-drm-edid-make-read-only-const-array-static.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0151-drm-imagination-Add-skeleton-PowerVR-driver.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0151-drm-nouveau-kms-nv50-name-aux-channels-after-their-c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0151-drm-panel-sharp-ls043t1le01-drop-dummy-functions-and.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0152-drm-imagination-Get-GPU-resources.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0152-drm-nouveau-kms-nv50-create-connectors-based-on-nvkm.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0152-drm-panel-panel-simple-Add-BOE-EV121WXM-N10-1850-pan.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0152-drm-tests-Fix-swapped-drm_framebuffer-tests-paramete.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0153-drivers-firmware-Move-sysfb_init-from-device_initcal.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0153-drm-edid-Add-quirk-for-OSVR-HDK-2.0.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0153-drm-imagination-Add-GPU-register-headers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0153-drm-nouveau-kms-nv50-create-outputs-based-on-nvkm-in.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0154-drm-bridge-samsung-dsim-Drain-command-transfer-FIFO-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0154-drm-imagination-Add-firmware-and-MMU-related-headers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0154-drm-nouveau-kms-nv50-disable-dcb-parsing.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0154-drm-ssd130x-Fix-include-guard-name.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0155-drm-bridge-analogix-anx78xx-Add-missing-definition.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0155-drm-gud-use-vmalloc_array-and-vcalloc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0155-drm-imagination-Add-FWIF-headers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0155-drm-panel-boe-tv101wum-nl6-Remove-extra-delay.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0156-drm-drm_gem.c-Remove-surplus-else-after-return.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0156-drm-imagination-Add-GPU-ID-parsing-and-firmware-load.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0156-drm-panel-boe-tv101wum-nl6-Fine-tune-the-panel-power.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0156-drm-tegra-rgb-Parameterize-V-and-H-sync-polarities.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0157-drm-Add-kms-driver-for-loongson-display-controller.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0157-drm-imagination-Add-GEM-and-VM-related-code.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0158-drm-bridge-tc358768-Default-to-positive-h-v-syncs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0158-drm-imagination-Implement-power-management.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0158-drm-nouveau-nvkm-fini-object-children-in-reverse-ord.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0159-drm-imagination-Implement-firmware-infrastructure-an.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0159-drm-nouveau-nvkm-punt-spurious-irq-messages-to-debug.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0159-gpu-drm-bridge-No-need-to-set-device_driver-owner.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0160-drm-bridge-tc358768-Cleanup-PLL-calculations.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0160-drm-bridge-tc358768-remove-unneeded-semicolon.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0160-drm-imagination-Implement-MIPS-firmware-processor-an.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0160-drm-nouveau-fb-gp102-ga100-switch-to-simpler-vram-si.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0161-accel-ivpu-Initial-debugfs-support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0161-drm-imagination-Implement-free-list-and-HWRT-create-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0161-drm-nouveau-fb-ga102-construct-vidmem-heap-via-new-g.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0161-drm-panel-Modify-innolux-hj110iz-panel-initial-code.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0162-accel-ivpu-Add-firmware-tracing-support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0162-drm-drm_atomic_helper.c-fix-a-typo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0162-drm-imagination-Implement-context-creation-destructi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0162-drm-nouveau-fifo-remove-left-over-references-to-nvkm.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0163-accel-ivpu-Add-debugfs-files-for-testing-device-rese.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0163-drm-imagination-Implement-job-submission-and-schedul.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0163-drm-nouveau-fifo-return-ERR_PTR-from-nvkm_runl_new.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0163-drm-ttm-let-struct-ttm_device_funcs-be-placed-in-rod.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0164-accel-ivpu-Print-firmware-name-and-version.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0164-drm-imagination-Add-firmware-trace-header.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0164-drm-nouveau-fifo-ga100-remove-individual-runlists-ra.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0165-accel-ivpu-Add-fw_name-file-to-debugfs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0165-drm-imagination-Add-firmware-trace-to-debugfs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0165-drm-nouveau-fifo-ga100-add-per-runlist-nonstall-intr.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0165-fbdev-hitfb-Cast-I-O-offset-to-address.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0166-drm-imagination-Add-driver-documentation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0166-drm-nouveau-nvif-fix-potential-double-free.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0166-fbdev-matrox-Remove-trailing-whitespaces.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0167-drm-bridge-tc358768-Attempt-to-fix-DSI-horizontal-ti.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0167-drm-nouveau-kms-don-t-call-drm_dp_cec_set_edid-on-TM.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0167-ipu-v3-Include-linux-io.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0168-drm-i915-display-Use-intel_bo_to_drm_bo-instead-of-o.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0168-drm-nouveau-disp-drop-unused-argument-in-nv50_dp_mod.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0168-drm-sched-Rename-to-drm_sched_can_queue.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0169-drm-bridge-panel-Fix-device-link-for-DRM_BRIDGE_ATTA.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0169-drm-i915-drop-gt-intel_gt.h-include-from-skl_univers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0169-drm-sched-Rename-to-drm_sched_wakeup_if_can_queue.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0169-fbdev-sm712fb-Do-not-include-linux-screen_info.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0170-drm-armada-Call-drm_atomic_helper_shutdown-at-shutdo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0170-drm-i915-aux-add-separate-register-macros-and-functi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0170-drm-panel-Add-Samsung-S6D7AA0-panel-controller-drive.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0170-sysfb-Do-not-include-linux-screen_info.h-from-sysfb-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0171-drm-Call-drm_atomic_helper_shutdown-at-shutdown-time.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0171-drm-bridge-samsung-dsim-Implement-support-for-clock-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0171-drm-i915-aux-rename-dev_priv-to-i915.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0171-fbdev-broadsheetfb-Select-FB_SYS_HELPERS_DEFERRED.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0172-drm-i915-stop-including-i915_utils.h-from-intel_runt.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0172-drm-vc4-Call-drm_atomic_helper_shutdown-at-shutdown-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0172-fbdev-broadsheetfb-Generate-deferred-I-O-ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0173-drm-i915-display-debugfs-entry-to-list-display-capab.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0173-drm-nouveau-constify-pointers-to-hwmon_channel_info.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0173-drm-ssd130x-Call-drm_atomic_helper_shutdown-at-remov.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0173-fbdev-hecubafb-Select-FB_SYS_HELPERS_DEFERRED.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0174-drm-i915-display-Add-framework-to-add-parameters-spe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0174-drm-nouveau-acr-ga102-set-variable-ga102_gsps-storag.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0174-fbdev-hecubafb-Generate-deferred-I-O-ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0175-drm-hisilicon-kirin-Call-drm_atomic_helper_shutdown-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0175-drm-i915-display-Dump-also-display-parameters.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0175-drm-msm-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0175-fbdev-metronomefb-Select-FB_SYS_HELPERS_DEFERRED.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0176-drm-i915-display-Move-enable_fbc-module-parameter-un.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0176-fbdev-metronomefb-Generate-deferred-I-O-ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0177-drm-bridge-dw-hdmi-Replace-all-non-returning-strlcpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0177-drm-i915-display-Move-psr-related-module-parameters-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0177-drm-ssd130x-Drop-_helper-prefix-from-struct-drm_-_he.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0177-fbdev-ssd1307fb-Select-FB_SYS_HELPERS_DEFERRED.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0178-accel-qaic-Remove-size-field-from-struct-qaic_bo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0178-drm-i915-display-Move-vbt_firmware-module-parameter-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0178-drm-panel-samsung-s6d7aa0-use-pointer-for-drm_mode-i.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0178-fbdev-ssd1307fb-Generate-deferred-I-O-ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0179-dma-buf-sw_sync-Replace-all-non-returning-strlcpy-wi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0179-drm-i915-display-Move-lvds_channel_mode-module-param.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0179-drm-simpledrm-Add-support-for-multiple-power-domains.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0179-fbdev-xen-fbfront-Select-FB_SYS_HELPERS_DEFERRED.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0180-drm-bridge-Add-200ms-delay-to-wait-FW-HPD-status-sta.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0180-drm-i915-display-Move-panel_use_ssc-module-parameter.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0180-drm-shmobile-Use-p4cc-to-print-fourcc-codes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0180-fbdev-xen-fbfront-Generate-deferred-I-O-ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0181-drm-i915-display-Move-vbt_sdvo_panel_type-module-par.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0181-drm-imx-dcss-Call-drm_atomic_helper_shutdown-at-shut.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0181-drm-shmobile-Add-support-for-DRM_FORMAT_XRGB8888.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0182-drm-gpuvm-rename-struct-drm_gpuva_manager-to-struct-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0182-drm-i915-display-Move-enable_dc-module-parameter-und.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0182-drm-shmobile-Switch-to-drm_crtc_init_with_planes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0182-drm-virtio-Conditionally-allocate-virtio_gpu_fence.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0183-drm-gpuvm-allow-building-as-module.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0183-drm-i915-display-Move-enable_dpt-module-parameter-un.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0183-drm-shmobile-Add-missing-call-to-drm_fbdev_generic_s.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0183-nouveau-dispnv50-add-cursor-pitch-check.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0184-drm-i915-display-Move-enable_sagv-module-parameter-u.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0184-drm-nouveau-disp-use-drm_kms_helper_connector_hotplu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0184-drm-nouveau-uvmm-rename-umgr-to-base.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0184-drm-shmobile-Make-DRM_SHMOBILE-visible-on-Renesas-So.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0185-drm-bridge-tc358767-Use-devm_clk_get_enabled-helper.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0185-drm-docs-Fix-usage-stats-typos.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0185-drm-gma500-refactor-deprecated-strncpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0185-drm-i915-display-Move-disable_power_well-module-para.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0186-drm-Add-common-fdinfo-helper.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0186-drm-bridge-tfp410-Support-format-negotiation-hooks.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0186-drm-gpuvm-doc-fix-filename-references.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0186-drm-i915-display-Move-enable_ips-module-parameter-un.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0187-drm-bridge-tfp410-Set-input_bus_flags-in-atomic_chec.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0187-drm-i915-display-Move-invert_brightness-module-param.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0187-drm-msm-Switch-to-fdinfo-helper.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0187-drm-nouveau-kms-nv50-hide-unused-variables.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0188-drm-amdgpu-Switch-to-fdinfo-helper.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0188-drm-bridge-mhdp8546-Add-minimal-format-negotiation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0188-drm-bridge-use-drm_bridge_get_edid-instead-of-using-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0188-drm-i915-display-Move-edp_vswing-module-parameter-un.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0189-drm-Add-fdinfo-memory-stats.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0189-drm-bridge-lt9611uxc-use-drm_bridge_get_edid-instead.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0189-drm-bridge-mhdp8546-Set-input_bus_flags-from-atomic_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0189-drm-i915-display-Move-enable_dpcd_backlight-module-p.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0190-drm-bridge-sii902x-Support-format-negotiation-hooks.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0190-drm-i915-display-Move-load_detect_test-parameter-und.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0190-drm-msm-Add-memory-stats-to-fdinfo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0190-drm-tests-Add-calls-to-drm_fb_blit-on-supported-form.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0191-accel-qaic-Update-BO-metadata-in-a-central-location.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0191-drm-bridge-sii902x-Set-input_bus_flags-in-atomic_che.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0191-drm-doc-Relax-fdinfo-string-constraints.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0191-drm-i915-display-Move-force_reset_modeset_test-param.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0191-drm-tests-Add-new-format-conversion-tests-to-better-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0192-accel-qaic-Declare-BO-sliced-after-all-the-operation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0192-drm-bridge-adv7511-Convert-to-use-maple-tree-registe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0192-drm-bridge-tc358767-explicitly-set-readable-register.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0192-drm-gma500-Clear-fbdev-framebuffer-with-fb_memset_io.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0192-drm-i915-display-Move-disable_display-parameter-unde.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0192-drm-tidss-Update-encoder-bridge-chain-connect-model.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0193-accel-qaic-Undo-slicing-setup-done-in-qaic_attach_sl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0193-drm-bridge-cdns-mhdp8546-Fix-the-interrupt-enable-di.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0193-drm-bridge-dpc3433-Convert-to-use-maple-tree-registe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0193-drm-bridge-samsung-dsim-Fix-i.MX8M-enable-flow-to-me.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0193-drm-i915-display-Use-device-parameters-instead-of-mo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0194-accel-qaic-Clean-up-BO-during-flushing-of-transfer-l.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0194-drm-bridge-tc358767-Convert-to-use-maple-tree-regist.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0194-drm-i915-display-Move-verbose_state_checks-under-dis.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0194-drm-ttm-Use-init_on_free-to-delay-release-TTM-BOs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0195-accel-qaic-Create-a-function-to-initialize-BO.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0195-drm-amdgpu-Fix-no-procfs-build.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0195-drm-arm-Make-ARM-devices-menu-depend-on-DRM.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0195-drm-bridge-icn6211-Convert-to-use-maple-tree-registe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0195-drm-i915-display-Move-nuclear_pageflip-under-display.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0196-accel-qaic-Add-QAIC_DETACH_SLICE_BO-IOCTL.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0196-drm-bridge-lt9211-Convert-to-use-maple-tree-register.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0196-drm-bridge-samsung-dsim-fix-blanking-packet-size-cal.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0196-drm-i915-display-Move-enable_dp_mst-under-display.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0196-fbdev-hyperv_fb-Include-linux-screen_info.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0197-drm-bridge-sn65dsi83-Convert-to-use-maple-tree-regis.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0197-drm-execution-context-for-GEM-buffers-v7.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0197-drm-i915-remove-display-device-info-from-i915-capabi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0198-drm-add-drm_exec-selftests-v4.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0198-drm-bridge-samsung-dsim-Fetch-pll-clock-frequency-au.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0198-drm-i915-display-Reset-message-bus-after-each-read-w.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0198-drm-panel-ili9322-Remove-redundant-volatle_reg-opera.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0199-drm-amdkfd-switch-over-to-using-drm_exec-v3.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0199-drm-bridge-samsung-dsim-Select-GENERIC_PHY_MIPI_DPHY.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0199-drm-i915-sprite-move-sprite_name-to-intel_sprite.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0199-drm-panel-ili9322-Convert-to-use-maple-tree-register.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0200-drm-amdgpu-use-drm_exec-for-GEM-and-CSA-handling-v2.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0200-drm-bridge-samsung-dsim-Dynamically-configure-DPHY-t.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0200-drm-i915-lnl-Extend-C10-C20-phy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0200-drm-panel-Add-driver-for-BOE-RM692E5-AMOLED-panel.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0201-drm-amdgpu-use-drm_exec-for-MES-testing.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0201-drm-bridge-samsung-dsim-Support-non-burst-mode.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0201-drm-doc-Document-DRM-device-reset-expectations.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0201-drm-i915-lnl-Fix-check-for-TC-phy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0202-drm-amdgpu-use-the-new-drm_exec-object-for-CS-v3.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0202-drm-i915-display-Abstract-C10-C20-pll-hw-readout.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0202-drm-panel-simple-Add-Ampire-AM-800480L1TMQW-T00H.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0202-drm-vblank-Warn-when-silently-cancelling-vblank-work.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0203-drm-i915-display-Abstract-C10-C20-pll-calculation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0203-drm-loongson-Remove-a-useless-check-in-cursor_plane_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0203-drm-panfrost-Add-cycle-count-GPU-register-definition.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0204-accel-ivpu-Update-debugfs-to-latest-changes-in-DRM.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0204-drm-i915-fix-Makefile-sort-and-indent.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0204-drm-panfrost-Add-fdinfo-support-GPU-load-metrics.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0204-drm-ssd130x-Change-pixel-format-used-to-compute-the-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0204-drm-stm-dsi-Use-devm_platform_ioremap_resource.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0205-accel-ivpu-Compile-ivpu_debugfs.c-conditionally.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0205-drm-i915-move-Makefile-display-debugfs-files-next-to.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0205-drm-panel-ld9040-Use-better-magic-values.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0205-drm-panfrost-Add-fdinfo-support-for-memory-stats.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0206-drm-drm_file-Add-DRM-obj-s-RSS-reporting-function-fo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0206-drm-i915-bios-Clamp-VBT-HDMI-level-shift-on-BDW.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0206-drm-lcdif-Drop-unnecessary-NULL-pointer-check-on-lcd.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0206-drm-panel-ld9040-Register-a-backlight-device.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0207-drm-drv-use-enum-drm_minor_type-when-appropriate.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0207-drm-lcdif-Determine-bus-format-and-flags-in-atomic_c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0207-drm-panfrost-Implement-generic-DRM-object-RSS-report.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0208-drm-amd-pm-Annotate-struct-smu10_voltage_dependency_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0208-drm-file-use-explicit-values-for-enum-drm_minor_type.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0208-drm-i915-Abstract-the-extra-JSL-EHL-DPLL4-power-doma.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0208-drm-lcdif-Check-consistent-bus-format-and-flags-acro.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0209-drm-amdgpu-discovery-Annotate-struct-ip_hw_instance-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0209-drm-i915-Move-the-DPLL-extra-power-domain-handling-u.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0209-drm-lcdif-Add-multiple-encoders-and-first-bridges-su.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0210-drm-i915-Extract-_intel_-enable-disable-_shared_dpll.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0210-drm-i915-selftests-Annotate-struct-perf_series-with-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0210-drm-lcdif-Add-i.MX93-LCDIF-compatible-string.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0211-drm-Switch-i2c-drivers-back-to-use-.probe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0211-drm-i915-Move-the-g45-PEG-band-gap-HPD-workaround-to.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0211-drm-manager-to-keep-track-of-GPUs-VA-mappings.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0211-drm-msm-dpu-Annotate-struct-dpu_hw_intr-with-__count.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0212-drm-debugfs-provide-infrastructure-to-dump-a-DRM-GPU.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0212-drm-i915-hdcp-Rename-HCDP-1.4-enablement-function.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0212-drm-nouveau-pm-Annotate-struct-nvkm_perfdom-with-__c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0212-drm-panel-edp-Convert-to-platform-remove-callback-re.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0213-drm-bridge-display-connector-rename-dp_pwr-to-connec.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0213-drm-i915-hdcp-Convert-intel_hdcp_enable-to-a-blanket.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0213-drm-syncobj-add-IOCTL-to-register-an-eventfd.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0213-drm-vc4-Annotate-struct-vc4_perfmon-with-__counted_b.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0214-drm-bridge-display-connector-handle-hdmi-pwr-supply.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0214-drm-i915-hdcp-Add-more-conditions-to-enable-hdcp.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0214-drm-panel-simple-Drop-prepared_time.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0214-drm-virtio-Annotate-struct-virtio_gpu_object_array-w.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0215-drm-i915-mst-Swap-TRANSCONF-vs.-FECSTALL_DIS_DPTSTRE.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0215-drm-manager-Fix-printk-format-for-size_t.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0215-drm-ttm-Remove-redundant-code-in-ttm_tt_init_fields.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0215-drm-vmwgfx-Annotate-struct-vmw_surface_dirty-with-__.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0216-drm-debugfs-Silence-warning-from-cast.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0216-drm-i915-mst-Disable-transcoder-before-deleting-the-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0216-drm-i915-ttm-Add-I915_BO_PREALLOC.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0216-drm-v3d-Annotate-struct-v3d_perfmon-with-__counted_b.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0217-drm-dp-switch-drm_dp_downstream_-helpers-to-struct-d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0217-drm-i915-display-Set-I915_BO_ALLOC_USER-for-fb.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0217-drm-i915-mst-Clear-ACT-just-before-triggering-payloa.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0217-gpu-host1x-Explicitly-include-correct-DT-includes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0218-drm-Explicitly-include-correct-DT-includes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0218-drm-i915-Add-a-function-to-mmap-framebuffer-obj.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0218-drm-i915-mst-Always-write-CHICKEN_TRANS.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0218-drm-panel-nv3051d-Add-Support-for-Anbernic-351V.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0219-drm-amd-display-Fix-mst-hub-unplug-warning.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0219-drm-i915-display-Add-helper-func-to-get-intel_fbdev-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0219-drm-i915-display-Use-dma_fence-interfaces-instead-of.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0220-drm-arm-komeda-Remove-component-framework-and-add-a-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0220-drm-exynos-dsi-Convert-to-platform-remove-callback-r.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0220-drm-i915-display-Implement-fb_mmap-callback-function.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0220-drm-i915-display-Use-intel_bo_to_drm_bo-instead-of-o.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0221-drm-bridge-samsung-dsim-add-more-mipi-dsi-device-deb.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0221-drm-bridge-tc358767-increase-PLL-lock-time-delay.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0221-drm-i915-Extract-hsw_chicken_trans_reg.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0221-drm-i915-mtl-Disable-stolen-memory-backed-FB-for-A0.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0222-drm-bridge-samsung-dsim-reread-ref-clock-before-conf.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0222-drm-bridge-tc358767-give-VSDELAY-some-positive-value.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0222-drm-i915-Make-IRQ-reset-and-postinstall-multi-gt-awa.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0222-drm-i915-Stop-using-a-reg-variable.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0223-drm-bridge-samsung-dsim-update-PLL-reference-clock.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0223-drm-i915-Extract-mchbar_reg.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0223-drm-i915-gt-Consider-multi-gt-instead-of-to_gt.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0223-drm-ssd130x-Fix-pitch-calculation-in-ssd130x_fb_blit.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0224-drm-bridge-samsung-dsim-adjust-porches-by-rounding-u.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0224-drm-i915-dsi-Remove-dead-GLK-checks.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0224-drm-i915-gem-Consider-multi-gt-instead-of-to_gt.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0224-video-Add-auxiliary-display-drivers-to-Graphics-supp.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0225-drm-bridge-samsung-dsim-calculate-porches-in-Hz.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0225-drm-i915-dsi-Extract-port_ctrl_reg.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0225-drm-i915-selftests-Consider-multi-gt-instead-of-to_g.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0225-fbdev-Move-core-fbdev-symbols-to-a-separate-Kconfig-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0226-drm-i915-Remove-unused-for_each_uabi_class_engine.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0226-drm-i915-mtl-Extend-Wa_22011802037-to-MTL-A-step.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0226-drm-panel-simple-allow-LVDS-format-override.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0226-fbdev-Split-frame-buffer-support-in-FB-and-FB_CORE-s.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0227-Documentation-gpu-fix-Panfrost-documentation-build-w.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0227-drm-Make-FB_CORE-to-be-selected-if-DRM-fbdev-emulati.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0227-drm-i915-Move-for_each_engine-out-of-i915_drv.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0227-drm-i915-mtl-WA-to-clear-RDOP-clock-gating.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0228-drm-i915-dp_mst-Disable-DSC-on-ICL-MST-outputs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0228-drm-i915-mtl-Set-has_llc-0.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0228-drm-rockchip-vop2-Demote-message-in-mod_supported-to.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0229-drm-bridge-it6505-Fix-Kconfig-indentation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0229-drm-i915-display-Support-PSR-entry-VSC-packet-to-be-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0229-drm-i915-mtl-Define-MOCS-and-PAT-tables-for-MTL.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0229-drm-rockchip-vop2-Convert-to-use-maple-tree-register.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0230-drm-bridge-Remove-redundant-i2c_client-in-anx7625-it.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0230-drm-i915-move-display-mutex-inits-to-display-code.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0230-drm-i915-mtl-fix-mocs-selftest.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0231-drm-i915-i915_drv-Use-proper-parameter-naming-in-for.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0231-drm-i915-move-display-spinlock-init-to-display-code.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0231-drm-managed-Clean-up-GFP_-flag-usage-in-drmm_kmalloc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0231-drm-rockchip-remove-redundant-of_match_ptr.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0232-drm-Remove-flag-FBINFO_DEFAULT-from-fbdev-emulation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0232-drm-i915-i915_drv-Use-i915-instead-of-dev_priv-insie.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0232-drm-rockchip-dsi-Use-devm_platform_get_and_ioremap_r.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0233-drm-dp_mst-Add-helper-to-determine-if-an-MST-port-is.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0233-drm-i915-mtl-Add-PTE-encode-function.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0233-fbdev-Remove-FBINFO_DEFAULT-from-static-structs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0234-drm-dp_mst-Factor-out-a-helper-to-check-the-atomic-s.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0234-drm-i915-mtl-workaround-coherency-issue-for-Media.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0234-fbdev-Remove-FBINFO_DEFAULT-from-kzalloc-ed-structs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0235-drm-dp_mst-Swap-the-order-of-checking-root-vs.-non-r.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0235-drm-i915-selftest-Record-GT-error-for-gt-failure.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0235-drm-panel-ltk050h3146w-add-mipi_dsi_device.mode_flag.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0235-fbdev-Remove-FBINFO_DEFAULT-from-devm_kzalloc-ed-str.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0236-drm-dp_mst-Allow-DSC-in-any-Synaptics-last-branch-de.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0236-drm-i915-mtl-Add-workaround-14018778641.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0236-drm-panel-ltk050h3146w-add-support-for-Leadtek-LTK05.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0236-fbdev-Remove-FBINFO_DEFAULT-from-framebuffer_alloc-e.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0237-drm-dp-Add-DP_HBLANK_EXPANSION_CAPABLE-and-DSC_PASST.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0237-drm-i915-dg2-Remove-Wa_15010599737.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0237-drm-i915-hwmon-Get-mutex-and-rpm-ref-just-once-in-hw.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0238-drm-dp_mst-Add-HBLANK-expansion-quirk-for-Synaptics-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0238-drm-i915-guc-Disable-PL1-power-limit-when-loading-Gu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0238-drm-i915-selftests-Align-igt_spinner_create_request-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0239-drm-dp-Add-helpers-to-calculate-the-link-BW-overhead.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0239-drm-i915-hwmon-Block-waiting-for-GuC-reset-to-comple.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0240-drm-i915-dp_mst-Enable-FEC-early-once-it-s-known-DSC.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0240-drm-i915-mtl-Implement-Wa_14019141245.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0241-drm-i915-Migrate-platform-dependent-mock-hugepage-se.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0241-drm-i915-dp-Specify-the-FEC-overhead-as-an-increment.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0241-fbdev-fsl-diu-fb-Remove-flag-FBINFO_DEFAULT.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0242-drm-i915-Use-correct-huge-page-manager-for-MTL.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0242-drm-i915-dp-Pass-actual-BW-overhead-to-m_n-calculati.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0242-fbdev-Remove-FBINFO_FLAG_DEFAULT-from-kzalloc-ed-str.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0243-drm-i915-dp_mst-Account-for-FEC-and-DSC-overhead-dur.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0243-fbdev-Remove-FBINFO_FLAG_DEFAULT-from-framebuffer_al.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0244-drm-i915-dp_mst-Add-atomic-state-for-all-streams-on-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0244-drm-i915-selftest-Update-the-SLPC-selftest.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0244-fbdev-atafb-Remove-flag-FBINFO_FLAG_DEFAULT.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0245-drm-i915-dp_mst-Program-the-DSC-PPS-SDP-for-each-str.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0245-drm-i915-rc6-throw-out-set-wrapper.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0245-fbdev-pxafb-Remove-flag-FBINFO_FLAG_DEFAULT.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0246-drm-i915-dp-Make-sure-the-DSC-PPS-SDP-is-disabled-wh.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0246-i915-pmu-Add-support-for-total-context-runtime-for-G.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0247-drm-i915-dp_mst-Add-missing-DSC-compression-disablin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0247-drm-i915-fdinfo-Enable-fdinfo-for-GuC-backends.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0247-fbdev-Remove-FBINFO_DEFAULT-and-FBINFO_FLAG_DEFAULT.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0248-drm-i915-dp-Rename-intel_ddi_disable_fec_state-to-in.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0248-drm-i915-gt-Use-gt_err-for-GT-info.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0248-fbdev-Document-that-framebuffer_alloc-returns-zero-e.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0249-drm-i915-dp-Wait-for-FEC-detected-status-in-the-sink.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0249-drm-i915-guc-Force-a-reset-on-internal-GuC-error.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0249-drm-i915-selftests-Use-gt_err-for-GT-info.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0249-drm-panel-db7430-remove-unused-variables.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0250-drm-i915-dp-Disable-FEC-ready-flag-in-the-sink.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0250-drm-i915-guc-Consolidate-duplicated-capture-list-cod.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0250-drm-i915-mtl-Adding-DeviceID-for-Arrowlake-S-under-M.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0250-fbdev-Add-fb_ops-init-macros-for-framebuffers-in-DMA.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0251-drm-fbdev-dma-Use-fbdev-DMA-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0251-drm-i915-dp_mst-Handle-the-Synaptics-HBlank-expansio.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0251-drm-i915-gsc-define-gsc-fw.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0251-drm-i915-guc-Capture-list-naming-clean-up.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0252-drm-i915-dp_mst-Enable-decompression-in-the-sink-fro.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0252-drm-i915-guc-Fix-error-capture-for-virtual-engines.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0252-drm-tegra-Use-fbdev-DMA-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0253-drm-i915-dp-Enable-DSC-via-the-connector-decompressi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0253-drm-i915-gt-Wait-longer-for-tasks-in-migrate-selftes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0253-drm-i915-gvt-fix-intel_vgpu_alloc_resource-kernel-do.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0253-drm-tegra-Set-fbdev-FBINFO_VIRTFB-flag.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0254-drm-i915-Add-Wa_14015150844.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0254-drm-i915-dp_mst-Enable-DSC-passthrough.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0254-drm-i915-vma-fix-kernel-doc-function-name-for-i915_v.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0254-drm-tegra-Store-pointer-to-vmap-ed-framebuffer-in-sc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0255-drm-exynos-Use-fbdev-DMA-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0255-drm-i915-dp_mst-Enable-MST-DSC-decompression-for-all.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0255-drm-i915-mtl-Drop-Wa_14017240301.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0255-drm-i915-utils-drop-kernel-doc-from-__wait_for.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0256-drm-exynos-Set-fbdev-FBINFO_VIRTFB-flag.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0256-drm-i915-Factor-out-function-to-clear-pipe-update-fl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0256-drm-i915-Run-relevant-bits-of-debugfs-drop_caches-pe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0256-drm-i915-vma-document-struct-i915_vma_resource-waker.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0257-drm-i915-dp_mst-Force-modeset-CRTC-if-DSC-toggling-r.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0257-drm-i915-gt-skip-WA-verification-for-GEN7_MISCCPCTL-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0257-drm-i915-perf-fix-i915_perf_ioctl_version-kernel-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0257-drm-omapdrm-Set-VM-flags-in-GEM-object-mmap-function.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0258-drm-i915-Add-Wa_18022495364.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0258-drm-i915-dp_mst-Improve-BW-sharing-between-MST-strea.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0258-drm-i915-error-fix-i915_capture_error_state-kernel-d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0258-drm-omapdrm-Use-GEM-mmap-for-fbdev-emulation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0259-drm-i915-dp_mst-Check-BW-limitations-only-after-all-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0259-drm-i915-huc-silence-injected-failure-in-the-load-vi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0259-drm-i915-request-drop-kernel-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0259-drm-omapdrm-Set-fbdev-FBINFO_VIRTFB-flag.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0260-drm-i915-Query-compressed-bpp-properly-using-correct.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0260-drm-i915-gem-fix-i915_gem_object_lookup_rcu-kernel-d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0260-drm-i915-pxp-mtl-Update-pxp-firmware-response-timeou.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0260-fbdev-Remove-FB_DEFAULT_SYS_OPS.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0261-drm-i915-Drop-redundant-modeset-check.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0261-drm-i915-engine-fix-kernel-doc-function-name-for-int.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0261-drm-i915-pxp-mtl-Update-pxp-firmware-packet-size.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0261-fbdev-Harmonize-some-comments-in-linux-fb.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0262-drm-i915-Split-intel_update_crtc-into-two-parts.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0262-drm-i915-context-fix-kernel-doc-parameter-descriptio.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0262-drm-i915-lrc-User-PXP-contexts-requires-runalone-bit.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0262-drm-panel-ld9040-add-backlight-Kconfig-dependency.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0263-drm-ast-Do-not-enable-PCI-resources-multiple-times.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0263-drm-i915-Do-plane-etc.-updates-more-atomically-acros.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0263-drm-i915-gtt-fix-i915_vm_resv_put-kernel-doc-paramet.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0263-drm-i915-refactor-deprecated-strncpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0264-drm-i915-engine-hide-preempt_hang-selftest-member-fr.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0264-drm-i915-gt-Update-RC6-mask-for-mtl_drpc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0264-drm-i915-gvt-Clean-up-zero-initializers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0264-drm-ssd130x-Inline-the-ssd130x_buf_-alloc-free-funct.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0265-drm-i915-gt-remove-a-static-inline-that-requires-inc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0265-drm-i915-guc-add-dbgfs_node-member-kernel-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0265-drm-panelreplay-dpcd-register-definition-for-panelre.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0265-drm-ssd130x-Allocate-buffer-in-the-plane-s-.atomic_c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0266-dma-buf-Fix-the-typo-in-DMA-BUF-statistics-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0266-drm-i915-gem-remove-inlines-from-i915_gem_execbuffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0266-drm-i915-guc-drop-lots-of-kernel-doc-markers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0266-drm-i915-psr-Move-psr-specific-dpcd-init-into-own-fu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0267-drm-amdgpu-Rename-aqua_vanjaram_reg_init.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0267-drm-i915-Add-Wa_18028616096.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0267-drm-i915-guc-add-intel_guc_state_capture-member-docs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0267-drm-i915-panelreplay-Initializaton-and-compute-confi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0268-drm-amd-display-Remove-else-after-return-statement-i.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0268-drm-i915-active-fix-kernel-doc-for-function-paramete.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0268-drm-i915-panelreplay-Enable-panel-replay-dpcd-initia.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0268-drm-i915-perf-Remove-gtt_offset-from-stream-oa_buffe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0269-drm-amd-display-Remove-else-after-return-in-dm_crtc_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0269-drm-i915-Do-not-disable-preemption-for-resets.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0269-drm-i915-panelreplay-enable-disable-panel-replay.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0269-drm-i915-pmu-drop-kernel-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0270-drm-amd-display-Clean-up-style-problems-in-amdgpu_dm.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0270-drm-i915-Avoid-endless-HPD-poll-detect-loop-via-runt.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0270-drm-i915-abstract-plane-protection-check.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0270-drm-i915-pxp-fix-kernel-doc-for-member-dev_link.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0271-drm-amd-display-Remove-redundant-braces-in-amdgpu_dm.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0271-drm-i915-Don-t-change-the-status-of-forced-connector.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0271-drm-i915-remove-excess-functions-from-plane-protecti.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0271-drm-i915-scatterlist-fix-kernel-doc-parameter-docume.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0272-drm-amd-display-Use-seq_puts-in-amdgpu_current_color.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0272-drm-i915-Don-t-change-the-status-of-forced-connector.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0272-drm-i915-mtl-Define-GSC-Proxy-component-interface.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0272-drm-i915-update-in-source-bug-filing-URLs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0273-drm-amd-display-fix-comment-typo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0273-drm-i915-mtl-C20-state-verification.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0273-drm-i915-vdsc-Fix-first_line_bpg_offset-calculation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0273-mei-gsc_proxy-add-gsc-proxy-driver.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0274-drm-amd-Use-attribute-groups-for-PSP-flashing-attrib.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0274-drm-display-dp-Add-helper-function-to-get-DSC-bpp-pr.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0274-drm-i915-dp-Fix-LT-debug-print-in-SDP-CRC-enable.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0274-drm-i915-gsc-add-initial-support-for-GSC-proxy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0275-drm-amd-Make-flashing-messages-quieter.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0275-drm-i915-display-Store-compressed-bpp-in-U6.4-format.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0275-drm-i915-gsc-add-support-for-GSC-proxy-interrupt.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0275-drm-i915-pxp-mtl-intel_pxp_init_hw-needs-runtime-pm-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0276-drm-amd-Convert-USB-C-PD-F-W-attributes-into-groups.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0276-drm-i915-display-Consider-fractional-vdsc-bpp-while-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0276-drm-i915-pxp-Optimize-GET_PARAM-PXP_STATUS.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0276-drm-i915-vma-fix-struct-i915_vma_bindinfo-kernel-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0277-drm-amd-Add-documentation-for-how-to-flash-a-dGPU.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0277-drm-i915-audio-Consider-fractional-vdsc-bpp-while-co.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0277-drm-i915-display-Remove-unused-POWER_DOMAIN_MASK.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0277-drm-i915-gem-fix-function-pointer-member-kernel-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0278-drm-amd-Detect-IFWI-or-PD-upgrade-support-in-psp_ear.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0278-drm-i915-cx0-Add-intel_cx0_get_owned_lane_mask.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0278-drm-i915-dsc-mtl-Add-support-for-fractional-bpp.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0278-drm-i915-scatterlist-fix-kernel-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0279-drm-amd-adjust-whitespace-for-amdgpu_psp.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0279-drm-i915-Simplify-intel_cx0_program_phy_lane-with-lo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0279-drm-i915-dp-Iterate-over-output-bpp-with-fractional-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0279-drm-i915-ttm-fix-i915_ttm_to_gem-kernel-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0280-drm-amdkfd-Access-gpuvm_export_dmabuf-API-to-get-Dma.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0280-drm-i915-cx0-Enable-disable-TX-only-for-owned-PHY-la.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0280-drm-i915-dsc-Add-debugfs-entry-to-validate-DSC-fract.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0280-drm-i915-use-kernel-doc-Werror-when-CONFIG_DRM_I915_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0281-drm-amdgpu-return-an-error-if-query_video_caps-is-no.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0281-drm-i915-cx0-Program-vswing-only-for-owned-lanes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0281-drm-i915-dsc-Allow-DSC-only-with-fractional-bpp-when.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0281-drm-i915-uc-Track-patch-level-versions-on-reduced-ve.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0282-drm-amdgpu-Update-invalid-PTE-flag-setting.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0282-drm-i915-display-Use-int-for-entry-setup-frames.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0282-drm-i915-mtl-Define-GuC-firmware-version-for-MTL.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0283-drm-amdgpu-skip-address-adjustment-for-GFX-RAS-injec.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0283-drm-i915-dp-Tune-down-FEC-detection-timeout-error-me.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0283-drm-i915-guc-Decode-another-GuC-load-failure-case.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0284-drm-amd-display-Clean-up-warnings-in-amdgpu_dm_pp_sm.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0284-drm-i915-guc-Print-status-register-when-waiting-for-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0284-drm-i915-selftest-Simplify-Y-major-tiling-in-blit-se.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0284-drm-i915-xe2lpd-implement-WA-for-underruns-while-ena.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0285-drm-amd-display-Remove-unnecessary-casts-in-amdgpu_d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0285-drm-i915-Eliminate-has_4tile-feature-flag.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0285-drm-i915-panelreplay-Debugfs-support-for-panel-repla.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0285-drm-i915-uc-Enhancements-to-firmware-table-validatio.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0286-drm-amd-display-Clean-up-warnings-in-amdgpu_dm-_mst_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0286-drm-i915-Fix-fractional-bpp-handling-in-intel_link_b.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0286-drm-i915-dp-Consider-output_format-while-computing-d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0286-drm-i915-uc-Reject-duplicate-entries-in-firmware-tab.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0287-drm-amdkfd-Use-KIQ-to-unmap-HIQ.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0287-drm-i915-dp-Move-compressed-bpp-check-with-420-forma.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0287-drm-i915-dsb-DSB-code-refactoring.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0287-drm-i915-uc-Make-unexpected-firmware-versions-an-err.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0288-drm-amdgpu-have-bos-for-PDs-PTS-cpu-accessible-when-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0288-drm-i915-display-keep-struct-intel_display-members-s.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0288-drm-i915-dp_mst-Use-output_format-to-get-the-final-l.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0288-drm-i915-mtl-Drop-FLAT-CCS-check.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0289-drm-amd-amdgpu-Add-cu_occupancy-sysfs-file-to-GFX9.4.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0289-drm-i915-dp-Use-consistent-name-for-link-bpp-and-com.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0289-drm-i915-move-_crtc_clock_get-to-intel_dpll.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0289-drm-i915-mtl-Add-MTL-for-remapping-CCS-FBs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0290-drm-amdkfd-Skip-handle-mapping-SVM-range-with-no-GPU.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0290-drm-i915-add-vlv_pipe_to_phy-helper-to-replace-DPIO_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0290-drm-i915-dp-Update-Bigjoiner-interface-bits-for-comp.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0290-drm-i915-mtl-Fix-the-wa-number-for-Wa_22016670082.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0291-drm-amdgpu-Change-golden-settings-for-GFX-v9.4.3.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0291-drm-i915-convert-vlv_dpio_read-write-from-pipe-to-ph.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0291-drm-i915-intel_cdclk-Add-vdsc-with-bigjoiner-constra.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0291-drm-i915-preparation-for-using-PAT-index.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0292-drm-amdgpu-Fix-error-warnings-in-gmc_v9_0.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0292-drm-i915-dp-Remove-extra-logs-for-printing-DSC-info.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0292-drm-i915-fbc-Split-plane-size-vs.-surface-size-check.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0292-drm-i915-use-pat_index-instead-of-cache_level.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0293-drm-i915-dp-Avoid-forcing-DSC-BPC-for-MST-case.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0293-drm-i915-fbc-Bump-max-surface-size-to-8kx4k-on-icl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0293-drm-i915-pxp-Add-GSC-CS-back-end-resource-init-and-c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0294-drm-amd-display-Block-optimize-on-consecutive-FAMS-e.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0294-drm-i915-dp-Add-functions-to-get-min-max-src-input-b.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0294-drm-i915-fbc-Bump-ivb-FBC-max-surface-size-to-4kx4k.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0294-drm-i915-pxp-Add-MTL-hw-plumbing-enabling-for-KCR-op.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0295-drm-amdgpu-Fix-warnings-in-gfxhub_-v1_0-v1_2.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0295-drm-dp_mst-Store-the-MST-PBN-divider-value-in-fixed-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0295-drm-i915-dp-Check-min-bpc-DSC-limits-for-dsc_force_b.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0295-drm-i915-pxp-Add-MTL-helpers-to-submit-Heci-Cmd-Pack.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0296-drm-amdgpu-Remove-redundant-GFX-v9.4.3-sequence.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0296-drm-dp_mst-Fix-PBN-divider-calculation-for-UHBR-rate.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0296-drm-i915-dp-Avoid-left-shift-of-DSC-output-bpp-by-4.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0296-drm-i915-pxp-Add-GSC-CS-backend-to-send-GSC-fw-messa.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0297-drm-amdgpu-Fix-warnings-in-gfxhub_v2_0.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0297-drm-dp_mst-Add-kunit-tests-for-drm_dp_get_vc_payload.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0297-drm-i915-dp-Rename-helper-to-get-DSC-max-pipe_bpp.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0297-drm-i915-pxp-Add-ARB-session-creation-and-cleanup.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0298-drm-amdgpu-Prefer-dev_warn-over-printk.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0298-drm-i915-dp-Replace-intel_dp_is_uhbr_rate-with-drm_d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0298-drm-i915-dp-Separate-out-functions-for-edp-DP-for-co.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0298-drm-i915-uapi-pxp-Add-a-GET_PARAM-for-PXP.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0299-drm-amdgpu-Fix-warnings-in-gmc_v10_0.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0299-drm-i915-dp-Account-for-channel-coding-efficiency-on.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0299-drm-i915-dp-Add-DSC-BPC-BPP-constraints-while-select.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0299-drm-i915-pxp-On-MTL-KCR-enabling-doesn-t-wait-on-tee.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0300-drm-amdgpu-Fix-errors-warnings-in-gmc_-v6_0-v7_0.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0300-drm-i915-dp-Fix-UHBR-link-M-N-values.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0300-drm-i915-dp-Separate-out-function-to-get-compressed-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0300-drm-i915-pxp-Enable-PXP-with-MTL-GSC-CS.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0301-drm-amdgpu-Fix-warnings-in-gfxhub_v2_1.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0301-drm-i1915-guc-Fix-probe-injection-CI-failures-after-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0301-drm-i915-dp-Get-optimal-link-config-to-have-best-com.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0301-drm-i915-dp_mst-Calculate-the-BW-overhead-in-intel_d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0302-drm-amdgpu-Remove-else-after-return-statement-in-gmc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0302-drm-i915-dp-Check-src-sink-compressed-bpp-limit-for-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0302-drm-i915-dp_mst-Fix-PBN-MTP_TU-size-calculation-for-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0302-drm-i915-guc-Fix-confused-register-capture-list-crea.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0303-drm-amdgpu-Fix-warnings-in-gmc_v11_0.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0303-drm-i915-dp-Check-if-force_dsc_output_format-is-poss.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0303-drm-i915-dp-Report-a-rounded-down-value-as-the-maxim.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0303-drm-i915-hwmon-Silence-UBSAN-uninitialized-bool-vari.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0304-drm-amdgpu-Remove-else-after-return-statement-in-gfx.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0304-drm-i915-Dump-error-capture-to-kernel-log.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0304-drm-i915-display-Remove-unused-POWER_DOMAIN_MODESET.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0304-drm-i915-dp-Simplify-intel_dp_max_data_rate.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0305-drm-amdgpu-vkms-drop-redundant-set-of-fb_modifiers_n.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0305-drm-i915-dp-Reuse-intel_dp_-max-effective-_data_rate.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0305-drm-i915-guc-Dump-error-capture-to-dmesg-on-CTB-erro.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0306-drm-amd-pm-disbale-dcefclk-device-sysnode-on-GFX-v9..patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0306-drm-i915-dsi-assume-BXT-gpio-works-for-non-native-GP.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0306-drm-i915-guc-slpc-Disable-rps_boost-debugfs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0307-drm-amdgpu-Fix-warnings-in-gmc_v8_0.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0307-drm-i915-display-remove-redundant-parameter-from-sdp.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0307-drm-i915-dsi-switch-mipi_exec_gpio-from-dev_priv-to-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0307-drm-i915-mtl-do-not-enable-render-power-gating-on-MT.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0308-drm-amdgpu-Fix-warnings-in-gfxhub_-v3_0-v3_0_3.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0308-drm-i915-display-combine-DP-audio-compute-config-ste.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0308-drm-i915-dsi-clarify-GPIO-exec-sequence.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0308-drm-i915-mtl-Add-MTL-performance-tuning-changes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0309-drm-amdgpu-Fix-errors-warnings-in-gfx_v10_0.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0309-drm-i915-display-add-lock-while-printing-frontbuffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0309-drm-i915-dsi-rename-platform-specific-_exec_gpio-to-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0309-drm-i915-mtl-Extend-Wa_16014892111-to-MTL-A-step.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0310-drm-amdgpu-gfx9-move-update_spm_vmid-out-of-rlc_init.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0310-drm-i915-Fix-memory-leaks-in-function-live_nop_switc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0310-drm-i915-dsi-bxt-icl-GPIO-set-value-do-not-need-gpio.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0310-drm-i915-sdvo-Issue-SetTargetOutput-prior-to-GetAtta.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0311-drm-amdgpu-gfx10-move-update_spm_vmid-out-of-rlc_ini.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0311-drm-i915-dsi-Replace-while-1-with-one-with-clear-exi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0311-drm-i915-pmu-Change-bitmask-of-enabled-events-to-u32.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0311-drm-i915-sdvo-Protect-macro-args.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0312-drm-amdgpu-Increase-soft-IH-ring-size.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0312-drm-i915-dsi-Get-rid-of-redundant-else.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0312-drm-i915-pmu-Support-PMU-for-all-engines.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0312-drm-i915-sdvo-s-sdvo_inputs_mask-sdvo_num_inputs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0313-drm-i915-Don-t-warn-about-zero-N-P-in-_calc_dpll_par.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0313-drm-i915-dsi-Replace-check-with-a-missing-MIPI-seque.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0313-drm-i915-pmu-Skip-sampling-engines-with-no-enabled-c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0314-drm-amdkfd-add-kfd2kgd-debugger-callbacks-for-GC-v9..patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0314-drm-i915-Fully-populate-crtc_state-dpll.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0314-drm-i915-dsi-Remove-GPIO-lookup-table-at-the-end-of-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0314-drm-i915-pmu-Transform-PMU-parking-code-to-be-GT-bas.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0315-drm-amdkfd-restore-debugger-additional-info-for-gfx-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0315-drm-i915-dsi-Fix-wrong-initial-value-for-GPIOs-in-bx.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0315-drm-i915-pmu-Add-reference-counting-to-the-sampling-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0315-drm-i915-sdvo-Pick-the-TV-dotclock-from-adjusted_mod.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0316-drm-amdkfd-enable-watch-points-globally-for-gfx943.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0316-drm-i915-dsi-Extract-common-soc_gpio_set_value-helpe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0316-drm-i915-pmu-Prepare-for-multi-tile-non-engine-count.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0316-drm-i915-sdvo-Fail-gracefully-if-the-TV-dotclock-is-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0317-drm-amdkfd-add-multi-process-debugging-support-for-G.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0317-drm-i915-dsi-Replace-poking-of-VLV-GPIOs-behind-the-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0317-drm-i915-pmu-Export-counters-from-all-tiles.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0317-drm-i915-rpl-Update-pci-ids-for-RPL-P-U.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0318-drm-amdgpu-rename-psp_execute_non_psp_fw_load-and-ma.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0318-drm-i915-dsi-Prepare-soc_gpio_set_value-to-distingui.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0318-drm-i915-mtl-end-support-for-set-caching-ioctl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0318-drm-i915-vma-constify-unbind_fence_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0319-drm-amdgpu-use-psp_execute_load_ip_fw-instead.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0319-drm-i915-display-update-intel_dp_has_audio-to-suppor.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0319-drm-i915-dsi-Replace-poking-of-CHV-GPIOs-behind-the-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0319-fbdev-Add-Kconfig-options-to-select-different-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0320-drm-i915-display-configure-SDP-split-for-DP-MST.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0320-drm-i915-dsi-Combine-checks-in-mipi_exec_gpio.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0320-drm-radeon-ERROR-foo-bar-should-be-foo-bar.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0320-fbdev-Add-initializer-macros-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0321-drm-armada-Use-regular-fbdev-I-O-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0321-drm-i915-iosf-Drop-unused-APIs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0321-drm-i915-regs-split-out-intel_color_regs.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0321-drm-radeon-ERROR-foo-should-be-foo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0322-drm-exynos-Use-regular-fbdev-I-O-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0322-drm-i915-color-move-CHV-CGM-pipe-mode-read-to-intel_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0322-drm-i915-display-Use-int-type-for-entry_setup_frames.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0322-drm-radeon-ERROR-foo-should-be-foo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0323-drm-gma500-Use-regular-fbdev-I-O-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0323-drm-i915-display-Do-not-check-psr2-if-psr-panel-repl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0323-drm-i915-move-HSW-gamma-mode-read-to-intel_color.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0323-drm-radeon-ERROR-that-open-brace-should-be-on-the-pr.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0324-drm-i915-Polish-some-RMWs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0324-drm-i915-move-ILK-CSC-mode-read-to-intel_color.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0324-drm-radeon-ERROR-foo-should-be-foo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0324-drm-radeon-Use-regular-fbdev-I-O-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0325-drm-amdkfd-Update-CWSR-grace-period-for-GFX9.4.3.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0325-drm-fbdev-dma-Use-regular-fbdev-I-O-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0325-drm-i915-Push-audio-enable-disable-further-out.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0325-drm-i915-color-move-SKL-gamma-and-CSC-enable-read-to.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0326-drm-amdgpu-add-watchdog-timer-enablement-for-gfx_v9_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0326-drm-i915-Wrap-g4x-DP-HDMI-audio-enable-disable.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0326-drm-i915-color-move-pre-SKL-gamma-and-CSC-enable-rea.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0326-drm-omapdrm-Use-regular-fbdev-I-O-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- commit 55b06a7</changelog>
  <changelog author="ematsumiya@suse.de" date="1759492803">- cifs: prevent NULL pointer dereference in UTF16 conversion
  (bsc#1250365, CVE-2025-39838).
- commit 5883dcd</changelog>
  <changelog author="ailiop@suse.com" date="1759492804">- Squashfs: add additional inode sanity checking (git-fixes).
- commit fe46811</changelog>
  <changelog author="ailiop@suse.com" date="1759492805">- Squashfs: reject negative file sizes in squashfs_read_inode()
  (git-fixes).
- commit 2f68e78</changelog>
  <changelog author="tiwai@suse.de" date="1759579200">- ALSA: usb-audio: Add DSD support for Comtrue USB Audio device
  (stable-fixes).
- ALSA: usb-audio: Fix build with CONFIG_INPUT=n (git-fixes).
- ALSA: usb-audio: Convert comma to semicolon (git-fixes).
- ALSA: usb-audio: Add mixer quirk for Sony DualSense PS5
  (stable-fixes).
- ALSA: usb-audio: Remove unneeded wmb() in mixer_quirks
  (stable-fixes).
- ALSA: usb-audio: Simplify NULL comparison in mixer_quirks
  (stable-fixes).
- ALSA: usb-audio: Avoid multiple assignments in mixer_quirks
  (stable-fixes).
- ALSA: usb-audio: Drop unnecessary parentheses in mixer_quirks
  (stable-fixes).
- ALSA: usb-audio: Fix block comments in mixer_quirks
  (stable-fixes).
- commit 929e260</changelog>
  <changelog author="tiwai@suse.de" date="1759579201">- ASoC: wcd934x: fix error handling in wcd934x_codec_parse_data()
  (git-fixes).
- ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free
  (git-fixes).
- ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping
  (git-fixes).
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping
  (git-fixes).
- ASoC: Intel: bytcht_es8316: Fix invalid quirk input mapping
  (git-fixes).
- ASoC: qcom: audioreach: fix potential null pointer dereference
  (git-fixes).
- ASoC: imx-hdmi: remove cpu_pdev related code (git-fixes).
- ALSA: lx_core: use int type to store negative error codes
  (git-fixes).
- ALSA: usb-audio: Add mute TLV for playback volumes on more
  devices (stable-fixes).
- ALSA: usb-audio: move mixer_quirks' min_mute into common quirk
  (stable-fixes).
- commit 86dd099</changelog>
  <changelog author="tiwai@suse.de" date="1759579202">- docs: admin-guide: update to current minimum pipe size default
  (git-fixes).
- drivers/base/node: handle error properly in register_one_node()
  (git-fixes).
- Bluetooth: ISO: don't leak skb in ISO_CONT RX (git-fixes).
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (git-fixes).
- Bluetooth: MGMT: Fix not exposing debug UUID on
  MGMT_OP_READ_EXP_FEATURES_INFO (git-fixes).
- drm/radeon/r600_cs: clean up of dead code in r600_cs
  (git-fixes).
- drm/bridge: it6505: select REGMAP_I2C (git-fixes).
- drm/panel: novatek-nt35560: Fix invalid return value
  (git-fixes).
- can: rcar_can: rcar_can_resume(): fix s2ram with PSCI
  (stable-fixes).
- drm/i915/backlight: Return immediately when scale() finds
  invalid parameters (stable-fixes).
- commit 07504f9</changelog>
  <changelog author="tiwai@suse.de" date="1759579203">- maple_tree: fix MAPLE_PARENT_RANGE32 and parent pointer docs
  (git-fixes).
- media: rj54n1cb0c: Fix memleak in rj54n1_probe() (git-fixes).
- media: lirc: Fix error handling in lirc_register() (git-fixes).
- media: zoran: Remove zoran_fh structure (git-fixes).
- drm/amdgpu: remove the redeclaration of variable i (git-fixes).
- drm/msm/dpu: fix incorrect type for ret (git-fixes).
- drm/amdkfd: Fix error code sign for EINVAL in svm_ioctl()
  (git-fixes).
- drm/amd/pm: Disable SCLK switching on Oland with high pixel
  clocks (v3) (git-fixes).
- drm/amd/pm: Disable MCLK switching with non-DC at 120 Hz+ (v2)
  (git-fixes).
- drm/amd/pm: Treat zero vblank time as too short in si_dpm (v3)
  (git-fixes).
- drm/amd/pm: Adjust si_upload_smc_data register programming (v3)
  (git-fixes).
- drm/amd/pm: Fix si_upload_smc_data (v3) (git-fixes).
- drm/amd/pm: Disable ULV even if unsupported (v3) (git-fixes).
- drm/amdgpu: Power up UVD 3 for FW validation (v2) (git-fixes).
- drm/rcar-du: dsi: Fix 1/2/3 lane support (git-fixes).
- drm/amd/display: Remove redundant semicolons (git-fixes).
- firewire: core: fix overlooked update of subsystem ABI version
  (git-fixes).
- commit 2161328</changelog>
  <changelog author="tiwai@suse.de" date="1759579204">- net: nfc: nci: Add parameter validation for packet data
  (git-fixes).
- net: usb: Remove disruptive netif_wake_queue in
  rtl8150_set_multicast (git-fixes).
- wifi: ath11k: HAL SRNG: don't deinitialize and re-initialize
  again (git-fixes).
- wifi: ath10k: avoid unnecessary wait for service ready message
  (git-fixes).
- wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load()
  (git-fixes).
- wifi: rtw89: avoid circular locking dependency in
  ser_state_run() (git-fixes).
- wifi: mac80211: fix Rx packet handling when pubsta information
  is not available (git-fixes).
- wifi: mt76: fix potential memory leak in mt76_wmac_probe()
  (git-fixes).
- wifi: mwifiex: send world regulatory domain to driver
  (git-fixes).
- media: b2c2: Fix use-after-free causing by irq_check_work in
  flexcop_pci_remove (git-fixes).
- media: uvcvideo: Mark invalid entities with id
  UVC_INVALID_ENTITY_ID (git-fixes).
- media: i2c: mt9v111: fix incorrect type for ret (git-fixes).
- media: pci: ivtv: Add missing check after DMA map (git-fixes).
- media: cx18: Add missing check after DMA map (git-fixes).
- media: st-delta: avoid excessive stack usage (git-fixes).
- media: v4l2-subdev: Fix alloc failure check in
  v4l2_subdev_call_state_try() (git-fixes).
- wifi: virt_wifi: Fix page fault on connect (stable-fixes).
- mmc: sdhci-cadence: add Mobileye eyeQ support (stable-fixes).
- usb: core: Add 0x prefix to quirks debug output (stable-fixes).
- commit dbb8904</changelog>
  <changelog author="tiwai@suse.de" date="1759579205">- drivers/base/node: fix double free in register_one_node()
  (git-fixes).
- commit 205d070</changelog>
  <changelog author="tiwai@suse.de" date="1759579206">- Bluetooth: hci_sync: Fix using random address for BIG/PA
  advertisements (git-fixes).
- Bluetooth: ISO: free rx_skb if not consumed (git-fixes).
- wifi: ath12k: fix wrong logging ID used for CE (git-fixes).
- wifi: iwlwifi: Remove redundant header files (git-fixes).
- media: tuner: xc5000: Fix use-after-free in xc5000_release
  (git-fixes).
- media: mc: Fix MUST_CONNECT handling for pads with no links
  (git-fixes).
- drm/panthor: Fix memory leak in panthor_ioctl_group_create()
  (git-fixes).
- ASoC: Intel: sof_sdw: Prevent jump to NULL add_sidecar callback
  (git-fixes).
- ALSA: pcm: Disable bottom softirqs as part of spin_lock_irq()
  on PREEMPT_RT (git-fixes).
- commit 90486f1</changelog>
  <changelog author="tiwai@suse.de" date="1759579207">- wifi: ath12k: fix the fetching of combined rssi (git-fixes).
- commit 75dc6e6</changelog>
  <changelog author="tiwai@suse.de" date="1759665600">- bus: mhi: host: Do not use uninitialized 'dev' pointer in
  mhi_init_irq_setup() (git-fixes).
- iio: imu: inv_icm42600: Drop redundant pm_runtime
  reinitialization in resume (git-fixes).
- iio: consumers: Fix offset handling in
  iio_convert_raw_to_processed() (git-fixes).
- iio: dac: ad5421: use int type to store negative error codes
  (git-fixes).
- iio: dac: ad5360: use int type to store negative error codes
  (git-fixes).
- iio: frequency: adf4350: Fix ADF4350_REG3_12BIT_CLKDIV_MODE
  (git-fixes).
- iio: frequency: adf4350: Fix prescaler usage (git-fixes).
- iio: xilinx-ams: Fix AMS_ALARM_THR_DIRECT_MASK (git-fixes).
- iio: xilinx-ams: Unmask interrupts after updating alarms
  (git-fixes).
- misc: genwqe: Fix incorrect cmd field being reported in error
  (git-fixes).
- uio: uio_pdrv_genirq: Remove MODULE_DEVICE_TABLE (git-fixes).
- thunderbolt: Compare HMAC values in constant time (git-fixes).
- usb: misc: qcom_eud: Access EUD_MODE_MANAGER2 through secure
  calls (git-fixes).
- usb: host: max3421-hcd: Fix error pointer dereference in probe
  cleanup (git-fixes).
- tty: n_gsm: Don't block input queue by waiting MSC (git-fixes).
- serial: max310x: Add error checking in probe() (git-fixes).
- mtd: rawnand: omap2: fix device leak on probe failure
  (git-fixes).
- HID: intel-ish-ipc: Remove redundant ready check after timeout
  function (git-fixes).
- hwrng: ks-sa - fix division by zero in ks_sa_rng_init
  (git-fixes).
- crypto: hisilicon/qm - set NULL to qm-&gt;debug.qm_diff_regs
  (git-fixes).
- crypto: aspeed - Fix dma_unmap_sg() direction (git-fixes).
- crypto: atmel - Fix dma_unmap_sg() direction (git-fixes).
- crypto: hisilicon/qm - check whether the input function and
  PF are on the same device (git-fixes).
- hwrng: nomadik - add ARM_AMBA dependency (git-fixes).
- crypto: keembay - Add missing check after sg_nents_for_len()
  (git-fixes).
- commit 6795b42</changelog>
  <changelog author="tiwai@suse.de" date="1759665601">- usb: vhci-hcd: Prevent suspending virtually attached devices
  (git-fixes).
- Revert "usb: xhci: Avoid Stop Endpoint retry loop if the
  endpoint seems Running" (git-fixes).
- usb: typec: tipd: Clear interrupts first (git-fixes).
- usb: cdns3: cdnsp-pci: remove redundant pci_disable_device()
  call (git-fixes).
- usb: gadget: configfs: Correctly set use_os_string at bind
  (git-fixes).
- usb: phy: twl6030: Fix incorrect type for ret (git-fixes).
- crypto: hisilicon/qm - request reserved interrupt for virtual
  function (git-fixes).
- crypto: hisilicon - re-enable address prefetch after device
  resuming (git-fixes).
- crypto: hisilicon/zip - remove unnecessary validation for
  high-performance mode configurations (git-fixes).
- commit 609ee3a</changelog>
  <changelog author="ohering@suse.de" date="1759752000">- RDMA/mana_ib: Fix DSCP value in modify QP (git-fixes).
- commit ffca68d</changelog>
  <changelog author="joao.povoas@suse.com" date="1759752001">- Update
  patches.suse/RDMA-rxe-Flush-delayed-SKBs-while-releasing-RXE-reso.patch
  (git-fixes CVE-2025-39695 bsc#1249306).
- Update
  patches.suse/drm-amdgpu-check-if-hubbub-is-NULL-in-debugfs-amdgpu.patch
  (stable-fixes CVE-2025-39707 bsc#1249333).
- Update
  patches.suse/drm-mediatek-Add-error-handling-for-old-state-CRTC-i.patch
  (git-fixes CVE-2025-39807 bsc#1249887).
- Update
  patches.suse/drm-msm-Add-error-handling-for-krealloc-in-metadata-.patch
  (stable-fixes CVE-2025-39747 bsc#1249566).
- Update
  patches.suse/drm-xe-Make-dma-fences-compliant-with-the-safe-acces.patch
  (stable-fixes CVE-2025-38703 bsc#1249193).
- Update
  patches.suse/drm-xe-vm-Clear-the-scratch_pt-pointer-on-error.patch
  (git-fixes CVE-2025-39811 bsc#1249915).
- Update
  patches.suse/media-ivsc-Fix-crash-at-shutdown-due-to-missing-mei_.patch
  (git-fixes CVE-2025-39711 bsc#1249274).
- Update
  patches.suse/wifi-ath12k-fix-memory-leak-in-ath12k_service_ready_.patch
  (git-fixes CVE-2025-39890 bsc#1250334).
- commit 06f1002</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1759752002">- ixgbe: fix incorrect map used in eee linkmode (CVE-2025-39922
  bsc#1250722).
- commit 1384a55</changelog>
  <changelog author="tiwai@suse.de" date="1759752003">- wifi: ath12k: Add MODULE_FIRMWARE() entries (bsc#1250952).
- commit fbc86d9</changelog>
</package>
<package pkgid="ae364bf87704e0b6e1c1679dfb668beebe9720aeae64c354ff0536222d25c0ff" name="kernel-default-devel" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.53.22.1"/>
  <changelog author="hoyeon.lee@suse.com" date="1761912000">- selftests/bpf: Fix a fd leak in error paths in open_netns
  (git-fixes).
- commit 51d3745</changelog>
  <changelog author="clopez@suse.de" date="1761912001">- KVM: x86/mmu: Prevent installing hugepages when mem attributes
  are changing (git-fixes).
- commit 37d594a</changelog>
  <changelog author="fdmanana@suse.com" date="1761912002">- btrfs: avoid potential out-of-bounds in btrfs_encode_fh()
  (git-fixes).
- commit 8cb68fe</changelog>
  <changelog author="fdmanana@suse.com" date="1761912003">- btrfs: fix clearing of BTRFS_FS_RELOC_RUNNING if relocation
  already running (git-fixes).
- commit f5ef369</changelog>
  <changelog author="fdmanana@suse.com" date="1761912004">- btrfs: do not assert we found block group item when creating
  free space tree (bsc#1252918 CVE-2025-40100).
- commit 327502f</changelog>
  <changelog author="dsterba@suse.com" date="1761912005">- net: tun: Update napi-&gt;skb after XDP process (CVE-2025-39984 bsc#1252081)
- commit f5f1c6b</changelog>
  <changelog author="dsterba@suse.com" date="1761912006">- vhost: vringh: Fix copy_to_iter return value check (CVE-2025-40056 bsc#1252826)
- commit 4efa16a</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1761912007">- smb: client: fix potential cfid UAF in smb2_query_info_compound
  (bsc#1248886).
- commit 5e5239d</changelog>
  <changelog author="tiwai@suse.de" date="1761998400">- drm/panel: kingdisplay-kd097d04: Disable EoTp (git-fixes).
- drm/panel: sitronix-st7789v: fix sync flags for t28cp45tn89
  (git-fixes).
- drm/etnaviv: fix flush sequence logic (git-fixes).
- drm/msm/dpu: Fix pixel extension sub-sampling (git-fixes).
- drm/msm/a6xx: Fix GMU firmware parser (git-fixes).
- drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on
  Iceland (git-fixes).
- drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Fiji
  (git-fixes).
- drm/amd/pm: fix smu table id bound check issue in
  smu_cmn_update_table() (git-fixes).
- drm/mediatek: Fix device use-after-free on unbind (git-fixes).
- ASoC: fsl_sai: fix bit order for DSD format (git-fixes).
- ASoC: Intel: avs: Unprepare a stream when XRUN occurs
  (git-fixes).
- ASoC: qdsp6: q6asm: do not sleep while atomic (git-fixes).
- ALSA: usb-audio: fix control pipe direction (git-fixes).
- commit acb4ea2</changelog>
  <changelog author="tiwai@suse.de" date="1761998401">- drm/ast: Clear preserved bits from register output value
  (git-fixes).
- drm/nouveau: Fix race in nouveau_sched_fini() (git-fixes).
- drm/sysfb: Do not dereference NULL pointer in plane reset
  (git-fixes).
- drm/msm/dpu: Require linear modifier for writeback framebuffers
  (git-fixes).
- drm/amdgpu: fix SPDX header on cyan_skillfish_reg_init.c
  (git-fixes).
- drm/radeon: Remove calls to drm_put_dev() (git-fixes).
- drm/radeon: Do not kfree() devres managed rdev (git-fixes).
- ASoC: fsl_sai: Fix sync error in consumer mode (git-fixes).
- drm/amd/display: increase max link count and fix link-&gt;enc
  NULL pointer access (stable-fixes).
- commit e65d412</changelog>
  <changelog author="tiwai@suse.de" date="1762084800">- regulator: bd718x7: Fix voltages scaled by resistor divider
  (git-fixes).
- regmap: slimbus: fix bus_context pointer in regmap init calls
  (git-fixes).
- commit 20abe4b</changelog>
  <changelog author="mhocko@suse.com" date="1762171200">- coresight: trbe: Return NULL pointer for allocation failures
  (CVE-2025-40060 bsc#1252848).
- commit 4543e34</changelog>
  <changelog author="joao.povoas@suse.com" date="1762171201">- Update
  patches.suse/ACPI-x86-s2idle-Catch-multiple-ACPI_TYPE_PACKAGE-obj.patch
  (git-fixes CVE-2023-53708 bsc#1252537).
- Update
  patches.suse/ALSA-usb-audio-Fix-NULL-pointer-deference-in-try_to_.patch
  (git-fixes CVE-2025-40085 bsc#1252873).
- Update
  patches.suse/ALSA-usb-audio-fix-race-condition-to-UAF-in-snd_usbm.patch
  (git-fixes CVE-2025-39997 bsc#1252056).
- Update
  patches.suse/ASoC-qcom-audioreach-fix-potential-null-pointer-dere.patch
  (git-fixes CVE-2025-40013 bsc#1252348).
- Update patches.suse/Bluetooth-MGMT-Fix-possible-UAFs.patch
  (git-fixes CVE-2025-39981 bsc#1252060).
- Update
  patches.suse/Bluetooth-hci_event-Fix-UAF-in-hci_acl_create_conn_s.patch
  (git-fixes CVE-2025-39982 bsc#1252083).
- Update
  patches.suse/HID-amd_sfh-Fix-for-shift-out-of-bounds.patch
  (bsc#1012628 CVE-2023-53703 bsc#1252553).
- Update
  patches.suse/Input-uinput-zero-initialize-uinput_ff_upload_compat.patch
  (git-fixes CVE-2025-40035 bsc#1252866).
- Update patches.suse/NFS-Fix-a-potential-data-corruption.patch
  (git-fixes CVE-2023-53711 bsc#1252536).
- Update
  patches.suse/NFSD-Define-a-proc_layoutcommit-for-the-FlexFiles-layout-type.patch
  (git-fixes CVE-2025-40087 bsc#1252909).
- Update
  patches.suse/PCI-endpoint-pci-epf-test-Add-NULL-check-for-DMA-cha.patch
  (git-fixes CVE-2025-40032 bsc#1252841).
- Update
  patches.suse/RDMA-rxe-Fix-race-in-do_task-when-draining.patch
  (git-fixes CVE-2025-40061 bsc#1252849).
- Update
  patches.suse/Squashfs-fix-uninit-value-in-squashfs_get_parent.patch
  (git-fixes CVE-2025-40049 bsc#1252822).
- Update
  patches.suse/USB-gadget-Fix-the-memory-leak-in-raw_gadget-dr.patch
  (bsc#1012628 CVE-2023-53693 bsc#1252489).
- Update
  patches.suse/afs-Fix-potential-null-pointer-dereference-in-afs_put_server.patch
  (git-fixes CVE-2025-40010 bsc#1252332).
- Update
  patches.suse/arm64-csum-Fix-OoB-access-in-IP-checksum-code-for-ne.patch
  (git-fixes CVE-2023-53726 bsc#1252565).
- Update
  patches.suse/arm64-sme-Use-STR-P-to-clear-FFR-context-field-.patch
  (bsc#1012628 CVE-2023-53713 bsc#1252559).
- Update
  patches.suse/blk-iocost-use-spin_lock_irqsave-in-adjust_inus.patch
  (bsc#1012628 CVE-2023-53730 bsc#1252495).
- Update
  patches.suse/bus-fsl-mc-Check-return-value-of-platform_get_resour.patch
  (git-fixes CVE-2025-40029 bsc#1252772).
- Update
  patches.suse/can-etas_es58x-populate-ndo_change_mtu-to-prevent-bu.patch
  (git-fixes CVE-2025-39988 bsc#1252074).
- Update
  patches.suse/can-hi311x-populate-ndo_change_mtu-to-prevent-buffer.patch
  (git-fixes CVE-2025-39987 bsc#1252079).
- Update
  patches.suse/can-mcba_usb-populate-ndo_change_mtu-to-prevent-buff.patch
  (git-fixes CVE-2025-39985 bsc#1252082).
- Update
  patches.suse/can-peak_usb-fix-shift-out-of-bounds-issue.patch
  (git-fixes CVE-2025-40020 bsc#1252679).
- Update
  patches.suse/can-sun4i_can-populate-ndo_change_mtu-to-prevent-buf.patch
  (git-fixes CVE-2025-39986 bsc#1252078).
- Update
  patches.suse/clk-imx-clk-imx8mp-improve-error-handling-in-im.patch
  (bsc#1012628 CVE-2023-53704 bsc#1252490).
- Update
  patches.suse/clocksource-drivers-cadence-ttc-Fix-memory-leak.patch
  (bsc#1012628 CVE-2023-53725 bsc#1252492).
- Update
  patches.suse/crypto-essiv-Check-ssize-for-decryption-and-in-place.patch
  (git-fixes CVE-2025-40019 bsc#1252678).
- Update
  patches.suse/crypto-hisilicon-qm-set-NULL-to-qm-debug.qm_diff_reg.patch
  (git-fixes CVE-2025-40062 bsc#1252850).
- Update
  patches.suse/drm-amdgpu-Fix-integer-overflow-in-amdgpu_cs_p.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-53707
  bsc#1252632).
- Update
  patches.suse/drm-gma500-Fix-null-dereference-in-hdmi-teardown.patch
  (git-fixes CVE-2025-40011 bsc#1252336).
- Update
  patches.suse/drm-sched-Fix-potential-double-free-in-drm_sched_job.patch
  (git-fixes CVE-2025-40096 bsc#1252902).
- Update
  patches.suse/fbcon-fix-integer-overflow-in-fbcon_do_set_font.patch
  (git-fixes CVE-2025-39967 bsc#1252033).
- Update
  patches.suse/fs-udf-fix-OOB-read-in-lengthAllocDescs-handling.patch
  (git-fixes CVE-2025-40044 bsc#1252785).
- Update
  patches.suse/hfsplus-fix-slab-out-of-bounds-read-in-hfsplus_strcasecmp.patch
  (git-fixes CVE-2025-40088 bsc#1252904).
- Update
  patches.suse/hfsplus-fix-slab-out-of-bounds-read-in-hfsplus_uni2asc_followup.patch
  (git-fixes CVE-2025-40082 bsc#1252775).
- Update
  patches.suse/iommu-vt-d-Disallow-dirty-tracking-if-incoherent-pag.patch
  (git-fixes CVE-2025-40058 bsc#1252854).
- Update
  patches.suse/md-raid1-fix-potential-OOB-in-raid1_remove_disk-8b04.patch
  (jsc#PED-7542 CVE-2023-53722 bsc#1252499).
- Update
  patches.suse/media-b2c2-Fix-use-after-free-causing-by-irq_check_w.patch
  (git-fixes CVE-2025-39996 bsc#1252065).
- Update
  patches.suse/media-i2c-tc358743-Fix-use-after-free-bugs-caused-by.patch
  (git-fixes CVE-2025-39995 bsc#1252064).
- Update
  patches.suse/media-rc-fix-races-with-imon_disconnect.patch
  (git-fixes CVE-2025-39993 bsc#1252070).
- Update
  patches.suse/media-tuner-xc5000-Fix-use-after-free-in-xc5000_rele.patch
  (git-fixes CVE-2025-39994 bsc#1252072).
- Update
  patches.suse/media-uvcvideo-Mark-invalid-entities-with-id-UVC_INV.patch
  (git-fixes CVE-2025-40016 bsc#1252346).
- Update
  patches.suse/misc-fastrpc-fix-possible-map-leak-in-fastrpc_put_ar.patch
  (git-fixes CVE-2025-40036 bsc#1252865).
- Update
  patches.suse/net-nfc-nci-Add-parameter-validation-for-packet-data.patch
  (git-fixes CVE-2025-40043 bsc#1252787).
- Update
  patches.suse/net-sched-cls_u32-Undo-tcf_bind_filter-if-u32_r.patch
  (bsc#1012628 CVE-2023-53733 bsc#1252685).
- Update
  patches.suse/net-sched-fq_pie-avoid-stalls-in-fq_pie_timer.patch
  (bsc#1220419 CVE-2023-53727 bsc#1252566).
- Update
  patches.suse/netlink-fix-potential-deadlock-in-netlink_set_e.patch
  (bsc#1012628 CVE-2023-53731 bsc#1252481).
- Update
  patches.suse/nvdimm-Fix-memleak-of-pmu-attr_groups-in-unregister_-85ae.patch
  (jsc#PED-5853 CVE-2023-53697 bsc#1252534).
- Update
  patches.suse/posix-timers-Ensure-timer-ID-search-loop-limit-.patch
  (bsc#1012628 CVE-2023-53728 bsc#1252668).
- Update
  patches.suse/ring-buffer-Do-not-swap-cpu_buffer-during-resi.patch
  (bsc#1012628 CVE-2023-53718 bsc#1252564).
- Update
  patches.suse/riscv-move-memblock_allow_resize-after-linear-m.patch
  (bsc#1012628 CVE-2023-53699 bsc#1252550).
- Update
  patches.suse/smb-client-fix-crypto-buffers-in-non-linear-memory.patch
  (bsc#1250491 boo#1239206 CVE-2025-40052 bsc#1252851).
- Update
  patches.suse/soc-qcom-qmi_encdec-Restrict-string-length-in-decode.patch
  (git-fixes CVE-2023-53729 bsc#1252496).
- Update
  patches.suse/tty-n_gsm-Don-t-block-input-queue-by-waiting-MSC.patch
  (git-fixes CVE-2025-40071 bsc#1252797).
- Update
  patches.suse/wifi-ath11k-fix-NULL-dereference-in-ath11k_qmi_m3_lo.patch
  (git-fixes CVE-2025-39991 bsc#1252075).
- Update
  patches.suse/wifi-ath12k-Fix-a-NULL-pointer-dereference-in-ath12k.patch
  (git-fixes CVE-2023-53721 bsc#1252561).
- Update
  patches.suse/xfrm-xfrm_alloc_spi-shouldn-t-use-0-as-SPI.patch
  (CVE-2025-39797 bsc#1249608 CVE-2025-39965 bsc#1251967).
- Update
  patches.suse/xsk-fix-refcount-underflow-in-error-path.patch
  (bsc#1012628 CVE-2023-53698 bsc#1252479).
- commit 9042362</changelog>
  <changelog author="joao.povoas@suse.com" date="1762171202">- Update
  patches.suse/fbdev-simplefb-Fix-use-after-free-in-simplefb_detach.patch
  (git-fixes CVE-2025-40037 bsc#1252819).
- Update
  patches.suse/ixgbe-fix-too-early-devlink_free-in-ixgbe_remove.patch
  (git-fixes CVE-2025-40091 bsc#1252915).
- Update
  patches.suse/ixgbevf-fix-mailbox-API-compatibility-by-negotiating.patch
  (bsc#1247222 CVE-2025-40104 bsc#1252921).
- commit 7ff6ed4</changelog>
  <changelog author="clopez@suse.de" date="1762171203">- KVM: x86: Replace static_call_cond() with static_call()
  (git-fixes).
- commit 6bb685c</changelog>
  <changelog author="clopez@suse.de" date="1762171204">- KVM: x86: Introduce kvm_x86_call() to simplify static calls
  of kvm_x86_ops (git-fixes).
- Refresh
  patches.suse/KVM-x86-Don-t-inject-PV-async-PF-if-SEND_ALWAYS-0-an.patch.
- Refresh
  patches.suse/KVM-x86-Exit-to-userspace-if-fastpath-triggers-one-o.patch.
- Refresh patches.suse/KVM-x86-Introduce-kvm_set_mp_state.patch.
- Refresh
  patches.suse/KVM-x86-Route-non-canonical-checks-in-emulator-throu.patch.
- Refresh
  patches.suse/KVM-x86-model-canonical-checks-more-precisely.patch.
- commit 3454959</changelog>
  <changelog author="wqu@suse.com" date="1762257600">- btrfs: fix the incorrect max_bytes value for
  find_lock_delalloc_range() (git-fixes).
- commit 91a9728</changelog>
  <changelog author="jgross@suse.com" date="1762257601">- vhost: vringh: Modify the return value check (CVE-2025-40051
  bsc#1252858).
- commit 80d9f20</changelog>
  <changelog author="clopez@suse.de" date="1762257602">- Delete
  patches.kabi/KVM-x86-pmu-Allow-programming-events-that-match-unsu.patch.
  This avoids a kbuild error in check-patchrv. This patch is not needed
  anyway since 4f5efb71e1f4.
- commit 624b1b2</changelog>
  <changelog author="msuchanek@suse.de" date="1762344000">- kernel-subpackage-spec: Do not doubly-sign modules (bsc#1251930).
- commit 0f034b6</changelog>
</package>
<package pkgid="adfb2af8607bfde48987879adfb40a32b53a88d7a88dd2be134a35534c12e065" name="kernel-default-devel" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.53.25.1"/>
  <changelog author="mkubecek@suse.cz" date="1764072000">- net: dst: annotate data-races around dst-&gt;output (CVE-2025-40074
  bsc#1252794).
- commit a54672b</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072001">- net: dst: add four helpers to annotate data-races around
  dst-&gt;dev (CVE-2025-40074 bsc#1252794).
- commit d644653</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072002">- ipv4: adopt dst_dev, skb_dst_dev and skb_dst_dev_net[_rcu]
  (CVE-2025-40074 bsc#1252794).
- commit 172fe2b</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072003">- ipv6: adopt dst_dev() helper (CVE-2025-40074 bsc#1252794).
- refresh patches.suse/net-ip6_tunnel-Prevent-perpetual-tunnel-growth.patch
- commit 7eda2f1</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072004">- ipv6: adopt skb_dst_dev() and skb_dst_dev_net[_rcu]() helpers
  (CVE-2025-40074 bsc#1252794).
- commit bef51be</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072005">- ipv6: ip6_mc_input() and ip6_mr_input() cleanups (CVE-2025-40074
  bsc#1252794).
- commit 74e34e6</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072006">- net: Add locking to protect skb-&gt;dev access in ip_output
  (CVE-2025-40074 bsc#1252794).
- commit ba856a3</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072007">- net: dst: introduce dst-&gt;dev_rcu (CVE-2025-40074 bsc#1252794).
- commit bc25dd4</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072008">- kabi: hide dst_entry::dev_rcu (CVE-2025-40074 bsc#1252794).
- commit 7047515</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072009">- ipv4: start using dst_dev_rcu() (CVE-2025-40074 bsc#1252794).
- commit d58640c</changelog>
  <changelog author="rbm@suse.com" date="1764072010">- selftests: net: lib: Do not overwrite error messages
  (bsc#1254235).
- selftests: net: lib: fix shift count out of range (bsc#1254235).
- selftests: net: lib: Move logging from forwarding/lib.sh here
  (bsc#1254235).
- selftests: net: add helper for checking if nettest is available
  (bsc#1254235).
- selftests: net: lib: kill PIDs before del netns (bsc#1254235).
- selftests: lib: tc_rule_stats_get(): Move default to argument
  definition (bsc#1254235).
- selftests: net: lib: remove 'ns' var in setup_ns (bsc#1254235).
- selftests: net: lib: do not set ns var as readonly
  (bsc#1254235).
- selftests: net: lib: remove ns from list after clean-up
  (bsc#1254235).
- selftests: net: lib: ignore possible errors (bsc#1254235).
- selftests: net: lib: set 'i' as local (bsc#1254235).
- selftests: net: lib: avoid error removing empty netns name
  (bsc#1254235).
- selftests: net: lib: support errexit with busywait
  (bsc#1254235).
- selftests/net: use tc rule to filter the na packet
  (bsc#1254235).
- selftests/net/lib: no need to record ns name if it already exist
  (bsc#1254235).
- selftests: net: Unify code of busywait() and slowwait()
  (bsc#1254235).
- selftests: forwarding: Add a test for testing lib.sh
  functionality (bsc#1254235).
- selftests: forwarding: Support for performance sensitive tests
  (bsc#1254235).
- selftests: forwarding: Convert log_test() to recognize RET
  values (bsc#1254235).
- selftests: forwarding: Have RET track kselftest framework
  constants (bsc#1254235).
- selftests: lib: Define more kselftest exit codes (bsc#1254235).
- selftests: forwarding: Change inappropriate log_test_skip()
  calls (bsc#1254235).
- selftests: forwarding.config.sample: Move overrides to lib.sh
  (bsc#1254235).
- selftests: net: libs: Change variable fallback syntax
  (bsc#1254235).
- selftests: forwarding: Parametrize mausezahn delay
  (bsc#1254235).
- selftests/net/forwarding: add slowwait functions (bsc#1254235).
- selftests: forwarding: Remove duplicated lib.sh content
  (bsc#1254235).
- selftests: forwarding: Redefine relative_path variable
  (bsc#1254235).
- selftests: net: List helper scripts in TEST_FILES Makefile
  variable (bsc#1254235).
- selftests/net/lib: update busywait timeout value (bsc#1254235).
- selftests: forwarding: Avoid failures to source net/lib.sh
  (bsc#1254235).
- selftests/net: add variable NS_LIST for lib.sh (bsc#1254235).
- selftests/net: add lib.sh (bsc#1254235).
- commit 3a99ca1</changelog>
  <changelog author="tzimmermann@suse.com" date="1764158400">- drm/xe: Don't allow evicting of BOs in same VM in array of VM binds (bsc#1252923 CVE-2025-40086)
- commit aa2fe0b</changelog>
  <changelog author="tzimmermann@suse.com" date="1764158401">- Fix "drm/xe: Don't allow evicting of BOs in same VM in array of VM binds" (bsc#1252923)
  Fix the following compiler warning:
  * no semicolon at end of struct or union in ../drivers/gpu/drm/xe/xe_vm_types.h
  In file included from ../drivers/gpu/drm/xe/xe_bb.c:16:0:
  ../drivers/gpu/drm/xe/xe_vm_types.h:393:1: warning: no semicolon at end of struct or union
- commit 38ee821</changelog>
  <changelog author="joao.povoas@suse.com" date="1764158402">- Update
  patches.suse/ASoC-Intel-bytcr_rt5640-Fix-invalid-quirk-input-mapp.patch
  (git-fixes CVE-2025-40154 bsc#1253431).
- Update
  patches.suse/ASoC-Intel-bytcr_rt5651-Fix-invalid-quirk-input-mapp.patch
  (git-fixes CVE-2025-40121 bsc#1253367).
- Update
  patches.suse/Bluetooth-ISO-Fix-possible-UAF-on-iso_conn_free.patch
  (git-fixes CVE-2025-40141 bsc#1253352).
- Update
  patches.suse/EDAC-i10nm-Skip-DIMM-enumeration-on-a-disabled-memor.patch
  (git-fixes CVE-2025-40157 bsc#1253423).
- Update
  patches.suse/PM-devfreq-mtk-cci-Fix-potential-error-pointer-deref.patch
  (git-fixes CVE-2025-40156 bsc#1253428).
- Update
  patches.suse/Squashfs-reject-negative-file-sizes-in-squashfs_read_inode.patch
  (git-fixes CVE-2025-40200 bsc#1253448).
- Update
  patches.suse/accel-qaic-Treat-remaining-0-as-error-in-find_and_ma.patch
  (git-fixes CVE-2025-40172 bsc#1253424).
- Update
  patches.suse/bpf-Fix-metadata_dst-leak-__bpf_redirect_neigh_v-4-6.patch
  (git-fixes CVE-2025-40183 bsc#1253441).
- Update
  patches.suse/btrfs-avoid-potential-out-of-bounds-in-btrfs_encode_.patch
  (git-fixes CVE-2025-40205 bsc#1253456).
- Update
  patches.suse/can-hi311x-fix-null-pointer-dereference-when-resumin.patch
  (stable-fixes CVE-2025-40107 bsc#1253018).
- Update
  patches.suse/cpufreq-intel_pstate-Fix-object-lifecycle-issue-in-update_qos_request.patch
  (stable-fixes git-fixes CVE-2025-40194 bsc#1253445).
- Update
  patches.suse/crypto-rng-Ensure-set_ent-is-always-present.patch
  (git-fixes CVE-2025-40109 bsc#1253176).
- Update
  patches.suse/drm-vmwgfx-Fix-Use-after-free-in-validation.patch
  (git-fixes CVE-2025-40111 bsc#1253362).
- Update
  patches.suse/drm-vmwgfx-Fix-a-null-ptr-access-in-the-cursor-snoop.patch
  (git-fixes CVE-2025-40110 bsc#1253275).
- Update
  patches.suse/ext4-avoid-potential-buffer-over-read-in-parse_apply.patch
  (git-fixes CVE-2025-40198 bsc#1253453).
- Update
  patches.suse/hwrng-ks-sa-fix-division-by-zero-in-ks_sa_rng_init.patch
  (git-fixes CVE-2025-40127 bsc#1253369).
- Update
  patches.suse/mailbox-zynqmp-ipi-Fix-out-of-bounds-access-in-mailb.patch
  (git-fixes CVE-2025-40180 bsc#1253440).
- Update
  patches.suse/media-v4l2-subdev-Fix-alloc-failure-check-in-v4l2_su.patch
  (git-fixes CVE-2025-40207 bsc#1253395).
- Update
  patches.suse/net-usb-Remove-disruptive-netif_wake_queue-in-rtl815.patch
  (git-fixes CVE-2025-40140 bsc#1253349).
- Update
  patches.suse/net-usb-asix-hold-PM-usage-ref-to-avoid-PM-MDIO-RTNL.patch
  (git-fixes CVE-2025-40120 bsc#1253360).
- Update
  patches.suse/nvmet-fc-move-lsop-put-work-to-nvmet_fc_ls_req_op.patch
  (bsc#1245193 bsc#1247500 CVE-2025-40171 bsc#1253412).
- Update
  patches.suse/pwm-berlin-Fix-wrong-register-in-suspend-resume.patch
  (git-fixes CVE-2025-40188 bsc#1253449).
- Update
  patches.suse/scsi-mpt3sas-Fix-crash-in-transport-port-remove-by-using-i.patch
  (git-fixes CVE-2025-40115 bsc#1253318).
- Update
  patches.suse/scsi-pm80xx-Fix-array-index-out-of-of-bounds-on-rmmod.patch
  (git-fixes CVE-2025-40118 bsc#1253363).
- Update
  patches.suse/sunrpc-fix-null-pointer-dereference-on-zero-length-checksum.patch
  (git-fixes CVE-2025-40129 bsc#1253472).
- Update
  patches.suse/tcp-Don-t-call-reqsk_fastopen_remove-in-tcp_conn_request.patch
  (git-fixes CVE-2025-40186 bsc#1253438).
- Update
  patches.suse/usb-host-max3421-hcd-Fix-error-pointer-dereference-i.patch
  (git-fixes CVE-2025-40116 bsc#1253324).
- Update
  patches.suse/usbnet-Fix-using-smp_processor_id-in-preemptible-cod.patch
  (git-fixes CVE-2025-40164 bsc#1253407).
- commit d8d3cd1</changelog>
  <changelog author="mkubecek@suse.cz" date="1764158403">- tcp_metrics: use dst_dev_net_rcu() (CVE-2025-40075 bsc#1252795).
- commit fcb52d9</changelog>
  <changelog author="mkubecek@suse.cz" date="1764158404">- smc: Fix use-after-free in __pnet_find_base_ndev()
  (CVE-2025-40064 bsc#1252845).
- commit 2971b90</changelog>
  <changelog author="mkubecek@suse.cz" date="1764158405">- smc: Use __sk_dst_get() and dst_dev_rcu() in in
  smc_clc_prfx_set() (CVE-2025-40139 bsc#1253409).
- commit a7ae1b3</changelog>
  <changelog author="mkubecek@suse.cz" date="1764158406">- smc: Use __sk_dst_get() and dst_dev_rcu() in
  smc_clc_prfx_match() (CVE-2025-40168 bsc#1253427).
- commit 0f10629</changelog>
  <changelog author="mkubecek@suse.cz" date="1764158407">- tls: Use __sk_dst_get() and dst_dev_rcu() in
  get_netdev_for_sock() (CVE-2025-40149 bsc#1253355).
- commit c8fb6ed</changelog>
  <changelog author="hare@suse.de" date="1764244800">- KVM: s390: kABI backport for 'last_sleep_cpu' (bsc#1252352).
- KVM: s390: improve interrupt cpu for wakeup (bsc#1235463).
- commit d323daf</changelog>
</package>
<package pkgid="f7431a1cf51ee2ae519c24955ac63f0107b6b20059aca7a13b6b46b7adab265b" name="kernel-default-devel" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.53.28.1"/>
  <changelog author="joao.povoas@suse.com" date="1768219200">- Update
  patches.suse/1260-drm-amdkfd-Add-missing-gfx11-MQD-manager-callbacks.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-54261
  bsc#1255879).
- Update
  patches.suse/ACPI-video-Fix-use-after-free-in-acpi_video_switch_b.patch
  (git-fixes CVE-2025-40211 bsc#1254126).
- Update
  patches.suse/ALSA-dice-fix-buffer-overflow-in-detect_stream_forma.patch
  (git-fixes CVE-2025-68346 bsc#1255603).
- Update
  patches.suse/ALSA-firewire-motu-add-bounds-check-in-put_user-loop.patch
  (git-fixes CVE-2025-68753 bsc#1256238).
- Update
  patches.suse/ALSA-firewire-motu-fix-buffer-overflow-in-hwdep-read.patch
  (git-fixes CVE-2025-68347 bsc#1255706).
- Update
  patches.suse/ALSA-hda-cs35l41-Fix-NULL-pointer-dereference-in-cs3-c34b04c.patch
  (git-fixes CVE-2025-68345 bsc#1255601).
- Update
  patches.suse/ALSA-pcm-Fix-potential-data-race-at-PCM-memory-.patch
  (bsc#1012628 CVE-2023-54072 bsc#1256291).
- Update
  patches.suse/ALSA-usb-audio-Fix-NULL-pointer-dereference-in-snd_u.patch
  (git-fixes CVE-2025-40275 bsc#1254829).
- Update
  patches.suse/ALSA-usb-audio-Fix-potential-memory-leaks-at-error-p.patch
  (jsc#PED-6045 jsc#PED-6036 jsc#PED-6104 jsc#PED-6114
  jsc#PED-6067 jsc#PED-6123 CVE-2023-54022 bsc#1255545).
- Update
  patches.suse/ALSA-usb-audio-Fix-potential-overflow-of-PCM-transfe.patch
  (stable-fixes CVE-2025-40269 bsc#1255035).
- Update
  patches.suse/ASoC-codecs-wcd-mbhc-v2-fix-resource-leaks-on-c.patch
  (bsc#1012628 CVE-2023-53842 bsc#1254690).
- Update
  patches.suse/Bluetooth-6lowpan-reset-link-local-header-on-ipv6-re.patch
  (git-fixes CVE-2025-40282 bsc#1254850).
- Update
  patches.suse/Bluetooth-ISO-fix-iso_conn-related-locking-and-.patch
  (bsc#1012628 CVE-2023-54164 bsc#1256071).
- Update
  patches.suse/Bluetooth-MGMT-cancel-mesh-send-timer-when-hdev-remo.patch
  (git-fixes CVE-2025-40284 bsc#1254860).
- Update patches.suse/Bluetooth-SCO-Fix-UAF-on-sco_conn_free.patch
  (stable-fixes CVE-2025-40309 bsc#1255065).
- Update
  patches.suse/Bluetooth-bcsp-receive-data-only-if-registered.patch
  (stable-fixes CVE-2025-40308 bsc#1255064).
- Update
  patches.suse/Bluetooth-btusb-reorder-cleanup-in-btusb_disconnect-.patch
  (git-fixes CVE-2025-40283 bsc#1254858).
- Update
  patches.suse/Bluetooth-hci_conn-return-ERR_PTR-instead-of-NU.patch
  (bsc#1012628 CVE-2023-54038 bsc#1255540).
- Update
  patches.suse/Bluetooth-hci_event-validate-skb-length-for-unknown-.patch
  (git-fixes CVE-2025-40301 bsc#1255193).
- Update
  patches.suse/Bluetooth-hci_sock-Prevent-race-in-socket-write-iter.patch
  (git-fixes CVE-2025-68305 bsc#1255169).
- Update
  patches.suse/Bluetooth-hci_sync-Avoid-use-after-free-in-dbg-.patch
  (bsc#1012628 CVE-2023-54210 bsc#1255955).
- Update
  patches.suse/Bluetooth-hci_sync-Avoid-use-after-free-in-dbg-for-h.patch
  (git-fixes CVE-2023-53828 bsc#1254623).
- Update
  patches.suse/Bluetooth-hci_sync-Fix-UAF-in-hci_disconnect_all_syn.patch
  (git-fixes CVE-2023-53762 bsc#1254606).
- Update
  patches.suse/Bluetooth-hci_sync-fix-race-in-hci_cmd_sync_dequeue_.patch
  (git-fixes CVE-2025-40318 bsc#1254798).
- Update
  patches.suse/FS-JFS-Check-for-read-only-mounted-filesystem-i.patch
  (bsc#1012628 CVE-2023-53766 bsc#1255005).
- Update
  patches.suse/HID-hidraw-fix-data-race-on-device-refcount.patch
  (bsc#1012628 CVE-2023-53759 bsc#1254663).
- Update
  patches.suse/HID-uclogic-Correct-devm-device-reference-for-hidinp.patch
  (git-fixes CVE-2023-54207 bsc#1255961).
- Update
  patches.suse/HID-wacom-Use-ktime_t-rather-than-int-when-deal.patch
  (bsc#1012628 CVE-2023-53797 bsc#1254733).
- Update
  patches.suse/Input-cros_ec_keyb-fix-an-invalid-memory-access.patch
  (stable-fixes CVE-2025-40263 bsc#1255077).
- Update
  patches.suse/Input-imx_sc_key-fix-memory-corruption-on-unload.patch
  (git-fixes CVE-2025-40262 bsc#1254840).
- Update
  patches.suse/Input-pegasus-notetaker-fix-potential-out-of-bounds-.patch
  (git-fixes CVE-2025-68217 bsc#1255221).
- Update
  patches.suse/KVM-SVM-Get-source-vCPUs-from-source-VM-for-SEV-ES-i.patch
  (git-fixes CVE-2023-54296 bsc#1255793).
- Update
  patches.suse/KVM-s390-pv-fix-index-value-of-replaced-ASCE.patch
  (bsc#1012628 CVE-2023-54092 bsc#1256370).
- Update patches.suse/MIPS-KVM-Fix-NULL-pointer-dereference.patch
  (bsc#1012628 CVE-2023-54241 bsc#1255838).
- Update patches.suse/NFSD-Fix-crash-in-nfsd4_read_release.patch
  (git-fixes CVE-2025-40324 bsc#1254791).
- Update
  patches.suse/NFSD-free-copynotify-stateid-in-nfs4_free_ol_stateid.patch
  (git-fixes CVE-2025-40273 bsc#1254828).
- Update patches.suse/PCI-DOE-Fix-destroy_work_on_stack-race.patch
  (git-fixes CVE-2023-54235 bsc#1255921).
- Update
  patches.suse/PCI-Free-released-resource-after-coalescing.patch
  (git-fixes CVE-2023-53743 bsc#1254782).
- Update
  patches.suse/PCI-IOV-Add-PCI-rescan-remove-locking-when-enabling-.patch
  (git-fixes CVE-2025-40219 bsc#1254518).
- Update
  patches.suse/PCI-cadence-Check-for-the-existence-of-cdns_pcie-ops.patch
  (stable-fixes CVE-2025-68176 bsc#1255329).
- Update
  patches.suse/RDMA-bnxt_re-Prevent-handling-any-completions-a.patch
  (bsc#1012628 CVE-2023-54048 bsc#1256395).
- Update
  patches.suse/RDMA-efa-Fix-wrong-resources-deallocation-order.patch
  (git-fixes CVE-2023-54201 bsc#1255964).
- Update
  patches.suse/RDMA-irdma-Fix-data-race-on-CQP-completion-stat.patch
  (bsc#1012628 CVE-2023-54302 bsc#1255792).
- Update
  patches.suse/RDMA-irdma-Fix-data-race-on-CQP-request-done.patch
  (bsc#1012628 CVE-2023-54292 bsc#1255800).
- Update
  patches.suse/Revert-IB-isert-Fix-incorrect-release-of-isert-conne.patch
  (git-fixes CVE-2023-54219 bsc#1256231).
- Update
  patches.suse/accel-habanalabs-support-mapping-cb-with-vmalloc-bac.patch
  (stable-fixes CVE-2025-40311 bsc#1255068).
- Update
  patches.suse/accel-qaic-Clean-up-integer-overflow-checking-.patch
  (bsc#1012628 CVE-2023-53778 bsc#1254761).
- Update
  patches.suse/af_unix-Fix-data-race-around-unix_tot_inflight.patch
  (git-fixes CVE-2023-54006 bsc#1255591).
- Update patches.suse/amba-bus-fix-refcount-leak.patch (git-fixes
  CVE-2023-54230 bsc#1255925).
- Update
  patches.suse/amd-amdkfd-resolve-a-race-in-amdgpu_amdkfd_device_fi.patch
  (stable-fixes CVE-2025-40310 bsc#1255041).
- Update
  patches.suse/amdgpu-validate-offset_in_bo-of-drm_amdgpu_gem_.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-53819
  bsc#1254712).
- Update patches.suse/arm64-mm-fix-VA-range-sanity-check.patch
  (bsc#1012628 CVE-2023-53989 bsc#1256302).
- Update
  patches.suse/arm64-set-__exception_irq_entry-with-__irq_entr.patch
  (bsc#1012628 CVE-2023-54322 bsc#1255763).
- Update
  patches.suse/atm-fore200e-Fix-possible-data-race-in-fore200e_open.patch
  (git-fixes CVE-2025-68339 bsc#1255505).
- Update
  patches.suse/audit-fix-possible-soft-lockup-in-__audit_inode_chil.patch
  (git-fixes CVE-2023-54045 bsc#1256285).
- Update
  patches.suse/autofs-fix-memory-leak-of-waitqueues-in-autofs_catat.patch
  (git-fixes CVE-2023-54134 bsc#1256106).
- Update
  patches.suse/backlight-led-bl-Add-devlink-to-supplier-LEDs.patch
  (git-fixes CVE-2025-68758 bsc#1255944).
- Update
  patches.suse/bcache-fixup-btree_cache_wait-list-damage.patch
  (bsc#1012628 CVE-2023-54293 bsc#1255801).
- Update patches.suse/binder-fix-memory-leak-in-binder_init.patch
  (bsc#1012628 CVE-2023-54005 bsc#1255629).
- Update
  patches.suse/blk-cgroup-Fix-NULL-deref-caused-by-blkg_policy_data-being-installed-before-init.patch
  (bsc#1216062 CVE-2023-54271 bsc#1255902).
- Update
  patches.suse/blk-cgroup-hold-queue_lock-when-removing-blkg-.patch
  (bsc#1012628 CVE-2023-54088 bsc#1256263).
- Update
  patches.suse/blk-mq-fix-tags-leak-when-shrink-nr_hw_queues.patch
  (bsc#1216436 CVE-2023-54227 bsc#1255952).
- Update
  patches.suse/block-fix-blktrace-debugfs-entries-leakage.patch
  (bsc#1012628 CVE-2023-54209 bsc#1255963).
- Update
  patches.suse/block-rq_qos-protect-rq_qos-apis-with-a-new-loc.patch
  (bsc#1012628 CVE-2023-53823 bsc#1254691).
- Update
  patches.suse/bpf-Address-KCSAN-report-on-bpf_lru_list.patch
  (bsc#1012628 CVE-2023-54283 bsc#1255809).
- Update
  patches.suse/bpf-Disable-preemption-in-bpf_event_output.patch
  (bsc#1012628 CVE-2023-54173 bsc#1255996).
- Update
  patches.suse/bpf-Disable-preemption-in-bpf_perf_event_outpu.patch
  (bsc#1012628 CVE-2023-54303 bsc#1255785).
- Update
  patches.suse/bpf-Fix-issue-in-verifying-allow_ptr_leaks.patch
  (jsc#PED-6811 CVE-2023-54181 bsc#1255988).
- Update
  patches.suse/bpf-Silence-a-warning-in-btf_type_id_size.patch
  (bsc#1012628 CVE-2023-54247 bsc#1255892).
- Update
  patches.suse/bpf-bpf_sk_storage-Fix-invalid-wait-context-lockdep-.patch
  (jsc#PED-6811 CVE-2023-53857 bsc#1254648).
- Update
  patches.suse/bpf-drop-unnecessary-user-triggerable-WARN_ONCE.patch
  (bsc#1012628 CVE-2023-54145 bsc#1256090).
- Update
  patches.suse/bpf-sockmap-Fix-skb-refcnt-race-after-locking-change.patch
  (jsc#PED-6811 CVE-2023-53836 bsc#1254693).
- Update
  patches.suse/btrfs-fix-incorrect-splitting-in-btrfs_drop_ex.patch
  (bsc#1012628 CVE-2023-54121 bsc#1256267).
- Update
  patches.suse/btrfs-fix-lockdep-splat-and-potential-deadlock-after.patch
  (git-fixes CVE-2023-54224 bsc#1255951).
- Update
  patches.suse/btrfs-fix-race-between-balance-and-cancel-pause.patch
  (bsc#1012628 CVE-2023-54023 bsc#1256301).
- Update
  patches.suse/btrfs-fix-race-when-deleting-free-space-root-fr.patch
  (bsc#1012628 CVE-2023-54067 bsc#1256369).
- Update
  patches.suse/btrfs-fix-race-when-deleting-quota-root-from-th.patch
  (bsc#1012628 CVE-2023-54032 bsc#1255617).
- Update
  patches.suse/btrfs-fix-warning-when-putting-transaction-with.patch
  (bsc#1012628 CVE-2023-53865 bsc#1254762).
- Update
  patches.suse/btrfs-release-path-before-inode-lookup-during-the-in.patch
  (git-fixes CVE-2023-54281 bsc#1255820).
- Update
  patches.suse/btrfs-remove-BUG_ON-s-in-add_new_free_space.patch
  (bsc#1012628 CVE-2023-54185 bsc#1255984).
- Update
  patches.suse/btrfs-set-page-extent-mapped-after-read_folio-in-rel.patch
  (git-fixes CVE-2023-54253 bsc#1255891).
- Update
  patches.suse/btrfs-zoned-fix-memory-leak-after-finding-block.patch
  (bsc#1012628 CVE-2023-54297 bsc#1255795).
- Update
  patches.suse/btrfs-zoned-skip-splitting-and-logical-rewriting-on-.patch
  (bsc#1223731 CVE-2024-26944 CVE-2023-54080 bsc#1256367).
- Update
  patches.suse/can-gs_usb-gs_usb_xmit_callback-fix-handling-of-fail.patch
  (git-fixes CVE-2025-68307 bsc#1255146).
- Update
  patches.suse/can-kvaser_usb-leaf-Fix-potential-infinite-loop-in-c.patch
  (git-fixes CVE-2025-68308 bsc#1255149).
- Update
  patches.suse/cifs-fix-potential-oops-in-cifs_oplock_break.patch
  (bsc#1012628 CVE-2023-54258 bsc#1255886).
- Update
  patches.suse/cifs-fix-session-state-check-in-reconnect-to-a.patch
  (bsc#1012628 CVE-2023-53794 bsc#1255163).
- Update
  patches.suse/clk-clocking-wizard-Fix-Oops-in-clk_wzrd_regist.patch
  (bsc#1012628 CVE-2023-53807 bsc#1254724).
- Update
  patches.suse/clk-imx93-fix-memory-leak-and-missing-unwind-go.patch
  (bsc#1012628 CVE-2023-54221 bsc#1255842).
- Update
  patches.suse/comedi-c6xdigio-Fix-invalid-PNP-driver-unregistratio.patch
  (git-fixes CVE-2025-68332 bsc#1255483).
- Update
  patches.suse/comedi-check-device-s-attached-status-in-compat-ioct.patch
  (git-fixes CVE-2025-68257 bsc#1255167).
- Update
  patches.suse/comedi-multiq3-sanitize-config-options-in-multiq3_at.patch
  (git-fixes CVE-2025-68258 bsc#1255182).
- Update
  patches.suse/comedi-pcl818-fix-null-ptr-deref-in-pcl818_ai_cancel.patch
  (git-fixes CVE-2025-68335 bsc#1255480).
- Update
  patches.suse/crypto-api-Use-work-queue-in-crypto_destroy_instance.patch
  (git-fixes CVE-2023-53799 bsc#1254732).
- Update
  patches.suse/crypto-aspeed-fix-double-free-caused-by-devm.patch
  (git-fixes CVE-2025-68172 bsc#1255253).
- Update
  patches.suse/crypto-asymmetric_keys-prevent-overflow-in-asymmetri.patch
  (git-fixes CVE-2025-68724 bsc#1255550).
- Update
  patches.suse/dccp-Fix-out-of-bounds-access-in-DCCP-error-handler.patch
  (bsc#1220419 CVE-2023-53782 bsc#1254758).
- Update
  patches.suse/dccp-fix-data-race-around-dp-dccps_mss_cache.patch
  (bsc#1012628 CVE-2023-53839 bsc#1254655).
- Update
  patches.suse/devlink-report-devlink_port_type_warn-source-de.patch
  (bsc#1012628 CVE-2023-53841 bsc#1255009).
- Update
  patches.suse/dm-don-t-attempt-to-queue-IO-under-RCU-protection-a9ce.patch
  (jsc#PED-7514 CVE-2023-53860 bsc#1254626).
- Update
  patches.suse/dm-fix-a-race-condition-in-retrieve_deps-f600.patch
  (jsc#PED-7514 CVE-2023-54324 bsc#1255759).
- Update
  patches.suse/driver-soc-xilinx-use-_safe-loop-iterator-to-av.patch
  (bsc#1012628 CVE-2023-54101 bsc#1256153).
- Update
  patches.suse/drm-amd-display-Check-NULL-before-accessing.patch
  (stable-fixes CVE-2025-68286 bsc#1255351).
- Update
  patches.suse/drm-amd-display-Fix-NULL-deref-in-debugfs-odm_combin.patch
  (git-fixes CVE-2025-68180 bsc#1255252).
- Update
  patches.suse/drm-amdgpu-Fix-NULL-pointer-dereference-in-VRAM-logi.patch
  (stable-fixes CVE-2025-40288 bsc#1255057).
- Update
  patches.suse/drm-bridge-dw_hdmi-fix-connector-access-for-scd.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-53784
  bsc#1254765).
- Update
  patches.suse/drm-client-Fix-memory-leak-in-drm_client_target.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-54091
  bsc#1256274).
- Update
  patches.suse/drm-i915-Avoid-lock-inversion-when-pinning-to-GGTT-o.patch
  (git-fixes CVE-2025-68244 bsc#1255190).
- Update
  patches.suse/drm-mediatek-Fix-device-use-after-free-on-unbind.patch
  (git-fixes CVE-2025-40316 bsc#1254797).
- Update
  patches.suse/drm-msm-dp-Drop-aux-devices-together-with-DP-co.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-53851
  bsc#1254695).
- Update
  patches.suse/drm-mxsfb-Disable-overlay-plane-in-mxsfb_plane_overl.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-53864
  bsc#1254754).
- Update
  patches.suse/drm-nouveau-kms-nv50-init-hpd_irq_lock-for-PIOR.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-54263
  bsc#1255883).
- Update
  patches.suse/drm-sched-Fix-deadlock-in-drm_sched_entity_kill_jobs.patch
  (git-fixes CVE-2025-40329 bsc#1254621).
- Update patches.suse/drm-tegra-Add-call-to-put_pid.patch
  (git-fixes CVE-2025-68233 bsc#1255206).
- Update
  patches.suse/drm-ttm-Don-t-leak-a-resource-on-eviction-error.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-54254
  bsc#1255890).
- Update
  patches.suse/drm-ttm-Don-t-leak-a-resource-on-swapout-move-e.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-53844
  bsc#1254649).
- Update
  patches.suse/drm-vgem-fence-Fix-potential-deadlock-on-release.patch
  (git-fixes CVE-2025-68757 bsc#1255943).
- Update
  patches.suse/drm-vmwgfx-Validate-command-header-size-against-SVGA.patch
  (git-fixes CVE-2025-40277 bsc#1254894).
- Update
  patches.suse/erofs-kill-hooked-chains-to-avoid-loops-on-dedu.patch
  (bsc#1012628 CVE-2023-53777 bsc#1254749).
- Update
  patches.suse/exfat-use-kvmalloc_array-kvfree-instead-of-kma.patch
  (bsc#1012628 CVE-2023-54194 bsc#1255974).
- Update
  patches.suse/ext4-correct-grp-validation-in-ext4_mb_good_group.patch
  (bsc#1234163 CVE-2023-53861 bsc#1254678).
- Update
  patches.suse/ext4-fix-BUG-in-ext4_mb_new_inode_pa-due-to-overflow.patch
  (bsc#1219165 CVE-2023-54069 bsc#1256371).
- Update
  patches.suse/ext4-fix-rbtree-traversal-bug-in-ext4_mb_use_pr.patch
  (bsc#1012628 CVE-2023-53813 bsc#1254717).
- Update
  patches.suse/ext4-turn-quotas-off-if-mount-failed-after-enab.patch
  (bsc#1012628 CVE-2023-54153 bsc#1256081).
- Update
  patches.suse/f2fs-fix-to-do-sanity-check-on-direct-node-in-.patch
  (bsc#1012628 CVE-2023-53846 bsc#1254983).
- Update
  patches.suse/fbcon-Set-fb_display-i-mode-to-NULL-when-the-mode-is.patch
  (stable-fixes CVE-2025-40323 bsc#1255094).
- Update
  patches.suse/fbdev-Add-bounds-checking-in-bit_putcs-to-fix-vmallo.patch
  (stable-fixes CVE-2025-40304 bsc#1255034).
- Update
  patches.suse/fbdev-bitblit-bound-check-glyph-index-in-bit_putcs.patch
  (stable-fixes CVE-2025-40322 bsc#1255092).
- Update
  patches.suse/firmware-meson_sm-fix-to-avoid-potential-NULL-pointe.patch
  (git-fixes CVE-2023-54304 bsc#1255786).
- Update
  patches.suse/firmware-stratix10-svc-fix-bug-in-saving-controller-.patch
  (git-fixes CVE-2025-68328 bsc#1255489).
- Update
  patches.suse/fs-Protect-reconfiguration-of-sb-read-write-fr.patch
  (bsc#1012628 CVE-2023-54099 bsc#1256197).
- Update
  patches.suse/fs-jfs-prevent-double-free-in-dbUnmount-after-failed-jfs_remount.patch
  (git-fixes CVE-2023-54127 bsc#1256119).
- Update
  patches.suse/fs-ntfs3-Return-error-for-inconsistent-extende.patch
  (bsc#1012628 CVE-2023-54125 bsc#1256117).
- Update
  patches.suse/fs-sysv-Null-check-to-prevent-null-ptr-deref-b.patch
  (bsc#1012628 CVE-2023-54264 bsc#1255872).
- Update
  patches.suse/gpu-host1x-Fix-race-in-syncpt-alloc-free.patch
  (git-fixes CVE-2025-68732 bsc#1255688).
- Update
  patches.suse/gtp-Fix-use-after-free-in-__gtp_encap_destroy.patch
  (bsc#1012628 CVE-2023-54142 bsc#1256095).
- Update
  patches.suse/hfs-validate-record-offset-in-hfsplus_bmap_alloc.patch
  (git-fixes CVE-2025-40349 bsc#1255280).
- Update
  patches.suse/hfsplus-fix-KMSAN-uninit-value-issue-in-__hfsplus_ext_cache_extent.patch
  (git-fixes CVE-2025-40244 bsc#1255033).
- Update
  patches.suse/hfsplus-fix-KMSAN-uninit-value-issue-in-hfsplus_delete_cat.patch
  (git-fixes CVE-2025-40351 bsc#1255281).
- Update
  patches.suse/hwrng-virtio-Fix-race-on-data_avail-and-actual-.patch
  (bsc#1012628 CVE-2023-53998 bsc#1255578).
- Update
  patches.suse/iavf-use-internal-state-to-free-traffic-IRQs.patch
  (bsc#1012628 CVE-2023-53850 bsc#1254677).
- Update
  patches.suse/ice-prevent-NULL-pointer-deref-during-reload.patch
  (bsc#1012628 CVE-2023-54037 bsc#1255557).
- Update
  patches.suse/igb-clean-up-in-all-error-paths-when-enabling-SR-IOV.patch
  (jsc#PED-4866 CVE-2023-54070 bsc#1256364).
- Update
  patches.suse/igc-Fix-Kernel-Panic-during-ndo_tx_timeout-call.patch
  (bsc#1012628 CVE-2023-54166 bsc#1256074).
- Update
  patches.suse/iio-accel-bmc150-Fix-irq-assumption-regression.patch
  (stable-fixes CVE-2025-68330 bsc#1255493).
- Update
  patches.suse/iio-adc-ina2xx-avoid-NULL-pointer-dereference-.patch
  (bsc#1012628 CVE-2023-53834 bsc#1254660).
- Update
  patches.suse/iio-core-Prevent-invalid-memory-access-when-th.patch
  (bsc#1012628 CVE-2023-54027 bsc#1255579).
- Update
  patches.suse/ima-Handle-error-code-returned-by-ima_filter_rule_ma.patch
  (git-fixes CVE-2025-68740 bsc#1255812).
- Update
  patches.suse/ima-don-t-clear-IMA_DIGSIG-flag-when-setting-or-remo.patch
  (stable-fixes CVE-2025-68183 bsc#1255251).
- Update
  patches.suse/io_uring-net-don-t-overflow-multishot-recv.patch
  (bsc#1215211 CVE-2023-54030 bsc#1255691).
- Update
  patches.suse/iomap-Fix-possible-overflow-condition-in-iomap_write_delalloc_scan.patch
  (jsc#PED-5453 CVE-2023-54285 bsc#1255807).
- Update
  patches.suse/iommufd-IOMMUFD_DESTROY-should-not-increase-the.patch
  (bsc#1012628 CVE-2023-53795 bsc#1254737).
- Update
  patches.suse/iommufd-Set-end-correctly-when-doing-batch-carr.patch
  (bsc#1012628 CVE-2023-54060 bsc#1256379).
- Update
  patches.suse/ionic-remove-WARN_ON-to-prevent-panic_on_warn.patch
  (bsc#1012628 CVE-2023-53994 bsc#1255570).
- Update
  patches.suse/ip6_vti-fix-slab-use-after-free-in-decode_sess.patch
  (bsc#1012628 CVE-2023-53821 bsc#1254669).
- Update
  patches.suse/ipmi-ssif-Fix-a-memory-leak-when-scanning-for-an-ada.patch
  (git-fixes CVE-2023-54064 bsc#1256375).
- Update
  patches.suse/irqchip-mchp-eic-Fix-error-code-in-mchp_eic_domain_a.patch
  (git-fixes CVE-2025-68766 bsc#1255932).
- Update
  patches.suse/isdn-mISDN-hfcsusb-fix-memory-leak-in-hfcsusb_probe.patch
  (git-fixes CVE-2025-68734 bsc#1255538).
- Update
  patches.suse/jfs-Verify-inode-mode-when-loading-from-disk.patch
  (git-fixes CVE-2025-40312 bsc#1255046).
- Update
  patches.suse/jfs-fix-uninitialized-waitqueue-in-transaction-manager.patch
  (git-fixes CVE-2025-68168 bsc#1255100).
- Update
  patches.suse/kcm-Fix-error-handling-for-SOCK_DGRAM-in-kcm_sendmsg.patch
  (bsc#1220419 CVE-2023-53825 bsc#1254707).
- Update
  patches.suse/kcm-Fix-memory-leak-in-error-path-of-kcm_sendmsg.patch
  (bsc#1220419 CVE-2023-54112 bsc#1256354).
- Update
  patches.suse/keys-Fix-linking-a-duplicate-key-to-a-keyring-s.patch
  (bsc#1012628 CVE-2023-54170 bsc#1256045).
- Update
  patches.suse/maple_tree-fix-potential-out-of-bounds-access-i.patch
  (bsc#1012628 CVE-2023-54135 bsc#1256107).
- Update
  patches.suse/md-fix-warning-for-holder-mismatch-from-export_rdev.patch
  (git-fixes CVE-2023-53791 bsc#1254742).
- Update
  patches.suse/md-raid5-cache-fix-a-deadlock-in-r5l_exit_log-a705.patch
  (jsc#PED-7542 CVE-2023-53848 bsc#1254753).
- Update
  patches.suse/media-af9005-Fix-null-ptr-deref-in-af9005_i2c_xfer.patch
  (git-fixes CVE-2023-54314 bsc#1255776).
- Update
  patches.suse/media-anysee-fix-null-ptr-deref-in-anysee_master_xfe.patch
  (git-fixes CVE-2023-54093 bsc#1256273).
- Update
  patches.suse/media-dvb-usb-m920x-Fix-a-potential-memory-leak-in-m.patch
  (git-fixes CVE-2023-54266 bsc#1255875).
- Update
  patches.suse/media-dvb-usb-v2-gl861-Fix-null-ptr-deref-in-gl861_i.patch
  (git-fixes CVE-2023-54066 bsc#1256373).
- Update
  patches.suse/media-imon-make-send_packet-more-robust.patch
  (stable-fixes CVE-2025-68194 bsc#1255325).
- Update
  patches.suse/media-mediatek-vcodec-fix-resource-leaks-in-vdec_msg.patch
  (git-fixes CVE-2023-54143 bsc#1256096).
- Update
  patches.suse/media-tuners-qt1010-replace-BUG_ON-with-a-regular-er.patch
  (git-fixes CVE-2023-54282 bsc#1255810).
- Update
  patches.suse/media-v4l2-core-Fix-a-potential-resource-leak-in-v4l.patch
  (git-fixes CVE-2023-54183 bsc#1255990).
- Update
  patches.suse/misc-fastrpc-Fix-dma_buf-object-leak-in-fastrpc_map_.patch
  (git-fixes CVE-2025-68252 bsc#1255197).
- Update
  patches.suse/misc-pci_endpoint_test-Free-IRQs-before-removin.patch
  (bsc#1012628 CVE-2023-54326 bsc#1255758).
- Update
  patches.suse/mm-secretmem-fix-use-after-free-race-in-fault-handle.patch
  (git-fixes CVE-2025-40272 bsc#1254832).
- Update
  patches.suse/mmc-sunplus-fix-return-value-check-of-mmc_add_.patch
  (bsc#1012628 CVE-2023-54204 bsc#1255967).
- Update
  patches.suse/most-usb-Fix-use-after-free-in-hdm_disconnect.patch
  (git-fixes CVE-2025-40223 bsc#1254957).
- Update
  patches.suse/most-usb-fix-double-free-on-late-probe-failure.patch
  (git-fixes CVE-2025-68290 bsc#1255154).
- Update
  patches.suse/most-usb-hdm_probe-Fix-calling-put_device-before-dev.patch
  (git-fixes CVE-2025-68249 bsc#1255233).
- Update
  patches.suse/mt76-mt7615-Fix-memory-leak-in-mt7615_mcu_wtbl_sta_a.patch
  (git-fixes CVE-2025-68765 bsc#1255931).
- Update
  patches.suse/mt76-mt7921-don-t-assume-adequate-headroom-for-SDIO-.patch
  (git-fixes CVE-2023-53785 bsc#1254918).
- Update
  patches.suse/mtd-rawnand-cadence-fix-DMA-device-NULL-pointer-dere.patch
  (git-fixes CVE-2025-68238 bsc#1255202).
- Update
  patches.suse/mtd-rawnand-fsl_upm-Fix-an-off-by-one-test-in-.patch
  (bsc#1012628 CVE-2023-54104 bsc#1256145).
- Update
  patches.suse/mtdchar-fix-integer-overflow-in-read-write-ioctls.patch
  (git-fixes CVE-2025-68237 bsc#1255203).
- Update
  patches.suse/net-core-remove-unnecessary-frame_sz-check-in-.patch
  (bsc#1012628 CVE-2023-54155 bsc#1256083).
- Update
  patches.suse/net-deal-with-integer-overflows-in-kmalloc_reserve.patch
  (bsc#1215146 CVE-2023-42752 CVE-2023-53752 bsc#1254613).
- Update
  patches.suse/net-do-not-allow-gso_size-to-be-set-to-GSO_BY_.patch
  (bsc#1012628 CVE-2023-54051 bsc#1256394).
- Update
  patches.suse/net-dsa-avoid-suspicious-RCU-usage-for-synced-V.patch
  (bsc#1012628 CVE-2023-54149 bsc#1256085).
- Update
  patches.suse/net-dsa-ocelot-call-dsa_tag_8021q_unregister-u.patch
  (bsc#1012628 CVE-2023-53855 bsc#1254688).
- Update
  patches.suse/net-ethernet-mtk_eth_soc-fix-possible-NULL-pointer-d.patch
  (git-fixes CVE-2023-54240 bsc#1255918).
- Update
  patches.suse/net-hns3-fix-deadlock-issue-when-externel_lb-a.patch
  (bsc#1012628 CVE-2023-54000 bsc#1255564).
- Update
  patches.suse/net-ipa-only-reset-hashed-tables-when-supported.patch
  (bsc#1012628 CVE-2023-54225 bsc#1256234).
- Update
  patches.suse/net-ipv4-fix-one-memleak-in-__inet_del_ifa.patch
  (bsc#1220419 CVE-2023-53995 bsc#1255616).
- Update
  patches.suse/net-mlx5-fix-potential-memory-leak-in-mlx5e_in.patch
  (bsc#1012628 CVE-2023-54106 bsc#1256358).
- Update
  patches.suse/net-mlx5e-Move-representor-neigh-cleanup-to-pr.patch
  (bsc#1012628 CVE-2023-54148 bsc#1256084).
- Update
  patches.suse/net-mlx5e-TC-Fix-internal-port-memory-leak.patch
  (bsc#1012628 CVE-2023-53999 bsc#1255621).
- Update
  patches.suse/net-mlx5e-fix-memory-leak-in-mlx5e_ptp_open.patch
  (bsc#1012628 CVE-2023-54169 bsc#1256050).
- Update
  patches.suse/net-mlx5e-xsk-Fix-invalid-buffer-access-for-le.patch
  (bsc#1012628 CVE-2023-54223 bsc#1256233).
- Update
  patches.suse/net-openvswitch-reject-negative-ifindex.patch
  (bsc#1012628 CVE-2023-53843 bsc#1254705).
- Update
  patches.suse/net-prevent-skb-corruption-on-frag-list-segment.patch
  (bsc#1012628 CVE-2023-54094 bsc#1256292).
- Update
  patches.suse/net-read-sk-sk_family-once-in-sk_mc_loop.patch
  (bsc#1220419 CVE-2023-53831 bsc#1254701).
- Update
  patches.suse/net-sched-taprio-Limit-TCA_TAPRIO_ATTR_SCHED_C.patch
  (bsc#1012628 CVE-2023-54251 bsc#1255888).
- Update
  patches.suse/net-smc-use-smc_lgr_list.lock-to-protect-smc_lgr_lis.patch
  (git-fixes CVE-2023-54318 bsc#1255772).
- Update
  patches.suse/net-usb-qmi_wwan-initialize-MAC-header-offset-in-qmi.patch
  (git-fixes CVE-2025-68192 bsc#1255246).
- Update
  patches.suse/netfilter-nf_tables-fix-underflow-in-chain-refe.patch
  (bsc#1012628 CVE-2023-54035 bsc#1255563).
- Update
  patches.suse/netlink-do-not-hard-code-device-address-lenth-i.patch
  (bsc#1012628 CVE-2023-53863 bsc#1254657).
- Update
  patches.suse/nfp-clean-mc-addresses-in-application-firmware-.patch
  (bsc#1012628 CVE-2023-54133 bsc#1256104).
- Update
  patches.suse/nfs4_setup_readdir-insufficient-locking-for-d_parent-d_inode-dereferencing.patch
  (git-fixes CVE-2025-68185 bsc#1255135).
- Update
  patches.suse/nfsd-move-init-of-percpu-reply_cache_stats-coun.patch
  (bsc#1012628 CVE-2023-54276 bsc#1255907).
- Update
  patches.suse/nilfs2-fix-WARNING-in-mark_buffer_dirty-due-to.patch
  (bsc#1012628 CVE-2023-54140 bsc#1256093).
- Update
  patches.suse/nouveau-firmware-Add-missing-kfree-of-nvkm_falcon_fw.patch
  (git-fixes CVE-2025-68235 bsc#1255209).
- Update
  patches.suse/nvme-core-fix-memory-leak-in-dhchap_ctrl_secret.patch
  (bsc#1012628 CVE-2023-53792 bsc#1254743).
- Update
  patches.suse/nvme-core-fix-memory-leak-in-dhchap_secret_stor.patch
  (bsc#1012628 CVE-2023-53852 bsc#1254653).
- Update
  patches.suse/nvme-fc-use-lock-accessing-port_state-and-rport-stat.patch
  (bsc#1245193 bsc#1247500 CVE-2025-40342 bsc#1255274).
- Update
  patches.suse/nvme-multipath-fix-lockdep-WARN-due-to-partition-sca.patch
  (git-fixes bsc#1233640 CVE-2024-53093 CVE-2025-68218
  bsc#1255245).
- Update
  patches.suse/nvmet-fc-avoid-scheduling-association-deletion-twice.patch
  (bsc#1245193 bsc#1247500 CVE-2025-40343 bsc#1255276).
- Update
  patches.suse/of-overlay-Call-of_changeset_init-early.patch
  (git-fixes CVE-2023-53856 bsc#1254661).
- Update
  patches.suse/of-unittest-fix-null-pointer-dereferencing-in-of_uni.patch
  (git-fixes CVE-2023-54178 bsc#1255992).
- Update
  patches.suse/opp-Fix-use-after-free-in-lazy_opp_tables-after.patch
  (bsc#1012628 CVE-2023-54026 bsc#1255549).
- Update
  patches.suse/orangefs-fix-xattr-related-buffer-overflow.patch
  (git-fixes CVE-2025-40306 bsc#1255062).
- Update
  patches.suse/ovl-fix-null-pointer-dereference-in-ovl_get_acl.patch
  (bsc#1012628 CVE-2023-54313 bsc#1255775).
- Update
  patches.suse/pcmcia-rsrc_nonstatic-Fix-memory-leak-in-nonst.patch
  (bsc#1012628 CVE-2023-54115 bsc#1256121).
- Update patches.suse/perf-tool-x86-Fix-perf_env-memory-leak.patch
  (bsc#1012628 CVE-2023-53793 bsc#1254739).
- Update
  patches.suse/phy-tegra-xusb-Clear-the-driver-reference-in-us.patch
  (bsc#1012628 CVE-2023-54083 bsc#1256368).
- Update
  patches.suse/pinctrl-at91-pio4-check-return-value-of-devm_ka.patch
  (bsc#1012628 CVE-2023-54319 bsc#1255760).
- Update
  patches.suse/pinctrl-freescale-Fix-a-memory-out-of-bounds-wh.patch
  (bsc#1012628 CVE-2023-53750 bsc#1254611).
- Update
  patches.suse/pinctrl-s32cc-fix-uninitialized-memory-in-s32_pinctr.patch
  (git-fixes CVE-2025-68222 bsc#1255218).
- Update
  patches.suse/platform-x86-intel-punit_ipc-fix-memory-corruption.patch
  (git-fixes CVE-2025-68303 bsc#1255122).
- Update
  patches.suse/posix-timers-Prevent-RT-livelock-in-itimer_dele.patch
  (bsc#1012628 CVE-2023-53815 bsc#1254715).
- Update patches.suse/powerpc-64s-Fix-VAS-mm-use-after-free.patch
  (bsc#1012628 CVE-2023-54042 bsc#1255702).
- Update
  patches.suse/powerpc-iommu-Fix-notifiers-being-shared-by-PCI-and-.patch
  (bsc#1065729 CVE-2023-54095 bsc#1256271).
- Update
  patches.suse/powerpc-powernv-sriov-perform-null-check-on-iov.patch
  (bsc#1012628 CVE-2023-54315 bsc#1255769).
- Update
  patches.suse/powerpc-pseries-Rework-lppaca_shared_proc-to-avoid-D.patch
  (bsc#1194869 CVE-2023-54267 bsc#1255899).
- Update
  patches.suse/powerpc-pseries-fix-possible-memory-leak-in-ibmebus_.patch
  (bsc#1194869 CVE-2023-54017 bsc#1255605).
- Update patches.suse/pstore-ram-Add-check-for-kstrdup.patch
  (bsc#1012628 CVE-2023-54189 bsc#1255978).
- Update patches.suse/quota-fix-warning-in-dqgrab.patch
  (bsc#1012628 CVE-2023-54177 bsc#1255993).
- Update patches.suse/rcu-dump-vmalloc-memory-info-safely.patch
  (git-fixes CVE-2023-54113 bsc#1256351).
- Update
  patches.suse/rcuscale-Move-rcu_scale_writer-schedule_timeout_unin.patch
  (git-fixes CVE-2023-54246 bsc#1255915).
- Update
  patches.suse/refscale-Fix-uninitalized-use-of-wait_queue_head_t.patch
  (git-fixes CVE-2023-54316 bsc#1255770).
- Update
  patches.suse/regmap-irq-Fix-out-of-bounds-access-when-alloca.patch
  (bsc#1012628 CVE-2023-53768 bsc#1254599).
- Update
  patches.suse/regmap-slimbus-fix-bus_context-pointer-in-regmap-ini.patch
  (git-fixes CVE-2025-40317 bsc#1254796).
- Update
  patches.suse/regulator-core-Protect-regulator_supply_alias_list-w.patch
  (git-fixes CVE-2025-68354 bsc#1255553).
- Update
  patches.suse/regulator-da9063-fix-null-pointer-deref-with-pa.patch
  (bsc#1012628 CVE-2023-53787 bsc#1254750).
- Update patches.suse/rpmsg-glink-Add-check-for-kstrdup.patch
  (git-fixes CVE-2023-54049 bsc#1256396).
- Update
  patches.suse/s390-dcssblk-fix-kernel-crash-with-list_add-corruption.patch
  (git-fixes bsc#1215344 CVE-2023-54117 bsc#1256348).
- Update
  patches.suse/s390-vmem-split-pages-when-debug-pagealloc-is-.patch
  (bsc#1012628 CVE-2023-54278 bsc#1255911).
- Update
  patches.suse/samples-bpf-Fix-buffer-overflow-in-tcp_basertt.patch
  (bsc#1012628 CVE-2023-54312 bsc#1255774).
- Update
  patches.suse/sched-psi-use-kernfs-polling-functions-for-PSI-.patch
  (bsc#1012628 CVE-2023-54019 bsc#1255636).
- Update
  patches.suse/scsi-qedf-Fix-NULL-dereference-in-error-handlin.patch
  (bsc#1012628 CVE-2023-54289 bsc#1255806).
- Update
  patches.suse/scsi-qla2xxx-Array-index-may-go-out-of-bound.patch
  (bsc#1012628 CVE-2023-54179 bsc#1255994).
- Update
  patches.suse/scsi-qla2xxx-Check-valid-rport-returned-by-fc_b.patch
  (bsc#1012628 CVE-2023-54014 bsc#1256300).
- Update
  patches.suse/scsi-target-core-Fix-target_cmd_counter-leak.patch
  (bsc#1214847 CVE-2023-54154 bsc#1256082).
- Update
  patches.suse/serial-8250-Fix-oops-for-port-pm-on-uart_chang.patch
  (bsc#1012628 CVE-2023-54220 bsc#1255949).
- Update patches.suse/serial-sprd-Fix-DMA-buffer-leak-issue.patch
  (git-fixes CVE-2023-54136 bsc#1256099).
- Update
  patches.suse/sfc-fix-crash-when-reading-stats-while-NIC-is-r.patch
  (bsc#1012628 CVE-2023-54156 bsc#1255704).
- Update
  patches.suse/sh-dma-Fix-DMA-channel-offset-calculation.patch
  (bsc#1012628 CVE-2023-54255 bsc#1255884).
- Update patches.suse/smb-client-fix-missed-ses-refcounting.patch
  (bsc#1012628 CVE-2023-54076 bsc#1256335).
- Update
  patches.suse/smb-client-fix-potential-cfid-UAF-in-smb2_query_info_compound.patch
  (bsc#1248886 CVE-2025-40320 bsc#1254793).
- Update patches.suse/soundwire-fix-enumeration-completion.patch
  (bsc#1012628 CVE-2023-54096 bsc#1256178).
- Update patches.suse/spi-tegra210-quad-Fix-timeout-handling.patch
  (bsc#1253155 CVE-2025-68746 bsc#1255722).
- Update
  patches.suse/staging-r8712-Fix-memory-leak-in-_r8712_init_xm.patch
  (bsc#1012628 CVE-2023-54001 bsc#1255628).
- Update
  patches.suse/thermal-of-fix-double-free-on-unregistration.patch
  (bsc#1012628 CVE-2023-53997 bsc#1255632).
- Update
  patches.suse/tpm-tpm_vtpm_proxy-fix-a-race-condition-in-dev-.patch
  (bsc#1012628 CVE-2023-54309 bsc#1255780).
- Update
  patches.suse/tracing-Fix-memory-leak-of-iter-temp-when-readi.patch
  (bsc#1012628 CVE-2023-54171 bsc#1256034).
- Update
  patches.suse/tracing-Fix-warning-in-trace_buffered_event_dis.patch
  (bsc#1012628 CVE-2023-54211 bsc#1255843).
- Update
  patches.suse/tty-serial-samsung_tty-Fix-a-memory-leak-in-s3c.patch
  (bsc#1012628 CVE-2023-53858 bsc#1254704).
- Update
  patches.suse/usb-cdns3-gadget-Use-after-free-during-failed-initia.patch
  (stable-fixes CVE-2025-40314 bsc#1255072).
- Update
  patches.suse/usb-dwc3-Fix-race-condition-between-concurrent-dwc3_.patch
  (git-fixes CVE-2025-68287 bsc#1255152).
- Update
  patches.suse/usb-gadget-f_eem-Fix-memory-leak-in-eem_unwrap.patch
  (git-fixes CVE-2025-68289 bsc#1255155).
- Update
  patches.suse/usb-gadget-f_fs-Fix-epfile-null-pointer-access-after.patch
  (stable-fixes CVE-2025-40315 bsc#1255083).
- Update
  patches.suse/usb-potential-integer-overflow-in-usbg_make_tpg.patch
  (stable-fixes CVE-2025-68750 bsc#1255814).
- Update
  patches.suse/usb-storage-alauda-Fix-uninit-value-in-alauda_.patch
  (bsc#1012628 CVE-2023-53847 bsc#1254698).
- Update
  patches.suse/usb-storage-sddr55-Reject-out-of-bound-new_pba.patch
  (stable-fixes CVE-2025-40345 bsc#1255279).
- Update
  patches.suse/usb-typec-bus-verify-partner-exists-in-typec_altmode.patch
  (git-fixes CVE-2023-54299 bsc#1255789).
- Update
  patches.suse/usb-uas-fix-urb-unmapping-issue-when-the-uas-device-.patch
  (git-fixes CVE-2025-68331 bsc#1255495).
- Update patches.suse/usbnet-Prevents-free-active-kevent.patch
  (git-fixes CVE-2025-68312 bsc#1255171).
- Update
  patches.suse/vdpa-Add-queue-index-attr-to-vdpa_nl_policy-fo.patch
  (bsc#1012628 CVE-2023-54031 bsc#1255583).
- Update patches.suse/vduse-fix-NULL-pointer-dereference.patch
  (bsc#1012628 CVE-2023-54291 bsc#1255798).
- Update
  patches.suse/vfio-type1-fix-cap_migration-information-leak
  (jsc#PED-7779 jsc#PED-7780 CVE-2023-54137 bsc#1256100).
- Update
  patches.suse/virtio-vdpa-Fix-cpumask-memory-leak-in-virtio_.patch
  (bsc#1012628 CVE-2023-54215 bsc#1255957).
- Update
  patches.suse/virtio_pmem-add-the-missing-REQ_OP_WRITE-for-flush-b.patch
  (git-fixes CVE-2023-54089 bsc#1256268).
- Update
  patches.suse/virtio_vdpa-build-affinity-masks-conditionally.patch
  (git-fixes CVE-2023-54008 bsc#1255630).
- Update
  patches.suse/wifi-ath11k-Add-missing-hw_ops-get_ring_selecto.patch
  (bsc#1012628 CVE-2023-54141 bsc#1256094).
- Update patches.suse/wifi-ath11k-fix-peer-HE-MCS-assignment.patch
  (git-fixes CVE-2025-68380 bsc#1255580).
- Update
  patches.suse/wifi-ath11k-fix-registration-of-6Ghz-only-phy-w.patch
  (bsc#1012628 CVE-2023-54229 bsc#1255924).
- Update
  patches.suse/wifi-ath12k-Fix-memory-leak-in-rx_desc-and-tx_desc.patch
  (git-fixes CVE-2023-54016 bsc#1256279).
- Update
  patches.suse/wifi-ath9k-avoid-referencing-uninit-memory-in-a.patch
  (bsc#1012628 CVE-2023-54300 bsc#1255790).
- Update
  patches.suse/wifi-brcmfmac-fix-crash-while-sending-Action-Frames-.patch
  (git-fixes CVE-2025-40321 bsc#1254795).
- Update
  patches.suse/wifi-cfg80211-ocb-don-t-leave-if-not-joined.patch
  (git-fixes CVE-2023-53992 bsc#1256058).
- Update
  patches.suse/wifi-mt76-mt7921-fix-skb-leak-by-txs-missing-i.patch
  (bsc#1012628 CVE-2023-54052 bsc#1256387).
- Update
  patches.suse/wifi-mwifiex-fix-memory-leak-in-mwifiex_histogram_re.patch
  (git-fixes CVE-2023-53808 bsc#1254723).
- Update
  patches.suse/wifi-rsi-Do-not-configure-WoWlan-in-shutdown-ho.patch
  (bsc#1012628 CVE-2023-54025 bsc#1255558).
- Update
  patches.suse/wifi-rtl818x-Fix-potential-memory-leaks-in-rtl8180_i.patch
  (git-fixes CVE-2025-68759 bsc#1255934).
- Update
  patches.suse/wifi-rtl818x-rtl8187-Fix-potential-buffer-underflow-.patch
  (git-fixes CVE-2025-68362 bsc#1255611).
- Update patches.suse/x86-CPU-AMD-Add-RDSEED-fix-for-Zen5.patch
  (git-fixes CVE-2025-68313 bsc#1255415).
- Update
  patches.suse/x86-CPU-AMD-Add-missing-terminator-for-zen5_rdseed_microco.patch
  (git-fixes CVE-2025-68195 bsc#1255259).
- Update
  patches.suse/x86-hyperv-Disable-IBT-when-hypercall-page-lac.patch
  (bsc#1012628 CVE-2023-54172 bsc#1256033).
- Update
  patches.suse/x86-sev-Make-enc_dec_hypercall-accept-a-size-instead-of-npages
  (bsc#1214635 CVE-2023-53996 bsc#1255618).
- Update patches.suse/xen-speed-up-grant-table-reclaim.patch
  (bsc#1012628 CVE-2023-54081 bsc#1256361).
- Update
  patches.suse/xfrm-also-call-xfrm_state_delete_tunnel-at-destroy-time-fo.patch
  (CVE-2025-40215 bsc#1254959 CVE-2025-40256 bsc#1254851).
- commit c2db288</changelog>
  <changelog author="joao.povoas@suse.com" date="1768219201">- Update
  patches.suse/Bluetooth-MGMT-Fix-OOB-access-in-parse_adv_monitor_p.patch
  (git-fixes CVE-2025-40294 bsc#1255181).
- Update
  patches.suse/Bluetooth-MGMT-fix-crash-in-set_mesh_sync-and-set_me.patch
  (git-fixes CVE-2025-40213 bsc#1253674).
- Update
  patches.suse/Bluetooth-btusb-mediatek-Avoid-btusb_mtk_claim_iso_i.patch
  (git-fixes CVE-2025-68298 bsc#1255124).
- Update
  patches.suse/Bluetooth-btusb-mediatek-Fix-kernel-crash-when-relea.patch
  (git-fixes CVE-2025-68306 bsc#1255145).
- Update
  patches.suse/accel-ivpu-Fix-race-condition-when-unbinding-BOs.patch
  (git-fixes CVE-2025-68749 bsc#1255724).
- Update
  patches.suse/drm-amd-display-increase-max-link-count-and-fix-link.patch
  (stable-fixes CVE-2025-40354 bsc#1255316).
- Update
  patches.suse/drm-amdgpu-atom-Check-kcalloc-for-WS-buffer-in-amdgp.patch
  (stable-fixes CVE-2025-68190 bsc#1255131).
- Update
  patches.suse/drm-amdgpu-fix-gpu-page-fault-after-hibernation-on-P.patch
  (stable-fixes CVE-2025-68230 bsc#1255134).
- Update
  patches.suse/drm-amdgpu-fix-nullptr-err-of-vm_handle_moved.patch
  (stable-fixes CVE-2025-40339 bsc#1255428).
- Update patches.suse/drm-amdgpu-remove-two-invalid-BUG_ON-s.patch
  (stable-fixes CVE-2025-68201 bsc#1255136).
- Update
  patches.suse/drm-amdkfd-Fix-mmap-write-lock-not-release.patch
  (bsc#1243112 CVE-2025-40332 bsc#1255116).
- Update
  patches.suse/drm-mediatek-Disable-AFBC-support-on-Mediatek-DRM-dr.patch
  (git-fixes CVE-2025-68184 bsc#1255220).
- Update
  patches.suse/drm-panthor-Fix-UAF-on-kernel-BO-VA-nodes.patch
  (git-fixes CVE-2025-68747 bsc#1255723).
- Update
  patches.suse/drm-panthor-Fix-kernel-panic-on-partial-unmap-of-a-G.patch
  (git-fixes CVE-2025-40225 bsc#1254827).
- Update
  patches.suse/drm-panthor-Flush-shmem-writes-before-mapping-buffer.patch
  (git-fixes CVE-2025-40276 bsc#1254824).
- Update
  patches.suse/drm-radeon-Do-not-kfree-devres-managed-rdev.patch
  (git-fixes CVE-2025-68170 bsc#1255256).
- Update patches.suse/drm-radeon-Remove-calls-to-drm_put_dev.patch
  (git-fixes CVE-2025-68181 bsc#1255247).
- Update
  patches.suse/drm-radeon-delete-radeon_fence_process-in-is_signale.patch
  (stable-fixes CVE-2025-68223 bsc#1255357).
- Update
  patches.suse/drm-sysfb-Do-not-dereference-NULL-pointer-in-plane-r.patch
  (git-fixes CVE-2025-40360 bsc#1255095).
- Update
  patches.suse/drm-xe-Fix-oops-in-xe_gem_fault-when-running-core_ho.patch
  (stable-fixes CVE-2025-40340 bsc#1254996).
- Update
  patches.suse/drm-xe-guc-Synchronize-Dead-CT-worker-with-unbind.patch
  (git-fixes CVE-2025-68207 bsc#1255234).
- Update
  patches.suse/media-videobuf2-forbid-remove_bufs-when-legacy-filei.patch
  (git-fixes CVE-2025-40302 bsc#1255196).
- Update
  patches.suse/perf-x86-intel-Fix-KASAN-global-out-of-bounds-warning.patch
  (git-fixes CVE-2025-40359 bsc#1255087).
- Update
  patches.suse/x86-CPU-AMD-Add-missing-terminator-for-zen5_rdseed_m.patch
  (git-fixes CVE-2025-68195 bsc#1255259).
- commit 946dbf2</changelog>
  <changelog author="msuchanek@suse.de" date="1768219202">- powerpc/eeh: fix recursive pci_lock_rescan_remove locking in
  EEH event handling (bsc#1253262 ltc#216029).
- commit daa4104</changelog>
  <changelog author="mhocko@suse.com" date="1768219203">- supported.conf: mark ksmbd unsupported
  Based on discussion with Enzo Matsumiya it has tuned out that ksmbd
  module is unsupported but the supported.conf entry is incorrect. Fix
  that.
- commit c800e3f</changelog>
  <changelog author="tiwai@suse.de" date="1768219204">- usb: ohci-nxp: fix device leak on probe failure (git-fixes).
- usb: usb-storage: Maintain minimal modifications to the
  bcdDevice range (git-fixes).
- Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042
  quirk table (stable-fixes).
- drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state()
  (stable-fixes).
- ASoC: bcm: bcm63xx-pcm-whistler: Check return value of
  of_dma_configure() (git-fixes).
- i2c: designware: Disable SMBus interrupts to prevent storms
  from mis-configured firmware (stable-fixes).
- platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to
  VGBS DMI quirks (stable-fixes).
- pinctrl: single: Fix incorrect type for error return variable
  (git-fixes).
- i3c: fix refcount inconsistency in i3c_master_register
  (git-fixes).
- staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE
  parsing (stable-fixes).
- staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie()
  parser (stable-fixes).
- USB: serial: option: move Telit 0x10c7 composition in the
  right place (stable-fixes).
- USB: serial: option: add Telit Cinterion FE910C04 new
  compositions (stable-fixes).
- USB: serial: option: add Foxconn T99W760 (stable-fixes).
- USB: serial: ftdi_sio: match on interface number for jtag
  (stable-fixes).
- usb: usb-storage: No additional quirks need to be added to
  the EL-R12 optical drive (stable-fixes).
- usb: dwc2: fix hang during shutdown if set as peripheral
  (git-fixes).
- usb: xhci: limit run_graceperiod for only usb 3.0 devices
  (stable-fixes).
- usb: typec: ucsi: Handle incorrect num_connectors capability
  (stable-fixes).
- usbip: Fix locking bug in RT-enabled kernels (stable-fixes).
- serial: sprd: Return -EPROBE_DEFER when uart clock is not ready
  (stable-fixes).
- serial: add support of CPCI cards (stable-fixes).
- char: applicom: fix NULL pointer dereference in ac_ioctl
  (stable-fixes).
- iio: adc: ti_am335x_adc: Limit step_avg to valid range for
  gcc complains (stable-fixes).
- fbdev: gbefb: fix to use physical address instead of dma address
  (stable-fixes).
- via_wdt: fix critical boot hang due to unnamed resource
  allocation (stable-fixes).
- ipmi: Fix __scan_channels() failing to rescan channels
  (stable-fixes).
- ipmi: Fix the race between __scan_channels() and
  deliver_response() (stable-fixes).
- reset: fix BIT macro reference (stable-fixes).
- firmware: imx: scu-irq: Init workqueue before request mbox
  channel (stable-fixes).
- HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen
  (stable-fixes).
- mmc: sdhci-msm: Avoid early clock doubling during HS400
  transition (stable-fixes).
- ASoC: qcom: q6apm-dai: set flags to reflect correct operation
  of appl_ptr (git-fixes).
- media: amphion: Remove vpu_vb_is_codecconfig (git-fixes).
- media: verisilicon: Fix CPU stalls on G2 bus error (git-fixes).
- Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE
  (stable-fixes).
- Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV
  (stable-fixes).
- wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840
  tablet (stable-fixes).
- wifi: rtw88: Add USB ID 2001:3329 for D-Link AC13U rev. A1
  (stable-fixes).
- ACPI: property: Use ACPI functions in
  acpi_graph_get_next_endpoint() only (stable-fixes).
- ACPICA: Avoid walking the Namespace if start_node is NULL
  (stable-fixes).
- pinctrl: qcom: msm: Fix deadlock in pinmux configuration
  (stable-fixes).
- platform/x86: acer-wmi: Ignore backlight event (stable-fixes).
- platform/x86/amd: pmc: Add Lenovo Legion Go 2 to pmc quirk list
  (stable-fixes).
- platform/x86/amd/pmc: Add spurious_8042 to Xbox Ally
  (stable-fixes).
- platform/x86: huawei-wmi: add keys for HONOR models
  (stable-fixes).
- HID: elecom: Add support for ELECOM M-XT3URBK (018F)
  (stable-fixes).
- HID: hid-input: Extend Elan ignore battery quirk to USB
  (stable-fixes).
- HID: apple: Add SONiX AK870 PRO to non_apple_keyboards quirk
  list (stable-fixes).
- drm/vmwgfx: Use kref in vmw_bo_dirty (stable-fixes).
- spi: xilinx: increase number of retries before declaring stall
  (stable-fixes).
- spi: imx: keep dma request disabled before dma transfer setup
  (stable-fixes).
- ALSA: usb-audio: Add native DSD quirks for PureAudio DAC series
  (stable-fixes).
- Bluetooth: btrtl: Avoid loading the config file on security
  chips (stable-fixes).
- media: amphion: Make some vpu_v4l2 functions static
  (stable-fixes).
- usb: dwc2: disable platform lowlevel hw resources during
  shutdown (stable-fixes).
- media: amphion: Add a frame flush mode for decoder
  (stable-fixes).
- usb: ohci-nxp: Use helper function devm_clk_get_enabled()
  (stable-fixes).
- drm/tilcdc: request and mapp iomem with devres (stable-fixes).
- media: verisilicon: g2: Use common helpers to compute chroma
  and mv offsets (stable-fixes).
- media: verisilicon: Store chroma and motion vectors offset
  (stable-fixes).
- i3c: master: Inherit DMA masks and parameters from parent device
  (stable-fixes).
- commit bc3be49</changelog>
  <changelog author="tiwai@suse.de" date="1768219205">- pinctrl: single: Fix PIN_CONFIG_BIAS_DISABLE handling
  (stable-fixes).
- Refresh
  patches.suse/pinctrl-single-fix-bias-pull-up-down-handling-in-pin.patch.
- commit bc41b99</changelog>
  <changelog author="tiwai@suse.de" date="1768219206">- drm/amdgpu: Forward VMID reservation errors (git-fixes).
- commit a7344a2</changelog>
  <changelog author="tiwai@suse.de" date="1768219207">- virtio_console: fix order of fields cols and rows
  (stable-fixes).
- commit 0d412d7</changelog>
  <changelog author="tiwai@suse.de" date="1768219208">- drm/sched: Fix race in drm_sched_entity_select_rq() (git-fixes).
- commit d597802</changelog>
  <changelog author="tiwai@suse.de" date="1768219209">- Move out-of-tree patches into the right section
- commit 314797b</changelog>
  <changelog author="petr.pavlu@suse.com" date="1768219210">- tracing: Fix access to trace_event_file (bsc#1254373).
- commit 768b257</changelog>
  <changelog author="dsterba@suse.com" date="1768219211">- bnxt_en: Fix null pointer dereference in bnxt_bs_trace_check_wrap() (CVE-2025-68197 bsc#1255242)
- commit 85b99e2</changelog>
  <changelog author="rgoldwyn@suse.com" date="1768219212">- fuse: fix livelock in synchronous file put from fuseblk workers (CVE-2025-40220 bsc#1254520).
- commit 46a797f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1768219213">- mlx5: Fix default values in create CQ (CVE-2025-68209
  bsc#1255230).
- commit dce9b13</changelog>
  <changelog author="hoyeon.lee@suse.com" date="1768305600">- bpf: Improve program stats run-time calculation (CVE-2025-68742
  bsc#1255707).
- commit 4ed738f</changelog>
  <changelog author="hoyeon.lee@suse.com" date="1768305601">- bpf: Fix invalid prog-&gt;stats access when update_effective_progs
  fails (CVE-2025-68742 bsc#1255707).
- commit 53d4b3c</changelog>
  <changelog author="tiwai@suse.de" date="1768305602">- x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix
  Halo (bsc#1256528).
- x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev
  (bsc#1256528).
- x86/microcode/AMD: Add more known models to entry sign checking
  (bsc#1256528).
- x86/microcode/AMD: Limit Entrysign signature checking to known
  generations (bsc#1256528).
- x86/microcode: Fix Entrysign revision check for Zen1/Naples
  (bsc#1256528).
- x86/microcode/AMD: Add TSA microcode SHAs (bsc#1256528).
- x86/microcode/AMD: Use sha256() instead of init/update/final
  (bsc#1256528).
- x86/microcode/AMD: Clean the cache if update did not load
  microcode (bsc#1256528).
- x86/microcode/AMD: Extend the SHA check to Zen5, block
  loading of any unreleased standalone Zen5 microcode patches
  (bsc#1256528).
- x86/microcode/AMD: Fix __apply_microcode_amd()'s return value
  (bsc#1256528).
- x86/microcode/AMD: Add some forgotten models to the SHA check
  (bsc#1256528).
- x86/microcode/AMD: Load only SHA256-checksummed patches
  (bsc#1256528).
- commit ed14359</changelog>
  <changelog author="tiwai@suse.de" date="1768305603">- x86/microcode/AMD: Select which microcode patch to load
  (bsc#1256528).
- Refresh
  patches.suse/x86-microcode-AMD-Handle-the-case-of-no-BIOS-microcode.patch.
- commit 3b809fe</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1768305604">- mlx5: Fix default values in create CQ (CVE-2025-68209
  bsc#1255230).
- commit e7dee05</changelog>
  <changelog author="jack@suse.cz" date="1768305605">- ext4: use optimized mballoc scanning regardless of inode format
  (bsc#1254378).
- commit aa95fec</changelog>
</package>
<package pkgid="2a5c17d5ddc8c8af2f52298fa2c68ed23920dabed8a1828f6d56db337649d23a" name="kernel-default-devel" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.53.3.1"/>
  <changelog author="nmorey@suse.com" date="1748865600">- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (git-fixes)
- commit 0defb73</changelog>
  <changelog author="nmorey@suse.com" date="1748865601">- RDMA/cma: Fix hang when cma_netevent_callback fails to queue_work (git-fixes)
- commit 5748d8f</changelog>
  <changelog author="nmorey@suse.com" date="1748865602">- RDMA/rxe: Fix "trying to register non-static key in rxe_qp_do_cleanup" bug (git-fixes)
- commit 40421b4</changelog>
  <changelog author="msuchanek@suse.de" date="1748865603">- powerpc/pseries/iommu: Fix kmemleak in TCE table userspace view
  (jsc#PED-10539 git-fixes).
- commit 66792c6</changelog>
  <changelog author="jgross@suse.com" date="1748865604">- 9p/net: fix improper handling of bogus negative read/write
  replies (bsc#1243077 CVE-2025-37879).
- commit ac0ef56</changelog>
  <changelog author="jgross@suse.com" date="1748865605">- xenbus: Use kref to track req lifetime (bsc#1243541
  CVE-2025-37949).
- commit 0928f39</changelog>
  <changelog author="ailiop@suse.com" date="1748865606">- Squashfs: check return result of sb_min_blocksize (git-fixes).
- commit 6d6e8d7</changelog>
  <changelog author="ailiop@suse.com" date="1748865607">- afs: Make it possible to find the volumes that are using a
  server (git-fixes).
- commit 7d8a054</changelog>
  <changelog author="ailiop@suse.com" date="1748865608">- afs: Fix the server_list to unuse a displaced server rather
  than putting it (git-fixes).
- commit d3c390a</changelog>
  <changelog author="ailiop@suse.com" date="1748865609">- nilfs2: add pointer check for nilfs_direct_propagate()
  (git-fixes).
- commit eac8f96</changelog>
  <changelog author="ailiop@suse.com" date="1748865610">- nilfs2: do not propagate ENOENT error from
  nilfs_btree_propagate() (git-fixes).
- commit 5591e0d</changelog>
  <changelog author="msuchanek@suse.de" date="1748865611">- Remove debug flavor (bsc#1243919).
  This is only released in Leap, and we don't have Leap 15.7
- commit 4ff5661</changelog>
  <changelog author="dwagner@suse.de" date="1748865612">- nvme-pci: acquire cq_poll_lock in nvme_poll_irqdisable
  (git-fixes bsc#1223096).
- nvme-pci: make nvme_pci_npages_prp() __always_inline
  (git-fixes).
- commit 71f2996</changelog>
  <changelog author="pfalcato@suse.de" date="1748865613">- Refresh
  patches.kabi/icmp-prevent-possible-NULL-dereferences-from-icmp_bu.patch.
- commit d0519a5</changelog>
  <changelog author="pfalcato@suse.de" date="1748865614">- Delete
  patches.kabi/ipv4-icmp-Unmask-upper-DSCP-bits-in-icmp_route_looku.patch.
  It turns out
  patches.suse/ipv4-icmp-Unmask-upper-DSCP-bits-in-icmp_route_looku.patch
  does not need the kABI workaround after all, so removing this patch is
  safe.
- commit 983a766</changelog>
  <changelog author="pmladek@suse.com" date="1748865615">- objtool, panic: Disable SMAP in __stack_chk_fail()
  (bsc#1243963).
- commit 3d95273</changelog>
  <changelog author="pfalcato@suse.de" date="1748865616">- mm/huge_memory: fix dereferencing invalid pmd migration entry
  (CVE-2025-37958 bsc#1243539).
- commit bbe0b9a</changelog>
  <changelog author="pfalcato@suse.de" date="1748865617">- memblock: Accept allocated memory before use in
  memblock_double_array() (CVE-2025-37960 bsc#1243519).
- commit a66a796</changelog>
  <changelog author="msuchanek@suse.de" date="1748865618">- KVM: PPC: Book3S HV: Fix IRQ map warnings with XICS on pSeries
  KVM Guest (bsc#1242205 ltc#212592).
- commit e5a2e22</changelog>
  <changelog author="jgross@suse.com" date="1748952000">- blacklist.conf: add 75ad02318af2 ("Xen/swiotlb: mark xen_swiotlb_fixup() __init")
- Delete patches.suse/Xen-swiotlb-mark-xen_swiotlb_fixup-__init.patch.
- commit c256f05</changelog>
</package>
<package pkgid="44946c44c75acdd1a3d794dec89075fa47d9c4dd5bf3351d6ad2009e2cde516c" name="kernel-default-devel" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.53.31.1"/>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/ALSA-hda-Fix-missing-pointer-check-in-hda_component_.patch
  (git-fixes CVE-2025-40097 bsc#1252900).
- Update
  patches.suse/ASoC-stm32-sai-fix-OF-node-leak-on-probe.patch
  (git-fixes CVE-2025-71081 bsc#1256609).
- Update
  patches.suse/KEYS-trusted-Fix-a-memory-leak-in-tpm2_load_cmd.patch
  (git-fixes CVE-2025-71147 bsc#1257158).
- Update
  patches.suse/btrfs-fix-adding-block-group-to-a-reclaim-list-and-t.patch
  (git-fixes CVE-2024-42103 bsc#1228490).
- Update
  patches.suse/btrfs-fix-invalid-inode-pointer-dereferences-during-.patch
  (git-fixes CVE-2025-38243 bsc#1246184).
- Update
  patches.suse/drm-stm-ltdc-fix-late-dereference-check.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-53714
  bsc#1254465).
- Update
  patches.suse/drm-ttm-Avoid-NULL-pointer-deref-for-evicted-BOs.patch
  (git-fixes CVE-2025-71083 bsc#1256610).
- Update
  patches.suse/ftrace-Also-allocate-and-copy-hash-for-reading-of-filter-f.patch
  (bsc#1250032 CVE-2025-39813 CVE-2025-39689 bsc#1249307).
- Update
  patches.suse/hwmon-w83791d-Convert-macros-to-functions-to-avoid-T.patch
  (git-fixes CVE-2025-71111 bsc#1256728).
- Update
  patches.suse/ipmi-Rework-user-message-limit-handling.patch
  (git-fixes CVE-2025-40202 bsc#1253451).
- Update
  patches.suse/media-adv7842-Avoid-possible-out-of-bounds-array-acc.patch
  (git-fixes CVE-2025-71136 bsc#1256759).
- Update
  patches.suse/media-dvb-usb-dtv5100-fix-out-of-bounds-in-dtv5100_i.patch
  (git-fixes CVE-2025-68819 bsc#1256664).
- Update
  patches.suse/media-vidtv-initialize-local-pointers-upon-transfer-.patch
  (git-fixes CVE-2025-68808 bsc#1256682).
- Update
  patches.suse/perf-x86-intel-Fix-crash-in-icl_update_topdown_event.patch
  (git-fixes CVE-2025-38322 bsc#1246447).
- Update
  patches.suse/platform-chrome-cros_ec_ishtp-Fix-UAF-after-unbindin.patch
  (git-fixes CVE-2025-68804 bsc#1256617).
- Update
  patches.suse/powerpc-64s-slb-Fix-SLB-multihit-issue-during-SLB-preload.patch
  (bac#1236022 ltc#211187 CVE-2025-71078 bsc#1256616).
- Update
  patches.suse/smb-client-fix-warning-when-reconnecting-channel.patch
  (git-fixes CVE-2025-38379 bsc#1247030).
- Update
  patches.suse/tcp_bpf-Call-sk_msg_free-when-tcp_bpf_send_verdict-f.patch
  (bsc#1250705 CVE-2025-39913).
- Update
  patches.suse/trace-fgraph-Fix-the-warning-caused-by-missing-unregister-.patch
  (bsc#1248211 CVE-2025-38539 CVE-2025-39829 bsc#1250082).
- Update
  patches.suse/usb-dwc3-fix-fault-at-system-suspend-if-device-was-a.patch
  (git-fixes CVE-2024-53070 bsc#1233563).
- Update
  patches.suse/usb-typec-ucsi-glink-fix-off-by-one-in-connector_sta.patch
  (git-fixes CVE-2024-53149 bsc#1234842).
- Update
  patches.suse/usb-xhci-Fix-invalid-pointer-dereference-in-Etron-wo.patch
  (git-fixes CVE-2025-37813 bsc#1242909).
- Update
  patches.suse/x86-microcode-AMD-Fix-__apply_microcode_amd-s-return.patch
  (bsc#1256528 CVE-2025-22047 bsc#1241437).
- commit fbc3d71</changelog>
  <changelog author="jslaby@suse.cz" date="1770033601">- x86/fpu: Clear XSTATE_BV in guest XSAVE state whenever XFD[i]=1
  (CVE-2026-23005 bsc#1257245).
- commit 4fcc2d5</changelog>
  <changelog author="tiwai@suse.de" date="1770033602">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit b3a8e60</changelog>
  <changelog author="rgoldwyn@suse.com" date="1770033603">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit 16880ae</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033604">- smb: change return type of cached_dir_lease_break() to bool
  (git-fixes).
- commit da8604d</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033605">- cifs: add new field to track the last access time of cfid
  (git-fixes).
- commit 7328aa8</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033606">- smb: client: update cfid-&gt;last_access_time in
  open_cached_dir_by_dentry() (git-fixes).
- commit 1962196</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033607">- smb: client: remove unused fid_lock (git-fixes).
- commit ed3cf07</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033608">- smb: improve directory cache reuse for readdir operations
  (bsc#1252712).
- commit 20c0243</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033609">- scripts/python/git_sort/git_sort.yaml: add cifs for-next repository
- commit 0d24c51</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033610">- smb: client: split cached_fid bitfields to avoid shared-byte
  RMW races (bsc#1250748,bsc#1257154).
- commit e7ce4ba</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033611">- smb: client: ensure open_cached_dir_by_dentry() only returns
  valid cfid (git-fixes).
- commit d1feafe</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033612">- smb: client: short-circuit in open_cached_dir_by_dentry()
  if !dentry (git-fixes).
- commit 82d6911</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1770120000">- bpf/selftests: test_select_reuseport_kern: Remove unused header
  (bsc#1257603).
- commit 3124f7b</changelog>
  <changelog author="vbabka@suse.cz" date="1770120001">- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP
  allocations (bsc#1254447 bsc#1253087).
- commit e90ec28</changelog>
  <changelog author="rgoldwyn@suse.com" date="1770120002">- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CVE-2026-22984 bsc#1257217).
- commit 7474e34</changelog>
  <changelog author="rgoldwyn@suse.com" date="1770120003">- libceph: return the handler error from mon_handle_auth_done() (CVE-2026-22992 bsc#1257218).
- commit 518f909</changelog>
  <changelog author="rgoldwyn@suse.com" date="1770120004">- libceph: make free_choose_arg_map() resilient to partial allocation (CVE-2026-22991 bsc#1257220).
- commit 2e431bc</changelog>
  <changelog author="rgoldwyn@suse.com" date="1770120005">- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CVE-2026-22990 bsc#1257221).
- commit 0a3e886</changelog>
  <changelog author="tiwai@suse.de" date="1770120006">- Move out-of-tree rt patch into the right section
- commit 125c148</changelog>
</package>
<package pkgid="7853ecc710dbcffff2d35ea0ac7401a9d3023c235a5347461800c4eecb63c290" name="kernel-default-devel" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.53.34.1"/>
  <changelog author="mwilck@suse.com" date="1773057600">- dm: clear cloned request bio pointer when last clone bio
  completes (git-fixes).
- commit f2572c8</changelog>
  <changelog author="mwilck@suse.com" date="1773057601">- dm mpath: make pg_init_delay_msecs settable (git-fixes).
- commit b5dcc03</changelog>
  <changelog author="ohering@suse.de" date="1773057602">- Add bugnumber to existing mana changes (bsc#1245728 bsc#1251971 bsc#1252266 bsc#1257466)
- net: mana: Ring doorbell at 4 CQ wraparounds (git-fixes).
- PCI: hv: remove unnecessary module_init/exit functions (git-fixes).
- PCI: hv: Remove unused field pci_bus in struct hv_pcibus_device (git-fixes).
- RDMA/mana_ib: Add device-memory support (git-fixes).
- RDMA/mana_ib: Take CQ type from the device type (git-fixes).
- net: mana: Implement ndo_tx_timeout and serialize queue resets per port (bsc#1257472).
- Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump() (git-fixes).
- Drivers: hv: use kmalloc_array() instead of kmalloc() (git-fixes).
- Drivers: hv: Use kmalloc_array() instead of kmalloc() (git-fixes).
- Drivers: hv: Resolve ambiguity in hypervisor version log (git-fixes).
- Drivers: hv: fix missing kernel-doc description for 'size' in request_arr_init() (git-fixes).
- Drivers: hv: remove stale comment (git-fixes).
- net: mana: Support HW link state events (bsc#1253049).
- Drivers: hv: vmbus: Fix typos in vmbus_drv.c (git-fixes).
- Drivers: hv: vmbus: Fix sysfs output format for ring buffer index (git-fixes).
- Drivers: hv: vmbus: Clean up sscanf format specifier in target_cpu_store() (git-fixes).
- Drivers: hv: util: Cosmetic changes for hv_utils_transport.c (git-fixes).
- scsi: storvsc: Remove redundant ternary operators (git-fixes).
- tools/hv: fcopy: Fix irregularities with size of ring buffer (git-fixes).
- x86/hyperv: Fix usage of cpu_online_mask to get valid cpu (git-fixes).
- PCI: hv: Fix warnings for missing export.h header inclusion (git-fixes).
- clocksource: hyper-v: Fix warnings for missing export.h header inclusion (git-fixes).
- x86/hyperv: Fix warnings for missing export.h header inclusion (git-fixes).
- Drivers: hv: Fix the check for HYPERVISOR_CALLBACK_VECTOR (git-fixes).
- Drivers: hv: vmbus: Add comments about races with "channels" sysfs dir (git-fixes).
- PCI: hv: Remove unnecessary flex array in struct pci_packet (git-fixes).
- Drivers: hv: Use kzalloc for panic page allocation (git-fixes).
- uio_hv_generic: Align ring size to system page (git-fixes).
- uio_hv_generic: Use correct size for interrupt and monitor pages (git-fixes).
- Drivers: hv: vmbus: Introduce hv_get_vmbus_root_device() (git-fixes).
- Drivers: hv: vmbus: Get the IRQ number from DeviceTree (git-fixes).
- tools: hv: Enable debug logs for hv_kvp_daemon (git-fixes).
- PCI: hv: Correct a comment (git-fixes).
- x86/hyperv: fix an indentation issue in mshyperv.h (git-fixes).
- x86/hyperv: Use named operands in inline asm (git-fixes).
- commit fbd3c33</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1773144000">- selftests/bpf: add verifier sign extension bound computation
  tests (git-fixes).
- bpf: verifier improvement in 32bit shift sign extension pattern
  (git-fixes).
- commit cbb7102</changelog>
  <changelog author="mkoutny@suse.com" date="1773144001">- cgroup: Show # of subsystem CSSes in cgroup.stat (bsc#1256564
  bsc#1259130).
- commit e9ca9e6</changelog>
  <changelog author="mkoutny@suse.com" date="1773144002">- kabi: cgroup.stat fixup (bsc#1256564 bsc#1259130).
- commit 6ccb250</changelog>
  <changelog author="hare@suse.de" date="1773144003">- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (bsc#1254306).
- commit 165c4b3</changelog>
  <changelog author="hare@suse.de" date="1773144004">- Update config files (bsc#1254306).
- commit 3c7bab7</changelog>
  <changelog author="hare@suse.de" date="1773230400">- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (bsc#1254306).
- commit 43c578c</changelog>
  <changelog author="hare@suse.de" date="1773230401">- Update config files (bsc#1254306).
- commit 6305722</changelog>
  <changelog author="hare@suse.de" date="1773230402">- s390/ipl: Clear SBP flag when bootprog is set (bsc#1258176).
- commit bad7291</changelog>
  <changelog author="mkoutny@suse.com" date="1773230403">- cgroup: Fix incorrect WARN_ON_ONCE() in css_release_work_fn()
  (bsc#1256564 bsc#1259130).
- commit af50ef7</changelog>
  <changelog author="hare@suse.de" date="1773230404">- s390/ctcm: Fix double-kfree (CVE-2025-40253 bsc#1255084).
- commit c330474</changelog>
  <changelog author="hare@suse.de" date="1773230405">- s390/ctcm: Fix double-kfree (CVE-2025-40253 bsc#1255084).
- commit a33e581</changelog>
  <changelog author="nmorey@suse.com" date="1773316800">- RDMA/rtrs-clt: For conn rejection use actual err number (git-fixes)
- commit c91403f</changelog>
  <changelog author="tabraham@suse.com" date="1773316801">- scsi: mpi3mr: Event processing debug improvement (bsc#1251186,
  bsc#1258832).
- commit 4fde182</changelog>
  <changelog author="ddiss@suse.de" date="1773403200">- apparmor: fix race between freeing data and fs accessing it
  (bsc#1258849).
- apparmor: fix race on rawdata dereference (bsc#1258849).
- apparmor: fix differential encoding verification (bsc#1258849).
- apparmor: fix unprivileged local user can do privileged policy
  management (bsc#1258849).
- apparmor: Fix double free of ns_name in aa_replace_profiles()
  (bsc#1258849).
- apparmor: fix missing bounds check on DEFAULT table in
  verify_dfa() (bsc#1258849).
- apparmor: fix side-effect bug in match_char() macro usage
  (bsc#1258849).
- apparmor: fix: limit the number of levels of policy namespaces
  (bsc#1258849).
- apparmor: replace recursive profile removal with iterative
  approach (bsc#1258849).
- apparmor: fix memory leak in verify_header (bsc#1258849).
- apparmor: validate DFA start states are in bounds in unpack_pdb
  (bsc#1258849).
- commit 9f31a2e</changelog>
  <changelog author="tiwai@suse.de" date="1773403201">- ACPI: OSL: fix __iomem type on return from
  acpi_os_map_generic_address() (git-fixes).
- can: hi311x: hi3110_open(): add check for hi3110_power_enable()
  return value (git-fixes).
- net: usb: lan78xx: fix TX byte statistics for small packets
  (git-fixes).
- net: usb: lan78xx: fix silent drop of packets with checksum
  errors (git-fixes).
- qmi_wwan: allow max_mtu above hard_mtu to control rx_urb_size
  (git-fixes).
- remoteproc: sysmon: Correct subsys_name_len type in QMI request
  (git-fixes).
- commit 5d32ac9</changelog>
  <changelog author="ohering@suse.de" date="1773403202">- Add bugnumber to existing mana changes (bsc#1259558 bsc#1259580).
- Drivers: hv: Fix warnings for missing export.h header inclusion (git-fixes).
- Drivers: hv: Allocate interrupt and monitor pages aligned to system page boundary (git-fixes).
- Drivers: hv: Fix bad pointer dereference in hv_get_partition_id (git-fixes).
- hyperv: Convert hypercall statuses to linux error codes (git-fixes).
- drivers/hv: add CPU offlining support (git-fixes).
- drivers/hv: introduce vmbus_channel_set_cpu() (git-fixes).
- cpu: export lockdep_assert_cpus_held() (git-fixes).
- hyperv: Move arch/x86/hyperv/hv_proc.c to drivers/hv (git-fixes).
- hyperv: Move hv_current_partition_id to arch-generic code (git-fixes).
- commit 7492ec1</changelog>
  <changelog author="pfalcato@suse.de" date="1773403203">- sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT
  (CVE-2026-23125 bsc#1258293).
- commit 6e65546</changelog>
</package>
<package pkgid="82856e4ff010ebd5dfd7d9ceb2638fe17be192e9fdacfc14c1cba35c04e74885" name="kernel-default-devel" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.53.37.1"/>
  <changelog author="henrique.carvalho@suse.com" date="1775131200">- smb: client: fix krb5 mount with username option (git-fixes).
- commit 0e79d63</changelog>
  <changelog author="tiwai@suse.de" date="1775217600">- net/x25: Fix overflow when accumulating packets (git-fixes).
- net/x25: Fix potential double free of skb (git-fixes).
- Bluetooth: SMP: derive legacy responder STK authentication
  from MITM state (git-fixes).
- Bluetooth: SMP: force responder MITM requirements before
  building the pairing response (git-fixes).
- Bluetooth: MGMT: validate mesh send advertising payload length
  (git-fixes).
- Bluetooth: hci_event: fix potential UAF in
  hci_le_remote_conn_param_req_evt (git-fixes).
- Bluetooth: MGMT: validate LTK enc_size on load (git-fixes).
- Bluetooth: SCO: fix race conditions in sco_sock_connect()
  (git-fixes).
- Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if
  immediate (git-fixes).
- NFC: pn533: bound the UART receive buffer (git-fixes).
- wifi: iwlwifi: mvm: fix potential out-of-bounds read in
  iwl_mvm_nd_match_info_handler() (git-fixes).
- wifi: wilc1000: fix u8 overflow in SSID scan buffer size
  calculation (git-fixes).
- ASoC: ep93xx: Fix unchecked clk_prepare_enable() and add
  rollback on failure (git-fixes).
- ALSA: caiaq: fix stack out-of-bounds read in init_card
  (git-fixes).
- dmaengine: idxd: Fix freeing the allocated ida too late
  (git-fixes).
- Bluetooth: btintel: serialize btintel_hw_error() with
  hci_req_sync_lock (git-fixes).
- hwmon: axi-fan: don't use driver_override as IRQ name
  (git-fixes).
- ALSA: hda/realtek: Add headset jack quirk for Thinkpad X390
  (stable-fixes).
- ALSA: hda/realtek: add HP Laptop 14s-dr5xxx mute LED quirk
  (stable-fixes).
- ASoC: fsl_easrc: Fix event generation in
  fsl_easrc_iec958_set_reg() (stable-fixes).
- ASoC: fsl_easrc: Fix event generation in
  fsl_easrc_iec958_put_bits() (stable-fixes).
- HID: mcp2221: cancel last I2C command on read error
  (stable-fixes).
- HID: asus: avoid memory leak in asus_report_fixup()
  (stable-fixes).
- HID: magicmouse: avoid memory leak in magicmouse_report_fixup()
  (stable-fixes).
- HID: apple: avoid memory leak in apple_report_fixup()
  (stable-fixes).
- platform/x86: intel-hid: Enable 5-button array on ThinkPad X1
  Fold 16 Gen 1 (stable-fixes).
- platform/x86: intel-hid: Add Dell 14 Plus 2-in-1 to
  dmi_vgbs_allow_list (stable-fixes).
- platform/x86: touchscreen_dmi: Add quirk for y-inverted Goodix
  touchscreen on SUPI S10 (stable-fixes).
- mtd: spi-nor: core: avoid odd length/address writes in 8D-8D-8D
  mode (stable-fixes).
- Bluetooth: hci_sync: Remove remaining dependencies of
  hci_request (stable-fixes).
- Bluetooth: Remove 3 repeated macro definitions (stable-fixes).
- hwmon: (axi-fan-control) Make use of dev_err_probe()
  (stable-fixes).
- hwmon: (axi-fan-control) Use device firmware agnostic API
  (stable-fixes).
- dmaengine: idxd: Remove usage of the deprecated ida_simple_xx()
  API (stable-fixes).
- commit a6c10e6</changelog>
  <changelog author="tiwai@suse.de" date="1775217601">- Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync
  (git-fixes).
- wifi: ath11k: Pass the correct value of each TID during a stop
  AMPDU session (git-fixes).
- ASoC: Intel: boards: fix unmet dependency on PINCTRL
  (git-fixes).
- drm/amdgpu: prevent immediate PASID reuse case (stable-fixes).
- usb: core: new quirk to handle devices with zero configurations
  (stable-fixes).
- drm/amdgpu: fix gpu idle power consumption issue for gfx v12
  (stable-fixes).
- drm/ttm/tests: Fix build failure on PREEMPT_RT (stable-fixes).
- commit 7612e81</changelog>
  <changelog author="tiwai@suse.de" date="1775217602">- mtd: spi-nor: core: avoid odd length/address reads on 8D-8D-8D
  mode (stable-fixes).
- commit 2d1bac8</changelog>
  <changelog author="tiwai@suse.de" date="1775304000">- gpio: mxc: map Both Edge pad wakeup to Rising Edge (git-fixes).
- drm/ioc32: stop speculation on the drm_compat_ioctl path
  (git-fixes).
- drm/ast: dp501: Fix initialization of SCU2C (git-fixes).
- accel/qaic: Handle DBC deactivation if the owner went away
  (git-fixes).
- drm/i915/dp: Use crtc_state-&gt;enhanced_framing properly on
  ivb/hsw CPU eDP (git-fixes).
- crypto: af-alg - fix NULL pointer dereference in scatterwalk
  (git-fixes).
- crypto: caam - fix overflow on long hmac keys (git-fixes).
- crypto: caam - fix DMA corruption on long hmac keys (git-fixes).
- commit 376a907</changelog>
  <changelog author="tiwai@suse.de" date="1775304001">- Revert "drm: Fix use-after-free on framebuffers and property
  blobs when calling drm_dev_unplug" (git-fixes).
- drm/i915/dsi: Don't do DSC horizontal timing adjustments in
  command mode (git-fixes).
- drm/amdgpu: Change AMDGPU_VA_RESERVED_TRAP_SIZE to 64KB
  (git-fixes).
- commit 79130c8</changelog>
  <changelog author="tiwai@suse.de" date="1775390400">- Input: synaptics-rmi4 - fix a locking bug in an error path
  (git-fixes).
- hwmon: (occ) Fix missing newline in occ_show_extended()
  (git-fixes).
- hwmon: (occ) Fix division by zero in occ_show_power_1()
  (git-fixes).
- hwmon: (tps53679) Fix device ID comparison and printing in
  tps53676_identify() (git-fixes).
- hwmon: (pxe1610) Check return value of page-select write in
  probe (git-fixes).
- commit 08cee84</changelog>
  <changelog author="tiwai@suse.de" date="1775476800">- misc: fastrpc: possible double-free of cctx-&gt;remote_heap
  (git-fixes).
- comedi: Reinit dev-&gt;spinlock between attachments to low-level
  drivers (git-fixes).
- comedi: me_daq: Fix potential overrun of firmware buffer
  (git-fixes).
- comedi: me4000: Fix potential overrun of firmware buffer
  (git-fixes).
- comedi: ni_atmio16d: Fix invalid clean-up after failed attach
  (git-fixes).
- iio: dac: ad5770r: fix error return in ad5770r_read_raw()
  (git-fixes).
- iio: accel: fix ADXL355 temperature signature value (git-fixes).
- iio: light: vcnl4035: fix scan buffer on big-endian (git-fixes).
- iio: adc: ti-adc161s626: fix buffer read on big-endian
  (git-fixes).
- iio: imu: bmi160: Remove potential undefined behavior in
  bmi160_config_pin() (git-fixes).
- iio: imu: bno055: fix BNO055_SCAN_CH_COUNT off by one
  (git-fixes).
- iio: gyro: mpu3050: Fix out-of-sequence free_irq() (git-fixes).
- iio: gyro: mpu3050: Move iio_device_register() to correct
  location (git-fixes).
- iio: gyro: mpu3050: Fix irq resource leak (git-fixes).
- iio: gyro: mpu3050: Fix incorrect free_irq() variable
  (git-fixes).
- iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and
  gyroscope only (git-fixes).
- usb: cdns3: gadget: fix state inconsistency on gadget init
  failure (git-fixes).
- usb: ulpi: fix double free in ulpi_register_interface() error
  path (git-fixes).
- usb: cdns3: gadget: fix NULL pointer dereference in ep_queue
  (git-fixes).
- usb: gadget: f_rndis: Protect RNDIS options with mutex
  (git-fixes).
- usb: gadget: f_subset: Fix unbalanced refcnt in geth_free
  (git-fixes).
- usb: dwc2: gadget: Fix spin_lock/unlock mismatch in
  dwc2_hsotg_udc_stop() (git-fixes).
- usb: ehci-brcm: fix sleep during atomic (git-fixes).
- USB: dummy-hcd: Fix interrupt synchronization error (git-fixes).
- USB: dummy-hcd: Fix locking/synchronization error (git-fixes).
- usb: usbtmc: Flush anchored URBs in usbtmc_release (git-fixes).
- usb: gadget: u_ether: Fix race between gether_disconnect and
  eth_stop (git-fixes).
- thunderbolt: Fix property read in nhi_wake_supported()
  (git-fixes).
- commit 4e3d5c2</changelog>
  <changelog author="tiwai@suse.de" date="1775476801">- usb: gadget: uvc: fix NULL pointer dereference during unbind
  race (git-fixes).
- commit 4a9ee96</changelog>
  <changelog author="tiwai@suse.de" date="1775476802">- usb: core: phy: avoid double use of 'usb3-phy' (git-fixes).
- commit 4e8787e</changelog>
  <changelog author="pfalcato@suse.de" date="1775476803">- tls: Purge async_hold in tls_decrypt_async_wait() (CVE-2026-23414
  bsc#1261496).
- commit 1058925</changelog>
  <changelog author="pfalcato@suse.de" date="1775476804">- net/sched: ets: fix divide by zero in the offload path
  (CVE-2026-23379 bsc#1260481).
- commit 3672900</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476805">- icmp: fix NULL pointer dereference in icmp_tag_validation()
  (CVE-2026-23398 bsc#1260730).
- net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled
  (CVE-2026-23293 bsc#1260486).
- commit 05f5f64</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476806">- clsact: Fix use-after-free in init/destroy rollback asymmetry
  (CVE-2026-23413 bsc#1261498).
- commit eaf3b22</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476807">- net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled
  (CVE-2026-23381 bsc#1260471).
- commit 21aa5bd</changelog>
  <changelog author="nik.borisov@suse.com" date="1775476808">- watchdog/perf: properly initialize the turbo mode timestamp and rearm  counter (bsc#1256504).
- commit c8a645c</changelog>
  <changelog author="mkubecek@suse.cz" date="1775563200">- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs
  and shared blocks (CVE-2026-23270 bsc#1259886).
- commit 00821f1</changelog>
  <changelog author="lduncan@suse.com" date="1775563201">- scsi: target: Fix recursive locking in __configfs_open_file()
  (CVE-2026-23292 bsc#1260500).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_session_usage_count() (CVE-2026-23193 bsc#1258414).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_conn_usage_count() (CVE-2026-23216 bsc#1258447).
- commit e7b5dcd</changelog>
  <changelog author="mkubecek@suse.cz" date="1775563202">- net/sched: teql: fix NULL pointer dereference in iptunnel_xmit
  on TEQL slave xmit (CVE-2026-23277 bsc#1259997).
- commit 852cc2c</changelog>
  <changelog author="tiwai@suse.de" date="1775563203">- soc: aspeed: socinfo: Mask table entries for accurate SoC ID
  matching (git-fixes).
- commit df6cd61</changelog>
</package>
<package pkgid="8e32b62ef119383a8c11233d9ee8152789663384a5ef57728de7499b0db3af48" name="kernel-default-devel" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.53.40.1"/>
  <changelog author="tiwai@suse.de" date="1775476800">- usb: gadget: uvc: fix NULL pointer dereference during unbind
  race (git-fixes).
- commit 4a9ee96</changelog>
  <changelog author="tiwai@suse.de" date="1775476801">- usb: core: phy: avoid double use of 'usb3-phy' (git-fixes).
- commit 4e8787e</changelog>
  <changelog author="pfalcato@suse.de" date="1775476802">- tls: Purge async_hold in tls_decrypt_async_wait() (CVE-2026-23414
  bsc#1261496).
- commit 1058925</changelog>
  <changelog author="pfalcato@suse.de" date="1775476803">- net/sched: ets: fix divide by zero in the offload path
  (CVE-2026-23379 bsc#1260481).
- commit 3672900</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476804">- icmp: fix NULL pointer dereference in icmp_tag_validation()
  (CVE-2026-23398 bsc#1260730).
- net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled
  (CVE-2026-23293 bsc#1260486).
- commit 05f5f64</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476805">- clsact: Fix use-after-free in init/destroy rollback asymmetry
  (CVE-2026-23413 bsc#1261498).
- commit eaf3b22</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476806">- net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled
  (CVE-2026-23381 bsc#1260471).
- commit 21aa5bd</changelog>
  <changelog author="nik.borisov@suse.com" date="1775476807">- watchdog/perf: properly initialize the turbo mode timestamp and rearm  counter (bsc#1256504).
- commit c8a645c</changelog>
  <changelog author="mkubecek@suse.cz" date="1775563200">- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs
  and shared blocks (CVE-2026-23270 bsc#1259886).
- commit 00821f1</changelog>
  <changelog author="lduncan@suse.com" date="1775563201">- scsi: target: Fix recursive locking in __configfs_open_file()
  (CVE-2026-23292 bsc#1260500).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_session_usage_count() (CVE-2026-23193 bsc#1258414).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_conn_usage_count() (CVE-2026-23216 bsc#1258447).
- commit e7b5dcd</changelog>
  <changelog author="mkubecek@suse.cz" date="1775563202">- net/sched: teql: fix NULL pointer dereference in iptunnel_xmit
  on TEQL slave xmit (CVE-2026-23277 bsc#1259997).
- commit 852cc2c</changelog>
  <changelog author="tiwai@suse.de" date="1775563203">- soc: aspeed: socinfo: Mask table entries for accurate SoC ID
  matching (git-fixes).
- commit df6cd61</changelog>
  <changelog author="nstange@suse.de" date="1777550400">- crypto: scatterwalk - Add memcpy_sglist (bsc#1262573
  CVE-2026-31431).
- commit 28aed48</changelog>
  <changelog author="nstange@suse.de" date="1777550401">- crypto: scatterwalk - Fix memcpy_sglist() to always succeed
  (bsc#1262573 CVE-2026-31431).
- commit c2ad254</changelog>
  <changelog author="nstange@suse.de" date="1777550402">- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- commit 8a67d67</changelog>
  <changelog author="nstange@suse.de" date="1777550403">- crypto: algif_aead - Revert to operating out-of-place
  (bsc#1262573 CVE-2026-31431).
- commit eb1a8c9</changelog>
  <changelog author="nstange@suse.de" date="1777550404">- kABI: Restore af_alg_{count,pull}_tsgl() signatures (bsc#1262573
  CVE-2026-31431).
- commit b418ef6</changelog>
  <changelog author="nstange@suse.de" date="1777636800">- crypto: authenc - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- Refresh
  patches.suse/crypto-authencesn-reject-too-short-AAD-assoclen-8-to.patch
- commit 24731ba</changelog>
  <changelog author="nstange@suse.de" date="1777636801">- crypto: authencesn - Do not place hiseq at end of dst for
  out-of-place decryption (bsc#1262573 CVE-2026-31431).
- commit 2c8047b</changelog>
  <changelog author="nstange@suse.de" date="1777636802">- crypto: authencesn - Fix src offset when decrypting in-place
  (bsc#1262573 CVE-2026-31431).
- commit 4921c60</changelog>
</package>
<package pkgid="71551770e8a7d65d02aa8d6b5d48f1ba31bfb75a001b40e4fbdebcafaadd0551" name="kernel-default-devel" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.53.45.1"/>
  <changelog author="pfalcato@suse.de" date="1775476800">- tls: Purge async_hold in tls_decrypt_async_wait() (CVE-2026-23414
  bsc#1261496).
- commit 1058925</changelog>
  <changelog author="pfalcato@suse.de" date="1775476801">- net/sched: ets: fix divide by zero in the offload path
  (CVE-2026-23379 bsc#1260481).
- commit 3672900</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476802">- icmp: fix NULL pointer dereference in icmp_tag_validation()
  (CVE-2026-23398 bsc#1260730).
- net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled
  (CVE-2026-23293 bsc#1260486).
- commit 05f5f64</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476803">- clsact: Fix use-after-free in init/destroy rollback asymmetry
  (CVE-2026-23413 bsc#1261498).
- commit eaf3b22</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476804">- net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled
  (CVE-2026-23381 bsc#1260471).
- commit 21aa5bd</changelog>
  <changelog author="nik.borisov@suse.com" date="1775476805">- watchdog/perf: properly initialize the turbo mode timestamp and rearm  counter (bsc#1256504).
- commit c8a645c</changelog>
  <changelog author="mkubecek@suse.cz" date="1775563200">- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs
  and shared blocks (CVE-2026-23270 bsc#1259886).
- commit 00821f1</changelog>
  <changelog author="lduncan@suse.com" date="1775563201">- scsi: target: Fix recursive locking in __configfs_open_file()
  (CVE-2026-23292 bsc#1260500).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_session_usage_count() (CVE-2026-23193 bsc#1258414).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_conn_usage_count() (CVE-2026-23216 bsc#1258447).
- commit e7b5dcd</changelog>
  <changelog author="mkubecek@suse.cz" date="1775563202">- net/sched: teql: fix NULL pointer dereference in iptunnel_xmit
  on TEQL slave xmit (CVE-2026-23277 bsc#1259997).
- commit 852cc2c</changelog>
  <changelog author="tiwai@suse.de" date="1775563203">- soc: aspeed: socinfo: Mask table entries for accurate SoC ID
  matching (git-fixes).
- commit df6cd61</changelog>
  <changelog author="nstange@suse.de" date="1777550400">- crypto: scatterwalk - Add memcpy_sglist (bsc#1262573
  CVE-2026-31431).
- commit 28aed48</changelog>
  <changelog author="nstange@suse.de" date="1777550401">- crypto: scatterwalk - Fix memcpy_sglist() to always succeed
  (bsc#1262573 CVE-2026-31431).
- commit c2ad254</changelog>
  <changelog author="nstange@suse.de" date="1777550402">- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- commit 8a67d67</changelog>
  <changelog author="nstange@suse.de" date="1777550403">- crypto: algif_aead - Revert to operating out-of-place
  (bsc#1262573 CVE-2026-31431).
- commit eb1a8c9</changelog>
  <changelog author="nstange@suse.de" date="1777550404">- kABI: Restore af_alg_{count,pull}_tsgl() signatures (bsc#1262573
  CVE-2026-31431).
- commit b418ef6</changelog>
  <changelog author="nstange@suse.de" date="1777636800">- crypto: authenc - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- Refresh
  patches.suse/crypto-authencesn-reject-too-short-AAD-assoclen-8-to.patch
- commit 24731ba</changelog>
  <changelog author="nstange@suse.de" date="1777636801">- crypto: authencesn - Do not place hiseq at end of dst for
  out-of-place decryption (bsc#1262573 CVE-2026-31431).
- commit 2c8047b</changelog>
  <changelog author="nstange@suse.de" date="1777636802">- crypto: authencesn - Fix src offset when decrypting in-place
  (bsc#1262573 CVE-2026-31431).
- commit 4921c60</changelog>
  <changelog author="fmancera@suse.de" date="1778155200">- supported.conf: drop rxrpc and afs_fs (bsc#1264450)
- commit bf6ec71</changelog>
  <changelog author="jeffm@suse.com" date="1778241600">- xfrm: esp: avoid in-place decrypt on shared skb frags (bsc#1264449 bsc#1264450).
- commit 10e4355</changelog>
</package>
<package pkgid="368fbade1a31e695c511821329ae4fc82969b7f4124cd7b9a4ca631b50f29b0c" name="kernel-default-devel" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.53.52.1"/>
  <changelog author="nik.borisov@suse.com" date="1775476800">- watchdog/perf: properly initialize the turbo mode timestamp and rearm  counter (bsc#1256504).
- commit c8a645c</changelog>
  <changelog author="mkubecek@suse.cz" date="1775563200">- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs
  and shared blocks (CVE-2026-23270 bsc#1259886).
- commit 00821f1</changelog>
  <changelog author="lduncan@suse.com" date="1775563201">- scsi: target: Fix recursive locking in __configfs_open_file()
  (CVE-2026-23292 bsc#1260500).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_session_usage_count() (CVE-2026-23193 bsc#1258414).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_conn_usage_count() (CVE-2026-23216 bsc#1258447).
- commit e7b5dcd</changelog>
  <changelog author="mkubecek@suse.cz" date="1775563202">- net/sched: teql: fix NULL pointer dereference in iptunnel_xmit
  on TEQL slave xmit (CVE-2026-23277 bsc#1259997).
- commit 852cc2c</changelog>
  <changelog author="tiwai@suse.de" date="1775563203">- soc: aspeed: socinfo: Mask table entries for accurate SoC ID
  matching (git-fixes).
- commit df6cd61</changelog>
  <changelog author="nstange@suse.de" date="1777550400">- crypto: scatterwalk - Add memcpy_sglist (bsc#1262573
  CVE-2026-31431).
- commit 28aed48</changelog>
  <changelog author="nstange@suse.de" date="1777550401">- crypto: scatterwalk - Fix memcpy_sglist() to always succeed
  (bsc#1262573 CVE-2026-31431).
- commit c2ad254</changelog>
  <changelog author="nstange@suse.de" date="1777550402">- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- commit 8a67d67</changelog>
  <changelog author="nstange@suse.de" date="1777550403">- crypto: algif_aead - Revert to operating out-of-place
  (bsc#1262573 CVE-2026-31431).
- commit eb1a8c9</changelog>
  <changelog author="nstange@suse.de" date="1777550404">- kABI: Restore af_alg_{count,pull}_tsgl() signatures (bsc#1262573
  CVE-2026-31431).
- commit b418ef6</changelog>
  <changelog author="nstange@suse.de" date="1777636800">- crypto: authenc - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- Refresh
  patches.suse/crypto-authencesn-reject-too-short-AAD-assoclen-8-to.patch
- commit 24731ba</changelog>
  <changelog author="nstange@suse.de" date="1777636801">- crypto: authencesn - Do not place hiseq at end of dst for
  out-of-place decryption (bsc#1262573 CVE-2026-31431).
- commit 2c8047b</changelog>
  <changelog author="nstange@suse.de" date="1777636802">- crypto: authencesn - Fix src offset when decrypting in-place
  (bsc#1262573 CVE-2026-31431).
- commit 4921c60</changelog>
  <changelog author="nik.borisov@suse.com" date="1777982400">- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's  op cache (bsc#1264013 CVE-2025-54518).
- commit 5f11806</changelog>
  <changelog author="fmancera@suse.de" date="1778155200">- supported.conf: drop rxrpc and afs_fs (bsc#1264450)
- commit c00b898</changelog>
  <changelog author="jeffm@suse.com" date="1778241600">- xfrm: esp: avoid in-place decrypt on shared skb frags (bsc#1264449 bsc#1264450).
- commit f187bc6</changelog>
  <changelog author="pfalcato@suse.de" date="1778673600">- net: skbuff: propagate shared-frag marker through pskb_copy()
  (CVE-2026-46300 bsc#1265209).
- commit 4c684ee</changelog>
  <changelog author="mhocko@suse.com" date="1778760000">- io-wq: check that the predecessor is hashed in
  io_wq_remove_pending() (git-fixes).
- commit 447a089</changelog>
  <changelog author="mhocko@suse.com" date="1778846400">- ptrace: slightly saner 'get_dumpable()' logic (bsc#1265308).
- commit a7685e1</changelog>
  <changelog author="mhocko@suse.com" date="1778846401">- kabi assert ptrace: slightly saner 'get_dumpable()' logic
  (bsc#1265308).
- kabi ptrace: slightly saner 'get_dumpable()' logic
  (bsc#1265308).
- commit 51e3e5d</changelog>
</package>
<package pkgid="815acafa0a9e4301ac53e36d210e4e7a72180d42e6550cf5840509a6c94d103e" name="kernel-default-devel" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.53.6.1"/>
  <changelog author="ohering@suse.de" date="1751025600">- scsi: storvsc: Increase the timeouts to storvsc_timeout (git-fixes).
- net: mana: Add support for Multi Vports on Bare metal (bsc#1244229).
- scsi: storvsc: Don't report the host packet status as the hv status (git-fixes).
- commit cde971c</changelog>
  <changelog author="tiwai@suse.de" date="1751025601">- HID: lenovo: Restrict F7/9/11 mode to compact keyboards only
  (git-fixes).
- HID: wacom: fix kobject reference count leak (git-fixes).
- HID: wacom: fix memory leak on sysfs attribute creation failure
  (git-fixes).
- HID: wacom: fix memory leak on kobject creation failure
  (git-fixes).
- wifi: mac80211: fix beacon interval calculation overflow
  (git-fixes).
- commit 8d2d6ad</changelog>
  <changelog author="joao.povoas@suse.com" date="1751025602">- Update
  patches.suse/ASoC-soc-pcm-don-t-use-soc_pcm_ret-on-.prepare-callb.patch
  (stable-fixes CVE-2024-58077 bsc#1239090).
- Update
  patches.suse/Bluetooth-btbcm-Fix-NULL-deref-in-btbcm_get_board_na.patch
  (git-fixes CVE-2024-57988 bsc#1237910).
- Update
  patches.suse/Bluetooth-btrtl-check-for-NULL-in-btrtl_setup_realte.patch
  (git-fixes CVE-2024-57987 bsc#1237905).
- Update
  patches.suse/RDMA-bnxt_re-Add-sanity-checks-on-rdev-validity.patch
  (bsc#1237200 CVE-2025-21901 bsc#1240579).
- Update patches.suse/RDMA-rtrs-Add-missing-deinit-call.patch
  (git-fixes CVE-2025-21805 bsc#1238741).
- Update
  patches.suse/amdkfd-properly-free-gang_ctx_bo-when-failed-to-init.patch
  (git-fixes CVE-2025-21842 bsc#1239063).
- Update
  patches.suse/cxl-mem-Fix-no-cxl_nvd-during-pmem-region-auto-assem.patch
  (jsc#PED-10836 CVE-2024-41085 bsc#1228478).
- Update
  patches.suse/cxl-pci-Skip-to-handle-RAS-errors-if-CXL.mem-device-.patch
  (jsc#PED-10836 CVE-2024-26762 bsc#1230337).
- Update
  patches.suse/drm-amd-display-Fix-invalid-context-error-in-dml-hel.patch
  (git-fixes CVE-2025-37965 bsc#1244174).
- Update
  patches.suse/drm-amdgpu-init-return-value-in-amdgpu_ttm_clear_buf.patch
  (git-fixes CVE-2025-21987 bsc#1240798).
- Update
  patches.suse/drm-amdkfd-Fix-NULL-Pointer-Dereference-in-KFD-queue.patch
  (git-fixes CVE-2025-21940 bsc#1240702).
- Update
  patches.suse/drm-i915-gt-Use-spin_lock_irqsave-in-interruptible-c.patch
  (git-fixes CVE-2025-21849 bsc#1239485).
- Update
  patches.suse/drm-imagination-avoid-deadlock-on-fence-release.patch
  (git-fixes CVE-2025-21911 bsc#1240589).
- Update
  patches.suse/drm-xe-hmm-Don-t-dereference-struct-page-pointers-wi.patch
  (git-fixes CVE-2025-21939 bsc#1240710).
- Update patches.suse/drm-xe-userptr-fix-EFAULT-handling.patch
  (git-fixes CVE-2025-21880 bsc#1240170).
- Update
  patches.suse/gpu-host1x-Fix-a-use-of-uninitialized-mutex.patch
  (git-fixes CVE-2025-21824 bsc#1238478).
- Update
  patches.suse/iommu-Fix-potential-memory-leak-in-iopf_queue_remove.patch
  (git-fixes CVE-2025-21770 bsc#1238495).
- Update
  patches.suse/media-intel-ipu6-remove-cpu-latency-qos-request-on-e.patch
  (git-fixes CVE-2024-58004 bsc#1238508).
- Update
  patches.suse/net-smc-do-not-leave-a-dangling-sk-pointer-in-__smc_create.patch
  (jsc#PED-10299 bsc#1241689 CVE-2024-50293 bsc#1233482).
- Update
  patches.suse/net-smc-fix-lacks-of-icsk_syn_mss-with-IPPROTO_SMC.patch
  (jsc#PED-10299 bsc#1241689 CVE-2024-50034 bsc#1231913).
- Update
  patches.suse/powerpc-pseries-iommu-Don-t-unset-window-if-it-was-n.patch
  (jsc#PED-10539 git-fixes CVE-2025-21713 bsc#1237887).
- Update
  patches.suse/wifi-ath12k-Fix-for-out-of-bound-access-error.patch
  (bsc#1240998 CVE-2024-58015 bsc#1238995).
- Update
  patches.suse/wifi-ath12k-fix-use-after-free-in-ath12k_dp_cc_clean.patch
  (bsc#1240998 CVE-2024-56541 bsc#1235064).
- Update
  patches.suse/wifi-iwlwifi-mvm-avoid-NULL-pointer-dereference-cf704a7.patch
  (git-fixes CVE-2024-58062 bsc#1238965).
- commit 0597d89</changelog>
  <changelog author="joao.povoas@suse.com" date="1751025603">- Update
  patches.suse/HID-uclogic-Add-NULL-check-in-uclogic_input_configur.patch
  (git-fixes CVE-2025-38007 bsc#1244938).
- Update
  patches.suse/RDMA-core-Fix-KASAN-slab-use-after-free-Read-in-ib_r.patch
  (git-fixes CVE-2025-38022 bsc#1245003).
- Update
  patches.suse/RDMA-rxe-Fix-slab-use-after-free-Read-in-rxe_queue_c.patch
  (git-fixes CVE-2025-38024 bsc#1245025).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-csu.patch
  (bsc#1243342 CVE-2025-38059 bsc#1244759).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1236208 CVE-2025-21658).
- Update
  patches.suse/can-bcm-add-locking-for-bcm_op-runtime-updates.patch
  (git-fixes CVE-2025-38004 bsc#1244274).
- Update
  patches.suse/can-bcm-add-missing-rcu-read-protection-for-procfs-c.patch
  (git-fixes CVE-2025-38003 bsc#1244275).
- Update
  patches.suse/crypto-algif_hash-fix-double-free-in-hash_accept.patch
  (git-fixes CVE-2025-38079 bsc#1245217).
- Update
  patches.suse/crypto-lzo-Fix-compression-buffer-overrun.patch
  (stable-fixes CVE-2025-38068 bsc#1245210).
- Update
  patches.suse/dmaengine-idxd-Refactor-remove-call-with-idxd_cleanu.patch
  (git-fixes CVE-2025-38014 bsc#1244732).
- Update
  patches.suse/dmaengine-idxd-fix-memory-leak-in-error-handling-pat-46a5cca.patch
  (git-fixes CVE-2025-38015 bsc#1244789).
- Update
  patches.suse/dmaengine-ti-k3-udma-Add-missing-locking.patch
  (git-fixes CVE-2025-38005 bsc#1244727).
- Update
  patches.suse/drm-amd-display-Increase-block_sequence-array-size.patch
  (stable-fixes CVE-2025-38080 bsc#1244738).
- Update
  patches.suse/ext4-goto-right-label-out_mmap_sem-in-ext4_setattr.patch
  (bsc#1242556 CVE-2025-22120 bsc#1241592).
- Update
  patches.suse/firmware-arm_ffa-Set-dma_mask-for-ffa-devices.patch
  (stable-fixes CVE-2025-38043 bsc#1245081).
- Update patches.suse/media-cx231xx-set-device_caps-for-417.patch
  (stable-fixes CVE-2025-38044 bsc#1245082).
- Update
  patches.suse/net-handshake-Fix-handshake_req_destroy_test1.patch
  (git-fixes CVE-2024-26831 bsc#1223008).
- Update
  patches.suse/net-mlx5e-Disable-MACsec-offload-for-uplink-represen.patch
  (git-fixes CVE-2025-38020 bsc#1245001).
- Update patches.suse/net_sched-prio-fix-a-race-in-prio_tune.patch
  (git-fixes CVE-2025-38083 bsc#1245183).
- Update
  patches.suse/nfs-handle-failure-of-nfs_get_lock_context-in-unlock-path.patch
  (git-fixes CVE-2025-38023 bsc#1245004).
- Update patches.suse/orangefs-Do-not-truncate-file-size.patch
  (git-fixes CVE-2025-38065 bsc#1244906).
- Update
  patches.suse/padata-do-not-leak-refcount-in-reorder_work.patch
  (git-fixes CVE-2025-38031 bsc#1245046).
- Update
  patches.suse/phy-tegra-xusb-Use-a-bitmask-for-UTMI-pad-power-stat.patch
  (git-fixes CVE-2025-38010 bsc#1244996).
- Update
  patches.suse/platform-x86-dell-wmi-sysman-Avoid-buffer-overflow-i.patch
  (git-fixes CVE-2025-38077 bsc#1244736).
- Update
  patches.suse/regulator-max20086-fix-invalid-memory-access.patch
  (git-fixes CVE-2025-38027 bsc#1245042).
- Update
  patches.suse/s390-pci-Fix-duplicate-pci_dev_put-in-disable_slot-w.patch
  (git-fixes bsc#1244145 CVE-2025-37946 bsc#1243506).
- Update
  patches.suse/s390-pci-fix-potential-double-remove-of-hotplug-slot.patch
  (bsc#1244145 CVE-2024-56699 bsc#1235490).
- Update
  patches.suse/sched-numa-fix-memory-leak-due-to-the-overwritten-vma-numab_state.patch
  (git fixes (sched/numa) CVE-2024-56613 bsc#1244176).
- Update
  patches.suse/serial-mctrl_gpio-split-disable_ms-into-sync-and-no_.patch
  (git-fixes CVE-2025-38040 bsc#1245078).
- Update
  patches.suse/spi-rockchip-Fix-register-out-of-bounds-access.patch
  (stable-fixes CVE-2025-38081 bsc#1244739).
- Update
  patches.suse/usb-typec-ucsi-displayport-Fix-NULL-pointer-access.patch
  (git-fixes CVE-2025-37994 bsc#1243823).
- Update
  patches.suse/vhost-scsi-Fix-handling-of-multiple-calls-to-vhost_s.patch
  (git-fixes CVE-2025-22083 bsc#1241414).
- Update
  patches.suse/wifi-cfg80211-fix-out-of-bounds-access-during-multi-.patch
  (git-fixes CVE-2025-37973 bsc#1244172).
- Update patches.suse/wifi-iwlwifi-fix-debug-actions-order.patch
  (stable-fixes CVE-2025-38045 bsc#1245083).
- Update
  patches.suse/wifi-mac80211-Set-n_channels-after-allocating-struct.patch
  (git-fixes CVE-2025-38013 bsc#1244731).
- Update
  patches.suse/wifi-mt76-disable-napi-on-driver-removal.patch
  (git-fixes CVE-2025-38009 bsc#1244995).
- commit fee1c31</changelog>
  <changelog author="tiwai@suse.de" date="1751198400">- i2c: tiny-usb: disable zero-length read messages (git-fixes).
- i2c: robotfuzz-osif: disable zero-length read messages
  (git-fixes).
- drm/i915: fix build error some more (git-fixes).
- ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X507UAR
  (git-fixes).
- ALSA: usb-audio: Fix out-of-bounds read in
  snd_usb_get_audioformat_uac3() (git-fixes).
- ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged
  (stable-fixes).
- ALSA: usb-audio: Rename ALSA kcontrol PCM and PCM1 for the
  KTMicro sound card (stable-fixes).
- ALSA: hda/intel: Add Thinkpad E15 to PM deny list
  (stable-fixes).
- ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330
  (stable-fixes).
- drivers/rapidio/rio_cm.c: prevent possible heap overwrite
  (stable-fixes).
- watchdog: da9052_wdt: respect TWDMIN (stable-fixes).
- watchdog: fix watchdog may detect false positive of softlockup
  (stable-fixes).
- fbcon: Make sure modelist not set on unregistered console
  (stable-fixes).
- bus: fsl-mc: increase MC_CMD_COMPLETION_TIMEOUT_MS value
  (stable-fixes).
- i2c: designware: Invoke runtime suspend on quick slave
  re-registration (stable-fixes).
- i2c: npcm: Add clock toggle recovery (stable-fixes).
- pinctrl: armada-37xx: propagate error from
  armada_37xx_pmx_set_by_name() (stable-fixes).
- pinctrl: armada-37xx: propagate error from
  armada_37xx_gpio_get_direction() (stable-fixes).
- pinctrl: armada-37xx: propagate error from
  armada_37xx_pmx_gpio_set_direction() (stable-fixes).
- pinctrl: armada-37xx: propagate error from
  armada_37xx_gpio_get() (stable-fixes).
- pinctrl: mcp23s08: Reset all pins to input at probe
  (stable-fixes).
- software node: Correct a OOB check in
  software_node_get_reference_args() (stable-fixes).
- wifi: mt76: mt7996: drop fragments with multicast or broadcast
  RA (stable-fixes).
- wifi: mt76: mt7921: add 160 MHz AP for mt7922 device
  (stable-fixes).
- wifi: mt76: mt76x2: Add support for LiteOn WN4516R,WN4519R
  (stable-fixes).
- wifi: ath12k: fix macro definition HAL_RX_MSDU_PKT_LENGTH_GET
  (stable-fixes).
- wifi: ath12k: fix a possible dead lock caused by ab-&gt;base_lock
  (stable-fixes).
- wifi: ath11k: Fix QMI memory reuse logic (stable-fixes).
- wifi: rtw89: leave idle mode when setting WEP encryption for
  AP mode (stable-fixes).
- wifi: mac80211: do not offer a mesh path if forwarding is
  disabled (stable-fixes).
- wifi: iwlwifi: pcie: make sure to lock rxq-&gt;read (stable-fixes).
- wifi: mac80211_hwsim: Prevent tsf from setting if beacon is
  disabled (stable-fixes).
- wifi: ath12k: fix failed to set mhi state error during reboot
  with hardware grouping (stable-fixes).
- wifi: ath12k: fix link valid field initialization in the
  monitor Rx (stable-fixes).
- wifi: ath12k: fix incorrect CE addresses (stable-fixes).
- wifi: ath12k: Pass correct values of center freq1 and center
  freq2 for 160 MHz (stable-fixes).
- wifi: mac80211: VLAN traffic in multicast path (stable-fixes).
- wifi: iwlwifi: Add missing MODULE_FIRMWARE for Qu-c0-jf-b0
  (stable-fixes).
- usbnet: asix AX88772: leave the carrier control to phylink
  (stable-fixes).
- PM: runtime: fix denying of auto suspend in
  pm_suspend_timer_fn() (stable-fixes).
- ACPI: battery: negate current when discharging (stable-fixes).
- ACPICA: Avoid sequence overread in call to strncmp()
  (stable-fixes).
- ACPICA: utilities: Fix overflow check in vsnprintf()
  (stable-fixes).
- ACPICA: fix acpi parse and parseext cache leaks (stable-fixes).
- ACPICA: fix acpi operand cache leak in dswstate.c
  (stable-fixes).
- ACPI: bus: Bail out if acpi_kobj registration fails
  (stable-fixes).
- mmc: Add quirk to disable DDR50 tuning (stable-fixes).
- power: supply: bq27xxx: Retrieve again when busy (stable-fixes).
- power: supply: collie: Fix wakeup source leaks on device unbind
  (stable-fixes).
- ASoC: amd: yc: Add quirk for Lenovo Yoga Pro 7 14ASP9
  (stable-fixes).
- ASoC: tegra210_ahub: Add check to of_device_get_match_data()
  (stable-fixes).
- ASoC: tas2770: Power cycle amp on ISENSE/VSENSE change
  (stable-fixes).
- Input: sparcspkr - avoid unannotated fall-through
  (stable-fixes).
- commit 0dc7dde</changelog>
  <changelog author="tiwai@suse.de" date="1751198401">- drm/xe: Process deferred GGTT node removals on device unwind
  (git-fixes).
- drm/xe/display: Add check for alloc_ordered_workqueue()
  (git-fixes).
- drm/amd: Adjust output for discovery error handling (git-fixes).
- drm/xe/bmg: Update Wa_16023588340 (git-fixes).
- drm/v3d: Avoid NULL pointer dereference in
  `v3d_job_update_stats()` (stable-fixes).
- PCI: Add ACS quirk for Loongson PCIe (stable-fixes).
- wifi: mt76: mt7925: introduce thermal protection (stable-fixes).
- wifi: mac80211: validate SCAN_FLAG_AP in scan request during
  MLO (stable-fixes).
- wifi: rtw89: 8922a: fix TX fail with wrong VCO setting
  (stable-fixes).
- wifi: iwlwifi: mvm: fix beacon CCK flag (stable-fixes).
- wireless: purelifi: plfxlc: fix memory leak in
  plfxlc_usb_wreq_asyn() (stable-fixes).
- wifi: ath12k: using msdu end descriptor to check for rx
  multicast packets (stable-fixes).
- ACPI: Add missing prototype for non CONFIG_SUSPEND/CONFIG_X86
  case (stable-fixes).
- drm/amdgpu: read back register after written for VCN v4.0.5
  (stable-fixes).
- wifi: rtw89: phy: add dummy C2H event handler for report of
  TAS power (stable-fixes).
- drm/xe: Wire up device shutdown handler (stable-fixes).
- commit 59cc8a5</changelog>
  <changelog author="tiwai@suse.de" date="1751198402">- drm/xe/gt: Update handling of xe_force_wake_get return
  (stable-fixes).
- Refresh
  patches.suse/drm-xe-Fix-GT-for-each-engine-workarounds.patch.
- commit 2738ff8</changelog>
  <changelog author="pjakobsson@suse.de" date="1751284800">- drm/amdgpu: csa unmap use uninterruptible lock (CVE-2025-38011
  bsc#1244729).
- commit d370e7c</changelog>
  <changelog author="tiwai@suse.de" date="1751284801">- staging: rtl8723bs: Avoid memset() in aes_cipher() and
  aes_decipher() (git-fixes).
- serial: imx: Restore original RXTL for console to fix data loss
  (git-fixes).
- commit 652de47</changelog>
  <changelog author="tiwai@suse.de" date="1751284802">- serial: core: restore of_node information in sysfs (git-fixes).
- commit 6ac0cc6</changelog>
  <changelog author="osalvador@suse.de" date="1751284803">- mm/hugetlb: unshare page tables during VMA split, not before
  (bsc#1245431).
- commit cdfa193</changelog>
  <changelog author="osalvador@suse.de" date="1751284804">- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
  (bsc#1245431).
- commit 0b96583</changelog>
  <changelog author="osalvador@suse.de" date="1751284805">- mm/hugetlb: unshare page tables during VMA split, not before
  (bsc#1245431).
- commit bf8eb79</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1751284806">- netlink: specs: dpll: replace underscores with dashes in names
  (git-fixes).
- bnxt: properly flush XDP redirect lists (git-fixes).
- e1000e: set fixed clock frequency indication for Nahum 11 and
  Nahum 13 (git-fixes).
- net: ice: Perform accurate aRFS flow match (git-fixes).
- net/mlx5e: Fix leak of Geneve TLV option object (git-fixes).
- net/mlx5: Fix return value when searching for existing flow
  group (git-fixes).
- net/mlx5: Fix ECVF vports unload on shutdown flow (git-fixes).
- net/mlx5: Ensure fw pages are always allocated on same NUMA
  (git-fixes).
- i40e: retry VFLR handling if there is ongoing VF reset
  (git-fixes).
- i40e: return false from i40e_reset_vf if reset is in progress
  (git-fixes).
- gve: add missing NULL check for gve_alloc_pending_packet()
  in TX DQO (git-fixes).
- ice: fix rebuilding the Tx scheduler tree for large queue counts
  (git-fixes).
- ice: create new Tx scheduler nodes for new queues only
  (git-fixes).
- ice: fix Tx scheduler error handling in XDP callback
  (git-fixes).
- net/mlx4_en: Prevent potential integer overflow calculating Hz
  (git-fixes).
- gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt
  (git-fixes).
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid()
  (git-fixes).
- net/mlx5_core: Add error handling
  inmlx5_query_nic_vport_qkey_viol_cntr() (git-fixes).
- idpf: fix null-ptr-deref in idpf_features_check (CVE-2025-38053
  bsc#1244746).
- ice: Fix LACP bonds without SRIOV environment (git-fixes).
- ice: fix vf-&gt;num_mac count with port representors (git-fixes).
- devlink: fix port dump cmd type (git-fixes).
- devlink: Fix referring to hw_addr attribute during state
  validation (git-fixes).
- netlink: fix potential sleeping issue in mqueue_flush_file
  (git-fixes).
- commit 6dccf5f</changelog>
  <changelog author="osalvador@suse.de" date="1751284807">- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
  (bsc#1245431).
- commit dd145d5</changelog>
  <changelog author="ailiop@suse.com" date="1751284808">- nfsd: nfsd4_spo_must_allow() must check this is a v4 compound
  request (git-fixes).
- commit 784f61d</changelog>
  <changelog author="ohering@suse.de" date="1751284809">- add bug reference to existing hv_storvsc change (bsc#1245455).
- net: mana: Record doorbell physical address in PF mode (bsc#1244229).
- commit 1c553b0</changelog>
  <changelog author="tiwai@suse.de" date="1751371200">- rtc: cmos: use spin_lock_irqsave in cmos_interrupt (git-fixes).
- commit d8e756f</changelog>
  <changelog author="pfalcato@suse.de" date="1751371201">- perf/x86/intel: Fix segfault with PEBS-via-PT with sample_freq
  (CVE-2025-38055 bsc#1244747).
- commit 144da01</changelog>
  <changelog author="oneukum@suse.com" date="1751371202">- r8152: add vendor/device ID pair for Dell Alienware AW1022z
  (git-fixes).
- commit 9bd4e20</changelog>
</package>
<package pkgid="afb1a6935af2929358e02e0997a2e0262d1d3fa267d9620095390bfbd9a268df" name="kernel-devel" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="150700.53.11.1"/>
  <changelog author="ailiop@suse.com" date="1754913600">- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY
  (git-fixes).
- commit fd58755</changelog>
  <changelog author="ailiop@suse.com" date="1754913601">- sunrpc: fix client side handling of tls alerts (git-fixes).
- commit 4c093f3</changelog>
  <changelog author="ailiop@suse.com" date="1754913602">- NFS: Fix the setting of capabilities when automounting a new
  filesystem (git-fixes).
- commit fabe208</changelog>
  <changelog author="tzimmermann@suse.com" date="1754913603">- drm/amdgpu: Add basic validation for RAS header (bsc#1247252 CVE-2025-38426)
- commit 5d23e74</changelog>
  <changelog author="ailiop@suse.com" date="1754913604">- sched: Add test_and_clear_wake_up_bit() and
  atomic_dec_and_wake_up() (git-fixes).
- commit 3754627</changelog>
  <changelog author="ailiop@suse.com" date="1754913605">- NFS: Fix wakeup of __nfs_lookup_revalidate() in
  unblock_revalidate() (git-fixes).
- commit 80e576f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1754913606">- netlink: avoid infinite retry looping in netlink_unicast()
  (CVE-2025-38465 bsc#1247118).
- net: mana: Set tx_packets to post gso processing packet count
  (bsc#1245731).
- net: mana: Allocate MSI-X vectors dynamically (bsc#1245457).
- net: mana: Allow irq_setup() to skip cpus for affinity
  (bsc#1245457).
- net: mana: explain irq_setup() algorithm (bsc#1245457).
- PCI: hv: Allow dynamic MSI-X vector allocation (bsc#1245457).
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X
  allocations (bsc#1245457).
- net: mana: Add handler for hardware servicing events
  (bsc#1245730).
- net: mana: Expose additional hardware counters for drop and
  TC via ethtool (bsc#1245729).
- hv_netvsc: Use VF's tso_max_size value when data path is VF
  (bsc#1246203).
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE
  (bsc#1246203).
- commit bdd7f41</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1754913607">- net: mana: Add debug logs in MANA network driver (bsc#1246212).
- Refresh
  patches.suse/msft-hv-3280-net-mana-Add-support-for-Multi-Vports-on-Bare-metal.patch.
- commit 1b4ad82</changelog>
  <changelog author="ematsumiya@suse.de" date="1754913608">- [SMB3] send channel sequence number in SMB3 requests after
  reconnects (git-fixes).
- commit baa81e9</changelog>
  <changelog author="ematsumiya@suse.de" date="1754913609">- cifs: reconnect helper should set reconnect for the right
  channel (git-fixes).
- commit ae3173e</changelog>
  <changelog author="ematsumiya@suse.de" date="1754913610">- smb: client: fix potential deadlock when reconnecting channels
  (bsc#1246183, CVE-2025-38244).
- commit fcf601a</changelog>
  <changelog author="ematsumiya@suse.de" date="1754913611">- SMB3: rename macro CIFS_SERVER_IS_CHAN to avoid confusion
  (git-fixes).
- Refresh
  patches.suse/smb-client-fix-use-after-free-of-signing-key.patch.
- commit ee8ada8</changelog>
  <changelog author="petr.pavlu@suse.com" date="1754913612">- module: Fix memory deallocation on error path in move_module()
  (git-fixes).
- commit bb37d39</changelog>
  <changelog author="petr.pavlu@suse.com" date="1754913613">- audit,module: restore audit logging in load failure case
  (git-fixes).
- kABI: Fix the module::name type in audit_context (git-fixes).
- commit 7e23359</changelog>
  <changelog author="petr.pavlu@suse.com" date="1754913614">- module: Remove unnecessary +1 from last_unloaded_module::name
  size (git-fixes).
- commit 3efc8ab</changelog>
  <changelog author="petr.pavlu@suse.com" date="1754913615">- module: Restore the moduleparam prefix length check (git-fixes).
- commit ad2fc48</changelog>
  <changelog author="petr.pavlu@suse.com" date="1754913616">- ring-buffer: Do not allow events in NMI with generic atomic64
  cmpxchg() (git-fixes).
- commit 890fc59</changelog>
  <changelog author="ematsumiya@suse.de" date="1754913617">- smb3: move server check earlier when setting channel sequence
  number (git-fixes).
- commit df2adca</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1754913618">- ice: init flow director before RDMA (bsc#1247712).
- ice: simplify VF MSI-X managing (bsc#1247712).
- ice: enable_rdma devlink param (bsc#1247712).
- ice: treat dyn_allowed only as suggestion (bsc#1247712).
- ice, irdma: move interrupts code to irdma (bsc#1247712).
- ice: get rid of num_lan_msix field (bsc#1247712).
- ice: remove splitting MSI-X between features (bsc#1247712).
- ice: devlink PF MSI-X max and min parameter (bsc#1247712).
- ice: count combined queues using Rx/Tx count (bsc#1247712).
- commit 0afdc75</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1754913619">- ice, irdma: fix an off by one in error handling code
  (bsc#1247712).
- irdma: free iwdev-&gt;rf after removing MSI-X (bsc#1247712).
- ice: Fix signedness bug in ice_init_interrupt_scheme()
  (bsc#1247712).
- commit eba4226</changelog>
</package>
<package pkgid="bd12adb7cb5468a0d182de7342b6b26c1f0c55cea7e5e28c8c0d401e96116c0f" name="kernel-devel" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="150700.53.16.1"/>
  <changelog author="dsterba@suse.com" date="1756468800">- net: stmmac: make sure that ptp_rate is not 0 before configuring EST (CVE-2025-38125 bsc#1245710)
- commit 0fcfa4f</changelog>
  <changelog author="dsterba@suse.com" date="1756468801">- smb: client: add NULL check in automount_fullpath (CVE-2025-38208 bsc#1245815)
- commit 04d79fb</changelog>
  <changelog author="dsterba@suse.com" date="1756468802">- drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (CVE-2025-38205 bsc#1246005)
- commit e09f72d</changelog>
  <changelog author="dsterba@suse.com" date="1756468803">- tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (CVE-2025-38184 bsc#1245956)
- commit 263759a</changelog>
  <changelog author="dsterba@suse.com" date="1756468804">- clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (CVE-2025-38160 bsc#1245780)
- commit f8670f7</changelog>
  <changelog author="tiwai@suse.de" date="1756555200">- HID: asus: fix UAF via HID_CLAIMED_INPUT validation (git-fixes).
- HID: multitouch: fix slab out-of-bounds access in
  mt_report_fixup() (git-fixes).
- drm/mediatek: Fix device/node reference count leaks in
  mtk_drm_get_all_drm_priv (git-fixes).
- drm/msm/kms: move snapshot init earlier in KMS init (git-fixes).
- drm/msm: Defer fd_install in SUBMIT ioctl (git-fixes).
- drm/nouveau: remove unused memory target test (git-fixes).
- drm/nouveau: remove unused increment in gm200_flcn_pio_imem_wr
  (git-fixes).
- drm/nouveau: fix error path in nvkm_gsp_fwsec_v2 (git-fixes).
- drm/nouveau/disp: Always accept linear modifier (git-fixes).
- mISDN: hfcpci: Fix warning when deleting uninitialized timer
  (git-fixes).
- Bluetooth: hci_sync: fix set_local_name race condition
  (git-fixes).
- Bluetooth: hci_event: Detect if HCI_EV_NUM_COMP_PKTS is
  unbalanced (git-fixes).
- Bluetooth: hci_event: Mark connection as closed during suspend
  disconnect (git-fixes).
- Bluetooth: hci_event: Treat UNKNOWN_CONN_ID on disconnect as
  success (git-fixes).
- commit f54cbc7</changelog>
  <changelog author="tiwai@suse.de" date="1756555201">- drm/mediatek: Add error handling for old state CRTC in
  atomic_disable (git-fixes).
- drm/msm: update the high bitfield of certain DSI registers
  (git-fixes).
- drm/xe: Don't trigger rebind on initial dma-buf validation
  (git-fixes).
- drm/xe/vm: Clear the scratch_pt pointer on error (git-fixes).
- drm/xe/xe_sync: avoid race during ufence signaling (git-fixes).
- commit ea140bc</changelog>
  <changelog author="joao.povoas@suse.com" date="1756641600">- Update
  patches.suse/drm-imagination-Fix-kernel-crash-when-hard-resetting.patch
  (git-fixes CVE-2025-38521 bsc#1248232).
- Update
  patches.suse/drm-xe-pf-Clear-all-LMTT-pages-on-alloc.patch
  (git-fixes CVE-2025-38511 bsc#1248175).
- Update
  patches.suse/regulator-core-fix-NULL-dereference-on-unbind-due-to.patch
  (stable-fixes CVE-2025-38668 bsc#1248647).
- Update
  patches.suse/wifi-ath12k-Pass-ab-pointer-directly-to-ath12k_dp_tx.patch
  (git-fixes CVE-2025-38605 bsc#1248334).
- commit af57d5e</changelog>
  <changelog author="joao.povoas@suse.com" date="1756641601">- Update
  patches.suse/Bluetooth-btnxpuart-Resolve-TX-timeout-error-in-powe.patch
  (bsc#1230557 CVE-2024-58238 bsc#1242754).
- Update
  patches.suse/HID-quirks-Add-quirk-for-2-Chicony-Electronics-HP-5M.patch
  (stable-fixes CVE-2025-38540 bsc#1248208).
- Update
  patches.suse/PCI-pnv_php-Clean-up-allocated-IRQs-on-unplug.patch
  (bsc#1215199 CVE-2025-38624 bsc#1248617).
- Update
  patches.suse/PM-devfreq-Check-governor-before-using-governor-name.patch
  (git-fixes CVE-2025-38609 bsc#1248337).
- Update
  patches.suse/RDMA-hns-Fix-double-destruction-of-rsv_qp.patch
  (git-fixes CVE-2025-38582 bsc#1248349).
- Update
  patches.suse/arm64-entry-Mask-DAIF-in-cpu_switch_to-call_on_irq_stack.patch
  (git-fixes CVE-2025-38670 bsc#1248655).
- Update
  patches.suse/btrfs-fix-assertion-when-building-free-space-tree.patch
  (git-fixes CVE-2025-38503 bsc#1248183).
- Update
  patches.suse/can-netlink-can_changelink-fix-NULL-pointer-deref-of.patch
  (git-fixes CVE-2025-38665 bsc#1248648).
- Update
  patches.suse/clk-davinci-Add-NULL-check-in-davinci_lpsc_clk_regis.patch
  (git-fixes CVE-2025-38635 bsc#1248573).
- Update
  patches.suse/clk-xilinx-vcu-unregister-pll_post-only-if-registere.patch
  (git-fixes CVE-2025-38583 bsc#1248350).
- Update
  patches.suse/comedi-aio_iiro_16-Fix-bit-shift-out-of-bounds.patch
  (git-fixes CVE-2025-38529 bsc#1248196).
- Update
  patches.suse/comedi-pcl812-Fix-bit-shift-out-of-bounds.patch
  (git-fixes CVE-2025-38530 bsc#1248206).
- Update
  patches.suse/crypto-ccp-Fix-crash-when-rebind-ccp-device-for-ccp..patch
  (git-fixes CVE-2025-38581 bsc#1248345).
- Update
  patches.suse/dmaengine-nbpfaxi-Fix-memory-corruption-in-probe.patch
  (git-fixes CVE-2025-38538 bsc#1248213).
- Update patches.suse/drm-amd-display-Fix-vs-typos.patch
  (git-fixes CVE-2024-26661 bsc#1222323).
- Update
  patches.suse/drm-sched-Increment-job-count-before-swapping-tail-s.patch
  (git-fixes CVE-2025-38515 bsc#1248212).
- Update
  patches.suse/drm-tegra-nvdec-Fix-dma_alloc_coherent-error-check.patch
  (git-fixes CVE-2025-38543 bsc#1248214).
- Update
  patches.suse/fbdev-imxfb-Check-fb_add_videomode-to-prevent-null-p.patch
  (git-fixes CVE-2025-38630 bsc#1248575).
- Update
  patches.suse/hfsplus-remove-mutex_lock-check-in-hfsplus_free_extents.patch
  (git-fixes CVE-2025-38650 bsc#1248746).
- Update
  patches.suse/hwmon-corsair-cpro-Validate-the-size-of-the-received.patch
  (git-fixes CVE-2025-38548 bsc#1248228).
- Update
  patches.suse/i2c-qup-jump-out-of-the-loop-in-case-of-timeout.patch
  (git-fixes CVE-2025-38671 bsc#1248652).
- Update
  patches.suse/ipv6-fix-possible-infinite-loop-in-fib6_info_uses_de.patch
  (git-fixes CVE-2025-38587 bsc#1248361).
- Update
  patches.suse/ipv6-mcast-Delay-put-pmc-idev-in-mld_del_delrec.patch
  (git-fixes CVE-2025-38550 bsc#1248227).
- Update
  patches.suse/ipv6-prevent-infinite-loop-in-rt6_nlmsg_size.patch
  (git-fixes CVE-2025-38588 bsc#1248368).
- Update
  patches.suse/ipv6-reject-malicious-packets-in-ipv6_gso_segment.patch
  (git-fixes CVE-2025-38572 bsc#1248399).
- Update
  patches.suse/iwlwifi-Add-missing-check-for-alloc_ordered_workqueu.patch
  (git-fixes CVE-2025-38602 bsc#1248341).
- Update
  patches.suse/kasan-remove-kasan_find_vm_area-to-prevent-possible-.patch
  (git-fixes CVE-2025-38510 bsc#1248166).
- Update
  patches.suse/ksmbd-fix-out-of-bounds-read-in-smb2_sess_setup.patch
  (bsc#1012628 bsc#1213545 CVE-2023-3867).
- Update
  patches.suse/ksmbd-fix-wrong-next-length-validation-of-ea-b.patch
  (bsc#1012628 CVE-2023-4130 bsc#1248164).
- Update patches.suse/ksmbd-validate-command-request-size.patch
  (bsc#1012628 CVE-2023-4515 bsc#1248180).
- Update
  patches.suse/md-make-rdev_addable-usable-for-rcu-mode.patch
  (git-fixes CVE-2025-38621 bsc#1248609).
- Update
  patches.suse/net-packet-fix-a-race-in-packet_set_ring-and-packet_.patch
  (git-fixes CVE-2025-38617 bsc#1248621).
- Update patches.suse/net-phy-Don-t-register-LEDs-for-genphy.patch
  (git-fixes CVE-2025-38537 bsc#1248229).
- Update
  patches.suse/net-sched-Restrict-conditions-for-adding-duplicating.patch
  (git-fixes CVE-2025-38553 bsc#1248255).
- Update
  patches.suse/net-sched-mqprio-fix-stack-out-of-bounds-write-in-tc.patch
  (git-fixes CVE-2025-38568 bsc#1248386).
- Update
  patches.suse/nilfs2-reject-invalid-file-types-when-reading-inodes.patch
  (git-fixes CVE-2025-38663 bsc#1248636).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/phy-tegra-xusb-Fix-unbalanced-regulator-disable-in-U.patch
  (git-fixes CVE-2025-38535 bsc#1248240).
- Update
  patches.suse/pinctrl-qcom-msm-mark-certain-pins-as-invalid-for-in.patch
  (git-fixes CVE-2025-38516 bsc#1248209).
- Update
  patches.suse/pinmux-fix-race-causing-mux_owner-NULL-with-active-m.patch
  (git-fixes CVE-2025-38632 bsc#1248669).
- Update
  patches.suse/power-supply-cpcap-charger-Fix-null-check-for-power_.patch
  (git-fixes CVE-2025-38634 bsc#1248666).
- Update
  patches.suse/powercap-dtpm_cpu-Fix-NULL-pointer-dereference-in-ge.patch
  (git-fixes CVE-2025-38610 bsc#1248395).
- Update
  patches.suse/powerpc-eeh-Make-EEH-driver-device-hotplug-safe.patch
  (bsc#1215199 CVE-2025-38576 bsc#1248354).
- Update
  patches.suse/staging-fbtft-fix-potential-memory-leak-in-fbtft_fra.patch
  (git-fixes CVE-2025-38612 bsc#1248390).
- Update
  patches.suse/sunrpc-fix-client-side-handling-of-tls-alerts.patch
  (git-fixes CVE-2025-38571 bsc#1248401).
- Update
  patches.suse/sunrpc-fix-handling-of-server-side-tls-alerts.patch
  (git-fixes CVE-2025-38566 bsc#1248374).
- Update
  patches.suse/tls-stop-recv-if-initial-process_rx_list-gave-us-non.patch
  (bsc#1221858 CVE-2024-58239 bsc#1248614).
- Update
  patches.suse/usb-gadget-fix-use-after-free-in-composite_dev_clean.patch
  (git-fixes CVE-2025-38555 bsc#1248297).
- Update
  patches.suse/wifi-ath11k-clear-initialized-flag-for-deinit-ed-srn.patch
  (git-fixes CVE-2025-38601 bsc#1248340).
- Update
  patches.suse/wifi-iwlwifi-Fix-error-code-in-iwl_op_mode_dvm_start.patch
  (git-fixes CVE-2025-38656 bsc#1248643).
- Update
  patches.suse/wifi-mac80211-reject-TDLS-operations-when-station-is.patch
  (git-fixes CVE-2025-38644 bsc#1248748).
- Update
  patches.suse/wifi-mt76-mt7925-Fix-null-ptr-deref-in-mt7925_therma.patch
  (git-fixes CVE-2025-38541 bsc#1248216).
- Update
  patches.suse/wifi-prevent-A-MSDU-attacks-in-mesh-networks.patch
  (stable-fixes CVE-2025-38512 bsc#1248178).
- Update
  patches.suse/wifi-rtl818x-Kill-URBs-before-clearing-tx-status-que.patch
  (git-fixes CVE-2025-38604 bsc#1248333).
- Update
  patches.suse/wifi-rtw89-avoid-NULL-dereference-when-RX-problemati.patch
  (git-fixes CVE-2025-38646 bsc#1248577).
- Update
  patches.suse/wifi-zd1211rw-Fix-potential-NULL-pointer-dereference.patch
  (git-fixes CVE-2025-38513 bsc#1248179).
- commit efc5ee0</changelog>
  <changelog author="nik.borisov@suse.com" date="1756728000">- RAS/AMD/ATL: Include row bit in row retirement (bsc#1242034).
- commit fa3fcbb</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1756728001">- ixgbe: fix ixgbe_orom_civd_info struct layout (bsc#1245410).
- commit 53ae51b</changelog>
  <changelog author="nik.borisov@suse.com" date="1756728002">- RAS/AMD/FMPM: Get masked address (bsc#1242034).
- commit 4171987</changelog>
  <changelog author="nik.borisov@suse.com" date="1756728003">- RAS/AMD/FMPM: Use atl internal.h for INVALID_SPA (bsc#1242034).
- commit ac5d9dc</changelog>
  <changelog author="pmladek@suse.com" date="1756728004">- slab: Decouple slab_debug and no_hash_pointers (bsc#1249022).
- commit 41f928f</changelog>
  <changelog author="jgross@suse.com" date="1756728005">- KVM: Allow CPU to reschedule while setting per-page memory
  attributes (bsc#1248186 CVE-2025-38506).
- commit a7f8a41</changelog>
  <changelog author="nmorey@suse.com" date="1756728006">- RDMA/core: reduce stack using in nldev_stat_get_doit() (git-fixes)
- commit 1ff622a</changelog>
  <changelog author="nmorey@suse.com" date="1756728007">- RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (git-fixes)
- commit 5289b12</changelog>
  <changelog author="jgross@suse.com" date="1756728008">- vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1248511
  CVE-2025-38618).
- commit 0256bd0</changelog>
  <changelog author="tiwai@suse.de" date="1756728009">- staging: media: atomisp: Fix stack buffer overflow in
  gmin_get_var_int() (CVE-2025-38585 bsc#1248355).
- commit f7d8b23</changelog>
  <changelog author="msuchanek@suse.de" date="1757419200">- kernel-subpackage-build: Decompress ghost file when compressed version exists (bsc#1249346)
- commit 40606b5</changelog>
</package>
<package pkgid="260059bab994e49bed4fc4df112d029c691d7552a8319bad1f556c6cbb90f066" name="kernel-devel" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="150700.53.19.1"/>
  <changelog author="pmladek@suse.com" date="1759492800">- kbuild/modpost: Continue processing all unresolved symbols
  when KLP_SYM_RELA is found (bsc#1218644, bsc#1250655).
- commit ec0a51c</changelog>
  <changelog author="ailiop@suse.com" date="1759492801">- Squashfs: fix uninit-value in squashfs_get_parent (git-fixes).
- commit 126861e</changelog>
  <changelog author="pjakobsson@suse.de" date="1759492802">- Replace drm-backport-placeholder with actual jira tickets
  For unknown reasons a portion of the patches didn't get their
  placeholder tag replaced during the drm backport. Let's fix them now.
- Update patches.suse/0001-PCI-Add-pci_get_base_class-helper.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0001-accel-ivpu-Annotate-struct-ivpu_job-with-__counted_b.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0001-drm-prime-Unexport-helpers-for-fd-handle-conversion.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071 bsc#1212533).
- Update
  patches.suse/0001-drm-vmwgfx-Keep-a-gem-reference-to-user-bos-in-surfa.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  CVE-2023-5633, bsc#1216527).
- Update
  patches.suse/0001-mm-factor-out-VMA-stack-and-heap-checks.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0002-PCI-Add-pci_is_vga-helper.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0002-drm-amdkfd-use-vma_is_initial_stack-and-vma_is_initi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0002-drm-sched-Make-sure-we-wait-for-all-dependencies-in-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0002-drm-tests-Use-KUNIT_DEFINE_ACTION_WRAPPER.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0002-fbdev-Simplify-fb_is_primary_device-for-x86.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0003-drm-vc4-tests-Use-KUNIT_DEFINE_ACTION_WRAPPER.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0003-fbdev-Prepare-generic-architecture-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0004-arch-x86-Implement-asm-fb.h-with-generic-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0004-drm-tests-Switch-to-kunit-devices.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0005-drm-modes-replace-deprecated-strncpy-with-strscpy_pa.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0005-drm-ttm-fix-warning-that-we-shouldn-t-mix-and.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0006-accel-ivpu-Use-struct_size.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0006-arch-arm64-Implement-asm-fb.h-with-generic-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0006-drivers-gpu-drm-i915-i915_memcpy.c-fix-missing-inclu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0006-drm-nouveau-kms-nv50-Fix-drm_dp_remove_payload-invoc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0006-drm-rockchip-vop-Add-rv1126-vop_lite-support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0007-accel-ivpu-Remove-configuration-of-MMU-TBU1-and-TBU3.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0007-arch-sparc-Implement-fb_is_primary_device-in-source-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0007-docs-driver-api-properly-format-ToC-headings.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0007-drm-rockchip-dsi-Add-rv1126-MIPI-DSI-support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0007-drm-sched-Call-drm_sched_fence_set_parent-from-drm_s.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0008-accel-ivpu-Add-MMU-support-for-4-level-page-mappings.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0008-accel-ivpu-Document-DRM_IVPU_PARAM_CAPABILITIES.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0008-arch-ia64-Implement-asm-fb.h-with-generic-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0008-drm-atomic-helper-Fix-spelling-mistake-preceeding-pr.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0009-accel-ivpu-Make-DMA-bit-mask-HW-specific.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0009-arch-loongarch-Implement-asm-fb.h-with-generic-helpe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0009-drm-extract-closefb-logic-in-separate-function.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0010-accel-ivpu-Rename-and-cleanup-MMU600-page-tables.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0010-arch-mips-Implement-asm-fb.h-with-generic-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0010-drm-introduce-CLOSEFB-IOCTL.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0011-accel-ivpu-Mark-64-kB-contiguous-areas-as-contiguous.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0011-arch-sparc-Implement-asm-fb.h-with-generic-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0011-drm-doc-describe-PATH-format-for-DP-MST.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0012-accel-qaic-Enable-1-MSI-fallback-mode.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0012-arch-x86-Include-asm-fb.h-in-fbdev-source-file.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0012-drm-bridge-lvds-codec-Implement-atomic_get_input_bus.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0013-accel-qaic-Add-support-for-periodic-timesync.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0013-fbdev-Include-linux-io.h-in-various-drivers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0014-accel-qaic-Support-MHI-QAIC_TIMESYNC-channel.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0014-fbdev-Include-linux-fb.h-instead-of-asm-fb.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0015-drm-rockchip-vop-Use-cleanup-helper-directly-as-dest.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0015-fbdev-Move-framebuffer-I-O-helpers-into-asm-fb.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0016-accel-ivpu-Update-FW-API.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0016-fbdev-Rename-fb_mem-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0017-accel-ivpu-Remove-unneeded-drm_driver-declaration.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0017-drm-radeon-Replace-all-non-returning-strlcpy-with-st.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0017-minmax-add-in_range-macro.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0018-accel-ivpu-Add-dvfs_mode-file-to-debugfs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0018-drm-amd-pm-Replace-all-non-returning-strlcpy-with-st.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0018-drm-i915-Move-abs_diff-to-math.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0018-x86-fbdev-Include-asm-fb.h-as-needed.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0019-accel-ivpu-Remove-reset-from-power-up-sequence.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0019-drm-bridge-panel-Add-a-device-link-between-drm-devic.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0019-drm-display-dp_mst-Replace-all-non-returning-strlcpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0019-drm-panel-edp-Add-AUO-B116XAB01.4-edp-panel-entry.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0020-accel-ivpu-Add-support-for-VPU_JOB_FLAGS_NULL_SUBMIS.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0020-drm-panel-s6d7aa0-remove-the-unneeded-variable-in-s6.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0020-drm-panel-simple-Add-support-for-Mitsubishi-AA084XE0.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0020-drm-rockchip-Replace-all-non-returning-strlcpy-with-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0021-accel-ivpu-Change-test_mode-module-param-to-bitmask.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0021-drm-mediatek-Replace-all-non-returning-strlcpy-with-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0021-drm-panel-Add-driver-for-Visionox-r66451-panel.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0021-drm-panel-JDI-LT070ME05000-drop-broken-link.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0022-accel-ivpu-40xx-Capture-D0i3-entry-host-and-device-t.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0022-drm-komeda-Convert-to-platform-remove-callback-retur.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0022-drm-panel-Add-driver-for-JDI-LPM102A188A.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0022-drm-sun4i-hdmi-Replace-all-non-returning-strlcpy-wit.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0023-accel-ivpu-Pass-D0i3-residency-time-to-the-VPU-firmw.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0023-drm-arm-hdlcd-Convert-to-platform-remove-callback-re.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0023-drm-i2c-tda998x-Replace-all-non-returning-strlcpy-wi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0024-accel-ivpu-Introduce-ivpu_ipc_send_receive_active.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0024-drm-arm-malidp-Convert-to-platform-remove-callback-r.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0024-drm-panfrost-Do-not-check-for-0-return-after-calling.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0024-mm-gup-remove-unused-vmas-parameter-from-get_user_pa.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0025-accel-ivpu-Add-support-for-delayed-D0i3-entry-messag.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0025-doc-uapi-Add-document-describing-dma-buf-semantics.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0025-drm-aspeed-Convert-to-platform-remove-callback-retur.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0026-drm-atmel-hlcdc-Convert-to-platform-remove-callback-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0026-drm-gma500-remove-duplicate-macro-definitions.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0026-drm-v3d-wait-for-all-jobs-to-finish-before-unregiste.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0027-drm-fsl-dcu-Convert-to-platform-remove-callback-retu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0027-drm-panfrost-Remove-incorrect-IS_ERR-check.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0027-fbdev-hitfb-Declare-hitfb_blank-as-static.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0028-drm-gma500-Remove-unused-declarations.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0028-drm-hisilicon-Convert-to-platform-remove-callback-re.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0028-fbdev-metronomefb-Add-MODULE_FIRMWARE-macro.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0029-drm-lima-Convert-to-platform-remove-callback-returni.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0029-drm-repaper-fix-Wvoid-pointer-to-enum-cast-warning.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0029-fbdev-broadsheetfb-Add-MODULE_FIRMWARE-macro.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0030-accel-ivpu-40xx-Allow-to-change-profiling-frequency.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0030-drm-logicvc-Convert-to-platform-remove-callback-retu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0030-drm-tests-Test-default-pitch-fallback.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0030-video-hdmi-Reorder-fields-in-struct-hdmi_avi_infofra.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0031-accel-ivpu-Assure-device-is-off-if-power-up-sequence.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0031-drm-mcde-Convert-to-platform-remove-callback-returni.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0031-drm-tests-Add-KUnit-tests-for-drm_fb_swab.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0031-fbdev-media-Use-GPIO-descriptors-for-VIA-GPIO.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0032-accel-ivpu-Stop-job_done_thread-on-suspend.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0032-drm-meson-Convert-to-platform-remove-callback-return.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0032-drm-tests-Add-KUnit-tests-for-drm_fb_clip_offset.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0032-fbdev-hitfb-Fix-integer-to-pointer-cast.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0033-accel-ivpu-Abort-pending-rx-ipc-on-reset.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0033-drm-mxsfb-Convert-to-platform-remove-callback-return.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0033-drm-tests-Add-KUnit-tests-for-drm_fb_build_fourcc_li.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0033-fbdev-hitfb-Use-NULL-for-pointers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0034-accel-ivpu-Print-CMDQ-errors-after-consumer-timeout.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0034-drm-panel-Convert-to-platform-remove-callback-return.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0034-drm-tests-Add-multi-plane-support-to-conversion_buf_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0034-fbdev-sh_mobile_lcdcfb-Fix-ARGB32-overlay-format-typ.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0035-accel-ivpu-Make-DMA-allocations-for-MMU600-write-com.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0035-drm-panfrost-Convert-to-platform-remove-callback-ret.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0035-drm-tests-Add-KUnit-tests-for-drm_fb_memcpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0035-fbdev-sh7760fb-Fix-Wimplicit-fallthrough-warnings.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0036-accel-ivpu-Simplify-MMU-SYNC-command.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0036-drm-rockchip-Convert-to-platform-remove-callback-ret.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0036-fbdev-sbus-Build-sbuslib.o-if-CONFIG_FB_SBUS-has-bee.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0037-accel-ivpu-Rename-VPU-to-NPU-in-product-strings.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0037-drm-sti-Convert-to-platform-remove-callback-returnin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0037-drm-vkms-Use-drmm_crtc_init_with_planes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0037-fbdev-sbus-Forward-declare-all-necessary-structures-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0038-drm-sched-Add-drm_sched_wqueue_-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0038-drm-stm-Convert-to-platform-remove-callback-returnin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0038-drm-vkms-Use-drmm_mode_config_init.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0038-fbdev-sbus-Add-initializer-macros-and-Kconfig-tokens.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0039-drm-bridge-fsl-ldb-Add-i.MX6SX-support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0039-drm-sched-Convert-drm-scheduler-to-use-a-work-queue-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0039-drm-sun4i-Convert-to-platform-remove-callback-return.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0039-fbdev-bw2-Use-initializer-macro-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0040-drm-sched-Split-free_job-into-own-work-item.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0040-drm-tidss-Convert-to-platform-remove-callback-return.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0040-fbdev-cg14-Use-initializer-macro-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0041-drm-gma500-Use-drm_aperture_remove_conflicting_pci_f.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0041-drm-sched-Add-drm_sched_start_timeout_unlocked-helpe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0041-drm-tiny-Convert-to-platform-remove-callback-returni.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0041-fbdev-cg3-Use-initializer-macro-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0042-drm-sched-Add-a-helper-to-queue-TDR-immediately.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0042-drm-tve200-Convert-to-platform-remove-callback-retur.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0042-fbdev-cg6-Use-initializer-macro-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0042-video-aperture-use-generic-code-to-figure-out-the-vg.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0043-drm-aperture-Remove-primary-argument.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0043-drm-v3d-Convert-to-platform-remove-callback-returnin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0043-fbdev-ffb-Use-initializer-macro-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0043-fbdev-simplefb-Support-memory-region-property.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0044-drm-vc4-Convert-to-platform-remove-callback-returnin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0044-fbdev-leo-Use-initializer-macro-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0044-fbdev-simplefb-Add-support-for-generic-power-domains.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0044-video-aperture-Only-kick-vgacon-when-the-pdev-is-dec.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0045-drm-v3d-update-UAPI-to-match-user-space-for-V3D-7.x.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0045-drm-xlnx-zynqmp_dpsub-Convert-to-platform-remove-cal.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0045-fbdev-p9100-Use-initializer-macro-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0045-video-aperture-Move-vga-handling-to-pci-function.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0046-drm-rcar-du-Convert-to-platform-remove-callback-retu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0046-drm-v3d-fix-up-register-addresses-for-V3D-7.x.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0046-fbdev-tcx-Use-initializer-macro-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0046-video-aperture-Drop-primary-argument.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0047-drm-debugfs-drop-debugfs_init-for-the-render-and-acc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0047-drm-tilcdc-Convert-to-platform-remove-callback-retur.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0047-drm-v3d-add-brcm-2712-v3d-as-a-compatible-V3D-device.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0047-video-aperture-Only-remove-sysfb-on-the-default-vga-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0048-accel-qaic-Quiet-array-bounds-check-on-DMA-abort-mes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0048-drm-debugfs-disallow-debugfs-access-when-device-isn-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0048-drm-omap-Convert-to-platform-remove-callback-returni.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0048-video-aperture-Provide-a-VGA-helper-for-gma500-and-i.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0049-accel-qaic-Support-for-0-resize-slice-execution-in-B.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0049-dma-buf-dma-resv.c-fix-a-typo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0049-drm-ssd130x-Make-default-width-and-height-to-be-cont.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0050-drm-debugfs-rework-debugfs-directory-creation-v5.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0050-drm-panel-nt36523-Add-DCS-backlight-support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0050-drm-sched-Rename-drm_sched_get_cleanup_job-to-be-mor.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0050-drm-ssd130x-Set-the-page-height-value-in-the-device-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0051-drm-debugfs-remove-dev-debugfs_list-and-debugfs_mute.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0051-drm-panel-nt36523-Get-orientation-from-OF.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0051-drm-sched-Move-free-worker-re-queuing-out-of-the-if-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0051-drm-ssd130x-Don-t-allocate-buffers-on-each-plane-upd.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0052-drm-debugfs-rework-drm_debugfs_create_files-implemen.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0052-drm-panel-nt36523-Add-Lenovo-J606F-panel.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0052-drm-sched-Rename-drm_sched_free_job_queue-to-be-more.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0052-drm-ssd130x-Remove-hardcoded-bits-per-pixel-in-ssd13.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0053-accel-ivpu-Move-set-autosuspend-delay-to-HW-specific.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0053-drm-nouveau-debugfs-Move-an-expression-into-a-functi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0053-drm-sched-Rename-drm_sched_run_job_queue_if_ready-an.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0053-drm-virtio-Remove-unused-function-declarations.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0054-accel-ivpu-Remove-duplicated-error-messages.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0054-drm-ingenic-Kconfig-select-REGMAP-and-REGMAP_MMIO.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0054-drm-nouveau-debugfs-Move-a-variable-assignment-behin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0054-drm-sched-Drop-suffix-from-drm_sched_wakeup_if_can_q.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0054-fbdev-smscufx-Use-fb_ops-helpers-for-deferred-I-O.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0055-accel-ivpu-Make-ivpu_pm_init-void.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0055-drm-Do-not-round-to-megabytes-for-greater-than-1MiB-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0055-drm-nouveau-debugfs-Use-seq_putc-in-nouveau_debugfs_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0055-drm-tidss-Add-support-for-AM625-DSS.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0055-fbdev-udlfb-Use-fb_ops-helpers-for-deferred-I-O.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0056-accel-ivpu-Add-information-about-context-on-failure.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0056-drm-msm-Initialize-mmap-offset-after-constructing-th.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0056-drm-nouveau-debugfs-Replace-five-seq_printf-calls-by.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0056-drm-v3d-Implement-show_fdinfo-callback-for-GPU-usage.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0056-fbdev-Add-Kconfig-macro-FB_IOMEM_HELPERS_DEFERRED.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0057-accel-ivpu-Initialize-context-with-SSID-1.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0057-drm-Remove-struct-drm_driver.gem_prime_mmap.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0057-drm-nouveau-bios-power_budget-Move-an-expression-int.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0057-drm-v3d-Expose-the-total-GPU-usage-stats-on-sysfs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0057-fbdev-hyperv_fb-Use-fb_ops-helpers-for-deferred-I-O.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0058-accel-ivpu-Move-ivpu_fw_load-to-ivpu_fw_init.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0058-drm-amdgpu-Remove-struct-drm_driver.gem_prime_mmap.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0058-drm-bridge-it66121-Extend-match-support-for-OF-table.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0058-drm-nouveau-clk-Move-a-variable-assignment-behind-a-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0059-accel-ivpu-37xx-Change-register-rename-leftovers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0059-accel-ivpu-Fix-compilation-with-CONFIG_PM-n.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0059-drm-nouveau-pci-Move-a-variable-assignment-behind-co.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0059-drm-vkms-Add-kernel-doc-to-the-function-vkms_compose.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0060-accel-ivpu-37xx-White-space-cleanup.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0060-drm-nouveau-pci-Move-an-expression-into-a-function-c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0060-drm-sched-Don-t-disturb-the-entity-when-in-RR-mode-s.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0060-drm-vkms-Fix-all-kernel-doc-warnings-of-the-vkms_com.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0061-accel-ivpu-Allocate-vpu_addr-in-gem-open-callback.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0061-accel-ivpu-Move-MMU-register-definitions-to-ivpu_mmu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0061-drm-bridge-lt9611uxc-Add-MODULE_FIRMWARE-macro.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0061-drm-nouveau-therm-Move-an-assignment-statement-behin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0062-accel-ivpu-Fix-locking-in-ivpu_bo_remove_all_bos_fro.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0062-accel-ivpu-Print-information-about-used-workarounds.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0062-dma-buf-heaps-Don-t-assert-held-reservation-lock-for.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0063-accel-ivpu-Remove-support-for-uncached-buffers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0063-drm-gem-Check-for-valid-formats.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0063-udmabuf-Don-t-assert-held-reservation-lock-for-dma-b.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0064-accel-ivpu-Use-GEM-shmem-helper-for-all-buffers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0064-drm-Don-t-assert-held-reservation-lock-for-dma-buf-m.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0064-drm-bridge-analogix-anx78xx-Drop-ID-table.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0064-video-Remove-trailing-whitespaces.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0065-dma-buf-Change-locking-policy-for-mmap.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0065-drm-bridge-Drop-conditionals-around-of_node-pointers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0065-drm-todo-Add-entry-to-clean-up-former-seltests-suite.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0065-video-Move-HP-PARISC-STI-core-code-to-shared-locatio.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0066-arch-parisc-Implement-fb_is_primary_device-under-arc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0066-drm-bridge-Drop-CONFIG_OF-conditionals-around-of_nod.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0066-drm-edid-split-out-drm_eld.h-from-drm_edid.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0066-drm-shmem-helper-Switch-to-reservation-lock.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0067-drm-bridge-tc358764-Use-BIT-macro-for-actual-bits.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0067-drm-bridge-ti-sn65dsi86-Implement-wait_hpd_asserted.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0067-drm-connector-document-DRM_MODE_COLORIMETRY_COUNT.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0067-drm-eld-replace-uint8_t-with-u8.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0068-drm-armada-Include-linux-of.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0068-drm-bridge-it66121-Simplify-probe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0068-drm-bridge-tc358762-Split-register-programming-from-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0068-drm-doc-rfc-No-STAGING-out-of-drivers-staging.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0068-drm-edid-include-drm_eld.h-only-where-required.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0069-drm-armada-Hide-fbdev-support-behind-config-option.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0069-drm-bridge-tc358762-Switch-to-atomic-ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0069-drm-doc-rfc-Mark-Dev_coredump-as-completed.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0069-drm-edid-use-a-temp-variable-for-sads-to-drop-one-le.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0070-drm-armada-Initialize-fbdev-DRM-client.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0070-drm-bridge-tc358762-Instruct-DSI-host-to-generate-HS.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0070-drm-doc-rfc-Mark-DRM_VM_BIND-as-complete.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0070-drm-edid-add-helpers-to-get-set-struct-cea_sad-from-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0071-drm-armada-Implement-fbdev-emulation-as-in-kernel-cl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0071-drm-bridge-tc358762-Guess-the-meaning-of-LCDCTRL-bit.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0071-drm-doc-rfc-Mark-GPU-VA-as-complete.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0071-drm-eld-add-helpers-to-modify-the-SADs-of-an-ELD.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0072-drm-bridge-tc358762-Handle-HS-VS-polarity.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0072-drm-debugfs-Add-inline-to-drm_debugfs_dev_init-to-su.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0072-drm-panel-simple-Add-InnoLux-G070ACE-L01.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0072-drm-sched-Qualify-drm_sched_wakeup-by-drm_sched_enti.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0073-drm-display-Add-missing-OLED-Vesa-brightnesses-defin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0073-drm-i2c-Switch-i2c-drivers-back-to-use-.probe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0073-drm-tests-Zero-initialize-fourccs_out.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0074-drm-bridge-anx7625-Drop-of_gpio-header.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0074-drm-mst-delete-unnecessary-case-in-drm_dp_add_payloa.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0075-drm-mgag200-set-variable-mgag200_modeset-storage-cla.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0075-drm-mst-Refactor-the-flow-for-payload-allocation-rem.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0075-drm-panel-edp-drm-panel-edp-Add-several-generic-edp-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0075-drm-sti-Drop-of_gpio-header.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0076-drm-fix-code-style-for-embedded-structs-in-hdr_metad.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0076-drm-imx-ipuv3-Convert-to-platform-remove-callback-re.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0076-drm-sched-Define-pr_fmt-for-DRM-using-pr_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0076-drm-tve200-Use-devm_platform_ioremap_resource.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0077-drm-ingenic-Convert-to-platform-remove-callback-retu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0077-drm-sched-implement-dynamic-job-flow-control.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0077-drm-scheduler-properly-forward-fence-errors.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0077-drm-sysfs-rename-drm_sysfs_connector_status_event.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0078-drm-bridge_connector-use-drm_kms_helper_connector_ho.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0078-drm-msm-Convert-to-platform-remove-callback-returnin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0078-drm-scheduler-add-drm_sched_entity_error-and-use-rcu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0079-drm-atomic-log-drm_atomic_replace_property_blob_from.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0079-drm-panfrost-Perform-hard-reset-to-recover-GPU-if-so.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0079-drm-shmobile-Convert-to-platform-remove-callback-ret.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0079-drm-tests-Add-test-cases-for-drm_rect_intersect.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0080-drm-atomic-drop-extra-bracket-from-log-messages.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0080-drm-panfrost-Tighten-polling-for-soft-reset-and-powe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0080-drm-ssd130x-Print-the-PWM-s-label-instead-of-its-num.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0080-drm-tests-Add-test-cases-for-drm_rect_calc_hscale.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0081-drm-atomic-log-when-getting-setting-unknown-properti.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0081-drm-panfrost-Implement-ability-to-turn-on-off-GPU-cl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0081-drm-tests-Add-test-cases-for-drm_rect_calc_vscale.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0082-drm-atomic-log-when-CRTC_ID-prop-value-is-invalid.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0082-drm-panfrost-Set-clocks-on-off-during-system-sleep-o.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0082-drm-ssd130x-Use-bool-for-ssd130x_deviceinfo-flags.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0082-drm-tests-Add-test-cases-for-drm_rect_rotate.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0083-drm-atomic-log-on-attempt-to-set-legacy-DPMS-propert.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0083-drm-panfrost-Implement-ability-to-turn-on-off-regula.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0083-drm-test-Add-test-cases-for-drm_rect_rotate_inv.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0083-fbdev-au1200fb-Do-not-display-boot-up-logo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0084-drm-atomic-log-when-page-flip-is-requested-without-C.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0084-drm-panfrost-Set-regulators-on-off-during-system-sle.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0084-fbdev-mmp-mmpfb-Do-not-display-boot-up-logo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0085-drm-atomic-log-errors-in-drm_mode_atomic_ioctl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0085-drm-vc4-Switch-to-container_of_const.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0085-drm-virtio-use-uint64_t-more-in-virtio_gpu_context_i.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0085-fbdev-core-Fix-style-of-code-for-boot-up-logo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0086-drm-kms-log-when-querying-an-object-not-included-in-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0086-drm-uapi-add-explicit-virtgpu-context-debug-name.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0086-drm-vc4-hdmi-Update-all-the-planes-if-the-TV-margins.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0086-fbdev-core-Unexport-logo-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0087-drm-bridge-ps8640-Drop-the-ability-of-ps8640-to-fetc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0087-drm-gpuvm-convert-WARN-to-drm_WARN-variants.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0087-drm-vc4-hdmi-Add-Broadcast-RGB-property-to-allow-ove.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0087-fbdev-core-Move-logo-functions-into-separate-source-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0088-drm-gpuvm-don-t-always-WARN-in-drm_gpuvm_check_overf.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0088-drm-vc4-hdmi-Rename-full-range-helper.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0088-drm-vkms-Reduce-critical-section.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0088-fbdev-core-Remove-empty-internal-helpers-from-fb_log.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0089-drm-gpuvm-export-drm_gpuvm_range_valid.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0089-drm-vc4-hdmi-Swap-CSC-matrix-channels-for-YUV444.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0089-drm-vkms-Enable-ARGB8888-support-for-writeback.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0089-fbdev-core-Clean-up-include-statements-in-fbmem.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0090-drm-buddy-Improve-contiguous-memory-allocation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0090-drm-nouveau-make-use-of-drm_gpuvm_range_valid.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0090-drm-vc4-hdmi-Rework-the-CSC-matrices-organization.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0090-drm-vkms-Isolate-writeback-pixel-conversion-function.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0091-drm-amdgpu-Move-the-size-computations-to-drm-buddy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0091-drm-gpuvm-add-common-dma-resv-per-struct-drm_gpuvm.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0091-drm-vc4-hdmi-Add-a-function-to-retrieve-the-CSC-matr.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0092-drm-i915-Move-the-size-computations-to-drm-buddy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0092-drm-nouveau-make-use-of-the-GPUVM-s-shared-dma-resv.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0092-drm-vc4-hdmi-Add-BT.601-Support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0093-drm-Clear-fd-handle-callbacks-in-struct-drm_driver.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071 bsc#1212533 bsc#1212533).
- Update
  patches.suse/0093-drm-gpuvm-add-drm_gpuvm_flags-to-drm_gpuvm.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0093-drm-panel-Don-t-store-check-prepared-enabled-for-sim.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0093-drm-vc4-hdmi-Add-BT.2020-Support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0094-drm-nouveau-separately-allocate-struct-nouveau_uvmm.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0094-drm-panel-s6e63m0-Don-t-store-check-prepared-enabled.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0095-drm-bridge-dw-hdmi-change-YUV420-selection-logic-at-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0095-drm-gpuvm-reference-count-drm_gpuvm-structures.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0095-drm-panel-otm8009a-Don-t-double-check-prepared-enabl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0095-drm-vkms-allow-full-alpha-blending-on-all-planes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0096-drm-atomic-helper-drm_atomic_helper_shutdown-NULL-sh.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0096-drm-bridge-dw-hdmi-truly-enforce-420-only-formats-wh.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0096-drm-gpuvm-add-an-abstraction-for-a-VM-BO-combination.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0096-drm-vkms-drop-full-alpha-blending-TODO.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0097-drm-bridge-dw-hdmi-remove-dead-code-and-fix-indentat.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0097-drm-doc-rfc-Introduce-the-merge-plan-for-the-Xe-driv.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0097-drm-gpuvm-track-lock-validate-external-evicted-objec.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0097-drm-imx-ipuv3-Call-drm_atomic_helper_shutdown-at-shu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0098-Revert-drm-sched-Define-pr_fmt-for-DRM-using-pr_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0098-drm-ingenic-Call-drm_atomic_helper_shutdown-at-shutd.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0098-drm-panel-st7703-Rename-CMD_UNKNOWN_C6-to-CMD_SETECO.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0099-backlight-bd6107-Rename-struct-bd6107_platform_data..patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0099-drm-amd-display-Fix-Wuninitialized-in-dm_helpers_dp_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0099-drm-format-helper-Cache-buffers-with-struct-drm_form.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0099-drm-panel-st7703-Add-Anbernic-RG353V-V2-Panel-Suppor.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0100-drm-atomic-helper-Add-format-conversion-state-to-sha.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0100-drm-debugfs-Fix-drm_debugfs_remove_files-stub.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0100-drm-meson-set-variables-meson_hdmi_-storage-class-sp.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0101-backlight-gpio_backlight-Rename-field-fbdev-to-dev.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0101-drm-format-helper-Pass-format-conversion-state-to-he.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0101-drm-ssd130x-Store-the-HW-buffer-in-the-driver-privat.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0101-drm-uapi-Document-CTM-matrix-better.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0102-drm-ofdrm-Preallocate-format-conversion-buffer-in-at.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0103-backlight-lv5207lp-Rename-struct-lv5207lp_platform_d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0103-drm-komeda-add-NV12-format-to-support-writeback-laye.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0103-drm-simpledrm-Preallocate-format-conversion-buffer-i.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0103-drm-sysfs-Expose-DRM-connector-id-in-each-connector-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0104-drm-nouveau-nvif-refactor-deprecated-strncpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0104-drm-ssd130x-Preallocate-format-conversion-buffer-in-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0104-drm-sysfs-Link-DRM-connectors-to-corresponding-Type-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0104-fbdev-atyfb-Reorder-backlight-and-framebuffer-init-c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0105-drm-Remove-struct-drm_flip_task-from-DRM-interfaces.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0105-drm-nouveau-core-refactor-deprecated-strncpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0105-drm-sti-sti_hdmi-convert-to-using-is_hdmi-from-displ.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0105-fbdev-atyfb-Use-hardware-device-as-backlight-parent.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0106-drm-Fix-flip-task-docs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0106-drm-nouveau-pm-refactor-deprecated-strncpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0106-drm-rockchip-cdn-dp-call-drm_connector_update_edid_p.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0106-fbdev-aty128fb-Reorder-backlight-and-framebuffer-ini.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0107-drm-bridge-dw-hdmi-cec-Add-arbitration-lost-event.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0107-drm-scheduler-mark-jobs-without-fence-as-canceled.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0107-drm-virtio-Fix-return-value-for-VIRTGPU_CONTEXT_PARA.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0107-fbdev-aty128fb-Use-hardware-device-as-backlight-pare.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0108-drm-dp_mst-Fix-NULL-dereference-during-payload-addit.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0108-drm-test-rearrange-test-entries-in-Kconfig-and-Makef.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0108-drm-udl-delete-dead-code.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0108-fbdev-broadsheetfb-Call-device_remove_file-with-hard.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0109-drm-client-Do-not-acquire-module-reference.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0109-drm-dp_mst-Sanitize-error-return-during-payload-addi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0109-fbdev-ep93xx-fb-Alloc-DMA-memory-from-hardware-devic.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0110-accel-ivpu-Rename-cons-rx_msg_lock.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0110-drm-dp_mst-Tune-down-error-message-during-payload-ad.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0110-fbdev-ep93xx-fb-Output-messages-with-fb_info-and-fb_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0111-accel-ivpu-Do-not-use-irqsave-in-ivpu_ipc_dispatch.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0111-drm-nouveau-devinit-tu102-remove-attempt-at-loading-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0112-accel-ivpu-Do-not-use-cons-aborted-for-job_done_thre.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0112-drm-nouveau-imem-support-allocations-not-preserved-a.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0112-fbdev-fsl-diu-fb-Output-messages-with-fb_-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0113-accel-ivpu-Use-dedicated-work-for-job-timeout-detect.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0113-accel-qaic-Register-for-PCI-driver-at-the-beginning-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0113-drm-nouveau-gr-gf100-lose-contents-of-global-ctxbufs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0113-fbdev-mb862xxfb-Output-messages-with-fb_dbg.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0114-accel-ivpu-Use-threaded-IRQ-to-handle-JOB-done-messa.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0114-accel-qaic-Use-devm_drm_dev_alloc-instead-of-drm_dev.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0114-drm-nouveau-mmu-gp100-always-invalidate-TLBs-at-CACH.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0114-fbdev-metronomefb-Use-hardware-device-for-dev_err.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0115-accel-qaic-Update-MAX_ORDER-use-to-be-inclusive.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0115-drm-nouveau-kms-nv50-fix-mst-payload-alloc-fail-cras.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0115-fbdev-nvidiafb-Reorder-backlight-and-framebuffer-ini.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0116-drm-nouveau-disp-rearrange-output-methods.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0116-drm-print-Handle-NULL-drm-device-in-__drm_printk.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0116-fbdev-nvidiafb-Use-hardware-device-as-backlight-pare.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0117-drm-nouveau-disp-add-output-detect-method.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0117-fbdev-pxa168fb-Do-not-assign-to-struct-fb_info.dev.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0118-drm-nouveau-disp-add-output-method-to-fetch-edid.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0118-drm-panel-nv3051d-Add-Powkiddy-RK2023-Panel-Support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0118-fbdev-radeonfb-Reorder-backlight-and-framebuffer-cle.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0119-drm-nouveau-disp-rename-internal-output-acquire-rele.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0119-drm-panel-elida-kd35t133-trival-update-panel-size-fr.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0119-fbdev-radeonfb-Use-hardware-device-as-backlight-pare.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0120-drm-bridge-tc358768-remove-unused-variable.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0120-drm-nouveau-kms-Add-INHERIT-ioctl-to-nvkm-nvif-for-r.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0120-fbdev-rivafb-Reorder-backlight-and-framebuffer-init-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0121-drm-bridge-lt9211-Do-not-generate-HFP-HBP-HSA-and-EO.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0121-drm-nouveau-disp-shuffle-to-make-upcoming-diffs-pret.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0121-drm-panel-elida-kd35t133-drop-drm_connector_set_orie.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0121-fbdev-rivafb-Use-hardware-device-as-backlight-parent.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0122-drm-bridge-lt9611-Do-not-generate-HFP-HBP-HSA-and-EO.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0122-drm-nouveau-disp-add-acquire_dac.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0122-drm-panel-elida-kd35t133-Drop-shutdown-logic.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0122-fbdev-sh7760fb-Use-fb_dbg-in-sh7760fb_get_color_info.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0123-drm-nouveau-disp-add-acquire_sor-pior.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0123-drm-panel-elida-kd35t133-Drop-prepare-unprepare-logi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0123-fbdev-sh7760fb-Output-messages-with-fb_dbg.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0124-dma-buf-Replace-strlcpy-with-strscpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0124-drm-nouveau-disp-update-SOR-routing-immediately-on-a.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0124-drm-vkms-add-rotate-0-and-reflect-x-property.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0124-fbdev-sh7760fb-Alloc-DMA-memory-from-hardware-device.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0125-drm-nouveau-kms-nv50-pull-some-common-init-out-of-OR.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0125-drm-rockchip-vop2-Add-NV20-and-NV30-support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0125-drm-vkms-add-reflect-y-and-rotate-180-property.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0125-fbdev-sh7760fb-Use-hardware-device-with-dev_-output-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0126-drm-nouveau-kms-nv50-remove-nv_encoder.audio.connect.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0126-drm-rockchip-rk3066_hdmi-Remove-useless-mode_fixup.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0126-drm-vkms-add-rotate-90-property.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0126-fbdev-sm501fb-Output-message-with-fb_err.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0127-drm-nouveau-kms-nv50-keep-output-state-around-until-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0127-drm-rockchip-rk3066_hdmi-Switch-encoder-hooks-to-ato.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0127-drm-vkms-add-rotate-270-property.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0127-fbdev-smscufx-Detect-registered-fb_info-from-refcoun.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0128-drm-nouveau-kms-nv50-move-audio-enable-post-modeset.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0128-drm-vkms-drop-Rotation-TODO.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0128-fbdev-tdfxfb-Set-i2c-adapter-parent-to-hardware-devi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0129-drm-nouveau-disp-add-output-hdmi-config-method.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0129-fbdev-arcfb-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0129-fbdev-core-Pass-Linux-device-to-pm_vt_switch_-functi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0130-drm-arcpgu-Convert-to-platform-remove-callback-retur.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0130-drm-nouveau-disp-move-hdmi-disable-out-of-release.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0130-fbdev-au1200fb-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0130-fbdev-core-Move-framebuffer-and-backlight-helpers-in.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0131-drm-armada-Convert-to-platform-remove-callback-retur.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0131-drm-nouveau-disp-release-outputs-post-modeset.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0131-fbdev-broadsheetfb-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0131-fbdev-core-Add-fb_device_-create-destroy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0132-drm-bridge-cdns-mhdp8546-Improve-error-reporting-in-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0132-drm-nouveau-disp-remove-SOR-routing-updates-from-sup.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0132-fbdev-core-Move-procfs-code-to-separate-file.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0132-fbdev-hecubafb-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0133-drm-bridge-cdns-mhdp8546-Convert-to-platform-remove-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0133-drm-nouveau-disp-add-output-backlight-control-method.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0133-fbdev-core-Move-file-I-O-code-into-separate-file.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0133-fbdev-metronomefb-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0134-drm-bridge-tpd12s015-Convert-to-platform-remove-call.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0134-drm-nouveau-disp-add-output-lvds-config-method.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0134-fbdev-core-Rework-fb-init-code.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0134-fbdev-ps3fb-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0135-drm-etnaviv-Convert-to-platform-remove-callback-retu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0135-drm-nouveau-disp-add-hdmi-audio-hal-function.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0135-fbdev-Make-support-for-userspace-interfaces-configur.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0135-fbdev-smscufx-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0136-drm-imx-dcss-Convert-to-platform-remove-callback-ret.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0136-drm-nouveau-disp-move-dp-aux-pwr-method-to-HAL.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0136-drm-ttm-Don-t-shadow-the-operation-context.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0136-fbdev-udlfb-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0137-drm-imx-lcdc-Convert-to-platform-remove-callback-ret.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0137-drm-nouveau-disp-add-dp-aux-xfer-method.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0137-fbdev-vfb-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0138-drm-ast-Remove-vga2_clone-field.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0138-drm-kmb-Convert-to-platform-remove-callback-returnin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0138-drm-nouveau-disp-add-dp-rates-method.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0138-fbdev-xen-fbfront-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0139-drm-ast-Implement-register-helpers-in-ast_drv.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0139-drm-mediatek-Convert-to-platform-remove-callback-ret.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0139-drm-nouveau-kms-nv50-split-DP-disable-enable-into-tw.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0139-fbdev-Return-number-of-bytes-read-or-written.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0140-drm-ast-Remove-dead-else-branch-in-POST-code.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0140-drm-meson-Convert-to-platform-remove-callback-return.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0140-drm-nouveau-kms-nv50-flush-mst-disables-together.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0140-fbdev-Use-screen_buffer-in-fb_sys_-read-write.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0141-drm-ast-Remove-device-POSTing-and-config-from-chip-d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0141-drm-nouveau-Convert-to-platform-remove-callback-retu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0141-drm-nouveau-kms-nv50-fixup-sink-D3-before-tearing-do.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0141-fbdev-Don-t-re-validate-info-state-in-fb_ops-impleme.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0142-drm-ast-Set-PCI-config-before-accessing-I-O-register.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0142-drm-nouveau-disp-add-dp-train-method.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0142-drm-sprd-Convert-to-platform-remove-callback-returni.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0142-fbdev-Validate-info-screen_-base-buffer-in-fb_ops-im.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0143-drm-ast-Enable-and-unlock-device-access-early-during.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0143-drm-nouveau-disp-move-link-training-out-of-superviso.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0143-fbdev-Move-I-O-read-and-write-code-into-helper-funct.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0144-drm-ast-Set-up-release-action-right-after-enabling-M.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0144-drm-edid-firmware-drop-drm_kms_helper.edid_firmware-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0144-drm-fb-helper-Use-fb_-cfb-sys-_-read-write.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0144-drm-nouveau-disp-add-dp-sst-config-method.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0145-Documentation-vkms-clarify-devres-managed-reference-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0145-drm-ast-Distinguish-among-chip-generations.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0145-drm-nouveau-disp-add-dp-mst-id-get-put-methods.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0145-fbdev-simplefb-Suppress-error-on-missing-power-domai.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0146-drm-ast-Detect-AST-1300-model.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0146-drm-connector-document-enum-drm_connector_tv_mode-DR.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0146-drm-nouveau-disp-move-outp-conn-construction-to-chip.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0146-drm-nouveau-fifo-Remove-duplicated-include-in-chan.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0147-drm-ast-Detect-AST-1400-model.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0147-drm-nouveau-disp-move-outp-init-fini-paths-to-chipse.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0147-drm-rockchip-rk3066_hdmi-include-drm-drm_atomic.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0147-drm-sun4i-rename-sun4i_dotclock-to-sun4i_tcon_dclk.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0148-drm-ast-Detect-AST-2510-model.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0148-drm-gpuvm-Helper-to-get-range-of-unmap-from-a-remap-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0148-drm-nouveau-disp-nv50-skip-DCB_OUTPUT_TV.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0148-drm-sun4i-calculate-proper-DCLK-rate-for-DSI.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0149-drm-ast-Move-widescreen-and-tx-chip-detection-into-s.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0149-drm-nouveau-kms-nv50-create-heads-based-on-nvkm-head.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0149-dt-bindings-gpu-Add-Imagination-Technologies-PowerVR.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0150-drm-ast-Merge-config-and-chip-detection.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0150-drm-imagination-uapi-Add-PowerVR-driver-UAPI.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0150-drm-nouveau-kms-nv50-create-heads-after-outps-conns.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0151-drm-edid-make-read-only-const-array-static.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0151-drm-imagination-Add-skeleton-PowerVR-driver.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0151-drm-nouveau-kms-nv50-name-aux-channels-after-their-c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0151-drm-panel-sharp-ls043t1le01-drop-dummy-functions-and.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0152-drm-imagination-Get-GPU-resources.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0152-drm-nouveau-kms-nv50-create-connectors-based-on-nvkm.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0152-drm-panel-panel-simple-Add-BOE-EV121WXM-N10-1850-pan.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0152-drm-tests-Fix-swapped-drm_framebuffer-tests-paramete.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0153-drivers-firmware-Move-sysfb_init-from-device_initcal.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0153-drm-edid-Add-quirk-for-OSVR-HDK-2.0.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0153-drm-imagination-Add-GPU-register-headers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0153-drm-nouveau-kms-nv50-create-outputs-based-on-nvkm-in.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0154-drm-bridge-samsung-dsim-Drain-command-transfer-FIFO-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0154-drm-imagination-Add-firmware-and-MMU-related-headers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0154-drm-nouveau-kms-nv50-disable-dcb-parsing.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0154-drm-ssd130x-Fix-include-guard-name.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0155-drm-bridge-analogix-anx78xx-Add-missing-definition.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0155-drm-gud-use-vmalloc_array-and-vcalloc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0155-drm-imagination-Add-FWIF-headers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0155-drm-panel-boe-tv101wum-nl6-Remove-extra-delay.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0156-drm-drm_gem.c-Remove-surplus-else-after-return.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0156-drm-imagination-Add-GPU-ID-parsing-and-firmware-load.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0156-drm-panel-boe-tv101wum-nl6-Fine-tune-the-panel-power.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0156-drm-tegra-rgb-Parameterize-V-and-H-sync-polarities.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0157-drm-Add-kms-driver-for-loongson-display-controller.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0157-drm-imagination-Add-GEM-and-VM-related-code.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0158-drm-bridge-tc358768-Default-to-positive-h-v-syncs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0158-drm-imagination-Implement-power-management.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0158-drm-nouveau-nvkm-fini-object-children-in-reverse-ord.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0159-drm-imagination-Implement-firmware-infrastructure-an.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0159-drm-nouveau-nvkm-punt-spurious-irq-messages-to-debug.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0159-gpu-drm-bridge-No-need-to-set-device_driver-owner.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0160-drm-bridge-tc358768-Cleanup-PLL-calculations.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0160-drm-bridge-tc358768-remove-unneeded-semicolon.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0160-drm-imagination-Implement-MIPS-firmware-processor-an.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0160-drm-nouveau-fb-gp102-ga100-switch-to-simpler-vram-si.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0161-accel-ivpu-Initial-debugfs-support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0161-drm-imagination-Implement-free-list-and-HWRT-create-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0161-drm-nouveau-fb-ga102-construct-vidmem-heap-via-new-g.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0161-drm-panel-Modify-innolux-hj110iz-panel-initial-code.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0162-accel-ivpu-Add-firmware-tracing-support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0162-drm-drm_atomic_helper.c-fix-a-typo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0162-drm-imagination-Implement-context-creation-destructi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0162-drm-nouveau-fifo-remove-left-over-references-to-nvkm.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0163-accel-ivpu-Add-debugfs-files-for-testing-device-rese.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0163-drm-imagination-Implement-job-submission-and-schedul.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0163-drm-nouveau-fifo-return-ERR_PTR-from-nvkm_runl_new.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0163-drm-ttm-let-struct-ttm_device_funcs-be-placed-in-rod.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0164-accel-ivpu-Print-firmware-name-and-version.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0164-drm-imagination-Add-firmware-trace-header.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0164-drm-nouveau-fifo-ga100-remove-individual-runlists-ra.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0165-accel-ivpu-Add-fw_name-file-to-debugfs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0165-drm-imagination-Add-firmware-trace-to-debugfs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0165-drm-nouveau-fifo-ga100-add-per-runlist-nonstall-intr.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0165-fbdev-hitfb-Cast-I-O-offset-to-address.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0166-drm-imagination-Add-driver-documentation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0166-drm-nouveau-nvif-fix-potential-double-free.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0166-fbdev-matrox-Remove-trailing-whitespaces.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0167-drm-bridge-tc358768-Attempt-to-fix-DSI-horizontal-ti.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0167-drm-nouveau-kms-don-t-call-drm_dp_cec_set_edid-on-TM.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0167-ipu-v3-Include-linux-io.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0168-drm-i915-display-Use-intel_bo_to_drm_bo-instead-of-o.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0168-drm-nouveau-disp-drop-unused-argument-in-nv50_dp_mod.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0168-drm-sched-Rename-to-drm_sched_can_queue.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0169-drm-bridge-panel-Fix-device-link-for-DRM_BRIDGE_ATTA.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0169-drm-i915-drop-gt-intel_gt.h-include-from-skl_univers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0169-drm-sched-Rename-to-drm_sched_wakeup_if_can_queue.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0169-fbdev-sm712fb-Do-not-include-linux-screen_info.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0170-drm-armada-Call-drm_atomic_helper_shutdown-at-shutdo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0170-drm-i915-aux-add-separate-register-macros-and-functi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0170-drm-panel-Add-Samsung-S6D7AA0-panel-controller-drive.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0170-sysfb-Do-not-include-linux-screen_info.h-from-sysfb-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0171-drm-Call-drm_atomic_helper_shutdown-at-shutdown-time.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0171-drm-bridge-samsung-dsim-Implement-support-for-clock-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0171-drm-i915-aux-rename-dev_priv-to-i915.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0171-fbdev-broadsheetfb-Select-FB_SYS_HELPERS_DEFERRED.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0172-drm-i915-stop-including-i915_utils.h-from-intel_runt.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0172-drm-vc4-Call-drm_atomic_helper_shutdown-at-shutdown-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0172-fbdev-broadsheetfb-Generate-deferred-I-O-ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0173-drm-i915-display-debugfs-entry-to-list-display-capab.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0173-drm-nouveau-constify-pointers-to-hwmon_channel_info.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0173-drm-ssd130x-Call-drm_atomic_helper_shutdown-at-remov.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0173-fbdev-hecubafb-Select-FB_SYS_HELPERS_DEFERRED.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0174-drm-i915-display-Add-framework-to-add-parameters-spe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0174-drm-nouveau-acr-ga102-set-variable-ga102_gsps-storag.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0174-fbdev-hecubafb-Generate-deferred-I-O-ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0175-drm-hisilicon-kirin-Call-drm_atomic_helper_shutdown-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0175-drm-i915-display-Dump-also-display-parameters.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0175-drm-msm-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0175-fbdev-metronomefb-Select-FB_SYS_HELPERS_DEFERRED.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0176-drm-i915-display-Move-enable_fbc-module-parameter-un.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0176-fbdev-metronomefb-Generate-deferred-I-O-ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0177-drm-bridge-dw-hdmi-Replace-all-non-returning-strlcpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0177-drm-i915-display-Move-psr-related-module-parameters-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0177-drm-ssd130x-Drop-_helper-prefix-from-struct-drm_-_he.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0177-fbdev-ssd1307fb-Select-FB_SYS_HELPERS_DEFERRED.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0178-accel-qaic-Remove-size-field-from-struct-qaic_bo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0178-drm-i915-display-Move-vbt_firmware-module-parameter-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0178-drm-panel-samsung-s6d7aa0-use-pointer-for-drm_mode-i.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0178-fbdev-ssd1307fb-Generate-deferred-I-O-ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0179-dma-buf-sw_sync-Replace-all-non-returning-strlcpy-wi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0179-drm-i915-display-Move-lvds_channel_mode-module-param.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0179-drm-simpledrm-Add-support-for-multiple-power-domains.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0179-fbdev-xen-fbfront-Select-FB_SYS_HELPERS_DEFERRED.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0180-drm-bridge-Add-200ms-delay-to-wait-FW-HPD-status-sta.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0180-drm-i915-display-Move-panel_use_ssc-module-parameter.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0180-drm-shmobile-Use-p4cc-to-print-fourcc-codes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0180-fbdev-xen-fbfront-Generate-deferred-I-O-ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0181-drm-i915-display-Move-vbt_sdvo_panel_type-module-par.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0181-drm-imx-dcss-Call-drm_atomic_helper_shutdown-at-shut.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0181-drm-shmobile-Add-support-for-DRM_FORMAT_XRGB8888.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0182-drm-gpuvm-rename-struct-drm_gpuva_manager-to-struct-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0182-drm-i915-display-Move-enable_dc-module-parameter-und.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0182-drm-shmobile-Switch-to-drm_crtc_init_with_planes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0182-drm-virtio-Conditionally-allocate-virtio_gpu_fence.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0183-drm-gpuvm-allow-building-as-module.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0183-drm-i915-display-Move-enable_dpt-module-parameter-un.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0183-drm-shmobile-Add-missing-call-to-drm_fbdev_generic_s.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0183-nouveau-dispnv50-add-cursor-pitch-check.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0184-drm-i915-display-Move-enable_sagv-module-parameter-u.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0184-drm-nouveau-disp-use-drm_kms_helper_connector_hotplu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0184-drm-nouveau-uvmm-rename-umgr-to-base.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0184-drm-shmobile-Make-DRM_SHMOBILE-visible-on-Renesas-So.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0185-drm-bridge-tc358767-Use-devm_clk_get_enabled-helper.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0185-drm-docs-Fix-usage-stats-typos.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0185-drm-gma500-refactor-deprecated-strncpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0185-drm-i915-display-Move-disable_power_well-module-para.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0186-drm-Add-common-fdinfo-helper.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0186-drm-bridge-tfp410-Support-format-negotiation-hooks.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0186-drm-gpuvm-doc-fix-filename-references.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0186-drm-i915-display-Move-enable_ips-module-parameter-un.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0187-drm-bridge-tfp410-Set-input_bus_flags-in-atomic_chec.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0187-drm-i915-display-Move-invert_brightness-module-param.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0187-drm-msm-Switch-to-fdinfo-helper.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0187-drm-nouveau-kms-nv50-hide-unused-variables.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0188-drm-amdgpu-Switch-to-fdinfo-helper.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0188-drm-bridge-mhdp8546-Add-minimal-format-negotiation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0188-drm-bridge-use-drm_bridge_get_edid-instead-of-using-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0188-drm-i915-display-Move-edp_vswing-module-parameter-un.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0189-drm-Add-fdinfo-memory-stats.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0189-drm-bridge-lt9611uxc-use-drm_bridge_get_edid-instead.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0189-drm-bridge-mhdp8546-Set-input_bus_flags-from-atomic_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0189-drm-i915-display-Move-enable_dpcd_backlight-module-p.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0190-drm-bridge-sii902x-Support-format-negotiation-hooks.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0190-drm-i915-display-Move-load_detect_test-parameter-und.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0190-drm-msm-Add-memory-stats-to-fdinfo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0190-drm-tests-Add-calls-to-drm_fb_blit-on-supported-form.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0191-accel-qaic-Update-BO-metadata-in-a-central-location.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0191-drm-bridge-sii902x-Set-input_bus_flags-in-atomic_che.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0191-drm-doc-Relax-fdinfo-string-constraints.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0191-drm-i915-display-Move-force_reset_modeset_test-param.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0191-drm-tests-Add-new-format-conversion-tests-to-better-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0192-accel-qaic-Declare-BO-sliced-after-all-the-operation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0192-drm-bridge-adv7511-Convert-to-use-maple-tree-registe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0192-drm-bridge-tc358767-explicitly-set-readable-register.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0192-drm-gma500-Clear-fbdev-framebuffer-with-fb_memset_io.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0192-drm-i915-display-Move-disable_display-parameter-unde.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0192-drm-tidss-Update-encoder-bridge-chain-connect-model.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0193-accel-qaic-Undo-slicing-setup-done-in-qaic_attach_sl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0193-drm-bridge-cdns-mhdp8546-Fix-the-interrupt-enable-di.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0193-drm-bridge-dpc3433-Convert-to-use-maple-tree-registe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0193-drm-bridge-samsung-dsim-Fix-i.MX8M-enable-flow-to-me.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0193-drm-i915-display-Use-device-parameters-instead-of-mo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0194-accel-qaic-Clean-up-BO-during-flushing-of-transfer-l.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0194-drm-bridge-tc358767-Convert-to-use-maple-tree-regist.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0194-drm-i915-display-Move-verbose_state_checks-under-dis.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0194-drm-ttm-Use-init_on_free-to-delay-release-TTM-BOs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0195-accel-qaic-Create-a-function-to-initialize-BO.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0195-drm-amdgpu-Fix-no-procfs-build.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0195-drm-arm-Make-ARM-devices-menu-depend-on-DRM.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0195-drm-bridge-icn6211-Convert-to-use-maple-tree-registe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0195-drm-i915-display-Move-nuclear_pageflip-under-display.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0196-accel-qaic-Add-QAIC_DETACH_SLICE_BO-IOCTL.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0196-drm-bridge-lt9211-Convert-to-use-maple-tree-register.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0196-drm-bridge-samsung-dsim-fix-blanking-packet-size-cal.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0196-drm-i915-display-Move-enable_dp_mst-under-display.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0196-fbdev-hyperv_fb-Include-linux-screen_info.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0197-drm-bridge-sn65dsi83-Convert-to-use-maple-tree-regis.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0197-drm-execution-context-for-GEM-buffers-v7.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0197-drm-i915-remove-display-device-info-from-i915-capabi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0198-drm-add-drm_exec-selftests-v4.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0198-drm-bridge-samsung-dsim-Fetch-pll-clock-frequency-au.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0198-drm-i915-display-Reset-message-bus-after-each-read-w.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0198-drm-panel-ili9322-Remove-redundant-volatle_reg-opera.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0199-drm-amdkfd-switch-over-to-using-drm_exec-v3.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0199-drm-bridge-samsung-dsim-Select-GENERIC_PHY_MIPI_DPHY.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0199-drm-i915-sprite-move-sprite_name-to-intel_sprite.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0199-drm-panel-ili9322-Convert-to-use-maple-tree-register.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0200-drm-amdgpu-use-drm_exec-for-GEM-and-CSA-handling-v2.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0200-drm-bridge-samsung-dsim-Dynamically-configure-DPHY-t.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0200-drm-i915-lnl-Extend-C10-C20-phy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0200-drm-panel-Add-driver-for-BOE-RM692E5-AMOLED-panel.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0201-drm-amdgpu-use-drm_exec-for-MES-testing.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0201-drm-bridge-samsung-dsim-Support-non-burst-mode.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0201-drm-doc-Document-DRM-device-reset-expectations.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0201-drm-i915-lnl-Fix-check-for-TC-phy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0202-drm-amdgpu-use-the-new-drm_exec-object-for-CS-v3.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0202-drm-i915-display-Abstract-C10-C20-pll-hw-readout.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0202-drm-panel-simple-Add-Ampire-AM-800480L1TMQW-T00H.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0202-drm-vblank-Warn-when-silently-cancelling-vblank-work.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0203-drm-i915-display-Abstract-C10-C20-pll-calculation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0203-drm-loongson-Remove-a-useless-check-in-cursor_plane_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0203-drm-panfrost-Add-cycle-count-GPU-register-definition.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0204-accel-ivpu-Update-debugfs-to-latest-changes-in-DRM.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0204-drm-i915-fix-Makefile-sort-and-indent.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0204-drm-panfrost-Add-fdinfo-support-GPU-load-metrics.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0204-drm-ssd130x-Change-pixel-format-used-to-compute-the-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0204-drm-stm-dsi-Use-devm_platform_ioremap_resource.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0205-accel-ivpu-Compile-ivpu_debugfs.c-conditionally.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0205-drm-i915-move-Makefile-display-debugfs-files-next-to.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0205-drm-panel-ld9040-Use-better-magic-values.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0205-drm-panfrost-Add-fdinfo-support-for-memory-stats.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0206-drm-drm_file-Add-DRM-obj-s-RSS-reporting-function-fo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0206-drm-i915-bios-Clamp-VBT-HDMI-level-shift-on-BDW.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0206-drm-lcdif-Drop-unnecessary-NULL-pointer-check-on-lcd.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0206-drm-panel-ld9040-Register-a-backlight-device.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0207-drm-drv-use-enum-drm_minor_type-when-appropriate.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0207-drm-lcdif-Determine-bus-format-and-flags-in-atomic_c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0207-drm-panfrost-Implement-generic-DRM-object-RSS-report.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0208-drm-amd-pm-Annotate-struct-smu10_voltage_dependency_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0208-drm-file-use-explicit-values-for-enum-drm_minor_type.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0208-drm-i915-Abstract-the-extra-JSL-EHL-DPLL4-power-doma.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0208-drm-lcdif-Check-consistent-bus-format-and-flags-acro.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0209-drm-amdgpu-discovery-Annotate-struct-ip_hw_instance-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0209-drm-i915-Move-the-DPLL-extra-power-domain-handling-u.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0209-drm-lcdif-Add-multiple-encoders-and-first-bridges-su.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0210-drm-i915-Extract-_intel_-enable-disable-_shared_dpll.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0210-drm-i915-selftests-Annotate-struct-perf_series-with-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0210-drm-lcdif-Add-i.MX93-LCDIF-compatible-string.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0211-drm-Switch-i2c-drivers-back-to-use-.probe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0211-drm-i915-Move-the-g45-PEG-band-gap-HPD-workaround-to.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0211-drm-manager-to-keep-track-of-GPUs-VA-mappings.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0211-drm-msm-dpu-Annotate-struct-dpu_hw_intr-with-__count.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0212-drm-debugfs-provide-infrastructure-to-dump-a-DRM-GPU.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0212-drm-i915-hdcp-Rename-HCDP-1.4-enablement-function.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0212-drm-nouveau-pm-Annotate-struct-nvkm_perfdom-with-__c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0212-drm-panel-edp-Convert-to-platform-remove-callback-re.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0213-drm-bridge-display-connector-rename-dp_pwr-to-connec.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0213-drm-i915-hdcp-Convert-intel_hdcp_enable-to-a-blanket.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0213-drm-syncobj-add-IOCTL-to-register-an-eventfd.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0213-drm-vc4-Annotate-struct-vc4_perfmon-with-__counted_b.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0214-drm-bridge-display-connector-handle-hdmi-pwr-supply.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0214-drm-i915-hdcp-Add-more-conditions-to-enable-hdcp.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0214-drm-panel-simple-Drop-prepared_time.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0214-drm-virtio-Annotate-struct-virtio_gpu_object_array-w.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0215-drm-i915-mst-Swap-TRANSCONF-vs.-FECSTALL_DIS_DPTSTRE.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0215-drm-manager-Fix-printk-format-for-size_t.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0215-drm-ttm-Remove-redundant-code-in-ttm_tt_init_fields.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0215-drm-vmwgfx-Annotate-struct-vmw_surface_dirty-with-__.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0216-drm-debugfs-Silence-warning-from-cast.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0216-drm-i915-mst-Disable-transcoder-before-deleting-the-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0216-drm-i915-ttm-Add-I915_BO_PREALLOC.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0216-drm-v3d-Annotate-struct-v3d_perfmon-with-__counted_b.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0217-drm-dp-switch-drm_dp_downstream_-helpers-to-struct-d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0217-drm-i915-display-Set-I915_BO_ALLOC_USER-for-fb.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0217-drm-i915-mst-Clear-ACT-just-before-triggering-payloa.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0217-gpu-host1x-Explicitly-include-correct-DT-includes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0218-drm-Explicitly-include-correct-DT-includes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0218-drm-i915-Add-a-function-to-mmap-framebuffer-obj.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0218-drm-i915-mst-Always-write-CHICKEN_TRANS.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0218-drm-panel-nv3051d-Add-Support-for-Anbernic-351V.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0219-drm-amd-display-Fix-mst-hub-unplug-warning.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0219-drm-i915-display-Add-helper-func-to-get-intel_fbdev-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0219-drm-i915-display-Use-dma_fence-interfaces-instead-of.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0220-drm-arm-komeda-Remove-component-framework-and-add-a-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0220-drm-exynos-dsi-Convert-to-platform-remove-callback-r.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0220-drm-i915-display-Implement-fb_mmap-callback-function.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0220-drm-i915-display-Use-intel_bo_to_drm_bo-instead-of-o.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0221-drm-bridge-samsung-dsim-add-more-mipi-dsi-device-deb.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0221-drm-bridge-tc358767-increase-PLL-lock-time-delay.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0221-drm-i915-Extract-hsw_chicken_trans_reg.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0221-drm-i915-mtl-Disable-stolen-memory-backed-FB-for-A0.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0222-drm-bridge-samsung-dsim-reread-ref-clock-before-conf.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0222-drm-bridge-tc358767-give-VSDELAY-some-positive-value.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0222-drm-i915-Make-IRQ-reset-and-postinstall-multi-gt-awa.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0222-drm-i915-Stop-using-a-reg-variable.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0223-drm-bridge-samsung-dsim-update-PLL-reference-clock.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0223-drm-i915-Extract-mchbar_reg.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0223-drm-i915-gt-Consider-multi-gt-instead-of-to_gt.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0223-drm-ssd130x-Fix-pitch-calculation-in-ssd130x_fb_blit.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0224-drm-bridge-samsung-dsim-adjust-porches-by-rounding-u.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0224-drm-i915-dsi-Remove-dead-GLK-checks.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0224-drm-i915-gem-Consider-multi-gt-instead-of-to_gt.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0224-video-Add-auxiliary-display-drivers-to-Graphics-supp.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0225-drm-bridge-samsung-dsim-calculate-porches-in-Hz.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0225-drm-i915-dsi-Extract-port_ctrl_reg.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0225-drm-i915-selftests-Consider-multi-gt-instead-of-to_g.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0225-fbdev-Move-core-fbdev-symbols-to-a-separate-Kconfig-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0226-drm-i915-Remove-unused-for_each_uabi_class_engine.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0226-drm-i915-mtl-Extend-Wa_22011802037-to-MTL-A-step.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0226-drm-panel-simple-allow-LVDS-format-override.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0226-fbdev-Split-frame-buffer-support-in-FB-and-FB_CORE-s.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0227-Documentation-gpu-fix-Panfrost-documentation-build-w.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0227-drm-Make-FB_CORE-to-be-selected-if-DRM-fbdev-emulati.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0227-drm-i915-Move-for_each_engine-out-of-i915_drv.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0227-drm-i915-mtl-WA-to-clear-RDOP-clock-gating.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0228-drm-i915-dp_mst-Disable-DSC-on-ICL-MST-outputs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0228-drm-i915-mtl-Set-has_llc-0.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0228-drm-rockchip-vop2-Demote-message-in-mod_supported-to.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0229-drm-bridge-it6505-Fix-Kconfig-indentation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0229-drm-i915-display-Support-PSR-entry-VSC-packet-to-be-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0229-drm-i915-mtl-Define-MOCS-and-PAT-tables-for-MTL.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0229-drm-rockchip-vop2-Convert-to-use-maple-tree-register.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0230-drm-bridge-Remove-redundant-i2c_client-in-anx7625-it.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0230-drm-i915-move-display-mutex-inits-to-display-code.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0230-drm-i915-mtl-fix-mocs-selftest.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0231-drm-i915-i915_drv-Use-proper-parameter-naming-in-for.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0231-drm-i915-move-display-spinlock-init-to-display-code.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0231-drm-managed-Clean-up-GFP_-flag-usage-in-drmm_kmalloc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0231-drm-rockchip-remove-redundant-of_match_ptr.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0232-drm-Remove-flag-FBINFO_DEFAULT-from-fbdev-emulation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0232-drm-i915-i915_drv-Use-i915-instead-of-dev_priv-insie.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0232-drm-rockchip-dsi-Use-devm_platform_get_and_ioremap_r.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0233-drm-dp_mst-Add-helper-to-determine-if-an-MST-port-is.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0233-drm-i915-mtl-Add-PTE-encode-function.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0233-fbdev-Remove-FBINFO_DEFAULT-from-static-structs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0234-drm-dp_mst-Factor-out-a-helper-to-check-the-atomic-s.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0234-drm-i915-mtl-workaround-coherency-issue-for-Media.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0234-fbdev-Remove-FBINFO_DEFAULT-from-kzalloc-ed-structs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0235-drm-dp_mst-Swap-the-order-of-checking-root-vs.-non-r.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0235-drm-i915-selftest-Record-GT-error-for-gt-failure.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0235-drm-panel-ltk050h3146w-add-mipi_dsi_device.mode_flag.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0235-fbdev-Remove-FBINFO_DEFAULT-from-devm_kzalloc-ed-str.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0236-drm-dp_mst-Allow-DSC-in-any-Synaptics-last-branch-de.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0236-drm-i915-mtl-Add-workaround-14018778641.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0236-drm-panel-ltk050h3146w-add-support-for-Leadtek-LTK05.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0236-fbdev-Remove-FBINFO_DEFAULT-from-framebuffer_alloc-e.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0237-drm-dp-Add-DP_HBLANK_EXPANSION_CAPABLE-and-DSC_PASST.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0237-drm-i915-dg2-Remove-Wa_15010599737.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0237-drm-i915-hwmon-Get-mutex-and-rpm-ref-just-once-in-hw.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0238-drm-dp_mst-Add-HBLANK-expansion-quirk-for-Synaptics-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0238-drm-i915-guc-Disable-PL1-power-limit-when-loading-Gu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0238-drm-i915-selftests-Align-igt_spinner_create_request-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0239-drm-dp-Add-helpers-to-calculate-the-link-BW-overhead.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0239-drm-i915-hwmon-Block-waiting-for-GuC-reset-to-comple.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0240-drm-i915-dp_mst-Enable-FEC-early-once-it-s-known-DSC.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0240-drm-i915-mtl-Implement-Wa_14019141245.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0241-drm-i915-Migrate-platform-dependent-mock-hugepage-se.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0241-drm-i915-dp-Specify-the-FEC-overhead-as-an-increment.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0241-fbdev-fsl-diu-fb-Remove-flag-FBINFO_DEFAULT.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0242-drm-i915-Use-correct-huge-page-manager-for-MTL.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0242-drm-i915-dp-Pass-actual-BW-overhead-to-m_n-calculati.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0242-fbdev-Remove-FBINFO_FLAG_DEFAULT-from-kzalloc-ed-str.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0243-drm-i915-dp_mst-Account-for-FEC-and-DSC-overhead-dur.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0243-fbdev-Remove-FBINFO_FLAG_DEFAULT-from-framebuffer_al.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0244-drm-i915-dp_mst-Add-atomic-state-for-all-streams-on-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0244-drm-i915-selftest-Update-the-SLPC-selftest.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0244-fbdev-atafb-Remove-flag-FBINFO_FLAG_DEFAULT.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0245-drm-i915-dp_mst-Program-the-DSC-PPS-SDP-for-each-str.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0245-drm-i915-rc6-throw-out-set-wrapper.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0245-fbdev-pxafb-Remove-flag-FBINFO_FLAG_DEFAULT.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0246-drm-i915-dp-Make-sure-the-DSC-PPS-SDP-is-disabled-wh.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0246-i915-pmu-Add-support-for-total-context-runtime-for-G.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0247-drm-i915-dp_mst-Add-missing-DSC-compression-disablin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0247-drm-i915-fdinfo-Enable-fdinfo-for-GuC-backends.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0247-fbdev-Remove-FBINFO_DEFAULT-and-FBINFO_FLAG_DEFAULT.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0248-drm-i915-dp-Rename-intel_ddi_disable_fec_state-to-in.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0248-drm-i915-gt-Use-gt_err-for-GT-info.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0248-fbdev-Document-that-framebuffer_alloc-returns-zero-e.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0249-drm-i915-dp-Wait-for-FEC-detected-status-in-the-sink.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0249-drm-i915-guc-Force-a-reset-on-internal-GuC-error.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0249-drm-i915-selftests-Use-gt_err-for-GT-info.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0249-drm-panel-db7430-remove-unused-variables.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0250-drm-i915-dp-Disable-FEC-ready-flag-in-the-sink.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0250-drm-i915-guc-Consolidate-duplicated-capture-list-cod.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0250-drm-i915-mtl-Adding-DeviceID-for-Arrowlake-S-under-M.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0250-fbdev-Add-fb_ops-init-macros-for-framebuffers-in-DMA.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0251-drm-fbdev-dma-Use-fbdev-DMA-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0251-drm-i915-dp_mst-Handle-the-Synaptics-HBlank-expansio.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0251-drm-i915-gsc-define-gsc-fw.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0251-drm-i915-guc-Capture-list-naming-clean-up.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0252-drm-i915-dp_mst-Enable-decompression-in-the-sink-fro.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0252-drm-i915-guc-Fix-error-capture-for-virtual-engines.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0252-drm-tegra-Use-fbdev-DMA-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0253-drm-i915-dp-Enable-DSC-via-the-connector-decompressi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0253-drm-i915-gt-Wait-longer-for-tasks-in-migrate-selftes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0253-drm-i915-gvt-fix-intel_vgpu_alloc_resource-kernel-do.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0253-drm-tegra-Set-fbdev-FBINFO_VIRTFB-flag.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0254-drm-i915-Add-Wa_14015150844.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0254-drm-i915-dp_mst-Enable-DSC-passthrough.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0254-drm-i915-vma-fix-kernel-doc-function-name-for-i915_v.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0254-drm-tegra-Store-pointer-to-vmap-ed-framebuffer-in-sc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0255-drm-exynos-Use-fbdev-DMA-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0255-drm-i915-dp_mst-Enable-MST-DSC-decompression-for-all.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0255-drm-i915-mtl-Drop-Wa_14017240301.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0255-drm-i915-utils-drop-kernel-doc-from-__wait_for.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0256-drm-exynos-Set-fbdev-FBINFO_VIRTFB-flag.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0256-drm-i915-Factor-out-function-to-clear-pipe-update-fl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0256-drm-i915-Run-relevant-bits-of-debugfs-drop_caches-pe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0256-drm-i915-vma-document-struct-i915_vma_resource-waker.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0257-drm-i915-dp_mst-Force-modeset-CRTC-if-DSC-toggling-r.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0257-drm-i915-gt-skip-WA-verification-for-GEN7_MISCCPCTL-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0257-drm-i915-perf-fix-i915_perf_ioctl_version-kernel-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0257-drm-omapdrm-Set-VM-flags-in-GEM-object-mmap-function.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0258-drm-i915-Add-Wa_18022495364.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0258-drm-i915-dp_mst-Improve-BW-sharing-between-MST-strea.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0258-drm-i915-error-fix-i915_capture_error_state-kernel-d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0258-drm-omapdrm-Use-GEM-mmap-for-fbdev-emulation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0259-drm-i915-dp_mst-Check-BW-limitations-only-after-all-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0259-drm-i915-huc-silence-injected-failure-in-the-load-vi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0259-drm-i915-request-drop-kernel-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0259-drm-omapdrm-Set-fbdev-FBINFO_VIRTFB-flag.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0260-drm-i915-Query-compressed-bpp-properly-using-correct.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0260-drm-i915-gem-fix-i915_gem_object_lookup_rcu-kernel-d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0260-drm-i915-pxp-mtl-Update-pxp-firmware-response-timeou.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0260-fbdev-Remove-FB_DEFAULT_SYS_OPS.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0261-drm-i915-Drop-redundant-modeset-check.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0261-drm-i915-engine-fix-kernel-doc-function-name-for-int.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0261-drm-i915-pxp-mtl-Update-pxp-firmware-packet-size.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0261-fbdev-Harmonize-some-comments-in-linux-fb.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0262-drm-i915-Split-intel_update_crtc-into-two-parts.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0262-drm-i915-context-fix-kernel-doc-parameter-descriptio.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0262-drm-i915-lrc-User-PXP-contexts-requires-runalone-bit.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0262-drm-panel-ld9040-add-backlight-Kconfig-dependency.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0263-drm-ast-Do-not-enable-PCI-resources-multiple-times.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0263-drm-i915-Do-plane-etc.-updates-more-atomically-acros.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0263-drm-i915-gtt-fix-i915_vm_resv_put-kernel-doc-paramet.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0263-drm-i915-refactor-deprecated-strncpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0264-drm-i915-engine-hide-preempt_hang-selftest-member-fr.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0264-drm-i915-gt-Update-RC6-mask-for-mtl_drpc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0264-drm-i915-gvt-Clean-up-zero-initializers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0264-drm-ssd130x-Inline-the-ssd130x_buf_-alloc-free-funct.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0265-drm-i915-gt-remove-a-static-inline-that-requires-inc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0265-drm-i915-guc-add-dbgfs_node-member-kernel-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0265-drm-panelreplay-dpcd-register-definition-for-panelre.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0265-drm-ssd130x-Allocate-buffer-in-the-plane-s-.atomic_c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0266-dma-buf-Fix-the-typo-in-DMA-BUF-statistics-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0266-drm-i915-gem-remove-inlines-from-i915_gem_execbuffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0266-drm-i915-guc-drop-lots-of-kernel-doc-markers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0266-drm-i915-psr-Move-psr-specific-dpcd-init-into-own-fu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0267-drm-amdgpu-Rename-aqua_vanjaram_reg_init.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0267-drm-i915-Add-Wa_18028616096.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0267-drm-i915-guc-add-intel_guc_state_capture-member-docs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0267-drm-i915-panelreplay-Initializaton-and-compute-confi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0268-drm-amd-display-Remove-else-after-return-statement-i.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0268-drm-i915-active-fix-kernel-doc-for-function-paramete.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0268-drm-i915-panelreplay-Enable-panel-replay-dpcd-initia.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0268-drm-i915-perf-Remove-gtt_offset-from-stream-oa_buffe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0269-drm-amd-display-Remove-else-after-return-in-dm_crtc_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0269-drm-i915-Do-not-disable-preemption-for-resets.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0269-drm-i915-panelreplay-enable-disable-panel-replay.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0269-drm-i915-pmu-drop-kernel-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0270-drm-amd-display-Clean-up-style-problems-in-amdgpu_dm.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0270-drm-i915-Avoid-endless-HPD-poll-detect-loop-via-runt.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0270-drm-i915-abstract-plane-protection-check.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0270-drm-i915-pxp-fix-kernel-doc-for-member-dev_link.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0271-drm-amd-display-Remove-redundant-braces-in-amdgpu_dm.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0271-drm-i915-Don-t-change-the-status-of-forced-connector.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0271-drm-i915-remove-excess-functions-from-plane-protecti.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0271-drm-i915-scatterlist-fix-kernel-doc-parameter-docume.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0272-drm-amd-display-Use-seq_puts-in-amdgpu_current_color.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0272-drm-i915-Don-t-change-the-status-of-forced-connector.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0272-drm-i915-mtl-Define-GSC-Proxy-component-interface.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0272-drm-i915-update-in-source-bug-filing-URLs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0273-drm-amd-display-fix-comment-typo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0273-drm-i915-mtl-C20-state-verification.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0273-drm-i915-vdsc-Fix-first_line_bpg_offset-calculation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0273-mei-gsc_proxy-add-gsc-proxy-driver.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0274-drm-amd-Use-attribute-groups-for-PSP-flashing-attrib.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0274-drm-display-dp-Add-helper-function-to-get-DSC-bpp-pr.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0274-drm-i915-dp-Fix-LT-debug-print-in-SDP-CRC-enable.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0274-drm-i915-gsc-add-initial-support-for-GSC-proxy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0275-drm-amd-Make-flashing-messages-quieter.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0275-drm-i915-display-Store-compressed-bpp-in-U6.4-format.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0275-drm-i915-gsc-add-support-for-GSC-proxy-interrupt.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0275-drm-i915-pxp-mtl-intel_pxp_init_hw-needs-runtime-pm-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0276-drm-amd-Convert-USB-C-PD-F-W-attributes-into-groups.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0276-drm-i915-display-Consider-fractional-vdsc-bpp-while-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0276-drm-i915-pxp-Optimize-GET_PARAM-PXP_STATUS.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0276-drm-i915-vma-fix-struct-i915_vma_bindinfo-kernel-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0277-drm-amd-Add-documentation-for-how-to-flash-a-dGPU.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0277-drm-i915-audio-Consider-fractional-vdsc-bpp-while-co.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0277-drm-i915-display-Remove-unused-POWER_DOMAIN_MASK.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0277-drm-i915-gem-fix-function-pointer-member-kernel-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0278-drm-amd-Detect-IFWI-or-PD-upgrade-support-in-psp_ear.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0278-drm-i915-cx0-Add-intel_cx0_get_owned_lane_mask.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0278-drm-i915-dsc-mtl-Add-support-for-fractional-bpp.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0278-drm-i915-scatterlist-fix-kernel-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0279-drm-amd-adjust-whitespace-for-amdgpu_psp.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0279-drm-i915-Simplify-intel_cx0_program_phy_lane-with-lo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0279-drm-i915-dp-Iterate-over-output-bpp-with-fractional-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0279-drm-i915-ttm-fix-i915_ttm_to_gem-kernel-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0280-drm-amdkfd-Access-gpuvm_export_dmabuf-API-to-get-Dma.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0280-drm-i915-cx0-Enable-disable-TX-only-for-owned-PHY-la.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0280-drm-i915-dsc-Add-debugfs-entry-to-validate-DSC-fract.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0280-drm-i915-use-kernel-doc-Werror-when-CONFIG_DRM_I915_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0281-drm-amdgpu-return-an-error-if-query_video_caps-is-no.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0281-drm-i915-cx0-Program-vswing-only-for-owned-lanes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0281-drm-i915-dsc-Allow-DSC-only-with-fractional-bpp-when.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0281-drm-i915-uc-Track-patch-level-versions-on-reduced-ve.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0282-drm-amdgpu-Update-invalid-PTE-flag-setting.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0282-drm-i915-display-Use-int-for-entry-setup-frames.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0282-drm-i915-mtl-Define-GuC-firmware-version-for-MTL.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0283-drm-amdgpu-skip-address-adjustment-for-GFX-RAS-injec.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0283-drm-i915-dp-Tune-down-FEC-detection-timeout-error-me.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0283-drm-i915-guc-Decode-another-GuC-load-failure-case.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0284-drm-amd-display-Clean-up-warnings-in-amdgpu_dm_pp_sm.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0284-drm-i915-guc-Print-status-register-when-waiting-for-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0284-drm-i915-selftest-Simplify-Y-major-tiling-in-blit-se.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0284-drm-i915-xe2lpd-implement-WA-for-underruns-while-ena.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0285-drm-amd-display-Remove-unnecessary-casts-in-amdgpu_d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0285-drm-i915-Eliminate-has_4tile-feature-flag.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0285-drm-i915-panelreplay-Debugfs-support-for-panel-repla.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0285-drm-i915-uc-Enhancements-to-firmware-table-validatio.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0286-drm-amd-display-Clean-up-warnings-in-amdgpu_dm-_mst_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0286-drm-i915-Fix-fractional-bpp-handling-in-intel_link_b.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0286-drm-i915-dp-Consider-output_format-while-computing-d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0286-drm-i915-uc-Reject-duplicate-entries-in-firmware-tab.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0287-drm-amdkfd-Use-KIQ-to-unmap-HIQ.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0287-drm-i915-dp-Move-compressed-bpp-check-with-420-forma.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0287-drm-i915-dsb-DSB-code-refactoring.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0287-drm-i915-uc-Make-unexpected-firmware-versions-an-err.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0288-drm-amdgpu-have-bos-for-PDs-PTS-cpu-accessible-when-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0288-drm-i915-display-keep-struct-intel_display-members-s.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0288-drm-i915-dp_mst-Use-output_format-to-get-the-final-l.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0288-drm-i915-mtl-Drop-FLAT-CCS-check.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0289-drm-amd-amdgpu-Add-cu_occupancy-sysfs-file-to-GFX9.4.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0289-drm-i915-dp-Use-consistent-name-for-link-bpp-and-com.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0289-drm-i915-move-_crtc_clock_get-to-intel_dpll.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0289-drm-i915-mtl-Add-MTL-for-remapping-CCS-FBs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0290-drm-amdkfd-Skip-handle-mapping-SVM-range-with-no-GPU.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0290-drm-i915-add-vlv_pipe_to_phy-helper-to-replace-DPIO_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0290-drm-i915-dp-Update-Bigjoiner-interface-bits-for-comp.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0290-drm-i915-mtl-Fix-the-wa-number-for-Wa_22016670082.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0291-drm-amdgpu-Change-golden-settings-for-GFX-v9.4.3.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0291-drm-i915-convert-vlv_dpio_read-write-from-pipe-to-ph.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0291-drm-i915-intel_cdclk-Add-vdsc-with-bigjoiner-constra.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0291-drm-i915-preparation-for-using-PAT-index.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0292-drm-amdgpu-Fix-error-warnings-in-gmc_v9_0.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0292-drm-i915-dp-Remove-extra-logs-for-printing-DSC-info.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0292-drm-i915-fbc-Split-plane-size-vs.-surface-size-check.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0292-drm-i915-use-pat_index-instead-of-cache_level.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0293-drm-i915-dp-Avoid-forcing-DSC-BPC-for-MST-case.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0293-drm-i915-fbc-Bump-max-surface-size-to-8kx4k-on-icl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0293-drm-i915-pxp-Add-GSC-CS-back-end-resource-init-and-c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0294-drm-amd-display-Block-optimize-on-consecutive-FAMS-e.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0294-drm-i915-dp-Add-functions-to-get-min-max-src-input-b.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0294-drm-i915-fbc-Bump-ivb-FBC-max-surface-size-to-4kx4k.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0294-drm-i915-pxp-Add-MTL-hw-plumbing-enabling-for-KCR-op.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0295-drm-amdgpu-Fix-warnings-in-gfxhub_-v1_0-v1_2.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0295-drm-dp_mst-Store-the-MST-PBN-divider-value-in-fixed-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0295-drm-i915-dp-Check-min-bpc-DSC-limits-for-dsc_force_b.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0295-drm-i915-pxp-Add-MTL-helpers-to-submit-Heci-Cmd-Pack.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0296-drm-amdgpu-Remove-redundant-GFX-v9.4.3-sequence.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0296-drm-dp_mst-Fix-PBN-divider-calculation-for-UHBR-rate.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0296-drm-i915-dp-Avoid-left-shift-of-DSC-output-bpp-by-4.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0296-drm-i915-pxp-Add-GSC-CS-backend-to-send-GSC-fw-messa.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0297-drm-amdgpu-Fix-warnings-in-gfxhub_v2_0.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0297-drm-dp_mst-Add-kunit-tests-for-drm_dp_get_vc_payload.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0297-drm-i915-dp-Rename-helper-to-get-DSC-max-pipe_bpp.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0297-drm-i915-pxp-Add-ARB-session-creation-and-cleanup.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0298-drm-amdgpu-Prefer-dev_warn-over-printk.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0298-drm-i915-dp-Replace-intel_dp_is_uhbr_rate-with-drm_d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0298-drm-i915-dp-Separate-out-functions-for-edp-DP-for-co.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0298-drm-i915-uapi-pxp-Add-a-GET_PARAM-for-PXP.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0299-drm-amdgpu-Fix-warnings-in-gmc_v10_0.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0299-drm-i915-dp-Account-for-channel-coding-efficiency-on.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0299-drm-i915-dp-Add-DSC-BPC-BPP-constraints-while-select.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0299-drm-i915-pxp-On-MTL-KCR-enabling-doesn-t-wait-on-tee.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0300-drm-amdgpu-Fix-errors-warnings-in-gmc_-v6_0-v7_0.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0300-drm-i915-dp-Fix-UHBR-link-M-N-values.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0300-drm-i915-dp-Separate-out-function-to-get-compressed-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0300-drm-i915-pxp-Enable-PXP-with-MTL-GSC-CS.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0301-drm-amdgpu-Fix-warnings-in-gfxhub_v2_1.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0301-drm-i1915-guc-Fix-probe-injection-CI-failures-after-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0301-drm-i915-dp-Get-optimal-link-config-to-have-best-com.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0301-drm-i915-dp_mst-Calculate-the-BW-overhead-in-intel_d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0302-drm-amdgpu-Remove-else-after-return-statement-in-gmc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0302-drm-i915-dp-Check-src-sink-compressed-bpp-limit-for-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0302-drm-i915-dp_mst-Fix-PBN-MTP_TU-size-calculation-for-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0302-drm-i915-guc-Fix-confused-register-capture-list-crea.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0303-drm-amdgpu-Fix-warnings-in-gmc_v11_0.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0303-drm-i915-dp-Check-if-force_dsc_output_format-is-poss.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0303-drm-i915-dp-Report-a-rounded-down-value-as-the-maxim.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0303-drm-i915-hwmon-Silence-UBSAN-uninitialized-bool-vari.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0304-drm-amdgpu-Remove-else-after-return-statement-in-gfx.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0304-drm-i915-Dump-error-capture-to-kernel-log.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0304-drm-i915-display-Remove-unused-POWER_DOMAIN_MODESET.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0304-drm-i915-dp-Simplify-intel_dp_max_data_rate.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0305-drm-amdgpu-vkms-drop-redundant-set-of-fb_modifiers_n.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0305-drm-i915-dp-Reuse-intel_dp_-max-effective-_data_rate.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0305-drm-i915-guc-Dump-error-capture-to-dmesg-on-CTB-erro.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0306-drm-amd-pm-disbale-dcefclk-device-sysnode-on-GFX-v9..patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0306-drm-i915-dsi-assume-BXT-gpio-works-for-non-native-GP.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0306-drm-i915-guc-slpc-Disable-rps_boost-debugfs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0307-drm-amdgpu-Fix-warnings-in-gmc_v8_0.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0307-drm-i915-display-remove-redundant-parameter-from-sdp.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0307-drm-i915-dsi-switch-mipi_exec_gpio-from-dev_priv-to-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0307-drm-i915-mtl-do-not-enable-render-power-gating-on-MT.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0308-drm-amdgpu-Fix-warnings-in-gfxhub_-v3_0-v3_0_3.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0308-drm-i915-display-combine-DP-audio-compute-config-ste.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0308-drm-i915-dsi-clarify-GPIO-exec-sequence.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0308-drm-i915-mtl-Add-MTL-performance-tuning-changes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0309-drm-amdgpu-Fix-errors-warnings-in-gfx_v10_0.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0309-drm-i915-display-add-lock-while-printing-frontbuffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0309-drm-i915-dsi-rename-platform-specific-_exec_gpio-to-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0309-drm-i915-mtl-Extend-Wa_16014892111-to-MTL-A-step.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0310-drm-amdgpu-gfx9-move-update_spm_vmid-out-of-rlc_init.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0310-drm-i915-Fix-memory-leaks-in-function-live_nop_switc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0310-drm-i915-dsi-bxt-icl-GPIO-set-value-do-not-need-gpio.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0310-drm-i915-sdvo-Issue-SetTargetOutput-prior-to-GetAtta.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0311-drm-amdgpu-gfx10-move-update_spm_vmid-out-of-rlc_ini.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0311-drm-i915-dsi-Replace-while-1-with-one-with-clear-exi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0311-drm-i915-pmu-Change-bitmask-of-enabled-events-to-u32.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0311-drm-i915-sdvo-Protect-macro-args.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0312-drm-amdgpu-Increase-soft-IH-ring-size.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0312-drm-i915-dsi-Get-rid-of-redundant-else.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0312-drm-i915-pmu-Support-PMU-for-all-engines.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0312-drm-i915-sdvo-s-sdvo_inputs_mask-sdvo_num_inputs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0313-drm-i915-Don-t-warn-about-zero-N-P-in-_calc_dpll_par.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0313-drm-i915-dsi-Replace-check-with-a-missing-MIPI-seque.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0313-drm-i915-pmu-Skip-sampling-engines-with-no-enabled-c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0314-drm-amdkfd-add-kfd2kgd-debugger-callbacks-for-GC-v9..patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0314-drm-i915-Fully-populate-crtc_state-dpll.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0314-drm-i915-dsi-Remove-GPIO-lookup-table-at-the-end-of-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0314-drm-i915-pmu-Transform-PMU-parking-code-to-be-GT-bas.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0315-drm-amdkfd-restore-debugger-additional-info-for-gfx-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0315-drm-i915-dsi-Fix-wrong-initial-value-for-GPIOs-in-bx.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0315-drm-i915-pmu-Add-reference-counting-to-the-sampling-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0315-drm-i915-sdvo-Pick-the-TV-dotclock-from-adjusted_mod.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0316-drm-amdkfd-enable-watch-points-globally-for-gfx943.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0316-drm-i915-dsi-Extract-common-soc_gpio_set_value-helpe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0316-drm-i915-pmu-Prepare-for-multi-tile-non-engine-count.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0316-drm-i915-sdvo-Fail-gracefully-if-the-TV-dotclock-is-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0317-drm-amdkfd-add-multi-process-debugging-support-for-G.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0317-drm-i915-dsi-Replace-poking-of-VLV-GPIOs-behind-the-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0317-drm-i915-pmu-Export-counters-from-all-tiles.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0317-drm-i915-rpl-Update-pci-ids-for-RPL-P-U.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0318-drm-amdgpu-rename-psp_execute_non_psp_fw_load-and-ma.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0318-drm-i915-dsi-Prepare-soc_gpio_set_value-to-distingui.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0318-drm-i915-mtl-end-support-for-set-caching-ioctl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0318-drm-i915-vma-constify-unbind_fence_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0319-drm-amdgpu-use-psp_execute_load_ip_fw-instead.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0319-drm-i915-display-update-intel_dp_has_audio-to-suppor.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0319-drm-i915-dsi-Replace-poking-of-CHV-GPIOs-behind-the-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0319-fbdev-Add-Kconfig-options-to-select-different-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0320-drm-i915-display-configure-SDP-split-for-DP-MST.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0320-drm-i915-dsi-Combine-checks-in-mipi_exec_gpio.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0320-drm-radeon-ERROR-foo-bar-should-be-foo-bar.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0320-fbdev-Add-initializer-macros-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0321-drm-armada-Use-regular-fbdev-I-O-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0321-drm-i915-iosf-Drop-unused-APIs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0321-drm-i915-regs-split-out-intel_color_regs.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0321-drm-radeon-ERROR-foo-should-be-foo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0322-drm-exynos-Use-regular-fbdev-I-O-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0322-drm-i915-color-move-CHV-CGM-pipe-mode-read-to-intel_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0322-drm-i915-display-Use-int-type-for-entry_setup_frames.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0322-drm-radeon-ERROR-foo-should-be-foo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0323-drm-gma500-Use-regular-fbdev-I-O-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0323-drm-i915-display-Do-not-check-psr2-if-psr-panel-repl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0323-drm-i915-move-HSW-gamma-mode-read-to-intel_color.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0323-drm-radeon-ERROR-that-open-brace-should-be-on-the-pr.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0324-drm-i915-Polish-some-RMWs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0324-drm-i915-move-ILK-CSC-mode-read-to-intel_color.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0324-drm-radeon-ERROR-foo-should-be-foo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0324-drm-radeon-Use-regular-fbdev-I-O-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0325-drm-amdkfd-Update-CWSR-grace-period-for-GFX9.4.3.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0325-drm-fbdev-dma-Use-regular-fbdev-I-O-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0325-drm-i915-Push-audio-enable-disable-further-out.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0325-drm-i915-color-move-SKL-gamma-and-CSC-enable-read-to.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0326-drm-amdgpu-add-watchdog-timer-enablement-for-gfx_v9_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0326-drm-i915-Wrap-g4x-DP-HDMI-audio-enable-disable.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0326-drm-i915-color-move-pre-SKL-gamma-and-CSC-enable-rea.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0326-drm-omapdrm-Use-regular-fbdev-I-O-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- commit 55b06a7</changelog>
  <changelog author="ematsumiya@suse.de" date="1759492803">- cifs: prevent NULL pointer dereference in UTF16 conversion
  (bsc#1250365, CVE-2025-39838).
- commit 5883dcd</changelog>
  <changelog author="ailiop@suse.com" date="1759492804">- Squashfs: add additional inode sanity checking (git-fixes).
- commit fe46811</changelog>
  <changelog author="ailiop@suse.com" date="1759492805">- Squashfs: reject negative file sizes in squashfs_read_inode()
  (git-fixes).
- commit 2f68e78</changelog>
  <changelog author="tiwai@suse.de" date="1759579200">- ALSA: usb-audio: Add DSD support for Comtrue USB Audio device
  (stable-fixes).
- ALSA: usb-audio: Fix build with CONFIG_INPUT=n (git-fixes).
- ALSA: usb-audio: Convert comma to semicolon (git-fixes).
- ALSA: usb-audio: Add mixer quirk for Sony DualSense PS5
  (stable-fixes).
- ALSA: usb-audio: Remove unneeded wmb() in mixer_quirks
  (stable-fixes).
- ALSA: usb-audio: Simplify NULL comparison in mixer_quirks
  (stable-fixes).
- ALSA: usb-audio: Avoid multiple assignments in mixer_quirks
  (stable-fixes).
- ALSA: usb-audio: Drop unnecessary parentheses in mixer_quirks
  (stable-fixes).
- ALSA: usb-audio: Fix block comments in mixer_quirks
  (stable-fixes).
- commit 929e260</changelog>
  <changelog author="tiwai@suse.de" date="1759579201">- ASoC: wcd934x: fix error handling in wcd934x_codec_parse_data()
  (git-fixes).
- ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free
  (git-fixes).
- ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping
  (git-fixes).
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping
  (git-fixes).
- ASoC: Intel: bytcht_es8316: Fix invalid quirk input mapping
  (git-fixes).
- ASoC: qcom: audioreach: fix potential null pointer dereference
  (git-fixes).
- ASoC: imx-hdmi: remove cpu_pdev related code (git-fixes).
- ALSA: lx_core: use int type to store negative error codes
  (git-fixes).
- ALSA: usb-audio: Add mute TLV for playback volumes on more
  devices (stable-fixes).
- ALSA: usb-audio: move mixer_quirks' min_mute into common quirk
  (stable-fixes).
- commit 86dd099</changelog>
  <changelog author="tiwai@suse.de" date="1759579202">- docs: admin-guide: update to current minimum pipe size default
  (git-fixes).
- drivers/base/node: handle error properly in register_one_node()
  (git-fixes).
- Bluetooth: ISO: don't leak skb in ISO_CONT RX (git-fixes).
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (git-fixes).
- Bluetooth: MGMT: Fix not exposing debug UUID on
  MGMT_OP_READ_EXP_FEATURES_INFO (git-fixes).
- drm/radeon/r600_cs: clean up of dead code in r600_cs
  (git-fixes).
- drm/bridge: it6505: select REGMAP_I2C (git-fixes).
- drm/panel: novatek-nt35560: Fix invalid return value
  (git-fixes).
- can: rcar_can: rcar_can_resume(): fix s2ram with PSCI
  (stable-fixes).
- drm/i915/backlight: Return immediately when scale() finds
  invalid parameters (stable-fixes).
- commit 07504f9</changelog>
  <changelog author="tiwai@suse.de" date="1759579203">- maple_tree: fix MAPLE_PARENT_RANGE32 and parent pointer docs
  (git-fixes).
- media: rj54n1cb0c: Fix memleak in rj54n1_probe() (git-fixes).
- media: lirc: Fix error handling in lirc_register() (git-fixes).
- media: zoran: Remove zoran_fh structure (git-fixes).
- drm/amdgpu: remove the redeclaration of variable i (git-fixes).
- drm/msm/dpu: fix incorrect type for ret (git-fixes).
- drm/amdkfd: Fix error code sign for EINVAL in svm_ioctl()
  (git-fixes).
- drm/amd/pm: Disable SCLK switching on Oland with high pixel
  clocks (v3) (git-fixes).
- drm/amd/pm: Disable MCLK switching with non-DC at 120 Hz+ (v2)
  (git-fixes).
- drm/amd/pm: Treat zero vblank time as too short in si_dpm (v3)
  (git-fixes).
- drm/amd/pm: Adjust si_upload_smc_data register programming (v3)
  (git-fixes).
- drm/amd/pm: Fix si_upload_smc_data (v3) (git-fixes).
- drm/amd/pm: Disable ULV even if unsupported (v3) (git-fixes).
- drm/amdgpu: Power up UVD 3 for FW validation (v2) (git-fixes).
- drm/rcar-du: dsi: Fix 1/2/3 lane support (git-fixes).
- drm/amd/display: Remove redundant semicolons (git-fixes).
- firewire: core: fix overlooked update of subsystem ABI version
  (git-fixes).
- commit 2161328</changelog>
  <changelog author="tiwai@suse.de" date="1759579204">- net: nfc: nci: Add parameter validation for packet data
  (git-fixes).
- net: usb: Remove disruptive netif_wake_queue in
  rtl8150_set_multicast (git-fixes).
- wifi: ath11k: HAL SRNG: don't deinitialize and re-initialize
  again (git-fixes).
- wifi: ath10k: avoid unnecessary wait for service ready message
  (git-fixes).
- wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load()
  (git-fixes).
- wifi: rtw89: avoid circular locking dependency in
  ser_state_run() (git-fixes).
- wifi: mac80211: fix Rx packet handling when pubsta information
  is not available (git-fixes).
- wifi: mt76: fix potential memory leak in mt76_wmac_probe()
  (git-fixes).
- wifi: mwifiex: send world regulatory domain to driver
  (git-fixes).
- media: b2c2: Fix use-after-free causing by irq_check_work in
  flexcop_pci_remove (git-fixes).
- media: uvcvideo: Mark invalid entities with id
  UVC_INVALID_ENTITY_ID (git-fixes).
- media: i2c: mt9v111: fix incorrect type for ret (git-fixes).
- media: pci: ivtv: Add missing check after DMA map (git-fixes).
- media: cx18: Add missing check after DMA map (git-fixes).
- media: st-delta: avoid excessive stack usage (git-fixes).
- media: v4l2-subdev: Fix alloc failure check in
  v4l2_subdev_call_state_try() (git-fixes).
- wifi: virt_wifi: Fix page fault on connect (stable-fixes).
- mmc: sdhci-cadence: add Mobileye eyeQ support (stable-fixes).
- usb: core: Add 0x prefix to quirks debug output (stable-fixes).
- commit dbb8904</changelog>
  <changelog author="tiwai@suse.de" date="1759579205">- drivers/base/node: fix double free in register_one_node()
  (git-fixes).
- commit 205d070</changelog>
  <changelog author="tiwai@suse.de" date="1759579206">- Bluetooth: hci_sync: Fix using random address for BIG/PA
  advertisements (git-fixes).
- Bluetooth: ISO: free rx_skb if not consumed (git-fixes).
- wifi: ath12k: fix wrong logging ID used for CE (git-fixes).
- wifi: iwlwifi: Remove redundant header files (git-fixes).
- media: tuner: xc5000: Fix use-after-free in xc5000_release
  (git-fixes).
- media: mc: Fix MUST_CONNECT handling for pads with no links
  (git-fixes).
- drm/panthor: Fix memory leak in panthor_ioctl_group_create()
  (git-fixes).
- ASoC: Intel: sof_sdw: Prevent jump to NULL add_sidecar callback
  (git-fixes).
- ALSA: pcm: Disable bottom softirqs as part of spin_lock_irq()
  on PREEMPT_RT (git-fixes).
- commit 90486f1</changelog>
  <changelog author="tiwai@suse.de" date="1759579207">- wifi: ath12k: fix the fetching of combined rssi (git-fixes).
- commit 75dc6e6</changelog>
  <changelog author="tiwai@suse.de" date="1759665600">- bus: mhi: host: Do not use uninitialized 'dev' pointer in
  mhi_init_irq_setup() (git-fixes).
- iio: imu: inv_icm42600: Drop redundant pm_runtime
  reinitialization in resume (git-fixes).
- iio: consumers: Fix offset handling in
  iio_convert_raw_to_processed() (git-fixes).
- iio: dac: ad5421: use int type to store negative error codes
  (git-fixes).
- iio: dac: ad5360: use int type to store negative error codes
  (git-fixes).
- iio: frequency: adf4350: Fix ADF4350_REG3_12BIT_CLKDIV_MODE
  (git-fixes).
- iio: frequency: adf4350: Fix prescaler usage (git-fixes).
- iio: xilinx-ams: Fix AMS_ALARM_THR_DIRECT_MASK (git-fixes).
- iio: xilinx-ams: Unmask interrupts after updating alarms
  (git-fixes).
- misc: genwqe: Fix incorrect cmd field being reported in error
  (git-fixes).
- uio: uio_pdrv_genirq: Remove MODULE_DEVICE_TABLE (git-fixes).
- thunderbolt: Compare HMAC values in constant time (git-fixes).
- usb: misc: qcom_eud: Access EUD_MODE_MANAGER2 through secure
  calls (git-fixes).
- usb: host: max3421-hcd: Fix error pointer dereference in probe
  cleanup (git-fixes).
- tty: n_gsm: Don't block input queue by waiting MSC (git-fixes).
- serial: max310x: Add error checking in probe() (git-fixes).
- mtd: rawnand: omap2: fix device leak on probe failure
  (git-fixes).
- HID: intel-ish-ipc: Remove redundant ready check after timeout
  function (git-fixes).
- hwrng: ks-sa - fix division by zero in ks_sa_rng_init
  (git-fixes).
- crypto: hisilicon/qm - set NULL to qm-&gt;debug.qm_diff_regs
  (git-fixes).
- crypto: aspeed - Fix dma_unmap_sg() direction (git-fixes).
- crypto: atmel - Fix dma_unmap_sg() direction (git-fixes).
- crypto: hisilicon/qm - check whether the input function and
  PF are on the same device (git-fixes).
- hwrng: nomadik - add ARM_AMBA dependency (git-fixes).
- crypto: keembay - Add missing check after sg_nents_for_len()
  (git-fixes).
- commit 6795b42</changelog>
  <changelog author="tiwai@suse.de" date="1759665601">- usb: vhci-hcd: Prevent suspending virtually attached devices
  (git-fixes).
- Revert "usb: xhci: Avoid Stop Endpoint retry loop if the
  endpoint seems Running" (git-fixes).
- usb: typec: tipd: Clear interrupts first (git-fixes).
- usb: cdns3: cdnsp-pci: remove redundant pci_disable_device()
  call (git-fixes).
- usb: gadget: configfs: Correctly set use_os_string at bind
  (git-fixes).
- usb: phy: twl6030: Fix incorrect type for ret (git-fixes).
- crypto: hisilicon/qm - request reserved interrupt for virtual
  function (git-fixes).
- crypto: hisilicon - re-enable address prefetch after device
  resuming (git-fixes).
- crypto: hisilicon/zip - remove unnecessary validation for
  high-performance mode configurations (git-fixes).
- commit 609ee3a</changelog>
  <changelog author="ohering@suse.de" date="1759752000">- RDMA/mana_ib: Fix DSCP value in modify QP (git-fixes).
- commit ffca68d</changelog>
  <changelog author="joao.povoas@suse.com" date="1759752001">- Update
  patches.suse/RDMA-rxe-Flush-delayed-SKBs-while-releasing-RXE-reso.patch
  (git-fixes CVE-2025-39695 bsc#1249306).
- Update
  patches.suse/drm-amdgpu-check-if-hubbub-is-NULL-in-debugfs-amdgpu.patch
  (stable-fixes CVE-2025-39707 bsc#1249333).
- Update
  patches.suse/drm-mediatek-Add-error-handling-for-old-state-CRTC-i.patch
  (git-fixes CVE-2025-39807 bsc#1249887).
- Update
  patches.suse/drm-msm-Add-error-handling-for-krealloc-in-metadata-.patch
  (stable-fixes CVE-2025-39747 bsc#1249566).
- Update
  patches.suse/drm-xe-Make-dma-fences-compliant-with-the-safe-acces.patch
  (stable-fixes CVE-2025-38703 bsc#1249193).
- Update
  patches.suse/drm-xe-vm-Clear-the-scratch_pt-pointer-on-error.patch
  (git-fixes CVE-2025-39811 bsc#1249915).
- Update
  patches.suse/media-ivsc-Fix-crash-at-shutdown-due-to-missing-mei_.patch
  (git-fixes CVE-2025-39711 bsc#1249274).
- Update
  patches.suse/wifi-ath12k-fix-memory-leak-in-ath12k_service_ready_.patch
  (git-fixes CVE-2025-39890 bsc#1250334).
- commit 06f1002</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1759752002">- ixgbe: fix incorrect map used in eee linkmode (CVE-2025-39922
  bsc#1250722).
- commit 1384a55</changelog>
  <changelog author="tiwai@suse.de" date="1759752003">- wifi: ath12k: Add MODULE_FIRMWARE() entries (bsc#1250952).
- commit fbc86d9</changelog>
</package>
<package pkgid="05ae2aa1f3d02f41fafbfffde8650e2722bca1567497f25dafcb3aa30d6f8d9d" name="kernel-devel" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="150700.53.22.1"/>
  <changelog author="hoyeon.lee@suse.com" date="1761912000">- selftests/bpf: Fix a fd leak in error paths in open_netns
  (git-fixes).
- commit 51d3745</changelog>
  <changelog author="clopez@suse.de" date="1761912001">- KVM: x86/mmu: Prevent installing hugepages when mem attributes
  are changing (git-fixes).
- commit 37d594a</changelog>
  <changelog author="fdmanana@suse.com" date="1761912002">- btrfs: avoid potential out-of-bounds in btrfs_encode_fh()
  (git-fixes).
- commit 8cb68fe</changelog>
  <changelog author="fdmanana@suse.com" date="1761912003">- btrfs: fix clearing of BTRFS_FS_RELOC_RUNNING if relocation
  already running (git-fixes).
- commit f5ef369</changelog>
  <changelog author="fdmanana@suse.com" date="1761912004">- btrfs: do not assert we found block group item when creating
  free space tree (bsc#1252918 CVE-2025-40100).
- commit 327502f</changelog>
  <changelog author="dsterba@suse.com" date="1761912005">- net: tun: Update napi-&gt;skb after XDP process (CVE-2025-39984 bsc#1252081)
- commit f5f1c6b</changelog>
  <changelog author="dsterba@suse.com" date="1761912006">- vhost: vringh: Fix copy_to_iter return value check (CVE-2025-40056 bsc#1252826)
- commit 4efa16a</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1761912007">- smb: client: fix potential cfid UAF in smb2_query_info_compound
  (bsc#1248886).
- commit 5e5239d</changelog>
  <changelog author="tiwai@suse.de" date="1761998400">- drm/panel: kingdisplay-kd097d04: Disable EoTp (git-fixes).
- drm/panel: sitronix-st7789v: fix sync flags for t28cp45tn89
  (git-fixes).
- drm/etnaviv: fix flush sequence logic (git-fixes).
- drm/msm/dpu: Fix pixel extension sub-sampling (git-fixes).
- drm/msm/a6xx: Fix GMU firmware parser (git-fixes).
- drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on
  Iceland (git-fixes).
- drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Fiji
  (git-fixes).
- drm/amd/pm: fix smu table id bound check issue in
  smu_cmn_update_table() (git-fixes).
- drm/mediatek: Fix device use-after-free on unbind (git-fixes).
- ASoC: fsl_sai: fix bit order for DSD format (git-fixes).
- ASoC: Intel: avs: Unprepare a stream when XRUN occurs
  (git-fixes).
- ASoC: qdsp6: q6asm: do not sleep while atomic (git-fixes).
- ALSA: usb-audio: fix control pipe direction (git-fixes).
- commit acb4ea2</changelog>
  <changelog author="tiwai@suse.de" date="1761998401">- drm/ast: Clear preserved bits from register output value
  (git-fixes).
- drm/nouveau: Fix race in nouveau_sched_fini() (git-fixes).
- drm/sysfb: Do not dereference NULL pointer in plane reset
  (git-fixes).
- drm/msm/dpu: Require linear modifier for writeback framebuffers
  (git-fixes).
- drm/amdgpu: fix SPDX header on cyan_skillfish_reg_init.c
  (git-fixes).
- drm/radeon: Remove calls to drm_put_dev() (git-fixes).
- drm/radeon: Do not kfree() devres managed rdev (git-fixes).
- ASoC: fsl_sai: Fix sync error in consumer mode (git-fixes).
- drm/amd/display: increase max link count and fix link-&gt;enc
  NULL pointer access (stable-fixes).
- commit e65d412</changelog>
  <changelog author="tiwai@suse.de" date="1762084800">- regulator: bd718x7: Fix voltages scaled by resistor divider
  (git-fixes).
- regmap: slimbus: fix bus_context pointer in regmap init calls
  (git-fixes).
- commit 20abe4b</changelog>
  <changelog author="mhocko@suse.com" date="1762171200">- coresight: trbe: Return NULL pointer for allocation failures
  (CVE-2025-40060 bsc#1252848).
- commit 4543e34</changelog>
  <changelog author="joao.povoas@suse.com" date="1762171201">- Update
  patches.suse/ACPI-x86-s2idle-Catch-multiple-ACPI_TYPE_PACKAGE-obj.patch
  (git-fixes CVE-2023-53708 bsc#1252537).
- Update
  patches.suse/ALSA-usb-audio-Fix-NULL-pointer-deference-in-try_to_.patch
  (git-fixes CVE-2025-40085 bsc#1252873).
- Update
  patches.suse/ALSA-usb-audio-fix-race-condition-to-UAF-in-snd_usbm.patch
  (git-fixes CVE-2025-39997 bsc#1252056).
- Update
  patches.suse/ASoC-qcom-audioreach-fix-potential-null-pointer-dere.patch
  (git-fixes CVE-2025-40013 bsc#1252348).
- Update patches.suse/Bluetooth-MGMT-Fix-possible-UAFs.patch
  (git-fixes CVE-2025-39981 bsc#1252060).
- Update
  patches.suse/Bluetooth-hci_event-Fix-UAF-in-hci_acl_create_conn_s.patch
  (git-fixes CVE-2025-39982 bsc#1252083).
- Update
  patches.suse/HID-amd_sfh-Fix-for-shift-out-of-bounds.patch
  (bsc#1012628 CVE-2023-53703 bsc#1252553).
- Update
  patches.suse/Input-uinput-zero-initialize-uinput_ff_upload_compat.patch
  (git-fixes CVE-2025-40035 bsc#1252866).
- Update patches.suse/NFS-Fix-a-potential-data-corruption.patch
  (git-fixes CVE-2023-53711 bsc#1252536).
- Update
  patches.suse/NFSD-Define-a-proc_layoutcommit-for-the-FlexFiles-layout-type.patch
  (git-fixes CVE-2025-40087 bsc#1252909).
- Update
  patches.suse/PCI-endpoint-pci-epf-test-Add-NULL-check-for-DMA-cha.patch
  (git-fixes CVE-2025-40032 bsc#1252841).
- Update
  patches.suse/RDMA-rxe-Fix-race-in-do_task-when-draining.patch
  (git-fixes CVE-2025-40061 bsc#1252849).
- Update
  patches.suse/Squashfs-fix-uninit-value-in-squashfs_get_parent.patch
  (git-fixes CVE-2025-40049 bsc#1252822).
- Update
  patches.suse/USB-gadget-Fix-the-memory-leak-in-raw_gadget-dr.patch
  (bsc#1012628 CVE-2023-53693 bsc#1252489).
- Update
  patches.suse/afs-Fix-potential-null-pointer-dereference-in-afs_put_server.patch
  (git-fixes CVE-2025-40010 bsc#1252332).
- Update
  patches.suse/arm64-csum-Fix-OoB-access-in-IP-checksum-code-for-ne.patch
  (git-fixes CVE-2023-53726 bsc#1252565).
- Update
  patches.suse/arm64-sme-Use-STR-P-to-clear-FFR-context-field-.patch
  (bsc#1012628 CVE-2023-53713 bsc#1252559).
- Update
  patches.suse/blk-iocost-use-spin_lock_irqsave-in-adjust_inus.patch
  (bsc#1012628 CVE-2023-53730 bsc#1252495).
- Update
  patches.suse/bus-fsl-mc-Check-return-value-of-platform_get_resour.patch
  (git-fixes CVE-2025-40029 bsc#1252772).
- Update
  patches.suse/can-etas_es58x-populate-ndo_change_mtu-to-prevent-bu.patch
  (git-fixes CVE-2025-39988 bsc#1252074).
- Update
  patches.suse/can-hi311x-populate-ndo_change_mtu-to-prevent-buffer.patch
  (git-fixes CVE-2025-39987 bsc#1252079).
- Update
  patches.suse/can-mcba_usb-populate-ndo_change_mtu-to-prevent-buff.patch
  (git-fixes CVE-2025-39985 bsc#1252082).
- Update
  patches.suse/can-peak_usb-fix-shift-out-of-bounds-issue.patch
  (git-fixes CVE-2025-40020 bsc#1252679).
- Update
  patches.suse/can-sun4i_can-populate-ndo_change_mtu-to-prevent-buf.patch
  (git-fixes CVE-2025-39986 bsc#1252078).
- Update
  patches.suse/clk-imx-clk-imx8mp-improve-error-handling-in-im.patch
  (bsc#1012628 CVE-2023-53704 bsc#1252490).
- Update
  patches.suse/clocksource-drivers-cadence-ttc-Fix-memory-leak.patch
  (bsc#1012628 CVE-2023-53725 bsc#1252492).
- Update
  patches.suse/crypto-essiv-Check-ssize-for-decryption-and-in-place.patch
  (git-fixes CVE-2025-40019 bsc#1252678).
- Update
  patches.suse/crypto-hisilicon-qm-set-NULL-to-qm-debug.qm_diff_reg.patch
  (git-fixes CVE-2025-40062 bsc#1252850).
- Update
  patches.suse/drm-amdgpu-Fix-integer-overflow-in-amdgpu_cs_p.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-53707
  bsc#1252632).
- Update
  patches.suse/drm-gma500-Fix-null-dereference-in-hdmi-teardown.patch
  (git-fixes CVE-2025-40011 bsc#1252336).
- Update
  patches.suse/drm-sched-Fix-potential-double-free-in-drm_sched_job.patch
  (git-fixes CVE-2025-40096 bsc#1252902).
- Update
  patches.suse/fbcon-fix-integer-overflow-in-fbcon_do_set_font.patch
  (git-fixes CVE-2025-39967 bsc#1252033).
- Update
  patches.suse/fs-udf-fix-OOB-read-in-lengthAllocDescs-handling.patch
  (git-fixes CVE-2025-40044 bsc#1252785).
- Update
  patches.suse/hfsplus-fix-slab-out-of-bounds-read-in-hfsplus_strcasecmp.patch
  (git-fixes CVE-2025-40088 bsc#1252904).
- Update
  patches.suse/hfsplus-fix-slab-out-of-bounds-read-in-hfsplus_uni2asc_followup.patch
  (git-fixes CVE-2025-40082 bsc#1252775).
- Update
  patches.suse/iommu-vt-d-Disallow-dirty-tracking-if-incoherent-pag.patch
  (git-fixes CVE-2025-40058 bsc#1252854).
- Update
  patches.suse/md-raid1-fix-potential-OOB-in-raid1_remove_disk-8b04.patch
  (jsc#PED-7542 CVE-2023-53722 bsc#1252499).
- Update
  patches.suse/media-b2c2-Fix-use-after-free-causing-by-irq_check_w.patch
  (git-fixes CVE-2025-39996 bsc#1252065).
- Update
  patches.suse/media-i2c-tc358743-Fix-use-after-free-bugs-caused-by.patch
  (git-fixes CVE-2025-39995 bsc#1252064).
- Update
  patches.suse/media-rc-fix-races-with-imon_disconnect.patch
  (git-fixes CVE-2025-39993 bsc#1252070).
- Update
  patches.suse/media-tuner-xc5000-Fix-use-after-free-in-xc5000_rele.patch
  (git-fixes CVE-2025-39994 bsc#1252072).
- Update
  patches.suse/media-uvcvideo-Mark-invalid-entities-with-id-UVC_INV.patch
  (git-fixes CVE-2025-40016 bsc#1252346).
- Update
  patches.suse/misc-fastrpc-fix-possible-map-leak-in-fastrpc_put_ar.patch
  (git-fixes CVE-2025-40036 bsc#1252865).
- Update
  patches.suse/net-nfc-nci-Add-parameter-validation-for-packet-data.patch
  (git-fixes CVE-2025-40043 bsc#1252787).
- Update
  patches.suse/net-sched-cls_u32-Undo-tcf_bind_filter-if-u32_r.patch
  (bsc#1012628 CVE-2023-53733 bsc#1252685).
- Update
  patches.suse/net-sched-fq_pie-avoid-stalls-in-fq_pie_timer.patch
  (bsc#1220419 CVE-2023-53727 bsc#1252566).
- Update
  patches.suse/netlink-fix-potential-deadlock-in-netlink_set_e.patch
  (bsc#1012628 CVE-2023-53731 bsc#1252481).
- Update
  patches.suse/nvdimm-Fix-memleak-of-pmu-attr_groups-in-unregister_-85ae.patch
  (jsc#PED-5853 CVE-2023-53697 bsc#1252534).
- Update
  patches.suse/posix-timers-Ensure-timer-ID-search-loop-limit-.patch
  (bsc#1012628 CVE-2023-53728 bsc#1252668).
- Update
  patches.suse/ring-buffer-Do-not-swap-cpu_buffer-during-resi.patch
  (bsc#1012628 CVE-2023-53718 bsc#1252564).
- Update
  patches.suse/riscv-move-memblock_allow_resize-after-linear-m.patch
  (bsc#1012628 CVE-2023-53699 bsc#1252550).
- Update
  patches.suse/smb-client-fix-crypto-buffers-in-non-linear-memory.patch
  (bsc#1250491 boo#1239206 CVE-2025-40052 bsc#1252851).
- Update
  patches.suse/soc-qcom-qmi_encdec-Restrict-string-length-in-decode.patch
  (git-fixes CVE-2023-53729 bsc#1252496).
- Update
  patches.suse/tty-n_gsm-Don-t-block-input-queue-by-waiting-MSC.patch
  (git-fixes CVE-2025-40071 bsc#1252797).
- Update
  patches.suse/wifi-ath11k-fix-NULL-dereference-in-ath11k_qmi_m3_lo.patch
  (git-fixes CVE-2025-39991 bsc#1252075).
- Update
  patches.suse/wifi-ath12k-Fix-a-NULL-pointer-dereference-in-ath12k.patch
  (git-fixes CVE-2023-53721 bsc#1252561).
- Update
  patches.suse/xfrm-xfrm_alloc_spi-shouldn-t-use-0-as-SPI.patch
  (CVE-2025-39797 bsc#1249608 CVE-2025-39965 bsc#1251967).
- Update
  patches.suse/xsk-fix-refcount-underflow-in-error-path.patch
  (bsc#1012628 CVE-2023-53698 bsc#1252479).
- commit 9042362</changelog>
  <changelog author="joao.povoas@suse.com" date="1762171202">- Update
  patches.suse/fbdev-simplefb-Fix-use-after-free-in-simplefb_detach.patch
  (git-fixes CVE-2025-40037 bsc#1252819).
- Update
  patches.suse/ixgbe-fix-too-early-devlink_free-in-ixgbe_remove.patch
  (git-fixes CVE-2025-40091 bsc#1252915).
- Update
  patches.suse/ixgbevf-fix-mailbox-API-compatibility-by-negotiating.patch
  (bsc#1247222 CVE-2025-40104 bsc#1252921).
- commit 7ff6ed4</changelog>
  <changelog author="clopez@suse.de" date="1762171203">- KVM: x86: Replace static_call_cond() with static_call()
  (git-fixes).
- commit 6bb685c</changelog>
  <changelog author="clopez@suse.de" date="1762171204">- KVM: x86: Introduce kvm_x86_call() to simplify static calls
  of kvm_x86_ops (git-fixes).
- Refresh
  patches.suse/KVM-x86-Don-t-inject-PV-async-PF-if-SEND_ALWAYS-0-an.patch.
- Refresh
  patches.suse/KVM-x86-Exit-to-userspace-if-fastpath-triggers-one-o.patch.
- Refresh patches.suse/KVM-x86-Introduce-kvm_set_mp_state.patch.
- Refresh
  patches.suse/KVM-x86-Route-non-canonical-checks-in-emulator-throu.patch.
- Refresh
  patches.suse/KVM-x86-model-canonical-checks-more-precisely.patch.
- commit 3454959</changelog>
  <changelog author="wqu@suse.com" date="1762257600">- btrfs: fix the incorrect max_bytes value for
  find_lock_delalloc_range() (git-fixes).
- commit 91a9728</changelog>
  <changelog author="jgross@suse.com" date="1762257601">- vhost: vringh: Modify the return value check (CVE-2025-40051
  bsc#1252858).
- commit 80d9f20</changelog>
  <changelog author="clopez@suse.de" date="1762257602">- Delete
  patches.kabi/KVM-x86-pmu-Allow-programming-events-that-match-unsu.patch.
  This avoids a kbuild error in check-patchrv. This patch is not needed
  anyway since 4f5efb71e1f4.
- commit 624b1b2</changelog>
  <changelog author="msuchanek@suse.de" date="1762344000">- kernel-subpackage-spec: Do not doubly-sign modules (bsc#1251930).
- commit 0f034b6</changelog>
</package>
<package pkgid="55a63b715a4abf515c7c2d8bcddc896e9640198f8a450fe2a8c6416c9a177282" name="kernel-devel" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="150700.53.25.1"/>
  <changelog author="mkubecek@suse.cz" date="1764072000">- net: dst: annotate data-races around dst-&gt;output (CVE-2025-40074
  bsc#1252794).
- commit a54672b</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072001">- net: dst: add four helpers to annotate data-races around
  dst-&gt;dev (CVE-2025-40074 bsc#1252794).
- commit d644653</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072002">- ipv4: adopt dst_dev, skb_dst_dev and skb_dst_dev_net[_rcu]
  (CVE-2025-40074 bsc#1252794).
- commit 172fe2b</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072003">- ipv6: adopt dst_dev() helper (CVE-2025-40074 bsc#1252794).
- refresh patches.suse/net-ip6_tunnel-Prevent-perpetual-tunnel-growth.patch
- commit 7eda2f1</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072004">- ipv6: adopt skb_dst_dev() and skb_dst_dev_net[_rcu]() helpers
  (CVE-2025-40074 bsc#1252794).
- commit bef51be</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072005">- ipv6: ip6_mc_input() and ip6_mr_input() cleanups (CVE-2025-40074
  bsc#1252794).
- commit 74e34e6</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072006">- net: Add locking to protect skb-&gt;dev access in ip_output
  (CVE-2025-40074 bsc#1252794).
- commit ba856a3</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072007">- net: dst: introduce dst-&gt;dev_rcu (CVE-2025-40074 bsc#1252794).
- commit bc25dd4</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072008">- kabi: hide dst_entry::dev_rcu (CVE-2025-40074 bsc#1252794).
- commit 7047515</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072009">- ipv4: start using dst_dev_rcu() (CVE-2025-40074 bsc#1252794).
- commit d58640c</changelog>
  <changelog author="rbm@suse.com" date="1764072010">- selftests: net: lib: Do not overwrite error messages
  (bsc#1254235).
- selftests: net: lib: fix shift count out of range (bsc#1254235).
- selftests: net: lib: Move logging from forwarding/lib.sh here
  (bsc#1254235).
- selftests: net: add helper for checking if nettest is available
  (bsc#1254235).
- selftests: net: lib: kill PIDs before del netns (bsc#1254235).
- selftests: lib: tc_rule_stats_get(): Move default to argument
  definition (bsc#1254235).
- selftests: net: lib: remove 'ns' var in setup_ns (bsc#1254235).
- selftests: net: lib: do not set ns var as readonly
  (bsc#1254235).
- selftests: net: lib: remove ns from list after clean-up
  (bsc#1254235).
- selftests: net: lib: ignore possible errors (bsc#1254235).
- selftests: net: lib: set 'i' as local (bsc#1254235).
- selftests: net: lib: avoid error removing empty netns name
  (bsc#1254235).
- selftests: net: lib: support errexit with busywait
  (bsc#1254235).
- selftests/net: use tc rule to filter the na packet
  (bsc#1254235).
- selftests/net/lib: no need to record ns name if it already exist
  (bsc#1254235).
- selftests: net: Unify code of busywait() and slowwait()
  (bsc#1254235).
- selftests: forwarding: Add a test for testing lib.sh
  functionality (bsc#1254235).
- selftests: forwarding: Support for performance sensitive tests
  (bsc#1254235).
- selftests: forwarding: Convert log_test() to recognize RET
  values (bsc#1254235).
- selftests: forwarding: Have RET track kselftest framework
  constants (bsc#1254235).
- selftests: lib: Define more kselftest exit codes (bsc#1254235).
- selftests: forwarding: Change inappropriate log_test_skip()
  calls (bsc#1254235).
- selftests: forwarding.config.sample: Move overrides to lib.sh
  (bsc#1254235).
- selftests: net: libs: Change variable fallback syntax
  (bsc#1254235).
- selftests: forwarding: Parametrize mausezahn delay
  (bsc#1254235).
- selftests/net/forwarding: add slowwait functions (bsc#1254235).
- selftests: forwarding: Remove duplicated lib.sh content
  (bsc#1254235).
- selftests: forwarding: Redefine relative_path variable
  (bsc#1254235).
- selftests: net: List helper scripts in TEST_FILES Makefile
  variable (bsc#1254235).
- selftests/net/lib: update busywait timeout value (bsc#1254235).
- selftests: forwarding: Avoid failures to source net/lib.sh
  (bsc#1254235).
- selftests/net: add variable NS_LIST for lib.sh (bsc#1254235).
- selftests/net: add lib.sh (bsc#1254235).
- commit 3a99ca1</changelog>
  <changelog author="tzimmermann@suse.com" date="1764158400">- drm/xe: Don't allow evicting of BOs in same VM in array of VM binds (bsc#1252923 CVE-2025-40086)
- commit aa2fe0b</changelog>
  <changelog author="tzimmermann@suse.com" date="1764158401">- Fix "drm/xe: Don't allow evicting of BOs in same VM in array of VM binds" (bsc#1252923)
  Fix the following compiler warning:
  * no semicolon at end of struct or union in ../drivers/gpu/drm/xe/xe_vm_types.h
  In file included from ../drivers/gpu/drm/xe/xe_bb.c:16:0:
  ../drivers/gpu/drm/xe/xe_vm_types.h:393:1: warning: no semicolon at end of struct or union
- commit 38ee821</changelog>
  <changelog author="joao.povoas@suse.com" date="1764158402">- Update
  patches.suse/ASoC-Intel-bytcr_rt5640-Fix-invalid-quirk-input-mapp.patch
  (git-fixes CVE-2025-40154 bsc#1253431).
- Update
  patches.suse/ASoC-Intel-bytcr_rt5651-Fix-invalid-quirk-input-mapp.patch
  (git-fixes CVE-2025-40121 bsc#1253367).
- Update
  patches.suse/Bluetooth-ISO-Fix-possible-UAF-on-iso_conn_free.patch
  (git-fixes CVE-2025-40141 bsc#1253352).
- Update
  patches.suse/EDAC-i10nm-Skip-DIMM-enumeration-on-a-disabled-memor.patch
  (git-fixes CVE-2025-40157 bsc#1253423).
- Update
  patches.suse/PM-devfreq-mtk-cci-Fix-potential-error-pointer-deref.patch
  (git-fixes CVE-2025-40156 bsc#1253428).
- Update
  patches.suse/Squashfs-reject-negative-file-sizes-in-squashfs_read_inode.patch
  (git-fixes CVE-2025-40200 bsc#1253448).
- Update
  patches.suse/accel-qaic-Treat-remaining-0-as-error-in-find_and_ma.patch
  (git-fixes CVE-2025-40172 bsc#1253424).
- Update
  patches.suse/bpf-Fix-metadata_dst-leak-__bpf_redirect_neigh_v-4-6.patch
  (git-fixes CVE-2025-40183 bsc#1253441).
- Update
  patches.suse/btrfs-avoid-potential-out-of-bounds-in-btrfs_encode_.patch
  (git-fixes CVE-2025-40205 bsc#1253456).
- Update
  patches.suse/can-hi311x-fix-null-pointer-dereference-when-resumin.patch
  (stable-fixes CVE-2025-40107 bsc#1253018).
- Update
  patches.suse/cpufreq-intel_pstate-Fix-object-lifecycle-issue-in-update_qos_request.patch
  (stable-fixes git-fixes CVE-2025-40194 bsc#1253445).
- Update
  patches.suse/crypto-rng-Ensure-set_ent-is-always-present.patch
  (git-fixes CVE-2025-40109 bsc#1253176).
- Update
  patches.suse/drm-vmwgfx-Fix-Use-after-free-in-validation.patch
  (git-fixes CVE-2025-40111 bsc#1253362).
- Update
  patches.suse/drm-vmwgfx-Fix-a-null-ptr-access-in-the-cursor-snoop.patch
  (git-fixes CVE-2025-40110 bsc#1253275).
- Update
  patches.suse/ext4-avoid-potential-buffer-over-read-in-parse_apply.patch
  (git-fixes CVE-2025-40198 bsc#1253453).
- Update
  patches.suse/hwrng-ks-sa-fix-division-by-zero-in-ks_sa_rng_init.patch
  (git-fixes CVE-2025-40127 bsc#1253369).
- Update
  patches.suse/mailbox-zynqmp-ipi-Fix-out-of-bounds-access-in-mailb.patch
  (git-fixes CVE-2025-40180 bsc#1253440).
- Update
  patches.suse/media-v4l2-subdev-Fix-alloc-failure-check-in-v4l2_su.patch
  (git-fixes CVE-2025-40207 bsc#1253395).
- Update
  patches.suse/net-usb-Remove-disruptive-netif_wake_queue-in-rtl815.patch
  (git-fixes CVE-2025-40140 bsc#1253349).
- Update
  patches.suse/net-usb-asix-hold-PM-usage-ref-to-avoid-PM-MDIO-RTNL.patch
  (git-fixes CVE-2025-40120 bsc#1253360).
- Update
  patches.suse/nvmet-fc-move-lsop-put-work-to-nvmet_fc_ls_req_op.patch
  (bsc#1245193 bsc#1247500 CVE-2025-40171 bsc#1253412).
- Update
  patches.suse/pwm-berlin-Fix-wrong-register-in-suspend-resume.patch
  (git-fixes CVE-2025-40188 bsc#1253449).
- Update
  patches.suse/scsi-mpt3sas-Fix-crash-in-transport-port-remove-by-using-i.patch
  (git-fixes CVE-2025-40115 bsc#1253318).
- Update
  patches.suse/scsi-pm80xx-Fix-array-index-out-of-of-bounds-on-rmmod.patch
  (git-fixes CVE-2025-40118 bsc#1253363).
- Update
  patches.suse/sunrpc-fix-null-pointer-dereference-on-zero-length-checksum.patch
  (git-fixes CVE-2025-40129 bsc#1253472).
- Update
  patches.suse/tcp-Don-t-call-reqsk_fastopen_remove-in-tcp_conn_request.patch
  (git-fixes CVE-2025-40186 bsc#1253438).
- Update
  patches.suse/usb-host-max3421-hcd-Fix-error-pointer-dereference-i.patch
  (git-fixes CVE-2025-40116 bsc#1253324).
- Update
  patches.suse/usbnet-Fix-using-smp_processor_id-in-preemptible-cod.patch
  (git-fixes CVE-2025-40164 bsc#1253407).
- commit d8d3cd1</changelog>
  <changelog author="mkubecek@suse.cz" date="1764158403">- tcp_metrics: use dst_dev_net_rcu() (CVE-2025-40075 bsc#1252795).
- commit fcb52d9</changelog>
  <changelog author="mkubecek@suse.cz" date="1764158404">- smc: Fix use-after-free in __pnet_find_base_ndev()
  (CVE-2025-40064 bsc#1252845).
- commit 2971b90</changelog>
  <changelog author="mkubecek@suse.cz" date="1764158405">- smc: Use __sk_dst_get() and dst_dev_rcu() in in
  smc_clc_prfx_set() (CVE-2025-40139 bsc#1253409).
- commit a7ae1b3</changelog>
  <changelog author="mkubecek@suse.cz" date="1764158406">- smc: Use __sk_dst_get() and dst_dev_rcu() in
  smc_clc_prfx_match() (CVE-2025-40168 bsc#1253427).
- commit 0f10629</changelog>
  <changelog author="mkubecek@suse.cz" date="1764158407">- tls: Use __sk_dst_get() and dst_dev_rcu() in
  get_netdev_for_sock() (CVE-2025-40149 bsc#1253355).
- commit c8fb6ed</changelog>
  <changelog author="hare@suse.de" date="1764244800">- KVM: s390: kABI backport for 'last_sleep_cpu' (bsc#1252352).
- KVM: s390: improve interrupt cpu for wakeup (bsc#1235463).
- commit d323daf</changelog>
</package>
<package pkgid="c88dde2d66a1c25ea93c9fc6fe3193d37eea318acc2e764c5fa65a51240df4d5" name="kernel-devel" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="150700.53.28.1"/>
  <changelog author="joao.povoas@suse.com" date="1768219200">- Update
  patches.suse/1260-drm-amdkfd-Add-missing-gfx11-MQD-manager-callbacks.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-54261
  bsc#1255879).
- Update
  patches.suse/ACPI-video-Fix-use-after-free-in-acpi_video_switch_b.patch
  (git-fixes CVE-2025-40211 bsc#1254126).
- Update
  patches.suse/ALSA-dice-fix-buffer-overflow-in-detect_stream_forma.patch
  (git-fixes CVE-2025-68346 bsc#1255603).
- Update
  patches.suse/ALSA-firewire-motu-add-bounds-check-in-put_user-loop.patch
  (git-fixes CVE-2025-68753 bsc#1256238).
- Update
  patches.suse/ALSA-firewire-motu-fix-buffer-overflow-in-hwdep-read.patch
  (git-fixes CVE-2025-68347 bsc#1255706).
- Update
  patches.suse/ALSA-hda-cs35l41-Fix-NULL-pointer-dereference-in-cs3-c34b04c.patch
  (git-fixes CVE-2025-68345 bsc#1255601).
- Update
  patches.suse/ALSA-pcm-Fix-potential-data-race-at-PCM-memory-.patch
  (bsc#1012628 CVE-2023-54072 bsc#1256291).
- Update
  patches.suse/ALSA-usb-audio-Fix-NULL-pointer-dereference-in-snd_u.patch
  (git-fixes CVE-2025-40275 bsc#1254829).
- Update
  patches.suse/ALSA-usb-audio-Fix-potential-memory-leaks-at-error-p.patch
  (jsc#PED-6045 jsc#PED-6036 jsc#PED-6104 jsc#PED-6114
  jsc#PED-6067 jsc#PED-6123 CVE-2023-54022 bsc#1255545).
- Update
  patches.suse/ALSA-usb-audio-Fix-potential-overflow-of-PCM-transfe.patch
  (stable-fixes CVE-2025-40269 bsc#1255035).
- Update
  patches.suse/ASoC-codecs-wcd-mbhc-v2-fix-resource-leaks-on-c.patch
  (bsc#1012628 CVE-2023-53842 bsc#1254690).
- Update
  patches.suse/Bluetooth-6lowpan-reset-link-local-header-on-ipv6-re.patch
  (git-fixes CVE-2025-40282 bsc#1254850).
- Update
  patches.suse/Bluetooth-ISO-fix-iso_conn-related-locking-and-.patch
  (bsc#1012628 CVE-2023-54164 bsc#1256071).
- Update
  patches.suse/Bluetooth-MGMT-cancel-mesh-send-timer-when-hdev-remo.patch
  (git-fixes CVE-2025-40284 bsc#1254860).
- Update patches.suse/Bluetooth-SCO-Fix-UAF-on-sco_conn_free.patch
  (stable-fixes CVE-2025-40309 bsc#1255065).
- Update
  patches.suse/Bluetooth-bcsp-receive-data-only-if-registered.patch
  (stable-fixes CVE-2025-40308 bsc#1255064).
- Update
  patches.suse/Bluetooth-btusb-reorder-cleanup-in-btusb_disconnect-.patch
  (git-fixes CVE-2025-40283 bsc#1254858).
- Update
  patches.suse/Bluetooth-hci_conn-return-ERR_PTR-instead-of-NU.patch
  (bsc#1012628 CVE-2023-54038 bsc#1255540).
- Update
  patches.suse/Bluetooth-hci_event-validate-skb-length-for-unknown-.patch
  (git-fixes CVE-2025-40301 bsc#1255193).
- Update
  patches.suse/Bluetooth-hci_sock-Prevent-race-in-socket-write-iter.patch
  (git-fixes CVE-2025-68305 bsc#1255169).
- Update
  patches.suse/Bluetooth-hci_sync-Avoid-use-after-free-in-dbg-.patch
  (bsc#1012628 CVE-2023-54210 bsc#1255955).
- Update
  patches.suse/Bluetooth-hci_sync-Avoid-use-after-free-in-dbg-for-h.patch
  (git-fixes CVE-2023-53828 bsc#1254623).
- Update
  patches.suse/Bluetooth-hci_sync-Fix-UAF-in-hci_disconnect_all_syn.patch
  (git-fixes CVE-2023-53762 bsc#1254606).
- Update
  patches.suse/Bluetooth-hci_sync-fix-race-in-hci_cmd_sync_dequeue_.patch
  (git-fixes CVE-2025-40318 bsc#1254798).
- Update
  patches.suse/FS-JFS-Check-for-read-only-mounted-filesystem-i.patch
  (bsc#1012628 CVE-2023-53766 bsc#1255005).
- Update
  patches.suse/HID-hidraw-fix-data-race-on-device-refcount.patch
  (bsc#1012628 CVE-2023-53759 bsc#1254663).
- Update
  patches.suse/HID-uclogic-Correct-devm-device-reference-for-hidinp.patch
  (git-fixes CVE-2023-54207 bsc#1255961).
- Update
  patches.suse/HID-wacom-Use-ktime_t-rather-than-int-when-deal.patch
  (bsc#1012628 CVE-2023-53797 bsc#1254733).
- Update
  patches.suse/Input-cros_ec_keyb-fix-an-invalid-memory-access.patch
  (stable-fixes CVE-2025-40263 bsc#1255077).
- Update
  patches.suse/Input-imx_sc_key-fix-memory-corruption-on-unload.patch
  (git-fixes CVE-2025-40262 bsc#1254840).
- Update
  patches.suse/Input-pegasus-notetaker-fix-potential-out-of-bounds-.patch
  (git-fixes CVE-2025-68217 bsc#1255221).
- Update
  patches.suse/KVM-SVM-Get-source-vCPUs-from-source-VM-for-SEV-ES-i.patch
  (git-fixes CVE-2023-54296 bsc#1255793).
- Update
  patches.suse/KVM-s390-pv-fix-index-value-of-replaced-ASCE.patch
  (bsc#1012628 CVE-2023-54092 bsc#1256370).
- Update patches.suse/MIPS-KVM-Fix-NULL-pointer-dereference.patch
  (bsc#1012628 CVE-2023-54241 bsc#1255838).
- Update patches.suse/NFSD-Fix-crash-in-nfsd4_read_release.patch
  (git-fixes CVE-2025-40324 bsc#1254791).
- Update
  patches.suse/NFSD-free-copynotify-stateid-in-nfs4_free_ol_stateid.patch
  (git-fixes CVE-2025-40273 bsc#1254828).
- Update patches.suse/PCI-DOE-Fix-destroy_work_on_stack-race.patch
  (git-fixes CVE-2023-54235 bsc#1255921).
- Update
  patches.suse/PCI-Free-released-resource-after-coalescing.patch
  (git-fixes CVE-2023-53743 bsc#1254782).
- Update
  patches.suse/PCI-IOV-Add-PCI-rescan-remove-locking-when-enabling-.patch
  (git-fixes CVE-2025-40219 bsc#1254518).
- Update
  patches.suse/PCI-cadence-Check-for-the-existence-of-cdns_pcie-ops.patch
  (stable-fixes CVE-2025-68176 bsc#1255329).
- Update
  patches.suse/RDMA-bnxt_re-Prevent-handling-any-completions-a.patch
  (bsc#1012628 CVE-2023-54048 bsc#1256395).
- Update
  patches.suse/RDMA-efa-Fix-wrong-resources-deallocation-order.patch
  (git-fixes CVE-2023-54201 bsc#1255964).
- Update
  patches.suse/RDMA-irdma-Fix-data-race-on-CQP-completion-stat.patch
  (bsc#1012628 CVE-2023-54302 bsc#1255792).
- Update
  patches.suse/RDMA-irdma-Fix-data-race-on-CQP-request-done.patch
  (bsc#1012628 CVE-2023-54292 bsc#1255800).
- Update
  patches.suse/Revert-IB-isert-Fix-incorrect-release-of-isert-conne.patch
  (git-fixes CVE-2023-54219 bsc#1256231).
- Update
  patches.suse/accel-habanalabs-support-mapping-cb-with-vmalloc-bac.patch
  (stable-fixes CVE-2025-40311 bsc#1255068).
- Update
  patches.suse/accel-qaic-Clean-up-integer-overflow-checking-.patch
  (bsc#1012628 CVE-2023-53778 bsc#1254761).
- Update
  patches.suse/af_unix-Fix-data-race-around-unix_tot_inflight.patch
  (git-fixes CVE-2023-54006 bsc#1255591).
- Update patches.suse/amba-bus-fix-refcount-leak.patch (git-fixes
  CVE-2023-54230 bsc#1255925).
- Update
  patches.suse/amd-amdkfd-resolve-a-race-in-amdgpu_amdkfd_device_fi.patch
  (stable-fixes CVE-2025-40310 bsc#1255041).
- Update
  patches.suse/amdgpu-validate-offset_in_bo-of-drm_amdgpu_gem_.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-53819
  bsc#1254712).
- Update patches.suse/arm64-mm-fix-VA-range-sanity-check.patch
  (bsc#1012628 CVE-2023-53989 bsc#1256302).
- Update
  patches.suse/arm64-set-__exception_irq_entry-with-__irq_entr.patch
  (bsc#1012628 CVE-2023-54322 bsc#1255763).
- Update
  patches.suse/atm-fore200e-Fix-possible-data-race-in-fore200e_open.patch
  (git-fixes CVE-2025-68339 bsc#1255505).
- Update
  patches.suse/audit-fix-possible-soft-lockup-in-__audit_inode_chil.patch
  (git-fixes CVE-2023-54045 bsc#1256285).
- Update
  patches.suse/autofs-fix-memory-leak-of-waitqueues-in-autofs_catat.patch
  (git-fixes CVE-2023-54134 bsc#1256106).
- Update
  patches.suse/backlight-led-bl-Add-devlink-to-supplier-LEDs.patch
  (git-fixes CVE-2025-68758 bsc#1255944).
- Update
  patches.suse/bcache-fixup-btree_cache_wait-list-damage.patch
  (bsc#1012628 CVE-2023-54293 bsc#1255801).
- Update patches.suse/binder-fix-memory-leak-in-binder_init.patch
  (bsc#1012628 CVE-2023-54005 bsc#1255629).
- Update
  patches.suse/blk-cgroup-Fix-NULL-deref-caused-by-blkg_policy_data-being-installed-before-init.patch
  (bsc#1216062 CVE-2023-54271 bsc#1255902).
- Update
  patches.suse/blk-cgroup-hold-queue_lock-when-removing-blkg-.patch
  (bsc#1012628 CVE-2023-54088 bsc#1256263).
- Update
  patches.suse/blk-mq-fix-tags-leak-when-shrink-nr_hw_queues.patch
  (bsc#1216436 CVE-2023-54227 bsc#1255952).
- Update
  patches.suse/block-fix-blktrace-debugfs-entries-leakage.patch
  (bsc#1012628 CVE-2023-54209 bsc#1255963).
- Update
  patches.suse/block-rq_qos-protect-rq_qos-apis-with-a-new-loc.patch
  (bsc#1012628 CVE-2023-53823 bsc#1254691).
- Update
  patches.suse/bpf-Address-KCSAN-report-on-bpf_lru_list.patch
  (bsc#1012628 CVE-2023-54283 bsc#1255809).
- Update
  patches.suse/bpf-Disable-preemption-in-bpf_event_output.patch
  (bsc#1012628 CVE-2023-54173 bsc#1255996).
- Update
  patches.suse/bpf-Disable-preemption-in-bpf_perf_event_outpu.patch
  (bsc#1012628 CVE-2023-54303 bsc#1255785).
- Update
  patches.suse/bpf-Fix-issue-in-verifying-allow_ptr_leaks.patch
  (jsc#PED-6811 CVE-2023-54181 bsc#1255988).
- Update
  patches.suse/bpf-Silence-a-warning-in-btf_type_id_size.patch
  (bsc#1012628 CVE-2023-54247 bsc#1255892).
- Update
  patches.suse/bpf-bpf_sk_storage-Fix-invalid-wait-context-lockdep-.patch
  (jsc#PED-6811 CVE-2023-53857 bsc#1254648).
- Update
  patches.suse/bpf-drop-unnecessary-user-triggerable-WARN_ONCE.patch
  (bsc#1012628 CVE-2023-54145 bsc#1256090).
- Update
  patches.suse/bpf-sockmap-Fix-skb-refcnt-race-after-locking-change.patch
  (jsc#PED-6811 CVE-2023-53836 bsc#1254693).
- Update
  patches.suse/btrfs-fix-incorrect-splitting-in-btrfs_drop_ex.patch
  (bsc#1012628 CVE-2023-54121 bsc#1256267).
- Update
  patches.suse/btrfs-fix-lockdep-splat-and-potential-deadlock-after.patch
  (git-fixes CVE-2023-54224 bsc#1255951).
- Update
  patches.suse/btrfs-fix-race-between-balance-and-cancel-pause.patch
  (bsc#1012628 CVE-2023-54023 bsc#1256301).
- Update
  patches.suse/btrfs-fix-race-when-deleting-free-space-root-fr.patch
  (bsc#1012628 CVE-2023-54067 bsc#1256369).
- Update
  patches.suse/btrfs-fix-race-when-deleting-quota-root-from-th.patch
  (bsc#1012628 CVE-2023-54032 bsc#1255617).
- Update
  patches.suse/btrfs-fix-warning-when-putting-transaction-with.patch
  (bsc#1012628 CVE-2023-53865 bsc#1254762).
- Update
  patches.suse/btrfs-release-path-before-inode-lookup-during-the-in.patch
  (git-fixes CVE-2023-54281 bsc#1255820).
- Update
  patches.suse/btrfs-remove-BUG_ON-s-in-add_new_free_space.patch
  (bsc#1012628 CVE-2023-54185 bsc#1255984).
- Update
  patches.suse/btrfs-set-page-extent-mapped-after-read_folio-in-rel.patch
  (git-fixes CVE-2023-54253 bsc#1255891).
- Update
  patches.suse/btrfs-zoned-fix-memory-leak-after-finding-block.patch
  (bsc#1012628 CVE-2023-54297 bsc#1255795).
- Update
  patches.suse/btrfs-zoned-skip-splitting-and-logical-rewriting-on-.patch
  (bsc#1223731 CVE-2024-26944 CVE-2023-54080 bsc#1256367).
- Update
  patches.suse/can-gs_usb-gs_usb_xmit_callback-fix-handling-of-fail.patch
  (git-fixes CVE-2025-68307 bsc#1255146).
- Update
  patches.suse/can-kvaser_usb-leaf-Fix-potential-infinite-loop-in-c.patch
  (git-fixes CVE-2025-68308 bsc#1255149).
- Update
  patches.suse/cifs-fix-potential-oops-in-cifs_oplock_break.patch
  (bsc#1012628 CVE-2023-54258 bsc#1255886).
- Update
  patches.suse/cifs-fix-session-state-check-in-reconnect-to-a.patch
  (bsc#1012628 CVE-2023-53794 bsc#1255163).
- Update
  patches.suse/clk-clocking-wizard-Fix-Oops-in-clk_wzrd_regist.patch
  (bsc#1012628 CVE-2023-53807 bsc#1254724).
- Update
  patches.suse/clk-imx93-fix-memory-leak-and-missing-unwind-go.patch
  (bsc#1012628 CVE-2023-54221 bsc#1255842).
- Update
  patches.suse/comedi-c6xdigio-Fix-invalid-PNP-driver-unregistratio.patch
  (git-fixes CVE-2025-68332 bsc#1255483).
- Update
  patches.suse/comedi-check-device-s-attached-status-in-compat-ioct.patch
  (git-fixes CVE-2025-68257 bsc#1255167).
- Update
  patches.suse/comedi-multiq3-sanitize-config-options-in-multiq3_at.patch
  (git-fixes CVE-2025-68258 bsc#1255182).
- Update
  patches.suse/comedi-pcl818-fix-null-ptr-deref-in-pcl818_ai_cancel.patch
  (git-fixes CVE-2025-68335 bsc#1255480).
- Update
  patches.suse/crypto-api-Use-work-queue-in-crypto_destroy_instance.patch
  (git-fixes CVE-2023-53799 bsc#1254732).
- Update
  patches.suse/crypto-aspeed-fix-double-free-caused-by-devm.patch
  (git-fixes CVE-2025-68172 bsc#1255253).
- Update
  patches.suse/crypto-asymmetric_keys-prevent-overflow-in-asymmetri.patch
  (git-fixes CVE-2025-68724 bsc#1255550).
- Update
  patches.suse/dccp-Fix-out-of-bounds-access-in-DCCP-error-handler.patch
  (bsc#1220419 CVE-2023-53782 bsc#1254758).
- Update
  patches.suse/dccp-fix-data-race-around-dp-dccps_mss_cache.patch
  (bsc#1012628 CVE-2023-53839 bsc#1254655).
- Update
  patches.suse/devlink-report-devlink_port_type_warn-source-de.patch
  (bsc#1012628 CVE-2023-53841 bsc#1255009).
- Update
  patches.suse/dm-don-t-attempt-to-queue-IO-under-RCU-protection-a9ce.patch
  (jsc#PED-7514 CVE-2023-53860 bsc#1254626).
- Update
  patches.suse/dm-fix-a-race-condition-in-retrieve_deps-f600.patch
  (jsc#PED-7514 CVE-2023-54324 bsc#1255759).
- Update
  patches.suse/driver-soc-xilinx-use-_safe-loop-iterator-to-av.patch
  (bsc#1012628 CVE-2023-54101 bsc#1256153).
- Update
  patches.suse/drm-amd-display-Check-NULL-before-accessing.patch
  (stable-fixes CVE-2025-68286 bsc#1255351).
- Update
  patches.suse/drm-amd-display-Fix-NULL-deref-in-debugfs-odm_combin.patch
  (git-fixes CVE-2025-68180 bsc#1255252).
- Update
  patches.suse/drm-amdgpu-Fix-NULL-pointer-dereference-in-VRAM-logi.patch
  (stable-fixes CVE-2025-40288 bsc#1255057).
- Update
  patches.suse/drm-bridge-dw_hdmi-fix-connector-access-for-scd.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-53784
  bsc#1254765).
- Update
  patches.suse/drm-client-Fix-memory-leak-in-drm_client_target.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-54091
  bsc#1256274).
- Update
  patches.suse/drm-i915-Avoid-lock-inversion-when-pinning-to-GGTT-o.patch
  (git-fixes CVE-2025-68244 bsc#1255190).
- Update
  patches.suse/drm-mediatek-Fix-device-use-after-free-on-unbind.patch
  (git-fixes CVE-2025-40316 bsc#1254797).
- Update
  patches.suse/drm-msm-dp-Drop-aux-devices-together-with-DP-co.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-53851
  bsc#1254695).
- Update
  patches.suse/drm-mxsfb-Disable-overlay-plane-in-mxsfb_plane_overl.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-53864
  bsc#1254754).
- Update
  patches.suse/drm-nouveau-kms-nv50-init-hpd_irq_lock-for-PIOR.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-54263
  bsc#1255883).
- Update
  patches.suse/drm-sched-Fix-deadlock-in-drm_sched_entity_kill_jobs.patch
  (git-fixes CVE-2025-40329 bsc#1254621).
- Update patches.suse/drm-tegra-Add-call-to-put_pid.patch
  (git-fixes CVE-2025-68233 bsc#1255206).
- Update
  patches.suse/drm-ttm-Don-t-leak-a-resource-on-eviction-error.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-54254
  bsc#1255890).
- Update
  patches.suse/drm-ttm-Don-t-leak-a-resource-on-swapout-move-e.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-53844
  bsc#1254649).
- Update
  patches.suse/drm-vgem-fence-Fix-potential-deadlock-on-release.patch
  (git-fixes CVE-2025-68757 bsc#1255943).
- Update
  patches.suse/drm-vmwgfx-Validate-command-header-size-against-SVGA.patch
  (git-fixes CVE-2025-40277 bsc#1254894).
- Update
  patches.suse/erofs-kill-hooked-chains-to-avoid-loops-on-dedu.patch
  (bsc#1012628 CVE-2023-53777 bsc#1254749).
- Update
  patches.suse/exfat-use-kvmalloc_array-kvfree-instead-of-kma.patch
  (bsc#1012628 CVE-2023-54194 bsc#1255974).
- Update
  patches.suse/ext4-correct-grp-validation-in-ext4_mb_good_group.patch
  (bsc#1234163 CVE-2023-53861 bsc#1254678).
- Update
  patches.suse/ext4-fix-BUG-in-ext4_mb_new_inode_pa-due-to-overflow.patch
  (bsc#1219165 CVE-2023-54069 bsc#1256371).
- Update
  patches.suse/ext4-fix-rbtree-traversal-bug-in-ext4_mb_use_pr.patch
  (bsc#1012628 CVE-2023-53813 bsc#1254717).
- Update
  patches.suse/ext4-turn-quotas-off-if-mount-failed-after-enab.patch
  (bsc#1012628 CVE-2023-54153 bsc#1256081).
- Update
  patches.suse/f2fs-fix-to-do-sanity-check-on-direct-node-in-.patch
  (bsc#1012628 CVE-2023-53846 bsc#1254983).
- Update
  patches.suse/fbcon-Set-fb_display-i-mode-to-NULL-when-the-mode-is.patch
  (stable-fixes CVE-2025-40323 bsc#1255094).
- Update
  patches.suse/fbdev-Add-bounds-checking-in-bit_putcs-to-fix-vmallo.patch
  (stable-fixes CVE-2025-40304 bsc#1255034).
- Update
  patches.suse/fbdev-bitblit-bound-check-glyph-index-in-bit_putcs.patch
  (stable-fixes CVE-2025-40322 bsc#1255092).
- Update
  patches.suse/firmware-meson_sm-fix-to-avoid-potential-NULL-pointe.patch
  (git-fixes CVE-2023-54304 bsc#1255786).
- Update
  patches.suse/firmware-stratix10-svc-fix-bug-in-saving-controller-.patch
  (git-fixes CVE-2025-68328 bsc#1255489).
- Update
  patches.suse/fs-Protect-reconfiguration-of-sb-read-write-fr.patch
  (bsc#1012628 CVE-2023-54099 bsc#1256197).
- Update
  patches.suse/fs-jfs-prevent-double-free-in-dbUnmount-after-failed-jfs_remount.patch
  (git-fixes CVE-2023-54127 bsc#1256119).
- Update
  patches.suse/fs-ntfs3-Return-error-for-inconsistent-extende.patch
  (bsc#1012628 CVE-2023-54125 bsc#1256117).
- Update
  patches.suse/fs-sysv-Null-check-to-prevent-null-ptr-deref-b.patch
  (bsc#1012628 CVE-2023-54264 bsc#1255872).
- Update
  patches.suse/gpu-host1x-Fix-race-in-syncpt-alloc-free.patch
  (git-fixes CVE-2025-68732 bsc#1255688).
- Update
  patches.suse/gtp-Fix-use-after-free-in-__gtp_encap_destroy.patch
  (bsc#1012628 CVE-2023-54142 bsc#1256095).
- Update
  patches.suse/hfs-validate-record-offset-in-hfsplus_bmap_alloc.patch
  (git-fixes CVE-2025-40349 bsc#1255280).
- Update
  patches.suse/hfsplus-fix-KMSAN-uninit-value-issue-in-__hfsplus_ext_cache_extent.patch
  (git-fixes CVE-2025-40244 bsc#1255033).
- Update
  patches.suse/hfsplus-fix-KMSAN-uninit-value-issue-in-hfsplus_delete_cat.patch
  (git-fixes CVE-2025-40351 bsc#1255281).
- Update
  patches.suse/hwrng-virtio-Fix-race-on-data_avail-and-actual-.patch
  (bsc#1012628 CVE-2023-53998 bsc#1255578).
- Update
  patches.suse/iavf-use-internal-state-to-free-traffic-IRQs.patch
  (bsc#1012628 CVE-2023-53850 bsc#1254677).
- Update
  patches.suse/ice-prevent-NULL-pointer-deref-during-reload.patch
  (bsc#1012628 CVE-2023-54037 bsc#1255557).
- Update
  patches.suse/igb-clean-up-in-all-error-paths-when-enabling-SR-IOV.patch
  (jsc#PED-4866 CVE-2023-54070 bsc#1256364).
- Update
  patches.suse/igc-Fix-Kernel-Panic-during-ndo_tx_timeout-call.patch
  (bsc#1012628 CVE-2023-54166 bsc#1256074).
- Update
  patches.suse/iio-accel-bmc150-Fix-irq-assumption-regression.patch
  (stable-fixes CVE-2025-68330 bsc#1255493).
- Update
  patches.suse/iio-adc-ina2xx-avoid-NULL-pointer-dereference-.patch
  (bsc#1012628 CVE-2023-53834 bsc#1254660).
- Update
  patches.suse/iio-core-Prevent-invalid-memory-access-when-th.patch
  (bsc#1012628 CVE-2023-54027 bsc#1255579).
- Update
  patches.suse/ima-Handle-error-code-returned-by-ima_filter_rule_ma.patch
  (git-fixes CVE-2025-68740 bsc#1255812).
- Update
  patches.suse/ima-don-t-clear-IMA_DIGSIG-flag-when-setting-or-remo.patch
  (stable-fixes CVE-2025-68183 bsc#1255251).
- Update
  patches.suse/io_uring-net-don-t-overflow-multishot-recv.patch
  (bsc#1215211 CVE-2023-54030 bsc#1255691).
- Update
  patches.suse/iomap-Fix-possible-overflow-condition-in-iomap_write_delalloc_scan.patch
  (jsc#PED-5453 CVE-2023-54285 bsc#1255807).
- Update
  patches.suse/iommufd-IOMMUFD_DESTROY-should-not-increase-the.patch
  (bsc#1012628 CVE-2023-53795 bsc#1254737).
- Update
  patches.suse/iommufd-Set-end-correctly-when-doing-batch-carr.patch
  (bsc#1012628 CVE-2023-54060 bsc#1256379).
- Update
  patches.suse/ionic-remove-WARN_ON-to-prevent-panic_on_warn.patch
  (bsc#1012628 CVE-2023-53994 bsc#1255570).
- Update
  patches.suse/ip6_vti-fix-slab-use-after-free-in-decode_sess.patch
  (bsc#1012628 CVE-2023-53821 bsc#1254669).
- Update
  patches.suse/ipmi-ssif-Fix-a-memory-leak-when-scanning-for-an-ada.patch
  (git-fixes CVE-2023-54064 bsc#1256375).
- Update
  patches.suse/irqchip-mchp-eic-Fix-error-code-in-mchp_eic_domain_a.patch
  (git-fixes CVE-2025-68766 bsc#1255932).
- Update
  patches.suse/isdn-mISDN-hfcsusb-fix-memory-leak-in-hfcsusb_probe.patch
  (git-fixes CVE-2025-68734 bsc#1255538).
- Update
  patches.suse/jfs-Verify-inode-mode-when-loading-from-disk.patch
  (git-fixes CVE-2025-40312 bsc#1255046).
- Update
  patches.suse/jfs-fix-uninitialized-waitqueue-in-transaction-manager.patch
  (git-fixes CVE-2025-68168 bsc#1255100).
- Update
  patches.suse/kcm-Fix-error-handling-for-SOCK_DGRAM-in-kcm_sendmsg.patch
  (bsc#1220419 CVE-2023-53825 bsc#1254707).
- Update
  patches.suse/kcm-Fix-memory-leak-in-error-path-of-kcm_sendmsg.patch
  (bsc#1220419 CVE-2023-54112 bsc#1256354).
- Update
  patches.suse/keys-Fix-linking-a-duplicate-key-to-a-keyring-s.patch
  (bsc#1012628 CVE-2023-54170 bsc#1256045).
- Update
  patches.suse/maple_tree-fix-potential-out-of-bounds-access-i.patch
  (bsc#1012628 CVE-2023-54135 bsc#1256107).
- Update
  patches.suse/md-fix-warning-for-holder-mismatch-from-export_rdev.patch
  (git-fixes CVE-2023-53791 bsc#1254742).
- Update
  patches.suse/md-raid5-cache-fix-a-deadlock-in-r5l_exit_log-a705.patch
  (jsc#PED-7542 CVE-2023-53848 bsc#1254753).
- Update
  patches.suse/media-af9005-Fix-null-ptr-deref-in-af9005_i2c_xfer.patch
  (git-fixes CVE-2023-54314 bsc#1255776).
- Update
  patches.suse/media-anysee-fix-null-ptr-deref-in-anysee_master_xfe.patch
  (git-fixes CVE-2023-54093 bsc#1256273).
- Update
  patches.suse/media-dvb-usb-m920x-Fix-a-potential-memory-leak-in-m.patch
  (git-fixes CVE-2023-54266 bsc#1255875).
- Update
  patches.suse/media-dvb-usb-v2-gl861-Fix-null-ptr-deref-in-gl861_i.patch
  (git-fixes CVE-2023-54066 bsc#1256373).
- Update
  patches.suse/media-imon-make-send_packet-more-robust.patch
  (stable-fixes CVE-2025-68194 bsc#1255325).
- Update
  patches.suse/media-mediatek-vcodec-fix-resource-leaks-in-vdec_msg.patch
  (git-fixes CVE-2023-54143 bsc#1256096).
- Update
  patches.suse/media-tuners-qt1010-replace-BUG_ON-with-a-regular-er.patch
  (git-fixes CVE-2023-54282 bsc#1255810).
- Update
  patches.suse/media-v4l2-core-Fix-a-potential-resource-leak-in-v4l.patch
  (git-fixes CVE-2023-54183 bsc#1255990).
- Update
  patches.suse/misc-fastrpc-Fix-dma_buf-object-leak-in-fastrpc_map_.patch
  (git-fixes CVE-2025-68252 bsc#1255197).
- Update
  patches.suse/misc-pci_endpoint_test-Free-IRQs-before-removin.patch
  (bsc#1012628 CVE-2023-54326 bsc#1255758).
- Update
  patches.suse/mm-secretmem-fix-use-after-free-race-in-fault-handle.patch
  (git-fixes CVE-2025-40272 bsc#1254832).
- Update
  patches.suse/mmc-sunplus-fix-return-value-check-of-mmc_add_.patch
  (bsc#1012628 CVE-2023-54204 bsc#1255967).
- Update
  patches.suse/most-usb-Fix-use-after-free-in-hdm_disconnect.patch
  (git-fixes CVE-2025-40223 bsc#1254957).
- Update
  patches.suse/most-usb-fix-double-free-on-late-probe-failure.patch
  (git-fixes CVE-2025-68290 bsc#1255154).
- Update
  patches.suse/most-usb-hdm_probe-Fix-calling-put_device-before-dev.patch
  (git-fixes CVE-2025-68249 bsc#1255233).
- Update
  patches.suse/mt76-mt7615-Fix-memory-leak-in-mt7615_mcu_wtbl_sta_a.patch
  (git-fixes CVE-2025-68765 bsc#1255931).
- Update
  patches.suse/mt76-mt7921-don-t-assume-adequate-headroom-for-SDIO-.patch
  (git-fixes CVE-2023-53785 bsc#1254918).
- Update
  patches.suse/mtd-rawnand-cadence-fix-DMA-device-NULL-pointer-dere.patch
  (git-fixes CVE-2025-68238 bsc#1255202).
- Update
  patches.suse/mtd-rawnand-fsl_upm-Fix-an-off-by-one-test-in-.patch
  (bsc#1012628 CVE-2023-54104 bsc#1256145).
- Update
  patches.suse/mtdchar-fix-integer-overflow-in-read-write-ioctls.patch
  (git-fixes CVE-2025-68237 bsc#1255203).
- Update
  patches.suse/net-core-remove-unnecessary-frame_sz-check-in-.patch
  (bsc#1012628 CVE-2023-54155 bsc#1256083).
- Update
  patches.suse/net-deal-with-integer-overflows-in-kmalloc_reserve.patch
  (bsc#1215146 CVE-2023-42752 CVE-2023-53752 bsc#1254613).
- Update
  patches.suse/net-do-not-allow-gso_size-to-be-set-to-GSO_BY_.patch
  (bsc#1012628 CVE-2023-54051 bsc#1256394).
- Update
  patches.suse/net-dsa-avoid-suspicious-RCU-usage-for-synced-V.patch
  (bsc#1012628 CVE-2023-54149 bsc#1256085).
- Update
  patches.suse/net-dsa-ocelot-call-dsa_tag_8021q_unregister-u.patch
  (bsc#1012628 CVE-2023-53855 bsc#1254688).
- Update
  patches.suse/net-ethernet-mtk_eth_soc-fix-possible-NULL-pointer-d.patch
  (git-fixes CVE-2023-54240 bsc#1255918).
- Update
  patches.suse/net-hns3-fix-deadlock-issue-when-externel_lb-a.patch
  (bsc#1012628 CVE-2023-54000 bsc#1255564).
- Update
  patches.suse/net-ipa-only-reset-hashed-tables-when-supported.patch
  (bsc#1012628 CVE-2023-54225 bsc#1256234).
- Update
  patches.suse/net-ipv4-fix-one-memleak-in-__inet_del_ifa.patch
  (bsc#1220419 CVE-2023-53995 bsc#1255616).
- Update
  patches.suse/net-mlx5-fix-potential-memory-leak-in-mlx5e_in.patch
  (bsc#1012628 CVE-2023-54106 bsc#1256358).
- Update
  patches.suse/net-mlx5e-Move-representor-neigh-cleanup-to-pr.patch
  (bsc#1012628 CVE-2023-54148 bsc#1256084).
- Update
  patches.suse/net-mlx5e-TC-Fix-internal-port-memory-leak.patch
  (bsc#1012628 CVE-2023-53999 bsc#1255621).
- Update
  patches.suse/net-mlx5e-fix-memory-leak-in-mlx5e_ptp_open.patch
  (bsc#1012628 CVE-2023-54169 bsc#1256050).
- Update
  patches.suse/net-mlx5e-xsk-Fix-invalid-buffer-access-for-le.patch
  (bsc#1012628 CVE-2023-54223 bsc#1256233).
- Update
  patches.suse/net-openvswitch-reject-negative-ifindex.patch
  (bsc#1012628 CVE-2023-53843 bsc#1254705).
- Update
  patches.suse/net-prevent-skb-corruption-on-frag-list-segment.patch
  (bsc#1012628 CVE-2023-54094 bsc#1256292).
- Update
  patches.suse/net-read-sk-sk_family-once-in-sk_mc_loop.patch
  (bsc#1220419 CVE-2023-53831 bsc#1254701).
- Update
  patches.suse/net-sched-taprio-Limit-TCA_TAPRIO_ATTR_SCHED_C.patch
  (bsc#1012628 CVE-2023-54251 bsc#1255888).
- Update
  patches.suse/net-smc-use-smc_lgr_list.lock-to-protect-smc_lgr_lis.patch
  (git-fixes CVE-2023-54318 bsc#1255772).
- Update
  patches.suse/net-usb-qmi_wwan-initialize-MAC-header-offset-in-qmi.patch
  (git-fixes CVE-2025-68192 bsc#1255246).
- Update
  patches.suse/netfilter-nf_tables-fix-underflow-in-chain-refe.patch
  (bsc#1012628 CVE-2023-54035 bsc#1255563).
- Update
  patches.suse/netlink-do-not-hard-code-device-address-lenth-i.patch
  (bsc#1012628 CVE-2023-53863 bsc#1254657).
- Update
  patches.suse/nfp-clean-mc-addresses-in-application-firmware-.patch
  (bsc#1012628 CVE-2023-54133 bsc#1256104).
- Update
  patches.suse/nfs4_setup_readdir-insufficient-locking-for-d_parent-d_inode-dereferencing.patch
  (git-fixes CVE-2025-68185 bsc#1255135).
- Update
  patches.suse/nfsd-move-init-of-percpu-reply_cache_stats-coun.patch
  (bsc#1012628 CVE-2023-54276 bsc#1255907).
- Update
  patches.suse/nilfs2-fix-WARNING-in-mark_buffer_dirty-due-to.patch
  (bsc#1012628 CVE-2023-54140 bsc#1256093).
- Update
  patches.suse/nouveau-firmware-Add-missing-kfree-of-nvkm_falcon_fw.patch
  (git-fixes CVE-2025-68235 bsc#1255209).
- Update
  patches.suse/nvme-core-fix-memory-leak-in-dhchap_ctrl_secret.patch
  (bsc#1012628 CVE-2023-53792 bsc#1254743).
- Update
  patches.suse/nvme-core-fix-memory-leak-in-dhchap_secret_stor.patch
  (bsc#1012628 CVE-2023-53852 bsc#1254653).
- Update
  patches.suse/nvme-fc-use-lock-accessing-port_state-and-rport-stat.patch
  (bsc#1245193 bsc#1247500 CVE-2025-40342 bsc#1255274).
- Update
  patches.suse/nvme-multipath-fix-lockdep-WARN-due-to-partition-sca.patch
  (git-fixes bsc#1233640 CVE-2024-53093 CVE-2025-68218
  bsc#1255245).
- Update
  patches.suse/nvmet-fc-avoid-scheduling-association-deletion-twice.patch
  (bsc#1245193 bsc#1247500 CVE-2025-40343 bsc#1255276).
- Update
  patches.suse/of-overlay-Call-of_changeset_init-early.patch
  (git-fixes CVE-2023-53856 bsc#1254661).
- Update
  patches.suse/of-unittest-fix-null-pointer-dereferencing-in-of_uni.patch
  (git-fixes CVE-2023-54178 bsc#1255992).
- Update
  patches.suse/opp-Fix-use-after-free-in-lazy_opp_tables-after.patch
  (bsc#1012628 CVE-2023-54026 bsc#1255549).
- Update
  patches.suse/orangefs-fix-xattr-related-buffer-overflow.patch
  (git-fixes CVE-2025-40306 bsc#1255062).
- Update
  patches.suse/ovl-fix-null-pointer-dereference-in-ovl_get_acl.patch
  (bsc#1012628 CVE-2023-54313 bsc#1255775).
- Update
  patches.suse/pcmcia-rsrc_nonstatic-Fix-memory-leak-in-nonst.patch
  (bsc#1012628 CVE-2023-54115 bsc#1256121).
- Update patches.suse/perf-tool-x86-Fix-perf_env-memory-leak.patch
  (bsc#1012628 CVE-2023-53793 bsc#1254739).
- Update
  patches.suse/phy-tegra-xusb-Clear-the-driver-reference-in-us.patch
  (bsc#1012628 CVE-2023-54083 bsc#1256368).
- Update
  patches.suse/pinctrl-at91-pio4-check-return-value-of-devm_ka.patch
  (bsc#1012628 CVE-2023-54319 bsc#1255760).
- Update
  patches.suse/pinctrl-freescale-Fix-a-memory-out-of-bounds-wh.patch
  (bsc#1012628 CVE-2023-53750 bsc#1254611).
- Update
  patches.suse/pinctrl-s32cc-fix-uninitialized-memory-in-s32_pinctr.patch
  (git-fixes CVE-2025-68222 bsc#1255218).
- Update
  patches.suse/platform-x86-intel-punit_ipc-fix-memory-corruption.patch
  (git-fixes CVE-2025-68303 bsc#1255122).
- Update
  patches.suse/posix-timers-Prevent-RT-livelock-in-itimer_dele.patch
  (bsc#1012628 CVE-2023-53815 bsc#1254715).
- Update patches.suse/powerpc-64s-Fix-VAS-mm-use-after-free.patch
  (bsc#1012628 CVE-2023-54042 bsc#1255702).
- Update
  patches.suse/powerpc-iommu-Fix-notifiers-being-shared-by-PCI-and-.patch
  (bsc#1065729 CVE-2023-54095 bsc#1256271).
- Update
  patches.suse/powerpc-powernv-sriov-perform-null-check-on-iov.patch
  (bsc#1012628 CVE-2023-54315 bsc#1255769).
- Update
  patches.suse/powerpc-pseries-Rework-lppaca_shared_proc-to-avoid-D.patch
  (bsc#1194869 CVE-2023-54267 bsc#1255899).
- Update
  patches.suse/powerpc-pseries-fix-possible-memory-leak-in-ibmebus_.patch
  (bsc#1194869 CVE-2023-54017 bsc#1255605).
- Update patches.suse/pstore-ram-Add-check-for-kstrdup.patch
  (bsc#1012628 CVE-2023-54189 bsc#1255978).
- Update patches.suse/quota-fix-warning-in-dqgrab.patch
  (bsc#1012628 CVE-2023-54177 bsc#1255993).
- Update patches.suse/rcu-dump-vmalloc-memory-info-safely.patch
  (git-fixes CVE-2023-54113 bsc#1256351).
- Update
  patches.suse/rcuscale-Move-rcu_scale_writer-schedule_timeout_unin.patch
  (git-fixes CVE-2023-54246 bsc#1255915).
- Update
  patches.suse/refscale-Fix-uninitalized-use-of-wait_queue_head_t.patch
  (git-fixes CVE-2023-54316 bsc#1255770).
- Update
  patches.suse/regmap-irq-Fix-out-of-bounds-access-when-alloca.patch
  (bsc#1012628 CVE-2023-53768 bsc#1254599).
- Update
  patches.suse/regmap-slimbus-fix-bus_context-pointer-in-regmap-ini.patch
  (git-fixes CVE-2025-40317 bsc#1254796).
- Update
  patches.suse/regulator-core-Protect-regulator_supply_alias_list-w.patch
  (git-fixes CVE-2025-68354 bsc#1255553).
- Update
  patches.suse/regulator-da9063-fix-null-pointer-deref-with-pa.patch
  (bsc#1012628 CVE-2023-53787 bsc#1254750).
- Update patches.suse/rpmsg-glink-Add-check-for-kstrdup.patch
  (git-fixes CVE-2023-54049 bsc#1256396).
- Update
  patches.suse/s390-dcssblk-fix-kernel-crash-with-list_add-corruption.patch
  (git-fixes bsc#1215344 CVE-2023-54117 bsc#1256348).
- Update
  patches.suse/s390-vmem-split-pages-when-debug-pagealloc-is-.patch
  (bsc#1012628 CVE-2023-54278 bsc#1255911).
- Update
  patches.suse/samples-bpf-Fix-buffer-overflow-in-tcp_basertt.patch
  (bsc#1012628 CVE-2023-54312 bsc#1255774).
- Update
  patches.suse/sched-psi-use-kernfs-polling-functions-for-PSI-.patch
  (bsc#1012628 CVE-2023-54019 bsc#1255636).
- Update
  patches.suse/scsi-qedf-Fix-NULL-dereference-in-error-handlin.patch
  (bsc#1012628 CVE-2023-54289 bsc#1255806).
- Update
  patches.suse/scsi-qla2xxx-Array-index-may-go-out-of-bound.patch
  (bsc#1012628 CVE-2023-54179 bsc#1255994).
- Update
  patches.suse/scsi-qla2xxx-Check-valid-rport-returned-by-fc_b.patch
  (bsc#1012628 CVE-2023-54014 bsc#1256300).
- Update
  patches.suse/scsi-target-core-Fix-target_cmd_counter-leak.patch
  (bsc#1214847 CVE-2023-54154 bsc#1256082).
- Update
  patches.suse/serial-8250-Fix-oops-for-port-pm-on-uart_chang.patch
  (bsc#1012628 CVE-2023-54220 bsc#1255949).
- Update patches.suse/serial-sprd-Fix-DMA-buffer-leak-issue.patch
  (git-fixes CVE-2023-54136 bsc#1256099).
- Update
  patches.suse/sfc-fix-crash-when-reading-stats-while-NIC-is-r.patch
  (bsc#1012628 CVE-2023-54156 bsc#1255704).
- Update
  patches.suse/sh-dma-Fix-DMA-channel-offset-calculation.patch
  (bsc#1012628 CVE-2023-54255 bsc#1255884).
- Update patches.suse/smb-client-fix-missed-ses-refcounting.patch
  (bsc#1012628 CVE-2023-54076 bsc#1256335).
- Update
  patches.suse/smb-client-fix-potential-cfid-UAF-in-smb2_query_info_compound.patch
  (bsc#1248886 CVE-2025-40320 bsc#1254793).
- Update patches.suse/soundwire-fix-enumeration-completion.patch
  (bsc#1012628 CVE-2023-54096 bsc#1256178).
- Update patches.suse/spi-tegra210-quad-Fix-timeout-handling.patch
  (bsc#1253155 CVE-2025-68746 bsc#1255722).
- Update
  patches.suse/staging-r8712-Fix-memory-leak-in-_r8712_init_xm.patch
  (bsc#1012628 CVE-2023-54001 bsc#1255628).
- Update
  patches.suse/thermal-of-fix-double-free-on-unregistration.patch
  (bsc#1012628 CVE-2023-53997 bsc#1255632).
- Update
  patches.suse/tpm-tpm_vtpm_proxy-fix-a-race-condition-in-dev-.patch
  (bsc#1012628 CVE-2023-54309 bsc#1255780).
- Update
  patches.suse/tracing-Fix-memory-leak-of-iter-temp-when-readi.patch
  (bsc#1012628 CVE-2023-54171 bsc#1256034).
- Update
  patches.suse/tracing-Fix-warning-in-trace_buffered_event_dis.patch
  (bsc#1012628 CVE-2023-54211 bsc#1255843).
- Update
  patches.suse/tty-serial-samsung_tty-Fix-a-memory-leak-in-s3c.patch
  (bsc#1012628 CVE-2023-53858 bsc#1254704).
- Update
  patches.suse/usb-cdns3-gadget-Use-after-free-during-failed-initia.patch
  (stable-fixes CVE-2025-40314 bsc#1255072).
- Update
  patches.suse/usb-dwc3-Fix-race-condition-between-concurrent-dwc3_.patch
  (git-fixes CVE-2025-68287 bsc#1255152).
- Update
  patches.suse/usb-gadget-f_eem-Fix-memory-leak-in-eem_unwrap.patch
  (git-fixes CVE-2025-68289 bsc#1255155).
- Update
  patches.suse/usb-gadget-f_fs-Fix-epfile-null-pointer-access-after.patch
  (stable-fixes CVE-2025-40315 bsc#1255083).
- Update
  patches.suse/usb-potential-integer-overflow-in-usbg_make_tpg.patch
  (stable-fixes CVE-2025-68750 bsc#1255814).
- Update
  patches.suse/usb-storage-alauda-Fix-uninit-value-in-alauda_.patch
  (bsc#1012628 CVE-2023-53847 bsc#1254698).
- Update
  patches.suse/usb-storage-sddr55-Reject-out-of-bound-new_pba.patch
  (stable-fixes CVE-2025-40345 bsc#1255279).
- Update
  patches.suse/usb-typec-bus-verify-partner-exists-in-typec_altmode.patch
  (git-fixes CVE-2023-54299 bsc#1255789).
- Update
  patches.suse/usb-uas-fix-urb-unmapping-issue-when-the-uas-device-.patch
  (git-fixes CVE-2025-68331 bsc#1255495).
- Update patches.suse/usbnet-Prevents-free-active-kevent.patch
  (git-fixes CVE-2025-68312 bsc#1255171).
- Update
  patches.suse/vdpa-Add-queue-index-attr-to-vdpa_nl_policy-fo.patch
  (bsc#1012628 CVE-2023-54031 bsc#1255583).
- Update patches.suse/vduse-fix-NULL-pointer-dereference.patch
  (bsc#1012628 CVE-2023-54291 bsc#1255798).
- Update
  patches.suse/vfio-type1-fix-cap_migration-information-leak
  (jsc#PED-7779 jsc#PED-7780 CVE-2023-54137 bsc#1256100).
- Update
  patches.suse/virtio-vdpa-Fix-cpumask-memory-leak-in-virtio_.patch
  (bsc#1012628 CVE-2023-54215 bsc#1255957).
- Update
  patches.suse/virtio_pmem-add-the-missing-REQ_OP_WRITE-for-flush-b.patch
  (git-fixes CVE-2023-54089 bsc#1256268).
- Update
  patches.suse/virtio_vdpa-build-affinity-masks-conditionally.patch
  (git-fixes CVE-2023-54008 bsc#1255630).
- Update
  patches.suse/wifi-ath11k-Add-missing-hw_ops-get_ring_selecto.patch
  (bsc#1012628 CVE-2023-54141 bsc#1256094).
- Update patches.suse/wifi-ath11k-fix-peer-HE-MCS-assignment.patch
  (git-fixes CVE-2025-68380 bsc#1255580).
- Update
  patches.suse/wifi-ath11k-fix-registration-of-6Ghz-only-phy-w.patch
  (bsc#1012628 CVE-2023-54229 bsc#1255924).
- Update
  patches.suse/wifi-ath12k-Fix-memory-leak-in-rx_desc-and-tx_desc.patch
  (git-fixes CVE-2023-54016 bsc#1256279).
- Update
  patches.suse/wifi-ath9k-avoid-referencing-uninit-memory-in-a.patch
  (bsc#1012628 CVE-2023-54300 bsc#1255790).
- Update
  patches.suse/wifi-brcmfmac-fix-crash-while-sending-Action-Frames-.patch
  (git-fixes CVE-2025-40321 bsc#1254795).
- Update
  patches.suse/wifi-cfg80211-ocb-don-t-leave-if-not-joined.patch
  (git-fixes CVE-2023-53992 bsc#1256058).
- Update
  patches.suse/wifi-mt76-mt7921-fix-skb-leak-by-txs-missing-i.patch
  (bsc#1012628 CVE-2023-54052 bsc#1256387).
- Update
  patches.suse/wifi-mwifiex-fix-memory-leak-in-mwifiex_histogram_re.patch
  (git-fixes CVE-2023-53808 bsc#1254723).
- Update
  patches.suse/wifi-rsi-Do-not-configure-WoWlan-in-shutdown-ho.patch
  (bsc#1012628 CVE-2023-54025 bsc#1255558).
- Update
  patches.suse/wifi-rtl818x-Fix-potential-memory-leaks-in-rtl8180_i.patch
  (git-fixes CVE-2025-68759 bsc#1255934).
- Update
  patches.suse/wifi-rtl818x-rtl8187-Fix-potential-buffer-underflow-.patch
  (git-fixes CVE-2025-68362 bsc#1255611).
- Update patches.suse/x86-CPU-AMD-Add-RDSEED-fix-for-Zen5.patch
  (git-fixes CVE-2025-68313 bsc#1255415).
- Update
  patches.suse/x86-CPU-AMD-Add-missing-terminator-for-zen5_rdseed_microco.patch
  (git-fixes CVE-2025-68195 bsc#1255259).
- Update
  patches.suse/x86-hyperv-Disable-IBT-when-hypercall-page-lac.patch
  (bsc#1012628 CVE-2023-54172 bsc#1256033).
- Update
  patches.suse/x86-sev-Make-enc_dec_hypercall-accept-a-size-instead-of-npages
  (bsc#1214635 CVE-2023-53996 bsc#1255618).
- Update patches.suse/xen-speed-up-grant-table-reclaim.patch
  (bsc#1012628 CVE-2023-54081 bsc#1256361).
- Update
  patches.suse/xfrm-also-call-xfrm_state_delete_tunnel-at-destroy-time-fo.patch
  (CVE-2025-40215 bsc#1254959 CVE-2025-40256 bsc#1254851).
- commit c2db288</changelog>
  <changelog author="joao.povoas@suse.com" date="1768219201">- Update
  patches.suse/Bluetooth-MGMT-Fix-OOB-access-in-parse_adv_monitor_p.patch
  (git-fixes CVE-2025-40294 bsc#1255181).
- Update
  patches.suse/Bluetooth-MGMT-fix-crash-in-set_mesh_sync-and-set_me.patch
  (git-fixes CVE-2025-40213 bsc#1253674).
- Update
  patches.suse/Bluetooth-btusb-mediatek-Avoid-btusb_mtk_claim_iso_i.patch
  (git-fixes CVE-2025-68298 bsc#1255124).
- Update
  patches.suse/Bluetooth-btusb-mediatek-Fix-kernel-crash-when-relea.patch
  (git-fixes CVE-2025-68306 bsc#1255145).
- Update
  patches.suse/accel-ivpu-Fix-race-condition-when-unbinding-BOs.patch
  (git-fixes CVE-2025-68749 bsc#1255724).
- Update
  patches.suse/drm-amd-display-increase-max-link-count-and-fix-link.patch
  (stable-fixes CVE-2025-40354 bsc#1255316).
- Update
  patches.suse/drm-amdgpu-atom-Check-kcalloc-for-WS-buffer-in-amdgp.patch
  (stable-fixes CVE-2025-68190 bsc#1255131).
- Update
  patches.suse/drm-amdgpu-fix-gpu-page-fault-after-hibernation-on-P.patch
  (stable-fixes CVE-2025-68230 bsc#1255134).
- Update
  patches.suse/drm-amdgpu-fix-nullptr-err-of-vm_handle_moved.patch
  (stable-fixes CVE-2025-40339 bsc#1255428).
- Update patches.suse/drm-amdgpu-remove-two-invalid-BUG_ON-s.patch
  (stable-fixes CVE-2025-68201 bsc#1255136).
- Update
  patches.suse/drm-amdkfd-Fix-mmap-write-lock-not-release.patch
  (bsc#1243112 CVE-2025-40332 bsc#1255116).
- Update
  patches.suse/drm-mediatek-Disable-AFBC-support-on-Mediatek-DRM-dr.patch
  (git-fixes CVE-2025-68184 bsc#1255220).
- Update
  patches.suse/drm-panthor-Fix-UAF-on-kernel-BO-VA-nodes.patch
  (git-fixes CVE-2025-68747 bsc#1255723).
- Update
  patches.suse/drm-panthor-Fix-kernel-panic-on-partial-unmap-of-a-G.patch
  (git-fixes CVE-2025-40225 bsc#1254827).
- Update
  patches.suse/drm-panthor-Flush-shmem-writes-before-mapping-buffer.patch
  (git-fixes CVE-2025-40276 bsc#1254824).
- Update
  patches.suse/drm-radeon-Do-not-kfree-devres-managed-rdev.patch
  (git-fixes CVE-2025-68170 bsc#1255256).
- Update patches.suse/drm-radeon-Remove-calls-to-drm_put_dev.patch
  (git-fixes CVE-2025-68181 bsc#1255247).
- Update
  patches.suse/drm-radeon-delete-radeon_fence_process-in-is_signale.patch
  (stable-fixes CVE-2025-68223 bsc#1255357).
- Update
  patches.suse/drm-sysfb-Do-not-dereference-NULL-pointer-in-plane-r.patch
  (git-fixes CVE-2025-40360 bsc#1255095).
- Update
  patches.suse/drm-xe-Fix-oops-in-xe_gem_fault-when-running-core_ho.patch
  (stable-fixes CVE-2025-40340 bsc#1254996).
- Update
  patches.suse/drm-xe-guc-Synchronize-Dead-CT-worker-with-unbind.patch
  (git-fixes CVE-2025-68207 bsc#1255234).
- Update
  patches.suse/media-videobuf2-forbid-remove_bufs-when-legacy-filei.patch
  (git-fixes CVE-2025-40302 bsc#1255196).
- Update
  patches.suse/perf-x86-intel-Fix-KASAN-global-out-of-bounds-warning.patch
  (git-fixes CVE-2025-40359 bsc#1255087).
- Update
  patches.suse/x86-CPU-AMD-Add-missing-terminator-for-zen5_rdseed_m.patch
  (git-fixes CVE-2025-68195 bsc#1255259).
- commit 946dbf2</changelog>
  <changelog author="msuchanek@suse.de" date="1768219202">- powerpc/eeh: fix recursive pci_lock_rescan_remove locking in
  EEH event handling (bsc#1253262 ltc#216029).
- commit daa4104</changelog>
  <changelog author="mhocko@suse.com" date="1768219203">- supported.conf: mark ksmbd unsupported
  Based on discussion with Enzo Matsumiya it has tuned out that ksmbd
  module is unsupported but the supported.conf entry is incorrect. Fix
  that.
- commit c800e3f</changelog>
  <changelog author="tiwai@suse.de" date="1768219204">- usb: ohci-nxp: fix device leak on probe failure (git-fixes).
- usb: usb-storage: Maintain minimal modifications to the
  bcdDevice range (git-fixes).
- Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042
  quirk table (stable-fixes).
- drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state()
  (stable-fixes).
- ASoC: bcm: bcm63xx-pcm-whistler: Check return value of
  of_dma_configure() (git-fixes).
- i2c: designware: Disable SMBus interrupts to prevent storms
  from mis-configured firmware (stable-fixes).
- platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to
  VGBS DMI quirks (stable-fixes).
- pinctrl: single: Fix incorrect type for error return variable
  (git-fixes).
- i3c: fix refcount inconsistency in i3c_master_register
  (git-fixes).
- staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE
  parsing (stable-fixes).
- staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie()
  parser (stable-fixes).
- USB: serial: option: move Telit 0x10c7 composition in the
  right place (stable-fixes).
- USB: serial: option: add Telit Cinterion FE910C04 new
  compositions (stable-fixes).
- USB: serial: option: add Foxconn T99W760 (stable-fixes).
- USB: serial: ftdi_sio: match on interface number for jtag
  (stable-fixes).
- usb: usb-storage: No additional quirks need to be added to
  the EL-R12 optical drive (stable-fixes).
- usb: dwc2: fix hang during shutdown if set as peripheral
  (git-fixes).
- usb: xhci: limit run_graceperiod for only usb 3.0 devices
  (stable-fixes).
- usb: typec: ucsi: Handle incorrect num_connectors capability
  (stable-fixes).
- usbip: Fix locking bug in RT-enabled kernels (stable-fixes).
- serial: sprd: Return -EPROBE_DEFER when uart clock is not ready
  (stable-fixes).
- serial: add support of CPCI cards (stable-fixes).
- char: applicom: fix NULL pointer dereference in ac_ioctl
  (stable-fixes).
- iio: adc: ti_am335x_adc: Limit step_avg to valid range for
  gcc complains (stable-fixes).
- fbdev: gbefb: fix to use physical address instead of dma address
  (stable-fixes).
- via_wdt: fix critical boot hang due to unnamed resource
  allocation (stable-fixes).
- ipmi: Fix __scan_channels() failing to rescan channels
  (stable-fixes).
- ipmi: Fix the race between __scan_channels() and
  deliver_response() (stable-fixes).
- reset: fix BIT macro reference (stable-fixes).
- firmware: imx: scu-irq: Init workqueue before request mbox
  channel (stable-fixes).
- HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen
  (stable-fixes).
- mmc: sdhci-msm: Avoid early clock doubling during HS400
  transition (stable-fixes).
- ASoC: qcom: q6apm-dai: set flags to reflect correct operation
  of appl_ptr (git-fixes).
- media: amphion: Remove vpu_vb_is_codecconfig (git-fixes).
- media: verisilicon: Fix CPU stalls on G2 bus error (git-fixes).
- Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE
  (stable-fixes).
- Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV
  (stable-fixes).
- wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840
  tablet (stable-fixes).
- wifi: rtw88: Add USB ID 2001:3329 for D-Link AC13U rev. A1
  (stable-fixes).
- ACPI: property: Use ACPI functions in
  acpi_graph_get_next_endpoint() only (stable-fixes).
- ACPICA: Avoid walking the Namespace if start_node is NULL
  (stable-fixes).
- pinctrl: qcom: msm: Fix deadlock in pinmux configuration
  (stable-fixes).
- platform/x86: acer-wmi: Ignore backlight event (stable-fixes).
- platform/x86/amd: pmc: Add Lenovo Legion Go 2 to pmc quirk list
  (stable-fixes).
- platform/x86/amd/pmc: Add spurious_8042 to Xbox Ally
  (stable-fixes).
- platform/x86: huawei-wmi: add keys for HONOR models
  (stable-fixes).
- HID: elecom: Add support for ELECOM M-XT3URBK (018F)
  (stable-fixes).
- HID: hid-input: Extend Elan ignore battery quirk to USB
  (stable-fixes).
- HID: apple: Add SONiX AK870 PRO to non_apple_keyboards quirk
  list (stable-fixes).
- drm/vmwgfx: Use kref in vmw_bo_dirty (stable-fixes).
- spi: xilinx: increase number of retries before declaring stall
  (stable-fixes).
- spi: imx: keep dma request disabled before dma transfer setup
  (stable-fixes).
- ALSA: usb-audio: Add native DSD quirks for PureAudio DAC series
  (stable-fixes).
- Bluetooth: btrtl: Avoid loading the config file on security
  chips (stable-fixes).
- media: amphion: Make some vpu_v4l2 functions static
  (stable-fixes).
- usb: dwc2: disable platform lowlevel hw resources during
  shutdown (stable-fixes).
- media: amphion: Add a frame flush mode for decoder
  (stable-fixes).
- usb: ohci-nxp: Use helper function devm_clk_get_enabled()
  (stable-fixes).
- drm/tilcdc: request and mapp iomem with devres (stable-fixes).
- media: verisilicon: g2: Use common helpers to compute chroma
  and mv offsets (stable-fixes).
- media: verisilicon: Store chroma and motion vectors offset
  (stable-fixes).
- i3c: master: Inherit DMA masks and parameters from parent device
  (stable-fixes).
- commit bc3be49</changelog>
  <changelog author="tiwai@suse.de" date="1768219205">- pinctrl: single: Fix PIN_CONFIG_BIAS_DISABLE handling
  (stable-fixes).
- Refresh
  patches.suse/pinctrl-single-fix-bias-pull-up-down-handling-in-pin.patch.
- commit bc41b99</changelog>
  <changelog author="tiwai@suse.de" date="1768219206">- drm/amdgpu: Forward VMID reservation errors (git-fixes).
- commit a7344a2</changelog>
  <changelog author="tiwai@suse.de" date="1768219207">- virtio_console: fix order of fields cols and rows
  (stable-fixes).
- commit 0d412d7</changelog>
  <changelog author="tiwai@suse.de" date="1768219208">- drm/sched: Fix race in drm_sched_entity_select_rq() (git-fixes).
- commit d597802</changelog>
  <changelog author="tiwai@suse.de" date="1768219209">- Move out-of-tree patches into the right section
- commit 314797b</changelog>
  <changelog author="petr.pavlu@suse.com" date="1768219210">- tracing: Fix access to trace_event_file (bsc#1254373).
- commit 768b257</changelog>
  <changelog author="dsterba@suse.com" date="1768219211">- bnxt_en: Fix null pointer dereference in bnxt_bs_trace_check_wrap() (CVE-2025-68197 bsc#1255242)
- commit 85b99e2</changelog>
  <changelog author="rgoldwyn@suse.com" date="1768219212">- fuse: fix livelock in synchronous file put from fuseblk workers (CVE-2025-40220 bsc#1254520).
- commit 46a797f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1768219213">- mlx5: Fix default values in create CQ (CVE-2025-68209
  bsc#1255230).
- commit dce9b13</changelog>
  <changelog author="hoyeon.lee@suse.com" date="1768305600">- bpf: Improve program stats run-time calculation (CVE-2025-68742
  bsc#1255707).
- commit 4ed738f</changelog>
  <changelog author="hoyeon.lee@suse.com" date="1768305601">- bpf: Fix invalid prog-&gt;stats access when update_effective_progs
  fails (CVE-2025-68742 bsc#1255707).
- commit 53d4b3c</changelog>
  <changelog author="tiwai@suse.de" date="1768305602">- x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix
  Halo (bsc#1256528).
- x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev
  (bsc#1256528).
- x86/microcode/AMD: Add more known models to entry sign checking
  (bsc#1256528).
- x86/microcode/AMD: Limit Entrysign signature checking to known
  generations (bsc#1256528).
- x86/microcode: Fix Entrysign revision check for Zen1/Naples
  (bsc#1256528).
- x86/microcode/AMD: Add TSA microcode SHAs (bsc#1256528).
- x86/microcode/AMD: Use sha256() instead of init/update/final
  (bsc#1256528).
- x86/microcode/AMD: Clean the cache if update did not load
  microcode (bsc#1256528).
- x86/microcode/AMD: Extend the SHA check to Zen5, block
  loading of any unreleased standalone Zen5 microcode patches
  (bsc#1256528).
- x86/microcode/AMD: Fix __apply_microcode_amd()'s return value
  (bsc#1256528).
- x86/microcode/AMD: Add some forgotten models to the SHA check
  (bsc#1256528).
- x86/microcode/AMD: Load only SHA256-checksummed patches
  (bsc#1256528).
- commit ed14359</changelog>
  <changelog author="tiwai@suse.de" date="1768305603">- x86/microcode/AMD: Select which microcode patch to load
  (bsc#1256528).
- Refresh
  patches.suse/x86-microcode-AMD-Handle-the-case-of-no-BIOS-microcode.patch.
- commit 3b809fe</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1768305604">- mlx5: Fix default values in create CQ (CVE-2025-68209
  bsc#1255230).
- commit e7dee05</changelog>
  <changelog author="jack@suse.cz" date="1768305605">- ext4: use optimized mballoc scanning regardless of inode format
  (bsc#1254378).
- commit aa95fec</changelog>
</package>
<package pkgid="d8b40eb4d7c4d3258d1ac2263c0e4484f3c601ad312865579ed00b81c142c76a" name="kernel-devel" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="150700.53.3.1"/>
  <changelog author="nmorey@suse.com" date="1748865600">- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (git-fixes)
- commit 0defb73</changelog>
  <changelog author="nmorey@suse.com" date="1748865601">- RDMA/cma: Fix hang when cma_netevent_callback fails to queue_work (git-fixes)
- commit 5748d8f</changelog>
  <changelog author="nmorey@suse.com" date="1748865602">- RDMA/rxe: Fix "trying to register non-static key in rxe_qp_do_cleanup" bug (git-fixes)
- commit 40421b4</changelog>
  <changelog author="msuchanek@suse.de" date="1748865603">- powerpc/pseries/iommu: Fix kmemleak in TCE table userspace view
  (jsc#PED-10539 git-fixes).
- commit 66792c6</changelog>
  <changelog author="jgross@suse.com" date="1748865604">- 9p/net: fix improper handling of bogus negative read/write
  replies (bsc#1243077 CVE-2025-37879).
- commit ac0ef56</changelog>
  <changelog author="jgross@suse.com" date="1748865605">- xenbus: Use kref to track req lifetime (bsc#1243541
  CVE-2025-37949).
- commit 0928f39</changelog>
  <changelog author="ailiop@suse.com" date="1748865606">- Squashfs: check return result of sb_min_blocksize (git-fixes).
- commit 6d6e8d7</changelog>
  <changelog author="ailiop@suse.com" date="1748865607">- afs: Make it possible to find the volumes that are using a
  server (git-fixes).
- commit 7d8a054</changelog>
  <changelog author="ailiop@suse.com" date="1748865608">- afs: Fix the server_list to unuse a displaced server rather
  than putting it (git-fixes).
- commit d3c390a</changelog>
  <changelog author="ailiop@suse.com" date="1748865609">- nilfs2: add pointer check for nilfs_direct_propagate()
  (git-fixes).
- commit eac8f96</changelog>
  <changelog author="ailiop@suse.com" date="1748865610">- nilfs2: do not propagate ENOENT error from
  nilfs_btree_propagate() (git-fixes).
- commit 5591e0d</changelog>
  <changelog author="msuchanek@suse.de" date="1748865611">- Remove debug flavor (bsc#1243919).
  This is only released in Leap, and we don't have Leap 15.7
- commit 4ff5661</changelog>
  <changelog author="dwagner@suse.de" date="1748865612">- nvme-pci: acquire cq_poll_lock in nvme_poll_irqdisable
  (git-fixes bsc#1223096).
- nvme-pci: make nvme_pci_npages_prp() __always_inline
  (git-fixes).
- commit 71f2996</changelog>
  <changelog author="pfalcato@suse.de" date="1748865613">- Refresh
  patches.kabi/icmp-prevent-possible-NULL-dereferences-from-icmp_bu.patch.
- commit d0519a5</changelog>
  <changelog author="pfalcato@suse.de" date="1748865614">- Delete
  patches.kabi/ipv4-icmp-Unmask-upper-DSCP-bits-in-icmp_route_looku.patch.
  It turns out
  patches.suse/ipv4-icmp-Unmask-upper-DSCP-bits-in-icmp_route_looku.patch
  does not need the kABI workaround after all, so removing this patch is
  safe.
- commit 983a766</changelog>
  <changelog author="pmladek@suse.com" date="1748865615">- objtool, panic: Disable SMAP in __stack_chk_fail()
  (bsc#1243963).
- commit 3d95273</changelog>
  <changelog author="pfalcato@suse.de" date="1748865616">- mm/huge_memory: fix dereferencing invalid pmd migration entry
  (CVE-2025-37958 bsc#1243539).
- commit bbe0b9a</changelog>
  <changelog author="pfalcato@suse.de" date="1748865617">- memblock: Accept allocated memory before use in
  memblock_double_array() (CVE-2025-37960 bsc#1243519).
- commit a66a796</changelog>
  <changelog author="msuchanek@suse.de" date="1748865618">- KVM: PPC: Book3S HV: Fix IRQ map warnings with XICS on pSeries
  KVM Guest (bsc#1242205 ltc#212592).
- commit e5a2e22</changelog>
  <changelog author="jgross@suse.com" date="1748952000">- blacklist.conf: add 75ad02318af2 ("Xen/swiotlb: mark xen_swiotlb_fixup() __init")
- Delete patches.suse/Xen-swiotlb-mark-xen_swiotlb_fixup-__init.patch.
- commit c256f05</changelog>
</package>
<package pkgid="9c3678be53de4b53f663c3da2d9a9ade4f82e7e3072546350d1104c0844032e6" name="kernel-devel" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="150700.53.31.1"/>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/ALSA-hda-Fix-missing-pointer-check-in-hda_component_.patch
  (git-fixes CVE-2025-40097 bsc#1252900).
- Update
  patches.suse/ASoC-stm32-sai-fix-OF-node-leak-on-probe.patch
  (git-fixes CVE-2025-71081 bsc#1256609).
- Update
  patches.suse/KEYS-trusted-Fix-a-memory-leak-in-tpm2_load_cmd.patch
  (git-fixes CVE-2025-71147 bsc#1257158).
- Update
  patches.suse/btrfs-fix-adding-block-group-to-a-reclaim-list-and-t.patch
  (git-fixes CVE-2024-42103 bsc#1228490).
- Update
  patches.suse/btrfs-fix-invalid-inode-pointer-dereferences-during-.patch
  (git-fixes CVE-2025-38243 bsc#1246184).
- Update
  patches.suse/drm-stm-ltdc-fix-late-dereference-check.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-53714
  bsc#1254465).
- Update
  patches.suse/drm-ttm-Avoid-NULL-pointer-deref-for-evicted-BOs.patch
  (git-fixes CVE-2025-71083 bsc#1256610).
- Update
  patches.suse/ftrace-Also-allocate-and-copy-hash-for-reading-of-filter-f.patch
  (bsc#1250032 CVE-2025-39813 CVE-2025-39689 bsc#1249307).
- Update
  patches.suse/hwmon-w83791d-Convert-macros-to-functions-to-avoid-T.patch
  (git-fixes CVE-2025-71111 bsc#1256728).
- Update
  patches.suse/ipmi-Rework-user-message-limit-handling.patch
  (git-fixes CVE-2025-40202 bsc#1253451).
- Update
  patches.suse/media-adv7842-Avoid-possible-out-of-bounds-array-acc.patch
  (git-fixes CVE-2025-71136 bsc#1256759).
- Update
  patches.suse/media-dvb-usb-dtv5100-fix-out-of-bounds-in-dtv5100_i.patch
  (git-fixes CVE-2025-68819 bsc#1256664).
- Update
  patches.suse/media-vidtv-initialize-local-pointers-upon-transfer-.patch
  (git-fixes CVE-2025-68808 bsc#1256682).
- Update
  patches.suse/perf-x86-intel-Fix-crash-in-icl_update_topdown_event.patch
  (git-fixes CVE-2025-38322 bsc#1246447).
- Update
  patches.suse/platform-chrome-cros_ec_ishtp-Fix-UAF-after-unbindin.patch
  (git-fixes CVE-2025-68804 bsc#1256617).
- Update
  patches.suse/powerpc-64s-slb-Fix-SLB-multihit-issue-during-SLB-preload.patch
  (bac#1236022 ltc#211187 CVE-2025-71078 bsc#1256616).
- Update
  patches.suse/smb-client-fix-warning-when-reconnecting-channel.patch
  (git-fixes CVE-2025-38379 bsc#1247030).
- Update
  patches.suse/tcp_bpf-Call-sk_msg_free-when-tcp_bpf_send_verdict-f.patch
  (bsc#1250705 CVE-2025-39913).
- Update
  patches.suse/trace-fgraph-Fix-the-warning-caused-by-missing-unregister-.patch
  (bsc#1248211 CVE-2025-38539 CVE-2025-39829 bsc#1250082).
- Update
  patches.suse/usb-dwc3-fix-fault-at-system-suspend-if-device-was-a.patch
  (git-fixes CVE-2024-53070 bsc#1233563).
- Update
  patches.suse/usb-typec-ucsi-glink-fix-off-by-one-in-connector_sta.patch
  (git-fixes CVE-2024-53149 bsc#1234842).
- Update
  patches.suse/usb-xhci-Fix-invalid-pointer-dereference-in-Etron-wo.patch
  (git-fixes CVE-2025-37813 bsc#1242909).
- Update
  patches.suse/x86-microcode-AMD-Fix-__apply_microcode_amd-s-return.patch
  (bsc#1256528 CVE-2025-22047 bsc#1241437).
- commit fbc3d71</changelog>
  <changelog author="jslaby@suse.cz" date="1770033601">- x86/fpu: Clear XSTATE_BV in guest XSAVE state whenever XFD[i]=1
  (CVE-2026-23005 bsc#1257245).
- commit 4fcc2d5</changelog>
  <changelog author="tiwai@suse.de" date="1770033602">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit b3a8e60</changelog>
  <changelog author="rgoldwyn@suse.com" date="1770033603">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit 16880ae</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033604">- smb: change return type of cached_dir_lease_break() to bool
  (git-fixes).
- commit da8604d</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033605">- cifs: add new field to track the last access time of cfid
  (git-fixes).
- commit 7328aa8</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033606">- smb: client: update cfid-&gt;last_access_time in
  open_cached_dir_by_dentry() (git-fixes).
- commit 1962196</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033607">- smb: client: remove unused fid_lock (git-fixes).
- commit ed3cf07</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033608">- smb: improve directory cache reuse for readdir operations
  (bsc#1252712).
- commit 20c0243</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033609">- scripts/python/git_sort/git_sort.yaml: add cifs for-next repository
- commit 0d24c51</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033610">- smb: client: split cached_fid bitfields to avoid shared-byte
  RMW races (bsc#1250748,bsc#1257154).
- commit e7ce4ba</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033611">- smb: client: ensure open_cached_dir_by_dentry() only returns
  valid cfid (git-fixes).
- commit d1feafe</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033612">- smb: client: short-circuit in open_cached_dir_by_dentry()
  if !dentry (git-fixes).
- commit 82d6911</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1770120000">- bpf/selftests: test_select_reuseport_kern: Remove unused header
  (bsc#1257603).
- commit 3124f7b</changelog>
  <changelog author="vbabka@suse.cz" date="1770120001">- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP
  allocations (bsc#1254447 bsc#1253087).
- commit e90ec28</changelog>
  <changelog author="rgoldwyn@suse.com" date="1770120002">- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CVE-2026-22984 bsc#1257217).
- commit 7474e34</changelog>
  <changelog author="rgoldwyn@suse.com" date="1770120003">- libceph: return the handler error from mon_handle_auth_done() (CVE-2026-22992 bsc#1257218).
- commit 518f909</changelog>
  <changelog author="rgoldwyn@suse.com" date="1770120004">- libceph: make free_choose_arg_map() resilient to partial allocation (CVE-2026-22991 bsc#1257220).
- commit 2e431bc</changelog>
  <changelog author="rgoldwyn@suse.com" date="1770120005">- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CVE-2026-22990 bsc#1257221).
- commit 0a3e886</changelog>
  <changelog author="tiwai@suse.de" date="1770120006">- Move out-of-tree rt patch into the right section
- commit 125c148</changelog>
</package>
<package pkgid="06990e157e112eeed6233f090e8a2481b749c8cabbaddd2cc622c8c822f6dcfd" name="kernel-devel" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="150700.53.34.1"/>
  <changelog author="mwilck@suse.com" date="1773057600">- dm: clear cloned request bio pointer when last clone bio
  completes (git-fixes).
- commit f2572c8</changelog>
  <changelog author="mwilck@suse.com" date="1773057601">- dm mpath: make pg_init_delay_msecs settable (git-fixes).
- commit b5dcc03</changelog>
  <changelog author="ohering@suse.de" date="1773057602">- Add bugnumber to existing mana changes (bsc#1245728 bsc#1251971 bsc#1252266 bsc#1257466)
- net: mana: Ring doorbell at 4 CQ wraparounds (git-fixes).
- PCI: hv: remove unnecessary module_init/exit functions (git-fixes).
- PCI: hv: Remove unused field pci_bus in struct hv_pcibus_device (git-fixes).
- RDMA/mana_ib: Add device-memory support (git-fixes).
- RDMA/mana_ib: Take CQ type from the device type (git-fixes).
- net: mana: Implement ndo_tx_timeout and serialize queue resets per port (bsc#1257472).
- Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump() (git-fixes).
- Drivers: hv: use kmalloc_array() instead of kmalloc() (git-fixes).
- Drivers: hv: Use kmalloc_array() instead of kmalloc() (git-fixes).
- Drivers: hv: Resolve ambiguity in hypervisor version log (git-fixes).
- Drivers: hv: fix missing kernel-doc description for 'size' in request_arr_init() (git-fixes).
- Drivers: hv: remove stale comment (git-fixes).
- net: mana: Support HW link state events (bsc#1253049).
- Drivers: hv: vmbus: Fix typos in vmbus_drv.c (git-fixes).
- Drivers: hv: vmbus: Fix sysfs output format for ring buffer index (git-fixes).
- Drivers: hv: vmbus: Clean up sscanf format specifier in target_cpu_store() (git-fixes).
- Drivers: hv: util: Cosmetic changes for hv_utils_transport.c (git-fixes).
- scsi: storvsc: Remove redundant ternary operators (git-fixes).
- tools/hv: fcopy: Fix irregularities with size of ring buffer (git-fixes).
- x86/hyperv: Fix usage of cpu_online_mask to get valid cpu (git-fixes).
- PCI: hv: Fix warnings for missing export.h header inclusion (git-fixes).
- clocksource: hyper-v: Fix warnings for missing export.h header inclusion (git-fixes).
- x86/hyperv: Fix warnings for missing export.h header inclusion (git-fixes).
- Drivers: hv: Fix the check for HYPERVISOR_CALLBACK_VECTOR (git-fixes).
- Drivers: hv: vmbus: Add comments about races with "channels" sysfs dir (git-fixes).
- PCI: hv: Remove unnecessary flex array in struct pci_packet (git-fixes).
- Drivers: hv: Use kzalloc for panic page allocation (git-fixes).
- uio_hv_generic: Align ring size to system page (git-fixes).
- uio_hv_generic: Use correct size for interrupt and monitor pages (git-fixes).
- Drivers: hv: vmbus: Introduce hv_get_vmbus_root_device() (git-fixes).
- Drivers: hv: vmbus: Get the IRQ number from DeviceTree (git-fixes).
- tools: hv: Enable debug logs for hv_kvp_daemon (git-fixes).
- PCI: hv: Correct a comment (git-fixes).
- x86/hyperv: fix an indentation issue in mshyperv.h (git-fixes).
- x86/hyperv: Use named operands in inline asm (git-fixes).
- commit fbd3c33</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1773144000">- selftests/bpf: add verifier sign extension bound computation
  tests (git-fixes).
- bpf: verifier improvement in 32bit shift sign extension pattern
  (git-fixes).
- commit cbb7102</changelog>
  <changelog author="mkoutny@suse.com" date="1773144001">- cgroup: Show # of subsystem CSSes in cgroup.stat (bsc#1256564
  bsc#1259130).
- commit e9ca9e6</changelog>
  <changelog author="mkoutny@suse.com" date="1773144002">- kabi: cgroup.stat fixup (bsc#1256564 bsc#1259130).
- commit 6ccb250</changelog>
  <changelog author="hare@suse.de" date="1773144003">- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (bsc#1254306).
- commit 165c4b3</changelog>
  <changelog author="hare@suse.de" date="1773144004">- Update config files (bsc#1254306).
- commit 3c7bab7</changelog>
  <changelog author="hare@suse.de" date="1773230400">- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (bsc#1254306).
- commit 43c578c</changelog>
  <changelog author="hare@suse.de" date="1773230401">- Update config files (bsc#1254306).
- commit 6305722</changelog>
  <changelog author="hare@suse.de" date="1773230402">- s390/ipl: Clear SBP flag when bootprog is set (bsc#1258176).
- commit bad7291</changelog>
  <changelog author="mkoutny@suse.com" date="1773230403">- cgroup: Fix incorrect WARN_ON_ONCE() in css_release_work_fn()
  (bsc#1256564 bsc#1259130).
- commit af50ef7</changelog>
  <changelog author="hare@suse.de" date="1773230404">- s390/ctcm: Fix double-kfree (CVE-2025-40253 bsc#1255084).
- commit c330474</changelog>
  <changelog author="hare@suse.de" date="1773230405">- s390/ctcm: Fix double-kfree (CVE-2025-40253 bsc#1255084).
- commit a33e581</changelog>
  <changelog author="nmorey@suse.com" date="1773316800">- RDMA/rtrs-clt: For conn rejection use actual err number (git-fixes)
- commit c91403f</changelog>
  <changelog author="tabraham@suse.com" date="1773316801">- scsi: mpi3mr: Event processing debug improvement (bsc#1251186,
  bsc#1258832).
- commit 4fde182</changelog>
  <changelog author="ddiss@suse.de" date="1773403200">- apparmor: fix race between freeing data and fs accessing it
  (bsc#1258849).
- apparmor: fix race on rawdata dereference (bsc#1258849).
- apparmor: fix differential encoding verification (bsc#1258849).
- apparmor: fix unprivileged local user can do privileged policy
  management (bsc#1258849).
- apparmor: Fix double free of ns_name in aa_replace_profiles()
  (bsc#1258849).
- apparmor: fix missing bounds check on DEFAULT table in
  verify_dfa() (bsc#1258849).
- apparmor: fix side-effect bug in match_char() macro usage
  (bsc#1258849).
- apparmor: fix: limit the number of levels of policy namespaces
  (bsc#1258849).
- apparmor: replace recursive profile removal with iterative
  approach (bsc#1258849).
- apparmor: fix memory leak in verify_header (bsc#1258849).
- apparmor: validate DFA start states are in bounds in unpack_pdb
  (bsc#1258849).
- commit 9f31a2e</changelog>
  <changelog author="tiwai@suse.de" date="1773403201">- ACPI: OSL: fix __iomem type on return from
  acpi_os_map_generic_address() (git-fixes).
- can: hi311x: hi3110_open(): add check for hi3110_power_enable()
  return value (git-fixes).
- net: usb: lan78xx: fix TX byte statistics for small packets
  (git-fixes).
- net: usb: lan78xx: fix silent drop of packets with checksum
  errors (git-fixes).
- qmi_wwan: allow max_mtu above hard_mtu to control rx_urb_size
  (git-fixes).
- remoteproc: sysmon: Correct subsys_name_len type in QMI request
  (git-fixes).
- commit 5d32ac9</changelog>
  <changelog author="ohering@suse.de" date="1773403202">- Add bugnumber to existing mana changes (bsc#1259558 bsc#1259580).
- Drivers: hv: Fix warnings for missing export.h header inclusion (git-fixes).
- Drivers: hv: Allocate interrupt and monitor pages aligned to system page boundary (git-fixes).
- Drivers: hv: Fix bad pointer dereference in hv_get_partition_id (git-fixes).
- hyperv: Convert hypercall statuses to linux error codes (git-fixes).
- drivers/hv: add CPU offlining support (git-fixes).
- drivers/hv: introduce vmbus_channel_set_cpu() (git-fixes).
- cpu: export lockdep_assert_cpus_held() (git-fixes).
- hyperv: Move arch/x86/hyperv/hv_proc.c to drivers/hv (git-fixes).
- hyperv: Move hv_current_partition_id to arch-generic code (git-fixes).
- commit 7492ec1</changelog>
  <changelog author="pfalcato@suse.de" date="1773403203">- sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT
  (CVE-2026-23125 bsc#1258293).
- commit 6e65546</changelog>
</package>
<package pkgid="d077cfc8a8b5c6c4ba71a3729493a649d91451e43b7a25201c77054294d17462" name="kernel-devel" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="150700.53.37.1"/>
  <changelog author="henrique.carvalho@suse.com" date="1775131200">- smb: client: fix krb5 mount with username option (git-fixes).
- commit 0e79d63</changelog>
  <changelog author="tiwai@suse.de" date="1775217600">- net/x25: Fix overflow when accumulating packets (git-fixes).
- net/x25: Fix potential double free of skb (git-fixes).
- Bluetooth: SMP: derive legacy responder STK authentication
  from MITM state (git-fixes).
- Bluetooth: SMP: force responder MITM requirements before
  building the pairing response (git-fixes).
- Bluetooth: MGMT: validate mesh send advertising payload length
  (git-fixes).
- Bluetooth: hci_event: fix potential UAF in
  hci_le_remote_conn_param_req_evt (git-fixes).
- Bluetooth: MGMT: validate LTK enc_size on load (git-fixes).
- Bluetooth: SCO: fix race conditions in sco_sock_connect()
  (git-fixes).
- Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if
  immediate (git-fixes).
- NFC: pn533: bound the UART receive buffer (git-fixes).
- wifi: iwlwifi: mvm: fix potential out-of-bounds read in
  iwl_mvm_nd_match_info_handler() (git-fixes).
- wifi: wilc1000: fix u8 overflow in SSID scan buffer size
  calculation (git-fixes).
- ASoC: ep93xx: Fix unchecked clk_prepare_enable() and add
  rollback on failure (git-fixes).
- ALSA: caiaq: fix stack out-of-bounds read in init_card
  (git-fixes).
- dmaengine: idxd: Fix freeing the allocated ida too late
  (git-fixes).
- Bluetooth: btintel: serialize btintel_hw_error() with
  hci_req_sync_lock (git-fixes).
- hwmon: axi-fan: don't use driver_override as IRQ name
  (git-fixes).
- ALSA: hda/realtek: Add headset jack quirk for Thinkpad X390
  (stable-fixes).
- ALSA: hda/realtek: add HP Laptop 14s-dr5xxx mute LED quirk
  (stable-fixes).
- ASoC: fsl_easrc: Fix event generation in
  fsl_easrc_iec958_set_reg() (stable-fixes).
- ASoC: fsl_easrc: Fix event generation in
  fsl_easrc_iec958_put_bits() (stable-fixes).
- HID: mcp2221: cancel last I2C command on read error
  (stable-fixes).
- HID: asus: avoid memory leak in asus_report_fixup()
  (stable-fixes).
- HID: magicmouse: avoid memory leak in magicmouse_report_fixup()
  (stable-fixes).
- HID: apple: avoid memory leak in apple_report_fixup()
  (stable-fixes).
- platform/x86: intel-hid: Enable 5-button array on ThinkPad X1
  Fold 16 Gen 1 (stable-fixes).
- platform/x86: intel-hid: Add Dell 14 Plus 2-in-1 to
  dmi_vgbs_allow_list (stable-fixes).
- platform/x86: touchscreen_dmi: Add quirk for y-inverted Goodix
  touchscreen on SUPI S10 (stable-fixes).
- mtd: spi-nor: core: avoid odd length/address writes in 8D-8D-8D
  mode (stable-fixes).
- Bluetooth: hci_sync: Remove remaining dependencies of
  hci_request (stable-fixes).
- Bluetooth: Remove 3 repeated macro definitions (stable-fixes).
- hwmon: (axi-fan-control) Make use of dev_err_probe()
  (stable-fixes).
- hwmon: (axi-fan-control) Use device firmware agnostic API
  (stable-fixes).
- dmaengine: idxd: Remove usage of the deprecated ida_simple_xx()
  API (stable-fixes).
- commit a6c10e6</changelog>
  <changelog author="tiwai@suse.de" date="1775217601">- Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync
  (git-fixes).
- wifi: ath11k: Pass the correct value of each TID during a stop
  AMPDU session (git-fixes).
- ASoC: Intel: boards: fix unmet dependency on PINCTRL
  (git-fixes).
- drm/amdgpu: prevent immediate PASID reuse case (stable-fixes).
- usb: core: new quirk to handle devices with zero configurations
  (stable-fixes).
- drm/amdgpu: fix gpu idle power consumption issue for gfx v12
  (stable-fixes).
- drm/ttm/tests: Fix build failure on PREEMPT_RT (stable-fixes).
- commit 7612e81</changelog>
  <changelog author="tiwai@suse.de" date="1775217602">- mtd: spi-nor: core: avoid odd length/address reads on 8D-8D-8D
  mode (stable-fixes).
- commit 2d1bac8</changelog>
  <changelog author="tiwai@suse.de" date="1775304000">- gpio: mxc: map Both Edge pad wakeup to Rising Edge (git-fixes).
- drm/ioc32: stop speculation on the drm_compat_ioctl path
  (git-fixes).
- drm/ast: dp501: Fix initialization of SCU2C (git-fixes).
- accel/qaic: Handle DBC deactivation if the owner went away
  (git-fixes).
- drm/i915/dp: Use crtc_state-&gt;enhanced_framing properly on
  ivb/hsw CPU eDP (git-fixes).
- crypto: af-alg - fix NULL pointer dereference in scatterwalk
  (git-fixes).
- crypto: caam - fix overflow on long hmac keys (git-fixes).
- crypto: caam - fix DMA corruption on long hmac keys (git-fixes).
- commit 376a907</changelog>
  <changelog author="tiwai@suse.de" date="1775304001">- Revert "drm: Fix use-after-free on framebuffers and property
  blobs when calling drm_dev_unplug" (git-fixes).
- drm/i915/dsi: Don't do DSC horizontal timing adjustments in
  command mode (git-fixes).
- drm/amdgpu: Change AMDGPU_VA_RESERVED_TRAP_SIZE to 64KB
  (git-fixes).
- commit 79130c8</changelog>
  <changelog author="tiwai@suse.de" date="1775390400">- Input: synaptics-rmi4 - fix a locking bug in an error path
  (git-fixes).
- hwmon: (occ) Fix missing newline in occ_show_extended()
  (git-fixes).
- hwmon: (occ) Fix division by zero in occ_show_power_1()
  (git-fixes).
- hwmon: (tps53679) Fix device ID comparison and printing in
  tps53676_identify() (git-fixes).
- hwmon: (pxe1610) Check return value of page-select write in
  probe (git-fixes).
- commit 08cee84</changelog>
  <changelog author="tiwai@suse.de" date="1775476800">- misc: fastrpc: possible double-free of cctx-&gt;remote_heap
  (git-fixes).
- comedi: Reinit dev-&gt;spinlock between attachments to low-level
  drivers (git-fixes).
- comedi: me_daq: Fix potential overrun of firmware buffer
  (git-fixes).
- comedi: me4000: Fix potential overrun of firmware buffer
  (git-fixes).
- comedi: ni_atmio16d: Fix invalid clean-up after failed attach
  (git-fixes).
- iio: dac: ad5770r: fix error return in ad5770r_read_raw()
  (git-fixes).
- iio: accel: fix ADXL355 temperature signature value (git-fixes).
- iio: light: vcnl4035: fix scan buffer on big-endian (git-fixes).
- iio: adc: ti-adc161s626: fix buffer read on big-endian
  (git-fixes).
- iio: imu: bmi160: Remove potential undefined behavior in
  bmi160_config_pin() (git-fixes).
- iio: imu: bno055: fix BNO055_SCAN_CH_COUNT off by one
  (git-fixes).
- iio: gyro: mpu3050: Fix out-of-sequence free_irq() (git-fixes).
- iio: gyro: mpu3050: Move iio_device_register() to correct
  location (git-fixes).
- iio: gyro: mpu3050: Fix irq resource leak (git-fixes).
- iio: gyro: mpu3050: Fix incorrect free_irq() variable
  (git-fixes).
- iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and
  gyroscope only (git-fixes).
- usb: cdns3: gadget: fix state inconsistency on gadget init
  failure (git-fixes).
- usb: ulpi: fix double free in ulpi_register_interface() error
  path (git-fixes).
- usb: cdns3: gadget: fix NULL pointer dereference in ep_queue
  (git-fixes).
- usb: gadget: f_rndis: Protect RNDIS options with mutex
  (git-fixes).
- usb: gadget: f_subset: Fix unbalanced refcnt in geth_free
  (git-fixes).
- usb: dwc2: gadget: Fix spin_lock/unlock mismatch in
  dwc2_hsotg_udc_stop() (git-fixes).
- usb: ehci-brcm: fix sleep during atomic (git-fixes).
- USB: dummy-hcd: Fix interrupt synchronization error (git-fixes).
- USB: dummy-hcd: Fix locking/synchronization error (git-fixes).
- usb: usbtmc: Flush anchored URBs in usbtmc_release (git-fixes).
- usb: gadget: u_ether: Fix race between gether_disconnect and
  eth_stop (git-fixes).
- thunderbolt: Fix property read in nhi_wake_supported()
  (git-fixes).
- commit 4e3d5c2</changelog>
  <changelog author="tiwai@suse.de" date="1775476801">- usb: gadget: uvc: fix NULL pointer dereference during unbind
  race (git-fixes).
- commit 4a9ee96</changelog>
  <changelog author="tiwai@suse.de" date="1775476802">- usb: core: phy: avoid double use of 'usb3-phy' (git-fixes).
- commit 4e8787e</changelog>
  <changelog author="pfalcato@suse.de" date="1775476803">- tls: Purge async_hold in tls_decrypt_async_wait() (CVE-2026-23414
  bsc#1261496).
- commit 1058925</changelog>
  <changelog author="pfalcato@suse.de" date="1775476804">- net/sched: ets: fix divide by zero in the offload path
  (CVE-2026-23379 bsc#1260481).
- commit 3672900</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476805">- icmp: fix NULL pointer dereference in icmp_tag_validation()
  (CVE-2026-23398 bsc#1260730).
- net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled
  (CVE-2026-23293 bsc#1260486).
- commit 05f5f64</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476806">- clsact: Fix use-after-free in init/destroy rollback asymmetry
  (CVE-2026-23413 bsc#1261498).
- commit eaf3b22</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476807">- net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled
  (CVE-2026-23381 bsc#1260471).
- commit 21aa5bd</changelog>
  <changelog author="nik.borisov@suse.com" date="1775476808">- watchdog/perf: properly initialize the turbo mode timestamp and rearm  counter (bsc#1256504).
- commit c8a645c</changelog>
  <changelog author="mkubecek@suse.cz" date="1775563200">- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs
  and shared blocks (CVE-2026-23270 bsc#1259886).
- commit 00821f1</changelog>
  <changelog author="lduncan@suse.com" date="1775563201">- scsi: target: Fix recursive locking in __configfs_open_file()
  (CVE-2026-23292 bsc#1260500).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_session_usage_count() (CVE-2026-23193 bsc#1258414).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_conn_usage_count() (CVE-2026-23216 bsc#1258447).
- commit e7b5dcd</changelog>
  <changelog author="mkubecek@suse.cz" date="1775563202">- net/sched: teql: fix NULL pointer dereference in iptunnel_xmit
  on TEQL slave xmit (CVE-2026-23277 bsc#1259997).
- commit 852cc2c</changelog>
  <changelog author="tiwai@suse.de" date="1775563203">- soc: aspeed: socinfo: Mask table entries for accurate SoC ID
  matching (git-fixes).
- commit df6cd61</changelog>
</package>
<package pkgid="09f7e674ec3ba2cffab99ef555193d1b7c2f645034fd2363d7c8652c97a334fc" name="kernel-devel" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="150700.53.40.1"/>
  <changelog author="tiwai@suse.de" date="1775476800">- usb: gadget: uvc: fix NULL pointer dereference during unbind
  race (git-fixes).
- commit 4a9ee96</changelog>
  <changelog author="tiwai@suse.de" date="1775476801">- usb: core: phy: avoid double use of 'usb3-phy' (git-fixes).
- commit 4e8787e</changelog>
  <changelog author="pfalcato@suse.de" date="1775476802">- tls: Purge async_hold in tls_decrypt_async_wait() (CVE-2026-23414
  bsc#1261496).
- commit 1058925</changelog>
  <changelog author="pfalcato@suse.de" date="1775476803">- net/sched: ets: fix divide by zero in the offload path
  (CVE-2026-23379 bsc#1260481).
- commit 3672900</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476804">- icmp: fix NULL pointer dereference in icmp_tag_validation()
  (CVE-2026-23398 bsc#1260730).
- net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled
  (CVE-2026-23293 bsc#1260486).
- commit 05f5f64</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476805">- clsact: Fix use-after-free in init/destroy rollback asymmetry
  (CVE-2026-23413 bsc#1261498).
- commit eaf3b22</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476806">- net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled
  (CVE-2026-23381 bsc#1260471).
- commit 21aa5bd</changelog>
  <changelog author="nik.borisov@suse.com" date="1775476807">- watchdog/perf: properly initialize the turbo mode timestamp and rearm  counter (bsc#1256504).
- commit c8a645c</changelog>
  <changelog author="mkubecek@suse.cz" date="1775563200">- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs
  and shared blocks (CVE-2026-23270 bsc#1259886).
- commit 00821f1</changelog>
  <changelog author="lduncan@suse.com" date="1775563201">- scsi: target: Fix recursive locking in __configfs_open_file()
  (CVE-2026-23292 bsc#1260500).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_session_usage_count() (CVE-2026-23193 bsc#1258414).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_conn_usage_count() (CVE-2026-23216 bsc#1258447).
- commit e7b5dcd</changelog>
  <changelog author="mkubecek@suse.cz" date="1775563202">- net/sched: teql: fix NULL pointer dereference in iptunnel_xmit
  on TEQL slave xmit (CVE-2026-23277 bsc#1259997).
- commit 852cc2c</changelog>
  <changelog author="tiwai@suse.de" date="1775563203">- soc: aspeed: socinfo: Mask table entries for accurate SoC ID
  matching (git-fixes).
- commit df6cd61</changelog>
  <changelog author="nstange@suse.de" date="1777550400">- crypto: scatterwalk - Add memcpy_sglist (bsc#1262573
  CVE-2026-31431).
- commit 28aed48</changelog>
  <changelog author="nstange@suse.de" date="1777550401">- crypto: scatterwalk - Fix memcpy_sglist() to always succeed
  (bsc#1262573 CVE-2026-31431).
- commit c2ad254</changelog>
  <changelog author="nstange@suse.de" date="1777550402">- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- commit 8a67d67</changelog>
  <changelog author="nstange@suse.de" date="1777550403">- crypto: algif_aead - Revert to operating out-of-place
  (bsc#1262573 CVE-2026-31431).
- commit eb1a8c9</changelog>
  <changelog author="nstange@suse.de" date="1777550404">- kABI: Restore af_alg_{count,pull}_tsgl() signatures (bsc#1262573
  CVE-2026-31431).
- commit b418ef6</changelog>
  <changelog author="nstange@suse.de" date="1777636800">- crypto: authenc - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- Refresh
  patches.suse/crypto-authencesn-reject-too-short-AAD-assoclen-8-to.patch
- commit 24731ba</changelog>
  <changelog author="nstange@suse.de" date="1777636801">- crypto: authencesn - Do not place hiseq at end of dst for
  out-of-place decryption (bsc#1262573 CVE-2026-31431).
- commit 2c8047b</changelog>
  <changelog author="nstange@suse.de" date="1777636802">- crypto: authencesn - Fix src offset when decrypting in-place
  (bsc#1262573 CVE-2026-31431).
- commit 4921c60</changelog>
</package>
<package pkgid="30f82c157aff7b723156660cd594eb0daa563bdb15484f60b1cc0a64feea1565" name="kernel-devel" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="150700.53.45.1"/>
  <changelog author="pfalcato@suse.de" date="1775476800">- tls: Purge async_hold in tls_decrypt_async_wait() (CVE-2026-23414
  bsc#1261496).
- commit 1058925</changelog>
  <changelog author="pfalcato@suse.de" date="1775476801">- net/sched: ets: fix divide by zero in the offload path
  (CVE-2026-23379 bsc#1260481).
- commit 3672900</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476802">- icmp: fix NULL pointer dereference in icmp_tag_validation()
  (CVE-2026-23398 bsc#1260730).
- net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled
  (CVE-2026-23293 bsc#1260486).
- commit 05f5f64</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476803">- clsact: Fix use-after-free in init/destroy rollback asymmetry
  (CVE-2026-23413 bsc#1261498).
- commit eaf3b22</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476804">- net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled
  (CVE-2026-23381 bsc#1260471).
- commit 21aa5bd</changelog>
  <changelog author="nik.borisov@suse.com" date="1775476805">- watchdog/perf: properly initialize the turbo mode timestamp and rearm  counter (bsc#1256504).
- commit c8a645c</changelog>
  <changelog author="mkubecek@suse.cz" date="1775563200">- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs
  and shared blocks (CVE-2026-23270 bsc#1259886).
- commit 00821f1</changelog>
  <changelog author="lduncan@suse.com" date="1775563201">- scsi: target: Fix recursive locking in __configfs_open_file()
  (CVE-2026-23292 bsc#1260500).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_session_usage_count() (CVE-2026-23193 bsc#1258414).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_conn_usage_count() (CVE-2026-23216 bsc#1258447).
- commit e7b5dcd</changelog>
  <changelog author="mkubecek@suse.cz" date="1775563202">- net/sched: teql: fix NULL pointer dereference in iptunnel_xmit
  on TEQL slave xmit (CVE-2026-23277 bsc#1259997).
- commit 852cc2c</changelog>
  <changelog author="tiwai@suse.de" date="1775563203">- soc: aspeed: socinfo: Mask table entries for accurate SoC ID
  matching (git-fixes).
- commit df6cd61</changelog>
  <changelog author="nstange@suse.de" date="1777550400">- crypto: scatterwalk - Add memcpy_sglist (bsc#1262573
  CVE-2026-31431).
- commit 28aed48</changelog>
  <changelog author="nstange@suse.de" date="1777550401">- crypto: scatterwalk - Fix memcpy_sglist() to always succeed
  (bsc#1262573 CVE-2026-31431).
- commit c2ad254</changelog>
  <changelog author="nstange@suse.de" date="1777550402">- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- commit 8a67d67</changelog>
  <changelog author="nstange@suse.de" date="1777550403">- crypto: algif_aead - Revert to operating out-of-place
  (bsc#1262573 CVE-2026-31431).
- commit eb1a8c9</changelog>
  <changelog author="nstange@suse.de" date="1777550404">- kABI: Restore af_alg_{count,pull}_tsgl() signatures (bsc#1262573
  CVE-2026-31431).
- commit b418ef6</changelog>
  <changelog author="nstange@suse.de" date="1777636800">- crypto: authenc - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- Refresh
  patches.suse/crypto-authencesn-reject-too-short-AAD-assoclen-8-to.patch
- commit 24731ba</changelog>
  <changelog author="nstange@suse.de" date="1777636801">- crypto: authencesn - Do not place hiseq at end of dst for
  out-of-place decryption (bsc#1262573 CVE-2026-31431).
- commit 2c8047b</changelog>
  <changelog author="nstange@suse.de" date="1777636802">- crypto: authencesn - Fix src offset when decrypting in-place
  (bsc#1262573 CVE-2026-31431).
- commit 4921c60</changelog>
  <changelog author="fmancera@suse.de" date="1778155200">- supported.conf: drop rxrpc and afs_fs (bsc#1264450)
- commit bf6ec71</changelog>
  <changelog author="jeffm@suse.com" date="1778241600">- xfrm: esp: avoid in-place decrypt on shared skb frags (bsc#1264449 bsc#1264450).
- commit 10e4355</changelog>
</package>
<package pkgid="fc956b0dfb0c983c802ddc85c70533addae9cb9754e40f8849b05b92cfbafa9a" name="kernel-devel" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="150700.53.52.1"/>
  <changelog author="nik.borisov@suse.com" date="1775476800">- watchdog/perf: properly initialize the turbo mode timestamp and rearm  counter (bsc#1256504).
- commit c8a645c</changelog>
  <changelog author="mkubecek@suse.cz" date="1775563200">- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs
  and shared blocks (CVE-2026-23270 bsc#1259886).
- commit 00821f1</changelog>
  <changelog author="lduncan@suse.com" date="1775563201">- scsi: target: Fix recursive locking in __configfs_open_file()
  (CVE-2026-23292 bsc#1260500).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_session_usage_count() (CVE-2026-23193 bsc#1258414).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_conn_usage_count() (CVE-2026-23216 bsc#1258447).
- commit e7b5dcd</changelog>
  <changelog author="mkubecek@suse.cz" date="1775563202">- net/sched: teql: fix NULL pointer dereference in iptunnel_xmit
  on TEQL slave xmit (CVE-2026-23277 bsc#1259997).
- commit 852cc2c</changelog>
  <changelog author="tiwai@suse.de" date="1775563203">- soc: aspeed: socinfo: Mask table entries for accurate SoC ID
  matching (git-fixes).
- commit df6cd61</changelog>
  <changelog author="nstange@suse.de" date="1777550400">- crypto: scatterwalk - Add memcpy_sglist (bsc#1262573
  CVE-2026-31431).
- commit 28aed48</changelog>
  <changelog author="nstange@suse.de" date="1777550401">- crypto: scatterwalk - Fix memcpy_sglist() to always succeed
  (bsc#1262573 CVE-2026-31431).
- commit c2ad254</changelog>
  <changelog author="nstange@suse.de" date="1777550402">- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- commit 8a67d67</changelog>
  <changelog author="nstange@suse.de" date="1777550403">- crypto: algif_aead - Revert to operating out-of-place
  (bsc#1262573 CVE-2026-31431).
- commit eb1a8c9</changelog>
  <changelog author="nstange@suse.de" date="1777550404">- kABI: Restore af_alg_{count,pull}_tsgl() signatures (bsc#1262573
  CVE-2026-31431).
- commit b418ef6</changelog>
  <changelog author="nstange@suse.de" date="1777636800">- crypto: authenc - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- Refresh
  patches.suse/crypto-authencesn-reject-too-short-AAD-assoclen-8-to.patch
- commit 24731ba</changelog>
  <changelog author="nstange@suse.de" date="1777636801">- crypto: authencesn - Do not place hiseq at end of dst for
  out-of-place decryption (bsc#1262573 CVE-2026-31431).
- commit 2c8047b</changelog>
  <changelog author="nstange@suse.de" date="1777636802">- crypto: authencesn - Fix src offset when decrypting in-place
  (bsc#1262573 CVE-2026-31431).
- commit 4921c60</changelog>
  <changelog author="nik.borisov@suse.com" date="1777982400">- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's  op cache (bsc#1264013 CVE-2025-54518).
- commit 5f11806</changelog>
  <changelog author="fmancera@suse.de" date="1778155200">- supported.conf: drop rxrpc and afs_fs (bsc#1264450)
- commit c00b898</changelog>
  <changelog author="jeffm@suse.com" date="1778241600">- xfrm: esp: avoid in-place decrypt on shared skb frags (bsc#1264449 bsc#1264450).
- commit f187bc6</changelog>
  <changelog author="pfalcato@suse.de" date="1778673600">- net: skbuff: propagate shared-frag marker through pskb_copy()
  (CVE-2026-46300 bsc#1265209).
- commit 4c684ee</changelog>
  <changelog author="mhocko@suse.com" date="1778760000">- io-wq: check that the predecessor is hashed in
  io_wq_remove_pending() (git-fixes).
- commit 447a089</changelog>
  <changelog author="mhocko@suse.com" date="1778846400">- ptrace: slightly saner 'get_dumpable()' logic (bsc#1265308).
- commit a7685e1</changelog>
  <changelog author="mhocko@suse.com" date="1778846401">- kabi assert ptrace: slightly saner 'get_dumpable()' logic
  (bsc#1265308).
- kabi ptrace: slightly saner 'get_dumpable()' logic
  (bsc#1265308).
- commit 51e3e5d</changelog>
</package>
<package pkgid="001bd6623f49c3128369a8798ae6472019f6e061eb48c5b9bf2e5118b308b92f" name="kernel-devel" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="150700.53.6.1"/>
  <changelog author="ohering@suse.de" date="1751025600">- scsi: storvsc: Increase the timeouts to storvsc_timeout (git-fixes).
- net: mana: Add support for Multi Vports on Bare metal (bsc#1244229).
- scsi: storvsc: Don't report the host packet status as the hv status (git-fixes).
- commit cde971c</changelog>
  <changelog author="tiwai@suse.de" date="1751025601">- HID: lenovo: Restrict F7/9/11 mode to compact keyboards only
  (git-fixes).
- HID: wacom: fix kobject reference count leak (git-fixes).
- HID: wacom: fix memory leak on sysfs attribute creation failure
  (git-fixes).
- HID: wacom: fix memory leak on kobject creation failure
  (git-fixes).
- wifi: mac80211: fix beacon interval calculation overflow
  (git-fixes).
- commit 8d2d6ad</changelog>
  <changelog author="joao.povoas@suse.com" date="1751025602">- Update
  patches.suse/ASoC-soc-pcm-don-t-use-soc_pcm_ret-on-.prepare-callb.patch
  (stable-fixes CVE-2024-58077 bsc#1239090).
- Update
  patches.suse/Bluetooth-btbcm-Fix-NULL-deref-in-btbcm_get_board_na.patch
  (git-fixes CVE-2024-57988 bsc#1237910).
- Update
  patches.suse/Bluetooth-btrtl-check-for-NULL-in-btrtl_setup_realte.patch
  (git-fixes CVE-2024-57987 bsc#1237905).
- Update
  patches.suse/RDMA-bnxt_re-Add-sanity-checks-on-rdev-validity.patch
  (bsc#1237200 CVE-2025-21901 bsc#1240579).
- Update patches.suse/RDMA-rtrs-Add-missing-deinit-call.patch
  (git-fixes CVE-2025-21805 bsc#1238741).
- Update
  patches.suse/amdkfd-properly-free-gang_ctx_bo-when-failed-to-init.patch
  (git-fixes CVE-2025-21842 bsc#1239063).
- Update
  patches.suse/cxl-mem-Fix-no-cxl_nvd-during-pmem-region-auto-assem.patch
  (jsc#PED-10836 CVE-2024-41085 bsc#1228478).
- Update
  patches.suse/cxl-pci-Skip-to-handle-RAS-errors-if-CXL.mem-device-.patch
  (jsc#PED-10836 CVE-2024-26762 bsc#1230337).
- Update
  patches.suse/drm-amd-display-Fix-invalid-context-error-in-dml-hel.patch
  (git-fixes CVE-2025-37965 bsc#1244174).
- Update
  patches.suse/drm-amdgpu-init-return-value-in-amdgpu_ttm_clear_buf.patch
  (git-fixes CVE-2025-21987 bsc#1240798).
- Update
  patches.suse/drm-amdkfd-Fix-NULL-Pointer-Dereference-in-KFD-queue.patch
  (git-fixes CVE-2025-21940 bsc#1240702).
- Update
  patches.suse/drm-i915-gt-Use-spin_lock_irqsave-in-interruptible-c.patch
  (git-fixes CVE-2025-21849 bsc#1239485).
- Update
  patches.suse/drm-imagination-avoid-deadlock-on-fence-release.patch
  (git-fixes CVE-2025-21911 bsc#1240589).
- Update
  patches.suse/drm-xe-hmm-Don-t-dereference-struct-page-pointers-wi.patch
  (git-fixes CVE-2025-21939 bsc#1240710).
- Update patches.suse/drm-xe-userptr-fix-EFAULT-handling.patch
  (git-fixes CVE-2025-21880 bsc#1240170).
- Update
  patches.suse/gpu-host1x-Fix-a-use-of-uninitialized-mutex.patch
  (git-fixes CVE-2025-21824 bsc#1238478).
- Update
  patches.suse/iommu-Fix-potential-memory-leak-in-iopf_queue_remove.patch
  (git-fixes CVE-2025-21770 bsc#1238495).
- Update
  patches.suse/media-intel-ipu6-remove-cpu-latency-qos-request-on-e.patch
  (git-fixes CVE-2024-58004 bsc#1238508).
- Update
  patches.suse/net-smc-do-not-leave-a-dangling-sk-pointer-in-__smc_create.patch
  (jsc#PED-10299 bsc#1241689 CVE-2024-50293 bsc#1233482).
- Update
  patches.suse/net-smc-fix-lacks-of-icsk_syn_mss-with-IPPROTO_SMC.patch
  (jsc#PED-10299 bsc#1241689 CVE-2024-50034 bsc#1231913).
- Update
  patches.suse/powerpc-pseries-iommu-Don-t-unset-window-if-it-was-n.patch
  (jsc#PED-10539 git-fixes CVE-2025-21713 bsc#1237887).
- Update
  patches.suse/wifi-ath12k-Fix-for-out-of-bound-access-error.patch
  (bsc#1240998 CVE-2024-58015 bsc#1238995).
- Update
  patches.suse/wifi-ath12k-fix-use-after-free-in-ath12k_dp_cc_clean.patch
  (bsc#1240998 CVE-2024-56541 bsc#1235064).
- Update
  patches.suse/wifi-iwlwifi-mvm-avoid-NULL-pointer-dereference-cf704a7.patch
  (git-fixes CVE-2024-58062 bsc#1238965).
- commit 0597d89</changelog>
  <changelog author="joao.povoas@suse.com" date="1751025603">- Update
  patches.suse/HID-uclogic-Add-NULL-check-in-uclogic_input_configur.patch
  (git-fixes CVE-2025-38007 bsc#1244938).
- Update
  patches.suse/RDMA-core-Fix-KASAN-slab-use-after-free-Read-in-ib_r.patch
  (git-fixes CVE-2025-38022 bsc#1245003).
- Update
  patches.suse/RDMA-rxe-Fix-slab-use-after-free-Read-in-rxe_queue_c.patch
  (git-fixes CVE-2025-38024 bsc#1245025).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-csu.patch
  (bsc#1243342 CVE-2025-38059 bsc#1244759).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1236208 CVE-2025-21658).
- Update
  patches.suse/can-bcm-add-locking-for-bcm_op-runtime-updates.patch
  (git-fixes CVE-2025-38004 bsc#1244274).
- Update
  patches.suse/can-bcm-add-missing-rcu-read-protection-for-procfs-c.patch
  (git-fixes CVE-2025-38003 bsc#1244275).
- Update
  patches.suse/crypto-algif_hash-fix-double-free-in-hash_accept.patch
  (git-fixes CVE-2025-38079 bsc#1245217).
- Update
  patches.suse/crypto-lzo-Fix-compression-buffer-overrun.patch
  (stable-fixes CVE-2025-38068 bsc#1245210).
- Update
  patches.suse/dmaengine-idxd-Refactor-remove-call-with-idxd_cleanu.patch
  (git-fixes CVE-2025-38014 bsc#1244732).
- Update
  patches.suse/dmaengine-idxd-fix-memory-leak-in-error-handling-pat-46a5cca.patch
  (git-fixes CVE-2025-38015 bsc#1244789).
- Update
  patches.suse/dmaengine-ti-k3-udma-Add-missing-locking.patch
  (git-fixes CVE-2025-38005 bsc#1244727).
- Update
  patches.suse/drm-amd-display-Increase-block_sequence-array-size.patch
  (stable-fixes CVE-2025-38080 bsc#1244738).
- Update
  patches.suse/ext4-goto-right-label-out_mmap_sem-in-ext4_setattr.patch
  (bsc#1242556 CVE-2025-22120 bsc#1241592).
- Update
  patches.suse/firmware-arm_ffa-Set-dma_mask-for-ffa-devices.patch
  (stable-fixes CVE-2025-38043 bsc#1245081).
- Update patches.suse/media-cx231xx-set-device_caps-for-417.patch
  (stable-fixes CVE-2025-38044 bsc#1245082).
- Update
  patches.suse/net-handshake-Fix-handshake_req_destroy_test1.patch
  (git-fixes CVE-2024-26831 bsc#1223008).
- Update
  patches.suse/net-mlx5e-Disable-MACsec-offload-for-uplink-represen.patch
  (git-fixes CVE-2025-38020 bsc#1245001).
- Update patches.suse/net_sched-prio-fix-a-race-in-prio_tune.patch
  (git-fixes CVE-2025-38083 bsc#1245183).
- Update
  patches.suse/nfs-handle-failure-of-nfs_get_lock_context-in-unlock-path.patch
  (git-fixes CVE-2025-38023 bsc#1245004).
- Update patches.suse/orangefs-Do-not-truncate-file-size.patch
  (git-fixes CVE-2025-38065 bsc#1244906).
- Update
  patches.suse/padata-do-not-leak-refcount-in-reorder_work.patch
  (git-fixes CVE-2025-38031 bsc#1245046).
- Update
  patches.suse/phy-tegra-xusb-Use-a-bitmask-for-UTMI-pad-power-stat.patch
  (git-fixes CVE-2025-38010 bsc#1244996).
- Update
  patches.suse/platform-x86-dell-wmi-sysman-Avoid-buffer-overflow-i.patch
  (git-fixes CVE-2025-38077 bsc#1244736).
- Update
  patches.suse/regulator-max20086-fix-invalid-memory-access.patch
  (git-fixes CVE-2025-38027 bsc#1245042).
- Update
  patches.suse/s390-pci-Fix-duplicate-pci_dev_put-in-disable_slot-w.patch
  (git-fixes bsc#1244145 CVE-2025-37946 bsc#1243506).
- Update
  patches.suse/s390-pci-fix-potential-double-remove-of-hotplug-slot.patch
  (bsc#1244145 CVE-2024-56699 bsc#1235490).
- Update
  patches.suse/sched-numa-fix-memory-leak-due-to-the-overwritten-vma-numab_state.patch
  (git fixes (sched/numa) CVE-2024-56613 bsc#1244176).
- Update
  patches.suse/serial-mctrl_gpio-split-disable_ms-into-sync-and-no_.patch
  (git-fixes CVE-2025-38040 bsc#1245078).
- Update
  patches.suse/spi-rockchip-Fix-register-out-of-bounds-access.patch
  (stable-fixes CVE-2025-38081 bsc#1244739).
- Update
  patches.suse/usb-typec-ucsi-displayport-Fix-NULL-pointer-access.patch
  (git-fixes CVE-2025-37994 bsc#1243823).
- Update
  patches.suse/vhost-scsi-Fix-handling-of-multiple-calls-to-vhost_s.patch
  (git-fixes CVE-2025-22083 bsc#1241414).
- Update
  patches.suse/wifi-cfg80211-fix-out-of-bounds-access-during-multi-.patch
  (git-fixes CVE-2025-37973 bsc#1244172).
- Update patches.suse/wifi-iwlwifi-fix-debug-actions-order.patch
  (stable-fixes CVE-2025-38045 bsc#1245083).
- Update
  patches.suse/wifi-mac80211-Set-n_channels-after-allocating-struct.patch
  (git-fixes CVE-2025-38013 bsc#1244731).
- Update
  patches.suse/wifi-mt76-disable-napi-on-driver-removal.patch
  (git-fixes CVE-2025-38009 bsc#1244995).
- commit fee1c31</changelog>
  <changelog author="tiwai@suse.de" date="1751198400">- i2c: tiny-usb: disable zero-length read messages (git-fixes).
- i2c: robotfuzz-osif: disable zero-length read messages
  (git-fixes).
- drm/i915: fix build error some more (git-fixes).
- ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X507UAR
  (git-fixes).
- ALSA: usb-audio: Fix out-of-bounds read in
  snd_usb_get_audioformat_uac3() (git-fixes).
- ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged
  (stable-fixes).
- ALSA: usb-audio: Rename ALSA kcontrol PCM and PCM1 for the
  KTMicro sound card (stable-fixes).
- ALSA: hda/intel: Add Thinkpad E15 to PM deny list
  (stable-fixes).
- ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330
  (stable-fixes).
- drivers/rapidio/rio_cm.c: prevent possible heap overwrite
  (stable-fixes).
- watchdog: da9052_wdt: respect TWDMIN (stable-fixes).
- watchdog: fix watchdog may detect false positive of softlockup
  (stable-fixes).
- fbcon: Make sure modelist not set on unregistered console
  (stable-fixes).
- bus: fsl-mc: increase MC_CMD_COMPLETION_TIMEOUT_MS value
  (stable-fixes).
- i2c: designware: Invoke runtime suspend on quick slave
  re-registration (stable-fixes).
- i2c: npcm: Add clock toggle recovery (stable-fixes).
- pinctrl: armada-37xx: propagate error from
  armada_37xx_pmx_set_by_name() (stable-fixes).
- pinctrl: armada-37xx: propagate error from
  armada_37xx_gpio_get_direction() (stable-fixes).
- pinctrl: armada-37xx: propagate error from
  armada_37xx_pmx_gpio_set_direction() (stable-fixes).
- pinctrl: armada-37xx: propagate error from
  armada_37xx_gpio_get() (stable-fixes).
- pinctrl: mcp23s08: Reset all pins to input at probe
  (stable-fixes).
- software node: Correct a OOB check in
  software_node_get_reference_args() (stable-fixes).
- wifi: mt76: mt7996: drop fragments with multicast or broadcast
  RA (stable-fixes).
- wifi: mt76: mt7921: add 160 MHz AP for mt7922 device
  (stable-fixes).
- wifi: mt76: mt76x2: Add support for LiteOn WN4516R,WN4519R
  (stable-fixes).
- wifi: ath12k: fix macro definition HAL_RX_MSDU_PKT_LENGTH_GET
  (stable-fixes).
- wifi: ath12k: fix a possible dead lock caused by ab-&gt;base_lock
  (stable-fixes).
- wifi: ath11k: Fix QMI memory reuse logic (stable-fixes).
- wifi: rtw89: leave idle mode when setting WEP encryption for
  AP mode (stable-fixes).
- wifi: mac80211: do not offer a mesh path if forwarding is
  disabled (stable-fixes).
- wifi: iwlwifi: pcie: make sure to lock rxq-&gt;read (stable-fixes).
- wifi: mac80211_hwsim: Prevent tsf from setting if beacon is
  disabled (stable-fixes).
- wifi: ath12k: fix failed to set mhi state error during reboot
  with hardware grouping (stable-fixes).
- wifi: ath12k: fix link valid field initialization in the
  monitor Rx (stable-fixes).
- wifi: ath12k: fix incorrect CE addresses (stable-fixes).
- wifi: ath12k: Pass correct values of center freq1 and center
  freq2 for 160 MHz (stable-fixes).
- wifi: mac80211: VLAN traffic in multicast path (stable-fixes).
- wifi: iwlwifi: Add missing MODULE_FIRMWARE for Qu-c0-jf-b0
  (stable-fixes).
- usbnet: asix AX88772: leave the carrier control to phylink
  (stable-fixes).
- PM: runtime: fix denying of auto suspend in
  pm_suspend_timer_fn() (stable-fixes).
- ACPI: battery: negate current when discharging (stable-fixes).
- ACPICA: Avoid sequence overread in call to strncmp()
  (stable-fixes).
- ACPICA: utilities: Fix overflow check in vsnprintf()
  (stable-fixes).
- ACPICA: fix acpi parse and parseext cache leaks (stable-fixes).
- ACPICA: fix acpi operand cache leak in dswstate.c
  (stable-fixes).
- ACPI: bus: Bail out if acpi_kobj registration fails
  (stable-fixes).
- mmc: Add quirk to disable DDR50 tuning (stable-fixes).
- power: supply: bq27xxx: Retrieve again when busy (stable-fixes).
- power: supply: collie: Fix wakeup source leaks on device unbind
  (stable-fixes).
- ASoC: amd: yc: Add quirk for Lenovo Yoga Pro 7 14ASP9
  (stable-fixes).
- ASoC: tegra210_ahub: Add check to of_device_get_match_data()
  (stable-fixes).
- ASoC: tas2770: Power cycle amp on ISENSE/VSENSE change
  (stable-fixes).
- Input: sparcspkr - avoid unannotated fall-through
  (stable-fixes).
- commit 0dc7dde</changelog>
  <changelog author="tiwai@suse.de" date="1751198401">- drm/xe: Process deferred GGTT node removals on device unwind
  (git-fixes).
- drm/xe/display: Add check for alloc_ordered_workqueue()
  (git-fixes).
- drm/amd: Adjust output for discovery error handling (git-fixes).
- drm/xe/bmg: Update Wa_16023588340 (git-fixes).
- drm/v3d: Avoid NULL pointer dereference in
  `v3d_job_update_stats()` (stable-fixes).
- PCI: Add ACS quirk for Loongson PCIe (stable-fixes).
- wifi: mt76: mt7925: introduce thermal protection (stable-fixes).
- wifi: mac80211: validate SCAN_FLAG_AP in scan request during
  MLO (stable-fixes).
- wifi: rtw89: 8922a: fix TX fail with wrong VCO setting
  (stable-fixes).
- wifi: iwlwifi: mvm: fix beacon CCK flag (stable-fixes).
- wireless: purelifi: plfxlc: fix memory leak in
  plfxlc_usb_wreq_asyn() (stable-fixes).
- wifi: ath12k: using msdu end descriptor to check for rx
  multicast packets (stable-fixes).
- ACPI: Add missing prototype for non CONFIG_SUSPEND/CONFIG_X86
  case (stable-fixes).
- drm/amdgpu: read back register after written for VCN v4.0.5
  (stable-fixes).
- wifi: rtw89: phy: add dummy C2H event handler for report of
  TAS power (stable-fixes).
- drm/xe: Wire up device shutdown handler (stable-fixes).
- commit 59cc8a5</changelog>
  <changelog author="tiwai@suse.de" date="1751198402">- drm/xe/gt: Update handling of xe_force_wake_get return
  (stable-fixes).
- Refresh
  patches.suse/drm-xe-Fix-GT-for-each-engine-workarounds.patch.
- commit 2738ff8</changelog>
  <changelog author="pjakobsson@suse.de" date="1751284800">- drm/amdgpu: csa unmap use uninterruptible lock (CVE-2025-38011
  bsc#1244729).
- commit d370e7c</changelog>
  <changelog author="tiwai@suse.de" date="1751284801">- staging: rtl8723bs: Avoid memset() in aes_cipher() and
  aes_decipher() (git-fixes).
- serial: imx: Restore original RXTL for console to fix data loss
  (git-fixes).
- commit 652de47</changelog>
  <changelog author="tiwai@suse.de" date="1751284802">- serial: core: restore of_node information in sysfs (git-fixes).
- commit 6ac0cc6</changelog>
  <changelog author="osalvador@suse.de" date="1751284803">- mm/hugetlb: unshare page tables during VMA split, not before
  (bsc#1245431).
- commit cdfa193</changelog>
  <changelog author="osalvador@suse.de" date="1751284804">- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
  (bsc#1245431).
- commit 0b96583</changelog>
  <changelog author="osalvador@suse.de" date="1751284805">- mm/hugetlb: unshare page tables during VMA split, not before
  (bsc#1245431).
- commit bf8eb79</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1751284806">- netlink: specs: dpll: replace underscores with dashes in names
  (git-fixes).
- bnxt: properly flush XDP redirect lists (git-fixes).
- e1000e: set fixed clock frequency indication for Nahum 11 and
  Nahum 13 (git-fixes).
- net: ice: Perform accurate aRFS flow match (git-fixes).
- net/mlx5e: Fix leak of Geneve TLV option object (git-fixes).
- net/mlx5: Fix return value when searching for existing flow
  group (git-fixes).
- net/mlx5: Fix ECVF vports unload on shutdown flow (git-fixes).
- net/mlx5: Ensure fw pages are always allocated on same NUMA
  (git-fixes).
- i40e: retry VFLR handling if there is ongoing VF reset
  (git-fixes).
- i40e: return false from i40e_reset_vf if reset is in progress
  (git-fixes).
- gve: add missing NULL check for gve_alloc_pending_packet()
  in TX DQO (git-fixes).
- ice: fix rebuilding the Tx scheduler tree for large queue counts
  (git-fixes).
- ice: create new Tx scheduler nodes for new queues only
  (git-fixes).
- ice: fix Tx scheduler error handling in XDP callback
  (git-fixes).
- net/mlx4_en: Prevent potential integer overflow calculating Hz
  (git-fixes).
- gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt
  (git-fixes).
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid()
  (git-fixes).
- net/mlx5_core: Add error handling
  inmlx5_query_nic_vport_qkey_viol_cntr() (git-fixes).
- idpf: fix null-ptr-deref in idpf_features_check (CVE-2025-38053
  bsc#1244746).
- ice: Fix LACP bonds without SRIOV environment (git-fixes).
- ice: fix vf-&gt;num_mac count with port representors (git-fixes).
- devlink: fix port dump cmd type (git-fixes).
- devlink: Fix referring to hw_addr attribute during state
  validation (git-fixes).
- netlink: fix potential sleeping issue in mqueue_flush_file
  (git-fixes).
- commit 6dccf5f</changelog>
  <changelog author="osalvador@suse.de" date="1751284807">- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
  (bsc#1245431).
- commit dd145d5</changelog>
  <changelog author="ailiop@suse.com" date="1751284808">- nfsd: nfsd4_spo_must_allow() must check this is a v4 compound
  request (git-fixes).
- commit 784f61d</changelog>
  <changelog author="ohering@suse.de" date="1751284809">- add bug reference to existing hv_storvsc change (bsc#1245455).
- net: mana: Record doorbell physical address in PF mode (bsc#1244229).
- commit 1c553b0</changelog>
  <changelog author="tiwai@suse.de" date="1751371200">- rtc: cmos: use spin_lock_irqsave in cmos_interrupt (git-fixes).
- commit d8e756f</changelog>
  <changelog author="pfalcato@suse.de" date="1751371201">- perf/x86/intel: Fix segfault with PEBS-via-PT with sample_freq
  (CVE-2025-38055 bsc#1244747).
- commit 144da01</changelog>
  <changelog author="oneukum@suse.com" date="1751371202">- r8152: add vendor/device ID pair for Dell Alienware AW1022z
  (git-fixes).
- commit 9bd4e20</changelog>
</package>
<package pkgid="51c933607ccc7657d3de3da18c41b5ae5401b958b2f2d1b541346a9d0b06225c" name="kernel-macros" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="150700.53.11.1"/>
  <changelog author="ailiop@suse.com" date="1754913600">- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY
  (git-fixes).
- commit fd58755</changelog>
  <changelog author="ailiop@suse.com" date="1754913601">- sunrpc: fix client side handling of tls alerts (git-fixes).
- commit 4c093f3</changelog>
  <changelog author="ailiop@suse.com" date="1754913602">- NFS: Fix the setting of capabilities when automounting a new
  filesystem (git-fixes).
- commit fabe208</changelog>
  <changelog author="tzimmermann@suse.com" date="1754913603">- drm/amdgpu: Add basic validation for RAS header (bsc#1247252 CVE-2025-38426)
- commit 5d23e74</changelog>
  <changelog author="ailiop@suse.com" date="1754913604">- sched: Add test_and_clear_wake_up_bit() and
  atomic_dec_and_wake_up() (git-fixes).
- commit 3754627</changelog>
  <changelog author="ailiop@suse.com" date="1754913605">- NFS: Fix wakeup of __nfs_lookup_revalidate() in
  unblock_revalidate() (git-fixes).
- commit 80e576f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1754913606">- netlink: avoid infinite retry looping in netlink_unicast()
  (CVE-2025-38465 bsc#1247118).
- net: mana: Set tx_packets to post gso processing packet count
  (bsc#1245731).
- net: mana: Allocate MSI-X vectors dynamically (bsc#1245457).
- net: mana: Allow irq_setup() to skip cpus for affinity
  (bsc#1245457).
- net: mana: explain irq_setup() algorithm (bsc#1245457).
- PCI: hv: Allow dynamic MSI-X vector allocation (bsc#1245457).
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X
  allocations (bsc#1245457).
- net: mana: Add handler for hardware servicing events
  (bsc#1245730).
- net: mana: Expose additional hardware counters for drop and
  TC via ethtool (bsc#1245729).
- hv_netvsc: Use VF's tso_max_size value when data path is VF
  (bsc#1246203).
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE
  (bsc#1246203).
- commit bdd7f41</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1754913607">- net: mana: Add debug logs in MANA network driver (bsc#1246212).
- Refresh
  patches.suse/msft-hv-3280-net-mana-Add-support-for-Multi-Vports-on-Bare-metal.patch.
- commit 1b4ad82</changelog>
  <changelog author="ematsumiya@suse.de" date="1754913608">- [SMB3] send channel sequence number in SMB3 requests after
  reconnects (git-fixes).
- commit baa81e9</changelog>
  <changelog author="ematsumiya@suse.de" date="1754913609">- cifs: reconnect helper should set reconnect for the right
  channel (git-fixes).
- commit ae3173e</changelog>
  <changelog author="ematsumiya@suse.de" date="1754913610">- smb: client: fix potential deadlock when reconnecting channels
  (bsc#1246183, CVE-2025-38244).
- commit fcf601a</changelog>
  <changelog author="ematsumiya@suse.de" date="1754913611">- SMB3: rename macro CIFS_SERVER_IS_CHAN to avoid confusion
  (git-fixes).
- Refresh
  patches.suse/smb-client-fix-use-after-free-of-signing-key.patch.
- commit ee8ada8</changelog>
  <changelog author="petr.pavlu@suse.com" date="1754913612">- module: Fix memory deallocation on error path in move_module()
  (git-fixes).
- commit bb37d39</changelog>
  <changelog author="petr.pavlu@suse.com" date="1754913613">- audit,module: restore audit logging in load failure case
  (git-fixes).
- kABI: Fix the module::name type in audit_context (git-fixes).
- commit 7e23359</changelog>
  <changelog author="petr.pavlu@suse.com" date="1754913614">- module: Remove unnecessary +1 from last_unloaded_module::name
  size (git-fixes).
- commit 3efc8ab</changelog>
  <changelog author="petr.pavlu@suse.com" date="1754913615">- module: Restore the moduleparam prefix length check (git-fixes).
- commit ad2fc48</changelog>
  <changelog author="petr.pavlu@suse.com" date="1754913616">- ring-buffer: Do not allow events in NMI with generic atomic64
  cmpxchg() (git-fixes).
- commit 890fc59</changelog>
  <changelog author="ematsumiya@suse.de" date="1754913617">- smb3: move server check earlier when setting channel sequence
  number (git-fixes).
- commit df2adca</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1754913618">- ice: init flow director before RDMA (bsc#1247712).
- ice: simplify VF MSI-X managing (bsc#1247712).
- ice: enable_rdma devlink param (bsc#1247712).
- ice: treat dyn_allowed only as suggestion (bsc#1247712).
- ice, irdma: move interrupts code to irdma (bsc#1247712).
- ice: get rid of num_lan_msix field (bsc#1247712).
- ice: remove splitting MSI-X between features (bsc#1247712).
- ice: devlink PF MSI-X max and min parameter (bsc#1247712).
- ice: count combined queues using Rx/Tx count (bsc#1247712).
- commit 0afdc75</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1754913619">- ice, irdma: fix an off by one in error handling code
  (bsc#1247712).
- irdma: free iwdev-&gt;rf after removing MSI-X (bsc#1247712).
- ice: Fix signedness bug in ice_init_interrupt_scheme()
  (bsc#1247712).
- commit eba4226</changelog>
</package>
<package pkgid="5db8bb0053d070883a455967a38b6e8eb3daf8c960f141734eeebc5b0740ebeb" name="kernel-macros" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="150700.53.16.1"/>
  <changelog author="dsterba@suse.com" date="1756468800">- net: stmmac: make sure that ptp_rate is not 0 before configuring EST (CVE-2025-38125 bsc#1245710)
- commit 0fcfa4f</changelog>
  <changelog author="dsterba@suse.com" date="1756468801">- smb: client: add NULL check in automount_fullpath (CVE-2025-38208 bsc#1245815)
- commit 04d79fb</changelog>
  <changelog author="dsterba@suse.com" date="1756468802">- drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (CVE-2025-38205 bsc#1246005)
- commit e09f72d</changelog>
  <changelog author="dsterba@suse.com" date="1756468803">- tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (CVE-2025-38184 bsc#1245956)
- commit 263759a</changelog>
  <changelog author="dsterba@suse.com" date="1756468804">- clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (CVE-2025-38160 bsc#1245780)
- commit f8670f7</changelog>
  <changelog author="tiwai@suse.de" date="1756555200">- HID: asus: fix UAF via HID_CLAIMED_INPUT validation (git-fixes).
- HID: multitouch: fix slab out-of-bounds access in
  mt_report_fixup() (git-fixes).
- drm/mediatek: Fix device/node reference count leaks in
  mtk_drm_get_all_drm_priv (git-fixes).
- drm/msm/kms: move snapshot init earlier in KMS init (git-fixes).
- drm/msm: Defer fd_install in SUBMIT ioctl (git-fixes).
- drm/nouveau: remove unused memory target test (git-fixes).
- drm/nouveau: remove unused increment in gm200_flcn_pio_imem_wr
  (git-fixes).
- drm/nouveau: fix error path in nvkm_gsp_fwsec_v2 (git-fixes).
- drm/nouveau/disp: Always accept linear modifier (git-fixes).
- mISDN: hfcpci: Fix warning when deleting uninitialized timer
  (git-fixes).
- Bluetooth: hci_sync: fix set_local_name race condition
  (git-fixes).
- Bluetooth: hci_event: Detect if HCI_EV_NUM_COMP_PKTS is
  unbalanced (git-fixes).
- Bluetooth: hci_event: Mark connection as closed during suspend
  disconnect (git-fixes).
- Bluetooth: hci_event: Treat UNKNOWN_CONN_ID on disconnect as
  success (git-fixes).
- commit f54cbc7</changelog>
  <changelog author="tiwai@suse.de" date="1756555201">- drm/mediatek: Add error handling for old state CRTC in
  atomic_disable (git-fixes).
- drm/msm: update the high bitfield of certain DSI registers
  (git-fixes).
- drm/xe: Don't trigger rebind on initial dma-buf validation
  (git-fixes).
- drm/xe/vm: Clear the scratch_pt pointer on error (git-fixes).
- drm/xe/xe_sync: avoid race during ufence signaling (git-fixes).
- commit ea140bc</changelog>
  <changelog author="joao.povoas@suse.com" date="1756641600">- Update
  patches.suse/drm-imagination-Fix-kernel-crash-when-hard-resetting.patch
  (git-fixes CVE-2025-38521 bsc#1248232).
- Update
  patches.suse/drm-xe-pf-Clear-all-LMTT-pages-on-alloc.patch
  (git-fixes CVE-2025-38511 bsc#1248175).
- Update
  patches.suse/regulator-core-fix-NULL-dereference-on-unbind-due-to.patch
  (stable-fixes CVE-2025-38668 bsc#1248647).
- Update
  patches.suse/wifi-ath12k-Pass-ab-pointer-directly-to-ath12k_dp_tx.patch
  (git-fixes CVE-2025-38605 bsc#1248334).
- commit af57d5e</changelog>
  <changelog author="joao.povoas@suse.com" date="1756641601">- Update
  patches.suse/Bluetooth-btnxpuart-Resolve-TX-timeout-error-in-powe.patch
  (bsc#1230557 CVE-2024-58238 bsc#1242754).
- Update
  patches.suse/HID-quirks-Add-quirk-for-2-Chicony-Electronics-HP-5M.patch
  (stable-fixes CVE-2025-38540 bsc#1248208).
- Update
  patches.suse/PCI-pnv_php-Clean-up-allocated-IRQs-on-unplug.patch
  (bsc#1215199 CVE-2025-38624 bsc#1248617).
- Update
  patches.suse/PM-devfreq-Check-governor-before-using-governor-name.patch
  (git-fixes CVE-2025-38609 bsc#1248337).
- Update
  patches.suse/RDMA-hns-Fix-double-destruction-of-rsv_qp.patch
  (git-fixes CVE-2025-38582 bsc#1248349).
- Update
  patches.suse/arm64-entry-Mask-DAIF-in-cpu_switch_to-call_on_irq_stack.patch
  (git-fixes CVE-2025-38670 bsc#1248655).
- Update
  patches.suse/btrfs-fix-assertion-when-building-free-space-tree.patch
  (git-fixes CVE-2025-38503 bsc#1248183).
- Update
  patches.suse/can-netlink-can_changelink-fix-NULL-pointer-deref-of.patch
  (git-fixes CVE-2025-38665 bsc#1248648).
- Update
  patches.suse/clk-davinci-Add-NULL-check-in-davinci_lpsc_clk_regis.patch
  (git-fixes CVE-2025-38635 bsc#1248573).
- Update
  patches.suse/clk-xilinx-vcu-unregister-pll_post-only-if-registere.patch
  (git-fixes CVE-2025-38583 bsc#1248350).
- Update
  patches.suse/comedi-aio_iiro_16-Fix-bit-shift-out-of-bounds.patch
  (git-fixes CVE-2025-38529 bsc#1248196).
- Update
  patches.suse/comedi-pcl812-Fix-bit-shift-out-of-bounds.patch
  (git-fixes CVE-2025-38530 bsc#1248206).
- Update
  patches.suse/crypto-ccp-Fix-crash-when-rebind-ccp-device-for-ccp..patch
  (git-fixes CVE-2025-38581 bsc#1248345).
- Update
  patches.suse/dmaengine-nbpfaxi-Fix-memory-corruption-in-probe.patch
  (git-fixes CVE-2025-38538 bsc#1248213).
- Update patches.suse/drm-amd-display-Fix-vs-typos.patch
  (git-fixes CVE-2024-26661 bsc#1222323).
- Update
  patches.suse/drm-sched-Increment-job-count-before-swapping-tail-s.patch
  (git-fixes CVE-2025-38515 bsc#1248212).
- Update
  patches.suse/drm-tegra-nvdec-Fix-dma_alloc_coherent-error-check.patch
  (git-fixes CVE-2025-38543 bsc#1248214).
- Update
  patches.suse/fbdev-imxfb-Check-fb_add_videomode-to-prevent-null-p.patch
  (git-fixes CVE-2025-38630 bsc#1248575).
- Update
  patches.suse/hfsplus-remove-mutex_lock-check-in-hfsplus_free_extents.patch
  (git-fixes CVE-2025-38650 bsc#1248746).
- Update
  patches.suse/hwmon-corsair-cpro-Validate-the-size-of-the-received.patch
  (git-fixes CVE-2025-38548 bsc#1248228).
- Update
  patches.suse/i2c-qup-jump-out-of-the-loop-in-case-of-timeout.patch
  (git-fixes CVE-2025-38671 bsc#1248652).
- Update
  patches.suse/ipv6-fix-possible-infinite-loop-in-fib6_info_uses_de.patch
  (git-fixes CVE-2025-38587 bsc#1248361).
- Update
  patches.suse/ipv6-mcast-Delay-put-pmc-idev-in-mld_del_delrec.patch
  (git-fixes CVE-2025-38550 bsc#1248227).
- Update
  patches.suse/ipv6-prevent-infinite-loop-in-rt6_nlmsg_size.patch
  (git-fixes CVE-2025-38588 bsc#1248368).
- Update
  patches.suse/ipv6-reject-malicious-packets-in-ipv6_gso_segment.patch
  (git-fixes CVE-2025-38572 bsc#1248399).
- Update
  patches.suse/iwlwifi-Add-missing-check-for-alloc_ordered_workqueu.patch
  (git-fixes CVE-2025-38602 bsc#1248341).
- Update
  patches.suse/kasan-remove-kasan_find_vm_area-to-prevent-possible-.patch
  (git-fixes CVE-2025-38510 bsc#1248166).
- Update
  patches.suse/ksmbd-fix-out-of-bounds-read-in-smb2_sess_setup.patch
  (bsc#1012628 bsc#1213545 CVE-2023-3867).
- Update
  patches.suse/ksmbd-fix-wrong-next-length-validation-of-ea-b.patch
  (bsc#1012628 CVE-2023-4130 bsc#1248164).
- Update patches.suse/ksmbd-validate-command-request-size.patch
  (bsc#1012628 CVE-2023-4515 bsc#1248180).
- Update
  patches.suse/md-make-rdev_addable-usable-for-rcu-mode.patch
  (git-fixes CVE-2025-38621 bsc#1248609).
- Update
  patches.suse/net-packet-fix-a-race-in-packet_set_ring-and-packet_.patch
  (git-fixes CVE-2025-38617 bsc#1248621).
- Update patches.suse/net-phy-Don-t-register-LEDs-for-genphy.patch
  (git-fixes CVE-2025-38537 bsc#1248229).
- Update
  patches.suse/net-sched-Restrict-conditions-for-adding-duplicating.patch
  (git-fixes CVE-2025-38553 bsc#1248255).
- Update
  patches.suse/net-sched-mqprio-fix-stack-out-of-bounds-write-in-tc.patch
  (git-fixes CVE-2025-38568 bsc#1248386).
- Update
  patches.suse/nilfs2-reject-invalid-file-types-when-reading-inodes.patch
  (git-fixes CVE-2025-38663 bsc#1248636).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/phy-tegra-xusb-Fix-unbalanced-regulator-disable-in-U.patch
  (git-fixes CVE-2025-38535 bsc#1248240).
- Update
  patches.suse/pinctrl-qcom-msm-mark-certain-pins-as-invalid-for-in.patch
  (git-fixes CVE-2025-38516 bsc#1248209).
- Update
  patches.suse/pinmux-fix-race-causing-mux_owner-NULL-with-active-m.patch
  (git-fixes CVE-2025-38632 bsc#1248669).
- Update
  patches.suse/power-supply-cpcap-charger-Fix-null-check-for-power_.patch
  (git-fixes CVE-2025-38634 bsc#1248666).
- Update
  patches.suse/powercap-dtpm_cpu-Fix-NULL-pointer-dereference-in-ge.patch
  (git-fixes CVE-2025-38610 bsc#1248395).
- Update
  patches.suse/powerpc-eeh-Make-EEH-driver-device-hotplug-safe.patch
  (bsc#1215199 CVE-2025-38576 bsc#1248354).
- Update
  patches.suse/staging-fbtft-fix-potential-memory-leak-in-fbtft_fra.patch
  (git-fixes CVE-2025-38612 bsc#1248390).
- Update
  patches.suse/sunrpc-fix-client-side-handling-of-tls-alerts.patch
  (git-fixes CVE-2025-38571 bsc#1248401).
- Update
  patches.suse/sunrpc-fix-handling-of-server-side-tls-alerts.patch
  (git-fixes CVE-2025-38566 bsc#1248374).
- Update
  patches.suse/tls-stop-recv-if-initial-process_rx_list-gave-us-non.patch
  (bsc#1221858 CVE-2024-58239 bsc#1248614).
- Update
  patches.suse/usb-gadget-fix-use-after-free-in-composite_dev_clean.patch
  (git-fixes CVE-2025-38555 bsc#1248297).
- Update
  patches.suse/wifi-ath11k-clear-initialized-flag-for-deinit-ed-srn.patch
  (git-fixes CVE-2025-38601 bsc#1248340).
- Update
  patches.suse/wifi-iwlwifi-Fix-error-code-in-iwl_op_mode_dvm_start.patch
  (git-fixes CVE-2025-38656 bsc#1248643).
- Update
  patches.suse/wifi-mac80211-reject-TDLS-operations-when-station-is.patch
  (git-fixes CVE-2025-38644 bsc#1248748).
- Update
  patches.suse/wifi-mt76-mt7925-Fix-null-ptr-deref-in-mt7925_therma.patch
  (git-fixes CVE-2025-38541 bsc#1248216).
- Update
  patches.suse/wifi-prevent-A-MSDU-attacks-in-mesh-networks.patch
  (stable-fixes CVE-2025-38512 bsc#1248178).
- Update
  patches.suse/wifi-rtl818x-Kill-URBs-before-clearing-tx-status-que.patch
  (git-fixes CVE-2025-38604 bsc#1248333).
- Update
  patches.suse/wifi-rtw89-avoid-NULL-dereference-when-RX-problemati.patch
  (git-fixes CVE-2025-38646 bsc#1248577).
- Update
  patches.suse/wifi-zd1211rw-Fix-potential-NULL-pointer-dereference.patch
  (git-fixes CVE-2025-38513 bsc#1248179).
- commit efc5ee0</changelog>
  <changelog author="nik.borisov@suse.com" date="1756728000">- RAS/AMD/ATL: Include row bit in row retirement (bsc#1242034).
- commit fa3fcbb</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1756728001">- ixgbe: fix ixgbe_orom_civd_info struct layout (bsc#1245410).
- commit 53ae51b</changelog>
  <changelog author="nik.borisov@suse.com" date="1756728002">- RAS/AMD/FMPM: Get masked address (bsc#1242034).
- commit 4171987</changelog>
  <changelog author="nik.borisov@suse.com" date="1756728003">- RAS/AMD/FMPM: Use atl internal.h for INVALID_SPA (bsc#1242034).
- commit ac5d9dc</changelog>
  <changelog author="pmladek@suse.com" date="1756728004">- slab: Decouple slab_debug and no_hash_pointers (bsc#1249022).
- commit 41f928f</changelog>
  <changelog author="jgross@suse.com" date="1756728005">- KVM: Allow CPU to reschedule while setting per-page memory
  attributes (bsc#1248186 CVE-2025-38506).
- commit a7f8a41</changelog>
  <changelog author="nmorey@suse.com" date="1756728006">- RDMA/core: reduce stack using in nldev_stat_get_doit() (git-fixes)
- commit 1ff622a</changelog>
  <changelog author="nmorey@suse.com" date="1756728007">- RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (git-fixes)
- commit 5289b12</changelog>
  <changelog author="jgross@suse.com" date="1756728008">- vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1248511
  CVE-2025-38618).
- commit 0256bd0</changelog>
  <changelog author="tiwai@suse.de" date="1756728009">- staging: media: atomisp: Fix stack buffer overflow in
  gmin_get_var_int() (CVE-2025-38585 bsc#1248355).
- commit f7d8b23</changelog>
  <changelog author="msuchanek@suse.de" date="1757419200">- kernel-subpackage-build: Decompress ghost file when compressed version exists (bsc#1249346)
- commit 40606b5</changelog>
</package>
<package pkgid="9078cad0b3a6efe128c23ee80de66bf56165f3f2216d770e9f9f05c2926002c8" name="kernel-macros" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="150700.53.19.1"/>
  <changelog author="pmladek@suse.com" date="1759492800">- kbuild/modpost: Continue processing all unresolved symbols
  when KLP_SYM_RELA is found (bsc#1218644, bsc#1250655).
- commit ec0a51c</changelog>
  <changelog author="ailiop@suse.com" date="1759492801">- Squashfs: fix uninit-value in squashfs_get_parent (git-fixes).
- commit 126861e</changelog>
  <changelog author="pjakobsson@suse.de" date="1759492802">- Replace drm-backport-placeholder with actual jira tickets
  For unknown reasons a portion of the patches didn't get their
  placeholder tag replaced during the drm backport. Let's fix them now.
- Update patches.suse/0001-PCI-Add-pci_get_base_class-helper.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0001-accel-ivpu-Annotate-struct-ivpu_job-with-__counted_b.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0001-drm-prime-Unexport-helpers-for-fd-handle-conversion.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071 bsc#1212533).
- Update
  patches.suse/0001-drm-vmwgfx-Keep-a-gem-reference-to-user-bos-in-surfa.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  CVE-2023-5633, bsc#1216527).
- Update
  patches.suse/0001-mm-factor-out-VMA-stack-and-heap-checks.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0002-PCI-Add-pci_is_vga-helper.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0002-drm-amdkfd-use-vma_is_initial_stack-and-vma_is_initi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0002-drm-sched-Make-sure-we-wait-for-all-dependencies-in-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0002-drm-tests-Use-KUNIT_DEFINE_ACTION_WRAPPER.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0002-fbdev-Simplify-fb_is_primary_device-for-x86.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0003-drm-vc4-tests-Use-KUNIT_DEFINE_ACTION_WRAPPER.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0003-fbdev-Prepare-generic-architecture-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0004-arch-x86-Implement-asm-fb.h-with-generic-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0004-drm-tests-Switch-to-kunit-devices.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0005-drm-modes-replace-deprecated-strncpy-with-strscpy_pa.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0005-drm-ttm-fix-warning-that-we-shouldn-t-mix-and.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0006-accel-ivpu-Use-struct_size.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0006-arch-arm64-Implement-asm-fb.h-with-generic-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0006-drivers-gpu-drm-i915-i915_memcpy.c-fix-missing-inclu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0006-drm-nouveau-kms-nv50-Fix-drm_dp_remove_payload-invoc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0006-drm-rockchip-vop-Add-rv1126-vop_lite-support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0007-accel-ivpu-Remove-configuration-of-MMU-TBU1-and-TBU3.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0007-arch-sparc-Implement-fb_is_primary_device-in-source-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0007-docs-driver-api-properly-format-ToC-headings.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0007-drm-rockchip-dsi-Add-rv1126-MIPI-DSI-support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0007-drm-sched-Call-drm_sched_fence_set_parent-from-drm_s.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0008-accel-ivpu-Add-MMU-support-for-4-level-page-mappings.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0008-accel-ivpu-Document-DRM_IVPU_PARAM_CAPABILITIES.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0008-arch-ia64-Implement-asm-fb.h-with-generic-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0008-drm-atomic-helper-Fix-spelling-mistake-preceeding-pr.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0009-accel-ivpu-Make-DMA-bit-mask-HW-specific.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0009-arch-loongarch-Implement-asm-fb.h-with-generic-helpe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0009-drm-extract-closefb-logic-in-separate-function.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0010-accel-ivpu-Rename-and-cleanup-MMU600-page-tables.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0010-arch-mips-Implement-asm-fb.h-with-generic-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0010-drm-introduce-CLOSEFB-IOCTL.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0011-accel-ivpu-Mark-64-kB-contiguous-areas-as-contiguous.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0011-arch-sparc-Implement-asm-fb.h-with-generic-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0011-drm-doc-describe-PATH-format-for-DP-MST.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0012-accel-qaic-Enable-1-MSI-fallback-mode.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0012-arch-x86-Include-asm-fb.h-in-fbdev-source-file.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0012-drm-bridge-lvds-codec-Implement-atomic_get_input_bus.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0013-accel-qaic-Add-support-for-periodic-timesync.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0013-fbdev-Include-linux-io.h-in-various-drivers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0014-accel-qaic-Support-MHI-QAIC_TIMESYNC-channel.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0014-fbdev-Include-linux-fb.h-instead-of-asm-fb.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0015-drm-rockchip-vop-Use-cleanup-helper-directly-as-dest.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0015-fbdev-Move-framebuffer-I-O-helpers-into-asm-fb.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0016-accel-ivpu-Update-FW-API.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0016-fbdev-Rename-fb_mem-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0017-accel-ivpu-Remove-unneeded-drm_driver-declaration.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0017-drm-radeon-Replace-all-non-returning-strlcpy-with-st.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0017-minmax-add-in_range-macro.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0018-accel-ivpu-Add-dvfs_mode-file-to-debugfs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0018-drm-amd-pm-Replace-all-non-returning-strlcpy-with-st.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0018-drm-i915-Move-abs_diff-to-math.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0018-x86-fbdev-Include-asm-fb.h-as-needed.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0019-accel-ivpu-Remove-reset-from-power-up-sequence.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0019-drm-bridge-panel-Add-a-device-link-between-drm-devic.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0019-drm-display-dp_mst-Replace-all-non-returning-strlcpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0019-drm-panel-edp-Add-AUO-B116XAB01.4-edp-panel-entry.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0020-accel-ivpu-Add-support-for-VPU_JOB_FLAGS_NULL_SUBMIS.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0020-drm-panel-s6d7aa0-remove-the-unneeded-variable-in-s6.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0020-drm-panel-simple-Add-support-for-Mitsubishi-AA084XE0.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0020-drm-rockchip-Replace-all-non-returning-strlcpy-with-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0021-accel-ivpu-Change-test_mode-module-param-to-bitmask.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0021-drm-mediatek-Replace-all-non-returning-strlcpy-with-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0021-drm-panel-Add-driver-for-Visionox-r66451-panel.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0021-drm-panel-JDI-LT070ME05000-drop-broken-link.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0022-accel-ivpu-40xx-Capture-D0i3-entry-host-and-device-t.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0022-drm-komeda-Convert-to-platform-remove-callback-retur.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0022-drm-panel-Add-driver-for-JDI-LPM102A188A.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0022-drm-sun4i-hdmi-Replace-all-non-returning-strlcpy-wit.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0023-accel-ivpu-Pass-D0i3-residency-time-to-the-VPU-firmw.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0023-drm-arm-hdlcd-Convert-to-platform-remove-callback-re.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0023-drm-i2c-tda998x-Replace-all-non-returning-strlcpy-wi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0024-accel-ivpu-Introduce-ivpu_ipc_send_receive_active.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0024-drm-arm-malidp-Convert-to-platform-remove-callback-r.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0024-drm-panfrost-Do-not-check-for-0-return-after-calling.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0024-mm-gup-remove-unused-vmas-parameter-from-get_user_pa.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0025-accel-ivpu-Add-support-for-delayed-D0i3-entry-messag.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0025-doc-uapi-Add-document-describing-dma-buf-semantics.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0025-drm-aspeed-Convert-to-platform-remove-callback-retur.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0026-drm-atmel-hlcdc-Convert-to-platform-remove-callback-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0026-drm-gma500-remove-duplicate-macro-definitions.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0026-drm-v3d-wait-for-all-jobs-to-finish-before-unregiste.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0027-drm-fsl-dcu-Convert-to-platform-remove-callback-retu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0027-drm-panfrost-Remove-incorrect-IS_ERR-check.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0027-fbdev-hitfb-Declare-hitfb_blank-as-static.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0028-drm-gma500-Remove-unused-declarations.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0028-drm-hisilicon-Convert-to-platform-remove-callback-re.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0028-fbdev-metronomefb-Add-MODULE_FIRMWARE-macro.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0029-drm-lima-Convert-to-platform-remove-callback-returni.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0029-drm-repaper-fix-Wvoid-pointer-to-enum-cast-warning.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0029-fbdev-broadsheetfb-Add-MODULE_FIRMWARE-macro.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0030-accel-ivpu-40xx-Allow-to-change-profiling-frequency.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0030-drm-logicvc-Convert-to-platform-remove-callback-retu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0030-drm-tests-Test-default-pitch-fallback.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0030-video-hdmi-Reorder-fields-in-struct-hdmi_avi_infofra.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0031-accel-ivpu-Assure-device-is-off-if-power-up-sequence.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0031-drm-mcde-Convert-to-platform-remove-callback-returni.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0031-drm-tests-Add-KUnit-tests-for-drm_fb_swab.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0031-fbdev-media-Use-GPIO-descriptors-for-VIA-GPIO.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0032-accel-ivpu-Stop-job_done_thread-on-suspend.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0032-drm-meson-Convert-to-platform-remove-callback-return.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0032-drm-tests-Add-KUnit-tests-for-drm_fb_clip_offset.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0032-fbdev-hitfb-Fix-integer-to-pointer-cast.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0033-accel-ivpu-Abort-pending-rx-ipc-on-reset.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0033-drm-mxsfb-Convert-to-platform-remove-callback-return.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0033-drm-tests-Add-KUnit-tests-for-drm_fb_build_fourcc_li.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0033-fbdev-hitfb-Use-NULL-for-pointers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0034-accel-ivpu-Print-CMDQ-errors-after-consumer-timeout.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0034-drm-panel-Convert-to-platform-remove-callback-return.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0034-drm-tests-Add-multi-plane-support-to-conversion_buf_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0034-fbdev-sh_mobile_lcdcfb-Fix-ARGB32-overlay-format-typ.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0035-accel-ivpu-Make-DMA-allocations-for-MMU600-write-com.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0035-drm-panfrost-Convert-to-platform-remove-callback-ret.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0035-drm-tests-Add-KUnit-tests-for-drm_fb_memcpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0035-fbdev-sh7760fb-Fix-Wimplicit-fallthrough-warnings.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0036-accel-ivpu-Simplify-MMU-SYNC-command.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0036-drm-rockchip-Convert-to-platform-remove-callback-ret.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0036-fbdev-sbus-Build-sbuslib.o-if-CONFIG_FB_SBUS-has-bee.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0037-accel-ivpu-Rename-VPU-to-NPU-in-product-strings.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0037-drm-sti-Convert-to-platform-remove-callback-returnin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0037-drm-vkms-Use-drmm_crtc_init_with_planes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0037-fbdev-sbus-Forward-declare-all-necessary-structures-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0038-drm-sched-Add-drm_sched_wqueue_-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0038-drm-stm-Convert-to-platform-remove-callback-returnin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0038-drm-vkms-Use-drmm_mode_config_init.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0038-fbdev-sbus-Add-initializer-macros-and-Kconfig-tokens.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0039-drm-bridge-fsl-ldb-Add-i.MX6SX-support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0039-drm-sched-Convert-drm-scheduler-to-use-a-work-queue-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0039-drm-sun4i-Convert-to-platform-remove-callback-return.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0039-fbdev-bw2-Use-initializer-macro-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0040-drm-sched-Split-free_job-into-own-work-item.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0040-drm-tidss-Convert-to-platform-remove-callback-return.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0040-fbdev-cg14-Use-initializer-macro-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0041-drm-gma500-Use-drm_aperture_remove_conflicting_pci_f.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0041-drm-sched-Add-drm_sched_start_timeout_unlocked-helpe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0041-drm-tiny-Convert-to-platform-remove-callback-returni.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0041-fbdev-cg3-Use-initializer-macro-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0042-drm-sched-Add-a-helper-to-queue-TDR-immediately.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0042-drm-tve200-Convert-to-platform-remove-callback-retur.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0042-fbdev-cg6-Use-initializer-macro-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0042-video-aperture-use-generic-code-to-figure-out-the-vg.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0043-drm-aperture-Remove-primary-argument.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0043-drm-v3d-Convert-to-platform-remove-callback-returnin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0043-fbdev-ffb-Use-initializer-macro-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0043-fbdev-simplefb-Support-memory-region-property.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0044-drm-vc4-Convert-to-platform-remove-callback-returnin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0044-fbdev-leo-Use-initializer-macro-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0044-fbdev-simplefb-Add-support-for-generic-power-domains.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0044-video-aperture-Only-kick-vgacon-when-the-pdev-is-dec.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0045-drm-v3d-update-UAPI-to-match-user-space-for-V3D-7.x.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0045-drm-xlnx-zynqmp_dpsub-Convert-to-platform-remove-cal.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0045-fbdev-p9100-Use-initializer-macro-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0045-video-aperture-Move-vga-handling-to-pci-function.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0046-drm-rcar-du-Convert-to-platform-remove-callback-retu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0046-drm-v3d-fix-up-register-addresses-for-V3D-7.x.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0046-fbdev-tcx-Use-initializer-macro-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0046-video-aperture-Drop-primary-argument.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0047-drm-debugfs-drop-debugfs_init-for-the-render-and-acc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0047-drm-tilcdc-Convert-to-platform-remove-callback-retur.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0047-drm-v3d-add-brcm-2712-v3d-as-a-compatible-V3D-device.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0047-video-aperture-Only-remove-sysfb-on-the-default-vga-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0048-accel-qaic-Quiet-array-bounds-check-on-DMA-abort-mes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0048-drm-debugfs-disallow-debugfs-access-when-device-isn-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0048-drm-omap-Convert-to-platform-remove-callback-returni.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0048-video-aperture-Provide-a-VGA-helper-for-gma500-and-i.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0049-accel-qaic-Support-for-0-resize-slice-execution-in-B.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0049-dma-buf-dma-resv.c-fix-a-typo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0049-drm-ssd130x-Make-default-width-and-height-to-be-cont.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0050-drm-debugfs-rework-debugfs-directory-creation-v5.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0050-drm-panel-nt36523-Add-DCS-backlight-support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0050-drm-sched-Rename-drm_sched_get_cleanup_job-to-be-mor.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0050-drm-ssd130x-Set-the-page-height-value-in-the-device-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0051-drm-debugfs-remove-dev-debugfs_list-and-debugfs_mute.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0051-drm-panel-nt36523-Get-orientation-from-OF.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0051-drm-sched-Move-free-worker-re-queuing-out-of-the-if-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0051-drm-ssd130x-Don-t-allocate-buffers-on-each-plane-upd.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0052-drm-debugfs-rework-drm_debugfs_create_files-implemen.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0052-drm-panel-nt36523-Add-Lenovo-J606F-panel.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0052-drm-sched-Rename-drm_sched_free_job_queue-to-be-more.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0052-drm-ssd130x-Remove-hardcoded-bits-per-pixel-in-ssd13.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0053-accel-ivpu-Move-set-autosuspend-delay-to-HW-specific.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0053-drm-nouveau-debugfs-Move-an-expression-into-a-functi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0053-drm-sched-Rename-drm_sched_run_job_queue_if_ready-an.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0053-drm-virtio-Remove-unused-function-declarations.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0054-accel-ivpu-Remove-duplicated-error-messages.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0054-drm-ingenic-Kconfig-select-REGMAP-and-REGMAP_MMIO.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0054-drm-nouveau-debugfs-Move-a-variable-assignment-behin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0054-drm-sched-Drop-suffix-from-drm_sched_wakeup_if_can_q.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0054-fbdev-smscufx-Use-fb_ops-helpers-for-deferred-I-O.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0055-accel-ivpu-Make-ivpu_pm_init-void.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0055-drm-Do-not-round-to-megabytes-for-greater-than-1MiB-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0055-drm-nouveau-debugfs-Use-seq_putc-in-nouveau_debugfs_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0055-drm-tidss-Add-support-for-AM625-DSS.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0055-fbdev-udlfb-Use-fb_ops-helpers-for-deferred-I-O.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0056-accel-ivpu-Add-information-about-context-on-failure.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0056-drm-msm-Initialize-mmap-offset-after-constructing-th.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0056-drm-nouveau-debugfs-Replace-five-seq_printf-calls-by.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0056-drm-v3d-Implement-show_fdinfo-callback-for-GPU-usage.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0056-fbdev-Add-Kconfig-macro-FB_IOMEM_HELPERS_DEFERRED.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0057-accel-ivpu-Initialize-context-with-SSID-1.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0057-drm-Remove-struct-drm_driver.gem_prime_mmap.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0057-drm-nouveau-bios-power_budget-Move-an-expression-int.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0057-drm-v3d-Expose-the-total-GPU-usage-stats-on-sysfs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0057-fbdev-hyperv_fb-Use-fb_ops-helpers-for-deferred-I-O.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0058-accel-ivpu-Move-ivpu_fw_load-to-ivpu_fw_init.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0058-drm-amdgpu-Remove-struct-drm_driver.gem_prime_mmap.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0058-drm-bridge-it66121-Extend-match-support-for-OF-table.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0058-drm-nouveau-clk-Move-a-variable-assignment-behind-a-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0059-accel-ivpu-37xx-Change-register-rename-leftovers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0059-accel-ivpu-Fix-compilation-with-CONFIG_PM-n.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0059-drm-nouveau-pci-Move-a-variable-assignment-behind-co.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0059-drm-vkms-Add-kernel-doc-to-the-function-vkms_compose.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0060-accel-ivpu-37xx-White-space-cleanup.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0060-drm-nouveau-pci-Move-an-expression-into-a-function-c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0060-drm-sched-Don-t-disturb-the-entity-when-in-RR-mode-s.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0060-drm-vkms-Fix-all-kernel-doc-warnings-of-the-vkms_com.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0061-accel-ivpu-Allocate-vpu_addr-in-gem-open-callback.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0061-accel-ivpu-Move-MMU-register-definitions-to-ivpu_mmu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0061-drm-bridge-lt9611uxc-Add-MODULE_FIRMWARE-macro.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0061-drm-nouveau-therm-Move-an-assignment-statement-behin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0062-accel-ivpu-Fix-locking-in-ivpu_bo_remove_all_bos_fro.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0062-accel-ivpu-Print-information-about-used-workarounds.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0062-dma-buf-heaps-Don-t-assert-held-reservation-lock-for.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0063-accel-ivpu-Remove-support-for-uncached-buffers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0063-drm-gem-Check-for-valid-formats.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0063-udmabuf-Don-t-assert-held-reservation-lock-for-dma-b.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0064-accel-ivpu-Use-GEM-shmem-helper-for-all-buffers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0064-drm-Don-t-assert-held-reservation-lock-for-dma-buf-m.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0064-drm-bridge-analogix-anx78xx-Drop-ID-table.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0064-video-Remove-trailing-whitespaces.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0065-dma-buf-Change-locking-policy-for-mmap.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0065-drm-bridge-Drop-conditionals-around-of_node-pointers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0065-drm-todo-Add-entry-to-clean-up-former-seltests-suite.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0065-video-Move-HP-PARISC-STI-core-code-to-shared-locatio.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0066-arch-parisc-Implement-fb_is_primary_device-under-arc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0066-drm-bridge-Drop-CONFIG_OF-conditionals-around-of_nod.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0066-drm-edid-split-out-drm_eld.h-from-drm_edid.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0066-drm-shmem-helper-Switch-to-reservation-lock.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0067-drm-bridge-tc358764-Use-BIT-macro-for-actual-bits.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0067-drm-bridge-ti-sn65dsi86-Implement-wait_hpd_asserted.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0067-drm-connector-document-DRM_MODE_COLORIMETRY_COUNT.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0067-drm-eld-replace-uint8_t-with-u8.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0068-drm-armada-Include-linux-of.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0068-drm-bridge-it66121-Simplify-probe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0068-drm-bridge-tc358762-Split-register-programming-from-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0068-drm-doc-rfc-No-STAGING-out-of-drivers-staging.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0068-drm-edid-include-drm_eld.h-only-where-required.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0069-drm-armada-Hide-fbdev-support-behind-config-option.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0069-drm-bridge-tc358762-Switch-to-atomic-ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0069-drm-doc-rfc-Mark-Dev_coredump-as-completed.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0069-drm-edid-use-a-temp-variable-for-sads-to-drop-one-le.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0070-drm-armada-Initialize-fbdev-DRM-client.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0070-drm-bridge-tc358762-Instruct-DSI-host-to-generate-HS.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0070-drm-doc-rfc-Mark-DRM_VM_BIND-as-complete.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0070-drm-edid-add-helpers-to-get-set-struct-cea_sad-from-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0071-drm-armada-Implement-fbdev-emulation-as-in-kernel-cl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0071-drm-bridge-tc358762-Guess-the-meaning-of-LCDCTRL-bit.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0071-drm-doc-rfc-Mark-GPU-VA-as-complete.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0071-drm-eld-add-helpers-to-modify-the-SADs-of-an-ELD.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0072-drm-bridge-tc358762-Handle-HS-VS-polarity.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0072-drm-debugfs-Add-inline-to-drm_debugfs_dev_init-to-su.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0072-drm-panel-simple-Add-InnoLux-G070ACE-L01.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0072-drm-sched-Qualify-drm_sched_wakeup-by-drm_sched_enti.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0073-drm-display-Add-missing-OLED-Vesa-brightnesses-defin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0073-drm-i2c-Switch-i2c-drivers-back-to-use-.probe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0073-drm-tests-Zero-initialize-fourccs_out.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0074-drm-bridge-anx7625-Drop-of_gpio-header.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0074-drm-mst-delete-unnecessary-case-in-drm_dp_add_payloa.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0075-drm-mgag200-set-variable-mgag200_modeset-storage-cla.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0075-drm-mst-Refactor-the-flow-for-payload-allocation-rem.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0075-drm-panel-edp-drm-panel-edp-Add-several-generic-edp-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0075-drm-sti-Drop-of_gpio-header.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0076-drm-fix-code-style-for-embedded-structs-in-hdr_metad.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0076-drm-imx-ipuv3-Convert-to-platform-remove-callback-re.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0076-drm-sched-Define-pr_fmt-for-DRM-using-pr_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0076-drm-tve200-Use-devm_platform_ioremap_resource.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0077-drm-ingenic-Convert-to-platform-remove-callback-retu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0077-drm-sched-implement-dynamic-job-flow-control.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0077-drm-scheduler-properly-forward-fence-errors.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0077-drm-sysfs-rename-drm_sysfs_connector_status_event.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0078-drm-bridge_connector-use-drm_kms_helper_connector_ho.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0078-drm-msm-Convert-to-platform-remove-callback-returnin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0078-drm-scheduler-add-drm_sched_entity_error-and-use-rcu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0079-drm-atomic-log-drm_atomic_replace_property_blob_from.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0079-drm-panfrost-Perform-hard-reset-to-recover-GPU-if-so.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0079-drm-shmobile-Convert-to-platform-remove-callback-ret.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0079-drm-tests-Add-test-cases-for-drm_rect_intersect.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0080-drm-atomic-drop-extra-bracket-from-log-messages.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0080-drm-panfrost-Tighten-polling-for-soft-reset-and-powe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0080-drm-ssd130x-Print-the-PWM-s-label-instead-of-its-num.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0080-drm-tests-Add-test-cases-for-drm_rect_calc_hscale.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0081-drm-atomic-log-when-getting-setting-unknown-properti.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0081-drm-panfrost-Implement-ability-to-turn-on-off-GPU-cl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0081-drm-tests-Add-test-cases-for-drm_rect_calc_vscale.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0082-drm-atomic-log-when-CRTC_ID-prop-value-is-invalid.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0082-drm-panfrost-Set-clocks-on-off-during-system-sleep-o.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0082-drm-ssd130x-Use-bool-for-ssd130x_deviceinfo-flags.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0082-drm-tests-Add-test-cases-for-drm_rect_rotate.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0083-drm-atomic-log-on-attempt-to-set-legacy-DPMS-propert.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0083-drm-panfrost-Implement-ability-to-turn-on-off-regula.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0083-drm-test-Add-test-cases-for-drm_rect_rotate_inv.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0083-fbdev-au1200fb-Do-not-display-boot-up-logo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0084-drm-atomic-log-when-page-flip-is-requested-without-C.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0084-drm-panfrost-Set-regulators-on-off-during-system-sle.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0084-fbdev-mmp-mmpfb-Do-not-display-boot-up-logo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0085-drm-atomic-log-errors-in-drm_mode_atomic_ioctl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0085-drm-vc4-Switch-to-container_of_const.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0085-drm-virtio-use-uint64_t-more-in-virtio_gpu_context_i.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0085-fbdev-core-Fix-style-of-code-for-boot-up-logo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0086-drm-kms-log-when-querying-an-object-not-included-in-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0086-drm-uapi-add-explicit-virtgpu-context-debug-name.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0086-drm-vc4-hdmi-Update-all-the-planes-if-the-TV-margins.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0086-fbdev-core-Unexport-logo-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0087-drm-bridge-ps8640-Drop-the-ability-of-ps8640-to-fetc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0087-drm-gpuvm-convert-WARN-to-drm_WARN-variants.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0087-drm-vc4-hdmi-Add-Broadcast-RGB-property-to-allow-ove.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0087-fbdev-core-Move-logo-functions-into-separate-source-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0088-drm-gpuvm-don-t-always-WARN-in-drm_gpuvm_check_overf.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0088-drm-vc4-hdmi-Rename-full-range-helper.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0088-drm-vkms-Reduce-critical-section.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0088-fbdev-core-Remove-empty-internal-helpers-from-fb_log.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0089-drm-gpuvm-export-drm_gpuvm_range_valid.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0089-drm-vc4-hdmi-Swap-CSC-matrix-channels-for-YUV444.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0089-drm-vkms-Enable-ARGB8888-support-for-writeback.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0089-fbdev-core-Clean-up-include-statements-in-fbmem.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0090-drm-buddy-Improve-contiguous-memory-allocation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0090-drm-nouveau-make-use-of-drm_gpuvm_range_valid.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0090-drm-vc4-hdmi-Rework-the-CSC-matrices-organization.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0090-drm-vkms-Isolate-writeback-pixel-conversion-function.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0091-drm-amdgpu-Move-the-size-computations-to-drm-buddy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0091-drm-gpuvm-add-common-dma-resv-per-struct-drm_gpuvm.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0091-drm-vc4-hdmi-Add-a-function-to-retrieve-the-CSC-matr.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0092-drm-i915-Move-the-size-computations-to-drm-buddy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0092-drm-nouveau-make-use-of-the-GPUVM-s-shared-dma-resv.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0092-drm-vc4-hdmi-Add-BT.601-Support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0093-drm-Clear-fd-handle-callbacks-in-struct-drm_driver.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071 bsc#1212533 bsc#1212533).
- Update
  patches.suse/0093-drm-gpuvm-add-drm_gpuvm_flags-to-drm_gpuvm.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0093-drm-panel-Don-t-store-check-prepared-enabled-for-sim.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0093-drm-vc4-hdmi-Add-BT.2020-Support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0094-drm-nouveau-separately-allocate-struct-nouveau_uvmm.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0094-drm-panel-s6e63m0-Don-t-store-check-prepared-enabled.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0095-drm-bridge-dw-hdmi-change-YUV420-selection-logic-at-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0095-drm-gpuvm-reference-count-drm_gpuvm-structures.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0095-drm-panel-otm8009a-Don-t-double-check-prepared-enabl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0095-drm-vkms-allow-full-alpha-blending-on-all-planes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0096-drm-atomic-helper-drm_atomic_helper_shutdown-NULL-sh.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0096-drm-bridge-dw-hdmi-truly-enforce-420-only-formats-wh.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0096-drm-gpuvm-add-an-abstraction-for-a-VM-BO-combination.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0096-drm-vkms-drop-full-alpha-blending-TODO.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0097-drm-bridge-dw-hdmi-remove-dead-code-and-fix-indentat.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0097-drm-doc-rfc-Introduce-the-merge-plan-for-the-Xe-driv.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0097-drm-gpuvm-track-lock-validate-external-evicted-objec.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0097-drm-imx-ipuv3-Call-drm_atomic_helper_shutdown-at-shu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0098-Revert-drm-sched-Define-pr_fmt-for-DRM-using-pr_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0098-drm-ingenic-Call-drm_atomic_helper_shutdown-at-shutd.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0098-drm-panel-st7703-Rename-CMD_UNKNOWN_C6-to-CMD_SETECO.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0099-backlight-bd6107-Rename-struct-bd6107_platform_data..patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0099-drm-amd-display-Fix-Wuninitialized-in-dm_helpers_dp_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0099-drm-format-helper-Cache-buffers-with-struct-drm_form.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0099-drm-panel-st7703-Add-Anbernic-RG353V-V2-Panel-Suppor.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0100-drm-atomic-helper-Add-format-conversion-state-to-sha.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0100-drm-debugfs-Fix-drm_debugfs_remove_files-stub.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0100-drm-meson-set-variables-meson_hdmi_-storage-class-sp.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0101-backlight-gpio_backlight-Rename-field-fbdev-to-dev.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0101-drm-format-helper-Pass-format-conversion-state-to-he.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0101-drm-ssd130x-Store-the-HW-buffer-in-the-driver-privat.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0101-drm-uapi-Document-CTM-matrix-better.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0102-drm-ofdrm-Preallocate-format-conversion-buffer-in-at.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0103-backlight-lv5207lp-Rename-struct-lv5207lp_platform_d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0103-drm-komeda-add-NV12-format-to-support-writeback-laye.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0103-drm-simpledrm-Preallocate-format-conversion-buffer-i.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0103-drm-sysfs-Expose-DRM-connector-id-in-each-connector-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0104-drm-nouveau-nvif-refactor-deprecated-strncpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0104-drm-ssd130x-Preallocate-format-conversion-buffer-in-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0104-drm-sysfs-Link-DRM-connectors-to-corresponding-Type-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0104-fbdev-atyfb-Reorder-backlight-and-framebuffer-init-c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0105-drm-Remove-struct-drm_flip_task-from-DRM-interfaces.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0105-drm-nouveau-core-refactor-deprecated-strncpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0105-drm-sti-sti_hdmi-convert-to-using-is_hdmi-from-displ.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0105-fbdev-atyfb-Use-hardware-device-as-backlight-parent.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0106-drm-Fix-flip-task-docs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0106-drm-nouveau-pm-refactor-deprecated-strncpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0106-drm-rockchip-cdn-dp-call-drm_connector_update_edid_p.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0106-fbdev-aty128fb-Reorder-backlight-and-framebuffer-ini.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0107-drm-bridge-dw-hdmi-cec-Add-arbitration-lost-event.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0107-drm-scheduler-mark-jobs-without-fence-as-canceled.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0107-drm-virtio-Fix-return-value-for-VIRTGPU_CONTEXT_PARA.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0107-fbdev-aty128fb-Use-hardware-device-as-backlight-pare.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0108-drm-dp_mst-Fix-NULL-dereference-during-payload-addit.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0108-drm-test-rearrange-test-entries-in-Kconfig-and-Makef.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0108-drm-udl-delete-dead-code.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0108-fbdev-broadsheetfb-Call-device_remove_file-with-hard.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0109-drm-client-Do-not-acquire-module-reference.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0109-drm-dp_mst-Sanitize-error-return-during-payload-addi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0109-fbdev-ep93xx-fb-Alloc-DMA-memory-from-hardware-devic.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0110-accel-ivpu-Rename-cons-rx_msg_lock.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0110-drm-dp_mst-Tune-down-error-message-during-payload-ad.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0110-fbdev-ep93xx-fb-Output-messages-with-fb_info-and-fb_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0111-accel-ivpu-Do-not-use-irqsave-in-ivpu_ipc_dispatch.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0111-drm-nouveau-devinit-tu102-remove-attempt-at-loading-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0112-accel-ivpu-Do-not-use-cons-aborted-for-job_done_thre.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0112-drm-nouveau-imem-support-allocations-not-preserved-a.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0112-fbdev-fsl-diu-fb-Output-messages-with-fb_-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0113-accel-ivpu-Use-dedicated-work-for-job-timeout-detect.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0113-accel-qaic-Register-for-PCI-driver-at-the-beginning-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0113-drm-nouveau-gr-gf100-lose-contents-of-global-ctxbufs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0113-fbdev-mb862xxfb-Output-messages-with-fb_dbg.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0114-accel-ivpu-Use-threaded-IRQ-to-handle-JOB-done-messa.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0114-accel-qaic-Use-devm_drm_dev_alloc-instead-of-drm_dev.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0114-drm-nouveau-mmu-gp100-always-invalidate-TLBs-at-CACH.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0114-fbdev-metronomefb-Use-hardware-device-for-dev_err.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0115-accel-qaic-Update-MAX_ORDER-use-to-be-inclusive.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0115-drm-nouveau-kms-nv50-fix-mst-payload-alloc-fail-cras.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0115-fbdev-nvidiafb-Reorder-backlight-and-framebuffer-ini.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0116-drm-nouveau-disp-rearrange-output-methods.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0116-drm-print-Handle-NULL-drm-device-in-__drm_printk.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0116-fbdev-nvidiafb-Use-hardware-device-as-backlight-pare.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0117-drm-nouveau-disp-add-output-detect-method.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0117-fbdev-pxa168fb-Do-not-assign-to-struct-fb_info.dev.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0118-drm-nouveau-disp-add-output-method-to-fetch-edid.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0118-drm-panel-nv3051d-Add-Powkiddy-RK2023-Panel-Support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0118-fbdev-radeonfb-Reorder-backlight-and-framebuffer-cle.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0119-drm-nouveau-disp-rename-internal-output-acquire-rele.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0119-drm-panel-elida-kd35t133-trival-update-panel-size-fr.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0119-fbdev-radeonfb-Use-hardware-device-as-backlight-pare.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0120-drm-bridge-tc358768-remove-unused-variable.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0120-drm-nouveau-kms-Add-INHERIT-ioctl-to-nvkm-nvif-for-r.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0120-fbdev-rivafb-Reorder-backlight-and-framebuffer-init-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0121-drm-bridge-lt9211-Do-not-generate-HFP-HBP-HSA-and-EO.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0121-drm-nouveau-disp-shuffle-to-make-upcoming-diffs-pret.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0121-drm-panel-elida-kd35t133-drop-drm_connector_set_orie.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0121-fbdev-rivafb-Use-hardware-device-as-backlight-parent.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0122-drm-bridge-lt9611-Do-not-generate-HFP-HBP-HSA-and-EO.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0122-drm-nouveau-disp-add-acquire_dac.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0122-drm-panel-elida-kd35t133-Drop-shutdown-logic.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0122-fbdev-sh7760fb-Use-fb_dbg-in-sh7760fb_get_color_info.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0123-drm-nouveau-disp-add-acquire_sor-pior.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0123-drm-panel-elida-kd35t133-Drop-prepare-unprepare-logi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0123-fbdev-sh7760fb-Output-messages-with-fb_dbg.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0124-dma-buf-Replace-strlcpy-with-strscpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0124-drm-nouveau-disp-update-SOR-routing-immediately-on-a.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0124-drm-vkms-add-rotate-0-and-reflect-x-property.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0124-fbdev-sh7760fb-Alloc-DMA-memory-from-hardware-device.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0125-drm-nouveau-kms-nv50-pull-some-common-init-out-of-OR.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0125-drm-rockchip-vop2-Add-NV20-and-NV30-support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0125-drm-vkms-add-reflect-y-and-rotate-180-property.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0125-fbdev-sh7760fb-Use-hardware-device-with-dev_-output-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0126-drm-nouveau-kms-nv50-remove-nv_encoder.audio.connect.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0126-drm-rockchip-rk3066_hdmi-Remove-useless-mode_fixup.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0126-drm-vkms-add-rotate-90-property.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0126-fbdev-sm501fb-Output-message-with-fb_err.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0127-drm-nouveau-kms-nv50-keep-output-state-around-until-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0127-drm-rockchip-rk3066_hdmi-Switch-encoder-hooks-to-ato.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0127-drm-vkms-add-rotate-270-property.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0127-fbdev-smscufx-Detect-registered-fb_info-from-refcoun.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0128-drm-nouveau-kms-nv50-move-audio-enable-post-modeset.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0128-drm-vkms-drop-Rotation-TODO.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0128-fbdev-tdfxfb-Set-i2c-adapter-parent-to-hardware-devi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0129-drm-nouveau-disp-add-output-hdmi-config-method.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0129-fbdev-arcfb-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0129-fbdev-core-Pass-Linux-device-to-pm_vt_switch_-functi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0130-drm-arcpgu-Convert-to-platform-remove-callback-retur.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0130-drm-nouveau-disp-move-hdmi-disable-out-of-release.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0130-fbdev-au1200fb-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0130-fbdev-core-Move-framebuffer-and-backlight-helpers-in.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0131-drm-armada-Convert-to-platform-remove-callback-retur.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0131-drm-nouveau-disp-release-outputs-post-modeset.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0131-fbdev-broadsheetfb-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0131-fbdev-core-Add-fb_device_-create-destroy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0132-drm-bridge-cdns-mhdp8546-Improve-error-reporting-in-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0132-drm-nouveau-disp-remove-SOR-routing-updates-from-sup.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0132-fbdev-core-Move-procfs-code-to-separate-file.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0132-fbdev-hecubafb-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0133-drm-bridge-cdns-mhdp8546-Convert-to-platform-remove-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0133-drm-nouveau-disp-add-output-backlight-control-method.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0133-fbdev-core-Move-file-I-O-code-into-separate-file.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0133-fbdev-metronomefb-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0134-drm-bridge-tpd12s015-Convert-to-platform-remove-call.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0134-drm-nouveau-disp-add-output-lvds-config-method.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0134-fbdev-core-Rework-fb-init-code.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0134-fbdev-ps3fb-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0135-drm-etnaviv-Convert-to-platform-remove-callback-retu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0135-drm-nouveau-disp-add-hdmi-audio-hal-function.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0135-fbdev-Make-support-for-userspace-interfaces-configur.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0135-fbdev-smscufx-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0136-drm-imx-dcss-Convert-to-platform-remove-callback-ret.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0136-drm-nouveau-disp-move-dp-aux-pwr-method-to-HAL.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0136-drm-ttm-Don-t-shadow-the-operation-context.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0136-fbdev-udlfb-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0137-drm-imx-lcdc-Convert-to-platform-remove-callback-ret.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0137-drm-nouveau-disp-add-dp-aux-xfer-method.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0137-fbdev-vfb-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0138-drm-ast-Remove-vga2_clone-field.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0138-drm-kmb-Convert-to-platform-remove-callback-returnin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0138-drm-nouveau-disp-add-dp-rates-method.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0138-fbdev-xen-fbfront-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0139-drm-ast-Implement-register-helpers-in-ast_drv.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0139-drm-mediatek-Convert-to-platform-remove-callback-ret.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0139-drm-nouveau-kms-nv50-split-DP-disable-enable-into-tw.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0139-fbdev-Return-number-of-bytes-read-or-written.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0140-drm-ast-Remove-dead-else-branch-in-POST-code.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0140-drm-meson-Convert-to-platform-remove-callback-return.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0140-drm-nouveau-kms-nv50-flush-mst-disables-together.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0140-fbdev-Use-screen_buffer-in-fb_sys_-read-write.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0141-drm-ast-Remove-device-POSTing-and-config-from-chip-d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0141-drm-nouveau-Convert-to-platform-remove-callback-retu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0141-drm-nouveau-kms-nv50-fixup-sink-D3-before-tearing-do.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0141-fbdev-Don-t-re-validate-info-state-in-fb_ops-impleme.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0142-drm-ast-Set-PCI-config-before-accessing-I-O-register.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0142-drm-nouveau-disp-add-dp-train-method.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0142-drm-sprd-Convert-to-platform-remove-callback-returni.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0142-fbdev-Validate-info-screen_-base-buffer-in-fb_ops-im.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0143-drm-ast-Enable-and-unlock-device-access-early-during.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0143-drm-nouveau-disp-move-link-training-out-of-superviso.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0143-fbdev-Move-I-O-read-and-write-code-into-helper-funct.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0144-drm-ast-Set-up-release-action-right-after-enabling-M.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0144-drm-edid-firmware-drop-drm_kms_helper.edid_firmware-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0144-drm-fb-helper-Use-fb_-cfb-sys-_-read-write.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0144-drm-nouveau-disp-add-dp-sst-config-method.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0145-Documentation-vkms-clarify-devres-managed-reference-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0145-drm-ast-Distinguish-among-chip-generations.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0145-drm-nouveau-disp-add-dp-mst-id-get-put-methods.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0145-fbdev-simplefb-Suppress-error-on-missing-power-domai.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0146-drm-ast-Detect-AST-1300-model.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0146-drm-connector-document-enum-drm_connector_tv_mode-DR.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0146-drm-nouveau-disp-move-outp-conn-construction-to-chip.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0146-drm-nouveau-fifo-Remove-duplicated-include-in-chan.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0147-drm-ast-Detect-AST-1400-model.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0147-drm-nouveau-disp-move-outp-init-fini-paths-to-chipse.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0147-drm-rockchip-rk3066_hdmi-include-drm-drm_atomic.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0147-drm-sun4i-rename-sun4i_dotclock-to-sun4i_tcon_dclk.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0148-drm-ast-Detect-AST-2510-model.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0148-drm-gpuvm-Helper-to-get-range-of-unmap-from-a-remap-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0148-drm-nouveau-disp-nv50-skip-DCB_OUTPUT_TV.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0148-drm-sun4i-calculate-proper-DCLK-rate-for-DSI.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0149-drm-ast-Move-widescreen-and-tx-chip-detection-into-s.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0149-drm-nouveau-kms-nv50-create-heads-based-on-nvkm-head.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0149-dt-bindings-gpu-Add-Imagination-Technologies-PowerVR.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0150-drm-ast-Merge-config-and-chip-detection.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0150-drm-imagination-uapi-Add-PowerVR-driver-UAPI.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0150-drm-nouveau-kms-nv50-create-heads-after-outps-conns.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0151-drm-edid-make-read-only-const-array-static.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0151-drm-imagination-Add-skeleton-PowerVR-driver.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0151-drm-nouveau-kms-nv50-name-aux-channels-after-their-c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0151-drm-panel-sharp-ls043t1le01-drop-dummy-functions-and.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0152-drm-imagination-Get-GPU-resources.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0152-drm-nouveau-kms-nv50-create-connectors-based-on-nvkm.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0152-drm-panel-panel-simple-Add-BOE-EV121WXM-N10-1850-pan.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0152-drm-tests-Fix-swapped-drm_framebuffer-tests-paramete.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0153-drivers-firmware-Move-sysfb_init-from-device_initcal.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0153-drm-edid-Add-quirk-for-OSVR-HDK-2.0.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0153-drm-imagination-Add-GPU-register-headers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0153-drm-nouveau-kms-nv50-create-outputs-based-on-nvkm-in.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0154-drm-bridge-samsung-dsim-Drain-command-transfer-FIFO-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0154-drm-imagination-Add-firmware-and-MMU-related-headers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0154-drm-nouveau-kms-nv50-disable-dcb-parsing.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0154-drm-ssd130x-Fix-include-guard-name.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0155-drm-bridge-analogix-anx78xx-Add-missing-definition.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0155-drm-gud-use-vmalloc_array-and-vcalloc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0155-drm-imagination-Add-FWIF-headers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0155-drm-panel-boe-tv101wum-nl6-Remove-extra-delay.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0156-drm-drm_gem.c-Remove-surplus-else-after-return.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0156-drm-imagination-Add-GPU-ID-parsing-and-firmware-load.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0156-drm-panel-boe-tv101wum-nl6-Fine-tune-the-panel-power.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0156-drm-tegra-rgb-Parameterize-V-and-H-sync-polarities.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0157-drm-Add-kms-driver-for-loongson-display-controller.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0157-drm-imagination-Add-GEM-and-VM-related-code.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0158-drm-bridge-tc358768-Default-to-positive-h-v-syncs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0158-drm-imagination-Implement-power-management.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0158-drm-nouveau-nvkm-fini-object-children-in-reverse-ord.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0159-drm-imagination-Implement-firmware-infrastructure-an.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0159-drm-nouveau-nvkm-punt-spurious-irq-messages-to-debug.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0159-gpu-drm-bridge-No-need-to-set-device_driver-owner.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0160-drm-bridge-tc358768-Cleanup-PLL-calculations.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0160-drm-bridge-tc358768-remove-unneeded-semicolon.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0160-drm-imagination-Implement-MIPS-firmware-processor-an.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0160-drm-nouveau-fb-gp102-ga100-switch-to-simpler-vram-si.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0161-accel-ivpu-Initial-debugfs-support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0161-drm-imagination-Implement-free-list-and-HWRT-create-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0161-drm-nouveau-fb-ga102-construct-vidmem-heap-via-new-g.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0161-drm-panel-Modify-innolux-hj110iz-panel-initial-code.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0162-accel-ivpu-Add-firmware-tracing-support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0162-drm-drm_atomic_helper.c-fix-a-typo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0162-drm-imagination-Implement-context-creation-destructi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0162-drm-nouveau-fifo-remove-left-over-references-to-nvkm.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0163-accel-ivpu-Add-debugfs-files-for-testing-device-rese.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0163-drm-imagination-Implement-job-submission-and-schedul.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0163-drm-nouveau-fifo-return-ERR_PTR-from-nvkm_runl_new.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0163-drm-ttm-let-struct-ttm_device_funcs-be-placed-in-rod.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0164-accel-ivpu-Print-firmware-name-and-version.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0164-drm-imagination-Add-firmware-trace-header.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0164-drm-nouveau-fifo-ga100-remove-individual-runlists-ra.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0165-accel-ivpu-Add-fw_name-file-to-debugfs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0165-drm-imagination-Add-firmware-trace-to-debugfs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0165-drm-nouveau-fifo-ga100-add-per-runlist-nonstall-intr.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0165-fbdev-hitfb-Cast-I-O-offset-to-address.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0166-drm-imagination-Add-driver-documentation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0166-drm-nouveau-nvif-fix-potential-double-free.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0166-fbdev-matrox-Remove-trailing-whitespaces.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0167-drm-bridge-tc358768-Attempt-to-fix-DSI-horizontal-ti.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0167-drm-nouveau-kms-don-t-call-drm_dp_cec_set_edid-on-TM.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0167-ipu-v3-Include-linux-io.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0168-drm-i915-display-Use-intel_bo_to_drm_bo-instead-of-o.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0168-drm-nouveau-disp-drop-unused-argument-in-nv50_dp_mod.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0168-drm-sched-Rename-to-drm_sched_can_queue.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0169-drm-bridge-panel-Fix-device-link-for-DRM_BRIDGE_ATTA.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0169-drm-i915-drop-gt-intel_gt.h-include-from-skl_univers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0169-drm-sched-Rename-to-drm_sched_wakeup_if_can_queue.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0169-fbdev-sm712fb-Do-not-include-linux-screen_info.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0170-drm-armada-Call-drm_atomic_helper_shutdown-at-shutdo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0170-drm-i915-aux-add-separate-register-macros-and-functi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0170-drm-panel-Add-Samsung-S6D7AA0-panel-controller-drive.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0170-sysfb-Do-not-include-linux-screen_info.h-from-sysfb-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0171-drm-Call-drm_atomic_helper_shutdown-at-shutdown-time.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0171-drm-bridge-samsung-dsim-Implement-support-for-clock-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0171-drm-i915-aux-rename-dev_priv-to-i915.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0171-fbdev-broadsheetfb-Select-FB_SYS_HELPERS_DEFERRED.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0172-drm-i915-stop-including-i915_utils.h-from-intel_runt.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0172-drm-vc4-Call-drm_atomic_helper_shutdown-at-shutdown-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0172-fbdev-broadsheetfb-Generate-deferred-I-O-ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0173-drm-i915-display-debugfs-entry-to-list-display-capab.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0173-drm-nouveau-constify-pointers-to-hwmon_channel_info.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0173-drm-ssd130x-Call-drm_atomic_helper_shutdown-at-remov.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0173-fbdev-hecubafb-Select-FB_SYS_HELPERS_DEFERRED.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0174-drm-i915-display-Add-framework-to-add-parameters-spe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0174-drm-nouveau-acr-ga102-set-variable-ga102_gsps-storag.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0174-fbdev-hecubafb-Generate-deferred-I-O-ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0175-drm-hisilicon-kirin-Call-drm_atomic_helper_shutdown-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0175-drm-i915-display-Dump-also-display-parameters.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0175-drm-msm-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0175-fbdev-metronomefb-Select-FB_SYS_HELPERS_DEFERRED.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0176-drm-i915-display-Move-enable_fbc-module-parameter-un.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0176-fbdev-metronomefb-Generate-deferred-I-O-ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0177-drm-bridge-dw-hdmi-Replace-all-non-returning-strlcpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0177-drm-i915-display-Move-psr-related-module-parameters-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0177-drm-ssd130x-Drop-_helper-prefix-from-struct-drm_-_he.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0177-fbdev-ssd1307fb-Select-FB_SYS_HELPERS_DEFERRED.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0178-accel-qaic-Remove-size-field-from-struct-qaic_bo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0178-drm-i915-display-Move-vbt_firmware-module-parameter-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0178-drm-panel-samsung-s6d7aa0-use-pointer-for-drm_mode-i.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0178-fbdev-ssd1307fb-Generate-deferred-I-O-ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0179-dma-buf-sw_sync-Replace-all-non-returning-strlcpy-wi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0179-drm-i915-display-Move-lvds_channel_mode-module-param.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0179-drm-simpledrm-Add-support-for-multiple-power-domains.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0179-fbdev-xen-fbfront-Select-FB_SYS_HELPERS_DEFERRED.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0180-drm-bridge-Add-200ms-delay-to-wait-FW-HPD-status-sta.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0180-drm-i915-display-Move-panel_use_ssc-module-parameter.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0180-drm-shmobile-Use-p4cc-to-print-fourcc-codes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0180-fbdev-xen-fbfront-Generate-deferred-I-O-ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0181-drm-i915-display-Move-vbt_sdvo_panel_type-module-par.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0181-drm-imx-dcss-Call-drm_atomic_helper_shutdown-at-shut.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0181-drm-shmobile-Add-support-for-DRM_FORMAT_XRGB8888.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0182-drm-gpuvm-rename-struct-drm_gpuva_manager-to-struct-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0182-drm-i915-display-Move-enable_dc-module-parameter-und.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0182-drm-shmobile-Switch-to-drm_crtc_init_with_planes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0182-drm-virtio-Conditionally-allocate-virtio_gpu_fence.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0183-drm-gpuvm-allow-building-as-module.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0183-drm-i915-display-Move-enable_dpt-module-parameter-un.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0183-drm-shmobile-Add-missing-call-to-drm_fbdev_generic_s.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0183-nouveau-dispnv50-add-cursor-pitch-check.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0184-drm-i915-display-Move-enable_sagv-module-parameter-u.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0184-drm-nouveau-disp-use-drm_kms_helper_connector_hotplu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0184-drm-nouveau-uvmm-rename-umgr-to-base.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0184-drm-shmobile-Make-DRM_SHMOBILE-visible-on-Renesas-So.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0185-drm-bridge-tc358767-Use-devm_clk_get_enabled-helper.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0185-drm-docs-Fix-usage-stats-typos.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0185-drm-gma500-refactor-deprecated-strncpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0185-drm-i915-display-Move-disable_power_well-module-para.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0186-drm-Add-common-fdinfo-helper.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0186-drm-bridge-tfp410-Support-format-negotiation-hooks.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0186-drm-gpuvm-doc-fix-filename-references.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0186-drm-i915-display-Move-enable_ips-module-parameter-un.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0187-drm-bridge-tfp410-Set-input_bus_flags-in-atomic_chec.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0187-drm-i915-display-Move-invert_brightness-module-param.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0187-drm-msm-Switch-to-fdinfo-helper.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0187-drm-nouveau-kms-nv50-hide-unused-variables.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0188-drm-amdgpu-Switch-to-fdinfo-helper.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0188-drm-bridge-mhdp8546-Add-minimal-format-negotiation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0188-drm-bridge-use-drm_bridge_get_edid-instead-of-using-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0188-drm-i915-display-Move-edp_vswing-module-parameter-un.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0189-drm-Add-fdinfo-memory-stats.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0189-drm-bridge-lt9611uxc-use-drm_bridge_get_edid-instead.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0189-drm-bridge-mhdp8546-Set-input_bus_flags-from-atomic_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0189-drm-i915-display-Move-enable_dpcd_backlight-module-p.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0190-drm-bridge-sii902x-Support-format-negotiation-hooks.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0190-drm-i915-display-Move-load_detect_test-parameter-und.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0190-drm-msm-Add-memory-stats-to-fdinfo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0190-drm-tests-Add-calls-to-drm_fb_blit-on-supported-form.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0191-accel-qaic-Update-BO-metadata-in-a-central-location.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0191-drm-bridge-sii902x-Set-input_bus_flags-in-atomic_che.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0191-drm-doc-Relax-fdinfo-string-constraints.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0191-drm-i915-display-Move-force_reset_modeset_test-param.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0191-drm-tests-Add-new-format-conversion-tests-to-better-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0192-accel-qaic-Declare-BO-sliced-after-all-the-operation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0192-drm-bridge-adv7511-Convert-to-use-maple-tree-registe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0192-drm-bridge-tc358767-explicitly-set-readable-register.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0192-drm-gma500-Clear-fbdev-framebuffer-with-fb_memset_io.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0192-drm-i915-display-Move-disable_display-parameter-unde.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0192-drm-tidss-Update-encoder-bridge-chain-connect-model.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0193-accel-qaic-Undo-slicing-setup-done-in-qaic_attach_sl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0193-drm-bridge-cdns-mhdp8546-Fix-the-interrupt-enable-di.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0193-drm-bridge-dpc3433-Convert-to-use-maple-tree-registe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0193-drm-bridge-samsung-dsim-Fix-i.MX8M-enable-flow-to-me.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0193-drm-i915-display-Use-device-parameters-instead-of-mo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0194-accel-qaic-Clean-up-BO-during-flushing-of-transfer-l.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0194-drm-bridge-tc358767-Convert-to-use-maple-tree-regist.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0194-drm-i915-display-Move-verbose_state_checks-under-dis.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0194-drm-ttm-Use-init_on_free-to-delay-release-TTM-BOs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0195-accel-qaic-Create-a-function-to-initialize-BO.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0195-drm-amdgpu-Fix-no-procfs-build.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0195-drm-arm-Make-ARM-devices-menu-depend-on-DRM.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0195-drm-bridge-icn6211-Convert-to-use-maple-tree-registe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0195-drm-i915-display-Move-nuclear_pageflip-under-display.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0196-accel-qaic-Add-QAIC_DETACH_SLICE_BO-IOCTL.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0196-drm-bridge-lt9211-Convert-to-use-maple-tree-register.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0196-drm-bridge-samsung-dsim-fix-blanking-packet-size-cal.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0196-drm-i915-display-Move-enable_dp_mst-under-display.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0196-fbdev-hyperv_fb-Include-linux-screen_info.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0197-drm-bridge-sn65dsi83-Convert-to-use-maple-tree-regis.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0197-drm-execution-context-for-GEM-buffers-v7.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0197-drm-i915-remove-display-device-info-from-i915-capabi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0198-drm-add-drm_exec-selftests-v4.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0198-drm-bridge-samsung-dsim-Fetch-pll-clock-frequency-au.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0198-drm-i915-display-Reset-message-bus-after-each-read-w.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0198-drm-panel-ili9322-Remove-redundant-volatle_reg-opera.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0199-drm-amdkfd-switch-over-to-using-drm_exec-v3.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0199-drm-bridge-samsung-dsim-Select-GENERIC_PHY_MIPI_DPHY.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0199-drm-i915-sprite-move-sprite_name-to-intel_sprite.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0199-drm-panel-ili9322-Convert-to-use-maple-tree-register.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0200-drm-amdgpu-use-drm_exec-for-GEM-and-CSA-handling-v2.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0200-drm-bridge-samsung-dsim-Dynamically-configure-DPHY-t.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0200-drm-i915-lnl-Extend-C10-C20-phy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0200-drm-panel-Add-driver-for-BOE-RM692E5-AMOLED-panel.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0201-drm-amdgpu-use-drm_exec-for-MES-testing.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0201-drm-bridge-samsung-dsim-Support-non-burst-mode.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0201-drm-doc-Document-DRM-device-reset-expectations.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0201-drm-i915-lnl-Fix-check-for-TC-phy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0202-drm-amdgpu-use-the-new-drm_exec-object-for-CS-v3.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0202-drm-i915-display-Abstract-C10-C20-pll-hw-readout.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0202-drm-panel-simple-Add-Ampire-AM-800480L1TMQW-T00H.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0202-drm-vblank-Warn-when-silently-cancelling-vblank-work.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0203-drm-i915-display-Abstract-C10-C20-pll-calculation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0203-drm-loongson-Remove-a-useless-check-in-cursor_plane_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0203-drm-panfrost-Add-cycle-count-GPU-register-definition.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0204-accel-ivpu-Update-debugfs-to-latest-changes-in-DRM.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0204-drm-i915-fix-Makefile-sort-and-indent.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0204-drm-panfrost-Add-fdinfo-support-GPU-load-metrics.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0204-drm-ssd130x-Change-pixel-format-used-to-compute-the-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0204-drm-stm-dsi-Use-devm_platform_ioremap_resource.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0205-accel-ivpu-Compile-ivpu_debugfs.c-conditionally.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0205-drm-i915-move-Makefile-display-debugfs-files-next-to.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0205-drm-panel-ld9040-Use-better-magic-values.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0205-drm-panfrost-Add-fdinfo-support-for-memory-stats.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0206-drm-drm_file-Add-DRM-obj-s-RSS-reporting-function-fo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0206-drm-i915-bios-Clamp-VBT-HDMI-level-shift-on-BDW.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0206-drm-lcdif-Drop-unnecessary-NULL-pointer-check-on-lcd.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0206-drm-panel-ld9040-Register-a-backlight-device.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0207-drm-drv-use-enum-drm_minor_type-when-appropriate.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0207-drm-lcdif-Determine-bus-format-and-flags-in-atomic_c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0207-drm-panfrost-Implement-generic-DRM-object-RSS-report.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0208-drm-amd-pm-Annotate-struct-smu10_voltage_dependency_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0208-drm-file-use-explicit-values-for-enum-drm_minor_type.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0208-drm-i915-Abstract-the-extra-JSL-EHL-DPLL4-power-doma.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0208-drm-lcdif-Check-consistent-bus-format-and-flags-acro.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0209-drm-amdgpu-discovery-Annotate-struct-ip_hw_instance-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0209-drm-i915-Move-the-DPLL-extra-power-domain-handling-u.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0209-drm-lcdif-Add-multiple-encoders-and-first-bridges-su.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0210-drm-i915-Extract-_intel_-enable-disable-_shared_dpll.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0210-drm-i915-selftests-Annotate-struct-perf_series-with-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0210-drm-lcdif-Add-i.MX93-LCDIF-compatible-string.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0211-drm-Switch-i2c-drivers-back-to-use-.probe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0211-drm-i915-Move-the-g45-PEG-band-gap-HPD-workaround-to.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0211-drm-manager-to-keep-track-of-GPUs-VA-mappings.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0211-drm-msm-dpu-Annotate-struct-dpu_hw_intr-with-__count.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0212-drm-debugfs-provide-infrastructure-to-dump-a-DRM-GPU.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0212-drm-i915-hdcp-Rename-HCDP-1.4-enablement-function.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0212-drm-nouveau-pm-Annotate-struct-nvkm_perfdom-with-__c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0212-drm-panel-edp-Convert-to-platform-remove-callback-re.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0213-drm-bridge-display-connector-rename-dp_pwr-to-connec.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0213-drm-i915-hdcp-Convert-intel_hdcp_enable-to-a-blanket.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0213-drm-syncobj-add-IOCTL-to-register-an-eventfd.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0213-drm-vc4-Annotate-struct-vc4_perfmon-with-__counted_b.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0214-drm-bridge-display-connector-handle-hdmi-pwr-supply.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0214-drm-i915-hdcp-Add-more-conditions-to-enable-hdcp.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0214-drm-panel-simple-Drop-prepared_time.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0214-drm-virtio-Annotate-struct-virtio_gpu_object_array-w.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0215-drm-i915-mst-Swap-TRANSCONF-vs.-FECSTALL_DIS_DPTSTRE.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0215-drm-manager-Fix-printk-format-for-size_t.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0215-drm-ttm-Remove-redundant-code-in-ttm_tt_init_fields.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0215-drm-vmwgfx-Annotate-struct-vmw_surface_dirty-with-__.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0216-drm-debugfs-Silence-warning-from-cast.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0216-drm-i915-mst-Disable-transcoder-before-deleting-the-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0216-drm-i915-ttm-Add-I915_BO_PREALLOC.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0216-drm-v3d-Annotate-struct-v3d_perfmon-with-__counted_b.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0217-drm-dp-switch-drm_dp_downstream_-helpers-to-struct-d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0217-drm-i915-display-Set-I915_BO_ALLOC_USER-for-fb.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0217-drm-i915-mst-Clear-ACT-just-before-triggering-payloa.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0217-gpu-host1x-Explicitly-include-correct-DT-includes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0218-drm-Explicitly-include-correct-DT-includes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0218-drm-i915-Add-a-function-to-mmap-framebuffer-obj.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0218-drm-i915-mst-Always-write-CHICKEN_TRANS.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0218-drm-panel-nv3051d-Add-Support-for-Anbernic-351V.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0219-drm-amd-display-Fix-mst-hub-unplug-warning.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0219-drm-i915-display-Add-helper-func-to-get-intel_fbdev-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0219-drm-i915-display-Use-dma_fence-interfaces-instead-of.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0220-drm-arm-komeda-Remove-component-framework-and-add-a-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0220-drm-exynos-dsi-Convert-to-platform-remove-callback-r.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0220-drm-i915-display-Implement-fb_mmap-callback-function.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0220-drm-i915-display-Use-intel_bo_to_drm_bo-instead-of-o.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0221-drm-bridge-samsung-dsim-add-more-mipi-dsi-device-deb.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0221-drm-bridge-tc358767-increase-PLL-lock-time-delay.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0221-drm-i915-Extract-hsw_chicken_trans_reg.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0221-drm-i915-mtl-Disable-stolen-memory-backed-FB-for-A0.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0222-drm-bridge-samsung-dsim-reread-ref-clock-before-conf.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0222-drm-bridge-tc358767-give-VSDELAY-some-positive-value.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0222-drm-i915-Make-IRQ-reset-and-postinstall-multi-gt-awa.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0222-drm-i915-Stop-using-a-reg-variable.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0223-drm-bridge-samsung-dsim-update-PLL-reference-clock.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0223-drm-i915-Extract-mchbar_reg.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0223-drm-i915-gt-Consider-multi-gt-instead-of-to_gt.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0223-drm-ssd130x-Fix-pitch-calculation-in-ssd130x_fb_blit.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0224-drm-bridge-samsung-dsim-adjust-porches-by-rounding-u.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0224-drm-i915-dsi-Remove-dead-GLK-checks.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0224-drm-i915-gem-Consider-multi-gt-instead-of-to_gt.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0224-video-Add-auxiliary-display-drivers-to-Graphics-supp.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0225-drm-bridge-samsung-dsim-calculate-porches-in-Hz.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0225-drm-i915-dsi-Extract-port_ctrl_reg.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0225-drm-i915-selftests-Consider-multi-gt-instead-of-to_g.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0225-fbdev-Move-core-fbdev-symbols-to-a-separate-Kconfig-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0226-drm-i915-Remove-unused-for_each_uabi_class_engine.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0226-drm-i915-mtl-Extend-Wa_22011802037-to-MTL-A-step.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0226-drm-panel-simple-allow-LVDS-format-override.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0226-fbdev-Split-frame-buffer-support-in-FB-and-FB_CORE-s.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0227-Documentation-gpu-fix-Panfrost-documentation-build-w.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0227-drm-Make-FB_CORE-to-be-selected-if-DRM-fbdev-emulati.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0227-drm-i915-Move-for_each_engine-out-of-i915_drv.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0227-drm-i915-mtl-WA-to-clear-RDOP-clock-gating.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0228-drm-i915-dp_mst-Disable-DSC-on-ICL-MST-outputs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0228-drm-i915-mtl-Set-has_llc-0.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0228-drm-rockchip-vop2-Demote-message-in-mod_supported-to.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0229-drm-bridge-it6505-Fix-Kconfig-indentation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0229-drm-i915-display-Support-PSR-entry-VSC-packet-to-be-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0229-drm-i915-mtl-Define-MOCS-and-PAT-tables-for-MTL.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0229-drm-rockchip-vop2-Convert-to-use-maple-tree-register.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0230-drm-bridge-Remove-redundant-i2c_client-in-anx7625-it.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0230-drm-i915-move-display-mutex-inits-to-display-code.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0230-drm-i915-mtl-fix-mocs-selftest.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0231-drm-i915-i915_drv-Use-proper-parameter-naming-in-for.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0231-drm-i915-move-display-spinlock-init-to-display-code.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0231-drm-managed-Clean-up-GFP_-flag-usage-in-drmm_kmalloc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0231-drm-rockchip-remove-redundant-of_match_ptr.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0232-drm-Remove-flag-FBINFO_DEFAULT-from-fbdev-emulation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0232-drm-i915-i915_drv-Use-i915-instead-of-dev_priv-insie.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0232-drm-rockchip-dsi-Use-devm_platform_get_and_ioremap_r.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0233-drm-dp_mst-Add-helper-to-determine-if-an-MST-port-is.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0233-drm-i915-mtl-Add-PTE-encode-function.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0233-fbdev-Remove-FBINFO_DEFAULT-from-static-structs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0234-drm-dp_mst-Factor-out-a-helper-to-check-the-atomic-s.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0234-drm-i915-mtl-workaround-coherency-issue-for-Media.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0234-fbdev-Remove-FBINFO_DEFAULT-from-kzalloc-ed-structs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0235-drm-dp_mst-Swap-the-order-of-checking-root-vs.-non-r.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0235-drm-i915-selftest-Record-GT-error-for-gt-failure.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0235-drm-panel-ltk050h3146w-add-mipi_dsi_device.mode_flag.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0235-fbdev-Remove-FBINFO_DEFAULT-from-devm_kzalloc-ed-str.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0236-drm-dp_mst-Allow-DSC-in-any-Synaptics-last-branch-de.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0236-drm-i915-mtl-Add-workaround-14018778641.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0236-drm-panel-ltk050h3146w-add-support-for-Leadtek-LTK05.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0236-fbdev-Remove-FBINFO_DEFAULT-from-framebuffer_alloc-e.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0237-drm-dp-Add-DP_HBLANK_EXPANSION_CAPABLE-and-DSC_PASST.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0237-drm-i915-dg2-Remove-Wa_15010599737.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0237-drm-i915-hwmon-Get-mutex-and-rpm-ref-just-once-in-hw.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0238-drm-dp_mst-Add-HBLANK-expansion-quirk-for-Synaptics-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0238-drm-i915-guc-Disable-PL1-power-limit-when-loading-Gu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0238-drm-i915-selftests-Align-igt_spinner_create_request-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0239-drm-dp-Add-helpers-to-calculate-the-link-BW-overhead.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0239-drm-i915-hwmon-Block-waiting-for-GuC-reset-to-comple.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0240-drm-i915-dp_mst-Enable-FEC-early-once-it-s-known-DSC.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0240-drm-i915-mtl-Implement-Wa_14019141245.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0241-drm-i915-Migrate-platform-dependent-mock-hugepage-se.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0241-drm-i915-dp-Specify-the-FEC-overhead-as-an-increment.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0241-fbdev-fsl-diu-fb-Remove-flag-FBINFO_DEFAULT.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0242-drm-i915-Use-correct-huge-page-manager-for-MTL.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0242-drm-i915-dp-Pass-actual-BW-overhead-to-m_n-calculati.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0242-fbdev-Remove-FBINFO_FLAG_DEFAULT-from-kzalloc-ed-str.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0243-drm-i915-dp_mst-Account-for-FEC-and-DSC-overhead-dur.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0243-fbdev-Remove-FBINFO_FLAG_DEFAULT-from-framebuffer_al.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0244-drm-i915-dp_mst-Add-atomic-state-for-all-streams-on-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0244-drm-i915-selftest-Update-the-SLPC-selftest.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0244-fbdev-atafb-Remove-flag-FBINFO_FLAG_DEFAULT.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0245-drm-i915-dp_mst-Program-the-DSC-PPS-SDP-for-each-str.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0245-drm-i915-rc6-throw-out-set-wrapper.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0245-fbdev-pxafb-Remove-flag-FBINFO_FLAG_DEFAULT.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0246-drm-i915-dp-Make-sure-the-DSC-PPS-SDP-is-disabled-wh.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0246-i915-pmu-Add-support-for-total-context-runtime-for-G.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0247-drm-i915-dp_mst-Add-missing-DSC-compression-disablin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0247-drm-i915-fdinfo-Enable-fdinfo-for-GuC-backends.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0247-fbdev-Remove-FBINFO_DEFAULT-and-FBINFO_FLAG_DEFAULT.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0248-drm-i915-dp-Rename-intel_ddi_disable_fec_state-to-in.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0248-drm-i915-gt-Use-gt_err-for-GT-info.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0248-fbdev-Document-that-framebuffer_alloc-returns-zero-e.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0249-drm-i915-dp-Wait-for-FEC-detected-status-in-the-sink.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0249-drm-i915-guc-Force-a-reset-on-internal-GuC-error.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0249-drm-i915-selftests-Use-gt_err-for-GT-info.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0249-drm-panel-db7430-remove-unused-variables.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0250-drm-i915-dp-Disable-FEC-ready-flag-in-the-sink.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0250-drm-i915-guc-Consolidate-duplicated-capture-list-cod.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0250-drm-i915-mtl-Adding-DeviceID-for-Arrowlake-S-under-M.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0250-fbdev-Add-fb_ops-init-macros-for-framebuffers-in-DMA.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0251-drm-fbdev-dma-Use-fbdev-DMA-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0251-drm-i915-dp_mst-Handle-the-Synaptics-HBlank-expansio.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0251-drm-i915-gsc-define-gsc-fw.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0251-drm-i915-guc-Capture-list-naming-clean-up.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0252-drm-i915-dp_mst-Enable-decompression-in-the-sink-fro.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0252-drm-i915-guc-Fix-error-capture-for-virtual-engines.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0252-drm-tegra-Use-fbdev-DMA-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0253-drm-i915-dp-Enable-DSC-via-the-connector-decompressi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0253-drm-i915-gt-Wait-longer-for-tasks-in-migrate-selftes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0253-drm-i915-gvt-fix-intel_vgpu_alloc_resource-kernel-do.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0253-drm-tegra-Set-fbdev-FBINFO_VIRTFB-flag.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0254-drm-i915-Add-Wa_14015150844.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0254-drm-i915-dp_mst-Enable-DSC-passthrough.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0254-drm-i915-vma-fix-kernel-doc-function-name-for-i915_v.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0254-drm-tegra-Store-pointer-to-vmap-ed-framebuffer-in-sc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0255-drm-exynos-Use-fbdev-DMA-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0255-drm-i915-dp_mst-Enable-MST-DSC-decompression-for-all.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0255-drm-i915-mtl-Drop-Wa_14017240301.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0255-drm-i915-utils-drop-kernel-doc-from-__wait_for.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0256-drm-exynos-Set-fbdev-FBINFO_VIRTFB-flag.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0256-drm-i915-Factor-out-function-to-clear-pipe-update-fl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0256-drm-i915-Run-relevant-bits-of-debugfs-drop_caches-pe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0256-drm-i915-vma-document-struct-i915_vma_resource-waker.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0257-drm-i915-dp_mst-Force-modeset-CRTC-if-DSC-toggling-r.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0257-drm-i915-gt-skip-WA-verification-for-GEN7_MISCCPCTL-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0257-drm-i915-perf-fix-i915_perf_ioctl_version-kernel-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0257-drm-omapdrm-Set-VM-flags-in-GEM-object-mmap-function.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0258-drm-i915-Add-Wa_18022495364.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0258-drm-i915-dp_mst-Improve-BW-sharing-between-MST-strea.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0258-drm-i915-error-fix-i915_capture_error_state-kernel-d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0258-drm-omapdrm-Use-GEM-mmap-for-fbdev-emulation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0259-drm-i915-dp_mst-Check-BW-limitations-only-after-all-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0259-drm-i915-huc-silence-injected-failure-in-the-load-vi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0259-drm-i915-request-drop-kernel-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0259-drm-omapdrm-Set-fbdev-FBINFO_VIRTFB-flag.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0260-drm-i915-Query-compressed-bpp-properly-using-correct.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0260-drm-i915-gem-fix-i915_gem_object_lookup_rcu-kernel-d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0260-drm-i915-pxp-mtl-Update-pxp-firmware-response-timeou.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0260-fbdev-Remove-FB_DEFAULT_SYS_OPS.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0261-drm-i915-Drop-redundant-modeset-check.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0261-drm-i915-engine-fix-kernel-doc-function-name-for-int.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0261-drm-i915-pxp-mtl-Update-pxp-firmware-packet-size.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0261-fbdev-Harmonize-some-comments-in-linux-fb.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0262-drm-i915-Split-intel_update_crtc-into-two-parts.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0262-drm-i915-context-fix-kernel-doc-parameter-descriptio.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0262-drm-i915-lrc-User-PXP-contexts-requires-runalone-bit.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0262-drm-panel-ld9040-add-backlight-Kconfig-dependency.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0263-drm-ast-Do-not-enable-PCI-resources-multiple-times.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0263-drm-i915-Do-plane-etc.-updates-more-atomically-acros.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0263-drm-i915-gtt-fix-i915_vm_resv_put-kernel-doc-paramet.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0263-drm-i915-refactor-deprecated-strncpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0264-drm-i915-engine-hide-preempt_hang-selftest-member-fr.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0264-drm-i915-gt-Update-RC6-mask-for-mtl_drpc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0264-drm-i915-gvt-Clean-up-zero-initializers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0264-drm-ssd130x-Inline-the-ssd130x_buf_-alloc-free-funct.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0265-drm-i915-gt-remove-a-static-inline-that-requires-inc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0265-drm-i915-guc-add-dbgfs_node-member-kernel-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0265-drm-panelreplay-dpcd-register-definition-for-panelre.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0265-drm-ssd130x-Allocate-buffer-in-the-plane-s-.atomic_c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0266-dma-buf-Fix-the-typo-in-DMA-BUF-statistics-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0266-drm-i915-gem-remove-inlines-from-i915_gem_execbuffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0266-drm-i915-guc-drop-lots-of-kernel-doc-markers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0266-drm-i915-psr-Move-psr-specific-dpcd-init-into-own-fu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0267-drm-amdgpu-Rename-aqua_vanjaram_reg_init.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0267-drm-i915-Add-Wa_18028616096.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0267-drm-i915-guc-add-intel_guc_state_capture-member-docs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0267-drm-i915-panelreplay-Initializaton-and-compute-confi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0268-drm-amd-display-Remove-else-after-return-statement-i.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0268-drm-i915-active-fix-kernel-doc-for-function-paramete.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0268-drm-i915-panelreplay-Enable-panel-replay-dpcd-initia.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0268-drm-i915-perf-Remove-gtt_offset-from-stream-oa_buffe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0269-drm-amd-display-Remove-else-after-return-in-dm_crtc_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0269-drm-i915-Do-not-disable-preemption-for-resets.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0269-drm-i915-panelreplay-enable-disable-panel-replay.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0269-drm-i915-pmu-drop-kernel-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0270-drm-amd-display-Clean-up-style-problems-in-amdgpu_dm.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0270-drm-i915-Avoid-endless-HPD-poll-detect-loop-via-runt.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0270-drm-i915-abstract-plane-protection-check.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0270-drm-i915-pxp-fix-kernel-doc-for-member-dev_link.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0271-drm-amd-display-Remove-redundant-braces-in-amdgpu_dm.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0271-drm-i915-Don-t-change-the-status-of-forced-connector.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0271-drm-i915-remove-excess-functions-from-plane-protecti.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0271-drm-i915-scatterlist-fix-kernel-doc-parameter-docume.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0272-drm-amd-display-Use-seq_puts-in-amdgpu_current_color.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0272-drm-i915-Don-t-change-the-status-of-forced-connector.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0272-drm-i915-mtl-Define-GSC-Proxy-component-interface.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0272-drm-i915-update-in-source-bug-filing-URLs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0273-drm-amd-display-fix-comment-typo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0273-drm-i915-mtl-C20-state-verification.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0273-drm-i915-vdsc-Fix-first_line_bpg_offset-calculation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0273-mei-gsc_proxy-add-gsc-proxy-driver.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0274-drm-amd-Use-attribute-groups-for-PSP-flashing-attrib.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0274-drm-display-dp-Add-helper-function-to-get-DSC-bpp-pr.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0274-drm-i915-dp-Fix-LT-debug-print-in-SDP-CRC-enable.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0274-drm-i915-gsc-add-initial-support-for-GSC-proxy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0275-drm-amd-Make-flashing-messages-quieter.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0275-drm-i915-display-Store-compressed-bpp-in-U6.4-format.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0275-drm-i915-gsc-add-support-for-GSC-proxy-interrupt.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0275-drm-i915-pxp-mtl-intel_pxp_init_hw-needs-runtime-pm-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0276-drm-amd-Convert-USB-C-PD-F-W-attributes-into-groups.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0276-drm-i915-display-Consider-fractional-vdsc-bpp-while-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0276-drm-i915-pxp-Optimize-GET_PARAM-PXP_STATUS.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0276-drm-i915-vma-fix-struct-i915_vma_bindinfo-kernel-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0277-drm-amd-Add-documentation-for-how-to-flash-a-dGPU.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0277-drm-i915-audio-Consider-fractional-vdsc-bpp-while-co.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0277-drm-i915-display-Remove-unused-POWER_DOMAIN_MASK.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0277-drm-i915-gem-fix-function-pointer-member-kernel-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0278-drm-amd-Detect-IFWI-or-PD-upgrade-support-in-psp_ear.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0278-drm-i915-cx0-Add-intel_cx0_get_owned_lane_mask.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0278-drm-i915-dsc-mtl-Add-support-for-fractional-bpp.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0278-drm-i915-scatterlist-fix-kernel-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0279-drm-amd-adjust-whitespace-for-amdgpu_psp.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0279-drm-i915-Simplify-intel_cx0_program_phy_lane-with-lo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0279-drm-i915-dp-Iterate-over-output-bpp-with-fractional-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0279-drm-i915-ttm-fix-i915_ttm_to_gem-kernel-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0280-drm-amdkfd-Access-gpuvm_export_dmabuf-API-to-get-Dma.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0280-drm-i915-cx0-Enable-disable-TX-only-for-owned-PHY-la.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0280-drm-i915-dsc-Add-debugfs-entry-to-validate-DSC-fract.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0280-drm-i915-use-kernel-doc-Werror-when-CONFIG_DRM_I915_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0281-drm-amdgpu-return-an-error-if-query_video_caps-is-no.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0281-drm-i915-cx0-Program-vswing-only-for-owned-lanes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0281-drm-i915-dsc-Allow-DSC-only-with-fractional-bpp-when.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0281-drm-i915-uc-Track-patch-level-versions-on-reduced-ve.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0282-drm-amdgpu-Update-invalid-PTE-flag-setting.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0282-drm-i915-display-Use-int-for-entry-setup-frames.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0282-drm-i915-mtl-Define-GuC-firmware-version-for-MTL.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0283-drm-amdgpu-skip-address-adjustment-for-GFX-RAS-injec.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0283-drm-i915-dp-Tune-down-FEC-detection-timeout-error-me.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0283-drm-i915-guc-Decode-another-GuC-load-failure-case.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0284-drm-amd-display-Clean-up-warnings-in-amdgpu_dm_pp_sm.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0284-drm-i915-guc-Print-status-register-when-waiting-for-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0284-drm-i915-selftest-Simplify-Y-major-tiling-in-blit-se.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0284-drm-i915-xe2lpd-implement-WA-for-underruns-while-ena.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0285-drm-amd-display-Remove-unnecessary-casts-in-amdgpu_d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0285-drm-i915-Eliminate-has_4tile-feature-flag.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0285-drm-i915-panelreplay-Debugfs-support-for-panel-repla.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0285-drm-i915-uc-Enhancements-to-firmware-table-validatio.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0286-drm-amd-display-Clean-up-warnings-in-amdgpu_dm-_mst_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0286-drm-i915-Fix-fractional-bpp-handling-in-intel_link_b.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0286-drm-i915-dp-Consider-output_format-while-computing-d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0286-drm-i915-uc-Reject-duplicate-entries-in-firmware-tab.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0287-drm-amdkfd-Use-KIQ-to-unmap-HIQ.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0287-drm-i915-dp-Move-compressed-bpp-check-with-420-forma.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0287-drm-i915-dsb-DSB-code-refactoring.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0287-drm-i915-uc-Make-unexpected-firmware-versions-an-err.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0288-drm-amdgpu-have-bos-for-PDs-PTS-cpu-accessible-when-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0288-drm-i915-display-keep-struct-intel_display-members-s.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0288-drm-i915-dp_mst-Use-output_format-to-get-the-final-l.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0288-drm-i915-mtl-Drop-FLAT-CCS-check.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0289-drm-amd-amdgpu-Add-cu_occupancy-sysfs-file-to-GFX9.4.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0289-drm-i915-dp-Use-consistent-name-for-link-bpp-and-com.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0289-drm-i915-move-_crtc_clock_get-to-intel_dpll.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0289-drm-i915-mtl-Add-MTL-for-remapping-CCS-FBs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0290-drm-amdkfd-Skip-handle-mapping-SVM-range-with-no-GPU.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0290-drm-i915-add-vlv_pipe_to_phy-helper-to-replace-DPIO_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0290-drm-i915-dp-Update-Bigjoiner-interface-bits-for-comp.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0290-drm-i915-mtl-Fix-the-wa-number-for-Wa_22016670082.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0291-drm-amdgpu-Change-golden-settings-for-GFX-v9.4.3.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0291-drm-i915-convert-vlv_dpio_read-write-from-pipe-to-ph.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0291-drm-i915-intel_cdclk-Add-vdsc-with-bigjoiner-constra.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0291-drm-i915-preparation-for-using-PAT-index.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0292-drm-amdgpu-Fix-error-warnings-in-gmc_v9_0.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0292-drm-i915-dp-Remove-extra-logs-for-printing-DSC-info.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0292-drm-i915-fbc-Split-plane-size-vs.-surface-size-check.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0292-drm-i915-use-pat_index-instead-of-cache_level.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0293-drm-i915-dp-Avoid-forcing-DSC-BPC-for-MST-case.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0293-drm-i915-fbc-Bump-max-surface-size-to-8kx4k-on-icl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0293-drm-i915-pxp-Add-GSC-CS-back-end-resource-init-and-c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0294-drm-amd-display-Block-optimize-on-consecutive-FAMS-e.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0294-drm-i915-dp-Add-functions-to-get-min-max-src-input-b.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0294-drm-i915-fbc-Bump-ivb-FBC-max-surface-size-to-4kx4k.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0294-drm-i915-pxp-Add-MTL-hw-plumbing-enabling-for-KCR-op.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0295-drm-amdgpu-Fix-warnings-in-gfxhub_-v1_0-v1_2.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0295-drm-dp_mst-Store-the-MST-PBN-divider-value-in-fixed-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0295-drm-i915-dp-Check-min-bpc-DSC-limits-for-dsc_force_b.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0295-drm-i915-pxp-Add-MTL-helpers-to-submit-Heci-Cmd-Pack.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0296-drm-amdgpu-Remove-redundant-GFX-v9.4.3-sequence.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0296-drm-dp_mst-Fix-PBN-divider-calculation-for-UHBR-rate.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0296-drm-i915-dp-Avoid-left-shift-of-DSC-output-bpp-by-4.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0296-drm-i915-pxp-Add-GSC-CS-backend-to-send-GSC-fw-messa.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0297-drm-amdgpu-Fix-warnings-in-gfxhub_v2_0.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0297-drm-dp_mst-Add-kunit-tests-for-drm_dp_get_vc_payload.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0297-drm-i915-dp-Rename-helper-to-get-DSC-max-pipe_bpp.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0297-drm-i915-pxp-Add-ARB-session-creation-and-cleanup.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0298-drm-amdgpu-Prefer-dev_warn-over-printk.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0298-drm-i915-dp-Replace-intel_dp_is_uhbr_rate-with-drm_d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0298-drm-i915-dp-Separate-out-functions-for-edp-DP-for-co.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0298-drm-i915-uapi-pxp-Add-a-GET_PARAM-for-PXP.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0299-drm-amdgpu-Fix-warnings-in-gmc_v10_0.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0299-drm-i915-dp-Account-for-channel-coding-efficiency-on.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0299-drm-i915-dp-Add-DSC-BPC-BPP-constraints-while-select.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0299-drm-i915-pxp-On-MTL-KCR-enabling-doesn-t-wait-on-tee.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0300-drm-amdgpu-Fix-errors-warnings-in-gmc_-v6_0-v7_0.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0300-drm-i915-dp-Fix-UHBR-link-M-N-values.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0300-drm-i915-dp-Separate-out-function-to-get-compressed-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0300-drm-i915-pxp-Enable-PXP-with-MTL-GSC-CS.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0301-drm-amdgpu-Fix-warnings-in-gfxhub_v2_1.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0301-drm-i1915-guc-Fix-probe-injection-CI-failures-after-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0301-drm-i915-dp-Get-optimal-link-config-to-have-best-com.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0301-drm-i915-dp_mst-Calculate-the-BW-overhead-in-intel_d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0302-drm-amdgpu-Remove-else-after-return-statement-in-gmc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0302-drm-i915-dp-Check-src-sink-compressed-bpp-limit-for-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0302-drm-i915-dp_mst-Fix-PBN-MTP_TU-size-calculation-for-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0302-drm-i915-guc-Fix-confused-register-capture-list-crea.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0303-drm-amdgpu-Fix-warnings-in-gmc_v11_0.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0303-drm-i915-dp-Check-if-force_dsc_output_format-is-poss.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0303-drm-i915-dp-Report-a-rounded-down-value-as-the-maxim.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0303-drm-i915-hwmon-Silence-UBSAN-uninitialized-bool-vari.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0304-drm-amdgpu-Remove-else-after-return-statement-in-gfx.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0304-drm-i915-Dump-error-capture-to-kernel-log.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0304-drm-i915-display-Remove-unused-POWER_DOMAIN_MODESET.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0304-drm-i915-dp-Simplify-intel_dp_max_data_rate.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0305-drm-amdgpu-vkms-drop-redundant-set-of-fb_modifiers_n.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0305-drm-i915-dp-Reuse-intel_dp_-max-effective-_data_rate.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0305-drm-i915-guc-Dump-error-capture-to-dmesg-on-CTB-erro.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0306-drm-amd-pm-disbale-dcefclk-device-sysnode-on-GFX-v9..patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0306-drm-i915-dsi-assume-BXT-gpio-works-for-non-native-GP.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0306-drm-i915-guc-slpc-Disable-rps_boost-debugfs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0307-drm-amdgpu-Fix-warnings-in-gmc_v8_0.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0307-drm-i915-display-remove-redundant-parameter-from-sdp.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0307-drm-i915-dsi-switch-mipi_exec_gpio-from-dev_priv-to-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0307-drm-i915-mtl-do-not-enable-render-power-gating-on-MT.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0308-drm-amdgpu-Fix-warnings-in-gfxhub_-v3_0-v3_0_3.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0308-drm-i915-display-combine-DP-audio-compute-config-ste.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0308-drm-i915-dsi-clarify-GPIO-exec-sequence.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0308-drm-i915-mtl-Add-MTL-performance-tuning-changes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0309-drm-amdgpu-Fix-errors-warnings-in-gfx_v10_0.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0309-drm-i915-display-add-lock-while-printing-frontbuffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0309-drm-i915-dsi-rename-platform-specific-_exec_gpio-to-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0309-drm-i915-mtl-Extend-Wa_16014892111-to-MTL-A-step.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0310-drm-amdgpu-gfx9-move-update_spm_vmid-out-of-rlc_init.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0310-drm-i915-Fix-memory-leaks-in-function-live_nop_switc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0310-drm-i915-dsi-bxt-icl-GPIO-set-value-do-not-need-gpio.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0310-drm-i915-sdvo-Issue-SetTargetOutput-prior-to-GetAtta.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0311-drm-amdgpu-gfx10-move-update_spm_vmid-out-of-rlc_ini.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0311-drm-i915-dsi-Replace-while-1-with-one-with-clear-exi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0311-drm-i915-pmu-Change-bitmask-of-enabled-events-to-u32.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0311-drm-i915-sdvo-Protect-macro-args.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0312-drm-amdgpu-Increase-soft-IH-ring-size.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0312-drm-i915-dsi-Get-rid-of-redundant-else.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0312-drm-i915-pmu-Support-PMU-for-all-engines.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0312-drm-i915-sdvo-s-sdvo_inputs_mask-sdvo_num_inputs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0313-drm-i915-Don-t-warn-about-zero-N-P-in-_calc_dpll_par.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0313-drm-i915-dsi-Replace-check-with-a-missing-MIPI-seque.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0313-drm-i915-pmu-Skip-sampling-engines-with-no-enabled-c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0314-drm-amdkfd-add-kfd2kgd-debugger-callbacks-for-GC-v9..patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0314-drm-i915-Fully-populate-crtc_state-dpll.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0314-drm-i915-dsi-Remove-GPIO-lookup-table-at-the-end-of-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0314-drm-i915-pmu-Transform-PMU-parking-code-to-be-GT-bas.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0315-drm-amdkfd-restore-debugger-additional-info-for-gfx-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0315-drm-i915-dsi-Fix-wrong-initial-value-for-GPIOs-in-bx.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0315-drm-i915-pmu-Add-reference-counting-to-the-sampling-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0315-drm-i915-sdvo-Pick-the-TV-dotclock-from-adjusted_mod.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0316-drm-amdkfd-enable-watch-points-globally-for-gfx943.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0316-drm-i915-dsi-Extract-common-soc_gpio_set_value-helpe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0316-drm-i915-pmu-Prepare-for-multi-tile-non-engine-count.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0316-drm-i915-sdvo-Fail-gracefully-if-the-TV-dotclock-is-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0317-drm-amdkfd-add-multi-process-debugging-support-for-G.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0317-drm-i915-dsi-Replace-poking-of-VLV-GPIOs-behind-the-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0317-drm-i915-pmu-Export-counters-from-all-tiles.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0317-drm-i915-rpl-Update-pci-ids-for-RPL-P-U.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0318-drm-amdgpu-rename-psp_execute_non_psp_fw_load-and-ma.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0318-drm-i915-dsi-Prepare-soc_gpio_set_value-to-distingui.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0318-drm-i915-mtl-end-support-for-set-caching-ioctl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0318-drm-i915-vma-constify-unbind_fence_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0319-drm-amdgpu-use-psp_execute_load_ip_fw-instead.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0319-drm-i915-display-update-intel_dp_has_audio-to-suppor.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0319-drm-i915-dsi-Replace-poking-of-CHV-GPIOs-behind-the-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0319-fbdev-Add-Kconfig-options-to-select-different-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0320-drm-i915-display-configure-SDP-split-for-DP-MST.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0320-drm-i915-dsi-Combine-checks-in-mipi_exec_gpio.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0320-drm-radeon-ERROR-foo-bar-should-be-foo-bar.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0320-fbdev-Add-initializer-macros-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0321-drm-armada-Use-regular-fbdev-I-O-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0321-drm-i915-iosf-Drop-unused-APIs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0321-drm-i915-regs-split-out-intel_color_regs.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0321-drm-radeon-ERROR-foo-should-be-foo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0322-drm-exynos-Use-regular-fbdev-I-O-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0322-drm-i915-color-move-CHV-CGM-pipe-mode-read-to-intel_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0322-drm-i915-display-Use-int-type-for-entry_setup_frames.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0322-drm-radeon-ERROR-foo-should-be-foo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0323-drm-gma500-Use-regular-fbdev-I-O-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0323-drm-i915-display-Do-not-check-psr2-if-psr-panel-repl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0323-drm-i915-move-HSW-gamma-mode-read-to-intel_color.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0323-drm-radeon-ERROR-that-open-brace-should-be-on-the-pr.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0324-drm-i915-Polish-some-RMWs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0324-drm-i915-move-ILK-CSC-mode-read-to-intel_color.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0324-drm-radeon-ERROR-foo-should-be-foo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0324-drm-radeon-Use-regular-fbdev-I-O-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0325-drm-amdkfd-Update-CWSR-grace-period-for-GFX9.4.3.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0325-drm-fbdev-dma-Use-regular-fbdev-I-O-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0325-drm-i915-Push-audio-enable-disable-further-out.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0325-drm-i915-color-move-SKL-gamma-and-CSC-enable-read-to.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0326-drm-amdgpu-add-watchdog-timer-enablement-for-gfx_v9_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0326-drm-i915-Wrap-g4x-DP-HDMI-audio-enable-disable.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0326-drm-i915-color-move-pre-SKL-gamma-and-CSC-enable-rea.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0326-drm-omapdrm-Use-regular-fbdev-I-O-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- commit 55b06a7</changelog>
  <changelog author="ematsumiya@suse.de" date="1759492803">- cifs: prevent NULL pointer dereference in UTF16 conversion
  (bsc#1250365, CVE-2025-39838).
- commit 5883dcd</changelog>
  <changelog author="ailiop@suse.com" date="1759492804">- Squashfs: add additional inode sanity checking (git-fixes).
- commit fe46811</changelog>
  <changelog author="ailiop@suse.com" date="1759492805">- Squashfs: reject negative file sizes in squashfs_read_inode()
  (git-fixes).
- commit 2f68e78</changelog>
  <changelog author="tiwai@suse.de" date="1759579200">- ALSA: usb-audio: Add DSD support for Comtrue USB Audio device
  (stable-fixes).
- ALSA: usb-audio: Fix build with CONFIG_INPUT=n (git-fixes).
- ALSA: usb-audio: Convert comma to semicolon (git-fixes).
- ALSA: usb-audio: Add mixer quirk for Sony DualSense PS5
  (stable-fixes).
- ALSA: usb-audio: Remove unneeded wmb() in mixer_quirks
  (stable-fixes).
- ALSA: usb-audio: Simplify NULL comparison in mixer_quirks
  (stable-fixes).
- ALSA: usb-audio: Avoid multiple assignments in mixer_quirks
  (stable-fixes).
- ALSA: usb-audio: Drop unnecessary parentheses in mixer_quirks
  (stable-fixes).
- ALSA: usb-audio: Fix block comments in mixer_quirks
  (stable-fixes).
- commit 929e260</changelog>
  <changelog author="tiwai@suse.de" date="1759579201">- ASoC: wcd934x: fix error handling in wcd934x_codec_parse_data()
  (git-fixes).
- ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free
  (git-fixes).
- ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping
  (git-fixes).
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping
  (git-fixes).
- ASoC: Intel: bytcht_es8316: Fix invalid quirk input mapping
  (git-fixes).
- ASoC: qcom: audioreach: fix potential null pointer dereference
  (git-fixes).
- ASoC: imx-hdmi: remove cpu_pdev related code (git-fixes).
- ALSA: lx_core: use int type to store negative error codes
  (git-fixes).
- ALSA: usb-audio: Add mute TLV for playback volumes on more
  devices (stable-fixes).
- ALSA: usb-audio: move mixer_quirks' min_mute into common quirk
  (stable-fixes).
- commit 86dd099</changelog>
  <changelog author="tiwai@suse.de" date="1759579202">- docs: admin-guide: update to current minimum pipe size default
  (git-fixes).
- drivers/base/node: handle error properly in register_one_node()
  (git-fixes).
- Bluetooth: ISO: don't leak skb in ISO_CONT RX (git-fixes).
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (git-fixes).
- Bluetooth: MGMT: Fix not exposing debug UUID on
  MGMT_OP_READ_EXP_FEATURES_INFO (git-fixes).
- drm/radeon/r600_cs: clean up of dead code in r600_cs
  (git-fixes).
- drm/bridge: it6505: select REGMAP_I2C (git-fixes).
- drm/panel: novatek-nt35560: Fix invalid return value
  (git-fixes).
- can: rcar_can: rcar_can_resume(): fix s2ram with PSCI
  (stable-fixes).
- drm/i915/backlight: Return immediately when scale() finds
  invalid parameters (stable-fixes).
- commit 07504f9</changelog>
  <changelog author="tiwai@suse.de" date="1759579203">- maple_tree: fix MAPLE_PARENT_RANGE32 and parent pointer docs
  (git-fixes).
- media: rj54n1cb0c: Fix memleak in rj54n1_probe() (git-fixes).
- media: lirc: Fix error handling in lirc_register() (git-fixes).
- media: zoran: Remove zoran_fh structure (git-fixes).
- drm/amdgpu: remove the redeclaration of variable i (git-fixes).
- drm/msm/dpu: fix incorrect type for ret (git-fixes).
- drm/amdkfd: Fix error code sign for EINVAL in svm_ioctl()
  (git-fixes).
- drm/amd/pm: Disable SCLK switching on Oland with high pixel
  clocks (v3) (git-fixes).
- drm/amd/pm: Disable MCLK switching with non-DC at 120 Hz+ (v2)
  (git-fixes).
- drm/amd/pm: Treat zero vblank time as too short in si_dpm (v3)
  (git-fixes).
- drm/amd/pm: Adjust si_upload_smc_data register programming (v3)
  (git-fixes).
- drm/amd/pm: Fix si_upload_smc_data (v3) (git-fixes).
- drm/amd/pm: Disable ULV even if unsupported (v3) (git-fixes).
- drm/amdgpu: Power up UVD 3 for FW validation (v2) (git-fixes).
- drm/rcar-du: dsi: Fix 1/2/3 lane support (git-fixes).
- drm/amd/display: Remove redundant semicolons (git-fixes).
- firewire: core: fix overlooked update of subsystem ABI version
  (git-fixes).
- commit 2161328</changelog>
  <changelog author="tiwai@suse.de" date="1759579204">- net: nfc: nci: Add parameter validation for packet data
  (git-fixes).
- net: usb: Remove disruptive netif_wake_queue in
  rtl8150_set_multicast (git-fixes).
- wifi: ath11k: HAL SRNG: don't deinitialize and re-initialize
  again (git-fixes).
- wifi: ath10k: avoid unnecessary wait for service ready message
  (git-fixes).
- wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load()
  (git-fixes).
- wifi: rtw89: avoid circular locking dependency in
  ser_state_run() (git-fixes).
- wifi: mac80211: fix Rx packet handling when pubsta information
  is not available (git-fixes).
- wifi: mt76: fix potential memory leak in mt76_wmac_probe()
  (git-fixes).
- wifi: mwifiex: send world regulatory domain to driver
  (git-fixes).
- media: b2c2: Fix use-after-free causing by irq_check_work in
  flexcop_pci_remove (git-fixes).
- media: uvcvideo: Mark invalid entities with id
  UVC_INVALID_ENTITY_ID (git-fixes).
- media: i2c: mt9v111: fix incorrect type for ret (git-fixes).
- media: pci: ivtv: Add missing check after DMA map (git-fixes).
- media: cx18: Add missing check after DMA map (git-fixes).
- media: st-delta: avoid excessive stack usage (git-fixes).
- media: v4l2-subdev: Fix alloc failure check in
  v4l2_subdev_call_state_try() (git-fixes).
- wifi: virt_wifi: Fix page fault on connect (stable-fixes).
- mmc: sdhci-cadence: add Mobileye eyeQ support (stable-fixes).
- usb: core: Add 0x prefix to quirks debug output (stable-fixes).
- commit dbb8904</changelog>
  <changelog author="tiwai@suse.de" date="1759579205">- drivers/base/node: fix double free in register_one_node()
  (git-fixes).
- commit 205d070</changelog>
  <changelog author="tiwai@suse.de" date="1759579206">- Bluetooth: hci_sync: Fix using random address for BIG/PA
  advertisements (git-fixes).
- Bluetooth: ISO: free rx_skb if not consumed (git-fixes).
- wifi: ath12k: fix wrong logging ID used for CE (git-fixes).
- wifi: iwlwifi: Remove redundant header files (git-fixes).
- media: tuner: xc5000: Fix use-after-free in xc5000_release
  (git-fixes).
- media: mc: Fix MUST_CONNECT handling for pads with no links
  (git-fixes).
- drm/panthor: Fix memory leak in panthor_ioctl_group_create()
  (git-fixes).
- ASoC: Intel: sof_sdw: Prevent jump to NULL add_sidecar callback
  (git-fixes).
- ALSA: pcm: Disable bottom softirqs as part of spin_lock_irq()
  on PREEMPT_RT (git-fixes).
- commit 90486f1</changelog>
  <changelog author="tiwai@suse.de" date="1759579207">- wifi: ath12k: fix the fetching of combined rssi (git-fixes).
- commit 75dc6e6</changelog>
  <changelog author="tiwai@suse.de" date="1759665600">- bus: mhi: host: Do not use uninitialized 'dev' pointer in
  mhi_init_irq_setup() (git-fixes).
- iio: imu: inv_icm42600: Drop redundant pm_runtime
  reinitialization in resume (git-fixes).
- iio: consumers: Fix offset handling in
  iio_convert_raw_to_processed() (git-fixes).
- iio: dac: ad5421: use int type to store negative error codes
  (git-fixes).
- iio: dac: ad5360: use int type to store negative error codes
  (git-fixes).
- iio: frequency: adf4350: Fix ADF4350_REG3_12BIT_CLKDIV_MODE
  (git-fixes).
- iio: frequency: adf4350: Fix prescaler usage (git-fixes).
- iio: xilinx-ams: Fix AMS_ALARM_THR_DIRECT_MASK (git-fixes).
- iio: xilinx-ams: Unmask interrupts after updating alarms
  (git-fixes).
- misc: genwqe: Fix incorrect cmd field being reported in error
  (git-fixes).
- uio: uio_pdrv_genirq: Remove MODULE_DEVICE_TABLE (git-fixes).
- thunderbolt: Compare HMAC values in constant time (git-fixes).
- usb: misc: qcom_eud: Access EUD_MODE_MANAGER2 through secure
  calls (git-fixes).
- usb: host: max3421-hcd: Fix error pointer dereference in probe
  cleanup (git-fixes).
- tty: n_gsm: Don't block input queue by waiting MSC (git-fixes).
- serial: max310x: Add error checking in probe() (git-fixes).
- mtd: rawnand: omap2: fix device leak on probe failure
  (git-fixes).
- HID: intel-ish-ipc: Remove redundant ready check after timeout
  function (git-fixes).
- hwrng: ks-sa - fix division by zero in ks_sa_rng_init
  (git-fixes).
- crypto: hisilicon/qm - set NULL to qm-&gt;debug.qm_diff_regs
  (git-fixes).
- crypto: aspeed - Fix dma_unmap_sg() direction (git-fixes).
- crypto: atmel - Fix dma_unmap_sg() direction (git-fixes).
- crypto: hisilicon/qm - check whether the input function and
  PF are on the same device (git-fixes).
- hwrng: nomadik - add ARM_AMBA dependency (git-fixes).
- crypto: keembay - Add missing check after sg_nents_for_len()
  (git-fixes).
- commit 6795b42</changelog>
  <changelog author="tiwai@suse.de" date="1759665601">- usb: vhci-hcd: Prevent suspending virtually attached devices
  (git-fixes).
- Revert "usb: xhci: Avoid Stop Endpoint retry loop if the
  endpoint seems Running" (git-fixes).
- usb: typec: tipd: Clear interrupts first (git-fixes).
- usb: cdns3: cdnsp-pci: remove redundant pci_disable_device()
  call (git-fixes).
- usb: gadget: configfs: Correctly set use_os_string at bind
  (git-fixes).
- usb: phy: twl6030: Fix incorrect type for ret (git-fixes).
- crypto: hisilicon/qm - request reserved interrupt for virtual
  function (git-fixes).
- crypto: hisilicon - re-enable address prefetch after device
  resuming (git-fixes).
- crypto: hisilicon/zip - remove unnecessary validation for
  high-performance mode configurations (git-fixes).
- commit 609ee3a</changelog>
  <changelog author="ohering@suse.de" date="1759752000">- RDMA/mana_ib: Fix DSCP value in modify QP (git-fixes).
- commit ffca68d</changelog>
  <changelog author="joao.povoas@suse.com" date="1759752001">- Update
  patches.suse/RDMA-rxe-Flush-delayed-SKBs-while-releasing-RXE-reso.patch
  (git-fixes CVE-2025-39695 bsc#1249306).
- Update
  patches.suse/drm-amdgpu-check-if-hubbub-is-NULL-in-debugfs-amdgpu.patch
  (stable-fixes CVE-2025-39707 bsc#1249333).
- Update
  patches.suse/drm-mediatek-Add-error-handling-for-old-state-CRTC-i.patch
  (git-fixes CVE-2025-39807 bsc#1249887).
- Update
  patches.suse/drm-msm-Add-error-handling-for-krealloc-in-metadata-.patch
  (stable-fixes CVE-2025-39747 bsc#1249566).
- Update
  patches.suse/drm-xe-Make-dma-fences-compliant-with-the-safe-acces.patch
  (stable-fixes CVE-2025-38703 bsc#1249193).
- Update
  patches.suse/drm-xe-vm-Clear-the-scratch_pt-pointer-on-error.patch
  (git-fixes CVE-2025-39811 bsc#1249915).
- Update
  patches.suse/media-ivsc-Fix-crash-at-shutdown-due-to-missing-mei_.patch
  (git-fixes CVE-2025-39711 bsc#1249274).
- Update
  patches.suse/wifi-ath12k-fix-memory-leak-in-ath12k_service_ready_.patch
  (git-fixes CVE-2025-39890 bsc#1250334).
- commit 06f1002</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1759752002">- ixgbe: fix incorrect map used in eee linkmode (CVE-2025-39922
  bsc#1250722).
- commit 1384a55</changelog>
  <changelog author="tiwai@suse.de" date="1759752003">- wifi: ath12k: Add MODULE_FIRMWARE() entries (bsc#1250952).
- commit fbc86d9</changelog>
</package>
<package pkgid="1024ab5f900b5dacf8713e4b3f924de00bbfd516a5c18c7e9a261d34fa407997" name="kernel-macros" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="150700.53.22.1"/>
  <changelog author="hoyeon.lee@suse.com" date="1761912000">- selftests/bpf: Fix a fd leak in error paths in open_netns
  (git-fixes).
- commit 51d3745</changelog>
  <changelog author="clopez@suse.de" date="1761912001">- KVM: x86/mmu: Prevent installing hugepages when mem attributes
  are changing (git-fixes).
- commit 37d594a</changelog>
  <changelog author="fdmanana@suse.com" date="1761912002">- btrfs: avoid potential out-of-bounds in btrfs_encode_fh()
  (git-fixes).
- commit 8cb68fe</changelog>
  <changelog author="fdmanana@suse.com" date="1761912003">- btrfs: fix clearing of BTRFS_FS_RELOC_RUNNING if relocation
  already running (git-fixes).
- commit f5ef369</changelog>
  <changelog author="fdmanana@suse.com" date="1761912004">- btrfs: do not assert we found block group item when creating
  free space tree (bsc#1252918 CVE-2025-40100).
- commit 327502f</changelog>
  <changelog author="dsterba@suse.com" date="1761912005">- net: tun: Update napi-&gt;skb after XDP process (CVE-2025-39984 bsc#1252081)
- commit f5f1c6b</changelog>
  <changelog author="dsterba@suse.com" date="1761912006">- vhost: vringh: Fix copy_to_iter return value check (CVE-2025-40056 bsc#1252826)
- commit 4efa16a</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1761912007">- smb: client: fix potential cfid UAF in smb2_query_info_compound
  (bsc#1248886).
- commit 5e5239d</changelog>
  <changelog author="tiwai@suse.de" date="1761998400">- drm/panel: kingdisplay-kd097d04: Disable EoTp (git-fixes).
- drm/panel: sitronix-st7789v: fix sync flags for t28cp45tn89
  (git-fixes).
- drm/etnaviv: fix flush sequence logic (git-fixes).
- drm/msm/dpu: Fix pixel extension sub-sampling (git-fixes).
- drm/msm/a6xx: Fix GMU firmware parser (git-fixes).
- drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on
  Iceland (git-fixes).
- drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Fiji
  (git-fixes).
- drm/amd/pm: fix smu table id bound check issue in
  smu_cmn_update_table() (git-fixes).
- drm/mediatek: Fix device use-after-free on unbind (git-fixes).
- ASoC: fsl_sai: fix bit order for DSD format (git-fixes).
- ASoC: Intel: avs: Unprepare a stream when XRUN occurs
  (git-fixes).
- ASoC: qdsp6: q6asm: do not sleep while atomic (git-fixes).
- ALSA: usb-audio: fix control pipe direction (git-fixes).
- commit acb4ea2</changelog>
  <changelog author="tiwai@suse.de" date="1761998401">- drm/ast: Clear preserved bits from register output value
  (git-fixes).
- drm/nouveau: Fix race in nouveau_sched_fini() (git-fixes).
- drm/sysfb: Do not dereference NULL pointer in plane reset
  (git-fixes).
- drm/msm/dpu: Require linear modifier for writeback framebuffers
  (git-fixes).
- drm/amdgpu: fix SPDX header on cyan_skillfish_reg_init.c
  (git-fixes).
- drm/radeon: Remove calls to drm_put_dev() (git-fixes).
- drm/radeon: Do not kfree() devres managed rdev (git-fixes).
- ASoC: fsl_sai: Fix sync error in consumer mode (git-fixes).
- drm/amd/display: increase max link count and fix link-&gt;enc
  NULL pointer access (stable-fixes).
- commit e65d412</changelog>
  <changelog author="tiwai@suse.de" date="1762084800">- regulator: bd718x7: Fix voltages scaled by resistor divider
  (git-fixes).
- regmap: slimbus: fix bus_context pointer in regmap init calls
  (git-fixes).
- commit 20abe4b</changelog>
  <changelog author="mhocko@suse.com" date="1762171200">- coresight: trbe: Return NULL pointer for allocation failures
  (CVE-2025-40060 bsc#1252848).
- commit 4543e34</changelog>
  <changelog author="joao.povoas@suse.com" date="1762171201">- Update
  patches.suse/ACPI-x86-s2idle-Catch-multiple-ACPI_TYPE_PACKAGE-obj.patch
  (git-fixes CVE-2023-53708 bsc#1252537).
- Update
  patches.suse/ALSA-usb-audio-Fix-NULL-pointer-deference-in-try_to_.patch
  (git-fixes CVE-2025-40085 bsc#1252873).
- Update
  patches.suse/ALSA-usb-audio-fix-race-condition-to-UAF-in-snd_usbm.patch
  (git-fixes CVE-2025-39997 bsc#1252056).
- Update
  patches.suse/ASoC-qcom-audioreach-fix-potential-null-pointer-dere.patch
  (git-fixes CVE-2025-40013 bsc#1252348).
- Update patches.suse/Bluetooth-MGMT-Fix-possible-UAFs.patch
  (git-fixes CVE-2025-39981 bsc#1252060).
- Update
  patches.suse/Bluetooth-hci_event-Fix-UAF-in-hci_acl_create_conn_s.patch
  (git-fixes CVE-2025-39982 bsc#1252083).
- Update
  patches.suse/HID-amd_sfh-Fix-for-shift-out-of-bounds.patch
  (bsc#1012628 CVE-2023-53703 bsc#1252553).
- Update
  patches.suse/Input-uinput-zero-initialize-uinput_ff_upload_compat.patch
  (git-fixes CVE-2025-40035 bsc#1252866).
- Update patches.suse/NFS-Fix-a-potential-data-corruption.patch
  (git-fixes CVE-2023-53711 bsc#1252536).
- Update
  patches.suse/NFSD-Define-a-proc_layoutcommit-for-the-FlexFiles-layout-type.patch
  (git-fixes CVE-2025-40087 bsc#1252909).
- Update
  patches.suse/PCI-endpoint-pci-epf-test-Add-NULL-check-for-DMA-cha.patch
  (git-fixes CVE-2025-40032 bsc#1252841).
- Update
  patches.suse/RDMA-rxe-Fix-race-in-do_task-when-draining.patch
  (git-fixes CVE-2025-40061 bsc#1252849).
- Update
  patches.suse/Squashfs-fix-uninit-value-in-squashfs_get_parent.patch
  (git-fixes CVE-2025-40049 bsc#1252822).
- Update
  patches.suse/USB-gadget-Fix-the-memory-leak-in-raw_gadget-dr.patch
  (bsc#1012628 CVE-2023-53693 bsc#1252489).
- Update
  patches.suse/afs-Fix-potential-null-pointer-dereference-in-afs_put_server.patch
  (git-fixes CVE-2025-40010 bsc#1252332).
- Update
  patches.suse/arm64-csum-Fix-OoB-access-in-IP-checksum-code-for-ne.patch
  (git-fixes CVE-2023-53726 bsc#1252565).
- Update
  patches.suse/arm64-sme-Use-STR-P-to-clear-FFR-context-field-.patch
  (bsc#1012628 CVE-2023-53713 bsc#1252559).
- Update
  patches.suse/blk-iocost-use-spin_lock_irqsave-in-adjust_inus.patch
  (bsc#1012628 CVE-2023-53730 bsc#1252495).
- Update
  patches.suse/bus-fsl-mc-Check-return-value-of-platform_get_resour.patch
  (git-fixes CVE-2025-40029 bsc#1252772).
- Update
  patches.suse/can-etas_es58x-populate-ndo_change_mtu-to-prevent-bu.patch
  (git-fixes CVE-2025-39988 bsc#1252074).
- Update
  patches.suse/can-hi311x-populate-ndo_change_mtu-to-prevent-buffer.patch
  (git-fixes CVE-2025-39987 bsc#1252079).
- Update
  patches.suse/can-mcba_usb-populate-ndo_change_mtu-to-prevent-buff.patch
  (git-fixes CVE-2025-39985 bsc#1252082).
- Update
  patches.suse/can-peak_usb-fix-shift-out-of-bounds-issue.patch
  (git-fixes CVE-2025-40020 bsc#1252679).
- Update
  patches.suse/can-sun4i_can-populate-ndo_change_mtu-to-prevent-buf.patch
  (git-fixes CVE-2025-39986 bsc#1252078).
- Update
  patches.suse/clk-imx-clk-imx8mp-improve-error-handling-in-im.patch
  (bsc#1012628 CVE-2023-53704 bsc#1252490).
- Update
  patches.suse/clocksource-drivers-cadence-ttc-Fix-memory-leak.patch
  (bsc#1012628 CVE-2023-53725 bsc#1252492).
- Update
  patches.suse/crypto-essiv-Check-ssize-for-decryption-and-in-place.patch
  (git-fixes CVE-2025-40019 bsc#1252678).
- Update
  patches.suse/crypto-hisilicon-qm-set-NULL-to-qm-debug.qm_diff_reg.patch
  (git-fixes CVE-2025-40062 bsc#1252850).
- Update
  patches.suse/drm-amdgpu-Fix-integer-overflow-in-amdgpu_cs_p.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-53707
  bsc#1252632).
- Update
  patches.suse/drm-gma500-Fix-null-dereference-in-hdmi-teardown.patch
  (git-fixes CVE-2025-40011 bsc#1252336).
- Update
  patches.suse/drm-sched-Fix-potential-double-free-in-drm_sched_job.patch
  (git-fixes CVE-2025-40096 bsc#1252902).
- Update
  patches.suse/fbcon-fix-integer-overflow-in-fbcon_do_set_font.patch
  (git-fixes CVE-2025-39967 bsc#1252033).
- Update
  patches.suse/fs-udf-fix-OOB-read-in-lengthAllocDescs-handling.patch
  (git-fixes CVE-2025-40044 bsc#1252785).
- Update
  patches.suse/hfsplus-fix-slab-out-of-bounds-read-in-hfsplus_strcasecmp.patch
  (git-fixes CVE-2025-40088 bsc#1252904).
- Update
  patches.suse/hfsplus-fix-slab-out-of-bounds-read-in-hfsplus_uni2asc_followup.patch
  (git-fixes CVE-2025-40082 bsc#1252775).
- Update
  patches.suse/iommu-vt-d-Disallow-dirty-tracking-if-incoherent-pag.patch
  (git-fixes CVE-2025-40058 bsc#1252854).
- Update
  patches.suse/md-raid1-fix-potential-OOB-in-raid1_remove_disk-8b04.patch
  (jsc#PED-7542 CVE-2023-53722 bsc#1252499).
- Update
  patches.suse/media-b2c2-Fix-use-after-free-causing-by-irq_check_w.patch
  (git-fixes CVE-2025-39996 bsc#1252065).
- Update
  patches.suse/media-i2c-tc358743-Fix-use-after-free-bugs-caused-by.patch
  (git-fixes CVE-2025-39995 bsc#1252064).
- Update
  patches.suse/media-rc-fix-races-with-imon_disconnect.patch
  (git-fixes CVE-2025-39993 bsc#1252070).
- Update
  patches.suse/media-tuner-xc5000-Fix-use-after-free-in-xc5000_rele.patch
  (git-fixes CVE-2025-39994 bsc#1252072).
- Update
  patches.suse/media-uvcvideo-Mark-invalid-entities-with-id-UVC_INV.patch
  (git-fixes CVE-2025-40016 bsc#1252346).
- Update
  patches.suse/misc-fastrpc-fix-possible-map-leak-in-fastrpc_put_ar.patch
  (git-fixes CVE-2025-40036 bsc#1252865).
- Update
  patches.suse/net-nfc-nci-Add-parameter-validation-for-packet-data.patch
  (git-fixes CVE-2025-40043 bsc#1252787).
- Update
  patches.suse/net-sched-cls_u32-Undo-tcf_bind_filter-if-u32_r.patch
  (bsc#1012628 CVE-2023-53733 bsc#1252685).
- Update
  patches.suse/net-sched-fq_pie-avoid-stalls-in-fq_pie_timer.patch
  (bsc#1220419 CVE-2023-53727 bsc#1252566).
- Update
  patches.suse/netlink-fix-potential-deadlock-in-netlink_set_e.patch
  (bsc#1012628 CVE-2023-53731 bsc#1252481).
- Update
  patches.suse/nvdimm-Fix-memleak-of-pmu-attr_groups-in-unregister_-85ae.patch
  (jsc#PED-5853 CVE-2023-53697 bsc#1252534).
- Update
  patches.suse/posix-timers-Ensure-timer-ID-search-loop-limit-.patch
  (bsc#1012628 CVE-2023-53728 bsc#1252668).
- Update
  patches.suse/ring-buffer-Do-not-swap-cpu_buffer-during-resi.patch
  (bsc#1012628 CVE-2023-53718 bsc#1252564).
- Update
  patches.suse/riscv-move-memblock_allow_resize-after-linear-m.patch
  (bsc#1012628 CVE-2023-53699 bsc#1252550).
- Update
  patches.suse/smb-client-fix-crypto-buffers-in-non-linear-memory.patch
  (bsc#1250491 boo#1239206 CVE-2025-40052 bsc#1252851).
- Update
  patches.suse/soc-qcom-qmi_encdec-Restrict-string-length-in-decode.patch
  (git-fixes CVE-2023-53729 bsc#1252496).
- Update
  patches.suse/tty-n_gsm-Don-t-block-input-queue-by-waiting-MSC.patch
  (git-fixes CVE-2025-40071 bsc#1252797).
- Update
  patches.suse/wifi-ath11k-fix-NULL-dereference-in-ath11k_qmi_m3_lo.patch
  (git-fixes CVE-2025-39991 bsc#1252075).
- Update
  patches.suse/wifi-ath12k-Fix-a-NULL-pointer-dereference-in-ath12k.patch
  (git-fixes CVE-2023-53721 bsc#1252561).
- Update
  patches.suse/xfrm-xfrm_alloc_spi-shouldn-t-use-0-as-SPI.patch
  (CVE-2025-39797 bsc#1249608 CVE-2025-39965 bsc#1251967).
- Update
  patches.suse/xsk-fix-refcount-underflow-in-error-path.patch
  (bsc#1012628 CVE-2023-53698 bsc#1252479).
- commit 9042362</changelog>
  <changelog author="joao.povoas@suse.com" date="1762171202">- Update
  patches.suse/fbdev-simplefb-Fix-use-after-free-in-simplefb_detach.patch
  (git-fixes CVE-2025-40037 bsc#1252819).
- Update
  patches.suse/ixgbe-fix-too-early-devlink_free-in-ixgbe_remove.patch
  (git-fixes CVE-2025-40091 bsc#1252915).
- Update
  patches.suse/ixgbevf-fix-mailbox-API-compatibility-by-negotiating.patch
  (bsc#1247222 CVE-2025-40104 bsc#1252921).
- commit 7ff6ed4</changelog>
  <changelog author="clopez@suse.de" date="1762171203">- KVM: x86: Replace static_call_cond() with static_call()
  (git-fixes).
- commit 6bb685c</changelog>
  <changelog author="clopez@suse.de" date="1762171204">- KVM: x86: Introduce kvm_x86_call() to simplify static calls
  of kvm_x86_ops (git-fixes).
- Refresh
  patches.suse/KVM-x86-Don-t-inject-PV-async-PF-if-SEND_ALWAYS-0-an.patch.
- Refresh
  patches.suse/KVM-x86-Exit-to-userspace-if-fastpath-triggers-one-o.patch.
- Refresh patches.suse/KVM-x86-Introduce-kvm_set_mp_state.patch.
- Refresh
  patches.suse/KVM-x86-Route-non-canonical-checks-in-emulator-throu.patch.
- Refresh
  patches.suse/KVM-x86-model-canonical-checks-more-precisely.patch.
- commit 3454959</changelog>
  <changelog author="wqu@suse.com" date="1762257600">- btrfs: fix the incorrect max_bytes value for
  find_lock_delalloc_range() (git-fixes).
- commit 91a9728</changelog>
  <changelog author="jgross@suse.com" date="1762257601">- vhost: vringh: Modify the return value check (CVE-2025-40051
  bsc#1252858).
- commit 80d9f20</changelog>
  <changelog author="clopez@suse.de" date="1762257602">- Delete
  patches.kabi/KVM-x86-pmu-Allow-programming-events-that-match-unsu.patch.
  This avoids a kbuild error in check-patchrv. This patch is not needed
  anyway since 4f5efb71e1f4.
- commit 624b1b2</changelog>
  <changelog author="msuchanek@suse.de" date="1762344000">- kernel-subpackage-spec: Do not doubly-sign modules (bsc#1251930).
- commit 0f034b6</changelog>
</package>
<package pkgid="c1e599c97165d15a0dc45c67302dcb394cba825e27e35f31dd6c2b6480ce9660" name="kernel-macros" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="150700.53.25.1"/>
  <changelog author="mkubecek@suse.cz" date="1764072000">- net: dst: annotate data-races around dst-&gt;output (CVE-2025-40074
  bsc#1252794).
- commit a54672b</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072001">- net: dst: add four helpers to annotate data-races around
  dst-&gt;dev (CVE-2025-40074 bsc#1252794).
- commit d644653</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072002">- ipv4: adopt dst_dev, skb_dst_dev and skb_dst_dev_net[_rcu]
  (CVE-2025-40074 bsc#1252794).
- commit 172fe2b</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072003">- ipv6: adopt dst_dev() helper (CVE-2025-40074 bsc#1252794).
- refresh patches.suse/net-ip6_tunnel-Prevent-perpetual-tunnel-growth.patch
- commit 7eda2f1</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072004">- ipv6: adopt skb_dst_dev() and skb_dst_dev_net[_rcu]() helpers
  (CVE-2025-40074 bsc#1252794).
- commit bef51be</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072005">- ipv6: ip6_mc_input() and ip6_mr_input() cleanups (CVE-2025-40074
  bsc#1252794).
- commit 74e34e6</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072006">- net: Add locking to protect skb-&gt;dev access in ip_output
  (CVE-2025-40074 bsc#1252794).
- commit ba856a3</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072007">- net: dst: introduce dst-&gt;dev_rcu (CVE-2025-40074 bsc#1252794).
- commit bc25dd4</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072008">- kabi: hide dst_entry::dev_rcu (CVE-2025-40074 bsc#1252794).
- commit 7047515</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072009">- ipv4: start using dst_dev_rcu() (CVE-2025-40074 bsc#1252794).
- commit d58640c</changelog>
  <changelog author="rbm@suse.com" date="1764072010">- selftests: net: lib: Do not overwrite error messages
  (bsc#1254235).
- selftests: net: lib: fix shift count out of range (bsc#1254235).
- selftests: net: lib: Move logging from forwarding/lib.sh here
  (bsc#1254235).
- selftests: net: add helper for checking if nettest is available
  (bsc#1254235).
- selftests: net: lib: kill PIDs before del netns (bsc#1254235).
- selftests: lib: tc_rule_stats_get(): Move default to argument
  definition (bsc#1254235).
- selftests: net: lib: remove 'ns' var in setup_ns (bsc#1254235).
- selftests: net: lib: do not set ns var as readonly
  (bsc#1254235).
- selftests: net: lib: remove ns from list after clean-up
  (bsc#1254235).
- selftests: net: lib: ignore possible errors (bsc#1254235).
- selftests: net: lib: set 'i' as local (bsc#1254235).
- selftests: net: lib: avoid error removing empty netns name
  (bsc#1254235).
- selftests: net: lib: support errexit with busywait
  (bsc#1254235).
- selftests/net: use tc rule to filter the na packet
  (bsc#1254235).
- selftests/net/lib: no need to record ns name if it already exist
  (bsc#1254235).
- selftests: net: Unify code of busywait() and slowwait()
  (bsc#1254235).
- selftests: forwarding: Add a test for testing lib.sh
  functionality (bsc#1254235).
- selftests: forwarding: Support for performance sensitive tests
  (bsc#1254235).
- selftests: forwarding: Convert log_test() to recognize RET
  values (bsc#1254235).
- selftests: forwarding: Have RET track kselftest framework
  constants (bsc#1254235).
- selftests: lib: Define more kselftest exit codes (bsc#1254235).
- selftests: forwarding: Change inappropriate log_test_skip()
  calls (bsc#1254235).
- selftests: forwarding.config.sample: Move overrides to lib.sh
  (bsc#1254235).
- selftests: net: libs: Change variable fallback syntax
  (bsc#1254235).
- selftests: forwarding: Parametrize mausezahn delay
  (bsc#1254235).
- selftests/net/forwarding: add slowwait functions (bsc#1254235).
- selftests: forwarding: Remove duplicated lib.sh content
  (bsc#1254235).
- selftests: forwarding: Redefine relative_path variable
  (bsc#1254235).
- selftests: net: List helper scripts in TEST_FILES Makefile
  variable (bsc#1254235).
- selftests/net/lib: update busywait timeout value (bsc#1254235).
- selftests: forwarding: Avoid failures to source net/lib.sh
  (bsc#1254235).
- selftests/net: add variable NS_LIST for lib.sh (bsc#1254235).
- selftests/net: add lib.sh (bsc#1254235).
- commit 3a99ca1</changelog>
  <changelog author="tzimmermann@suse.com" date="1764158400">- drm/xe: Don't allow evicting of BOs in same VM in array of VM binds (bsc#1252923 CVE-2025-40086)
- commit aa2fe0b</changelog>
  <changelog author="tzimmermann@suse.com" date="1764158401">- Fix "drm/xe: Don't allow evicting of BOs in same VM in array of VM binds" (bsc#1252923)
  Fix the following compiler warning:
  * no semicolon at end of struct or union in ../drivers/gpu/drm/xe/xe_vm_types.h
  In file included from ../drivers/gpu/drm/xe/xe_bb.c:16:0:
  ../drivers/gpu/drm/xe/xe_vm_types.h:393:1: warning: no semicolon at end of struct or union
- commit 38ee821</changelog>
  <changelog author="joao.povoas@suse.com" date="1764158402">- Update
  patches.suse/ASoC-Intel-bytcr_rt5640-Fix-invalid-quirk-input-mapp.patch
  (git-fixes CVE-2025-40154 bsc#1253431).
- Update
  patches.suse/ASoC-Intel-bytcr_rt5651-Fix-invalid-quirk-input-mapp.patch
  (git-fixes CVE-2025-40121 bsc#1253367).
- Update
  patches.suse/Bluetooth-ISO-Fix-possible-UAF-on-iso_conn_free.patch
  (git-fixes CVE-2025-40141 bsc#1253352).
- Update
  patches.suse/EDAC-i10nm-Skip-DIMM-enumeration-on-a-disabled-memor.patch
  (git-fixes CVE-2025-40157 bsc#1253423).
- Update
  patches.suse/PM-devfreq-mtk-cci-Fix-potential-error-pointer-deref.patch
  (git-fixes CVE-2025-40156 bsc#1253428).
- Update
  patches.suse/Squashfs-reject-negative-file-sizes-in-squashfs_read_inode.patch
  (git-fixes CVE-2025-40200 bsc#1253448).
- Update
  patches.suse/accel-qaic-Treat-remaining-0-as-error-in-find_and_ma.patch
  (git-fixes CVE-2025-40172 bsc#1253424).
- Update
  patches.suse/bpf-Fix-metadata_dst-leak-__bpf_redirect_neigh_v-4-6.patch
  (git-fixes CVE-2025-40183 bsc#1253441).
- Update
  patches.suse/btrfs-avoid-potential-out-of-bounds-in-btrfs_encode_.patch
  (git-fixes CVE-2025-40205 bsc#1253456).
- Update
  patches.suse/can-hi311x-fix-null-pointer-dereference-when-resumin.patch
  (stable-fixes CVE-2025-40107 bsc#1253018).
- Update
  patches.suse/cpufreq-intel_pstate-Fix-object-lifecycle-issue-in-update_qos_request.patch
  (stable-fixes git-fixes CVE-2025-40194 bsc#1253445).
- Update
  patches.suse/crypto-rng-Ensure-set_ent-is-always-present.patch
  (git-fixes CVE-2025-40109 bsc#1253176).
- Update
  patches.suse/drm-vmwgfx-Fix-Use-after-free-in-validation.patch
  (git-fixes CVE-2025-40111 bsc#1253362).
- Update
  patches.suse/drm-vmwgfx-Fix-a-null-ptr-access-in-the-cursor-snoop.patch
  (git-fixes CVE-2025-40110 bsc#1253275).
- Update
  patches.suse/ext4-avoid-potential-buffer-over-read-in-parse_apply.patch
  (git-fixes CVE-2025-40198 bsc#1253453).
- Update
  patches.suse/hwrng-ks-sa-fix-division-by-zero-in-ks_sa_rng_init.patch
  (git-fixes CVE-2025-40127 bsc#1253369).
- Update
  patches.suse/mailbox-zynqmp-ipi-Fix-out-of-bounds-access-in-mailb.patch
  (git-fixes CVE-2025-40180 bsc#1253440).
- Update
  patches.suse/media-v4l2-subdev-Fix-alloc-failure-check-in-v4l2_su.patch
  (git-fixes CVE-2025-40207 bsc#1253395).
- Update
  patches.suse/net-usb-Remove-disruptive-netif_wake_queue-in-rtl815.patch
  (git-fixes CVE-2025-40140 bsc#1253349).
- Update
  patches.suse/net-usb-asix-hold-PM-usage-ref-to-avoid-PM-MDIO-RTNL.patch
  (git-fixes CVE-2025-40120 bsc#1253360).
- Update
  patches.suse/nvmet-fc-move-lsop-put-work-to-nvmet_fc_ls_req_op.patch
  (bsc#1245193 bsc#1247500 CVE-2025-40171 bsc#1253412).
- Update
  patches.suse/pwm-berlin-Fix-wrong-register-in-suspend-resume.patch
  (git-fixes CVE-2025-40188 bsc#1253449).
- Update
  patches.suse/scsi-mpt3sas-Fix-crash-in-transport-port-remove-by-using-i.patch
  (git-fixes CVE-2025-40115 bsc#1253318).
- Update
  patches.suse/scsi-pm80xx-Fix-array-index-out-of-of-bounds-on-rmmod.patch
  (git-fixes CVE-2025-40118 bsc#1253363).
- Update
  patches.suse/sunrpc-fix-null-pointer-dereference-on-zero-length-checksum.patch
  (git-fixes CVE-2025-40129 bsc#1253472).
- Update
  patches.suse/tcp-Don-t-call-reqsk_fastopen_remove-in-tcp_conn_request.patch
  (git-fixes CVE-2025-40186 bsc#1253438).
- Update
  patches.suse/usb-host-max3421-hcd-Fix-error-pointer-dereference-i.patch
  (git-fixes CVE-2025-40116 bsc#1253324).
- Update
  patches.suse/usbnet-Fix-using-smp_processor_id-in-preemptible-cod.patch
  (git-fixes CVE-2025-40164 bsc#1253407).
- commit d8d3cd1</changelog>
  <changelog author="mkubecek@suse.cz" date="1764158403">- tcp_metrics: use dst_dev_net_rcu() (CVE-2025-40075 bsc#1252795).
- commit fcb52d9</changelog>
  <changelog author="mkubecek@suse.cz" date="1764158404">- smc: Fix use-after-free in __pnet_find_base_ndev()
  (CVE-2025-40064 bsc#1252845).
- commit 2971b90</changelog>
  <changelog author="mkubecek@suse.cz" date="1764158405">- smc: Use __sk_dst_get() and dst_dev_rcu() in in
  smc_clc_prfx_set() (CVE-2025-40139 bsc#1253409).
- commit a7ae1b3</changelog>
  <changelog author="mkubecek@suse.cz" date="1764158406">- smc: Use __sk_dst_get() and dst_dev_rcu() in
  smc_clc_prfx_match() (CVE-2025-40168 bsc#1253427).
- commit 0f10629</changelog>
  <changelog author="mkubecek@suse.cz" date="1764158407">- tls: Use __sk_dst_get() and dst_dev_rcu() in
  get_netdev_for_sock() (CVE-2025-40149 bsc#1253355).
- commit c8fb6ed</changelog>
  <changelog author="hare@suse.de" date="1764244800">- KVM: s390: kABI backport for 'last_sleep_cpu' (bsc#1252352).
- KVM: s390: improve interrupt cpu for wakeup (bsc#1235463).
- commit d323daf</changelog>
</package>
<package pkgid="62a5826dc14fafb45281549804d2c1d327d928f968f56574873359b3407503e7" name="kernel-macros" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="150700.53.28.1"/>
  <changelog author="joao.povoas@suse.com" date="1768219200">- Update
  patches.suse/1260-drm-amdkfd-Add-missing-gfx11-MQD-manager-callbacks.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-54261
  bsc#1255879).
- Update
  patches.suse/ACPI-video-Fix-use-after-free-in-acpi_video_switch_b.patch
  (git-fixes CVE-2025-40211 bsc#1254126).
- Update
  patches.suse/ALSA-dice-fix-buffer-overflow-in-detect_stream_forma.patch
  (git-fixes CVE-2025-68346 bsc#1255603).
- Update
  patches.suse/ALSA-firewire-motu-add-bounds-check-in-put_user-loop.patch
  (git-fixes CVE-2025-68753 bsc#1256238).
- Update
  patches.suse/ALSA-firewire-motu-fix-buffer-overflow-in-hwdep-read.patch
  (git-fixes CVE-2025-68347 bsc#1255706).
- Update
  patches.suse/ALSA-hda-cs35l41-Fix-NULL-pointer-dereference-in-cs3-c34b04c.patch
  (git-fixes CVE-2025-68345 bsc#1255601).
- Update
  patches.suse/ALSA-pcm-Fix-potential-data-race-at-PCM-memory-.patch
  (bsc#1012628 CVE-2023-54072 bsc#1256291).
- Update
  patches.suse/ALSA-usb-audio-Fix-NULL-pointer-dereference-in-snd_u.patch
  (git-fixes CVE-2025-40275 bsc#1254829).
- Update
  patches.suse/ALSA-usb-audio-Fix-potential-memory-leaks-at-error-p.patch
  (jsc#PED-6045 jsc#PED-6036 jsc#PED-6104 jsc#PED-6114
  jsc#PED-6067 jsc#PED-6123 CVE-2023-54022 bsc#1255545).
- Update
  patches.suse/ALSA-usb-audio-Fix-potential-overflow-of-PCM-transfe.patch
  (stable-fixes CVE-2025-40269 bsc#1255035).
- Update
  patches.suse/ASoC-codecs-wcd-mbhc-v2-fix-resource-leaks-on-c.patch
  (bsc#1012628 CVE-2023-53842 bsc#1254690).
- Update
  patches.suse/Bluetooth-6lowpan-reset-link-local-header-on-ipv6-re.patch
  (git-fixes CVE-2025-40282 bsc#1254850).
- Update
  patches.suse/Bluetooth-ISO-fix-iso_conn-related-locking-and-.patch
  (bsc#1012628 CVE-2023-54164 bsc#1256071).
- Update
  patches.suse/Bluetooth-MGMT-cancel-mesh-send-timer-when-hdev-remo.patch
  (git-fixes CVE-2025-40284 bsc#1254860).
- Update patches.suse/Bluetooth-SCO-Fix-UAF-on-sco_conn_free.patch
  (stable-fixes CVE-2025-40309 bsc#1255065).
- Update
  patches.suse/Bluetooth-bcsp-receive-data-only-if-registered.patch
  (stable-fixes CVE-2025-40308 bsc#1255064).
- Update
  patches.suse/Bluetooth-btusb-reorder-cleanup-in-btusb_disconnect-.patch
  (git-fixes CVE-2025-40283 bsc#1254858).
- Update
  patches.suse/Bluetooth-hci_conn-return-ERR_PTR-instead-of-NU.patch
  (bsc#1012628 CVE-2023-54038 bsc#1255540).
- Update
  patches.suse/Bluetooth-hci_event-validate-skb-length-for-unknown-.patch
  (git-fixes CVE-2025-40301 bsc#1255193).
- Update
  patches.suse/Bluetooth-hci_sock-Prevent-race-in-socket-write-iter.patch
  (git-fixes CVE-2025-68305 bsc#1255169).
- Update
  patches.suse/Bluetooth-hci_sync-Avoid-use-after-free-in-dbg-.patch
  (bsc#1012628 CVE-2023-54210 bsc#1255955).
- Update
  patches.suse/Bluetooth-hci_sync-Avoid-use-after-free-in-dbg-for-h.patch
  (git-fixes CVE-2023-53828 bsc#1254623).
- Update
  patches.suse/Bluetooth-hci_sync-Fix-UAF-in-hci_disconnect_all_syn.patch
  (git-fixes CVE-2023-53762 bsc#1254606).
- Update
  patches.suse/Bluetooth-hci_sync-fix-race-in-hci_cmd_sync_dequeue_.patch
  (git-fixes CVE-2025-40318 bsc#1254798).
- Update
  patches.suse/FS-JFS-Check-for-read-only-mounted-filesystem-i.patch
  (bsc#1012628 CVE-2023-53766 bsc#1255005).
- Update
  patches.suse/HID-hidraw-fix-data-race-on-device-refcount.patch
  (bsc#1012628 CVE-2023-53759 bsc#1254663).
- Update
  patches.suse/HID-uclogic-Correct-devm-device-reference-for-hidinp.patch
  (git-fixes CVE-2023-54207 bsc#1255961).
- Update
  patches.suse/HID-wacom-Use-ktime_t-rather-than-int-when-deal.patch
  (bsc#1012628 CVE-2023-53797 bsc#1254733).
- Update
  patches.suse/Input-cros_ec_keyb-fix-an-invalid-memory-access.patch
  (stable-fixes CVE-2025-40263 bsc#1255077).
- Update
  patches.suse/Input-imx_sc_key-fix-memory-corruption-on-unload.patch
  (git-fixes CVE-2025-40262 bsc#1254840).
- Update
  patches.suse/Input-pegasus-notetaker-fix-potential-out-of-bounds-.patch
  (git-fixes CVE-2025-68217 bsc#1255221).
- Update
  patches.suse/KVM-SVM-Get-source-vCPUs-from-source-VM-for-SEV-ES-i.patch
  (git-fixes CVE-2023-54296 bsc#1255793).
- Update
  patches.suse/KVM-s390-pv-fix-index-value-of-replaced-ASCE.patch
  (bsc#1012628 CVE-2023-54092 bsc#1256370).
- Update patches.suse/MIPS-KVM-Fix-NULL-pointer-dereference.patch
  (bsc#1012628 CVE-2023-54241 bsc#1255838).
- Update patches.suse/NFSD-Fix-crash-in-nfsd4_read_release.patch
  (git-fixes CVE-2025-40324 bsc#1254791).
- Update
  patches.suse/NFSD-free-copynotify-stateid-in-nfs4_free_ol_stateid.patch
  (git-fixes CVE-2025-40273 bsc#1254828).
- Update patches.suse/PCI-DOE-Fix-destroy_work_on_stack-race.patch
  (git-fixes CVE-2023-54235 bsc#1255921).
- Update
  patches.suse/PCI-Free-released-resource-after-coalescing.patch
  (git-fixes CVE-2023-53743 bsc#1254782).
- Update
  patches.suse/PCI-IOV-Add-PCI-rescan-remove-locking-when-enabling-.patch
  (git-fixes CVE-2025-40219 bsc#1254518).
- Update
  patches.suse/PCI-cadence-Check-for-the-existence-of-cdns_pcie-ops.patch
  (stable-fixes CVE-2025-68176 bsc#1255329).
- Update
  patches.suse/RDMA-bnxt_re-Prevent-handling-any-completions-a.patch
  (bsc#1012628 CVE-2023-54048 bsc#1256395).
- Update
  patches.suse/RDMA-efa-Fix-wrong-resources-deallocation-order.patch
  (git-fixes CVE-2023-54201 bsc#1255964).
- Update
  patches.suse/RDMA-irdma-Fix-data-race-on-CQP-completion-stat.patch
  (bsc#1012628 CVE-2023-54302 bsc#1255792).
- Update
  patches.suse/RDMA-irdma-Fix-data-race-on-CQP-request-done.patch
  (bsc#1012628 CVE-2023-54292 bsc#1255800).
- Update
  patches.suse/Revert-IB-isert-Fix-incorrect-release-of-isert-conne.patch
  (git-fixes CVE-2023-54219 bsc#1256231).
- Update
  patches.suse/accel-habanalabs-support-mapping-cb-with-vmalloc-bac.patch
  (stable-fixes CVE-2025-40311 bsc#1255068).
- Update
  patches.suse/accel-qaic-Clean-up-integer-overflow-checking-.patch
  (bsc#1012628 CVE-2023-53778 bsc#1254761).
- Update
  patches.suse/af_unix-Fix-data-race-around-unix_tot_inflight.patch
  (git-fixes CVE-2023-54006 bsc#1255591).
- Update patches.suse/amba-bus-fix-refcount-leak.patch (git-fixes
  CVE-2023-54230 bsc#1255925).
- Update
  patches.suse/amd-amdkfd-resolve-a-race-in-amdgpu_amdkfd_device_fi.patch
  (stable-fixes CVE-2025-40310 bsc#1255041).
- Update
  patches.suse/amdgpu-validate-offset_in_bo-of-drm_amdgpu_gem_.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-53819
  bsc#1254712).
- Update patches.suse/arm64-mm-fix-VA-range-sanity-check.patch
  (bsc#1012628 CVE-2023-53989 bsc#1256302).
- Update
  patches.suse/arm64-set-__exception_irq_entry-with-__irq_entr.patch
  (bsc#1012628 CVE-2023-54322 bsc#1255763).
- Update
  patches.suse/atm-fore200e-Fix-possible-data-race-in-fore200e_open.patch
  (git-fixes CVE-2025-68339 bsc#1255505).
- Update
  patches.suse/audit-fix-possible-soft-lockup-in-__audit_inode_chil.patch
  (git-fixes CVE-2023-54045 bsc#1256285).
- Update
  patches.suse/autofs-fix-memory-leak-of-waitqueues-in-autofs_catat.patch
  (git-fixes CVE-2023-54134 bsc#1256106).
- Update
  patches.suse/backlight-led-bl-Add-devlink-to-supplier-LEDs.patch
  (git-fixes CVE-2025-68758 bsc#1255944).
- Update
  patches.suse/bcache-fixup-btree_cache_wait-list-damage.patch
  (bsc#1012628 CVE-2023-54293 bsc#1255801).
- Update patches.suse/binder-fix-memory-leak-in-binder_init.patch
  (bsc#1012628 CVE-2023-54005 bsc#1255629).
- Update
  patches.suse/blk-cgroup-Fix-NULL-deref-caused-by-blkg_policy_data-being-installed-before-init.patch
  (bsc#1216062 CVE-2023-54271 bsc#1255902).
- Update
  patches.suse/blk-cgroup-hold-queue_lock-when-removing-blkg-.patch
  (bsc#1012628 CVE-2023-54088 bsc#1256263).
- Update
  patches.suse/blk-mq-fix-tags-leak-when-shrink-nr_hw_queues.patch
  (bsc#1216436 CVE-2023-54227 bsc#1255952).
- Update
  patches.suse/block-fix-blktrace-debugfs-entries-leakage.patch
  (bsc#1012628 CVE-2023-54209 bsc#1255963).
- Update
  patches.suse/block-rq_qos-protect-rq_qos-apis-with-a-new-loc.patch
  (bsc#1012628 CVE-2023-53823 bsc#1254691).
- Update
  patches.suse/bpf-Address-KCSAN-report-on-bpf_lru_list.patch
  (bsc#1012628 CVE-2023-54283 bsc#1255809).
- Update
  patches.suse/bpf-Disable-preemption-in-bpf_event_output.patch
  (bsc#1012628 CVE-2023-54173 bsc#1255996).
- Update
  patches.suse/bpf-Disable-preemption-in-bpf_perf_event_outpu.patch
  (bsc#1012628 CVE-2023-54303 bsc#1255785).
- Update
  patches.suse/bpf-Fix-issue-in-verifying-allow_ptr_leaks.patch
  (jsc#PED-6811 CVE-2023-54181 bsc#1255988).
- Update
  patches.suse/bpf-Silence-a-warning-in-btf_type_id_size.patch
  (bsc#1012628 CVE-2023-54247 bsc#1255892).
- Update
  patches.suse/bpf-bpf_sk_storage-Fix-invalid-wait-context-lockdep-.patch
  (jsc#PED-6811 CVE-2023-53857 bsc#1254648).
- Update
  patches.suse/bpf-drop-unnecessary-user-triggerable-WARN_ONCE.patch
  (bsc#1012628 CVE-2023-54145 bsc#1256090).
- Update
  patches.suse/bpf-sockmap-Fix-skb-refcnt-race-after-locking-change.patch
  (jsc#PED-6811 CVE-2023-53836 bsc#1254693).
- Update
  patches.suse/btrfs-fix-incorrect-splitting-in-btrfs_drop_ex.patch
  (bsc#1012628 CVE-2023-54121 bsc#1256267).
- Update
  patches.suse/btrfs-fix-lockdep-splat-and-potential-deadlock-after.patch
  (git-fixes CVE-2023-54224 bsc#1255951).
- Update
  patches.suse/btrfs-fix-race-between-balance-and-cancel-pause.patch
  (bsc#1012628 CVE-2023-54023 bsc#1256301).
- Update
  patches.suse/btrfs-fix-race-when-deleting-free-space-root-fr.patch
  (bsc#1012628 CVE-2023-54067 bsc#1256369).
- Update
  patches.suse/btrfs-fix-race-when-deleting-quota-root-from-th.patch
  (bsc#1012628 CVE-2023-54032 bsc#1255617).
- Update
  patches.suse/btrfs-fix-warning-when-putting-transaction-with.patch
  (bsc#1012628 CVE-2023-53865 bsc#1254762).
- Update
  patches.suse/btrfs-release-path-before-inode-lookup-during-the-in.patch
  (git-fixes CVE-2023-54281 bsc#1255820).
- Update
  patches.suse/btrfs-remove-BUG_ON-s-in-add_new_free_space.patch
  (bsc#1012628 CVE-2023-54185 bsc#1255984).
- Update
  patches.suse/btrfs-set-page-extent-mapped-after-read_folio-in-rel.patch
  (git-fixes CVE-2023-54253 bsc#1255891).
- Update
  patches.suse/btrfs-zoned-fix-memory-leak-after-finding-block.patch
  (bsc#1012628 CVE-2023-54297 bsc#1255795).
- Update
  patches.suse/btrfs-zoned-skip-splitting-and-logical-rewriting-on-.patch
  (bsc#1223731 CVE-2024-26944 CVE-2023-54080 bsc#1256367).
- Update
  patches.suse/can-gs_usb-gs_usb_xmit_callback-fix-handling-of-fail.patch
  (git-fixes CVE-2025-68307 bsc#1255146).
- Update
  patches.suse/can-kvaser_usb-leaf-Fix-potential-infinite-loop-in-c.patch
  (git-fixes CVE-2025-68308 bsc#1255149).
- Update
  patches.suse/cifs-fix-potential-oops-in-cifs_oplock_break.patch
  (bsc#1012628 CVE-2023-54258 bsc#1255886).
- Update
  patches.suse/cifs-fix-session-state-check-in-reconnect-to-a.patch
  (bsc#1012628 CVE-2023-53794 bsc#1255163).
- Update
  patches.suse/clk-clocking-wizard-Fix-Oops-in-clk_wzrd_regist.patch
  (bsc#1012628 CVE-2023-53807 bsc#1254724).
- Update
  patches.suse/clk-imx93-fix-memory-leak-and-missing-unwind-go.patch
  (bsc#1012628 CVE-2023-54221 bsc#1255842).
- Update
  patches.suse/comedi-c6xdigio-Fix-invalid-PNP-driver-unregistratio.patch
  (git-fixes CVE-2025-68332 bsc#1255483).
- Update
  patches.suse/comedi-check-device-s-attached-status-in-compat-ioct.patch
  (git-fixes CVE-2025-68257 bsc#1255167).
- Update
  patches.suse/comedi-multiq3-sanitize-config-options-in-multiq3_at.patch
  (git-fixes CVE-2025-68258 bsc#1255182).
- Update
  patches.suse/comedi-pcl818-fix-null-ptr-deref-in-pcl818_ai_cancel.patch
  (git-fixes CVE-2025-68335 bsc#1255480).
- Update
  patches.suse/crypto-api-Use-work-queue-in-crypto_destroy_instance.patch
  (git-fixes CVE-2023-53799 bsc#1254732).
- Update
  patches.suse/crypto-aspeed-fix-double-free-caused-by-devm.patch
  (git-fixes CVE-2025-68172 bsc#1255253).
- Update
  patches.suse/crypto-asymmetric_keys-prevent-overflow-in-asymmetri.patch
  (git-fixes CVE-2025-68724 bsc#1255550).
- Update
  patches.suse/dccp-Fix-out-of-bounds-access-in-DCCP-error-handler.patch
  (bsc#1220419 CVE-2023-53782 bsc#1254758).
- Update
  patches.suse/dccp-fix-data-race-around-dp-dccps_mss_cache.patch
  (bsc#1012628 CVE-2023-53839 bsc#1254655).
- Update
  patches.suse/devlink-report-devlink_port_type_warn-source-de.patch
  (bsc#1012628 CVE-2023-53841 bsc#1255009).
- Update
  patches.suse/dm-don-t-attempt-to-queue-IO-under-RCU-protection-a9ce.patch
  (jsc#PED-7514 CVE-2023-53860 bsc#1254626).
- Update
  patches.suse/dm-fix-a-race-condition-in-retrieve_deps-f600.patch
  (jsc#PED-7514 CVE-2023-54324 bsc#1255759).
- Update
  patches.suse/driver-soc-xilinx-use-_safe-loop-iterator-to-av.patch
  (bsc#1012628 CVE-2023-54101 bsc#1256153).
- Update
  patches.suse/drm-amd-display-Check-NULL-before-accessing.patch
  (stable-fixes CVE-2025-68286 bsc#1255351).
- Update
  patches.suse/drm-amd-display-Fix-NULL-deref-in-debugfs-odm_combin.patch
  (git-fixes CVE-2025-68180 bsc#1255252).
- Update
  patches.suse/drm-amdgpu-Fix-NULL-pointer-dereference-in-VRAM-logi.patch
  (stable-fixes CVE-2025-40288 bsc#1255057).
- Update
  patches.suse/drm-bridge-dw_hdmi-fix-connector-access-for-scd.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-53784
  bsc#1254765).
- Update
  patches.suse/drm-client-Fix-memory-leak-in-drm_client_target.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-54091
  bsc#1256274).
- Update
  patches.suse/drm-i915-Avoid-lock-inversion-when-pinning-to-GGTT-o.patch
  (git-fixes CVE-2025-68244 bsc#1255190).
- Update
  patches.suse/drm-mediatek-Fix-device-use-after-free-on-unbind.patch
  (git-fixes CVE-2025-40316 bsc#1254797).
- Update
  patches.suse/drm-msm-dp-Drop-aux-devices-together-with-DP-co.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-53851
  bsc#1254695).
- Update
  patches.suse/drm-mxsfb-Disable-overlay-plane-in-mxsfb_plane_overl.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-53864
  bsc#1254754).
- Update
  patches.suse/drm-nouveau-kms-nv50-init-hpd_irq_lock-for-PIOR.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-54263
  bsc#1255883).
- Update
  patches.suse/drm-sched-Fix-deadlock-in-drm_sched_entity_kill_jobs.patch
  (git-fixes CVE-2025-40329 bsc#1254621).
- Update patches.suse/drm-tegra-Add-call-to-put_pid.patch
  (git-fixes CVE-2025-68233 bsc#1255206).
- Update
  patches.suse/drm-ttm-Don-t-leak-a-resource-on-eviction-error.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-54254
  bsc#1255890).
- Update
  patches.suse/drm-ttm-Don-t-leak-a-resource-on-swapout-move-e.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-53844
  bsc#1254649).
- Update
  patches.suse/drm-vgem-fence-Fix-potential-deadlock-on-release.patch
  (git-fixes CVE-2025-68757 bsc#1255943).
- Update
  patches.suse/drm-vmwgfx-Validate-command-header-size-against-SVGA.patch
  (git-fixes CVE-2025-40277 bsc#1254894).
- Update
  patches.suse/erofs-kill-hooked-chains-to-avoid-loops-on-dedu.patch
  (bsc#1012628 CVE-2023-53777 bsc#1254749).
- Update
  patches.suse/exfat-use-kvmalloc_array-kvfree-instead-of-kma.patch
  (bsc#1012628 CVE-2023-54194 bsc#1255974).
- Update
  patches.suse/ext4-correct-grp-validation-in-ext4_mb_good_group.patch
  (bsc#1234163 CVE-2023-53861 bsc#1254678).
- Update
  patches.suse/ext4-fix-BUG-in-ext4_mb_new_inode_pa-due-to-overflow.patch
  (bsc#1219165 CVE-2023-54069 bsc#1256371).
- Update
  patches.suse/ext4-fix-rbtree-traversal-bug-in-ext4_mb_use_pr.patch
  (bsc#1012628 CVE-2023-53813 bsc#1254717).
- Update
  patches.suse/ext4-turn-quotas-off-if-mount-failed-after-enab.patch
  (bsc#1012628 CVE-2023-54153 bsc#1256081).
- Update
  patches.suse/f2fs-fix-to-do-sanity-check-on-direct-node-in-.patch
  (bsc#1012628 CVE-2023-53846 bsc#1254983).
- Update
  patches.suse/fbcon-Set-fb_display-i-mode-to-NULL-when-the-mode-is.patch
  (stable-fixes CVE-2025-40323 bsc#1255094).
- Update
  patches.suse/fbdev-Add-bounds-checking-in-bit_putcs-to-fix-vmallo.patch
  (stable-fixes CVE-2025-40304 bsc#1255034).
- Update
  patches.suse/fbdev-bitblit-bound-check-glyph-index-in-bit_putcs.patch
  (stable-fixes CVE-2025-40322 bsc#1255092).
- Update
  patches.suse/firmware-meson_sm-fix-to-avoid-potential-NULL-pointe.patch
  (git-fixes CVE-2023-54304 bsc#1255786).
- Update
  patches.suse/firmware-stratix10-svc-fix-bug-in-saving-controller-.patch
  (git-fixes CVE-2025-68328 bsc#1255489).
- Update
  patches.suse/fs-Protect-reconfiguration-of-sb-read-write-fr.patch
  (bsc#1012628 CVE-2023-54099 bsc#1256197).
- Update
  patches.suse/fs-jfs-prevent-double-free-in-dbUnmount-after-failed-jfs_remount.patch
  (git-fixes CVE-2023-54127 bsc#1256119).
- Update
  patches.suse/fs-ntfs3-Return-error-for-inconsistent-extende.patch
  (bsc#1012628 CVE-2023-54125 bsc#1256117).
- Update
  patches.suse/fs-sysv-Null-check-to-prevent-null-ptr-deref-b.patch
  (bsc#1012628 CVE-2023-54264 bsc#1255872).
- Update
  patches.suse/gpu-host1x-Fix-race-in-syncpt-alloc-free.patch
  (git-fixes CVE-2025-68732 bsc#1255688).
- Update
  patches.suse/gtp-Fix-use-after-free-in-__gtp_encap_destroy.patch
  (bsc#1012628 CVE-2023-54142 bsc#1256095).
- Update
  patches.suse/hfs-validate-record-offset-in-hfsplus_bmap_alloc.patch
  (git-fixes CVE-2025-40349 bsc#1255280).
- Update
  patches.suse/hfsplus-fix-KMSAN-uninit-value-issue-in-__hfsplus_ext_cache_extent.patch
  (git-fixes CVE-2025-40244 bsc#1255033).
- Update
  patches.suse/hfsplus-fix-KMSAN-uninit-value-issue-in-hfsplus_delete_cat.patch
  (git-fixes CVE-2025-40351 bsc#1255281).
- Update
  patches.suse/hwrng-virtio-Fix-race-on-data_avail-and-actual-.patch
  (bsc#1012628 CVE-2023-53998 bsc#1255578).
- Update
  patches.suse/iavf-use-internal-state-to-free-traffic-IRQs.patch
  (bsc#1012628 CVE-2023-53850 bsc#1254677).
- Update
  patches.suse/ice-prevent-NULL-pointer-deref-during-reload.patch
  (bsc#1012628 CVE-2023-54037 bsc#1255557).
- Update
  patches.suse/igb-clean-up-in-all-error-paths-when-enabling-SR-IOV.patch
  (jsc#PED-4866 CVE-2023-54070 bsc#1256364).
- Update
  patches.suse/igc-Fix-Kernel-Panic-during-ndo_tx_timeout-call.patch
  (bsc#1012628 CVE-2023-54166 bsc#1256074).
- Update
  patches.suse/iio-accel-bmc150-Fix-irq-assumption-regression.patch
  (stable-fixes CVE-2025-68330 bsc#1255493).
- Update
  patches.suse/iio-adc-ina2xx-avoid-NULL-pointer-dereference-.patch
  (bsc#1012628 CVE-2023-53834 bsc#1254660).
- Update
  patches.suse/iio-core-Prevent-invalid-memory-access-when-th.patch
  (bsc#1012628 CVE-2023-54027 bsc#1255579).
- Update
  patches.suse/ima-Handle-error-code-returned-by-ima_filter_rule_ma.patch
  (git-fixes CVE-2025-68740 bsc#1255812).
- Update
  patches.suse/ima-don-t-clear-IMA_DIGSIG-flag-when-setting-or-remo.patch
  (stable-fixes CVE-2025-68183 bsc#1255251).
- Update
  patches.suse/io_uring-net-don-t-overflow-multishot-recv.patch
  (bsc#1215211 CVE-2023-54030 bsc#1255691).
- Update
  patches.suse/iomap-Fix-possible-overflow-condition-in-iomap_write_delalloc_scan.patch
  (jsc#PED-5453 CVE-2023-54285 bsc#1255807).
- Update
  patches.suse/iommufd-IOMMUFD_DESTROY-should-not-increase-the.patch
  (bsc#1012628 CVE-2023-53795 bsc#1254737).
- Update
  patches.suse/iommufd-Set-end-correctly-when-doing-batch-carr.patch
  (bsc#1012628 CVE-2023-54060 bsc#1256379).
- Update
  patches.suse/ionic-remove-WARN_ON-to-prevent-panic_on_warn.patch
  (bsc#1012628 CVE-2023-53994 bsc#1255570).
- Update
  patches.suse/ip6_vti-fix-slab-use-after-free-in-decode_sess.patch
  (bsc#1012628 CVE-2023-53821 bsc#1254669).
- Update
  patches.suse/ipmi-ssif-Fix-a-memory-leak-when-scanning-for-an-ada.patch
  (git-fixes CVE-2023-54064 bsc#1256375).
- Update
  patches.suse/irqchip-mchp-eic-Fix-error-code-in-mchp_eic_domain_a.patch
  (git-fixes CVE-2025-68766 bsc#1255932).
- Update
  patches.suse/isdn-mISDN-hfcsusb-fix-memory-leak-in-hfcsusb_probe.patch
  (git-fixes CVE-2025-68734 bsc#1255538).
- Update
  patches.suse/jfs-Verify-inode-mode-when-loading-from-disk.patch
  (git-fixes CVE-2025-40312 bsc#1255046).
- Update
  patches.suse/jfs-fix-uninitialized-waitqueue-in-transaction-manager.patch
  (git-fixes CVE-2025-68168 bsc#1255100).
- Update
  patches.suse/kcm-Fix-error-handling-for-SOCK_DGRAM-in-kcm_sendmsg.patch
  (bsc#1220419 CVE-2023-53825 bsc#1254707).
- Update
  patches.suse/kcm-Fix-memory-leak-in-error-path-of-kcm_sendmsg.patch
  (bsc#1220419 CVE-2023-54112 bsc#1256354).
- Update
  patches.suse/keys-Fix-linking-a-duplicate-key-to-a-keyring-s.patch
  (bsc#1012628 CVE-2023-54170 bsc#1256045).
- Update
  patches.suse/maple_tree-fix-potential-out-of-bounds-access-i.patch
  (bsc#1012628 CVE-2023-54135 bsc#1256107).
- Update
  patches.suse/md-fix-warning-for-holder-mismatch-from-export_rdev.patch
  (git-fixes CVE-2023-53791 bsc#1254742).
- Update
  patches.suse/md-raid5-cache-fix-a-deadlock-in-r5l_exit_log-a705.patch
  (jsc#PED-7542 CVE-2023-53848 bsc#1254753).
- Update
  patches.suse/media-af9005-Fix-null-ptr-deref-in-af9005_i2c_xfer.patch
  (git-fixes CVE-2023-54314 bsc#1255776).
- Update
  patches.suse/media-anysee-fix-null-ptr-deref-in-anysee_master_xfe.patch
  (git-fixes CVE-2023-54093 bsc#1256273).
- Update
  patches.suse/media-dvb-usb-m920x-Fix-a-potential-memory-leak-in-m.patch
  (git-fixes CVE-2023-54266 bsc#1255875).
- Update
  patches.suse/media-dvb-usb-v2-gl861-Fix-null-ptr-deref-in-gl861_i.patch
  (git-fixes CVE-2023-54066 bsc#1256373).
- Update
  patches.suse/media-imon-make-send_packet-more-robust.patch
  (stable-fixes CVE-2025-68194 bsc#1255325).
- Update
  patches.suse/media-mediatek-vcodec-fix-resource-leaks-in-vdec_msg.patch
  (git-fixes CVE-2023-54143 bsc#1256096).
- Update
  patches.suse/media-tuners-qt1010-replace-BUG_ON-with-a-regular-er.patch
  (git-fixes CVE-2023-54282 bsc#1255810).
- Update
  patches.suse/media-v4l2-core-Fix-a-potential-resource-leak-in-v4l.patch
  (git-fixes CVE-2023-54183 bsc#1255990).
- Update
  patches.suse/misc-fastrpc-Fix-dma_buf-object-leak-in-fastrpc_map_.patch
  (git-fixes CVE-2025-68252 bsc#1255197).
- Update
  patches.suse/misc-pci_endpoint_test-Free-IRQs-before-removin.patch
  (bsc#1012628 CVE-2023-54326 bsc#1255758).
- Update
  patches.suse/mm-secretmem-fix-use-after-free-race-in-fault-handle.patch
  (git-fixes CVE-2025-40272 bsc#1254832).
- Update
  patches.suse/mmc-sunplus-fix-return-value-check-of-mmc_add_.patch
  (bsc#1012628 CVE-2023-54204 bsc#1255967).
- Update
  patches.suse/most-usb-Fix-use-after-free-in-hdm_disconnect.patch
  (git-fixes CVE-2025-40223 bsc#1254957).
- Update
  patches.suse/most-usb-fix-double-free-on-late-probe-failure.patch
  (git-fixes CVE-2025-68290 bsc#1255154).
- Update
  patches.suse/most-usb-hdm_probe-Fix-calling-put_device-before-dev.patch
  (git-fixes CVE-2025-68249 bsc#1255233).
- Update
  patches.suse/mt76-mt7615-Fix-memory-leak-in-mt7615_mcu_wtbl_sta_a.patch
  (git-fixes CVE-2025-68765 bsc#1255931).
- Update
  patches.suse/mt76-mt7921-don-t-assume-adequate-headroom-for-SDIO-.patch
  (git-fixes CVE-2023-53785 bsc#1254918).
- Update
  patches.suse/mtd-rawnand-cadence-fix-DMA-device-NULL-pointer-dere.patch
  (git-fixes CVE-2025-68238 bsc#1255202).
- Update
  patches.suse/mtd-rawnand-fsl_upm-Fix-an-off-by-one-test-in-.patch
  (bsc#1012628 CVE-2023-54104 bsc#1256145).
- Update
  patches.suse/mtdchar-fix-integer-overflow-in-read-write-ioctls.patch
  (git-fixes CVE-2025-68237 bsc#1255203).
- Update
  patches.suse/net-core-remove-unnecessary-frame_sz-check-in-.patch
  (bsc#1012628 CVE-2023-54155 bsc#1256083).
- Update
  patches.suse/net-deal-with-integer-overflows-in-kmalloc_reserve.patch
  (bsc#1215146 CVE-2023-42752 CVE-2023-53752 bsc#1254613).
- Update
  patches.suse/net-do-not-allow-gso_size-to-be-set-to-GSO_BY_.patch
  (bsc#1012628 CVE-2023-54051 bsc#1256394).
- Update
  patches.suse/net-dsa-avoid-suspicious-RCU-usage-for-synced-V.patch
  (bsc#1012628 CVE-2023-54149 bsc#1256085).
- Update
  patches.suse/net-dsa-ocelot-call-dsa_tag_8021q_unregister-u.patch
  (bsc#1012628 CVE-2023-53855 bsc#1254688).
- Update
  patches.suse/net-ethernet-mtk_eth_soc-fix-possible-NULL-pointer-d.patch
  (git-fixes CVE-2023-54240 bsc#1255918).
- Update
  patches.suse/net-hns3-fix-deadlock-issue-when-externel_lb-a.patch
  (bsc#1012628 CVE-2023-54000 bsc#1255564).
- Update
  patches.suse/net-ipa-only-reset-hashed-tables-when-supported.patch
  (bsc#1012628 CVE-2023-54225 bsc#1256234).
- Update
  patches.suse/net-ipv4-fix-one-memleak-in-__inet_del_ifa.patch
  (bsc#1220419 CVE-2023-53995 bsc#1255616).
- Update
  patches.suse/net-mlx5-fix-potential-memory-leak-in-mlx5e_in.patch
  (bsc#1012628 CVE-2023-54106 bsc#1256358).
- Update
  patches.suse/net-mlx5e-Move-representor-neigh-cleanup-to-pr.patch
  (bsc#1012628 CVE-2023-54148 bsc#1256084).
- Update
  patches.suse/net-mlx5e-TC-Fix-internal-port-memory-leak.patch
  (bsc#1012628 CVE-2023-53999 bsc#1255621).
- Update
  patches.suse/net-mlx5e-fix-memory-leak-in-mlx5e_ptp_open.patch
  (bsc#1012628 CVE-2023-54169 bsc#1256050).
- Update
  patches.suse/net-mlx5e-xsk-Fix-invalid-buffer-access-for-le.patch
  (bsc#1012628 CVE-2023-54223 bsc#1256233).
- Update
  patches.suse/net-openvswitch-reject-negative-ifindex.patch
  (bsc#1012628 CVE-2023-53843 bsc#1254705).
- Update
  patches.suse/net-prevent-skb-corruption-on-frag-list-segment.patch
  (bsc#1012628 CVE-2023-54094 bsc#1256292).
- Update
  patches.suse/net-read-sk-sk_family-once-in-sk_mc_loop.patch
  (bsc#1220419 CVE-2023-53831 bsc#1254701).
- Update
  patches.suse/net-sched-taprio-Limit-TCA_TAPRIO_ATTR_SCHED_C.patch
  (bsc#1012628 CVE-2023-54251 bsc#1255888).
- Update
  patches.suse/net-smc-use-smc_lgr_list.lock-to-protect-smc_lgr_lis.patch
  (git-fixes CVE-2023-54318 bsc#1255772).
- Update
  patches.suse/net-usb-qmi_wwan-initialize-MAC-header-offset-in-qmi.patch
  (git-fixes CVE-2025-68192 bsc#1255246).
- Update
  patches.suse/netfilter-nf_tables-fix-underflow-in-chain-refe.patch
  (bsc#1012628 CVE-2023-54035 bsc#1255563).
- Update
  patches.suse/netlink-do-not-hard-code-device-address-lenth-i.patch
  (bsc#1012628 CVE-2023-53863 bsc#1254657).
- Update
  patches.suse/nfp-clean-mc-addresses-in-application-firmware-.patch
  (bsc#1012628 CVE-2023-54133 bsc#1256104).
- Update
  patches.suse/nfs4_setup_readdir-insufficient-locking-for-d_parent-d_inode-dereferencing.patch
  (git-fixes CVE-2025-68185 bsc#1255135).
- Update
  patches.suse/nfsd-move-init-of-percpu-reply_cache_stats-coun.patch
  (bsc#1012628 CVE-2023-54276 bsc#1255907).
- Update
  patches.suse/nilfs2-fix-WARNING-in-mark_buffer_dirty-due-to.patch
  (bsc#1012628 CVE-2023-54140 bsc#1256093).
- Update
  patches.suse/nouveau-firmware-Add-missing-kfree-of-nvkm_falcon_fw.patch
  (git-fixes CVE-2025-68235 bsc#1255209).
- Update
  patches.suse/nvme-core-fix-memory-leak-in-dhchap_ctrl_secret.patch
  (bsc#1012628 CVE-2023-53792 bsc#1254743).
- Update
  patches.suse/nvme-core-fix-memory-leak-in-dhchap_secret_stor.patch
  (bsc#1012628 CVE-2023-53852 bsc#1254653).
- Update
  patches.suse/nvme-fc-use-lock-accessing-port_state-and-rport-stat.patch
  (bsc#1245193 bsc#1247500 CVE-2025-40342 bsc#1255274).
- Update
  patches.suse/nvme-multipath-fix-lockdep-WARN-due-to-partition-sca.patch
  (git-fixes bsc#1233640 CVE-2024-53093 CVE-2025-68218
  bsc#1255245).
- Update
  patches.suse/nvmet-fc-avoid-scheduling-association-deletion-twice.patch
  (bsc#1245193 bsc#1247500 CVE-2025-40343 bsc#1255276).
- Update
  patches.suse/of-overlay-Call-of_changeset_init-early.patch
  (git-fixes CVE-2023-53856 bsc#1254661).
- Update
  patches.suse/of-unittest-fix-null-pointer-dereferencing-in-of_uni.patch
  (git-fixes CVE-2023-54178 bsc#1255992).
- Update
  patches.suse/opp-Fix-use-after-free-in-lazy_opp_tables-after.patch
  (bsc#1012628 CVE-2023-54026 bsc#1255549).
- Update
  patches.suse/orangefs-fix-xattr-related-buffer-overflow.patch
  (git-fixes CVE-2025-40306 bsc#1255062).
- Update
  patches.suse/ovl-fix-null-pointer-dereference-in-ovl_get_acl.patch
  (bsc#1012628 CVE-2023-54313 bsc#1255775).
- Update
  patches.suse/pcmcia-rsrc_nonstatic-Fix-memory-leak-in-nonst.patch
  (bsc#1012628 CVE-2023-54115 bsc#1256121).
- Update patches.suse/perf-tool-x86-Fix-perf_env-memory-leak.patch
  (bsc#1012628 CVE-2023-53793 bsc#1254739).
- Update
  patches.suse/phy-tegra-xusb-Clear-the-driver-reference-in-us.patch
  (bsc#1012628 CVE-2023-54083 bsc#1256368).
- Update
  patches.suse/pinctrl-at91-pio4-check-return-value-of-devm_ka.patch
  (bsc#1012628 CVE-2023-54319 bsc#1255760).
- Update
  patches.suse/pinctrl-freescale-Fix-a-memory-out-of-bounds-wh.patch
  (bsc#1012628 CVE-2023-53750 bsc#1254611).
- Update
  patches.suse/pinctrl-s32cc-fix-uninitialized-memory-in-s32_pinctr.patch
  (git-fixes CVE-2025-68222 bsc#1255218).
- Update
  patches.suse/platform-x86-intel-punit_ipc-fix-memory-corruption.patch
  (git-fixes CVE-2025-68303 bsc#1255122).
- Update
  patches.suse/posix-timers-Prevent-RT-livelock-in-itimer_dele.patch
  (bsc#1012628 CVE-2023-53815 bsc#1254715).
- Update patches.suse/powerpc-64s-Fix-VAS-mm-use-after-free.patch
  (bsc#1012628 CVE-2023-54042 bsc#1255702).
- Update
  patches.suse/powerpc-iommu-Fix-notifiers-being-shared-by-PCI-and-.patch
  (bsc#1065729 CVE-2023-54095 bsc#1256271).
- Update
  patches.suse/powerpc-powernv-sriov-perform-null-check-on-iov.patch
  (bsc#1012628 CVE-2023-54315 bsc#1255769).
- Update
  patches.suse/powerpc-pseries-Rework-lppaca_shared_proc-to-avoid-D.patch
  (bsc#1194869 CVE-2023-54267 bsc#1255899).
- Update
  patches.suse/powerpc-pseries-fix-possible-memory-leak-in-ibmebus_.patch
  (bsc#1194869 CVE-2023-54017 bsc#1255605).
- Update patches.suse/pstore-ram-Add-check-for-kstrdup.patch
  (bsc#1012628 CVE-2023-54189 bsc#1255978).
- Update patches.suse/quota-fix-warning-in-dqgrab.patch
  (bsc#1012628 CVE-2023-54177 bsc#1255993).
- Update patches.suse/rcu-dump-vmalloc-memory-info-safely.patch
  (git-fixes CVE-2023-54113 bsc#1256351).
- Update
  patches.suse/rcuscale-Move-rcu_scale_writer-schedule_timeout_unin.patch
  (git-fixes CVE-2023-54246 bsc#1255915).
- Update
  patches.suse/refscale-Fix-uninitalized-use-of-wait_queue_head_t.patch
  (git-fixes CVE-2023-54316 bsc#1255770).
- Update
  patches.suse/regmap-irq-Fix-out-of-bounds-access-when-alloca.patch
  (bsc#1012628 CVE-2023-53768 bsc#1254599).
- Update
  patches.suse/regmap-slimbus-fix-bus_context-pointer-in-regmap-ini.patch
  (git-fixes CVE-2025-40317 bsc#1254796).
- Update
  patches.suse/regulator-core-Protect-regulator_supply_alias_list-w.patch
  (git-fixes CVE-2025-68354 bsc#1255553).
- Update
  patches.suse/regulator-da9063-fix-null-pointer-deref-with-pa.patch
  (bsc#1012628 CVE-2023-53787 bsc#1254750).
- Update patches.suse/rpmsg-glink-Add-check-for-kstrdup.patch
  (git-fixes CVE-2023-54049 bsc#1256396).
- Update
  patches.suse/s390-dcssblk-fix-kernel-crash-with-list_add-corruption.patch
  (git-fixes bsc#1215344 CVE-2023-54117 bsc#1256348).
- Update
  patches.suse/s390-vmem-split-pages-when-debug-pagealloc-is-.patch
  (bsc#1012628 CVE-2023-54278 bsc#1255911).
- Update
  patches.suse/samples-bpf-Fix-buffer-overflow-in-tcp_basertt.patch
  (bsc#1012628 CVE-2023-54312 bsc#1255774).
- Update
  patches.suse/sched-psi-use-kernfs-polling-functions-for-PSI-.patch
  (bsc#1012628 CVE-2023-54019 bsc#1255636).
- Update
  patches.suse/scsi-qedf-Fix-NULL-dereference-in-error-handlin.patch
  (bsc#1012628 CVE-2023-54289 bsc#1255806).
- Update
  patches.suse/scsi-qla2xxx-Array-index-may-go-out-of-bound.patch
  (bsc#1012628 CVE-2023-54179 bsc#1255994).
- Update
  patches.suse/scsi-qla2xxx-Check-valid-rport-returned-by-fc_b.patch
  (bsc#1012628 CVE-2023-54014 bsc#1256300).
- Update
  patches.suse/scsi-target-core-Fix-target_cmd_counter-leak.patch
  (bsc#1214847 CVE-2023-54154 bsc#1256082).
- Update
  patches.suse/serial-8250-Fix-oops-for-port-pm-on-uart_chang.patch
  (bsc#1012628 CVE-2023-54220 bsc#1255949).
- Update patches.suse/serial-sprd-Fix-DMA-buffer-leak-issue.patch
  (git-fixes CVE-2023-54136 bsc#1256099).
- Update
  patches.suse/sfc-fix-crash-when-reading-stats-while-NIC-is-r.patch
  (bsc#1012628 CVE-2023-54156 bsc#1255704).
- Update
  patches.suse/sh-dma-Fix-DMA-channel-offset-calculation.patch
  (bsc#1012628 CVE-2023-54255 bsc#1255884).
- Update patches.suse/smb-client-fix-missed-ses-refcounting.patch
  (bsc#1012628 CVE-2023-54076 bsc#1256335).
- Update
  patches.suse/smb-client-fix-potential-cfid-UAF-in-smb2_query_info_compound.patch
  (bsc#1248886 CVE-2025-40320 bsc#1254793).
- Update patches.suse/soundwire-fix-enumeration-completion.patch
  (bsc#1012628 CVE-2023-54096 bsc#1256178).
- Update patches.suse/spi-tegra210-quad-Fix-timeout-handling.patch
  (bsc#1253155 CVE-2025-68746 bsc#1255722).
- Update
  patches.suse/staging-r8712-Fix-memory-leak-in-_r8712_init_xm.patch
  (bsc#1012628 CVE-2023-54001 bsc#1255628).
- Update
  patches.suse/thermal-of-fix-double-free-on-unregistration.patch
  (bsc#1012628 CVE-2023-53997 bsc#1255632).
- Update
  patches.suse/tpm-tpm_vtpm_proxy-fix-a-race-condition-in-dev-.patch
  (bsc#1012628 CVE-2023-54309 bsc#1255780).
- Update
  patches.suse/tracing-Fix-memory-leak-of-iter-temp-when-readi.patch
  (bsc#1012628 CVE-2023-54171 bsc#1256034).
- Update
  patches.suse/tracing-Fix-warning-in-trace_buffered_event_dis.patch
  (bsc#1012628 CVE-2023-54211 bsc#1255843).
- Update
  patches.suse/tty-serial-samsung_tty-Fix-a-memory-leak-in-s3c.patch
  (bsc#1012628 CVE-2023-53858 bsc#1254704).
- Update
  patches.suse/usb-cdns3-gadget-Use-after-free-during-failed-initia.patch
  (stable-fixes CVE-2025-40314 bsc#1255072).
- Update
  patches.suse/usb-dwc3-Fix-race-condition-between-concurrent-dwc3_.patch
  (git-fixes CVE-2025-68287 bsc#1255152).
- Update
  patches.suse/usb-gadget-f_eem-Fix-memory-leak-in-eem_unwrap.patch
  (git-fixes CVE-2025-68289 bsc#1255155).
- Update
  patches.suse/usb-gadget-f_fs-Fix-epfile-null-pointer-access-after.patch
  (stable-fixes CVE-2025-40315 bsc#1255083).
- Update
  patches.suse/usb-potential-integer-overflow-in-usbg_make_tpg.patch
  (stable-fixes CVE-2025-68750 bsc#1255814).
- Update
  patches.suse/usb-storage-alauda-Fix-uninit-value-in-alauda_.patch
  (bsc#1012628 CVE-2023-53847 bsc#1254698).
- Update
  patches.suse/usb-storage-sddr55-Reject-out-of-bound-new_pba.patch
  (stable-fixes CVE-2025-40345 bsc#1255279).
- Update
  patches.suse/usb-typec-bus-verify-partner-exists-in-typec_altmode.patch
  (git-fixes CVE-2023-54299 bsc#1255789).
- Update
  patches.suse/usb-uas-fix-urb-unmapping-issue-when-the-uas-device-.patch
  (git-fixes CVE-2025-68331 bsc#1255495).
- Update patches.suse/usbnet-Prevents-free-active-kevent.patch
  (git-fixes CVE-2025-68312 bsc#1255171).
- Update
  patches.suse/vdpa-Add-queue-index-attr-to-vdpa_nl_policy-fo.patch
  (bsc#1012628 CVE-2023-54031 bsc#1255583).
- Update patches.suse/vduse-fix-NULL-pointer-dereference.patch
  (bsc#1012628 CVE-2023-54291 bsc#1255798).
- Update
  patches.suse/vfio-type1-fix-cap_migration-information-leak
  (jsc#PED-7779 jsc#PED-7780 CVE-2023-54137 bsc#1256100).
- Update
  patches.suse/virtio-vdpa-Fix-cpumask-memory-leak-in-virtio_.patch
  (bsc#1012628 CVE-2023-54215 bsc#1255957).
- Update
  patches.suse/virtio_pmem-add-the-missing-REQ_OP_WRITE-for-flush-b.patch
  (git-fixes CVE-2023-54089 bsc#1256268).
- Update
  patches.suse/virtio_vdpa-build-affinity-masks-conditionally.patch
  (git-fixes CVE-2023-54008 bsc#1255630).
- Update
  patches.suse/wifi-ath11k-Add-missing-hw_ops-get_ring_selecto.patch
  (bsc#1012628 CVE-2023-54141 bsc#1256094).
- Update patches.suse/wifi-ath11k-fix-peer-HE-MCS-assignment.patch
  (git-fixes CVE-2025-68380 bsc#1255580).
- Update
  patches.suse/wifi-ath11k-fix-registration-of-6Ghz-only-phy-w.patch
  (bsc#1012628 CVE-2023-54229 bsc#1255924).
- Update
  patches.suse/wifi-ath12k-Fix-memory-leak-in-rx_desc-and-tx_desc.patch
  (git-fixes CVE-2023-54016 bsc#1256279).
- Update
  patches.suse/wifi-ath9k-avoid-referencing-uninit-memory-in-a.patch
  (bsc#1012628 CVE-2023-54300 bsc#1255790).
- Update
  patches.suse/wifi-brcmfmac-fix-crash-while-sending-Action-Frames-.patch
  (git-fixes CVE-2025-40321 bsc#1254795).
- Update
  patches.suse/wifi-cfg80211-ocb-don-t-leave-if-not-joined.patch
  (git-fixes CVE-2023-53992 bsc#1256058).
- Update
  patches.suse/wifi-mt76-mt7921-fix-skb-leak-by-txs-missing-i.patch
  (bsc#1012628 CVE-2023-54052 bsc#1256387).
- Update
  patches.suse/wifi-mwifiex-fix-memory-leak-in-mwifiex_histogram_re.patch
  (git-fixes CVE-2023-53808 bsc#1254723).
- Update
  patches.suse/wifi-rsi-Do-not-configure-WoWlan-in-shutdown-ho.patch
  (bsc#1012628 CVE-2023-54025 bsc#1255558).
- Update
  patches.suse/wifi-rtl818x-Fix-potential-memory-leaks-in-rtl8180_i.patch
  (git-fixes CVE-2025-68759 bsc#1255934).
- Update
  patches.suse/wifi-rtl818x-rtl8187-Fix-potential-buffer-underflow-.patch
  (git-fixes CVE-2025-68362 bsc#1255611).
- Update patches.suse/x86-CPU-AMD-Add-RDSEED-fix-for-Zen5.patch
  (git-fixes CVE-2025-68313 bsc#1255415).
- Update
  patches.suse/x86-CPU-AMD-Add-missing-terminator-for-zen5_rdseed_microco.patch
  (git-fixes CVE-2025-68195 bsc#1255259).
- Update
  patches.suse/x86-hyperv-Disable-IBT-when-hypercall-page-lac.patch
  (bsc#1012628 CVE-2023-54172 bsc#1256033).
- Update
  patches.suse/x86-sev-Make-enc_dec_hypercall-accept-a-size-instead-of-npages
  (bsc#1214635 CVE-2023-53996 bsc#1255618).
- Update patches.suse/xen-speed-up-grant-table-reclaim.patch
  (bsc#1012628 CVE-2023-54081 bsc#1256361).
- Update
  patches.suse/xfrm-also-call-xfrm_state_delete_tunnel-at-destroy-time-fo.patch
  (CVE-2025-40215 bsc#1254959 CVE-2025-40256 bsc#1254851).
- commit c2db288</changelog>
  <changelog author="joao.povoas@suse.com" date="1768219201">- Update
  patches.suse/Bluetooth-MGMT-Fix-OOB-access-in-parse_adv_monitor_p.patch
  (git-fixes CVE-2025-40294 bsc#1255181).
- Update
  patches.suse/Bluetooth-MGMT-fix-crash-in-set_mesh_sync-and-set_me.patch
  (git-fixes CVE-2025-40213 bsc#1253674).
- Update
  patches.suse/Bluetooth-btusb-mediatek-Avoid-btusb_mtk_claim_iso_i.patch
  (git-fixes CVE-2025-68298 bsc#1255124).
- Update
  patches.suse/Bluetooth-btusb-mediatek-Fix-kernel-crash-when-relea.patch
  (git-fixes CVE-2025-68306 bsc#1255145).
- Update
  patches.suse/accel-ivpu-Fix-race-condition-when-unbinding-BOs.patch
  (git-fixes CVE-2025-68749 bsc#1255724).
- Update
  patches.suse/drm-amd-display-increase-max-link-count-and-fix-link.patch
  (stable-fixes CVE-2025-40354 bsc#1255316).
- Update
  patches.suse/drm-amdgpu-atom-Check-kcalloc-for-WS-buffer-in-amdgp.patch
  (stable-fixes CVE-2025-68190 bsc#1255131).
- Update
  patches.suse/drm-amdgpu-fix-gpu-page-fault-after-hibernation-on-P.patch
  (stable-fixes CVE-2025-68230 bsc#1255134).
- Update
  patches.suse/drm-amdgpu-fix-nullptr-err-of-vm_handle_moved.patch
  (stable-fixes CVE-2025-40339 bsc#1255428).
- Update patches.suse/drm-amdgpu-remove-two-invalid-BUG_ON-s.patch
  (stable-fixes CVE-2025-68201 bsc#1255136).
- Update
  patches.suse/drm-amdkfd-Fix-mmap-write-lock-not-release.patch
  (bsc#1243112 CVE-2025-40332 bsc#1255116).
- Update
  patches.suse/drm-mediatek-Disable-AFBC-support-on-Mediatek-DRM-dr.patch
  (git-fixes CVE-2025-68184 bsc#1255220).
- Update
  patches.suse/drm-panthor-Fix-UAF-on-kernel-BO-VA-nodes.patch
  (git-fixes CVE-2025-68747 bsc#1255723).
- Update
  patches.suse/drm-panthor-Fix-kernel-panic-on-partial-unmap-of-a-G.patch
  (git-fixes CVE-2025-40225 bsc#1254827).
- Update
  patches.suse/drm-panthor-Flush-shmem-writes-before-mapping-buffer.patch
  (git-fixes CVE-2025-40276 bsc#1254824).
- Update
  patches.suse/drm-radeon-Do-not-kfree-devres-managed-rdev.patch
  (git-fixes CVE-2025-68170 bsc#1255256).
- Update patches.suse/drm-radeon-Remove-calls-to-drm_put_dev.patch
  (git-fixes CVE-2025-68181 bsc#1255247).
- Update
  patches.suse/drm-radeon-delete-radeon_fence_process-in-is_signale.patch
  (stable-fixes CVE-2025-68223 bsc#1255357).
- Update
  patches.suse/drm-sysfb-Do-not-dereference-NULL-pointer-in-plane-r.patch
  (git-fixes CVE-2025-40360 bsc#1255095).
- Update
  patches.suse/drm-xe-Fix-oops-in-xe_gem_fault-when-running-core_ho.patch
  (stable-fixes CVE-2025-40340 bsc#1254996).
- Update
  patches.suse/drm-xe-guc-Synchronize-Dead-CT-worker-with-unbind.patch
  (git-fixes CVE-2025-68207 bsc#1255234).
- Update
  patches.suse/media-videobuf2-forbid-remove_bufs-when-legacy-filei.patch
  (git-fixes CVE-2025-40302 bsc#1255196).
- Update
  patches.suse/perf-x86-intel-Fix-KASAN-global-out-of-bounds-warning.patch
  (git-fixes CVE-2025-40359 bsc#1255087).
- Update
  patches.suse/x86-CPU-AMD-Add-missing-terminator-for-zen5_rdseed_m.patch
  (git-fixes CVE-2025-68195 bsc#1255259).
- commit 946dbf2</changelog>
  <changelog author="msuchanek@suse.de" date="1768219202">- powerpc/eeh: fix recursive pci_lock_rescan_remove locking in
  EEH event handling (bsc#1253262 ltc#216029).
- commit daa4104</changelog>
  <changelog author="mhocko@suse.com" date="1768219203">- supported.conf: mark ksmbd unsupported
  Based on discussion with Enzo Matsumiya it has tuned out that ksmbd
  module is unsupported but the supported.conf entry is incorrect. Fix
  that.
- commit c800e3f</changelog>
  <changelog author="tiwai@suse.de" date="1768219204">- usb: ohci-nxp: fix device leak on probe failure (git-fixes).
- usb: usb-storage: Maintain minimal modifications to the
  bcdDevice range (git-fixes).
- Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042
  quirk table (stable-fixes).
- drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state()
  (stable-fixes).
- ASoC: bcm: bcm63xx-pcm-whistler: Check return value of
  of_dma_configure() (git-fixes).
- i2c: designware: Disable SMBus interrupts to prevent storms
  from mis-configured firmware (stable-fixes).
- platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to
  VGBS DMI quirks (stable-fixes).
- pinctrl: single: Fix incorrect type for error return variable
  (git-fixes).
- i3c: fix refcount inconsistency in i3c_master_register
  (git-fixes).
- staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE
  parsing (stable-fixes).
- staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie()
  parser (stable-fixes).
- USB: serial: option: move Telit 0x10c7 composition in the
  right place (stable-fixes).
- USB: serial: option: add Telit Cinterion FE910C04 new
  compositions (stable-fixes).
- USB: serial: option: add Foxconn T99W760 (stable-fixes).
- USB: serial: ftdi_sio: match on interface number for jtag
  (stable-fixes).
- usb: usb-storage: No additional quirks need to be added to
  the EL-R12 optical drive (stable-fixes).
- usb: dwc2: fix hang during shutdown if set as peripheral
  (git-fixes).
- usb: xhci: limit run_graceperiod for only usb 3.0 devices
  (stable-fixes).
- usb: typec: ucsi: Handle incorrect num_connectors capability
  (stable-fixes).
- usbip: Fix locking bug in RT-enabled kernels (stable-fixes).
- serial: sprd: Return -EPROBE_DEFER when uart clock is not ready
  (stable-fixes).
- serial: add support of CPCI cards (stable-fixes).
- char: applicom: fix NULL pointer dereference in ac_ioctl
  (stable-fixes).
- iio: adc: ti_am335x_adc: Limit step_avg to valid range for
  gcc complains (stable-fixes).
- fbdev: gbefb: fix to use physical address instead of dma address
  (stable-fixes).
- via_wdt: fix critical boot hang due to unnamed resource
  allocation (stable-fixes).
- ipmi: Fix __scan_channels() failing to rescan channels
  (stable-fixes).
- ipmi: Fix the race between __scan_channels() and
  deliver_response() (stable-fixes).
- reset: fix BIT macro reference (stable-fixes).
- firmware: imx: scu-irq: Init workqueue before request mbox
  channel (stable-fixes).
- HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen
  (stable-fixes).
- mmc: sdhci-msm: Avoid early clock doubling during HS400
  transition (stable-fixes).
- ASoC: qcom: q6apm-dai: set flags to reflect correct operation
  of appl_ptr (git-fixes).
- media: amphion: Remove vpu_vb_is_codecconfig (git-fixes).
- media: verisilicon: Fix CPU stalls on G2 bus error (git-fixes).
- Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE
  (stable-fixes).
- Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV
  (stable-fixes).
- wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840
  tablet (stable-fixes).
- wifi: rtw88: Add USB ID 2001:3329 for D-Link AC13U rev. A1
  (stable-fixes).
- ACPI: property: Use ACPI functions in
  acpi_graph_get_next_endpoint() only (stable-fixes).
- ACPICA: Avoid walking the Namespace if start_node is NULL
  (stable-fixes).
- pinctrl: qcom: msm: Fix deadlock in pinmux configuration
  (stable-fixes).
- platform/x86: acer-wmi: Ignore backlight event (stable-fixes).
- platform/x86/amd: pmc: Add Lenovo Legion Go 2 to pmc quirk list
  (stable-fixes).
- platform/x86/amd/pmc: Add spurious_8042 to Xbox Ally
  (stable-fixes).
- platform/x86: huawei-wmi: add keys for HONOR models
  (stable-fixes).
- HID: elecom: Add support for ELECOM M-XT3URBK (018F)
  (stable-fixes).
- HID: hid-input: Extend Elan ignore battery quirk to USB
  (stable-fixes).
- HID: apple: Add SONiX AK870 PRO to non_apple_keyboards quirk
  list (stable-fixes).
- drm/vmwgfx: Use kref in vmw_bo_dirty (stable-fixes).
- spi: xilinx: increase number of retries before declaring stall
  (stable-fixes).
- spi: imx: keep dma request disabled before dma transfer setup
  (stable-fixes).
- ALSA: usb-audio: Add native DSD quirks for PureAudio DAC series
  (stable-fixes).
- Bluetooth: btrtl: Avoid loading the config file on security
  chips (stable-fixes).
- media: amphion: Make some vpu_v4l2 functions static
  (stable-fixes).
- usb: dwc2: disable platform lowlevel hw resources during
  shutdown (stable-fixes).
- media: amphion: Add a frame flush mode for decoder
  (stable-fixes).
- usb: ohci-nxp: Use helper function devm_clk_get_enabled()
  (stable-fixes).
- drm/tilcdc: request and mapp iomem with devres (stable-fixes).
- media: verisilicon: g2: Use common helpers to compute chroma
  and mv offsets (stable-fixes).
- media: verisilicon: Store chroma and motion vectors offset
  (stable-fixes).
- i3c: master: Inherit DMA masks and parameters from parent device
  (stable-fixes).
- commit bc3be49</changelog>
  <changelog author="tiwai@suse.de" date="1768219205">- pinctrl: single: Fix PIN_CONFIG_BIAS_DISABLE handling
  (stable-fixes).
- Refresh
  patches.suse/pinctrl-single-fix-bias-pull-up-down-handling-in-pin.patch.
- commit bc41b99</changelog>
  <changelog author="tiwai@suse.de" date="1768219206">- drm/amdgpu: Forward VMID reservation errors (git-fixes).
- commit a7344a2</changelog>
  <changelog author="tiwai@suse.de" date="1768219207">- virtio_console: fix order of fields cols and rows
  (stable-fixes).
- commit 0d412d7</changelog>
  <changelog author="tiwai@suse.de" date="1768219208">- drm/sched: Fix race in drm_sched_entity_select_rq() (git-fixes).
- commit d597802</changelog>
  <changelog author="tiwai@suse.de" date="1768219209">- Move out-of-tree patches into the right section
- commit 314797b</changelog>
  <changelog author="petr.pavlu@suse.com" date="1768219210">- tracing: Fix access to trace_event_file (bsc#1254373).
- commit 768b257</changelog>
  <changelog author="dsterba@suse.com" date="1768219211">- bnxt_en: Fix null pointer dereference in bnxt_bs_trace_check_wrap() (CVE-2025-68197 bsc#1255242)
- commit 85b99e2</changelog>
  <changelog author="rgoldwyn@suse.com" date="1768219212">- fuse: fix livelock in synchronous file put from fuseblk workers (CVE-2025-40220 bsc#1254520).
- commit 46a797f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1768219213">- mlx5: Fix default values in create CQ (CVE-2025-68209
  bsc#1255230).
- commit dce9b13</changelog>
  <changelog author="hoyeon.lee@suse.com" date="1768305600">- bpf: Improve program stats run-time calculation (CVE-2025-68742
  bsc#1255707).
- commit 4ed738f</changelog>
  <changelog author="hoyeon.lee@suse.com" date="1768305601">- bpf: Fix invalid prog-&gt;stats access when update_effective_progs
  fails (CVE-2025-68742 bsc#1255707).
- commit 53d4b3c</changelog>
  <changelog author="tiwai@suse.de" date="1768305602">- x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix
  Halo (bsc#1256528).
- x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev
  (bsc#1256528).
- x86/microcode/AMD: Add more known models to entry sign checking
  (bsc#1256528).
- x86/microcode/AMD: Limit Entrysign signature checking to known
  generations (bsc#1256528).
- x86/microcode: Fix Entrysign revision check for Zen1/Naples
  (bsc#1256528).
- x86/microcode/AMD: Add TSA microcode SHAs (bsc#1256528).
- x86/microcode/AMD: Use sha256() instead of init/update/final
  (bsc#1256528).
- x86/microcode/AMD: Clean the cache if update did not load
  microcode (bsc#1256528).
- x86/microcode/AMD: Extend the SHA check to Zen5, block
  loading of any unreleased standalone Zen5 microcode patches
  (bsc#1256528).
- x86/microcode/AMD: Fix __apply_microcode_amd()'s return value
  (bsc#1256528).
- x86/microcode/AMD: Add some forgotten models to the SHA check
  (bsc#1256528).
- x86/microcode/AMD: Load only SHA256-checksummed patches
  (bsc#1256528).
- commit ed14359</changelog>
  <changelog author="tiwai@suse.de" date="1768305603">- x86/microcode/AMD: Select which microcode patch to load
  (bsc#1256528).
- Refresh
  patches.suse/x86-microcode-AMD-Handle-the-case-of-no-BIOS-microcode.patch.
- commit 3b809fe</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1768305604">- mlx5: Fix default values in create CQ (CVE-2025-68209
  bsc#1255230).
- commit e7dee05</changelog>
  <changelog author="jack@suse.cz" date="1768305605">- ext4: use optimized mballoc scanning regardless of inode format
  (bsc#1254378).
- commit aa95fec</changelog>
</package>
<package pkgid="d15623f556ad9d048be33b8f6df483fa7d0ede8bff827419e1428a47e6bbce4b" name="kernel-macros" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="150700.53.3.1"/>
  <changelog author="nmorey@suse.com" date="1748865600">- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (git-fixes)
- commit 0defb73</changelog>
  <changelog author="nmorey@suse.com" date="1748865601">- RDMA/cma: Fix hang when cma_netevent_callback fails to queue_work (git-fixes)
- commit 5748d8f</changelog>
  <changelog author="nmorey@suse.com" date="1748865602">- RDMA/rxe: Fix "trying to register non-static key in rxe_qp_do_cleanup" bug (git-fixes)
- commit 40421b4</changelog>
  <changelog author="msuchanek@suse.de" date="1748865603">- powerpc/pseries/iommu: Fix kmemleak in TCE table userspace view
  (jsc#PED-10539 git-fixes).
- commit 66792c6</changelog>
  <changelog author="jgross@suse.com" date="1748865604">- 9p/net: fix improper handling of bogus negative read/write
  replies (bsc#1243077 CVE-2025-37879).
- commit ac0ef56</changelog>
  <changelog author="jgross@suse.com" date="1748865605">- xenbus: Use kref to track req lifetime (bsc#1243541
  CVE-2025-37949).
- commit 0928f39</changelog>
  <changelog author="ailiop@suse.com" date="1748865606">- Squashfs: check return result of sb_min_blocksize (git-fixes).
- commit 6d6e8d7</changelog>
  <changelog author="ailiop@suse.com" date="1748865607">- afs: Make it possible to find the volumes that are using a
  server (git-fixes).
- commit 7d8a054</changelog>
  <changelog author="ailiop@suse.com" date="1748865608">- afs: Fix the server_list to unuse a displaced server rather
  than putting it (git-fixes).
- commit d3c390a</changelog>
  <changelog author="ailiop@suse.com" date="1748865609">- nilfs2: add pointer check for nilfs_direct_propagate()
  (git-fixes).
- commit eac8f96</changelog>
  <changelog author="ailiop@suse.com" date="1748865610">- nilfs2: do not propagate ENOENT error from
  nilfs_btree_propagate() (git-fixes).
- commit 5591e0d</changelog>
  <changelog author="msuchanek@suse.de" date="1748865611">- Remove debug flavor (bsc#1243919).
  This is only released in Leap, and we don't have Leap 15.7
- commit 4ff5661</changelog>
  <changelog author="dwagner@suse.de" date="1748865612">- nvme-pci: acquire cq_poll_lock in nvme_poll_irqdisable
  (git-fixes bsc#1223096).
- nvme-pci: make nvme_pci_npages_prp() __always_inline
  (git-fixes).
- commit 71f2996</changelog>
  <changelog author="pfalcato@suse.de" date="1748865613">- Refresh
  patches.kabi/icmp-prevent-possible-NULL-dereferences-from-icmp_bu.patch.
- commit d0519a5</changelog>
  <changelog author="pfalcato@suse.de" date="1748865614">- Delete
  patches.kabi/ipv4-icmp-Unmask-upper-DSCP-bits-in-icmp_route_looku.patch.
  It turns out
  patches.suse/ipv4-icmp-Unmask-upper-DSCP-bits-in-icmp_route_looku.patch
  does not need the kABI workaround after all, so removing this patch is
  safe.
- commit 983a766</changelog>
  <changelog author="pmladek@suse.com" date="1748865615">- objtool, panic: Disable SMAP in __stack_chk_fail()
  (bsc#1243963).
- commit 3d95273</changelog>
  <changelog author="pfalcato@suse.de" date="1748865616">- mm/huge_memory: fix dereferencing invalid pmd migration entry
  (CVE-2025-37958 bsc#1243539).
- commit bbe0b9a</changelog>
  <changelog author="pfalcato@suse.de" date="1748865617">- memblock: Accept allocated memory before use in
  memblock_double_array() (CVE-2025-37960 bsc#1243519).
- commit a66a796</changelog>
  <changelog author="msuchanek@suse.de" date="1748865618">- KVM: PPC: Book3S HV: Fix IRQ map warnings with XICS on pSeries
  KVM Guest (bsc#1242205 ltc#212592).
- commit e5a2e22</changelog>
  <changelog author="jgross@suse.com" date="1748952000">- blacklist.conf: add 75ad02318af2 ("Xen/swiotlb: mark xen_swiotlb_fixup() __init")
- Delete patches.suse/Xen-swiotlb-mark-xen_swiotlb_fixup-__init.patch.
- commit c256f05</changelog>
</package>
<package pkgid="c530a4a240faa414ffb5b8cb169572de938a850f30c32536688d0dac6da6623f" name="kernel-macros" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="150700.53.31.1"/>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/ALSA-hda-Fix-missing-pointer-check-in-hda_component_.patch
  (git-fixes CVE-2025-40097 bsc#1252900).
- Update
  patches.suse/ASoC-stm32-sai-fix-OF-node-leak-on-probe.patch
  (git-fixes CVE-2025-71081 bsc#1256609).
- Update
  patches.suse/KEYS-trusted-Fix-a-memory-leak-in-tpm2_load_cmd.patch
  (git-fixes CVE-2025-71147 bsc#1257158).
- Update
  patches.suse/btrfs-fix-adding-block-group-to-a-reclaim-list-and-t.patch
  (git-fixes CVE-2024-42103 bsc#1228490).
- Update
  patches.suse/btrfs-fix-invalid-inode-pointer-dereferences-during-.patch
  (git-fixes CVE-2025-38243 bsc#1246184).
- Update
  patches.suse/drm-stm-ltdc-fix-late-dereference-check.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-53714
  bsc#1254465).
- Update
  patches.suse/drm-ttm-Avoid-NULL-pointer-deref-for-evicted-BOs.patch
  (git-fixes CVE-2025-71083 bsc#1256610).
- Update
  patches.suse/ftrace-Also-allocate-and-copy-hash-for-reading-of-filter-f.patch
  (bsc#1250032 CVE-2025-39813 CVE-2025-39689 bsc#1249307).
- Update
  patches.suse/hwmon-w83791d-Convert-macros-to-functions-to-avoid-T.patch
  (git-fixes CVE-2025-71111 bsc#1256728).
- Update
  patches.suse/ipmi-Rework-user-message-limit-handling.patch
  (git-fixes CVE-2025-40202 bsc#1253451).
- Update
  patches.suse/media-adv7842-Avoid-possible-out-of-bounds-array-acc.patch
  (git-fixes CVE-2025-71136 bsc#1256759).
- Update
  patches.suse/media-dvb-usb-dtv5100-fix-out-of-bounds-in-dtv5100_i.patch
  (git-fixes CVE-2025-68819 bsc#1256664).
- Update
  patches.suse/media-vidtv-initialize-local-pointers-upon-transfer-.patch
  (git-fixes CVE-2025-68808 bsc#1256682).
- Update
  patches.suse/perf-x86-intel-Fix-crash-in-icl_update_topdown_event.patch
  (git-fixes CVE-2025-38322 bsc#1246447).
- Update
  patches.suse/platform-chrome-cros_ec_ishtp-Fix-UAF-after-unbindin.patch
  (git-fixes CVE-2025-68804 bsc#1256617).
- Update
  patches.suse/powerpc-64s-slb-Fix-SLB-multihit-issue-during-SLB-preload.patch
  (bac#1236022 ltc#211187 CVE-2025-71078 bsc#1256616).
- Update
  patches.suse/smb-client-fix-warning-when-reconnecting-channel.patch
  (git-fixes CVE-2025-38379 bsc#1247030).
- Update
  patches.suse/tcp_bpf-Call-sk_msg_free-when-tcp_bpf_send_verdict-f.patch
  (bsc#1250705 CVE-2025-39913).
- Update
  patches.suse/trace-fgraph-Fix-the-warning-caused-by-missing-unregister-.patch
  (bsc#1248211 CVE-2025-38539 CVE-2025-39829 bsc#1250082).
- Update
  patches.suse/usb-dwc3-fix-fault-at-system-suspend-if-device-was-a.patch
  (git-fixes CVE-2024-53070 bsc#1233563).
- Update
  patches.suse/usb-typec-ucsi-glink-fix-off-by-one-in-connector_sta.patch
  (git-fixes CVE-2024-53149 bsc#1234842).
- Update
  patches.suse/usb-xhci-Fix-invalid-pointer-dereference-in-Etron-wo.patch
  (git-fixes CVE-2025-37813 bsc#1242909).
- Update
  patches.suse/x86-microcode-AMD-Fix-__apply_microcode_amd-s-return.patch
  (bsc#1256528 CVE-2025-22047 bsc#1241437).
- commit fbc3d71</changelog>
  <changelog author="jslaby@suse.cz" date="1770033601">- x86/fpu: Clear XSTATE_BV in guest XSAVE state whenever XFD[i]=1
  (CVE-2026-23005 bsc#1257245).
- commit 4fcc2d5</changelog>
  <changelog author="tiwai@suse.de" date="1770033602">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit b3a8e60</changelog>
  <changelog author="rgoldwyn@suse.com" date="1770033603">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit 16880ae</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033604">- smb: change return type of cached_dir_lease_break() to bool
  (git-fixes).
- commit da8604d</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033605">- cifs: add new field to track the last access time of cfid
  (git-fixes).
- commit 7328aa8</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033606">- smb: client: update cfid-&gt;last_access_time in
  open_cached_dir_by_dentry() (git-fixes).
- commit 1962196</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033607">- smb: client: remove unused fid_lock (git-fixes).
- commit ed3cf07</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033608">- smb: improve directory cache reuse for readdir operations
  (bsc#1252712).
- commit 20c0243</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033609">- scripts/python/git_sort/git_sort.yaml: add cifs for-next repository
- commit 0d24c51</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033610">- smb: client: split cached_fid bitfields to avoid shared-byte
  RMW races (bsc#1250748,bsc#1257154).
- commit e7ce4ba</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033611">- smb: client: ensure open_cached_dir_by_dentry() only returns
  valid cfid (git-fixes).
- commit d1feafe</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033612">- smb: client: short-circuit in open_cached_dir_by_dentry()
  if !dentry (git-fixes).
- commit 82d6911</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1770120000">- bpf/selftests: test_select_reuseport_kern: Remove unused header
  (bsc#1257603).
- commit 3124f7b</changelog>
  <changelog author="vbabka@suse.cz" date="1770120001">- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP
  allocations (bsc#1254447 bsc#1253087).
- commit e90ec28</changelog>
  <changelog author="rgoldwyn@suse.com" date="1770120002">- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CVE-2026-22984 bsc#1257217).
- commit 7474e34</changelog>
  <changelog author="rgoldwyn@suse.com" date="1770120003">- libceph: return the handler error from mon_handle_auth_done() (CVE-2026-22992 bsc#1257218).
- commit 518f909</changelog>
  <changelog author="rgoldwyn@suse.com" date="1770120004">- libceph: make free_choose_arg_map() resilient to partial allocation (CVE-2026-22991 bsc#1257220).
- commit 2e431bc</changelog>
  <changelog author="rgoldwyn@suse.com" date="1770120005">- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CVE-2026-22990 bsc#1257221).
- commit 0a3e886</changelog>
  <changelog author="tiwai@suse.de" date="1770120006">- Move out-of-tree rt patch into the right section
- commit 125c148</changelog>
</package>
<package pkgid="91013a07485197f6398fb376e7e252a6cec2f42a9aa1e2334324eaafed0c057b" name="kernel-macros" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="150700.53.34.1"/>
  <changelog author="mwilck@suse.com" date="1773057600">- dm: clear cloned request bio pointer when last clone bio
  completes (git-fixes).
- commit f2572c8</changelog>
  <changelog author="mwilck@suse.com" date="1773057601">- dm mpath: make pg_init_delay_msecs settable (git-fixes).
- commit b5dcc03</changelog>
  <changelog author="ohering@suse.de" date="1773057602">- Add bugnumber to existing mana changes (bsc#1245728 bsc#1251971 bsc#1252266 bsc#1257466)
- net: mana: Ring doorbell at 4 CQ wraparounds (git-fixes).
- PCI: hv: remove unnecessary module_init/exit functions (git-fixes).
- PCI: hv: Remove unused field pci_bus in struct hv_pcibus_device (git-fixes).
- RDMA/mana_ib: Add device-memory support (git-fixes).
- RDMA/mana_ib: Take CQ type from the device type (git-fixes).
- net: mana: Implement ndo_tx_timeout and serialize queue resets per port (bsc#1257472).
- Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump() (git-fixes).
- Drivers: hv: use kmalloc_array() instead of kmalloc() (git-fixes).
- Drivers: hv: Use kmalloc_array() instead of kmalloc() (git-fixes).
- Drivers: hv: Resolve ambiguity in hypervisor version log (git-fixes).
- Drivers: hv: fix missing kernel-doc description for 'size' in request_arr_init() (git-fixes).
- Drivers: hv: remove stale comment (git-fixes).
- net: mana: Support HW link state events (bsc#1253049).
- Drivers: hv: vmbus: Fix typos in vmbus_drv.c (git-fixes).
- Drivers: hv: vmbus: Fix sysfs output format for ring buffer index (git-fixes).
- Drivers: hv: vmbus: Clean up sscanf format specifier in target_cpu_store() (git-fixes).
- Drivers: hv: util: Cosmetic changes for hv_utils_transport.c (git-fixes).
- scsi: storvsc: Remove redundant ternary operators (git-fixes).
- tools/hv: fcopy: Fix irregularities with size of ring buffer (git-fixes).
- x86/hyperv: Fix usage of cpu_online_mask to get valid cpu (git-fixes).
- PCI: hv: Fix warnings for missing export.h header inclusion (git-fixes).
- clocksource: hyper-v: Fix warnings for missing export.h header inclusion (git-fixes).
- x86/hyperv: Fix warnings for missing export.h header inclusion (git-fixes).
- Drivers: hv: Fix the check for HYPERVISOR_CALLBACK_VECTOR (git-fixes).
- Drivers: hv: vmbus: Add comments about races with "channels" sysfs dir (git-fixes).
- PCI: hv: Remove unnecessary flex array in struct pci_packet (git-fixes).
- Drivers: hv: Use kzalloc for panic page allocation (git-fixes).
- uio_hv_generic: Align ring size to system page (git-fixes).
- uio_hv_generic: Use correct size for interrupt and monitor pages (git-fixes).
- Drivers: hv: vmbus: Introduce hv_get_vmbus_root_device() (git-fixes).
- Drivers: hv: vmbus: Get the IRQ number from DeviceTree (git-fixes).
- tools: hv: Enable debug logs for hv_kvp_daemon (git-fixes).
- PCI: hv: Correct a comment (git-fixes).
- x86/hyperv: fix an indentation issue in mshyperv.h (git-fixes).
- x86/hyperv: Use named operands in inline asm (git-fixes).
- commit fbd3c33</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1773144000">- selftests/bpf: add verifier sign extension bound computation
  tests (git-fixes).
- bpf: verifier improvement in 32bit shift sign extension pattern
  (git-fixes).
- commit cbb7102</changelog>
  <changelog author="mkoutny@suse.com" date="1773144001">- cgroup: Show # of subsystem CSSes in cgroup.stat (bsc#1256564
  bsc#1259130).
- commit e9ca9e6</changelog>
  <changelog author="mkoutny@suse.com" date="1773144002">- kabi: cgroup.stat fixup (bsc#1256564 bsc#1259130).
- commit 6ccb250</changelog>
  <changelog author="hare@suse.de" date="1773144003">- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (bsc#1254306).
- commit 165c4b3</changelog>
  <changelog author="hare@suse.de" date="1773144004">- Update config files (bsc#1254306).
- commit 3c7bab7</changelog>
  <changelog author="hare@suse.de" date="1773230400">- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (bsc#1254306).
- commit 43c578c</changelog>
  <changelog author="hare@suse.de" date="1773230401">- Update config files (bsc#1254306).
- commit 6305722</changelog>
  <changelog author="hare@suse.de" date="1773230402">- s390/ipl: Clear SBP flag when bootprog is set (bsc#1258176).
- commit bad7291</changelog>
  <changelog author="mkoutny@suse.com" date="1773230403">- cgroup: Fix incorrect WARN_ON_ONCE() in css_release_work_fn()
  (bsc#1256564 bsc#1259130).
- commit af50ef7</changelog>
  <changelog author="hare@suse.de" date="1773230404">- s390/ctcm: Fix double-kfree (CVE-2025-40253 bsc#1255084).
- commit c330474</changelog>
  <changelog author="hare@suse.de" date="1773230405">- s390/ctcm: Fix double-kfree (CVE-2025-40253 bsc#1255084).
- commit a33e581</changelog>
  <changelog author="nmorey@suse.com" date="1773316800">- RDMA/rtrs-clt: For conn rejection use actual err number (git-fixes)
- commit c91403f</changelog>
  <changelog author="tabraham@suse.com" date="1773316801">- scsi: mpi3mr: Event processing debug improvement (bsc#1251186,
  bsc#1258832).
- commit 4fde182</changelog>
  <changelog author="ddiss@suse.de" date="1773403200">- apparmor: fix race between freeing data and fs accessing it
  (bsc#1258849).
- apparmor: fix race on rawdata dereference (bsc#1258849).
- apparmor: fix differential encoding verification (bsc#1258849).
- apparmor: fix unprivileged local user can do privileged policy
  management (bsc#1258849).
- apparmor: Fix double free of ns_name in aa_replace_profiles()
  (bsc#1258849).
- apparmor: fix missing bounds check on DEFAULT table in
  verify_dfa() (bsc#1258849).
- apparmor: fix side-effect bug in match_char() macro usage
  (bsc#1258849).
- apparmor: fix: limit the number of levels of policy namespaces
  (bsc#1258849).
- apparmor: replace recursive profile removal with iterative
  approach (bsc#1258849).
- apparmor: fix memory leak in verify_header (bsc#1258849).
- apparmor: validate DFA start states are in bounds in unpack_pdb
  (bsc#1258849).
- commit 9f31a2e</changelog>
  <changelog author="tiwai@suse.de" date="1773403201">- ACPI: OSL: fix __iomem type on return from
  acpi_os_map_generic_address() (git-fixes).
- can: hi311x: hi3110_open(): add check for hi3110_power_enable()
  return value (git-fixes).
- net: usb: lan78xx: fix TX byte statistics for small packets
  (git-fixes).
- net: usb: lan78xx: fix silent drop of packets with checksum
  errors (git-fixes).
- qmi_wwan: allow max_mtu above hard_mtu to control rx_urb_size
  (git-fixes).
- remoteproc: sysmon: Correct subsys_name_len type in QMI request
  (git-fixes).
- commit 5d32ac9</changelog>
  <changelog author="ohering@suse.de" date="1773403202">- Add bugnumber to existing mana changes (bsc#1259558 bsc#1259580).
- Drivers: hv: Fix warnings for missing export.h header inclusion (git-fixes).
- Drivers: hv: Allocate interrupt and monitor pages aligned to system page boundary (git-fixes).
- Drivers: hv: Fix bad pointer dereference in hv_get_partition_id (git-fixes).
- hyperv: Convert hypercall statuses to linux error codes (git-fixes).
- drivers/hv: add CPU offlining support (git-fixes).
- drivers/hv: introduce vmbus_channel_set_cpu() (git-fixes).
- cpu: export lockdep_assert_cpus_held() (git-fixes).
- hyperv: Move arch/x86/hyperv/hv_proc.c to drivers/hv (git-fixes).
- hyperv: Move hv_current_partition_id to arch-generic code (git-fixes).
- commit 7492ec1</changelog>
  <changelog author="pfalcato@suse.de" date="1773403203">- sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT
  (CVE-2026-23125 bsc#1258293).
- commit 6e65546</changelog>
</package>
<package pkgid="7861423660c4c67bfa1acbf19bcde8a3d339d6b5750f4c476fd229464646e31a" name="kernel-macros" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="150700.53.37.1"/>
  <changelog author="henrique.carvalho@suse.com" date="1775131200">- smb: client: fix krb5 mount with username option (git-fixes).
- commit 0e79d63</changelog>
  <changelog author="tiwai@suse.de" date="1775217600">- net/x25: Fix overflow when accumulating packets (git-fixes).
- net/x25: Fix potential double free of skb (git-fixes).
- Bluetooth: SMP: derive legacy responder STK authentication
  from MITM state (git-fixes).
- Bluetooth: SMP: force responder MITM requirements before
  building the pairing response (git-fixes).
- Bluetooth: MGMT: validate mesh send advertising payload length
  (git-fixes).
- Bluetooth: hci_event: fix potential UAF in
  hci_le_remote_conn_param_req_evt (git-fixes).
- Bluetooth: MGMT: validate LTK enc_size on load (git-fixes).
- Bluetooth: SCO: fix race conditions in sco_sock_connect()
  (git-fixes).
- Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if
  immediate (git-fixes).
- NFC: pn533: bound the UART receive buffer (git-fixes).
- wifi: iwlwifi: mvm: fix potential out-of-bounds read in
  iwl_mvm_nd_match_info_handler() (git-fixes).
- wifi: wilc1000: fix u8 overflow in SSID scan buffer size
  calculation (git-fixes).
- ASoC: ep93xx: Fix unchecked clk_prepare_enable() and add
  rollback on failure (git-fixes).
- ALSA: caiaq: fix stack out-of-bounds read in init_card
  (git-fixes).
- dmaengine: idxd: Fix freeing the allocated ida too late
  (git-fixes).
- Bluetooth: btintel: serialize btintel_hw_error() with
  hci_req_sync_lock (git-fixes).
- hwmon: axi-fan: don't use driver_override as IRQ name
  (git-fixes).
- ALSA: hda/realtek: Add headset jack quirk for Thinkpad X390
  (stable-fixes).
- ALSA: hda/realtek: add HP Laptop 14s-dr5xxx mute LED quirk
  (stable-fixes).
- ASoC: fsl_easrc: Fix event generation in
  fsl_easrc_iec958_set_reg() (stable-fixes).
- ASoC: fsl_easrc: Fix event generation in
  fsl_easrc_iec958_put_bits() (stable-fixes).
- HID: mcp2221: cancel last I2C command on read error
  (stable-fixes).
- HID: asus: avoid memory leak in asus_report_fixup()
  (stable-fixes).
- HID: magicmouse: avoid memory leak in magicmouse_report_fixup()
  (stable-fixes).
- HID: apple: avoid memory leak in apple_report_fixup()
  (stable-fixes).
- platform/x86: intel-hid: Enable 5-button array on ThinkPad X1
  Fold 16 Gen 1 (stable-fixes).
- platform/x86: intel-hid: Add Dell 14 Plus 2-in-1 to
  dmi_vgbs_allow_list (stable-fixes).
- platform/x86: touchscreen_dmi: Add quirk for y-inverted Goodix
  touchscreen on SUPI S10 (stable-fixes).
- mtd: spi-nor: core: avoid odd length/address writes in 8D-8D-8D
  mode (stable-fixes).
- Bluetooth: hci_sync: Remove remaining dependencies of
  hci_request (stable-fixes).
- Bluetooth: Remove 3 repeated macro definitions (stable-fixes).
- hwmon: (axi-fan-control) Make use of dev_err_probe()
  (stable-fixes).
- hwmon: (axi-fan-control) Use device firmware agnostic API
  (stable-fixes).
- dmaengine: idxd: Remove usage of the deprecated ida_simple_xx()
  API (stable-fixes).
- commit a6c10e6</changelog>
  <changelog author="tiwai@suse.de" date="1775217601">- Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync
  (git-fixes).
- wifi: ath11k: Pass the correct value of each TID during a stop
  AMPDU session (git-fixes).
- ASoC: Intel: boards: fix unmet dependency on PINCTRL
  (git-fixes).
- drm/amdgpu: prevent immediate PASID reuse case (stable-fixes).
- usb: core: new quirk to handle devices with zero configurations
  (stable-fixes).
- drm/amdgpu: fix gpu idle power consumption issue for gfx v12
  (stable-fixes).
- drm/ttm/tests: Fix build failure on PREEMPT_RT (stable-fixes).
- commit 7612e81</changelog>
  <changelog author="tiwai@suse.de" date="1775217602">- mtd: spi-nor: core: avoid odd length/address reads on 8D-8D-8D
  mode (stable-fixes).
- commit 2d1bac8</changelog>
  <changelog author="tiwai@suse.de" date="1775304000">- gpio: mxc: map Both Edge pad wakeup to Rising Edge (git-fixes).
- drm/ioc32: stop speculation on the drm_compat_ioctl path
  (git-fixes).
- drm/ast: dp501: Fix initialization of SCU2C (git-fixes).
- accel/qaic: Handle DBC deactivation if the owner went away
  (git-fixes).
- drm/i915/dp: Use crtc_state-&gt;enhanced_framing properly on
  ivb/hsw CPU eDP (git-fixes).
- crypto: af-alg - fix NULL pointer dereference in scatterwalk
  (git-fixes).
- crypto: caam - fix overflow on long hmac keys (git-fixes).
- crypto: caam - fix DMA corruption on long hmac keys (git-fixes).
- commit 376a907</changelog>
  <changelog author="tiwai@suse.de" date="1775304001">- Revert "drm: Fix use-after-free on framebuffers and property
  blobs when calling drm_dev_unplug" (git-fixes).
- drm/i915/dsi: Don't do DSC horizontal timing adjustments in
  command mode (git-fixes).
- drm/amdgpu: Change AMDGPU_VA_RESERVED_TRAP_SIZE to 64KB
  (git-fixes).
- commit 79130c8</changelog>
  <changelog author="tiwai@suse.de" date="1775390400">- Input: synaptics-rmi4 - fix a locking bug in an error path
  (git-fixes).
- hwmon: (occ) Fix missing newline in occ_show_extended()
  (git-fixes).
- hwmon: (occ) Fix division by zero in occ_show_power_1()
  (git-fixes).
- hwmon: (tps53679) Fix device ID comparison and printing in
  tps53676_identify() (git-fixes).
- hwmon: (pxe1610) Check return value of page-select write in
  probe (git-fixes).
- commit 08cee84</changelog>
  <changelog author="tiwai@suse.de" date="1775476800">- misc: fastrpc: possible double-free of cctx-&gt;remote_heap
  (git-fixes).
- comedi: Reinit dev-&gt;spinlock between attachments to low-level
  drivers (git-fixes).
- comedi: me_daq: Fix potential overrun of firmware buffer
  (git-fixes).
- comedi: me4000: Fix potential overrun of firmware buffer
  (git-fixes).
- comedi: ni_atmio16d: Fix invalid clean-up after failed attach
  (git-fixes).
- iio: dac: ad5770r: fix error return in ad5770r_read_raw()
  (git-fixes).
- iio: accel: fix ADXL355 temperature signature value (git-fixes).
- iio: light: vcnl4035: fix scan buffer on big-endian (git-fixes).
- iio: adc: ti-adc161s626: fix buffer read on big-endian
  (git-fixes).
- iio: imu: bmi160: Remove potential undefined behavior in
  bmi160_config_pin() (git-fixes).
- iio: imu: bno055: fix BNO055_SCAN_CH_COUNT off by one
  (git-fixes).
- iio: gyro: mpu3050: Fix out-of-sequence free_irq() (git-fixes).
- iio: gyro: mpu3050: Move iio_device_register() to correct
  location (git-fixes).
- iio: gyro: mpu3050: Fix irq resource leak (git-fixes).
- iio: gyro: mpu3050: Fix incorrect free_irq() variable
  (git-fixes).
- iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and
  gyroscope only (git-fixes).
- usb: cdns3: gadget: fix state inconsistency on gadget init
  failure (git-fixes).
- usb: ulpi: fix double free in ulpi_register_interface() error
  path (git-fixes).
- usb: cdns3: gadget: fix NULL pointer dereference in ep_queue
  (git-fixes).
- usb: gadget: f_rndis: Protect RNDIS options with mutex
  (git-fixes).
- usb: gadget: f_subset: Fix unbalanced refcnt in geth_free
  (git-fixes).
- usb: dwc2: gadget: Fix spin_lock/unlock mismatch in
  dwc2_hsotg_udc_stop() (git-fixes).
- usb: ehci-brcm: fix sleep during atomic (git-fixes).
- USB: dummy-hcd: Fix interrupt synchronization error (git-fixes).
- USB: dummy-hcd: Fix locking/synchronization error (git-fixes).
- usb: usbtmc: Flush anchored URBs in usbtmc_release (git-fixes).
- usb: gadget: u_ether: Fix race between gether_disconnect and
  eth_stop (git-fixes).
- thunderbolt: Fix property read in nhi_wake_supported()
  (git-fixes).
- commit 4e3d5c2</changelog>
  <changelog author="tiwai@suse.de" date="1775476801">- usb: gadget: uvc: fix NULL pointer dereference during unbind
  race (git-fixes).
- commit 4a9ee96</changelog>
  <changelog author="tiwai@suse.de" date="1775476802">- usb: core: phy: avoid double use of 'usb3-phy' (git-fixes).
- commit 4e8787e</changelog>
  <changelog author="pfalcato@suse.de" date="1775476803">- tls: Purge async_hold in tls_decrypt_async_wait() (CVE-2026-23414
  bsc#1261496).
- commit 1058925</changelog>
  <changelog author="pfalcato@suse.de" date="1775476804">- net/sched: ets: fix divide by zero in the offload path
  (CVE-2026-23379 bsc#1260481).
- commit 3672900</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476805">- icmp: fix NULL pointer dereference in icmp_tag_validation()
  (CVE-2026-23398 bsc#1260730).
- net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled
  (CVE-2026-23293 bsc#1260486).
- commit 05f5f64</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476806">- clsact: Fix use-after-free in init/destroy rollback asymmetry
  (CVE-2026-23413 bsc#1261498).
- commit eaf3b22</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476807">- net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled
  (CVE-2026-23381 bsc#1260471).
- commit 21aa5bd</changelog>
  <changelog author="nik.borisov@suse.com" date="1775476808">- watchdog/perf: properly initialize the turbo mode timestamp and rearm  counter (bsc#1256504).
- commit c8a645c</changelog>
  <changelog author="mkubecek@suse.cz" date="1775563200">- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs
  and shared blocks (CVE-2026-23270 bsc#1259886).
- commit 00821f1</changelog>
  <changelog author="lduncan@suse.com" date="1775563201">- scsi: target: Fix recursive locking in __configfs_open_file()
  (CVE-2026-23292 bsc#1260500).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_session_usage_count() (CVE-2026-23193 bsc#1258414).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_conn_usage_count() (CVE-2026-23216 bsc#1258447).
- commit e7b5dcd</changelog>
  <changelog author="mkubecek@suse.cz" date="1775563202">- net/sched: teql: fix NULL pointer dereference in iptunnel_xmit
  on TEQL slave xmit (CVE-2026-23277 bsc#1259997).
- commit 852cc2c</changelog>
  <changelog author="tiwai@suse.de" date="1775563203">- soc: aspeed: socinfo: Mask table entries for accurate SoC ID
  matching (git-fixes).
- commit df6cd61</changelog>
</package>
<package pkgid="f8fd90fa16626e8b3418df847fb0da9e36987393202250b1547df222eed05530" name="kernel-macros" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="150700.53.40.1"/>
  <changelog author="tiwai@suse.de" date="1775476800">- usb: gadget: uvc: fix NULL pointer dereference during unbind
  race (git-fixes).
- commit 4a9ee96</changelog>
  <changelog author="tiwai@suse.de" date="1775476801">- usb: core: phy: avoid double use of 'usb3-phy' (git-fixes).
- commit 4e8787e</changelog>
  <changelog author="pfalcato@suse.de" date="1775476802">- tls: Purge async_hold in tls_decrypt_async_wait() (CVE-2026-23414
  bsc#1261496).
- commit 1058925</changelog>
  <changelog author="pfalcato@suse.de" date="1775476803">- net/sched: ets: fix divide by zero in the offload path
  (CVE-2026-23379 bsc#1260481).
- commit 3672900</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476804">- icmp: fix NULL pointer dereference in icmp_tag_validation()
  (CVE-2026-23398 bsc#1260730).
- net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled
  (CVE-2026-23293 bsc#1260486).
- commit 05f5f64</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476805">- clsact: Fix use-after-free in init/destroy rollback asymmetry
  (CVE-2026-23413 bsc#1261498).
- commit eaf3b22</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476806">- net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled
  (CVE-2026-23381 bsc#1260471).
- commit 21aa5bd</changelog>
  <changelog author="nik.borisov@suse.com" date="1775476807">- watchdog/perf: properly initialize the turbo mode timestamp and rearm  counter (bsc#1256504).
- commit c8a645c</changelog>
  <changelog author="mkubecek@suse.cz" date="1775563200">- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs
  and shared blocks (CVE-2026-23270 bsc#1259886).
- commit 00821f1</changelog>
  <changelog author="lduncan@suse.com" date="1775563201">- scsi: target: Fix recursive locking in __configfs_open_file()
  (CVE-2026-23292 bsc#1260500).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_session_usage_count() (CVE-2026-23193 bsc#1258414).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_conn_usage_count() (CVE-2026-23216 bsc#1258447).
- commit e7b5dcd</changelog>
  <changelog author="mkubecek@suse.cz" date="1775563202">- net/sched: teql: fix NULL pointer dereference in iptunnel_xmit
  on TEQL slave xmit (CVE-2026-23277 bsc#1259997).
- commit 852cc2c</changelog>
  <changelog author="tiwai@suse.de" date="1775563203">- soc: aspeed: socinfo: Mask table entries for accurate SoC ID
  matching (git-fixes).
- commit df6cd61</changelog>
  <changelog author="nstange@suse.de" date="1777550400">- crypto: scatterwalk - Add memcpy_sglist (bsc#1262573
  CVE-2026-31431).
- commit 28aed48</changelog>
  <changelog author="nstange@suse.de" date="1777550401">- crypto: scatterwalk - Fix memcpy_sglist() to always succeed
  (bsc#1262573 CVE-2026-31431).
- commit c2ad254</changelog>
  <changelog author="nstange@suse.de" date="1777550402">- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- commit 8a67d67</changelog>
  <changelog author="nstange@suse.de" date="1777550403">- crypto: algif_aead - Revert to operating out-of-place
  (bsc#1262573 CVE-2026-31431).
- commit eb1a8c9</changelog>
  <changelog author="nstange@suse.de" date="1777550404">- kABI: Restore af_alg_{count,pull}_tsgl() signatures (bsc#1262573
  CVE-2026-31431).
- commit b418ef6</changelog>
  <changelog author="nstange@suse.de" date="1777636800">- crypto: authenc - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- Refresh
  patches.suse/crypto-authencesn-reject-too-short-AAD-assoclen-8-to.patch
- commit 24731ba</changelog>
  <changelog author="nstange@suse.de" date="1777636801">- crypto: authencesn - Do not place hiseq at end of dst for
  out-of-place decryption (bsc#1262573 CVE-2026-31431).
- commit 2c8047b</changelog>
  <changelog author="nstange@suse.de" date="1777636802">- crypto: authencesn - Fix src offset when decrypting in-place
  (bsc#1262573 CVE-2026-31431).
- commit 4921c60</changelog>
</package>
<package pkgid="4313b80012a89d9ebb082b4bbf86518d1f49d6bafe24b6f6138cf1aa7603b8a6" name="kernel-macros" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="150700.53.45.1"/>
  <changelog author="pfalcato@suse.de" date="1775476800">- tls: Purge async_hold in tls_decrypt_async_wait() (CVE-2026-23414
  bsc#1261496).
- commit 1058925</changelog>
  <changelog author="pfalcato@suse.de" date="1775476801">- net/sched: ets: fix divide by zero in the offload path
  (CVE-2026-23379 bsc#1260481).
- commit 3672900</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476802">- icmp: fix NULL pointer dereference in icmp_tag_validation()
  (CVE-2026-23398 bsc#1260730).
- net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled
  (CVE-2026-23293 bsc#1260486).
- commit 05f5f64</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476803">- clsact: Fix use-after-free in init/destroy rollback asymmetry
  (CVE-2026-23413 bsc#1261498).
- commit eaf3b22</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476804">- net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled
  (CVE-2026-23381 bsc#1260471).
- commit 21aa5bd</changelog>
  <changelog author="nik.borisov@suse.com" date="1775476805">- watchdog/perf: properly initialize the turbo mode timestamp and rearm  counter (bsc#1256504).
- commit c8a645c</changelog>
  <changelog author="mkubecek@suse.cz" date="1775563200">- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs
  and shared blocks (CVE-2026-23270 bsc#1259886).
- commit 00821f1</changelog>
  <changelog author="lduncan@suse.com" date="1775563201">- scsi: target: Fix recursive locking in __configfs_open_file()
  (CVE-2026-23292 bsc#1260500).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_session_usage_count() (CVE-2026-23193 bsc#1258414).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_conn_usage_count() (CVE-2026-23216 bsc#1258447).
- commit e7b5dcd</changelog>
  <changelog author="mkubecek@suse.cz" date="1775563202">- net/sched: teql: fix NULL pointer dereference in iptunnel_xmit
  on TEQL slave xmit (CVE-2026-23277 bsc#1259997).
- commit 852cc2c</changelog>
  <changelog author="tiwai@suse.de" date="1775563203">- soc: aspeed: socinfo: Mask table entries for accurate SoC ID
  matching (git-fixes).
- commit df6cd61</changelog>
  <changelog author="nstange@suse.de" date="1777550400">- crypto: scatterwalk - Add memcpy_sglist (bsc#1262573
  CVE-2026-31431).
- commit 28aed48</changelog>
  <changelog author="nstange@suse.de" date="1777550401">- crypto: scatterwalk - Fix memcpy_sglist() to always succeed
  (bsc#1262573 CVE-2026-31431).
- commit c2ad254</changelog>
  <changelog author="nstange@suse.de" date="1777550402">- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- commit 8a67d67</changelog>
  <changelog author="nstange@suse.de" date="1777550403">- crypto: algif_aead - Revert to operating out-of-place
  (bsc#1262573 CVE-2026-31431).
- commit eb1a8c9</changelog>
  <changelog author="nstange@suse.de" date="1777550404">- kABI: Restore af_alg_{count,pull}_tsgl() signatures (bsc#1262573
  CVE-2026-31431).
- commit b418ef6</changelog>
  <changelog author="nstange@suse.de" date="1777636800">- crypto: authenc - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- Refresh
  patches.suse/crypto-authencesn-reject-too-short-AAD-assoclen-8-to.patch
- commit 24731ba</changelog>
  <changelog author="nstange@suse.de" date="1777636801">- crypto: authencesn - Do not place hiseq at end of dst for
  out-of-place decryption (bsc#1262573 CVE-2026-31431).
- commit 2c8047b</changelog>
  <changelog author="nstange@suse.de" date="1777636802">- crypto: authencesn - Fix src offset when decrypting in-place
  (bsc#1262573 CVE-2026-31431).
- commit 4921c60</changelog>
  <changelog author="fmancera@suse.de" date="1778155200">- supported.conf: drop rxrpc and afs_fs (bsc#1264450)
- commit bf6ec71</changelog>
  <changelog author="jeffm@suse.com" date="1778241600">- xfrm: esp: avoid in-place decrypt on shared skb frags (bsc#1264449 bsc#1264450).
- commit 10e4355</changelog>
</package>
<package pkgid="7fd6092aa272756e2c83d416010d8ae6af547214879c919f71dbdc330f1f4a12" name="kernel-macros" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="150700.53.52.1"/>
  <changelog author="nik.borisov@suse.com" date="1775476800">- watchdog/perf: properly initialize the turbo mode timestamp and rearm  counter (bsc#1256504).
- commit c8a645c</changelog>
  <changelog author="mkubecek@suse.cz" date="1775563200">- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs
  and shared blocks (CVE-2026-23270 bsc#1259886).
- commit 00821f1</changelog>
  <changelog author="lduncan@suse.com" date="1775563201">- scsi: target: Fix recursive locking in __configfs_open_file()
  (CVE-2026-23292 bsc#1260500).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_session_usage_count() (CVE-2026-23193 bsc#1258414).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_conn_usage_count() (CVE-2026-23216 bsc#1258447).
- commit e7b5dcd</changelog>
  <changelog author="mkubecek@suse.cz" date="1775563202">- net/sched: teql: fix NULL pointer dereference in iptunnel_xmit
  on TEQL slave xmit (CVE-2026-23277 bsc#1259997).
- commit 852cc2c</changelog>
  <changelog author="tiwai@suse.de" date="1775563203">- soc: aspeed: socinfo: Mask table entries for accurate SoC ID
  matching (git-fixes).
- commit df6cd61</changelog>
  <changelog author="nstange@suse.de" date="1777550400">- crypto: scatterwalk - Add memcpy_sglist (bsc#1262573
  CVE-2026-31431).
- commit 28aed48</changelog>
  <changelog author="nstange@suse.de" date="1777550401">- crypto: scatterwalk - Fix memcpy_sglist() to always succeed
  (bsc#1262573 CVE-2026-31431).
- commit c2ad254</changelog>
  <changelog author="nstange@suse.de" date="1777550402">- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- commit 8a67d67</changelog>
  <changelog author="nstange@suse.de" date="1777550403">- crypto: algif_aead - Revert to operating out-of-place
  (bsc#1262573 CVE-2026-31431).
- commit eb1a8c9</changelog>
  <changelog author="nstange@suse.de" date="1777550404">- kABI: Restore af_alg_{count,pull}_tsgl() signatures (bsc#1262573
  CVE-2026-31431).
- commit b418ef6</changelog>
  <changelog author="nstange@suse.de" date="1777636800">- crypto: authenc - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- Refresh
  patches.suse/crypto-authencesn-reject-too-short-AAD-assoclen-8-to.patch
- commit 24731ba</changelog>
  <changelog author="nstange@suse.de" date="1777636801">- crypto: authencesn - Do not place hiseq at end of dst for
  out-of-place decryption (bsc#1262573 CVE-2026-31431).
- commit 2c8047b</changelog>
  <changelog author="nstange@suse.de" date="1777636802">- crypto: authencesn - Fix src offset when decrypting in-place
  (bsc#1262573 CVE-2026-31431).
- commit 4921c60</changelog>
  <changelog author="nik.borisov@suse.com" date="1777982400">- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's  op cache (bsc#1264013 CVE-2025-54518).
- commit 5f11806</changelog>
  <changelog author="fmancera@suse.de" date="1778155200">- supported.conf: drop rxrpc and afs_fs (bsc#1264450)
- commit c00b898</changelog>
  <changelog author="jeffm@suse.com" date="1778241600">- xfrm: esp: avoid in-place decrypt on shared skb frags (bsc#1264449 bsc#1264450).
- commit f187bc6</changelog>
  <changelog author="pfalcato@suse.de" date="1778673600">- net: skbuff: propagate shared-frag marker through pskb_copy()
  (CVE-2026-46300 bsc#1265209).
- commit 4c684ee</changelog>
  <changelog author="mhocko@suse.com" date="1778760000">- io-wq: check that the predecessor is hashed in
  io_wq_remove_pending() (git-fixes).
- commit 447a089</changelog>
  <changelog author="mhocko@suse.com" date="1778846400">- ptrace: slightly saner 'get_dumpable()' logic (bsc#1265308).
- commit a7685e1</changelog>
  <changelog author="mhocko@suse.com" date="1778846401">- kabi assert ptrace: slightly saner 'get_dumpable()' logic
  (bsc#1265308).
- kabi ptrace: slightly saner 'get_dumpable()' logic
  (bsc#1265308).
- commit 51e3e5d</changelog>
</package>
<package pkgid="ddfb904311fb8e9e9f13747d37cea725c5c6603bee8f382f625392129021e905" name="kernel-macros" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="150700.53.6.1"/>
  <changelog author="ohering@suse.de" date="1751025600">- scsi: storvsc: Increase the timeouts to storvsc_timeout (git-fixes).
- net: mana: Add support for Multi Vports on Bare metal (bsc#1244229).
- scsi: storvsc: Don't report the host packet status as the hv status (git-fixes).
- commit cde971c</changelog>
  <changelog author="tiwai@suse.de" date="1751025601">- HID: lenovo: Restrict F7/9/11 mode to compact keyboards only
  (git-fixes).
- HID: wacom: fix kobject reference count leak (git-fixes).
- HID: wacom: fix memory leak on sysfs attribute creation failure
  (git-fixes).
- HID: wacom: fix memory leak on kobject creation failure
  (git-fixes).
- wifi: mac80211: fix beacon interval calculation overflow
  (git-fixes).
- commit 8d2d6ad</changelog>
  <changelog author="joao.povoas@suse.com" date="1751025602">- Update
  patches.suse/ASoC-soc-pcm-don-t-use-soc_pcm_ret-on-.prepare-callb.patch
  (stable-fixes CVE-2024-58077 bsc#1239090).
- Update
  patches.suse/Bluetooth-btbcm-Fix-NULL-deref-in-btbcm_get_board_na.patch
  (git-fixes CVE-2024-57988 bsc#1237910).
- Update
  patches.suse/Bluetooth-btrtl-check-for-NULL-in-btrtl_setup_realte.patch
  (git-fixes CVE-2024-57987 bsc#1237905).
- Update
  patches.suse/RDMA-bnxt_re-Add-sanity-checks-on-rdev-validity.patch
  (bsc#1237200 CVE-2025-21901 bsc#1240579).
- Update patches.suse/RDMA-rtrs-Add-missing-deinit-call.patch
  (git-fixes CVE-2025-21805 bsc#1238741).
- Update
  patches.suse/amdkfd-properly-free-gang_ctx_bo-when-failed-to-init.patch
  (git-fixes CVE-2025-21842 bsc#1239063).
- Update
  patches.suse/cxl-mem-Fix-no-cxl_nvd-during-pmem-region-auto-assem.patch
  (jsc#PED-10836 CVE-2024-41085 bsc#1228478).
- Update
  patches.suse/cxl-pci-Skip-to-handle-RAS-errors-if-CXL.mem-device-.patch
  (jsc#PED-10836 CVE-2024-26762 bsc#1230337).
- Update
  patches.suse/drm-amd-display-Fix-invalid-context-error-in-dml-hel.patch
  (git-fixes CVE-2025-37965 bsc#1244174).
- Update
  patches.suse/drm-amdgpu-init-return-value-in-amdgpu_ttm_clear_buf.patch
  (git-fixes CVE-2025-21987 bsc#1240798).
- Update
  patches.suse/drm-amdkfd-Fix-NULL-Pointer-Dereference-in-KFD-queue.patch
  (git-fixes CVE-2025-21940 bsc#1240702).
- Update
  patches.suse/drm-i915-gt-Use-spin_lock_irqsave-in-interruptible-c.patch
  (git-fixes CVE-2025-21849 bsc#1239485).
- Update
  patches.suse/drm-imagination-avoid-deadlock-on-fence-release.patch
  (git-fixes CVE-2025-21911 bsc#1240589).
- Update
  patches.suse/drm-xe-hmm-Don-t-dereference-struct-page-pointers-wi.patch
  (git-fixes CVE-2025-21939 bsc#1240710).
- Update patches.suse/drm-xe-userptr-fix-EFAULT-handling.patch
  (git-fixes CVE-2025-21880 bsc#1240170).
- Update
  patches.suse/gpu-host1x-Fix-a-use-of-uninitialized-mutex.patch
  (git-fixes CVE-2025-21824 bsc#1238478).
- Update
  patches.suse/iommu-Fix-potential-memory-leak-in-iopf_queue_remove.patch
  (git-fixes CVE-2025-21770 bsc#1238495).
- Update
  patches.suse/media-intel-ipu6-remove-cpu-latency-qos-request-on-e.patch
  (git-fixes CVE-2024-58004 bsc#1238508).
- Update
  patches.suse/net-smc-do-not-leave-a-dangling-sk-pointer-in-__smc_create.patch
  (jsc#PED-10299 bsc#1241689 CVE-2024-50293 bsc#1233482).
- Update
  patches.suse/net-smc-fix-lacks-of-icsk_syn_mss-with-IPPROTO_SMC.patch
  (jsc#PED-10299 bsc#1241689 CVE-2024-50034 bsc#1231913).
- Update
  patches.suse/powerpc-pseries-iommu-Don-t-unset-window-if-it-was-n.patch
  (jsc#PED-10539 git-fixes CVE-2025-21713 bsc#1237887).
- Update
  patches.suse/wifi-ath12k-Fix-for-out-of-bound-access-error.patch
  (bsc#1240998 CVE-2024-58015 bsc#1238995).
- Update
  patches.suse/wifi-ath12k-fix-use-after-free-in-ath12k_dp_cc_clean.patch
  (bsc#1240998 CVE-2024-56541 bsc#1235064).
- Update
  patches.suse/wifi-iwlwifi-mvm-avoid-NULL-pointer-dereference-cf704a7.patch
  (git-fixes CVE-2024-58062 bsc#1238965).
- commit 0597d89</changelog>
  <changelog author="joao.povoas@suse.com" date="1751025603">- Update
  patches.suse/HID-uclogic-Add-NULL-check-in-uclogic_input_configur.patch
  (git-fixes CVE-2025-38007 bsc#1244938).
- Update
  patches.suse/RDMA-core-Fix-KASAN-slab-use-after-free-Read-in-ib_r.patch
  (git-fixes CVE-2025-38022 bsc#1245003).
- Update
  patches.suse/RDMA-rxe-Fix-slab-use-after-free-Read-in-rxe_queue_c.patch
  (git-fixes CVE-2025-38024 bsc#1245025).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-csu.patch
  (bsc#1243342 CVE-2025-38059 bsc#1244759).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1236208 CVE-2025-21658).
- Update
  patches.suse/can-bcm-add-locking-for-bcm_op-runtime-updates.patch
  (git-fixes CVE-2025-38004 bsc#1244274).
- Update
  patches.suse/can-bcm-add-missing-rcu-read-protection-for-procfs-c.patch
  (git-fixes CVE-2025-38003 bsc#1244275).
- Update
  patches.suse/crypto-algif_hash-fix-double-free-in-hash_accept.patch
  (git-fixes CVE-2025-38079 bsc#1245217).
- Update
  patches.suse/crypto-lzo-Fix-compression-buffer-overrun.patch
  (stable-fixes CVE-2025-38068 bsc#1245210).
- Update
  patches.suse/dmaengine-idxd-Refactor-remove-call-with-idxd_cleanu.patch
  (git-fixes CVE-2025-38014 bsc#1244732).
- Update
  patches.suse/dmaengine-idxd-fix-memory-leak-in-error-handling-pat-46a5cca.patch
  (git-fixes CVE-2025-38015 bsc#1244789).
- Update
  patches.suse/dmaengine-ti-k3-udma-Add-missing-locking.patch
  (git-fixes CVE-2025-38005 bsc#1244727).
- Update
  patches.suse/drm-amd-display-Increase-block_sequence-array-size.patch
  (stable-fixes CVE-2025-38080 bsc#1244738).
- Update
  patches.suse/ext4-goto-right-label-out_mmap_sem-in-ext4_setattr.patch
  (bsc#1242556 CVE-2025-22120 bsc#1241592).
- Update
  patches.suse/firmware-arm_ffa-Set-dma_mask-for-ffa-devices.patch
  (stable-fixes CVE-2025-38043 bsc#1245081).
- Update patches.suse/media-cx231xx-set-device_caps-for-417.patch
  (stable-fixes CVE-2025-38044 bsc#1245082).
- Update
  patches.suse/net-handshake-Fix-handshake_req_destroy_test1.patch
  (git-fixes CVE-2024-26831 bsc#1223008).
- Update
  patches.suse/net-mlx5e-Disable-MACsec-offload-for-uplink-represen.patch
  (git-fixes CVE-2025-38020 bsc#1245001).
- Update patches.suse/net_sched-prio-fix-a-race-in-prio_tune.patch
  (git-fixes CVE-2025-38083 bsc#1245183).
- Update
  patches.suse/nfs-handle-failure-of-nfs_get_lock_context-in-unlock-path.patch
  (git-fixes CVE-2025-38023 bsc#1245004).
- Update patches.suse/orangefs-Do-not-truncate-file-size.patch
  (git-fixes CVE-2025-38065 bsc#1244906).
- Update
  patches.suse/padata-do-not-leak-refcount-in-reorder_work.patch
  (git-fixes CVE-2025-38031 bsc#1245046).
- Update
  patches.suse/phy-tegra-xusb-Use-a-bitmask-for-UTMI-pad-power-stat.patch
  (git-fixes CVE-2025-38010 bsc#1244996).
- Update
  patches.suse/platform-x86-dell-wmi-sysman-Avoid-buffer-overflow-i.patch
  (git-fixes CVE-2025-38077 bsc#1244736).
- Update
  patches.suse/regulator-max20086-fix-invalid-memory-access.patch
  (git-fixes CVE-2025-38027 bsc#1245042).
- Update
  patches.suse/s390-pci-Fix-duplicate-pci_dev_put-in-disable_slot-w.patch
  (git-fixes bsc#1244145 CVE-2025-37946 bsc#1243506).
- Update
  patches.suse/s390-pci-fix-potential-double-remove-of-hotplug-slot.patch
  (bsc#1244145 CVE-2024-56699 bsc#1235490).
- Update
  patches.suse/sched-numa-fix-memory-leak-due-to-the-overwritten-vma-numab_state.patch
  (git fixes (sched/numa) CVE-2024-56613 bsc#1244176).
- Update
  patches.suse/serial-mctrl_gpio-split-disable_ms-into-sync-and-no_.patch
  (git-fixes CVE-2025-38040 bsc#1245078).
- Update
  patches.suse/spi-rockchip-Fix-register-out-of-bounds-access.patch
  (stable-fixes CVE-2025-38081 bsc#1244739).
- Update
  patches.suse/usb-typec-ucsi-displayport-Fix-NULL-pointer-access.patch
  (git-fixes CVE-2025-37994 bsc#1243823).
- Update
  patches.suse/vhost-scsi-Fix-handling-of-multiple-calls-to-vhost_s.patch
  (git-fixes CVE-2025-22083 bsc#1241414).
- Update
  patches.suse/wifi-cfg80211-fix-out-of-bounds-access-during-multi-.patch
  (git-fixes CVE-2025-37973 bsc#1244172).
- Update patches.suse/wifi-iwlwifi-fix-debug-actions-order.patch
  (stable-fixes CVE-2025-38045 bsc#1245083).
- Update
  patches.suse/wifi-mac80211-Set-n_channels-after-allocating-struct.patch
  (git-fixes CVE-2025-38013 bsc#1244731).
- Update
  patches.suse/wifi-mt76-disable-napi-on-driver-removal.patch
  (git-fixes CVE-2025-38009 bsc#1244995).
- commit fee1c31</changelog>
  <changelog author="tiwai@suse.de" date="1751198400">- i2c: tiny-usb: disable zero-length read messages (git-fixes).
- i2c: robotfuzz-osif: disable zero-length read messages
  (git-fixes).
- drm/i915: fix build error some more (git-fixes).
- ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X507UAR
  (git-fixes).
- ALSA: usb-audio: Fix out-of-bounds read in
  snd_usb_get_audioformat_uac3() (git-fixes).
- ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged
  (stable-fixes).
- ALSA: usb-audio: Rename ALSA kcontrol PCM and PCM1 for the
  KTMicro sound card (stable-fixes).
- ALSA: hda/intel: Add Thinkpad E15 to PM deny list
  (stable-fixes).
- ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330
  (stable-fixes).
- drivers/rapidio/rio_cm.c: prevent possible heap overwrite
  (stable-fixes).
- watchdog: da9052_wdt: respect TWDMIN (stable-fixes).
- watchdog: fix watchdog may detect false positive of softlockup
  (stable-fixes).
- fbcon: Make sure modelist not set on unregistered console
  (stable-fixes).
- bus: fsl-mc: increase MC_CMD_COMPLETION_TIMEOUT_MS value
  (stable-fixes).
- i2c: designware: Invoke runtime suspend on quick slave
  re-registration (stable-fixes).
- i2c: npcm: Add clock toggle recovery (stable-fixes).
- pinctrl: armada-37xx: propagate error from
  armada_37xx_pmx_set_by_name() (stable-fixes).
- pinctrl: armada-37xx: propagate error from
  armada_37xx_gpio_get_direction() (stable-fixes).
- pinctrl: armada-37xx: propagate error from
  armada_37xx_pmx_gpio_set_direction() (stable-fixes).
- pinctrl: armada-37xx: propagate error from
  armada_37xx_gpio_get() (stable-fixes).
- pinctrl: mcp23s08: Reset all pins to input at probe
  (stable-fixes).
- software node: Correct a OOB check in
  software_node_get_reference_args() (stable-fixes).
- wifi: mt76: mt7996: drop fragments with multicast or broadcast
  RA (stable-fixes).
- wifi: mt76: mt7921: add 160 MHz AP for mt7922 device
  (stable-fixes).
- wifi: mt76: mt76x2: Add support for LiteOn WN4516R,WN4519R
  (stable-fixes).
- wifi: ath12k: fix macro definition HAL_RX_MSDU_PKT_LENGTH_GET
  (stable-fixes).
- wifi: ath12k: fix a possible dead lock caused by ab-&gt;base_lock
  (stable-fixes).
- wifi: ath11k: Fix QMI memory reuse logic (stable-fixes).
- wifi: rtw89: leave idle mode when setting WEP encryption for
  AP mode (stable-fixes).
- wifi: mac80211: do not offer a mesh path if forwarding is
  disabled (stable-fixes).
- wifi: iwlwifi: pcie: make sure to lock rxq-&gt;read (stable-fixes).
- wifi: mac80211_hwsim: Prevent tsf from setting if beacon is
  disabled (stable-fixes).
- wifi: ath12k: fix failed to set mhi state error during reboot
  with hardware grouping (stable-fixes).
- wifi: ath12k: fix link valid field initialization in the
  monitor Rx (stable-fixes).
- wifi: ath12k: fix incorrect CE addresses (stable-fixes).
- wifi: ath12k: Pass correct values of center freq1 and center
  freq2 for 160 MHz (stable-fixes).
- wifi: mac80211: VLAN traffic in multicast path (stable-fixes).
- wifi: iwlwifi: Add missing MODULE_FIRMWARE for Qu-c0-jf-b0
  (stable-fixes).
- usbnet: asix AX88772: leave the carrier control to phylink
  (stable-fixes).
- PM: runtime: fix denying of auto suspend in
  pm_suspend_timer_fn() (stable-fixes).
- ACPI: battery: negate current when discharging (stable-fixes).
- ACPICA: Avoid sequence overread in call to strncmp()
  (stable-fixes).
- ACPICA: utilities: Fix overflow check in vsnprintf()
  (stable-fixes).
- ACPICA: fix acpi parse and parseext cache leaks (stable-fixes).
- ACPICA: fix acpi operand cache leak in dswstate.c
  (stable-fixes).
- ACPI: bus: Bail out if acpi_kobj registration fails
  (stable-fixes).
- mmc: Add quirk to disable DDR50 tuning (stable-fixes).
- power: supply: bq27xxx: Retrieve again when busy (stable-fixes).
- power: supply: collie: Fix wakeup source leaks on device unbind
  (stable-fixes).
- ASoC: amd: yc: Add quirk for Lenovo Yoga Pro 7 14ASP9
  (stable-fixes).
- ASoC: tegra210_ahub: Add check to of_device_get_match_data()
  (stable-fixes).
- ASoC: tas2770: Power cycle amp on ISENSE/VSENSE change
  (stable-fixes).
- Input: sparcspkr - avoid unannotated fall-through
  (stable-fixes).
- commit 0dc7dde</changelog>
  <changelog author="tiwai@suse.de" date="1751198401">- drm/xe: Process deferred GGTT node removals on device unwind
  (git-fixes).
- drm/xe/display: Add check for alloc_ordered_workqueue()
  (git-fixes).
- drm/amd: Adjust output for discovery error handling (git-fixes).
- drm/xe/bmg: Update Wa_16023588340 (git-fixes).
- drm/v3d: Avoid NULL pointer dereference in
  `v3d_job_update_stats()` (stable-fixes).
- PCI: Add ACS quirk for Loongson PCIe (stable-fixes).
- wifi: mt76: mt7925: introduce thermal protection (stable-fixes).
- wifi: mac80211: validate SCAN_FLAG_AP in scan request during
  MLO (stable-fixes).
- wifi: rtw89: 8922a: fix TX fail with wrong VCO setting
  (stable-fixes).
- wifi: iwlwifi: mvm: fix beacon CCK flag (stable-fixes).
- wireless: purelifi: plfxlc: fix memory leak in
  plfxlc_usb_wreq_asyn() (stable-fixes).
- wifi: ath12k: using msdu end descriptor to check for rx
  multicast packets (stable-fixes).
- ACPI: Add missing prototype for non CONFIG_SUSPEND/CONFIG_X86
  case (stable-fixes).
- drm/amdgpu: read back register after written for VCN v4.0.5
  (stable-fixes).
- wifi: rtw89: phy: add dummy C2H event handler for report of
  TAS power (stable-fixes).
- drm/xe: Wire up device shutdown handler (stable-fixes).
- commit 59cc8a5</changelog>
  <changelog author="tiwai@suse.de" date="1751198402">- drm/xe/gt: Update handling of xe_force_wake_get return
  (stable-fixes).
- Refresh
  patches.suse/drm-xe-Fix-GT-for-each-engine-workarounds.patch.
- commit 2738ff8</changelog>
  <changelog author="pjakobsson@suse.de" date="1751284800">- drm/amdgpu: csa unmap use uninterruptible lock (CVE-2025-38011
  bsc#1244729).
- commit d370e7c</changelog>
  <changelog author="tiwai@suse.de" date="1751284801">- staging: rtl8723bs: Avoid memset() in aes_cipher() and
  aes_decipher() (git-fixes).
- serial: imx: Restore original RXTL for console to fix data loss
  (git-fixes).
- commit 652de47</changelog>
  <changelog author="tiwai@suse.de" date="1751284802">- serial: core: restore of_node information in sysfs (git-fixes).
- commit 6ac0cc6</changelog>
  <changelog author="osalvador@suse.de" date="1751284803">- mm/hugetlb: unshare page tables during VMA split, not before
  (bsc#1245431).
- commit cdfa193</changelog>
  <changelog author="osalvador@suse.de" date="1751284804">- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
  (bsc#1245431).
- commit 0b96583</changelog>
  <changelog author="osalvador@suse.de" date="1751284805">- mm/hugetlb: unshare page tables during VMA split, not before
  (bsc#1245431).
- commit bf8eb79</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1751284806">- netlink: specs: dpll: replace underscores with dashes in names
  (git-fixes).
- bnxt: properly flush XDP redirect lists (git-fixes).
- e1000e: set fixed clock frequency indication for Nahum 11 and
  Nahum 13 (git-fixes).
- net: ice: Perform accurate aRFS flow match (git-fixes).
- net/mlx5e: Fix leak of Geneve TLV option object (git-fixes).
- net/mlx5: Fix return value when searching for existing flow
  group (git-fixes).
- net/mlx5: Fix ECVF vports unload on shutdown flow (git-fixes).
- net/mlx5: Ensure fw pages are always allocated on same NUMA
  (git-fixes).
- i40e: retry VFLR handling if there is ongoing VF reset
  (git-fixes).
- i40e: return false from i40e_reset_vf if reset is in progress
  (git-fixes).
- gve: add missing NULL check for gve_alloc_pending_packet()
  in TX DQO (git-fixes).
- ice: fix rebuilding the Tx scheduler tree for large queue counts
  (git-fixes).
- ice: create new Tx scheduler nodes for new queues only
  (git-fixes).
- ice: fix Tx scheduler error handling in XDP callback
  (git-fixes).
- net/mlx4_en: Prevent potential integer overflow calculating Hz
  (git-fixes).
- gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt
  (git-fixes).
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid()
  (git-fixes).
- net/mlx5_core: Add error handling
  inmlx5_query_nic_vport_qkey_viol_cntr() (git-fixes).
- idpf: fix null-ptr-deref in idpf_features_check (CVE-2025-38053
  bsc#1244746).
- ice: Fix LACP bonds without SRIOV environment (git-fixes).
- ice: fix vf-&gt;num_mac count with port representors (git-fixes).
- devlink: fix port dump cmd type (git-fixes).
- devlink: Fix referring to hw_addr attribute during state
  validation (git-fixes).
- netlink: fix potential sleeping issue in mqueue_flush_file
  (git-fixes).
- commit 6dccf5f</changelog>
  <changelog author="osalvador@suse.de" date="1751284807">- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
  (bsc#1245431).
- commit dd145d5</changelog>
  <changelog author="ailiop@suse.com" date="1751284808">- nfsd: nfsd4_spo_must_allow() must check this is a v4 compound
  request (git-fixes).
- commit 784f61d</changelog>
  <changelog author="ohering@suse.de" date="1751284809">- add bug reference to existing hv_storvsc change (bsc#1245455).
- net: mana: Record doorbell physical address in PF mode (bsc#1244229).
- commit 1c553b0</changelog>
  <changelog author="tiwai@suse.de" date="1751371200">- rtc: cmos: use spin_lock_irqsave in cmos_interrupt (git-fixes).
- commit d8e756f</changelog>
  <changelog author="pfalcato@suse.de" date="1751371201">- perf/x86/intel: Fix segfault with PEBS-via-PT with sample_freq
  (CVE-2025-38055 bsc#1244747).
- commit 144da01</changelog>
  <changelog author="oneukum@suse.com" date="1751371202">- r8152: add vendor/device ID pair for Dell Alienware AW1022z
  (git-fixes).
- commit 9bd4e20</changelog>
</package>
<package pkgid="7d22c86211fa7b5ef519aa9bb9f4c733128c7fa42879ab34318bc9b42ed8a51a" name="kernel-source" arch="src">
  <version epoch="0" ver="6.4.0" rel="150700.53.11.1"/>
  <changelog author="ailiop@suse.com" date="1754913600">- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY
  (git-fixes).
- commit fd58755</changelog>
  <changelog author="ailiop@suse.com" date="1754913601">- sunrpc: fix client side handling of tls alerts (git-fixes).
- commit 4c093f3</changelog>
  <changelog author="ailiop@suse.com" date="1754913602">- NFS: Fix the setting of capabilities when automounting a new
  filesystem (git-fixes).
- commit fabe208</changelog>
  <changelog author="tzimmermann@suse.com" date="1754913603">- drm/amdgpu: Add basic validation for RAS header (bsc#1247252 CVE-2025-38426)
- commit 5d23e74</changelog>
  <changelog author="ailiop@suse.com" date="1754913604">- sched: Add test_and_clear_wake_up_bit() and
  atomic_dec_and_wake_up() (git-fixes).
- commit 3754627</changelog>
  <changelog author="ailiop@suse.com" date="1754913605">- NFS: Fix wakeup of __nfs_lookup_revalidate() in
  unblock_revalidate() (git-fixes).
- commit 80e576f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1754913606">- netlink: avoid infinite retry looping in netlink_unicast()
  (CVE-2025-38465 bsc#1247118).
- net: mana: Set tx_packets to post gso processing packet count
  (bsc#1245731).
- net: mana: Allocate MSI-X vectors dynamically (bsc#1245457).
- net: mana: Allow irq_setup() to skip cpus for affinity
  (bsc#1245457).
- net: mana: explain irq_setup() algorithm (bsc#1245457).
- PCI: hv: Allow dynamic MSI-X vector allocation (bsc#1245457).
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X
  allocations (bsc#1245457).
- net: mana: Add handler for hardware servicing events
  (bsc#1245730).
- net: mana: Expose additional hardware counters for drop and
  TC via ethtool (bsc#1245729).
- hv_netvsc: Use VF's tso_max_size value when data path is VF
  (bsc#1246203).
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE
  (bsc#1246203).
- commit bdd7f41</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1754913607">- net: mana: Add debug logs in MANA network driver (bsc#1246212).
- Refresh
  patches.suse/msft-hv-3280-net-mana-Add-support-for-Multi-Vports-on-Bare-metal.patch.
- commit 1b4ad82</changelog>
  <changelog author="ematsumiya@suse.de" date="1754913608">- [SMB3] send channel sequence number in SMB3 requests after
  reconnects (git-fixes).
- commit baa81e9</changelog>
  <changelog author="ematsumiya@suse.de" date="1754913609">- cifs: reconnect helper should set reconnect for the right
  channel (git-fixes).
- commit ae3173e</changelog>
  <changelog author="ematsumiya@suse.de" date="1754913610">- smb: client: fix potential deadlock when reconnecting channels
  (bsc#1246183, CVE-2025-38244).
- commit fcf601a</changelog>
  <changelog author="ematsumiya@suse.de" date="1754913611">- SMB3: rename macro CIFS_SERVER_IS_CHAN to avoid confusion
  (git-fixes).
- Refresh
  patches.suse/smb-client-fix-use-after-free-of-signing-key.patch.
- commit ee8ada8</changelog>
  <changelog author="petr.pavlu@suse.com" date="1754913612">- module: Fix memory deallocation on error path in move_module()
  (git-fixes).
- commit bb37d39</changelog>
  <changelog author="petr.pavlu@suse.com" date="1754913613">- audit,module: restore audit logging in load failure case
  (git-fixes).
- kABI: Fix the module::name type in audit_context (git-fixes).
- commit 7e23359</changelog>
  <changelog author="petr.pavlu@suse.com" date="1754913614">- module: Remove unnecessary +1 from last_unloaded_module::name
  size (git-fixes).
- commit 3efc8ab</changelog>
  <changelog author="petr.pavlu@suse.com" date="1754913615">- module: Restore the moduleparam prefix length check (git-fixes).
- commit ad2fc48</changelog>
  <changelog author="petr.pavlu@suse.com" date="1754913616">- ring-buffer: Do not allow events in NMI with generic atomic64
  cmpxchg() (git-fixes).
- commit 890fc59</changelog>
  <changelog author="ematsumiya@suse.de" date="1754913617">- smb3: move server check earlier when setting channel sequence
  number (git-fixes).
- commit df2adca</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1754913618">- ice: init flow director before RDMA (bsc#1247712).
- ice: simplify VF MSI-X managing (bsc#1247712).
- ice: enable_rdma devlink param (bsc#1247712).
- ice: treat dyn_allowed only as suggestion (bsc#1247712).
- ice, irdma: move interrupts code to irdma (bsc#1247712).
- ice: get rid of num_lan_msix field (bsc#1247712).
- ice: remove splitting MSI-X between features (bsc#1247712).
- ice: devlink PF MSI-X max and min parameter (bsc#1247712).
- ice: count combined queues using Rx/Tx count (bsc#1247712).
- commit 0afdc75</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1754913619">- ice, irdma: fix an off by one in error handling code
  (bsc#1247712).
- irdma: free iwdev-&gt;rf after removing MSI-X (bsc#1247712).
- ice: Fix signedness bug in ice_init_interrupt_scheme()
  (bsc#1247712).
- commit eba4226</changelog>
</package>
<package pkgid="37569d5b64f82a51215e6881578b50b91f15cfd51c9befda1cbbf3c98760ecb9" name="kernel-source" arch="src">
  <version epoch="0" ver="6.4.0" rel="150700.53.16.1"/>
  <changelog author="dsterba@suse.com" date="1756468800">- net: stmmac: make sure that ptp_rate is not 0 before configuring EST (CVE-2025-38125 bsc#1245710)
- commit 0fcfa4f</changelog>
  <changelog author="dsterba@suse.com" date="1756468801">- smb: client: add NULL check in automount_fullpath (CVE-2025-38208 bsc#1245815)
- commit 04d79fb</changelog>
  <changelog author="dsterba@suse.com" date="1756468802">- drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (CVE-2025-38205 bsc#1246005)
- commit e09f72d</changelog>
  <changelog author="dsterba@suse.com" date="1756468803">- tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (CVE-2025-38184 bsc#1245956)
- commit 263759a</changelog>
  <changelog author="dsterba@suse.com" date="1756468804">- clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (CVE-2025-38160 bsc#1245780)
- commit f8670f7</changelog>
  <changelog author="tiwai@suse.de" date="1756555200">- HID: asus: fix UAF via HID_CLAIMED_INPUT validation (git-fixes).
- HID: multitouch: fix slab out-of-bounds access in
  mt_report_fixup() (git-fixes).
- drm/mediatek: Fix device/node reference count leaks in
  mtk_drm_get_all_drm_priv (git-fixes).
- drm/msm/kms: move snapshot init earlier in KMS init (git-fixes).
- drm/msm: Defer fd_install in SUBMIT ioctl (git-fixes).
- drm/nouveau: remove unused memory target test (git-fixes).
- drm/nouveau: remove unused increment in gm200_flcn_pio_imem_wr
  (git-fixes).
- drm/nouveau: fix error path in nvkm_gsp_fwsec_v2 (git-fixes).
- drm/nouveau/disp: Always accept linear modifier (git-fixes).
- mISDN: hfcpci: Fix warning when deleting uninitialized timer
  (git-fixes).
- Bluetooth: hci_sync: fix set_local_name race condition
  (git-fixes).
- Bluetooth: hci_event: Detect if HCI_EV_NUM_COMP_PKTS is
  unbalanced (git-fixes).
- Bluetooth: hci_event: Mark connection as closed during suspend
  disconnect (git-fixes).
- Bluetooth: hci_event: Treat UNKNOWN_CONN_ID on disconnect as
  success (git-fixes).
- commit f54cbc7</changelog>
  <changelog author="tiwai@suse.de" date="1756555201">- drm/mediatek: Add error handling for old state CRTC in
  atomic_disable (git-fixes).
- drm/msm: update the high bitfield of certain DSI registers
  (git-fixes).
- drm/xe: Don't trigger rebind on initial dma-buf validation
  (git-fixes).
- drm/xe/vm: Clear the scratch_pt pointer on error (git-fixes).
- drm/xe/xe_sync: avoid race during ufence signaling (git-fixes).
- commit ea140bc</changelog>
  <changelog author="joao.povoas@suse.com" date="1756641600">- Update
  patches.suse/drm-imagination-Fix-kernel-crash-when-hard-resetting.patch
  (git-fixes CVE-2025-38521 bsc#1248232).
- Update
  patches.suse/drm-xe-pf-Clear-all-LMTT-pages-on-alloc.patch
  (git-fixes CVE-2025-38511 bsc#1248175).
- Update
  patches.suse/regulator-core-fix-NULL-dereference-on-unbind-due-to.patch
  (stable-fixes CVE-2025-38668 bsc#1248647).
- Update
  patches.suse/wifi-ath12k-Pass-ab-pointer-directly-to-ath12k_dp_tx.patch
  (git-fixes CVE-2025-38605 bsc#1248334).
- commit af57d5e</changelog>
  <changelog author="joao.povoas@suse.com" date="1756641601">- Update
  patches.suse/Bluetooth-btnxpuart-Resolve-TX-timeout-error-in-powe.patch
  (bsc#1230557 CVE-2024-58238 bsc#1242754).
- Update
  patches.suse/HID-quirks-Add-quirk-for-2-Chicony-Electronics-HP-5M.patch
  (stable-fixes CVE-2025-38540 bsc#1248208).
- Update
  patches.suse/PCI-pnv_php-Clean-up-allocated-IRQs-on-unplug.patch
  (bsc#1215199 CVE-2025-38624 bsc#1248617).
- Update
  patches.suse/PM-devfreq-Check-governor-before-using-governor-name.patch
  (git-fixes CVE-2025-38609 bsc#1248337).
- Update
  patches.suse/RDMA-hns-Fix-double-destruction-of-rsv_qp.patch
  (git-fixes CVE-2025-38582 bsc#1248349).
- Update
  patches.suse/arm64-entry-Mask-DAIF-in-cpu_switch_to-call_on_irq_stack.patch
  (git-fixes CVE-2025-38670 bsc#1248655).
- Update
  patches.suse/btrfs-fix-assertion-when-building-free-space-tree.patch
  (git-fixes CVE-2025-38503 bsc#1248183).
- Update
  patches.suse/can-netlink-can_changelink-fix-NULL-pointer-deref-of.patch
  (git-fixes CVE-2025-38665 bsc#1248648).
- Update
  patches.suse/clk-davinci-Add-NULL-check-in-davinci_lpsc_clk_regis.patch
  (git-fixes CVE-2025-38635 bsc#1248573).
- Update
  patches.suse/clk-xilinx-vcu-unregister-pll_post-only-if-registere.patch
  (git-fixes CVE-2025-38583 bsc#1248350).
- Update
  patches.suse/comedi-aio_iiro_16-Fix-bit-shift-out-of-bounds.patch
  (git-fixes CVE-2025-38529 bsc#1248196).
- Update
  patches.suse/comedi-pcl812-Fix-bit-shift-out-of-bounds.patch
  (git-fixes CVE-2025-38530 bsc#1248206).
- Update
  patches.suse/crypto-ccp-Fix-crash-when-rebind-ccp-device-for-ccp..patch
  (git-fixes CVE-2025-38581 bsc#1248345).
- Update
  patches.suse/dmaengine-nbpfaxi-Fix-memory-corruption-in-probe.patch
  (git-fixes CVE-2025-38538 bsc#1248213).
- Update patches.suse/drm-amd-display-Fix-vs-typos.patch
  (git-fixes CVE-2024-26661 bsc#1222323).
- Update
  patches.suse/drm-sched-Increment-job-count-before-swapping-tail-s.patch
  (git-fixes CVE-2025-38515 bsc#1248212).
- Update
  patches.suse/drm-tegra-nvdec-Fix-dma_alloc_coherent-error-check.patch
  (git-fixes CVE-2025-38543 bsc#1248214).
- Update
  patches.suse/fbdev-imxfb-Check-fb_add_videomode-to-prevent-null-p.patch
  (git-fixes CVE-2025-38630 bsc#1248575).
- Update
  patches.suse/hfsplus-remove-mutex_lock-check-in-hfsplus_free_extents.patch
  (git-fixes CVE-2025-38650 bsc#1248746).
- Update
  patches.suse/hwmon-corsair-cpro-Validate-the-size-of-the-received.patch
  (git-fixes CVE-2025-38548 bsc#1248228).
- Update
  patches.suse/i2c-qup-jump-out-of-the-loop-in-case-of-timeout.patch
  (git-fixes CVE-2025-38671 bsc#1248652).
- Update
  patches.suse/ipv6-fix-possible-infinite-loop-in-fib6_info_uses_de.patch
  (git-fixes CVE-2025-38587 bsc#1248361).
- Update
  patches.suse/ipv6-mcast-Delay-put-pmc-idev-in-mld_del_delrec.patch
  (git-fixes CVE-2025-38550 bsc#1248227).
- Update
  patches.suse/ipv6-prevent-infinite-loop-in-rt6_nlmsg_size.patch
  (git-fixes CVE-2025-38588 bsc#1248368).
- Update
  patches.suse/ipv6-reject-malicious-packets-in-ipv6_gso_segment.patch
  (git-fixes CVE-2025-38572 bsc#1248399).
- Update
  patches.suse/iwlwifi-Add-missing-check-for-alloc_ordered_workqueu.patch
  (git-fixes CVE-2025-38602 bsc#1248341).
- Update
  patches.suse/kasan-remove-kasan_find_vm_area-to-prevent-possible-.patch
  (git-fixes CVE-2025-38510 bsc#1248166).
- Update
  patches.suse/ksmbd-fix-out-of-bounds-read-in-smb2_sess_setup.patch
  (bsc#1012628 bsc#1213545 CVE-2023-3867).
- Update
  patches.suse/ksmbd-fix-wrong-next-length-validation-of-ea-b.patch
  (bsc#1012628 CVE-2023-4130 bsc#1248164).
- Update patches.suse/ksmbd-validate-command-request-size.patch
  (bsc#1012628 CVE-2023-4515 bsc#1248180).
- Update
  patches.suse/md-make-rdev_addable-usable-for-rcu-mode.patch
  (git-fixes CVE-2025-38621 bsc#1248609).
- Update
  patches.suse/net-packet-fix-a-race-in-packet_set_ring-and-packet_.patch
  (git-fixes CVE-2025-38617 bsc#1248621).
- Update patches.suse/net-phy-Don-t-register-LEDs-for-genphy.patch
  (git-fixes CVE-2025-38537 bsc#1248229).
- Update
  patches.suse/net-sched-Restrict-conditions-for-adding-duplicating.patch
  (git-fixes CVE-2025-38553 bsc#1248255).
- Update
  patches.suse/net-sched-mqprio-fix-stack-out-of-bounds-write-in-tc.patch
  (git-fixes CVE-2025-38568 bsc#1248386).
- Update
  patches.suse/nilfs2-reject-invalid-file-types-when-reading-inodes.patch
  (git-fixes CVE-2025-38663 bsc#1248636).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/phy-tegra-xusb-Fix-unbalanced-regulator-disable-in-U.patch
  (git-fixes CVE-2025-38535 bsc#1248240).
- Update
  patches.suse/pinctrl-qcom-msm-mark-certain-pins-as-invalid-for-in.patch
  (git-fixes CVE-2025-38516 bsc#1248209).
- Update
  patches.suse/pinmux-fix-race-causing-mux_owner-NULL-with-active-m.patch
  (git-fixes CVE-2025-38632 bsc#1248669).
- Update
  patches.suse/power-supply-cpcap-charger-Fix-null-check-for-power_.patch
  (git-fixes CVE-2025-38634 bsc#1248666).
- Update
  patches.suse/powercap-dtpm_cpu-Fix-NULL-pointer-dereference-in-ge.patch
  (git-fixes CVE-2025-38610 bsc#1248395).
- Update
  patches.suse/powerpc-eeh-Make-EEH-driver-device-hotplug-safe.patch
  (bsc#1215199 CVE-2025-38576 bsc#1248354).
- Update
  patches.suse/staging-fbtft-fix-potential-memory-leak-in-fbtft_fra.patch
  (git-fixes CVE-2025-38612 bsc#1248390).
- Update
  patches.suse/sunrpc-fix-client-side-handling-of-tls-alerts.patch
  (git-fixes CVE-2025-38571 bsc#1248401).
- Update
  patches.suse/sunrpc-fix-handling-of-server-side-tls-alerts.patch
  (git-fixes CVE-2025-38566 bsc#1248374).
- Update
  patches.suse/tls-stop-recv-if-initial-process_rx_list-gave-us-non.patch
  (bsc#1221858 CVE-2024-58239 bsc#1248614).
- Update
  patches.suse/usb-gadget-fix-use-after-free-in-composite_dev_clean.patch
  (git-fixes CVE-2025-38555 bsc#1248297).
- Update
  patches.suse/wifi-ath11k-clear-initialized-flag-for-deinit-ed-srn.patch
  (git-fixes CVE-2025-38601 bsc#1248340).
- Update
  patches.suse/wifi-iwlwifi-Fix-error-code-in-iwl_op_mode_dvm_start.patch
  (git-fixes CVE-2025-38656 bsc#1248643).
- Update
  patches.suse/wifi-mac80211-reject-TDLS-operations-when-station-is.patch
  (git-fixes CVE-2025-38644 bsc#1248748).
- Update
  patches.suse/wifi-mt76-mt7925-Fix-null-ptr-deref-in-mt7925_therma.patch
  (git-fixes CVE-2025-38541 bsc#1248216).
- Update
  patches.suse/wifi-prevent-A-MSDU-attacks-in-mesh-networks.patch
  (stable-fixes CVE-2025-38512 bsc#1248178).
- Update
  patches.suse/wifi-rtl818x-Kill-URBs-before-clearing-tx-status-que.patch
  (git-fixes CVE-2025-38604 bsc#1248333).
- Update
  patches.suse/wifi-rtw89-avoid-NULL-dereference-when-RX-problemati.patch
  (git-fixes CVE-2025-38646 bsc#1248577).
- Update
  patches.suse/wifi-zd1211rw-Fix-potential-NULL-pointer-dereference.patch
  (git-fixes CVE-2025-38513 bsc#1248179).
- commit efc5ee0</changelog>
  <changelog author="nik.borisov@suse.com" date="1756728000">- RAS/AMD/ATL: Include row bit in row retirement (bsc#1242034).
- commit fa3fcbb</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1756728001">- ixgbe: fix ixgbe_orom_civd_info struct layout (bsc#1245410).
- commit 53ae51b</changelog>
  <changelog author="nik.borisov@suse.com" date="1756728002">- RAS/AMD/FMPM: Get masked address (bsc#1242034).
- commit 4171987</changelog>
  <changelog author="nik.borisov@suse.com" date="1756728003">- RAS/AMD/FMPM: Use atl internal.h for INVALID_SPA (bsc#1242034).
- commit ac5d9dc</changelog>
  <changelog author="pmladek@suse.com" date="1756728004">- slab: Decouple slab_debug and no_hash_pointers (bsc#1249022).
- commit 41f928f</changelog>
  <changelog author="jgross@suse.com" date="1756728005">- KVM: Allow CPU to reschedule while setting per-page memory
  attributes (bsc#1248186 CVE-2025-38506).
- commit a7f8a41</changelog>
  <changelog author="nmorey@suse.com" date="1756728006">- RDMA/core: reduce stack using in nldev_stat_get_doit() (git-fixes)
- commit 1ff622a</changelog>
  <changelog author="nmorey@suse.com" date="1756728007">- RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (git-fixes)
- commit 5289b12</changelog>
  <changelog author="jgross@suse.com" date="1756728008">- vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1248511
  CVE-2025-38618).
- commit 0256bd0</changelog>
  <changelog author="tiwai@suse.de" date="1756728009">- staging: media: atomisp: Fix stack buffer overflow in
  gmin_get_var_int() (CVE-2025-38585 bsc#1248355).
- commit f7d8b23</changelog>
  <changelog author="msuchanek@suse.de" date="1757419200">- kernel-subpackage-build: Decompress ghost file when compressed version exists (bsc#1249346)
- commit 40606b5</changelog>
</package>
<package pkgid="05659bee6b62847fa83d42ecebb95d14691e860b4667a8d9ad6f9fbfdad74ee4" name="kernel-source" arch="src">
  <version epoch="0" ver="6.4.0" rel="150700.53.19.1"/>
  <changelog author="pmladek@suse.com" date="1759492800">- kbuild/modpost: Continue processing all unresolved symbols
  when KLP_SYM_RELA is found (bsc#1218644, bsc#1250655).
- commit ec0a51c</changelog>
  <changelog author="ailiop@suse.com" date="1759492801">- Squashfs: fix uninit-value in squashfs_get_parent (git-fixes).
- commit 126861e</changelog>
  <changelog author="pjakobsson@suse.de" date="1759492802">- Replace drm-backport-placeholder with actual jira tickets
  For unknown reasons a portion of the patches didn't get their
  placeholder tag replaced during the drm backport. Let's fix them now.
- Update patches.suse/0001-PCI-Add-pci_get_base_class-helper.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0001-accel-ivpu-Annotate-struct-ivpu_job-with-__counted_b.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0001-drm-prime-Unexport-helpers-for-fd-handle-conversion.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071 bsc#1212533).
- Update
  patches.suse/0001-drm-vmwgfx-Keep-a-gem-reference-to-user-bos-in-surfa.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  CVE-2023-5633, bsc#1216527).
- Update
  patches.suse/0001-mm-factor-out-VMA-stack-and-heap-checks.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0002-PCI-Add-pci_is_vga-helper.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0002-drm-amdkfd-use-vma_is_initial_stack-and-vma_is_initi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0002-drm-sched-Make-sure-we-wait-for-all-dependencies-in-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0002-drm-tests-Use-KUNIT_DEFINE_ACTION_WRAPPER.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0002-fbdev-Simplify-fb_is_primary_device-for-x86.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0003-drm-vc4-tests-Use-KUNIT_DEFINE_ACTION_WRAPPER.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0003-fbdev-Prepare-generic-architecture-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0004-arch-x86-Implement-asm-fb.h-with-generic-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0004-drm-tests-Switch-to-kunit-devices.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0005-drm-modes-replace-deprecated-strncpy-with-strscpy_pa.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0005-drm-ttm-fix-warning-that-we-shouldn-t-mix-and.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0006-accel-ivpu-Use-struct_size.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0006-arch-arm64-Implement-asm-fb.h-with-generic-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0006-drivers-gpu-drm-i915-i915_memcpy.c-fix-missing-inclu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0006-drm-nouveau-kms-nv50-Fix-drm_dp_remove_payload-invoc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0006-drm-rockchip-vop-Add-rv1126-vop_lite-support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0007-accel-ivpu-Remove-configuration-of-MMU-TBU1-and-TBU3.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0007-arch-sparc-Implement-fb_is_primary_device-in-source-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0007-docs-driver-api-properly-format-ToC-headings.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0007-drm-rockchip-dsi-Add-rv1126-MIPI-DSI-support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0007-drm-sched-Call-drm_sched_fence_set_parent-from-drm_s.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0008-accel-ivpu-Add-MMU-support-for-4-level-page-mappings.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0008-accel-ivpu-Document-DRM_IVPU_PARAM_CAPABILITIES.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0008-arch-ia64-Implement-asm-fb.h-with-generic-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0008-drm-atomic-helper-Fix-spelling-mistake-preceeding-pr.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0009-accel-ivpu-Make-DMA-bit-mask-HW-specific.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0009-arch-loongarch-Implement-asm-fb.h-with-generic-helpe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0009-drm-extract-closefb-logic-in-separate-function.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0010-accel-ivpu-Rename-and-cleanup-MMU600-page-tables.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0010-arch-mips-Implement-asm-fb.h-with-generic-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0010-drm-introduce-CLOSEFB-IOCTL.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0011-accel-ivpu-Mark-64-kB-contiguous-areas-as-contiguous.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0011-arch-sparc-Implement-asm-fb.h-with-generic-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0011-drm-doc-describe-PATH-format-for-DP-MST.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0012-accel-qaic-Enable-1-MSI-fallback-mode.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0012-arch-x86-Include-asm-fb.h-in-fbdev-source-file.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0012-drm-bridge-lvds-codec-Implement-atomic_get_input_bus.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0013-accel-qaic-Add-support-for-periodic-timesync.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0013-fbdev-Include-linux-io.h-in-various-drivers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0014-accel-qaic-Support-MHI-QAIC_TIMESYNC-channel.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0014-fbdev-Include-linux-fb.h-instead-of-asm-fb.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0015-drm-rockchip-vop-Use-cleanup-helper-directly-as-dest.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0015-fbdev-Move-framebuffer-I-O-helpers-into-asm-fb.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0016-accel-ivpu-Update-FW-API.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0016-fbdev-Rename-fb_mem-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0017-accel-ivpu-Remove-unneeded-drm_driver-declaration.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0017-drm-radeon-Replace-all-non-returning-strlcpy-with-st.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0017-minmax-add-in_range-macro.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0018-accel-ivpu-Add-dvfs_mode-file-to-debugfs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0018-drm-amd-pm-Replace-all-non-returning-strlcpy-with-st.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0018-drm-i915-Move-abs_diff-to-math.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0018-x86-fbdev-Include-asm-fb.h-as-needed.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0019-accel-ivpu-Remove-reset-from-power-up-sequence.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0019-drm-bridge-panel-Add-a-device-link-between-drm-devic.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0019-drm-display-dp_mst-Replace-all-non-returning-strlcpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0019-drm-panel-edp-Add-AUO-B116XAB01.4-edp-panel-entry.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0020-accel-ivpu-Add-support-for-VPU_JOB_FLAGS_NULL_SUBMIS.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0020-drm-panel-s6d7aa0-remove-the-unneeded-variable-in-s6.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0020-drm-panel-simple-Add-support-for-Mitsubishi-AA084XE0.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0020-drm-rockchip-Replace-all-non-returning-strlcpy-with-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0021-accel-ivpu-Change-test_mode-module-param-to-bitmask.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0021-drm-mediatek-Replace-all-non-returning-strlcpy-with-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0021-drm-panel-Add-driver-for-Visionox-r66451-panel.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0021-drm-panel-JDI-LT070ME05000-drop-broken-link.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0022-accel-ivpu-40xx-Capture-D0i3-entry-host-and-device-t.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0022-drm-komeda-Convert-to-platform-remove-callback-retur.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0022-drm-panel-Add-driver-for-JDI-LPM102A188A.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0022-drm-sun4i-hdmi-Replace-all-non-returning-strlcpy-wit.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0023-accel-ivpu-Pass-D0i3-residency-time-to-the-VPU-firmw.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0023-drm-arm-hdlcd-Convert-to-platform-remove-callback-re.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0023-drm-i2c-tda998x-Replace-all-non-returning-strlcpy-wi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0024-accel-ivpu-Introduce-ivpu_ipc_send_receive_active.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0024-drm-arm-malidp-Convert-to-platform-remove-callback-r.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0024-drm-panfrost-Do-not-check-for-0-return-after-calling.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0024-mm-gup-remove-unused-vmas-parameter-from-get_user_pa.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0025-accel-ivpu-Add-support-for-delayed-D0i3-entry-messag.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0025-doc-uapi-Add-document-describing-dma-buf-semantics.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0025-drm-aspeed-Convert-to-platform-remove-callback-retur.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0026-drm-atmel-hlcdc-Convert-to-platform-remove-callback-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0026-drm-gma500-remove-duplicate-macro-definitions.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0026-drm-v3d-wait-for-all-jobs-to-finish-before-unregiste.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0027-drm-fsl-dcu-Convert-to-platform-remove-callback-retu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0027-drm-panfrost-Remove-incorrect-IS_ERR-check.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0027-fbdev-hitfb-Declare-hitfb_blank-as-static.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0028-drm-gma500-Remove-unused-declarations.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0028-drm-hisilicon-Convert-to-platform-remove-callback-re.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0028-fbdev-metronomefb-Add-MODULE_FIRMWARE-macro.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0029-drm-lima-Convert-to-platform-remove-callback-returni.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0029-drm-repaper-fix-Wvoid-pointer-to-enum-cast-warning.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0029-fbdev-broadsheetfb-Add-MODULE_FIRMWARE-macro.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0030-accel-ivpu-40xx-Allow-to-change-profiling-frequency.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0030-drm-logicvc-Convert-to-platform-remove-callback-retu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0030-drm-tests-Test-default-pitch-fallback.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0030-video-hdmi-Reorder-fields-in-struct-hdmi_avi_infofra.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0031-accel-ivpu-Assure-device-is-off-if-power-up-sequence.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0031-drm-mcde-Convert-to-platform-remove-callback-returni.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0031-drm-tests-Add-KUnit-tests-for-drm_fb_swab.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0031-fbdev-media-Use-GPIO-descriptors-for-VIA-GPIO.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0032-accel-ivpu-Stop-job_done_thread-on-suspend.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0032-drm-meson-Convert-to-platform-remove-callback-return.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0032-drm-tests-Add-KUnit-tests-for-drm_fb_clip_offset.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0032-fbdev-hitfb-Fix-integer-to-pointer-cast.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0033-accel-ivpu-Abort-pending-rx-ipc-on-reset.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0033-drm-mxsfb-Convert-to-platform-remove-callback-return.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0033-drm-tests-Add-KUnit-tests-for-drm_fb_build_fourcc_li.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0033-fbdev-hitfb-Use-NULL-for-pointers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0034-accel-ivpu-Print-CMDQ-errors-after-consumer-timeout.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0034-drm-panel-Convert-to-platform-remove-callback-return.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0034-drm-tests-Add-multi-plane-support-to-conversion_buf_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0034-fbdev-sh_mobile_lcdcfb-Fix-ARGB32-overlay-format-typ.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0035-accel-ivpu-Make-DMA-allocations-for-MMU600-write-com.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0035-drm-panfrost-Convert-to-platform-remove-callback-ret.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0035-drm-tests-Add-KUnit-tests-for-drm_fb_memcpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0035-fbdev-sh7760fb-Fix-Wimplicit-fallthrough-warnings.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0036-accel-ivpu-Simplify-MMU-SYNC-command.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0036-drm-rockchip-Convert-to-platform-remove-callback-ret.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0036-fbdev-sbus-Build-sbuslib.o-if-CONFIG_FB_SBUS-has-bee.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0037-accel-ivpu-Rename-VPU-to-NPU-in-product-strings.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0037-drm-sti-Convert-to-platform-remove-callback-returnin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0037-drm-vkms-Use-drmm_crtc_init_with_planes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0037-fbdev-sbus-Forward-declare-all-necessary-structures-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0038-drm-sched-Add-drm_sched_wqueue_-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0038-drm-stm-Convert-to-platform-remove-callback-returnin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0038-drm-vkms-Use-drmm_mode_config_init.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0038-fbdev-sbus-Add-initializer-macros-and-Kconfig-tokens.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0039-drm-bridge-fsl-ldb-Add-i.MX6SX-support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0039-drm-sched-Convert-drm-scheduler-to-use-a-work-queue-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0039-drm-sun4i-Convert-to-platform-remove-callback-return.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0039-fbdev-bw2-Use-initializer-macro-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0040-drm-sched-Split-free_job-into-own-work-item.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0040-drm-tidss-Convert-to-platform-remove-callback-return.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0040-fbdev-cg14-Use-initializer-macro-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0041-drm-gma500-Use-drm_aperture_remove_conflicting_pci_f.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0041-drm-sched-Add-drm_sched_start_timeout_unlocked-helpe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0041-drm-tiny-Convert-to-platform-remove-callback-returni.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0041-fbdev-cg3-Use-initializer-macro-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0042-drm-sched-Add-a-helper-to-queue-TDR-immediately.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0042-drm-tve200-Convert-to-platform-remove-callback-retur.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0042-fbdev-cg6-Use-initializer-macro-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0042-video-aperture-use-generic-code-to-figure-out-the-vg.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0043-drm-aperture-Remove-primary-argument.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0043-drm-v3d-Convert-to-platform-remove-callback-returnin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0043-fbdev-ffb-Use-initializer-macro-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0043-fbdev-simplefb-Support-memory-region-property.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0044-drm-vc4-Convert-to-platform-remove-callback-returnin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0044-fbdev-leo-Use-initializer-macro-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0044-fbdev-simplefb-Add-support-for-generic-power-domains.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0044-video-aperture-Only-kick-vgacon-when-the-pdev-is-dec.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0045-drm-v3d-update-UAPI-to-match-user-space-for-V3D-7.x.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0045-drm-xlnx-zynqmp_dpsub-Convert-to-platform-remove-cal.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0045-fbdev-p9100-Use-initializer-macro-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0045-video-aperture-Move-vga-handling-to-pci-function.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0046-drm-rcar-du-Convert-to-platform-remove-callback-retu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0046-drm-v3d-fix-up-register-addresses-for-V3D-7.x.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0046-fbdev-tcx-Use-initializer-macro-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0046-video-aperture-Drop-primary-argument.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0047-drm-debugfs-drop-debugfs_init-for-the-render-and-acc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0047-drm-tilcdc-Convert-to-platform-remove-callback-retur.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0047-drm-v3d-add-brcm-2712-v3d-as-a-compatible-V3D-device.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0047-video-aperture-Only-remove-sysfb-on-the-default-vga-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0048-accel-qaic-Quiet-array-bounds-check-on-DMA-abort-mes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0048-drm-debugfs-disallow-debugfs-access-when-device-isn-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0048-drm-omap-Convert-to-platform-remove-callback-returni.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0048-video-aperture-Provide-a-VGA-helper-for-gma500-and-i.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0049-accel-qaic-Support-for-0-resize-slice-execution-in-B.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0049-dma-buf-dma-resv.c-fix-a-typo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0049-drm-ssd130x-Make-default-width-and-height-to-be-cont.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0050-drm-debugfs-rework-debugfs-directory-creation-v5.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0050-drm-panel-nt36523-Add-DCS-backlight-support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0050-drm-sched-Rename-drm_sched_get_cleanup_job-to-be-mor.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0050-drm-ssd130x-Set-the-page-height-value-in-the-device-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0051-drm-debugfs-remove-dev-debugfs_list-and-debugfs_mute.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0051-drm-panel-nt36523-Get-orientation-from-OF.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0051-drm-sched-Move-free-worker-re-queuing-out-of-the-if-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0051-drm-ssd130x-Don-t-allocate-buffers-on-each-plane-upd.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0052-drm-debugfs-rework-drm_debugfs_create_files-implemen.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0052-drm-panel-nt36523-Add-Lenovo-J606F-panel.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0052-drm-sched-Rename-drm_sched_free_job_queue-to-be-more.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0052-drm-ssd130x-Remove-hardcoded-bits-per-pixel-in-ssd13.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0053-accel-ivpu-Move-set-autosuspend-delay-to-HW-specific.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0053-drm-nouveau-debugfs-Move-an-expression-into-a-functi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0053-drm-sched-Rename-drm_sched_run_job_queue_if_ready-an.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0053-drm-virtio-Remove-unused-function-declarations.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0054-accel-ivpu-Remove-duplicated-error-messages.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0054-drm-ingenic-Kconfig-select-REGMAP-and-REGMAP_MMIO.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0054-drm-nouveau-debugfs-Move-a-variable-assignment-behin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0054-drm-sched-Drop-suffix-from-drm_sched_wakeup_if_can_q.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0054-fbdev-smscufx-Use-fb_ops-helpers-for-deferred-I-O.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0055-accel-ivpu-Make-ivpu_pm_init-void.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0055-drm-Do-not-round-to-megabytes-for-greater-than-1MiB-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0055-drm-nouveau-debugfs-Use-seq_putc-in-nouveau_debugfs_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0055-drm-tidss-Add-support-for-AM625-DSS.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0055-fbdev-udlfb-Use-fb_ops-helpers-for-deferred-I-O.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0056-accel-ivpu-Add-information-about-context-on-failure.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0056-drm-msm-Initialize-mmap-offset-after-constructing-th.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0056-drm-nouveau-debugfs-Replace-five-seq_printf-calls-by.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0056-drm-v3d-Implement-show_fdinfo-callback-for-GPU-usage.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0056-fbdev-Add-Kconfig-macro-FB_IOMEM_HELPERS_DEFERRED.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0057-accel-ivpu-Initialize-context-with-SSID-1.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0057-drm-Remove-struct-drm_driver.gem_prime_mmap.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0057-drm-nouveau-bios-power_budget-Move-an-expression-int.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0057-drm-v3d-Expose-the-total-GPU-usage-stats-on-sysfs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0057-fbdev-hyperv_fb-Use-fb_ops-helpers-for-deferred-I-O.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0058-accel-ivpu-Move-ivpu_fw_load-to-ivpu_fw_init.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0058-drm-amdgpu-Remove-struct-drm_driver.gem_prime_mmap.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0058-drm-bridge-it66121-Extend-match-support-for-OF-table.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0058-drm-nouveau-clk-Move-a-variable-assignment-behind-a-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0059-accel-ivpu-37xx-Change-register-rename-leftovers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0059-accel-ivpu-Fix-compilation-with-CONFIG_PM-n.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0059-drm-nouveau-pci-Move-a-variable-assignment-behind-co.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0059-drm-vkms-Add-kernel-doc-to-the-function-vkms_compose.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0060-accel-ivpu-37xx-White-space-cleanup.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0060-drm-nouveau-pci-Move-an-expression-into-a-function-c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0060-drm-sched-Don-t-disturb-the-entity-when-in-RR-mode-s.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0060-drm-vkms-Fix-all-kernel-doc-warnings-of-the-vkms_com.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0061-accel-ivpu-Allocate-vpu_addr-in-gem-open-callback.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0061-accel-ivpu-Move-MMU-register-definitions-to-ivpu_mmu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0061-drm-bridge-lt9611uxc-Add-MODULE_FIRMWARE-macro.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0061-drm-nouveau-therm-Move-an-assignment-statement-behin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0062-accel-ivpu-Fix-locking-in-ivpu_bo_remove_all_bos_fro.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0062-accel-ivpu-Print-information-about-used-workarounds.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0062-dma-buf-heaps-Don-t-assert-held-reservation-lock-for.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0063-accel-ivpu-Remove-support-for-uncached-buffers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0063-drm-gem-Check-for-valid-formats.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0063-udmabuf-Don-t-assert-held-reservation-lock-for-dma-b.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0064-accel-ivpu-Use-GEM-shmem-helper-for-all-buffers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0064-drm-Don-t-assert-held-reservation-lock-for-dma-buf-m.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0064-drm-bridge-analogix-anx78xx-Drop-ID-table.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0064-video-Remove-trailing-whitespaces.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0065-dma-buf-Change-locking-policy-for-mmap.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0065-drm-bridge-Drop-conditionals-around-of_node-pointers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0065-drm-todo-Add-entry-to-clean-up-former-seltests-suite.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0065-video-Move-HP-PARISC-STI-core-code-to-shared-locatio.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0066-arch-parisc-Implement-fb_is_primary_device-under-arc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0066-drm-bridge-Drop-CONFIG_OF-conditionals-around-of_nod.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0066-drm-edid-split-out-drm_eld.h-from-drm_edid.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0066-drm-shmem-helper-Switch-to-reservation-lock.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0067-drm-bridge-tc358764-Use-BIT-macro-for-actual-bits.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0067-drm-bridge-ti-sn65dsi86-Implement-wait_hpd_asserted.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0067-drm-connector-document-DRM_MODE_COLORIMETRY_COUNT.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0067-drm-eld-replace-uint8_t-with-u8.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0068-drm-armada-Include-linux-of.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0068-drm-bridge-it66121-Simplify-probe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0068-drm-bridge-tc358762-Split-register-programming-from-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0068-drm-doc-rfc-No-STAGING-out-of-drivers-staging.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0068-drm-edid-include-drm_eld.h-only-where-required.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0069-drm-armada-Hide-fbdev-support-behind-config-option.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0069-drm-bridge-tc358762-Switch-to-atomic-ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0069-drm-doc-rfc-Mark-Dev_coredump-as-completed.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0069-drm-edid-use-a-temp-variable-for-sads-to-drop-one-le.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0070-drm-armada-Initialize-fbdev-DRM-client.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0070-drm-bridge-tc358762-Instruct-DSI-host-to-generate-HS.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0070-drm-doc-rfc-Mark-DRM_VM_BIND-as-complete.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0070-drm-edid-add-helpers-to-get-set-struct-cea_sad-from-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0071-drm-armada-Implement-fbdev-emulation-as-in-kernel-cl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0071-drm-bridge-tc358762-Guess-the-meaning-of-LCDCTRL-bit.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0071-drm-doc-rfc-Mark-GPU-VA-as-complete.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0071-drm-eld-add-helpers-to-modify-the-SADs-of-an-ELD.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0072-drm-bridge-tc358762-Handle-HS-VS-polarity.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0072-drm-debugfs-Add-inline-to-drm_debugfs_dev_init-to-su.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0072-drm-panel-simple-Add-InnoLux-G070ACE-L01.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0072-drm-sched-Qualify-drm_sched_wakeup-by-drm_sched_enti.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0073-drm-display-Add-missing-OLED-Vesa-brightnesses-defin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0073-drm-i2c-Switch-i2c-drivers-back-to-use-.probe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0073-drm-tests-Zero-initialize-fourccs_out.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0074-drm-bridge-anx7625-Drop-of_gpio-header.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0074-drm-mst-delete-unnecessary-case-in-drm_dp_add_payloa.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0075-drm-mgag200-set-variable-mgag200_modeset-storage-cla.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0075-drm-mst-Refactor-the-flow-for-payload-allocation-rem.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0075-drm-panel-edp-drm-panel-edp-Add-several-generic-edp-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0075-drm-sti-Drop-of_gpio-header.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0076-drm-fix-code-style-for-embedded-structs-in-hdr_metad.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0076-drm-imx-ipuv3-Convert-to-platform-remove-callback-re.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0076-drm-sched-Define-pr_fmt-for-DRM-using-pr_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0076-drm-tve200-Use-devm_platform_ioremap_resource.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0077-drm-ingenic-Convert-to-platform-remove-callback-retu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0077-drm-sched-implement-dynamic-job-flow-control.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0077-drm-scheduler-properly-forward-fence-errors.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0077-drm-sysfs-rename-drm_sysfs_connector_status_event.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0078-drm-bridge_connector-use-drm_kms_helper_connector_ho.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0078-drm-msm-Convert-to-platform-remove-callback-returnin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0078-drm-scheduler-add-drm_sched_entity_error-and-use-rcu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0079-drm-atomic-log-drm_atomic_replace_property_blob_from.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0079-drm-panfrost-Perform-hard-reset-to-recover-GPU-if-so.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0079-drm-shmobile-Convert-to-platform-remove-callback-ret.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0079-drm-tests-Add-test-cases-for-drm_rect_intersect.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0080-drm-atomic-drop-extra-bracket-from-log-messages.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0080-drm-panfrost-Tighten-polling-for-soft-reset-and-powe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0080-drm-ssd130x-Print-the-PWM-s-label-instead-of-its-num.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0080-drm-tests-Add-test-cases-for-drm_rect_calc_hscale.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0081-drm-atomic-log-when-getting-setting-unknown-properti.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0081-drm-panfrost-Implement-ability-to-turn-on-off-GPU-cl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0081-drm-tests-Add-test-cases-for-drm_rect_calc_vscale.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0082-drm-atomic-log-when-CRTC_ID-prop-value-is-invalid.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0082-drm-panfrost-Set-clocks-on-off-during-system-sleep-o.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0082-drm-ssd130x-Use-bool-for-ssd130x_deviceinfo-flags.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0082-drm-tests-Add-test-cases-for-drm_rect_rotate.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0083-drm-atomic-log-on-attempt-to-set-legacy-DPMS-propert.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0083-drm-panfrost-Implement-ability-to-turn-on-off-regula.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0083-drm-test-Add-test-cases-for-drm_rect_rotate_inv.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0083-fbdev-au1200fb-Do-not-display-boot-up-logo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0084-drm-atomic-log-when-page-flip-is-requested-without-C.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0084-drm-panfrost-Set-regulators-on-off-during-system-sle.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0084-fbdev-mmp-mmpfb-Do-not-display-boot-up-logo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0085-drm-atomic-log-errors-in-drm_mode_atomic_ioctl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0085-drm-vc4-Switch-to-container_of_const.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0085-drm-virtio-use-uint64_t-more-in-virtio_gpu_context_i.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0085-fbdev-core-Fix-style-of-code-for-boot-up-logo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0086-drm-kms-log-when-querying-an-object-not-included-in-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0086-drm-uapi-add-explicit-virtgpu-context-debug-name.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0086-drm-vc4-hdmi-Update-all-the-planes-if-the-TV-margins.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0086-fbdev-core-Unexport-logo-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0087-drm-bridge-ps8640-Drop-the-ability-of-ps8640-to-fetc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0087-drm-gpuvm-convert-WARN-to-drm_WARN-variants.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0087-drm-vc4-hdmi-Add-Broadcast-RGB-property-to-allow-ove.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0087-fbdev-core-Move-logo-functions-into-separate-source-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0088-drm-gpuvm-don-t-always-WARN-in-drm_gpuvm_check_overf.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0088-drm-vc4-hdmi-Rename-full-range-helper.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0088-drm-vkms-Reduce-critical-section.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0088-fbdev-core-Remove-empty-internal-helpers-from-fb_log.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0089-drm-gpuvm-export-drm_gpuvm_range_valid.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0089-drm-vc4-hdmi-Swap-CSC-matrix-channels-for-YUV444.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0089-drm-vkms-Enable-ARGB8888-support-for-writeback.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0089-fbdev-core-Clean-up-include-statements-in-fbmem.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0090-drm-buddy-Improve-contiguous-memory-allocation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0090-drm-nouveau-make-use-of-drm_gpuvm_range_valid.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0090-drm-vc4-hdmi-Rework-the-CSC-matrices-organization.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0090-drm-vkms-Isolate-writeback-pixel-conversion-function.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0091-drm-amdgpu-Move-the-size-computations-to-drm-buddy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0091-drm-gpuvm-add-common-dma-resv-per-struct-drm_gpuvm.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0091-drm-vc4-hdmi-Add-a-function-to-retrieve-the-CSC-matr.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0092-drm-i915-Move-the-size-computations-to-drm-buddy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0092-drm-nouveau-make-use-of-the-GPUVM-s-shared-dma-resv.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0092-drm-vc4-hdmi-Add-BT.601-Support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0093-drm-Clear-fd-handle-callbacks-in-struct-drm_driver.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071 bsc#1212533 bsc#1212533).
- Update
  patches.suse/0093-drm-gpuvm-add-drm_gpuvm_flags-to-drm_gpuvm.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0093-drm-panel-Don-t-store-check-prepared-enabled-for-sim.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0093-drm-vc4-hdmi-Add-BT.2020-Support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0094-drm-nouveau-separately-allocate-struct-nouveau_uvmm.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0094-drm-panel-s6e63m0-Don-t-store-check-prepared-enabled.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0095-drm-bridge-dw-hdmi-change-YUV420-selection-logic-at-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0095-drm-gpuvm-reference-count-drm_gpuvm-structures.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0095-drm-panel-otm8009a-Don-t-double-check-prepared-enabl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0095-drm-vkms-allow-full-alpha-blending-on-all-planes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0096-drm-atomic-helper-drm_atomic_helper_shutdown-NULL-sh.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0096-drm-bridge-dw-hdmi-truly-enforce-420-only-formats-wh.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0096-drm-gpuvm-add-an-abstraction-for-a-VM-BO-combination.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0096-drm-vkms-drop-full-alpha-blending-TODO.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0097-drm-bridge-dw-hdmi-remove-dead-code-and-fix-indentat.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0097-drm-doc-rfc-Introduce-the-merge-plan-for-the-Xe-driv.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0097-drm-gpuvm-track-lock-validate-external-evicted-objec.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0097-drm-imx-ipuv3-Call-drm_atomic_helper_shutdown-at-shu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0098-Revert-drm-sched-Define-pr_fmt-for-DRM-using-pr_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0098-drm-ingenic-Call-drm_atomic_helper_shutdown-at-shutd.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0098-drm-panel-st7703-Rename-CMD_UNKNOWN_C6-to-CMD_SETECO.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0099-backlight-bd6107-Rename-struct-bd6107_platform_data..patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0099-drm-amd-display-Fix-Wuninitialized-in-dm_helpers_dp_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0099-drm-format-helper-Cache-buffers-with-struct-drm_form.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0099-drm-panel-st7703-Add-Anbernic-RG353V-V2-Panel-Suppor.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0100-drm-atomic-helper-Add-format-conversion-state-to-sha.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0100-drm-debugfs-Fix-drm_debugfs_remove_files-stub.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0100-drm-meson-set-variables-meson_hdmi_-storage-class-sp.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0101-backlight-gpio_backlight-Rename-field-fbdev-to-dev.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0101-drm-format-helper-Pass-format-conversion-state-to-he.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0101-drm-ssd130x-Store-the-HW-buffer-in-the-driver-privat.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0101-drm-uapi-Document-CTM-matrix-better.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0102-drm-ofdrm-Preallocate-format-conversion-buffer-in-at.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0103-backlight-lv5207lp-Rename-struct-lv5207lp_platform_d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0103-drm-komeda-add-NV12-format-to-support-writeback-laye.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0103-drm-simpledrm-Preallocate-format-conversion-buffer-i.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0103-drm-sysfs-Expose-DRM-connector-id-in-each-connector-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0104-drm-nouveau-nvif-refactor-deprecated-strncpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0104-drm-ssd130x-Preallocate-format-conversion-buffer-in-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0104-drm-sysfs-Link-DRM-connectors-to-corresponding-Type-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0104-fbdev-atyfb-Reorder-backlight-and-framebuffer-init-c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0105-drm-Remove-struct-drm_flip_task-from-DRM-interfaces.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0105-drm-nouveau-core-refactor-deprecated-strncpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0105-drm-sti-sti_hdmi-convert-to-using-is_hdmi-from-displ.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0105-fbdev-atyfb-Use-hardware-device-as-backlight-parent.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0106-drm-Fix-flip-task-docs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0106-drm-nouveau-pm-refactor-deprecated-strncpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0106-drm-rockchip-cdn-dp-call-drm_connector_update_edid_p.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0106-fbdev-aty128fb-Reorder-backlight-and-framebuffer-ini.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0107-drm-bridge-dw-hdmi-cec-Add-arbitration-lost-event.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0107-drm-scheduler-mark-jobs-without-fence-as-canceled.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0107-drm-virtio-Fix-return-value-for-VIRTGPU_CONTEXT_PARA.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0107-fbdev-aty128fb-Use-hardware-device-as-backlight-pare.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0108-drm-dp_mst-Fix-NULL-dereference-during-payload-addit.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0108-drm-test-rearrange-test-entries-in-Kconfig-and-Makef.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0108-drm-udl-delete-dead-code.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0108-fbdev-broadsheetfb-Call-device_remove_file-with-hard.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0109-drm-client-Do-not-acquire-module-reference.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0109-drm-dp_mst-Sanitize-error-return-during-payload-addi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0109-fbdev-ep93xx-fb-Alloc-DMA-memory-from-hardware-devic.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0110-accel-ivpu-Rename-cons-rx_msg_lock.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0110-drm-dp_mst-Tune-down-error-message-during-payload-ad.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0110-fbdev-ep93xx-fb-Output-messages-with-fb_info-and-fb_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0111-accel-ivpu-Do-not-use-irqsave-in-ivpu_ipc_dispatch.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0111-drm-nouveau-devinit-tu102-remove-attempt-at-loading-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0112-accel-ivpu-Do-not-use-cons-aborted-for-job_done_thre.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0112-drm-nouveau-imem-support-allocations-not-preserved-a.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0112-fbdev-fsl-diu-fb-Output-messages-with-fb_-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0113-accel-ivpu-Use-dedicated-work-for-job-timeout-detect.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0113-accel-qaic-Register-for-PCI-driver-at-the-beginning-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0113-drm-nouveau-gr-gf100-lose-contents-of-global-ctxbufs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0113-fbdev-mb862xxfb-Output-messages-with-fb_dbg.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0114-accel-ivpu-Use-threaded-IRQ-to-handle-JOB-done-messa.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0114-accel-qaic-Use-devm_drm_dev_alloc-instead-of-drm_dev.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0114-drm-nouveau-mmu-gp100-always-invalidate-TLBs-at-CACH.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0114-fbdev-metronomefb-Use-hardware-device-for-dev_err.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0115-accel-qaic-Update-MAX_ORDER-use-to-be-inclusive.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0115-drm-nouveau-kms-nv50-fix-mst-payload-alloc-fail-cras.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0115-fbdev-nvidiafb-Reorder-backlight-and-framebuffer-ini.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0116-drm-nouveau-disp-rearrange-output-methods.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0116-drm-print-Handle-NULL-drm-device-in-__drm_printk.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0116-fbdev-nvidiafb-Use-hardware-device-as-backlight-pare.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0117-drm-nouveau-disp-add-output-detect-method.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0117-fbdev-pxa168fb-Do-not-assign-to-struct-fb_info.dev.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0118-drm-nouveau-disp-add-output-method-to-fetch-edid.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0118-drm-panel-nv3051d-Add-Powkiddy-RK2023-Panel-Support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0118-fbdev-radeonfb-Reorder-backlight-and-framebuffer-cle.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0119-drm-nouveau-disp-rename-internal-output-acquire-rele.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0119-drm-panel-elida-kd35t133-trival-update-panel-size-fr.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0119-fbdev-radeonfb-Use-hardware-device-as-backlight-pare.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0120-drm-bridge-tc358768-remove-unused-variable.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0120-drm-nouveau-kms-Add-INHERIT-ioctl-to-nvkm-nvif-for-r.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0120-fbdev-rivafb-Reorder-backlight-and-framebuffer-init-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0121-drm-bridge-lt9211-Do-not-generate-HFP-HBP-HSA-and-EO.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0121-drm-nouveau-disp-shuffle-to-make-upcoming-diffs-pret.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0121-drm-panel-elida-kd35t133-drop-drm_connector_set_orie.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0121-fbdev-rivafb-Use-hardware-device-as-backlight-parent.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0122-drm-bridge-lt9611-Do-not-generate-HFP-HBP-HSA-and-EO.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0122-drm-nouveau-disp-add-acquire_dac.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0122-drm-panel-elida-kd35t133-Drop-shutdown-logic.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0122-fbdev-sh7760fb-Use-fb_dbg-in-sh7760fb_get_color_info.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0123-drm-nouveau-disp-add-acquire_sor-pior.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0123-drm-panel-elida-kd35t133-Drop-prepare-unprepare-logi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0123-fbdev-sh7760fb-Output-messages-with-fb_dbg.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0124-dma-buf-Replace-strlcpy-with-strscpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0124-drm-nouveau-disp-update-SOR-routing-immediately-on-a.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0124-drm-vkms-add-rotate-0-and-reflect-x-property.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0124-fbdev-sh7760fb-Alloc-DMA-memory-from-hardware-device.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0125-drm-nouveau-kms-nv50-pull-some-common-init-out-of-OR.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0125-drm-rockchip-vop2-Add-NV20-and-NV30-support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0125-drm-vkms-add-reflect-y-and-rotate-180-property.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0125-fbdev-sh7760fb-Use-hardware-device-with-dev_-output-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0126-drm-nouveau-kms-nv50-remove-nv_encoder.audio.connect.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0126-drm-rockchip-rk3066_hdmi-Remove-useless-mode_fixup.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0126-drm-vkms-add-rotate-90-property.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0126-fbdev-sm501fb-Output-message-with-fb_err.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0127-drm-nouveau-kms-nv50-keep-output-state-around-until-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0127-drm-rockchip-rk3066_hdmi-Switch-encoder-hooks-to-ato.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0127-drm-vkms-add-rotate-270-property.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0127-fbdev-smscufx-Detect-registered-fb_info-from-refcoun.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0128-drm-nouveau-kms-nv50-move-audio-enable-post-modeset.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0128-drm-vkms-drop-Rotation-TODO.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0128-fbdev-tdfxfb-Set-i2c-adapter-parent-to-hardware-devi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0129-drm-nouveau-disp-add-output-hdmi-config-method.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0129-fbdev-arcfb-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0129-fbdev-core-Pass-Linux-device-to-pm_vt_switch_-functi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0130-drm-arcpgu-Convert-to-platform-remove-callback-retur.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0130-drm-nouveau-disp-move-hdmi-disable-out-of-release.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0130-fbdev-au1200fb-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0130-fbdev-core-Move-framebuffer-and-backlight-helpers-in.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0131-drm-armada-Convert-to-platform-remove-callback-retur.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0131-drm-nouveau-disp-release-outputs-post-modeset.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0131-fbdev-broadsheetfb-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0131-fbdev-core-Add-fb_device_-create-destroy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0132-drm-bridge-cdns-mhdp8546-Improve-error-reporting-in-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0132-drm-nouveau-disp-remove-SOR-routing-updates-from-sup.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0132-fbdev-core-Move-procfs-code-to-separate-file.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0132-fbdev-hecubafb-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0133-drm-bridge-cdns-mhdp8546-Convert-to-platform-remove-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0133-drm-nouveau-disp-add-output-backlight-control-method.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0133-fbdev-core-Move-file-I-O-code-into-separate-file.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0133-fbdev-metronomefb-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0134-drm-bridge-tpd12s015-Convert-to-platform-remove-call.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0134-drm-nouveau-disp-add-output-lvds-config-method.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0134-fbdev-core-Rework-fb-init-code.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0134-fbdev-ps3fb-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0135-drm-etnaviv-Convert-to-platform-remove-callback-retu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0135-drm-nouveau-disp-add-hdmi-audio-hal-function.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0135-fbdev-Make-support-for-userspace-interfaces-configur.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0135-fbdev-smscufx-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0136-drm-imx-dcss-Convert-to-platform-remove-callback-ret.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0136-drm-nouveau-disp-move-dp-aux-pwr-method-to-HAL.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0136-drm-ttm-Don-t-shadow-the-operation-context.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0136-fbdev-udlfb-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0137-drm-imx-lcdc-Convert-to-platform-remove-callback-ret.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0137-drm-nouveau-disp-add-dp-aux-xfer-method.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0137-fbdev-vfb-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0138-drm-ast-Remove-vga2_clone-field.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0138-drm-kmb-Convert-to-platform-remove-callback-returnin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0138-drm-nouveau-disp-add-dp-rates-method.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0138-fbdev-xen-fbfront-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0139-drm-ast-Implement-register-helpers-in-ast_drv.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0139-drm-mediatek-Convert-to-platform-remove-callback-ret.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0139-drm-nouveau-kms-nv50-split-DP-disable-enable-into-tw.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0139-fbdev-Return-number-of-bytes-read-or-written.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0140-drm-ast-Remove-dead-else-branch-in-POST-code.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0140-drm-meson-Convert-to-platform-remove-callback-return.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0140-drm-nouveau-kms-nv50-flush-mst-disables-together.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0140-fbdev-Use-screen_buffer-in-fb_sys_-read-write.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0141-drm-ast-Remove-device-POSTing-and-config-from-chip-d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0141-drm-nouveau-Convert-to-platform-remove-callback-retu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0141-drm-nouveau-kms-nv50-fixup-sink-D3-before-tearing-do.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0141-fbdev-Don-t-re-validate-info-state-in-fb_ops-impleme.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0142-drm-ast-Set-PCI-config-before-accessing-I-O-register.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0142-drm-nouveau-disp-add-dp-train-method.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0142-drm-sprd-Convert-to-platform-remove-callback-returni.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0142-fbdev-Validate-info-screen_-base-buffer-in-fb_ops-im.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0143-drm-ast-Enable-and-unlock-device-access-early-during.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0143-drm-nouveau-disp-move-link-training-out-of-superviso.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0143-fbdev-Move-I-O-read-and-write-code-into-helper-funct.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0144-drm-ast-Set-up-release-action-right-after-enabling-M.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0144-drm-edid-firmware-drop-drm_kms_helper.edid_firmware-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0144-drm-fb-helper-Use-fb_-cfb-sys-_-read-write.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0144-drm-nouveau-disp-add-dp-sst-config-method.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0145-Documentation-vkms-clarify-devres-managed-reference-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0145-drm-ast-Distinguish-among-chip-generations.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0145-drm-nouveau-disp-add-dp-mst-id-get-put-methods.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0145-fbdev-simplefb-Suppress-error-on-missing-power-domai.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0146-drm-ast-Detect-AST-1300-model.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0146-drm-connector-document-enum-drm_connector_tv_mode-DR.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0146-drm-nouveau-disp-move-outp-conn-construction-to-chip.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0146-drm-nouveau-fifo-Remove-duplicated-include-in-chan.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0147-drm-ast-Detect-AST-1400-model.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0147-drm-nouveau-disp-move-outp-init-fini-paths-to-chipse.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0147-drm-rockchip-rk3066_hdmi-include-drm-drm_atomic.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0147-drm-sun4i-rename-sun4i_dotclock-to-sun4i_tcon_dclk.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0148-drm-ast-Detect-AST-2510-model.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0148-drm-gpuvm-Helper-to-get-range-of-unmap-from-a-remap-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0148-drm-nouveau-disp-nv50-skip-DCB_OUTPUT_TV.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0148-drm-sun4i-calculate-proper-DCLK-rate-for-DSI.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0149-drm-ast-Move-widescreen-and-tx-chip-detection-into-s.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0149-drm-nouveau-kms-nv50-create-heads-based-on-nvkm-head.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0149-dt-bindings-gpu-Add-Imagination-Technologies-PowerVR.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0150-drm-ast-Merge-config-and-chip-detection.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0150-drm-imagination-uapi-Add-PowerVR-driver-UAPI.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0150-drm-nouveau-kms-nv50-create-heads-after-outps-conns.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0151-drm-edid-make-read-only-const-array-static.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0151-drm-imagination-Add-skeleton-PowerVR-driver.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0151-drm-nouveau-kms-nv50-name-aux-channels-after-their-c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0151-drm-panel-sharp-ls043t1le01-drop-dummy-functions-and.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0152-drm-imagination-Get-GPU-resources.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0152-drm-nouveau-kms-nv50-create-connectors-based-on-nvkm.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0152-drm-panel-panel-simple-Add-BOE-EV121WXM-N10-1850-pan.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0152-drm-tests-Fix-swapped-drm_framebuffer-tests-paramete.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0153-drivers-firmware-Move-sysfb_init-from-device_initcal.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0153-drm-edid-Add-quirk-for-OSVR-HDK-2.0.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0153-drm-imagination-Add-GPU-register-headers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0153-drm-nouveau-kms-nv50-create-outputs-based-on-nvkm-in.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0154-drm-bridge-samsung-dsim-Drain-command-transfer-FIFO-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0154-drm-imagination-Add-firmware-and-MMU-related-headers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0154-drm-nouveau-kms-nv50-disable-dcb-parsing.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0154-drm-ssd130x-Fix-include-guard-name.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0155-drm-bridge-analogix-anx78xx-Add-missing-definition.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0155-drm-gud-use-vmalloc_array-and-vcalloc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0155-drm-imagination-Add-FWIF-headers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0155-drm-panel-boe-tv101wum-nl6-Remove-extra-delay.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0156-drm-drm_gem.c-Remove-surplus-else-after-return.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0156-drm-imagination-Add-GPU-ID-parsing-and-firmware-load.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0156-drm-panel-boe-tv101wum-nl6-Fine-tune-the-panel-power.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0156-drm-tegra-rgb-Parameterize-V-and-H-sync-polarities.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0157-drm-Add-kms-driver-for-loongson-display-controller.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0157-drm-imagination-Add-GEM-and-VM-related-code.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0158-drm-bridge-tc358768-Default-to-positive-h-v-syncs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0158-drm-imagination-Implement-power-management.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0158-drm-nouveau-nvkm-fini-object-children-in-reverse-ord.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0159-drm-imagination-Implement-firmware-infrastructure-an.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0159-drm-nouveau-nvkm-punt-spurious-irq-messages-to-debug.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0159-gpu-drm-bridge-No-need-to-set-device_driver-owner.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0160-drm-bridge-tc358768-Cleanup-PLL-calculations.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0160-drm-bridge-tc358768-remove-unneeded-semicolon.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0160-drm-imagination-Implement-MIPS-firmware-processor-an.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0160-drm-nouveau-fb-gp102-ga100-switch-to-simpler-vram-si.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0161-accel-ivpu-Initial-debugfs-support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0161-drm-imagination-Implement-free-list-and-HWRT-create-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0161-drm-nouveau-fb-ga102-construct-vidmem-heap-via-new-g.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0161-drm-panel-Modify-innolux-hj110iz-panel-initial-code.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0162-accel-ivpu-Add-firmware-tracing-support.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0162-drm-drm_atomic_helper.c-fix-a-typo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0162-drm-imagination-Implement-context-creation-destructi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0162-drm-nouveau-fifo-remove-left-over-references-to-nvkm.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0163-accel-ivpu-Add-debugfs-files-for-testing-device-rese.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0163-drm-imagination-Implement-job-submission-and-schedul.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0163-drm-nouveau-fifo-return-ERR_PTR-from-nvkm_runl_new.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0163-drm-ttm-let-struct-ttm_device_funcs-be-placed-in-rod.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0164-accel-ivpu-Print-firmware-name-and-version.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0164-drm-imagination-Add-firmware-trace-header.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0164-drm-nouveau-fifo-ga100-remove-individual-runlists-ra.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0165-accel-ivpu-Add-fw_name-file-to-debugfs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0165-drm-imagination-Add-firmware-trace-to-debugfs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0165-drm-nouveau-fifo-ga100-add-per-runlist-nonstall-intr.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0165-fbdev-hitfb-Cast-I-O-offset-to-address.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0166-drm-imagination-Add-driver-documentation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0166-drm-nouveau-nvif-fix-potential-double-free.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0166-fbdev-matrox-Remove-trailing-whitespaces.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0167-drm-bridge-tc358768-Attempt-to-fix-DSI-horizontal-ti.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0167-drm-nouveau-kms-don-t-call-drm_dp_cec_set_edid-on-TM.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0167-ipu-v3-Include-linux-io.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0168-drm-i915-display-Use-intel_bo_to_drm_bo-instead-of-o.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0168-drm-nouveau-disp-drop-unused-argument-in-nv50_dp_mod.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0168-drm-sched-Rename-to-drm_sched_can_queue.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0169-drm-bridge-panel-Fix-device-link-for-DRM_BRIDGE_ATTA.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0169-drm-i915-drop-gt-intel_gt.h-include-from-skl_univers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0169-drm-sched-Rename-to-drm_sched_wakeup_if_can_queue.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0169-fbdev-sm712fb-Do-not-include-linux-screen_info.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0170-drm-armada-Call-drm_atomic_helper_shutdown-at-shutdo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0170-drm-i915-aux-add-separate-register-macros-and-functi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0170-drm-panel-Add-Samsung-S6D7AA0-panel-controller-drive.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0170-sysfb-Do-not-include-linux-screen_info.h-from-sysfb-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0171-drm-Call-drm_atomic_helper_shutdown-at-shutdown-time.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0171-drm-bridge-samsung-dsim-Implement-support-for-clock-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0171-drm-i915-aux-rename-dev_priv-to-i915.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0171-fbdev-broadsheetfb-Select-FB_SYS_HELPERS_DEFERRED.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0172-drm-i915-stop-including-i915_utils.h-from-intel_runt.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0172-drm-vc4-Call-drm_atomic_helper_shutdown-at-shutdown-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0172-fbdev-broadsheetfb-Generate-deferred-I-O-ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0173-drm-i915-display-debugfs-entry-to-list-display-capab.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0173-drm-nouveau-constify-pointers-to-hwmon_channel_info.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0173-drm-ssd130x-Call-drm_atomic_helper_shutdown-at-remov.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0173-fbdev-hecubafb-Select-FB_SYS_HELPERS_DEFERRED.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0174-drm-i915-display-Add-framework-to-add-parameters-spe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0174-drm-nouveau-acr-ga102-set-variable-ga102_gsps-storag.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0174-fbdev-hecubafb-Generate-deferred-I-O-ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0175-drm-hisilicon-kirin-Call-drm_atomic_helper_shutdown-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0175-drm-i915-display-Dump-also-display-parameters.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0175-drm-msm-Use-struct-fb_info.screen_buffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0175-fbdev-metronomefb-Select-FB_SYS_HELPERS_DEFERRED.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0176-drm-i915-display-Move-enable_fbc-module-parameter-un.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0176-fbdev-metronomefb-Generate-deferred-I-O-ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0177-drm-bridge-dw-hdmi-Replace-all-non-returning-strlcpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0177-drm-i915-display-Move-psr-related-module-parameters-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0177-drm-ssd130x-Drop-_helper-prefix-from-struct-drm_-_he.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0177-fbdev-ssd1307fb-Select-FB_SYS_HELPERS_DEFERRED.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0178-accel-qaic-Remove-size-field-from-struct-qaic_bo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0178-drm-i915-display-Move-vbt_firmware-module-parameter-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0178-drm-panel-samsung-s6d7aa0-use-pointer-for-drm_mode-i.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0178-fbdev-ssd1307fb-Generate-deferred-I-O-ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0179-dma-buf-sw_sync-Replace-all-non-returning-strlcpy-wi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0179-drm-i915-display-Move-lvds_channel_mode-module-param.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0179-drm-simpledrm-Add-support-for-multiple-power-domains.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0179-fbdev-xen-fbfront-Select-FB_SYS_HELPERS_DEFERRED.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0180-drm-bridge-Add-200ms-delay-to-wait-FW-HPD-status-sta.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0180-drm-i915-display-Move-panel_use_ssc-module-parameter.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0180-drm-shmobile-Use-p4cc-to-print-fourcc-codes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0180-fbdev-xen-fbfront-Generate-deferred-I-O-ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0181-drm-i915-display-Move-vbt_sdvo_panel_type-module-par.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0181-drm-imx-dcss-Call-drm_atomic_helper_shutdown-at-shut.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0181-drm-shmobile-Add-support-for-DRM_FORMAT_XRGB8888.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0182-drm-gpuvm-rename-struct-drm_gpuva_manager-to-struct-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0182-drm-i915-display-Move-enable_dc-module-parameter-und.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0182-drm-shmobile-Switch-to-drm_crtc_init_with_planes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0182-drm-virtio-Conditionally-allocate-virtio_gpu_fence.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0183-drm-gpuvm-allow-building-as-module.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0183-drm-i915-display-Move-enable_dpt-module-parameter-un.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0183-drm-shmobile-Add-missing-call-to-drm_fbdev_generic_s.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0183-nouveau-dispnv50-add-cursor-pitch-check.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0184-drm-i915-display-Move-enable_sagv-module-parameter-u.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0184-drm-nouveau-disp-use-drm_kms_helper_connector_hotplu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0184-drm-nouveau-uvmm-rename-umgr-to-base.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0184-drm-shmobile-Make-DRM_SHMOBILE-visible-on-Renesas-So.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0185-drm-bridge-tc358767-Use-devm_clk_get_enabled-helper.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0185-drm-docs-Fix-usage-stats-typos.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0185-drm-gma500-refactor-deprecated-strncpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0185-drm-i915-display-Move-disable_power_well-module-para.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0186-drm-Add-common-fdinfo-helper.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0186-drm-bridge-tfp410-Support-format-negotiation-hooks.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0186-drm-gpuvm-doc-fix-filename-references.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0186-drm-i915-display-Move-enable_ips-module-parameter-un.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0187-drm-bridge-tfp410-Set-input_bus_flags-in-atomic_chec.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0187-drm-i915-display-Move-invert_brightness-module-param.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0187-drm-msm-Switch-to-fdinfo-helper.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0187-drm-nouveau-kms-nv50-hide-unused-variables.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0188-drm-amdgpu-Switch-to-fdinfo-helper.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0188-drm-bridge-mhdp8546-Add-minimal-format-negotiation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0188-drm-bridge-use-drm_bridge_get_edid-instead-of-using-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0188-drm-i915-display-Move-edp_vswing-module-parameter-un.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0189-drm-Add-fdinfo-memory-stats.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0189-drm-bridge-lt9611uxc-use-drm_bridge_get_edid-instead.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0189-drm-bridge-mhdp8546-Set-input_bus_flags-from-atomic_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0189-drm-i915-display-Move-enable_dpcd_backlight-module-p.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0190-drm-bridge-sii902x-Support-format-negotiation-hooks.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0190-drm-i915-display-Move-load_detect_test-parameter-und.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0190-drm-msm-Add-memory-stats-to-fdinfo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0190-drm-tests-Add-calls-to-drm_fb_blit-on-supported-form.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0191-accel-qaic-Update-BO-metadata-in-a-central-location.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0191-drm-bridge-sii902x-Set-input_bus_flags-in-atomic_che.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0191-drm-doc-Relax-fdinfo-string-constraints.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0191-drm-i915-display-Move-force_reset_modeset_test-param.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0191-drm-tests-Add-new-format-conversion-tests-to-better-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0192-accel-qaic-Declare-BO-sliced-after-all-the-operation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0192-drm-bridge-adv7511-Convert-to-use-maple-tree-registe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0192-drm-bridge-tc358767-explicitly-set-readable-register.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0192-drm-gma500-Clear-fbdev-framebuffer-with-fb_memset_io.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0192-drm-i915-display-Move-disable_display-parameter-unde.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0192-drm-tidss-Update-encoder-bridge-chain-connect-model.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0193-accel-qaic-Undo-slicing-setup-done-in-qaic_attach_sl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0193-drm-bridge-cdns-mhdp8546-Fix-the-interrupt-enable-di.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0193-drm-bridge-dpc3433-Convert-to-use-maple-tree-registe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0193-drm-bridge-samsung-dsim-Fix-i.MX8M-enable-flow-to-me.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0193-drm-i915-display-Use-device-parameters-instead-of-mo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0194-accel-qaic-Clean-up-BO-during-flushing-of-transfer-l.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0194-drm-bridge-tc358767-Convert-to-use-maple-tree-regist.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0194-drm-i915-display-Move-verbose_state_checks-under-dis.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0194-drm-ttm-Use-init_on_free-to-delay-release-TTM-BOs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0195-accel-qaic-Create-a-function-to-initialize-BO.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0195-drm-amdgpu-Fix-no-procfs-build.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0195-drm-arm-Make-ARM-devices-menu-depend-on-DRM.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0195-drm-bridge-icn6211-Convert-to-use-maple-tree-registe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0195-drm-i915-display-Move-nuclear_pageflip-under-display.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0196-accel-qaic-Add-QAIC_DETACH_SLICE_BO-IOCTL.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0196-drm-bridge-lt9211-Convert-to-use-maple-tree-register.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0196-drm-bridge-samsung-dsim-fix-blanking-packet-size-cal.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0196-drm-i915-display-Move-enable_dp_mst-under-display.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0196-fbdev-hyperv_fb-Include-linux-screen_info.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0197-drm-bridge-sn65dsi83-Convert-to-use-maple-tree-regis.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0197-drm-execution-context-for-GEM-buffers-v7.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0197-drm-i915-remove-display-device-info-from-i915-capabi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0198-drm-add-drm_exec-selftests-v4.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0198-drm-bridge-samsung-dsim-Fetch-pll-clock-frequency-au.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0198-drm-i915-display-Reset-message-bus-after-each-read-w.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0198-drm-panel-ili9322-Remove-redundant-volatle_reg-opera.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0199-drm-amdkfd-switch-over-to-using-drm_exec-v3.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0199-drm-bridge-samsung-dsim-Select-GENERIC_PHY_MIPI_DPHY.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0199-drm-i915-sprite-move-sprite_name-to-intel_sprite.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0199-drm-panel-ili9322-Convert-to-use-maple-tree-register.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0200-drm-amdgpu-use-drm_exec-for-GEM-and-CSA-handling-v2.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0200-drm-bridge-samsung-dsim-Dynamically-configure-DPHY-t.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0200-drm-i915-lnl-Extend-C10-C20-phy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0200-drm-panel-Add-driver-for-BOE-RM692E5-AMOLED-panel.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0201-drm-amdgpu-use-drm_exec-for-MES-testing.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0201-drm-bridge-samsung-dsim-Support-non-burst-mode.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0201-drm-doc-Document-DRM-device-reset-expectations.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0201-drm-i915-lnl-Fix-check-for-TC-phy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0202-drm-amdgpu-use-the-new-drm_exec-object-for-CS-v3.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0202-drm-i915-display-Abstract-C10-C20-pll-hw-readout.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0202-drm-panel-simple-Add-Ampire-AM-800480L1TMQW-T00H.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0202-drm-vblank-Warn-when-silently-cancelling-vblank-work.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0203-drm-i915-display-Abstract-C10-C20-pll-calculation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0203-drm-loongson-Remove-a-useless-check-in-cursor_plane_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0203-drm-panfrost-Add-cycle-count-GPU-register-definition.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0204-accel-ivpu-Update-debugfs-to-latest-changes-in-DRM.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0204-drm-i915-fix-Makefile-sort-and-indent.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0204-drm-panfrost-Add-fdinfo-support-GPU-load-metrics.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0204-drm-ssd130x-Change-pixel-format-used-to-compute-the-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0204-drm-stm-dsi-Use-devm_platform_ioremap_resource.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0205-accel-ivpu-Compile-ivpu_debugfs.c-conditionally.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0205-drm-i915-move-Makefile-display-debugfs-files-next-to.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0205-drm-panel-ld9040-Use-better-magic-values.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0205-drm-panfrost-Add-fdinfo-support-for-memory-stats.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0206-drm-drm_file-Add-DRM-obj-s-RSS-reporting-function-fo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0206-drm-i915-bios-Clamp-VBT-HDMI-level-shift-on-BDW.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0206-drm-lcdif-Drop-unnecessary-NULL-pointer-check-on-lcd.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0206-drm-panel-ld9040-Register-a-backlight-device.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0207-drm-drv-use-enum-drm_minor_type-when-appropriate.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0207-drm-lcdif-Determine-bus-format-and-flags-in-atomic_c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0207-drm-panfrost-Implement-generic-DRM-object-RSS-report.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0208-drm-amd-pm-Annotate-struct-smu10_voltage_dependency_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0208-drm-file-use-explicit-values-for-enum-drm_minor_type.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0208-drm-i915-Abstract-the-extra-JSL-EHL-DPLL4-power-doma.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0208-drm-lcdif-Check-consistent-bus-format-and-flags-acro.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0209-drm-amdgpu-discovery-Annotate-struct-ip_hw_instance-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0209-drm-i915-Move-the-DPLL-extra-power-domain-handling-u.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0209-drm-lcdif-Add-multiple-encoders-and-first-bridges-su.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0210-drm-i915-Extract-_intel_-enable-disable-_shared_dpll.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0210-drm-i915-selftests-Annotate-struct-perf_series-with-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0210-drm-lcdif-Add-i.MX93-LCDIF-compatible-string.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0211-drm-Switch-i2c-drivers-back-to-use-.probe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0211-drm-i915-Move-the-g45-PEG-band-gap-HPD-workaround-to.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0211-drm-manager-to-keep-track-of-GPUs-VA-mappings.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0211-drm-msm-dpu-Annotate-struct-dpu_hw_intr-with-__count.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0212-drm-debugfs-provide-infrastructure-to-dump-a-DRM-GPU.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0212-drm-i915-hdcp-Rename-HCDP-1.4-enablement-function.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0212-drm-nouveau-pm-Annotate-struct-nvkm_perfdom-with-__c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0212-drm-panel-edp-Convert-to-platform-remove-callback-re.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0213-drm-bridge-display-connector-rename-dp_pwr-to-connec.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0213-drm-i915-hdcp-Convert-intel_hdcp_enable-to-a-blanket.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0213-drm-syncobj-add-IOCTL-to-register-an-eventfd.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0213-drm-vc4-Annotate-struct-vc4_perfmon-with-__counted_b.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0214-drm-bridge-display-connector-handle-hdmi-pwr-supply.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0214-drm-i915-hdcp-Add-more-conditions-to-enable-hdcp.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0214-drm-panel-simple-Drop-prepared_time.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0214-drm-virtio-Annotate-struct-virtio_gpu_object_array-w.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0215-drm-i915-mst-Swap-TRANSCONF-vs.-FECSTALL_DIS_DPTSTRE.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0215-drm-manager-Fix-printk-format-for-size_t.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0215-drm-ttm-Remove-redundant-code-in-ttm_tt_init_fields.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0215-drm-vmwgfx-Annotate-struct-vmw_surface_dirty-with-__.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0216-drm-debugfs-Silence-warning-from-cast.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0216-drm-i915-mst-Disable-transcoder-before-deleting-the-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0216-drm-i915-ttm-Add-I915_BO_PREALLOC.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0216-drm-v3d-Annotate-struct-v3d_perfmon-with-__counted_b.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0217-drm-dp-switch-drm_dp_downstream_-helpers-to-struct-d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0217-drm-i915-display-Set-I915_BO_ALLOC_USER-for-fb.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0217-drm-i915-mst-Clear-ACT-just-before-triggering-payloa.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0217-gpu-host1x-Explicitly-include-correct-DT-includes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0218-drm-Explicitly-include-correct-DT-includes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0218-drm-i915-Add-a-function-to-mmap-framebuffer-obj.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0218-drm-i915-mst-Always-write-CHICKEN_TRANS.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0218-drm-panel-nv3051d-Add-Support-for-Anbernic-351V.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0219-drm-amd-display-Fix-mst-hub-unplug-warning.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0219-drm-i915-display-Add-helper-func-to-get-intel_fbdev-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0219-drm-i915-display-Use-dma_fence-interfaces-instead-of.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0220-drm-arm-komeda-Remove-component-framework-and-add-a-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0220-drm-exynos-dsi-Convert-to-platform-remove-callback-r.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0220-drm-i915-display-Implement-fb_mmap-callback-function.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0220-drm-i915-display-Use-intel_bo_to_drm_bo-instead-of-o.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0221-drm-bridge-samsung-dsim-add-more-mipi-dsi-device-deb.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0221-drm-bridge-tc358767-increase-PLL-lock-time-delay.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0221-drm-i915-Extract-hsw_chicken_trans_reg.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0221-drm-i915-mtl-Disable-stolen-memory-backed-FB-for-A0.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0222-drm-bridge-samsung-dsim-reread-ref-clock-before-conf.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0222-drm-bridge-tc358767-give-VSDELAY-some-positive-value.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0222-drm-i915-Make-IRQ-reset-and-postinstall-multi-gt-awa.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0222-drm-i915-Stop-using-a-reg-variable.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0223-drm-bridge-samsung-dsim-update-PLL-reference-clock.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0223-drm-i915-Extract-mchbar_reg.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0223-drm-i915-gt-Consider-multi-gt-instead-of-to_gt.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0223-drm-ssd130x-Fix-pitch-calculation-in-ssd130x_fb_blit.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0224-drm-bridge-samsung-dsim-adjust-porches-by-rounding-u.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0224-drm-i915-dsi-Remove-dead-GLK-checks.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0224-drm-i915-gem-Consider-multi-gt-instead-of-to_gt.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0224-video-Add-auxiliary-display-drivers-to-Graphics-supp.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0225-drm-bridge-samsung-dsim-calculate-porches-in-Hz.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0225-drm-i915-dsi-Extract-port_ctrl_reg.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0225-drm-i915-selftests-Consider-multi-gt-instead-of-to_g.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0225-fbdev-Move-core-fbdev-symbols-to-a-separate-Kconfig-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0226-drm-i915-Remove-unused-for_each_uabi_class_engine.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0226-drm-i915-mtl-Extend-Wa_22011802037-to-MTL-A-step.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0226-drm-panel-simple-allow-LVDS-format-override.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0226-fbdev-Split-frame-buffer-support-in-FB-and-FB_CORE-s.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0227-Documentation-gpu-fix-Panfrost-documentation-build-w.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0227-drm-Make-FB_CORE-to-be-selected-if-DRM-fbdev-emulati.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0227-drm-i915-Move-for_each_engine-out-of-i915_drv.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0227-drm-i915-mtl-WA-to-clear-RDOP-clock-gating.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0228-drm-i915-dp_mst-Disable-DSC-on-ICL-MST-outputs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0228-drm-i915-mtl-Set-has_llc-0.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0228-drm-rockchip-vop2-Demote-message-in-mod_supported-to.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0229-drm-bridge-it6505-Fix-Kconfig-indentation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0229-drm-i915-display-Support-PSR-entry-VSC-packet-to-be-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0229-drm-i915-mtl-Define-MOCS-and-PAT-tables-for-MTL.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0229-drm-rockchip-vop2-Convert-to-use-maple-tree-register.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0230-drm-bridge-Remove-redundant-i2c_client-in-anx7625-it.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0230-drm-i915-move-display-mutex-inits-to-display-code.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0230-drm-i915-mtl-fix-mocs-selftest.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0231-drm-i915-i915_drv-Use-proper-parameter-naming-in-for.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0231-drm-i915-move-display-spinlock-init-to-display-code.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0231-drm-managed-Clean-up-GFP_-flag-usage-in-drmm_kmalloc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0231-drm-rockchip-remove-redundant-of_match_ptr.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0232-drm-Remove-flag-FBINFO_DEFAULT-from-fbdev-emulation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0232-drm-i915-i915_drv-Use-i915-instead-of-dev_priv-insie.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0232-drm-rockchip-dsi-Use-devm_platform_get_and_ioremap_r.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0233-drm-dp_mst-Add-helper-to-determine-if-an-MST-port-is.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0233-drm-i915-mtl-Add-PTE-encode-function.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0233-fbdev-Remove-FBINFO_DEFAULT-from-static-structs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0234-drm-dp_mst-Factor-out-a-helper-to-check-the-atomic-s.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0234-drm-i915-mtl-workaround-coherency-issue-for-Media.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0234-fbdev-Remove-FBINFO_DEFAULT-from-kzalloc-ed-structs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0235-drm-dp_mst-Swap-the-order-of-checking-root-vs.-non-r.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0235-drm-i915-selftest-Record-GT-error-for-gt-failure.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0235-drm-panel-ltk050h3146w-add-mipi_dsi_device.mode_flag.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0235-fbdev-Remove-FBINFO_DEFAULT-from-devm_kzalloc-ed-str.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0236-drm-dp_mst-Allow-DSC-in-any-Synaptics-last-branch-de.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0236-drm-i915-mtl-Add-workaround-14018778641.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0236-drm-panel-ltk050h3146w-add-support-for-Leadtek-LTK05.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0236-fbdev-Remove-FBINFO_DEFAULT-from-framebuffer_alloc-e.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0237-drm-dp-Add-DP_HBLANK_EXPANSION_CAPABLE-and-DSC_PASST.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0237-drm-i915-dg2-Remove-Wa_15010599737.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0237-drm-i915-hwmon-Get-mutex-and-rpm-ref-just-once-in-hw.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0238-drm-dp_mst-Add-HBLANK-expansion-quirk-for-Synaptics-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0238-drm-i915-guc-Disable-PL1-power-limit-when-loading-Gu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0238-drm-i915-selftests-Align-igt_spinner_create_request-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0239-drm-dp-Add-helpers-to-calculate-the-link-BW-overhead.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0239-drm-i915-hwmon-Block-waiting-for-GuC-reset-to-comple.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0240-drm-i915-dp_mst-Enable-FEC-early-once-it-s-known-DSC.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0240-drm-i915-mtl-Implement-Wa_14019141245.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0241-drm-i915-Migrate-platform-dependent-mock-hugepage-se.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0241-drm-i915-dp-Specify-the-FEC-overhead-as-an-increment.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0241-fbdev-fsl-diu-fb-Remove-flag-FBINFO_DEFAULT.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0242-drm-i915-Use-correct-huge-page-manager-for-MTL.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0242-drm-i915-dp-Pass-actual-BW-overhead-to-m_n-calculati.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0242-fbdev-Remove-FBINFO_FLAG_DEFAULT-from-kzalloc-ed-str.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0243-drm-i915-dp_mst-Account-for-FEC-and-DSC-overhead-dur.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0243-fbdev-Remove-FBINFO_FLAG_DEFAULT-from-framebuffer_al.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0244-drm-i915-dp_mst-Add-atomic-state-for-all-streams-on-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0244-drm-i915-selftest-Update-the-SLPC-selftest.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0244-fbdev-atafb-Remove-flag-FBINFO_FLAG_DEFAULT.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0245-drm-i915-dp_mst-Program-the-DSC-PPS-SDP-for-each-str.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0245-drm-i915-rc6-throw-out-set-wrapper.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0245-fbdev-pxafb-Remove-flag-FBINFO_FLAG_DEFAULT.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0246-drm-i915-dp-Make-sure-the-DSC-PPS-SDP-is-disabled-wh.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0246-i915-pmu-Add-support-for-total-context-runtime-for-G.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0247-drm-i915-dp_mst-Add-missing-DSC-compression-disablin.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0247-drm-i915-fdinfo-Enable-fdinfo-for-GuC-backends.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0247-fbdev-Remove-FBINFO_DEFAULT-and-FBINFO_FLAG_DEFAULT.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0248-drm-i915-dp-Rename-intel_ddi_disable_fec_state-to-in.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0248-drm-i915-gt-Use-gt_err-for-GT-info.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0248-fbdev-Document-that-framebuffer_alloc-returns-zero-e.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0249-drm-i915-dp-Wait-for-FEC-detected-status-in-the-sink.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0249-drm-i915-guc-Force-a-reset-on-internal-GuC-error.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0249-drm-i915-selftests-Use-gt_err-for-GT-info.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0249-drm-panel-db7430-remove-unused-variables.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0250-drm-i915-dp-Disable-FEC-ready-flag-in-the-sink.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0250-drm-i915-guc-Consolidate-duplicated-capture-list-cod.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0250-drm-i915-mtl-Adding-DeviceID-for-Arrowlake-S-under-M.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0250-fbdev-Add-fb_ops-init-macros-for-framebuffers-in-DMA.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0251-drm-fbdev-dma-Use-fbdev-DMA-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0251-drm-i915-dp_mst-Handle-the-Synaptics-HBlank-expansio.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0251-drm-i915-gsc-define-gsc-fw.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0251-drm-i915-guc-Capture-list-naming-clean-up.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0252-drm-i915-dp_mst-Enable-decompression-in-the-sink-fro.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0252-drm-i915-guc-Fix-error-capture-for-virtual-engines.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0252-drm-tegra-Use-fbdev-DMA-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0253-drm-i915-dp-Enable-DSC-via-the-connector-decompressi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0253-drm-i915-gt-Wait-longer-for-tasks-in-migrate-selftes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0253-drm-i915-gvt-fix-intel_vgpu_alloc_resource-kernel-do.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0253-drm-tegra-Set-fbdev-FBINFO_VIRTFB-flag.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0254-drm-i915-Add-Wa_14015150844.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0254-drm-i915-dp_mst-Enable-DSC-passthrough.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0254-drm-i915-vma-fix-kernel-doc-function-name-for-i915_v.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0254-drm-tegra-Store-pointer-to-vmap-ed-framebuffer-in-sc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0255-drm-exynos-Use-fbdev-DMA-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0255-drm-i915-dp_mst-Enable-MST-DSC-decompression-for-all.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0255-drm-i915-mtl-Drop-Wa_14017240301.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0255-drm-i915-utils-drop-kernel-doc-from-__wait_for.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0256-drm-exynos-Set-fbdev-FBINFO_VIRTFB-flag.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0256-drm-i915-Factor-out-function-to-clear-pipe-update-fl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0256-drm-i915-Run-relevant-bits-of-debugfs-drop_caches-pe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0256-drm-i915-vma-document-struct-i915_vma_resource-waker.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0257-drm-i915-dp_mst-Force-modeset-CRTC-if-DSC-toggling-r.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0257-drm-i915-gt-skip-WA-verification-for-GEN7_MISCCPCTL-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0257-drm-i915-perf-fix-i915_perf_ioctl_version-kernel-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0257-drm-omapdrm-Set-VM-flags-in-GEM-object-mmap-function.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0258-drm-i915-Add-Wa_18022495364.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0258-drm-i915-dp_mst-Improve-BW-sharing-between-MST-strea.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0258-drm-i915-error-fix-i915_capture_error_state-kernel-d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0258-drm-omapdrm-Use-GEM-mmap-for-fbdev-emulation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0259-drm-i915-dp_mst-Check-BW-limitations-only-after-all-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0259-drm-i915-huc-silence-injected-failure-in-the-load-vi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0259-drm-i915-request-drop-kernel-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0259-drm-omapdrm-Set-fbdev-FBINFO_VIRTFB-flag.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0260-drm-i915-Query-compressed-bpp-properly-using-correct.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0260-drm-i915-gem-fix-i915_gem_object_lookup_rcu-kernel-d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0260-drm-i915-pxp-mtl-Update-pxp-firmware-response-timeou.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0260-fbdev-Remove-FB_DEFAULT_SYS_OPS.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0261-drm-i915-Drop-redundant-modeset-check.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0261-drm-i915-engine-fix-kernel-doc-function-name-for-int.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0261-drm-i915-pxp-mtl-Update-pxp-firmware-packet-size.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0261-fbdev-Harmonize-some-comments-in-linux-fb.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0262-drm-i915-Split-intel_update_crtc-into-two-parts.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0262-drm-i915-context-fix-kernel-doc-parameter-descriptio.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0262-drm-i915-lrc-User-PXP-contexts-requires-runalone-bit.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0262-drm-panel-ld9040-add-backlight-Kconfig-dependency.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0263-drm-ast-Do-not-enable-PCI-resources-multiple-times.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0263-drm-i915-Do-plane-etc.-updates-more-atomically-acros.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0263-drm-i915-gtt-fix-i915_vm_resv_put-kernel-doc-paramet.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0263-drm-i915-refactor-deprecated-strncpy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0264-drm-i915-engine-hide-preempt_hang-selftest-member-fr.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0264-drm-i915-gt-Update-RC6-mask-for-mtl_drpc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0264-drm-i915-gvt-Clean-up-zero-initializers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0264-drm-ssd130x-Inline-the-ssd130x_buf_-alloc-free-funct.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0265-drm-i915-gt-remove-a-static-inline-that-requires-inc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0265-drm-i915-guc-add-dbgfs_node-member-kernel-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0265-drm-panelreplay-dpcd-register-definition-for-panelre.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0265-drm-ssd130x-Allocate-buffer-in-the-plane-s-.atomic_c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0266-dma-buf-Fix-the-typo-in-DMA-BUF-statistics-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0266-drm-i915-gem-remove-inlines-from-i915_gem_execbuffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0266-drm-i915-guc-drop-lots-of-kernel-doc-markers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0266-drm-i915-psr-Move-psr-specific-dpcd-init-into-own-fu.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0267-drm-amdgpu-Rename-aqua_vanjaram_reg_init.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0267-drm-i915-Add-Wa_18028616096.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0267-drm-i915-guc-add-intel_guc_state_capture-member-docs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0267-drm-i915-panelreplay-Initializaton-and-compute-confi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0268-drm-amd-display-Remove-else-after-return-statement-i.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0268-drm-i915-active-fix-kernel-doc-for-function-paramete.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0268-drm-i915-panelreplay-Enable-panel-replay-dpcd-initia.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0268-drm-i915-perf-Remove-gtt_offset-from-stream-oa_buffe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0269-drm-amd-display-Remove-else-after-return-in-dm_crtc_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0269-drm-i915-Do-not-disable-preemption-for-resets.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0269-drm-i915-panelreplay-enable-disable-panel-replay.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0269-drm-i915-pmu-drop-kernel-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0270-drm-amd-display-Clean-up-style-problems-in-amdgpu_dm.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0270-drm-i915-Avoid-endless-HPD-poll-detect-loop-via-runt.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0270-drm-i915-abstract-plane-protection-check.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0270-drm-i915-pxp-fix-kernel-doc-for-member-dev_link.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0271-drm-amd-display-Remove-redundant-braces-in-amdgpu_dm.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0271-drm-i915-Don-t-change-the-status-of-forced-connector.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0271-drm-i915-remove-excess-functions-from-plane-protecti.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0271-drm-i915-scatterlist-fix-kernel-doc-parameter-docume.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0272-drm-amd-display-Use-seq_puts-in-amdgpu_current_color.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0272-drm-i915-Don-t-change-the-status-of-forced-connector.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0272-drm-i915-mtl-Define-GSC-Proxy-component-interface.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0272-drm-i915-update-in-source-bug-filing-URLs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update patches.suse/0273-drm-amd-display-fix-comment-typo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0273-drm-i915-mtl-C20-state-verification.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0273-drm-i915-vdsc-Fix-first_line_bpg_offset-calculation.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0273-mei-gsc_proxy-add-gsc-proxy-driver.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0274-drm-amd-Use-attribute-groups-for-PSP-flashing-attrib.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0274-drm-display-dp-Add-helper-function-to-get-DSC-bpp-pr.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0274-drm-i915-dp-Fix-LT-debug-print-in-SDP-CRC-enable.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0274-drm-i915-gsc-add-initial-support-for-GSC-proxy.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0275-drm-amd-Make-flashing-messages-quieter.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0275-drm-i915-display-Store-compressed-bpp-in-U6.4-format.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0275-drm-i915-gsc-add-support-for-GSC-proxy-interrupt.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0275-drm-i915-pxp-mtl-intel_pxp_init_hw-needs-runtime-pm-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0276-drm-amd-Convert-USB-C-PD-F-W-attributes-into-groups.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0276-drm-i915-display-Consider-fractional-vdsc-bpp-while-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0276-drm-i915-pxp-Optimize-GET_PARAM-PXP_STATUS.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0276-drm-i915-vma-fix-struct-i915_vma_bindinfo-kernel-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0277-drm-amd-Add-documentation-for-how-to-flash-a-dGPU.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0277-drm-i915-audio-Consider-fractional-vdsc-bpp-while-co.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0277-drm-i915-display-Remove-unused-POWER_DOMAIN_MASK.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0277-drm-i915-gem-fix-function-pointer-member-kernel-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0278-drm-amd-Detect-IFWI-or-PD-upgrade-support-in-psp_ear.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0278-drm-i915-cx0-Add-intel_cx0_get_owned_lane_mask.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0278-drm-i915-dsc-mtl-Add-support-for-fractional-bpp.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0278-drm-i915-scatterlist-fix-kernel-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0279-drm-amd-adjust-whitespace-for-amdgpu_psp.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0279-drm-i915-Simplify-intel_cx0_program_phy_lane-with-lo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0279-drm-i915-dp-Iterate-over-output-bpp-with-fractional-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0279-drm-i915-ttm-fix-i915_ttm_to_gem-kernel-doc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0280-drm-amdkfd-Access-gpuvm_export_dmabuf-API-to-get-Dma.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0280-drm-i915-cx0-Enable-disable-TX-only-for-owned-PHY-la.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0280-drm-i915-dsc-Add-debugfs-entry-to-validate-DSC-fract.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0280-drm-i915-use-kernel-doc-Werror-when-CONFIG_DRM_I915_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0281-drm-amdgpu-return-an-error-if-query_video_caps-is-no.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0281-drm-i915-cx0-Program-vswing-only-for-owned-lanes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0281-drm-i915-dsc-Allow-DSC-only-with-fractional-bpp-when.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0281-drm-i915-uc-Track-patch-level-versions-on-reduced-ve.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0282-drm-amdgpu-Update-invalid-PTE-flag-setting.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0282-drm-i915-display-Use-int-for-entry-setup-frames.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0282-drm-i915-mtl-Define-GuC-firmware-version-for-MTL.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0283-drm-amdgpu-skip-address-adjustment-for-GFX-RAS-injec.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0283-drm-i915-dp-Tune-down-FEC-detection-timeout-error-me.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0283-drm-i915-guc-Decode-another-GuC-load-failure-case.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0284-drm-amd-display-Clean-up-warnings-in-amdgpu_dm_pp_sm.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0284-drm-i915-guc-Print-status-register-when-waiting-for-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0284-drm-i915-selftest-Simplify-Y-major-tiling-in-blit-se.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0284-drm-i915-xe2lpd-implement-WA-for-underruns-while-ena.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0285-drm-amd-display-Remove-unnecessary-casts-in-amdgpu_d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0285-drm-i915-Eliminate-has_4tile-feature-flag.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0285-drm-i915-panelreplay-Debugfs-support-for-panel-repla.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0285-drm-i915-uc-Enhancements-to-firmware-table-validatio.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0286-drm-amd-display-Clean-up-warnings-in-amdgpu_dm-_mst_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0286-drm-i915-Fix-fractional-bpp-handling-in-intel_link_b.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0286-drm-i915-dp-Consider-output_format-while-computing-d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0286-drm-i915-uc-Reject-duplicate-entries-in-firmware-tab.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0287-drm-amdkfd-Use-KIQ-to-unmap-HIQ.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0287-drm-i915-dp-Move-compressed-bpp-check-with-420-forma.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0287-drm-i915-dsb-DSB-code-refactoring.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0287-drm-i915-uc-Make-unexpected-firmware-versions-an-err.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0288-drm-amdgpu-have-bos-for-PDs-PTS-cpu-accessible-when-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0288-drm-i915-display-keep-struct-intel_display-members-s.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0288-drm-i915-dp_mst-Use-output_format-to-get-the-final-l.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0288-drm-i915-mtl-Drop-FLAT-CCS-check.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0289-drm-amd-amdgpu-Add-cu_occupancy-sysfs-file-to-GFX9.4.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0289-drm-i915-dp-Use-consistent-name-for-link-bpp-and-com.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0289-drm-i915-move-_crtc_clock_get-to-intel_dpll.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0289-drm-i915-mtl-Add-MTL-for-remapping-CCS-FBs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0290-drm-amdkfd-Skip-handle-mapping-SVM-range-with-no-GPU.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0290-drm-i915-add-vlv_pipe_to_phy-helper-to-replace-DPIO_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0290-drm-i915-dp-Update-Bigjoiner-interface-bits-for-comp.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0290-drm-i915-mtl-Fix-the-wa-number-for-Wa_22016670082.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0291-drm-amdgpu-Change-golden-settings-for-GFX-v9.4.3.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0291-drm-i915-convert-vlv_dpio_read-write-from-pipe-to-ph.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0291-drm-i915-intel_cdclk-Add-vdsc-with-bigjoiner-constra.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0291-drm-i915-preparation-for-using-PAT-index.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0292-drm-amdgpu-Fix-error-warnings-in-gmc_v9_0.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0292-drm-i915-dp-Remove-extra-logs-for-printing-DSC-info.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0292-drm-i915-fbc-Split-plane-size-vs.-surface-size-check.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0292-drm-i915-use-pat_index-instead-of-cache_level.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0293-drm-i915-dp-Avoid-forcing-DSC-BPC-for-MST-case.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0293-drm-i915-fbc-Bump-max-surface-size-to-8kx4k-on-icl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0293-drm-i915-pxp-Add-GSC-CS-back-end-resource-init-and-c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0294-drm-amd-display-Block-optimize-on-consecutive-FAMS-e.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0294-drm-i915-dp-Add-functions-to-get-min-max-src-input-b.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0294-drm-i915-fbc-Bump-ivb-FBC-max-surface-size-to-4kx4k.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0294-drm-i915-pxp-Add-MTL-hw-plumbing-enabling-for-KCR-op.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0295-drm-amdgpu-Fix-warnings-in-gfxhub_-v1_0-v1_2.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0295-drm-dp_mst-Store-the-MST-PBN-divider-value-in-fixed-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0295-drm-i915-dp-Check-min-bpc-DSC-limits-for-dsc_force_b.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0295-drm-i915-pxp-Add-MTL-helpers-to-submit-Heci-Cmd-Pack.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0296-drm-amdgpu-Remove-redundant-GFX-v9.4.3-sequence.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0296-drm-dp_mst-Fix-PBN-divider-calculation-for-UHBR-rate.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0296-drm-i915-dp-Avoid-left-shift-of-DSC-output-bpp-by-4.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0296-drm-i915-pxp-Add-GSC-CS-backend-to-send-GSC-fw-messa.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0297-drm-amdgpu-Fix-warnings-in-gfxhub_v2_0.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0297-drm-dp_mst-Add-kunit-tests-for-drm_dp_get_vc_payload.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0297-drm-i915-dp-Rename-helper-to-get-DSC-max-pipe_bpp.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0297-drm-i915-pxp-Add-ARB-session-creation-and-cleanup.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0298-drm-amdgpu-Prefer-dev_warn-over-printk.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0298-drm-i915-dp-Replace-intel_dp_is_uhbr_rate-with-drm_d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0298-drm-i915-dp-Separate-out-functions-for-edp-DP-for-co.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0298-drm-i915-uapi-pxp-Add-a-GET_PARAM-for-PXP.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0299-drm-amdgpu-Fix-warnings-in-gmc_v10_0.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0299-drm-i915-dp-Account-for-channel-coding-efficiency-on.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0299-drm-i915-dp-Add-DSC-BPC-BPP-constraints-while-select.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0299-drm-i915-pxp-On-MTL-KCR-enabling-doesn-t-wait-on-tee.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0300-drm-amdgpu-Fix-errors-warnings-in-gmc_-v6_0-v7_0.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0300-drm-i915-dp-Fix-UHBR-link-M-N-values.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0300-drm-i915-dp-Separate-out-function-to-get-compressed-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0300-drm-i915-pxp-Enable-PXP-with-MTL-GSC-CS.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0301-drm-amdgpu-Fix-warnings-in-gfxhub_v2_1.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0301-drm-i1915-guc-Fix-probe-injection-CI-failures-after-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0301-drm-i915-dp-Get-optimal-link-config-to-have-best-com.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0301-drm-i915-dp_mst-Calculate-the-BW-overhead-in-intel_d.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0302-drm-amdgpu-Remove-else-after-return-statement-in-gmc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0302-drm-i915-dp-Check-src-sink-compressed-bpp-limit-for-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0302-drm-i915-dp_mst-Fix-PBN-MTP_TU-size-calculation-for-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0302-drm-i915-guc-Fix-confused-register-capture-list-crea.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0303-drm-amdgpu-Fix-warnings-in-gmc_v11_0.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0303-drm-i915-dp-Check-if-force_dsc_output_format-is-poss.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0303-drm-i915-dp-Report-a-rounded-down-value-as-the-maxim.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0303-drm-i915-hwmon-Silence-UBSAN-uninitialized-bool-vari.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0304-drm-amdgpu-Remove-else-after-return-statement-in-gfx.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0304-drm-i915-Dump-error-capture-to-kernel-log.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0304-drm-i915-display-Remove-unused-POWER_DOMAIN_MODESET.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0304-drm-i915-dp-Simplify-intel_dp_max_data_rate.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0305-drm-amdgpu-vkms-drop-redundant-set-of-fb_modifiers_n.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0305-drm-i915-dp-Reuse-intel_dp_-max-effective-_data_rate.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0305-drm-i915-guc-Dump-error-capture-to-dmesg-on-CTB-erro.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0306-drm-amd-pm-disbale-dcefclk-device-sysnode-on-GFX-v9..patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0306-drm-i915-dsi-assume-BXT-gpio-works-for-non-native-GP.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0306-drm-i915-guc-slpc-Disable-rps_boost-debugfs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0307-drm-amdgpu-Fix-warnings-in-gmc_v8_0.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0307-drm-i915-display-remove-redundant-parameter-from-sdp.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0307-drm-i915-dsi-switch-mipi_exec_gpio-from-dev_priv-to-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0307-drm-i915-mtl-do-not-enable-render-power-gating-on-MT.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0308-drm-amdgpu-Fix-warnings-in-gfxhub_-v3_0-v3_0_3.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0308-drm-i915-display-combine-DP-audio-compute-config-ste.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0308-drm-i915-dsi-clarify-GPIO-exec-sequence.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0308-drm-i915-mtl-Add-MTL-performance-tuning-changes.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0309-drm-amdgpu-Fix-errors-warnings-in-gfx_v10_0.c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0309-drm-i915-display-add-lock-while-printing-frontbuffer.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0309-drm-i915-dsi-rename-platform-specific-_exec_gpio-to-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0309-drm-i915-mtl-Extend-Wa_16014892111-to-MTL-A-step.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0310-drm-amdgpu-gfx9-move-update_spm_vmid-out-of-rlc_init.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0310-drm-i915-Fix-memory-leaks-in-function-live_nop_switc.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0310-drm-i915-dsi-bxt-icl-GPIO-set-value-do-not-need-gpio.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0310-drm-i915-sdvo-Issue-SetTargetOutput-prior-to-GetAtta.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0311-drm-amdgpu-gfx10-move-update_spm_vmid-out-of-rlc_ini.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0311-drm-i915-dsi-Replace-while-1-with-one-with-clear-exi.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0311-drm-i915-pmu-Change-bitmask-of-enabled-events-to-u32.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0311-drm-i915-sdvo-Protect-macro-args.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0312-drm-amdgpu-Increase-soft-IH-ring-size.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0312-drm-i915-dsi-Get-rid-of-redundant-else.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0312-drm-i915-pmu-Support-PMU-for-all-engines.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0312-drm-i915-sdvo-s-sdvo_inputs_mask-sdvo_num_inputs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0313-drm-i915-Don-t-warn-about-zero-N-P-in-_calc_dpll_par.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0313-drm-i915-dsi-Replace-check-with-a-missing-MIPI-seque.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0313-drm-i915-pmu-Skip-sampling-engines-with-no-enabled-c.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0314-drm-amdkfd-add-kfd2kgd-debugger-callbacks-for-GC-v9..patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0314-drm-i915-Fully-populate-crtc_state-dpll.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0314-drm-i915-dsi-Remove-GPIO-lookup-table-at-the-end-of-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0314-drm-i915-pmu-Transform-PMU-parking-code-to-be-GT-bas.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0315-drm-amdkfd-restore-debugger-additional-info-for-gfx-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0315-drm-i915-dsi-Fix-wrong-initial-value-for-GPIOs-in-bx.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0315-drm-i915-pmu-Add-reference-counting-to-the-sampling-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0315-drm-i915-sdvo-Pick-the-TV-dotclock-from-adjusted_mod.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0316-drm-amdkfd-enable-watch-points-globally-for-gfx943.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0316-drm-i915-dsi-Extract-common-soc_gpio_set_value-helpe.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0316-drm-i915-pmu-Prepare-for-multi-tile-non-engine-count.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0316-drm-i915-sdvo-Fail-gracefully-if-the-TV-dotclock-is-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0317-drm-amdkfd-add-multi-process-debugging-support-for-G.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0317-drm-i915-dsi-Replace-poking-of-VLV-GPIOs-behind-the-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0317-drm-i915-pmu-Export-counters-from-all-tiles.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0317-drm-i915-rpl-Update-pci-ids-for-RPL-P-U.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0318-drm-amdgpu-rename-psp_execute_non_psp_fw_load-and-ma.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0318-drm-i915-dsi-Prepare-soc_gpio_set_value-to-distingui.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0318-drm-i915-mtl-end-support-for-set-caching-ioctl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0318-drm-i915-vma-constify-unbind_fence_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0319-drm-amdgpu-use-psp_execute_load_ip_fw-instead.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0319-drm-i915-display-update-intel_dp_has_audio-to-suppor.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0319-drm-i915-dsi-Replace-poking-of-CHV-GPIOs-behind-the-.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0319-fbdev-Add-Kconfig-options-to-select-different-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0320-drm-i915-display-configure-SDP-split-for-DP-MST.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0320-drm-i915-dsi-Combine-checks-in-mipi_exec_gpio.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0320-drm-radeon-ERROR-foo-bar-should-be-foo-bar.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0320-fbdev-Add-initializer-macros-for-struct-fb_ops.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0321-drm-armada-Use-regular-fbdev-I-O-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0321-drm-i915-iosf-Drop-unused-APIs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0321-drm-i915-regs-split-out-intel_color_regs.h.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0321-drm-radeon-ERROR-foo-should-be-foo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0322-drm-exynos-Use-regular-fbdev-I-O-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0322-drm-i915-color-move-CHV-CGM-pipe-mode-read-to-intel_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0322-drm-i915-display-Use-int-type-for-entry_setup_frames.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0322-drm-radeon-ERROR-foo-should-be-foo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0323-drm-gma500-Use-regular-fbdev-I-O-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0323-drm-i915-display-Do-not-check-psr2-if-psr-panel-repl.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0323-drm-i915-move-HSW-gamma-mode-read-to-intel_color.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0323-drm-radeon-ERROR-that-open-brace-should-be-on-the-pr.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update patches.suse/0324-drm-i915-Polish-some-RMWs.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0324-drm-i915-move-ILK-CSC-mode-read-to-intel_color.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0324-drm-radeon-ERROR-foo-should-be-foo.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0324-drm-radeon-Use-regular-fbdev-I-O-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0325-drm-amdkfd-Update-CWSR-grace-period-for-GFX9.4.3.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0325-drm-fbdev-dma-Use-regular-fbdev-I-O-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0325-drm-i915-Push-audio-enable-disable-further-out.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0325-drm-i915-color-move-SKL-gamma-and-CSC-enable-read-to.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0326-drm-amdgpu-add-watchdog-timer-enablement-for-gfx_v9_.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0326-drm-i915-Wrap-g4x-DP-HDMI-audio-enable-disable.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022).
- Update
  patches.suse/0326-drm-i915-color-move-pre-SKL-gamma-and-CSC-enable-rea.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- Update
  patches.suse/0326-drm-omapdrm-Use-regular-fbdev-I-O-helpers.patch
  (jsc#PED-9898 jsc#PED-10191 jsc#PED-10197 jsc#PED-10226
  jsc#PED-10237 jsc#PED-10340 jsc#PED-10852 jsc#PED-11022
  jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 jsc#PED-6116
  jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 jsc#PED-6041
  jsc#PED-6069 jsc#PED-6071).
- commit 55b06a7</changelog>
  <changelog author="ematsumiya@suse.de" date="1759492803">- cifs: prevent NULL pointer dereference in UTF16 conversion
  (bsc#1250365, CVE-2025-39838).
- commit 5883dcd</changelog>
  <changelog author="ailiop@suse.com" date="1759492804">- Squashfs: add additional inode sanity checking (git-fixes).
- commit fe46811</changelog>
  <changelog author="ailiop@suse.com" date="1759492805">- Squashfs: reject negative file sizes in squashfs_read_inode()
  (git-fixes).
- commit 2f68e78</changelog>
  <changelog author="tiwai@suse.de" date="1759579200">- ALSA: usb-audio: Add DSD support for Comtrue USB Audio device
  (stable-fixes).
- ALSA: usb-audio: Fix build with CONFIG_INPUT=n (git-fixes).
- ALSA: usb-audio: Convert comma to semicolon (git-fixes).
- ALSA: usb-audio: Add mixer quirk for Sony DualSense PS5
  (stable-fixes).
- ALSA: usb-audio: Remove unneeded wmb() in mixer_quirks
  (stable-fixes).
- ALSA: usb-audio: Simplify NULL comparison in mixer_quirks
  (stable-fixes).
- ALSA: usb-audio: Avoid multiple assignments in mixer_quirks
  (stable-fixes).
- ALSA: usb-audio: Drop unnecessary parentheses in mixer_quirks
  (stable-fixes).
- ALSA: usb-audio: Fix block comments in mixer_quirks
  (stable-fixes).
- commit 929e260</changelog>
  <changelog author="tiwai@suse.de" date="1759579201">- ASoC: wcd934x: fix error handling in wcd934x_codec_parse_data()
  (git-fixes).
- ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free
  (git-fixes).
- ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping
  (git-fixes).
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping
  (git-fixes).
- ASoC: Intel: bytcht_es8316: Fix invalid quirk input mapping
  (git-fixes).
- ASoC: qcom: audioreach: fix potential null pointer dereference
  (git-fixes).
- ASoC: imx-hdmi: remove cpu_pdev related code (git-fixes).
- ALSA: lx_core: use int type to store negative error codes
  (git-fixes).
- ALSA: usb-audio: Add mute TLV for playback volumes on more
  devices (stable-fixes).
- ALSA: usb-audio: move mixer_quirks' min_mute into common quirk
  (stable-fixes).
- commit 86dd099</changelog>
  <changelog author="tiwai@suse.de" date="1759579202">- docs: admin-guide: update to current minimum pipe size default
  (git-fixes).
- drivers/base/node: handle error properly in register_one_node()
  (git-fixes).
- Bluetooth: ISO: don't leak skb in ISO_CONT RX (git-fixes).
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (git-fixes).
- Bluetooth: MGMT: Fix not exposing debug UUID on
  MGMT_OP_READ_EXP_FEATURES_INFO (git-fixes).
- drm/radeon/r600_cs: clean up of dead code in r600_cs
  (git-fixes).
- drm/bridge: it6505: select REGMAP_I2C (git-fixes).
- drm/panel: novatek-nt35560: Fix invalid return value
  (git-fixes).
- can: rcar_can: rcar_can_resume(): fix s2ram with PSCI
  (stable-fixes).
- drm/i915/backlight: Return immediately when scale() finds
  invalid parameters (stable-fixes).
- commit 07504f9</changelog>
  <changelog author="tiwai@suse.de" date="1759579203">- maple_tree: fix MAPLE_PARENT_RANGE32 and parent pointer docs
  (git-fixes).
- media: rj54n1cb0c: Fix memleak in rj54n1_probe() (git-fixes).
- media: lirc: Fix error handling in lirc_register() (git-fixes).
- media: zoran: Remove zoran_fh structure (git-fixes).
- drm/amdgpu: remove the redeclaration of variable i (git-fixes).
- drm/msm/dpu: fix incorrect type for ret (git-fixes).
- drm/amdkfd: Fix error code sign for EINVAL in svm_ioctl()
  (git-fixes).
- drm/amd/pm: Disable SCLK switching on Oland with high pixel
  clocks (v3) (git-fixes).
- drm/amd/pm: Disable MCLK switching with non-DC at 120 Hz+ (v2)
  (git-fixes).
- drm/amd/pm: Treat zero vblank time as too short in si_dpm (v3)
  (git-fixes).
- drm/amd/pm: Adjust si_upload_smc_data register programming (v3)
  (git-fixes).
- drm/amd/pm: Fix si_upload_smc_data (v3) (git-fixes).
- drm/amd/pm: Disable ULV even if unsupported (v3) (git-fixes).
- drm/amdgpu: Power up UVD 3 for FW validation (v2) (git-fixes).
- drm/rcar-du: dsi: Fix 1/2/3 lane support (git-fixes).
- drm/amd/display: Remove redundant semicolons (git-fixes).
- firewire: core: fix overlooked update of subsystem ABI version
  (git-fixes).
- commit 2161328</changelog>
  <changelog author="tiwai@suse.de" date="1759579204">- net: nfc: nci: Add parameter validation for packet data
  (git-fixes).
- net: usb: Remove disruptive netif_wake_queue in
  rtl8150_set_multicast (git-fixes).
- wifi: ath11k: HAL SRNG: don't deinitialize and re-initialize
  again (git-fixes).
- wifi: ath10k: avoid unnecessary wait for service ready message
  (git-fixes).
- wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load()
  (git-fixes).
- wifi: rtw89: avoid circular locking dependency in
  ser_state_run() (git-fixes).
- wifi: mac80211: fix Rx packet handling when pubsta information
  is not available (git-fixes).
- wifi: mt76: fix potential memory leak in mt76_wmac_probe()
  (git-fixes).
- wifi: mwifiex: send world regulatory domain to driver
  (git-fixes).
- media: b2c2: Fix use-after-free causing by irq_check_work in
  flexcop_pci_remove (git-fixes).
- media: uvcvideo: Mark invalid entities with id
  UVC_INVALID_ENTITY_ID (git-fixes).
- media: i2c: mt9v111: fix incorrect type for ret (git-fixes).
- media: pci: ivtv: Add missing check after DMA map (git-fixes).
- media: cx18: Add missing check after DMA map (git-fixes).
- media: st-delta: avoid excessive stack usage (git-fixes).
- media: v4l2-subdev: Fix alloc failure check in
  v4l2_subdev_call_state_try() (git-fixes).
- wifi: virt_wifi: Fix page fault on connect (stable-fixes).
- mmc: sdhci-cadence: add Mobileye eyeQ support (stable-fixes).
- usb: core: Add 0x prefix to quirks debug output (stable-fixes).
- commit dbb8904</changelog>
  <changelog author="tiwai@suse.de" date="1759579205">- drivers/base/node: fix double free in register_one_node()
  (git-fixes).
- commit 205d070</changelog>
  <changelog author="tiwai@suse.de" date="1759579206">- Bluetooth: hci_sync: Fix using random address for BIG/PA
  advertisements (git-fixes).
- Bluetooth: ISO: free rx_skb if not consumed (git-fixes).
- wifi: ath12k: fix wrong logging ID used for CE (git-fixes).
- wifi: iwlwifi: Remove redundant header files (git-fixes).
- media: tuner: xc5000: Fix use-after-free in xc5000_release
  (git-fixes).
- media: mc: Fix MUST_CONNECT handling for pads with no links
  (git-fixes).
- drm/panthor: Fix memory leak in panthor_ioctl_group_create()
  (git-fixes).
- ASoC: Intel: sof_sdw: Prevent jump to NULL add_sidecar callback
  (git-fixes).
- ALSA: pcm: Disable bottom softirqs as part of spin_lock_irq()
  on PREEMPT_RT (git-fixes).
- commit 90486f1</changelog>
  <changelog author="tiwai@suse.de" date="1759579207">- wifi: ath12k: fix the fetching of combined rssi (git-fixes).
- commit 75dc6e6</changelog>
  <changelog author="tiwai@suse.de" date="1759665600">- bus: mhi: host: Do not use uninitialized 'dev' pointer in
  mhi_init_irq_setup() (git-fixes).
- iio: imu: inv_icm42600: Drop redundant pm_runtime
  reinitialization in resume (git-fixes).
- iio: consumers: Fix offset handling in
  iio_convert_raw_to_processed() (git-fixes).
- iio: dac: ad5421: use int type to store negative error codes
  (git-fixes).
- iio: dac: ad5360: use int type to store negative error codes
  (git-fixes).
- iio: frequency: adf4350: Fix ADF4350_REG3_12BIT_CLKDIV_MODE
  (git-fixes).
- iio: frequency: adf4350: Fix prescaler usage (git-fixes).
- iio: xilinx-ams: Fix AMS_ALARM_THR_DIRECT_MASK (git-fixes).
- iio: xilinx-ams: Unmask interrupts after updating alarms
  (git-fixes).
- misc: genwqe: Fix incorrect cmd field being reported in error
  (git-fixes).
- uio: uio_pdrv_genirq: Remove MODULE_DEVICE_TABLE (git-fixes).
- thunderbolt: Compare HMAC values in constant time (git-fixes).
- usb: misc: qcom_eud: Access EUD_MODE_MANAGER2 through secure
  calls (git-fixes).
- usb: host: max3421-hcd: Fix error pointer dereference in probe
  cleanup (git-fixes).
- tty: n_gsm: Don't block input queue by waiting MSC (git-fixes).
- serial: max310x: Add error checking in probe() (git-fixes).
- mtd: rawnand: omap2: fix device leak on probe failure
  (git-fixes).
- HID: intel-ish-ipc: Remove redundant ready check after timeout
  function (git-fixes).
- hwrng: ks-sa - fix division by zero in ks_sa_rng_init
  (git-fixes).
- crypto: hisilicon/qm - set NULL to qm-&gt;debug.qm_diff_regs
  (git-fixes).
- crypto: aspeed - Fix dma_unmap_sg() direction (git-fixes).
- crypto: atmel - Fix dma_unmap_sg() direction (git-fixes).
- crypto: hisilicon/qm - check whether the input function and
  PF are on the same device (git-fixes).
- hwrng: nomadik - add ARM_AMBA dependency (git-fixes).
- crypto: keembay - Add missing check after sg_nents_for_len()
  (git-fixes).
- commit 6795b42</changelog>
  <changelog author="tiwai@suse.de" date="1759665601">- usb: vhci-hcd: Prevent suspending virtually attached devices
  (git-fixes).
- Revert "usb: xhci: Avoid Stop Endpoint retry loop if the
  endpoint seems Running" (git-fixes).
- usb: typec: tipd: Clear interrupts first (git-fixes).
- usb: cdns3: cdnsp-pci: remove redundant pci_disable_device()
  call (git-fixes).
- usb: gadget: configfs: Correctly set use_os_string at bind
  (git-fixes).
- usb: phy: twl6030: Fix incorrect type for ret (git-fixes).
- crypto: hisilicon/qm - request reserved interrupt for virtual
  function (git-fixes).
- crypto: hisilicon - re-enable address prefetch after device
  resuming (git-fixes).
- crypto: hisilicon/zip - remove unnecessary validation for
  high-performance mode configurations (git-fixes).
- commit 609ee3a</changelog>
  <changelog author="ohering@suse.de" date="1759752000">- RDMA/mana_ib: Fix DSCP value in modify QP (git-fixes).
- commit ffca68d</changelog>
  <changelog author="joao.povoas@suse.com" date="1759752001">- Update
  patches.suse/RDMA-rxe-Flush-delayed-SKBs-while-releasing-RXE-reso.patch
  (git-fixes CVE-2025-39695 bsc#1249306).
- Update
  patches.suse/drm-amdgpu-check-if-hubbub-is-NULL-in-debugfs-amdgpu.patch
  (stable-fixes CVE-2025-39707 bsc#1249333).
- Update
  patches.suse/drm-mediatek-Add-error-handling-for-old-state-CRTC-i.patch
  (git-fixes CVE-2025-39807 bsc#1249887).
- Update
  patches.suse/drm-msm-Add-error-handling-for-krealloc-in-metadata-.patch
  (stable-fixes CVE-2025-39747 bsc#1249566).
- Update
  patches.suse/drm-xe-Make-dma-fences-compliant-with-the-safe-acces.patch
  (stable-fixes CVE-2025-38703 bsc#1249193).
- Update
  patches.suse/drm-xe-vm-Clear-the-scratch_pt-pointer-on-error.patch
  (git-fixes CVE-2025-39811 bsc#1249915).
- Update
  patches.suse/media-ivsc-Fix-crash-at-shutdown-due-to-missing-mei_.patch
  (git-fixes CVE-2025-39711 bsc#1249274).
- Update
  patches.suse/wifi-ath12k-fix-memory-leak-in-ath12k_service_ready_.patch
  (git-fixes CVE-2025-39890 bsc#1250334).
- commit 06f1002</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1759752002">- ixgbe: fix incorrect map used in eee linkmode (CVE-2025-39922
  bsc#1250722).
- commit 1384a55</changelog>
  <changelog author="tiwai@suse.de" date="1759752003">- wifi: ath12k: Add MODULE_FIRMWARE() entries (bsc#1250952).
- commit fbc86d9</changelog>
</package>
<package pkgid="ba1266b0ea58b2a8a751db9afed73a1640103b8dbb4516d7d1d5c32ea3dc5c05" name="kernel-source" arch="src">
  <version epoch="0" ver="6.4.0" rel="150700.53.22.1"/>
  <changelog author="hoyeon.lee@suse.com" date="1761912000">- selftests/bpf: Fix a fd leak in error paths in open_netns
  (git-fixes).
- commit 51d3745</changelog>
  <changelog author="clopez@suse.de" date="1761912001">- KVM: x86/mmu: Prevent installing hugepages when mem attributes
  are changing (git-fixes).
- commit 37d594a</changelog>
  <changelog author="fdmanana@suse.com" date="1761912002">- btrfs: avoid potential out-of-bounds in btrfs_encode_fh()
  (git-fixes).
- commit 8cb68fe</changelog>
  <changelog author="fdmanana@suse.com" date="1761912003">- btrfs: fix clearing of BTRFS_FS_RELOC_RUNNING if relocation
  already running (git-fixes).
- commit f5ef369</changelog>
  <changelog author="fdmanana@suse.com" date="1761912004">- btrfs: do not assert we found block group item when creating
  free space tree (bsc#1252918 CVE-2025-40100).
- commit 327502f</changelog>
  <changelog author="dsterba@suse.com" date="1761912005">- net: tun: Update napi-&gt;skb after XDP process (CVE-2025-39984 bsc#1252081)
- commit f5f1c6b</changelog>
  <changelog author="dsterba@suse.com" date="1761912006">- vhost: vringh: Fix copy_to_iter return value check (CVE-2025-40056 bsc#1252826)
- commit 4efa16a</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1761912007">- smb: client: fix potential cfid UAF in smb2_query_info_compound
  (bsc#1248886).
- commit 5e5239d</changelog>
  <changelog author="tiwai@suse.de" date="1761998400">- drm/panel: kingdisplay-kd097d04: Disable EoTp (git-fixes).
- drm/panel: sitronix-st7789v: fix sync flags for t28cp45tn89
  (git-fixes).
- drm/etnaviv: fix flush sequence logic (git-fixes).
- drm/msm/dpu: Fix pixel extension sub-sampling (git-fixes).
- drm/msm/a6xx: Fix GMU firmware parser (git-fixes).
- drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on
  Iceland (git-fixes).
- drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Fiji
  (git-fixes).
- drm/amd/pm: fix smu table id bound check issue in
  smu_cmn_update_table() (git-fixes).
- drm/mediatek: Fix device use-after-free on unbind (git-fixes).
- ASoC: fsl_sai: fix bit order for DSD format (git-fixes).
- ASoC: Intel: avs: Unprepare a stream when XRUN occurs
  (git-fixes).
- ASoC: qdsp6: q6asm: do not sleep while atomic (git-fixes).
- ALSA: usb-audio: fix control pipe direction (git-fixes).
- commit acb4ea2</changelog>
  <changelog author="tiwai@suse.de" date="1761998401">- drm/ast: Clear preserved bits from register output value
  (git-fixes).
- drm/nouveau: Fix race in nouveau_sched_fini() (git-fixes).
- drm/sysfb: Do not dereference NULL pointer in plane reset
  (git-fixes).
- drm/msm/dpu: Require linear modifier for writeback framebuffers
  (git-fixes).
- drm/amdgpu: fix SPDX header on cyan_skillfish_reg_init.c
  (git-fixes).
- drm/radeon: Remove calls to drm_put_dev() (git-fixes).
- drm/radeon: Do not kfree() devres managed rdev (git-fixes).
- ASoC: fsl_sai: Fix sync error in consumer mode (git-fixes).
- drm/amd/display: increase max link count and fix link-&gt;enc
  NULL pointer access (stable-fixes).
- commit e65d412</changelog>
  <changelog author="tiwai@suse.de" date="1762084800">- regulator: bd718x7: Fix voltages scaled by resistor divider
  (git-fixes).
- regmap: slimbus: fix bus_context pointer in regmap init calls
  (git-fixes).
- commit 20abe4b</changelog>
  <changelog author="mhocko@suse.com" date="1762171200">- coresight: trbe: Return NULL pointer for allocation failures
  (CVE-2025-40060 bsc#1252848).
- commit 4543e34</changelog>
  <changelog author="joao.povoas@suse.com" date="1762171201">- Update
  patches.suse/ACPI-x86-s2idle-Catch-multiple-ACPI_TYPE_PACKAGE-obj.patch
  (git-fixes CVE-2023-53708 bsc#1252537).
- Update
  patches.suse/ALSA-usb-audio-Fix-NULL-pointer-deference-in-try_to_.patch
  (git-fixes CVE-2025-40085 bsc#1252873).
- Update
  patches.suse/ALSA-usb-audio-fix-race-condition-to-UAF-in-snd_usbm.patch
  (git-fixes CVE-2025-39997 bsc#1252056).
- Update
  patches.suse/ASoC-qcom-audioreach-fix-potential-null-pointer-dere.patch
  (git-fixes CVE-2025-40013 bsc#1252348).
- Update patches.suse/Bluetooth-MGMT-Fix-possible-UAFs.patch
  (git-fixes CVE-2025-39981 bsc#1252060).
- Update
  patches.suse/Bluetooth-hci_event-Fix-UAF-in-hci_acl_create_conn_s.patch
  (git-fixes CVE-2025-39982 bsc#1252083).
- Update
  patches.suse/HID-amd_sfh-Fix-for-shift-out-of-bounds.patch
  (bsc#1012628 CVE-2023-53703 bsc#1252553).
- Update
  patches.suse/Input-uinput-zero-initialize-uinput_ff_upload_compat.patch
  (git-fixes CVE-2025-40035 bsc#1252866).
- Update patches.suse/NFS-Fix-a-potential-data-corruption.patch
  (git-fixes CVE-2023-53711 bsc#1252536).
- Update
  patches.suse/NFSD-Define-a-proc_layoutcommit-for-the-FlexFiles-layout-type.patch
  (git-fixes CVE-2025-40087 bsc#1252909).
- Update
  patches.suse/PCI-endpoint-pci-epf-test-Add-NULL-check-for-DMA-cha.patch
  (git-fixes CVE-2025-40032 bsc#1252841).
- Update
  patches.suse/RDMA-rxe-Fix-race-in-do_task-when-draining.patch
  (git-fixes CVE-2025-40061 bsc#1252849).
- Update
  patches.suse/Squashfs-fix-uninit-value-in-squashfs_get_parent.patch
  (git-fixes CVE-2025-40049 bsc#1252822).
- Update
  patches.suse/USB-gadget-Fix-the-memory-leak-in-raw_gadget-dr.patch
  (bsc#1012628 CVE-2023-53693 bsc#1252489).
- Update
  patches.suse/afs-Fix-potential-null-pointer-dereference-in-afs_put_server.patch
  (git-fixes CVE-2025-40010 bsc#1252332).
- Update
  patches.suse/arm64-csum-Fix-OoB-access-in-IP-checksum-code-for-ne.patch
  (git-fixes CVE-2023-53726 bsc#1252565).
- Update
  patches.suse/arm64-sme-Use-STR-P-to-clear-FFR-context-field-.patch
  (bsc#1012628 CVE-2023-53713 bsc#1252559).
- Update
  patches.suse/blk-iocost-use-spin_lock_irqsave-in-adjust_inus.patch
  (bsc#1012628 CVE-2023-53730 bsc#1252495).
- Update
  patches.suse/bus-fsl-mc-Check-return-value-of-platform_get_resour.patch
  (git-fixes CVE-2025-40029 bsc#1252772).
- Update
  patches.suse/can-etas_es58x-populate-ndo_change_mtu-to-prevent-bu.patch
  (git-fixes CVE-2025-39988 bsc#1252074).
- Update
  patches.suse/can-hi311x-populate-ndo_change_mtu-to-prevent-buffer.patch
  (git-fixes CVE-2025-39987 bsc#1252079).
- Update
  patches.suse/can-mcba_usb-populate-ndo_change_mtu-to-prevent-buff.patch
  (git-fixes CVE-2025-39985 bsc#1252082).
- Update
  patches.suse/can-peak_usb-fix-shift-out-of-bounds-issue.patch
  (git-fixes CVE-2025-40020 bsc#1252679).
- Update
  patches.suse/can-sun4i_can-populate-ndo_change_mtu-to-prevent-buf.patch
  (git-fixes CVE-2025-39986 bsc#1252078).
- Update
  patches.suse/clk-imx-clk-imx8mp-improve-error-handling-in-im.patch
  (bsc#1012628 CVE-2023-53704 bsc#1252490).
- Update
  patches.suse/clocksource-drivers-cadence-ttc-Fix-memory-leak.patch
  (bsc#1012628 CVE-2023-53725 bsc#1252492).
- Update
  patches.suse/crypto-essiv-Check-ssize-for-decryption-and-in-place.patch
  (git-fixes CVE-2025-40019 bsc#1252678).
- Update
  patches.suse/crypto-hisilicon-qm-set-NULL-to-qm-debug.qm_diff_reg.patch
  (git-fixes CVE-2025-40062 bsc#1252850).
- Update
  patches.suse/drm-amdgpu-Fix-integer-overflow-in-amdgpu_cs_p.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-53707
  bsc#1252632).
- Update
  patches.suse/drm-gma500-Fix-null-dereference-in-hdmi-teardown.patch
  (git-fixes CVE-2025-40011 bsc#1252336).
- Update
  patches.suse/drm-sched-Fix-potential-double-free-in-drm_sched_job.patch
  (git-fixes CVE-2025-40096 bsc#1252902).
- Update
  patches.suse/fbcon-fix-integer-overflow-in-fbcon_do_set_font.patch
  (git-fixes CVE-2025-39967 bsc#1252033).
- Update
  patches.suse/fs-udf-fix-OOB-read-in-lengthAllocDescs-handling.patch
  (git-fixes CVE-2025-40044 bsc#1252785).
- Update
  patches.suse/hfsplus-fix-slab-out-of-bounds-read-in-hfsplus_strcasecmp.patch
  (git-fixes CVE-2025-40088 bsc#1252904).
- Update
  patches.suse/hfsplus-fix-slab-out-of-bounds-read-in-hfsplus_uni2asc_followup.patch
  (git-fixes CVE-2025-40082 bsc#1252775).
- Update
  patches.suse/iommu-vt-d-Disallow-dirty-tracking-if-incoherent-pag.patch
  (git-fixes CVE-2025-40058 bsc#1252854).
- Update
  patches.suse/md-raid1-fix-potential-OOB-in-raid1_remove_disk-8b04.patch
  (jsc#PED-7542 CVE-2023-53722 bsc#1252499).
- Update
  patches.suse/media-b2c2-Fix-use-after-free-causing-by-irq_check_w.patch
  (git-fixes CVE-2025-39996 bsc#1252065).
- Update
  patches.suse/media-i2c-tc358743-Fix-use-after-free-bugs-caused-by.patch
  (git-fixes CVE-2025-39995 bsc#1252064).
- Update
  patches.suse/media-rc-fix-races-with-imon_disconnect.patch
  (git-fixes CVE-2025-39993 bsc#1252070).
- Update
  patches.suse/media-tuner-xc5000-Fix-use-after-free-in-xc5000_rele.patch
  (git-fixes CVE-2025-39994 bsc#1252072).
- Update
  patches.suse/media-uvcvideo-Mark-invalid-entities-with-id-UVC_INV.patch
  (git-fixes CVE-2025-40016 bsc#1252346).
- Update
  patches.suse/misc-fastrpc-fix-possible-map-leak-in-fastrpc_put_ar.patch
  (git-fixes CVE-2025-40036 bsc#1252865).
- Update
  patches.suse/net-nfc-nci-Add-parameter-validation-for-packet-data.patch
  (git-fixes CVE-2025-40043 bsc#1252787).
- Update
  patches.suse/net-sched-cls_u32-Undo-tcf_bind_filter-if-u32_r.patch
  (bsc#1012628 CVE-2023-53733 bsc#1252685).
- Update
  patches.suse/net-sched-fq_pie-avoid-stalls-in-fq_pie_timer.patch
  (bsc#1220419 CVE-2023-53727 bsc#1252566).
- Update
  patches.suse/netlink-fix-potential-deadlock-in-netlink_set_e.patch
  (bsc#1012628 CVE-2023-53731 bsc#1252481).
- Update
  patches.suse/nvdimm-Fix-memleak-of-pmu-attr_groups-in-unregister_-85ae.patch
  (jsc#PED-5853 CVE-2023-53697 bsc#1252534).
- Update
  patches.suse/posix-timers-Ensure-timer-ID-search-loop-limit-.patch
  (bsc#1012628 CVE-2023-53728 bsc#1252668).
- Update
  patches.suse/ring-buffer-Do-not-swap-cpu_buffer-during-resi.patch
  (bsc#1012628 CVE-2023-53718 bsc#1252564).
- Update
  patches.suse/riscv-move-memblock_allow_resize-after-linear-m.patch
  (bsc#1012628 CVE-2023-53699 bsc#1252550).
- Update
  patches.suse/smb-client-fix-crypto-buffers-in-non-linear-memory.patch
  (bsc#1250491 boo#1239206 CVE-2025-40052 bsc#1252851).
- Update
  patches.suse/soc-qcom-qmi_encdec-Restrict-string-length-in-decode.patch
  (git-fixes CVE-2023-53729 bsc#1252496).
- Update
  patches.suse/tty-n_gsm-Don-t-block-input-queue-by-waiting-MSC.patch
  (git-fixes CVE-2025-40071 bsc#1252797).
- Update
  patches.suse/wifi-ath11k-fix-NULL-dereference-in-ath11k_qmi_m3_lo.patch
  (git-fixes CVE-2025-39991 bsc#1252075).
- Update
  patches.suse/wifi-ath12k-Fix-a-NULL-pointer-dereference-in-ath12k.patch
  (git-fixes CVE-2023-53721 bsc#1252561).
- Update
  patches.suse/xfrm-xfrm_alloc_spi-shouldn-t-use-0-as-SPI.patch
  (CVE-2025-39797 bsc#1249608 CVE-2025-39965 bsc#1251967).
- Update
  patches.suse/xsk-fix-refcount-underflow-in-error-path.patch
  (bsc#1012628 CVE-2023-53698 bsc#1252479).
- commit 9042362</changelog>
  <changelog author="joao.povoas@suse.com" date="1762171202">- Update
  patches.suse/fbdev-simplefb-Fix-use-after-free-in-simplefb_detach.patch
  (git-fixes CVE-2025-40037 bsc#1252819).
- Update
  patches.suse/ixgbe-fix-too-early-devlink_free-in-ixgbe_remove.patch
  (git-fixes CVE-2025-40091 bsc#1252915).
- Update
  patches.suse/ixgbevf-fix-mailbox-API-compatibility-by-negotiating.patch
  (bsc#1247222 CVE-2025-40104 bsc#1252921).
- commit 7ff6ed4</changelog>
  <changelog author="clopez@suse.de" date="1762171203">- KVM: x86: Replace static_call_cond() with static_call()
  (git-fixes).
- commit 6bb685c</changelog>
  <changelog author="clopez@suse.de" date="1762171204">- KVM: x86: Introduce kvm_x86_call() to simplify static calls
  of kvm_x86_ops (git-fixes).
- Refresh
  patches.suse/KVM-x86-Don-t-inject-PV-async-PF-if-SEND_ALWAYS-0-an.patch.
- Refresh
  patches.suse/KVM-x86-Exit-to-userspace-if-fastpath-triggers-one-o.patch.
- Refresh patches.suse/KVM-x86-Introduce-kvm_set_mp_state.patch.
- Refresh
  patches.suse/KVM-x86-Route-non-canonical-checks-in-emulator-throu.patch.
- Refresh
  patches.suse/KVM-x86-model-canonical-checks-more-precisely.patch.
- commit 3454959</changelog>
  <changelog author="wqu@suse.com" date="1762257600">- btrfs: fix the incorrect max_bytes value for
  find_lock_delalloc_range() (git-fixes).
- commit 91a9728</changelog>
  <changelog author="jgross@suse.com" date="1762257601">- vhost: vringh: Modify the return value check (CVE-2025-40051
  bsc#1252858).
- commit 80d9f20</changelog>
  <changelog author="clopez@suse.de" date="1762257602">- Delete
  patches.kabi/KVM-x86-pmu-Allow-programming-events-that-match-unsu.patch.
  This avoids a kbuild error in check-patchrv. This patch is not needed
  anyway since 4f5efb71e1f4.
- commit 624b1b2</changelog>
  <changelog author="msuchanek@suse.de" date="1762344000">- kernel-subpackage-spec: Do not doubly-sign modules (bsc#1251930).
- commit 0f034b6</changelog>
</package>
<package pkgid="1253aea26fd791eb8364a0cb5f462825f98d29bebec0679f3cf27ce53a71b364" name="kernel-source" arch="src">
  <version epoch="0" ver="6.4.0" rel="150700.53.25.1"/>
  <changelog author="mkubecek@suse.cz" date="1764072000">- net: dst: annotate data-races around dst-&gt;output (CVE-2025-40074
  bsc#1252794).
- commit a54672b</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072001">- net: dst: add four helpers to annotate data-races around
  dst-&gt;dev (CVE-2025-40074 bsc#1252794).
- commit d644653</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072002">- ipv4: adopt dst_dev, skb_dst_dev and skb_dst_dev_net[_rcu]
  (CVE-2025-40074 bsc#1252794).
- commit 172fe2b</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072003">- ipv6: adopt dst_dev() helper (CVE-2025-40074 bsc#1252794).
- refresh patches.suse/net-ip6_tunnel-Prevent-perpetual-tunnel-growth.patch
- commit 7eda2f1</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072004">- ipv6: adopt skb_dst_dev() and skb_dst_dev_net[_rcu]() helpers
  (CVE-2025-40074 bsc#1252794).
- commit bef51be</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072005">- ipv6: ip6_mc_input() and ip6_mr_input() cleanups (CVE-2025-40074
  bsc#1252794).
- commit 74e34e6</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072006">- net: Add locking to protect skb-&gt;dev access in ip_output
  (CVE-2025-40074 bsc#1252794).
- commit ba856a3</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072007">- net: dst: introduce dst-&gt;dev_rcu (CVE-2025-40074 bsc#1252794).
- commit bc25dd4</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072008">- kabi: hide dst_entry::dev_rcu (CVE-2025-40074 bsc#1252794).
- commit 7047515</changelog>
  <changelog author="mkubecek@suse.cz" date="1764072009">- ipv4: start using dst_dev_rcu() (CVE-2025-40074 bsc#1252794).
- commit d58640c</changelog>
  <changelog author="rbm@suse.com" date="1764072010">- selftests: net: lib: Do not overwrite error messages
  (bsc#1254235).
- selftests: net: lib: fix shift count out of range (bsc#1254235).
- selftests: net: lib: Move logging from forwarding/lib.sh here
  (bsc#1254235).
- selftests: net: add helper for checking if nettest is available
  (bsc#1254235).
- selftests: net: lib: kill PIDs before del netns (bsc#1254235).
- selftests: lib: tc_rule_stats_get(): Move default to argument
  definition (bsc#1254235).
- selftests: net: lib: remove 'ns' var in setup_ns (bsc#1254235).
- selftests: net: lib: do not set ns var as readonly
  (bsc#1254235).
- selftests: net: lib: remove ns from list after clean-up
  (bsc#1254235).
- selftests: net: lib: ignore possible errors (bsc#1254235).
- selftests: net: lib: set 'i' as local (bsc#1254235).
- selftests: net: lib: avoid error removing empty netns name
  (bsc#1254235).
- selftests: net: lib: support errexit with busywait
  (bsc#1254235).
- selftests/net: use tc rule to filter the na packet
  (bsc#1254235).
- selftests/net/lib: no need to record ns name if it already exist
  (bsc#1254235).
- selftests: net: Unify code of busywait() and slowwait()
  (bsc#1254235).
- selftests: forwarding: Add a test for testing lib.sh
  functionality (bsc#1254235).
- selftests: forwarding: Support for performance sensitive tests
  (bsc#1254235).
- selftests: forwarding: Convert log_test() to recognize RET
  values (bsc#1254235).
- selftests: forwarding: Have RET track kselftest framework
  constants (bsc#1254235).
- selftests: lib: Define more kselftest exit codes (bsc#1254235).
- selftests: forwarding: Change inappropriate log_test_skip()
  calls (bsc#1254235).
- selftests: forwarding.config.sample: Move overrides to lib.sh
  (bsc#1254235).
- selftests: net: libs: Change variable fallback syntax
  (bsc#1254235).
- selftests: forwarding: Parametrize mausezahn delay
  (bsc#1254235).
- selftests/net/forwarding: add slowwait functions (bsc#1254235).
- selftests: forwarding: Remove duplicated lib.sh content
  (bsc#1254235).
- selftests: forwarding: Redefine relative_path variable
  (bsc#1254235).
- selftests: net: List helper scripts in TEST_FILES Makefile
  variable (bsc#1254235).
- selftests/net/lib: update busywait timeout value (bsc#1254235).
- selftests: forwarding: Avoid failures to source net/lib.sh
  (bsc#1254235).
- selftests/net: add variable NS_LIST for lib.sh (bsc#1254235).
- selftests/net: add lib.sh (bsc#1254235).
- commit 3a99ca1</changelog>
  <changelog author="tzimmermann@suse.com" date="1764158400">- drm/xe: Don't allow evicting of BOs in same VM in array of VM binds (bsc#1252923 CVE-2025-40086)
- commit aa2fe0b</changelog>
  <changelog author="tzimmermann@suse.com" date="1764158401">- Fix "drm/xe: Don't allow evicting of BOs in same VM in array of VM binds" (bsc#1252923)
  Fix the following compiler warning:
  * no semicolon at end of struct or union in ../drivers/gpu/drm/xe/xe_vm_types.h
  In file included from ../drivers/gpu/drm/xe/xe_bb.c:16:0:
  ../drivers/gpu/drm/xe/xe_vm_types.h:393:1: warning: no semicolon at end of struct or union
- commit 38ee821</changelog>
  <changelog author="joao.povoas@suse.com" date="1764158402">- Update
  patches.suse/ASoC-Intel-bytcr_rt5640-Fix-invalid-quirk-input-mapp.patch
  (git-fixes CVE-2025-40154 bsc#1253431).
- Update
  patches.suse/ASoC-Intel-bytcr_rt5651-Fix-invalid-quirk-input-mapp.patch
  (git-fixes CVE-2025-40121 bsc#1253367).
- Update
  patches.suse/Bluetooth-ISO-Fix-possible-UAF-on-iso_conn_free.patch
  (git-fixes CVE-2025-40141 bsc#1253352).
- Update
  patches.suse/EDAC-i10nm-Skip-DIMM-enumeration-on-a-disabled-memor.patch
  (git-fixes CVE-2025-40157 bsc#1253423).
- Update
  patches.suse/PM-devfreq-mtk-cci-Fix-potential-error-pointer-deref.patch
  (git-fixes CVE-2025-40156 bsc#1253428).
- Update
  patches.suse/Squashfs-reject-negative-file-sizes-in-squashfs_read_inode.patch
  (git-fixes CVE-2025-40200 bsc#1253448).
- Update
  patches.suse/accel-qaic-Treat-remaining-0-as-error-in-find_and_ma.patch
  (git-fixes CVE-2025-40172 bsc#1253424).
- Update
  patches.suse/bpf-Fix-metadata_dst-leak-__bpf_redirect_neigh_v-4-6.patch
  (git-fixes CVE-2025-40183 bsc#1253441).
- Update
  patches.suse/btrfs-avoid-potential-out-of-bounds-in-btrfs_encode_.patch
  (git-fixes CVE-2025-40205 bsc#1253456).
- Update
  patches.suse/can-hi311x-fix-null-pointer-dereference-when-resumin.patch
  (stable-fixes CVE-2025-40107 bsc#1253018).
- Update
  patches.suse/cpufreq-intel_pstate-Fix-object-lifecycle-issue-in-update_qos_request.patch
  (stable-fixes git-fixes CVE-2025-40194 bsc#1253445).
- Update
  patches.suse/crypto-rng-Ensure-set_ent-is-always-present.patch
  (git-fixes CVE-2025-40109 bsc#1253176).
- Update
  patches.suse/drm-vmwgfx-Fix-Use-after-free-in-validation.patch
  (git-fixes CVE-2025-40111 bsc#1253362).
- Update
  patches.suse/drm-vmwgfx-Fix-a-null-ptr-access-in-the-cursor-snoop.patch
  (git-fixes CVE-2025-40110 bsc#1253275).
- Update
  patches.suse/ext4-avoid-potential-buffer-over-read-in-parse_apply.patch
  (git-fixes CVE-2025-40198 bsc#1253453).
- Update
  patches.suse/hwrng-ks-sa-fix-division-by-zero-in-ks_sa_rng_init.patch
  (git-fixes CVE-2025-40127 bsc#1253369).
- Update
  patches.suse/mailbox-zynqmp-ipi-Fix-out-of-bounds-access-in-mailb.patch
  (git-fixes CVE-2025-40180 bsc#1253440).
- Update
  patches.suse/media-v4l2-subdev-Fix-alloc-failure-check-in-v4l2_su.patch
  (git-fixes CVE-2025-40207 bsc#1253395).
- Update
  patches.suse/net-usb-Remove-disruptive-netif_wake_queue-in-rtl815.patch
  (git-fixes CVE-2025-40140 bsc#1253349).
- Update
  patches.suse/net-usb-asix-hold-PM-usage-ref-to-avoid-PM-MDIO-RTNL.patch
  (git-fixes CVE-2025-40120 bsc#1253360).
- Update
  patches.suse/nvmet-fc-move-lsop-put-work-to-nvmet_fc_ls_req_op.patch
  (bsc#1245193 bsc#1247500 CVE-2025-40171 bsc#1253412).
- Update
  patches.suse/pwm-berlin-Fix-wrong-register-in-suspend-resume.patch
  (git-fixes CVE-2025-40188 bsc#1253449).
- Update
  patches.suse/scsi-mpt3sas-Fix-crash-in-transport-port-remove-by-using-i.patch
  (git-fixes CVE-2025-40115 bsc#1253318).
- Update
  patches.suse/scsi-pm80xx-Fix-array-index-out-of-of-bounds-on-rmmod.patch
  (git-fixes CVE-2025-40118 bsc#1253363).
- Update
  patches.suse/sunrpc-fix-null-pointer-dereference-on-zero-length-checksum.patch
  (git-fixes CVE-2025-40129 bsc#1253472).
- Update
  patches.suse/tcp-Don-t-call-reqsk_fastopen_remove-in-tcp_conn_request.patch
  (git-fixes CVE-2025-40186 bsc#1253438).
- Update
  patches.suse/usb-host-max3421-hcd-Fix-error-pointer-dereference-i.patch
  (git-fixes CVE-2025-40116 bsc#1253324).
- Update
  patches.suse/usbnet-Fix-using-smp_processor_id-in-preemptible-cod.patch
  (git-fixes CVE-2025-40164 bsc#1253407).
- commit d8d3cd1</changelog>
  <changelog author="mkubecek@suse.cz" date="1764158403">- tcp_metrics: use dst_dev_net_rcu() (CVE-2025-40075 bsc#1252795).
- commit fcb52d9</changelog>
  <changelog author="mkubecek@suse.cz" date="1764158404">- smc: Fix use-after-free in __pnet_find_base_ndev()
  (CVE-2025-40064 bsc#1252845).
- commit 2971b90</changelog>
  <changelog author="mkubecek@suse.cz" date="1764158405">- smc: Use __sk_dst_get() and dst_dev_rcu() in in
  smc_clc_prfx_set() (CVE-2025-40139 bsc#1253409).
- commit a7ae1b3</changelog>
  <changelog author="mkubecek@suse.cz" date="1764158406">- smc: Use __sk_dst_get() and dst_dev_rcu() in
  smc_clc_prfx_match() (CVE-2025-40168 bsc#1253427).
- commit 0f10629</changelog>
  <changelog author="mkubecek@suse.cz" date="1764158407">- tls: Use __sk_dst_get() and dst_dev_rcu() in
  get_netdev_for_sock() (CVE-2025-40149 bsc#1253355).
- commit c8fb6ed</changelog>
  <changelog author="hare@suse.de" date="1764244800">- KVM: s390: kABI backport for 'last_sleep_cpu' (bsc#1252352).
- KVM: s390: improve interrupt cpu for wakeup (bsc#1235463).
- commit d323daf</changelog>
</package>
<package pkgid="1c8c61f419c8ed6d964964a8f1f5a287dc9d6dbe898ac45f2115a3e7ab5de2c8" name="kernel-source" arch="src">
  <version epoch="0" ver="6.4.0" rel="150700.53.28.1"/>
  <changelog author="joao.povoas@suse.com" date="1768219200">- Update
  patches.suse/1260-drm-amdkfd-Add-missing-gfx11-MQD-manager-callbacks.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-54261
  bsc#1255879).
- Update
  patches.suse/ACPI-video-Fix-use-after-free-in-acpi_video_switch_b.patch
  (git-fixes CVE-2025-40211 bsc#1254126).
- Update
  patches.suse/ALSA-dice-fix-buffer-overflow-in-detect_stream_forma.patch
  (git-fixes CVE-2025-68346 bsc#1255603).
- Update
  patches.suse/ALSA-firewire-motu-add-bounds-check-in-put_user-loop.patch
  (git-fixes CVE-2025-68753 bsc#1256238).
- Update
  patches.suse/ALSA-firewire-motu-fix-buffer-overflow-in-hwdep-read.patch
  (git-fixes CVE-2025-68347 bsc#1255706).
- Update
  patches.suse/ALSA-hda-cs35l41-Fix-NULL-pointer-dereference-in-cs3-c34b04c.patch
  (git-fixes CVE-2025-68345 bsc#1255601).
- Update
  patches.suse/ALSA-pcm-Fix-potential-data-race-at-PCM-memory-.patch
  (bsc#1012628 CVE-2023-54072 bsc#1256291).
- Update
  patches.suse/ALSA-usb-audio-Fix-NULL-pointer-dereference-in-snd_u.patch
  (git-fixes CVE-2025-40275 bsc#1254829).
- Update
  patches.suse/ALSA-usb-audio-Fix-potential-memory-leaks-at-error-p.patch
  (jsc#PED-6045 jsc#PED-6036 jsc#PED-6104 jsc#PED-6114
  jsc#PED-6067 jsc#PED-6123 CVE-2023-54022 bsc#1255545).
- Update
  patches.suse/ALSA-usb-audio-Fix-potential-overflow-of-PCM-transfe.patch
  (stable-fixes CVE-2025-40269 bsc#1255035).
- Update
  patches.suse/ASoC-codecs-wcd-mbhc-v2-fix-resource-leaks-on-c.patch
  (bsc#1012628 CVE-2023-53842 bsc#1254690).
- Update
  patches.suse/Bluetooth-6lowpan-reset-link-local-header-on-ipv6-re.patch
  (git-fixes CVE-2025-40282 bsc#1254850).
- Update
  patches.suse/Bluetooth-ISO-fix-iso_conn-related-locking-and-.patch
  (bsc#1012628 CVE-2023-54164 bsc#1256071).
- Update
  patches.suse/Bluetooth-MGMT-cancel-mesh-send-timer-when-hdev-remo.patch
  (git-fixes CVE-2025-40284 bsc#1254860).
- Update patches.suse/Bluetooth-SCO-Fix-UAF-on-sco_conn_free.patch
  (stable-fixes CVE-2025-40309 bsc#1255065).
- Update
  patches.suse/Bluetooth-bcsp-receive-data-only-if-registered.patch
  (stable-fixes CVE-2025-40308 bsc#1255064).
- Update
  patches.suse/Bluetooth-btusb-reorder-cleanup-in-btusb_disconnect-.patch
  (git-fixes CVE-2025-40283 bsc#1254858).
- Update
  patches.suse/Bluetooth-hci_conn-return-ERR_PTR-instead-of-NU.patch
  (bsc#1012628 CVE-2023-54038 bsc#1255540).
- Update
  patches.suse/Bluetooth-hci_event-validate-skb-length-for-unknown-.patch
  (git-fixes CVE-2025-40301 bsc#1255193).
- Update
  patches.suse/Bluetooth-hci_sock-Prevent-race-in-socket-write-iter.patch
  (git-fixes CVE-2025-68305 bsc#1255169).
- Update
  patches.suse/Bluetooth-hci_sync-Avoid-use-after-free-in-dbg-.patch
  (bsc#1012628 CVE-2023-54210 bsc#1255955).
- Update
  patches.suse/Bluetooth-hci_sync-Avoid-use-after-free-in-dbg-for-h.patch
  (git-fixes CVE-2023-53828 bsc#1254623).
- Update
  patches.suse/Bluetooth-hci_sync-Fix-UAF-in-hci_disconnect_all_syn.patch
  (git-fixes CVE-2023-53762 bsc#1254606).
- Update
  patches.suse/Bluetooth-hci_sync-fix-race-in-hci_cmd_sync_dequeue_.patch
  (git-fixes CVE-2025-40318 bsc#1254798).
- Update
  patches.suse/FS-JFS-Check-for-read-only-mounted-filesystem-i.patch
  (bsc#1012628 CVE-2023-53766 bsc#1255005).
- Update
  patches.suse/HID-hidraw-fix-data-race-on-device-refcount.patch
  (bsc#1012628 CVE-2023-53759 bsc#1254663).
- Update
  patches.suse/HID-uclogic-Correct-devm-device-reference-for-hidinp.patch
  (git-fixes CVE-2023-54207 bsc#1255961).
- Update
  patches.suse/HID-wacom-Use-ktime_t-rather-than-int-when-deal.patch
  (bsc#1012628 CVE-2023-53797 bsc#1254733).
- Update
  patches.suse/Input-cros_ec_keyb-fix-an-invalid-memory-access.patch
  (stable-fixes CVE-2025-40263 bsc#1255077).
- Update
  patches.suse/Input-imx_sc_key-fix-memory-corruption-on-unload.patch
  (git-fixes CVE-2025-40262 bsc#1254840).
- Update
  patches.suse/Input-pegasus-notetaker-fix-potential-out-of-bounds-.patch
  (git-fixes CVE-2025-68217 bsc#1255221).
- Update
  patches.suse/KVM-SVM-Get-source-vCPUs-from-source-VM-for-SEV-ES-i.patch
  (git-fixes CVE-2023-54296 bsc#1255793).
- Update
  patches.suse/KVM-s390-pv-fix-index-value-of-replaced-ASCE.patch
  (bsc#1012628 CVE-2023-54092 bsc#1256370).
- Update patches.suse/MIPS-KVM-Fix-NULL-pointer-dereference.patch
  (bsc#1012628 CVE-2023-54241 bsc#1255838).
- Update patches.suse/NFSD-Fix-crash-in-nfsd4_read_release.patch
  (git-fixes CVE-2025-40324 bsc#1254791).
- Update
  patches.suse/NFSD-free-copynotify-stateid-in-nfs4_free_ol_stateid.patch
  (git-fixes CVE-2025-40273 bsc#1254828).
- Update patches.suse/PCI-DOE-Fix-destroy_work_on_stack-race.patch
  (git-fixes CVE-2023-54235 bsc#1255921).
- Update
  patches.suse/PCI-Free-released-resource-after-coalescing.patch
  (git-fixes CVE-2023-53743 bsc#1254782).
- Update
  patches.suse/PCI-IOV-Add-PCI-rescan-remove-locking-when-enabling-.patch
  (git-fixes CVE-2025-40219 bsc#1254518).
- Update
  patches.suse/PCI-cadence-Check-for-the-existence-of-cdns_pcie-ops.patch
  (stable-fixes CVE-2025-68176 bsc#1255329).
- Update
  patches.suse/RDMA-bnxt_re-Prevent-handling-any-completions-a.patch
  (bsc#1012628 CVE-2023-54048 bsc#1256395).
- Update
  patches.suse/RDMA-efa-Fix-wrong-resources-deallocation-order.patch
  (git-fixes CVE-2023-54201 bsc#1255964).
- Update
  patches.suse/RDMA-irdma-Fix-data-race-on-CQP-completion-stat.patch
  (bsc#1012628 CVE-2023-54302 bsc#1255792).
- Update
  patches.suse/RDMA-irdma-Fix-data-race-on-CQP-request-done.patch
  (bsc#1012628 CVE-2023-54292 bsc#1255800).
- Update
  patches.suse/Revert-IB-isert-Fix-incorrect-release-of-isert-conne.patch
  (git-fixes CVE-2023-54219 bsc#1256231).
- Update
  patches.suse/accel-habanalabs-support-mapping-cb-with-vmalloc-bac.patch
  (stable-fixes CVE-2025-40311 bsc#1255068).
- Update
  patches.suse/accel-qaic-Clean-up-integer-overflow-checking-.patch
  (bsc#1012628 CVE-2023-53778 bsc#1254761).
- Update
  patches.suse/af_unix-Fix-data-race-around-unix_tot_inflight.patch
  (git-fixes CVE-2023-54006 bsc#1255591).
- Update patches.suse/amba-bus-fix-refcount-leak.patch (git-fixes
  CVE-2023-54230 bsc#1255925).
- Update
  patches.suse/amd-amdkfd-resolve-a-race-in-amdgpu_amdkfd_device_fi.patch
  (stable-fixes CVE-2025-40310 bsc#1255041).
- Update
  patches.suse/amdgpu-validate-offset_in_bo-of-drm_amdgpu_gem_.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-53819
  bsc#1254712).
- Update patches.suse/arm64-mm-fix-VA-range-sanity-check.patch
  (bsc#1012628 CVE-2023-53989 bsc#1256302).
- Update
  patches.suse/arm64-set-__exception_irq_entry-with-__irq_entr.patch
  (bsc#1012628 CVE-2023-54322 bsc#1255763).
- Update
  patches.suse/atm-fore200e-Fix-possible-data-race-in-fore200e_open.patch
  (git-fixes CVE-2025-68339 bsc#1255505).
- Update
  patches.suse/audit-fix-possible-soft-lockup-in-__audit_inode_chil.patch
  (git-fixes CVE-2023-54045 bsc#1256285).
- Update
  patches.suse/autofs-fix-memory-leak-of-waitqueues-in-autofs_catat.patch
  (git-fixes CVE-2023-54134 bsc#1256106).
- Update
  patches.suse/backlight-led-bl-Add-devlink-to-supplier-LEDs.patch
  (git-fixes CVE-2025-68758 bsc#1255944).
- Update
  patches.suse/bcache-fixup-btree_cache_wait-list-damage.patch
  (bsc#1012628 CVE-2023-54293 bsc#1255801).
- Update patches.suse/binder-fix-memory-leak-in-binder_init.patch
  (bsc#1012628 CVE-2023-54005 bsc#1255629).
- Update
  patches.suse/blk-cgroup-Fix-NULL-deref-caused-by-blkg_policy_data-being-installed-before-init.patch
  (bsc#1216062 CVE-2023-54271 bsc#1255902).
- Update
  patches.suse/blk-cgroup-hold-queue_lock-when-removing-blkg-.patch
  (bsc#1012628 CVE-2023-54088 bsc#1256263).
- Update
  patches.suse/blk-mq-fix-tags-leak-when-shrink-nr_hw_queues.patch
  (bsc#1216436 CVE-2023-54227 bsc#1255952).
- Update
  patches.suse/block-fix-blktrace-debugfs-entries-leakage.patch
  (bsc#1012628 CVE-2023-54209 bsc#1255963).
- Update
  patches.suse/block-rq_qos-protect-rq_qos-apis-with-a-new-loc.patch
  (bsc#1012628 CVE-2023-53823 bsc#1254691).
- Update
  patches.suse/bpf-Address-KCSAN-report-on-bpf_lru_list.patch
  (bsc#1012628 CVE-2023-54283 bsc#1255809).
- Update
  patches.suse/bpf-Disable-preemption-in-bpf_event_output.patch
  (bsc#1012628 CVE-2023-54173 bsc#1255996).
- Update
  patches.suse/bpf-Disable-preemption-in-bpf_perf_event_outpu.patch
  (bsc#1012628 CVE-2023-54303 bsc#1255785).
- Update
  patches.suse/bpf-Fix-issue-in-verifying-allow_ptr_leaks.patch
  (jsc#PED-6811 CVE-2023-54181 bsc#1255988).
- Update
  patches.suse/bpf-Silence-a-warning-in-btf_type_id_size.patch
  (bsc#1012628 CVE-2023-54247 bsc#1255892).
- Update
  patches.suse/bpf-bpf_sk_storage-Fix-invalid-wait-context-lockdep-.patch
  (jsc#PED-6811 CVE-2023-53857 bsc#1254648).
- Update
  patches.suse/bpf-drop-unnecessary-user-triggerable-WARN_ONCE.patch
  (bsc#1012628 CVE-2023-54145 bsc#1256090).
- Update
  patches.suse/bpf-sockmap-Fix-skb-refcnt-race-after-locking-change.patch
  (jsc#PED-6811 CVE-2023-53836 bsc#1254693).
- Update
  patches.suse/btrfs-fix-incorrect-splitting-in-btrfs_drop_ex.patch
  (bsc#1012628 CVE-2023-54121 bsc#1256267).
- Update
  patches.suse/btrfs-fix-lockdep-splat-and-potential-deadlock-after.patch
  (git-fixes CVE-2023-54224 bsc#1255951).
- Update
  patches.suse/btrfs-fix-race-between-balance-and-cancel-pause.patch
  (bsc#1012628 CVE-2023-54023 bsc#1256301).
- Update
  patches.suse/btrfs-fix-race-when-deleting-free-space-root-fr.patch
  (bsc#1012628 CVE-2023-54067 bsc#1256369).
- Update
  patches.suse/btrfs-fix-race-when-deleting-quota-root-from-th.patch
  (bsc#1012628 CVE-2023-54032 bsc#1255617).
- Update
  patches.suse/btrfs-fix-warning-when-putting-transaction-with.patch
  (bsc#1012628 CVE-2023-53865 bsc#1254762).
- Update
  patches.suse/btrfs-release-path-before-inode-lookup-during-the-in.patch
  (git-fixes CVE-2023-54281 bsc#1255820).
- Update
  patches.suse/btrfs-remove-BUG_ON-s-in-add_new_free_space.patch
  (bsc#1012628 CVE-2023-54185 bsc#1255984).
- Update
  patches.suse/btrfs-set-page-extent-mapped-after-read_folio-in-rel.patch
  (git-fixes CVE-2023-54253 bsc#1255891).
- Update
  patches.suse/btrfs-zoned-fix-memory-leak-after-finding-block.patch
  (bsc#1012628 CVE-2023-54297 bsc#1255795).
- Update
  patches.suse/btrfs-zoned-skip-splitting-and-logical-rewriting-on-.patch
  (bsc#1223731 CVE-2024-26944 CVE-2023-54080 bsc#1256367).
- Update
  patches.suse/can-gs_usb-gs_usb_xmit_callback-fix-handling-of-fail.patch
  (git-fixes CVE-2025-68307 bsc#1255146).
- Update
  patches.suse/can-kvaser_usb-leaf-Fix-potential-infinite-loop-in-c.patch
  (git-fixes CVE-2025-68308 bsc#1255149).
- Update
  patches.suse/cifs-fix-potential-oops-in-cifs_oplock_break.patch
  (bsc#1012628 CVE-2023-54258 bsc#1255886).
- Update
  patches.suse/cifs-fix-session-state-check-in-reconnect-to-a.patch
  (bsc#1012628 CVE-2023-53794 bsc#1255163).
- Update
  patches.suse/clk-clocking-wizard-Fix-Oops-in-clk_wzrd_regist.patch
  (bsc#1012628 CVE-2023-53807 bsc#1254724).
- Update
  patches.suse/clk-imx93-fix-memory-leak-and-missing-unwind-go.patch
  (bsc#1012628 CVE-2023-54221 bsc#1255842).
- Update
  patches.suse/comedi-c6xdigio-Fix-invalid-PNP-driver-unregistratio.patch
  (git-fixes CVE-2025-68332 bsc#1255483).
- Update
  patches.suse/comedi-check-device-s-attached-status-in-compat-ioct.patch
  (git-fixes CVE-2025-68257 bsc#1255167).
- Update
  patches.suse/comedi-multiq3-sanitize-config-options-in-multiq3_at.patch
  (git-fixes CVE-2025-68258 bsc#1255182).
- Update
  patches.suse/comedi-pcl818-fix-null-ptr-deref-in-pcl818_ai_cancel.patch
  (git-fixes CVE-2025-68335 bsc#1255480).
- Update
  patches.suse/crypto-api-Use-work-queue-in-crypto_destroy_instance.patch
  (git-fixes CVE-2023-53799 bsc#1254732).
- Update
  patches.suse/crypto-aspeed-fix-double-free-caused-by-devm.patch
  (git-fixes CVE-2025-68172 bsc#1255253).
- Update
  patches.suse/crypto-asymmetric_keys-prevent-overflow-in-asymmetri.patch
  (git-fixes CVE-2025-68724 bsc#1255550).
- Update
  patches.suse/dccp-Fix-out-of-bounds-access-in-DCCP-error-handler.patch
  (bsc#1220419 CVE-2023-53782 bsc#1254758).
- Update
  patches.suse/dccp-fix-data-race-around-dp-dccps_mss_cache.patch
  (bsc#1012628 CVE-2023-53839 bsc#1254655).
- Update
  patches.suse/devlink-report-devlink_port_type_warn-source-de.patch
  (bsc#1012628 CVE-2023-53841 bsc#1255009).
- Update
  patches.suse/dm-don-t-attempt-to-queue-IO-under-RCU-protection-a9ce.patch
  (jsc#PED-7514 CVE-2023-53860 bsc#1254626).
- Update
  patches.suse/dm-fix-a-race-condition-in-retrieve_deps-f600.patch
  (jsc#PED-7514 CVE-2023-54324 bsc#1255759).
- Update
  patches.suse/driver-soc-xilinx-use-_safe-loop-iterator-to-av.patch
  (bsc#1012628 CVE-2023-54101 bsc#1256153).
- Update
  patches.suse/drm-amd-display-Check-NULL-before-accessing.patch
  (stable-fixes CVE-2025-68286 bsc#1255351).
- Update
  patches.suse/drm-amd-display-Fix-NULL-deref-in-debugfs-odm_combin.patch
  (git-fixes CVE-2025-68180 bsc#1255252).
- Update
  patches.suse/drm-amdgpu-Fix-NULL-pointer-dereference-in-VRAM-logi.patch
  (stable-fixes CVE-2025-40288 bsc#1255057).
- Update
  patches.suse/drm-bridge-dw_hdmi-fix-connector-access-for-scd.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-53784
  bsc#1254765).
- Update
  patches.suse/drm-client-Fix-memory-leak-in-drm_client_target.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-54091
  bsc#1256274).
- Update
  patches.suse/drm-i915-Avoid-lock-inversion-when-pinning-to-GGTT-o.patch
  (git-fixes CVE-2025-68244 bsc#1255190).
- Update
  patches.suse/drm-mediatek-Fix-device-use-after-free-on-unbind.patch
  (git-fixes CVE-2025-40316 bsc#1254797).
- Update
  patches.suse/drm-msm-dp-Drop-aux-devices-together-with-DP-co.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-53851
  bsc#1254695).
- Update
  patches.suse/drm-mxsfb-Disable-overlay-plane-in-mxsfb_plane_overl.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-53864
  bsc#1254754).
- Update
  patches.suse/drm-nouveau-kms-nv50-init-hpd_irq_lock-for-PIOR.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-54263
  bsc#1255883).
- Update
  patches.suse/drm-sched-Fix-deadlock-in-drm_sched_entity_kill_jobs.patch
  (git-fixes CVE-2025-40329 bsc#1254621).
- Update patches.suse/drm-tegra-Add-call-to-put_pid.patch
  (git-fixes CVE-2025-68233 bsc#1255206).
- Update
  patches.suse/drm-ttm-Don-t-leak-a-resource-on-eviction-error.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-54254
  bsc#1255890).
- Update
  patches.suse/drm-ttm-Don-t-leak-a-resource-on-swapout-move-e.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-53844
  bsc#1254649).
- Update
  patches.suse/drm-vgem-fence-Fix-potential-deadlock-on-release.patch
  (git-fixes CVE-2025-68757 bsc#1255943).
- Update
  patches.suse/drm-vmwgfx-Validate-command-header-size-against-SVGA.patch
  (git-fixes CVE-2025-40277 bsc#1254894).
- Update
  patches.suse/erofs-kill-hooked-chains-to-avoid-loops-on-dedu.patch
  (bsc#1012628 CVE-2023-53777 bsc#1254749).
- Update
  patches.suse/exfat-use-kvmalloc_array-kvfree-instead-of-kma.patch
  (bsc#1012628 CVE-2023-54194 bsc#1255974).
- Update
  patches.suse/ext4-correct-grp-validation-in-ext4_mb_good_group.patch
  (bsc#1234163 CVE-2023-53861 bsc#1254678).
- Update
  patches.suse/ext4-fix-BUG-in-ext4_mb_new_inode_pa-due-to-overflow.patch
  (bsc#1219165 CVE-2023-54069 bsc#1256371).
- Update
  patches.suse/ext4-fix-rbtree-traversal-bug-in-ext4_mb_use_pr.patch
  (bsc#1012628 CVE-2023-53813 bsc#1254717).
- Update
  patches.suse/ext4-turn-quotas-off-if-mount-failed-after-enab.patch
  (bsc#1012628 CVE-2023-54153 bsc#1256081).
- Update
  patches.suse/f2fs-fix-to-do-sanity-check-on-direct-node-in-.patch
  (bsc#1012628 CVE-2023-53846 bsc#1254983).
- Update
  patches.suse/fbcon-Set-fb_display-i-mode-to-NULL-when-the-mode-is.patch
  (stable-fixes CVE-2025-40323 bsc#1255094).
- Update
  patches.suse/fbdev-Add-bounds-checking-in-bit_putcs-to-fix-vmallo.patch
  (stable-fixes CVE-2025-40304 bsc#1255034).
- Update
  patches.suse/fbdev-bitblit-bound-check-glyph-index-in-bit_putcs.patch
  (stable-fixes CVE-2025-40322 bsc#1255092).
- Update
  patches.suse/firmware-meson_sm-fix-to-avoid-potential-NULL-pointe.patch
  (git-fixes CVE-2023-54304 bsc#1255786).
- Update
  patches.suse/firmware-stratix10-svc-fix-bug-in-saving-controller-.patch
  (git-fixes CVE-2025-68328 bsc#1255489).
- Update
  patches.suse/fs-Protect-reconfiguration-of-sb-read-write-fr.patch
  (bsc#1012628 CVE-2023-54099 bsc#1256197).
- Update
  patches.suse/fs-jfs-prevent-double-free-in-dbUnmount-after-failed-jfs_remount.patch
  (git-fixes CVE-2023-54127 bsc#1256119).
- Update
  patches.suse/fs-ntfs3-Return-error-for-inconsistent-extende.patch
  (bsc#1012628 CVE-2023-54125 bsc#1256117).
- Update
  patches.suse/fs-sysv-Null-check-to-prevent-null-ptr-deref-b.patch
  (bsc#1012628 CVE-2023-54264 bsc#1255872).
- Update
  patches.suse/gpu-host1x-Fix-race-in-syncpt-alloc-free.patch
  (git-fixes CVE-2025-68732 bsc#1255688).
- Update
  patches.suse/gtp-Fix-use-after-free-in-__gtp_encap_destroy.patch
  (bsc#1012628 CVE-2023-54142 bsc#1256095).
- Update
  patches.suse/hfs-validate-record-offset-in-hfsplus_bmap_alloc.patch
  (git-fixes CVE-2025-40349 bsc#1255280).
- Update
  patches.suse/hfsplus-fix-KMSAN-uninit-value-issue-in-__hfsplus_ext_cache_extent.patch
  (git-fixes CVE-2025-40244 bsc#1255033).
- Update
  patches.suse/hfsplus-fix-KMSAN-uninit-value-issue-in-hfsplus_delete_cat.patch
  (git-fixes CVE-2025-40351 bsc#1255281).
- Update
  patches.suse/hwrng-virtio-Fix-race-on-data_avail-and-actual-.patch
  (bsc#1012628 CVE-2023-53998 bsc#1255578).
- Update
  patches.suse/iavf-use-internal-state-to-free-traffic-IRQs.patch
  (bsc#1012628 CVE-2023-53850 bsc#1254677).
- Update
  patches.suse/ice-prevent-NULL-pointer-deref-during-reload.patch
  (bsc#1012628 CVE-2023-54037 bsc#1255557).
- Update
  patches.suse/igb-clean-up-in-all-error-paths-when-enabling-SR-IOV.patch
  (jsc#PED-4866 CVE-2023-54070 bsc#1256364).
- Update
  patches.suse/igc-Fix-Kernel-Panic-during-ndo_tx_timeout-call.patch
  (bsc#1012628 CVE-2023-54166 bsc#1256074).
- Update
  patches.suse/iio-accel-bmc150-Fix-irq-assumption-regression.patch
  (stable-fixes CVE-2025-68330 bsc#1255493).
- Update
  patches.suse/iio-adc-ina2xx-avoid-NULL-pointer-dereference-.patch
  (bsc#1012628 CVE-2023-53834 bsc#1254660).
- Update
  patches.suse/iio-core-Prevent-invalid-memory-access-when-th.patch
  (bsc#1012628 CVE-2023-54027 bsc#1255579).
- Update
  patches.suse/ima-Handle-error-code-returned-by-ima_filter_rule_ma.patch
  (git-fixes CVE-2025-68740 bsc#1255812).
- Update
  patches.suse/ima-don-t-clear-IMA_DIGSIG-flag-when-setting-or-remo.patch
  (stable-fixes CVE-2025-68183 bsc#1255251).
- Update
  patches.suse/io_uring-net-don-t-overflow-multishot-recv.patch
  (bsc#1215211 CVE-2023-54030 bsc#1255691).
- Update
  patches.suse/iomap-Fix-possible-overflow-condition-in-iomap_write_delalloc_scan.patch
  (jsc#PED-5453 CVE-2023-54285 bsc#1255807).
- Update
  patches.suse/iommufd-IOMMUFD_DESTROY-should-not-increase-the.patch
  (bsc#1012628 CVE-2023-53795 bsc#1254737).
- Update
  patches.suse/iommufd-Set-end-correctly-when-doing-batch-carr.patch
  (bsc#1012628 CVE-2023-54060 bsc#1256379).
- Update
  patches.suse/ionic-remove-WARN_ON-to-prevent-panic_on_warn.patch
  (bsc#1012628 CVE-2023-53994 bsc#1255570).
- Update
  patches.suse/ip6_vti-fix-slab-use-after-free-in-decode_sess.patch
  (bsc#1012628 CVE-2023-53821 bsc#1254669).
- Update
  patches.suse/ipmi-ssif-Fix-a-memory-leak-when-scanning-for-an-ada.patch
  (git-fixes CVE-2023-54064 bsc#1256375).
- Update
  patches.suse/irqchip-mchp-eic-Fix-error-code-in-mchp_eic_domain_a.patch
  (git-fixes CVE-2025-68766 bsc#1255932).
- Update
  patches.suse/isdn-mISDN-hfcsusb-fix-memory-leak-in-hfcsusb_probe.patch
  (git-fixes CVE-2025-68734 bsc#1255538).
- Update
  patches.suse/jfs-Verify-inode-mode-when-loading-from-disk.patch
  (git-fixes CVE-2025-40312 bsc#1255046).
- Update
  patches.suse/jfs-fix-uninitialized-waitqueue-in-transaction-manager.patch
  (git-fixes CVE-2025-68168 bsc#1255100).
- Update
  patches.suse/kcm-Fix-error-handling-for-SOCK_DGRAM-in-kcm_sendmsg.patch
  (bsc#1220419 CVE-2023-53825 bsc#1254707).
- Update
  patches.suse/kcm-Fix-memory-leak-in-error-path-of-kcm_sendmsg.patch
  (bsc#1220419 CVE-2023-54112 bsc#1256354).
- Update
  patches.suse/keys-Fix-linking-a-duplicate-key-to-a-keyring-s.patch
  (bsc#1012628 CVE-2023-54170 bsc#1256045).
- Update
  patches.suse/maple_tree-fix-potential-out-of-bounds-access-i.patch
  (bsc#1012628 CVE-2023-54135 bsc#1256107).
- Update
  patches.suse/md-fix-warning-for-holder-mismatch-from-export_rdev.patch
  (git-fixes CVE-2023-53791 bsc#1254742).
- Update
  patches.suse/md-raid5-cache-fix-a-deadlock-in-r5l_exit_log-a705.patch
  (jsc#PED-7542 CVE-2023-53848 bsc#1254753).
- Update
  patches.suse/media-af9005-Fix-null-ptr-deref-in-af9005_i2c_xfer.patch
  (git-fixes CVE-2023-54314 bsc#1255776).
- Update
  patches.suse/media-anysee-fix-null-ptr-deref-in-anysee_master_xfe.patch
  (git-fixes CVE-2023-54093 bsc#1256273).
- Update
  patches.suse/media-dvb-usb-m920x-Fix-a-potential-memory-leak-in-m.patch
  (git-fixes CVE-2023-54266 bsc#1255875).
- Update
  patches.suse/media-dvb-usb-v2-gl861-Fix-null-ptr-deref-in-gl861_i.patch
  (git-fixes CVE-2023-54066 bsc#1256373).
- Update
  patches.suse/media-imon-make-send_packet-more-robust.patch
  (stable-fixes CVE-2025-68194 bsc#1255325).
- Update
  patches.suse/media-mediatek-vcodec-fix-resource-leaks-in-vdec_msg.patch
  (git-fixes CVE-2023-54143 bsc#1256096).
- Update
  patches.suse/media-tuners-qt1010-replace-BUG_ON-with-a-regular-er.patch
  (git-fixes CVE-2023-54282 bsc#1255810).
- Update
  patches.suse/media-v4l2-core-Fix-a-potential-resource-leak-in-v4l.patch
  (git-fixes CVE-2023-54183 bsc#1255990).
- Update
  patches.suse/misc-fastrpc-Fix-dma_buf-object-leak-in-fastrpc_map_.patch
  (git-fixes CVE-2025-68252 bsc#1255197).
- Update
  patches.suse/misc-pci_endpoint_test-Free-IRQs-before-removin.patch
  (bsc#1012628 CVE-2023-54326 bsc#1255758).
- Update
  patches.suse/mm-secretmem-fix-use-after-free-race-in-fault-handle.patch
  (git-fixes CVE-2025-40272 bsc#1254832).
- Update
  patches.suse/mmc-sunplus-fix-return-value-check-of-mmc_add_.patch
  (bsc#1012628 CVE-2023-54204 bsc#1255967).
- Update
  patches.suse/most-usb-Fix-use-after-free-in-hdm_disconnect.patch
  (git-fixes CVE-2025-40223 bsc#1254957).
- Update
  patches.suse/most-usb-fix-double-free-on-late-probe-failure.patch
  (git-fixes CVE-2025-68290 bsc#1255154).
- Update
  patches.suse/most-usb-hdm_probe-Fix-calling-put_device-before-dev.patch
  (git-fixes CVE-2025-68249 bsc#1255233).
- Update
  patches.suse/mt76-mt7615-Fix-memory-leak-in-mt7615_mcu_wtbl_sta_a.patch
  (git-fixes CVE-2025-68765 bsc#1255931).
- Update
  patches.suse/mt76-mt7921-don-t-assume-adequate-headroom-for-SDIO-.patch
  (git-fixes CVE-2023-53785 bsc#1254918).
- Update
  patches.suse/mtd-rawnand-cadence-fix-DMA-device-NULL-pointer-dere.patch
  (git-fixes CVE-2025-68238 bsc#1255202).
- Update
  patches.suse/mtd-rawnand-fsl_upm-Fix-an-off-by-one-test-in-.patch
  (bsc#1012628 CVE-2023-54104 bsc#1256145).
- Update
  patches.suse/mtdchar-fix-integer-overflow-in-read-write-ioctls.patch
  (git-fixes CVE-2025-68237 bsc#1255203).
- Update
  patches.suse/net-core-remove-unnecessary-frame_sz-check-in-.patch
  (bsc#1012628 CVE-2023-54155 bsc#1256083).
- Update
  patches.suse/net-deal-with-integer-overflows-in-kmalloc_reserve.patch
  (bsc#1215146 CVE-2023-42752 CVE-2023-53752 bsc#1254613).
- Update
  patches.suse/net-do-not-allow-gso_size-to-be-set-to-GSO_BY_.patch
  (bsc#1012628 CVE-2023-54051 bsc#1256394).
- Update
  patches.suse/net-dsa-avoid-suspicious-RCU-usage-for-synced-V.patch
  (bsc#1012628 CVE-2023-54149 bsc#1256085).
- Update
  patches.suse/net-dsa-ocelot-call-dsa_tag_8021q_unregister-u.patch
  (bsc#1012628 CVE-2023-53855 bsc#1254688).
- Update
  patches.suse/net-ethernet-mtk_eth_soc-fix-possible-NULL-pointer-d.patch
  (git-fixes CVE-2023-54240 bsc#1255918).
- Update
  patches.suse/net-hns3-fix-deadlock-issue-when-externel_lb-a.patch
  (bsc#1012628 CVE-2023-54000 bsc#1255564).
- Update
  patches.suse/net-ipa-only-reset-hashed-tables-when-supported.patch
  (bsc#1012628 CVE-2023-54225 bsc#1256234).
- Update
  patches.suse/net-ipv4-fix-one-memleak-in-__inet_del_ifa.patch
  (bsc#1220419 CVE-2023-53995 bsc#1255616).
- Update
  patches.suse/net-mlx5-fix-potential-memory-leak-in-mlx5e_in.patch
  (bsc#1012628 CVE-2023-54106 bsc#1256358).
- Update
  patches.suse/net-mlx5e-Move-representor-neigh-cleanup-to-pr.patch
  (bsc#1012628 CVE-2023-54148 bsc#1256084).
- Update
  patches.suse/net-mlx5e-TC-Fix-internal-port-memory-leak.patch
  (bsc#1012628 CVE-2023-53999 bsc#1255621).
- Update
  patches.suse/net-mlx5e-fix-memory-leak-in-mlx5e_ptp_open.patch
  (bsc#1012628 CVE-2023-54169 bsc#1256050).
- Update
  patches.suse/net-mlx5e-xsk-Fix-invalid-buffer-access-for-le.patch
  (bsc#1012628 CVE-2023-54223 bsc#1256233).
- Update
  patches.suse/net-openvswitch-reject-negative-ifindex.patch
  (bsc#1012628 CVE-2023-53843 bsc#1254705).
- Update
  patches.suse/net-prevent-skb-corruption-on-frag-list-segment.patch
  (bsc#1012628 CVE-2023-54094 bsc#1256292).
- Update
  patches.suse/net-read-sk-sk_family-once-in-sk_mc_loop.patch
  (bsc#1220419 CVE-2023-53831 bsc#1254701).
- Update
  patches.suse/net-sched-taprio-Limit-TCA_TAPRIO_ATTR_SCHED_C.patch
  (bsc#1012628 CVE-2023-54251 bsc#1255888).
- Update
  patches.suse/net-smc-use-smc_lgr_list.lock-to-protect-smc_lgr_lis.patch
  (git-fixes CVE-2023-54318 bsc#1255772).
- Update
  patches.suse/net-usb-qmi_wwan-initialize-MAC-header-offset-in-qmi.patch
  (git-fixes CVE-2025-68192 bsc#1255246).
- Update
  patches.suse/netfilter-nf_tables-fix-underflow-in-chain-refe.patch
  (bsc#1012628 CVE-2023-54035 bsc#1255563).
- Update
  patches.suse/netlink-do-not-hard-code-device-address-lenth-i.patch
  (bsc#1012628 CVE-2023-53863 bsc#1254657).
- Update
  patches.suse/nfp-clean-mc-addresses-in-application-firmware-.patch
  (bsc#1012628 CVE-2023-54133 bsc#1256104).
- Update
  patches.suse/nfs4_setup_readdir-insufficient-locking-for-d_parent-d_inode-dereferencing.patch
  (git-fixes CVE-2025-68185 bsc#1255135).
- Update
  patches.suse/nfsd-move-init-of-percpu-reply_cache_stats-coun.patch
  (bsc#1012628 CVE-2023-54276 bsc#1255907).
- Update
  patches.suse/nilfs2-fix-WARNING-in-mark_buffer_dirty-due-to.patch
  (bsc#1012628 CVE-2023-54140 bsc#1256093).
- Update
  patches.suse/nouveau-firmware-Add-missing-kfree-of-nvkm_falcon_fw.patch
  (git-fixes CVE-2025-68235 bsc#1255209).
- Update
  patches.suse/nvme-core-fix-memory-leak-in-dhchap_ctrl_secret.patch
  (bsc#1012628 CVE-2023-53792 bsc#1254743).
- Update
  patches.suse/nvme-core-fix-memory-leak-in-dhchap_secret_stor.patch
  (bsc#1012628 CVE-2023-53852 bsc#1254653).
- Update
  patches.suse/nvme-fc-use-lock-accessing-port_state-and-rport-stat.patch
  (bsc#1245193 bsc#1247500 CVE-2025-40342 bsc#1255274).
- Update
  patches.suse/nvme-multipath-fix-lockdep-WARN-due-to-partition-sca.patch
  (git-fixes bsc#1233640 CVE-2024-53093 CVE-2025-68218
  bsc#1255245).
- Update
  patches.suse/nvmet-fc-avoid-scheduling-association-deletion-twice.patch
  (bsc#1245193 bsc#1247500 CVE-2025-40343 bsc#1255276).
- Update
  patches.suse/of-overlay-Call-of_changeset_init-early.patch
  (git-fixes CVE-2023-53856 bsc#1254661).
- Update
  patches.suse/of-unittest-fix-null-pointer-dereferencing-in-of_uni.patch
  (git-fixes CVE-2023-54178 bsc#1255992).
- Update
  patches.suse/opp-Fix-use-after-free-in-lazy_opp_tables-after.patch
  (bsc#1012628 CVE-2023-54026 bsc#1255549).
- Update
  patches.suse/orangefs-fix-xattr-related-buffer-overflow.patch
  (git-fixes CVE-2025-40306 bsc#1255062).
- Update
  patches.suse/ovl-fix-null-pointer-dereference-in-ovl_get_acl.patch
  (bsc#1012628 CVE-2023-54313 bsc#1255775).
- Update
  patches.suse/pcmcia-rsrc_nonstatic-Fix-memory-leak-in-nonst.patch
  (bsc#1012628 CVE-2023-54115 bsc#1256121).
- Update patches.suse/perf-tool-x86-Fix-perf_env-memory-leak.patch
  (bsc#1012628 CVE-2023-53793 bsc#1254739).
- Update
  patches.suse/phy-tegra-xusb-Clear-the-driver-reference-in-us.patch
  (bsc#1012628 CVE-2023-54083 bsc#1256368).
- Update
  patches.suse/pinctrl-at91-pio4-check-return-value-of-devm_ka.patch
  (bsc#1012628 CVE-2023-54319 bsc#1255760).
- Update
  patches.suse/pinctrl-freescale-Fix-a-memory-out-of-bounds-wh.patch
  (bsc#1012628 CVE-2023-53750 bsc#1254611).
- Update
  patches.suse/pinctrl-s32cc-fix-uninitialized-memory-in-s32_pinctr.patch
  (git-fixes CVE-2025-68222 bsc#1255218).
- Update
  patches.suse/platform-x86-intel-punit_ipc-fix-memory-corruption.patch
  (git-fixes CVE-2025-68303 bsc#1255122).
- Update
  patches.suse/posix-timers-Prevent-RT-livelock-in-itimer_dele.patch
  (bsc#1012628 CVE-2023-53815 bsc#1254715).
- Update patches.suse/powerpc-64s-Fix-VAS-mm-use-after-free.patch
  (bsc#1012628 CVE-2023-54042 bsc#1255702).
- Update
  patches.suse/powerpc-iommu-Fix-notifiers-being-shared-by-PCI-and-.patch
  (bsc#1065729 CVE-2023-54095 bsc#1256271).
- Update
  patches.suse/powerpc-powernv-sriov-perform-null-check-on-iov.patch
  (bsc#1012628 CVE-2023-54315 bsc#1255769).
- Update
  patches.suse/powerpc-pseries-Rework-lppaca_shared_proc-to-avoid-D.patch
  (bsc#1194869 CVE-2023-54267 bsc#1255899).
- Update
  patches.suse/powerpc-pseries-fix-possible-memory-leak-in-ibmebus_.patch
  (bsc#1194869 CVE-2023-54017 bsc#1255605).
- Update patches.suse/pstore-ram-Add-check-for-kstrdup.patch
  (bsc#1012628 CVE-2023-54189 bsc#1255978).
- Update patches.suse/quota-fix-warning-in-dqgrab.patch
  (bsc#1012628 CVE-2023-54177 bsc#1255993).
- Update patches.suse/rcu-dump-vmalloc-memory-info-safely.patch
  (git-fixes CVE-2023-54113 bsc#1256351).
- Update
  patches.suse/rcuscale-Move-rcu_scale_writer-schedule_timeout_unin.patch
  (git-fixes CVE-2023-54246 bsc#1255915).
- Update
  patches.suse/refscale-Fix-uninitalized-use-of-wait_queue_head_t.patch
  (git-fixes CVE-2023-54316 bsc#1255770).
- Update
  patches.suse/regmap-irq-Fix-out-of-bounds-access-when-alloca.patch
  (bsc#1012628 CVE-2023-53768 bsc#1254599).
- Update
  patches.suse/regmap-slimbus-fix-bus_context-pointer-in-regmap-ini.patch
  (git-fixes CVE-2025-40317 bsc#1254796).
- Update
  patches.suse/regulator-core-Protect-regulator_supply_alias_list-w.patch
  (git-fixes CVE-2025-68354 bsc#1255553).
- Update
  patches.suse/regulator-da9063-fix-null-pointer-deref-with-pa.patch
  (bsc#1012628 CVE-2023-53787 bsc#1254750).
- Update patches.suse/rpmsg-glink-Add-check-for-kstrdup.patch
  (git-fixes CVE-2023-54049 bsc#1256396).
- Update
  patches.suse/s390-dcssblk-fix-kernel-crash-with-list_add-corruption.patch
  (git-fixes bsc#1215344 CVE-2023-54117 bsc#1256348).
- Update
  patches.suse/s390-vmem-split-pages-when-debug-pagealloc-is-.patch
  (bsc#1012628 CVE-2023-54278 bsc#1255911).
- Update
  patches.suse/samples-bpf-Fix-buffer-overflow-in-tcp_basertt.patch
  (bsc#1012628 CVE-2023-54312 bsc#1255774).
- Update
  patches.suse/sched-psi-use-kernfs-polling-functions-for-PSI-.patch
  (bsc#1012628 CVE-2023-54019 bsc#1255636).
- Update
  patches.suse/scsi-qedf-Fix-NULL-dereference-in-error-handlin.patch
  (bsc#1012628 CVE-2023-54289 bsc#1255806).
- Update
  patches.suse/scsi-qla2xxx-Array-index-may-go-out-of-bound.patch
  (bsc#1012628 CVE-2023-54179 bsc#1255994).
- Update
  patches.suse/scsi-qla2xxx-Check-valid-rport-returned-by-fc_b.patch
  (bsc#1012628 CVE-2023-54014 bsc#1256300).
- Update
  patches.suse/scsi-target-core-Fix-target_cmd_counter-leak.patch
  (bsc#1214847 CVE-2023-54154 bsc#1256082).
- Update
  patches.suse/serial-8250-Fix-oops-for-port-pm-on-uart_chang.patch
  (bsc#1012628 CVE-2023-54220 bsc#1255949).
- Update patches.suse/serial-sprd-Fix-DMA-buffer-leak-issue.patch
  (git-fixes CVE-2023-54136 bsc#1256099).
- Update
  patches.suse/sfc-fix-crash-when-reading-stats-while-NIC-is-r.patch
  (bsc#1012628 CVE-2023-54156 bsc#1255704).
- Update
  patches.suse/sh-dma-Fix-DMA-channel-offset-calculation.patch
  (bsc#1012628 CVE-2023-54255 bsc#1255884).
- Update patches.suse/smb-client-fix-missed-ses-refcounting.patch
  (bsc#1012628 CVE-2023-54076 bsc#1256335).
- Update
  patches.suse/smb-client-fix-potential-cfid-UAF-in-smb2_query_info_compound.patch
  (bsc#1248886 CVE-2025-40320 bsc#1254793).
- Update patches.suse/soundwire-fix-enumeration-completion.patch
  (bsc#1012628 CVE-2023-54096 bsc#1256178).
- Update patches.suse/spi-tegra210-quad-Fix-timeout-handling.patch
  (bsc#1253155 CVE-2025-68746 bsc#1255722).
- Update
  patches.suse/staging-r8712-Fix-memory-leak-in-_r8712_init_xm.patch
  (bsc#1012628 CVE-2023-54001 bsc#1255628).
- Update
  patches.suse/thermal-of-fix-double-free-on-unregistration.patch
  (bsc#1012628 CVE-2023-53997 bsc#1255632).
- Update
  patches.suse/tpm-tpm_vtpm_proxy-fix-a-race-condition-in-dev-.patch
  (bsc#1012628 CVE-2023-54309 bsc#1255780).
- Update
  patches.suse/tracing-Fix-memory-leak-of-iter-temp-when-readi.patch
  (bsc#1012628 CVE-2023-54171 bsc#1256034).
- Update
  patches.suse/tracing-Fix-warning-in-trace_buffered_event_dis.patch
  (bsc#1012628 CVE-2023-54211 bsc#1255843).
- Update
  patches.suse/tty-serial-samsung_tty-Fix-a-memory-leak-in-s3c.patch
  (bsc#1012628 CVE-2023-53858 bsc#1254704).
- Update
  patches.suse/usb-cdns3-gadget-Use-after-free-during-failed-initia.patch
  (stable-fixes CVE-2025-40314 bsc#1255072).
- Update
  patches.suse/usb-dwc3-Fix-race-condition-between-concurrent-dwc3_.patch
  (git-fixes CVE-2025-68287 bsc#1255152).
- Update
  patches.suse/usb-gadget-f_eem-Fix-memory-leak-in-eem_unwrap.patch
  (git-fixes CVE-2025-68289 bsc#1255155).
- Update
  patches.suse/usb-gadget-f_fs-Fix-epfile-null-pointer-access-after.patch
  (stable-fixes CVE-2025-40315 bsc#1255083).
- Update
  patches.suse/usb-potential-integer-overflow-in-usbg_make_tpg.patch
  (stable-fixes CVE-2025-68750 bsc#1255814).
- Update
  patches.suse/usb-storage-alauda-Fix-uninit-value-in-alauda_.patch
  (bsc#1012628 CVE-2023-53847 bsc#1254698).
- Update
  patches.suse/usb-storage-sddr55-Reject-out-of-bound-new_pba.patch
  (stable-fixes CVE-2025-40345 bsc#1255279).
- Update
  patches.suse/usb-typec-bus-verify-partner-exists-in-typec_altmode.patch
  (git-fixes CVE-2023-54299 bsc#1255789).
- Update
  patches.suse/usb-uas-fix-urb-unmapping-issue-when-the-uas-device-.patch
  (git-fixes CVE-2025-68331 bsc#1255495).
- Update patches.suse/usbnet-Prevents-free-active-kevent.patch
  (git-fixes CVE-2025-68312 bsc#1255171).
- Update
  patches.suse/vdpa-Add-queue-index-attr-to-vdpa_nl_policy-fo.patch
  (bsc#1012628 CVE-2023-54031 bsc#1255583).
- Update patches.suse/vduse-fix-NULL-pointer-dereference.patch
  (bsc#1012628 CVE-2023-54291 bsc#1255798).
- Update
  patches.suse/vfio-type1-fix-cap_migration-information-leak
  (jsc#PED-7779 jsc#PED-7780 CVE-2023-54137 bsc#1256100).
- Update
  patches.suse/virtio-vdpa-Fix-cpumask-memory-leak-in-virtio_.patch
  (bsc#1012628 CVE-2023-54215 bsc#1255957).
- Update
  patches.suse/virtio_pmem-add-the-missing-REQ_OP_WRITE-for-flush-b.patch
  (git-fixes CVE-2023-54089 bsc#1256268).
- Update
  patches.suse/virtio_vdpa-build-affinity-masks-conditionally.patch
  (git-fixes CVE-2023-54008 bsc#1255630).
- Update
  patches.suse/wifi-ath11k-Add-missing-hw_ops-get_ring_selecto.patch
  (bsc#1012628 CVE-2023-54141 bsc#1256094).
- Update patches.suse/wifi-ath11k-fix-peer-HE-MCS-assignment.patch
  (git-fixes CVE-2025-68380 bsc#1255580).
- Update
  patches.suse/wifi-ath11k-fix-registration-of-6Ghz-only-phy-w.patch
  (bsc#1012628 CVE-2023-54229 bsc#1255924).
- Update
  patches.suse/wifi-ath12k-Fix-memory-leak-in-rx_desc-and-tx_desc.patch
  (git-fixes CVE-2023-54016 bsc#1256279).
- Update
  patches.suse/wifi-ath9k-avoid-referencing-uninit-memory-in-a.patch
  (bsc#1012628 CVE-2023-54300 bsc#1255790).
- Update
  patches.suse/wifi-brcmfmac-fix-crash-while-sending-Action-Frames-.patch
  (git-fixes CVE-2025-40321 bsc#1254795).
- Update
  patches.suse/wifi-cfg80211-ocb-don-t-leave-if-not-joined.patch
  (git-fixes CVE-2023-53992 bsc#1256058).
- Update
  patches.suse/wifi-mt76-mt7921-fix-skb-leak-by-txs-missing-i.patch
  (bsc#1012628 CVE-2023-54052 bsc#1256387).
- Update
  patches.suse/wifi-mwifiex-fix-memory-leak-in-mwifiex_histogram_re.patch
  (git-fixes CVE-2023-53808 bsc#1254723).
- Update
  patches.suse/wifi-rsi-Do-not-configure-WoWlan-in-shutdown-ho.patch
  (bsc#1012628 CVE-2023-54025 bsc#1255558).
- Update
  patches.suse/wifi-rtl818x-Fix-potential-memory-leaks-in-rtl8180_i.patch
  (git-fixes CVE-2025-68759 bsc#1255934).
- Update
  patches.suse/wifi-rtl818x-rtl8187-Fix-potential-buffer-underflow-.patch
  (git-fixes CVE-2025-68362 bsc#1255611).
- Update patches.suse/x86-CPU-AMD-Add-RDSEED-fix-for-Zen5.patch
  (git-fixes CVE-2025-68313 bsc#1255415).
- Update
  patches.suse/x86-CPU-AMD-Add-missing-terminator-for-zen5_rdseed_microco.patch
  (git-fixes CVE-2025-68195 bsc#1255259).
- Update
  patches.suse/x86-hyperv-Disable-IBT-when-hypercall-page-lac.patch
  (bsc#1012628 CVE-2023-54172 bsc#1256033).
- Update
  patches.suse/x86-sev-Make-enc_dec_hypercall-accept-a-size-instead-of-npages
  (bsc#1214635 CVE-2023-53996 bsc#1255618).
- Update patches.suse/xen-speed-up-grant-table-reclaim.patch
  (bsc#1012628 CVE-2023-54081 bsc#1256361).
- Update
  patches.suse/xfrm-also-call-xfrm_state_delete_tunnel-at-destroy-time-fo.patch
  (CVE-2025-40215 bsc#1254959 CVE-2025-40256 bsc#1254851).
- commit c2db288</changelog>
  <changelog author="joao.povoas@suse.com" date="1768219201">- Update
  patches.suse/Bluetooth-MGMT-Fix-OOB-access-in-parse_adv_monitor_p.patch
  (git-fixes CVE-2025-40294 bsc#1255181).
- Update
  patches.suse/Bluetooth-MGMT-fix-crash-in-set_mesh_sync-and-set_me.patch
  (git-fixes CVE-2025-40213 bsc#1253674).
- Update
  patches.suse/Bluetooth-btusb-mediatek-Avoid-btusb_mtk_claim_iso_i.patch
  (git-fixes CVE-2025-68298 bsc#1255124).
- Update
  patches.suse/Bluetooth-btusb-mediatek-Fix-kernel-crash-when-relea.patch
  (git-fixes CVE-2025-68306 bsc#1255145).
- Update
  patches.suse/accel-ivpu-Fix-race-condition-when-unbinding-BOs.patch
  (git-fixes CVE-2025-68749 bsc#1255724).
- Update
  patches.suse/drm-amd-display-increase-max-link-count-and-fix-link.patch
  (stable-fixes CVE-2025-40354 bsc#1255316).
- Update
  patches.suse/drm-amdgpu-atom-Check-kcalloc-for-WS-buffer-in-amdgp.patch
  (stable-fixes CVE-2025-68190 bsc#1255131).
- Update
  patches.suse/drm-amdgpu-fix-gpu-page-fault-after-hibernation-on-P.patch
  (stable-fixes CVE-2025-68230 bsc#1255134).
- Update
  patches.suse/drm-amdgpu-fix-nullptr-err-of-vm_handle_moved.patch
  (stable-fixes CVE-2025-40339 bsc#1255428).
- Update patches.suse/drm-amdgpu-remove-two-invalid-BUG_ON-s.patch
  (stable-fixes CVE-2025-68201 bsc#1255136).
- Update
  patches.suse/drm-amdkfd-Fix-mmap-write-lock-not-release.patch
  (bsc#1243112 CVE-2025-40332 bsc#1255116).
- Update
  patches.suse/drm-mediatek-Disable-AFBC-support-on-Mediatek-DRM-dr.patch
  (git-fixes CVE-2025-68184 bsc#1255220).
- Update
  patches.suse/drm-panthor-Fix-UAF-on-kernel-BO-VA-nodes.patch
  (git-fixes CVE-2025-68747 bsc#1255723).
- Update
  patches.suse/drm-panthor-Fix-kernel-panic-on-partial-unmap-of-a-G.patch
  (git-fixes CVE-2025-40225 bsc#1254827).
- Update
  patches.suse/drm-panthor-Flush-shmem-writes-before-mapping-buffer.patch
  (git-fixes CVE-2025-40276 bsc#1254824).
- Update
  patches.suse/drm-radeon-Do-not-kfree-devres-managed-rdev.patch
  (git-fixes CVE-2025-68170 bsc#1255256).
- Update patches.suse/drm-radeon-Remove-calls-to-drm_put_dev.patch
  (git-fixes CVE-2025-68181 bsc#1255247).
- Update
  patches.suse/drm-radeon-delete-radeon_fence_process-in-is_signale.patch
  (stable-fixes CVE-2025-68223 bsc#1255357).
- Update
  patches.suse/drm-sysfb-Do-not-dereference-NULL-pointer-in-plane-r.patch
  (git-fixes CVE-2025-40360 bsc#1255095).
- Update
  patches.suse/drm-xe-Fix-oops-in-xe_gem_fault-when-running-core_ho.patch
  (stable-fixes CVE-2025-40340 bsc#1254996).
- Update
  patches.suse/drm-xe-guc-Synchronize-Dead-CT-worker-with-unbind.patch
  (git-fixes CVE-2025-68207 bsc#1255234).
- Update
  patches.suse/media-videobuf2-forbid-remove_bufs-when-legacy-filei.patch
  (git-fixes CVE-2025-40302 bsc#1255196).
- Update
  patches.suse/perf-x86-intel-Fix-KASAN-global-out-of-bounds-warning.patch
  (git-fixes CVE-2025-40359 bsc#1255087).
- Update
  patches.suse/x86-CPU-AMD-Add-missing-terminator-for-zen5_rdseed_m.patch
  (git-fixes CVE-2025-68195 bsc#1255259).
- commit 946dbf2</changelog>
  <changelog author="msuchanek@suse.de" date="1768219202">- powerpc/eeh: fix recursive pci_lock_rescan_remove locking in
  EEH event handling (bsc#1253262 ltc#216029).
- commit daa4104</changelog>
  <changelog author="mhocko@suse.com" date="1768219203">- supported.conf: mark ksmbd unsupported
  Based on discussion with Enzo Matsumiya it has tuned out that ksmbd
  module is unsupported but the supported.conf entry is incorrect. Fix
  that.
- commit c800e3f</changelog>
  <changelog author="tiwai@suse.de" date="1768219204">- usb: ohci-nxp: fix device leak on probe failure (git-fixes).
- usb: usb-storage: Maintain minimal modifications to the
  bcdDevice range (git-fixes).
- Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042
  quirk table (stable-fixes).
- drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state()
  (stable-fixes).
- ASoC: bcm: bcm63xx-pcm-whistler: Check return value of
  of_dma_configure() (git-fixes).
- i2c: designware: Disable SMBus interrupts to prevent storms
  from mis-configured firmware (stable-fixes).
- platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to
  VGBS DMI quirks (stable-fixes).
- pinctrl: single: Fix incorrect type for error return variable
  (git-fixes).
- i3c: fix refcount inconsistency in i3c_master_register
  (git-fixes).
- staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE
  parsing (stable-fixes).
- staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie()
  parser (stable-fixes).
- USB: serial: option: move Telit 0x10c7 composition in the
  right place (stable-fixes).
- USB: serial: option: add Telit Cinterion FE910C04 new
  compositions (stable-fixes).
- USB: serial: option: add Foxconn T99W760 (stable-fixes).
- USB: serial: ftdi_sio: match on interface number for jtag
  (stable-fixes).
- usb: usb-storage: No additional quirks need to be added to
  the EL-R12 optical drive (stable-fixes).
- usb: dwc2: fix hang during shutdown if set as peripheral
  (git-fixes).
- usb: xhci: limit run_graceperiod for only usb 3.0 devices
  (stable-fixes).
- usb: typec: ucsi: Handle incorrect num_connectors capability
  (stable-fixes).
- usbip: Fix locking bug in RT-enabled kernels (stable-fixes).
- serial: sprd: Return -EPROBE_DEFER when uart clock is not ready
  (stable-fixes).
- serial: add support of CPCI cards (stable-fixes).
- char: applicom: fix NULL pointer dereference in ac_ioctl
  (stable-fixes).
- iio: adc: ti_am335x_adc: Limit step_avg to valid range for
  gcc complains (stable-fixes).
- fbdev: gbefb: fix to use physical address instead of dma address
  (stable-fixes).
- via_wdt: fix critical boot hang due to unnamed resource
  allocation (stable-fixes).
- ipmi: Fix __scan_channels() failing to rescan channels
  (stable-fixes).
- ipmi: Fix the race between __scan_channels() and
  deliver_response() (stable-fixes).
- reset: fix BIT macro reference (stable-fixes).
- firmware: imx: scu-irq: Init workqueue before request mbox
  channel (stable-fixes).
- HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen
  (stable-fixes).
- mmc: sdhci-msm: Avoid early clock doubling during HS400
  transition (stable-fixes).
- ASoC: qcom: q6apm-dai: set flags to reflect correct operation
  of appl_ptr (git-fixes).
- media: amphion: Remove vpu_vb_is_codecconfig (git-fixes).
- media: verisilicon: Fix CPU stalls on G2 bus error (git-fixes).
- Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE
  (stable-fixes).
- Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV
  (stable-fixes).
- wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840
  tablet (stable-fixes).
- wifi: rtw88: Add USB ID 2001:3329 for D-Link AC13U rev. A1
  (stable-fixes).
- ACPI: property: Use ACPI functions in
  acpi_graph_get_next_endpoint() only (stable-fixes).
- ACPICA: Avoid walking the Namespace if start_node is NULL
  (stable-fixes).
- pinctrl: qcom: msm: Fix deadlock in pinmux configuration
  (stable-fixes).
- platform/x86: acer-wmi: Ignore backlight event (stable-fixes).
- platform/x86/amd: pmc: Add Lenovo Legion Go 2 to pmc quirk list
  (stable-fixes).
- platform/x86/amd/pmc: Add spurious_8042 to Xbox Ally
  (stable-fixes).
- platform/x86: huawei-wmi: add keys for HONOR models
  (stable-fixes).
- HID: elecom: Add support for ELECOM M-XT3URBK (018F)
  (stable-fixes).
- HID: hid-input: Extend Elan ignore battery quirk to USB
  (stable-fixes).
- HID: apple: Add SONiX AK870 PRO to non_apple_keyboards quirk
  list (stable-fixes).
- drm/vmwgfx: Use kref in vmw_bo_dirty (stable-fixes).
- spi: xilinx: increase number of retries before declaring stall
  (stable-fixes).
- spi: imx: keep dma request disabled before dma transfer setup
  (stable-fixes).
- ALSA: usb-audio: Add native DSD quirks for PureAudio DAC series
  (stable-fixes).
- Bluetooth: btrtl: Avoid loading the config file on security
  chips (stable-fixes).
- media: amphion: Make some vpu_v4l2 functions static
  (stable-fixes).
- usb: dwc2: disable platform lowlevel hw resources during
  shutdown (stable-fixes).
- media: amphion: Add a frame flush mode for decoder
  (stable-fixes).
- usb: ohci-nxp: Use helper function devm_clk_get_enabled()
  (stable-fixes).
- drm/tilcdc: request and mapp iomem with devres (stable-fixes).
- media: verisilicon: g2: Use common helpers to compute chroma
  and mv offsets (stable-fixes).
- media: verisilicon: Store chroma and motion vectors offset
  (stable-fixes).
- i3c: master: Inherit DMA masks and parameters from parent device
  (stable-fixes).
- commit bc3be49</changelog>
  <changelog author="tiwai@suse.de" date="1768219205">- pinctrl: single: Fix PIN_CONFIG_BIAS_DISABLE handling
  (stable-fixes).
- Refresh
  patches.suse/pinctrl-single-fix-bias-pull-up-down-handling-in-pin.patch.
- commit bc41b99</changelog>
  <changelog author="tiwai@suse.de" date="1768219206">- drm/amdgpu: Forward VMID reservation errors (git-fixes).
- commit a7344a2</changelog>
  <changelog author="tiwai@suse.de" date="1768219207">- virtio_console: fix order of fields cols and rows
  (stable-fixes).
- commit 0d412d7</changelog>
  <changelog author="tiwai@suse.de" date="1768219208">- drm/sched: Fix race in drm_sched_entity_select_rq() (git-fixes).
- commit d597802</changelog>
  <changelog author="tiwai@suse.de" date="1768219209">- Move out-of-tree patches into the right section
- commit 314797b</changelog>
  <changelog author="petr.pavlu@suse.com" date="1768219210">- tracing: Fix access to trace_event_file (bsc#1254373).
- commit 768b257</changelog>
  <changelog author="dsterba@suse.com" date="1768219211">- bnxt_en: Fix null pointer dereference in bnxt_bs_trace_check_wrap() (CVE-2025-68197 bsc#1255242)
- commit 85b99e2</changelog>
  <changelog author="rgoldwyn@suse.com" date="1768219212">- fuse: fix livelock in synchronous file put from fuseblk workers (CVE-2025-40220 bsc#1254520).
- commit 46a797f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1768219213">- mlx5: Fix default values in create CQ (CVE-2025-68209
  bsc#1255230).
- commit dce9b13</changelog>
  <changelog author="hoyeon.lee@suse.com" date="1768305600">- bpf: Improve program stats run-time calculation (CVE-2025-68742
  bsc#1255707).
- commit 4ed738f</changelog>
  <changelog author="hoyeon.lee@suse.com" date="1768305601">- bpf: Fix invalid prog-&gt;stats access when update_effective_progs
  fails (CVE-2025-68742 bsc#1255707).
- commit 53d4b3c</changelog>
  <changelog author="tiwai@suse.de" date="1768305602">- x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix
  Halo (bsc#1256528).
- x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev
  (bsc#1256528).
- x86/microcode/AMD: Add more known models to entry sign checking
  (bsc#1256528).
- x86/microcode/AMD: Limit Entrysign signature checking to known
  generations (bsc#1256528).
- x86/microcode: Fix Entrysign revision check for Zen1/Naples
  (bsc#1256528).
- x86/microcode/AMD: Add TSA microcode SHAs (bsc#1256528).
- x86/microcode/AMD: Use sha256() instead of init/update/final
  (bsc#1256528).
- x86/microcode/AMD: Clean the cache if update did not load
  microcode (bsc#1256528).
- x86/microcode/AMD: Extend the SHA check to Zen5, block
  loading of any unreleased standalone Zen5 microcode patches
  (bsc#1256528).
- x86/microcode/AMD: Fix __apply_microcode_amd()'s return value
  (bsc#1256528).
- x86/microcode/AMD: Add some forgotten models to the SHA check
  (bsc#1256528).
- x86/microcode/AMD: Load only SHA256-checksummed patches
  (bsc#1256528).
- commit ed14359</changelog>
  <changelog author="tiwai@suse.de" date="1768305603">- x86/microcode/AMD: Select which microcode patch to load
  (bsc#1256528).
- Refresh
  patches.suse/x86-microcode-AMD-Handle-the-case-of-no-BIOS-microcode.patch.
- commit 3b809fe</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1768305604">- mlx5: Fix default values in create CQ (CVE-2025-68209
  bsc#1255230).
- commit e7dee05</changelog>
  <changelog author="jack@suse.cz" date="1768305605">- ext4: use optimized mballoc scanning regardless of inode format
  (bsc#1254378).
- commit aa95fec</changelog>
</package>
<package pkgid="895b2eb9a14395710ef00fd029d06f3be479c22f21d5c53b39236da4d0f0bc75" name="kernel-source" arch="src">
  <version epoch="0" ver="6.4.0" rel="150700.53.3.1"/>
  <changelog author="nmorey@suse.com" date="1748865600">- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (git-fixes)
- commit 0defb73</changelog>
  <changelog author="nmorey@suse.com" date="1748865601">- RDMA/cma: Fix hang when cma_netevent_callback fails to queue_work (git-fixes)
- commit 5748d8f</changelog>
  <changelog author="nmorey@suse.com" date="1748865602">- RDMA/rxe: Fix "trying to register non-static key in rxe_qp_do_cleanup" bug (git-fixes)
- commit 40421b4</changelog>
  <changelog author="msuchanek@suse.de" date="1748865603">- powerpc/pseries/iommu: Fix kmemleak in TCE table userspace view
  (jsc#PED-10539 git-fixes).
- commit 66792c6</changelog>
  <changelog author="jgross@suse.com" date="1748865604">- 9p/net: fix improper handling of bogus negative read/write
  replies (bsc#1243077 CVE-2025-37879).
- commit ac0ef56</changelog>
  <changelog author="jgross@suse.com" date="1748865605">- xenbus: Use kref to track req lifetime (bsc#1243541
  CVE-2025-37949).
- commit 0928f39</changelog>
  <changelog author="ailiop@suse.com" date="1748865606">- Squashfs: check return result of sb_min_blocksize (git-fixes).
- commit 6d6e8d7</changelog>
  <changelog author="ailiop@suse.com" date="1748865607">- afs: Make it possible to find the volumes that are using a
  server (git-fixes).
- commit 7d8a054</changelog>
  <changelog author="ailiop@suse.com" date="1748865608">- afs: Fix the server_list to unuse a displaced server rather
  than putting it (git-fixes).
- commit d3c390a</changelog>
  <changelog author="ailiop@suse.com" date="1748865609">- nilfs2: add pointer check for nilfs_direct_propagate()
  (git-fixes).
- commit eac8f96</changelog>
  <changelog author="ailiop@suse.com" date="1748865610">- nilfs2: do not propagate ENOENT error from
  nilfs_btree_propagate() (git-fixes).
- commit 5591e0d</changelog>
  <changelog author="msuchanek@suse.de" date="1748865611">- Remove debug flavor (bsc#1243919).
  This is only released in Leap, and we don't have Leap 15.7
- commit 4ff5661</changelog>
  <changelog author="dwagner@suse.de" date="1748865612">- nvme-pci: acquire cq_poll_lock in nvme_poll_irqdisable
  (git-fixes bsc#1223096).
- nvme-pci: make nvme_pci_npages_prp() __always_inline
  (git-fixes).
- commit 71f2996</changelog>
  <changelog author="pfalcato@suse.de" date="1748865613">- Refresh
  patches.kabi/icmp-prevent-possible-NULL-dereferences-from-icmp_bu.patch.
- commit d0519a5</changelog>
  <changelog author="pfalcato@suse.de" date="1748865614">- Delete
  patches.kabi/ipv4-icmp-Unmask-upper-DSCP-bits-in-icmp_route_looku.patch.
  It turns out
  patches.suse/ipv4-icmp-Unmask-upper-DSCP-bits-in-icmp_route_looku.patch
  does not need the kABI workaround after all, so removing this patch is
  safe.
- commit 983a766</changelog>
  <changelog author="pmladek@suse.com" date="1748865615">- objtool, panic: Disable SMAP in __stack_chk_fail()
  (bsc#1243963).
- commit 3d95273</changelog>
  <changelog author="pfalcato@suse.de" date="1748865616">- mm/huge_memory: fix dereferencing invalid pmd migration entry
  (CVE-2025-37958 bsc#1243539).
- commit bbe0b9a</changelog>
  <changelog author="pfalcato@suse.de" date="1748865617">- memblock: Accept allocated memory before use in
  memblock_double_array() (CVE-2025-37960 bsc#1243519).
- commit a66a796</changelog>
  <changelog author="msuchanek@suse.de" date="1748865618">- KVM: PPC: Book3S HV: Fix IRQ map warnings with XICS on pSeries
  KVM Guest (bsc#1242205 ltc#212592).
- commit e5a2e22</changelog>
  <changelog author="jgross@suse.com" date="1748952000">- blacklist.conf: add 75ad02318af2 ("Xen/swiotlb: mark xen_swiotlb_fixup() __init")
- Delete patches.suse/Xen-swiotlb-mark-xen_swiotlb_fixup-__init.patch.
- commit c256f05</changelog>
</package>
<package pkgid="1fbe4ccf8c392bbb4f108b64d2bdc12aef1b10efe6a3cdeb21cf000baf26d380" name="kernel-source" arch="src">
  <version epoch="0" ver="6.4.0" rel="150700.53.31.1"/>
  <changelog author="joao.povoas@suse.com" date="1770033600">- Update
  patches.suse/ALSA-hda-Fix-missing-pointer-check-in-hda_component_.patch
  (git-fixes CVE-2025-40097 bsc#1252900).
- Update
  patches.suse/ASoC-stm32-sai-fix-OF-node-leak-on-probe.patch
  (git-fixes CVE-2025-71081 bsc#1256609).
- Update
  patches.suse/KEYS-trusted-Fix-a-memory-leak-in-tpm2_load_cmd.patch
  (git-fixes CVE-2025-71147 bsc#1257158).
- Update
  patches.suse/btrfs-fix-adding-block-group-to-a-reclaim-list-and-t.patch
  (git-fixes CVE-2024-42103 bsc#1228490).
- Update
  patches.suse/btrfs-fix-invalid-inode-pointer-dereferences-during-.patch
  (git-fixes CVE-2025-38243 bsc#1246184).
- Update
  patches.suse/drm-stm-ltdc-fix-late-dereference-check.patch
  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-53714
  bsc#1254465).
- Update
  patches.suse/drm-ttm-Avoid-NULL-pointer-deref-for-evicted-BOs.patch
  (git-fixes CVE-2025-71083 bsc#1256610).
- Update
  patches.suse/ftrace-Also-allocate-and-copy-hash-for-reading-of-filter-f.patch
  (bsc#1250032 CVE-2025-39813 CVE-2025-39689 bsc#1249307).
- Update
  patches.suse/hwmon-w83791d-Convert-macros-to-functions-to-avoid-T.patch
  (git-fixes CVE-2025-71111 bsc#1256728).
- Update
  patches.suse/ipmi-Rework-user-message-limit-handling.patch
  (git-fixes CVE-2025-40202 bsc#1253451).
- Update
  patches.suse/media-adv7842-Avoid-possible-out-of-bounds-array-acc.patch
  (git-fixes CVE-2025-71136 bsc#1256759).
- Update
  patches.suse/media-dvb-usb-dtv5100-fix-out-of-bounds-in-dtv5100_i.patch
  (git-fixes CVE-2025-68819 bsc#1256664).
- Update
  patches.suse/media-vidtv-initialize-local-pointers-upon-transfer-.patch
  (git-fixes CVE-2025-68808 bsc#1256682).
- Update
  patches.suse/perf-x86-intel-Fix-crash-in-icl_update_topdown_event.patch
  (git-fixes CVE-2025-38322 bsc#1246447).
- Update
  patches.suse/platform-chrome-cros_ec_ishtp-Fix-UAF-after-unbindin.patch
  (git-fixes CVE-2025-68804 bsc#1256617).
- Update
  patches.suse/powerpc-64s-slb-Fix-SLB-multihit-issue-during-SLB-preload.patch
  (bac#1236022 ltc#211187 CVE-2025-71078 bsc#1256616).
- Update
  patches.suse/smb-client-fix-warning-when-reconnecting-channel.patch
  (git-fixes CVE-2025-38379 bsc#1247030).
- Update
  patches.suse/tcp_bpf-Call-sk_msg_free-when-tcp_bpf_send_verdict-f.patch
  (bsc#1250705 CVE-2025-39913).
- Update
  patches.suse/trace-fgraph-Fix-the-warning-caused-by-missing-unregister-.patch
  (bsc#1248211 CVE-2025-38539 CVE-2025-39829 bsc#1250082).
- Update
  patches.suse/usb-dwc3-fix-fault-at-system-suspend-if-device-was-a.patch
  (git-fixes CVE-2024-53070 bsc#1233563).
- Update
  patches.suse/usb-typec-ucsi-glink-fix-off-by-one-in-connector_sta.patch
  (git-fixes CVE-2024-53149 bsc#1234842).
- Update
  patches.suse/usb-xhci-Fix-invalid-pointer-dereference-in-Etron-wo.patch
  (git-fixes CVE-2025-37813 bsc#1242909).
- Update
  patches.suse/x86-microcode-AMD-Fix-__apply_microcode_amd-s-return.patch
  (bsc#1256528 CVE-2025-22047 bsc#1241437).
- commit fbc3d71</changelog>
  <changelog author="jslaby@suse.cz" date="1770033601">- x86/fpu: Clear XSTATE_BV in guest XSAVE state whenever XFD[i]=1
  (CVE-2026-23005 bsc#1257245).
- commit 4fcc2d5</changelog>
  <changelog author="tiwai@suse.de" date="1770033602">- Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
- commit b3a8e60</changelog>
  <changelog author="rgoldwyn@suse.com" date="1770033603">- libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (CVE-2025-68284 bsc#1255377).
- commit 16880ae</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033604">- smb: change return type of cached_dir_lease_break() to bool
  (git-fixes).
- commit da8604d</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033605">- cifs: add new field to track the last access time of cfid
  (git-fixes).
- commit 7328aa8</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033606">- smb: client: update cfid-&gt;last_access_time in
  open_cached_dir_by_dentry() (git-fixes).
- commit 1962196</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033607">- smb: client: remove unused fid_lock (git-fixes).
- commit ed3cf07</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033608">- smb: improve directory cache reuse for readdir operations
  (bsc#1252712).
- commit 20c0243</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033609">- scripts/python/git_sort/git_sort.yaml: add cifs for-next repository
- commit 0d24c51</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033610">- smb: client: split cached_fid bitfields to avoid shared-byte
  RMW races (bsc#1250748,bsc#1257154).
- commit e7ce4ba</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033611">- smb: client: ensure open_cached_dir_by_dentry() only returns
  valid cfid (git-fixes).
- commit d1feafe</changelog>
  <changelog author="henrique.carvalho@suse.com" date="1770033612">- smb: client: short-circuit in open_cached_dir_by_dentry()
  if !dentry (git-fixes).
- commit 82d6911</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1770120000">- bpf/selftests: test_select_reuseport_kern: Remove unused header
  (bsc#1257603).
- commit 3124f7b</changelog>
  <changelog author="vbabka@suse.cz" date="1770120001">- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP
  allocations (bsc#1254447 bsc#1253087).
- commit e90ec28</changelog>
  <changelog author="rgoldwyn@suse.com" date="1770120002">- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CVE-2026-22984 bsc#1257217).
- commit 7474e34</changelog>
  <changelog author="rgoldwyn@suse.com" date="1770120003">- libceph: return the handler error from mon_handle_auth_done() (CVE-2026-22992 bsc#1257218).
- commit 518f909</changelog>
  <changelog author="rgoldwyn@suse.com" date="1770120004">- libceph: make free_choose_arg_map() resilient to partial allocation (CVE-2026-22991 bsc#1257220).
- commit 2e431bc</changelog>
  <changelog author="rgoldwyn@suse.com" date="1770120005">- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CVE-2026-22990 bsc#1257221).
- commit 0a3e886</changelog>
  <changelog author="tiwai@suse.de" date="1770120006">- Move out-of-tree rt patch into the right section
- commit 125c148</changelog>
</package>
<package pkgid="3cc7d759f43c722975ff8c3b6cfb666d3dee53ee119b3461dda15c7bcd81b05a" name="kernel-source" arch="src">
  <version epoch="0" ver="6.4.0" rel="150700.53.34.1"/>
  <changelog author="mwilck@suse.com" date="1773057600">- dm: clear cloned request bio pointer when last clone bio
  completes (git-fixes).
- commit f2572c8</changelog>
  <changelog author="mwilck@suse.com" date="1773057601">- dm mpath: make pg_init_delay_msecs settable (git-fixes).
- commit b5dcc03</changelog>
  <changelog author="ohering@suse.de" date="1773057602">- Add bugnumber to existing mana changes (bsc#1245728 bsc#1251971 bsc#1252266 bsc#1257466)
- net: mana: Ring doorbell at 4 CQ wraparounds (git-fixes).
- PCI: hv: remove unnecessary module_init/exit functions (git-fixes).
- PCI: hv: Remove unused field pci_bus in struct hv_pcibus_device (git-fixes).
- RDMA/mana_ib: Add device-memory support (git-fixes).
- RDMA/mana_ib: Take CQ type from the device type (git-fixes).
- net: mana: Implement ndo_tx_timeout and serialize queue resets per port (bsc#1257472).
- Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump() (git-fixes).
- Drivers: hv: use kmalloc_array() instead of kmalloc() (git-fixes).
- Drivers: hv: Use kmalloc_array() instead of kmalloc() (git-fixes).
- Drivers: hv: Resolve ambiguity in hypervisor version log (git-fixes).
- Drivers: hv: fix missing kernel-doc description for 'size' in request_arr_init() (git-fixes).
- Drivers: hv: remove stale comment (git-fixes).
- net: mana: Support HW link state events (bsc#1253049).
- Drivers: hv: vmbus: Fix typos in vmbus_drv.c (git-fixes).
- Drivers: hv: vmbus: Fix sysfs output format for ring buffer index (git-fixes).
- Drivers: hv: vmbus: Clean up sscanf format specifier in target_cpu_store() (git-fixes).
- Drivers: hv: util: Cosmetic changes for hv_utils_transport.c (git-fixes).
- scsi: storvsc: Remove redundant ternary operators (git-fixes).
- tools/hv: fcopy: Fix irregularities with size of ring buffer (git-fixes).
- x86/hyperv: Fix usage of cpu_online_mask to get valid cpu (git-fixes).
- PCI: hv: Fix warnings for missing export.h header inclusion (git-fixes).
- clocksource: hyper-v: Fix warnings for missing export.h header inclusion (git-fixes).
- x86/hyperv: Fix warnings for missing export.h header inclusion (git-fixes).
- Drivers: hv: Fix the check for HYPERVISOR_CALLBACK_VECTOR (git-fixes).
- Drivers: hv: vmbus: Add comments about races with "channels" sysfs dir (git-fixes).
- PCI: hv: Remove unnecessary flex array in struct pci_packet (git-fixes).
- Drivers: hv: Use kzalloc for panic page allocation (git-fixes).
- uio_hv_generic: Align ring size to system page (git-fixes).
- uio_hv_generic: Use correct size for interrupt and monitor pages (git-fixes).
- Drivers: hv: vmbus: Introduce hv_get_vmbus_root_device() (git-fixes).
- Drivers: hv: vmbus: Get the IRQ number from DeviceTree (git-fixes).
- tools: hv: Enable debug logs for hv_kvp_daemon (git-fixes).
- PCI: hv: Correct a comment (git-fixes).
- x86/hyperv: fix an indentation issue in mshyperv.h (git-fixes).
- x86/hyperv: Use named operands in inline asm (git-fixes).
- commit fbd3c33</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1773144000">- selftests/bpf: add verifier sign extension bound computation
  tests (git-fixes).
- bpf: verifier improvement in 32bit shift sign extension pattern
  (git-fixes).
- commit cbb7102</changelog>
  <changelog author="mkoutny@suse.com" date="1773144001">- cgroup: Show # of subsystem CSSes in cgroup.stat (bsc#1256564
  bsc#1259130).
- commit e9ca9e6</changelog>
  <changelog author="mkoutny@suse.com" date="1773144002">- kabi: cgroup.stat fixup (bsc#1256564 bsc#1259130).
- commit 6ccb250</changelog>
  <changelog author="hare@suse.de" date="1773144003">- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (bsc#1254306).
- commit 165c4b3</changelog>
  <changelog author="hare@suse.de" date="1773144004">- Update config files (bsc#1254306).
- commit 3c7bab7</changelog>
  <changelog author="hare@suse.de" date="1773230400">- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (bsc#1254306).
- commit 43c578c</changelog>
  <changelog author="hare@suse.de" date="1773230401">- Update config files (bsc#1254306).
- commit 6305722</changelog>
  <changelog author="hare@suse.de" date="1773230402">- s390/ipl: Clear SBP flag when bootprog is set (bsc#1258176).
- commit bad7291</changelog>
  <changelog author="mkoutny@suse.com" date="1773230403">- cgroup: Fix incorrect WARN_ON_ONCE() in css_release_work_fn()
  (bsc#1256564 bsc#1259130).
- commit af50ef7</changelog>
  <changelog author="hare@suse.de" date="1773230404">- s390/ctcm: Fix double-kfree (CVE-2025-40253 bsc#1255084).
- commit c330474</changelog>
  <changelog author="hare@suse.de" date="1773230405">- s390/ctcm: Fix double-kfree (CVE-2025-40253 bsc#1255084).
- commit a33e581</changelog>
  <changelog author="nmorey@suse.com" date="1773316800">- RDMA/rtrs-clt: For conn rejection use actual err number (git-fixes)
- commit c91403f</changelog>
  <changelog author="tabraham@suse.com" date="1773316801">- scsi: mpi3mr: Event processing debug improvement (bsc#1251186,
  bsc#1258832).
- commit 4fde182</changelog>
  <changelog author="ddiss@suse.de" date="1773403200">- apparmor: fix race between freeing data and fs accessing it
  (bsc#1258849).
- apparmor: fix race on rawdata dereference (bsc#1258849).
- apparmor: fix differential encoding verification (bsc#1258849).
- apparmor: fix unprivileged local user can do privileged policy
  management (bsc#1258849).
- apparmor: Fix double free of ns_name in aa_replace_profiles()
  (bsc#1258849).
- apparmor: fix missing bounds check on DEFAULT table in
  verify_dfa() (bsc#1258849).
- apparmor: fix side-effect bug in match_char() macro usage
  (bsc#1258849).
- apparmor: fix: limit the number of levels of policy namespaces
  (bsc#1258849).
- apparmor: replace recursive profile removal with iterative
  approach (bsc#1258849).
- apparmor: fix memory leak in verify_header (bsc#1258849).
- apparmor: validate DFA start states are in bounds in unpack_pdb
  (bsc#1258849).
- commit 9f31a2e</changelog>
  <changelog author="tiwai@suse.de" date="1773403201">- ACPI: OSL: fix __iomem type on return from
  acpi_os_map_generic_address() (git-fixes).
- can: hi311x: hi3110_open(): add check for hi3110_power_enable()
  return value (git-fixes).
- net: usb: lan78xx: fix TX byte statistics for small packets
  (git-fixes).
- net: usb: lan78xx: fix silent drop of packets with checksum
  errors (git-fixes).
- qmi_wwan: allow max_mtu above hard_mtu to control rx_urb_size
  (git-fixes).
- remoteproc: sysmon: Correct subsys_name_len type in QMI request
  (git-fixes).
- commit 5d32ac9</changelog>
  <changelog author="ohering@suse.de" date="1773403202">- Add bugnumber to existing mana changes (bsc#1259558 bsc#1259580).
- Drivers: hv: Fix warnings for missing export.h header inclusion (git-fixes).
- Drivers: hv: Allocate interrupt and monitor pages aligned to system page boundary (git-fixes).
- Drivers: hv: Fix bad pointer dereference in hv_get_partition_id (git-fixes).
- hyperv: Convert hypercall statuses to linux error codes (git-fixes).
- drivers/hv: add CPU offlining support (git-fixes).
- drivers/hv: introduce vmbus_channel_set_cpu() (git-fixes).
- cpu: export lockdep_assert_cpus_held() (git-fixes).
- hyperv: Move arch/x86/hyperv/hv_proc.c to drivers/hv (git-fixes).
- hyperv: Move hv_current_partition_id to arch-generic code (git-fixes).
- commit 7492ec1</changelog>
  <changelog author="pfalcato@suse.de" date="1773403203">- sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT
  (CVE-2026-23125 bsc#1258293).
- commit 6e65546</changelog>
</package>
<package pkgid="139c65d24c05ac00f43101925ad698e610f9a1c94216fb454d28932dbd932339" name="kernel-source" arch="src">
  <version epoch="0" ver="6.4.0" rel="150700.53.37.1"/>
  <changelog author="henrique.carvalho@suse.com" date="1775131200">- smb: client: fix krb5 mount with username option (git-fixes).
- commit 0e79d63</changelog>
  <changelog author="tiwai@suse.de" date="1775217600">- net/x25: Fix overflow when accumulating packets (git-fixes).
- net/x25: Fix potential double free of skb (git-fixes).
- Bluetooth: SMP: derive legacy responder STK authentication
  from MITM state (git-fixes).
- Bluetooth: SMP: force responder MITM requirements before
  building the pairing response (git-fixes).
- Bluetooth: MGMT: validate mesh send advertising payload length
  (git-fixes).
- Bluetooth: hci_event: fix potential UAF in
  hci_le_remote_conn_param_req_evt (git-fixes).
- Bluetooth: MGMT: validate LTK enc_size on load (git-fixes).
- Bluetooth: SCO: fix race conditions in sco_sock_connect()
  (git-fixes).
- Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if
  immediate (git-fixes).
- NFC: pn533: bound the UART receive buffer (git-fixes).
- wifi: iwlwifi: mvm: fix potential out-of-bounds read in
  iwl_mvm_nd_match_info_handler() (git-fixes).
- wifi: wilc1000: fix u8 overflow in SSID scan buffer size
  calculation (git-fixes).
- ASoC: ep93xx: Fix unchecked clk_prepare_enable() and add
  rollback on failure (git-fixes).
- ALSA: caiaq: fix stack out-of-bounds read in init_card
  (git-fixes).
- dmaengine: idxd: Fix freeing the allocated ida too late
  (git-fixes).
- Bluetooth: btintel: serialize btintel_hw_error() with
  hci_req_sync_lock (git-fixes).
- hwmon: axi-fan: don't use driver_override as IRQ name
  (git-fixes).
- ALSA: hda/realtek: Add headset jack quirk for Thinkpad X390
  (stable-fixes).
- ALSA: hda/realtek: add HP Laptop 14s-dr5xxx mute LED quirk
  (stable-fixes).
- ASoC: fsl_easrc: Fix event generation in
  fsl_easrc_iec958_set_reg() (stable-fixes).
- ASoC: fsl_easrc: Fix event generation in
  fsl_easrc_iec958_put_bits() (stable-fixes).
- HID: mcp2221: cancel last I2C command on read error
  (stable-fixes).
- HID: asus: avoid memory leak in asus_report_fixup()
  (stable-fixes).
- HID: magicmouse: avoid memory leak in magicmouse_report_fixup()
  (stable-fixes).
- HID: apple: avoid memory leak in apple_report_fixup()
  (stable-fixes).
- platform/x86: intel-hid: Enable 5-button array on ThinkPad X1
  Fold 16 Gen 1 (stable-fixes).
- platform/x86: intel-hid: Add Dell 14 Plus 2-in-1 to
  dmi_vgbs_allow_list (stable-fixes).
- platform/x86: touchscreen_dmi: Add quirk for y-inverted Goodix
  touchscreen on SUPI S10 (stable-fixes).
- mtd: spi-nor: core: avoid odd length/address writes in 8D-8D-8D
  mode (stable-fixes).
- Bluetooth: hci_sync: Remove remaining dependencies of
  hci_request (stable-fixes).
- Bluetooth: Remove 3 repeated macro definitions (stable-fixes).
- hwmon: (axi-fan-control) Make use of dev_err_probe()
  (stable-fixes).
- hwmon: (axi-fan-control) Use device firmware agnostic API
  (stable-fixes).
- dmaengine: idxd: Remove usage of the deprecated ida_simple_xx()
  API (stable-fixes).
- commit a6c10e6</changelog>
  <changelog author="tiwai@suse.de" date="1775217601">- Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync
  (git-fixes).
- wifi: ath11k: Pass the correct value of each TID during a stop
  AMPDU session (git-fixes).
- ASoC: Intel: boards: fix unmet dependency on PINCTRL
  (git-fixes).
- drm/amdgpu: prevent immediate PASID reuse case (stable-fixes).
- usb: core: new quirk to handle devices with zero configurations
  (stable-fixes).
- drm/amdgpu: fix gpu idle power consumption issue for gfx v12
  (stable-fixes).
- drm/ttm/tests: Fix build failure on PREEMPT_RT (stable-fixes).
- commit 7612e81</changelog>
  <changelog author="tiwai@suse.de" date="1775217602">- mtd: spi-nor: core: avoid odd length/address reads on 8D-8D-8D
  mode (stable-fixes).
- commit 2d1bac8</changelog>
  <changelog author="tiwai@suse.de" date="1775304000">- gpio: mxc: map Both Edge pad wakeup to Rising Edge (git-fixes).
- drm/ioc32: stop speculation on the drm_compat_ioctl path
  (git-fixes).
- drm/ast: dp501: Fix initialization of SCU2C (git-fixes).
- accel/qaic: Handle DBC deactivation if the owner went away
  (git-fixes).
- drm/i915/dp: Use crtc_state-&gt;enhanced_framing properly on
  ivb/hsw CPU eDP (git-fixes).
- crypto: af-alg - fix NULL pointer dereference in scatterwalk
  (git-fixes).
- crypto: caam - fix overflow on long hmac keys (git-fixes).
- crypto: caam - fix DMA corruption on long hmac keys (git-fixes).
- commit 376a907</changelog>
  <changelog author="tiwai@suse.de" date="1775304001">- Revert "drm: Fix use-after-free on framebuffers and property
  blobs when calling drm_dev_unplug" (git-fixes).
- drm/i915/dsi: Don't do DSC horizontal timing adjustments in
  command mode (git-fixes).
- drm/amdgpu: Change AMDGPU_VA_RESERVED_TRAP_SIZE to 64KB
  (git-fixes).
- commit 79130c8</changelog>
  <changelog author="tiwai@suse.de" date="1775390400">- Input: synaptics-rmi4 - fix a locking bug in an error path
  (git-fixes).
- hwmon: (occ) Fix missing newline in occ_show_extended()
  (git-fixes).
- hwmon: (occ) Fix division by zero in occ_show_power_1()
  (git-fixes).
- hwmon: (tps53679) Fix device ID comparison and printing in
  tps53676_identify() (git-fixes).
- hwmon: (pxe1610) Check return value of page-select write in
  probe (git-fixes).
- commit 08cee84</changelog>
  <changelog author="tiwai@suse.de" date="1775476800">- misc: fastrpc: possible double-free of cctx-&gt;remote_heap
  (git-fixes).
- comedi: Reinit dev-&gt;spinlock between attachments to low-level
  drivers (git-fixes).
- comedi: me_daq: Fix potential overrun of firmware buffer
  (git-fixes).
- comedi: me4000: Fix potential overrun of firmware buffer
  (git-fixes).
- comedi: ni_atmio16d: Fix invalid clean-up after failed attach
  (git-fixes).
- iio: dac: ad5770r: fix error return in ad5770r_read_raw()
  (git-fixes).
- iio: accel: fix ADXL355 temperature signature value (git-fixes).
- iio: light: vcnl4035: fix scan buffer on big-endian (git-fixes).
- iio: adc: ti-adc161s626: fix buffer read on big-endian
  (git-fixes).
- iio: imu: bmi160: Remove potential undefined behavior in
  bmi160_config_pin() (git-fixes).
- iio: imu: bno055: fix BNO055_SCAN_CH_COUNT off by one
  (git-fixes).
- iio: gyro: mpu3050: Fix out-of-sequence free_irq() (git-fixes).
- iio: gyro: mpu3050: Move iio_device_register() to correct
  location (git-fixes).
- iio: gyro: mpu3050: Fix irq resource leak (git-fixes).
- iio: gyro: mpu3050: Fix incorrect free_irq() variable
  (git-fixes).
- iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and
  gyroscope only (git-fixes).
- usb: cdns3: gadget: fix state inconsistency on gadget init
  failure (git-fixes).
- usb: ulpi: fix double free in ulpi_register_interface() error
  path (git-fixes).
- usb: cdns3: gadget: fix NULL pointer dereference in ep_queue
  (git-fixes).
- usb: gadget: f_rndis: Protect RNDIS options with mutex
  (git-fixes).
- usb: gadget: f_subset: Fix unbalanced refcnt in geth_free
  (git-fixes).
- usb: dwc2: gadget: Fix spin_lock/unlock mismatch in
  dwc2_hsotg_udc_stop() (git-fixes).
- usb: ehci-brcm: fix sleep during atomic (git-fixes).
- USB: dummy-hcd: Fix interrupt synchronization error (git-fixes).
- USB: dummy-hcd: Fix locking/synchronization error (git-fixes).
- usb: usbtmc: Flush anchored URBs in usbtmc_release (git-fixes).
- usb: gadget: u_ether: Fix race between gether_disconnect and
  eth_stop (git-fixes).
- thunderbolt: Fix property read in nhi_wake_supported()
  (git-fixes).
- commit 4e3d5c2</changelog>
  <changelog author="tiwai@suse.de" date="1775476801">- usb: gadget: uvc: fix NULL pointer dereference during unbind
  race (git-fixes).
- commit 4a9ee96</changelog>
  <changelog author="tiwai@suse.de" date="1775476802">- usb: core: phy: avoid double use of 'usb3-phy' (git-fixes).
- commit 4e8787e</changelog>
  <changelog author="pfalcato@suse.de" date="1775476803">- tls: Purge async_hold in tls_decrypt_async_wait() (CVE-2026-23414
  bsc#1261496).
- commit 1058925</changelog>
  <changelog author="pfalcato@suse.de" date="1775476804">- net/sched: ets: fix divide by zero in the offload path
  (CVE-2026-23379 bsc#1260481).
- commit 3672900</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476805">- icmp: fix NULL pointer dereference in icmp_tag_validation()
  (CVE-2026-23398 bsc#1260730).
- net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled
  (CVE-2026-23293 bsc#1260486).
- commit 05f5f64</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476806">- clsact: Fix use-after-free in init/destroy rollback asymmetry
  (CVE-2026-23413 bsc#1261498).
- commit eaf3b22</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476807">- net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled
  (CVE-2026-23381 bsc#1260471).
- commit 21aa5bd</changelog>
  <changelog author="nik.borisov@suse.com" date="1775476808">- watchdog/perf: properly initialize the turbo mode timestamp and rearm  counter (bsc#1256504).
- commit c8a645c</changelog>
  <changelog author="mkubecek@suse.cz" date="1775563200">- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs
  and shared blocks (CVE-2026-23270 bsc#1259886).
- commit 00821f1</changelog>
  <changelog author="lduncan@suse.com" date="1775563201">- scsi: target: Fix recursive locking in __configfs_open_file()
  (CVE-2026-23292 bsc#1260500).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_session_usage_count() (CVE-2026-23193 bsc#1258414).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_conn_usage_count() (CVE-2026-23216 bsc#1258447).
- commit e7b5dcd</changelog>
  <changelog author="mkubecek@suse.cz" date="1775563202">- net/sched: teql: fix NULL pointer dereference in iptunnel_xmit
  on TEQL slave xmit (CVE-2026-23277 bsc#1259997).
- commit 852cc2c</changelog>
  <changelog author="tiwai@suse.de" date="1775563203">- soc: aspeed: socinfo: Mask table entries for accurate SoC ID
  matching (git-fixes).
- commit df6cd61</changelog>
</package>
<package pkgid="ee0ddd9aa0094b1bc39feb5a6e0d47e9c2bcae840bf6b07d7c907f71398744d8" name="kernel-source" arch="src">
  <version epoch="0" ver="6.4.0" rel="150700.53.40.1"/>
  <changelog author="tiwai@suse.de" date="1775476800">- usb: gadget: uvc: fix NULL pointer dereference during unbind
  race (git-fixes).
- commit 4a9ee96</changelog>
  <changelog author="tiwai@suse.de" date="1775476801">- usb: core: phy: avoid double use of 'usb3-phy' (git-fixes).
- commit 4e8787e</changelog>
  <changelog author="pfalcato@suse.de" date="1775476802">- tls: Purge async_hold in tls_decrypt_async_wait() (CVE-2026-23414
  bsc#1261496).
- commit 1058925</changelog>
  <changelog author="pfalcato@suse.de" date="1775476803">- net/sched: ets: fix divide by zero in the offload path
  (CVE-2026-23379 bsc#1260481).
- commit 3672900</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476804">- icmp: fix NULL pointer dereference in icmp_tag_validation()
  (CVE-2026-23398 bsc#1260730).
- net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled
  (CVE-2026-23293 bsc#1260486).
- commit 05f5f64</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476805">- clsact: Fix use-after-free in init/destroy rollback asymmetry
  (CVE-2026-23413 bsc#1261498).
- commit eaf3b22</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476806">- net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled
  (CVE-2026-23381 bsc#1260471).
- commit 21aa5bd</changelog>
  <changelog author="nik.borisov@suse.com" date="1775476807">- watchdog/perf: properly initialize the turbo mode timestamp and rearm  counter (bsc#1256504).
- commit c8a645c</changelog>
  <changelog author="mkubecek@suse.cz" date="1775563200">- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs
  and shared blocks (CVE-2026-23270 bsc#1259886).
- commit 00821f1</changelog>
  <changelog author="lduncan@suse.com" date="1775563201">- scsi: target: Fix recursive locking in __configfs_open_file()
  (CVE-2026-23292 bsc#1260500).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_session_usage_count() (CVE-2026-23193 bsc#1258414).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_conn_usage_count() (CVE-2026-23216 bsc#1258447).
- commit e7b5dcd</changelog>
  <changelog author="mkubecek@suse.cz" date="1775563202">- net/sched: teql: fix NULL pointer dereference in iptunnel_xmit
  on TEQL slave xmit (CVE-2026-23277 bsc#1259997).
- commit 852cc2c</changelog>
  <changelog author="tiwai@suse.de" date="1775563203">- soc: aspeed: socinfo: Mask table entries for accurate SoC ID
  matching (git-fixes).
- commit df6cd61</changelog>
  <changelog author="nstange@suse.de" date="1777550400">- crypto: scatterwalk - Add memcpy_sglist (bsc#1262573
  CVE-2026-31431).
- commit 28aed48</changelog>
  <changelog author="nstange@suse.de" date="1777550401">- crypto: scatterwalk - Fix memcpy_sglist() to always succeed
  (bsc#1262573 CVE-2026-31431).
- commit c2ad254</changelog>
  <changelog author="nstange@suse.de" date="1777550402">- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- commit 8a67d67</changelog>
  <changelog author="nstange@suse.de" date="1777550403">- crypto: algif_aead - Revert to operating out-of-place
  (bsc#1262573 CVE-2026-31431).
- commit eb1a8c9</changelog>
  <changelog author="nstange@suse.de" date="1777550404">- kABI: Restore af_alg_{count,pull}_tsgl() signatures (bsc#1262573
  CVE-2026-31431).
- commit b418ef6</changelog>
  <changelog author="nstange@suse.de" date="1777636800">- crypto: authenc - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- Refresh
  patches.suse/crypto-authencesn-reject-too-short-AAD-assoclen-8-to.patch
- commit 24731ba</changelog>
  <changelog author="nstange@suse.de" date="1777636801">- crypto: authencesn - Do not place hiseq at end of dst for
  out-of-place decryption (bsc#1262573 CVE-2026-31431).
- commit 2c8047b</changelog>
  <changelog author="nstange@suse.de" date="1777636802">- crypto: authencesn - Fix src offset when decrypting in-place
  (bsc#1262573 CVE-2026-31431).
- commit 4921c60</changelog>
</package>
<package pkgid="75e47b003a22ec4b1fbbd824019082cefeb90310a1482e1e94277dd354ec15a3" name="kernel-source" arch="src">
  <version epoch="0" ver="6.4.0" rel="150700.53.45.1"/>
  <changelog author="pfalcato@suse.de" date="1775476800">- tls: Purge async_hold in tls_decrypt_async_wait() (CVE-2026-23414
  bsc#1261496).
- commit 1058925</changelog>
  <changelog author="pfalcato@suse.de" date="1775476801">- net/sched: ets: fix divide by zero in the offload path
  (CVE-2026-23379 bsc#1260481).
- commit 3672900</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476802">- icmp: fix NULL pointer dereference in icmp_tag_validation()
  (CVE-2026-23398 bsc#1260730).
- net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled
  (CVE-2026-23293 bsc#1260486).
- commit 05f5f64</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476803">- clsact: Fix use-after-free in init/destroy rollback asymmetry
  (CVE-2026-23413 bsc#1261498).
- commit eaf3b22</changelog>
  <changelog author="sjaeckel@suse.de" date="1775476804">- net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled
  (CVE-2026-23381 bsc#1260471).
- commit 21aa5bd</changelog>
  <changelog author="nik.borisov@suse.com" date="1775476805">- watchdog/perf: properly initialize the turbo mode timestamp and rearm  counter (bsc#1256504).
- commit c8a645c</changelog>
  <changelog author="mkubecek@suse.cz" date="1775563200">- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs
  and shared blocks (CVE-2026-23270 bsc#1259886).
- commit 00821f1</changelog>
  <changelog author="lduncan@suse.com" date="1775563201">- scsi: target: Fix recursive locking in __configfs_open_file()
  (CVE-2026-23292 bsc#1260500).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_session_usage_count() (CVE-2026-23193 bsc#1258414).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_conn_usage_count() (CVE-2026-23216 bsc#1258447).
- commit e7b5dcd</changelog>
  <changelog author="mkubecek@suse.cz" date="1775563202">- net/sched: teql: fix NULL pointer dereference in iptunnel_xmit
  on TEQL slave xmit (CVE-2026-23277 bsc#1259997).
- commit 852cc2c</changelog>
  <changelog author="tiwai@suse.de" date="1775563203">- soc: aspeed: socinfo: Mask table entries for accurate SoC ID
  matching (git-fixes).
- commit df6cd61</changelog>
  <changelog author="nstange@suse.de" date="1777550400">- crypto: scatterwalk - Add memcpy_sglist (bsc#1262573
  CVE-2026-31431).
- commit 28aed48</changelog>
  <changelog author="nstange@suse.de" date="1777550401">- crypto: scatterwalk - Fix memcpy_sglist() to always succeed
  (bsc#1262573 CVE-2026-31431).
- commit c2ad254</changelog>
  <changelog author="nstange@suse.de" date="1777550402">- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- commit 8a67d67</changelog>
  <changelog author="nstange@suse.de" date="1777550403">- crypto: algif_aead - Revert to operating out-of-place
  (bsc#1262573 CVE-2026-31431).
- commit eb1a8c9</changelog>
  <changelog author="nstange@suse.de" date="1777550404">- kABI: Restore af_alg_{count,pull}_tsgl() signatures (bsc#1262573
  CVE-2026-31431).
- commit b418ef6</changelog>
  <changelog author="nstange@suse.de" date="1777636800">- crypto: authenc - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- Refresh
  patches.suse/crypto-authencesn-reject-too-short-AAD-assoclen-8-to.patch
- commit 24731ba</changelog>
  <changelog author="nstange@suse.de" date="1777636801">- crypto: authencesn - Do not place hiseq at end of dst for
  out-of-place decryption (bsc#1262573 CVE-2026-31431).
- commit 2c8047b</changelog>
  <changelog author="nstange@suse.de" date="1777636802">- crypto: authencesn - Fix src offset when decrypting in-place
  (bsc#1262573 CVE-2026-31431).
- commit 4921c60</changelog>
  <changelog author="fmancera@suse.de" date="1778155200">- supported.conf: drop rxrpc and afs_fs (bsc#1264450)
- commit bf6ec71</changelog>
  <changelog author="jeffm@suse.com" date="1778241600">- xfrm: esp: avoid in-place decrypt on shared skb frags (bsc#1264449 bsc#1264450).
- commit 10e4355</changelog>
</package>
<package pkgid="3b699a68bdb6f7daceae613d179014ad647cc6022c79bae05388fb2d86b88bcb" name="kernel-source" arch="src">
  <version epoch="0" ver="6.4.0" rel="150700.53.52.1"/>
  <changelog author="nik.borisov@suse.com" date="1775476800">- watchdog/perf: properly initialize the turbo mode timestamp and rearm  counter (bsc#1256504).
- commit c8a645c</changelog>
  <changelog author="mkubecek@suse.cz" date="1775563200">- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs
  and shared blocks (CVE-2026-23270 bsc#1259886).
- commit 00821f1</changelog>
  <changelog author="lduncan@suse.com" date="1775563201">- scsi: target: Fix recursive locking in __configfs_open_file()
  (CVE-2026-23292 bsc#1260500).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_session_usage_count() (CVE-2026-23193 bsc#1258414).
- scsi: target: iscsi: Fix use-after-free in
  iscsit_dec_conn_usage_count() (CVE-2026-23216 bsc#1258447).
- commit e7b5dcd</changelog>
  <changelog author="mkubecek@suse.cz" date="1775563202">- net/sched: teql: fix NULL pointer dereference in iptunnel_xmit
  on TEQL slave xmit (CVE-2026-23277 bsc#1259997).
- commit 852cc2c</changelog>
  <changelog author="tiwai@suse.de" date="1775563203">- soc: aspeed: socinfo: Mask table entries for accurate SoC ID
  matching (git-fixes).
- commit df6cd61</changelog>
  <changelog author="nstange@suse.de" date="1777550400">- crypto: scatterwalk - Add memcpy_sglist (bsc#1262573
  CVE-2026-31431).
- commit 28aed48</changelog>
  <changelog author="nstange@suse.de" date="1777550401">- crypto: scatterwalk - Fix memcpy_sglist() to always succeed
  (bsc#1262573 CVE-2026-31431).
- commit c2ad254</changelog>
  <changelog author="nstange@suse.de" date="1777550402">- crypto: algif_aead - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- commit 8a67d67</changelog>
  <changelog author="nstange@suse.de" date="1777550403">- crypto: algif_aead - Revert to operating out-of-place
  (bsc#1262573 CVE-2026-31431).
- commit eb1a8c9</changelog>
  <changelog author="nstange@suse.de" date="1777550404">- kABI: Restore af_alg_{count,pull}_tsgl() signatures (bsc#1262573
  CVE-2026-31431).
- commit b418ef6</changelog>
  <changelog author="nstange@suse.de" date="1777636800">- crypto: authenc - use memcpy_sglist() instead of null skcipher
  (bsc#1262573 CVE-2026-31431).
- Refresh
  patches.suse/crypto-authencesn-reject-too-short-AAD-assoclen-8-to.patch
- commit 24731ba</changelog>
  <changelog author="nstange@suse.de" date="1777636801">- crypto: authencesn - Do not place hiseq at end of dst for
  out-of-place decryption (bsc#1262573 CVE-2026-31431).
- commit 2c8047b</changelog>
  <changelog author="nstange@suse.de" date="1777636802">- crypto: authencesn - Fix src offset when decrypting in-place
  (bsc#1262573 CVE-2026-31431).
- commit 4921c60</changelog>
  <changelog author="nik.borisov@suse.com" date="1777982400">- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's  op cache (bsc#1264013 CVE-2025-54518).
- commit 5f11806</changelog>
  <changelog author="fmancera@suse.de" date="1778155200">- supported.conf: drop rxrpc and afs_fs (bsc#1264450)
- commit c00b898</changelog>
  <changelog author="jeffm@suse.com" date="1778241600">- xfrm: esp: avoid in-place decrypt on shared skb frags (bsc#1264449 bsc#1264450).
- commit f187bc6</changelog>
  <changelog author="pfalcato@suse.de" date="1778673600">- net: skbuff: propagate shared-frag marker through pskb_copy()
  (CVE-2026-46300 bsc#1265209).
- commit 4c684ee</changelog>
  <changelog author="mhocko@suse.com" date="1778760000">- io-wq: check that the predecessor is hashed in
  io_wq_remove_pending() (git-fixes).
- commit 447a089</changelog>
  <changelog author="mhocko@suse.com" date="1778846400">- ptrace: slightly saner 'get_dumpable()' logic (bsc#1265308).
- commit a7685e1</changelog>
  <changelog author="mhocko@suse.com" date="1778846401">- kabi assert ptrace: slightly saner 'get_dumpable()' logic
  (bsc#1265308).
- kabi ptrace: slightly saner 'get_dumpable()' logic
  (bsc#1265308).
- commit 51e3e5d</changelog>
</package>
<package pkgid="371f031a8ec153ba60f330abaaf9f16677d213b4d84b905917322ad16777531b" name="kernel-source" arch="src">
  <version epoch="0" ver="6.4.0" rel="150700.53.6.1"/>
  <changelog author="ohering@suse.de" date="1751025600">- scsi: storvsc: Increase the timeouts to storvsc_timeout (git-fixes).
- net: mana: Add support for Multi Vports on Bare metal (bsc#1244229).
- scsi: storvsc: Don't report the host packet status as the hv status (git-fixes).
- commit cde971c</changelog>
  <changelog author="tiwai@suse.de" date="1751025601">- HID: lenovo: Restrict F7/9/11 mode to compact keyboards only
  (git-fixes).
- HID: wacom: fix kobject reference count leak (git-fixes).
- HID: wacom: fix memory leak on sysfs attribute creation failure
  (git-fixes).
- HID: wacom: fix memory leak on kobject creation failure
  (git-fixes).
- wifi: mac80211: fix beacon interval calculation overflow
  (git-fixes).
- commit 8d2d6ad</changelog>
  <changelog author="joao.povoas@suse.com" date="1751025602">- Update
  patches.suse/ASoC-soc-pcm-don-t-use-soc_pcm_ret-on-.prepare-callb.patch
  (stable-fixes CVE-2024-58077 bsc#1239090).
- Update
  patches.suse/Bluetooth-btbcm-Fix-NULL-deref-in-btbcm_get_board_na.patch
  (git-fixes CVE-2024-57988 bsc#1237910).
- Update
  patches.suse/Bluetooth-btrtl-check-for-NULL-in-btrtl_setup_realte.patch
  (git-fixes CVE-2024-57987 bsc#1237905).
- Update
  patches.suse/RDMA-bnxt_re-Add-sanity-checks-on-rdev-validity.patch
  (bsc#1237200 CVE-2025-21901 bsc#1240579).
- Update patches.suse/RDMA-rtrs-Add-missing-deinit-call.patch
  (git-fixes CVE-2025-21805 bsc#1238741).
- Update
  patches.suse/amdkfd-properly-free-gang_ctx_bo-when-failed-to-init.patch
  (git-fixes CVE-2025-21842 bsc#1239063).
- Update
  patches.suse/cxl-mem-Fix-no-cxl_nvd-during-pmem-region-auto-assem.patch
  (jsc#PED-10836 CVE-2024-41085 bsc#1228478).
- Update
  patches.suse/cxl-pci-Skip-to-handle-RAS-errors-if-CXL.mem-device-.patch
  (jsc#PED-10836 CVE-2024-26762 bsc#1230337).
- Update
  patches.suse/drm-amd-display-Fix-invalid-context-error-in-dml-hel.patch
  (git-fixes CVE-2025-37965 bsc#1244174).
- Update
  patches.suse/drm-amdgpu-init-return-value-in-amdgpu_ttm_clear_buf.patch
  (git-fixes CVE-2025-21987 bsc#1240798).
- Update
  patches.suse/drm-amdkfd-Fix-NULL-Pointer-Dereference-in-KFD-queue.patch
  (git-fixes CVE-2025-21940 bsc#1240702).
- Update
  patches.suse/drm-i915-gt-Use-spin_lock_irqsave-in-interruptible-c.patch
  (git-fixes CVE-2025-21849 bsc#1239485).
- Update
  patches.suse/drm-imagination-avoid-deadlock-on-fence-release.patch
  (git-fixes CVE-2025-21911 bsc#1240589).
- Update
  patches.suse/drm-xe-hmm-Don-t-dereference-struct-page-pointers-wi.patch
  (git-fixes CVE-2025-21939 bsc#1240710).
- Update patches.suse/drm-xe-userptr-fix-EFAULT-handling.patch
  (git-fixes CVE-2025-21880 bsc#1240170).
- Update
  patches.suse/gpu-host1x-Fix-a-use-of-uninitialized-mutex.patch
  (git-fixes CVE-2025-21824 bsc#1238478).
- Update
  patches.suse/iommu-Fix-potential-memory-leak-in-iopf_queue_remove.patch
  (git-fixes CVE-2025-21770 bsc#1238495).
- Update
  patches.suse/media-intel-ipu6-remove-cpu-latency-qos-request-on-e.patch
  (git-fixes CVE-2024-58004 bsc#1238508).
- Update
  patches.suse/net-smc-do-not-leave-a-dangling-sk-pointer-in-__smc_create.patch
  (jsc#PED-10299 bsc#1241689 CVE-2024-50293 bsc#1233482).
- Update
  patches.suse/net-smc-fix-lacks-of-icsk_syn_mss-with-IPPROTO_SMC.patch
  (jsc#PED-10299 bsc#1241689 CVE-2024-50034 bsc#1231913).
- Update
  patches.suse/powerpc-pseries-iommu-Don-t-unset-window-if-it-was-n.patch
  (jsc#PED-10539 git-fixes CVE-2025-21713 bsc#1237887).
- Update
  patches.suse/wifi-ath12k-Fix-for-out-of-bound-access-error.patch
  (bsc#1240998 CVE-2024-58015 bsc#1238995).
- Update
  patches.suse/wifi-ath12k-fix-use-after-free-in-ath12k_dp_cc_clean.patch
  (bsc#1240998 CVE-2024-56541 bsc#1235064).
- Update
  patches.suse/wifi-iwlwifi-mvm-avoid-NULL-pointer-dereference-cf704a7.patch
  (git-fixes CVE-2024-58062 bsc#1238965).
- commit 0597d89</changelog>
  <changelog author="joao.povoas@suse.com" date="1751025603">- Update
  patches.suse/HID-uclogic-Add-NULL-check-in-uclogic_input_configur.patch
  (git-fixes CVE-2025-38007 bsc#1244938).
- Update
  patches.suse/RDMA-core-Fix-KASAN-slab-use-after-free-Read-in-ib_r.patch
  (git-fixes CVE-2025-38022 bsc#1245003).
- Update
  patches.suse/RDMA-rxe-Fix-slab-use-after-free-Read-in-rxe_queue_c.patch
  (git-fixes CVE-2025-38024 bsc#1245025).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-csu.patch
  (bsc#1243342 CVE-2025-38059 bsc#1244759).
- Update
  patches.suse/btrfs-avoid-NULL-pointer-dereference-if-no-valid-ext.patch
  (bsc#1236208 CVE-2025-21658).
- Update
  patches.suse/can-bcm-add-locking-for-bcm_op-runtime-updates.patch
  (git-fixes CVE-2025-38004 bsc#1244274).
- Update
  patches.suse/can-bcm-add-missing-rcu-read-protection-for-procfs-c.patch
  (git-fixes CVE-2025-38003 bsc#1244275).
- Update
  patches.suse/crypto-algif_hash-fix-double-free-in-hash_accept.patch
  (git-fixes CVE-2025-38079 bsc#1245217).
- Update
  patches.suse/crypto-lzo-Fix-compression-buffer-overrun.patch
  (stable-fixes CVE-2025-38068 bsc#1245210).
- Update
  patches.suse/dmaengine-idxd-Refactor-remove-call-with-idxd_cleanu.patch
  (git-fixes CVE-2025-38014 bsc#1244732).
- Update
  patches.suse/dmaengine-idxd-fix-memory-leak-in-error-handling-pat-46a5cca.patch
  (git-fixes CVE-2025-38015 bsc#1244789).
- Update
  patches.suse/dmaengine-ti-k3-udma-Add-missing-locking.patch
  (git-fixes CVE-2025-38005 bsc#1244727).
- Update
  patches.suse/drm-amd-display-Increase-block_sequence-array-size.patch
  (stable-fixes CVE-2025-38080 bsc#1244738).
- Update
  patches.suse/ext4-goto-right-label-out_mmap_sem-in-ext4_setattr.patch
  (bsc#1242556 CVE-2025-22120 bsc#1241592).
- Update
  patches.suse/firmware-arm_ffa-Set-dma_mask-for-ffa-devices.patch
  (stable-fixes CVE-2025-38043 bsc#1245081).
- Update patches.suse/media-cx231xx-set-device_caps-for-417.patch
  (stable-fixes CVE-2025-38044 bsc#1245082).
- Update
  patches.suse/net-handshake-Fix-handshake_req_destroy_test1.patch
  (git-fixes CVE-2024-26831 bsc#1223008).
- Update
  patches.suse/net-mlx5e-Disable-MACsec-offload-for-uplink-represen.patch
  (git-fixes CVE-2025-38020 bsc#1245001).
- Update patches.suse/net_sched-prio-fix-a-race-in-prio_tune.patch
  (git-fixes CVE-2025-38083 bsc#1245183).
- Update
  patches.suse/nfs-handle-failure-of-nfs_get_lock_context-in-unlock-path.patch
  (git-fixes CVE-2025-38023 bsc#1245004).
- Update patches.suse/orangefs-Do-not-truncate-file-size.patch
  (git-fixes CVE-2025-38065 bsc#1244906).
- Update
  patches.suse/padata-do-not-leak-refcount-in-reorder_work.patch
  (git-fixes CVE-2025-38031 bsc#1245046).
- Update
  patches.suse/phy-tegra-xusb-Use-a-bitmask-for-UTMI-pad-power-stat.patch
  (git-fixes CVE-2025-38010 bsc#1244996).
- Update
  patches.suse/platform-x86-dell-wmi-sysman-Avoid-buffer-overflow-i.patch
  (git-fixes CVE-2025-38077 bsc#1244736).
- Update
  patches.suse/regulator-max20086-fix-invalid-memory-access.patch
  (git-fixes CVE-2025-38027 bsc#1245042).
- Update
  patches.suse/s390-pci-Fix-duplicate-pci_dev_put-in-disable_slot-w.patch
  (git-fixes bsc#1244145 CVE-2025-37946 bsc#1243506).
- Update
  patches.suse/s390-pci-fix-potential-double-remove-of-hotplug-slot.patch
  (bsc#1244145 CVE-2024-56699 bsc#1235490).
- Update
  patches.suse/sched-numa-fix-memory-leak-due-to-the-overwritten-vma-numab_state.patch
  (git fixes (sched/numa) CVE-2024-56613 bsc#1244176).
- Update
  patches.suse/serial-mctrl_gpio-split-disable_ms-into-sync-and-no_.patch
  (git-fixes CVE-2025-38040 bsc#1245078).
- Update
  patches.suse/spi-rockchip-Fix-register-out-of-bounds-access.patch
  (stable-fixes CVE-2025-38081 bsc#1244739).
- Update
  patches.suse/usb-typec-ucsi-displayport-Fix-NULL-pointer-access.patch
  (git-fixes CVE-2025-37994 bsc#1243823).
- Update
  patches.suse/vhost-scsi-Fix-handling-of-multiple-calls-to-vhost_s.patch
  (git-fixes CVE-2025-22083 bsc#1241414).
- Update
  patches.suse/wifi-cfg80211-fix-out-of-bounds-access-during-multi-.patch
  (git-fixes CVE-2025-37973 bsc#1244172).
- Update patches.suse/wifi-iwlwifi-fix-debug-actions-order.patch
  (stable-fixes CVE-2025-38045 bsc#1245083).
- Update
  patches.suse/wifi-mac80211-Set-n_channels-after-allocating-struct.patch
  (git-fixes CVE-2025-38013 bsc#1244731).
- Update
  patches.suse/wifi-mt76-disable-napi-on-driver-removal.patch
  (git-fixes CVE-2025-38009 bsc#1244995).
- commit fee1c31</changelog>
  <changelog author="tiwai@suse.de" date="1751198400">- i2c: tiny-usb: disable zero-length read messages (git-fixes).
- i2c: robotfuzz-osif: disable zero-length read messages
  (git-fixes).
- drm/i915: fix build error some more (git-fixes).
- ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X507UAR
  (git-fixes).
- ALSA: usb-audio: Fix out-of-bounds read in
  snd_usb_get_audioformat_uac3() (git-fixes).
- ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged
  (stable-fixes).
- ALSA: usb-audio: Rename ALSA kcontrol PCM and PCM1 for the
  KTMicro sound card (stable-fixes).
- ALSA: hda/intel: Add Thinkpad E15 to PM deny list
  (stable-fixes).
- ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330
  (stable-fixes).
- drivers/rapidio/rio_cm.c: prevent possible heap overwrite
  (stable-fixes).
- watchdog: da9052_wdt: respect TWDMIN (stable-fixes).
- watchdog: fix watchdog may detect false positive of softlockup
  (stable-fixes).
- fbcon: Make sure modelist not set on unregistered console
  (stable-fixes).
- bus: fsl-mc: increase MC_CMD_COMPLETION_TIMEOUT_MS value
  (stable-fixes).
- i2c: designware: Invoke runtime suspend on quick slave
  re-registration (stable-fixes).
- i2c: npcm: Add clock toggle recovery (stable-fixes).
- pinctrl: armada-37xx: propagate error from
  armada_37xx_pmx_set_by_name() (stable-fixes).
- pinctrl: armada-37xx: propagate error from
  armada_37xx_gpio_get_direction() (stable-fixes).
- pinctrl: armada-37xx: propagate error from
  armada_37xx_pmx_gpio_set_direction() (stable-fixes).
- pinctrl: armada-37xx: propagate error from
  armada_37xx_gpio_get() (stable-fixes).
- pinctrl: mcp23s08: Reset all pins to input at probe
  (stable-fixes).
- software node: Correct a OOB check in
  software_node_get_reference_args() (stable-fixes).
- wifi: mt76: mt7996: drop fragments with multicast or broadcast
  RA (stable-fixes).
- wifi: mt76: mt7921: add 160 MHz AP for mt7922 device
  (stable-fixes).
- wifi: mt76: mt76x2: Add support for LiteOn WN4516R,WN4519R
  (stable-fixes).
- wifi: ath12k: fix macro definition HAL_RX_MSDU_PKT_LENGTH_GET
  (stable-fixes).
- wifi: ath12k: fix a possible dead lock caused by ab-&gt;base_lock
  (stable-fixes).
- wifi: ath11k: Fix QMI memory reuse logic (stable-fixes).
- wifi: rtw89: leave idle mode when setting WEP encryption for
  AP mode (stable-fixes).
- wifi: mac80211: do not offer a mesh path if forwarding is
  disabled (stable-fixes).
- wifi: iwlwifi: pcie: make sure to lock rxq-&gt;read (stable-fixes).
- wifi: mac80211_hwsim: Prevent tsf from setting if beacon is
  disabled (stable-fixes).
- wifi: ath12k: fix failed to set mhi state error during reboot
  with hardware grouping (stable-fixes).
- wifi: ath12k: fix link valid field initialization in the
  monitor Rx (stable-fixes).
- wifi: ath12k: fix incorrect CE addresses (stable-fixes).
- wifi: ath12k: Pass correct values of center freq1 and center
  freq2 for 160 MHz (stable-fixes).
- wifi: mac80211: VLAN traffic in multicast path (stable-fixes).
- wifi: iwlwifi: Add missing MODULE_FIRMWARE for Qu-c0-jf-b0
  (stable-fixes).
- usbnet: asix AX88772: leave the carrier control to phylink
  (stable-fixes).
- PM: runtime: fix denying of auto suspend in
  pm_suspend_timer_fn() (stable-fixes).
- ACPI: battery: negate current when discharging (stable-fixes).
- ACPICA: Avoid sequence overread in call to strncmp()
  (stable-fixes).
- ACPICA: utilities: Fix overflow check in vsnprintf()
  (stable-fixes).
- ACPICA: fix acpi parse and parseext cache leaks (stable-fixes).
- ACPICA: fix acpi operand cache leak in dswstate.c
  (stable-fixes).
- ACPI: bus: Bail out if acpi_kobj registration fails
  (stable-fixes).
- mmc: Add quirk to disable DDR50 tuning (stable-fixes).
- power: supply: bq27xxx: Retrieve again when busy (stable-fixes).
- power: supply: collie: Fix wakeup source leaks on device unbind
  (stable-fixes).
- ASoC: amd: yc: Add quirk for Lenovo Yoga Pro 7 14ASP9
  (stable-fixes).
- ASoC: tegra210_ahub: Add check to of_device_get_match_data()
  (stable-fixes).
- ASoC: tas2770: Power cycle amp on ISENSE/VSENSE change
  (stable-fixes).
- Input: sparcspkr - avoid unannotated fall-through
  (stable-fixes).
- commit 0dc7dde</changelog>
  <changelog author="tiwai@suse.de" date="1751198401">- drm/xe: Process deferred GGTT node removals on device unwind
  (git-fixes).
- drm/xe/display: Add check for alloc_ordered_workqueue()
  (git-fixes).
- drm/amd: Adjust output for discovery error handling (git-fixes).
- drm/xe/bmg: Update Wa_16023588340 (git-fixes).
- drm/v3d: Avoid NULL pointer dereference in
  `v3d_job_update_stats()` (stable-fixes).
- PCI: Add ACS quirk for Loongson PCIe (stable-fixes).
- wifi: mt76: mt7925: introduce thermal protection (stable-fixes).
- wifi: mac80211: validate SCAN_FLAG_AP in scan request during
  MLO (stable-fixes).
- wifi: rtw89: 8922a: fix TX fail with wrong VCO setting
  (stable-fixes).
- wifi: iwlwifi: mvm: fix beacon CCK flag (stable-fixes).
- wireless: purelifi: plfxlc: fix memory leak in
  plfxlc_usb_wreq_asyn() (stable-fixes).
- wifi: ath12k: using msdu end descriptor to check for rx
  multicast packets (stable-fixes).
- ACPI: Add missing prototype for non CONFIG_SUSPEND/CONFIG_X86
  case (stable-fixes).
- drm/amdgpu: read back register after written for VCN v4.0.5
  (stable-fixes).
- wifi: rtw89: phy: add dummy C2H event handler for report of
  TAS power (stable-fixes).
- drm/xe: Wire up device shutdown handler (stable-fixes).
- commit 59cc8a5</changelog>
  <changelog author="tiwai@suse.de" date="1751198402">- drm/xe/gt: Update handling of xe_force_wake_get return
  (stable-fixes).
- Refresh
  patches.suse/drm-xe-Fix-GT-for-each-engine-workarounds.patch.
- commit 2738ff8</changelog>
  <changelog author="pjakobsson@suse.de" date="1751284800">- drm/amdgpu: csa unmap use uninterruptible lock (CVE-2025-38011
  bsc#1244729).
- commit d370e7c</changelog>
  <changelog author="tiwai@suse.de" date="1751284801">- staging: rtl8723bs: Avoid memset() in aes_cipher() and
  aes_decipher() (git-fixes).
- serial: imx: Restore original RXTL for console to fix data loss
  (git-fixes).
- commit 652de47</changelog>
  <changelog author="tiwai@suse.de" date="1751284802">- serial: core: restore of_node information in sysfs (git-fixes).
- commit 6ac0cc6</changelog>
  <changelog author="osalvador@suse.de" date="1751284803">- mm/hugetlb: unshare page tables during VMA split, not before
  (bsc#1245431).
- commit cdfa193</changelog>
  <changelog author="osalvador@suse.de" date="1751284804">- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
  (bsc#1245431).
- commit 0b96583</changelog>
  <changelog author="osalvador@suse.de" date="1751284805">- mm/hugetlb: unshare page tables during VMA split, not before
  (bsc#1245431).
- commit bf8eb79</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1751284806">- netlink: specs: dpll: replace underscores with dashes in names
  (git-fixes).
- bnxt: properly flush XDP redirect lists (git-fixes).
- e1000e: set fixed clock frequency indication for Nahum 11 and
  Nahum 13 (git-fixes).
- net: ice: Perform accurate aRFS flow match (git-fixes).
- net/mlx5e: Fix leak of Geneve TLV option object (git-fixes).
- net/mlx5: Fix return value when searching for existing flow
  group (git-fixes).
- net/mlx5: Fix ECVF vports unload on shutdown flow (git-fixes).
- net/mlx5: Ensure fw pages are always allocated on same NUMA
  (git-fixes).
- i40e: retry VFLR handling if there is ongoing VF reset
  (git-fixes).
- i40e: return false from i40e_reset_vf if reset is in progress
  (git-fixes).
- gve: add missing NULL check for gve_alloc_pending_packet()
  in TX DQO (git-fixes).
- ice: fix rebuilding the Tx scheduler tree for large queue counts
  (git-fixes).
- ice: create new Tx scheduler nodes for new queues only
  (git-fixes).
- ice: fix Tx scheduler error handling in XDP callback
  (git-fixes).
- net/mlx4_en: Prevent potential integer overflow calculating Hz
  (git-fixes).
- gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt
  (git-fixes).
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid()
  (git-fixes).
- net/mlx5_core: Add error handling
  inmlx5_query_nic_vport_qkey_viol_cntr() (git-fixes).
- idpf: fix null-ptr-deref in idpf_features_check (CVE-2025-38053
  bsc#1244746).
- ice: Fix LACP bonds without SRIOV environment (git-fixes).
- ice: fix vf-&gt;num_mac count with port representors (git-fixes).
- devlink: fix port dump cmd type (git-fixes).
- devlink: Fix referring to hw_addr attribute during state
  validation (git-fixes).
- netlink: fix potential sleeping issue in mqueue_flush_file
  (git-fixes).
- commit 6dccf5f</changelog>
  <changelog author="osalvador@suse.de" date="1751284807">- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
  (bsc#1245431).
- commit dd145d5</changelog>
  <changelog author="ailiop@suse.com" date="1751284808">- nfsd: nfsd4_spo_must_allow() must check this is a v4 compound
  request (git-fixes).
- commit 784f61d</changelog>
  <changelog author="ohering@suse.de" date="1751284809">- add bug reference to existing hv_storvsc change (bsc#1245455).
- net: mana: Record doorbell physical address in PF mode (bsc#1244229).
- commit 1c553b0</changelog>
  <changelog author="tiwai@suse.de" date="1751371200">- rtc: cmos: use spin_lock_irqsave in cmos_interrupt (git-fixes).
- commit d8e756f</changelog>
  <changelog author="pfalcato@suse.de" date="1751371201">- perf/x86/intel: Fix segfault with PEBS-via-PT with sample_freq
  (CVE-2025-38055 bsc#1244747).
- commit 144da01</changelog>
  <changelog author="oneukum@suse.com" date="1751371202">- r8152: add vendor/device ID pair for Dell Alienware AW1022z
  (git-fixes).
- commit 9bd4e20</changelog>
</package>
<package pkgid="ec216a3a6510823d3f6f493ccebc710832afac7113c2889d839de043e3c6aed0" name="keylime" arch="src">
  <version epoch="0" ver="6.3.2" rel="150400.4.23.1"/>
  <changelog author="aplanas@suse.com" date="1639483200">- Requires python-psutil
- Disable automatic execution of the payload by default
- Use ramdom UUID by default</changelog>
  <changelog author="aplanas@suse.com" date="1639569600">- Fix keylime configuration file attributes</changelog>
  <changelog author="aplanas@suse.com" date="1641816000">- Update to version v6.2.1:
  * Another addition to gitignore
  * Update .gitignore with more Keylime-specific files
  * json: add support for sqlalchemy.engine.row.Row in newer sqlalchemy
  * ima_ast: check if the PCR is the same as in the config
  * Fix permissions issue on volume mount in run_local.sh
  * Make run_local.sh use a local copy of the repo
  * Small updates to GOVERNANCE.md
  * Move cargo-tarpaulin install to separate command
  * config: drop registrar_* TLS options in [registrar] section
  * Fix missing &amp;&amp; in Dockerfile
  * Remove simplejson from scripts and docs
  * Replace simplejson with built-in json module
  * Add rust-keylime container dependencies
  * config: fix getboolean with fallback
  * Clean up CI scripts and rewrite run_local.sh
  * ima: for ToMToU errors skip template content validation
  * ima: Use a set of entry numbers and file offsets to remember multiple positions
  * Rename CONTRIBUTORS.md to CONTRIBUTING.md
  * Update GOVERNANCE.md to match MAINTAINERS.md rename
  * Update MAINTAINERS
  * Update README: remove Gitter, Travis CI
  * ca: Use UTC when setting certificate validity
  * Tenant commands return json
  * scripts: Allow passing a base policy to create_policy tool
  * ima: Handle the case of ima-sig with a path with spaces in them
  * add length to string object
  * scripts: Implement create_policy to create the JSON allowlist from files
  * ima: Also add a sha256 default boot_aggregate hash with 64 '0's
  * ima: Use seek() to get to the last known last entry
  * ima: Extend allowlist to be able to handle generic ima-buf entries
  * ima: Extend JSON allowlist with 'ima' entry and 'ignored_keyrings'
  * ima: Populate verifier keyrings with keys taken from ima-buf log line
  * ima: Remove methods from ImaKeyring that are now in ImaKeyrings
  * ima: Start passing ima_keyrings through APIs replacing ima_keyring
  * Extend AgentAttestState with ima_keyrings field and use it
  * ima: Implement ImaKeyrings class to support multiple keyrings
  * verifier: Extend verifier DB to persist learned keyrings
  * Fix a couple of pylint errors
  * ima: Fix spurious attestation failures
  * ima: make ToMToU errors not a failure by default
  * Simple fix for tenant error message printout.
  * pylint: Fix errors related to R1714
  * pylint: Suppress C0201, C0209 and W0602 newly reported errors
  * installer: do not install tpm2-abrmd
  * tpm: by default use /dev/tpmrm0 instead of tpm2-abrmd
  * verifier: add option to send revocation messages via webhook</changelog>
  <changelog author="aplanas@suse.com" date="1641902400">- Fix cfssl bcond logic in Tumbleweed / SLE</changelog>
  <changelog author="aplanas@suse.com" date="1641902401">- Add 0001-Drop-dataclasses-module-usage.patch, to support Python 3.6</changelog>
  <changelog author="aplanas@suse.com" date="1642507200">- Add 0001-config-support-merge-multiple-config-files.patch
  This will allow the merge of config files in /usr/etc and /etc.
- Move the configuration file to /usr/etc in new distributions
- Add 0001-ca-support-back-old-cyptography-API.patch
  This is only required for SLE, but the API is compatible with new versions</changelog>
  <changelog author="aplanas@suse.com" date="1643112000">- Set /var/lib/keylime under the same permissions expected by the code</changelog>
  <changelog author="aplanas@suse.com" date="1643284800">- Drop patches beacuse merged upstream:
  * 0001-Drop-dataclasses-module-usage.patch
  * 0001-config-support-merge-multiple-config-files.patch
  * 0001-ca-support-back-old-cyptography-API.patch
- Update to version v6.3.0:
  * Coordinated update to fix:
    + bsc#1193997 (CVE-2022-23948)
    + bsc#1193998 (CVE-2021-43310)
    + bsc#1194000 (CVE-2022-23949)
    + bsc#1194002 (CVE-2022-23950)
    + bsc#1194004 (CVE-2022-23951)
    + bsc#1194005 (CVE-2022-23952)
  * secure_mount: add umount function
  * secure_mount: use /proc/self/mountinfo
  * Validate user ID in all public interfaces
  * validators: add uuid and agent_id validators
  * validators: create validators module
  * revocation_notifier: move zmq socket to /var/run/keylime
  * Update API version from 1.0 to 2.0
  * tpm: do not compress quote with zlib by default
  * verifier: persist AK and mTLS certificate to DB
  * verifier: use "supported_version" for agent connections
  * tenant: add support for "supported_version" option for the verifier
  * api_version: add the option for basic validation
  * verifier: add supported_version field to DB and API
  * agent: add /version to REST API
  * verifier, tenant: allow agents to not use mTLS
  * tenant, verifier: allow manual configuration of agent mTLS
  * tests: migrate to mTLS
  * tenant: connect to the agent via mTLS
  * verifier: connect to the agent via mTLS
  * tornado_requests: handle SSLError
  * web_util: add mTLS context generation for agent
  * agent: Enable mTLS for agent REST API
  * crypto: add helper function for creating self signed certs
  * registrar: Allow the agent to registrar with a mTLS certificate
  * request_client: add workaround for handling certificates
  * request_client: add the option to ignore hostname validation
  * Better docs and errors about IMA hash mismatches
  * tests: use JSON instead Python string for IMA tests
  * verifier: use json.loads(..) instead of ast.literal_eval(..)
  * Adding Nuvoton certificate for a post 2020 TPM device. The EK cert
    of the device directs to the following download site:
    'https://www.nuvoton.com/security/NTC-TPM-EK-Cert/Nuvoton TPM Root
    CA 1111.cer' (yes, including the spaces)
  * Improve revocation notifier IP description in keylime.conf
  * tornado_requests: set Content-Type header correctly for JSON
  * tenant: post U key to agent with correct Content-Type header
  * Explicitly set permissions on new keylime.conf files installed
  * tpm_main: close file descriptor for aik handle
  * verifier: do not call finish() twice
  * agent: fix payload execution
  * tests: add initial tests for web_util module
  * config, web_util: move get_restful_params(..) to web_util
  * verifier: Also retry on HTTP 500 status code
  * agent: improve startup and shutdown
  * registrar: cleanup start function
  * web_util: move echo_json_response(..) out of config.py
  * verifier: fix failure generation for V key
  * tornado_requests: cleanup TornadoResponse class
  * web_util, verifier: move mTLS SSLContext generation into separate module
  * ca: support back old cyptography API
  * Fix test branch reference in packit.yaml
  * ci: disable DeprecationWarning from pylint in tox
  * Enable new test in Packit CI
  * tenant: fix reactivate command
  * config: support merge multiple config files
  * ci: use only fedora-stable for packit
  * elchecking: harden example policy against event type manipulation
  * elchecking: add new tests
  * tests: fix stdout formatting for agent and verifier
  * Drop dataclasses module usage
  * revocation notifier: handle shutdown of process gracefully
  * verifier: handle SIGINT and SIGTERM correctly
  * ima_emulator: fix IMA hash validation and add more options
  * ima_ast: fix handling ToMToU errors
  * Remove leftovers of TPM 1.2 support
  * agent: improved validation for post function
  * agent: better validation for mask and nonce
  * config: add function to validate hex strings
  * agent: keys/verify check if challenge was provided
  * tpm_main: do not append /usr/local/{bin,lib} to default env
  * db: only set length on Text type if supported
  * json: do not make sqlalchemy a hard requirement
  * Enable functional testing with Packit CI
  * ima_emulator: specify sys.argv as the named parameter argv in main()
  * elchecking example policy: make it work with Fedora 34
  * elchecking example policy: initrd* might be also called initramfs*
  * scripts: add mb_refstate generator for example policy
  * config: change tpm_hash_alg to SHA1 by default
  * parse_mb_bootlog: specify the used hash algorithm used for PCRs
  * agent: add warning that on kernels &lt;5.10 IMA only works with SHA1
  * tpm: explicitly pass hash alg to sim_extend(..)
  * ima emulator: use IMA AST and support multiple hash algorithms
  * tests: update IMA allowlist version number
  * ima: add option 'log_hash_alg' to IMA allowlist
  * ima: remove hard requirement for SHA1 PCR 10
  * algorithms: extend Hash class to simplify computing hash values
  * config, tpm_main: explicitly handle YAML load errors
  * config: private_key must be set to -private.pem not -public.pem
  * agent: add UUID option environment
  * agent: drop openstack uuid option</changelog>
  <changelog author="aplanas@suse.com" date="1644235200">- Change back agent_uuid to hostname
- Set tpm_hash_alg to sha256 by default
- Update version.diff patch to point to the correct version number
- Fix issue with Tornado, when multiple workers are started
  * Add cloud_verifier_tornado-use-fork_processes.patch (bsc#1195605)</changelog>
  <changelog author="aplanas@suse.com" date="1645704000">- Drop patches beacuse merged upstream:
  * version.diff
  * cloud_verifier_tornado-use-fork_processes.patch
- Drop binaries not used anymore:
  * keylime_provider_platform_init
  * keylime_provider_registrar
  * keylime_provider_vtpm_add
- Update to version v6.3.1:
  * revocation_notifier: mark webhook threads as daemon and add timeout
  * Fix Packit CI test plan Summary
  * Enable Packit CI testing on CentOS Stream 8
  * Enable Packit CI testing on Fedora Rawhide
  * Remove last trace of TPM 1.2 (hopefully)
  * verifier: remove start_tornado() function
  * verifier: wait for connections to be closed before stopping ioloop
  * revocation_notifier: kill ZeroMQ broker if it blocks more than 5s
  * Add more e2e tests to Packit CI
  * Enable EPEL repo on CentOS Stream in packit.yaml
  * agent, crypto: add localhost, server and contact ip to agent certificate
  * Add better default repo path for run_local.sh
  * Fix incorrect variable name in test_restful
  * Run existing agent tests against the rust-keylime agent
  * Fix small wording mistakes caught while reading the code
  * agent: move key and certificate logging levels from debug to info
  * agent: allow absolute paths for rsa_keyname and mtls_cert
  * Add missing backend parameter
  * cloud_verifier_tornado: use fork_processes
  * ci: automatically push release to PyPI
  * setup.{py,cfg}: Move setup configuration to setup.cfg
  * Add iproute tool to Dockerfile
  * Pylint does not like single-line functions.
  * A small beauty fix
  * This is a small fix to proactively fix Issue #840 by identifying non-escaped double quotes in the tpm2-tools output
  * setup.py: add version number and new Python versions, drop unsed binaries
  * setup.py, config: install default configuration into package path
  * ci: move old keylime.conf to keylime.conf.orig before running tests
  * retry: fix pylint issue
  * Adding Infineon Optiga 034 RSA and ECC certificates for Infineon SLB9675 devices.
  * Ensure columns "mb_refstate" and "allowlist" are of type LONGTEXT in table "verifiermain"
  * tenant: add exponential backoff option to retry timings
  * cloud verifier: add exponential backoff option to retry timings
  * tpm: add exponential backoff option to retry timings
  * test, retry: add unit test for retry algorithm
  * common: add algorithm for retry time calculation
  * registrar, tpm_main: ensure that correct types are commited to DB.
  * Fix typo for config param listen_notifications
  * Lint is _really_ unhappy today.
  * Linty fixes
  * Adding a unit test file for tpm_main
  * tpm_main: check if PCRs for the hash algorithm are available
  * tpm_main: handle if tpm2_checkquote returns no PCRs for a hash algorithm
  * agent: output supported_version as result not as a status
  * Add missing subcommands to -c help message
  * tests: fix mtls_cert generation in test_restful.py
  * revocation_notifier: fix socket path permission check
  * Remove unused database_query config param
  * Move umask calls only on entry points
  * config: move directory utilities to fs_util</changelog>
  <changelog author="aplanas@suse.com" date="1645704001">- Add upstream patches:
  * drop_privileges_of_agent_process_after_startup.patch
  * config_fix_config_search_order.patch
  * services_add_keylime_agent_secure_mount_service.patch
- Configure the agent to run as non-root (via keylime.conf)
- Add keylime sysuser conf file and deploy as part of the tpm
  certificate subpackage
- Prepare the systemd mount unit for /var/lib/keylime/secure</changelog>
  <changelog author="aplanas@suse.com" date="1649851200">- Update to version v6.3.2:
  * general: bump Keylime version to 6.3.2
  * tpm_main: flush transient objects
  * pypi: add notice that the Python API is unstable
  * installer: use OpenSSL by default
  * Avoid mounting secdir while unmounting it
  * remove TPM, VTPM and IMA stubbing support
  * archive: remove all archive files
  * Change GH reviewers to be from developer group
  * added suse / opensuse support with zypper
  * Fix tpm import in test_tpm.py
  * Fix cfssl configuration in run_tests.sh
  * tpm_emulator: improve TPM emulator installation
  * config: Add option to enable DB debugging via DEBUG_DB env var
  * Enable SQL query cache for JSONPickleType
  * tpm_emulator: move everything into systemd services
  * Implement broader key support for Keylime's signing mechanisms
  * tenant: Use exponential backoff on key verification retries
  * tenant: Move JSON parsing to capture possible exceptions
  * tenant: Move verifier stop from do_quote to do_verify
  * pylint: Fix issues related to W0602 global-variable-not-assigned
  * tenant: Handle 404 error from registrar gracefully
  * pylint: Fix remaining code with issue R1732 consider-using-with
  * pylint: Fix R1732 consider-using-with
  * pylint: Fix issue detected by pylint-2.13.0
  * pylint: Fix issue detected by pylint-2.13.0
  * tenant: verify agent quote before adding to verifier
  * README: remove tpm2-abrmd and OSX sections
  * pylint: Fix issues related to W0102 dangerous-default-value
  * pylint: Fix R0201 no-self-use
  * pylint: remove W1203 logging-format-interpolation from ignore list
  * pylint: remove R1729 use-a-generator from ignore list
  * pylint: remove E1120 no-value-for-parameter from ignore list
  * pylint: remove W1201 logging-not-lazy from ignore list
  * pylint: fix C0209 consider-using-f-string
  * pylint: fix C0201 consider-iterating-dictionary
  * pylint: fix W1509 subprocess-popen-preexec-fn
  * keylime_tenant non-zero exit code on error
  * Fix prepare step adjustments in packit-ci.fmf plan
  * failure: fix Pattern type hint
  * mypy: add initial Mypy configuration
  * ima_ast: add type hints
  * failure: add type hints
  * logging, config: add type hints for logging module
  * algorithms: add type hints
  * json: add type hints and add JSONType as custom type
  * Full allowlist processing when not adding host
  * provider, vTPM: remove vTPM manager and provider code
  * tpm: fix that the set of missing PCRs is not serializable in failure
  * Restores the option to use keylime agents without mTLS
  * services: make the services run as keylime user instead of root
  * State in --help that SHA-256 is used for --allowlist-checksum
  * config: change cacert.pem to cacert.crt
  * registrar_client: validate connections against registrar ca certificate
  * tenant: validate connections against verifier ca certificate
  * request_client: only add custom adapter if TLS is enabled
  * setup: add static assets for webapp
  * Add TESTING.md describing testing details
  * Fix some remaining log format strings
  * Fix for database_url parameter with sqlite
  * Enable test basic-attestation-with-unpriviledged-agent in Packit CI
  * Use lazy string formatting when logging (#535)
  * Make Packit CI plan more resource-saving
  * keylime.conf: Document setting ownership in WORK_DIR (/var/lib/keylime)
  * agent: Make sure tmpfs is empty even if not mounted or cannot unmount
  * agent: Drop privileges by switching to normal user and group
  * agent: Move mounting of tmpfs towards beginning of main()
  * agent: Read measured boot log near process start
  * agent: Open file for IMA log file near process start
  * ima: Refactor read_measurement_list() to take file as argument
  * Add the policy name to failure event
  * tpm_main: Check if tpm_cert_store exists (#553)
  * Remove tag input from container build workflow
  * Push container images to quay.io/keylime org
  * Enable code coverage measurement for e2e tests in Packit CI
  * config: fix config search order
  * Add defaults for ephemeral keys for agent records
  * Update outdated greetings Github messages
  * services: add keylime_agent_secure.mount service
  * installer.sh: updated tpm2-{tools, tss}, use system packages if possible
  * revocation_notifier: convert the data to str in the notifiers
  * revocation_notifier: mark webhook threads as daemon and add timeout
  * Fix Packit CI test plan Summary
  * Enable Packit CI testing on CentOS Stream 8
  * Enable Packit CI testing on Fedora Rawhide
  * Remove last trace of TPM 1.2 (hopefully)
  * verifier: remove start_tornado() function
  * verifier: wait for connections to be closed before stopping ioloop
  * revocation_notifier: kill ZeroMQ broker if it blocks more than 5s
  * Add more e2e tests to Packit CI
  * Enable EPEL repo on CentOS Stream in packit.yaml
- Drop already merged patches
  * drop_privileges_of_agent_process_after_startup.patch
  * config_fix_config_search_order.patch
  * services_add_keylime_agent_secure_mount_service.patch</changelog>
  <changelog author="aplanas@suse.com" date="1652875200">- Fix "run_as" configuration parameter and set it to keylime:tss
- Improve downgrade user migration during package update
- Add patches (CVE-2022-1053, boo#1199253):
  + CVE-2022-1053-01.patch
  + CVE-2022-1053-02.patch
  + CVE-2022-1053-03.patch
  + CVE-2022-1053-04.patch</changelog>
  <changelog author="aplanas@suse.com" date="1655985600">- Remove user downgrade mechanism from the package (CVE-2022-31250, bsc#1200885)</changelog>
  <changelog author="aplanas@suse.com" date="1657800000">- Use chown -h to adjust persmissions for downgrade migration.  This
  skip following symlinks and make the migration possible
  (bsc#1201466)
- Add logrotate configuration for the services
- Create run directory as non-root user
- Conflict with rust-keylime
- Consolidate in _distconfdir when possible
- Add fix_exit.diff patch, to exit properly in SLE</changelog>
  <changelog author="aplanas@suse.com" date="1658836800">- Drop cfssl default in keylime.conf patch (bsc#1201866)</changelog>
  <changelog author="aplanas@suse.com" date="1666785600">- Backport CVE-2022-3500.patch (CVE-2022-3500) (bsc#1204782)
  + Moderate vulnerability where a node can seems as attested when in
    reality it is not properly attested</changelog>
  <changelog author="aplanas@suse.com" date="1690977600">- Backport patches to avoid DoS via SSL (CVE-2023-38200, boo#1213310)
  + CVE-2023-38200-01.patch
  + CVE-2023-38200-02.patch
  + CVE-2023-38200-03.patch</changelog>
  <changelog author="aplanas@suse.com" date="1692878400">- Backport patch to avoid the leak of the authorization tag
  (CVE-2023-38201, boo#1213314)
  + CVE-2023-38201.patch</changelog>
  <changelog author="aplanas@suse.com" date="1768305600">- Backport patch to avoid re-registration of clients with same UUID
  but with different TPM identity (CVE-2025-13609, bsc#1254199)
  + CVE-2025-13609.patch</changelog>
</package>
<package pkgid="caecd8052d60eaa15889e21d15166b346d69c9af0221083246f7d3fb82f69c08" name="keylime-agent" arch="noarch">
  <version epoch="0" ver="6.3.2" rel="150400.4.23.1"/>
  <changelog author="aplanas@suse.com" date="1639483200">- Requires python-psutil
- Disable automatic execution of the payload by default
- Use ramdom UUID by default</changelog>
  <changelog author="aplanas@suse.com" date="1639569600">- Fix keylime configuration file attributes</changelog>
  <changelog author="aplanas@suse.com" date="1641816000">- Update to version v6.2.1:
  * Another addition to gitignore
  * Update .gitignore with more Keylime-specific files
  * json: add support for sqlalchemy.engine.row.Row in newer sqlalchemy
  * ima_ast: check if the PCR is the same as in the config
  * Fix permissions issue on volume mount in run_local.sh
  * Make run_local.sh use a local copy of the repo
  * Small updates to GOVERNANCE.md
  * Move cargo-tarpaulin install to separate command
  * config: drop registrar_* TLS options in [registrar] section
  * Fix missing &amp;&amp; in Dockerfile
  * Remove simplejson from scripts and docs
  * Replace simplejson with built-in json module
  * Add rust-keylime container dependencies
  * config: fix getboolean with fallback
  * Clean up CI scripts and rewrite run_local.sh
  * ima: for ToMToU errors skip template content validation
  * ima: Use a set of entry numbers and file offsets to remember multiple positions
  * Rename CONTRIBUTORS.md to CONTRIBUTING.md
  * Update GOVERNANCE.md to match MAINTAINERS.md rename
  * Update MAINTAINERS
  * Update README: remove Gitter, Travis CI
  * ca: Use UTC when setting certificate validity
  * Tenant commands return json
  * scripts: Allow passing a base policy to create_policy tool
  * ima: Handle the case of ima-sig with a path with spaces in them
  * add length to string object
  * scripts: Implement create_policy to create the JSON allowlist from files
  * ima: Also add a sha256 default boot_aggregate hash with 64 '0's
  * ima: Use seek() to get to the last known last entry
  * ima: Extend allowlist to be able to handle generic ima-buf entries
  * ima: Extend JSON allowlist with 'ima' entry and 'ignored_keyrings'
  * ima: Populate verifier keyrings with keys taken from ima-buf log line
  * ima: Remove methods from ImaKeyring that are now in ImaKeyrings
  * ima: Start passing ima_keyrings through APIs replacing ima_keyring
  * Extend AgentAttestState with ima_keyrings field and use it
  * ima: Implement ImaKeyrings class to support multiple keyrings
  * verifier: Extend verifier DB to persist learned keyrings
  * Fix a couple of pylint errors
  * ima: Fix spurious attestation failures
  * ima: make ToMToU errors not a failure by default
  * Simple fix for tenant error message printout.
  * pylint: Fix errors related to R1714
  * pylint: Suppress C0201, C0209 and W0602 newly reported errors
  * installer: do not install tpm2-abrmd
  * tpm: by default use /dev/tpmrm0 instead of tpm2-abrmd
  * verifier: add option to send revocation messages via webhook</changelog>
  <changelog author="aplanas@suse.com" date="1641902400">- Fix cfssl bcond logic in Tumbleweed / SLE</changelog>
  <changelog author="aplanas@suse.com" date="1641902401">- Add 0001-Drop-dataclasses-module-usage.patch, to support Python 3.6</changelog>
  <changelog author="aplanas@suse.com" date="1642507200">- Add 0001-config-support-merge-multiple-config-files.patch
  This will allow the merge of config files in /usr/etc and /etc.
- Move the configuration file to /usr/etc in new distributions
- Add 0001-ca-support-back-old-cyptography-API.patch
  This is only required for SLE, but the API is compatible with new versions</changelog>
  <changelog author="aplanas@suse.com" date="1643112000">- Set /var/lib/keylime under the same permissions expected by the code</changelog>
  <changelog author="aplanas@suse.com" date="1643284800">- Drop patches beacuse merged upstream:
  * 0001-Drop-dataclasses-module-usage.patch
  * 0001-config-support-merge-multiple-config-files.patch
  * 0001-ca-support-back-old-cyptography-API.patch
- Update to version v6.3.0:
  * Coordinated update to fix:
    + bsc#1193997 (CVE-2022-23948)
    + bsc#1193998 (CVE-2021-43310)
    + bsc#1194000 (CVE-2022-23949)
    + bsc#1194002 (CVE-2022-23950)
    + bsc#1194004 (CVE-2022-23951)
    + bsc#1194005 (CVE-2022-23952)
  * secure_mount: add umount function
  * secure_mount: use /proc/self/mountinfo
  * Validate user ID in all public interfaces
  * validators: add uuid and agent_id validators
  * validators: create validators module
  * revocation_notifier: move zmq socket to /var/run/keylime
  * Update API version from 1.0 to 2.0
  * tpm: do not compress quote with zlib by default
  * verifier: persist AK and mTLS certificate to DB
  * verifier: use "supported_version" for agent connections
  * tenant: add support for "supported_version" option for the verifier
  * api_version: add the option for basic validation
  * verifier: add supported_version field to DB and API
  * agent: add /version to REST API
  * verifier, tenant: allow agents to not use mTLS
  * tenant, verifier: allow manual configuration of agent mTLS
  * tests: migrate to mTLS
  * tenant: connect to the agent via mTLS
  * verifier: connect to the agent via mTLS
  * tornado_requests: handle SSLError
  * web_util: add mTLS context generation for agent
  * agent: Enable mTLS for agent REST API
  * crypto: add helper function for creating self signed certs
  * registrar: Allow the agent to registrar with a mTLS certificate
  * request_client: add workaround for handling certificates
  * request_client: add the option to ignore hostname validation
  * Better docs and errors about IMA hash mismatches
  * tests: use JSON instead Python string for IMA tests
  * verifier: use json.loads(..) instead of ast.literal_eval(..)
  * Adding Nuvoton certificate for a post 2020 TPM device. The EK cert
    of the device directs to the following download site:
    'https://www.nuvoton.com/security/NTC-TPM-EK-Cert/Nuvoton TPM Root
    CA 1111.cer' (yes, including the spaces)
  * Improve revocation notifier IP description in keylime.conf
  * tornado_requests: set Content-Type header correctly for JSON
  * tenant: post U key to agent with correct Content-Type header
  * Explicitly set permissions on new keylime.conf files installed
  * tpm_main: close file descriptor for aik handle
  * verifier: do not call finish() twice
  * agent: fix payload execution
  * tests: add initial tests for web_util module
  * config, web_util: move get_restful_params(..) to web_util
  * verifier: Also retry on HTTP 500 status code
  * agent: improve startup and shutdown
  * registrar: cleanup start function
  * web_util: move echo_json_response(..) out of config.py
  * verifier: fix failure generation for V key
  * tornado_requests: cleanup TornadoResponse class
  * web_util, verifier: move mTLS SSLContext generation into separate module
  * ca: support back old cyptography API
  * Fix test branch reference in packit.yaml
  * ci: disable DeprecationWarning from pylint in tox
  * Enable new test in Packit CI
  * tenant: fix reactivate command
  * config: support merge multiple config files
  * ci: use only fedora-stable for packit
  * elchecking: harden example policy against event type manipulation
  * elchecking: add new tests
  * tests: fix stdout formatting for agent and verifier
  * Drop dataclasses module usage
  * revocation notifier: handle shutdown of process gracefully
  * verifier: handle SIGINT and SIGTERM correctly
  * ima_emulator: fix IMA hash validation and add more options
  * ima_ast: fix handling ToMToU errors
  * Remove leftovers of TPM 1.2 support
  * agent: improved validation for post function
  * agent: better validation for mask and nonce
  * config: add function to validate hex strings
  * agent: keys/verify check if challenge was provided
  * tpm_main: do not append /usr/local/{bin,lib} to default env
  * db: only set length on Text type if supported
  * json: do not make sqlalchemy a hard requirement
  * Enable functional testing with Packit CI
  * ima_emulator: specify sys.argv as the named parameter argv in main()
  * elchecking example policy: make it work with Fedora 34
  * elchecking example policy: initrd* might be also called initramfs*
  * scripts: add mb_refstate generator for example policy
  * config: change tpm_hash_alg to SHA1 by default
  * parse_mb_bootlog: specify the used hash algorithm used for PCRs
  * agent: add warning that on kernels &lt;5.10 IMA only works with SHA1
  * tpm: explicitly pass hash alg to sim_extend(..)
  * ima emulator: use IMA AST and support multiple hash algorithms
  * tests: update IMA allowlist version number
  * ima: add option 'log_hash_alg' to IMA allowlist
  * ima: remove hard requirement for SHA1 PCR 10
  * algorithms: extend Hash class to simplify computing hash values
  * config, tpm_main: explicitly handle YAML load errors
  * config: private_key must be set to -private.pem not -public.pem
  * agent: add UUID option environment
  * agent: drop openstack uuid option</changelog>
  <changelog author="aplanas@suse.com" date="1644235200">- Change back agent_uuid to hostname
- Set tpm_hash_alg to sha256 by default
- Update version.diff patch to point to the correct version number
- Fix issue with Tornado, when multiple workers are started
  * Add cloud_verifier_tornado-use-fork_processes.patch (bsc#1195605)</changelog>
  <changelog author="aplanas@suse.com" date="1645704000">- Drop patches beacuse merged upstream:
  * version.diff
  * cloud_verifier_tornado-use-fork_processes.patch
- Drop binaries not used anymore:
  * keylime_provider_platform_init
  * keylime_provider_registrar
  * keylime_provider_vtpm_add
- Update to version v6.3.1:
  * revocation_notifier: mark webhook threads as daemon and add timeout
  * Fix Packit CI test plan Summary
  * Enable Packit CI testing on CentOS Stream 8
  * Enable Packit CI testing on Fedora Rawhide
  * Remove last trace of TPM 1.2 (hopefully)
  * verifier: remove start_tornado() function
  * verifier: wait for connections to be closed before stopping ioloop
  * revocation_notifier: kill ZeroMQ broker if it blocks more than 5s
  * Add more e2e tests to Packit CI
  * Enable EPEL repo on CentOS Stream in packit.yaml
  * agent, crypto: add localhost, server and contact ip to agent certificate
  * Add better default repo path for run_local.sh
  * Fix incorrect variable name in test_restful
  * Run existing agent tests against the rust-keylime agent
  * Fix small wording mistakes caught while reading the code
  * agent: move key and certificate logging levels from debug to info
  * agent: allow absolute paths for rsa_keyname and mtls_cert
  * Add missing backend parameter
  * cloud_verifier_tornado: use fork_processes
  * ci: automatically push release to PyPI
  * setup.{py,cfg}: Move setup configuration to setup.cfg
  * Add iproute tool to Dockerfile
  * Pylint does not like single-line functions.
  * A small beauty fix
  * This is a small fix to proactively fix Issue #840 by identifying non-escaped double quotes in the tpm2-tools output
  * setup.py: add version number and new Python versions, drop unsed binaries
  * setup.py, config: install default configuration into package path
  * ci: move old keylime.conf to keylime.conf.orig before running tests
  * retry: fix pylint issue
  * Adding Infineon Optiga 034 RSA and ECC certificates for Infineon SLB9675 devices.
  * Ensure columns "mb_refstate" and "allowlist" are of type LONGTEXT in table "verifiermain"
  * tenant: add exponential backoff option to retry timings
  * cloud verifier: add exponential backoff option to retry timings
  * tpm: add exponential backoff option to retry timings
  * test, retry: add unit test for retry algorithm
  * common: add algorithm for retry time calculation
  * registrar, tpm_main: ensure that correct types are commited to DB.
  * Fix typo for config param listen_notifications
  * Lint is _really_ unhappy today.
  * Linty fixes
  * Adding a unit test file for tpm_main
  * tpm_main: check if PCRs for the hash algorithm are available
  * tpm_main: handle if tpm2_checkquote returns no PCRs for a hash algorithm
  * agent: output supported_version as result not as a status
  * Add missing subcommands to -c help message
  * tests: fix mtls_cert generation in test_restful.py
  * revocation_notifier: fix socket path permission check
  * Remove unused database_query config param
  * Move umask calls only on entry points
  * config: move directory utilities to fs_util</changelog>
  <changelog author="aplanas@suse.com" date="1645704001">- Add upstream patches:
  * drop_privileges_of_agent_process_after_startup.patch
  * config_fix_config_search_order.patch
  * services_add_keylime_agent_secure_mount_service.patch
- Configure the agent to run as non-root (via keylime.conf)
- Add keylime sysuser conf file and deploy as part of the tpm
  certificate subpackage
- Prepare the systemd mount unit for /var/lib/keylime/secure</changelog>
  <changelog author="aplanas@suse.com" date="1649851200">- Update to version v6.3.2:
  * general: bump Keylime version to 6.3.2
  * tpm_main: flush transient objects
  * pypi: add notice that the Python API is unstable
  * installer: use OpenSSL by default
  * Avoid mounting secdir while unmounting it
  * remove TPM, VTPM and IMA stubbing support
  * archive: remove all archive files
  * Change GH reviewers to be from developer group
  * added suse / opensuse support with zypper
  * Fix tpm import in test_tpm.py
  * Fix cfssl configuration in run_tests.sh
  * tpm_emulator: improve TPM emulator installation
  * config: Add option to enable DB debugging via DEBUG_DB env var
  * Enable SQL query cache for JSONPickleType
  * tpm_emulator: move everything into systemd services
  * Implement broader key support for Keylime's signing mechanisms
  * tenant: Use exponential backoff on key verification retries
  * tenant: Move JSON parsing to capture possible exceptions
  * tenant: Move verifier stop from do_quote to do_verify
  * pylint: Fix issues related to W0602 global-variable-not-assigned
  * tenant: Handle 404 error from registrar gracefully
  * pylint: Fix remaining code with issue R1732 consider-using-with
  * pylint: Fix R1732 consider-using-with
  * pylint: Fix issue detected by pylint-2.13.0
  * pylint: Fix issue detected by pylint-2.13.0
  * tenant: verify agent quote before adding to verifier
  * README: remove tpm2-abrmd and OSX sections
  * pylint: Fix issues related to W0102 dangerous-default-value
  * pylint: Fix R0201 no-self-use
  * pylint: remove W1203 logging-format-interpolation from ignore list
  * pylint: remove R1729 use-a-generator from ignore list
  * pylint: remove E1120 no-value-for-parameter from ignore list
  * pylint: remove W1201 logging-not-lazy from ignore list
  * pylint: fix C0209 consider-using-f-string
  * pylint: fix C0201 consider-iterating-dictionary
  * pylint: fix W1509 subprocess-popen-preexec-fn
  * keylime_tenant non-zero exit code on error
  * Fix prepare step adjustments in packit-ci.fmf plan
  * failure: fix Pattern type hint
  * mypy: add initial Mypy configuration
  * ima_ast: add type hints
  * failure: add type hints
  * logging, config: add type hints for logging module
  * algorithms: add type hints
  * json: add type hints and add JSONType as custom type
  * Full allowlist processing when not adding host
  * provider, vTPM: remove vTPM manager and provider code
  * tpm: fix that the set of missing PCRs is not serializable in failure
  * Restores the option to use keylime agents without mTLS
  * services: make the services run as keylime user instead of root
  * State in --help that SHA-256 is used for --allowlist-checksum
  * config: change cacert.pem to cacert.crt
  * registrar_client: validate connections against registrar ca certificate
  * tenant: validate connections against verifier ca certificate
  * request_client: only add custom adapter if TLS is enabled
  * setup: add static assets for webapp
  * Add TESTING.md describing testing details
  * Fix some remaining log format strings
  * Fix for database_url parameter with sqlite
  * Enable test basic-attestation-with-unpriviledged-agent in Packit CI
  * Use lazy string formatting when logging (#535)
  * Make Packit CI plan more resource-saving
  * keylime.conf: Document setting ownership in WORK_DIR (/var/lib/keylime)
  * agent: Make sure tmpfs is empty even if not mounted or cannot unmount
  * agent: Drop privileges by switching to normal user and group
  * agent: Move mounting of tmpfs towards beginning of main()
  * agent: Read measured boot log near process start
  * agent: Open file for IMA log file near process start
  * ima: Refactor read_measurement_list() to take file as argument
  * Add the policy name to failure event
  * tpm_main: Check if tpm_cert_store exists (#553)
  * Remove tag input from container build workflow
  * Push container images to quay.io/keylime org
  * Enable code coverage measurement for e2e tests in Packit CI
  * config: fix config search order
  * Add defaults for ephemeral keys for agent records
  * Update outdated greetings Github messages
  * services: add keylime_agent_secure.mount service
  * installer.sh: updated tpm2-{tools, tss}, use system packages if possible
  * revocation_notifier: convert the data to str in the notifiers
  * revocation_notifier: mark webhook threads as daemon and add timeout
  * Fix Packit CI test plan Summary
  * Enable Packit CI testing on CentOS Stream 8
  * Enable Packit CI testing on Fedora Rawhide
  * Remove last trace of TPM 1.2 (hopefully)
  * verifier: remove start_tornado() function
  * verifier: wait for connections to be closed before stopping ioloop
  * revocation_notifier: kill ZeroMQ broker if it blocks more than 5s
  * Add more e2e tests to Packit CI
  * Enable EPEL repo on CentOS Stream in packit.yaml
- Drop already merged patches
  * drop_privileges_of_agent_process_after_startup.patch
  * config_fix_config_search_order.patch
  * services_add_keylime_agent_secure_mount_service.patch</changelog>
  <changelog author="aplanas@suse.com" date="1652875200">- Fix "run_as" configuration parameter and set it to keylime:tss
- Improve downgrade user migration during package update
- Add patches (CVE-2022-1053, boo#1199253):
  + CVE-2022-1053-01.patch
  + CVE-2022-1053-02.patch
  + CVE-2022-1053-03.patch
  + CVE-2022-1053-04.patch</changelog>
  <changelog author="aplanas@suse.com" date="1655985600">- Remove user downgrade mechanism from the package (CVE-2022-31250, bsc#1200885)</changelog>
  <changelog author="aplanas@suse.com" date="1657800000">- Use chown -h to adjust persmissions for downgrade migration.  This
  skip following symlinks and make the migration possible
  (bsc#1201466)
- Add logrotate configuration for the services
- Create run directory as non-root user
- Conflict with rust-keylime
- Consolidate in _distconfdir when possible
- Add fix_exit.diff patch, to exit properly in SLE</changelog>
  <changelog author="aplanas@suse.com" date="1658836800">- Drop cfssl default in keylime.conf patch (bsc#1201866)</changelog>
  <changelog author="aplanas@suse.com" date="1666785600">- Backport CVE-2022-3500.patch (CVE-2022-3500) (bsc#1204782)
  + Moderate vulnerability where a node can seems as attested when in
    reality it is not properly attested</changelog>
  <changelog author="aplanas@suse.com" date="1690977600">- Backport patches to avoid DoS via SSL (CVE-2023-38200, boo#1213310)
  + CVE-2023-38200-01.patch
  + CVE-2023-38200-02.patch
  + CVE-2023-38200-03.patch</changelog>
  <changelog author="aplanas@suse.com" date="1692878400">- Backport patch to avoid the leak of the authorization tag
  (CVE-2023-38201, boo#1213314)
  + CVE-2023-38201.patch</changelog>
  <changelog author="aplanas@suse.com" date="1768305600">- Backport patch to avoid re-registration of clients with same UUID
  but with different TPM identity (CVE-2025-13609, bsc#1254199)
  + CVE-2025-13609.patch</changelog>
</package>
<package pkgid="29a6091f8c1ca6ff0fb14fa13efc70cddcc02aa6bfdeb915864b986ab38ae864" name="keylime-config" arch="noarch">
  <version epoch="0" ver="6.3.2" rel="150400.4.23.1"/>
  <changelog author="aplanas@suse.com" date="1639483200">- Requires python-psutil
- Disable automatic execution of the payload by default
- Use ramdom UUID by default</changelog>
  <changelog author="aplanas@suse.com" date="1639569600">- Fix keylime configuration file attributes</changelog>
  <changelog author="aplanas@suse.com" date="1641816000">- Update to version v6.2.1:
  * Another addition to gitignore
  * Update .gitignore with more Keylime-specific files
  * json: add support for sqlalchemy.engine.row.Row in newer sqlalchemy
  * ima_ast: check if the PCR is the same as in the config
  * Fix permissions issue on volume mount in run_local.sh
  * Make run_local.sh use a local copy of the repo
  * Small updates to GOVERNANCE.md
  * Move cargo-tarpaulin install to separate command
  * config: drop registrar_* TLS options in [registrar] section
  * Fix missing &amp;&amp; in Dockerfile
  * Remove simplejson from scripts and docs
  * Replace simplejson with built-in json module
  * Add rust-keylime container dependencies
  * config: fix getboolean with fallback
  * Clean up CI scripts and rewrite run_local.sh
  * ima: for ToMToU errors skip template content validation
  * ima: Use a set of entry numbers and file offsets to remember multiple positions
  * Rename CONTRIBUTORS.md to CONTRIBUTING.md
  * Update GOVERNANCE.md to match MAINTAINERS.md rename
  * Update MAINTAINERS
  * Update README: remove Gitter, Travis CI
  * ca: Use UTC when setting certificate validity
  * Tenant commands return json
  * scripts: Allow passing a base policy to create_policy tool
  * ima: Handle the case of ima-sig with a path with spaces in them
  * add length to string object
  * scripts: Implement create_policy to create the JSON allowlist from files
  * ima: Also add a sha256 default boot_aggregate hash with 64 '0's
  * ima: Use seek() to get to the last known last entry
  * ima: Extend allowlist to be able to handle generic ima-buf entries
  * ima: Extend JSON allowlist with 'ima' entry and 'ignored_keyrings'
  * ima: Populate verifier keyrings with keys taken from ima-buf log line
  * ima: Remove methods from ImaKeyring that are now in ImaKeyrings
  * ima: Start passing ima_keyrings through APIs replacing ima_keyring
  * Extend AgentAttestState with ima_keyrings field and use it
  * ima: Implement ImaKeyrings class to support multiple keyrings
  * verifier: Extend verifier DB to persist learned keyrings
  * Fix a couple of pylint errors
  * ima: Fix spurious attestation failures
  * ima: make ToMToU errors not a failure by default
  * Simple fix for tenant error message printout.
  * pylint: Fix errors related to R1714
  * pylint: Suppress C0201, C0209 and W0602 newly reported errors
  * installer: do not install tpm2-abrmd
  * tpm: by default use /dev/tpmrm0 instead of tpm2-abrmd
  * verifier: add option to send revocation messages via webhook</changelog>
  <changelog author="aplanas@suse.com" date="1641902400">- Fix cfssl bcond logic in Tumbleweed / SLE</changelog>
  <changelog author="aplanas@suse.com" date="1641902401">- Add 0001-Drop-dataclasses-module-usage.patch, to support Python 3.6</changelog>
  <changelog author="aplanas@suse.com" date="1642507200">- Add 0001-config-support-merge-multiple-config-files.patch
  This will allow the merge of config files in /usr/etc and /etc.
- Move the configuration file to /usr/etc in new distributions
- Add 0001-ca-support-back-old-cyptography-API.patch
  This is only required for SLE, but the API is compatible with new versions</changelog>
  <changelog author="aplanas@suse.com" date="1643112000">- Set /var/lib/keylime under the same permissions expected by the code</changelog>
  <changelog author="aplanas@suse.com" date="1643284800">- Drop patches beacuse merged upstream:
  * 0001-Drop-dataclasses-module-usage.patch
  * 0001-config-support-merge-multiple-config-files.patch
  * 0001-ca-support-back-old-cyptography-API.patch
- Update to version v6.3.0:
  * Coordinated update to fix:
    + bsc#1193997 (CVE-2022-23948)
    + bsc#1193998 (CVE-2021-43310)
    + bsc#1194000 (CVE-2022-23949)
    + bsc#1194002 (CVE-2022-23950)
    + bsc#1194004 (CVE-2022-23951)
    + bsc#1194005 (CVE-2022-23952)
  * secure_mount: add umount function
  * secure_mount: use /proc/self/mountinfo
  * Validate user ID in all public interfaces
  * validators: add uuid and agent_id validators
  * validators: create validators module
  * revocation_notifier: move zmq socket to /var/run/keylime
  * Update API version from 1.0 to 2.0
  * tpm: do not compress quote with zlib by default
  * verifier: persist AK and mTLS certificate to DB
  * verifier: use "supported_version" for agent connections
  * tenant: add support for "supported_version" option for the verifier
  * api_version: add the option for basic validation
  * verifier: add supported_version field to DB and API
  * agent: add /version to REST API
  * verifier, tenant: allow agents to not use mTLS
  * tenant, verifier: allow manual configuration of agent mTLS
  * tests: migrate to mTLS
  * tenant: connect to the agent via mTLS
  * verifier: connect to the agent via mTLS
  * tornado_requests: handle SSLError
  * web_util: add mTLS context generation for agent
  * agent: Enable mTLS for agent REST API
  * crypto: add helper function for creating self signed certs
  * registrar: Allow the agent to registrar with a mTLS certificate
  * request_client: add workaround for handling certificates
  * request_client: add the option to ignore hostname validation
  * Better docs and errors about IMA hash mismatches
  * tests: use JSON instead Python string for IMA tests
  * verifier: use json.loads(..) instead of ast.literal_eval(..)
  * Adding Nuvoton certificate for a post 2020 TPM device. The EK cert
    of the device directs to the following download site:
    'https://www.nuvoton.com/security/NTC-TPM-EK-Cert/Nuvoton TPM Root
    CA 1111.cer' (yes, including the spaces)
  * Improve revocation notifier IP description in keylime.conf
  * tornado_requests: set Content-Type header correctly for JSON
  * tenant: post U key to agent with correct Content-Type header
  * Explicitly set permissions on new keylime.conf files installed
  * tpm_main: close file descriptor for aik handle
  * verifier: do not call finish() twice
  * agent: fix payload execution
  * tests: add initial tests for web_util module
  * config, web_util: move get_restful_params(..) to web_util
  * verifier: Also retry on HTTP 500 status code
  * agent: improve startup and shutdown
  * registrar: cleanup start function
  * web_util: move echo_json_response(..) out of config.py
  * verifier: fix failure generation for V key
  * tornado_requests: cleanup TornadoResponse class
  * web_util, verifier: move mTLS SSLContext generation into separate module
  * ca: support back old cyptography API
  * Fix test branch reference in packit.yaml
  * ci: disable DeprecationWarning from pylint in tox
  * Enable new test in Packit CI
  * tenant: fix reactivate command
  * config: support merge multiple config files
  * ci: use only fedora-stable for packit
  * elchecking: harden example policy against event type manipulation
  * elchecking: add new tests
  * tests: fix stdout formatting for agent and verifier
  * Drop dataclasses module usage
  * revocation notifier: handle shutdown of process gracefully
  * verifier: handle SIGINT and SIGTERM correctly
  * ima_emulator: fix IMA hash validation and add more options
  * ima_ast: fix handling ToMToU errors
  * Remove leftovers of TPM 1.2 support
  * agent: improved validation for post function
  * agent: better validation for mask and nonce
  * config: add function to validate hex strings
  * agent: keys/verify check if challenge was provided
  * tpm_main: do not append /usr/local/{bin,lib} to default env
  * db: only set length on Text type if supported
  * json: do not make sqlalchemy a hard requirement
  * Enable functional testing with Packit CI
  * ima_emulator: specify sys.argv as the named parameter argv in main()
  * elchecking example policy: make it work with Fedora 34
  * elchecking example policy: initrd* might be also called initramfs*
  * scripts: add mb_refstate generator for example policy
  * config: change tpm_hash_alg to SHA1 by default
  * parse_mb_bootlog: specify the used hash algorithm used for PCRs
  * agent: add warning that on kernels &lt;5.10 IMA only works with SHA1
  * tpm: explicitly pass hash alg to sim_extend(..)
  * ima emulator: use IMA AST and support multiple hash algorithms
  * tests: update IMA allowlist version number
  * ima: add option 'log_hash_alg' to IMA allowlist
  * ima: remove hard requirement for SHA1 PCR 10
  * algorithms: extend Hash class to simplify computing hash values
  * config, tpm_main: explicitly handle YAML load errors
  * config: private_key must be set to -private.pem not -public.pem
  * agent: add UUID option environment
  * agent: drop openstack uuid option</changelog>
  <changelog author="aplanas@suse.com" date="1644235200">- Change back agent_uuid to hostname
- Set tpm_hash_alg to sha256 by default
- Update version.diff patch to point to the correct version number
- Fix issue with Tornado, when multiple workers are started
  * Add cloud_verifier_tornado-use-fork_processes.patch (bsc#1195605)</changelog>
  <changelog author="aplanas@suse.com" date="1645704000">- Drop patches beacuse merged upstream:
  * version.diff
  * cloud_verifier_tornado-use-fork_processes.patch
- Drop binaries not used anymore:
  * keylime_provider_platform_init
  * keylime_provider_registrar
  * keylime_provider_vtpm_add
- Update to version v6.3.1:
  * revocation_notifier: mark webhook threads as daemon and add timeout
  * Fix Packit CI test plan Summary
  * Enable Packit CI testing on CentOS Stream 8
  * Enable Packit CI testing on Fedora Rawhide
  * Remove last trace of TPM 1.2 (hopefully)
  * verifier: remove start_tornado() function
  * verifier: wait for connections to be closed before stopping ioloop
  * revocation_notifier: kill ZeroMQ broker if it blocks more than 5s
  * Add more e2e tests to Packit CI
  * Enable EPEL repo on CentOS Stream in packit.yaml
  * agent, crypto: add localhost, server and contact ip to agent certificate
  * Add better default repo path for run_local.sh
  * Fix incorrect variable name in test_restful
  * Run existing agent tests against the rust-keylime agent
  * Fix small wording mistakes caught while reading the code
  * agent: move key and certificate logging levels from debug to info
  * agent: allow absolute paths for rsa_keyname and mtls_cert
  * Add missing backend parameter
  * cloud_verifier_tornado: use fork_processes
  * ci: automatically push release to PyPI
  * setup.{py,cfg}: Move setup configuration to setup.cfg
  * Add iproute tool to Dockerfile
  * Pylint does not like single-line functions.
  * A small beauty fix
  * This is a small fix to proactively fix Issue #840 by identifying non-escaped double quotes in the tpm2-tools output
  * setup.py: add version number and new Python versions, drop unsed binaries
  * setup.py, config: install default configuration into package path
  * ci: move old keylime.conf to keylime.conf.orig before running tests
  * retry: fix pylint issue
  * Adding Infineon Optiga 034 RSA and ECC certificates for Infineon SLB9675 devices.
  * Ensure columns "mb_refstate" and "allowlist" are of type LONGTEXT in table "verifiermain"
  * tenant: add exponential backoff option to retry timings
  * cloud verifier: add exponential backoff option to retry timings
  * tpm: add exponential backoff option to retry timings
  * test, retry: add unit test for retry algorithm
  * common: add algorithm for retry time calculation
  * registrar, tpm_main: ensure that correct types are commited to DB.
  * Fix typo for config param listen_notifications
  * Lint is _really_ unhappy today.
  * Linty fixes
  * Adding a unit test file for tpm_main
  * tpm_main: check if PCRs for the hash algorithm are available
  * tpm_main: handle if tpm2_checkquote returns no PCRs for a hash algorithm
  * agent: output supported_version as result not as a status
  * Add missing subcommands to -c help message
  * tests: fix mtls_cert generation in test_restful.py
  * revocation_notifier: fix socket path permission check
  * Remove unused database_query config param
  * Move umask calls only on entry points
  * config: move directory utilities to fs_util</changelog>
  <changelog author="aplanas@suse.com" date="1645704001">- Add upstream patches:
  * drop_privileges_of_agent_process_after_startup.patch
  * config_fix_config_search_order.patch
  * services_add_keylime_agent_secure_mount_service.patch
- Configure the agent to run as non-root (via keylime.conf)
- Add keylime sysuser conf file and deploy as part of the tpm
  certificate subpackage
- Prepare the systemd mount unit for /var/lib/keylime/secure</changelog>
  <changelog author="aplanas@suse.com" date="1649851200">- Update to version v6.3.2:
  * general: bump Keylime version to 6.3.2
  * tpm_main: flush transient objects
  * pypi: add notice that the Python API is unstable
  * installer: use OpenSSL by default
  * Avoid mounting secdir while unmounting it
  * remove TPM, VTPM and IMA stubbing support
  * archive: remove all archive files
  * Change GH reviewers to be from developer group
  * added suse / opensuse support with zypper
  * Fix tpm import in test_tpm.py
  * Fix cfssl configuration in run_tests.sh
  * tpm_emulator: improve TPM emulator installation
  * config: Add option to enable DB debugging via DEBUG_DB env var
  * Enable SQL query cache for JSONPickleType
  * tpm_emulator: move everything into systemd services
  * Implement broader key support for Keylime's signing mechanisms
  * tenant: Use exponential backoff on key verification retries
  * tenant: Move JSON parsing to capture possible exceptions
  * tenant: Move verifier stop from do_quote to do_verify
  * pylint: Fix issues related to W0602 global-variable-not-assigned
  * tenant: Handle 404 error from registrar gracefully
  * pylint: Fix remaining code with issue R1732 consider-using-with
  * pylint: Fix R1732 consider-using-with
  * pylint: Fix issue detected by pylint-2.13.0
  * pylint: Fix issue detected by pylint-2.13.0
  * tenant: verify agent quote before adding to verifier
  * README: remove tpm2-abrmd and OSX sections
  * pylint: Fix issues related to W0102 dangerous-default-value
  * pylint: Fix R0201 no-self-use
  * pylint: remove W1203 logging-format-interpolation from ignore list
  * pylint: remove R1729 use-a-generator from ignore list
  * pylint: remove E1120 no-value-for-parameter from ignore list
  * pylint: remove W1201 logging-not-lazy from ignore list
  * pylint: fix C0209 consider-using-f-string
  * pylint: fix C0201 consider-iterating-dictionary
  * pylint: fix W1509 subprocess-popen-preexec-fn
  * keylime_tenant non-zero exit code on error
  * Fix prepare step adjustments in packit-ci.fmf plan
  * failure: fix Pattern type hint
  * mypy: add initial Mypy configuration
  * ima_ast: add type hints
  * failure: add type hints
  * logging, config: add type hints for logging module
  * algorithms: add type hints
  * json: add type hints and add JSONType as custom type
  * Full allowlist processing when not adding host
  * provider, vTPM: remove vTPM manager and provider code
  * tpm: fix that the set of missing PCRs is not serializable in failure
  * Restores the option to use keylime agents without mTLS
  * services: make the services run as keylime user instead of root
  * State in --help that SHA-256 is used for --allowlist-checksum
  * config: change cacert.pem to cacert.crt
  * registrar_client: validate connections against registrar ca certificate
  * tenant: validate connections against verifier ca certificate
  * request_client: only add custom adapter if TLS is enabled
  * setup: add static assets for webapp
  * Add TESTING.md describing testing details
  * Fix some remaining log format strings
  * Fix for database_url parameter with sqlite
  * Enable test basic-attestation-with-unpriviledged-agent in Packit CI
  * Use lazy string formatting when logging (#535)
  * Make Packit CI plan more resource-saving
  * keylime.conf: Document setting ownership in WORK_DIR (/var/lib/keylime)
  * agent: Make sure tmpfs is empty even if not mounted or cannot unmount
  * agent: Drop privileges by switching to normal user and group
  * agent: Move mounting of tmpfs towards beginning of main()
  * agent: Read measured boot log near process start
  * agent: Open file for IMA log file near process start
  * ima: Refactor read_measurement_list() to take file as argument
  * Add the policy name to failure event
  * tpm_main: Check if tpm_cert_store exists (#553)
  * Remove tag input from container build workflow
  * Push container images to quay.io/keylime org
  * Enable code coverage measurement for e2e tests in Packit CI
  * config: fix config search order
  * Add defaults for ephemeral keys for agent records
  * Update outdated greetings Github messages
  * services: add keylime_agent_secure.mount service
  * installer.sh: updated tpm2-{tools, tss}, use system packages if possible
  * revocation_notifier: convert the data to str in the notifiers
  * revocation_notifier: mark webhook threads as daemon and add timeout
  * Fix Packit CI test plan Summary
  * Enable Packit CI testing on CentOS Stream 8
  * Enable Packit CI testing on Fedora Rawhide
  * Remove last trace of TPM 1.2 (hopefully)
  * verifier: remove start_tornado() function
  * verifier: wait for connections to be closed before stopping ioloop
  * revocation_notifier: kill ZeroMQ broker if it blocks more than 5s
  * Add more e2e tests to Packit CI
  * Enable EPEL repo on CentOS Stream in packit.yaml
- Drop already merged patches
  * drop_privileges_of_agent_process_after_startup.patch
  * config_fix_config_search_order.patch
  * services_add_keylime_agent_secure_mount_service.patch</changelog>
  <changelog author="aplanas@suse.com" date="1652875200">- Fix "run_as" configuration parameter and set it to keylime:tss
- Improve downgrade user migration during package update
- Add patches (CVE-2022-1053, boo#1199253):
  + CVE-2022-1053-01.patch
  + CVE-2022-1053-02.patch
  + CVE-2022-1053-03.patch
  + CVE-2022-1053-04.patch</changelog>
  <changelog author="aplanas@suse.com" date="1655985600">- Remove user downgrade mechanism from the package (CVE-2022-31250, bsc#1200885)</changelog>
  <changelog author="aplanas@suse.com" date="1657800000">- Use chown -h to adjust persmissions for downgrade migration.  This
  skip following symlinks and make the migration possible
  (bsc#1201466)
- Add logrotate configuration for the services
- Create run directory as non-root user
- Conflict with rust-keylime
- Consolidate in _distconfdir when possible
- Add fix_exit.diff patch, to exit properly in SLE</changelog>
  <changelog author="aplanas@suse.com" date="1658836800">- Drop cfssl default in keylime.conf patch (bsc#1201866)</changelog>
  <changelog author="aplanas@suse.com" date="1666785600">- Backport CVE-2022-3500.patch (CVE-2022-3500) (bsc#1204782)
  + Moderate vulnerability where a node can seems as attested when in
    reality it is not properly attested</changelog>
  <changelog author="aplanas@suse.com" date="1690977600">- Backport patches to avoid DoS via SSL (CVE-2023-38200, boo#1213310)
  + CVE-2023-38200-01.patch
  + CVE-2023-38200-02.patch
  + CVE-2023-38200-03.patch</changelog>
  <changelog author="aplanas@suse.com" date="1692878400">- Backport patch to avoid the leak of the authorization tag
  (CVE-2023-38201, boo#1213314)
  + CVE-2023-38201.patch</changelog>
  <changelog author="aplanas@suse.com" date="1768305600">- Backport patch to avoid re-registration of clients with same UUID
  but with different TPM identity (CVE-2025-13609, bsc#1254199)
  + CVE-2025-13609.patch</changelog>
</package>
<package pkgid="6c47b58863be536acba1bb16c9033645481cdc9ee8c696aff6d9c04fe5859c32" name="keylime-firewalld" arch="noarch">
  <version epoch="0" ver="6.3.2" rel="150400.4.23.1"/>
  <changelog author="aplanas@suse.com" date="1639483200">- Requires python-psutil
- Disable automatic execution of the payload by default
- Use ramdom UUID by default</changelog>
  <changelog author="aplanas@suse.com" date="1639569600">- Fix keylime configuration file attributes</changelog>
  <changelog author="aplanas@suse.com" date="1641816000">- Update to version v6.2.1:
  * Another addition to gitignore
  * Update .gitignore with more Keylime-specific files
  * json: add support for sqlalchemy.engine.row.Row in newer sqlalchemy
  * ima_ast: check if the PCR is the same as in the config
  * Fix permissions issue on volume mount in run_local.sh
  * Make run_local.sh use a local copy of the repo
  * Small updates to GOVERNANCE.md
  * Move cargo-tarpaulin install to separate command
  * config: drop registrar_* TLS options in [registrar] section
  * Fix missing &amp;&amp; in Dockerfile
  * Remove simplejson from scripts and docs
  * Replace simplejson with built-in json module
  * Add rust-keylime container dependencies
  * config: fix getboolean with fallback
  * Clean up CI scripts and rewrite run_local.sh
  * ima: for ToMToU errors skip template content validation
  * ima: Use a set of entry numbers and file offsets to remember multiple positions
  * Rename CONTRIBUTORS.md to CONTRIBUTING.md
  * Update GOVERNANCE.md to match MAINTAINERS.md rename
  * Update MAINTAINERS
  * Update README: remove Gitter, Travis CI
  * ca: Use UTC when setting certificate validity
  * Tenant commands return json
  * scripts: Allow passing a base policy to create_policy tool
  * ima: Handle the case of ima-sig with a path with spaces in them
  * add length to string object
  * scripts: Implement create_policy to create the JSON allowlist from files
  * ima: Also add a sha256 default boot_aggregate hash with 64 '0's
  * ima: Use seek() to get to the last known last entry
  * ima: Extend allowlist to be able to handle generic ima-buf entries
  * ima: Extend JSON allowlist with 'ima' entry and 'ignored_keyrings'
  * ima: Populate verifier keyrings with keys taken from ima-buf log line
  * ima: Remove methods from ImaKeyring that are now in ImaKeyrings
  * ima: Start passing ima_keyrings through APIs replacing ima_keyring
  * Extend AgentAttestState with ima_keyrings field and use it
  * ima: Implement ImaKeyrings class to support multiple keyrings
  * verifier: Extend verifier DB to persist learned keyrings
  * Fix a couple of pylint errors
  * ima: Fix spurious attestation failures
  * ima: make ToMToU errors not a failure by default
  * Simple fix for tenant error message printout.
  * pylint: Fix errors related to R1714
  * pylint: Suppress C0201, C0209 and W0602 newly reported errors
  * installer: do not install tpm2-abrmd
  * tpm: by default use /dev/tpmrm0 instead of tpm2-abrmd
  * verifier: add option to send revocation messages via webhook</changelog>
  <changelog author="aplanas@suse.com" date="1641902400">- Fix cfssl bcond logic in Tumbleweed / SLE</changelog>
  <changelog author="aplanas@suse.com" date="1641902401">- Add 0001-Drop-dataclasses-module-usage.patch, to support Python 3.6</changelog>
  <changelog author="aplanas@suse.com" date="1642507200">- Add 0001-config-support-merge-multiple-config-files.patch
  This will allow the merge of config files in /usr/etc and /etc.
- Move the configuration file to /usr/etc in new distributions
- Add 0001-ca-support-back-old-cyptography-API.patch
  This is only required for SLE, but the API is compatible with new versions</changelog>
  <changelog author="aplanas@suse.com" date="1643112000">- Set /var/lib/keylime under the same permissions expected by the code</changelog>
  <changelog author="aplanas@suse.com" date="1643284800">- Drop patches beacuse merged upstream:
  * 0001-Drop-dataclasses-module-usage.patch
  * 0001-config-support-merge-multiple-config-files.patch
  * 0001-ca-support-back-old-cyptography-API.patch
- Update to version v6.3.0:
  * Coordinated update to fix:
    + bsc#1193997 (CVE-2022-23948)
    + bsc#1193998 (CVE-2021-43310)
    + bsc#1194000 (CVE-2022-23949)
    + bsc#1194002 (CVE-2022-23950)
    + bsc#1194004 (CVE-2022-23951)
    + bsc#1194005 (CVE-2022-23952)
  * secure_mount: add umount function
  * secure_mount: use /proc/self/mountinfo
  * Validate user ID in all public interfaces
  * validators: add uuid and agent_id validators
  * validators: create validators module
  * revocation_notifier: move zmq socket to /var/run/keylime
  * Update API version from 1.0 to 2.0
  * tpm: do not compress quote with zlib by default
  * verifier: persist AK and mTLS certificate to DB
  * verifier: use "supported_version" for agent connections
  * tenant: add support for "supported_version" option for the verifier
  * api_version: add the option for basic validation
  * verifier: add supported_version field to DB and API
  * agent: add /version to REST API
  * verifier, tenant: allow agents to not use mTLS
  * tenant, verifier: allow manual configuration of agent mTLS
  * tests: migrate to mTLS
  * tenant: connect to the agent via mTLS
  * verifier: connect to the agent via mTLS
  * tornado_requests: handle SSLError
  * web_util: add mTLS context generation for agent
  * agent: Enable mTLS for agent REST API
  * crypto: add helper function for creating self signed certs
  * registrar: Allow the agent to registrar with a mTLS certificate
  * request_client: add workaround for handling certificates
  * request_client: add the option to ignore hostname validation
  * Better docs and errors about IMA hash mismatches
  * tests: use JSON instead Python string for IMA tests
  * verifier: use json.loads(..) instead of ast.literal_eval(..)
  * Adding Nuvoton certificate for a post 2020 TPM device. The EK cert
    of the device directs to the following download site:
    'https://www.nuvoton.com/security/NTC-TPM-EK-Cert/Nuvoton TPM Root
    CA 1111.cer' (yes, including the spaces)
  * Improve revocation notifier IP description in keylime.conf
  * tornado_requests: set Content-Type header correctly for JSON
  * tenant: post U key to agent with correct Content-Type header
  * Explicitly set permissions on new keylime.conf files installed
  * tpm_main: close file descriptor for aik handle
  * verifier: do not call finish() twice
  * agent: fix payload execution
  * tests: add initial tests for web_util module
  * config, web_util: move get_restful_params(..) to web_util
  * verifier: Also retry on HTTP 500 status code
  * agent: improve startup and shutdown
  * registrar: cleanup start function
  * web_util: move echo_json_response(..) out of config.py
  * verifier: fix failure generation for V key
  * tornado_requests: cleanup TornadoResponse class
  * web_util, verifier: move mTLS SSLContext generation into separate module
  * ca: support back old cyptography API
  * Fix test branch reference in packit.yaml
  * ci: disable DeprecationWarning from pylint in tox
  * Enable new test in Packit CI
  * tenant: fix reactivate command
  * config: support merge multiple config files
  * ci: use only fedora-stable for packit
  * elchecking: harden example policy against event type manipulation
  * elchecking: add new tests
  * tests: fix stdout formatting for agent and verifier
  * Drop dataclasses module usage
  * revocation notifier: handle shutdown of process gracefully
  * verifier: handle SIGINT and SIGTERM correctly
  * ima_emulator: fix IMA hash validation and add more options
  * ima_ast: fix handling ToMToU errors
  * Remove leftovers of TPM 1.2 support
  * agent: improved validation for post function
  * agent: better validation for mask and nonce
  * config: add function to validate hex strings
  * agent: keys/verify check if challenge was provided
  * tpm_main: do not append /usr/local/{bin,lib} to default env
  * db: only set length on Text type if supported
  * json: do not make sqlalchemy a hard requirement
  * Enable functional testing with Packit CI
  * ima_emulator: specify sys.argv as the named parameter argv in main()
  * elchecking example policy: make it work with Fedora 34
  * elchecking example policy: initrd* might be also called initramfs*
  * scripts: add mb_refstate generator for example policy
  * config: change tpm_hash_alg to SHA1 by default
  * parse_mb_bootlog: specify the used hash algorithm used for PCRs
  * agent: add warning that on kernels &lt;5.10 IMA only works with SHA1
  * tpm: explicitly pass hash alg to sim_extend(..)
  * ima emulator: use IMA AST and support multiple hash algorithms
  * tests: update IMA allowlist version number
  * ima: add option 'log_hash_alg' to IMA allowlist
  * ima: remove hard requirement for SHA1 PCR 10
  * algorithms: extend Hash class to simplify computing hash values
  * config, tpm_main: explicitly handle YAML load errors
  * config: private_key must be set to -private.pem not -public.pem
  * agent: add UUID option environment
  * agent: drop openstack uuid option</changelog>
  <changelog author="aplanas@suse.com" date="1644235200">- Change back agent_uuid to hostname
- Set tpm_hash_alg to sha256 by default
- Update version.diff patch to point to the correct version number
- Fix issue with Tornado, when multiple workers are started
  * Add cloud_verifier_tornado-use-fork_processes.patch (bsc#1195605)</changelog>
  <changelog author="aplanas@suse.com" date="1645704000">- Drop patches beacuse merged upstream:
  * version.diff
  * cloud_verifier_tornado-use-fork_processes.patch
- Drop binaries not used anymore:
  * keylime_provider_platform_init
  * keylime_provider_registrar
  * keylime_provider_vtpm_add
- Update to version v6.3.1:
  * revocation_notifier: mark webhook threads as daemon and add timeout
  * Fix Packit CI test plan Summary
  * Enable Packit CI testing on CentOS Stream 8
  * Enable Packit CI testing on Fedora Rawhide
  * Remove last trace of TPM 1.2 (hopefully)
  * verifier: remove start_tornado() function
  * verifier: wait for connections to be closed before stopping ioloop
  * revocation_notifier: kill ZeroMQ broker if it blocks more than 5s
  * Add more e2e tests to Packit CI
  * Enable EPEL repo on CentOS Stream in packit.yaml
  * agent, crypto: add localhost, server and contact ip to agent certificate
  * Add better default repo path for run_local.sh
  * Fix incorrect variable name in test_restful
  * Run existing agent tests against the rust-keylime agent
  * Fix small wording mistakes caught while reading the code
  * agent: move key and certificate logging levels from debug to info
  * agent: allow absolute paths for rsa_keyname and mtls_cert
  * Add missing backend parameter
  * cloud_verifier_tornado: use fork_processes
  * ci: automatically push release to PyPI
  * setup.{py,cfg}: Move setup configuration to setup.cfg
  * Add iproute tool to Dockerfile
  * Pylint does not like single-line functions.
  * A small beauty fix
  * This is a small fix to proactively fix Issue #840 by identifying non-escaped double quotes in the tpm2-tools output
  * setup.py: add version number and new Python versions, drop unsed binaries
  * setup.py, config: install default configuration into package path
  * ci: move old keylime.conf to keylime.conf.orig before running tests
  * retry: fix pylint issue
  * Adding Infineon Optiga 034 RSA and ECC certificates for Infineon SLB9675 devices.
  * Ensure columns "mb_refstate" and "allowlist" are of type LONGTEXT in table "verifiermain"
  * tenant: add exponential backoff option to retry timings
  * cloud verifier: add exponential backoff option to retry timings
  * tpm: add exponential backoff option to retry timings
  * test, retry: add unit test for retry algorithm
  * common: add algorithm for retry time calculation
  * registrar, tpm_main: ensure that correct types are commited to DB.
  * Fix typo for config param listen_notifications
  * Lint is _really_ unhappy today.
  * Linty fixes
  * Adding a unit test file for tpm_main
  * tpm_main: check if PCRs for the hash algorithm are available
  * tpm_main: handle if tpm2_checkquote returns no PCRs for a hash algorithm
  * agent: output supported_version as result not as a status
  * Add missing subcommands to -c help message
  * tests: fix mtls_cert generation in test_restful.py
  * revocation_notifier: fix socket path permission check
  * Remove unused database_query config param
  * Move umask calls only on entry points
  * config: move directory utilities to fs_util</changelog>
  <changelog author="aplanas@suse.com" date="1645704001">- Add upstream patches:
  * drop_privileges_of_agent_process_after_startup.patch
  * config_fix_config_search_order.patch
  * services_add_keylime_agent_secure_mount_service.patch
- Configure the agent to run as non-root (via keylime.conf)
- Add keylime sysuser conf file and deploy as part of the tpm
  certificate subpackage
- Prepare the systemd mount unit for /var/lib/keylime/secure</changelog>
  <changelog author="aplanas@suse.com" date="1649851200">- Update to version v6.3.2:
  * general: bump Keylime version to 6.3.2
  * tpm_main: flush transient objects
  * pypi: add notice that the Python API is unstable
  * installer: use OpenSSL by default
  * Avoid mounting secdir while unmounting it
  * remove TPM, VTPM and IMA stubbing support
  * archive: remove all archive files
  * Change GH reviewers to be from developer group
  * added suse / opensuse support with zypper
  * Fix tpm import in test_tpm.py
  * Fix cfssl configuration in run_tests.sh
  * tpm_emulator: improve TPM emulator installation
  * config: Add option to enable DB debugging via DEBUG_DB env var
  * Enable SQL query cache for JSONPickleType
  * tpm_emulator: move everything into systemd services
  * Implement broader key support for Keylime's signing mechanisms
  * tenant: Use exponential backoff on key verification retries
  * tenant: Move JSON parsing to capture possible exceptions
  * tenant: Move verifier stop from do_quote to do_verify
  * pylint: Fix issues related to W0602 global-variable-not-assigned
  * tenant: Handle 404 error from registrar gracefully
  * pylint: Fix remaining code with issue R1732 consider-using-with
  * pylint: Fix R1732 consider-using-with
  * pylint: Fix issue detected by pylint-2.13.0
  * pylint: Fix issue detected by pylint-2.13.0
  * tenant: verify agent quote before adding to verifier
  * README: remove tpm2-abrmd and OSX sections
  * pylint: Fix issues related to W0102 dangerous-default-value
  * pylint: Fix R0201 no-self-use
  * pylint: remove W1203 logging-format-interpolation from ignore list
  * pylint: remove R1729 use-a-generator from ignore list
  * pylint: remove E1120 no-value-for-parameter from ignore list
  * pylint: remove W1201 logging-not-lazy from ignore list
  * pylint: fix C0209 consider-using-f-string
  * pylint: fix C0201 consider-iterating-dictionary
  * pylint: fix W1509 subprocess-popen-preexec-fn
  * keylime_tenant non-zero exit code on error
  * Fix prepare step adjustments in packit-ci.fmf plan
  * failure: fix Pattern type hint
  * mypy: add initial Mypy configuration
  * ima_ast: add type hints
  * failure: add type hints
  * logging, config: add type hints for logging module
  * algorithms: add type hints
  * json: add type hints and add JSONType as custom type
  * Full allowlist processing when not adding host
  * provider, vTPM: remove vTPM manager and provider code
  * tpm: fix that the set of missing PCRs is not serializable in failure
  * Restores the option to use keylime agents without mTLS
  * services: make the services run as keylime user instead of root
  * State in --help that SHA-256 is used for --allowlist-checksum
  * config: change cacert.pem to cacert.crt
  * registrar_client: validate connections against registrar ca certificate
  * tenant: validate connections against verifier ca certificate
  * request_client: only add custom adapter if TLS is enabled
  * setup: add static assets for webapp
  * Add TESTING.md describing testing details
  * Fix some remaining log format strings
  * Fix for database_url parameter with sqlite
  * Enable test basic-attestation-with-unpriviledged-agent in Packit CI
  * Use lazy string formatting when logging (#535)
  * Make Packit CI plan more resource-saving
  * keylime.conf: Document setting ownership in WORK_DIR (/var/lib/keylime)
  * agent: Make sure tmpfs is empty even if not mounted or cannot unmount
  * agent: Drop privileges by switching to normal user and group
  * agent: Move mounting of tmpfs towards beginning of main()
  * agent: Read measured boot log near process start
  * agent: Open file for IMA log file near process start
  * ima: Refactor read_measurement_list() to take file as argument
  * Add the policy name to failure event
  * tpm_main: Check if tpm_cert_store exists (#553)
  * Remove tag input from container build workflow
  * Push container images to quay.io/keylime org
  * Enable code coverage measurement for e2e tests in Packit CI
  * config: fix config search order
  * Add defaults for ephemeral keys for agent records
  * Update outdated greetings Github messages
  * services: add keylime_agent_secure.mount service
  * installer.sh: updated tpm2-{tools, tss}, use system packages if possible
  * revocation_notifier: convert the data to str in the notifiers
  * revocation_notifier: mark webhook threads as daemon and add timeout
  * Fix Packit CI test plan Summary
  * Enable Packit CI testing on CentOS Stream 8
  * Enable Packit CI testing on Fedora Rawhide
  * Remove last trace of TPM 1.2 (hopefully)
  * verifier: remove start_tornado() function
  * verifier: wait for connections to be closed before stopping ioloop
  * revocation_notifier: kill ZeroMQ broker if it blocks more than 5s
  * Add more e2e tests to Packit CI
  * Enable EPEL repo on CentOS Stream in packit.yaml
- Drop already merged patches
  * drop_privileges_of_agent_process_after_startup.patch
  * config_fix_config_search_order.patch
  * services_add_keylime_agent_secure_mount_service.patch</changelog>
  <changelog author="aplanas@suse.com" date="1652875200">- Fix "run_as" configuration parameter and set it to keylime:tss
- Improve downgrade user migration during package update
- Add patches (CVE-2022-1053, boo#1199253):
  + CVE-2022-1053-01.patch
  + CVE-2022-1053-02.patch
  + CVE-2022-1053-03.patch
  + CVE-2022-1053-04.patch</changelog>
  <changelog author="aplanas@suse.com" date="1655985600">- Remove user downgrade mechanism from the package (CVE-2022-31250, bsc#1200885)</changelog>
  <changelog author="aplanas@suse.com" date="1657800000">- Use chown -h to adjust persmissions for downgrade migration.  This
  skip following symlinks and make the migration possible
  (bsc#1201466)
- Add logrotate configuration for the services
- Create run directory as non-root user
- Conflict with rust-keylime
- Consolidate in _distconfdir when possible
- Add fix_exit.diff patch, to exit properly in SLE</changelog>
  <changelog author="aplanas@suse.com" date="1658836800">- Drop cfssl default in keylime.conf patch (bsc#1201866)</changelog>
  <changelog author="aplanas@suse.com" date="1666785600">- Backport CVE-2022-3500.patch (CVE-2022-3500) (bsc#1204782)
  + Moderate vulnerability where a node can seems as attested when in
    reality it is not properly attested</changelog>
  <changelog author="aplanas@suse.com" date="1690977600">- Backport patches to avoid DoS via SSL (CVE-2023-38200, boo#1213310)
  + CVE-2023-38200-01.patch
  + CVE-2023-38200-02.patch
  + CVE-2023-38200-03.patch</changelog>
  <changelog author="aplanas@suse.com" date="1692878400">- Backport patch to avoid the leak of the authorization tag
  (CVE-2023-38201, boo#1213314)
  + CVE-2023-38201.patch</changelog>
  <changelog author="aplanas@suse.com" date="1768305600">- Backport patch to avoid re-registration of clients with same UUID
  but with different TPM identity (CVE-2025-13609, bsc#1254199)
  + CVE-2025-13609.patch</changelog>
</package>
<package pkgid="d92ecb809db57c9515c527e4fb58d75965311020da22114c7bb64a5f5c1385a7" name="keylime-logrotate" arch="noarch">
  <version epoch="0" ver="6.3.2" rel="150400.4.23.1"/>
  <changelog author="aplanas@suse.com" date="1639483200">- Requires python-psutil
- Disable automatic execution of the payload by default
- Use ramdom UUID by default</changelog>
  <changelog author="aplanas@suse.com" date="1639569600">- Fix keylime configuration file attributes</changelog>
  <changelog author="aplanas@suse.com" date="1641816000">- Update to version v6.2.1:
  * Another addition to gitignore
  * Update .gitignore with more Keylime-specific files
  * json: add support for sqlalchemy.engine.row.Row in newer sqlalchemy
  * ima_ast: check if the PCR is the same as in the config
  * Fix permissions issue on volume mount in run_local.sh
  * Make run_local.sh use a local copy of the repo
  * Small updates to GOVERNANCE.md
  * Move cargo-tarpaulin install to separate command
  * config: drop registrar_* TLS options in [registrar] section
  * Fix missing &amp;&amp; in Dockerfile
  * Remove simplejson from scripts and docs
  * Replace simplejson with built-in json module
  * Add rust-keylime container dependencies
  * config: fix getboolean with fallback
  * Clean up CI scripts and rewrite run_local.sh
  * ima: for ToMToU errors skip template content validation
  * ima: Use a set of entry numbers and file offsets to remember multiple positions
  * Rename CONTRIBUTORS.md to CONTRIBUTING.md
  * Update GOVERNANCE.md to match MAINTAINERS.md rename
  * Update MAINTAINERS
  * Update README: remove Gitter, Travis CI
  * ca: Use UTC when setting certificate validity
  * Tenant commands return json
  * scripts: Allow passing a base policy to create_policy tool
  * ima: Handle the case of ima-sig with a path with spaces in them
  * add length to string object
  * scripts: Implement create_policy to create the JSON allowlist from files
  * ima: Also add a sha256 default boot_aggregate hash with 64 '0's
  * ima: Use seek() to get to the last known last entry
  * ima: Extend allowlist to be able to handle generic ima-buf entries
  * ima: Extend JSON allowlist with 'ima' entry and 'ignored_keyrings'
  * ima: Populate verifier keyrings with keys taken from ima-buf log line
  * ima: Remove methods from ImaKeyring that are now in ImaKeyrings
  * ima: Start passing ima_keyrings through APIs replacing ima_keyring
  * Extend AgentAttestState with ima_keyrings field and use it
  * ima: Implement ImaKeyrings class to support multiple keyrings
  * verifier: Extend verifier DB to persist learned keyrings
  * Fix a couple of pylint errors
  * ima: Fix spurious attestation failures
  * ima: make ToMToU errors not a failure by default
  * Simple fix for tenant error message printout.
  * pylint: Fix errors related to R1714
  * pylint: Suppress C0201, C0209 and W0602 newly reported errors
  * installer: do not install tpm2-abrmd
  * tpm: by default use /dev/tpmrm0 instead of tpm2-abrmd
  * verifier: add option to send revocation messages via webhook</changelog>
  <changelog author="aplanas@suse.com" date="1641902400">- Fix cfssl bcond logic in Tumbleweed / SLE</changelog>
  <changelog author="aplanas@suse.com" date="1641902401">- Add 0001-Drop-dataclasses-module-usage.patch, to support Python 3.6</changelog>
  <changelog author="aplanas@suse.com" date="1642507200">- Add 0001-config-support-merge-multiple-config-files.patch
  This will allow the merge of config files in /usr/etc and /etc.
- Move the configuration file to /usr/etc in new distributions
- Add 0001-ca-support-back-old-cyptography-API.patch
  This is only required for SLE, but the API is compatible with new versions</changelog>
  <changelog author="aplanas@suse.com" date="1643112000">- Set /var/lib/keylime under the same permissions expected by the code</changelog>
  <changelog author="aplanas@suse.com" date="1643284800">- Drop patches beacuse merged upstream:
  * 0001-Drop-dataclasses-module-usage.patch
  * 0001-config-support-merge-multiple-config-files.patch
  * 0001-ca-support-back-old-cyptography-API.patch
- Update to version v6.3.0:
  * Coordinated update to fix:
    + bsc#1193997 (CVE-2022-23948)
    + bsc#1193998 (CVE-2021-43310)
    + bsc#1194000 (CVE-2022-23949)
    + bsc#1194002 (CVE-2022-23950)
    + bsc#1194004 (CVE-2022-23951)
    + bsc#1194005 (CVE-2022-23952)
  * secure_mount: add umount function
  * secure_mount: use /proc/self/mountinfo
  * Validate user ID in all public interfaces
  * validators: add uuid and agent_id validators
  * validators: create validators module
  * revocation_notifier: move zmq socket to /var/run/keylime
  * Update API version from 1.0 to 2.0
  * tpm: do not compress quote with zlib by default
  * verifier: persist AK and mTLS certificate to DB
  * verifier: use "supported_version" for agent connections
  * tenant: add support for "supported_version" option for the verifier
  * api_version: add the option for basic validation
  * verifier: add supported_version field to DB and API
  * agent: add /version to REST API
  * verifier, tenant: allow agents to not use mTLS
  * tenant, verifier: allow manual configuration of agent mTLS
  * tests: migrate to mTLS
  * tenant: connect to the agent via mTLS
  * verifier: connect to the agent via mTLS
  * tornado_requests: handle SSLError
  * web_util: add mTLS context generation for agent
  * agent: Enable mTLS for agent REST API
  * crypto: add helper function for creating self signed certs
  * registrar: Allow the agent to registrar with a mTLS certificate
  * request_client: add workaround for handling certificates
  * request_client: add the option to ignore hostname validation
  * Better docs and errors about IMA hash mismatches
  * tests: use JSON instead Python string for IMA tests
  * verifier: use json.loads(..) instead of ast.literal_eval(..)
  * Adding Nuvoton certificate for a post 2020 TPM device. The EK cert
    of the device directs to the following download site:
    'https://www.nuvoton.com/security/NTC-TPM-EK-Cert/Nuvoton TPM Root
    CA 1111.cer' (yes, including the spaces)
  * Improve revocation notifier IP description in keylime.conf
  * tornado_requests: set Content-Type header correctly for JSON
  * tenant: post U key to agent with correct Content-Type header
  * Explicitly set permissions on new keylime.conf files installed
  * tpm_main: close file descriptor for aik handle
  * verifier: do not call finish() twice
  * agent: fix payload execution
  * tests: add initial tests for web_util module
  * config, web_util: move get_restful_params(..) to web_util
  * verifier: Also retry on HTTP 500 status code
  * agent: improve startup and shutdown
  * registrar: cleanup start function
  * web_util: move echo_json_response(..) out of config.py
  * verifier: fix failure generation for V key
  * tornado_requests: cleanup TornadoResponse class
  * web_util, verifier: move mTLS SSLContext generation into separate module
  * ca: support back old cyptography API
  * Fix test branch reference in packit.yaml
  * ci: disable DeprecationWarning from pylint in tox
  * Enable new test in Packit CI
  * tenant: fix reactivate command
  * config: support merge multiple config files
  * ci: use only fedora-stable for packit
  * elchecking: harden example policy against event type manipulation
  * elchecking: add new tests
  * tests: fix stdout formatting for agent and verifier
  * Drop dataclasses module usage
  * revocation notifier: handle shutdown of process gracefully
  * verifier: handle SIGINT and SIGTERM correctly
  * ima_emulator: fix IMA hash validation and add more options
  * ima_ast: fix handling ToMToU errors
  * Remove leftovers of TPM 1.2 support
  * agent: improved validation for post function
  * agent: better validation for mask and nonce
  * config: add function to validate hex strings
  * agent: keys/verify check if challenge was provided
  * tpm_main: do not append /usr/local/{bin,lib} to default env
  * db: only set length on Text type if supported
  * json: do not make sqlalchemy a hard requirement
  * Enable functional testing with Packit CI
  * ima_emulator: specify sys.argv as the named parameter argv in main()
  * elchecking example policy: make it work with Fedora 34
  * elchecking example policy: initrd* might be also called initramfs*
  * scripts: add mb_refstate generator for example policy
  * config: change tpm_hash_alg to SHA1 by default
  * parse_mb_bootlog: specify the used hash algorithm used for PCRs
  * agent: add warning that on kernels &lt;5.10 IMA only works with SHA1
  * tpm: explicitly pass hash alg to sim_extend(..)
  * ima emulator: use IMA AST and support multiple hash algorithms
  * tests: update IMA allowlist version number
  * ima: add option 'log_hash_alg' to IMA allowlist
  * ima: remove hard requirement for SHA1 PCR 10
  * algorithms: extend Hash class to simplify computing hash values
  * config, tpm_main: explicitly handle YAML load errors
  * config: private_key must be set to -private.pem not -public.pem
  * agent: add UUID option environment
  * agent: drop openstack uuid option</changelog>
  <changelog author="aplanas@suse.com" date="1644235200">- Change back agent_uuid to hostname
- Set tpm_hash_alg to sha256 by default
- Update version.diff patch to point to the correct version number
- Fix issue with Tornado, when multiple workers are started
  * Add cloud_verifier_tornado-use-fork_processes.patch (bsc#1195605)</changelog>
  <changelog author="aplanas@suse.com" date="1645704000">- Drop patches beacuse merged upstream:
  * version.diff
  * cloud_verifier_tornado-use-fork_processes.patch
- Drop binaries not used anymore:
  * keylime_provider_platform_init
  * keylime_provider_registrar
  * keylime_provider_vtpm_add
- Update to version v6.3.1:
  * revocation_notifier: mark webhook threads as daemon and add timeout
  * Fix Packit CI test plan Summary
  * Enable Packit CI testing on CentOS Stream 8
  * Enable Packit CI testing on Fedora Rawhide
  * Remove last trace of TPM 1.2 (hopefully)
  * verifier: remove start_tornado() function
  * verifier: wait for connections to be closed before stopping ioloop
  * revocation_notifier: kill ZeroMQ broker if it blocks more than 5s
  * Add more e2e tests to Packit CI
  * Enable EPEL repo on CentOS Stream in packit.yaml
  * agent, crypto: add localhost, server and contact ip to agent certificate
  * Add better default repo path for run_local.sh
  * Fix incorrect variable name in test_restful
  * Run existing agent tests against the rust-keylime agent
  * Fix small wording mistakes caught while reading the code
  * agent: move key and certificate logging levels from debug to info
  * agent: allow absolute paths for rsa_keyname and mtls_cert
  * Add missing backend parameter
  * cloud_verifier_tornado: use fork_processes
  * ci: automatically push release to PyPI
  * setup.{py,cfg}: Move setup configuration to setup.cfg
  * Add iproute tool to Dockerfile
  * Pylint does not like single-line functions.
  * A small beauty fix
  * This is a small fix to proactively fix Issue #840 by identifying non-escaped double quotes in the tpm2-tools output
  * setup.py: add version number and new Python versions, drop unsed binaries
  * setup.py, config: install default configuration into package path
  * ci: move old keylime.conf to keylime.conf.orig before running tests
  * retry: fix pylint issue
  * Adding Infineon Optiga 034 RSA and ECC certificates for Infineon SLB9675 devices.
  * Ensure columns "mb_refstate" and "allowlist" are of type LONGTEXT in table "verifiermain"
  * tenant: add exponential backoff option to retry timings
  * cloud verifier: add exponential backoff option to retry timings
  * tpm: add exponential backoff option to retry timings
  * test, retry: add unit test for retry algorithm
  * common: add algorithm for retry time calculation
  * registrar, tpm_main: ensure that correct types are commited to DB.
  * Fix typo for config param listen_notifications
  * Lint is _really_ unhappy today.
  * Linty fixes
  * Adding a unit test file for tpm_main
  * tpm_main: check if PCRs for the hash algorithm are available
  * tpm_main: handle if tpm2_checkquote returns no PCRs for a hash algorithm
  * agent: output supported_version as result not as a status
  * Add missing subcommands to -c help message
  * tests: fix mtls_cert generation in test_restful.py
  * revocation_notifier: fix socket path permission check
  * Remove unused database_query config param
  * Move umask calls only on entry points
  * config: move directory utilities to fs_util</changelog>
  <changelog author="aplanas@suse.com" date="1645704001">- Add upstream patches:
  * drop_privileges_of_agent_process_after_startup.patch
  * config_fix_config_search_order.patch
  * services_add_keylime_agent_secure_mount_service.patch
- Configure the agent to run as non-root (via keylime.conf)
- Add keylime sysuser conf file and deploy as part of the tpm
  certificate subpackage
- Prepare the systemd mount unit for /var/lib/keylime/secure</changelog>
  <changelog author="aplanas@suse.com" date="1649851200">- Update to version v6.3.2:
  * general: bump Keylime version to 6.3.2
  * tpm_main: flush transient objects
  * pypi: add notice that the Python API is unstable
  * installer: use OpenSSL by default
  * Avoid mounting secdir while unmounting it
  * remove TPM, VTPM and IMA stubbing support
  * archive: remove all archive files
  * Change GH reviewers to be from developer group
  * added suse / opensuse support with zypper
  * Fix tpm import in test_tpm.py
  * Fix cfssl configuration in run_tests.sh
  * tpm_emulator: improve TPM emulator installation
  * config: Add option to enable DB debugging via DEBUG_DB env var
  * Enable SQL query cache for JSONPickleType
  * tpm_emulator: move everything into systemd services
  * Implement broader key support for Keylime's signing mechanisms
  * tenant: Use exponential backoff on key verification retries
  * tenant: Move JSON parsing to capture possible exceptions
  * tenant: Move verifier stop from do_quote to do_verify
  * pylint: Fix issues related to W0602 global-variable-not-assigned
  * tenant: Handle 404 error from registrar gracefully
  * pylint: Fix remaining code with issue R1732 consider-using-with
  * pylint: Fix R1732 consider-using-with
  * pylint: Fix issue detected by pylint-2.13.0
  * pylint: Fix issue detected by pylint-2.13.0
  * tenant: verify agent quote before adding to verifier
  * README: remove tpm2-abrmd and OSX sections
  * pylint: Fix issues related to W0102 dangerous-default-value
  * pylint: Fix R0201 no-self-use
  * pylint: remove W1203 logging-format-interpolation from ignore list
  * pylint: remove R1729 use-a-generator from ignore list
  * pylint: remove E1120 no-value-for-parameter from ignore list
  * pylint: remove W1201 logging-not-lazy from ignore list
  * pylint: fix C0209 consider-using-f-string
  * pylint: fix C0201 consider-iterating-dictionary
  * pylint: fix W1509 subprocess-popen-preexec-fn
  * keylime_tenant non-zero exit code on error
  * Fix prepare step adjustments in packit-ci.fmf plan
  * failure: fix Pattern type hint
  * mypy: add initial Mypy configuration
  * ima_ast: add type hints
  * failure: add type hints
  * logging, config: add type hints for logging module
  * algorithms: add type hints
  * json: add type hints and add JSONType as custom type
  * Full allowlist processing when not adding host
  * provider, vTPM: remove vTPM manager and provider code
  * tpm: fix that the set of missing PCRs is not serializable in failure
  * Restores the option to use keylime agents without mTLS
  * services: make the services run as keylime user instead of root
  * State in --help that SHA-256 is used for --allowlist-checksum
  * config: change cacert.pem to cacert.crt
  * registrar_client: validate connections against registrar ca certificate
  * tenant: validate connections against verifier ca certificate
  * request_client: only add custom adapter if TLS is enabled
  * setup: add static assets for webapp
  * Add TESTING.md describing testing details
  * Fix some remaining log format strings
  * Fix for database_url parameter with sqlite
  * Enable test basic-attestation-with-unpriviledged-agent in Packit CI
  * Use lazy string formatting when logging (#535)
  * Make Packit CI plan more resource-saving
  * keylime.conf: Document setting ownership in WORK_DIR (/var/lib/keylime)
  * agent: Make sure tmpfs is empty even if not mounted or cannot unmount
  * agent: Drop privileges by switching to normal user and group
  * agent: Move mounting of tmpfs towards beginning of main()
  * agent: Read measured boot log near process start
  * agent: Open file for IMA log file near process start
  * ima: Refactor read_measurement_list() to take file as argument
  * Add the policy name to failure event
  * tpm_main: Check if tpm_cert_store exists (#553)
  * Remove tag input from container build workflow
  * Push container images to quay.io/keylime org
  * Enable code coverage measurement for e2e tests in Packit CI
  * config: fix config search order
  * Add defaults for ephemeral keys for agent records
  * Update outdated greetings Github messages
  * services: add keylime_agent_secure.mount service
  * installer.sh: updated tpm2-{tools, tss}, use system packages if possible
  * revocation_notifier: convert the data to str in the notifiers
  * revocation_notifier: mark webhook threads as daemon and add timeout
  * Fix Packit CI test plan Summary
  * Enable Packit CI testing on CentOS Stream 8
  * Enable Packit CI testing on Fedora Rawhide
  * Remove last trace of TPM 1.2 (hopefully)
  * verifier: remove start_tornado() function
  * verifier: wait for connections to be closed before stopping ioloop
  * revocation_notifier: kill ZeroMQ broker if it blocks more than 5s
  * Add more e2e tests to Packit CI
  * Enable EPEL repo on CentOS Stream in packit.yaml
- Drop already merged patches
  * drop_privileges_of_agent_process_after_startup.patch
  * config_fix_config_search_order.patch
  * services_add_keylime_agent_secure_mount_service.patch</changelog>
  <changelog author="aplanas@suse.com" date="1652875200">- Fix "run_as" configuration parameter and set it to keylime:tss
- Improve downgrade user migration during package update
- Add patches (CVE-2022-1053, boo#1199253):
  + CVE-2022-1053-01.patch
  + CVE-2022-1053-02.patch
  + CVE-2022-1053-03.patch
  + CVE-2022-1053-04.patch</changelog>
  <changelog author="aplanas@suse.com" date="1655985600">- Remove user downgrade mechanism from the package (CVE-2022-31250, bsc#1200885)</changelog>
  <changelog author="aplanas@suse.com" date="1657800000">- Use chown -h to adjust persmissions for downgrade migration.  This
  skip following symlinks and make the migration possible
  (bsc#1201466)
- Add logrotate configuration for the services
- Create run directory as non-root user
- Conflict with rust-keylime
- Consolidate in _distconfdir when possible
- Add fix_exit.diff patch, to exit properly in SLE</changelog>
  <changelog author="aplanas@suse.com" date="1658836800">- Drop cfssl default in keylime.conf patch (bsc#1201866)</changelog>
  <changelog author="aplanas@suse.com" date="1666785600">- Backport CVE-2022-3500.patch (CVE-2022-3500) (bsc#1204782)
  + Moderate vulnerability where a node can seems as attested when in
    reality it is not properly attested</changelog>
  <changelog author="aplanas@suse.com" date="1690977600">- Backport patches to avoid DoS via SSL (CVE-2023-38200, boo#1213310)
  + CVE-2023-38200-01.patch
  + CVE-2023-38200-02.patch
  + CVE-2023-38200-03.patch</changelog>
  <changelog author="aplanas@suse.com" date="1692878400">- Backport patch to avoid the leak of the authorization tag
  (CVE-2023-38201, boo#1213314)
  + CVE-2023-38201.patch</changelog>
  <changelog author="aplanas@suse.com" date="1768305600">- Backport patch to avoid re-registration of clients with same UUID
  but with different TPM identity (CVE-2025-13609, bsc#1254199)
  + CVE-2025-13609.patch</changelog>
</package>
<package pkgid="ea221eb0537ea0b673359fde2b9a0d006260b1f2b893786e369bfa67512ae7db" name="keylime-registrar" arch="noarch">
  <version epoch="0" ver="6.3.2" rel="150400.4.23.1"/>
  <changelog author="aplanas@suse.com" date="1639483200">- Requires python-psutil
- Disable automatic execution of the payload by default
- Use ramdom UUID by default</changelog>
  <changelog author="aplanas@suse.com" date="1639569600">- Fix keylime configuration file attributes</changelog>
  <changelog author="aplanas@suse.com" date="1641816000">- Update to version v6.2.1:
  * Another addition to gitignore
  * Update .gitignore with more Keylime-specific files
  * json: add support for sqlalchemy.engine.row.Row in newer sqlalchemy
  * ima_ast: check if the PCR is the same as in the config
  * Fix permissions issue on volume mount in run_local.sh
  * Make run_local.sh use a local copy of the repo
  * Small updates to GOVERNANCE.md
  * Move cargo-tarpaulin install to separate command
  * config: drop registrar_* TLS options in [registrar] section
  * Fix missing &amp;&amp; in Dockerfile
  * Remove simplejson from scripts and docs
  * Replace simplejson with built-in json module
  * Add rust-keylime container dependencies
  * config: fix getboolean with fallback
  * Clean up CI scripts and rewrite run_local.sh
  * ima: for ToMToU errors skip template content validation
  * ima: Use a set of entry numbers and file offsets to remember multiple positions
  * Rename CONTRIBUTORS.md to CONTRIBUTING.md
  * Update GOVERNANCE.md to match MAINTAINERS.md rename
  * Update MAINTAINERS
  * Update README: remove Gitter, Travis CI
  * ca: Use UTC when setting certificate validity
  * Tenant commands return json
  * scripts: Allow passing a base policy to create_policy tool
  * ima: Handle the case of ima-sig with a path with spaces in them
  * add length to string object
  * scripts: Implement create_policy to create the JSON allowlist from files
  * ima: Also add a sha256 default boot_aggregate hash with 64 '0's
  * ima: Use seek() to get to the last known last entry
  * ima: Extend allowlist to be able to handle generic ima-buf entries
  * ima: Extend JSON allowlist with 'ima' entry and 'ignored_keyrings'
  * ima: Populate verifier keyrings with keys taken from ima-buf log line
  * ima: Remove methods from ImaKeyring that are now in ImaKeyrings
  * ima: Start passing ima_keyrings through APIs replacing ima_keyring
  * Extend AgentAttestState with ima_keyrings field and use it
  * ima: Implement ImaKeyrings class to support multiple keyrings
  * verifier: Extend verifier DB to persist learned keyrings
  * Fix a couple of pylint errors
  * ima: Fix spurious attestation failures
  * ima: make ToMToU errors not a failure by default
  * Simple fix for tenant error message printout.
  * pylint: Fix errors related to R1714
  * pylint: Suppress C0201, C0209 and W0602 newly reported errors
  * installer: do not install tpm2-abrmd
  * tpm: by default use /dev/tpmrm0 instead of tpm2-abrmd
  * verifier: add option to send revocation messages via webhook</changelog>
  <changelog author="aplanas@suse.com" date="1641902400">- Fix cfssl bcond logic in Tumbleweed / SLE</changelog>
  <changelog author="aplanas@suse.com" date="1641902401">- Add 0001-Drop-dataclasses-module-usage.patch, to support Python 3.6</changelog>
  <changelog author="aplanas@suse.com" date="1642507200">- Add 0001-config-support-merge-multiple-config-files.patch
  This will allow the merge of config files in /usr/etc and /etc.
- Move the configuration file to /usr/etc in new distributions
- Add 0001-ca-support-back-old-cyptography-API.patch
  This is only required for SLE, but the API is compatible with new versions</changelog>
  <changelog author="aplanas@suse.com" date="1643112000">- Set /var/lib/keylime under the same permissions expected by the code</changelog>
  <changelog author="aplanas@suse.com" date="1643284800">- Drop patches beacuse merged upstream:
  * 0001-Drop-dataclasses-module-usage.patch
  * 0001-config-support-merge-multiple-config-files.patch
  * 0001-ca-support-back-old-cyptography-API.patch
- Update to version v6.3.0:
  * Coordinated update to fix:
    + bsc#1193997 (CVE-2022-23948)
    + bsc#1193998 (CVE-2021-43310)
    + bsc#1194000 (CVE-2022-23949)
    + bsc#1194002 (CVE-2022-23950)
    + bsc#1194004 (CVE-2022-23951)
    + bsc#1194005 (CVE-2022-23952)
  * secure_mount: add umount function
  * secure_mount: use /proc/self/mountinfo
  * Validate user ID in all public interfaces
  * validators: add uuid and agent_id validators
  * validators: create validators module
  * revocation_notifier: move zmq socket to /var/run/keylime
  * Update API version from 1.0 to 2.0
  * tpm: do not compress quote with zlib by default
  * verifier: persist AK and mTLS certificate to DB
  * verifier: use "supported_version" for agent connections
  * tenant: add support for "supported_version" option for the verifier
  * api_version: add the option for basic validation
  * verifier: add supported_version field to DB and API
  * agent: add /version to REST API
  * verifier, tenant: allow agents to not use mTLS
  * tenant, verifier: allow manual configuration of agent mTLS
  * tests: migrate to mTLS
  * tenant: connect to the agent via mTLS
  * verifier: connect to the agent via mTLS
  * tornado_requests: handle SSLError
  * web_util: add mTLS context generation for agent
  * agent: Enable mTLS for agent REST API
  * crypto: add helper function for creating self signed certs
  * registrar: Allow the agent to registrar with a mTLS certificate
  * request_client: add workaround for handling certificates
  * request_client: add the option to ignore hostname validation
  * Better docs and errors about IMA hash mismatches
  * tests: use JSON instead Python string for IMA tests
  * verifier: use json.loads(..) instead of ast.literal_eval(..)
  * Adding Nuvoton certificate for a post 2020 TPM device. The EK cert
    of the device directs to the following download site:
    'https://www.nuvoton.com/security/NTC-TPM-EK-Cert/Nuvoton TPM Root
    CA 1111.cer' (yes, including the spaces)
  * Improve revocation notifier IP description in keylime.conf
  * tornado_requests: set Content-Type header correctly for JSON
  * tenant: post U key to agent with correct Content-Type header
  * Explicitly set permissions on new keylime.conf files installed
  * tpm_main: close file descriptor for aik handle
  * verifier: do not call finish() twice
  * agent: fix payload execution
  * tests: add initial tests for web_util module
  * config, web_util: move get_restful_params(..) to web_util
  * verifier: Also retry on HTTP 500 status code
  * agent: improve startup and shutdown
  * registrar: cleanup start function
  * web_util: move echo_json_response(..) out of config.py
  * verifier: fix failure generation for V key
  * tornado_requests: cleanup TornadoResponse class
  * web_util, verifier: move mTLS SSLContext generation into separate module
  * ca: support back old cyptography API
  * Fix test branch reference in packit.yaml
  * ci: disable DeprecationWarning from pylint in tox
  * Enable new test in Packit CI
  * tenant: fix reactivate command
  * config: support merge multiple config files
  * ci: use only fedora-stable for packit
  * elchecking: harden example policy against event type manipulation
  * elchecking: add new tests
  * tests: fix stdout formatting for agent and verifier
  * Drop dataclasses module usage
  * revocation notifier: handle shutdown of process gracefully
  * verifier: handle SIGINT and SIGTERM correctly
  * ima_emulator: fix IMA hash validation and add more options
  * ima_ast: fix handling ToMToU errors
  * Remove leftovers of TPM 1.2 support
  * agent: improved validation for post function
  * agent: better validation for mask and nonce
  * config: add function to validate hex strings
  * agent: keys/verify check if challenge was provided
  * tpm_main: do not append /usr/local/{bin,lib} to default env
  * db: only set length on Text type if supported
  * json: do not make sqlalchemy a hard requirement
  * Enable functional testing with Packit CI
  * ima_emulator: specify sys.argv as the named parameter argv in main()
  * elchecking example policy: make it work with Fedora 34
  * elchecking example policy: initrd* might be also called initramfs*
  * scripts: add mb_refstate generator for example policy
  * config: change tpm_hash_alg to SHA1 by default
  * parse_mb_bootlog: specify the used hash algorithm used for PCRs
  * agent: add warning that on kernels &lt;5.10 IMA only works with SHA1
  * tpm: explicitly pass hash alg to sim_extend(..)
  * ima emulator: use IMA AST and support multiple hash algorithms
  * tests: update IMA allowlist version number
  * ima: add option 'log_hash_alg' to IMA allowlist
  * ima: remove hard requirement for SHA1 PCR 10
  * algorithms: extend Hash class to simplify computing hash values
  * config, tpm_main: explicitly handle YAML load errors
  * config: private_key must be set to -private.pem not -public.pem
  * agent: add UUID option environment
  * agent: drop openstack uuid option</changelog>
  <changelog author="aplanas@suse.com" date="1644235200">- Change back agent_uuid to hostname
- Set tpm_hash_alg to sha256 by default
- Update version.diff patch to point to the correct version number
- Fix issue with Tornado, when multiple workers are started
  * Add cloud_verifier_tornado-use-fork_processes.patch (bsc#1195605)</changelog>
  <changelog author="aplanas@suse.com" date="1645704000">- Drop patches beacuse merged upstream:
  * version.diff
  * cloud_verifier_tornado-use-fork_processes.patch
- Drop binaries not used anymore:
  * keylime_provider_platform_init
  * keylime_provider_registrar
  * keylime_provider_vtpm_add
- Update to version v6.3.1:
  * revocation_notifier: mark webhook threads as daemon and add timeout
  * Fix Packit CI test plan Summary
  * Enable Packit CI testing on CentOS Stream 8
  * Enable Packit CI testing on Fedora Rawhide
  * Remove last trace of TPM 1.2 (hopefully)
  * verifier: remove start_tornado() function
  * verifier: wait for connections to be closed before stopping ioloop
  * revocation_notifier: kill ZeroMQ broker if it blocks more than 5s
  * Add more e2e tests to Packit CI
  * Enable EPEL repo on CentOS Stream in packit.yaml
  * agent, crypto: add localhost, server and contact ip to agent certificate
  * Add better default repo path for run_local.sh
  * Fix incorrect variable name in test_restful
  * Run existing agent tests against the rust-keylime agent
  * Fix small wording mistakes caught while reading the code
  * agent: move key and certificate logging levels from debug to info
  * agent: allow absolute paths for rsa_keyname and mtls_cert
  * Add missing backend parameter
  * cloud_verifier_tornado: use fork_processes
  * ci: automatically push release to PyPI
  * setup.{py,cfg}: Move setup configuration to setup.cfg
  * Add iproute tool to Dockerfile
  * Pylint does not like single-line functions.
  * A small beauty fix
  * This is a small fix to proactively fix Issue #840 by identifying non-escaped double quotes in the tpm2-tools output
  * setup.py: add version number and new Python versions, drop unsed binaries
  * setup.py, config: install default configuration into package path
  * ci: move old keylime.conf to keylime.conf.orig before running tests
  * retry: fix pylint issue
  * Adding Infineon Optiga 034 RSA and ECC certificates for Infineon SLB9675 devices.
  * Ensure columns "mb_refstate" and "allowlist" are of type LONGTEXT in table "verifiermain"
  * tenant: add exponential backoff option to retry timings
  * cloud verifier: add exponential backoff option to retry timings
  * tpm: add exponential backoff option to retry timings
  * test, retry: add unit test for retry algorithm
  * common: add algorithm for retry time calculation
  * registrar, tpm_main: ensure that correct types are commited to DB.
  * Fix typo for config param listen_notifications
  * Lint is _really_ unhappy today.
  * Linty fixes
  * Adding a unit test file for tpm_main
  * tpm_main: check if PCRs for the hash algorithm are available
  * tpm_main: handle if tpm2_checkquote returns no PCRs for a hash algorithm
  * agent: output supported_version as result not as a status
  * Add missing subcommands to -c help message
  * tests: fix mtls_cert generation in test_restful.py
  * revocation_notifier: fix socket path permission check
  * Remove unused database_query config param
  * Move umask calls only on entry points
  * config: move directory utilities to fs_util</changelog>
  <changelog author="aplanas@suse.com" date="1645704001">- Add upstream patches:
  * drop_privileges_of_agent_process_after_startup.patch
  * config_fix_config_search_order.patch
  * services_add_keylime_agent_secure_mount_service.patch
- Configure the agent to run as non-root (via keylime.conf)
- Add keylime sysuser conf file and deploy as part of the tpm
  certificate subpackage
- Prepare the systemd mount unit for /var/lib/keylime/secure</changelog>
  <changelog author="aplanas@suse.com" date="1649851200">- Update to version v6.3.2:
  * general: bump Keylime version to 6.3.2
  * tpm_main: flush transient objects
  * pypi: add notice that the Python API is unstable
  * installer: use OpenSSL by default
  * Avoid mounting secdir while unmounting it
  * remove TPM, VTPM and IMA stubbing support
  * archive: remove all archive files
  * Change GH reviewers to be from developer group
  * added suse / opensuse support with zypper
  * Fix tpm import in test_tpm.py
  * Fix cfssl configuration in run_tests.sh
  * tpm_emulator: improve TPM emulator installation
  * config: Add option to enable DB debugging via DEBUG_DB env var
  * Enable SQL query cache for JSONPickleType
  * tpm_emulator: move everything into systemd services
  * Implement broader key support for Keylime's signing mechanisms
  * tenant: Use exponential backoff on key verification retries
  * tenant: Move JSON parsing to capture possible exceptions
  * tenant: Move verifier stop from do_quote to do_verify
  * pylint: Fix issues related to W0602 global-variable-not-assigned
  * tenant: Handle 404 error from registrar gracefully
  * pylint: Fix remaining code with issue R1732 consider-using-with
  * pylint: Fix R1732 consider-using-with
  * pylint: Fix issue detected by pylint-2.13.0
  * pylint: Fix issue detected by pylint-2.13.0
  * tenant: verify agent quote before adding to verifier
  * README: remove tpm2-abrmd and OSX sections
  * pylint: Fix issues related to W0102 dangerous-default-value
  * pylint: Fix R0201 no-self-use
  * pylint: remove W1203 logging-format-interpolation from ignore list
  * pylint: remove R1729 use-a-generator from ignore list
  * pylint: remove E1120 no-value-for-parameter from ignore list
  * pylint: remove W1201 logging-not-lazy from ignore list
  * pylint: fix C0209 consider-using-f-string
  * pylint: fix C0201 consider-iterating-dictionary
  * pylint: fix W1509 subprocess-popen-preexec-fn
  * keylime_tenant non-zero exit code on error
  * Fix prepare step adjustments in packit-ci.fmf plan
  * failure: fix Pattern type hint
  * mypy: add initial Mypy configuration
  * ima_ast: add type hints
  * failure: add type hints
  * logging, config: add type hints for logging module
  * algorithms: add type hints
  * json: add type hints and add JSONType as custom type
  * Full allowlist processing when not adding host
  * provider, vTPM: remove vTPM manager and provider code
  * tpm: fix that the set of missing PCRs is not serializable in failure
  * Restores the option to use keylime agents without mTLS
  * services: make the services run as keylime user instead of root
  * State in --help that SHA-256 is used for --allowlist-checksum
  * config: change cacert.pem to cacert.crt
  * registrar_client: validate connections against registrar ca certificate
  * tenant: validate connections against verifier ca certificate
  * request_client: only add custom adapter if TLS is enabled
  * setup: add static assets for webapp
  * Add TESTING.md describing testing details
  * Fix some remaining log format strings
  * Fix for database_url parameter with sqlite
  * Enable test basic-attestation-with-unpriviledged-agent in Packit CI
  * Use lazy string formatting when logging (#535)
  * Make Packit CI plan more resource-saving
  * keylime.conf: Document setting ownership in WORK_DIR (/var/lib/keylime)
  * agent: Make sure tmpfs is empty even if not mounted or cannot unmount
  * agent: Drop privileges by switching to normal user and group
  * agent: Move mounting of tmpfs towards beginning of main()
  * agent: Read measured boot log near process start
  * agent: Open file for IMA log file near process start
  * ima: Refactor read_measurement_list() to take file as argument
  * Add the policy name to failure event
  * tpm_main: Check if tpm_cert_store exists (#553)
  * Remove tag input from container build workflow
  * Push container images to quay.io/keylime org
  * Enable code coverage measurement for e2e tests in Packit CI
  * config: fix config search order
  * Add defaults for ephemeral keys for agent records
  * Update outdated greetings Github messages
  * services: add keylime_agent_secure.mount service
  * installer.sh: updated tpm2-{tools, tss}, use system packages if possible
  * revocation_notifier: convert the data to str in the notifiers
  * revocation_notifier: mark webhook threads as daemon and add timeout
  * Fix Packit CI test plan Summary
  * Enable Packit CI testing on CentOS Stream 8
  * Enable Packit CI testing on Fedora Rawhide
  * Remove last trace of TPM 1.2 (hopefully)
  * verifier: remove start_tornado() function
  * verifier: wait for connections to be closed before stopping ioloop
  * revocation_notifier: kill ZeroMQ broker if it blocks more than 5s
  * Add more e2e tests to Packit CI
  * Enable EPEL repo on CentOS Stream in packit.yaml
- Drop already merged patches
  * drop_privileges_of_agent_process_after_startup.patch
  * config_fix_config_search_order.patch
  * services_add_keylime_agent_secure_mount_service.patch</changelog>
  <changelog author="aplanas@suse.com" date="1652875200">- Fix "run_as" configuration parameter and set it to keylime:tss
- Improve downgrade user migration during package update
- Add patches (CVE-2022-1053, boo#1199253):
  + CVE-2022-1053-01.patch
  + CVE-2022-1053-02.patch
  + CVE-2022-1053-03.patch
  + CVE-2022-1053-04.patch</changelog>
  <changelog author="aplanas@suse.com" date="1655985600">- Remove user downgrade mechanism from the package (CVE-2022-31250, bsc#1200885)</changelog>
  <changelog author="aplanas@suse.com" date="1657800000">- Use chown -h to adjust persmissions for downgrade migration.  This
  skip following symlinks and make the migration possible
  (bsc#1201466)
- Add logrotate configuration for the services
- Create run directory as non-root user
- Conflict with rust-keylime
- Consolidate in _distconfdir when possible
- Add fix_exit.diff patch, to exit properly in SLE</changelog>
  <changelog author="aplanas@suse.com" date="1658836800">- Drop cfssl default in keylime.conf patch (bsc#1201866)</changelog>
  <changelog author="aplanas@suse.com" date="1666785600">- Backport CVE-2022-3500.patch (CVE-2022-3500) (bsc#1204782)
  + Moderate vulnerability where a node can seems as attested when in
    reality it is not properly attested</changelog>
  <changelog author="aplanas@suse.com" date="1690977600">- Backport patches to avoid DoS via SSL (CVE-2023-38200, boo#1213310)
  + CVE-2023-38200-01.patch
  + CVE-2023-38200-02.patch
  + CVE-2023-38200-03.patch</changelog>
  <changelog author="aplanas@suse.com" date="1692878400">- Backport patch to avoid the leak of the authorization tag
  (CVE-2023-38201, boo#1213314)
  + CVE-2023-38201.patch</changelog>
  <changelog author="aplanas@suse.com" date="1768305600">- Backport patch to avoid re-registration of clients with same UUID
  but with different TPM identity (CVE-2025-13609, bsc#1254199)
  + CVE-2025-13609.patch</changelog>
</package>
<package pkgid="7970e8db0f8d8e7fbe6e39e2d6050effe04ac0d4b18b475516f232301f87fc26" name="keylime-tpm_cert_store" arch="noarch">
  <version epoch="0" ver="6.3.2" rel="150400.4.23.1"/>
  <changelog author="aplanas@suse.com" date="1639483200">- Requires python-psutil
- Disable automatic execution of the payload by default
- Use ramdom UUID by default</changelog>
  <changelog author="aplanas@suse.com" date="1639569600">- Fix keylime configuration file attributes</changelog>
  <changelog author="aplanas@suse.com" date="1641816000">- Update to version v6.2.1:
  * Another addition to gitignore
  * Update .gitignore with more Keylime-specific files
  * json: add support for sqlalchemy.engine.row.Row in newer sqlalchemy
  * ima_ast: check if the PCR is the same as in the config
  * Fix permissions issue on volume mount in run_local.sh
  * Make run_local.sh use a local copy of the repo
  * Small updates to GOVERNANCE.md
  * Move cargo-tarpaulin install to separate command
  * config: drop registrar_* TLS options in [registrar] section
  * Fix missing &amp;&amp; in Dockerfile
  * Remove simplejson from scripts and docs
  * Replace simplejson with built-in json module
  * Add rust-keylime container dependencies
  * config: fix getboolean with fallback
  * Clean up CI scripts and rewrite run_local.sh
  * ima: for ToMToU errors skip template content validation
  * ima: Use a set of entry numbers and file offsets to remember multiple positions
  * Rename CONTRIBUTORS.md to CONTRIBUTING.md
  * Update GOVERNANCE.md to match MAINTAINERS.md rename
  * Update MAINTAINERS
  * Update README: remove Gitter, Travis CI
  * ca: Use UTC when setting certificate validity
  * Tenant commands return json
  * scripts: Allow passing a base policy to create_policy tool
  * ima: Handle the case of ima-sig with a path with spaces in them
  * add length to string object
  * scripts: Implement create_policy to create the JSON allowlist from files
  * ima: Also add a sha256 default boot_aggregate hash with 64 '0's
  * ima: Use seek() to get to the last known last entry
  * ima: Extend allowlist to be able to handle generic ima-buf entries
  * ima: Extend JSON allowlist with 'ima' entry and 'ignored_keyrings'
  * ima: Populate verifier keyrings with keys taken from ima-buf log line
  * ima: Remove methods from ImaKeyring that are now in ImaKeyrings
  * ima: Start passing ima_keyrings through APIs replacing ima_keyring
  * Extend AgentAttestState with ima_keyrings field and use it
  * ima: Implement ImaKeyrings class to support multiple keyrings
  * verifier: Extend verifier DB to persist learned keyrings
  * Fix a couple of pylint errors
  * ima: Fix spurious attestation failures
  * ima: make ToMToU errors not a failure by default
  * Simple fix for tenant error message printout.
  * pylint: Fix errors related to R1714
  * pylint: Suppress C0201, C0209 and W0602 newly reported errors
  * installer: do not install tpm2-abrmd
  * tpm: by default use /dev/tpmrm0 instead of tpm2-abrmd
  * verifier: add option to send revocation messages via webhook</changelog>
  <changelog author="aplanas@suse.com" date="1641902400">- Fix cfssl bcond logic in Tumbleweed / SLE</changelog>
  <changelog author="aplanas@suse.com" date="1641902401">- Add 0001-Drop-dataclasses-module-usage.patch, to support Python 3.6</changelog>
  <changelog author="aplanas@suse.com" date="1642507200">- Add 0001-config-support-merge-multiple-config-files.patch
  This will allow the merge of config files in /usr/etc and /etc.
- Move the configuration file to /usr/etc in new distributions
- Add 0001-ca-support-back-old-cyptography-API.patch
  This is only required for SLE, but the API is compatible with new versions</changelog>
  <changelog author="aplanas@suse.com" date="1643112000">- Set /var/lib/keylime under the same permissions expected by the code</changelog>
  <changelog author="aplanas@suse.com" date="1643284800">- Drop patches beacuse merged upstream:
  * 0001-Drop-dataclasses-module-usage.patch
  * 0001-config-support-merge-multiple-config-files.patch
  * 0001-ca-support-back-old-cyptography-API.patch
- Update to version v6.3.0:
  * Coordinated update to fix:
    + bsc#1193997 (CVE-2022-23948)
    + bsc#1193998 (CVE-2021-43310)
    + bsc#1194000 (CVE-2022-23949)
    + bsc#1194002 (CVE-2022-23950)
    + bsc#1194004 (CVE-2022-23951)
    + bsc#1194005 (CVE-2022-23952)
  * secure_mount: add umount function
  * secure_mount: use /proc/self/mountinfo
  * Validate user ID in all public interfaces
  * validators: add uuid and agent_id validators
  * validators: create validators module
  * revocation_notifier: move zmq socket to /var/run/keylime
  * Update API version from 1.0 to 2.0
  * tpm: do not compress quote with zlib by default
  * verifier: persist AK and mTLS certificate to DB
  * verifier: use "supported_version" for agent connections
  * tenant: add support for "supported_version" option for the verifier
  * api_version: add the option for basic validation
  * verifier: add supported_version field to DB and API
  * agent: add /version to REST API
  * verifier, tenant: allow agents to not use mTLS
  * tenant, verifier: allow manual configuration of agent mTLS
  * tests: migrate to mTLS
  * tenant: connect to the agent via mTLS
  * verifier: connect to the agent via mTLS
  * tornado_requests: handle SSLError
  * web_util: add mTLS context generation for agent
  * agent: Enable mTLS for agent REST API
  * crypto: add helper function for creating self signed certs
  * registrar: Allow the agent to registrar with a mTLS certificate
  * request_client: add workaround for handling certificates
  * request_client: add the option to ignore hostname validation
  * Better docs and errors about IMA hash mismatches
  * tests: use JSON instead Python string for IMA tests
  * verifier: use json.loads(..) instead of ast.literal_eval(..)
  * Adding Nuvoton certificate for a post 2020 TPM device. The EK cert
    of the device directs to the following download site:
    'https://www.nuvoton.com/security/NTC-TPM-EK-Cert/Nuvoton TPM Root
    CA 1111.cer' (yes, including the spaces)
  * Improve revocation notifier IP description in keylime.conf
  * tornado_requests: set Content-Type header correctly for JSON
  * tenant: post U key to agent with correct Content-Type header
  * Explicitly set permissions on new keylime.conf files installed
  * tpm_main: close file descriptor for aik handle
  * verifier: do not call finish() twice
  * agent: fix payload execution
  * tests: add initial tests for web_util module
  * config, web_util: move get_restful_params(..) to web_util
  * verifier: Also retry on HTTP 500 status code
  * agent: improve startup and shutdown
  * registrar: cleanup start function
  * web_util: move echo_json_response(..) out of config.py
  * verifier: fix failure generation for V key
  * tornado_requests: cleanup TornadoResponse class
  * web_util, verifier: move mTLS SSLContext generation into separate module
  * ca: support back old cyptography API
  * Fix test branch reference in packit.yaml
  * ci: disable DeprecationWarning from pylint in tox
  * Enable new test in Packit CI
  * tenant: fix reactivate command
  * config: support merge multiple config files
  * ci: use only fedora-stable for packit
  * elchecking: harden example policy against event type manipulation
  * elchecking: add new tests
  * tests: fix stdout formatting for agent and verifier
  * Drop dataclasses module usage
  * revocation notifier: handle shutdown of process gracefully
  * verifier: handle SIGINT and SIGTERM correctly
  * ima_emulator: fix IMA hash validation and add more options
  * ima_ast: fix handling ToMToU errors
  * Remove leftovers of TPM 1.2 support
  * agent: improved validation for post function
  * agent: better validation for mask and nonce
  * config: add function to validate hex strings
  * agent: keys/verify check if challenge was provided
  * tpm_main: do not append /usr/local/{bin,lib} to default env
  * db: only set length on Text type if supported
  * json: do not make sqlalchemy a hard requirement
  * Enable functional testing with Packit CI
  * ima_emulator: specify sys.argv as the named parameter argv in main()
  * elchecking example policy: make it work with Fedora 34
  * elchecking example policy: initrd* might be also called initramfs*
  * scripts: add mb_refstate generator for example policy
  * config: change tpm_hash_alg to SHA1 by default
  * parse_mb_bootlog: specify the used hash algorithm used for PCRs
  * agent: add warning that on kernels &lt;5.10 IMA only works with SHA1
  * tpm: explicitly pass hash alg to sim_extend(..)
  * ima emulator: use IMA AST and support multiple hash algorithms
  * tests: update IMA allowlist version number
  * ima: add option 'log_hash_alg' to IMA allowlist
  * ima: remove hard requirement for SHA1 PCR 10
  * algorithms: extend Hash class to simplify computing hash values
  * config, tpm_main: explicitly handle YAML load errors
  * config: private_key must be set to -private.pem not -public.pem
  * agent: add UUID option environment
  * agent: drop openstack uuid option</changelog>
  <changelog author="aplanas@suse.com" date="1644235200">- Change back agent_uuid to hostname
- Set tpm_hash_alg to sha256 by default
- Update version.diff patch to point to the correct version number
- Fix issue with Tornado, when multiple workers are started
  * Add cloud_verifier_tornado-use-fork_processes.patch (bsc#1195605)</changelog>
  <changelog author="aplanas@suse.com" date="1645704000">- Drop patches beacuse merged upstream:
  * version.diff
  * cloud_verifier_tornado-use-fork_processes.patch
- Drop binaries not used anymore:
  * keylime_provider_platform_init
  * keylime_provider_registrar
  * keylime_provider_vtpm_add
- Update to version v6.3.1:
  * revocation_notifier: mark webhook threads as daemon and add timeout
  * Fix Packit CI test plan Summary
  * Enable Packit CI testing on CentOS Stream 8
  * Enable Packit CI testing on Fedora Rawhide
  * Remove last trace of TPM 1.2 (hopefully)
  * verifier: remove start_tornado() function
  * verifier: wait for connections to be closed before stopping ioloop
  * revocation_notifier: kill ZeroMQ broker if it blocks more than 5s
  * Add more e2e tests to Packit CI
  * Enable EPEL repo on CentOS Stream in packit.yaml
  * agent, crypto: add localhost, server and contact ip to agent certificate
  * Add better default repo path for run_local.sh
  * Fix incorrect variable name in test_restful
  * Run existing agent tests against the rust-keylime agent
  * Fix small wording mistakes caught while reading the code
  * agent: move key and certificate logging levels from debug to info
  * agent: allow absolute paths for rsa_keyname and mtls_cert
  * Add missing backend parameter
  * cloud_verifier_tornado: use fork_processes
  * ci: automatically push release to PyPI
  * setup.{py,cfg}: Move setup configuration to setup.cfg
  * Add iproute tool to Dockerfile
  * Pylint does not like single-line functions.
  * A small beauty fix
  * This is a small fix to proactively fix Issue #840 by identifying non-escaped double quotes in the tpm2-tools output
  * setup.py: add version number and new Python versions, drop unsed binaries
  * setup.py, config: install default configuration into package path
  * ci: move old keylime.conf to keylime.conf.orig before running tests
  * retry: fix pylint issue
  * Adding Infineon Optiga 034 RSA and ECC certificates for Infineon SLB9675 devices.
  * Ensure columns "mb_refstate" and "allowlist" are of type LONGTEXT in table "verifiermain"
  * tenant: add exponential backoff option to retry timings
  * cloud verifier: add exponential backoff option to retry timings
  * tpm: add exponential backoff option to retry timings
  * test, retry: add unit test for retry algorithm
  * common: add algorithm for retry time calculation
  * registrar, tpm_main: ensure that correct types are commited to DB.
  * Fix typo for config param listen_notifications
  * Lint is _really_ unhappy today.
  * Linty fixes
  * Adding a unit test file for tpm_main
  * tpm_main: check if PCRs for the hash algorithm are available
  * tpm_main: handle if tpm2_checkquote returns no PCRs for a hash algorithm
  * agent: output supported_version as result not as a status
  * Add missing subcommands to -c help message
  * tests: fix mtls_cert generation in test_restful.py
  * revocation_notifier: fix socket path permission check
  * Remove unused database_query config param
  * Move umask calls only on entry points
  * config: move directory utilities to fs_util</changelog>
  <changelog author="aplanas@suse.com" date="1645704001">- Add upstream patches:
  * drop_privileges_of_agent_process_after_startup.patch
  * config_fix_config_search_order.patch
  * services_add_keylime_agent_secure_mount_service.patch
- Configure the agent to run as non-root (via keylime.conf)
- Add keylime sysuser conf file and deploy as part of the tpm
  certificate subpackage
- Prepare the systemd mount unit for /var/lib/keylime/secure</changelog>
  <changelog author="aplanas@suse.com" date="1649851200">- Update to version v6.3.2:
  * general: bump Keylime version to 6.3.2
  * tpm_main: flush transient objects
  * pypi: add notice that the Python API is unstable
  * installer: use OpenSSL by default
  * Avoid mounting secdir while unmounting it
  * remove TPM, VTPM and IMA stubbing support
  * archive: remove all archive files
  * Change GH reviewers to be from developer group
  * added suse / opensuse support with zypper
  * Fix tpm import in test_tpm.py
  * Fix cfssl configuration in run_tests.sh
  * tpm_emulator: improve TPM emulator installation
  * config: Add option to enable DB debugging via DEBUG_DB env var
  * Enable SQL query cache for JSONPickleType
  * tpm_emulator: move everything into systemd services
  * Implement broader key support for Keylime's signing mechanisms
  * tenant: Use exponential backoff on key verification retries
  * tenant: Move JSON parsing to capture possible exceptions
  * tenant: Move verifier stop from do_quote to do_verify
  * pylint: Fix issues related to W0602 global-variable-not-assigned
  * tenant: Handle 404 error from registrar gracefully
  * pylint: Fix remaining code with issue R1732 consider-using-with
  * pylint: Fix R1732 consider-using-with
  * pylint: Fix issue detected by pylint-2.13.0
  * pylint: Fix issue detected by pylint-2.13.0
  * tenant: verify agent quote before adding to verifier
  * README: remove tpm2-abrmd and OSX sections
  * pylint: Fix issues related to W0102 dangerous-default-value
  * pylint: Fix R0201 no-self-use
  * pylint: remove W1203 logging-format-interpolation from ignore list
  * pylint: remove R1729 use-a-generator from ignore list
  * pylint: remove E1120 no-value-for-parameter from ignore list
  * pylint: remove W1201 logging-not-lazy from ignore list
  * pylint: fix C0209 consider-using-f-string
  * pylint: fix C0201 consider-iterating-dictionary
  * pylint: fix W1509 subprocess-popen-preexec-fn
  * keylime_tenant non-zero exit code on error
  * Fix prepare step adjustments in packit-ci.fmf plan
  * failure: fix Pattern type hint
  * mypy: add initial Mypy configuration
  * ima_ast: add type hints
  * failure: add type hints
  * logging, config: add type hints for logging module
  * algorithms: add type hints
  * json: add type hints and add JSONType as custom type
  * Full allowlist processing when not adding host
  * provider, vTPM: remove vTPM manager and provider code
  * tpm: fix that the set of missing PCRs is not serializable in failure
  * Restores the option to use keylime agents without mTLS
  * services: make the services run as keylime user instead of root
  * State in --help that SHA-256 is used for --allowlist-checksum
  * config: change cacert.pem to cacert.crt
  * registrar_client: validate connections against registrar ca certificate
  * tenant: validate connections against verifier ca certificate
  * request_client: only add custom adapter if TLS is enabled
  * setup: add static assets for webapp
  * Add TESTING.md describing testing details
  * Fix some remaining log format strings
  * Fix for database_url parameter with sqlite
  * Enable test basic-attestation-with-unpriviledged-agent in Packit CI
  * Use lazy string formatting when logging (#535)
  * Make Packit CI plan more resource-saving
  * keylime.conf: Document setting ownership in WORK_DIR (/var/lib/keylime)
  * agent: Make sure tmpfs is empty even if not mounted or cannot unmount
  * agent: Drop privileges by switching to normal user and group
  * agent: Move mounting of tmpfs towards beginning of main()
  * agent: Read measured boot log near process start
  * agent: Open file for IMA log file near process start
  * ima: Refactor read_measurement_list() to take file as argument
  * Add the policy name to failure event
  * tpm_main: Check if tpm_cert_store exists (#553)
  * Remove tag input from container build workflow
  * Push container images to quay.io/keylime org
  * Enable code coverage measurement for e2e tests in Packit CI
  * config: fix config search order
  * Add defaults for ephemeral keys for agent records
  * Update outdated greetings Github messages
  * services: add keylime_agent_secure.mount service
  * installer.sh: updated tpm2-{tools, tss}, use system packages if possible
  * revocation_notifier: convert the data to str in the notifiers
  * revocation_notifier: mark webhook threads as daemon and add timeout
  * Fix Packit CI test plan Summary
  * Enable Packit CI testing on CentOS Stream 8
  * Enable Packit CI testing on Fedora Rawhide
  * Remove last trace of TPM 1.2 (hopefully)
  * verifier: remove start_tornado() function
  * verifier: wait for connections to be closed before stopping ioloop
  * revocation_notifier: kill ZeroMQ broker if it blocks more than 5s
  * Add more e2e tests to Packit CI
  * Enable EPEL repo on CentOS Stream in packit.yaml
- Drop already merged patches
  * drop_privileges_of_agent_process_after_startup.patch
  * config_fix_config_search_order.patch
  * services_add_keylime_agent_secure_mount_service.patch</changelog>
  <changelog author="aplanas@suse.com" date="1652875200">- Fix "run_as" configuration parameter and set it to keylime:tss
- Improve downgrade user migration during package update
- Add patches (CVE-2022-1053, boo#1199253):
  + CVE-2022-1053-01.patch
  + CVE-2022-1053-02.patch
  + CVE-2022-1053-03.patch
  + CVE-2022-1053-04.patch</changelog>
  <changelog author="aplanas@suse.com" date="1655985600">- Remove user downgrade mechanism from the package (CVE-2022-31250, bsc#1200885)</changelog>
  <changelog author="aplanas@suse.com" date="1657800000">- Use chown -h to adjust persmissions for downgrade migration.  This
  skip following symlinks and make the migration possible
  (bsc#1201466)
- Add logrotate configuration for the services
- Create run directory as non-root user
- Conflict with rust-keylime
- Consolidate in _distconfdir when possible
- Add fix_exit.diff patch, to exit properly in SLE</changelog>
  <changelog author="aplanas@suse.com" date="1658836800">- Drop cfssl default in keylime.conf patch (bsc#1201866)</changelog>
  <changelog author="aplanas@suse.com" date="1666785600">- Backport CVE-2022-3500.patch (CVE-2022-3500) (bsc#1204782)
  + Moderate vulnerability where a node can seems as attested when in
    reality it is not properly attested</changelog>
  <changelog author="aplanas@suse.com" date="1690977600">- Backport patches to avoid DoS via SSL (CVE-2023-38200, boo#1213310)
  + CVE-2023-38200-01.patch
  + CVE-2023-38200-02.patch
  + CVE-2023-38200-03.patch</changelog>
  <changelog author="aplanas@suse.com" date="1692878400">- Backport patch to avoid the leak of the authorization tag
  (CVE-2023-38201, boo#1213314)
  + CVE-2023-38201.patch</changelog>
  <changelog author="aplanas@suse.com" date="1768305600">- Backport patch to avoid re-registration of clients with same UUID
  but with different TPM identity (CVE-2025-13609, bsc#1254199)
  + CVE-2025-13609.patch</changelog>
</package>
<package pkgid="89a846bd2b8c8ff4c075aab5ceeec8949471dca9f618ff1c66e3e248d266eb8b" name="keylime-verifier" arch="noarch">
  <version epoch="0" ver="6.3.2" rel="150400.4.23.1"/>
  <changelog author="aplanas@suse.com" date="1639483200">- Requires python-psutil
- Disable automatic execution of the payload by default
- Use ramdom UUID by default</changelog>
  <changelog author="aplanas@suse.com" date="1639569600">- Fix keylime configuration file attributes</changelog>
  <changelog author="aplanas@suse.com" date="1641816000">- Update to version v6.2.1:
  * Another addition to gitignore
  * Update .gitignore with more Keylime-specific files
  * json: add support for sqlalchemy.engine.row.Row in newer sqlalchemy
  * ima_ast: check if the PCR is the same as in the config
  * Fix permissions issue on volume mount in run_local.sh
  * Make run_local.sh use a local copy of the repo
  * Small updates to GOVERNANCE.md
  * Move cargo-tarpaulin install to separate command
  * config: drop registrar_* TLS options in [registrar] section
  * Fix missing &amp;&amp; in Dockerfile
  * Remove simplejson from scripts and docs
  * Replace simplejson with built-in json module
  * Add rust-keylime container dependencies
  * config: fix getboolean with fallback
  * Clean up CI scripts and rewrite run_local.sh
  * ima: for ToMToU errors skip template content validation
  * ima: Use a set of entry numbers and file offsets to remember multiple positions
  * Rename CONTRIBUTORS.md to CONTRIBUTING.md
  * Update GOVERNANCE.md to match MAINTAINERS.md rename
  * Update MAINTAINERS
  * Update README: remove Gitter, Travis CI
  * ca: Use UTC when setting certificate validity
  * Tenant commands return json
  * scripts: Allow passing a base policy to create_policy tool
  * ima: Handle the case of ima-sig with a path with spaces in them
  * add length to string object
  * scripts: Implement create_policy to create the JSON allowlist from files
  * ima: Also add a sha256 default boot_aggregate hash with 64 '0's
  * ima: Use seek() to get to the last known last entry
  * ima: Extend allowlist to be able to handle generic ima-buf entries
  * ima: Extend JSON allowlist with 'ima' entry and 'ignored_keyrings'
  * ima: Populate verifier keyrings with keys taken from ima-buf log line
  * ima: Remove methods from ImaKeyring that are now in ImaKeyrings
  * ima: Start passing ima_keyrings through APIs replacing ima_keyring
  * Extend AgentAttestState with ima_keyrings field and use it
  * ima: Implement ImaKeyrings class to support multiple keyrings
  * verifier: Extend verifier DB to persist learned keyrings
  * Fix a couple of pylint errors
  * ima: Fix spurious attestation failures
  * ima: make ToMToU errors not a failure by default
  * Simple fix for tenant error message printout.
  * pylint: Fix errors related to R1714
  * pylint: Suppress C0201, C0209 and W0602 newly reported errors
  * installer: do not install tpm2-abrmd
  * tpm: by default use /dev/tpmrm0 instead of tpm2-abrmd
  * verifier: add option to send revocation messages via webhook</changelog>
  <changelog author="aplanas@suse.com" date="1641902400">- Fix cfssl bcond logic in Tumbleweed / SLE</changelog>
  <changelog author="aplanas@suse.com" date="1641902401">- Add 0001-Drop-dataclasses-module-usage.patch, to support Python 3.6</changelog>
  <changelog author="aplanas@suse.com" date="1642507200">- Add 0001-config-support-merge-multiple-config-files.patch
  This will allow the merge of config files in /usr/etc and /etc.
- Move the configuration file to /usr/etc in new distributions
- Add 0001-ca-support-back-old-cyptography-API.patch
  This is only required for SLE, but the API is compatible with new versions</changelog>
  <changelog author="aplanas@suse.com" date="1643112000">- Set /var/lib/keylime under the same permissions expected by the code</changelog>
  <changelog author="aplanas@suse.com" date="1643284800">- Drop patches beacuse merged upstream:
  * 0001-Drop-dataclasses-module-usage.patch
  * 0001-config-support-merge-multiple-config-files.patch
  * 0001-ca-support-back-old-cyptography-API.patch
- Update to version v6.3.0:
  * Coordinated update to fix:
    + bsc#1193997 (CVE-2022-23948)
    + bsc#1193998 (CVE-2021-43310)
    + bsc#1194000 (CVE-2022-23949)
    + bsc#1194002 (CVE-2022-23950)
    + bsc#1194004 (CVE-2022-23951)
    + bsc#1194005 (CVE-2022-23952)
  * secure_mount: add umount function
  * secure_mount: use /proc/self/mountinfo
  * Validate user ID in all public interfaces
  * validators: add uuid and agent_id validators
  * validators: create validators module
  * revocation_notifier: move zmq socket to /var/run/keylime
  * Update API version from 1.0 to 2.0
  * tpm: do not compress quote with zlib by default
  * verifier: persist AK and mTLS certificate to DB
  * verifier: use "supported_version" for agent connections
  * tenant: add support for "supported_version" option for the verifier
  * api_version: add the option for basic validation
  * verifier: add supported_version field to DB and API
  * agent: add /version to REST API
  * verifier, tenant: allow agents to not use mTLS
  * tenant, verifier: allow manual configuration of agent mTLS
  * tests: migrate to mTLS
  * tenant: connect to the agent via mTLS
  * verifier: connect to the agent via mTLS
  * tornado_requests: handle SSLError
  * web_util: add mTLS context generation for agent
  * agent: Enable mTLS for agent REST API
  * crypto: add helper function for creating self signed certs
  * registrar: Allow the agent to registrar with a mTLS certificate
  * request_client: add workaround for handling certificates
  * request_client: add the option to ignore hostname validation
  * Better docs and errors about IMA hash mismatches
  * tests: use JSON instead Python string for IMA tests
  * verifier: use json.loads(..) instead of ast.literal_eval(..)
  * Adding Nuvoton certificate for a post 2020 TPM device. The EK cert
    of the device directs to the following download site:
    'https://www.nuvoton.com/security/NTC-TPM-EK-Cert/Nuvoton TPM Root
    CA 1111.cer' (yes, including the spaces)
  * Improve revocation notifier IP description in keylime.conf
  * tornado_requests: set Content-Type header correctly for JSON
  * tenant: post U key to agent with correct Content-Type header
  * Explicitly set permissions on new keylime.conf files installed
  * tpm_main: close file descriptor for aik handle
  * verifier: do not call finish() twice
  * agent: fix payload execution
  * tests: add initial tests for web_util module
  * config, web_util: move get_restful_params(..) to web_util
  * verifier: Also retry on HTTP 500 status code
  * agent: improve startup and shutdown
  * registrar: cleanup start function
  * web_util: move echo_json_response(..) out of config.py
  * verifier: fix failure generation for V key
  * tornado_requests: cleanup TornadoResponse class
  * web_util, verifier: move mTLS SSLContext generation into separate module
  * ca: support back old cyptography API
  * Fix test branch reference in packit.yaml
  * ci: disable DeprecationWarning from pylint in tox
  * Enable new test in Packit CI
  * tenant: fix reactivate command
  * config: support merge multiple config files
  * ci: use only fedora-stable for packit
  * elchecking: harden example policy against event type manipulation
  * elchecking: add new tests
  * tests: fix stdout formatting for agent and verifier
  * Drop dataclasses module usage
  * revocation notifier: handle shutdown of process gracefully
  * verifier: handle SIGINT and SIGTERM correctly
  * ima_emulator: fix IMA hash validation and add more options
  * ima_ast: fix handling ToMToU errors
  * Remove leftovers of TPM 1.2 support
  * agent: improved validation for post function
  * agent: better validation for mask and nonce
  * config: add function to validate hex strings
  * agent: keys/verify check if challenge was provided
  * tpm_main: do not append /usr/local/{bin,lib} to default env
  * db: only set length on Text type if supported
  * json: do not make sqlalchemy a hard requirement
  * Enable functional testing with Packit CI
  * ima_emulator: specify sys.argv as the named parameter argv in main()
  * elchecking example policy: make it work with Fedora 34
  * elchecking example policy: initrd* might be also called initramfs*
  * scripts: add mb_refstate generator for example policy
  * config: change tpm_hash_alg to SHA1 by default
  * parse_mb_bootlog: specify the used hash algorithm used for PCRs
  * agent: add warning that on kernels &lt;5.10 IMA only works with SHA1
  * tpm: explicitly pass hash alg to sim_extend(..)
  * ima emulator: use IMA AST and support multiple hash algorithms
  * tests: update IMA allowlist version number
  * ima: add option 'log_hash_alg' to IMA allowlist
  * ima: remove hard requirement for SHA1 PCR 10
  * algorithms: extend Hash class to simplify computing hash values
  * config, tpm_main: explicitly handle YAML load errors
  * config: private_key must be set to -private.pem not -public.pem
  * agent: add UUID option environment
  * agent: drop openstack uuid option</changelog>
  <changelog author="aplanas@suse.com" date="1644235200">- Change back agent_uuid to hostname
- Set tpm_hash_alg to sha256 by default
- Update version.diff patch to point to the correct version number
- Fix issue with Tornado, when multiple workers are started
  * Add cloud_verifier_tornado-use-fork_processes.patch (bsc#1195605)</changelog>
  <changelog author="aplanas@suse.com" date="1645704000">- Drop patches beacuse merged upstream:
  * version.diff
  * cloud_verifier_tornado-use-fork_processes.patch
- Drop binaries not used anymore:
  * keylime_provider_platform_init
  * keylime_provider_registrar
  * keylime_provider_vtpm_add
- Update to version v6.3.1:
  * revocation_notifier: mark webhook threads as daemon and add timeout
  * Fix Packit CI test plan Summary
  * Enable Packit CI testing on CentOS Stream 8
  * Enable Packit CI testing on Fedora Rawhide
  * Remove last trace of TPM 1.2 (hopefully)
  * verifier: remove start_tornado() function
  * verifier: wait for connections to be closed before stopping ioloop
  * revocation_notifier: kill ZeroMQ broker if it blocks more than 5s
  * Add more e2e tests to Packit CI
  * Enable EPEL repo on CentOS Stream in packit.yaml
  * agent, crypto: add localhost, server and contact ip to agent certificate
  * Add better default repo path for run_local.sh
  * Fix incorrect variable name in test_restful
  * Run existing agent tests against the rust-keylime agent
  * Fix small wording mistakes caught while reading the code
  * agent: move key and certificate logging levels from debug to info
  * agent: allow absolute paths for rsa_keyname and mtls_cert
  * Add missing backend parameter
  * cloud_verifier_tornado: use fork_processes
  * ci: automatically push release to PyPI
  * setup.{py,cfg}: Move setup configuration to setup.cfg
  * Add iproute tool to Dockerfile
  * Pylint does not like single-line functions.
  * A small beauty fix
  * This is a small fix to proactively fix Issue #840 by identifying non-escaped double quotes in the tpm2-tools output
  * setup.py: add version number and new Python versions, drop unsed binaries
  * setup.py, config: install default configuration into package path
  * ci: move old keylime.conf to keylime.conf.orig before running tests
  * retry: fix pylint issue
  * Adding Infineon Optiga 034 RSA and ECC certificates for Infineon SLB9675 devices.
  * Ensure columns "mb_refstate" and "allowlist" are of type LONGTEXT in table "verifiermain"
  * tenant: add exponential backoff option to retry timings
  * cloud verifier: add exponential backoff option to retry timings
  * tpm: add exponential backoff option to retry timings
  * test, retry: add unit test for retry algorithm
  * common: add algorithm for retry time calculation
  * registrar, tpm_main: ensure that correct types are commited to DB.
  * Fix typo for config param listen_notifications
  * Lint is _really_ unhappy today.
  * Linty fixes
  * Adding a unit test file for tpm_main
  * tpm_main: check if PCRs for the hash algorithm are available
  * tpm_main: handle if tpm2_checkquote returns no PCRs for a hash algorithm
  * agent: output supported_version as result not as a status
  * Add missing subcommands to -c help message
  * tests: fix mtls_cert generation in test_restful.py
  * revocation_notifier: fix socket path permission check
  * Remove unused database_query config param
  * Move umask calls only on entry points
  * config: move directory utilities to fs_util</changelog>
  <changelog author="aplanas@suse.com" date="1645704001">- Add upstream patches:
  * drop_privileges_of_agent_process_after_startup.patch
  * config_fix_config_search_order.patch
  * services_add_keylime_agent_secure_mount_service.patch
- Configure the agent to run as non-root (via keylime.conf)
- Add keylime sysuser conf file and deploy as part of the tpm
  certificate subpackage
- Prepare the systemd mount unit for /var/lib/keylime/secure</changelog>
  <changelog author="aplanas@suse.com" date="1649851200">- Update to version v6.3.2:
  * general: bump Keylime version to 6.3.2
  * tpm_main: flush transient objects
  * pypi: add notice that the Python API is unstable
  * installer: use OpenSSL by default
  * Avoid mounting secdir while unmounting it
  * remove TPM, VTPM and IMA stubbing support
  * archive: remove all archive files
  * Change GH reviewers to be from developer group
  * added suse / opensuse support with zypper
  * Fix tpm import in test_tpm.py
  * Fix cfssl configuration in run_tests.sh
  * tpm_emulator: improve TPM emulator installation
  * config: Add option to enable DB debugging via DEBUG_DB env var
  * Enable SQL query cache for JSONPickleType
  * tpm_emulator: move everything into systemd services
  * Implement broader key support for Keylime's signing mechanisms
  * tenant: Use exponential backoff on key verification retries
  * tenant: Move JSON parsing to capture possible exceptions
  * tenant: Move verifier stop from do_quote to do_verify
  * pylint: Fix issues related to W0602 global-variable-not-assigned
  * tenant: Handle 404 error from registrar gracefully
  * pylint: Fix remaining code with issue R1732 consider-using-with
  * pylint: Fix R1732 consider-using-with
  * pylint: Fix issue detected by pylint-2.13.0
  * pylint: Fix issue detected by pylint-2.13.0
  * tenant: verify agent quote before adding to verifier
  * README: remove tpm2-abrmd and OSX sections
  * pylint: Fix issues related to W0102 dangerous-default-value
  * pylint: Fix R0201 no-self-use
  * pylint: remove W1203 logging-format-interpolation from ignore list
  * pylint: remove R1729 use-a-generator from ignore list
  * pylint: remove E1120 no-value-for-parameter from ignore list
  * pylint: remove W1201 logging-not-lazy from ignore list
  * pylint: fix C0209 consider-using-f-string
  * pylint: fix C0201 consider-iterating-dictionary
  * pylint: fix W1509 subprocess-popen-preexec-fn
  * keylime_tenant non-zero exit code on error
  * Fix prepare step adjustments in packit-ci.fmf plan
  * failure: fix Pattern type hint
  * mypy: add initial Mypy configuration
  * ima_ast: add type hints
  * failure: add type hints
  * logging, config: add type hints for logging module
  * algorithms: add type hints
  * json: add type hints and add JSONType as custom type
  * Full allowlist processing when not adding host
  * provider, vTPM: remove vTPM manager and provider code
  * tpm: fix that the set of missing PCRs is not serializable in failure
  * Restores the option to use keylime agents without mTLS
  * services: make the services run as keylime user instead of root
  * State in --help that SHA-256 is used for --allowlist-checksum
  * config: change cacert.pem to cacert.crt
  * registrar_client: validate connections against registrar ca certificate
  * tenant: validate connections against verifier ca certificate
  * request_client: only add custom adapter if TLS is enabled
  * setup: add static assets for webapp
  * Add TESTING.md describing testing details
  * Fix some remaining log format strings
  * Fix for database_url parameter with sqlite
  * Enable test basic-attestation-with-unpriviledged-agent in Packit CI
  * Use lazy string formatting when logging (#535)
  * Make Packit CI plan more resource-saving
  * keylime.conf: Document setting ownership in WORK_DIR (/var/lib/keylime)
  * agent: Make sure tmpfs is empty even if not mounted or cannot unmount
  * agent: Drop privileges by switching to normal user and group
  * agent: Move mounting of tmpfs towards beginning of main()
  * agent: Read measured boot log near process start
  * agent: Open file for IMA log file near process start
  * ima: Refactor read_measurement_list() to take file as argument
  * Add the policy name to failure event
  * tpm_main: Check if tpm_cert_store exists (#553)
  * Remove tag input from container build workflow
  * Push container images to quay.io/keylime org
  * Enable code coverage measurement for e2e tests in Packit CI
  * config: fix config search order
  * Add defaults for ephemeral keys for agent records
  * Update outdated greetings Github messages
  * services: add keylime_agent_secure.mount service
  * installer.sh: updated tpm2-{tools, tss}, use system packages if possible
  * revocation_notifier: convert the data to str in the notifiers
  * revocation_notifier: mark webhook threads as daemon and add timeout
  * Fix Packit CI test plan Summary
  * Enable Packit CI testing on CentOS Stream 8
  * Enable Packit CI testing on Fedora Rawhide
  * Remove last trace of TPM 1.2 (hopefully)
  * verifier: remove start_tornado() function
  * verifier: wait for connections to be closed before stopping ioloop
  * revocation_notifier: kill ZeroMQ broker if it blocks more than 5s
  * Add more e2e tests to Packit CI
  * Enable EPEL repo on CentOS Stream in packit.yaml
- Drop already merged patches
  * drop_privileges_of_agent_process_after_startup.patch
  * config_fix_config_search_order.patch
  * services_add_keylime_agent_secure_mount_service.patch</changelog>
  <changelog author="aplanas@suse.com" date="1652875200">- Fix "run_as" configuration parameter and set it to keylime:tss
- Improve downgrade user migration during package update
- Add patches (CVE-2022-1053, boo#1199253):
  + CVE-2022-1053-01.patch
  + CVE-2022-1053-02.patch
  + CVE-2022-1053-03.patch
  + CVE-2022-1053-04.patch</changelog>
  <changelog author="aplanas@suse.com" date="1655985600">- Remove user downgrade mechanism from the package (CVE-2022-31250, bsc#1200885)</changelog>
  <changelog author="aplanas@suse.com" date="1657800000">- Use chown -h to adjust persmissions for downgrade migration.  This
  skip following symlinks and make the migration possible
  (bsc#1201466)
- Add logrotate configuration for the services
- Create run directory as non-root user
- Conflict with rust-keylime
- Consolidate in _distconfdir when possible
- Add fix_exit.diff patch, to exit properly in SLE</changelog>
  <changelog author="aplanas@suse.com" date="1658836800">- Drop cfssl default in keylime.conf patch (bsc#1201866)</changelog>
  <changelog author="aplanas@suse.com" date="1666785600">- Backport CVE-2022-3500.patch (CVE-2022-3500) (bsc#1204782)
  + Moderate vulnerability where a node can seems as attested when in
    reality it is not properly attested</changelog>
  <changelog author="aplanas@suse.com" date="1690977600">- Backport patches to avoid DoS via SSL (CVE-2023-38200, boo#1213310)
  + CVE-2023-38200-01.patch
  + CVE-2023-38200-02.patch
  + CVE-2023-38200-03.patch</changelog>
  <changelog author="aplanas@suse.com" date="1692878400">- Backport patch to avoid the leak of the authorization tag
  (CVE-2023-38201, boo#1213314)
  + CVE-2023-38201.patch</changelog>
  <changelog author="aplanas@suse.com" date="1768305600">- Backport patch to avoid re-registration of clients with same UUID
  but with different TPM identity (CVE-2025-13609, bsc#1254199)
  + CVE-2025-13609.patch</changelog>
</package>
<package pkgid="939d763b058871e0946f2834eacbc2bcc16958f14c2c724b1d03e1a03f65bd66" name="kmod" arch="src">
  <version epoch="0" ver="29" rel="150600.13.3.1"/>
  <changelog author="msuchanek@suse.com" date="1593777600">- Drop kmod-compat (boo#1173353):
  The symlinks in kmod-compat are not obsolete. They are
  desirable for kernel module autoload. The "kernel.modprobe"
  sysctl references /sbin/modprobe, and changing it to
  "/usr/bin/kmod load" is not possible, because this sysctl
  specifies a single executable, not a command (so spaces will be
  treated as part of the filename).</changelog>
  <changelog author="jengelh@inai.de" date="1594123200">- Drop old RPM constructs from the build recipe.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="jengelh@inai.de" date="1604664000">- Add usr-lib-modprobe.patch [boo#1092648]</changelog>
  <changelog author="msuchanek@suse.de" date="1610452800">- Update usr-lib-modprobe.patch to upstream submission (boo#1180821).
- Require libxslt-tools for xsltproc and use local stylesheet.
  * no-stylesheet-download.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1611835200">- Backport upstream fix 0001-Fix-modinfo-F-always-shows-name-for-built-ins.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1611835201">- Update to v28
  * Add Zstandard to the supported compression formats using libzstd
    (tests only - cannot be disabled in tests)
  * Ignore ill-formed kernel command line, e.g. with "ivrs_acpihid[00:14.5]=AMD0020:0"
    option in it
  * Fix some memory leaks
  * Fix 0-length builtin.alias.bin: it needs at least the index header</changelog>
  <changelog author="dimstar@opensuse.org" date="1611921600">- Supplement bash-completion subpackage against the main package
  and bash-completion.
- Also require the main package plus bash-completion: the
  completion package is useless without either of the two.</changelog>
  <changelog author="msuchanek@suse.de" date="1612440000">- Fix tests to not test disabled features. Disable zstd again.
  * kmod-populate-modules-Use-more-bash-more-quotes.patch
  * kmod-testsuite-compress-modules-if-feature-is-enabled.patch
  * kmod-also-test-xz-compression.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1613649600">- Fix grub's requoted kernel parameters (bsc#1181111)
  * 0001-libkmod-config-revamp-kcmdline-parsing-into-a-state-.patch
  * 0002-libkmod-config-re-quote-option-from-kernel-cmdline.patch</changelog>
  <changelog author="jengelh@inai.de" date="1622116800">- Update to release 29
  * Fix `modinfo -F` not working for built-in modules and
    certain fields.
  * Fix a memory leak, overflow and double free on error path.
- Drop 0001-Fix-modinfo-F-always-shows-name-for-built-ins.patch,
  0001-libkmod-config-revamp-kcmdline-parsing-into-a-state-.patch,
  0002-libkmod-config-re-quote-option-from-kernel-cmdline.patch
  (all merged)</changelog>
  <changelog author="msuchanek@suse.de" date="1622289600">- /usr/lib should override /lib where both are available. Support /usr/lib for
  depmod.d as well.
  * Refresh usr-lib-modprobe.patch
- Remove test patches included in release 29
  - kmod-populate-modules-Use-more-bash-more-quotes.patch
  - kmod-testsuite-compress-modules-if-feature-is-enabled.patch
  - kmod-also-test-xz-compression.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1623067200">- Enable support for ZSTD compressed modules</changelog>
  <changelog author="msuchanek@suse.de" date="1629288000">- Display module information even for modules built into the running kernel
  (bsc#1189537).
  + libkmod-Provide-info-even-for-modules-built-into-the.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1630065600">- Add ZSTD support on Tumbleweed only. Add a way to detect ZSTD.</changelog>
  <changelog author="msuchanek@suse.com" date="1630929600">- Use docbook 4 rather than docbook 5 for building man pages (bsc#1190190).
  * Refres no-stylesheet-download.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1632484800">- Enable ZSTD on 15.4 (jsc#SLE-21256).</changelog>
  <changelog author="msuchanek@suse.com" date="1635422400">- Enable ZSTD on 15.3 as well (boo#1192104).
- Only test ZSTD in testsuite on releases where it is available.</changelog>
  <changelog author="msuchanek@suse.com" date="1638792000">- Ensure that kmod and packages linking to libkmod provide same features
  (bsc#1193430).</changelog>
  <changelog author="msuchanek@suse.de" date="1763553600">- man: modprobe.d: document the config file order handling (bsc#1253741)
  * man-modprobe.d-document-the-config-file-order-handling.patch</changelog>
</package>
<package pkgid="cbca88105ee994a56c5b88dd7fca75d36836f9350feb8c4737d8409a1fe61822" name="kmod" arch="x86_64">
  <version epoch="0" ver="29" rel="150600.13.3.1"/>
  <changelog author="msuchanek@suse.com" date="1593777600">- Drop kmod-compat (boo#1173353):
  The symlinks in kmod-compat are not obsolete. They are
  desirable for kernel module autoload. The "kernel.modprobe"
  sysctl references /sbin/modprobe, and changing it to
  "/usr/bin/kmod load" is not possible, because this sysctl
  specifies a single executable, not a command (so spaces will be
  treated as part of the filename).</changelog>
  <changelog author="jengelh@inai.de" date="1594123200">- Drop old RPM constructs from the build recipe.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="jengelh@inai.de" date="1604664000">- Add usr-lib-modprobe.patch [boo#1092648]</changelog>
  <changelog author="msuchanek@suse.de" date="1610452800">- Update usr-lib-modprobe.patch to upstream submission (boo#1180821).
- Require libxslt-tools for xsltproc and use local stylesheet.
  * no-stylesheet-download.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1611835200">- Backport upstream fix 0001-Fix-modinfo-F-always-shows-name-for-built-ins.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1611835201">- Update to v28
  * Add Zstandard to the supported compression formats using libzstd
    (tests only - cannot be disabled in tests)
  * Ignore ill-formed kernel command line, e.g. with "ivrs_acpihid[00:14.5]=AMD0020:0"
    option in it
  * Fix some memory leaks
  * Fix 0-length builtin.alias.bin: it needs at least the index header</changelog>
  <changelog author="dimstar@opensuse.org" date="1611921600">- Supplement bash-completion subpackage against the main package
  and bash-completion.
- Also require the main package plus bash-completion: the
  completion package is useless without either of the two.</changelog>
  <changelog author="msuchanek@suse.de" date="1612440000">- Fix tests to not test disabled features. Disable zstd again.
  * kmod-populate-modules-Use-more-bash-more-quotes.patch
  * kmod-testsuite-compress-modules-if-feature-is-enabled.patch
  * kmod-also-test-xz-compression.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1613649600">- Fix grub's requoted kernel parameters (bsc#1181111)
  * 0001-libkmod-config-revamp-kcmdline-parsing-into-a-state-.patch
  * 0002-libkmod-config-re-quote-option-from-kernel-cmdline.patch</changelog>
  <changelog author="jengelh@inai.de" date="1622116800">- Update to release 29
  * Fix `modinfo -F` not working for built-in modules and
    certain fields.
  * Fix a memory leak, overflow and double free on error path.
- Drop 0001-Fix-modinfo-F-always-shows-name-for-built-ins.patch,
  0001-libkmod-config-revamp-kcmdline-parsing-into-a-state-.patch,
  0002-libkmod-config-re-quote-option-from-kernel-cmdline.patch
  (all merged)</changelog>
  <changelog author="msuchanek@suse.de" date="1622289600">- /usr/lib should override /lib where both are available. Support /usr/lib for
  depmod.d as well.
  * Refresh usr-lib-modprobe.patch
- Remove test patches included in release 29
  - kmod-populate-modules-Use-more-bash-more-quotes.patch
  - kmod-testsuite-compress-modules-if-feature-is-enabled.patch
  - kmod-also-test-xz-compression.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1623067200">- Enable support for ZSTD compressed modules</changelog>
  <changelog author="msuchanek@suse.de" date="1629288000">- Display module information even for modules built into the running kernel
  (bsc#1189537).
  + libkmod-Provide-info-even-for-modules-built-into-the.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1630065600">- Add ZSTD support on Tumbleweed only. Add a way to detect ZSTD.</changelog>
  <changelog author="msuchanek@suse.com" date="1630929600">- Use docbook 4 rather than docbook 5 for building man pages (bsc#1190190).
  * Refres no-stylesheet-download.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1632484800">- Enable ZSTD on 15.4 (jsc#SLE-21256).</changelog>
  <changelog author="msuchanek@suse.com" date="1635422400">- Enable ZSTD on 15.3 as well (boo#1192104).
- Only test ZSTD in testsuite on releases where it is available.</changelog>
  <changelog author="msuchanek@suse.com" date="1638792000">- Ensure that kmod and packages linking to libkmod provide same features
  (bsc#1193430).</changelog>
  <changelog author="msuchanek@suse.de" date="1763553600">- man: modprobe.d: document the config file order handling (bsc#1253741)
  * man-modprobe.d-document-the-config-file-order-handling.patch</changelog>
</package>
<package pkgid="5660b7e3d08f3fcddcaa650a3f312cbae5b40ab1721932d42c67bd8b6f1063c8" name="kmod-bash-completion" arch="noarch">
  <version epoch="0" ver="29" rel="150600.13.3.1"/>
  <changelog author="msuchanek@suse.com" date="1593777600">- Drop kmod-compat (boo#1173353):
  The symlinks in kmod-compat are not obsolete. They are
  desirable for kernel module autoload. The "kernel.modprobe"
  sysctl references /sbin/modprobe, and changing it to
  "/usr/bin/kmod load" is not possible, because this sysctl
  specifies a single executable, not a command (so spaces will be
  treated as part of the filename).</changelog>
  <changelog author="jengelh@inai.de" date="1594123200">- Drop old RPM constructs from the build recipe.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="jengelh@inai.de" date="1604664000">- Add usr-lib-modprobe.patch [boo#1092648]</changelog>
  <changelog author="msuchanek@suse.de" date="1610452800">- Update usr-lib-modprobe.patch to upstream submission (boo#1180821).
- Require libxslt-tools for xsltproc and use local stylesheet.
  * no-stylesheet-download.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1611835200">- Backport upstream fix 0001-Fix-modinfo-F-always-shows-name-for-built-ins.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1611835201">- Update to v28
  * Add Zstandard to the supported compression formats using libzstd
    (tests only - cannot be disabled in tests)
  * Ignore ill-formed kernel command line, e.g. with "ivrs_acpihid[00:14.5]=AMD0020:0"
    option in it
  * Fix some memory leaks
  * Fix 0-length builtin.alias.bin: it needs at least the index header</changelog>
  <changelog author="dimstar@opensuse.org" date="1611921600">- Supplement bash-completion subpackage against the main package
  and bash-completion.
- Also require the main package plus bash-completion: the
  completion package is useless without either of the two.</changelog>
  <changelog author="msuchanek@suse.de" date="1612440000">- Fix tests to not test disabled features. Disable zstd again.
  * kmod-populate-modules-Use-more-bash-more-quotes.patch
  * kmod-testsuite-compress-modules-if-feature-is-enabled.patch
  * kmod-also-test-xz-compression.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1613649600">- Fix grub's requoted kernel parameters (bsc#1181111)
  * 0001-libkmod-config-revamp-kcmdline-parsing-into-a-state-.patch
  * 0002-libkmod-config-re-quote-option-from-kernel-cmdline.patch</changelog>
  <changelog author="jengelh@inai.de" date="1622116800">- Update to release 29
  * Fix `modinfo -F` not working for built-in modules and
    certain fields.
  * Fix a memory leak, overflow and double free on error path.
- Drop 0001-Fix-modinfo-F-always-shows-name-for-built-ins.patch,
  0001-libkmod-config-revamp-kcmdline-parsing-into-a-state-.patch,
  0002-libkmod-config-re-quote-option-from-kernel-cmdline.patch
  (all merged)</changelog>
  <changelog author="msuchanek@suse.de" date="1622289600">- /usr/lib should override /lib where both are available. Support /usr/lib for
  depmod.d as well.
  * Refresh usr-lib-modprobe.patch
- Remove test patches included in release 29
  - kmod-populate-modules-Use-more-bash-more-quotes.patch
  - kmod-testsuite-compress-modules-if-feature-is-enabled.patch
  - kmod-also-test-xz-compression.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1623067200">- Enable support for ZSTD compressed modules</changelog>
  <changelog author="msuchanek@suse.de" date="1629288000">- Display module information even for modules built into the running kernel
  (bsc#1189537).
  + libkmod-Provide-info-even-for-modules-built-into-the.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1630065600">- Add ZSTD support on Tumbleweed only. Add a way to detect ZSTD.</changelog>
  <changelog author="msuchanek@suse.com" date="1630929600">- Use docbook 4 rather than docbook 5 for building man pages (bsc#1190190).
  * Refres no-stylesheet-download.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1632484800">- Enable ZSTD on 15.4 (jsc#SLE-21256).</changelog>
  <changelog author="msuchanek@suse.com" date="1635422400">- Enable ZSTD on 15.3 as well (boo#1192104).
- Only test ZSTD in testsuite on releases where it is available.</changelog>
  <changelog author="msuchanek@suse.com" date="1638792000">- Ensure that kmod and packages linking to libkmod provide same features
  (bsc#1193430).</changelog>
  <changelog author="msuchanek@suse.de" date="1763553600">- man: modprobe.d: document the config file order handling (bsc#1253741)
  * man-modprobe.d-document-the-config-file-order-handling.patch</changelog>
</package>
<package pkgid="0b14bd4fc17f3a899b688667af337c2efe157077f8d5cc2709956c4c6491f300" name="kpartx" arch="x86_64">
  <version epoch="0" ver="0.10.3+124+suse.ed5b4b11" rel="150700.3.3.1"/>
  <changelog author="mwilck@suse.com" date="1704456000">- Update to version 0.9.7+93+suse.e2f2272:
  * fix ANA prioritizer enablement logic (bsc#1218326)
  * avoid setting queue_if_no_path on multipath maps for which the
    no_path_retry timeout has expired
  * the interactive commands "restorequeueing map X" and
    "restorequeing maps" now only affect maps that had queueing
    manually disabled using "disablequeuing maps" or
    "disablequeuing map X" beforehand
  * Spelling fixes</changelog>
  <changelog author="mwilck@suse.com" date="1707739200">- Update to version 0.9.7+140+suse.2d78457:
  * This is a multipath-tools 0.9.8 pre-release
  * Socket activation via multipathd.socket has been disabled by default
    because it has undesirable side effects on systems without multipath.
    Users with multipath hardware should enable multipathd.service
  * The restorequeueing CLI command now only enables queueing if
    disablequeueing had been sent before
  * Avoid multipathd hang during map flush
  * multipathd now tracks the queueing mode of maps in its internal features string
  * Improve error messages in 'multipathd -k'
  * Fix segfault in autoresize code (bsc#1219289)
  * Fix missing map reloads (bsc#1219796)
  * Documentation fixes, spelling fixes, minor code fixes</changelog>
  <changelog author="mwilck@suse.com" date="1707739201">- Update to version 0.9.7+148+suse.7d9953e.obscpio
  * This is a multipath-tools 0.9.8 pre-release
  * fix fast_io_fail for Infinibox (bsc#1219348)
  * Fix activation of LVM volume groups during coldplug (bsc#1219142)</changelog>
  <changelog author="mwilck@suse.com" date="1707912000">- Update to version 0.9.7+148+suse.9780ae0:
  * 11-dm-mpath.rules: Fix quoting mistake (bsc#1219142)</changelog>
  <changelog author="mwilck@suse.com" date="1707998400">- Update to version 0.9.8~1+82+suse.dcd98a3:
  * Adapt package version such that it shows as a 0.9.8 prerelease
  * Add missing udev rules file</changelog>
  <changelog author="mwilck@suse.com" date="1708948800">- Update to version 0.9.8+83+suse.bcae610 (bsc#1220374)
  * multipath-tools: added NEWS.md</changelog>
  <changelog author="mwilck@suse.com" date="1709035200">- Remove libmpathpersist-example-old.c, which has been obsolete
  since multipath-tools 0.8.6.</changelog>
  <changelog author="mwilck@suse.com" date="1709640000">- Update to version 0.9.8+87+suse.f72b9f3:
  * fix misspelled DM_UDEV_DISABLE_OTHER_RULES_FLAG in udev rules
    (bsc#1220810)</changelog>
  <changelog author="mwilck@suse.com" date="1712836800">- Update to version 0.9.8+88+suse.d504d83:
  * Revert "libmultipath: fix max_sectors_kb on adding path"
  (bsc#1222458)</changelog>
  <changelog author="mwilck@suse.com" date="1719316800">- Update to version 0.9.9+90+suse.f1d2f20:
  * Fix unit tests on Tumbleweed/armv7l
- Update to 0.9.9 upstream (see NEWS.md for details)
  * Update udev rules to be compliant with device-mapper udev
  rules update in LVM2 &gt;= 2.03.24.
  * Limit real-time scheduling priority to 10 by default. This
  can now be configured in multipathd.service using "LimitRTPRIO="
  * Set max_sectors_kb only on map creation, or when a new path
  is added, to avoid IO errors
  * The configuration option "flush_on_last_del" now takes the
  values "always" (="yes"), "unused" (="no"), and "never". "yes"
  and "no" are still supported
  * Add wildcard %k for max_sectors_kb for CLI commands like
  "multipath show {paths,maps} format"
  * Accept WWID value in CLI commands that take a map name, like
  "resize map $map"
  * Removed support for CLI wildcards for pathgroups, which were
  not function anyway.
  * Fix map failure count for no_path_retry &gt; 0</changelog>
  <changelog author="mwilck@suse.com" date="1721390400">- Update to version 0.9.9+161+suse.0c835ef:
  * Update to upstream reviewed code path (787e00d)
  * Added hardware defaults for Huawei storage arrays and XSG1 vendors
  * Refactored and improved the libultipath / libdevmapper interface
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove`
  (bug introduced in 0.9.9). (bsc#1229898)
  * CI improvements
  * Documentation fixes</changelog>
  <changelog author="mwilck@suse.com" date="1724932800">- Update to 0.10.0+103+suse.0fc97cd
- Update to upstream 0.10.0 (see also NEWS.md)
  * The `multipathd show daemon` command now shows `(reconfigure pending)`
  if a reconfiguration has been triggered but not finished yet.
  * Refactored the path checker loop. Paths are now checked for each multipath
  map in turn
  * Renamed public functions, variables, and macros to comply with the glibc policy
  for reserved names (gh#opensvc/multipath-tools#91)
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove` (bug introduced in
  0.9.9). (bsc#1229898)
  * Fixed old mpathpersist bug leading to the error message "configured reservation
  key doesn't match: 0x0" when `reservation_key` was configured in the
  multipaths section of `multipath.conf`. (bsc#1228926, gh#opensvc/multipath-tools#92)
  * Fixed output of `multipath -t` and `multipath -T` for the options
  `force_sync` and `retrigger_tries`. (bsc#1229898, gh#opensvc/multipath-tools#88)
  * Fixed adding maps by WWID in CLI (command `add map $WWID`). (bsc#1229898)</changelog>
  <changelog author="mwilck@suse.com" date="1730721600">- Update to version 0.10.0+106+suse.ffbdb7a:
  * Fix reboot hang if uevent is processed for suspended device
  (bsc#1232063)</changelog>
  <changelog author="mwilck@suse.com" date="1730808000">- Update to version 0.10.0+108+suse.2c2e597:
  * Update fix for bsc#1232063 to upstream-accepted solution</changelog>
  <changelog author="mwilck@suse.com" date="1732190400">- Update to version 0.10.1~1+113+suse.d6eca5e:
  This is a pre-release of the upstream stable release 0.10.1.
  * libmultipath: dm_get_maps(): don't bail out for single-map failures
  (bsc#1233588, gh#opensvc/multipath-tools#102)
  * libmultipath: don't print error message if WATCHDOG_USEC is 0
  (bsc#1232227)
  * libmultipath: don't set dev_loss_tmo to 0 for NO_PATH_RETRY_FAIL
  * multipathd: fix deferred_failback_tick for reload removes</changelog>
  <changelog author="mwilck@suse.com" date="1732536000">- Update to version 0.10.1~2+112+suse.b66763a:
  * libmultipath: reduce log level of "map X has multiple targets"
  (bsc#1233588)</changelog>
  <changelog author="mwilck@suse.com" date="1737720000">- Update to version 0.10.2+117+suse.33411aa:
  * multipathd: trigger uevents for blacklisted paths in reconfigure
    (bsc#1236321)
  * Make sure maps are reloaded in the path checker loop after detecting an
    inconsistent or wrong kernel state (bsc#1236392)
  * Make sure udev and systemd notice changes in multipath path state
    when devices are added to or removed from multipath maps (bsc#1236321)
  * Fix the problem that `group_by_tpg` might be disabled if one or more
    paths were offline during initial configuration (bsc#1236392)
  * Fix multipathd crash because of invalid path group index value, for example
    if an invalid path device was removed from a map.
    (gh#opensvc/multipath-tools#105, bsc#1236392)
  * Fixed a memory leak in the nvme foreign library.
  * Fixed a problem in the marginal path detection algorithm that could cause
    the io error check for a recently failed path to be delayed.
    (bsc#1236390)
  * Reduce log level of harmless "map ... doesn't exist" message
    (bsc#1236390)</changelog>
  <changelog author="mwilck@suse.com" date="1741176000">- Update to version 0.10.2+122+suse.51e02cc:
  * multipathd: fix hang during shutdown with queuing maps
    (bsc#1238484).
    This adds multipathd-queueing.service.</changelog>
  <changelog author="mwilck@suse.com" date="1751371200">- Update to version 0.10.2+123+suse.48d66ee8:
  * multipathd: cli_reinstate(): avoid reinstated paths being failed again
  (bsc#1244917)</changelog>
  <changelog author="mwilck@suse.com" date="1752494400">- Update to version 0.10.3+124+suse.ed5b4b11:
  * multipath-tools: add HPE MSA Gen7 (2070/2072) to hwtable
    (bsc#1246501)</changelog>
</package>
<package pkgid="11a9210a12538d8efab528217057e8e05bbc6caa2c1fdb9d8d25afe6cbdb0bd0" name="kpartx" arch="x86_64">
  <version epoch="0" ver="0.10.5+198+suse.5875f383" rel="150700.3.6.1"/>
  <changelog author="mwilck@suse.com" date="1707998400">- Update to version 0.9.8~1+82+suse.dcd98a3:
  * Adapt package version such that it shows as a 0.9.8 prerelease
  * Add missing udev rules file</changelog>
  <changelog author="mwilck@suse.com" date="1708948800">- Update to version 0.9.8+83+suse.bcae610 (bsc#1220374)
  * multipath-tools: added NEWS.md</changelog>
  <changelog author="mwilck@suse.com" date="1709035200">- Remove libmpathpersist-example-old.c, which has been obsolete
  since multipath-tools 0.8.6.</changelog>
  <changelog author="mwilck@suse.com" date="1709640000">- Update to version 0.9.8+87+suse.f72b9f3:
  * fix misspelled DM_UDEV_DISABLE_OTHER_RULES_FLAG in udev rules
    (bsc#1220810)</changelog>
  <changelog author="mwilck@suse.com" date="1712836800">- Update to version 0.9.8+88+suse.d504d83:
  * Revert "libmultipath: fix max_sectors_kb on adding path"
  (bsc#1222458)</changelog>
  <changelog author="mwilck@suse.com" date="1719316800">- Update to version 0.9.9+90+suse.f1d2f20:
  * Fix unit tests on Tumbleweed/armv7l
- Update to 0.9.9 upstream (see NEWS.md for details)
  * Update udev rules to be compliant with device-mapper udev
  rules update in LVM2 &gt;= 2.03.24.
  * Limit real-time scheduling priority to 10 by default. This
  can now be configured in multipathd.service using "LimitRTPRIO="
  * Set max_sectors_kb only on map creation, or when a new path
  is added, to avoid IO errors
  * The configuration option "flush_on_last_del" now takes the
  values "always" (="yes"), "unused" (="no"), and "never". "yes"
  and "no" are still supported
  * Add wildcard %k for max_sectors_kb for CLI commands like
  "multipath show {paths,maps} format"
  * Accept WWID value in CLI commands that take a map name, like
  "resize map $map"
  * Removed support for CLI wildcards for pathgroups, which were
  not function anyway.
  * Fix map failure count for no_path_retry &gt; 0</changelog>
  <changelog author="mwilck@suse.com" date="1721390400">- Update to version 0.9.9+161+suse.0c835ef:
  * Update to upstream reviewed code path (787e00d)
  * Added hardware defaults for Huawei storage arrays and XSG1 vendors
  * Refactored and improved the libultipath / libdevmapper interface
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove`
  (bug introduced in 0.9.9). (bsc#1229898)
  * CI improvements
  * Documentation fixes</changelog>
  <changelog author="mwilck@suse.com" date="1724932800">- Update to 0.10.0+103+suse.0fc97cd
- Update to upstream 0.10.0 (see also NEWS.md)
  * The `multipathd show daemon` command now shows `(reconfigure pending)`
  if a reconfiguration has been triggered but not finished yet.
  * Refactored the path checker loop. Paths are now checked for each multipath
  map in turn
  * Renamed public functions, variables, and macros to comply with the glibc policy
  for reserved names (gh#opensvc/multipath-tools#91)
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove` (bug introduced in
  0.9.9). (bsc#1229898)
  * Fixed old mpathpersist bug leading to the error message "configured reservation
  key doesn't match: 0x0" when `reservation_key` was configured in the
  multipaths section of `multipath.conf`. (bsc#1228926, gh#opensvc/multipath-tools#92)
  * Fixed output of `multipath -t` and `multipath -T` for the options
  `force_sync` and `retrigger_tries`. (bsc#1229898, gh#opensvc/multipath-tools#88)
  * Fixed adding maps by WWID in CLI (command `add map $WWID`). (bsc#1229898)</changelog>
  <changelog author="mwilck@suse.com" date="1730721600">- Update to version 0.10.0+106+suse.ffbdb7a:
  * Fix reboot hang if uevent is processed for suspended device
  (bsc#1232063)</changelog>
  <changelog author="mwilck@suse.com" date="1730808000">- Update to version 0.10.0+108+suse.2c2e597:
  * Update fix for bsc#1232063 to upstream-accepted solution</changelog>
  <changelog author="mwilck@suse.com" date="1732190400">- Update to version 0.10.1~1+113+suse.d6eca5e:
  This is a pre-release of the upstream stable release 0.10.1.
  * libmultipath: dm_get_maps(): don't bail out for single-map failures
  (bsc#1233588, gh#opensvc/multipath-tools#102)
  * libmultipath: don't print error message if WATCHDOG_USEC is 0
  (bsc#1232227)
  * libmultipath: don't set dev_loss_tmo to 0 for NO_PATH_RETRY_FAIL
  * multipathd: fix deferred_failback_tick for reload removes</changelog>
  <changelog author="mwilck@suse.com" date="1732536000">- Update to version 0.10.1~2+112+suse.b66763a:
  * libmultipath: reduce log level of "map X has multiple targets"
  (bsc#1233588)</changelog>
  <changelog author="mwilck@suse.com" date="1737720000">- Update to version 0.10.2+117+suse.33411aa:
  * multipathd: trigger uevents for blacklisted paths in reconfigure
    (bsc#1236321)
  * Make sure maps are reloaded in the path checker loop after detecting an
    inconsistent or wrong kernel state (bsc#1236392)
  * Make sure udev and systemd notice changes in multipath path state
    when devices are added to or removed from multipath maps (bsc#1236321)
  * Fix the problem that `group_by_tpg` might be disabled if one or more
    paths were offline during initial configuration (bsc#1236392)
  * Fix multipathd crash because of invalid path group index value, for example
    if an invalid path device was removed from a map.
    (gh#opensvc/multipath-tools#105, bsc#1236392)
  * Fixed a memory leak in the nvme foreign library.
  * Fixed a problem in the marginal path detection algorithm that could cause
    the io error check for a recently failed path to be delayed.
    (bsc#1236390)
  * Reduce log level of harmless "map ... doesn't exist" message
    (bsc#1236390)</changelog>
  <changelog author="mwilck@suse.com" date="1741176000">- Update to version 0.10.2+122+suse.51e02cc:
  * multipathd: fix hang during shutdown with queuing maps
    (bsc#1238484).
    This adds multipathd-queueing.service.</changelog>
  <changelog author="mwilck@suse.com" date="1751371200">- Update to version 0.10.2+123+suse.48d66ee8:
  * multipathd: cli_reinstate(): avoid reinstated paths being failed again
  (bsc#1244917)</changelog>
  <changelog author="mwilck@suse.com" date="1752494400">- Update to version 0.10.3+124+suse.ed5b4b11:
  * multipath-tools: add HPE MSA Gen7 (2070/2072) to hwtable
    (bsc#1246501)</changelog>
  <changelog author="mwilck@suse.com" date="1762948800">- Update to version 0.10.5+125+suse.1ed79487:
- Fixes from upstream 0.10.5 (see also NEWS.md) (bsc#1253260)
  * Improved the communication with **udev** and **systemd** by triggering
    uevents when path devices are added to or removed from multipath maps,
    or when `multipathd reconfigure` is executed after changing blacklist
    directives in `multipath.conf`.
  * Failed paths should be checked every `polling_interval`. In certain cases,
    this wouldn't happen, because the check interval wasn't reset by multipathd.
  * It could happen that multipathd would accidentally release a SCSI persistent
    reservation held by another node. Fix it.
  * After manually failing some paths and then reinstating them, sometimes
    the reinstated paths were immediately failed again by multipathd. Fix it.
  * Various minor fixes reported by coverity.</changelog>
  <changelog author="mwilck@suse.com" date="1762948801">- _service: switched to tar_scm for git LFS</changelog>
  <changelog author="mwilck@suse.com" date="1763380800">- Update to version 0.10.5+190+suse.a9f87040:
  * CI: GitHub workflow updates. No code changes.</changelog>
  <changelog author="mwilck@suse.com" date="1763380801">- Update to version 0.10.5+198+suse.5875f383:
  * CI: more GitHub workflow updates. No code changes.</changelog>
</package>
<package pkgid="ec87aef1923f30623d213ea34ba059c404b724eb5abd517aa40a1fd8013771d9" name="kpartx" arch="x86_64">
  <version epoch="0" ver="0.10.6+201+suse.9f189e79" rel="150700.3.11.1"/>
  <changelog author="mwilck@suse.com" date="1709035200">- Remove libmpathpersist-example-old.c, which has been obsolete
  since multipath-tools 0.8.6.</changelog>
  <changelog author="mwilck@suse.com" date="1709640000">- Update to version 0.9.8+87+suse.f72b9f3:
  * fix misspelled DM_UDEV_DISABLE_OTHER_RULES_FLAG in udev rules
    (bsc#1220810)</changelog>
  <changelog author="mwilck@suse.com" date="1712836800">- Update to version 0.9.8+88+suse.d504d83:
  * Revert "libmultipath: fix max_sectors_kb on adding path"
  (bsc#1222458)</changelog>
  <changelog author="mwilck@suse.com" date="1719316800">- Update to version 0.9.9+90+suse.f1d2f20:
  * Fix unit tests on Tumbleweed/armv7l
- Update to 0.9.9 upstream (see NEWS.md for details)
  * Update udev rules to be compliant with device-mapper udev
  rules update in LVM2 &gt;= 2.03.24.
  * Limit real-time scheduling priority to 10 by default. This
  can now be configured in multipathd.service using "LimitRTPRIO="
  * Set max_sectors_kb only on map creation, or when a new path
  is added, to avoid IO errors
  * The configuration option "flush_on_last_del" now takes the
  values "always" (="yes"), "unused" (="no"), and "never". "yes"
  and "no" are still supported
  * Add wildcard %k for max_sectors_kb for CLI commands like
  "multipath show {paths,maps} format"
  * Accept WWID value in CLI commands that take a map name, like
  "resize map $map"
  * Removed support for CLI wildcards for pathgroups, which were
  not function anyway.
  * Fix map failure count for no_path_retry &gt; 0</changelog>
  <changelog author="mwilck@suse.com" date="1721390400">- Update to version 0.9.9+161+suse.0c835ef:
  * Update to upstream reviewed code path (787e00d)
  * Added hardware defaults for Huawei storage arrays and XSG1 vendors
  * Refactored and improved the libultipath / libdevmapper interface
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove`
  (bug introduced in 0.9.9). (bsc#1229898)
  * CI improvements
  * Documentation fixes</changelog>
  <changelog author="mwilck@suse.com" date="1724932800">- Update to 0.10.0+103+suse.0fc97cd
- Update to upstream 0.10.0 (see also NEWS.md)
  * The `multipathd show daemon` command now shows `(reconfigure pending)`
  if a reconfiguration has been triggered but not finished yet.
  * Refactored the path checker loop. Paths are now checked for each multipath
  map in turn
  * Renamed public functions, variables, and macros to comply with the glibc policy
  for reserved names (gh#opensvc/multipath-tools#91)
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove` (bug introduced in
  0.9.9). (bsc#1229898)
  * Fixed old mpathpersist bug leading to the error message "configured reservation
  key doesn't match: 0x0" when `reservation_key` was configured in the
  multipaths section of `multipath.conf`. (bsc#1228926, gh#opensvc/multipath-tools#92)
  * Fixed output of `multipath -t` and `multipath -T` for the options
  `force_sync` and `retrigger_tries`. (bsc#1229898, gh#opensvc/multipath-tools#88)
  * Fixed adding maps by WWID in CLI (command `add map $WWID`). (bsc#1229898)</changelog>
  <changelog author="mwilck@suse.com" date="1730721600">- Update to version 0.10.0+106+suse.ffbdb7a:
  * Fix reboot hang if uevent is processed for suspended device
  (bsc#1232063)</changelog>
  <changelog author="mwilck@suse.com" date="1730808000">- Update to version 0.10.0+108+suse.2c2e597:
  * Update fix for bsc#1232063 to upstream-accepted solution</changelog>
  <changelog author="mwilck@suse.com" date="1732190400">- Update to version 0.10.1~1+113+suse.d6eca5e:
  This is a pre-release of the upstream stable release 0.10.1.
  * libmultipath: dm_get_maps(): don't bail out for single-map failures
  (bsc#1233588, gh#opensvc/multipath-tools#102)
  * libmultipath: don't print error message if WATCHDOG_USEC is 0
  (bsc#1232227)
  * libmultipath: don't set dev_loss_tmo to 0 for NO_PATH_RETRY_FAIL
  * multipathd: fix deferred_failback_tick for reload removes</changelog>
  <changelog author="mwilck@suse.com" date="1732536000">- Update to version 0.10.1~2+112+suse.b66763a:
  * libmultipath: reduce log level of "map X has multiple targets"
  (bsc#1233588)</changelog>
  <changelog author="mwilck@suse.com" date="1737720000">- Update to version 0.10.2+117+suse.33411aa:
  * multipathd: trigger uevents for blacklisted paths in reconfigure
    (bsc#1236321)
  * Make sure maps are reloaded in the path checker loop after detecting an
    inconsistent or wrong kernel state (bsc#1236392)
  * Make sure udev and systemd notice changes in multipath path state
    when devices are added to or removed from multipath maps (bsc#1236321)
  * Fix the problem that `group_by_tpg` might be disabled if one or more
    paths were offline during initial configuration (bsc#1236392)
  * Fix multipathd crash because of invalid path group index value, for example
    if an invalid path device was removed from a map.
    (gh#opensvc/multipath-tools#105, bsc#1236392)
  * Fixed a memory leak in the nvme foreign library.
  * Fixed a problem in the marginal path detection algorithm that could cause
    the io error check for a recently failed path to be delayed.
    (bsc#1236390)
  * Reduce log level of harmless "map ... doesn't exist" message
    (bsc#1236390)</changelog>
  <changelog author="mwilck@suse.com" date="1741176000">- Update to version 0.10.2+122+suse.51e02cc:
  * multipathd: fix hang during shutdown with queuing maps
    (bsc#1238484).
    This adds multipathd-queueing.service.</changelog>
  <changelog author="mwilck@suse.com" date="1751371200">- Update to version 0.10.2+123+suse.48d66ee8:
  * multipathd: cli_reinstate(): avoid reinstated paths being failed again
  (bsc#1244917)</changelog>
  <changelog author="mwilck@suse.com" date="1752494400">- Update to version 0.10.3+124+suse.ed5b4b11:
  * multipath-tools: add HPE MSA Gen7 (2070/2072) to hwtable
    (bsc#1246501)</changelog>
  <changelog author="mwilck@suse.com" date="1762948800">- Update to version 0.10.5+125+suse.1ed79487:
- Fixes from upstream 0.10.5 (see also NEWS.md) (bsc#1253260)
  * Improved the communication with **udev** and **systemd** by triggering
    uevents when path devices are added to or removed from multipath maps,
    or when `multipathd reconfigure` is executed after changing blacklist
    directives in `multipath.conf`.
  * Failed paths should be checked every `polling_interval`. In certain cases,
    this wouldn't happen, because the check interval wasn't reset by multipathd.
  * It could happen that multipathd would accidentally release a SCSI persistent
    reservation held by another node. Fix it.
  * After manually failing some paths and then reinstating them, sometimes
    the reinstated paths were immediately failed again by multipathd. Fix it.
  * Various minor fixes reported by coverity.</changelog>
  <changelog author="mwilck@suse.com" date="1762948801">- _service: switched to tar_scm for git LFS</changelog>
  <changelog author="mwilck@suse.com" date="1763380800">- Update to version 0.10.5+190+suse.a9f87040:
  * CI: GitHub workflow updates. No code changes.</changelog>
  <changelog author="mwilck@suse.com" date="1763726400">- Update to version 0.10.5+213+suse.04c3a0ac:
  * Log offline path state if "log_checker_err always" is set
    (bsc#1254094)
  * mpathpersist: Fix REPORT CAPABILITIES output</changelog>
  <changelog author="mwilck@suse.com" date="1769515200">- Update to version 0.10.6+200+suse.547788f4 (bsc#1257007):
  * kpartx: fix segfault when operating on regular files
    (bsc#1257244, bsc#1257153)
  * multipathd: print path offline message even without a checker
    (bsc#1254094)
  * Fix command descriptions in the multipathd man page.
  * Fix ISO C23 compatibility issue causing errors with new compilers.
  * Fix memory leak caused by not joining the "init unwinder" thread.
  * Fix memory leaks in kpartx.
  * Print the warning "setting scsi timeouts is unsupported for protocol" only
    once per protocol.
  * Make sure multipath-tools is compiled with the compiler flag
    `-fno-strict-aliasing`. (gh#opensvc/multipath-tools#130, bsc#1255285)</changelog>
  <changelog author="mwilck@suse.com" date="1769774400">- Update to version 0.10.6+201+suse.9f189e79:
  * libmultipath: reduce log level of "map X has no targets"
  (bsc#1257476)</changelog>
</package>
<package pkgid="851d0d0b312656c853714111ecd91ae91de0699dfe0ed1a59726a4207378d596" name="krb5" arch="src">
  <version epoch="0" ver="1.20.1" rel="150600.11.11.2"/>
  <changelog author="scabrero@suse.de" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="scabrero@suse.de" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="scabrero@suse.de" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="scabrero@suse.de" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="scabrero@suse.de" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619092800">- Use /run instead of /var/run for daemon PID files; (bsc#1185163);</changelog>
  <changelog author="scabrero@suse.de" date="1627300800">- Fix KDC null deref on bad encrypted challenge; (CVE-2021-36222);
  (bsc#1188571);
- Added patches:
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch</changelog>
  <changelog author="scabrero@suse.de" date="1630324800">- Fix KDC null pointer dereference via a FAST inner body that
  lacks a server field; (CVE-2021-37750); (bsc#1189929);
- Added patches:
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="scabrero@suse.de" date="1631880000">- Update to 1.19.2
  * Fix a denial of service attack against the KDC encrypted challenge
    code; (CVE-2021-36222);
  * Fix a memory leak when gss_inquire_cred() is called without a
    credential handle.
- Changes from 1.19.1
  * Fix a linking issue with Samba.
  * Better support multiple pkinit_identities values by checking whether
    certificates can be loaded for each value.
- Changes from 1.19
  Administrator experience
  * When a client keytab is present, the GSSAPI krb5 mech will refresh
    credentials even if the current credentials were acquired manually.
  * It is now harder to accidentally delete the K/M entry from a KDB.
  Developer experience
  * gss_acquire_cred_from() now supports the "password" and "verify"
    options, allowing credentials to be acquired via password and
    verified using a keytab key.
  * When an application accepts a GSS security context, the new
    GSS_C_CHANNEL_BOUND_FLAG will be set if the initiator and acceptor
    both provided matching channel bindings.
  * Added the GSS_KRB5_NT_X509_CERT name type, allowing S4U2Self requests
    to identify the desired client principal by certificate.
  * PKINIT certauth modules can now cause the hw-authent flag to be set
    in issued tickets.
  * The krb5_init_creds_step() API will now issue the same password
    expiration warnings as krb5_get_init_creds_password().
  Protocol evolution
  * Added client and KDC support for Microsoft's Resource-Based Constrained
    Delegation, which allows cross-realm S4U2Proxy requests. A third-party
    database module is required for KDC support.
  * kadmin/admin is now the preferred server principal name for kadmin
    connections, and the host-based form is no longer created by default.
    The client will still try the host-based form as a fallback.
  * Added client and server support for Microsoft's KERB_AP_OPTIONS_CBT
    extension, which causes channel bindings to be required for the
    initiator if the acceptor provided them. The client will send this
    option if the client_aware_gss_bindings profile option is set.
  User experience
  * kinit will now issue a warning if the des3-cbc-sha1 encryption type is
    used in the reply. This encryption type will be deprecated and removed
    in future releases.
  * Added kvno flags --out-cache, --no-store, and --cached-only
    (inspired by Heimdal's kgetcred).
- Changes from 1.18.3
  * Fix a denial of service vulnerability when decoding Kerberos
    protocol messages; (CVE-2020-28196); (bsc#1178512);
  * Fix a locking issue with the LMDB KDB module which could cause
    KDC and kadmind processes to lose access to the database.
  * Fix an assertion failure when libgssapi_krb5 is repeatedly loaded
    and unloaded while libkrb5support remains loaded.
- Changes from 1.18.2
  * Fix a SPNEGO regression where an acceptor using the default credential
    would improperly filter mechanisms, causing a negotiation failure.
  * Fix a bug where the KDC would fail to issue tickets if the local krbtgt
    principal's first key has a single-DES enctype.
  * Add stub functions to allow old versions of OpenSSL libcrypto to link
    against libkrb5.
  * Fix a NegoEx bug where the client name and delegated credential might
    not be reported.
- Changes from 1.18.1
  * Fix a crash when qualifying short hostnames when the system has
    no primary DNS domain.
  * Fix a regression when an application imports "service@" as a GSS
    host-based name for its acceptor credential handle.
  * Fix KDC enforcement of auth indicators when they are modified by
    the KDB module.
  * Fix removal of require_auth string attributes when the LDAP KDB
    module is used.
  * Fix a compile error when building with musl libc on Linux.
  * Fix a compile error when building with gcc 4.x.
  * Change the KDC constrained delegation precedence order for consistency
    with Windows KDCs.
- Changes from 1.18
  Administrator experience:
  * Remove support for single-DES encryption types.
  * Change the replay cache format to be more efficient and robust.
    Replay cache filenames using the new format end with ".rcache2"
    by default.
  * setuid programs will automatically ignore environment variables
    that normally affect krb5 API functions, even if the caller does
    not use krb5_init_secure_context().
  * Add an "enforce_ok_as_delegate" krb5.conf relation to disable
    credential forwarding during GSSAPI authentication unless the KDC
    sets the ok-as-delegate bit in the service ticket.
  * Use the permitted_enctypes krb5.conf setting as the default value
    for default_tkt_enctypes and default_tgs_enctypes.
  Developer experience:
  * Implement krb5_cc_remove_cred() for all credential cache types.
  * Add the krb5_pac_get_client_info() API to get the client account
    name from a PAC.
  Protocol evolution:
  * Add KDC support for S4U2Self requests where the user is identified
    by X.509 certificate. (Requires support for certificate lookup from
    a third-party KDB module.)
  * Remove support for an old ("draft 9") variant of PKINIT.
  * Add support for Microsoft NegoEx. (Requires one or more third-party
    GSS modules implementing NegoEx mechanisms.)
  User experience:
  * Add support for "dns_canonicalize_hostname=fallback", causing
    host-based principal names to be tried first without DNS
    canonicalization, and again with DNS canonicalization if the
    un-canonicalized server is not found.
  * Expand single-component hostnames in host-based principal names
    when DNS canonicalization is not used, adding the system's first DNS
    search path as a suffix. Add a "qualify_shortname" krb5.conf relation
    to override this suffix or disable expansion.
  * Honor the transited-policy-checked ticket flag on application servers,
    eliminating the requirement to configure capaths on servers in some
    scenarios.
  Code quality:
  * The libkrb5 serialization code (used to export and import krb5 GSS
    security contexts) has been simplified and made type-safe.
  * The libkrb5 code for creating KRB-PRIV, KRB-SAFE, and KRB-CRED
    messages has been revised to conform to current coding practices.
  * The test suite has been modified to work with macOS System Integrity
    Protection enabled.
  * The test suite incorporates soft-pkcs11 so that PKINIT PKCS11 support
    can always be tested.
- Changes from 1.17.1
  * Fix a bug preventing "addprinc -randkey -kvno" from working in kadmin.
  * Fix a bug preventing time skew correction from working when a KCM
    credential cache is used.
- Changes from 1.17:
  Administrator experience:
  * A new Kerberos database module using the Lightning Memory-Mapped
    Database library (LMDB) has been added.  The LMDB KDB module should
    be more performant and more robust than the DB2 module, and may
    become the default module for new databases in a future release.
  * "kdb5_util dump" will no longer dump policy entries when specific
    principal names are requested.
  Developer experience:
  * The new krb5_get_etype_info() API can be used to retrieve enctype,
    salt, and string-to-key parameters from the KDC for a client
    principal.
  * The new GSS_KRB5_NT_ENTERPRISE_NAME name type allows enterprise
    principal names to be used with GSS-API functions.
  * KDC and kadmind modules which call com_err() will now write to the
    log file in a format more consistent with other log messages.
  * Programs which use large numbers of memory credential caches should
    perform better.
  Protocol evolution:
  * The SPAKE pre-authentication mechanism is now supported.  This
    mechanism protects against password dictionary attacks without
    requiring any additional infrastructure such as certificates.  SPAKE
    is enabled by default on clients, but must be manually enabled on
    the KDC for this release.
  * PKINIT freshness tokens are now supported.  Freshness tokens can
    protect against scenarios where an attacker uses temporary access to
    a smart card to generate authentication requests for the future.
  * Password change operations now prefer TCP over UDP, to avoid
    spurious error messages about replays when a response packet is
    dropped.
  * The KDC now supports cross-realm S4U2Self requests when used with a
    third-party KDB module such as Samba's.  The client code for
    cross-realm S4U2Self requests is also now more robust
    (CVE-2018-20217).
  User experience:
  * The new ktutil addent -f flag can be used to fetch salt information
    from the KDC for password-based keys.
  * The new kdestroy -p option can be used to destroy a credential cache
    within a collection by client principal name.
  * The Kerberos man page has been restored, and documents the
    environment variables that affect programs using the Kerberos
    library.
  Code quality:
  * Python test scripts now use Python 3.
  * Python test scripts now display markers in verbose output, making it
    easier to find where a failure occurred within the scripts.
  * The Windows build system has been simplified and updated to work
    with more recent versions of Visual Studio.  A large volume of
    unused Windows-specific code has been removed.  Visual Studio 2013
    or later is now required.
- Replace old $RPM_* shell vars
- Removal of SuSEfirewall2 service since SuSEfirewall2 has been replaced
  by firewalld
- Remove cruft to support distributions older than SLE 12
- Use macros where applicable
- Switch to pkgconfig style dependencies
- Use %_tmpfilesdir instead of the wrong %_libexecdir/tmpfiles.d
  notation: libexecdir is likely changing away from /usr/lib to
  /usr/libexec
- Build with full Cyrus SASL support. Negotiating SASL credentials with
  an EXTERNAL bind mechanism requires interaction. Kerberos provides its
  own interaction function that skips all interaction, thus preventing the
  mechanism from working.
- Removed patches:
  * 0007-krb5-1.12-ksu-path.patch
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch
- Renamed patches:
  * 0001-krb5-1.12-pam.patch =&gt; 0001-ksu-pam-integration.patch
  * 0003-krb5-1.12-buildconf.patch =&gt; 0003-Adjust-build-configuration.patch
  * 0008-krb5-1.12-selinux-label.patch =&gt; 0007-SELinux-integration.patch
  * 0009-krb5-1.9-debuginfo.patch =&gt; 0008-krb5-1.9-debuginfo.patch
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch =&gt;
    0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="nopower@suse.com" date="1667822400">- Fix integer overflows in PAC parsing; (CVE-2022-42898);
  (bso#15203), (bsc#1205126).
- Added patches:
  * 0010-Fix-integer-overflows-in-PAC-parsing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1670932800">- Update to 1.20.1; (bsc#1205126); (CVE-2022-42898);
  * Fix integer overflows in PAC parsing [CVE-2022-42898].
  * Fix null deref in KDC when decoding invalid NDR.
  * Fix memory leak in OTP kdcpreauth module.
  * Fix PKCS11 module path search.
- update to 1.20.0:
  * Added a "disable_pac" realm relation to suppress adding PAC authdata
    to tickets, for realms which do not need to support S4U requests.
  * Most credential cache types will use atomic replacement when a cache
    is reinitialized using kinit or refreshed from the client keytab.
  * kprop can now propagate databases with a dump size larger than 4GB,
    if both the client and server are upgraded.
  * kprop can now work over NATs that change the destination IP address,
    if the client is upgraded.
  * Updated the KDB interface.  The sign_authdata() method is replaced
    with the issue_pac() method, allowing KDB modules to add logon info
    and other buffers to the PAC issued by the KDC.
  * Host-based initiator names are better supported in the GSS krb5
    mechanism.
  * Replaced AD-SIGNEDPATH authdata with minimal PACs.
  * To avoid spurious replay errors, password change requests will not
    be attempted over UDP until the attempt over TCP fails.
  * PKINIT will sign its CMS messages with SHA-256 instead of SHA-1.
  * Updated all code using OpenSSL to be compatible with OpenSSL 3.
  * Reorganized the libk5crypto build system to allow the OpenSSL
    back-end to pull in material from the builtin back-end depending on
    the OpenSSL version.
  * Simplified the PRNG logic to always use the platform PRNG.
  * Converted the remaining Tcl tests to Python.
- update to 1.19.3 (bsc#1189929, CVE-2021-37750):
  * Fix a denial of service attack against the KDC [CVE-2021-37750].
  * Fix KDC null deref on TGS inner body null server
  * Fix conformance issue in GSSAPI tests
- Resolve "Credential cache directory /run/user/0/krb5cc does not
  exist while opening default credentials cache" by using a kernel
  keyring instead of a dir cache; (bsc#1109830);
- Added hardening to systemd services; (bsc#1181400);
- Drop 0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch,
  fixed in release 1.20.0
- Drop 0010-Fix-integer-overflows-in-PAC-parsing.patch,
  fixed in release 1.20.1</changelog>
  <changelog author="scabrero@suse.de" date="1691496000">- Ensure array count consistency in kadm5 RPC; (bsc#1214054);
  (CVE-2023-36054);
- Added patches:
  * 0009-Ensure-array-count-consistency-in-kadm5-RPC.patch</changelog>
  <changelog author="scabrero@suse.de" date="1694520000">- Avoid KDC spoofing vulnerability, enable verify_ap_req_nofail in
  krb5.conf; (jsc#PED-6213);</changelog>
  <changelog author="scabrero@suse.de" date="1701172800">- Update patch 0007-SELinux-integration.patch for SELinux 3.5</changelog>
  <changelog author="scabrero@suse.de" date="1711108800">- Fix memory leaks, add patch 0010-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772</changelog>
  <changelog author="scabrero@suse.de" date="1719835200">- Fix vulnerabilities in GSS message token handling, add patch
  0011-Fix-vulnerabilities-in-GSS-message-token-handling.patch
  * CVE-2024-37370, bsc#1227186
  * CVE-2024-37371, bsc#1227187</changelog>
  <changelog author="scabrero@suse.de" date="1737547200">- Add crypto-policies support; (jsc#PED-12018)
  * The default krb5.conf has been updated to include config
    snippets in the krb5.conf.d directory, where crypto-policies
    drops its.
- Allow to use KRB5KDF in FIPS mode; (jsc#PED-12018); Add patch
  0012-Allow-KRB5KDF-in-FIPS-mode.patch
  * This key derivation function is used by AES256-CTS-HMAC-SHA1-96
    and AES128-CTS-HMAC-SHA1-96 encryption types, used by Active
    directory. If these encryption types are allowed or not in
    FIPS mode is enforced now by the FIPS:AD-SUPPORT subpolicy.</changelog>
  <changelog author="scabrero@suse.de" date="1738238400">- Prevent overflow when calculating ulog block size. An authenticated
  attacker can cause kadmind to write beyond the end of the mapped
  region for the iprop log file, likely causing a process crash;
  (CVE-2025-24528); (bsc#1236619).
- Add patch 0013-Prevent-overflow-when-calculating-ulog-block-size.patch</changelog>
  <changelog author="scabrero@suse.de" date="1746446400">- Remove references to the LMDB backend in the kdc.conf manpage;
  (bsc#1242060);</changelog>
</package>
<package pkgid="09028ef430170d02a79a39a70551a05fbc7197a8e6a542f8ebaf6bc65c05d8ee" name="krb5" arch="x86_64">
  <version epoch="0" ver="1.20.1" rel="150600.11.11.2"/>
  <changelog author="scabrero@suse.de" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="scabrero@suse.de" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="scabrero@suse.de" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="scabrero@suse.de" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="scabrero@suse.de" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619092800">- Use /run instead of /var/run for daemon PID files; (bsc#1185163);</changelog>
  <changelog author="scabrero@suse.de" date="1627300800">- Fix KDC null deref on bad encrypted challenge; (CVE-2021-36222);
  (bsc#1188571);
- Added patches:
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch</changelog>
  <changelog author="scabrero@suse.de" date="1630324800">- Fix KDC null pointer dereference via a FAST inner body that
  lacks a server field; (CVE-2021-37750); (bsc#1189929);
- Added patches:
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="scabrero@suse.de" date="1631880000">- Update to 1.19.2
  * Fix a denial of service attack against the KDC encrypted challenge
    code; (CVE-2021-36222);
  * Fix a memory leak when gss_inquire_cred() is called without a
    credential handle.
- Changes from 1.19.1
  * Fix a linking issue with Samba.
  * Better support multiple pkinit_identities values by checking whether
    certificates can be loaded for each value.
- Changes from 1.19
  Administrator experience
  * When a client keytab is present, the GSSAPI krb5 mech will refresh
    credentials even if the current credentials were acquired manually.
  * It is now harder to accidentally delete the K/M entry from a KDB.
  Developer experience
  * gss_acquire_cred_from() now supports the "password" and "verify"
    options, allowing credentials to be acquired via password and
    verified using a keytab key.
  * When an application accepts a GSS security context, the new
    GSS_C_CHANNEL_BOUND_FLAG will be set if the initiator and acceptor
    both provided matching channel bindings.
  * Added the GSS_KRB5_NT_X509_CERT name type, allowing S4U2Self requests
    to identify the desired client principal by certificate.
  * PKINIT certauth modules can now cause the hw-authent flag to be set
    in issued tickets.
  * The krb5_init_creds_step() API will now issue the same password
    expiration warnings as krb5_get_init_creds_password().
  Protocol evolution
  * Added client and KDC support for Microsoft's Resource-Based Constrained
    Delegation, which allows cross-realm S4U2Proxy requests. A third-party
    database module is required for KDC support.
  * kadmin/admin is now the preferred server principal name for kadmin
    connections, and the host-based form is no longer created by default.
    The client will still try the host-based form as a fallback.
  * Added client and server support for Microsoft's KERB_AP_OPTIONS_CBT
    extension, which causes channel bindings to be required for the
    initiator if the acceptor provided them. The client will send this
    option if the client_aware_gss_bindings profile option is set.
  User experience
  * kinit will now issue a warning if the des3-cbc-sha1 encryption type is
    used in the reply. This encryption type will be deprecated and removed
    in future releases.
  * Added kvno flags --out-cache, --no-store, and --cached-only
    (inspired by Heimdal's kgetcred).
- Changes from 1.18.3
  * Fix a denial of service vulnerability when decoding Kerberos
    protocol messages; (CVE-2020-28196); (bsc#1178512);
  * Fix a locking issue with the LMDB KDB module which could cause
    KDC and kadmind processes to lose access to the database.
  * Fix an assertion failure when libgssapi_krb5 is repeatedly loaded
    and unloaded while libkrb5support remains loaded.
- Changes from 1.18.2
  * Fix a SPNEGO regression where an acceptor using the default credential
    would improperly filter mechanisms, causing a negotiation failure.
  * Fix a bug where the KDC would fail to issue tickets if the local krbtgt
    principal's first key has a single-DES enctype.
  * Add stub functions to allow old versions of OpenSSL libcrypto to link
    against libkrb5.
  * Fix a NegoEx bug where the client name and delegated credential might
    not be reported.
- Changes from 1.18.1
  * Fix a crash when qualifying short hostnames when the system has
    no primary DNS domain.
  * Fix a regression when an application imports "service@" as a GSS
    host-based name for its acceptor credential handle.
  * Fix KDC enforcement of auth indicators when they are modified by
    the KDB module.
  * Fix removal of require_auth string attributes when the LDAP KDB
    module is used.
  * Fix a compile error when building with musl libc on Linux.
  * Fix a compile error when building with gcc 4.x.
  * Change the KDC constrained delegation precedence order for consistency
    with Windows KDCs.
- Changes from 1.18
  Administrator experience:
  * Remove support for single-DES encryption types.
  * Change the replay cache format to be more efficient and robust.
    Replay cache filenames using the new format end with ".rcache2"
    by default.
  * setuid programs will automatically ignore environment variables
    that normally affect krb5 API functions, even if the caller does
    not use krb5_init_secure_context().
  * Add an "enforce_ok_as_delegate" krb5.conf relation to disable
    credential forwarding during GSSAPI authentication unless the KDC
    sets the ok-as-delegate bit in the service ticket.
  * Use the permitted_enctypes krb5.conf setting as the default value
    for default_tkt_enctypes and default_tgs_enctypes.
  Developer experience:
  * Implement krb5_cc_remove_cred() for all credential cache types.
  * Add the krb5_pac_get_client_info() API to get the client account
    name from a PAC.
  Protocol evolution:
  * Add KDC support for S4U2Self requests where the user is identified
    by X.509 certificate. (Requires support for certificate lookup from
    a third-party KDB module.)
  * Remove support for an old ("draft 9") variant of PKINIT.
  * Add support for Microsoft NegoEx. (Requires one or more third-party
    GSS modules implementing NegoEx mechanisms.)
  User experience:
  * Add support for "dns_canonicalize_hostname=fallback", causing
    host-based principal names to be tried first without DNS
    canonicalization, and again with DNS canonicalization if the
    un-canonicalized server is not found.
  * Expand single-component hostnames in host-based principal names
    when DNS canonicalization is not used, adding the system's first DNS
    search path as a suffix. Add a "qualify_shortname" krb5.conf relation
    to override this suffix or disable expansion.
  * Honor the transited-policy-checked ticket flag on application servers,
    eliminating the requirement to configure capaths on servers in some
    scenarios.
  Code quality:
  * The libkrb5 serialization code (used to export and import krb5 GSS
    security contexts) has been simplified and made type-safe.
  * The libkrb5 code for creating KRB-PRIV, KRB-SAFE, and KRB-CRED
    messages has been revised to conform to current coding practices.
  * The test suite has been modified to work with macOS System Integrity
    Protection enabled.
  * The test suite incorporates soft-pkcs11 so that PKINIT PKCS11 support
    can always be tested.
- Changes from 1.17.1
  * Fix a bug preventing "addprinc -randkey -kvno" from working in kadmin.
  * Fix a bug preventing time skew correction from working when a KCM
    credential cache is used.
- Changes from 1.17:
  Administrator experience:
  * A new Kerberos database module using the Lightning Memory-Mapped
    Database library (LMDB) has been added.  The LMDB KDB module should
    be more performant and more robust than the DB2 module, and may
    become the default module for new databases in a future release.
  * "kdb5_util dump" will no longer dump policy entries when specific
    principal names are requested.
  Developer experience:
  * The new krb5_get_etype_info() API can be used to retrieve enctype,
    salt, and string-to-key parameters from the KDC for a client
    principal.
  * The new GSS_KRB5_NT_ENTERPRISE_NAME name type allows enterprise
    principal names to be used with GSS-API functions.
  * KDC and kadmind modules which call com_err() will now write to the
    log file in a format more consistent with other log messages.
  * Programs which use large numbers of memory credential caches should
    perform better.
  Protocol evolution:
  * The SPAKE pre-authentication mechanism is now supported.  This
    mechanism protects against password dictionary attacks without
    requiring any additional infrastructure such as certificates.  SPAKE
    is enabled by default on clients, but must be manually enabled on
    the KDC for this release.
  * PKINIT freshness tokens are now supported.  Freshness tokens can
    protect against scenarios where an attacker uses temporary access to
    a smart card to generate authentication requests for the future.
  * Password change operations now prefer TCP over UDP, to avoid
    spurious error messages about replays when a response packet is
    dropped.
  * The KDC now supports cross-realm S4U2Self requests when used with a
    third-party KDB module such as Samba's.  The client code for
    cross-realm S4U2Self requests is also now more robust
    (CVE-2018-20217).
  User experience:
  * The new ktutil addent -f flag can be used to fetch salt information
    from the KDC for password-based keys.
  * The new kdestroy -p option can be used to destroy a credential cache
    within a collection by client principal name.
  * The Kerberos man page has been restored, and documents the
    environment variables that affect programs using the Kerberos
    library.
  Code quality:
  * Python test scripts now use Python 3.
  * Python test scripts now display markers in verbose output, making it
    easier to find where a failure occurred within the scripts.
  * The Windows build system has been simplified and updated to work
    with more recent versions of Visual Studio.  A large volume of
    unused Windows-specific code has been removed.  Visual Studio 2013
    or later is now required.
- Replace old $RPM_* shell vars
- Removal of SuSEfirewall2 service since SuSEfirewall2 has been replaced
  by firewalld
- Remove cruft to support distributions older than SLE 12
- Use macros where applicable
- Switch to pkgconfig style dependencies
- Use %_tmpfilesdir instead of the wrong %_libexecdir/tmpfiles.d
  notation: libexecdir is likely changing away from /usr/lib to
  /usr/libexec
- Build with full Cyrus SASL support. Negotiating SASL credentials with
  an EXTERNAL bind mechanism requires interaction. Kerberos provides its
  own interaction function that skips all interaction, thus preventing the
  mechanism from working.
- Removed patches:
  * 0007-krb5-1.12-ksu-path.patch
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch
- Renamed patches:
  * 0001-krb5-1.12-pam.patch =&gt; 0001-ksu-pam-integration.patch
  * 0003-krb5-1.12-buildconf.patch =&gt; 0003-Adjust-build-configuration.patch
  * 0008-krb5-1.12-selinux-label.patch =&gt; 0007-SELinux-integration.patch
  * 0009-krb5-1.9-debuginfo.patch =&gt; 0008-krb5-1.9-debuginfo.patch
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch =&gt;
    0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="nopower@suse.com" date="1667822400">- Fix integer overflows in PAC parsing; (CVE-2022-42898);
  (bso#15203), (bsc#1205126).
- Added patches:
  * 0010-Fix-integer-overflows-in-PAC-parsing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1670932800">- Update to 1.20.1; (bsc#1205126); (CVE-2022-42898);
  * Fix integer overflows in PAC parsing [CVE-2022-42898].
  * Fix null deref in KDC when decoding invalid NDR.
  * Fix memory leak in OTP kdcpreauth module.
  * Fix PKCS11 module path search.
- update to 1.20.0:
  * Added a "disable_pac" realm relation to suppress adding PAC authdata
    to tickets, for realms which do not need to support S4U requests.
  * Most credential cache types will use atomic replacement when a cache
    is reinitialized using kinit or refreshed from the client keytab.
  * kprop can now propagate databases with a dump size larger than 4GB,
    if both the client and server are upgraded.
  * kprop can now work over NATs that change the destination IP address,
    if the client is upgraded.
  * Updated the KDB interface.  The sign_authdata() method is replaced
    with the issue_pac() method, allowing KDB modules to add logon info
    and other buffers to the PAC issued by the KDC.
  * Host-based initiator names are better supported in the GSS krb5
    mechanism.
  * Replaced AD-SIGNEDPATH authdata with minimal PACs.
  * To avoid spurious replay errors, password change requests will not
    be attempted over UDP until the attempt over TCP fails.
  * PKINIT will sign its CMS messages with SHA-256 instead of SHA-1.
  * Updated all code using OpenSSL to be compatible with OpenSSL 3.
  * Reorganized the libk5crypto build system to allow the OpenSSL
    back-end to pull in material from the builtin back-end depending on
    the OpenSSL version.
  * Simplified the PRNG logic to always use the platform PRNG.
  * Converted the remaining Tcl tests to Python.
- update to 1.19.3 (bsc#1189929, CVE-2021-37750):
  * Fix a denial of service attack against the KDC [CVE-2021-37750].
  * Fix KDC null deref on TGS inner body null server
  * Fix conformance issue in GSSAPI tests
- Resolve "Credential cache directory /run/user/0/krb5cc does not
  exist while opening default credentials cache" by using a kernel
  keyring instead of a dir cache; (bsc#1109830);
- Added hardening to systemd services; (bsc#1181400);
- Drop 0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch,
  fixed in release 1.20.0
- Drop 0010-Fix-integer-overflows-in-PAC-parsing.patch,
  fixed in release 1.20.1</changelog>
  <changelog author="scabrero@suse.de" date="1691496000">- Ensure array count consistency in kadm5 RPC; (bsc#1214054);
  (CVE-2023-36054);
- Added patches:
  * 0009-Ensure-array-count-consistency-in-kadm5-RPC.patch</changelog>
  <changelog author="scabrero@suse.de" date="1694520000">- Avoid KDC spoofing vulnerability, enable verify_ap_req_nofail in
  krb5.conf; (jsc#PED-6213);</changelog>
  <changelog author="scabrero@suse.de" date="1701172800">- Update patch 0007-SELinux-integration.patch for SELinux 3.5</changelog>
  <changelog author="scabrero@suse.de" date="1711108800">- Fix memory leaks, add patch 0010-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772</changelog>
  <changelog author="scabrero@suse.de" date="1719835200">- Fix vulnerabilities in GSS message token handling, add patch
  0011-Fix-vulnerabilities-in-GSS-message-token-handling.patch
  * CVE-2024-37370, bsc#1227186
  * CVE-2024-37371, bsc#1227187</changelog>
  <changelog author="scabrero@suse.de" date="1737547200">- Add crypto-policies support; (jsc#PED-12018)
  * The default krb5.conf has been updated to include config
    snippets in the krb5.conf.d directory, where crypto-policies
    drops its.
- Allow to use KRB5KDF in FIPS mode; (jsc#PED-12018); Add patch
  0012-Allow-KRB5KDF-in-FIPS-mode.patch
  * This key derivation function is used by AES256-CTS-HMAC-SHA1-96
    and AES128-CTS-HMAC-SHA1-96 encryption types, used by Active
    directory. If these encryption types are allowed or not in
    FIPS mode is enforced now by the FIPS:AD-SUPPORT subpolicy.</changelog>
  <changelog author="scabrero@suse.de" date="1738238400">- Prevent overflow when calculating ulog block size. An authenticated
  attacker can cause kadmind to write beyond the end of the mapped
  region for the iprop log file, likely causing a process crash;
  (CVE-2025-24528); (bsc#1236619).
- Add patch 0013-Prevent-overflow-when-calculating-ulog-block-size.patch</changelog>
  <changelog author="scabrero@suse.de" date="1746446400">- Remove references to the LMDB backend in the kdc.conf manpage;
  (bsc#1242060);</changelog>
</package>
<package pkgid="6f20ae7f121f393b8ce511f4883cada13cbcd4fb30be824e38796bcb21a8f340" name="krb5" arch="src">
  <version epoch="0" ver="1.20.1" rel="150600.11.14.1"/>
  <changelog author="scabrero@suse.de" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="scabrero@suse.de" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="scabrero@suse.de" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="scabrero@suse.de" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619092800">- Use /run instead of /var/run for daemon PID files; (bsc#1185163);</changelog>
  <changelog author="scabrero@suse.de" date="1627300800">- Fix KDC null deref on bad encrypted challenge; (CVE-2021-36222);
  (bsc#1188571);
- Added patches:
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch</changelog>
  <changelog author="scabrero@suse.de" date="1630324800">- Fix KDC null pointer dereference via a FAST inner body that
  lacks a server field; (CVE-2021-37750); (bsc#1189929);
- Added patches:
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="scabrero@suse.de" date="1631880000">- Update to 1.19.2
  * Fix a denial of service attack against the KDC encrypted challenge
    code; (CVE-2021-36222);
  * Fix a memory leak when gss_inquire_cred() is called without a
    credential handle.
- Changes from 1.19.1
  * Fix a linking issue with Samba.
  * Better support multiple pkinit_identities values by checking whether
    certificates can be loaded for each value.
- Changes from 1.19
  Administrator experience
  * When a client keytab is present, the GSSAPI krb5 mech will refresh
    credentials even if the current credentials were acquired manually.
  * It is now harder to accidentally delete the K/M entry from a KDB.
  Developer experience
  * gss_acquire_cred_from() now supports the "password" and "verify"
    options, allowing credentials to be acquired via password and
    verified using a keytab key.
  * When an application accepts a GSS security context, the new
    GSS_C_CHANNEL_BOUND_FLAG will be set if the initiator and acceptor
    both provided matching channel bindings.
  * Added the GSS_KRB5_NT_X509_CERT name type, allowing S4U2Self requests
    to identify the desired client principal by certificate.
  * PKINIT certauth modules can now cause the hw-authent flag to be set
    in issued tickets.
  * The krb5_init_creds_step() API will now issue the same password
    expiration warnings as krb5_get_init_creds_password().
  Protocol evolution
  * Added client and KDC support for Microsoft's Resource-Based Constrained
    Delegation, which allows cross-realm S4U2Proxy requests. A third-party
    database module is required for KDC support.
  * kadmin/admin is now the preferred server principal name for kadmin
    connections, and the host-based form is no longer created by default.
    The client will still try the host-based form as a fallback.
  * Added client and server support for Microsoft's KERB_AP_OPTIONS_CBT
    extension, which causes channel bindings to be required for the
    initiator if the acceptor provided them. The client will send this
    option if the client_aware_gss_bindings profile option is set.
  User experience
  * kinit will now issue a warning if the des3-cbc-sha1 encryption type is
    used in the reply. This encryption type will be deprecated and removed
    in future releases.
  * Added kvno flags --out-cache, --no-store, and --cached-only
    (inspired by Heimdal's kgetcred).
- Changes from 1.18.3
  * Fix a denial of service vulnerability when decoding Kerberos
    protocol messages; (CVE-2020-28196); (bsc#1178512);
  * Fix a locking issue with the LMDB KDB module which could cause
    KDC and kadmind processes to lose access to the database.
  * Fix an assertion failure when libgssapi_krb5 is repeatedly loaded
    and unloaded while libkrb5support remains loaded.
- Changes from 1.18.2
  * Fix a SPNEGO regression where an acceptor using the default credential
    would improperly filter mechanisms, causing a negotiation failure.
  * Fix a bug where the KDC would fail to issue tickets if the local krbtgt
    principal's first key has a single-DES enctype.
  * Add stub functions to allow old versions of OpenSSL libcrypto to link
    against libkrb5.
  * Fix a NegoEx bug where the client name and delegated credential might
    not be reported.
- Changes from 1.18.1
  * Fix a crash when qualifying short hostnames when the system has
    no primary DNS domain.
  * Fix a regression when an application imports "service@" as a GSS
    host-based name for its acceptor credential handle.
  * Fix KDC enforcement of auth indicators when they are modified by
    the KDB module.
  * Fix removal of require_auth string attributes when the LDAP KDB
    module is used.
  * Fix a compile error when building with musl libc on Linux.
  * Fix a compile error when building with gcc 4.x.
  * Change the KDC constrained delegation precedence order for consistency
    with Windows KDCs.
- Changes from 1.18
  Administrator experience:
  * Remove support for single-DES encryption types.
  * Change the replay cache format to be more efficient and robust.
    Replay cache filenames using the new format end with ".rcache2"
    by default.
  * setuid programs will automatically ignore environment variables
    that normally affect krb5 API functions, even if the caller does
    not use krb5_init_secure_context().
  * Add an "enforce_ok_as_delegate" krb5.conf relation to disable
    credential forwarding during GSSAPI authentication unless the KDC
    sets the ok-as-delegate bit in the service ticket.
  * Use the permitted_enctypes krb5.conf setting as the default value
    for default_tkt_enctypes and default_tgs_enctypes.
  Developer experience:
  * Implement krb5_cc_remove_cred() for all credential cache types.
  * Add the krb5_pac_get_client_info() API to get the client account
    name from a PAC.
  Protocol evolution:
  * Add KDC support for S4U2Self requests where the user is identified
    by X.509 certificate. (Requires support for certificate lookup from
    a third-party KDB module.)
  * Remove support for an old ("draft 9") variant of PKINIT.
  * Add support for Microsoft NegoEx. (Requires one or more third-party
    GSS modules implementing NegoEx mechanisms.)
  User experience:
  * Add support for "dns_canonicalize_hostname=fallback", causing
    host-based principal names to be tried first without DNS
    canonicalization, and again with DNS canonicalization if the
    un-canonicalized server is not found.
  * Expand single-component hostnames in host-based principal names
    when DNS canonicalization is not used, adding the system's first DNS
    search path as a suffix. Add a "qualify_shortname" krb5.conf relation
    to override this suffix or disable expansion.
  * Honor the transited-policy-checked ticket flag on application servers,
    eliminating the requirement to configure capaths on servers in some
    scenarios.
  Code quality:
  * The libkrb5 serialization code (used to export and import krb5 GSS
    security contexts) has been simplified and made type-safe.
  * The libkrb5 code for creating KRB-PRIV, KRB-SAFE, and KRB-CRED
    messages has been revised to conform to current coding practices.
  * The test suite has been modified to work with macOS System Integrity
    Protection enabled.
  * The test suite incorporates soft-pkcs11 so that PKINIT PKCS11 support
    can always be tested.
- Changes from 1.17.1
  * Fix a bug preventing "addprinc -randkey -kvno" from working in kadmin.
  * Fix a bug preventing time skew correction from working when a KCM
    credential cache is used.
- Changes from 1.17:
  Administrator experience:
  * A new Kerberos database module using the Lightning Memory-Mapped
    Database library (LMDB) has been added.  The LMDB KDB module should
    be more performant and more robust than the DB2 module, and may
    become the default module for new databases in a future release.
  * "kdb5_util dump" will no longer dump policy entries when specific
    principal names are requested.
  Developer experience:
  * The new krb5_get_etype_info() API can be used to retrieve enctype,
    salt, and string-to-key parameters from the KDC for a client
    principal.
  * The new GSS_KRB5_NT_ENTERPRISE_NAME name type allows enterprise
    principal names to be used with GSS-API functions.
  * KDC and kadmind modules which call com_err() will now write to the
    log file in a format more consistent with other log messages.
  * Programs which use large numbers of memory credential caches should
    perform better.
  Protocol evolution:
  * The SPAKE pre-authentication mechanism is now supported.  This
    mechanism protects against password dictionary attacks without
    requiring any additional infrastructure such as certificates.  SPAKE
    is enabled by default on clients, but must be manually enabled on
    the KDC for this release.
  * PKINIT freshness tokens are now supported.  Freshness tokens can
    protect against scenarios where an attacker uses temporary access to
    a smart card to generate authentication requests for the future.
  * Password change operations now prefer TCP over UDP, to avoid
    spurious error messages about replays when a response packet is
    dropped.
  * The KDC now supports cross-realm S4U2Self requests when used with a
    third-party KDB module such as Samba's.  The client code for
    cross-realm S4U2Self requests is also now more robust
    (CVE-2018-20217).
  User experience:
  * The new ktutil addent -f flag can be used to fetch salt information
    from the KDC for password-based keys.
  * The new kdestroy -p option can be used to destroy a credential cache
    within a collection by client principal name.
  * The Kerberos man page has been restored, and documents the
    environment variables that affect programs using the Kerberos
    library.
  Code quality:
  * Python test scripts now use Python 3.
  * Python test scripts now display markers in verbose output, making it
    easier to find where a failure occurred within the scripts.
  * The Windows build system has been simplified and updated to work
    with more recent versions of Visual Studio.  A large volume of
    unused Windows-specific code has been removed.  Visual Studio 2013
    or later is now required.
- Replace old $RPM_* shell vars
- Removal of SuSEfirewall2 service since SuSEfirewall2 has been replaced
  by firewalld
- Remove cruft to support distributions older than SLE 12
- Use macros where applicable
- Switch to pkgconfig style dependencies
- Use %_tmpfilesdir instead of the wrong %_libexecdir/tmpfiles.d
  notation: libexecdir is likely changing away from /usr/lib to
  /usr/libexec
- Build with full Cyrus SASL support. Negotiating SASL credentials with
  an EXTERNAL bind mechanism requires interaction. Kerberos provides its
  own interaction function that skips all interaction, thus preventing the
  mechanism from working.
- Removed patches:
  * 0007-krb5-1.12-ksu-path.patch
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch
- Renamed patches:
  * 0001-krb5-1.12-pam.patch =&gt; 0001-ksu-pam-integration.patch
  * 0003-krb5-1.12-buildconf.patch =&gt; 0003-Adjust-build-configuration.patch
  * 0008-krb5-1.12-selinux-label.patch =&gt; 0007-SELinux-integration.patch
  * 0009-krb5-1.9-debuginfo.patch =&gt; 0008-krb5-1.9-debuginfo.patch
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch =&gt;
    0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="nopower@suse.com" date="1667822400">- Fix integer overflows in PAC parsing; (CVE-2022-42898);
  (bso#15203), (bsc#1205126).
- Added patches:
  * 0010-Fix-integer-overflows-in-PAC-parsing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1670932800">- Update to 1.20.1; (bsc#1205126); (CVE-2022-42898);
  * Fix integer overflows in PAC parsing [CVE-2022-42898].
  * Fix null deref in KDC when decoding invalid NDR.
  * Fix memory leak in OTP kdcpreauth module.
  * Fix PKCS11 module path search.
- update to 1.20.0:
  * Added a "disable_pac" realm relation to suppress adding PAC authdata
    to tickets, for realms which do not need to support S4U requests.
  * Most credential cache types will use atomic replacement when a cache
    is reinitialized using kinit or refreshed from the client keytab.
  * kprop can now propagate databases with a dump size larger than 4GB,
    if both the client and server are upgraded.
  * kprop can now work over NATs that change the destination IP address,
    if the client is upgraded.
  * Updated the KDB interface.  The sign_authdata() method is replaced
    with the issue_pac() method, allowing KDB modules to add logon info
    and other buffers to the PAC issued by the KDC.
  * Host-based initiator names are better supported in the GSS krb5
    mechanism.
  * Replaced AD-SIGNEDPATH authdata with minimal PACs.
  * To avoid spurious replay errors, password change requests will not
    be attempted over UDP until the attempt over TCP fails.
  * PKINIT will sign its CMS messages with SHA-256 instead of SHA-1.
  * Updated all code using OpenSSL to be compatible with OpenSSL 3.
  * Reorganized the libk5crypto build system to allow the OpenSSL
    back-end to pull in material from the builtin back-end depending on
    the OpenSSL version.
  * Simplified the PRNG logic to always use the platform PRNG.
  * Converted the remaining Tcl tests to Python.
- update to 1.19.3 (bsc#1189929, CVE-2021-37750):
  * Fix a denial of service attack against the KDC [CVE-2021-37750].
  * Fix KDC null deref on TGS inner body null server
  * Fix conformance issue in GSSAPI tests
- Resolve "Credential cache directory /run/user/0/krb5cc does not
  exist while opening default credentials cache" by using a kernel
  keyring instead of a dir cache; (bsc#1109830);
- Added hardening to systemd services; (bsc#1181400);
- Drop 0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch,
  fixed in release 1.20.0
- Drop 0010-Fix-integer-overflows-in-PAC-parsing.patch,
  fixed in release 1.20.1</changelog>
  <changelog author="scabrero@suse.de" date="1691496000">- Ensure array count consistency in kadm5 RPC; (bsc#1214054);
  (CVE-2023-36054);
- Added patches:
  * 0009-Ensure-array-count-consistency-in-kadm5-RPC.patch</changelog>
  <changelog author="scabrero@suse.de" date="1694520000">- Avoid KDC spoofing vulnerability, enable verify_ap_req_nofail in
  krb5.conf; (jsc#PED-6213);</changelog>
  <changelog author="scabrero@suse.de" date="1701172800">- Update patch 0007-SELinux-integration.patch for SELinux 3.5</changelog>
  <changelog author="scabrero@suse.de" date="1711108800">- Fix memory leaks, add patch 0010-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772</changelog>
  <changelog author="scabrero@suse.de" date="1719835200">- Fix vulnerabilities in GSS message token handling, add patch
  0011-Fix-vulnerabilities-in-GSS-message-token-handling.patch
  * CVE-2024-37370, bsc#1227186
  * CVE-2024-37371, bsc#1227187</changelog>
  <changelog author="scabrero@suse.de" date="1737547200">- Add crypto-policies support; (jsc#PED-12018)
  * The default krb5.conf has been updated to include config
    snippets in the krb5.conf.d directory, where crypto-policies
    drops its.
- Allow to use KRB5KDF in FIPS mode; (jsc#PED-12018); Add patch
  0012-Allow-KRB5KDF-in-FIPS-mode.patch
  * This key derivation function is used by AES256-CTS-HMAC-SHA1-96
    and AES128-CTS-HMAC-SHA1-96 encryption types, used by Active
    directory. If these encryption types are allowed or not in
    FIPS mode is enforced now by the FIPS:AD-SUPPORT subpolicy.</changelog>
  <changelog author="scabrero@suse.de" date="1738238400">- Prevent overflow when calculating ulog block size. An authenticated
  attacker can cause kadmind to write beyond the end of the mapped
  region for the iprop log file, likely causing a process crash;
  (CVE-2025-24528); (bsc#1236619).
- Add patch 0013-Prevent-overflow-when-calculating-ulog-block-size.patch</changelog>
  <changelog author="scabrero@suse.de" date="1746446400">- Remove references to the LMDB backend in the kdc.conf manpage;
  (bsc#1242060);</changelog>
  <changelog author="nopower@suse.com" date="1756814400">- Remove des3-cbc-sha1 and arcfour-hmac-md5 from permitted
  enctypes unless new special options "allow_des3" or "allow_rc4"
  are set; (CVE-2025-3576); (bsc#1241219).
- Add patch 0015-CVE-2025-3576.patch</changelog>
</package>
<package pkgid="feea431140010e809504ff225923459991dea3d938a6fcfa166eb5e545e4a0a2" name="krb5" arch="x86_64">
  <version epoch="0" ver="1.20.1" rel="150600.11.14.1"/>
  <changelog author="scabrero@suse.de" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="scabrero@suse.de" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="scabrero@suse.de" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="scabrero@suse.de" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619092800">- Use /run instead of /var/run for daemon PID files; (bsc#1185163);</changelog>
  <changelog author="scabrero@suse.de" date="1627300800">- Fix KDC null deref on bad encrypted challenge; (CVE-2021-36222);
  (bsc#1188571);
- Added patches:
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch</changelog>
  <changelog author="scabrero@suse.de" date="1630324800">- Fix KDC null pointer dereference via a FAST inner body that
  lacks a server field; (CVE-2021-37750); (bsc#1189929);
- Added patches:
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="scabrero@suse.de" date="1631880000">- Update to 1.19.2
  * Fix a denial of service attack against the KDC encrypted challenge
    code; (CVE-2021-36222);
  * Fix a memory leak when gss_inquire_cred() is called without a
    credential handle.
- Changes from 1.19.1
  * Fix a linking issue with Samba.
  * Better support multiple pkinit_identities values by checking whether
    certificates can be loaded for each value.
- Changes from 1.19
  Administrator experience
  * When a client keytab is present, the GSSAPI krb5 mech will refresh
    credentials even if the current credentials were acquired manually.
  * It is now harder to accidentally delete the K/M entry from a KDB.
  Developer experience
  * gss_acquire_cred_from() now supports the "password" and "verify"
    options, allowing credentials to be acquired via password and
    verified using a keytab key.
  * When an application accepts a GSS security context, the new
    GSS_C_CHANNEL_BOUND_FLAG will be set if the initiator and acceptor
    both provided matching channel bindings.
  * Added the GSS_KRB5_NT_X509_CERT name type, allowing S4U2Self requests
    to identify the desired client principal by certificate.
  * PKINIT certauth modules can now cause the hw-authent flag to be set
    in issued tickets.
  * The krb5_init_creds_step() API will now issue the same password
    expiration warnings as krb5_get_init_creds_password().
  Protocol evolution
  * Added client and KDC support for Microsoft's Resource-Based Constrained
    Delegation, which allows cross-realm S4U2Proxy requests. A third-party
    database module is required for KDC support.
  * kadmin/admin is now the preferred server principal name for kadmin
    connections, and the host-based form is no longer created by default.
    The client will still try the host-based form as a fallback.
  * Added client and server support for Microsoft's KERB_AP_OPTIONS_CBT
    extension, which causes channel bindings to be required for the
    initiator if the acceptor provided them. The client will send this
    option if the client_aware_gss_bindings profile option is set.
  User experience
  * kinit will now issue a warning if the des3-cbc-sha1 encryption type is
    used in the reply. This encryption type will be deprecated and removed
    in future releases.
  * Added kvno flags --out-cache, --no-store, and --cached-only
    (inspired by Heimdal's kgetcred).
- Changes from 1.18.3
  * Fix a denial of service vulnerability when decoding Kerberos
    protocol messages; (CVE-2020-28196); (bsc#1178512);
  * Fix a locking issue with the LMDB KDB module which could cause
    KDC and kadmind processes to lose access to the database.
  * Fix an assertion failure when libgssapi_krb5 is repeatedly loaded
    and unloaded while libkrb5support remains loaded.
- Changes from 1.18.2
  * Fix a SPNEGO regression where an acceptor using the default credential
    would improperly filter mechanisms, causing a negotiation failure.
  * Fix a bug where the KDC would fail to issue tickets if the local krbtgt
    principal's first key has a single-DES enctype.
  * Add stub functions to allow old versions of OpenSSL libcrypto to link
    against libkrb5.
  * Fix a NegoEx bug where the client name and delegated credential might
    not be reported.
- Changes from 1.18.1
  * Fix a crash when qualifying short hostnames when the system has
    no primary DNS domain.
  * Fix a regression when an application imports "service@" as a GSS
    host-based name for its acceptor credential handle.
  * Fix KDC enforcement of auth indicators when they are modified by
    the KDB module.
  * Fix removal of require_auth string attributes when the LDAP KDB
    module is used.
  * Fix a compile error when building with musl libc on Linux.
  * Fix a compile error when building with gcc 4.x.
  * Change the KDC constrained delegation precedence order for consistency
    with Windows KDCs.
- Changes from 1.18
  Administrator experience:
  * Remove support for single-DES encryption types.
  * Change the replay cache format to be more efficient and robust.
    Replay cache filenames using the new format end with ".rcache2"
    by default.
  * setuid programs will automatically ignore environment variables
    that normally affect krb5 API functions, even if the caller does
    not use krb5_init_secure_context().
  * Add an "enforce_ok_as_delegate" krb5.conf relation to disable
    credential forwarding during GSSAPI authentication unless the KDC
    sets the ok-as-delegate bit in the service ticket.
  * Use the permitted_enctypes krb5.conf setting as the default value
    for default_tkt_enctypes and default_tgs_enctypes.
  Developer experience:
  * Implement krb5_cc_remove_cred() for all credential cache types.
  * Add the krb5_pac_get_client_info() API to get the client account
    name from a PAC.
  Protocol evolution:
  * Add KDC support for S4U2Self requests where the user is identified
    by X.509 certificate. (Requires support for certificate lookup from
    a third-party KDB module.)
  * Remove support for an old ("draft 9") variant of PKINIT.
  * Add support for Microsoft NegoEx. (Requires one or more third-party
    GSS modules implementing NegoEx mechanisms.)
  User experience:
  * Add support for "dns_canonicalize_hostname=fallback", causing
    host-based principal names to be tried first without DNS
    canonicalization, and again with DNS canonicalization if the
    un-canonicalized server is not found.
  * Expand single-component hostnames in host-based principal names
    when DNS canonicalization is not used, adding the system's first DNS
    search path as a suffix. Add a "qualify_shortname" krb5.conf relation
    to override this suffix or disable expansion.
  * Honor the transited-policy-checked ticket flag on application servers,
    eliminating the requirement to configure capaths on servers in some
    scenarios.
  Code quality:
  * The libkrb5 serialization code (used to export and import krb5 GSS
    security contexts) has been simplified and made type-safe.
  * The libkrb5 code for creating KRB-PRIV, KRB-SAFE, and KRB-CRED
    messages has been revised to conform to current coding practices.
  * The test suite has been modified to work with macOS System Integrity
    Protection enabled.
  * The test suite incorporates soft-pkcs11 so that PKINIT PKCS11 support
    can always be tested.
- Changes from 1.17.1
  * Fix a bug preventing "addprinc -randkey -kvno" from working in kadmin.
  * Fix a bug preventing time skew correction from working when a KCM
    credential cache is used.
- Changes from 1.17:
  Administrator experience:
  * A new Kerberos database module using the Lightning Memory-Mapped
    Database library (LMDB) has been added.  The LMDB KDB module should
    be more performant and more robust than the DB2 module, and may
    become the default module for new databases in a future release.
  * "kdb5_util dump" will no longer dump policy entries when specific
    principal names are requested.
  Developer experience:
  * The new krb5_get_etype_info() API can be used to retrieve enctype,
    salt, and string-to-key parameters from the KDC for a client
    principal.
  * The new GSS_KRB5_NT_ENTERPRISE_NAME name type allows enterprise
    principal names to be used with GSS-API functions.
  * KDC and kadmind modules which call com_err() will now write to the
    log file in a format more consistent with other log messages.
  * Programs which use large numbers of memory credential caches should
    perform better.
  Protocol evolution:
  * The SPAKE pre-authentication mechanism is now supported.  This
    mechanism protects against password dictionary attacks without
    requiring any additional infrastructure such as certificates.  SPAKE
    is enabled by default on clients, but must be manually enabled on
    the KDC for this release.
  * PKINIT freshness tokens are now supported.  Freshness tokens can
    protect against scenarios where an attacker uses temporary access to
    a smart card to generate authentication requests for the future.
  * Password change operations now prefer TCP over UDP, to avoid
    spurious error messages about replays when a response packet is
    dropped.
  * The KDC now supports cross-realm S4U2Self requests when used with a
    third-party KDB module such as Samba's.  The client code for
    cross-realm S4U2Self requests is also now more robust
    (CVE-2018-20217).
  User experience:
  * The new ktutil addent -f flag can be used to fetch salt information
    from the KDC for password-based keys.
  * The new kdestroy -p option can be used to destroy a credential cache
    within a collection by client principal name.
  * The Kerberos man page has been restored, and documents the
    environment variables that affect programs using the Kerberos
    library.
  Code quality:
  * Python test scripts now use Python 3.
  * Python test scripts now display markers in verbose output, making it
    easier to find where a failure occurred within the scripts.
  * The Windows build system has been simplified and updated to work
    with more recent versions of Visual Studio.  A large volume of
    unused Windows-specific code has been removed.  Visual Studio 2013
    or later is now required.
- Replace old $RPM_* shell vars
- Removal of SuSEfirewall2 service since SuSEfirewall2 has been replaced
  by firewalld
- Remove cruft to support distributions older than SLE 12
- Use macros where applicable
- Switch to pkgconfig style dependencies
- Use %_tmpfilesdir instead of the wrong %_libexecdir/tmpfiles.d
  notation: libexecdir is likely changing away from /usr/lib to
  /usr/libexec
- Build with full Cyrus SASL support. Negotiating SASL credentials with
  an EXTERNAL bind mechanism requires interaction. Kerberos provides its
  own interaction function that skips all interaction, thus preventing the
  mechanism from working.
- Removed patches:
  * 0007-krb5-1.12-ksu-path.patch
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch
- Renamed patches:
  * 0001-krb5-1.12-pam.patch =&gt; 0001-ksu-pam-integration.patch
  * 0003-krb5-1.12-buildconf.patch =&gt; 0003-Adjust-build-configuration.patch
  * 0008-krb5-1.12-selinux-label.patch =&gt; 0007-SELinux-integration.patch
  * 0009-krb5-1.9-debuginfo.patch =&gt; 0008-krb5-1.9-debuginfo.patch
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch =&gt;
    0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="nopower@suse.com" date="1667822400">- Fix integer overflows in PAC parsing; (CVE-2022-42898);
  (bso#15203), (bsc#1205126).
- Added patches:
  * 0010-Fix-integer-overflows-in-PAC-parsing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1670932800">- Update to 1.20.1; (bsc#1205126); (CVE-2022-42898);
  * Fix integer overflows in PAC parsing [CVE-2022-42898].
  * Fix null deref in KDC when decoding invalid NDR.
  * Fix memory leak in OTP kdcpreauth module.
  * Fix PKCS11 module path search.
- update to 1.20.0:
  * Added a "disable_pac" realm relation to suppress adding PAC authdata
    to tickets, for realms which do not need to support S4U requests.
  * Most credential cache types will use atomic replacement when a cache
    is reinitialized using kinit or refreshed from the client keytab.
  * kprop can now propagate databases with a dump size larger than 4GB,
    if both the client and server are upgraded.
  * kprop can now work over NATs that change the destination IP address,
    if the client is upgraded.
  * Updated the KDB interface.  The sign_authdata() method is replaced
    with the issue_pac() method, allowing KDB modules to add logon info
    and other buffers to the PAC issued by the KDC.
  * Host-based initiator names are better supported in the GSS krb5
    mechanism.
  * Replaced AD-SIGNEDPATH authdata with minimal PACs.
  * To avoid spurious replay errors, password change requests will not
    be attempted over UDP until the attempt over TCP fails.
  * PKINIT will sign its CMS messages with SHA-256 instead of SHA-1.
  * Updated all code using OpenSSL to be compatible with OpenSSL 3.
  * Reorganized the libk5crypto build system to allow the OpenSSL
    back-end to pull in material from the builtin back-end depending on
    the OpenSSL version.
  * Simplified the PRNG logic to always use the platform PRNG.
  * Converted the remaining Tcl tests to Python.
- update to 1.19.3 (bsc#1189929, CVE-2021-37750):
  * Fix a denial of service attack against the KDC [CVE-2021-37750].
  * Fix KDC null deref on TGS inner body null server
  * Fix conformance issue in GSSAPI tests
- Resolve "Credential cache directory /run/user/0/krb5cc does not
  exist while opening default credentials cache" by using a kernel
  keyring instead of a dir cache; (bsc#1109830);
- Added hardening to systemd services; (bsc#1181400);
- Drop 0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch,
  fixed in release 1.20.0
- Drop 0010-Fix-integer-overflows-in-PAC-parsing.patch,
  fixed in release 1.20.1</changelog>
  <changelog author="scabrero@suse.de" date="1691496000">- Ensure array count consistency in kadm5 RPC; (bsc#1214054);
  (CVE-2023-36054);
- Added patches:
  * 0009-Ensure-array-count-consistency-in-kadm5-RPC.patch</changelog>
  <changelog author="scabrero@suse.de" date="1694520000">- Avoid KDC spoofing vulnerability, enable verify_ap_req_nofail in
  krb5.conf; (jsc#PED-6213);</changelog>
  <changelog author="scabrero@suse.de" date="1701172800">- Update patch 0007-SELinux-integration.patch for SELinux 3.5</changelog>
  <changelog author="scabrero@suse.de" date="1711108800">- Fix memory leaks, add patch 0010-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772</changelog>
  <changelog author="scabrero@suse.de" date="1719835200">- Fix vulnerabilities in GSS message token handling, add patch
  0011-Fix-vulnerabilities-in-GSS-message-token-handling.patch
  * CVE-2024-37370, bsc#1227186
  * CVE-2024-37371, bsc#1227187</changelog>
  <changelog author="scabrero@suse.de" date="1737547200">- Add crypto-policies support; (jsc#PED-12018)
  * The default krb5.conf has been updated to include config
    snippets in the krb5.conf.d directory, where crypto-policies
    drops its.
- Allow to use KRB5KDF in FIPS mode; (jsc#PED-12018); Add patch
  0012-Allow-KRB5KDF-in-FIPS-mode.patch
  * This key derivation function is used by AES256-CTS-HMAC-SHA1-96
    and AES128-CTS-HMAC-SHA1-96 encryption types, used by Active
    directory. If these encryption types are allowed or not in
    FIPS mode is enforced now by the FIPS:AD-SUPPORT subpolicy.</changelog>
  <changelog author="scabrero@suse.de" date="1738238400">- Prevent overflow when calculating ulog block size. An authenticated
  attacker can cause kadmind to write beyond the end of the mapped
  region for the iprop log file, likely causing a process crash;
  (CVE-2025-24528); (bsc#1236619).
- Add patch 0013-Prevent-overflow-when-calculating-ulog-block-size.patch</changelog>
  <changelog author="scabrero@suse.de" date="1746446400">- Remove references to the LMDB backend in the kdc.conf manpage;
  (bsc#1242060);</changelog>
  <changelog author="nopower@suse.com" date="1756814400">- Remove des3-cbc-sha1 and arcfour-hmac-md5 from permitted
  enctypes unless new special options "allow_des3" or "allow_rc4"
  are set; (CVE-2025-3576); (bsc#1241219).
- Add patch 0015-CVE-2025-3576.patch</changelog>
</package>
<package pkgid="167264275db8132ea98e2d6a08295987a421763a3915176b618c1812969f6ccd" name="krb5-32bit" arch="x86_64">
  <version epoch="0" ver="1.20.1" rel="150600.11.11.2"/>
  <changelog author="scabrero@suse.de" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="scabrero@suse.de" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="scabrero@suse.de" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="scabrero@suse.de" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="scabrero@suse.de" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619092800">- Use /run instead of /var/run for daemon PID files; (bsc#1185163);</changelog>
  <changelog author="scabrero@suse.de" date="1627300800">- Fix KDC null deref on bad encrypted challenge; (CVE-2021-36222);
  (bsc#1188571);
- Added patches:
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch</changelog>
  <changelog author="scabrero@suse.de" date="1630324800">- Fix KDC null pointer dereference via a FAST inner body that
  lacks a server field; (CVE-2021-37750); (bsc#1189929);
- Added patches:
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="scabrero@suse.de" date="1631880000">- Update to 1.19.2
  * Fix a denial of service attack against the KDC encrypted challenge
    code; (CVE-2021-36222);
  * Fix a memory leak when gss_inquire_cred() is called without a
    credential handle.
- Changes from 1.19.1
  * Fix a linking issue with Samba.
  * Better support multiple pkinit_identities values by checking whether
    certificates can be loaded for each value.
- Changes from 1.19
  Administrator experience
  * When a client keytab is present, the GSSAPI krb5 mech will refresh
    credentials even if the current credentials were acquired manually.
  * It is now harder to accidentally delete the K/M entry from a KDB.
  Developer experience
  * gss_acquire_cred_from() now supports the "password" and "verify"
    options, allowing credentials to be acquired via password and
    verified using a keytab key.
  * When an application accepts a GSS security context, the new
    GSS_C_CHANNEL_BOUND_FLAG will be set if the initiator and acceptor
    both provided matching channel bindings.
  * Added the GSS_KRB5_NT_X509_CERT name type, allowing S4U2Self requests
    to identify the desired client principal by certificate.
  * PKINIT certauth modules can now cause the hw-authent flag to be set
    in issued tickets.
  * The krb5_init_creds_step() API will now issue the same password
    expiration warnings as krb5_get_init_creds_password().
  Protocol evolution
  * Added client and KDC support for Microsoft's Resource-Based Constrained
    Delegation, which allows cross-realm S4U2Proxy requests. A third-party
    database module is required for KDC support.
  * kadmin/admin is now the preferred server principal name for kadmin
    connections, and the host-based form is no longer created by default.
    The client will still try the host-based form as a fallback.
  * Added client and server support for Microsoft's KERB_AP_OPTIONS_CBT
    extension, which causes channel bindings to be required for the
    initiator if the acceptor provided them. The client will send this
    option if the client_aware_gss_bindings profile option is set.
  User experience
  * kinit will now issue a warning if the des3-cbc-sha1 encryption type is
    used in the reply. This encryption type will be deprecated and removed
    in future releases.
  * Added kvno flags --out-cache, --no-store, and --cached-only
    (inspired by Heimdal's kgetcred).
- Changes from 1.18.3
  * Fix a denial of service vulnerability when decoding Kerberos
    protocol messages; (CVE-2020-28196); (bsc#1178512);
  * Fix a locking issue with the LMDB KDB module which could cause
    KDC and kadmind processes to lose access to the database.
  * Fix an assertion failure when libgssapi_krb5 is repeatedly loaded
    and unloaded while libkrb5support remains loaded.
- Changes from 1.18.2
  * Fix a SPNEGO regression where an acceptor using the default credential
    would improperly filter mechanisms, causing a negotiation failure.
  * Fix a bug where the KDC would fail to issue tickets if the local krbtgt
    principal's first key has a single-DES enctype.
  * Add stub functions to allow old versions of OpenSSL libcrypto to link
    against libkrb5.
  * Fix a NegoEx bug where the client name and delegated credential might
    not be reported.
- Changes from 1.18.1
  * Fix a crash when qualifying short hostnames when the system has
    no primary DNS domain.
  * Fix a regression when an application imports "service@" as a GSS
    host-based name for its acceptor credential handle.
  * Fix KDC enforcement of auth indicators when they are modified by
    the KDB module.
  * Fix removal of require_auth string attributes when the LDAP KDB
    module is used.
  * Fix a compile error when building with musl libc on Linux.
  * Fix a compile error when building with gcc 4.x.
  * Change the KDC constrained delegation precedence order for consistency
    with Windows KDCs.
- Changes from 1.18
  Administrator experience:
  * Remove support for single-DES encryption types.
  * Change the replay cache format to be more efficient and robust.
    Replay cache filenames using the new format end with ".rcache2"
    by default.
  * setuid programs will automatically ignore environment variables
    that normally affect krb5 API functions, even if the caller does
    not use krb5_init_secure_context().
  * Add an "enforce_ok_as_delegate" krb5.conf relation to disable
    credential forwarding during GSSAPI authentication unless the KDC
    sets the ok-as-delegate bit in the service ticket.
  * Use the permitted_enctypes krb5.conf setting as the default value
    for default_tkt_enctypes and default_tgs_enctypes.
  Developer experience:
  * Implement krb5_cc_remove_cred() for all credential cache types.
  * Add the krb5_pac_get_client_info() API to get the client account
    name from a PAC.
  Protocol evolution:
  * Add KDC support for S4U2Self requests where the user is identified
    by X.509 certificate. (Requires support for certificate lookup from
    a third-party KDB module.)
  * Remove support for an old ("draft 9") variant of PKINIT.
  * Add support for Microsoft NegoEx. (Requires one or more third-party
    GSS modules implementing NegoEx mechanisms.)
  User experience:
  * Add support for "dns_canonicalize_hostname=fallback", causing
    host-based principal names to be tried first without DNS
    canonicalization, and again with DNS canonicalization if the
    un-canonicalized server is not found.
  * Expand single-component hostnames in host-based principal names
    when DNS canonicalization is not used, adding the system's first DNS
    search path as a suffix. Add a "qualify_shortname" krb5.conf relation
    to override this suffix or disable expansion.
  * Honor the transited-policy-checked ticket flag on application servers,
    eliminating the requirement to configure capaths on servers in some
    scenarios.
  Code quality:
  * The libkrb5 serialization code (used to export and import krb5 GSS
    security contexts) has been simplified and made type-safe.
  * The libkrb5 code for creating KRB-PRIV, KRB-SAFE, and KRB-CRED
    messages has been revised to conform to current coding practices.
  * The test suite has been modified to work with macOS System Integrity
    Protection enabled.
  * The test suite incorporates soft-pkcs11 so that PKINIT PKCS11 support
    can always be tested.
- Changes from 1.17.1
  * Fix a bug preventing "addprinc -randkey -kvno" from working in kadmin.
  * Fix a bug preventing time skew correction from working when a KCM
    credential cache is used.
- Changes from 1.17:
  Administrator experience:
  * A new Kerberos database module using the Lightning Memory-Mapped
    Database library (LMDB) has been added.  The LMDB KDB module should
    be more performant and more robust than the DB2 module, and may
    become the default module for new databases in a future release.
  * "kdb5_util dump" will no longer dump policy entries when specific
    principal names are requested.
  Developer experience:
  * The new krb5_get_etype_info() API can be used to retrieve enctype,
    salt, and string-to-key parameters from the KDC for a client
    principal.
  * The new GSS_KRB5_NT_ENTERPRISE_NAME name type allows enterprise
    principal names to be used with GSS-API functions.
  * KDC and kadmind modules which call com_err() will now write to the
    log file in a format more consistent with other log messages.
  * Programs which use large numbers of memory credential caches should
    perform better.
  Protocol evolution:
  * The SPAKE pre-authentication mechanism is now supported.  This
    mechanism protects against password dictionary attacks without
    requiring any additional infrastructure such as certificates.  SPAKE
    is enabled by default on clients, but must be manually enabled on
    the KDC for this release.
  * PKINIT freshness tokens are now supported.  Freshness tokens can
    protect against scenarios where an attacker uses temporary access to
    a smart card to generate authentication requests for the future.
  * Password change operations now prefer TCP over UDP, to avoid
    spurious error messages about replays when a response packet is
    dropped.
  * The KDC now supports cross-realm S4U2Self requests when used with a
    third-party KDB module such as Samba's.  The client code for
    cross-realm S4U2Self requests is also now more robust
    (CVE-2018-20217).
  User experience:
  * The new ktutil addent -f flag can be used to fetch salt information
    from the KDC for password-based keys.
  * The new kdestroy -p option can be used to destroy a credential cache
    within a collection by client principal name.
  * The Kerberos man page has been restored, and documents the
    environment variables that affect programs using the Kerberos
    library.
  Code quality:
  * Python test scripts now use Python 3.
  * Python test scripts now display markers in verbose output, making it
    easier to find where a failure occurred within the scripts.
  * The Windows build system has been simplified and updated to work
    with more recent versions of Visual Studio.  A large volume of
    unused Windows-specific code has been removed.  Visual Studio 2013
    or later is now required.
- Replace old $RPM_* shell vars
- Removal of SuSEfirewall2 service since SuSEfirewall2 has been replaced
  by firewalld
- Remove cruft to support distributions older than SLE 12
- Use macros where applicable
- Switch to pkgconfig style dependencies
- Use %_tmpfilesdir instead of the wrong %_libexecdir/tmpfiles.d
  notation: libexecdir is likely changing away from /usr/lib to
  /usr/libexec
- Build with full Cyrus SASL support. Negotiating SASL credentials with
  an EXTERNAL bind mechanism requires interaction. Kerberos provides its
  own interaction function that skips all interaction, thus preventing the
  mechanism from working.
- Removed patches:
  * 0007-krb5-1.12-ksu-path.patch
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch
- Renamed patches:
  * 0001-krb5-1.12-pam.patch =&gt; 0001-ksu-pam-integration.patch
  * 0003-krb5-1.12-buildconf.patch =&gt; 0003-Adjust-build-configuration.patch
  * 0008-krb5-1.12-selinux-label.patch =&gt; 0007-SELinux-integration.patch
  * 0009-krb5-1.9-debuginfo.patch =&gt; 0008-krb5-1.9-debuginfo.patch
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch =&gt;
    0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="nopower@suse.com" date="1667822400">- Fix integer overflows in PAC parsing; (CVE-2022-42898);
  (bso#15203), (bsc#1205126).
- Added patches:
  * 0010-Fix-integer-overflows-in-PAC-parsing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1670932800">- Update to 1.20.1; (bsc#1205126); (CVE-2022-42898);
  * Fix integer overflows in PAC parsing [CVE-2022-42898].
  * Fix null deref in KDC when decoding invalid NDR.
  * Fix memory leak in OTP kdcpreauth module.
  * Fix PKCS11 module path search.
- update to 1.20.0:
  * Added a "disable_pac" realm relation to suppress adding PAC authdata
    to tickets, for realms which do not need to support S4U requests.
  * Most credential cache types will use atomic replacement when a cache
    is reinitialized using kinit or refreshed from the client keytab.
  * kprop can now propagate databases with a dump size larger than 4GB,
    if both the client and server are upgraded.
  * kprop can now work over NATs that change the destination IP address,
    if the client is upgraded.
  * Updated the KDB interface.  The sign_authdata() method is replaced
    with the issue_pac() method, allowing KDB modules to add logon info
    and other buffers to the PAC issued by the KDC.
  * Host-based initiator names are better supported in the GSS krb5
    mechanism.
  * Replaced AD-SIGNEDPATH authdata with minimal PACs.
  * To avoid spurious replay errors, password change requests will not
    be attempted over UDP until the attempt over TCP fails.
  * PKINIT will sign its CMS messages with SHA-256 instead of SHA-1.
  * Updated all code using OpenSSL to be compatible with OpenSSL 3.
  * Reorganized the libk5crypto build system to allow the OpenSSL
    back-end to pull in material from the builtin back-end depending on
    the OpenSSL version.
  * Simplified the PRNG logic to always use the platform PRNG.
  * Converted the remaining Tcl tests to Python.
- update to 1.19.3 (bsc#1189929, CVE-2021-37750):
  * Fix a denial of service attack against the KDC [CVE-2021-37750].
  * Fix KDC null deref on TGS inner body null server
  * Fix conformance issue in GSSAPI tests
- Resolve "Credential cache directory /run/user/0/krb5cc does not
  exist while opening default credentials cache" by using a kernel
  keyring instead of a dir cache; (bsc#1109830);
- Added hardening to systemd services; (bsc#1181400);
- Drop 0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch,
  fixed in release 1.20.0
- Drop 0010-Fix-integer-overflows-in-PAC-parsing.patch,
  fixed in release 1.20.1</changelog>
  <changelog author="scabrero@suse.de" date="1691496000">- Ensure array count consistency in kadm5 RPC; (bsc#1214054);
  (CVE-2023-36054);
- Added patches:
  * 0009-Ensure-array-count-consistency-in-kadm5-RPC.patch</changelog>
  <changelog author="scabrero@suse.de" date="1694520000">- Avoid KDC spoofing vulnerability, enable verify_ap_req_nofail in
  krb5.conf; (jsc#PED-6213);</changelog>
  <changelog author="scabrero@suse.de" date="1701172800">- Update patch 0007-SELinux-integration.patch for SELinux 3.5</changelog>
  <changelog author="scabrero@suse.de" date="1711108800">- Fix memory leaks, add patch 0010-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772</changelog>
  <changelog author="scabrero@suse.de" date="1719835200">- Fix vulnerabilities in GSS message token handling, add patch
  0011-Fix-vulnerabilities-in-GSS-message-token-handling.patch
  * CVE-2024-37370, bsc#1227186
  * CVE-2024-37371, bsc#1227187</changelog>
  <changelog author="scabrero@suse.de" date="1737547200">- Add crypto-policies support; (jsc#PED-12018)
  * The default krb5.conf has been updated to include config
    snippets in the krb5.conf.d directory, where crypto-policies
    drops its.
- Allow to use KRB5KDF in FIPS mode; (jsc#PED-12018); Add patch
  0012-Allow-KRB5KDF-in-FIPS-mode.patch
  * This key derivation function is used by AES256-CTS-HMAC-SHA1-96
    and AES128-CTS-HMAC-SHA1-96 encryption types, used by Active
    directory. If these encryption types are allowed or not in
    FIPS mode is enforced now by the FIPS:AD-SUPPORT subpolicy.</changelog>
  <changelog author="scabrero@suse.de" date="1738238400">- Prevent overflow when calculating ulog block size. An authenticated
  attacker can cause kadmind to write beyond the end of the mapped
  region for the iprop log file, likely causing a process crash;
  (CVE-2025-24528); (bsc#1236619).
- Add patch 0013-Prevent-overflow-when-calculating-ulog-block-size.patch</changelog>
  <changelog author="scabrero@suse.de" date="1746446400">- Remove references to the LMDB backend in the kdc.conf manpage;
  (bsc#1242060);</changelog>
</package>
<package pkgid="4c41562cb6f504e088b41f45cd07620abdc3b1360325aa52c17e8ba27305fa0a" name="krb5-32bit" arch="x86_64">
  <version epoch="0" ver="1.20.1" rel="150600.11.14.1"/>
  <changelog author="scabrero@suse.de" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="scabrero@suse.de" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="scabrero@suse.de" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="scabrero@suse.de" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619092800">- Use /run instead of /var/run for daemon PID files; (bsc#1185163);</changelog>
  <changelog author="scabrero@suse.de" date="1627300800">- Fix KDC null deref on bad encrypted challenge; (CVE-2021-36222);
  (bsc#1188571);
- Added patches:
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch</changelog>
  <changelog author="scabrero@suse.de" date="1630324800">- Fix KDC null pointer dereference via a FAST inner body that
  lacks a server field; (CVE-2021-37750); (bsc#1189929);
- Added patches:
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="scabrero@suse.de" date="1631880000">- Update to 1.19.2
  * Fix a denial of service attack against the KDC encrypted challenge
    code; (CVE-2021-36222);
  * Fix a memory leak when gss_inquire_cred() is called without a
    credential handle.
- Changes from 1.19.1
  * Fix a linking issue with Samba.
  * Better support multiple pkinit_identities values by checking whether
    certificates can be loaded for each value.
- Changes from 1.19
  Administrator experience
  * When a client keytab is present, the GSSAPI krb5 mech will refresh
    credentials even if the current credentials were acquired manually.
  * It is now harder to accidentally delete the K/M entry from a KDB.
  Developer experience
  * gss_acquire_cred_from() now supports the "password" and "verify"
    options, allowing credentials to be acquired via password and
    verified using a keytab key.
  * When an application accepts a GSS security context, the new
    GSS_C_CHANNEL_BOUND_FLAG will be set if the initiator and acceptor
    both provided matching channel bindings.
  * Added the GSS_KRB5_NT_X509_CERT name type, allowing S4U2Self requests
    to identify the desired client principal by certificate.
  * PKINIT certauth modules can now cause the hw-authent flag to be set
    in issued tickets.
  * The krb5_init_creds_step() API will now issue the same password
    expiration warnings as krb5_get_init_creds_password().
  Protocol evolution
  * Added client and KDC support for Microsoft's Resource-Based Constrained
    Delegation, which allows cross-realm S4U2Proxy requests. A third-party
    database module is required for KDC support.
  * kadmin/admin is now the preferred server principal name for kadmin
    connections, and the host-based form is no longer created by default.
    The client will still try the host-based form as a fallback.
  * Added client and server support for Microsoft's KERB_AP_OPTIONS_CBT
    extension, which causes channel bindings to be required for the
    initiator if the acceptor provided them. The client will send this
    option if the client_aware_gss_bindings profile option is set.
  User experience
  * kinit will now issue a warning if the des3-cbc-sha1 encryption type is
    used in the reply. This encryption type will be deprecated and removed
    in future releases.
  * Added kvno flags --out-cache, --no-store, and --cached-only
    (inspired by Heimdal's kgetcred).
- Changes from 1.18.3
  * Fix a denial of service vulnerability when decoding Kerberos
    protocol messages; (CVE-2020-28196); (bsc#1178512);
  * Fix a locking issue with the LMDB KDB module which could cause
    KDC and kadmind processes to lose access to the database.
  * Fix an assertion failure when libgssapi_krb5 is repeatedly loaded
    and unloaded while libkrb5support remains loaded.
- Changes from 1.18.2
  * Fix a SPNEGO regression where an acceptor using the default credential
    would improperly filter mechanisms, causing a negotiation failure.
  * Fix a bug where the KDC would fail to issue tickets if the local krbtgt
    principal's first key has a single-DES enctype.
  * Add stub functions to allow old versions of OpenSSL libcrypto to link
    against libkrb5.
  * Fix a NegoEx bug where the client name and delegated credential might
    not be reported.
- Changes from 1.18.1
  * Fix a crash when qualifying short hostnames when the system has
    no primary DNS domain.
  * Fix a regression when an application imports "service@" as a GSS
    host-based name for its acceptor credential handle.
  * Fix KDC enforcement of auth indicators when they are modified by
    the KDB module.
  * Fix removal of require_auth string attributes when the LDAP KDB
    module is used.
  * Fix a compile error when building with musl libc on Linux.
  * Fix a compile error when building with gcc 4.x.
  * Change the KDC constrained delegation precedence order for consistency
    with Windows KDCs.
- Changes from 1.18
  Administrator experience:
  * Remove support for single-DES encryption types.
  * Change the replay cache format to be more efficient and robust.
    Replay cache filenames using the new format end with ".rcache2"
    by default.
  * setuid programs will automatically ignore environment variables
    that normally affect krb5 API functions, even if the caller does
    not use krb5_init_secure_context().
  * Add an "enforce_ok_as_delegate" krb5.conf relation to disable
    credential forwarding during GSSAPI authentication unless the KDC
    sets the ok-as-delegate bit in the service ticket.
  * Use the permitted_enctypes krb5.conf setting as the default value
    for default_tkt_enctypes and default_tgs_enctypes.
  Developer experience:
  * Implement krb5_cc_remove_cred() for all credential cache types.
  * Add the krb5_pac_get_client_info() API to get the client account
    name from a PAC.
  Protocol evolution:
  * Add KDC support for S4U2Self requests where the user is identified
    by X.509 certificate. (Requires support for certificate lookup from
    a third-party KDB module.)
  * Remove support for an old ("draft 9") variant of PKINIT.
  * Add support for Microsoft NegoEx. (Requires one or more third-party
    GSS modules implementing NegoEx mechanisms.)
  User experience:
  * Add support for "dns_canonicalize_hostname=fallback", causing
    host-based principal names to be tried first without DNS
    canonicalization, and again with DNS canonicalization if the
    un-canonicalized server is not found.
  * Expand single-component hostnames in host-based principal names
    when DNS canonicalization is not used, adding the system's first DNS
    search path as a suffix. Add a "qualify_shortname" krb5.conf relation
    to override this suffix or disable expansion.
  * Honor the transited-policy-checked ticket flag on application servers,
    eliminating the requirement to configure capaths on servers in some
    scenarios.
  Code quality:
  * The libkrb5 serialization code (used to export and import krb5 GSS
    security contexts) has been simplified and made type-safe.
  * The libkrb5 code for creating KRB-PRIV, KRB-SAFE, and KRB-CRED
    messages has been revised to conform to current coding practices.
  * The test suite has been modified to work with macOS System Integrity
    Protection enabled.
  * The test suite incorporates soft-pkcs11 so that PKINIT PKCS11 support
    can always be tested.
- Changes from 1.17.1
  * Fix a bug preventing "addprinc -randkey -kvno" from working in kadmin.
  * Fix a bug preventing time skew correction from working when a KCM
    credential cache is used.
- Changes from 1.17:
  Administrator experience:
  * A new Kerberos database module using the Lightning Memory-Mapped
    Database library (LMDB) has been added.  The LMDB KDB module should
    be more performant and more robust than the DB2 module, and may
    become the default module for new databases in a future release.
  * "kdb5_util dump" will no longer dump policy entries when specific
    principal names are requested.
  Developer experience:
  * The new krb5_get_etype_info() API can be used to retrieve enctype,
    salt, and string-to-key parameters from the KDC for a client
    principal.
  * The new GSS_KRB5_NT_ENTERPRISE_NAME name type allows enterprise
    principal names to be used with GSS-API functions.
  * KDC and kadmind modules which call com_err() will now write to the
    log file in a format more consistent with other log messages.
  * Programs which use large numbers of memory credential caches should
    perform better.
  Protocol evolution:
  * The SPAKE pre-authentication mechanism is now supported.  This
    mechanism protects against password dictionary attacks without
    requiring any additional infrastructure such as certificates.  SPAKE
    is enabled by default on clients, but must be manually enabled on
    the KDC for this release.
  * PKINIT freshness tokens are now supported.  Freshness tokens can
    protect against scenarios where an attacker uses temporary access to
    a smart card to generate authentication requests for the future.
  * Password change operations now prefer TCP over UDP, to avoid
    spurious error messages about replays when a response packet is
    dropped.
  * The KDC now supports cross-realm S4U2Self requests when used with a
    third-party KDB module such as Samba's.  The client code for
    cross-realm S4U2Self requests is also now more robust
    (CVE-2018-20217).
  User experience:
  * The new ktutil addent -f flag can be used to fetch salt information
    from the KDC for password-based keys.
  * The new kdestroy -p option can be used to destroy a credential cache
    within a collection by client principal name.
  * The Kerberos man page has been restored, and documents the
    environment variables that affect programs using the Kerberos
    library.
  Code quality:
  * Python test scripts now use Python 3.
  * Python test scripts now display markers in verbose output, making it
    easier to find where a failure occurred within the scripts.
  * The Windows build system has been simplified and updated to work
    with more recent versions of Visual Studio.  A large volume of
    unused Windows-specific code has been removed.  Visual Studio 2013
    or later is now required.
- Replace old $RPM_* shell vars
- Removal of SuSEfirewall2 service since SuSEfirewall2 has been replaced
  by firewalld
- Remove cruft to support distributions older than SLE 12
- Use macros where applicable
- Switch to pkgconfig style dependencies
- Use %_tmpfilesdir instead of the wrong %_libexecdir/tmpfiles.d
  notation: libexecdir is likely changing away from /usr/lib to
  /usr/libexec
- Build with full Cyrus SASL support. Negotiating SASL credentials with
  an EXTERNAL bind mechanism requires interaction. Kerberos provides its
  own interaction function that skips all interaction, thus preventing the
  mechanism from working.
- Removed patches:
  * 0007-krb5-1.12-ksu-path.patch
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch
- Renamed patches:
  * 0001-krb5-1.12-pam.patch =&gt; 0001-ksu-pam-integration.patch
  * 0003-krb5-1.12-buildconf.patch =&gt; 0003-Adjust-build-configuration.patch
  * 0008-krb5-1.12-selinux-label.patch =&gt; 0007-SELinux-integration.patch
  * 0009-krb5-1.9-debuginfo.patch =&gt; 0008-krb5-1.9-debuginfo.patch
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch =&gt;
    0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="nopower@suse.com" date="1667822400">- Fix integer overflows in PAC parsing; (CVE-2022-42898);
  (bso#15203), (bsc#1205126).
- Added patches:
  * 0010-Fix-integer-overflows-in-PAC-parsing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1670932800">- Update to 1.20.1; (bsc#1205126); (CVE-2022-42898);
  * Fix integer overflows in PAC parsing [CVE-2022-42898].
  * Fix null deref in KDC when decoding invalid NDR.
  * Fix memory leak in OTP kdcpreauth module.
  * Fix PKCS11 module path search.
- update to 1.20.0:
  * Added a "disable_pac" realm relation to suppress adding PAC authdata
    to tickets, for realms which do not need to support S4U requests.
  * Most credential cache types will use atomic replacement when a cache
    is reinitialized using kinit or refreshed from the client keytab.
  * kprop can now propagate databases with a dump size larger than 4GB,
    if both the client and server are upgraded.
  * kprop can now work over NATs that change the destination IP address,
    if the client is upgraded.
  * Updated the KDB interface.  The sign_authdata() method is replaced
    with the issue_pac() method, allowing KDB modules to add logon info
    and other buffers to the PAC issued by the KDC.
  * Host-based initiator names are better supported in the GSS krb5
    mechanism.
  * Replaced AD-SIGNEDPATH authdata with minimal PACs.
  * To avoid spurious replay errors, password change requests will not
    be attempted over UDP until the attempt over TCP fails.
  * PKINIT will sign its CMS messages with SHA-256 instead of SHA-1.
  * Updated all code using OpenSSL to be compatible with OpenSSL 3.
  * Reorganized the libk5crypto build system to allow the OpenSSL
    back-end to pull in material from the builtin back-end depending on
    the OpenSSL version.
  * Simplified the PRNG logic to always use the platform PRNG.
  * Converted the remaining Tcl tests to Python.
- update to 1.19.3 (bsc#1189929, CVE-2021-37750):
  * Fix a denial of service attack against the KDC [CVE-2021-37750].
  * Fix KDC null deref on TGS inner body null server
  * Fix conformance issue in GSSAPI tests
- Resolve "Credential cache directory /run/user/0/krb5cc does not
  exist while opening default credentials cache" by using a kernel
  keyring instead of a dir cache; (bsc#1109830);
- Added hardening to systemd services; (bsc#1181400);
- Drop 0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch,
  fixed in release 1.20.0
- Drop 0010-Fix-integer-overflows-in-PAC-parsing.patch,
  fixed in release 1.20.1</changelog>
  <changelog author="scabrero@suse.de" date="1691496000">- Ensure array count consistency in kadm5 RPC; (bsc#1214054);
  (CVE-2023-36054);
- Added patches:
  * 0009-Ensure-array-count-consistency-in-kadm5-RPC.patch</changelog>
  <changelog author="scabrero@suse.de" date="1694520000">- Avoid KDC spoofing vulnerability, enable verify_ap_req_nofail in
  krb5.conf; (jsc#PED-6213);</changelog>
  <changelog author="scabrero@suse.de" date="1701172800">- Update patch 0007-SELinux-integration.patch for SELinux 3.5</changelog>
  <changelog author="scabrero@suse.de" date="1711108800">- Fix memory leaks, add patch 0010-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772</changelog>
  <changelog author="scabrero@suse.de" date="1719835200">- Fix vulnerabilities in GSS message token handling, add patch
  0011-Fix-vulnerabilities-in-GSS-message-token-handling.patch
  * CVE-2024-37370, bsc#1227186
  * CVE-2024-37371, bsc#1227187</changelog>
  <changelog author="scabrero@suse.de" date="1737547200">- Add crypto-policies support; (jsc#PED-12018)
  * The default krb5.conf has been updated to include config
    snippets in the krb5.conf.d directory, where crypto-policies
    drops its.
- Allow to use KRB5KDF in FIPS mode; (jsc#PED-12018); Add patch
  0012-Allow-KRB5KDF-in-FIPS-mode.patch
  * This key derivation function is used by AES256-CTS-HMAC-SHA1-96
    and AES128-CTS-HMAC-SHA1-96 encryption types, used by Active
    directory. If these encryption types are allowed or not in
    FIPS mode is enforced now by the FIPS:AD-SUPPORT subpolicy.</changelog>
  <changelog author="scabrero@suse.de" date="1738238400">- Prevent overflow when calculating ulog block size. An authenticated
  attacker can cause kadmind to write beyond the end of the mapped
  region for the iprop log file, likely causing a process crash;
  (CVE-2025-24528); (bsc#1236619).
- Add patch 0013-Prevent-overflow-when-calculating-ulog-block-size.patch</changelog>
  <changelog author="scabrero@suse.de" date="1746446400">- Remove references to the LMDB backend in the kdc.conf manpage;
  (bsc#1242060);</changelog>
  <changelog author="nopower@suse.com" date="1756814400">- Remove des3-cbc-sha1 and arcfour-hmac-md5 from permitted
  enctypes unless new special options "allow_des3" or "allow_rc4"
  are set; (CVE-2025-3576); (bsc#1241219).
- Add patch 0015-CVE-2025-3576.patch</changelog>
</package>
<package pkgid="0ef391aed2fafb6e551707e2545879374b3697b218c18ddb8709380a9bb92279" name="krb5-client" arch="x86_64">
  <version epoch="0" ver="1.20.1" rel="150600.11.11.2"/>
  <changelog author="scabrero@suse.de" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="scabrero@suse.de" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="scabrero@suse.de" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="scabrero@suse.de" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="scabrero@suse.de" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619092800">- Use /run instead of /var/run for daemon PID files; (bsc#1185163);</changelog>
  <changelog author="scabrero@suse.de" date="1627300800">- Fix KDC null deref on bad encrypted challenge; (CVE-2021-36222);
  (bsc#1188571);
- Added patches:
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch</changelog>
  <changelog author="scabrero@suse.de" date="1630324800">- Fix KDC null pointer dereference via a FAST inner body that
  lacks a server field; (CVE-2021-37750); (bsc#1189929);
- Added patches:
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="scabrero@suse.de" date="1631880000">- Update to 1.19.2
  * Fix a denial of service attack against the KDC encrypted challenge
    code; (CVE-2021-36222);
  * Fix a memory leak when gss_inquire_cred() is called without a
    credential handle.
- Changes from 1.19.1
  * Fix a linking issue with Samba.
  * Better support multiple pkinit_identities values by checking whether
    certificates can be loaded for each value.
- Changes from 1.19
  Administrator experience
  * When a client keytab is present, the GSSAPI krb5 mech will refresh
    credentials even if the current credentials were acquired manually.
  * It is now harder to accidentally delete the K/M entry from a KDB.
  Developer experience
  * gss_acquire_cred_from() now supports the "password" and "verify"
    options, allowing credentials to be acquired via password and
    verified using a keytab key.
  * When an application accepts a GSS security context, the new
    GSS_C_CHANNEL_BOUND_FLAG will be set if the initiator and acceptor
    both provided matching channel bindings.
  * Added the GSS_KRB5_NT_X509_CERT name type, allowing S4U2Self requests
    to identify the desired client principal by certificate.
  * PKINIT certauth modules can now cause the hw-authent flag to be set
    in issued tickets.
  * The krb5_init_creds_step() API will now issue the same password
    expiration warnings as krb5_get_init_creds_password().
  Protocol evolution
  * Added client and KDC support for Microsoft's Resource-Based Constrained
    Delegation, which allows cross-realm S4U2Proxy requests. A third-party
    database module is required for KDC support.
  * kadmin/admin is now the preferred server principal name for kadmin
    connections, and the host-based form is no longer created by default.
    The client will still try the host-based form as a fallback.
  * Added client and server support for Microsoft's KERB_AP_OPTIONS_CBT
    extension, which causes channel bindings to be required for the
    initiator if the acceptor provided them. The client will send this
    option if the client_aware_gss_bindings profile option is set.
  User experience
  * kinit will now issue a warning if the des3-cbc-sha1 encryption type is
    used in the reply. This encryption type will be deprecated and removed
    in future releases.
  * Added kvno flags --out-cache, --no-store, and --cached-only
    (inspired by Heimdal's kgetcred).
- Changes from 1.18.3
  * Fix a denial of service vulnerability when decoding Kerberos
    protocol messages; (CVE-2020-28196); (bsc#1178512);
  * Fix a locking issue with the LMDB KDB module which could cause
    KDC and kadmind processes to lose access to the database.
  * Fix an assertion failure when libgssapi_krb5 is repeatedly loaded
    and unloaded while libkrb5support remains loaded.
- Changes from 1.18.2
  * Fix a SPNEGO regression where an acceptor using the default credential
    would improperly filter mechanisms, causing a negotiation failure.
  * Fix a bug where the KDC would fail to issue tickets if the local krbtgt
    principal's first key has a single-DES enctype.
  * Add stub functions to allow old versions of OpenSSL libcrypto to link
    against libkrb5.
  * Fix a NegoEx bug where the client name and delegated credential might
    not be reported.
- Changes from 1.18.1
  * Fix a crash when qualifying short hostnames when the system has
    no primary DNS domain.
  * Fix a regression when an application imports "service@" as a GSS
    host-based name for its acceptor credential handle.
  * Fix KDC enforcement of auth indicators when they are modified by
    the KDB module.
  * Fix removal of require_auth string attributes when the LDAP KDB
    module is used.
  * Fix a compile error when building with musl libc on Linux.
  * Fix a compile error when building with gcc 4.x.
  * Change the KDC constrained delegation precedence order for consistency
    with Windows KDCs.
- Changes from 1.18
  Administrator experience:
  * Remove support for single-DES encryption types.
  * Change the replay cache format to be more efficient and robust.
    Replay cache filenames using the new format end with ".rcache2"
    by default.
  * setuid programs will automatically ignore environment variables
    that normally affect krb5 API functions, even if the caller does
    not use krb5_init_secure_context().
  * Add an "enforce_ok_as_delegate" krb5.conf relation to disable
    credential forwarding during GSSAPI authentication unless the KDC
    sets the ok-as-delegate bit in the service ticket.
  * Use the permitted_enctypes krb5.conf setting as the default value
    for default_tkt_enctypes and default_tgs_enctypes.
  Developer experience:
  * Implement krb5_cc_remove_cred() for all credential cache types.
  * Add the krb5_pac_get_client_info() API to get the client account
    name from a PAC.
  Protocol evolution:
  * Add KDC support for S4U2Self requests where the user is identified
    by X.509 certificate. (Requires support for certificate lookup from
    a third-party KDB module.)
  * Remove support for an old ("draft 9") variant of PKINIT.
  * Add support for Microsoft NegoEx. (Requires one or more third-party
    GSS modules implementing NegoEx mechanisms.)
  User experience:
  * Add support for "dns_canonicalize_hostname=fallback", causing
    host-based principal names to be tried first without DNS
    canonicalization, and again with DNS canonicalization if the
    un-canonicalized server is not found.
  * Expand single-component hostnames in host-based principal names
    when DNS canonicalization is not used, adding the system's first DNS
    search path as a suffix. Add a "qualify_shortname" krb5.conf relation
    to override this suffix or disable expansion.
  * Honor the transited-policy-checked ticket flag on application servers,
    eliminating the requirement to configure capaths on servers in some
    scenarios.
  Code quality:
  * The libkrb5 serialization code (used to export and import krb5 GSS
    security contexts) has been simplified and made type-safe.
  * The libkrb5 code for creating KRB-PRIV, KRB-SAFE, and KRB-CRED
    messages has been revised to conform to current coding practices.
  * The test suite has been modified to work with macOS System Integrity
    Protection enabled.
  * The test suite incorporates soft-pkcs11 so that PKINIT PKCS11 support
    can always be tested.
- Changes from 1.17.1
  * Fix a bug preventing "addprinc -randkey -kvno" from working in kadmin.
  * Fix a bug preventing time skew correction from working when a KCM
    credential cache is used.
- Changes from 1.17:
  Administrator experience:
  * A new Kerberos database module using the Lightning Memory-Mapped
    Database library (LMDB) has been added.  The LMDB KDB module should
    be more performant and more robust than the DB2 module, and may
    become the default module for new databases in a future release.
  * "kdb5_util dump" will no longer dump policy entries when specific
    principal names are requested.
  Developer experience:
  * The new krb5_get_etype_info() API can be used to retrieve enctype,
    salt, and string-to-key parameters from the KDC for a client
    principal.
  * The new GSS_KRB5_NT_ENTERPRISE_NAME name type allows enterprise
    principal names to be used with GSS-API functions.
  * KDC and kadmind modules which call com_err() will now write to the
    log file in a format more consistent with other log messages.
  * Programs which use large numbers of memory credential caches should
    perform better.
  Protocol evolution:
  * The SPAKE pre-authentication mechanism is now supported.  This
    mechanism protects against password dictionary attacks without
    requiring any additional infrastructure such as certificates.  SPAKE
    is enabled by default on clients, but must be manually enabled on
    the KDC for this release.
  * PKINIT freshness tokens are now supported.  Freshness tokens can
    protect against scenarios where an attacker uses temporary access to
    a smart card to generate authentication requests for the future.
  * Password change operations now prefer TCP over UDP, to avoid
    spurious error messages about replays when a response packet is
    dropped.
  * The KDC now supports cross-realm S4U2Self requests when used with a
    third-party KDB module such as Samba's.  The client code for
    cross-realm S4U2Self requests is also now more robust
    (CVE-2018-20217).
  User experience:
  * The new ktutil addent -f flag can be used to fetch salt information
    from the KDC for password-based keys.
  * The new kdestroy -p option can be used to destroy a credential cache
    within a collection by client principal name.
  * The Kerberos man page has been restored, and documents the
    environment variables that affect programs using the Kerberos
    library.
  Code quality:
  * Python test scripts now use Python 3.
  * Python test scripts now display markers in verbose output, making it
    easier to find where a failure occurred within the scripts.
  * The Windows build system has been simplified and updated to work
    with more recent versions of Visual Studio.  A large volume of
    unused Windows-specific code has been removed.  Visual Studio 2013
    or later is now required.
- Replace old $RPM_* shell vars
- Removal of SuSEfirewall2 service since SuSEfirewall2 has been replaced
  by firewalld
- Remove cruft to support distributions older than SLE 12
- Use macros where applicable
- Switch to pkgconfig style dependencies
- Use %_tmpfilesdir instead of the wrong %_libexecdir/tmpfiles.d
  notation: libexecdir is likely changing away from /usr/lib to
  /usr/libexec
- Build with full Cyrus SASL support. Negotiating SASL credentials with
  an EXTERNAL bind mechanism requires interaction. Kerberos provides its
  own interaction function that skips all interaction, thus preventing the
  mechanism from working.
- Removed patches:
  * 0007-krb5-1.12-ksu-path.patch
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch
- Renamed patches:
  * 0001-krb5-1.12-pam.patch =&gt; 0001-ksu-pam-integration.patch
  * 0003-krb5-1.12-buildconf.patch =&gt; 0003-Adjust-build-configuration.patch
  * 0008-krb5-1.12-selinux-label.patch =&gt; 0007-SELinux-integration.patch
  * 0009-krb5-1.9-debuginfo.patch =&gt; 0008-krb5-1.9-debuginfo.patch
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch =&gt;
    0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="nopower@suse.com" date="1667822400">- Fix integer overflows in PAC parsing; (CVE-2022-42898);
  (bso#15203), (bsc#1205126).
- Added patches:
  * 0010-Fix-integer-overflows-in-PAC-parsing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1670932800">- Update to 1.20.1; (bsc#1205126); (CVE-2022-42898);
  * Fix integer overflows in PAC parsing [CVE-2022-42898].
  * Fix null deref in KDC when decoding invalid NDR.
  * Fix memory leak in OTP kdcpreauth module.
  * Fix PKCS11 module path search.
- update to 1.20.0:
  * Added a "disable_pac" realm relation to suppress adding PAC authdata
    to tickets, for realms which do not need to support S4U requests.
  * Most credential cache types will use atomic replacement when a cache
    is reinitialized using kinit or refreshed from the client keytab.
  * kprop can now propagate databases with a dump size larger than 4GB,
    if both the client and server are upgraded.
  * kprop can now work over NATs that change the destination IP address,
    if the client is upgraded.
  * Updated the KDB interface.  The sign_authdata() method is replaced
    with the issue_pac() method, allowing KDB modules to add logon info
    and other buffers to the PAC issued by the KDC.
  * Host-based initiator names are better supported in the GSS krb5
    mechanism.
  * Replaced AD-SIGNEDPATH authdata with minimal PACs.
  * To avoid spurious replay errors, password change requests will not
    be attempted over UDP until the attempt over TCP fails.
  * PKINIT will sign its CMS messages with SHA-256 instead of SHA-1.
  * Updated all code using OpenSSL to be compatible with OpenSSL 3.
  * Reorganized the libk5crypto build system to allow the OpenSSL
    back-end to pull in material from the builtin back-end depending on
    the OpenSSL version.
  * Simplified the PRNG logic to always use the platform PRNG.
  * Converted the remaining Tcl tests to Python.
- update to 1.19.3 (bsc#1189929, CVE-2021-37750):
  * Fix a denial of service attack against the KDC [CVE-2021-37750].
  * Fix KDC null deref on TGS inner body null server
  * Fix conformance issue in GSSAPI tests
- Resolve "Credential cache directory /run/user/0/krb5cc does not
  exist while opening default credentials cache" by using a kernel
  keyring instead of a dir cache; (bsc#1109830);
- Added hardening to systemd services; (bsc#1181400);
- Drop 0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch,
  fixed in release 1.20.0
- Drop 0010-Fix-integer-overflows-in-PAC-parsing.patch,
  fixed in release 1.20.1</changelog>
  <changelog author="scabrero@suse.de" date="1691496000">- Ensure array count consistency in kadm5 RPC; (bsc#1214054);
  (CVE-2023-36054);
- Added patches:
  * 0009-Ensure-array-count-consistency-in-kadm5-RPC.patch</changelog>
  <changelog author="scabrero@suse.de" date="1694520000">- Avoid KDC spoofing vulnerability, enable verify_ap_req_nofail in
  krb5.conf; (jsc#PED-6213);</changelog>
  <changelog author="scabrero@suse.de" date="1701172800">- Update patch 0007-SELinux-integration.patch for SELinux 3.5</changelog>
  <changelog author="scabrero@suse.de" date="1711108800">- Fix memory leaks, add patch 0010-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772</changelog>
  <changelog author="scabrero@suse.de" date="1719835200">- Fix vulnerabilities in GSS message token handling, add patch
  0011-Fix-vulnerabilities-in-GSS-message-token-handling.patch
  * CVE-2024-37370, bsc#1227186
  * CVE-2024-37371, bsc#1227187</changelog>
  <changelog author="scabrero@suse.de" date="1737547200">- Add crypto-policies support; (jsc#PED-12018)
  * The default krb5.conf has been updated to include config
    snippets in the krb5.conf.d directory, where crypto-policies
    drops its.
- Allow to use KRB5KDF in FIPS mode; (jsc#PED-12018); Add patch
  0012-Allow-KRB5KDF-in-FIPS-mode.patch
  * This key derivation function is used by AES256-CTS-HMAC-SHA1-96
    and AES128-CTS-HMAC-SHA1-96 encryption types, used by Active
    directory. If these encryption types are allowed or not in
    FIPS mode is enforced now by the FIPS:AD-SUPPORT subpolicy.</changelog>
  <changelog author="scabrero@suse.de" date="1738238400">- Prevent overflow when calculating ulog block size. An authenticated
  attacker can cause kadmind to write beyond the end of the mapped
  region for the iprop log file, likely causing a process crash;
  (CVE-2025-24528); (bsc#1236619).
- Add patch 0013-Prevent-overflow-when-calculating-ulog-block-size.patch</changelog>
  <changelog author="scabrero@suse.de" date="1746446400">- Remove references to the LMDB backend in the kdc.conf manpage;
  (bsc#1242060);</changelog>
</package>
<package pkgid="a69ef7495df1f1e3c8cee2c0151a0e93e9947310269eed46184ca89272614ba6" name="krb5-client" arch="x86_64">
  <version epoch="0" ver="1.20.1" rel="150600.11.14.1"/>
  <changelog author="scabrero@suse.de" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="scabrero@suse.de" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="scabrero@suse.de" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="scabrero@suse.de" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619092800">- Use /run instead of /var/run for daemon PID files; (bsc#1185163);</changelog>
  <changelog author="scabrero@suse.de" date="1627300800">- Fix KDC null deref on bad encrypted challenge; (CVE-2021-36222);
  (bsc#1188571);
- Added patches:
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch</changelog>
  <changelog author="scabrero@suse.de" date="1630324800">- Fix KDC null pointer dereference via a FAST inner body that
  lacks a server field; (CVE-2021-37750); (bsc#1189929);
- Added patches:
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="scabrero@suse.de" date="1631880000">- Update to 1.19.2
  * Fix a denial of service attack against the KDC encrypted challenge
    code; (CVE-2021-36222);
  * Fix a memory leak when gss_inquire_cred() is called without a
    credential handle.
- Changes from 1.19.1
  * Fix a linking issue with Samba.
  * Better support multiple pkinit_identities values by checking whether
    certificates can be loaded for each value.
- Changes from 1.19
  Administrator experience
  * When a client keytab is present, the GSSAPI krb5 mech will refresh
    credentials even if the current credentials were acquired manually.
  * It is now harder to accidentally delete the K/M entry from a KDB.
  Developer experience
  * gss_acquire_cred_from() now supports the "password" and "verify"
    options, allowing credentials to be acquired via password and
    verified using a keytab key.
  * When an application accepts a GSS security context, the new
    GSS_C_CHANNEL_BOUND_FLAG will be set if the initiator and acceptor
    both provided matching channel bindings.
  * Added the GSS_KRB5_NT_X509_CERT name type, allowing S4U2Self requests
    to identify the desired client principal by certificate.
  * PKINIT certauth modules can now cause the hw-authent flag to be set
    in issued tickets.
  * The krb5_init_creds_step() API will now issue the same password
    expiration warnings as krb5_get_init_creds_password().
  Protocol evolution
  * Added client and KDC support for Microsoft's Resource-Based Constrained
    Delegation, which allows cross-realm S4U2Proxy requests. A third-party
    database module is required for KDC support.
  * kadmin/admin is now the preferred server principal name for kadmin
    connections, and the host-based form is no longer created by default.
    The client will still try the host-based form as a fallback.
  * Added client and server support for Microsoft's KERB_AP_OPTIONS_CBT
    extension, which causes channel bindings to be required for the
    initiator if the acceptor provided them. The client will send this
    option if the client_aware_gss_bindings profile option is set.
  User experience
  * kinit will now issue a warning if the des3-cbc-sha1 encryption type is
    used in the reply. This encryption type will be deprecated and removed
    in future releases.
  * Added kvno flags --out-cache, --no-store, and --cached-only
    (inspired by Heimdal's kgetcred).
- Changes from 1.18.3
  * Fix a denial of service vulnerability when decoding Kerberos
    protocol messages; (CVE-2020-28196); (bsc#1178512);
  * Fix a locking issue with the LMDB KDB module which could cause
    KDC and kadmind processes to lose access to the database.
  * Fix an assertion failure when libgssapi_krb5 is repeatedly loaded
    and unloaded while libkrb5support remains loaded.
- Changes from 1.18.2
  * Fix a SPNEGO regression where an acceptor using the default credential
    would improperly filter mechanisms, causing a negotiation failure.
  * Fix a bug where the KDC would fail to issue tickets if the local krbtgt
    principal's first key has a single-DES enctype.
  * Add stub functions to allow old versions of OpenSSL libcrypto to link
    against libkrb5.
  * Fix a NegoEx bug where the client name and delegated credential might
    not be reported.
- Changes from 1.18.1
  * Fix a crash when qualifying short hostnames when the system has
    no primary DNS domain.
  * Fix a regression when an application imports "service@" as a GSS
    host-based name for its acceptor credential handle.
  * Fix KDC enforcement of auth indicators when they are modified by
    the KDB module.
  * Fix removal of require_auth string attributes when the LDAP KDB
    module is used.
  * Fix a compile error when building with musl libc on Linux.
  * Fix a compile error when building with gcc 4.x.
  * Change the KDC constrained delegation precedence order for consistency
    with Windows KDCs.
- Changes from 1.18
  Administrator experience:
  * Remove support for single-DES encryption types.
  * Change the replay cache format to be more efficient and robust.
    Replay cache filenames using the new format end with ".rcache2"
    by default.
  * setuid programs will automatically ignore environment variables
    that normally affect krb5 API functions, even if the caller does
    not use krb5_init_secure_context().
  * Add an "enforce_ok_as_delegate" krb5.conf relation to disable
    credential forwarding during GSSAPI authentication unless the KDC
    sets the ok-as-delegate bit in the service ticket.
  * Use the permitted_enctypes krb5.conf setting as the default value
    for default_tkt_enctypes and default_tgs_enctypes.
  Developer experience:
  * Implement krb5_cc_remove_cred() for all credential cache types.
  * Add the krb5_pac_get_client_info() API to get the client account
    name from a PAC.
  Protocol evolution:
  * Add KDC support for S4U2Self requests where the user is identified
    by X.509 certificate. (Requires support for certificate lookup from
    a third-party KDB module.)
  * Remove support for an old ("draft 9") variant of PKINIT.
  * Add support for Microsoft NegoEx. (Requires one or more third-party
    GSS modules implementing NegoEx mechanisms.)
  User experience:
  * Add support for "dns_canonicalize_hostname=fallback", causing
    host-based principal names to be tried first without DNS
    canonicalization, and again with DNS canonicalization if the
    un-canonicalized server is not found.
  * Expand single-component hostnames in host-based principal names
    when DNS canonicalization is not used, adding the system's first DNS
    search path as a suffix. Add a "qualify_shortname" krb5.conf relation
    to override this suffix or disable expansion.
  * Honor the transited-policy-checked ticket flag on application servers,
    eliminating the requirement to configure capaths on servers in some
    scenarios.
  Code quality:
  * The libkrb5 serialization code (used to export and import krb5 GSS
    security contexts) has been simplified and made type-safe.
  * The libkrb5 code for creating KRB-PRIV, KRB-SAFE, and KRB-CRED
    messages has been revised to conform to current coding practices.
  * The test suite has been modified to work with macOS System Integrity
    Protection enabled.
  * The test suite incorporates soft-pkcs11 so that PKINIT PKCS11 support
    can always be tested.
- Changes from 1.17.1
  * Fix a bug preventing "addprinc -randkey -kvno" from working in kadmin.
  * Fix a bug preventing time skew correction from working when a KCM
    credential cache is used.
- Changes from 1.17:
  Administrator experience:
  * A new Kerberos database module using the Lightning Memory-Mapped
    Database library (LMDB) has been added.  The LMDB KDB module should
    be more performant and more robust than the DB2 module, and may
    become the default module for new databases in a future release.
  * "kdb5_util dump" will no longer dump policy entries when specific
    principal names are requested.
  Developer experience:
  * The new krb5_get_etype_info() API can be used to retrieve enctype,
    salt, and string-to-key parameters from the KDC for a client
    principal.
  * The new GSS_KRB5_NT_ENTERPRISE_NAME name type allows enterprise
    principal names to be used with GSS-API functions.
  * KDC and kadmind modules which call com_err() will now write to the
    log file in a format more consistent with other log messages.
  * Programs which use large numbers of memory credential caches should
    perform better.
  Protocol evolution:
  * The SPAKE pre-authentication mechanism is now supported.  This
    mechanism protects against password dictionary attacks without
    requiring any additional infrastructure such as certificates.  SPAKE
    is enabled by default on clients, but must be manually enabled on
    the KDC for this release.
  * PKINIT freshness tokens are now supported.  Freshness tokens can
    protect against scenarios where an attacker uses temporary access to
    a smart card to generate authentication requests for the future.
  * Password change operations now prefer TCP over UDP, to avoid
    spurious error messages about replays when a response packet is
    dropped.
  * The KDC now supports cross-realm S4U2Self requests when used with a
    third-party KDB module such as Samba's.  The client code for
    cross-realm S4U2Self requests is also now more robust
    (CVE-2018-20217).
  User experience:
  * The new ktutil addent -f flag can be used to fetch salt information
    from the KDC for password-based keys.
  * The new kdestroy -p option can be used to destroy a credential cache
    within a collection by client principal name.
  * The Kerberos man page has been restored, and documents the
    environment variables that affect programs using the Kerberos
    library.
  Code quality:
  * Python test scripts now use Python 3.
  * Python test scripts now display markers in verbose output, making it
    easier to find where a failure occurred within the scripts.
  * The Windows build system has been simplified and updated to work
    with more recent versions of Visual Studio.  A large volume of
    unused Windows-specific code has been removed.  Visual Studio 2013
    or later is now required.
- Replace old $RPM_* shell vars
- Removal of SuSEfirewall2 service since SuSEfirewall2 has been replaced
  by firewalld
- Remove cruft to support distributions older than SLE 12
- Use macros where applicable
- Switch to pkgconfig style dependencies
- Use %_tmpfilesdir instead of the wrong %_libexecdir/tmpfiles.d
  notation: libexecdir is likely changing away from /usr/lib to
  /usr/libexec
- Build with full Cyrus SASL support. Negotiating SASL credentials with
  an EXTERNAL bind mechanism requires interaction. Kerberos provides its
  own interaction function that skips all interaction, thus preventing the
  mechanism from working.
- Removed patches:
  * 0007-krb5-1.12-ksu-path.patch
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch
- Renamed patches:
  * 0001-krb5-1.12-pam.patch =&gt; 0001-ksu-pam-integration.patch
  * 0003-krb5-1.12-buildconf.patch =&gt; 0003-Adjust-build-configuration.patch
  * 0008-krb5-1.12-selinux-label.patch =&gt; 0007-SELinux-integration.patch
  * 0009-krb5-1.9-debuginfo.patch =&gt; 0008-krb5-1.9-debuginfo.patch
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch =&gt;
    0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="nopower@suse.com" date="1667822400">- Fix integer overflows in PAC parsing; (CVE-2022-42898);
  (bso#15203), (bsc#1205126).
- Added patches:
  * 0010-Fix-integer-overflows-in-PAC-parsing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1670932800">- Update to 1.20.1; (bsc#1205126); (CVE-2022-42898);
  * Fix integer overflows in PAC parsing [CVE-2022-42898].
  * Fix null deref in KDC when decoding invalid NDR.
  * Fix memory leak in OTP kdcpreauth module.
  * Fix PKCS11 module path search.
- update to 1.20.0:
  * Added a "disable_pac" realm relation to suppress adding PAC authdata
    to tickets, for realms which do not need to support S4U requests.
  * Most credential cache types will use atomic replacement when a cache
    is reinitialized using kinit or refreshed from the client keytab.
  * kprop can now propagate databases with a dump size larger than 4GB,
    if both the client and server are upgraded.
  * kprop can now work over NATs that change the destination IP address,
    if the client is upgraded.
  * Updated the KDB interface.  The sign_authdata() method is replaced
    with the issue_pac() method, allowing KDB modules to add logon info
    and other buffers to the PAC issued by the KDC.
  * Host-based initiator names are better supported in the GSS krb5
    mechanism.
  * Replaced AD-SIGNEDPATH authdata with minimal PACs.
  * To avoid spurious replay errors, password change requests will not
    be attempted over UDP until the attempt over TCP fails.
  * PKINIT will sign its CMS messages with SHA-256 instead of SHA-1.
  * Updated all code using OpenSSL to be compatible with OpenSSL 3.
  * Reorganized the libk5crypto build system to allow the OpenSSL
    back-end to pull in material from the builtin back-end depending on
    the OpenSSL version.
  * Simplified the PRNG logic to always use the platform PRNG.
  * Converted the remaining Tcl tests to Python.
- update to 1.19.3 (bsc#1189929, CVE-2021-37750):
  * Fix a denial of service attack against the KDC [CVE-2021-37750].
  * Fix KDC null deref on TGS inner body null server
  * Fix conformance issue in GSSAPI tests
- Resolve "Credential cache directory /run/user/0/krb5cc does not
  exist while opening default credentials cache" by using a kernel
  keyring instead of a dir cache; (bsc#1109830);
- Added hardening to systemd services; (bsc#1181400);
- Drop 0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch,
  fixed in release 1.20.0
- Drop 0010-Fix-integer-overflows-in-PAC-parsing.patch,
  fixed in release 1.20.1</changelog>
  <changelog author="scabrero@suse.de" date="1691496000">- Ensure array count consistency in kadm5 RPC; (bsc#1214054);
  (CVE-2023-36054);
- Added patches:
  * 0009-Ensure-array-count-consistency-in-kadm5-RPC.patch</changelog>
  <changelog author="scabrero@suse.de" date="1694520000">- Avoid KDC spoofing vulnerability, enable verify_ap_req_nofail in
  krb5.conf; (jsc#PED-6213);</changelog>
  <changelog author="scabrero@suse.de" date="1701172800">- Update patch 0007-SELinux-integration.patch for SELinux 3.5</changelog>
  <changelog author="scabrero@suse.de" date="1711108800">- Fix memory leaks, add patch 0010-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772</changelog>
  <changelog author="scabrero@suse.de" date="1719835200">- Fix vulnerabilities in GSS message token handling, add patch
  0011-Fix-vulnerabilities-in-GSS-message-token-handling.patch
  * CVE-2024-37370, bsc#1227186
  * CVE-2024-37371, bsc#1227187</changelog>
  <changelog author="scabrero@suse.de" date="1737547200">- Add crypto-policies support; (jsc#PED-12018)
  * The default krb5.conf has been updated to include config
    snippets in the krb5.conf.d directory, where crypto-policies
    drops its.
- Allow to use KRB5KDF in FIPS mode; (jsc#PED-12018); Add patch
  0012-Allow-KRB5KDF-in-FIPS-mode.patch
  * This key derivation function is used by AES256-CTS-HMAC-SHA1-96
    and AES128-CTS-HMAC-SHA1-96 encryption types, used by Active
    directory. If these encryption types are allowed or not in
    FIPS mode is enforced now by the FIPS:AD-SUPPORT subpolicy.</changelog>
  <changelog author="scabrero@suse.de" date="1738238400">- Prevent overflow when calculating ulog block size. An authenticated
  attacker can cause kadmind to write beyond the end of the mapped
  region for the iprop log file, likely causing a process crash;
  (CVE-2025-24528); (bsc#1236619).
- Add patch 0013-Prevent-overflow-when-calculating-ulog-block-size.patch</changelog>
  <changelog author="scabrero@suse.de" date="1746446400">- Remove references to the LMDB backend in the kdc.conf manpage;
  (bsc#1242060);</changelog>
  <changelog author="nopower@suse.com" date="1756814400">- Remove des3-cbc-sha1 and arcfour-hmac-md5 from permitted
  enctypes unless new special options "allow_des3" or "allow_rc4"
  are set; (CVE-2025-3576); (bsc#1241219).
- Add patch 0015-CVE-2025-3576.patch</changelog>
</package>
<package pkgid="613082f01e1c8785340c419fb2ab463eaa53881df431e537b4f218809126a1ef" name="krb5-devel" arch="x86_64">
  <version epoch="0" ver="1.20.1" rel="150600.11.11.2"/>
  <changelog author="scabrero@suse.de" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="scabrero@suse.de" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="scabrero@suse.de" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="scabrero@suse.de" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="scabrero@suse.de" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619092800">- Use /run instead of /var/run for daemon PID files; (bsc#1185163);</changelog>
  <changelog author="scabrero@suse.de" date="1627300800">- Fix KDC null deref on bad encrypted challenge; (CVE-2021-36222);
  (bsc#1188571);
- Added patches:
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch</changelog>
  <changelog author="scabrero@suse.de" date="1630324800">- Fix KDC null pointer dereference via a FAST inner body that
  lacks a server field; (CVE-2021-37750); (bsc#1189929);
- Added patches:
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="scabrero@suse.de" date="1631880000">- Update to 1.19.2
  * Fix a denial of service attack against the KDC encrypted challenge
    code; (CVE-2021-36222);
  * Fix a memory leak when gss_inquire_cred() is called without a
    credential handle.
- Changes from 1.19.1
  * Fix a linking issue with Samba.
  * Better support multiple pkinit_identities values by checking whether
    certificates can be loaded for each value.
- Changes from 1.19
  Administrator experience
  * When a client keytab is present, the GSSAPI krb5 mech will refresh
    credentials even if the current credentials were acquired manually.
  * It is now harder to accidentally delete the K/M entry from a KDB.
  Developer experience
  * gss_acquire_cred_from() now supports the "password" and "verify"
    options, allowing credentials to be acquired via password and
    verified using a keytab key.
  * When an application accepts a GSS security context, the new
    GSS_C_CHANNEL_BOUND_FLAG will be set if the initiator and acceptor
    both provided matching channel bindings.
  * Added the GSS_KRB5_NT_X509_CERT name type, allowing S4U2Self requests
    to identify the desired client principal by certificate.
  * PKINIT certauth modules can now cause the hw-authent flag to be set
    in issued tickets.
  * The krb5_init_creds_step() API will now issue the same password
    expiration warnings as krb5_get_init_creds_password().
  Protocol evolution
  * Added client and KDC support for Microsoft's Resource-Based Constrained
    Delegation, which allows cross-realm S4U2Proxy requests. A third-party
    database module is required for KDC support.
  * kadmin/admin is now the preferred server principal name for kadmin
    connections, and the host-based form is no longer created by default.
    The client will still try the host-based form as a fallback.
  * Added client and server support for Microsoft's KERB_AP_OPTIONS_CBT
    extension, which causes channel bindings to be required for the
    initiator if the acceptor provided them. The client will send this
    option if the client_aware_gss_bindings profile option is set.
  User experience
  * kinit will now issue a warning if the des3-cbc-sha1 encryption type is
    used in the reply. This encryption type will be deprecated and removed
    in future releases.
  * Added kvno flags --out-cache, --no-store, and --cached-only
    (inspired by Heimdal's kgetcred).
- Changes from 1.18.3
  * Fix a denial of service vulnerability when decoding Kerberos
    protocol messages; (CVE-2020-28196); (bsc#1178512);
  * Fix a locking issue with the LMDB KDB module which could cause
    KDC and kadmind processes to lose access to the database.
  * Fix an assertion failure when libgssapi_krb5 is repeatedly loaded
    and unloaded while libkrb5support remains loaded.
- Changes from 1.18.2
  * Fix a SPNEGO regression where an acceptor using the default credential
    would improperly filter mechanisms, causing a negotiation failure.
  * Fix a bug where the KDC would fail to issue tickets if the local krbtgt
    principal's first key has a single-DES enctype.
  * Add stub functions to allow old versions of OpenSSL libcrypto to link
    against libkrb5.
  * Fix a NegoEx bug where the client name and delegated credential might
    not be reported.
- Changes from 1.18.1
  * Fix a crash when qualifying short hostnames when the system has
    no primary DNS domain.
  * Fix a regression when an application imports "service@" as a GSS
    host-based name for its acceptor credential handle.
  * Fix KDC enforcement of auth indicators when they are modified by
    the KDB module.
  * Fix removal of require_auth string attributes when the LDAP KDB
    module is used.
  * Fix a compile error when building with musl libc on Linux.
  * Fix a compile error when building with gcc 4.x.
  * Change the KDC constrained delegation precedence order for consistency
    with Windows KDCs.
- Changes from 1.18
  Administrator experience:
  * Remove support for single-DES encryption types.
  * Change the replay cache format to be more efficient and robust.
    Replay cache filenames using the new format end with ".rcache2"
    by default.
  * setuid programs will automatically ignore environment variables
    that normally affect krb5 API functions, even if the caller does
    not use krb5_init_secure_context().
  * Add an "enforce_ok_as_delegate" krb5.conf relation to disable
    credential forwarding during GSSAPI authentication unless the KDC
    sets the ok-as-delegate bit in the service ticket.
  * Use the permitted_enctypes krb5.conf setting as the default value
    for default_tkt_enctypes and default_tgs_enctypes.
  Developer experience:
  * Implement krb5_cc_remove_cred() for all credential cache types.
  * Add the krb5_pac_get_client_info() API to get the client account
    name from a PAC.
  Protocol evolution:
  * Add KDC support for S4U2Self requests where the user is identified
    by X.509 certificate. (Requires support for certificate lookup from
    a third-party KDB module.)
  * Remove support for an old ("draft 9") variant of PKINIT.
  * Add support for Microsoft NegoEx. (Requires one or more third-party
    GSS modules implementing NegoEx mechanisms.)
  User experience:
  * Add support for "dns_canonicalize_hostname=fallback", causing
    host-based principal names to be tried first without DNS
    canonicalization, and again with DNS canonicalization if the
    un-canonicalized server is not found.
  * Expand single-component hostnames in host-based principal names
    when DNS canonicalization is not used, adding the system's first DNS
    search path as a suffix. Add a "qualify_shortname" krb5.conf relation
    to override this suffix or disable expansion.
  * Honor the transited-policy-checked ticket flag on application servers,
    eliminating the requirement to configure capaths on servers in some
    scenarios.
  Code quality:
  * The libkrb5 serialization code (used to export and import krb5 GSS
    security contexts) has been simplified and made type-safe.
  * The libkrb5 code for creating KRB-PRIV, KRB-SAFE, and KRB-CRED
    messages has been revised to conform to current coding practices.
  * The test suite has been modified to work with macOS System Integrity
    Protection enabled.
  * The test suite incorporates soft-pkcs11 so that PKINIT PKCS11 support
    can always be tested.
- Changes from 1.17.1
  * Fix a bug preventing "addprinc -randkey -kvno" from working in kadmin.
  * Fix a bug preventing time skew correction from working when a KCM
    credential cache is used.
- Changes from 1.17:
  Administrator experience:
  * A new Kerberos database module using the Lightning Memory-Mapped
    Database library (LMDB) has been added.  The LMDB KDB module should
    be more performant and more robust than the DB2 module, and may
    become the default module for new databases in a future release.
  * "kdb5_util dump" will no longer dump policy entries when specific
    principal names are requested.
  Developer experience:
  * The new krb5_get_etype_info() API can be used to retrieve enctype,
    salt, and string-to-key parameters from the KDC for a client
    principal.
  * The new GSS_KRB5_NT_ENTERPRISE_NAME name type allows enterprise
    principal names to be used with GSS-API functions.
  * KDC and kadmind modules which call com_err() will now write to the
    log file in a format more consistent with other log messages.
  * Programs which use large numbers of memory credential caches should
    perform better.
  Protocol evolution:
  * The SPAKE pre-authentication mechanism is now supported.  This
    mechanism protects against password dictionary attacks without
    requiring any additional infrastructure such as certificates.  SPAKE
    is enabled by default on clients, but must be manually enabled on
    the KDC for this release.
  * PKINIT freshness tokens are now supported.  Freshness tokens can
    protect against scenarios where an attacker uses temporary access to
    a smart card to generate authentication requests for the future.
  * Password change operations now prefer TCP over UDP, to avoid
    spurious error messages about replays when a response packet is
    dropped.
  * The KDC now supports cross-realm S4U2Self requests when used with a
    third-party KDB module such as Samba's.  The client code for
    cross-realm S4U2Self requests is also now more robust
    (CVE-2018-20217).
  User experience:
  * The new ktutil addent -f flag can be used to fetch salt information
    from the KDC for password-based keys.
  * The new kdestroy -p option can be used to destroy a credential cache
    within a collection by client principal name.
  * The Kerberos man page has been restored, and documents the
    environment variables that affect programs using the Kerberos
    library.
  Code quality:
  * Python test scripts now use Python 3.
  * Python test scripts now display markers in verbose output, making it
    easier to find where a failure occurred within the scripts.
  * The Windows build system has been simplified and updated to work
    with more recent versions of Visual Studio.  A large volume of
    unused Windows-specific code has been removed.  Visual Studio 2013
    or later is now required.
- Replace old $RPM_* shell vars
- Removal of SuSEfirewall2 service since SuSEfirewall2 has been replaced
  by firewalld
- Remove cruft to support distributions older than SLE 12
- Use macros where applicable
- Switch to pkgconfig style dependencies
- Use %_tmpfilesdir instead of the wrong %_libexecdir/tmpfiles.d
  notation: libexecdir is likely changing away from /usr/lib to
  /usr/libexec
- Build with full Cyrus SASL support. Negotiating SASL credentials with
  an EXTERNAL bind mechanism requires interaction. Kerberos provides its
  own interaction function that skips all interaction, thus preventing the
  mechanism from working.
- Removed patches:
  * 0007-krb5-1.12-ksu-path.patch
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch
- Renamed patches:
  * 0001-krb5-1.12-pam.patch =&gt; 0001-ksu-pam-integration.patch
  * 0003-krb5-1.12-buildconf.patch =&gt; 0003-Adjust-build-configuration.patch
  * 0008-krb5-1.12-selinux-label.patch =&gt; 0007-SELinux-integration.patch
  * 0009-krb5-1.9-debuginfo.patch =&gt; 0008-krb5-1.9-debuginfo.patch
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch =&gt;
    0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="nopower@suse.com" date="1667822400">- Fix integer overflows in PAC parsing; (CVE-2022-42898);
  (bso#15203), (bsc#1205126).
- Added patches:
  * 0010-Fix-integer-overflows-in-PAC-parsing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1670932800">- Update to 1.20.1; (bsc#1205126); (CVE-2022-42898);
  * Fix integer overflows in PAC parsing [CVE-2022-42898].
  * Fix null deref in KDC when decoding invalid NDR.
  * Fix memory leak in OTP kdcpreauth module.
  * Fix PKCS11 module path search.
- update to 1.20.0:
  * Added a "disable_pac" realm relation to suppress adding PAC authdata
    to tickets, for realms which do not need to support S4U requests.
  * Most credential cache types will use atomic replacement when a cache
    is reinitialized using kinit or refreshed from the client keytab.
  * kprop can now propagate databases with a dump size larger than 4GB,
    if both the client and server are upgraded.
  * kprop can now work over NATs that change the destination IP address,
    if the client is upgraded.
  * Updated the KDB interface.  The sign_authdata() method is replaced
    with the issue_pac() method, allowing KDB modules to add logon info
    and other buffers to the PAC issued by the KDC.
  * Host-based initiator names are better supported in the GSS krb5
    mechanism.
  * Replaced AD-SIGNEDPATH authdata with minimal PACs.
  * To avoid spurious replay errors, password change requests will not
    be attempted over UDP until the attempt over TCP fails.
  * PKINIT will sign its CMS messages with SHA-256 instead of SHA-1.
  * Updated all code using OpenSSL to be compatible with OpenSSL 3.
  * Reorganized the libk5crypto build system to allow the OpenSSL
    back-end to pull in material from the builtin back-end depending on
    the OpenSSL version.
  * Simplified the PRNG logic to always use the platform PRNG.
  * Converted the remaining Tcl tests to Python.
- update to 1.19.3 (bsc#1189929, CVE-2021-37750):
  * Fix a denial of service attack against the KDC [CVE-2021-37750].
  * Fix KDC null deref on TGS inner body null server
  * Fix conformance issue in GSSAPI tests
- Resolve "Credential cache directory /run/user/0/krb5cc does not
  exist while opening default credentials cache" by using a kernel
  keyring instead of a dir cache; (bsc#1109830);
- Added hardening to systemd services; (bsc#1181400);
- Drop 0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch,
  fixed in release 1.20.0
- Drop 0010-Fix-integer-overflows-in-PAC-parsing.patch,
  fixed in release 1.20.1</changelog>
  <changelog author="scabrero@suse.de" date="1691496000">- Ensure array count consistency in kadm5 RPC; (bsc#1214054);
  (CVE-2023-36054);
- Added patches:
  * 0009-Ensure-array-count-consistency-in-kadm5-RPC.patch</changelog>
  <changelog author="scabrero@suse.de" date="1694520000">- Avoid KDC spoofing vulnerability, enable verify_ap_req_nofail in
  krb5.conf; (jsc#PED-6213);</changelog>
  <changelog author="scabrero@suse.de" date="1701172800">- Update patch 0007-SELinux-integration.patch for SELinux 3.5</changelog>
  <changelog author="scabrero@suse.de" date="1711108800">- Fix memory leaks, add patch 0010-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772</changelog>
  <changelog author="scabrero@suse.de" date="1719835200">- Fix vulnerabilities in GSS message token handling, add patch
  0011-Fix-vulnerabilities-in-GSS-message-token-handling.patch
  * CVE-2024-37370, bsc#1227186
  * CVE-2024-37371, bsc#1227187</changelog>
  <changelog author="scabrero@suse.de" date="1737547200">- Add crypto-policies support; (jsc#PED-12018)
  * The default krb5.conf has been updated to include config
    snippets in the krb5.conf.d directory, where crypto-policies
    drops its.
- Allow to use KRB5KDF in FIPS mode; (jsc#PED-12018); Add patch
  0012-Allow-KRB5KDF-in-FIPS-mode.patch
  * This key derivation function is used by AES256-CTS-HMAC-SHA1-96
    and AES128-CTS-HMAC-SHA1-96 encryption types, used by Active
    directory. If these encryption types are allowed or not in
    FIPS mode is enforced now by the FIPS:AD-SUPPORT subpolicy.</changelog>
  <changelog author="scabrero@suse.de" date="1738238400">- Prevent overflow when calculating ulog block size. An authenticated
  attacker can cause kadmind to write beyond the end of the mapped
  region for the iprop log file, likely causing a process crash;
  (CVE-2025-24528); (bsc#1236619).
- Add patch 0013-Prevent-overflow-when-calculating-ulog-block-size.patch</changelog>
  <changelog author="scabrero@suse.de" date="1746446400">- Remove references to the LMDB backend in the kdc.conf manpage;
  (bsc#1242060);</changelog>
</package>
<package pkgid="b2ca3477fa664eb81a308e10eb35d14d328ebeb0c700b4ab1d331bfd895f293e" name="krb5-devel" arch="x86_64">
  <version epoch="0" ver="1.20.1" rel="150600.11.14.1"/>
  <changelog author="scabrero@suse.de" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="scabrero@suse.de" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="scabrero@suse.de" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="scabrero@suse.de" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619092800">- Use /run instead of /var/run for daemon PID files; (bsc#1185163);</changelog>
  <changelog author="scabrero@suse.de" date="1627300800">- Fix KDC null deref on bad encrypted challenge; (CVE-2021-36222);
  (bsc#1188571);
- Added patches:
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch</changelog>
  <changelog author="scabrero@suse.de" date="1630324800">- Fix KDC null pointer dereference via a FAST inner body that
  lacks a server field; (CVE-2021-37750); (bsc#1189929);
- Added patches:
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="scabrero@suse.de" date="1631880000">- Update to 1.19.2
  * Fix a denial of service attack against the KDC encrypted challenge
    code; (CVE-2021-36222);
  * Fix a memory leak when gss_inquire_cred() is called without a
    credential handle.
- Changes from 1.19.1
  * Fix a linking issue with Samba.
  * Better support multiple pkinit_identities values by checking whether
    certificates can be loaded for each value.
- Changes from 1.19
  Administrator experience
  * When a client keytab is present, the GSSAPI krb5 mech will refresh
    credentials even if the current credentials were acquired manually.
  * It is now harder to accidentally delete the K/M entry from a KDB.
  Developer experience
  * gss_acquire_cred_from() now supports the "password" and "verify"
    options, allowing credentials to be acquired via password and
    verified using a keytab key.
  * When an application accepts a GSS security context, the new
    GSS_C_CHANNEL_BOUND_FLAG will be set if the initiator and acceptor
    both provided matching channel bindings.
  * Added the GSS_KRB5_NT_X509_CERT name type, allowing S4U2Self requests
    to identify the desired client principal by certificate.
  * PKINIT certauth modules can now cause the hw-authent flag to be set
    in issued tickets.
  * The krb5_init_creds_step() API will now issue the same password
    expiration warnings as krb5_get_init_creds_password().
  Protocol evolution
  * Added client and KDC support for Microsoft's Resource-Based Constrained
    Delegation, which allows cross-realm S4U2Proxy requests. A third-party
    database module is required for KDC support.
  * kadmin/admin is now the preferred server principal name for kadmin
    connections, and the host-based form is no longer created by default.
    The client will still try the host-based form as a fallback.
  * Added client and server support for Microsoft's KERB_AP_OPTIONS_CBT
    extension, which causes channel bindings to be required for the
    initiator if the acceptor provided them. The client will send this
    option if the client_aware_gss_bindings profile option is set.
  User experience
  * kinit will now issue a warning if the des3-cbc-sha1 encryption type is
    used in the reply. This encryption type will be deprecated and removed
    in future releases.
  * Added kvno flags --out-cache, --no-store, and --cached-only
    (inspired by Heimdal's kgetcred).
- Changes from 1.18.3
  * Fix a denial of service vulnerability when decoding Kerberos
    protocol messages; (CVE-2020-28196); (bsc#1178512);
  * Fix a locking issue with the LMDB KDB module which could cause
    KDC and kadmind processes to lose access to the database.
  * Fix an assertion failure when libgssapi_krb5 is repeatedly loaded
    and unloaded while libkrb5support remains loaded.
- Changes from 1.18.2
  * Fix a SPNEGO regression where an acceptor using the default credential
    would improperly filter mechanisms, causing a negotiation failure.
  * Fix a bug where the KDC would fail to issue tickets if the local krbtgt
    principal's first key has a single-DES enctype.
  * Add stub functions to allow old versions of OpenSSL libcrypto to link
    against libkrb5.
  * Fix a NegoEx bug where the client name and delegated credential might
    not be reported.
- Changes from 1.18.1
  * Fix a crash when qualifying short hostnames when the system has
    no primary DNS domain.
  * Fix a regression when an application imports "service@" as a GSS
    host-based name for its acceptor credential handle.
  * Fix KDC enforcement of auth indicators when they are modified by
    the KDB module.
  * Fix removal of require_auth string attributes when the LDAP KDB
    module is used.
  * Fix a compile error when building with musl libc on Linux.
  * Fix a compile error when building with gcc 4.x.
  * Change the KDC constrained delegation precedence order for consistency
    with Windows KDCs.
- Changes from 1.18
  Administrator experience:
  * Remove support for single-DES encryption types.
  * Change the replay cache format to be more efficient and robust.
    Replay cache filenames using the new format end with ".rcache2"
    by default.
  * setuid programs will automatically ignore environment variables
    that normally affect krb5 API functions, even if the caller does
    not use krb5_init_secure_context().
  * Add an "enforce_ok_as_delegate" krb5.conf relation to disable
    credential forwarding during GSSAPI authentication unless the KDC
    sets the ok-as-delegate bit in the service ticket.
  * Use the permitted_enctypes krb5.conf setting as the default value
    for default_tkt_enctypes and default_tgs_enctypes.
  Developer experience:
  * Implement krb5_cc_remove_cred() for all credential cache types.
  * Add the krb5_pac_get_client_info() API to get the client account
    name from a PAC.
  Protocol evolution:
  * Add KDC support for S4U2Self requests where the user is identified
    by X.509 certificate. (Requires support for certificate lookup from
    a third-party KDB module.)
  * Remove support for an old ("draft 9") variant of PKINIT.
  * Add support for Microsoft NegoEx. (Requires one or more third-party
    GSS modules implementing NegoEx mechanisms.)
  User experience:
  * Add support for "dns_canonicalize_hostname=fallback", causing
    host-based principal names to be tried first without DNS
    canonicalization, and again with DNS canonicalization if the
    un-canonicalized server is not found.
  * Expand single-component hostnames in host-based principal names
    when DNS canonicalization is not used, adding the system's first DNS
    search path as a suffix. Add a "qualify_shortname" krb5.conf relation
    to override this suffix or disable expansion.
  * Honor the transited-policy-checked ticket flag on application servers,
    eliminating the requirement to configure capaths on servers in some
    scenarios.
  Code quality:
  * The libkrb5 serialization code (used to export and import krb5 GSS
    security contexts) has been simplified and made type-safe.
  * The libkrb5 code for creating KRB-PRIV, KRB-SAFE, and KRB-CRED
    messages has been revised to conform to current coding practices.
  * The test suite has been modified to work with macOS System Integrity
    Protection enabled.
  * The test suite incorporates soft-pkcs11 so that PKINIT PKCS11 support
    can always be tested.
- Changes from 1.17.1
  * Fix a bug preventing "addprinc -randkey -kvno" from working in kadmin.
  * Fix a bug preventing time skew correction from working when a KCM
    credential cache is used.
- Changes from 1.17:
  Administrator experience:
  * A new Kerberos database module using the Lightning Memory-Mapped
    Database library (LMDB) has been added.  The LMDB KDB module should
    be more performant and more robust than the DB2 module, and may
    become the default module for new databases in a future release.
  * "kdb5_util dump" will no longer dump policy entries when specific
    principal names are requested.
  Developer experience:
  * The new krb5_get_etype_info() API can be used to retrieve enctype,
    salt, and string-to-key parameters from the KDC for a client
    principal.
  * The new GSS_KRB5_NT_ENTERPRISE_NAME name type allows enterprise
    principal names to be used with GSS-API functions.
  * KDC and kadmind modules which call com_err() will now write to the
    log file in a format more consistent with other log messages.
  * Programs which use large numbers of memory credential caches should
    perform better.
  Protocol evolution:
  * The SPAKE pre-authentication mechanism is now supported.  This
    mechanism protects against password dictionary attacks without
    requiring any additional infrastructure such as certificates.  SPAKE
    is enabled by default on clients, but must be manually enabled on
    the KDC for this release.
  * PKINIT freshness tokens are now supported.  Freshness tokens can
    protect against scenarios where an attacker uses temporary access to
    a smart card to generate authentication requests for the future.
  * Password change operations now prefer TCP over UDP, to avoid
    spurious error messages about replays when a response packet is
    dropped.
  * The KDC now supports cross-realm S4U2Self requests when used with a
    third-party KDB module such as Samba's.  The client code for
    cross-realm S4U2Self requests is also now more robust
    (CVE-2018-20217).
  User experience:
  * The new ktutil addent -f flag can be used to fetch salt information
    from the KDC for password-based keys.
  * The new kdestroy -p option can be used to destroy a credential cache
    within a collection by client principal name.
  * The Kerberos man page has been restored, and documents the
    environment variables that affect programs using the Kerberos
    library.
  Code quality:
  * Python test scripts now use Python 3.
  * Python test scripts now display markers in verbose output, making it
    easier to find where a failure occurred within the scripts.
  * The Windows build system has been simplified and updated to work
    with more recent versions of Visual Studio.  A large volume of
    unused Windows-specific code has been removed.  Visual Studio 2013
    or later is now required.
- Replace old $RPM_* shell vars
- Removal of SuSEfirewall2 service since SuSEfirewall2 has been replaced
  by firewalld
- Remove cruft to support distributions older than SLE 12
- Use macros where applicable
- Switch to pkgconfig style dependencies
- Use %_tmpfilesdir instead of the wrong %_libexecdir/tmpfiles.d
  notation: libexecdir is likely changing away from /usr/lib to
  /usr/libexec
- Build with full Cyrus SASL support. Negotiating SASL credentials with
  an EXTERNAL bind mechanism requires interaction. Kerberos provides its
  own interaction function that skips all interaction, thus preventing the
  mechanism from working.
- Removed patches:
  * 0007-krb5-1.12-ksu-path.patch
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch
- Renamed patches:
  * 0001-krb5-1.12-pam.patch =&gt; 0001-ksu-pam-integration.patch
  * 0003-krb5-1.12-buildconf.patch =&gt; 0003-Adjust-build-configuration.patch
  * 0008-krb5-1.12-selinux-label.patch =&gt; 0007-SELinux-integration.patch
  * 0009-krb5-1.9-debuginfo.patch =&gt; 0008-krb5-1.9-debuginfo.patch
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch =&gt;
    0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="nopower@suse.com" date="1667822400">- Fix integer overflows in PAC parsing; (CVE-2022-42898);
  (bso#15203), (bsc#1205126).
- Added patches:
  * 0010-Fix-integer-overflows-in-PAC-parsing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1670932800">- Update to 1.20.1; (bsc#1205126); (CVE-2022-42898);
  * Fix integer overflows in PAC parsing [CVE-2022-42898].
  * Fix null deref in KDC when decoding invalid NDR.
  * Fix memory leak in OTP kdcpreauth module.
  * Fix PKCS11 module path search.
- update to 1.20.0:
  * Added a "disable_pac" realm relation to suppress adding PAC authdata
    to tickets, for realms which do not need to support S4U requests.
  * Most credential cache types will use atomic replacement when a cache
    is reinitialized using kinit or refreshed from the client keytab.
  * kprop can now propagate databases with a dump size larger than 4GB,
    if both the client and server are upgraded.
  * kprop can now work over NATs that change the destination IP address,
    if the client is upgraded.
  * Updated the KDB interface.  The sign_authdata() method is replaced
    with the issue_pac() method, allowing KDB modules to add logon info
    and other buffers to the PAC issued by the KDC.
  * Host-based initiator names are better supported in the GSS krb5
    mechanism.
  * Replaced AD-SIGNEDPATH authdata with minimal PACs.
  * To avoid spurious replay errors, password change requests will not
    be attempted over UDP until the attempt over TCP fails.
  * PKINIT will sign its CMS messages with SHA-256 instead of SHA-1.
  * Updated all code using OpenSSL to be compatible with OpenSSL 3.
  * Reorganized the libk5crypto build system to allow the OpenSSL
    back-end to pull in material from the builtin back-end depending on
    the OpenSSL version.
  * Simplified the PRNG logic to always use the platform PRNG.
  * Converted the remaining Tcl tests to Python.
- update to 1.19.3 (bsc#1189929, CVE-2021-37750):
  * Fix a denial of service attack against the KDC [CVE-2021-37750].
  * Fix KDC null deref on TGS inner body null server
  * Fix conformance issue in GSSAPI tests
- Resolve "Credential cache directory /run/user/0/krb5cc does not
  exist while opening default credentials cache" by using a kernel
  keyring instead of a dir cache; (bsc#1109830);
- Added hardening to systemd services; (bsc#1181400);
- Drop 0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch,
  fixed in release 1.20.0
- Drop 0010-Fix-integer-overflows-in-PAC-parsing.patch,
  fixed in release 1.20.1</changelog>
  <changelog author="scabrero@suse.de" date="1691496000">- Ensure array count consistency in kadm5 RPC; (bsc#1214054);
  (CVE-2023-36054);
- Added patches:
  * 0009-Ensure-array-count-consistency-in-kadm5-RPC.patch</changelog>
  <changelog author="scabrero@suse.de" date="1694520000">- Avoid KDC spoofing vulnerability, enable verify_ap_req_nofail in
  krb5.conf; (jsc#PED-6213);</changelog>
  <changelog author="scabrero@suse.de" date="1701172800">- Update patch 0007-SELinux-integration.patch for SELinux 3.5</changelog>
  <changelog author="scabrero@suse.de" date="1711108800">- Fix memory leaks, add patch 0010-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772</changelog>
  <changelog author="scabrero@suse.de" date="1719835200">- Fix vulnerabilities in GSS message token handling, add patch
  0011-Fix-vulnerabilities-in-GSS-message-token-handling.patch
  * CVE-2024-37370, bsc#1227186
  * CVE-2024-37371, bsc#1227187</changelog>
  <changelog author="scabrero@suse.de" date="1737547200">- Add crypto-policies support; (jsc#PED-12018)
  * The default krb5.conf has been updated to include config
    snippets in the krb5.conf.d directory, where crypto-policies
    drops its.
- Allow to use KRB5KDF in FIPS mode; (jsc#PED-12018); Add patch
  0012-Allow-KRB5KDF-in-FIPS-mode.patch
  * This key derivation function is used by AES256-CTS-HMAC-SHA1-96
    and AES128-CTS-HMAC-SHA1-96 encryption types, used by Active
    directory. If these encryption types are allowed or not in
    FIPS mode is enforced now by the FIPS:AD-SUPPORT subpolicy.</changelog>
  <changelog author="scabrero@suse.de" date="1738238400">- Prevent overflow when calculating ulog block size. An authenticated
  attacker can cause kadmind to write beyond the end of the mapped
  region for the iprop log file, likely causing a process crash;
  (CVE-2025-24528); (bsc#1236619).
- Add patch 0013-Prevent-overflow-when-calculating-ulog-block-size.patch</changelog>
  <changelog author="scabrero@suse.de" date="1746446400">- Remove references to the LMDB backend in the kdc.conf manpage;
  (bsc#1242060);</changelog>
  <changelog author="nopower@suse.com" date="1756814400">- Remove des3-cbc-sha1 and arcfour-hmac-md5 from permitted
  enctypes unless new special options "allow_des3" or "allow_rc4"
  are set; (CVE-2025-3576); (bsc#1241219).
- Add patch 0015-CVE-2025-3576.patch</changelog>
</package>
<package pkgid="0d40fbc81ff383c2a2c0d1919012a3152dea8b0fa9965ac7b99804d1e53fe324" name="krb5-plugin-preauth-otp" arch="x86_64">
  <version epoch="0" ver="1.20.1" rel="150600.11.11.2"/>
  <changelog author="scabrero@suse.de" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="scabrero@suse.de" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="scabrero@suse.de" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="scabrero@suse.de" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="scabrero@suse.de" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619092800">- Use /run instead of /var/run for daemon PID files; (bsc#1185163);</changelog>
  <changelog author="scabrero@suse.de" date="1627300800">- Fix KDC null deref on bad encrypted challenge; (CVE-2021-36222);
  (bsc#1188571);
- Added patches:
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch</changelog>
  <changelog author="scabrero@suse.de" date="1630324800">- Fix KDC null pointer dereference via a FAST inner body that
  lacks a server field; (CVE-2021-37750); (bsc#1189929);
- Added patches:
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="scabrero@suse.de" date="1631880000">- Update to 1.19.2
  * Fix a denial of service attack against the KDC encrypted challenge
    code; (CVE-2021-36222);
  * Fix a memory leak when gss_inquire_cred() is called without a
    credential handle.
- Changes from 1.19.1
  * Fix a linking issue with Samba.
  * Better support multiple pkinit_identities values by checking whether
    certificates can be loaded for each value.
- Changes from 1.19
  Administrator experience
  * When a client keytab is present, the GSSAPI krb5 mech will refresh
    credentials even if the current credentials were acquired manually.
  * It is now harder to accidentally delete the K/M entry from a KDB.
  Developer experience
  * gss_acquire_cred_from() now supports the "password" and "verify"
    options, allowing credentials to be acquired via password and
    verified using a keytab key.
  * When an application accepts a GSS security context, the new
    GSS_C_CHANNEL_BOUND_FLAG will be set if the initiator and acceptor
    both provided matching channel bindings.
  * Added the GSS_KRB5_NT_X509_CERT name type, allowing S4U2Self requests
    to identify the desired client principal by certificate.
  * PKINIT certauth modules can now cause the hw-authent flag to be set
    in issued tickets.
  * The krb5_init_creds_step() API will now issue the same password
    expiration warnings as krb5_get_init_creds_password().
  Protocol evolution
  * Added client and KDC support for Microsoft's Resource-Based Constrained
    Delegation, which allows cross-realm S4U2Proxy requests. A third-party
    database module is required for KDC support.
  * kadmin/admin is now the preferred server principal name for kadmin
    connections, and the host-based form is no longer created by default.
    The client will still try the host-based form as a fallback.
  * Added client and server support for Microsoft's KERB_AP_OPTIONS_CBT
    extension, which causes channel bindings to be required for the
    initiator if the acceptor provided them. The client will send this
    option if the client_aware_gss_bindings profile option is set.
  User experience
  * kinit will now issue a warning if the des3-cbc-sha1 encryption type is
    used in the reply. This encryption type will be deprecated and removed
    in future releases.
  * Added kvno flags --out-cache, --no-store, and --cached-only
    (inspired by Heimdal's kgetcred).
- Changes from 1.18.3
  * Fix a denial of service vulnerability when decoding Kerberos
    protocol messages; (CVE-2020-28196); (bsc#1178512);
  * Fix a locking issue with the LMDB KDB module which could cause
    KDC and kadmind processes to lose access to the database.
  * Fix an assertion failure when libgssapi_krb5 is repeatedly loaded
    and unloaded while libkrb5support remains loaded.
- Changes from 1.18.2
  * Fix a SPNEGO regression where an acceptor using the default credential
    would improperly filter mechanisms, causing a negotiation failure.
  * Fix a bug where the KDC would fail to issue tickets if the local krbtgt
    principal's first key has a single-DES enctype.
  * Add stub functions to allow old versions of OpenSSL libcrypto to link
    against libkrb5.
  * Fix a NegoEx bug where the client name and delegated credential might
    not be reported.
- Changes from 1.18.1
  * Fix a crash when qualifying short hostnames when the system has
    no primary DNS domain.
  * Fix a regression when an application imports "service@" as a GSS
    host-based name for its acceptor credential handle.
  * Fix KDC enforcement of auth indicators when they are modified by
    the KDB module.
  * Fix removal of require_auth string attributes when the LDAP KDB
    module is used.
  * Fix a compile error when building with musl libc on Linux.
  * Fix a compile error when building with gcc 4.x.
  * Change the KDC constrained delegation precedence order for consistency
    with Windows KDCs.
- Changes from 1.18
  Administrator experience:
  * Remove support for single-DES encryption types.
  * Change the replay cache format to be more efficient and robust.
    Replay cache filenames using the new format end with ".rcache2"
    by default.
  * setuid programs will automatically ignore environment variables
    that normally affect krb5 API functions, even if the caller does
    not use krb5_init_secure_context().
  * Add an "enforce_ok_as_delegate" krb5.conf relation to disable
    credential forwarding during GSSAPI authentication unless the KDC
    sets the ok-as-delegate bit in the service ticket.
  * Use the permitted_enctypes krb5.conf setting as the default value
    for default_tkt_enctypes and default_tgs_enctypes.
  Developer experience:
  * Implement krb5_cc_remove_cred() for all credential cache types.
  * Add the krb5_pac_get_client_info() API to get the client account
    name from a PAC.
  Protocol evolution:
  * Add KDC support for S4U2Self requests where the user is identified
    by X.509 certificate. (Requires support for certificate lookup from
    a third-party KDB module.)
  * Remove support for an old ("draft 9") variant of PKINIT.
  * Add support for Microsoft NegoEx. (Requires one or more third-party
    GSS modules implementing NegoEx mechanisms.)
  User experience:
  * Add support for "dns_canonicalize_hostname=fallback", causing
    host-based principal names to be tried first without DNS
    canonicalization, and again with DNS canonicalization if the
    un-canonicalized server is not found.
  * Expand single-component hostnames in host-based principal names
    when DNS canonicalization is not used, adding the system's first DNS
    search path as a suffix. Add a "qualify_shortname" krb5.conf relation
    to override this suffix or disable expansion.
  * Honor the transited-policy-checked ticket flag on application servers,
    eliminating the requirement to configure capaths on servers in some
    scenarios.
  Code quality:
  * The libkrb5 serialization code (used to export and import krb5 GSS
    security contexts) has been simplified and made type-safe.
  * The libkrb5 code for creating KRB-PRIV, KRB-SAFE, and KRB-CRED
    messages has been revised to conform to current coding practices.
  * The test suite has been modified to work with macOS System Integrity
    Protection enabled.
  * The test suite incorporates soft-pkcs11 so that PKINIT PKCS11 support
    can always be tested.
- Changes from 1.17.1
  * Fix a bug preventing "addprinc -randkey -kvno" from working in kadmin.
  * Fix a bug preventing time skew correction from working when a KCM
    credential cache is used.
- Changes from 1.17:
  Administrator experience:
  * A new Kerberos database module using the Lightning Memory-Mapped
    Database library (LMDB) has been added.  The LMDB KDB module should
    be more performant and more robust than the DB2 module, and may
    become the default module for new databases in a future release.
  * "kdb5_util dump" will no longer dump policy entries when specific
    principal names are requested.
  Developer experience:
  * The new krb5_get_etype_info() API can be used to retrieve enctype,
    salt, and string-to-key parameters from the KDC for a client
    principal.
  * The new GSS_KRB5_NT_ENTERPRISE_NAME name type allows enterprise
    principal names to be used with GSS-API functions.
  * KDC and kadmind modules which call com_err() will now write to the
    log file in a format more consistent with other log messages.
  * Programs which use large numbers of memory credential caches should
    perform better.
  Protocol evolution:
  * The SPAKE pre-authentication mechanism is now supported.  This
    mechanism protects against password dictionary attacks without
    requiring any additional infrastructure such as certificates.  SPAKE
    is enabled by default on clients, but must be manually enabled on
    the KDC for this release.
  * PKINIT freshness tokens are now supported.  Freshness tokens can
    protect against scenarios where an attacker uses temporary access to
    a smart card to generate authentication requests for the future.
  * Password change operations now prefer TCP over UDP, to avoid
    spurious error messages about replays when a response packet is
    dropped.
  * The KDC now supports cross-realm S4U2Self requests when used with a
    third-party KDB module such as Samba's.  The client code for
    cross-realm S4U2Self requests is also now more robust
    (CVE-2018-20217).
  User experience:
  * The new ktutil addent -f flag can be used to fetch salt information
    from the KDC for password-based keys.
  * The new kdestroy -p option can be used to destroy a credential cache
    within a collection by client principal name.
  * The Kerberos man page has been restored, and documents the
    environment variables that affect programs using the Kerberos
    library.
  Code quality:
  * Python test scripts now use Python 3.
  * Python test scripts now display markers in verbose output, making it
    easier to find where a failure occurred within the scripts.
  * The Windows build system has been simplified and updated to work
    with more recent versions of Visual Studio.  A large volume of
    unused Windows-specific code has been removed.  Visual Studio 2013
    or later is now required.
- Replace old $RPM_* shell vars
- Removal of SuSEfirewall2 service since SuSEfirewall2 has been replaced
  by firewalld
- Remove cruft to support distributions older than SLE 12
- Use macros where applicable
- Switch to pkgconfig style dependencies
- Use %_tmpfilesdir instead of the wrong %_libexecdir/tmpfiles.d
  notation: libexecdir is likely changing away from /usr/lib to
  /usr/libexec
- Build with full Cyrus SASL support. Negotiating SASL credentials with
  an EXTERNAL bind mechanism requires interaction. Kerberos provides its
  own interaction function that skips all interaction, thus preventing the
  mechanism from working.
- Removed patches:
  * 0007-krb5-1.12-ksu-path.patch
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch
- Renamed patches:
  * 0001-krb5-1.12-pam.patch =&gt; 0001-ksu-pam-integration.patch
  * 0003-krb5-1.12-buildconf.patch =&gt; 0003-Adjust-build-configuration.patch
  * 0008-krb5-1.12-selinux-label.patch =&gt; 0007-SELinux-integration.patch
  * 0009-krb5-1.9-debuginfo.patch =&gt; 0008-krb5-1.9-debuginfo.patch
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch =&gt;
    0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="nopower@suse.com" date="1667822400">- Fix integer overflows in PAC parsing; (CVE-2022-42898);
  (bso#15203), (bsc#1205126).
- Added patches:
  * 0010-Fix-integer-overflows-in-PAC-parsing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1670932800">- Update to 1.20.1; (bsc#1205126); (CVE-2022-42898);
  * Fix integer overflows in PAC parsing [CVE-2022-42898].
  * Fix null deref in KDC when decoding invalid NDR.
  * Fix memory leak in OTP kdcpreauth module.
  * Fix PKCS11 module path search.
- update to 1.20.0:
  * Added a "disable_pac" realm relation to suppress adding PAC authdata
    to tickets, for realms which do not need to support S4U requests.
  * Most credential cache types will use atomic replacement when a cache
    is reinitialized using kinit or refreshed from the client keytab.
  * kprop can now propagate databases with a dump size larger than 4GB,
    if both the client and server are upgraded.
  * kprop can now work over NATs that change the destination IP address,
    if the client is upgraded.
  * Updated the KDB interface.  The sign_authdata() method is replaced
    with the issue_pac() method, allowing KDB modules to add logon info
    and other buffers to the PAC issued by the KDC.
  * Host-based initiator names are better supported in the GSS krb5
    mechanism.
  * Replaced AD-SIGNEDPATH authdata with minimal PACs.
  * To avoid spurious replay errors, password change requests will not
    be attempted over UDP until the attempt over TCP fails.
  * PKINIT will sign its CMS messages with SHA-256 instead of SHA-1.
  * Updated all code using OpenSSL to be compatible with OpenSSL 3.
  * Reorganized the libk5crypto build system to allow the OpenSSL
    back-end to pull in material from the builtin back-end depending on
    the OpenSSL version.
  * Simplified the PRNG logic to always use the platform PRNG.
  * Converted the remaining Tcl tests to Python.
- update to 1.19.3 (bsc#1189929, CVE-2021-37750):
  * Fix a denial of service attack against the KDC [CVE-2021-37750].
  * Fix KDC null deref on TGS inner body null server
  * Fix conformance issue in GSSAPI tests
- Resolve "Credential cache directory /run/user/0/krb5cc does not
  exist while opening default credentials cache" by using a kernel
  keyring instead of a dir cache; (bsc#1109830);
- Added hardening to systemd services; (bsc#1181400);
- Drop 0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch,
  fixed in release 1.20.0
- Drop 0010-Fix-integer-overflows-in-PAC-parsing.patch,
  fixed in release 1.20.1</changelog>
  <changelog author="scabrero@suse.de" date="1691496000">- Ensure array count consistency in kadm5 RPC; (bsc#1214054);
  (CVE-2023-36054);
- Added patches:
  * 0009-Ensure-array-count-consistency-in-kadm5-RPC.patch</changelog>
  <changelog author="scabrero@suse.de" date="1694520000">- Avoid KDC spoofing vulnerability, enable verify_ap_req_nofail in
  krb5.conf; (jsc#PED-6213);</changelog>
  <changelog author="scabrero@suse.de" date="1701172800">- Update patch 0007-SELinux-integration.patch for SELinux 3.5</changelog>
  <changelog author="scabrero@suse.de" date="1711108800">- Fix memory leaks, add patch 0010-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772</changelog>
  <changelog author="scabrero@suse.de" date="1719835200">- Fix vulnerabilities in GSS message token handling, add patch
  0011-Fix-vulnerabilities-in-GSS-message-token-handling.patch
  * CVE-2024-37370, bsc#1227186
  * CVE-2024-37371, bsc#1227187</changelog>
  <changelog author="scabrero@suse.de" date="1737547200">- Add crypto-policies support; (jsc#PED-12018)
  * The default krb5.conf has been updated to include config
    snippets in the krb5.conf.d directory, where crypto-policies
    drops its.
- Allow to use KRB5KDF in FIPS mode; (jsc#PED-12018); Add patch
  0012-Allow-KRB5KDF-in-FIPS-mode.patch
  * This key derivation function is used by AES256-CTS-HMAC-SHA1-96
    and AES128-CTS-HMAC-SHA1-96 encryption types, used by Active
    directory. If these encryption types are allowed or not in
    FIPS mode is enforced now by the FIPS:AD-SUPPORT subpolicy.</changelog>
  <changelog author="scabrero@suse.de" date="1738238400">- Prevent overflow when calculating ulog block size. An authenticated
  attacker can cause kadmind to write beyond the end of the mapped
  region for the iprop log file, likely causing a process crash;
  (CVE-2025-24528); (bsc#1236619).
- Add patch 0013-Prevent-overflow-when-calculating-ulog-block-size.patch</changelog>
  <changelog author="scabrero@suse.de" date="1746446400">- Remove references to the LMDB backend in the kdc.conf manpage;
  (bsc#1242060);</changelog>
</package>
<package pkgid="c5db6c767708033079b73d12e639280f29c58a966dd823bd9dbcef030a1841ed" name="krb5-plugin-preauth-otp" arch="x86_64">
  <version epoch="0" ver="1.20.1" rel="150600.11.14.1"/>
  <changelog author="scabrero@suse.de" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="scabrero@suse.de" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="scabrero@suse.de" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="scabrero@suse.de" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619092800">- Use /run instead of /var/run for daemon PID files; (bsc#1185163);</changelog>
  <changelog author="scabrero@suse.de" date="1627300800">- Fix KDC null deref on bad encrypted challenge; (CVE-2021-36222);
  (bsc#1188571);
- Added patches:
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch</changelog>
  <changelog author="scabrero@suse.de" date="1630324800">- Fix KDC null pointer dereference via a FAST inner body that
  lacks a server field; (CVE-2021-37750); (bsc#1189929);
- Added patches:
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="scabrero@suse.de" date="1631880000">- Update to 1.19.2
  * Fix a denial of service attack against the KDC encrypted challenge
    code; (CVE-2021-36222);
  * Fix a memory leak when gss_inquire_cred() is called without a
    credential handle.
- Changes from 1.19.1
  * Fix a linking issue with Samba.
  * Better support multiple pkinit_identities values by checking whether
    certificates can be loaded for each value.
- Changes from 1.19
  Administrator experience
  * When a client keytab is present, the GSSAPI krb5 mech will refresh
    credentials even if the current credentials were acquired manually.
  * It is now harder to accidentally delete the K/M entry from a KDB.
  Developer experience
  * gss_acquire_cred_from() now supports the "password" and "verify"
    options, allowing credentials to be acquired via password and
    verified using a keytab key.
  * When an application accepts a GSS security context, the new
    GSS_C_CHANNEL_BOUND_FLAG will be set if the initiator and acceptor
    both provided matching channel bindings.
  * Added the GSS_KRB5_NT_X509_CERT name type, allowing S4U2Self requests
    to identify the desired client principal by certificate.
  * PKINIT certauth modules can now cause the hw-authent flag to be set
    in issued tickets.
  * The krb5_init_creds_step() API will now issue the same password
    expiration warnings as krb5_get_init_creds_password().
  Protocol evolution
  * Added client and KDC support for Microsoft's Resource-Based Constrained
    Delegation, which allows cross-realm S4U2Proxy requests. A third-party
    database module is required for KDC support.
  * kadmin/admin is now the preferred server principal name for kadmin
    connections, and the host-based form is no longer created by default.
    The client will still try the host-based form as a fallback.
  * Added client and server support for Microsoft's KERB_AP_OPTIONS_CBT
    extension, which causes channel bindings to be required for the
    initiator if the acceptor provided them. The client will send this
    option if the client_aware_gss_bindings profile option is set.
  User experience
  * kinit will now issue a warning if the des3-cbc-sha1 encryption type is
    used in the reply. This encryption type will be deprecated and removed
    in future releases.
  * Added kvno flags --out-cache, --no-store, and --cached-only
    (inspired by Heimdal's kgetcred).
- Changes from 1.18.3
  * Fix a denial of service vulnerability when decoding Kerberos
    protocol messages; (CVE-2020-28196); (bsc#1178512);
  * Fix a locking issue with the LMDB KDB module which could cause
    KDC and kadmind processes to lose access to the database.
  * Fix an assertion failure when libgssapi_krb5 is repeatedly loaded
    and unloaded while libkrb5support remains loaded.
- Changes from 1.18.2
  * Fix a SPNEGO regression where an acceptor using the default credential
    would improperly filter mechanisms, causing a negotiation failure.
  * Fix a bug where the KDC would fail to issue tickets if the local krbtgt
    principal's first key has a single-DES enctype.
  * Add stub functions to allow old versions of OpenSSL libcrypto to link
    against libkrb5.
  * Fix a NegoEx bug where the client name and delegated credential might
    not be reported.
- Changes from 1.18.1
  * Fix a crash when qualifying short hostnames when the system has
    no primary DNS domain.
  * Fix a regression when an application imports "service@" as a GSS
    host-based name for its acceptor credential handle.
  * Fix KDC enforcement of auth indicators when they are modified by
    the KDB module.
  * Fix removal of require_auth string attributes when the LDAP KDB
    module is used.
  * Fix a compile error when building with musl libc on Linux.
  * Fix a compile error when building with gcc 4.x.
  * Change the KDC constrained delegation precedence order for consistency
    with Windows KDCs.
- Changes from 1.18
  Administrator experience:
  * Remove support for single-DES encryption types.
  * Change the replay cache format to be more efficient and robust.
    Replay cache filenames using the new format end with ".rcache2"
    by default.
  * setuid programs will automatically ignore environment variables
    that normally affect krb5 API functions, even if the caller does
    not use krb5_init_secure_context().
  * Add an "enforce_ok_as_delegate" krb5.conf relation to disable
    credential forwarding during GSSAPI authentication unless the KDC
    sets the ok-as-delegate bit in the service ticket.
  * Use the permitted_enctypes krb5.conf setting as the default value
    for default_tkt_enctypes and default_tgs_enctypes.
  Developer experience:
  * Implement krb5_cc_remove_cred() for all credential cache types.
  * Add the krb5_pac_get_client_info() API to get the client account
    name from a PAC.
  Protocol evolution:
  * Add KDC support for S4U2Self requests where the user is identified
    by X.509 certificate. (Requires support for certificate lookup from
    a third-party KDB module.)
  * Remove support for an old ("draft 9") variant of PKINIT.
  * Add support for Microsoft NegoEx. (Requires one or more third-party
    GSS modules implementing NegoEx mechanisms.)
  User experience:
  * Add support for "dns_canonicalize_hostname=fallback", causing
    host-based principal names to be tried first without DNS
    canonicalization, and again with DNS canonicalization if the
    un-canonicalized server is not found.
  * Expand single-component hostnames in host-based principal names
    when DNS canonicalization is not used, adding the system's first DNS
    search path as a suffix. Add a "qualify_shortname" krb5.conf relation
    to override this suffix or disable expansion.
  * Honor the transited-policy-checked ticket flag on application servers,
    eliminating the requirement to configure capaths on servers in some
    scenarios.
  Code quality:
  * The libkrb5 serialization code (used to export and import krb5 GSS
    security contexts) has been simplified and made type-safe.
  * The libkrb5 code for creating KRB-PRIV, KRB-SAFE, and KRB-CRED
    messages has been revised to conform to current coding practices.
  * The test suite has been modified to work with macOS System Integrity
    Protection enabled.
  * The test suite incorporates soft-pkcs11 so that PKINIT PKCS11 support
    can always be tested.
- Changes from 1.17.1
  * Fix a bug preventing "addprinc -randkey -kvno" from working in kadmin.
  * Fix a bug preventing time skew correction from working when a KCM
    credential cache is used.
- Changes from 1.17:
  Administrator experience:
  * A new Kerberos database module using the Lightning Memory-Mapped
    Database library (LMDB) has been added.  The LMDB KDB module should
    be more performant and more robust than the DB2 module, and may
    become the default module for new databases in a future release.
  * "kdb5_util dump" will no longer dump policy entries when specific
    principal names are requested.
  Developer experience:
  * The new krb5_get_etype_info() API can be used to retrieve enctype,
    salt, and string-to-key parameters from the KDC for a client
    principal.
  * The new GSS_KRB5_NT_ENTERPRISE_NAME name type allows enterprise
    principal names to be used with GSS-API functions.
  * KDC and kadmind modules which call com_err() will now write to the
    log file in a format more consistent with other log messages.
  * Programs which use large numbers of memory credential caches should
    perform better.
  Protocol evolution:
  * The SPAKE pre-authentication mechanism is now supported.  This
    mechanism protects against password dictionary attacks without
    requiring any additional infrastructure such as certificates.  SPAKE
    is enabled by default on clients, but must be manually enabled on
    the KDC for this release.
  * PKINIT freshness tokens are now supported.  Freshness tokens can
    protect against scenarios where an attacker uses temporary access to
    a smart card to generate authentication requests for the future.
  * Password change operations now prefer TCP over UDP, to avoid
    spurious error messages about replays when a response packet is
    dropped.
  * The KDC now supports cross-realm S4U2Self requests when used with a
    third-party KDB module such as Samba's.  The client code for
    cross-realm S4U2Self requests is also now more robust
    (CVE-2018-20217).
  User experience:
  * The new ktutil addent -f flag can be used to fetch salt information
    from the KDC for password-based keys.
  * The new kdestroy -p option can be used to destroy a credential cache
    within a collection by client principal name.
  * The Kerberos man page has been restored, and documents the
    environment variables that affect programs using the Kerberos
    library.
  Code quality:
  * Python test scripts now use Python 3.
  * Python test scripts now display markers in verbose output, making it
    easier to find where a failure occurred within the scripts.
  * The Windows build system has been simplified and updated to work
    with more recent versions of Visual Studio.  A large volume of
    unused Windows-specific code has been removed.  Visual Studio 2013
    or later is now required.
- Replace old $RPM_* shell vars
- Removal of SuSEfirewall2 service since SuSEfirewall2 has been replaced
  by firewalld
- Remove cruft to support distributions older than SLE 12
- Use macros where applicable
- Switch to pkgconfig style dependencies
- Use %_tmpfilesdir instead of the wrong %_libexecdir/tmpfiles.d
  notation: libexecdir is likely changing away from /usr/lib to
  /usr/libexec
- Build with full Cyrus SASL support. Negotiating SASL credentials with
  an EXTERNAL bind mechanism requires interaction. Kerberos provides its
  own interaction function that skips all interaction, thus preventing the
  mechanism from working.
- Removed patches:
  * 0007-krb5-1.12-ksu-path.patch
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch
- Renamed patches:
  * 0001-krb5-1.12-pam.patch =&gt; 0001-ksu-pam-integration.patch
  * 0003-krb5-1.12-buildconf.patch =&gt; 0003-Adjust-build-configuration.patch
  * 0008-krb5-1.12-selinux-label.patch =&gt; 0007-SELinux-integration.patch
  * 0009-krb5-1.9-debuginfo.patch =&gt; 0008-krb5-1.9-debuginfo.patch
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch =&gt;
    0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="nopower@suse.com" date="1667822400">- Fix integer overflows in PAC parsing; (CVE-2022-42898);
  (bso#15203), (bsc#1205126).
- Added patches:
  * 0010-Fix-integer-overflows-in-PAC-parsing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1670932800">- Update to 1.20.1; (bsc#1205126); (CVE-2022-42898);
  * Fix integer overflows in PAC parsing [CVE-2022-42898].
  * Fix null deref in KDC when decoding invalid NDR.
  * Fix memory leak in OTP kdcpreauth module.
  * Fix PKCS11 module path search.
- update to 1.20.0:
  * Added a "disable_pac" realm relation to suppress adding PAC authdata
    to tickets, for realms which do not need to support S4U requests.
  * Most credential cache types will use atomic replacement when a cache
    is reinitialized using kinit or refreshed from the client keytab.
  * kprop can now propagate databases with a dump size larger than 4GB,
    if both the client and server are upgraded.
  * kprop can now work over NATs that change the destination IP address,
    if the client is upgraded.
  * Updated the KDB interface.  The sign_authdata() method is replaced
    with the issue_pac() method, allowing KDB modules to add logon info
    and other buffers to the PAC issued by the KDC.
  * Host-based initiator names are better supported in the GSS krb5
    mechanism.
  * Replaced AD-SIGNEDPATH authdata with minimal PACs.
  * To avoid spurious replay errors, password change requests will not
    be attempted over UDP until the attempt over TCP fails.
  * PKINIT will sign its CMS messages with SHA-256 instead of SHA-1.
  * Updated all code using OpenSSL to be compatible with OpenSSL 3.
  * Reorganized the libk5crypto build system to allow the OpenSSL
    back-end to pull in material from the builtin back-end depending on
    the OpenSSL version.
  * Simplified the PRNG logic to always use the platform PRNG.
  * Converted the remaining Tcl tests to Python.
- update to 1.19.3 (bsc#1189929, CVE-2021-37750):
  * Fix a denial of service attack against the KDC [CVE-2021-37750].
  * Fix KDC null deref on TGS inner body null server
  * Fix conformance issue in GSSAPI tests
- Resolve "Credential cache directory /run/user/0/krb5cc does not
  exist while opening default credentials cache" by using a kernel
  keyring instead of a dir cache; (bsc#1109830);
- Added hardening to systemd services; (bsc#1181400);
- Drop 0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch,
  fixed in release 1.20.0
- Drop 0010-Fix-integer-overflows-in-PAC-parsing.patch,
  fixed in release 1.20.1</changelog>
  <changelog author="scabrero@suse.de" date="1691496000">- Ensure array count consistency in kadm5 RPC; (bsc#1214054);
  (CVE-2023-36054);
- Added patches:
  * 0009-Ensure-array-count-consistency-in-kadm5-RPC.patch</changelog>
  <changelog author="scabrero@suse.de" date="1694520000">- Avoid KDC spoofing vulnerability, enable verify_ap_req_nofail in
  krb5.conf; (jsc#PED-6213);</changelog>
  <changelog author="scabrero@suse.de" date="1701172800">- Update patch 0007-SELinux-integration.patch for SELinux 3.5</changelog>
  <changelog author="scabrero@suse.de" date="1711108800">- Fix memory leaks, add patch 0010-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772</changelog>
  <changelog author="scabrero@suse.de" date="1719835200">- Fix vulnerabilities in GSS message token handling, add patch
  0011-Fix-vulnerabilities-in-GSS-message-token-handling.patch
  * CVE-2024-37370, bsc#1227186
  * CVE-2024-37371, bsc#1227187</changelog>
  <changelog author="scabrero@suse.de" date="1737547200">- Add crypto-policies support; (jsc#PED-12018)
  * The default krb5.conf has been updated to include config
    snippets in the krb5.conf.d directory, where crypto-policies
    drops its.
- Allow to use KRB5KDF in FIPS mode; (jsc#PED-12018); Add patch
  0012-Allow-KRB5KDF-in-FIPS-mode.patch
  * This key derivation function is used by AES256-CTS-HMAC-SHA1-96
    and AES128-CTS-HMAC-SHA1-96 encryption types, used by Active
    directory. If these encryption types are allowed or not in
    FIPS mode is enforced now by the FIPS:AD-SUPPORT subpolicy.</changelog>
  <changelog author="scabrero@suse.de" date="1738238400">- Prevent overflow when calculating ulog block size. An authenticated
  attacker can cause kadmind to write beyond the end of the mapped
  region for the iprop log file, likely causing a process crash;
  (CVE-2025-24528); (bsc#1236619).
- Add patch 0013-Prevent-overflow-when-calculating-ulog-block-size.patch</changelog>
  <changelog author="scabrero@suse.de" date="1746446400">- Remove references to the LMDB backend in the kdc.conf manpage;
  (bsc#1242060);</changelog>
  <changelog author="nopower@suse.com" date="1756814400">- Remove des3-cbc-sha1 and arcfour-hmac-md5 from permitted
  enctypes unless new special options "allow_des3" or "allow_rc4"
  are set; (CVE-2025-3576); (bsc#1241219).
- Add patch 0015-CVE-2025-3576.patch</changelog>
</package>
<package pkgid="40012b3eefe4380e165ad207add730187847bdba4e2ae8b4e4cd989676f552a5" name="krb5-plugin-preauth-pkinit" arch="x86_64">
  <version epoch="0" ver="1.20.1" rel="150600.11.11.2"/>
  <changelog author="scabrero@suse.de" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="scabrero@suse.de" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="scabrero@suse.de" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="scabrero@suse.de" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="scabrero@suse.de" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619092800">- Use /run instead of /var/run for daemon PID files; (bsc#1185163);</changelog>
  <changelog author="scabrero@suse.de" date="1627300800">- Fix KDC null deref on bad encrypted challenge; (CVE-2021-36222);
  (bsc#1188571);
- Added patches:
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch</changelog>
  <changelog author="scabrero@suse.de" date="1630324800">- Fix KDC null pointer dereference via a FAST inner body that
  lacks a server field; (CVE-2021-37750); (bsc#1189929);
- Added patches:
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="scabrero@suse.de" date="1631880000">- Update to 1.19.2
  * Fix a denial of service attack against the KDC encrypted challenge
    code; (CVE-2021-36222);
  * Fix a memory leak when gss_inquire_cred() is called without a
    credential handle.
- Changes from 1.19.1
  * Fix a linking issue with Samba.
  * Better support multiple pkinit_identities values by checking whether
    certificates can be loaded for each value.
- Changes from 1.19
  Administrator experience
  * When a client keytab is present, the GSSAPI krb5 mech will refresh
    credentials even if the current credentials were acquired manually.
  * It is now harder to accidentally delete the K/M entry from a KDB.
  Developer experience
  * gss_acquire_cred_from() now supports the "password" and "verify"
    options, allowing credentials to be acquired via password and
    verified using a keytab key.
  * When an application accepts a GSS security context, the new
    GSS_C_CHANNEL_BOUND_FLAG will be set if the initiator and acceptor
    both provided matching channel bindings.
  * Added the GSS_KRB5_NT_X509_CERT name type, allowing S4U2Self requests
    to identify the desired client principal by certificate.
  * PKINIT certauth modules can now cause the hw-authent flag to be set
    in issued tickets.
  * The krb5_init_creds_step() API will now issue the same password
    expiration warnings as krb5_get_init_creds_password().
  Protocol evolution
  * Added client and KDC support for Microsoft's Resource-Based Constrained
    Delegation, which allows cross-realm S4U2Proxy requests. A third-party
    database module is required for KDC support.
  * kadmin/admin is now the preferred server principal name for kadmin
    connections, and the host-based form is no longer created by default.
    The client will still try the host-based form as a fallback.
  * Added client and server support for Microsoft's KERB_AP_OPTIONS_CBT
    extension, which causes channel bindings to be required for the
    initiator if the acceptor provided them. The client will send this
    option if the client_aware_gss_bindings profile option is set.
  User experience
  * kinit will now issue a warning if the des3-cbc-sha1 encryption type is
    used in the reply. This encryption type will be deprecated and removed
    in future releases.
  * Added kvno flags --out-cache, --no-store, and --cached-only
    (inspired by Heimdal's kgetcred).
- Changes from 1.18.3
  * Fix a denial of service vulnerability when decoding Kerberos
    protocol messages; (CVE-2020-28196); (bsc#1178512);
  * Fix a locking issue with the LMDB KDB module which could cause
    KDC and kadmind processes to lose access to the database.
  * Fix an assertion failure when libgssapi_krb5 is repeatedly loaded
    and unloaded while libkrb5support remains loaded.
- Changes from 1.18.2
  * Fix a SPNEGO regression where an acceptor using the default credential
    would improperly filter mechanisms, causing a negotiation failure.
  * Fix a bug where the KDC would fail to issue tickets if the local krbtgt
    principal's first key has a single-DES enctype.
  * Add stub functions to allow old versions of OpenSSL libcrypto to link
    against libkrb5.
  * Fix a NegoEx bug where the client name and delegated credential might
    not be reported.
- Changes from 1.18.1
  * Fix a crash when qualifying short hostnames when the system has
    no primary DNS domain.
  * Fix a regression when an application imports "service@" as a GSS
    host-based name for its acceptor credential handle.
  * Fix KDC enforcement of auth indicators when they are modified by
    the KDB module.
  * Fix removal of require_auth string attributes when the LDAP KDB
    module is used.
  * Fix a compile error when building with musl libc on Linux.
  * Fix a compile error when building with gcc 4.x.
  * Change the KDC constrained delegation precedence order for consistency
    with Windows KDCs.
- Changes from 1.18
  Administrator experience:
  * Remove support for single-DES encryption types.
  * Change the replay cache format to be more efficient and robust.
    Replay cache filenames using the new format end with ".rcache2"
    by default.
  * setuid programs will automatically ignore environment variables
    that normally affect krb5 API functions, even if the caller does
    not use krb5_init_secure_context().
  * Add an "enforce_ok_as_delegate" krb5.conf relation to disable
    credential forwarding during GSSAPI authentication unless the KDC
    sets the ok-as-delegate bit in the service ticket.
  * Use the permitted_enctypes krb5.conf setting as the default value
    for default_tkt_enctypes and default_tgs_enctypes.
  Developer experience:
  * Implement krb5_cc_remove_cred() for all credential cache types.
  * Add the krb5_pac_get_client_info() API to get the client account
    name from a PAC.
  Protocol evolution:
  * Add KDC support for S4U2Self requests where the user is identified
    by X.509 certificate. (Requires support for certificate lookup from
    a third-party KDB module.)
  * Remove support for an old ("draft 9") variant of PKINIT.
  * Add support for Microsoft NegoEx. (Requires one or more third-party
    GSS modules implementing NegoEx mechanisms.)
  User experience:
  * Add support for "dns_canonicalize_hostname=fallback", causing
    host-based principal names to be tried first without DNS
    canonicalization, and again with DNS canonicalization if the
    un-canonicalized server is not found.
  * Expand single-component hostnames in host-based principal names
    when DNS canonicalization is not used, adding the system's first DNS
    search path as a suffix. Add a "qualify_shortname" krb5.conf relation
    to override this suffix or disable expansion.
  * Honor the transited-policy-checked ticket flag on application servers,
    eliminating the requirement to configure capaths on servers in some
    scenarios.
  Code quality:
  * The libkrb5 serialization code (used to export and import krb5 GSS
    security contexts) has been simplified and made type-safe.
  * The libkrb5 code for creating KRB-PRIV, KRB-SAFE, and KRB-CRED
    messages has been revised to conform to current coding practices.
  * The test suite has been modified to work with macOS System Integrity
    Protection enabled.
  * The test suite incorporates soft-pkcs11 so that PKINIT PKCS11 support
    can always be tested.
- Changes from 1.17.1
  * Fix a bug preventing "addprinc -randkey -kvno" from working in kadmin.
  * Fix a bug preventing time skew correction from working when a KCM
    credential cache is used.
- Changes from 1.17:
  Administrator experience:
  * A new Kerberos database module using the Lightning Memory-Mapped
    Database library (LMDB) has been added.  The LMDB KDB module should
    be more performant and more robust than the DB2 module, and may
    become the default module for new databases in a future release.
  * "kdb5_util dump" will no longer dump policy entries when specific
    principal names are requested.
  Developer experience:
  * The new krb5_get_etype_info() API can be used to retrieve enctype,
    salt, and string-to-key parameters from the KDC for a client
    principal.
  * The new GSS_KRB5_NT_ENTERPRISE_NAME name type allows enterprise
    principal names to be used with GSS-API functions.
  * KDC and kadmind modules which call com_err() will now write to the
    log file in a format more consistent with other log messages.
  * Programs which use large numbers of memory credential caches should
    perform better.
  Protocol evolution:
  * The SPAKE pre-authentication mechanism is now supported.  This
    mechanism protects against password dictionary attacks without
    requiring any additional infrastructure such as certificates.  SPAKE
    is enabled by default on clients, but must be manually enabled on
    the KDC for this release.
  * PKINIT freshness tokens are now supported.  Freshness tokens can
    protect against scenarios where an attacker uses temporary access to
    a smart card to generate authentication requests for the future.
  * Password change operations now prefer TCP over UDP, to avoid
    spurious error messages about replays when a response packet is
    dropped.
  * The KDC now supports cross-realm S4U2Self requests when used with a
    third-party KDB module such as Samba's.  The client code for
    cross-realm S4U2Self requests is also now more robust
    (CVE-2018-20217).
  User experience:
  * The new ktutil addent -f flag can be used to fetch salt information
    from the KDC for password-based keys.
  * The new kdestroy -p option can be used to destroy a credential cache
    within a collection by client principal name.
  * The Kerberos man page has been restored, and documents the
    environment variables that affect programs using the Kerberos
    library.
  Code quality:
  * Python test scripts now use Python 3.
  * Python test scripts now display markers in verbose output, making it
    easier to find where a failure occurred within the scripts.
  * The Windows build system has been simplified and updated to work
    with more recent versions of Visual Studio.  A large volume of
    unused Windows-specific code has been removed.  Visual Studio 2013
    or later is now required.
- Replace old $RPM_* shell vars
- Removal of SuSEfirewall2 service since SuSEfirewall2 has been replaced
  by firewalld
- Remove cruft to support distributions older than SLE 12
- Use macros where applicable
- Switch to pkgconfig style dependencies
- Use %_tmpfilesdir instead of the wrong %_libexecdir/tmpfiles.d
  notation: libexecdir is likely changing away from /usr/lib to
  /usr/libexec
- Build with full Cyrus SASL support. Negotiating SASL credentials with
  an EXTERNAL bind mechanism requires interaction. Kerberos provides its
  own interaction function that skips all interaction, thus preventing the
  mechanism from working.
- Removed patches:
  * 0007-krb5-1.12-ksu-path.patch
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch
- Renamed patches:
  * 0001-krb5-1.12-pam.patch =&gt; 0001-ksu-pam-integration.patch
  * 0003-krb5-1.12-buildconf.patch =&gt; 0003-Adjust-build-configuration.patch
  * 0008-krb5-1.12-selinux-label.patch =&gt; 0007-SELinux-integration.patch
  * 0009-krb5-1.9-debuginfo.patch =&gt; 0008-krb5-1.9-debuginfo.patch
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch =&gt;
    0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="nopower@suse.com" date="1667822400">- Fix integer overflows in PAC parsing; (CVE-2022-42898);
  (bso#15203), (bsc#1205126).
- Added patches:
  * 0010-Fix-integer-overflows-in-PAC-parsing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1670932800">- Update to 1.20.1; (bsc#1205126); (CVE-2022-42898);
  * Fix integer overflows in PAC parsing [CVE-2022-42898].
  * Fix null deref in KDC when decoding invalid NDR.
  * Fix memory leak in OTP kdcpreauth module.
  * Fix PKCS11 module path search.
- update to 1.20.0:
  * Added a "disable_pac" realm relation to suppress adding PAC authdata
    to tickets, for realms which do not need to support S4U requests.
  * Most credential cache types will use atomic replacement when a cache
    is reinitialized using kinit or refreshed from the client keytab.
  * kprop can now propagate databases with a dump size larger than 4GB,
    if both the client and server are upgraded.
  * kprop can now work over NATs that change the destination IP address,
    if the client is upgraded.
  * Updated the KDB interface.  The sign_authdata() method is replaced
    with the issue_pac() method, allowing KDB modules to add logon info
    and other buffers to the PAC issued by the KDC.
  * Host-based initiator names are better supported in the GSS krb5
    mechanism.
  * Replaced AD-SIGNEDPATH authdata with minimal PACs.
  * To avoid spurious replay errors, password change requests will not
    be attempted over UDP until the attempt over TCP fails.
  * PKINIT will sign its CMS messages with SHA-256 instead of SHA-1.
  * Updated all code using OpenSSL to be compatible with OpenSSL 3.
  * Reorganized the libk5crypto build system to allow the OpenSSL
    back-end to pull in material from the builtin back-end depending on
    the OpenSSL version.
  * Simplified the PRNG logic to always use the platform PRNG.
  * Converted the remaining Tcl tests to Python.
- update to 1.19.3 (bsc#1189929, CVE-2021-37750):
  * Fix a denial of service attack against the KDC [CVE-2021-37750].
  * Fix KDC null deref on TGS inner body null server
  * Fix conformance issue in GSSAPI tests
- Resolve "Credential cache directory /run/user/0/krb5cc does not
  exist while opening default credentials cache" by using a kernel
  keyring instead of a dir cache; (bsc#1109830);
- Added hardening to systemd services; (bsc#1181400);
- Drop 0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch,
  fixed in release 1.20.0
- Drop 0010-Fix-integer-overflows-in-PAC-parsing.patch,
  fixed in release 1.20.1</changelog>
  <changelog author="scabrero@suse.de" date="1691496000">- Ensure array count consistency in kadm5 RPC; (bsc#1214054);
  (CVE-2023-36054);
- Added patches:
  * 0009-Ensure-array-count-consistency-in-kadm5-RPC.patch</changelog>
  <changelog author="scabrero@suse.de" date="1694520000">- Avoid KDC spoofing vulnerability, enable verify_ap_req_nofail in
  krb5.conf; (jsc#PED-6213);</changelog>
  <changelog author="scabrero@suse.de" date="1701172800">- Update patch 0007-SELinux-integration.patch for SELinux 3.5</changelog>
  <changelog author="scabrero@suse.de" date="1711108800">- Fix memory leaks, add patch 0010-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772</changelog>
  <changelog author="scabrero@suse.de" date="1719835200">- Fix vulnerabilities in GSS message token handling, add patch
  0011-Fix-vulnerabilities-in-GSS-message-token-handling.patch
  * CVE-2024-37370, bsc#1227186
  * CVE-2024-37371, bsc#1227187</changelog>
  <changelog author="scabrero@suse.de" date="1737547200">- Add crypto-policies support; (jsc#PED-12018)
  * The default krb5.conf has been updated to include config
    snippets in the krb5.conf.d directory, where crypto-policies
    drops its.
- Allow to use KRB5KDF in FIPS mode; (jsc#PED-12018); Add patch
  0012-Allow-KRB5KDF-in-FIPS-mode.patch
  * This key derivation function is used by AES256-CTS-HMAC-SHA1-96
    and AES128-CTS-HMAC-SHA1-96 encryption types, used by Active
    directory. If these encryption types are allowed or not in
    FIPS mode is enforced now by the FIPS:AD-SUPPORT subpolicy.</changelog>
  <changelog author="scabrero@suse.de" date="1738238400">- Prevent overflow when calculating ulog block size. An authenticated
  attacker can cause kadmind to write beyond the end of the mapped
  region for the iprop log file, likely causing a process crash;
  (CVE-2025-24528); (bsc#1236619).
- Add patch 0013-Prevent-overflow-when-calculating-ulog-block-size.patch</changelog>
  <changelog author="scabrero@suse.de" date="1746446400">- Remove references to the LMDB backend in the kdc.conf manpage;
  (bsc#1242060);</changelog>
</package>
<package pkgid="2b33ff3e53308e7488a4b66b4eed91e41075792a49a209f3c9513d409e358c94" name="krb5-plugin-preauth-pkinit" arch="x86_64">
  <version epoch="0" ver="1.20.1" rel="150600.11.14.1"/>
  <changelog author="scabrero@suse.de" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="scabrero@suse.de" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="scabrero@suse.de" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="scabrero@suse.de" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619092800">- Use /run instead of /var/run for daemon PID files; (bsc#1185163);</changelog>
  <changelog author="scabrero@suse.de" date="1627300800">- Fix KDC null deref on bad encrypted challenge; (CVE-2021-36222);
  (bsc#1188571);
- Added patches:
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch</changelog>
  <changelog author="scabrero@suse.de" date="1630324800">- Fix KDC null pointer dereference via a FAST inner body that
  lacks a server field; (CVE-2021-37750); (bsc#1189929);
- Added patches:
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="scabrero@suse.de" date="1631880000">- Update to 1.19.2
  * Fix a denial of service attack against the KDC encrypted challenge
    code; (CVE-2021-36222);
  * Fix a memory leak when gss_inquire_cred() is called without a
    credential handle.
- Changes from 1.19.1
  * Fix a linking issue with Samba.
  * Better support multiple pkinit_identities values by checking whether
    certificates can be loaded for each value.
- Changes from 1.19
  Administrator experience
  * When a client keytab is present, the GSSAPI krb5 mech will refresh
    credentials even if the current credentials were acquired manually.
  * It is now harder to accidentally delete the K/M entry from a KDB.
  Developer experience
  * gss_acquire_cred_from() now supports the "password" and "verify"
    options, allowing credentials to be acquired via password and
    verified using a keytab key.
  * When an application accepts a GSS security context, the new
    GSS_C_CHANNEL_BOUND_FLAG will be set if the initiator and acceptor
    both provided matching channel bindings.
  * Added the GSS_KRB5_NT_X509_CERT name type, allowing S4U2Self requests
    to identify the desired client principal by certificate.
  * PKINIT certauth modules can now cause the hw-authent flag to be set
    in issued tickets.
  * The krb5_init_creds_step() API will now issue the same password
    expiration warnings as krb5_get_init_creds_password().
  Protocol evolution
  * Added client and KDC support for Microsoft's Resource-Based Constrained
    Delegation, which allows cross-realm S4U2Proxy requests. A third-party
    database module is required for KDC support.
  * kadmin/admin is now the preferred server principal name for kadmin
    connections, and the host-based form is no longer created by default.
    The client will still try the host-based form as a fallback.
  * Added client and server support for Microsoft's KERB_AP_OPTIONS_CBT
    extension, which causes channel bindings to be required for the
    initiator if the acceptor provided them. The client will send this
    option if the client_aware_gss_bindings profile option is set.
  User experience
  * kinit will now issue a warning if the des3-cbc-sha1 encryption type is
    used in the reply. This encryption type will be deprecated and removed
    in future releases.
  * Added kvno flags --out-cache, --no-store, and --cached-only
    (inspired by Heimdal's kgetcred).
- Changes from 1.18.3
  * Fix a denial of service vulnerability when decoding Kerberos
    protocol messages; (CVE-2020-28196); (bsc#1178512);
  * Fix a locking issue with the LMDB KDB module which could cause
    KDC and kadmind processes to lose access to the database.
  * Fix an assertion failure when libgssapi_krb5 is repeatedly loaded
    and unloaded while libkrb5support remains loaded.
- Changes from 1.18.2
  * Fix a SPNEGO regression where an acceptor using the default credential
    would improperly filter mechanisms, causing a negotiation failure.
  * Fix a bug where the KDC would fail to issue tickets if the local krbtgt
    principal's first key has a single-DES enctype.
  * Add stub functions to allow old versions of OpenSSL libcrypto to link
    against libkrb5.
  * Fix a NegoEx bug where the client name and delegated credential might
    not be reported.
- Changes from 1.18.1
  * Fix a crash when qualifying short hostnames when the system has
    no primary DNS domain.
  * Fix a regression when an application imports "service@" as a GSS
    host-based name for its acceptor credential handle.
  * Fix KDC enforcement of auth indicators when they are modified by
    the KDB module.
  * Fix removal of require_auth string attributes when the LDAP KDB
    module is used.
  * Fix a compile error when building with musl libc on Linux.
  * Fix a compile error when building with gcc 4.x.
  * Change the KDC constrained delegation precedence order for consistency
    with Windows KDCs.
- Changes from 1.18
  Administrator experience:
  * Remove support for single-DES encryption types.
  * Change the replay cache format to be more efficient and robust.
    Replay cache filenames using the new format end with ".rcache2"
    by default.
  * setuid programs will automatically ignore environment variables
    that normally affect krb5 API functions, even if the caller does
    not use krb5_init_secure_context().
  * Add an "enforce_ok_as_delegate" krb5.conf relation to disable
    credential forwarding during GSSAPI authentication unless the KDC
    sets the ok-as-delegate bit in the service ticket.
  * Use the permitted_enctypes krb5.conf setting as the default value
    for default_tkt_enctypes and default_tgs_enctypes.
  Developer experience:
  * Implement krb5_cc_remove_cred() for all credential cache types.
  * Add the krb5_pac_get_client_info() API to get the client account
    name from a PAC.
  Protocol evolution:
  * Add KDC support for S4U2Self requests where the user is identified
    by X.509 certificate. (Requires support for certificate lookup from
    a third-party KDB module.)
  * Remove support for an old ("draft 9") variant of PKINIT.
  * Add support for Microsoft NegoEx. (Requires one or more third-party
    GSS modules implementing NegoEx mechanisms.)
  User experience:
  * Add support for "dns_canonicalize_hostname=fallback", causing
    host-based principal names to be tried first without DNS
    canonicalization, and again with DNS canonicalization if the
    un-canonicalized server is not found.
  * Expand single-component hostnames in host-based principal names
    when DNS canonicalization is not used, adding the system's first DNS
    search path as a suffix. Add a "qualify_shortname" krb5.conf relation
    to override this suffix or disable expansion.
  * Honor the transited-policy-checked ticket flag on application servers,
    eliminating the requirement to configure capaths on servers in some
    scenarios.
  Code quality:
  * The libkrb5 serialization code (used to export and import krb5 GSS
    security contexts) has been simplified and made type-safe.
  * The libkrb5 code for creating KRB-PRIV, KRB-SAFE, and KRB-CRED
    messages has been revised to conform to current coding practices.
  * The test suite has been modified to work with macOS System Integrity
    Protection enabled.
  * The test suite incorporates soft-pkcs11 so that PKINIT PKCS11 support
    can always be tested.
- Changes from 1.17.1
  * Fix a bug preventing "addprinc -randkey -kvno" from working in kadmin.
  * Fix a bug preventing time skew correction from working when a KCM
    credential cache is used.
- Changes from 1.17:
  Administrator experience:
  * A new Kerberos database module using the Lightning Memory-Mapped
    Database library (LMDB) has been added.  The LMDB KDB module should
    be more performant and more robust than the DB2 module, and may
    become the default module for new databases in a future release.
  * "kdb5_util dump" will no longer dump policy entries when specific
    principal names are requested.
  Developer experience:
  * The new krb5_get_etype_info() API can be used to retrieve enctype,
    salt, and string-to-key parameters from the KDC for a client
    principal.
  * The new GSS_KRB5_NT_ENTERPRISE_NAME name type allows enterprise
    principal names to be used with GSS-API functions.
  * KDC and kadmind modules which call com_err() will now write to the
    log file in a format more consistent with other log messages.
  * Programs which use large numbers of memory credential caches should
    perform better.
  Protocol evolution:
  * The SPAKE pre-authentication mechanism is now supported.  This
    mechanism protects against password dictionary attacks without
    requiring any additional infrastructure such as certificates.  SPAKE
    is enabled by default on clients, but must be manually enabled on
    the KDC for this release.
  * PKINIT freshness tokens are now supported.  Freshness tokens can
    protect against scenarios where an attacker uses temporary access to
    a smart card to generate authentication requests for the future.
  * Password change operations now prefer TCP over UDP, to avoid
    spurious error messages about replays when a response packet is
    dropped.
  * The KDC now supports cross-realm S4U2Self requests when used with a
    third-party KDB module such as Samba's.  The client code for
    cross-realm S4U2Self requests is also now more robust
    (CVE-2018-20217).
  User experience:
  * The new ktutil addent -f flag can be used to fetch salt information
    from the KDC for password-based keys.
  * The new kdestroy -p option can be used to destroy a credential cache
    within a collection by client principal name.
  * The Kerberos man page has been restored, and documents the
    environment variables that affect programs using the Kerberos
    library.
  Code quality:
  * Python test scripts now use Python 3.
  * Python test scripts now display markers in verbose output, making it
    easier to find where a failure occurred within the scripts.
  * The Windows build system has been simplified and updated to work
    with more recent versions of Visual Studio.  A large volume of
    unused Windows-specific code has been removed.  Visual Studio 2013
    or later is now required.
- Replace old $RPM_* shell vars
- Removal of SuSEfirewall2 service since SuSEfirewall2 has been replaced
  by firewalld
- Remove cruft to support distributions older than SLE 12
- Use macros where applicable
- Switch to pkgconfig style dependencies
- Use %_tmpfilesdir instead of the wrong %_libexecdir/tmpfiles.d
  notation: libexecdir is likely changing away from /usr/lib to
  /usr/libexec
- Build with full Cyrus SASL support. Negotiating SASL credentials with
  an EXTERNAL bind mechanism requires interaction. Kerberos provides its
  own interaction function that skips all interaction, thus preventing the
  mechanism from working.
- Removed patches:
  * 0007-krb5-1.12-ksu-path.patch
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch
- Renamed patches:
  * 0001-krb5-1.12-pam.patch =&gt; 0001-ksu-pam-integration.patch
  * 0003-krb5-1.12-buildconf.patch =&gt; 0003-Adjust-build-configuration.patch
  * 0008-krb5-1.12-selinux-label.patch =&gt; 0007-SELinux-integration.patch
  * 0009-krb5-1.9-debuginfo.patch =&gt; 0008-krb5-1.9-debuginfo.patch
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch =&gt;
    0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="nopower@suse.com" date="1667822400">- Fix integer overflows in PAC parsing; (CVE-2022-42898);
  (bso#15203), (bsc#1205126).
- Added patches:
  * 0010-Fix-integer-overflows-in-PAC-parsing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1670932800">- Update to 1.20.1; (bsc#1205126); (CVE-2022-42898);
  * Fix integer overflows in PAC parsing [CVE-2022-42898].
  * Fix null deref in KDC when decoding invalid NDR.
  * Fix memory leak in OTP kdcpreauth module.
  * Fix PKCS11 module path search.
- update to 1.20.0:
  * Added a "disable_pac" realm relation to suppress adding PAC authdata
    to tickets, for realms which do not need to support S4U requests.
  * Most credential cache types will use atomic replacement when a cache
    is reinitialized using kinit or refreshed from the client keytab.
  * kprop can now propagate databases with a dump size larger than 4GB,
    if both the client and server are upgraded.
  * kprop can now work over NATs that change the destination IP address,
    if the client is upgraded.
  * Updated the KDB interface.  The sign_authdata() method is replaced
    with the issue_pac() method, allowing KDB modules to add logon info
    and other buffers to the PAC issued by the KDC.
  * Host-based initiator names are better supported in the GSS krb5
    mechanism.
  * Replaced AD-SIGNEDPATH authdata with minimal PACs.
  * To avoid spurious replay errors, password change requests will not
    be attempted over UDP until the attempt over TCP fails.
  * PKINIT will sign its CMS messages with SHA-256 instead of SHA-1.
  * Updated all code using OpenSSL to be compatible with OpenSSL 3.
  * Reorganized the libk5crypto build system to allow the OpenSSL
    back-end to pull in material from the builtin back-end depending on
    the OpenSSL version.
  * Simplified the PRNG logic to always use the platform PRNG.
  * Converted the remaining Tcl tests to Python.
- update to 1.19.3 (bsc#1189929, CVE-2021-37750):
  * Fix a denial of service attack against the KDC [CVE-2021-37750].
  * Fix KDC null deref on TGS inner body null server
  * Fix conformance issue in GSSAPI tests
- Resolve "Credential cache directory /run/user/0/krb5cc does not
  exist while opening default credentials cache" by using a kernel
  keyring instead of a dir cache; (bsc#1109830);
- Added hardening to systemd services; (bsc#1181400);
- Drop 0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch,
  fixed in release 1.20.0
- Drop 0010-Fix-integer-overflows-in-PAC-parsing.patch,
  fixed in release 1.20.1</changelog>
  <changelog author="scabrero@suse.de" date="1691496000">- Ensure array count consistency in kadm5 RPC; (bsc#1214054);
  (CVE-2023-36054);
- Added patches:
  * 0009-Ensure-array-count-consistency-in-kadm5-RPC.patch</changelog>
  <changelog author="scabrero@suse.de" date="1694520000">- Avoid KDC spoofing vulnerability, enable verify_ap_req_nofail in
  krb5.conf; (jsc#PED-6213);</changelog>
  <changelog author="scabrero@suse.de" date="1701172800">- Update patch 0007-SELinux-integration.patch for SELinux 3.5</changelog>
  <changelog author="scabrero@suse.de" date="1711108800">- Fix memory leaks, add patch 0010-Fix-three-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771
  * CVE-2024-26462, bsc#1220772</changelog>
  <changelog author="scabrero@suse.de" date="1719835200">- Fix vulnerabilities in GSS message token handling, add patch
  0011-Fix-vulnerabilities-in-GSS-message-token-handling.patch
  * CVE-2024-37370, bsc#1227186
  * CVE-2024-37371, bsc#1227187</changelog>
  <changelog author="scabrero@suse.de" date="1737547200">- Add crypto-policies support; (jsc#PED-12018)
  * The default krb5.conf has been updated to include config
    snippets in the krb5.conf.d directory, where crypto-policies
    drops its.
- Allow to use KRB5KDF in FIPS mode; (jsc#PED-12018); Add patch
  0012-Allow-KRB5KDF-in-FIPS-mode.patch
  * This key derivation function is used by AES256-CTS-HMAC-SHA1-96
    and AES128-CTS-HMAC-SHA1-96 encryption types, used by Active
    directory. If these encryption types are allowed or not in
    FIPS mode is enforced now by the FIPS:AD-SUPPORT subpolicy.</changelog>
  <changelog author="scabrero@suse.de" date="1738238400">- Prevent overflow when calculating ulog block size. An authenticated
  attacker can cause kadmind to write beyond the end of the mapped
  region for the iprop log file, likely causing a process crash;
  (CVE-2025-24528); (bsc#1236619).
- Add patch 0013-Prevent-overflow-when-calculating-ulog-block-size.patch</changelog>
  <changelog author="scabrero@suse.de" date="1746446400">- Remove references to the LMDB backend in the kdc.conf manpage;
  (bsc#1242060);</changelog>
  <changelog author="nopower@suse.com" date="1756814400">- Remove des3-cbc-sha1 and arcfour-hmac-md5 from permitted
  enctypes unless new special options "allow_des3" or "allow_rc4"
  are set; (CVE-2025-3576); (bsc#1241219).
- Add patch 0015-CVE-2025-3576.patch</changelog>
</package>
<package pkgid="ec9b2d302db2d24866d622a17d1e69d6175e6fc41bedacf2f2920538ace7c5fc" name="ktls-utils" arch="src">
  <version epoch="0" ver="0.10+35.gb3f7e30" rel="150700.3.3.1"/>
  <changelog author="hare@suse.de" date="1688212800">- Add patch for older libnl versions
  + 0001-netlink-de-constify-nla_policy.patch
- Fix build error on 32-bit
  + 0001-tlshd-fix-max-config-file-size-comparison.patch
  Fri 30 Jun 2023 12:58:27 PM CEST - Hannes Reinecke &lt;hare@suse.de&gt;
- Initial package, version 0.9</changelog>
  <changelog author="hare@suse.de" date="1692187200">- Add patch to exercise handshake timeout
  * 0001-Add-tlshd_delay-configuration-option.patch
- Add patch to allow compilation on older releases
  * 0001-Check-for-gnutls_get_system_config_file.patch</changelog>
  <changelog author="hare@suse.de" date="1692187201">- Reshuffle patches to match upstream submission:
  * Remove 0001-netlink-de-constify-nla_policy
  * Add 0001-tlshd-Allow-for-compilation-with-older-libnl-librari.patch
  * Remove 0001-Check-for-gnutls_get_system_config_file.patch
  * Add 0002-tlshd-Check-for-gnutls_get_system_config_file.patch
  * Remove 0001-Add-tlshd_delay-configuration-option.patch
  * Add 0003-tlshd-add-delay-configuration-parameter.patch</changelog>
  <changelog author="mwilck@suse.com" date="1704801600">- Update to version 0.9+4.g01b3018 (jsc#PED-7559)
  * _service: move to openSUSE git repository
- Patches now in git, remove them from spec file:
  * del 0001-netlink-de-constify-nla_policy
  * del 0001-tlshd-Allow-for-compilation-with-older-libnl-librari.patch
  * del 0002-tlshd-Check-for-gnutls_get_system_config_file.patch
  * del 0003-tlshd-add-delay-configuration-parameter.patch</changelog>
  <changelog author="mwilck@suse.com" date="1705492800">- Spec file:
  * fix summary and license
  * use pkgconfig for BuildRequires
  * remove superfluous PreReq dependencies
  * use %config(noreplace) for the config file (because it may
    contain paths to key files)
  * remove BuildRoot
  * simplify build section</changelog>
  <changelog author="mwilck@suse.com" date="1708430400">- Update to upstream version 0.10:
  * All previously SUSE_specific patches included
  * tlshd: Reorganize tlshd.conf
  - get rid of [main]
  - add [debug] and move the debug-related options there
  - move the "keyrings" option to [authenticate]
  * tlshd: add 'delay' configuration parameter
  * tlshd: Add .conf option to specify trust store
  * Bug fixes and cleanups</changelog>
  <changelog author="mwilck@suse.com" date="1709640000">- Update to upstream version 0.10+9.gf28f084:
  * ktls: restrict hash functions to supported sizes (bsc#1218037)
  * tlshd: Add support for chained certs</changelog>
  <changelog author="mwilck@suse.com" date="1711022400">- Update to version 0.10+12.gc3923f7:
  * Rework priority string setting for PSK (bsc#1221437)
  * config: use 'authenticate' as a section name
  * server: add missing priority setting (gh#oracle/ktls-utils#49)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1733486400">- Update to version 0.10+33.g311d943:
  * tlshd: always link .nvme default keyring into the session (bsc#1229034)
  * tlshd: Ensure libnl-genl3 is available
  * tlshd: receive new session ticket msg after completing quic handshake
  * tlshd: use quic_config to get parameters for quic handshake
  * tlshd: clean up some unnecessary code in quic handshake
  * tlshd: improve error logging for tlshd_server_psk_cb()
  * tlshd: guard against possible overrun of tlshd_peername
  * tlshd: fix optlen passed to getsockopt()
  * tlshd: free pathname before it goes out of scope
  * tlshd: add support for quic handshake
  * tlshd: include socket ip_proto in tlshd_handshake_parms
  * tlshd: Refactor tlshd_service_socket()
  * config: supply meaningful error for non-existing pathnames
  * tlshd: Fix implicit signedness conversion
  * tlshd: Fix memory leaks</changelog>
  <changelog author="alnovak@suse.com" date="1774526400">- Update to version 0.10+35.gb3f7e30:
  * tlshd: fixup compile errors with HAVE_GNUTLS_PSK_ALLOCATE_CREDENTIALS2
  * tlshd: use gnutls_psk_allocate_{client,server}_credentials2
    (bsc#1258084)</changelog>
</package>
<package pkgid="8db383309cea7476d7e473fd43530d2fbed805d2768de21201e87917a55615ed" name="ktls-utils" arch="x86_64">
  <version epoch="0" ver="0.10+35.gb3f7e30" rel="150700.3.3.1"/>
  <changelog author="hare@suse.de" date="1688212800">- Add patch for older libnl versions
  + 0001-netlink-de-constify-nla_policy.patch
- Fix build error on 32-bit
  + 0001-tlshd-fix-max-config-file-size-comparison.patch
  Fri 30 Jun 2023 12:58:27 PM CEST - Hannes Reinecke &lt;hare@suse.de&gt;
- Initial package, version 0.9</changelog>
  <changelog author="hare@suse.de" date="1692187200">- Add patch to exercise handshake timeout
  * 0001-Add-tlshd_delay-configuration-option.patch
- Add patch to allow compilation on older releases
  * 0001-Check-for-gnutls_get_system_config_file.patch</changelog>
  <changelog author="hare@suse.de" date="1692187201">- Reshuffle patches to match upstream submission:
  * Remove 0001-netlink-de-constify-nla_policy
  * Add 0001-tlshd-Allow-for-compilation-with-older-libnl-librari.patch
  * Remove 0001-Check-for-gnutls_get_system_config_file.patch
  * Add 0002-tlshd-Check-for-gnutls_get_system_config_file.patch
  * Remove 0001-Add-tlshd_delay-configuration-option.patch
  * Add 0003-tlshd-add-delay-configuration-parameter.patch</changelog>
  <changelog author="mwilck@suse.com" date="1704801600">- Update to version 0.9+4.g01b3018 (jsc#PED-7559)
  * _service: move to openSUSE git repository
- Patches now in git, remove them from spec file:
  * del 0001-netlink-de-constify-nla_policy
  * del 0001-tlshd-Allow-for-compilation-with-older-libnl-librari.patch
  * del 0002-tlshd-Check-for-gnutls_get_system_config_file.patch
  * del 0003-tlshd-add-delay-configuration-parameter.patch</changelog>
  <changelog author="mwilck@suse.com" date="1705492800">- Spec file:
  * fix summary and license
  * use pkgconfig for BuildRequires
  * remove superfluous PreReq dependencies
  * use %config(noreplace) for the config file (because it may
    contain paths to key files)
  * remove BuildRoot
  * simplify build section</changelog>
  <changelog author="mwilck@suse.com" date="1708430400">- Update to upstream version 0.10:
  * All previously SUSE_specific patches included
  * tlshd: Reorganize tlshd.conf
  - get rid of [main]
  - add [debug] and move the debug-related options there
  - move the "keyrings" option to [authenticate]
  * tlshd: add 'delay' configuration parameter
  * tlshd: Add .conf option to specify trust store
  * Bug fixes and cleanups</changelog>
  <changelog author="mwilck@suse.com" date="1709640000">- Update to upstream version 0.10+9.gf28f084:
  * ktls: restrict hash functions to supported sizes (bsc#1218037)
  * tlshd: Add support for chained certs</changelog>
  <changelog author="mwilck@suse.com" date="1711022400">- Update to version 0.10+12.gc3923f7:
  * Rework priority string setting for PSK (bsc#1221437)
  * config: use 'authenticate' as a section name
  * server: add missing priority setting (gh#oracle/ktls-utils#49)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1733486400">- Update to version 0.10+33.g311d943:
  * tlshd: always link .nvme default keyring into the session (bsc#1229034)
  * tlshd: Ensure libnl-genl3 is available
  * tlshd: receive new session ticket msg after completing quic handshake
  * tlshd: use quic_config to get parameters for quic handshake
  * tlshd: clean up some unnecessary code in quic handshake
  * tlshd: improve error logging for tlshd_server_psk_cb()
  * tlshd: guard against possible overrun of tlshd_peername
  * tlshd: fix optlen passed to getsockopt()
  * tlshd: free pathname before it goes out of scope
  * tlshd: add support for quic handshake
  * tlshd: include socket ip_proto in tlshd_handshake_parms
  * tlshd: Refactor tlshd_service_socket()
  * config: supply meaningful error for non-existing pathnames
  * tlshd: Fix implicit signedness conversion
  * tlshd: Fix memory leaks</changelog>
  <changelog author="alnovak@suse.com" date="1774526400">- Update to version 0.10+35.gb3f7e30:
  * tlshd: fixup compile errors with HAVE_GNUTLS_PSK_ALLOCATE_CREDENTIALS2
  * tlshd: use gnutls_psk_allocate_{client,server}_credentials2
    (bsc#1258084)</changelog>
</package>
<package pkgid="879c78920ea092e86368cb6d79d07f7c3b28c9f19d3001cc498f8e4699c1bffa" name="kyotocabinet" arch="src">
  <version epoch="0" ver="1.2.80" rel="150000.4.6.1"/>
  <changelog author="prusnak@opensuse.org" date="1299153600">- created package (version 1.2.47)</changelog>
  <changelog author="prusnak@opensuse.org" date="1300190400">- updated to 1.2.50</changelog>
  <changelog author="unnamedrambler@gmail.com" date="1304424000">- updated to 1.2.52</changelog>
  <changelog author="jengelh@medozas.de" date="1328270400">- Remove redundant tags/sections per specfile guideline suggestions
- Add autotools BuildRequires for factory/12.2</changelog>
  <changelog author="jengelh@inai.de" date="1340280000">- Make kyotocabinet installation work on SLE_11</changelog>
  <changelog author="i@marguerite.su" date="1342958400">- update version 1.2.76
  * kcthread.cc (CondVar::wait): a bug on Win32 was fixed.
  * kcdbext.h (IndexDB::set, IndexDB::replace): a bug of updating existing records was fixed.
  * kcdb.h (DB::check): new function.</changelog>
  <changelog author="cfarrell@suse.com" date="1343736000">- license update: SUSE-GPL-3.0-with-FLOSS-exception
  Package allows exceptions for linking with components under certain
  licenses (similar to MySQL)</changelog>
  <changelog author="jengelh@inai.de" date="1344686400">- Replace %makeinstall by make install; the former seldomly works
- kyoto requires at least i586 an arch; force it on RH6 (which
  defaults to i386)</changelog>
  <changelog author="dvaleev@suse.com" date="1356609600">- fix up configure test to handle lack of 8 byte atomics correctly
  (configure-8-byte-atomics.patch)</changelog>
  <changelog author="jengelh@inai.de" date="1357300800">- Avoid explicit requires on library packages</changelog>
  <changelog author="martin.liska@suse.com" date="1464177600">- Add gcc6-fix-errors.patch to remove errors seen by GCC6.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1491307200">- kyotocabinet-fix-debuginfo.patch: Fix debuginfo generation
- gcc6-fix-errors.patch: return NULL instead, make GCC7 happy</changelog>
  <changelog author="werner@suse.de" date="1494331200">- boo#1037914: Do not optimize for native cpu of the build system!</changelog>
  <changelog author="dimstar@opensuse.org" date="1514980800">- Add baselibs.conf: Produce libkyotocabinet16-32bit, dependency to
  libpinyin13-32bit.</changelog>
  <changelog author="mpluskal@suse.com" date="1584014400">- Update to version 1.2.77:
  * kcthread.cc (CondVar::wait): a bug on Win32 was fixed.
  * kcdbext.h (IndexDB::set, IndexDB::replace): a bug of updating
    existing records was fixed.
  * kcdb.h (DB::check): new function.
- Drop no longer needed gcc6-fix-errors.patch
- Modernise spec file (bsc#1252197)</changelog>
  <changelog author="werner@suse.de" date="1619006400">- Add yet an other patch kyotocabinet-pie.patch
  * link all executables as pie (bsc#1185033)</changelog>
  <changelog author="fcrozat@suse.com" date="1685448000">- Update url to new website.</changelog>
  <changelog author="dmueller@suse.com" date="1700913600">- update to 1.2.80:
  - configure.in supports strict C99 rules.
  - Fixed errors of kcdirtest on BtrFS.
  - Fixed build warnings.</changelog>
  <changelog author="werner@suse.de" date="1760616000">- Add bug number bsc#1252197</changelog>
</package>
<package pkgid="464b52b1b516259a609e4789723f13e8f1ebbcb347885a7362998d31acf97854" name="lcms2" arch="src">
  <version epoch="0" ver="2.15" rel="150600.3.3.2"/>
  <changelog author="mrdocs@opensuse.org" date="1372852800">- Update to version 2.5
  * Maintenance update
  + Focused on incorrect path and error handling.
    It also updates the black point compensation algorithm
    to match the ICC including the new black point compensation algorithm
    actually being standarized by TC130, ICC and ISO.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1389009600">- Correct lcms-endian.patch to rely on autoconf only, no
  extra arch specific preprocessor hackery.</changelog>
  <changelog author="adrian@suse.de" date="1395057600">- update to version 2.6
  * Fixed a double free in recovering from a previous error in default intent handler.
  * Fixed some indexing out of bounds in floating point interpolation
  * Fixed a bug in PCS/Colorspace order when reading V2 Lab devicelinks
  * Added a way to retrieve matrix shaper always, no matter LUT is present
  * Changed endianess detection for PowerPC
  * Fixed memory leaks on error handling
  * Big revamp on Contexts, from Artifex
  * New locking plug-in, from Artifex
  * Added directories for tiff, jpeg in configure script
  * Fix for delete tag memory corruption
  * Added pthread dependency. From now lcms supports multithreading</changelog>
  <changelog author="mailaender@opensuse.org" date="1400241600">- Fixed missing dependency pthread</changelog>
  <changelog author="aloisio@gmx.com" date="1435320000">- Update to version 2.7
  * improved multi-threading
  * added contexts and a new locking plug-in type
  * bugfixes and other minor features
- Dropped lcms-endian.patch that was fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="plinnell@opensuse.org" date="1471348800">- Update to 2.8
  * Fixed many typos in comments, thanks to Stefan Weil for doing that.
  * Fixed localization bug, added a new test case crayons.icc thnaks to Richard Hughes for providing the profile.
  * Fixed a bug in optimizer that made some formats (i.e, bits planar) unavailable
  * Fixed misalignment problems on Alpha. The compiler does not align strings, and accessing begin of string as a uint16 makes code to fail.
  * Added some extra checks to the tools and examples.
  * Fix a bug that prevented to read luminance tag
  * BIG amount of functionality contributed/Sponsored  by Alien Skin Software: TransformStride, copyAlpha, performance plug-ins. Fixes some warnings as well.
  * added an extra _ to _stdcall to make it more portable
  * Fixed a bug in transicc for named color profiles
  * Fixed several compiler warnings
  * Added support for Visual Studio 2015
  * Fixed for XCODE project</changelog>
  <changelog author="plinnell@opensuse.org" date="1485259200">- Added 0001-Added-an-extra-check-to-MLU-bounds.patch
  * fixes https://bugzilla.suse.com/show_bug.cgi?id=1021364</changelog>
  <changelog author="plinnell@opensuse.org" date="1511784000">- Update to 2.9
- Drop 0001-Added-an-extra-check-to-MLU-bounds.patch, it is now
  in the upstream code
  * Bugfix release
  + Several fixes related with security, and therefore not detailed here.
  + C++ compiles now without warnings
  + Added OSX and clang in travis
  + Added a travis-ci test matrix for many compilers and OS.
    Thanks to Thomas Weber (debian) for this great improvement.
  + testbed can now work with dynamic versions of library
  + Fixed wrong planar formatters regarding linestride interpretation</changelog>
  <changelog author="sbrabec@suse.com" date="1538568000">- Add check on CGATS memory allocation (bsc1108813, CVE-2018-16435,
  lcms2-cgats-memory-allocation.patch).</changelog>
  <changelog author="elimat@opensuse.org" date="1596628800">- Update to 2.11
  * Fixed __cpuid() on fast float plugin to allow gnu gcc
  * Fixed copy alpha bounds check
  * Fixed data race condition on contexts pool
  * Fixed LUT16 write matrix on multichannel V2 profiles
- Changes in 2.10
  * Added a compilation toggle to remove "register" keyword in API.
  * Previously commercial, fast_float plug-in is now released as open source
    under GPL3 license.
  * MD5 functions are now accesible through plug-in API.
  * Added support for Visual Studio 2019
  * Bug fixing.
- Drop lcms2-cgats-memory-allocation.patch, its now in upstream code
- Refresh patches
- Run spec-cleaner</changelog>
  <changelog author="dmueller@suse.com" date="1619265600">- update to 2.12:
  * Added build system for fast-float plugin (see plugin documentation)
  * Added new build-in sigmoidal tone curve
  * Added XCode 12 project
  * Added support for multichannel input up to 15 channels
  * Fix LUT8 write matrix
  * Fix version mess on 10/11
  * Fix tools &amp; samples xgetopt
  * Fix warnings on different function pointers
  * Fix matlab MEX compilation
  * plugin: cleanup and better SSE detection
  * plugin: add lab to any on float
  * plugin: it can now be compiled as C++
  * recover PDF documentation, but try to keep it under a resonable size.
  * Prevent a rare but possible out-of-bounds read in postscript generator
  * Fix some compiler warnings
  * Add named color profile building sample to testbed</changelog>
  <changelog author="info@paolostivanin.com" date="1643630400">- Update to 2.13:
  * Added support for premultiplied alpha
  * tifficc can now handle alpha channels, both unassociated and premultiplied
  * CGATS parser can now deal with very long strings
  * Added Projects for Visual Studio 2020
  * Added ARM64 target to visual studio 2019 (thanks to gaborkertesz-linaro)
  * Added thread safe code to get time
  * Added automatic linear space detection
  * Added cmsGetStageContextID function
  * Added cmsDetectRGBProfileGamma function
  * configure now accepts --without-fastfloat to turn plugin off
  * Checked to work on STM32 Cortex-A, Cortex-M families
  * Bug &amp; typos fixing (thanks to many reporters and contributors)
- Rebase lcms2-visibility.patch</changelog>
  <changelog author="dmueller@suse.com" date="1644840000">- update to 2.13.1:
  * Fix a bug on grayscale that made printing gray on white paper
  * Added support for premultiplied alpha
  * tifficc can now handle alpha channels, both unassociated and premultiplied
  * Better documentation
  * CGATS parser can now deal with very long strings
  * Added Projects for Visual Studio 2020
  * Travis CI discontinued, GitHub actions used instead
  * Added a very preliminary meson build script (thanks to xclaesse)
  * Added ARM64 target to visual studio 2019 (thanks to gaborkertesz-linaro)
  * Added thread safe code to get time
  * Added automatic linear space detection
  * Added cmsGetStageContextID function
  * Added cmsDetectRGBProfileGamma
  * configure now accepts --without-fastfloat to turn plugin off
  * autogen.sh has now a --distclean toggle to get rid of all autotools generated files
  * Checked to work on STM32 Cortex-A, Cortex-M families
  * Bug &amp; typos fixing (thanks to many reporters and contributors)
  * Fixed mem leaks and out-of bounds accesses as reported by fuzzer</changelog>
  <changelog author="christophe@krop.fr" date="1667908800">- Update to 2.14:
  * lcms2 now implements ICC specification 4.4
  * New multi-threaded plug-in
  * Several fixes to keep fuzzers happy
  * Removed check on DLL when CMS_NO_REGISTER_KEYWORD is used
  * Added more validation against broken profiles
  * Added more help to several tools
  * Revised documentation</changelog>
  <changelog author="davejplater@gmail.com" date="1668168000">- Added reverse-0001-fix-memory-leaks-on-testbed.patch to fix
  colord's i586 build failure</changelog>
  <changelog author="davejplater@gmail.com" date="1668600000">- Removed reverse-0001-fix-memory-leaks-on-testbed.patch and added
  0001-fix-memory-corruption-when-unregistering-plugins.patch as
  final fix for https://github.com/hughsie/colord/issues/145</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) for alternative providers support</changelog>
  <changelog author="dmueller@suse.com" date="1681560000">- update to 2.15:
  * New MESON build system, many thanks to amispark and Lovell
    Fuller for bringing this.
  * Fixed a bug that caused memory corruption on colord
  * cmsReadRawTag can read portions  of tags again. Removing this
    caused colord to segfault when dumping profiles
  * Added more checks based of fuzzer discoveries.
  * MSYS2 can now compile lcms2
  * Checked on Apple Silicon M1 and M2
  * Fixed a bug of fastfloat plug-in that affected Krita CMYK
    color selector
- drop 0001-fix-memory-corruption-when-unregistering-plugins.patch (upstream)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1760961600">- Enable threads support (bsc#1247985)
  * Drop lcms2-visibility.patch as it was causing linker errors when
    enabling threads</changelog>
</package>
<package pkgid="41e6b3ac21dc446e5897acbb0a0b04dc9fe9633442887b30ac370a3bb3b1a1f6" name="ldb-tools" arch="x86_64">
  <version epoch="0" ver="4.21.10+git.424.0b233794b52" rel="150700.3.14.10"/>
  <changelog author="nopower@suse.com" date="1704801600">- Update to 4.19.4
  * net changesecretpw cannot set the machine account password if
    secrets.tdb is empty; (bso#13577).
  * For generating doc, take, if defined, env XML_CATALOG_FILES;
    (bso#15540).
  * Trivial C typo in nsswitch/winbind_nss_netbsd.c; (bso#15541).
  * vfs_linux_xfs is incorrectly named; (bso#15542).
  * systemd stumbled over copyright-message at smbd startup;
    (bso#15377).
  * Following intermediate abolute share-local symlinks is
    broken; (bso#15505).
  * ctdb RELEASE_IP causes a crash in release_ip if a connection
    to a non-public address disconnects first; (bso#15523).
  * shadow_copy2 broken when current fileset's directories are
    removed; (bso#15544).
  * smbd does not detect ctdb public ipv6 addresses for
    multichannel exclusion; (bso#15534).
  * 'force user = localunixuser' doesn't work if 'allow trusted
    domains = no' is set; (bso#15469).
  * smbget debug logging doesn't work; (bso#15525).
  * smget: username in the smburl and interactive password entry
    doesn't work; (bso#15532).
  * smbget auth function doesn't set values for password prompt
    correctly; (bso#15538).
  * Unable to copy and write files from clients to Ceph cluster
    via SMB Linux gateway with Ceph VFS module; (bso#15440).
  * Multichannel refresh network information; (bso#15547).</changelog>
  <changelog author="nopower@suse.com" date="1704888000">- Remove -x from bash shebang update-apparmor-samba-profile;
  (bsc#1218431).</changelog>
  <changelog author="nopower@suse.com" date="1708430400">- Update to 4.19.5
  * Windows 2016 fails to restore previous version of a file from
    a shadow_copy2 snapshot; (bso#13688).
  * Symlinks on AIX are broken in 4.19 (and a few version before
    that); (bso#15549).
  * Fake directory create times has no effect; (bso#12421).
  * ctime mixed up with mtime by smbd; (bso#15550).
  * samba-gpupdate --rsop fails if machine is not in a site;
    (bso#15548).
  * gpupdate: The root cert import when NDES is not available is
    broken; (bso#15557).
  * samba-gpupdate should print a useful message if cepces-submit
    can't be found; (bso#15552).
  * samba-gpupdate logging doesn't work; (bso#15558).
  * smbpasswd reset permissions only if not 0600; (bso#15555).</changelog>
  <changelog author="nopower@suse.com" date="1718884800">- Update to 4.19.7
  * ldb qsort might r/w out of bounds with an intransitive
    compare function (ldb 2.8.1 is already released);
    (bso#15569).
  * Many qsort() comparison functions are non-transitive, which
    can lead to out-of-bounds access in some circumstances (ldb
    2.8.1 is already released); (bso#15625).
  * Need to change gitlab-ci.yml tags in all branches to avoid CI
    bill; (bso#15638).
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * Anonymous smb3 signing/encryption should be allowed (similar
    to Windows Server 2022); (bso#15412).
  * Panic in dreplsrv_op_pull_source_apply_changes_trigger;
    (bso#15573).
  * winbindd, net ads join and other things don't work on an ipv6
    only host; (bso#15642).
  * Smbcacls incorrectly propagates inheritance with Inherit-Only
    flag; (bso#15636).
  * http library doesn't support  'chunked transfer encoding';
    (bso#15611).
- Update to 4.19.6
  * fd_handle_destructor() panics within an smbd_smb2_close() if
    vfs_stat_fsp() fails in fd_close(); (bso#15527).
  * samba-gpupdate: Correctly implement site support;
    (bso#15588).
  * libgpo: Segfault in python bindings; (bso#15599).
  * Packet marshalling push support missing for
    CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and
    CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580).</changelog>
  <changelog author="scabrero@suse.de" date="1722513600">- Fix a crash when joining offline and 'kerberos method' includes
  keytab; (bsc#1228732);
- Fix reading the password from STDIN or environment vars if it
  was already given in the command line; (bsc#1228732);</changelog>
  <changelog author="ddiss@suse.com" date="1725537600">- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated;
  (bso#15699); (bsc#1229684).
- Update to 4.19.8
  * Invalid client warning about command line passwords;
    (bso#15671);
  * Version string is truncated in manpages; (bso#15672);
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673);
  * cmdline_burn does not always burn secrets; (bso#15674);
  * Samba doesn't parse SDDL found in defaultSecurityDescriptor
    in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685);
  * We have added new options --vendor-name and --vendor-patch-
    revision arguments to ./configure to allow distributions and
    packagers to put their name in the Samba version string so that
    when debugging Samba the source of the binary is obvious;
    (bso#15654);
  * When claims enabled with heimdal kerberos, unable to log on to a
    Windows computer when user account need to change their own
    password; (bso#15655);
  * Fix clock skew error message and memory cache clock skew
    recovery; (bso#15676);
  * CTDB RADOS mutex helper misses namespace support; (bso#15665);
  * The images don't build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660);
  * Fix unnecessary delays in CTDB while processing requests under
    high load; (bso#15678);
  * Dynamic DNS updates with the internal DNS are not working;
    (bso#13019);
  * s4:nbt_server: does not provide unexpected handling, so winbindd
    can't use nmb requests instead cldap; (bso#15620);
  * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664);
  * "client use kerberos" and --use-kerberos is ignored for the machine
    account; (bso#15666);
  * Regression DFS not working with widelinks = true; (bso#15435);
  * ntlm_auth make logs more consistent with length check; (bso#15677);</changelog>
  <changelog author="nopower@suse.com" date="1728475200">-  Adjust spec to split out rpcd_* binaries into a separate
  sub package; (bsc#1231414).</changelog>
  <changelog author="nopower@suse.com" date="1728993600">- Update to 4.21.1
  * DH reconnect error handling can lead to stale sharemode
    entries; (bso#15624).
  * "inherit permissions = yes" triggers assert() in vfs_default
    when creating a stream; (bso#15695).
  * Samba 4.21.0 broke FreeIPA domain member integration;
    (bso#15715).
  * Missing conversion for msDS-UserTGTLifetime, msDS-
    ComputerTGTLifetime and msDS-ServiceTGTLifetime on "samba-
    tool domain auth policy modify"; (bso#15692).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * Durable handle is not granted when a previous OPEN exists
    with NoOplock; (bso#15649).
  * Durable handle is granted but reconnect fails; (bso#15651).
  * Disconnected durable handles with RH lease should not be
    purged by a new non conflicting open; (bso#15708).
  * net ads testjoin and other commands use the wrong secrets.tdb
    in a cluster; (bso#15714).
  * 4.21 using --with-system-mitkrb5 requires MIT krb5 1.16 as
    rfc 8009 etypes are used; (bso#15726).
  * VFS_OPEN_HOW_WITH_BACKUP_INTENT breaks shadow_copy2;
    (bso#15730).
  * Samba 4.20.0 DLZ module crashes BIND on startup; (bso#15643).
  * Cannot build libldb lmdb backend on a build without AD DC;
    (bso#15721).
  * Consistent log level for sighup handler; (bso#15706).
- Package ceph_new VFS module.
- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated;
  (bso#15699); (bsc#1229684).
- Update to 4.21.0
  * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when
    truncated; (bso#15699).
  * Bad variable definition for ParseTuple causing test failure
    for Smb3UnixTests.test_create_context_reparse; (bso#15702).
  * Add new vfs_ceph module (based on low level API);
    (bso#15686).
  * samba-tool can not load the default configuration file;
    (bso#15698).
  * Crash when readlinkat fails; (bso#15700).
  * Can't add/delete special keys to keytab for nfs, cifs, http
    etc; (bso#15689).
  * Compound SMB2 requests don't return
    NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses
    MacOSX clients; (bso#15696).
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673).
  * ldb_version.h is missing from ldb public library;
    (bso#15690).
  * Can not add/delete special keys to keytab for nfs, cifs, http
    etc; (bso#15689).
  * undefined reference to winbind_lookup_name_ex; (bso#15687).
  * per user veto and hide file syntax is to complex;
    (bso#15688).
- Update to 4.20.4
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673).
- Update to 4.20.3
  * Running samba-bgqd a a standalone systemd service does not
    work; (bso#15683).
  * When claims enabled with heimdal kerberos, unable to log on
    to a Windows computer when user account need to change their
    own password; (bso#15655).
  * Invalid client warning about command line passwords;
    (bso#15671).
  * Version string is truncated in manpages; (bso#15672).
  * cmdline_burn does not always burn secrets; (bso#15674).
  * Samba does not parse SDDL found in defaultSecurityDescriptor
    in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685).
  * The images don\'t build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660).
  * Fix clock skew error message and memory cache clock skew
    recovery; (bso#15676).
  * Heimdal ignores _gsskrb5_decapsulate errors in
    init_sec_context/repl_mutual; (bso#15603).
  * s4:ldap_server: does not support tls channel bindings for
    sasl binds; (bso#15621).
  * CTDB socket output queues may suffer unbounded delays under
    some special conditions; (bso#15678).
- Update samba-tool package to require python3-Markdown also in
  the Heimdal ADDC build
- Fix named crash when using samba's DLZ plugin; (bsc#1224003);
  (bso#15643);
- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]
- Update to 4.20.2
  * vfs_widelinks with DFS shares breaks case insensitivity;
    (bso#15662); (bsc#1213607).
  * Samba build is not reproducible; (bso#13213).
  * ldb qsort might r/w out of bounds with an intransitive
    compare function; (bso#15569).
  * Many qsort() comparison functions are non-transitive, which
    can lead to out-of-bounds access in some circumstances;
    (bso#15625).
  * Need to change gitlab-ci.yml tags in all branches to avoid CI
    bill; (bso#15638).
  * We have added new options --vendor-name and --vendor-patch-
    revision arguments to ./configure to allow distributions and
    packagers to put their name in the Samba version string so
    that when debugging Samba the source of the binary is
    obvious; (bso#15654).
  * CTDB RADOS mutex helper misses namespace support;
    (bso#15665).
  * Dynamic DNS updates with the internal DNS are not working;
    (bso#13019).
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * Anonymous smb3 signing/encryption should be allowed (similar
    to Windows Server 2022); (bso#15412).
  * Panic in dreplsrv_op_pull_source_apply_changes_trigger;
    (bso#15573).
  * s4:nbt_server: does not provide unexpected handling, so
    winbindd can't use nmb requests instead cldap; (bso#15620).
  * winbindd, net ads join and other things don't work on an ipv6
    only host; (bso#15642).
  * Segmentation fault when deleting files in vfs_recycle;
    (bso#15659).
  * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664).
  * "client use kerberos" and --use-kerberos is ignored for the
    machine account; (bso#15666).
  * Regression DFS not working with widelinks = true;
    (bso#15435).
  * samba-gpupdate - Invalid NtVer in netlogon_samlogon_response;
    (bso#15633).
  * idmap_ad creates an incorrect local krb5.conf in case of
    trusted domain lookups; (bso#15653).
  * The images don't build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660).
- Fix non deterministic builds; (bsc#1225754); (bso#13213);
- Update to 4.20.1
  * dns update debug message is too noisy; (bso#15630);
  * Do not fail PAC validation for RFC8009 checksums types; (bso#15635);
  * Improve performance of lookup_groupmem() in idmap_ad; (bso#15605);
  * Smbcacls incorrectly propagates inheritance with Inherit-Only flag; (bso#15636);
  * http library doesn't support 'chunked transfer encoding'; (bso#15611);
  * Provide a systemd service file for the background queue daemon; (bso#15600);
- Update to 4.20.0
  New features:
  * samba-tool user getpassword / syncpasswords ;rounds= change
  * Group Managed service account client-side features
  * New Windows Search Protocol Client
  * Allow 'smbcacls' to save/restore DACLs to file
  * Samba-tool extensions for AD Claims, Authentication Policies and Silos
  * AD DC support for Authentication Silos and Authentication Policies
  * Conditional ACEs and Resource Attribute ACEs
  * Service Witness Protocol [MS-SWN]
  Removed features:
  * Get locally logged on users from utmp
  Fixed bugs:
  * Avoid null-dereference with bad claims; (bso#15606);
  * ndr_pull_security_ace can leave resource attribute ACE coda
    claim struct undefined; (bso#15613);
  * fd_handle_destructor() panics within an smbd_smb2_close() if
    vfs_stat_fsp() fails in fd_close(); (bso#15527);
  * set_nt_acl sometimes fails with NT_STATUS_INVALID_PARAMETER -
    openat() EACCES; (bso#15583);
  * libgpo: Segfault in python bindings; (bso#15599);
  * Samba AD is missing some authentication policy tests;
    (bso#15607);
  * samba-gpupdate: Correctly implement site support; (bso#15588);
  * Remove unsupported "Final" keyword missing from Python 3.6;
    (bso#15575);
  * Additional witness backports for 4.20.0; (bso#15577);
  * Error output with wspsearch; (bso#15579);
  * Packet marshalling push support missing for
    CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and
    CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580);
  * Performance regression for NDR parsing of security
    descriptors; (bso#15574);
  * Build and install man page for wspsearch client utility;
    (bso#15565);
- Update to 4.19.9
  * libldb: performance issue with indexes (ldb 2.8.2 is already
    released); (bso#15590).
  * DH reconnect error handling can lead to stale sharemode
    entries; (bso#15624).
  * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when
    truncated; (bso#15699).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * Compound SMB2 requests don't return
    NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses
    MacOSX clients; (bso#15696).
  * Crash when readlinkat fails; (bso#15700).</changelog>
  <changelog author="nopower@suse.com" date="1729080000">-  Adjust spec to split out rpcd_* binaries into a separate
  sub package; (bsc#1231414).</changelog>
  <changelog author="nopower@suse.com" date="1730376000">- Add placeholder changelog for sle15-sp7; (jsc#PED-11210).</changelog>
  <changelog author="nopower@suse.com" date="1732536000">- Update to 4.21.2
  * smbd fails to correctly check sharemode against OVERWRITE
    dispositions; (bso#15732).
  * Panic in close_directory; (bso#15754).
  * winexe no longer works with samba 4.21; (bso#15752).
  * protocol error - Unclear debug message "pad length mismatch"
    for invalid bind packet; (bso#14356).
  * NetrGetLogonCapabilities QueryLevel 2 needs to be
    implemented; (bso#15425).
  * gss_accept_sec_context() from Heimdal does not imply
    GSS_C_MUTUAL_FLAG with GSS_C_DCE_STYLE; (bso#15740).
  * winbindd should call process_set_title() for locator child;
    (bso#15749).
  * Update CTDB to track all TCP connections to public IP
    addresses; (bso#15320).</changelog>
  <changelog author="nopower@suse.com" date="1733486400">- Update shipped /etc/samba/smb.conf to point to smb.conf
  man page;(bsc#1233880).</changelog>
  <changelog author="nopower@suse.com" date="1736251200">- Update to 4.21.3
  * More possible replication loops against Azure AD;
    (bso#15701).
  * Compound rename from Mac clients can fail with
    NT_STATUS_INTERNAL_ERROR if the file has a lease;
    (bso#15697).
  * vfs crossrename seems not work correctly; (bso#15724).
  * After 'machine password timeout' /etc/krb5.keytab is not
    updated; (bso#6750).
  * Memory leak wbcCtxLookupSid; (bso#15771).
  * Fix heap-user-after-free with association groups;
    (bso#15765).
  * Segfault in vfs_btrfs; (bso#15758).
  * Avoid event failure race when disabling an event script;
    (bso#15755).</changelog>
  <changelog author="nopower@suse.com" date="1739966400">- Update to 4.21.4
  * Increasing slowness of sharesec performance with high number
    of registry shares; (bso#15780).
  * winbindd shows memleak in kerberos_decode_pac; (bso#15782).
  * Creation of GPOs applicable to more than one group is
    impossible with Samba 4.20.0 and later; (bso#15738).
  * Replace `crypt` module in
    python/samba/netcmd/user/readpasswords/common.py;
    (bso#15756).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * Spotlight search results don't show file size and creation
    date; (bso#15796).
  * General improvements for vfs_ceph_new module; (bso#15703).
  * net offlinejoin not working correctly; (bso#15777).
  * net ads create/join/winbind producing unix dysfunctional
    keytabs; (bso#15759).
  * Windows Explorer crashes on S-1-22-* Unix-SIDs when accessing
    security tab; (bso#14213).
  * The values from hresult_errstr_const and hresult_errstr are
    reversed in 4.20 and 4.21; (bso#15769).
  * Kerberos referral tickets are generated for principals in our
    domain if we have a trust to a top level domain; (bso#15778).
  * NETLOGON_NTLMV2_ENABLED is missing in the SamLogon*
    user_flags field; (bso#15783).
  * Regression: stack-use-after-return in crypt_as_best_we_can();
    (bso#15784).
  * libreplace:readline: gcc 15 complains about incompatible
    pointer types; (bso#15788).</changelog>
  <changelog author="nopower@suse.com" date="1743595200">- Update to 4.21.5
  * ldb index cache is too small on known large transactions
    (schemaupgrade, provision); (bso#15795).
  * Enable support for cephfs case insensitive behavior;
    (bso#15822).
  * Subnet based interfaces definition not listening on all
    covered IP addresses; (bso#15823).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727); (bsc#1238063).
  * Remove of file or directory not possible with vfs_acl_tdb;
    (bso#15791).
  * Unable to connect to CephFS subvolume shares with
    vfs_shadow_copy2; (bso#15797).
  * Add async io API from libcephfs to ceph_new VFS module;
    (bso#15810).
  * vfs_ceph_new module does not work with other modules for
    snapshot management; (bso#15818).
  * vfs_ceph_new: Add path based fallback for SMB_VFS_FCHOWN,
    SMB_VFS_FCHMOD and SMB_VFS_FNTIMES; (bso#15834).
  * Incorrect FSF address in ctdb pcp scripts; (bso#15820).
  * "samba-tool domain backup offline" hangs; (bso#15804).</changelog>
  <changelog author="nopower@suse.com" date="1748952000">- Update to 4.21.6
  * Running "gpo manage motd set" twice fails with backtrace;
    (bso#15774).
  * samba-tool gpo backup creates entity backups it can't read;
    (bso#15829).
  * gp_cert_auto_enroll_ext.py has problem unpacking GUIDs with
    prepended 0's; (bso#15839).
  * CVE-2025-0620 [SECURITY] smbd doesn't pick up group
    membership changes when re-authenticating an expired SMB
    session; (bso#15707), (bsc#1244136).
  * Deadlock between two smbd processes; (bso#15767).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727).
  * Wide link issue in samba 4.22; (bso#15841).
  * dcerpcd not able to bind to listening port; (bso#15851).
  * vfs_ceph_snapshots fails to list snapshots for entries at any
    level beyond share root; (bso#15819).
  * CTDB does not put nodes running NFS into grace on graceful
    shutdown; (bso#15858).</changelog>
  <changelog author="scabrero@suse.de" date="1751976000">- Update to 4.21.7
  * Windows security hardening locks out schannel'ed netlogon dc
    calls like netr_DsRGetDCName; (bsc#1246431); (bso#15876);
  * Trust domains are not created; (bso#15680);
  * Startup messages of rpc deamons fills /var/log/messages;
    (bso#15869);</changelog>
  <changelog author="nopower@suse.com" date="1757419200">- - Update to 4.21.8
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * getpwuid does not shift to new DC when current DC is down;
    (bso#15844).
  * Windows security hardening locks out schannel'ed netlogon dc
    calls like netr_DsRGetDCName; (bso#15876).
  * kinit command is failing with Missing cache Error;
    (bso#15840).
  * Figuring out the DC name from IP address fails and breaks
    fork_domain_child(); (bso#15891).
  * Delayed leader broadcast can block ctdb forever; (bso#15892).
  * 'net ads group' failed to list domain groups; (bso#15900).
  * Apparently there is a conflict between shadow_copy2 module
    and virusfilter (action quarantine); (bso#15663).
  * Fix handling of empty GPO link; (bso#15877).
  * SMB ACL inheritance doesn't work for files created;
    (bso#15880).</changelog>
  <changelog author="nopower@suse.com" date="1758628800">- CVE-2025-9640: fix vfs_streams_xattr uninitialized memory write;
  (bsc#1251279);(bso#15885).
- CVE-2025-10230: fix command Injection in WINS Server Hook Script;
  (bsc#1251280);(bso#15903).</changelog>
  <changelog author="nopower@suse.com" date="1763553600">- Update to 4.21.10
  * Crash in ctdbd on failed updateip; (bso#15935).
  * samba-4.21 fails to join AD when multiple DCs are returned;
    (bso#15905).
  * vfs_ceph_new should not use ceph_ll_nonblocking_readv_writev
    for fsync_send; (bso#15919).
  * CTDB_SOCKET can be used even when CTDB_TEST_MODE is not set;
    (bso#15921).
- Update to 4.21.9
  * CVE-2025-10230; (bso#15903); (bsc#1251279).
  * CVE-2025-9640; (bso#15885); (bsc#1251280).</changelog>
</package>
<package pkgid="9cfca3e3473df20a1d3cfc1c9ba55c27b6d9127ccbc93a5b94770c108c819d5b" name="ldb-tools" arch="x86_64">
  <version epoch="0" ver="4.21.10+git.449.dcced69e1b5" rel="150700.3.19.1"/>
  <changelog author="nopower@suse.com" date="1718884800">- Update to 4.19.7
  * ldb qsort might r/w out of bounds with an intransitive
    compare function (ldb 2.8.1 is already released);
    (bso#15569).
  * Many qsort() comparison functions are non-transitive, which
    can lead to out-of-bounds access in some circumstances (ldb
    2.8.1 is already released); (bso#15625).
  * Need to change gitlab-ci.yml tags in all branches to avoid CI
    bill; (bso#15638).
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * Anonymous smb3 signing/encryption should be allowed (similar
    to Windows Server 2022); (bso#15412).
  * Panic in dreplsrv_op_pull_source_apply_changes_trigger;
    (bso#15573).
  * winbindd, net ads join and other things don't work on an ipv6
    only host; (bso#15642).
  * Smbcacls incorrectly propagates inheritance with Inherit-Only
    flag; (bso#15636).
  * http library doesn't support  'chunked transfer encoding';
    (bso#15611).
- Update to 4.19.6
  * fd_handle_destructor() panics within an smbd_smb2_close() if
    vfs_stat_fsp() fails in fd_close(); (bso#15527).
  * samba-gpupdate: Correctly implement site support;
    (bso#15588).
  * libgpo: Segfault in python bindings; (bso#15599).
  * Packet marshalling push support missing for
    CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and
    CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580).</changelog>
  <changelog author="scabrero@suse.de" date="1722513600">- Fix a crash when joining offline and 'kerberos method' includes
  keytab; (bsc#1228732);
- Fix reading the password from STDIN or environment vars if it
  was already given in the command line; (bsc#1228732);</changelog>
  <changelog author="ddiss@suse.com" date="1725537600">- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated;
  (bso#15699); (bsc#1229684).
- Update to 4.19.8
  * Invalid client warning about command line passwords;
    (bso#15671);
  * Version string is truncated in manpages; (bso#15672);
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673);
  * cmdline_burn does not always burn secrets; (bso#15674);
  * Samba doesn't parse SDDL found in defaultSecurityDescriptor
    in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685);
  * We have added new options --vendor-name and --vendor-patch-
    revision arguments to ./configure to allow distributions and
    packagers to put their name in the Samba version string so that
    when debugging Samba the source of the binary is obvious;
    (bso#15654);
  * When claims enabled with heimdal kerberos, unable to log on to a
    Windows computer when user account need to change their own
    password; (bso#15655);
  * Fix clock skew error message and memory cache clock skew
    recovery; (bso#15676);
  * CTDB RADOS mutex helper misses namespace support; (bso#15665);
  * The images don't build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660);
  * Fix unnecessary delays in CTDB while processing requests under
    high load; (bso#15678);
  * Dynamic DNS updates with the internal DNS are not working;
    (bso#13019);
  * s4:nbt_server: does not provide unexpected handling, so winbindd
    can't use nmb requests instead cldap; (bso#15620);
  * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664);
  * "client use kerberos" and --use-kerberos is ignored for the machine
    account; (bso#15666);
  * Regression DFS not working with widelinks = true; (bso#15435);
  * ntlm_auth make logs more consistent with length check; (bso#15677);</changelog>
  <changelog author="nopower@suse.com" date="1728475200">-  Adjust spec to split out rpcd_* binaries into a separate
  sub package; (bsc#1231414).</changelog>
  <changelog author="nopower@suse.com" date="1728993600">- Update to 4.21.1
  * DH reconnect error handling can lead to stale sharemode
    entries; (bso#15624).
  * "inherit permissions = yes" triggers assert() in vfs_default
    when creating a stream; (bso#15695).
  * Samba 4.21.0 broke FreeIPA domain member integration;
    (bso#15715).
  * Missing conversion for msDS-UserTGTLifetime, msDS-
    ComputerTGTLifetime and msDS-ServiceTGTLifetime on "samba-
    tool domain auth policy modify"; (bso#15692).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * Durable handle is not granted when a previous OPEN exists
    with NoOplock; (bso#15649).
  * Durable handle is granted but reconnect fails; (bso#15651).
  * Disconnected durable handles with RH lease should not be
    purged by a new non conflicting open; (bso#15708).
  * net ads testjoin and other commands use the wrong secrets.tdb
    in a cluster; (bso#15714).
  * 4.21 using --with-system-mitkrb5 requires MIT krb5 1.16 as
    rfc 8009 etypes are used; (bso#15726).
  * VFS_OPEN_HOW_WITH_BACKUP_INTENT breaks shadow_copy2;
    (bso#15730).
  * Samba 4.20.0 DLZ module crashes BIND on startup; (bso#15643).
  * Cannot build libldb lmdb backend on a build without AD DC;
    (bso#15721).
  * Consistent log level for sighup handler; (bso#15706).
- Package ceph_new VFS module.
- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated;
  (bso#15699); (bsc#1229684).
- Update to 4.21.0
  * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when
    truncated; (bso#15699).
  * Bad variable definition for ParseTuple causing test failure
    for Smb3UnixTests.test_create_context_reparse; (bso#15702).
  * Add new vfs_ceph module (based on low level API);
    (bso#15686).
  * samba-tool can not load the default configuration file;
    (bso#15698).
  * Crash when readlinkat fails; (bso#15700).
  * Can't add/delete special keys to keytab for nfs, cifs, http
    etc; (bso#15689).
  * Compound SMB2 requests don't return
    NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses
    MacOSX clients; (bso#15696).
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673).
  * ldb_version.h is missing from ldb public library;
    (bso#15690).
  * Can not add/delete special keys to keytab for nfs, cifs, http
    etc; (bso#15689).
  * undefined reference to winbind_lookup_name_ex; (bso#15687).
  * per user veto and hide file syntax is to complex;
    (bso#15688).
- Update to 4.20.4
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673).
- Update to 4.20.3
  * Running samba-bgqd a a standalone systemd service does not
    work; (bso#15683).
  * When claims enabled with heimdal kerberos, unable to log on
    to a Windows computer when user account need to change their
    own password; (bso#15655).
  * Invalid client warning about command line passwords;
    (bso#15671).
  * Version string is truncated in manpages; (bso#15672).
  * cmdline_burn does not always burn secrets; (bso#15674).
  * Samba does not parse SDDL found in defaultSecurityDescriptor
    in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685).
  * The images don\'t build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660).
  * Fix clock skew error message and memory cache clock skew
    recovery; (bso#15676).
  * Heimdal ignores _gsskrb5_decapsulate errors in
    init_sec_context/repl_mutual; (bso#15603).
  * s4:ldap_server: does not support tls channel bindings for
    sasl binds; (bso#15621).
  * CTDB socket output queues may suffer unbounded delays under
    some special conditions; (bso#15678).
- Update samba-tool package to require python3-Markdown also in
  the Heimdal ADDC build
- Fix named crash when using samba's DLZ plugin; (bsc#1224003);
  (bso#15643);
- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]
- Update to 4.20.2
  * vfs_widelinks with DFS shares breaks case insensitivity;
    (bso#15662); (bsc#1213607).
  * Samba build is not reproducible; (bso#13213).
  * ldb qsort might r/w out of bounds with an intransitive
    compare function; (bso#15569).
  * Many qsort() comparison functions are non-transitive, which
    can lead to out-of-bounds access in some circumstances;
    (bso#15625).
  * Need to change gitlab-ci.yml tags in all branches to avoid CI
    bill; (bso#15638).
  * We have added new options --vendor-name and --vendor-patch-
    revision arguments to ./configure to allow distributions and
    packagers to put their name in the Samba version string so
    that when debugging Samba the source of the binary is
    obvious; (bso#15654).
  * CTDB RADOS mutex helper misses namespace support;
    (bso#15665).
  * Dynamic DNS updates with the internal DNS are not working;
    (bso#13019).
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * Anonymous smb3 signing/encryption should be allowed (similar
    to Windows Server 2022); (bso#15412).
  * Panic in dreplsrv_op_pull_source_apply_changes_trigger;
    (bso#15573).
  * s4:nbt_server: does not provide unexpected handling, so
    winbindd can't use nmb requests instead cldap; (bso#15620).
  * winbindd, net ads join and other things don't work on an ipv6
    only host; (bso#15642).
  * Segmentation fault when deleting files in vfs_recycle;
    (bso#15659).
  * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664).
  * "client use kerberos" and --use-kerberos is ignored for the
    machine account; (bso#15666).
  * Regression DFS not working with widelinks = true;
    (bso#15435).
  * samba-gpupdate - Invalid NtVer in netlogon_samlogon_response;
    (bso#15633).
  * idmap_ad creates an incorrect local krb5.conf in case of
    trusted domain lookups; (bso#15653).
  * The images don't build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660).
- Fix non deterministic builds; (bsc#1225754); (bso#13213);
- Update to 4.20.1
  * dns update debug message is too noisy; (bso#15630);
  * Do not fail PAC validation for RFC8009 checksums types; (bso#15635);
  * Improve performance of lookup_groupmem() in idmap_ad; (bso#15605);
  * Smbcacls incorrectly propagates inheritance with Inherit-Only flag; (bso#15636);
  * http library doesn't support 'chunked transfer encoding'; (bso#15611);
  * Provide a systemd service file for the background queue daemon; (bso#15600);
- Update to 4.20.0
  New features:
  * samba-tool user getpassword / syncpasswords ;rounds= change
  * Group Managed service account client-side features
  * New Windows Search Protocol Client
  * Allow 'smbcacls' to save/restore DACLs to file
  * Samba-tool extensions for AD Claims, Authentication Policies and Silos
  * AD DC support for Authentication Silos and Authentication Policies
  * Conditional ACEs and Resource Attribute ACEs
  * Service Witness Protocol [MS-SWN]
  Removed features:
  * Get locally logged on users from utmp
  Fixed bugs:
  * Avoid null-dereference with bad claims; (bso#15606);
  * ndr_pull_security_ace can leave resource attribute ACE coda
    claim struct undefined; (bso#15613);
  * fd_handle_destructor() panics within an smbd_smb2_close() if
    vfs_stat_fsp() fails in fd_close(); (bso#15527);
  * set_nt_acl sometimes fails with NT_STATUS_INVALID_PARAMETER -
    openat() EACCES; (bso#15583);
  * libgpo: Segfault in python bindings; (bso#15599);
  * Samba AD is missing some authentication policy tests;
    (bso#15607);
  * samba-gpupdate: Correctly implement site support; (bso#15588);
  * Remove unsupported "Final" keyword missing from Python 3.6;
    (bso#15575);
  * Additional witness backports for 4.20.0; (bso#15577);
  * Error output with wspsearch; (bso#15579);
  * Packet marshalling push support missing for
    CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and
    CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580);
  * Performance regression for NDR parsing of security
    descriptors; (bso#15574);
  * Build and install man page for wspsearch client utility;
    (bso#15565);
- Update to 4.19.9
  * libldb: performance issue with indexes (ldb 2.8.2 is already
    released); (bso#15590).
  * DH reconnect error handling can lead to stale sharemode
    entries; (bso#15624).
  * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when
    truncated; (bso#15699).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * Compound SMB2 requests don't return
    NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses
    MacOSX clients; (bso#15696).
  * Crash when readlinkat fails; (bso#15700).</changelog>
  <changelog author="nopower@suse.com" date="1729080000">-  Adjust spec to split out rpcd_* binaries into a separate
  sub package; (bsc#1231414).</changelog>
  <changelog author="nopower@suse.com" date="1730376000">- Add placeholder changelog for sle15-sp7; (jsc#PED-11210).</changelog>
  <changelog author="nopower@suse.com" date="1732536000">- Update to 4.21.2
  * smbd fails to correctly check sharemode against OVERWRITE
    dispositions; (bso#15732).
  * Panic in close_directory; (bso#15754).
  * winexe no longer works with samba 4.21; (bso#15752).
  * protocol error - Unclear debug message "pad length mismatch"
    for invalid bind packet; (bso#14356).
  * NetrGetLogonCapabilities QueryLevel 2 needs to be
    implemented; (bso#15425).
  * gss_accept_sec_context() from Heimdal does not imply
    GSS_C_MUTUAL_FLAG with GSS_C_DCE_STYLE; (bso#15740).
  * winbindd should call process_set_title() for locator child;
    (bso#15749).
  * Update CTDB to track all TCP connections to public IP
    addresses; (bso#15320).</changelog>
  <changelog author="nopower@suse.com" date="1733486400">- Update shipped /etc/samba/smb.conf to point to smb.conf
  man page;(bsc#1233880).</changelog>
  <changelog author="nopower@suse.com" date="1736251200">- Update to 4.21.3
  * More possible replication loops against Azure AD;
    (bso#15701).
  * Compound rename from Mac clients can fail with
    NT_STATUS_INTERNAL_ERROR if the file has a lease;
    (bso#15697).
  * vfs crossrename seems not work correctly; (bso#15724).
  * After 'machine password timeout' /etc/krb5.keytab is not
    updated; (bso#6750).
  * Memory leak wbcCtxLookupSid; (bso#15771).
  * Fix heap-user-after-free with association groups;
    (bso#15765).
  * Segfault in vfs_btrfs; (bso#15758).
  * Avoid event failure race when disabling an event script;
    (bso#15755).</changelog>
  <changelog author="nopower@suse.com" date="1739966400">- Update to 4.21.4
  * Increasing slowness of sharesec performance with high number
    of registry shares; (bso#15780).
  * winbindd shows memleak in kerberos_decode_pac; (bso#15782).
  * Creation of GPOs applicable to more than one group is
    impossible with Samba 4.20.0 and later; (bso#15738).
  * Replace `crypt` module in
    python/samba/netcmd/user/readpasswords/common.py;
    (bso#15756).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * Spotlight search results don't show file size and creation
    date; (bso#15796).
  * General improvements for vfs_ceph_new module; (bso#15703).
  * net offlinejoin not working correctly; (bso#15777).
  * net ads create/join/winbind producing unix dysfunctional
    keytabs; (bso#15759).
  * Windows Explorer crashes on S-1-22-* Unix-SIDs when accessing
    security tab; (bso#14213).
  * The values from hresult_errstr_const and hresult_errstr are
    reversed in 4.20 and 4.21; (bso#15769).
  * Kerberos referral tickets are generated for principals in our
    domain if we have a trust to a top level domain; (bso#15778).
  * NETLOGON_NTLMV2_ENABLED is missing in the SamLogon*
    user_flags field; (bso#15783).
  * Regression: stack-use-after-return in crypt_as_best_we_can();
    (bso#15784).
  * libreplace:readline: gcc 15 complains about incompatible
    pointer types; (bso#15788).</changelog>
  <changelog author="nopower@suse.com" date="1743595200">- Update to 4.21.5
  * ldb index cache is too small on known large transactions
    (schemaupgrade, provision); (bso#15795).
  * Enable support for cephfs case insensitive behavior;
    (bso#15822).
  * Subnet based interfaces definition not listening on all
    covered IP addresses; (bso#15823).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727); (bsc#1238063).
  * Remove of file or directory not possible with vfs_acl_tdb;
    (bso#15791).
  * Unable to connect to CephFS subvolume shares with
    vfs_shadow_copy2; (bso#15797).
  * Add async io API from libcephfs to ceph_new VFS module;
    (bso#15810).
  * vfs_ceph_new module does not work with other modules for
    snapshot management; (bso#15818).
  * vfs_ceph_new: Add path based fallback for SMB_VFS_FCHOWN,
    SMB_VFS_FCHMOD and SMB_VFS_FNTIMES; (bso#15834).
  * Incorrect FSF address in ctdb pcp scripts; (bso#15820).
  * "samba-tool domain backup offline" hangs; (bso#15804).</changelog>
  <changelog author="nopower@suse.com" date="1748952000">- Update to 4.21.6
  * Running "gpo manage motd set" twice fails with backtrace;
    (bso#15774).
  * samba-tool gpo backup creates entity backups it can't read;
    (bso#15829).
  * gp_cert_auto_enroll_ext.py has problem unpacking GUIDs with
    prepended 0's; (bso#15839).
  * CVE-2025-0620 [SECURITY] smbd doesn't pick up group
    membership changes when re-authenticating an expired SMB
    session; (bso#15707), (bsc#1244136).
  * Deadlock between two smbd processes; (bso#15767).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727).
  * Wide link issue in samba 4.22; (bso#15841).
  * dcerpcd not able to bind to listening port; (bso#15851).
  * vfs_ceph_snapshots fails to list snapshots for entries at any
    level beyond share root; (bso#15819).
  * CTDB does not put nodes running NFS into grace on graceful
    shutdown; (bso#15858).</changelog>
  <changelog author="scabrero@suse.de" date="1751976000">- Update to 4.21.7
  * Windows security hardening locks out schannel'ed netlogon dc
    calls like netr_DsRGetDCName; (bsc#1246431); (bso#15876);
  * Trust domains are not created; (bso#15680);
  * Startup messages of rpc deamons fills /var/log/messages;
    (bso#15869);</changelog>
  <changelog author="nopower@suse.com" date="1757419200">- - Update to 4.21.8
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * getpwuid does not shift to new DC when current DC is down;
    (bso#15844).
  * Windows security hardening locks out schannel'ed netlogon dc
    calls like netr_DsRGetDCName; (bso#15876).
  * kinit command is failing with Missing cache Error;
    (bso#15840).
  * Figuring out the DC name from IP address fails and breaks
    fork_domain_child(); (bso#15891).
  * Delayed leader broadcast can block ctdb forever; (bso#15892).
  * 'net ads group' failed to list domain groups; (bso#15900).
  * Apparently there is a conflict between shadow_copy2 module
    and virusfilter (action quarantine); (bso#15663).
  * Fix handling of empty GPO link; (bso#15877).
  * SMB ACL inheritance doesn't work for files created;
    (bso#15880).</changelog>
  <changelog author="nopower@suse.com" date="1758628800">- CVE-2025-9640: fix vfs_streams_xattr uninitialized memory write;
  (bsc#1251279);(bso#15885).
- CVE-2025-10230: fix command Injection in WINS Server Hook Script;
  (bsc#1251280);(bso#15903).</changelog>
  <changelog author="nopower@suse.com" date="1763553600">- Update to 4.21.10
  * Crash in ctdbd on failed updateip; (bso#15935).
  * samba-4.21 fails to join AD when multiple DCs are returned;
    (bso#15905).
  * vfs_ceph_new should not use ceph_ll_nonblocking_readv_writev
    for fsync_send; (bso#15919).
  * CTDB_SOCKET can be used even when CTDB_TEST_MODE is not set;
    (bso#15921).
- Update to 4.21.9
  * CVE-2025-10230; (bso#15903); (bsc#1251279).
  * CVE-2025-9640; (bso#15885); (bsc#1251280).</changelog>
  <changelog author="noel.power@suse.com" date="1765281600">- samba-bgqd can't find [printers] share; (bso#15936);
  (bsc#1254586).</changelog>
  <changelog author="nopower@suse.com" date="1765540800">- Fix Samba printers reporting invalid sid during print jobs;
  (bsc#1234210); (bsc#1254926); (bso#15792).</changelog>
  <changelog author="scabrero@suse.de" date="1766491200">- Fix testparm error handling the "sync machine password to keytab"
  option; (bsc#1254439);</changelog>
</package>
<package pkgid="d9172171223b30a22e40b6f7123dfdd217e54dd7543ccab58b6476f3183d50d5" name="ldb-tools" arch="x86_64">
  <version epoch="0" ver="4.21.10+git.501.277ba349a01" rel="150700.3.26.1"/>
  <changelog author="nopower@suse.com" date="1729080000">-  Adjust spec to split out rpcd_* binaries into a separate
  sub package; (bsc#1231414).</changelog>
  <changelog author="nopower@suse.com" date="1730376000">- Add placeholder changelog for sle15-sp7; (jsc#PED-11210).</changelog>
  <changelog author="nopower@suse.com" date="1732536000">- Update to 4.21.2
  * smbd fails to correctly check sharemode against OVERWRITE
    dispositions; (bso#15732).
  * Panic in close_directory; (bso#15754).
  * winexe no longer works with samba 4.21; (bso#15752).
  * protocol error - Unclear debug message "pad length mismatch"
    for invalid bind packet; (bso#14356).
  * NetrGetLogonCapabilities QueryLevel 2 needs to be
    implemented; (bso#15425).
  * gss_accept_sec_context() from Heimdal does not imply
    GSS_C_MUTUAL_FLAG with GSS_C_DCE_STYLE; (bso#15740).
  * winbindd should call process_set_title() for locator child;
    (bso#15749).
  * Update CTDB to track all TCP connections to public IP
    addresses; (bso#15320).</changelog>
  <changelog author="nopower@suse.com" date="1733486400">- Update shipped /etc/samba/smb.conf to point to smb.conf
  man page;(bsc#1233880).</changelog>
  <changelog author="nopower@suse.com" date="1736251200">- Update to 4.21.3
  * More possible replication loops against Azure AD;
    (bso#15701).
  * Compound rename from Mac clients can fail with
    NT_STATUS_INTERNAL_ERROR if the file has a lease;
    (bso#15697).
  * vfs crossrename seems not work correctly; (bso#15724).
  * After 'machine password timeout' /etc/krb5.keytab is not
    updated; (bso#6750).
  * Memory leak wbcCtxLookupSid; (bso#15771).
  * Fix heap-user-after-free with association groups;
    (bso#15765).
  * Segfault in vfs_btrfs; (bso#15758).
  * Avoid event failure race when disabling an event script;
    (bso#15755).</changelog>
  <changelog author="nopower@suse.com" date="1739966400">- Update to 4.21.4
  * Increasing slowness of sharesec performance with high number
    of registry shares; (bso#15780).
  * winbindd shows memleak in kerberos_decode_pac; (bso#15782).
  * Creation of GPOs applicable to more than one group is
    impossible with Samba 4.20.0 and later; (bso#15738).
  * Replace `crypt` module in
    python/samba/netcmd/user/readpasswords/common.py;
    (bso#15756).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * Spotlight search results don't show file size and creation
    date; (bso#15796).
  * General improvements for vfs_ceph_new module; (bso#15703).
  * net offlinejoin not working correctly; (bso#15777).
  * net ads create/join/winbind producing unix dysfunctional
    keytabs; (bso#15759).
  * Windows Explorer crashes on S-1-22-* Unix-SIDs when accessing
    security tab; (bso#14213).
  * The values from hresult_errstr_const and hresult_errstr are
    reversed in 4.20 and 4.21; (bso#15769).
  * Kerberos referral tickets are generated for principals in our
    domain if we have a trust to a top level domain; (bso#15778).
  * NETLOGON_NTLMV2_ENABLED is missing in the SamLogon*
    user_flags field; (bso#15783).
  * Regression: stack-use-after-return in crypt_as_best_we_can();
    (bso#15784).
  * libreplace:readline: gcc 15 complains about incompatible
    pointer types; (bso#15788).</changelog>
  <changelog author="nopower@suse.com" date="1743595200">- Update to 4.21.5
  * ldb index cache is too small on known large transactions
    (schemaupgrade, provision); (bso#15795).
  * Enable support for cephfs case insensitive behavior;
    (bso#15822).
  * Subnet based interfaces definition not listening on all
    covered IP addresses; (bso#15823).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727); (bsc#1238063).
  * Remove of file or directory not possible with vfs_acl_tdb;
    (bso#15791).
  * Unable to connect to CephFS subvolume shares with
    vfs_shadow_copy2; (bso#15797).
  * Add async io API from libcephfs to ceph_new VFS module;
    (bso#15810).
  * vfs_ceph_new module does not work with other modules for
    snapshot management; (bso#15818).
  * vfs_ceph_new: Add path based fallback for SMB_VFS_FCHOWN,
    SMB_VFS_FCHMOD and SMB_VFS_FNTIMES; (bso#15834).
  * Incorrect FSF address in ctdb pcp scripts; (bso#15820).
  * "samba-tool domain backup offline" hangs; (bso#15804).</changelog>
  <changelog author="nopower@suse.com" date="1748952000">- Update to 4.21.6
  * Running "gpo manage motd set" twice fails with backtrace;
    (bso#15774).
  * samba-tool gpo backup creates entity backups it can't read;
    (bso#15829).
  * gp_cert_auto_enroll_ext.py has problem unpacking GUIDs with
    prepended 0's; (bso#15839).
  * CVE-2025-0620 [SECURITY] smbd doesn't pick up group
    membership changes when re-authenticating an expired SMB
    session; (bso#15707), (bsc#1244136).
  * Deadlock between two smbd processes; (bso#15767).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727).
  * Wide link issue in samba 4.22; (bso#15841).
  * dcerpcd not able to bind to listening port; (bso#15851).
  * vfs_ceph_snapshots fails to list snapshots for entries at any
    level beyond share root; (bso#15819).
  * CTDB does not put nodes running NFS into grace on graceful
    shutdown; (bso#15858).</changelog>
  <changelog author="scabrero@suse.de" date="1751976000">- Update to 4.21.7
  * Windows security hardening locks out schannel'ed netlogon dc
    calls like netr_DsRGetDCName; (bsc#1246431); (bso#15876);
  * Trust domains are not created; (bso#15680);
  * Startup messages of rpc deamons fills /var/log/messages;
    (bso#15869);</changelog>
  <changelog author="nopower@suse.com" date="1757419200">- - Update to 4.21.8
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * getpwuid does not shift to new DC when current DC is down;
    (bso#15844).
  * Windows security hardening locks out schannel'ed netlogon dc
    calls like netr_DsRGetDCName; (bso#15876).
  * kinit command is failing with Missing cache Error;
    (bso#15840).
  * Figuring out the DC name from IP address fails and breaks
    fork_domain_child(); (bso#15891).
  * Delayed leader broadcast can block ctdb forever; (bso#15892).
  * 'net ads group' failed to list domain groups; (bso#15900).
  * Apparently there is a conflict between shadow_copy2 module
    and virusfilter (action quarantine); (bso#15663).
  * Fix handling of empty GPO link; (bso#15877).
  * SMB ACL inheritance doesn't work for files created;
    (bso#15880).</changelog>
  <changelog author="nopower@suse.com" date="1758628800">- CVE-2025-9640: fix vfs_streams_xattr uninitialized memory write;
  (bsc#1251279);(bso#15885).
- CVE-2025-10230: fix command Injection in WINS Server Hook Script;
  (bsc#1251280);(bso#15903).</changelog>
  <changelog author="nopower@suse.com" date="1763553600">- Update to 4.21.10
  * Crash in ctdbd on failed updateip; (bso#15935).
  * samba-4.21 fails to join AD when multiple DCs are returned;
    (bso#15905).
  * vfs_ceph_new should not use ceph_ll_nonblocking_readv_writev
    for fsync_send; (bso#15919).
  * CTDB_SOCKET can be used even when CTDB_TEST_MODE is not set;
    (bso#15921).
- Update to 4.21.9
  * CVE-2025-10230; (bso#15903); (bsc#1251279).
  * CVE-2025-9640; (bso#15885); (bsc#1251280).</changelog>
  <changelog author="noel.power@suse.com" date="1765281600">- samba-bgqd can't find [printers] share; (bso#15936);
  (bsc#1254586).</changelog>
  <changelog author="nopower@suse.com" date="1765540800">- Fix Samba printers reporting invalid sid during print jobs;
  (bsc#1234210); (bsc#1254926); (bso#15792).</changelog>
  <changelog author="scabrero@suse.de" date="1766491200">- Fix testparm error handling the "sync machine password to keytab"
  option; (bsc#1254439);</changelog>
  <changelog author="noel.power@suse.com" date="1769515200">- Fix memory leak opening local named pipe; (bso#15979);
  (bsc#1257200).</changelog>
  <changelog author="noel.power@suse.com" date="1772020800">- Fix regression "use-kerberos=desired" broken doesn't even try
  to authenticate with kerberos and instead fallsback to NTLM;
  (bsc#1255755); (bso#15789).
- Fix memory leak using cups parsed options and from filename
  allocated when processing end of printing job; (bso#15979);
  (bsc#1257200).
- fix manpage for "net offlinejoin requestodj"; (bso#15964)
- fix "ctdbd socket" documentation in manpage for smb.conf;
  (bso#15977)</changelog>
  <changelog author="noel.power@suse.com" date="1773144000">- Generated dynamic profile based on path to special 'printers'
  share. (bsc#1259441).</changelog>
  <changelog author="nopower@suse.com" date="1774872000">- Fix rpc workers with long living clients from growing server
  memory keytab and increasing memory used by workers;
  (bso#16042); (bsc#1257200).</changelog>
  <changelog author="nopower@suse.com" date="1777291200">- CVE-2026-4480: Fix Unauthenticated Remote Code Execution;
  (bso#16033); (bsc#1261161).
- CVE-2026-4408: Fix Remote Code Execution in SAMR;(bso#16034);
  (bsc#1261163).
- CVE-2026-3238: Fix unauthenticated udp packet crashes AD DC
  nbt server; (bso#16012); (bsc#1261160).
- CVE-2026-3012: Fix CVE-2026-3012 group policy certificate
  enrollment using http:// without validation;(bso#16003);
  (bsc#1261159).
- CVE-2026-1933: Fix missing access check on reparse point
  operations; (bso#15992); (bsc#1261188).
- CVE-2026-2340: vfs_worm does not block directory modification;
  (bso#15997); (bsc#1261158).</changelog>
</package>
<package pkgid="0bf3b60b4b69f271f780b94c8e35dccffe85f8832dde3cc5bde2a9ebf055deb5" name="ldb-tools" arch="x86_64">
  <version epoch="0" ver="4.21.6+git.402.80f493f530f" rel="150700.3.3.1"/>
  <changelog author="nopower@suse.com" date="1697112000">- use systemd-logind rather than utmp for y2038 safety;
  (bsc#1216159).</changelog>
  <changelog author="nopower@suse.com" date="1697457600">- Update to 4.19.2
  * Use-after-free in aio_del_req_from_fsp during smbd shutdown
    after failed IPC FSCTL_PIPE_TRANSCEIVE; (bso#15423).
  * clidfs.c do_connect() missing a "return" after a
    cli_shutdown() call; (bso#15426).
  * macOS mdfind returns only 50 results; (bso#15463).
  * GETREALFILENAME_CACHE can modify incoming new filename with
    previous cache entry value; (bso#15481).
  * libnss_winbind causes memory corruption since samba-4.18,
    impacts sendmail, zabbix, potentially more; (bso#15464).
  * ctdbd: setproctitle not initialized messages flooding logs;
    (bso#15479).
  * CVE-2023-5568 Heap buffer overflow with freshness tokens in
    the Heimdal KDC in Samba 4.19; (bso#15491).
  * The heimdal KDC doesn't detect s4u2self correctly when fast
    is in use; (bso#15477).</changelog>
  <changelog author="dmulder@suse.com" date="1698062400">- packaging: samba-tool domain provision requires python3-Markdown;
  (bsc#1216519).</changelog>
  <changelog author="nopower@suse.com" date="1701086400">- Update to 4.19.3
  * sid_strings test broken by unix epoch &gt; 1700000000;
    (bso#15520).
  * smbd crashes if asked to return full information on close of
    a stream handle with delete on close disposition set;
    (bso#15487).
  * smbd: fix close order of base_fsp and stream_fsp in
    smb_fname_fsp_destructor(); (bso#15521).
  * Improve logging for failover scenarios; (bso#15499).
  * Files without "read attributes" NFS4 ACL permission are not
    listed in directories; (bso#15093).
  * CVE-2018-14628 [SECURITY] Deleted Object tombstones visible
    in AD LDAP to normal users; (bso#13595).
  * Kerberos TGS-REQ with User2User does not work for normal
    accounts; (bso#15492).
  * vfs_gpfs stat calls fail due to file system permissions;
    (bso#15507).
  * Samba doesn't build with Python 3.12; (bso#15513).</changelog>
  <changelog author="nopower@suse.com" date="1704801600">- Update to 4.19.4
  * net changesecretpw cannot set the machine account password if
    secrets.tdb is empty; (bso#13577).
  * For generating doc, take, if defined, env XML_CATALOG_FILES;
    (bso#15540).
  * Trivial C typo in nsswitch/winbind_nss_netbsd.c; (bso#15541).
  * vfs_linux_xfs is incorrectly named; (bso#15542).
  * systemd stumbled over copyright-message at smbd startup;
    (bso#15377).
  * Following intermediate abolute share-local symlinks is
    broken; (bso#15505).
  * ctdb RELEASE_IP causes a crash in release_ip if a connection
    to a non-public address disconnects first; (bso#15523).
  * shadow_copy2 broken when current fileset's directories are
    removed; (bso#15544).
  * smbd does not detect ctdb public ipv6 addresses for
    multichannel exclusion; (bso#15534).
  * 'force user = localunixuser' doesn't work if 'allow trusted
    domains = no' is set; (bso#15469).
  * smbget debug logging doesn't work; (bso#15525).
  * smget: username in the smburl and interactive password entry
    doesn't work; (bso#15532).
  * smbget auth function doesn't set values for password prompt
    correctly; (bso#15538).
  * Unable to copy and write files from clients to Ceph cluster
    via SMB Linux gateway with Ceph VFS module; (bso#15440).
  * Multichannel refresh network information; (bso#15547).</changelog>
  <changelog author="nopower@suse.com" date="1704888000">- Remove -x from bash shebang update-apparmor-samba-profile;
  (bsc#1218431).</changelog>
  <changelog author="nopower@suse.com" date="1708430400">- Update to 4.19.5
  * Windows 2016 fails to restore previous version of a file from
    a shadow_copy2 snapshot; (bso#13688).
  * Symlinks on AIX are broken in 4.19 (and a few version before
    that); (bso#15549).
  * Fake directory create times has no effect; (bso#12421).
  * ctime mixed up with mtime by smbd; (bso#15550).
  * samba-gpupdate --rsop fails if machine is not in a site;
    (bso#15548).
  * gpupdate: The root cert import when NDES is not available is
    broken; (bso#15557).
  * samba-gpupdate should print a useful message if cepces-submit
    can't be found; (bso#15552).
  * samba-gpupdate logging doesn't work; (bso#15558).
  * smbpasswd reset permissions only if not 0600; (bso#15555).</changelog>
  <changelog author="nopower@suse.com" date="1718884800">- Update to 4.19.7
  * ldb qsort might r/w out of bounds with an intransitive
    compare function (ldb 2.8.1 is already released);
    (bso#15569).
  * Many qsort() comparison functions are non-transitive, which
    can lead to out-of-bounds access in some circumstances (ldb
    2.8.1 is already released); (bso#15625).
  * Need to change gitlab-ci.yml tags in all branches to avoid CI
    bill; (bso#15638).
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * Anonymous smb3 signing/encryption should be allowed (similar
    to Windows Server 2022); (bso#15412).
  * Panic in dreplsrv_op_pull_source_apply_changes_trigger;
    (bso#15573).
  * winbindd, net ads join and other things don't work on an ipv6
    only host; (bso#15642).
  * Smbcacls incorrectly propagates inheritance with Inherit-Only
    flag; (bso#15636).
  * http library doesn't support  'chunked transfer encoding';
    (bso#15611).
- Update to 4.19.6
  * fd_handle_destructor() panics within an smbd_smb2_close() if
    vfs_stat_fsp() fails in fd_close(); (bso#15527).
  * samba-gpupdate: Correctly implement site support;
    (bso#15588).
  * libgpo: Segfault in python bindings; (bso#15599).
  * Packet marshalling push support missing for
    CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and
    CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580).</changelog>
  <changelog author="scabrero@suse.de" date="1722513600">- Fix a crash when joining offline and 'kerberos method' includes
  keytab; (bsc#1228732);
- Fix reading the password from STDIN or environment vars if it
  was already given in the command line; (bsc#1228732);</changelog>
  <changelog author="ddiss@suse.com" date="1725537600">- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated;
  (bso#15699); (bsc#1229684).
- Update to 4.19.8
  * Invalid client warning about command line passwords;
    (bso#15671);
  * Version string is truncated in manpages; (bso#15672);
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673);
  * cmdline_burn does not always burn secrets; (bso#15674);
  * Samba doesn't parse SDDL found in defaultSecurityDescriptor
    in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685);
  * We have added new options --vendor-name and --vendor-patch-
    revision arguments to ./configure to allow distributions and
    packagers to put their name in the Samba version string so that
    when debugging Samba the source of the binary is obvious;
    (bso#15654);
  * When claims enabled with heimdal kerberos, unable to log on to a
    Windows computer when user account need to change their own
    password; (bso#15655);
  * Fix clock skew error message and memory cache clock skew
    recovery; (bso#15676);
  * CTDB RADOS mutex helper misses namespace support; (bso#15665);
  * The images don't build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660);
  * Fix unnecessary delays in CTDB while processing requests under
    high load; (bso#15678);
  * Dynamic DNS updates with the internal DNS are not working;
    (bso#13019);
  * s4:nbt_server: does not provide unexpected handling, so winbindd
    can't use nmb requests instead cldap; (bso#15620);
  * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664);
  * "client use kerberos" and --use-kerberos is ignored for the machine
    account; (bso#15666);
  * Regression DFS not working with widelinks = true; (bso#15435);
  * ntlm_auth make logs more consistent with length check; (bso#15677);</changelog>
  <changelog author="nopower@suse.com" date="1728475200">-  Adjust spec to split out rpcd_* binaries into a separate
  sub package; (bsc#1231414).</changelog>
  <changelog author="nopower@suse.com" date="1728993600">- Update to 4.21.1
  * DH reconnect error handling can lead to stale sharemode
    entries; (bso#15624).
  * "inherit permissions = yes" triggers assert() in vfs_default
    when creating a stream; (bso#15695).
  * Samba 4.21.0 broke FreeIPA domain member integration;
    (bso#15715).
  * Missing conversion for msDS-UserTGTLifetime, msDS-
    ComputerTGTLifetime and msDS-ServiceTGTLifetime on "samba-
    tool domain auth policy modify"; (bso#15692).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * Durable handle is not granted when a previous OPEN exists
    with NoOplock; (bso#15649).
  * Durable handle is granted but reconnect fails; (bso#15651).
  * Disconnected durable handles with RH lease should not be
    purged by a new non conflicting open; (bso#15708).
  * net ads testjoin and other commands use the wrong secrets.tdb
    in a cluster; (bso#15714).
  * 4.21 using --with-system-mitkrb5 requires MIT krb5 1.16 as
    rfc 8009 etypes are used; (bso#15726).
  * VFS_OPEN_HOW_WITH_BACKUP_INTENT breaks shadow_copy2;
    (bso#15730).
  * Samba 4.20.0 DLZ module crashes BIND on startup; (bso#15643).
  * Cannot build libldb lmdb backend on a build without AD DC;
    (bso#15721).
  * Consistent log level for sighup handler; (bso#15706).
- Package ceph_new VFS module.
- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated;
  (bso#15699); (bsc#1229684).
- Update to 4.21.0
  * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when
    truncated; (bso#15699).
  * Bad variable definition for ParseTuple causing test failure
    for Smb3UnixTests.test_create_context_reparse; (bso#15702).
  * Add new vfs_ceph module (based on low level API);
    (bso#15686).
  * samba-tool can not load the default configuration file;
    (bso#15698).
  * Crash when readlinkat fails; (bso#15700).
  * Can't add/delete special keys to keytab for nfs, cifs, http
    etc; (bso#15689).
  * Compound SMB2 requests don't return
    NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses
    MacOSX clients; (bso#15696).
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673).
  * ldb_version.h is missing from ldb public library;
    (bso#15690).
  * Can not add/delete special keys to keytab for nfs, cifs, http
    etc; (bso#15689).
  * undefined reference to winbind_lookup_name_ex; (bso#15687).
  * per user veto and hide file syntax is to complex;
    (bso#15688).
- Update to 4.20.4
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673).
- Update to 4.20.3
  * Running samba-bgqd a a standalone systemd service does not
    work; (bso#15683).
  * When claims enabled with heimdal kerberos, unable to log on
    to a Windows computer when user account need to change their
    own password; (bso#15655).
  * Invalid client warning about command line passwords;
    (bso#15671).
  * Version string is truncated in manpages; (bso#15672).
  * cmdline_burn does not always burn secrets; (bso#15674).
  * Samba does not parse SDDL found in defaultSecurityDescriptor
    in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685).
  * The images don\'t build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660).
  * Fix clock skew error message and memory cache clock skew
    recovery; (bso#15676).
  * Heimdal ignores _gsskrb5_decapsulate errors in
    init_sec_context/repl_mutual; (bso#15603).
  * s4:ldap_server: does not support tls channel bindings for
    sasl binds; (bso#15621).
  * CTDB socket output queues may suffer unbounded delays under
    some special conditions; (bso#15678).
- Update samba-tool package to require python3-Markdown also in
  the Heimdal ADDC build
- Fix named crash when using samba's DLZ plugin; (bsc#1224003);
  (bso#15643);
- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]
- Update to 4.20.2
  * vfs_widelinks with DFS shares breaks case insensitivity;
    (bso#15662); (bsc#1213607).
  * Samba build is not reproducible; (bso#13213).
  * ldb qsort might r/w out of bounds with an intransitive
    compare function; (bso#15569).
  * Many qsort() comparison functions are non-transitive, which
    can lead to out-of-bounds access in some circumstances;
    (bso#15625).
  * Need to change gitlab-ci.yml tags in all branches to avoid CI
    bill; (bso#15638).
  * We have added new options --vendor-name and --vendor-patch-
    revision arguments to ./configure to allow distributions and
    packagers to put their name in the Samba version string so
    that when debugging Samba the source of the binary is
    obvious; (bso#15654).
  * CTDB RADOS mutex helper misses namespace support;
    (bso#15665).
  * Dynamic DNS updates with the internal DNS are not working;
    (bso#13019).
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * Anonymous smb3 signing/encryption should be allowed (similar
    to Windows Server 2022); (bso#15412).
  * Panic in dreplsrv_op_pull_source_apply_changes_trigger;
    (bso#15573).
  * s4:nbt_server: does not provide unexpected handling, so
    winbindd can't use nmb requests instead cldap; (bso#15620).
  * winbindd, net ads join and other things don't work on an ipv6
    only host; (bso#15642).
  * Segmentation fault when deleting files in vfs_recycle;
    (bso#15659).
  * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664).
  * "client use kerberos" and --use-kerberos is ignored for the
    machine account; (bso#15666).
  * Regression DFS not working with widelinks = true;
    (bso#15435).
  * samba-gpupdate - Invalid NtVer in netlogon_samlogon_response;
    (bso#15633).
  * idmap_ad creates an incorrect local krb5.conf in case of
    trusted domain lookups; (bso#15653).
  * The images don't build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660).
- Fix non deterministic builds; (bsc#1225754); (bso#13213);
- Update to 4.20.1
  * dns update debug message is too noisy; (bso#15630);
  * Do not fail PAC validation for RFC8009 checksums types; (bso#15635);
  * Improve performance of lookup_groupmem() in idmap_ad; (bso#15605);
  * Smbcacls incorrectly propagates inheritance with Inherit-Only flag; (bso#15636);
  * http library doesn't support 'chunked transfer encoding'; (bso#15611);
  * Provide a systemd service file for the background queue daemon; (bso#15600);
- Update to 4.20.0
  New features:
  * samba-tool user getpassword / syncpasswords ;rounds= change
  * Group Managed service account client-side features
  * New Windows Search Protocol Client
  * Allow 'smbcacls' to save/restore DACLs to file
  * Samba-tool extensions for AD Claims, Authentication Policies and Silos
  * AD DC support for Authentication Silos and Authentication Policies
  * Conditional ACEs and Resource Attribute ACEs
  * Service Witness Protocol [MS-SWN]
  Removed features:
  * Get locally logged on users from utmp
  Fixed bugs:
  * Avoid null-dereference with bad claims; (bso#15606);
  * ndr_pull_security_ace can leave resource attribute ACE coda
    claim struct undefined; (bso#15613);
  * fd_handle_destructor() panics within an smbd_smb2_close() if
    vfs_stat_fsp() fails in fd_close(); (bso#15527);
  * set_nt_acl sometimes fails with NT_STATUS_INVALID_PARAMETER -
    openat() EACCES; (bso#15583);
  * libgpo: Segfault in python bindings; (bso#15599);
  * Samba AD is missing some authentication policy tests;
    (bso#15607);
  * samba-gpupdate: Correctly implement site support; (bso#15588);
  * Remove unsupported "Final" keyword missing from Python 3.6;
    (bso#15575);
  * Additional witness backports for 4.20.0; (bso#15577);
  * Error output with wspsearch; (bso#15579);
  * Packet marshalling push support missing for
    CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and
    CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580);
  * Performance regression for NDR parsing of security
    descriptors; (bso#15574);
  * Build and install man page for wspsearch client utility;
    (bso#15565);
- Update to 4.19.9
  * libldb: performance issue with indexes (ldb 2.8.2 is already
    released); (bso#15590).
  * DH reconnect error handling can lead to stale sharemode
    entries; (bso#15624).
  * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when
    truncated; (bso#15699).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * Compound SMB2 requests don't return
    NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses
    MacOSX clients; (bso#15696).
  * Crash when readlinkat fails; (bso#15700).</changelog>
  <changelog author="nopower@suse.com" date="1729080000">-  Adjust spec to split out rpcd_* binaries into a separate
  sub package; (bsc#1231414).</changelog>
  <changelog author="nopower@suse.com" date="1730376000">- Add placeholder changelog for sle15-sp7; (jsc#PED-11210).</changelog>
  <changelog author="nopower@suse.com" date="1732536000">- Update to 4.21.2
  * smbd fails to correctly check sharemode against OVERWRITE
    dispositions; (bso#15732).
  * Panic in close_directory; (bso#15754).
  * winexe no longer works with samba 4.21; (bso#15752).
  * protocol error - Unclear debug message "pad length mismatch"
    for invalid bind packet; (bso#14356).
  * NetrGetLogonCapabilities QueryLevel 2 needs to be
    implemented; (bso#15425).
  * gss_accept_sec_context() from Heimdal does not imply
    GSS_C_MUTUAL_FLAG with GSS_C_DCE_STYLE; (bso#15740).
  * winbindd should call process_set_title() for locator child;
    (bso#15749).
  * Update CTDB to track all TCP connections to public IP
    addresses; (bso#15320).</changelog>
  <changelog author="nopower@suse.com" date="1733486400">- Update shipped /etc/samba/smb.conf to point to smb.conf
  man page;(bsc#1233880).</changelog>
  <changelog author="nopower@suse.com" date="1736251200">- Update to 4.21.3
  * More possible replication loops against Azure AD;
    (bso#15701).
  * Compound rename from Mac clients can fail with
    NT_STATUS_INTERNAL_ERROR if the file has a lease;
    (bso#15697).
  * vfs crossrename seems not work correctly; (bso#15724).
  * After 'machine password timeout' /etc/krb5.keytab is not
    updated; (bso#6750).
  * Memory leak wbcCtxLookupSid; (bso#15771).
  * Fix heap-user-after-free with association groups;
    (bso#15765).
  * Segfault in vfs_btrfs; (bso#15758).
  * Avoid event failure race when disabling an event script;
    (bso#15755).</changelog>
  <changelog author="nopower@suse.com" date="1739966400">- Update to 4.21.4
  * Increasing slowness of sharesec performance with high number
    of registry shares; (bso#15780).
  * winbindd shows memleak in kerberos_decode_pac; (bso#15782).
  * Creation of GPOs applicable to more than one group is
    impossible with Samba 4.20.0 and later; (bso#15738).
  * Replace `crypt` module in
    python/samba/netcmd/user/readpasswords/common.py;
    (bso#15756).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * Spotlight search results don't show file size and creation
    date; (bso#15796).
  * General improvements for vfs_ceph_new module; (bso#15703).
  * net offlinejoin not working correctly; (bso#15777).
  * net ads create/join/winbind producing unix dysfunctional
    keytabs; (bso#15759).
  * Windows Explorer crashes on S-1-22-* Unix-SIDs when accessing
    security tab; (bso#14213).
  * The values from hresult_errstr_const and hresult_errstr are
    reversed in 4.20 and 4.21; (bso#15769).
  * Kerberos referral tickets are generated for principals in our
    domain if we have a trust to a top level domain; (bso#15778).
  * NETLOGON_NTLMV2_ENABLED is missing in the SamLogon*
    user_flags field; (bso#15783).
  * Regression: stack-use-after-return in crypt_as_best_we_can();
    (bso#15784).
  * libreplace:readline: gcc 15 complains about incompatible
    pointer types; (bso#15788).</changelog>
  <changelog author="nopower@suse.com" date="1743595200">- Update to 4.21.5
  * ldb index cache is too small on known large transactions
    (schemaupgrade, provision); (bso#15795).
  * Enable support for cephfs case insensitive behavior;
    (bso#15822).
  * Subnet based interfaces definition not listening on all
    covered IP addresses; (bso#15823).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727); (bsc#1238063).
  * Remove of file or directory not possible with vfs_acl_tdb;
    (bso#15791).
  * Unable to connect to CephFS subvolume shares with
    vfs_shadow_copy2; (bso#15797).
  * Add async io API from libcephfs to ceph_new VFS module;
    (bso#15810).
  * vfs_ceph_new module does not work with other modules for
    snapshot management; (bso#15818).
  * vfs_ceph_new: Add path based fallback for SMB_VFS_FCHOWN,
    SMB_VFS_FCHMOD and SMB_VFS_FNTIMES; (bso#15834).
  * Incorrect FSF address in ctdb pcp scripts; (bso#15820).
  * "samba-tool domain backup offline" hangs; (bso#15804).</changelog>
  <changelog author="nopower@suse.com" date="1748952000">- Update to 4.21.6
  * Running "gpo manage motd set" twice fails with backtrace;
    (bso#15774).
  * samba-tool gpo backup creates entity backups it can't read;
    (bso#15829).
  * gp_cert_auto_enroll_ext.py has problem unpacking GUIDs with
    prepended 0's; (bso#15839).
  * CVE-2025-0620 [SECURITY] smbd doesn't pick up group
    membership changes when re-authenticating an expired SMB
    session; (bso#15707), (bsc#1244136).
  * Deadlock between two smbd processes; (bso#15767).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727).
  * Wide link issue in samba 4.22; (bso#15841).
  * dcerpcd not able to bind to listening port; (bso#15851).
  * vfs_ceph_snapshots fails to list snapshots for entries at any
    level beyond share root; (bso#15819).
  * CTDB does not put nodes running NFS into grace on graceful
    shutdown; (bso#15858).</changelog>
</package>
<package pkgid="1a70ad5183b914273380dc75b3c36761e8bc2188dac4e598f96ab0420cf685b8" name="ldb-tools" arch="x86_64">
  <version epoch="0" ver="4.21.6+git.493.f39e13aba14" rel="150700.3.6.1"/>
  <changelog author="nopower@suse.com" date="1697457600">- Update to 4.19.2
  * Use-after-free in aio_del_req_from_fsp during smbd shutdown
    after failed IPC FSCTL_PIPE_TRANSCEIVE; (bso#15423).
  * clidfs.c do_connect() missing a "return" after a
    cli_shutdown() call; (bso#15426).
  * macOS mdfind returns only 50 results; (bso#15463).
  * GETREALFILENAME_CACHE can modify incoming new filename with
    previous cache entry value; (bso#15481).
  * libnss_winbind causes memory corruption since samba-4.18,
    impacts sendmail, zabbix, potentially more; (bso#15464).
  * ctdbd: setproctitle not initialized messages flooding logs;
    (bso#15479).
  * CVE-2023-5568 Heap buffer overflow with freshness tokens in
    the Heimdal KDC in Samba 4.19; (bso#15491).
  * The heimdal KDC doesn't detect s4u2self correctly when fast
    is in use; (bso#15477).</changelog>
  <changelog author="dmulder@suse.com" date="1698062400">- packaging: samba-tool domain provision requires python3-Markdown;
  (bsc#1216519).</changelog>
  <changelog author="nopower@suse.com" date="1701086400">- Update to 4.19.3
  * sid_strings test broken by unix epoch &gt; 1700000000;
    (bso#15520).
  * smbd crashes if asked to return full information on close of
    a stream handle with delete on close disposition set;
    (bso#15487).
  * smbd: fix close order of base_fsp and stream_fsp in
    smb_fname_fsp_destructor(); (bso#15521).
  * Improve logging for failover scenarios; (bso#15499).
  * Files without "read attributes" NFS4 ACL permission are not
    listed in directories; (bso#15093).
  * CVE-2018-14628 [SECURITY] Deleted Object tombstones visible
    in AD LDAP to normal users; (bso#13595).
  * Kerberos TGS-REQ with User2User does not work for normal
    accounts; (bso#15492).
  * vfs_gpfs stat calls fail due to file system permissions;
    (bso#15507).
  * Samba doesn't build with Python 3.12; (bso#15513).</changelog>
  <changelog author="nopower@suse.com" date="1704801600">- Update to 4.19.4
  * net changesecretpw cannot set the machine account password if
    secrets.tdb is empty; (bso#13577).
  * For generating doc, take, if defined, env XML_CATALOG_FILES;
    (bso#15540).
  * Trivial C typo in nsswitch/winbind_nss_netbsd.c; (bso#15541).
  * vfs_linux_xfs is incorrectly named; (bso#15542).
  * systemd stumbled over copyright-message at smbd startup;
    (bso#15377).
  * Following intermediate abolute share-local symlinks is
    broken; (bso#15505).
  * ctdb RELEASE_IP causes a crash in release_ip if a connection
    to a non-public address disconnects first; (bso#15523).
  * shadow_copy2 broken when current fileset's directories are
    removed; (bso#15544).
  * smbd does not detect ctdb public ipv6 addresses for
    multichannel exclusion; (bso#15534).
  * 'force user = localunixuser' doesn't work if 'allow trusted
    domains = no' is set; (bso#15469).
  * smbget debug logging doesn't work; (bso#15525).
  * smget: username in the smburl and interactive password entry
    doesn't work; (bso#15532).
  * smbget auth function doesn't set values for password prompt
    correctly; (bso#15538).
  * Unable to copy and write files from clients to Ceph cluster
    via SMB Linux gateway with Ceph VFS module; (bso#15440).
  * Multichannel refresh network information; (bso#15547).</changelog>
  <changelog author="nopower@suse.com" date="1704888000">- Remove -x from bash shebang update-apparmor-samba-profile;
  (bsc#1218431).</changelog>
  <changelog author="nopower@suse.com" date="1708430400">- Update to 4.19.5
  * Windows 2016 fails to restore previous version of a file from
    a shadow_copy2 snapshot; (bso#13688).
  * Symlinks on AIX are broken in 4.19 (and a few version before
    that); (bso#15549).
  * Fake directory create times has no effect; (bso#12421).
  * ctime mixed up with mtime by smbd; (bso#15550).
  * samba-gpupdate --rsop fails if machine is not in a site;
    (bso#15548).
  * gpupdate: The root cert import when NDES is not available is
    broken; (bso#15557).
  * samba-gpupdate should print a useful message if cepces-submit
    can't be found; (bso#15552).
  * samba-gpupdate logging doesn't work; (bso#15558).
  * smbpasswd reset permissions only if not 0600; (bso#15555).</changelog>
  <changelog author="nopower@suse.com" date="1718884800">- Update to 4.19.7
  * ldb qsort might r/w out of bounds with an intransitive
    compare function (ldb 2.8.1 is already released);
    (bso#15569).
  * Many qsort() comparison functions are non-transitive, which
    can lead to out-of-bounds access in some circumstances (ldb
    2.8.1 is already released); (bso#15625).
  * Need to change gitlab-ci.yml tags in all branches to avoid CI
    bill; (bso#15638).
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * Anonymous smb3 signing/encryption should be allowed (similar
    to Windows Server 2022); (bso#15412).
  * Panic in dreplsrv_op_pull_source_apply_changes_trigger;
    (bso#15573).
  * winbindd, net ads join and other things don't work on an ipv6
    only host; (bso#15642).
  * Smbcacls incorrectly propagates inheritance with Inherit-Only
    flag; (bso#15636).
  * http library doesn't support  'chunked transfer encoding';
    (bso#15611).
- Update to 4.19.6
  * fd_handle_destructor() panics within an smbd_smb2_close() if
    vfs_stat_fsp() fails in fd_close(); (bso#15527).
  * samba-gpupdate: Correctly implement site support;
    (bso#15588).
  * libgpo: Segfault in python bindings; (bso#15599).
  * Packet marshalling push support missing for
    CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and
    CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580).</changelog>
  <changelog author="scabrero@suse.de" date="1722513600">- Fix a crash when joining offline and 'kerberos method' includes
  keytab; (bsc#1228732);
- Fix reading the password from STDIN or environment vars if it
  was already given in the command line; (bsc#1228732);</changelog>
  <changelog author="ddiss@suse.com" date="1725537600">- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated;
  (bso#15699); (bsc#1229684).
- Update to 4.19.8
  * Invalid client warning about command line passwords;
    (bso#15671);
  * Version string is truncated in manpages; (bso#15672);
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673);
  * cmdline_burn does not always burn secrets; (bso#15674);
  * Samba doesn't parse SDDL found in defaultSecurityDescriptor
    in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685);
  * We have added new options --vendor-name and --vendor-patch-
    revision arguments to ./configure to allow distributions and
    packagers to put their name in the Samba version string so that
    when debugging Samba the source of the binary is obvious;
    (bso#15654);
  * When claims enabled with heimdal kerberos, unable to log on to a
    Windows computer when user account need to change their own
    password; (bso#15655);
  * Fix clock skew error message and memory cache clock skew
    recovery; (bso#15676);
  * CTDB RADOS mutex helper misses namespace support; (bso#15665);
  * The images don't build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660);
  * Fix unnecessary delays in CTDB while processing requests under
    high load; (bso#15678);
  * Dynamic DNS updates with the internal DNS are not working;
    (bso#13019);
  * s4:nbt_server: does not provide unexpected handling, so winbindd
    can't use nmb requests instead cldap; (bso#15620);
  * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664);
  * "client use kerberos" and --use-kerberos is ignored for the machine
    account; (bso#15666);
  * Regression DFS not working with widelinks = true; (bso#15435);
  * ntlm_auth make logs more consistent with length check; (bso#15677);</changelog>
  <changelog author="nopower@suse.com" date="1728475200">-  Adjust spec to split out rpcd_* binaries into a separate
  sub package; (bsc#1231414).</changelog>
  <changelog author="nopower@suse.com" date="1728993600">- Update to 4.21.1
  * DH reconnect error handling can lead to stale sharemode
    entries; (bso#15624).
  * "inherit permissions = yes" triggers assert() in vfs_default
    when creating a stream; (bso#15695).
  * Samba 4.21.0 broke FreeIPA domain member integration;
    (bso#15715).
  * Missing conversion for msDS-UserTGTLifetime, msDS-
    ComputerTGTLifetime and msDS-ServiceTGTLifetime on "samba-
    tool domain auth policy modify"; (bso#15692).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * Durable handle is not granted when a previous OPEN exists
    with NoOplock; (bso#15649).
  * Durable handle is granted but reconnect fails; (bso#15651).
  * Disconnected durable handles with RH lease should not be
    purged by a new non conflicting open; (bso#15708).
  * net ads testjoin and other commands use the wrong secrets.tdb
    in a cluster; (bso#15714).
  * 4.21 using --with-system-mitkrb5 requires MIT krb5 1.16 as
    rfc 8009 etypes are used; (bso#15726).
  * VFS_OPEN_HOW_WITH_BACKUP_INTENT breaks shadow_copy2;
    (bso#15730).
  * Samba 4.20.0 DLZ module crashes BIND on startup; (bso#15643).
  * Cannot build libldb lmdb backend on a build without AD DC;
    (bso#15721).
  * Consistent log level for sighup handler; (bso#15706).
- Package ceph_new VFS module.
- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated;
  (bso#15699); (bsc#1229684).
- Update to 4.21.0
  * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when
    truncated; (bso#15699).
  * Bad variable definition for ParseTuple causing test failure
    for Smb3UnixTests.test_create_context_reparse; (bso#15702).
  * Add new vfs_ceph module (based on low level API);
    (bso#15686).
  * samba-tool can not load the default configuration file;
    (bso#15698).
  * Crash when readlinkat fails; (bso#15700).
  * Can't add/delete special keys to keytab for nfs, cifs, http
    etc; (bso#15689).
  * Compound SMB2 requests don't return
    NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses
    MacOSX clients; (bso#15696).
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673).
  * ldb_version.h is missing from ldb public library;
    (bso#15690).
  * Can not add/delete special keys to keytab for nfs, cifs, http
    etc; (bso#15689).
  * undefined reference to winbind_lookup_name_ex; (bso#15687).
  * per user veto and hide file syntax is to complex;
    (bso#15688).
- Update to 4.20.4
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673).
- Update to 4.20.3
  * Running samba-bgqd a a standalone systemd service does not
    work; (bso#15683).
  * When claims enabled with heimdal kerberos, unable to log on
    to a Windows computer when user account need to change their
    own password; (bso#15655).
  * Invalid client warning about command line passwords;
    (bso#15671).
  * Version string is truncated in manpages; (bso#15672).
  * cmdline_burn does not always burn secrets; (bso#15674).
  * Samba does not parse SDDL found in defaultSecurityDescriptor
    in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685).
  * The images don\'t build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660).
  * Fix clock skew error message and memory cache clock skew
    recovery; (bso#15676).
  * Heimdal ignores _gsskrb5_decapsulate errors in
    init_sec_context/repl_mutual; (bso#15603).
  * s4:ldap_server: does not support tls channel bindings for
    sasl binds; (bso#15621).
  * CTDB socket output queues may suffer unbounded delays under
    some special conditions; (bso#15678).
- Update samba-tool package to require python3-Markdown also in
  the Heimdal ADDC build
- Fix named crash when using samba's DLZ plugin; (bsc#1224003);
  (bso#15643);
- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]
- Update to 4.20.2
  * vfs_widelinks with DFS shares breaks case insensitivity;
    (bso#15662); (bsc#1213607).
  * Samba build is not reproducible; (bso#13213).
  * ldb qsort might r/w out of bounds with an intransitive
    compare function; (bso#15569).
  * Many qsort() comparison functions are non-transitive, which
    can lead to out-of-bounds access in some circumstances;
    (bso#15625).
  * Need to change gitlab-ci.yml tags in all branches to avoid CI
    bill; (bso#15638).
  * We have added new options --vendor-name and --vendor-patch-
    revision arguments to ./configure to allow distributions and
    packagers to put their name in the Samba version string so
    that when debugging Samba the source of the binary is
    obvious; (bso#15654).
  * CTDB RADOS mutex helper misses namespace support;
    (bso#15665).
  * Dynamic DNS updates with the internal DNS are not working;
    (bso#13019).
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * Anonymous smb3 signing/encryption should be allowed (similar
    to Windows Server 2022); (bso#15412).
  * Panic in dreplsrv_op_pull_source_apply_changes_trigger;
    (bso#15573).
  * s4:nbt_server: does not provide unexpected handling, so
    winbindd can't use nmb requests instead cldap; (bso#15620).
  * winbindd, net ads join and other things don't work on an ipv6
    only host; (bso#15642).
  * Segmentation fault when deleting files in vfs_recycle;
    (bso#15659).
  * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664).
  * "client use kerberos" and --use-kerberos is ignored for the
    machine account; (bso#15666).
  * Regression DFS not working with widelinks = true;
    (bso#15435).
  * samba-gpupdate - Invalid NtVer in netlogon_samlogon_response;
    (bso#15633).
  * idmap_ad creates an incorrect local krb5.conf in case of
    trusted domain lookups; (bso#15653).
  * The images don't build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660).
- Fix non deterministic builds; (bsc#1225754); (bso#13213);
- Update to 4.20.1
  * dns update debug message is too noisy; (bso#15630);
  * Do not fail PAC validation for RFC8009 checksums types; (bso#15635);
  * Improve performance of lookup_groupmem() in idmap_ad; (bso#15605);
  * Smbcacls incorrectly propagates inheritance with Inherit-Only flag; (bso#15636);
  * http library doesn't support 'chunked transfer encoding'; (bso#15611);
  * Provide a systemd service file for the background queue daemon; (bso#15600);
- Update to 4.20.0
  New features:
  * samba-tool user getpassword / syncpasswords ;rounds= change
  * Group Managed service account client-side features
  * New Windows Search Protocol Client
  * Allow 'smbcacls' to save/restore DACLs to file
  * Samba-tool extensions for AD Claims, Authentication Policies and Silos
  * AD DC support for Authentication Silos and Authentication Policies
  * Conditional ACEs and Resource Attribute ACEs
  * Service Witness Protocol [MS-SWN]
  Removed features:
  * Get locally logged on users from utmp
  Fixed bugs:
  * Avoid null-dereference with bad claims; (bso#15606);
  * ndr_pull_security_ace can leave resource attribute ACE coda
    claim struct undefined; (bso#15613);
  * fd_handle_destructor() panics within an smbd_smb2_close() if
    vfs_stat_fsp() fails in fd_close(); (bso#15527);
  * set_nt_acl sometimes fails with NT_STATUS_INVALID_PARAMETER -
    openat() EACCES; (bso#15583);
  * libgpo: Segfault in python bindings; (bso#15599);
  * Samba AD is missing some authentication policy tests;
    (bso#15607);
  * samba-gpupdate: Correctly implement site support; (bso#15588);
  * Remove unsupported "Final" keyword missing from Python 3.6;
    (bso#15575);
  * Additional witness backports for 4.20.0; (bso#15577);
  * Error output with wspsearch; (bso#15579);
  * Packet marshalling push support missing for
    CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and
    CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580);
  * Performance regression for NDR parsing of security
    descriptors; (bso#15574);
  * Build and install man page for wspsearch client utility;
    (bso#15565);
- Update to 4.19.9
  * libldb: performance issue with indexes (ldb 2.8.2 is already
    released); (bso#15590).
  * DH reconnect error handling can lead to stale sharemode
    entries; (bso#15624).
  * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when
    truncated; (bso#15699).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * Compound SMB2 requests don't return
    NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses
    MacOSX clients; (bso#15696).
  * Crash when readlinkat fails; (bso#15700).</changelog>
  <changelog author="nopower@suse.com" date="1729080000">-  Adjust spec to split out rpcd_* binaries into a separate
  sub package; (bsc#1231414).</changelog>
  <changelog author="nopower@suse.com" date="1730376000">- Add placeholder changelog for sle15-sp7; (jsc#PED-11210).</changelog>
  <changelog author="nopower@suse.com" date="1732536000">- Update to 4.21.2
  * smbd fails to correctly check sharemode against OVERWRITE
    dispositions; (bso#15732).
  * Panic in close_directory; (bso#15754).
  * winexe no longer works with samba 4.21; (bso#15752).
  * protocol error - Unclear debug message "pad length mismatch"
    for invalid bind packet; (bso#14356).
  * NetrGetLogonCapabilities QueryLevel 2 needs to be
    implemented; (bso#15425).
  * gss_accept_sec_context() from Heimdal does not imply
    GSS_C_MUTUAL_FLAG with GSS_C_DCE_STYLE; (bso#15740).
  * winbindd should call process_set_title() for locator child;
    (bso#15749).
  * Update CTDB to track all TCP connections to public IP
    addresses; (bso#15320).</changelog>
  <changelog author="nopower@suse.com" date="1733486400">- Update shipped /etc/samba/smb.conf to point to smb.conf
  man page;(bsc#1233880).</changelog>
  <changelog author="nopower@suse.com" date="1736251200">- Update to 4.21.3
  * More possible replication loops against Azure AD;
    (bso#15701).
  * Compound rename from Mac clients can fail with
    NT_STATUS_INTERNAL_ERROR if the file has a lease;
    (bso#15697).
  * vfs crossrename seems not work correctly; (bso#15724).
  * After 'machine password timeout' /etc/krb5.keytab is not
    updated; (bso#6750).
  * Memory leak wbcCtxLookupSid; (bso#15771).
  * Fix heap-user-after-free with association groups;
    (bso#15765).
  * Segfault in vfs_btrfs; (bso#15758).
  * Avoid event failure race when disabling an event script;
    (bso#15755).</changelog>
  <changelog author="nopower@suse.com" date="1739966400">- Update to 4.21.4
  * Increasing slowness of sharesec performance with high number
    of registry shares; (bso#15780).
  * winbindd shows memleak in kerberos_decode_pac; (bso#15782).
  * Creation of GPOs applicable to more than one group is
    impossible with Samba 4.20.0 and later; (bso#15738).
  * Replace `crypt` module in
    python/samba/netcmd/user/readpasswords/common.py;
    (bso#15756).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * Spotlight search results don't show file size and creation
    date; (bso#15796).
  * General improvements for vfs_ceph_new module; (bso#15703).
  * net offlinejoin not working correctly; (bso#15777).
  * net ads create/join/winbind producing unix dysfunctional
    keytabs; (bso#15759).
  * Windows Explorer crashes on S-1-22-* Unix-SIDs when accessing
    security tab; (bso#14213).
  * The values from hresult_errstr_const and hresult_errstr are
    reversed in 4.20 and 4.21; (bso#15769).
  * Kerberos referral tickets are generated for principals in our
    domain if we have a trust to a top level domain; (bso#15778).
  * NETLOGON_NTLMV2_ENABLED is missing in the SamLogon*
    user_flags field; (bso#15783).
  * Regression: stack-use-after-return in crypt_as_best_we_can();
    (bso#15784).
  * libreplace:readline: gcc 15 complains about incompatible
    pointer types; (bso#15788).</changelog>
  <changelog author="nopower@suse.com" date="1743595200">- Update to 4.21.5
  * ldb index cache is too small on known large transactions
    (schemaupgrade, provision); (bso#15795).
  * Enable support for cephfs case insensitive behavior;
    (bso#15822).
  * Subnet based interfaces definition not listening on all
    covered IP addresses; (bso#15823).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727); (bsc#1238063).
  * Remove of file or directory not possible with vfs_acl_tdb;
    (bso#15791).
  * Unable to connect to CephFS subvolume shares with
    vfs_shadow_copy2; (bso#15797).
  * Add async io API from libcephfs to ceph_new VFS module;
    (bso#15810).
  * vfs_ceph_new module does not work with other modules for
    snapshot management; (bso#15818).
  * vfs_ceph_new: Add path based fallback for SMB_VFS_FCHOWN,
    SMB_VFS_FCHMOD and SMB_VFS_FNTIMES; (bso#15834).
  * Incorrect FSF address in ctdb pcp scripts; (bso#15820).
  * "samba-tool domain backup offline" hangs; (bso#15804).</changelog>
  <changelog author="nopower@suse.com" date="1748952000">- Update to 4.21.6
  * Running "gpo manage motd set" twice fails with backtrace;
    (bso#15774).
  * samba-tool gpo backup creates entity backups it can't read;
    (bso#15829).
  * gp_cert_auto_enroll_ext.py has problem unpacking GUIDs with
    prepended 0's; (bso#15839).
  * CVE-2025-0620 [SECURITY] smbd doesn't pick up group
    membership changes when re-authenticating an expired SMB
    session; (bso#15707), (bsc#1244136).
  * Deadlock between two smbd processes; (bso#15767).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727).
  * Wide link issue in samba 4.22; (bso#15841).
  * dcerpcd not able to bind to listening port; (bso#15851).
  * vfs_ceph_snapshots fails to list snapshots for entries at any
    level beyond share root; (bso#15819).
  * CTDB does not put nodes running NFS into grace on graceful
    shutdown; (bso#15858).</changelog>
  <changelog author="scabrero@suse.de" date="1751976000">- Update to 4.21.7
  * Windows security hardening locks out schannel'ed netlogon dc
    calls like netr_DsRGetDCName; (bsc#1246431); (bso#15876);
  * Trust domains are not created; (bso#15680);
  * Startup messages of rpc deamons fills /var/log/messages;
    (bso#15869);</changelog>
</package>
<package pkgid="5f6b47c567d1b40f1604f4943a61967b6e21304a13b76bbf3916088a0b213528" name="ldb-tools" arch="x86_64">
  <version epoch="0" ver="4.21.8+git.418.e80c9b2a88c" rel="150700.3.11.2"/>
  <changelog author="nopower@suse.com" date="1701086400">- Update to 4.19.3
  * sid_strings test broken by unix epoch &gt; 1700000000;
    (bso#15520).
  * smbd crashes if asked to return full information on close of
    a stream handle with delete on close disposition set;
    (bso#15487).
  * smbd: fix close order of base_fsp and stream_fsp in
    smb_fname_fsp_destructor(); (bso#15521).
  * Improve logging for failover scenarios; (bso#15499).
  * Files without "read attributes" NFS4 ACL permission are not
    listed in directories; (bso#15093).
  * CVE-2018-14628 [SECURITY] Deleted Object tombstones visible
    in AD LDAP to normal users; (bso#13595).
  * Kerberos TGS-REQ with User2User does not work for normal
    accounts; (bso#15492).
  * vfs_gpfs stat calls fail due to file system permissions;
    (bso#15507).
  * Samba doesn't build with Python 3.12; (bso#15513).</changelog>
  <changelog author="nopower@suse.com" date="1704801600">- Update to 4.19.4
  * net changesecretpw cannot set the machine account password if
    secrets.tdb is empty; (bso#13577).
  * For generating doc, take, if defined, env XML_CATALOG_FILES;
    (bso#15540).
  * Trivial C typo in nsswitch/winbind_nss_netbsd.c; (bso#15541).
  * vfs_linux_xfs is incorrectly named; (bso#15542).
  * systemd stumbled over copyright-message at smbd startup;
    (bso#15377).
  * Following intermediate abolute share-local symlinks is
    broken; (bso#15505).
  * ctdb RELEASE_IP causes a crash in release_ip if a connection
    to a non-public address disconnects first; (bso#15523).
  * shadow_copy2 broken when current fileset's directories are
    removed; (bso#15544).
  * smbd does not detect ctdb public ipv6 addresses for
    multichannel exclusion; (bso#15534).
  * 'force user = localunixuser' doesn't work if 'allow trusted
    domains = no' is set; (bso#15469).
  * smbget debug logging doesn't work; (bso#15525).
  * smget: username in the smburl and interactive password entry
    doesn't work; (bso#15532).
  * smbget auth function doesn't set values for password prompt
    correctly; (bso#15538).
  * Unable to copy and write files from clients to Ceph cluster
    via SMB Linux gateway with Ceph VFS module; (bso#15440).
  * Multichannel refresh network information; (bso#15547).</changelog>
  <changelog author="nopower@suse.com" date="1704888000">- Remove -x from bash shebang update-apparmor-samba-profile;
  (bsc#1218431).</changelog>
  <changelog author="nopower@suse.com" date="1708430400">- Update to 4.19.5
  * Windows 2016 fails to restore previous version of a file from
    a shadow_copy2 snapshot; (bso#13688).
  * Symlinks on AIX are broken in 4.19 (and a few version before
    that); (bso#15549).
  * Fake directory create times has no effect; (bso#12421).
  * ctime mixed up with mtime by smbd; (bso#15550).
  * samba-gpupdate --rsop fails if machine is not in a site;
    (bso#15548).
  * gpupdate: The root cert import when NDES is not available is
    broken; (bso#15557).
  * samba-gpupdate should print a useful message if cepces-submit
    can't be found; (bso#15552).
  * samba-gpupdate logging doesn't work; (bso#15558).
  * smbpasswd reset permissions only if not 0600; (bso#15555).</changelog>
  <changelog author="nopower@suse.com" date="1718884800">- Update to 4.19.7
  * ldb qsort might r/w out of bounds with an intransitive
    compare function (ldb 2.8.1 is already released);
    (bso#15569).
  * Many qsort() comparison functions are non-transitive, which
    can lead to out-of-bounds access in some circumstances (ldb
    2.8.1 is already released); (bso#15625).
  * Need to change gitlab-ci.yml tags in all branches to avoid CI
    bill; (bso#15638).
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * Anonymous smb3 signing/encryption should be allowed (similar
    to Windows Server 2022); (bso#15412).
  * Panic in dreplsrv_op_pull_source_apply_changes_trigger;
    (bso#15573).
  * winbindd, net ads join and other things don't work on an ipv6
    only host; (bso#15642).
  * Smbcacls incorrectly propagates inheritance with Inherit-Only
    flag; (bso#15636).
  * http library doesn't support  'chunked transfer encoding';
    (bso#15611).
- Update to 4.19.6
  * fd_handle_destructor() panics within an smbd_smb2_close() if
    vfs_stat_fsp() fails in fd_close(); (bso#15527).
  * samba-gpupdate: Correctly implement site support;
    (bso#15588).
  * libgpo: Segfault in python bindings; (bso#15599).
  * Packet marshalling push support missing for
    CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and
    CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580).</changelog>
  <changelog author="scabrero@suse.de" date="1722513600">- Fix a crash when joining offline and 'kerberos method' includes
  keytab; (bsc#1228732);
- Fix reading the password from STDIN or environment vars if it
  was already given in the command line; (bsc#1228732);</changelog>
  <changelog author="ddiss@suse.com" date="1725537600">- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated;
  (bso#15699); (bsc#1229684).
- Update to 4.19.8
  * Invalid client warning about command line passwords;
    (bso#15671);
  * Version string is truncated in manpages; (bso#15672);
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673);
  * cmdline_burn does not always burn secrets; (bso#15674);
  * Samba doesn't parse SDDL found in defaultSecurityDescriptor
    in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685);
  * We have added new options --vendor-name and --vendor-patch-
    revision arguments to ./configure to allow distributions and
    packagers to put their name in the Samba version string so that
    when debugging Samba the source of the binary is obvious;
    (bso#15654);
  * When claims enabled with heimdal kerberos, unable to log on to a
    Windows computer when user account need to change their own
    password; (bso#15655);
  * Fix clock skew error message and memory cache clock skew
    recovery; (bso#15676);
  * CTDB RADOS mutex helper misses namespace support; (bso#15665);
  * The images don't build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660);
  * Fix unnecessary delays in CTDB while processing requests under
    high load; (bso#15678);
  * Dynamic DNS updates with the internal DNS are not working;
    (bso#13019);
  * s4:nbt_server: does not provide unexpected handling, so winbindd
    can't use nmb requests instead cldap; (bso#15620);
  * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664);
  * "client use kerberos" and --use-kerberos is ignored for the machine
    account; (bso#15666);
  * Regression DFS not working with widelinks = true; (bso#15435);
  * ntlm_auth make logs more consistent with length check; (bso#15677);</changelog>
  <changelog author="nopower@suse.com" date="1728475200">-  Adjust spec to split out rpcd_* binaries into a separate
  sub package; (bsc#1231414).</changelog>
  <changelog author="nopower@suse.com" date="1728993600">- Update to 4.21.1
  * DH reconnect error handling can lead to stale sharemode
    entries; (bso#15624).
  * "inherit permissions = yes" triggers assert() in vfs_default
    when creating a stream; (bso#15695).
  * Samba 4.21.0 broke FreeIPA domain member integration;
    (bso#15715).
  * Missing conversion for msDS-UserTGTLifetime, msDS-
    ComputerTGTLifetime and msDS-ServiceTGTLifetime on "samba-
    tool domain auth policy modify"; (bso#15692).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * Durable handle is not granted when a previous OPEN exists
    with NoOplock; (bso#15649).
  * Durable handle is granted but reconnect fails; (bso#15651).
  * Disconnected durable handles with RH lease should not be
    purged by a new non conflicting open; (bso#15708).
  * net ads testjoin and other commands use the wrong secrets.tdb
    in a cluster; (bso#15714).
  * 4.21 using --with-system-mitkrb5 requires MIT krb5 1.16 as
    rfc 8009 etypes are used; (bso#15726).
  * VFS_OPEN_HOW_WITH_BACKUP_INTENT breaks shadow_copy2;
    (bso#15730).
  * Samba 4.20.0 DLZ module crashes BIND on startup; (bso#15643).
  * Cannot build libldb lmdb backend on a build without AD DC;
    (bso#15721).
  * Consistent log level for sighup handler; (bso#15706).
- Package ceph_new VFS module.
- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated;
  (bso#15699); (bsc#1229684).
- Update to 4.21.0
  * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when
    truncated; (bso#15699).
  * Bad variable definition for ParseTuple causing test failure
    for Smb3UnixTests.test_create_context_reparse; (bso#15702).
  * Add new vfs_ceph module (based on low level API);
    (bso#15686).
  * samba-tool can not load the default configuration file;
    (bso#15698).
  * Crash when readlinkat fails; (bso#15700).
  * Can't add/delete special keys to keytab for nfs, cifs, http
    etc; (bso#15689).
  * Compound SMB2 requests don't return
    NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses
    MacOSX clients; (bso#15696).
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673).
  * ldb_version.h is missing from ldb public library;
    (bso#15690).
  * Can not add/delete special keys to keytab for nfs, cifs, http
    etc; (bso#15689).
  * undefined reference to winbind_lookup_name_ex; (bso#15687).
  * per user veto and hide file syntax is to complex;
    (bso#15688).
- Update to 4.20.4
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673).
- Update to 4.20.3
  * Running samba-bgqd a a standalone systemd service does not
    work; (bso#15683).
  * When claims enabled with heimdal kerberos, unable to log on
    to a Windows computer when user account need to change their
    own password; (bso#15655).
  * Invalid client warning about command line passwords;
    (bso#15671).
  * Version string is truncated in manpages; (bso#15672).
  * cmdline_burn does not always burn secrets; (bso#15674).
  * Samba does not parse SDDL found in defaultSecurityDescriptor
    in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685).
  * The images don\'t build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660).
  * Fix clock skew error message and memory cache clock skew
    recovery; (bso#15676).
  * Heimdal ignores _gsskrb5_decapsulate errors in
    init_sec_context/repl_mutual; (bso#15603).
  * s4:ldap_server: does not support tls channel bindings for
    sasl binds; (bso#15621).
  * CTDB socket output queues may suffer unbounded delays under
    some special conditions; (bso#15678).
- Update samba-tool package to require python3-Markdown also in
  the Heimdal ADDC build
- Fix named crash when using samba's DLZ plugin; (bsc#1224003);
  (bso#15643);
- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]
- Update to 4.20.2
  * vfs_widelinks with DFS shares breaks case insensitivity;
    (bso#15662); (bsc#1213607).
  * Samba build is not reproducible; (bso#13213).
  * ldb qsort might r/w out of bounds with an intransitive
    compare function; (bso#15569).
  * Many qsort() comparison functions are non-transitive, which
    can lead to out-of-bounds access in some circumstances;
    (bso#15625).
  * Need to change gitlab-ci.yml tags in all branches to avoid CI
    bill; (bso#15638).
  * We have added new options --vendor-name and --vendor-patch-
    revision arguments to ./configure to allow distributions and
    packagers to put their name in the Samba version string so
    that when debugging Samba the source of the binary is
    obvious; (bso#15654).
  * CTDB RADOS mutex helper misses namespace support;
    (bso#15665).
  * Dynamic DNS updates with the internal DNS are not working;
    (bso#13019).
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * Anonymous smb3 signing/encryption should be allowed (similar
    to Windows Server 2022); (bso#15412).
  * Panic in dreplsrv_op_pull_source_apply_changes_trigger;
    (bso#15573).
  * s4:nbt_server: does not provide unexpected handling, so
    winbindd can't use nmb requests instead cldap; (bso#15620).
  * winbindd, net ads join and other things don't work on an ipv6
    only host; (bso#15642).
  * Segmentation fault when deleting files in vfs_recycle;
    (bso#15659).
  * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664).
  * "client use kerberos" and --use-kerberos is ignored for the
    machine account; (bso#15666).
  * Regression DFS not working with widelinks = true;
    (bso#15435).
  * samba-gpupdate - Invalid NtVer in netlogon_samlogon_response;
    (bso#15633).
  * idmap_ad creates an incorrect local krb5.conf in case of
    trusted domain lookups; (bso#15653).
  * The images don't build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660).
- Fix non deterministic builds; (bsc#1225754); (bso#13213);
- Update to 4.20.1
  * dns update debug message is too noisy; (bso#15630);
  * Do not fail PAC validation for RFC8009 checksums types; (bso#15635);
  * Improve performance of lookup_groupmem() in idmap_ad; (bso#15605);
  * Smbcacls incorrectly propagates inheritance with Inherit-Only flag; (bso#15636);
  * http library doesn't support 'chunked transfer encoding'; (bso#15611);
  * Provide a systemd service file for the background queue daemon; (bso#15600);
- Update to 4.20.0
  New features:
  * samba-tool user getpassword / syncpasswords ;rounds= change
  * Group Managed service account client-side features
  * New Windows Search Protocol Client
  * Allow 'smbcacls' to save/restore DACLs to file
  * Samba-tool extensions for AD Claims, Authentication Policies and Silos
  * AD DC support for Authentication Silos and Authentication Policies
  * Conditional ACEs and Resource Attribute ACEs
  * Service Witness Protocol [MS-SWN]
  Removed features:
  * Get locally logged on users from utmp
  Fixed bugs:
  * Avoid null-dereference with bad claims; (bso#15606);
  * ndr_pull_security_ace can leave resource attribute ACE coda
    claim struct undefined; (bso#15613);
  * fd_handle_destructor() panics within an smbd_smb2_close() if
    vfs_stat_fsp() fails in fd_close(); (bso#15527);
  * set_nt_acl sometimes fails with NT_STATUS_INVALID_PARAMETER -
    openat() EACCES; (bso#15583);
  * libgpo: Segfault in python bindings; (bso#15599);
  * Samba AD is missing some authentication policy tests;
    (bso#15607);
  * samba-gpupdate: Correctly implement site support; (bso#15588);
  * Remove unsupported "Final" keyword missing from Python 3.6;
    (bso#15575);
  * Additional witness backports for 4.20.0; (bso#15577);
  * Error output with wspsearch; (bso#15579);
  * Packet marshalling push support missing for
    CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and
    CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580);
  * Performance regression for NDR parsing of security
    descriptors; (bso#15574);
  * Build and install man page for wspsearch client utility;
    (bso#15565);
- Update to 4.19.9
  * libldb: performance issue with indexes (ldb 2.8.2 is already
    released); (bso#15590).
  * DH reconnect error handling can lead to stale sharemode
    entries; (bso#15624).
  * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when
    truncated; (bso#15699).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * Compound SMB2 requests don't return
    NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses
    MacOSX clients; (bso#15696).
  * Crash when readlinkat fails; (bso#15700).</changelog>
  <changelog author="nopower@suse.com" date="1729080000">-  Adjust spec to split out rpcd_* binaries into a separate
  sub package; (bsc#1231414).</changelog>
  <changelog author="nopower@suse.com" date="1730376000">- Add placeholder changelog for sle15-sp7; (jsc#PED-11210).</changelog>
  <changelog author="nopower@suse.com" date="1732536000">- Update to 4.21.2
  * smbd fails to correctly check sharemode against OVERWRITE
    dispositions; (bso#15732).
  * Panic in close_directory; (bso#15754).
  * winexe no longer works with samba 4.21; (bso#15752).
  * protocol error - Unclear debug message "pad length mismatch"
    for invalid bind packet; (bso#14356).
  * NetrGetLogonCapabilities QueryLevel 2 needs to be
    implemented; (bso#15425).
  * gss_accept_sec_context() from Heimdal does not imply
    GSS_C_MUTUAL_FLAG with GSS_C_DCE_STYLE; (bso#15740).
  * winbindd should call process_set_title() for locator child;
    (bso#15749).
  * Update CTDB to track all TCP connections to public IP
    addresses; (bso#15320).</changelog>
  <changelog author="nopower@suse.com" date="1733486400">- Update shipped /etc/samba/smb.conf to point to smb.conf
  man page;(bsc#1233880).</changelog>
  <changelog author="nopower@suse.com" date="1736251200">- Update to 4.21.3
  * More possible replication loops against Azure AD;
    (bso#15701).
  * Compound rename from Mac clients can fail with
    NT_STATUS_INTERNAL_ERROR if the file has a lease;
    (bso#15697).
  * vfs crossrename seems not work correctly; (bso#15724).
  * After 'machine password timeout' /etc/krb5.keytab is not
    updated; (bso#6750).
  * Memory leak wbcCtxLookupSid; (bso#15771).
  * Fix heap-user-after-free with association groups;
    (bso#15765).
  * Segfault in vfs_btrfs; (bso#15758).
  * Avoid event failure race when disabling an event script;
    (bso#15755).</changelog>
  <changelog author="nopower@suse.com" date="1739966400">- Update to 4.21.4
  * Increasing slowness of sharesec performance with high number
    of registry shares; (bso#15780).
  * winbindd shows memleak in kerberos_decode_pac; (bso#15782).
  * Creation of GPOs applicable to more than one group is
    impossible with Samba 4.20.0 and later; (bso#15738).
  * Replace `crypt` module in
    python/samba/netcmd/user/readpasswords/common.py;
    (bso#15756).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * Spotlight search results don't show file size and creation
    date; (bso#15796).
  * General improvements for vfs_ceph_new module; (bso#15703).
  * net offlinejoin not working correctly; (bso#15777).
  * net ads create/join/winbind producing unix dysfunctional
    keytabs; (bso#15759).
  * Windows Explorer crashes on S-1-22-* Unix-SIDs when accessing
    security tab; (bso#14213).
  * The values from hresult_errstr_const and hresult_errstr are
    reversed in 4.20 and 4.21; (bso#15769).
  * Kerberos referral tickets are generated for principals in our
    domain if we have a trust to a top level domain; (bso#15778).
  * NETLOGON_NTLMV2_ENABLED is missing in the SamLogon*
    user_flags field; (bso#15783).
  * Regression: stack-use-after-return in crypt_as_best_we_can();
    (bso#15784).
  * libreplace:readline: gcc 15 complains about incompatible
    pointer types; (bso#15788).</changelog>
  <changelog author="nopower@suse.com" date="1743595200">- Update to 4.21.5
  * ldb index cache is too small on known large transactions
    (schemaupgrade, provision); (bso#15795).
  * Enable support for cephfs case insensitive behavior;
    (bso#15822).
  * Subnet based interfaces definition not listening on all
    covered IP addresses; (bso#15823).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727); (bsc#1238063).
  * Remove of file or directory not possible with vfs_acl_tdb;
    (bso#15791).
  * Unable to connect to CephFS subvolume shares with
    vfs_shadow_copy2; (bso#15797).
  * Add async io API from libcephfs to ceph_new VFS module;
    (bso#15810).
  * vfs_ceph_new module does not work with other modules for
    snapshot management; (bso#15818).
  * vfs_ceph_new: Add path based fallback for SMB_VFS_FCHOWN,
    SMB_VFS_FCHMOD and SMB_VFS_FNTIMES; (bso#15834).
  * Incorrect FSF address in ctdb pcp scripts; (bso#15820).
  * "samba-tool domain backup offline" hangs; (bso#15804).</changelog>
  <changelog author="nopower@suse.com" date="1748952000">- Update to 4.21.6
  * Running "gpo manage motd set" twice fails with backtrace;
    (bso#15774).
  * samba-tool gpo backup creates entity backups it can't read;
    (bso#15829).
  * gp_cert_auto_enroll_ext.py has problem unpacking GUIDs with
    prepended 0's; (bso#15839).
  * CVE-2025-0620 [SECURITY] smbd doesn't pick up group
    membership changes when re-authenticating an expired SMB
    session; (bso#15707), (bsc#1244136).
  * Deadlock between two smbd processes; (bso#15767).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727).
  * Wide link issue in samba 4.22; (bso#15841).
  * dcerpcd not able to bind to listening port; (bso#15851).
  * vfs_ceph_snapshots fails to list snapshots for entries at any
    level beyond share root; (bso#15819).
  * CTDB does not put nodes running NFS into grace on graceful
    shutdown; (bso#15858).</changelog>
  <changelog author="scabrero@suse.de" date="1751976000">- Update to 4.21.7
  * Windows security hardening locks out schannel'ed netlogon dc
    calls like netr_DsRGetDCName; (bsc#1246431); (bso#15876);
  * Trust domains are not created; (bso#15680);
  * Startup messages of rpc deamons fills /var/log/messages;
    (bso#15869);</changelog>
  <changelog author="nopower@suse.com" date="1757419200">- - Update to 4.21.8
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * getpwuid does not shift to new DC when current DC is down;
    (bso#15844).
  * Windows security hardening locks out schannel'ed netlogon dc
    calls like netr_DsRGetDCName; (bso#15876).
  * kinit command is failing with Missing cache Error;
    (bso#15840).
  * Figuring out the DC name from IP address fails and breaks
    fork_domain_child(); (bso#15891).
  * Delayed leader broadcast can block ctdb forever; (bso#15892).
  * 'net ads group' failed to list domain groups; (bso#15900).
  * Apparently there is a conflict between shadow_copy2 module
    and virusfilter (action quarantine); (bso#15663).
  * Fix handling of empty GPO link; (bso#15877).
  * SMB ACL inheritance doesn't work for files created;
    (bso#15880).</changelog>
  <changelog author="nopower@suse.com" date="1758628800">- CVE-2025-9640: fix vfs_streams_xattr uninitialized memory write;
  (bsc#1251279);(bso#15885).
- CVE-2025-10230: fix command Injection in WINS Server Hook Script;
  (bsc#1251280);(bso#15903).</changelog>
</package>
<package pkgid="410874095233c56a9aeece9c238e6f4780144057279cd4f6c586a8fc0ff218a4" name="libGLU1" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150200.10.3.1"/>
  <changelog author="coolo@suse.com" date="1347969600">- rename to glu and use "official" git snapshot</changelog>
  <changelog author="cfarrell@suse.com" date="1347969601">- license update: SUSE-SGI-FreeB-2.0
  SGI-FreeB-2.0 is MIT with an advertising clause at the bottom</changelog>
  <changelog author="sndirsch@suse.com" date="1348228800">- fixed and simplified BuildRequires</changelog>
  <changelog author="jengelh@inai.de" date="1350734400">- Add Obsoletes/Provides for Mesa-libGLU1
- Avoid running configure twice</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call</changelog>
  <changelog author="sndirsch@suse.com" date="1414411200">- fixed buildrequires: pkgconfig(dri) -&gt; pkgconfig(gl)
- added baselibs.conf as source to specfile</changelog>
  <changelog author="eich@suse.com" date="1468324800">- U_Add-D-N-DEBUG-to-CFLAGS-dependent-on-enable-debug.patch
  u_autoconf-Don-t-modify-CFLAGS-in-configure-scripts.patch
  Avoid debug messages being printed out at runtime (bsc#988411).</changelog>
  <changelog author="sndirsch@suse.com" date="1496059200">- includes everything needed for missing sle issue entries:
  fate #315643-315645, 319159-319161, 319618 (bsc#1041327)</changelog>
  <changelog author="sndirsch@suse.com" date="1578225600">- U_build-fix.patch
  * build fix for sle15-sp2 (bsc#1158161)</changelog>
  <changelog author="sndirsch@suse.com" date="1760616000">- added missing LICENSE file (bsc#1252149)
- fixed license string</changelog>
</package>
<package pkgid="0674258d521a1fb1c7e08d7166a470f656bd976b4b8809358f9c92070f6ad905" name="libHBAAPI2" arch="src">
  <version epoch="0" ver="2.2.10" rel="150000.3.3.1"/>
  <changelog author="hare@suse.de" date="1258372800">- Initial package (FATE#306854)</changelog>
  <changelog author="hare@suse.de" date="1264420800">- Add SNIA license (bnc#573450)</changelog>
  <changelog author="hare@suse.de" date="1278417600">- Build fixes for Factory.</changelog>
  <changelog author="coolo@suse.com" date="1321358400">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="cfarrell@suse.com" date="1332763200">- license update: SUSE-SNIA-1.1
  Use propriertary SUSE- prefix until upstream (spdx.org) accepts the
  license</changelog>
  <changelog author="jengelh@inai.de" date="1338292800">- Resolve failure to build package due to automake-1.12 warnings
  treated as errors</changelog>
  <changelog author="hare@suse.de" date="1386331200">- Update to v2.2.9
  * Automake fixes
  * Remove WIN32 defines
  * Build fixes
  * Move to open-fcoe.org
  * Prevent duplicate hba.con entries from loading
- Added patch libHBAAPI-Add-ldl-during-link.patch:
  Add '-ldl' to avoid build failures of dependent packages
- Removed patch libHBAAPI-makefile-fixup, obsolete
- Removed patch libHBAAPI-build-fixes, obsolete
- Removed patch hbaapi-automake.diff, obsolete</changelog>
  <changelog author="hare@suse.de" date="1438603200">- Update to v2.2.10 (FATE#318847)
  * Merge patch with upstream:
    + Remove libHBAAPI-Add-ldl-during-link.patch
  * Add new HBA_PORTSPEED definitions</changelog>
  <changelog author="pgajdos@suse.com" date="1762430400">- use %license tag for COPYING [bsc#1252158]</changelog>
</package>
<package pkgid="ebe87aad2d86c70e53baf704c48acf35eaece9b0aa2d24097900c8105a91c030" name="libHBAAPI2" arch="x86_64">
  <version epoch="0" ver="2.2.10" rel="150000.3.3.1"/>
  <changelog author="hare@suse.de" date="1258372800">- Initial package (FATE#306854)</changelog>
  <changelog author="hare@suse.de" date="1264420800">- Add SNIA license (bnc#573450)</changelog>
  <changelog author="hare@suse.de" date="1278417600">- Build fixes for Factory.</changelog>
  <changelog author="coolo@suse.com" date="1321358400">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="cfarrell@suse.com" date="1332763200">- license update: SUSE-SNIA-1.1
  Use propriertary SUSE- prefix until upstream (spdx.org) accepts the
  license</changelog>
  <changelog author="jengelh@inai.de" date="1338292800">- Resolve failure to build package due to automake-1.12 warnings
  treated as errors</changelog>
  <changelog author="hare@suse.de" date="1386331200">- Update to v2.2.9
  * Automake fixes
  * Remove WIN32 defines
  * Build fixes
  * Move to open-fcoe.org
  * Prevent duplicate hba.con entries from loading
- Added patch libHBAAPI-Add-ldl-during-link.patch:
  Add '-ldl' to avoid build failures of dependent packages
- Removed patch libHBAAPI-makefile-fixup, obsolete
- Removed patch libHBAAPI-build-fixes, obsolete
- Removed patch hbaapi-automake.diff, obsolete</changelog>
  <changelog author="hare@suse.de" date="1438603200">- Update to v2.2.10 (FATE#318847)
  * Merge patch with upstream:
    + Remove libHBAAPI-Add-ldl-during-link.patch
  * Add new HBA_PORTSPEED definitions</changelog>
  <changelog author="pgajdos@suse.com" date="1762430400">- use %license tag for COPYING [bsc#1252158]</changelog>
</package>
<package pkgid="11f36bcab0e0b7d79cdbfe9600578141aab758cb49a07720be0bee7ab975fd29" name="libLLVM19" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="150700.3.3.1"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="martin.liska@hey.com" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="msuchanek@suse.de" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="schwab@suse.de" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="ro@suse.de" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="998cb70e77623c4390553f73e0e82c1e0b53d69415de0cf8cefab5b366e6e406" name="libLLVM19" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="150700.3.6.1"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="martin.liska@hey.com" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="msuchanek@suse.de" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="schwab@suse.de" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="ro@suse.de" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="1d2bfa812888d2af4f2cb262bd0067aef41c9b3c80a5cd48408688fdd064b1f9" name="libLLVM19-32bit" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="150700.3.3.1"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="martin.liska@hey.com" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="msuchanek@suse.de" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="schwab@suse.de" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="ro@suse.de" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="c6652156007aa06c858eb12d9d821761d9e0de944d96ab1cd0285d2b39e64091" name="libLLVM19-32bit" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="150700.3.6.1"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="martin.liska@hey.com" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="msuchanek@suse.de" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="schwab@suse.de" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="ro@suse.de" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="cb0ca6c27d6104018992185f07c7c8362cbbee726b68af46e34fcc59ad214c16" name="libOSMesa-devel" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.5.1"/>
  <changelog author="sndirsch@suse.com" date="1730376000">- added -32bit package for Mesa-libva since it's needed by Steam;
  reported on packman ML:
  https://lists.links2linux.de/pipermail/packman/2024-October/017985.html</changelog>
  <changelog author="mrueckert@suse.de" date="1730376001">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
</package>
<package pkgid="835c22171603a40d08d2793eebf32a70dd5fe7a63daf0423425eeac190ded1bb" name="libOSMesa-devel" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.8.1"/>
  <changelog author="mrueckert@suse.de" date="1730376000">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
</package>
<package pkgid="2ed1cea920d27573427429790965e230a2d9c8265c59ca82cd4cd57a5633bd06" name="libOSMesa8" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.5.1"/>
  <changelog author="sndirsch@suse.com" date="1730376000">- added -32bit package for Mesa-libva since it's needed by Steam;
  reported on packman ML:
  https://lists.links2linux.de/pipermail/packman/2024-October/017985.html</changelog>
  <changelog author="mrueckert@suse.de" date="1730376001">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
</package>
<package pkgid="9d60bd99c4671afc0c43cf80df34e83906d372a47682ce1a2d6dc701bcad9f7f" name="libOSMesa8" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.8.1"/>
  <changelog author="mrueckert@suse.de" date="1730376000">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
</package>
<package pkgid="5d90a2ccb18d97838e965d6a856bae3d2527c9c19ef5122f594690797fb8af65" name="libOpenCL1" arch="x86_64">
  <version epoch="0" ver="2.3.1" rel="150100.8.19.1"/>
  <changelog author="sndirsch@suse.com" date="1547380800">- sle15/Leap15 and newer: switch to usage of update-alternatives,
  so the package no longer conflicts with nvidia packages
  (boo#1108304)</changelog>
  <changelog author="sndirsch@suse.com" date="1547467200">- limit usage of update-alernatives to sle15-sp1/Leap 15.1 and newer</changelog>
  <changelog author="mardnh@gmx.de" date="1547899200">- Add missing Requires(post): update-alternatives</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1565006400">- Update to version 2.2.12:
  * Switched khronos headers to OpenCL 2.2.
  * Added OpenCL 2.2 support.
- Update URL to GitHub repository since previous URL is not
  accessible anymore.
- Only suggest pocl instead of recommending it.
- Add check section.</changelog>
  <changelog author="tchvatal@suse.com" date="1582718400">- Remove condition for SLE11 build as it is unresolvable anyway
- Require update-alternatives only where really needed
- Require opencl-headers in the develpackage as otherwise all
  those that pull the devel would need to do it on their own.</changelog>
  <changelog author="meissner@suse.com" date="1590840000">- add baselibs.conf to build 32bit binaries for Wine (bsc#1172303)</changelog>
  <changelog author="dimstar@opensuse.org" date="1591185600">- Add ocl-icd-gcc10.patch: Fix build with gcc10 (boo#1172436).</changelog>
  <changelog author="sndirsch@suse.com" date="1592481600">- switch to /usr/etc/OpenCL/vendors for vendor specific .icd files
  (boo#1173005); currently I'm only aware of Mesa using it (taking
  care about adjusting this myself); NVIDIA is using its own
  libOpenCL ...</changelog>
  <changelog author="sndirsch@suse.com" date="1592913600">- switch from /usr/etc/OpenCL/vendors to /usr/share/OpenCL/vendors
  for vendor specific .icd files (boo#1173005)</changelog>
  <changelog author="sndirsch@suse.com" date="1598097600">- n_UsrShare.patch
  * first try /etc/OpenCL/vendors, then /usr/share/OpenCL/vendors
  (boo#1173005, comment#8)
- supersedes configure option --enable-custom-vendordir</changelog>
  <changelog author="sndirsch@suse.com" date="1598875200">- added patch markups to specfile for better documentation</changelog>
  <changelog author="mardnh@gmx.de" date="1603540800">- Update to version 2.2.13
  * Removed warnings and use uniform warning suppression
  * Switched Khornos Headers to OpenCL3.0
  * Added OpenCL 3.0 support
  * Fix warning in gcc10
  * Updated loader and headers to support
    clSetContextDestructorCallback.
  * Call clGetDeviceIDs directly through the dispatch table
- Drop patch:
  * ocl-icd-gcc10.patch (fixed upstream)</changelog>
  <changelog author="mardnh@gmx.de" date="1607774400">- Update to version 2.2.14
  * Added experimental support for layers</changelog>
  <changelog author="mardnh@gmx.de" date="1617192000">- Update to version 2.3.0
  * Change OCL_ICD_LAYERS to OPENCL_LAYERS to conform to
    upecification
  * Updated layer support around official CL/cl_layer.h
  * Updated OpenCL Headers
  * Fixed typo in manpage</changelog>
  <changelog author="christophe@krop.fr" date="1623758400">- Add upstream change to fix build:
  * 0001-Updated-to-support-latest-Khronos-headers.patch</changelog>
  <changelog author="meissner@suse.com" date="1629201600">- overwrite the libopenCL.so.1 link in %post of baselibs. (bsc#1189433)</changelog>
  <changelog author="mardnh@gmx.de" date="1629460800">- Update to version 2.3.1
  * Khronos Header Compatibility
- Remove patch (included upstream):
  * 0001-Updated-to-support-latest-Khronos-headers.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1684324800">- Fix build against recent opencl: pass
  - -enable-official-khronos-headers to configure.</changelog>
  <changelog author="sndirsch@suse.com" date="1731067200">- get rid of update-alternatives; it's no longer needed because with
  upcoming G06 production driver, the nvidia packages will rely on
  this implementation (JIRA#PED-11444)
- added conflicts to packages for legacy nvidia drivers (G04,G05)</changelog>
  <changelog author="sndirsch@suse.com" date="1731326400">- nvidia-compute-G06: fixed conflicts to nvidia-compute-G06;
  the requires to libOpenCL1 is already in since 550.120; so do
  the conflicts for anything &lt; 550.120 (boo#1233169)</changelog>
</package>
<package pkgid="4145f4c37705005b9734ea7a675959a3e447a2a39223e4de1490926a0954c3f9" name="libOpenCL1-32bit" arch="x86_64">
  <version epoch="0" ver="2.3.1" rel="150100.8.19.1"/>
  <changelog author="sndirsch@suse.com" date="1547380800">- sle15/Leap15 and newer: switch to usage of update-alternatives,
  so the package no longer conflicts with nvidia packages
  (boo#1108304)</changelog>
  <changelog author="sndirsch@suse.com" date="1547467200">- limit usage of update-alernatives to sle15-sp1/Leap 15.1 and newer</changelog>
  <changelog author="mardnh@gmx.de" date="1547899200">- Add missing Requires(post): update-alternatives</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1565006400">- Update to version 2.2.12:
  * Switched khronos headers to OpenCL 2.2.
  * Added OpenCL 2.2 support.
- Update URL to GitHub repository since previous URL is not
  accessible anymore.
- Only suggest pocl instead of recommending it.
- Add check section.</changelog>
  <changelog author="tchvatal@suse.com" date="1582718400">- Remove condition for SLE11 build as it is unresolvable anyway
- Require update-alternatives only where really needed
- Require opencl-headers in the develpackage as otherwise all
  those that pull the devel would need to do it on their own.</changelog>
  <changelog author="meissner@suse.com" date="1590840000">- add baselibs.conf to build 32bit binaries for Wine (bsc#1172303)</changelog>
  <changelog author="dimstar@opensuse.org" date="1591185600">- Add ocl-icd-gcc10.patch: Fix build with gcc10 (boo#1172436).</changelog>
  <changelog author="sndirsch@suse.com" date="1592481600">- switch to /usr/etc/OpenCL/vendors for vendor specific .icd files
  (boo#1173005); currently I'm only aware of Mesa using it (taking
  care about adjusting this myself); NVIDIA is using its own
  libOpenCL ...</changelog>
  <changelog author="sndirsch@suse.com" date="1592913600">- switch from /usr/etc/OpenCL/vendors to /usr/share/OpenCL/vendors
  for vendor specific .icd files (boo#1173005)</changelog>
  <changelog author="sndirsch@suse.com" date="1598097600">- n_UsrShare.patch
  * first try /etc/OpenCL/vendors, then /usr/share/OpenCL/vendors
  (boo#1173005, comment#8)
- supersedes configure option --enable-custom-vendordir</changelog>
  <changelog author="sndirsch@suse.com" date="1598875200">- added patch markups to specfile for better documentation</changelog>
  <changelog author="mardnh@gmx.de" date="1603540800">- Update to version 2.2.13
  * Removed warnings and use uniform warning suppression
  * Switched Khornos Headers to OpenCL3.0
  * Added OpenCL 3.0 support
  * Fix warning in gcc10
  * Updated loader and headers to support
    clSetContextDestructorCallback.
  * Call clGetDeviceIDs directly through the dispatch table
- Drop patch:
  * ocl-icd-gcc10.patch (fixed upstream)</changelog>
  <changelog author="mardnh@gmx.de" date="1607774400">- Update to version 2.2.14
  * Added experimental support for layers</changelog>
  <changelog author="mardnh@gmx.de" date="1617192000">- Update to version 2.3.0
  * Change OCL_ICD_LAYERS to OPENCL_LAYERS to conform to
    upecification
  * Updated layer support around official CL/cl_layer.h
  * Updated OpenCL Headers
  * Fixed typo in manpage</changelog>
  <changelog author="christophe@krop.fr" date="1623758400">- Add upstream change to fix build:
  * 0001-Updated-to-support-latest-Khronos-headers.patch</changelog>
  <changelog author="meissner@suse.com" date="1629201600">- overwrite the libopenCL.so.1 link in %post of baselibs. (bsc#1189433)</changelog>
  <changelog author="mardnh@gmx.de" date="1629460800">- Update to version 2.3.1
  * Khronos Header Compatibility
- Remove patch (included upstream):
  * 0001-Updated-to-support-latest-Khronos-headers.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1684324800">- Fix build against recent opencl: pass
  - -enable-official-khronos-headers to configure.</changelog>
  <changelog author="sndirsch@suse.com" date="1731067200">- get rid of update-alternatives; it's no longer needed because with
  upcoming G06 production driver, the nvidia packages will rely on
  this implementation (JIRA#PED-11444)
- added conflicts to packages for legacy nvidia drivers (G04,G05)</changelog>
  <changelog author="sndirsch@suse.com" date="1731326400">- nvidia-compute-G06: fixed conflicts to nvidia-compute-G06;
  the requires to libOpenCL1 is already in since 550.120; so do
  the conflicts for anything &lt; 550.120 (boo#1233169)</changelog>
</package>
<package pkgid="b51436271f0eb35e78e82cd83fb091d8a0ad6857e2f9d80fae3274a0017fb377" name="libQt5Concurrent-devel" arch="x86_64">
  <version epoch="0" ver="5.15.12+kde151" rel="150600.3.9.1"/>
  <changelog author="fvogt@suse.com" date="1678968000">- Update to version 5.15.8+kde183:
  * Add nullptr guard in QStyleSheetStyle::drawPrimitive(PE_PanelLineEdit)
  * QAbstractItemView: don't access invalid indexes on copy-key
  * Apply CVE-2023-24607-qtbase-5.15.diff (CVE-2023-24607,
    bsc#1209616)
  * QXcbConnection::getTimestamp: do not return stale timestamp
  * QToolButton: Elide text when constraints prevent from showing whole text
  * correctly set up ref counting in QThreadPool::tryStart(std::function)
  * Do not set Qt::ToolTip flag for QShapedPixmapWindow
  * Fix deletion order also for QImageReader/Writer::setDevice()
  * Fix deletion order in QImageReader/Writer destructors
  * QNetworkReply: Fix typos in the documentation
  * Doc: Fix typo in the online documentation template
  * Doc: Link to page documenting Qt trademarks in the copyright footer
  * [doc] Fix typo in QBuffer::setBuffer() description
  * qwindowsdrag: Fix typo in documentation
  * openglblacklists: Fix typo in description
  * qxcbscreen: Fix typo in documentation
  * Fix typos in SQL driver documentation
  * qxcbwindow.cpp: Fix sign-compare and another warnings
  * QToolButton: reimplement the fix for QTBUG-95255
  * QSysInfo::prettyProductName(): Add macOS Ventura product name
  * QSysInfo::prettyProductName(): add missing macOS product names
  * xcb: correctly disconnect xsettings callbacks
  * ibus: add SetCursorLocationRelative in InputContext.xml</changelog>
  <changelog author="fvogt@suse.com" date="1680523200">- Update to version 5.15.8+kde185:
  * QFSFileEngine: fix overflow bug when using lseek64
  * Add QImage null check when QOpenGLTexture converts
- Add patch to fix return key handling in QGroupBox on GNOME (bsc#1209364):
  * 0001-Revert-QGnomeTheme-Allow-Space-Return-Enter-and-Sele.patch
- Add patch to fix XInput2 events in big-endian X11 clients (bsc#1204883, QTBUG-105157):
  * big-endian-scroll.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1682078400">- Update to version 5.15.9+kde151, rebased upstream:
  * QCborValue: fix incorrect to{Array,Map} when the value is empty
  * QMargins: fix a missing "full stop" in the docs
  * QLibrary: restore translated string
  * QLibrary: fix possible arg() format clobbering
  * iOS: Use python3 for enumerating test target devices
  * Android: Treat ACTION_CANCEL as TouchCancelEvent
  * Doc: Fix broken formatting
  * QFileSystemEngine: fix potential formatting error
  * QString::asprintf: check that passing field widths as arguments works
  * Backport recent QFlags tests
  * network: Fix typos in documentation
  * Fix accuracy with screen composition
  * Doc: Update documentation for QElapsedTimer's in Windows
  * Document that QStandardPath::findExecutable works with absolute paths
  * macOS: Use native resize cursors for diagonal resize
  * Fix clipped glyphs in text rendering of QGraphicsTextItem
  * Change comparison data type to fix int overflow
  * Add missing Q_WEAK_OVERLOAD definition
  * Update QFileInfo docs to mention macOS aliases
  * Distinguish macOS aliases from normal symbolic links
  * Windows QPA: Fix frameless maximize on secondary screens
  * Rewrite tst_qdataurl as a data-driven test
  * Fix compilation for wasm
  * QIOSFileDialog/QIOSDocumentPickerController - handle dismissed view controller
  * Fix QDockWidget's dock area permissions after hovering
  * Fix C++20 ambiguous relational operators between QJsonValue{,Ref}
  * Android: make sure that orientationChange is reported after resize
  * Android: set all QScreen's geometry-related parameters together
  * Blacklist: test cases blacklisted in tst_QDBusConnection:
  * wasm:  fix issue with passing username/password to network request
  * macOS: Pass multi arch flags when linking qmake
  * QCocoaFileDialogHelper: Always enable symlinks and aliases to directories
  * Android: terminate argv passed to main() with nullptr
  * Update bundled libjpeg-turbo to version 2.1.3
  * ANGLE: Load the DirectX libraries from the system path directly
  * SQLite: Update SQLite to v3.37.2
  * Fix compiler warnings about unused parameters
  * Fix getsockopt option_value initial initialization
  * Http2: Fix redirect-handling
  * Android A11Y: Fix value rounding
  * Android A11Y: Announce value together with element name when focused
  * Android A11Y: handle valueChanged events
  * tst_QSystemSemaphore: give proper path to test-helper
  * QNX: Silence compiler warning by initializing variable
  * Update LICENSE.QT-LICENSE-AGREEMENT
  * winrt appxmanifest: Properly replace VCLibs version for newer MSVC versions
  * QAbstractSocket: Don't pretend pause and resume is a stack
  * Gui: test also depends for clipboard feature
  * QDesktopServices: deprecate destroying URL handlers w/o explicit unsetUrlHandler()
  * macOS: Respect QMAKE_APPLE_DEVICE_ARCHS when building qmake
  * HTTP: Make redirect response parsing more generic
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 20.04
  * Android A11Y: populate child elements when constructing node info
  * Fix issue where readyRead() could happen after disconnected()
  * QStringView: add missing constexpr so we can use is_constant_evaluated
  * Use Android's View.generateViewId() for generating ids for views/surfaces
  * Remove documentation of non-existing QAccessible state
  * Doc: Fix snippet to match actual QFileInfo behavior
  * Android: Re-focus focused accessibility node after orientation change
  * Android A11Y: execute C++ code on main Qt thread
  * Android: extract parentId for hidden object in advance
  * xcb: Show valuator atom names properly in categorized logging
  * Android: replace stacktrace with debug message in search for setService
  * Better document attaching a QFutureWatcher to a started QFuture
  * doc: Update GenericDataLocation location on iOS
  * BLACKLIST test_Gestures tests for RHEL-8.4
  * QPlainTestLogger: do not print "failure location" if there's no failure
  * QAbstractItemView: do not access invalid model indices (3/N)
  * Win32: always allow the event loop to be woken up by posted events
  * rhi: d3d11: Use __uuidof where we can
  * Don't QEXPECT_FAIL tst_QLineEdit::testQuickSelectionWithMouse on macOS ARM
  * Network: Emit authenticationRequired when using Ntlm
  * testlib: Disable window restoration on macOS in a non-persistent way
  * QAbstractItemView: do not access invalid model indices (2/N)
  * QAbstractItemView: do not access invalid model indices (1/N)
  * QAbstractItemView: code tidies
  * Update float16 part of TestLib selftest
  * QGuiApplication: constant-initialize lastCursorPosition
  * Blacklist tst_QFileSystemWatcher::signalsEmittedAfterFileMoved on all Windows versions
  * [Android]: Handle the screen name, modes and refreshRate properly
  * QVersionNumber: remove the "pure" attribute from commonPrefix()
  * QEvent: initialize the static userEventTypeRegistry constexprly
  * Let QXcbGlxWindow::createVisual fallback to QXcbWindow::createVisual
  * Android A11Y: fix content update notification when object is hidden
  * Android: explicitly remove accessibility focus when element is hidden
  * BLACKLIST tst_qfont for Red Hat 8.4 and Ubuntu 20.04
  * QtCore: includemocs
  * Fix memory leak in QtConcurrent::run when called with a NULL QThreadPool
  * INTEGRITY: Prevent deletion of virtual functions
  * QMake: replace a Q_ASSERT() with a Q_UNREACHABLE()
  * QTransform benchmark: measure what was promised
  * QStaticByteArrayMatcher: add a useful comment
  * QMacStyle: use the 'momentary push in' type for push buttons
  * qopengl.h: Move C header #include(s) out of the QT_NAMESPACE
  * Enable all supported 1.0 device features in QVulkanWindow
  * Fix queue passed to vkQueuePresent
  * QFusionStyle: don't draw an invalid outline for up/down buttons
  * Doc: Make QListIterator snippets more robust
  * QVersionNumber: don't detach() in rvalue QList/QVector ctor
  * QNetworkRequest: Document how Qt handles 301 and 302 status codes
  * Convert date-time to UTC before claiming it's in GMT
  * Remove execute permission from XML files
  * Add test case for style sheet selectors for enum properties
  * FreeType: allow falling back to synthesized bold if desired
  * Fix an assertion failure in massageAdjustedDateTime()
  * Relax tst_qvulkan::vulkanVersionRequest to make it compatible with 1.1
  * Doc: Replace "C:Documents and Settings" paths
  * QOrderedMutexLocker: fix compilation with C++11
  * QHttpNetworkConnection: Always set proxy settings to all channels
  * Add a markdown writer test for a checklist item ending with `code`
  * Use QTextCharFormat::fontFixedPitch to remember Markdown backtick spans
  * QWizardLayoutInfo: make == and != operators const
  * Revert "Android: Fix screen flicker issues"
  * macOS: Handle momentum scroll NSEventPhaseBegan when scroll had ended
  * SQLite: Update SQLite to v3.37.0
  * Update copyright year to 2022
  * QTzTimeZonePrivate: use ctor delegation instead of init()
  * QTzTimeZonePrivate: fix permanently-detaching m_icu
  * tst_QGraphicsView: fix memleak
  * Doc: Update external links to Qt Creator Manual
  * macOS: assume an unidentified tablet device is a stylus
  * tst_QItemModel: fix memleaks
  * tst_qanimationgroup: fix memleaks
  * QAbstractAnimation: add missing forward-declaration
  * [doc] QCoreApplication::installTranslator() doesn't take ownership
  * tst_qtranslator: fix memleak
  * QTestData: fix streaming of u8 string literals in C++20 mode
  * QThread/Unix: extract duplicate code
  * QWindowPrivate: fix inconsistent inline on some methods
  * tst_QStringList: check that join(u'0') embeds NULs
  * macOS: Sanitize scroll deltas for NSEventPhaseCancelled
  * tst_qsharedmemory: skip readOnly() test under asan
  * QXmlStreamReader: update test distribution
  * QZipReader: update to unzip partly broken archives
  * Deliver context menu event with correct coordinates to widgets in popups
  * QTextHtmlParser: fix prefix lookahead and html comments
  * QtConcurrent::run crashes on program exit
  * tst_QPropertyAnimation: fix leaks occurring under normal operation
  * tst_QPropertyAnimation: fix wrong comment
  * QLogging: fix potential missing NUL-terminator when calling OutputDebugString
  * Fix qt_scrollRectInImage when scrolling outside of the image
- Commits dropped by the rebase:
  * Fix compile with Qt5: Use QString::mid instead of QString::sliced
  * Restore C++11 compatibility after e8b9f4c28d3ab5e960dc54f2dc0c4b749b0b50e0
  * QDateTime: Don't require c++17</changelog>
  <changelog author="fvogt@suse.com" date="1683633600">- Amend patch to fix mouse grabbing as well (bsc#1211024):
  * big-endian-scroll.patch</changelog>
  <changelog author="fvogt@suse.com" date="1684929600">- Update to version 5.15.9+kde154:
  * Hsts: match header names case insensitively (CVE-2023-32762,
    QTBUG-113392, bsc#1211797)
  * Fix specific overflow in qtextlayout (CVE-2023-32763,
    QTBUG-113337, bsc#1211798)
  * QDnsLookup/Unix: make sure we don't overflow the buffer
    (CVE-2023-33285, boo#1211642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1686657600">- Update to version 5.15.10+kde129, rebased upstream:
  * Ssl: Copy the on-demand cert loading bool from default config
  * Schannel: Reject certificate not signed by a configured CA certificate (boo#1211994, CVE-2023-34410)
  * qnetworkreplyfileimpl_p.h: fix header guard name
  * Revert "Draw the cursor considering the descent is 0"
  * Use pkgconfig in order to find libproxy configuration
  * Upgrade PCRE2 to 10.40
  * Android A11Y: handle LocationChanged event only for focused element
  * Port binary JSON to new special integer bitfields
  * INTEGRITY: enable C99 globally
  * QObject: mark two error reporting functions COLD
  * Endian: Provide special integer bitfield unions
  * Android: set useLegacyPackaging to true in build.gradle
  * QWidgetTextControl: port to new-style connects (faster)
  * Sync qxmlstream.g with qxmlstreamparser_p.h [1/2]: switched lines
  * tst_QNetworkReply try stabilize autoDeleteReplies tests
  * Remove duplicated include for &lt;limits&gt;
  * Fix recursion crash when calling setStyleSheet with `qproperty-styleSheet`
  * qwindowsxpstyle: Fix typos in documentation
  * Correct prefix reported for end element in QXmlStreamReader
  * Android A11Y: Add supported role infos to A11yNodeInfo
  * Fix handling of DateTime values in QSettings
  * Fix off-by-one for "typically" lowest value INT_MIN
  * xml: Fix typos in documentation
  * QWindowsWindow: Fix typo in documentation
  * includemocs (updated script)
  * widgets: Fix typos in documentation
  * cocoa: Fix typo in debug messages
  * Only scroll QMenu when there is a valid active action
  * QTimer: Add note in documentation
  * Fix QListView assert when the last row is moved in IconMode
  * QFileDialog: Fix adding default suffix when file path contains dot
  * QLineEdit: account for the placeholderText when computing lineRect
  * QFileDialog::saveFileContent crashes on accept
  * QCompleter: QCompleter unexpectedly changes QLineEdit text
  * Fix build error on iOS with the configure option -qtnamespace
  * Draw the cursor considering the descent is 0
  * Remove pure-virtual-signals.h include from tst_moc.cpp
  * plugins: image formats - fix odr violation
  * dbus: Fix typos
  * qwindowsdialoghelpers: Fix typo in documentation
  * QTableView: Document the customizations applied to QHeaderView
  * Unicodetools: compile
  * eglfs_x11: Fix running flag linkage
  * qcompilerdetection.h: add Q_CC_{GNU,MSVC,CLANG}_ONLY macros
  * Fix CMake warning about "missing closing ' quote"
  * Fix alignment of next/prev links in offline style
  * QtDBus: includemocs
  * Image Plugins: includemocs(-ish)
  * QtGui: includemocs
  * QXcbNativeInterface: remove unused field m_sysTraySelectionAtom
  * Windows QPA: Fix slowdown with large table/tree views with accessibility
  * Macstyle: fix the text color on the disabled button
  * QMacStyle: fix tool buttons (in checked mode)
  * QTeamCityLogger: fix .arg() placeholder injection
  * QAbstractTestLogger: disable copying
  * Fix errorMessageFromComError()
  * QtNetwork: includemocs
  * AppleUnifiedLogger: Remove manually managed os_log_t cache
  * examples: add WindowStaysOnBottomHint into preview text
  * QSharedPointer: Use matching new/delete
  * QIbusPlatformInputContextPlugin: includemocs
  * QGtk3ThemePlugin: includemocs
  * QTuioTouchPlugin: includemocs
  * QtWidgets: includemocs v2022
  * QMYSQLDriverPlugin: includemocs
  * QtDeviceDiscoverySupportPrivate: includemocs
  * QLinuxFbIntegrationPlugin: includemocs
  * QtPrintSupport: includemocs
  * QSQLiteDriverPlugin: includemocs
  * QtFbSupportPrivate: includemocs
  * QXdgDesktopPortalThemePlugin: includemocs
  * QtTest: includemocs
  * QComposePlatformInputContextPlugin: includemocs
  * QtSql: includemocs
  * QVncIntegrationPlugin: includemocs
  * Fix backingstore fractional DPR glitches for widgets in child windows
  * Include &lt;limits&gt; where std::numeric_limits is used
  * QtInputSupportPrivate: includemocs
  * Document the default value of QSFPM::sortOrder()
  * Better document how to enable sorting in QSPFM
  * Correct documentation of INI format's loss of type information
  * Android: add missing properties in AndroidManifest.xml
  * Fix assertion failure when parsing a doubly-invalid date-time text
  * Windows QPA: Correct mistake when calculating minmaxinfo
  * Android: replace ndk.dir with android.ndkVersion in build.gradle
  * Android: remove the old copy of gradle.properties after reading it
  * CMake Android Support: Fix signing of APKs
  * Android: fix A11Y object description
  * macOS: Fix warning about comparing different types in QCocoaScreen::isOnline
  * Fix qmake build on FreeBSD
  * Update documentation of enum Qt::DockWidgetArea
  * xcb: recreate xcb window under some conditions
  * objc_namespace: Add support for universal binaries
  * objc_namespace: Fix misspelled argument for silencing output
  * objc_namespace: Update parsing logic to account for otool changes
  * Blacklist passwordAuth for Ubuntu 20.04
  * Android: wrap QAndroidInputContext's m_focusObject in a QPointer
  * Fix compilation with GCC 12 (and on Fedora 35 and newer)
  * Chip example: fix an accidental bool-&gt;int conversion when using PMF connections
  * qmake: Add support for C++23
  * Android: use BCP 47 tag to create a correct Locale for QTimeZone::displayName()
  * QDateTime: fix adjusted datetime handling
  * Fix crash in tst_qmltc_examples on Android
  * macOS: Remove dead code for focus ring handling in Mac style
  * Detach for colortransforms of indexed formats
  * tst_QTcpSocket::connectToHostError - handle possible timeouts
  * CoreText: Avoid populating font family aliases if family was populated
  * Graphicsview: Avoid background clearing glitches under fractional DPR
  * Windows QPA: Avoid slowdown with UI Automation name change notification
  * Windows QPA: Avoid sending accessibility notifications before activation
  * Windows: Fix potential crash when retrieving default printer
  * Make Ubuntu with its non-standard security level happy
  * Android: Blacklist failing tests on tst_QGraphicsProxyWidget
  * Update LA 4.4.1
  * iOS A11Y: Set more accessibilityTraits
  * QNX: Fix compiler warning by when FEATURE_clipboard is not enabled
  * Document that native file dialogs might not show a title
  * Doc: Remove mentionings of overflows from QElapsedTimer
  * QTextMarkdownImporter: don't apply text char format to list item block
- Commits dropped by the rebase:
  * QBuffer: add missing &lt;limits&gt; include
  * Fix developer build</changelog>
  <changelog author="gmbr3@opensuse.org" date="1687953600">- Change %_libqt5_libexecdir to %_libexecdir/qt5 (bsc#1174075)</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch icu-devel requires to pkgconfig to allow switching libicu
  versions</changelog>
  <changelog author="fvogt@suse.com" date="1695902401">- Update to version 5.15.10+kde159 (bsc#1214327, CVE-2023-37369):
  * Fix CVE-2023-43114
  * QMimeDatabase: fix detection of pattern conflict in different prefixes
  * Fix highdpi conversion of QTabletEvent coordinates on xcb
  * widget: set WA_X11NetWmWindowType* after xcb window was created
  * Fix crash when setting override cursor on multiple clients
  * QAccessibleWidget: Remove pointless ZWSP in warning message
  * Android A11Y: Fix deadlock in QtAndroidAccessibility::runInObjectContext()
  * Correctly parse non BMP char refs in the sax parser
  * Clear the _X version of alongside the enum deprecator
  * Fix UB (signed char passed to &lt;cctype&gt; function)
  * Qt3DRender: includemocs
  * Fix capitalization error in auto-generated qdbusmacros.h include
  * QColorDialog: Ignore mouse move events when no mouse button is pressed
  * QHostInfo: fix remaining slotObj leaks
  * QXmlStreamReader: Raise error on unexpected tokens (CVE-2023-38197,
    QTBUG-92113, QTBUG-95188, bsc#1213326)
  * QTextLayout: Reconsider cursor drawing on TextObject
  * Ensure consistent cursor width under fractional scaling
  * Fix QTextEdit cursor rectangle vertical positioning
  * Return 0 in QWindow::winId in case of failed platform window creation
  * Doc: note QWindow::winId() will cause platform window creation
  * QSslDiffieHellmanParameters: fix mem-leak
  * QHostInfo: fix leaking slot object
  * Make sure we don't count down past 0 QT_FATAL_CRITICALS
  * QLogging: DRY isFatal(QtMsgType)
  * tst_QXmlStream: remove unneeded _ba UDLs
  * Fix typo in QXmlStreamReader error message
  * QXmlStreamReader: make fastScanName() indicate parsing status to callers
  * QXmlStreamReader: change fastScanName() to take a Value*
  * Fix Croatia's currency
  * SSL: upgrade the default DH parameters</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1696593600">- Update to version 5.15.11+kde134, rebased upstream:
  * Revert "Windows QPA: Add support to UiaRaiseNotificationEvent()"
  * FileChooser portal: Make sure filter.name is not empty
  * QPersistentModelIndex: fix UB (op&lt; on unrelated pointers)
  * Avoid crash when keysymToQtKey(keysym, Qt::ControlModifier) is called
  * a11y atspi: translate coords for GetOffsetAtPoint the right way
  * a11y atspi: Take dialog into account as top-level window
  * a11y atspi: Fix incorrect use of x instead of y position
  * macOS: Handle asynchronous deminiaturizing of windows
  * QTranslator: generalize a UNIX-only path
  * iOS, input panel: be more careful before enabling QIOSKeyboardListener
  * Android: Fix flickering on window resize and show keyboard
  * Android A11Y: Check for active surface before calling into native code
  * xcb: Delete touch points without target windows
  * Blacklist 1 tests in tst_QDBusConnection on ubuntu-20.04
  * Fix CMake builds without ANDROID_SDK
  * Blacklist 2 tests in tst_Http2 on ubuntu-20.04
  * Blacklist 1 tests in tst_QSqlQuery on macos
  * Defer creating the special shaders in the texture blitter
  * tst_QSslSocket::serverCipherPreferencies - fix for OpenSSL v3
  * QTemporaryFile: document rename() differences from QFile
  * Doc: 3rd party: Fix reference to FreeType LICENSE.txt
  * Update bundled libjpeg-turbo to version 2.1.4
  * tst_QSsSocket: fix verifyClientCertificate with OpenSSL 3
  * tst_QSslSocket: regenerate certificate used for setLocalCertificateChain
  * tst_QSslSocket::protocolServerSide - make it work with OpenSSL v3
  * tst_QSslSocket::oldErrorsOnSocketReuse - make it work with OpenSSL v3
  * Update zconf.h prefixes to match zlib v1.2.12 update
  * xcb: fix D&amp;D in same xembed client
  * xcb: use global coordinates for position of D&amp;D for xembed client
  * Doc: Update QMetaType::metaObject() descriptions
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 22.04
  * BLACKLIST tst_qfont for Ubuntu 22.04
  * BLACKLIST tst_QMenuBar::check_menuPosition for Ubuntu 22.04
  * tst_QDtls::verifyClientCertficiate - update certs for OpenSSL v3
  * QSslCertificate::toText(): add a file to compare against
  * Fix the spelling of the word "combination"
  * tst_QSslCertificate::pkcs12 - skip the test if OpenSSL version &gt;= 3
  * Android A11Y: Fix TalkBack scrolling behavior
  * Android A11Y: Notify android about scroll events
  * QCocoaDrag: don't add pasteboard items with non-absolute URLs
  * QDirPrivate: pass input QList by cref
  * tst_qbytearray: remove qCompress_data for QT_NO_COMPRESS
  * QDeviceDiscoveryUDev: use NSDMI
  * QAuthenticator: Fix crash when using NTLM / Negotiate
  * Provide a native interface instance in minimal platform plugin
  * Android: document the supported clipboard mimetypes
  * Windows: Account for not finding child windows when calling ChildWindowFromPointEx
  * iOS: Send touch events asynchronously to avoid deadlocking UIKit event loop
  * Disable bitcode for iOS
  * macOS: Ignore deprecation for ReleaseIconRef
  * BLACKLIST tst_QApplication::sendEventsOnProcessEvents for Ubuntu 22.04
  * Convert Latin1 to UTF-16 before passing to ICU API
  * Doc: Remove repetition of word in text
  * eglfs: Fix screen cloning when atomic is enabled
  * Fix printing of dpr&gt;1 images on Windows
  * QHttp: Fix handling of redirect loaded from cache
  * Doc: Fix return type of QLEInteger/QBEInteger post-in/decrement ops
  * qmake: Fix installation of separate debug info for plugins
  * iOS: ensure we close inputpanel after clearing focusobject
  * Convert Latin1 to UTF-16 before passing to ICU API
  * qputenv: defend against non-NUL-terminated QByteArray values
  * QFontSubset: remove unused glyphName() overload
  * Statically assert that the __mips_dsp code is only active on 32-bit
  * QGtk3Theme: Ensure gtk uses the same windowing system as Qt
  * tst_QFocusFrame: fix -Wparantheses
  * Sync Vulkan device features between QVulkanWindow and QRhi
  * SQLite: Update SQLite to v3.39.2
  * Update freetype to 2.12.1
  * corelib: Fix typos in documentation
  * QAtomicInteger docs: mention bool and char8_t as 8-bit types
  * qgraphicsitem_cast: replace 0 with nullptr
  * Doc: Hide weak overload template magic from documentation
  * Revert "QDateTime: fix adjusted datetime handling"
  * Fix select handles disappears issues
  * tst_QSslKey: prepare for the migration to OpenSSL v3
  * tst_qnetworkreply: replace server.pem/key pair
  * Disable unit testing setting up QTcpServer on special Apple interfaces
  * qmake/msbuild: Turn off "use full paths in diagnostics" by default
  * qmake/msbuild: Support all /DEBUG:xxx linker options
  * qmake/msbuild: Support all /LTCG:xxx options
  * Android A11Y: Add content change type to content change event
  * Enabler for fractional scaling of text in Qt Quick
  * macOS: Override logical DPI to 72
  * Add QDom internalSubset implementation
  * Fix tst_AndroidAssets, broken by recent changes on assets load speed
  * Android: Improve loading speed of individual assets
  * Darwin: Replace deprecated symbol kIOMasterPortDefault with equivalent
  * macOS: Remove code for handling logical DPI changes
  * Fix an incorrect invocation of llvm-readobj
  * macOS: Ignore deprecation for kOnSystemDisk icon domain
  * Copy only files that belongs to QML module
  * Android: fix wrong position of cursor handle and editpopup menu in split screen
  * Doc: Document QML_IMPORTS_PATH and QMLPATHS
  * Add the missing RCC_DIR to '.qrc' paths when generating deployment settings
  * Android: Fix the offset of the EditPopupMenu
  * xcb: update xkb_state mask as much as possible
  * QDom: Stop treating non-BMP characters as invalid
  * Android 13: Fix warnings on starting an application
  * qxkbcommon: Map Super/Hyper to Meta early enough to have an effect
  * macOS: Ignore update requests for offline displays
  * macOS: Avoid recursively updating screens when window moves screen
  * qmake/MinGW: Install separate debug info of DLLs next to the DLL
  * QMainWindow: fix restoreState() for toolbars
  * Make two QDT benchmarks data-driven and add more rows
  * Fix doc and example of QLoggingCategory::installCategory()
  * qmake: Document Xcode behavior when bundling translation files
  * Android: Fix missing import
  * QByteArray: more GCC 12 -Werror=array-bound whack-a-mole
  * CMake: Fix android sdk version propagation
  * Restore C++20-deprecated mixed-enum bitwise operators
  * Android: Fix ANR when QtService and QtActivity load in same process
  * Fix restart QtActivity
  * QArrayData::data(): do type-punning via quintptr, not char *
  * QIOSTextResponder: recreate responder upon reset
  * QSslSocket: make it work with OpenSSL v3
  * QFileSystemModelPrivate: de-inline ctor and dtor
  * Network: update Public Suffix List
  * macOS: Ensure proper quoting when calling otool in objc_namespace script
  * QKeySequence: Fix the one-off error in the mac glyph array size
- Commits dropped by the rebase:
  * Apply CVE-2022-27404-27405-27406-qtbase-5.15.diff
  * QArrayData: fix UB via reinterpret_cast (crash with FORTIFY_SOURCE=3)
  * Adapt for q_EVP_PKEY_base_id → q_EVP_PKEY_get_base_id rename in OpenSSL 3
  * Don't use a deprecated function if built/linked with OpenSSL v3</changelog>
  <changelog author="christophe@krop.fr" date="1696593601">- Enable the experimental native painting feature to improve
  remote desktop performances (boo#1214915)
  exporting QT_XCB_NATIVE_PAINTING is required to use the feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1697716800">- Update to version 5.15.11+kde138:
  * QLibraryPrivate: Actually merge load hints
  * QPluginLoader: report the right load hints
  * xkb: fix build with libxkbcommon 1.6.0 and later
  * a11y atspi: Map ButtonMenu role to AT-SPI equivalent</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1703851200">- Update to version 5.15.12+kde144, rebased upstream:
  * QMimeDatabase: handle buggy type definitions with circular inheritance
  * xcb: only set base size when it's valid
  * QPixmapCache: fix leaking of QStrings and Keys on clear()
  * OpenFile portal: do not use O_PATH fds
  * QSystemTrayIcon: properly disconnect old menu in setContextMenu()
  * Guard QTabBar against nested event processing during moving tabs
  * QDial: don't crash when min==max and setting a value != min &amp; max
  * QStandardItemModel: don't leak in mimeData()
  * SQL/MySQL: properly initialize variable
  * QWidgetTextControl: ignore invalid input method event
  * Update the LGPL license header
  * SQL/MySQL: fix handling of json column
  * Remove QMAKE_RANLIB and QMAKE_LINK_SHLIB from android/default_pre.prf
  * macOS: Fix less common writing systems on Catalina and later
  * Blacklist 1 tests in tst_QFtp on ubuntu-20.04
  * Update bundled libpng to version 1.6.39
  * Android: Fix signing of APKs that are generated when an AAB is also built
  * Update bundled zlib to version 1.2.13
  * doc: update the limitation of QSystemTrayIcon on X11
  * Blacklist 1 tests in tst_QTimer on ubuntu-20.04
  * Add benchmarks for QLocale number parsing
  * Add benchmarks for QString number parsing
  * Android: Fix incorrect fullscreen dimensions
  * Gtk3Theme: set XCURSOR_SIZE and XCURSOR_THEME for wayland sessions
  * xcb: Flush Display when processing xcb events
  * xcb: Add xlib wrapper for XFlush()
  * QHostAddress: Fix incorrect comparison against 'Any'
  * QSsl[OpenSSL/Android]: Fix hardcoded 1_1 suffix
  * BLACKLIST: tst_QApplication::sendEventsOnProcessEvents for RHEL 9.0
  * QMacStyle: do not set white color for grayed out button
  * Work round macOS's omission of en_DE from its own uiLanguages()
  * Suppress a deprecation warning in tst_QDateTime::toString_enumformat()
  * QJsonValue: fix incorrect to{Array,Object} when the value is empty
  * QGtk3Dialog: remove the #include for empty moc
  * Remove unneeded QWindow from QGtk3Dialog
  * tst_QSslSocket: Delete sslOptions
  * tst_QSslServer: Make the in-process server use TLS1.2
  * Android: fix Gradle warning about using enableUncompressedNativeLibs
  * Mention  limitation of QDir::drives() on Windows
  * QFileSystemEngine/Win: fix incorrect buffer size in currentPath()
  * Android: properly retrieve mime type of uri to for openUrl()
  * Android: Fix clipboard issue with urls
  * Android: Add a way to disable accessibility via an environment var
  * Update bundled libpng to version 1.6.38
  * QIOSMessageDialog::exec - work around 'windowsless' exec
  * QIosScreen: retain the right window
  * tst_Q{BitArray,ContiguousCache}: check not only count(), but size(), too
  * QIosTextResponder: stop using deprecated constants and type
  * qcompilerdetection.h: detect Coverity
  * Android: Fix Display.getRealMetrics deprecation
  * Fix broken Text rendering when noantialiased NativeRendering is used
  * forkfd: fix Clang 15 ATOMIC_VAR_INIT deprecation warning
  * eglfs: Add env.var. to disable the dedicated drmHandleEvent thread
  * doc: Don't put strings into QVector&lt;double&gt;
  * Remove focusProxyAndInputMethods from tst_QWidget
  * Bump version to 5.15.12
  * Update documentation of qWaitForWindowActive / qWaitForWindowExposed
  * QtHttp: Lower the severity of some log output
  * StyleSheetStyle: Fix color of placeholder texts in text edits
  * Android: Fix flickering on split screen mode
  * Update url to IAccessible2 Specification</changelog>
  <changelog author="alarrosa@suse.com" date="1704283200">- Update to version 5.15.12+kde147:
  * Http2: fix potential overflow in assemble_hpack_block()
    (bsc#1218413, CVE-2023-51714)
  * HPack: fix incorrect integer overflow check
  * HPack: fix a Yoda Condition</changelog>
  <changelog author="fvogt@suse.com" date="1708084800">- Update to version 5.15.12+kde151:
  * Improve KTX file reading memory safety (CVE-2024-25580, boo#1219996)
  * Revert "xcb: only set base size when it's valid"
  * Fix potential leak of QPropertyAnimation in QLineEditIconButton
  * QBitArray: correct inline keyword</changelog>
  <changelog author="alarrosa@suse.com" date="1720785600">- Add patch from upstream to fix a regression in the ODBC driver
  (bsc#1227513, QTBUG-112375):
  * 0001-QSQL-ODBC-fix-regression-trailing-NUL.patch
  * 0002-SQL-ODBC-Pass-correct-length-to-SQLColAttribute.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1722945600">- Add rebased upstream patch to delay any HTTP2 communication until
  encrypted() can be responded to (bsc#1227426, CVE-2024-39936):
  * 0001-HTTP2-Delay-any-communication-until-encrypted-can-be.patch
- Add upstream patch to fix a NULL pointer dereference via the
  function QXcbConnection::initializeAllAtoms() when there is
  anomalous behavior from the X server (bsc#1222120,
  CVE-2023-45935):
  * 0001-xcb-guard-a-pointer-before-usage.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756728000">- Add patch from upstream to fix a precondition violation in call
  to QByteArrayView::at() which can cause crashes (bsc#1243958,
  CVE-2025-5455):
  * 0001-qDecodeDataUrl-fix-precondition-violation-in-call-to.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756814400">- Add patch from upstream to initialize a member variable that was
  uninitialized under some circumstances:
  * 0001-QObjectPrivateSignal-initialize-all-members.patch
- Add patch from upstream to fix a crash when parsing a particular
  glyph in a particular font (QTBUG-124310):
  * 0001-Avoid-crash-in-font-distancefield-computation.patch
  * 0002-Fix-crash-in-font-distancefield-computation.patch
- Add patch from upstream to fix avoid repeatedly registering
  xsettings callbacks when switching cursor themes:
  * 0001-xcb-Avoid-repeatedly-registering-xsettings-callbacks-When.patch
- Add patch from upstream to check validity of RandR output info
  before using it (QTBUG-128906):
  * 0001-xcb-check-validity-of-RandR-output-info-before-using-it.patch
- Add patch from upstream to fix reparenting a window so it takes
  effect even if there are no other state changes to the window:
  * 0001-xcb-Sync-XCB-connection-after-reparenting-window.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756900800">- Add patch from upstream to fix a low performance when processing
  XML data in encodeText (bsc#1239896, CVE-2025-30348):
  * 0001-XML_QDom-speedup-encodeText.patch</changelog>
</package>
<package pkgid="f905bff6a961909c8b91a91d16db66ee118f0bc3289258478efc9f3532f1d701" name="libQt5Concurrent5" arch="x86_64">
  <version epoch="0" ver="5.15.12+kde151" rel="150600.3.9.1"/>
  <changelog author="fvogt@suse.com" date="1678968000">- Update to version 5.15.8+kde183:
  * Add nullptr guard in QStyleSheetStyle::drawPrimitive(PE_PanelLineEdit)
  * QAbstractItemView: don't access invalid indexes on copy-key
  * Apply CVE-2023-24607-qtbase-5.15.diff (CVE-2023-24607,
    bsc#1209616)
  * QXcbConnection::getTimestamp: do not return stale timestamp
  * QToolButton: Elide text when constraints prevent from showing whole text
  * correctly set up ref counting in QThreadPool::tryStart(std::function)
  * Do not set Qt::ToolTip flag for QShapedPixmapWindow
  * Fix deletion order also for QImageReader/Writer::setDevice()
  * Fix deletion order in QImageReader/Writer destructors
  * QNetworkReply: Fix typos in the documentation
  * Doc: Fix typo in the online documentation template
  * Doc: Link to page documenting Qt trademarks in the copyright footer
  * [doc] Fix typo in QBuffer::setBuffer() description
  * qwindowsdrag: Fix typo in documentation
  * openglblacklists: Fix typo in description
  * qxcbscreen: Fix typo in documentation
  * Fix typos in SQL driver documentation
  * qxcbwindow.cpp: Fix sign-compare and another warnings
  * QToolButton: reimplement the fix for QTBUG-95255
  * QSysInfo::prettyProductName(): Add macOS Ventura product name
  * QSysInfo::prettyProductName(): add missing macOS product names
  * xcb: correctly disconnect xsettings callbacks
  * ibus: add SetCursorLocationRelative in InputContext.xml</changelog>
  <changelog author="fvogt@suse.com" date="1680523200">- Update to version 5.15.8+kde185:
  * QFSFileEngine: fix overflow bug when using lseek64
  * Add QImage null check when QOpenGLTexture converts
- Add patch to fix return key handling in QGroupBox on GNOME (bsc#1209364):
  * 0001-Revert-QGnomeTheme-Allow-Space-Return-Enter-and-Sele.patch
- Add patch to fix XInput2 events in big-endian X11 clients (bsc#1204883, QTBUG-105157):
  * big-endian-scroll.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1682078400">- Update to version 5.15.9+kde151, rebased upstream:
  * QCborValue: fix incorrect to{Array,Map} when the value is empty
  * QMargins: fix a missing "full stop" in the docs
  * QLibrary: restore translated string
  * QLibrary: fix possible arg() format clobbering
  * iOS: Use python3 for enumerating test target devices
  * Android: Treat ACTION_CANCEL as TouchCancelEvent
  * Doc: Fix broken formatting
  * QFileSystemEngine: fix potential formatting error
  * QString::asprintf: check that passing field widths as arguments works
  * Backport recent QFlags tests
  * network: Fix typos in documentation
  * Fix accuracy with screen composition
  * Doc: Update documentation for QElapsedTimer's in Windows
  * Document that QStandardPath::findExecutable works with absolute paths
  * macOS: Use native resize cursors for diagonal resize
  * Fix clipped glyphs in text rendering of QGraphicsTextItem
  * Change comparison data type to fix int overflow
  * Add missing Q_WEAK_OVERLOAD definition
  * Update QFileInfo docs to mention macOS aliases
  * Distinguish macOS aliases from normal symbolic links
  * Windows QPA: Fix frameless maximize on secondary screens
  * Rewrite tst_qdataurl as a data-driven test
  * Fix compilation for wasm
  * QIOSFileDialog/QIOSDocumentPickerController - handle dismissed view controller
  * Fix QDockWidget's dock area permissions after hovering
  * Fix C++20 ambiguous relational operators between QJsonValue{,Ref}
  * Android: make sure that orientationChange is reported after resize
  * Android: set all QScreen's geometry-related parameters together
  * Blacklist: test cases blacklisted in tst_QDBusConnection:
  * wasm:  fix issue with passing username/password to network request
  * macOS: Pass multi arch flags when linking qmake
  * QCocoaFileDialogHelper: Always enable symlinks and aliases to directories
  * Android: terminate argv passed to main() with nullptr
  * Update bundled libjpeg-turbo to version 2.1.3
  * ANGLE: Load the DirectX libraries from the system path directly
  * SQLite: Update SQLite to v3.37.2
  * Fix compiler warnings about unused parameters
  * Fix getsockopt option_value initial initialization
  * Http2: Fix redirect-handling
  * Android A11Y: Fix value rounding
  * Android A11Y: Announce value together with element name when focused
  * Android A11Y: handle valueChanged events
  * tst_QSystemSemaphore: give proper path to test-helper
  * QNX: Silence compiler warning by initializing variable
  * Update LICENSE.QT-LICENSE-AGREEMENT
  * winrt appxmanifest: Properly replace VCLibs version for newer MSVC versions
  * QAbstractSocket: Don't pretend pause and resume is a stack
  * Gui: test also depends for clipboard feature
  * QDesktopServices: deprecate destroying URL handlers w/o explicit unsetUrlHandler()
  * macOS: Respect QMAKE_APPLE_DEVICE_ARCHS when building qmake
  * HTTP: Make redirect response parsing more generic
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 20.04
  * Android A11Y: populate child elements when constructing node info
  * Fix issue where readyRead() could happen after disconnected()
  * QStringView: add missing constexpr so we can use is_constant_evaluated
  * Use Android's View.generateViewId() for generating ids for views/surfaces
  * Remove documentation of non-existing QAccessible state
  * Doc: Fix snippet to match actual QFileInfo behavior
  * Android: Re-focus focused accessibility node after orientation change
  * Android A11Y: execute C++ code on main Qt thread
  * Android: extract parentId for hidden object in advance
  * xcb: Show valuator atom names properly in categorized logging
  * Android: replace stacktrace with debug message in search for setService
  * Better document attaching a QFutureWatcher to a started QFuture
  * doc: Update GenericDataLocation location on iOS
  * BLACKLIST test_Gestures tests for RHEL-8.4
  * QPlainTestLogger: do not print "failure location" if there's no failure
  * QAbstractItemView: do not access invalid model indices (3/N)
  * Win32: always allow the event loop to be woken up by posted events
  * rhi: d3d11: Use __uuidof where we can
  * Don't QEXPECT_FAIL tst_QLineEdit::testQuickSelectionWithMouse on macOS ARM
  * Network: Emit authenticationRequired when using Ntlm
  * testlib: Disable window restoration on macOS in a non-persistent way
  * QAbstractItemView: do not access invalid model indices (2/N)
  * QAbstractItemView: do not access invalid model indices (1/N)
  * QAbstractItemView: code tidies
  * Update float16 part of TestLib selftest
  * QGuiApplication: constant-initialize lastCursorPosition
  * Blacklist tst_QFileSystemWatcher::signalsEmittedAfterFileMoved on all Windows versions
  * [Android]: Handle the screen name, modes and refreshRate properly
  * QVersionNumber: remove the "pure" attribute from commonPrefix()
  * QEvent: initialize the static userEventTypeRegistry constexprly
  * Let QXcbGlxWindow::createVisual fallback to QXcbWindow::createVisual
  * Android A11Y: fix content update notification when object is hidden
  * Android: explicitly remove accessibility focus when element is hidden
  * BLACKLIST tst_qfont for Red Hat 8.4 and Ubuntu 20.04
  * QtCore: includemocs
  * Fix memory leak in QtConcurrent::run when called with a NULL QThreadPool
  * INTEGRITY: Prevent deletion of virtual functions
  * QMake: replace a Q_ASSERT() with a Q_UNREACHABLE()
  * QTransform benchmark: measure what was promised
  * QStaticByteArrayMatcher: add a useful comment
  * QMacStyle: use the 'momentary push in' type for push buttons
  * qopengl.h: Move C header #include(s) out of the QT_NAMESPACE
  * Enable all supported 1.0 device features in QVulkanWindow
  * Fix queue passed to vkQueuePresent
  * QFusionStyle: don't draw an invalid outline for up/down buttons
  * Doc: Make QListIterator snippets more robust
  * QVersionNumber: don't detach() in rvalue QList/QVector ctor
  * QNetworkRequest: Document how Qt handles 301 and 302 status codes
  * Convert date-time to UTC before claiming it's in GMT
  * Remove execute permission from XML files
  * Add test case for style sheet selectors for enum properties
  * FreeType: allow falling back to synthesized bold if desired
  * Fix an assertion failure in massageAdjustedDateTime()
  * Relax tst_qvulkan::vulkanVersionRequest to make it compatible with 1.1
  * Doc: Replace "C:Documents and Settings" paths
  * QOrderedMutexLocker: fix compilation with C++11
  * QHttpNetworkConnection: Always set proxy settings to all channels
  * Add a markdown writer test for a checklist item ending with `code`
  * Use QTextCharFormat::fontFixedPitch to remember Markdown backtick spans
  * QWizardLayoutInfo: make == and != operators const
  * Revert "Android: Fix screen flicker issues"
  * macOS: Handle momentum scroll NSEventPhaseBegan when scroll had ended
  * SQLite: Update SQLite to v3.37.0
  * Update copyright year to 2022
  * QTzTimeZonePrivate: use ctor delegation instead of init()
  * QTzTimeZonePrivate: fix permanently-detaching m_icu
  * tst_QGraphicsView: fix memleak
  * Doc: Update external links to Qt Creator Manual
  * macOS: assume an unidentified tablet device is a stylus
  * tst_QItemModel: fix memleaks
  * tst_qanimationgroup: fix memleaks
  * QAbstractAnimation: add missing forward-declaration
  * [doc] QCoreApplication::installTranslator() doesn't take ownership
  * tst_qtranslator: fix memleak
  * QTestData: fix streaming of u8 string literals in C++20 mode
  * QThread/Unix: extract duplicate code
  * QWindowPrivate: fix inconsistent inline on some methods
  * tst_QStringList: check that join(u'0') embeds NULs
  * macOS: Sanitize scroll deltas for NSEventPhaseCancelled
  * tst_qsharedmemory: skip readOnly() test under asan
  * QXmlStreamReader: update test distribution
  * QZipReader: update to unzip partly broken archives
  * Deliver context menu event with correct coordinates to widgets in popups
  * QTextHtmlParser: fix prefix lookahead and html comments
  * QtConcurrent::run crashes on program exit
  * tst_QPropertyAnimation: fix leaks occurring under normal operation
  * tst_QPropertyAnimation: fix wrong comment
  * QLogging: fix potential missing NUL-terminator when calling OutputDebugString
  * Fix qt_scrollRectInImage when scrolling outside of the image
- Commits dropped by the rebase:
  * Fix compile with Qt5: Use QString::mid instead of QString::sliced
  * Restore C++11 compatibility after e8b9f4c28d3ab5e960dc54f2dc0c4b749b0b50e0
  * QDateTime: Don't require c++17</changelog>
  <changelog author="fvogt@suse.com" date="1683633600">- Amend patch to fix mouse grabbing as well (bsc#1211024):
  * big-endian-scroll.patch</changelog>
  <changelog author="fvogt@suse.com" date="1684929600">- Update to version 5.15.9+kde154:
  * Hsts: match header names case insensitively (CVE-2023-32762,
    QTBUG-113392, bsc#1211797)
  * Fix specific overflow in qtextlayout (CVE-2023-32763,
    QTBUG-113337, bsc#1211798)
  * QDnsLookup/Unix: make sure we don't overflow the buffer
    (CVE-2023-33285, boo#1211642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1686657600">- Update to version 5.15.10+kde129, rebased upstream:
  * Ssl: Copy the on-demand cert loading bool from default config
  * Schannel: Reject certificate not signed by a configured CA certificate (boo#1211994, CVE-2023-34410)
  * qnetworkreplyfileimpl_p.h: fix header guard name
  * Revert "Draw the cursor considering the descent is 0"
  * Use pkgconfig in order to find libproxy configuration
  * Upgrade PCRE2 to 10.40
  * Android A11Y: handle LocationChanged event only for focused element
  * Port binary JSON to new special integer bitfields
  * INTEGRITY: enable C99 globally
  * QObject: mark two error reporting functions COLD
  * Endian: Provide special integer bitfield unions
  * Android: set useLegacyPackaging to true in build.gradle
  * QWidgetTextControl: port to new-style connects (faster)
  * Sync qxmlstream.g with qxmlstreamparser_p.h [1/2]: switched lines
  * tst_QNetworkReply try stabilize autoDeleteReplies tests
  * Remove duplicated include for &lt;limits&gt;
  * Fix recursion crash when calling setStyleSheet with `qproperty-styleSheet`
  * qwindowsxpstyle: Fix typos in documentation
  * Correct prefix reported for end element in QXmlStreamReader
  * Android A11Y: Add supported role infos to A11yNodeInfo
  * Fix handling of DateTime values in QSettings
  * Fix off-by-one for "typically" lowest value INT_MIN
  * xml: Fix typos in documentation
  * QWindowsWindow: Fix typo in documentation
  * includemocs (updated script)
  * widgets: Fix typos in documentation
  * cocoa: Fix typo in debug messages
  * Only scroll QMenu when there is a valid active action
  * QTimer: Add note in documentation
  * Fix QListView assert when the last row is moved in IconMode
  * QFileDialog: Fix adding default suffix when file path contains dot
  * QLineEdit: account for the placeholderText when computing lineRect
  * QFileDialog::saveFileContent crashes on accept
  * QCompleter: QCompleter unexpectedly changes QLineEdit text
  * Fix build error on iOS with the configure option -qtnamespace
  * Draw the cursor considering the descent is 0
  * Remove pure-virtual-signals.h include from tst_moc.cpp
  * plugins: image formats - fix odr violation
  * dbus: Fix typos
  * qwindowsdialoghelpers: Fix typo in documentation
  * QTableView: Document the customizations applied to QHeaderView
  * Unicodetools: compile
  * eglfs_x11: Fix running flag linkage
  * qcompilerdetection.h: add Q_CC_{GNU,MSVC,CLANG}_ONLY macros
  * Fix CMake warning about "missing closing ' quote"
  * Fix alignment of next/prev links in offline style
  * QtDBus: includemocs
  * Image Plugins: includemocs(-ish)
  * QtGui: includemocs
  * QXcbNativeInterface: remove unused field m_sysTraySelectionAtom
  * Windows QPA: Fix slowdown with large table/tree views with accessibility
  * Macstyle: fix the text color on the disabled button
  * QMacStyle: fix tool buttons (in checked mode)
  * QTeamCityLogger: fix .arg() placeholder injection
  * QAbstractTestLogger: disable copying
  * Fix errorMessageFromComError()
  * QtNetwork: includemocs
  * AppleUnifiedLogger: Remove manually managed os_log_t cache
  * examples: add WindowStaysOnBottomHint into preview text
  * QSharedPointer: Use matching new/delete
  * QIbusPlatformInputContextPlugin: includemocs
  * QGtk3ThemePlugin: includemocs
  * QTuioTouchPlugin: includemocs
  * QtWidgets: includemocs v2022
  * QMYSQLDriverPlugin: includemocs
  * QtDeviceDiscoverySupportPrivate: includemocs
  * QLinuxFbIntegrationPlugin: includemocs
  * QtPrintSupport: includemocs
  * QSQLiteDriverPlugin: includemocs
  * QtFbSupportPrivate: includemocs
  * QXdgDesktopPortalThemePlugin: includemocs
  * QtTest: includemocs
  * QComposePlatformInputContextPlugin: includemocs
  * QtSql: includemocs
  * QVncIntegrationPlugin: includemocs
  * Fix backingstore fractional DPR glitches for widgets in child windows
  * Include &lt;limits&gt; where std::numeric_limits is used
  * QtInputSupportPrivate: includemocs
  * Document the default value of QSFPM::sortOrder()
  * Better document how to enable sorting in QSPFM
  * Correct documentation of INI format's loss of type information
  * Android: add missing properties in AndroidManifest.xml
  * Fix assertion failure when parsing a doubly-invalid date-time text
  * Windows QPA: Correct mistake when calculating minmaxinfo
  * Android: replace ndk.dir with android.ndkVersion in build.gradle
  * Android: remove the old copy of gradle.properties after reading it
  * CMake Android Support: Fix signing of APKs
  * Android: fix A11Y object description
  * macOS: Fix warning about comparing different types in QCocoaScreen::isOnline
  * Fix qmake build on FreeBSD
  * Update documentation of enum Qt::DockWidgetArea
  * xcb: recreate xcb window under some conditions
  * objc_namespace: Add support for universal binaries
  * objc_namespace: Fix misspelled argument for silencing output
  * objc_namespace: Update parsing logic to account for otool changes
  * Blacklist passwordAuth for Ubuntu 20.04
  * Android: wrap QAndroidInputContext's m_focusObject in a QPointer
  * Fix compilation with GCC 12 (and on Fedora 35 and newer)
  * Chip example: fix an accidental bool-&gt;int conversion when using PMF connections
  * qmake: Add support for C++23
  * Android: use BCP 47 tag to create a correct Locale for QTimeZone::displayName()
  * QDateTime: fix adjusted datetime handling
  * Fix crash in tst_qmltc_examples on Android
  * macOS: Remove dead code for focus ring handling in Mac style
  * Detach for colortransforms of indexed formats
  * tst_QTcpSocket::connectToHostError - handle possible timeouts
  * CoreText: Avoid populating font family aliases if family was populated
  * Graphicsview: Avoid background clearing glitches under fractional DPR
  * Windows QPA: Avoid slowdown with UI Automation name change notification
  * Windows QPA: Avoid sending accessibility notifications before activation
  * Windows: Fix potential crash when retrieving default printer
  * Make Ubuntu with its non-standard security level happy
  * Android: Blacklist failing tests on tst_QGraphicsProxyWidget
  * Update LA 4.4.1
  * iOS A11Y: Set more accessibilityTraits
  * QNX: Fix compiler warning by when FEATURE_clipboard is not enabled
  * Document that native file dialogs might not show a title
  * Doc: Remove mentionings of overflows from QElapsedTimer
  * QTextMarkdownImporter: don't apply text char format to list item block
- Commits dropped by the rebase:
  * QBuffer: add missing &lt;limits&gt; include
  * Fix developer build</changelog>
  <changelog author="gmbr3@opensuse.org" date="1687953600">- Change %_libqt5_libexecdir to %_libexecdir/qt5 (bsc#1174075)</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch icu-devel requires to pkgconfig to allow switching libicu
  versions</changelog>
  <changelog author="fvogt@suse.com" date="1695902401">- Update to version 5.15.10+kde159 (bsc#1214327, CVE-2023-37369):
  * Fix CVE-2023-43114
  * QMimeDatabase: fix detection of pattern conflict in different prefixes
  * Fix highdpi conversion of QTabletEvent coordinates on xcb
  * widget: set WA_X11NetWmWindowType* after xcb window was created
  * Fix crash when setting override cursor on multiple clients
  * QAccessibleWidget: Remove pointless ZWSP in warning message
  * Android A11Y: Fix deadlock in QtAndroidAccessibility::runInObjectContext()
  * Correctly parse non BMP char refs in the sax parser
  * Clear the _X version of alongside the enum deprecator
  * Fix UB (signed char passed to &lt;cctype&gt; function)
  * Qt3DRender: includemocs
  * Fix capitalization error in auto-generated qdbusmacros.h include
  * QColorDialog: Ignore mouse move events when no mouse button is pressed
  * QHostInfo: fix remaining slotObj leaks
  * QXmlStreamReader: Raise error on unexpected tokens (CVE-2023-38197,
    QTBUG-92113, QTBUG-95188, bsc#1213326)
  * QTextLayout: Reconsider cursor drawing on TextObject
  * Ensure consistent cursor width under fractional scaling
  * Fix QTextEdit cursor rectangle vertical positioning
  * Return 0 in QWindow::winId in case of failed platform window creation
  * Doc: note QWindow::winId() will cause platform window creation
  * QSslDiffieHellmanParameters: fix mem-leak
  * QHostInfo: fix leaking slot object
  * Make sure we don't count down past 0 QT_FATAL_CRITICALS
  * QLogging: DRY isFatal(QtMsgType)
  * tst_QXmlStream: remove unneeded _ba UDLs
  * Fix typo in QXmlStreamReader error message
  * QXmlStreamReader: make fastScanName() indicate parsing status to callers
  * QXmlStreamReader: change fastScanName() to take a Value*
  * Fix Croatia's currency
  * SSL: upgrade the default DH parameters</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1696593600">- Update to version 5.15.11+kde134, rebased upstream:
  * Revert "Windows QPA: Add support to UiaRaiseNotificationEvent()"
  * FileChooser portal: Make sure filter.name is not empty
  * QPersistentModelIndex: fix UB (op&lt; on unrelated pointers)
  * Avoid crash when keysymToQtKey(keysym, Qt::ControlModifier) is called
  * a11y atspi: translate coords for GetOffsetAtPoint the right way
  * a11y atspi: Take dialog into account as top-level window
  * a11y atspi: Fix incorrect use of x instead of y position
  * macOS: Handle asynchronous deminiaturizing of windows
  * QTranslator: generalize a UNIX-only path
  * iOS, input panel: be more careful before enabling QIOSKeyboardListener
  * Android: Fix flickering on window resize and show keyboard
  * Android A11Y: Check for active surface before calling into native code
  * xcb: Delete touch points without target windows
  * Blacklist 1 tests in tst_QDBusConnection on ubuntu-20.04
  * Fix CMake builds without ANDROID_SDK
  * Blacklist 2 tests in tst_Http2 on ubuntu-20.04
  * Blacklist 1 tests in tst_QSqlQuery on macos
  * Defer creating the special shaders in the texture blitter
  * tst_QSslSocket::serverCipherPreferencies - fix for OpenSSL v3
  * QTemporaryFile: document rename() differences from QFile
  * Doc: 3rd party: Fix reference to FreeType LICENSE.txt
  * Update bundled libjpeg-turbo to version 2.1.4
  * tst_QSsSocket: fix verifyClientCertificate with OpenSSL 3
  * tst_QSslSocket: regenerate certificate used for setLocalCertificateChain
  * tst_QSslSocket::protocolServerSide - make it work with OpenSSL v3
  * tst_QSslSocket::oldErrorsOnSocketReuse - make it work with OpenSSL v3
  * Update zconf.h prefixes to match zlib v1.2.12 update
  * xcb: fix D&amp;D in same xembed client
  * xcb: use global coordinates for position of D&amp;D for xembed client
  * Doc: Update QMetaType::metaObject() descriptions
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 22.04
  * BLACKLIST tst_qfont for Ubuntu 22.04
  * BLACKLIST tst_QMenuBar::check_menuPosition for Ubuntu 22.04
  * tst_QDtls::verifyClientCertficiate - update certs for OpenSSL v3
  * QSslCertificate::toText(): add a file to compare against
  * Fix the spelling of the word "combination"
  * tst_QSslCertificate::pkcs12 - skip the test if OpenSSL version &gt;= 3
  * Android A11Y: Fix TalkBack scrolling behavior
  * Android A11Y: Notify android about scroll events
  * QCocoaDrag: don't add pasteboard items with non-absolute URLs
  * QDirPrivate: pass input QList by cref
  * tst_qbytearray: remove qCompress_data for QT_NO_COMPRESS
  * QDeviceDiscoveryUDev: use NSDMI
  * QAuthenticator: Fix crash when using NTLM / Negotiate
  * Provide a native interface instance in minimal platform plugin
  * Android: document the supported clipboard mimetypes
  * Windows: Account for not finding child windows when calling ChildWindowFromPointEx
  * iOS: Send touch events asynchronously to avoid deadlocking UIKit event loop
  * Disable bitcode for iOS
  * macOS: Ignore deprecation for ReleaseIconRef
  * BLACKLIST tst_QApplication::sendEventsOnProcessEvents for Ubuntu 22.04
  * Convert Latin1 to UTF-16 before passing to ICU API
  * Doc: Remove repetition of word in text
  * eglfs: Fix screen cloning when atomic is enabled
  * Fix printing of dpr&gt;1 images on Windows
  * QHttp: Fix handling of redirect loaded from cache
  * Doc: Fix return type of QLEInteger/QBEInteger post-in/decrement ops
  * qmake: Fix installation of separate debug info for plugins
  * iOS: ensure we close inputpanel after clearing focusobject
  * Convert Latin1 to UTF-16 before passing to ICU API
  * qputenv: defend against non-NUL-terminated QByteArray values
  * QFontSubset: remove unused glyphName() overload
  * Statically assert that the __mips_dsp code is only active on 32-bit
  * QGtk3Theme: Ensure gtk uses the same windowing system as Qt
  * tst_QFocusFrame: fix -Wparantheses
  * Sync Vulkan device features between QVulkanWindow and QRhi
  * SQLite: Update SQLite to v3.39.2
  * Update freetype to 2.12.1
  * corelib: Fix typos in documentation
  * QAtomicInteger docs: mention bool and char8_t as 8-bit types
  * qgraphicsitem_cast: replace 0 with nullptr
  * Doc: Hide weak overload template magic from documentation
  * Revert "QDateTime: fix adjusted datetime handling"
  * Fix select handles disappears issues
  * tst_QSslKey: prepare for the migration to OpenSSL v3
  * tst_qnetworkreply: replace server.pem/key pair
  * Disable unit testing setting up QTcpServer on special Apple interfaces
  * qmake/msbuild: Turn off "use full paths in diagnostics" by default
  * qmake/msbuild: Support all /DEBUG:xxx linker options
  * qmake/msbuild: Support all /LTCG:xxx options
  * Android A11Y: Add content change type to content change event
  * Enabler for fractional scaling of text in Qt Quick
  * macOS: Override logical DPI to 72
  * Add QDom internalSubset implementation
  * Fix tst_AndroidAssets, broken by recent changes on assets load speed
  * Android: Improve loading speed of individual assets
  * Darwin: Replace deprecated symbol kIOMasterPortDefault with equivalent
  * macOS: Remove code for handling logical DPI changes
  * Fix an incorrect invocation of llvm-readobj
  * macOS: Ignore deprecation for kOnSystemDisk icon domain
  * Copy only files that belongs to QML module
  * Android: fix wrong position of cursor handle and editpopup menu in split screen
  * Doc: Document QML_IMPORTS_PATH and QMLPATHS
  * Add the missing RCC_DIR to '.qrc' paths when generating deployment settings
  * Android: Fix the offset of the EditPopupMenu
  * xcb: update xkb_state mask as much as possible
  * QDom: Stop treating non-BMP characters as invalid
  * Android 13: Fix warnings on starting an application
  * qxkbcommon: Map Super/Hyper to Meta early enough to have an effect
  * macOS: Ignore update requests for offline displays
  * macOS: Avoid recursively updating screens when window moves screen
  * qmake/MinGW: Install separate debug info of DLLs next to the DLL
  * QMainWindow: fix restoreState() for toolbars
  * Make two QDT benchmarks data-driven and add more rows
  * Fix doc and example of QLoggingCategory::installCategory()
  * qmake: Document Xcode behavior when bundling translation files
  * Android: Fix missing import
  * QByteArray: more GCC 12 -Werror=array-bound whack-a-mole
  * CMake: Fix android sdk version propagation
  * Restore C++20-deprecated mixed-enum bitwise operators
  * Android: Fix ANR when QtService and QtActivity load in same process
  * Fix restart QtActivity
  * QArrayData::data(): do type-punning via quintptr, not char *
  * QIOSTextResponder: recreate responder upon reset
  * QSslSocket: make it work with OpenSSL v3
  * QFileSystemModelPrivate: de-inline ctor and dtor
  * Network: update Public Suffix List
  * macOS: Ensure proper quoting when calling otool in objc_namespace script
  * QKeySequence: Fix the one-off error in the mac glyph array size
- Commits dropped by the rebase:
  * Apply CVE-2022-27404-27405-27406-qtbase-5.15.diff
  * QArrayData: fix UB via reinterpret_cast (crash with FORTIFY_SOURCE=3)
  * Adapt for q_EVP_PKEY_base_id → q_EVP_PKEY_get_base_id rename in OpenSSL 3
  * Don't use a deprecated function if built/linked with OpenSSL v3</changelog>
  <changelog author="christophe@krop.fr" date="1696593601">- Enable the experimental native painting feature to improve
  remote desktop performances (boo#1214915)
  exporting QT_XCB_NATIVE_PAINTING is required to use the feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1697716800">- Update to version 5.15.11+kde138:
  * QLibraryPrivate: Actually merge load hints
  * QPluginLoader: report the right load hints
  * xkb: fix build with libxkbcommon 1.6.0 and later
  * a11y atspi: Map ButtonMenu role to AT-SPI equivalent</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1703851200">- Update to version 5.15.12+kde144, rebased upstream:
  * QMimeDatabase: handle buggy type definitions with circular inheritance
  * xcb: only set base size when it's valid
  * QPixmapCache: fix leaking of QStrings and Keys on clear()
  * OpenFile portal: do not use O_PATH fds
  * QSystemTrayIcon: properly disconnect old menu in setContextMenu()
  * Guard QTabBar against nested event processing during moving tabs
  * QDial: don't crash when min==max and setting a value != min &amp; max
  * QStandardItemModel: don't leak in mimeData()
  * SQL/MySQL: properly initialize variable
  * QWidgetTextControl: ignore invalid input method event
  * Update the LGPL license header
  * SQL/MySQL: fix handling of json column
  * Remove QMAKE_RANLIB and QMAKE_LINK_SHLIB from android/default_pre.prf
  * macOS: Fix less common writing systems on Catalina and later
  * Blacklist 1 tests in tst_QFtp on ubuntu-20.04
  * Update bundled libpng to version 1.6.39
  * Android: Fix signing of APKs that are generated when an AAB is also built
  * Update bundled zlib to version 1.2.13
  * doc: update the limitation of QSystemTrayIcon on X11
  * Blacklist 1 tests in tst_QTimer on ubuntu-20.04
  * Add benchmarks for QLocale number parsing
  * Add benchmarks for QString number parsing
  * Android: Fix incorrect fullscreen dimensions
  * Gtk3Theme: set XCURSOR_SIZE and XCURSOR_THEME for wayland sessions
  * xcb: Flush Display when processing xcb events
  * xcb: Add xlib wrapper for XFlush()
  * QHostAddress: Fix incorrect comparison against 'Any'
  * QSsl[OpenSSL/Android]: Fix hardcoded 1_1 suffix
  * BLACKLIST: tst_QApplication::sendEventsOnProcessEvents for RHEL 9.0
  * QMacStyle: do not set white color for grayed out button
  * Work round macOS's omission of en_DE from its own uiLanguages()
  * Suppress a deprecation warning in tst_QDateTime::toString_enumformat()
  * QJsonValue: fix incorrect to{Array,Object} when the value is empty
  * QGtk3Dialog: remove the #include for empty moc
  * Remove unneeded QWindow from QGtk3Dialog
  * tst_QSslSocket: Delete sslOptions
  * tst_QSslServer: Make the in-process server use TLS1.2
  * Android: fix Gradle warning about using enableUncompressedNativeLibs
  * Mention  limitation of QDir::drives() on Windows
  * QFileSystemEngine/Win: fix incorrect buffer size in currentPath()
  * Android: properly retrieve mime type of uri to for openUrl()
  * Android: Fix clipboard issue with urls
  * Android: Add a way to disable accessibility via an environment var
  * Update bundled libpng to version 1.6.38
  * QIOSMessageDialog::exec - work around 'windowsless' exec
  * QIosScreen: retain the right window
  * tst_Q{BitArray,ContiguousCache}: check not only count(), but size(), too
  * QIosTextResponder: stop using deprecated constants and type
  * qcompilerdetection.h: detect Coverity
  * Android: Fix Display.getRealMetrics deprecation
  * Fix broken Text rendering when noantialiased NativeRendering is used
  * forkfd: fix Clang 15 ATOMIC_VAR_INIT deprecation warning
  * eglfs: Add env.var. to disable the dedicated drmHandleEvent thread
  * doc: Don't put strings into QVector&lt;double&gt;
  * Remove focusProxyAndInputMethods from tst_QWidget
  * Bump version to 5.15.12
  * Update documentation of qWaitForWindowActive / qWaitForWindowExposed
  * QtHttp: Lower the severity of some log output
  * StyleSheetStyle: Fix color of placeholder texts in text edits
  * Android: Fix flickering on split screen mode
  * Update url to IAccessible2 Specification</changelog>
  <changelog author="alarrosa@suse.com" date="1704283200">- Update to version 5.15.12+kde147:
  * Http2: fix potential overflow in assemble_hpack_block()
    (bsc#1218413, CVE-2023-51714)
  * HPack: fix incorrect integer overflow check
  * HPack: fix a Yoda Condition</changelog>
  <changelog author="fvogt@suse.com" date="1708084800">- Update to version 5.15.12+kde151:
  * Improve KTX file reading memory safety (CVE-2024-25580, boo#1219996)
  * Revert "xcb: only set base size when it's valid"
  * Fix potential leak of QPropertyAnimation in QLineEditIconButton
  * QBitArray: correct inline keyword</changelog>
  <changelog author="alarrosa@suse.com" date="1720785600">- Add patch from upstream to fix a regression in the ODBC driver
  (bsc#1227513, QTBUG-112375):
  * 0001-QSQL-ODBC-fix-regression-trailing-NUL.patch
  * 0002-SQL-ODBC-Pass-correct-length-to-SQLColAttribute.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1722945600">- Add rebased upstream patch to delay any HTTP2 communication until
  encrypted() can be responded to (bsc#1227426, CVE-2024-39936):
  * 0001-HTTP2-Delay-any-communication-until-encrypted-can-be.patch
- Add upstream patch to fix a NULL pointer dereference via the
  function QXcbConnection::initializeAllAtoms() when there is
  anomalous behavior from the X server (bsc#1222120,
  CVE-2023-45935):
  * 0001-xcb-guard-a-pointer-before-usage.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756728000">- Add patch from upstream to fix a precondition violation in call
  to QByteArrayView::at() which can cause crashes (bsc#1243958,
  CVE-2025-5455):
  * 0001-qDecodeDataUrl-fix-precondition-violation-in-call-to.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756814400">- Add patch from upstream to initialize a member variable that was
  uninitialized under some circumstances:
  * 0001-QObjectPrivateSignal-initialize-all-members.patch
- Add patch from upstream to fix a crash when parsing a particular
  glyph in a particular font (QTBUG-124310):
  * 0001-Avoid-crash-in-font-distancefield-computation.patch
  * 0002-Fix-crash-in-font-distancefield-computation.patch
- Add patch from upstream to fix avoid repeatedly registering
  xsettings callbacks when switching cursor themes:
  * 0001-xcb-Avoid-repeatedly-registering-xsettings-callbacks-When.patch
- Add patch from upstream to check validity of RandR output info
  before using it (QTBUG-128906):
  * 0001-xcb-check-validity-of-RandR-output-info-before-using-it.patch
- Add patch from upstream to fix reparenting a window so it takes
  effect even if there are no other state changes to the window:
  * 0001-xcb-Sync-XCB-connection-after-reparenting-window.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756900800">- Add patch from upstream to fix a low performance when processing
  XML data in encodeText (bsc#1239896, CVE-2025-30348):
  * 0001-XML_QDom-speedup-encodeText.patch</changelog>
</package>
<package pkgid="df1ee490f8deb106f043413ef2b9f9d54e51791359be865cfcaf1483e859edcf" name="libQt5Core-devel" arch="x86_64">
  <version epoch="0" ver="5.15.12+kde151" rel="150600.3.9.1"/>
  <changelog author="fvogt@suse.com" date="1678968000">- Update to version 5.15.8+kde183:
  * Add nullptr guard in QStyleSheetStyle::drawPrimitive(PE_PanelLineEdit)
  * QAbstractItemView: don't access invalid indexes on copy-key
  * Apply CVE-2023-24607-qtbase-5.15.diff (CVE-2023-24607,
    bsc#1209616)
  * QXcbConnection::getTimestamp: do not return stale timestamp
  * QToolButton: Elide text when constraints prevent from showing whole text
  * correctly set up ref counting in QThreadPool::tryStart(std::function)
  * Do not set Qt::ToolTip flag for QShapedPixmapWindow
  * Fix deletion order also for QImageReader/Writer::setDevice()
  * Fix deletion order in QImageReader/Writer destructors
  * QNetworkReply: Fix typos in the documentation
  * Doc: Fix typo in the online documentation template
  * Doc: Link to page documenting Qt trademarks in the copyright footer
  * [doc] Fix typo in QBuffer::setBuffer() description
  * qwindowsdrag: Fix typo in documentation
  * openglblacklists: Fix typo in description
  * qxcbscreen: Fix typo in documentation
  * Fix typos in SQL driver documentation
  * qxcbwindow.cpp: Fix sign-compare and another warnings
  * QToolButton: reimplement the fix for QTBUG-95255
  * QSysInfo::prettyProductName(): Add macOS Ventura product name
  * QSysInfo::prettyProductName(): add missing macOS product names
  * xcb: correctly disconnect xsettings callbacks
  * ibus: add SetCursorLocationRelative in InputContext.xml</changelog>
  <changelog author="fvogt@suse.com" date="1680523200">- Update to version 5.15.8+kde185:
  * QFSFileEngine: fix overflow bug when using lseek64
  * Add QImage null check when QOpenGLTexture converts
- Add patch to fix return key handling in QGroupBox on GNOME (bsc#1209364):
  * 0001-Revert-QGnomeTheme-Allow-Space-Return-Enter-and-Sele.patch
- Add patch to fix XInput2 events in big-endian X11 clients (bsc#1204883, QTBUG-105157):
  * big-endian-scroll.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1682078400">- Update to version 5.15.9+kde151, rebased upstream:
  * QCborValue: fix incorrect to{Array,Map} when the value is empty
  * QMargins: fix a missing "full stop" in the docs
  * QLibrary: restore translated string
  * QLibrary: fix possible arg() format clobbering
  * iOS: Use python3 for enumerating test target devices
  * Android: Treat ACTION_CANCEL as TouchCancelEvent
  * Doc: Fix broken formatting
  * QFileSystemEngine: fix potential formatting error
  * QString::asprintf: check that passing field widths as arguments works
  * Backport recent QFlags tests
  * network: Fix typos in documentation
  * Fix accuracy with screen composition
  * Doc: Update documentation for QElapsedTimer's in Windows
  * Document that QStandardPath::findExecutable works with absolute paths
  * macOS: Use native resize cursors for diagonal resize
  * Fix clipped glyphs in text rendering of QGraphicsTextItem
  * Change comparison data type to fix int overflow
  * Add missing Q_WEAK_OVERLOAD definition
  * Update QFileInfo docs to mention macOS aliases
  * Distinguish macOS aliases from normal symbolic links
  * Windows QPA: Fix frameless maximize on secondary screens
  * Rewrite tst_qdataurl as a data-driven test
  * Fix compilation for wasm
  * QIOSFileDialog/QIOSDocumentPickerController - handle dismissed view controller
  * Fix QDockWidget's dock area permissions after hovering
  * Fix C++20 ambiguous relational operators between QJsonValue{,Ref}
  * Android: make sure that orientationChange is reported after resize
  * Android: set all QScreen's geometry-related parameters together
  * Blacklist: test cases blacklisted in tst_QDBusConnection:
  * wasm:  fix issue with passing username/password to network request
  * macOS: Pass multi arch flags when linking qmake
  * QCocoaFileDialogHelper: Always enable symlinks and aliases to directories
  * Android: terminate argv passed to main() with nullptr
  * Update bundled libjpeg-turbo to version 2.1.3
  * ANGLE: Load the DirectX libraries from the system path directly
  * SQLite: Update SQLite to v3.37.2
  * Fix compiler warnings about unused parameters
  * Fix getsockopt option_value initial initialization
  * Http2: Fix redirect-handling
  * Android A11Y: Fix value rounding
  * Android A11Y: Announce value together with element name when focused
  * Android A11Y: handle valueChanged events
  * tst_QSystemSemaphore: give proper path to test-helper
  * QNX: Silence compiler warning by initializing variable
  * Update LICENSE.QT-LICENSE-AGREEMENT
  * winrt appxmanifest: Properly replace VCLibs version for newer MSVC versions
  * QAbstractSocket: Don't pretend pause and resume is a stack
  * Gui: test also depends for clipboard feature
  * QDesktopServices: deprecate destroying URL handlers w/o explicit unsetUrlHandler()
  * macOS: Respect QMAKE_APPLE_DEVICE_ARCHS when building qmake
  * HTTP: Make redirect response parsing more generic
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 20.04
  * Android A11Y: populate child elements when constructing node info
  * Fix issue where readyRead() could happen after disconnected()
  * QStringView: add missing constexpr so we can use is_constant_evaluated
  * Use Android's View.generateViewId() for generating ids for views/surfaces
  * Remove documentation of non-existing QAccessible state
  * Doc: Fix snippet to match actual QFileInfo behavior
  * Android: Re-focus focused accessibility node after orientation change
  * Android A11Y: execute C++ code on main Qt thread
  * Android: extract parentId for hidden object in advance
  * xcb: Show valuator atom names properly in categorized logging
  * Android: replace stacktrace with debug message in search for setService
  * Better document attaching a QFutureWatcher to a started QFuture
  * doc: Update GenericDataLocation location on iOS
  * BLACKLIST test_Gestures tests for RHEL-8.4
  * QPlainTestLogger: do not print "failure location" if there's no failure
  * QAbstractItemView: do not access invalid model indices (3/N)
  * Win32: always allow the event loop to be woken up by posted events
  * rhi: d3d11: Use __uuidof where we can
  * Don't QEXPECT_FAIL tst_QLineEdit::testQuickSelectionWithMouse on macOS ARM
  * Network: Emit authenticationRequired when using Ntlm
  * testlib: Disable window restoration on macOS in a non-persistent way
  * QAbstractItemView: do not access invalid model indices (2/N)
  * QAbstractItemView: do not access invalid model indices (1/N)
  * QAbstractItemView: code tidies
  * Update float16 part of TestLib selftest
  * QGuiApplication: constant-initialize lastCursorPosition
  * Blacklist tst_QFileSystemWatcher::signalsEmittedAfterFileMoved on all Windows versions
  * [Android]: Handle the screen name, modes and refreshRate properly
  * QVersionNumber: remove the "pure" attribute from commonPrefix()
  * QEvent: initialize the static userEventTypeRegistry constexprly
  * Let QXcbGlxWindow::createVisual fallback to QXcbWindow::createVisual
  * Android A11Y: fix content update notification when object is hidden
  * Android: explicitly remove accessibility focus when element is hidden
  * BLACKLIST tst_qfont for Red Hat 8.4 and Ubuntu 20.04
  * QtCore: includemocs
  * Fix memory leak in QtConcurrent::run when called with a NULL QThreadPool
  * INTEGRITY: Prevent deletion of virtual functions
  * QMake: replace a Q_ASSERT() with a Q_UNREACHABLE()
  * QTransform benchmark: measure what was promised
  * QStaticByteArrayMatcher: add a useful comment
  * QMacStyle: use the 'momentary push in' type for push buttons
  * qopengl.h: Move C header #include(s) out of the QT_NAMESPACE
  * Enable all supported 1.0 device features in QVulkanWindow
  * Fix queue passed to vkQueuePresent
  * QFusionStyle: don't draw an invalid outline for up/down buttons
  * Doc: Make QListIterator snippets more robust
  * QVersionNumber: don't detach() in rvalue QList/QVector ctor
  * QNetworkRequest: Document how Qt handles 301 and 302 status codes
  * Convert date-time to UTC before claiming it's in GMT
  * Remove execute permission from XML files
  * Add test case for style sheet selectors for enum properties
  * FreeType: allow falling back to synthesized bold if desired
  * Fix an assertion failure in massageAdjustedDateTime()
  * Relax tst_qvulkan::vulkanVersionRequest to make it compatible with 1.1
  * Doc: Replace "C:Documents and Settings" paths
  * QOrderedMutexLocker: fix compilation with C++11
  * QHttpNetworkConnection: Always set proxy settings to all channels
  * Add a markdown writer test for a checklist item ending with `code`
  * Use QTextCharFormat::fontFixedPitch to remember Markdown backtick spans
  * QWizardLayoutInfo: make == and != operators const
  * Revert "Android: Fix screen flicker issues"
  * macOS: Handle momentum scroll NSEventPhaseBegan when scroll had ended
  * SQLite: Update SQLite to v3.37.0
  * Update copyright year to 2022
  * QTzTimeZonePrivate: use ctor delegation instead of init()
  * QTzTimeZonePrivate: fix permanently-detaching m_icu
  * tst_QGraphicsView: fix memleak
  * Doc: Update external links to Qt Creator Manual
  * macOS: assume an unidentified tablet device is a stylus
  * tst_QItemModel: fix memleaks
  * tst_qanimationgroup: fix memleaks
  * QAbstractAnimation: add missing forward-declaration
  * [doc] QCoreApplication::installTranslator() doesn't take ownership
  * tst_qtranslator: fix memleak
  * QTestData: fix streaming of u8 string literals in C++20 mode
  * QThread/Unix: extract duplicate code
  * QWindowPrivate: fix inconsistent inline on some methods
  * tst_QStringList: check that join(u'0') embeds NULs
  * macOS: Sanitize scroll deltas for NSEventPhaseCancelled
  * tst_qsharedmemory: skip readOnly() test under asan
  * QXmlStreamReader: update test distribution
  * QZipReader: update to unzip partly broken archives
  * Deliver context menu event with correct coordinates to widgets in popups
  * QTextHtmlParser: fix prefix lookahead and html comments
  * QtConcurrent::run crashes on program exit
  * tst_QPropertyAnimation: fix leaks occurring under normal operation
  * tst_QPropertyAnimation: fix wrong comment
  * QLogging: fix potential missing NUL-terminator when calling OutputDebugString
  * Fix qt_scrollRectInImage when scrolling outside of the image
- Commits dropped by the rebase:
  * Fix compile with Qt5: Use QString::mid instead of QString::sliced
  * Restore C++11 compatibility after e8b9f4c28d3ab5e960dc54f2dc0c4b749b0b50e0
  * QDateTime: Don't require c++17</changelog>
  <changelog author="fvogt@suse.com" date="1683633600">- Amend patch to fix mouse grabbing as well (bsc#1211024):
  * big-endian-scroll.patch</changelog>
  <changelog author="fvogt@suse.com" date="1684929600">- Update to version 5.15.9+kde154:
  * Hsts: match header names case insensitively (CVE-2023-32762,
    QTBUG-113392, bsc#1211797)
  * Fix specific overflow in qtextlayout (CVE-2023-32763,
    QTBUG-113337, bsc#1211798)
  * QDnsLookup/Unix: make sure we don't overflow the buffer
    (CVE-2023-33285, boo#1211642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1686657600">- Update to version 5.15.10+kde129, rebased upstream:
  * Ssl: Copy the on-demand cert loading bool from default config
  * Schannel: Reject certificate not signed by a configured CA certificate (boo#1211994, CVE-2023-34410)
  * qnetworkreplyfileimpl_p.h: fix header guard name
  * Revert "Draw the cursor considering the descent is 0"
  * Use pkgconfig in order to find libproxy configuration
  * Upgrade PCRE2 to 10.40
  * Android A11Y: handle LocationChanged event only for focused element
  * Port binary JSON to new special integer bitfields
  * INTEGRITY: enable C99 globally
  * QObject: mark two error reporting functions COLD
  * Endian: Provide special integer bitfield unions
  * Android: set useLegacyPackaging to true in build.gradle
  * QWidgetTextControl: port to new-style connects (faster)
  * Sync qxmlstream.g with qxmlstreamparser_p.h [1/2]: switched lines
  * tst_QNetworkReply try stabilize autoDeleteReplies tests
  * Remove duplicated include for &lt;limits&gt;
  * Fix recursion crash when calling setStyleSheet with `qproperty-styleSheet`
  * qwindowsxpstyle: Fix typos in documentation
  * Correct prefix reported for end element in QXmlStreamReader
  * Android A11Y: Add supported role infos to A11yNodeInfo
  * Fix handling of DateTime values in QSettings
  * Fix off-by-one for "typically" lowest value INT_MIN
  * xml: Fix typos in documentation
  * QWindowsWindow: Fix typo in documentation
  * includemocs (updated script)
  * widgets: Fix typos in documentation
  * cocoa: Fix typo in debug messages
  * Only scroll QMenu when there is a valid active action
  * QTimer: Add note in documentation
  * Fix QListView assert when the last row is moved in IconMode
  * QFileDialog: Fix adding default suffix when file path contains dot
  * QLineEdit: account for the placeholderText when computing lineRect
  * QFileDialog::saveFileContent crashes on accept
  * QCompleter: QCompleter unexpectedly changes QLineEdit text
  * Fix build error on iOS with the configure option -qtnamespace
  * Draw the cursor considering the descent is 0
  * Remove pure-virtual-signals.h include from tst_moc.cpp
  * plugins: image formats - fix odr violation
  * dbus: Fix typos
  * qwindowsdialoghelpers: Fix typo in documentation
  * QTableView: Document the customizations applied to QHeaderView
  * Unicodetools: compile
  * eglfs_x11: Fix running flag linkage
  * qcompilerdetection.h: add Q_CC_{GNU,MSVC,CLANG}_ONLY macros
  * Fix CMake warning about "missing closing ' quote"
  * Fix alignment of next/prev links in offline style
  * QtDBus: includemocs
  * Image Plugins: includemocs(-ish)
  * QtGui: includemocs
  * QXcbNativeInterface: remove unused field m_sysTraySelectionAtom
  * Windows QPA: Fix slowdown with large table/tree views with accessibility
  * Macstyle: fix the text color on the disabled button
  * QMacStyle: fix tool buttons (in checked mode)
  * QTeamCityLogger: fix .arg() placeholder injection
  * QAbstractTestLogger: disable copying
  * Fix errorMessageFromComError()
  * QtNetwork: includemocs
  * AppleUnifiedLogger: Remove manually managed os_log_t cache
  * examples: add WindowStaysOnBottomHint into preview text
  * QSharedPointer: Use matching new/delete
  * QIbusPlatformInputContextPlugin: includemocs
  * QGtk3ThemePlugin: includemocs
  * QTuioTouchPlugin: includemocs
  * QtWidgets: includemocs v2022
  * QMYSQLDriverPlugin: includemocs
  * QtDeviceDiscoverySupportPrivate: includemocs
  * QLinuxFbIntegrationPlugin: includemocs
  * QtPrintSupport: includemocs
  * QSQLiteDriverPlugin: includemocs
  * QtFbSupportPrivate: includemocs
  * QXdgDesktopPortalThemePlugin: includemocs
  * QtTest: includemocs
  * QComposePlatformInputContextPlugin: includemocs
  * QtSql: includemocs
  * QVncIntegrationPlugin: includemocs
  * Fix backingstore fractional DPR glitches for widgets in child windows
  * Include &lt;limits&gt; where std::numeric_limits is used
  * QtInputSupportPrivate: includemocs
  * Document the default value of QSFPM::sortOrder()
  * Better document how to enable sorting in QSPFM
  * Correct documentation of INI format's loss of type information
  * Android: add missing properties in AndroidManifest.xml
  * Fix assertion failure when parsing a doubly-invalid date-time text
  * Windows QPA: Correct mistake when calculating minmaxinfo
  * Android: replace ndk.dir with android.ndkVersion in build.gradle
  * Android: remove the old copy of gradle.properties after reading it
  * CMake Android Support: Fix signing of APKs
  * Android: fix A11Y object description
  * macOS: Fix warning about comparing different types in QCocoaScreen::isOnline
  * Fix qmake build on FreeBSD
  * Update documentation of enum Qt::DockWidgetArea
  * xcb: recreate xcb window under some conditions
  * objc_namespace: Add support for universal binaries
  * objc_namespace: Fix misspelled argument for silencing output
  * objc_namespace: Update parsing logic to account for otool changes
  * Blacklist passwordAuth for Ubuntu 20.04
  * Android: wrap QAndroidInputContext's m_focusObject in a QPointer
  * Fix compilation with GCC 12 (and on Fedora 35 and newer)
  * Chip example: fix an accidental bool-&gt;int conversion when using PMF connections
  * qmake: Add support for C++23
  * Android: use BCP 47 tag to create a correct Locale for QTimeZone::displayName()
  * QDateTime: fix adjusted datetime handling
  * Fix crash in tst_qmltc_examples on Android
  * macOS: Remove dead code for focus ring handling in Mac style
  * Detach for colortransforms of indexed formats
  * tst_QTcpSocket::connectToHostError - handle possible timeouts
  * CoreText: Avoid populating font family aliases if family was populated
  * Graphicsview: Avoid background clearing glitches under fractional DPR
  * Windows QPA: Avoid slowdown with UI Automation name change notification
  * Windows QPA: Avoid sending accessibility notifications before activation
  * Windows: Fix potential crash when retrieving default printer
  * Make Ubuntu with its non-standard security level happy
  * Android: Blacklist failing tests on tst_QGraphicsProxyWidget
  * Update LA 4.4.1
  * iOS A11Y: Set more accessibilityTraits
  * QNX: Fix compiler warning by when FEATURE_clipboard is not enabled
  * Document that native file dialogs might not show a title
  * Doc: Remove mentionings of overflows from QElapsedTimer
  * QTextMarkdownImporter: don't apply text char format to list item block
- Commits dropped by the rebase:
  * QBuffer: add missing &lt;limits&gt; include
  * Fix developer build</changelog>
  <changelog author="gmbr3@opensuse.org" date="1687953600">- Change %_libqt5_libexecdir to %_libexecdir/qt5 (bsc#1174075)</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch icu-devel requires to pkgconfig to allow switching libicu
  versions</changelog>
  <changelog author="fvogt@suse.com" date="1695902401">- Update to version 5.15.10+kde159 (bsc#1214327, CVE-2023-37369):
  * Fix CVE-2023-43114
  * QMimeDatabase: fix detection of pattern conflict in different prefixes
  * Fix highdpi conversion of QTabletEvent coordinates on xcb
  * widget: set WA_X11NetWmWindowType* after xcb window was created
  * Fix crash when setting override cursor on multiple clients
  * QAccessibleWidget: Remove pointless ZWSP in warning message
  * Android A11Y: Fix deadlock in QtAndroidAccessibility::runInObjectContext()
  * Correctly parse non BMP char refs in the sax parser
  * Clear the _X version of alongside the enum deprecator
  * Fix UB (signed char passed to &lt;cctype&gt; function)
  * Qt3DRender: includemocs
  * Fix capitalization error in auto-generated qdbusmacros.h include
  * QColorDialog: Ignore mouse move events when no mouse button is pressed
  * QHostInfo: fix remaining slotObj leaks
  * QXmlStreamReader: Raise error on unexpected tokens (CVE-2023-38197,
    QTBUG-92113, QTBUG-95188, bsc#1213326)
  * QTextLayout: Reconsider cursor drawing on TextObject
  * Ensure consistent cursor width under fractional scaling
  * Fix QTextEdit cursor rectangle vertical positioning
  * Return 0 in QWindow::winId in case of failed platform window creation
  * Doc: note QWindow::winId() will cause platform window creation
  * QSslDiffieHellmanParameters: fix mem-leak
  * QHostInfo: fix leaking slot object
  * Make sure we don't count down past 0 QT_FATAL_CRITICALS
  * QLogging: DRY isFatal(QtMsgType)
  * tst_QXmlStream: remove unneeded _ba UDLs
  * Fix typo in QXmlStreamReader error message
  * QXmlStreamReader: make fastScanName() indicate parsing status to callers
  * QXmlStreamReader: change fastScanName() to take a Value*
  * Fix Croatia's currency
  * SSL: upgrade the default DH parameters</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1696593600">- Update to version 5.15.11+kde134, rebased upstream:
  * Revert "Windows QPA: Add support to UiaRaiseNotificationEvent()"
  * FileChooser portal: Make sure filter.name is not empty
  * QPersistentModelIndex: fix UB (op&lt; on unrelated pointers)
  * Avoid crash when keysymToQtKey(keysym, Qt::ControlModifier) is called
  * a11y atspi: translate coords for GetOffsetAtPoint the right way
  * a11y atspi: Take dialog into account as top-level window
  * a11y atspi: Fix incorrect use of x instead of y position
  * macOS: Handle asynchronous deminiaturizing of windows
  * QTranslator: generalize a UNIX-only path
  * iOS, input panel: be more careful before enabling QIOSKeyboardListener
  * Android: Fix flickering on window resize and show keyboard
  * Android A11Y: Check for active surface before calling into native code
  * xcb: Delete touch points without target windows
  * Blacklist 1 tests in tst_QDBusConnection on ubuntu-20.04
  * Fix CMake builds without ANDROID_SDK
  * Blacklist 2 tests in tst_Http2 on ubuntu-20.04
  * Blacklist 1 tests in tst_QSqlQuery on macos
  * Defer creating the special shaders in the texture blitter
  * tst_QSslSocket::serverCipherPreferencies - fix for OpenSSL v3
  * QTemporaryFile: document rename() differences from QFile
  * Doc: 3rd party: Fix reference to FreeType LICENSE.txt
  * Update bundled libjpeg-turbo to version 2.1.4
  * tst_QSsSocket: fix verifyClientCertificate with OpenSSL 3
  * tst_QSslSocket: regenerate certificate used for setLocalCertificateChain
  * tst_QSslSocket::protocolServerSide - make it work with OpenSSL v3
  * tst_QSslSocket::oldErrorsOnSocketReuse - make it work with OpenSSL v3
  * Update zconf.h prefixes to match zlib v1.2.12 update
  * xcb: fix D&amp;D in same xembed client
  * xcb: use global coordinates for position of D&amp;D for xembed client
  * Doc: Update QMetaType::metaObject() descriptions
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 22.04
  * BLACKLIST tst_qfont for Ubuntu 22.04
  * BLACKLIST tst_QMenuBar::check_menuPosition for Ubuntu 22.04
  * tst_QDtls::verifyClientCertficiate - update certs for OpenSSL v3
  * QSslCertificate::toText(): add a file to compare against
  * Fix the spelling of the word "combination"
  * tst_QSslCertificate::pkcs12 - skip the test if OpenSSL version &gt;= 3
  * Android A11Y: Fix TalkBack scrolling behavior
  * Android A11Y: Notify android about scroll events
  * QCocoaDrag: don't add pasteboard items with non-absolute URLs
  * QDirPrivate: pass input QList by cref
  * tst_qbytearray: remove qCompress_data for QT_NO_COMPRESS
  * QDeviceDiscoveryUDev: use NSDMI
  * QAuthenticator: Fix crash when using NTLM / Negotiate
  * Provide a native interface instance in minimal platform plugin
  * Android: document the supported clipboard mimetypes
  * Windows: Account for not finding child windows when calling ChildWindowFromPointEx
  * iOS: Send touch events asynchronously to avoid deadlocking UIKit event loop
  * Disable bitcode for iOS
  * macOS: Ignore deprecation for ReleaseIconRef
  * BLACKLIST tst_QApplication::sendEventsOnProcessEvents for Ubuntu 22.04
  * Convert Latin1 to UTF-16 before passing to ICU API
  * Doc: Remove repetition of word in text
  * eglfs: Fix screen cloning when atomic is enabled
  * Fix printing of dpr&gt;1 images on Windows
  * QHttp: Fix handling of redirect loaded from cache
  * Doc: Fix return type of QLEInteger/QBEInteger post-in/decrement ops
  * qmake: Fix installation of separate debug info for plugins
  * iOS: ensure we close inputpanel after clearing focusobject
  * Convert Latin1 to UTF-16 before passing to ICU API
  * qputenv: defend against non-NUL-terminated QByteArray values
  * QFontSubset: remove unused glyphName() overload
  * Statically assert that the __mips_dsp code is only active on 32-bit
  * QGtk3Theme: Ensure gtk uses the same windowing system as Qt
  * tst_QFocusFrame: fix -Wparantheses
  * Sync Vulkan device features between QVulkanWindow and QRhi
  * SQLite: Update SQLite to v3.39.2
  * Update freetype to 2.12.1
  * corelib: Fix typos in documentation
  * QAtomicInteger docs: mention bool and char8_t as 8-bit types
  * qgraphicsitem_cast: replace 0 with nullptr
  * Doc: Hide weak overload template magic from documentation
  * Revert "QDateTime: fix adjusted datetime handling"
  * Fix select handles disappears issues
  * tst_QSslKey: prepare for the migration to OpenSSL v3
  * tst_qnetworkreply: replace server.pem/key pair
  * Disable unit testing setting up QTcpServer on special Apple interfaces
  * qmake/msbuild: Turn off "use full paths in diagnostics" by default
  * qmake/msbuild: Support all /DEBUG:xxx linker options
  * qmake/msbuild: Support all /LTCG:xxx options
  * Android A11Y: Add content change type to content change event
  * Enabler for fractional scaling of text in Qt Quick
  * macOS: Override logical DPI to 72
  * Add QDom internalSubset implementation
  * Fix tst_AndroidAssets, broken by recent changes on assets load speed
  * Android: Improve loading speed of individual assets
  * Darwin: Replace deprecated symbol kIOMasterPortDefault with equivalent
  * macOS: Remove code for handling logical DPI changes
  * Fix an incorrect invocation of llvm-readobj
  * macOS: Ignore deprecation for kOnSystemDisk icon domain
  * Copy only files that belongs to QML module
  * Android: fix wrong position of cursor handle and editpopup menu in split screen
  * Doc: Document QML_IMPORTS_PATH and QMLPATHS
  * Add the missing RCC_DIR to '.qrc' paths when generating deployment settings
  * Android: Fix the offset of the EditPopupMenu
  * xcb: update xkb_state mask as much as possible
  * QDom: Stop treating non-BMP characters as invalid
  * Android 13: Fix warnings on starting an application
  * qxkbcommon: Map Super/Hyper to Meta early enough to have an effect
  * macOS: Ignore update requests for offline displays
  * macOS: Avoid recursively updating screens when window moves screen
  * qmake/MinGW: Install separate debug info of DLLs next to the DLL
  * QMainWindow: fix restoreState() for toolbars
  * Make two QDT benchmarks data-driven and add more rows
  * Fix doc and example of QLoggingCategory::installCategory()
  * qmake: Document Xcode behavior when bundling translation files
  * Android: Fix missing import
  * QByteArray: more GCC 12 -Werror=array-bound whack-a-mole
  * CMake: Fix android sdk version propagation
  * Restore C++20-deprecated mixed-enum bitwise operators
  * Android: Fix ANR when QtService and QtActivity load in same process
  * Fix restart QtActivity
  * QArrayData::data(): do type-punning via quintptr, not char *
  * QIOSTextResponder: recreate responder upon reset
  * QSslSocket: make it work with OpenSSL v3
  * QFileSystemModelPrivate: de-inline ctor and dtor
  * Network: update Public Suffix List
  * macOS: Ensure proper quoting when calling otool in objc_namespace script
  * QKeySequence: Fix the one-off error in the mac glyph array size
- Commits dropped by the rebase:
  * Apply CVE-2022-27404-27405-27406-qtbase-5.15.diff
  * QArrayData: fix UB via reinterpret_cast (crash with FORTIFY_SOURCE=3)
  * Adapt for q_EVP_PKEY_base_id → q_EVP_PKEY_get_base_id rename in OpenSSL 3
  * Don't use a deprecated function if built/linked with OpenSSL v3</changelog>
  <changelog author="christophe@krop.fr" date="1696593601">- Enable the experimental native painting feature to improve
  remote desktop performances (boo#1214915)
  exporting QT_XCB_NATIVE_PAINTING is required to use the feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1697716800">- Update to version 5.15.11+kde138:
  * QLibraryPrivate: Actually merge load hints
  * QPluginLoader: report the right load hints
  * xkb: fix build with libxkbcommon 1.6.0 and later
  * a11y atspi: Map ButtonMenu role to AT-SPI equivalent</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1703851200">- Update to version 5.15.12+kde144, rebased upstream:
  * QMimeDatabase: handle buggy type definitions with circular inheritance
  * xcb: only set base size when it's valid
  * QPixmapCache: fix leaking of QStrings and Keys on clear()
  * OpenFile portal: do not use O_PATH fds
  * QSystemTrayIcon: properly disconnect old menu in setContextMenu()
  * Guard QTabBar against nested event processing during moving tabs
  * QDial: don't crash when min==max and setting a value != min &amp; max
  * QStandardItemModel: don't leak in mimeData()
  * SQL/MySQL: properly initialize variable
  * QWidgetTextControl: ignore invalid input method event
  * Update the LGPL license header
  * SQL/MySQL: fix handling of json column
  * Remove QMAKE_RANLIB and QMAKE_LINK_SHLIB from android/default_pre.prf
  * macOS: Fix less common writing systems on Catalina and later
  * Blacklist 1 tests in tst_QFtp on ubuntu-20.04
  * Update bundled libpng to version 1.6.39
  * Android: Fix signing of APKs that are generated when an AAB is also built
  * Update bundled zlib to version 1.2.13
  * doc: update the limitation of QSystemTrayIcon on X11
  * Blacklist 1 tests in tst_QTimer on ubuntu-20.04
  * Add benchmarks for QLocale number parsing
  * Add benchmarks for QString number parsing
  * Android: Fix incorrect fullscreen dimensions
  * Gtk3Theme: set XCURSOR_SIZE and XCURSOR_THEME for wayland sessions
  * xcb: Flush Display when processing xcb events
  * xcb: Add xlib wrapper for XFlush()
  * QHostAddress: Fix incorrect comparison against 'Any'
  * QSsl[OpenSSL/Android]: Fix hardcoded 1_1 suffix
  * BLACKLIST: tst_QApplication::sendEventsOnProcessEvents for RHEL 9.0
  * QMacStyle: do not set white color for grayed out button
  * Work round macOS's omission of en_DE from its own uiLanguages()
  * Suppress a deprecation warning in tst_QDateTime::toString_enumformat()
  * QJsonValue: fix incorrect to{Array,Object} when the value is empty
  * QGtk3Dialog: remove the #include for empty moc
  * Remove unneeded QWindow from QGtk3Dialog
  * tst_QSslSocket: Delete sslOptions
  * tst_QSslServer: Make the in-process server use TLS1.2
  * Android: fix Gradle warning about using enableUncompressedNativeLibs
  * Mention  limitation of QDir::drives() on Windows
  * QFileSystemEngine/Win: fix incorrect buffer size in currentPath()
  * Android: properly retrieve mime type of uri to for openUrl()
  * Android: Fix clipboard issue with urls
  * Android: Add a way to disable accessibility via an environment var
  * Update bundled libpng to version 1.6.38
  * QIOSMessageDialog::exec - work around 'windowsless' exec
  * QIosScreen: retain the right window
  * tst_Q{BitArray,ContiguousCache}: check not only count(), but size(), too
  * QIosTextResponder: stop using deprecated constants and type
  * qcompilerdetection.h: detect Coverity
  * Android: Fix Display.getRealMetrics deprecation
  * Fix broken Text rendering when noantialiased NativeRendering is used
  * forkfd: fix Clang 15 ATOMIC_VAR_INIT deprecation warning
  * eglfs: Add env.var. to disable the dedicated drmHandleEvent thread
  * doc: Don't put strings into QVector&lt;double&gt;
  * Remove focusProxyAndInputMethods from tst_QWidget
  * Bump version to 5.15.12
  * Update documentation of qWaitForWindowActive / qWaitForWindowExposed
  * QtHttp: Lower the severity of some log output
  * StyleSheetStyle: Fix color of placeholder texts in text edits
  * Android: Fix flickering on split screen mode
  * Update url to IAccessible2 Specification</changelog>
  <changelog author="alarrosa@suse.com" date="1704283200">- Update to version 5.15.12+kde147:
  * Http2: fix potential overflow in assemble_hpack_block()
    (bsc#1218413, CVE-2023-51714)
  * HPack: fix incorrect integer overflow check
  * HPack: fix a Yoda Condition</changelog>
  <changelog author="fvogt@suse.com" date="1708084800">- Update to version 5.15.12+kde151:
  * Improve KTX file reading memory safety (CVE-2024-25580, boo#1219996)
  * Revert "xcb: only set base size when it's valid"
  * Fix potential leak of QPropertyAnimation in QLineEditIconButton
  * QBitArray: correct inline keyword</changelog>
  <changelog author="alarrosa@suse.com" date="1720785600">- Add patch from upstream to fix a regression in the ODBC driver
  (bsc#1227513, QTBUG-112375):
  * 0001-QSQL-ODBC-fix-regression-trailing-NUL.patch
  * 0002-SQL-ODBC-Pass-correct-length-to-SQLColAttribute.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1722945600">- Add rebased upstream patch to delay any HTTP2 communication until
  encrypted() can be responded to (bsc#1227426, CVE-2024-39936):
  * 0001-HTTP2-Delay-any-communication-until-encrypted-can-be.patch
- Add upstream patch to fix a NULL pointer dereference via the
  function QXcbConnection::initializeAllAtoms() when there is
  anomalous behavior from the X server (bsc#1222120,
  CVE-2023-45935):
  * 0001-xcb-guard-a-pointer-before-usage.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756728000">- Add patch from upstream to fix a precondition violation in call
  to QByteArrayView::at() which can cause crashes (bsc#1243958,
  CVE-2025-5455):
  * 0001-qDecodeDataUrl-fix-precondition-violation-in-call-to.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756814400">- Add patch from upstream to initialize a member variable that was
  uninitialized under some circumstances:
  * 0001-QObjectPrivateSignal-initialize-all-members.patch
- Add patch from upstream to fix a crash when parsing a particular
  glyph in a particular font (QTBUG-124310):
  * 0001-Avoid-crash-in-font-distancefield-computation.patch
  * 0002-Fix-crash-in-font-distancefield-computation.patch
- Add patch from upstream to fix avoid repeatedly registering
  xsettings callbacks when switching cursor themes:
  * 0001-xcb-Avoid-repeatedly-registering-xsettings-callbacks-When.patch
- Add patch from upstream to check validity of RandR output info
  before using it (QTBUG-128906):
  * 0001-xcb-check-validity-of-RandR-output-info-before-using-it.patch
- Add patch from upstream to fix reparenting a window so it takes
  effect even if there are no other state changes to the window:
  * 0001-xcb-Sync-XCB-connection-after-reparenting-window.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756900800">- Add patch from upstream to fix a low performance when processing
  XML data in encodeText (bsc#1239896, CVE-2025-30348):
  * 0001-XML_QDom-speedup-encodeText.patch</changelog>
</package>
<package pkgid="822035e5b667f907070acac6f8262c2d9c2b5ffdd962025e672d2cad86e4e5cf" name="libQt5Core-private-headers-devel" arch="noarch">
  <version epoch="0" ver="5.15.12+kde151" rel="150600.3.9.1"/>
  <changelog author="fvogt@suse.com" date="1678968000">- Update to version 5.15.8+kde183:
  * Add nullptr guard in QStyleSheetStyle::drawPrimitive(PE_PanelLineEdit)
  * QAbstractItemView: don't access invalid indexes on copy-key
  * Apply CVE-2023-24607-qtbase-5.15.diff (CVE-2023-24607,
    bsc#1209616)
  * QXcbConnection::getTimestamp: do not return stale timestamp
  * QToolButton: Elide text when constraints prevent from showing whole text
  * correctly set up ref counting in QThreadPool::tryStart(std::function)
  * Do not set Qt::ToolTip flag for QShapedPixmapWindow
  * Fix deletion order also for QImageReader/Writer::setDevice()
  * Fix deletion order in QImageReader/Writer destructors
  * QNetworkReply: Fix typos in the documentation
  * Doc: Fix typo in the online documentation template
  * Doc: Link to page documenting Qt trademarks in the copyright footer
  * [doc] Fix typo in QBuffer::setBuffer() description
  * qwindowsdrag: Fix typo in documentation
  * openglblacklists: Fix typo in description
  * qxcbscreen: Fix typo in documentation
  * Fix typos in SQL driver documentation
  * qxcbwindow.cpp: Fix sign-compare and another warnings
  * QToolButton: reimplement the fix for QTBUG-95255
  * QSysInfo::prettyProductName(): Add macOS Ventura product name
  * QSysInfo::prettyProductName(): add missing macOS product names
  * xcb: correctly disconnect xsettings callbacks
  * ibus: add SetCursorLocationRelative in InputContext.xml</changelog>
  <changelog author="fvogt@suse.com" date="1680523200">- Update to version 5.15.8+kde185:
  * QFSFileEngine: fix overflow bug when using lseek64
  * Add QImage null check when QOpenGLTexture converts
- Add patch to fix return key handling in QGroupBox on GNOME (bsc#1209364):
  * 0001-Revert-QGnomeTheme-Allow-Space-Return-Enter-and-Sele.patch
- Add patch to fix XInput2 events in big-endian X11 clients (bsc#1204883, QTBUG-105157):
  * big-endian-scroll.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1682078400">- Update to version 5.15.9+kde151, rebased upstream:
  * QCborValue: fix incorrect to{Array,Map} when the value is empty
  * QMargins: fix a missing "full stop" in the docs
  * QLibrary: restore translated string
  * QLibrary: fix possible arg() format clobbering
  * iOS: Use python3 for enumerating test target devices
  * Android: Treat ACTION_CANCEL as TouchCancelEvent
  * Doc: Fix broken formatting
  * QFileSystemEngine: fix potential formatting error
  * QString::asprintf: check that passing field widths as arguments works
  * Backport recent QFlags tests
  * network: Fix typos in documentation
  * Fix accuracy with screen composition
  * Doc: Update documentation for QElapsedTimer's in Windows
  * Document that QStandardPath::findExecutable works with absolute paths
  * macOS: Use native resize cursors for diagonal resize
  * Fix clipped glyphs in text rendering of QGraphicsTextItem
  * Change comparison data type to fix int overflow
  * Add missing Q_WEAK_OVERLOAD definition
  * Update QFileInfo docs to mention macOS aliases
  * Distinguish macOS aliases from normal symbolic links
  * Windows QPA: Fix frameless maximize on secondary screens
  * Rewrite tst_qdataurl as a data-driven test
  * Fix compilation for wasm
  * QIOSFileDialog/QIOSDocumentPickerController - handle dismissed view controller
  * Fix QDockWidget's dock area permissions after hovering
  * Fix C++20 ambiguous relational operators between QJsonValue{,Ref}
  * Android: make sure that orientationChange is reported after resize
  * Android: set all QScreen's geometry-related parameters together
  * Blacklist: test cases blacklisted in tst_QDBusConnection:
  * wasm:  fix issue with passing username/password to network request
  * macOS: Pass multi arch flags when linking qmake
  * QCocoaFileDialogHelper: Always enable symlinks and aliases to directories
  * Android: terminate argv passed to main() with nullptr
  * Update bundled libjpeg-turbo to version 2.1.3
  * ANGLE: Load the DirectX libraries from the system path directly
  * SQLite: Update SQLite to v3.37.2
  * Fix compiler warnings about unused parameters
  * Fix getsockopt option_value initial initialization
  * Http2: Fix redirect-handling
  * Android A11Y: Fix value rounding
  * Android A11Y: Announce value together with element name when focused
  * Android A11Y: handle valueChanged events
  * tst_QSystemSemaphore: give proper path to test-helper
  * QNX: Silence compiler warning by initializing variable
  * Update LICENSE.QT-LICENSE-AGREEMENT
  * winrt appxmanifest: Properly replace VCLibs version for newer MSVC versions
  * QAbstractSocket: Don't pretend pause and resume is a stack
  * Gui: test also depends for clipboard feature
  * QDesktopServices: deprecate destroying URL handlers w/o explicit unsetUrlHandler()
  * macOS: Respect QMAKE_APPLE_DEVICE_ARCHS when building qmake
  * HTTP: Make redirect response parsing more generic
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 20.04
  * Android A11Y: populate child elements when constructing node info
  * Fix issue where readyRead() could happen after disconnected()
  * QStringView: add missing constexpr so we can use is_constant_evaluated
  * Use Android's View.generateViewId() for generating ids for views/surfaces
  * Remove documentation of non-existing QAccessible state
  * Doc: Fix snippet to match actual QFileInfo behavior
  * Android: Re-focus focused accessibility node after orientation change
  * Android A11Y: execute C++ code on main Qt thread
  * Android: extract parentId for hidden object in advance
  * xcb: Show valuator atom names properly in categorized logging
  * Android: replace stacktrace with debug message in search for setService
  * Better document attaching a QFutureWatcher to a started QFuture
  * doc: Update GenericDataLocation location on iOS
  * BLACKLIST test_Gestures tests for RHEL-8.4
  * QPlainTestLogger: do not print "failure location" if there's no failure
  * QAbstractItemView: do not access invalid model indices (3/N)
  * Win32: always allow the event loop to be woken up by posted events
  * rhi: d3d11: Use __uuidof where we can
  * Don't QEXPECT_FAIL tst_QLineEdit::testQuickSelectionWithMouse on macOS ARM
  * Network: Emit authenticationRequired when using Ntlm
  * testlib: Disable window restoration on macOS in a non-persistent way
  * QAbstractItemView: do not access invalid model indices (2/N)
  * QAbstractItemView: do not access invalid model indices (1/N)
  * QAbstractItemView: code tidies
  * Update float16 part of TestLib selftest
  * QGuiApplication: constant-initialize lastCursorPosition
  * Blacklist tst_QFileSystemWatcher::signalsEmittedAfterFileMoved on all Windows versions
  * [Android]: Handle the screen name, modes and refreshRate properly
  * QVersionNumber: remove the "pure" attribute from commonPrefix()
  * QEvent: initialize the static userEventTypeRegistry constexprly
  * Let QXcbGlxWindow::createVisual fallback to QXcbWindow::createVisual
  * Android A11Y: fix content update notification when object is hidden
  * Android: explicitly remove accessibility focus when element is hidden
  * BLACKLIST tst_qfont for Red Hat 8.4 and Ubuntu 20.04
  * QtCore: includemocs
  * Fix memory leak in QtConcurrent::run when called with a NULL QThreadPool
  * INTEGRITY: Prevent deletion of virtual functions
  * QMake: replace a Q_ASSERT() with a Q_UNREACHABLE()
  * QTransform benchmark: measure what was promised
  * QStaticByteArrayMatcher: add a useful comment
  * QMacStyle: use the 'momentary push in' type for push buttons
  * qopengl.h: Move C header #include(s) out of the QT_NAMESPACE
  * Enable all supported 1.0 device features in QVulkanWindow
  * Fix queue passed to vkQueuePresent
  * QFusionStyle: don't draw an invalid outline for up/down buttons
  * Doc: Make QListIterator snippets more robust
  * QVersionNumber: don't detach() in rvalue QList/QVector ctor
  * QNetworkRequest: Document how Qt handles 301 and 302 status codes
  * Convert date-time to UTC before claiming it's in GMT
  * Remove execute permission from XML files
  * Add test case for style sheet selectors for enum properties
  * FreeType: allow falling back to synthesized bold if desired
  * Fix an assertion failure in massageAdjustedDateTime()
  * Relax tst_qvulkan::vulkanVersionRequest to make it compatible with 1.1
  * Doc: Replace "C:Documents and Settings" paths
  * QOrderedMutexLocker: fix compilation with C++11
  * QHttpNetworkConnection: Always set proxy settings to all channels
  * Add a markdown writer test for a checklist item ending with `code`
  * Use QTextCharFormat::fontFixedPitch to remember Markdown backtick spans
  * QWizardLayoutInfo: make == and != operators const
  * Revert "Android: Fix screen flicker issues"
  * macOS: Handle momentum scroll NSEventPhaseBegan when scroll had ended
  * SQLite: Update SQLite to v3.37.0
  * Update copyright year to 2022
  * QTzTimeZonePrivate: use ctor delegation instead of init()
  * QTzTimeZonePrivate: fix permanently-detaching m_icu
  * tst_QGraphicsView: fix memleak
  * Doc: Update external links to Qt Creator Manual
  * macOS: assume an unidentified tablet device is a stylus
  * tst_QItemModel: fix memleaks
  * tst_qanimationgroup: fix memleaks
  * QAbstractAnimation: add missing forward-declaration
  * [doc] QCoreApplication::installTranslator() doesn't take ownership
  * tst_qtranslator: fix memleak
  * QTestData: fix streaming of u8 string literals in C++20 mode
  * QThread/Unix: extract duplicate code
  * QWindowPrivate: fix inconsistent inline on some methods
  * tst_QStringList: check that join(u'0') embeds NULs
  * macOS: Sanitize scroll deltas for NSEventPhaseCancelled
  * tst_qsharedmemory: skip readOnly() test under asan
  * QXmlStreamReader: update test distribution
  * QZipReader: update to unzip partly broken archives
  * Deliver context menu event with correct coordinates to widgets in popups
  * QTextHtmlParser: fix prefix lookahead and html comments
  * QtConcurrent::run crashes on program exit
  * tst_QPropertyAnimation: fix leaks occurring under normal operation
  * tst_QPropertyAnimation: fix wrong comment
  * QLogging: fix potential missing NUL-terminator when calling OutputDebugString
  * Fix qt_scrollRectInImage when scrolling outside of the image
- Commits dropped by the rebase:
  * Fix compile with Qt5: Use QString::mid instead of QString::sliced
  * Restore C++11 compatibility after e8b9f4c28d3ab5e960dc54f2dc0c4b749b0b50e0
  * QDateTime: Don't require c++17</changelog>
  <changelog author="fvogt@suse.com" date="1683633600">- Amend patch to fix mouse grabbing as well (bsc#1211024):
  * big-endian-scroll.patch</changelog>
  <changelog author="fvogt@suse.com" date="1684929600">- Update to version 5.15.9+kde154:
  * Hsts: match header names case insensitively (CVE-2023-32762,
    QTBUG-113392, bsc#1211797)
  * Fix specific overflow in qtextlayout (CVE-2023-32763,
    QTBUG-113337, bsc#1211798)
  * QDnsLookup/Unix: make sure we don't overflow the buffer
    (CVE-2023-33285, boo#1211642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1686657600">- Update to version 5.15.10+kde129, rebased upstream:
  * Ssl: Copy the on-demand cert loading bool from default config
  * Schannel: Reject certificate not signed by a configured CA certificate (boo#1211994, CVE-2023-34410)
  * qnetworkreplyfileimpl_p.h: fix header guard name
  * Revert "Draw the cursor considering the descent is 0"
  * Use pkgconfig in order to find libproxy configuration
  * Upgrade PCRE2 to 10.40
  * Android A11Y: handle LocationChanged event only for focused element
  * Port binary JSON to new special integer bitfields
  * INTEGRITY: enable C99 globally
  * QObject: mark two error reporting functions COLD
  * Endian: Provide special integer bitfield unions
  * Android: set useLegacyPackaging to true in build.gradle
  * QWidgetTextControl: port to new-style connects (faster)
  * Sync qxmlstream.g with qxmlstreamparser_p.h [1/2]: switched lines
  * tst_QNetworkReply try stabilize autoDeleteReplies tests
  * Remove duplicated include for &lt;limits&gt;
  * Fix recursion crash when calling setStyleSheet with `qproperty-styleSheet`
  * qwindowsxpstyle: Fix typos in documentation
  * Correct prefix reported for end element in QXmlStreamReader
  * Android A11Y: Add supported role infos to A11yNodeInfo
  * Fix handling of DateTime values in QSettings
  * Fix off-by-one for "typically" lowest value INT_MIN
  * xml: Fix typos in documentation
  * QWindowsWindow: Fix typo in documentation
  * includemocs (updated script)
  * widgets: Fix typos in documentation
  * cocoa: Fix typo in debug messages
  * Only scroll QMenu when there is a valid active action
  * QTimer: Add note in documentation
  * Fix QListView assert when the last row is moved in IconMode
  * QFileDialog: Fix adding default suffix when file path contains dot
  * QLineEdit: account for the placeholderText when computing lineRect
  * QFileDialog::saveFileContent crashes on accept
  * QCompleter: QCompleter unexpectedly changes QLineEdit text
  * Fix build error on iOS with the configure option -qtnamespace
  * Draw the cursor considering the descent is 0
  * Remove pure-virtual-signals.h include from tst_moc.cpp
  * plugins: image formats - fix odr violation
  * dbus: Fix typos
  * qwindowsdialoghelpers: Fix typo in documentation
  * QTableView: Document the customizations applied to QHeaderView
  * Unicodetools: compile
  * eglfs_x11: Fix running flag linkage
  * qcompilerdetection.h: add Q_CC_{GNU,MSVC,CLANG}_ONLY macros
  * Fix CMake warning about "missing closing ' quote"
  * Fix alignment of next/prev links in offline style
  * QtDBus: includemocs
  * Image Plugins: includemocs(-ish)
  * QtGui: includemocs
  * QXcbNativeInterface: remove unused field m_sysTraySelectionAtom
  * Windows QPA: Fix slowdown with large table/tree views with accessibility
  * Macstyle: fix the text color on the disabled button
  * QMacStyle: fix tool buttons (in checked mode)
  * QTeamCityLogger: fix .arg() placeholder injection
  * QAbstractTestLogger: disable copying
  * Fix errorMessageFromComError()
  * QtNetwork: includemocs
  * AppleUnifiedLogger: Remove manually managed os_log_t cache
  * examples: add WindowStaysOnBottomHint into preview text
  * QSharedPointer: Use matching new/delete
  * QIbusPlatformInputContextPlugin: includemocs
  * QGtk3ThemePlugin: includemocs
  * QTuioTouchPlugin: includemocs
  * QtWidgets: includemocs v2022
  * QMYSQLDriverPlugin: includemocs
  * QtDeviceDiscoverySupportPrivate: includemocs
  * QLinuxFbIntegrationPlugin: includemocs
  * QtPrintSupport: includemocs
  * QSQLiteDriverPlugin: includemocs
  * QtFbSupportPrivate: includemocs
  * QXdgDesktopPortalThemePlugin: includemocs
  * QtTest: includemocs
  * QComposePlatformInputContextPlugin: includemocs
  * QtSql: includemocs
  * QVncIntegrationPlugin: includemocs
  * Fix backingstore fractional DPR glitches for widgets in child windows
  * Include &lt;limits&gt; where std::numeric_limits is used
  * QtInputSupportPrivate: includemocs
  * Document the default value of QSFPM::sortOrder()
  * Better document how to enable sorting in QSPFM
  * Correct documentation of INI format's loss of type information
  * Android: add missing properties in AndroidManifest.xml
  * Fix assertion failure when parsing a doubly-invalid date-time text
  * Windows QPA: Correct mistake when calculating minmaxinfo
  * Android: replace ndk.dir with android.ndkVersion in build.gradle
  * Android: remove the old copy of gradle.properties after reading it
  * CMake Android Support: Fix signing of APKs
  * Android: fix A11Y object description
  * macOS: Fix warning about comparing different types in QCocoaScreen::isOnline
  * Fix qmake build on FreeBSD
  * Update documentation of enum Qt::DockWidgetArea
  * xcb: recreate xcb window under some conditions
  * objc_namespace: Add support for universal binaries
  * objc_namespace: Fix misspelled argument for silencing output
  * objc_namespace: Update parsing logic to account for otool changes
  * Blacklist passwordAuth for Ubuntu 20.04
  * Android: wrap QAndroidInputContext's m_focusObject in a QPointer
  * Fix compilation with GCC 12 (and on Fedora 35 and newer)
  * Chip example: fix an accidental bool-&gt;int conversion when using PMF connections
  * qmake: Add support for C++23
  * Android: use BCP 47 tag to create a correct Locale for QTimeZone::displayName()
  * QDateTime: fix adjusted datetime handling
  * Fix crash in tst_qmltc_examples on Android
  * macOS: Remove dead code for focus ring handling in Mac style
  * Detach for colortransforms of indexed formats
  * tst_QTcpSocket::connectToHostError - handle possible timeouts
  * CoreText: Avoid populating font family aliases if family was populated
  * Graphicsview: Avoid background clearing glitches under fractional DPR
  * Windows QPA: Avoid slowdown with UI Automation name change notification
  * Windows QPA: Avoid sending accessibility notifications before activation
  * Windows: Fix potential crash when retrieving default printer
  * Make Ubuntu with its non-standard security level happy
  * Android: Blacklist failing tests on tst_QGraphicsProxyWidget
  * Update LA 4.4.1
  * iOS A11Y: Set more accessibilityTraits
  * QNX: Fix compiler warning by when FEATURE_clipboard is not enabled
  * Document that native file dialogs might not show a title
  * Doc: Remove mentionings of overflows from QElapsedTimer
  * QTextMarkdownImporter: don't apply text char format to list item block
- Commits dropped by the rebase:
  * QBuffer: add missing &lt;limits&gt; include
  * Fix developer build</changelog>
  <changelog author="gmbr3@opensuse.org" date="1687953600">- Change %_libqt5_libexecdir to %_libexecdir/qt5 (bsc#1174075)</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch icu-devel requires to pkgconfig to allow switching libicu
  versions</changelog>
  <changelog author="fvogt@suse.com" date="1695902401">- Update to version 5.15.10+kde159 (bsc#1214327, CVE-2023-37369):
  * Fix CVE-2023-43114
  * QMimeDatabase: fix detection of pattern conflict in different prefixes
  * Fix highdpi conversion of QTabletEvent coordinates on xcb
  * widget: set WA_X11NetWmWindowType* after xcb window was created
  * Fix crash when setting override cursor on multiple clients
  * QAccessibleWidget: Remove pointless ZWSP in warning message
  * Android A11Y: Fix deadlock in QtAndroidAccessibility::runInObjectContext()
  * Correctly parse non BMP char refs in the sax parser
  * Clear the _X version of alongside the enum deprecator
  * Fix UB (signed char passed to &lt;cctype&gt; function)
  * Qt3DRender: includemocs
  * Fix capitalization error in auto-generated qdbusmacros.h include
  * QColorDialog: Ignore mouse move events when no mouse button is pressed
  * QHostInfo: fix remaining slotObj leaks
  * QXmlStreamReader: Raise error on unexpected tokens (CVE-2023-38197,
    QTBUG-92113, QTBUG-95188, bsc#1213326)
  * QTextLayout: Reconsider cursor drawing on TextObject
  * Ensure consistent cursor width under fractional scaling
  * Fix QTextEdit cursor rectangle vertical positioning
  * Return 0 in QWindow::winId in case of failed platform window creation
  * Doc: note QWindow::winId() will cause platform window creation
  * QSslDiffieHellmanParameters: fix mem-leak
  * QHostInfo: fix leaking slot object
  * Make sure we don't count down past 0 QT_FATAL_CRITICALS
  * QLogging: DRY isFatal(QtMsgType)
  * tst_QXmlStream: remove unneeded _ba UDLs
  * Fix typo in QXmlStreamReader error message
  * QXmlStreamReader: make fastScanName() indicate parsing status to callers
  * QXmlStreamReader: change fastScanName() to take a Value*
  * Fix Croatia's currency
  * SSL: upgrade the default DH parameters</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1696593600">- Update to version 5.15.11+kde134, rebased upstream:
  * Revert "Windows QPA: Add support to UiaRaiseNotificationEvent()"
  * FileChooser portal: Make sure filter.name is not empty
  * QPersistentModelIndex: fix UB (op&lt; on unrelated pointers)
  * Avoid crash when keysymToQtKey(keysym, Qt::ControlModifier) is called
  * a11y atspi: translate coords for GetOffsetAtPoint the right way
  * a11y atspi: Take dialog into account as top-level window
  * a11y atspi: Fix incorrect use of x instead of y position
  * macOS: Handle asynchronous deminiaturizing of windows
  * QTranslator: generalize a UNIX-only path
  * iOS, input panel: be more careful before enabling QIOSKeyboardListener
  * Android: Fix flickering on window resize and show keyboard
  * Android A11Y: Check for active surface before calling into native code
  * xcb: Delete touch points without target windows
  * Blacklist 1 tests in tst_QDBusConnection on ubuntu-20.04
  * Fix CMake builds without ANDROID_SDK
  * Blacklist 2 tests in tst_Http2 on ubuntu-20.04
  * Blacklist 1 tests in tst_QSqlQuery on macos
  * Defer creating the special shaders in the texture blitter
  * tst_QSslSocket::serverCipherPreferencies - fix for OpenSSL v3
  * QTemporaryFile: document rename() differences from QFile
  * Doc: 3rd party: Fix reference to FreeType LICENSE.txt
  * Update bundled libjpeg-turbo to version 2.1.4
  * tst_QSsSocket: fix verifyClientCertificate with OpenSSL 3
  * tst_QSslSocket: regenerate certificate used for setLocalCertificateChain
  * tst_QSslSocket::protocolServerSide - make it work with OpenSSL v3
  * tst_QSslSocket::oldErrorsOnSocketReuse - make it work with OpenSSL v3
  * Update zconf.h prefixes to match zlib v1.2.12 update
  * xcb: fix D&amp;D in same xembed client
  * xcb: use global coordinates for position of D&amp;D for xembed client
  * Doc: Update QMetaType::metaObject() descriptions
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 22.04
  * BLACKLIST tst_qfont for Ubuntu 22.04
  * BLACKLIST tst_QMenuBar::check_menuPosition for Ubuntu 22.04
  * tst_QDtls::verifyClientCertficiate - update certs for OpenSSL v3
  * QSslCertificate::toText(): add a file to compare against
  * Fix the spelling of the word "combination"
  * tst_QSslCertificate::pkcs12 - skip the test if OpenSSL version &gt;= 3
  * Android A11Y: Fix TalkBack scrolling behavior
  * Android A11Y: Notify android about scroll events
  * QCocoaDrag: don't add pasteboard items with non-absolute URLs
  * QDirPrivate: pass input QList by cref
  * tst_qbytearray: remove qCompress_data for QT_NO_COMPRESS
  * QDeviceDiscoveryUDev: use NSDMI
  * QAuthenticator: Fix crash when using NTLM / Negotiate
  * Provide a native interface instance in minimal platform plugin
  * Android: document the supported clipboard mimetypes
  * Windows: Account for not finding child windows when calling ChildWindowFromPointEx
  * iOS: Send touch events asynchronously to avoid deadlocking UIKit event loop
  * Disable bitcode for iOS
  * macOS: Ignore deprecation for ReleaseIconRef
  * BLACKLIST tst_QApplication::sendEventsOnProcessEvents for Ubuntu 22.04
  * Convert Latin1 to UTF-16 before passing to ICU API
  * Doc: Remove repetition of word in text
  * eglfs: Fix screen cloning when atomic is enabled
  * Fix printing of dpr&gt;1 images on Windows
  * QHttp: Fix handling of redirect loaded from cache
  * Doc: Fix return type of QLEInteger/QBEInteger post-in/decrement ops
  * qmake: Fix installation of separate debug info for plugins
  * iOS: ensure we close inputpanel after clearing focusobject
  * Convert Latin1 to UTF-16 before passing to ICU API
  * qputenv: defend against non-NUL-terminated QByteArray values
  * QFontSubset: remove unused glyphName() overload
  * Statically assert that the __mips_dsp code is only active on 32-bit
  * QGtk3Theme: Ensure gtk uses the same windowing system as Qt
  * tst_QFocusFrame: fix -Wparantheses
  * Sync Vulkan device features between QVulkanWindow and QRhi
  * SQLite: Update SQLite to v3.39.2
  * Update freetype to 2.12.1
  * corelib: Fix typos in documentation
  * QAtomicInteger docs: mention bool and char8_t as 8-bit types
  * qgraphicsitem_cast: replace 0 with nullptr
  * Doc: Hide weak overload template magic from documentation
  * Revert "QDateTime: fix adjusted datetime handling"
  * Fix select handles disappears issues
  * tst_QSslKey: prepare for the migration to OpenSSL v3
  * tst_qnetworkreply: replace server.pem/key pair
  * Disable unit testing setting up QTcpServer on special Apple interfaces
  * qmake/msbuild: Turn off "use full paths in diagnostics" by default
  * qmake/msbuild: Support all /DEBUG:xxx linker options
  * qmake/msbuild: Support all /LTCG:xxx options
  * Android A11Y: Add content change type to content change event
  * Enabler for fractional scaling of text in Qt Quick
  * macOS: Override logical DPI to 72
  * Add QDom internalSubset implementation
  * Fix tst_AndroidAssets, broken by recent changes on assets load speed
  * Android: Improve loading speed of individual assets
  * Darwin: Replace deprecated symbol kIOMasterPortDefault with equivalent
  * macOS: Remove code for handling logical DPI changes
  * Fix an incorrect invocation of llvm-readobj
  * macOS: Ignore deprecation for kOnSystemDisk icon domain
  * Copy only files that belongs to QML module
  * Android: fix wrong position of cursor handle and editpopup menu in split screen
  * Doc: Document QML_IMPORTS_PATH and QMLPATHS
  * Add the missing RCC_DIR to '.qrc' paths when generating deployment settings
  * Android: Fix the offset of the EditPopupMenu
  * xcb: update xkb_state mask as much as possible
  * QDom: Stop treating non-BMP characters as invalid
  * Android 13: Fix warnings on starting an application
  * qxkbcommon: Map Super/Hyper to Meta early enough to have an effect
  * macOS: Ignore update requests for offline displays
  * macOS: Avoid recursively updating screens when window moves screen
  * qmake/MinGW: Install separate debug info of DLLs next to the DLL
  * QMainWindow: fix restoreState() for toolbars
  * Make two QDT benchmarks data-driven and add more rows
  * Fix doc and example of QLoggingCategory::installCategory()
  * qmake: Document Xcode behavior when bundling translation files
  * Android: Fix missing import
  * QByteArray: more GCC 12 -Werror=array-bound whack-a-mole
  * CMake: Fix android sdk version propagation
  * Restore C++20-deprecated mixed-enum bitwise operators
  * Android: Fix ANR when QtService and QtActivity load in same process
  * Fix restart QtActivity
  * QArrayData::data(): do type-punning via quintptr, not char *
  * QIOSTextResponder: recreate responder upon reset
  * QSslSocket: make it work with OpenSSL v3
  * QFileSystemModelPrivate: de-inline ctor and dtor
  * Network: update Public Suffix List
  * macOS: Ensure proper quoting when calling otool in objc_namespace script
  * QKeySequence: Fix the one-off error in the mac glyph array size
- Commits dropped by the rebase:
  * Apply CVE-2022-27404-27405-27406-qtbase-5.15.diff
  * QArrayData: fix UB via reinterpret_cast (crash with FORTIFY_SOURCE=3)
  * Adapt for q_EVP_PKEY_base_id → q_EVP_PKEY_get_base_id rename in OpenSSL 3
  * Don't use a deprecated function if built/linked with OpenSSL v3</changelog>
  <changelog author="christophe@krop.fr" date="1696593601">- Enable the experimental native painting feature to improve
  remote desktop performances (boo#1214915)
  exporting QT_XCB_NATIVE_PAINTING is required to use the feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1697716800">- Update to version 5.15.11+kde138:
  * QLibraryPrivate: Actually merge load hints
  * QPluginLoader: report the right load hints
  * xkb: fix build with libxkbcommon 1.6.0 and later
  * a11y atspi: Map ButtonMenu role to AT-SPI equivalent</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1703851200">- Update to version 5.15.12+kde144, rebased upstream:
  * QMimeDatabase: handle buggy type definitions with circular inheritance
  * xcb: only set base size when it's valid
  * QPixmapCache: fix leaking of QStrings and Keys on clear()
  * OpenFile portal: do not use O_PATH fds
  * QSystemTrayIcon: properly disconnect old menu in setContextMenu()
  * Guard QTabBar against nested event processing during moving tabs
  * QDial: don't crash when min==max and setting a value != min &amp; max
  * QStandardItemModel: don't leak in mimeData()
  * SQL/MySQL: properly initialize variable
  * QWidgetTextControl: ignore invalid input method event
  * Update the LGPL license header
  * SQL/MySQL: fix handling of json column
  * Remove QMAKE_RANLIB and QMAKE_LINK_SHLIB from android/default_pre.prf
  * macOS: Fix less common writing systems on Catalina and later
  * Blacklist 1 tests in tst_QFtp on ubuntu-20.04
  * Update bundled libpng to version 1.6.39
  * Android: Fix signing of APKs that are generated when an AAB is also built
  * Update bundled zlib to version 1.2.13
  * doc: update the limitation of QSystemTrayIcon on X11
  * Blacklist 1 tests in tst_QTimer on ubuntu-20.04
  * Add benchmarks for QLocale number parsing
  * Add benchmarks for QString number parsing
  * Android: Fix incorrect fullscreen dimensions
  * Gtk3Theme: set XCURSOR_SIZE and XCURSOR_THEME for wayland sessions
  * xcb: Flush Display when processing xcb events
  * xcb: Add xlib wrapper for XFlush()
  * QHostAddress: Fix incorrect comparison against 'Any'
  * QSsl[OpenSSL/Android]: Fix hardcoded 1_1 suffix
  * BLACKLIST: tst_QApplication::sendEventsOnProcessEvents for RHEL 9.0
  * QMacStyle: do not set white color for grayed out button
  * Work round macOS's omission of en_DE from its own uiLanguages()
  * Suppress a deprecation warning in tst_QDateTime::toString_enumformat()
  * QJsonValue: fix incorrect to{Array,Object} when the value is empty
  * QGtk3Dialog: remove the #include for empty moc
  * Remove unneeded QWindow from QGtk3Dialog
  * tst_QSslSocket: Delete sslOptions
  * tst_QSslServer: Make the in-process server use TLS1.2
  * Android: fix Gradle warning about using enableUncompressedNativeLibs
  * Mention  limitation of QDir::drives() on Windows
  * QFileSystemEngine/Win: fix incorrect buffer size in currentPath()
  * Android: properly retrieve mime type of uri to for openUrl()
  * Android: Fix clipboard issue with urls
  * Android: Add a way to disable accessibility via an environment var
  * Update bundled libpng to version 1.6.38
  * QIOSMessageDialog::exec - work around 'windowsless' exec
  * QIosScreen: retain the right window
  * tst_Q{BitArray,ContiguousCache}: check not only count(), but size(), too
  * QIosTextResponder: stop using deprecated constants and type
  * qcompilerdetection.h: detect Coverity
  * Android: Fix Display.getRealMetrics deprecation
  * Fix broken Text rendering when noantialiased NativeRendering is used
  * forkfd: fix Clang 15 ATOMIC_VAR_INIT deprecation warning
  * eglfs: Add env.var. to disable the dedicated drmHandleEvent thread
  * doc: Don't put strings into QVector&lt;double&gt;
  * Remove focusProxyAndInputMethods from tst_QWidget
  * Bump version to 5.15.12
  * Update documentation of qWaitForWindowActive / qWaitForWindowExposed
  * QtHttp: Lower the severity of some log output
  * StyleSheetStyle: Fix color of placeholder texts in text edits
  * Android: Fix flickering on split screen mode
  * Update url to IAccessible2 Specification</changelog>
  <changelog author="alarrosa@suse.com" date="1704283200">- Update to version 5.15.12+kde147:
  * Http2: fix potential overflow in assemble_hpack_block()
    (bsc#1218413, CVE-2023-51714)
  * HPack: fix incorrect integer overflow check
  * HPack: fix a Yoda Condition</changelog>
  <changelog author="fvogt@suse.com" date="1708084800">- Update to version 5.15.12+kde151:
  * Improve KTX file reading memory safety (CVE-2024-25580, boo#1219996)
  * Revert "xcb: only set base size when it's valid"
  * Fix potential leak of QPropertyAnimation in QLineEditIconButton
  * QBitArray: correct inline keyword</changelog>
  <changelog author="alarrosa@suse.com" date="1720785600">- Add patch from upstream to fix a regression in the ODBC driver
  (bsc#1227513, QTBUG-112375):
  * 0001-QSQL-ODBC-fix-regression-trailing-NUL.patch
  * 0002-SQL-ODBC-Pass-correct-length-to-SQLColAttribute.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1722945600">- Add rebased upstream patch to delay any HTTP2 communication until
  encrypted() can be responded to (bsc#1227426, CVE-2024-39936):
  * 0001-HTTP2-Delay-any-communication-until-encrypted-can-be.patch
- Add upstream patch to fix a NULL pointer dereference via the
  function QXcbConnection::initializeAllAtoms() when there is
  anomalous behavior from the X server (bsc#1222120,
  CVE-2023-45935):
  * 0001-xcb-guard-a-pointer-before-usage.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756728000">- Add patch from upstream to fix a precondition violation in call
  to QByteArrayView::at() which can cause crashes (bsc#1243958,
  CVE-2025-5455):
  * 0001-qDecodeDataUrl-fix-precondition-violation-in-call-to.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756814400">- Add patch from upstream to initialize a member variable that was
  uninitialized under some circumstances:
  * 0001-QObjectPrivateSignal-initialize-all-members.patch
- Add patch from upstream to fix a crash when parsing a particular
  glyph in a particular font (QTBUG-124310):
  * 0001-Avoid-crash-in-font-distancefield-computation.patch
  * 0002-Fix-crash-in-font-distancefield-computation.patch
- Add patch from upstream to fix avoid repeatedly registering
  xsettings callbacks when switching cursor themes:
  * 0001-xcb-Avoid-repeatedly-registering-xsettings-callbacks-When.patch
- Add patch from upstream to check validity of RandR output info
  before using it (QTBUG-128906):
  * 0001-xcb-check-validity-of-RandR-output-info-before-using-it.patch
- Add patch from upstream to fix reparenting a window so it takes
  effect even if there are no other state changes to the window:
  * 0001-xcb-Sync-XCB-connection-after-reparenting-window.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756900800">- Add patch from upstream to fix a low performance when processing
  XML data in encodeText (bsc#1239896, CVE-2025-30348):
  * 0001-XML_QDom-speedup-encodeText.patch</changelog>
</package>
<package pkgid="4b2648a5f290735120acde557e992e6b2fee8ce7f44a5e503aca0d3471a72518" name="libQt5Core5" arch="x86_64">
  <version epoch="0" ver="5.15.12+kde151" rel="150600.3.9.1"/>
  <changelog author="fvogt@suse.com" date="1678968000">- Update to version 5.15.8+kde183:
  * Add nullptr guard in QStyleSheetStyle::drawPrimitive(PE_PanelLineEdit)
  * QAbstractItemView: don't access invalid indexes on copy-key
  * Apply CVE-2023-24607-qtbase-5.15.diff (CVE-2023-24607,
    bsc#1209616)
  * QXcbConnection::getTimestamp: do not return stale timestamp
  * QToolButton: Elide text when constraints prevent from showing whole text
  * correctly set up ref counting in QThreadPool::tryStart(std::function)
  * Do not set Qt::ToolTip flag for QShapedPixmapWindow
  * Fix deletion order also for QImageReader/Writer::setDevice()
  * Fix deletion order in QImageReader/Writer destructors
  * QNetworkReply: Fix typos in the documentation
  * Doc: Fix typo in the online documentation template
  * Doc: Link to page documenting Qt trademarks in the copyright footer
  * [doc] Fix typo in QBuffer::setBuffer() description
  * qwindowsdrag: Fix typo in documentation
  * openglblacklists: Fix typo in description
  * qxcbscreen: Fix typo in documentation
  * Fix typos in SQL driver documentation
  * qxcbwindow.cpp: Fix sign-compare and another warnings
  * QToolButton: reimplement the fix for QTBUG-95255
  * QSysInfo::prettyProductName(): Add macOS Ventura product name
  * QSysInfo::prettyProductName(): add missing macOS product names
  * xcb: correctly disconnect xsettings callbacks
  * ibus: add SetCursorLocationRelative in InputContext.xml</changelog>
  <changelog author="fvogt@suse.com" date="1680523200">- Update to version 5.15.8+kde185:
  * QFSFileEngine: fix overflow bug when using lseek64
  * Add QImage null check when QOpenGLTexture converts
- Add patch to fix return key handling in QGroupBox on GNOME (bsc#1209364):
  * 0001-Revert-QGnomeTheme-Allow-Space-Return-Enter-and-Sele.patch
- Add patch to fix XInput2 events in big-endian X11 clients (bsc#1204883, QTBUG-105157):
  * big-endian-scroll.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1682078400">- Update to version 5.15.9+kde151, rebased upstream:
  * QCborValue: fix incorrect to{Array,Map} when the value is empty
  * QMargins: fix a missing "full stop" in the docs
  * QLibrary: restore translated string
  * QLibrary: fix possible arg() format clobbering
  * iOS: Use python3 for enumerating test target devices
  * Android: Treat ACTION_CANCEL as TouchCancelEvent
  * Doc: Fix broken formatting
  * QFileSystemEngine: fix potential formatting error
  * QString::asprintf: check that passing field widths as arguments works
  * Backport recent QFlags tests
  * network: Fix typos in documentation
  * Fix accuracy with screen composition
  * Doc: Update documentation for QElapsedTimer's in Windows
  * Document that QStandardPath::findExecutable works with absolute paths
  * macOS: Use native resize cursors for diagonal resize
  * Fix clipped glyphs in text rendering of QGraphicsTextItem
  * Change comparison data type to fix int overflow
  * Add missing Q_WEAK_OVERLOAD definition
  * Update QFileInfo docs to mention macOS aliases
  * Distinguish macOS aliases from normal symbolic links
  * Windows QPA: Fix frameless maximize on secondary screens
  * Rewrite tst_qdataurl as a data-driven test
  * Fix compilation for wasm
  * QIOSFileDialog/QIOSDocumentPickerController - handle dismissed view controller
  * Fix QDockWidget's dock area permissions after hovering
  * Fix C++20 ambiguous relational operators between QJsonValue{,Ref}
  * Android: make sure that orientationChange is reported after resize
  * Android: set all QScreen's geometry-related parameters together
  * Blacklist: test cases blacklisted in tst_QDBusConnection:
  * wasm:  fix issue with passing username/password to network request
  * macOS: Pass multi arch flags when linking qmake
  * QCocoaFileDialogHelper: Always enable symlinks and aliases to directories
  * Android: terminate argv passed to main() with nullptr
  * Update bundled libjpeg-turbo to version 2.1.3
  * ANGLE: Load the DirectX libraries from the system path directly
  * SQLite: Update SQLite to v3.37.2
  * Fix compiler warnings about unused parameters
  * Fix getsockopt option_value initial initialization
  * Http2: Fix redirect-handling
  * Android A11Y: Fix value rounding
  * Android A11Y: Announce value together with element name when focused
  * Android A11Y: handle valueChanged events
  * tst_QSystemSemaphore: give proper path to test-helper
  * QNX: Silence compiler warning by initializing variable
  * Update LICENSE.QT-LICENSE-AGREEMENT
  * winrt appxmanifest: Properly replace VCLibs version for newer MSVC versions
  * QAbstractSocket: Don't pretend pause and resume is a stack
  * Gui: test also depends for clipboard feature
  * QDesktopServices: deprecate destroying URL handlers w/o explicit unsetUrlHandler()
  * macOS: Respect QMAKE_APPLE_DEVICE_ARCHS when building qmake
  * HTTP: Make redirect response parsing more generic
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 20.04
  * Android A11Y: populate child elements when constructing node info
  * Fix issue where readyRead() could happen after disconnected()
  * QStringView: add missing constexpr so we can use is_constant_evaluated
  * Use Android's View.generateViewId() for generating ids for views/surfaces
  * Remove documentation of non-existing QAccessible state
  * Doc: Fix snippet to match actual QFileInfo behavior
  * Android: Re-focus focused accessibility node after orientation change
  * Android A11Y: execute C++ code on main Qt thread
  * Android: extract parentId for hidden object in advance
  * xcb: Show valuator atom names properly in categorized logging
  * Android: replace stacktrace with debug message in search for setService
  * Better document attaching a QFutureWatcher to a started QFuture
  * doc: Update GenericDataLocation location on iOS
  * BLACKLIST test_Gestures tests for RHEL-8.4
  * QPlainTestLogger: do not print "failure location" if there's no failure
  * QAbstractItemView: do not access invalid model indices (3/N)
  * Win32: always allow the event loop to be woken up by posted events
  * rhi: d3d11: Use __uuidof where we can
  * Don't QEXPECT_FAIL tst_QLineEdit::testQuickSelectionWithMouse on macOS ARM
  * Network: Emit authenticationRequired when using Ntlm
  * testlib: Disable window restoration on macOS in a non-persistent way
  * QAbstractItemView: do not access invalid model indices (2/N)
  * QAbstractItemView: do not access invalid model indices (1/N)
  * QAbstractItemView: code tidies
  * Update float16 part of TestLib selftest
  * QGuiApplication: constant-initialize lastCursorPosition
  * Blacklist tst_QFileSystemWatcher::signalsEmittedAfterFileMoved on all Windows versions
  * [Android]: Handle the screen name, modes and refreshRate properly
  * QVersionNumber: remove the "pure" attribute from commonPrefix()
  * QEvent: initialize the static userEventTypeRegistry constexprly
  * Let QXcbGlxWindow::createVisual fallback to QXcbWindow::createVisual
  * Android A11Y: fix content update notification when object is hidden
  * Android: explicitly remove accessibility focus when element is hidden
  * BLACKLIST tst_qfont for Red Hat 8.4 and Ubuntu 20.04
  * QtCore: includemocs
  * Fix memory leak in QtConcurrent::run when called with a NULL QThreadPool
  * INTEGRITY: Prevent deletion of virtual functions
  * QMake: replace a Q_ASSERT() with a Q_UNREACHABLE()
  * QTransform benchmark: measure what was promised
  * QStaticByteArrayMatcher: add a useful comment
  * QMacStyle: use the 'momentary push in' type for push buttons
  * qopengl.h: Move C header #include(s) out of the QT_NAMESPACE
  * Enable all supported 1.0 device features in QVulkanWindow
  * Fix queue passed to vkQueuePresent
  * QFusionStyle: don't draw an invalid outline for up/down buttons
  * Doc: Make QListIterator snippets more robust
  * QVersionNumber: don't detach() in rvalue QList/QVector ctor
  * QNetworkRequest: Document how Qt handles 301 and 302 status codes
  * Convert date-time to UTC before claiming it's in GMT
  * Remove execute permission from XML files
  * Add test case for style sheet selectors for enum properties
  * FreeType: allow falling back to synthesized bold if desired
  * Fix an assertion failure in massageAdjustedDateTime()
  * Relax tst_qvulkan::vulkanVersionRequest to make it compatible with 1.1
  * Doc: Replace "C:Documents and Settings" paths
  * QOrderedMutexLocker: fix compilation with C++11
  * QHttpNetworkConnection: Always set proxy settings to all channels
  * Add a markdown writer test for a checklist item ending with `code`
  * Use QTextCharFormat::fontFixedPitch to remember Markdown backtick spans
  * QWizardLayoutInfo: make == and != operators const
  * Revert "Android: Fix screen flicker issues"
  * macOS: Handle momentum scroll NSEventPhaseBegan when scroll had ended
  * SQLite: Update SQLite to v3.37.0
  * Update copyright year to 2022
  * QTzTimeZonePrivate: use ctor delegation instead of init()
  * QTzTimeZonePrivate: fix permanently-detaching m_icu
  * tst_QGraphicsView: fix memleak
  * Doc: Update external links to Qt Creator Manual
  * macOS: assume an unidentified tablet device is a stylus
  * tst_QItemModel: fix memleaks
  * tst_qanimationgroup: fix memleaks
  * QAbstractAnimation: add missing forward-declaration
  * [doc] QCoreApplication::installTranslator() doesn't take ownership
  * tst_qtranslator: fix memleak
  * QTestData: fix streaming of u8 string literals in C++20 mode
  * QThread/Unix: extract duplicate code
  * QWindowPrivate: fix inconsistent inline on some methods
  * tst_QStringList: check that join(u'0') embeds NULs
  * macOS: Sanitize scroll deltas for NSEventPhaseCancelled
  * tst_qsharedmemory: skip readOnly() test under asan
  * QXmlStreamReader: update test distribution
  * QZipReader: update to unzip partly broken archives
  * Deliver context menu event with correct coordinates to widgets in popups
  * QTextHtmlParser: fix prefix lookahead and html comments
  * QtConcurrent::run crashes on program exit
  * tst_QPropertyAnimation: fix leaks occurring under normal operation
  * tst_QPropertyAnimation: fix wrong comment
  * QLogging: fix potential missing NUL-terminator when calling OutputDebugString
  * Fix qt_scrollRectInImage when scrolling outside of the image
- Commits dropped by the rebase:
  * Fix compile with Qt5: Use QString::mid instead of QString::sliced
  * Restore C++11 compatibility after e8b9f4c28d3ab5e960dc54f2dc0c4b749b0b50e0
  * QDateTime: Don't require c++17</changelog>
  <changelog author="fvogt@suse.com" date="1683633600">- Amend patch to fix mouse grabbing as well (bsc#1211024):
  * big-endian-scroll.patch</changelog>
  <changelog author="fvogt@suse.com" date="1684929600">- Update to version 5.15.9+kde154:
  * Hsts: match header names case insensitively (CVE-2023-32762,
    QTBUG-113392, bsc#1211797)
  * Fix specific overflow in qtextlayout (CVE-2023-32763,
    QTBUG-113337, bsc#1211798)
  * QDnsLookup/Unix: make sure we don't overflow the buffer
    (CVE-2023-33285, boo#1211642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1686657600">- Update to version 5.15.10+kde129, rebased upstream:
  * Ssl: Copy the on-demand cert loading bool from default config
  * Schannel: Reject certificate not signed by a configured CA certificate (boo#1211994, CVE-2023-34410)
  * qnetworkreplyfileimpl_p.h: fix header guard name
  * Revert "Draw the cursor considering the descent is 0"
  * Use pkgconfig in order to find libproxy configuration
  * Upgrade PCRE2 to 10.40
  * Android A11Y: handle LocationChanged event only for focused element
  * Port binary JSON to new special integer bitfields
  * INTEGRITY: enable C99 globally
  * QObject: mark two error reporting functions COLD
  * Endian: Provide special integer bitfield unions
  * Android: set useLegacyPackaging to true in build.gradle
  * QWidgetTextControl: port to new-style connects (faster)
  * Sync qxmlstream.g with qxmlstreamparser_p.h [1/2]: switched lines
  * tst_QNetworkReply try stabilize autoDeleteReplies tests
  * Remove duplicated include for &lt;limits&gt;
  * Fix recursion crash when calling setStyleSheet with `qproperty-styleSheet`
  * qwindowsxpstyle: Fix typos in documentation
  * Correct prefix reported for end element in QXmlStreamReader
  * Android A11Y: Add supported role infos to A11yNodeInfo
  * Fix handling of DateTime values in QSettings
  * Fix off-by-one for "typically" lowest value INT_MIN
  * xml: Fix typos in documentation
  * QWindowsWindow: Fix typo in documentation
  * includemocs (updated script)
  * widgets: Fix typos in documentation
  * cocoa: Fix typo in debug messages
  * Only scroll QMenu when there is a valid active action
  * QTimer: Add note in documentation
  * Fix QListView assert when the last row is moved in IconMode
  * QFileDialog: Fix adding default suffix when file path contains dot
  * QLineEdit: account for the placeholderText when computing lineRect
  * QFileDialog::saveFileContent crashes on accept
  * QCompleter: QCompleter unexpectedly changes QLineEdit text
  * Fix build error on iOS with the configure option -qtnamespace
  * Draw the cursor considering the descent is 0
  * Remove pure-virtual-signals.h include from tst_moc.cpp
  * plugins: image formats - fix odr violation
  * dbus: Fix typos
  * qwindowsdialoghelpers: Fix typo in documentation
  * QTableView: Document the customizations applied to QHeaderView
  * Unicodetools: compile
  * eglfs_x11: Fix running flag linkage
  * qcompilerdetection.h: add Q_CC_{GNU,MSVC,CLANG}_ONLY macros
  * Fix CMake warning about "missing closing ' quote"
  * Fix alignment of next/prev links in offline style
  * QtDBus: includemocs
  * Image Plugins: includemocs(-ish)
  * QtGui: includemocs
  * QXcbNativeInterface: remove unused field m_sysTraySelectionAtom
  * Windows QPA: Fix slowdown with large table/tree views with accessibility
  * Macstyle: fix the text color on the disabled button
  * QMacStyle: fix tool buttons (in checked mode)
  * QTeamCityLogger: fix .arg() placeholder injection
  * QAbstractTestLogger: disable copying
  * Fix errorMessageFromComError()
  * QtNetwork: includemocs
  * AppleUnifiedLogger: Remove manually managed os_log_t cache
  * examples: add WindowStaysOnBottomHint into preview text
  * QSharedPointer: Use matching new/delete
  * QIbusPlatformInputContextPlugin: includemocs
  * QGtk3ThemePlugin: includemocs
  * QTuioTouchPlugin: includemocs
  * QtWidgets: includemocs v2022
  * QMYSQLDriverPlugin: includemocs
  * QtDeviceDiscoverySupportPrivate: includemocs
  * QLinuxFbIntegrationPlugin: includemocs
  * QtPrintSupport: includemocs
  * QSQLiteDriverPlugin: includemocs
  * QtFbSupportPrivate: includemocs
  * QXdgDesktopPortalThemePlugin: includemocs
  * QtTest: includemocs
  * QComposePlatformInputContextPlugin: includemocs
  * QtSql: includemocs
  * QVncIntegrationPlugin: includemocs
  * Fix backingstore fractional DPR glitches for widgets in child windows
  * Include &lt;limits&gt; where std::numeric_limits is used
  * QtInputSupportPrivate: includemocs
  * Document the default value of QSFPM::sortOrder()
  * Better document how to enable sorting in QSPFM
  * Correct documentation of INI format's loss of type information
  * Android: add missing properties in AndroidManifest.xml
  * Fix assertion failure when parsing a doubly-invalid date-time text
  * Windows QPA: Correct mistake when calculating minmaxinfo
  * Android: replace ndk.dir with android.ndkVersion in build.gradle
  * Android: remove the old copy of gradle.properties after reading it
  * CMake Android Support: Fix signing of APKs
  * Android: fix A11Y object description
  * macOS: Fix warning about comparing different types in QCocoaScreen::isOnline
  * Fix qmake build on FreeBSD
  * Update documentation of enum Qt::DockWidgetArea
  * xcb: recreate xcb window under some conditions
  * objc_namespace: Add support for universal binaries
  * objc_namespace: Fix misspelled argument for silencing output
  * objc_namespace: Update parsing logic to account for otool changes
  * Blacklist passwordAuth for Ubuntu 20.04
  * Android: wrap QAndroidInputContext's m_focusObject in a QPointer
  * Fix compilation with GCC 12 (and on Fedora 35 and newer)
  * Chip example: fix an accidental bool-&gt;int conversion when using PMF connections
  * qmake: Add support for C++23
  * Android: use BCP 47 tag to create a correct Locale for QTimeZone::displayName()
  * QDateTime: fix adjusted datetime handling
  * Fix crash in tst_qmltc_examples on Android
  * macOS: Remove dead code for focus ring handling in Mac style
  * Detach for colortransforms of indexed formats
  * tst_QTcpSocket::connectToHostError - handle possible timeouts
  * CoreText: Avoid populating font family aliases if family was populated
  * Graphicsview: Avoid background clearing glitches under fractional DPR
  * Windows QPA: Avoid slowdown with UI Automation name change notification
  * Windows QPA: Avoid sending accessibility notifications before activation
  * Windows: Fix potential crash when retrieving default printer
  * Make Ubuntu with its non-standard security level happy
  * Android: Blacklist failing tests on tst_QGraphicsProxyWidget
  * Update LA 4.4.1
  * iOS A11Y: Set more accessibilityTraits
  * QNX: Fix compiler warning by when FEATURE_clipboard is not enabled
  * Document that native file dialogs might not show a title
  * Doc: Remove mentionings of overflows from QElapsedTimer
  * QTextMarkdownImporter: don't apply text char format to list item block
- Commits dropped by the rebase:
  * QBuffer: add missing &lt;limits&gt; include
  * Fix developer build</changelog>
  <changelog author="gmbr3@opensuse.org" date="1687953600">- Change %_libqt5_libexecdir to %_libexecdir/qt5 (bsc#1174075)</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch icu-devel requires to pkgconfig to allow switching libicu
  versions</changelog>
  <changelog author="fvogt@suse.com" date="1695902401">- Update to version 5.15.10+kde159 (bsc#1214327, CVE-2023-37369):
  * Fix CVE-2023-43114
  * QMimeDatabase: fix detection of pattern conflict in different prefixes
  * Fix highdpi conversion of QTabletEvent coordinates on xcb
  * widget: set WA_X11NetWmWindowType* after xcb window was created
  * Fix crash when setting override cursor on multiple clients
  * QAccessibleWidget: Remove pointless ZWSP in warning message
  * Android A11Y: Fix deadlock in QtAndroidAccessibility::runInObjectContext()
  * Correctly parse non BMP char refs in the sax parser
  * Clear the _X version of alongside the enum deprecator
  * Fix UB (signed char passed to &lt;cctype&gt; function)
  * Qt3DRender: includemocs
  * Fix capitalization error in auto-generated qdbusmacros.h include
  * QColorDialog: Ignore mouse move events when no mouse button is pressed
  * QHostInfo: fix remaining slotObj leaks
  * QXmlStreamReader: Raise error on unexpected tokens (CVE-2023-38197,
    QTBUG-92113, QTBUG-95188, bsc#1213326)
  * QTextLayout: Reconsider cursor drawing on TextObject
  * Ensure consistent cursor width under fractional scaling
  * Fix QTextEdit cursor rectangle vertical positioning
  * Return 0 in QWindow::winId in case of failed platform window creation
  * Doc: note QWindow::winId() will cause platform window creation
  * QSslDiffieHellmanParameters: fix mem-leak
  * QHostInfo: fix leaking slot object
  * Make sure we don't count down past 0 QT_FATAL_CRITICALS
  * QLogging: DRY isFatal(QtMsgType)
  * tst_QXmlStream: remove unneeded _ba UDLs
  * Fix typo in QXmlStreamReader error message
  * QXmlStreamReader: make fastScanName() indicate parsing status to callers
  * QXmlStreamReader: change fastScanName() to take a Value*
  * Fix Croatia's currency
  * SSL: upgrade the default DH parameters</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1696593600">- Update to version 5.15.11+kde134, rebased upstream:
  * Revert "Windows QPA: Add support to UiaRaiseNotificationEvent()"
  * FileChooser portal: Make sure filter.name is not empty
  * QPersistentModelIndex: fix UB (op&lt; on unrelated pointers)
  * Avoid crash when keysymToQtKey(keysym, Qt::ControlModifier) is called
  * a11y atspi: translate coords for GetOffsetAtPoint the right way
  * a11y atspi: Take dialog into account as top-level window
  * a11y atspi: Fix incorrect use of x instead of y position
  * macOS: Handle asynchronous deminiaturizing of windows
  * QTranslator: generalize a UNIX-only path
  * iOS, input panel: be more careful before enabling QIOSKeyboardListener
  * Android: Fix flickering on window resize and show keyboard
  * Android A11Y: Check for active surface before calling into native code
  * xcb: Delete touch points without target windows
  * Blacklist 1 tests in tst_QDBusConnection on ubuntu-20.04
  * Fix CMake builds without ANDROID_SDK
  * Blacklist 2 tests in tst_Http2 on ubuntu-20.04
  * Blacklist 1 tests in tst_QSqlQuery on macos
  * Defer creating the special shaders in the texture blitter
  * tst_QSslSocket::serverCipherPreferencies - fix for OpenSSL v3
  * QTemporaryFile: document rename() differences from QFile
  * Doc: 3rd party: Fix reference to FreeType LICENSE.txt
  * Update bundled libjpeg-turbo to version 2.1.4
  * tst_QSsSocket: fix verifyClientCertificate with OpenSSL 3
  * tst_QSslSocket: regenerate certificate used for setLocalCertificateChain
  * tst_QSslSocket::protocolServerSide - make it work with OpenSSL v3
  * tst_QSslSocket::oldErrorsOnSocketReuse - make it work with OpenSSL v3
  * Update zconf.h prefixes to match zlib v1.2.12 update
  * xcb: fix D&amp;D in same xembed client
  * xcb: use global coordinates for position of D&amp;D for xembed client
  * Doc: Update QMetaType::metaObject() descriptions
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 22.04
  * BLACKLIST tst_qfont for Ubuntu 22.04
  * BLACKLIST tst_QMenuBar::check_menuPosition for Ubuntu 22.04
  * tst_QDtls::verifyClientCertficiate - update certs for OpenSSL v3
  * QSslCertificate::toText(): add a file to compare against
  * Fix the spelling of the word "combination"
  * tst_QSslCertificate::pkcs12 - skip the test if OpenSSL version &gt;= 3
  * Android A11Y: Fix TalkBack scrolling behavior
  * Android A11Y: Notify android about scroll events
  * QCocoaDrag: don't add pasteboard items with non-absolute URLs
  * QDirPrivate: pass input QList by cref
  * tst_qbytearray: remove qCompress_data for QT_NO_COMPRESS
  * QDeviceDiscoveryUDev: use NSDMI
  * QAuthenticator: Fix crash when using NTLM / Negotiate
  * Provide a native interface instance in minimal platform plugin
  * Android: document the supported clipboard mimetypes
  * Windows: Account for not finding child windows when calling ChildWindowFromPointEx
  * iOS: Send touch events asynchronously to avoid deadlocking UIKit event loop
  * Disable bitcode for iOS
  * macOS: Ignore deprecation for ReleaseIconRef
  * BLACKLIST tst_QApplication::sendEventsOnProcessEvents for Ubuntu 22.04
  * Convert Latin1 to UTF-16 before passing to ICU API
  * Doc: Remove repetition of word in text
  * eglfs: Fix screen cloning when atomic is enabled
  * Fix printing of dpr&gt;1 images on Windows
  * QHttp: Fix handling of redirect loaded from cache
  * Doc: Fix return type of QLEInteger/QBEInteger post-in/decrement ops
  * qmake: Fix installation of separate debug info for plugins
  * iOS: ensure we close inputpanel after clearing focusobject
  * Convert Latin1 to UTF-16 before passing to ICU API
  * qputenv: defend against non-NUL-terminated QByteArray values
  * QFontSubset: remove unused glyphName() overload
  * Statically assert that the __mips_dsp code is only active on 32-bit
  * QGtk3Theme: Ensure gtk uses the same windowing system as Qt
  * tst_QFocusFrame: fix -Wparantheses
  * Sync Vulkan device features between QVulkanWindow and QRhi
  * SQLite: Update SQLite to v3.39.2
  * Update freetype to 2.12.1
  * corelib: Fix typos in documentation
  * QAtomicInteger docs: mention bool and char8_t as 8-bit types
  * qgraphicsitem_cast: replace 0 with nullptr
  * Doc: Hide weak overload template magic from documentation
  * Revert "QDateTime: fix adjusted datetime handling"
  * Fix select handles disappears issues
  * tst_QSslKey: prepare for the migration to OpenSSL v3
  * tst_qnetworkreply: replace server.pem/key pair
  * Disable unit testing setting up QTcpServer on special Apple interfaces
  * qmake/msbuild: Turn off "use full paths in diagnostics" by default
  * qmake/msbuild: Support all /DEBUG:xxx linker options
  * qmake/msbuild: Support all /LTCG:xxx options
  * Android A11Y: Add content change type to content change event
  * Enabler for fractional scaling of text in Qt Quick
  * macOS: Override logical DPI to 72
  * Add QDom internalSubset implementation
  * Fix tst_AndroidAssets, broken by recent changes on assets load speed
  * Android: Improve loading speed of individual assets
  * Darwin: Replace deprecated symbol kIOMasterPortDefault with equivalent
  * macOS: Remove code for handling logical DPI changes
  * Fix an incorrect invocation of llvm-readobj
  * macOS: Ignore deprecation for kOnSystemDisk icon domain
  * Copy only files that belongs to QML module
  * Android: fix wrong position of cursor handle and editpopup menu in split screen
  * Doc: Document QML_IMPORTS_PATH and QMLPATHS
  * Add the missing RCC_DIR to '.qrc' paths when generating deployment settings
  * Android: Fix the offset of the EditPopupMenu
  * xcb: update xkb_state mask as much as possible
  * QDom: Stop treating non-BMP characters as invalid
  * Android 13: Fix warnings on starting an application
  * qxkbcommon: Map Super/Hyper to Meta early enough to have an effect
  * macOS: Ignore update requests for offline displays
  * macOS: Avoid recursively updating screens when window moves screen
  * qmake/MinGW: Install separate debug info of DLLs next to the DLL
  * QMainWindow: fix restoreState() for toolbars
  * Make two QDT benchmarks data-driven and add more rows
  * Fix doc and example of QLoggingCategory::installCategory()
  * qmake: Document Xcode behavior when bundling translation files
  * Android: Fix missing import
  * QByteArray: more GCC 12 -Werror=array-bound whack-a-mole
  * CMake: Fix android sdk version propagation
  * Restore C++20-deprecated mixed-enum bitwise operators
  * Android: Fix ANR when QtService and QtActivity load in same process
  * Fix restart QtActivity
  * QArrayData::data(): do type-punning via quintptr, not char *
  * QIOSTextResponder: recreate responder upon reset
  * QSslSocket: make it work with OpenSSL v3
  * QFileSystemModelPrivate: de-inline ctor and dtor
  * Network: update Public Suffix List
  * macOS: Ensure proper quoting when calling otool in objc_namespace script
  * QKeySequence: Fix the one-off error in the mac glyph array size
- Commits dropped by the rebase:
  * Apply CVE-2022-27404-27405-27406-qtbase-5.15.diff
  * QArrayData: fix UB via reinterpret_cast (crash with FORTIFY_SOURCE=3)
  * Adapt for q_EVP_PKEY_base_id → q_EVP_PKEY_get_base_id rename in OpenSSL 3
  * Don't use a deprecated function if built/linked with OpenSSL v3</changelog>
  <changelog author="christophe@krop.fr" date="1696593601">- Enable the experimental native painting feature to improve
  remote desktop performances (boo#1214915)
  exporting QT_XCB_NATIVE_PAINTING is required to use the feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1697716800">- Update to version 5.15.11+kde138:
  * QLibraryPrivate: Actually merge load hints
  * QPluginLoader: report the right load hints
  * xkb: fix build with libxkbcommon 1.6.0 and later
  * a11y atspi: Map ButtonMenu role to AT-SPI equivalent</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1703851200">- Update to version 5.15.12+kde144, rebased upstream:
  * QMimeDatabase: handle buggy type definitions with circular inheritance
  * xcb: only set base size when it's valid
  * QPixmapCache: fix leaking of QStrings and Keys on clear()
  * OpenFile portal: do not use O_PATH fds
  * QSystemTrayIcon: properly disconnect old menu in setContextMenu()
  * Guard QTabBar against nested event processing during moving tabs
  * QDial: don't crash when min==max and setting a value != min &amp; max
  * QStandardItemModel: don't leak in mimeData()
  * SQL/MySQL: properly initialize variable
  * QWidgetTextControl: ignore invalid input method event
  * Update the LGPL license header
  * SQL/MySQL: fix handling of json column
  * Remove QMAKE_RANLIB and QMAKE_LINK_SHLIB from android/default_pre.prf
  * macOS: Fix less common writing systems on Catalina and later
  * Blacklist 1 tests in tst_QFtp on ubuntu-20.04
  * Update bundled libpng to version 1.6.39
  * Android: Fix signing of APKs that are generated when an AAB is also built
  * Update bundled zlib to version 1.2.13
  * doc: update the limitation of QSystemTrayIcon on X11
  * Blacklist 1 tests in tst_QTimer on ubuntu-20.04
  * Add benchmarks for QLocale number parsing
  * Add benchmarks for QString number parsing
  * Android: Fix incorrect fullscreen dimensions
  * Gtk3Theme: set XCURSOR_SIZE and XCURSOR_THEME for wayland sessions
  * xcb: Flush Display when processing xcb events
  * xcb: Add xlib wrapper for XFlush()
  * QHostAddress: Fix incorrect comparison against 'Any'
  * QSsl[OpenSSL/Android]: Fix hardcoded 1_1 suffix
  * BLACKLIST: tst_QApplication::sendEventsOnProcessEvents for RHEL 9.0
  * QMacStyle: do not set white color for grayed out button
  * Work round macOS's omission of en_DE from its own uiLanguages()
  * Suppress a deprecation warning in tst_QDateTime::toString_enumformat()
  * QJsonValue: fix incorrect to{Array,Object} when the value is empty
  * QGtk3Dialog: remove the #include for empty moc
  * Remove unneeded QWindow from QGtk3Dialog
  * tst_QSslSocket: Delete sslOptions
  * tst_QSslServer: Make the in-process server use TLS1.2
  * Android: fix Gradle warning about using enableUncompressedNativeLibs
  * Mention  limitation of QDir::drives() on Windows
  * QFileSystemEngine/Win: fix incorrect buffer size in currentPath()
  * Android: properly retrieve mime type of uri to for openUrl()
  * Android: Fix clipboard issue with urls
  * Android: Add a way to disable accessibility via an environment var
  * Update bundled libpng to version 1.6.38
  * QIOSMessageDialog::exec - work around 'windowsless' exec
  * QIosScreen: retain the right window
  * tst_Q{BitArray,ContiguousCache}: check not only count(), but size(), too
  * QIosTextResponder: stop using deprecated constants and type
  * qcompilerdetection.h: detect Coverity
  * Android: Fix Display.getRealMetrics deprecation
  * Fix broken Text rendering when noantialiased NativeRendering is used
  * forkfd: fix Clang 15 ATOMIC_VAR_INIT deprecation warning
  * eglfs: Add env.var. to disable the dedicated drmHandleEvent thread
  * doc: Don't put strings into QVector&lt;double&gt;
  * Remove focusProxyAndInputMethods from tst_QWidget
  * Bump version to 5.15.12
  * Update documentation of qWaitForWindowActive / qWaitForWindowExposed
  * QtHttp: Lower the severity of some log output
  * StyleSheetStyle: Fix color of placeholder texts in text edits
  * Android: Fix flickering on split screen mode
  * Update url to IAccessible2 Specification</changelog>
  <changelog author="alarrosa@suse.com" date="1704283200">- Update to version 5.15.12+kde147:
  * Http2: fix potential overflow in assemble_hpack_block()
    (bsc#1218413, CVE-2023-51714)
  * HPack: fix incorrect integer overflow check
  * HPack: fix a Yoda Condition</changelog>
  <changelog author="fvogt@suse.com" date="1708084800">- Update to version 5.15.12+kde151:
  * Improve KTX file reading memory safety (CVE-2024-25580, boo#1219996)
  * Revert "xcb: only set base size when it's valid"
  * Fix potential leak of QPropertyAnimation in QLineEditIconButton
  * QBitArray: correct inline keyword</changelog>
  <changelog author="alarrosa@suse.com" date="1720785600">- Add patch from upstream to fix a regression in the ODBC driver
  (bsc#1227513, QTBUG-112375):
  * 0001-QSQL-ODBC-fix-regression-trailing-NUL.patch
  * 0002-SQL-ODBC-Pass-correct-length-to-SQLColAttribute.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1722945600">- Add rebased upstream patch to delay any HTTP2 communication until
  encrypted() can be responded to (bsc#1227426, CVE-2024-39936):
  * 0001-HTTP2-Delay-any-communication-until-encrypted-can-be.patch
- Add upstream patch to fix a NULL pointer dereference via the
  function QXcbConnection::initializeAllAtoms() when there is
  anomalous behavior from the X server (bsc#1222120,
  CVE-2023-45935):
  * 0001-xcb-guard-a-pointer-before-usage.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756728000">- Add patch from upstream to fix a precondition violation in call
  to QByteArrayView::at() which can cause crashes (bsc#1243958,
  CVE-2025-5455):
  * 0001-qDecodeDataUrl-fix-precondition-violation-in-call-to.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756814400">- Add patch from upstream to initialize a member variable that was
  uninitialized under some circumstances:
  * 0001-QObjectPrivateSignal-initialize-all-members.patch
- Add patch from upstream to fix a crash when parsing a particular
  glyph in a particular font (QTBUG-124310):
  * 0001-Avoid-crash-in-font-distancefield-computation.patch
  * 0002-Fix-crash-in-font-distancefield-computation.patch
- Add patch from upstream to fix avoid repeatedly registering
  xsettings callbacks when switching cursor themes:
  * 0001-xcb-Avoid-repeatedly-registering-xsettings-callbacks-When.patch
- Add patch from upstream to check validity of RandR output info
  before using it (QTBUG-128906):
  * 0001-xcb-check-validity-of-RandR-output-info-before-using-it.patch
- Add patch from upstream to fix reparenting a window so it takes
  effect even if there are no other state changes to the window:
  * 0001-xcb-Sync-XCB-connection-after-reparenting-window.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756900800">- Add patch from upstream to fix a low performance when processing
  XML data in encodeText (bsc#1239896, CVE-2025-30348):
  * 0001-XML_QDom-speedup-encodeText.patch</changelog>
</package>
<package pkgid="081d42496ae11ed5c85d22dc29142db71e71287096b743b1dee5ec3c8485e75e" name="libQt5DBus-devel" arch="x86_64">
  <version epoch="0" ver="5.15.12+kde151" rel="150600.3.9.1"/>
  <changelog author="fvogt@suse.com" date="1678968000">- Update to version 5.15.8+kde183:
  * Add nullptr guard in QStyleSheetStyle::drawPrimitive(PE_PanelLineEdit)
  * QAbstractItemView: don't access invalid indexes on copy-key
  * Apply CVE-2023-24607-qtbase-5.15.diff (CVE-2023-24607,
    bsc#1209616)
  * QXcbConnection::getTimestamp: do not return stale timestamp
  * QToolButton: Elide text when constraints prevent from showing whole text
  * correctly set up ref counting in QThreadPool::tryStart(std::function)
  * Do not set Qt::ToolTip flag for QShapedPixmapWindow
  * Fix deletion order also for QImageReader/Writer::setDevice()
  * Fix deletion order in QImageReader/Writer destructors
  * QNetworkReply: Fix typos in the documentation
  * Doc: Fix typo in the online documentation template
  * Doc: Link to page documenting Qt trademarks in the copyright footer
  * [doc] Fix typo in QBuffer::setBuffer() description
  * qwindowsdrag: Fix typo in documentation
  * openglblacklists: Fix typo in description
  * qxcbscreen: Fix typo in documentation
  * Fix typos in SQL driver documentation
  * qxcbwindow.cpp: Fix sign-compare and another warnings
  * QToolButton: reimplement the fix for QTBUG-95255
  * QSysInfo::prettyProductName(): Add macOS Ventura product name
  * QSysInfo::prettyProductName(): add missing macOS product names
  * xcb: correctly disconnect xsettings callbacks
  * ibus: add SetCursorLocationRelative in InputContext.xml</changelog>
  <changelog author="fvogt@suse.com" date="1680523200">- Update to version 5.15.8+kde185:
  * QFSFileEngine: fix overflow bug when using lseek64
  * Add QImage null check when QOpenGLTexture converts
- Add patch to fix return key handling in QGroupBox on GNOME (bsc#1209364):
  * 0001-Revert-QGnomeTheme-Allow-Space-Return-Enter-and-Sele.patch
- Add patch to fix XInput2 events in big-endian X11 clients (bsc#1204883, QTBUG-105157):
  * big-endian-scroll.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1682078400">- Update to version 5.15.9+kde151, rebased upstream:
  * QCborValue: fix incorrect to{Array,Map} when the value is empty
  * QMargins: fix a missing "full stop" in the docs
  * QLibrary: restore translated string
  * QLibrary: fix possible arg() format clobbering
  * iOS: Use python3 for enumerating test target devices
  * Android: Treat ACTION_CANCEL as TouchCancelEvent
  * Doc: Fix broken formatting
  * QFileSystemEngine: fix potential formatting error
  * QString::asprintf: check that passing field widths as arguments works
  * Backport recent QFlags tests
  * network: Fix typos in documentation
  * Fix accuracy with screen composition
  * Doc: Update documentation for QElapsedTimer's in Windows
  * Document that QStandardPath::findExecutable works with absolute paths
  * macOS: Use native resize cursors for diagonal resize
  * Fix clipped glyphs in text rendering of QGraphicsTextItem
  * Change comparison data type to fix int overflow
  * Add missing Q_WEAK_OVERLOAD definition
  * Update QFileInfo docs to mention macOS aliases
  * Distinguish macOS aliases from normal symbolic links
  * Windows QPA: Fix frameless maximize on secondary screens
  * Rewrite tst_qdataurl as a data-driven test
  * Fix compilation for wasm
  * QIOSFileDialog/QIOSDocumentPickerController - handle dismissed view controller
  * Fix QDockWidget's dock area permissions after hovering
  * Fix C++20 ambiguous relational operators between QJsonValue{,Ref}
  * Android: make sure that orientationChange is reported after resize
  * Android: set all QScreen's geometry-related parameters together
  * Blacklist: test cases blacklisted in tst_QDBusConnection:
  * wasm:  fix issue with passing username/password to network request
  * macOS: Pass multi arch flags when linking qmake
  * QCocoaFileDialogHelper: Always enable symlinks and aliases to directories
  * Android: terminate argv passed to main() with nullptr
  * Update bundled libjpeg-turbo to version 2.1.3
  * ANGLE: Load the DirectX libraries from the system path directly
  * SQLite: Update SQLite to v3.37.2
  * Fix compiler warnings about unused parameters
  * Fix getsockopt option_value initial initialization
  * Http2: Fix redirect-handling
  * Android A11Y: Fix value rounding
  * Android A11Y: Announce value together with element name when focused
  * Android A11Y: handle valueChanged events
  * tst_QSystemSemaphore: give proper path to test-helper
  * QNX: Silence compiler warning by initializing variable
  * Update LICENSE.QT-LICENSE-AGREEMENT
  * winrt appxmanifest: Properly replace VCLibs version for newer MSVC versions
  * QAbstractSocket: Don't pretend pause and resume is a stack
  * Gui: test also depends for clipboard feature
  * QDesktopServices: deprecate destroying URL handlers w/o explicit unsetUrlHandler()
  * macOS: Respect QMAKE_APPLE_DEVICE_ARCHS when building qmake
  * HTTP: Make redirect response parsing more generic
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 20.04
  * Android A11Y: populate child elements when constructing node info
  * Fix issue where readyRead() could happen after disconnected()
  * QStringView: add missing constexpr so we can use is_constant_evaluated
  * Use Android's View.generateViewId() for generating ids for views/surfaces
  * Remove documentation of non-existing QAccessible state
  * Doc: Fix snippet to match actual QFileInfo behavior
  * Android: Re-focus focused accessibility node after orientation change
  * Android A11Y: execute C++ code on main Qt thread
  * Android: extract parentId for hidden object in advance
  * xcb: Show valuator atom names properly in categorized logging
  * Android: replace stacktrace with debug message in search for setService
  * Better document attaching a QFutureWatcher to a started QFuture
  * doc: Update GenericDataLocation location on iOS
  * BLACKLIST test_Gestures tests for RHEL-8.4
  * QPlainTestLogger: do not print "failure location" if there's no failure
  * QAbstractItemView: do not access invalid model indices (3/N)
  * Win32: always allow the event loop to be woken up by posted events
  * rhi: d3d11: Use __uuidof where we can
  * Don't QEXPECT_FAIL tst_QLineEdit::testQuickSelectionWithMouse on macOS ARM
  * Network: Emit authenticationRequired when using Ntlm
  * testlib: Disable window restoration on macOS in a non-persistent way
  * QAbstractItemView: do not access invalid model indices (2/N)
  * QAbstractItemView: do not access invalid model indices (1/N)
  * QAbstractItemView: code tidies
  * Update float16 part of TestLib selftest
  * QGuiApplication: constant-initialize lastCursorPosition
  * Blacklist tst_QFileSystemWatcher::signalsEmittedAfterFileMoved on all Windows versions
  * [Android]: Handle the screen name, modes and refreshRate properly
  * QVersionNumber: remove the "pure" attribute from commonPrefix()
  * QEvent: initialize the static userEventTypeRegistry constexprly
  * Let QXcbGlxWindow::createVisual fallback to QXcbWindow::createVisual
  * Android A11Y: fix content update notification when object is hidden
  * Android: explicitly remove accessibility focus when element is hidden
  * BLACKLIST tst_qfont for Red Hat 8.4 and Ubuntu 20.04
  * QtCore: includemocs
  * Fix memory leak in QtConcurrent::run when called with a NULL QThreadPool
  * INTEGRITY: Prevent deletion of virtual functions
  * QMake: replace a Q_ASSERT() with a Q_UNREACHABLE()
  * QTransform benchmark: measure what was promised
  * QStaticByteArrayMatcher: add a useful comment
  * QMacStyle: use the 'momentary push in' type for push buttons
  * qopengl.h: Move C header #include(s) out of the QT_NAMESPACE
  * Enable all supported 1.0 device features in QVulkanWindow
  * Fix queue passed to vkQueuePresent
  * QFusionStyle: don't draw an invalid outline for up/down buttons
  * Doc: Make QListIterator snippets more robust
  * QVersionNumber: don't detach() in rvalue QList/QVector ctor
  * QNetworkRequest: Document how Qt handles 301 and 302 status codes
  * Convert date-time to UTC before claiming it's in GMT
  * Remove execute permission from XML files
  * Add test case for style sheet selectors for enum properties
  * FreeType: allow falling back to synthesized bold if desired
  * Fix an assertion failure in massageAdjustedDateTime()
  * Relax tst_qvulkan::vulkanVersionRequest to make it compatible with 1.1
  * Doc: Replace "C:Documents and Settings" paths
  * QOrderedMutexLocker: fix compilation with C++11
  * QHttpNetworkConnection: Always set proxy settings to all channels
  * Add a markdown writer test for a checklist item ending with `code`
  * Use QTextCharFormat::fontFixedPitch to remember Markdown backtick spans
  * QWizardLayoutInfo: make == and != operators const
  * Revert "Android: Fix screen flicker issues"
  * macOS: Handle momentum scroll NSEventPhaseBegan when scroll had ended
  * SQLite: Update SQLite to v3.37.0
  * Update copyright year to 2022
  * QTzTimeZonePrivate: use ctor delegation instead of init()
  * QTzTimeZonePrivate: fix permanently-detaching m_icu
  * tst_QGraphicsView: fix memleak
  * Doc: Update external links to Qt Creator Manual
  * macOS: assume an unidentified tablet device is a stylus
  * tst_QItemModel: fix memleaks
  * tst_qanimationgroup: fix memleaks
  * QAbstractAnimation: add missing forward-declaration
  * [doc] QCoreApplication::installTranslator() doesn't take ownership
  * tst_qtranslator: fix memleak
  * QTestData: fix streaming of u8 string literals in C++20 mode
  * QThread/Unix: extract duplicate code
  * QWindowPrivate: fix inconsistent inline on some methods
  * tst_QStringList: check that join(u'0') embeds NULs
  * macOS: Sanitize scroll deltas for NSEventPhaseCancelled
  * tst_qsharedmemory: skip readOnly() test under asan
  * QXmlStreamReader: update test distribution
  * QZipReader: update to unzip partly broken archives
  * Deliver context menu event with correct coordinates to widgets in popups
  * QTextHtmlParser: fix prefix lookahead and html comments
  * QtConcurrent::run crashes on program exit
  * tst_QPropertyAnimation: fix leaks occurring under normal operation
  * tst_QPropertyAnimation: fix wrong comment
  * QLogging: fix potential missing NUL-terminator when calling OutputDebugString
  * Fix qt_scrollRectInImage when scrolling outside of the image
- Commits dropped by the rebase:
  * Fix compile with Qt5: Use QString::mid instead of QString::sliced
  * Restore C++11 compatibility after e8b9f4c28d3ab5e960dc54f2dc0c4b749b0b50e0
  * QDateTime: Don't require c++17</changelog>
  <changelog author="fvogt@suse.com" date="1683633600">- Amend patch to fix mouse grabbing as well (bsc#1211024):
  * big-endian-scroll.patch</changelog>
  <changelog author="fvogt@suse.com" date="1684929600">- Update to version 5.15.9+kde154:
  * Hsts: match header names case insensitively (CVE-2023-32762,
    QTBUG-113392, bsc#1211797)
  * Fix specific overflow in qtextlayout (CVE-2023-32763,
    QTBUG-113337, bsc#1211798)
  * QDnsLookup/Unix: make sure we don't overflow the buffer
    (CVE-2023-33285, boo#1211642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1686657600">- Update to version 5.15.10+kde129, rebased upstream:
  * Ssl: Copy the on-demand cert loading bool from default config
  * Schannel: Reject certificate not signed by a configured CA certificate (boo#1211994, CVE-2023-34410)
  * qnetworkreplyfileimpl_p.h: fix header guard name
  * Revert "Draw the cursor considering the descent is 0"
  * Use pkgconfig in order to find libproxy configuration
  * Upgrade PCRE2 to 10.40
  * Android A11Y: handle LocationChanged event only for focused element
  * Port binary JSON to new special integer bitfields
  * INTEGRITY: enable C99 globally
  * QObject: mark two error reporting functions COLD
  * Endian: Provide special integer bitfield unions
  * Android: set useLegacyPackaging to true in build.gradle
  * QWidgetTextControl: port to new-style connects (faster)
  * Sync qxmlstream.g with qxmlstreamparser_p.h [1/2]: switched lines
  * tst_QNetworkReply try stabilize autoDeleteReplies tests
  * Remove duplicated include for &lt;limits&gt;
  * Fix recursion crash when calling setStyleSheet with `qproperty-styleSheet`
  * qwindowsxpstyle: Fix typos in documentation
  * Correct prefix reported for end element in QXmlStreamReader
  * Android A11Y: Add supported role infos to A11yNodeInfo
  * Fix handling of DateTime values in QSettings
  * Fix off-by-one for "typically" lowest value INT_MIN
  * xml: Fix typos in documentation
  * QWindowsWindow: Fix typo in documentation
  * includemocs (updated script)
  * widgets: Fix typos in documentation
  * cocoa: Fix typo in debug messages
  * Only scroll QMenu when there is a valid active action
  * QTimer: Add note in documentation
  * Fix QListView assert when the last row is moved in IconMode
  * QFileDialog: Fix adding default suffix when file path contains dot
  * QLineEdit: account for the placeholderText when computing lineRect
  * QFileDialog::saveFileContent crashes on accept
  * QCompleter: QCompleter unexpectedly changes QLineEdit text
  * Fix build error on iOS with the configure option -qtnamespace
  * Draw the cursor considering the descent is 0
  * Remove pure-virtual-signals.h include from tst_moc.cpp
  * plugins: image formats - fix odr violation
  * dbus: Fix typos
  * qwindowsdialoghelpers: Fix typo in documentation
  * QTableView: Document the customizations applied to QHeaderView
  * Unicodetools: compile
  * eglfs_x11: Fix running flag linkage
  * qcompilerdetection.h: add Q_CC_{GNU,MSVC,CLANG}_ONLY macros
  * Fix CMake warning about "missing closing ' quote"
  * Fix alignment of next/prev links in offline style
  * QtDBus: includemocs
  * Image Plugins: includemocs(-ish)
  * QtGui: includemocs
  * QXcbNativeInterface: remove unused field m_sysTraySelectionAtom
  * Windows QPA: Fix slowdown with large table/tree views with accessibility
  * Macstyle: fix the text color on the disabled button
  * QMacStyle: fix tool buttons (in checked mode)
  * QTeamCityLogger: fix .arg() placeholder injection
  * QAbstractTestLogger: disable copying
  * Fix errorMessageFromComError()
  * QtNetwork: includemocs
  * AppleUnifiedLogger: Remove manually managed os_log_t cache
  * examples: add WindowStaysOnBottomHint into preview text
  * QSharedPointer: Use matching new/delete
  * QIbusPlatformInputContextPlugin: includemocs
  * QGtk3ThemePlugin: includemocs
  * QTuioTouchPlugin: includemocs
  * QtWidgets: includemocs v2022
  * QMYSQLDriverPlugin: includemocs
  * QtDeviceDiscoverySupportPrivate: includemocs
  * QLinuxFbIntegrationPlugin: includemocs
  * QtPrintSupport: includemocs
  * QSQLiteDriverPlugin: includemocs
  * QtFbSupportPrivate: includemocs
  * QXdgDesktopPortalThemePlugin: includemocs
  * QtTest: includemocs
  * QComposePlatformInputContextPlugin: includemocs
  * QtSql: includemocs
  * QVncIntegrationPlugin: includemocs
  * Fix backingstore fractional DPR glitches for widgets in child windows
  * Include &lt;limits&gt; where std::numeric_limits is used
  * QtInputSupportPrivate: includemocs
  * Document the default value of QSFPM::sortOrder()
  * Better document how to enable sorting in QSPFM
  * Correct documentation of INI format's loss of type information
  * Android: add missing properties in AndroidManifest.xml
  * Fix assertion failure when parsing a doubly-invalid date-time text
  * Windows QPA: Correct mistake when calculating minmaxinfo
  * Android: replace ndk.dir with android.ndkVersion in build.gradle
  * Android: remove the old copy of gradle.properties after reading it
  * CMake Android Support: Fix signing of APKs
  * Android: fix A11Y object description
  * macOS: Fix warning about comparing different types in QCocoaScreen::isOnline
  * Fix qmake build on FreeBSD
  * Update documentation of enum Qt::DockWidgetArea
  * xcb: recreate xcb window under some conditions
  * objc_namespace: Add support for universal binaries
  * objc_namespace: Fix misspelled argument for silencing output
  * objc_namespace: Update parsing logic to account for otool changes
  * Blacklist passwordAuth for Ubuntu 20.04
  * Android: wrap QAndroidInputContext's m_focusObject in a QPointer
  * Fix compilation with GCC 12 (and on Fedora 35 and newer)
  * Chip example: fix an accidental bool-&gt;int conversion when using PMF connections
  * qmake: Add support for C++23
  * Android: use BCP 47 tag to create a correct Locale for QTimeZone::displayName()
  * QDateTime: fix adjusted datetime handling
  * Fix crash in tst_qmltc_examples on Android
  * macOS: Remove dead code for focus ring handling in Mac style
  * Detach for colortransforms of indexed formats
  * tst_QTcpSocket::connectToHostError - handle possible timeouts
  * CoreText: Avoid populating font family aliases if family was populated
  * Graphicsview: Avoid background clearing glitches under fractional DPR
  * Windows QPA: Avoid slowdown with UI Automation name change notification
  * Windows QPA: Avoid sending accessibility notifications before activation
  * Windows: Fix potential crash when retrieving default printer
  * Make Ubuntu with its non-standard security level happy
  * Android: Blacklist failing tests on tst_QGraphicsProxyWidget
  * Update LA 4.4.1
  * iOS A11Y: Set more accessibilityTraits
  * QNX: Fix compiler warning by when FEATURE_clipboard is not enabled
  * Document that native file dialogs might not show a title
  * Doc: Remove mentionings of overflows from QElapsedTimer
  * QTextMarkdownImporter: don't apply text char format to list item block
- Commits dropped by the rebase:
  * QBuffer: add missing &lt;limits&gt; include
  * Fix developer build</changelog>
  <changelog author="gmbr3@opensuse.org" date="1687953600">- Change %_libqt5_libexecdir to %_libexecdir/qt5 (bsc#1174075)</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch icu-devel requires to pkgconfig to allow switching libicu
  versions</changelog>
  <changelog author="fvogt@suse.com" date="1695902401">- Update to version 5.15.10+kde159 (bsc#1214327, CVE-2023-37369):
  * Fix CVE-2023-43114
  * QMimeDatabase: fix detection of pattern conflict in different prefixes
  * Fix highdpi conversion of QTabletEvent coordinates on xcb
  * widget: set WA_X11NetWmWindowType* after xcb window was created
  * Fix crash when setting override cursor on multiple clients
  * QAccessibleWidget: Remove pointless ZWSP in warning message
  * Android A11Y: Fix deadlock in QtAndroidAccessibility::runInObjectContext()
  * Correctly parse non BMP char refs in the sax parser
  * Clear the _X version of alongside the enum deprecator
  * Fix UB (signed char passed to &lt;cctype&gt; function)
  * Qt3DRender: includemocs
  * Fix capitalization error in auto-generated qdbusmacros.h include
  * QColorDialog: Ignore mouse move events when no mouse button is pressed
  * QHostInfo: fix remaining slotObj leaks
  * QXmlStreamReader: Raise error on unexpected tokens (CVE-2023-38197,
    QTBUG-92113, QTBUG-95188, bsc#1213326)
  * QTextLayout: Reconsider cursor drawing on TextObject
  * Ensure consistent cursor width under fractional scaling
  * Fix QTextEdit cursor rectangle vertical positioning
  * Return 0 in QWindow::winId in case of failed platform window creation
  * Doc: note QWindow::winId() will cause platform window creation
  * QSslDiffieHellmanParameters: fix mem-leak
  * QHostInfo: fix leaking slot object
  * Make sure we don't count down past 0 QT_FATAL_CRITICALS
  * QLogging: DRY isFatal(QtMsgType)
  * tst_QXmlStream: remove unneeded _ba UDLs
  * Fix typo in QXmlStreamReader error message
  * QXmlStreamReader: make fastScanName() indicate parsing status to callers
  * QXmlStreamReader: change fastScanName() to take a Value*
  * Fix Croatia's currency
  * SSL: upgrade the default DH parameters</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1696593600">- Update to version 5.15.11+kde134, rebased upstream:
  * Revert "Windows QPA: Add support to UiaRaiseNotificationEvent()"
  * FileChooser portal: Make sure filter.name is not empty
  * QPersistentModelIndex: fix UB (op&lt; on unrelated pointers)
  * Avoid crash when keysymToQtKey(keysym, Qt::ControlModifier) is called
  * a11y atspi: translate coords for GetOffsetAtPoint the right way
  * a11y atspi: Take dialog into account as top-level window
  * a11y atspi: Fix incorrect use of x instead of y position
  * macOS: Handle asynchronous deminiaturizing of windows
  * QTranslator: generalize a UNIX-only path
  * iOS, input panel: be more careful before enabling QIOSKeyboardListener
  * Android: Fix flickering on window resize and show keyboard
  * Android A11Y: Check for active surface before calling into native code
  * xcb: Delete touch points without target windows
  * Blacklist 1 tests in tst_QDBusConnection on ubuntu-20.04
  * Fix CMake builds without ANDROID_SDK
  * Blacklist 2 tests in tst_Http2 on ubuntu-20.04
  * Blacklist 1 tests in tst_QSqlQuery on macos
  * Defer creating the special shaders in the texture blitter
  * tst_QSslSocket::serverCipherPreferencies - fix for OpenSSL v3
  * QTemporaryFile: document rename() differences from QFile
  * Doc: 3rd party: Fix reference to FreeType LICENSE.txt
  * Update bundled libjpeg-turbo to version 2.1.4
  * tst_QSsSocket: fix verifyClientCertificate with OpenSSL 3
  * tst_QSslSocket: regenerate certificate used for setLocalCertificateChain
  * tst_QSslSocket::protocolServerSide - make it work with OpenSSL v3
  * tst_QSslSocket::oldErrorsOnSocketReuse - make it work with OpenSSL v3
  * Update zconf.h prefixes to match zlib v1.2.12 update
  * xcb: fix D&amp;D in same xembed client
  * xcb: use global coordinates for position of D&amp;D for xembed client
  * Doc: Update QMetaType::metaObject() descriptions
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 22.04
  * BLACKLIST tst_qfont for Ubuntu 22.04
  * BLACKLIST tst_QMenuBar::check_menuPosition for Ubuntu 22.04
  * tst_QDtls::verifyClientCertficiate - update certs for OpenSSL v3
  * QSslCertificate::toText(): add a file to compare against
  * Fix the spelling of the word "combination"
  * tst_QSslCertificate::pkcs12 - skip the test if OpenSSL version &gt;= 3
  * Android A11Y: Fix TalkBack scrolling behavior
  * Android A11Y: Notify android about scroll events
  * QCocoaDrag: don't add pasteboard items with non-absolute URLs
  * QDirPrivate: pass input QList by cref
  * tst_qbytearray: remove qCompress_data for QT_NO_COMPRESS
  * QDeviceDiscoveryUDev: use NSDMI
  * QAuthenticator: Fix crash when using NTLM / Negotiate
  * Provide a native interface instance in minimal platform plugin
  * Android: document the supported clipboard mimetypes
  * Windows: Account for not finding child windows when calling ChildWindowFromPointEx
  * iOS: Send touch events asynchronously to avoid deadlocking UIKit event loop
  * Disable bitcode for iOS
  * macOS: Ignore deprecation for ReleaseIconRef
  * BLACKLIST tst_QApplication::sendEventsOnProcessEvents for Ubuntu 22.04
  * Convert Latin1 to UTF-16 before passing to ICU API
  * Doc: Remove repetition of word in text
  * eglfs: Fix screen cloning when atomic is enabled
  * Fix printing of dpr&gt;1 images on Windows
  * QHttp: Fix handling of redirect loaded from cache
  * Doc: Fix return type of QLEInteger/QBEInteger post-in/decrement ops
  * qmake: Fix installation of separate debug info for plugins
  * iOS: ensure we close inputpanel after clearing focusobject
  * Convert Latin1 to UTF-16 before passing to ICU API
  * qputenv: defend against non-NUL-terminated QByteArray values
  * QFontSubset: remove unused glyphName() overload
  * Statically assert that the __mips_dsp code is only active on 32-bit
  * QGtk3Theme: Ensure gtk uses the same windowing system as Qt
  * tst_QFocusFrame: fix -Wparantheses
  * Sync Vulkan device features between QVulkanWindow and QRhi
  * SQLite: Update SQLite to v3.39.2
  * Update freetype to 2.12.1
  * corelib: Fix typos in documentation
  * QAtomicInteger docs: mention bool and char8_t as 8-bit types
  * qgraphicsitem_cast: replace 0 with nullptr
  * Doc: Hide weak overload template magic from documentation
  * Revert "QDateTime: fix adjusted datetime handling"
  * Fix select handles disappears issues
  * tst_QSslKey: prepare for the migration to OpenSSL v3
  * tst_qnetworkreply: replace server.pem/key pair
  * Disable unit testing setting up QTcpServer on special Apple interfaces
  * qmake/msbuild: Turn off "use full paths in diagnostics" by default
  * qmake/msbuild: Support all /DEBUG:xxx linker options
  * qmake/msbuild: Support all /LTCG:xxx options
  * Android A11Y: Add content change type to content change event
  * Enabler for fractional scaling of text in Qt Quick
  * macOS: Override logical DPI to 72
  * Add QDom internalSubset implementation
  * Fix tst_AndroidAssets, broken by recent changes on assets load speed
  * Android: Improve loading speed of individual assets
  * Darwin: Replace deprecated symbol kIOMasterPortDefault with equivalent
  * macOS: Remove code for handling logical DPI changes
  * Fix an incorrect invocation of llvm-readobj
  * macOS: Ignore deprecation for kOnSystemDisk icon domain
  * Copy only files that belongs to QML module
  * Android: fix wrong position of cursor handle and editpopup menu in split screen
  * Doc: Document QML_IMPORTS_PATH and QMLPATHS
  * Add the missing RCC_DIR to '.qrc' paths when generating deployment settings
  * Android: Fix the offset of the EditPopupMenu
  * xcb: update xkb_state mask as much as possible
  * QDom: Stop treating non-BMP characters as invalid
  * Android 13: Fix warnings on starting an application
  * qxkbcommon: Map Super/Hyper to Meta early enough to have an effect
  * macOS: Ignore update requests for offline displays
  * macOS: Avoid recursively updating screens when window moves screen
  * qmake/MinGW: Install separate debug info of DLLs next to the DLL
  * QMainWindow: fix restoreState() for toolbars
  * Make two QDT benchmarks data-driven and add more rows
  * Fix doc and example of QLoggingCategory::installCategory()
  * qmake: Document Xcode behavior when bundling translation files
  * Android: Fix missing import
  * QByteArray: more GCC 12 -Werror=array-bound whack-a-mole
  * CMake: Fix android sdk version propagation
  * Restore C++20-deprecated mixed-enum bitwise operators
  * Android: Fix ANR when QtService and QtActivity load in same process
  * Fix restart QtActivity
  * QArrayData::data(): do type-punning via quintptr, not char *
  * QIOSTextResponder: recreate responder upon reset
  * QSslSocket: make it work with OpenSSL v3
  * QFileSystemModelPrivate: de-inline ctor and dtor
  * Network: update Public Suffix List
  * macOS: Ensure proper quoting when calling otool in objc_namespace script
  * QKeySequence: Fix the one-off error in the mac glyph array size
- Commits dropped by the rebase:
  * Apply CVE-2022-27404-27405-27406-qtbase-5.15.diff
  * QArrayData: fix UB via reinterpret_cast (crash with FORTIFY_SOURCE=3)
  * Adapt for q_EVP_PKEY_base_id → q_EVP_PKEY_get_base_id rename in OpenSSL 3
  * Don't use a deprecated function if built/linked with OpenSSL v3</changelog>
  <changelog author="christophe@krop.fr" date="1696593601">- Enable the experimental native painting feature to improve
  remote desktop performances (boo#1214915)
  exporting QT_XCB_NATIVE_PAINTING is required to use the feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1697716800">- Update to version 5.15.11+kde138:
  * QLibraryPrivate: Actually merge load hints
  * QPluginLoader: report the right load hints
  * xkb: fix build with libxkbcommon 1.6.0 and later
  * a11y atspi: Map ButtonMenu role to AT-SPI equivalent</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1703851200">- Update to version 5.15.12+kde144, rebased upstream:
  * QMimeDatabase: handle buggy type definitions with circular inheritance
  * xcb: only set base size when it's valid
  * QPixmapCache: fix leaking of QStrings and Keys on clear()
  * OpenFile portal: do not use O_PATH fds
  * QSystemTrayIcon: properly disconnect old menu in setContextMenu()
  * Guard QTabBar against nested event processing during moving tabs
  * QDial: don't crash when min==max and setting a value != min &amp; max
  * QStandardItemModel: don't leak in mimeData()
  * SQL/MySQL: properly initialize variable
  * QWidgetTextControl: ignore invalid input method event
  * Update the LGPL license header
  * SQL/MySQL: fix handling of json column
  * Remove QMAKE_RANLIB and QMAKE_LINK_SHLIB from android/default_pre.prf
  * macOS: Fix less common writing systems on Catalina and later
  * Blacklist 1 tests in tst_QFtp on ubuntu-20.04
  * Update bundled libpng to version 1.6.39
  * Android: Fix signing of APKs that are generated when an AAB is also built
  * Update bundled zlib to version 1.2.13
  * doc: update the limitation of QSystemTrayIcon on X11
  * Blacklist 1 tests in tst_QTimer on ubuntu-20.04
  * Add benchmarks for QLocale number parsing
  * Add benchmarks for QString number parsing
  * Android: Fix incorrect fullscreen dimensions
  * Gtk3Theme: set XCURSOR_SIZE and XCURSOR_THEME for wayland sessions
  * xcb: Flush Display when processing xcb events
  * xcb: Add xlib wrapper for XFlush()
  * QHostAddress: Fix incorrect comparison against 'Any'
  * QSsl[OpenSSL/Android]: Fix hardcoded 1_1 suffix
  * BLACKLIST: tst_QApplication::sendEventsOnProcessEvents for RHEL 9.0
  * QMacStyle: do not set white color for grayed out button
  * Work round macOS's omission of en_DE from its own uiLanguages()
  * Suppress a deprecation warning in tst_QDateTime::toString_enumformat()
  * QJsonValue: fix incorrect to{Array,Object} when the value is empty
  * QGtk3Dialog: remove the #include for empty moc
  * Remove unneeded QWindow from QGtk3Dialog
  * tst_QSslSocket: Delete sslOptions
  * tst_QSslServer: Make the in-process server use TLS1.2
  * Android: fix Gradle warning about using enableUncompressedNativeLibs
  * Mention  limitation of QDir::drives() on Windows
  * QFileSystemEngine/Win: fix incorrect buffer size in currentPath()
  * Android: properly retrieve mime type of uri to for openUrl()
  * Android: Fix clipboard issue with urls
  * Android: Add a way to disable accessibility via an environment var
  * Update bundled libpng to version 1.6.38
  * QIOSMessageDialog::exec - work around 'windowsless' exec
  * QIosScreen: retain the right window
  * tst_Q{BitArray,ContiguousCache}: check not only count(), but size(), too
  * QIosTextResponder: stop using deprecated constants and type
  * qcompilerdetection.h: detect Coverity
  * Android: Fix Display.getRealMetrics deprecation
  * Fix broken Text rendering when noantialiased NativeRendering is used
  * forkfd: fix Clang 15 ATOMIC_VAR_INIT deprecation warning
  * eglfs: Add env.var. to disable the dedicated drmHandleEvent thread
  * doc: Don't put strings into QVector&lt;double&gt;
  * Remove focusProxyAndInputMethods from tst_QWidget
  * Bump version to 5.15.12
  * Update documentation of qWaitForWindowActive / qWaitForWindowExposed
  * QtHttp: Lower the severity of some log output
  * StyleSheetStyle: Fix color of placeholder texts in text edits
  * Android: Fix flickering on split screen mode
  * Update url to IAccessible2 Specification</changelog>
  <changelog author="alarrosa@suse.com" date="1704283200">- Update to version 5.15.12+kde147:
  * Http2: fix potential overflow in assemble_hpack_block()
    (bsc#1218413, CVE-2023-51714)
  * HPack: fix incorrect integer overflow check
  * HPack: fix a Yoda Condition</changelog>
  <changelog author="fvogt@suse.com" date="1708084800">- Update to version 5.15.12+kde151:
  * Improve KTX file reading memory safety (CVE-2024-25580, boo#1219996)
  * Revert "xcb: only set base size when it's valid"
  * Fix potential leak of QPropertyAnimation in QLineEditIconButton
  * QBitArray: correct inline keyword</changelog>
  <changelog author="alarrosa@suse.com" date="1720785600">- Add patch from upstream to fix a regression in the ODBC driver
  (bsc#1227513, QTBUG-112375):
  * 0001-QSQL-ODBC-fix-regression-trailing-NUL.patch
  * 0002-SQL-ODBC-Pass-correct-length-to-SQLColAttribute.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1722945600">- Add rebased upstream patch to delay any HTTP2 communication until
  encrypted() can be responded to (bsc#1227426, CVE-2024-39936):
  * 0001-HTTP2-Delay-any-communication-until-encrypted-can-be.patch
- Add upstream patch to fix a NULL pointer dereference via the
  function QXcbConnection::initializeAllAtoms() when there is
  anomalous behavior from the X server (bsc#1222120,
  CVE-2023-45935):
  * 0001-xcb-guard-a-pointer-before-usage.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756728000">- Add patch from upstream to fix a precondition violation in call
  to QByteArrayView::at() which can cause crashes (bsc#1243958,
  CVE-2025-5455):
  * 0001-qDecodeDataUrl-fix-precondition-violation-in-call-to.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756814400">- Add patch from upstream to initialize a member variable that was
  uninitialized under some circumstances:
  * 0001-QObjectPrivateSignal-initialize-all-members.patch
- Add patch from upstream to fix a crash when parsing a particular
  glyph in a particular font (QTBUG-124310):
  * 0001-Avoid-crash-in-font-distancefield-computation.patch
  * 0002-Fix-crash-in-font-distancefield-computation.patch
- Add patch from upstream to fix avoid repeatedly registering
  xsettings callbacks when switching cursor themes:
  * 0001-xcb-Avoid-repeatedly-registering-xsettings-callbacks-When.patch
- Add patch from upstream to check validity of RandR output info
  before using it (QTBUG-128906):
  * 0001-xcb-check-validity-of-RandR-output-info-before-using-it.patch
- Add patch from upstream to fix reparenting a window so it takes
  effect even if there are no other state changes to the window:
  * 0001-xcb-Sync-XCB-connection-after-reparenting-window.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756900800">- Add patch from upstream to fix a low performance when processing
  XML data in encodeText (bsc#1239896, CVE-2025-30348):
  * 0001-XML_QDom-speedup-encodeText.patch</changelog>
</package>
<package pkgid="9bcfa9656038bc7450af88e3167caf69b40d0f2b0cd2035ea58a00998b6de122" name="libQt5DBus-private-headers-devel" arch="noarch">
  <version epoch="0" ver="5.15.12+kde151" rel="150600.3.9.1"/>
  <changelog author="fvogt@suse.com" date="1678968000">- Update to version 5.15.8+kde183:
  * Add nullptr guard in QStyleSheetStyle::drawPrimitive(PE_PanelLineEdit)
  * QAbstractItemView: don't access invalid indexes on copy-key
  * Apply CVE-2023-24607-qtbase-5.15.diff (CVE-2023-24607,
    bsc#1209616)
  * QXcbConnection::getTimestamp: do not return stale timestamp
  * QToolButton: Elide text when constraints prevent from showing whole text
  * correctly set up ref counting in QThreadPool::tryStart(std::function)
  * Do not set Qt::ToolTip flag for QShapedPixmapWindow
  * Fix deletion order also for QImageReader/Writer::setDevice()
  * Fix deletion order in QImageReader/Writer destructors
  * QNetworkReply: Fix typos in the documentation
  * Doc: Fix typo in the online documentation template
  * Doc: Link to page documenting Qt trademarks in the copyright footer
  * [doc] Fix typo in QBuffer::setBuffer() description
  * qwindowsdrag: Fix typo in documentation
  * openglblacklists: Fix typo in description
  * qxcbscreen: Fix typo in documentation
  * Fix typos in SQL driver documentation
  * qxcbwindow.cpp: Fix sign-compare and another warnings
  * QToolButton: reimplement the fix for QTBUG-95255
  * QSysInfo::prettyProductName(): Add macOS Ventura product name
  * QSysInfo::prettyProductName(): add missing macOS product names
  * xcb: correctly disconnect xsettings callbacks
  * ibus: add SetCursorLocationRelative in InputContext.xml</changelog>
  <changelog author="fvogt@suse.com" date="1680523200">- Update to version 5.15.8+kde185:
  * QFSFileEngine: fix overflow bug when using lseek64
  * Add QImage null check when QOpenGLTexture converts
- Add patch to fix return key handling in QGroupBox on GNOME (bsc#1209364):
  * 0001-Revert-QGnomeTheme-Allow-Space-Return-Enter-and-Sele.patch
- Add patch to fix XInput2 events in big-endian X11 clients (bsc#1204883, QTBUG-105157):
  * big-endian-scroll.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1682078400">- Update to version 5.15.9+kde151, rebased upstream:
  * QCborValue: fix incorrect to{Array,Map} when the value is empty
  * QMargins: fix a missing "full stop" in the docs
  * QLibrary: restore translated string
  * QLibrary: fix possible arg() format clobbering
  * iOS: Use python3 for enumerating test target devices
  * Android: Treat ACTION_CANCEL as TouchCancelEvent
  * Doc: Fix broken formatting
  * QFileSystemEngine: fix potential formatting error
  * QString::asprintf: check that passing field widths as arguments works
  * Backport recent QFlags tests
  * network: Fix typos in documentation
  * Fix accuracy with screen composition
  * Doc: Update documentation for QElapsedTimer's in Windows
  * Document that QStandardPath::findExecutable works with absolute paths
  * macOS: Use native resize cursors for diagonal resize
  * Fix clipped glyphs in text rendering of QGraphicsTextItem
  * Change comparison data type to fix int overflow
  * Add missing Q_WEAK_OVERLOAD definition
  * Update QFileInfo docs to mention macOS aliases
  * Distinguish macOS aliases from normal symbolic links
  * Windows QPA: Fix frameless maximize on secondary screens
  * Rewrite tst_qdataurl as a data-driven test
  * Fix compilation for wasm
  * QIOSFileDialog/QIOSDocumentPickerController - handle dismissed view controller
  * Fix QDockWidget's dock area permissions after hovering
  * Fix C++20 ambiguous relational operators between QJsonValue{,Ref}
  * Android: make sure that orientationChange is reported after resize
  * Android: set all QScreen's geometry-related parameters together
  * Blacklist: test cases blacklisted in tst_QDBusConnection:
  * wasm:  fix issue with passing username/password to network request
  * macOS: Pass multi arch flags when linking qmake
  * QCocoaFileDialogHelper: Always enable symlinks and aliases to directories
  * Android: terminate argv passed to main() with nullptr
  * Update bundled libjpeg-turbo to version 2.1.3
  * ANGLE: Load the DirectX libraries from the system path directly
  * SQLite: Update SQLite to v3.37.2
  * Fix compiler warnings about unused parameters
  * Fix getsockopt option_value initial initialization
  * Http2: Fix redirect-handling
  * Android A11Y: Fix value rounding
  * Android A11Y: Announce value together with element name when focused
  * Android A11Y: handle valueChanged events
  * tst_QSystemSemaphore: give proper path to test-helper
  * QNX: Silence compiler warning by initializing variable
  * Update LICENSE.QT-LICENSE-AGREEMENT
  * winrt appxmanifest: Properly replace VCLibs version for newer MSVC versions
  * QAbstractSocket: Don't pretend pause and resume is a stack
  * Gui: test also depends for clipboard feature
  * QDesktopServices: deprecate destroying URL handlers w/o explicit unsetUrlHandler()
  * macOS: Respect QMAKE_APPLE_DEVICE_ARCHS when building qmake
  * HTTP: Make redirect response parsing more generic
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 20.04
  * Android A11Y: populate child elements when constructing node info
  * Fix issue where readyRead() could happen after disconnected()
  * QStringView: add missing constexpr so we can use is_constant_evaluated
  * Use Android's View.generateViewId() for generating ids for views/surfaces
  * Remove documentation of non-existing QAccessible state
  * Doc: Fix snippet to match actual QFileInfo behavior
  * Android: Re-focus focused accessibility node after orientation change
  * Android A11Y: execute C++ code on main Qt thread
  * Android: extract parentId for hidden object in advance
  * xcb: Show valuator atom names properly in categorized logging
  * Android: replace stacktrace with debug message in search for setService
  * Better document attaching a QFutureWatcher to a started QFuture
  * doc: Update GenericDataLocation location on iOS
  * BLACKLIST test_Gestures tests for RHEL-8.4
  * QPlainTestLogger: do not print "failure location" if there's no failure
  * QAbstractItemView: do not access invalid model indices (3/N)
  * Win32: always allow the event loop to be woken up by posted events
  * rhi: d3d11: Use __uuidof where we can
  * Don't QEXPECT_FAIL tst_QLineEdit::testQuickSelectionWithMouse on macOS ARM
  * Network: Emit authenticationRequired when using Ntlm
  * testlib: Disable window restoration on macOS in a non-persistent way
  * QAbstractItemView: do not access invalid model indices (2/N)
  * QAbstractItemView: do not access invalid model indices (1/N)
  * QAbstractItemView: code tidies
  * Update float16 part of TestLib selftest
  * QGuiApplication: constant-initialize lastCursorPosition
  * Blacklist tst_QFileSystemWatcher::signalsEmittedAfterFileMoved on all Windows versions
  * [Android]: Handle the screen name, modes and refreshRate properly
  * QVersionNumber: remove the "pure" attribute from commonPrefix()
  * QEvent: initialize the static userEventTypeRegistry constexprly
  * Let QXcbGlxWindow::createVisual fallback to QXcbWindow::createVisual
  * Android A11Y: fix content update notification when object is hidden
  * Android: explicitly remove accessibility focus when element is hidden
  * BLACKLIST tst_qfont for Red Hat 8.4 and Ubuntu 20.04
  * QtCore: includemocs
  * Fix memory leak in QtConcurrent::run when called with a NULL QThreadPool
  * INTEGRITY: Prevent deletion of virtual functions
  * QMake: replace a Q_ASSERT() with a Q_UNREACHABLE()
  * QTransform benchmark: measure what was promised
  * QStaticByteArrayMatcher: add a useful comment
  * QMacStyle: use the 'momentary push in' type for push buttons
  * qopengl.h: Move C header #include(s) out of the QT_NAMESPACE
  * Enable all supported 1.0 device features in QVulkanWindow
  * Fix queue passed to vkQueuePresent
  * QFusionStyle: don't draw an invalid outline for up/down buttons
  * Doc: Make QListIterator snippets more robust
  * QVersionNumber: don't detach() in rvalue QList/QVector ctor
  * QNetworkRequest: Document how Qt handles 301 and 302 status codes
  * Convert date-time to UTC before claiming it's in GMT
  * Remove execute permission from XML files
  * Add test case for style sheet selectors for enum properties
  * FreeType: allow falling back to synthesized bold if desired
  * Fix an assertion failure in massageAdjustedDateTime()
  * Relax tst_qvulkan::vulkanVersionRequest to make it compatible with 1.1
  * Doc: Replace "C:Documents and Settings" paths
  * QOrderedMutexLocker: fix compilation with C++11
  * QHttpNetworkConnection: Always set proxy settings to all channels
  * Add a markdown writer test for a checklist item ending with `code`
  * Use QTextCharFormat::fontFixedPitch to remember Markdown backtick spans
  * QWizardLayoutInfo: make == and != operators const
  * Revert "Android: Fix screen flicker issues"
  * macOS: Handle momentum scroll NSEventPhaseBegan when scroll had ended
  * SQLite: Update SQLite to v3.37.0
  * Update copyright year to 2022
  * QTzTimeZonePrivate: use ctor delegation instead of init()
  * QTzTimeZonePrivate: fix permanently-detaching m_icu
  * tst_QGraphicsView: fix memleak
  * Doc: Update external links to Qt Creator Manual
  * macOS: assume an unidentified tablet device is a stylus
  * tst_QItemModel: fix memleaks
  * tst_qanimationgroup: fix memleaks
  * QAbstractAnimation: add missing forward-declaration
  * [doc] QCoreApplication::installTranslator() doesn't take ownership
  * tst_qtranslator: fix memleak
  * QTestData: fix streaming of u8 string literals in C++20 mode
  * QThread/Unix: extract duplicate code
  * QWindowPrivate: fix inconsistent inline on some methods
  * tst_QStringList: check that join(u'0') embeds NULs
  * macOS: Sanitize scroll deltas for NSEventPhaseCancelled
  * tst_qsharedmemory: skip readOnly() test under asan
  * QXmlStreamReader: update test distribution
  * QZipReader: update to unzip partly broken archives
  * Deliver context menu event with correct coordinates to widgets in popups
  * QTextHtmlParser: fix prefix lookahead and html comments
  * QtConcurrent::run crashes on program exit
  * tst_QPropertyAnimation: fix leaks occurring under normal operation
  * tst_QPropertyAnimation: fix wrong comment
  * QLogging: fix potential missing NUL-terminator when calling OutputDebugString
  * Fix qt_scrollRectInImage when scrolling outside of the image
- Commits dropped by the rebase:
  * Fix compile with Qt5: Use QString::mid instead of QString::sliced
  * Restore C++11 compatibility after e8b9f4c28d3ab5e960dc54f2dc0c4b749b0b50e0
  * QDateTime: Don't require c++17</changelog>
  <changelog author="fvogt@suse.com" date="1683633600">- Amend patch to fix mouse grabbing as well (bsc#1211024):
  * big-endian-scroll.patch</changelog>
  <changelog author="fvogt@suse.com" date="1684929600">- Update to version 5.15.9+kde154:
  * Hsts: match header names case insensitively (CVE-2023-32762,
    QTBUG-113392, bsc#1211797)
  * Fix specific overflow in qtextlayout (CVE-2023-32763,
    QTBUG-113337, bsc#1211798)
  * QDnsLookup/Unix: make sure we don't overflow the buffer
    (CVE-2023-33285, boo#1211642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1686657600">- Update to version 5.15.10+kde129, rebased upstream:
  * Ssl: Copy the on-demand cert loading bool from default config
  * Schannel: Reject certificate not signed by a configured CA certificate (boo#1211994, CVE-2023-34410)
  * qnetworkreplyfileimpl_p.h: fix header guard name
  * Revert "Draw the cursor considering the descent is 0"
  * Use pkgconfig in order to find libproxy configuration
  * Upgrade PCRE2 to 10.40
  * Android A11Y: handle LocationChanged event only for focused element
  * Port binary JSON to new special integer bitfields
  * INTEGRITY: enable C99 globally
  * QObject: mark two error reporting functions COLD
  * Endian: Provide special integer bitfield unions
  * Android: set useLegacyPackaging to true in build.gradle
  * QWidgetTextControl: port to new-style connects (faster)
  * Sync qxmlstream.g with qxmlstreamparser_p.h [1/2]: switched lines
  * tst_QNetworkReply try stabilize autoDeleteReplies tests
  * Remove duplicated include for &lt;limits&gt;
  * Fix recursion crash when calling setStyleSheet with `qproperty-styleSheet`
  * qwindowsxpstyle: Fix typos in documentation
  * Correct prefix reported for end element in QXmlStreamReader
  * Android A11Y: Add supported role infos to A11yNodeInfo
  * Fix handling of DateTime values in QSettings
  * Fix off-by-one for "typically" lowest value INT_MIN
  * xml: Fix typos in documentation
  * QWindowsWindow: Fix typo in documentation
  * includemocs (updated script)
  * widgets: Fix typos in documentation
  * cocoa: Fix typo in debug messages
  * Only scroll QMenu when there is a valid active action
  * QTimer: Add note in documentation
  * Fix QListView assert when the last row is moved in IconMode
  * QFileDialog: Fix adding default suffix when file path contains dot
  * QLineEdit: account for the placeholderText when computing lineRect
  * QFileDialog::saveFileContent crashes on accept
  * QCompleter: QCompleter unexpectedly changes QLineEdit text
  * Fix build error on iOS with the configure option -qtnamespace
  * Draw the cursor considering the descent is 0
  * Remove pure-virtual-signals.h include from tst_moc.cpp
  * plugins: image formats - fix odr violation
  * dbus: Fix typos
  * qwindowsdialoghelpers: Fix typo in documentation
  * QTableView: Document the customizations applied to QHeaderView
  * Unicodetools: compile
  * eglfs_x11: Fix running flag linkage
  * qcompilerdetection.h: add Q_CC_{GNU,MSVC,CLANG}_ONLY macros
  * Fix CMake warning about "missing closing ' quote"
  * Fix alignment of next/prev links in offline style
  * QtDBus: includemocs
  * Image Plugins: includemocs(-ish)
  * QtGui: includemocs
  * QXcbNativeInterface: remove unused field m_sysTraySelectionAtom
  * Windows QPA: Fix slowdown with large table/tree views with accessibility
  * Macstyle: fix the text color on the disabled button
  * QMacStyle: fix tool buttons (in checked mode)
  * QTeamCityLogger: fix .arg() placeholder injection
  * QAbstractTestLogger: disable copying
  * Fix errorMessageFromComError()
  * QtNetwork: includemocs
  * AppleUnifiedLogger: Remove manually managed os_log_t cache
  * examples: add WindowStaysOnBottomHint into preview text
  * QSharedPointer: Use matching new/delete
  * QIbusPlatformInputContextPlugin: includemocs
  * QGtk3ThemePlugin: includemocs
  * QTuioTouchPlugin: includemocs
  * QtWidgets: includemocs v2022
  * QMYSQLDriverPlugin: includemocs
  * QtDeviceDiscoverySupportPrivate: includemocs
  * QLinuxFbIntegrationPlugin: includemocs
  * QtPrintSupport: includemocs
  * QSQLiteDriverPlugin: includemocs
  * QtFbSupportPrivate: includemocs
  * QXdgDesktopPortalThemePlugin: includemocs
  * QtTest: includemocs
  * QComposePlatformInputContextPlugin: includemocs
  * QtSql: includemocs
  * QVncIntegrationPlugin: includemocs
  * Fix backingstore fractional DPR glitches for widgets in child windows
  * Include &lt;limits&gt; where std::numeric_limits is used
  * QtInputSupportPrivate: includemocs
  * Document the default value of QSFPM::sortOrder()
  * Better document how to enable sorting in QSPFM
  * Correct documentation of INI format's loss of type information
  * Android: add missing properties in AndroidManifest.xml
  * Fix assertion failure when parsing a doubly-invalid date-time text
  * Windows QPA: Correct mistake when calculating minmaxinfo
  * Android: replace ndk.dir with android.ndkVersion in build.gradle
  * Android: remove the old copy of gradle.properties after reading it
  * CMake Android Support: Fix signing of APKs
  * Android: fix A11Y object description
  * macOS: Fix warning about comparing different types in QCocoaScreen::isOnline
  * Fix qmake build on FreeBSD
  * Update documentation of enum Qt::DockWidgetArea
  * xcb: recreate xcb window under some conditions
  * objc_namespace: Add support for universal binaries
  * objc_namespace: Fix misspelled argument for silencing output
  * objc_namespace: Update parsing logic to account for otool changes
  * Blacklist passwordAuth for Ubuntu 20.04
  * Android: wrap QAndroidInputContext's m_focusObject in a QPointer
  * Fix compilation with GCC 12 (and on Fedora 35 and newer)
  * Chip example: fix an accidental bool-&gt;int conversion when using PMF connections
  * qmake: Add support for C++23
  * Android: use BCP 47 tag to create a correct Locale for QTimeZone::displayName()
  * QDateTime: fix adjusted datetime handling
  * Fix crash in tst_qmltc_examples on Android
  * macOS: Remove dead code for focus ring handling in Mac style
  * Detach for colortransforms of indexed formats
  * tst_QTcpSocket::connectToHostError - handle possible timeouts
  * CoreText: Avoid populating font family aliases if family was populated
  * Graphicsview: Avoid background clearing glitches under fractional DPR
  * Windows QPA: Avoid slowdown with UI Automation name change notification
  * Windows QPA: Avoid sending accessibility notifications before activation
  * Windows: Fix potential crash when retrieving default printer
  * Make Ubuntu with its non-standard security level happy
  * Android: Blacklist failing tests on tst_QGraphicsProxyWidget
  * Update LA 4.4.1
  * iOS A11Y: Set more accessibilityTraits
  * QNX: Fix compiler warning by when FEATURE_clipboard is not enabled
  * Document that native file dialogs might not show a title
  * Doc: Remove mentionings of overflows from QElapsedTimer
  * QTextMarkdownImporter: don't apply text char format to list item block
- Commits dropped by the rebase:
  * QBuffer: add missing &lt;limits&gt; include
  * Fix developer build</changelog>
  <changelog author="gmbr3@opensuse.org" date="1687953600">- Change %_libqt5_libexecdir to %_libexecdir/qt5 (bsc#1174075)</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch icu-devel requires to pkgconfig to allow switching libicu
  versions</changelog>
  <changelog author="fvogt@suse.com" date="1695902401">- Update to version 5.15.10+kde159 (bsc#1214327, CVE-2023-37369):
  * Fix CVE-2023-43114
  * QMimeDatabase: fix detection of pattern conflict in different prefixes
  * Fix highdpi conversion of QTabletEvent coordinates on xcb
  * widget: set WA_X11NetWmWindowType* after xcb window was created
  * Fix crash when setting override cursor on multiple clients
  * QAccessibleWidget: Remove pointless ZWSP in warning message
  * Android A11Y: Fix deadlock in QtAndroidAccessibility::runInObjectContext()
  * Correctly parse non BMP char refs in the sax parser
  * Clear the _X version of alongside the enum deprecator
  * Fix UB (signed char passed to &lt;cctype&gt; function)
  * Qt3DRender: includemocs
  * Fix capitalization error in auto-generated qdbusmacros.h include
  * QColorDialog: Ignore mouse move events when no mouse button is pressed
  * QHostInfo: fix remaining slotObj leaks
  * QXmlStreamReader: Raise error on unexpected tokens (CVE-2023-38197,
    QTBUG-92113, QTBUG-95188, bsc#1213326)
  * QTextLayout: Reconsider cursor drawing on TextObject
  * Ensure consistent cursor width under fractional scaling
  * Fix QTextEdit cursor rectangle vertical positioning
  * Return 0 in QWindow::winId in case of failed platform window creation
  * Doc: note QWindow::winId() will cause platform window creation
  * QSslDiffieHellmanParameters: fix mem-leak
  * QHostInfo: fix leaking slot object
  * Make sure we don't count down past 0 QT_FATAL_CRITICALS
  * QLogging: DRY isFatal(QtMsgType)
  * tst_QXmlStream: remove unneeded _ba UDLs
  * Fix typo in QXmlStreamReader error message
  * QXmlStreamReader: make fastScanName() indicate parsing status to callers
  * QXmlStreamReader: change fastScanName() to take a Value*
  * Fix Croatia's currency
  * SSL: upgrade the default DH parameters</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1696593600">- Update to version 5.15.11+kde134, rebased upstream:
  * Revert "Windows QPA: Add support to UiaRaiseNotificationEvent()"
  * FileChooser portal: Make sure filter.name is not empty
  * QPersistentModelIndex: fix UB (op&lt; on unrelated pointers)
  * Avoid crash when keysymToQtKey(keysym, Qt::ControlModifier) is called
  * a11y atspi: translate coords for GetOffsetAtPoint the right way
  * a11y atspi: Take dialog into account as top-level window
  * a11y atspi: Fix incorrect use of x instead of y position
  * macOS: Handle asynchronous deminiaturizing of windows
  * QTranslator: generalize a UNIX-only path
  * iOS, input panel: be more careful before enabling QIOSKeyboardListener
  * Android: Fix flickering on window resize and show keyboard
  * Android A11Y: Check for active surface before calling into native code
  * xcb: Delete touch points without target windows
  * Blacklist 1 tests in tst_QDBusConnection on ubuntu-20.04
  * Fix CMake builds without ANDROID_SDK
  * Blacklist 2 tests in tst_Http2 on ubuntu-20.04
  * Blacklist 1 tests in tst_QSqlQuery on macos
  * Defer creating the special shaders in the texture blitter
  * tst_QSslSocket::serverCipherPreferencies - fix for OpenSSL v3
  * QTemporaryFile: document rename() differences from QFile
  * Doc: 3rd party: Fix reference to FreeType LICENSE.txt
  * Update bundled libjpeg-turbo to version 2.1.4
  * tst_QSsSocket: fix verifyClientCertificate with OpenSSL 3
  * tst_QSslSocket: regenerate certificate used for setLocalCertificateChain
  * tst_QSslSocket::protocolServerSide - make it work with OpenSSL v3
  * tst_QSslSocket::oldErrorsOnSocketReuse - make it work with OpenSSL v3
  * Update zconf.h prefixes to match zlib v1.2.12 update
  * xcb: fix D&amp;D in same xembed client
  * xcb: use global coordinates for position of D&amp;D for xembed client
  * Doc: Update QMetaType::metaObject() descriptions
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 22.04
  * BLACKLIST tst_qfont for Ubuntu 22.04
  * BLACKLIST tst_QMenuBar::check_menuPosition for Ubuntu 22.04
  * tst_QDtls::verifyClientCertficiate - update certs for OpenSSL v3
  * QSslCertificate::toText(): add a file to compare against
  * Fix the spelling of the word "combination"
  * tst_QSslCertificate::pkcs12 - skip the test if OpenSSL version &gt;= 3
  * Android A11Y: Fix TalkBack scrolling behavior
  * Android A11Y: Notify android about scroll events
  * QCocoaDrag: don't add pasteboard items with non-absolute URLs
  * QDirPrivate: pass input QList by cref
  * tst_qbytearray: remove qCompress_data for QT_NO_COMPRESS
  * QDeviceDiscoveryUDev: use NSDMI
  * QAuthenticator: Fix crash when using NTLM / Negotiate
  * Provide a native interface instance in minimal platform plugin
  * Android: document the supported clipboard mimetypes
  * Windows: Account for not finding child windows when calling ChildWindowFromPointEx
  * iOS: Send touch events asynchronously to avoid deadlocking UIKit event loop
  * Disable bitcode for iOS
  * macOS: Ignore deprecation for ReleaseIconRef
  * BLACKLIST tst_QApplication::sendEventsOnProcessEvents for Ubuntu 22.04
  * Convert Latin1 to UTF-16 before passing to ICU API
  * Doc: Remove repetition of word in text
  * eglfs: Fix screen cloning when atomic is enabled
  * Fix printing of dpr&gt;1 images on Windows
  * QHttp: Fix handling of redirect loaded from cache
  * Doc: Fix return type of QLEInteger/QBEInteger post-in/decrement ops
  * qmake: Fix installation of separate debug info for plugins
  * iOS: ensure we close inputpanel after clearing focusobject
  * Convert Latin1 to UTF-16 before passing to ICU API
  * qputenv: defend against non-NUL-terminated QByteArray values
  * QFontSubset: remove unused glyphName() overload
  * Statically assert that the __mips_dsp code is only active on 32-bit
  * QGtk3Theme: Ensure gtk uses the same windowing system as Qt
  * tst_QFocusFrame: fix -Wparantheses
  * Sync Vulkan device features between QVulkanWindow and QRhi
  * SQLite: Update SQLite to v3.39.2
  * Update freetype to 2.12.1
  * corelib: Fix typos in documentation
  * QAtomicInteger docs: mention bool and char8_t as 8-bit types
  * qgraphicsitem_cast: replace 0 with nullptr
  * Doc: Hide weak overload template magic from documentation
  * Revert "QDateTime: fix adjusted datetime handling"
  * Fix select handles disappears issues
  * tst_QSslKey: prepare for the migration to OpenSSL v3
  * tst_qnetworkreply: replace server.pem/key pair
  * Disable unit testing setting up QTcpServer on special Apple interfaces
  * qmake/msbuild: Turn off "use full paths in diagnostics" by default
  * qmake/msbuild: Support all /DEBUG:xxx linker options
  * qmake/msbuild: Support all /LTCG:xxx options
  * Android A11Y: Add content change type to content change event
  * Enabler for fractional scaling of text in Qt Quick
  * macOS: Override logical DPI to 72
  * Add QDom internalSubset implementation
  * Fix tst_AndroidAssets, broken by recent changes on assets load speed
  * Android: Improve loading speed of individual assets
  * Darwin: Replace deprecated symbol kIOMasterPortDefault with equivalent
  * macOS: Remove code for handling logical DPI changes
  * Fix an incorrect invocation of llvm-readobj
  * macOS: Ignore deprecation for kOnSystemDisk icon domain
  * Copy only files that belongs to QML module
  * Android: fix wrong position of cursor handle and editpopup menu in split screen
  * Doc: Document QML_IMPORTS_PATH and QMLPATHS
  * Add the missing RCC_DIR to '.qrc' paths when generating deployment settings
  * Android: Fix the offset of the EditPopupMenu
  * xcb: update xkb_state mask as much as possible
  * QDom: Stop treating non-BMP characters as invalid
  * Android 13: Fix warnings on starting an application
  * qxkbcommon: Map Super/Hyper to Meta early enough to have an effect
  * macOS: Ignore update requests for offline displays
  * macOS: Avoid recursively updating screens when window moves screen
  * qmake/MinGW: Install separate debug info of DLLs next to the DLL
  * QMainWindow: fix restoreState() for toolbars
  * Make two QDT benchmarks data-driven and add more rows
  * Fix doc and example of QLoggingCategory::installCategory()
  * qmake: Document Xcode behavior when bundling translation files
  * Android: Fix missing import
  * QByteArray: more GCC 12 -Werror=array-bound whack-a-mole
  * CMake: Fix android sdk version propagation
  * Restore C++20-deprecated mixed-enum bitwise operators
  * Android: Fix ANR when QtService and QtActivity load in same process
  * Fix restart QtActivity
  * QArrayData::data(): do type-punning via quintptr, not char *
  * QIOSTextResponder: recreate responder upon reset
  * QSslSocket: make it work with OpenSSL v3
  * QFileSystemModelPrivate: de-inline ctor and dtor
  * Network: update Public Suffix List
  * macOS: Ensure proper quoting when calling otool in objc_namespace script
  * QKeySequence: Fix the one-off error in the mac glyph array size
- Commits dropped by the rebase:
  * Apply CVE-2022-27404-27405-27406-qtbase-5.15.diff
  * QArrayData: fix UB via reinterpret_cast (crash with FORTIFY_SOURCE=3)
  * Adapt for q_EVP_PKEY_base_id → q_EVP_PKEY_get_base_id rename in OpenSSL 3
  * Don't use a deprecated function if built/linked with OpenSSL v3</changelog>
  <changelog author="christophe@krop.fr" date="1696593601">- Enable the experimental native painting feature to improve
  remote desktop performances (boo#1214915)
  exporting QT_XCB_NATIVE_PAINTING is required to use the feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1697716800">- Update to version 5.15.11+kde138:
  * QLibraryPrivate: Actually merge load hints
  * QPluginLoader: report the right load hints
  * xkb: fix build with libxkbcommon 1.6.0 and later
  * a11y atspi: Map ButtonMenu role to AT-SPI equivalent</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1703851200">- Update to version 5.15.12+kde144, rebased upstream:
  * QMimeDatabase: handle buggy type definitions with circular inheritance
  * xcb: only set base size when it's valid
  * QPixmapCache: fix leaking of QStrings and Keys on clear()
  * OpenFile portal: do not use O_PATH fds
  * QSystemTrayIcon: properly disconnect old menu in setContextMenu()
  * Guard QTabBar against nested event processing during moving tabs
  * QDial: don't crash when min==max and setting a value != min &amp; max
  * QStandardItemModel: don't leak in mimeData()
  * SQL/MySQL: properly initialize variable
  * QWidgetTextControl: ignore invalid input method event
  * Update the LGPL license header
  * SQL/MySQL: fix handling of json column
  * Remove QMAKE_RANLIB and QMAKE_LINK_SHLIB from android/default_pre.prf
  * macOS: Fix less common writing systems on Catalina and later
  * Blacklist 1 tests in tst_QFtp on ubuntu-20.04
  * Update bundled libpng to version 1.6.39
  * Android: Fix signing of APKs that are generated when an AAB is also built
  * Update bundled zlib to version 1.2.13
  * doc: update the limitation of QSystemTrayIcon on X11
  * Blacklist 1 tests in tst_QTimer on ubuntu-20.04
  * Add benchmarks for QLocale number parsing
  * Add benchmarks for QString number parsing
  * Android: Fix incorrect fullscreen dimensions
  * Gtk3Theme: set XCURSOR_SIZE and XCURSOR_THEME for wayland sessions
  * xcb: Flush Display when processing xcb events
  * xcb: Add xlib wrapper for XFlush()
  * QHostAddress: Fix incorrect comparison against 'Any'
  * QSsl[OpenSSL/Android]: Fix hardcoded 1_1 suffix
  * BLACKLIST: tst_QApplication::sendEventsOnProcessEvents for RHEL 9.0
  * QMacStyle: do not set white color for grayed out button
  * Work round macOS's omission of en_DE from its own uiLanguages()
  * Suppress a deprecation warning in tst_QDateTime::toString_enumformat()
  * QJsonValue: fix incorrect to{Array,Object} when the value is empty
  * QGtk3Dialog: remove the #include for empty moc
  * Remove unneeded QWindow from QGtk3Dialog
  * tst_QSslSocket: Delete sslOptions
  * tst_QSslServer: Make the in-process server use TLS1.2
  * Android: fix Gradle warning about using enableUncompressedNativeLibs
  * Mention  limitation of QDir::drives() on Windows
  * QFileSystemEngine/Win: fix incorrect buffer size in currentPath()
  * Android: properly retrieve mime type of uri to for openUrl()
  * Android: Fix clipboard issue with urls
  * Android: Add a way to disable accessibility via an environment var
  * Update bundled libpng to version 1.6.38
  * QIOSMessageDialog::exec - work around 'windowsless' exec
  * QIosScreen: retain the right window
  * tst_Q{BitArray,ContiguousCache}: check not only count(), but size(), too
  * QIosTextResponder: stop using deprecated constants and type
  * qcompilerdetection.h: detect Coverity
  * Android: Fix Display.getRealMetrics deprecation
  * Fix broken Text rendering when noantialiased NativeRendering is used
  * forkfd: fix Clang 15 ATOMIC_VAR_INIT deprecation warning
  * eglfs: Add env.var. to disable the dedicated drmHandleEvent thread
  * doc: Don't put strings into QVector&lt;double&gt;
  * Remove focusProxyAndInputMethods from tst_QWidget
  * Bump version to 5.15.12
  * Update documentation of qWaitForWindowActive / qWaitForWindowExposed
  * QtHttp: Lower the severity of some log output
  * StyleSheetStyle: Fix color of placeholder texts in text edits
  * Android: Fix flickering on split screen mode
  * Update url to IAccessible2 Specification</changelog>
  <changelog author="alarrosa@suse.com" date="1704283200">- Update to version 5.15.12+kde147:
  * Http2: fix potential overflow in assemble_hpack_block()
    (bsc#1218413, CVE-2023-51714)
  * HPack: fix incorrect integer overflow check
  * HPack: fix a Yoda Condition</changelog>
  <changelog author="fvogt@suse.com" date="1708084800">- Update to version 5.15.12+kde151:
  * Improve KTX file reading memory safety (CVE-2024-25580, boo#1219996)
  * Revert "xcb: only set base size when it's valid"
  * Fix potential leak of QPropertyAnimation in QLineEditIconButton
  * QBitArray: correct inline keyword</changelog>
  <changelog author="alarrosa@suse.com" date="1720785600">- Add patch from upstream to fix a regression in the ODBC driver
  (bsc#1227513, QTBUG-112375):
  * 0001-QSQL-ODBC-fix-regression-trailing-NUL.patch
  * 0002-SQL-ODBC-Pass-correct-length-to-SQLColAttribute.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1722945600">- Add rebased upstream patch to delay any HTTP2 communication until
  encrypted() can be responded to (bsc#1227426, CVE-2024-39936):
  * 0001-HTTP2-Delay-any-communication-until-encrypted-can-be.patch
- Add upstream patch to fix a NULL pointer dereference via the
  function QXcbConnection::initializeAllAtoms() when there is
  anomalous behavior from the X server (bsc#1222120,
  CVE-2023-45935):
  * 0001-xcb-guard-a-pointer-before-usage.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756728000">- Add patch from upstream to fix a precondition violation in call
  to QByteArrayView::at() which can cause crashes (bsc#1243958,
  CVE-2025-5455):
  * 0001-qDecodeDataUrl-fix-precondition-violation-in-call-to.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756814400">- Add patch from upstream to initialize a member variable that was
  uninitialized under some circumstances:
  * 0001-QObjectPrivateSignal-initialize-all-members.patch
- Add patch from upstream to fix a crash when parsing a particular
  glyph in a particular font (QTBUG-124310):
  * 0001-Avoid-crash-in-font-distancefield-computation.patch
  * 0002-Fix-crash-in-font-distancefield-computation.patch
- Add patch from upstream to fix avoid repeatedly registering
  xsettings callbacks when switching cursor themes:
  * 0001-xcb-Avoid-repeatedly-registering-xsettings-callbacks-When.patch
- Add patch from upstream to check validity of RandR output info
  before using it (QTBUG-128906):
  * 0001-xcb-check-validity-of-RandR-output-info-before-using-it.patch
- Add patch from upstream to fix reparenting a window so it takes
  effect even if there are no other state changes to the window:
  * 0001-xcb-Sync-XCB-connection-after-reparenting-window.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756900800">- Add patch from upstream to fix a low performance when processing
  XML data in encodeText (bsc#1239896, CVE-2025-30348):
  * 0001-XML_QDom-speedup-encodeText.patch</changelog>
</package>
<package pkgid="8bd86445008c2b43491ed20ba0ada8dfc89a6a39eac8abe96934e0917576b94b" name="libQt5DBus5" arch="x86_64">
  <version epoch="0" ver="5.15.12+kde151" rel="150600.3.9.1"/>
  <changelog author="fvogt@suse.com" date="1678968000">- Update to version 5.15.8+kde183:
  * Add nullptr guard in QStyleSheetStyle::drawPrimitive(PE_PanelLineEdit)
  * QAbstractItemView: don't access invalid indexes on copy-key
  * Apply CVE-2023-24607-qtbase-5.15.diff (CVE-2023-24607,
    bsc#1209616)
  * QXcbConnection::getTimestamp: do not return stale timestamp
  * QToolButton: Elide text when constraints prevent from showing whole text
  * correctly set up ref counting in QThreadPool::tryStart(std::function)
  * Do not set Qt::ToolTip flag for QShapedPixmapWindow
  * Fix deletion order also for QImageReader/Writer::setDevice()
  * Fix deletion order in QImageReader/Writer destructors
  * QNetworkReply: Fix typos in the documentation
  * Doc: Fix typo in the online documentation template
  * Doc: Link to page documenting Qt trademarks in the copyright footer
  * [doc] Fix typo in QBuffer::setBuffer() description
  * qwindowsdrag: Fix typo in documentation
  * openglblacklists: Fix typo in description
  * qxcbscreen: Fix typo in documentation
  * Fix typos in SQL driver documentation
  * qxcbwindow.cpp: Fix sign-compare and another warnings
  * QToolButton: reimplement the fix for QTBUG-95255
  * QSysInfo::prettyProductName(): Add macOS Ventura product name
  * QSysInfo::prettyProductName(): add missing macOS product names
  * xcb: correctly disconnect xsettings callbacks
  * ibus: add SetCursorLocationRelative in InputContext.xml</changelog>
  <changelog author="fvogt@suse.com" date="1680523200">- Update to version 5.15.8+kde185:
  * QFSFileEngine: fix overflow bug when using lseek64
  * Add QImage null check when QOpenGLTexture converts
- Add patch to fix return key handling in QGroupBox on GNOME (bsc#1209364):
  * 0001-Revert-QGnomeTheme-Allow-Space-Return-Enter-and-Sele.patch
- Add patch to fix XInput2 events in big-endian X11 clients (bsc#1204883, QTBUG-105157):
  * big-endian-scroll.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1682078400">- Update to version 5.15.9+kde151, rebased upstream:
  * QCborValue: fix incorrect to{Array,Map} when the value is empty
  * QMargins: fix a missing "full stop" in the docs
  * QLibrary: restore translated string
  * QLibrary: fix possible arg() format clobbering
  * iOS: Use python3 for enumerating test target devices
  * Android: Treat ACTION_CANCEL as TouchCancelEvent
  * Doc: Fix broken formatting
  * QFileSystemEngine: fix potential formatting error
  * QString::asprintf: check that passing field widths as arguments works
  * Backport recent QFlags tests
  * network: Fix typos in documentation
  * Fix accuracy with screen composition
  * Doc: Update documentation for QElapsedTimer's in Windows
  * Document that QStandardPath::findExecutable works with absolute paths
  * macOS: Use native resize cursors for diagonal resize
  * Fix clipped glyphs in text rendering of QGraphicsTextItem
  * Change comparison data type to fix int overflow
  * Add missing Q_WEAK_OVERLOAD definition
  * Update QFileInfo docs to mention macOS aliases
  * Distinguish macOS aliases from normal symbolic links
  * Windows QPA: Fix frameless maximize on secondary screens
  * Rewrite tst_qdataurl as a data-driven test
  * Fix compilation for wasm
  * QIOSFileDialog/QIOSDocumentPickerController - handle dismissed view controller
  * Fix QDockWidget's dock area permissions after hovering
  * Fix C++20 ambiguous relational operators between QJsonValue{,Ref}
  * Android: make sure that orientationChange is reported after resize
  * Android: set all QScreen's geometry-related parameters together
  * Blacklist: test cases blacklisted in tst_QDBusConnection:
  * wasm:  fix issue with passing username/password to network request
  * macOS: Pass multi arch flags when linking qmake
  * QCocoaFileDialogHelper: Always enable symlinks and aliases to directories
  * Android: terminate argv passed to main() with nullptr
  * Update bundled libjpeg-turbo to version 2.1.3
  * ANGLE: Load the DirectX libraries from the system path directly
  * SQLite: Update SQLite to v3.37.2
  * Fix compiler warnings about unused parameters
  * Fix getsockopt option_value initial initialization
  * Http2: Fix redirect-handling
  * Android A11Y: Fix value rounding
  * Android A11Y: Announce value together with element name when focused
  * Android A11Y: handle valueChanged events
  * tst_QSystemSemaphore: give proper path to test-helper
  * QNX: Silence compiler warning by initializing variable
  * Update LICENSE.QT-LICENSE-AGREEMENT
  * winrt appxmanifest: Properly replace VCLibs version for newer MSVC versions
  * QAbstractSocket: Don't pretend pause and resume is a stack
  * Gui: test also depends for clipboard feature
  * QDesktopServices: deprecate destroying URL handlers w/o explicit unsetUrlHandler()
  * macOS: Respect QMAKE_APPLE_DEVICE_ARCHS when building qmake
  * HTTP: Make redirect response parsing more generic
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 20.04
  * Android A11Y: populate child elements when constructing node info
  * Fix issue where readyRead() could happen after disconnected()
  * QStringView: add missing constexpr so we can use is_constant_evaluated
  * Use Android's View.generateViewId() for generating ids for views/surfaces
  * Remove documentation of non-existing QAccessible state
  * Doc: Fix snippet to match actual QFileInfo behavior
  * Android: Re-focus focused accessibility node after orientation change
  * Android A11Y: execute C++ code on main Qt thread
  * Android: extract parentId for hidden object in advance
  * xcb: Show valuator atom names properly in categorized logging
  * Android: replace stacktrace with debug message in search for setService
  * Better document attaching a QFutureWatcher to a started QFuture
  * doc: Update GenericDataLocation location on iOS
  * BLACKLIST test_Gestures tests for RHEL-8.4
  * QPlainTestLogger: do not print "failure location" if there's no failure
  * QAbstractItemView: do not access invalid model indices (3/N)
  * Win32: always allow the event loop to be woken up by posted events
  * rhi: d3d11: Use __uuidof where we can
  * Don't QEXPECT_FAIL tst_QLineEdit::testQuickSelectionWithMouse on macOS ARM
  * Network: Emit authenticationRequired when using Ntlm
  * testlib: Disable window restoration on macOS in a non-persistent way
  * QAbstractItemView: do not access invalid model indices (2/N)
  * QAbstractItemView: do not access invalid model indices (1/N)
  * QAbstractItemView: code tidies
  * Update float16 part of TestLib selftest
  * QGuiApplication: constant-initialize lastCursorPosition
  * Blacklist tst_QFileSystemWatcher::signalsEmittedAfterFileMoved on all Windows versions
  * [Android]: Handle the screen name, modes and refreshRate properly
  * QVersionNumber: remove the "pure" attribute from commonPrefix()
  * QEvent: initialize the static userEventTypeRegistry constexprly
  * Let QXcbGlxWindow::createVisual fallback to QXcbWindow::createVisual
  * Android A11Y: fix content update notification when object is hidden
  * Android: explicitly remove accessibility focus when element is hidden
  * BLACKLIST tst_qfont for Red Hat 8.4 and Ubuntu 20.04
  * QtCore: includemocs
  * Fix memory leak in QtConcurrent::run when called with a NULL QThreadPool
  * INTEGRITY: Prevent deletion of virtual functions
  * QMake: replace a Q_ASSERT() with a Q_UNREACHABLE()
  * QTransform benchmark: measure what was promised
  * QStaticByteArrayMatcher: add a useful comment
  * QMacStyle: use the 'momentary push in' type for push buttons
  * qopengl.h: Move C header #include(s) out of the QT_NAMESPACE
  * Enable all supported 1.0 device features in QVulkanWindow
  * Fix queue passed to vkQueuePresent
  * QFusionStyle: don't draw an invalid outline for up/down buttons
  * Doc: Make QListIterator snippets more robust
  * QVersionNumber: don't detach() in rvalue QList/QVector ctor
  * QNetworkRequest: Document how Qt handles 301 and 302 status codes
  * Convert date-time to UTC before claiming it's in GMT
  * Remove execute permission from XML files
  * Add test case for style sheet selectors for enum properties
  * FreeType: allow falling back to synthesized bold if desired
  * Fix an assertion failure in massageAdjustedDateTime()
  * Relax tst_qvulkan::vulkanVersionRequest to make it compatible with 1.1
  * Doc: Replace "C:Documents and Settings" paths
  * QOrderedMutexLocker: fix compilation with C++11
  * QHttpNetworkConnection: Always set proxy settings to all channels
  * Add a markdown writer test for a checklist item ending with `code`
  * Use QTextCharFormat::fontFixedPitch to remember Markdown backtick spans
  * QWizardLayoutInfo: make == and != operators const
  * Revert "Android: Fix screen flicker issues"
  * macOS: Handle momentum scroll NSEventPhaseBegan when scroll had ended
  * SQLite: Update SQLite to v3.37.0
  * Update copyright year to 2022
  * QTzTimeZonePrivate: use ctor delegation instead of init()
  * QTzTimeZonePrivate: fix permanently-detaching m_icu
  * tst_QGraphicsView: fix memleak
  * Doc: Update external links to Qt Creator Manual
  * macOS: assume an unidentified tablet device is a stylus
  * tst_QItemModel: fix memleaks
  * tst_qanimationgroup: fix memleaks
  * QAbstractAnimation: add missing forward-declaration
  * [doc] QCoreApplication::installTranslator() doesn't take ownership
  * tst_qtranslator: fix memleak
  * QTestData: fix streaming of u8 string literals in C++20 mode
  * QThread/Unix: extract duplicate code
  * QWindowPrivate: fix inconsistent inline on some methods
  * tst_QStringList: check that join(u'0') embeds NULs
  * macOS: Sanitize scroll deltas for NSEventPhaseCancelled
  * tst_qsharedmemory: skip readOnly() test under asan
  * QXmlStreamReader: update test distribution
  * QZipReader: update to unzip partly broken archives
  * Deliver context menu event with correct coordinates to widgets in popups
  * QTextHtmlParser: fix prefix lookahead and html comments
  * QtConcurrent::run crashes on program exit
  * tst_QPropertyAnimation: fix leaks occurring under normal operation
  * tst_QPropertyAnimation: fix wrong comment
  * QLogging: fix potential missing NUL-terminator when calling OutputDebugString
  * Fix qt_scrollRectInImage when scrolling outside of the image
- Commits dropped by the rebase:
  * Fix compile with Qt5: Use QString::mid instead of QString::sliced
  * Restore C++11 compatibility after e8b9f4c28d3ab5e960dc54f2dc0c4b749b0b50e0
  * QDateTime: Don't require c++17</changelog>
  <changelog author="fvogt@suse.com" date="1683633600">- Amend patch to fix mouse grabbing as well (bsc#1211024):
  * big-endian-scroll.patch</changelog>
  <changelog author="fvogt@suse.com" date="1684929600">- Update to version 5.15.9+kde154:
  * Hsts: match header names case insensitively (CVE-2023-32762,
    QTBUG-113392, bsc#1211797)
  * Fix specific overflow in qtextlayout (CVE-2023-32763,
    QTBUG-113337, bsc#1211798)
  * QDnsLookup/Unix: make sure we don't overflow the buffer
    (CVE-2023-33285, boo#1211642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1686657600">- Update to version 5.15.10+kde129, rebased upstream:
  * Ssl: Copy the on-demand cert loading bool from default config
  * Schannel: Reject certificate not signed by a configured CA certificate (boo#1211994, CVE-2023-34410)
  * qnetworkreplyfileimpl_p.h: fix header guard name
  * Revert "Draw the cursor considering the descent is 0"
  * Use pkgconfig in order to find libproxy configuration
  * Upgrade PCRE2 to 10.40
  * Android A11Y: handle LocationChanged event only for focused element
  * Port binary JSON to new special integer bitfields
  * INTEGRITY: enable C99 globally
  * QObject: mark two error reporting functions COLD
  * Endian: Provide special integer bitfield unions
  * Android: set useLegacyPackaging to true in build.gradle
  * QWidgetTextControl: port to new-style connects (faster)
  * Sync qxmlstream.g with qxmlstreamparser_p.h [1/2]: switched lines
  * tst_QNetworkReply try stabilize autoDeleteReplies tests
  * Remove duplicated include for &lt;limits&gt;
  * Fix recursion crash when calling setStyleSheet with `qproperty-styleSheet`
  * qwindowsxpstyle: Fix typos in documentation
  * Correct prefix reported for end element in QXmlStreamReader
  * Android A11Y: Add supported role infos to A11yNodeInfo
  * Fix handling of DateTime values in QSettings
  * Fix off-by-one for "typically" lowest value INT_MIN
  * xml: Fix typos in documentation
  * QWindowsWindow: Fix typo in documentation
  * includemocs (updated script)
  * widgets: Fix typos in documentation
  * cocoa: Fix typo in debug messages
  * Only scroll QMenu when there is a valid active action
  * QTimer: Add note in documentation
  * Fix QListView assert when the last row is moved in IconMode
  * QFileDialog: Fix adding default suffix when file path contains dot
  * QLineEdit: account for the placeholderText when computing lineRect
  * QFileDialog::saveFileContent crashes on accept
  * QCompleter: QCompleter unexpectedly changes QLineEdit text
  * Fix build error on iOS with the configure option -qtnamespace
  * Draw the cursor considering the descent is 0
  * Remove pure-virtual-signals.h include from tst_moc.cpp
  * plugins: image formats - fix odr violation
  * dbus: Fix typos
  * qwindowsdialoghelpers: Fix typo in documentation
  * QTableView: Document the customizations applied to QHeaderView
  * Unicodetools: compile
  * eglfs_x11: Fix running flag linkage
  * qcompilerdetection.h: add Q_CC_{GNU,MSVC,CLANG}_ONLY macros
  * Fix CMake warning about "missing closing ' quote"
  * Fix alignment of next/prev links in offline style
  * QtDBus: includemocs
  * Image Plugins: includemocs(-ish)
  * QtGui: includemocs
  * QXcbNativeInterface: remove unused field m_sysTraySelectionAtom
  * Windows QPA: Fix slowdown with large table/tree views with accessibility
  * Macstyle: fix the text color on the disabled button
  * QMacStyle: fix tool buttons (in checked mode)
  * QTeamCityLogger: fix .arg() placeholder injection
  * QAbstractTestLogger: disable copying
  * Fix errorMessageFromComError()
  * QtNetwork: includemocs
  * AppleUnifiedLogger: Remove manually managed os_log_t cache
  * examples: add WindowStaysOnBottomHint into preview text
  * QSharedPointer: Use matching new/delete
  * QIbusPlatformInputContextPlugin: includemocs
  * QGtk3ThemePlugin: includemocs
  * QTuioTouchPlugin: includemocs
  * QtWidgets: includemocs v2022
  * QMYSQLDriverPlugin: includemocs
  * QtDeviceDiscoverySupportPrivate: includemocs
  * QLinuxFbIntegrationPlugin: includemocs
  * QtPrintSupport: includemocs
  * QSQLiteDriverPlugin: includemocs
  * QtFbSupportPrivate: includemocs
  * QXdgDesktopPortalThemePlugin: includemocs
  * QtTest: includemocs
  * QComposePlatformInputContextPlugin: includemocs
  * QtSql: includemocs
  * QVncIntegrationPlugin: includemocs
  * Fix backingstore fractional DPR glitches for widgets in child windows
  * Include &lt;limits&gt; where std::numeric_limits is used
  * QtInputSupportPrivate: includemocs
  * Document the default value of QSFPM::sortOrder()
  * Better document how to enable sorting in QSPFM
  * Correct documentation of INI format's loss of type information
  * Android: add missing properties in AndroidManifest.xml
  * Fix assertion failure when parsing a doubly-invalid date-time text
  * Windows QPA: Correct mistake when calculating minmaxinfo
  * Android: replace ndk.dir with android.ndkVersion in build.gradle
  * Android: remove the old copy of gradle.properties after reading it
  * CMake Android Support: Fix signing of APKs
  * Android: fix A11Y object description
  * macOS: Fix warning about comparing different types in QCocoaScreen::isOnline
  * Fix qmake build on FreeBSD
  * Update documentation of enum Qt::DockWidgetArea
  * xcb: recreate xcb window under some conditions
  * objc_namespace: Add support for universal binaries
  * objc_namespace: Fix misspelled argument for silencing output
  * objc_namespace: Update parsing logic to account for otool changes
  * Blacklist passwordAuth for Ubuntu 20.04
  * Android: wrap QAndroidInputContext's m_focusObject in a QPointer
  * Fix compilation with GCC 12 (and on Fedora 35 and newer)
  * Chip example: fix an accidental bool-&gt;int conversion when using PMF connections
  * qmake: Add support for C++23
  * Android: use BCP 47 tag to create a correct Locale for QTimeZone::displayName()
  * QDateTime: fix adjusted datetime handling
  * Fix crash in tst_qmltc_examples on Android
  * macOS: Remove dead code for focus ring handling in Mac style
  * Detach for colortransforms of indexed formats
  * tst_QTcpSocket::connectToHostError - handle possible timeouts
  * CoreText: Avoid populating font family aliases if family was populated
  * Graphicsview: Avoid background clearing glitches under fractional DPR
  * Windows QPA: Avoid slowdown with UI Automation name change notification
  * Windows QPA: Avoid sending accessibility notifications before activation
  * Windows: Fix potential crash when retrieving default printer
  * Make Ubuntu with its non-standard security level happy
  * Android: Blacklist failing tests on tst_QGraphicsProxyWidget
  * Update LA 4.4.1
  * iOS A11Y: Set more accessibilityTraits
  * QNX: Fix compiler warning by when FEATURE_clipboard is not enabled
  * Document that native file dialogs might not show a title
  * Doc: Remove mentionings of overflows from QElapsedTimer
  * QTextMarkdownImporter: don't apply text char format to list item block
- Commits dropped by the rebase:
  * QBuffer: add missing &lt;limits&gt; include
  * Fix developer build</changelog>
  <changelog author="gmbr3@opensuse.org" date="1687953600">- Change %_libqt5_libexecdir to %_libexecdir/qt5 (bsc#1174075)</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch icu-devel requires to pkgconfig to allow switching libicu
  versions</changelog>
  <changelog author="fvogt@suse.com" date="1695902401">- Update to version 5.15.10+kde159 (bsc#1214327, CVE-2023-37369):
  * Fix CVE-2023-43114
  * QMimeDatabase: fix detection of pattern conflict in different prefixes
  * Fix highdpi conversion of QTabletEvent coordinates on xcb
  * widget: set WA_X11NetWmWindowType* after xcb window was created
  * Fix crash when setting override cursor on multiple clients
  * QAccessibleWidget: Remove pointless ZWSP in warning message
  * Android A11Y: Fix deadlock in QtAndroidAccessibility::runInObjectContext()
  * Correctly parse non BMP char refs in the sax parser
  * Clear the _X version of alongside the enum deprecator
  * Fix UB (signed char passed to &lt;cctype&gt; function)
  * Qt3DRender: includemocs
  * Fix capitalization error in auto-generated qdbusmacros.h include
  * QColorDialog: Ignore mouse move events when no mouse button is pressed
  * QHostInfo: fix remaining slotObj leaks
  * QXmlStreamReader: Raise error on unexpected tokens (CVE-2023-38197,
    QTBUG-92113, QTBUG-95188, bsc#1213326)
  * QTextLayout: Reconsider cursor drawing on TextObject
  * Ensure consistent cursor width under fractional scaling
  * Fix QTextEdit cursor rectangle vertical positioning
  * Return 0 in QWindow::winId in case of failed platform window creation
  * Doc: note QWindow::winId() will cause platform window creation
  * QSslDiffieHellmanParameters: fix mem-leak
  * QHostInfo: fix leaking slot object
  * Make sure we don't count down past 0 QT_FATAL_CRITICALS
  * QLogging: DRY isFatal(QtMsgType)
  * tst_QXmlStream: remove unneeded _ba UDLs
  * Fix typo in QXmlStreamReader error message
  * QXmlStreamReader: make fastScanName() indicate parsing status to callers
  * QXmlStreamReader: change fastScanName() to take a Value*
  * Fix Croatia's currency
  * SSL: upgrade the default DH parameters</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1696593600">- Update to version 5.15.11+kde134, rebased upstream:
  * Revert "Windows QPA: Add support to UiaRaiseNotificationEvent()"
  * FileChooser portal: Make sure filter.name is not empty
  * QPersistentModelIndex: fix UB (op&lt; on unrelated pointers)
  * Avoid crash when keysymToQtKey(keysym, Qt::ControlModifier) is called
  * a11y atspi: translate coords for GetOffsetAtPoint the right way
  * a11y atspi: Take dialog into account as top-level window
  * a11y atspi: Fix incorrect use of x instead of y position
  * macOS: Handle asynchronous deminiaturizing of windows
  * QTranslator: generalize a UNIX-only path
  * iOS, input panel: be more careful before enabling QIOSKeyboardListener
  * Android: Fix flickering on window resize and show keyboard
  * Android A11Y: Check for active surface before calling into native code
  * xcb: Delete touch points without target windows
  * Blacklist 1 tests in tst_QDBusConnection on ubuntu-20.04
  * Fix CMake builds without ANDROID_SDK
  * Blacklist 2 tests in tst_Http2 on ubuntu-20.04
  * Blacklist 1 tests in tst_QSqlQuery on macos
  * Defer creating the special shaders in the texture blitter
  * tst_QSslSocket::serverCipherPreferencies - fix for OpenSSL v3
  * QTemporaryFile: document rename() differences from QFile
  * Doc: 3rd party: Fix reference to FreeType LICENSE.txt
  * Update bundled libjpeg-turbo to version 2.1.4
  * tst_QSsSocket: fix verifyClientCertificate with OpenSSL 3
  * tst_QSslSocket: regenerate certificate used for setLocalCertificateChain
  * tst_QSslSocket::protocolServerSide - make it work with OpenSSL v3
  * tst_QSslSocket::oldErrorsOnSocketReuse - make it work with OpenSSL v3
  * Update zconf.h prefixes to match zlib v1.2.12 update
  * xcb: fix D&amp;D in same xembed client
  * xcb: use global coordinates for position of D&amp;D for xembed client
  * Doc: Update QMetaType::metaObject() descriptions
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 22.04
  * BLACKLIST tst_qfont for Ubuntu 22.04
  * BLACKLIST tst_QMenuBar::check_menuPosition for Ubuntu 22.04
  * tst_QDtls::verifyClientCertficiate - update certs for OpenSSL v3
  * QSslCertificate::toText(): add a file to compare against
  * Fix the spelling of the word "combination"
  * tst_QSslCertificate::pkcs12 - skip the test if OpenSSL version &gt;= 3
  * Android A11Y: Fix TalkBack scrolling behavior
  * Android A11Y: Notify android about scroll events
  * QCocoaDrag: don't add pasteboard items with non-absolute URLs
  * QDirPrivate: pass input QList by cref
  * tst_qbytearray: remove qCompress_data for QT_NO_COMPRESS
  * QDeviceDiscoveryUDev: use NSDMI
  * QAuthenticator: Fix crash when using NTLM / Negotiate
  * Provide a native interface instance in minimal platform plugin
  * Android: document the supported clipboard mimetypes
  * Windows: Account for not finding child windows when calling ChildWindowFromPointEx
  * iOS: Send touch events asynchronously to avoid deadlocking UIKit event loop
  * Disable bitcode for iOS
  * macOS: Ignore deprecation for ReleaseIconRef
  * BLACKLIST tst_QApplication::sendEventsOnProcessEvents for Ubuntu 22.04
  * Convert Latin1 to UTF-16 before passing to ICU API
  * Doc: Remove repetition of word in text
  * eglfs: Fix screen cloning when atomic is enabled
  * Fix printing of dpr&gt;1 images on Windows
  * QHttp: Fix handling of redirect loaded from cache
  * Doc: Fix return type of QLEInteger/QBEInteger post-in/decrement ops
  * qmake: Fix installation of separate debug info for plugins
  * iOS: ensure we close inputpanel after clearing focusobject
  * Convert Latin1 to UTF-16 before passing to ICU API
  * qputenv: defend against non-NUL-terminated QByteArray values
  * QFontSubset: remove unused glyphName() overload
  * Statically assert that the __mips_dsp code is only active on 32-bit
  * QGtk3Theme: Ensure gtk uses the same windowing system as Qt
  * tst_QFocusFrame: fix -Wparantheses
  * Sync Vulkan device features between QVulkanWindow and QRhi
  * SQLite: Update SQLite to v3.39.2
  * Update freetype to 2.12.1
  * corelib: Fix typos in documentation
  * QAtomicInteger docs: mention bool and char8_t as 8-bit types
  * qgraphicsitem_cast: replace 0 with nullptr
  * Doc: Hide weak overload template magic from documentation
  * Revert "QDateTime: fix adjusted datetime handling"
  * Fix select handles disappears issues
  * tst_QSslKey: prepare for the migration to OpenSSL v3
  * tst_qnetworkreply: replace server.pem/key pair
  * Disable unit testing setting up QTcpServer on special Apple interfaces
  * qmake/msbuild: Turn off "use full paths in diagnostics" by default
  * qmake/msbuild: Support all /DEBUG:xxx linker options
  * qmake/msbuild: Support all /LTCG:xxx options
  * Android A11Y: Add content change type to content change event
  * Enabler for fractional scaling of text in Qt Quick
  * macOS: Override logical DPI to 72
  * Add QDom internalSubset implementation
  * Fix tst_AndroidAssets, broken by recent changes on assets load speed
  * Android: Improve loading speed of individual assets
  * Darwin: Replace deprecated symbol kIOMasterPortDefault with equivalent
  * macOS: Remove code for handling logical DPI changes
  * Fix an incorrect invocation of llvm-readobj
  * macOS: Ignore deprecation for kOnSystemDisk icon domain
  * Copy only files that belongs to QML module
  * Android: fix wrong position of cursor handle and editpopup menu in split screen
  * Doc: Document QML_IMPORTS_PATH and QMLPATHS
  * Add the missing RCC_DIR to '.qrc' paths when generating deployment settings
  * Android: Fix the offset of the EditPopupMenu
  * xcb: update xkb_state mask as much as possible
  * QDom: Stop treating non-BMP characters as invalid
  * Android 13: Fix warnings on starting an application
  * qxkbcommon: Map Super/Hyper to Meta early enough to have an effect
  * macOS: Ignore update requests for offline displays
  * macOS: Avoid recursively updating screens when window moves screen
  * qmake/MinGW: Install separate debug info of DLLs next to the DLL
  * QMainWindow: fix restoreState() for toolbars
  * Make two QDT benchmarks data-driven and add more rows
  * Fix doc and example of QLoggingCategory::installCategory()
  * qmake: Document Xcode behavior when bundling translation files
  * Android: Fix missing import
  * QByteArray: more GCC 12 -Werror=array-bound whack-a-mole
  * CMake: Fix android sdk version propagation
  * Restore C++20-deprecated mixed-enum bitwise operators
  * Android: Fix ANR when QtService and QtActivity load in same process
  * Fix restart QtActivity
  * QArrayData::data(): do type-punning via quintptr, not char *
  * QIOSTextResponder: recreate responder upon reset
  * QSslSocket: make it work with OpenSSL v3
  * QFileSystemModelPrivate: de-inline ctor and dtor
  * Network: update Public Suffix List
  * macOS: Ensure proper quoting when calling otool in objc_namespace script
  * QKeySequence: Fix the one-off error in the mac glyph array size
- Commits dropped by the rebase:
  * Apply CVE-2022-27404-27405-27406-qtbase-5.15.diff
  * QArrayData: fix UB via reinterpret_cast (crash with FORTIFY_SOURCE=3)
  * Adapt for q_EVP_PKEY_base_id → q_EVP_PKEY_get_base_id rename in OpenSSL 3
  * Don't use a deprecated function if built/linked with OpenSSL v3</changelog>
  <changelog author="christophe@krop.fr" date="1696593601">- Enable the experimental native painting feature to improve
  remote desktop performances (boo#1214915)
  exporting QT_XCB_NATIVE_PAINTING is required to use the feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1697716800">- Update to version 5.15.11+kde138:
  * QLibraryPrivate: Actually merge load hints
  * QPluginLoader: report the right load hints
  * xkb: fix build with libxkbcommon 1.6.0 and later
  * a11y atspi: Map ButtonMenu role to AT-SPI equivalent</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1703851200">- Update to version 5.15.12+kde144, rebased upstream:
  * QMimeDatabase: handle buggy type definitions with circular inheritance
  * xcb: only set base size when it's valid
  * QPixmapCache: fix leaking of QStrings and Keys on clear()
  * OpenFile portal: do not use O_PATH fds
  * QSystemTrayIcon: properly disconnect old menu in setContextMenu()
  * Guard QTabBar against nested event processing during moving tabs
  * QDial: don't crash when min==max and setting a value != min &amp; max
  * QStandardItemModel: don't leak in mimeData()
  * SQL/MySQL: properly initialize variable
  * QWidgetTextControl: ignore invalid input method event
  * Update the LGPL license header
  * SQL/MySQL: fix handling of json column
  * Remove QMAKE_RANLIB and QMAKE_LINK_SHLIB from android/default_pre.prf
  * macOS: Fix less common writing systems on Catalina and later
  * Blacklist 1 tests in tst_QFtp on ubuntu-20.04
  * Update bundled libpng to version 1.6.39
  * Android: Fix signing of APKs that are generated when an AAB is also built
  * Update bundled zlib to version 1.2.13
  * doc: update the limitation of QSystemTrayIcon on X11
  * Blacklist 1 tests in tst_QTimer on ubuntu-20.04
  * Add benchmarks for QLocale number parsing
  * Add benchmarks for QString number parsing
  * Android: Fix incorrect fullscreen dimensions
  * Gtk3Theme: set XCURSOR_SIZE and XCURSOR_THEME for wayland sessions
  * xcb: Flush Display when processing xcb events
  * xcb: Add xlib wrapper for XFlush()
  * QHostAddress: Fix incorrect comparison against 'Any'
  * QSsl[OpenSSL/Android]: Fix hardcoded 1_1 suffix
  * BLACKLIST: tst_QApplication::sendEventsOnProcessEvents for RHEL 9.0
  * QMacStyle: do not set white color for grayed out button
  * Work round macOS's omission of en_DE from its own uiLanguages()
  * Suppress a deprecation warning in tst_QDateTime::toString_enumformat()
  * QJsonValue: fix incorrect to{Array,Object} when the value is empty
  * QGtk3Dialog: remove the #include for empty moc
  * Remove unneeded QWindow from QGtk3Dialog
  * tst_QSslSocket: Delete sslOptions
  * tst_QSslServer: Make the in-process server use TLS1.2
  * Android: fix Gradle warning about using enableUncompressedNativeLibs
  * Mention  limitation of QDir::drives() on Windows
  * QFileSystemEngine/Win: fix incorrect buffer size in currentPath()
  * Android: properly retrieve mime type of uri to for openUrl()
  * Android: Fix clipboard issue with urls
  * Android: Add a way to disable accessibility via an environment var
  * Update bundled libpng to version 1.6.38
  * QIOSMessageDialog::exec - work around 'windowsless' exec
  * QIosScreen: retain the right window
  * tst_Q{BitArray,ContiguousCache}: check not only count(), but size(), too
  * QIosTextResponder: stop using deprecated constants and type
  * qcompilerdetection.h: detect Coverity
  * Android: Fix Display.getRealMetrics deprecation
  * Fix broken Text rendering when noantialiased NativeRendering is used
  * forkfd: fix Clang 15 ATOMIC_VAR_INIT deprecation warning
  * eglfs: Add env.var. to disable the dedicated drmHandleEvent thread
  * doc: Don't put strings into QVector&lt;double&gt;
  * Remove focusProxyAndInputMethods from tst_QWidget
  * Bump version to 5.15.12
  * Update documentation of qWaitForWindowActive / qWaitForWindowExposed
  * QtHttp: Lower the severity of some log output
  * StyleSheetStyle: Fix color of placeholder texts in text edits
  * Android: Fix flickering on split screen mode
  * Update url to IAccessible2 Specification</changelog>
  <changelog author="alarrosa@suse.com" date="1704283200">- Update to version 5.15.12+kde147:
  * Http2: fix potential overflow in assemble_hpack_block()
    (bsc#1218413, CVE-2023-51714)
  * HPack: fix incorrect integer overflow check
  * HPack: fix a Yoda Condition</changelog>
  <changelog author="fvogt@suse.com" date="1708084800">- Update to version 5.15.12+kde151:
  * Improve KTX file reading memory safety (CVE-2024-25580, boo#1219996)
  * Revert "xcb: only set base size when it's valid"
  * Fix potential leak of QPropertyAnimation in QLineEditIconButton
  * QBitArray: correct inline keyword</changelog>
  <changelog author="alarrosa@suse.com" date="1720785600">- Add patch from upstream to fix a regression in the ODBC driver
  (bsc#1227513, QTBUG-112375):
  * 0001-QSQL-ODBC-fix-regression-trailing-NUL.patch
  * 0002-SQL-ODBC-Pass-correct-length-to-SQLColAttribute.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1722945600">- Add rebased upstream patch to delay any HTTP2 communication until
  encrypted() can be responded to (bsc#1227426, CVE-2024-39936):
  * 0001-HTTP2-Delay-any-communication-until-encrypted-can-be.patch
- Add upstream patch to fix a NULL pointer dereference via the
  function QXcbConnection::initializeAllAtoms() when there is
  anomalous behavior from the X server (bsc#1222120,
  CVE-2023-45935):
  * 0001-xcb-guard-a-pointer-before-usage.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756728000">- Add patch from upstream to fix a precondition violation in call
  to QByteArrayView::at() which can cause crashes (bsc#1243958,
  CVE-2025-5455):
  * 0001-qDecodeDataUrl-fix-precondition-violation-in-call-to.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756814400">- Add patch from upstream to initialize a member variable that was
  uninitialized under some circumstances:
  * 0001-QObjectPrivateSignal-initialize-all-members.patch
- Add patch from upstream to fix a crash when parsing a particular
  glyph in a particular font (QTBUG-124310):
  * 0001-Avoid-crash-in-font-distancefield-computation.patch
  * 0002-Fix-crash-in-font-distancefield-computation.patch
- Add patch from upstream to fix avoid repeatedly registering
  xsettings callbacks when switching cursor themes:
  * 0001-xcb-Avoid-repeatedly-registering-xsettings-callbacks-When.patch
- Add patch from upstream to check validity of RandR output info
  before using it (QTBUG-128906):
  * 0001-xcb-check-validity-of-RandR-output-info-before-using-it.patch
- Add patch from upstream to fix reparenting a window so it takes
  effect even if there are no other state changes to the window:
  * 0001-xcb-Sync-XCB-connection-after-reparenting-window.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756900800">- Add patch from upstream to fix a low performance when processing
  XML data in encodeText (bsc#1239896, CVE-2025-30348):
  * 0001-XML_QDom-speedup-encodeText.patch</changelog>
</package>
<package pkgid="73e215df55cebd2a4d51657e04106ac9d47b028b87341219a05a9485e4556b12" name="libQt5Gui-devel" arch="x86_64">
  <version epoch="0" ver="5.15.12+kde151" rel="150600.3.9.1"/>
  <changelog author="fvogt@suse.com" date="1678968000">- Update to version 5.15.8+kde183:
  * Add nullptr guard in QStyleSheetStyle::drawPrimitive(PE_PanelLineEdit)
  * QAbstractItemView: don't access invalid indexes on copy-key
  * Apply CVE-2023-24607-qtbase-5.15.diff (CVE-2023-24607,
    bsc#1209616)
  * QXcbConnection::getTimestamp: do not return stale timestamp
  * QToolButton: Elide text when constraints prevent from showing whole text
  * correctly set up ref counting in QThreadPool::tryStart(std::function)
  * Do not set Qt::ToolTip flag for QShapedPixmapWindow
  * Fix deletion order also for QImageReader/Writer::setDevice()
  * Fix deletion order in QImageReader/Writer destructors
  * QNetworkReply: Fix typos in the documentation
  * Doc: Fix typo in the online documentation template
  * Doc: Link to page documenting Qt trademarks in the copyright footer
  * [doc] Fix typo in QBuffer::setBuffer() description
  * qwindowsdrag: Fix typo in documentation
  * openglblacklists: Fix typo in description
  * qxcbscreen: Fix typo in documentation
  * Fix typos in SQL driver documentation
  * qxcbwindow.cpp: Fix sign-compare and another warnings
  * QToolButton: reimplement the fix for QTBUG-95255
  * QSysInfo::prettyProductName(): Add macOS Ventura product name
  * QSysInfo::prettyProductName(): add missing macOS product names
  * xcb: correctly disconnect xsettings callbacks
  * ibus: add SetCursorLocationRelative in InputContext.xml</changelog>
  <changelog author="fvogt@suse.com" date="1680523200">- Update to version 5.15.8+kde185:
  * QFSFileEngine: fix overflow bug when using lseek64
  * Add QImage null check when QOpenGLTexture converts
- Add patch to fix return key handling in QGroupBox on GNOME (bsc#1209364):
  * 0001-Revert-QGnomeTheme-Allow-Space-Return-Enter-and-Sele.patch
- Add patch to fix XInput2 events in big-endian X11 clients (bsc#1204883, QTBUG-105157):
  * big-endian-scroll.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1682078400">- Update to version 5.15.9+kde151, rebased upstream:
  * QCborValue: fix incorrect to{Array,Map} when the value is empty
  * QMargins: fix a missing "full stop" in the docs
  * QLibrary: restore translated string
  * QLibrary: fix possible arg() format clobbering
  * iOS: Use python3 for enumerating test target devices
  * Android: Treat ACTION_CANCEL as TouchCancelEvent
  * Doc: Fix broken formatting
  * QFileSystemEngine: fix potential formatting error
  * QString::asprintf: check that passing field widths as arguments works
  * Backport recent QFlags tests
  * network: Fix typos in documentation
  * Fix accuracy with screen composition
  * Doc: Update documentation for QElapsedTimer's in Windows
  * Document that QStandardPath::findExecutable works with absolute paths
  * macOS: Use native resize cursors for diagonal resize
  * Fix clipped glyphs in text rendering of QGraphicsTextItem
  * Change comparison data type to fix int overflow
  * Add missing Q_WEAK_OVERLOAD definition
  * Update QFileInfo docs to mention macOS aliases
  * Distinguish macOS aliases from normal symbolic links
  * Windows QPA: Fix frameless maximize on secondary screens
  * Rewrite tst_qdataurl as a data-driven test
  * Fix compilation for wasm
  * QIOSFileDialog/QIOSDocumentPickerController - handle dismissed view controller
  * Fix QDockWidget's dock area permissions after hovering
  * Fix C++20 ambiguous relational operators between QJsonValue{,Ref}
  * Android: make sure that orientationChange is reported after resize
  * Android: set all QScreen's geometry-related parameters together
  * Blacklist: test cases blacklisted in tst_QDBusConnection:
  * wasm:  fix issue with passing username/password to network request
  * macOS: Pass multi arch flags when linking qmake
  * QCocoaFileDialogHelper: Always enable symlinks and aliases to directories
  * Android: terminate argv passed to main() with nullptr
  * Update bundled libjpeg-turbo to version 2.1.3
  * ANGLE: Load the DirectX libraries from the system path directly
  * SQLite: Update SQLite to v3.37.2
  * Fix compiler warnings about unused parameters
  * Fix getsockopt option_value initial initialization
  * Http2: Fix redirect-handling
  * Android A11Y: Fix value rounding
  * Android A11Y: Announce value together with element name when focused
  * Android A11Y: handle valueChanged events
  * tst_QSystemSemaphore: give proper path to test-helper
  * QNX: Silence compiler warning by initializing variable
  * Update LICENSE.QT-LICENSE-AGREEMENT
  * winrt appxmanifest: Properly replace VCLibs version for newer MSVC versions
  * QAbstractSocket: Don't pretend pause and resume is a stack
  * Gui: test also depends for clipboard feature
  * QDesktopServices: deprecate destroying URL handlers w/o explicit unsetUrlHandler()
  * macOS: Respect QMAKE_APPLE_DEVICE_ARCHS when building qmake
  * HTTP: Make redirect response parsing more generic
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 20.04
  * Android A11Y: populate child elements when constructing node info
  * Fix issue where readyRead() could happen after disconnected()
  * QStringView: add missing constexpr so we can use is_constant_evaluated
  * Use Android's View.generateViewId() for generating ids for views/surfaces
  * Remove documentation of non-existing QAccessible state
  * Doc: Fix snippet to match actual QFileInfo behavior
  * Android: Re-focus focused accessibility node after orientation change
  * Android A11Y: execute C++ code on main Qt thread
  * Android: extract parentId for hidden object in advance
  * xcb: Show valuator atom names properly in categorized logging
  * Android: replace stacktrace with debug message in search for setService
  * Better document attaching a QFutureWatcher to a started QFuture
  * doc: Update GenericDataLocation location on iOS
  * BLACKLIST test_Gestures tests for RHEL-8.4
  * QPlainTestLogger: do not print "failure location" if there's no failure
  * QAbstractItemView: do not access invalid model indices (3/N)
  * Win32: always allow the event loop to be woken up by posted events
  * rhi: d3d11: Use __uuidof where we can
  * Don't QEXPECT_FAIL tst_QLineEdit::testQuickSelectionWithMouse on macOS ARM
  * Network: Emit authenticationRequired when using Ntlm
  * testlib: Disable window restoration on macOS in a non-persistent way
  * QAbstractItemView: do not access invalid model indices (2/N)
  * QAbstractItemView: do not access invalid model indices (1/N)
  * QAbstractItemView: code tidies
  * Update float16 part of TestLib selftest
  * QGuiApplication: constant-initialize lastCursorPosition
  * Blacklist tst_QFileSystemWatcher::signalsEmittedAfterFileMoved on all Windows versions
  * [Android]: Handle the screen name, modes and refreshRate properly
  * QVersionNumber: remove the "pure" attribute from commonPrefix()
  * QEvent: initialize the static userEventTypeRegistry constexprly
  * Let QXcbGlxWindow::createVisual fallback to QXcbWindow::createVisual
  * Android A11Y: fix content update notification when object is hidden
  * Android: explicitly remove accessibility focus when element is hidden
  * BLACKLIST tst_qfont for Red Hat 8.4 and Ubuntu 20.04
  * QtCore: includemocs
  * Fix memory leak in QtConcurrent::run when called with a NULL QThreadPool
  * INTEGRITY: Prevent deletion of virtual functions
  * QMake: replace a Q_ASSERT() with a Q_UNREACHABLE()
  * QTransform benchmark: measure what was promised
  * QStaticByteArrayMatcher: add a useful comment
  * QMacStyle: use the 'momentary push in' type for push buttons
  * qopengl.h: Move C header #include(s) out of the QT_NAMESPACE
  * Enable all supported 1.0 device features in QVulkanWindow
  * Fix queue passed to vkQueuePresent
  * QFusionStyle: don't draw an invalid outline for up/down buttons
  * Doc: Make QListIterator snippets more robust
  * QVersionNumber: don't detach() in rvalue QList/QVector ctor
  * QNetworkRequest: Document how Qt handles 301 and 302 status codes
  * Convert date-time to UTC before claiming it's in GMT
  * Remove execute permission from XML files
  * Add test case for style sheet selectors for enum properties
  * FreeType: allow falling back to synthesized bold if desired
  * Fix an assertion failure in massageAdjustedDateTime()
  * Relax tst_qvulkan::vulkanVersionRequest to make it compatible with 1.1
  * Doc: Replace "C:Documents and Settings" paths
  * QOrderedMutexLocker: fix compilation with C++11
  * QHttpNetworkConnection: Always set proxy settings to all channels
  * Add a markdown writer test for a checklist item ending with `code`
  * Use QTextCharFormat::fontFixedPitch to remember Markdown backtick spans
  * QWizardLayoutInfo: make == and != operators const
  * Revert "Android: Fix screen flicker issues"
  * macOS: Handle momentum scroll NSEventPhaseBegan when scroll had ended
  * SQLite: Update SQLite to v3.37.0
  * Update copyright year to 2022
  * QTzTimeZonePrivate: use ctor delegation instead of init()
  * QTzTimeZonePrivate: fix permanently-detaching m_icu
  * tst_QGraphicsView: fix memleak
  * Doc: Update external links to Qt Creator Manual
  * macOS: assume an unidentified tablet device is a stylus
  * tst_QItemModel: fix memleaks
  * tst_qanimationgroup: fix memleaks
  * QAbstractAnimation: add missing forward-declaration
  * [doc] QCoreApplication::installTranslator() doesn't take ownership
  * tst_qtranslator: fix memleak
  * QTestData: fix streaming of u8 string literals in C++20 mode
  * QThread/Unix: extract duplicate code
  * QWindowPrivate: fix inconsistent inline on some methods
  * tst_QStringList: check that join(u'0') embeds NULs
  * macOS: Sanitize scroll deltas for NSEventPhaseCancelled
  * tst_qsharedmemory: skip readOnly() test under asan
  * QXmlStreamReader: update test distribution
  * QZipReader: update to unzip partly broken archives
  * Deliver context menu event with correct coordinates to widgets in popups
  * QTextHtmlParser: fix prefix lookahead and html comments
  * QtConcurrent::run crashes on program exit
  * tst_QPropertyAnimation: fix leaks occurring under normal operation
  * tst_QPropertyAnimation: fix wrong comment
  * QLogging: fix potential missing NUL-terminator when calling OutputDebugString
  * Fix qt_scrollRectInImage when scrolling outside of the image
- Commits dropped by the rebase:
  * Fix compile with Qt5: Use QString::mid instead of QString::sliced
  * Restore C++11 compatibility after e8b9f4c28d3ab5e960dc54f2dc0c4b749b0b50e0
  * QDateTime: Don't require c++17</changelog>
  <changelog author="fvogt@suse.com" date="1683633600">- Amend patch to fix mouse grabbing as well (bsc#1211024):
  * big-endian-scroll.patch</changelog>
  <changelog author="fvogt@suse.com" date="1684929600">- Update to version 5.15.9+kde154:
  * Hsts: match header names case insensitively (CVE-2023-32762,
    QTBUG-113392, bsc#1211797)
  * Fix specific overflow in qtextlayout (CVE-2023-32763,
    QTBUG-113337, bsc#1211798)
  * QDnsLookup/Unix: make sure we don't overflow the buffer
    (CVE-2023-33285, boo#1211642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1686657600">- Update to version 5.15.10+kde129, rebased upstream:
  * Ssl: Copy the on-demand cert loading bool from default config
  * Schannel: Reject certificate not signed by a configured CA certificate (boo#1211994, CVE-2023-34410)
  * qnetworkreplyfileimpl_p.h: fix header guard name
  * Revert "Draw the cursor considering the descent is 0"
  * Use pkgconfig in order to find libproxy configuration
  * Upgrade PCRE2 to 10.40
  * Android A11Y: handle LocationChanged event only for focused element
  * Port binary JSON to new special integer bitfields
  * INTEGRITY: enable C99 globally
  * QObject: mark two error reporting functions COLD
  * Endian: Provide special integer bitfield unions
  * Android: set useLegacyPackaging to true in build.gradle
  * QWidgetTextControl: port to new-style connects (faster)
  * Sync qxmlstream.g with qxmlstreamparser_p.h [1/2]: switched lines
  * tst_QNetworkReply try stabilize autoDeleteReplies tests
  * Remove duplicated include for &lt;limits&gt;
  * Fix recursion crash when calling setStyleSheet with `qproperty-styleSheet`
  * qwindowsxpstyle: Fix typos in documentation
  * Correct prefix reported for end element in QXmlStreamReader
  * Android A11Y: Add supported role infos to A11yNodeInfo
  * Fix handling of DateTime values in QSettings
  * Fix off-by-one for "typically" lowest value INT_MIN
  * xml: Fix typos in documentation
  * QWindowsWindow: Fix typo in documentation
  * includemocs (updated script)
  * widgets: Fix typos in documentation
  * cocoa: Fix typo in debug messages
  * Only scroll QMenu when there is a valid active action
  * QTimer: Add note in documentation
  * Fix QListView assert when the last row is moved in IconMode
  * QFileDialog: Fix adding default suffix when file path contains dot
  * QLineEdit: account for the placeholderText when computing lineRect
  * QFileDialog::saveFileContent crashes on accept
  * QCompleter: QCompleter unexpectedly changes QLineEdit text
  * Fix build error on iOS with the configure option -qtnamespace
  * Draw the cursor considering the descent is 0
  * Remove pure-virtual-signals.h include from tst_moc.cpp
  * plugins: image formats - fix odr violation
  * dbus: Fix typos
  * qwindowsdialoghelpers: Fix typo in documentation
  * QTableView: Document the customizations applied to QHeaderView
  * Unicodetools: compile
  * eglfs_x11: Fix running flag linkage
  * qcompilerdetection.h: add Q_CC_{GNU,MSVC,CLANG}_ONLY macros
  * Fix CMake warning about "missing closing ' quote"
  * Fix alignment of next/prev links in offline style
  * QtDBus: includemocs
  * Image Plugins: includemocs(-ish)
  * QtGui: includemocs
  * QXcbNativeInterface: remove unused field m_sysTraySelectionAtom
  * Windows QPA: Fix slowdown with large table/tree views with accessibility
  * Macstyle: fix the text color on the disabled button
  * QMacStyle: fix tool buttons (in checked mode)
  * QTeamCityLogger: fix .arg() placeholder injection
  * QAbstractTestLogger: disable copying
  * Fix errorMessageFromComError()
  * QtNetwork: includemocs
  * AppleUnifiedLogger: Remove manually managed os_log_t cache
  * examples: add WindowStaysOnBottomHint into preview text
  * QSharedPointer: Use matching new/delete
  * QIbusPlatformInputContextPlugin: includemocs
  * QGtk3ThemePlugin: includemocs
  * QTuioTouchPlugin: includemocs
  * QtWidgets: includemocs v2022
  * QMYSQLDriverPlugin: includemocs
  * QtDeviceDiscoverySupportPrivate: includemocs
  * QLinuxFbIntegrationPlugin: includemocs
  * QtPrintSupport: includemocs
  * QSQLiteDriverPlugin: includemocs
  * QtFbSupportPrivate: includemocs
  * QXdgDesktopPortalThemePlugin: includemocs
  * QtTest: includemocs
  * QComposePlatformInputContextPlugin: includemocs
  * QtSql: includemocs
  * QVncIntegrationPlugin: includemocs
  * Fix backingstore fractional DPR glitches for widgets in child windows
  * Include &lt;limits&gt; where std::numeric_limits is used
  * QtInputSupportPrivate: includemocs
  * Document the default value of QSFPM::sortOrder()
  * Better document how to enable sorting in QSPFM
  * Correct documentation of INI format's loss of type information
  * Android: add missing properties in AndroidManifest.xml
  * Fix assertion failure when parsing a doubly-invalid date-time text
  * Windows QPA: Correct mistake when calculating minmaxinfo
  * Android: replace ndk.dir with android.ndkVersion in build.gradle
  * Android: remove the old copy of gradle.properties after reading it
  * CMake Android Support: Fix signing of APKs
  * Android: fix A11Y object description
  * macOS: Fix warning about comparing different types in QCocoaScreen::isOnline
  * Fix qmake build on FreeBSD
  * Update documentation of enum Qt::DockWidgetArea
  * xcb: recreate xcb window under some conditions
  * objc_namespace: Add support for universal binaries
  * objc_namespace: Fix misspelled argument for silencing output
  * objc_namespace: Update parsing logic to account for otool changes
  * Blacklist passwordAuth for Ubuntu 20.04
  * Android: wrap QAndroidInputContext's m_focusObject in a QPointer
  * Fix compilation with GCC 12 (and on Fedora 35 and newer)
  * Chip example: fix an accidental bool-&gt;int conversion when using PMF connections
  * qmake: Add support for C++23
  * Android: use BCP 47 tag to create a correct Locale for QTimeZone::displayName()
  * QDateTime: fix adjusted datetime handling
  * Fix crash in tst_qmltc_examples on Android
  * macOS: Remove dead code for focus ring handling in Mac style
  * Detach for colortransforms of indexed formats
  * tst_QTcpSocket::connectToHostError - handle possible timeouts
  * CoreText: Avoid populating font family aliases if family was populated
  * Graphicsview: Avoid background clearing glitches under fractional DPR
  * Windows QPA: Avoid slowdown with UI Automation name change notification
  * Windows QPA: Avoid sending accessibility notifications before activation
  * Windows: Fix potential crash when retrieving default printer
  * Make Ubuntu with its non-standard security level happy
  * Android: Blacklist failing tests on tst_QGraphicsProxyWidget
  * Update LA 4.4.1
  * iOS A11Y: Set more accessibilityTraits
  * QNX: Fix compiler warning by when FEATURE_clipboard is not enabled
  * Document that native file dialogs might not show a title
  * Doc: Remove mentionings of overflows from QElapsedTimer
  * QTextMarkdownImporter: don't apply text char format to list item block
- Commits dropped by the rebase:
  * QBuffer: add missing &lt;limits&gt; include
  * Fix developer build</changelog>
  <changelog author="gmbr3@opensuse.org" date="1687953600">- Change %_libqt5_libexecdir to %_libexecdir/qt5 (bsc#1174075)</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch icu-devel requires to pkgconfig to allow switching libicu
  versions</changelog>
  <changelog author="fvogt@suse.com" date="1695902401">- Update to version 5.15.10+kde159 (bsc#1214327, CVE-2023-37369):
  * Fix CVE-2023-43114
  * QMimeDatabase: fix detection of pattern conflict in different prefixes
  * Fix highdpi conversion of QTabletEvent coordinates on xcb
  * widget: set WA_X11NetWmWindowType* after xcb window was created
  * Fix crash when setting override cursor on multiple clients
  * QAccessibleWidget: Remove pointless ZWSP in warning message
  * Android A11Y: Fix deadlock in QtAndroidAccessibility::runInObjectContext()
  * Correctly parse non BMP char refs in the sax parser
  * Clear the _X version of alongside the enum deprecator
  * Fix UB (signed char passed to &lt;cctype&gt; function)
  * Qt3DRender: includemocs
  * Fix capitalization error in auto-generated qdbusmacros.h include
  * QColorDialog: Ignore mouse move events when no mouse button is pressed
  * QHostInfo: fix remaining slotObj leaks
  * QXmlStreamReader: Raise error on unexpected tokens (CVE-2023-38197,
    QTBUG-92113, QTBUG-95188, bsc#1213326)
  * QTextLayout: Reconsider cursor drawing on TextObject
  * Ensure consistent cursor width under fractional scaling
  * Fix QTextEdit cursor rectangle vertical positioning
  * Return 0 in QWindow::winId in case of failed platform window creation
  * Doc: note QWindow::winId() will cause platform window creation
  * QSslDiffieHellmanParameters: fix mem-leak
  * QHostInfo: fix leaking slot object
  * Make sure we don't count down past 0 QT_FATAL_CRITICALS
  * QLogging: DRY isFatal(QtMsgType)
  * tst_QXmlStream: remove unneeded _ba UDLs
  * Fix typo in QXmlStreamReader error message
  * QXmlStreamReader: make fastScanName() indicate parsing status to callers
  * QXmlStreamReader: change fastScanName() to take a Value*
  * Fix Croatia's currency
  * SSL: upgrade the default DH parameters</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1696593600">- Update to version 5.15.11+kde134, rebased upstream:
  * Revert "Windows QPA: Add support to UiaRaiseNotificationEvent()"
  * FileChooser portal: Make sure filter.name is not empty
  * QPersistentModelIndex: fix UB (op&lt; on unrelated pointers)
  * Avoid crash when keysymToQtKey(keysym, Qt::ControlModifier) is called
  * a11y atspi: translate coords for GetOffsetAtPoint the right way
  * a11y atspi: Take dialog into account as top-level window
  * a11y atspi: Fix incorrect use of x instead of y position
  * macOS: Handle asynchronous deminiaturizing of windows
  * QTranslator: generalize a UNIX-only path
  * iOS, input panel: be more careful before enabling QIOSKeyboardListener
  * Android: Fix flickering on window resize and show keyboard
  * Android A11Y: Check for active surface before calling into native code
  * xcb: Delete touch points without target windows
  * Blacklist 1 tests in tst_QDBusConnection on ubuntu-20.04
  * Fix CMake builds without ANDROID_SDK
  * Blacklist 2 tests in tst_Http2 on ubuntu-20.04
  * Blacklist 1 tests in tst_QSqlQuery on macos
  * Defer creating the special shaders in the texture blitter
  * tst_QSslSocket::serverCipherPreferencies - fix for OpenSSL v3
  * QTemporaryFile: document rename() differences from QFile
  * Doc: 3rd party: Fix reference to FreeType LICENSE.txt
  * Update bundled libjpeg-turbo to version 2.1.4
  * tst_QSsSocket: fix verifyClientCertificate with OpenSSL 3
  * tst_QSslSocket: regenerate certificate used for setLocalCertificateChain
  * tst_QSslSocket::protocolServerSide - make it work with OpenSSL v3
  * tst_QSslSocket::oldErrorsOnSocketReuse - make it work with OpenSSL v3
  * Update zconf.h prefixes to match zlib v1.2.12 update
  * xcb: fix D&amp;D in same xembed client
  * xcb: use global coordinates for position of D&amp;D for xembed client
  * Doc: Update QMetaType::metaObject() descriptions
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 22.04
  * BLACKLIST tst_qfont for Ubuntu 22.04
  * BLACKLIST tst_QMenuBar::check_menuPosition for Ubuntu 22.04
  * tst_QDtls::verifyClientCertficiate - update certs for OpenSSL v3
  * QSslCertificate::toText(): add a file to compare against
  * Fix the spelling of the word "combination"
  * tst_QSslCertificate::pkcs12 - skip the test if OpenSSL version &gt;= 3
  * Android A11Y: Fix TalkBack scrolling behavior
  * Android A11Y: Notify android about scroll events
  * QCocoaDrag: don't add pasteboard items with non-absolute URLs
  * QDirPrivate: pass input QList by cref
  * tst_qbytearray: remove qCompress_data for QT_NO_COMPRESS
  * QDeviceDiscoveryUDev: use NSDMI
  * QAuthenticator: Fix crash when using NTLM / Negotiate
  * Provide a native interface instance in minimal platform plugin
  * Android: document the supported clipboard mimetypes
  * Windows: Account for not finding child windows when calling ChildWindowFromPointEx
  * iOS: Send touch events asynchronously to avoid deadlocking UIKit event loop
  * Disable bitcode for iOS
  * macOS: Ignore deprecation for ReleaseIconRef
  * BLACKLIST tst_QApplication::sendEventsOnProcessEvents for Ubuntu 22.04
  * Convert Latin1 to UTF-16 before passing to ICU API
  * Doc: Remove repetition of word in text
  * eglfs: Fix screen cloning when atomic is enabled
  * Fix printing of dpr&gt;1 images on Windows
  * QHttp: Fix handling of redirect loaded from cache
  * Doc: Fix return type of QLEInteger/QBEInteger post-in/decrement ops
  * qmake: Fix installation of separate debug info for plugins
  * iOS: ensure we close inputpanel after clearing focusobject
  * Convert Latin1 to UTF-16 before passing to ICU API
  * qputenv: defend against non-NUL-terminated QByteArray values
  * QFontSubset: remove unused glyphName() overload
  * Statically assert that the __mips_dsp code is only active on 32-bit
  * QGtk3Theme: Ensure gtk uses the same windowing system as Qt
  * tst_QFocusFrame: fix -Wparantheses
  * Sync Vulkan device features between QVulkanWindow and QRhi
  * SQLite: Update SQLite to v3.39.2
  * Update freetype to 2.12.1
  * corelib: Fix typos in documentation
  * QAtomicInteger docs: mention bool and char8_t as 8-bit types
  * qgraphicsitem_cast: replace 0 with nullptr
  * Doc: Hide weak overload template magic from documentation
  * Revert "QDateTime: fix adjusted datetime handling"
  * Fix select handles disappears issues
  * tst_QSslKey: prepare for the migration to OpenSSL v3
  * tst_qnetworkreply: replace server.pem/key pair
  * Disable unit testing setting up QTcpServer on special Apple interfaces
  * qmake/msbuild: Turn off "use full paths in diagnostics" by default
  * qmake/msbuild: Support all /DEBUG:xxx linker options
  * qmake/msbuild: Support all /LTCG:xxx options
  * Android A11Y: Add content change type to content change event
  * Enabler for fractional scaling of text in Qt Quick
  * macOS: Override logical DPI to 72
  * Add QDom internalSubset implementation
  * Fix tst_AndroidAssets, broken by recent changes on assets load speed
  * Android: Improve loading speed of individual assets
  * Darwin: Replace deprecated symbol kIOMasterPortDefault with equivalent
  * macOS: Remove code for handling logical DPI changes
  * Fix an incorrect invocation of llvm-readobj
  * macOS: Ignore deprecation for kOnSystemDisk icon domain
  * Copy only files that belongs to QML module
  * Android: fix wrong position of cursor handle and editpopup menu in split screen
  * Doc: Document QML_IMPORTS_PATH and QMLPATHS
  * Add the missing RCC_DIR to '.qrc' paths when generating deployment settings
  * Android: Fix the offset of the EditPopupMenu
  * xcb: update xkb_state mask as much as possible
  * QDom: Stop treating non-BMP characters as invalid
  * Android 13: Fix warnings on starting an application
  * qxkbcommon: Map Super/Hyper to Meta early enough to have an effect
  * macOS: Ignore update requests for offline displays
  * macOS: Avoid recursively updating screens when window moves screen
  * qmake/MinGW: Install separate debug info of DLLs next to the DLL
  * QMainWindow: fix restoreState() for toolbars
  * Make two QDT benchmarks data-driven and add more rows
  * Fix doc and example of QLoggingCategory::installCategory()
  * qmake: Document Xcode behavior when bundling translation files
  * Android: Fix missing import
  * QByteArray: more GCC 12 -Werror=array-bound whack-a-mole
  * CMake: Fix android sdk version propagation
  * Restore C++20-deprecated mixed-enum bitwise operators
  * Android: Fix ANR when QtService and QtActivity load in same process
  * Fix restart QtActivity
  * QArrayData::data(): do type-punning via quintptr, not char *
  * QIOSTextResponder: recreate responder upon reset
  * QSslSocket: make it work with OpenSSL v3
  * QFileSystemModelPrivate: de-inline ctor and dtor
  * Network: update Public Suffix List
  * macOS: Ensure proper quoting when calling otool in objc_namespace script
  * QKeySequence: Fix the one-off error in the mac glyph array size
- Commits dropped by the rebase:
  * Apply CVE-2022-27404-27405-27406-qtbase-5.15.diff
  * QArrayData: fix UB via reinterpret_cast (crash with FORTIFY_SOURCE=3)
  * Adapt for q_EVP_PKEY_base_id → q_EVP_PKEY_get_base_id rename in OpenSSL 3
  * Don't use a deprecated function if built/linked with OpenSSL v3</changelog>
  <changelog author="christophe@krop.fr" date="1696593601">- Enable the experimental native painting feature to improve
  remote desktop performances (boo#1214915)
  exporting QT_XCB_NATIVE_PAINTING is required to use the feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1697716800">- Update to version 5.15.11+kde138:
  * QLibraryPrivate: Actually merge load hints
  * QPluginLoader: report the right load hints
  * xkb: fix build with libxkbcommon 1.6.0 and later
  * a11y atspi: Map ButtonMenu role to AT-SPI equivalent</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1703851200">- Update to version 5.15.12+kde144, rebased upstream:
  * QMimeDatabase: handle buggy type definitions with circular inheritance
  * xcb: only set base size when it's valid
  * QPixmapCache: fix leaking of QStrings and Keys on clear()
  * OpenFile portal: do not use O_PATH fds
  * QSystemTrayIcon: properly disconnect old menu in setContextMenu()
  * Guard QTabBar against nested event processing during moving tabs
  * QDial: don't crash when min==max and setting a value != min &amp; max
  * QStandardItemModel: don't leak in mimeData()
  * SQL/MySQL: properly initialize variable
  * QWidgetTextControl: ignore invalid input method event
  * Update the LGPL license header
  * SQL/MySQL: fix handling of json column
  * Remove QMAKE_RANLIB and QMAKE_LINK_SHLIB from android/default_pre.prf
  * macOS: Fix less common writing systems on Catalina and later
  * Blacklist 1 tests in tst_QFtp on ubuntu-20.04
  * Update bundled libpng to version 1.6.39
  * Android: Fix signing of APKs that are generated when an AAB is also built
  * Update bundled zlib to version 1.2.13
  * doc: update the limitation of QSystemTrayIcon on X11
  * Blacklist 1 tests in tst_QTimer on ubuntu-20.04
  * Add benchmarks for QLocale number parsing
  * Add benchmarks for QString number parsing
  * Android: Fix incorrect fullscreen dimensions
  * Gtk3Theme: set XCURSOR_SIZE and XCURSOR_THEME for wayland sessions
  * xcb: Flush Display when processing xcb events
  * xcb: Add xlib wrapper for XFlush()
  * QHostAddress: Fix incorrect comparison against 'Any'
  * QSsl[OpenSSL/Android]: Fix hardcoded 1_1 suffix
  * BLACKLIST: tst_QApplication::sendEventsOnProcessEvents for RHEL 9.0
  * QMacStyle: do not set white color for grayed out button
  * Work round macOS's omission of en_DE from its own uiLanguages()
  * Suppress a deprecation warning in tst_QDateTime::toString_enumformat()
  * QJsonValue: fix incorrect to{Array,Object} when the value is empty
  * QGtk3Dialog: remove the #include for empty moc
  * Remove unneeded QWindow from QGtk3Dialog
  * tst_QSslSocket: Delete sslOptions
  * tst_QSslServer: Make the in-process server use TLS1.2
  * Android: fix Gradle warning about using enableUncompressedNativeLibs
  * Mention  limitation of QDir::drives() on Windows
  * QFileSystemEngine/Win: fix incorrect buffer size in currentPath()
  * Android: properly retrieve mime type of uri to for openUrl()
  * Android: Fix clipboard issue with urls
  * Android: Add a way to disable accessibility via an environment var
  * Update bundled libpng to version 1.6.38
  * QIOSMessageDialog::exec - work around 'windowsless' exec
  * QIosScreen: retain the right window
  * tst_Q{BitArray,ContiguousCache}: check not only count(), but size(), too
  * QIosTextResponder: stop using deprecated constants and type
  * qcompilerdetection.h: detect Coverity
  * Android: Fix Display.getRealMetrics deprecation
  * Fix broken Text rendering when noantialiased NativeRendering is used
  * forkfd: fix Clang 15 ATOMIC_VAR_INIT deprecation warning
  * eglfs: Add env.var. to disable the dedicated drmHandleEvent thread
  * doc: Don't put strings into QVector&lt;double&gt;
  * Remove focusProxyAndInputMethods from tst_QWidget
  * Bump version to 5.15.12
  * Update documentation of qWaitForWindowActive / qWaitForWindowExposed
  * QtHttp: Lower the severity of some log output
  * StyleSheetStyle: Fix color of placeholder texts in text edits
  * Android: Fix flickering on split screen mode
  * Update url to IAccessible2 Specification</changelog>
  <changelog author="alarrosa@suse.com" date="1704283200">- Update to version 5.15.12+kde147:
  * Http2: fix potential overflow in assemble_hpack_block()
    (bsc#1218413, CVE-2023-51714)
  * HPack: fix incorrect integer overflow check
  * HPack: fix a Yoda Condition</changelog>
  <changelog author="fvogt@suse.com" date="1708084800">- Update to version 5.15.12+kde151:
  * Improve KTX file reading memory safety (CVE-2024-25580, boo#1219996)
  * Revert "xcb: only set base size when it's valid"
  * Fix potential leak of QPropertyAnimation in QLineEditIconButton
  * QBitArray: correct inline keyword</changelog>
  <changelog author="alarrosa@suse.com" date="1720785600">- Add patch from upstream to fix a regression in the ODBC driver
  (bsc#1227513, QTBUG-112375):
  * 0001-QSQL-ODBC-fix-regression-trailing-NUL.patch
  * 0002-SQL-ODBC-Pass-correct-length-to-SQLColAttribute.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1722945600">- Add rebased upstream patch to delay any HTTP2 communication until
  encrypted() can be responded to (bsc#1227426, CVE-2024-39936):
  * 0001-HTTP2-Delay-any-communication-until-encrypted-can-be.patch
- Add upstream patch to fix a NULL pointer dereference via the
  function QXcbConnection::initializeAllAtoms() when there is
  anomalous behavior from the X server (bsc#1222120,
  CVE-2023-45935):
  * 0001-xcb-guard-a-pointer-before-usage.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756728000">- Add patch from upstream to fix a precondition violation in call
  to QByteArrayView::at() which can cause crashes (bsc#1243958,
  CVE-2025-5455):
  * 0001-qDecodeDataUrl-fix-precondition-violation-in-call-to.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756814400">- Add patch from upstream to initialize a member variable that was
  uninitialized under some circumstances:
  * 0001-QObjectPrivateSignal-initialize-all-members.patch
- Add patch from upstream to fix a crash when parsing a particular
  glyph in a particular font (QTBUG-124310):
  * 0001-Avoid-crash-in-font-distancefield-computation.patch
  * 0002-Fix-crash-in-font-distancefield-computation.patch
- Add patch from upstream to fix avoid repeatedly registering
  xsettings callbacks when switching cursor themes:
  * 0001-xcb-Avoid-repeatedly-registering-xsettings-callbacks-When.patch
- Add patch from upstream to check validity of RandR output info
  before using it (QTBUG-128906):
  * 0001-xcb-check-validity-of-RandR-output-info-before-using-it.patch
- Add patch from upstream to fix reparenting a window so it takes
  effect even if there are no other state changes to the window:
  * 0001-xcb-Sync-XCB-connection-after-reparenting-window.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756900800">- Add patch from upstream to fix a low performance when processing
  XML data in encodeText (bsc#1239896, CVE-2025-30348):
  * 0001-XML_QDom-speedup-encodeText.patch</changelog>
</package>
<package pkgid="90542b911782ea7f180ba337db68fad75e77462a33e1331855002dbb07effc10" name="libQt5Gui-private-headers-devel" arch="noarch">
  <version epoch="0" ver="5.15.12+kde151" rel="150600.3.9.1"/>
  <changelog author="fvogt@suse.com" date="1678968000">- Update to version 5.15.8+kde183:
  * Add nullptr guard in QStyleSheetStyle::drawPrimitive(PE_PanelLineEdit)
  * QAbstractItemView: don't access invalid indexes on copy-key
  * Apply CVE-2023-24607-qtbase-5.15.diff (CVE-2023-24607,
    bsc#1209616)
  * QXcbConnection::getTimestamp: do not return stale timestamp
  * QToolButton: Elide text when constraints prevent from showing whole text
  * correctly set up ref counting in QThreadPool::tryStart(std::function)
  * Do not set Qt::ToolTip flag for QShapedPixmapWindow
  * Fix deletion order also for QImageReader/Writer::setDevice()
  * Fix deletion order in QImageReader/Writer destructors
  * QNetworkReply: Fix typos in the documentation
  * Doc: Fix typo in the online documentation template
  * Doc: Link to page documenting Qt trademarks in the copyright footer
  * [doc] Fix typo in QBuffer::setBuffer() description
  * qwindowsdrag: Fix typo in documentation
  * openglblacklists: Fix typo in description
  * qxcbscreen: Fix typo in documentation
  * Fix typos in SQL driver documentation
  * qxcbwindow.cpp: Fix sign-compare and another warnings
  * QToolButton: reimplement the fix for QTBUG-95255
  * QSysInfo::prettyProductName(): Add macOS Ventura product name
  * QSysInfo::prettyProductName(): add missing macOS product names
  * xcb: correctly disconnect xsettings callbacks
  * ibus: add SetCursorLocationRelative in InputContext.xml</changelog>
  <changelog author="fvogt@suse.com" date="1680523200">- Update to version 5.15.8+kde185:
  * QFSFileEngine: fix overflow bug when using lseek64
  * Add QImage null check when QOpenGLTexture converts
- Add patch to fix return key handling in QGroupBox on GNOME (bsc#1209364):
  * 0001-Revert-QGnomeTheme-Allow-Space-Return-Enter-and-Sele.patch
- Add patch to fix XInput2 events in big-endian X11 clients (bsc#1204883, QTBUG-105157):
  * big-endian-scroll.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1682078400">- Update to version 5.15.9+kde151, rebased upstream:
  * QCborValue: fix incorrect to{Array,Map} when the value is empty
  * QMargins: fix a missing "full stop" in the docs
  * QLibrary: restore translated string
  * QLibrary: fix possible arg() format clobbering
  * iOS: Use python3 for enumerating test target devices
  * Android: Treat ACTION_CANCEL as TouchCancelEvent
  * Doc: Fix broken formatting
  * QFileSystemEngine: fix potential formatting error
  * QString::asprintf: check that passing field widths as arguments works
  * Backport recent QFlags tests
  * network: Fix typos in documentation
  * Fix accuracy with screen composition
  * Doc: Update documentation for QElapsedTimer's in Windows
  * Document that QStandardPath::findExecutable works with absolute paths
  * macOS: Use native resize cursors for diagonal resize
  * Fix clipped glyphs in text rendering of QGraphicsTextItem
  * Change comparison data type to fix int overflow
  * Add missing Q_WEAK_OVERLOAD definition
  * Update QFileInfo docs to mention macOS aliases
  * Distinguish macOS aliases from normal symbolic links
  * Windows QPA: Fix frameless maximize on secondary screens
  * Rewrite tst_qdataurl as a data-driven test
  * Fix compilation for wasm
  * QIOSFileDialog/QIOSDocumentPickerController - handle dismissed view controller
  * Fix QDockWidget's dock area permissions after hovering
  * Fix C++20 ambiguous relational operators between QJsonValue{,Ref}
  * Android: make sure that orientationChange is reported after resize
  * Android: set all QScreen's geometry-related parameters together
  * Blacklist: test cases blacklisted in tst_QDBusConnection:
  * wasm:  fix issue with passing username/password to network request
  * macOS: Pass multi arch flags when linking qmake
  * QCocoaFileDialogHelper: Always enable symlinks and aliases to directories
  * Android: terminate argv passed to main() with nullptr
  * Update bundled libjpeg-turbo to version 2.1.3
  * ANGLE: Load the DirectX libraries from the system path directly
  * SQLite: Update SQLite to v3.37.2
  * Fix compiler warnings about unused parameters
  * Fix getsockopt option_value initial initialization
  * Http2: Fix redirect-handling
  * Android A11Y: Fix value rounding
  * Android A11Y: Announce value together with element name when focused
  * Android A11Y: handle valueChanged events
  * tst_QSystemSemaphore: give proper path to test-helper
  * QNX: Silence compiler warning by initializing variable
  * Update LICENSE.QT-LICENSE-AGREEMENT
  * winrt appxmanifest: Properly replace VCLibs version for newer MSVC versions
  * QAbstractSocket: Don't pretend pause and resume is a stack
  * Gui: test also depends for clipboard feature
  * QDesktopServices: deprecate destroying URL handlers w/o explicit unsetUrlHandler()
  * macOS: Respect QMAKE_APPLE_DEVICE_ARCHS when building qmake
  * HTTP: Make redirect response parsing more generic
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 20.04
  * Android A11Y: populate child elements when constructing node info
  * Fix issue where readyRead() could happen after disconnected()
  * QStringView: add missing constexpr so we can use is_constant_evaluated
  * Use Android's View.generateViewId() for generating ids for views/surfaces
  * Remove documentation of non-existing QAccessible state
  * Doc: Fix snippet to match actual QFileInfo behavior
  * Android: Re-focus focused accessibility node after orientation change
  * Android A11Y: execute C++ code on main Qt thread
  * Android: extract parentId for hidden object in advance
  * xcb: Show valuator atom names properly in categorized logging
  * Android: replace stacktrace with debug message in search for setService
  * Better document attaching a QFutureWatcher to a started QFuture
  * doc: Update GenericDataLocation location on iOS
  * BLACKLIST test_Gestures tests for RHEL-8.4
  * QPlainTestLogger: do not print "failure location" if there's no failure
  * QAbstractItemView: do not access invalid model indices (3/N)
  * Win32: always allow the event loop to be woken up by posted events
  * rhi: d3d11: Use __uuidof where we can
  * Don't QEXPECT_FAIL tst_QLineEdit::testQuickSelectionWithMouse on macOS ARM
  * Network: Emit authenticationRequired when using Ntlm
  * testlib: Disable window restoration on macOS in a non-persistent way
  * QAbstractItemView: do not access invalid model indices (2/N)
  * QAbstractItemView: do not access invalid model indices (1/N)
  * QAbstractItemView: code tidies
  * Update float16 part of TestLib selftest
  * QGuiApplication: constant-initialize lastCursorPosition
  * Blacklist tst_QFileSystemWatcher::signalsEmittedAfterFileMoved on all Windows versions
  * [Android]: Handle the screen name, modes and refreshRate properly
  * QVersionNumber: remove the "pure" attribute from commonPrefix()
  * QEvent: initialize the static userEventTypeRegistry constexprly
  * Let QXcbGlxWindow::createVisual fallback to QXcbWindow::createVisual
  * Android A11Y: fix content update notification when object is hidden
  * Android: explicitly remove accessibility focus when element is hidden
  * BLACKLIST tst_qfont for Red Hat 8.4 and Ubuntu 20.04
  * QtCore: includemocs
  * Fix memory leak in QtConcurrent::run when called with a NULL QThreadPool
  * INTEGRITY: Prevent deletion of virtual functions
  * QMake: replace a Q_ASSERT() with a Q_UNREACHABLE()
  * QTransform benchmark: measure what was promised
  * QStaticByteArrayMatcher: add a useful comment
  * QMacStyle: use the 'momentary push in' type for push buttons
  * qopengl.h: Move C header #include(s) out of the QT_NAMESPACE
  * Enable all supported 1.0 device features in QVulkanWindow
  * Fix queue passed to vkQueuePresent
  * QFusionStyle: don't draw an invalid outline for up/down buttons
  * Doc: Make QListIterator snippets more robust
  * QVersionNumber: don't detach() in rvalue QList/QVector ctor
  * QNetworkRequest: Document how Qt handles 301 and 302 status codes
  * Convert date-time to UTC before claiming it's in GMT
  * Remove execute permission from XML files
  * Add test case for style sheet selectors for enum properties
  * FreeType: allow falling back to synthesized bold if desired
  * Fix an assertion failure in massageAdjustedDateTime()
  * Relax tst_qvulkan::vulkanVersionRequest to make it compatible with 1.1
  * Doc: Replace "C:Documents and Settings" paths
  * QOrderedMutexLocker: fix compilation with C++11
  * QHttpNetworkConnection: Always set proxy settings to all channels
  * Add a markdown writer test for a checklist item ending with `code`
  * Use QTextCharFormat::fontFixedPitch to remember Markdown backtick spans
  * QWizardLayoutInfo: make == and != operators const
  * Revert "Android: Fix screen flicker issues"
  * macOS: Handle momentum scroll NSEventPhaseBegan when scroll had ended
  * SQLite: Update SQLite to v3.37.0
  * Update copyright year to 2022
  * QTzTimeZonePrivate: use ctor delegation instead of init()
  * QTzTimeZonePrivate: fix permanently-detaching m_icu
  * tst_QGraphicsView: fix memleak
  * Doc: Update external links to Qt Creator Manual
  * macOS: assume an unidentified tablet device is a stylus
  * tst_QItemModel: fix memleaks
  * tst_qanimationgroup: fix memleaks
  * QAbstractAnimation: add missing forward-declaration
  * [doc] QCoreApplication::installTranslator() doesn't take ownership
  * tst_qtranslator: fix memleak
  * QTestData: fix streaming of u8 string literals in C++20 mode
  * QThread/Unix: extract duplicate code
  * QWindowPrivate: fix inconsistent inline on some methods
  * tst_QStringList: check that join(u'0') embeds NULs
  * macOS: Sanitize scroll deltas for NSEventPhaseCancelled
  * tst_qsharedmemory: skip readOnly() test under asan
  * QXmlStreamReader: update test distribution
  * QZipReader: update to unzip partly broken archives
  * Deliver context menu event with correct coordinates to widgets in popups
  * QTextHtmlParser: fix prefix lookahead and html comments
  * QtConcurrent::run crashes on program exit
  * tst_QPropertyAnimation: fix leaks occurring under normal operation
  * tst_QPropertyAnimation: fix wrong comment
  * QLogging: fix potential missing NUL-terminator when calling OutputDebugString
  * Fix qt_scrollRectInImage when scrolling outside of the image
- Commits dropped by the rebase:
  * Fix compile with Qt5: Use QString::mid instead of QString::sliced
  * Restore C++11 compatibility after e8b9f4c28d3ab5e960dc54f2dc0c4b749b0b50e0
  * QDateTime: Don't require c++17</changelog>
  <changelog author="fvogt@suse.com" date="1683633600">- Amend patch to fix mouse grabbing as well (bsc#1211024):
  * big-endian-scroll.patch</changelog>
  <changelog author="fvogt@suse.com" date="1684929600">- Update to version 5.15.9+kde154:
  * Hsts: match header names case insensitively (CVE-2023-32762,
    QTBUG-113392, bsc#1211797)
  * Fix specific overflow in qtextlayout (CVE-2023-32763,
    QTBUG-113337, bsc#1211798)
  * QDnsLookup/Unix: make sure we don't overflow the buffer
    (CVE-2023-33285, boo#1211642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1686657600">- Update to version 5.15.10+kde129, rebased upstream:
  * Ssl: Copy the on-demand cert loading bool from default config
  * Schannel: Reject certificate not signed by a configured CA certificate (boo#1211994, CVE-2023-34410)
  * qnetworkreplyfileimpl_p.h: fix header guard name
  * Revert "Draw the cursor considering the descent is 0"
  * Use pkgconfig in order to find libproxy configuration
  * Upgrade PCRE2 to 10.40
  * Android A11Y: handle LocationChanged event only for focused element
  * Port binary JSON to new special integer bitfields
  * INTEGRITY: enable C99 globally
  * QObject: mark two error reporting functions COLD
  * Endian: Provide special integer bitfield unions
  * Android: set useLegacyPackaging to true in build.gradle
  * QWidgetTextControl: port to new-style connects (faster)
  * Sync qxmlstream.g with qxmlstreamparser_p.h [1/2]: switched lines
  * tst_QNetworkReply try stabilize autoDeleteReplies tests
  * Remove duplicated include for &lt;limits&gt;
  * Fix recursion crash when calling setStyleSheet with `qproperty-styleSheet`
  * qwindowsxpstyle: Fix typos in documentation
  * Correct prefix reported for end element in QXmlStreamReader
  * Android A11Y: Add supported role infos to A11yNodeInfo
  * Fix handling of DateTime values in QSettings
  * Fix off-by-one for "typically" lowest value INT_MIN
  * xml: Fix typos in documentation
  * QWindowsWindow: Fix typo in documentation
  * includemocs (updated script)
  * widgets: Fix typos in documentation
  * cocoa: Fix typo in debug messages
  * Only scroll QMenu when there is a valid active action
  * QTimer: Add note in documentation
  * Fix QListView assert when the last row is moved in IconMode
  * QFileDialog: Fix adding default suffix when file path contains dot
  * QLineEdit: account for the placeholderText when computing lineRect
  * QFileDialog::saveFileContent crashes on accept
  * QCompleter: QCompleter unexpectedly changes QLineEdit text
  * Fix build error on iOS with the configure option -qtnamespace
  * Draw the cursor considering the descent is 0
  * Remove pure-virtual-signals.h include from tst_moc.cpp
  * plugins: image formats - fix odr violation
  * dbus: Fix typos
  * qwindowsdialoghelpers: Fix typo in documentation
  * QTableView: Document the customizations applied to QHeaderView
  * Unicodetools: compile
  * eglfs_x11: Fix running flag linkage
  * qcompilerdetection.h: add Q_CC_{GNU,MSVC,CLANG}_ONLY macros
  * Fix CMake warning about "missing closing ' quote"
  * Fix alignment of next/prev links in offline style
  * QtDBus: includemocs
  * Image Plugins: includemocs(-ish)
  * QtGui: includemocs
  * QXcbNativeInterface: remove unused field m_sysTraySelectionAtom
  * Windows QPA: Fix slowdown with large table/tree views with accessibility
  * Macstyle: fix the text color on the disabled button
  * QMacStyle: fix tool buttons (in checked mode)
  * QTeamCityLogger: fix .arg() placeholder injection
  * QAbstractTestLogger: disable copying
  * Fix errorMessageFromComError()
  * QtNetwork: includemocs
  * AppleUnifiedLogger: Remove manually managed os_log_t cache
  * examples: add WindowStaysOnBottomHint into preview text
  * QSharedPointer: Use matching new/delete
  * QIbusPlatformInputContextPlugin: includemocs
  * QGtk3ThemePlugin: includemocs
  * QTuioTouchPlugin: includemocs
  * QtWidgets: includemocs v2022
  * QMYSQLDriverPlugin: includemocs
  * QtDeviceDiscoverySupportPrivate: includemocs
  * QLinuxFbIntegrationPlugin: includemocs
  * QtPrintSupport: includemocs
  * QSQLiteDriverPlugin: includemocs
  * QtFbSupportPrivate: includemocs
  * QXdgDesktopPortalThemePlugin: includemocs
  * QtTest: includemocs
  * QComposePlatformInputContextPlugin: includemocs
  * QtSql: includemocs
  * QVncIntegrationPlugin: includemocs
  * Fix backingstore fractional DPR glitches for widgets in child windows
  * Include &lt;limits&gt; where std::numeric_limits is used
  * QtInputSupportPrivate: includemocs
  * Document the default value of QSFPM::sortOrder()
  * Better document how to enable sorting in QSPFM
  * Correct documentation of INI format's loss of type information
  * Android: add missing properties in AndroidManifest.xml
  * Fix assertion failure when parsing a doubly-invalid date-time text
  * Windows QPA: Correct mistake when calculating minmaxinfo
  * Android: replace ndk.dir with android.ndkVersion in build.gradle
  * Android: remove the old copy of gradle.properties after reading it
  * CMake Android Support: Fix signing of APKs
  * Android: fix A11Y object description
  * macOS: Fix warning about comparing different types in QCocoaScreen::isOnline
  * Fix qmake build on FreeBSD
  * Update documentation of enum Qt::DockWidgetArea
  * xcb: recreate xcb window under some conditions
  * objc_namespace: Add support for universal binaries
  * objc_namespace: Fix misspelled argument for silencing output
  * objc_namespace: Update parsing logic to account for otool changes
  * Blacklist passwordAuth for Ubuntu 20.04
  * Android: wrap QAndroidInputContext's m_focusObject in a QPointer
  * Fix compilation with GCC 12 (and on Fedora 35 and newer)
  * Chip example: fix an accidental bool-&gt;int conversion when using PMF connections
  * qmake: Add support for C++23
  * Android: use BCP 47 tag to create a correct Locale for QTimeZone::displayName()
  * QDateTime: fix adjusted datetime handling
  * Fix crash in tst_qmltc_examples on Android
  * macOS: Remove dead code for focus ring handling in Mac style
  * Detach for colortransforms of indexed formats
  * tst_QTcpSocket::connectToHostError - handle possible timeouts
  * CoreText: Avoid populating font family aliases if family was populated
  * Graphicsview: Avoid background clearing glitches under fractional DPR
  * Windows QPA: Avoid slowdown with UI Automation name change notification
  * Windows QPA: Avoid sending accessibility notifications before activation
  * Windows: Fix potential crash when retrieving default printer
  * Make Ubuntu with its non-standard security level happy
  * Android: Blacklist failing tests on tst_QGraphicsProxyWidget
  * Update LA 4.4.1
  * iOS A11Y: Set more accessibilityTraits
  * QNX: Fix compiler warning by when FEATURE_clipboard is not enabled
  * Document that native file dialogs might not show a title
  * Doc: Remove mentionings of overflows from QElapsedTimer
  * QTextMarkdownImporter: don't apply text char format to list item block
- Commits dropped by the rebase:
  * QBuffer: add missing &lt;limits&gt; include
  * Fix developer build</changelog>
  <changelog author="gmbr3@opensuse.org" date="1687953600">- Change %_libqt5_libexecdir to %_libexecdir/qt5 (bsc#1174075)</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch icu-devel requires to pkgconfig to allow switching libicu
  versions</changelog>
  <changelog author="fvogt@suse.com" date="1695902401">- Update to version 5.15.10+kde159 (bsc#1214327, CVE-2023-37369):
  * Fix CVE-2023-43114
  * QMimeDatabase: fix detection of pattern conflict in different prefixes
  * Fix highdpi conversion of QTabletEvent coordinates on xcb
  * widget: set WA_X11NetWmWindowType* after xcb window was created
  * Fix crash when setting override cursor on multiple clients
  * QAccessibleWidget: Remove pointless ZWSP in warning message
  * Android A11Y: Fix deadlock in QtAndroidAccessibility::runInObjectContext()
  * Correctly parse non BMP char refs in the sax parser
  * Clear the _X version of alongside the enum deprecator
  * Fix UB (signed char passed to &lt;cctype&gt; function)
  * Qt3DRender: includemocs
  * Fix capitalization error in auto-generated qdbusmacros.h include
  * QColorDialog: Ignore mouse move events when no mouse button is pressed
  * QHostInfo: fix remaining slotObj leaks
  * QXmlStreamReader: Raise error on unexpected tokens (CVE-2023-38197,
    QTBUG-92113, QTBUG-95188, bsc#1213326)
  * QTextLayout: Reconsider cursor drawing on TextObject
  * Ensure consistent cursor width under fractional scaling
  * Fix QTextEdit cursor rectangle vertical positioning
  * Return 0 in QWindow::winId in case of failed platform window creation
  * Doc: note QWindow::winId() will cause platform window creation
  * QSslDiffieHellmanParameters: fix mem-leak
  * QHostInfo: fix leaking slot object
  * Make sure we don't count down past 0 QT_FATAL_CRITICALS
  * QLogging: DRY isFatal(QtMsgType)
  * tst_QXmlStream: remove unneeded _ba UDLs
  * Fix typo in QXmlStreamReader error message
  * QXmlStreamReader: make fastScanName() indicate parsing status to callers
  * QXmlStreamReader: change fastScanName() to take a Value*
  * Fix Croatia's currency
  * SSL: upgrade the default DH parameters</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1696593600">- Update to version 5.15.11+kde134, rebased upstream:
  * Revert "Windows QPA: Add support to UiaRaiseNotificationEvent()"
  * FileChooser portal: Make sure filter.name is not empty
  * QPersistentModelIndex: fix UB (op&lt; on unrelated pointers)
  * Avoid crash when keysymToQtKey(keysym, Qt::ControlModifier) is called
  * a11y atspi: translate coords for GetOffsetAtPoint the right way
  * a11y atspi: Take dialog into account as top-level window
  * a11y atspi: Fix incorrect use of x instead of y position
  * macOS: Handle asynchronous deminiaturizing of windows
  * QTranslator: generalize a UNIX-only path
  * iOS, input panel: be more careful before enabling QIOSKeyboardListener
  * Android: Fix flickering on window resize and show keyboard
  * Android A11Y: Check for active surface before calling into native code
  * xcb: Delete touch points without target windows
  * Blacklist 1 tests in tst_QDBusConnection on ubuntu-20.04
  * Fix CMake builds without ANDROID_SDK
  * Blacklist 2 tests in tst_Http2 on ubuntu-20.04
  * Blacklist 1 tests in tst_QSqlQuery on macos
  * Defer creating the special shaders in the texture blitter
  * tst_QSslSocket::serverCipherPreferencies - fix for OpenSSL v3
  * QTemporaryFile: document rename() differences from QFile
  * Doc: 3rd party: Fix reference to FreeType LICENSE.txt
  * Update bundled libjpeg-turbo to version 2.1.4
  * tst_QSsSocket: fix verifyClientCertificate with OpenSSL 3
  * tst_QSslSocket: regenerate certificate used for setLocalCertificateChain
  * tst_QSslSocket::protocolServerSide - make it work with OpenSSL v3
  * tst_QSslSocket::oldErrorsOnSocketReuse - make it work with OpenSSL v3
  * Update zconf.h prefixes to match zlib v1.2.12 update
  * xcb: fix D&amp;D in same xembed client
  * xcb: use global coordinates for position of D&amp;D for xembed client
  * Doc: Update QMetaType::metaObject() descriptions
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 22.04
  * BLACKLIST tst_qfont for Ubuntu 22.04
  * BLACKLIST tst_QMenuBar::check_menuPosition for Ubuntu 22.04
  * tst_QDtls::verifyClientCertficiate - update certs for OpenSSL v3
  * QSslCertificate::toText(): add a file to compare against
  * Fix the spelling of the word "combination"
  * tst_QSslCertificate::pkcs12 - skip the test if OpenSSL version &gt;= 3
  * Android A11Y: Fix TalkBack scrolling behavior
  * Android A11Y: Notify android about scroll events
  * QCocoaDrag: don't add pasteboard items with non-absolute URLs
  * QDirPrivate: pass input QList by cref
  * tst_qbytearray: remove qCompress_data for QT_NO_COMPRESS
  * QDeviceDiscoveryUDev: use NSDMI
  * QAuthenticator: Fix crash when using NTLM / Negotiate
  * Provide a native interface instance in minimal platform plugin
  * Android: document the supported clipboard mimetypes
  * Windows: Account for not finding child windows when calling ChildWindowFromPointEx
  * iOS: Send touch events asynchronously to avoid deadlocking UIKit event loop
  * Disable bitcode for iOS
  * macOS: Ignore deprecation for ReleaseIconRef
  * BLACKLIST tst_QApplication::sendEventsOnProcessEvents for Ubuntu 22.04
  * Convert Latin1 to UTF-16 before passing to ICU API
  * Doc: Remove repetition of word in text
  * eglfs: Fix screen cloning when atomic is enabled
  * Fix printing of dpr&gt;1 images on Windows
  * QHttp: Fix handling of redirect loaded from cache
  * Doc: Fix return type of QLEInteger/QBEInteger post-in/decrement ops
  * qmake: Fix installation of separate debug info for plugins
  * iOS: ensure we close inputpanel after clearing focusobject
  * Convert Latin1 to UTF-16 before passing to ICU API
  * qputenv: defend against non-NUL-terminated QByteArray values
  * QFontSubset: remove unused glyphName() overload
  * Statically assert that the __mips_dsp code is only active on 32-bit
  * QGtk3Theme: Ensure gtk uses the same windowing system as Qt
  * tst_QFocusFrame: fix -Wparantheses
  * Sync Vulkan device features between QVulkanWindow and QRhi
  * SQLite: Update SQLite to v3.39.2
  * Update freetype to 2.12.1
  * corelib: Fix typos in documentation
  * QAtomicInteger docs: mention bool and char8_t as 8-bit types
  * qgraphicsitem_cast: replace 0 with nullptr
  * Doc: Hide weak overload template magic from documentation
  * Revert "QDateTime: fix adjusted datetime handling"
  * Fix select handles disappears issues
  * tst_QSslKey: prepare for the migration to OpenSSL v3
  * tst_qnetworkreply: replace server.pem/key pair
  * Disable unit testing setting up QTcpServer on special Apple interfaces
  * qmake/msbuild: Turn off "use full paths in diagnostics" by default
  * qmake/msbuild: Support all /DEBUG:xxx linker options
  * qmake/msbuild: Support all /LTCG:xxx options
  * Android A11Y: Add content change type to content change event
  * Enabler for fractional scaling of text in Qt Quick
  * macOS: Override logical DPI to 72
  * Add QDom internalSubset implementation
  * Fix tst_AndroidAssets, broken by recent changes on assets load speed
  * Android: Improve loading speed of individual assets
  * Darwin: Replace deprecated symbol kIOMasterPortDefault with equivalent
  * macOS: Remove code for handling logical DPI changes
  * Fix an incorrect invocation of llvm-readobj
  * macOS: Ignore deprecation for kOnSystemDisk icon domain
  * Copy only files that belongs to QML module
  * Android: fix wrong position of cursor handle and editpopup menu in split screen
  * Doc: Document QML_IMPORTS_PATH and QMLPATHS
  * Add the missing RCC_DIR to '.qrc' paths when generating deployment settings
  * Android: Fix the offset of the EditPopupMenu
  * xcb: update xkb_state mask as much as possible
  * QDom: Stop treating non-BMP characters as invalid
  * Android 13: Fix warnings on starting an application
  * qxkbcommon: Map Super/Hyper to Meta early enough to have an effect
  * macOS: Ignore update requests for offline displays
  * macOS: Avoid recursively updating screens when window moves screen
  * qmake/MinGW: Install separate debug info of DLLs next to the DLL
  * QMainWindow: fix restoreState() for toolbars
  * Make two QDT benchmarks data-driven and add more rows
  * Fix doc and example of QLoggingCategory::installCategory()
  * qmake: Document Xcode behavior when bundling translation files
  * Android: Fix missing import
  * QByteArray: more GCC 12 -Werror=array-bound whack-a-mole
  * CMake: Fix android sdk version propagation
  * Restore C++20-deprecated mixed-enum bitwise operators
  * Android: Fix ANR when QtService and QtActivity load in same process
  * Fix restart QtActivity
  * QArrayData::data(): do type-punning via quintptr, not char *
  * QIOSTextResponder: recreate responder upon reset
  * QSslSocket: make it work with OpenSSL v3
  * QFileSystemModelPrivate: de-inline ctor and dtor
  * Network: update Public Suffix List
  * macOS: Ensure proper quoting when calling otool in objc_namespace script
  * QKeySequence: Fix the one-off error in the mac glyph array size
- Commits dropped by the rebase:
  * Apply CVE-2022-27404-27405-27406-qtbase-5.15.diff
  * QArrayData: fix UB via reinterpret_cast (crash with FORTIFY_SOURCE=3)
  * Adapt for q_EVP_PKEY_base_id → q_EVP_PKEY_get_base_id rename in OpenSSL 3
  * Don't use a deprecated function if built/linked with OpenSSL v3</changelog>
  <changelog author="christophe@krop.fr" date="1696593601">- Enable the experimental native painting feature to improve
  remote desktop performances (boo#1214915)
  exporting QT_XCB_NATIVE_PAINTING is required to use the feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1697716800">- Update to version 5.15.11+kde138:
  * QLibraryPrivate: Actually merge load hints
  * QPluginLoader: report the right load hints
  * xkb: fix build with libxkbcommon 1.6.0 and later
  * a11y atspi: Map ButtonMenu role to AT-SPI equivalent</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1703851200">- Update to version 5.15.12+kde144, rebased upstream:
  * QMimeDatabase: handle buggy type definitions with circular inheritance
  * xcb: only set base size when it's valid
  * QPixmapCache: fix leaking of QStrings and Keys on clear()
  * OpenFile portal: do not use O_PATH fds
  * QSystemTrayIcon: properly disconnect old menu in setContextMenu()
  * Guard QTabBar against nested event processing during moving tabs
  * QDial: don't crash when min==max and setting a value != min &amp; max
  * QStandardItemModel: don't leak in mimeData()
  * SQL/MySQL: properly initialize variable
  * QWidgetTextControl: ignore invalid input method event
  * Update the LGPL license header
  * SQL/MySQL: fix handling of json column
  * Remove QMAKE_RANLIB and QMAKE_LINK_SHLIB from android/default_pre.prf
  * macOS: Fix less common writing systems on Catalina and later
  * Blacklist 1 tests in tst_QFtp on ubuntu-20.04
  * Update bundled libpng to version 1.6.39
  * Android: Fix signing of APKs that are generated when an AAB is also built
  * Update bundled zlib to version 1.2.13
  * doc: update the limitation of QSystemTrayIcon on X11
  * Blacklist 1 tests in tst_QTimer on ubuntu-20.04
  * Add benchmarks for QLocale number parsing
  * Add benchmarks for QString number parsing
  * Android: Fix incorrect fullscreen dimensions
  * Gtk3Theme: set XCURSOR_SIZE and XCURSOR_THEME for wayland sessions
  * xcb: Flush Display when processing xcb events
  * xcb: Add xlib wrapper for XFlush()
  * QHostAddress: Fix incorrect comparison against 'Any'
  * QSsl[OpenSSL/Android]: Fix hardcoded 1_1 suffix
  * BLACKLIST: tst_QApplication::sendEventsOnProcessEvents for RHEL 9.0
  * QMacStyle: do not set white color for grayed out button
  * Work round macOS's omission of en_DE from its own uiLanguages()
  * Suppress a deprecation warning in tst_QDateTime::toString_enumformat()
  * QJsonValue: fix incorrect to{Array,Object} when the value is empty
  * QGtk3Dialog: remove the #include for empty moc
  * Remove unneeded QWindow from QGtk3Dialog
  * tst_QSslSocket: Delete sslOptions
  * tst_QSslServer: Make the in-process server use TLS1.2
  * Android: fix Gradle warning about using enableUncompressedNativeLibs
  * Mention  limitation of QDir::drives() on Windows
  * QFileSystemEngine/Win: fix incorrect buffer size in currentPath()
  * Android: properly retrieve mime type of uri to for openUrl()
  * Android: Fix clipboard issue with urls
  * Android: Add a way to disable accessibility via an environment var
  * Update bundled libpng to version 1.6.38
  * QIOSMessageDialog::exec - work around 'windowsless' exec
  * QIosScreen: retain the right window
  * tst_Q{BitArray,ContiguousCache}: check not only count(), but size(), too
  * QIosTextResponder: stop using deprecated constants and type
  * qcompilerdetection.h: detect Coverity
  * Android: Fix Display.getRealMetrics deprecation
  * Fix broken Text rendering when noantialiased NativeRendering is used
  * forkfd: fix Clang 15 ATOMIC_VAR_INIT deprecation warning
  * eglfs: Add env.var. to disable the dedicated drmHandleEvent thread
  * doc: Don't put strings into QVector&lt;double&gt;
  * Remove focusProxyAndInputMethods from tst_QWidget
  * Bump version to 5.15.12
  * Update documentation of qWaitForWindowActive / qWaitForWindowExposed
  * QtHttp: Lower the severity of some log output
  * StyleSheetStyle: Fix color of placeholder texts in text edits
  * Android: Fix flickering on split screen mode
  * Update url to IAccessible2 Specification</changelog>
  <changelog author="alarrosa@suse.com" date="1704283200">- Update to version 5.15.12+kde147:
  * Http2: fix potential overflow in assemble_hpack_block()
    (bsc#1218413, CVE-2023-51714)
  * HPack: fix incorrect integer overflow check
  * HPack: fix a Yoda Condition</changelog>
  <changelog author="fvogt@suse.com" date="1708084800">- Update to version 5.15.12+kde151:
  * Improve KTX file reading memory safety (CVE-2024-25580, boo#1219996)
  * Revert "xcb: only set base size when it's valid"
  * Fix potential leak of QPropertyAnimation in QLineEditIconButton
  * QBitArray: correct inline keyword</changelog>
  <changelog author="alarrosa@suse.com" date="1720785600">- Add patch from upstream to fix a regression in the ODBC driver
  (bsc#1227513, QTBUG-112375):
  * 0001-QSQL-ODBC-fix-regression-trailing-NUL.patch
  * 0002-SQL-ODBC-Pass-correct-length-to-SQLColAttribute.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1722945600">- Add rebased upstream patch to delay any HTTP2 communication until
  encrypted() can be responded to (bsc#1227426, CVE-2024-39936):
  * 0001-HTTP2-Delay-any-communication-until-encrypted-can-be.patch
- Add upstream patch to fix a NULL pointer dereference via the
  function QXcbConnection::initializeAllAtoms() when there is
  anomalous behavior from the X server (bsc#1222120,
  CVE-2023-45935):
  * 0001-xcb-guard-a-pointer-before-usage.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756728000">- Add patch from upstream to fix a precondition violation in call
  to QByteArrayView::at() which can cause crashes (bsc#1243958,
  CVE-2025-5455):
  * 0001-qDecodeDataUrl-fix-precondition-violation-in-call-to.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756814400">- Add patch from upstream to initialize a member variable that was
  uninitialized under some circumstances:
  * 0001-QObjectPrivateSignal-initialize-all-members.patch
- Add patch from upstream to fix a crash when parsing a particular
  glyph in a particular font (QTBUG-124310):
  * 0001-Avoid-crash-in-font-distancefield-computation.patch
  * 0002-Fix-crash-in-font-distancefield-computation.patch
- Add patch from upstream to fix avoid repeatedly registering
  xsettings callbacks when switching cursor themes:
  * 0001-xcb-Avoid-repeatedly-registering-xsettings-callbacks-When.patch
- Add patch from upstream to check validity of RandR output info
  before using it (QTBUG-128906):
  * 0001-xcb-check-validity-of-RandR-output-info-before-using-it.patch
- Add patch from upstream to fix reparenting a window so it takes
  effect even if there are no other state changes to the window:
  * 0001-xcb-Sync-XCB-connection-after-reparenting-window.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756900800">- Add patch from upstream to fix a low performance when processing
  XML data in encodeText (bsc#1239896, CVE-2025-30348):
  * 0001-XML_QDom-speedup-encodeText.patch</changelog>
</package>
<package pkgid="5aec3b1557093d79d52fff25c8111bacba50cac5a9c9849f72c53d7bf03b9599" name="libQt5Gui5" arch="x86_64">
  <version epoch="0" ver="5.15.12+kde151" rel="150600.3.9.1"/>
  <changelog author="fvogt@suse.com" date="1678968000">- Update to version 5.15.8+kde183:
  * Add nullptr guard in QStyleSheetStyle::drawPrimitive(PE_PanelLineEdit)
  * QAbstractItemView: don't access invalid indexes on copy-key
  * Apply CVE-2023-24607-qtbase-5.15.diff (CVE-2023-24607,
    bsc#1209616)
  * QXcbConnection::getTimestamp: do not return stale timestamp
  * QToolButton: Elide text when constraints prevent from showing whole text
  * correctly set up ref counting in QThreadPool::tryStart(std::function)
  * Do not set Qt::ToolTip flag for QShapedPixmapWindow
  * Fix deletion order also for QImageReader/Writer::setDevice()
  * Fix deletion order in QImageReader/Writer destructors
  * QNetworkReply: Fix typos in the documentation
  * Doc: Fix typo in the online documentation template
  * Doc: Link to page documenting Qt trademarks in the copyright footer
  * [doc] Fix typo in QBuffer::setBuffer() description
  * qwindowsdrag: Fix typo in documentation
  * openglblacklists: Fix typo in description
  * qxcbscreen: Fix typo in documentation
  * Fix typos in SQL driver documentation
  * qxcbwindow.cpp: Fix sign-compare and another warnings
  * QToolButton: reimplement the fix for QTBUG-95255
  * QSysInfo::prettyProductName(): Add macOS Ventura product name
  * QSysInfo::prettyProductName(): add missing macOS product names
  * xcb: correctly disconnect xsettings callbacks
  * ibus: add SetCursorLocationRelative in InputContext.xml</changelog>
  <changelog author="fvogt@suse.com" date="1680523200">- Update to version 5.15.8+kde185:
  * QFSFileEngine: fix overflow bug when using lseek64
  * Add QImage null check when QOpenGLTexture converts
- Add patch to fix return key handling in QGroupBox on GNOME (bsc#1209364):
  * 0001-Revert-QGnomeTheme-Allow-Space-Return-Enter-and-Sele.patch
- Add patch to fix XInput2 events in big-endian X11 clients (bsc#1204883, QTBUG-105157):
  * big-endian-scroll.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1682078400">- Update to version 5.15.9+kde151, rebased upstream:
  * QCborValue: fix incorrect to{Array,Map} when the value is empty
  * QMargins: fix a missing "full stop" in the docs
  * QLibrary: restore translated string
  * QLibrary: fix possible arg() format clobbering
  * iOS: Use python3 for enumerating test target devices
  * Android: Treat ACTION_CANCEL as TouchCancelEvent
  * Doc: Fix broken formatting
  * QFileSystemEngine: fix potential formatting error
  * QString::asprintf: check that passing field widths as arguments works
  * Backport recent QFlags tests
  * network: Fix typos in documentation
  * Fix accuracy with screen composition
  * Doc: Update documentation for QElapsedTimer's in Windows
  * Document that QStandardPath::findExecutable works with absolute paths
  * macOS: Use native resize cursors for diagonal resize
  * Fix clipped glyphs in text rendering of QGraphicsTextItem
  * Change comparison data type to fix int overflow
  * Add missing Q_WEAK_OVERLOAD definition
  * Update QFileInfo docs to mention macOS aliases
  * Distinguish macOS aliases from normal symbolic links
  * Windows QPA: Fix frameless maximize on secondary screens
  * Rewrite tst_qdataurl as a data-driven test
  * Fix compilation for wasm
  * QIOSFileDialog/QIOSDocumentPickerController - handle dismissed view controller
  * Fix QDockWidget's dock area permissions after hovering
  * Fix C++20 ambiguous relational operators between QJsonValue{,Ref}
  * Android: make sure that orientationChange is reported after resize
  * Android: set all QScreen's geometry-related parameters together
  * Blacklist: test cases blacklisted in tst_QDBusConnection:
  * wasm:  fix issue with passing username/password to network request
  * macOS: Pass multi arch flags when linking qmake
  * QCocoaFileDialogHelper: Always enable symlinks and aliases to directories
  * Android: terminate argv passed to main() with nullptr
  * Update bundled libjpeg-turbo to version 2.1.3
  * ANGLE: Load the DirectX libraries from the system path directly
  * SQLite: Update SQLite to v3.37.2
  * Fix compiler warnings about unused parameters
  * Fix getsockopt option_value initial initialization
  * Http2: Fix redirect-handling
  * Android A11Y: Fix value rounding
  * Android A11Y: Announce value together with element name when focused
  * Android A11Y: handle valueChanged events
  * tst_QSystemSemaphore: give proper path to test-helper
  * QNX: Silence compiler warning by initializing variable
  * Update LICENSE.QT-LICENSE-AGREEMENT
  * winrt appxmanifest: Properly replace VCLibs version for newer MSVC versions
  * QAbstractSocket: Don't pretend pause and resume is a stack
  * Gui: test also depends for clipboard feature
  * QDesktopServices: deprecate destroying URL handlers w/o explicit unsetUrlHandler()
  * macOS: Respect QMAKE_APPLE_DEVICE_ARCHS when building qmake
  * HTTP: Make redirect response parsing more generic
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 20.04
  * Android A11Y: populate child elements when constructing node info
  * Fix issue where readyRead() could happen after disconnected()
  * QStringView: add missing constexpr so we can use is_constant_evaluated
  * Use Android's View.generateViewId() for generating ids for views/surfaces
  * Remove documentation of non-existing QAccessible state
  * Doc: Fix snippet to match actual QFileInfo behavior
  * Android: Re-focus focused accessibility node after orientation change
  * Android A11Y: execute C++ code on main Qt thread
  * Android: extract parentId for hidden object in advance
  * xcb: Show valuator atom names properly in categorized logging
  * Android: replace stacktrace with debug message in search for setService
  * Better document attaching a QFutureWatcher to a started QFuture
  * doc: Update GenericDataLocation location on iOS
  * BLACKLIST test_Gestures tests for RHEL-8.4
  * QPlainTestLogger: do not print "failure location" if there's no failure
  * QAbstractItemView: do not access invalid model indices (3/N)
  * Win32: always allow the event loop to be woken up by posted events
  * rhi: d3d11: Use __uuidof where we can
  * Don't QEXPECT_FAIL tst_QLineEdit::testQuickSelectionWithMouse on macOS ARM
  * Network: Emit authenticationRequired when using Ntlm
  * testlib: Disable window restoration on macOS in a non-persistent way
  * QAbstractItemView: do not access invalid model indices (2/N)
  * QAbstractItemView: do not access invalid model indices (1/N)
  * QAbstractItemView: code tidies
  * Update float16 part of TestLib selftest
  * QGuiApplication: constant-initialize lastCursorPosition
  * Blacklist tst_QFileSystemWatcher::signalsEmittedAfterFileMoved on all Windows versions
  * [Android]: Handle the screen name, modes and refreshRate properly
  * QVersionNumber: remove the "pure" attribute from commonPrefix()
  * QEvent: initialize the static userEventTypeRegistry constexprly
  * Let QXcbGlxWindow::createVisual fallback to QXcbWindow::createVisual
  * Android A11Y: fix content update notification when object is hidden
  * Android: explicitly remove accessibility focus when element is hidden
  * BLACKLIST tst_qfont for Red Hat 8.4 and Ubuntu 20.04
  * QtCore: includemocs
  * Fix memory leak in QtConcurrent::run when called with a NULL QThreadPool
  * INTEGRITY: Prevent deletion of virtual functions
  * QMake: replace a Q_ASSERT() with a Q_UNREACHABLE()
  * QTransform benchmark: measure what was promised
  * QStaticByteArrayMatcher: add a useful comment
  * QMacStyle: use the 'momentary push in' type for push buttons
  * qopengl.h: Move C header #include(s) out of the QT_NAMESPACE
  * Enable all supported 1.0 device features in QVulkanWindow
  * Fix queue passed to vkQueuePresent
  * QFusionStyle: don't draw an invalid outline for up/down buttons
  * Doc: Make QListIterator snippets more robust
  * QVersionNumber: don't detach() in rvalue QList/QVector ctor
  * QNetworkRequest: Document how Qt handles 301 and 302 status codes
  * Convert date-time to UTC before claiming it's in GMT
  * Remove execute permission from XML files
  * Add test case for style sheet selectors for enum properties
  * FreeType: allow falling back to synthesized bold if desired
  * Fix an assertion failure in massageAdjustedDateTime()
  * Relax tst_qvulkan::vulkanVersionRequest to make it compatible with 1.1
  * Doc: Replace "C:Documents and Settings" paths
  * QOrderedMutexLocker: fix compilation with C++11
  * QHttpNetworkConnection: Always set proxy settings to all channels
  * Add a markdown writer test for a checklist item ending with `code`
  * Use QTextCharFormat::fontFixedPitch to remember Markdown backtick spans
  * QWizardLayoutInfo: make == and != operators const
  * Revert "Android: Fix screen flicker issues"
  * macOS: Handle momentum scroll NSEventPhaseBegan when scroll had ended
  * SQLite: Update SQLite to v3.37.0
  * Update copyright year to 2022
  * QTzTimeZonePrivate: use ctor delegation instead of init()
  * QTzTimeZonePrivate: fix permanently-detaching m_icu
  * tst_QGraphicsView: fix memleak
  * Doc: Update external links to Qt Creator Manual
  * macOS: assume an unidentified tablet device is a stylus
  * tst_QItemModel: fix memleaks
  * tst_qanimationgroup: fix memleaks
  * QAbstractAnimation: add missing forward-declaration
  * [doc] QCoreApplication::installTranslator() doesn't take ownership
  * tst_qtranslator: fix memleak
  * QTestData: fix streaming of u8 string literals in C++20 mode
  * QThread/Unix: extract duplicate code
  * QWindowPrivate: fix inconsistent inline on some methods
  * tst_QStringList: check that join(u'0') embeds NULs
  * macOS: Sanitize scroll deltas for NSEventPhaseCancelled
  * tst_qsharedmemory: skip readOnly() test under asan
  * QXmlStreamReader: update test distribution
  * QZipReader: update to unzip partly broken archives
  * Deliver context menu event with correct coordinates to widgets in popups
  * QTextHtmlParser: fix prefix lookahead and html comments
  * QtConcurrent::run crashes on program exit
  * tst_QPropertyAnimation: fix leaks occurring under normal operation
  * tst_QPropertyAnimation: fix wrong comment
  * QLogging: fix potential missing NUL-terminator when calling OutputDebugString
  * Fix qt_scrollRectInImage when scrolling outside of the image
- Commits dropped by the rebase:
  * Fix compile with Qt5: Use QString::mid instead of QString::sliced
  * Restore C++11 compatibility after e8b9f4c28d3ab5e960dc54f2dc0c4b749b0b50e0
  * QDateTime: Don't require c++17</changelog>
  <changelog author="fvogt@suse.com" date="1683633600">- Amend patch to fix mouse grabbing as well (bsc#1211024):
  * big-endian-scroll.patch</changelog>
  <changelog author="fvogt@suse.com" date="1684929600">- Update to version 5.15.9+kde154:
  * Hsts: match header names case insensitively (CVE-2023-32762,
    QTBUG-113392, bsc#1211797)
  * Fix specific overflow in qtextlayout (CVE-2023-32763,
    QTBUG-113337, bsc#1211798)
  * QDnsLookup/Unix: make sure we don't overflow the buffer
    (CVE-2023-33285, boo#1211642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1686657600">- Update to version 5.15.10+kde129, rebased upstream:
  * Ssl: Copy the on-demand cert loading bool from default config
  * Schannel: Reject certificate not signed by a configured CA certificate (boo#1211994, CVE-2023-34410)
  * qnetworkreplyfileimpl_p.h: fix header guard name
  * Revert "Draw the cursor considering the descent is 0"
  * Use pkgconfig in order to find libproxy configuration
  * Upgrade PCRE2 to 10.40
  * Android A11Y: handle LocationChanged event only for focused element
  * Port binary JSON to new special integer bitfields
  * INTEGRITY: enable C99 globally
  * QObject: mark two error reporting functions COLD
  * Endian: Provide special integer bitfield unions
  * Android: set useLegacyPackaging to true in build.gradle
  * QWidgetTextControl: port to new-style connects (faster)
  * Sync qxmlstream.g with qxmlstreamparser_p.h [1/2]: switched lines
  * tst_QNetworkReply try stabilize autoDeleteReplies tests
  * Remove duplicated include for &lt;limits&gt;
  * Fix recursion crash when calling setStyleSheet with `qproperty-styleSheet`
  * qwindowsxpstyle: Fix typos in documentation
  * Correct prefix reported for end element in QXmlStreamReader
  * Android A11Y: Add supported role infos to A11yNodeInfo
  * Fix handling of DateTime values in QSettings
  * Fix off-by-one for "typically" lowest value INT_MIN
  * xml: Fix typos in documentation
  * QWindowsWindow: Fix typo in documentation
  * includemocs (updated script)
  * widgets: Fix typos in documentation
  * cocoa: Fix typo in debug messages
  * Only scroll QMenu when there is a valid active action
  * QTimer: Add note in documentation
  * Fix QListView assert when the last row is moved in IconMode
  * QFileDialog: Fix adding default suffix when file path contains dot
  * QLineEdit: account for the placeholderText when computing lineRect
  * QFileDialog::saveFileContent crashes on accept
  * QCompleter: QCompleter unexpectedly changes QLineEdit text
  * Fix build error on iOS with the configure option -qtnamespace
  * Draw the cursor considering the descent is 0
  * Remove pure-virtual-signals.h include from tst_moc.cpp
  * plugins: image formats - fix odr violation
  * dbus: Fix typos
  * qwindowsdialoghelpers: Fix typo in documentation
  * QTableView: Document the customizations applied to QHeaderView
  * Unicodetools: compile
  * eglfs_x11: Fix running flag linkage
  * qcompilerdetection.h: add Q_CC_{GNU,MSVC,CLANG}_ONLY macros
  * Fix CMake warning about "missing closing ' quote"
  * Fix alignment of next/prev links in offline style
  * QtDBus: includemocs
  * Image Plugins: includemocs(-ish)
  * QtGui: includemocs
  * QXcbNativeInterface: remove unused field m_sysTraySelectionAtom
  * Windows QPA: Fix slowdown with large table/tree views with accessibility
  * Macstyle: fix the text color on the disabled button
  * QMacStyle: fix tool buttons (in checked mode)
  * QTeamCityLogger: fix .arg() placeholder injection
  * QAbstractTestLogger: disable copying
  * Fix errorMessageFromComError()
  * QtNetwork: includemocs
  * AppleUnifiedLogger: Remove manually managed os_log_t cache
  * examples: add WindowStaysOnBottomHint into preview text
  * QSharedPointer: Use matching new/delete
  * QIbusPlatformInputContextPlugin: includemocs
  * QGtk3ThemePlugin: includemocs
  * QTuioTouchPlugin: includemocs
  * QtWidgets: includemocs v2022
  * QMYSQLDriverPlugin: includemocs
  * QtDeviceDiscoverySupportPrivate: includemocs
  * QLinuxFbIntegrationPlugin: includemocs
  * QtPrintSupport: includemocs
  * QSQLiteDriverPlugin: includemocs
  * QtFbSupportPrivate: includemocs
  * QXdgDesktopPortalThemePlugin: includemocs
  * QtTest: includemocs
  * QComposePlatformInputContextPlugin: includemocs
  * QtSql: includemocs
  * QVncIntegrationPlugin: includemocs
  * Fix backingstore fractional DPR glitches for widgets in child windows
  * Include &lt;limits&gt; where std::numeric_limits is used
  * QtInputSupportPrivate: includemocs
  * Document the default value of QSFPM::sortOrder()
  * Better document how to enable sorting in QSPFM
  * Correct documentation of INI format's loss of type information
  * Android: add missing properties in AndroidManifest.xml
  * Fix assertion failure when parsing a doubly-invalid date-time text
  * Windows QPA: Correct mistake when calculating minmaxinfo
  * Android: replace ndk.dir with android.ndkVersion in build.gradle
  * Android: remove the old copy of gradle.properties after reading it
  * CMake Android Support: Fix signing of APKs
  * Android: fix A11Y object description
  * macOS: Fix warning about comparing different types in QCocoaScreen::isOnline
  * Fix qmake build on FreeBSD
  * Update documentation of enum Qt::DockWidgetArea
  * xcb: recreate xcb window under some conditions
  * objc_namespace: Add support for universal binaries
  * objc_namespace: Fix misspelled argument for silencing output
  * objc_namespace: Update parsing logic to account for otool changes
  * Blacklist passwordAuth for Ubuntu 20.04
  * Android: wrap QAndroidInputContext's m_focusObject in a QPointer
  * Fix compilation with GCC 12 (and on Fedora 35 and newer)
  * Chip example: fix an accidental bool-&gt;int conversion when using PMF connections
  * qmake: Add support for C++23
  * Android: use BCP 47 tag to create a correct Locale for QTimeZone::displayName()
  * QDateTime: fix adjusted datetime handling
  * Fix crash in tst_qmltc_examples on Android
  * macOS: Remove dead code for focus ring handling in Mac style
  * Detach for colortransforms of indexed formats
  * tst_QTcpSocket::connectToHostError - handle possible timeouts
  * CoreText: Avoid populating font family aliases if family was populated
  * Graphicsview: Avoid background clearing glitches under fractional DPR
  * Windows QPA: Avoid slowdown with UI Automation name change notification
  * Windows QPA: Avoid sending accessibility notifications before activation
  * Windows: Fix potential crash when retrieving default printer
  * Make Ubuntu with its non-standard security level happy
  * Android: Blacklist failing tests on tst_QGraphicsProxyWidget
  * Update LA 4.4.1
  * iOS A11Y: Set more accessibilityTraits
  * QNX: Fix compiler warning by when FEATURE_clipboard is not enabled
  * Document that native file dialogs might not show a title
  * Doc: Remove mentionings of overflows from QElapsedTimer
  * QTextMarkdownImporter: don't apply text char format to list item block
- Commits dropped by the rebase:
  * QBuffer: add missing &lt;limits&gt; include
  * Fix developer build</changelog>
  <changelog author="gmbr3@opensuse.org" date="1687953600">- Change %_libqt5_libexecdir to %_libexecdir/qt5 (bsc#1174075)</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch icu-devel requires to pkgconfig to allow switching libicu
  versions</changelog>
  <changelog author="fvogt@suse.com" date="1695902401">- Update to version 5.15.10+kde159 (bsc#1214327, CVE-2023-37369):
  * Fix CVE-2023-43114
  * QMimeDatabase: fix detection of pattern conflict in different prefixes
  * Fix highdpi conversion of QTabletEvent coordinates on xcb
  * widget: set WA_X11NetWmWindowType* after xcb window was created
  * Fix crash when setting override cursor on multiple clients
  * QAccessibleWidget: Remove pointless ZWSP in warning message
  * Android A11Y: Fix deadlock in QtAndroidAccessibility::runInObjectContext()
  * Correctly parse non BMP char refs in the sax parser
  * Clear the _X version of alongside the enum deprecator
  * Fix UB (signed char passed to &lt;cctype&gt; function)
  * Qt3DRender: includemocs
  * Fix capitalization error in auto-generated qdbusmacros.h include
  * QColorDialog: Ignore mouse move events when no mouse button is pressed
  * QHostInfo: fix remaining slotObj leaks
  * QXmlStreamReader: Raise error on unexpected tokens (CVE-2023-38197,
    QTBUG-92113, QTBUG-95188, bsc#1213326)
  * QTextLayout: Reconsider cursor drawing on TextObject
  * Ensure consistent cursor width under fractional scaling
  * Fix QTextEdit cursor rectangle vertical positioning
  * Return 0 in QWindow::winId in case of failed platform window creation
  * Doc: note QWindow::winId() will cause platform window creation
  * QSslDiffieHellmanParameters: fix mem-leak
  * QHostInfo: fix leaking slot object
  * Make sure we don't count down past 0 QT_FATAL_CRITICALS
  * QLogging: DRY isFatal(QtMsgType)
  * tst_QXmlStream: remove unneeded _ba UDLs
  * Fix typo in QXmlStreamReader error message
  * QXmlStreamReader: make fastScanName() indicate parsing status to callers
  * QXmlStreamReader: change fastScanName() to take a Value*
  * Fix Croatia's currency
  * SSL: upgrade the default DH parameters</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1696593600">- Update to version 5.15.11+kde134, rebased upstream:
  * Revert "Windows QPA: Add support to UiaRaiseNotificationEvent()"
  * FileChooser portal: Make sure filter.name is not empty
  * QPersistentModelIndex: fix UB (op&lt; on unrelated pointers)
  * Avoid crash when keysymToQtKey(keysym, Qt::ControlModifier) is called
  * a11y atspi: translate coords for GetOffsetAtPoint the right way
  * a11y atspi: Take dialog into account as top-level window
  * a11y atspi: Fix incorrect use of x instead of y position
  * macOS: Handle asynchronous deminiaturizing of windows
  * QTranslator: generalize a UNIX-only path
  * iOS, input panel: be more careful before enabling QIOSKeyboardListener
  * Android: Fix flickering on window resize and show keyboard
  * Android A11Y: Check for active surface before calling into native code
  * xcb: Delete touch points without target windows
  * Blacklist 1 tests in tst_QDBusConnection on ubuntu-20.04
  * Fix CMake builds without ANDROID_SDK
  * Blacklist 2 tests in tst_Http2 on ubuntu-20.04
  * Blacklist 1 tests in tst_QSqlQuery on macos
  * Defer creating the special shaders in the texture blitter
  * tst_QSslSocket::serverCipherPreferencies - fix for OpenSSL v3
  * QTemporaryFile: document rename() differences from QFile
  * Doc: 3rd party: Fix reference to FreeType LICENSE.txt
  * Update bundled libjpeg-turbo to version 2.1.4
  * tst_QSsSocket: fix verifyClientCertificate with OpenSSL 3
  * tst_QSslSocket: regenerate certificate used for setLocalCertificateChain
  * tst_QSslSocket::protocolServerSide - make it work with OpenSSL v3
  * tst_QSslSocket::oldErrorsOnSocketReuse - make it work with OpenSSL v3
  * Update zconf.h prefixes to match zlib v1.2.12 update
  * xcb: fix D&amp;D in same xembed client
  * xcb: use global coordinates for position of D&amp;D for xembed client
  * Doc: Update QMetaType::metaObject() descriptions
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 22.04
  * BLACKLIST tst_qfont for Ubuntu 22.04
  * BLACKLIST tst_QMenuBar::check_menuPosition for Ubuntu 22.04
  * tst_QDtls::verifyClientCertficiate - update certs for OpenSSL v3
  * QSslCertificate::toText(): add a file to compare against
  * Fix the spelling of the word "combination"
  * tst_QSslCertificate::pkcs12 - skip the test if OpenSSL version &gt;= 3
  * Android A11Y: Fix TalkBack scrolling behavior
  * Android A11Y: Notify android about scroll events
  * QCocoaDrag: don't add pasteboard items with non-absolute URLs
  * QDirPrivate: pass input QList by cref
  * tst_qbytearray: remove qCompress_data for QT_NO_COMPRESS
  * QDeviceDiscoveryUDev: use NSDMI
  * QAuthenticator: Fix crash when using NTLM / Negotiate
  * Provide a native interface instance in minimal platform plugin
  * Android: document the supported clipboard mimetypes
  * Windows: Account for not finding child windows when calling ChildWindowFromPointEx
  * iOS: Send touch events asynchronously to avoid deadlocking UIKit event loop
  * Disable bitcode for iOS
  * macOS: Ignore deprecation for ReleaseIconRef
  * BLACKLIST tst_QApplication::sendEventsOnProcessEvents for Ubuntu 22.04
  * Convert Latin1 to UTF-16 before passing to ICU API
  * Doc: Remove repetition of word in text
  * eglfs: Fix screen cloning when atomic is enabled
  * Fix printing of dpr&gt;1 images on Windows
  * QHttp: Fix handling of redirect loaded from cache
  * Doc: Fix return type of QLEInteger/QBEInteger post-in/decrement ops
  * qmake: Fix installation of separate debug info for plugins
  * iOS: ensure we close inputpanel after clearing focusobject
  * Convert Latin1 to UTF-16 before passing to ICU API
  * qputenv: defend against non-NUL-terminated QByteArray values
  * QFontSubset: remove unused glyphName() overload
  * Statically assert that the __mips_dsp code is only active on 32-bit
  * QGtk3Theme: Ensure gtk uses the same windowing system as Qt
  * tst_QFocusFrame: fix -Wparantheses
  * Sync Vulkan device features between QVulkanWindow and QRhi
  * SQLite: Update SQLite to v3.39.2
  * Update freetype to 2.12.1
  * corelib: Fix typos in documentation
  * QAtomicInteger docs: mention bool and char8_t as 8-bit types
  * qgraphicsitem_cast: replace 0 with nullptr
  * Doc: Hide weak overload template magic from documentation
  * Revert "QDateTime: fix adjusted datetime handling"
  * Fix select handles disappears issues
  * tst_QSslKey: prepare for the migration to OpenSSL v3
  * tst_qnetworkreply: replace server.pem/key pair
  * Disable unit testing setting up QTcpServer on special Apple interfaces
  * qmake/msbuild: Turn off "use full paths in diagnostics" by default
  * qmake/msbuild: Support all /DEBUG:xxx linker options
  * qmake/msbuild: Support all /LTCG:xxx options
  * Android A11Y: Add content change type to content change event
  * Enabler for fractional scaling of text in Qt Quick
  * macOS: Override logical DPI to 72
  * Add QDom internalSubset implementation
  * Fix tst_AndroidAssets, broken by recent changes on assets load speed
  * Android: Improve loading speed of individual assets
  * Darwin: Replace deprecated symbol kIOMasterPortDefault with equivalent
  * macOS: Remove code for handling logical DPI changes
  * Fix an incorrect invocation of llvm-readobj
  * macOS: Ignore deprecation for kOnSystemDisk icon domain
  * Copy only files that belongs to QML module
  * Android: fix wrong position of cursor handle and editpopup menu in split screen
  * Doc: Document QML_IMPORTS_PATH and QMLPATHS
  * Add the missing RCC_DIR to '.qrc' paths when generating deployment settings
  * Android: Fix the offset of the EditPopupMenu
  * xcb: update xkb_state mask as much as possible
  * QDom: Stop treating non-BMP characters as invalid
  * Android 13: Fix warnings on starting an application
  * qxkbcommon: Map Super/Hyper to Meta early enough to have an effect
  * macOS: Ignore update requests for offline displays
  * macOS: Avoid recursively updating screens when window moves screen
  * qmake/MinGW: Install separate debug info of DLLs next to the DLL
  * QMainWindow: fix restoreState() for toolbars
  * Make two QDT benchmarks data-driven and add more rows
  * Fix doc and example of QLoggingCategory::installCategory()
  * qmake: Document Xcode behavior when bundling translation files
  * Android: Fix missing import
  * QByteArray: more GCC 12 -Werror=array-bound whack-a-mole
  * CMake: Fix android sdk version propagation
  * Restore C++20-deprecated mixed-enum bitwise operators
  * Android: Fix ANR when QtService and QtActivity load in same process
  * Fix restart QtActivity
  * QArrayData::data(): do type-punning via quintptr, not char *
  * QIOSTextResponder: recreate responder upon reset
  * QSslSocket: make it work with OpenSSL v3
  * QFileSystemModelPrivate: de-inline ctor and dtor
  * Network: update Public Suffix List
  * macOS: Ensure proper quoting when calling otool in objc_namespace script
  * QKeySequence: Fix the one-off error in the mac glyph array size
- Commits dropped by the rebase:
  * Apply CVE-2022-27404-27405-27406-qtbase-5.15.diff
  * QArrayData: fix UB via reinterpret_cast (crash with FORTIFY_SOURCE=3)
  * Adapt for q_EVP_PKEY_base_id → q_EVP_PKEY_get_base_id rename in OpenSSL 3
  * Don't use a deprecated function if built/linked with OpenSSL v3</changelog>
  <changelog author="christophe@krop.fr" date="1696593601">- Enable the experimental native painting feature to improve
  remote desktop performances (boo#1214915)
  exporting QT_XCB_NATIVE_PAINTING is required to use the feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1697716800">- Update to version 5.15.11+kde138:
  * QLibraryPrivate: Actually merge load hints
  * QPluginLoader: report the right load hints
  * xkb: fix build with libxkbcommon 1.6.0 and later
  * a11y atspi: Map ButtonMenu role to AT-SPI equivalent</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1703851200">- Update to version 5.15.12+kde144, rebased upstream:
  * QMimeDatabase: handle buggy type definitions with circular inheritance
  * xcb: only set base size when it's valid
  * QPixmapCache: fix leaking of QStrings and Keys on clear()
  * OpenFile portal: do not use O_PATH fds
  * QSystemTrayIcon: properly disconnect old menu in setContextMenu()
  * Guard QTabBar against nested event processing during moving tabs
  * QDial: don't crash when min==max and setting a value != min &amp; max
  * QStandardItemModel: don't leak in mimeData()
  * SQL/MySQL: properly initialize variable
  * QWidgetTextControl: ignore invalid input method event
  * Update the LGPL license header
  * SQL/MySQL: fix handling of json column
  * Remove QMAKE_RANLIB and QMAKE_LINK_SHLIB from android/default_pre.prf
  * macOS: Fix less common writing systems on Catalina and later
  * Blacklist 1 tests in tst_QFtp on ubuntu-20.04
  * Update bundled libpng to version 1.6.39
  * Android: Fix signing of APKs that are generated when an AAB is also built
  * Update bundled zlib to version 1.2.13
  * doc: update the limitation of QSystemTrayIcon on X11
  * Blacklist 1 tests in tst_QTimer on ubuntu-20.04
  * Add benchmarks for QLocale number parsing
  * Add benchmarks for QString number parsing
  * Android: Fix incorrect fullscreen dimensions
  * Gtk3Theme: set XCURSOR_SIZE and XCURSOR_THEME for wayland sessions
  * xcb: Flush Display when processing xcb events
  * xcb: Add xlib wrapper for XFlush()
  * QHostAddress: Fix incorrect comparison against 'Any'
  * QSsl[OpenSSL/Android]: Fix hardcoded 1_1 suffix
  * BLACKLIST: tst_QApplication::sendEventsOnProcessEvents for RHEL 9.0
  * QMacStyle: do not set white color for grayed out button
  * Work round macOS's omission of en_DE from its own uiLanguages()
  * Suppress a deprecation warning in tst_QDateTime::toString_enumformat()
  * QJsonValue: fix incorrect to{Array,Object} when the value is empty
  * QGtk3Dialog: remove the #include for empty moc
  * Remove unneeded QWindow from QGtk3Dialog
  * tst_QSslSocket: Delete sslOptions
  * tst_QSslServer: Make the in-process server use TLS1.2
  * Android: fix Gradle warning about using enableUncompressedNativeLibs
  * Mention  limitation of QDir::drives() on Windows
  * QFileSystemEngine/Win: fix incorrect buffer size in currentPath()
  * Android: properly retrieve mime type of uri to for openUrl()
  * Android: Fix clipboard issue with urls
  * Android: Add a way to disable accessibility via an environment var
  * Update bundled libpng to version 1.6.38
  * QIOSMessageDialog::exec - work around 'windowsless' exec
  * QIosScreen: retain the right window
  * tst_Q{BitArray,ContiguousCache}: check not only count(), but size(), too
  * QIosTextResponder: stop using deprecated constants and type
  * qcompilerdetection.h: detect Coverity
  * Android: Fix Display.getRealMetrics deprecation
  * Fix broken Text rendering when noantialiased NativeRendering is used
  * forkfd: fix Clang 15 ATOMIC_VAR_INIT deprecation warning
  * eglfs: Add env.var. to disable the dedicated drmHandleEvent thread
  * doc: Don't put strings into QVector&lt;double&gt;
  * Remove focusProxyAndInputMethods from tst_QWidget
  * Bump version to 5.15.12
  * Update documentation of qWaitForWindowActive / qWaitForWindowExposed
  * QtHttp: Lower the severity of some log output
  * StyleSheetStyle: Fix color of placeholder texts in text edits
  * Android: Fix flickering on split screen mode
  * Update url to IAccessible2 Specification</changelog>
  <changelog author="alarrosa@suse.com" date="1704283200">- Update to version 5.15.12+kde147:
  * Http2: fix potential overflow in assemble_hpack_block()
    (bsc#1218413, CVE-2023-51714)
  * HPack: fix incorrect integer overflow check
  * HPack: fix a Yoda Condition</changelog>
  <changelog author="fvogt@suse.com" date="1708084800">- Update to version 5.15.12+kde151:
  * Improve KTX file reading memory safety (CVE-2024-25580, boo#1219996)
  * Revert "xcb: only set base size when it's valid"
  * Fix potential leak of QPropertyAnimation in QLineEditIconButton
  * QBitArray: correct inline keyword</changelog>
  <changelog author="alarrosa@suse.com" date="1720785600">- Add patch from upstream to fix a regression in the ODBC driver
  (bsc#1227513, QTBUG-112375):
  * 0001-QSQL-ODBC-fix-regression-trailing-NUL.patch
  * 0002-SQL-ODBC-Pass-correct-length-to-SQLColAttribute.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1722945600">- Add rebased upstream patch to delay any HTTP2 communication until
  encrypted() can be responded to (bsc#1227426, CVE-2024-39936):
  * 0001-HTTP2-Delay-any-communication-until-encrypted-can-be.patch
- Add upstream patch to fix a NULL pointer dereference via the
  function QXcbConnection::initializeAllAtoms() when there is
  anomalous behavior from the X server (bsc#1222120,
  CVE-2023-45935):
  * 0001-xcb-guard-a-pointer-before-usage.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756728000">- Add patch from upstream to fix a precondition violation in call
  to QByteArrayView::at() which can cause crashes (bsc#1243958,
  CVE-2025-5455):
  * 0001-qDecodeDataUrl-fix-precondition-violation-in-call-to.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756814400">- Add patch from upstream to initialize a member variable that was
  uninitialized under some circumstances:
  * 0001-QObjectPrivateSignal-initialize-all-members.patch
- Add patch from upstream to fix a crash when parsing a particular
  glyph in a particular font (QTBUG-124310):
  * 0001-Avoid-crash-in-font-distancefield-computation.patch
  * 0002-Fix-crash-in-font-distancefield-computation.patch
- Add patch from upstream to fix avoid repeatedly registering
  xsettings callbacks when switching cursor themes:
  * 0001-xcb-Avoid-repeatedly-registering-xsettings-callbacks-When.patch
- Add patch from upstream to check validity of RandR output info
  before using it (QTBUG-128906):
  * 0001-xcb-check-validity-of-RandR-output-info-before-using-it.patch
- Add patch from upstream to fix reparenting a window so it takes
  effect even if there are no other state changes to the window:
  * 0001-xcb-Sync-XCB-connection-after-reparenting-window.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756900800">- Add patch from upstream to fix a low performance when processing
  XML data in encodeText (bsc#1239896, CVE-2025-30348):
  * 0001-XML_QDom-speedup-encodeText.patch</changelog>
</package>
<package pkgid="786d9d0a052d89cacbb4d49810045a0d04fcc4b7cbf6800a9cf25b9127ade74c" name="libQt5KmsSupport-devel-static" arch="x86_64">
  <version epoch="0" ver="5.15.12+kde151" rel="150600.3.9.1"/>
  <changelog author="fvogt@suse.com" date="1678968000">- Update to version 5.15.8+kde183:
  * Add nullptr guard in QStyleSheetStyle::drawPrimitive(PE_PanelLineEdit)
  * QAbstractItemView: don't access invalid indexes on copy-key
  * Apply CVE-2023-24607-qtbase-5.15.diff (CVE-2023-24607,
    bsc#1209616)
  * QXcbConnection::getTimestamp: do not return stale timestamp
  * QToolButton: Elide text when constraints prevent from showing whole text
  * correctly set up ref counting in QThreadPool::tryStart(std::function)
  * Do not set Qt::ToolTip flag for QShapedPixmapWindow
  * Fix deletion order also for QImageReader/Writer::setDevice()
  * Fix deletion order in QImageReader/Writer destructors
  * QNetworkReply: Fix typos in the documentation
  * Doc: Fix typo in the online documentation template
  * Doc: Link to page documenting Qt trademarks in the copyright footer
  * [doc] Fix typo in QBuffer::setBuffer() description
  * qwindowsdrag: Fix typo in documentation
  * openglblacklists: Fix typo in description
  * qxcbscreen: Fix typo in documentation
  * Fix typos in SQL driver documentation
  * qxcbwindow.cpp: Fix sign-compare and another warnings
  * QToolButton: reimplement the fix for QTBUG-95255
  * QSysInfo::prettyProductName(): Add macOS Ventura product name
  * QSysInfo::prettyProductName(): add missing macOS product names
  * xcb: correctly disconnect xsettings callbacks
  * ibus: add SetCursorLocationRelative in InputContext.xml</changelog>
  <changelog author="fvogt@suse.com" date="1680523200">- Update to version 5.15.8+kde185:
  * QFSFileEngine: fix overflow bug when using lseek64
  * Add QImage null check when QOpenGLTexture converts
- Add patch to fix return key handling in QGroupBox on GNOME (bsc#1209364):
  * 0001-Revert-QGnomeTheme-Allow-Space-Return-Enter-and-Sele.patch
- Add patch to fix XInput2 events in big-endian X11 clients (bsc#1204883, QTBUG-105157):
  * big-endian-scroll.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1682078400">- Update to version 5.15.9+kde151, rebased upstream:
  * QCborValue: fix incorrect to{Array,Map} when the value is empty
  * QMargins: fix a missing "full stop" in the docs
  * QLibrary: restore translated string
  * QLibrary: fix possible arg() format clobbering
  * iOS: Use python3 for enumerating test target devices
  * Android: Treat ACTION_CANCEL as TouchCancelEvent
  * Doc: Fix broken formatting
  * QFileSystemEngine: fix potential formatting error
  * QString::asprintf: check that passing field widths as arguments works
  * Backport recent QFlags tests
  * network: Fix typos in documentation
  * Fix accuracy with screen composition
  * Doc: Update documentation for QElapsedTimer's in Windows
  * Document that QStandardPath::findExecutable works with absolute paths
  * macOS: Use native resize cursors for diagonal resize
  * Fix clipped glyphs in text rendering of QGraphicsTextItem
  * Change comparison data type to fix int overflow
  * Add missing Q_WEAK_OVERLOAD definition
  * Update QFileInfo docs to mention macOS aliases
  * Distinguish macOS aliases from normal symbolic links
  * Windows QPA: Fix frameless maximize on secondary screens
  * Rewrite tst_qdataurl as a data-driven test
  * Fix compilation for wasm
  * QIOSFileDialog/QIOSDocumentPickerController - handle dismissed view controller
  * Fix QDockWidget's dock area permissions after hovering
  * Fix C++20 ambiguous relational operators between QJsonValue{,Ref}
  * Android: make sure that orientationChange is reported after resize
  * Android: set all QScreen's geometry-related parameters together
  * Blacklist: test cases blacklisted in tst_QDBusConnection:
  * wasm:  fix issue with passing username/password to network request
  * macOS: Pass multi arch flags when linking qmake
  * QCocoaFileDialogHelper: Always enable symlinks and aliases to directories
  * Android: terminate argv passed to main() with nullptr
  * Update bundled libjpeg-turbo to version 2.1.3
  * ANGLE: Load the DirectX libraries from the system path directly
  * SQLite: Update SQLite to v3.37.2
  * Fix compiler warnings about unused parameters
  * Fix getsockopt option_value initial initialization
  * Http2: Fix redirect-handling
  * Android A11Y: Fix value rounding
  * Android A11Y: Announce value together with element name when focused
  * Android A11Y: handle valueChanged events
  * tst_QSystemSemaphore: give proper path to test-helper
  * QNX: Silence compiler warning by initializing variable
  * Update LICENSE.QT-LICENSE-AGREEMENT
  * winrt appxmanifest: Properly replace VCLibs version for newer MSVC versions
  * QAbstractSocket: Don't pretend pause and resume is a stack
  * Gui: test also depends for clipboard feature
  * QDesktopServices: deprecate destroying URL handlers w/o explicit unsetUrlHandler()
  * macOS: Respect QMAKE_APPLE_DEVICE_ARCHS when building qmake
  * HTTP: Make redirect response parsing more generic
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 20.04
  * Android A11Y: populate child elements when constructing node info
  * Fix issue where readyRead() could happen after disconnected()
  * QStringView: add missing constexpr so we can use is_constant_evaluated
  * Use Android's View.generateViewId() for generating ids for views/surfaces
  * Remove documentation of non-existing QAccessible state
  * Doc: Fix snippet to match actual QFileInfo behavior
  * Android: Re-focus focused accessibility node after orientation change
  * Android A11Y: execute C++ code on main Qt thread
  * Android: extract parentId for hidden object in advance
  * xcb: Show valuator atom names properly in categorized logging
  * Android: replace stacktrace with debug message in search for setService
  * Better document attaching a QFutureWatcher to a started QFuture
  * doc: Update GenericDataLocation location on iOS
  * BLACKLIST test_Gestures tests for RHEL-8.4
  * QPlainTestLogger: do not print "failure location" if there's no failure
  * QAbstractItemView: do not access invalid model indices (3/N)
  * Win32: always allow the event loop to be woken up by posted events
  * rhi: d3d11: Use __uuidof where we can
  * Don't QEXPECT_FAIL tst_QLineEdit::testQuickSelectionWithMouse on macOS ARM
  * Network: Emit authenticationRequired when using Ntlm
  * testlib: Disable window restoration on macOS in a non-persistent way
  * QAbstractItemView: do not access invalid model indices (2/N)
  * QAbstractItemView: do not access invalid model indices (1/N)
  * QAbstractItemView: code tidies
  * Update float16 part of TestLib selftest
  * QGuiApplication: constant-initialize lastCursorPosition
  * Blacklist tst_QFileSystemWatcher::signalsEmittedAfterFileMoved on all Windows versions
  * [Android]: Handle the screen name, modes and refreshRate properly
  * QVersionNumber: remove the "pure" attribute from commonPrefix()
  * QEvent: initialize the static userEventTypeRegistry constexprly
  * Let QXcbGlxWindow::createVisual fallback to QXcbWindow::createVisual
  * Android A11Y: fix content update notification when object is hidden
  * Android: explicitly remove accessibility focus when element is hidden
  * BLACKLIST tst_qfont for Red Hat 8.4 and Ubuntu 20.04
  * QtCore: includemocs
  * Fix memory leak in QtConcurrent::run when called with a NULL QThreadPool
  * INTEGRITY: Prevent deletion of virtual functions
  * QMake: replace a Q_ASSERT() with a Q_UNREACHABLE()
  * QTransform benchmark: measure what was promised
  * QStaticByteArrayMatcher: add a useful comment
  * QMacStyle: use the 'momentary push in' type for push buttons
  * qopengl.h: Move C header #include(s) out of the QT_NAMESPACE
  * Enable all supported 1.0 device features in QVulkanWindow
  * Fix queue passed to vkQueuePresent
  * QFusionStyle: don't draw an invalid outline for up/down buttons
  * Doc: Make QListIterator snippets more robust
  * QVersionNumber: don't detach() in rvalue QList/QVector ctor
  * QNetworkRequest: Document how Qt handles 301 and 302 status codes
  * Convert date-time to UTC before claiming it's in GMT
  * Remove execute permission from XML files
  * Add test case for style sheet selectors for enum properties
  * FreeType: allow falling back to synthesized bold if desired
  * Fix an assertion failure in massageAdjustedDateTime()
  * Relax tst_qvulkan::vulkanVersionRequest to make it compatible with 1.1
  * Doc: Replace "C:Documents and Settings" paths
  * QOrderedMutexLocker: fix compilation with C++11
  * QHttpNetworkConnection: Always set proxy settings to all channels
  * Add a markdown writer test for a checklist item ending with `code`
  * Use QTextCharFormat::fontFixedPitch to remember Markdown backtick spans
  * QWizardLayoutInfo: make == and != operators const
  * Revert "Android: Fix screen flicker issues"
  * macOS: Handle momentum scroll NSEventPhaseBegan when scroll had ended
  * SQLite: Update SQLite to v3.37.0
  * Update copyright year to 2022
  * QTzTimeZonePrivate: use ctor delegation instead of init()
  * QTzTimeZonePrivate: fix permanently-detaching m_icu
  * tst_QGraphicsView: fix memleak
  * Doc: Update external links to Qt Creator Manual
  * macOS: assume an unidentified tablet device is a stylus
  * tst_QItemModel: fix memleaks
  * tst_qanimationgroup: fix memleaks
  * QAbstractAnimation: add missing forward-declaration
  * [doc] QCoreApplication::installTranslator() doesn't take ownership
  * tst_qtranslator: fix memleak
  * QTestData: fix streaming of u8 string literals in C++20 mode
  * QThread/Unix: extract duplicate code
  * QWindowPrivate: fix inconsistent inline on some methods
  * tst_QStringList: check that join(u'0') embeds NULs
  * macOS: Sanitize scroll deltas for NSEventPhaseCancelled
  * tst_qsharedmemory: skip readOnly() test under asan
  * QXmlStreamReader: update test distribution
  * QZipReader: update to unzip partly broken archives
  * Deliver context menu event with correct coordinates to widgets in popups
  * QTextHtmlParser: fix prefix lookahead and html comments
  * QtConcurrent::run crashes on program exit
  * tst_QPropertyAnimation: fix leaks occurring under normal operation
  * tst_QPropertyAnimation: fix wrong comment
  * QLogging: fix potential missing NUL-terminator when calling OutputDebugString
  * Fix qt_scrollRectInImage when scrolling outside of the image
- Commits dropped by the rebase:
  * Fix compile with Qt5: Use QString::mid instead of QString::sliced
  * Restore C++11 compatibility after e8b9f4c28d3ab5e960dc54f2dc0c4b749b0b50e0
  * QDateTime: Don't require c++17</changelog>
  <changelog author="fvogt@suse.com" date="1683633600">- Amend patch to fix mouse grabbing as well (bsc#1211024):
  * big-endian-scroll.patch</changelog>
  <changelog author="fvogt@suse.com" date="1684929600">- Update to version 5.15.9+kde154:
  * Hsts: match header names case insensitively (CVE-2023-32762,
    QTBUG-113392, bsc#1211797)
  * Fix specific overflow in qtextlayout (CVE-2023-32763,
    QTBUG-113337, bsc#1211798)
  * QDnsLookup/Unix: make sure we don't overflow the buffer
    (CVE-2023-33285, boo#1211642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1686657600">- Update to version 5.15.10+kde129, rebased upstream:
  * Ssl: Copy the on-demand cert loading bool from default config
  * Schannel: Reject certificate not signed by a configured CA certificate (boo#1211994, CVE-2023-34410)
  * qnetworkreplyfileimpl_p.h: fix header guard name
  * Revert "Draw the cursor considering the descent is 0"
  * Use pkgconfig in order to find libproxy configuration
  * Upgrade PCRE2 to 10.40
  * Android A11Y: handle LocationChanged event only for focused element
  * Port binary JSON to new special integer bitfields
  * INTEGRITY: enable C99 globally
  * QObject: mark two error reporting functions COLD
  * Endian: Provide special integer bitfield unions
  * Android: set useLegacyPackaging to true in build.gradle
  * QWidgetTextControl: port to new-style connects (faster)
  * Sync qxmlstream.g with qxmlstreamparser_p.h [1/2]: switched lines
  * tst_QNetworkReply try stabilize autoDeleteReplies tests
  * Remove duplicated include for &lt;limits&gt;
  * Fix recursion crash when calling setStyleSheet with `qproperty-styleSheet`
  * qwindowsxpstyle: Fix typos in documentation
  * Correct prefix reported for end element in QXmlStreamReader
  * Android A11Y: Add supported role infos to A11yNodeInfo
  * Fix handling of DateTime values in QSettings
  * Fix off-by-one for "typically" lowest value INT_MIN
  * xml: Fix typos in documentation
  * QWindowsWindow: Fix typo in documentation
  * includemocs (updated script)
  * widgets: Fix typos in documentation
  * cocoa: Fix typo in debug messages
  * Only scroll QMenu when there is a valid active action
  * QTimer: Add note in documentation
  * Fix QListView assert when the last row is moved in IconMode
  * QFileDialog: Fix adding default suffix when file path contains dot
  * QLineEdit: account for the placeholderText when computing lineRect
  * QFileDialog::saveFileContent crashes on accept
  * QCompleter: QCompleter unexpectedly changes QLineEdit text
  * Fix build error on iOS with the configure option -qtnamespace
  * Draw the cursor considering the descent is 0
  * Remove pure-virtual-signals.h include from tst_moc.cpp
  * plugins: image formats - fix odr violation
  * dbus: Fix typos
  * qwindowsdialoghelpers: Fix typo in documentation
  * QTableView: Document the customizations applied to QHeaderView
  * Unicodetools: compile
  * eglfs_x11: Fix running flag linkage
  * qcompilerdetection.h: add Q_CC_{GNU,MSVC,CLANG}_ONLY macros
  * Fix CMake warning about "missing closing ' quote"
  * Fix alignment of next/prev links in offline style
  * QtDBus: includemocs
  * Image Plugins: includemocs(-ish)
  * QtGui: includemocs
  * QXcbNativeInterface: remove unused field m_sysTraySelectionAtom
  * Windows QPA: Fix slowdown with large table/tree views with accessibility
  * Macstyle: fix the text color on the disabled button
  * QMacStyle: fix tool buttons (in checked mode)
  * QTeamCityLogger: fix .arg() placeholder injection
  * QAbstractTestLogger: disable copying
  * Fix errorMessageFromComError()
  * QtNetwork: includemocs
  * AppleUnifiedLogger: Remove manually managed os_log_t cache
  * examples: add WindowStaysOnBottomHint into preview text
  * QSharedPointer: Use matching new/delete
  * QIbusPlatformInputContextPlugin: includemocs
  * QGtk3ThemePlugin: includemocs
  * QTuioTouchPlugin: includemocs
  * QtWidgets: includemocs v2022
  * QMYSQLDriverPlugin: includemocs
  * QtDeviceDiscoverySupportPrivate: includemocs
  * QLinuxFbIntegrationPlugin: includemocs
  * QtPrintSupport: includemocs
  * QSQLiteDriverPlugin: includemocs
  * QtFbSupportPrivate: includemocs
  * QXdgDesktopPortalThemePlugin: includemocs
  * QtTest: includemocs
  * QComposePlatformInputContextPlugin: includemocs
  * QtSql: includemocs
  * QVncIntegrationPlugin: includemocs
  * Fix backingstore fractional DPR glitches for widgets in child windows
  * Include &lt;limits&gt; where std::numeric_limits is used
  * QtInputSupportPrivate: includemocs
  * Document the default value of QSFPM::sortOrder()
  * Better document how to enable sorting in QSPFM
  * Correct documentation of INI format's loss of type information
  * Android: add missing properties in AndroidManifest.xml
  * Fix assertion failure when parsing a doubly-invalid date-time text
  * Windows QPA: Correct mistake when calculating minmaxinfo
  * Android: replace ndk.dir with android.ndkVersion in build.gradle
  * Android: remove the old copy of gradle.properties after reading it
  * CMake Android Support: Fix signing of APKs
  * Android: fix A11Y object description
  * macOS: Fix warning about comparing different types in QCocoaScreen::isOnline
  * Fix qmake build on FreeBSD
  * Update documentation of enum Qt::DockWidgetArea
  * xcb: recreate xcb window under some conditions
  * objc_namespace: Add support for universal binaries
  * objc_namespace: Fix misspelled argument for silencing output
  * objc_namespace: Update parsing logic to account for otool changes
  * Blacklist passwordAuth for Ubuntu 20.04
  * Android: wrap QAndroidInputContext's m_focusObject in a QPointer
  * Fix compilation with GCC 12 (and on Fedora 35 and newer)
  * Chip example: fix an accidental bool-&gt;int conversion when using PMF connections
  * qmake: Add support for C++23
  * Android: use BCP 47 tag to create a correct Locale for QTimeZone::displayName()
  * QDateTime: fix adjusted datetime handling
  * Fix crash in tst_qmltc_examples on Android
  * macOS: Remove dead code for focus ring handling in Mac style
  * Detach for colortransforms of indexed formats
  * tst_QTcpSocket::connectToHostError - handle possible timeouts
  * CoreText: Avoid populating font family aliases if family was populated
  * Graphicsview: Avoid background clearing glitches under fractional DPR
  * Windows QPA: Avoid slowdown with UI Automation name change notification
  * Windows QPA: Avoid sending accessibility notifications before activation
  * Windows: Fix potential crash when retrieving default printer
  * Make Ubuntu with its non-standard security level happy
  * Android: Blacklist failing tests on tst_QGraphicsProxyWidget
  * Update LA 4.4.1
  * iOS A11Y: Set more accessibilityTraits
  * QNX: Fix compiler warning by when FEATURE_clipboard is not enabled
  * Document that native file dialogs might not show a title
  * Doc: Remove mentionings of overflows from QElapsedTimer
  * QTextMarkdownImporter: don't apply text char format to list item block
- Commits dropped by the rebase:
  * QBuffer: add missing &lt;limits&gt; include
  * Fix developer build</changelog>
  <changelog author="gmbr3@opensuse.org" date="1687953600">- Change %_libqt5_libexecdir to %_libexecdir/qt5 (bsc#1174075)</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch icu-devel requires to pkgconfig to allow switching libicu
  versions</changelog>
  <changelog author="fvogt@suse.com" date="1695902401">- Update to version 5.15.10+kde159 (bsc#1214327, CVE-2023-37369):
  * Fix CVE-2023-43114
  * QMimeDatabase: fix detection of pattern conflict in different prefixes
  * Fix highdpi conversion of QTabletEvent coordinates on xcb
  * widget: set WA_X11NetWmWindowType* after xcb window was created
  * Fix crash when setting override cursor on multiple clients
  * QAccessibleWidget: Remove pointless ZWSP in warning message
  * Android A11Y: Fix deadlock in QtAndroidAccessibility::runInObjectContext()
  * Correctly parse non BMP char refs in the sax parser
  * Clear the _X version of alongside the enum deprecator
  * Fix UB (signed char passed to &lt;cctype&gt; function)
  * Qt3DRender: includemocs
  * Fix capitalization error in auto-generated qdbusmacros.h include
  * QColorDialog: Ignore mouse move events when no mouse button is pressed
  * QHostInfo: fix remaining slotObj leaks
  * QXmlStreamReader: Raise error on unexpected tokens (CVE-2023-38197,
    QTBUG-92113, QTBUG-95188, bsc#1213326)
  * QTextLayout: Reconsider cursor drawing on TextObject
  * Ensure consistent cursor width under fractional scaling
  * Fix QTextEdit cursor rectangle vertical positioning
  * Return 0 in QWindow::winId in case of failed platform window creation
  * Doc: note QWindow::winId() will cause platform window creation
  * QSslDiffieHellmanParameters: fix mem-leak
  * QHostInfo: fix leaking slot object
  * Make sure we don't count down past 0 QT_FATAL_CRITICALS
  * QLogging: DRY isFatal(QtMsgType)
  * tst_QXmlStream: remove unneeded _ba UDLs
  * Fix typo in QXmlStreamReader error message
  * QXmlStreamReader: make fastScanName() indicate parsing status to callers
  * QXmlStreamReader: change fastScanName() to take a Value*
  * Fix Croatia's currency
  * SSL: upgrade the default DH parameters</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1696593600">- Update to version 5.15.11+kde134, rebased upstream:
  * Revert "Windows QPA: Add support to UiaRaiseNotificationEvent()"
  * FileChooser portal: Make sure filter.name is not empty
  * QPersistentModelIndex: fix UB (op&lt; on unrelated pointers)
  * Avoid crash when keysymToQtKey(keysym, Qt::ControlModifier) is called
  * a11y atspi: translate coords for GetOffsetAtPoint the right way
  * a11y atspi: Take dialog into account as top-level window
  * a11y atspi: Fix incorrect use of x instead of y position
  * macOS: Handle asynchronous deminiaturizing of windows
  * QTranslator: generalize a UNIX-only path
  * iOS, input panel: be more careful before enabling QIOSKeyboardListener
  * Android: Fix flickering on window resize and show keyboard
  * Android A11Y: Check for active surface before calling into native code
  * xcb: Delete touch points without target windows
  * Blacklist 1 tests in tst_QDBusConnection on ubuntu-20.04
  * Fix CMake builds without ANDROID_SDK
  * Blacklist 2 tests in tst_Http2 on ubuntu-20.04
  * Blacklist 1 tests in tst_QSqlQuery on macos
  * Defer creating the special shaders in the texture blitter
  * tst_QSslSocket::serverCipherPreferencies - fix for OpenSSL v3
  * QTemporaryFile: document rename() differences from QFile
  * Doc: 3rd party: Fix reference to FreeType LICENSE.txt
  * Update bundled libjpeg-turbo to version 2.1.4
  * tst_QSsSocket: fix verifyClientCertificate with OpenSSL 3
  * tst_QSslSocket: regenerate certificate used for setLocalCertificateChain
  * tst_QSslSocket::protocolServerSide - make it work with OpenSSL v3
  * tst_QSslSocket::oldErrorsOnSocketReuse - make it work with OpenSSL v3
  * Update zconf.h prefixes to match zlib v1.2.12 update
  * xcb: fix D&amp;D in same xembed client
  * xcb: use global coordinates for position of D&amp;D for xembed client
  * Doc: Update QMetaType::metaObject() descriptions
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 22.04
  * BLACKLIST tst_qfont for Ubuntu 22.04
  * BLACKLIST tst_QMenuBar::check_menuPosition for Ubuntu 22.04
  * tst_QDtls::verifyClientCertficiate - update certs for OpenSSL v3
  * QSslCertificate::toText(): add a file to compare against
  * Fix the spelling of the word "combination"
  * tst_QSslCertificate::pkcs12 - skip the test if OpenSSL version &gt;= 3
  * Android A11Y: Fix TalkBack scrolling behavior
  * Android A11Y: Notify android about scroll events
  * QCocoaDrag: don't add pasteboard items with non-absolute URLs
  * QDirPrivate: pass input QList by cref
  * tst_qbytearray: remove qCompress_data for QT_NO_COMPRESS
  * QDeviceDiscoveryUDev: use NSDMI
  * QAuthenticator: Fix crash when using NTLM / Negotiate
  * Provide a native interface instance in minimal platform plugin
  * Android: document the supported clipboard mimetypes
  * Windows: Account for not finding child windows when calling ChildWindowFromPointEx
  * iOS: Send touch events asynchronously to avoid deadlocking UIKit event loop
  * Disable bitcode for iOS
  * macOS: Ignore deprecation for ReleaseIconRef
  * BLACKLIST tst_QApplication::sendEventsOnProcessEvents for Ubuntu 22.04
  * Convert Latin1 to UTF-16 before passing to ICU API
  * Doc: Remove repetition of word in text
  * eglfs: Fix screen cloning when atomic is enabled
  * Fix printing of dpr&gt;1 images on Windows
  * QHttp: Fix handling of redirect loaded from cache
  * Doc: Fix return type of QLEInteger/QBEInteger post-in/decrement ops
  * qmake: Fix installation of separate debug info for plugins
  * iOS: ensure we close inputpanel after clearing focusobject
  * Convert Latin1 to UTF-16 before passing to ICU API
  * qputenv: defend against non-NUL-terminated QByteArray values
  * QFontSubset: remove unused glyphName() overload
  * Statically assert that the __mips_dsp code is only active on 32-bit
  * QGtk3Theme: Ensure gtk uses the same windowing system as Qt
  * tst_QFocusFrame: fix -Wparantheses
  * Sync Vulkan device features between QVulkanWindow and QRhi
  * SQLite: Update SQLite to v3.39.2
  * Update freetype to 2.12.1
  * corelib: Fix typos in documentation
  * QAtomicInteger docs: mention bool and char8_t as 8-bit types
  * qgraphicsitem_cast: replace 0 with nullptr
  * Doc: Hide weak overload template magic from documentation
  * Revert "QDateTime: fix adjusted datetime handling"
  * Fix select handles disappears issues
  * tst_QSslKey: prepare for the migration to OpenSSL v3
  * tst_qnetworkreply: replace server.pem/key pair
  * Disable unit testing setting up QTcpServer on special Apple interfaces
  * qmake/msbuild: Turn off "use full paths in diagnostics" by default
  * qmake/msbuild: Support all /DEBUG:xxx linker options
  * qmake/msbuild: Support all /LTCG:xxx options
  * Android A11Y: Add content change type to content change event
  * Enabler for fractional scaling of text in Qt Quick
  * macOS: Override logical DPI to 72
  * Add QDom internalSubset implementation
  * Fix tst_AndroidAssets, broken by recent changes on assets load speed
  * Android: Improve loading speed of individual assets
  * Darwin: Replace deprecated symbol kIOMasterPortDefault with equivalent
  * macOS: Remove code for handling logical DPI changes
  * Fix an incorrect invocation of llvm-readobj
  * macOS: Ignore deprecation for kOnSystemDisk icon domain
  * Copy only files that belongs to QML module
  * Android: fix wrong position of cursor handle and editpopup menu in split screen
  * Doc: Document QML_IMPORTS_PATH and QMLPATHS
  * Add the missing RCC_DIR to '.qrc' paths when generating deployment settings
  * Android: Fix the offset of the EditPopupMenu
  * xcb: update xkb_state mask as much as possible
  * QDom: Stop treating non-BMP characters as invalid
  * Android 13: Fix warnings on starting an application
  * qxkbcommon: Map Super/Hyper to Meta early enough to have an effect
  * macOS: Ignore update requests for offline displays
  * macOS: Avoid recursively updating screens when window moves screen
  * qmake/MinGW: Install separate debug info of DLLs next to the DLL
  * QMainWindow: fix restoreState() for toolbars
  * Make two QDT benchmarks data-driven and add more rows
  * Fix doc and example of QLoggingCategory::installCategory()
  * qmake: Document Xcode behavior when bundling translation files
  * Android: Fix missing import
  * QByteArray: more GCC 12 -Werror=array-bound whack-a-mole
  * CMake: Fix android sdk version propagation
  * Restore C++20-deprecated mixed-enum bitwise operators
  * Android: Fix ANR when QtService and QtActivity load in same process
  * Fix restart QtActivity
  * QArrayData::data(): do type-punning via quintptr, not char *
  * QIOSTextResponder: recreate responder upon reset
  * QSslSocket: make it work with OpenSSL v3
  * QFileSystemModelPrivate: de-inline ctor and dtor
  * Network: update Public Suffix List
  * macOS: Ensure proper quoting when calling otool in objc_namespace script
  * QKeySequence: Fix the one-off error in the mac glyph array size
- Commits dropped by the rebase:
  * Apply CVE-2022-27404-27405-27406-qtbase-5.15.diff
  * QArrayData: fix UB via reinterpret_cast (crash with FORTIFY_SOURCE=3)
  * Adapt for q_EVP_PKEY_base_id → q_EVP_PKEY_get_base_id rename in OpenSSL 3
  * Don't use a deprecated function if built/linked with OpenSSL v3</changelog>
  <changelog author="christophe@krop.fr" date="1696593601">- Enable the experimental native painting feature to improve
  remote desktop performances (boo#1214915)
  exporting QT_XCB_NATIVE_PAINTING is required to use the feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1697716800">- Update to version 5.15.11+kde138:
  * QLibraryPrivate: Actually merge load hints
  * QPluginLoader: report the right load hints
  * xkb: fix build with libxkbcommon 1.6.0 and later
  * a11y atspi: Map ButtonMenu role to AT-SPI equivalent</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1703851200">- Update to version 5.15.12+kde144, rebased upstream:
  * QMimeDatabase: handle buggy type definitions with circular inheritance
  * xcb: only set base size when it's valid
  * QPixmapCache: fix leaking of QStrings and Keys on clear()
  * OpenFile portal: do not use O_PATH fds
  * QSystemTrayIcon: properly disconnect old menu in setContextMenu()
  * Guard QTabBar against nested event processing during moving tabs
  * QDial: don't crash when min==max and setting a value != min &amp; max
  * QStandardItemModel: don't leak in mimeData()
  * SQL/MySQL: properly initialize variable
  * QWidgetTextControl: ignore invalid input method event
  * Update the LGPL license header
  * SQL/MySQL: fix handling of json column
  * Remove QMAKE_RANLIB and QMAKE_LINK_SHLIB from android/default_pre.prf
  * macOS: Fix less common writing systems on Catalina and later
  * Blacklist 1 tests in tst_QFtp on ubuntu-20.04
  * Update bundled libpng to version 1.6.39
  * Android: Fix signing of APKs that are generated when an AAB is also built
  * Update bundled zlib to version 1.2.13
  * doc: update the limitation of QSystemTrayIcon on X11
  * Blacklist 1 tests in tst_QTimer on ubuntu-20.04
  * Add benchmarks for QLocale number parsing
  * Add benchmarks for QString number parsing
  * Android: Fix incorrect fullscreen dimensions
  * Gtk3Theme: set XCURSOR_SIZE and XCURSOR_THEME for wayland sessions
  * xcb: Flush Display when processing xcb events
  * xcb: Add xlib wrapper for XFlush()
  * QHostAddress: Fix incorrect comparison against 'Any'
  * QSsl[OpenSSL/Android]: Fix hardcoded 1_1 suffix
  * BLACKLIST: tst_QApplication::sendEventsOnProcessEvents for RHEL 9.0
  * QMacStyle: do not set white color for grayed out button
  * Work round macOS's omission of en_DE from its own uiLanguages()
  * Suppress a deprecation warning in tst_QDateTime::toString_enumformat()
  * QJsonValue: fix incorrect to{Array,Object} when the value is empty
  * QGtk3Dialog: remove the #include for empty moc
  * Remove unneeded QWindow from QGtk3Dialog
  * tst_QSslSocket: Delete sslOptions
  * tst_QSslServer: Make the in-process server use TLS1.2
  * Android: fix Gradle warning about using enableUncompressedNativeLibs
  * Mention  limitation of QDir::drives() on Windows
  * QFileSystemEngine/Win: fix incorrect buffer size in currentPath()
  * Android: properly retrieve mime type of uri to for openUrl()
  * Android: Fix clipboard issue with urls
  * Android: Add a way to disable accessibility via an environment var
  * Update bundled libpng to version 1.6.38
  * QIOSMessageDialog::exec - work around 'windowsless' exec
  * QIosScreen: retain the right window
  * tst_Q{BitArray,ContiguousCache}: check not only count(), but size(), too
  * QIosTextResponder: stop using deprecated constants and type
  * qcompilerdetection.h: detect Coverity
  * Android: Fix Display.getRealMetrics deprecation
  * Fix broken Text rendering when noantialiased NativeRendering is used
  * forkfd: fix Clang 15 ATOMIC_VAR_INIT deprecation warning
  * eglfs: Add env.var. to disable the dedicated drmHandleEvent thread
  * doc: Don't put strings into QVector&lt;double&gt;
  * Remove focusProxyAndInputMethods from tst_QWidget
  * Bump version to 5.15.12
  * Update documentation of qWaitForWindowActive / qWaitForWindowExposed
  * QtHttp: Lower the severity of some log output
  * StyleSheetStyle: Fix color of placeholder texts in text edits
  * Android: Fix flickering on split screen mode
  * Update url to IAccessible2 Specification</changelog>
  <changelog author="alarrosa@suse.com" date="1704283200">- Update to version 5.15.12+kde147:
  * Http2: fix potential overflow in assemble_hpack_block()
    (bsc#1218413, CVE-2023-51714)
  * HPack: fix incorrect integer overflow check
  * HPack: fix a Yoda Condition</changelog>
  <changelog author="fvogt@suse.com" date="1708084800">- Update to version 5.15.12+kde151:
  * Improve KTX file reading memory safety (CVE-2024-25580, boo#1219996)
  * Revert "xcb: only set base size when it's valid"
  * Fix potential leak of QPropertyAnimation in QLineEditIconButton
  * QBitArray: correct inline keyword</changelog>
  <changelog author="alarrosa@suse.com" date="1720785600">- Add patch from upstream to fix a regression in the ODBC driver
  (bsc#1227513, QTBUG-112375):
  * 0001-QSQL-ODBC-fix-regression-trailing-NUL.patch
  * 0002-SQL-ODBC-Pass-correct-length-to-SQLColAttribute.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1722945600">- Add rebased upstream patch to delay any HTTP2 communication until
  encrypted() can be responded to (bsc#1227426, CVE-2024-39936):
  * 0001-HTTP2-Delay-any-communication-until-encrypted-can-be.patch
- Add upstream patch to fix a NULL pointer dereference via the
  function QXcbConnection::initializeAllAtoms() when there is
  anomalous behavior from the X server (bsc#1222120,
  CVE-2023-45935):
  * 0001-xcb-guard-a-pointer-before-usage.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756728000">- Add patch from upstream to fix a precondition violation in call
  to QByteArrayView::at() which can cause crashes (bsc#1243958,
  CVE-2025-5455):
  * 0001-qDecodeDataUrl-fix-precondition-violation-in-call-to.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756814400">- Add patch from upstream to initialize a member variable that was
  uninitialized under some circumstances:
  * 0001-QObjectPrivateSignal-initialize-all-members.patch
- Add patch from upstream to fix a crash when parsing a particular
  glyph in a particular font (QTBUG-124310):
  * 0001-Avoid-crash-in-font-distancefield-computation.patch
  * 0002-Fix-crash-in-font-distancefield-computation.patch
- Add patch from upstream to fix avoid repeatedly registering
  xsettings callbacks when switching cursor themes:
  * 0001-xcb-Avoid-repeatedly-registering-xsettings-callbacks-When.patch
- Add patch from upstream to check validity of RandR output info
  before using it (QTBUG-128906):
  * 0001-xcb-check-validity-of-RandR-output-info-before-using-it.patch
- Add patch from upstream to fix reparenting a window so it takes
  effect even if there are no other state changes to the window:
  * 0001-xcb-Sync-XCB-connection-after-reparenting-window.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756900800">- Add patch from upstream to fix a low performance when processing
  XML data in encodeText (bsc#1239896, CVE-2025-30348):
  * 0001-XML_QDom-speedup-encodeText.patch</changelog>
</package>
<package pkgid="00c999f87676319de9d1787a9cd4c6260924a3366db1e67ce389c55d32e08716" name="libQt5KmsSupport-private-headers-devel" arch="noarch">
  <version epoch="0" ver="5.15.12+kde151" rel="150600.3.9.1"/>
  <changelog author="fvogt@suse.com" date="1678968000">- Update to version 5.15.8+kde183:
  * Add nullptr guard in QStyleSheetStyle::drawPrimitive(PE_PanelLineEdit)
  * QAbstractItemView: don't access invalid indexes on copy-key
  * Apply CVE-2023-24607-qtbase-5.15.diff (CVE-2023-24607,
    bsc#1209616)
  * QXcbConnection::getTimestamp: do not return stale timestamp
  * QToolButton: Elide text when constraints prevent from showing whole text
  * correctly set up ref counting in QThreadPool::tryStart(std::function)
  * Do not set Qt::ToolTip flag for QShapedPixmapWindow
  * Fix deletion order also for QImageReader/Writer::setDevice()
  * Fix deletion order in QImageReader/Writer destructors
  * QNetworkReply: Fix typos in the documentation
  * Doc: Fix typo in the online documentation template
  * Doc: Link to page documenting Qt trademarks in the copyright footer
  * [doc] Fix typo in QBuffer::setBuffer() description
  * qwindowsdrag: Fix typo in documentation
  * openglblacklists: Fix typo in description
  * qxcbscreen: Fix typo in documentation
  * Fix typos in SQL driver documentation
  * qxcbwindow.cpp: Fix sign-compare and another warnings
  * QToolButton: reimplement the fix for QTBUG-95255
  * QSysInfo::prettyProductName(): Add macOS Ventura product name
  * QSysInfo::prettyProductName(): add missing macOS product names
  * xcb: correctly disconnect xsettings callbacks
  * ibus: add SetCursorLocationRelative in InputContext.xml</changelog>
  <changelog author="fvogt@suse.com" date="1680523200">- Update to version 5.15.8+kde185:
  * QFSFileEngine: fix overflow bug when using lseek64
  * Add QImage null check when QOpenGLTexture converts
- Add patch to fix return key handling in QGroupBox on GNOME (bsc#1209364):
  * 0001-Revert-QGnomeTheme-Allow-Space-Return-Enter-and-Sele.patch
- Add patch to fix XInput2 events in big-endian X11 clients (bsc#1204883, QTBUG-105157):
  * big-endian-scroll.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1682078400">- Update to version 5.15.9+kde151, rebased upstream:
  * QCborValue: fix incorrect to{Array,Map} when the value is empty
  * QMargins: fix a missing "full stop" in the docs
  * QLibrary: restore translated string
  * QLibrary: fix possible arg() format clobbering
  * iOS: Use python3 for enumerating test target devices
  * Android: Treat ACTION_CANCEL as TouchCancelEvent
  * Doc: Fix broken formatting
  * QFileSystemEngine: fix potential formatting error
  * QString::asprintf: check that passing field widths as arguments works
  * Backport recent QFlags tests
  * network: Fix typos in documentation
  * Fix accuracy with screen composition
  * Doc: Update documentation for QElapsedTimer's in Windows
  * Document that QStandardPath::findExecutable works with absolute paths
  * macOS: Use native resize cursors for diagonal resize
  * Fix clipped glyphs in text rendering of QGraphicsTextItem
  * Change comparison data type to fix int overflow
  * Add missing Q_WEAK_OVERLOAD definition
  * Update QFileInfo docs to mention macOS aliases
  * Distinguish macOS aliases from normal symbolic links
  * Windows QPA: Fix frameless maximize on secondary screens
  * Rewrite tst_qdataurl as a data-driven test
  * Fix compilation for wasm
  * QIOSFileDialog/QIOSDocumentPickerController - handle dismissed view controller
  * Fix QDockWidget's dock area permissions after hovering
  * Fix C++20 ambiguous relational operators between QJsonValue{,Ref}
  * Android: make sure that orientationChange is reported after resize
  * Android: set all QScreen's geometry-related parameters together
  * Blacklist: test cases blacklisted in tst_QDBusConnection:
  * wasm:  fix issue with passing username/password to network request
  * macOS: Pass multi arch flags when linking qmake
  * QCocoaFileDialogHelper: Always enable symlinks and aliases to directories
  * Android: terminate argv passed to main() with nullptr
  * Update bundled libjpeg-turbo to version 2.1.3
  * ANGLE: Load the DirectX libraries from the system path directly
  * SQLite: Update SQLite to v3.37.2
  * Fix compiler warnings about unused parameters
  * Fix getsockopt option_value initial initialization
  * Http2: Fix redirect-handling
  * Android A11Y: Fix value rounding
  * Android A11Y: Announce value together with element name when focused
  * Android A11Y: handle valueChanged events
  * tst_QSystemSemaphore: give proper path to test-helper
  * QNX: Silence compiler warning by initializing variable
  * Update LICENSE.QT-LICENSE-AGREEMENT
  * winrt appxmanifest: Properly replace VCLibs version for newer MSVC versions
  * QAbstractSocket: Don't pretend pause and resume is a stack
  * Gui: test also depends for clipboard feature
  * QDesktopServices: deprecate destroying URL handlers w/o explicit unsetUrlHandler()
  * macOS: Respect QMAKE_APPLE_DEVICE_ARCHS when building qmake
  * HTTP: Make redirect response parsing more generic
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 20.04
  * Android A11Y: populate child elements when constructing node info
  * Fix issue where readyRead() could happen after disconnected()
  * QStringView: add missing constexpr so we can use is_constant_evaluated
  * Use Android's View.generateViewId() for generating ids for views/surfaces
  * Remove documentation of non-existing QAccessible state
  * Doc: Fix snippet to match actual QFileInfo behavior
  * Android: Re-focus focused accessibility node after orientation change
  * Android A11Y: execute C++ code on main Qt thread
  * Android: extract parentId for hidden object in advance
  * xcb: Show valuator atom names properly in categorized logging
  * Android: replace stacktrace with debug message in search for setService
  * Better document attaching a QFutureWatcher to a started QFuture
  * doc: Update GenericDataLocation location on iOS
  * BLACKLIST test_Gestures tests for RHEL-8.4
  * QPlainTestLogger: do not print "failure location" if there's no failure
  * QAbstractItemView: do not access invalid model indices (3/N)
  * Win32: always allow the event loop to be woken up by posted events
  * rhi: d3d11: Use __uuidof where we can
  * Don't QEXPECT_FAIL tst_QLineEdit::testQuickSelectionWithMouse on macOS ARM
  * Network: Emit authenticationRequired when using Ntlm
  * testlib: Disable window restoration on macOS in a non-persistent way
  * QAbstractItemView: do not access invalid model indices (2/N)
  * QAbstractItemView: do not access invalid model indices (1/N)
  * QAbstractItemView: code tidies
  * Update float16 part of TestLib selftest
  * QGuiApplication: constant-initialize lastCursorPosition
  * Blacklist tst_QFileSystemWatcher::signalsEmittedAfterFileMoved on all Windows versions
  * [Android]: Handle the screen name, modes and refreshRate properly
  * QVersionNumber: remove the "pure" attribute from commonPrefix()
  * QEvent: initialize the static userEventTypeRegistry constexprly
  * Let QXcbGlxWindow::createVisual fallback to QXcbWindow::createVisual
  * Android A11Y: fix content update notification when object is hidden
  * Android: explicitly remove accessibility focus when element is hidden
  * BLACKLIST tst_qfont for Red Hat 8.4 and Ubuntu 20.04
  * QtCore: includemocs
  * Fix memory leak in QtConcurrent::run when called with a NULL QThreadPool
  * INTEGRITY: Prevent deletion of virtual functions
  * QMake: replace a Q_ASSERT() with a Q_UNREACHABLE()
  * QTransform benchmark: measure what was promised
  * QStaticByteArrayMatcher: add a useful comment
  * QMacStyle: use the 'momentary push in' type for push buttons
  * qopengl.h: Move C header #include(s) out of the QT_NAMESPACE
  * Enable all supported 1.0 device features in QVulkanWindow
  * Fix queue passed to vkQueuePresent
  * QFusionStyle: don't draw an invalid outline for up/down buttons
  * Doc: Make QListIterator snippets more robust
  * QVersionNumber: don't detach() in rvalue QList/QVector ctor
  * QNetworkRequest: Document how Qt handles 301 and 302 status codes
  * Convert date-time to UTC before claiming it's in GMT
  * Remove execute permission from XML files
  * Add test case for style sheet selectors for enum properties
  * FreeType: allow falling back to synthesized bold if desired
  * Fix an assertion failure in massageAdjustedDateTime()
  * Relax tst_qvulkan::vulkanVersionRequest to make it compatible with 1.1
  * Doc: Replace "C:Documents and Settings" paths
  * QOrderedMutexLocker: fix compilation with C++11
  * QHttpNetworkConnection: Always set proxy settings to all channels
  * Add a markdown writer test for a checklist item ending with `code`
  * Use QTextCharFormat::fontFixedPitch to remember Markdown backtick spans
  * QWizardLayoutInfo: make == and != operators const
  * Revert "Android: Fix screen flicker issues"
  * macOS: Handle momentum scroll NSEventPhaseBegan when scroll had ended
  * SQLite: Update SQLite to v3.37.0
  * Update copyright year to 2022
  * QTzTimeZonePrivate: use ctor delegation instead of init()
  * QTzTimeZonePrivate: fix permanently-detaching m_icu
  * tst_QGraphicsView: fix memleak
  * Doc: Update external links to Qt Creator Manual
  * macOS: assume an unidentified tablet device is a stylus
  * tst_QItemModel: fix memleaks
  * tst_qanimationgroup: fix memleaks
  * QAbstractAnimation: add missing forward-declaration
  * [doc] QCoreApplication::installTranslator() doesn't take ownership
  * tst_qtranslator: fix memleak
  * QTestData: fix streaming of u8 string literals in C++20 mode
  * QThread/Unix: extract duplicate code
  * QWindowPrivate: fix inconsistent inline on some methods
  * tst_QStringList: check that join(u'0') embeds NULs
  * macOS: Sanitize scroll deltas for NSEventPhaseCancelled
  * tst_qsharedmemory: skip readOnly() test under asan
  * QXmlStreamReader: update test distribution
  * QZipReader: update to unzip partly broken archives
  * Deliver context menu event with correct coordinates to widgets in popups
  * QTextHtmlParser: fix prefix lookahead and html comments
  * QtConcurrent::run crashes on program exit
  * tst_QPropertyAnimation: fix leaks occurring under normal operation
  * tst_QPropertyAnimation: fix wrong comment
  * QLogging: fix potential missing NUL-terminator when calling OutputDebugString
  * Fix qt_scrollRectInImage when scrolling outside of the image
- Commits dropped by the rebase:
  * Fix compile with Qt5: Use QString::mid instead of QString::sliced
  * Restore C++11 compatibility after e8b9f4c28d3ab5e960dc54f2dc0c4b749b0b50e0
  * QDateTime: Don't require c++17</changelog>
  <changelog author="fvogt@suse.com" date="1683633600">- Amend patch to fix mouse grabbing as well (bsc#1211024):
  * big-endian-scroll.patch</changelog>
  <changelog author="fvogt@suse.com" date="1684929600">- Update to version 5.15.9+kde154:
  * Hsts: match header names case insensitively (CVE-2023-32762,
    QTBUG-113392, bsc#1211797)
  * Fix specific overflow in qtextlayout (CVE-2023-32763,
    QTBUG-113337, bsc#1211798)
  * QDnsLookup/Unix: make sure we don't overflow the buffer
    (CVE-2023-33285, boo#1211642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1686657600">- Update to version 5.15.10+kde129, rebased upstream:
  * Ssl: Copy the on-demand cert loading bool from default config
  * Schannel: Reject certificate not signed by a configured CA certificate (boo#1211994, CVE-2023-34410)
  * qnetworkreplyfileimpl_p.h: fix header guard name
  * Revert "Draw the cursor considering the descent is 0"
  * Use pkgconfig in order to find libproxy configuration
  * Upgrade PCRE2 to 10.40
  * Android A11Y: handle LocationChanged event only for focused element
  * Port binary JSON to new special integer bitfields
  * INTEGRITY: enable C99 globally
  * QObject: mark two error reporting functions COLD
  * Endian: Provide special integer bitfield unions
  * Android: set useLegacyPackaging to true in build.gradle
  * QWidgetTextControl: port to new-style connects (faster)
  * Sync qxmlstream.g with qxmlstreamparser_p.h [1/2]: switched lines
  * tst_QNetworkReply try stabilize autoDeleteReplies tests
  * Remove duplicated include for &lt;limits&gt;
  * Fix recursion crash when calling setStyleSheet with `qproperty-styleSheet`
  * qwindowsxpstyle: Fix typos in documentation
  * Correct prefix reported for end element in QXmlStreamReader
  * Android A11Y: Add supported role infos to A11yNodeInfo
  * Fix handling of DateTime values in QSettings
  * Fix off-by-one for "typically" lowest value INT_MIN
  * xml: Fix typos in documentation
  * QWindowsWindow: Fix typo in documentation
  * includemocs (updated script)
  * widgets: Fix typos in documentation
  * cocoa: Fix typo in debug messages
  * Only scroll QMenu when there is a valid active action
  * QTimer: Add note in documentation
  * Fix QListView assert when the last row is moved in IconMode
  * QFileDialog: Fix adding default suffix when file path contains dot
  * QLineEdit: account for the placeholderText when computing lineRect
  * QFileDialog::saveFileContent crashes on accept
  * QCompleter: QCompleter unexpectedly changes QLineEdit text
  * Fix build error on iOS with the configure option -qtnamespace
  * Draw the cursor considering the descent is 0
  * Remove pure-virtual-signals.h include from tst_moc.cpp
  * plugins: image formats - fix odr violation
  * dbus: Fix typos
  * qwindowsdialoghelpers: Fix typo in documentation
  * QTableView: Document the customizations applied to QHeaderView
  * Unicodetools: compile
  * eglfs_x11: Fix running flag linkage
  * qcompilerdetection.h: add Q_CC_{GNU,MSVC,CLANG}_ONLY macros
  * Fix CMake warning about "missing closing ' quote"
  * Fix alignment of next/prev links in offline style
  * QtDBus: includemocs
  * Image Plugins: includemocs(-ish)
  * QtGui: includemocs
  * QXcbNativeInterface: remove unused field m_sysTraySelectionAtom
  * Windows QPA: Fix slowdown with large table/tree views with accessibility
  * Macstyle: fix the text color on the disabled button
  * QMacStyle: fix tool buttons (in checked mode)
  * QTeamCityLogger: fix .arg() placeholder injection
  * QAbstractTestLogger: disable copying
  * Fix errorMessageFromComError()
  * QtNetwork: includemocs
  * AppleUnifiedLogger: Remove manually managed os_log_t cache
  * examples: add WindowStaysOnBottomHint into preview text
  * QSharedPointer: Use matching new/delete
  * QIbusPlatformInputContextPlugin: includemocs
  * QGtk3ThemePlugin: includemocs
  * QTuioTouchPlugin: includemocs
  * QtWidgets: includemocs v2022
  * QMYSQLDriverPlugin: includemocs
  * QtDeviceDiscoverySupportPrivate: includemocs
  * QLinuxFbIntegrationPlugin: includemocs
  * QtPrintSupport: includemocs
  * QSQLiteDriverPlugin: includemocs
  * QtFbSupportPrivate: includemocs
  * QXdgDesktopPortalThemePlugin: includemocs
  * QtTest: includemocs
  * QComposePlatformInputContextPlugin: includemocs
  * QtSql: includemocs
  * QVncIntegrationPlugin: includemocs
  * Fix backingstore fractional DPR glitches for widgets in child windows
  * Include &lt;limits&gt; where std::numeric_limits is used
  * QtInputSupportPrivate: includemocs
  * Document the default value of QSFPM::sortOrder()
  * Better document how to enable sorting in QSPFM
  * Correct documentation of INI format's loss of type information
  * Android: add missing properties in AndroidManifest.xml
  * Fix assertion failure when parsing a doubly-invalid date-time text
  * Windows QPA: Correct mistake when calculating minmaxinfo
  * Android: replace ndk.dir with android.ndkVersion in build.gradle
  * Android: remove the old copy of gradle.properties after reading it
  * CMake Android Support: Fix signing of APKs
  * Android: fix A11Y object description
  * macOS: Fix warning about comparing different types in QCocoaScreen::isOnline
  * Fix qmake build on FreeBSD
  * Update documentation of enum Qt::DockWidgetArea
  * xcb: recreate xcb window under some conditions
  * objc_namespace: Add support for universal binaries
  * objc_namespace: Fix misspelled argument for silencing output
  * objc_namespace: Update parsing logic to account for otool changes
  * Blacklist passwordAuth for Ubuntu 20.04
  * Android: wrap QAndroidInputContext's m_focusObject in a QPointer
  * Fix compilation with GCC 12 (and on Fedora 35 and newer)
  * Chip example: fix an accidental bool-&gt;int conversion when using PMF connections
  * qmake: Add support for C++23
  * Android: use BCP 47 tag to create a correct Locale for QTimeZone::displayName()
  * QDateTime: fix adjusted datetime handling
  * Fix crash in tst_qmltc_examples on Android
  * macOS: Remove dead code for focus ring handling in Mac style
  * Detach for colortransforms of indexed formats
  * tst_QTcpSocket::connectToHostError - handle possible timeouts
  * CoreText: Avoid populating font family aliases if family was populated
  * Graphicsview: Avoid background clearing glitches under fractional DPR
  * Windows QPA: Avoid slowdown with UI Automation name change notification
  * Windows QPA: Avoid sending accessibility notifications before activation
  * Windows: Fix potential crash when retrieving default printer
  * Make Ubuntu with its non-standard security level happy
  * Android: Blacklist failing tests on tst_QGraphicsProxyWidget
  * Update LA 4.4.1
  * iOS A11Y: Set more accessibilityTraits
  * QNX: Fix compiler warning by when FEATURE_clipboard is not enabled
  * Document that native file dialogs might not show a title
  * Doc: Remove mentionings of overflows from QElapsedTimer
  * QTextMarkdownImporter: don't apply text char format to list item block
- Commits dropped by the rebase:
  * QBuffer: add missing &lt;limits&gt; include
  * Fix developer build</changelog>
  <changelog author="gmbr3@opensuse.org" date="1687953600">- Change %_libqt5_libexecdir to %_libexecdir/qt5 (bsc#1174075)</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch icu-devel requires to pkgconfig to allow switching libicu
  versions</changelog>
  <changelog author="fvogt@suse.com" date="1695902401">- Update to version 5.15.10+kde159 (bsc#1214327, CVE-2023-37369):
  * Fix CVE-2023-43114
  * QMimeDatabase: fix detection of pattern conflict in different prefixes
  * Fix highdpi conversion of QTabletEvent coordinates on xcb
  * widget: set WA_X11NetWmWindowType* after xcb window was created
  * Fix crash when setting override cursor on multiple clients
  * QAccessibleWidget: Remove pointless ZWSP in warning message
  * Android A11Y: Fix deadlock in QtAndroidAccessibility::runInObjectContext()
  * Correctly parse non BMP char refs in the sax parser
  * Clear the _X version of alongside the enum deprecator
  * Fix UB (signed char passed to &lt;cctype&gt; function)
  * Qt3DRender: includemocs
  * Fix capitalization error in auto-generated qdbusmacros.h include
  * QColorDialog: Ignore mouse move events when no mouse button is pressed
  * QHostInfo: fix remaining slotObj leaks
  * QXmlStreamReader: Raise error on unexpected tokens (CVE-2023-38197,
    QTBUG-92113, QTBUG-95188, bsc#1213326)
  * QTextLayout: Reconsider cursor drawing on TextObject
  * Ensure consistent cursor width under fractional scaling
  * Fix QTextEdit cursor rectangle vertical positioning
  * Return 0 in QWindow::winId in case of failed platform window creation
  * Doc: note QWindow::winId() will cause platform window creation
  * QSslDiffieHellmanParameters: fix mem-leak
  * QHostInfo: fix leaking slot object
  * Make sure we don't count down past 0 QT_FATAL_CRITICALS
  * QLogging: DRY isFatal(QtMsgType)
  * tst_QXmlStream: remove unneeded _ba UDLs
  * Fix typo in QXmlStreamReader error message
  * QXmlStreamReader: make fastScanName() indicate parsing status to callers
  * QXmlStreamReader: change fastScanName() to take a Value*
  * Fix Croatia's currency
  * SSL: upgrade the default DH parameters</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1696593600">- Update to version 5.15.11+kde134, rebased upstream:
  * Revert "Windows QPA: Add support to UiaRaiseNotificationEvent()"
  * FileChooser portal: Make sure filter.name is not empty
  * QPersistentModelIndex: fix UB (op&lt; on unrelated pointers)
  * Avoid crash when keysymToQtKey(keysym, Qt::ControlModifier) is called
  * a11y atspi: translate coords for GetOffsetAtPoint the right way
  * a11y atspi: Take dialog into account as top-level window
  * a11y atspi: Fix incorrect use of x instead of y position
  * macOS: Handle asynchronous deminiaturizing of windows
  * QTranslator: generalize a UNIX-only path
  * iOS, input panel: be more careful before enabling QIOSKeyboardListener
  * Android: Fix flickering on window resize and show keyboard
  * Android A11Y: Check for active surface before calling into native code
  * xcb: Delete touch points without target windows
  * Blacklist 1 tests in tst_QDBusConnection on ubuntu-20.04
  * Fix CMake builds without ANDROID_SDK
  * Blacklist 2 tests in tst_Http2 on ubuntu-20.04
  * Blacklist 1 tests in tst_QSqlQuery on macos
  * Defer creating the special shaders in the texture blitter
  * tst_QSslSocket::serverCipherPreferencies - fix for OpenSSL v3
  * QTemporaryFile: document rename() differences from QFile
  * Doc: 3rd party: Fix reference to FreeType LICENSE.txt
  * Update bundled libjpeg-turbo to version 2.1.4
  * tst_QSsSocket: fix verifyClientCertificate with OpenSSL 3
  * tst_QSslSocket: regenerate certificate used for setLocalCertificateChain
  * tst_QSslSocket::protocolServerSide - make it work with OpenSSL v3
  * tst_QSslSocket::oldErrorsOnSocketReuse - make it work with OpenSSL v3
  * Update zconf.h prefixes to match zlib v1.2.12 update
  * xcb: fix D&amp;D in same xembed client
  * xcb: use global coordinates for position of D&amp;D for xembed client
  * Doc: Update QMetaType::metaObject() descriptions
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 22.04
  * BLACKLIST tst_qfont for Ubuntu 22.04
  * BLACKLIST tst_QMenuBar::check_menuPosition for Ubuntu 22.04
  * tst_QDtls::verifyClientCertficiate - update certs for OpenSSL v3
  * QSslCertificate::toText(): add a file to compare against
  * Fix the spelling of the word "combination"
  * tst_QSslCertificate::pkcs12 - skip the test if OpenSSL version &gt;= 3
  * Android A11Y: Fix TalkBack scrolling behavior
  * Android A11Y: Notify android about scroll events
  * QCocoaDrag: don't add pasteboard items with non-absolute URLs
  * QDirPrivate: pass input QList by cref
  * tst_qbytearray: remove qCompress_data for QT_NO_COMPRESS
  * QDeviceDiscoveryUDev: use NSDMI
  * QAuthenticator: Fix crash when using NTLM / Negotiate
  * Provide a native interface instance in minimal platform plugin
  * Android: document the supported clipboard mimetypes
  * Windows: Account for not finding child windows when calling ChildWindowFromPointEx
  * iOS: Send touch events asynchronously to avoid deadlocking UIKit event loop
  * Disable bitcode for iOS
  * macOS: Ignore deprecation for ReleaseIconRef
  * BLACKLIST tst_QApplication::sendEventsOnProcessEvents for Ubuntu 22.04
  * Convert Latin1 to UTF-16 before passing to ICU API
  * Doc: Remove repetition of word in text
  * eglfs: Fix screen cloning when atomic is enabled
  * Fix printing of dpr&gt;1 images on Windows
  * QHttp: Fix handling of redirect loaded from cache
  * Doc: Fix return type of QLEInteger/QBEInteger post-in/decrement ops
  * qmake: Fix installation of separate debug info for plugins
  * iOS: ensure we close inputpanel after clearing focusobject
  * Convert Latin1 to UTF-16 before passing to ICU API
  * qputenv: defend against non-NUL-terminated QByteArray values
  * QFontSubset: remove unused glyphName() overload
  * Statically assert that the __mips_dsp code is only active on 32-bit
  * QGtk3Theme: Ensure gtk uses the same windowing system as Qt
  * tst_QFocusFrame: fix -Wparantheses
  * Sync Vulkan device features between QVulkanWindow and QRhi
  * SQLite: Update SQLite to v3.39.2
  * Update freetype to 2.12.1
  * corelib: Fix typos in documentation
  * QAtomicInteger docs: mention bool and char8_t as 8-bit types
  * qgraphicsitem_cast: replace 0 with nullptr
  * Doc: Hide weak overload template magic from documentation
  * Revert "QDateTime: fix adjusted datetime handling"
  * Fix select handles disappears issues
  * tst_QSslKey: prepare for the migration to OpenSSL v3
  * tst_qnetworkreply: replace server.pem/key pair
  * Disable unit testing setting up QTcpServer on special Apple interfaces
  * qmake/msbuild: Turn off "use full paths in diagnostics" by default
  * qmake/msbuild: Support all /DEBUG:xxx linker options
  * qmake/msbuild: Support all /LTCG:xxx options
  * Android A11Y: Add content change type to content change event
  * Enabler for fractional scaling of text in Qt Quick
  * macOS: Override logical DPI to 72
  * Add QDom internalSubset implementation
  * Fix tst_AndroidAssets, broken by recent changes on assets load speed
  * Android: Improve loading speed of individual assets
  * Darwin: Replace deprecated symbol kIOMasterPortDefault with equivalent
  * macOS: Remove code for handling logical DPI changes
  * Fix an incorrect invocation of llvm-readobj
  * macOS: Ignore deprecation for kOnSystemDisk icon domain
  * Copy only files that belongs to QML module
  * Android: fix wrong position of cursor handle and editpopup menu in split screen
  * Doc: Document QML_IMPORTS_PATH and QMLPATHS
  * Add the missing RCC_DIR to '.qrc' paths when generating deployment settings
  * Android: Fix the offset of the EditPopupMenu
  * xcb: update xkb_state mask as much as possible
  * QDom: Stop treating non-BMP characters as invalid
  * Android 13: Fix warnings on starting an application
  * qxkbcommon: Map Super/Hyper to Meta early enough to have an effect
  * macOS: Ignore update requests for offline displays
  * macOS: Avoid recursively updating screens when window moves screen
  * qmake/MinGW: Install separate debug info of DLLs next to the DLL
  * QMainWindow: fix restoreState() for toolbars
  * Make two QDT benchmarks data-driven and add more rows
  * Fix doc and example of QLoggingCategory::installCategory()
  * qmake: Document Xcode behavior when bundling translation files
  * Android: Fix missing import
  * QByteArray: more GCC 12 -Werror=array-bound whack-a-mole
  * CMake: Fix android sdk version propagation
  * Restore C++20-deprecated mixed-enum bitwise operators
  * Android: Fix ANR when QtService and QtActivity load in same process
  * Fix restart QtActivity
  * QArrayData::data(): do type-punning via quintptr, not char *
  * QIOSTextResponder: recreate responder upon reset
  * QSslSocket: make it work with OpenSSL v3
  * QFileSystemModelPrivate: de-inline ctor and dtor
  * Network: update Public Suffix List
  * macOS: Ensure proper quoting when calling otool in objc_namespace script
  * QKeySequence: Fix the one-off error in the mac glyph array size
- Commits dropped by the rebase:
  * Apply CVE-2022-27404-27405-27406-qtbase-5.15.diff
  * QArrayData: fix UB via reinterpret_cast (crash with FORTIFY_SOURCE=3)
  * Adapt for q_EVP_PKEY_base_id → q_EVP_PKEY_get_base_id rename in OpenSSL 3
  * Don't use a deprecated function if built/linked with OpenSSL v3</changelog>
  <changelog author="christophe@krop.fr" date="1696593601">- Enable the experimental native painting feature to improve
  remote desktop performances (boo#1214915)
  exporting QT_XCB_NATIVE_PAINTING is required to use the feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1697716800">- Update to version 5.15.11+kde138:
  * QLibraryPrivate: Actually merge load hints
  * QPluginLoader: report the right load hints
  * xkb: fix build with libxkbcommon 1.6.0 and later
  * a11y atspi: Map ButtonMenu role to AT-SPI equivalent</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1703851200">- Update to version 5.15.12+kde144, rebased upstream:
  * QMimeDatabase: handle buggy type definitions with circular inheritance
  * xcb: only set base size when it's valid
  * QPixmapCache: fix leaking of QStrings and Keys on clear()
  * OpenFile portal: do not use O_PATH fds
  * QSystemTrayIcon: properly disconnect old menu in setContextMenu()
  * Guard QTabBar against nested event processing during moving tabs
  * QDial: don't crash when min==max and setting a value != min &amp; max
  * QStandardItemModel: don't leak in mimeData()
  * SQL/MySQL: properly initialize variable
  * QWidgetTextControl: ignore invalid input method event
  * Update the LGPL license header
  * SQL/MySQL: fix handling of json column
  * Remove QMAKE_RANLIB and QMAKE_LINK_SHLIB from android/default_pre.prf
  * macOS: Fix less common writing systems on Catalina and later
  * Blacklist 1 tests in tst_QFtp on ubuntu-20.04
  * Update bundled libpng to version 1.6.39
  * Android: Fix signing of APKs that are generated when an AAB is also built
  * Update bundled zlib to version 1.2.13
  * doc: update the limitation of QSystemTrayIcon on X11
  * Blacklist 1 tests in tst_QTimer on ubuntu-20.04
  * Add benchmarks for QLocale number parsing
  * Add benchmarks for QString number parsing
  * Android: Fix incorrect fullscreen dimensions
  * Gtk3Theme: set XCURSOR_SIZE and XCURSOR_THEME for wayland sessions
  * xcb: Flush Display when processing xcb events
  * xcb: Add xlib wrapper for XFlush()
  * QHostAddress: Fix incorrect comparison against 'Any'
  * QSsl[OpenSSL/Android]: Fix hardcoded 1_1 suffix
  * BLACKLIST: tst_QApplication::sendEventsOnProcessEvents for RHEL 9.0
  * QMacStyle: do not set white color for grayed out button
  * Work round macOS's omission of en_DE from its own uiLanguages()
  * Suppress a deprecation warning in tst_QDateTime::toString_enumformat()
  * QJsonValue: fix incorrect to{Array,Object} when the value is empty
  * QGtk3Dialog: remove the #include for empty moc
  * Remove unneeded QWindow from QGtk3Dialog
  * tst_QSslSocket: Delete sslOptions
  * tst_QSslServer: Make the in-process server use TLS1.2
  * Android: fix Gradle warning about using enableUncompressedNativeLibs
  * Mention  limitation of QDir::drives() on Windows
  * QFileSystemEngine/Win: fix incorrect buffer size in currentPath()
  * Android: properly retrieve mime type of uri to for openUrl()
  * Android: Fix clipboard issue with urls
  * Android: Add a way to disable accessibility via an environment var
  * Update bundled libpng to version 1.6.38
  * QIOSMessageDialog::exec - work around 'windowsless' exec
  * QIosScreen: retain the right window
  * tst_Q{BitArray,ContiguousCache}: check not only count(), but size(), too
  * QIosTextResponder: stop using deprecated constants and type
  * qcompilerdetection.h: detect Coverity
  * Android: Fix Display.getRealMetrics deprecation
  * Fix broken Text rendering when noantialiased NativeRendering is used
  * forkfd: fix Clang 15 ATOMIC_VAR_INIT deprecation warning
  * eglfs: Add env.var. to disable the dedicated drmHandleEvent thread
  * doc: Don't put strings into QVector&lt;double&gt;
  * Remove focusProxyAndInputMethods from tst_QWidget
  * Bump version to 5.15.12
  * Update documentation of qWaitForWindowActive / qWaitForWindowExposed
  * QtHttp: Lower the severity of some log output
  * StyleSheetStyle: Fix color of placeholder texts in text edits
  * Android: Fix flickering on split screen mode
  * Update url to IAccessible2 Specification</changelog>
  <changelog author="alarrosa@suse.com" date="1704283200">- Update to version 5.15.12+kde147:
  * Http2: fix potential overflow in assemble_hpack_block()
    (bsc#1218413, CVE-2023-51714)
  * HPack: fix incorrect integer overflow check
  * HPack: fix a Yoda Condition</changelog>
  <changelog author="fvogt@suse.com" date="1708084800">- Update to version 5.15.12+kde151:
  * Improve KTX file reading memory safety (CVE-2024-25580, boo#1219996)
  * Revert "xcb: only set base size when it's valid"
  * Fix potential leak of QPropertyAnimation in QLineEditIconButton
  * QBitArray: correct inline keyword</changelog>
  <changelog author="alarrosa@suse.com" date="1720785600">- Add patch from upstream to fix a regression in the ODBC driver
  (bsc#1227513, QTBUG-112375):
  * 0001-QSQL-ODBC-fix-regression-trailing-NUL.patch
  * 0002-SQL-ODBC-Pass-correct-length-to-SQLColAttribute.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1722945600">- Add rebased upstream patch to delay any HTTP2 communication until
  encrypted() can be responded to (bsc#1227426, CVE-2024-39936):
  * 0001-HTTP2-Delay-any-communication-until-encrypted-can-be.patch
- Add upstream patch to fix a NULL pointer dereference via the
  function QXcbConnection::initializeAllAtoms() when there is
  anomalous behavior from the X server (bsc#1222120,
  CVE-2023-45935):
  * 0001-xcb-guard-a-pointer-before-usage.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756728000">- Add patch from upstream to fix a precondition violation in call
  to QByteArrayView::at() which can cause crashes (bsc#1243958,
  CVE-2025-5455):
  * 0001-qDecodeDataUrl-fix-precondition-violation-in-call-to.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756814400">- Add patch from upstream to initialize a member variable that was
  uninitialized under some circumstances:
  * 0001-QObjectPrivateSignal-initialize-all-members.patch
- Add patch from upstream to fix a crash when parsing a particular
  glyph in a particular font (QTBUG-124310):
  * 0001-Avoid-crash-in-font-distancefield-computation.patch
  * 0002-Fix-crash-in-font-distancefield-computation.patch
- Add patch from upstream to fix avoid repeatedly registering
  xsettings callbacks when switching cursor themes:
  * 0001-xcb-Avoid-repeatedly-registering-xsettings-callbacks-When.patch
- Add patch from upstream to check validity of RandR output info
  before using it (QTBUG-128906):
  * 0001-xcb-check-validity-of-RandR-output-info-before-using-it.patch
- Add patch from upstream to fix reparenting a window so it takes
  effect even if there are no other state changes to the window:
  * 0001-xcb-Sync-XCB-connection-after-reparenting-window.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756900800">- Add patch from upstream to fix a low performance when processing
  XML data in encodeText (bsc#1239896, CVE-2025-30348):
  * 0001-XML_QDom-speedup-encodeText.patch</changelog>
</package>
<package pkgid="80a12c0b02a7c8315e83c5df9cd88752a1a8ed901eaa00216695c4363e989c70" name="libQt5Network-devel" arch="x86_64">
  <version epoch="0" ver="5.15.12+kde151" rel="150600.3.9.1"/>
  <changelog author="fvogt@suse.com" date="1678968000">- Update to version 5.15.8+kde183:
  * Add nullptr guard in QStyleSheetStyle::drawPrimitive(PE_PanelLineEdit)
  * QAbstractItemView: don't access invalid indexes on copy-key
  * Apply CVE-2023-24607-qtbase-5.15.diff (CVE-2023-24607,
    bsc#1209616)
  * QXcbConnection::getTimestamp: do not return stale timestamp
  * QToolButton: Elide text when constraints prevent from showing whole text
  * correctly set up ref counting in QThreadPool::tryStart(std::function)
  * Do not set Qt::ToolTip flag for QShapedPixmapWindow
  * Fix deletion order also for QImageReader/Writer::setDevice()
  * Fix deletion order in QImageReader/Writer destructors
  * QNetworkReply: Fix typos in the documentation
  * Doc: Fix typo in the online documentation template
  * Doc: Link to page documenting Qt trademarks in the copyright footer
  * [doc] Fix typo in QBuffer::setBuffer() description
  * qwindowsdrag: Fix typo in documentation
  * openglblacklists: Fix typo in description
  * qxcbscreen: Fix typo in documentation
  * Fix typos in SQL driver documentation
  * qxcbwindow.cpp: Fix sign-compare and another warnings
  * QToolButton: reimplement the fix for QTBUG-95255
  * QSysInfo::prettyProductName(): Add macOS Ventura product name
  * QSysInfo::prettyProductName(): add missing macOS product names
  * xcb: correctly disconnect xsettings callbacks
  * ibus: add SetCursorLocationRelative in InputContext.xml</changelog>
  <changelog author="fvogt@suse.com" date="1680523200">- Update to version 5.15.8+kde185:
  * QFSFileEngine: fix overflow bug when using lseek64
  * Add QImage null check when QOpenGLTexture converts
- Add patch to fix return key handling in QGroupBox on GNOME (bsc#1209364):
  * 0001-Revert-QGnomeTheme-Allow-Space-Return-Enter-and-Sele.patch
- Add patch to fix XInput2 events in big-endian X11 clients (bsc#1204883, QTBUG-105157):
  * big-endian-scroll.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1682078400">- Update to version 5.15.9+kde151, rebased upstream:
  * QCborValue: fix incorrect to{Array,Map} when the value is empty
  * QMargins: fix a missing "full stop" in the docs
  * QLibrary: restore translated string
  * QLibrary: fix possible arg() format clobbering
  * iOS: Use python3 for enumerating test target devices
  * Android: Treat ACTION_CANCEL as TouchCancelEvent
  * Doc: Fix broken formatting
  * QFileSystemEngine: fix potential formatting error
  * QString::asprintf: check that passing field widths as arguments works
  * Backport recent QFlags tests
  * network: Fix typos in documentation
  * Fix accuracy with screen composition
  * Doc: Update documentation for QElapsedTimer's in Windows
  * Document that QStandardPath::findExecutable works with absolute paths
  * macOS: Use native resize cursors for diagonal resize
  * Fix clipped glyphs in text rendering of QGraphicsTextItem
  * Change comparison data type to fix int overflow
  * Add missing Q_WEAK_OVERLOAD definition
  * Update QFileInfo docs to mention macOS aliases
  * Distinguish macOS aliases from normal symbolic links
  * Windows QPA: Fix frameless maximize on secondary screens
  * Rewrite tst_qdataurl as a data-driven test
  * Fix compilation for wasm
  * QIOSFileDialog/QIOSDocumentPickerController - handle dismissed view controller
  * Fix QDockWidget's dock area permissions after hovering
  * Fix C++20 ambiguous relational operators between QJsonValue{,Ref}
  * Android: make sure that orientationChange is reported after resize
  * Android: set all QScreen's geometry-related parameters together
  * Blacklist: test cases blacklisted in tst_QDBusConnection:
  * wasm:  fix issue with passing username/password to network request
  * macOS: Pass multi arch flags when linking qmake
  * QCocoaFileDialogHelper: Always enable symlinks and aliases to directories
  * Android: terminate argv passed to main() with nullptr
  * Update bundled libjpeg-turbo to version 2.1.3
  * ANGLE: Load the DirectX libraries from the system path directly
  * SQLite: Update SQLite to v3.37.2
  * Fix compiler warnings about unused parameters
  * Fix getsockopt option_value initial initialization
  * Http2: Fix redirect-handling
  * Android A11Y: Fix value rounding
  * Android A11Y: Announce value together with element name when focused
  * Android A11Y: handle valueChanged events
  * tst_QSystemSemaphore: give proper path to test-helper
  * QNX: Silence compiler warning by initializing variable
  * Update LICENSE.QT-LICENSE-AGREEMENT
  * winrt appxmanifest: Properly replace VCLibs version for newer MSVC versions
  * QAbstractSocket: Don't pretend pause and resume is a stack
  * Gui: test also depends for clipboard feature
  * QDesktopServices: deprecate destroying URL handlers w/o explicit unsetUrlHandler()
  * macOS: Respect QMAKE_APPLE_DEVICE_ARCHS when building qmake
  * HTTP: Make redirect response parsing more generic
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 20.04
  * Android A11Y: populate child elements when constructing node info
  * Fix issue where readyRead() could happen after disconnected()
  * QStringView: add missing constexpr so we can use is_constant_evaluated
  * Use Android's View.generateViewId() for generating ids for views/surfaces
  * Remove documentation of non-existing QAccessible state
  * Doc: Fix snippet to match actual QFileInfo behavior
  * Android: Re-focus focused accessibility node after orientation change
  * Android A11Y: execute C++ code on main Qt thread
  * Android: extract parentId for hidden object in advance
  * xcb: Show valuator atom names properly in categorized logging
  * Android: replace stacktrace with debug message in search for setService
  * Better document attaching a QFutureWatcher to a started QFuture
  * doc: Update GenericDataLocation location on iOS
  * BLACKLIST test_Gestures tests for RHEL-8.4
  * QPlainTestLogger: do not print "failure location" if there's no failure
  * QAbstractItemView: do not access invalid model indices (3/N)
  * Win32: always allow the event loop to be woken up by posted events
  * rhi: d3d11: Use __uuidof where we can
  * Don't QEXPECT_FAIL tst_QLineEdit::testQuickSelectionWithMouse on macOS ARM
  * Network: Emit authenticationRequired when using Ntlm
  * testlib: Disable window restoration on macOS in a non-persistent way
  * QAbstractItemView: do not access invalid model indices (2/N)
  * QAbstractItemView: do not access invalid model indices (1/N)
  * QAbstractItemView: code tidies
  * Update float16 part of TestLib selftest
  * QGuiApplication: constant-initialize lastCursorPosition
  * Blacklist tst_QFileSystemWatcher::signalsEmittedAfterFileMoved on all Windows versions
  * [Android]: Handle the screen name, modes and refreshRate properly
  * QVersionNumber: remove the "pure" attribute from commonPrefix()
  * QEvent: initialize the static userEventTypeRegistry constexprly
  * Let QXcbGlxWindow::createVisual fallback to QXcbWindow::createVisual
  * Android A11Y: fix content update notification when object is hidden
  * Android: explicitly remove accessibility focus when element is hidden
  * BLACKLIST tst_qfont for Red Hat 8.4 and Ubuntu 20.04
  * QtCore: includemocs
  * Fix memory leak in QtConcurrent::run when called with a NULL QThreadPool
  * INTEGRITY: Prevent deletion of virtual functions
  * QMake: replace a Q_ASSERT() with a Q_UNREACHABLE()
  * QTransform benchmark: measure what was promised
  * QStaticByteArrayMatcher: add a useful comment
  * QMacStyle: use the 'momentary push in' type for push buttons
  * qopengl.h: Move C header #include(s) out of the QT_NAMESPACE
  * Enable all supported 1.0 device features in QVulkanWindow
  * Fix queue passed to vkQueuePresent
  * QFusionStyle: don't draw an invalid outline for up/down buttons
  * Doc: Make QListIterator snippets more robust
  * QVersionNumber: don't detach() in rvalue QList/QVector ctor
  * QNetworkRequest: Document how Qt handles 301 and 302 status codes
  * Convert date-time to UTC before claiming it's in GMT
  * Remove execute permission from XML files
  * Add test case for style sheet selectors for enum properties
  * FreeType: allow falling back to synthesized bold if desired
  * Fix an assertion failure in massageAdjustedDateTime()
  * Relax tst_qvulkan::vulkanVersionRequest to make it compatible with 1.1
  * Doc: Replace "C:Documents and Settings" paths
  * QOrderedMutexLocker: fix compilation with C++11
  * QHttpNetworkConnection: Always set proxy settings to all channels
  * Add a markdown writer test for a checklist item ending with `code`
  * Use QTextCharFormat::fontFixedPitch to remember Markdown backtick spans
  * QWizardLayoutInfo: make == and != operators const
  * Revert "Android: Fix screen flicker issues"
  * macOS: Handle momentum scroll NSEventPhaseBegan when scroll had ended
  * SQLite: Update SQLite to v3.37.0
  * Update copyright year to 2022
  * QTzTimeZonePrivate: use ctor delegation instead of init()
  * QTzTimeZonePrivate: fix permanently-detaching m_icu
  * tst_QGraphicsView: fix memleak
  * Doc: Update external links to Qt Creator Manual
  * macOS: assume an unidentified tablet device is a stylus
  * tst_QItemModel: fix memleaks
  * tst_qanimationgroup: fix memleaks
  * QAbstractAnimation: add missing forward-declaration
  * [doc] QCoreApplication::installTranslator() doesn't take ownership
  * tst_qtranslator: fix memleak
  * QTestData: fix streaming of u8 string literals in C++20 mode
  * QThread/Unix: extract duplicate code
  * QWindowPrivate: fix inconsistent inline on some methods
  * tst_QStringList: check that join(u'0') embeds NULs
  * macOS: Sanitize scroll deltas for NSEventPhaseCancelled
  * tst_qsharedmemory: skip readOnly() test under asan
  * QXmlStreamReader: update test distribution
  * QZipReader: update to unzip partly broken archives
  * Deliver context menu event with correct coordinates to widgets in popups
  * QTextHtmlParser: fix prefix lookahead and html comments
  * QtConcurrent::run crashes on program exit
  * tst_QPropertyAnimation: fix leaks occurring under normal operation
  * tst_QPropertyAnimation: fix wrong comment
  * QLogging: fix potential missing NUL-terminator when calling OutputDebugString
  * Fix qt_scrollRectInImage when scrolling outside of the image
- Commits dropped by the rebase:
  * Fix compile with Qt5: Use QString::mid instead of QString::sliced
  * Restore C++11 compatibility after e8b9f4c28d3ab5e960dc54f2dc0c4b749b0b50e0
  * QDateTime: Don't require c++17</changelog>
  <changelog author="fvogt@suse.com" date="1683633600">- Amend patch to fix mouse grabbing as well (bsc#1211024):
  * big-endian-scroll.patch</changelog>
  <changelog author="fvogt@suse.com" date="1684929600">- Update to version 5.15.9+kde154:
  * Hsts: match header names case insensitively (CVE-2023-32762,
    QTBUG-113392, bsc#1211797)
  * Fix specific overflow in qtextlayout (CVE-2023-32763,
    QTBUG-113337, bsc#1211798)
  * QDnsLookup/Unix: make sure we don't overflow the buffer
    (CVE-2023-33285, boo#1211642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1686657600">- Update to version 5.15.10+kde129, rebased upstream:
  * Ssl: Copy the on-demand cert loading bool from default config
  * Schannel: Reject certificate not signed by a configured CA certificate (boo#1211994, CVE-2023-34410)
  * qnetworkreplyfileimpl_p.h: fix header guard name
  * Revert "Draw the cursor considering the descent is 0"
  * Use pkgconfig in order to find libproxy configuration
  * Upgrade PCRE2 to 10.40
  * Android A11Y: handle LocationChanged event only for focused element
  * Port binary JSON to new special integer bitfields
  * INTEGRITY: enable C99 globally
  * QObject: mark two error reporting functions COLD
  * Endian: Provide special integer bitfield unions
  * Android: set useLegacyPackaging to true in build.gradle
  * QWidgetTextControl: port to new-style connects (faster)
  * Sync qxmlstream.g with qxmlstreamparser_p.h [1/2]: switched lines
  * tst_QNetworkReply try stabilize autoDeleteReplies tests
  * Remove duplicated include for &lt;limits&gt;
  * Fix recursion crash when calling setStyleSheet with `qproperty-styleSheet`
  * qwindowsxpstyle: Fix typos in documentation
  * Correct prefix reported for end element in QXmlStreamReader
  * Android A11Y: Add supported role infos to A11yNodeInfo
  * Fix handling of DateTime values in QSettings
  * Fix off-by-one for "typically" lowest value INT_MIN
  * xml: Fix typos in documentation
  * QWindowsWindow: Fix typo in documentation
  * includemocs (updated script)
  * widgets: Fix typos in documentation
  * cocoa: Fix typo in debug messages
  * Only scroll QMenu when there is a valid active action
  * QTimer: Add note in documentation
  * Fix QListView assert when the last row is moved in IconMode
  * QFileDialog: Fix adding default suffix when file path contains dot
  * QLineEdit: account for the placeholderText when computing lineRect
  * QFileDialog::saveFileContent crashes on accept
  * QCompleter: QCompleter unexpectedly changes QLineEdit text
  * Fix build error on iOS with the configure option -qtnamespace
  * Draw the cursor considering the descent is 0
  * Remove pure-virtual-signals.h include from tst_moc.cpp
  * plugins: image formats - fix odr violation
  * dbus: Fix typos
  * qwindowsdialoghelpers: Fix typo in documentation
  * QTableView: Document the customizations applied to QHeaderView
  * Unicodetools: compile
  * eglfs_x11: Fix running flag linkage
  * qcompilerdetection.h: add Q_CC_{GNU,MSVC,CLANG}_ONLY macros
  * Fix CMake warning about "missing closing ' quote"
  * Fix alignment of next/prev links in offline style
  * QtDBus: includemocs
  * Image Plugins: includemocs(-ish)
  * QtGui: includemocs
  * QXcbNativeInterface: remove unused field m_sysTraySelectionAtom
  * Windows QPA: Fix slowdown with large table/tree views with accessibility
  * Macstyle: fix the text color on the disabled button
  * QMacStyle: fix tool buttons (in checked mode)
  * QTeamCityLogger: fix .arg() placeholder injection
  * QAbstractTestLogger: disable copying
  * Fix errorMessageFromComError()
  * QtNetwork: includemocs
  * AppleUnifiedLogger: Remove manually managed os_log_t cache
  * examples: add WindowStaysOnBottomHint into preview text
  * QSharedPointer: Use matching new/delete
  * QIbusPlatformInputContextPlugin: includemocs
  * QGtk3ThemePlugin: includemocs
  * QTuioTouchPlugin: includemocs
  * QtWidgets: includemocs v2022
  * QMYSQLDriverPlugin: includemocs
  * QtDeviceDiscoverySupportPrivate: includemocs
  * QLinuxFbIntegrationPlugin: includemocs
  * QtPrintSupport: includemocs
  * QSQLiteDriverPlugin: includemocs
  * QtFbSupportPrivate: includemocs
  * QXdgDesktopPortalThemePlugin: includemocs
  * QtTest: includemocs
  * QComposePlatformInputContextPlugin: includemocs
  * QtSql: includemocs
  * QVncIntegrationPlugin: includemocs
  * Fix backingstore fractional DPR glitches for widgets in child windows
  * Include &lt;limits&gt; where std::numeric_limits is used
  * QtInputSupportPrivate: includemocs
  * Document the default value of QSFPM::sortOrder()
  * Better document how to enable sorting in QSPFM
  * Correct documentation of INI format's loss of type information
  * Android: add missing properties in AndroidManifest.xml
  * Fix assertion failure when parsing a doubly-invalid date-time text
  * Windows QPA: Correct mistake when calculating minmaxinfo
  * Android: replace ndk.dir with android.ndkVersion in build.gradle
  * Android: remove the old copy of gradle.properties after reading it
  * CMake Android Support: Fix signing of APKs
  * Android: fix A11Y object description
  * macOS: Fix warning about comparing different types in QCocoaScreen::isOnline
  * Fix qmake build on FreeBSD
  * Update documentation of enum Qt::DockWidgetArea
  * xcb: recreate xcb window under some conditions
  * objc_namespace: Add support for universal binaries
  * objc_namespace: Fix misspelled argument for silencing output
  * objc_namespace: Update parsing logic to account for otool changes
  * Blacklist passwordAuth for Ubuntu 20.04
  * Android: wrap QAndroidInputContext's m_focusObject in a QPointer
  * Fix compilation with GCC 12 (and on Fedora 35 and newer)
  * Chip example: fix an accidental bool-&gt;int conversion when using PMF connections
  * qmake: Add support for C++23
  * Android: use BCP 47 tag to create a correct Locale for QTimeZone::displayName()
  * QDateTime: fix adjusted datetime handling
  * Fix crash in tst_qmltc_examples on Android
  * macOS: Remove dead code for focus ring handling in Mac style
  * Detach for colortransforms of indexed formats
  * tst_QTcpSocket::connectToHostError - handle possible timeouts
  * CoreText: Avoid populating font family aliases if family was populated
  * Graphicsview: Avoid background clearing glitches under fractional DPR
  * Windows QPA: Avoid slowdown with UI Automation name change notification
  * Windows QPA: Avoid sending accessibility notifications before activation
  * Windows: Fix potential crash when retrieving default printer
  * Make Ubuntu with its non-standard security level happy
  * Android: Blacklist failing tests on tst_QGraphicsProxyWidget
  * Update LA 4.4.1
  * iOS A11Y: Set more accessibilityTraits
  * QNX: Fix compiler warning by when FEATURE_clipboard is not enabled
  * Document that native file dialogs might not show a title
  * Doc: Remove mentionings of overflows from QElapsedTimer
  * QTextMarkdownImporter: don't apply text char format to list item block
- Commits dropped by the rebase:
  * QBuffer: add missing &lt;limits&gt; include
  * Fix developer build</changelog>
  <changelog author="gmbr3@opensuse.org" date="1687953600">- Change %_libqt5_libexecdir to %_libexecdir/qt5 (bsc#1174075)</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch icu-devel requires to pkgconfig to allow switching libicu
  versions</changelog>
  <changelog author="fvogt@suse.com" date="1695902401">- Update to version 5.15.10+kde159 (bsc#1214327, CVE-2023-37369):
  * Fix CVE-2023-43114
  * QMimeDatabase: fix detection of pattern conflict in different prefixes
  * Fix highdpi conversion of QTabletEvent coordinates on xcb
  * widget: set WA_X11NetWmWindowType* after xcb window was created
  * Fix crash when setting override cursor on multiple clients
  * QAccessibleWidget: Remove pointless ZWSP in warning message
  * Android A11Y: Fix deadlock in QtAndroidAccessibility::runInObjectContext()
  * Correctly parse non BMP char refs in the sax parser
  * Clear the _X version of alongside the enum deprecator
  * Fix UB (signed char passed to &lt;cctype&gt; function)
  * Qt3DRender: includemocs
  * Fix capitalization error in auto-generated qdbusmacros.h include
  * QColorDialog: Ignore mouse move events when no mouse button is pressed
  * QHostInfo: fix remaining slotObj leaks
  * QXmlStreamReader: Raise error on unexpected tokens (CVE-2023-38197,
    QTBUG-92113, QTBUG-95188, bsc#1213326)
  * QTextLayout: Reconsider cursor drawing on TextObject
  * Ensure consistent cursor width under fractional scaling
  * Fix QTextEdit cursor rectangle vertical positioning
  * Return 0 in QWindow::winId in case of failed platform window creation
  * Doc: note QWindow::winId() will cause platform window creation
  * QSslDiffieHellmanParameters: fix mem-leak
  * QHostInfo: fix leaking slot object
  * Make sure we don't count down past 0 QT_FATAL_CRITICALS
  * QLogging: DRY isFatal(QtMsgType)
  * tst_QXmlStream: remove unneeded _ba UDLs
  * Fix typo in QXmlStreamReader error message
  * QXmlStreamReader: make fastScanName() indicate parsing status to callers
  * QXmlStreamReader: change fastScanName() to take a Value*
  * Fix Croatia's currency
  * SSL: upgrade the default DH parameters</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1696593600">- Update to version 5.15.11+kde134, rebased upstream:
  * Revert "Windows QPA: Add support to UiaRaiseNotificationEvent()"
  * FileChooser portal: Make sure filter.name is not empty
  * QPersistentModelIndex: fix UB (op&lt; on unrelated pointers)
  * Avoid crash when keysymToQtKey(keysym, Qt::ControlModifier) is called
  * a11y atspi: translate coords for GetOffsetAtPoint the right way
  * a11y atspi: Take dialog into account as top-level window
  * a11y atspi: Fix incorrect use of x instead of y position
  * macOS: Handle asynchronous deminiaturizing of windows
  * QTranslator: generalize a UNIX-only path
  * iOS, input panel: be more careful before enabling QIOSKeyboardListener
  * Android: Fix flickering on window resize and show keyboard
  * Android A11Y: Check for active surface before calling into native code
  * xcb: Delete touch points without target windows
  * Blacklist 1 tests in tst_QDBusConnection on ubuntu-20.04
  * Fix CMake builds without ANDROID_SDK
  * Blacklist 2 tests in tst_Http2 on ubuntu-20.04
  * Blacklist 1 tests in tst_QSqlQuery on macos
  * Defer creating the special shaders in the texture blitter
  * tst_QSslSocket::serverCipherPreferencies - fix for OpenSSL v3
  * QTemporaryFile: document rename() differences from QFile
  * Doc: 3rd party: Fix reference to FreeType LICENSE.txt
  * Update bundled libjpeg-turbo to version 2.1.4
  * tst_QSsSocket: fix verifyClientCertificate with OpenSSL 3
  * tst_QSslSocket: regenerate certificate used for setLocalCertificateChain
  * tst_QSslSocket::protocolServerSide - make it work with OpenSSL v3
  * tst_QSslSocket::oldErrorsOnSocketReuse - make it work with OpenSSL v3
  * Update zconf.h prefixes to match zlib v1.2.12 update
  * xcb: fix D&amp;D in same xembed client
  * xcb: use global coordinates for position of D&amp;D for xembed client
  * Doc: Update QMetaType::metaObject() descriptions
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 22.04
  * BLACKLIST tst_qfont for Ubuntu 22.04
  * BLACKLIST tst_QMenuBar::check_menuPosition for Ubuntu 22.04
  * tst_QDtls::verifyClientCertficiate - update certs for OpenSSL v3
  * QSslCertificate::toText(): add a file to compare against
  * Fix the spelling of the word "combination"
  * tst_QSslCertificate::pkcs12 - skip the test if OpenSSL version &gt;= 3
  * Android A11Y: Fix TalkBack scrolling behavior
  * Android A11Y: Notify android about scroll events
  * QCocoaDrag: don't add pasteboard items with non-absolute URLs
  * QDirPrivate: pass input QList by cref
  * tst_qbytearray: remove qCompress_data for QT_NO_COMPRESS
  * QDeviceDiscoveryUDev: use NSDMI
  * QAuthenticator: Fix crash when using NTLM / Negotiate
  * Provide a native interface instance in minimal platform plugin
  * Android: document the supported clipboard mimetypes
  * Windows: Account for not finding child windows when calling ChildWindowFromPointEx
  * iOS: Send touch events asynchronously to avoid deadlocking UIKit event loop
  * Disable bitcode for iOS
  * macOS: Ignore deprecation for ReleaseIconRef
  * BLACKLIST tst_QApplication::sendEventsOnProcessEvents for Ubuntu 22.04
  * Convert Latin1 to UTF-16 before passing to ICU API
  * Doc: Remove repetition of word in text
  * eglfs: Fix screen cloning when atomic is enabled
  * Fix printing of dpr&gt;1 images on Windows
  * QHttp: Fix handling of redirect loaded from cache
  * Doc: Fix return type of QLEInteger/QBEInteger post-in/decrement ops
  * qmake: Fix installation of separate debug info for plugins
  * iOS: ensure we close inputpanel after clearing focusobject
  * Convert Latin1 to UTF-16 before passing to ICU API
  * qputenv: defend against non-NUL-terminated QByteArray values
  * QFontSubset: remove unused glyphName() overload
  * Statically assert that the __mips_dsp code is only active on 32-bit
  * QGtk3Theme: Ensure gtk uses the same windowing system as Qt
  * tst_QFocusFrame: fix -Wparantheses
  * Sync Vulkan device features between QVulkanWindow and QRhi
  * SQLite: Update SQLite to v3.39.2
  * Update freetype to 2.12.1
  * corelib: Fix typos in documentation
  * QAtomicInteger docs: mention bool and char8_t as 8-bit types
  * qgraphicsitem_cast: replace 0 with nullptr
  * Doc: Hide weak overload template magic from documentation
  * Revert "QDateTime: fix adjusted datetime handling"
  * Fix select handles disappears issues
  * tst_QSslKey: prepare for the migration to OpenSSL v3
  * tst_qnetworkreply: replace server.pem/key pair
  * Disable unit testing setting up QTcpServer on special Apple interfaces
  * qmake/msbuild: Turn off "use full paths in diagnostics" by default
  * qmake/msbuild: Support all /DEBUG:xxx linker options
  * qmake/msbuild: Support all /LTCG:xxx options
  * Android A11Y: Add content change type to content change event
  * Enabler for fractional scaling of text in Qt Quick
  * macOS: Override logical DPI to 72
  * Add QDom internalSubset implementation
  * Fix tst_AndroidAssets, broken by recent changes on assets load speed
  * Android: Improve loading speed of individual assets
  * Darwin: Replace deprecated symbol kIOMasterPortDefault with equivalent
  * macOS: Remove code for handling logical DPI changes
  * Fix an incorrect invocation of llvm-readobj
  * macOS: Ignore deprecation for kOnSystemDisk icon domain
  * Copy only files that belongs to QML module
  * Android: fix wrong position of cursor handle and editpopup menu in split screen
  * Doc: Document QML_IMPORTS_PATH and QMLPATHS
  * Add the missing RCC_DIR to '.qrc' paths when generating deployment settings
  * Android: Fix the offset of the EditPopupMenu
  * xcb: update xkb_state mask as much as possible
  * QDom: Stop treating non-BMP characters as invalid
  * Android 13: Fix warnings on starting an application
  * qxkbcommon: Map Super/Hyper to Meta early enough to have an effect
  * macOS: Ignore update requests for offline displays
  * macOS: Avoid recursively updating screens when window moves screen
  * qmake/MinGW: Install separate debug info of DLLs next to the DLL
  * QMainWindow: fix restoreState() for toolbars
  * Make two QDT benchmarks data-driven and add more rows
  * Fix doc and example of QLoggingCategory::installCategory()
  * qmake: Document Xcode behavior when bundling translation files
  * Android: Fix missing import
  * QByteArray: more GCC 12 -Werror=array-bound whack-a-mole
  * CMake: Fix android sdk version propagation
  * Restore C++20-deprecated mixed-enum bitwise operators
  * Android: Fix ANR when QtService and QtActivity load in same process
  * Fix restart QtActivity
  * QArrayData::data(): do type-punning via quintptr, not char *
  * QIOSTextResponder: recreate responder upon reset
  * QSslSocket: make it work with OpenSSL v3
  * QFileSystemModelPrivate: de-inline ctor and dtor
  * Network: update Public Suffix List
  * macOS: Ensure proper quoting when calling otool in objc_namespace script
  * QKeySequence: Fix the one-off error in the mac glyph array size
- Commits dropped by the rebase:
  * Apply CVE-2022-27404-27405-27406-qtbase-5.15.diff
  * QArrayData: fix UB via reinterpret_cast (crash with FORTIFY_SOURCE=3)
  * Adapt for q_EVP_PKEY_base_id → q_EVP_PKEY_get_base_id rename in OpenSSL 3
  * Don't use a deprecated function if built/linked with OpenSSL v3</changelog>
  <changelog author="christophe@krop.fr" date="1696593601">- Enable the experimental native painting feature to improve
  remote desktop performances (boo#1214915)
  exporting QT_XCB_NATIVE_PAINTING is required to use the feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1697716800">- Update to version 5.15.11+kde138:
  * QLibraryPrivate: Actually merge load hints
  * QPluginLoader: report the right load hints
  * xkb: fix build with libxkbcommon 1.6.0 and later
  * a11y atspi: Map ButtonMenu role to AT-SPI equivalent</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1703851200">- Update to version 5.15.12+kde144, rebased upstream:
  * QMimeDatabase: handle buggy type definitions with circular inheritance
  * xcb: only set base size when it's valid
  * QPixmapCache: fix leaking of QStrings and Keys on clear()
  * OpenFile portal: do not use O_PATH fds
  * QSystemTrayIcon: properly disconnect old menu in setContextMenu()
  * Guard QTabBar against nested event processing during moving tabs
  * QDial: don't crash when min==max and setting a value != min &amp; max
  * QStandardItemModel: don't leak in mimeData()
  * SQL/MySQL: properly initialize variable
  * QWidgetTextControl: ignore invalid input method event
  * Update the LGPL license header
  * SQL/MySQL: fix handling of json column
  * Remove QMAKE_RANLIB and QMAKE_LINK_SHLIB from android/default_pre.prf
  * macOS: Fix less common writing systems on Catalina and later
  * Blacklist 1 tests in tst_QFtp on ubuntu-20.04
  * Update bundled libpng to version 1.6.39
  * Android: Fix signing of APKs that are generated when an AAB is also built
  * Update bundled zlib to version 1.2.13
  * doc: update the limitation of QSystemTrayIcon on X11
  * Blacklist 1 tests in tst_QTimer on ubuntu-20.04
  * Add benchmarks for QLocale number parsing
  * Add benchmarks for QString number parsing
  * Android: Fix incorrect fullscreen dimensions
  * Gtk3Theme: set XCURSOR_SIZE and XCURSOR_THEME for wayland sessions
  * xcb: Flush Display when processing xcb events
  * xcb: Add xlib wrapper for XFlush()
  * QHostAddress: Fix incorrect comparison against 'Any'
  * QSsl[OpenSSL/Android]: Fix hardcoded 1_1 suffix
  * BLACKLIST: tst_QApplication::sendEventsOnProcessEvents for RHEL 9.0
  * QMacStyle: do not set white color for grayed out button
  * Work round macOS's omission of en_DE from its own uiLanguages()
  * Suppress a deprecation warning in tst_QDateTime::toString_enumformat()
  * QJsonValue: fix incorrect to{Array,Object} when the value is empty
  * QGtk3Dialog: remove the #include for empty moc
  * Remove unneeded QWindow from QGtk3Dialog
  * tst_QSslSocket: Delete sslOptions
  * tst_QSslServer: Make the in-process server use TLS1.2
  * Android: fix Gradle warning about using enableUncompressedNativeLibs
  * Mention  limitation of QDir::drives() on Windows
  * QFileSystemEngine/Win: fix incorrect buffer size in currentPath()
  * Android: properly retrieve mime type of uri to for openUrl()
  * Android: Fix clipboard issue with urls
  * Android: Add a way to disable accessibility via an environment var
  * Update bundled libpng to version 1.6.38
  * QIOSMessageDialog::exec - work around 'windowsless' exec
  * QIosScreen: retain the right window
  * tst_Q{BitArray,ContiguousCache}: check not only count(), but size(), too
  * QIosTextResponder: stop using deprecated constants and type
  * qcompilerdetection.h: detect Coverity
  * Android: Fix Display.getRealMetrics deprecation
  * Fix broken Text rendering when noantialiased NativeRendering is used
  * forkfd: fix Clang 15 ATOMIC_VAR_INIT deprecation warning
  * eglfs: Add env.var. to disable the dedicated drmHandleEvent thread
  * doc: Don't put strings into QVector&lt;double&gt;
  * Remove focusProxyAndInputMethods from tst_QWidget
  * Bump version to 5.15.12
  * Update documentation of qWaitForWindowActive / qWaitForWindowExposed
  * QtHttp: Lower the severity of some log output
  * StyleSheetStyle: Fix color of placeholder texts in text edits
  * Android: Fix flickering on split screen mode
  * Update url to IAccessible2 Specification</changelog>
  <changelog author="alarrosa@suse.com" date="1704283200">- Update to version 5.15.12+kde147:
  * Http2: fix potential overflow in assemble_hpack_block()
    (bsc#1218413, CVE-2023-51714)
  * HPack: fix incorrect integer overflow check
  * HPack: fix a Yoda Condition</changelog>
  <changelog author="fvogt@suse.com" date="1708084800">- Update to version 5.15.12+kde151:
  * Improve KTX file reading memory safety (CVE-2024-25580, boo#1219996)
  * Revert "xcb: only set base size when it's valid"
  * Fix potential leak of QPropertyAnimation in QLineEditIconButton
  * QBitArray: correct inline keyword</changelog>
  <changelog author="alarrosa@suse.com" date="1720785600">- Add patch from upstream to fix a regression in the ODBC driver
  (bsc#1227513, QTBUG-112375):
  * 0001-QSQL-ODBC-fix-regression-trailing-NUL.patch
  * 0002-SQL-ODBC-Pass-correct-length-to-SQLColAttribute.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1722945600">- Add rebased upstream patch to delay any HTTP2 communication until
  encrypted() can be responded to (bsc#1227426, CVE-2024-39936):
  * 0001-HTTP2-Delay-any-communication-until-encrypted-can-be.patch
- Add upstream patch to fix a NULL pointer dereference via the
  function QXcbConnection::initializeAllAtoms() when there is
  anomalous behavior from the X server (bsc#1222120,
  CVE-2023-45935):
  * 0001-xcb-guard-a-pointer-before-usage.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756728000">- Add patch from upstream to fix a precondition violation in call
  to QByteArrayView::at() which can cause crashes (bsc#1243958,
  CVE-2025-5455):
  * 0001-qDecodeDataUrl-fix-precondition-violation-in-call-to.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756814400">- Add patch from upstream to initialize a member variable that was
  uninitialized under some circumstances:
  * 0001-QObjectPrivateSignal-initialize-all-members.patch
- Add patch from upstream to fix a crash when parsing a particular
  glyph in a particular font (QTBUG-124310):
  * 0001-Avoid-crash-in-font-distancefield-computation.patch
  * 0002-Fix-crash-in-font-distancefield-computation.patch
- Add patch from upstream to fix avoid repeatedly registering
  xsettings callbacks when switching cursor themes:
  * 0001-xcb-Avoid-repeatedly-registering-xsettings-callbacks-When.patch
- Add patch from upstream to check validity of RandR output info
  before using it (QTBUG-128906):
  * 0001-xcb-check-validity-of-RandR-output-info-before-using-it.patch
- Add patch from upstream to fix reparenting a window so it takes
  effect even if there are no other state changes to the window:
  * 0001-xcb-Sync-XCB-connection-after-reparenting-window.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756900800">- Add patch from upstream to fix a low performance when processing
  XML data in encodeText (bsc#1239896, CVE-2025-30348):
  * 0001-XML_QDom-speedup-encodeText.patch</changelog>
</package>
<package pkgid="29d6663ad13a0c067a1236f82075a2c6da90e840eea79fd0da482026ef4cf077" name="libQt5Network-private-headers-devel" arch="noarch">
  <version epoch="0" ver="5.15.12+kde151" rel="150600.3.9.1"/>
  <changelog author="fvogt@suse.com" date="1678968000">- Update to version 5.15.8+kde183:
  * Add nullptr guard in QStyleSheetStyle::drawPrimitive(PE_PanelLineEdit)
  * QAbstractItemView: don't access invalid indexes on copy-key
  * Apply CVE-2023-24607-qtbase-5.15.diff (CVE-2023-24607,
    bsc#1209616)
  * QXcbConnection::getTimestamp: do not return stale timestamp
  * QToolButton: Elide text when constraints prevent from showing whole text
  * correctly set up ref counting in QThreadPool::tryStart(std::function)
  * Do not set Qt::ToolTip flag for QShapedPixmapWindow
  * Fix deletion order also for QImageReader/Writer::setDevice()
  * Fix deletion order in QImageReader/Writer destructors
  * QNetworkReply: Fix typos in the documentation
  * Doc: Fix typo in the online documentation template
  * Doc: Link to page documenting Qt trademarks in the copyright footer
  * [doc] Fix typo in QBuffer::setBuffer() description
  * qwindowsdrag: Fix typo in documentation
  * openglblacklists: Fix typo in description
  * qxcbscreen: Fix typo in documentation
  * Fix typos in SQL driver documentation
  * qxcbwindow.cpp: Fix sign-compare and another warnings
  * QToolButton: reimplement the fix for QTBUG-95255
  * QSysInfo::prettyProductName(): Add macOS Ventura product name
  * QSysInfo::prettyProductName(): add missing macOS product names
  * xcb: correctly disconnect xsettings callbacks
  * ibus: add SetCursorLocationRelative in InputContext.xml</changelog>
  <changelog author="fvogt@suse.com" date="1680523200">- Update to version 5.15.8+kde185:
  * QFSFileEngine: fix overflow bug when using lseek64
  * Add QImage null check when QOpenGLTexture converts
- Add patch to fix return key handling in QGroupBox on GNOME (bsc#1209364):
  * 0001-Revert-QGnomeTheme-Allow-Space-Return-Enter-and-Sele.patch
- Add patch to fix XInput2 events in big-endian X11 clients (bsc#1204883, QTBUG-105157):
  * big-endian-scroll.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1682078400">- Update to version 5.15.9+kde151, rebased upstream:
  * QCborValue: fix incorrect to{Array,Map} when the value is empty
  * QMargins: fix a missing "full stop" in the docs
  * QLibrary: restore translated string
  * QLibrary: fix possible arg() format clobbering
  * iOS: Use python3 for enumerating test target devices
  * Android: Treat ACTION_CANCEL as TouchCancelEvent
  * Doc: Fix broken formatting
  * QFileSystemEngine: fix potential formatting error
  * QString::asprintf: check that passing field widths as arguments works
  * Backport recent QFlags tests
  * network: Fix typos in documentation
  * Fix accuracy with screen composition
  * Doc: Update documentation for QElapsedTimer's in Windows
  * Document that QStandardPath::findExecutable works with absolute paths
  * macOS: Use native resize cursors for diagonal resize
  * Fix clipped glyphs in text rendering of QGraphicsTextItem
  * Change comparison data type to fix int overflow
  * Add missing Q_WEAK_OVERLOAD definition
  * Update QFileInfo docs to mention macOS aliases
  * Distinguish macOS aliases from normal symbolic links
  * Windows QPA: Fix frameless maximize on secondary screens
  * Rewrite tst_qdataurl as a data-driven test
  * Fix compilation for wasm
  * QIOSFileDialog/QIOSDocumentPickerController - handle dismissed view controller
  * Fix QDockWidget's dock area permissions after hovering
  * Fix C++20 ambiguous relational operators between QJsonValue{,Ref}
  * Android: make sure that orientationChange is reported after resize
  * Android: set all QScreen's geometry-related parameters together
  * Blacklist: test cases blacklisted in tst_QDBusConnection:
  * wasm:  fix issue with passing username/password to network request
  * macOS: Pass multi arch flags when linking qmake
  * QCocoaFileDialogHelper: Always enable symlinks and aliases to directories
  * Android: terminate argv passed to main() with nullptr
  * Update bundled libjpeg-turbo to version 2.1.3
  * ANGLE: Load the DirectX libraries from the system path directly
  * SQLite: Update SQLite to v3.37.2
  * Fix compiler warnings about unused parameters
  * Fix getsockopt option_value initial initialization
  * Http2: Fix redirect-handling
  * Android A11Y: Fix value rounding
  * Android A11Y: Announce value together with element name when focused
  * Android A11Y: handle valueChanged events
  * tst_QSystemSemaphore: give proper path to test-helper
  * QNX: Silence compiler warning by initializing variable
  * Update LICENSE.QT-LICENSE-AGREEMENT
  * winrt appxmanifest: Properly replace VCLibs version for newer MSVC versions
  * QAbstractSocket: Don't pretend pause and resume is a stack
  * Gui: test also depends for clipboard feature
  * QDesktopServices: deprecate destroying URL handlers w/o explicit unsetUrlHandler()
  * macOS: Respect QMAKE_APPLE_DEVICE_ARCHS when building qmake
  * HTTP: Make redirect response parsing more generic
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 20.04
  * Android A11Y: populate child elements when constructing node info
  * Fix issue where readyRead() could happen after disconnected()
  * QStringView: add missing constexpr so we can use is_constant_evaluated
  * Use Android's View.generateViewId() for generating ids for views/surfaces
  * Remove documentation of non-existing QAccessible state
  * Doc: Fix snippet to match actual QFileInfo behavior
  * Android: Re-focus focused accessibility node after orientation change
  * Android A11Y: execute C++ code on main Qt thread
  * Android: extract parentId for hidden object in advance
  * xcb: Show valuator atom names properly in categorized logging
  * Android: replace stacktrace with debug message in search for setService
  * Better document attaching a QFutureWatcher to a started QFuture
  * doc: Update GenericDataLocation location on iOS
  * BLACKLIST test_Gestures tests for RHEL-8.4
  * QPlainTestLogger: do not print "failure location" if there's no failure
  * QAbstractItemView: do not access invalid model indices (3/N)
  * Win32: always allow the event loop to be woken up by posted events
  * rhi: d3d11: Use __uuidof where we can
  * Don't QEXPECT_FAIL tst_QLineEdit::testQuickSelectionWithMouse on macOS ARM
  * Network: Emit authenticationRequired when using Ntlm
  * testlib: Disable window restoration on macOS in a non-persistent way
  * QAbstractItemView: do not access invalid model indices (2/N)
  * QAbstractItemView: do not access invalid model indices (1/N)
  * QAbstractItemView: code tidies
  * Update float16 part of TestLib selftest
  * QGuiApplication: constant-initialize lastCursorPosition
  * Blacklist tst_QFileSystemWatcher::signalsEmittedAfterFileMoved on all Windows versions
  * [Android]: Handle the screen name, modes and refreshRate properly
  * QVersionNumber: remove the "pure" attribute from commonPrefix()
  * QEvent: initialize the static userEventTypeRegistry constexprly
  * Let QXcbGlxWindow::createVisual fallback to QXcbWindow::createVisual
  * Android A11Y: fix content update notification when object is hidden
  * Android: explicitly remove accessibility focus when element is hidden
  * BLACKLIST tst_qfont for Red Hat 8.4 and Ubuntu 20.04
  * QtCore: includemocs
  * Fix memory leak in QtConcurrent::run when called with a NULL QThreadPool
  * INTEGRITY: Prevent deletion of virtual functions
  * QMake: replace a Q_ASSERT() with a Q_UNREACHABLE()
  * QTransform benchmark: measure what was promised
  * QStaticByteArrayMatcher: add a useful comment
  * QMacStyle: use the 'momentary push in' type for push buttons
  * qopengl.h: Move C header #include(s) out of the QT_NAMESPACE
  * Enable all supported 1.0 device features in QVulkanWindow
  * Fix queue passed to vkQueuePresent
  * QFusionStyle: don't draw an invalid outline for up/down buttons
  * Doc: Make QListIterator snippets more robust
  * QVersionNumber: don't detach() in rvalue QList/QVector ctor
  * QNetworkRequest: Document how Qt handles 301 and 302 status codes
  * Convert date-time to UTC before claiming it's in GMT
  * Remove execute permission from XML files
  * Add test case for style sheet selectors for enum properties
  * FreeType: allow falling back to synthesized bold if desired
  * Fix an assertion failure in massageAdjustedDateTime()
  * Relax tst_qvulkan::vulkanVersionRequest to make it compatible with 1.1
  * Doc: Replace "C:Documents and Settings" paths
  * QOrderedMutexLocker: fix compilation with C++11
  * QHttpNetworkConnection: Always set proxy settings to all channels
  * Add a markdown writer test for a checklist item ending with `code`
  * Use QTextCharFormat::fontFixedPitch to remember Markdown backtick spans
  * QWizardLayoutInfo: make == and != operators const
  * Revert "Android: Fix screen flicker issues"
  * macOS: Handle momentum scroll NSEventPhaseBegan when scroll had ended
  * SQLite: Update SQLite to v3.37.0
  * Update copyright year to 2022
  * QTzTimeZonePrivate: use ctor delegation instead of init()
  * QTzTimeZonePrivate: fix permanently-detaching m_icu
  * tst_QGraphicsView: fix memleak
  * Doc: Update external links to Qt Creator Manual
  * macOS: assume an unidentified tablet device is a stylus
  * tst_QItemModel: fix memleaks
  * tst_qanimationgroup: fix memleaks
  * QAbstractAnimation: add missing forward-declaration
  * [doc] QCoreApplication::installTranslator() doesn't take ownership
  * tst_qtranslator: fix memleak
  * QTestData: fix streaming of u8 string literals in C++20 mode
  * QThread/Unix: extract duplicate code
  * QWindowPrivate: fix inconsistent inline on some methods
  * tst_QStringList: check that join(u'0') embeds NULs
  * macOS: Sanitize scroll deltas for NSEventPhaseCancelled
  * tst_qsharedmemory: skip readOnly() test under asan
  * QXmlStreamReader: update test distribution
  * QZipReader: update to unzip partly broken archives
  * Deliver context menu event with correct coordinates to widgets in popups
  * QTextHtmlParser: fix prefix lookahead and html comments
  * QtConcurrent::run crashes on program exit
  * tst_QPropertyAnimation: fix leaks occurring under normal operation
  * tst_QPropertyAnimation: fix wrong comment
  * QLogging: fix potential missing NUL-terminator when calling OutputDebugString
  * Fix qt_scrollRectInImage when scrolling outside of the image
- Commits dropped by the rebase:
  * Fix compile with Qt5: Use QString::mid instead of QString::sliced
  * Restore C++11 compatibility after e8b9f4c28d3ab5e960dc54f2dc0c4b749b0b50e0
  * QDateTime: Don't require c++17</changelog>
  <changelog author="fvogt@suse.com" date="1683633600">- Amend patch to fix mouse grabbing as well (bsc#1211024):
  * big-endian-scroll.patch</changelog>
  <changelog author="fvogt@suse.com" date="1684929600">- Update to version 5.15.9+kde154:
  * Hsts: match header names case insensitively (CVE-2023-32762,
    QTBUG-113392, bsc#1211797)
  * Fix specific overflow in qtextlayout (CVE-2023-32763,
    QTBUG-113337, bsc#1211798)
  * QDnsLookup/Unix: make sure we don't overflow the buffer
    (CVE-2023-33285, boo#1211642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1686657600">- Update to version 5.15.10+kde129, rebased upstream:
  * Ssl: Copy the on-demand cert loading bool from default config
  * Schannel: Reject certificate not signed by a configured CA certificate (boo#1211994, CVE-2023-34410)
  * qnetworkreplyfileimpl_p.h: fix header guard name
  * Revert "Draw the cursor considering the descent is 0"
  * Use pkgconfig in order to find libproxy configuration
  * Upgrade PCRE2 to 10.40
  * Android A11Y: handle LocationChanged event only for focused element
  * Port binary JSON to new special integer bitfields
  * INTEGRITY: enable C99 globally
  * QObject: mark two error reporting functions COLD
  * Endian: Provide special integer bitfield unions
  * Android: set useLegacyPackaging to true in build.gradle
  * QWidgetTextControl: port to new-style connects (faster)
  * Sync qxmlstream.g with qxmlstreamparser_p.h [1/2]: switched lines
  * tst_QNetworkReply try stabilize autoDeleteReplies tests
  * Remove duplicated include for &lt;limits&gt;
  * Fix recursion crash when calling setStyleSheet with `qproperty-styleSheet`
  * qwindowsxpstyle: Fix typos in documentation
  * Correct prefix reported for end element in QXmlStreamReader
  * Android A11Y: Add supported role infos to A11yNodeInfo
  * Fix handling of DateTime values in QSettings
  * Fix off-by-one for "typically" lowest value INT_MIN
  * xml: Fix typos in documentation
  * QWindowsWindow: Fix typo in documentation
  * includemocs (updated script)
  * widgets: Fix typos in documentation
  * cocoa: Fix typo in debug messages
  * Only scroll QMenu when there is a valid active action
  * QTimer: Add note in documentation
  * Fix QListView assert when the last row is moved in IconMode
  * QFileDialog: Fix adding default suffix when file path contains dot
  * QLineEdit: account for the placeholderText when computing lineRect
  * QFileDialog::saveFileContent crashes on accept
  * QCompleter: QCompleter unexpectedly changes QLineEdit text
  * Fix build error on iOS with the configure option -qtnamespace
  * Draw the cursor considering the descent is 0
  * Remove pure-virtual-signals.h include from tst_moc.cpp
  * plugins: image formats - fix odr violation
  * dbus: Fix typos
  * qwindowsdialoghelpers: Fix typo in documentation
  * QTableView: Document the customizations applied to QHeaderView
  * Unicodetools: compile
  * eglfs_x11: Fix running flag linkage
  * qcompilerdetection.h: add Q_CC_{GNU,MSVC,CLANG}_ONLY macros
  * Fix CMake warning about "missing closing ' quote"
  * Fix alignment of next/prev links in offline style
  * QtDBus: includemocs
  * Image Plugins: includemocs(-ish)
  * QtGui: includemocs
  * QXcbNativeInterface: remove unused field m_sysTraySelectionAtom
  * Windows QPA: Fix slowdown with large table/tree views with accessibility
  * Macstyle: fix the text color on the disabled button
  * QMacStyle: fix tool buttons (in checked mode)
  * QTeamCityLogger: fix .arg() placeholder injection
  * QAbstractTestLogger: disable copying
  * Fix errorMessageFromComError()
  * QtNetwork: includemocs
  * AppleUnifiedLogger: Remove manually managed os_log_t cache
  * examples: add WindowStaysOnBottomHint into preview text
  * QSharedPointer: Use matching new/delete
  * QIbusPlatformInputContextPlugin: includemocs
  * QGtk3ThemePlugin: includemocs
  * QTuioTouchPlugin: includemocs
  * QtWidgets: includemocs v2022
  * QMYSQLDriverPlugin: includemocs
  * QtDeviceDiscoverySupportPrivate: includemocs
  * QLinuxFbIntegrationPlugin: includemocs
  * QtPrintSupport: includemocs
  * QSQLiteDriverPlugin: includemocs
  * QtFbSupportPrivate: includemocs
  * QXdgDesktopPortalThemePlugin: includemocs
  * QtTest: includemocs
  * QComposePlatformInputContextPlugin: includemocs
  * QtSql: includemocs
  * QVncIntegrationPlugin: includemocs
  * Fix backingstore fractional DPR glitches for widgets in child windows
  * Include &lt;limits&gt; where std::numeric_limits is used
  * QtInputSupportPrivate: includemocs
  * Document the default value of QSFPM::sortOrder()
  * Better document how to enable sorting in QSPFM
  * Correct documentation of INI format's loss of type information
  * Android: add missing properties in AndroidManifest.xml
  * Fix assertion failure when parsing a doubly-invalid date-time text
  * Windows QPA: Correct mistake when calculating minmaxinfo
  * Android: replace ndk.dir with android.ndkVersion in build.gradle
  * Android: remove the old copy of gradle.properties after reading it
  * CMake Android Support: Fix signing of APKs
  * Android: fix A11Y object description
  * macOS: Fix warning about comparing different types in QCocoaScreen::isOnline
  * Fix qmake build on FreeBSD
  * Update documentation of enum Qt::DockWidgetArea
  * xcb: recreate xcb window under some conditions
  * objc_namespace: Add support for universal binaries
  * objc_namespace: Fix misspelled argument for silencing output
  * objc_namespace: Update parsing logic to account for otool changes
  * Blacklist passwordAuth for Ubuntu 20.04
  * Android: wrap QAndroidInputContext's m_focusObject in a QPointer
  * Fix compilation with GCC 12 (and on Fedora 35 and newer)
  * Chip example: fix an accidental bool-&gt;int conversion when using PMF connections
  * qmake: Add support for C++23
  * Android: use BCP 47 tag to create a correct Locale for QTimeZone::displayName()
  * QDateTime: fix adjusted datetime handling
  * Fix crash in tst_qmltc_examples on Android
  * macOS: Remove dead code for focus ring handling in Mac style
  * Detach for colortransforms of indexed formats
  * tst_QTcpSocket::connectToHostError - handle possible timeouts
  * CoreText: Avoid populating font family aliases if family was populated
  * Graphicsview: Avoid background clearing glitches under fractional DPR
  * Windows QPA: Avoid slowdown with UI Automation name change notification
  * Windows QPA: Avoid sending accessibility notifications before activation
  * Windows: Fix potential crash when retrieving default printer
  * Make Ubuntu with its non-standard security level happy
  * Android: Blacklist failing tests on tst_QGraphicsProxyWidget
  * Update LA 4.4.1
  * iOS A11Y: Set more accessibilityTraits
  * QNX: Fix compiler warning by when FEATURE_clipboard is not enabled
  * Document that native file dialogs might not show a title
  * Doc: Remove mentionings of overflows from QElapsedTimer
  * QTextMarkdownImporter: don't apply text char format to list item block
- Commits dropped by the rebase:
  * QBuffer: add missing &lt;limits&gt; include
  * Fix developer build</changelog>
  <changelog author="gmbr3@opensuse.org" date="1687953600">- Change %_libqt5_libexecdir to %_libexecdir/qt5 (bsc#1174075)</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch icu-devel requires to pkgconfig to allow switching libicu
  versions</changelog>
  <changelog author="fvogt@suse.com" date="1695902401">- Update to version 5.15.10+kde159 (bsc#1214327, CVE-2023-37369):
  * Fix CVE-2023-43114
  * QMimeDatabase: fix detection of pattern conflict in different prefixes
  * Fix highdpi conversion of QTabletEvent coordinates on xcb
  * widget: set WA_X11NetWmWindowType* after xcb window was created
  * Fix crash when setting override cursor on multiple clients
  * QAccessibleWidget: Remove pointless ZWSP in warning message
  * Android A11Y: Fix deadlock in QtAndroidAccessibility::runInObjectContext()
  * Correctly parse non BMP char refs in the sax parser
  * Clear the _X version of alongside the enum deprecator
  * Fix UB (signed char passed to &lt;cctype&gt; function)
  * Qt3DRender: includemocs
  * Fix capitalization error in auto-generated qdbusmacros.h include
  * QColorDialog: Ignore mouse move events when no mouse button is pressed
  * QHostInfo: fix remaining slotObj leaks
  * QXmlStreamReader: Raise error on unexpected tokens (CVE-2023-38197,
    QTBUG-92113, QTBUG-95188, bsc#1213326)
  * QTextLayout: Reconsider cursor drawing on TextObject
  * Ensure consistent cursor width under fractional scaling
  * Fix QTextEdit cursor rectangle vertical positioning
  * Return 0 in QWindow::winId in case of failed platform window creation
  * Doc: note QWindow::winId() will cause platform window creation
  * QSslDiffieHellmanParameters: fix mem-leak
  * QHostInfo: fix leaking slot object
  * Make sure we don't count down past 0 QT_FATAL_CRITICALS
  * QLogging: DRY isFatal(QtMsgType)
  * tst_QXmlStream: remove unneeded _ba UDLs
  * Fix typo in QXmlStreamReader error message
  * QXmlStreamReader: make fastScanName() indicate parsing status to callers
  * QXmlStreamReader: change fastScanName() to take a Value*
  * Fix Croatia's currency
  * SSL: upgrade the default DH parameters</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1696593600">- Update to version 5.15.11+kde134, rebased upstream:
  * Revert "Windows QPA: Add support to UiaRaiseNotificationEvent()"
  * FileChooser portal: Make sure filter.name is not empty
  * QPersistentModelIndex: fix UB (op&lt; on unrelated pointers)
  * Avoid crash when keysymToQtKey(keysym, Qt::ControlModifier) is called
  * a11y atspi: translate coords for GetOffsetAtPoint the right way
  * a11y atspi: Take dialog into account as top-level window
  * a11y atspi: Fix incorrect use of x instead of y position
  * macOS: Handle asynchronous deminiaturizing of windows
  * QTranslator: generalize a UNIX-only path
  * iOS, input panel: be more careful before enabling QIOSKeyboardListener
  * Android: Fix flickering on window resize and show keyboard
  * Android A11Y: Check for active surface before calling into native code
  * xcb: Delete touch points without target windows
  * Blacklist 1 tests in tst_QDBusConnection on ubuntu-20.04
  * Fix CMake builds without ANDROID_SDK
  * Blacklist 2 tests in tst_Http2 on ubuntu-20.04
  * Blacklist 1 tests in tst_QSqlQuery on macos
  * Defer creating the special shaders in the texture blitter
  * tst_QSslSocket::serverCipherPreferencies - fix for OpenSSL v3
  * QTemporaryFile: document rename() differences from QFile
  * Doc: 3rd party: Fix reference to FreeType LICENSE.txt
  * Update bundled libjpeg-turbo to version 2.1.4
  * tst_QSsSocket: fix verifyClientCertificate with OpenSSL 3
  * tst_QSslSocket: regenerate certificate used for setLocalCertificateChain
  * tst_QSslSocket::protocolServerSide - make it work with OpenSSL v3
  * tst_QSslSocket::oldErrorsOnSocketReuse - make it work with OpenSSL v3
  * Update zconf.h prefixes to match zlib v1.2.12 update
  * xcb: fix D&amp;D in same xembed client
  * xcb: use global coordinates for position of D&amp;D for xembed client
  * Doc: Update QMetaType::metaObject() descriptions
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 22.04
  * BLACKLIST tst_qfont for Ubuntu 22.04
  * BLACKLIST tst_QMenuBar::check_menuPosition for Ubuntu 22.04
  * tst_QDtls::verifyClientCertficiate - update certs for OpenSSL v3
  * QSslCertificate::toText(): add a file to compare against
  * Fix the spelling of the word "combination"
  * tst_QSslCertificate::pkcs12 - skip the test if OpenSSL version &gt;= 3
  * Android A11Y: Fix TalkBack scrolling behavior
  * Android A11Y: Notify android about scroll events
  * QCocoaDrag: don't add pasteboard items with non-absolute URLs
  * QDirPrivate: pass input QList by cref
  * tst_qbytearray: remove qCompress_data for QT_NO_COMPRESS
  * QDeviceDiscoveryUDev: use NSDMI
  * QAuthenticator: Fix crash when using NTLM / Negotiate
  * Provide a native interface instance in minimal platform plugin
  * Android: document the supported clipboard mimetypes
  * Windows: Account for not finding child windows when calling ChildWindowFromPointEx
  * iOS: Send touch events asynchronously to avoid deadlocking UIKit event loop
  * Disable bitcode for iOS
  * macOS: Ignore deprecation for ReleaseIconRef
  * BLACKLIST tst_QApplication::sendEventsOnProcessEvents for Ubuntu 22.04
  * Convert Latin1 to UTF-16 before passing to ICU API
  * Doc: Remove repetition of word in text
  * eglfs: Fix screen cloning when atomic is enabled
  * Fix printing of dpr&gt;1 images on Windows
  * QHttp: Fix handling of redirect loaded from cache
  * Doc: Fix return type of QLEInteger/QBEInteger post-in/decrement ops
  * qmake: Fix installation of separate debug info for plugins
  * iOS: ensure we close inputpanel after clearing focusobject
  * Convert Latin1 to UTF-16 before passing to ICU API
  * qputenv: defend against non-NUL-terminated QByteArray values
  * QFontSubset: remove unused glyphName() overload
  * Statically assert that the __mips_dsp code is only active on 32-bit
  * QGtk3Theme: Ensure gtk uses the same windowing system as Qt
  * tst_QFocusFrame: fix -Wparantheses
  * Sync Vulkan device features between QVulkanWindow and QRhi
  * SQLite: Update SQLite to v3.39.2
  * Update freetype to 2.12.1
  * corelib: Fix typos in documentation
  * QAtomicInteger docs: mention bool and char8_t as 8-bit types
  * qgraphicsitem_cast: replace 0 with nullptr
  * Doc: Hide weak overload template magic from documentation
  * Revert "QDateTime: fix adjusted datetime handling"
  * Fix select handles disappears issues
  * tst_QSslKey: prepare for the migration to OpenSSL v3
  * tst_qnetworkreply: replace server.pem/key pair
  * Disable unit testing setting up QTcpServer on special Apple interfaces
  * qmake/msbuild: Turn off "use full paths in diagnostics" by default
  * qmake/msbuild: Support all /DEBUG:xxx linker options
  * qmake/msbuild: Support all /LTCG:xxx options
  * Android A11Y: Add content change type to content change event
  * Enabler for fractional scaling of text in Qt Quick
  * macOS: Override logical DPI to 72
  * Add QDom internalSubset implementation
  * Fix tst_AndroidAssets, broken by recent changes on assets load speed
  * Android: Improve loading speed of individual assets
  * Darwin: Replace deprecated symbol kIOMasterPortDefault with equivalent
  * macOS: Remove code for handling logical DPI changes
  * Fix an incorrect invocation of llvm-readobj
  * macOS: Ignore deprecation for kOnSystemDisk icon domain
  * Copy only files that belongs to QML module
  * Android: fix wrong position of cursor handle and editpopup menu in split screen
  * Doc: Document QML_IMPORTS_PATH and QMLPATHS
  * Add the missing RCC_DIR to '.qrc' paths when generating deployment settings
  * Android: Fix the offset of the EditPopupMenu
  * xcb: update xkb_state mask as much as possible
  * QDom: Stop treating non-BMP characters as invalid
  * Android 13: Fix warnings on starting an application
  * qxkbcommon: Map Super/Hyper to Meta early enough to have an effect
  * macOS: Ignore update requests for offline displays
  * macOS: Avoid recursively updating screens when window moves screen
  * qmake/MinGW: Install separate debug info of DLLs next to the DLL
  * QMainWindow: fix restoreState() for toolbars
  * Make two QDT benchmarks data-driven and add more rows
  * Fix doc and example of QLoggingCategory::installCategory()
  * qmake: Document Xcode behavior when bundling translation files
  * Android: Fix missing import
  * QByteArray: more GCC 12 -Werror=array-bound whack-a-mole
  * CMake: Fix android sdk version propagation
  * Restore C++20-deprecated mixed-enum bitwise operators
  * Android: Fix ANR when QtService and QtActivity load in same process
  * Fix restart QtActivity
  * QArrayData::data(): do type-punning via quintptr, not char *
  * QIOSTextResponder: recreate responder upon reset
  * QSslSocket: make it work with OpenSSL v3
  * QFileSystemModelPrivate: de-inline ctor and dtor
  * Network: update Public Suffix List
  * macOS: Ensure proper quoting when calling otool in objc_namespace script
  * QKeySequence: Fix the one-off error in the mac glyph array size
- Commits dropped by the rebase:
  * Apply CVE-2022-27404-27405-27406-qtbase-5.15.diff
  * QArrayData: fix UB via reinterpret_cast (crash with FORTIFY_SOURCE=3)
  * Adapt for q_EVP_PKEY_base_id → q_EVP_PKEY_get_base_id rename in OpenSSL 3
  * Don't use a deprecated function if built/linked with OpenSSL v3</changelog>
  <changelog author="christophe@krop.fr" date="1696593601">- Enable the experimental native painting feature to improve
  remote desktop performances (boo#1214915)
  exporting QT_XCB_NATIVE_PAINTING is required to use the feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1697716800">- Update to version 5.15.11+kde138:
  * QLibraryPrivate: Actually merge load hints
  * QPluginLoader: report the right load hints
  * xkb: fix build with libxkbcommon 1.6.0 and later
  * a11y atspi: Map ButtonMenu role to AT-SPI equivalent</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1703851200">- Update to version 5.15.12+kde144, rebased upstream:
  * QMimeDatabase: handle buggy type definitions with circular inheritance
  * xcb: only set base size when it's valid
  * QPixmapCache: fix leaking of QStrings and Keys on clear()
  * OpenFile portal: do not use O_PATH fds
  * QSystemTrayIcon: properly disconnect old menu in setContextMenu()
  * Guard QTabBar against nested event processing during moving tabs
  * QDial: don't crash when min==max and setting a value != min &amp; max
  * QStandardItemModel: don't leak in mimeData()
  * SQL/MySQL: properly initialize variable
  * QWidgetTextControl: ignore invalid input method event
  * Update the LGPL license header
  * SQL/MySQL: fix handling of json column
  * Remove QMAKE_RANLIB and QMAKE_LINK_SHLIB from android/default_pre.prf
  * macOS: Fix less common writing systems on Catalina and later
  * Blacklist 1 tests in tst_QFtp on ubuntu-20.04
  * Update bundled libpng to version 1.6.39
  * Android: Fix signing of APKs that are generated when an AAB is also built
  * Update bundled zlib to version 1.2.13
  * doc: update the limitation of QSystemTrayIcon on X11
  * Blacklist 1 tests in tst_QTimer on ubuntu-20.04
  * Add benchmarks for QLocale number parsing
  * Add benchmarks for QString number parsing
  * Android: Fix incorrect fullscreen dimensions
  * Gtk3Theme: set XCURSOR_SIZE and XCURSOR_THEME for wayland sessions
  * xcb: Flush Display when processing xcb events
  * xcb: Add xlib wrapper for XFlush()
  * QHostAddress: Fix incorrect comparison against 'Any'
  * QSsl[OpenSSL/Android]: Fix hardcoded 1_1 suffix
  * BLACKLIST: tst_QApplication::sendEventsOnProcessEvents for RHEL 9.0
  * QMacStyle: do not set white color for grayed out button
  * Work round macOS's omission of en_DE from its own uiLanguages()
  * Suppress a deprecation warning in tst_QDateTime::toString_enumformat()
  * QJsonValue: fix incorrect to{Array,Object} when the value is empty
  * QGtk3Dialog: remove the #include for empty moc
  * Remove unneeded QWindow from QGtk3Dialog
  * tst_QSslSocket: Delete sslOptions
  * tst_QSslServer: Make the in-process server use TLS1.2
  * Android: fix Gradle warning about using enableUncompressedNativeLibs
  * Mention  limitation of QDir::drives() on Windows
  * QFileSystemEngine/Win: fix incorrect buffer size in currentPath()
  * Android: properly retrieve mime type of uri to for openUrl()
  * Android: Fix clipboard issue with urls
  * Android: Add a way to disable accessibility via an environment var
  * Update bundled libpng to version 1.6.38
  * QIOSMessageDialog::exec - work around 'windowsless' exec
  * QIosScreen: retain the right window
  * tst_Q{BitArray,ContiguousCache}: check not only count(), but size(), too
  * QIosTextResponder: stop using deprecated constants and type
  * qcompilerdetection.h: detect Coverity
  * Android: Fix Display.getRealMetrics deprecation
  * Fix broken Text rendering when noantialiased NativeRendering is used
  * forkfd: fix Clang 15 ATOMIC_VAR_INIT deprecation warning
  * eglfs: Add env.var. to disable the dedicated drmHandleEvent thread
  * doc: Don't put strings into QVector&lt;double&gt;
  * Remove focusProxyAndInputMethods from tst_QWidget
  * Bump version to 5.15.12
  * Update documentation of qWaitForWindowActive / qWaitForWindowExposed
  * QtHttp: Lower the severity of some log output
  * StyleSheetStyle: Fix color of placeholder texts in text edits
  * Android: Fix flickering on split screen mode
  * Update url to IAccessible2 Specification</changelog>
  <changelog author="alarrosa@suse.com" date="1704283200">- Update to version 5.15.12+kde147:
  * Http2: fix potential overflow in assemble_hpack_block()
    (bsc#1218413, CVE-2023-51714)
  * HPack: fix incorrect integer overflow check
  * HPack: fix a Yoda Condition</changelog>
  <changelog author="fvogt@suse.com" date="1708084800">- Update to version 5.15.12+kde151:
  * Improve KTX file reading memory safety (CVE-2024-25580, boo#1219996)
  * Revert "xcb: only set base size when it's valid"
  * Fix potential leak of QPropertyAnimation in QLineEditIconButton
  * QBitArray: correct inline keyword</changelog>
  <changelog author="alarrosa@suse.com" date="1720785600">- Add patch from upstream to fix a regression in the ODBC driver
  (bsc#1227513, QTBUG-112375):
  * 0001-QSQL-ODBC-fix-regression-trailing-NUL.patch
  * 0002-SQL-ODBC-Pass-correct-length-to-SQLColAttribute.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1722945600">- Add rebased upstream patch to delay any HTTP2 communication until
  encrypted() can be responded to (bsc#1227426, CVE-2024-39936):
  * 0001-HTTP2-Delay-any-communication-until-encrypted-can-be.patch
- Add upstream patch to fix a NULL pointer dereference via the
  function QXcbConnection::initializeAllAtoms() when there is
  anomalous behavior from the X server (bsc#1222120,
  CVE-2023-45935):
  * 0001-xcb-guard-a-pointer-before-usage.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756728000">- Add patch from upstream to fix a precondition violation in call
  to QByteArrayView::at() which can cause crashes (bsc#1243958,
  CVE-2025-5455):
  * 0001-qDecodeDataUrl-fix-precondition-violation-in-call-to.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756814400">- Add patch from upstream to initialize a member variable that was
  uninitialized under some circumstances:
  * 0001-QObjectPrivateSignal-initialize-all-members.patch
- Add patch from upstream to fix a crash when parsing a particular
  glyph in a particular font (QTBUG-124310):
  * 0001-Avoid-crash-in-font-distancefield-computation.patch
  * 0002-Fix-crash-in-font-distancefield-computation.patch
- Add patch from upstream to fix avoid repeatedly registering
  xsettings callbacks when switching cursor themes:
  * 0001-xcb-Avoid-repeatedly-registering-xsettings-callbacks-When.patch
- Add patch from upstream to check validity of RandR output info
  before using it (QTBUG-128906):
  * 0001-xcb-check-validity-of-RandR-output-info-before-using-it.patch
- Add patch from upstream to fix reparenting a window so it takes
  effect even if there are no other state changes to the window:
  * 0001-xcb-Sync-XCB-connection-after-reparenting-window.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756900800">- Add patch from upstream to fix a low performance when processing
  XML data in encodeText (bsc#1239896, CVE-2025-30348):
  * 0001-XML_QDom-speedup-encodeText.patch</changelog>
</package>
<package pkgid="212c95eb50a3ee3f6a9d5a5816ceb030cb35f80350c7963a937caa84b374d1eb" name="libQt5Network5" arch="x86_64">
  <version epoch="0" ver="5.15.12+kde151" rel="150600.3.9.1"/>
  <changelog author="fvogt@suse.com" date="1678968000">- Update to version 5.15.8+kde183:
  * Add nullptr guard in QStyleSheetStyle::drawPrimitive(PE_PanelLineEdit)
  * QAbstractItemView: don't access invalid indexes on copy-key
  * Apply CVE-2023-24607-qtbase-5.15.diff (CVE-2023-24607,
    bsc#1209616)
  * QXcbConnection::getTimestamp: do not return stale timestamp
  * QToolButton: Elide text when constraints prevent from showing whole text
  * correctly set up ref counting in QThreadPool::tryStart(std::function)
  * Do not set Qt::ToolTip flag for QShapedPixmapWindow
  * Fix deletion order also for QImageReader/Writer::setDevice()
  * Fix deletion order in QImageReader/Writer destructors
  * QNetworkReply: Fix typos in the documentation
  * Doc: Fix typo in the online documentation template
  * Doc: Link to page documenting Qt trademarks in the copyright footer
  * [doc] Fix typo in QBuffer::setBuffer() description
  * qwindowsdrag: Fix typo in documentation
  * openglblacklists: Fix typo in description
  * qxcbscreen: Fix typo in documentation
  * Fix typos in SQL driver documentation
  * qxcbwindow.cpp: Fix sign-compare and another warnings
  * QToolButton: reimplement the fix for QTBUG-95255
  * QSysInfo::prettyProductName(): Add macOS Ventura product name
  * QSysInfo::prettyProductName(): add missing macOS product names
  * xcb: correctly disconnect xsettings callbacks
  * ibus: add SetCursorLocationRelative in InputContext.xml</changelog>
  <changelog author="fvogt@suse.com" date="1680523200">- Update to version 5.15.8+kde185:
  * QFSFileEngine: fix overflow bug when using lseek64
  * Add QImage null check when QOpenGLTexture converts
- Add patch to fix return key handling in QGroupBox on GNOME (bsc#1209364):
  * 0001-Revert-QGnomeTheme-Allow-Space-Return-Enter-and-Sele.patch
- Add patch to fix XInput2 events in big-endian X11 clients (bsc#1204883, QTBUG-105157):
  * big-endian-scroll.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1682078400">- Update to version 5.15.9+kde151, rebased upstream:
  * QCborValue: fix incorrect to{Array,Map} when the value is empty
  * QMargins: fix a missing "full stop" in the docs
  * QLibrary: restore translated string
  * QLibrary: fix possible arg() format clobbering
  * iOS: Use python3 for enumerating test target devices
  * Android: Treat ACTION_CANCEL as TouchCancelEvent
  * Doc: Fix broken formatting
  * QFileSystemEngine: fix potential formatting error
  * QString::asprintf: check that passing field widths as arguments works
  * Backport recent QFlags tests
  * network: Fix typos in documentation
  * Fix accuracy with screen composition
  * Doc: Update documentation for QElapsedTimer's in Windows
  * Document that QStandardPath::findExecutable works with absolute paths
  * macOS: Use native resize cursors for diagonal resize
  * Fix clipped glyphs in text rendering of QGraphicsTextItem
  * Change comparison data type to fix int overflow
  * Add missing Q_WEAK_OVERLOAD definition
  * Update QFileInfo docs to mention macOS aliases
  * Distinguish macOS aliases from normal symbolic links
  * Windows QPA: Fix frameless maximize on secondary screens
  * Rewrite tst_qdataurl as a data-driven test
  * Fix compilation for wasm
  * QIOSFileDialog/QIOSDocumentPickerController - handle dismissed view controller
  * Fix QDockWidget's dock area permissions after hovering
  * Fix C++20 ambiguous relational operators between QJsonValue{,Ref}
  * Android: make sure that orientationChange is reported after resize
  * Android: set all QScreen's geometry-related parameters together
  * Blacklist: test cases blacklisted in tst_QDBusConnection:
  * wasm:  fix issue with passing username/password to network request
  * macOS: Pass multi arch flags when linking qmake
  * QCocoaFileDialogHelper: Always enable symlinks and aliases to directories
  * Android: terminate argv passed to main() with nullptr
  * Update bundled libjpeg-turbo to version 2.1.3
  * ANGLE: Load the DirectX libraries from the system path directly
  * SQLite: Update SQLite to v3.37.2
  * Fix compiler warnings about unused parameters
  * Fix getsockopt option_value initial initialization
  * Http2: Fix redirect-handling
  * Android A11Y: Fix value rounding
  * Android A11Y: Announce value together with element name when focused
  * Android A11Y: handle valueChanged events
  * tst_QSystemSemaphore: give proper path to test-helper
  * QNX: Silence compiler warning by initializing variable
  * Update LICENSE.QT-LICENSE-AGREEMENT
  * winrt appxmanifest: Properly replace VCLibs version for newer MSVC versions
  * QAbstractSocket: Don't pretend pause and resume is a stack
  * Gui: test also depends for clipboard feature
  * QDesktopServices: deprecate destroying URL handlers w/o explicit unsetUrlHandler()
  * macOS: Respect QMAKE_APPLE_DEVICE_ARCHS when building qmake
  * HTTP: Make redirect response parsing more generic
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 20.04
  * Android A11Y: populate child elements when constructing node info
  * Fix issue where readyRead() could happen after disconnected()
  * QStringView: add missing constexpr so we can use is_constant_evaluated
  * Use Android's View.generateViewId() for generating ids for views/surfaces
  * Remove documentation of non-existing QAccessible state
  * Doc: Fix snippet to match actual QFileInfo behavior
  * Android: Re-focus focused accessibility node after orientation change
  * Android A11Y: execute C++ code on main Qt thread
  * Android: extract parentId for hidden object in advance
  * xcb: Show valuator atom names properly in categorized logging
  * Android: replace stacktrace with debug message in search for setService
  * Better document attaching a QFutureWatcher to a started QFuture
  * doc: Update GenericDataLocation location on iOS
  * BLACKLIST test_Gestures tests for RHEL-8.4
  * QPlainTestLogger: do not print "failure location" if there's no failure
  * QAbstractItemView: do not access invalid model indices (3/N)
  * Win32: always allow the event loop to be woken up by posted events
  * rhi: d3d11: Use __uuidof where we can
  * Don't QEXPECT_FAIL tst_QLineEdit::testQuickSelectionWithMouse on macOS ARM
  * Network: Emit authenticationRequired when using Ntlm
  * testlib: Disable window restoration on macOS in a non-persistent way
  * QAbstractItemView: do not access invalid model indices (2/N)
  * QAbstractItemView: do not access invalid model indices (1/N)
  * QAbstractItemView: code tidies
  * Update float16 part of TestLib selftest
  * QGuiApplication: constant-initialize lastCursorPosition
  * Blacklist tst_QFileSystemWatcher::signalsEmittedAfterFileMoved on all Windows versions
  * [Android]: Handle the screen name, modes and refreshRate properly
  * QVersionNumber: remove the "pure" attribute from commonPrefix()
  * QEvent: initialize the static userEventTypeRegistry constexprly
  * Let QXcbGlxWindow::createVisual fallback to QXcbWindow::createVisual
  * Android A11Y: fix content update notification when object is hidden
  * Android: explicitly remove accessibility focus when element is hidden
  * BLACKLIST tst_qfont for Red Hat 8.4 and Ubuntu 20.04
  * QtCore: includemocs
  * Fix memory leak in QtConcurrent::run when called with a NULL QThreadPool
  * INTEGRITY: Prevent deletion of virtual functions
  * QMake: replace a Q_ASSERT() with a Q_UNREACHABLE()
  * QTransform benchmark: measure what was promised
  * QStaticByteArrayMatcher: add a useful comment
  * QMacStyle: use the 'momentary push in' type for push buttons
  * qopengl.h: Move C header #include(s) out of the QT_NAMESPACE
  * Enable all supported 1.0 device features in QVulkanWindow
  * Fix queue passed to vkQueuePresent
  * QFusionStyle: don't draw an invalid outline for up/down buttons
  * Doc: Make QListIterator snippets more robust
  * QVersionNumber: don't detach() in rvalue QList/QVector ctor
  * QNetworkRequest: Document how Qt handles 301 and 302 status codes
  * Convert date-time to UTC before claiming it's in GMT
  * Remove execute permission from XML files
  * Add test case for style sheet selectors for enum properties
  * FreeType: allow falling back to synthesized bold if desired
  * Fix an assertion failure in massageAdjustedDateTime()
  * Relax tst_qvulkan::vulkanVersionRequest to make it compatible with 1.1
  * Doc: Replace "C:Documents and Settings" paths
  * QOrderedMutexLocker: fix compilation with C++11
  * QHttpNetworkConnection: Always set proxy settings to all channels
  * Add a markdown writer test for a checklist item ending with `code`
  * Use QTextCharFormat::fontFixedPitch to remember Markdown backtick spans
  * QWizardLayoutInfo: make == and != operators const
  * Revert "Android: Fix screen flicker issues"
  * macOS: Handle momentum scroll NSEventPhaseBegan when scroll had ended
  * SQLite: Update SQLite to v3.37.0
  * Update copyright year to 2022
  * QTzTimeZonePrivate: use ctor delegation instead of init()
  * QTzTimeZonePrivate: fix permanently-detaching m_icu
  * tst_QGraphicsView: fix memleak
  * Doc: Update external links to Qt Creator Manual
  * macOS: assume an unidentified tablet device is a stylus
  * tst_QItemModel: fix memleaks
  * tst_qanimationgroup: fix memleaks
  * QAbstractAnimation: add missing forward-declaration
  * [doc] QCoreApplication::installTranslator() doesn't take ownership
  * tst_qtranslator: fix memleak
  * QTestData: fix streaming of u8 string literals in C++20 mode
  * QThread/Unix: extract duplicate code
  * QWindowPrivate: fix inconsistent inline on some methods
  * tst_QStringList: check that join(u'0') embeds NULs
  * macOS: Sanitize scroll deltas for NSEventPhaseCancelled
  * tst_qsharedmemory: skip readOnly() test under asan
  * QXmlStreamReader: update test distribution
  * QZipReader: update to unzip partly broken archives
  * Deliver context menu event with correct coordinates to widgets in popups
  * QTextHtmlParser: fix prefix lookahead and html comments
  * QtConcurrent::run crashes on program exit
  * tst_QPropertyAnimation: fix leaks occurring under normal operation
  * tst_QPropertyAnimation: fix wrong comment
  * QLogging: fix potential missing NUL-terminator when calling OutputDebugString
  * Fix qt_scrollRectInImage when scrolling outside of the image
- Commits dropped by the rebase:
  * Fix compile with Qt5: Use QString::mid instead of QString::sliced
  * Restore C++11 compatibility after e8b9f4c28d3ab5e960dc54f2dc0c4b749b0b50e0
  * QDateTime: Don't require c++17</changelog>
  <changelog author="fvogt@suse.com" date="1683633600">- Amend patch to fix mouse grabbing as well (bsc#1211024):
  * big-endian-scroll.patch</changelog>
  <changelog author="fvogt@suse.com" date="1684929600">- Update to version 5.15.9+kde154:
  * Hsts: match header names case insensitively (CVE-2023-32762,
    QTBUG-113392, bsc#1211797)
  * Fix specific overflow in qtextlayout (CVE-2023-32763,
    QTBUG-113337, bsc#1211798)
  * QDnsLookup/Unix: make sure we don't overflow the buffer
    (CVE-2023-33285, boo#1211642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1686657600">- Update to version 5.15.10+kde129, rebased upstream:
  * Ssl: Copy the on-demand cert loading bool from default config
  * Schannel: Reject certificate not signed by a configured CA certificate (boo#1211994, CVE-2023-34410)
  * qnetworkreplyfileimpl_p.h: fix header guard name
  * Revert "Draw the cursor considering the descent is 0"
  * Use pkgconfig in order to find libproxy configuration
  * Upgrade PCRE2 to 10.40
  * Android A11Y: handle LocationChanged event only for focused element
  * Port binary JSON to new special integer bitfields
  * INTEGRITY: enable C99 globally
  * QObject: mark two error reporting functions COLD
  * Endian: Provide special integer bitfield unions
  * Android: set useLegacyPackaging to true in build.gradle
  * QWidgetTextControl: port to new-style connects (faster)
  * Sync qxmlstream.g with qxmlstreamparser_p.h [1/2]: switched lines
  * tst_QNetworkReply try stabilize autoDeleteReplies tests
  * Remove duplicated include for &lt;limits&gt;
  * Fix recursion crash when calling setStyleSheet with `qproperty-styleSheet`
  * qwindowsxpstyle: Fix typos in documentation
  * Correct prefix reported for end element in QXmlStreamReader
  * Android A11Y: Add supported role infos to A11yNodeInfo
  * Fix handling of DateTime values in QSettings
  * Fix off-by-one for "typically" lowest value INT_MIN
  * xml: Fix typos in documentation
  * QWindowsWindow: Fix typo in documentation
  * includemocs (updated script)
  * widgets: Fix typos in documentation
  * cocoa: Fix typo in debug messages
  * Only scroll QMenu when there is a valid active action
  * QTimer: Add note in documentation
  * Fix QListView assert when the last row is moved in IconMode
  * QFileDialog: Fix adding default suffix when file path contains dot
  * QLineEdit: account for the placeholderText when computing lineRect
  * QFileDialog::saveFileContent crashes on accept
  * QCompleter: QCompleter unexpectedly changes QLineEdit text
  * Fix build error on iOS with the configure option -qtnamespace
  * Draw the cursor considering the descent is 0
  * Remove pure-virtual-signals.h include from tst_moc.cpp
  * plugins: image formats - fix odr violation
  * dbus: Fix typos
  * qwindowsdialoghelpers: Fix typo in documentation
  * QTableView: Document the customizations applied to QHeaderView
  * Unicodetools: compile
  * eglfs_x11: Fix running flag linkage
  * qcompilerdetection.h: add Q_CC_{GNU,MSVC,CLANG}_ONLY macros
  * Fix CMake warning about "missing closing ' quote"
  * Fix alignment of next/prev links in offline style
  * QtDBus: includemocs
  * Image Plugins: includemocs(-ish)
  * QtGui: includemocs
  * QXcbNativeInterface: remove unused field m_sysTraySelectionAtom
  * Windows QPA: Fix slowdown with large table/tree views with accessibility
  * Macstyle: fix the text color on the disabled button
  * QMacStyle: fix tool buttons (in checked mode)
  * QTeamCityLogger: fix .arg() placeholder injection
  * QAbstractTestLogger: disable copying
  * Fix errorMessageFromComError()
  * QtNetwork: includemocs
  * AppleUnifiedLogger: Remove manually managed os_log_t cache
  * examples: add WindowStaysOnBottomHint into preview text
  * QSharedPointer: Use matching new/delete
  * QIbusPlatformInputContextPlugin: includemocs
  * QGtk3ThemePlugin: includemocs
  * QTuioTouchPlugin: includemocs
  * QtWidgets: includemocs v2022
  * QMYSQLDriverPlugin: includemocs
  * QtDeviceDiscoverySupportPrivate: includemocs
  * QLinuxFbIntegrationPlugin: includemocs
  * QtPrintSupport: includemocs
  * QSQLiteDriverPlugin: includemocs
  * QtFbSupportPrivate: includemocs
  * QXdgDesktopPortalThemePlugin: includemocs
  * QtTest: includemocs
  * QComposePlatformInputContextPlugin: includemocs
  * QtSql: includemocs
  * QVncIntegrationPlugin: includemocs
  * Fix backingstore fractional DPR glitches for widgets in child windows
  * Include &lt;limits&gt; where std::numeric_limits is used
  * QtInputSupportPrivate: includemocs
  * Document the default value of QSFPM::sortOrder()
  * Better document how to enable sorting in QSPFM
  * Correct documentation of INI format's loss of type information
  * Android: add missing properties in AndroidManifest.xml
  * Fix assertion failure when parsing a doubly-invalid date-time text
  * Windows QPA: Correct mistake when calculating minmaxinfo
  * Android: replace ndk.dir with android.ndkVersion in build.gradle
  * Android: remove the old copy of gradle.properties after reading it
  * CMake Android Support: Fix signing of APKs
  * Android: fix A11Y object description
  * macOS: Fix warning about comparing different types in QCocoaScreen::isOnline
  * Fix qmake build on FreeBSD
  * Update documentation of enum Qt::DockWidgetArea
  * xcb: recreate xcb window under some conditions
  * objc_namespace: Add support for universal binaries
  * objc_namespace: Fix misspelled argument for silencing output
  * objc_namespace: Update parsing logic to account for otool changes
  * Blacklist passwordAuth for Ubuntu 20.04
  * Android: wrap QAndroidInputContext's m_focusObject in a QPointer
  * Fix compilation with GCC 12 (and on Fedora 35 and newer)
  * Chip example: fix an accidental bool-&gt;int conversion when using PMF connections
  * qmake: Add support for C++23
  * Android: use BCP 47 tag to create a correct Locale for QTimeZone::displayName()
  * QDateTime: fix adjusted datetime handling
  * Fix crash in tst_qmltc_examples on Android
  * macOS: Remove dead code for focus ring handling in Mac style
  * Detach for colortransforms of indexed formats
  * tst_QTcpSocket::connectToHostError - handle possible timeouts
  * CoreText: Avoid populating font family aliases if family was populated
  * Graphicsview: Avoid background clearing glitches under fractional DPR
  * Windows QPA: Avoid slowdown with UI Automation name change notification
  * Windows QPA: Avoid sending accessibility notifications before activation
  * Windows: Fix potential crash when retrieving default printer
  * Make Ubuntu with its non-standard security level happy
  * Android: Blacklist failing tests on tst_QGraphicsProxyWidget
  * Update LA 4.4.1
  * iOS A11Y: Set more accessibilityTraits
  * QNX: Fix compiler warning by when FEATURE_clipboard is not enabled
  * Document that native file dialogs might not show a title
  * Doc: Remove mentionings of overflows from QElapsedTimer
  * QTextMarkdownImporter: don't apply text char format to list item block
- Commits dropped by the rebase:
  * QBuffer: add missing &lt;limits&gt; include
  * Fix developer build</changelog>
  <changelog author="gmbr3@opensuse.org" date="1687953600">- Change %_libqt5_libexecdir to %_libexecdir/qt5 (bsc#1174075)</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch icu-devel requires to pkgconfig to allow switching libicu
  versions</changelog>
  <changelog author="fvogt@suse.com" date="1695902401">- Update to version 5.15.10+kde159 (bsc#1214327, CVE-2023-37369):
  * Fix CVE-2023-43114
  * QMimeDatabase: fix detection of pattern conflict in different prefixes
  * Fix highdpi conversion of QTabletEvent coordinates on xcb
  * widget: set WA_X11NetWmWindowType* after xcb window was created
  * Fix crash when setting override cursor on multiple clients
  * QAccessibleWidget: Remove pointless ZWSP in warning message
  * Android A11Y: Fix deadlock in QtAndroidAccessibility::runInObjectContext()
  * Correctly parse non BMP char refs in the sax parser
  * Clear the _X version of alongside the enum deprecator
  * Fix UB (signed char passed to &lt;cctype&gt; function)
  * Qt3DRender: includemocs
  * Fix capitalization error in auto-generated qdbusmacros.h include
  * QColorDialog: Ignore mouse move events when no mouse button is pressed
  * QHostInfo: fix remaining slotObj leaks
  * QXmlStreamReader: Raise error on unexpected tokens (CVE-2023-38197,
    QTBUG-92113, QTBUG-95188, bsc#1213326)
  * QTextLayout: Reconsider cursor drawing on TextObject
  * Ensure consistent cursor width under fractional scaling
  * Fix QTextEdit cursor rectangle vertical positioning
  * Return 0 in QWindow::winId in case of failed platform window creation
  * Doc: note QWindow::winId() will cause platform window creation
  * QSslDiffieHellmanParameters: fix mem-leak
  * QHostInfo: fix leaking slot object
  * Make sure we don't count down past 0 QT_FATAL_CRITICALS
  * QLogging: DRY isFatal(QtMsgType)
  * tst_QXmlStream: remove unneeded _ba UDLs
  * Fix typo in QXmlStreamReader error message
  * QXmlStreamReader: make fastScanName() indicate parsing status to callers
  * QXmlStreamReader: change fastScanName() to take a Value*
  * Fix Croatia's currency
  * SSL: upgrade the default DH parameters</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1696593600">- Update to version 5.15.11+kde134, rebased upstream:
  * Revert "Windows QPA: Add support to UiaRaiseNotificationEvent()"
  * FileChooser portal: Make sure filter.name is not empty
  * QPersistentModelIndex: fix UB (op&lt; on unrelated pointers)
  * Avoid crash when keysymToQtKey(keysym, Qt::ControlModifier) is called
  * a11y atspi: translate coords for GetOffsetAtPoint the right way
  * a11y atspi: Take dialog into account as top-level window
  * a11y atspi: Fix incorrect use of x instead of y position
  * macOS: Handle asynchronous deminiaturizing of windows
  * QTranslator: generalize a UNIX-only path
  * iOS, input panel: be more careful before enabling QIOSKeyboardListener
  * Android: Fix flickering on window resize and show keyboard
  * Android A11Y: Check for active surface before calling into native code
  * xcb: Delete touch points without target windows
  * Blacklist 1 tests in tst_QDBusConnection on ubuntu-20.04
  * Fix CMake builds without ANDROID_SDK
  * Blacklist 2 tests in tst_Http2 on ubuntu-20.04
  * Blacklist 1 tests in tst_QSqlQuery on macos
  * Defer creating the special shaders in the texture blitter
  * tst_QSslSocket::serverCipherPreferencies - fix for OpenSSL v3
  * QTemporaryFile: document rename() differences from QFile
  * Doc: 3rd party: Fix reference to FreeType LICENSE.txt
  * Update bundled libjpeg-turbo to version 2.1.4
  * tst_QSsSocket: fix verifyClientCertificate with OpenSSL 3
  * tst_QSslSocket: regenerate certificate used for setLocalCertificateChain
  * tst_QSslSocket::protocolServerSide - make it work with OpenSSL v3
  * tst_QSslSocket::oldErrorsOnSocketReuse - make it work with OpenSSL v3
  * Update zconf.h prefixes to match zlib v1.2.12 update
  * xcb: fix D&amp;D in same xembed client
  * xcb: use global coordinates for position of D&amp;D for xembed client
  * Doc: Update QMetaType::metaObject() descriptions
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 22.04
  * BLACKLIST tst_qfont for Ubuntu 22.04
  * BLACKLIST tst_QMenuBar::check_menuPosition for Ubuntu 22.04
  * tst_QDtls::verifyClientCertficiate - update certs for OpenSSL v3
  * QSslCertificate::toText(): add a file to compare against
  * Fix the spelling of the word "combination"
  * tst_QSslCertificate::pkcs12 - skip the test if OpenSSL version &gt;= 3
  * Android A11Y: Fix TalkBack scrolling behavior
  * Android A11Y: Notify android about scroll events
  * QCocoaDrag: don't add pasteboard items with non-absolute URLs
  * QDirPrivate: pass input QList by cref
  * tst_qbytearray: remove qCompress_data for QT_NO_COMPRESS
  * QDeviceDiscoveryUDev: use NSDMI
  * QAuthenticator: Fix crash when using NTLM / Negotiate
  * Provide a native interface instance in minimal platform plugin
  * Android: document the supported clipboard mimetypes
  * Windows: Account for not finding child windows when calling ChildWindowFromPointEx
  * iOS: Send touch events asynchronously to avoid deadlocking UIKit event loop
  * Disable bitcode for iOS
  * macOS: Ignore deprecation for ReleaseIconRef
  * BLACKLIST tst_QApplication::sendEventsOnProcessEvents for Ubuntu 22.04
  * Convert Latin1 to UTF-16 before passing to ICU API
  * Doc: Remove repetition of word in text
  * eglfs: Fix screen cloning when atomic is enabled
  * Fix printing of dpr&gt;1 images on Windows
  * QHttp: Fix handling of redirect loaded from cache
  * Doc: Fix return type of QLEInteger/QBEInteger post-in/decrement ops
  * qmake: Fix installation of separate debug info for plugins
  * iOS: ensure we close inputpanel after clearing focusobject
  * Convert Latin1 to UTF-16 before passing to ICU API
  * qputenv: defend against non-NUL-terminated QByteArray values
  * QFontSubset: remove unused glyphName() overload
  * Statically assert that the __mips_dsp code is only active on 32-bit
  * QGtk3Theme: Ensure gtk uses the same windowing system as Qt
  * tst_QFocusFrame: fix -Wparantheses
  * Sync Vulkan device features between QVulkanWindow and QRhi
  * SQLite: Update SQLite to v3.39.2
  * Update freetype to 2.12.1
  * corelib: Fix typos in documentation
  * QAtomicInteger docs: mention bool and char8_t as 8-bit types
  * qgraphicsitem_cast: replace 0 with nullptr
  * Doc: Hide weak overload template magic from documentation
  * Revert "QDateTime: fix adjusted datetime handling"
  * Fix select handles disappears issues
  * tst_QSslKey: prepare for the migration to OpenSSL v3
  * tst_qnetworkreply: replace server.pem/key pair
  * Disable unit testing setting up QTcpServer on special Apple interfaces
  * qmake/msbuild: Turn off "use full paths in diagnostics" by default
  * qmake/msbuild: Support all /DEBUG:xxx linker options
  * qmake/msbuild: Support all /LTCG:xxx options
  * Android A11Y: Add content change type to content change event
  * Enabler for fractional scaling of text in Qt Quick
  * macOS: Override logical DPI to 72
  * Add QDom internalSubset implementation
  * Fix tst_AndroidAssets, broken by recent changes on assets load speed
  * Android: Improve loading speed of individual assets
  * Darwin: Replace deprecated symbol kIOMasterPortDefault with equivalent
  * macOS: Remove code for handling logical DPI changes
  * Fix an incorrect invocation of llvm-readobj
  * macOS: Ignore deprecation for kOnSystemDisk icon domain
  * Copy only files that belongs to QML module
  * Android: fix wrong position of cursor handle and editpopup menu in split screen
  * Doc: Document QML_IMPORTS_PATH and QMLPATHS
  * Add the missing RCC_DIR to '.qrc' paths when generating deployment settings
  * Android: Fix the offset of the EditPopupMenu
  * xcb: update xkb_state mask as much as possible
  * QDom: Stop treating non-BMP characters as invalid
  * Android 13: Fix warnings on starting an application
  * qxkbcommon: Map Super/Hyper to Meta early enough to have an effect
  * macOS: Ignore update requests for offline displays
  * macOS: Avoid recursively updating screens when window moves screen
  * qmake/MinGW: Install separate debug info of DLLs next to the DLL
  * QMainWindow: fix restoreState() for toolbars
  * Make two QDT benchmarks data-driven and add more rows
  * Fix doc and example of QLoggingCategory::installCategory()
  * qmake: Document Xcode behavior when bundling translation files
  * Android: Fix missing import
  * QByteArray: more GCC 12 -Werror=array-bound whack-a-mole
  * CMake: Fix android sdk version propagation
  * Restore C++20-deprecated mixed-enum bitwise operators
  * Android: Fix ANR when QtService and QtActivity load in same process
  * Fix restart QtActivity
  * QArrayData::data(): do type-punning via quintptr, not char *
  * QIOSTextResponder: recreate responder upon reset
  * QSslSocket: make it work with OpenSSL v3
  * QFileSystemModelPrivate: de-inline ctor and dtor
  * Network: update Public Suffix List
  * macOS: Ensure proper quoting when calling otool in objc_namespace script
  * QKeySequence: Fix the one-off error in the mac glyph array size
- Commits dropped by the rebase:
  * Apply CVE-2022-27404-27405-27406-qtbase-5.15.diff
  * QArrayData: fix UB via reinterpret_cast (crash with FORTIFY_SOURCE=3)
  * Adapt for q_EVP_PKEY_base_id → q_EVP_PKEY_get_base_id rename in OpenSSL 3
  * Don't use a deprecated function if built/linked with OpenSSL v3</changelog>
  <changelog author="christophe@krop.fr" date="1696593601">- Enable the experimental native painting feature to improve
  remote desktop performances (boo#1214915)
  exporting QT_XCB_NATIVE_PAINTING is required to use the feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1697716800">- Update to version 5.15.11+kde138:
  * QLibraryPrivate: Actually merge load hints
  * QPluginLoader: report the right load hints
  * xkb: fix build with libxkbcommon 1.6.0 and later
  * a11y atspi: Map ButtonMenu role to AT-SPI equivalent</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1703851200">- Update to version 5.15.12+kde144, rebased upstream:
  * QMimeDatabase: handle buggy type definitions with circular inheritance
  * xcb: only set base size when it's valid
  * QPixmapCache: fix leaking of QStrings and Keys on clear()
  * OpenFile portal: do not use O_PATH fds
  * QSystemTrayIcon: properly disconnect old menu in setContextMenu()
  * Guard QTabBar against nested event processing during moving tabs
  * QDial: don't crash when min==max and setting a value != min &amp; max
  * QStandardItemModel: don't leak in mimeData()
  * SQL/MySQL: properly initialize variable
  * QWidgetTextControl: ignore invalid input method event
  * Update the LGPL license header
  * SQL/MySQL: fix handling of json column
  * Remove QMAKE_RANLIB and QMAKE_LINK_SHLIB from android/default_pre.prf
  * macOS: Fix less common writing systems on Catalina and later
  * Blacklist 1 tests in tst_QFtp on ubuntu-20.04
  * Update bundled libpng to version 1.6.39
  * Android: Fix signing of APKs that are generated when an AAB is also built
  * Update bundled zlib to version 1.2.13
  * doc: update the limitation of QSystemTrayIcon on X11
  * Blacklist 1 tests in tst_QTimer on ubuntu-20.04
  * Add benchmarks for QLocale number parsing
  * Add benchmarks for QString number parsing
  * Android: Fix incorrect fullscreen dimensions
  * Gtk3Theme: set XCURSOR_SIZE and XCURSOR_THEME for wayland sessions
  * xcb: Flush Display when processing xcb events
  * xcb: Add xlib wrapper for XFlush()
  * QHostAddress: Fix incorrect comparison against 'Any'
  * QSsl[OpenSSL/Android]: Fix hardcoded 1_1 suffix
  * BLACKLIST: tst_QApplication::sendEventsOnProcessEvents for RHEL 9.0
  * QMacStyle: do not set white color for grayed out button
  * Work round macOS's omission of en_DE from its own uiLanguages()
  * Suppress a deprecation warning in tst_QDateTime::toString_enumformat()
  * QJsonValue: fix incorrect to{Array,Object} when the value is empty
  * QGtk3Dialog: remove the #include for empty moc
  * Remove unneeded QWindow from QGtk3Dialog
  * tst_QSslSocket: Delete sslOptions
  * tst_QSslServer: Make the in-process server use TLS1.2
  * Android: fix Gradle warning about using enableUncompressedNativeLibs
  * Mention  limitation of QDir::drives() on Windows
  * QFileSystemEngine/Win: fix incorrect buffer size in currentPath()
  * Android: properly retrieve mime type of uri to for openUrl()
  * Android: Fix clipboard issue with urls
  * Android: Add a way to disable accessibility via an environment var
  * Update bundled libpng to version 1.6.38
  * QIOSMessageDialog::exec - work around 'windowsless' exec
  * QIosScreen: retain the right window
  * tst_Q{BitArray,ContiguousCache}: check not only count(), but size(), too
  * QIosTextResponder: stop using deprecated constants and type
  * qcompilerdetection.h: detect Coverity
  * Android: Fix Display.getRealMetrics deprecation
  * Fix broken Text rendering when noantialiased NativeRendering is used
  * forkfd: fix Clang 15 ATOMIC_VAR_INIT deprecation warning
  * eglfs: Add env.var. to disable the dedicated drmHandleEvent thread
  * doc: Don't put strings into QVector&lt;double&gt;
  * Remove focusProxyAndInputMethods from tst_QWidget
  * Bump version to 5.15.12
  * Update documentation of qWaitForWindowActive / qWaitForWindowExposed
  * QtHttp: Lower the severity of some log output
  * StyleSheetStyle: Fix color of placeholder texts in text edits
  * Android: Fix flickering on split screen mode
  * Update url to IAccessible2 Specification</changelog>
  <changelog author="alarrosa@suse.com" date="1704283200">- Update to version 5.15.12+kde147:
  * Http2: fix potential overflow in assemble_hpack_block()
    (bsc#1218413, CVE-2023-51714)
  * HPack: fix incorrect integer overflow check
  * HPack: fix a Yoda Condition</changelog>
  <changelog author="fvogt@suse.com" date="1708084800">- Update to version 5.15.12+kde151:
  * Improve KTX file reading memory safety (CVE-2024-25580, boo#1219996)
  * Revert "xcb: only set base size when it's valid"
  * Fix potential leak of QPropertyAnimation in QLineEditIconButton
  * QBitArray: correct inline keyword</changelog>
  <changelog author="alarrosa@suse.com" date="1720785600">- Add patch from upstream to fix a regression in the ODBC driver
  (bsc#1227513, QTBUG-112375):
  * 0001-QSQL-ODBC-fix-regression-trailing-NUL.patch
  * 0002-SQL-ODBC-Pass-correct-length-to-SQLColAttribute.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1722945600">- Add rebased upstream patch to delay any HTTP2 communication until
  encrypted() can be responded to (bsc#1227426, CVE-2024-39936):
  * 0001-HTTP2-Delay-any-communication-until-encrypted-can-be.patch
- Add upstream patch to fix a NULL pointer dereference via the
  function QXcbConnection::initializeAllAtoms() when there is
  anomalous behavior from the X server (bsc#1222120,
  CVE-2023-45935):
  * 0001-xcb-guard-a-pointer-before-usage.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756728000">- Add patch from upstream to fix a precondition violation in call
  to QByteArrayView::at() which can cause crashes (bsc#1243958,
  CVE-2025-5455):
  * 0001-qDecodeDataUrl-fix-precondition-violation-in-call-to.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756814400">- Add patch from upstream to initialize a member variable that was
  uninitialized under some circumstances:
  * 0001-QObjectPrivateSignal-initialize-all-members.patch
- Add patch from upstream to fix a crash when parsing a particular
  glyph in a particular font (QTBUG-124310):
  * 0001-Avoid-crash-in-font-distancefield-computation.patch
  * 0002-Fix-crash-in-font-distancefield-computation.patch
- Add patch from upstream to fix avoid repeatedly registering
  xsettings callbacks when switching cursor themes:
  * 0001-xcb-Avoid-repeatedly-registering-xsettings-callbacks-When.patch
- Add patch from upstream to check validity of RandR output info
  before using it (QTBUG-128906):
  * 0001-xcb-check-validity-of-RandR-output-info-before-using-it.patch
- Add patch from upstream to fix reparenting a window so it takes
  effect even if there are no other state changes to the window:
  * 0001-xcb-Sync-XCB-connection-after-reparenting-window.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756900800">- Add patch from upstream to fix a low performance when processing
  XML data in encodeText (bsc#1239896, CVE-2025-30348):
  * 0001-XML_QDom-speedup-encodeText.patch</changelog>
</package>
<package pkgid="74994a243b30d30fadc9b35dcb50966d56078561e0e3c84e29cc7b4c7c84669b" name="libQt5OpenGL-devel" arch="x86_64">
  <version epoch="0" ver="5.15.12+kde151" rel="150600.3.9.1"/>
  <changelog author="fvogt@suse.com" date="1678968000">- Update to version 5.15.8+kde183:
  * Add nullptr guard in QStyleSheetStyle::drawPrimitive(PE_PanelLineEdit)
  * QAbstractItemView: don't access invalid indexes on copy-key
  * Apply CVE-2023-24607-qtbase-5.15.diff (CVE-2023-24607,
    bsc#1209616)
  * QXcbConnection::getTimestamp: do not return stale timestamp
  * QToolButton: Elide text when constraints prevent from showing whole text
  * correctly set up ref counting in QThreadPool::tryStart(std::function)
  * Do not set Qt::ToolTip flag for QShapedPixmapWindow
  * Fix deletion order also for QImageReader/Writer::setDevice()
  * Fix deletion order in QImageReader/Writer destructors
  * QNetworkReply: Fix typos in the documentation
  * Doc: Fix typo in the online documentation template
  * Doc: Link to page documenting Qt trademarks in the copyright footer
  * [doc] Fix typo in QBuffer::setBuffer() description
  * qwindowsdrag: Fix typo in documentation
  * openglblacklists: Fix typo in description
  * qxcbscreen: Fix typo in documentation
  * Fix typos in SQL driver documentation
  * qxcbwindow.cpp: Fix sign-compare and another warnings
  * QToolButton: reimplement the fix for QTBUG-95255
  * QSysInfo::prettyProductName(): Add macOS Ventura product name
  * QSysInfo::prettyProductName(): add missing macOS product names
  * xcb: correctly disconnect xsettings callbacks
  * ibus: add SetCursorLocationRelative in InputContext.xml</changelog>
  <changelog author="fvogt@suse.com" date="1680523200">- Update to version 5.15.8+kde185:
  * QFSFileEngine: fix overflow bug when using lseek64
  * Add QImage null check when QOpenGLTexture converts
- Add patch to fix return key handling in QGroupBox on GNOME (bsc#1209364):
  * 0001-Revert-QGnomeTheme-Allow-Space-Return-Enter-and-Sele.patch
- Add patch to fix XInput2 events in big-endian X11 clients (bsc#1204883, QTBUG-105157):
  * big-endian-scroll.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1682078400">- Update to version 5.15.9+kde151, rebased upstream:
  * QCborValue: fix incorrect to{Array,Map} when the value is empty
  * QMargins: fix a missing "full stop" in the docs
  * QLibrary: restore translated string
  * QLibrary: fix possible arg() format clobbering
  * iOS: Use python3 for enumerating test target devices
  * Android: Treat ACTION_CANCEL as TouchCancelEvent
  * Doc: Fix broken formatting
  * QFileSystemEngine: fix potential formatting error
  * QString::asprintf: check that passing field widths as arguments works
  * Backport recent QFlags tests
  * network: Fix typos in documentation
  * Fix accuracy with screen composition
  * Doc: Update documentation for QElapsedTimer's in Windows
  * Document that QStandardPath::findExecutable works with absolute paths
  * macOS: Use native resize cursors for diagonal resize
  * Fix clipped glyphs in text rendering of QGraphicsTextItem
  * Change comparison data type to fix int overflow
  * Add missing Q_WEAK_OVERLOAD definition
  * Update QFileInfo docs to mention macOS aliases
  * Distinguish macOS aliases from normal symbolic links
  * Windows QPA: Fix frameless maximize on secondary screens
  * Rewrite tst_qdataurl as a data-driven test
  * Fix compilation for wasm
  * QIOSFileDialog/QIOSDocumentPickerController - handle dismissed view controller
  * Fix QDockWidget's dock area permissions after hovering
  * Fix C++20 ambiguous relational operators between QJsonValue{,Ref}
  * Android: make sure that orientationChange is reported after resize
  * Android: set all QScreen's geometry-related parameters together
  * Blacklist: test cases blacklisted in tst_QDBusConnection:
  * wasm:  fix issue with passing username/password to network request
  * macOS: Pass multi arch flags when linking qmake
  * QCocoaFileDialogHelper: Always enable symlinks and aliases to directories
  * Android: terminate argv passed to main() with nullptr
  * Update bundled libjpeg-turbo to version 2.1.3
  * ANGLE: Load the DirectX libraries from the system path directly
  * SQLite: Update SQLite to v3.37.2
  * Fix compiler warnings about unused parameters
  * Fix getsockopt option_value initial initialization
  * Http2: Fix redirect-handling
  * Android A11Y: Fix value rounding
  * Android A11Y: Announce value together with element name when focused
  * Android A11Y: handle valueChanged events
  * tst_QSystemSemaphore: give proper path to test-helper
  * QNX: Silence compiler warning by initializing variable
  * Update LICENSE.QT-LICENSE-AGREEMENT
  * winrt appxmanifest: Properly replace VCLibs version for newer MSVC versions
  * QAbstractSocket: Don't pretend pause and resume is a stack
  * Gui: test also depends for clipboard feature
  * QDesktopServices: deprecate destroying URL handlers w/o explicit unsetUrlHandler()
  * macOS: Respect QMAKE_APPLE_DEVICE_ARCHS when building qmake
  * HTTP: Make redirect response parsing more generic
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 20.04
  * Android A11Y: populate child elements when constructing node info
  * Fix issue where readyRead() could happen after disconnected()
  * QStringView: add missing constexpr so we can use is_constant_evaluated
  * Use Android's View.generateViewId() for generating ids for views/surfaces
  * Remove documentation of non-existing QAccessible state
  * Doc: Fix snippet to match actual QFileInfo behavior
  * Android: Re-focus focused accessibility node after orientation change
  * Android A11Y: execute C++ code on main Qt thread
  * Android: extract parentId for hidden object in advance
  * xcb: Show valuator atom names properly in categorized logging
  * Android: replace stacktrace with debug message in search for setService
  * Better document attaching a QFutureWatcher to a started QFuture
  * doc: Update GenericDataLocation location on iOS
  * BLACKLIST test_Gestures tests for RHEL-8.4
  * QPlainTestLogger: do not print "failure location" if there's no failure
  * QAbstractItemView: do not access invalid model indices (3/N)
  * Win32: always allow the event loop to be woken up by posted events
  * rhi: d3d11: Use __uuidof where we can
  * Don't QEXPECT_FAIL tst_QLineEdit::testQuickSelectionWithMouse on macOS ARM
  * Network: Emit authenticationRequired when using Ntlm
  * testlib: Disable window restoration on macOS in a non-persistent way
  * QAbstractItemView: do not access invalid model indices (2/N)
  * QAbstractItemView: do not access invalid model indices (1/N)
  * QAbstractItemView: code tidies
  * Update float16 part of TestLib selftest
  * QGuiApplication: constant-initialize lastCursorPosition
  * Blacklist tst_QFileSystemWatcher::signalsEmittedAfterFileMoved on all Windows versions
  * [Android]: Handle the screen name, modes and refreshRate properly
  * QVersionNumber: remove the "pure" attribute from commonPrefix()
  * QEvent: initialize the static userEventTypeRegistry constexprly
  * Let QXcbGlxWindow::createVisual fallback to QXcbWindow::createVisual
  * Android A11Y: fix content update notification when object is hidden
  * Android: explicitly remove accessibility focus when element is hidden
  * BLACKLIST tst_qfont for Red Hat 8.4 and Ubuntu 20.04
  * QtCore: includemocs
  * Fix memory leak in QtConcurrent::run when called with a NULL QThreadPool
  * INTEGRITY: Prevent deletion of virtual functions
  * QMake: replace a Q_ASSERT() with a Q_UNREACHABLE()
  * QTransform benchmark: measure what was promised
  * QStaticByteArrayMatcher: add a useful comment
  * QMacStyle: use the 'momentary push in' type for push buttons
  * qopengl.h: Move C header #include(s) out of the QT_NAMESPACE
  * Enable all supported 1.0 device features in QVulkanWindow
  * Fix queue passed to vkQueuePresent
  * QFusionStyle: don't draw an invalid outline for up/down buttons
  * Doc: Make QListIterator snippets more robust
  * QVersionNumber: don't detach() in rvalue QList/QVector ctor
  * QNetworkRequest: Document how Qt handles 301 and 302 status codes
  * Convert date-time to UTC before claiming it's in GMT
  * Remove execute permission from XML files
  * Add test case for style sheet selectors for enum properties
  * FreeType: allow falling back to synthesized bold if desired
  * Fix an assertion failure in massageAdjustedDateTime()
  * Relax tst_qvulkan::vulkanVersionRequest to make it compatible with 1.1
  * Doc: Replace "C:Documents and Settings" paths
  * QOrderedMutexLocker: fix compilation with C++11
  * QHttpNetworkConnection: Always set proxy settings to all channels
  * Add a markdown writer test for a checklist item ending with `code`
  * Use QTextCharFormat::fontFixedPitch to remember Markdown backtick spans
  * QWizardLayoutInfo: make == and != operators const
  * Revert "Android: Fix screen flicker issues"
  * macOS: Handle momentum scroll NSEventPhaseBegan when scroll had ended
  * SQLite: Update SQLite to v3.37.0
  * Update copyright year to 2022
  * QTzTimeZonePrivate: use ctor delegation instead of init()
  * QTzTimeZonePrivate: fix permanently-detaching m_icu
  * tst_QGraphicsView: fix memleak
  * Doc: Update external links to Qt Creator Manual
  * macOS: assume an unidentified tablet device is a stylus
  * tst_QItemModel: fix memleaks
  * tst_qanimationgroup: fix memleaks
  * QAbstractAnimation: add missing forward-declaration
  * [doc] QCoreApplication::installTranslator() doesn't take ownership
  * tst_qtranslator: fix memleak
  * QTestData: fix streaming of u8 string literals in C++20 mode
  * QThread/Unix: extract duplicate code
  * QWindowPrivate: fix inconsistent inline on some methods
  * tst_QStringList: check that join(u'0') embeds NULs
  * macOS: Sanitize scroll deltas for NSEventPhaseCancelled
  * tst_qsharedmemory: skip readOnly() test under asan
  * QXmlStreamReader: update test distribution
  * QZipReader: update to unzip partly broken archives
  * Deliver context menu event with correct coordinates to widgets in popups
  * QTextHtmlParser: fix prefix lookahead and html comments
  * QtConcurrent::run crashes on program exit
  * tst_QPropertyAnimation: fix leaks occurring under normal operation
  * tst_QPropertyAnimation: fix wrong comment
  * QLogging: fix potential missing NUL-terminator when calling OutputDebugString
  * Fix qt_scrollRectInImage when scrolling outside of the image
- Commits dropped by the rebase:
  * Fix compile with Qt5: Use QString::mid instead of QString::sliced
  * Restore C++11 compatibility after e8b9f4c28d3ab5e960dc54f2dc0c4b749b0b50e0
  * QDateTime: Don't require c++17</changelog>
  <changelog author="fvogt@suse.com" date="1683633600">- Amend patch to fix mouse grabbing as well (bsc#1211024):
  * big-endian-scroll.patch</changelog>
  <changelog author="fvogt@suse.com" date="1684929600">- Update to version 5.15.9+kde154:
  * Hsts: match header names case insensitively (CVE-2023-32762,
    QTBUG-113392, bsc#1211797)
  * Fix specific overflow in qtextlayout (CVE-2023-32763,
    QTBUG-113337, bsc#1211798)
  * QDnsLookup/Unix: make sure we don't overflow the buffer
    (CVE-2023-33285, boo#1211642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1686657600">- Update to version 5.15.10+kde129, rebased upstream:
  * Ssl: Copy the on-demand cert loading bool from default config
  * Schannel: Reject certificate not signed by a configured CA certificate (boo#1211994, CVE-2023-34410)
  * qnetworkreplyfileimpl_p.h: fix header guard name
  * Revert "Draw the cursor considering the descent is 0"
  * Use pkgconfig in order to find libproxy configuration
  * Upgrade PCRE2 to 10.40
  * Android A11Y: handle LocationChanged event only for focused element
  * Port binary JSON to new special integer bitfields
  * INTEGRITY: enable C99 globally
  * QObject: mark two error reporting functions COLD
  * Endian: Provide special integer bitfield unions
  * Android: set useLegacyPackaging to true in build.gradle
  * QWidgetTextControl: port to new-style connects (faster)
  * Sync qxmlstream.g with qxmlstreamparser_p.h [1/2]: switched lines
  * tst_QNetworkReply try stabilize autoDeleteReplies tests
  * Remove duplicated include for &lt;limits&gt;
  * Fix recursion crash when calling setStyleSheet with `qproperty-styleSheet`
  * qwindowsxpstyle: Fix typos in documentation
  * Correct prefix reported for end element in QXmlStreamReader
  * Android A11Y: Add supported role infos to A11yNodeInfo
  * Fix handling of DateTime values in QSettings
  * Fix off-by-one for "typically" lowest value INT_MIN
  * xml: Fix typos in documentation
  * QWindowsWindow: Fix typo in documentation
  * includemocs (updated script)
  * widgets: Fix typos in documentation
  * cocoa: Fix typo in debug messages
  * Only scroll QMenu when there is a valid active action
  * QTimer: Add note in documentation
  * Fix QListView assert when the last row is moved in IconMode
  * QFileDialog: Fix adding default suffix when file path contains dot
  * QLineEdit: account for the placeholderText when computing lineRect
  * QFileDialog::saveFileContent crashes on accept
  * QCompleter: QCompleter unexpectedly changes QLineEdit text
  * Fix build error on iOS with the configure option -qtnamespace
  * Draw the cursor considering the descent is 0
  * Remove pure-virtual-signals.h include from tst_moc.cpp
  * plugins: image formats - fix odr violation
  * dbus: Fix typos
  * qwindowsdialoghelpers: Fix typo in documentation
  * QTableView: Document the customizations applied to QHeaderView
  * Unicodetools: compile
  * eglfs_x11: Fix running flag linkage
  * qcompilerdetection.h: add Q_CC_{GNU,MSVC,CLANG}_ONLY macros
  * Fix CMake warning about "missing closing ' quote"
  * Fix alignment of next/prev links in offline style
  * QtDBus: includemocs
  * Image Plugins: includemocs(-ish)
  * QtGui: includemocs
  * QXcbNativeInterface: remove unused field m_sysTraySelectionAtom
  * Windows QPA: Fix slowdown with large table/tree views with accessibility
  * Macstyle: fix the text color on the disabled button
  * QMacStyle: fix tool buttons (in checked mode)
  * QTeamCityLogger: fix .arg() placeholder injection
  * QAbstractTestLogger: disable copying
  * Fix errorMessageFromComError()
  * QtNetwork: includemocs
  * AppleUnifiedLogger: Remove manually managed os_log_t cache
  * examples: add WindowStaysOnBottomHint into preview text
  * QSharedPointer: Use matching new/delete
  * QIbusPlatformInputContextPlugin: includemocs
  * QGtk3ThemePlugin: includemocs
  * QTuioTouchPlugin: includemocs
  * QtWidgets: includemocs v2022
  * QMYSQLDriverPlugin: includemocs
  * QtDeviceDiscoverySupportPrivate: includemocs
  * QLinuxFbIntegrationPlugin: includemocs
  * QtPrintSupport: includemocs
  * QSQLiteDriverPlugin: includemocs
  * QtFbSupportPrivate: includemocs
  * QXdgDesktopPortalThemePlugin: includemocs
  * QtTest: includemocs
  * QComposePlatformInputContextPlugin: includemocs
  * QtSql: includemocs
  * QVncIntegrationPlugin: includemocs
  * Fix backingstore fractional DPR glitches for widgets in child windows
  * Include &lt;limits&gt; where std::numeric_limits is used
  * QtInputSupportPrivate: includemocs
  * Document the default value of QSFPM::sortOrder()
  * Better document how to enable sorting in QSPFM
  * Correct documentation of INI format's loss of type information
  * Android: add missing properties in AndroidManifest.xml
  * Fix assertion failure when parsing a doubly-invalid date-time text
  * Windows QPA: Correct mistake when calculating minmaxinfo
  * Android: replace ndk.dir with android.ndkVersion in build.gradle
  * Android: remove the old copy of gradle.properties after reading it
  * CMake Android Support: Fix signing of APKs
  * Android: fix A11Y object description
  * macOS: Fix warning about comparing different types in QCocoaScreen::isOnline
  * Fix qmake build on FreeBSD
  * Update documentation of enum Qt::DockWidgetArea
  * xcb: recreate xcb window under some conditions
  * objc_namespace: Add support for universal binaries
  * objc_namespace: Fix misspelled argument for silencing output
  * objc_namespace: Update parsing logic to account for otool changes
  * Blacklist passwordAuth for Ubuntu 20.04
  * Android: wrap QAndroidInputContext's m_focusObject in a QPointer
  * Fix compilation with GCC 12 (and on Fedora 35 and newer)
  * Chip example: fix an accidental bool-&gt;int conversion when using PMF connections
  * qmake: Add support for C++23
  * Android: use BCP 47 tag to create a correct Locale for QTimeZone::displayName()
  * QDateTime: fix adjusted datetime handling
  * Fix crash in tst_qmltc_examples on Android
  * macOS: Remove dead code for focus ring handling in Mac style
  * Detach for colortransforms of indexed formats
  * tst_QTcpSocket::connectToHostError - handle possible timeouts
  * CoreText: Avoid populating font family aliases if family was populated
  * Graphicsview: Avoid background clearing glitches under fractional DPR
  * Windows QPA: Avoid slowdown with UI Automation name change notification
  * Windows QPA: Avoid sending accessibility notifications before activation
  * Windows: Fix potential crash when retrieving default printer
  * Make Ubuntu with its non-standard security level happy
  * Android: Blacklist failing tests on tst_QGraphicsProxyWidget
  * Update LA 4.4.1
  * iOS A11Y: Set more accessibilityTraits
  * QNX: Fix compiler warning by when FEATURE_clipboard is not enabled
  * Document that native file dialogs might not show a title
  * Doc: Remove mentionings of overflows from QElapsedTimer
  * QTextMarkdownImporter: don't apply text char format to list item block
- Commits dropped by the rebase:
  * QBuffer: add missing &lt;limits&gt; include
  * Fix developer build</changelog>
  <changelog author="gmbr3@opensuse.org" date="1687953600">- Change %_libqt5_libexecdir to %_libexecdir/qt5 (bsc#1174075)</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch icu-devel requires to pkgconfig to allow switching libicu
  versions</changelog>
  <changelog author="fvogt@suse.com" date="1695902401">- Update to version 5.15.10+kde159 (bsc#1214327, CVE-2023-37369):
  * Fix CVE-2023-43114
  * QMimeDatabase: fix detection of pattern conflict in different prefixes
  * Fix highdpi conversion of QTabletEvent coordinates on xcb
  * widget: set WA_X11NetWmWindowType* after xcb window was created
  * Fix crash when setting override cursor on multiple clients
  * QAccessibleWidget: Remove pointless ZWSP in warning message
  * Android A11Y: Fix deadlock in QtAndroidAccessibility::runInObjectContext()
  * Correctly parse non BMP char refs in the sax parser
  * Clear the _X version of alongside the enum deprecator
  * Fix UB (signed char passed to &lt;cctype&gt; function)
  * Qt3DRender: includemocs
  * Fix capitalization error in auto-generated qdbusmacros.h include
  * QColorDialog: Ignore mouse move events when no mouse button is pressed
  * QHostInfo: fix remaining slotObj leaks
  * QXmlStreamReader: Raise error on unexpected tokens (CVE-2023-38197,
    QTBUG-92113, QTBUG-95188, bsc#1213326)
  * QTextLayout: Reconsider cursor drawing on TextObject
  * Ensure consistent cursor width under fractional scaling
  * Fix QTextEdit cursor rectangle vertical positioning
  * Return 0 in QWindow::winId in case of failed platform window creation
  * Doc: note QWindow::winId() will cause platform window creation
  * QSslDiffieHellmanParameters: fix mem-leak
  * QHostInfo: fix leaking slot object
  * Make sure we don't count down past 0 QT_FATAL_CRITICALS
  * QLogging: DRY isFatal(QtMsgType)
  * tst_QXmlStream: remove unneeded _ba UDLs
  * Fix typo in QXmlStreamReader error message
  * QXmlStreamReader: make fastScanName() indicate parsing status to callers
  * QXmlStreamReader: change fastScanName() to take a Value*
  * Fix Croatia's currency
  * SSL: upgrade the default DH parameters</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1696593600">- Update to version 5.15.11+kde134, rebased upstream:
  * Revert "Windows QPA: Add support to UiaRaiseNotificationEvent()"
  * FileChooser portal: Make sure filter.name is not empty
  * QPersistentModelIndex: fix UB (op&lt; on unrelated pointers)
  * Avoid crash when keysymToQtKey(keysym, Qt::ControlModifier) is called
  * a11y atspi: translate coords for GetOffsetAtPoint the right way
  * a11y atspi: Take dialog into account as top-level window
  * a11y atspi: Fix incorrect use of x instead of y position
  * macOS: Handle asynchronous deminiaturizing of windows
  * QTranslator: generalize a UNIX-only path
  * iOS, input panel: be more careful before enabling QIOSKeyboardListener
  * Android: Fix flickering on window resize and show keyboard
  * Android A11Y: Check for active surface before calling into native code
  * xcb: Delete touch points without target windows
  * Blacklist 1 tests in tst_QDBusConnection on ubuntu-20.04
  * Fix CMake builds without ANDROID_SDK
  * Blacklist 2 tests in tst_Http2 on ubuntu-20.04
  * Blacklist 1 tests in tst_QSqlQuery on macos
  * Defer creating the special shaders in the texture blitter
  * tst_QSslSocket::serverCipherPreferencies - fix for OpenSSL v3
  * QTemporaryFile: document rename() differences from QFile
  * Doc: 3rd party: Fix reference to FreeType LICENSE.txt
  * Update bundled libjpeg-turbo to version 2.1.4
  * tst_QSsSocket: fix verifyClientCertificate with OpenSSL 3
  * tst_QSslSocket: regenerate certificate used for setLocalCertificateChain
  * tst_QSslSocket::protocolServerSide - make it work with OpenSSL v3
  * tst_QSslSocket::oldErrorsOnSocketReuse - make it work with OpenSSL v3
  * Update zconf.h prefixes to match zlib v1.2.12 update
  * xcb: fix D&amp;D in same xembed client
  * xcb: use global coordinates for position of D&amp;D for xembed client
  * Doc: Update QMetaType::metaObject() descriptions
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 22.04
  * BLACKLIST tst_qfont for Ubuntu 22.04
  * BLACKLIST tst_QMenuBar::check_menuPosition for Ubuntu 22.04
  * tst_QDtls::verifyClientCertficiate - update certs for OpenSSL v3
  * QSslCertificate::toText(): add a file to compare against
  * Fix the spelling of the word "combination"
  * tst_QSslCertificate::pkcs12 - skip the test if OpenSSL version &gt;= 3
  * Android A11Y: Fix TalkBack scrolling behavior
  * Android A11Y: Notify android about scroll events
  * QCocoaDrag: don't add pasteboard items with non-absolute URLs
  * QDirPrivate: pass input QList by cref
  * tst_qbytearray: remove qCompress_data for QT_NO_COMPRESS
  * QDeviceDiscoveryUDev: use NSDMI
  * QAuthenticator: Fix crash when using NTLM / Negotiate
  * Provide a native interface instance in minimal platform plugin
  * Android: document the supported clipboard mimetypes
  * Windows: Account for not finding child windows when calling ChildWindowFromPointEx
  * iOS: Send touch events asynchronously to avoid deadlocking UIKit event loop
  * Disable bitcode for iOS
  * macOS: Ignore deprecation for ReleaseIconRef
  * BLACKLIST tst_QApplication::sendEventsOnProcessEvents for Ubuntu 22.04
  * Convert Latin1 to UTF-16 before passing to ICU API
  * Doc: Remove repetition of word in text
  * eglfs: Fix screen cloning when atomic is enabled
  * Fix printing of dpr&gt;1 images on Windows
  * QHttp: Fix handling of redirect loaded from cache
  * Doc: Fix return type of QLEInteger/QBEInteger post-in/decrement ops
  * qmake: Fix installation of separate debug info for plugins
  * iOS: ensure we close inputpanel after clearing focusobject
  * Convert Latin1 to UTF-16 before passing to ICU API
  * qputenv: defend against non-NUL-terminated QByteArray values
  * QFontSubset: remove unused glyphName() overload
  * Statically assert that the __mips_dsp code is only active on 32-bit
  * QGtk3Theme: Ensure gtk uses the same windowing system as Qt
  * tst_QFocusFrame: fix -Wparantheses
  * Sync Vulkan device features between QVulkanWindow and QRhi
  * SQLite: Update SQLite to v3.39.2
  * Update freetype to 2.12.1
  * corelib: Fix typos in documentation
  * QAtomicInteger docs: mention bool and char8_t as 8-bit types
  * qgraphicsitem_cast: replace 0 with nullptr
  * Doc: Hide weak overload template magic from documentation
  * Revert "QDateTime: fix adjusted datetime handling"
  * Fix select handles disappears issues
  * tst_QSslKey: prepare for the migration to OpenSSL v3
  * tst_qnetworkreply: replace server.pem/key pair
  * Disable unit testing setting up QTcpServer on special Apple interfaces
  * qmake/msbuild: Turn off "use full paths in diagnostics" by default
  * qmake/msbuild: Support all /DEBUG:xxx linker options
  * qmake/msbuild: Support all /LTCG:xxx options
  * Android A11Y: Add content change type to content change event
  * Enabler for fractional scaling of text in Qt Quick
  * macOS: Override logical DPI to 72
  * Add QDom internalSubset implementation
  * Fix tst_AndroidAssets, broken by recent changes on assets load speed
  * Android: Improve loading speed of individual assets
  * Darwin: Replace deprecated symbol kIOMasterPortDefault with equivalent
  * macOS: Remove code for handling logical DPI changes
  * Fix an incorrect invocation of llvm-readobj
  * macOS: Ignore deprecation for kOnSystemDisk icon domain
  * Copy only files that belongs to QML module
  * Android: fix wrong position of cursor handle and editpopup menu in split screen
  * Doc: Document QML_IMPORTS_PATH and QMLPATHS
  * Add the missing RCC_DIR to '.qrc' paths when generating deployment settings
  * Android: Fix the offset of the EditPopupMenu
  * xcb: update xkb_state mask as much as possible
  * QDom: Stop treating non-BMP characters as invalid
  * Android 13: Fix warnings on starting an application
  * qxkbcommon: Map Super/Hyper to Meta early enough to have an effect
  * macOS: Ignore update requests for offline displays
  * macOS: Avoid recursively updating screens when window moves screen
  * qmake/MinGW: Install separate debug info of DLLs next to the DLL
  * QMainWindow: fix restoreState() for toolbars
  * Make two QDT benchmarks data-driven and add more rows
  * Fix doc and example of QLoggingCategory::installCategory()
  * qmake: Document Xcode behavior when bundling translation files
  * Android: Fix missing import
  * QByteArray: more GCC 12 -Werror=array-bound whack-a-mole
  * CMake: Fix android sdk version propagation
  * Restore C++20-deprecated mixed-enum bitwise operators
  * Android: Fix ANR when QtService and QtActivity load in same process
  * Fix restart QtActivity
  * QArrayData::data(): do type-punning via quintptr, not char *
  * QIOSTextResponder: recreate responder upon reset
  * QSslSocket: make it work with OpenSSL v3
  * QFileSystemModelPrivate: de-inline ctor and dtor
  * Network: update Public Suffix List
  * macOS: Ensure proper quoting when calling otool in objc_namespace script
  * QKeySequence: Fix the one-off error in the mac glyph array size
- Commits dropped by the rebase:
  * Apply CVE-2022-27404-27405-27406-qtbase-5.15.diff
  * QArrayData: fix UB via reinterpret_cast (crash with FORTIFY_SOURCE=3)
  * Adapt for q_EVP_PKEY_base_id → q_EVP_PKEY_get_base_id rename in OpenSSL 3
  * Don't use a deprecated function if built/linked with OpenSSL v3</changelog>
  <changelog author="christophe@krop.fr" date="1696593601">- Enable the experimental native painting feature to improve
  remote desktop performances (boo#1214915)
  exporting QT_XCB_NATIVE_PAINTING is required to use the feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1697716800">- Update to version 5.15.11+kde138:
  * QLibraryPrivate: Actually merge load hints
  * QPluginLoader: report the right load hints
  * xkb: fix build with libxkbcommon 1.6.0 and later
  * a11y atspi: Map ButtonMenu role to AT-SPI equivalent</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1703851200">- Update to version 5.15.12+kde144, rebased upstream:
  * QMimeDatabase: handle buggy type definitions with circular inheritance
  * xcb: only set base size when it's valid
  * QPixmapCache: fix leaking of QStrings and Keys on clear()
  * OpenFile portal: do not use O_PATH fds
  * QSystemTrayIcon: properly disconnect old menu in setContextMenu()
  * Guard QTabBar against nested event processing during moving tabs
  * QDial: don't crash when min==max and setting a value != min &amp; max
  * QStandardItemModel: don't leak in mimeData()
  * SQL/MySQL: properly initialize variable
  * QWidgetTextControl: ignore invalid input method event
  * Update the LGPL license header
  * SQL/MySQL: fix handling of json column
  * Remove QMAKE_RANLIB and QMAKE_LINK_SHLIB from android/default_pre.prf
  * macOS: Fix less common writing systems on Catalina and later
  * Blacklist 1 tests in tst_QFtp on ubuntu-20.04
  * Update bundled libpng to version 1.6.39
  * Android: Fix signing of APKs that are generated when an AAB is also built
  * Update bundled zlib to version 1.2.13
  * doc: update the limitation of QSystemTrayIcon on X11
  * Blacklist 1 tests in tst_QTimer on ubuntu-20.04
  * Add benchmarks for QLocale number parsing
  * Add benchmarks for QString number parsing
  * Android: Fix incorrect fullscreen dimensions
  * Gtk3Theme: set XCURSOR_SIZE and XCURSOR_THEME for wayland sessions
  * xcb: Flush Display when processing xcb events
  * xcb: Add xlib wrapper for XFlush()
  * QHostAddress: Fix incorrect comparison against 'Any'
  * QSsl[OpenSSL/Android]: Fix hardcoded 1_1 suffix
  * BLACKLIST: tst_QApplication::sendEventsOnProcessEvents for RHEL 9.0
  * QMacStyle: do not set white color for grayed out button
  * Work round macOS's omission of en_DE from its own uiLanguages()
  * Suppress a deprecation warning in tst_QDateTime::toString_enumformat()
  * QJsonValue: fix incorrect to{Array,Object} when the value is empty
  * QGtk3Dialog: remove the #include for empty moc
  * Remove unneeded QWindow from QGtk3Dialog
  * tst_QSslSocket: Delete sslOptions
  * tst_QSslServer: Make the in-process server use TLS1.2
  * Android: fix Gradle warning about using enableUncompressedNativeLibs
  * Mention  limitation of QDir::drives() on Windows
  * QFileSystemEngine/Win: fix incorrect buffer size in currentPath()
  * Android: properly retrieve mime type of uri to for openUrl()
  * Android: Fix clipboard issue with urls
  * Android: Add a way to disable accessibility via an environment var
  * Update bundled libpng to version 1.6.38
  * QIOSMessageDialog::exec - work around 'windowsless' exec
  * QIosScreen: retain the right window
  * tst_Q{BitArray,ContiguousCache}: check not only count(), but size(), too
  * QIosTextResponder: stop using deprecated constants and type
  * qcompilerdetection.h: detect Coverity
  * Android: Fix Display.getRealMetrics deprecation
  * Fix broken Text rendering when noantialiased NativeRendering is used
  * forkfd: fix Clang 15 ATOMIC_VAR_INIT deprecation warning
  * eglfs: Add env.var. to disable the dedicated drmHandleEvent thread
  * doc: Don't put strings into QVector&lt;double&gt;
  * Remove focusProxyAndInputMethods from tst_QWidget
  * Bump version to 5.15.12
  * Update documentation of qWaitForWindowActive / qWaitForWindowExposed
  * QtHttp: Lower the severity of some log output
  * StyleSheetStyle: Fix color of placeholder texts in text edits
  * Android: Fix flickering on split screen mode
  * Update url to IAccessible2 Specification</changelog>
  <changelog author="alarrosa@suse.com" date="1704283200">- Update to version 5.15.12+kde147:
  * Http2: fix potential overflow in assemble_hpack_block()
    (bsc#1218413, CVE-2023-51714)
  * HPack: fix incorrect integer overflow check
  * HPack: fix a Yoda Condition</changelog>
  <changelog author="fvogt@suse.com" date="1708084800">- Update to version 5.15.12+kde151:
  * Improve KTX file reading memory safety (CVE-2024-25580, boo#1219996)
  * Revert "xcb: only set base size when it's valid"
  * Fix potential leak of QPropertyAnimation in QLineEditIconButton
  * QBitArray: correct inline keyword</changelog>
  <changelog author="alarrosa@suse.com" date="1720785600">- Add patch from upstream to fix a regression in the ODBC driver
  (bsc#1227513, QTBUG-112375):
  * 0001-QSQL-ODBC-fix-regression-trailing-NUL.patch
  * 0002-SQL-ODBC-Pass-correct-length-to-SQLColAttribute.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1722945600">- Add rebased upstream patch to delay any HTTP2 communication until
  encrypted() can be responded to (bsc#1227426, CVE-2024-39936):
  * 0001-HTTP2-Delay-any-communication-until-encrypted-can-be.patch
- Add upstream patch to fix a NULL pointer dereference via the
  function QXcbConnection::initializeAllAtoms() when there is
  anomalous behavior from the X server (bsc#1222120,
  CVE-2023-45935):
  * 0001-xcb-guard-a-pointer-before-usage.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756728000">- Add patch from upstream to fix a precondition violation in call
  to QByteArrayView::at() which can cause crashes (bsc#1243958,
  CVE-2025-5455):
  * 0001-qDecodeDataUrl-fix-precondition-violation-in-call-to.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756814400">- Add patch from upstream to initialize a member variable that was
  uninitialized under some circumstances:
  * 0001-QObjectPrivateSignal-initialize-all-members.patch
- Add patch from upstream to fix a crash when parsing a particular
  glyph in a particular font (QTBUG-124310):
  * 0001-Avoid-crash-in-font-distancefield-computation.patch
  * 0002-Fix-crash-in-font-distancefield-computation.patch
- Add patch from upstream to fix avoid repeatedly registering
  xsettings callbacks when switching cursor themes:
  * 0001-xcb-Avoid-repeatedly-registering-xsettings-callbacks-When.patch
- Add patch from upstream to check validity of RandR output info
  before using it (QTBUG-128906):
  * 0001-xcb-check-validity-of-RandR-output-info-before-using-it.patch
- Add patch from upstream to fix reparenting a window so it takes
  effect even if there are no other state changes to the window:
  * 0001-xcb-Sync-XCB-connection-after-reparenting-window.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756900800">- Add patch from upstream to fix a low performance when processing
  XML data in encodeText (bsc#1239896, CVE-2025-30348):
  * 0001-XML_QDom-speedup-encodeText.patch</changelog>
</package>
<package pkgid="931a492422a4a9b078208b59bde8c8898f1a3182d357de7ab59df93a5976076b" name="libQt5OpenGL-private-headers-devel" arch="noarch">
  <version epoch="0" ver="5.15.12+kde151" rel="150600.3.9.1"/>
  <changelog author="fvogt@suse.com" date="1678968000">- Update to version 5.15.8+kde183:
  * Add nullptr guard in QStyleSheetStyle::drawPrimitive(PE_PanelLineEdit)
  * QAbstractItemView: don't access invalid indexes on copy-key
  * Apply CVE-2023-24607-qtbase-5.15.diff (CVE-2023-24607,
    bsc#1209616)
  * QXcbConnection::getTimestamp: do not return stale timestamp
  * QToolButton: Elide text when constraints prevent from showing whole text
  * correctly set up ref counting in QThreadPool::tryStart(std::function)
  * Do not set Qt::ToolTip flag for QShapedPixmapWindow
  * Fix deletion order also for QImageReader/Writer::setDevice()
  * Fix deletion order in QImageReader/Writer destructors
  * QNetworkReply: Fix typos in the documentation
  * Doc: Fix typo in the online documentation template
  * Doc: Link to page documenting Qt trademarks in the copyright footer
  * [doc] Fix typo in QBuffer::setBuffer() description
  * qwindowsdrag: Fix typo in documentation
  * openglblacklists: Fix typo in description
  * qxcbscreen: Fix typo in documentation
  * Fix typos in SQL driver documentation
  * qxcbwindow.cpp: Fix sign-compare and another warnings
  * QToolButton: reimplement the fix for QTBUG-95255
  * QSysInfo::prettyProductName(): Add macOS Ventura product name
  * QSysInfo::prettyProductName(): add missing macOS product names
  * xcb: correctly disconnect xsettings callbacks
  * ibus: add SetCursorLocationRelative in InputContext.xml</changelog>
  <changelog author="fvogt@suse.com" date="1680523200">- Update to version 5.15.8+kde185:
  * QFSFileEngine: fix overflow bug when using lseek64
  * Add QImage null check when QOpenGLTexture converts
- Add patch to fix return key handling in QGroupBox on GNOME (bsc#1209364):
  * 0001-Revert-QGnomeTheme-Allow-Space-Return-Enter-and-Sele.patch
- Add patch to fix XInput2 events in big-endian X11 clients (bsc#1204883, QTBUG-105157):
  * big-endian-scroll.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1682078400">- Update to version 5.15.9+kde151, rebased upstream:
  * QCborValue: fix incorrect to{Array,Map} when the value is empty
  * QMargins: fix a missing "full stop" in the docs
  * QLibrary: restore translated string
  * QLibrary: fix possible arg() format clobbering
  * iOS: Use python3 for enumerating test target devices
  * Android: Treat ACTION_CANCEL as TouchCancelEvent
  * Doc: Fix broken formatting
  * QFileSystemEngine: fix potential formatting error
  * QString::asprintf: check that passing field widths as arguments works
  * Backport recent QFlags tests
  * network: Fix typos in documentation
  * Fix accuracy with screen composition
  * Doc: Update documentation for QElapsedTimer's in Windows
  * Document that QStandardPath::findExecutable works with absolute paths
  * macOS: Use native resize cursors for diagonal resize
  * Fix clipped glyphs in text rendering of QGraphicsTextItem
  * Change comparison data type to fix int overflow
  * Add missing Q_WEAK_OVERLOAD definition
  * Update QFileInfo docs to mention macOS aliases
  * Distinguish macOS aliases from normal symbolic links
  * Windows QPA: Fix frameless maximize on secondary screens
  * Rewrite tst_qdataurl as a data-driven test
  * Fix compilation for wasm
  * QIOSFileDialog/QIOSDocumentPickerController - handle dismissed view controller
  * Fix QDockWidget's dock area permissions after hovering
  * Fix C++20 ambiguous relational operators between QJsonValue{,Ref}
  * Android: make sure that orientationChange is reported after resize
  * Android: set all QScreen's geometry-related parameters together
  * Blacklist: test cases blacklisted in tst_QDBusConnection:
  * wasm:  fix issue with passing username/password to network request
  * macOS: Pass multi arch flags when linking qmake
  * QCocoaFileDialogHelper: Always enable symlinks and aliases to directories
  * Android: terminate argv passed to main() with nullptr
  * Update bundled libjpeg-turbo to version 2.1.3
  * ANGLE: Load the DirectX libraries from the system path directly
  * SQLite: Update SQLite to v3.37.2
  * Fix compiler warnings about unused parameters
  * Fix getsockopt option_value initial initialization
  * Http2: Fix redirect-handling
  * Android A11Y: Fix value rounding
  * Android A11Y: Announce value together with element name when focused
  * Android A11Y: handle valueChanged events
  * tst_QSystemSemaphore: give proper path to test-helper
  * QNX: Silence compiler warning by initializing variable
  * Update LICENSE.QT-LICENSE-AGREEMENT
  * winrt appxmanifest: Properly replace VCLibs version for newer MSVC versions
  * QAbstractSocket: Don't pretend pause and resume is a stack
  * Gui: test also depends for clipboard feature
  * QDesktopServices: deprecate destroying URL handlers w/o explicit unsetUrlHandler()
  * macOS: Respect QMAKE_APPLE_DEVICE_ARCHS when building qmake
  * HTTP: Make redirect response parsing more generic
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 20.04
  * Android A11Y: populate child elements when constructing node info
  * Fix issue where readyRead() could happen after disconnected()
  * QStringView: add missing constexpr so we can use is_constant_evaluated
  * Use Android's View.generateViewId() for generating ids for views/surfaces
  * Remove documentation of non-existing QAccessible state
  * Doc: Fix snippet to match actual QFileInfo behavior
  * Android: Re-focus focused accessibility node after orientation change
  * Android A11Y: execute C++ code on main Qt thread
  * Android: extract parentId for hidden object in advance
  * xcb: Show valuator atom names properly in categorized logging
  * Android: replace stacktrace with debug message in search for setService
  * Better document attaching a QFutureWatcher to a started QFuture
  * doc: Update GenericDataLocation location on iOS
  * BLACKLIST test_Gestures tests for RHEL-8.4
  * QPlainTestLogger: do not print "failure location" if there's no failure
  * QAbstractItemView: do not access invalid model indices (3/N)
  * Win32: always allow the event loop to be woken up by posted events
  * rhi: d3d11: Use __uuidof where we can
  * Don't QEXPECT_FAIL tst_QLineEdit::testQuickSelectionWithMouse on macOS ARM
  * Network: Emit authenticationRequired when using Ntlm
  * testlib: Disable window restoration on macOS in a non-persistent way
  * QAbstractItemView: do not access invalid model indices (2/N)
  * QAbstractItemView: do not access invalid model indices (1/N)
  * QAbstractItemView: code tidies
  * Update float16 part of TestLib selftest
  * QGuiApplication: constant-initialize lastCursorPosition
  * Blacklist tst_QFileSystemWatcher::signalsEmittedAfterFileMoved on all Windows versions
  * [Android]: Handle the screen name, modes and refreshRate properly
  * QVersionNumber: remove the "pure" attribute from commonPrefix()
  * QEvent: initialize the static userEventTypeRegistry constexprly
  * Let QXcbGlxWindow::createVisual fallback to QXcbWindow::createVisual
  * Android A11Y: fix content update notification when object is hidden
  * Android: explicitly remove accessibility focus when element is hidden
  * BLACKLIST tst_qfont for Red Hat 8.4 and Ubuntu 20.04
  * QtCore: includemocs
  * Fix memory leak in QtConcurrent::run when called with a NULL QThreadPool
  * INTEGRITY: Prevent deletion of virtual functions
  * QMake: replace a Q_ASSERT() with a Q_UNREACHABLE()
  * QTransform benchmark: measure what was promised
  * QStaticByteArrayMatcher: add a useful comment
  * QMacStyle: use the 'momentary push in' type for push buttons
  * qopengl.h: Move C header #include(s) out of the QT_NAMESPACE
  * Enable all supported 1.0 device features in QVulkanWindow
  * Fix queue passed to vkQueuePresent
  * QFusionStyle: don't draw an invalid outline for up/down buttons
  * Doc: Make QListIterator snippets more robust
  * QVersionNumber: don't detach() in rvalue QList/QVector ctor
  * QNetworkRequest: Document how Qt handles 301 and 302 status codes
  * Convert date-time to UTC before claiming it's in GMT
  * Remove execute permission from XML files
  * Add test case for style sheet selectors for enum properties
  * FreeType: allow falling back to synthesized bold if desired
  * Fix an assertion failure in massageAdjustedDateTime()
  * Relax tst_qvulkan::vulkanVersionRequest to make it compatible with 1.1
  * Doc: Replace "C:Documents and Settings" paths
  * QOrderedMutexLocker: fix compilation with C++11
  * QHttpNetworkConnection: Always set proxy settings to all channels
  * Add a markdown writer test for a checklist item ending with `code`
  * Use QTextCharFormat::fontFixedPitch to remember Markdown backtick spans
  * QWizardLayoutInfo: make == and != operators const
  * Revert "Android: Fix screen flicker issues"
  * macOS: Handle momentum scroll NSEventPhaseBegan when scroll had ended
  * SQLite: Update SQLite to v3.37.0
  * Update copyright year to 2022
  * QTzTimeZonePrivate: use ctor delegation instead of init()
  * QTzTimeZonePrivate: fix permanently-detaching m_icu
  * tst_QGraphicsView: fix memleak
  * Doc: Update external links to Qt Creator Manual
  * macOS: assume an unidentified tablet device is a stylus
  * tst_QItemModel: fix memleaks
  * tst_qanimationgroup: fix memleaks
  * QAbstractAnimation: add missing forward-declaration
  * [doc] QCoreApplication::installTranslator() doesn't take ownership
  * tst_qtranslator: fix memleak
  * QTestData: fix streaming of u8 string literals in C++20 mode
  * QThread/Unix: extract duplicate code
  * QWindowPrivate: fix inconsistent inline on some methods
  * tst_QStringList: check that join(u'0') embeds NULs
  * macOS: Sanitize scroll deltas for NSEventPhaseCancelled
  * tst_qsharedmemory: skip readOnly() test under asan
  * QXmlStreamReader: update test distribution
  * QZipReader: update to unzip partly broken archives
  * Deliver context menu event with correct coordinates to widgets in popups
  * QTextHtmlParser: fix prefix lookahead and html comments
  * QtConcurrent::run crashes on program exit
  * tst_QPropertyAnimation: fix leaks occurring under normal operation
  * tst_QPropertyAnimation: fix wrong comment
  * QLogging: fix potential missing NUL-terminator when calling OutputDebugString
  * Fix qt_scrollRectInImage when scrolling outside of the image
- Commits dropped by the rebase:
  * Fix compile with Qt5: Use QString::mid instead of QString::sliced
  * Restore C++11 compatibility after e8b9f4c28d3ab5e960dc54f2dc0c4b749b0b50e0
  * QDateTime: Don't require c++17</changelog>
  <changelog author="fvogt@suse.com" date="1683633600">- Amend patch to fix mouse grabbing as well (bsc#1211024):
  * big-endian-scroll.patch</changelog>
  <changelog author="fvogt@suse.com" date="1684929600">- Update to version 5.15.9+kde154:
  * Hsts: match header names case insensitively (CVE-2023-32762,
    QTBUG-113392, bsc#1211797)
  * Fix specific overflow in qtextlayout (CVE-2023-32763,
    QTBUG-113337, bsc#1211798)
  * QDnsLookup/Unix: make sure we don't overflow the buffer
    (CVE-2023-33285, boo#1211642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1686657600">- Update to version 5.15.10+kde129, rebased upstream:
  * Ssl: Copy the on-demand cert loading bool from default config
  * Schannel: Reject certificate not signed by a configured CA certificate (boo#1211994, CVE-2023-34410)
  * qnetworkreplyfileimpl_p.h: fix header guard name
  * Revert "Draw the cursor considering the descent is 0"
  * Use pkgconfig in order to find libproxy configuration
  * Upgrade PCRE2 to 10.40
  * Android A11Y: handle LocationChanged event only for focused element
  * Port binary JSON to new special integer bitfields
  * INTEGRITY: enable C99 globally
  * QObject: mark two error reporting functions COLD
  * Endian: Provide special integer bitfield unions
  * Android: set useLegacyPackaging to true in build.gradle
  * QWidgetTextControl: port to new-style connects (faster)
  * Sync qxmlstream.g with qxmlstreamparser_p.h [1/2]: switched lines
  * tst_QNetworkReply try stabilize autoDeleteReplies tests
  * Remove duplicated include for &lt;limits&gt;
  * Fix recursion crash when calling setStyleSheet with `qproperty-styleSheet`
  * qwindowsxpstyle: Fix typos in documentation
  * Correct prefix reported for end element in QXmlStreamReader
  * Android A11Y: Add supported role infos to A11yNodeInfo
  * Fix handling of DateTime values in QSettings
  * Fix off-by-one for "typically" lowest value INT_MIN
  * xml: Fix typos in documentation
  * QWindowsWindow: Fix typo in documentation
  * includemocs (updated script)
  * widgets: Fix typos in documentation
  * cocoa: Fix typo in debug messages
  * Only scroll QMenu when there is a valid active action
  * QTimer: Add note in documentation
  * Fix QListView assert when the last row is moved in IconMode
  * QFileDialog: Fix adding default suffix when file path contains dot
  * QLineEdit: account for the placeholderText when computing lineRect
  * QFileDialog::saveFileContent crashes on accept
  * QCompleter: QCompleter unexpectedly changes QLineEdit text
  * Fix build error on iOS with the configure option -qtnamespace
  * Draw the cursor considering the descent is 0
  * Remove pure-virtual-signals.h include from tst_moc.cpp
  * plugins: image formats - fix odr violation
  * dbus: Fix typos
  * qwindowsdialoghelpers: Fix typo in documentation
  * QTableView: Document the customizations applied to QHeaderView
  * Unicodetools: compile
  * eglfs_x11: Fix running flag linkage
  * qcompilerdetection.h: add Q_CC_{GNU,MSVC,CLANG}_ONLY macros
  * Fix CMake warning about "missing closing ' quote"
  * Fix alignment of next/prev links in offline style
  * QtDBus: includemocs
  * Image Plugins: includemocs(-ish)
  * QtGui: includemocs
  * QXcbNativeInterface: remove unused field m_sysTraySelectionAtom
  * Windows QPA: Fix slowdown with large table/tree views with accessibility
  * Macstyle: fix the text color on the disabled button
  * QMacStyle: fix tool buttons (in checked mode)
  * QTeamCityLogger: fix .arg() placeholder injection
  * QAbstractTestLogger: disable copying
  * Fix errorMessageFromComError()
  * QtNetwork: includemocs
  * AppleUnifiedLogger: Remove manually managed os_log_t cache
  * examples: add WindowStaysOnBottomHint into preview text
  * QSharedPointer: Use matching new/delete
  * QIbusPlatformInputContextPlugin: includemocs
  * QGtk3ThemePlugin: includemocs
  * QTuioTouchPlugin: includemocs
  * QtWidgets: includemocs v2022
  * QMYSQLDriverPlugin: includemocs
  * QtDeviceDiscoverySupportPrivate: includemocs
  * QLinuxFbIntegrationPlugin: includemocs
  * QtPrintSupport: includemocs
  * QSQLiteDriverPlugin: includemocs
  * QtFbSupportPrivate: includemocs
  * QXdgDesktopPortalThemePlugin: includemocs
  * QtTest: includemocs
  * QComposePlatformInputContextPlugin: includemocs
  * QtSql: includemocs
  * QVncIntegrationPlugin: includemocs
  * Fix backingstore fractional DPR glitches for widgets in child windows
  * Include &lt;limits&gt; where std::numeric_limits is used
  * QtInputSupportPrivate: includemocs
  * Document the default value of QSFPM::sortOrder()
  * Better document how to enable sorting in QSPFM
  * Correct documentation of INI format's loss of type information
  * Android: add missing properties in AndroidManifest.xml
  * Fix assertion failure when parsing a doubly-invalid date-time text
  * Windows QPA: Correct mistake when calculating minmaxinfo
  * Android: replace ndk.dir with android.ndkVersion in build.gradle
  * Android: remove the old copy of gradle.properties after reading it
  * CMake Android Support: Fix signing of APKs
  * Android: fix A11Y object description
  * macOS: Fix warning about comparing different types in QCocoaScreen::isOnline
  * Fix qmake build on FreeBSD
  * Update documentation of enum Qt::DockWidgetArea
  * xcb: recreate xcb window under some conditions
  * objc_namespace: Add support for universal binaries
  * objc_namespace: Fix misspelled argument for silencing output
  * objc_namespace: Update parsing logic to account for otool changes
  * Blacklist passwordAuth for Ubuntu 20.04
  * Android: wrap QAndroidInputContext's m_focusObject in a QPointer
  * Fix compilation with GCC 12 (and on Fedora 35 and newer)
  * Chip example: fix an accidental bool-&gt;int conversion when using PMF connections
  * qmake: Add support for C++23
  * Android: use BCP 47 tag to create a correct Locale for QTimeZone::displayName()
  * QDateTime: fix adjusted datetime handling
  * Fix crash in tst_qmltc_examples on Android
  * macOS: Remove dead code for focus ring handling in Mac style
  * Detach for colortransforms of indexed formats
  * tst_QTcpSocket::connectToHostError - handle possible timeouts
  * CoreText: Avoid populating font family aliases if family was populated
  * Graphicsview: Avoid background clearing glitches under fractional DPR
  * Windows QPA: Avoid slowdown with UI Automation name change notification
  * Windows QPA: Avoid sending accessibility notifications before activation
  * Windows: Fix potential crash when retrieving default printer
  * Make Ubuntu with its non-standard security level happy
  * Android: Blacklist failing tests on tst_QGraphicsProxyWidget
  * Update LA 4.4.1
  * iOS A11Y: Set more accessibilityTraits
  * QNX: Fix compiler warning by when FEATURE_clipboard is not enabled
  * Document that native file dialogs might not show a title
  * Doc: Remove mentionings of overflows from QElapsedTimer
  * QTextMarkdownImporter: don't apply text char format to list item block
- Commits dropped by the rebase:
  * QBuffer: add missing &lt;limits&gt; include
  * Fix developer build</changelog>
  <changelog author="gmbr3@opensuse.org" date="1687953600">- Change %_libqt5_libexecdir to %_libexecdir/qt5 (bsc#1174075)</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch icu-devel requires to pkgconfig to allow switching libicu
  versions</changelog>
  <changelog author="fvogt@suse.com" date="1695902401">- Update to version 5.15.10+kde159 (bsc#1214327, CVE-2023-37369):
  * Fix CVE-2023-43114
  * QMimeDatabase: fix detection of pattern conflict in different prefixes
  * Fix highdpi conversion of QTabletEvent coordinates on xcb
  * widget: set WA_X11NetWmWindowType* after xcb window was created
  * Fix crash when setting override cursor on multiple clients
  * QAccessibleWidget: Remove pointless ZWSP in warning message
  * Android A11Y: Fix deadlock in QtAndroidAccessibility::runInObjectContext()
  * Correctly parse non BMP char refs in the sax parser
  * Clear the _X version of alongside the enum deprecator
  * Fix UB (signed char passed to &lt;cctype&gt; function)
  * Qt3DRender: includemocs
  * Fix capitalization error in auto-generated qdbusmacros.h include
  * QColorDialog: Ignore mouse move events when no mouse button is pressed
  * QHostInfo: fix remaining slotObj leaks
  * QXmlStreamReader: Raise error on unexpected tokens (CVE-2023-38197,
    QTBUG-92113, QTBUG-95188, bsc#1213326)
  * QTextLayout: Reconsider cursor drawing on TextObject
  * Ensure consistent cursor width under fractional scaling
  * Fix QTextEdit cursor rectangle vertical positioning
  * Return 0 in QWindow::winId in case of failed platform window creation
  * Doc: note QWindow::winId() will cause platform window creation
  * QSslDiffieHellmanParameters: fix mem-leak
  * QHostInfo: fix leaking slot object
  * Make sure we don't count down past 0 QT_FATAL_CRITICALS
  * QLogging: DRY isFatal(QtMsgType)
  * tst_QXmlStream: remove unneeded _ba UDLs
  * Fix typo in QXmlStreamReader error message
  * QXmlStreamReader: make fastScanName() indicate parsing status to callers
  * QXmlStreamReader: change fastScanName() to take a Value*
  * Fix Croatia's currency
  * SSL: upgrade the default DH parameters</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1696593600">- Update to version 5.15.11+kde134, rebased upstream:
  * Revert "Windows QPA: Add support to UiaRaiseNotificationEvent()"
  * FileChooser portal: Make sure filter.name is not empty
  * QPersistentModelIndex: fix UB (op&lt; on unrelated pointers)
  * Avoid crash when keysymToQtKey(keysym, Qt::ControlModifier) is called
  * a11y atspi: translate coords for GetOffsetAtPoint the right way
  * a11y atspi: Take dialog into account as top-level window
  * a11y atspi: Fix incorrect use of x instead of y position
  * macOS: Handle asynchronous deminiaturizing of windows
  * QTranslator: generalize a UNIX-only path
  * iOS, input panel: be more careful before enabling QIOSKeyboardListener
  * Android: Fix flickering on window resize and show keyboard
  * Android A11Y: Check for active surface before calling into native code
  * xcb: Delete touch points without target windows
  * Blacklist 1 tests in tst_QDBusConnection on ubuntu-20.04
  * Fix CMake builds without ANDROID_SDK
  * Blacklist 2 tests in tst_Http2 on ubuntu-20.04
  * Blacklist 1 tests in tst_QSqlQuery on macos
  * Defer creating the special shaders in the texture blitter
  * tst_QSslSocket::serverCipherPreferencies - fix for OpenSSL v3
  * QTemporaryFile: document rename() differences from QFile
  * Doc: 3rd party: Fix reference to FreeType LICENSE.txt
  * Update bundled libjpeg-turbo to version 2.1.4
  * tst_QSsSocket: fix verifyClientCertificate with OpenSSL 3
  * tst_QSslSocket: regenerate certificate used for setLocalCertificateChain
  * tst_QSslSocket::protocolServerSide - make it work with OpenSSL v3
  * tst_QSslSocket::oldErrorsOnSocketReuse - make it work with OpenSSL v3
  * Update zconf.h prefixes to match zlib v1.2.12 update
  * xcb: fix D&amp;D in same xembed client
  * xcb: use global coordinates for position of D&amp;D for xembed client
  * Doc: Update QMetaType::metaObject() descriptions
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 22.04
  * BLACKLIST tst_qfont for Ubuntu 22.04
  * BLACKLIST tst_QMenuBar::check_menuPosition for Ubuntu 22.04
  * tst_QDtls::verifyClientCertficiate - update certs for OpenSSL v3
  * QSslCertificate::toText(): add a file to compare against
  * Fix the spelling of the word "combination"
  * tst_QSslCertificate::pkcs12 - skip the test if OpenSSL version &gt;= 3
  * Android A11Y: Fix TalkBack scrolling behavior
  * Android A11Y: Notify android about scroll events
  * QCocoaDrag: don't add pasteboard items with non-absolute URLs
  * QDirPrivate: pass input QList by cref
  * tst_qbytearray: remove qCompress_data for QT_NO_COMPRESS
  * QDeviceDiscoveryUDev: use NSDMI
  * QAuthenticator: Fix crash when using NTLM / Negotiate
  * Provide a native interface instance in minimal platform plugin
  * Android: document the supported clipboard mimetypes
  * Windows: Account for not finding child windows when calling ChildWindowFromPointEx
  * iOS: Send touch events asynchronously to avoid deadlocking UIKit event loop
  * Disable bitcode for iOS
  * macOS: Ignore deprecation for ReleaseIconRef
  * BLACKLIST tst_QApplication::sendEventsOnProcessEvents for Ubuntu 22.04
  * Convert Latin1 to UTF-16 before passing to ICU API
  * Doc: Remove repetition of word in text
  * eglfs: Fix screen cloning when atomic is enabled
  * Fix printing of dpr&gt;1 images on Windows
  * QHttp: Fix handling of redirect loaded from cache
  * Doc: Fix return type of QLEInteger/QBEInteger post-in/decrement ops
  * qmake: Fix installation of separate debug info for plugins
  * iOS: ensure we close inputpanel after clearing focusobject
  * Convert Latin1 to UTF-16 before passing to ICU API
  * qputenv: defend against non-NUL-terminated QByteArray values
  * QFontSubset: remove unused glyphName() overload
  * Statically assert that the __mips_dsp code is only active on 32-bit
  * QGtk3Theme: Ensure gtk uses the same windowing system as Qt
  * tst_QFocusFrame: fix -Wparantheses
  * Sync Vulkan device features between QVulkanWindow and QRhi
  * SQLite: Update SQLite to v3.39.2
  * Update freetype to 2.12.1
  * corelib: Fix typos in documentation
  * QAtomicInteger docs: mention bool and char8_t as 8-bit types
  * qgraphicsitem_cast: replace 0 with nullptr
  * Doc: Hide weak overload template magic from documentation
  * Revert "QDateTime: fix adjusted datetime handling"
  * Fix select handles disappears issues
  * tst_QSslKey: prepare for the migration to OpenSSL v3
  * tst_qnetworkreply: replace server.pem/key pair
  * Disable unit testing setting up QTcpServer on special Apple interfaces
  * qmake/msbuild: Turn off "use full paths in diagnostics" by default
  * qmake/msbuild: Support all /DEBUG:xxx linker options
  * qmake/msbuild: Support all /LTCG:xxx options
  * Android A11Y: Add content change type to content change event
  * Enabler for fractional scaling of text in Qt Quick
  * macOS: Override logical DPI to 72
  * Add QDom internalSubset implementation
  * Fix tst_AndroidAssets, broken by recent changes on assets load speed
  * Android: Improve loading speed of individual assets
  * Darwin: Replace deprecated symbol kIOMasterPortDefault with equivalent
  * macOS: Remove code for handling logical DPI changes
  * Fix an incorrect invocation of llvm-readobj
  * macOS: Ignore deprecation for kOnSystemDisk icon domain
  * Copy only files that belongs to QML module
  * Android: fix wrong position of cursor handle and editpopup menu in split screen
  * Doc: Document QML_IMPORTS_PATH and QMLPATHS
  * Add the missing RCC_DIR to '.qrc' paths when generating deployment settings
  * Android: Fix the offset of the EditPopupMenu
  * xcb: update xkb_state mask as much as possible
  * QDom: Stop treating non-BMP characters as invalid
  * Android 13: Fix warnings on starting an application
  * qxkbcommon: Map Super/Hyper to Meta early enough to have an effect
  * macOS: Ignore update requests for offline displays
  * macOS: Avoid recursively updating screens when window moves screen
  * qmake/MinGW: Install separate debug info of DLLs next to the DLL
  * QMainWindow: fix restoreState() for toolbars
  * Make two QDT benchmarks data-driven and add more rows
  * Fix doc and example of QLoggingCategory::installCategory()
  * qmake: Document Xcode behavior when bundling translation files
  * Android: Fix missing import
  * QByteArray: more GCC 12 -Werror=array-bound whack-a-mole
  * CMake: Fix android sdk version propagation
  * Restore C++20-deprecated mixed-enum bitwise operators
  * Android: Fix ANR when QtService and QtActivity load in same process
  * Fix restart QtActivity
  * QArrayData::data(): do type-punning via quintptr, not char *
  * QIOSTextResponder: recreate responder upon reset
  * QSslSocket: make it work with OpenSSL v3
  * QFileSystemModelPrivate: de-inline ctor and dtor
  * Network: update Public Suffix List
  * macOS: Ensure proper quoting when calling otool in objc_namespace script
  * QKeySequence: Fix the one-off error in the mac glyph array size
- Commits dropped by the rebase:
  * Apply CVE-2022-27404-27405-27406-qtbase-5.15.diff
  * QArrayData: fix UB via reinterpret_cast (crash with FORTIFY_SOURCE=3)
  * Adapt for q_EVP_PKEY_base_id → q_EVP_PKEY_get_base_id rename in OpenSSL 3
  * Don't use a deprecated function if built/linked with OpenSSL v3</changelog>
  <changelog author="christophe@krop.fr" date="1696593601">- Enable the experimental native painting feature to improve
  remote desktop performances (boo#1214915)
  exporting QT_XCB_NATIVE_PAINTING is required to use the feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1697716800">- Update to version 5.15.11+kde138:
  * QLibraryPrivate: Actually merge load hints
  * QPluginLoader: report the right load hints
  * xkb: fix build with libxkbcommon 1.6.0 and later
  * a11y atspi: Map ButtonMenu role to AT-SPI equivalent</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1703851200">- Update to version 5.15.12+kde144, rebased upstream:
  * QMimeDatabase: handle buggy type definitions with circular inheritance
  * xcb: only set base size when it's valid
  * QPixmapCache: fix leaking of QStrings and Keys on clear()
  * OpenFile portal: do not use O_PATH fds
  * QSystemTrayIcon: properly disconnect old menu in setContextMenu()
  * Guard QTabBar against nested event processing during moving tabs
  * QDial: don't crash when min==max and setting a value != min &amp; max
  * QStandardItemModel: don't leak in mimeData()
  * SQL/MySQL: properly initialize variable
  * QWidgetTextControl: ignore invalid input method event
  * Update the LGPL license header
  * SQL/MySQL: fix handling of json column
  * Remove QMAKE_RANLIB and QMAKE_LINK_SHLIB from android/default_pre.prf
  * macOS: Fix less common writing systems on Catalina and later
  * Blacklist 1 tests in tst_QFtp on ubuntu-20.04
  * Update bundled libpng to version 1.6.39
  * Android: Fix signing of APKs that are generated when an AAB is also built
  * Update bundled zlib to version 1.2.13
  * doc: update the limitation of QSystemTrayIcon on X11
  * Blacklist 1 tests in tst_QTimer on ubuntu-20.04
  * Add benchmarks for QLocale number parsing
  * Add benchmarks for QString number parsing
  * Android: Fix incorrect fullscreen dimensions
  * Gtk3Theme: set XCURSOR_SIZE and XCURSOR_THEME for wayland sessions
  * xcb: Flush Display when processing xcb events
  * xcb: Add xlib wrapper for XFlush()
  * QHostAddress: Fix incorrect comparison against 'Any'
  * QSsl[OpenSSL/Android]: Fix hardcoded 1_1 suffix
  * BLACKLIST: tst_QApplication::sendEventsOnProcessEvents for RHEL 9.0
  * QMacStyle: do not set white color for grayed out button
  * Work round macOS's omission of en_DE from its own uiLanguages()
  * Suppress a deprecation warning in tst_QDateTime::toString_enumformat()
  * QJsonValue: fix incorrect to{Array,Object} when the value is empty
  * QGtk3Dialog: remove the #include for empty moc
  * Remove unneeded QWindow from QGtk3Dialog
  * tst_QSslSocket: Delete sslOptions
  * tst_QSslServer: Make the in-process server use TLS1.2
  * Android: fix Gradle warning about using enableUncompressedNativeLibs
  * Mention  limitation of QDir::drives() on Windows
  * QFileSystemEngine/Win: fix incorrect buffer size in currentPath()
  * Android: properly retrieve mime type of uri to for openUrl()
  * Android: Fix clipboard issue with urls
  * Android: Add a way to disable accessibility via an environment var
  * Update bundled libpng to version 1.6.38
  * QIOSMessageDialog::exec - work around 'windowsless' exec
  * QIosScreen: retain the right window
  * tst_Q{BitArray,ContiguousCache}: check not only count(), but size(), too
  * QIosTextResponder: stop using deprecated constants and type
  * qcompilerdetection.h: detect Coverity
  * Android: Fix Display.getRealMetrics deprecation
  * Fix broken Text rendering when noantialiased NativeRendering is used
  * forkfd: fix Clang 15 ATOMIC_VAR_INIT deprecation warning
  * eglfs: Add env.var. to disable the dedicated drmHandleEvent thread
  * doc: Don't put strings into QVector&lt;double&gt;
  * Remove focusProxyAndInputMethods from tst_QWidget
  * Bump version to 5.15.12
  * Update documentation of qWaitForWindowActive / qWaitForWindowExposed
  * QtHttp: Lower the severity of some log output
  * StyleSheetStyle: Fix color of placeholder texts in text edits
  * Android: Fix flickering on split screen mode
  * Update url to IAccessible2 Specification</changelog>
  <changelog author="alarrosa@suse.com" date="1704283200">- Update to version 5.15.12+kde147:
  * Http2: fix potential overflow in assemble_hpack_block()
    (bsc#1218413, CVE-2023-51714)
  * HPack: fix incorrect integer overflow check
  * HPack: fix a Yoda Condition</changelog>
  <changelog author="fvogt@suse.com" date="1708084800">- Update to version 5.15.12+kde151:
  * Improve KTX file reading memory safety (CVE-2024-25580, boo#1219996)
  * Revert "xcb: only set base size when it's valid"
  * Fix potential leak of QPropertyAnimation in QLineEditIconButton
  * QBitArray: correct inline keyword</changelog>
  <changelog author="alarrosa@suse.com" date="1720785600">- Add patch from upstream to fix a regression in the ODBC driver
  (bsc#1227513, QTBUG-112375):
  * 0001-QSQL-ODBC-fix-regression-trailing-NUL.patch
  * 0002-SQL-ODBC-Pass-correct-length-to-SQLColAttribute.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1722945600">- Add rebased upstream patch to delay any HTTP2 communication until
  encrypted() can be responded to (bsc#1227426, CVE-2024-39936):
  * 0001-HTTP2-Delay-any-communication-until-encrypted-can-be.patch
- Add upstream patch to fix a NULL pointer dereference via the
  function QXcbConnection::initializeAllAtoms() when there is
  anomalous behavior from the X server (bsc#1222120,
  CVE-2023-45935):
  * 0001-xcb-guard-a-pointer-before-usage.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756728000">- Add patch from upstream to fix a precondition violation in call
  to QByteArrayView::at() which can cause crashes (bsc#1243958,
  CVE-2025-5455):
  * 0001-qDecodeDataUrl-fix-precondition-violation-in-call-to.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756814400">- Add patch from upstream to initialize a member variable that was
  uninitialized under some circumstances:
  * 0001-QObjectPrivateSignal-initialize-all-members.patch
- Add patch from upstream to fix a crash when parsing a particular
  glyph in a particular font (QTBUG-124310):
  * 0001-Avoid-crash-in-font-distancefield-computation.patch
  * 0002-Fix-crash-in-font-distancefield-computation.patch
- Add patch from upstream to fix avoid repeatedly registering
  xsettings callbacks when switching cursor themes:
  * 0001-xcb-Avoid-repeatedly-registering-xsettings-callbacks-When.patch
- Add patch from upstream to check validity of RandR output info
  before using it (QTBUG-128906):
  * 0001-xcb-check-validity-of-RandR-output-info-before-using-it.patch
- Add patch from upstream to fix reparenting a window so it takes
  effect even if there are no other state changes to the window:
  * 0001-xcb-Sync-XCB-connection-after-reparenting-window.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756900800">- Add patch from upstream to fix a low performance when processing
  XML data in encodeText (bsc#1239896, CVE-2025-30348):
  * 0001-XML_QDom-speedup-encodeText.patch</changelog>
</package>
<package pkgid="223ace25e5952da89f347482c79a4c95bc8300b10c84fcdf46bf8809261ab258" name="libQt5OpenGL5" arch="x86_64">
  <version epoch="0" ver="5.15.12+kde151" rel="150600.3.9.1"/>
  <changelog author="fvogt@suse.com" date="1678968000">- Update to version 5.15.8+kde183:
  * Add nullptr guard in QStyleSheetStyle::drawPrimitive(PE_PanelLineEdit)
  * QAbstractItemView: don't access invalid indexes on copy-key
  * Apply CVE-2023-24607-qtbase-5.15.diff (CVE-2023-24607,
    bsc#1209616)
  * QXcbConnection::getTimestamp: do not return stale timestamp
  * QToolButton: Elide text when constraints prevent from showing whole text
  * correctly set up ref counting in QThreadPool::tryStart(std::function)
  * Do not set Qt::ToolTip flag for QShapedPixmapWindow
  * Fix deletion order also for QImageReader/Writer::setDevice()
  * Fix deletion order in QImageReader/Writer destructors
  * QNetworkReply: Fix typos in the documentation
  * Doc: Fix typo in the online documentation template
  * Doc: Link to page documenting Qt trademarks in the copyright footer
  * [doc] Fix typo in QBuffer::setBuffer() description
  * qwindowsdrag: Fix typo in documentation
  * openglblacklists: Fix typo in description
  * qxcbscreen: Fix typo in documentation
  * Fix typos in SQL driver documentation
  * qxcbwindow.cpp: Fix sign-compare and another warnings
  * QToolButton: reimplement the fix for QTBUG-95255
  * QSysInfo::prettyProductName(): Add macOS Ventura product name
  * QSysInfo::prettyProductName(): add missing macOS product names
  * xcb: correctly disconnect xsettings callbacks
  * ibus: add SetCursorLocationRelative in InputContext.xml</changelog>
  <changelog author="fvogt@suse.com" date="1680523200">- Update to version 5.15.8+kde185:
  * QFSFileEngine: fix overflow bug when using lseek64
  * Add QImage null check when QOpenGLTexture converts
- Add patch to fix return key handling in QGroupBox on GNOME (bsc#1209364):
  * 0001-Revert-QGnomeTheme-Allow-Space-Return-Enter-and-Sele.patch
- Add patch to fix XInput2 events in big-endian X11 clients (bsc#1204883, QTBUG-105157):
  * big-endian-scroll.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1682078400">- Update to version 5.15.9+kde151, rebased upstream:
  * QCborValue: fix incorrect to{Array,Map} when the value is empty
  * QMargins: fix a missing "full stop" in the docs
  * QLibrary: restore translated string
  * QLibrary: fix possible arg() format clobbering
  * iOS: Use python3 for enumerating test target devices
  * Android: Treat ACTION_CANCEL as TouchCancelEvent
  * Doc: Fix broken formatting
  * QFileSystemEngine: fix potential formatting error
  * QString::asprintf: check that passing field widths as arguments works
  * Backport recent QFlags tests
  * network: Fix typos in documentation
  * Fix accuracy with screen composition
  * Doc: Update documentation for QElapsedTimer's in Windows
  * Document that QStandardPath::findExecutable works with absolute paths
  * macOS: Use native resize cursors for diagonal resize
  * Fix clipped glyphs in text rendering of QGraphicsTextItem
  * Change comparison data type to fix int overflow
  * Add missing Q_WEAK_OVERLOAD definition
  * Update QFileInfo docs to mention macOS aliases
  * Distinguish macOS aliases from normal symbolic links
  * Windows QPA: Fix frameless maximize on secondary screens
  * Rewrite tst_qdataurl as a data-driven test
  * Fix compilation for wasm
  * QIOSFileDialog/QIOSDocumentPickerController - handle dismissed view controller
  * Fix QDockWidget's dock area permissions after hovering
  * Fix C++20 ambiguous relational operators between QJsonValue{,Ref}
  * Android: make sure that orientationChange is reported after resize
  * Android: set all QScreen's geometry-related parameters together
  * Blacklist: test cases blacklisted in tst_QDBusConnection:
  * wasm:  fix issue with passing username/password to network request
  * macOS: Pass multi arch flags when linking qmake
  * QCocoaFileDialogHelper: Always enable symlinks and aliases to directories
  * Android: terminate argv passed to main() with nullptr
  * Update bundled libjpeg-turbo to version 2.1.3
  * ANGLE: Load the DirectX libraries from the system path directly
  * SQLite: Update SQLite to v3.37.2
  * Fix compiler warnings about unused parameters
  * Fix getsockopt option_value initial initialization
  * Http2: Fix redirect-handling
  * Android A11Y: Fix value rounding
  * Android A11Y: Announce value together with element name when focused
  * Android A11Y: handle valueChanged events
  * tst_QSystemSemaphore: give proper path to test-helper
  * QNX: Silence compiler warning by initializing variable
  * Update LICENSE.QT-LICENSE-AGREEMENT
  * winrt appxmanifest: Properly replace VCLibs version for newer MSVC versions
  * QAbstractSocket: Don't pretend pause and resume is a stack
  * Gui: test also depends for clipboard feature
  * QDesktopServices: deprecate destroying URL handlers w/o explicit unsetUrlHandler()
  * macOS: Respect QMAKE_APPLE_DEVICE_ARCHS when building qmake
  * HTTP: Make redirect response parsing more generic
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 20.04
  * Android A11Y: populate child elements when constructing node info
  * Fix issue where readyRead() could happen after disconnected()
  * QStringView: add missing constexpr so we can use is_constant_evaluated
  * Use Android's View.generateViewId() for generating ids for views/surfaces
  * Remove documentation of non-existing QAccessible state
  * Doc: Fix snippet to match actual QFileInfo behavior
  * Android: Re-focus focused accessibility node after orientation change
  * Android A11Y: execute C++ code on main Qt thread
  * Android: extract parentId for hidden object in advance
  * xcb: Show valuator atom names properly in categorized logging
  * Android: replace stacktrace with debug message in search for setService
  * Better document attaching a QFutureWatcher to a started QFuture
  * doc: Update GenericDataLocation location on iOS
  * BLACKLIST test_Gestures tests for RHEL-8.4
  * QPlainTestLogger: do not print "failure location" if there's no failure
  * QAbstractItemView: do not access invalid model indices (3/N)
  * Win32: always allow the event loop to be woken up by posted events
  * rhi: d3d11: Use __uuidof where we can
  * Don't QEXPECT_FAIL tst_QLineEdit::testQuickSelectionWithMouse on macOS ARM
  * Network: Emit authenticationRequired when using Ntlm
  * testlib: Disable window restoration on macOS in a non-persistent way
  * QAbstractItemView: do not access invalid model indices (2/N)
  * QAbstractItemView: do not access invalid model indices (1/N)
  * QAbstractItemView: code tidies
  * Update float16 part of TestLib selftest
  * QGuiApplication: constant-initialize lastCursorPosition
  * Blacklist tst_QFileSystemWatcher::signalsEmittedAfterFileMoved on all Windows versions
  * [Android]: Handle the screen name, modes and refreshRate properly
  * QVersionNumber: remove the "pure" attribute from commonPrefix()
  * QEvent: initialize the static userEventTypeRegistry constexprly
  * Let QXcbGlxWindow::createVisual fallback to QXcbWindow::createVisual
  * Android A11Y: fix content update notification when object is hidden
  * Android: explicitly remove accessibility focus when element is hidden
  * BLACKLIST tst_qfont for Red Hat 8.4 and Ubuntu 20.04
  * QtCore: includemocs
  * Fix memory leak in QtConcurrent::run when called with a NULL QThreadPool
  * INTEGRITY: Prevent deletion of virtual functions
  * QMake: replace a Q_ASSERT() with a Q_UNREACHABLE()
  * QTransform benchmark: measure what was promised
  * QStaticByteArrayMatcher: add a useful comment
  * QMacStyle: use the 'momentary push in' type for push buttons
  * qopengl.h: Move C header #include(s) out of the QT_NAMESPACE
  * Enable all supported 1.0 device features in QVulkanWindow
  * Fix queue passed to vkQueuePresent
  * QFusionStyle: don't draw an invalid outline for up/down buttons
  * Doc: Make QListIterator snippets more robust
  * QVersionNumber: don't detach() in rvalue QList/QVector ctor
  * QNetworkRequest: Document how Qt handles 301 and 302 status codes
  * Convert date-time to UTC before claiming it's in GMT
  * Remove execute permission from XML files
  * Add test case for style sheet selectors for enum properties
  * FreeType: allow falling back to synthesized bold if desired
  * Fix an assertion failure in massageAdjustedDateTime()
  * Relax tst_qvulkan::vulkanVersionRequest to make it compatible with 1.1
  * Doc: Replace "C:Documents and Settings" paths
  * QOrderedMutexLocker: fix compilation with C++11
  * QHttpNetworkConnection: Always set proxy settings to all channels
  * Add a markdown writer test for a checklist item ending with `code`
  * Use QTextCharFormat::fontFixedPitch to remember Markdown backtick spans
  * QWizardLayoutInfo: make == and != operators const
  * Revert "Android: Fix screen flicker issues"
  * macOS: Handle momentum scroll NSEventPhaseBegan when scroll had ended
  * SQLite: Update SQLite to v3.37.0
  * Update copyright year to 2022
  * QTzTimeZonePrivate: use ctor delegation instead of init()
  * QTzTimeZonePrivate: fix permanently-detaching m_icu
  * tst_QGraphicsView: fix memleak
  * Doc: Update external links to Qt Creator Manual
  * macOS: assume an unidentified tablet device is a stylus
  * tst_QItemModel: fix memleaks
  * tst_qanimationgroup: fix memleaks
  * QAbstractAnimation: add missing forward-declaration
  * [doc] QCoreApplication::installTranslator() doesn't take ownership
  * tst_qtranslator: fix memleak
  * QTestData: fix streaming of u8 string literals in C++20 mode
  * QThread/Unix: extract duplicate code
  * QWindowPrivate: fix inconsistent inline on some methods
  * tst_QStringList: check that join(u'0') embeds NULs
  * macOS: Sanitize scroll deltas for NSEventPhaseCancelled
  * tst_qsharedmemory: skip readOnly() test under asan
  * QXmlStreamReader: update test distribution
  * QZipReader: update to unzip partly broken archives
  * Deliver context menu event with correct coordinates to widgets in popups
  * QTextHtmlParser: fix prefix lookahead and html comments
  * QtConcurrent::run crashes on program exit
  * tst_QPropertyAnimation: fix leaks occurring under normal operation
  * tst_QPropertyAnimation: fix wrong comment
  * QLogging: fix potential missing NUL-terminator when calling OutputDebugString
  * Fix qt_scrollRectInImage when scrolling outside of the image
- Commits dropped by the rebase:
  * Fix compile with Qt5: Use QString::mid instead of QString::sliced
  * Restore C++11 compatibility after e8b9f4c28d3ab5e960dc54f2dc0c4b749b0b50e0
  * QDateTime: Don't require c++17</changelog>
  <changelog author="fvogt@suse.com" date="1683633600">- Amend patch to fix mouse grabbing as well (bsc#1211024):
  * big-endian-scroll.patch</changelog>
  <changelog author="fvogt@suse.com" date="1684929600">- Update to version 5.15.9+kde154:
  * Hsts: match header names case insensitively (CVE-2023-32762,
    QTBUG-113392, bsc#1211797)
  * Fix specific overflow in qtextlayout (CVE-2023-32763,
    QTBUG-113337, bsc#1211798)
  * QDnsLookup/Unix: make sure we don't overflow the buffer
    (CVE-2023-33285, boo#1211642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1686657600">- Update to version 5.15.10+kde129, rebased upstream:
  * Ssl: Copy the on-demand cert loading bool from default config
  * Schannel: Reject certificate not signed by a configured CA certificate (boo#1211994, CVE-2023-34410)
  * qnetworkreplyfileimpl_p.h: fix header guard name
  * Revert "Draw the cursor considering the descent is 0"
  * Use pkgconfig in order to find libproxy configuration
  * Upgrade PCRE2 to 10.40
  * Android A11Y: handle LocationChanged event only for focused element
  * Port binary JSON to new special integer bitfields
  * INTEGRITY: enable C99 globally
  * QObject: mark two error reporting functions COLD
  * Endian: Provide special integer bitfield unions
  * Android: set useLegacyPackaging to true in build.gradle
  * QWidgetTextControl: port to new-style connects (faster)
  * Sync qxmlstream.g with qxmlstreamparser_p.h [1/2]: switched lines
  * tst_QNetworkReply try stabilize autoDeleteReplies tests
  * Remove duplicated include for &lt;limits&gt;
  * Fix recursion crash when calling setStyleSheet with `qproperty-styleSheet`
  * qwindowsxpstyle: Fix typos in documentation
  * Correct prefix reported for end element in QXmlStreamReader
  * Android A11Y: Add supported role infos to A11yNodeInfo
  * Fix handling of DateTime values in QSettings
  * Fix off-by-one for "typically" lowest value INT_MIN
  * xml: Fix typos in documentation
  * QWindowsWindow: Fix typo in documentation
  * includemocs (updated script)
  * widgets: Fix typos in documentation
  * cocoa: Fix typo in debug messages
  * Only scroll QMenu when there is a valid active action
  * QTimer: Add note in documentation
  * Fix QListView assert when the last row is moved in IconMode
  * QFileDialog: Fix adding default suffix when file path contains dot
  * QLineEdit: account for the placeholderText when computing lineRect
  * QFileDialog::saveFileContent crashes on accept
  * QCompleter: QCompleter unexpectedly changes QLineEdit text
  * Fix build error on iOS with the configure option -qtnamespace
  * Draw the cursor considering the descent is 0
  * Remove pure-virtual-signals.h include from tst_moc.cpp
  * plugins: image formats - fix odr violation
  * dbus: Fix typos
  * qwindowsdialoghelpers: Fix typo in documentation
  * QTableView: Document the customizations applied to QHeaderView
  * Unicodetools: compile
  * eglfs_x11: Fix running flag linkage
  * qcompilerdetection.h: add Q_CC_{GNU,MSVC,CLANG}_ONLY macros
  * Fix CMake warning about "missing closing ' quote"
  * Fix alignment of next/prev links in offline style
  * QtDBus: includemocs
  * Image Plugins: includemocs(-ish)
  * QtGui: includemocs
  * QXcbNativeInterface: remove unused field m_sysTraySelectionAtom
  * Windows QPA: Fix slowdown with large table/tree views with accessibility
  * Macstyle: fix the text color on the disabled button
  * QMacStyle: fix tool buttons (in checked mode)
  * QTeamCityLogger: fix .arg() placeholder injection
  * QAbstractTestLogger: disable copying
  * Fix errorMessageFromComError()
  * QtNetwork: includemocs
  * AppleUnifiedLogger: Remove manually managed os_log_t cache
  * examples: add WindowStaysOnBottomHint into preview text
  * QSharedPointer: Use matching new/delete
  * QIbusPlatformInputContextPlugin: includemocs
  * QGtk3ThemePlugin: includemocs
  * QTuioTouchPlugin: includemocs
  * QtWidgets: includemocs v2022
  * QMYSQLDriverPlugin: includemocs
  * QtDeviceDiscoverySupportPrivate: includemocs
  * QLinuxFbIntegrationPlugin: includemocs
  * QtPrintSupport: includemocs
  * QSQLiteDriverPlugin: includemocs
  * QtFbSupportPrivate: includemocs
  * QXdgDesktopPortalThemePlugin: includemocs
  * QtTest: includemocs
  * QComposePlatformInputContextPlugin: includemocs
  * QtSql: includemocs
  * QVncIntegrationPlugin: includemocs
  * Fix backingstore fractional DPR glitches for widgets in child windows
  * Include &lt;limits&gt; where std::numeric_limits is used
  * QtInputSupportPrivate: includemocs
  * Document the default value of QSFPM::sortOrder()
  * Better document how to enable sorting in QSPFM
  * Correct documentation of INI format's loss of type information
  * Android: add missing properties in AndroidManifest.xml
  * Fix assertion failure when parsing a doubly-invalid date-time text
  * Windows QPA: Correct mistake when calculating minmaxinfo
  * Android: replace ndk.dir with android.ndkVersion in build.gradle
  * Android: remove the old copy of gradle.properties after reading it
  * CMake Android Support: Fix signing of APKs
  * Android: fix A11Y object description
  * macOS: Fix warning about comparing different types in QCocoaScreen::isOnline
  * Fix qmake build on FreeBSD
  * Update documentation of enum Qt::DockWidgetArea
  * xcb: recreate xcb window under some conditions
  * objc_namespace: Add support for universal binaries
  * objc_namespace: Fix misspelled argument for silencing output
  * objc_namespace: Update parsing logic to account for otool changes
  * Blacklist passwordAuth for Ubuntu 20.04
  * Android: wrap QAndroidInputContext's m_focusObject in a QPointer
  * Fix compilation with GCC 12 (and on Fedora 35 and newer)
  * Chip example: fix an accidental bool-&gt;int conversion when using PMF connections
  * qmake: Add support for C++23
  * Android: use BCP 47 tag to create a correct Locale for QTimeZone::displayName()
  * QDateTime: fix adjusted datetime handling
  * Fix crash in tst_qmltc_examples on Android
  * macOS: Remove dead code for focus ring handling in Mac style
  * Detach for colortransforms of indexed formats
  * tst_QTcpSocket::connectToHostError - handle possible timeouts
  * CoreText: Avoid populating font family aliases if family was populated
  * Graphicsview: Avoid background clearing glitches under fractional DPR
  * Windows QPA: Avoid slowdown with UI Automation name change notification
  * Windows QPA: Avoid sending accessibility notifications before activation
  * Windows: Fix potential crash when retrieving default printer
  * Make Ubuntu with its non-standard security level happy
  * Android: Blacklist failing tests on tst_QGraphicsProxyWidget
  * Update LA 4.4.1
  * iOS A11Y: Set more accessibilityTraits
  * QNX: Fix compiler warning by when FEATURE_clipboard is not enabled
  * Document that native file dialogs might not show a title
  * Doc: Remove mentionings of overflows from QElapsedTimer
  * QTextMarkdownImporter: don't apply text char format to list item block
- Commits dropped by the rebase:
  * QBuffer: add missing &lt;limits&gt; include
  * Fix developer build</changelog>
  <changelog author="gmbr3@opensuse.org" date="1687953600">- Change %_libqt5_libexecdir to %_libexecdir/qt5 (bsc#1174075)</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch icu-devel requires to pkgconfig to allow switching libicu
  versions</changelog>
  <changelog author="fvogt@suse.com" date="1695902401">- Update to version 5.15.10+kde159 (bsc#1214327, CVE-2023-37369):
  * Fix CVE-2023-43114
  * QMimeDatabase: fix detection of pattern conflict in different prefixes
  * Fix highdpi conversion of QTabletEvent coordinates on xcb
  * widget: set WA_X11NetWmWindowType* after xcb window was created
  * Fix crash when setting override cursor on multiple clients
  * QAccessibleWidget: Remove pointless ZWSP in warning message
  * Android A11Y: Fix deadlock in QtAndroidAccessibility::runInObjectContext()
  * Correctly parse non BMP char refs in the sax parser
  * Clear the _X version of alongside the enum deprecator
  * Fix UB (signed char passed to &lt;cctype&gt; function)
  * Qt3DRender: includemocs
  * Fix capitalization error in auto-generated qdbusmacros.h include
  * QColorDialog: Ignore mouse move events when no mouse button is pressed
  * QHostInfo: fix remaining slotObj leaks
  * QXmlStreamReader: Raise error on unexpected tokens (CVE-2023-38197,
    QTBUG-92113, QTBUG-95188, bsc#1213326)
  * QTextLayout: Reconsider cursor drawing on TextObject
  * Ensure consistent cursor width under fractional scaling
  * Fix QTextEdit cursor rectangle vertical positioning
  * Return 0 in QWindow::winId in case of failed platform window creation
  * Doc: note QWindow::winId() will cause platform window creation
  * QSslDiffieHellmanParameters: fix mem-leak
  * QHostInfo: fix leaking slot object
  * Make sure we don't count down past 0 QT_FATAL_CRITICALS
  * QLogging: DRY isFatal(QtMsgType)
  * tst_QXmlStream: remove unneeded _ba UDLs
  * Fix typo in QXmlStreamReader error message
  * QXmlStreamReader: make fastScanName() indicate parsing status to callers
  * QXmlStreamReader: change fastScanName() to take a Value*
  * Fix Croatia's currency
  * SSL: upgrade the default DH parameters</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1696593600">- Update to version 5.15.11+kde134, rebased upstream:
  * Revert "Windows QPA: Add support to UiaRaiseNotificationEvent()"
  * FileChooser portal: Make sure filter.name is not empty
  * QPersistentModelIndex: fix UB (op&lt; on unrelated pointers)
  * Avoid crash when keysymToQtKey(keysym, Qt::ControlModifier) is called
  * a11y atspi: translate coords for GetOffsetAtPoint the right way
  * a11y atspi: Take dialog into account as top-level window
  * a11y atspi: Fix incorrect use of x instead of y position
  * macOS: Handle asynchronous deminiaturizing of windows
  * QTranslator: generalize a UNIX-only path
  * iOS, input panel: be more careful before enabling QIOSKeyboardListener
  * Android: Fix flickering on window resize and show keyboard
  * Android A11Y: Check for active surface before calling into native code
  * xcb: Delete touch points without target windows
  * Blacklist 1 tests in tst_QDBusConnection on ubuntu-20.04
  * Fix CMake builds without ANDROID_SDK
  * Blacklist 2 tests in tst_Http2 on ubuntu-20.04
  * Blacklist 1 tests in tst_QSqlQuery on macos
  * Defer creating the special shaders in the texture blitter
  * tst_QSslSocket::serverCipherPreferencies - fix for OpenSSL v3
  * QTemporaryFile: document rename() differences from QFile
  * Doc: 3rd party: Fix reference to FreeType LICENSE.txt
  * Update bundled libjpeg-turbo to version 2.1.4
  * tst_QSsSocket: fix verifyClientCertificate with OpenSSL 3
  * tst_QSslSocket: regenerate certificate used for setLocalCertificateChain
  * tst_QSslSocket::protocolServerSide - make it work with OpenSSL v3
  * tst_QSslSocket::oldErrorsOnSocketReuse - make it work with OpenSSL v3
  * Update zconf.h prefixes to match zlib v1.2.12 update
  * xcb: fix D&amp;D in same xembed client
  * xcb: use global coordinates for position of D&amp;D for xembed client
  * Doc: Update QMetaType::metaObject() descriptions
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 22.04
  * BLACKLIST tst_qfont for Ubuntu 22.04
  * BLACKLIST tst_QMenuBar::check_menuPosition for Ubuntu 22.04
  * tst_QDtls::verifyClientCertficiate - update certs for OpenSSL v3
  * QSslCertificate::toText(): add a file to compare against
  * Fix the spelling of the word "combination"
  * tst_QSslCertificate::pkcs12 - skip the test if OpenSSL version &gt;= 3
  * Android A11Y: Fix TalkBack scrolling behavior
  * Android A11Y: Notify android about scroll events
  * QCocoaDrag: don't add pasteboard items with non-absolute URLs
  * QDirPrivate: pass input QList by cref
  * tst_qbytearray: remove qCompress_data for QT_NO_COMPRESS
  * QDeviceDiscoveryUDev: use NSDMI
  * QAuthenticator: Fix crash when using NTLM / Negotiate
  * Provide a native interface instance in minimal platform plugin
  * Android: document the supported clipboard mimetypes
  * Windows: Account for not finding child windows when calling ChildWindowFromPointEx
  * iOS: Send touch events asynchronously to avoid deadlocking UIKit event loop
  * Disable bitcode for iOS
  * macOS: Ignore deprecation for ReleaseIconRef
  * BLACKLIST tst_QApplication::sendEventsOnProcessEvents for Ubuntu 22.04
  * Convert Latin1 to UTF-16 before passing to ICU API
  * Doc: Remove repetition of word in text
  * eglfs: Fix screen cloning when atomic is enabled
  * Fix printing of dpr&gt;1 images on Windows
  * QHttp: Fix handling of redirect loaded from cache
  * Doc: Fix return type of QLEInteger/QBEInteger post-in/decrement ops
  * qmake: Fix installation of separate debug info for plugins
  * iOS: ensure we close inputpanel after clearing focusobject
  * Convert Latin1 to UTF-16 before passing to ICU API
  * qputenv: defend against non-NUL-terminated QByteArray values
  * QFontSubset: remove unused glyphName() overload
  * Statically assert that the __mips_dsp code is only active on 32-bit
  * QGtk3Theme: Ensure gtk uses the same windowing system as Qt
  * tst_QFocusFrame: fix -Wparantheses
  * Sync Vulkan device features between QVulkanWindow and QRhi
  * SQLite: Update SQLite to v3.39.2
  * Update freetype to 2.12.1
  * corelib: Fix typos in documentation
  * QAtomicInteger docs: mention bool and char8_t as 8-bit types
  * qgraphicsitem_cast: replace 0 with nullptr
  * Doc: Hide weak overload template magic from documentation
  * Revert "QDateTime: fix adjusted datetime handling"
  * Fix select handles disappears issues
  * tst_QSslKey: prepare for the migration to OpenSSL v3
  * tst_qnetworkreply: replace server.pem/key pair
  * Disable unit testing setting up QTcpServer on special Apple interfaces
  * qmake/msbuild: Turn off "use full paths in diagnostics" by default
  * qmake/msbuild: Support all /DEBUG:xxx linker options
  * qmake/msbuild: Support all /LTCG:xxx options
  * Android A11Y: Add content change type to content change event
  * Enabler for fractional scaling of text in Qt Quick
  * macOS: Override logical DPI to 72
  * Add QDom internalSubset implementation
  * Fix tst_AndroidAssets, broken by recent changes on assets load speed
  * Android: Improve loading speed of individual assets
  * Darwin: Replace deprecated symbol kIOMasterPortDefault with equivalent
  * macOS: Remove code for handling logical DPI changes
  * Fix an incorrect invocation of llvm-readobj
  * macOS: Ignore deprecation for kOnSystemDisk icon domain
  * Copy only files that belongs to QML module
  * Android: fix wrong position of cursor handle and editpopup menu in split screen
  * Doc: Document QML_IMPORTS_PATH and QMLPATHS
  * Add the missing RCC_DIR to '.qrc' paths when generating deployment settings
  * Android: Fix the offset of the EditPopupMenu
  * xcb: update xkb_state mask as much as possible
  * QDom: Stop treating non-BMP characters as invalid
  * Android 13: Fix warnings on starting an application
  * qxkbcommon: Map Super/Hyper to Meta early enough to have an effect
  * macOS: Ignore update requests for offline displays
  * macOS: Avoid recursively updating screens when window moves screen
  * qmake/MinGW: Install separate debug info of DLLs next to the DLL
  * QMainWindow: fix restoreState() for toolbars
  * Make two QDT benchmarks data-driven and add more rows
  * Fix doc and example of QLoggingCategory::installCategory()
  * qmake: Document Xcode behavior when bundling translation files
  * Android: Fix missing import
  * QByteArray: more GCC 12 -Werror=array-bound whack-a-mole
  * CMake: Fix android sdk version propagation
  * Restore C++20-deprecated mixed-enum bitwise operators
  * Android: Fix ANR when QtService and QtActivity load in same process
  * Fix restart QtActivity
  * QArrayData::data(): do type-punning via quintptr, not char *
  * QIOSTextResponder: recreate responder upon reset
  * QSslSocket: make it work with OpenSSL v3
  * QFileSystemModelPrivate: de-inline ctor and dtor
  * Network: update Public Suffix List
  * macOS: Ensure proper quoting when calling otool in objc_namespace script
  * QKeySequence: Fix the one-off error in the mac glyph array size
- Commits dropped by the rebase:
  * Apply CVE-2022-27404-27405-27406-qtbase-5.15.diff
  * QArrayData: fix UB via reinterpret_cast (crash with FORTIFY_SOURCE=3)
  * Adapt for q_EVP_PKEY_base_id → q_EVP_PKEY_get_base_id rename in OpenSSL 3
  * Don't use a deprecated function if built/linked with OpenSSL v3</changelog>
  <changelog author="christophe@krop.fr" date="1696593601">- Enable the experimental native painting feature to improve
  remote desktop performances (boo#1214915)
  exporting QT_XCB_NATIVE_PAINTING is required to use the feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1697716800">- Update to version 5.15.11+kde138:
  * QLibraryPrivate: Actually merge load hints
  * QPluginLoader: report the right load hints
  * xkb: fix build with libxkbcommon 1.6.0 and later
  * a11y atspi: Map ButtonMenu role to AT-SPI equivalent</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1703851200">- Update to version 5.15.12+kde144, rebased upstream:
  * QMimeDatabase: handle buggy type definitions with circular inheritance
  * xcb: only set base size when it's valid
  * QPixmapCache: fix leaking of QStrings and Keys on clear()
  * OpenFile portal: do not use O_PATH fds
  * QSystemTrayIcon: properly disconnect old menu in setContextMenu()
  * Guard QTabBar against nested event processing during moving tabs
  * QDial: don't crash when min==max and setting a value != min &amp; max
  * QStandardItemModel: don't leak in mimeData()
  * SQL/MySQL: properly initialize variable
  * QWidgetTextControl: ignore invalid input method event
  * Update the LGPL license header
  * SQL/MySQL: fix handling of json column
  * Remove QMAKE_RANLIB and QMAKE_LINK_SHLIB from android/default_pre.prf
  * macOS: Fix less common writing systems on Catalina and later
  * Blacklist 1 tests in tst_QFtp on ubuntu-20.04
  * Update bundled libpng to version 1.6.39
  * Android: Fix signing of APKs that are generated when an AAB is also built
  * Update bundled zlib to version 1.2.13
  * doc: update the limitation of QSystemTrayIcon on X11
  * Blacklist 1 tests in tst_QTimer on ubuntu-20.04
  * Add benchmarks for QLocale number parsing
  * Add benchmarks for QString number parsing
  * Android: Fix incorrect fullscreen dimensions
  * Gtk3Theme: set XCURSOR_SIZE and XCURSOR_THEME for wayland sessions
  * xcb: Flush Display when processing xcb events
  * xcb: Add xlib wrapper for XFlush()
  * QHostAddress: Fix incorrect comparison against 'Any'
  * QSsl[OpenSSL/Android]: Fix hardcoded 1_1 suffix
  * BLACKLIST: tst_QApplication::sendEventsOnProcessEvents for RHEL 9.0
  * QMacStyle: do not set white color for grayed out button
  * Work round macOS's omission of en_DE from its own uiLanguages()
  * Suppress a deprecation warning in tst_QDateTime::toString_enumformat()
  * QJsonValue: fix incorrect to{Array,Object} when the value is empty
  * QGtk3Dialog: remove the #include for empty moc
  * Remove unneeded QWindow from QGtk3Dialog
  * tst_QSslSocket: Delete sslOptions
  * tst_QSslServer: Make the in-process server use TLS1.2
  * Android: fix Gradle warning about using enableUncompressedNativeLibs
  * Mention  limitation of QDir::drives() on Windows
  * QFileSystemEngine/Win: fix incorrect buffer size in currentPath()
  * Android: properly retrieve mime type of uri to for openUrl()
  * Android: Fix clipboard issue with urls
  * Android: Add a way to disable accessibility via an environment var
  * Update bundled libpng to version 1.6.38
  * QIOSMessageDialog::exec - work around 'windowsless' exec
  * QIosScreen: retain the right window
  * tst_Q{BitArray,ContiguousCache}: check not only count(), but size(), too
  * QIosTextResponder: stop using deprecated constants and type
  * qcompilerdetection.h: detect Coverity
  * Android: Fix Display.getRealMetrics deprecation
  * Fix broken Text rendering when noantialiased NativeRendering is used
  * forkfd: fix Clang 15 ATOMIC_VAR_INIT deprecation warning
  * eglfs: Add env.var. to disable the dedicated drmHandleEvent thread
  * doc: Don't put strings into QVector&lt;double&gt;
  * Remove focusProxyAndInputMethods from tst_QWidget
  * Bump version to 5.15.12
  * Update documentation of qWaitForWindowActive / qWaitForWindowExposed
  * QtHttp: Lower the severity of some log output
  * StyleSheetStyle: Fix color of placeholder texts in text edits
  * Android: Fix flickering on split screen mode
  * Update url to IAccessible2 Specification</changelog>
  <changelog author="alarrosa@suse.com" date="1704283200">- Update to version 5.15.12+kde147:
  * Http2: fix potential overflow in assemble_hpack_block()
    (bsc#1218413, CVE-2023-51714)
  * HPack: fix incorrect integer overflow check
  * HPack: fix a Yoda Condition</changelog>
  <changelog author="fvogt@suse.com" date="1708084800">- Update to version 5.15.12+kde151:
  * Improve KTX file reading memory safety (CVE-2024-25580, boo#1219996)
  * Revert "xcb: only set base size when it's valid"
  * Fix potential leak of QPropertyAnimation in QLineEditIconButton
  * QBitArray: correct inline keyword</changelog>
  <changelog author="alarrosa@suse.com" date="1720785600">- Add patch from upstream to fix a regression in the ODBC driver
  (bsc#1227513, QTBUG-112375):
  * 0001-QSQL-ODBC-fix-regression-trailing-NUL.patch
  * 0002-SQL-ODBC-Pass-correct-length-to-SQLColAttribute.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1722945600">- Add rebased upstream patch to delay any HTTP2 communication until
  encrypted() can be responded to (bsc#1227426, CVE-2024-39936):
  * 0001-HTTP2-Delay-any-communication-until-encrypted-can-be.patch
- Add upstream patch to fix a NULL pointer dereference via the
  function QXcbConnection::initializeAllAtoms() when there is
  anomalous behavior from the X server (bsc#1222120,
  CVE-2023-45935):
  * 0001-xcb-guard-a-pointer-before-usage.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756728000">- Add patch from upstream to fix a precondition violation in call
  to QByteArrayView::at() which can cause crashes (bsc#1243958,
  CVE-2025-5455):
  * 0001-qDecodeDataUrl-fix-precondition-violation-in-call-to.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756814400">- Add patch from upstream to initialize a member variable that was
  uninitialized under some circumstances:
  * 0001-QObjectPrivateSignal-initialize-all-members.patch
- Add patch from upstream to fix a crash when parsing a particular
  glyph in a particular font (QTBUG-124310):
  * 0001-Avoid-crash-in-font-distancefield-computation.patch
  * 0002-Fix-crash-in-font-distancefield-computation.patch
- Add patch from upstream to fix avoid repeatedly registering
  xsettings callbacks when switching cursor themes:
  * 0001-xcb-Avoid-repeatedly-registering-xsettings-callbacks-When.patch
- Add patch from upstream to check validity of RandR output info
  before using it (QTBUG-128906):
  * 0001-xcb-check-validity-of-RandR-output-info-before-using-it.patch
- Add patch from upstream to fix reparenting a window so it takes
  effect even if there are no other state changes to the window:
  * 0001-xcb-Sync-XCB-connection-after-reparenting-window.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756900800">- Add patch from upstream to fix a low performance when processing
  XML data in encodeText (bsc#1239896, CVE-2025-30348):
  * 0001-XML_QDom-speedup-encodeText.patch</changelog>
</package>
<package pkgid="d12172759fe1bf8abf15bbd3f44952ee9472413f2878428040e33fbd5a0bd3fc" name="libQt5PlatformHeaders-devel" arch="x86_64">
  <version epoch="0" ver="5.15.12+kde151" rel="150600.3.9.1"/>
  <changelog author="fvogt@suse.com" date="1678968000">- Update to version 5.15.8+kde183:
  * Add nullptr guard in QStyleSheetStyle::drawPrimitive(PE_PanelLineEdit)
  * QAbstractItemView: don't access invalid indexes on copy-key
  * Apply CVE-2023-24607-qtbase-5.15.diff (CVE-2023-24607,
    bsc#1209616)
  * QXcbConnection::getTimestamp: do not return stale timestamp
  * QToolButton: Elide text when constraints prevent from showing whole text
  * correctly set up ref counting in QThreadPool::tryStart(std::function)
  * Do not set Qt::ToolTip flag for QShapedPixmapWindow
  * Fix deletion order also for QImageReader/Writer::setDevice()
  * Fix deletion order in QImageReader/Writer destructors
  * QNetworkReply: Fix typos in the documentation
  * Doc: Fix typo in the online documentation template
  * Doc: Link to page documenting Qt trademarks in the copyright footer
  * [doc] Fix typo in QBuffer::setBuffer() description
  * qwindowsdrag: Fix typo in documentation
  * openglblacklists: Fix typo in description
  * qxcbscreen: Fix typo in documentation
  * Fix typos in SQL driver documentation
  * qxcbwindow.cpp: Fix sign-compare and another warnings
  * QToolButton: reimplement the fix for QTBUG-95255
  * QSysInfo::prettyProductName(): Add macOS Ventura product name
  * QSysInfo::prettyProductName(): add missing macOS product names
  * xcb: correctly disconnect xsettings callbacks
  * ibus: add SetCursorLocationRelative in InputContext.xml</changelog>
  <changelog author="fvogt@suse.com" date="1680523200">- Update to version 5.15.8+kde185:
  * QFSFileEngine: fix overflow bug when using lseek64
  * Add QImage null check when QOpenGLTexture converts
- Add patch to fix return key handling in QGroupBox on GNOME (bsc#1209364):
  * 0001-Revert-QGnomeTheme-Allow-Space-Return-Enter-and-Sele.patch
- Add patch to fix XInput2 events in big-endian X11 clients (bsc#1204883, QTBUG-105157):
  * big-endian-scroll.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1682078400">- Update to version 5.15.9+kde151, rebased upstream:
  * QCborValue: fix incorrect to{Array,Map} when the value is empty
  * QMargins: fix a missing "full stop" in the docs
  * QLibrary: restore translated string
  * QLibrary: fix possible arg() format clobbering
  * iOS: Use python3 for enumerating test target devices
  * Android: Treat ACTION_CANCEL as TouchCancelEvent
  * Doc: Fix broken formatting
  * QFileSystemEngine: fix potential formatting error
  * QString::asprintf: check that passing field widths as arguments works
  * Backport recent QFlags tests
  * network: Fix typos in documentation
  * Fix accuracy with screen composition
  * Doc: Update documentation for QElapsedTimer's in Windows
  * Document that QStandardPath::findExecutable works with absolute paths
  * macOS: Use native resize cursors for diagonal resize
  * Fix clipped glyphs in text rendering of QGraphicsTextItem
  * Change comparison data type to fix int overflow
  * Add missing Q_WEAK_OVERLOAD definition
  * Update QFileInfo docs to mention macOS aliases
  * Distinguish macOS aliases from normal symbolic links
  * Windows QPA: Fix frameless maximize on secondary screens
  * Rewrite tst_qdataurl as a data-driven test
  * Fix compilation for wasm
  * QIOSFileDialog/QIOSDocumentPickerController - handle dismissed view controller
  * Fix QDockWidget's dock area permissions after hovering
  * Fix C++20 ambiguous relational operators between QJsonValue{,Ref}
  * Android: make sure that orientationChange is reported after resize
  * Android: set all QScreen's geometry-related parameters together
  * Blacklist: test cases blacklisted in tst_QDBusConnection:
  * wasm:  fix issue with passing username/password to network request
  * macOS: Pass multi arch flags when linking qmake
  * QCocoaFileDialogHelper: Always enable symlinks and aliases to directories
  * Android: terminate argv passed to main() with nullptr
  * Update bundled libjpeg-turbo to version 2.1.3
  * ANGLE: Load the DirectX libraries from the system path directly
  * SQLite: Update SQLite to v3.37.2
  * Fix compiler warnings about unused parameters
  * Fix getsockopt option_value initial initialization
  * Http2: Fix redirect-handling
  * Android A11Y: Fix value rounding
  * Android A11Y: Announce value together with element name when focused
  * Android A11Y: handle valueChanged events
  * tst_QSystemSemaphore: give proper path to test-helper
  * QNX: Silence compiler warning by initializing variable
  * Update LICENSE.QT-LICENSE-AGREEMENT
  * winrt appxmanifest: Properly replace VCLibs version for newer MSVC versions
  * QAbstractSocket: Don't pretend pause and resume is a stack
  * Gui: test also depends for clipboard feature
  * QDesktopServices: deprecate destroying URL handlers w/o explicit unsetUrlHandler()
  * macOS: Respect QMAKE_APPLE_DEVICE_ARCHS when building qmake
  * HTTP: Make redirect response parsing more generic
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 20.04
  * Android A11Y: populate child elements when constructing node info
  * Fix issue where readyRead() could happen after disconnected()
  * QStringView: add missing constexpr so we can use is_constant_evaluated
  * Use Android's View.generateViewId() for generating ids for views/surfaces
  * Remove documentation of non-existing QAccessible state
  * Doc: Fix snippet to match actual QFileInfo behavior
  * Android: Re-focus focused accessibility node after orientation change
  * Android A11Y: execute C++ code on main Qt thread
  * Android: extract parentId for hidden object in advance
  * xcb: Show valuator atom names properly in categorized logging
  * Android: replace stacktrace with debug message in search for setService
  * Better document attaching a QFutureWatcher to a started QFuture
  * doc: Update GenericDataLocation location on iOS
  * BLACKLIST test_Gestures tests for RHEL-8.4
  * QPlainTestLogger: do not print "failure location" if there's no failure
  * QAbstractItemView: do not access invalid model indices (3/N)
  * Win32: always allow the event loop to be woken up by posted events
  * rhi: d3d11: Use __uuidof where we can
  * Don't QEXPECT_FAIL tst_QLineEdit::testQuickSelectionWithMouse on macOS ARM
  * Network: Emit authenticationRequired when using Ntlm
  * testlib: Disable window restoration on macOS in a non-persistent way
  * QAbstractItemView: do not access invalid model indices (2/N)
  * QAbstractItemView: do not access invalid model indices (1/N)
  * QAbstractItemView: code tidies
  * Update float16 part of TestLib selftest
  * QGuiApplication: constant-initialize lastCursorPosition
  * Blacklist tst_QFileSystemWatcher::signalsEmittedAfterFileMoved on all Windows versions
  * [Android]: Handle the screen name, modes and refreshRate properly
  * QVersionNumber: remove the "pure" attribute from commonPrefix()
  * QEvent: initialize the static userEventTypeRegistry constexprly
  * Let QXcbGlxWindow::createVisual fallback to QXcbWindow::createVisual
  * Android A11Y: fix content update notification when object is hidden
  * Android: explicitly remove accessibility focus when element is hidden
  * BLACKLIST tst_qfont for Red Hat 8.4 and Ubuntu 20.04
  * QtCore: includemocs
  * Fix memory leak in QtConcurrent::run when called with a NULL QThreadPool
  * INTEGRITY: Prevent deletion of virtual functions
  * QMake: replace a Q_ASSERT() with a Q_UNREACHABLE()
  * QTransform benchmark: measure what was promised
  * QStaticByteArrayMatcher: add a useful comment
  * QMacStyle: use the 'momentary push in' type for push buttons
  * qopengl.h: Move C header #include(s) out of the QT_NAMESPACE
  * Enable all supported 1.0 device features in QVulkanWindow
  * Fix queue passed to vkQueuePresent
  * QFusionStyle: don't draw an invalid outline for up/down buttons
  * Doc: Make QListIterator snippets more robust
  * QVersionNumber: don't detach() in rvalue QList/QVector ctor
  * QNetworkRequest: Document how Qt handles 301 and 302 status codes
  * Convert date-time to UTC before claiming it's in GMT
  * Remove execute permission from XML files
  * Add test case for style sheet selectors for enum properties
  * FreeType: allow falling back to synthesized bold if desired
  * Fix an assertion failure in massageAdjustedDateTime()
  * Relax tst_qvulkan::vulkanVersionRequest to make it compatible with 1.1
  * Doc: Replace "C:Documents and Settings" paths
  * QOrderedMutexLocker: fix compilation with C++11
  * QHttpNetworkConnection: Always set proxy settings to all channels
  * Add a markdown writer test for a checklist item ending with `code`
  * Use QTextCharFormat::fontFixedPitch to remember Markdown backtick spans
  * QWizardLayoutInfo: make == and != operators const
  * Revert "Android: Fix screen flicker issues"
  * macOS: Handle momentum scroll NSEventPhaseBegan when scroll had ended
  * SQLite: Update SQLite to v3.37.0
  * Update copyright year to 2022
  * QTzTimeZonePrivate: use ctor delegation instead of init()
  * QTzTimeZonePrivate: fix permanently-detaching m_icu
  * tst_QGraphicsView: fix memleak
  * Doc: Update external links to Qt Creator Manual
  * macOS: assume an unidentified tablet device is a stylus
  * tst_QItemModel: fix memleaks
  * tst_qanimationgroup: fix memleaks
  * QAbstractAnimation: add missing forward-declaration
  * [doc] QCoreApplication::installTranslator() doesn't take ownership
  * tst_qtranslator: fix memleak
  * QTestData: fix streaming of u8 string literals in C++20 mode
  * QThread/Unix: extract duplicate code
  * QWindowPrivate: fix inconsistent inline on some methods
  * tst_QStringList: check that join(u'0') embeds NULs
  * macOS: Sanitize scroll deltas for NSEventPhaseCancelled
  * tst_qsharedmemory: skip readOnly() test under asan
  * QXmlStreamReader: update test distribution
  * QZipReader: update to unzip partly broken archives
  * Deliver context menu event with correct coordinates to widgets in popups
  * QTextHtmlParser: fix prefix lookahead and html comments
  * QtConcurrent::run crashes on program exit
  * tst_QPropertyAnimation: fix leaks occurring under normal operation
  * tst_QPropertyAnimation: fix wrong comment
  * QLogging: fix potential missing NUL-terminator when calling OutputDebugString
  * Fix qt_scrollRectInImage when scrolling outside of the image
- Commits dropped by the rebase:
  * Fix compile with Qt5: Use QString::mid instead of QString::sliced
  * Restore C++11 compatibility after e8b9f4c28d3ab5e960dc54f2dc0c4b749b0b50e0
  * QDateTime: Don't require c++17</changelog>
  <changelog author="fvogt@suse.com" date="1683633600">- Amend patch to fix mouse grabbing as well (bsc#1211024):
  * big-endian-scroll.patch</changelog>
  <changelog author="fvogt@suse.com" date="1684929600">- Update to version 5.15.9+kde154:
  * Hsts: match header names case insensitively (CVE-2023-32762,
    QTBUG-113392, bsc#1211797)
  * Fix specific overflow in qtextlayout (CVE-2023-32763,
    QTBUG-113337, bsc#1211798)
  * QDnsLookup/Unix: make sure we don't overflow the buffer
    (CVE-2023-33285, boo#1211642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1686657600">- Update to version 5.15.10+kde129, rebased upstream:
  * Ssl: Copy the on-demand cert loading bool from default config
  * Schannel: Reject certificate not signed by a configured CA certificate (boo#1211994, CVE-2023-34410)
  * qnetworkreplyfileimpl_p.h: fix header guard name
  * Revert "Draw the cursor considering the descent is 0"
  * Use pkgconfig in order to find libproxy configuration
  * Upgrade PCRE2 to 10.40
  * Android A11Y: handle LocationChanged event only for focused element
  * Port binary JSON to new special integer bitfields
  * INTEGRITY: enable C99 globally
  * QObject: mark two error reporting functions COLD
  * Endian: Provide special integer bitfield unions
  * Android: set useLegacyPackaging to true in build.gradle
  * QWidgetTextControl: port to new-style connects (faster)
  * Sync qxmlstream.g with qxmlstreamparser_p.h [1/2]: switched lines
  * tst_QNetworkReply try stabilize autoDeleteReplies tests
  * Remove duplicated include for &lt;limits&gt;
  * Fix recursion crash when calling setStyleSheet with `qproperty-styleSheet`
  * qwindowsxpstyle: Fix typos in documentation
  * Correct prefix reported for end element in QXmlStreamReader
  * Android A11Y: Add supported role infos to A11yNodeInfo
  * Fix handling of DateTime values in QSettings
  * Fix off-by-one for "typically" lowest value INT_MIN
  * xml: Fix typos in documentation
  * QWindowsWindow: Fix typo in documentation
  * includemocs (updated script)
  * widgets: Fix typos in documentation
  * cocoa: Fix typo in debug messages
  * Only scroll QMenu when there is a valid active action
  * QTimer: Add note in documentation
  * Fix QListView assert when the last row is moved in IconMode
  * QFileDialog: Fix adding default suffix when file path contains dot
  * QLineEdit: account for the placeholderText when computing lineRect
  * QFileDialog::saveFileContent crashes on accept
  * QCompleter: QCompleter unexpectedly changes QLineEdit text
  * Fix build error on iOS with the configure option -qtnamespace
  * Draw the cursor considering the descent is 0
  * Remove pure-virtual-signals.h include from tst_moc.cpp
  * plugins: image formats - fix odr violation
  * dbus: Fix typos
  * qwindowsdialoghelpers: Fix typo in documentation
  * QTableView: Document the customizations applied to QHeaderView
  * Unicodetools: compile
  * eglfs_x11: Fix running flag linkage
  * qcompilerdetection.h: add Q_CC_{GNU,MSVC,CLANG}_ONLY macros
  * Fix CMake warning about "missing closing ' quote"
  * Fix alignment of next/prev links in offline style
  * QtDBus: includemocs
  * Image Plugins: includemocs(-ish)
  * QtGui: includemocs
  * QXcbNativeInterface: remove unused field m_sysTraySelectionAtom
  * Windows QPA: Fix slowdown with large table/tree views with accessibility
  * Macstyle: fix the text color on the disabled button
  * QMacStyle: fix tool buttons (in checked mode)
  * QTeamCityLogger: fix .arg() placeholder injection
  * QAbstractTestLogger: disable copying
  * Fix errorMessageFromComError()
  * QtNetwork: includemocs
  * AppleUnifiedLogger: Remove manually managed os_log_t cache
  * examples: add WindowStaysOnBottomHint into preview text
  * QSharedPointer: Use matching new/delete
  * QIbusPlatformInputContextPlugin: includemocs
  * QGtk3ThemePlugin: includemocs
  * QTuioTouchPlugin: includemocs
  * QtWidgets: includemocs v2022
  * QMYSQLDriverPlugin: includemocs
  * QtDeviceDiscoverySupportPrivate: includemocs
  * QLinuxFbIntegrationPlugin: includemocs
  * QtPrintSupport: includemocs
  * QSQLiteDriverPlugin: includemocs
  * QtFbSupportPrivate: includemocs
  * QXdgDesktopPortalThemePlugin: includemocs
  * QtTest: includemocs
  * QComposePlatformInputContextPlugin: includemocs
  * QtSql: includemocs
  * QVncIntegrationPlugin: includemocs
  * Fix backingstore fractional DPR glitches for widgets in child windows
  * Include &lt;limits&gt; where std::numeric_limits is used
  * QtInputSupportPrivate: includemocs
  * Document the default value of QSFPM::sortOrder()
  * Better document how to enable sorting in QSPFM
  * Correct documentation of INI format's loss of type information
  * Android: add missing properties in AndroidManifest.xml
  * Fix assertion failure when parsing a doubly-invalid date-time text
  * Windows QPA: Correct mistake when calculating minmaxinfo
  * Android: replace ndk.dir with android.ndkVersion in build.gradle
  * Android: remove the old copy of gradle.properties after reading it
  * CMake Android Support: Fix signing of APKs
  * Android: fix A11Y object description
  * macOS: Fix warning about comparing different types in QCocoaScreen::isOnline
  * Fix qmake build on FreeBSD
  * Update documentation of enum Qt::DockWidgetArea
  * xcb: recreate xcb window under some conditions
  * objc_namespace: Add support for universal binaries
  * objc_namespace: Fix misspelled argument for silencing output
  * objc_namespace: Update parsing logic to account for otool changes
  * Blacklist passwordAuth for Ubuntu 20.04
  * Android: wrap QAndroidInputContext's m_focusObject in a QPointer
  * Fix compilation with GCC 12 (and on Fedora 35 and newer)
  * Chip example: fix an accidental bool-&gt;int conversion when using PMF connections
  * qmake: Add support for C++23
  * Android: use BCP 47 tag to create a correct Locale for QTimeZone::displayName()
  * QDateTime: fix adjusted datetime handling
  * Fix crash in tst_qmltc_examples on Android
  * macOS: Remove dead code for focus ring handling in Mac style
  * Detach for colortransforms of indexed formats
  * tst_QTcpSocket::connectToHostError - handle possible timeouts
  * CoreText: Avoid populating font family aliases if family was populated
  * Graphicsview: Avoid background clearing glitches under fractional DPR
  * Windows QPA: Avoid slowdown with UI Automation name change notification
  * Windows QPA: Avoid sending accessibility notifications before activation
  * Windows: Fix potential crash when retrieving default printer
  * Make Ubuntu with its non-standard security level happy
  * Android: Blacklist failing tests on tst_QGraphicsProxyWidget
  * Update LA 4.4.1
  * iOS A11Y: Set more accessibilityTraits
  * QNX: Fix compiler warning by when FEATURE_clipboard is not enabled
  * Document that native file dialogs might not show a title
  * Doc: Remove mentionings of overflows from QElapsedTimer
  * QTextMarkdownImporter: don't apply text char format to list item block
- Commits dropped by the rebase:
  * QBuffer: add missing &lt;limits&gt; include
  * Fix developer build</changelog>
  <changelog author="gmbr3@opensuse.org" date="1687953600">- Change %_libqt5_libexecdir to %_libexecdir/qt5 (bsc#1174075)</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch icu-devel requires to pkgconfig to allow switching libicu
  versions</changelog>
  <changelog author="fvogt@suse.com" date="1695902401">- Update to version 5.15.10+kde159 (bsc#1214327, CVE-2023-37369):
  * Fix CVE-2023-43114
  * QMimeDatabase: fix detection of pattern conflict in different prefixes
  * Fix highdpi conversion of QTabletEvent coordinates on xcb
  * widget: set WA_X11NetWmWindowType* after xcb window was created
  * Fix crash when setting override cursor on multiple clients
  * QAccessibleWidget: Remove pointless ZWSP in warning message
  * Android A11Y: Fix deadlock in QtAndroidAccessibility::runInObjectContext()
  * Correctly parse non BMP char refs in the sax parser
  * Clear the _X version of alongside the enum deprecator
  * Fix UB (signed char passed to &lt;cctype&gt; function)
  * Qt3DRender: includemocs
  * Fix capitalization error in auto-generated qdbusmacros.h include
  * QColorDialog: Ignore mouse move events when no mouse button is pressed
  * QHostInfo: fix remaining slotObj leaks
  * QXmlStreamReader: Raise error on unexpected tokens (CVE-2023-38197,
    QTBUG-92113, QTBUG-95188, bsc#1213326)
  * QTextLayout: Reconsider cursor drawing on TextObject
  * Ensure consistent cursor width under fractional scaling
  * Fix QTextEdit cursor rectangle vertical positioning
  * Return 0 in QWindow::winId in case of failed platform window creation
  * Doc: note QWindow::winId() will cause platform window creation
  * QSslDiffieHellmanParameters: fix mem-leak
  * QHostInfo: fix leaking slot object
  * Make sure we don't count down past 0 QT_FATAL_CRITICALS
  * QLogging: DRY isFatal(QtMsgType)
  * tst_QXmlStream: remove unneeded _ba UDLs
  * Fix typo in QXmlStreamReader error message
  * QXmlStreamReader: make fastScanName() indicate parsing status to callers
  * QXmlStreamReader: change fastScanName() to take a Value*
  * Fix Croatia's currency
  * SSL: upgrade the default DH parameters</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1696593600">- Update to version 5.15.11+kde134, rebased upstream:
  * Revert "Windows QPA: Add support to UiaRaiseNotificationEvent()"
  * FileChooser portal: Make sure filter.name is not empty
  * QPersistentModelIndex: fix UB (op&lt; on unrelated pointers)
  * Avoid crash when keysymToQtKey(keysym, Qt::ControlModifier) is called
  * a11y atspi: translate coords for GetOffsetAtPoint the right way
  * a11y atspi: Take dialog into account as top-level window
  * a11y atspi: Fix incorrect use of x instead of y position
  * macOS: Handle asynchronous deminiaturizing of windows
  * QTranslator: generalize a UNIX-only path
  * iOS, input panel: be more careful before enabling QIOSKeyboardListener
  * Android: Fix flickering on window resize and show keyboard
  * Android A11Y: Check for active surface before calling into native code
  * xcb: Delete touch points without target windows
  * Blacklist 1 tests in tst_QDBusConnection on ubuntu-20.04
  * Fix CMake builds without ANDROID_SDK
  * Blacklist 2 tests in tst_Http2 on ubuntu-20.04
  * Blacklist 1 tests in tst_QSqlQuery on macos
  * Defer creating the special shaders in the texture blitter
  * tst_QSslSocket::serverCipherPreferencies - fix for OpenSSL v3
  * QTemporaryFile: document rename() differences from QFile
  * Doc: 3rd party: Fix reference to FreeType LICENSE.txt
  * Update bundled libjpeg-turbo to version 2.1.4
  * tst_QSsSocket: fix verifyClientCertificate with OpenSSL 3
  * tst_QSslSocket: regenerate certificate used for setLocalCertificateChain
  * tst_QSslSocket::protocolServerSide - make it work with OpenSSL v3
  * tst_QSslSocket::oldErrorsOnSocketReuse - make it work with OpenSSL v3
  * Update zconf.h prefixes to match zlib v1.2.12 update
  * xcb: fix D&amp;D in same xembed client
  * xcb: use global coordinates for position of D&amp;D for xembed client
  * Doc: Update QMetaType::metaObject() descriptions
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 22.04
  * BLACKLIST tst_qfont for Ubuntu 22.04
  * BLACKLIST tst_QMenuBar::check_menuPosition for Ubuntu 22.04
  * tst_QDtls::verifyClientCertficiate - update certs for OpenSSL v3
  * QSslCertificate::toText(): add a file to compare against
  * Fix the spelling of the word "combination"
  * tst_QSslCertificate::pkcs12 - skip the test if OpenSSL version &gt;= 3
  * Android A11Y: Fix TalkBack scrolling behavior
  * Android A11Y: Notify android about scroll events
  * QCocoaDrag: don't add pasteboard items with non-absolute URLs
  * QDirPrivate: pass input QList by cref
  * tst_qbytearray: remove qCompress_data for QT_NO_COMPRESS
  * QDeviceDiscoveryUDev: use NSDMI
  * QAuthenticator: Fix crash when using NTLM / Negotiate
  * Provide a native interface instance in minimal platform plugin
  * Android: document the supported clipboard mimetypes
  * Windows: Account for not finding child windows when calling ChildWindowFromPointEx
  * iOS: Send touch events asynchronously to avoid deadlocking UIKit event loop
  * Disable bitcode for iOS
  * macOS: Ignore deprecation for ReleaseIconRef
  * BLACKLIST tst_QApplication::sendEventsOnProcessEvents for Ubuntu 22.04
  * Convert Latin1 to UTF-16 before passing to ICU API
  * Doc: Remove repetition of word in text
  * eglfs: Fix screen cloning when atomic is enabled
  * Fix printing of dpr&gt;1 images on Windows
  * QHttp: Fix handling of redirect loaded from cache
  * Doc: Fix return type of QLEInteger/QBEInteger post-in/decrement ops
  * qmake: Fix installation of separate debug info for plugins
  * iOS: ensure we close inputpanel after clearing focusobject
  * Convert Latin1 to UTF-16 before passing to ICU API
  * qputenv: defend against non-NUL-terminated QByteArray values
  * QFontSubset: remove unused glyphName() overload
  * Statically assert that the __mips_dsp code is only active on 32-bit
  * QGtk3Theme: Ensure gtk uses the same windowing system as Qt
  * tst_QFocusFrame: fix -Wparantheses
  * Sync Vulkan device features between QVulkanWindow and QRhi
  * SQLite: Update SQLite to v3.39.2
  * Update freetype to 2.12.1
  * corelib: Fix typos in documentation
  * QAtomicInteger docs: mention bool and char8_t as 8-bit types
  * qgraphicsitem_cast: replace 0 with nullptr
  * Doc: Hide weak overload template magic from documentation
  * Revert "QDateTime: fix adjusted datetime handling"
  * Fix select handles disappears issues
  * tst_QSslKey: prepare for the migration to OpenSSL v3
  * tst_qnetworkreply: replace server.pem/key pair
  * Disable unit testing setting up QTcpServer on special Apple interfaces
  * qmake/msbuild: Turn off "use full paths in diagnostics" by default
  * qmake/msbuild: Support all /DEBUG:xxx linker options
  * qmake/msbuild: Support all /LTCG:xxx options
  * Android A11Y: Add content change type to content change event
  * Enabler for fractional scaling of text in Qt Quick
  * macOS: Override logical DPI to 72
  * Add QDom internalSubset implementation
  * Fix tst_AndroidAssets, broken by recent changes on assets load speed
  * Android: Improve loading speed of individual assets
  * Darwin: Replace deprecated symbol kIOMasterPortDefault with equivalent
  * macOS: Remove code for handling logical DPI changes
  * Fix an incorrect invocation of llvm-readobj
  * macOS: Ignore deprecation for kOnSystemDisk icon domain
  * Copy only files that belongs to QML module
  * Android: fix wrong position of cursor handle and editpopup menu in split screen
  * Doc: Document QML_IMPORTS_PATH and QMLPATHS
  * Add the missing RCC_DIR to '.qrc' paths when generating deployment settings
  * Android: Fix the offset of the EditPopupMenu
  * xcb: update xkb_state mask as much as possible
  * QDom: Stop treating non-BMP characters as invalid
  * Android 13: Fix warnings on starting an application
  * qxkbcommon: Map Super/Hyper to Meta early enough to have an effect
  * macOS: Ignore update requests for offline displays
  * macOS: Avoid recursively updating screens when window moves screen
  * qmake/MinGW: Install separate debug info of DLLs next to the DLL
  * QMainWindow: fix restoreState() for toolbars
  * Make two QDT benchmarks data-driven and add more rows
  * Fix doc and example of QLoggingCategory::installCategory()
  * qmake: Document Xcode behavior when bundling translation files
  * Android: Fix missing import
  * QByteArray: more GCC 12 -Werror=array-bound whack-a-mole
  * CMake: Fix android sdk version propagation
  * Restore C++20-deprecated mixed-enum bitwise operators
  * Android: Fix ANR when QtService and QtActivity load in same process
  * Fix restart QtActivity
  * QArrayData::data(): do type-punning via quintptr, not char *
  * QIOSTextResponder: recreate responder upon reset
  * QSslSocket: make it work with OpenSSL v3
  * QFileSystemModelPrivate: de-inline ctor and dtor
  * Network: update Public Suffix List
  * macOS: Ensure proper quoting when calling otool in objc_namespace script
  * QKeySequence: Fix the one-off error in the mac glyph array size
- Commits dropped by the rebase:
  * Apply CVE-2022-27404-27405-27406-qtbase-5.15.diff
  * QArrayData: fix UB via reinterpret_cast (crash with FORTIFY_SOURCE=3)
  * Adapt for q_EVP_PKEY_base_id → q_EVP_PKEY_get_base_id rename in OpenSSL 3
  * Don't use a deprecated function if built/linked with OpenSSL v3</changelog>
  <changelog author="christophe@krop.fr" date="1696593601">- Enable the experimental native painting feature to improve
  remote desktop performances (boo#1214915)
  exporting QT_XCB_NATIVE_PAINTING is required to use the feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1697716800">- Update to version 5.15.11+kde138:
  * QLibraryPrivate: Actually merge load hints
  * QPluginLoader: report the right load hints
  * xkb: fix build with libxkbcommon 1.6.0 and later
  * a11y atspi: Map ButtonMenu role to AT-SPI equivalent</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1703851200">- Update to version 5.15.12+kde144, rebased upstream:
  * QMimeDatabase: handle buggy type definitions with circular inheritance
  * xcb: only set base size when it's valid
  * QPixmapCache: fix leaking of QStrings and Keys on clear()
  * OpenFile portal: do not use O_PATH fds
  * QSystemTrayIcon: properly disconnect old menu in setContextMenu()
  * Guard QTabBar against nested event processing during moving tabs
  * QDial: don't crash when min==max and setting a value != min &amp; max
  * QStandardItemModel: don't leak in mimeData()
  * SQL/MySQL: properly initialize variable
  * QWidgetTextControl: ignore invalid input method event
  * Update the LGPL license header
  * SQL/MySQL: fix handling of json column
  * Remove QMAKE_RANLIB and QMAKE_LINK_SHLIB from android/default_pre.prf
  * macOS: Fix less common writing systems on Catalina and later
  * Blacklist 1 tests in tst_QFtp on ubuntu-20.04
  * Update bundled libpng to version 1.6.39
  * Android: Fix signing of APKs that are generated when an AAB is also built
  * Update bundled zlib to version 1.2.13
  * doc: update the limitation of QSystemTrayIcon on X11
  * Blacklist 1 tests in tst_QTimer on ubuntu-20.04
  * Add benchmarks for QLocale number parsing
  * Add benchmarks for QString number parsing
  * Android: Fix incorrect fullscreen dimensions
  * Gtk3Theme: set XCURSOR_SIZE and XCURSOR_THEME for wayland sessions
  * xcb: Flush Display when processing xcb events
  * xcb: Add xlib wrapper for XFlush()
  * QHostAddress: Fix incorrect comparison against 'Any'
  * QSsl[OpenSSL/Android]: Fix hardcoded 1_1 suffix
  * BLACKLIST: tst_QApplication::sendEventsOnProcessEvents for RHEL 9.0
  * QMacStyle: do not set white color for grayed out button
  * Work round macOS's omission of en_DE from its own uiLanguages()
  * Suppress a deprecation warning in tst_QDateTime::toString_enumformat()
  * QJsonValue: fix incorrect to{Array,Object} when the value is empty
  * QGtk3Dialog: remove the #include for empty moc
  * Remove unneeded QWindow from QGtk3Dialog
  * tst_QSslSocket: Delete sslOptions
  * tst_QSslServer: Make the in-process server use TLS1.2
  * Android: fix Gradle warning about using enableUncompressedNativeLibs
  * Mention  limitation of QDir::drives() on Windows
  * QFileSystemEngine/Win: fix incorrect buffer size in currentPath()
  * Android: properly retrieve mime type of uri to for openUrl()
  * Android: Fix clipboard issue with urls
  * Android: Add a way to disable accessibility via an environment var
  * Update bundled libpng to version 1.6.38
  * QIOSMessageDialog::exec - work around 'windowsless' exec
  * QIosScreen: retain the right window
  * tst_Q{BitArray,ContiguousCache}: check not only count(), but size(), too
  * QIosTextResponder: stop using deprecated constants and type
  * qcompilerdetection.h: detect Coverity
  * Android: Fix Display.getRealMetrics deprecation
  * Fix broken Text rendering when noantialiased NativeRendering is used
  * forkfd: fix Clang 15 ATOMIC_VAR_INIT deprecation warning
  * eglfs: Add env.var. to disable the dedicated drmHandleEvent thread
  * doc: Don't put strings into QVector&lt;double&gt;
  * Remove focusProxyAndInputMethods from tst_QWidget
  * Bump version to 5.15.12
  * Update documentation of qWaitForWindowActive / qWaitForWindowExposed
  * QtHttp: Lower the severity of some log output
  * StyleSheetStyle: Fix color of placeholder texts in text edits
  * Android: Fix flickering on split screen mode
  * Update url to IAccessible2 Specification</changelog>
  <changelog author="alarrosa@suse.com" date="1704283200">- Update to version 5.15.12+kde147:
  * Http2: fix potential overflow in assemble_hpack_block()
    (bsc#1218413, CVE-2023-51714)
  * HPack: fix incorrect integer overflow check
  * HPack: fix a Yoda Condition</changelog>
  <changelog author="fvogt@suse.com" date="1708084800">- Update to version 5.15.12+kde151:
  * Improve KTX file reading memory safety (CVE-2024-25580, boo#1219996)
  * Revert "xcb: only set base size when it's valid"
  * Fix potential leak of QPropertyAnimation in QLineEditIconButton
  * QBitArray: correct inline keyword</changelog>
  <changelog author="alarrosa@suse.com" date="1720785600">- Add patch from upstream to fix a regression in the ODBC driver
  (bsc#1227513, QTBUG-112375):
  * 0001-QSQL-ODBC-fix-regression-trailing-NUL.patch
  * 0002-SQL-ODBC-Pass-correct-length-to-SQLColAttribute.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1722945600">- Add rebased upstream patch to delay any HTTP2 communication until
  encrypted() can be responded to (bsc#1227426, CVE-2024-39936):
  * 0001-HTTP2-Delay-any-communication-until-encrypted-can-be.patch
- Add upstream patch to fix a NULL pointer dereference via the
  function QXcbConnection::initializeAllAtoms() when there is
  anomalous behavior from the X server (bsc#1222120,
  CVE-2023-45935):
  * 0001-xcb-guard-a-pointer-before-usage.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756728000">- Add patch from upstream to fix a precondition violation in call
  to QByteArrayView::at() which can cause crashes (bsc#1243958,
  CVE-2025-5455):
  * 0001-qDecodeDataUrl-fix-precondition-violation-in-call-to.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756814400">- Add patch from upstream to initialize a member variable that was
  uninitialized under some circumstances:
  * 0001-QObjectPrivateSignal-initialize-all-members.patch
- Add patch from upstream to fix a crash when parsing a particular
  glyph in a particular font (QTBUG-124310):
  * 0001-Avoid-crash-in-font-distancefield-computation.patch
  * 0002-Fix-crash-in-font-distancefield-computation.patch
- Add patch from upstream to fix avoid repeatedly registering
  xsettings callbacks when switching cursor themes:
  * 0001-xcb-Avoid-repeatedly-registering-xsettings-callbacks-When.patch
- Add patch from upstream to check validity of RandR output info
  before using it (QTBUG-128906):
  * 0001-xcb-check-validity-of-RandR-output-info-before-using-it.patch
- Add patch from upstream to fix reparenting a window so it takes
  effect even if there are no other state changes to the window:
  * 0001-xcb-Sync-XCB-connection-after-reparenting-window.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756900800">- Add patch from upstream to fix a low performance when processing
  XML data in encodeText (bsc#1239896, CVE-2025-30348):
  * 0001-XML_QDom-speedup-encodeText.patch</changelog>
</package>
<package pkgid="9d2ff5034142440915698c933834e7c004d0cdd2b6a40292729d8e48cdf7e226" name="libQt5PlatformSupport-devel-static" arch="x86_64">
  <version epoch="0" ver="5.15.12+kde151" rel="150600.3.9.1"/>
  <changelog author="fvogt@suse.com" date="1678968000">- Update to version 5.15.8+kde183:
  * Add nullptr guard in QStyleSheetStyle::drawPrimitive(PE_PanelLineEdit)
  * QAbstractItemView: don't access invalid indexes on copy-key
  * Apply CVE-2023-24607-qtbase-5.15.diff (CVE-2023-24607,
    bsc#1209616)
  * QXcbConnection::getTimestamp: do not return stale timestamp
  * QToolButton: Elide text when constraints prevent from showing whole text
  * correctly set up ref counting in QThreadPool::tryStart(std::function)
  * Do not set Qt::ToolTip flag for QShapedPixmapWindow
  * Fix deletion order also for QImageReader/Writer::setDevice()
  * Fix deletion order in QImageReader/Writer destructors
  * QNetworkReply: Fix typos in the documentation
  * Doc: Fix typo in the online documentation template
  * Doc: Link to page documenting Qt trademarks in the copyright footer
  * [doc] Fix typo in QBuffer::setBuffer() description
  * qwindowsdrag: Fix typo in documentation
  * openglblacklists: Fix typo in description
  * qxcbscreen: Fix typo in documentation
  * Fix typos in SQL driver documentation
  * qxcbwindow.cpp: Fix sign-compare and another warnings
  * QToolButton: reimplement the fix for QTBUG-95255
  * QSysInfo::prettyProductName(): Add macOS Ventura product name
  * QSysInfo::prettyProductName(): add missing macOS product names
  * xcb: correctly disconnect xsettings callbacks
  * ibus: add SetCursorLocationRelative in InputContext.xml</changelog>
  <changelog author="fvogt@suse.com" date="1680523200">- Update to version 5.15.8+kde185:
  * QFSFileEngine: fix overflow bug when using lseek64
  * Add QImage null check when QOpenGLTexture converts
- Add patch to fix return key handling in QGroupBox on GNOME (bsc#1209364):
  * 0001-Revert-QGnomeTheme-Allow-Space-Return-Enter-and-Sele.patch
- Add patch to fix XInput2 events in big-endian X11 clients (bsc#1204883, QTBUG-105157):
  * big-endian-scroll.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1682078400">- Update to version 5.15.9+kde151, rebased upstream:
  * QCborValue: fix incorrect to{Array,Map} when the value is empty
  * QMargins: fix a missing "full stop" in the docs
  * QLibrary: restore translated string
  * QLibrary: fix possible arg() format clobbering
  * iOS: Use python3 for enumerating test target devices
  * Android: Treat ACTION_CANCEL as TouchCancelEvent
  * Doc: Fix broken formatting
  * QFileSystemEngine: fix potential formatting error
  * QString::asprintf: check that passing field widths as arguments works
  * Backport recent QFlags tests
  * network: Fix typos in documentation
  * Fix accuracy with screen composition
  * Doc: Update documentation for QElapsedTimer's in Windows
  * Document that QStandardPath::findExecutable works with absolute paths
  * macOS: Use native resize cursors for diagonal resize
  * Fix clipped glyphs in text rendering of QGraphicsTextItem
  * Change comparison data type to fix int overflow
  * Add missing Q_WEAK_OVERLOAD definition
  * Update QFileInfo docs to mention macOS aliases
  * Distinguish macOS aliases from normal symbolic links
  * Windows QPA: Fix frameless maximize on secondary screens
  * Rewrite tst_qdataurl as a data-driven test
  * Fix compilation for wasm
  * QIOSFileDialog/QIOSDocumentPickerController - handle dismissed view controller
  * Fix QDockWidget's dock area permissions after hovering
  * Fix C++20 ambiguous relational operators between QJsonValue{,Ref}
  * Android: make sure that orientationChange is reported after resize
  * Android: set all QScreen's geometry-related parameters together
  * Blacklist: test cases blacklisted in tst_QDBusConnection:
  * wasm:  fix issue with passing username/password to network request
  * macOS: Pass multi arch flags when linking qmake
  * QCocoaFileDialogHelper: Always enable symlinks and aliases to directories
  * Android: terminate argv passed to main() with nullptr
  * Update bundled libjpeg-turbo to version 2.1.3
  * ANGLE: Load the DirectX libraries from the system path directly
  * SQLite: Update SQLite to v3.37.2
  * Fix compiler warnings about unused parameters
  * Fix getsockopt option_value initial initialization
  * Http2: Fix redirect-handling
  * Android A11Y: Fix value rounding
  * Android A11Y: Announce value together with element name when focused
  * Android A11Y: handle valueChanged events
  * tst_QSystemSemaphore: give proper path to test-helper
  * QNX: Silence compiler warning by initializing variable
  * Update LICENSE.QT-LICENSE-AGREEMENT
  * winrt appxmanifest: Properly replace VCLibs version for newer MSVC versions
  * QAbstractSocket: Don't pretend pause and resume is a stack
  * Gui: test also depends for clipboard feature
  * QDesktopServices: deprecate destroying URL handlers w/o explicit unsetUrlHandler()
  * macOS: Respect QMAKE_APPLE_DEVICE_ARCHS when building qmake
  * HTTP: Make redirect response parsing more generic
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 20.04
  * Android A11Y: populate child elements when constructing node info
  * Fix issue where readyRead() could happen after disconnected()
  * QStringView: add missing constexpr so we can use is_constant_evaluated
  * Use Android's View.generateViewId() for generating ids for views/surfaces
  * Remove documentation of non-existing QAccessible state
  * Doc: Fix snippet to match actual QFileInfo behavior
  * Android: Re-focus focused accessibility node after orientation change
  * Android A11Y: execute C++ code on main Qt thread
  * Android: extract parentId for hidden object in advance
  * xcb: Show valuator atom names properly in categorized logging
  * Android: replace stacktrace with debug message in search for setService
  * Better document attaching a QFutureWatcher to a started QFuture
  * doc: Update GenericDataLocation location on iOS
  * BLACKLIST test_Gestures tests for RHEL-8.4
  * QPlainTestLogger: do not print "failure location" if there's no failure
  * QAbstractItemView: do not access invalid model indices (3/N)
  * Win32: always allow the event loop to be woken up by posted events
  * rhi: d3d11: Use __uuidof where we can
  * Don't QEXPECT_FAIL tst_QLineEdit::testQuickSelectionWithMouse on macOS ARM
  * Network: Emit authenticationRequired when using Ntlm
  * testlib: Disable window restoration on macOS in a non-persistent way
  * QAbstractItemView: do not access invalid model indices (2/N)
  * QAbstractItemView: do not access invalid model indices (1/N)
  * QAbstractItemView: code tidies
  * Update float16 part of TestLib selftest
  * QGuiApplication: constant-initialize lastCursorPosition
  * Blacklist tst_QFileSystemWatcher::signalsEmittedAfterFileMoved on all Windows versions
  * [Android]: Handle the screen name, modes and refreshRate properly
  * QVersionNumber: remove the "pure" attribute from commonPrefix()
  * QEvent: initialize the static userEventTypeRegistry constexprly
  * Let QXcbGlxWindow::createVisual fallback to QXcbWindow::createVisual
  * Android A11Y: fix content update notification when object is hidden
  * Android: explicitly remove accessibility focus when element is hidden
  * BLACKLIST tst_qfont for Red Hat 8.4 and Ubuntu 20.04
  * QtCore: includemocs
  * Fix memory leak in QtConcurrent::run when called with a NULL QThreadPool
  * INTEGRITY: Prevent deletion of virtual functions
  * QMake: replace a Q_ASSERT() with a Q_UNREACHABLE()
  * QTransform benchmark: measure what was promised
  * QStaticByteArrayMatcher: add a useful comment
  * QMacStyle: use the 'momentary push in' type for push buttons
  * qopengl.h: Move C header #include(s) out of the QT_NAMESPACE
  * Enable all supported 1.0 device features in QVulkanWindow
  * Fix queue passed to vkQueuePresent
  * QFusionStyle: don't draw an invalid outline for up/down buttons
  * Doc: Make QListIterator snippets more robust
  * QVersionNumber: don't detach() in rvalue QList/QVector ctor
  * QNetworkRequest: Document how Qt handles 301 and 302 status codes
  * Convert date-time to UTC before claiming it's in GMT
  * Remove execute permission from XML files
  * Add test case for style sheet selectors for enum properties
  * FreeType: allow falling back to synthesized bold if desired
  * Fix an assertion failure in massageAdjustedDateTime()
  * Relax tst_qvulkan::vulkanVersionRequest to make it compatible with 1.1
  * Doc: Replace "C:Documents and Settings" paths
  * QOrderedMutexLocker: fix compilation with C++11
  * QHttpNetworkConnection: Always set proxy settings to all channels
  * Add a markdown writer test for a checklist item ending with `code`
  * Use QTextCharFormat::fontFixedPitch to remember Markdown backtick spans
  * QWizardLayoutInfo: make == and != operators const
  * Revert "Android: Fix screen flicker issues"
  * macOS: Handle momentum scroll NSEventPhaseBegan when scroll had ended
  * SQLite: Update SQLite to v3.37.0
  * Update copyright year to 2022
  * QTzTimeZonePrivate: use ctor delegation instead of init()
  * QTzTimeZonePrivate: fix permanently-detaching m_icu
  * tst_QGraphicsView: fix memleak
  * Doc: Update external links to Qt Creator Manual
  * macOS: assume an unidentified tablet device is a stylus
  * tst_QItemModel: fix memleaks
  * tst_qanimationgroup: fix memleaks
  * QAbstractAnimation: add missing forward-declaration
  * [doc] QCoreApplication::installTranslator() doesn't take ownership
  * tst_qtranslator: fix memleak
  * QTestData: fix streaming of u8 string literals in C++20 mode
  * QThread/Unix: extract duplicate code
  * QWindowPrivate: fix inconsistent inline on some methods
  * tst_QStringList: check that join(u'0') embeds NULs
  * macOS: Sanitize scroll deltas for NSEventPhaseCancelled
  * tst_qsharedmemory: skip readOnly() test under asan
  * QXmlStreamReader: update test distribution
  * QZipReader: update to unzip partly broken archives
  * Deliver context menu event with correct coordinates to widgets in popups
  * QTextHtmlParser: fix prefix lookahead and html comments
  * QtConcurrent::run crashes on program exit
  * tst_QPropertyAnimation: fix leaks occurring under normal operation
  * tst_QPropertyAnimation: fix wrong comment
  * QLogging: fix potential missing NUL-terminator when calling OutputDebugString
  * Fix qt_scrollRectInImage when scrolling outside of the image
- Commits dropped by the rebase:
  * Fix compile with Qt5: Use QString::mid instead of QString::sliced
  * Restore C++11 compatibility after e8b9f4c28d3ab5e960dc54f2dc0c4b749b0b50e0
  * QDateTime: Don't require c++17</changelog>
  <changelog author="fvogt@suse.com" date="1683633600">- Amend patch to fix mouse grabbing as well (bsc#1211024):
  * big-endian-scroll.patch</changelog>
  <changelog author="fvogt@suse.com" date="1684929600">- Update to version 5.15.9+kde154:
  * Hsts: match header names case insensitively (CVE-2023-32762,
    QTBUG-113392, bsc#1211797)
  * Fix specific overflow in qtextlayout (CVE-2023-32763,
    QTBUG-113337, bsc#1211798)
  * QDnsLookup/Unix: make sure we don't overflow the buffer
    (CVE-2023-33285, boo#1211642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1686657600">- Update to version 5.15.10+kde129, rebased upstream:
  * Ssl: Copy the on-demand cert loading bool from default config
  * Schannel: Reject certificate not signed by a configured CA certificate (boo#1211994, CVE-2023-34410)
  * qnetworkreplyfileimpl_p.h: fix header guard name
  * Revert "Draw the cursor considering the descent is 0"
  * Use pkgconfig in order to find libproxy configuration
  * Upgrade PCRE2 to 10.40
  * Android A11Y: handle LocationChanged event only for focused element
  * Port binary JSON to new special integer bitfields
  * INTEGRITY: enable C99 globally
  * QObject: mark two error reporting functions COLD
  * Endian: Provide special integer bitfield unions
  * Android: set useLegacyPackaging to true in build.gradle
  * QWidgetTextControl: port to new-style connects (faster)
  * Sync qxmlstream.g with qxmlstreamparser_p.h [1/2]: switched lines
  * tst_QNetworkReply try stabilize autoDeleteReplies tests
  * Remove duplicated include for &lt;limits&gt;
  * Fix recursion crash when calling setStyleSheet with `qproperty-styleSheet`
  * qwindowsxpstyle: Fix typos in documentation
  * Correct prefix reported for end element in QXmlStreamReader
  * Android A11Y: Add supported role infos to A11yNodeInfo
  * Fix handling of DateTime values in QSettings
  * Fix off-by-one for "typically" lowest value INT_MIN
  * xml: Fix typos in documentation
  * QWindowsWindow: Fix typo in documentation
  * includemocs (updated script)
  * widgets: Fix typos in documentation
  * cocoa: Fix typo in debug messages
  * Only scroll QMenu when there is a valid active action
  * QTimer: Add note in documentation
  * Fix QListView assert when the last row is moved in IconMode
  * QFileDialog: Fix adding default suffix when file path contains dot
  * QLineEdit: account for the placeholderText when computing lineRect
  * QFileDialog::saveFileContent crashes on accept
  * QCompleter: QCompleter unexpectedly changes QLineEdit text
  * Fix build error on iOS with the configure option -qtnamespace
  * Draw the cursor considering the descent is 0
  * Remove pure-virtual-signals.h include from tst_moc.cpp
  * plugins: image formats - fix odr violation
  * dbus: Fix typos
  * qwindowsdialoghelpers: Fix typo in documentation
  * QTableView: Document the customizations applied to QHeaderView
  * Unicodetools: compile
  * eglfs_x11: Fix running flag linkage
  * qcompilerdetection.h: add Q_CC_{GNU,MSVC,CLANG}_ONLY macros
  * Fix CMake warning about "missing closing ' quote"
  * Fix alignment of next/prev links in offline style
  * QtDBus: includemocs
  * Image Plugins: includemocs(-ish)
  * QtGui: includemocs
  * QXcbNativeInterface: remove unused field m_sysTraySelectionAtom
  * Windows QPA: Fix slowdown with large table/tree views with accessibility
  * Macstyle: fix the text color on the disabled button
  * QMacStyle: fix tool buttons (in checked mode)
  * QTeamCityLogger: fix .arg() placeholder injection
  * QAbstractTestLogger: disable copying
  * Fix errorMessageFromComError()
  * QtNetwork: includemocs
  * AppleUnifiedLogger: Remove manually managed os_log_t cache
  * examples: add WindowStaysOnBottomHint into preview text
  * QSharedPointer: Use matching new/delete
  * QIbusPlatformInputContextPlugin: includemocs
  * QGtk3ThemePlugin: includemocs
  * QTuioTouchPlugin: includemocs
  * QtWidgets: includemocs v2022
  * QMYSQLDriverPlugin: includemocs
  * QtDeviceDiscoverySupportPrivate: includemocs
  * QLinuxFbIntegrationPlugin: includemocs
  * QtPrintSupport: includemocs
  * QSQLiteDriverPlugin: includemocs
  * QtFbSupportPrivate: includemocs
  * QXdgDesktopPortalThemePlugin: includemocs
  * QtTest: includemocs
  * QComposePlatformInputContextPlugin: includemocs
  * QtSql: includemocs
  * QVncIntegrationPlugin: includemocs
  * Fix backingstore fractional DPR glitches for widgets in child windows
  * Include &lt;limits&gt; where std::numeric_limits is used
  * QtInputSupportPrivate: includemocs
  * Document the default value of QSFPM::sortOrder()
  * Better document how to enable sorting in QSPFM
  * Correct documentation of INI format's loss of type information
  * Android: add missing properties in AndroidManifest.xml
  * Fix assertion failure when parsing a doubly-invalid date-time text
  * Windows QPA: Correct mistake when calculating minmaxinfo
  * Android: replace ndk.dir with android.ndkVersion in build.gradle
  * Android: remove the old copy of gradle.properties after reading it
  * CMake Android Support: Fix signing of APKs
  * Android: fix A11Y object description
  * macOS: Fix warning about comparing different types in QCocoaScreen::isOnline
  * Fix qmake build on FreeBSD
  * Update documentation of enum Qt::DockWidgetArea
  * xcb: recreate xcb window under some conditions
  * objc_namespace: Add support for universal binaries
  * objc_namespace: Fix misspelled argument for silencing output
  * objc_namespace: Update parsing logic to account for otool changes
  * Blacklist passwordAuth for Ubuntu 20.04
  * Android: wrap QAndroidInputContext's m_focusObject in a QPointer
  * Fix compilation with GCC 12 (and on Fedora 35 and newer)
  * Chip example: fix an accidental bool-&gt;int conversion when using PMF connections
  * qmake: Add support for C++23
  * Android: use BCP 47 tag to create a correct Locale for QTimeZone::displayName()
  * QDateTime: fix adjusted datetime handling
  * Fix crash in tst_qmltc_examples on Android
  * macOS: Remove dead code for focus ring handling in Mac style
  * Detach for colortransforms of indexed formats
  * tst_QTcpSocket::connectToHostError - handle possible timeouts
  * CoreText: Avoid populating font family aliases if family was populated
  * Graphicsview: Avoid background clearing glitches under fractional DPR
  * Windows QPA: Avoid slowdown with UI Automation name change notification
  * Windows QPA: Avoid sending accessibility notifications before activation
  * Windows: Fix potential crash when retrieving default printer
  * Make Ubuntu with its non-standard security level happy
  * Android: Blacklist failing tests on tst_QGraphicsProxyWidget
  * Update LA 4.4.1
  * iOS A11Y: Set more accessibilityTraits
  * QNX: Fix compiler warning by when FEATURE_clipboard is not enabled
  * Document that native file dialogs might not show a title
  * Doc: Remove mentionings of overflows from QElapsedTimer
  * QTextMarkdownImporter: don't apply text char format to list item block
- Commits dropped by the rebase:
  * QBuffer: add missing &lt;limits&gt; include
  * Fix developer build</changelog>
  <changelog author="gmbr3@opensuse.org" date="1687953600">- Change %_libqt5_libexecdir to %_libexecdir/qt5 (bsc#1174075)</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch icu-devel requires to pkgconfig to allow switching libicu
  versions</changelog>
  <changelog author="fvogt@suse.com" date="1695902401">- Update to version 5.15.10+kde159 (bsc#1214327, CVE-2023-37369):
  * Fix CVE-2023-43114
  * QMimeDatabase: fix detection of pattern conflict in different prefixes
  * Fix highdpi conversion of QTabletEvent coordinates on xcb
  * widget: set WA_X11NetWmWindowType* after xcb window was created
  * Fix crash when setting override cursor on multiple clients
  * QAccessibleWidget: Remove pointless ZWSP in warning message
  * Android A11Y: Fix deadlock in QtAndroidAccessibility::runInObjectContext()
  * Correctly parse non BMP char refs in the sax parser
  * Clear the _X version of alongside the enum deprecator
  * Fix UB (signed char passed to &lt;cctype&gt; function)
  * Qt3DRender: includemocs
  * Fix capitalization error in auto-generated qdbusmacros.h include
  * QColorDialog: Ignore mouse move events when no mouse button is pressed
  * QHostInfo: fix remaining slotObj leaks
  * QXmlStreamReader: Raise error on unexpected tokens (CVE-2023-38197,
    QTBUG-92113, QTBUG-95188, bsc#1213326)
  * QTextLayout: Reconsider cursor drawing on TextObject
  * Ensure consistent cursor width under fractional scaling
  * Fix QTextEdit cursor rectangle vertical positioning
  * Return 0 in QWindow::winId in case of failed platform window creation
  * Doc: note QWindow::winId() will cause platform window creation
  * QSslDiffieHellmanParameters: fix mem-leak
  * QHostInfo: fix leaking slot object
  * Make sure we don't count down past 0 QT_FATAL_CRITICALS
  * QLogging: DRY isFatal(QtMsgType)
  * tst_QXmlStream: remove unneeded _ba UDLs
  * Fix typo in QXmlStreamReader error message
  * QXmlStreamReader: make fastScanName() indicate parsing status to callers
  * QXmlStreamReader: change fastScanName() to take a Value*
  * Fix Croatia's currency
  * SSL: upgrade the default DH parameters</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1696593600">- Update to version 5.15.11+kde134, rebased upstream:
  * Revert "Windows QPA: Add support to UiaRaiseNotificationEvent()"
  * FileChooser portal: Make sure filter.name is not empty
  * QPersistentModelIndex: fix UB (op&lt; on unrelated pointers)
  * Avoid crash when keysymToQtKey(keysym, Qt::ControlModifier) is called
  * a11y atspi: translate coords for GetOffsetAtPoint the right way
  * a11y atspi: Take dialog into account as top-level window
  * a11y atspi: Fix incorrect use of x instead of y position
  * macOS: Handle asynchronous deminiaturizing of windows
  * QTranslator: generalize a UNIX-only path
  * iOS, input panel: be more careful before enabling QIOSKeyboardListener
  * Android: Fix flickering on window resize and show keyboard
  * Android A11Y: Check for active surface before calling into native code
  * xcb: Delete touch points without target windows
  * Blacklist 1 tests in tst_QDBusConnection on ubuntu-20.04
  * Fix CMake builds without ANDROID_SDK
  * Blacklist 2 tests in tst_Http2 on ubuntu-20.04
  * Blacklist 1 tests in tst_QSqlQuery on macos
  * Defer creating the special shaders in the texture blitter
  * tst_QSslSocket::serverCipherPreferencies - fix for OpenSSL v3
  * QTemporaryFile: document rename() differences from QFile
  * Doc: 3rd party: Fix reference to FreeType LICENSE.txt
  * Update bundled libjpeg-turbo to version 2.1.4
  * tst_QSsSocket: fix verifyClientCertificate with OpenSSL 3
  * tst_QSslSocket: regenerate certificate used for setLocalCertificateChain
  * tst_QSslSocket::protocolServerSide - make it work with OpenSSL v3
  * tst_QSslSocket::oldErrorsOnSocketReuse - make it work with OpenSSL v3
  * Update zconf.h prefixes to match zlib v1.2.12 update
  * xcb: fix D&amp;D in same xembed client
  * xcb: use global coordinates for position of D&amp;D for xembed client
  * Doc: Update QMetaType::metaObject() descriptions
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 22.04
  * BLACKLIST tst_qfont for Ubuntu 22.04
  * BLACKLIST tst_QMenuBar::check_menuPosition for Ubuntu 22.04
  * tst_QDtls::verifyClientCertficiate - update certs for OpenSSL v3
  * QSslCertificate::toText(): add a file to compare against
  * Fix the spelling of the word "combination"
  * tst_QSslCertificate::pkcs12 - skip the test if OpenSSL version &gt;= 3
  * Android A11Y: Fix TalkBack scrolling behavior
  * Android A11Y: Notify android about scroll events
  * QCocoaDrag: don't add pasteboard items with non-absolute URLs
  * QDirPrivate: pass input QList by cref
  * tst_qbytearray: remove qCompress_data for QT_NO_COMPRESS
  * QDeviceDiscoveryUDev: use NSDMI
  * QAuthenticator: Fix crash when using NTLM / Negotiate
  * Provide a native interface instance in minimal platform plugin
  * Android: document the supported clipboard mimetypes
  * Windows: Account for not finding child windows when calling ChildWindowFromPointEx
  * iOS: Send touch events asynchronously to avoid deadlocking UIKit event loop
  * Disable bitcode for iOS
  * macOS: Ignore deprecation for ReleaseIconRef
  * BLACKLIST tst_QApplication::sendEventsOnProcessEvents for Ubuntu 22.04
  * Convert Latin1 to UTF-16 before passing to ICU API
  * Doc: Remove repetition of word in text
  * eglfs: Fix screen cloning when atomic is enabled
  * Fix printing of dpr&gt;1 images on Windows
  * QHttp: Fix handling of redirect loaded from cache
  * Doc: Fix return type of QLEInteger/QBEInteger post-in/decrement ops
  * qmake: Fix installation of separate debug info for plugins
  * iOS: ensure we close inputpanel after clearing focusobject
  * Convert Latin1 to UTF-16 before passing to ICU API
  * qputenv: defend against non-NUL-terminated QByteArray values
  * QFontSubset: remove unused glyphName() overload
  * Statically assert that the __mips_dsp code is only active on 32-bit
  * QGtk3Theme: Ensure gtk uses the same windowing system as Qt
  * tst_QFocusFrame: fix -Wparantheses
  * Sync Vulkan device features between QVulkanWindow and QRhi
  * SQLite: Update SQLite to v3.39.2
  * Update freetype to 2.12.1
  * corelib: Fix typos in documentation
  * QAtomicInteger docs: mention bool and char8_t as 8-bit types
  * qgraphicsitem_cast: replace 0 with nullptr
  * Doc: Hide weak overload template magic from documentation
  * Revert "QDateTime: fix adjusted datetime handling"
  * Fix select handles disappears issues
  * tst_QSslKey: prepare for the migration to OpenSSL v3
  * tst_qnetworkreply: replace server.pem/key pair
  * Disable unit testing setting up QTcpServer on special Apple interfaces
  * qmake/msbuild: Turn off "use full paths in diagnostics" by default
  * qmake/msbuild: Support all /DEBUG:xxx linker options
  * qmake/msbuild: Support all /LTCG:xxx options
  * Android A11Y: Add content change type to content change event
  * Enabler for fractional scaling of text in Qt Quick
  * macOS: Override logical DPI to 72
  * Add QDom internalSubset implementation
  * Fix tst_AndroidAssets, broken by recent changes on assets load speed
  * Android: Improve loading speed of individual assets
  * Darwin: Replace deprecated symbol kIOMasterPortDefault with equivalent
  * macOS: Remove code for handling logical DPI changes
  * Fix an incorrect invocation of llvm-readobj
  * macOS: Ignore deprecation for kOnSystemDisk icon domain
  * Copy only files that belongs to QML module
  * Android: fix wrong position of cursor handle and editpopup menu in split screen
  * Doc: Document QML_IMPORTS_PATH and QMLPATHS
  * Add the missing RCC_DIR to '.qrc' paths when generating deployment settings
  * Android: Fix the offset of the EditPopupMenu
  * xcb: update xkb_state mask as much as possible
  * QDom: Stop treating non-BMP characters as invalid
  * Android 13: Fix warnings on starting an application
  * qxkbcommon: Map Super/Hyper to Meta early enough to have an effect
  * macOS: Ignore update requests for offline displays
  * macOS: Avoid recursively updating screens when window moves screen
  * qmake/MinGW: Install separate debug info of DLLs next to the DLL
  * QMainWindow: fix restoreState() for toolbars
  * Make two QDT benchmarks data-driven and add more rows
  * Fix doc and example of QLoggingCategory::installCategory()
  * qmake: Document Xcode behavior when bundling translation files
  * Android: Fix missing import
  * QByteArray: more GCC 12 -Werror=array-bound whack-a-mole
  * CMake: Fix android sdk version propagation
  * Restore C++20-deprecated mixed-enum bitwise operators
  * Android: Fix ANR when QtService and QtActivity load in same process
  * Fix restart QtActivity
  * QArrayData::data(): do type-punning via quintptr, not char *
  * QIOSTextResponder: recreate responder upon reset
  * QSslSocket: make it work with OpenSSL v3
  * QFileSystemModelPrivate: de-inline ctor and dtor
  * Network: update Public Suffix List
  * macOS: Ensure proper quoting when calling otool in objc_namespace script
  * QKeySequence: Fix the one-off error in the mac glyph array size
- Commits dropped by the rebase:
  * Apply CVE-2022-27404-27405-27406-qtbase-5.15.diff
  * QArrayData: fix UB via reinterpret_cast (crash with FORTIFY_SOURCE=3)
  * Adapt for q_EVP_PKEY_base_id → q_EVP_PKEY_get_base_id rename in OpenSSL 3
  * Don't use a deprecated function if built/linked with OpenSSL v3</changelog>
  <changelog author="christophe@krop.fr" date="1696593601">- Enable the experimental native painting feature to improve
  remote desktop performances (boo#1214915)
  exporting QT_XCB_NATIVE_PAINTING is required to use the feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1697716800">- Update to version 5.15.11+kde138:
  * QLibraryPrivate: Actually merge load hints
  * QPluginLoader: report the right load hints
  * xkb: fix build with libxkbcommon 1.6.0 and later
  * a11y atspi: Map ButtonMenu role to AT-SPI equivalent</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1703851200">- Update to version 5.15.12+kde144, rebased upstream:
  * QMimeDatabase: handle buggy type definitions with circular inheritance
  * xcb: only set base size when it's valid
  * QPixmapCache: fix leaking of QStrings and Keys on clear()
  * OpenFile portal: do not use O_PATH fds
  * QSystemTrayIcon: properly disconnect old menu in setContextMenu()
  * Guard QTabBar against nested event processing during moving tabs
  * QDial: don't crash when min==max and setting a value != min &amp; max
  * QStandardItemModel: don't leak in mimeData()
  * SQL/MySQL: properly initialize variable
  * QWidgetTextControl: ignore invalid input method event
  * Update the LGPL license header
  * SQL/MySQL: fix handling of json column
  * Remove QMAKE_RANLIB and QMAKE_LINK_SHLIB from android/default_pre.prf
  * macOS: Fix less common writing systems on Catalina and later
  * Blacklist 1 tests in tst_QFtp on ubuntu-20.04
  * Update bundled libpng to version 1.6.39
  * Android: Fix signing of APKs that are generated when an AAB is also built
  * Update bundled zlib to version 1.2.13
  * doc: update the limitation of QSystemTrayIcon on X11
  * Blacklist 1 tests in tst_QTimer on ubuntu-20.04
  * Add benchmarks for QLocale number parsing
  * Add benchmarks for QString number parsing
  * Android: Fix incorrect fullscreen dimensions
  * Gtk3Theme: set XCURSOR_SIZE and XCURSOR_THEME for wayland sessions
  * xcb: Flush Display when processing xcb events
  * xcb: Add xlib wrapper for XFlush()
  * QHostAddress: Fix incorrect comparison against 'Any'
  * QSsl[OpenSSL/Android]: Fix hardcoded 1_1 suffix
  * BLACKLIST: tst_QApplication::sendEventsOnProcessEvents for RHEL 9.0
  * QMacStyle: do not set white color for grayed out button
  * Work round macOS's omission of en_DE from its own uiLanguages()
  * Suppress a deprecation warning in tst_QDateTime::toString_enumformat()
  * QJsonValue: fix incorrect to{Array,Object} when the value is empty
  * QGtk3Dialog: remove the #include for empty moc
  * Remove unneeded QWindow from QGtk3Dialog
  * tst_QSslSocket: Delete sslOptions
  * tst_QSslServer: Make the in-process server use TLS1.2
  * Android: fix Gradle warning about using enableUncompressedNativeLibs
  * Mention  limitation of QDir::drives() on Windows
  * QFileSystemEngine/Win: fix incorrect buffer size in currentPath()
  * Android: properly retrieve mime type of uri to for openUrl()
  * Android: Fix clipboard issue with urls
  * Android: Add a way to disable accessibility via an environment var
  * Update bundled libpng to version 1.6.38
  * QIOSMessageDialog::exec - work around 'windowsless' exec
  * QIosScreen: retain the right window
  * tst_Q{BitArray,ContiguousCache}: check not only count(), but size(), too
  * QIosTextResponder: stop using deprecated constants and type
  * qcompilerdetection.h: detect Coverity
  * Android: Fix Display.getRealMetrics deprecation
  * Fix broken Text rendering when noantialiased NativeRendering is used
  * forkfd: fix Clang 15 ATOMIC_VAR_INIT deprecation warning
  * eglfs: Add env.var. to disable the dedicated drmHandleEvent thread
  * doc: Don't put strings into QVector&lt;double&gt;
  * Remove focusProxyAndInputMethods from tst_QWidget
  * Bump version to 5.15.12
  * Update documentation of qWaitForWindowActive / qWaitForWindowExposed
  * QtHttp: Lower the severity of some log output
  * StyleSheetStyle: Fix color of placeholder texts in text edits
  * Android: Fix flickering on split screen mode
  * Update url to IAccessible2 Specification</changelog>
  <changelog author="alarrosa@suse.com" date="1704283200">- Update to version 5.15.12+kde147:
  * Http2: fix potential overflow in assemble_hpack_block()
    (bsc#1218413, CVE-2023-51714)
  * HPack: fix incorrect integer overflow check
  * HPack: fix a Yoda Condition</changelog>
  <changelog author="fvogt@suse.com" date="1708084800">- Update to version 5.15.12+kde151:
  * Improve KTX file reading memory safety (CVE-2024-25580, boo#1219996)
  * Revert "xcb: only set base size when it's valid"
  * Fix potential leak of QPropertyAnimation in QLineEditIconButton
  * QBitArray: correct inline keyword</changelog>
  <changelog author="alarrosa@suse.com" date="1720785600">- Add patch from upstream to fix a regression in the ODBC driver
  (bsc#1227513, QTBUG-112375):
  * 0001-QSQL-ODBC-fix-regression-trailing-NUL.patch
  * 0002-SQL-ODBC-Pass-correct-length-to-SQLColAttribute.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1722945600">- Add rebased upstream patch to delay any HTTP2 communication until
  encrypted() can be responded to (bsc#1227426, CVE-2024-39936):
  * 0001-HTTP2-Delay-any-communication-until-encrypted-can-be.patch
- Add upstream patch to fix a NULL pointer dereference via the
  function QXcbConnection::initializeAllAtoms() when there is
  anomalous behavior from the X server (bsc#1222120,
  CVE-2023-45935):
  * 0001-xcb-guard-a-pointer-before-usage.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756728000">- Add patch from upstream to fix a precondition violation in call
  to QByteArrayView::at() which can cause crashes (bsc#1243958,
  CVE-2025-5455):
  * 0001-qDecodeDataUrl-fix-precondition-violation-in-call-to.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756814400">- Add patch from upstream to initialize a member variable that was
  uninitialized under some circumstances:
  * 0001-QObjectPrivateSignal-initialize-all-members.patch
- Add patch from upstream to fix a crash when parsing a particular
  glyph in a particular font (QTBUG-124310):
  * 0001-Avoid-crash-in-font-distancefield-computation.patch
  * 0002-Fix-crash-in-font-distancefield-computation.patch
- Add patch from upstream to fix avoid repeatedly registering
  xsettings callbacks when switching cursor themes:
  * 0001-xcb-Avoid-repeatedly-registering-xsettings-callbacks-When.patch
- Add patch from upstream to check validity of RandR output info
  before using it (QTBUG-128906):
  * 0001-xcb-check-validity-of-RandR-output-info-before-using-it.patch
- Add patch from upstream to fix reparenting a window so it takes
  effect even if there are no other state changes to the window:
  * 0001-xcb-Sync-XCB-connection-after-reparenting-window.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756900800">- Add patch from upstream to fix a low performance when processing
  XML data in encodeText (bsc#1239896, CVE-2025-30348):
  * 0001-XML_QDom-speedup-encodeText.patch</changelog>
</package>
<package pkgid="639e62f732337ae5df101413c7e2757ba1bd22658694ad5d803cccad0aaae2f7" name="libQt5PlatformSupport-private-headers-devel" arch="noarch">
  <version epoch="0" ver="5.15.12+kde151" rel="150600.3.9.1"/>
  <changelog author="fvogt@suse.com" date="1678968000">- Update to version 5.15.8+kde183:
  * Add nullptr guard in QStyleSheetStyle::drawPrimitive(PE_PanelLineEdit)
  * QAbstractItemView: don't access invalid indexes on copy-key
  * Apply CVE-2023-24607-qtbase-5.15.diff (CVE-2023-24607,
    bsc#1209616)
  * QXcbConnection::getTimestamp: do not return stale timestamp
  * QToolButton: Elide text when constraints prevent from showing whole text
  * correctly set up ref counting in QThreadPool::tryStart(std::function)
  * Do not set Qt::ToolTip flag for QShapedPixmapWindow
  * Fix deletion order also for QImageReader/Writer::setDevice()
  * Fix deletion order in QImageReader/Writer destructors
  * QNetworkReply: Fix typos in the documentation
  * Doc: Fix typo in the online documentation template
  * Doc: Link to page documenting Qt trademarks in the copyright footer
  * [doc] Fix typo in QBuffer::setBuffer() description
  * qwindowsdrag: Fix typo in documentation
  * openglblacklists: Fix typo in description
  * qxcbscreen: Fix typo in documentation
  * Fix typos in SQL driver documentation
  * qxcbwindow.cpp: Fix sign-compare and another warnings
  * QToolButton: reimplement the fix for QTBUG-95255
  * QSysInfo::prettyProductName(): Add macOS Ventura product name
  * QSysInfo::prettyProductName(): add missing macOS product names
  * xcb: correctly disconnect xsettings callbacks
  * ibus: add SetCursorLocationRelative in InputContext.xml</changelog>
  <changelog author="fvogt@suse.com" date="1680523200">- Update to version 5.15.8+kde185:
  * QFSFileEngine: fix overflow bug when using lseek64
  * Add QImage null check when QOpenGLTexture converts
- Add patch to fix return key handling in QGroupBox on GNOME (bsc#1209364):
  * 0001-Revert-QGnomeTheme-Allow-Space-Return-Enter-and-Sele.patch
- Add patch to fix XInput2 events in big-endian X11 clients (bsc#1204883, QTBUG-105157):
  * big-endian-scroll.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1682078400">- Update to version 5.15.9+kde151, rebased upstream:
  * QCborValue: fix incorrect to{Array,Map} when the value is empty
  * QMargins: fix a missing "full stop" in the docs
  * QLibrary: restore translated string
  * QLibrary: fix possible arg() format clobbering
  * iOS: Use python3 for enumerating test target devices
  * Android: Treat ACTION_CANCEL as TouchCancelEvent
  * Doc: Fix broken formatting
  * QFileSystemEngine: fix potential formatting error
  * QString::asprintf: check that passing field widths as arguments works
  * Backport recent QFlags tests
  * network: Fix typos in documentation
  * Fix accuracy with screen composition
  * Doc: Update documentation for QElapsedTimer's in Windows
  * Document that QStandardPath::findExecutable works with absolute paths
  * macOS: Use native resize cursors for diagonal resize
  * Fix clipped glyphs in text rendering of QGraphicsTextItem
  * Change comparison data type to fix int overflow
  * Add missing Q_WEAK_OVERLOAD definition
  * Update QFileInfo docs to mention macOS aliases
  * Distinguish macOS aliases from normal symbolic links
  * Windows QPA: Fix frameless maximize on secondary screens
  * Rewrite tst_qdataurl as a data-driven test
  * Fix compilation for wasm
  * QIOSFileDialog/QIOSDocumentPickerController - handle dismissed view controller
  * Fix QDockWidget's dock area permissions after hovering
  * Fix C++20 ambiguous relational operators between QJsonValue{,Ref}
  * Android: make sure that orientationChange is reported after resize
  * Android: set all QScreen's geometry-related parameters together
  * Blacklist: test cases blacklisted in tst_QDBusConnection:
  * wasm:  fix issue with passing username/password to network request
  * macOS: Pass multi arch flags when linking qmake
  * QCocoaFileDialogHelper: Always enable symlinks and aliases to directories
  * Android: terminate argv passed to main() with nullptr
  * Update bundled libjpeg-turbo to version 2.1.3
  * ANGLE: Load the DirectX libraries from the system path directly
  * SQLite: Update SQLite to v3.37.2
  * Fix compiler warnings about unused parameters
  * Fix getsockopt option_value initial initialization
  * Http2: Fix redirect-handling
  * Android A11Y: Fix value rounding
  * Android A11Y: Announce value together with element name when focused
  * Android A11Y: handle valueChanged events
  * tst_QSystemSemaphore: give proper path to test-helper
  * QNX: Silence compiler warning by initializing variable
  * Update LICENSE.QT-LICENSE-AGREEMENT
  * winrt appxmanifest: Properly replace VCLibs version for newer MSVC versions
  * QAbstractSocket: Don't pretend pause and resume is a stack
  * Gui: test also depends for clipboard feature
  * QDesktopServices: deprecate destroying URL handlers w/o explicit unsetUrlHandler()
  * macOS: Respect QMAKE_APPLE_DEVICE_ARCHS when building qmake
  * HTTP: Make redirect response parsing more generic
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 20.04
  * Android A11Y: populate child elements when constructing node info
  * Fix issue where readyRead() could happen after disconnected()
  * QStringView: add missing constexpr so we can use is_constant_evaluated
  * Use Android's View.generateViewId() for generating ids for views/surfaces
  * Remove documentation of non-existing QAccessible state
  * Doc: Fix snippet to match actual QFileInfo behavior
  * Android: Re-focus focused accessibility node after orientation change
  * Android A11Y: execute C++ code on main Qt thread
  * Android: extract parentId for hidden object in advance
  * xcb: Show valuator atom names properly in categorized logging
  * Android: replace stacktrace with debug message in search for setService
  * Better document attaching a QFutureWatcher to a started QFuture
  * doc: Update GenericDataLocation location on iOS
  * BLACKLIST test_Gestures tests for RHEL-8.4
  * QPlainTestLogger: do not print "failure location" if there's no failure
  * QAbstractItemView: do not access invalid model indices (3/N)
  * Win32: always allow the event loop to be woken up by posted events
  * rhi: d3d11: Use __uuidof where we can
  * Don't QEXPECT_FAIL tst_QLineEdit::testQuickSelectionWithMouse on macOS ARM
  * Network: Emit authenticationRequired when using Ntlm
  * testlib: Disable window restoration on macOS in a non-persistent way
  * QAbstractItemView: do not access invalid model indices (2/N)
  * QAbstractItemView: do not access invalid model indices (1/N)
  * QAbstractItemView: code tidies
  * Update float16 part of TestLib selftest
  * QGuiApplication: constant-initialize lastCursorPosition
  * Blacklist tst_QFileSystemWatcher::signalsEmittedAfterFileMoved on all Windows versions
  * [Android]: Handle the screen name, modes and refreshRate properly
  * QVersionNumber: remove the "pure" attribute from commonPrefix()
  * QEvent: initialize the static userEventTypeRegistry constexprly
  * Let QXcbGlxWindow::createVisual fallback to QXcbWindow::createVisual
  * Android A11Y: fix content update notification when object is hidden
  * Android: explicitly remove accessibility focus when element is hidden
  * BLACKLIST tst_qfont for Red Hat 8.4 and Ubuntu 20.04
  * QtCore: includemocs
  * Fix memory leak in QtConcurrent::run when called with a NULL QThreadPool
  * INTEGRITY: Prevent deletion of virtual functions
  * QMake: replace a Q_ASSERT() with a Q_UNREACHABLE()
  * QTransform benchmark: measure what was promised
  * QStaticByteArrayMatcher: add a useful comment
  * QMacStyle: use the 'momentary push in' type for push buttons
  * qopengl.h: Move C header #include(s) out of the QT_NAMESPACE
  * Enable all supported 1.0 device features in QVulkanWindow
  * Fix queue passed to vkQueuePresent
  * QFusionStyle: don't draw an invalid outline for up/down buttons
  * Doc: Make QListIterator snippets more robust
  * QVersionNumber: don't detach() in rvalue QList/QVector ctor
  * QNetworkRequest: Document how Qt handles 301 and 302 status codes
  * Convert date-time to UTC before claiming it's in GMT
  * Remove execute permission from XML files
  * Add test case for style sheet selectors for enum properties
  * FreeType: allow falling back to synthesized bold if desired
  * Fix an assertion failure in massageAdjustedDateTime()
  * Relax tst_qvulkan::vulkanVersionRequest to make it compatible with 1.1
  * Doc: Replace "C:Documents and Settings" paths
  * QOrderedMutexLocker: fix compilation with C++11
  * QHttpNetworkConnection: Always set proxy settings to all channels
  * Add a markdown writer test for a checklist item ending with `code`
  * Use QTextCharFormat::fontFixedPitch to remember Markdown backtick spans
  * QWizardLayoutInfo: make == and != operators const
  * Revert "Android: Fix screen flicker issues"
  * macOS: Handle momentum scroll NSEventPhaseBegan when scroll had ended
  * SQLite: Update SQLite to v3.37.0
  * Update copyright year to 2022
  * QTzTimeZonePrivate: use ctor delegation instead of init()
  * QTzTimeZonePrivate: fix permanently-detaching m_icu
  * tst_QGraphicsView: fix memleak
  * Doc: Update external links to Qt Creator Manual
  * macOS: assume an unidentified tablet device is a stylus
  * tst_QItemModel: fix memleaks
  * tst_qanimationgroup: fix memleaks
  * QAbstractAnimation: add missing forward-declaration
  * [doc] QCoreApplication::installTranslator() doesn't take ownership
  * tst_qtranslator: fix memleak
  * QTestData: fix streaming of u8 string literals in C++20 mode
  * QThread/Unix: extract duplicate code
  * QWindowPrivate: fix inconsistent inline on some methods
  * tst_QStringList: check that join(u'0') embeds NULs
  * macOS: Sanitize scroll deltas for NSEventPhaseCancelled
  * tst_qsharedmemory: skip readOnly() test under asan
  * QXmlStreamReader: update test distribution
  * QZipReader: update to unzip partly broken archives
  * Deliver context menu event with correct coordinates to widgets in popups
  * QTextHtmlParser: fix prefix lookahead and html comments
  * QtConcurrent::run crashes on program exit
  * tst_QPropertyAnimation: fix leaks occurring under normal operation
  * tst_QPropertyAnimation: fix wrong comment
  * QLogging: fix potential missing NUL-terminator when calling OutputDebugString
  * Fix qt_scrollRectInImage when scrolling outside of the image
- Commits dropped by the rebase:
  * Fix compile with Qt5: Use QString::mid instead of QString::sliced
  * Restore C++11 compatibility after e8b9f4c28d3ab5e960dc54f2dc0c4b749b0b50e0
  * QDateTime: Don't require c++17</changelog>
  <changelog author="fvogt@suse.com" date="1683633600">- Amend patch to fix mouse grabbing as well (bsc#1211024):
  * big-endian-scroll.patch</changelog>
  <changelog author="fvogt@suse.com" date="1684929600">- Update to version 5.15.9+kde154:
  * Hsts: match header names case insensitively (CVE-2023-32762,
    QTBUG-113392, bsc#1211797)
  * Fix specific overflow in qtextlayout (CVE-2023-32763,
    QTBUG-113337, bsc#1211798)
  * QDnsLookup/Unix: make sure we don't overflow the buffer
    (CVE-2023-33285, boo#1211642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1686657600">- Update to version 5.15.10+kde129, rebased upstream:
  * Ssl: Copy the on-demand cert loading bool from default config
  * Schannel: Reject certificate not signed by a configured CA certificate (boo#1211994, CVE-2023-34410)
  * qnetworkreplyfileimpl_p.h: fix header guard name
  * Revert "Draw the cursor considering the descent is 0"
  * Use pkgconfig in order to find libproxy configuration
  * Upgrade PCRE2 to 10.40
  * Android A11Y: handle LocationChanged event only for focused element
  * Port binary JSON to new special integer bitfields
  * INTEGRITY: enable C99 globally
  * QObject: mark two error reporting functions COLD
  * Endian: Provide special integer bitfield unions
  * Android: set useLegacyPackaging to true in build.gradle
  * QWidgetTextControl: port to new-style connects (faster)
  * Sync qxmlstream.g with qxmlstreamparser_p.h [1/2]: switched lines
  * tst_QNetworkReply try stabilize autoDeleteReplies tests
  * Remove duplicated include for &lt;limits&gt;
  * Fix recursion crash when calling setStyleSheet with `qproperty-styleSheet`
  * qwindowsxpstyle: Fix typos in documentation
  * Correct prefix reported for end element in QXmlStreamReader
  * Android A11Y: Add supported role infos to A11yNodeInfo
  * Fix handling of DateTime values in QSettings
  * Fix off-by-one for "typically" lowest value INT_MIN
  * xml: Fix typos in documentation
  * QWindowsWindow: Fix typo in documentation
  * includemocs (updated script)
  * widgets: Fix typos in documentation
  * cocoa: Fix typo in debug messages
  * Only scroll QMenu when there is a valid active action
  * QTimer: Add note in documentation
  * Fix QListView assert when the last row is moved in IconMode
  * QFileDialog: Fix adding default suffix when file path contains dot
  * QLineEdit: account for the placeholderText when computing lineRect
  * QFileDialog::saveFileContent crashes on accept
  * QCompleter: QCompleter unexpectedly changes QLineEdit text
  * Fix build error on iOS with the configure option -qtnamespace
  * Draw the cursor considering the descent is 0
  * Remove pure-virtual-signals.h include from tst_moc.cpp
  * plugins: image formats - fix odr violation
  * dbus: Fix typos
  * qwindowsdialoghelpers: Fix typo in documentation
  * QTableView: Document the customizations applied to QHeaderView
  * Unicodetools: compile
  * eglfs_x11: Fix running flag linkage
  * qcompilerdetection.h: add Q_CC_{GNU,MSVC,CLANG}_ONLY macros
  * Fix CMake warning about "missing closing ' quote"
  * Fix alignment of next/prev links in offline style
  * QtDBus: includemocs
  * Image Plugins: includemocs(-ish)
  * QtGui: includemocs
  * QXcbNativeInterface: remove unused field m_sysTraySelectionAtom
  * Windows QPA: Fix slowdown with large table/tree views with accessibility
  * Macstyle: fix the text color on the disabled button
  * QMacStyle: fix tool buttons (in checked mode)
  * QTeamCityLogger: fix .arg() placeholder injection
  * QAbstractTestLogger: disable copying
  * Fix errorMessageFromComError()
  * QtNetwork: includemocs
  * AppleUnifiedLogger: Remove manually managed os_log_t cache
  * examples: add WindowStaysOnBottomHint into preview text
  * QSharedPointer: Use matching new/delete
  * QIbusPlatformInputContextPlugin: includemocs
  * QGtk3ThemePlugin: includemocs
  * QTuioTouchPlugin: includemocs
  * QtWidgets: includemocs v2022
  * QMYSQLDriverPlugin: includemocs
  * QtDeviceDiscoverySupportPrivate: includemocs
  * QLinuxFbIntegrationPlugin: includemocs
  * QtPrintSupport: includemocs
  * QSQLiteDriverPlugin: includemocs
  * QtFbSupportPrivate: includemocs
  * QXdgDesktopPortalThemePlugin: includemocs
  * QtTest: includemocs
  * QComposePlatformInputContextPlugin: includemocs
  * QtSql: includemocs
  * QVncIntegrationPlugin: includemocs
  * Fix backingstore fractional DPR glitches for widgets in child windows
  * Include &lt;limits&gt; where std::numeric_limits is used
  * QtInputSupportPrivate: includemocs
  * Document the default value of QSFPM::sortOrder()
  * Better document how to enable sorting in QSPFM
  * Correct documentation of INI format's loss of type information
  * Android: add missing properties in AndroidManifest.xml
  * Fix assertion failure when parsing a doubly-invalid date-time text
  * Windows QPA: Correct mistake when calculating minmaxinfo
  * Android: replace ndk.dir with android.ndkVersion in build.gradle
  * Android: remove the old copy of gradle.properties after reading it
  * CMake Android Support: Fix signing of APKs
  * Android: fix A11Y object description
  * macOS: Fix warning about comparing different types in QCocoaScreen::isOnline
  * Fix qmake build on FreeBSD
  * Update documentation of enum Qt::DockWidgetArea
  * xcb: recreate xcb window under some conditions
  * objc_namespace: Add support for universal binaries
  * objc_namespace: Fix misspelled argument for silencing output
  * objc_namespace: Update parsing logic to account for otool changes
  * Blacklist passwordAuth for Ubuntu 20.04
  * Android: wrap QAndroidInputContext's m_focusObject in a QPointer
  * Fix compilation with GCC 12 (and on Fedora 35 and newer)
  * Chip example: fix an accidental bool-&gt;int conversion when using PMF connections
  * qmake: Add support for C++23
  * Android: use BCP 47 tag to create a correct Locale for QTimeZone::displayName()
  * QDateTime: fix adjusted datetime handling
  * Fix crash in tst_qmltc_examples on Android
  * macOS: Remove dead code for focus ring handling in Mac style
  * Detach for colortransforms of indexed formats
  * tst_QTcpSocket::connectToHostError - handle possible timeouts
  * CoreText: Avoid populating font family aliases if family was populated
  * Graphicsview: Avoid background clearing glitches under fractional DPR
  * Windows QPA: Avoid slowdown with UI Automation name change notification
  * Windows QPA: Avoid sending accessibility notifications before activation
  * Windows: Fix potential crash when retrieving default printer
  * Make Ubuntu with its non-standard security level happy
  * Android: Blacklist failing tests on tst_QGraphicsProxyWidget
  * Update LA 4.4.1
  * iOS A11Y: Set more accessibilityTraits
  * QNX: Fix compiler warning by when FEATURE_clipboard is not enabled
  * Document that native file dialogs might not show a title
  * Doc: Remove mentionings of overflows from QElapsedTimer
  * QTextMarkdownImporter: don't apply text char format to list item block
- Commits dropped by the rebase:
  * QBuffer: add missing &lt;limits&gt; include
  * Fix developer build</changelog>
  <changelog author="gmbr3@opensuse.org" date="1687953600">- Change %_libqt5_libexecdir to %_libexecdir/qt5 (bsc#1174075)</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch icu-devel requires to pkgconfig to allow switching libicu
  versions</changelog>
  <changelog author="fvogt@suse.com" date="1695902401">- Update to version 5.15.10+kde159 (bsc#1214327, CVE-2023-37369):
  * Fix CVE-2023-43114
  * QMimeDatabase: fix detection of pattern conflict in different prefixes
  * Fix highdpi conversion of QTabletEvent coordinates on xcb
  * widget: set WA_X11NetWmWindowType* after xcb window was created
  * Fix crash when setting override cursor on multiple clients
  * QAccessibleWidget: Remove pointless ZWSP in warning message
  * Android A11Y: Fix deadlock in QtAndroidAccessibility::runInObjectContext()
  * Correctly parse non BMP char refs in the sax parser
  * Clear the _X version of alongside the enum deprecator
  * Fix UB (signed char passed to &lt;cctype&gt; function)
  * Qt3DRender: includemocs
  * Fix capitalization error in auto-generated qdbusmacros.h include
  * QColorDialog: Ignore mouse move events when no mouse button is pressed
  * QHostInfo: fix remaining slotObj leaks
  * QXmlStreamReader: Raise error on unexpected tokens (CVE-2023-38197,
    QTBUG-92113, QTBUG-95188, bsc#1213326)
  * QTextLayout: Reconsider cursor drawing on TextObject
  * Ensure consistent cursor width under fractional scaling
  * Fix QTextEdit cursor rectangle vertical positioning
  * Return 0 in QWindow::winId in case of failed platform window creation
  * Doc: note QWindow::winId() will cause platform window creation
  * QSslDiffieHellmanParameters: fix mem-leak
  * QHostInfo: fix leaking slot object
  * Make sure we don't count down past 0 QT_FATAL_CRITICALS
  * QLogging: DRY isFatal(QtMsgType)
  * tst_QXmlStream: remove unneeded _ba UDLs
  * Fix typo in QXmlStreamReader error message
  * QXmlStreamReader: make fastScanName() indicate parsing status to callers
  * QXmlStreamReader: change fastScanName() to take a Value*
  * Fix Croatia's currency
  * SSL: upgrade the default DH parameters</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1696593600">- Update to version 5.15.11+kde134, rebased upstream:
  * Revert "Windows QPA: Add support to UiaRaiseNotificationEvent()"
  * FileChooser portal: Make sure filter.name is not empty
  * QPersistentModelIndex: fix UB (op&lt; on unrelated pointers)
  * Avoid crash when keysymToQtKey(keysym, Qt::ControlModifier) is called
  * a11y atspi: translate coords for GetOffsetAtPoint the right way
  * a11y atspi: Take dialog into account as top-level window
  * a11y atspi: Fix incorrect use of x instead of y position
  * macOS: Handle asynchronous deminiaturizing of windows
  * QTranslator: generalize a UNIX-only path
  * iOS, input panel: be more careful before enabling QIOSKeyboardListener
  * Android: Fix flickering on window resize and show keyboard
  * Android A11Y: Check for active surface before calling into native code
  * xcb: Delete touch points without target windows
  * Blacklist 1 tests in tst_QDBusConnection on ubuntu-20.04
  * Fix CMake builds without ANDROID_SDK
  * Blacklist 2 tests in tst_Http2 on ubuntu-20.04
  * Blacklist 1 tests in tst_QSqlQuery on macos
  * Defer creating the special shaders in the texture blitter
  * tst_QSslSocket::serverCipherPreferencies - fix for OpenSSL v3
  * QTemporaryFile: document rename() differences from QFile
  * Doc: 3rd party: Fix reference to FreeType LICENSE.txt
  * Update bundled libjpeg-turbo to version 2.1.4
  * tst_QSsSocket: fix verifyClientCertificate with OpenSSL 3
  * tst_QSslSocket: regenerate certificate used for setLocalCertificateChain
  * tst_QSslSocket::protocolServerSide - make it work with OpenSSL v3
  * tst_QSslSocket::oldErrorsOnSocketReuse - make it work with OpenSSL v3
  * Update zconf.h prefixes to match zlib v1.2.12 update
  * xcb: fix D&amp;D in same xembed client
  * xcb: use global coordinates for position of D&amp;D for xembed client
  * Doc: Update QMetaType::metaObject() descriptions
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 22.04
  * BLACKLIST tst_qfont for Ubuntu 22.04
  * BLACKLIST tst_QMenuBar::check_menuPosition for Ubuntu 22.04
  * tst_QDtls::verifyClientCertficiate - update certs for OpenSSL v3
  * QSslCertificate::toText(): add a file to compare against
  * Fix the spelling of the word "combination"
  * tst_QSslCertificate::pkcs12 - skip the test if OpenSSL version &gt;= 3
  * Android A11Y: Fix TalkBack scrolling behavior
  * Android A11Y: Notify android about scroll events
  * QCocoaDrag: don't add pasteboard items with non-absolute URLs
  * QDirPrivate: pass input QList by cref
  * tst_qbytearray: remove qCompress_data for QT_NO_COMPRESS
  * QDeviceDiscoveryUDev: use NSDMI
  * QAuthenticator: Fix crash when using NTLM / Negotiate
  * Provide a native interface instance in minimal platform plugin
  * Android: document the supported clipboard mimetypes
  * Windows: Account for not finding child windows when calling ChildWindowFromPointEx
  * iOS: Send touch events asynchronously to avoid deadlocking UIKit event loop
  * Disable bitcode for iOS
  * macOS: Ignore deprecation for ReleaseIconRef
  * BLACKLIST tst_QApplication::sendEventsOnProcessEvents for Ubuntu 22.04
  * Convert Latin1 to UTF-16 before passing to ICU API
  * Doc: Remove repetition of word in text
  * eglfs: Fix screen cloning when atomic is enabled
  * Fix printing of dpr&gt;1 images on Windows
  * QHttp: Fix handling of redirect loaded from cache
  * Doc: Fix return type of QLEInteger/QBEInteger post-in/decrement ops
  * qmake: Fix installation of separate debug info for plugins
  * iOS: ensure we close inputpanel after clearing focusobject
  * Convert Latin1 to UTF-16 before passing to ICU API
  * qputenv: defend against non-NUL-terminated QByteArray values
  * QFontSubset: remove unused glyphName() overload
  * Statically assert that the __mips_dsp code is only active on 32-bit
  * QGtk3Theme: Ensure gtk uses the same windowing system as Qt
  * tst_QFocusFrame: fix -Wparantheses
  * Sync Vulkan device features between QVulkanWindow and QRhi
  * SQLite: Update SQLite to v3.39.2
  * Update freetype to 2.12.1
  * corelib: Fix typos in documentation
  * QAtomicInteger docs: mention bool and char8_t as 8-bit types
  * qgraphicsitem_cast: replace 0 with nullptr
  * Doc: Hide weak overload template magic from documentation
  * Revert "QDateTime: fix adjusted datetime handling"
  * Fix select handles disappears issues
  * tst_QSslKey: prepare for the migration to OpenSSL v3
  * tst_qnetworkreply: replace server.pem/key pair
  * Disable unit testing setting up QTcpServer on special Apple interfaces
  * qmake/msbuild: Turn off "use full paths in diagnostics" by default
  * qmake/msbuild: Support all /DEBUG:xxx linker options
  * qmake/msbuild: Support all /LTCG:xxx options
  * Android A11Y: Add content change type to content change event
  * Enabler for fractional scaling of text in Qt Quick
  * macOS: Override logical DPI to 72
  * Add QDom internalSubset implementation
  * Fix tst_AndroidAssets, broken by recent changes on assets load speed
  * Android: Improve loading speed of individual assets
  * Darwin: Replace deprecated symbol kIOMasterPortDefault with equivalent
  * macOS: Remove code for handling logical DPI changes
  * Fix an incorrect invocation of llvm-readobj
  * macOS: Ignore deprecation for kOnSystemDisk icon domain
  * Copy only files that belongs to QML module
  * Android: fix wrong position of cursor handle and editpopup menu in split screen
  * Doc: Document QML_IMPORTS_PATH and QMLPATHS
  * Add the missing RCC_DIR to '.qrc' paths when generating deployment settings
  * Android: Fix the offset of the EditPopupMenu
  * xcb: update xkb_state mask as much as possible
  * QDom: Stop treating non-BMP characters as invalid
  * Android 13: Fix warnings on starting an application
  * qxkbcommon: Map Super/Hyper to Meta early enough to have an effect
  * macOS: Ignore update requests for offline displays
  * macOS: Avoid recursively updating screens when window moves screen
  * qmake/MinGW: Install separate debug info of DLLs next to the DLL
  * QMainWindow: fix restoreState() for toolbars
  * Make two QDT benchmarks data-driven and add more rows
  * Fix doc and example of QLoggingCategory::installCategory()
  * qmake: Document Xcode behavior when bundling translation files
  * Android: Fix missing import
  * QByteArray: more GCC 12 -Werror=array-bound whack-a-mole
  * CMake: Fix android sdk version propagation
  * Restore C++20-deprecated mixed-enum bitwise operators
  * Android: Fix ANR when QtService and QtActivity load in same process
  * Fix restart QtActivity
  * QArrayData::data(): do type-punning via quintptr, not char *
  * QIOSTextResponder: recreate responder upon reset
  * QSslSocket: make it work with OpenSSL v3
  * QFileSystemModelPrivate: de-inline ctor and dtor
  * Network: update Public Suffix List
  * macOS: Ensure proper quoting when calling otool in objc_namespace script
  * QKeySequence: Fix the one-off error in the mac glyph array size
- Commits dropped by the rebase:
  * Apply CVE-2022-27404-27405-27406-qtbase-5.15.diff
  * QArrayData: fix UB via reinterpret_cast (crash with FORTIFY_SOURCE=3)
  * Adapt for q_EVP_PKEY_base_id → q_EVP_PKEY_get_base_id rename in OpenSSL 3
  * Don't use a deprecated function if built/linked with OpenSSL v3</changelog>
  <changelog author="christophe@krop.fr" date="1696593601">- Enable the experimental native painting feature to improve
  remote desktop performances (boo#1214915)
  exporting QT_XCB_NATIVE_PAINTING is required to use the feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1697716800">- Update to version 5.15.11+kde138:
  * QLibraryPrivate: Actually merge load hints
  * QPluginLoader: report the right load hints
  * xkb: fix build with libxkbcommon 1.6.0 and later
  * a11y atspi: Map ButtonMenu role to AT-SPI equivalent</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1703851200">- Update to version 5.15.12+kde144, rebased upstream:
  * QMimeDatabase: handle buggy type definitions with circular inheritance
  * xcb: only set base size when it's valid
  * QPixmapCache: fix leaking of QStrings and Keys on clear()
  * OpenFile portal: do not use O_PATH fds
  * QSystemTrayIcon: properly disconnect old menu in setContextMenu()
  * Guard QTabBar against nested event processing during moving tabs
  * QDial: don't crash when min==max and setting a value != min &amp; max
  * QStandardItemModel: don't leak in mimeData()
  * SQL/MySQL: properly initialize variable
  * QWidgetTextControl: ignore invalid input method event
  * Update the LGPL license header
  * SQL/MySQL: fix handling of json column
  * Remove QMAKE_RANLIB and QMAKE_LINK_SHLIB from android/default_pre.prf
  * macOS: Fix less common writing systems on Catalina and later
  * Blacklist 1 tests in tst_QFtp on ubuntu-20.04
  * Update bundled libpng to version 1.6.39
  * Android: Fix signing of APKs that are generated when an AAB is also built
  * Update bundled zlib to version 1.2.13
  * doc: update the limitation of QSystemTrayIcon on X11
  * Blacklist 1 tests in tst_QTimer on ubuntu-20.04
  * Add benchmarks for QLocale number parsing
  * Add benchmarks for QString number parsing
  * Android: Fix incorrect fullscreen dimensions
  * Gtk3Theme: set XCURSOR_SIZE and XCURSOR_THEME for wayland sessions
  * xcb: Flush Display when processing xcb events
  * xcb: Add xlib wrapper for XFlush()
  * QHostAddress: Fix incorrect comparison against 'Any'
  * QSsl[OpenSSL/Android]: Fix hardcoded 1_1 suffix
  * BLACKLIST: tst_QApplication::sendEventsOnProcessEvents for RHEL 9.0
  * QMacStyle: do not set white color for grayed out button
  * Work round macOS's omission of en_DE from its own uiLanguages()
  * Suppress a deprecation warning in tst_QDateTime::toString_enumformat()
  * QJsonValue: fix incorrect to{Array,Object} when the value is empty
  * QGtk3Dialog: remove the #include for empty moc
  * Remove unneeded QWindow from QGtk3Dialog
  * tst_QSslSocket: Delete sslOptions
  * tst_QSslServer: Make the in-process server use TLS1.2
  * Android: fix Gradle warning about using enableUncompressedNativeLibs
  * Mention  limitation of QDir::drives() on Windows
  * QFileSystemEngine/Win: fix incorrect buffer size in currentPath()
  * Android: properly retrieve mime type of uri to for openUrl()
  * Android: Fix clipboard issue with urls
  * Android: Add a way to disable accessibility via an environment var
  * Update bundled libpng to version 1.6.38
  * QIOSMessageDialog::exec - work around 'windowsless' exec
  * QIosScreen: retain the right window
  * tst_Q{BitArray,ContiguousCache}: check not only count(), but size(), too
  * QIosTextResponder: stop using deprecated constants and type
  * qcompilerdetection.h: detect Coverity
  * Android: Fix Display.getRealMetrics deprecation
  * Fix broken Text rendering when noantialiased NativeRendering is used
  * forkfd: fix Clang 15 ATOMIC_VAR_INIT deprecation warning
  * eglfs: Add env.var. to disable the dedicated drmHandleEvent thread
  * doc: Don't put strings into QVector&lt;double&gt;
  * Remove focusProxyAndInputMethods from tst_QWidget
  * Bump version to 5.15.12
  * Update documentation of qWaitForWindowActive / qWaitForWindowExposed
  * QtHttp: Lower the severity of some log output
  * StyleSheetStyle: Fix color of placeholder texts in text edits
  * Android: Fix flickering on split screen mode
  * Update url to IAccessible2 Specification</changelog>
  <changelog author="alarrosa@suse.com" date="1704283200">- Update to version 5.15.12+kde147:
  * Http2: fix potential overflow in assemble_hpack_block()
    (bsc#1218413, CVE-2023-51714)
  * HPack: fix incorrect integer overflow check
  * HPack: fix a Yoda Condition</changelog>
  <changelog author="fvogt@suse.com" date="1708084800">- Update to version 5.15.12+kde151:
  * Improve KTX file reading memory safety (CVE-2024-25580, boo#1219996)
  * Revert "xcb: only set base size when it's valid"
  * Fix potential leak of QPropertyAnimation in QLineEditIconButton
  * QBitArray: correct inline keyword</changelog>
  <changelog author="alarrosa@suse.com" date="1720785600">- Add patch from upstream to fix a regression in the ODBC driver
  (bsc#1227513, QTBUG-112375):
  * 0001-QSQL-ODBC-fix-regression-trailing-NUL.patch
  * 0002-SQL-ODBC-Pass-correct-length-to-SQLColAttribute.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1722945600">- Add rebased upstream patch to delay any HTTP2 communication until
  encrypted() can be responded to (bsc#1227426, CVE-2024-39936):
  * 0001-HTTP2-Delay-any-communication-until-encrypted-can-be.patch
- Add upstream patch to fix a NULL pointer dereference via the
  function QXcbConnection::initializeAllAtoms() when there is
  anomalous behavior from the X server (bsc#1222120,
  CVE-2023-45935):
  * 0001-xcb-guard-a-pointer-before-usage.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756728000">- Add patch from upstream to fix a precondition violation in call
  to QByteArrayView::at() which can cause crashes (bsc#1243958,
  CVE-2025-5455):
  * 0001-qDecodeDataUrl-fix-precondition-violation-in-call-to.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756814400">- Add patch from upstream to initialize a member variable that was
  uninitialized under some circumstances:
  * 0001-QObjectPrivateSignal-initialize-all-members.patch
- Add patch from upstream to fix a crash when parsing a particular
  glyph in a particular font (QTBUG-124310):
  * 0001-Avoid-crash-in-font-distancefield-computation.patch
  * 0002-Fix-crash-in-font-distancefield-computation.patch
- Add patch from upstream to fix avoid repeatedly registering
  xsettings callbacks when switching cursor themes:
  * 0001-xcb-Avoid-repeatedly-registering-xsettings-callbacks-When.patch
- Add patch from upstream to check validity of RandR output info
  before using it (QTBUG-128906):
  * 0001-xcb-check-validity-of-RandR-output-info-before-using-it.patch
- Add patch from upstream to fix reparenting a window so it takes
  effect even if there are no other state changes to the window:
  * 0001-xcb-Sync-XCB-connection-after-reparenting-window.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756900800">- Add patch from upstream to fix a low performance when processing
  XML data in encodeText (bsc#1239896, CVE-2025-30348):
  * 0001-XML_QDom-speedup-encodeText.patch</changelog>
</package>
<package pkgid="d508b7637ca7a732baf3229fa0e3e96dbdc8730f5b2faa4ebf001e9ccc71dc4b" name="libQt5PrintSupport-devel" arch="x86_64">
  <version epoch="0" ver="5.15.12+kde151" rel="150600.3.9.1"/>
  <changelog author="fvogt@suse.com" date="1678968000">- Update to version 5.15.8+kde183:
  * Add nullptr guard in QStyleSheetStyle::drawPrimitive(PE_PanelLineEdit)
  * QAbstractItemView: don't access invalid indexes on copy-key
  * Apply CVE-2023-24607-qtbase-5.15.diff (CVE-2023-24607,
    bsc#1209616)
  * QXcbConnection::getTimestamp: do not return stale timestamp
  * QToolButton: Elide text when constraints prevent from showing whole text
  * correctly set up ref counting in QThreadPool::tryStart(std::function)
  * Do not set Qt::ToolTip flag for QShapedPixmapWindow
  * Fix deletion order also for QImageReader/Writer::setDevice()
  * Fix deletion order in QImageReader/Writer destructors
  * QNetworkReply: Fix typos in the documentation
  * Doc: Fix typo in the online documentation template
  * Doc: Link to page documenting Qt trademarks in the copyright footer
  * [doc] Fix typo in QBuffer::setBuffer() description
  * qwindowsdrag: Fix typo in documentation
  * openglblacklists: Fix typo in description
  * qxcbscreen: Fix typo in documentation
  * Fix typos in SQL driver documentation
  * qxcbwindow.cpp: Fix sign-compare and another warnings
  * QToolButton: reimplement the fix for QTBUG-95255
  * QSysInfo::prettyProductName(): Add macOS Ventura product name
  * QSysInfo::prettyProductName(): add missing macOS product names
  * xcb: correctly disconnect xsettings callbacks
  * ibus: add SetCursorLocationRelative in InputContext.xml</changelog>
  <changelog author="fvogt@suse.com" date="1680523200">- Update to version 5.15.8+kde185:
  * QFSFileEngine: fix overflow bug when using lseek64
  * Add QImage null check when QOpenGLTexture converts
- Add patch to fix return key handling in QGroupBox on GNOME (bsc#1209364):
  * 0001-Revert-QGnomeTheme-Allow-Space-Return-Enter-and-Sele.patch
- Add patch to fix XInput2 events in big-endian X11 clients (bsc#1204883, QTBUG-105157):
  * big-endian-scroll.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1682078400">- Update to version 5.15.9+kde151, rebased upstream:
  * QCborValue: fix incorrect to{Array,Map} when the value is empty
  * QMargins: fix a missing "full stop" in the docs
  * QLibrary: restore translated string
  * QLibrary: fix possible arg() format clobbering
  * iOS: Use python3 for enumerating test target devices
  * Android: Treat ACTION_CANCEL as TouchCancelEvent
  * Doc: Fix broken formatting
  * QFileSystemEngine: fix potential formatting error
  * QString::asprintf: check that passing field widths as arguments works
  * Backport recent QFlags tests
  * network: Fix typos in documentation
  * Fix accuracy with screen composition
  * Doc: Update documentation for QElapsedTimer's in Windows
  * Document that QStandardPath::findExecutable works with absolute paths
  * macOS: Use native resize cursors for diagonal resize
  * Fix clipped glyphs in text rendering of QGraphicsTextItem
  * Change comparison data type to fix int overflow
  * Add missing Q_WEAK_OVERLOAD definition
  * Update QFileInfo docs to mention macOS aliases
  * Distinguish macOS aliases from normal symbolic links
  * Windows QPA: Fix frameless maximize on secondary screens
  * Rewrite tst_qdataurl as a data-driven test
  * Fix compilation for wasm
  * QIOSFileDialog/QIOSDocumentPickerController - handle dismissed view controller
  * Fix QDockWidget's dock area permissions after hovering
  * Fix C++20 ambiguous relational operators between QJsonValue{,Ref}
  * Android: make sure that orientationChange is reported after resize
  * Android: set all QScreen's geometry-related parameters together
  * Blacklist: test cases blacklisted in tst_QDBusConnection:
  * wasm:  fix issue with passing username/password to network request
  * macOS: Pass multi arch flags when linking qmake
  * QCocoaFileDialogHelper: Always enable symlinks and aliases to directories
  * Android: terminate argv passed to main() with nullptr
  * Update bundled libjpeg-turbo to version 2.1.3
  * ANGLE: Load the DirectX libraries from the system path directly
  * SQLite: Update SQLite to v3.37.2
  * Fix compiler warnings about unused parameters
  * Fix getsockopt option_value initial initialization
  * Http2: Fix redirect-handling
  * Android A11Y: Fix value rounding
  * Android A11Y: Announce value together with element name when focused
  * Android A11Y: handle valueChanged events
  * tst_QSystemSemaphore: give proper path to test-helper
  * QNX: Silence compiler warning by initializing variable
  * Update LICENSE.QT-LICENSE-AGREEMENT
  * winrt appxmanifest: Properly replace VCLibs version for newer MSVC versions
  * QAbstractSocket: Don't pretend pause and resume is a stack
  * Gui: test also depends for clipboard feature
  * QDesktopServices: deprecate destroying URL handlers w/o explicit unsetUrlHandler()
  * macOS: Respect QMAKE_APPLE_DEVICE_ARCHS when building qmake
  * HTTP: Make redirect response parsing more generic
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 20.04
  * Android A11Y: populate child elements when constructing node info
  * Fix issue where readyRead() could happen after disconnected()
  * QStringView: add missing constexpr so we can use is_constant_evaluated
  * Use Android's View.generateViewId() for generating ids for views/surfaces
  * Remove documentation of non-existing QAccessible state
  * Doc: Fix snippet to match actual QFileInfo behavior
  * Android: Re-focus focused accessibility node after orientation change
  * Android A11Y: execute C++ code on main Qt thread
  * Android: extract parentId for hidden object in advance
  * xcb: Show valuator atom names properly in categorized logging
  * Android: replace stacktrace with debug message in search for setService
  * Better document attaching a QFutureWatcher to a started QFuture
  * doc: Update GenericDataLocation location on iOS
  * BLACKLIST test_Gestures tests for RHEL-8.4
  * QPlainTestLogger: do not print "failure location" if there's no failure
  * QAbstractItemView: do not access invalid model indices (3/N)
  * Win32: always allow the event loop to be woken up by posted events
  * rhi: d3d11: Use __uuidof where we can
  * Don't QEXPECT_FAIL tst_QLineEdit::testQuickSelectionWithMouse on macOS ARM
  * Network: Emit authenticationRequired when using Ntlm
  * testlib: Disable window restoration on macOS in a non-persistent way
  * QAbstractItemView: do not access invalid model indices (2/N)
  * QAbstractItemView: do not access invalid model indices (1/N)
  * QAbstractItemView: code tidies
  * Update float16 part of TestLib selftest
  * QGuiApplication: constant-initialize lastCursorPosition
  * Blacklist tst_QFileSystemWatcher::signalsEmittedAfterFileMoved on all Windows versions
  * [Android]: Handle the screen name, modes and refreshRate properly
  * QVersionNumber: remove the "pure" attribute from commonPrefix()
  * QEvent: initialize the static userEventTypeRegistry constexprly
  * Let QXcbGlxWindow::createVisual fallback to QXcbWindow::createVisual
  * Android A11Y: fix content update notification when object is hidden
  * Android: explicitly remove accessibility focus when element is hidden
  * BLACKLIST tst_qfont for Red Hat 8.4 and Ubuntu 20.04
  * QtCore: includemocs
  * Fix memory leak in QtConcurrent::run when called with a NULL QThreadPool
  * INTEGRITY: Prevent deletion of virtual functions
  * QMake: replace a Q_ASSERT() with a Q_UNREACHABLE()
  * QTransform benchmark: measure what was promised
  * QStaticByteArrayMatcher: add a useful comment
  * QMacStyle: use the 'momentary push in' type for push buttons
  * qopengl.h: Move C header #include(s) out of the QT_NAMESPACE
  * Enable all supported 1.0 device features in QVulkanWindow
  * Fix queue passed to vkQueuePresent
  * QFusionStyle: don't draw an invalid outline for up/down buttons
  * Doc: Make QListIterator snippets more robust
  * QVersionNumber: don't detach() in rvalue QList/QVector ctor
  * QNetworkRequest: Document how Qt handles 301 and 302 status codes
  * Convert date-time to UTC before claiming it's in GMT
  * Remove execute permission from XML files
  * Add test case for style sheet selectors for enum properties
  * FreeType: allow falling back to synthesized bold if desired
  * Fix an assertion failure in massageAdjustedDateTime()
  * Relax tst_qvulkan::vulkanVersionRequest to make it compatible with 1.1
  * Doc: Replace "C:Documents and Settings" paths
  * QOrderedMutexLocker: fix compilation with C++11
  * QHttpNetworkConnection: Always set proxy settings to all channels
  * Add a markdown writer test for a checklist item ending with `code`
  * Use QTextCharFormat::fontFixedPitch to remember Markdown backtick spans
  * QWizardLayoutInfo: make == and != operators const
  * Revert "Android: Fix screen flicker issues"
  * macOS: Handle momentum scroll NSEventPhaseBegan when scroll had ended
  * SQLite: Update SQLite to v3.37.0
  * Update copyright year to 2022
  * QTzTimeZonePrivate: use ctor delegation instead of init()
  * QTzTimeZonePrivate: fix permanently-detaching m_icu
  * tst_QGraphicsView: fix memleak
  * Doc: Update external links to Qt Creator Manual
  * macOS: assume an unidentified tablet device is a stylus
  * tst_QItemModel: fix memleaks
  * tst_qanimationgroup: fix memleaks
  * QAbstractAnimation: add missing forward-declaration
  * [doc] QCoreApplication::installTranslator() doesn't take ownership
  * tst_qtranslator: fix memleak
  * QTestData: fix streaming of u8 string literals in C++20 mode
  * QThread/Unix: extract duplicate code
  * QWindowPrivate: fix inconsistent inline on some methods
  * tst_QStringList: check that join(u'0') embeds NULs
  * macOS: Sanitize scroll deltas for NSEventPhaseCancelled
  * tst_qsharedmemory: skip readOnly() test under asan
  * QXmlStreamReader: update test distribution
  * QZipReader: update to unzip partly broken archives
  * Deliver context menu event with correct coordinates to widgets in popups
  * QTextHtmlParser: fix prefix lookahead and html comments
  * QtConcurrent::run crashes on program exit
  * tst_QPropertyAnimation: fix leaks occurring under normal operation
  * tst_QPropertyAnimation: fix wrong comment
  * QLogging: fix potential missing NUL-terminator when calling OutputDebugString
  * Fix qt_scrollRectInImage when scrolling outside of the image
- Commits dropped by the rebase:
  * Fix compile with Qt5: Use QString::mid instead of QString::sliced
  * Restore C++11 compatibility after e8b9f4c28d3ab5e960dc54f2dc0c4b749b0b50e0
  * QDateTime: Don't require c++17</changelog>
  <changelog author="fvogt@suse.com" date="1683633600">- Amend patch to fix mouse grabbing as well (bsc#1211024):
  * big-endian-scroll.patch</changelog>
  <changelog author="fvogt@suse.com" date="1684929600">- Update to version 5.15.9+kde154:
  * Hsts: match header names case insensitively (CVE-2023-32762,
    QTBUG-113392, bsc#1211797)
  * Fix specific overflow in qtextlayout (CVE-2023-32763,
    QTBUG-113337, bsc#1211798)
  * QDnsLookup/Unix: make sure we don't overflow the buffer
    (CVE-2023-33285, boo#1211642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1686657600">- Update to version 5.15.10+kde129, rebased upstream:
  * Ssl: Copy the on-demand cert loading bool from default config
  * Schannel: Reject certificate not signed by a configured CA certificate (boo#1211994, CVE-2023-34410)
  * qnetworkreplyfileimpl_p.h: fix header guard name
  * Revert "Draw the cursor considering the descent is 0"
  * Use pkgconfig in order to find libproxy configuration
  * Upgrade PCRE2 to 10.40
  * Android A11Y: handle LocationChanged event only for focused element
  * Port binary JSON to new special integer bitfields
  * INTEGRITY: enable C99 globally
  * QObject: mark two error reporting functions COLD
  * Endian: Provide special integer bitfield unions
  * Android: set useLegacyPackaging to true in build.gradle
  * QWidgetTextControl: port to new-style connects (faster)
  * Sync qxmlstream.g with qxmlstreamparser_p.h [1/2]: switched lines
  * tst_QNetworkReply try stabilize autoDeleteReplies tests
  * Remove duplicated include for &lt;limits&gt;
  * Fix recursion crash when calling setStyleSheet with `qproperty-styleSheet`
  * qwindowsxpstyle: Fix typos in documentation
  * Correct prefix reported for end element in QXmlStreamReader
  * Android A11Y: Add supported role infos to A11yNodeInfo
  * Fix handling of DateTime values in QSettings
  * Fix off-by-one for "typically" lowest value INT_MIN
  * xml: Fix typos in documentation
  * QWindowsWindow: Fix typo in documentation
  * includemocs (updated script)
  * widgets: Fix typos in documentation
  * cocoa: Fix typo in debug messages
  * Only scroll QMenu when there is a valid active action
  * QTimer: Add note in documentation
  * Fix QListView assert when the last row is moved in IconMode
  * QFileDialog: Fix adding default suffix when file path contains dot
  * QLineEdit: account for the placeholderText when computing lineRect
  * QFileDialog::saveFileContent crashes on accept
  * QCompleter: QCompleter unexpectedly changes QLineEdit text
  * Fix build error on iOS with the configure option -qtnamespace
  * Draw the cursor considering the descent is 0
  * Remove pure-virtual-signals.h include from tst_moc.cpp
  * plugins: image formats - fix odr violation
  * dbus: Fix typos
  * qwindowsdialoghelpers: Fix typo in documentation
  * QTableView: Document the customizations applied to QHeaderView
  * Unicodetools: compile
  * eglfs_x11: Fix running flag linkage
  * qcompilerdetection.h: add Q_CC_{GNU,MSVC,CLANG}_ONLY macros
  * Fix CMake warning about "missing closing ' quote"
  * Fix alignment of next/prev links in offline style
  * QtDBus: includemocs
  * Image Plugins: includemocs(-ish)
  * QtGui: includemocs
  * QXcbNativeInterface: remove unused field m_sysTraySelectionAtom
  * Windows QPA: Fix slowdown with large table/tree views with accessibility
  * Macstyle: fix the text color on the disabled button
  * QMacStyle: fix tool buttons (in checked mode)
  * QTeamCityLogger: fix .arg() placeholder injection
  * QAbstractTestLogger: disable copying
  * Fix errorMessageFromComError()
  * QtNetwork: includemocs
  * AppleUnifiedLogger: Remove manually managed os_log_t cache
  * examples: add WindowStaysOnBottomHint into preview text
  * QSharedPointer: Use matching new/delete
  * QIbusPlatformInputContextPlugin: includemocs
  * QGtk3ThemePlugin: includemocs
  * QTuioTouchPlugin: includemocs
  * QtWidgets: includemocs v2022
  * QMYSQLDriverPlugin: includemocs
  * QtDeviceDiscoverySupportPrivate: includemocs
  * QLinuxFbIntegrationPlugin: includemocs
  * QtPrintSupport: includemocs
  * QSQLiteDriverPlugin: includemocs
  * QtFbSupportPrivate: includemocs
  * QXdgDesktopPortalThemePlugin: includemocs
  * QtTest: includemocs
  * QComposePlatformInputContextPlugin: includemocs
  * QtSql: includemocs
  * QVncIntegrationPlugin: includemocs
  * Fix backingstore fractional DPR glitches for widgets in child windows
  * Include &lt;limits&gt; where std::numeric_limits is used
  * QtInputSupportPrivate: includemocs
  * Document the default value of QSFPM::sortOrder()
  * Better document how to enable sorting in QSPFM
  * Correct documentation of INI format's loss of type information
  * Android: add missing properties in AndroidManifest.xml
  * Fix assertion failure when parsing a doubly-invalid date-time text
  * Windows QPA: Correct mistake when calculating minmaxinfo
  * Android: replace ndk.dir with android.ndkVersion in build.gradle
  * Android: remove the old copy of gradle.properties after reading it
  * CMake Android Support: Fix signing of APKs
  * Android: fix A11Y object description
  * macOS: Fix warning about comparing different types in QCocoaScreen::isOnline
  * Fix qmake build on FreeBSD
  * Update documentation of enum Qt::DockWidgetArea
  * xcb: recreate xcb window under some conditions
  * objc_namespace: Add support for universal binaries
  * objc_namespace: Fix misspelled argument for silencing output
  * objc_namespace: Update parsing logic to account for otool changes
  * Blacklist passwordAuth for Ubuntu 20.04
  * Android: wrap QAndroidInputContext's m_focusObject in a QPointer
  * Fix compilation with GCC 12 (and on Fedora 35 and newer)
  * Chip example: fix an accidental bool-&gt;int conversion when using PMF connections
  * qmake: Add support for C++23
  * Android: use BCP 47 tag to create a correct Locale for QTimeZone::displayName()
  * QDateTime: fix adjusted datetime handling
  * Fix crash in tst_qmltc_examples on Android
  * macOS: Remove dead code for focus ring handling in Mac style
  * Detach for colortransforms of indexed formats
  * tst_QTcpSocket::connectToHostError - handle possible timeouts
  * CoreText: Avoid populating font family aliases if family was populated
  * Graphicsview: Avoid background clearing glitches under fractional DPR
  * Windows QPA: Avoid slowdown with UI Automation name change notification
  * Windows QPA: Avoid sending accessibility notifications before activation
  * Windows: Fix potential crash when retrieving default printer
  * Make Ubuntu with its non-standard security level happy
  * Android: Blacklist failing tests on tst_QGraphicsProxyWidget
  * Update LA 4.4.1
  * iOS A11Y: Set more accessibilityTraits
  * QNX: Fix compiler warning by when FEATURE_clipboard is not enabled
  * Document that native file dialogs might not show a title
  * Doc: Remove mentionings of overflows from QElapsedTimer
  * QTextMarkdownImporter: don't apply text char format to list item block
- Commits dropped by the rebase:
  * QBuffer: add missing &lt;limits&gt; include
  * Fix developer build</changelog>
  <changelog author="gmbr3@opensuse.org" date="1687953600">- Change %_libqt5_libexecdir to %_libexecdir/qt5 (bsc#1174075)</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch icu-devel requires to pkgconfig to allow switching libicu
  versions</changelog>
  <changelog author="fvogt@suse.com" date="1695902401">- Update to version 5.15.10+kde159 (bsc#1214327, CVE-2023-37369):
  * Fix CVE-2023-43114
  * QMimeDatabase: fix detection of pattern conflict in different prefixes
  * Fix highdpi conversion of QTabletEvent coordinates on xcb
  * widget: set WA_X11NetWmWindowType* after xcb window was created
  * Fix crash when setting override cursor on multiple clients
  * QAccessibleWidget: Remove pointless ZWSP in warning message
  * Android A11Y: Fix deadlock in QtAndroidAccessibility::runInObjectContext()
  * Correctly parse non BMP char refs in the sax parser
  * Clear the _X version of alongside the enum deprecator
  * Fix UB (signed char passed to &lt;cctype&gt; function)
  * Qt3DRender: includemocs
  * Fix capitalization error in auto-generated qdbusmacros.h include
  * QColorDialog: Ignore mouse move events when no mouse button is pressed
  * QHostInfo: fix remaining slotObj leaks
  * QXmlStreamReader: Raise error on unexpected tokens (CVE-2023-38197,
    QTBUG-92113, QTBUG-95188, bsc#1213326)
  * QTextLayout: Reconsider cursor drawing on TextObject
  * Ensure consistent cursor width under fractional scaling
  * Fix QTextEdit cursor rectangle vertical positioning
  * Return 0 in QWindow::winId in case of failed platform window creation
  * Doc: note QWindow::winId() will cause platform window creation
  * QSslDiffieHellmanParameters: fix mem-leak
  * QHostInfo: fix leaking slot object
  * Make sure we don't count down past 0 QT_FATAL_CRITICALS
  * QLogging: DRY isFatal(QtMsgType)
  * tst_QXmlStream: remove unneeded _ba UDLs
  * Fix typo in QXmlStreamReader error message
  * QXmlStreamReader: make fastScanName() indicate parsing status to callers
  * QXmlStreamReader: change fastScanName() to take a Value*
  * Fix Croatia's currency
  * SSL: upgrade the default DH parameters</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1696593600">- Update to version 5.15.11+kde134, rebased upstream:
  * Revert "Windows QPA: Add support to UiaRaiseNotificationEvent()"
  * FileChooser portal: Make sure filter.name is not empty
  * QPersistentModelIndex: fix UB (op&lt; on unrelated pointers)
  * Avoid crash when keysymToQtKey(keysym, Qt::ControlModifier) is called
  * a11y atspi: translate coords for GetOffsetAtPoint the right way
  * a11y atspi: Take dialog into account as top-level window
  * a11y atspi: Fix incorrect use of x instead of y position
  * macOS: Handle asynchronous deminiaturizing of windows
  * QTranslator: generalize a UNIX-only path
  * iOS, input panel: be more careful before enabling QIOSKeyboardListener
  * Android: Fix flickering on window resize and show keyboard
  * Android A11Y: Check for active surface before calling into native code
  * xcb: Delete touch points without target windows
  * Blacklist 1 tests in tst_QDBusConnection on ubuntu-20.04
  * Fix CMake builds without ANDROID_SDK
  * Blacklist 2 tests in tst_Http2 on ubuntu-20.04
  * Blacklist 1 tests in tst_QSqlQuery on macos
  * Defer creating the special shaders in the texture blitter
  * tst_QSslSocket::serverCipherPreferencies - fix for OpenSSL v3
  * QTemporaryFile: document rename() differences from QFile
  * Doc: 3rd party: Fix reference to FreeType LICENSE.txt
  * Update bundled libjpeg-turbo to version 2.1.4
  * tst_QSsSocket: fix verifyClientCertificate with OpenSSL 3
  * tst_QSslSocket: regenerate certificate used for setLocalCertificateChain
  * tst_QSslSocket::protocolServerSide - make it work with OpenSSL v3
  * tst_QSslSocket::oldErrorsOnSocketReuse - make it work with OpenSSL v3
  * Update zconf.h prefixes to match zlib v1.2.12 update
  * xcb: fix D&amp;D in same xembed client
  * xcb: use global coordinates for position of D&amp;D for xembed client
  * Doc: Update QMetaType::metaObject() descriptions
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 22.04
  * BLACKLIST tst_qfont for Ubuntu 22.04
  * BLACKLIST tst_QMenuBar::check_menuPosition for Ubuntu 22.04
  * tst_QDtls::verifyClientCertficiate - update certs for OpenSSL v3
  * QSslCertificate::toText(): add a file to compare against
  * Fix the spelling of the word "combination"
  * tst_QSslCertificate::pkcs12 - skip the test if OpenSSL version &gt;= 3
  * Android A11Y: Fix TalkBack scrolling behavior
  * Android A11Y: Notify android about scroll events
  * QCocoaDrag: don't add pasteboard items with non-absolute URLs
  * QDirPrivate: pass input QList by cref
  * tst_qbytearray: remove qCompress_data for QT_NO_COMPRESS
  * QDeviceDiscoveryUDev: use NSDMI
  * QAuthenticator: Fix crash when using NTLM / Negotiate
  * Provide a native interface instance in minimal platform plugin
  * Android: document the supported clipboard mimetypes
  * Windows: Account for not finding child windows when calling ChildWindowFromPointEx
  * iOS: Send touch events asynchronously to avoid deadlocking UIKit event loop
  * Disable bitcode for iOS
  * macOS: Ignore deprecation for ReleaseIconRef
  * BLACKLIST tst_QApplication::sendEventsOnProcessEvents for Ubuntu 22.04
  * Convert Latin1 to UTF-16 before passing to ICU API
  * Doc: Remove repetition of word in text
  * eglfs: Fix screen cloning when atomic is enabled
  * Fix printing of dpr&gt;1 images on Windows
  * QHttp: Fix handling of redirect loaded from cache
  * Doc: Fix return type of QLEInteger/QBEInteger post-in/decrement ops
  * qmake: Fix installation of separate debug info for plugins
  * iOS: ensure we close inputpanel after clearing focusobject
  * Convert Latin1 to UTF-16 before passing to ICU API
  * qputenv: defend against non-NUL-terminated QByteArray values
  * QFontSubset: remove unused glyphName() overload
  * Statically assert that the __mips_dsp code is only active on 32-bit
  * QGtk3Theme: Ensure gtk uses the same windowing system as Qt
  * tst_QFocusFrame: fix -Wparantheses
  * Sync Vulkan device features between QVulkanWindow and QRhi
  * SQLite: Update SQLite to v3.39.2
  * Update freetype to 2.12.1
  * corelib: Fix typos in documentation
  * QAtomicInteger docs: mention bool and char8_t as 8-bit types
  * qgraphicsitem_cast: replace 0 with nullptr
  * Doc: Hide weak overload template magic from documentation
  * Revert "QDateTime: fix adjusted datetime handling"
  * Fix select handles disappears issues
  * tst_QSslKey: prepare for the migration to OpenSSL v3
  * tst_qnetworkreply: replace server.pem/key pair
  * Disable unit testing setting up QTcpServer on special Apple interfaces
  * qmake/msbuild: Turn off "use full paths in diagnostics" by default
  * qmake/msbuild: Support all /DEBUG:xxx linker options
  * qmake/msbuild: Support all /LTCG:xxx options
  * Android A11Y: Add content change type to content change event
  * Enabler for fractional scaling of text in Qt Quick
  * macOS: Override logical DPI to 72
  * Add QDom internalSubset implementation
  * Fix tst_AndroidAssets, broken by recent changes on assets load speed
  * Android: Improve loading speed of individual assets
  * Darwin: Replace deprecated symbol kIOMasterPortDefault with equivalent
  * macOS: Remove code for handling logical DPI changes
  * Fix an incorrect invocation of llvm-readobj
  * macOS: Ignore deprecation for kOnSystemDisk icon domain
  * Copy only files that belongs to QML module
  * Android: fix wrong position of cursor handle and editpopup menu in split screen
  * Doc: Document QML_IMPORTS_PATH and QMLPATHS
  * Add the missing RCC_DIR to '.qrc' paths when generating deployment settings
  * Android: Fix the offset of the EditPopupMenu
  * xcb: update xkb_state mask as much as possible
  * QDom: Stop treating non-BMP characters as invalid
  * Android 13: Fix warnings on starting an application
  * qxkbcommon: Map Super/Hyper to Meta early enough to have an effect
  * macOS: Ignore update requests for offline displays
  * macOS: Avoid recursively updating screens when window moves screen
  * qmake/MinGW: Install separate debug info of DLLs next to the DLL
  * QMainWindow: fix restoreState() for toolbars
  * Make two QDT benchmarks data-driven and add more rows
  * Fix doc and example of QLoggingCategory::installCategory()
  * qmake: Document Xcode behavior when bundling translation files
  * Android: Fix missing import
  * QByteArray: more GCC 12 -Werror=array-bound whack-a-mole
  * CMake: Fix android sdk version propagation
  * Restore C++20-deprecated mixed-enum bitwise operators
  * Android: Fix ANR when QtService and QtActivity load in same process
  * Fix restart QtActivity
  * QArrayData::data(): do type-punning via quintptr, not char *
  * QIOSTextResponder: recreate responder upon reset
  * QSslSocket: make it work with OpenSSL v3
  * QFileSystemModelPrivate: de-inline ctor and dtor
  * Network: update Public Suffix List
  * macOS: Ensure proper quoting when calling otool in objc_namespace script
  * QKeySequence: Fix the one-off error in the mac glyph array size
- Commits dropped by the rebase:
  * Apply CVE-2022-27404-27405-27406-qtbase-5.15.diff
  * QArrayData: fix UB via reinterpret_cast (crash with FORTIFY_SOURCE=3)
  * Adapt for q_EVP_PKEY_base_id → q_EVP_PKEY_get_base_id rename in OpenSSL 3
  * Don't use a deprecated function if built/linked with OpenSSL v3</changelog>
  <changelog author="christophe@krop.fr" date="1696593601">- Enable the experimental native painting feature to improve
  remote desktop performances (boo#1214915)
  exporting QT_XCB_NATIVE_PAINTING is required to use the feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1697716800">- Update to version 5.15.11+kde138:
  * QLibraryPrivate: Actually merge load hints
  * QPluginLoader: report the right load hints
  * xkb: fix build with libxkbcommon 1.6.0 and later
  * a11y atspi: Map ButtonMenu role to AT-SPI equivalent</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1703851200">- Update to version 5.15.12+kde144, rebased upstream:
  * QMimeDatabase: handle buggy type definitions with circular inheritance
  * xcb: only set base size when it's valid
  * QPixmapCache: fix leaking of QStrings and Keys on clear()
  * OpenFile portal: do not use O_PATH fds
  * QSystemTrayIcon: properly disconnect old menu in setContextMenu()
  * Guard QTabBar against nested event processing during moving tabs
  * QDial: don't crash when min==max and setting a value != min &amp; max
  * QStandardItemModel: don't leak in mimeData()
  * SQL/MySQL: properly initialize variable
  * QWidgetTextControl: ignore invalid input method event
  * Update the LGPL license header
  * SQL/MySQL: fix handling of json column
  * Remove QMAKE_RANLIB and QMAKE_LINK_SHLIB from android/default_pre.prf
  * macOS: Fix less common writing systems on Catalina and later
  * Blacklist 1 tests in tst_QFtp on ubuntu-20.04
  * Update bundled libpng to version 1.6.39
  * Android: Fix signing of APKs that are generated when an AAB is also built
  * Update bundled zlib to version 1.2.13
  * doc: update the limitation of QSystemTrayIcon on X11
  * Blacklist 1 tests in tst_QTimer on ubuntu-20.04
  * Add benchmarks for QLocale number parsing
  * Add benchmarks for QString number parsing
  * Android: Fix incorrect fullscreen dimensions
  * Gtk3Theme: set XCURSOR_SIZE and XCURSOR_THEME for wayland sessions
  * xcb: Flush Display when processing xcb events
  * xcb: Add xlib wrapper for XFlush()
  * QHostAddress: Fix incorrect comparison against 'Any'
  * QSsl[OpenSSL/Android]: Fix hardcoded 1_1 suffix
  * BLACKLIST: tst_QApplication::sendEventsOnProcessEvents for RHEL 9.0
  * QMacStyle: do not set white color for grayed out button
  * Work round macOS's omission of en_DE from its own uiLanguages()
  * Suppress a deprecation warning in tst_QDateTime::toString_enumformat()
  * QJsonValue: fix incorrect to{Array,Object} when the value is empty
  * QGtk3Dialog: remove the #include for empty moc
  * Remove unneeded QWindow from QGtk3Dialog
  * tst_QSslSocket: Delete sslOptions
  * tst_QSslServer: Make the in-process server use TLS1.2
  * Android: fix Gradle warning about using enableUncompressedNativeLibs
  * Mention  limitation of QDir::drives() on Windows
  * QFileSystemEngine/Win: fix incorrect buffer size in currentPath()
  * Android: properly retrieve mime type of uri to for openUrl()
  * Android: Fix clipboard issue with urls
  * Android: Add a way to disable accessibility via an environment var
  * Update bundled libpng to version 1.6.38
  * QIOSMessageDialog::exec - work around 'windowsless' exec
  * QIosScreen: retain the right window
  * tst_Q{BitArray,ContiguousCache}: check not only count(), but size(), too
  * QIosTextResponder: stop using deprecated constants and type
  * qcompilerdetection.h: detect Coverity
  * Android: Fix Display.getRealMetrics deprecation
  * Fix broken Text rendering when noantialiased NativeRendering is used
  * forkfd: fix Clang 15 ATOMIC_VAR_INIT deprecation warning
  * eglfs: Add env.var. to disable the dedicated drmHandleEvent thread
  * doc: Don't put strings into QVector&lt;double&gt;
  * Remove focusProxyAndInputMethods from tst_QWidget
  * Bump version to 5.15.12
  * Update documentation of qWaitForWindowActive / qWaitForWindowExposed
  * QtHttp: Lower the severity of some log output
  * StyleSheetStyle: Fix color of placeholder texts in text edits
  * Android: Fix flickering on split screen mode
  * Update url to IAccessible2 Specification</changelog>
  <changelog author="alarrosa@suse.com" date="1704283200">- Update to version 5.15.12+kde147:
  * Http2: fix potential overflow in assemble_hpack_block()
    (bsc#1218413, CVE-2023-51714)
  * HPack: fix incorrect integer overflow check
  * HPack: fix a Yoda Condition</changelog>
  <changelog author="fvogt@suse.com" date="1708084800">- Update to version 5.15.12+kde151:
  * Improve KTX file reading memory safety (CVE-2024-25580, boo#1219996)
  * Revert "xcb: only set base size when it's valid"
  * Fix potential leak of QPropertyAnimation in QLineEditIconButton
  * QBitArray: correct inline keyword</changelog>
  <changelog author="alarrosa@suse.com" date="1720785600">- Add patch from upstream to fix a regression in the ODBC driver
  (bsc#1227513, QTBUG-112375):
  * 0001-QSQL-ODBC-fix-regression-trailing-NUL.patch
  * 0002-SQL-ODBC-Pass-correct-length-to-SQLColAttribute.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1722945600">- Add rebased upstream patch to delay any HTTP2 communication until
  encrypted() can be responded to (bsc#1227426, CVE-2024-39936):
  * 0001-HTTP2-Delay-any-communication-until-encrypted-can-be.patch
- Add upstream patch to fix a NULL pointer dereference via the
  function QXcbConnection::initializeAllAtoms() when there is
  anomalous behavior from the X server (bsc#1222120,
  CVE-2023-45935):
  * 0001-xcb-guard-a-pointer-before-usage.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756728000">- Add patch from upstream to fix a precondition violation in call
  to QByteArrayView::at() which can cause crashes (bsc#1243958,
  CVE-2025-5455):
  * 0001-qDecodeDataUrl-fix-precondition-violation-in-call-to.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756814400">- Add patch from upstream to initialize a member variable that was
  uninitialized under some circumstances:
  * 0001-QObjectPrivateSignal-initialize-all-members.patch
- Add patch from upstream to fix a crash when parsing a particular
  glyph in a particular font (QTBUG-124310):
  * 0001-Avoid-crash-in-font-distancefield-computation.patch
  * 0002-Fix-crash-in-font-distancefield-computation.patch
- Add patch from upstream to fix avoid repeatedly registering
  xsettings callbacks when switching cursor themes:
  * 0001-xcb-Avoid-repeatedly-registering-xsettings-callbacks-When.patch
- Add patch from upstream to check validity of RandR output info
  before using it (QTBUG-128906):
  * 0001-xcb-check-validity-of-RandR-output-info-before-using-it.patch
- Add patch from upstream to fix reparenting a window so it takes
  effect even if there are no other state changes to the window:
  * 0001-xcb-Sync-XCB-connection-after-reparenting-window.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756900800">- Add patch from upstream to fix a low performance when processing
  XML data in encodeText (bsc#1239896, CVE-2025-30348):
  * 0001-XML_QDom-speedup-encodeText.patch</changelog>
</package>
<package pkgid="50b3ffdc23a108cd2ff72ba3215f67ac14e2e340dd7c5aaa1428db17c4801e86" name="libQt5PrintSupport-private-headers-devel" arch="noarch">
  <version epoch="0" ver="5.15.12+kde151" rel="150600.3.9.1"/>
  <changelog author="fvogt@suse.com" date="1678968000">- Update to version 5.15.8+kde183:
  * Add nullptr guard in QStyleSheetStyle::drawPrimitive(PE_PanelLineEdit)
  * QAbstractItemView: don't access invalid indexes on copy-key
  * Apply CVE-2023-24607-qtbase-5.15.diff (CVE-2023-24607,
    bsc#1209616)
  * QXcbConnection::getTimestamp: do not return stale timestamp
  * QToolButton: Elide text when constraints prevent from showing whole text
  * correctly set up ref counting in QThreadPool::tryStart(std::function)
  * Do not set Qt::ToolTip flag for QShapedPixmapWindow
  * Fix deletion order also for QImageReader/Writer::setDevice()
  * Fix deletion order in QImageReader/Writer destructors
  * QNetworkReply: Fix typos in the documentation
  * Doc: Fix typo in the online documentation template
  * Doc: Link to page documenting Qt trademarks in the copyright footer
  * [doc] Fix typo in QBuffer::setBuffer() description
  * qwindowsdrag: Fix typo in documentation
  * openglblacklists: Fix typo in description
  * qxcbscreen: Fix typo in documentation
  * Fix typos in SQL driver documentation
  * qxcbwindow.cpp: Fix sign-compare and another warnings
  * QToolButton: reimplement the fix for QTBUG-95255
  * QSysInfo::prettyProductName(): Add macOS Ventura product name
  * QSysInfo::prettyProductName(): add missing macOS product names
  * xcb: correctly disconnect xsettings callbacks
  * ibus: add SetCursorLocationRelative in InputContext.xml</changelog>
  <changelog author="fvogt@suse.com" date="1680523200">- Update to version 5.15.8+kde185:
  * QFSFileEngine: fix overflow bug when using lseek64
  * Add QImage null check when QOpenGLTexture converts
- Add patch to fix return key handling in QGroupBox on GNOME (bsc#1209364):
  * 0001-Revert-QGnomeTheme-Allow-Space-Return-Enter-and-Sele.patch
- Add patch to fix XInput2 events in big-endian X11 clients (bsc#1204883, QTBUG-105157):
  * big-endian-scroll.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1682078400">- Update to version 5.15.9+kde151, rebased upstream:
  * QCborValue: fix incorrect to{Array,Map} when the value is empty
  * QMargins: fix a missing "full stop" in the docs
  * QLibrary: restore translated string
  * QLibrary: fix possible arg() format clobbering
  * iOS: Use python3 for enumerating test target devices
  * Android: Treat ACTION_CANCEL as TouchCancelEvent
  * Doc: Fix broken formatting
  * QFileSystemEngine: fix potential formatting error
  * QString::asprintf: check that passing field widths as arguments works
  * Backport recent QFlags tests
  * network: Fix typos in documentation
  * Fix accuracy with screen composition
  * Doc: Update documentation for QElapsedTimer's in Windows
  * Document that QStandardPath::findExecutable works with absolute paths
  * macOS: Use native resize cursors for diagonal resize
  * Fix clipped glyphs in text rendering of QGraphicsTextItem
  * Change comparison data type to fix int overflow
  * Add missing Q_WEAK_OVERLOAD definition
  * Update QFileInfo docs to mention macOS aliases
  * Distinguish macOS aliases from normal symbolic links
  * Windows QPA: Fix frameless maximize on secondary screens
  * Rewrite tst_qdataurl as a data-driven test
  * Fix compilation for wasm
  * QIOSFileDialog/QIOSDocumentPickerController - handle dismissed view controller
  * Fix QDockWidget's dock area permissions after hovering
  * Fix C++20 ambiguous relational operators between QJsonValue{,Ref}
  * Android: make sure that orientationChange is reported after resize
  * Android: set all QScreen's geometry-related parameters together
  * Blacklist: test cases blacklisted in tst_QDBusConnection:
  * wasm:  fix issue with passing username/password to network request
  * macOS: Pass multi arch flags when linking qmake
  * QCocoaFileDialogHelper: Always enable symlinks and aliases to directories
  * Android: terminate argv passed to main() with nullptr
  * Update bundled libjpeg-turbo to version 2.1.3
  * ANGLE: Load the DirectX libraries from the system path directly
  * SQLite: Update SQLite to v3.37.2
  * Fix compiler warnings about unused parameters
  * Fix getsockopt option_value initial initialization
  * Http2: Fix redirect-handling
  * Android A11Y: Fix value rounding
  * Android A11Y: Announce value together with element name when focused
  * Android A11Y: handle valueChanged events
  * tst_QSystemSemaphore: give proper path to test-helper
  * QNX: Silence compiler warning by initializing variable
  * Update LICENSE.QT-LICENSE-AGREEMENT
  * winrt appxmanifest: Properly replace VCLibs version for newer MSVC versions
  * QAbstractSocket: Don't pretend pause and resume is a stack
  * Gui: test also depends for clipboard feature
  * QDesktopServices: deprecate destroying URL handlers w/o explicit unsetUrlHandler()
  * macOS: Respect QMAKE_APPLE_DEVICE_ARCHS when building qmake
  * HTTP: Make redirect response parsing more generic
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 20.04
  * Android A11Y: populate child elements when constructing node info
  * Fix issue where readyRead() could happen after disconnected()
  * QStringView: add missing constexpr so we can use is_constant_evaluated
  * Use Android's View.generateViewId() for generating ids for views/surfaces
  * Remove documentation of non-existing QAccessible state
  * Doc: Fix snippet to match actual QFileInfo behavior
  * Android: Re-focus focused accessibility node after orientation change
  * Android A11Y: execute C++ code on main Qt thread
  * Android: extract parentId for hidden object in advance
  * xcb: Show valuator atom names properly in categorized logging
  * Android: replace stacktrace with debug message in search for setService
  * Better document attaching a QFutureWatcher to a started QFuture
  * doc: Update GenericDataLocation location on iOS
  * BLACKLIST test_Gestures tests for RHEL-8.4
  * QPlainTestLogger: do not print "failure location" if there's no failure
  * QAbstractItemView: do not access invalid model indices (3/N)
  * Win32: always allow the event loop to be woken up by posted events
  * rhi: d3d11: Use __uuidof where we can
  * Don't QEXPECT_FAIL tst_QLineEdit::testQuickSelectionWithMouse on macOS ARM
  * Network: Emit authenticationRequired when using Ntlm
  * testlib: Disable window restoration on macOS in a non-persistent way
  * QAbstractItemView: do not access invalid model indices (2/N)
  * QAbstractItemView: do not access invalid model indices (1/N)
  * QAbstractItemView: code tidies
  * Update float16 part of TestLib selftest
  * QGuiApplication: constant-initialize lastCursorPosition
  * Blacklist tst_QFileSystemWatcher::signalsEmittedAfterFileMoved on all Windows versions
  * [Android]: Handle the screen name, modes and refreshRate properly
  * QVersionNumber: remove the "pure" attribute from commonPrefix()
  * QEvent: initialize the static userEventTypeRegistry constexprly
  * Let QXcbGlxWindow::createVisual fallback to QXcbWindow::createVisual
  * Android A11Y: fix content update notification when object is hidden
  * Android: explicitly remove accessibility focus when element is hidden
  * BLACKLIST tst_qfont for Red Hat 8.4 and Ubuntu 20.04
  * QtCore: includemocs
  * Fix memory leak in QtConcurrent::run when called with a NULL QThreadPool
  * INTEGRITY: Prevent deletion of virtual functions
  * QMake: replace a Q_ASSERT() with a Q_UNREACHABLE()
  * QTransform benchmark: measure what was promised
  * QStaticByteArrayMatcher: add a useful comment
  * QMacStyle: use the 'momentary push in' type for push buttons
  * qopengl.h: Move C header #include(s) out of the QT_NAMESPACE
  * Enable all supported 1.0 device features in QVulkanWindow
  * Fix queue passed to vkQueuePresent
  * QFusionStyle: don't draw an invalid outline for up/down buttons
  * Doc: Make QListIterator snippets more robust
  * QVersionNumber: don't detach() in rvalue QList/QVector ctor
  * QNetworkRequest: Document how Qt handles 301 and 302 status codes
  * Convert date-time to UTC before claiming it's in GMT
  * Remove execute permission from XML files
  * Add test case for style sheet selectors for enum properties
  * FreeType: allow falling back to synthesized bold if desired
  * Fix an assertion failure in massageAdjustedDateTime()
  * Relax tst_qvulkan::vulkanVersionRequest to make it compatible with 1.1
  * Doc: Replace "C:Documents and Settings" paths
  * QOrderedMutexLocker: fix compilation with C++11
  * QHttpNetworkConnection: Always set proxy settings to all channels
  * Add a markdown writer test for a checklist item ending with `code`
  * Use QTextCharFormat::fontFixedPitch to remember Markdown backtick spans
  * QWizardLayoutInfo: make == and != operators const
  * Revert "Android: Fix screen flicker issues"
  * macOS: Handle momentum scroll NSEventPhaseBegan when scroll had ended
  * SQLite: Update SQLite to v3.37.0
  * Update copyright year to 2022
  * QTzTimeZonePrivate: use ctor delegation instead of init()
  * QTzTimeZonePrivate: fix permanently-detaching m_icu
  * tst_QGraphicsView: fix memleak
  * Doc: Update external links to Qt Creator Manual
  * macOS: assume an unidentified tablet device is a stylus
  * tst_QItemModel: fix memleaks
  * tst_qanimationgroup: fix memleaks
  * QAbstractAnimation: add missing forward-declaration
  * [doc] QCoreApplication::installTranslator() doesn't take ownership
  * tst_qtranslator: fix memleak
  * QTestData: fix streaming of u8 string literals in C++20 mode
  * QThread/Unix: extract duplicate code
  * QWindowPrivate: fix inconsistent inline on some methods
  * tst_QStringList: check that join(u'0') embeds NULs
  * macOS: Sanitize scroll deltas for NSEventPhaseCancelled
  * tst_qsharedmemory: skip readOnly() test under asan
  * QXmlStreamReader: update test distribution
  * QZipReader: update to unzip partly broken archives
  * Deliver context menu event with correct coordinates to widgets in popups
  * QTextHtmlParser: fix prefix lookahead and html comments
  * QtConcurrent::run crashes on program exit
  * tst_QPropertyAnimation: fix leaks occurring under normal operation
  * tst_QPropertyAnimation: fix wrong comment
  * QLogging: fix potential missing NUL-terminator when calling OutputDebugString
  * Fix qt_scrollRectInImage when scrolling outside of the image
- Commits dropped by the rebase:
  * Fix compile with Qt5: Use QString::mid instead of QString::sliced
  * Restore C++11 compatibility after e8b9f4c28d3ab5e960dc54f2dc0c4b749b0b50e0
  * QDateTime: Don't require c++17</changelog>
  <changelog author="fvogt@suse.com" date="1683633600">- Amend patch to fix mouse grabbing as well (bsc#1211024):
  * big-endian-scroll.patch</changelog>
  <changelog author="fvogt@suse.com" date="1684929600">- Update to version 5.15.9+kde154:
  * Hsts: match header names case insensitively (CVE-2023-32762,
    QTBUG-113392, bsc#1211797)
  * Fix specific overflow in qtextlayout (CVE-2023-32763,
    QTBUG-113337, bsc#1211798)
  * QDnsLookup/Unix: make sure we don't overflow the buffer
    (CVE-2023-33285, boo#1211642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1686657600">- Update to version 5.15.10+kde129, rebased upstream:
  * Ssl: Copy the on-demand cert loading bool from default config
  * Schannel: Reject certificate not signed by a configured CA certificate (boo#1211994, CVE-2023-34410)
  * qnetworkreplyfileimpl_p.h: fix header guard name
  * Revert "Draw the cursor considering the descent is 0"
  * Use pkgconfig in order to find libproxy configuration
  * Upgrade PCRE2 to 10.40
  * Android A11Y: handle LocationChanged event only for focused element
  * Port binary JSON to new special integer bitfields
  * INTEGRITY: enable C99 globally
  * QObject: mark two error reporting functions COLD
  * Endian: Provide special integer bitfield unions
  * Android: set useLegacyPackaging to true in build.gradle
  * QWidgetTextControl: port to new-style connects (faster)
  * Sync qxmlstream.g with qxmlstreamparser_p.h [1/2]: switched lines
  * tst_QNetworkReply try stabilize autoDeleteReplies tests
  * Remove duplicated include for &lt;limits&gt;
  * Fix recursion crash when calling setStyleSheet with `qproperty-styleSheet`
  * qwindowsxpstyle: Fix typos in documentation
  * Correct prefix reported for end element in QXmlStreamReader
  * Android A11Y: Add supported role infos to A11yNodeInfo
  * Fix handling of DateTime values in QSettings
  * Fix off-by-one for "typically" lowest value INT_MIN
  * xml: Fix typos in documentation
  * QWindowsWindow: Fix typo in documentation
  * includemocs (updated script)
  * widgets: Fix typos in documentation
  * cocoa: Fix typo in debug messages
  * Only scroll QMenu when there is a valid active action
  * QTimer: Add note in documentation
  * Fix QListView assert when the last row is moved in IconMode
  * QFileDialog: Fix adding default suffix when file path contains dot
  * QLineEdit: account for the placeholderText when computing lineRect
  * QFileDialog::saveFileContent crashes on accept
  * QCompleter: QCompleter unexpectedly changes QLineEdit text
  * Fix build error on iOS with the configure option -qtnamespace
  * Draw the cursor considering the descent is 0
  * Remove pure-virtual-signals.h include from tst_moc.cpp
  * plugins: image formats - fix odr violation
  * dbus: Fix typos
  * qwindowsdialoghelpers: Fix typo in documentation
  * QTableView: Document the customizations applied to QHeaderView
  * Unicodetools: compile
  * eglfs_x11: Fix running flag linkage
  * qcompilerdetection.h: add Q_CC_{GNU,MSVC,CLANG}_ONLY macros
  * Fix CMake warning about "missing closing ' quote"
  * Fix alignment of next/prev links in offline style
  * QtDBus: includemocs
  * Image Plugins: includemocs(-ish)
  * QtGui: includemocs
  * QXcbNativeInterface: remove unused field m_sysTraySelectionAtom
  * Windows QPA: Fix slowdown with large table/tree views with accessibility
  * Macstyle: fix the text color on the disabled button
  * QMacStyle: fix tool buttons (in checked mode)
  * QTeamCityLogger: fix .arg() placeholder injection
  * QAbstractTestLogger: disable copying
  * Fix errorMessageFromComError()
  * QtNetwork: includemocs
  * AppleUnifiedLogger: Remove manually managed os_log_t cache
  * examples: add WindowStaysOnBottomHint into preview text
  * QSharedPointer: Use matching new/delete
  * QIbusPlatformInputContextPlugin: includemocs
  * QGtk3ThemePlugin: includemocs
  * QTuioTouchPlugin: includemocs
  * QtWidgets: includemocs v2022
  * QMYSQLDriverPlugin: includemocs
  * QtDeviceDiscoverySupportPrivate: includemocs
  * QLinuxFbIntegrationPlugin: includemocs
  * QtPrintSupport: includemocs
  * QSQLiteDriverPlugin: includemocs
  * QtFbSupportPrivate: includemocs
  * QXdgDesktopPortalThemePlugin: includemocs
  * QtTest: includemocs
  * QComposePlatformInputContextPlugin: includemocs
  * QtSql: includemocs
  * QVncIntegrationPlugin: includemocs
  * Fix backingstore fractional DPR glitches for widgets in child windows
  * Include &lt;limits&gt; where std::numeric_limits is used
  * QtInputSupportPrivate: includemocs
  * Document the default value of QSFPM::sortOrder()
  * Better document how to enable sorting in QSPFM
  * Correct documentation of INI format's loss of type information
  * Android: add missing properties in AndroidManifest.xml
  * Fix assertion failure when parsing a doubly-invalid date-time text
  * Windows QPA: Correct mistake when calculating minmaxinfo
  * Android: replace ndk.dir with android.ndkVersion in build.gradle
  * Android: remove the old copy of gradle.properties after reading it
  * CMake Android Support: Fix signing of APKs
  * Android: fix A11Y object description
  * macOS: Fix warning about comparing different types in QCocoaScreen::isOnline
  * Fix qmake build on FreeBSD
  * Update documentation of enum Qt::DockWidgetArea
  * xcb: recreate xcb window under some conditions
  * objc_namespace: Add support for universal binaries
  * objc_namespace: Fix misspelled argument for silencing output
  * objc_namespace: Update parsing logic to account for otool changes
  * Blacklist passwordAuth for Ubuntu 20.04
  * Android: wrap QAndroidInputContext's m_focusObject in a QPointer
  * Fix compilation with GCC 12 (and on Fedora 35 and newer)
  * Chip example: fix an accidental bool-&gt;int conversion when using PMF connections
  * qmake: Add support for C++23
  * Android: use BCP 47 tag to create a correct Locale for QTimeZone::displayName()
  * QDateTime: fix adjusted datetime handling
  * Fix crash in tst_qmltc_examples on Android
  * macOS: Remove dead code for focus ring handling in Mac style
  * Detach for colortransforms of indexed formats
  * tst_QTcpSocket::connectToHostError - handle possible timeouts
  * CoreText: Avoid populating font family aliases if family was populated
  * Graphicsview: Avoid background clearing glitches under fractional DPR
  * Windows QPA: Avoid slowdown with UI Automation name change notification
  * Windows QPA: Avoid sending accessibility notifications before activation
  * Windows: Fix potential crash when retrieving default printer
  * Make Ubuntu with its non-standard security level happy
  * Android: Blacklist failing tests on tst_QGraphicsProxyWidget
  * Update LA 4.4.1
  * iOS A11Y: Set more accessibilityTraits
  * QNX: Fix compiler warning by when FEATURE_clipboard is not enabled
  * Document that native file dialogs might not show a title
  * Doc: Remove mentionings of overflows from QElapsedTimer
  * QTextMarkdownImporter: don't apply text char format to list item block
- Commits dropped by the rebase:
  * QBuffer: add missing &lt;limits&gt; include
  * Fix developer build</changelog>
  <changelog author="gmbr3@opensuse.org" date="1687953600">- Change %_libqt5_libexecdir to %_libexecdir/qt5 (bsc#1174075)</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch icu-devel requires to pkgconfig to allow switching libicu
  versions</changelog>
  <changelog author="fvogt@suse.com" date="1695902401">- Update to version 5.15.10+kde159 (bsc#1214327, CVE-2023-37369):
  * Fix CVE-2023-43114
  * QMimeDatabase: fix detection of pattern conflict in different prefixes
  * Fix highdpi conversion of QTabletEvent coordinates on xcb
  * widget: set WA_X11NetWmWindowType* after xcb window was created
  * Fix crash when setting override cursor on multiple clients
  * QAccessibleWidget: Remove pointless ZWSP in warning message
  * Android A11Y: Fix deadlock in QtAndroidAccessibility::runInObjectContext()
  * Correctly parse non BMP char refs in the sax parser
  * Clear the _X version of alongside the enum deprecator
  * Fix UB (signed char passed to &lt;cctype&gt; function)
  * Qt3DRender: includemocs
  * Fix capitalization error in auto-generated qdbusmacros.h include
  * QColorDialog: Ignore mouse move events when no mouse button is pressed
  * QHostInfo: fix remaining slotObj leaks
  * QXmlStreamReader: Raise error on unexpected tokens (CVE-2023-38197,
    QTBUG-92113, QTBUG-95188, bsc#1213326)
  * QTextLayout: Reconsider cursor drawing on TextObject
  * Ensure consistent cursor width under fractional scaling
  * Fix QTextEdit cursor rectangle vertical positioning
  * Return 0 in QWindow::winId in case of failed platform window creation
  * Doc: note QWindow::winId() will cause platform window creation
  * QSslDiffieHellmanParameters: fix mem-leak
  * QHostInfo: fix leaking slot object
  * Make sure we don't count down past 0 QT_FATAL_CRITICALS
  * QLogging: DRY isFatal(QtMsgType)
  * tst_QXmlStream: remove unneeded _ba UDLs
  * Fix typo in QXmlStreamReader error message
  * QXmlStreamReader: make fastScanName() indicate parsing status to callers
  * QXmlStreamReader: change fastScanName() to take a Value*
  * Fix Croatia's currency
  * SSL: upgrade the default DH parameters</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1696593600">- Update to version 5.15.11+kde134, rebased upstream:
  * Revert "Windows QPA: Add support to UiaRaiseNotificationEvent()"
  * FileChooser portal: Make sure filter.name is not empty
  * QPersistentModelIndex: fix UB (op&lt; on unrelated pointers)
  * Avoid crash when keysymToQtKey(keysym, Qt::ControlModifier) is called
  * a11y atspi: translate coords for GetOffsetAtPoint the right way
  * a11y atspi: Take dialog into account as top-level window
  * a11y atspi: Fix incorrect use of x instead of y position
  * macOS: Handle asynchronous deminiaturizing of windows
  * QTranslator: generalize a UNIX-only path
  * iOS, input panel: be more careful before enabling QIOSKeyboardListener
  * Android: Fix flickering on window resize and show keyboard
  * Android A11Y: Check for active surface before calling into native code
  * xcb: Delete touch points without target windows
  * Blacklist 1 tests in tst_QDBusConnection on ubuntu-20.04
  * Fix CMake builds without ANDROID_SDK
  * Blacklist 2 tests in tst_Http2 on ubuntu-20.04
  * Blacklist 1 tests in tst_QSqlQuery on macos
  * Defer creating the special shaders in the texture blitter
  * tst_QSslSocket::serverCipherPreferencies - fix for OpenSSL v3
  * QTemporaryFile: document rename() differences from QFile
  * Doc: 3rd party: Fix reference to FreeType LICENSE.txt
  * Update bundled libjpeg-turbo to version 2.1.4
  * tst_QSsSocket: fix verifyClientCertificate with OpenSSL 3
  * tst_QSslSocket: regenerate certificate used for setLocalCertificateChain
  * tst_QSslSocket::protocolServerSide - make it work with OpenSSL v3
  * tst_QSslSocket::oldErrorsOnSocketReuse - make it work with OpenSSL v3
  * Update zconf.h prefixes to match zlib v1.2.12 update
  * xcb: fix D&amp;D in same xembed client
  * xcb: use global coordinates for position of D&amp;D for xembed client
  * Doc: Update QMetaType::metaObject() descriptions
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 22.04
  * BLACKLIST tst_qfont for Ubuntu 22.04
  * BLACKLIST tst_QMenuBar::check_menuPosition for Ubuntu 22.04
  * tst_QDtls::verifyClientCertficiate - update certs for OpenSSL v3
  * QSslCertificate::toText(): add a file to compare against
  * Fix the spelling of the word "combination"
  * tst_QSslCertificate::pkcs12 - skip the test if OpenSSL version &gt;= 3
  * Android A11Y: Fix TalkBack scrolling behavior
  * Android A11Y: Notify android about scroll events
  * QCocoaDrag: don't add pasteboard items with non-absolute URLs
  * QDirPrivate: pass input QList by cref
  * tst_qbytearray: remove qCompress_data for QT_NO_COMPRESS
  * QDeviceDiscoveryUDev: use NSDMI
  * QAuthenticator: Fix crash when using NTLM / Negotiate
  * Provide a native interface instance in minimal platform plugin
  * Android: document the supported clipboard mimetypes
  * Windows: Account for not finding child windows when calling ChildWindowFromPointEx
  * iOS: Send touch events asynchronously to avoid deadlocking UIKit event loop
  * Disable bitcode for iOS
  * macOS: Ignore deprecation for ReleaseIconRef
  * BLACKLIST tst_QApplication::sendEventsOnProcessEvents for Ubuntu 22.04
  * Convert Latin1 to UTF-16 before passing to ICU API
  * Doc: Remove repetition of word in text
  * eglfs: Fix screen cloning when atomic is enabled
  * Fix printing of dpr&gt;1 images on Windows
  * QHttp: Fix handling of redirect loaded from cache
  * Doc: Fix return type of QLEInteger/QBEInteger post-in/decrement ops
  * qmake: Fix installation of separate debug info for plugins
  * iOS: ensure we close inputpanel after clearing focusobject
  * Convert Latin1 to UTF-16 before passing to ICU API
  * qputenv: defend against non-NUL-terminated QByteArray values
  * QFontSubset: remove unused glyphName() overload
  * Statically assert that the __mips_dsp code is only active on 32-bit
  * QGtk3Theme: Ensure gtk uses the same windowing system as Qt
  * tst_QFocusFrame: fix -Wparantheses
  * Sync Vulkan device features between QVulkanWindow and QRhi
  * SQLite: Update SQLite to v3.39.2
  * Update freetype to 2.12.1
  * corelib: Fix typos in documentation
  * QAtomicInteger docs: mention bool and char8_t as 8-bit types
  * qgraphicsitem_cast: replace 0 with nullptr
  * Doc: Hide weak overload template magic from documentation
  * Revert "QDateTime: fix adjusted datetime handling"
  * Fix select handles disappears issues
  * tst_QSslKey: prepare for the migration to OpenSSL v3
  * tst_qnetworkreply: replace server.pem/key pair
  * Disable unit testing setting up QTcpServer on special Apple interfaces
  * qmake/msbuild: Turn off "use full paths in diagnostics" by default
  * qmake/msbuild: Support all /DEBUG:xxx linker options
  * qmake/msbuild: Support all /LTCG:xxx options
  * Android A11Y: Add content change type to content change event
  * Enabler for fractional scaling of text in Qt Quick
  * macOS: Override logical DPI to 72
  * Add QDom internalSubset implementation
  * Fix tst_AndroidAssets, broken by recent changes on assets load speed
  * Android: Improve loading speed of individual assets
  * Darwin: Replace deprecated symbol kIOMasterPortDefault with equivalent
  * macOS: Remove code for handling logical DPI changes
  * Fix an incorrect invocation of llvm-readobj
  * macOS: Ignore deprecation for kOnSystemDisk icon domain
  * Copy only files that belongs to QML module
  * Android: fix wrong position of cursor handle and editpopup menu in split screen
  * Doc: Document QML_IMPORTS_PATH and QMLPATHS
  * Add the missing RCC_DIR to '.qrc' paths when generating deployment settings
  * Android: Fix the offset of the EditPopupMenu
  * xcb: update xkb_state mask as much as possible
  * QDom: Stop treating non-BMP characters as invalid
  * Android 13: Fix warnings on starting an application
  * qxkbcommon: Map Super/Hyper to Meta early enough to have an effect
  * macOS: Ignore update requests for offline displays
  * macOS: Avoid recursively updating screens when window moves screen
  * qmake/MinGW: Install separate debug info of DLLs next to the DLL
  * QMainWindow: fix restoreState() for toolbars
  * Make two QDT benchmarks data-driven and add more rows
  * Fix doc and example of QLoggingCategory::installCategory()
  * qmake: Document Xcode behavior when bundling translation files
  * Android: Fix missing import
  * QByteArray: more GCC 12 -Werror=array-bound whack-a-mole
  * CMake: Fix android sdk version propagation
  * Restore C++20-deprecated mixed-enum bitwise operators
  * Android: Fix ANR when QtService and QtActivity load in same process
  * Fix restart QtActivity
  * QArrayData::data(): do type-punning via quintptr, not char *
  * QIOSTextResponder: recreate responder upon reset
  * QSslSocket: make it work with OpenSSL v3
  * QFileSystemModelPrivate: de-inline ctor and dtor
  * Network: update Public Suffix List
  * macOS: Ensure proper quoting when calling otool in objc_namespace script
  * QKeySequence: Fix the one-off error in the mac glyph array size
- Commits dropped by the rebase:
  * Apply CVE-2022-27404-27405-27406-qtbase-5.15.diff
  * QArrayData: fix UB via reinterpret_cast (crash with FORTIFY_SOURCE=3)
  * Adapt for q_EVP_PKEY_base_id → q_EVP_PKEY_get_base_id rename in OpenSSL 3
  * Don't use a deprecated function if built/linked with OpenSSL v3</changelog>
  <changelog author="christophe@krop.fr" date="1696593601">- Enable the experimental native painting feature to improve
  remote desktop performances (boo#1214915)
  exporting QT_XCB_NATIVE_PAINTING is required to use the feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1697716800">- Update to version 5.15.11+kde138:
  * QLibraryPrivate: Actually merge load hints
  * QPluginLoader: report the right load hints
  * xkb: fix build with libxkbcommon 1.6.0 and later
  * a11y atspi: Map ButtonMenu role to AT-SPI equivalent</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1703851200">- Update to version 5.15.12+kde144, rebased upstream:
  * QMimeDatabase: handle buggy type definitions with circular inheritance
  * xcb: only set base size when it's valid
  * QPixmapCache: fix leaking of QStrings and Keys on clear()
  * OpenFile portal: do not use O_PATH fds
  * QSystemTrayIcon: properly disconnect old menu in setContextMenu()
  * Guard QTabBar against nested event processing during moving tabs
  * QDial: don't crash when min==max and setting a value != min &amp; max
  * QStandardItemModel: don't leak in mimeData()
  * SQL/MySQL: properly initialize variable
  * QWidgetTextControl: ignore invalid input method event
  * Update the LGPL license header
  * SQL/MySQL: fix handling of json column
  * Remove QMAKE_RANLIB and QMAKE_LINK_SHLIB from android/default_pre.prf
  * macOS: Fix less common writing systems on Catalina and later
  * Blacklist 1 tests in tst_QFtp on ubuntu-20.04
  * Update bundled libpng to version 1.6.39
  * Android: Fix signing of APKs that are generated when an AAB is also built
  * Update bundled zlib to version 1.2.13
  * doc: update the limitation of QSystemTrayIcon on X11
  * Blacklist 1 tests in tst_QTimer on ubuntu-20.04
  * Add benchmarks for QLocale number parsing
  * Add benchmarks for QString number parsing
  * Android: Fix incorrect fullscreen dimensions
  * Gtk3Theme: set XCURSOR_SIZE and XCURSOR_THEME for wayland sessions
  * xcb: Flush Display when processing xcb events
  * xcb: Add xlib wrapper for XFlush()
  * QHostAddress: Fix incorrect comparison against 'Any'
  * QSsl[OpenSSL/Android]: Fix hardcoded 1_1 suffix
  * BLACKLIST: tst_QApplication::sendEventsOnProcessEvents for RHEL 9.0
  * QMacStyle: do not set white color for grayed out button
  * Work round macOS's omission of en_DE from its own uiLanguages()
  * Suppress a deprecation warning in tst_QDateTime::toString_enumformat()
  * QJsonValue: fix incorrect to{Array,Object} when the value is empty
  * QGtk3Dialog: remove the #include for empty moc
  * Remove unneeded QWindow from QGtk3Dialog
  * tst_QSslSocket: Delete sslOptions
  * tst_QSslServer: Make the in-process server use TLS1.2
  * Android: fix Gradle warning about using enableUncompressedNativeLibs
  * Mention  limitation of QDir::drives() on Windows
  * QFileSystemEngine/Win: fix incorrect buffer size in currentPath()
  * Android: properly retrieve mime type of uri to for openUrl()
  * Android: Fix clipboard issue with urls
  * Android: Add a way to disable accessibility via an environment var
  * Update bundled libpng to version 1.6.38
  * QIOSMessageDialog::exec - work around 'windowsless' exec
  * QIosScreen: retain the right window
  * tst_Q{BitArray,ContiguousCache}: check not only count(), but size(), too
  * QIosTextResponder: stop using deprecated constants and type
  * qcompilerdetection.h: detect Coverity
  * Android: Fix Display.getRealMetrics deprecation
  * Fix broken Text rendering when noantialiased NativeRendering is used
  * forkfd: fix Clang 15 ATOMIC_VAR_INIT deprecation warning
  * eglfs: Add env.var. to disable the dedicated drmHandleEvent thread
  * doc: Don't put strings into QVector&lt;double&gt;
  * Remove focusProxyAndInputMethods from tst_QWidget
  * Bump version to 5.15.12
  * Update documentation of qWaitForWindowActive / qWaitForWindowExposed
  * QtHttp: Lower the severity of some log output
  * StyleSheetStyle: Fix color of placeholder texts in text edits
  * Android: Fix flickering on split screen mode
  * Update url to IAccessible2 Specification</changelog>
  <changelog author="alarrosa@suse.com" date="1704283200">- Update to version 5.15.12+kde147:
  * Http2: fix potential overflow in assemble_hpack_block()
    (bsc#1218413, CVE-2023-51714)
  * HPack: fix incorrect integer overflow check
  * HPack: fix a Yoda Condition</changelog>
  <changelog author="fvogt@suse.com" date="1708084800">- Update to version 5.15.12+kde151:
  * Improve KTX file reading memory safety (CVE-2024-25580, boo#1219996)
  * Revert "xcb: only set base size when it's valid"
  * Fix potential leak of QPropertyAnimation in QLineEditIconButton
  * QBitArray: correct inline keyword</changelog>
  <changelog author="alarrosa@suse.com" date="1720785600">- Add patch from upstream to fix a regression in the ODBC driver
  (bsc#1227513, QTBUG-112375):
  * 0001-QSQL-ODBC-fix-regression-trailing-NUL.patch
  * 0002-SQL-ODBC-Pass-correct-length-to-SQLColAttribute.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1722945600">- Add rebased upstream patch to delay any HTTP2 communication until
  encrypted() can be responded to (bsc#1227426, CVE-2024-39936):
  * 0001-HTTP2-Delay-any-communication-until-encrypted-can-be.patch
- Add upstream patch to fix a NULL pointer dereference via the
  function QXcbConnection::initializeAllAtoms() when there is
  anomalous behavior from the X server (bsc#1222120,
  CVE-2023-45935):
  * 0001-xcb-guard-a-pointer-before-usage.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756728000">- Add patch from upstream to fix a precondition violation in call
  to QByteArrayView::at() which can cause crashes (bsc#1243958,
  CVE-2025-5455):
  * 0001-qDecodeDataUrl-fix-precondition-violation-in-call-to.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756814400">- Add patch from upstream to initialize a member variable that was
  uninitialized under some circumstances:
  * 0001-QObjectPrivateSignal-initialize-all-members.patch
- Add patch from upstream to fix a crash when parsing a particular
  glyph in a particular font (QTBUG-124310):
  * 0001-Avoid-crash-in-font-distancefield-computation.patch
  * 0002-Fix-crash-in-font-distancefield-computation.patch
- Add patch from upstream to fix avoid repeatedly registering
  xsettings callbacks when switching cursor themes:
  * 0001-xcb-Avoid-repeatedly-registering-xsettings-callbacks-When.patch
- Add patch from upstream to check validity of RandR output info
  before using it (QTBUG-128906):
  * 0001-xcb-check-validity-of-RandR-output-info-before-using-it.patch
- Add patch from upstream to fix reparenting a window so it takes
  effect even if there are no other state changes to the window:
  * 0001-xcb-Sync-XCB-connection-after-reparenting-window.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756900800">- Add patch from upstream to fix a low performance when processing
  XML data in encodeText (bsc#1239896, CVE-2025-30348):
  * 0001-XML_QDom-speedup-encodeText.patch</changelog>
</package>
<package pkgid="658d224a8a70392281849819e0fa2a3c710004bd8cd8aa0214fe4cca5596be4b" name="libQt5PrintSupport5" arch="x86_64">
  <version epoch="0" ver="5.15.12+kde151" rel="150600.3.9.1"/>
  <changelog author="fvogt@suse.com" date="1678968000">- Update to version 5.15.8+kde183:
  * Add nullptr guard in QStyleSheetStyle::drawPrimitive(PE_PanelLineEdit)
  * QAbstractItemView: don't access invalid indexes on copy-key
  * Apply CVE-2023-24607-qtbase-5.15.diff (CVE-2023-24607,
    bsc#1209616)
  * QXcbConnection::getTimestamp: do not return stale timestamp
  * QToolButton: Elide text when constraints prevent from showing whole text
  * correctly set up ref counting in QThreadPool::tryStart(std::function)
  * Do not set Qt::ToolTip flag for QShapedPixmapWindow
  * Fix deletion order also for QImageReader/Writer::setDevice()
  * Fix deletion order in QImageReader/Writer destructors
  * QNetworkReply: Fix typos in the documentation
  * Doc: Fix typo in the online documentation template
  * Doc: Link to page documenting Qt trademarks in the copyright footer
  * [doc] Fix typo in QBuffer::setBuffer() description
  * qwindowsdrag: Fix typo in documentation
  * openglblacklists: Fix typo in description
  * qxcbscreen: Fix typo in documentation
  * Fix typos in SQL driver documentation
  * qxcbwindow.cpp: Fix sign-compare and another warnings
  * QToolButton: reimplement the fix for QTBUG-95255
  * QSysInfo::prettyProductName(): Add macOS Ventura product name
  * QSysInfo::prettyProductName(): add missing macOS product names
  * xcb: correctly disconnect xsettings callbacks
  * ibus: add SetCursorLocationRelative in InputContext.xml</changelog>
  <changelog author="fvogt@suse.com" date="1680523200">- Update to version 5.15.8+kde185:
  * QFSFileEngine: fix overflow bug when using lseek64
  * Add QImage null check when QOpenGLTexture converts
- Add patch to fix return key handling in QGroupBox on GNOME (bsc#1209364):
  * 0001-Revert-QGnomeTheme-Allow-Space-Return-Enter-and-Sele.patch
- Add patch to fix XInput2 events in big-endian X11 clients (bsc#1204883, QTBUG-105157):
  * big-endian-scroll.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1682078400">- Update to version 5.15.9+kde151, rebased upstream:
  * QCborValue: fix incorrect to{Array,Map} when the value is empty
  * QMargins: fix a missing "full stop" in the docs
  * QLibrary: restore translated string
  * QLibrary: fix possible arg() format clobbering
  * iOS: Use python3 for enumerating test target devices
  * Android: Treat ACTION_CANCEL as TouchCancelEvent
  * Doc: Fix broken formatting
  * QFileSystemEngine: fix potential formatting error
  * QString::asprintf: check that passing field widths as arguments works
  * Backport recent QFlags tests
  * network: Fix typos in documentation
  * Fix accuracy with screen composition
  * Doc: Update documentation for QElapsedTimer's in Windows
  * Document that QStandardPath::findExecutable works with absolute paths
  * macOS: Use native resize cursors for diagonal resize
  * Fix clipped glyphs in text rendering of QGraphicsTextItem
  * Change comparison data type to fix int overflow
  * Add missing Q_WEAK_OVERLOAD definition
  * Update QFileInfo docs to mention macOS aliases
  * Distinguish macOS aliases from normal symbolic links
  * Windows QPA: Fix frameless maximize on secondary screens
  * Rewrite tst_qdataurl as a data-driven test
  * Fix compilation for wasm
  * QIOSFileDialog/QIOSDocumentPickerController - handle dismissed view controller
  * Fix QDockWidget's dock area permissions after hovering
  * Fix C++20 ambiguous relational operators between QJsonValue{,Ref}
  * Android: make sure that orientationChange is reported after resize
  * Android: set all QScreen's geometry-related parameters together
  * Blacklist: test cases blacklisted in tst_QDBusConnection:
  * wasm:  fix issue with passing username/password to network request
  * macOS: Pass multi arch flags when linking qmake
  * QCocoaFileDialogHelper: Always enable symlinks and aliases to directories
  * Android: terminate argv passed to main() with nullptr
  * Update bundled libjpeg-turbo to version 2.1.3
  * ANGLE: Load the DirectX libraries from the system path directly
  * SQLite: Update SQLite to v3.37.2
  * Fix compiler warnings about unused parameters
  * Fix getsockopt option_value initial initialization
  * Http2: Fix redirect-handling
  * Android A11Y: Fix value rounding
  * Android A11Y: Announce value together with element name when focused
  * Android A11Y: handle valueChanged events
  * tst_QSystemSemaphore: give proper path to test-helper
  * QNX: Silence compiler warning by initializing variable
  * Update LICENSE.QT-LICENSE-AGREEMENT
  * winrt appxmanifest: Properly replace VCLibs version for newer MSVC versions
  * QAbstractSocket: Don't pretend pause and resume is a stack
  * Gui: test also depends for clipboard feature
  * QDesktopServices: deprecate destroying URL handlers w/o explicit unsetUrlHandler()
  * macOS: Respect QMAKE_APPLE_DEVICE_ARCHS when building qmake
  * HTTP: Make redirect response parsing more generic
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 20.04
  * Android A11Y: populate child elements when constructing node info
  * Fix issue where readyRead() could happen after disconnected()
  * QStringView: add missing constexpr so we can use is_constant_evaluated
  * Use Android's View.generateViewId() for generating ids for views/surfaces
  * Remove documentation of non-existing QAccessible state
  * Doc: Fix snippet to match actual QFileInfo behavior
  * Android: Re-focus focused accessibility node after orientation change
  * Android A11Y: execute C++ code on main Qt thread
  * Android: extract parentId for hidden object in advance
  * xcb: Show valuator atom names properly in categorized logging
  * Android: replace stacktrace with debug message in search for setService
  * Better document attaching a QFutureWatcher to a started QFuture
  * doc: Update GenericDataLocation location on iOS
  * BLACKLIST test_Gestures tests for RHEL-8.4
  * QPlainTestLogger: do not print "failure location" if there's no failure
  * QAbstractItemView: do not access invalid model indices (3/N)
  * Win32: always allow the event loop to be woken up by posted events
  * rhi: d3d11: Use __uuidof where we can
  * Don't QEXPECT_FAIL tst_QLineEdit::testQuickSelectionWithMouse on macOS ARM
  * Network: Emit authenticationRequired when using Ntlm
  * testlib: Disable window restoration on macOS in a non-persistent way
  * QAbstractItemView: do not access invalid model indices (2/N)
  * QAbstractItemView: do not access invalid model indices (1/N)
  * QAbstractItemView: code tidies
  * Update float16 part of TestLib selftest
  * QGuiApplication: constant-initialize lastCursorPosition
  * Blacklist tst_QFileSystemWatcher::signalsEmittedAfterFileMoved on all Windows versions
  * [Android]: Handle the screen name, modes and refreshRate properly
  * QVersionNumber: remove the "pure" attribute from commonPrefix()
  * QEvent: initialize the static userEventTypeRegistry constexprly
  * Let QXcbGlxWindow::createVisual fallback to QXcbWindow::createVisual
  * Android A11Y: fix content update notification when object is hidden
  * Android: explicitly remove accessibility focus when element is hidden
  * BLACKLIST tst_qfont for Red Hat 8.4 and Ubuntu 20.04
  * QtCore: includemocs
  * Fix memory leak in QtConcurrent::run when called with a NULL QThreadPool
  * INTEGRITY: Prevent deletion of virtual functions
  * QMake: replace a Q_ASSERT() with a Q_UNREACHABLE()
  * QTransform benchmark: measure what was promised
  * QStaticByteArrayMatcher: add a useful comment
  * QMacStyle: use the 'momentary push in' type for push buttons
  * qopengl.h: Move C header #include(s) out of the QT_NAMESPACE
  * Enable all supported 1.0 device features in QVulkanWindow
  * Fix queue passed to vkQueuePresent
  * QFusionStyle: don't draw an invalid outline for up/down buttons
  * Doc: Make QListIterator snippets more robust
  * QVersionNumber: don't detach() in rvalue QList/QVector ctor
  * QNetworkRequest: Document how Qt handles 301 and 302 status codes
  * Convert date-time to UTC before claiming it's in GMT
  * Remove execute permission from XML files
  * Add test case for style sheet selectors for enum properties
  * FreeType: allow falling back to synthesized bold if desired
  * Fix an assertion failure in massageAdjustedDateTime()
  * Relax tst_qvulkan::vulkanVersionRequest to make it compatible with 1.1
  * Doc: Replace "C:Documents and Settings" paths
  * QOrderedMutexLocker: fix compilation with C++11
  * QHttpNetworkConnection: Always set proxy settings to all channels
  * Add a markdown writer test for a checklist item ending with `code`
  * Use QTextCharFormat::fontFixedPitch to remember Markdown backtick spans
  * QWizardLayoutInfo: make == and != operators const
  * Revert "Android: Fix screen flicker issues"
  * macOS: Handle momentum scroll NSEventPhaseBegan when scroll had ended
  * SQLite: Update SQLite to v3.37.0
  * Update copyright year to 2022
  * QTzTimeZonePrivate: use ctor delegation instead of init()
  * QTzTimeZonePrivate: fix permanently-detaching m_icu
  * tst_QGraphicsView: fix memleak
  * Doc: Update external links to Qt Creator Manual
  * macOS: assume an unidentified tablet device is a stylus
  * tst_QItemModel: fix memleaks
  * tst_qanimationgroup: fix memleaks
  * QAbstractAnimation: add missing forward-declaration
  * [doc] QCoreApplication::installTranslator() doesn't take ownership
  * tst_qtranslator: fix memleak
  * QTestData: fix streaming of u8 string literals in C++20 mode
  * QThread/Unix: extract duplicate code
  * QWindowPrivate: fix inconsistent inline on some methods
  * tst_QStringList: check that join(u'0') embeds NULs
  * macOS: Sanitize scroll deltas for NSEventPhaseCancelled
  * tst_qsharedmemory: skip readOnly() test under asan
  * QXmlStreamReader: update test distribution
  * QZipReader: update to unzip partly broken archives
  * Deliver context menu event with correct coordinates to widgets in popups
  * QTextHtmlParser: fix prefix lookahead and html comments
  * QtConcurrent::run crashes on program exit
  * tst_QPropertyAnimation: fix leaks occurring under normal operation
  * tst_QPropertyAnimation: fix wrong comment
  * QLogging: fix potential missing NUL-terminator when calling OutputDebugString
  * Fix qt_scrollRectInImage when scrolling outside of the image
- Commits dropped by the rebase:
  * Fix compile with Qt5: Use QString::mid instead of QString::sliced
  * Restore C++11 compatibility after e8b9f4c28d3ab5e960dc54f2dc0c4b749b0b50e0
  * QDateTime: Don't require c++17</changelog>
  <changelog author="fvogt@suse.com" date="1683633600">- Amend patch to fix mouse grabbing as well (bsc#1211024):
  * big-endian-scroll.patch</changelog>
  <changelog author="fvogt@suse.com" date="1684929600">- Update to version 5.15.9+kde154:
  * Hsts: match header names case insensitively (CVE-2023-32762,
    QTBUG-113392, bsc#1211797)
  * Fix specific overflow in qtextlayout (CVE-2023-32763,
    QTBUG-113337, bsc#1211798)
  * QDnsLookup/Unix: make sure we don't overflow the buffer
    (CVE-2023-33285, boo#1211642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1686657600">- Update to version 5.15.10+kde129, rebased upstream:
  * Ssl: Copy the on-demand cert loading bool from default config
  * Schannel: Reject certificate not signed by a configured CA certificate (boo#1211994, CVE-2023-34410)
  * qnetworkreplyfileimpl_p.h: fix header guard name
  * Revert "Draw the cursor considering the descent is 0"
  * Use pkgconfig in order to find libproxy configuration
  * Upgrade PCRE2 to 10.40
  * Android A11Y: handle LocationChanged event only for focused element
  * Port binary JSON to new special integer bitfields
  * INTEGRITY: enable C99 globally
  * QObject: mark two error reporting functions COLD
  * Endian: Provide special integer bitfield unions
  * Android: set useLegacyPackaging to true in build.gradle
  * QWidgetTextControl: port to new-style connects (faster)
  * Sync qxmlstream.g with qxmlstreamparser_p.h [1/2]: switched lines
  * tst_QNetworkReply try stabilize autoDeleteReplies tests
  * Remove duplicated include for &lt;limits&gt;
  * Fix recursion crash when calling setStyleSheet with `qproperty-styleSheet`
  * qwindowsxpstyle: Fix typos in documentation
  * Correct prefix reported for end element in QXmlStreamReader
  * Android A11Y: Add supported role infos to A11yNodeInfo
  * Fix handling of DateTime values in QSettings
  * Fix off-by-one for "typically" lowest value INT_MIN
  * xml: Fix typos in documentation
  * QWindowsWindow: Fix typo in documentation
  * includemocs (updated script)
  * widgets: Fix typos in documentation
  * cocoa: Fix typo in debug messages
  * Only scroll QMenu when there is a valid active action
  * QTimer: Add note in documentation
  * Fix QListView assert when the last row is moved in IconMode
  * QFileDialog: Fix adding default suffix when file path contains dot
  * QLineEdit: account for the placeholderText when computing lineRect
  * QFileDialog::saveFileContent crashes on accept
  * QCompleter: QCompleter unexpectedly changes QLineEdit text
  * Fix build error on iOS with the configure option -qtnamespace
  * Draw the cursor considering the descent is 0
  * Remove pure-virtual-signals.h include from tst_moc.cpp
  * plugins: image formats - fix odr violation
  * dbus: Fix typos
  * qwindowsdialoghelpers: Fix typo in documentation
  * QTableView: Document the customizations applied to QHeaderView
  * Unicodetools: compile
  * eglfs_x11: Fix running flag linkage
  * qcompilerdetection.h: add Q_CC_{GNU,MSVC,CLANG}_ONLY macros
  * Fix CMake warning about "missing closing ' quote"
  * Fix alignment of next/prev links in offline style
  * QtDBus: includemocs
  * Image Plugins: includemocs(-ish)
  * QtGui: includemocs
  * QXcbNativeInterface: remove unused field m_sysTraySelectionAtom
  * Windows QPA: Fix slowdown with large table/tree views with accessibility
  * Macstyle: fix the text color on the disabled button
  * QMacStyle: fix tool buttons (in checked mode)
  * QTeamCityLogger: fix .arg() placeholder injection
  * QAbstractTestLogger: disable copying
  * Fix errorMessageFromComError()
  * QtNetwork: includemocs
  * AppleUnifiedLogger: Remove manually managed os_log_t cache
  * examples: add WindowStaysOnBottomHint into preview text
  * QSharedPointer: Use matching new/delete
  * QIbusPlatformInputContextPlugin: includemocs
  * QGtk3ThemePlugin: includemocs
  * QTuioTouchPlugin: includemocs
  * QtWidgets: includemocs v2022
  * QMYSQLDriverPlugin: includemocs
  * QtDeviceDiscoverySupportPrivate: includemocs
  * QLinuxFbIntegrationPlugin: includemocs
  * QtPrintSupport: includemocs
  * QSQLiteDriverPlugin: includemocs
  * QtFbSupportPrivate: includemocs
  * QXdgDesktopPortalThemePlugin: includemocs
  * QtTest: includemocs
  * QComposePlatformInputContextPlugin: includemocs
  * QtSql: includemocs
  * QVncIntegrationPlugin: includemocs
  * Fix backingstore fractional DPR glitches for widgets in child windows
  * Include &lt;limits&gt; where std::numeric_limits is used
  * QtInputSupportPrivate: includemocs
  * Document the default value of QSFPM::sortOrder()
  * Better document how to enable sorting in QSPFM
  * Correct documentation of INI format's loss of type information
  * Android: add missing properties in AndroidManifest.xml
  * Fix assertion failure when parsing a doubly-invalid date-time text
  * Windows QPA: Correct mistake when calculating minmaxinfo
  * Android: replace ndk.dir with android.ndkVersion in build.gradle
  * Android: remove the old copy of gradle.properties after reading it
  * CMake Android Support: Fix signing of APKs
  * Android: fix A11Y object description
  * macOS: Fix warning about comparing different types in QCocoaScreen::isOnline
  * Fix qmake build on FreeBSD
  * Update documentation of enum Qt::DockWidgetArea
  * xcb: recreate xcb window under some conditions
  * objc_namespace: Add support for universal binaries
  * objc_namespace: Fix misspelled argument for silencing output
  * objc_namespace: Update parsing logic to account for otool changes
  * Blacklist passwordAuth for Ubuntu 20.04
  * Android: wrap QAndroidInputContext's m_focusObject in a QPointer
  * Fix compilation with GCC 12 (and on Fedora 35 and newer)
  * Chip example: fix an accidental bool-&gt;int conversion when using PMF connections
  * qmake: Add support for C++23
  * Android: use BCP 47 tag to create a correct Locale for QTimeZone::displayName()
  * QDateTime: fix adjusted datetime handling
  * Fix crash in tst_qmltc_examples on Android
  * macOS: Remove dead code for focus ring handling in Mac style
  * Detach for colortransforms of indexed formats
  * tst_QTcpSocket::connectToHostError - handle possible timeouts
  * CoreText: Avoid populating font family aliases if family was populated
  * Graphicsview: Avoid background clearing glitches under fractional DPR
  * Windows QPA: Avoid slowdown with UI Automation name change notification
  * Windows QPA: Avoid sending accessibility notifications before activation
  * Windows: Fix potential crash when retrieving default printer
  * Make Ubuntu with its non-standard security level happy
  * Android: Blacklist failing tests on tst_QGraphicsProxyWidget
  * Update LA 4.4.1
  * iOS A11Y: Set more accessibilityTraits
  * QNX: Fix compiler warning by when FEATURE_clipboard is not enabled
  * Document that native file dialogs might not show a title
  * Doc: Remove mentionings of overflows from QElapsedTimer
  * QTextMarkdownImporter: don't apply text char format to list item block
- Commits dropped by the rebase:
  * QBuffer: add missing &lt;limits&gt; include
  * Fix developer build</changelog>
  <changelog author="gmbr3@opensuse.org" date="1687953600">- Change %_libqt5_libexecdir to %_libexecdir/qt5 (bsc#1174075)</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch icu-devel requires to pkgconfig to allow switching libicu
  versions</changelog>
  <changelog author="fvogt@suse.com" date="1695902401">- Update to version 5.15.10+kde159 (bsc#1214327, CVE-2023-37369):
  * Fix CVE-2023-43114
  * QMimeDatabase: fix detection of pattern conflict in different prefixes
  * Fix highdpi conversion of QTabletEvent coordinates on xcb
  * widget: set WA_X11NetWmWindowType* after xcb window was created
  * Fix crash when setting override cursor on multiple clients
  * QAccessibleWidget: Remove pointless ZWSP in warning message
  * Android A11Y: Fix deadlock in QtAndroidAccessibility::runInObjectContext()
  * Correctly parse non BMP char refs in the sax parser
  * Clear the _X version of alongside the enum deprecator
  * Fix UB (signed char passed to &lt;cctype&gt; function)
  * Qt3DRender: includemocs
  * Fix capitalization error in auto-generated qdbusmacros.h include
  * QColorDialog: Ignore mouse move events when no mouse button is pressed
  * QHostInfo: fix remaining slotObj leaks
  * QXmlStreamReader: Raise error on unexpected tokens (CVE-2023-38197,
    QTBUG-92113, QTBUG-95188, bsc#1213326)
  * QTextLayout: Reconsider cursor drawing on TextObject
  * Ensure consistent cursor width under fractional scaling
  * Fix QTextEdit cursor rectangle vertical positioning
  * Return 0 in QWindow::winId in case of failed platform window creation
  * Doc: note QWindow::winId() will cause platform window creation
  * QSslDiffieHellmanParameters: fix mem-leak
  * QHostInfo: fix leaking slot object
  * Make sure we don't count down past 0 QT_FATAL_CRITICALS
  * QLogging: DRY isFatal(QtMsgType)
  * tst_QXmlStream: remove unneeded _ba UDLs
  * Fix typo in QXmlStreamReader error message
  * QXmlStreamReader: make fastScanName() indicate parsing status to callers
  * QXmlStreamReader: change fastScanName() to take a Value*
  * Fix Croatia's currency
  * SSL: upgrade the default DH parameters</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1696593600">- Update to version 5.15.11+kde134, rebased upstream:
  * Revert "Windows QPA: Add support to UiaRaiseNotificationEvent()"
  * FileChooser portal: Make sure filter.name is not empty
  * QPersistentModelIndex: fix UB (op&lt; on unrelated pointers)
  * Avoid crash when keysymToQtKey(keysym, Qt::ControlModifier) is called
  * a11y atspi: translate coords for GetOffsetAtPoint the right way
  * a11y atspi: Take dialog into account as top-level window
  * a11y atspi: Fix incorrect use of x instead of y position
  * macOS: Handle asynchronous deminiaturizing of windows
  * QTranslator: generalize a UNIX-only path
  * iOS, input panel: be more careful before enabling QIOSKeyboardListener
  * Android: Fix flickering on window resize and show keyboard
  * Android A11Y: Check for active surface before calling into native code
  * xcb: Delete touch points without target windows
  * Blacklist 1 tests in tst_QDBusConnection on ubuntu-20.04
  * Fix CMake builds without ANDROID_SDK
  * Blacklist 2 tests in tst_Http2 on ubuntu-20.04
  * Blacklist 1 tests in tst_QSqlQuery on macos
  * Defer creating the special shaders in the texture blitter
  * tst_QSslSocket::serverCipherPreferencies - fix for OpenSSL v3
  * QTemporaryFile: document rename() differences from QFile
  * Doc: 3rd party: Fix reference to FreeType LICENSE.txt
  * Update bundled libjpeg-turbo to version 2.1.4
  * tst_QSsSocket: fix verifyClientCertificate with OpenSSL 3
  * tst_QSslSocket: regenerate certificate used for setLocalCertificateChain
  * tst_QSslSocket::protocolServerSide - make it work with OpenSSL v3
  * tst_QSslSocket::oldErrorsOnSocketReuse - make it work with OpenSSL v3
  * Update zconf.h prefixes to match zlib v1.2.12 update
  * xcb: fix D&amp;D in same xembed client
  * xcb: use global coordinates for position of D&amp;D for xembed client
  * Doc: Update QMetaType::metaObject() descriptions
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 22.04
  * BLACKLIST tst_qfont for Ubuntu 22.04
  * BLACKLIST tst_QMenuBar::check_menuPosition for Ubuntu 22.04
  * tst_QDtls::verifyClientCertficiate - update certs for OpenSSL v3
  * QSslCertificate::toText(): add a file to compare against
  * Fix the spelling of the word "combination"
  * tst_QSslCertificate::pkcs12 - skip the test if OpenSSL version &gt;= 3
  * Android A11Y: Fix TalkBack scrolling behavior
  * Android A11Y: Notify android about scroll events
  * QCocoaDrag: don't add pasteboard items with non-absolute URLs
  * QDirPrivate: pass input QList by cref
  * tst_qbytearray: remove qCompress_data for QT_NO_COMPRESS
  * QDeviceDiscoveryUDev: use NSDMI
  * QAuthenticator: Fix crash when using NTLM / Negotiate
  * Provide a native interface instance in minimal platform plugin
  * Android: document the supported clipboard mimetypes
  * Windows: Account for not finding child windows when calling ChildWindowFromPointEx
  * iOS: Send touch events asynchronously to avoid deadlocking UIKit event loop
  * Disable bitcode for iOS
  * macOS: Ignore deprecation for ReleaseIconRef
  * BLACKLIST tst_QApplication::sendEventsOnProcessEvents for Ubuntu 22.04
  * Convert Latin1 to UTF-16 before passing to ICU API
  * Doc: Remove repetition of word in text
  * eglfs: Fix screen cloning when atomic is enabled
  * Fix printing of dpr&gt;1 images on Windows
  * QHttp: Fix handling of redirect loaded from cache
  * Doc: Fix return type of QLEInteger/QBEInteger post-in/decrement ops
  * qmake: Fix installation of separate debug info for plugins
  * iOS: ensure we close inputpanel after clearing focusobject
  * Convert Latin1 to UTF-16 before passing to ICU API
  * qputenv: defend against non-NUL-terminated QByteArray values
  * QFontSubset: remove unused glyphName() overload
  * Statically assert that the __mips_dsp code is only active on 32-bit
  * QGtk3Theme: Ensure gtk uses the same windowing system as Qt
  * tst_QFocusFrame: fix -Wparantheses
  * Sync Vulkan device features between QVulkanWindow and QRhi
  * SQLite: Update SQLite to v3.39.2
  * Update freetype to 2.12.1
  * corelib: Fix typos in documentation
  * QAtomicInteger docs: mention bool and char8_t as 8-bit types
  * qgraphicsitem_cast: replace 0 with nullptr
  * Doc: Hide weak overload template magic from documentation
  * Revert "QDateTime: fix adjusted datetime handling"
  * Fix select handles disappears issues
  * tst_QSslKey: prepare for the migration to OpenSSL v3
  * tst_qnetworkreply: replace server.pem/key pair
  * Disable unit testing setting up QTcpServer on special Apple interfaces
  * qmake/msbuild: Turn off "use full paths in diagnostics" by default
  * qmake/msbuild: Support all /DEBUG:xxx linker options
  * qmake/msbuild: Support all /LTCG:xxx options
  * Android A11Y: Add content change type to content change event
  * Enabler for fractional scaling of text in Qt Quick
  * macOS: Override logical DPI to 72
  * Add QDom internalSubset implementation
  * Fix tst_AndroidAssets, broken by recent changes on assets load speed
  * Android: Improve loading speed of individual assets
  * Darwin: Replace deprecated symbol kIOMasterPortDefault with equivalent
  * macOS: Remove code for handling logical DPI changes
  * Fix an incorrect invocation of llvm-readobj
  * macOS: Ignore deprecation for kOnSystemDisk icon domain
  * Copy only files that belongs to QML module
  * Android: fix wrong position of cursor handle and editpopup menu in split screen
  * Doc: Document QML_IMPORTS_PATH and QMLPATHS
  * Add the missing RCC_DIR to '.qrc' paths when generating deployment settings
  * Android: Fix the offset of the EditPopupMenu
  * xcb: update xkb_state mask as much as possible
  * QDom: Stop treating non-BMP characters as invalid
  * Android 13: Fix warnings on starting an application
  * qxkbcommon: Map Super/Hyper to Meta early enough to have an effect
  * macOS: Ignore update requests for offline displays
  * macOS: Avoid recursively updating screens when window moves screen
  * qmake/MinGW: Install separate debug info of DLLs next to the DLL
  * QMainWindow: fix restoreState() for toolbars
  * Make two QDT benchmarks data-driven and add more rows
  * Fix doc and example of QLoggingCategory::installCategory()
  * qmake: Document Xcode behavior when bundling translation files
  * Android: Fix missing import
  * QByteArray: more GCC 12 -Werror=array-bound whack-a-mole
  * CMake: Fix android sdk version propagation
  * Restore C++20-deprecated mixed-enum bitwise operators
  * Android: Fix ANR when QtService and QtActivity load in same process
  * Fix restart QtActivity
  * QArrayData::data(): do type-punning via quintptr, not char *
  * QIOSTextResponder: recreate responder upon reset
  * QSslSocket: make it work with OpenSSL v3
  * QFileSystemModelPrivate: de-inline ctor and dtor
  * Network: update Public Suffix List
  * macOS: Ensure proper quoting when calling otool in objc_namespace script
  * QKeySequence: Fix the one-off error in the mac glyph array size
- Commits dropped by the rebase:
  * Apply CVE-2022-27404-27405-27406-qtbase-5.15.diff
  * QArrayData: fix UB via reinterpret_cast (crash with FORTIFY_SOURCE=3)
  * Adapt for q_EVP_PKEY_base_id → q_EVP_PKEY_get_base_id rename in OpenSSL 3
  * Don't use a deprecated function if built/linked with OpenSSL v3</changelog>
  <changelog author="christophe@krop.fr" date="1696593601">- Enable the experimental native painting feature to improve
  remote desktop performances (boo#1214915)
  exporting QT_XCB_NATIVE_PAINTING is required to use the feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1697716800">- Update to version 5.15.11+kde138:
  * QLibraryPrivate: Actually merge load hints
  * QPluginLoader: report the right load hints
  * xkb: fix build with libxkbcommon 1.6.0 and later
  * a11y atspi: Map ButtonMenu role to AT-SPI equivalent</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1703851200">- Update to version 5.15.12+kde144, rebased upstream:
  * QMimeDatabase: handle buggy type definitions with circular inheritance
  * xcb: only set base size when it's valid
  * QPixmapCache: fix leaking of QStrings and Keys on clear()
  * OpenFile portal: do not use O_PATH fds
  * QSystemTrayIcon: properly disconnect old menu in setContextMenu()
  * Guard QTabBar against nested event processing during moving tabs
  * QDial: don't crash when min==max and setting a value != min &amp; max
  * QStandardItemModel: don't leak in mimeData()
  * SQL/MySQL: properly initialize variable
  * QWidgetTextControl: ignore invalid input method event
  * Update the LGPL license header
  * SQL/MySQL: fix handling of json column
  * Remove QMAKE_RANLIB and QMAKE_LINK_SHLIB from android/default_pre.prf
  * macOS: Fix less common writing systems on Catalina and later
  * Blacklist 1 tests in tst_QFtp on ubuntu-20.04
  * Update bundled libpng to version 1.6.39
  * Android: Fix signing of APKs that are generated when an AAB is also built
  * Update bundled zlib to version 1.2.13
  * doc: update the limitation of QSystemTrayIcon on X11
  * Blacklist 1 tests in tst_QTimer on ubuntu-20.04
  * Add benchmarks for QLocale number parsing
  * Add benchmarks for QString number parsing
  * Android: Fix incorrect fullscreen dimensions
  * Gtk3Theme: set XCURSOR_SIZE and XCURSOR_THEME for wayland sessions
  * xcb: Flush Display when processing xcb events
  * xcb: Add xlib wrapper for XFlush()
  * QHostAddress: Fix incorrect comparison against 'Any'
  * QSsl[OpenSSL/Android]: Fix hardcoded 1_1 suffix
  * BLACKLIST: tst_QApplication::sendEventsOnProcessEvents for RHEL 9.0
  * QMacStyle: do not set white color for grayed out button
  * Work round macOS's omission of en_DE from its own uiLanguages()
  * Suppress a deprecation warning in tst_QDateTime::toString_enumformat()
  * QJsonValue: fix incorrect to{Array,Object} when the value is empty
  * QGtk3Dialog: remove the #include for empty moc
  * Remove unneeded QWindow from QGtk3Dialog
  * tst_QSslSocket: Delete sslOptions
  * tst_QSslServer: Make the in-process server use TLS1.2
  * Android: fix Gradle warning about using enableUncompressedNativeLibs
  * Mention  limitation of QDir::drives() on Windows
  * QFileSystemEngine/Win: fix incorrect buffer size in currentPath()
  * Android: properly retrieve mime type of uri to for openUrl()
  * Android: Fix clipboard issue with urls
  * Android: Add a way to disable accessibility via an environment var
  * Update bundled libpng to version 1.6.38
  * QIOSMessageDialog::exec - work around 'windowsless' exec
  * QIosScreen: retain the right window
  * tst_Q{BitArray,ContiguousCache}: check not only count(), but size(), too
  * QIosTextResponder: stop using deprecated constants and type
  * qcompilerdetection.h: detect Coverity
  * Android: Fix Display.getRealMetrics deprecation
  * Fix broken Text rendering when noantialiased NativeRendering is used
  * forkfd: fix Clang 15 ATOMIC_VAR_INIT deprecation warning
  * eglfs: Add env.var. to disable the dedicated drmHandleEvent thread
  * doc: Don't put strings into QVector&lt;double&gt;
  * Remove focusProxyAndInputMethods from tst_QWidget
  * Bump version to 5.15.12
  * Update documentation of qWaitForWindowActive / qWaitForWindowExposed
  * QtHttp: Lower the severity of some log output
  * StyleSheetStyle: Fix color of placeholder texts in text edits
  * Android: Fix flickering on split screen mode
  * Update url to IAccessible2 Specification</changelog>
  <changelog author="alarrosa@suse.com" date="1704283200">- Update to version 5.15.12+kde147:
  * Http2: fix potential overflow in assemble_hpack_block()
    (bsc#1218413, CVE-2023-51714)
  * HPack: fix incorrect integer overflow check
  * HPack: fix a Yoda Condition</changelog>
  <changelog author="fvogt@suse.com" date="1708084800">- Update to version 5.15.12+kde151:
  * Improve KTX file reading memory safety (CVE-2024-25580, boo#1219996)
  * Revert "xcb: only set base size when it's valid"
  * Fix potential leak of QPropertyAnimation in QLineEditIconButton
  * QBitArray: correct inline keyword</changelog>
  <changelog author="alarrosa@suse.com" date="1720785600">- Add patch from upstream to fix a regression in the ODBC driver
  (bsc#1227513, QTBUG-112375):
  * 0001-QSQL-ODBC-fix-regression-trailing-NUL.patch
  * 0002-SQL-ODBC-Pass-correct-length-to-SQLColAttribute.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1722945600">- Add rebased upstream patch to delay any HTTP2 communication until
  encrypted() can be responded to (bsc#1227426, CVE-2024-39936):
  * 0001-HTTP2-Delay-any-communication-until-encrypted-can-be.patch
- Add upstream patch to fix a NULL pointer dereference via the
  function QXcbConnection::initializeAllAtoms() when there is
  anomalous behavior from the X server (bsc#1222120,
  CVE-2023-45935):
  * 0001-xcb-guard-a-pointer-before-usage.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756728000">- Add patch from upstream to fix a precondition violation in call
  to QByteArrayView::at() which can cause crashes (bsc#1243958,
  CVE-2025-5455):
  * 0001-qDecodeDataUrl-fix-precondition-violation-in-call-to.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756814400">- Add patch from upstream to initialize a member variable that was
  uninitialized under some circumstances:
  * 0001-QObjectPrivateSignal-initialize-all-members.patch
- Add patch from upstream to fix a crash when parsing a particular
  glyph in a particular font (QTBUG-124310):
  * 0001-Avoid-crash-in-font-distancefield-computation.patch
  * 0002-Fix-crash-in-font-distancefield-computation.patch
- Add patch from upstream to fix avoid repeatedly registering
  xsettings callbacks when switching cursor themes:
  * 0001-xcb-Avoid-repeatedly-registering-xsettings-callbacks-When.patch
- Add patch from upstream to check validity of RandR output info
  before using it (QTBUG-128906):
  * 0001-xcb-check-validity-of-RandR-output-info-before-using-it.patch
- Add patch from upstream to fix reparenting a window so it takes
  effect even if there are no other state changes to the window:
  * 0001-xcb-Sync-XCB-connection-after-reparenting-window.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756900800">- Add patch from upstream to fix a low performance when processing
  XML data in encodeText (bsc#1239896, CVE-2025-30348):
  * 0001-XML_QDom-speedup-encodeText.patch</changelog>
</package>
<package pkgid="6afb8a62883969c11a60a80a210fe2bc19d89ca58caf3da9e0d4729b4331838e" name="libQt5Sql-devel" arch="x86_64">
  <version epoch="0" ver="5.15.12+kde151" rel="150600.3.9.1"/>
  <changelog author="fvogt@suse.com" date="1678968000">- Update to version 5.15.8+kde183:
  * Add nullptr guard in QStyleSheetStyle::drawPrimitive(PE_PanelLineEdit)
  * QAbstractItemView: don't access invalid indexes on copy-key
  * Apply CVE-2023-24607-qtbase-5.15.diff (CVE-2023-24607,
    bsc#1209616)
  * QXcbConnection::getTimestamp: do not return stale timestamp
  * QToolButton: Elide text when constraints prevent from showing whole text
  * correctly set up ref counting in QThreadPool::tryStart(std::function)
  * Do not set Qt::ToolTip flag for QShapedPixmapWindow
  * Fix deletion order also for QImageReader/Writer::setDevice()
  * Fix deletion order in QImageReader/Writer destructors
  * QNetworkReply: Fix typos in the documentation
  * Doc: Fix typo in the online documentation template
  * Doc: Link to page documenting Qt trademarks in the copyright footer
  * [doc] Fix typo in QBuffer::setBuffer() description
  * qwindowsdrag: Fix typo in documentation
  * openglblacklists: Fix typo in description
  * qxcbscreen: Fix typo in documentation
  * Fix typos in SQL driver documentation
  * qxcbwindow.cpp: Fix sign-compare and another warnings
  * QToolButton: reimplement the fix for QTBUG-95255
  * QSysInfo::prettyProductName(): Add macOS Ventura product name
  * QSysInfo::prettyProductName(): add missing macOS product names
  * xcb: correctly disconnect xsettings callbacks
  * ibus: add SetCursorLocationRelative in InputContext.xml</changelog>
  <changelog author="fvogt@suse.com" date="1680523200">- Update to version 5.15.8+kde185:
  * QFSFileEngine: fix overflow bug when using lseek64
  * Add QImage null check when QOpenGLTexture converts
- Add patch to fix return key handling in QGroupBox on GNOME (bsc#1209364):
  * 0001-Revert-QGnomeTheme-Allow-Space-Return-Enter-and-Sele.patch
- Add patch to fix XInput2 events in big-endian X11 clients (bsc#1204883, QTBUG-105157):
  * big-endian-scroll.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1682078400">- Update to version 5.15.9+kde151, rebased upstream:
  * QCborValue: fix incorrect to{Array,Map} when the value is empty
  * QMargins: fix a missing "full stop" in the docs
  * QLibrary: restore translated string
  * QLibrary: fix possible arg() format clobbering
  * iOS: Use python3 for enumerating test target devices
  * Android: Treat ACTION_CANCEL as TouchCancelEvent
  * Doc: Fix broken formatting
  * QFileSystemEngine: fix potential formatting error
  * QString::asprintf: check that passing field widths as arguments works
  * Backport recent QFlags tests
  * network: Fix typos in documentation
  * Fix accuracy with screen composition
  * Doc: Update documentation for QElapsedTimer's in Windows
  * Document that QStandardPath::findExecutable works with absolute paths
  * macOS: Use native resize cursors for diagonal resize
  * Fix clipped glyphs in text rendering of QGraphicsTextItem
  * Change comparison data type to fix int overflow
  * Add missing Q_WEAK_OVERLOAD definition
  * Update QFileInfo docs to mention macOS aliases
  * Distinguish macOS aliases from normal symbolic links
  * Windows QPA: Fix frameless maximize on secondary screens
  * Rewrite tst_qdataurl as a data-driven test
  * Fix compilation for wasm
  * QIOSFileDialog/QIOSDocumentPickerController - handle dismissed view controller
  * Fix QDockWidget's dock area permissions after hovering
  * Fix C++20 ambiguous relational operators between QJsonValue{,Ref}
  * Android: make sure that orientationChange is reported after resize
  * Android: set all QScreen's geometry-related parameters together
  * Blacklist: test cases blacklisted in tst_QDBusConnection:
  * wasm:  fix issue with passing username/password to network request
  * macOS: Pass multi arch flags when linking qmake
  * QCocoaFileDialogHelper: Always enable symlinks and aliases to directories
  * Android: terminate argv passed to main() with nullptr
  * Update bundled libjpeg-turbo to version 2.1.3
  * ANGLE: Load the DirectX libraries from the system path directly
  * SQLite: Update SQLite to v3.37.2
  * Fix compiler warnings about unused parameters
  * Fix getsockopt option_value initial initialization
  * Http2: Fix redirect-handling
  * Android A11Y: Fix value rounding
  * Android A11Y: Announce value together with element name when focused
  * Android A11Y: handle valueChanged events
  * tst_QSystemSemaphore: give proper path to test-helper
  * QNX: Silence compiler warning by initializing variable
  * Update LICENSE.QT-LICENSE-AGREEMENT
  * winrt appxmanifest: Properly replace VCLibs version for newer MSVC versions
  * QAbstractSocket: Don't pretend pause and resume is a stack
  * Gui: test also depends for clipboard feature
  * QDesktopServices: deprecate destroying URL handlers w/o explicit unsetUrlHandler()
  * macOS: Respect QMAKE_APPLE_DEVICE_ARCHS when building qmake
  * HTTP: Make redirect response parsing more generic
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 20.04
  * Android A11Y: populate child elements when constructing node info
  * Fix issue where readyRead() could happen after disconnected()
  * QStringView: add missing constexpr so we can use is_constant_evaluated
  * Use Android's View.generateViewId() for generating ids for views/surfaces
  * Remove documentation of non-existing QAccessible state
  * Doc: Fix snippet to match actual QFileInfo behavior
  * Android: Re-focus focused accessibility node after orientation change
  * Android A11Y: execute C++ code on main Qt thread
  * Android: extract parentId for hidden object in advance
  * xcb: Show valuator atom names properly in categorized logging
  * Android: replace stacktrace with debug message in search for setService
  * Better document attaching a QFutureWatcher to a started QFuture
  * doc: Update GenericDataLocation location on iOS
  * BLACKLIST test_Gestures tests for RHEL-8.4
  * QPlainTestLogger: do not print "failure location" if there's no failure
  * QAbstractItemView: do not access invalid model indices (3/N)
  * Win32: always allow the event loop to be woken up by posted events
  * rhi: d3d11: Use __uuidof where we can
  * Don't QEXPECT_FAIL tst_QLineEdit::testQuickSelectionWithMouse on macOS ARM
  * Network: Emit authenticationRequired when using Ntlm
  * testlib: Disable window restoration on macOS in a non-persistent way
  * QAbstractItemView: do not access invalid model indices (2/N)
  * QAbstractItemView: do not access invalid model indices (1/N)
  * QAbstractItemView: code tidies
  * Update float16 part of TestLib selftest
  * QGuiApplication: constant-initialize lastCursorPosition
  * Blacklist tst_QFileSystemWatcher::signalsEmittedAfterFileMoved on all Windows versions
  * [Android]: Handle the screen name, modes and refreshRate properly
  * QVersionNumber: remove the "pure" attribute from commonPrefix()
  * QEvent: initialize the static userEventTypeRegistry constexprly
  * Let QXcbGlxWindow::createVisual fallback to QXcbWindow::createVisual
  * Android A11Y: fix content update notification when object is hidden
  * Android: explicitly remove accessibility focus when element is hidden
  * BLACKLIST tst_qfont for Red Hat 8.4 and Ubuntu 20.04
  * QtCore: includemocs
  * Fix memory leak in QtConcurrent::run when called with a NULL QThreadPool
  * INTEGRITY: Prevent deletion of virtual functions
  * QMake: replace a Q_ASSERT() with a Q_UNREACHABLE()
  * QTransform benchmark: measure what was promised
  * QStaticByteArrayMatcher: add a useful comment
  * QMacStyle: use the 'momentary push in' type for push buttons
  * qopengl.h: Move C header #include(s) out of the QT_NAMESPACE
  * Enable all supported 1.0 device features in QVulkanWindow
  * Fix queue passed to vkQueuePresent
  * QFusionStyle: don't draw an invalid outline for up/down buttons
  * Doc: Make QListIterator snippets more robust
  * QVersionNumber: don't detach() in rvalue QList/QVector ctor
  * QNetworkRequest: Document how Qt handles 301 and 302 status codes
  * Convert date-time to UTC before claiming it's in GMT
  * Remove execute permission from XML files
  * Add test case for style sheet selectors for enum properties
  * FreeType: allow falling back to synthesized bold if desired
  * Fix an assertion failure in massageAdjustedDateTime()
  * Relax tst_qvulkan::vulkanVersionRequest to make it compatible with 1.1
  * Doc: Replace "C:Documents and Settings" paths
  * QOrderedMutexLocker: fix compilation with C++11
  * QHttpNetworkConnection: Always set proxy settings to all channels
  * Add a markdown writer test for a checklist item ending with `code`
  * Use QTextCharFormat::fontFixedPitch to remember Markdown backtick spans
  * QWizardLayoutInfo: make == and != operators const
  * Revert "Android: Fix screen flicker issues"
  * macOS: Handle momentum scroll NSEventPhaseBegan when scroll had ended
  * SQLite: Update SQLite to v3.37.0
  * Update copyright year to 2022
  * QTzTimeZonePrivate: use ctor delegation instead of init()
  * QTzTimeZonePrivate: fix permanently-detaching m_icu
  * tst_QGraphicsView: fix memleak
  * Doc: Update external links to Qt Creator Manual
  * macOS: assume an unidentified tablet device is a stylus
  * tst_QItemModel: fix memleaks
  * tst_qanimationgroup: fix memleaks
  * QAbstractAnimation: add missing forward-declaration
  * [doc] QCoreApplication::installTranslator() doesn't take ownership
  * tst_qtranslator: fix memleak
  * QTestData: fix streaming of u8 string literals in C++20 mode
  * QThread/Unix: extract duplicate code
  * QWindowPrivate: fix inconsistent inline on some methods
  * tst_QStringList: check that join(u'0') embeds NULs
  * macOS: Sanitize scroll deltas for NSEventPhaseCancelled
  * tst_qsharedmemory: skip readOnly() test under asan
  * QXmlStreamReader: update test distribution
  * QZipReader: update to unzip partly broken archives
  * Deliver context menu event with correct coordinates to widgets in popups
  * QTextHtmlParser: fix prefix lookahead and html comments
  * QtConcurrent::run crashes on program exit
  * tst_QPropertyAnimation: fix leaks occurring under normal operation
  * tst_QPropertyAnimation: fix wrong comment
  * QLogging: fix potential missing NUL-terminator when calling OutputDebugString
  * Fix qt_scrollRectInImage when scrolling outside of the image
- Commits dropped by the rebase:
  * Fix compile with Qt5: Use QString::mid instead of QString::sliced
  * Restore C++11 compatibility after e8b9f4c28d3ab5e960dc54f2dc0c4b749b0b50e0
  * QDateTime: Don't require c++17</changelog>
  <changelog author="fvogt@suse.com" date="1683633600">- Amend patch to fix mouse grabbing as well (bsc#1211024):
  * big-endian-scroll.patch</changelog>
  <changelog author="fvogt@suse.com" date="1684929600">- Update to version 5.15.9+kde154:
  * Hsts: match header names case insensitively (CVE-2023-32762,
    QTBUG-113392, bsc#1211797)
  * Fix specific overflow in qtextlayout (CVE-2023-32763,
    QTBUG-113337, bsc#1211798)
  * QDnsLookup/Unix: make sure we don't overflow the buffer
    (CVE-2023-33285, boo#1211642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1686657600">- Update to version 5.15.10+kde129, rebased upstream:
  * Ssl: Copy the on-demand cert loading bool from default config
  * Schannel: Reject certificate not signed by a configured CA certificate (boo#1211994, CVE-2023-34410)
  * qnetworkreplyfileimpl_p.h: fix header guard name
  * Revert "Draw the cursor considering the descent is 0"
  * Use pkgconfig in order to find libproxy configuration
  * Upgrade PCRE2 to 10.40
  * Android A11Y: handle LocationChanged event only for focused element
  * Port binary JSON to new special integer bitfields
  * INTEGRITY: enable C99 globally
  * QObject: mark two error reporting functions COLD
  * Endian: Provide special integer bitfield unions
  * Android: set useLegacyPackaging to true in build.gradle
  * QWidgetTextControl: port to new-style connects (faster)
  * Sync qxmlstream.g with qxmlstreamparser_p.h [1/2]: switched lines
  * tst_QNetworkReply try stabilize autoDeleteReplies tests
  * Remove duplicated include for &lt;limits&gt;
  * Fix recursion crash when calling setStyleSheet with `qproperty-styleSheet`
  * qwindowsxpstyle: Fix typos in documentation
  * Correct prefix reported for end element in QXmlStreamReader
  * Android A11Y: Add supported role infos to A11yNodeInfo
  * Fix handling of DateTime values in QSettings
  * Fix off-by-one for "typically" lowest value INT_MIN
  * xml: Fix typos in documentation
  * QWindowsWindow: Fix typo in documentation
  * includemocs (updated script)
  * widgets: Fix typos in documentation
  * cocoa: Fix typo in debug messages
  * Only scroll QMenu when there is a valid active action
  * QTimer: Add note in documentation
  * Fix QListView assert when the last row is moved in IconMode
  * QFileDialog: Fix adding default suffix when file path contains dot
  * QLineEdit: account for the placeholderText when computing lineRect
  * QFileDialog::saveFileContent crashes on accept
  * QCompleter: QCompleter unexpectedly changes QLineEdit text
  * Fix build error on iOS with the configure option -qtnamespace
  * Draw the cursor considering the descent is 0
  * Remove pure-virtual-signals.h include from tst_moc.cpp
  * plugins: image formats - fix odr violation
  * dbus: Fix typos
  * qwindowsdialoghelpers: Fix typo in documentation
  * QTableView: Document the customizations applied to QHeaderView
  * Unicodetools: compile
  * eglfs_x11: Fix running flag linkage
  * qcompilerdetection.h: add Q_CC_{GNU,MSVC,CLANG}_ONLY macros
  * Fix CMake warning about "missing closing ' quote"
  * Fix alignment of next/prev links in offline style
  * QtDBus: includemocs
  * Image Plugins: includemocs(-ish)
  * QtGui: includemocs
  * QXcbNativeInterface: remove unused field m_sysTraySelectionAtom
  * Windows QPA: Fix slowdown with large table/tree views with accessibility
  * Macstyle: fix the text color on the disabled button
  * QMacStyle: fix tool buttons (in checked mode)
  * QTeamCityLogger: fix .arg() placeholder injection
  * QAbstractTestLogger: disable copying
  * Fix errorMessageFromComError()
  * QtNetwork: includemocs
  * AppleUnifiedLogger: Remove manually managed os_log_t cache
  * examples: add WindowStaysOnBottomHint into preview text
  * QSharedPointer: Use matching new/delete
  * QIbusPlatformInputContextPlugin: includemocs
  * QGtk3ThemePlugin: includemocs
  * QTuioTouchPlugin: includemocs
  * QtWidgets: includemocs v2022
  * QMYSQLDriverPlugin: includemocs
  * QtDeviceDiscoverySupportPrivate: includemocs
  * QLinuxFbIntegrationPlugin: includemocs
  * QtPrintSupport: includemocs
  * QSQLiteDriverPlugin: includemocs
  * QtFbSupportPrivate: includemocs
  * QXdgDesktopPortalThemePlugin: includemocs
  * QtTest: includemocs
  * QComposePlatformInputContextPlugin: includemocs
  * QtSql: includemocs
  * QVncIntegrationPlugin: includemocs
  * Fix backingstore fractional DPR glitches for widgets in child windows
  * Include &lt;limits&gt; where std::numeric_limits is used
  * QtInputSupportPrivate: includemocs
  * Document the default value of QSFPM::sortOrder()
  * Better document how to enable sorting in QSPFM
  * Correct documentation of INI format's loss of type information
  * Android: add missing properties in AndroidManifest.xml
  * Fix assertion failure when parsing a doubly-invalid date-time text
  * Windows QPA: Correct mistake when calculating minmaxinfo
  * Android: replace ndk.dir with android.ndkVersion in build.gradle
  * Android: remove the old copy of gradle.properties after reading it
  * CMake Android Support: Fix signing of APKs
  * Android: fix A11Y object description
  * macOS: Fix warning about comparing different types in QCocoaScreen::isOnline
  * Fix qmake build on FreeBSD
  * Update documentation of enum Qt::DockWidgetArea
  * xcb: recreate xcb window under some conditions
  * objc_namespace: Add support for universal binaries
  * objc_namespace: Fix misspelled argument for silencing output
  * objc_namespace: Update parsing logic to account for otool changes
  * Blacklist passwordAuth for Ubuntu 20.04
  * Android: wrap QAndroidInputContext's m_focusObject in a QPointer
  * Fix compilation with GCC 12 (and on Fedora 35 and newer)
  * Chip example: fix an accidental bool-&gt;int conversion when using PMF connections
  * qmake: Add support for C++23
  * Android: use BCP 47 tag to create a correct Locale for QTimeZone::displayName()
  * QDateTime: fix adjusted datetime handling
  * Fix crash in tst_qmltc_examples on Android
  * macOS: Remove dead code for focus ring handling in Mac style
  * Detach for colortransforms of indexed formats
  * tst_QTcpSocket::connectToHostError - handle possible timeouts
  * CoreText: Avoid populating font family aliases if family was populated
  * Graphicsview: Avoid background clearing glitches under fractional DPR
  * Windows QPA: Avoid slowdown with UI Automation name change notification
  * Windows QPA: Avoid sending accessibility notifications before activation
  * Windows: Fix potential crash when retrieving default printer
  * Make Ubuntu with its non-standard security level happy
  * Android: Blacklist failing tests on tst_QGraphicsProxyWidget
  * Update LA 4.4.1
  * iOS A11Y: Set more accessibilityTraits
  * QNX: Fix compiler warning by when FEATURE_clipboard is not enabled
  * Document that native file dialogs might not show a title
  * Doc: Remove mentionings of overflows from QElapsedTimer
  * QTextMarkdownImporter: don't apply text char format to list item block
- Commits dropped by the rebase:
  * QBuffer: add missing &lt;limits&gt; include
  * Fix developer build</changelog>
  <changelog author="gmbr3@opensuse.org" date="1687953600">- Change %_libqt5_libexecdir to %_libexecdir/qt5 (bsc#1174075)</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch icu-devel requires to pkgconfig to allow switching libicu
  versions</changelog>
  <changelog author="fvogt@suse.com" date="1695902401">- Update to version 5.15.10+kde159 (bsc#1214327, CVE-2023-37369):
  * Fix CVE-2023-43114
  * QMimeDatabase: fix detection of pattern conflict in different prefixes
  * Fix highdpi conversion of QTabletEvent coordinates on xcb
  * widget: set WA_X11NetWmWindowType* after xcb window was created
  * Fix crash when setting override cursor on multiple clients
  * QAccessibleWidget: Remove pointless ZWSP in warning message
  * Android A11Y: Fix deadlock in QtAndroidAccessibility::runInObjectContext()
  * Correctly parse non BMP char refs in the sax parser
  * Clear the _X version of alongside the enum deprecator
  * Fix UB (signed char passed to &lt;cctype&gt; function)
  * Qt3DRender: includemocs
  * Fix capitalization error in auto-generated qdbusmacros.h include
  * QColorDialog: Ignore mouse move events when no mouse button is pressed
  * QHostInfo: fix remaining slotObj leaks
  * QXmlStreamReader: Raise error on unexpected tokens (CVE-2023-38197,
    QTBUG-92113, QTBUG-95188, bsc#1213326)
  * QTextLayout: Reconsider cursor drawing on TextObject
  * Ensure consistent cursor width under fractional scaling
  * Fix QTextEdit cursor rectangle vertical positioning
  * Return 0 in QWindow::winId in case of failed platform window creation
  * Doc: note QWindow::winId() will cause platform window creation
  * QSslDiffieHellmanParameters: fix mem-leak
  * QHostInfo: fix leaking slot object
  * Make sure we don't count down past 0 QT_FATAL_CRITICALS
  * QLogging: DRY isFatal(QtMsgType)
  * tst_QXmlStream: remove unneeded _ba UDLs
  * Fix typo in QXmlStreamReader error message
  * QXmlStreamReader: make fastScanName() indicate parsing status to callers
  * QXmlStreamReader: change fastScanName() to take a Value*
  * Fix Croatia's currency
  * SSL: upgrade the default DH parameters</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1696593600">- Update to version 5.15.11+kde134, rebased upstream:
  * Revert "Windows QPA: Add support to UiaRaiseNotificationEvent()"
  * FileChooser portal: Make sure filter.name is not empty
  * QPersistentModelIndex: fix UB (op&lt; on unrelated pointers)
  * Avoid crash when keysymToQtKey(keysym, Qt::ControlModifier) is called
  * a11y atspi: translate coords for GetOffsetAtPoint the right way
  * a11y atspi: Take dialog into account as top-level window
  * a11y atspi: Fix incorrect use of x instead of y position
  * macOS: Handle asynchronous deminiaturizing of windows
  * QTranslator: generalize a UNIX-only path
  * iOS, input panel: be more careful before enabling QIOSKeyboardListener
  * Android: Fix flickering on window resize and show keyboard
  * Android A11Y: Check for active surface before calling into native code
  * xcb: Delete touch points without target windows
  * Blacklist 1 tests in tst_QDBusConnection on ubuntu-20.04
  * Fix CMake builds without ANDROID_SDK
  * Blacklist 2 tests in tst_Http2 on ubuntu-20.04
  * Blacklist 1 tests in tst_QSqlQuery on macos
  * Defer creating the special shaders in the texture blitter
  * tst_QSslSocket::serverCipherPreferencies - fix for OpenSSL v3
  * QTemporaryFile: document rename() differences from QFile
  * Doc: 3rd party: Fix reference to FreeType LICENSE.txt
  * Update bundled libjpeg-turbo to version 2.1.4
  * tst_QSsSocket: fix verifyClientCertificate with OpenSSL 3
  * tst_QSslSocket: regenerate certificate used for setLocalCertificateChain
  * tst_QSslSocket::protocolServerSide - make it work with OpenSSL v3
  * tst_QSslSocket::oldErrorsOnSocketReuse - make it work with OpenSSL v3
  * Update zconf.h prefixes to match zlib v1.2.12 update
  * xcb: fix D&amp;D in same xembed client
  * xcb: use global coordinates for position of D&amp;D for xembed client
  * Doc: Update QMetaType::metaObject() descriptions
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 22.04
  * BLACKLIST tst_qfont for Ubuntu 22.04
  * BLACKLIST tst_QMenuBar::check_menuPosition for Ubuntu 22.04
  * tst_QDtls::verifyClientCertficiate - update certs for OpenSSL v3
  * QSslCertificate::toText(): add a file to compare against
  * Fix the spelling of the word "combination"
  * tst_QSslCertificate::pkcs12 - skip the test if OpenSSL version &gt;= 3
  * Android A11Y: Fix TalkBack scrolling behavior
  * Android A11Y: Notify android about scroll events
  * QCocoaDrag: don't add pasteboard items with non-absolute URLs
  * QDirPrivate: pass input QList by cref
  * tst_qbytearray: remove qCompress_data for QT_NO_COMPRESS
  * QDeviceDiscoveryUDev: use NSDMI
  * QAuthenticator: Fix crash when using NTLM / Negotiate
  * Provide a native interface instance in minimal platform plugin
  * Android: document the supported clipboard mimetypes
  * Windows: Account for not finding child windows when calling ChildWindowFromPointEx
  * iOS: Send touch events asynchronously to avoid deadlocking UIKit event loop
  * Disable bitcode for iOS
  * macOS: Ignore deprecation for ReleaseIconRef
  * BLACKLIST tst_QApplication::sendEventsOnProcessEvents for Ubuntu 22.04
  * Convert Latin1 to UTF-16 before passing to ICU API
  * Doc: Remove repetition of word in text
  * eglfs: Fix screen cloning when atomic is enabled
  * Fix printing of dpr&gt;1 images on Windows
  * QHttp: Fix handling of redirect loaded from cache
  * Doc: Fix return type of QLEInteger/QBEInteger post-in/decrement ops
  * qmake: Fix installation of separate debug info for plugins
  * iOS: ensure we close inputpanel after clearing focusobject
  * Convert Latin1 to UTF-16 before passing to ICU API
  * qputenv: defend against non-NUL-terminated QByteArray values
  * QFontSubset: remove unused glyphName() overload
  * Statically assert that the __mips_dsp code is only active on 32-bit
  * QGtk3Theme: Ensure gtk uses the same windowing system as Qt
  * tst_QFocusFrame: fix -Wparantheses
  * Sync Vulkan device features between QVulkanWindow and QRhi
  * SQLite: Update SQLite to v3.39.2
  * Update freetype to 2.12.1
  * corelib: Fix typos in documentation
  * QAtomicInteger docs: mention bool and char8_t as 8-bit types
  * qgraphicsitem_cast: replace 0 with nullptr
  * Doc: Hide weak overload template magic from documentation
  * Revert "QDateTime: fix adjusted datetime handling"
  * Fix select handles disappears issues
  * tst_QSslKey: prepare for the migration to OpenSSL v3
  * tst_qnetworkreply: replace server.pem/key pair
  * Disable unit testing setting up QTcpServer on special Apple interfaces
  * qmake/msbuild: Turn off "use full paths in diagnostics" by default
  * qmake/msbuild: Support all /DEBUG:xxx linker options
  * qmake/msbuild: Support all /LTCG:xxx options
  * Android A11Y: Add content change type to content change event
  * Enabler for fractional scaling of text in Qt Quick
  * macOS: Override logical DPI to 72
  * Add QDom internalSubset implementation
  * Fix tst_AndroidAssets, broken by recent changes on assets load speed
  * Android: Improve loading speed of individual assets
  * Darwin: Replace deprecated symbol kIOMasterPortDefault with equivalent
  * macOS: Remove code for handling logical DPI changes
  * Fix an incorrect invocation of llvm-readobj
  * macOS: Ignore deprecation for kOnSystemDisk icon domain
  * Copy only files that belongs to QML module
  * Android: fix wrong position of cursor handle and editpopup menu in split screen
  * Doc: Document QML_IMPORTS_PATH and QMLPATHS
  * Add the missing RCC_DIR to '.qrc' paths when generating deployment settings
  * Android: Fix the offset of the EditPopupMenu
  * xcb: update xkb_state mask as much as possible
  * QDom: Stop treating non-BMP characters as invalid
  * Android 13: Fix warnings on starting an application
  * qxkbcommon: Map Super/Hyper to Meta early enough to have an effect
  * macOS: Ignore update requests for offline displays
  * macOS: Avoid recursively updating screens when window moves screen
  * qmake/MinGW: Install separate debug info of DLLs next to the DLL
  * QMainWindow: fix restoreState() for toolbars
  * Make two QDT benchmarks data-driven and add more rows
  * Fix doc and example of QLoggingCategory::installCategory()
  * qmake: Document Xcode behavior when bundling translation files
  * Android: Fix missing import
  * QByteArray: more GCC 12 -Werror=array-bound whack-a-mole
  * CMake: Fix android sdk version propagation
  * Restore C++20-deprecated mixed-enum bitwise operators
  * Android: Fix ANR when QtService and QtActivity load in same process
  * Fix restart QtActivity
  * QArrayData::data(): do type-punning via quintptr, not char *
  * QIOSTextResponder: recreate responder upon reset
  * QSslSocket: make it work with OpenSSL v3
  * QFileSystemModelPrivate: de-inline ctor and dtor
  * Network: update Public Suffix List
  * macOS: Ensure proper quoting when calling otool in objc_namespace script
  * QKeySequence: Fix the one-off error in the mac glyph array size
- Commits dropped by the rebase:
  * Apply CVE-2022-27404-27405-27406-qtbase-5.15.diff
  * QArrayData: fix UB via reinterpret_cast (crash with FORTIFY_SOURCE=3)
  * Adapt for q_EVP_PKEY_base_id → q_EVP_PKEY_get_base_id rename in OpenSSL 3
  * Don't use a deprecated function if built/linked with OpenSSL v3</changelog>
  <changelog author="christophe@krop.fr" date="1696593601">- Enable the experimental native painting feature to improve
  remote desktop performances (boo#1214915)
  exporting QT_XCB_NATIVE_PAINTING is required to use the feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1697716800">- Update to version 5.15.11+kde138:
  * QLibraryPrivate: Actually merge load hints
  * QPluginLoader: report the right load hints
  * xkb: fix build with libxkbcommon 1.6.0 and later
  * a11y atspi: Map ButtonMenu role to AT-SPI equivalent</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1703851200">- Update to version 5.15.12+kde144, rebased upstream:
  * QMimeDatabase: handle buggy type definitions with circular inheritance
  * xcb: only set base size when it's valid
  * QPixmapCache: fix leaking of QStrings and Keys on clear()
  * OpenFile portal: do not use O_PATH fds
  * QSystemTrayIcon: properly disconnect old menu in setContextMenu()
  * Guard QTabBar against nested event processing during moving tabs
  * QDial: don't crash when min==max and setting a value != min &amp; max
  * QStandardItemModel: don't leak in mimeData()
  * SQL/MySQL: properly initialize variable
  * QWidgetTextControl: ignore invalid input method event
  * Update the LGPL license header
  * SQL/MySQL: fix handling of json column
  * Remove QMAKE_RANLIB and QMAKE_LINK_SHLIB from android/default_pre.prf
  * macOS: Fix less common writing systems on Catalina and later
  * Blacklist 1 tests in tst_QFtp on ubuntu-20.04
  * Update bundled libpng to version 1.6.39
  * Android: Fix signing of APKs that are generated when an AAB is also built
  * Update bundled zlib to version 1.2.13
  * doc: update the limitation of QSystemTrayIcon on X11
  * Blacklist 1 tests in tst_QTimer on ubuntu-20.04
  * Add benchmarks for QLocale number parsing
  * Add benchmarks for QString number parsing
  * Android: Fix incorrect fullscreen dimensions
  * Gtk3Theme: set XCURSOR_SIZE and XCURSOR_THEME for wayland sessions
  * xcb: Flush Display when processing xcb events
  * xcb: Add xlib wrapper for XFlush()
  * QHostAddress: Fix incorrect comparison against 'Any'
  * QSsl[OpenSSL/Android]: Fix hardcoded 1_1 suffix
  * BLACKLIST: tst_QApplication::sendEventsOnProcessEvents for RHEL 9.0
  * QMacStyle: do not set white color for grayed out button
  * Work round macOS's omission of en_DE from its own uiLanguages()
  * Suppress a deprecation warning in tst_QDateTime::toString_enumformat()
  * QJsonValue: fix incorrect to{Array,Object} when the value is empty
  * QGtk3Dialog: remove the #include for empty moc
  * Remove unneeded QWindow from QGtk3Dialog
  * tst_QSslSocket: Delete sslOptions
  * tst_QSslServer: Make the in-process server use TLS1.2
  * Android: fix Gradle warning about using enableUncompressedNativeLibs
  * Mention  limitation of QDir::drives() on Windows
  * QFileSystemEngine/Win: fix incorrect buffer size in currentPath()
  * Android: properly retrieve mime type of uri to for openUrl()
  * Android: Fix clipboard issue with urls
  * Android: Add a way to disable accessibility via an environment var
  * Update bundled libpng to version 1.6.38
  * QIOSMessageDialog::exec - work around 'windowsless' exec
  * QIosScreen: retain the right window
  * tst_Q{BitArray,ContiguousCache}: check not only count(), but size(), too
  * QIosTextResponder: stop using deprecated constants and type
  * qcompilerdetection.h: detect Coverity
  * Android: Fix Display.getRealMetrics deprecation
  * Fix broken Text rendering when noantialiased NativeRendering is used
  * forkfd: fix Clang 15 ATOMIC_VAR_INIT deprecation warning
  * eglfs: Add env.var. to disable the dedicated drmHandleEvent thread
  * doc: Don't put strings into QVector&lt;double&gt;
  * Remove focusProxyAndInputMethods from tst_QWidget
  * Bump version to 5.15.12
  * Update documentation of qWaitForWindowActive / qWaitForWindowExposed
  * QtHttp: Lower the severity of some log output
  * StyleSheetStyle: Fix color of placeholder texts in text edits
  * Android: Fix flickering on split screen mode
  * Update url to IAccessible2 Specification</changelog>
  <changelog author="alarrosa@suse.com" date="1704283200">- Update to version 5.15.12+kde147:
  * Http2: fix potential overflow in assemble_hpack_block()
    (bsc#1218413, CVE-2023-51714)
  * HPack: fix incorrect integer overflow check
  * HPack: fix a Yoda Condition</changelog>
  <changelog author="fvogt@suse.com" date="1708084800">- Update to version 5.15.12+kde151:
  * Improve KTX file reading memory safety (CVE-2024-25580, boo#1219996)
  * Revert "xcb: only set base size when it's valid"
  * Fix potential leak of QPropertyAnimation in QLineEditIconButton
  * QBitArray: correct inline keyword</changelog>
  <changelog author="alarrosa@suse.com" date="1720785600">- Add patch from upstream to fix a regression in the ODBC driver
  (bsc#1227513, QTBUG-112375):
  * 0001-QSQL-ODBC-fix-regression-trailing-NUL.patch
  * 0002-SQL-ODBC-Pass-correct-length-to-SQLColAttribute.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1722945600">- Add rebased upstream patch to delay any HTTP2 communication until
  encrypted() can be responded to (bsc#1227426, CVE-2024-39936):
  * 0001-HTTP2-Delay-any-communication-until-encrypted-can-be.patch
- Add upstream patch to fix a NULL pointer dereference via the
  function QXcbConnection::initializeAllAtoms() when there is
  anomalous behavior from the X server (bsc#1222120,
  CVE-2023-45935):
  * 0001-xcb-guard-a-pointer-before-usage.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756728000">- Add patch from upstream to fix a precondition violation in call
  to QByteArrayView::at() which can cause crashes (bsc#1243958,
  CVE-2025-5455):
  * 0001-qDecodeDataUrl-fix-precondition-violation-in-call-to.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756814400">- Add patch from upstream to initialize a member variable that was
  uninitialized under some circumstances:
  * 0001-QObjectPrivateSignal-initialize-all-members.patch
- Add patch from upstream to fix a crash when parsing a particular
  glyph in a particular font (QTBUG-124310):
  * 0001-Avoid-crash-in-font-distancefield-computation.patch
  * 0002-Fix-crash-in-font-distancefield-computation.patch
- Add patch from upstream to fix avoid repeatedly registering
  xsettings callbacks when switching cursor themes:
  * 0001-xcb-Avoid-repeatedly-registering-xsettings-callbacks-When.patch
- Add patch from upstream to check validity of RandR output info
  before using it (QTBUG-128906):
  * 0001-xcb-check-validity-of-RandR-output-info-before-using-it.patch
- Add patch from upstream to fix reparenting a window so it takes
  effect even if there are no other state changes to the window:
  * 0001-xcb-Sync-XCB-connection-after-reparenting-window.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756900800">- Add patch from upstream to fix a low performance when processing
  XML data in encodeText (bsc#1239896, CVE-2025-30348):
  * 0001-XML_QDom-speedup-encodeText.patch</changelog>
</package>
<package pkgid="431efdce0fb1d165b14b8e51cd0dc6aaa963c6d1c6430f2afd9e64c07c0e7855" name="libQt5Sql-private-headers-devel" arch="noarch">
  <version epoch="0" ver="5.15.12+kde151" rel="150600.3.9.1"/>
  <changelog author="fvogt@suse.com" date="1678968000">- Update to version 5.15.8+kde183:
  * Add nullptr guard in QStyleSheetStyle::drawPrimitive(PE_PanelLineEdit)
  * QAbstractItemView: don't access invalid indexes on copy-key
  * Apply CVE-2023-24607-qtbase-5.15.diff (CVE-2023-24607,
    bsc#1209616)
  * QXcbConnection::getTimestamp: do not return stale timestamp
  * QToolButton: Elide text when constraints prevent from showing whole text
  * correctly set up ref counting in QThreadPool::tryStart(std::function)
  * Do not set Qt::ToolTip flag for QShapedPixmapWindow
  * Fix deletion order also for QImageReader/Writer::setDevice()
  * Fix deletion order in QImageReader/Writer destructors
  * QNetworkReply: Fix typos in the documentation
  * Doc: Fix typo in the online documentation template
  * Doc: Link to page documenting Qt trademarks in the copyright footer
  * [doc] Fix typo in QBuffer::setBuffer() description
  * qwindowsdrag: Fix typo in documentation
  * openglblacklists: Fix typo in description
  * qxcbscreen: Fix typo in documentation
  * Fix typos in SQL driver documentation
  * qxcbwindow.cpp: Fix sign-compare and another warnings
  * QToolButton: reimplement the fix for QTBUG-95255
  * QSysInfo::prettyProductName(): Add macOS Ventura product name
  * QSysInfo::prettyProductName(): add missing macOS product names
  * xcb: correctly disconnect xsettings callbacks
  * ibus: add SetCursorLocationRelative in InputContext.xml</changelog>
  <changelog author="fvogt@suse.com" date="1680523200">- Update to version 5.15.8+kde185:
  * QFSFileEngine: fix overflow bug when using lseek64
  * Add QImage null check when QOpenGLTexture converts
- Add patch to fix return key handling in QGroupBox on GNOME (bsc#1209364):
  * 0001-Revert-QGnomeTheme-Allow-Space-Return-Enter-and-Sele.patch
- Add patch to fix XInput2 events in big-endian X11 clients (bsc#1204883, QTBUG-105157):
  * big-endian-scroll.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1682078400">- Update to version 5.15.9+kde151, rebased upstream:
  * QCborValue: fix incorrect to{Array,Map} when the value is empty
  * QMargins: fix a missing "full stop" in the docs
  * QLibrary: restore translated string
  * QLibrary: fix possible arg() format clobbering
  * iOS: Use python3 for enumerating test target devices
  * Android: Treat ACTION_CANCEL as TouchCancelEvent
  * Doc: Fix broken formatting
  * QFileSystemEngine: fix potential formatting error
  * QString::asprintf: check that passing field widths as arguments works
  * Backport recent QFlags tests
  * network: Fix typos in documentation
  * Fix accuracy with screen composition
  * Doc: Update documentation for QElapsedTimer's in Windows
  * Document that QStandardPath::findExecutable works with absolute paths
  * macOS: Use native resize cursors for diagonal resize
  * Fix clipped glyphs in text rendering of QGraphicsTextItem
  * Change comparison data type to fix int overflow
  * Add missing Q_WEAK_OVERLOAD definition
  * Update QFileInfo docs to mention macOS aliases
  * Distinguish macOS aliases from normal symbolic links
  * Windows QPA: Fix frameless maximize on secondary screens
  * Rewrite tst_qdataurl as a data-driven test
  * Fix compilation for wasm
  * QIOSFileDialog/QIOSDocumentPickerController - handle dismissed view controller
  * Fix QDockWidget's dock area permissions after hovering
  * Fix C++20 ambiguous relational operators between QJsonValue{,Ref}
  * Android: make sure that orientationChange is reported after resize
  * Android: set all QScreen's geometry-related parameters together
  * Blacklist: test cases blacklisted in tst_QDBusConnection:
  * wasm:  fix issue with passing username/password to network request
  * macOS: Pass multi arch flags when linking qmake
  * QCocoaFileDialogHelper: Always enable symlinks and aliases to directories
  * Android: terminate argv passed to main() with nullptr
  * Update bundled libjpeg-turbo to version 2.1.3
  * ANGLE: Load the DirectX libraries from the system path directly
  * SQLite: Update SQLite to v3.37.2
  * Fix compiler warnings about unused parameters
  * Fix getsockopt option_value initial initialization
  * Http2: Fix redirect-handling
  * Android A11Y: Fix value rounding
  * Android A11Y: Announce value together with element name when focused
  * Android A11Y: handle valueChanged events
  * tst_QSystemSemaphore: give proper path to test-helper
  * QNX: Silence compiler warning by initializing variable
  * Update LICENSE.QT-LICENSE-AGREEMENT
  * winrt appxmanifest: Properly replace VCLibs version for newer MSVC versions
  * QAbstractSocket: Don't pretend pause and resume is a stack
  * Gui: test also depends for clipboard feature
  * QDesktopServices: deprecate destroying URL handlers w/o explicit unsetUrlHandler()
  * macOS: Respect QMAKE_APPLE_DEVICE_ARCHS when building qmake
  * HTTP: Make redirect response parsing more generic
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 20.04
  * Android A11Y: populate child elements when constructing node info
  * Fix issue where readyRead() could happen after disconnected()
  * QStringView: add missing constexpr so we can use is_constant_evaluated
  * Use Android's View.generateViewId() for generating ids for views/surfaces
  * Remove documentation of non-existing QAccessible state
  * Doc: Fix snippet to match actual QFileInfo behavior
  * Android: Re-focus focused accessibility node after orientation change
  * Android A11Y: execute C++ code on main Qt thread
  * Android: extract parentId for hidden object in advance
  * xcb: Show valuator atom names properly in categorized logging
  * Android: replace stacktrace with debug message in search for setService
  * Better document attaching a QFutureWatcher to a started QFuture
  * doc: Update GenericDataLocation location on iOS
  * BLACKLIST test_Gestures tests for RHEL-8.4
  * QPlainTestLogger: do not print "failure location" if there's no failure
  * QAbstractItemView: do not access invalid model indices (3/N)
  * Win32: always allow the event loop to be woken up by posted events
  * rhi: d3d11: Use __uuidof where we can
  * Don't QEXPECT_FAIL tst_QLineEdit::testQuickSelectionWithMouse on macOS ARM
  * Network: Emit authenticationRequired when using Ntlm
  * testlib: Disable window restoration on macOS in a non-persistent way
  * QAbstractItemView: do not access invalid model indices (2/N)
  * QAbstractItemView: do not access invalid model indices (1/N)
  * QAbstractItemView: code tidies
  * Update float16 part of TestLib selftest
  * QGuiApplication: constant-initialize lastCursorPosition
  * Blacklist tst_QFileSystemWatcher::signalsEmittedAfterFileMoved on all Windows versions
  * [Android]: Handle the screen name, modes and refreshRate properly
  * QVersionNumber: remove the "pure" attribute from commonPrefix()
  * QEvent: initialize the static userEventTypeRegistry constexprly
  * Let QXcbGlxWindow::createVisual fallback to QXcbWindow::createVisual
  * Android A11Y: fix content update notification when object is hidden
  * Android: explicitly remove accessibility focus when element is hidden
  * BLACKLIST tst_qfont for Red Hat 8.4 and Ubuntu 20.04
  * QtCore: includemocs
  * Fix memory leak in QtConcurrent::run when called with a NULL QThreadPool
  * INTEGRITY: Prevent deletion of virtual functions
  * QMake: replace a Q_ASSERT() with a Q_UNREACHABLE()
  * QTransform benchmark: measure what was promised
  * QStaticByteArrayMatcher: add a useful comment
  * QMacStyle: use the 'momentary push in' type for push buttons
  * qopengl.h: Move C header #include(s) out of the QT_NAMESPACE
  * Enable all supported 1.0 device features in QVulkanWindow
  * Fix queue passed to vkQueuePresent
  * QFusionStyle: don't draw an invalid outline for up/down buttons
  * Doc: Make QListIterator snippets more robust
  * QVersionNumber: don't detach() in rvalue QList/QVector ctor
  * QNetworkRequest: Document how Qt handles 301 and 302 status codes
  * Convert date-time to UTC before claiming it's in GMT
  * Remove execute permission from XML files
  * Add test case for style sheet selectors for enum properties
  * FreeType: allow falling back to synthesized bold if desired
  * Fix an assertion failure in massageAdjustedDateTime()
  * Relax tst_qvulkan::vulkanVersionRequest to make it compatible with 1.1
  * Doc: Replace "C:Documents and Settings" paths
  * QOrderedMutexLocker: fix compilation with C++11
  * QHttpNetworkConnection: Always set proxy settings to all channels
  * Add a markdown writer test for a checklist item ending with `code`
  * Use QTextCharFormat::fontFixedPitch to remember Markdown backtick spans
  * QWizardLayoutInfo: make == and != operators const
  * Revert "Android: Fix screen flicker issues"
  * macOS: Handle momentum scroll NSEventPhaseBegan when scroll had ended
  * SQLite: Update SQLite to v3.37.0
  * Update copyright year to 2022
  * QTzTimeZonePrivate: use ctor delegation instead of init()
  * QTzTimeZonePrivate: fix permanently-detaching m_icu
  * tst_QGraphicsView: fix memleak
  * Doc: Update external links to Qt Creator Manual
  * macOS: assume an unidentified tablet device is a stylus
  * tst_QItemModel: fix memleaks
  * tst_qanimationgroup: fix memleaks
  * QAbstractAnimation: add missing forward-declaration
  * [doc] QCoreApplication::installTranslator() doesn't take ownership
  * tst_qtranslator: fix memleak
  * QTestData: fix streaming of u8 string literals in C++20 mode
  * QThread/Unix: extract duplicate code
  * QWindowPrivate: fix inconsistent inline on some methods
  * tst_QStringList: check that join(u'0') embeds NULs
  * macOS: Sanitize scroll deltas for NSEventPhaseCancelled
  * tst_qsharedmemory: skip readOnly() test under asan
  * QXmlStreamReader: update test distribution
  * QZipReader: update to unzip partly broken archives
  * Deliver context menu event with correct coordinates to widgets in popups
  * QTextHtmlParser: fix prefix lookahead and html comments
  * QtConcurrent::run crashes on program exit
  * tst_QPropertyAnimation: fix leaks occurring under normal operation
  * tst_QPropertyAnimation: fix wrong comment
  * QLogging: fix potential missing NUL-terminator when calling OutputDebugString
  * Fix qt_scrollRectInImage when scrolling outside of the image
- Commits dropped by the rebase:
  * Fix compile with Qt5: Use QString::mid instead of QString::sliced
  * Restore C++11 compatibility after e8b9f4c28d3ab5e960dc54f2dc0c4b749b0b50e0
  * QDateTime: Don't require c++17</changelog>
  <changelog author="fvogt@suse.com" date="1683633600">- Amend patch to fix mouse grabbing as well (bsc#1211024):
  * big-endian-scroll.patch</changelog>
  <changelog author="fvogt@suse.com" date="1684929600">- Update to version 5.15.9+kde154:
  * Hsts: match header names case insensitively (CVE-2023-32762,
    QTBUG-113392, bsc#1211797)
  * Fix specific overflow in qtextlayout (CVE-2023-32763,
    QTBUG-113337, bsc#1211798)
  * QDnsLookup/Unix: make sure we don't overflow the buffer
    (CVE-2023-33285, boo#1211642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1686657600">- Update to version 5.15.10+kde129, rebased upstream:
  * Ssl: Copy the on-demand cert loading bool from default config
  * Schannel: Reject certificate not signed by a configured CA certificate (boo#1211994, CVE-2023-34410)
  * qnetworkreplyfileimpl_p.h: fix header guard name
  * Revert "Draw the cursor considering the descent is 0"
  * Use pkgconfig in order to find libproxy configuration
  * Upgrade PCRE2 to 10.40
  * Android A11Y: handle LocationChanged event only for focused element
  * Port binary JSON to new special integer bitfields
  * INTEGRITY: enable C99 globally
  * QObject: mark two error reporting functions COLD
  * Endian: Provide special integer bitfield unions
  * Android: set useLegacyPackaging to true in build.gradle
  * QWidgetTextControl: port to new-style connects (faster)
  * Sync qxmlstream.g with qxmlstreamparser_p.h [1/2]: switched lines
  * tst_QNetworkReply try stabilize autoDeleteReplies tests
  * Remove duplicated include for &lt;limits&gt;
  * Fix recursion crash when calling setStyleSheet with `qproperty-styleSheet`
  * qwindowsxpstyle: Fix typos in documentation
  * Correct prefix reported for end element in QXmlStreamReader
  * Android A11Y: Add supported role infos to A11yNodeInfo
  * Fix handling of DateTime values in QSettings
  * Fix off-by-one for "typically" lowest value INT_MIN
  * xml: Fix typos in documentation
  * QWindowsWindow: Fix typo in documentation
  * includemocs (updated script)
  * widgets: Fix typos in documentation
  * cocoa: Fix typo in debug messages
  * Only scroll QMenu when there is a valid active action
  * QTimer: Add note in documentation
  * Fix QListView assert when the last row is moved in IconMode
  * QFileDialog: Fix adding default suffix when file path contains dot
  * QLineEdit: account for the placeholderText when computing lineRect
  * QFileDialog::saveFileContent crashes on accept
  * QCompleter: QCompleter unexpectedly changes QLineEdit text
  * Fix build error on iOS with the configure option -qtnamespace
  * Draw the cursor considering the descent is 0
  * Remove pure-virtual-signals.h include from tst_moc.cpp
  * plugins: image formats - fix odr violation
  * dbus: Fix typos
  * qwindowsdialoghelpers: Fix typo in documentation
  * QTableView: Document the customizations applied to QHeaderView
  * Unicodetools: compile
  * eglfs_x11: Fix running flag linkage
  * qcompilerdetection.h: add Q_CC_{GNU,MSVC,CLANG}_ONLY macros
  * Fix CMake warning about "missing closing ' quote"
  * Fix alignment of next/prev links in offline style
  * QtDBus: includemocs
  * Image Plugins: includemocs(-ish)
  * QtGui: includemocs
  * QXcbNativeInterface: remove unused field m_sysTraySelectionAtom
  * Windows QPA: Fix slowdown with large table/tree views with accessibility
  * Macstyle: fix the text color on the disabled button
  * QMacStyle: fix tool buttons (in checked mode)
  * QTeamCityLogger: fix .arg() placeholder injection
  * QAbstractTestLogger: disable copying
  * Fix errorMessageFromComError()
  * QtNetwork: includemocs
  * AppleUnifiedLogger: Remove manually managed os_log_t cache
  * examples: add WindowStaysOnBottomHint into preview text
  * QSharedPointer: Use matching new/delete
  * QIbusPlatformInputContextPlugin: includemocs
  * QGtk3ThemePlugin: includemocs
  * QTuioTouchPlugin: includemocs
  * QtWidgets: includemocs v2022
  * QMYSQLDriverPlugin: includemocs
  * QtDeviceDiscoverySupportPrivate: includemocs
  * QLinuxFbIntegrationPlugin: includemocs
  * QtPrintSupport: includemocs
  * QSQLiteDriverPlugin: includemocs
  * QtFbSupportPrivate: includemocs
  * QXdgDesktopPortalThemePlugin: includemocs
  * QtTest: includemocs
  * QComposePlatformInputContextPlugin: includemocs
  * QtSql: includemocs
  * QVncIntegrationPlugin: includemocs
  * Fix backingstore fractional DPR glitches for widgets in child windows
  * Include &lt;limits&gt; where std::numeric_limits is used
  * QtInputSupportPrivate: includemocs
  * Document the default value of QSFPM::sortOrder()
  * Better document how to enable sorting in QSPFM
  * Correct documentation of INI format's loss of type information
  * Android: add missing properties in AndroidManifest.xml
  * Fix assertion failure when parsing a doubly-invalid date-time text
  * Windows QPA: Correct mistake when calculating minmaxinfo
  * Android: replace ndk.dir with android.ndkVersion in build.gradle
  * Android: remove the old copy of gradle.properties after reading it
  * CMake Android Support: Fix signing of APKs
  * Android: fix A11Y object description
  * macOS: Fix warning about comparing different types in QCocoaScreen::isOnline
  * Fix qmake build on FreeBSD
  * Update documentation of enum Qt::DockWidgetArea
  * xcb: recreate xcb window under some conditions
  * objc_namespace: Add support for universal binaries
  * objc_namespace: Fix misspelled argument for silencing output
  * objc_namespace: Update parsing logic to account for otool changes
  * Blacklist passwordAuth for Ubuntu 20.04
  * Android: wrap QAndroidInputContext's m_focusObject in a QPointer
  * Fix compilation with GCC 12 (and on Fedora 35 and newer)
  * Chip example: fix an accidental bool-&gt;int conversion when using PMF connections
  * qmake: Add support for C++23
  * Android: use BCP 47 tag to create a correct Locale for QTimeZone::displayName()
  * QDateTime: fix adjusted datetime handling
  * Fix crash in tst_qmltc_examples on Android
  * macOS: Remove dead code for focus ring handling in Mac style
  * Detach for colortransforms of indexed formats
  * tst_QTcpSocket::connectToHostError - handle possible timeouts
  * CoreText: Avoid populating font family aliases if family was populated
  * Graphicsview: Avoid background clearing glitches under fractional DPR
  * Windows QPA: Avoid slowdown with UI Automation name change notification
  * Windows QPA: Avoid sending accessibility notifications before activation
  * Windows: Fix potential crash when retrieving default printer
  * Make Ubuntu with its non-standard security level happy
  * Android: Blacklist failing tests on tst_QGraphicsProxyWidget
  * Update LA 4.4.1
  * iOS A11Y: Set more accessibilityTraits
  * QNX: Fix compiler warning by when FEATURE_clipboard is not enabled
  * Document that native file dialogs might not show a title
  * Doc: Remove mentionings of overflows from QElapsedTimer
  * QTextMarkdownImporter: don't apply text char format to list item block
- Commits dropped by the rebase:
  * QBuffer: add missing &lt;limits&gt; include
  * Fix developer build</changelog>
  <changelog author="gmbr3@opensuse.org" date="1687953600">- Change %_libqt5_libexecdir to %_libexecdir/qt5 (bsc#1174075)</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch icu-devel requires to pkgconfig to allow switching libicu
  versions</changelog>
  <changelog author="fvogt@suse.com" date="1695902401">- Update to version 5.15.10+kde159 (bsc#1214327, CVE-2023-37369):
  * Fix CVE-2023-43114
  * QMimeDatabase: fix detection of pattern conflict in different prefixes
  * Fix highdpi conversion of QTabletEvent coordinates on xcb
  * widget: set WA_X11NetWmWindowType* after xcb window was created
  * Fix crash when setting override cursor on multiple clients
  * QAccessibleWidget: Remove pointless ZWSP in warning message
  * Android A11Y: Fix deadlock in QtAndroidAccessibility::runInObjectContext()
  * Correctly parse non BMP char refs in the sax parser
  * Clear the _X version of alongside the enum deprecator
  * Fix UB (signed char passed to &lt;cctype&gt; function)
  * Qt3DRender: includemocs
  * Fix capitalization error in auto-generated qdbusmacros.h include
  * QColorDialog: Ignore mouse move events when no mouse button is pressed
  * QHostInfo: fix remaining slotObj leaks
  * QXmlStreamReader: Raise error on unexpected tokens (CVE-2023-38197,
    QTBUG-92113, QTBUG-95188, bsc#1213326)
  * QTextLayout: Reconsider cursor drawing on TextObject
  * Ensure consistent cursor width under fractional scaling
  * Fix QTextEdit cursor rectangle vertical positioning
  * Return 0 in QWindow::winId in case of failed platform window creation
  * Doc: note QWindow::winId() will cause platform window creation
  * QSslDiffieHellmanParameters: fix mem-leak
  * QHostInfo: fix leaking slot object
  * Make sure we don't count down past 0 QT_FATAL_CRITICALS
  * QLogging: DRY isFatal(QtMsgType)
  * tst_QXmlStream: remove unneeded _ba UDLs
  * Fix typo in QXmlStreamReader error message
  * QXmlStreamReader: make fastScanName() indicate parsing status to callers
  * QXmlStreamReader: change fastScanName() to take a Value*
  * Fix Croatia's currency
  * SSL: upgrade the default DH parameters</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1696593600">- Update to version 5.15.11+kde134, rebased upstream:
  * Revert "Windows QPA: Add support to UiaRaiseNotificationEvent()"
  * FileChooser portal: Make sure filter.name is not empty
  * QPersistentModelIndex: fix UB (op&lt; on unrelated pointers)
  * Avoid crash when keysymToQtKey(keysym, Qt::ControlModifier) is called
  * a11y atspi: translate coords for GetOffsetAtPoint the right way
  * a11y atspi: Take dialog into account as top-level window
  * a11y atspi: Fix incorrect use of x instead of y position
  * macOS: Handle asynchronous deminiaturizing of windows
  * QTranslator: generalize a UNIX-only path
  * iOS, input panel: be more careful before enabling QIOSKeyboardListener
  * Android: Fix flickering on window resize and show keyboard
  * Android A11Y: Check for active surface before calling into native code
  * xcb: Delete touch points without target windows
  * Blacklist 1 tests in tst_QDBusConnection on ubuntu-20.04
  * Fix CMake builds without ANDROID_SDK
  * Blacklist 2 tests in tst_Http2 on ubuntu-20.04
  * Blacklist 1 tests in tst_QSqlQuery on macos
  * Defer creating the special shaders in the texture blitter
  * tst_QSslSocket::serverCipherPreferencies - fix for OpenSSL v3
  * QTemporaryFile: document rename() differences from QFile
  * Doc: 3rd party: Fix reference to FreeType LICENSE.txt
  * Update bundled libjpeg-turbo to version 2.1.4
  * tst_QSsSocket: fix verifyClientCertificate with OpenSSL 3
  * tst_QSslSocket: regenerate certificate used for setLocalCertificateChain
  * tst_QSslSocket::protocolServerSide - make it work with OpenSSL v3
  * tst_QSslSocket::oldErrorsOnSocketReuse - make it work with OpenSSL v3
  * Update zconf.h prefixes to match zlib v1.2.12 update
  * xcb: fix D&amp;D in same xembed client
  * xcb: use global coordinates for position of D&amp;D for xembed client
  * Doc: Update QMetaType::metaObject() descriptions
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 22.04
  * BLACKLIST tst_qfont for Ubuntu 22.04
  * BLACKLIST tst_QMenuBar::check_menuPosition for Ubuntu 22.04
  * tst_QDtls::verifyClientCertficiate - update certs for OpenSSL v3
  * QSslCertificate::toText(): add a file to compare against
  * Fix the spelling of the word "combination"
  * tst_QSslCertificate::pkcs12 - skip the test if OpenSSL version &gt;= 3
  * Android A11Y: Fix TalkBack scrolling behavior
  * Android A11Y: Notify android about scroll events
  * QCocoaDrag: don't add pasteboard items with non-absolute URLs
  * QDirPrivate: pass input QList by cref
  * tst_qbytearray: remove qCompress_data for QT_NO_COMPRESS
  * QDeviceDiscoveryUDev: use NSDMI
  * QAuthenticator: Fix crash when using NTLM / Negotiate
  * Provide a native interface instance in minimal platform plugin
  * Android: document the supported clipboard mimetypes
  * Windows: Account for not finding child windows when calling ChildWindowFromPointEx
  * iOS: Send touch events asynchronously to avoid deadlocking UIKit event loop
  * Disable bitcode for iOS
  * macOS: Ignore deprecation for ReleaseIconRef
  * BLACKLIST tst_QApplication::sendEventsOnProcessEvents for Ubuntu 22.04
  * Convert Latin1 to UTF-16 before passing to ICU API
  * Doc: Remove repetition of word in text
  * eglfs: Fix screen cloning when atomic is enabled
  * Fix printing of dpr&gt;1 images on Windows
  * QHttp: Fix handling of redirect loaded from cache
  * Doc: Fix return type of QLEInteger/QBEInteger post-in/decrement ops
  * qmake: Fix installation of separate debug info for plugins
  * iOS: ensure we close inputpanel after clearing focusobject
  * Convert Latin1 to UTF-16 before passing to ICU API
  * qputenv: defend against non-NUL-terminated QByteArray values
  * QFontSubset: remove unused glyphName() overload
  * Statically assert that the __mips_dsp code is only active on 32-bit
  * QGtk3Theme: Ensure gtk uses the same windowing system as Qt
  * tst_QFocusFrame: fix -Wparantheses
  * Sync Vulkan device features between QVulkanWindow and QRhi
  * SQLite: Update SQLite to v3.39.2
  * Update freetype to 2.12.1
  * corelib: Fix typos in documentation
  * QAtomicInteger docs: mention bool and char8_t as 8-bit types
  * qgraphicsitem_cast: replace 0 with nullptr
  * Doc: Hide weak overload template magic from documentation
  * Revert "QDateTime: fix adjusted datetime handling"
  * Fix select handles disappears issues
  * tst_QSslKey: prepare for the migration to OpenSSL v3
  * tst_qnetworkreply: replace server.pem/key pair
  * Disable unit testing setting up QTcpServer on special Apple interfaces
  * qmake/msbuild: Turn off "use full paths in diagnostics" by default
  * qmake/msbuild: Support all /DEBUG:xxx linker options
  * qmake/msbuild: Support all /LTCG:xxx options
  * Android A11Y: Add content change type to content change event
  * Enabler for fractional scaling of text in Qt Quick
  * macOS: Override logical DPI to 72
  * Add QDom internalSubset implementation
  * Fix tst_AndroidAssets, broken by recent changes on assets load speed
  * Android: Improve loading speed of individual assets
  * Darwin: Replace deprecated symbol kIOMasterPortDefault with equivalent
  * macOS: Remove code for handling logical DPI changes
  * Fix an incorrect invocation of llvm-readobj
  * macOS: Ignore deprecation for kOnSystemDisk icon domain
  * Copy only files that belongs to QML module
  * Android: fix wrong position of cursor handle and editpopup menu in split screen
  * Doc: Document QML_IMPORTS_PATH and QMLPATHS
  * Add the missing RCC_DIR to '.qrc' paths when generating deployment settings
  * Android: Fix the offset of the EditPopupMenu
  * xcb: update xkb_state mask as much as possible
  * QDom: Stop treating non-BMP characters as invalid
  * Android 13: Fix warnings on starting an application
  * qxkbcommon: Map Super/Hyper to Meta early enough to have an effect
  * macOS: Ignore update requests for offline displays
  * macOS: Avoid recursively updating screens when window moves screen
  * qmake/MinGW: Install separate debug info of DLLs next to the DLL
  * QMainWindow: fix restoreState() for toolbars
  * Make two QDT benchmarks data-driven and add more rows
  * Fix doc and example of QLoggingCategory::installCategory()
  * qmake: Document Xcode behavior when bundling translation files
  * Android: Fix missing import
  * QByteArray: more GCC 12 -Werror=array-bound whack-a-mole
  * CMake: Fix android sdk version propagation
  * Restore C++20-deprecated mixed-enum bitwise operators
  * Android: Fix ANR when QtService and QtActivity load in same process
  * Fix restart QtActivity
  * QArrayData::data(): do type-punning via quintptr, not char *
  * QIOSTextResponder: recreate responder upon reset
  * QSslSocket: make it work with OpenSSL v3
  * QFileSystemModelPrivate: de-inline ctor and dtor
  * Network: update Public Suffix List
  * macOS: Ensure proper quoting when calling otool in objc_namespace script
  * QKeySequence: Fix the one-off error in the mac glyph array size
- Commits dropped by the rebase:
  * Apply CVE-2022-27404-27405-27406-qtbase-5.15.diff
  * QArrayData: fix UB via reinterpret_cast (crash with FORTIFY_SOURCE=3)
  * Adapt for q_EVP_PKEY_base_id → q_EVP_PKEY_get_base_id rename in OpenSSL 3
  * Don't use a deprecated function if built/linked with OpenSSL v3</changelog>
  <changelog author="christophe@krop.fr" date="1696593601">- Enable the experimental native painting feature to improve
  remote desktop performances (boo#1214915)
  exporting QT_XCB_NATIVE_PAINTING is required to use the feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1697716800">- Update to version 5.15.11+kde138:
  * QLibraryPrivate: Actually merge load hints
  * QPluginLoader: report the right load hints
  * xkb: fix build with libxkbcommon 1.6.0 and later
  * a11y atspi: Map ButtonMenu role to AT-SPI equivalent</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1703851200">- Update to version 5.15.12+kde144, rebased upstream:
  * QMimeDatabase: handle buggy type definitions with circular inheritance
  * xcb: only set base size when it's valid
  * QPixmapCache: fix leaking of QStrings and Keys on clear()
  * OpenFile portal: do not use O_PATH fds
  * QSystemTrayIcon: properly disconnect old menu in setContextMenu()
  * Guard QTabBar against nested event processing during moving tabs
  * QDial: don't crash when min==max and setting a value != min &amp; max
  * QStandardItemModel: don't leak in mimeData()
  * SQL/MySQL: properly initialize variable
  * QWidgetTextControl: ignore invalid input method event
  * Update the LGPL license header
  * SQL/MySQL: fix handling of json column
  * Remove QMAKE_RANLIB and QMAKE_LINK_SHLIB from android/default_pre.prf
  * macOS: Fix less common writing systems on Catalina and later
  * Blacklist 1 tests in tst_QFtp on ubuntu-20.04
  * Update bundled libpng to version 1.6.39
  * Android: Fix signing of APKs that are generated when an AAB is also built
  * Update bundled zlib to version 1.2.13
  * doc: update the limitation of QSystemTrayIcon on X11
  * Blacklist 1 tests in tst_QTimer on ubuntu-20.04
  * Add benchmarks for QLocale number parsing
  * Add benchmarks for QString number parsing
  * Android: Fix incorrect fullscreen dimensions
  * Gtk3Theme: set XCURSOR_SIZE and XCURSOR_THEME for wayland sessions
  * xcb: Flush Display when processing xcb events
  * xcb: Add xlib wrapper for XFlush()
  * QHostAddress: Fix incorrect comparison against 'Any'
  * QSsl[OpenSSL/Android]: Fix hardcoded 1_1 suffix
  * BLACKLIST: tst_QApplication::sendEventsOnProcessEvents for RHEL 9.0
  * QMacStyle: do not set white color for grayed out button
  * Work round macOS's omission of en_DE from its own uiLanguages()
  * Suppress a deprecation warning in tst_QDateTime::toString_enumformat()
  * QJsonValue: fix incorrect to{Array,Object} when the value is empty
  * QGtk3Dialog: remove the #include for empty moc
  * Remove unneeded QWindow from QGtk3Dialog
  * tst_QSslSocket: Delete sslOptions
  * tst_QSslServer: Make the in-process server use TLS1.2
  * Android: fix Gradle warning about using enableUncompressedNativeLibs
  * Mention  limitation of QDir::drives() on Windows
  * QFileSystemEngine/Win: fix incorrect buffer size in currentPath()
  * Android: properly retrieve mime type of uri to for openUrl()
  * Android: Fix clipboard issue with urls
  * Android: Add a way to disable accessibility via an environment var
  * Update bundled libpng to version 1.6.38
  * QIOSMessageDialog::exec - work around 'windowsless' exec
  * QIosScreen: retain the right window
  * tst_Q{BitArray,ContiguousCache}: check not only count(), but size(), too
  * QIosTextResponder: stop using deprecated constants and type
  * qcompilerdetection.h: detect Coverity
  * Android: Fix Display.getRealMetrics deprecation
  * Fix broken Text rendering when noantialiased NativeRendering is used
  * forkfd: fix Clang 15 ATOMIC_VAR_INIT deprecation warning
  * eglfs: Add env.var. to disable the dedicated drmHandleEvent thread
  * doc: Don't put strings into QVector&lt;double&gt;
  * Remove focusProxyAndInputMethods from tst_QWidget
  * Bump version to 5.15.12
  * Update documentation of qWaitForWindowActive / qWaitForWindowExposed
  * QtHttp: Lower the severity of some log output
  * StyleSheetStyle: Fix color of placeholder texts in text edits
  * Android: Fix flickering on split screen mode
  * Update url to IAccessible2 Specification</changelog>
  <changelog author="alarrosa@suse.com" date="1704283200">- Update to version 5.15.12+kde147:
  * Http2: fix potential overflow in assemble_hpack_block()
    (bsc#1218413, CVE-2023-51714)
  * HPack: fix incorrect integer overflow check
  * HPack: fix a Yoda Condition</changelog>
  <changelog author="fvogt@suse.com" date="1708084800">- Update to version 5.15.12+kde151:
  * Improve KTX file reading memory safety (CVE-2024-25580, boo#1219996)
  * Revert "xcb: only set base size when it's valid"
  * Fix potential leak of QPropertyAnimation in QLineEditIconButton
  * QBitArray: correct inline keyword</changelog>
  <changelog author="alarrosa@suse.com" date="1720785600">- Add patch from upstream to fix a regression in the ODBC driver
  (bsc#1227513, QTBUG-112375):
  * 0001-QSQL-ODBC-fix-regression-trailing-NUL.patch
  * 0002-SQL-ODBC-Pass-correct-length-to-SQLColAttribute.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1722945600">- Add rebased upstream patch to delay any HTTP2 communication until
  encrypted() can be responded to (bsc#1227426, CVE-2024-39936):
  * 0001-HTTP2-Delay-any-communication-until-encrypted-can-be.patch
- Add upstream patch to fix a NULL pointer dereference via the
  function QXcbConnection::initializeAllAtoms() when there is
  anomalous behavior from the X server (bsc#1222120,
  CVE-2023-45935):
  * 0001-xcb-guard-a-pointer-before-usage.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756728000">- Add patch from upstream to fix a precondition violation in call
  to QByteArrayView::at() which can cause crashes (bsc#1243958,
  CVE-2025-5455):
  * 0001-qDecodeDataUrl-fix-precondition-violation-in-call-to.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756814400">- Add patch from upstream to initialize a member variable that was
  uninitialized under some circumstances:
  * 0001-QObjectPrivateSignal-initialize-all-members.patch
- Add patch from upstream to fix a crash when parsing a particular
  glyph in a particular font (QTBUG-124310):
  * 0001-Avoid-crash-in-font-distancefield-computation.patch
  * 0002-Fix-crash-in-font-distancefield-computation.patch
- Add patch from upstream to fix avoid repeatedly registering
  xsettings callbacks when switching cursor themes:
  * 0001-xcb-Avoid-repeatedly-registering-xsettings-callbacks-When.patch
- Add patch from upstream to check validity of RandR output info
  before using it (QTBUG-128906):
  * 0001-xcb-check-validity-of-RandR-output-info-before-using-it.patch
- Add patch from upstream to fix reparenting a window so it takes
  effect even if there are no other state changes to the window:
  * 0001-xcb-Sync-XCB-connection-after-reparenting-window.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756900800">- Add patch from upstream to fix a low performance when processing
  XML data in encodeText (bsc#1239896, CVE-2025-30348):
  * 0001-XML_QDom-speedup-encodeText.patch</changelog>
</package>
<package pkgid="b08d0e16892220f87bcd974650ad6e31bdbe720078fc5a6dee4b958ba3894159" name="libQt5Sql5" arch="x86_64">
  <version epoch="0" ver="5.15.12+kde151" rel="150600.3.9.1"/>
  <changelog author="fvogt@suse.com" date="1678968000">- Update to version 5.15.8+kde183:
  * Add nullptr guard in QStyleSheetStyle::drawPrimitive(PE_PanelLineEdit)
  * QAbstractItemView: don't access invalid indexes on copy-key
  * Apply CVE-2023-24607-qtbase-5.15.diff (CVE-2023-24607,
    bsc#1209616)
  * QXcbConnection::getTimestamp: do not return stale timestamp
  * QToolButton: Elide text when constraints prevent from showing whole text
  * correctly set up ref counting in QThreadPool::tryStart(std::function)
  * Do not set Qt::ToolTip flag for QShapedPixmapWindow
  * Fix deletion order also for QImageReader/Writer::setDevice()
  * Fix deletion order in QImageReader/Writer destructors
  * QNetworkReply: Fix typos in the documentation
  * Doc: Fix typo in the online documentation template
  * Doc: Link to page documenting Qt trademarks in the copyright footer
  * [doc] Fix typo in QBuffer::setBuffer() description
  * qwindowsdrag: Fix typo in documentation
  * openglblacklists: Fix typo in description
  * qxcbscreen: Fix typo in documentation
  * Fix typos in SQL driver documentation
  * qxcbwindow.cpp: Fix sign-compare and another warnings
  * QToolButton: reimplement the fix for QTBUG-95255
  * QSysInfo::prettyProductName(): Add macOS Ventura product name
  * QSysInfo::prettyProductName(): add missing macOS product names
  * xcb: correctly disconnect xsettings callbacks
  * ibus: add SetCursorLocationRelative in InputContext.xml</changelog>
  <changelog author="fvogt@suse.com" date="1680523200">- Update to version 5.15.8+kde185:
  * QFSFileEngine: fix overflow bug when using lseek64
  * Add QImage null check when QOpenGLTexture converts
- Add patch to fix return key handling in QGroupBox on GNOME (bsc#1209364):
  * 0001-Revert-QGnomeTheme-Allow-Space-Return-Enter-and-Sele.patch
- Add patch to fix XInput2 events in big-endian X11 clients (bsc#1204883, QTBUG-105157):
  * big-endian-scroll.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1682078400">- Update to version 5.15.9+kde151, rebased upstream:
  * QCborValue: fix incorrect to{Array,Map} when the value is empty
  * QMargins: fix a missing "full stop" in the docs
  * QLibrary: restore translated string
  * QLibrary: fix possible arg() format clobbering
  * iOS: Use python3 for enumerating test target devices
  * Android: Treat ACTION_CANCEL as TouchCancelEvent
  * Doc: Fix broken formatting
  * QFileSystemEngine: fix potential formatting error
  * QString::asprintf: check that passing field widths as arguments works
  * Backport recent QFlags tests
  * network: Fix typos in documentation
  * Fix accuracy with screen composition
  * Doc: Update documentation for QElapsedTimer's in Windows
  * Document that QStandardPath::findExecutable works with absolute paths
  * macOS: Use native resize cursors for diagonal resize
  * Fix clipped glyphs in text rendering of QGraphicsTextItem
  * Change comparison data type to fix int overflow
  * Add missing Q_WEAK_OVERLOAD definition
  * Update QFileInfo docs to mention macOS aliases
  * Distinguish macOS aliases from normal symbolic links
  * Windows QPA: Fix frameless maximize on secondary screens
  * Rewrite tst_qdataurl as a data-driven test
  * Fix compilation for wasm
  * QIOSFileDialog/QIOSDocumentPickerController - handle dismissed view controller
  * Fix QDockWidget's dock area permissions after hovering
  * Fix C++20 ambiguous relational operators between QJsonValue{,Ref}
  * Android: make sure that orientationChange is reported after resize
  * Android: set all QScreen's geometry-related parameters together
  * Blacklist: test cases blacklisted in tst_QDBusConnection:
  * wasm:  fix issue with passing username/password to network request
  * macOS: Pass multi arch flags when linking qmake
  * QCocoaFileDialogHelper: Always enable symlinks and aliases to directories
  * Android: terminate argv passed to main() with nullptr
  * Update bundled libjpeg-turbo to version 2.1.3
  * ANGLE: Load the DirectX libraries from the system path directly
  * SQLite: Update SQLite to v3.37.2
  * Fix compiler warnings about unused parameters
  * Fix getsockopt option_value initial initialization
  * Http2: Fix redirect-handling
  * Android A11Y: Fix value rounding
  * Android A11Y: Announce value together with element name when focused
  * Android A11Y: handle valueChanged events
  * tst_QSystemSemaphore: give proper path to test-helper
  * QNX: Silence compiler warning by initializing variable
  * Update LICENSE.QT-LICENSE-AGREEMENT
  * winrt appxmanifest: Properly replace VCLibs version for newer MSVC versions
  * QAbstractSocket: Don't pretend pause and resume is a stack
  * Gui: test also depends for clipboard feature
  * QDesktopServices: deprecate destroying URL handlers w/o explicit unsetUrlHandler()
  * macOS: Respect QMAKE_APPLE_DEVICE_ARCHS when building qmake
  * HTTP: Make redirect response parsing more generic
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 20.04
  * Android A11Y: populate child elements when constructing node info
  * Fix issue where readyRead() could happen after disconnected()
  * QStringView: add missing constexpr so we can use is_constant_evaluated
  * Use Android's View.generateViewId() for generating ids for views/surfaces
  * Remove documentation of non-existing QAccessible state
  * Doc: Fix snippet to match actual QFileInfo behavior
  * Android: Re-focus focused accessibility node after orientation change
  * Android A11Y: execute C++ code on main Qt thread
  * Android: extract parentId for hidden object in advance
  * xcb: Show valuator atom names properly in categorized logging
  * Android: replace stacktrace with debug message in search for setService
  * Better document attaching a QFutureWatcher to a started QFuture
  * doc: Update GenericDataLocation location on iOS
  * BLACKLIST test_Gestures tests for RHEL-8.4
  * QPlainTestLogger: do not print "failure location" if there's no failure
  * QAbstractItemView: do not access invalid model indices (3/N)
  * Win32: always allow the event loop to be woken up by posted events
  * rhi: d3d11: Use __uuidof where we can
  * Don't QEXPECT_FAIL tst_QLineEdit::testQuickSelectionWithMouse on macOS ARM
  * Network: Emit authenticationRequired when using Ntlm
  * testlib: Disable window restoration on macOS in a non-persistent way
  * QAbstractItemView: do not access invalid model indices (2/N)
  * QAbstractItemView: do not access invalid model indices (1/N)
  * QAbstractItemView: code tidies
  * Update float16 part of TestLib selftest
  * QGuiApplication: constant-initialize lastCursorPosition
  * Blacklist tst_QFileSystemWatcher::signalsEmittedAfterFileMoved on all Windows versions
  * [Android]: Handle the screen name, modes and refreshRate properly
  * QVersionNumber: remove the "pure" attribute from commonPrefix()
  * QEvent: initialize the static userEventTypeRegistry constexprly
  * Let QXcbGlxWindow::createVisual fallback to QXcbWindow::createVisual
  * Android A11Y: fix content update notification when object is hidden
  * Android: explicitly remove accessibility focus when element is hidden
  * BLACKLIST tst_qfont for Red Hat 8.4 and Ubuntu 20.04
  * QtCore: includemocs
  * Fix memory leak in QtConcurrent::run when called with a NULL QThreadPool
  * INTEGRITY: Prevent deletion of virtual functions
  * QMake: replace a Q_ASSERT() with a Q_UNREACHABLE()
  * QTransform benchmark: measure what was promised
  * QStaticByteArrayMatcher: add a useful comment
  * QMacStyle: use the 'momentary push in' type for push buttons
  * qopengl.h: Move C header #include(s) out of the QT_NAMESPACE
  * Enable all supported 1.0 device features in QVulkanWindow
  * Fix queue passed to vkQueuePresent
  * QFusionStyle: don't draw an invalid outline for up/down buttons
  * Doc: Make QListIterator snippets more robust
  * QVersionNumber: don't detach() in rvalue QList/QVector ctor
  * QNetworkRequest: Document how Qt handles 301 and 302 status codes
  * Convert date-time to UTC before claiming it's in GMT
  * Remove execute permission from XML files
  * Add test case for style sheet selectors for enum properties
  * FreeType: allow falling back to synthesized bold if desired
  * Fix an assertion failure in massageAdjustedDateTime()
  * Relax tst_qvulkan::vulkanVersionRequest to make it compatible with 1.1
  * Doc: Replace "C:Documents and Settings" paths
  * QOrderedMutexLocker: fix compilation with C++11
  * QHttpNetworkConnection: Always set proxy settings to all channels
  * Add a markdown writer test for a checklist item ending with `code`
  * Use QTextCharFormat::fontFixedPitch to remember Markdown backtick spans
  * QWizardLayoutInfo: make == and != operators const
  * Revert "Android: Fix screen flicker issues"
  * macOS: Handle momentum scroll NSEventPhaseBegan when scroll had ended
  * SQLite: Update SQLite to v3.37.0
  * Update copyright year to 2022
  * QTzTimeZonePrivate: use ctor delegation instead of init()
  * QTzTimeZonePrivate: fix permanently-detaching m_icu
  * tst_QGraphicsView: fix memleak
  * Doc: Update external links to Qt Creator Manual
  * macOS: assume an unidentified tablet device is a stylus
  * tst_QItemModel: fix memleaks
  * tst_qanimationgroup: fix memleaks
  * QAbstractAnimation: add missing forward-declaration
  * [doc] QCoreApplication::installTranslator() doesn't take ownership
  * tst_qtranslator: fix memleak
  * QTestData: fix streaming of u8 string literals in C++20 mode
  * QThread/Unix: extract duplicate code
  * QWindowPrivate: fix inconsistent inline on some methods
  * tst_QStringList: check that join(u'0') embeds NULs
  * macOS: Sanitize scroll deltas for NSEventPhaseCancelled
  * tst_qsharedmemory: skip readOnly() test under asan
  * QXmlStreamReader: update test distribution
  * QZipReader: update to unzip partly broken archives
  * Deliver context menu event with correct coordinates to widgets in popups
  * QTextHtmlParser: fix prefix lookahead and html comments
  * QtConcurrent::run crashes on program exit
  * tst_QPropertyAnimation: fix leaks occurring under normal operation
  * tst_QPropertyAnimation: fix wrong comment
  * QLogging: fix potential missing NUL-terminator when calling OutputDebugString
  * Fix qt_scrollRectInImage when scrolling outside of the image
- Commits dropped by the rebase:
  * Fix compile with Qt5: Use QString::mid instead of QString::sliced
  * Restore C++11 compatibility after e8b9f4c28d3ab5e960dc54f2dc0c4b749b0b50e0
  * QDateTime: Don't require c++17</changelog>
  <changelog author="fvogt@suse.com" date="1683633600">- Amend patch to fix mouse grabbing as well (bsc#1211024):
  * big-endian-scroll.patch</changelog>
  <changelog author="fvogt@suse.com" date="1684929600">- Update to version 5.15.9+kde154:
  * Hsts: match header names case insensitively (CVE-2023-32762,
    QTBUG-113392, bsc#1211797)
  * Fix specific overflow in qtextlayout (CVE-2023-32763,
    QTBUG-113337, bsc#1211798)
  * QDnsLookup/Unix: make sure we don't overflow the buffer
    (CVE-2023-33285, boo#1211642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1686657600">- Update to version 5.15.10+kde129, rebased upstream:
  * Ssl: Copy the on-demand cert loading bool from default config
  * Schannel: Reject certificate not signed by a configured CA certificate (boo#1211994, CVE-2023-34410)
  * qnetworkreplyfileimpl_p.h: fix header guard name
  * Revert "Draw the cursor considering the descent is 0"
  * Use pkgconfig in order to find libproxy configuration
  * Upgrade PCRE2 to 10.40
  * Android A11Y: handle LocationChanged event only for focused element
  * Port binary JSON to new special integer bitfields
  * INTEGRITY: enable C99 globally
  * QObject: mark two error reporting functions COLD
  * Endian: Provide special integer bitfield unions
  * Android: set useLegacyPackaging to true in build.gradle
  * QWidgetTextControl: port to new-style connects (faster)
  * Sync qxmlstream.g with qxmlstreamparser_p.h [1/2]: switched lines
  * tst_QNetworkReply try stabilize autoDeleteReplies tests
  * Remove duplicated include for &lt;limits&gt;
  * Fix recursion crash when calling setStyleSheet with `qproperty-styleSheet`
  * qwindowsxpstyle: Fix typos in documentation
  * Correct prefix reported for end element in QXmlStreamReader
  * Android A11Y: Add supported role infos to A11yNodeInfo
  * Fix handling of DateTime values in QSettings
  * Fix off-by-one for "typically" lowest value INT_MIN
  * xml: Fix typos in documentation
  * QWindowsWindow: Fix typo in documentation
  * includemocs (updated script)
  * widgets: Fix typos in documentation
  * cocoa: Fix typo in debug messages
  * Only scroll QMenu when there is a valid active action
  * QTimer: Add note in documentation
  * Fix QListView assert when the last row is moved in IconMode
  * QFileDialog: Fix adding default suffix when file path contains dot
  * QLineEdit: account for the placeholderText when computing lineRect
  * QFileDialog::saveFileContent crashes on accept
  * QCompleter: QCompleter unexpectedly changes QLineEdit text
  * Fix build error on iOS with the configure option -qtnamespace
  * Draw the cursor considering the descent is 0
  * Remove pure-virtual-signals.h include from tst_moc.cpp
  * plugins: image formats - fix odr violation
  * dbus: Fix typos
  * qwindowsdialoghelpers: Fix typo in documentation
  * QTableView: Document the customizations applied to QHeaderView
  * Unicodetools: compile
  * eglfs_x11: Fix running flag linkage
  * qcompilerdetection.h: add Q_CC_{GNU,MSVC,CLANG}_ONLY macros
  * Fix CMake warning about "missing closing ' quote"
  * Fix alignment of next/prev links in offline style
  * QtDBus: includemocs
  * Image Plugins: includemocs(-ish)
  * QtGui: includemocs
  * QXcbNativeInterface: remove unused field m_sysTraySelectionAtom
  * Windows QPA: Fix slowdown with large table/tree views with accessibility
  * Macstyle: fix the text color on the disabled button
  * QMacStyle: fix tool buttons (in checked mode)
  * QTeamCityLogger: fix .arg() placeholder injection
  * QAbstractTestLogger: disable copying
  * Fix errorMessageFromComError()
  * QtNetwork: includemocs
  * AppleUnifiedLogger: Remove manually managed os_log_t cache
  * examples: add WindowStaysOnBottomHint into preview text
  * QSharedPointer: Use matching new/delete
  * QIbusPlatformInputContextPlugin: includemocs
  * QGtk3ThemePlugin: includemocs
  * QTuioTouchPlugin: includemocs
  * QtWidgets: includemocs v2022
  * QMYSQLDriverPlugin: includemocs
  * QtDeviceDiscoverySupportPrivate: includemocs
  * QLinuxFbIntegrationPlugin: includemocs
  * QtPrintSupport: includemocs
  * QSQLiteDriverPlugin: includemocs
  * QtFbSupportPrivate: includemocs
  * QXdgDesktopPortalThemePlugin: includemocs
  * QtTest: includemocs
  * QComposePlatformInputContextPlugin: includemocs
  * QtSql: includemocs
  * QVncIntegrationPlugin: includemocs
  * Fix backingstore fractional DPR glitches for widgets in child windows
  * Include &lt;limits&gt; where std::numeric_limits is used
  * QtInputSupportPrivate: includemocs
  * Document the default value of QSFPM::sortOrder()
  * Better document how to enable sorting in QSPFM
  * Correct documentation of INI format's loss of type information
  * Android: add missing properties in AndroidManifest.xml
  * Fix assertion failure when parsing a doubly-invalid date-time text
  * Windows QPA: Correct mistake when calculating minmaxinfo
  * Android: replace ndk.dir with android.ndkVersion in build.gradle
  * Android: remove the old copy of gradle.properties after reading it
  * CMake Android Support: Fix signing of APKs
  * Android: fix A11Y object description
  * macOS: Fix warning about comparing different types in QCocoaScreen::isOnline
  * Fix qmake build on FreeBSD
  * Update documentation of enum Qt::DockWidgetArea
  * xcb: recreate xcb window under some conditions
  * objc_namespace: Add support for universal binaries
  * objc_namespace: Fix misspelled argument for silencing output
  * objc_namespace: Update parsing logic to account for otool changes
  * Blacklist passwordAuth for Ubuntu 20.04
  * Android: wrap QAndroidInputContext's m_focusObject in a QPointer
  * Fix compilation with GCC 12 (and on Fedora 35 and newer)
  * Chip example: fix an accidental bool-&gt;int conversion when using PMF connections
  * qmake: Add support for C++23
  * Android: use BCP 47 tag to create a correct Locale for QTimeZone::displayName()
  * QDateTime: fix adjusted datetime handling
  * Fix crash in tst_qmltc_examples on Android
  * macOS: Remove dead code for focus ring handling in Mac style
  * Detach for colortransforms of indexed formats
  * tst_QTcpSocket::connectToHostError - handle possible timeouts
  * CoreText: Avoid populating font family aliases if family was populated
  * Graphicsview: Avoid background clearing glitches under fractional DPR
  * Windows QPA: Avoid slowdown with UI Automation name change notification
  * Windows QPA: Avoid sending accessibility notifications before activation
  * Windows: Fix potential crash when retrieving default printer
  * Make Ubuntu with its non-standard security level happy
  * Android: Blacklist failing tests on tst_QGraphicsProxyWidget
  * Update LA 4.4.1
  * iOS A11Y: Set more accessibilityTraits
  * QNX: Fix compiler warning by when FEATURE_clipboard is not enabled
  * Document that native file dialogs might not show a title
  * Doc: Remove mentionings of overflows from QElapsedTimer
  * QTextMarkdownImporter: don't apply text char format to list item block
- Commits dropped by the rebase:
  * QBuffer: add missing &lt;limits&gt; include
  * Fix developer build</changelog>
  <changelog author="gmbr3@opensuse.org" date="1687953600">- Change %_libqt5_libexecdir to %_libexecdir/qt5 (bsc#1174075)</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch icu-devel requires to pkgconfig to allow switching libicu
  versions</changelog>
  <changelog author="fvogt@suse.com" date="1695902401">- Update to version 5.15.10+kde159 (bsc#1214327, CVE-2023-37369):
  * Fix CVE-2023-43114
  * QMimeDatabase: fix detection of pattern conflict in different prefixes
  * Fix highdpi conversion of QTabletEvent coordinates on xcb
  * widget: set WA_X11NetWmWindowType* after xcb window was created
  * Fix crash when setting override cursor on multiple clients
  * QAccessibleWidget: Remove pointless ZWSP in warning message
  * Android A11Y: Fix deadlock in QtAndroidAccessibility::runInObjectContext()
  * Correctly parse non BMP char refs in the sax parser
  * Clear the _X version of alongside the enum deprecator
  * Fix UB (signed char passed to &lt;cctype&gt; function)
  * Qt3DRender: includemocs
  * Fix capitalization error in auto-generated qdbusmacros.h include
  * QColorDialog: Ignore mouse move events when no mouse button is pressed
  * QHostInfo: fix remaining slotObj leaks
  * QXmlStreamReader: Raise error on unexpected tokens (CVE-2023-38197,
    QTBUG-92113, QTBUG-95188, bsc#1213326)
  * QTextLayout: Reconsider cursor drawing on TextObject
  * Ensure consistent cursor width under fractional scaling
  * Fix QTextEdit cursor rectangle vertical positioning
  * Return 0 in QWindow::winId in case of failed platform window creation
  * Doc: note QWindow::winId() will cause platform window creation
  * QSslDiffieHellmanParameters: fix mem-leak
  * QHostInfo: fix leaking slot object
  * Make sure we don't count down past 0 QT_FATAL_CRITICALS
  * QLogging: DRY isFatal(QtMsgType)
  * tst_QXmlStream: remove unneeded _ba UDLs
  * Fix typo in QXmlStreamReader error message
  * QXmlStreamReader: make fastScanName() indicate parsing status to callers
  * QXmlStreamReader: change fastScanName() to take a Value*
  * Fix Croatia's currency
  * SSL: upgrade the default DH parameters</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1696593600">- Update to version 5.15.11+kde134, rebased upstream:
  * Revert "Windows QPA: Add support to UiaRaiseNotificationEvent()"
  * FileChooser portal: Make sure filter.name is not empty
  * QPersistentModelIndex: fix UB (op&lt; on unrelated pointers)
  * Avoid crash when keysymToQtKey(keysym, Qt::ControlModifier) is called
  * a11y atspi: translate coords for GetOffsetAtPoint the right way
  * a11y atspi: Take dialog into account as top-level window
  * a11y atspi: Fix incorrect use of x instead of y position
  * macOS: Handle asynchronous deminiaturizing of windows
  * QTranslator: generalize a UNIX-only path
  * iOS, input panel: be more careful before enabling QIOSKeyboardListener
  * Android: Fix flickering on window resize and show keyboard
  * Android A11Y: Check for active surface before calling into native code
  * xcb: Delete touch points without target windows
  * Blacklist 1 tests in tst_QDBusConnection on ubuntu-20.04
  * Fix CMake builds without ANDROID_SDK
  * Blacklist 2 tests in tst_Http2 on ubuntu-20.04
  * Blacklist 1 tests in tst_QSqlQuery on macos
  * Defer creating the special shaders in the texture blitter
  * tst_QSslSocket::serverCipherPreferencies - fix for OpenSSL v3
  * QTemporaryFile: document rename() differences from QFile
  * Doc: 3rd party: Fix reference to FreeType LICENSE.txt
  * Update bundled libjpeg-turbo to version 2.1.4
  * tst_QSsSocket: fix verifyClientCertificate with OpenSSL 3
  * tst_QSslSocket: regenerate certificate used for setLocalCertificateChain
  * tst_QSslSocket::protocolServerSide - make it work with OpenSSL v3
  * tst_QSslSocket::oldErrorsOnSocketReuse - make it work with OpenSSL v3
  * Update zconf.h prefixes to match zlib v1.2.12 update
  * xcb: fix D&amp;D in same xembed client
  * xcb: use global coordinates for position of D&amp;D for xembed client
  * Doc: Update QMetaType::metaObject() descriptions
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 22.04
  * BLACKLIST tst_qfont for Ubuntu 22.04
  * BLACKLIST tst_QMenuBar::check_menuPosition for Ubuntu 22.04
  * tst_QDtls::verifyClientCertficiate - update certs for OpenSSL v3
  * QSslCertificate::toText(): add a file to compare against
  * Fix the spelling of the word "combination"
  * tst_QSslCertificate::pkcs12 - skip the test if OpenSSL version &gt;= 3
  * Android A11Y: Fix TalkBack scrolling behavior
  * Android A11Y: Notify android about scroll events
  * QCocoaDrag: don't add pasteboard items with non-absolute URLs
  * QDirPrivate: pass input QList by cref
  * tst_qbytearray: remove qCompress_data for QT_NO_COMPRESS
  * QDeviceDiscoveryUDev: use NSDMI
  * QAuthenticator: Fix crash when using NTLM / Negotiate
  * Provide a native interface instance in minimal platform plugin
  * Android: document the supported clipboard mimetypes
  * Windows: Account for not finding child windows when calling ChildWindowFromPointEx
  * iOS: Send touch events asynchronously to avoid deadlocking UIKit event loop
  * Disable bitcode for iOS
  * macOS: Ignore deprecation for ReleaseIconRef
  * BLACKLIST tst_QApplication::sendEventsOnProcessEvents for Ubuntu 22.04
  * Convert Latin1 to UTF-16 before passing to ICU API
  * Doc: Remove repetition of word in text
  * eglfs: Fix screen cloning when atomic is enabled
  * Fix printing of dpr&gt;1 images on Windows
  * QHttp: Fix handling of redirect loaded from cache
  * Doc: Fix return type of QLEInteger/QBEInteger post-in/decrement ops
  * qmake: Fix installation of separate debug info for plugins
  * iOS: ensure we close inputpanel after clearing focusobject
  * Convert Latin1 to UTF-16 before passing to ICU API
  * qputenv: defend against non-NUL-terminated QByteArray values
  * QFontSubset: remove unused glyphName() overload
  * Statically assert that the __mips_dsp code is only active on 32-bit
  * QGtk3Theme: Ensure gtk uses the same windowing system as Qt
  * tst_QFocusFrame: fix -Wparantheses
  * Sync Vulkan device features between QVulkanWindow and QRhi
  * SQLite: Update SQLite to v3.39.2
  * Update freetype to 2.12.1
  * corelib: Fix typos in documentation
  * QAtomicInteger docs: mention bool and char8_t as 8-bit types
  * qgraphicsitem_cast: replace 0 with nullptr
  * Doc: Hide weak overload template magic from documentation
  * Revert "QDateTime: fix adjusted datetime handling"
  * Fix select handles disappears issues
  * tst_QSslKey: prepare for the migration to OpenSSL v3
  * tst_qnetworkreply: replace server.pem/key pair
  * Disable unit testing setting up QTcpServer on special Apple interfaces
  * qmake/msbuild: Turn off "use full paths in diagnostics" by default
  * qmake/msbuild: Support all /DEBUG:xxx linker options
  * qmake/msbuild: Support all /LTCG:xxx options
  * Android A11Y: Add content change type to content change event
  * Enabler for fractional scaling of text in Qt Quick
  * macOS: Override logical DPI to 72
  * Add QDom internalSubset implementation
  * Fix tst_AndroidAssets, broken by recent changes on assets load speed
  * Android: Improve loading speed of individual assets
  * Darwin: Replace deprecated symbol kIOMasterPortDefault with equivalent
  * macOS: Remove code for handling logical DPI changes
  * Fix an incorrect invocation of llvm-readobj
  * macOS: Ignore deprecation for kOnSystemDisk icon domain
  * Copy only files that belongs to QML module
  * Android: fix wrong position of cursor handle and editpopup menu in split screen
  * Doc: Document QML_IMPORTS_PATH and QMLPATHS
  * Add the missing RCC_DIR to '.qrc' paths when generating deployment settings
  * Android: Fix the offset of the EditPopupMenu
  * xcb: update xkb_state mask as much as possible
  * QDom: Stop treating non-BMP characters as invalid
  * Android 13: Fix warnings on starting an application
  * qxkbcommon: Map Super/Hyper to Meta early enough to have an effect
  * macOS: Ignore update requests for offline displays
  * macOS: Avoid recursively updating screens when window moves screen
  * qmake/MinGW: Install separate debug info of DLLs next to the DLL
  * QMainWindow: fix restoreState() for toolbars
  * Make two QDT benchmarks data-driven and add more rows
  * Fix doc and example of QLoggingCategory::installCategory()
  * qmake: Document Xcode behavior when bundling translation files
  * Android: Fix missing import
  * QByteArray: more GCC 12 -Werror=array-bound whack-a-mole
  * CMake: Fix android sdk version propagation
  * Restore C++20-deprecated mixed-enum bitwise operators
  * Android: Fix ANR when QtService and QtActivity load in same process
  * Fix restart QtActivity
  * QArrayData::data(): do type-punning via quintptr, not char *
  * QIOSTextResponder: recreate responder upon reset
  * QSslSocket: make it work with OpenSSL v3
  * QFileSystemModelPrivate: de-inline ctor and dtor
  * Network: update Public Suffix List
  * macOS: Ensure proper quoting when calling otool in objc_namespace script
  * QKeySequence: Fix the one-off error in the mac glyph array size
- Commits dropped by the rebase:
  * Apply CVE-2022-27404-27405-27406-qtbase-5.15.diff
  * QArrayData: fix UB via reinterpret_cast (crash with FORTIFY_SOURCE=3)
  * Adapt for q_EVP_PKEY_base_id → q_EVP_PKEY_get_base_id rename in OpenSSL 3
  * Don't use a deprecated function if built/linked with OpenSSL v3</changelog>
  <changelog author="christophe@krop.fr" date="1696593601">- Enable the experimental native painting feature to improve
  remote desktop performances (boo#1214915)
  exporting QT_XCB_NATIVE_PAINTING is required to use the feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1697716800">- Update to version 5.15.11+kde138:
  * QLibraryPrivate: Actually merge load hints
  * QPluginLoader: report the right load hints
  * xkb: fix build with libxkbcommon 1.6.0 and later
  * a11y atspi: Map ButtonMenu role to AT-SPI equivalent</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1703851200">- Update to version 5.15.12+kde144, rebased upstream:
  * QMimeDatabase: handle buggy type definitions with circular inheritance
  * xcb: only set base size when it's valid
  * QPixmapCache: fix leaking of QStrings and Keys on clear()
  * OpenFile portal: do not use O_PATH fds
  * QSystemTrayIcon: properly disconnect old menu in setContextMenu()
  * Guard QTabBar against nested event processing during moving tabs
  * QDial: don't crash when min==max and setting a value != min &amp; max
  * QStandardItemModel: don't leak in mimeData()
  * SQL/MySQL: properly initialize variable
  * QWidgetTextControl: ignore invalid input method event
  * Update the LGPL license header
  * SQL/MySQL: fix handling of json column
  * Remove QMAKE_RANLIB and QMAKE_LINK_SHLIB from android/default_pre.prf
  * macOS: Fix less common writing systems on Catalina and later
  * Blacklist 1 tests in tst_QFtp on ubuntu-20.04
  * Update bundled libpng to version 1.6.39
  * Android: Fix signing of APKs that are generated when an AAB is also built
  * Update bundled zlib to version 1.2.13
  * doc: update the limitation of QSystemTrayIcon on X11
  * Blacklist 1 tests in tst_QTimer on ubuntu-20.04
  * Add benchmarks for QLocale number parsing
  * Add benchmarks for QString number parsing
  * Android: Fix incorrect fullscreen dimensions
  * Gtk3Theme: set XCURSOR_SIZE and XCURSOR_THEME for wayland sessions
  * xcb: Flush Display when processing xcb events
  * xcb: Add xlib wrapper for XFlush()
  * QHostAddress: Fix incorrect comparison against 'Any'
  * QSsl[OpenSSL/Android]: Fix hardcoded 1_1 suffix
  * BLACKLIST: tst_QApplication::sendEventsOnProcessEvents for RHEL 9.0
  * QMacStyle: do not set white color for grayed out button
  * Work round macOS's omission of en_DE from its own uiLanguages()
  * Suppress a deprecation warning in tst_QDateTime::toString_enumformat()
  * QJsonValue: fix incorrect to{Array,Object} when the value is empty
  * QGtk3Dialog: remove the #include for empty moc
  * Remove unneeded QWindow from QGtk3Dialog
  * tst_QSslSocket: Delete sslOptions
  * tst_QSslServer: Make the in-process server use TLS1.2
  * Android: fix Gradle warning about using enableUncompressedNativeLibs
  * Mention  limitation of QDir::drives() on Windows
  * QFileSystemEngine/Win: fix incorrect buffer size in currentPath()
  * Android: properly retrieve mime type of uri to for openUrl()
  * Android: Fix clipboard issue with urls
  * Android: Add a way to disable accessibility via an environment var
  * Update bundled libpng to version 1.6.38
  * QIOSMessageDialog::exec - work around 'windowsless' exec
  * QIosScreen: retain the right window
  * tst_Q{BitArray,ContiguousCache}: check not only count(), but size(), too
  * QIosTextResponder: stop using deprecated constants and type
  * qcompilerdetection.h: detect Coverity
  * Android: Fix Display.getRealMetrics deprecation
  * Fix broken Text rendering when noantialiased NativeRendering is used
  * forkfd: fix Clang 15 ATOMIC_VAR_INIT deprecation warning
  * eglfs: Add env.var. to disable the dedicated drmHandleEvent thread
  * doc: Don't put strings into QVector&lt;double&gt;
  * Remove focusProxyAndInputMethods from tst_QWidget
  * Bump version to 5.15.12
  * Update documentation of qWaitForWindowActive / qWaitForWindowExposed
  * QtHttp: Lower the severity of some log output
  * StyleSheetStyle: Fix color of placeholder texts in text edits
  * Android: Fix flickering on split screen mode
  * Update url to IAccessible2 Specification</changelog>
  <changelog author="alarrosa@suse.com" date="1704283200">- Update to version 5.15.12+kde147:
  * Http2: fix potential overflow in assemble_hpack_block()
    (bsc#1218413, CVE-2023-51714)
  * HPack: fix incorrect integer overflow check
  * HPack: fix a Yoda Condition</changelog>
  <changelog author="fvogt@suse.com" date="1708084800">- Update to version 5.15.12+kde151:
  * Improve KTX file reading memory safety (CVE-2024-25580, boo#1219996)
  * Revert "xcb: only set base size when it's valid"
  * Fix potential leak of QPropertyAnimation in QLineEditIconButton
  * QBitArray: correct inline keyword</changelog>
  <changelog author="alarrosa@suse.com" date="1720785600">- Add patch from upstream to fix a regression in the ODBC driver
  (bsc#1227513, QTBUG-112375):
  * 0001-QSQL-ODBC-fix-regression-trailing-NUL.patch
  * 0002-SQL-ODBC-Pass-correct-length-to-SQLColAttribute.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1722945600">- Add rebased upstream patch to delay any HTTP2 communication until
  encrypted() can be responded to (bsc#1227426, CVE-2024-39936):
  * 0001-HTTP2-Delay-any-communication-until-encrypted-can-be.patch
- Add upstream patch to fix a NULL pointer dereference via the
  function QXcbConnection::initializeAllAtoms() when there is
  anomalous behavior from the X server (bsc#1222120,
  CVE-2023-45935):
  * 0001-xcb-guard-a-pointer-before-usage.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756728000">- Add patch from upstream to fix a precondition violation in call
  to QByteArrayView::at() which can cause crashes (bsc#1243958,
  CVE-2025-5455):
  * 0001-qDecodeDataUrl-fix-precondition-violation-in-call-to.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756814400">- Add patch from upstream to initialize a member variable that was
  uninitialized under some circumstances:
  * 0001-QObjectPrivateSignal-initialize-all-members.patch
- Add patch from upstream to fix a crash when parsing a particular
  glyph in a particular font (QTBUG-124310):
  * 0001-Avoid-crash-in-font-distancefield-computation.patch
  * 0002-Fix-crash-in-font-distancefield-computation.patch
- Add patch from upstream to fix avoid repeatedly registering
  xsettings callbacks when switching cursor themes:
  * 0001-xcb-Avoid-repeatedly-registering-xsettings-callbacks-When.patch
- Add patch from upstream to check validity of RandR output info
  before using it (QTBUG-128906):
  * 0001-xcb-check-validity-of-RandR-output-info-before-using-it.patch
- Add patch from upstream to fix reparenting a window so it takes
  effect even if there are no other state changes to the window:
  * 0001-xcb-Sync-XCB-connection-after-reparenting-window.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756900800">- Add patch from upstream to fix a low performance when processing
  XML data in encodeText (bsc#1239896, CVE-2025-30348):
  * 0001-XML_QDom-speedup-encodeText.patch</changelog>
</package>
<package pkgid="5f0560fbeaba0d4af69c6fed963833286b91b7fb2a2c5a29f4f84ac17259a328" name="libQt5Sql5-sqlite" arch="x86_64">
  <version epoch="0" ver="5.15.12+kde151" rel="150600.3.9.1"/>
  <changelog author="fvogt@suse.com" date="1678968000">- Update to version 5.15.8+kde183:
  * Add nullptr guard in QStyleSheetStyle::drawPrimitive(PE_PanelLineEdit)
  * QAbstractItemView: don't access invalid indexes on copy-key
  * Apply CVE-2023-24607-qtbase-5.15.diff (CVE-2023-24607,
    bsc#1209616)
  * QXcbConnection::getTimestamp: do not return stale timestamp
  * QToolButton: Elide text when constraints prevent from showing whole text
  * correctly set up ref counting in QThreadPool::tryStart(std::function)
  * Do not set Qt::ToolTip flag for QShapedPixmapWindow
  * Fix deletion order also for QImageReader/Writer::setDevice()
  * Fix deletion order in QImageReader/Writer destructors
  * QNetworkReply: Fix typos in the documentation
  * Doc: Fix typo in the online documentation template
  * Doc: Link to page documenting Qt trademarks in the copyright footer
  * [doc] Fix typo in QBuffer::setBuffer() description
  * qwindowsdrag: Fix typo in documentation
  * openglblacklists: Fix typo in description
  * qxcbscreen: Fix typo in documentation
  * Fix typos in SQL driver documentation
  * qxcbwindow.cpp: Fix sign-compare and another warnings
  * QToolButton: reimplement the fix for QTBUG-95255
  * QSysInfo::prettyProductName(): Add macOS Ventura product name
  * QSysInfo::prettyProductName(): add missing macOS product names
  * xcb: correctly disconnect xsettings callbacks
  * ibus: add SetCursorLocationRelative in InputContext.xml</changelog>
  <changelog author="fvogt@suse.com" date="1680523200">- Update to version 5.15.8+kde185:
  * QFSFileEngine: fix overflow bug when using lseek64
  * Add QImage null check when QOpenGLTexture converts
- Add patch to fix return key handling in QGroupBox on GNOME (bsc#1209364):
  * 0001-Revert-QGnomeTheme-Allow-Space-Return-Enter-and-Sele.patch
- Add patch to fix XInput2 events in big-endian X11 clients (bsc#1204883, QTBUG-105157):
  * big-endian-scroll.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1682078400">- Update to version 5.15.9+kde151, rebased upstream:
  * QCborValue: fix incorrect to{Array,Map} when the value is empty
  * QMargins: fix a missing "full stop" in the docs
  * QLibrary: restore translated string
  * QLibrary: fix possible arg() format clobbering
  * iOS: Use python3 for enumerating test target devices
  * Android: Treat ACTION_CANCEL as TouchCancelEvent
  * Doc: Fix broken formatting
  * QFileSystemEngine: fix potential formatting error
  * QString::asprintf: check that passing field widths as arguments works
  * Backport recent QFlags tests
  * network: Fix typos in documentation
  * Fix accuracy with screen composition
  * Doc: Update documentation for QElapsedTimer's in Windows
  * Document that QStandardPath::findExecutable works with absolute paths
  * macOS: Use native resize cursors for diagonal resize
  * Fix clipped glyphs in text rendering of QGraphicsTextItem
  * Change comparison data type to fix int overflow
  * Add missing Q_WEAK_OVERLOAD definition
  * Update QFileInfo docs to mention macOS aliases
  * Distinguish macOS aliases from normal symbolic links
  * Windows QPA: Fix frameless maximize on secondary screens
  * Rewrite tst_qdataurl as a data-driven test
  * Fix compilation for wasm
  * QIOSFileDialog/QIOSDocumentPickerController - handle dismissed view controller
  * Fix QDockWidget's dock area permissions after hovering
  * Fix C++20 ambiguous relational operators between QJsonValue{,Ref}
  * Android: make sure that orientationChange is reported after resize
  * Android: set all QScreen's geometry-related parameters together
  * Blacklist: test cases blacklisted in tst_QDBusConnection:
  * wasm:  fix issue with passing username/password to network request
  * macOS: Pass multi arch flags when linking qmake
  * QCocoaFileDialogHelper: Always enable symlinks and aliases to directories
  * Android: terminate argv passed to main() with nullptr
  * Update bundled libjpeg-turbo to version 2.1.3
  * ANGLE: Load the DirectX libraries from the system path directly
  * SQLite: Update SQLite to v3.37.2
  * Fix compiler warnings about unused parameters
  * Fix getsockopt option_value initial initialization
  * Http2: Fix redirect-handling
  * Android A11Y: Fix value rounding
  * Android A11Y: Announce value together with element name when focused
  * Android A11Y: handle valueChanged events
  * tst_QSystemSemaphore: give proper path to test-helper
  * QNX: Silence compiler warning by initializing variable
  * Update LICENSE.QT-LICENSE-AGREEMENT
  * winrt appxmanifest: Properly replace VCLibs version for newer MSVC versions
  * QAbstractSocket: Don't pretend pause and resume is a stack
  * Gui: test also depends for clipboard feature
  * QDesktopServices: deprecate destroying URL handlers w/o explicit unsetUrlHandler()
  * macOS: Respect QMAKE_APPLE_DEVICE_ARCHS when building qmake
  * HTTP: Make redirect response parsing more generic
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 20.04
  * Android A11Y: populate child elements when constructing node info
  * Fix issue where readyRead() could happen after disconnected()
  * QStringView: add missing constexpr so we can use is_constant_evaluated
  * Use Android's View.generateViewId() for generating ids for views/surfaces
  * Remove documentation of non-existing QAccessible state
  * Doc: Fix snippet to match actual QFileInfo behavior
  * Android: Re-focus focused accessibility node after orientation change
  * Android A11Y: execute C++ code on main Qt thread
  * Android: extract parentId for hidden object in advance
  * xcb: Show valuator atom names properly in categorized logging
  * Android: replace stacktrace with debug message in search for setService
  * Better document attaching a QFutureWatcher to a started QFuture
  * doc: Update GenericDataLocation location on iOS
  * BLACKLIST test_Gestures tests for RHEL-8.4
  * QPlainTestLogger: do not print "failure location" if there's no failure
  * QAbstractItemView: do not access invalid model indices (3/N)
  * Win32: always allow the event loop to be woken up by posted events
  * rhi: d3d11: Use __uuidof where we can
  * Don't QEXPECT_FAIL tst_QLineEdit::testQuickSelectionWithMouse on macOS ARM
  * Network: Emit authenticationRequired when using Ntlm
  * testlib: Disable window restoration on macOS in a non-persistent way
  * QAbstractItemView: do not access invalid model indices (2/N)
  * QAbstractItemView: do not access invalid model indices (1/N)
  * QAbstractItemView: code tidies
  * Update float16 part of TestLib selftest
  * QGuiApplication: constant-initialize lastCursorPosition
  * Blacklist tst_QFileSystemWatcher::signalsEmittedAfterFileMoved on all Windows versions
  * [Android]: Handle the screen name, modes and refreshRate properly
  * QVersionNumber: remove the "pure" attribute from commonPrefix()
  * QEvent: initialize the static userEventTypeRegistry constexprly
  * Let QXcbGlxWindow::createVisual fallback to QXcbWindow::createVisual
  * Android A11Y: fix content update notification when object is hidden
  * Android: explicitly remove accessibility focus when element is hidden
  * BLACKLIST tst_qfont for Red Hat 8.4 and Ubuntu 20.04
  * QtCore: includemocs
  * Fix memory leak in QtConcurrent::run when called with a NULL QThreadPool
  * INTEGRITY: Prevent deletion of virtual functions
  * QMake: replace a Q_ASSERT() with a Q_UNREACHABLE()
  * QTransform benchmark: measure what was promised
  * QStaticByteArrayMatcher: add a useful comment
  * QMacStyle: use the 'momentary push in' type for push buttons
  * qopengl.h: Move C header #include(s) out of the QT_NAMESPACE
  * Enable all supported 1.0 device features in QVulkanWindow
  * Fix queue passed to vkQueuePresent
  * QFusionStyle: don't draw an invalid outline for up/down buttons
  * Doc: Make QListIterator snippets more robust
  * QVersionNumber: don't detach() in rvalue QList/QVector ctor
  * QNetworkRequest: Document how Qt handles 301 and 302 status codes
  * Convert date-time to UTC before claiming it's in GMT
  * Remove execute permission from XML files
  * Add test case for style sheet selectors for enum properties
  * FreeType: allow falling back to synthesized bold if desired
  * Fix an assertion failure in massageAdjustedDateTime()
  * Relax tst_qvulkan::vulkanVersionRequest to make it compatible with 1.1
  * Doc: Replace "C:Documents and Settings" paths
  * QOrderedMutexLocker: fix compilation with C++11
  * QHttpNetworkConnection: Always set proxy settings to all channels
  * Add a markdown writer test for a checklist item ending with `code`
  * Use QTextCharFormat::fontFixedPitch to remember Markdown backtick spans
  * QWizardLayoutInfo: make == and != operators const
  * Revert "Android: Fix screen flicker issues"
  * macOS: Handle momentum scroll NSEventPhaseBegan when scroll had ended
  * SQLite: Update SQLite to v3.37.0
  * Update copyright year to 2022
  * QTzTimeZonePrivate: use ctor delegation instead of init()
  * QTzTimeZonePrivate: fix permanently-detaching m_icu
  * tst_QGraphicsView: fix memleak
  * Doc: Update external links to Qt Creator Manual
  * macOS: assume an unidentified tablet device is a stylus
  * tst_QItemModel: fix memleaks
  * tst_qanimationgroup: fix memleaks
  * QAbstractAnimation: add missing forward-declaration
  * [doc] QCoreApplication::installTranslator() doesn't take ownership
  * tst_qtranslator: fix memleak
  * QTestData: fix streaming of u8 string literals in C++20 mode
  * QThread/Unix: extract duplicate code
  * QWindowPrivate: fix inconsistent inline on some methods
  * tst_QStringList: check that join(u'0') embeds NULs
  * macOS: Sanitize scroll deltas for NSEventPhaseCancelled
  * tst_qsharedmemory: skip readOnly() test under asan
  * QXmlStreamReader: update test distribution
  * QZipReader: update to unzip partly broken archives
  * Deliver context menu event with correct coordinates to widgets in popups
  * QTextHtmlParser: fix prefix lookahead and html comments
  * QtConcurrent::run crashes on program exit
  * tst_QPropertyAnimation: fix leaks occurring under normal operation
  * tst_QPropertyAnimation: fix wrong comment
  * QLogging: fix potential missing NUL-terminator when calling OutputDebugString
  * Fix qt_scrollRectInImage when scrolling outside of the image
- Commits dropped by the rebase:
  * Fix compile with Qt5: Use QString::mid instead of QString::sliced
  * Restore C++11 compatibility after e8b9f4c28d3ab5e960dc54f2dc0c4b749b0b50e0
  * QDateTime: Don't require c++17</changelog>
  <changelog author="fvogt@suse.com" date="1683633600">- Amend patch to fix mouse grabbing as well (bsc#1211024):
  * big-endian-scroll.patch</changelog>
  <changelog author="fvogt@suse.com" date="1684929600">- Update to version 5.15.9+kde154:
  * Hsts: match header names case insensitively (CVE-2023-32762,
    QTBUG-113392, bsc#1211797)
  * Fix specific overflow in qtextlayout (CVE-2023-32763,
    QTBUG-113337, bsc#1211798)
  * QDnsLookup/Unix: make sure we don't overflow the buffer
    (CVE-2023-33285, boo#1211642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1686657600">- Update to version 5.15.10+kde129, rebased upstream:
  * Ssl: Copy the on-demand cert loading bool from default config
  * Schannel: Reject certificate not signed by a configured CA certificate (boo#1211994, CVE-2023-34410)
  * qnetworkreplyfileimpl_p.h: fix header guard name
  * Revert "Draw the cursor considering the descent is 0"
  * Use pkgconfig in order to find libproxy configuration
  * Upgrade PCRE2 to 10.40
  * Android A11Y: handle LocationChanged event only for focused element
  * Port binary JSON to new special integer bitfields
  * INTEGRITY: enable C99 globally
  * QObject: mark two error reporting functions COLD
  * Endian: Provide special integer bitfield unions
  * Android: set useLegacyPackaging to true in build.gradle
  * QWidgetTextControl: port to new-style connects (faster)
  * Sync qxmlstream.g with qxmlstreamparser_p.h [1/2]: switched lines
  * tst_QNetworkReply try stabilize autoDeleteReplies tests
  * Remove duplicated include for &lt;limits&gt;
  * Fix recursion crash when calling setStyleSheet with `qproperty-styleSheet`
  * qwindowsxpstyle: Fix typos in documentation
  * Correct prefix reported for end element in QXmlStreamReader
  * Android A11Y: Add supported role infos to A11yNodeInfo
  * Fix handling of DateTime values in QSettings
  * Fix off-by-one for "typically" lowest value INT_MIN
  * xml: Fix typos in documentation
  * QWindowsWindow: Fix typo in documentation
  * includemocs (updated script)
  * widgets: Fix typos in documentation
  * cocoa: Fix typo in debug messages
  * Only scroll QMenu when there is a valid active action
  * QTimer: Add note in documentation
  * Fix QListView assert when the last row is moved in IconMode
  * QFileDialog: Fix adding default suffix when file path contains dot
  * QLineEdit: account for the placeholderText when computing lineRect
  * QFileDialog::saveFileContent crashes on accept
  * QCompleter: QCompleter unexpectedly changes QLineEdit text
  * Fix build error on iOS with the configure option -qtnamespace
  * Draw the cursor considering the descent is 0
  * Remove pure-virtual-signals.h include from tst_moc.cpp
  * plugins: image formats - fix odr violation
  * dbus: Fix typos
  * qwindowsdialoghelpers: Fix typo in documentation
  * QTableView: Document the customizations applied to QHeaderView
  * Unicodetools: compile
  * eglfs_x11: Fix running flag linkage
  * qcompilerdetection.h: add Q_CC_{GNU,MSVC,CLANG}_ONLY macros
  * Fix CMake warning about "missing closing ' quote"
  * Fix alignment of next/prev links in offline style
  * QtDBus: includemocs
  * Image Plugins: includemocs(-ish)
  * QtGui: includemocs
  * QXcbNativeInterface: remove unused field m_sysTraySelectionAtom
  * Windows QPA: Fix slowdown with large table/tree views with accessibility
  * Macstyle: fix the text color on the disabled button
  * QMacStyle: fix tool buttons (in checked mode)
  * QTeamCityLogger: fix .arg() placeholder injection
  * QAbstractTestLogger: disable copying
  * Fix errorMessageFromComError()
  * QtNetwork: includemocs
  * AppleUnifiedLogger: Remove manually managed os_log_t cache
  * examples: add WindowStaysOnBottomHint into preview text
  * QSharedPointer: Use matching new/delete
  * QIbusPlatformInputContextPlugin: includemocs
  * QGtk3ThemePlugin: includemocs
  * QTuioTouchPlugin: includemocs
  * QtWidgets: includemocs v2022
  * QMYSQLDriverPlugin: includemocs
  * QtDeviceDiscoverySupportPrivate: includemocs
  * QLinuxFbIntegrationPlugin: includemocs
  * QtPrintSupport: includemocs
  * QSQLiteDriverPlugin: includemocs
  * QtFbSupportPrivate: includemocs
  * QXdgDesktopPortalThemePlugin: includemocs
  * QtTest: includemocs
  * QComposePlatformInputContextPlugin: includemocs
  * QtSql: includemocs
  * QVncIntegrationPlugin: includemocs
  * Fix backingstore fractional DPR glitches for widgets in child windows
  * Include &lt;limits&gt; where std::numeric_limits is used
  * QtInputSupportPrivate: includemocs
  * Document the default value of QSFPM::sortOrder()
  * Better document how to enable sorting in QSPFM
  * Correct documentation of INI format's loss of type information
  * Android: add missing properties in AndroidManifest.xml
  * Fix assertion failure when parsing a doubly-invalid date-time text
  * Windows QPA: Correct mistake when calculating minmaxinfo
  * Android: replace ndk.dir with android.ndkVersion in build.gradle
  * Android: remove the old copy of gradle.properties after reading it
  * CMake Android Support: Fix signing of APKs
  * Android: fix A11Y object description
  * macOS: Fix warning about comparing different types in QCocoaScreen::isOnline
  * Fix qmake build on FreeBSD
  * Update documentation of enum Qt::DockWidgetArea
  * xcb: recreate xcb window under some conditions
  * objc_namespace: Add support for universal binaries
  * objc_namespace: Fix misspelled argument for silencing output
  * objc_namespace: Update parsing logic to account for otool changes
  * Blacklist passwordAuth for Ubuntu 20.04
  * Android: wrap QAndroidInputContext's m_focusObject in a QPointer
  * Fix compilation with GCC 12 (and on Fedora 35 and newer)
  * Chip example: fix an accidental bool-&gt;int conversion when using PMF connections
  * qmake: Add support for C++23
  * Android: use BCP 47 tag to create a correct Locale for QTimeZone::displayName()
  * QDateTime: fix adjusted datetime handling
  * Fix crash in tst_qmltc_examples on Android
  * macOS: Remove dead code for focus ring handling in Mac style
  * Detach for colortransforms of indexed formats
  * tst_QTcpSocket::connectToHostError - handle possible timeouts
  * CoreText: Avoid populating font family aliases if family was populated
  * Graphicsview: Avoid background clearing glitches under fractional DPR
  * Windows QPA: Avoid slowdown with UI Automation name change notification
  * Windows QPA: Avoid sending accessibility notifications before activation
  * Windows: Fix potential crash when retrieving default printer
  * Make Ubuntu with its non-standard security level happy
  * Android: Blacklist failing tests on tst_QGraphicsProxyWidget
  * Update LA 4.4.1
  * iOS A11Y: Set more accessibilityTraits
  * QNX: Fix compiler warning by when FEATURE_clipboard is not enabled
  * Document that native file dialogs might not show a title
  * Doc: Remove mentionings of overflows from QElapsedTimer
  * QTextMarkdownImporter: don't apply text char format to list item block
- Commits dropped by the rebase:
  * QBuffer: add missing &lt;limits&gt; include
  * Fix developer build</changelog>
  <changelog author="gmbr3@opensuse.org" date="1687953600">- Change %_libqt5_libexecdir to %_libexecdir/qt5 (bsc#1174075)</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch icu-devel requires to pkgconfig to allow switching libicu
  versions</changelog>
  <changelog author="fvogt@suse.com" date="1695902401">- Update to version 5.15.10+kde159 (bsc#1214327, CVE-2023-37369):
  * Fix CVE-2023-43114
  * QMimeDatabase: fix detection of pattern conflict in different prefixes
  * Fix highdpi conversion of QTabletEvent coordinates on xcb
  * widget: set WA_X11NetWmWindowType* after xcb window was created
  * Fix crash when setting override cursor on multiple clients
  * QAccessibleWidget: Remove pointless ZWSP in warning message
  * Android A11Y: Fix deadlock in QtAndroidAccessibility::runInObjectContext()
  * Correctly parse non BMP char refs in the sax parser
  * Clear the _X version of alongside the enum deprecator
  * Fix UB (signed char passed to &lt;cctype&gt; function)
  * Qt3DRender: includemocs
  * Fix capitalization error in auto-generated qdbusmacros.h include
  * QColorDialog: Ignore mouse move events when no mouse button is pressed
  * QHostInfo: fix remaining slotObj leaks
  * QXmlStreamReader: Raise error on unexpected tokens (CVE-2023-38197,
    QTBUG-92113, QTBUG-95188, bsc#1213326)
  * QTextLayout: Reconsider cursor drawing on TextObject
  * Ensure consistent cursor width under fractional scaling
  * Fix QTextEdit cursor rectangle vertical positioning
  * Return 0 in QWindow::winId in case of failed platform window creation
  * Doc: note QWindow::winId() will cause platform window creation
  * QSslDiffieHellmanParameters: fix mem-leak
  * QHostInfo: fix leaking slot object
  * Make sure we don't count down past 0 QT_FATAL_CRITICALS
  * QLogging: DRY isFatal(QtMsgType)
  * tst_QXmlStream: remove unneeded _ba UDLs
  * Fix typo in QXmlStreamReader error message
  * QXmlStreamReader: make fastScanName() indicate parsing status to callers
  * QXmlStreamReader: change fastScanName() to take a Value*
  * Fix Croatia's currency
  * SSL: upgrade the default DH parameters</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1696593600">- Update to version 5.15.11+kde134, rebased upstream:
  * Revert "Windows QPA: Add support to UiaRaiseNotificationEvent()"
  * FileChooser portal: Make sure filter.name is not empty
  * QPersistentModelIndex: fix UB (op&lt; on unrelated pointers)
  * Avoid crash when keysymToQtKey(keysym, Qt::ControlModifier) is called
  * a11y atspi: translate coords for GetOffsetAtPoint the right way
  * a11y atspi: Take dialog into account as top-level window
  * a11y atspi: Fix incorrect use of x instead of y position
  * macOS: Handle asynchronous deminiaturizing of windows
  * QTranslator: generalize a UNIX-only path
  * iOS, input panel: be more careful before enabling QIOSKeyboardListener
  * Android: Fix flickering on window resize and show keyboard
  * Android A11Y: Check for active surface before calling into native code
  * xcb: Delete touch points without target windows
  * Blacklist 1 tests in tst_QDBusConnection on ubuntu-20.04
  * Fix CMake builds without ANDROID_SDK
  * Blacklist 2 tests in tst_Http2 on ubuntu-20.04
  * Blacklist 1 tests in tst_QSqlQuery on macos
  * Defer creating the special shaders in the texture blitter
  * tst_QSslSocket::serverCipherPreferencies - fix for OpenSSL v3
  * QTemporaryFile: document rename() differences from QFile
  * Doc: 3rd party: Fix reference to FreeType LICENSE.txt
  * Update bundled libjpeg-turbo to version 2.1.4
  * tst_QSsSocket: fix verifyClientCertificate with OpenSSL 3
  * tst_QSslSocket: regenerate certificate used for setLocalCertificateChain
  * tst_QSslSocket::protocolServerSide - make it work with OpenSSL v3
  * tst_QSslSocket::oldErrorsOnSocketReuse - make it work with OpenSSL v3
  * Update zconf.h prefixes to match zlib v1.2.12 update
  * xcb: fix D&amp;D in same xembed client
  * xcb: use global coordinates for position of D&amp;D for xembed client
  * Doc: Update QMetaType::metaObject() descriptions
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 22.04
  * BLACKLIST tst_qfont for Ubuntu 22.04
  * BLACKLIST tst_QMenuBar::check_menuPosition for Ubuntu 22.04
  * tst_QDtls::verifyClientCertficiate - update certs for OpenSSL v3
  * QSslCertificate::toText(): add a file to compare against
  * Fix the spelling of the word "combination"
  * tst_QSslCertificate::pkcs12 - skip the test if OpenSSL version &gt;= 3
  * Android A11Y: Fix TalkBack scrolling behavior
  * Android A11Y: Notify android about scroll events
  * QCocoaDrag: don't add pasteboard items with non-absolute URLs
  * QDirPrivate: pass input QList by cref
  * tst_qbytearray: remove qCompress_data for QT_NO_COMPRESS
  * QDeviceDiscoveryUDev: use NSDMI
  * QAuthenticator: Fix crash when using NTLM / Negotiate
  * Provide a native interface instance in minimal platform plugin
  * Android: document the supported clipboard mimetypes
  * Windows: Account for not finding child windows when calling ChildWindowFromPointEx
  * iOS: Send touch events asynchronously to avoid deadlocking UIKit event loop
  * Disable bitcode for iOS
  * macOS: Ignore deprecation for ReleaseIconRef
  * BLACKLIST tst_QApplication::sendEventsOnProcessEvents for Ubuntu 22.04
  * Convert Latin1 to UTF-16 before passing to ICU API
  * Doc: Remove repetition of word in text
  * eglfs: Fix screen cloning when atomic is enabled
  * Fix printing of dpr&gt;1 images on Windows
  * QHttp: Fix handling of redirect loaded from cache
  * Doc: Fix return type of QLEInteger/QBEInteger post-in/decrement ops
  * qmake: Fix installation of separate debug info for plugins
  * iOS: ensure we close inputpanel after clearing focusobject
  * Convert Latin1 to UTF-16 before passing to ICU API
  * qputenv: defend against non-NUL-terminated QByteArray values
  * QFontSubset: remove unused glyphName() overload
  * Statically assert that the __mips_dsp code is only active on 32-bit
  * QGtk3Theme: Ensure gtk uses the same windowing system as Qt
  * tst_QFocusFrame: fix -Wparantheses
  * Sync Vulkan device features between QVulkanWindow and QRhi
  * SQLite: Update SQLite to v3.39.2
  * Update freetype to 2.12.1
  * corelib: Fix typos in documentation
  * QAtomicInteger docs: mention bool and char8_t as 8-bit types
  * qgraphicsitem_cast: replace 0 with nullptr
  * Doc: Hide weak overload template magic from documentation
  * Revert "QDateTime: fix adjusted datetime handling"
  * Fix select handles disappears issues
  * tst_QSslKey: prepare for the migration to OpenSSL v3
  * tst_qnetworkreply: replace server.pem/key pair
  * Disable unit testing setting up QTcpServer on special Apple interfaces
  * qmake/msbuild: Turn off "use full paths in diagnostics" by default
  * qmake/msbuild: Support all /DEBUG:xxx linker options
  * qmake/msbuild: Support all /LTCG:xxx options
  * Android A11Y: Add content change type to content change event
  * Enabler for fractional scaling of text in Qt Quick
  * macOS: Override logical DPI to 72
  * Add QDom internalSubset implementation
  * Fix tst_AndroidAssets, broken by recent changes on assets load speed
  * Android: Improve loading speed of individual assets
  * Darwin: Replace deprecated symbol kIOMasterPortDefault with equivalent
  * macOS: Remove code for handling logical DPI changes
  * Fix an incorrect invocation of llvm-readobj
  * macOS: Ignore deprecation for kOnSystemDisk icon domain
  * Copy only files that belongs to QML module
  * Android: fix wrong position of cursor handle and editpopup menu in split screen
  * Doc: Document QML_IMPORTS_PATH and QMLPATHS
  * Add the missing RCC_DIR to '.qrc' paths when generating deployment settings
  * Android: Fix the offset of the EditPopupMenu
  * xcb: update xkb_state mask as much as possible
  * QDom: Stop treating non-BMP characters as invalid
  * Android 13: Fix warnings on starting an application
  * qxkbcommon: Map Super/Hyper to Meta early enough to have an effect
  * macOS: Ignore update requests for offline displays
  * macOS: Avoid recursively updating screens when window moves screen
  * qmake/MinGW: Install separate debug info of DLLs next to the DLL
  * QMainWindow: fix restoreState() for toolbars
  * Make two QDT benchmarks data-driven and add more rows
  * Fix doc and example of QLoggingCategory::installCategory()
  * qmake: Document Xcode behavior when bundling translation files
  * Android: Fix missing import
  * QByteArray: more GCC 12 -Werror=array-bound whack-a-mole
  * CMake: Fix android sdk version propagation
  * Restore C++20-deprecated mixed-enum bitwise operators
  * Android: Fix ANR when QtService and QtActivity load in same process
  * Fix restart QtActivity
  * QArrayData::data(): do type-punning via quintptr, not char *
  * QIOSTextResponder: recreate responder upon reset
  * QSslSocket: make it work with OpenSSL v3
  * QFileSystemModelPrivate: de-inline ctor and dtor
  * Network: update Public Suffix List
  * macOS: Ensure proper quoting when calling otool in objc_namespace script
  * QKeySequence: Fix the one-off error in the mac glyph array size
- Commits dropped by the rebase:
  * Apply CVE-2022-27404-27405-27406-qtbase-5.15.diff
  * QArrayData: fix UB via reinterpret_cast (crash with FORTIFY_SOURCE=3)
  * Adapt for q_EVP_PKEY_base_id → q_EVP_PKEY_get_base_id rename in OpenSSL 3
  * Don't use a deprecated function if built/linked with OpenSSL v3</changelog>
  <changelog author="christophe@krop.fr" date="1696593601">- Enable the experimental native painting feature to improve
  remote desktop performances (boo#1214915)
  exporting QT_XCB_NATIVE_PAINTING is required to use the feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1697716800">- Update to version 5.15.11+kde138:
  * QLibraryPrivate: Actually merge load hints
  * QPluginLoader: report the right load hints
  * xkb: fix build with libxkbcommon 1.6.0 and later
  * a11y atspi: Map ButtonMenu role to AT-SPI equivalent</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1703851200">- Update to version 5.15.12+kde144, rebased upstream:
  * QMimeDatabase: handle buggy type definitions with circular inheritance
  * xcb: only set base size when it's valid
  * QPixmapCache: fix leaking of QStrings and Keys on clear()
  * OpenFile portal: do not use O_PATH fds
  * QSystemTrayIcon: properly disconnect old menu in setContextMenu()
  * Guard QTabBar against nested event processing during moving tabs
  * QDial: don't crash when min==max and setting a value != min &amp; max
  * QStandardItemModel: don't leak in mimeData()
  * SQL/MySQL: properly initialize variable
  * QWidgetTextControl: ignore invalid input method event
  * Update the LGPL license header
  * SQL/MySQL: fix handling of json column
  * Remove QMAKE_RANLIB and QMAKE_LINK_SHLIB from android/default_pre.prf
  * macOS: Fix less common writing systems on Catalina and later
  * Blacklist 1 tests in tst_QFtp on ubuntu-20.04
  * Update bundled libpng to version 1.6.39
  * Android: Fix signing of APKs that are generated when an AAB is also built
  * Update bundled zlib to version 1.2.13
  * doc: update the limitation of QSystemTrayIcon on X11
  * Blacklist 1 tests in tst_QTimer on ubuntu-20.04
  * Add benchmarks for QLocale number parsing
  * Add benchmarks for QString number parsing
  * Android: Fix incorrect fullscreen dimensions
  * Gtk3Theme: set XCURSOR_SIZE and XCURSOR_THEME for wayland sessions
  * xcb: Flush Display when processing xcb events
  * xcb: Add xlib wrapper for XFlush()
  * QHostAddress: Fix incorrect comparison against 'Any'
  * QSsl[OpenSSL/Android]: Fix hardcoded 1_1 suffix
  * BLACKLIST: tst_QApplication::sendEventsOnProcessEvents for RHEL 9.0
  * QMacStyle: do not set white color for grayed out button
  * Work round macOS's omission of en_DE from its own uiLanguages()
  * Suppress a deprecation warning in tst_QDateTime::toString_enumformat()
  * QJsonValue: fix incorrect to{Array,Object} when the value is empty
  * QGtk3Dialog: remove the #include for empty moc
  * Remove unneeded QWindow from QGtk3Dialog
  * tst_QSslSocket: Delete sslOptions
  * tst_QSslServer: Make the in-process server use TLS1.2
  * Android: fix Gradle warning about using enableUncompressedNativeLibs
  * Mention  limitation of QDir::drives() on Windows
  * QFileSystemEngine/Win: fix incorrect buffer size in currentPath()
  * Android: properly retrieve mime type of uri to for openUrl()
  * Android: Fix clipboard issue with urls
  * Android: Add a way to disable accessibility via an environment var
  * Update bundled libpng to version 1.6.38
  * QIOSMessageDialog::exec - work around 'windowsless' exec
  * QIosScreen: retain the right window
  * tst_Q{BitArray,ContiguousCache}: check not only count(), but size(), too
  * QIosTextResponder: stop using deprecated constants and type
  * qcompilerdetection.h: detect Coverity
  * Android: Fix Display.getRealMetrics deprecation
  * Fix broken Text rendering when noantialiased NativeRendering is used
  * forkfd: fix Clang 15 ATOMIC_VAR_INIT deprecation warning
  * eglfs: Add env.var. to disable the dedicated drmHandleEvent thread
  * doc: Don't put strings into QVector&lt;double&gt;
  * Remove focusProxyAndInputMethods from tst_QWidget
  * Bump version to 5.15.12
  * Update documentation of qWaitForWindowActive / qWaitForWindowExposed
  * QtHttp: Lower the severity of some log output
  * StyleSheetStyle: Fix color of placeholder texts in text edits
  * Android: Fix flickering on split screen mode
  * Update url to IAccessible2 Specification</changelog>
  <changelog author="alarrosa@suse.com" date="1704283200">- Update to version 5.15.12+kde147:
  * Http2: fix potential overflow in assemble_hpack_block()
    (bsc#1218413, CVE-2023-51714)
  * HPack: fix incorrect integer overflow check
  * HPack: fix a Yoda Condition</changelog>
  <changelog author="fvogt@suse.com" date="1708084800">- Update to version 5.15.12+kde151:
  * Improve KTX file reading memory safety (CVE-2024-25580, boo#1219996)
  * Revert "xcb: only set base size when it's valid"
  * Fix potential leak of QPropertyAnimation in QLineEditIconButton
  * QBitArray: correct inline keyword</changelog>
  <changelog author="alarrosa@suse.com" date="1720785600">- Add patch from upstream to fix a regression in the ODBC driver
  (bsc#1227513, QTBUG-112375):
  * 0001-QSQL-ODBC-fix-regression-trailing-NUL.patch
  * 0002-SQL-ODBC-Pass-correct-length-to-SQLColAttribute.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1722945600">- Add rebased upstream patch to delay any HTTP2 communication until
  encrypted() can be responded to (bsc#1227426, CVE-2024-39936):
  * 0001-HTTP2-Delay-any-communication-until-encrypted-can-be.patch
- Add upstream patch to fix a NULL pointer dereference via the
  function QXcbConnection::initializeAllAtoms() when there is
  anomalous behavior from the X server (bsc#1222120,
  CVE-2023-45935):
  * 0001-xcb-guard-a-pointer-before-usage.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756728000">- Add patch from upstream to fix a precondition violation in call
  to QByteArrayView::at() which can cause crashes (bsc#1243958,
  CVE-2025-5455):
  * 0001-qDecodeDataUrl-fix-precondition-violation-in-call-to.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756814400">- Add patch from upstream to initialize a member variable that was
  uninitialized under some circumstances:
  * 0001-QObjectPrivateSignal-initialize-all-members.patch
- Add patch from upstream to fix a crash when parsing a particular
  glyph in a particular font (QTBUG-124310):
  * 0001-Avoid-crash-in-font-distancefield-computation.patch
  * 0002-Fix-crash-in-font-distancefield-computation.patch
- Add patch from upstream to fix avoid repeatedly registering
  xsettings callbacks when switching cursor themes:
  * 0001-xcb-Avoid-repeatedly-registering-xsettings-callbacks-When.patch
- Add patch from upstream to check validity of RandR output info
  before using it (QTBUG-128906):
  * 0001-xcb-check-validity-of-RandR-output-info-before-using-it.patch
- Add patch from upstream to fix reparenting a window so it takes
  effect even if there are no other state changes to the window:
  * 0001-xcb-Sync-XCB-connection-after-reparenting-window.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756900800">- Add patch from upstream to fix a low performance when processing
  XML data in encodeText (bsc#1239896, CVE-2025-30348):
  * 0001-XML_QDom-speedup-encodeText.patch</changelog>
</package>
<package pkgid="6d41df4a43695178c44edf391432cae84ecba46c28f8cfa5ad82e70ec7cfe108" name="libQt5Test-devel" arch="x86_64">
  <version epoch="0" ver="5.15.12+kde151" rel="150600.3.9.1"/>
  <changelog author="fvogt@suse.com" date="1678968000">- Update to version 5.15.8+kde183:
  * Add nullptr guard in QStyleSheetStyle::drawPrimitive(PE_PanelLineEdit)
  * QAbstractItemView: don't access invalid indexes on copy-key
  * Apply CVE-2023-24607-qtbase-5.15.diff (CVE-2023-24607,
    bsc#1209616)
  * QXcbConnection::getTimestamp: do not return stale timestamp
  * QToolButton: Elide text when constraints prevent from showing whole text
  * correctly set up ref counting in QThreadPool::tryStart(std::function)
  * Do not set Qt::ToolTip flag for QShapedPixmapWindow
  * Fix deletion order also for QImageReader/Writer::setDevice()
  * Fix deletion order in QImageReader/Writer destructors
  * QNetworkReply: Fix typos in the documentation
  * Doc: Fix typo in the online documentation template
  * Doc: Link to page documenting Qt trademarks in the copyright footer
  * [doc] Fix typo in QBuffer::setBuffer() description
  * qwindowsdrag: Fix typo in documentation
  * openglblacklists: Fix typo in description
  * qxcbscreen: Fix typo in documentation
  * Fix typos in SQL driver documentation
  * qxcbwindow.cpp: Fix sign-compare and another warnings
  * QToolButton: reimplement the fix for QTBUG-95255
  * QSysInfo::prettyProductName(): Add macOS Ventura product name
  * QSysInfo::prettyProductName(): add missing macOS product names
  * xcb: correctly disconnect xsettings callbacks
  * ibus: add SetCursorLocationRelative in InputContext.xml</changelog>
  <changelog author="fvogt@suse.com" date="1680523200">- Update to version 5.15.8+kde185:
  * QFSFileEngine: fix overflow bug when using lseek64
  * Add QImage null check when QOpenGLTexture converts
- Add patch to fix return key handling in QGroupBox on GNOME (bsc#1209364):
  * 0001-Revert-QGnomeTheme-Allow-Space-Return-Enter-and-Sele.patch
- Add patch to fix XInput2 events in big-endian X11 clients (bsc#1204883, QTBUG-105157):
  * big-endian-scroll.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1682078400">- Update to version 5.15.9+kde151, rebased upstream:
  * QCborValue: fix incorrect to{Array,Map} when the value is empty
  * QMargins: fix a missing "full stop" in the docs
  * QLibrary: restore translated string
  * QLibrary: fix possible arg() format clobbering
  * iOS: Use python3 for enumerating test target devices
  * Android: Treat ACTION_CANCEL as TouchCancelEvent
  * Doc: Fix broken formatting
  * QFileSystemEngine: fix potential formatting error
  * QString::asprintf: check that passing field widths as arguments works
  * Backport recent QFlags tests
  * network: Fix typos in documentation
  * Fix accuracy with screen composition
  * Doc: Update documentation for QElapsedTimer's in Windows
  * Document that QStandardPath::findExecutable works with absolute paths
  * macOS: Use native resize cursors for diagonal resize
  * Fix clipped glyphs in text rendering of QGraphicsTextItem
  * Change comparison data type to fix int overflow
  * Add missing Q_WEAK_OVERLOAD definition
  * Update QFileInfo docs to mention macOS aliases
  * Distinguish macOS aliases from normal symbolic links
  * Windows QPA: Fix frameless maximize on secondary screens
  * Rewrite tst_qdataurl as a data-driven test
  * Fix compilation for wasm
  * QIOSFileDialog/QIOSDocumentPickerController - handle dismissed view controller
  * Fix QDockWidget's dock area permissions after hovering
  * Fix C++20 ambiguous relational operators between QJsonValue{,Ref}
  * Android: make sure that orientationChange is reported after resize
  * Android: set all QScreen's geometry-related parameters together
  * Blacklist: test cases blacklisted in tst_QDBusConnection:
  * wasm:  fix issue with passing username/password to network request
  * macOS: Pass multi arch flags when linking qmake
  * QCocoaFileDialogHelper: Always enable symlinks and aliases to directories
  * Android: terminate argv passed to main() with nullptr
  * Update bundled libjpeg-turbo to version 2.1.3
  * ANGLE: Load the DirectX libraries from the system path directly
  * SQLite: Update SQLite to v3.37.2
  * Fix compiler warnings about unused parameters
  * Fix getsockopt option_value initial initialization
  * Http2: Fix redirect-handling
  * Android A11Y: Fix value rounding
  * Android A11Y: Announce value together with element name when focused
  * Android A11Y: handle valueChanged events
  * tst_QSystemSemaphore: give proper path to test-helper
  * QNX: Silence compiler warning by initializing variable
  * Update LICENSE.QT-LICENSE-AGREEMENT
  * winrt appxmanifest: Properly replace VCLibs version for newer MSVC versions
  * QAbstractSocket: Don't pretend pause and resume is a stack
  * Gui: test also depends for clipboard feature
  * QDesktopServices: deprecate destroying URL handlers w/o explicit unsetUrlHandler()
  * macOS: Respect QMAKE_APPLE_DEVICE_ARCHS when building qmake
  * HTTP: Make redirect response parsing more generic
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 20.04
  * Android A11Y: populate child elements when constructing node info
  * Fix issue where readyRead() could happen after disconnected()
  * QStringView: add missing constexpr so we can use is_constant_evaluated
  * Use Android's View.generateViewId() for generating ids for views/surfaces
  * Remove documentation of non-existing QAccessible state
  * Doc: Fix snippet to match actual QFileInfo behavior
  * Android: Re-focus focused accessibility node after orientation change
  * Android A11Y: execute C++ code on main Qt thread
  * Android: extract parentId for hidden object in advance
  * xcb: Show valuator atom names properly in categorized logging
  * Android: replace stacktrace with debug message in search for setService
  * Better document attaching a QFutureWatcher to a started QFuture
  * doc: Update GenericDataLocation location on iOS
  * BLACKLIST test_Gestures tests for RHEL-8.4
  * QPlainTestLogger: do not print "failure location" if there's no failure
  * QAbstractItemView: do not access invalid model indices (3/N)
  * Win32: always allow the event loop to be woken up by posted events
  * rhi: d3d11: Use __uuidof where we can
  * Don't QEXPECT_FAIL tst_QLineEdit::testQuickSelectionWithMouse on macOS ARM
  * Network: Emit authenticationRequired when using Ntlm
  * testlib: Disable window restoration on macOS in a non-persistent way
  * QAbstractItemView: do not access invalid model indices (2/N)
  * QAbstractItemView: do not access invalid model indices (1/N)
  * QAbstractItemView: code tidies
  * Update float16 part of TestLib selftest
  * QGuiApplication: constant-initialize lastCursorPosition
  * Blacklist tst_QFileSystemWatcher::signalsEmittedAfterFileMoved on all Windows versions
  * [Android]: Handle the screen name, modes and refreshRate properly
  * QVersionNumber: remove the "pure" attribute from commonPrefix()
  * QEvent: initialize the static userEventTypeRegistry constexprly
  * Let QXcbGlxWindow::createVisual fallback to QXcbWindow::createVisual
  * Android A11Y: fix content update notification when object is hidden
  * Android: explicitly remove accessibility focus when element is hidden
  * BLACKLIST tst_qfont for Red Hat 8.4 and Ubuntu 20.04
  * QtCore: includemocs
  * Fix memory leak in QtConcurrent::run when called with a NULL QThreadPool
  * INTEGRITY: Prevent deletion of virtual functions
  * QMake: replace a Q_ASSERT() with a Q_UNREACHABLE()
  * QTransform benchmark: measure what was promised
  * QStaticByteArrayMatcher: add a useful comment
  * QMacStyle: use the 'momentary push in' type for push buttons
  * qopengl.h: Move C header #include(s) out of the QT_NAMESPACE
  * Enable all supported 1.0 device features in QVulkanWindow
  * Fix queue passed to vkQueuePresent
  * QFusionStyle: don't draw an invalid outline for up/down buttons
  * Doc: Make QListIterator snippets more robust
  * QVersionNumber: don't detach() in rvalue QList/QVector ctor
  * QNetworkRequest: Document how Qt handles 301 and 302 status codes
  * Convert date-time to UTC before claiming it's in GMT
  * Remove execute permission from XML files
  * Add test case for style sheet selectors for enum properties
  * FreeType: allow falling back to synthesized bold if desired
  * Fix an assertion failure in massageAdjustedDateTime()
  * Relax tst_qvulkan::vulkanVersionRequest to make it compatible with 1.1
  * Doc: Replace "C:Documents and Settings" paths
  * QOrderedMutexLocker: fix compilation with C++11
  * QHttpNetworkConnection: Always set proxy settings to all channels
  * Add a markdown writer test for a checklist item ending with `code`
  * Use QTextCharFormat::fontFixedPitch to remember Markdown backtick spans
  * QWizardLayoutInfo: make == and != operators const
  * Revert "Android: Fix screen flicker issues"
  * macOS: Handle momentum scroll NSEventPhaseBegan when scroll had ended
  * SQLite: Update SQLite to v3.37.0
  * Update copyright year to 2022
  * QTzTimeZonePrivate: use ctor delegation instead of init()
  * QTzTimeZonePrivate: fix permanently-detaching m_icu
  * tst_QGraphicsView: fix memleak
  * Doc: Update external links to Qt Creator Manual
  * macOS: assume an unidentified tablet device is a stylus
  * tst_QItemModel: fix memleaks
  * tst_qanimationgroup: fix memleaks
  * QAbstractAnimation: add missing forward-declaration
  * [doc] QCoreApplication::installTranslator() doesn't take ownership
  * tst_qtranslator: fix memleak
  * QTestData: fix streaming of u8 string literals in C++20 mode
  * QThread/Unix: extract duplicate code
  * QWindowPrivate: fix inconsistent inline on some methods
  * tst_QStringList: check that join(u'0') embeds NULs
  * macOS: Sanitize scroll deltas for NSEventPhaseCancelled
  * tst_qsharedmemory: skip readOnly() test under asan
  * QXmlStreamReader: update test distribution
  * QZipReader: update to unzip partly broken archives
  * Deliver context menu event with correct coordinates to widgets in popups
  * QTextHtmlParser: fix prefix lookahead and html comments
  * QtConcurrent::run crashes on program exit
  * tst_QPropertyAnimation: fix leaks occurring under normal operation
  * tst_QPropertyAnimation: fix wrong comment
  * QLogging: fix potential missing NUL-terminator when calling OutputDebugString
  * Fix qt_scrollRectInImage when scrolling outside of the image
- Commits dropped by the rebase:
  * Fix compile with Qt5: Use QString::mid instead of QString::sliced
  * Restore C++11 compatibility after e8b9f4c28d3ab5e960dc54f2dc0c4b749b0b50e0
  * QDateTime: Don't require c++17</changelog>
  <changelog author="fvogt@suse.com" date="1683633600">- Amend patch to fix mouse grabbing as well (bsc#1211024):
  * big-endian-scroll.patch</changelog>
  <changelog author="fvogt@suse.com" date="1684929600">- Update to version 5.15.9+kde154:
  * Hsts: match header names case insensitively (CVE-2023-32762,
    QTBUG-113392, bsc#1211797)
  * Fix specific overflow in qtextlayout (CVE-2023-32763,
    QTBUG-113337, bsc#1211798)
  * QDnsLookup/Unix: make sure we don't overflow the buffer
    (CVE-2023-33285, boo#1211642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1686657600">- Update to version 5.15.10+kde129, rebased upstream:
  * Ssl: Copy the on-demand cert loading bool from default config
  * Schannel: Reject certificate not signed by a configured CA certificate (boo#1211994, CVE-2023-34410)
  * qnetworkreplyfileimpl_p.h: fix header guard name
  * Revert "Draw the cursor considering the descent is 0"
  * Use pkgconfig in order to find libproxy configuration
  * Upgrade PCRE2 to 10.40
  * Android A11Y: handle LocationChanged event only for focused element
  * Port binary JSON to new special integer bitfields
  * INTEGRITY: enable C99 globally
  * QObject: mark two error reporting functions COLD
  * Endian: Provide special integer bitfield unions
  * Android: set useLegacyPackaging to true in build.gradle
  * QWidgetTextControl: port to new-style connects (faster)
  * Sync qxmlstream.g with qxmlstreamparser_p.h [1/2]: switched lines
  * tst_QNetworkReply try stabilize autoDeleteReplies tests
  * Remove duplicated include for &lt;limits&gt;
  * Fix recursion crash when calling setStyleSheet with `qproperty-styleSheet`
  * qwindowsxpstyle: Fix typos in documentation
  * Correct prefix reported for end element in QXmlStreamReader
  * Android A11Y: Add supported role infos to A11yNodeInfo
  * Fix handling of DateTime values in QSettings
  * Fix off-by-one for "typically" lowest value INT_MIN
  * xml: Fix typos in documentation
  * QWindowsWindow: Fix typo in documentation
  * includemocs (updated script)
  * widgets: Fix typos in documentation
  * cocoa: Fix typo in debug messages
  * Only scroll QMenu when there is a valid active action
  * QTimer: Add note in documentation
  * Fix QListView assert when the last row is moved in IconMode
  * QFileDialog: Fix adding default suffix when file path contains dot
  * QLineEdit: account for the placeholderText when computing lineRect
  * QFileDialog::saveFileContent crashes on accept
  * QCompleter: QCompleter unexpectedly changes QLineEdit text
  * Fix build error on iOS with the configure option -qtnamespace
  * Draw the cursor considering the descent is 0
  * Remove pure-virtual-signals.h include from tst_moc.cpp
  * plugins: image formats - fix odr violation
  * dbus: Fix typos
  * qwindowsdialoghelpers: Fix typo in documentation
  * QTableView: Document the customizations applied to QHeaderView
  * Unicodetools: compile
  * eglfs_x11: Fix running flag linkage
  * qcompilerdetection.h: add Q_CC_{GNU,MSVC,CLANG}_ONLY macros
  * Fix CMake warning about "missing closing ' quote"
  * Fix alignment of next/prev links in offline style
  * QtDBus: includemocs
  * Image Plugins: includemocs(-ish)
  * QtGui: includemocs
  * QXcbNativeInterface: remove unused field m_sysTraySelectionAtom
  * Windows QPA: Fix slowdown with large table/tree views with accessibility
  * Macstyle: fix the text color on the disabled button
  * QMacStyle: fix tool buttons (in checked mode)
  * QTeamCityLogger: fix .arg() placeholder injection
  * QAbstractTestLogger: disable copying
  * Fix errorMessageFromComError()
  * QtNetwork: includemocs
  * AppleUnifiedLogger: Remove manually managed os_log_t cache
  * examples: add WindowStaysOnBottomHint into preview text
  * QSharedPointer: Use matching new/delete
  * QIbusPlatformInputContextPlugin: includemocs
  * QGtk3ThemePlugin: includemocs
  * QTuioTouchPlugin: includemocs
  * QtWidgets: includemocs v2022
  * QMYSQLDriverPlugin: includemocs
  * QtDeviceDiscoverySupportPrivate: includemocs
  * QLinuxFbIntegrationPlugin: includemocs
  * QtPrintSupport: includemocs
  * QSQLiteDriverPlugin: includemocs
  * QtFbSupportPrivate: includemocs
  * QXdgDesktopPortalThemePlugin: includemocs
  * QtTest: includemocs
  * QComposePlatformInputContextPlugin: includemocs
  * QtSql: includemocs
  * QVncIntegrationPlugin: includemocs
  * Fix backingstore fractional DPR glitches for widgets in child windows
  * Include &lt;limits&gt; where std::numeric_limits is used
  * QtInputSupportPrivate: includemocs
  * Document the default value of QSFPM::sortOrder()
  * Better document how to enable sorting in QSPFM
  * Correct documentation of INI format's loss of type information
  * Android: add missing properties in AndroidManifest.xml
  * Fix assertion failure when parsing a doubly-invalid date-time text
  * Windows QPA: Correct mistake when calculating minmaxinfo
  * Android: replace ndk.dir with android.ndkVersion in build.gradle
  * Android: remove the old copy of gradle.properties after reading it
  * CMake Android Support: Fix signing of APKs
  * Android: fix A11Y object description
  * macOS: Fix warning about comparing different types in QCocoaScreen::isOnline
  * Fix qmake build on FreeBSD
  * Update documentation of enum Qt::DockWidgetArea
  * xcb: recreate xcb window under some conditions
  * objc_namespace: Add support for universal binaries
  * objc_namespace: Fix misspelled argument for silencing output
  * objc_namespace: Update parsing logic to account for otool changes
  * Blacklist passwordAuth for Ubuntu 20.04
  * Android: wrap QAndroidInputContext's m_focusObject in a QPointer
  * Fix compilation with GCC 12 (and on Fedora 35 and newer)
  * Chip example: fix an accidental bool-&gt;int conversion when using PMF connections
  * qmake: Add support for C++23
  * Android: use BCP 47 tag to create a correct Locale for QTimeZone::displayName()
  * QDateTime: fix adjusted datetime handling
  * Fix crash in tst_qmltc_examples on Android
  * macOS: Remove dead code for focus ring handling in Mac style
  * Detach for colortransforms of indexed formats
  * tst_QTcpSocket::connectToHostError - handle possible timeouts
  * CoreText: Avoid populating font family aliases if family was populated
  * Graphicsview: Avoid background clearing glitches under fractional DPR
  * Windows QPA: Avoid slowdown with UI Automation name change notification
  * Windows QPA: Avoid sending accessibility notifications before activation
  * Windows: Fix potential crash when retrieving default printer
  * Make Ubuntu with its non-standard security level happy
  * Android: Blacklist failing tests on tst_QGraphicsProxyWidget
  * Update LA 4.4.1
  * iOS A11Y: Set more accessibilityTraits
  * QNX: Fix compiler warning by when FEATURE_clipboard is not enabled
  * Document that native file dialogs might not show a title
  * Doc: Remove mentionings of overflows from QElapsedTimer
  * QTextMarkdownImporter: don't apply text char format to list item block
- Commits dropped by the rebase:
  * QBuffer: add missing &lt;limits&gt; include
  * Fix developer build</changelog>
  <changelog author="gmbr3@opensuse.org" date="1687953600">- Change %_libqt5_libexecdir to %_libexecdir/qt5 (bsc#1174075)</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch icu-devel requires to pkgconfig to allow switching libicu
  versions</changelog>
  <changelog author="fvogt@suse.com" date="1695902401">- Update to version 5.15.10+kde159 (bsc#1214327, CVE-2023-37369):
  * Fix CVE-2023-43114
  * QMimeDatabase: fix detection of pattern conflict in different prefixes
  * Fix highdpi conversion of QTabletEvent coordinates on xcb
  * widget: set WA_X11NetWmWindowType* after xcb window was created
  * Fix crash when setting override cursor on multiple clients
  * QAccessibleWidget: Remove pointless ZWSP in warning message
  * Android A11Y: Fix deadlock in QtAndroidAccessibility::runInObjectContext()
  * Correctly parse non BMP char refs in the sax parser
  * Clear the _X version of alongside the enum deprecator
  * Fix UB (signed char passed to &lt;cctype&gt; function)
  * Qt3DRender: includemocs
  * Fix capitalization error in auto-generated qdbusmacros.h include
  * QColorDialog: Ignore mouse move events when no mouse button is pressed
  * QHostInfo: fix remaining slotObj leaks
  * QXmlStreamReader: Raise error on unexpected tokens (CVE-2023-38197,
    QTBUG-92113, QTBUG-95188, bsc#1213326)
  * QTextLayout: Reconsider cursor drawing on TextObject
  * Ensure consistent cursor width under fractional scaling
  * Fix QTextEdit cursor rectangle vertical positioning
  * Return 0 in QWindow::winId in case of failed platform window creation
  * Doc: note QWindow::winId() will cause platform window creation
  * QSslDiffieHellmanParameters: fix mem-leak
  * QHostInfo: fix leaking slot object
  * Make sure we don't count down past 0 QT_FATAL_CRITICALS
  * QLogging: DRY isFatal(QtMsgType)
  * tst_QXmlStream: remove unneeded _ba UDLs
  * Fix typo in QXmlStreamReader error message
  * QXmlStreamReader: make fastScanName() indicate parsing status to callers
  * QXmlStreamReader: change fastScanName() to take a Value*
  * Fix Croatia's currency
  * SSL: upgrade the default DH parameters</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1696593600">- Update to version 5.15.11+kde134, rebased upstream:
  * Revert "Windows QPA: Add support to UiaRaiseNotificationEvent()"
  * FileChooser portal: Make sure filter.name is not empty
  * QPersistentModelIndex: fix UB (op&lt; on unrelated pointers)
  * Avoid crash when keysymToQtKey(keysym, Qt::ControlModifier) is called
  * a11y atspi: translate coords for GetOffsetAtPoint the right way
  * a11y atspi: Take dialog into account as top-level window
  * a11y atspi: Fix incorrect use of x instead of y position
  * macOS: Handle asynchronous deminiaturizing of windows
  * QTranslator: generalize a UNIX-only path
  * iOS, input panel: be more careful before enabling QIOSKeyboardListener
  * Android: Fix flickering on window resize and show keyboard
  * Android A11Y: Check for active surface before calling into native code
  * xcb: Delete touch points without target windows
  * Blacklist 1 tests in tst_QDBusConnection on ubuntu-20.04
  * Fix CMake builds without ANDROID_SDK
  * Blacklist 2 tests in tst_Http2 on ubuntu-20.04
  * Blacklist 1 tests in tst_QSqlQuery on macos
  * Defer creating the special shaders in the texture blitter
  * tst_QSslSocket::serverCipherPreferencies - fix for OpenSSL v3
  * QTemporaryFile: document rename() differences from QFile
  * Doc: 3rd party: Fix reference to FreeType LICENSE.txt
  * Update bundled libjpeg-turbo to version 2.1.4
  * tst_QSsSocket: fix verifyClientCertificate with OpenSSL 3
  * tst_QSslSocket: regenerate certificate used for setLocalCertificateChain
  * tst_QSslSocket::protocolServerSide - make it work with OpenSSL v3
  * tst_QSslSocket::oldErrorsOnSocketReuse - make it work with OpenSSL v3
  * Update zconf.h prefixes to match zlib v1.2.12 update
  * xcb: fix D&amp;D in same xembed client
  * xcb: use global coordinates for position of D&amp;D for xembed client
  * Doc: Update QMetaType::metaObject() descriptions
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 22.04
  * BLACKLIST tst_qfont for Ubuntu 22.04
  * BLACKLIST tst_QMenuBar::check_menuPosition for Ubuntu 22.04
  * tst_QDtls::verifyClientCertficiate - update certs for OpenSSL v3
  * QSslCertificate::toText(): add a file to compare against
  * Fix the spelling of the word "combination"
  * tst_QSslCertificate::pkcs12 - skip the test if OpenSSL version &gt;= 3
  * Android A11Y: Fix TalkBack scrolling behavior
  * Android A11Y: Notify android about scroll events
  * QCocoaDrag: don't add pasteboard items with non-absolute URLs
  * QDirPrivate: pass input QList by cref
  * tst_qbytearray: remove qCompress_data for QT_NO_COMPRESS
  * QDeviceDiscoveryUDev: use NSDMI
  * QAuthenticator: Fix crash when using NTLM / Negotiate
  * Provide a native interface instance in minimal platform plugin
  * Android: document the supported clipboard mimetypes
  * Windows: Account for not finding child windows when calling ChildWindowFromPointEx
  * iOS: Send touch events asynchronously to avoid deadlocking UIKit event loop
  * Disable bitcode for iOS
  * macOS: Ignore deprecation for ReleaseIconRef
  * BLACKLIST tst_QApplication::sendEventsOnProcessEvents for Ubuntu 22.04
  * Convert Latin1 to UTF-16 before passing to ICU API
  * Doc: Remove repetition of word in text
  * eglfs: Fix screen cloning when atomic is enabled
  * Fix printing of dpr&gt;1 images on Windows
  * QHttp: Fix handling of redirect loaded from cache
  * Doc: Fix return type of QLEInteger/QBEInteger post-in/decrement ops
  * qmake: Fix installation of separate debug info for plugins
  * iOS: ensure we close inputpanel after clearing focusobject
  * Convert Latin1 to UTF-16 before passing to ICU API
  * qputenv: defend against non-NUL-terminated QByteArray values
  * QFontSubset: remove unused glyphName() overload
  * Statically assert that the __mips_dsp code is only active on 32-bit
  * QGtk3Theme: Ensure gtk uses the same windowing system as Qt
  * tst_QFocusFrame: fix -Wparantheses
  * Sync Vulkan device features between QVulkanWindow and QRhi
  * SQLite: Update SQLite to v3.39.2
  * Update freetype to 2.12.1
  * corelib: Fix typos in documentation
  * QAtomicInteger docs: mention bool and char8_t as 8-bit types
  * qgraphicsitem_cast: replace 0 with nullptr
  * Doc: Hide weak overload template magic from documentation
  * Revert "QDateTime: fix adjusted datetime handling"
  * Fix select handles disappears issues
  * tst_QSslKey: prepare for the migration to OpenSSL v3
  * tst_qnetworkreply: replace server.pem/key pair
  * Disable unit testing setting up QTcpServer on special Apple interfaces
  * qmake/msbuild: Turn off "use full paths in diagnostics" by default
  * qmake/msbuild: Support all /DEBUG:xxx linker options
  * qmake/msbuild: Support all /LTCG:xxx options
  * Android A11Y: Add content change type to content change event
  * Enabler for fractional scaling of text in Qt Quick
  * macOS: Override logical DPI to 72
  * Add QDom internalSubset implementation
  * Fix tst_AndroidAssets, broken by recent changes on assets load speed
  * Android: Improve loading speed of individual assets
  * Darwin: Replace deprecated symbol kIOMasterPortDefault with equivalent
  * macOS: Remove code for handling logical DPI changes
  * Fix an incorrect invocation of llvm-readobj
  * macOS: Ignore deprecation for kOnSystemDisk icon domain
  * Copy only files that belongs to QML module
  * Android: fix wrong position of cursor handle and editpopup menu in split screen
  * Doc: Document QML_IMPORTS_PATH and QMLPATHS
  * Add the missing RCC_DIR to '.qrc' paths when generating deployment settings
  * Android: Fix the offset of the EditPopupMenu
  * xcb: update xkb_state mask as much as possible
  * QDom: Stop treating non-BMP characters as invalid
  * Android 13: Fix warnings on starting an application
  * qxkbcommon: Map Super/Hyper to Meta early enough to have an effect
  * macOS: Ignore update requests for offline displays
  * macOS: Avoid recursively updating screens when window moves screen
  * qmake/MinGW: Install separate debug info of DLLs next to the DLL
  * QMainWindow: fix restoreState() for toolbars
  * Make two QDT benchmarks data-driven and add more rows
  * Fix doc and example of QLoggingCategory::installCategory()
  * qmake: Document Xcode behavior when bundling translation files
  * Android: Fix missing import
  * QByteArray: more GCC 12 -Werror=array-bound whack-a-mole
  * CMake: Fix android sdk version propagation
  * Restore C++20-deprecated mixed-enum bitwise operators
  * Android: Fix ANR when QtService and QtActivity load in same process
  * Fix restart QtActivity
  * QArrayData::data(): do type-punning via quintptr, not char *
  * QIOSTextResponder: recreate responder upon reset
  * QSslSocket: make it work with OpenSSL v3
  * QFileSystemModelPrivate: de-inline ctor and dtor
  * Network: update Public Suffix List
  * macOS: Ensure proper quoting when calling otool in objc_namespace script
  * QKeySequence: Fix the one-off error in the mac glyph array size
- Commits dropped by the rebase:
  * Apply CVE-2022-27404-27405-27406-qtbase-5.15.diff
  * QArrayData: fix UB via reinterpret_cast (crash with FORTIFY_SOURCE=3)
  * Adapt for q_EVP_PKEY_base_id → q_EVP_PKEY_get_base_id rename in OpenSSL 3
  * Don't use a deprecated function if built/linked with OpenSSL v3</changelog>
  <changelog author="christophe@krop.fr" date="1696593601">- Enable the experimental native painting feature to improve
  remote desktop performances (boo#1214915)
  exporting QT_XCB_NATIVE_PAINTING is required to use the feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1697716800">- Update to version 5.15.11+kde138:
  * QLibraryPrivate: Actually merge load hints
  * QPluginLoader: report the right load hints
  * xkb: fix build with libxkbcommon 1.6.0 and later
  * a11y atspi: Map ButtonMenu role to AT-SPI equivalent</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1703851200">- Update to version 5.15.12+kde144, rebased upstream:
  * QMimeDatabase: handle buggy type definitions with circular inheritance
  * xcb: only set base size when it's valid
  * QPixmapCache: fix leaking of QStrings and Keys on clear()
  * OpenFile portal: do not use O_PATH fds
  * QSystemTrayIcon: properly disconnect old menu in setContextMenu()
  * Guard QTabBar against nested event processing during moving tabs
  * QDial: don't crash when min==max and setting a value != min &amp; max
  * QStandardItemModel: don't leak in mimeData()
  * SQL/MySQL: properly initialize variable
  * QWidgetTextControl: ignore invalid input method event
  * Update the LGPL license header
  * SQL/MySQL: fix handling of json column
  * Remove QMAKE_RANLIB and QMAKE_LINK_SHLIB from android/default_pre.prf
  * macOS: Fix less common writing systems on Catalina and later
  * Blacklist 1 tests in tst_QFtp on ubuntu-20.04
  * Update bundled libpng to version 1.6.39
  * Android: Fix signing of APKs that are generated when an AAB is also built
  * Update bundled zlib to version 1.2.13
  * doc: update the limitation of QSystemTrayIcon on X11
  * Blacklist 1 tests in tst_QTimer on ubuntu-20.04
  * Add benchmarks for QLocale number parsing
  * Add benchmarks for QString number parsing
  * Android: Fix incorrect fullscreen dimensions
  * Gtk3Theme: set XCURSOR_SIZE and XCURSOR_THEME for wayland sessions
  * xcb: Flush Display when processing xcb events
  * xcb: Add xlib wrapper for XFlush()
  * QHostAddress: Fix incorrect comparison against 'Any'
  * QSsl[OpenSSL/Android]: Fix hardcoded 1_1 suffix
  * BLACKLIST: tst_QApplication::sendEventsOnProcessEvents for RHEL 9.0
  * QMacStyle: do not set white color for grayed out button
  * Work round macOS's omission of en_DE from its own uiLanguages()
  * Suppress a deprecation warning in tst_QDateTime::toString_enumformat()
  * QJsonValue: fix incorrect to{Array,Object} when the value is empty
  * QGtk3Dialog: remove the #include for empty moc
  * Remove unneeded QWindow from QGtk3Dialog
  * tst_QSslSocket: Delete sslOptions
  * tst_QSslServer: Make the in-process server use TLS1.2
  * Android: fix Gradle warning about using enableUncompressedNativeLibs
  * Mention  limitation of QDir::drives() on Windows
  * QFileSystemEngine/Win: fix incorrect buffer size in currentPath()
  * Android: properly retrieve mime type of uri to for openUrl()
  * Android: Fix clipboard issue with urls
  * Android: Add a way to disable accessibility via an environment var
  * Update bundled libpng to version 1.6.38
  * QIOSMessageDialog::exec - work around 'windowsless' exec
  * QIosScreen: retain the right window
  * tst_Q{BitArray,ContiguousCache}: check not only count(), but size(), too
  * QIosTextResponder: stop using deprecated constants and type
  * qcompilerdetection.h: detect Coverity
  * Android: Fix Display.getRealMetrics deprecation
  * Fix broken Text rendering when noantialiased NativeRendering is used
  * forkfd: fix Clang 15 ATOMIC_VAR_INIT deprecation warning
  * eglfs: Add env.var. to disable the dedicated drmHandleEvent thread
  * doc: Don't put strings into QVector&lt;double&gt;
  * Remove focusProxyAndInputMethods from tst_QWidget
  * Bump version to 5.15.12
  * Update documentation of qWaitForWindowActive / qWaitForWindowExposed
  * QtHttp: Lower the severity of some log output
  * StyleSheetStyle: Fix color of placeholder texts in text edits
  * Android: Fix flickering on split screen mode
  * Update url to IAccessible2 Specification</changelog>
  <changelog author="alarrosa@suse.com" date="1704283200">- Update to version 5.15.12+kde147:
  * Http2: fix potential overflow in assemble_hpack_block()
    (bsc#1218413, CVE-2023-51714)
  * HPack: fix incorrect integer overflow check
  * HPack: fix a Yoda Condition</changelog>
  <changelog author="fvogt@suse.com" date="1708084800">- Update to version 5.15.12+kde151:
  * Improve KTX file reading memory safety (CVE-2024-25580, boo#1219996)
  * Revert "xcb: only set base size when it's valid"
  * Fix potential leak of QPropertyAnimation in QLineEditIconButton
  * QBitArray: correct inline keyword</changelog>
  <changelog author="alarrosa@suse.com" date="1720785600">- Add patch from upstream to fix a regression in the ODBC driver
  (bsc#1227513, QTBUG-112375):
  * 0001-QSQL-ODBC-fix-regression-trailing-NUL.patch
  * 0002-SQL-ODBC-Pass-correct-length-to-SQLColAttribute.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1722945600">- Add rebased upstream patch to delay any HTTP2 communication until
  encrypted() can be responded to (bsc#1227426, CVE-2024-39936):
  * 0001-HTTP2-Delay-any-communication-until-encrypted-can-be.patch
- Add upstream patch to fix a NULL pointer dereference via the
  function QXcbConnection::initializeAllAtoms() when there is
  anomalous behavior from the X server (bsc#1222120,
  CVE-2023-45935):
  * 0001-xcb-guard-a-pointer-before-usage.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756728000">- Add patch from upstream to fix a precondition violation in call
  to QByteArrayView::at() which can cause crashes (bsc#1243958,
  CVE-2025-5455):
  * 0001-qDecodeDataUrl-fix-precondition-violation-in-call-to.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756814400">- Add patch from upstream to initialize a member variable that was
  uninitialized under some circumstances:
  * 0001-QObjectPrivateSignal-initialize-all-members.patch
- Add patch from upstream to fix a crash when parsing a particular
  glyph in a particular font (QTBUG-124310):
  * 0001-Avoid-crash-in-font-distancefield-computation.patch
  * 0002-Fix-crash-in-font-distancefield-computation.patch
- Add patch from upstream to fix avoid repeatedly registering
  xsettings callbacks when switching cursor themes:
  * 0001-xcb-Avoid-repeatedly-registering-xsettings-callbacks-When.patch
- Add patch from upstream to check validity of RandR output info
  before using it (QTBUG-128906):
  * 0001-xcb-check-validity-of-RandR-output-info-before-using-it.patch
- Add patch from upstream to fix reparenting a window so it takes
  effect even if there are no other state changes to the window:
  * 0001-xcb-Sync-XCB-connection-after-reparenting-window.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756900800">- Add patch from upstream to fix a low performance when processing
  XML data in encodeText (bsc#1239896, CVE-2025-30348):
  * 0001-XML_QDom-speedup-encodeText.patch</changelog>
</package>
<package pkgid="1f1166a62b501de83bef88e42fe2553e0507f1ffdffd2e04db29658cfbd0a40e" name="libQt5Test-private-headers-devel" arch="noarch">
  <version epoch="0" ver="5.15.12+kde151" rel="150600.3.9.1"/>
  <changelog author="fvogt@suse.com" date="1678968000">- Update to version 5.15.8+kde183:
  * Add nullptr guard in QStyleSheetStyle::drawPrimitive(PE_PanelLineEdit)
  * QAbstractItemView: don't access invalid indexes on copy-key
  * Apply CVE-2023-24607-qtbase-5.15.diff (CVE-2023-24607,
    bsc#1209616)
  * QXcbConnection::getTimestamp: do not return stale timestamp
  * QToolButton: Elide text when constraints prevent from showing whole text
  * correctly set up ref counting in QThreadPool::tryStart(std::function)
  * Do not set Qt::ToolTip flag for QShapedPixmapWindow
  * Fix deletion order also for QImageReader/Writer::setDevice()
  * Fix deletion order in QImageReader/Writer destructors
  * QNetworkReply: Fix typos in the documentation
  * Doc: Fix typo in the online documentation template
  * Doc: Link to page documenting Qt trademarks in the copyright footer
  * [doc] Fix typo in QBuffer::setBuffer() description
  * qwindowsdrag: Fix typo in documentation
  * openglblacklists: Fix typo in description
  * qxcbscreen: Fix typo in documentation
  * Fix typos in SQL driver documentation
  * qxcbwindow.cpp: Fix sign-compare and another warnings
  * QToolButton: reimplement the fix for QTBUG-95255
  * QSysInfo::prettyProductName(): Add macOS Ventura product name
  * QSysInfo::prettyProductName(): add missing macOS product names
  * xcb: correctly disconnect xsettings callbacks
  * ibus: add SetCursorLocationRelative in InputContext.xml</changelog>
  <changelog author="fvogt@suse.com" date="1680523200">- Update to version 5.15.8+kde185:
  * QFSFileEngine: fix overflow bug when using lseek64
  * Add QImage null check when QOpenGLTexture converts
- Add patch to fix return key handling in QGroupBox on GNOME (bsc#1209364):
  * 0001-Revert-QGnomeTheme-Allow-Space-Return-Enter-and-Sele.patch
- Add patch to fix XInput2 events in big-endian X11 clients (bsc#1204883, QTBUG-105157):
  * big-endian-scroll.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1682078400">- Update to version 5.15.9+kde151, rebased upstream:
  * QCborValue: fix incorrect to{Array,Map} when the value is empty
  * QMargins: fix a missing "full stop" in the docs
  * QLibrary: restore translated string
  * QLibrary: fix possible arg() format clobbering
  * iOS: Use python3 for enumerating test target devices
  * Android: Treat ACTION_CANCEL as TouchCancelEvent
  * Doc: Fix broken formatting
  * QFileSystemEngine: fix potential formatting error
  * QString::asprintf: check that passing field widths as arguments works
  * Backport recent QFlags tests
  * network: Fix typos in documentation
  * Fix accuracy with screen composition
  * Doc: Update documentation for QElapsedTimer's in Windows
  * Document that QStandardPath::findExecutable works with absolute paths
  * macOS: Use native resize cursors for diagonal resize
  * Fix clipped glyphs in text rendering of QGraphicsTextItem
  * Change comparison data type to fix int overflow
  * Add missing Q_WEAK_OVERLOAD definition
  * Update QFileInfo docs to mention macOS aliases
  * Distinguish macOS aliases from normal symbolic links
  * Windows QPA: Fix frameless maximize on secondary screens
  * Rewrite tst_qdataurl as a data-driven test
  * Fix compilation for wasm
  * QIOSFileDialog/QIOSDocumentPickerController - handle dismissed view controller
  * Fix QDockWidget's dock area permissions after hovering
  * Fix C++20 ambiguous relational operators between QJsonValue{,Ref}
  * Android: make sure that orientationChange is reported after resize
  * Android: set all QScreen's geometry-related parameters together
  * Blacklist: test cases blacklisted in tst_QDBusConnection:
  * wasm:  fix issue with passing username/password to network request
  * macOS: Pass multi arch flags when linking qmake
  * QCocoaFileDialogHelper: Always enable symlinks and aliases to directories
  * Android: terminate argv passed to main() with nullptr
  * Update bundled libjpeg-turbo to version 2.1.3
  * ANGLE: Load the DirectX libraries from the system path directly
  * SQLite: Update SQLite to v3.37.2
  * Fix compiler warnings about unused parameters
  * Fix getsockopt option_value initial initialization
  * Http2: Fix redirect-handling
  * Android A11Y: Fix value rounding
  * Android A11Y: Announce value together with element name when focused
  * Android A11Y: handle valueChanged events
  * tst_QSystemSemaphore: give proper path to test-helper
  * QNX: Silence compiler warning by initializing variable
  * Update LICENSE.QT-LICENSE-AGREEMENT
  * winrt appxmanifest: Properly replace VCLibs version for newer MSVC versions
  * QAbstractSocket: Don't pretend pause and resume is a stack
  * Gui: test also depends for clipboard feature
  * QDesktopServices: deprecate destroying URL handlers w/o explicit unsetUrlHandler()
  * macOS: Respect QMAKE_APPLE_DEVICE_ARCHS when building qmake
  * HTTP: Make redirect response parsing more generic
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 20.04
  * Android A11Y: populate child elements when constructing node info
  * Fix issue where readyRead() could happen after disconnected()
  * QStringView: add missing constexpr so we can use is_constant_evaluated
  * Use Android's View.generateViewId() for generating ids for views/surfaces
  * Remove documentation of non-existing QAccessible state
  * Doc: Fix snippet to match actual QFileInfo behavior
  * Android: Re-focus focused accessibility node after orientation change
  * Android A11Y: execute C++ code on main Qt thread
  * Android: extract parentId for hidden object in advance
  * xcb: Show valuator atom names properly in categorized logging
  * Android: replace stacktrace with debug message in search for setService
  * Better document attaching a QFutureWatcher to a started QFuture
  * doc: Update GenericDataLocation location on iOS
  * BLACKLIST test_Gestures tests for RHEL-8.4
  * QPlainTestLogger: do not print "failure location" if there's no failure
  * QAbstractItemView: do not access invalid model indices (3/N)
  * Win32: always allow the event loop to be woken up by posted events
  * rhi: d3d11: Use __uuidof where we can
  * Don't QEXPECT_FAIL tst_QLineEdit::testQuickSelectionWithMouse on macOS ARM
  * Network: Emit authenticationRequired when using Ntlm
  * testlib: Disable window restoration on macOS in a non-persistent way
  * QAbstractItemView: do not access invalid model indices (2/N)
  * QAbstractItemView: do not access invalid model indices (1/N)
  * QAbstractItemView: code tidies
  * Update float16 part of TestLib selftest
  * QGuiApplication: constant-initialize lastCursorPosition
  * Blacklist tst_QFileSystemWatcher::signalsEmittedAfterFileMoved on all Windows versions
  * [Android]: Handle the screen name, modes and refreshRate properly
  * QVersionNumber: remove the "pure" attribute from commonPrefix()
  * QEvent: initialize the static userEventTypeRegistry constexprly
  * Let QXcbGlxWindow::createVisual fallback to QXcbWindow::createVisual
  * Android A11Y: fix content update notification when object is hidden
  * Android: explicitly remove accessibility focus when element is hidden
  * BLACKLIST tst_qfont for Red Hat 8.4 and Ubuntu 20.04
  * QtCore: includemocs
  * Fix memory leak in QtConcurrent::run when called with a NULL QThreadPool
  * INTEGRITY: Prevent deletion of virtual functions
  * QMake: replace a Q_ASSERT() with a Q_UNREACHABLE()
  * QTransform benchmark: measure what was promised
  * QStaticByteArrayMatcher: add a useful comment
  * QMacStyle: use the 'momentary push in' type for push buttons
  * qopengl.h: Move C header #include(s) out of the QT_NAMESPACE
  * Enable all supported 1.0 device features in QVulkanWindow
  * Fix queue passed to vkQueuePresent
  * QFusionStyle: don't draw an invalid outline for up/down buttons
  * Doc: Make QListIterator snippets more robust
  * QVersionNumber: don't detach() in rvalue QList/QVector ctor
  * QNetworkRequest: Document how Qt handles 301 and 302 status codes
  * Convert date-time to UTC before claiming it's in GMT
  * Remove execute permission from XML files
  * Add test case for style sheet selectors for enum properties
  * FreeType: allow falling back to synthesized bold if desired
  * Fix an assertion failure in massageAdjustedDateTime()
  * Relax tst_qvulkan::vulkanVersionRequest to make it compatible with 1.1
  * Doc: Replace "C:Documents and Settings" paths
  * QOrderedMutexLocker: fix compilation with C++11
  * QHttpNetworkConnection: Always set proxy settings to all channels
  * Add a markdown writer test for a checklist item ending with `code`
  * Use QTextCharFormat::fontFixedPitch to remember Markdown backtick spans
  * QWizardLayoutInfo: make == and != operators const
  * Revert "Android: Fix screen flicker issues"
  * macOS: Handle momentum scroll NSEventPhaseBegan when scroll had ended
  * SQLite: Update SQLite to v3.37.0
  * Update copyright year to 2022
  * QTzTimeZonePrivate: use ctor delegation instead of init()
  * QTzTimeZonePrivate: fix permanently-detaching m_icu
  * tst_QGraphicsView: fix memleak
  * Doc: Update external links to Qt Creator Manual
  * macOS: assume an unidentified tablet device is a stylus
  * tst_QItemModel: fix memleaks
  * tst_qanimationgroup: fix memleaks
  * QAbstractAnimation: add missing forward-declaration
  * [doc] QCoreApplication::installTranslator() doesn't take ownership
  * tst_qtranslator: fix memleak
  * QTestData: fix streaming of u8 string literals in C++20 mode
  * QThread/Unix: extract duplicate code
  * QWindowPrivate: fix inconsistent inline on some methods
  * tst_QStringList: check that join(u'0') embeds NULs
  * macOS: Sanitize scroll deltas for NSEventPhaseCancelled
  * tst_qsharedmemory: skip readOnly() test under asan
  * QXmlStreamReader: update test distribution
  * QZipReader: update to unzip partly broken archives
  * Deliver context menu event with correct coordinates to widgets in popups
  * QTextHtmlParser: fix prefix lookahead and html comments
  * QtConcurrent::run crashes on program exit
  * tst_QPropertyAnimation: fix leaks occurring under normal operation
  * tst_QPropertyAnimation: fix wrong comment
  * QLogging: fix potential missing NUL-terminator when calling OutputDebugString
  * Fix qt_scrollRectInImage when scrolling outside of the image
- Commits dropped by the rebase:
  * Fix compile with Qt5: Use QString::mid instead of QString::sliced
  * Restore C++11 compatibility after e8b9f4c28d3ab5e960dc54f2dc0c4b749b0b50e0
  * QDateTime: Don't require c++17</changelog>
  <changelog author="fvogt@suse.com" date="1683633600">- Amend patch to fix mouse grabbing as well (bsc#1211024):
  * big-endian-scroll.patch</changelog>
  <changelog author="fvogt@suse.com" date="1684929600">- Update to version 5.15.9+kde154:
  * Hsts: match header names case insensitively (CVE-2023-32762,
    QTBUG-113392, bsc#1211797)
  * Fix specific overflow in qtextlayout (CVE-2023-32763,
    QTBUG-113337, bsc#1211798)
  * QDnsLookup/Unix: make sure we don't overflow the buffer
    (CVE-2023-33285, boo#1211642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1686657600">- Update to version 5.15.10+kde129, rebased upstream:
  * Ssl: Copy the on-demand cert loading bool from default config
  * Schannel: Reject certificate not signed by a configured CA certificate (boo#1211994, CVE-2023-34410)
  * qnetworkreplyfileimpl_p.h: fix header guard name
  * Revert "Draw the cursor considering the descent is 0"
  * Use pkgconfig in order to find libproxy configuration
  * Upgrade PCRE2 to 10.40
  * Android A11Y: handle LocationChanged event only for focused element
  * Port binary JSON to new special integer bitfields
  * INTEGRITY: enable C99 globally
  * QObject: mark two error reporting functions COLD
  * Endian: Provide special integer bitfield unions
  * Android: set useLegacyPackaging to true in build.gradle
  * QWidgetTextControl: port to new-style connects (faster)
  * Sync qxmlstream.g with qxmlstreamparser_p.h [1/2]: switched lines
  * tst_QNetworkReply try stabilize autoDeleteReplies tests
  * Remove duplicated include for &lt;limits&gt;
  * Fix recursion crash when calling setStyleSheet with `qproperty-styleSheet`
  * qwindowsxpstyle: Fix typos in documentation
  * Correct prefix reported for end element in QXmlStreamReader
  * Android A11Y: Add supported role infos to A11yNodeInfo
  * Fix handling of DateTime values in QSettings
  * Fix off-by-one for "typically" lowest value INT_MIN
  * xml: Fix typos in documentation
  * QWindowsWindow: Fix typo in documentation
  * includemocs (updated script)
  * widgets: Fix typos in documentation
  * cocoa: Fix typo in debug messages
  * Only scroll QMenu when there is a valid active action
  * QTimer: Add note in documentation
  * Fix QListView assert when the last row is moved in IconMode
  * QFileDialog: Fix adding default suffix when file path contains dot
  * QLineEdit: account for the placeholderText when computing lineRect
  * QFileDialog::saveFileContent crashes on accept
  * QCompleter: QCompleter unexpectedly changes QLineEdit text
  * Fix build error on iOS with the configure option -qtnamespace
  * Draw the cursor considering the descent is 0
  * Remove pure-virtual-signals.h include from tst_moc.cpp
  * plugins: image formats - fix odr violation
  * dbus: Fix typos
  * qwindowsdialoghelpers: Fix typo in documentation
  * QTableView: Document the customizations applied to QHeaderView
  * Unicodetools: compile
  * eglfs_x11: Fix running flag linkage
  * qcompilerdetection.h: add Q_CC_{GNU,MSVC,CLANG}_ONLY macros
  * Fix CMake warning about "missing closing ' quote"
  * Fix alignment of next/prev links in offline style
  * QtDBus: includemocs
  * Image Plugins: includemocs(-ish)
  * QtGui: includemocs
  * QXcbNativeInterface: remove unused field m_sysTraySelectionAtom
  * Windows QPA: Fix slowdown with large table/tree views with accessibility
  * Macstyle: fix the text color on the disabled button
  * QMacStyle: fix tool buttons (in checked mode)
  * QTeamCityLogger: fix .arg() placeholder injection
  * QAbstractTestLogger: disable copying
  * Fix errorMessageFromComError()
  * QtNetwork: includemocs
  * AppleUnifiedLogger: Remove manually managed os_log_t cache
  * examples: add WindowStaysOnBottomHint into preview text
  * QSharedPointer: Use matching new/delete
  * QIbusPlatformInputContextPlugin: includemocs
  * QGtk3ThemePlugin: includemocs
  * QTuioTouchPlugin: includemocs
  * QtWidgets: includemocs v2022
  * QMYSQLDriverPlugin: includemocs
  * QtDeviceDiscoverySupportPrivate: includemocs
  * QLinuxFbIntegrationPlugin: includemocs
  * QtPrintSupport: includemocs
  * QSQLiteDriverPlugin: includemocs
  * QtFbSupportPrivate: includemocs
  * QXdgDesktopPortalThemePlugin: includemocs
  * QtTest: includemocs
  * QComposePlatformInputContextPlugin: includemocs
  * QtSql: includemocs
  * QVncIntegrationPlugin: includemocs
  * Fix backingstore fractional DPR glitches for widgets in child windows
  * Include &lt;limits&gt; where std::numeric_limits is used
  * QtInputSupportPrivate: includemocs
  * Document the default value of QSFPM::sortOrder()
  * Better document how to enable sorting in QSPFM
  * Correct documentation of INI format's loss of type information
  * Android: add missing properties in AndroidManifest.xml
  * Fix assertion failure when parsing a doubly-invalid date-time text
  * Windows QPA: Correct mistake when calculating minmaxinfo
  * Android: replace ndk.dir with android.ndkVersion in build.gradle
  * Android: remove the old copy of gradle.properties after reading it
  * CMake Android Support: Fix signing of APKs
  * Android: fix A11Y object description
  * macOS: Fix warning about comparing different types in QCocoaScreen::isOnline
  * Fix qmake build on FreeBSD
  * Update documentation of enum Qt::DockWidgetArea
  * xcb: recreate xcb window under some conditions
  * objc_namespace: Add support for universal binaries
  * objc_namespace: Fix misspelled argument for silencing output
  * objc_namespace: Update parsing logic to account for otool changes
  * Blacklist passwordAuth for Ubuntu 20.04
  * Android: wrap QAndroidInputContext's m_focusObject in a QPointer
  * Fix compilation with GCC 12 (and on Fedora 35 and newer)
  * Chip example: fix an accidental bool-&gt;int conversion when using PMF connections
  * qmake: Add support for C++23
  * Android: use BCP 47 tag to create a correct Locale for QTimeZone::displayName()
  * QDateTime: fix adjusted datetime handling
  * Fix crash in tst_qmltc_examples on Android
  * macOS: Remove dead code for focus ring handling in Mac style
  * Detach for colortransforms of indexed formats
  * tst_QTcpSocket::connectToHostError - handle possible timeouts
  * CoreText: Avoid populating font family aliases if family was populated
  * Graphicsview: Avoid background clearing glitches under fractional DPR
  * Windows QPA: Avoid slowdown with UI Automation name change notification
  * Windows QPA: Avoid sending accessibility notifications before activation
  * Windows: Fix potential crash when retrieving default printer
  * Make Ubuntu with its non-standard security level happy
  * Android: Blacklist failing tests on tst_QGraphicsProxyWidget
  * Update LA 4.4.1
  * iOS A11Y: Set more accessibilityTraits
  * QNX: Fix compiler warning by when FEATURE_clipboard is not enabled
  * Document that native file dialogs might not show a title
  * Doc: Remove mentionings of overflows from QElapsedTimer
  * QTextMarkdownImporter: don't apply text char format to list item block
- Commits dropped by the rebase:
  * QBuffer: add missing &lt;limits&gt; include
  * Fix developer build</changelog>
  <changelog author="gmbr3@opensuse.org" date="1687953600">- Change %_libqt5_libexecdir to %_libexecdir/qt5 (bsc#1174075)</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch icu-devel requires to pkgconfig to allow switching libicu
  versions</changelog>
  <changelog author="fvogt@suse.com" date="1695902401">- Update to version 5.15.10+kde159 (bsc#1214327, CVE-2023-37369):
  * Fix CVE-2023-43114
  * QMimeDatabase: fix detection of pattern conflict in different prefixes
  * Fix highdpi conversion of QTabletEvent coordinates on xcb
  * widget: set WA_X11NetWmWindowType* after xcb window was created
  * Fix crash when setting override cursor on multiple clients
  * QAccessibleWidget: Remove pointless ZWSP in warning message
  * Android A11Y: Fix deadlock in QtAndroidAccessibility::runInObjectContext()
  * Correctly parse non BMP char refs in the sax parser
  * Clear the _X version of alongside the enum deprecator
  * Fix UB (signed char passed to &lt;cctype&gt; function)
  * Qt3DRender: includemocs
  * Fix capitalization error in auto-generated qdbusmacros.h include
  * QColorDialog: Ignore mouse move events when no mouse button is pressed
  * QHostInfo: fix remaining slotObj leaks
  * QXmlStreamReader: Raise error on unexpected tokens (CVE-2023-38197,
    QTBUG-92113, QTBUG-95188, bsc#1213326)
  * QTextLayout: Reconsider cursor drawing on TextObject
  * Ensure consistent cursor width under fractional scaling
  * Fix QTextEdit cursor rectangle vertical positioning
  * Return 0 in QWindow::winId in case of failed platform window creation
  * Doc: note QWindow::winId() will cause platform window creation
  * QSslDiffieHellmanParameters: fix mem-leak
  * QHostInfo: fix leaking slot object
  * Make sure we don't count down past 0 QT_FATAL_CRITICALS
  * QLogging: DRY isFatal(QtMsgType)
  * tst_QXmlStream: remove unneeded _ba UDLs
  * Fix typo in QXmlStreamReader error message
  * QXmlStreamReader: make fastScanName() indicate parsing status to callers
  * QXmlStreamReader: change fastScanName() to take a Value*
  * Fix Croatia's currency
  * SSL: upgrade the default DH parameters</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1696593600">- Update to version 5.15.11+kde134, rebased upstream:
  * Revert "Windows QPA: Add support to UiaRaiseNotificationEvent()"
  * FileChooser portal: Make sure filter.name is not empty
  * QPersistentModelIndex: fix UB (op&lt; on unrelated pointers)
  * Avoid crash when keysymToQtKey(keysym, Qt::ControlModifier) is called
  * a11y atspi: translate coords for GetOffsetAtPoint the right way
  * a11y atspi: Take dialog into account as top-level window
  * a11y atspi: Fix incorrect use of x instead of y position
  * macOS: Handle asynchronous deminiaturizing of windows
  * QTranslator: generalize a UNIX-only path
  * iOS, input panel: be more careful before enabling QIOSKeyboardListener
  * Android: Fix flickering on window resize and show keyboard
  * Android A11Y: Check for active surface before calling into native code
  * xcb: Delete touch points without target windows
  * Blacklist 1 tests in tst_QDBusConnection on ubuntu-20.04
  * Fix CMake builds without ANDROID_SDK
  * Blacklist 2 tests in tst_Http2 on ubuntu-20.04
  * Blacklist 1 tests in tst_QSqlQuery on macos
  * Defer creating the special shaders in the texture blitter
  * tst_QSslSocket::serverCipherPreferencies - fix for OpenSSL v3
  * QTemporaryFile: document rename() differences from QFile
  * Doc: 3rd party: Fix reference to FreeType LICENSE.txt
  * Update bundled libjpeg-turbo to version 2.1.4
  * tst_QSsSocket: fix verifyClientCertificate with OpenSSL 3
  * tst_QSslSocket: regenerate certificate used for setLocalCertificateChain
  * tst_QSslSocket::protocolServerSide - make it work with OpenSSL v3
  * tst_QSslSocket::oldErrorsOnSocketReuse - make it work with OpenSSL v3
  * Update zconf.h prefixes to match zlib v1.2.12 update
  * xcb: fix D&amp;D in same xembed client
  * xcb: use global coordinates for position of D&amp;D for xembed client
  * Doc: Update QMetaType::metaObject() descriptions
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 22.04
  * BLACKLIST tst_qfont for Ubuntu 22.04
  * BLACKLIST tst_QMenuBar::check_menuPosition for Ubuntu 22.04
  * tst_QDtls::verifyClientCertficiate - update certs for OpenSSL v3
  * QSslCertificate::toText(): add a file to compare against
  * Fix the spelling of the word "combination"
  * tst_QSslCertificate::pkcs12 - skip the test if OpenSSL version &gt;= 3
  * Android A11Y: Fix TalkBack scrolling behavior
  * Android A11Y: Notify android about scroll events
  * QCocoaDrag: don't add pasteboard items with non-absolute URLs
  * QDirPrivate: pass input QList by cref
  * tst_qbytearray: remove qCompress_data for QT_NO_COMPRESS
  * QDeviceDiscoveryUDev: use NSDMI
  * QAuthenticator: Fix crash when using NTLM / Negotiate
  * Provide a native interface instance in minimal platform plugin
  * Android: document the supported clipboard mimetypes
  * Windows: Account for not finding child windows when calling ChildWindowFromPointEx
  * iOS: Send touch events asynchronously to avoid deadlocking UIKit event loop
  * Disable bitcode for iOS
  * macOS: Ignore deprecation for ReleaseIconRef
  * BLACKLIST tst_QApplication::sendEventsOnProcessEvents for Ubuntu 22.04
  * Convert Latin1 to UTF-16 before passing to ICU API
  * Doc: Remove repetition of word in text
  * eglfs: Fix screen cloning when atomic is enabled
  * Fix printing of dpr&gt;1 images on Windows
  * QHttp: Fix handling of redirect loaded from cache
  * Doc: Fix return type of QLEInteger/QBEInteger post-in/decrement ops
  * qmake: Fix installation of separate debug info for plugins
  * iOS: ensure we close inputpanel after clearing focusobject
  * Convert Latin1 to UTF-16 before passing to ICU API
  * qputenv: defend against non-NUL-terminated QByteArray values
  * QFontSubset: remove unused glyphName() overload
  * Statically assert that the __mips_dsp code is only active on 32-bit
  * QGtk3Theme: Ensure gtk uses the same windowing system as Qt
  * tst_QFocusFrame: fix -Wparantheses
  * Sync Vulkan device features between QVulkanWindow and QRhi
  * SQLite: Update SQLite to v3.39.2
  * Update freetype to 2.12.1
  * corelib: Fix typos in documentation
  * QAtomicInteger docs: mention bool and char8_t as 8-bit types
  * qgraphicsitem_cast: replace 0 with nullptr
  * Doc: Hide weak overload template magic from documentation
  * Revert "QDateTime: fix adjusted datetime handling"
  * Fix select handles disappears issues
  * tst_QSslKey: prepare for the migration to OpenSSL v3
  * tst_qnetworkreply: replace server.pem/key pair
  * Disable unit testing setting up QTcpServer on special Apple interfaces
  * qmake/msbuild: Turn off "use full paths in diagnostics" by default
  * qmake/msbuild: Support all /DEBUG:xxx linker options
  * qmake/msbuild: Support all /LTCG:xxx options
  * Android A11Y: Add content change type to content change event
  * Enabler for fractional scaling of text in Qt Quick
  * macOS: Override logical DPI to 72
  * Add QDom internalSubset implementation
  * Fix tst_AndroidAssets, broken by recent changes on assets load speed
  * Android: Improve loading speed of individual assets
  * Darwin: Replace deprecated symbol kIOMasterPortDefault with equivalent
  * macOS: Remove code for handling logical DPI changes
  * Fix an incorrect invocation of llvm-readobj
  * macOS: Ignore deprecation for kOnSystemDisk icon domain
  * Copy only files that belongs to QML module
  * Android: fix wrong position of cursor handle and editpopup menu in split screen
  * Doc: Document QML_IMPORTS_PATH and QMLPATHS
  * Add the missing RCC_DIR to '.qrc' paths when generating deployment settings
  * Android: Fix the offset of the EditPopupMenu
  * xcb: update xkb_state mask as much as possible
  * QDom: Stop treating non-BMP characters as invalid
  * Android 13: Fix warnings on starting an application
  * qxkbcommon: Map Super/Hyper to Meta early enough to have an effect
  * macOS: Ignore update requests for offline displays
  * macOS: Avoid recursively updating screens when window moves screen
  * qmake/MinGW: Install separate debug info of DLLs next to the DLL
  * QMainWindow: fix restoreState() for toolbars
  * Make two QDT benchmarks data-driven and add more rows
  * Fix doc and example of QLoggingCategory::installCategory()
  * qmake: Document Xcode behavior when bundling translation files
  * Android: Fix missing import
  * QByteArray: more GCC 12 -Werror=array-bound whack-a-mole
  * CMake: Fix android sdk version propagation
  * Restore C++20-deprecated mixed-enum bitwise operators
  * Android: Fix ANR when QtService and QtActivity load in same process
  * Fix restart QtActivity
  * QArrayData::data(): do type-punning via quintptr, not char *
  * QIOSTextResponder: recreate responder upon reset
  * QSslSocket: make it work with OpenSSL v3
  * QFileSystemModelPrivate: de-inline ctor and dtor
  * Network: update Public Suffix List
  * macOS: Ensure proper quoting when calling otool in objc_namespace script
  * QKeySequence: Fix the one-off error in the mac glyph array size
- Commits dropped by the rebase:
  * Apply CVE-2022-27404-27405-27406-qtbase-5.15.diff
  * QArrayData: fix UB via reinterpret_cast (crash with FORTIFY_SOURCE=3)
  * Adapt for q_EVP_PKEY_base_id → q_EVP_PKEY_get_base_id rename in OpenSSL 3
  * Don't use a deprecated function if built/linked with OpenSSL v3</changelog>
  <changelog author="christophe@krop.fr" date="1696593601">- Enable the experimental native painting feature to improve
  remote desktop performances (boo#1214915)
  exporting QT_XCB_NATIVE_PAINTING is required to use the feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1697716800">- Update to version 5.15.11+kde138:
  * QLibraryPrivate: Actually merge load hints
  * QPluginLoader: report the right load hints
  * xkb: fix build with libxkbcommon 1.6.0 and later
  * a11y atspi: Map ButtonMenu role to AT-SPI equivalent</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1703851200">- Update to version 5.15.12+kde144, rebased upstream:
  * QMimeDatabase: handle buggy type definitions with circular inheritance
  * xcb: only set base size when it's valid
  * QPixmapCache: fix leaking of QStrings and Keys on clear()
  * OpenFile portal: do not use O_PATH fds
  * QSystemTrayIcon: properly disconnect old menu in setContextMenu()
  * Guard QTabBar against nested event processing during moving tabs
  * QDial: don't crash when min==max and setting a value != min &amp; max
  * QStandardItemModel: don't leak in mimeData()
  * SQL/MySQL: properly initialize variable
  * QWidgetTextControl: ignore invalid input method event
  * Update the LGPL license header
  * SQL/MySQL: fix handling of json column
  * Remove QMAKE_RANLIB and QMAKE_LINK_SHLIB from android/default_pre.prf
  * macOS: Fix less common writing systems on Catalina and later
  * Blacklist 1 tests in tst_QFtp on ubuntu-20.04
  * Update bundled libpng to version 1.6.39
  * Android: Fix signing of APKs that are generated when an AAB is also built
  * Update bundled zlib to version 1.2.13
  * doc: update the limitation of QSystemTrayIcon on X11
  * Blacklist 1 tests in tst_QTimer on ubuntu-20.04
  * Add benchmarks for QLocale number parsing
  * Add benchmarks for QString number parsing
  * Android: Fix incorrect fullscreen dimensions
  * Gtk3Theme: set XCURSOR_SIZE and XCURSOR_THEME for wayland sessions
  * xcb: Flush Display when processing xcb events
  * xcb: Add xlib wrapper for XFlush()
  * QHostAddress: Fix incorrect comparison against 'Any'
  * QSsl[OpenSSL/Android]: Fix hardcoded 1_1 suffix
  * BLACKLIST: tst_QApplication::sendEventsOnProcessEvents for RHEL 9.0
  * QMacStyle: do not set white color for grayed out button
  * Work round macOS's omission of en_DE from its own uiLanguages()
  * Suppress a deprecation warning in tst_QDateTime::toString_enumformat()
  * QJsonValue: fix incorrect to{Array,Object} when the value is empty
  * QGtk3Dialog: remove the #include for empty moc
  * Remove unneeded QWindow from QGtk3Dialog
  * tst_QSslSocket: Delete sslOptions
  * tst_QSslServer: Make the in-process server use TLS1.2
  * Android: fix Gradle warning about using enableUncompressedNativeLibs
  * Mention  limitation of QDir::drives() on Windows
  * QFileSystemEngine/Win: fix incorrect buffer size in currentPath()
  * Android: properly retrieve mime type of uri to for openUrl()
  * Android: Fix clipboard issue with urls
  * Android: Add a way to disable accessibility via an environment var
  * Update bundled libpng to version 1.6.38
  * QIOSMessageDialog::exec - work around 'windowsless' exec
  * QIosScreen: retain the right window
  * tst_Q{BitArray,ContiguousCache}: check not only count(), but size(), too
  * QIosTextResponder: stop using deprecated constants and type
  * qcompilerdetection.h: detect Coverity
  * Android: Fix Display.getRealMetrics deprecation
  * Fix broken Text rendering when noantialiased NativeRendering is used
  * forkfd: fix Clang 15 ATOMIC_VAR_INIT deprecation warning
  * eglfs: Add env.var. to disable the dedicated drmHandleEvent thread
  * doc: Don't put strings into QVector&lt;double&gt;
  * Remove focusProxyAndInputMethods from tst_QWidget
  * Bump version to 5.15.12
  * Update documentation of qWaitForWindowActive / qWaitForWindowExposed
  * QtHttp: Lower the severity of some log output
  * StyleSheetStyle: Fix color of placeholder texts in text edits
  * Android: Fix flickering on split screen mode
  * Update url to IAccessible2 Specification</changelog>
  <changelog author="alarrosa@suse.com" date="1704283200">- Update to version 5.15.12+kde147:
  * Http2: fix potential overflow in assemble_hpack_block()
    (bsc#1218413, CVE-2023-51714)
  * HPack: fix incorrect integer overflow check
  * HPack: fix a Yoda Condition</changelog>
  <changelog author="fvogt@suse.com" date="1708084800">- Update to version 5.15.12+kde151:
  * Improve KTX file reading memory safety (CVE-2024-25580, boo#1219996)
  * Revert "xcb: only set base size when it's valid"
  * Fix potential leak of QPropertyAnimation in QLineEditIconButton
  * QBitArray: correct inline keyword</changelog>
  <changelog author="alarrosa@suse.com" date="1720785600">- Add patch from upstream to fix a regression in the ODBC driver
  (bsc#1227513, QTBUG-112375):
  * 0001-QSQL-ODBC-fix-regression-trailing-NUL.patch
  * 0002-SQL-ODBC-Pass-correct-length-to-SQLColAttribute.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1722945600">- Add rebased upstream patch to delay any HTTP2 communication until
  encrypted() can be responded to (bsc#1227426, CVE-2024-39936):
  * 0001-HTTP2-Delay-any-communication-until-encrypted-can-be.patch
- Add upstream patch to fix a NULL pointer dereference via the
  function QXcbConnection::initializeAllAtoms() when there is
  anomalous behavior from the X server (bsc#1222120,
  CVE-2023-45935):
  * 0001-xcb-guard-a-pointer-before-usage.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756728000">- Add patch from upstream to fix a precondition violation in call
  to QByteArrayView::at() which can cause crashes (bsc#1243958,
  CVE-2025-5455):
  * 0001-qDecodeDataUrl-fix-precondition-violation-in-call-to.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756814400">- Add patch from upstream to initialize a member variable that was
  uninitialized under some circumstances:
  * 0001-QObjectPrivateSignal-initialize-all-members.patch
- Add patch from upstream to fix a crash when parsing a particular
  glyph in a particular font (QTBUG-124310):
  * 0001-Avoid-crash-in-font-distancefield-computation.patch
  * 0002-Fix-crash-in-font-distancefield-computation.patch
- Add patch from upstream to fix avoid repeatedly registering
  xsettings callbacks when switching cursor themes:
  * 0001-xcb-Avoid-repeatedly-registering-xsettings-callbacks-When.patch
- Add patch from upstream to check validity of RandR output info
  before using it (QTBUG-128906):
  * 0001-xcb-check-validity-of-RandR-output-info-before-using-it.patch
- Add patch from upstream to fix reparenting a window so it takes
  effect even if there are no other state changes to the window:
  * 0001-xcb-Sync-XCB-connection-after-reparenting-window.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756900800">- Add patch from upstream to fix a low performance when processing
  XML data in encodeText (bsc#1239896, CVE-2025-30348):
  * 0001-XML_QDom-speedup-encodeText.patch</changelog>
</package>
<package pkgid="426dc2d41878a580d9d8026055ce982030d40ef1e12da9d36d1394eb3fe031a2" name="libQt5Test5" arch="x86_64">
  <version epoch="0" ver="5.15.12+kde151" rel="150600.3.9.1"/>
  <changelog author="fvogt@suse.com" date="1678968000">- Update to version 5.15.8+kde183:
  * Add nullptr guard in QStyleSheetStyle::drawPrimitive(PE_PanelLineEdit)
  * QAbstractItemView: don't access invalid indexes on copy-key
  * Apply CVE-2023-24607-qtbase-5.15.diff (CVE-2023-24607,
    bsc#1209616)
  * QXcbConnection::getTimestamp: do not return stale timestamp
  * QToolButton: Elide text when constraints prevent from showing whole text
  * correctly set up ref counting in QThreadPool::tryStart(std::function)
  * Do not set Qt::ToolTip flag for QShapedPixmapWindow
  * Fix deletion order also for QImageReader/Writer::setDevice()
  * Fix deletion order in QImageReader/Writer destructors
  * QNetworkReply: Fix typos in the documentation
  * Doc: Fix typo in the online documentation template
  * Doc: Link to page documenting Qt trademarks in the copyright footer
  * [doc] Fix typo in QBuffer::setBuffer() description
  * qwindowsdrag: Fix typo in documentation
  * openglblacklists: Fix typo in description
  * qxcbscreen: Fix typo in documentation
  * Fix typos in SQL driver documentation
  * qxcbwindow.cpp: Fix sign-compare and another warnings
  * QToolButton: reimplement the fix for QTBUG-95255
  * QSysInfo::prettyProductName(): Add macOS Ventura product name
  * QSysInfo::prettyProductName(): add missing macOS product names
  * xcb: correctly disconnect xsettings callbacks
  * ibus: add SetCursorLocationRelative in InputContext.xml</changelog>
  <changelog author="fvogt@suse.com" date="1680523200">- Update to version 5.15.8+kde185:
  * QFSFileEngine: fix overflow bug when using lseek64
  * Add QImage null check when QOpenGLTexture converts
- Add patch to fix return key handling in QGroupBox on GNOME (bsc#1209364):
  * 0001-Revert-QGnomeTheme-Allow-Space-Return-Enter-and-Sele.patch
- Add patch to fix XInput2 events in big-endian X11 clients (bsc#1204883, QTBUG-105157):
  * big-endian-scroll.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1682078400">- Update to version 5.15.9+kde151, rebased upstream:
  * QCborValue: fix incorrect to{Array,Map} when the value is empty
  * QMargins: fix a missing "full stop" in the docs
  * QLibrary: restore translated string
  * QLibrary: fix possible arg() format clobbering
  * iOS: Use python3 for enumerating test target devices
  * Android: Treat ACTION_CANCEL as TouchCancelEvent
  * Doc: Fix broken formatting
  * QFileSystemEngine: fix potential formatting error
  * QString::asprintf: check that passing field widths as arguments works
  * Backport recent QFlags tests
  * network: Fix typos in documentation
  * Fix accuracy with screen composition
  * Doc: Update documentation for QElapsedTimer's in Windows
  * Document that QStandardPath::findExecutable works with absolute paths
  * macOS: Use native resize cursors for diagonal resize
  * Fix clipped glyphs in text rendering of QGraphicsTextItem
  * Change comparison data type to fix int overflow
  * Add missing Q_WEAK_OVERLOAD definition
  * Update QFileInfo docs to mention macOS aliases
  * Distinguish macOS aliases from normal symbolic links
  * Windows QPA: Fix frameless maximize on secondary screens
  * Rewrite tst_qdataurl as a data-driven test
  * Fix compilation for wasm
  * QIOSFileDialog/QIOSDocumentPickerController - handle dismissed view controller
  * Fix QDockWidget's dock area permissions after hovering
  * Fix C++20 ambiguous relational operators between QJsonValue{,Ref}
  * Android: make sure that orientationChange is reported after resize
  * Android: set all QScreen's geometry-related parameters together
  * Blacklist: test cases blacklisted in tst_QDBusConnection:
  * wasm:  fix issue with passing username/password to network request
  * macOS: Pass multi arch flags when linking qmake
  * QCocoaFileDialogHelper: Always enable symlinks and aliases to directories
  * Android: terminate argv passed to main() with nullptr
  * Update bundled libjpeg-turbo to version 2.1.3
  * ANGLE: Load the DirectX libraries from the system path directly
  * SQLite: Update SQLite to v3.37.2
  * Fix compiler warnings about unused parameters
  * Fix getsockopt option_value initial initialization
  * Http2: Fix redirect-handling
  * Android A11Y: Fix value rounding
  * Android A11Y: Announce value together with element name when focused
  * Android A11Y: handle valueChanged events
  * tst_QSystemSemaphore: give proper path to test-helper
  * QNX: Silence compiler warning by initializing variable
  * Update LICENSE.QT-LICENSE-AGREEMENT
  * winrt appxmanifest: Properly replace VCLibs version for newer MSVC versions
  * QAbstractSocket: Don't pretend pause and resume is a stack
  * Gui: test also depends for clipboard feature
  * QDesktopServices: deprecate destroying URL handlers w/o explicit unsetUrlHandler()
  * macOS: Respect QMAKE_APPLE_DEVICE_ARCHS when building qmake
  * HTTP: Make redirect response parsing more generic
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 20.04
  * Android A11Y: populate child elements when constructing node info
  * Fix issue where readyRead() could happen after disconnected()
  * QStringView: add missing constexpr so we can use is_constant_evaluated
  * Use Android's View.generateViewId() for generating ids for views/surfaces
  * Remove documentation of non-existing QAccessible state
  * Doc: Fix snippet to match actual QFileInfo behavior
  * Android: Re-focus focused accessibility node after orientation change
  * Android A11Y: execute C++ code on main Qt thread
  * Android: extract parentId for hidden object in advance
  * xcb: Show valuator atom names properly in categorized logging
  * Android: replace stacktrace with debug message in search for setService
  * Better document attaching a QFutureWatcher to a started QFuture
  * doc: Update GenericDataLocation location on iOS
  * BLACKLIST test_Gestures tests for RHEL-8.4
  * QPlainTestLogger: do not print "failure location" if there's no failure
  * QAbstractItemView: do not access invalid model indices (3/N)
  * Win32: always allow the event loop to be woken up by posted events
  * rhi: d3d11: Use __uuidof where we can
  * Don't QEXPECT_FAIL tst_QLineEdit::testQuickSelectionWithMouse on macOS ARM
  * Network: Emit authenticationRequired when using Ntlm
  * testlib: Disable window restoration on macOS in a non-persistent way
  * QAbstractItemView: do not access invalid model indices (2/N)
  * QAbstractItemView: do not access invalid model indices (1/N)
  * QAbstractItemView: code tidies
  * Update float16 part of TestLib selftest
  * QGuiApplication: constant-initialize lastCursorPosition
  * Blacklist tst_QFileSystemWatcher::signalsEmittedAfterFileMoved on all Windows versions
  * [Android]: Handle the screen name, modes and refreshRate properly
  * QVersionNumber: remove the "pure" attribute from commonPrefix()
  * QEvent: initialize the static userEventTypeRegistry constexprly
  * Let QXcbGlxWindow::createVisual fallback to QXcbWindow::createVisual
  * Android A11Y: fix content update notification when object is hidden
  * Android: explicitly remove accessibility focus when element is hidden
  * BLACKLIST tst_qfont for Red Hat 8.4 and Ubuntu 20.04
  * QtCore: includemocs
  * Fix memory leak in QtConcurrent::run when called with a NULL QThreadPool
  * INTEGRITY: Prevent deletion of virtual functions
  * QMake: replace a Q_ASSERT() with a Q_UNREACHABLE()
  * QTransform benchmark: measure what was promised
  * QStaticByteArrayMatcher: add a useful comment
  * QMacStyle: use the 'momentary push in' type for push buttons
  * qopengl.h: Move C header #include(s) out of the QT_NAMESPACE
  * Enable all supported 1.0 device features in QVulkanWindow
  * Fix queue passed to vkQueuePresent
  * QFusionStyle: don't draw an invalid outline for up/down buttons
  * Doc: Make QListIterator snippets more robust
  * QVersionNumber: don't detach() in rvalue QList/QVector ctor
  * QNetworkRequest: Document how Qt handles 301 and 302 status codes
  * Convert date-time to UTC before claiming it's in GMT
  * Remove execute permission from XML files
  * Add test case for style sheet selectors for enum properties
  * FreeType: allow falling back to synthesized bold if desired
  * Fix an assertion failure in massageAdjustedDateTime()
  * Relax tst_qvulkan::vulkanVersionRequest to make it compatible with 1.1
  * Doc: Replace "C:Documents and Settings" paths
  * QOrderedMutexLocker: fix compilation with C++11
  * QHttpNetworkConnection: Always set proxy settings to all channels
  * Add a markdown writer test for a checklist item ending with `code`
  * Use QTextCharFormat::fontFixedPitch to remember Markdown backtick spans
  * QWizardLayoutInfo: make == and != operators const
  * Revert "Android: Fix screen flicker issues"
  * macOS: Handle momentum scroll NSEventPhaseBegan when scroll had ended
  * SQLite: Update SQLite to v3.37.0
  * Update copyright year to 2022
  * QTzTimeZonePrivate: use ctor delegation instead of init()
  * QTzTimeZonePrivate: fix permanently-detaching m_icu
  * tst_QGraphicsView: fix memleak
  * Doc: Update external links to Qt Creator Manual
  * macOS: assume an unidentified tablet device is a stylus
  * tst_QItemModel: fix memleaks
  * tst_qanimationgroup: fix memleaks
  * QAbstractAnimation: add missing forward-declaration
  * [doc] QCoreApplication::installTranslator() doesn't take ownership
  * tst_qtranslator: fix memleak
  * QTestData: fix streaming of u8 string literals in C++20 mode
  * QThread/Unix: extract duplicate code
  * QWindowPrivate: fix inconsistent inline on some methods
  * tst_QStringList: check that join(u'0') embeds NULs
  * macOS: Sanitize scroll deltas for NSEventPhaseCancelled
  * tst_qsharedmemory: skip readOnly() test under asan
  * QXmlStreamReader: update test distribution
  * QZipReader: update to unzip partly broken archives
  * Deliver context menu event with correct coordinates to widgets in popups
  * QTextHtmlParser: fix prefix lookahead and html comments
  * QtConcurrent::run crashes on program exit
  * tst_QPropertyAnimation: fix leaks occurring under normal operation
  * tst_QPropertyAnimation: fix wrong comment
  * QLogging: fix potential missing NUL-terminator when calling OutputDebugString
  * Fix qt_scrollRectInImage when scrolling outside of the image
- Commits dropped by the rebase:
  * Fix compile with Qt5: Use QString::mid instead of QString::sliced
  * Restore C++11 compatibility after e8b9f4c28d3ab5e960dc54f2dc0c4b749b0b50e0
  * QDateTime: Don't require c++17</changelog>
  <changelog author="fvogt@suse.com" date="1683633600">- Amend patch to fix mouse grabbing as well (bsc#1211024):
  * big-endian-scroll.patch</changelog>
  <changelog author="fvogt@suse.com" date="1684929600">- Update to version 5.15.9+kde154:
  * Hsts: match header names case insensitively (CVE-2023-32762,
    QTBUG-113392, bsc#1211797)
  * Fix specific overflow in qtextlayout (CVE-2023-32763,
    QTBUG-113337, bsc#1211798)
  * QDnsLookup/Unix: make sure we don't overflow the buffer
    (CVE-2023-33285, boo#1211642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1686657600">- Update to version 5.15.10+kde129, rebased upstream:
  * Ssl: Copy the on-demand cert loading bool from default config
  * Schannel: Reject certificate not signed by a configured CA certificate (boo#1211994, CVE-2023-34410)
  * qnetworkreplyfileimpl_p.h: fix header guard name
  * Revert "Draw the cursor considering the descent is 0"
  * Use pkgconfig in order to find libproxy configuration
  * Upgrade PCRE2 to 10.40
  * Android A11Y: handle LocationChanged event only for focused element
  * Port binary JSON to new special integer bitfields
  * INTEGRITY: enable C99 globally
  * QObject: mark two error reporting functions COLD
  * Endian: Provide special integer bitfield unions
  * Android: set useLegacyPackaging to true in build.gradle
  * QWidgetTextControl: port to new-style connects (faster)
  * Sync qxmlstream.g with qxmlstreamparser_p.h [1/2]: switched lines
  * tst_QNetworkReply try stabilize autoDeleteReplies tests
  * Remove duplicated include for &lt;limits&gt;
  * Fix recursion crash when calling setStyleSheet with `qproperty-styleSheet`
  * qwindowsxpstyle: Fix typos in documentation
  * Correct prefix reported for end element in QXmlStreamReader
  * Android A11Y: Add supported role infos to A11yNodeInfo
  * Fix handling of DateTime values in QSettings
  * Fix off-by-one for "typically" lowest value INT_MIN
  * xml: Fix typos in documentation
  * QWindowsWindow: Fix typo in documentation
  * includemocs (updated script)
  * widgets: Fix typos in documentation
  * cocoa: Fix typo in debug messages
  * Only scroll QMenu when there is a valid active action
  * QTimer: Add note in documentation
  * Fix QListView assert when the last row is moved in IconMode
  * QFileDialog: Fix adding default suffix when file path contains dot
  * QLineEdit: account for the placeholderText when computing lineRect
  * QFileDialog::saveFileContent crashes on accept
  * QCompleter: QCompleter unexpectedly changes QLineEdit text
  * Fix build error on iOS with the configure option -qtnamespace
  * Draw the cursor considering the descent is 0
  * Remove pure-virtual-signals.h include from tst_moc.cpp
  * plugins: image formats - fix odr violation
  * dbus: Fix typos
  * qwindowsdialoghelpers: Fix typo in documentation
  * QTableView: Document the customizations applied to QHeaderView
  * Unicodetools: compile
  * eglfs_x11: Fix running flag linkage
  * qcompilerdetection.h: add Q_CC_{GNU,MSVC,CLANG}_ONLY macros
  * Fix CMake warning about "missing closing ' quote"
  * Fix alignment of next/prev links in offline style
  * QtDBus: includemocs
  * Image Plugins: includemocs(-ish)
  * QtGui: includemocs
  * QXcbNativeInterface: remove unused field m_sysTraySelectionAtom
  * Windows QPA: Fix slowdown with large table/tree views with accessibility
  * Macstyle: fix the text color on the disabled button
  * QMacStyle: fix tool buttons (in checked mode)
  * QTeamCityLogger: fix .arg() placeholder injection
  * QAbstractTestLogger: disable copying
  * Fix errorMessageFromComError()
  * QtNetwork: includemocs
  * AppleUnifiedLogger: Remove manually managed os_log_t cache
  * examples: add WindowStaysOnBottomHint into preview text
  * QSharedPointer: Use matching new/delete
  * QIbusPlatformInputContextPlugin: includemocs
  * QGtk3ThemePlugin: includemocs
  * QTuioTouchPlugin: includemocs
  * QtWidgets: includemocs v2022
  * QMYSQLDriverPlugin: includemocs
  * QtDeviceDiscoverySupportPrivate: includemocs
  * QLinuxFbIntegrationPlugin: includemocs
  * QtPrintSupport: includemocs
  * QSQLiteDriverPlugin: includemocs
  * QtFbSupportPrivate: includemocs
  * QXdgDesktopPortalThemePlugin: includemocs
  * QtTest: includemocs
  * QComposePlatformInputContextPlugin: includemocs
  * QtSql: includemocs
  * QVncIntegrationPlugin: includemocs
  * Fix backingstore fractional DPR glitches for widgets in child windows
  * Include &lt;limits&gt; where std::numeric_limits is used
  * QtInputSupportPrivate: includemocs
  * Document the default value of QSFPM::sortOrder()
  * Better document how to enable sorting in QSPFM
  * Correct documentation of INI format's loss of type information
  * Android: add missing properties in AndroidManifest.xml
  * Fix assertion failure when parsing a doubly-invalid date-time text
  * Windows QPA: Correct mistake when calculating minmaxinfo
  * Android: replace ndk.dir with android.ndkVersion in build.gradle
  * Android: remove the old copy of gradle.properties after reading it
  * CMake Android Support: Fix signing of APKs
  * Android: fix A11Y object description
  * macOS: Fix warning about comparing different types in QCocoaScreen::isOnline
  * Fix qmake build on FreeBSD
  * Update documentation of enum Qt::DockWidgetArea
  * xcb: recreate xcb window under some conditions
  * objc_namespace: Add support for universal binaries
  * objc_namespace: Fix misspelled argument for silencing output
  * objc_namespace: Update parsing logic to account for otool changes
  * Blacklist passwordAuth for Ubuntu 20.04
  * Android: wrap QAndroidInputContext's m_focusObject in a QPointer
  * Fix compilation with GCC 12 (and on Fedora 35 and newer)
  * Chip example: fix an accidental bool-&gt;int conversion when using PMF connections
  * qmake: Add support for C++23
  * Android: use BCP 47 tag to create a correct Locale for QTimeZone::displayName()
  * QDateTime: fix adjusted datetime handling
  * Fix crash in tst_qmltc_examples on Android
  * macOS: Remove dead code for focus ring handling in Mac style
  * Detach for colortransforms of indexed formats
  * tst_QTcpSocket::connectToHostError - handle possible timeouts
  * CoreText: Avoid populating font family aliases if family was populated
  * Graphicsview: Avoid background clearing glitches under fractional DPR
  * Windows QPA: Avoid slowdown with UI Automation name change notification
  * Windows QPA: Avoid sending accessibility notifications before activation
  * Windows: Fix potential crash when retrieving default printer
  * Make Ubuntu with its non-standard security level happy
  * Android: Blacklist failing tests on tst_QGraphicsProxyWidget
  * Update LA 4.4.1
  * iOS A11Y: Set more accessibilityTraits
  * QNX: Fix compiler warning by when FEATURE_clipboard is not enabled
  * Document that native file dialogs might not show a title
  * Doc: Remove mentionings of overflows from QElapsedTimer
  * QTextMarkdownImporter: don't apply text char format to list item block
- Commits dropped by the rebase:
  * QBuffer: add missing &lt;limits&gt; include
  * Fix developer build</changelog>
  <changelog author="gmbr3@opensuse.org" date="1687953600">- Change %_libqt5_libexecdir to %_libexecdir/qt5 (bsc#1174075)</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch icu-devel requires to pkgconfig to allow switching libicu
  versions</changelog>
  <changelog author="fvogt@suse.com" date="1695902401">- Update to version 5.15.10+kde159 (bsc#1214327, CVE-2023-37369):
  * Fix CVE-2023-43114
  * QMimeDatabase: fix detection of pattern conflict in different prefixes
  * Fix highdpi conversion of QTabletEvent coordinates on xcb
  * widget: set WA_X11NetWmWindowType* after xcb window was created
  * Fix crash when setting override cursor on multiple clients
  * QAccessibleWidget: Remove pointless ZWSP in warning message
  * Android A11Y: Fix deadlock in QtAndroidAccessibility::runInObjectContext()
  * Correctly parse non BMP char refs in the sax parser
  * Clear the _X version of alongside the enum deprecator
  * Fix UB (signed char passed to &lt;cctype&gt; function)
  * Qt3DRender: includemocs
  * Fix capitalization error in auto-generated qdbusmacros.h include
  * QColorDialog: Ignore mouse move events when no mouse button is pressed
  * QHostInfo: fix remaining slotObj leaks
  * QXmlStreamReader: Raise error on unexpected tokens (CVE-2023-38197,
    QTBUG-92113, QTBUG-95188, bsc#1213326)
  * QTextLayout: Reconsider cursor drawing on TextObject
  * Ensure consistent cursor width under fractional scaling
  * Fix QTextEdit cursor rectangle vertical positioning
  * Return 0 in QWindow::winId in case of failed platform window creation
  * Doc: note QWindow::winId() will cause platform window creation
  * QSslDiffieHellmanParameters: fix mem-leak
  * QHostInfo: fix leaking slot object
  * Make sure we don't count down past 0 QT_FATAL_CRITICALS
  * QLogging: DRY isFatal(QtMsgType)
  * tst_QXmlStream: remove unneeded _ba UDLs
  * Fix typo in QXmlStreamReader error message
  * QXmlStreamReader: make fastScanName() indicate parsing status to callers
  * QXmlStreamReader: change fastScanName() to take a Value*
  * Fix Croatia's currency
  * SSL: upgrade the default DH parameters</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1696593600">- Update to version 5.15.11+kde134, rebased upstream:
  * Revert "Windows QPA: Add support to UiaRaiseNotificationEvent()"
  * FileChooser portal: Make sure filter.name is not empty
  * QPersistentModelIndex: fix UB (op&lt; on unrelated pointers)
  * Avoid crash when keysymToQtKey(keysym, Qt::ControlModifier) is called
  * a11y atspi: translate coords for GetOffsetAtPoint the right way
  * a11y atspi: Take dialog into account as top-level window
  * a11y atspi: Fix incorrect use of x instead of y position
  * macOS: Handle asynchronous deminiaturizing of windows
  * QTranslator: generalize a UNIX-only path
  * iOS, input panel: be more careful before enabling QIOSKeyboardListener
  * Android: Fix flickering on window resize and show keyboard
  * Android A11Y: Check for active surface before calling into native code
  * xcb: Delete touch points without target windows
  * Blacklist 1 tests in tst_QDBusConnection on ubuntu-20.04
  * Fix CMake builds without ANDROID_SDK
  * Blacklist 2 tests in tst_Http2 on ubuntu-20.04
  * Blacklist 1 tests in tst_QSqlQuery on macos
  * Defer creating the special shaders in the texture blitter
  * tst_QSslSocket::serverCipherPreferencies - fix for OpenSSL v3
  * QTemporaryFile: document rename() differences from QFile
  * Doc: 3rd party: Fix reference to FreeType LICENSE.txt
  * Update bundled libjpeg-turbo to version 2.1.4
  * tst_QSsSocket: fix verifyClientCertificate with OpenSSL 3
  * tst_QSslSocket: regenerate certificate used for setLocalCertificateChain
  * tst_QSslSocket::protocolServerSide - make it work with OpenSSL v3
  * tst_QSslSocket::oldErrorsOnSocketReuse - make it work with OpenSSL v3
  * Update zconf.h prefixes to match zlib v1.2.12 update
  * xcb: fix D&amp;D in same xembed client
  * xcb: use global coordinates for position of D&amp;D for xembed client
  * Doc: Update QMetaType::metaObject() descriptions
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 22.04
  * BLACKLIST tst_qfont for Ubuntu 22.04
  * BLACKLIST tst_QMenuBar::check_menuPosition for Ubuntu 22.04
  * tst_QDtls::verifyClientCertficiate - update certs for OpenSSL v3
  * QSslCertificate::toText(): add a file to compare against
  * Fix the spelling of the word "combination"
  * tst_QSslCertificate::pkcs12 - skip the test if OpenSSL version &gt;= 3
  * Android A11Y: Fix TalkBack scrolling behavior
  * Android A11Y: Notify android about scroll events
  * QCocoaDrag: don't add pasteboard items with non-absolute URLs
  * QDirPrivate: pass input QList by cref
  * tst_qbytearray: remove qCompress_data for QT_NO_COMPRESS
  * QDeviceDiscoveryUDev: use NSDMI
  * QAuthenticator: Fix crash when using NTLM / Negotiate
  * Provide a native interface instance in minimal platform plugin
  * Android: document the supported clipboard mimetypes
  * Windows: Account for not finding child windows when calling ChildWindowFromPointEx
  * iOS: Send touch events asynchronously to avoid deadlocking UIKit event loop
  * Disable bitcode for iOS
  * macOS: Ignore deprecation for ReleaseIconRef
  * BLACKLIST tst_QApplication::sendEventsOnProcessEvents for Ubuntu 22.04
  * Convert Latin1 to UTF-16 before passing to ICU API
  * Doc: Remove repetition of word in text
  * eglfs: Fix screen cloning when atomic is enabled
  * Fix printing of dpr&gt;1 images on Windows
  * QHttp: Fix handling of redirect loaded from cache
  * Doc: Fix return type of QLEInteger/QBEInteger post-in/decrement ops
  * qmake: Fix installation of separate debug info for plugins
  * iOS: ensure we close inputpanel after clearing focusobject
  * Convert Latin1 to UTF-16 before passing to ICU API
  * qputenv: defend against non-NUL-terminated QByteArray values
  * QFontSubset: remove unused glyphName() overload
  * Statically assert that the __mips_dsp code is only active on 32-bit
  * QGtk3Theme: Ensure gtk uses the same windowing system as Qt
  * tst_QFocusFrame: fix -Wparantheses
  * Sync Vulkan device features between QVulkanWindow and QRhi
  * SQLite: Update SQLite to v3.39.2
  * Update freetype to 2.12.1
  * corelib: Fix typos in documentation
  * QAtomicInteger docs: mention bool and char8_t as 8-bit types
  * qgraphicsitem_cast: replace 0 with nullptr
  * Doc: Hide weak overload template magic from documentation
  * Revert "QDateTime: fix adjusted datetime handling"
  * Fix select handles disappears issues
  * tst_QSslKey: prepare for the migration to OpenSSL v3
  * tst_qnetworkreply: replace server.pem/key pair
  * Disable unit testing setting up QTcpServer on special Apple interfaces
  * qmake/msbuild: Turn off "use full paths in diagnostics" by default
  * qmake/msbuild: Support all /DEBUG:xxx linker options
  * qmake/msbuild: Support all /LTCG:xxx options
  * Android A11Y: Add content change type to content change event
  * Enabler for fractional scaling of text in Qt Quick
  * macOS: Override logical DPI to 72
  * Add QDom internalSubset implementation
  * Fix tst_AndroidAssets, broken by recent changes on assets load speed
  * Android: Improve loading speed of individual assets
  * Darwin: Replace deprecated symbol kIOMasterPortDefault with equivalent
  * macOS: Remove code for handling logical DPI changes
  * Fix an incorrect invocation of llvm-readobj
  * macOS: Ignore deprecation for kOnSystemDisk icon domain
  * Copy only files that belongs to QML module
  * Android: fix wrong position of cursor handle and editpopup menu in split screen
  * Doc: Document QML_IMPORTS_PATH and QMLPATHS
  * Add the missing RCC_DIR to '.qrc' paths when generating deployment settings
  * Android: Fix the offset of the EditPopupMenu
  * xcb: update xkb_state mask as much as possible
  * QDom: Stop treating non-BMP characters as invalid
  * Android 13: Fix warnings on starting an application
  * qxkbcommon: Map Super/Hyper to Meta early enough to have an effect
  * macOS: Ignore update requests for offline displays
  * macOS: Avoid recursively updating screens when window moves screen
  * qmake/MinGW: Install separate debug info of DLLs next to the DLL
  * QMainWindow: fix restoreState() for toolbars
  * Make two QDT benchmarks data-driven and add more rows
  * Fix doc and example of QLoggingCategory::installCategory()
  * qmake: Document Xcode behavior when bundling translation files
  * Android: Fix missing import
  * QByteArray: more GCC 12 -Werror=array-bound whack-a-mole
  * CMake: Fix android sdk version propagation
  * Restore C++20-deprecated mixed-enum bitwise operators
  * Android: Fix ANR when QtService and QtActivity load in same process
  * Fix restart QtActivity
  * QArrayData::data(): do type-punning via quintptr, not char *
  * QIOSTextResponder: recreate responder upon reset
  * QSslSocket: make it work with OpenSSL v3
  * QFileSystemModelPrivate: de-inline ctor and dtor
  * Network: update Public Suffix List
  * macOS: Ensure proper quoting when calling otool in objc_namespace script
  * QKeySequence: Fix the one-off error in the mac glyph array size
- Commits dropped by the rebase:
  * Apply CVE-2022-27404-27405-27406-qtbase-5.15.diff
  * QArrayData: fix UB via reinterpret_cast (crash with FORTIFY_SOURCE=3)
  * Adapt for q_EVP_PKEY_base_id → q_EVP_PKEY_get_base_id rename in OpenSSL 3
  * Don't use a deprecated function if built/linked with OpenSSL v3</changelog>
  <changelog author="christophe@krop.fr" date="1696593601">- Enable the experimental native painting feature to improve
  remote desktop performances (boo#1214915)
  exporting QT_XCB_NATIVE_PAINTING is required to use the feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1697716800">- Update to version 5.15.11+kde138:
  * QLibraryPrivate: Actually merge load hints
  * QPluginLoader: report the right load hints
  * xkb: fix build with libxkbcommon 1.6.0 and later
  * a11y atspi: Map ButtonMenu role to AT-SPI equivalent</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1703851200">- Update to version 5.15.12+kde144, rebased upstream:
  * QMimeDatabase: handle buggy type definitions with circular inheritance
  * xcb: only set base size when it's valid
  * QPixmapCache: fix leaking of QStrings and Keys on clear()
  * OpenFile portal: do not use O_PATH fds
  * QSystemTrayIcon: properly disconnect old menu in setContextMenu()
  * Guard QTabBar against nested event processing during moving tabs
  * QDial: don't crash when min==max and setting a value != min &amp; max
  * QStandardItemModel: don't leak in mimeData()
  * SQL/MySQL: properly initialize variable
  * QWidgetTextControl: ignore invalid input method event
  * Update the LGPL license header
  * SQL/MySQL: fix handling of json column
  * Remove QMAKE_RANLIB and QMAKE_LINK_SHLIB from android/default_pre.prf
  * macOS: Fix less common writing systems on Catalina and later
  * Blacklist 1 tests in tst_QFtp on ubuntu-20.04
  * Update bundled libpng to version 1.6.39
  * Android: Fix signing of APKs that are generated when an AAB is also built
  * Update bundled zlib to version 1.2.13
  * doc: update the limitation of QSystemTrayIcon on X11
  * Blacklist 1 tests in tst_QTimer on ubuntu-20.04
  * Add benchmarks for QLocale number parsing
  * Add benchmarks for QString number parsing
  * Android: Fix incorrect fullscreen dimensions
  * Gtk3Theme: set XCURSOR_SIZE and XCURSOR_THEME for wayland sessions
  * xcb: Flush Display when processing xcb events
  * xcb: Add xlib wrapper for XFlush()
  * QHostAddress: Fix incorrect comparison against 'Any'
  * QSsl[OpenSSL/Android]: Fix hardcoded 1_1 suffix
  * BLACKLIST: tst_QApplication::sendEventsOnProcessEvents for RHEL 9.0
  * QMacStyle: do not set white color for grayed out button
  * Work round macOS's omission of en_DE from its own uiLanguages()
  * Suppress a deprecation warning in tst_QDateTime::toString_enumformat()
  * QJsonValue: fix incorrect to{Array,Object} when the value is empty
  * QGtk3Dialog: remove the #include for empty moc
  * Remove unneeded QWindow from QGtk3Dialog
  * tst_QSslSocket: Delete sslOptions
  * tst_QSslServer: Make the in-process server use TLS1.2
  * Android: fix Gradle warning about using enableUncompressedNativeLibs
  * Mention  limitation of QDir::drives() on Windows
  * QFileSystemEngine/Win: fix incorrect buffer size in currentPath()
  * Android: properly retrieve mime type of uri to for openUrl()
  * Android: Fix clipboard issue with urls
  * Android: Add a way to disable accessibility via an environment var
  * Update bundled libpng to version 1.6.38
  * QIOSMessageDialog::exec - work around 'windowsless' exec
  * QIosScreen: retain the right window
  * tst_Q{BitArray,ContiguousCache}: check not only count(), but size(), too
  * QIosTextResponder: stop using deprecated constants and type
  * qcompilerdetection.h: detect Coverity
  * Android: Fix Display.getRealMetrics deprecation
  * Fix broken Text rendering when noantialiased NativeRendering is used
  * forkfd: fix Clang 15 ATOMIC_VAR_INIT deprecation warning
  * eglfs: Add env.var. to disable the dedicated drmHandleEvent thread
  * doc: Don't put strings into QVector&lt;double&gt;
  * Remove focusProxyAndInputMethods from tst_QWidget
  * Bump version to 5.15.12
  * Update documentation of qWaitForWindowActive / qWaitForWindowExposed
  * QtHttp: Lower the severity of some log output
  * StyleSheetStyle: Fix color of placeholder texts in text edits
  * Android: Fix flickering on split screen mode
  * Update url to IAccessible2 Specification</changelog>
  <changelog author="alarrosa@suse.com" date="1704283200">- Update to version 5.15.12+kde147:
  * Http2: fix potential overflow in assemble_hpack_block()
    (bsc#1218413, CVE-2023-51714)
  * HPack: fix incorrect integer overflow check
  * HPack: fix a Yoda Condition</changelog>
  <changelog author="fvogt@suse.com" date="1708084800">- Update to version 5.15.12+kde151:
  * Improve KTX file reading memory safety (CVE-2024-25580, boo#1219996)
  * Revert "xcb: only set base size when it's valid"
  * Fix potential leak of QPropertyAnimation in QLineEditIconButton
  * QBitArray: correct inline keyword</changelog>
  <changelog author="alarrosa@suse.com" date="1720785600">- Add patch from upstream to fix a regression in the ODBC driver
  (bsc#1227513, QTBUG-112375):
  * 0001-QSQL-ODBC-fix-regression-trailing-NUL.patch
  * 0002-SQL-ODBC-Pass-correct-length-to-SQLColAttribute.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1722945600">- Add rebased upstream patch to delay any HTTP2 communication until
  encrypted() can be responded to (bsc#1227426, CVE-2024-39936):
  * 0001-HTTP2-Delay-any-communication-until-encrypted-can-be.patch
- Add upstream patch to fix a NULL pointer dereference via the
  function QXcbConnection::initializeAllAtoms() when there is
  anomalous behavior from the X server (bsc#1222120,
  CVE-2023-45935):
  * 0001-xcb-guard-a-pointer-before-usage.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756728000">- Add patch from upstream to fix a precondition violation in call
  to QByteArrayView::at() which can cause crashes (bsc#1243958,
  CVE-2025-5455):
  * 0001-qDecodeDataUrl-fix-precondition-violation-in-call-to.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756814400">- Add patch from upstream to initialize a member variable that was
  uninitialized under some circumstances:
  * 0001-QObjectPrivateSignal-initialize-all-members.patch
- Add patch from upstream to fix a crash when parsing a particular
  glyph in a particular font (QTBUG-124310):
  * 0001-Avoid-crash-in-font-distancefield-computation.patch
  * 0002-Fix-crash-in-font-distancefield-computation.patch
- Add patch from upstream to fix avoid repeatedly registering
  xsettings callbacks when switching cursor themes:
  * 0001-xcb-Avoid-repeatedly-registering-xsettings-callbacks-When.patch
- Add patch from upstream to check validity of RandR output info
  before using it (QTBUG-128906):
  * 0001-xcb-check-validity-of-RandR-output-info-before-using-it.patch
- Add patch from upstream to fix reparenting a window so it takes
  effect even if there are no other state changes to the window:
  * 0001-xcb-Sync-XCB-connection-after-reparenting-window.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756900800">- Add patch from upstream to fix a low performance when processing
  XML data in encodeText (bsc#1239896, CVE-2025-30348):
  * 0001-XML_QDom-speedup-encodeText.patch</changelog>
</package>
<package pkgid="90fe875f8fdeb6a16ab1731029f03240fa5c2100bfe2fbfb03b41868adb46cf3" name="libQt5Widgets-devel" arch="x86_64">
  <version epoch="0" ver="5.15.12+kde151" rel="150600.3.9.1"/>
  <changelog author="fvogt@suse.com" date="1678968000">- Update to version 5.15.8+kde183:
  * Add nullptr guard in QStyleSheetStyle::drawPrimitive(PE_PanelLineEdit)
  * QAbstractItemView: don't access invalid indexes on copy-key
  * Apply CVE-2023-24607-qtbase-5.15.diff (CVE-2023-24607,
    bsc#1209616)
  * QXcbConnection::getTimestamp: do not return stale timestamp
  * QToolButton: Elide text when constraints prevent from showing whole text
  * correctly set up ref counting in QThreadPool::tryStart(std::function)
  * Do not set Qt::ToolTip flag for QShapedPixmapWindow
  * Fix deletion order also for QImageReader/Writer::setDevice()
  * Fix deletion order in QImageReader/Writer destructors
  * QNetworkReply: Fix typos in the documentation
  * Doc: Fix typo in the online documentation template
  * Doc: Link to page documenting Qt trademarks in the copyright footer
  * [doc] Fix typo in QBuffer::setBuffer() description
  * qwindowsdrag: Fix typo in documentation
  * openglblacklists: Fix typo in description
  * qxcbscreen: Fix typo in documentation
  * Fix typos in SQL driver documentation
  * qxcbwindow.cpp: Fix sign-compare and another warnings
  * QToolButton: reimplement the fix for QTBUG-95255
  * QSysInfo::prettyProductName(): Add macOS Ventura product name
  * QSysInfo::prettyProductName(): add missing macOS product names
  * xcb: correctly disconnect xsettings callbacks
  * ibus: add SetCursorLocationRelative in InputContext.xml</changelog>
  <changelog author="fvogt@suse.com" date="1680523200">- Update to version 5.15.8+kde185:
  * QFSFileEngine: fix overflow bug when using lseek64
  * Add QImage null check when QOpenGLTexture converts
- Add patch to fix return key handling in QGroupBox on GNOME (bsc#1209364):
  * 0001-Revert-QGnomeTheme-Allow-Space-Return-Enter-and-Sele.patch
- Add patch to fix XInput2 events in big-endian X11 clients (bsc#1204883, QTBUG-105157):
  * big-endian-scroll.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1682078400">- Update to version 5.15.9+kde151, rebased upstream:
  * QCborValue: fix incorrect to{Array,Map} when the value is empty
  * QMargins: fix a missing "full stop" in the docs
  * QLibrary: restore translated string
  * QLibrary: fix possible arg() format clobbering
  * iOS: Use python3 for enumerating test target devices
  * Android: Treat ACTION_CANCEL as TouchCancelEvent
  * Doc: Fix broken formatting
  * QFileSystemEngine: fix potential formatting error
  * QString::asprintf: check that passing field widths as arguments works
  * Backport recent QFlags tests
  * network: Fix typos in documentation
  * Fix accuracy with screen composition
  * Doc: Update documentation for QElapsedTimer's in Windows
  * Document that QStandardPath::findExecutable works with absolute paths
  * macOS: Use native resize cursors for diagonal resize
  * Fix clipped glyphs in text rendering of QGraphicsTextItem
  * Change comparison data type to fix int overflow
  * Add missing Q_WEAK_OVERLOAD definition
  * Update QFileInfo docs to mention macOS aliases
  * Distinguish macOS aliases from normal symbolic links
  * Windows QPA: Fix frameless maximize on secondary screens
  * Rewrite tst_qdataurl as a data-driven test
  * Fix compilation for wasm
  * QIOSFileDialog/QIOSDocumentPickerController - handle dismissed view controller
  * Fix QDockWidget's dock area permissions after hovering
  * Fix C++20 ambiguous relational operators between QJsonValue{,Ref}
  * Android: make sure that orientationChange is reported after resize
  * Android: set all QScreen's geometry-related parameters together
  * Blacklist: test cases blacklisted in tst_QDBusConnection:
  * wasm:  fix issue with passing username/password to network request
  * macOS: Pass multi arch flags when linking qmake
  * QCocoaFileDialogHelper: Always enable symlinks and aliases to directories
  * Android: terminate argv passed to main() with nullptr
  * Update bundled libjpeg-turbo to version 2.1.3
  * ANGLE: Load the DirectX libraries from the system path directly
  * SQLite: Update SQLite to v3.37.2
  * Fix compiler warnings about unused parameters
  * Fix getsockopt option_value initial initialization
  * Http2: Fix redirect-handling
  * Android A11Y: Fix value rounding
  * Android A11Y: Announce value together with element name when focused
  * Android A11Y: handle valueChanged events
  * tst_QSystemSemaphore: give proper path to test-helper
  * QNX: Silence compiler warning by initializing variable
  * Update LICENSE.QT-LICENSE-AGREEMENT
  * winrt appxmanifest: Properly replace VCLibs version for newer MSVC versions
  * QAbstractSocket: Don't pretend pause and resume is a stack
  * Gui: test also depends for clipboard feature
  * QDesktopServices: deprecate destroying URL handlers w/o explicit unsetUrlHandler()
  * macOS: Respect QMAKE_APPLE_DEVICE_ARCHS when building qmake
  * HTTP: Make redirect response parsing more generic
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 20.04
  * Android A11Y: populate child elements when constructing node info
  * Fix issue where readyRead() could happen after disconnected()
  * QStringView: add missing constexpr so we can use is_constant_evaluated
  * Use Android's View.generateViewId() for generating ids for views/surfaces
  * Remove documentation of non-existing QAccessible state
  * Doc: Fix snippet to match actual QFileInfo behavior
  * Android: Re-focus focused accessibility node after orientation change
  * Android A11Y: execute C++ code on main Qt thread
  * Android: extract parentId for hidden object in advance
  * xcb: Show valuator atom names properly in categorized logging
  * Android: replace stacktrace with debug message in search for setService
  * Better document attaching a QFutureWatcher to a started QFuture
  * doc: Update GenericDataLocation location on iOS
  * BLACKLIST test_Gestures tests for RHEL-8.4
  * QPlainTestLogger: do not print "failure location" if there's no failure
  * QAbstractItemView: do not access invalid model indices (3/N)
  * Win32: always allow the event loop to be woken up by posted events
  * rhi: d3d11: Use __uuidof where we can
  * Don't QEXPECT_FAIL tst_QLineEdit::testQuickSelectionWithMouse on macOS ARM
  * Network: Emit authenticationRequired when using Ntlm
  * testlib: Disable window restoration on macOS in a non-persistent way
  * QAbstractItemView: do not access invalid model indices (2/N)
  * QAbstractItemView: do not access invalid model indices (1/N)
  * QAbstractItemView: code tidies
  * Update float16 part of TestLib selftest
  * QGuiApplication: constant-initialize lastCursorPosition
  * Blacklist tst_QFileSystemWatcher::signalsEmittedAfterFileMoved on all Windows versions
  * [Android]: Handle the screen name, modes and refreshRate properly
  * QVersionNumber: remove the "pure" attribute from commonPrefix()
  * QEvent: initialize the static userEventTypeRegistry constexprly
  * Let QXcbGlxWindow::createVisual fallback to QXcbWindow::createVisual
  * Android A11Y: fix content update notification when object is hidden
  * Android: explicitly remove accessibility focus when element is hidden
  * BLACKLIST tst_qfont for Red Hat 8.4 and Ubuntu 20.04
  * QtCore: includemocs
  * Fix memory leak in QtConcurrent::run when called with a NULL QThreadPool
  * INTEGRITY: Prevent deletion of virtual functions
  * QMake: replace a Q_ASSERT() with a Q_UNREACHABLE()
  * QTransform benchmark: measure what was promised
  * QStaticByteArrayMatcher: add a useful comment
  * QMacStyle: use the 'momentary push in' type for push buttons
  * qopengl.h: Move C header #include(s) out of the QT_NAMESPACE
  * Enable all supported 1.0 device features in QVulkanWindow
  * Fix queue passed to vkQueuePresent
  * QFusionStyle: don't draw an invalid outline for up/down buttons
  * Doc: Make QListIterator snippets more robust
  * QVersionNumber: don't detach() in rvalue QList/QVector ctor
  * QNetworkRequest: Document how Qt handles 301 and 302 status codes
  * Convert date-time to UTC before claiming it's in GMT
  * Remove execute permission from XML files
  * Add test case for style sheet selectors for enum properties
  * FreeType: allow falling back to synthesized bold if desired
  * Fix an assertion failure in massageAdjustedDateTime()
  * Relax tst_qvulkan::vulkanVersionRequest to make it compatible with 1.1
  * Doc: Replace "C:Documents and Settings" paths
  * QOrderedMutexLocker: fix compilation with C++11
  * QHttpNetworkConnection: Always set proxy settings to all channels
  * Add a markdown writer test for a checklist item ending with `code`
  * Use QTextCharFormat::fontFixedPitch to remember Markdown backtick spans
  * QWizardLayoutInfo: make == and != operators const
  * Revert "Android: Fix screen flicker issues"
  * macOS: Handle momentum scroll NSEventPhaseBegan when scroll had ended
  * SQLite: Update SQLite to v3.37.0
  * Update copyright year to 2022
  * QTzTimeZonePrivate: use ctor delegation instead of init()
  * QTzTimeZonePrivate: fix permanently-detaching m_icu
  * tst_QGraphicsView: fix memleak
  * Doc: Update external links to Qt Creator Manual
  * macOS: assume an unidentified tablet device is a stylus
  * tst_QItemModel: fix memleaks
  * tst_qanimationgroup: fix memleaks
  * QAbstractAnimation: add missing forward-declaration
  * [doc] QCoreApplication::installTranslator() doesn't take ownership
  * tst_qtranslator: fix memleak
  * QTestData: fix streaming of u8 string literals in C++20 mode
  * QThread/Unix: extract duplicate code
  * QWindowPrivate: fix inconsistent inline on some methods
  * tst_QStringList: check that join(u'0') embeds NULs
  * macOS: Sanitize scroll deltas for NSEventPhaseCancelled
  * tst_qsharedmemory: skip readOnly() test under asan
  * QXmlStreamReader: update test distribution
  * QZipReader: update to unzip partly broken archives
  * Deliver context menu event with correct coordinates to widgets in popups
  * QTextHtmlParser: fix prefix lookahead and html comments
  * QtConcurrent::run crashes on program exit
  * tst_QPropertyAnimation: fix leaks occurring under normal operation
  * tst_QPropertyAnimation: fix wrong comment
  * QLogging: fix potential missing NUL-terminator when calling OutputDebugString
  * Fix qt_scrollRectInImage when scrolling outside of the image
- Commits dropped by the rebase:
  * Fix compile with Qt5: Use QString::mid instead of QString::sliced
  * Restore C++11 compatibility after e8b9f4c28d3ab5e960dc54f2dc0c4b749b0b50e0
  * QDateTime: Don't require c++17</changelog>
  <changelog author="fvogt@suse.com" date="1683633600">- Amend patch to fix mouse grabbing as well (bsc#1211024):
  * big-endian-scroll.patch</changelog>
  <changelog author="fvogt@suse.com" date="1684929600">- Update to version 5.15.9+kde154:
  * Hsts: match header names case insensitively (CVE-2023-32762,
    QTBUG-113392, bsc#1211797)
  * Fix specific overflow in qtextlayout (CVE-2023-32763,
    QTBUG-113337, bsc#1211798)
  * QDnsLookup/Unix: make sure we don't overflow the buffer
    (CVE-2023-33285, boo#1211642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1686657600">- Update to version 5.15.10+kde129, rebased upstream:
  * Ssl: Copy the on-demand cert loading bool from default config
  * Schannel: Reject certificate not signed by a configured CA certificate (boo#1211994, CVE-2023-34410)
  * qnetworkreplyfileimpl_p.h: fix header guard name
  * Revert "Draw the cursor considering the descent is 0"
  * Use pkgconfig in order to find libproxy configuration
  * Upgrade PCRE2 to 10.40
  * Android A11Y: handle LocationChanged event only for focused element
  * Port binary JSON to new special integer bitfields
  * INTEGRITY: enable C99 globally
  * QObject: mark two error reporting functions COLD
  * Endian: Provide special integer bitfield unions
  * Android: set useLegacyPackaging to true in build.gradle
  * QWidgetTextControl: port to new-style connects (faster)
  * Sync qxmlstream.g with qxmlstreamparser_p.h [1/2]: switched lines
  * tst_QNetworkReply try stabilize autoDeleteReplies tests
  * Remove duplicated include for &lt;limits&gt;
  * Fix recursion crash when calling setStyleSheet with `qproperty-styleSheet`
  * qwindowsxpstyle: Fix typos in documentation
  * Correct prefix reported for end element in QXmlStreamReader
  * Android A11Y: Add supported role infos to A11yNodeInfo
  * Fix handling of DateTime values in QSettings
  * Fix off-by-one for "typically" lowest value INT_MIN
  * xml: Fix typos in documentation
  * QWindowsWindow: Fix typo in documentation
  * includemocs (updated script)
  * widgets: Fix typos in documentation
  * cocoa: Fix typo in debug messages
  * Only scroll QMenu when there is a valid active action
  * QTimer: Add note in documentation
  * Fix QListView assert when the last row is moved in IconMode
  * QFileDialog: Fix adding default suffix when file path contains dot
  * QLineEdit: account for the placeholderText when computing lineRect
  * QFileDialog::saveFileContent crashes on accept
  * QCompleter: QCompleter unexpectedly changes QLineEdit text
  * Fix build error on iOS with the configure option -qtnamespace
  * Draw the cursor considering the descent is 0
  * Remove pure-virtual-signals.h include from tst_moc.cpp
  * plugins: image formats - fix odr violation
  * dbus: Fix typos
  * qwindowsdialoghelpers: Fix typo in documentation
  * QTableView: Document the customizations applied to QHeaderView
  * Unicodetools: compile
  * eglfs_x11: Fix running flag linkage
  * qcompilerdetection.h: add Q_CC_{GNU,MSVC,CLANG}_ONLY macros
  * Fix CMake warning about "missing closing ' quote"
  * Fix alignment of next/prev links in offline style
  * QtDBus: includemocs
  * Image Plugins: includemocs(-ish)
  * QtGui: includemocs
  * QXcbNativeInterface: remove unused field m_sysTraySelectionAtom
  * Windows QPA: Fix slowdown with large table/tree views with accessibility
  * Macstyle: fix the text color on the disabled button
  * QMacStyle: fix tool buttons (in checked mode)
  * QTeamCityLogger: fix .arg() placeholder injection
  * QAbstractTestLogger: disable copying
  * Fix errorMessageFromComError()
  * QtNetwork: includemocs
  * AppleUnifiedLogger: Remove manually managed os_log_t cache
  * examples: add WindowStaysOnBottomHint into preview text
  * QSharedPointer: Use matching new/delete
  * QIbusPlatformInputContextPlugin: includemocs
  * QGtk3ThemePlugin: includemocs
  * QTuioTouchPlugin: includemocs
  * QtWidgets: includemocs v2022
  * QMYSQLDriverPlugin: includemocs
  * QtDeviceDiscoverySupportPrivate: includemocs
  * QLinuxFbIntegrationPlugin: includemocs
  * QtPrintSupport: includemocs
  * QSQLiteDriverPlugin: includemocs
  * QtFbSupportPrivate: includemocs
  * QXdgDesktopPortalThemePlugin: includemocs
  * QtTest: includemocs
  * QComposePlatformInputContextPlugin: includemocs
  * QtSql: includemocs
  * QVncIntegrationPlugin: includemocs
  * Fix backingstore fractional DPR glitches for widgets in child windows
  * Include &lt;limits&gt; where std::numeric_limits is used
  * QtInputSupportPrivate: includemocs
  * Document the default value of QSFPM::sortOrder()
  * Better document how to enable sorting in QSPFM
  * Correct documentation of INI format's loss of type information
  * Android: add missing properties in AndroidManifest.xml
  * Fix assertion failure when parsing a doubly-invalid date-time text
  * Windows QPA: Correct mistake when calculating minmaxinfo
  * Android: replace ndk.dir with android.ndkVersion in build.gradle
  * Android: remove the old copy of gradle.properties after reading it
  * CMake Android Support: Fix signing of APKs
  * Android: fix A11Y object description
  * macOS: Fix warning about comparing different types in QCocoaScreen::isOnline
  * Fix qmake build on FreeBSD
  * Update documentation of enum Qt::DockWidgetArea
  * xcb: recreate xcb window under some conditions
  * objc_namespace: Add support for universal binaries
  * objc_namespace: Fix misspelled argument for silencing output
  * objc_namespace: Update parsing logic to account for otool changes
  * Blacklist passwordAuth for Ubuntu 20.04
  * Android: wrap QAndroidInputContext's m_focusObject in a QPointer
  * Fix compilation with GCC 12 (and on Fedora 35 and newer)
  * Chip example: fix an accidental bool-&gt;int conversion when using PMF connections
  * qmake: Add support for C++23
  * Android: use BCP 47 tag to create a correct Locale for QTimeZone::displayName()
  * QDateTime: fix adjusted datetime handling
  * Fix crash in tst_qmltc_examples on Android
  * macOS: Remove dead code for focus ring handling in Mac style
  * Detach for colortransforms of indexed formats
  * tst_QTcpSocket::connectToHostError - handle possible timeouts
  * CoreText: Avoid populating font family aliases if family was populated
  * Graphicsview: Avoid background clearing glitches under fractional DPR
  * Windows QPA: Avoid slowdown with UI Automation name change notification
  * Windows QPA: Avoid sending accessibility notifications before activation
  * Windows: Fix potential crash when retrieving default printer
  * Make Ubuntu with its non-standard security level happy
  * Android: Blacklist failing tests on tst_QGraphicsProxyWidget
  * Update LA 4.4.1
  * iOS A11Y: Set more accessibilityTraits
  * QNX: Fix compiler warning by when FEATURE_clipboard is not enabled
  * Document that native file dialogs might not show a title
  * Doc: Remove mentionings of overflows from QElapsedTimer
  * QTextMarkdownImporter: don't apply text char format to list item block
- Commits dropped by the rebase:
  * QBuffer: add missing &lt;limits&gt; include
  * Fix developer build</changelog>
  <changelog author="gmbr3@opensuse.org" date="1687953600">- Change %_libqt5_libexecdir to %_libexecdir/qt5 (bsc#1174075)</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch icu-devel requires to pkgconfig to allow switching libicu
  versions</changelog>
  <changelog author="fvogt@suse.com" date="1695902401">- Update to version 5.15.10+kde159 (bsc#1214327, CVE-2023-37369):
  * Fix CVE-2023-43114
  * QMimeDatabase: fix detection of pattern conflict in different prefixes
  * Fix highdpi conversion of QTabletEvent coordinates on xcb
  * widget: set WA_X11NetWmWindowType* after xcb window was created
  * Fix crash when setting override cursor on multiple clients
  * QAccessibleWidget: Remove pointless ZWSP in warning message
  * Android A11Y: Fix deadlock in QtAndroidAccessibility::runInObjectContext()
  * Correctly parse non BMP char refs in the sax parser
  * Clear the _X version of alongside the enum deprecator
  * Fix UB (signed char passed to &lt;cctype&gt; function)
  * Qt3DRender: includemocs
  * Fix capitalization error in auto-generated qdbusmacros.h include
  * QColorDialog: Ignore mouse move events when no mouse button is pressed
  * QHostInfo: fix remaining slotObj leaks
  * QXmlStreamReader: Raise error on unexpected tokens (CVE-2023-38197,
    QTBUG-92113, QTBUG-95188, bsc#1213326)
  * QTextLayout: Reconsider cursor drawing on TextObject
  * Ensure consistent cursor width under fractional scaling
  * Fix QTextEdit cursor rectangle vertical positioning
  * Return 0 in QWindow::winId in case of failed platform window creation
  * Doc: note QWindow::winId() will cause platform window creation
  * QSslDiffieHellmanParameters: fix mem-leak
  * QHostInfo: fix leaking slot object
  * Make sure we don't count down past 0 QT_FATAL_CRITICALS
  * QLogging: DRY isFatal(QtMsgType)
  * tst_QXmlStream: remove unneeded _ba UDLs
  * Fix typo in QXmlStreamReader error message
  * QXmlStreamReader: make fastScanName() indicate parsing status to callers
  * QXmlStreamReader: change fastScanName() to take a Value*
  * Fix Croatia's currency
  * SSL: upgrade the default DH parameters</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1696593600">- Update to version 5.15.11+kde134, rebased upstream:
  * Revert "Windows QPA: Add support to UiaRaiseNotificationEvent()"
  * FileChooser portal: Make sure filter.name is not empty
  * QPersistentModelIndex: fix UB (op&lt; on unrelated pointers)
  * Avoid crash when keysymToQtKey(keysym, Qt::ControlModifier) is called
  * a11y atspi: translate coords for GetOffsetAtPoint the right way
  * a11y atspi: Take dialog into account as top-level window
  * a11y atspi: Fix incorrect use of x instead of y position
  * macOS: Handle asynchronous deminiaturizing of windows
  * QTranslator: generalize a UNIX-only path
  * iOS, input panel: be more careful before enabling QIOSKeyboardListener
  * Android: Fix flickering on window resize and show keyboard
  * Android A11Y: Check for active surface before calling into native code
  * xcb: Delete touch points without target windows
  * Blacklist 1 tests in tst_QDBusConnection on ubuntu-20.04
  * Fix CMake builds without ANDROID_SDK
  * Blacklist 2 tests in tst_Http2 on ubuntu-20.04
  * Blacklist 1 tests in tst_QSqlQuery on macos
  * Defer creating the special shaders in the texture blitter
  * tst_QSslSocket::serverCipherPreferencies - fix for OpenSSL v3
  * QTemporaryFile: document rename() differences from QFile
  * Doc: 3rd party: Fix reference to FreeType LICENSE.txt
  * Update bundled libjpeg-turbo to version 2.1.4
  * tst_QSsSocket: fix verifyClientCertificate with OpenSSL 3
  * tst_QSslSocket: regenerate certificate used for setLocalCertificateChain
  * tst_QSslSocket::protocolServerSide - make it work with OpenSSL v3
  * tst_QSslSocket::oldErrorsOnSocketReuse - make it work with OpenSSL v3
  * Update zconf.h prefixes to match zlib v1.2.12 update
  * xcb: fix D&amp;D in same xembed client
  * xcb: use global coordinates for position of D&amp;D for xembed client
  * Doc: Update QMetaType::metaObject() descriptions
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 22.04
  * BLACKLIST tst_qfont for Ubuntu 22.04
  * BLACKLIST tst_QMenuBar::check_menuPosition for Ubuntu 22.04
  * tst_QDtls::verifyClientCertficiate - update certs for OpenSSL v3
  * QSslCertificate::toText(): add a file to compare against
  * Fix the spelling of the word "combination"
  * tst_QSslCertificate::pkcs12 - skip the test if OpenSSL version &gt;= 3
  * Android A11Y: Fix TalkBack scrolling behavior
  * Android A11Y: Notify android about scroll events
  * QCocoaDrag: don't add pasteboard items with non-absolute URLs
  * QDirPrivate: pass input QList by cref
  * tst_qbytearray: remove qCompress_data for QT_NO_COMPRESS
  * QDeviceDiscoveryUDev: use NSDMI
  * QAuthenticator: Fix crash when using NTLM / Negotiate
  * Provide a native interface instance in minimal platform plugin
  * Android: document the supported clipboard mimetypes
  * Windows: Account for not finding child windows when calling ChildWindowFromPointEx
  * iOS: Send touch events asynchronously to avoid deadlocking UIKit event loop
  * Disable bitcode for iOS
  * macOS: Ignore deprecation for ReleaseIconRef
  * BLACKLIST tst_QApplication::sendEventsOnProcessEvents for Ubuntu 22.04
  * Convert Latin1 to UTF-16 before passing to ICU API
  * Doc: Remove repetition of word in text
  * eglfs: Fix screen cloning when atomic is enabled
  * Fix printing of dpr&gt;1 images on Windows
  * QHttp: Fix handling of redirect loaded from cache
  * Doc: Fix return type of QLEInteger/QBEInteger post-in/decrement ops
  * qmake: Fix installation of separate debug info for plugins
  * iOS: ensure we close inputpanel after clearing focusobject
  * Convert Latin1 to UTF-16 before passing to ICU API
  * qputenv: defend against non-NUL-terminated QByteArray values
  * QFontSubset: remove unused glyphName() overload
  * Statically assert that the __mips_dsp code is only active on 32-bit
  * QGtk3Theme: Ensure gtk uses the same windowing system as Qt
  * tst_QFocusFrame: fix -Wparantheses
  * Sync Vulkan device features between QVulkanWindow and QRhi
  * SQLite: Update SQLite to v3.39.2
  * Update freetype to 2.12.1
  * corelib: Fix typos in documentation
  * QAtomicInteger docs: mention bool and char8_t as 8-bit types
  * qgraphicsitem_cast: replace 0 with nullptr
  * Doc: Hide weak overload template magic from documentation
  * Revert "QDateTime: fix adjusted datetime handling"
  * Fix select handles disappears issues
  * tst_QSslKey: prepare for the migration to OpenSSL v3
  * tst_qnetworkreply: replace server.pem/key pair
  * Disable unit testing setting up QTcpServer on special Apple interfaces
  * qmake/msbuild: Turn off "use full paths in diagnostics" by default
  * qmake/msbuild: Support all /DEBUG:xxx linker options
  * qmake/msbuild: Support all /LTCG:xxx options
  * Android A11Y: Add content change type to content change event
  * Enabler for fractional scaling of text in Qt Quick
  * macOS: Override logical DPI to 72
  * Add QDom internalSubset implementation
  * Fix tst_AndroidAssets, broken by recent changes on assets load speed
  * Android: Improve loading speed of individual assets
  * Darwin: Replace deprecated symbol kIOMasterPortDefault with equivalent
  * macOS: Remove code for handling logical DPI changes
  * Fix an incorrect invocation of llvm-readobj
  * macOS: Ignore deprecation for kOnSystemDisk icon domain
  * Copy only files that belongs to QML module
  * Android: fix wrong position of cursor handle and editpopup menu in split screen
  * Doc: Document QML_IMPORTS_PATH and QMLPATHS
  * Add the missing RCC_DIR to '.qrc' paths when generating deployment settings
  * Android: Fix the offset of the EditPopupMenu
  * xcb: update xkb_state mask as much as possible
  * QDom: Stop treating non-BMP characters as invalid
  * Android 13: Fix warnings on starting an application
  * qxkbcommon: Map Super/Hyper to Meta early enough to have an effect
  * macOS: Ignore update requests for offline displays
  * macOS: Avoid recursively updating screens when window moves screen
  * qmake/MinGW: Install separate debug info of DLLs next to the DLL
  * QMainWindow: fix restoreState() for toolbars
  * Make two QDT benchmarks data-driven and add more rows
  * Fix doc and example of QLoggingCategory::installCategory()
  * qmake: Document Xcode behavior when bundling translation files
  * Android: Fix missing import
  * QByteArray: more GCC 12 -Werror=array-bound whack-a-mole
  * CMake: Fix android sdk version propagation
  * Restore C++20-deprecated mixed-enum bitwise operators
  * Android: Fix ANR when QtService and QtActivity load in same process
  * Fix restart QtActivity
  * QArrayData::data(): do type-punning via quintptr, not char *
  * QIOSTextResponder: recreate responder upon reset
  * QSslSocket: make it work with OpenSSL v3
  * QFileSystemModelPrivate: de-inline ctor and dtor
  * Network: update Public Suffix List
  * macOS: Ensure proper quoting when calling otool in objc_namespace script
  * QKeySequence: Fix the one-off error in the mac glyph array size
- Commits dropped by the rebase:
  * Apply CVE-2022-27404-27405-27406-qtbase-5.15.diff
  * QArrayData: fix UB via reinterpret_cast (crash with FORTIFY_SOURCE=3)
  * Adapt for q_EVP_PKEY_base_id → q_EVP_PKEY_get_base_id rename in OpenSSL 3
  * Don't use a deprecated function if built/linked with OpenSSL v3</changelog>
  <changelog author="christophe@krop.fr" date="1696593601">- Enable the experimental native painting feature to improve
  remote desktop performances (boo#1214915)
  exporting QT_XCB_NATIVE_PAINTING is required to use the feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1697716800">- Update to version 5.15.11+kde138:
  * QLibraryPrivate: Actually merge load hints
  * QPluginLoader: report the right load hints
  * xkb: fix build with libxkbcommon 1.6.0 and later
  * a11y atspi: Map ButtonMenu role to AT-SPI equivalent</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1703851200">- Update to version 5.15.12+kde144, rebased upstream:
  * QMimeDatabase: handle buggy type definitions with circular inheritance
  * xcb: only set base size when it's valid
  * QPixmapCache: fix leaking of QStrings and Keys on clear()
  * OpenFile portal: do not use O_PATH fds
  * QSystemTrayIcon: properly disconnect old menu in setContextMenu()
  * Guard QTabBar against nested event processing during moving tabs
  * QDial: don't crash when min==max and setting a value != min &amp; max
  * QStandardItemModel: don't leak in mimeData()
  * SQL/MySQL: properly initialize variable
  * QWidgetTextControl: ignore invalid input method event
  * Update the LGPL license header
  * SQL/MySQL: fix handling of json column
  * Remove QMAKE_RANLIB and QMAKE_LINK_SHLIB from android/default_pre.prf
  * macOS: Fix less common writing systems on Catalina and later
  * Blacklist 1 tests in tst_QFtp on ubuntu-20.04
  * Update bundled libpng to version 1.6.39
  * Android: Fix signing of APKs that are generated when an AAB is also built
  * Update bundled zlib to version 1.2.13
  * doc: update the limitation of QSystemTrayIcon on X11
  * Blacklist 1 tests in tst_QTimer on ubuntu-20.04
  * Add benchmarks for QLocale number parsing
  * Add benchmarks for QString number parsing
  * Android: Fix incorrect fullscreen dimensions
  * Gtk3Theme: set XCURSOR_SIZE and XCURSOR_THEME for wayland sessions
  * xcb: Flush Display when processing xcb events
  * xcb: Add xlib wrapper for XFlush()
  * QHostAddress: Fix incorrect comparison against 'Any'
  * QSsl[OpenSSL/Android]: Fix hardcoded 1_1 suffix
  * BLACKLIST: tst_QApplication::sendEventsOnProcessEvents for RHEL 9.0
  * QMacStyle: do not set white color for grayed out button
  * Work round macOS's omission of en_DE from its own uiLanguages()
  * Suppress a deprecation warning in tst_QDateTime::toString_enumformat()
  * QJsonValue: fix incorrect to{Array,Object} when the value is empty
  * QGtk3Dialog: remove the #include for empty moc
  * Remove unneeded QWindow from QGtk3Dialog
  * tst_QSslSocket: Delete sslOptions
  * tst_QSslServer: Make the in-process server use TLS1.2
  * Android: fix Gradle warning about using enableUncompressedNativeLibs
  * Mention  limitation of QDir::drives() on Windows
  * QFileSystemEngine/Win: fix incorrect buffer size in currentPath()
  * Android: properly retrieve mime type of uri to for openUrl()
  * Android: Fix clipboard issue with urls
  * Android: Add a way to disable accessibility via an environment var
  * Update bundled libpng to version 1.6.38
  * QIOSMessageDialog::exec - work around 'windowsless' exec
  * QIosScreen: retain the right window
  * tst_Q{BitArray,ContiguousCache}: check not only count(), but size(), too
  * QIosTextResponder: stop using deprecated constants and type
  * qcompilerdetection.h: detect Coverity
  * Android: Fix Display.getRealMetrics deprecation
  * Fix broken Text rendering when noantialiased NativeRendering is used
  * forkfd: fix Clang 15 ATOMIC_VAR_INIT deprecation warning
  * eglfs: Add env.var. to disable the dedicated drmHandleEvent thread
  * doc: Don't put strings into QVector&lt;double&gt;
  * Remove focusProxyAndInputMethods from tst_QWidget
  * Bump version to 5.15.12
  * Update documentation of qWaitForWindowActive / qWaitForWindowExposed
  * QtHttp: Lower the severity of some log output
  * StyleSheetStyle: Fix color of placeholder texts in text edits
  * Android: Fix flickering on split screen mode
  * Update url to IAccessible2 Specification</changelog>
  <changelog author="alarrosa@suse.com" date="1704283200">- Update to version 5.15.12+kde147:
  * Http2: fix potential overflow in assemble_hpack_block()
    (bsc#1218413, CVE-2023-51714)
  * HPack: fix incorrect integer overflow check
  * HPack: fix a Yoda Condition</changelog>
  <changelog author="fvogt@suse.com" date="1708084800">- Update to version 5.15.12+kde151:
  * Improve KTX file reading memory safety (CVE-2024-25580, boo#1219996)
  * Revert "xcb: only set base size when it's valid"
  * Fix potential leak of QPropertyAnimation in QLineEditIconButton
  * QBitArray: correct inline keyword</changelog>
  <changelog author="alarrosa@suse.com" date="1720785600">- Add patch from upstream to fix a regression in the ODBC driver
  (bsc#1227513, QTBUG-112375):
  * 0001-QSQL-ODBC-fix-regression-trailing-NUL.patch
  * 0002-SQL-ODBC-Pass-correct-length-to-SQLColAttribute.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1722945600">- Add rebased upstream patch to delay any HTTP2 communication until
  encrypted() can be responded to (bsc#1227426, CVE-2024-39936):
  * 0001-HTTP2-Delay-any-communication-until-encrypted-can-be.patch
- Add upstream patch to fix a NULL pointer dereference via the
  function QXcbConnection::initializeAllAtoms() when there is
  anomalous behavior from the X server (bsc#1222120,
  CVE-2023-45935):
  * 0001-xcb-guard-a-pointer-before-usage.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756728000">- Add patch from upstream to fix a precondition violation in call
  to QByteArrayView::at() which can cause crashes (bsc#1243958,
  CVE-2025-5455):
  * 0001-qDecodeDataUrl-fix-precondition-violation-in-call-to.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756814400">- Add patch from upstream to initialize a member variable that was
  uninitialized under some circumstances:
  * 0001-QObjectPrivateSignal-initialize-all-members.patch
- Add patch from upstream to fix a crash when parsing a particular
  glyph in a particular font (QTBUG-124310):
  * 0001-Avoid-crash-in-font-distancefield-computation.patch
  * 0002-Fix-crash-in-font-distancefield-computation.patch
- Add patch from upstream to fix avoid repeatedly registering
  xsettings callbacks when switching cursor themes:
  * 0001-xcb-Avoid-repeatedly-registering-xsettings-callbacks-When.patch
- Add patch from upstream to check validity of RandR output info
  before using it (QTBUG-128906):
  * 0001-xcb-check-validity-of-RandR-output-info-before-using-it.patch
- Add patch from upstream to fix reparenting a window so it takes
  effect even if there are no other state changes to the window:
  * 0001-xcb-Sync-XCB-connection-after-reparenting-window.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756900800">- Add patch from upstream to fix a low performance when processing
  XML data in encodeText (bsc#1239896, CVE-2025-30348):
  * 0001-XML_QDom-speedup-encodeText.patch</changelog>
</package>
<package pkgid="80ce415142ce4bf401a3f25e86ad189c87806980efe88ea7db818e30418cb9ca" name="libQt5Widgets-private-headers-devel" arch="noarch">
  <version epoch="0" ver="5.15.12+kde151" rel="150600.3.9.1"/>
  <changelog author="fvogt@suse.com" date="1678968000">- Update to version 5.15.8+kde183:
  * Add nullptr guard in QStyleSheetStyle::drawPrimitive(PE_PanelLineEdit)
  * QAbstractItemView: don't access invalid indexes on copy-key
  * Apply CVE-2023-24607-qtbase-5.15.diff (CVE-2023-24607,
    bsc#1209616)
  * QXcbConnection::getTimestamp: do not return stale timestamp
  * QToolButton: Elide text when constraints prevent from showing whole text
  * correctly set up ref counting in QThreadPool::tryStart(std::function)
  * Do not set Qt::ToolTip flag for QShapedPixmapWindow
  * Fix deletion order also for QImageReader/Writer::setDevice()
  * Fix deletion order in QImageReader/Writer destructors
  * QNetworkReply: Fix typos in the documentation
  * Doc: Fix typo in the online documentation template
  * Doc: Link to page documenting Qt trademarks in the copyright footer
  * [doc] Fix typo in QBuffer::setBuffer() description
  * qwindowsdrag: Fix typo in documentation
  * openglblacklists: Fix typo in description
  * qxcbscreen: Fix typo in documentation
  * Fix typos in SQL driver documentation
  * qxcbwindow.cpp: Fix sign-compare and another warnings
  * QToolButton: reimplement the fix for QTBUG-95255
  * QSysInfo::prettyProductName(): Add macOS Ventura product name
  * QSysInfo::prettyProductName(): add missing macOS product names
  * xcb: correctly disconnect xsettings callbacks
  * ibus: add SetCursorLocationRelative in InputContext.xml</changelog>
  <changelog author="fvogt@suse.com" date="1680523200">- Update to version 5.15.8+kde185:
  * QFSFileEngine: fix overflow bug when using lseek64
  * Add QImage null check when QOpenGLTexture converts
- Add patch to fix return key handling in QGroupBox on GNOME (bsc#1209364):
  * 0001-Revert-QGnomeTheme-Allow-Space-Return-Enter-and-Sele.patch
- Add patch to fix XInput2 events in big-endian X11 clients (bsc#1204883, QTBUG-105157):
  * big-endian-scroll.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1682078400">- Update to version 5.15.9+kde151, rebased upstream:
  * QCborValue: fix incorrect to{Array,Map} when the value is empty
  * QMargins: fix a missing "full stop" in the docs
  * QLibrary: restore translated string
  * QLibrary: fix possible arg() format clobbering
  * iOS: Use python3 for enumerating test target devices
  * Android: Treat ACTION_CANCEL as TouchCancelEvent
  * Doc: Fix broken formatting
  * QFileSystemEngine: fix potential formatting error
  * QString::asprintf: check that passing field widths as arguments works
  * Backport recent QFlags tests
  * network: Fix typos in documentation
  * Fix accuracy with screen composition
  * Doc: Update documentation for QElapsedTimer's in Windows
  * Document that QStandardPath::findExecutable works with absolute paths
  * macOS: Use native resize cursors for diagonal resize
  * Fix clipped glyphs in text rendering of QGraphicsTextItem
  * Change comparison data type to fix int overflow
  * Add missing Q_WEAK_OVERLOAD definition
  * Update QFileInfo docs to mention macOS aliases
  * Distinguish macOS aliases from normal symbolic links
  * Windows QPA: Fix frameless maximize on secondary screens
  * Rewrite tst_qdataurl as a data-driven test
  * Fix compilation for wasm
  * QIOSFileDialog/QIOSDocumentPickerController - handle dismissed view controller
  * Fix QDockWidget's dock area permissions after hovering
  * Fix C++20 ambiguous relational operators between QJsonValue{,Ref}
  * Android: make sure that orientationChange is reported after resize
  * Android: set all QScreen's geometry-related parameters together
  * Blacklist: test cases blacklisted in tst_QDBusConnection:
  * wasm:  fix issue with passing username/password to network request
  * macOS: Pass multi arch flags when linking qmake
  * QCocoaFileDialogHelper: Always enable symlinks and aliases to directories
  * Android: terminate argv passed to main() with nullptr
  * Update bundled libjpeg-turbo to version 2.1.3
  * ANGLE: Load the DirectX libraries from the system path directly
  * SQLite: Update SQLite to v3.37.2
  * Fix compiler warnings about unused parameters
  * Fix getsockopt option_value initial initialization
  * Http2: Fix redirect-handling
  * Android A11Y: Fix value rounding
  * Android A11Y: Announce value together with element name when focused
  * Android A11Y: handle valueChanged events
  * tst_QSystemSemaphore: give proper path to test-helper
  * QNX: Silence compiler warning by initializing variable
  * Update LICENSE.QT-LICENSE-AGREEMENT
  * winrt appxmanifest: Properly replace VCLibs version for newer MSVC versions
  * QAbstractSocket: Don't pretend pause and resume is a stack
  * Gui: test also depends for clipboard feature
  * QDesktopServices: deprecate destroying URL handlers w/o explicit unsetUrlHandler()
  * macOS: Respect QMAKE_APPLE_DEVICE_ARCHS when building qmake
  * HTTP: Make redirect response parsing more generic
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 20.04
  * Android A11Y: populate child elements when constructing node info
  * Fix issue where readyRead() could happen after disconnected()
  * QStringView: add missing constexpr so we can use is_constant_evaluated
  * Use Android's View.generateViewId() for generating ids for views/surfaces
  * Remove documentation of non-existing QAccessible state
  * Doc: Fix snippet to match actual QFileInfo behavior
  * Android: Re-focus focused accessibility node after orientation change
  * Android A11Y: execute C++ code on main Qt thread
  * Android: extract parentId for hidden object in advance
  * xcb: Show valuator atom names properly in categorized logging
  * Android: replace stacktrace with debug message in search for setService
  * Better document attaching a QFutureWatcher to a started QFuture
  * doc: Update GenericDataLocation location on iOS
  * BLACKLIST test_Gestures tests for RHEL-8.4
  * QPlainTestLogger: do not print "failure location" if there's no failure
  * QAbstractItemView: do not access invalid model indices (3/N)
  * Win32: always allow the event loop to be woken up by posted events
  * rhi: d3d11: Use __uuidof where we can
  * Don't QEXPECT_FAIL tst_QLineEdit::testQuickSelectionWithMouse on macOS ARM
  * Network: Emit authenticationRequired when using Ntlm
  * testlib: Disable window restoration on macOS in a non-persistent way
  * QAbstractItemView: do not access invalid model indices (2/N)
  * QAbstractItemView: do not access invalid model indices (1/N)
  * QAbstractItemView: code tidies
  * Update float16 part of TestLib selftest
  * QGuiApplication: constant-initialize lastCursorPosition
  * Blacklist tst_QFileSystemWatcher::signalsEmittedAfterFileMoved on all Windows versions
  * [Android]: Handle the screen name, modes and refreshRate properly
  * QVersionNumber: remove the "pure" attribute from commonPrefix()
  * QEvent: initialize the static userEventTypeRegistry constexprly
  * Let QXcbGlxWindow::createVisual fallback to QXcbWindow::createVisual
  * Android A11Y: fix content update notification when object is hidden
  * Android: explicitly remove accessibility focus when element is hidden
  * BLACKLIST tst_qfont for Red Hat 8.4 and Ubuntu 20.04
  * QtCore: includemocs
  * Fix memory leak in QtConcurrent::run when called with a NULL QThreadPool
  * INTEGRITY: Prevent deletion of virtual functions
  * QMake: replace a Q_ASSERT() with a Q_UNREACHABLE()
  * QTransform benchmark: measure what was promised
  * QStaticByteArrayMatcher: add a useful comment
  * QMacStyle: use the 'momentary push in' type for push buttons
  * qopengl.h: Move C header #include(s) out of the QT_NAMESPACE
  * Enable all supported 1.0 device features in QVulkanWindow
  * Fix queue passed to vkQueuePresent
  * QFusionStyle: don't draw an invalid outline for up/down buttons
  * Doc: Make QListIterator snippets more robust
  * QVersionNumber: don't detach() in rvalue QList/QVector ctor
  * QNetworkRequest: Document how Qt handles 301 and 302 status codes
  * Convert date-time to UTC before claiming it's in GMT
  * Remove execute permission from XML files
  * Add test case for style sheet selectors for enum properties
  * FreeType: allow falling back to synthesized bold if desired
  * Fix an assertion failure in massageAdjustedDateTime()
  * Relax tst_qvulkan::vulkanVersionRequest to make it compatible with 1.1
  * Doc: Replace "C:Documents and Settings" paths
  * QOrderedMutexLocker: fix compilation with C++11
  * QHttpNetworkConnection: Always set proxy settings to all channels
  * Add a markdown writer test for a checklist item ending with `code`
  * Use QTextCharFormat::fontFixedPitch to remember Markdown backtick spans
  * QWizardLayoutInfo: make == and != operators const
  * Revert "Android: Fix screen flicker issues"
  * macOS: Handle momentum scroll NSEventPhaseBegan when scroll had ended
  * SQLite: Update SQLite to v3.37.0
  * Update copyright year to 2022
  * QTzTimeZonePrivate: use ctor delegation instead of init()
  * QTzTimeZonePrivate: fix permanently-detaching m_icu
  * tst_QGraphicsView: fix memleak
  * Doc: Update external links to Qt Creator Manual
  * macOS: assume an unidentified tablet device is a stylus
  * tst_QItemModel: fix memleaks
  * tst_qanimationgroup: fix memleaks
  * QAbstractAnimation: add missing forward-declaration
  * [doc] QCoreApplication::installTranslator() doesn't take ownership
  * tst_qtranslator: fix memleak
  * QTestData: fix streaming of u8 string literals in C++20 mode
  * QThread/Unix: extract duplicate code
  * QWindowPrivate: fix inconsistent inline on some methods
  * tst_QStringList: check that join(u'0') embeds NULs
  * macOS: Sanitize scroll deltas for NSEventPhaseCancelled
  * tst_qsharedmemory: skip readOnly() test under asan
  * QXmlStreamReader: update test distribution
  * QZipReader: update to unzip partly broken archives
  * Deliver context menu event with correct coordinates to widgets in popups
  * QTextHtmlParser: fix prefix lookahead and html comments
  * QtConcurrent::run crashes on program exit
  * tst_QPropertyAnimation: fix leaks occurring under normal operation
  * tst_QPropertyAnimation: fix wrong comment
  * QLogging: fix potential missing NUL-terminator when calling OutputDebugString
  * Fix qt_scrollRectInImage when scrolling outside of the image
- Commits dropped by the rebase:
  * Fix compile with Qt5: Use QString::mid instead of QString::sliced
  * Restore C++11 compatibility after e8b9f4c28d3ab5e960dc54f2dc0c4b749b0b50e0
  * QDateTime: Don't require c++17</changelog>
  <changelog author="fvogt@suse.com" date="1683633600">- Amend patch to fix mouse grabbing as well (bsc#1211024):
  * big-endian-scroll.patch</changelog>
  <changelog author="fvogt@suse.com" date="1684929600">- Update to version 5.15.9+kde154:
  * Hsts: match header names case insensitively (CVE-2023-32762,
    QTBUG-113392, bsc#1211797)
  * Fix specific overflow in qtextlayout (CVE-2023-32763,
    QTBUG-113337, bsc#1211798)
  * QDnsLookup/Unix: make sure we don't overflow the buffer
    (CVE-2023-33285, boo#1211642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1686657600">- Update to version 5.15.10+kde129, rebased upstream:
  * Ssl: Copy the on-demand cert loading bool from default config
  * Schannel: Reject certificate not signed by a configured CA certificate (boo#1211994, CVE-2023-34410)
  * qnetworkreplyfileimpl_p.h: fix header guard name
  * Revert "Draw the cursor considering the descent is 0"
  * Use pkgconfig in order to find libproxy configuration
  * Upgrade PCRE2 to 10.40
  * Android A11Y: handle LocationChanged event only for focused element
  * Port binary JSON to new special integer bitfields
  * INTEGRITY: enable C99 globally
  * QObject: mark two error reporting functions COLD
  * Endian: Provide special integer bitfield unions
  * Android: set useLegacyPackaging to true in build.gradle
  * QWidgetTextControl: port to new-style connects (faster)
  * Sync qxmlstream.g with qxmlstreamparser_p.h [1/2]: switched lines
  * tst_QNetworkReply try stabilize autoDeleteReplies tests
  * Remove duplicated include for &lt;limits&gt;
  * Fix recursion crash when calling setStyleSheet with `qproperty-styleSheet`
  * qwindowsxpstyle: Fix typos in documentation
  * Correct prefix reported for end element in QXmlStreamReader
  * Android A11Y: Add supported role infos to A11yNodeInfo
  * Fix handling of DateTime values in QSettings
  * Fix off-by-one for "typically" lowest value INT_MIN
  * xml: Fix typos in documentation
  * QWindowsWindow: Fix typo in documentation
  * includemocs (updated script)
  * widgets: Fix typos in documentation
  * cocoa: Fix typo in debug messages
  * Only scroll QMenu when there is a valid active action
  * QTimer: Add note in documentation
  * Fix QListView assert when the last row is moved in IconMode
  * QFileDialog: Fix adding default suffix when file path contains dot
  * QLineEdit: account for the placeholderText when computing lineRect
  * QFileDialog::saveFileContent crashes on accept
  * QCompleter: QCompleter unexpectedly changes QLineEdit text
  * Fix build error on iOS with the configure option -qtnamespace
  * Draw the cursor considering the descent is 0
  * Remove pure-virtual-signals.h include from tst_moc.cpp
  * plugins: image formats - fix odr violation
  * dbus: Fix typos
  * qwindowsdialoghelpers: Fix typo in documentation
  * QTableView: Document the customizations applied to QHeaderView
  * Unicodetools: compile
  * eglfs_x11: Fix running flag linkage
  * qcompilerdetection.h: add Q_CC_{GNU,MSVC,CLANG}_ONLY macros
  * Fix CMake warning about "missing closing ' quote"
  * Fix alignment of next/prev links in offline style
  * QtDBus: includemocs
  * Image Plugins: includemocs(-ish)
  * QtGui: includemocs
  * QXcbNativeInterface: remove unused field m_sysTraySelectionAtom
  * Windows QPA: Fix slowdown with large table/tree views with accessibility
  * Macstyle: fix the text color on the disabled button
  * QMacStyle: fix tool buttons (in checked mode)
  * QTeamCityLogger: fix .arg() placeholder injection
  * QAbstractTestLogger: disable copying
  * Fix errorMessageFromComError()
  * QtNetwork: includemocs
  * AppleUnifiedLogger: Remove manually managed os_log_t cache
  * examples: add WindowStaysOnBottomHint into preview text
  * QSharedPointer: Use matching new/delete
  * QIbusPlatformInputContextPlugin: includemocs
  * QGtk3ThemePlugin: includemocs
  * QTuioTouchPlugin: includemocs
  * QtWidgets: includemocs v2022
  * QMYSQLDriverPlugin: includemocs
  * QtDeviceDiscoverySupportPrivate: includemocs
  * QLinuxFbIntegrationPlugin: includemocs
  * QtPrintSupport: includemocs
  * QSQLiteDriverPlugin: includemocs
  * QtFbSupportPrivate: includemocs
  * QXdgDesktopPortalThemePlugin: includemocs
  * QtTest: includemocs
  * QComposePlatformInputContextPlugin: includemocs
  * QtSql: includemocs
  * QVncIntegrationPlugin: includemocs
  * Fix backingstore fractional DPR glitches for widgets in child windows
  * Include &lt;limits&gt; where std::numeric_limits is used
  * QtInputSupportPrivate: includemocs
  * Document the default value of QSFPM::sortOrder()
  * Better document how to enable sorting in QSPFM
  * Correct documentation of INI format's loss of type information
  * Android: add missing properties in AndroidManifest.xml
  * Fix assertion failure when parsing a doubly-invalid date-time text
  * Windows QPA: Correct mistake when calculating minmaxinfo
  * Android: replace ndk.dir with android.ndkVersion in build.gradle
  * Android: remove the old copy of gradle.properties after reading it
  * CMake Android Support: Fix signing of APKs
  * Android: fix A11Y object description
  * macOS: Fix warning about comparing different types in QCocoaScreen::isOnline
  * Fix qmake build on FreeBSD
  * Update documentation of enum Qt::DockWidgetArea
  * xcb: recreate xcb window under some conditions
  * objc_namespace: Add support for universal binaries
  * objc_namespace: Fix misspelled argument for silencing output
  * objc_namespace: Update parsing logic to account for otool changes
  * Blacklist passwordAuth for Ubuntu 20.04
  * Android: wrap QAndroidInputContext's m_focusObject in a QPointer
  * Fix compilation with GCC 12 (and on Fedora 35 and newer)
  * Chip example: fix an accidental bool-&gt;int conversion when using PMF connections
  * qmake: Add support for C++23
  * Android: use BCP 47 tag to create a correct Locale for QTimeZone::displayName()
  * QDateTime: fix adjusted datetime handling
  * Fix crash in tst_qmltc_examples on Android
  * macOS: Remove dead code for focus ring handling in Mac style
  * Detach for colortransforms of indexed formats
  * tst_QTcpSocket::connectToHostError - handle possible timeouts
  * CoreText: Avoid populating font family aliases if family was populated
  * Graphicsview: Avoid background clearing glitches under fractional DPR
  * Windows QPA: Avoid slowdown with UI Automation name change notification
  * Windows QPA: Avoid sending accessibility notifications before activation
  * Windows: Fix potential crash when retrieving default printer
  * Make Ubuntu with its non-standard security level happy
  * Android: Blacklist failing tests on tst_QGraphicsProxyWidget
  * Update LA 4.4.1
  * iOS A11Y: Set more accessibilityTraits
  * QNX: Fix compiler warning by when FEATURE_clipboard is not enabled
  * Document that native file dialogs might not show a title
  * Doc: Remove mentionings of overflows from QElapsedTimer
  * QTextMarkdownImporter: don't apply text char format to list item block
- Commits dropped by the rebase:
  * QBuffer: add missing &lt;limits&gt; include
  * Fix developer build</changelog>
  <changelog author="gmbr3@opensuse.org" date="1687953600">- Change %_libqt5_libexecdir to %_libexecdir/qt5 (bsc#1174075)</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch icu-devel requires to pkgconfig to allow switching libicu
  versions</changelog>
  <changelog author="fvogt@suse.com" date="1695902401">- Update to version 5.15.10+kde159 (bsc#1214327, CVE-2023-37369):
  * Fix CVE-2023-43114
  * QMimeDatabase: fix detection of pattern conflict in different prefixes
  * Fix highdpi conversion of QTabletEvent coordinates on xcb
  * widget: set WA_X11NetWmWindowType* after xcb window was created
  * Fix crash when setting override cursor on multiple clients
  * QAccessibleWidget: Remove pointless ZWSP in warning message
  * Android A11Y: Fix deadlock in QtAndroidAccessibility::runInObjectContext()
  * Correctly parse non BMP char refs in the sax parser
  * Clear the _X version of alongside the enum deprecator
  * Fix UB (signed char passed to &lt;cctype&gt; function)
  * Qt3DRender: includemocs
  * Fix capitalization error in auto-generated qdbusmacros.h include
  * QColorDialog: Ignore mouse move events when no mouse button is pressed
  * QHostInfo: fix remaining slotObj leaks
  * QXmlStreamReader: Raise error on unexpected tokens (CVE-2023-38197,
    QTBUG-92113, QTBUG-95188, bsc#1213326)
  * QTextLayout: Reconsider cursor drawing on TextObject
  * Ensure consistent cursor width under fractional scaling
  * Fix QTextEdit cursor rectangle vertical positioning
  * Return 0 in QWindow::winId in case of failed platform window creation
  * Doc: note QWindow::winId() will cause platform window creation
  * QSslDiffieHellmanParameters: fix mem-leak
  * QHostInfo: fix leaking slot object
  * Make sure we don't count down past 0 QT_FATAL_CRITICALS
  * QLogging: DRY isFatal(QtMsgType)
  * tst_QXmlStream: remove unneeded _ba UDLs
  * Fix typo in QXmlStreamReader error message
  * QXmlStreamReader: make fastScanName() indicate parsing status to callers
  * QXmlStreamReader: change fastScanName() to take a Value*
  * Fix Croatia's currency
  * SSL: upgrade the default DH parameters</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1696593600">- Update to version 5.15.11+kde134, rebased upstream:
  * Revert "Windows QPA: Add support to UiaRaiseNotificationEvent()"
  * FileChooser portal: Make sure filter.name is not empty
  * QPersistentModelIndex: fix UB (op&lt; on unrelated pointers)
  * Avoid crash when keysymToQtKey(keysym, Qt::ControlModifier) is called
  * a11y atspi: translate coords for GetOffsetAtPoint the right way
  * a11y atspi: Take dialog into account as top-level window
  * a11y atspi: Fix incorrect use of x instead of y position
  * macOS: Handle asynchronous deminiaturizing of windows
  * QTranslator: generalize a UNIX-only path
  * iOS, input panel: be more careful before enabling QIOSKeyboardListener
  * Android: Fix flickering on window resize and show keyboard
  * Android A11Y: Check for active surface before calling into native code
  * xcb: Delete touch points without target windows
  * Blacklist 1 tests in tst_QDBusConnection on ubuntu-20.04
  * Fix CMake builds without ANDROID_SDK
  * Blacklist 2 tests in tst_Http2 on ubuntu-20.04
  * Blacklist 1 tests in tst_QSqlQuery on macos
  * Defer creating the special shaders in the texture blitter
  * tst_QSslSocket::serverCipherPreferencies - fix for OpenSSL v3
  * QTemporaryFile: document rename() differences from QFile
  * Doc: 3rd party: Fix reference to FreeType LICENSE.txt
  * Update bundled libjpeg-turbo to version 2.1.4
  * tst_QSsSocket: fix verifyClientCertificate with OpenSSL 3
  * tst_QSslSocket: regenerate certificate used for setLocalCertificateChain
  * tst_QSslSocket::protocolServerSide - make it work with OpenSSL v3
  * tst_QSslSocket::oldErrorsOnSocketReuse - make it work with OpenSSL v3
  * Update zconf.h prefixes to match zlib v1.2.12 update
  * xcb: fix D&amp;D in same xembed client
  * xcb: use global coordinates for position of D&amp;D for xembed client
  * Doc: Update QMetaType::metaObject() descriptions
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 22.04
  * BLACKLIST tst_qfont for Ubuntu 22.04
  * BLACKLIST tst_QMenuBar::check_menuPosition for Ubuntu 22.04
  * tst_QDtls::verifyClientCertficiate - update certs for OpenSSL v3
  * QSslCertificate::toText(): add a file to compare against
  * Fix the spelling of the word "combination"
  * tst_QSslCertificate::pkcs12 - skip the test if OpenSSL version &gt;= 3
  * Android A11Y: Fix TalkBack scrolling behavior
  * Android A11Y: Notify android about scroll events
  * QCocoaDrag: don't add pasteboard items with non-absolute URLs
  * QDirPrivate: pass input QList by cref
  * tst_qbytearray: remove qCompress_data for QT_NO_COMPRESS
  * QDeviceDiscoveryUDev: use NSDMI
  * QAuthenticator: Fix crash when using NTLM / Negotiate
  * Provide a native interface instance in minimal platform plugin
  * Android: document the supported clipboard mimetypes
  * Windows: Account for not finding child windows when calling ChildWindowFromPointEx
  * iOS: Send touch events asynchronously to avoid deadlocking UIKit event loop
  * Disable bitcode for iOS
  * macOS: Ignore deprecation for ReleaseIconRef
  * BLACKLIST tst_QApplication::sendEventsOnProcessEvents for Ubuntu 22.04
  * Convert Latin1 to UTF-16 before passing to ICU API
  * Doc: Remove repetition of word in text
  * eglfs: Fix screen cloning when atomic is enabled
  * Fix printing of dpr&gt;1 images on Windows
  * QHttp: Fix handling of redirect loaded from cache
  * Doc: Fix return type of QLEInteger/QBEInteger post-in/decrement ops
  * qmake: Fix installation of separate debug info for plugins
  * iOS: ensure we close inputpanel after clearing focusobject
  * Convert Latin1 to UTF-16 before passing to ICU API
  * qputenv: defend against non-NUL-terminated QByteArray values
  * QFontSubset: remove unused glyphName() overload
  * Statically assert that the __mips_dsp code is only active on 32-bit
  * QGtk3Theme: Ensure gtk uses the same windowing system as Qt
  * tst_QFocusFrame: fix -Wparantheses
  * Sync Vulkan device features between QVulkanWindow and QRhi
  * SQLite: Update SQLite to v3.39.2
  * Update freetype to 2.12.1
  * corelib: Fix typos in documentation
  * QAtomicInteger docs: mention bool and char8_t as 8-bit types
  * qgraphicsitem_cast: replace 0 with nullptr
  * Doc: Hide weak overload template magic from documentation
  * Revert "QDateTime: fix adjusted datetime handling"
  * Fix select handles disappears issues
  * tst_QSslKey: prepare for the migration to OpenSSL v3
  * tst_qnetworkreply: replace server.pem/key pair
  * Disable unit testing setting up QTcpServer on special Apple interfaces
  * qmake/msbuild: Turn off "use full paths in diagnostics" by default
  * qmake/msbuild: Support all /DEBUG:xxx linker options
  * qmake/msbuild: Support all /LTCG:xxx options
  * Android A11Y: Add content change type to content change event
  * Enabler for fractional scaling of text in Qt Quick
  * macOS: Override logical DPI to 72
  * Add QDom internalSubset implementation
  * Fix tst_AndroidAssets, broken by recent changes on assets load speed
  * Android: Improve loading speed of individual assets
  * Darwin: Replace deprecated symbol kIOMasterPortDefault with equivalent
  * macOS: Remove code for handling logical DPI changes
  * Fix an incorrect invocation of llvm-readobj
  * macOS: Ignore deprecation for kOnSystemDisk icon domain
  * Copy only files that belongs to QML module
  * Android: fix wrong position of cursor handle and editpopup menu in split screen
  * Doc: Document QML_IMPORTS_PATH and QMLPATHS
  * Add the missing RCC_DIR to '.qrc' paths when generating deployment settings
  * Android: Fix the offset of the EditPopupMenu
  * xcb: update xkb_state mask as much as possible
  * QDom: Stop treating non-BMP characters as invalid
  * Android 13: Fix warnings on starting an application
  * qxkbcommon: Map Super/Hyper to Meta early enough to have an effect
  * macOS: Ignore update requests for offline displays
  * macOS: Avoid recursively updating screens when window moves screen
  * qmake/MinGW: Install separate debug info of DLLs next to the DLL
  * QMainWindow: fix restoreState() for toolbars
  * Make two QDT benchmarks data-driven and add more rows
  * Fix doc and example of QLoggingCategory::installCategory()
  * qmake: Document Xcode behavior when bundling translation files
  * Android: Fix missing import
  * QByteArray: more GCC 12 -Werror=array-bound whack-a-mole
  * CMake: Fix android sdk version propagation
  * Restore C++20-deprecated mixed-enum bitwise operators
  * Android: Fix ANR when QtService and QtActivity load in same process
  * Fix restart QtActivity
  * QArrayData::data(): do type-punning via quintptr, not char *
  * QIOSTextResponder: recreate responder upon reset
  * QSslSocket: make it work with OpenSSL v3
  * QFileSystemModelPrivate: de-inline ctor and dtor
  * Network: update Public Suffix List
  * macOS: Ensure proper quoting when calling otool in objc_namespace script
  * QKeySequence: Fix the one-off error in the mac glyph array size
- Commits dropped by the rebase:
  * Apply CVE-2022-27404-27405-27406-qtbase-5.15.diff
  * QArrayData: fix UB via reinterpret_cast (crash with FORTIFY_SOURCE=3)
  * Adapt for q_EVP_PKEY_base_id → q_EVP_PKEY_get_base_id rename in OpenSSL 3
  * Don't use a deprecated function if built/linked with OpenSSL v3</changelog>
  <changelog author="christophe@krop.fr" date="1696593601">- Enable the experimental native painting feature to improve
  remote desktop performances (boo#1214915)
  exporting QT_XCB_NATIVE_PAINTING is required to use the feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1697716800">- Update to version 5.15.11+kde138:
  * QLibraryPrivate: Actually merge load hints
  * QPluginLoader: report the right load hints
  * xkb: fix build with libxkbcommon 1.6.0 and later
  * a11y atspi: Map ButtonMenu role to AT-SPI equivalent</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1703851200">- Update to version 5.15.12+kde144, rebased upstream:
  * QMimeDatabase: handle buggy type definitions with circular inheritance
  * xcb: only set base size when it's valid
  * QPixmapCache: fix leaking of QStrings and Keys on clear()
  * OpenFile portal: do not use O_PATH fds
  * QSystemTrayIcon: properly disconnect old menu in setContextMenu()
  * Guard QTabBar against nested event processing during moving tabs
  * QDial: don't crash when min==max and setting a value != min &amp; max
  * QStandardItemModel: don't leak in mimeData()
  * SQL/MySQL: properly initialize variable
  * QWidgetTextControl: ignore invalid input method event
  * Update the LGPL license header
  * SQL/MySQL: fix handling of json column
  * Remove QMAKE_RANLIB and QMAKE_LINK_SHLIB from android/default_pre.prf
  * macOS: Fix less common writing systems on Catalina and later
  * Blacklist 1 tests in tst_QFtp on ubuntu-20.04
  * Update bundled libpng to version 1.6.39
  * Android: Fix signing of APKs that are generated when an AAB is also built
  * Update bundled zlib to version 1.2.13
  * doc: update the limitation of QSystemTrayIcon on X11
  * Blacklist 1 tests in tst_QTimer on ubuntu-20.04
  * Add benchmarks for QLocale number parsing
  * Add benchmarks for QString number parsing
  * Android: Fix incorrect fullscreen dimensions
  * Gtk3Theme: set XCURSOR_SIZE and XCURSOR_THEME for wayland sessions
  * xcb: Flush Display when processing xcb events
  * xcb: Add xlib wrapper for XFlush()
  * QHostAddress: Fix incorrect comparison against 'Any'
  * QSsl[OpenSSL/Android]: Fix hardcoded 1_1 suffix
  * BLACKLIST: tst_QApplication::sendEventsOnProcessEvents for RHEL 9.0
  * QMacStyle: do not set white color for grayed out button
  * Work round macOS's omission of en_DE from its own uiLanguages()
  * Suppress a deprecation warning in tst_QDateTime::toString_enumformat()
  * QJsonValue: fix incorrect to{Array,Object} when the value is empty
  * QGtk3Dialog: remove the #include for empty moc
  * Remove unneeded QWindow from QGtk3Dialog
  * tst_QSslSocket: Delete sslOptions
  * tst_QSslServer: Make the in-process server use TLS1.2
  * Android: fix Gradle warning about using enableUncompressedNativeLibs
  * Mention  limitation of QDir::drives() on Windows
  * QFileSystemEngine/Win: fix incorrect buffer size in currentPath()
  * Android: properly retrieve mime type of uri to for openUrl()
  * Android: Fix clipboard issue with urls
  * Android: Add a way to disable accessibility via an environment var
  * Update bundled libpng to version 1.6.38
  * QIOSMessageDialog::exec - work around 'windowsless' exec
  * QIosScreen: retain the right window
  * tst_Q{BitArray,ContiguousCache}: check not only count(), but size(), too
  * QIosTextResponder: stop using deprecated constants and type
  * qcompilerdetection.h: detect Coverity
  * Android: Fix Display.getRealMetrics deprecation
  * Fix broken Text rendering when noantialiased NativeRendering is used
  * forkfd: fix Clang 15 ATOMIC_VAR_INIT deprecation warning
  * eglfs: Add env.var. to disable the dedicated drmHandleEvent thread
  * doc: Don't put strings into QVector&lt;double&gt;
  * Remove focusProxyAndInputMethods from tst_QWidget
  * Bump version to 5.15.12
  * Update documentation of qWaitForWindowActive / qWaitForWindowExposed
  * QtHttp: Lower the severity of some log output
  * StyleSheetStyle: Fix color of placeholder texts in text edits
  * Android: Fix flickering on split screen mode
  * Update url to IAccessible2 Specification</changelog>
  <changelog author="alarrosa@suse.com" date="1704283200">- Update to version 5.15.12+kde147:
  * Http2: fix potential overflow in assemble_hpack_block()
    (bsc#1218413, CVE-2023-51714)
  * HPack: fix incorrect integer overflow check
  * HPack: fix a Yoda Condition</changelog>
  <changelog author="fvogt@suse.com" date="1708084800">- Update to version 5.15.12+kde151:
  * Improve KTX file reading memory safety (CVE-2024-25580, boo#1219996)
  * Revert "xcb: only set base size when it's valid"
  * Fix potential leak of QPropertyAnimation in QLineEditIconButton
  * QBitArray: correct inline keyword</changelog>
  <changelog author="alarrosa@suse.com" date="1720785600">- Add patch from upstream to fix a regression in the ODBC driver
  (bsc#1227513, QTBUG-112375):
  * 0001-QSQL-ODBC-fix-regression-trailing-NUL.patch
  * 0002-SQL-ODBC-Pass-correct-length-to-SQLColAttribute.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1722945600">- Add rebased upstream patch to delay any HTTP2 communication until
  encrypted() can be responded to (bsc#1227426, CVE-2024-39936):
  * 0001-HTTP2-Delay-any-communication-until-encrypted-can-be.patch
- Add upstream patch to fix a NULL pointer dereference via the
  function QXcbConnection::initializeAllAtoms() when there is
  anomalous behavior from the X server (bsc#1222120,
  CVE-2023-45935):
  * 0001-xcb-guard-a-pointer-before-usage.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756728000">- Add patch from upstream to fix a precondition violation in call
  to QByteArrayView::at() which can cause crashes (bsc#1243958,
  CVE-2025-5455):
  * 0001-qDecodeDataUrl-fix-precondition-violation-in-call-to.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756814400">- Add patch from upstream to initialize a member variable that was
  uninitialized under some circumstances:
  * 0001-QObjectPrivateSignal-initialize-all-members.patch
- Add patch from upstream to fix a crash when parsing a particular
  glyph in a particular font (QTBUG-124310):
  * 0001-Avoid-crash-in-font-distancefield-computation.patch
  * 0002-Fix-crash-in-font-distancefield-computation.patch
- Add patch from upstream to fix avoid repeatedly registering
  xsettings callbacks when switching cursor themes:
  * 0001-xcb-Avoid-repeatedly-registering-xsettings-callbacks-When.patch
- Add patch from upstream to check validity of RandR output info
  before using it (QTBUG-128906):
  * 0001-xcb-check-validity-of-RandR-output-info-before-using-it.patch
- Add patch from upstream to fix reparenting a window so it takes
  effect even if there are no other state changes to the window:
  * 0001-xcb-Sync-XCB-connection-after-reparenting-window.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756900800">- Add patch from upstream to fix a low performance when processing
  XML data in encodeText (bsc#1239896, CVE-2025-30348):
  * 0001-XML_QDom-speedup-encodeText.patch</changelog>
</package>
<package pkgid="d1e3657cbc6d5227001d0d1e2b491d1f72a3698ba5145fc2c1749f02be1a2f21" name="libQt5Widgets5" arch="x86_64">
  <version epoch="0" ver="5.15.12+kde151" rel="150600.3.9.1"/>
  <changelog author="fvogt@suse.com" date="1678968000">- Update to version 5.15.8+kde183:
  * Add nullptr guard in QStyleSheetStyle::drawPrimitive(PE_PanelLineEdit)
  * QAbstractItemView: don't access invalid indexes on copy-key
  * Apply CVE-2023-24607-qtbase-5.15.diff (CVE-2023-24607,
    bsc#1209616)
  * QXcbConnection::getTimestamp: do not return stale timestamp
  * QToolButton: Elide text when constraints prevent from showing whole text
  * correctly set up ref counting in QThreadPool::tryStart(std::function)
  * Do not set Qt::ToolTip flag for QShapedPixmapWindow
  * Fix deletion order also for QImageReader/Writer::setDevice()
  * Fix deletion order in QImageReader/Writer destructors
  * QNetworkReply: Fix typos in the documentation
  * Doc: Fix typo in the online documentation template
  * Doc: Link to page documenting Qt trademarks in the copyright footer
  * [doc] Fix typo in QBuffer::setBuffer() description
  * qwindowsdrag: Fix typo in documentation
  * openglblacklists: Fix typo in description
  * qxcbscreen: Fix typo in documentation
  * Fix typos in SQL driver documentation
  * qxcbwindow.cpp: Fix sign-compare and another warnings
  * QToolButton: reimplement the fix for QTBUG-95255
  * QSysInfo::prettyProductName(): Add macOS Ventura product name
  * QSysInfo::prettyProductName(): add missing macOS product names
  * xcb: correctly disconnect xsettings callbacks
  * ibus: add SetCursorLocationRelative in InputContext.xml</changelog>
  <changelog author="fvogt@suse.com" date="1680523200">- Update to version 5.15.8+kde185:
  * QFSFileEngine: fix overflow bug when using lseek64
  * Add QImage null check when QOpenGLTexture converts
- Add patch to fix return key handling in QGroupBox on GNOME (bsc#1209364):
  * 0001-Revert-QGnomeTheme-Allow-Space-Return-Enter-and-Sele.patch
- Add patch to fix XInput2 events in big-endian X11 clients (bsc#1204883, QTBUG-105157):
  * big-endian-scroll.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1682078400">- Update to version 5.15.9+kde151, rebased upstream:
  * QCborValue: fix incorrect to{Array,Map} when the value is empty
  * QMargins: fix a missing "full stop" in the docs
  * QLibrary: restore translated string
  * QLibrary: fix possible arg() format clobbering
  * iOS: Use python3 for enumerating test target devices
  * Android: Treat ACTION_CANCEL as TouchCancelEvent
  * Doc: Fix broken formatting
  * QFileSystemEngine: fix potential formatting error
  * QString::asprintf: check that passing field widths as arguments works
  * Backport recent QFlags tests
  * network: Fix typos in documentation
  * Fix accuracy with screen composition
  * Doc: Update documentation for QElapsedTimer's in Windows
  * Document that QStandardPath::findExecutable works with absolute paths
  * macOS: Use native resize cursors for diagonal resize
  * Fix clipped glyphs in text rendering of QGraphicsTextItem
  * Change comparison data type to fix int overflow
  * Add missing Q_WEAK_OVERLOAD definition
  * Update QFileInfo docs to mention macOS aliases
  * Distinguish macOS aliases from normal symbolic links
  * Windows QPA: Fix frameless maximize on secondary screens
  * Rewrite tst_qdataurl as a data-driven test
  * Fix compilation for wasm
  * QIOSFileDialog/QIOSDocumentPickerController - handle dismissed view controller
  * Fix QDockWidget's dock area permissions after hovering
  * Fix C++20 ambiguous relational operators between QJsonValue{,Ref}
  * Android: make sure that orientationChange is reported after resize
  * Android: set all QScreen's geometry-related parameters together
  * Blacklist: test cases blacklisted in tst_QDBusConnection:
  * wasm:  fix issue with passing username/password to network request
  * macOS: Pass multi arch flags when linking qmake
  * QCocoaFileDialogHelper: Always enable symlinks and aliases to directories
  * Android: terminate argv passed to main() with nullptr
  * Update bundled libjpeg-turbo to version 2.1.3
  * ANGLE: Load the DirectX libraries from the system path directly
  * SQLite: Update SQLite to v3.37.2
  * Fix compiler warnings about unused parameters
  * Fix getsockopt option_value initial initialization
  * Http2: Fix redirect-handling
  * Android A11Y: Fix value rounding
  * Android A11Y: Announce value together with element name when focused
  * Android A11Y: handle valueChanged events
  * tst_QSystemSemaphore: give proper path to test-helper
  * QNX: Silence compiler warning by initializing variable
  * Update LICENSE.QT-LICENSE-AGREEMENT
  * winrt appxmanifest: Properly replace VCLibs version for newer MSVC versions
  * QAbstractSocket: Don't pretend pause and resume is a stack
  * Gui: test also depends for clipboard feature
  * QDesktopServices: deprecate destroying URL handlers w/o explicit unsetUrlHandler()
  * macOS: Respect QMAKE_APPLE_DEVICE_ARCHS when building qmake
  * HTTP: Make redirect response parsing more generic
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 20.04
  * Android A11Y: populate child elements when constructing node info
  * Fix issue where readyRead() could happen after disconnected()
  * QStringView: add missing constexpr so we can use is_constant_evaluated
  * Use Android's View.generateViewId() for generating ids for views/surfaces
  * Remove documentation of non-existing QAccessible state
  * Doc: Fix snippet to match actual QFileInfo behavior
  * Android: Re-focus focused accessibility node after orientation change
  * Android A11Y: execute C++ code on main Qt thread
  * Android: extract parentId for hidden object in advance
  * xcb: Show valuator atom names properly in categorized logging
  * Android: replace stacktrace with debug message in search for setService
  * Better document attaching a QFutureWatcher to a started QFuture
  * doc: Update GenericDataLocation location on iOS
  * BLACKLIST test_Gestures tests for RHEL-8.4
  * QPlainTestLogger: do not print "failure location" if there's no failure
  * QAbstractItemView: do not access invalid model indices (3/N)
  * Win32: always allow the event loop to be woken up by posted events
  * rhi: d3d11: Use __uuidof where we can
  * Don't QEXPECT_FAIL tst_QLineEdit::testQuickSelectionWithMouse on macOS ARM
  * Network: Emit authenticationRequired when using Ntlm
  * testlib: Disable window restoration on macOS in a non-persistent way
  * QAbstractItemView: do not access invalid model indices (2/N)
  * QAbstractItemView: do not access invalid model indices (1/N)
  * QAbstractItemView: code tidies
  * Update float16 part of TestLib selftest
  * QGuiApplication: constant-initialize lastCursorPosition
  * Blacklist tst_QFileSystemWatcher::signalsEmittedAfterFileMoved on all Windows versions
  * [Android]: Handle the screen name, modes and refreshRate properly
  * QVersionNumber: remove the "pure" attribute from commonPrefix()
  * QEvent: initialize the static userEventTypeRegistry constexprly
  * Let QXcbGlxWindow::createVisual fallback to QXcbWindow::createVisual
  * Android A11Y: fix content update notification when object is hidden
  * Android: explicitly remove accessibility focus when element is hidden
  * BLACKLIST tst_qfont for Red Hat 8.4 and Ubuntu 20.04
  * QtCore: includemocs
  * Fix memory leak in QtConcurrent::run when called with a NULL QThreadPool
  * INTEGRITY: Prevent deletion of virtual functions
  * QMake: replace a Q_ASSERT() with a Q_UNREACHABLE()
  * QTransform benchmark: measure what was promised
  * QStaticByteArrayMatcher: add a useful comment
  * QMacStyle: use the 'momentary push in' type for push buttons
  * qopengl.h: Move C header #include(s) out of the QT_NAMESPACE
  * Enable all supported 1.0 device features in QVulkanWindow
  * Fix queue passed to vkQueuePresent
  * QFusionStyle: don't draw an invalid outline for up/down buttons
  * Doc: Make QListIterator snippets more robust
  * QVersionNumber: don't detach() in rvalue QList/QVector ctor
  * QNetworkRequest: Document how Qt handles 301 and 302 status codes
  * Convert date-time to UTC before claiming it's in GMT
  * Remove execute permission from XML files
  * Add test case for style sheet selectors for enum properties
  * FreeType: allow falling back to synthesized bold if desired
  * Fix an assertion failure in massageAdjustedDateTime()
  * Relax tst_qvulkan::vulkanVersionRequest to make it compatible with 1.1
  * Doc: Replace "C:Documents and Settings" paths
  * QOrderedMutexLocker: fix compilation with C++11
  * QHttpNetworkConnection: Always set proxy settings to all channels
  * Add a markdown writer test for a checklist item ending with `code`
  * Use QTextCharFormat::fontFixedPitch to remember Markdown backtick spans
  * QWizardLayoutInfo: make == and != operators const
  * Revert "Android: Fix screen flicker issues"
  * macOS: Handle momentum scroll NSEventPhaseBegan when scroll had ended
  * SQLite: Update SQLite to v3.37.0
  * Update copyright year to 2022
  * QTzTimeZonePrivate: use ctor delegation instead of init()
  * QTzTimeZonePrivate: fix permanently-detaching m_icu
  * tst_QGraphicsView: fix memleak
  * Doc: Update external links to Qt Creator Manual
  * macOS: assume an unidentified tablet device is a stylus
  * tst_QItemModel: fix memleaks
  * tst_qanimationgroup: fix memleaks
  * QAbstractAnimation: add missing forward-declaration
  * [doc] QCoreApplication::installTranslator() doesn't take ownership
  * tst_qtranslator: fix memleak
  * QTestData: fix streaming of u8 string literals in C++20 mode
  * QThread/Unix: extract duplicate code
  * QWindowPrivate: fix inconsistent inline on some methods
  * tst_QStringList: check that join(u'0') embeds NULs
  * macOS: Sanitize scroll deltas for NSEventPhaseCancelled
  * tst_qsharedmemory: skip readOnly() test under asan
  * QXmlStreamReader: update test distribution
  * QZipReader: update to unzip partly broken archives
  * Deliver context menu event with correct coordinates to widgets in popups
  * QTextHtmlParser: fix prefix lookahead and html comments
  * QtConcurrent::run crashes on program exit
  * tst_QPropertyAnimation: fix leaks occurring under normal operation
  * tst_QPropertyAnimation: fix wrong comment
  * QLogging: fix potential missing NUL-terminator when calling OutputDebugString
  * Fix qt_scrollRectInImage when scrolling outside of the image
- Commits dropped by the rebase:
  * Fix compile with Qt5: Use QString::mid instead of QString::sliced
  * Restore C++11 compatibility after e8b9f4c28d3ab5e960dc54f2dc0c4b749b0b50e0
  * QDateTime: Don't require c++17</changelog>
  <changelog author="fvogt@suse.com" date="1683633600">- Amend patch to fix mouse grabbing as well (bsc#1211024):
  * big-endian-scroll.patch</changelog>
  <changelog author="fvogt@suse.com" date="1684929600">- Update to version 5.15.9+kde154:
  * Hsts: match header names case insensitively (CVE-2023-32762,
    QTBUG-113392, bsc#1211797)
  * Fix specific overflow in qtextlayout (CVE-2023-32763,
    QTBUG-113337, bsc#1211798)
  * QDnsLookup/Unix: make sure we don't overflow the buffer
    (CVE-2023-33285, boo#1211642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1686657600">- Update to version 5.15.10+kde129, rebased upstream:
  * Ssl: Copy the on-demand cert loading bool from default config
  * Schannel: Reject certificate not signed by a configured CA certificate (boo#1211994, CVE-2023-34410)
  * qnetworkreplyfileimpl_p.h: fix header guard name
  * Revert "Draw the cursor considering the descent is 0"
  * Use pkgconfig in order to find libproxy configuration
  * Upgrade PCRE2 to 10.40
  * Android A11Y: handle LocationChanged event only for focused element
  * Port binary JSON to new special integer bitfields
  * INTEGRITY: enable C99 globally
  * QObject: mark two error reporting functions COLD
  * Endian: Provide special integer bitfield unions
  * Android: set useLegacyPackaging to true in build.gradle
  * QWidgetTextControl: port to new-style connects (faster)
  * Sync qxmlstream.g with qxmlstreamparser_p.h [1/2]: switched lines
  * tst_QNetworkReply try stabilize autoDeleteReplies tests
  * Remove duplicated include for &lt;limits&gt;
  * Fix recursion crash when calling setStyleSheet with `qproperty-styleSheet`
  * qwindowsxpstyle: Fix typos in documentation
  * Correct prefix reported for end element in QXmlStreamReader
  * Android A11Y: Add supported role infos to A11yNodeInfo
  * Fix handling of DateTime values in QSettings
  * Fix off-by-one for "typically" lowest value INT_MIN
  * xml: Fix typos in documentation
  * QWindowsWindow: Fix typo in documentation
  * includemocs (updated script)
  * widgets: Fix typos in documentation
  * cocoa: Fix typo in debug messages
  * Only scroll QMenu when there is a valid active action
  * QTimer: Add note in documentation
  * Fix QListView assert when the last row is moved in IconMode
  * QFileDialog: Fix adding default suffix when file path contains dot
  * QLineEdit: account for the placeholderText when computing lineRect
  * QFileDialog::saveFileContent crashes on accept
  * QCompleter: QCompleter unexpectedly changes QLineEdit text
  * Fix build error on iOS with the configure option -qtnamespace
  * Draw the cursor considering the descent is 0
  * Remove pure-virtual-signals.h include from tst_moc.cpp
  * plugins: image formats - fix odr violation
  * dbus: Fix typos
  * qwindowsdialoghelpers: Fix typo in documentation
  * QTableView: Document the customizations applied to QHeaderView
  * Unicodetools: compile
  * eglfs_x11: Fix running flag linkage
  * qcompilerdetection.h: add Q_CC_{GNU,MSVC,CLANG}_ONLY macros
  * Fix CMake warning about "missing closing ' quote"
  * Fix alignment of next/prev links in offline style
  * QtDBus: includemocs
  * Image Plugins: includemocs(-ish)
  * QtGui: includemocs
  * QXcbNativeInterface: remove unused field m_sysTraySelectionAtom
  * Windows QPA: Fix slowdown with large table/tree views with accessibility
  * Macstyle: fix the text color on the disabled button
  * QMacStyle: fix tool buttons (in checked mode)
  * QTeamCityLogger: fix .arg() placeholder injection
  * QAbstractTestLogger: disable copying
  * Fix errorMessageFromComError()
  * QtNetwork: includemocs
  * AppleUnifiedLogger: Remove manually managed os_log_t cache
  * examples: add WindowStaysOnBottomHint into preview text
  * QSharedPointer: Use matching new/delete
  * QIbusPlatformInputContextPlugin: includemocs
  * QGtk3ThemePlugin: includemocs
  * QTuioTouchPlugin: includemocs
  * QtWidgets: includemocs v2022
  * QMYSQLDriverPlugin: includemocs
  * QtDeviceDiscoverySupportPrivate: includemocs
  * QLinuxFbIntegrationPlugin: includemocs
  * QtPrintSupport: includemocs
  * QSQLiteDriverPlugin: includemocs
  * QtFbSupportPrivate: includemocs
  * QXdgDesktopPortalThemePlugin: includemocs
  * QtTest: includemocs
  * QComposePlatformInputContextPlugin: includemocs
  * QtSql: includemocs
  * QVncIntegrationPlugin: includemocs
  * Fix backingstore fractional DPR glitches for widgets in child windows
  * Include &lt;limits&gt; where std::numeric_limits is used
  * QtInputSupportPrivate: includemocs
  * Document the default value of QSFPM::sortOrder()
  * Better document how to enable sorting in QSPFM
  * Correct documentation of INI format's loss of type information
  * Android: add missing properties in AndroidManifest.xml
  * Fix assertion failure when parsing a doubly-invalid date-time text
  * Windows QPA: Correct mistake when calculating minmaxinfo
  * Android: replace ndk.dir with android.ndkVersion in build.gradle
  * Android: remove the old copy of gradle.properties after reading it
  * CMake Android Support: Fix signing of APKs
  * Android: fix A11Y object description
  * macOS: Fix warning about comparing different types in QCocoaScreen::isOnline
  * Fix qmake build on FreeBSD
  * Update documentation of enum Qt::DockWidgetArea
  * xcb: recreate xcb window under some conditions
  * objc_namespace: Add support for universal binaries
  * objc_namespace: Fix misspelled argument for silencing output
  * objc_namespace: Update parsing logic to account for otool changes
  * Blacklist passwordAuth for Ubuntu 20.04
  * Android: wrap QAndroidInputContext's m_focusObject in a QPointer
  * Fix compilation with GCC 12 (and on Fedora 35 and newer)
  * Chip example: fix an accidental bool-&gt;int conversion when using PMF connections
  * qmake: Add support for C++23
  * Android: use BCP 47 tag to create a correct Locale for QTimeZone::displayName()
  * QDateTime: fix adjusted datetime handling
  * Fix crash in tst_qmltc_examples on Android
  * macOS: Remove dead code for focus ring handling in Mac style
  * Detach for colortransforms of indexed formats
  * tst_QTcpSocket::connectToHostError - handle possible timeouts
  * CoreText: Avoid populating font family aliases if family was populated
  * Graphicsview: Avoid background clearing glitches under fractional DPR
  * Windows QPA: Avoid slowdown with UI Automation name change notification
  * Windows QPA: Avoid sending accessibility notifications before activation
  * Windows: Fix potential crash when retrieving default printer
  * Make Ubuntu with its non-standard security level happy
  * Android: Blacklist failing tests on tst_QGraphicsProxyWidget
  * Update LA 4.4.1
  * iOS A11Y: Set more accessibilityTraits
  * QNX: Fix compiler warning by when FEATURE_clipboard is not enabled
  * Document that native file dialogs might not show a title
  * Doc: Remove mentionings of overflows from QElapsedTimer
  * QTextMarkdownImporter: don't apply text char format to list item block
- Commits dropped by the rebase:
  * QBuffer: add missing &lt;limits&gt; include
  * Fix developer build</changelog>
  <changelog author="gmbr3@opensuse.org" date="1687953600">- Change %_libqt5_libexecdir to %_libexecdir/qt5 (bsc#1174075)</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch icu-devel requires to pkgconfig to allow switching libicu
  versions</changelog>
  <changelog author="fvogt@suse.com" date="1695902401">- Update to version 5.15.10+kde159 (bsc#1214327, CVE-2023-37369):
  * Fix CVE-2023-43114
  * QMimeDatabase: fix detection of pattern conflict in different prefixes
  * Fix highdpi conversion of QTabletEvent coordinates on xcb
  * widget: set WA_X11NetWmWindowType* after xcb window was created
  * Fix crash when setting override cursor on multiple clients
  * QAccessibleWidget: Remove pointless ZWSP in warning message
  * Android A11Y: Fix deadlock in QtAndroidAccessibility::runInObjectContext()
  * Correctly parse non BMP char refs in the sax parser
  * Clear the _X version of alongside the enum deprecator
  * Fix UB (signed char passed to &lt;cctype&gt; function)
  * Qt3DRender: includemocs
  * Fix capitalization error in auto-generated qdbusmacros.h include
  * QColorDialog: Ignore mouse move events when no mouse button is pressed
  * QHostInfo: fix remaining slotObj leaks
  * QXmlStreamReader: Raise error on unexpected tokens (CVE-2023-38197,
    QTBUG-92113, QTBUG-95188, bsc#1213326)
  * QTextLayout: Reconsider cursor drawing on TextObject
  * Ensure consistent cursor width under fractional scaling
  * Fix QTextEdit cursor rectangle vertical positioning
  * Return 0 in QWindow::winId in case of failed platform window creation
  * Doc: note QWindow::winId() will cause platform window creation
  * QSslDiffieHellmanParameters: fix mem-leak
  * QHostInfo: fix leaking slot object
  * Make sure we don't count down past 0 QT_FATAL_CRITICALS
  * QLogging: DRY isFatal(QtMsgType)
  * tst_QXmlStream: remove unneeded _ba UDLs
  * Fix typo in QXmlStreamReader error message
  * QXmlStreamReader: make fastScanName() indicate parsing status to callers
  * QXmlStreamReader: change fastScanName() to take a Value*
  * Fix Croatia's currency
  * SSL: upgrade the default DH parameters</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1696593600">- Update to version 5.15.11+kde134, rebased upstream:
  * Revert "Windows QPA: Add support to UiaRaiseNotificationEvent()"
  * FileChooser portal: Make sure filter.name is not empty
  * QPersistentModelIndex: fix UB (op&lt; on unrelated pointers)
  * Avoid crash when keysymToQtKey(keysym, Qt::ControlModifier) is called
  * a11y atspi: translate coords for GetOffsetAtPoint the right way
  * a11y atspi: Take dialog into account as top-level window
  * a11y atspi: Fix incorrect use of x instead of y position
  * macOS: Handle asynchronous deminiaturizing of windows
  * QTranslator: generalize a UNIX-only path
  * iOS, input panel: be more careful before enabling QIOSKeyboardListener
  * Android: Fix flickering on window resize and show keyboard
  * Android A11Y: Check for active surface before calling into native code
  * xcb: Delete touch points without target windows
  * Blacklist 1 tests in tst_QDBusConnection on ubuntu-20.04
  * Fix CMake builds without ANDROID_SDK
  * Blacklist 2 tests in tst_Http2 on ubuntu-20.04
  * Blacklist 1 tests in tst_QSqlQuery on macos
  * Defer creating the special shaders in the texture blitter
  * tst_QSslSocket::serverCipherPreferencies - fix for OpenSSL v3
  * QTemporaryFile: document rename() differences from QFile
  * Doc: 3rd party: Fix reference to FreeType LICENSE.txt
  * Update bundled libjpeg-turbo to version 2.1.4
  * tst_QSsSocket: fix verifyClientCertificate with OpenSSL 3
  * tst_QSslSocket: regenerate certificate used for setLocalCertificateChain
  * tst_QSslSocket::protocolServerSide - make it work with OpenSSL v3
  * tst_QSslSocket::oldErrorsOnSocketReuse - make it work with OpenSSL v3
  * Update zconf.h prefixes to match zlib v1.2.12 update
  * xcb: fix D&amp;D in same xembed client
  * xcb: use global coordinates for position of D&amp;D for xembed client
  * Doc: Update QMetaType::metaObject() descriptions
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 22.04
  * BLACKLIST tst_qfont for Ubuntu 22.04
  * BLACKLIST tst_QMenuBar::check_menuPosition for Ubuntu 22.04
  * tst_QDtls::verifyClientCertficiate - update certs for OpenSSL v3
  * QSslCertificate::toText(): add a file to compare against
  * Fix the spelling of the word "combination"
  * tst_QSslCertificate::pkcs12 - skip the test if OpenSSL version &gt;= 3
  * Android A11Y: Fix TalkBack scrolling behavior
  * Android A11Y: Notify android about scroll events
  * QCocoaDrag: don't add pasteboard items with non-absolute URLs
  * QDirPrivate: pass input QList by cref
  * tst_qbytearray: remove qCompress_data for QT_NO_COMPRESS
  * QDeviceDiscoveryUDev: use NSDMI
  * QAuthenticator: Fix crash when using NTLM / Negotiate
  * Provide a native interface instance in minimal platform plugin
  * Android: document the supported clipboard mimetypes
  * Windows: Account for not finding child windows when calling ChildWindowFromPointEx
  * iOS: Send touch events asynchronously to avoid deadlocking UIKit event loop
  * Disable bitcode for iOS
  * macOS: Ignore deprecation for ReleaseIconRef
  * BLACKLIST tst_QApplication::sendEventsOnProcessEvents for Ubuntu 22.04
  * Convert Latin1 to UTF-16 before passing to ICU API
  * Doc: Remove repetition of word in text
  * eglfs: Fix screen cloning when atomic is enabled
  * Fix printing of dpr&gt;1 images on Windows
  * QHttp: Fix handling of redirect loaded from cache
  * Doc: Fix return type of QLEInteger/QBEInteger post-in/decrement ops
  * qmake: Fix installation of separate debug info for plugins
  * iOS: ensure we close inputpanel after clearing focusobject
  * Convert Latin1 to UTF-16 before passing to ICU API
  * qputenv: defend against non-NUL-terminated QByteArray values
  * QFontSubset: remove unused glyphName() overload
  * Statically assert that the __mips_dsp code is only active on 32-bit
  * QGtk3Theme: Ensure gtk uses the same windowing system as Qt
  * tst_QFocusFrame: fix -Wparantheses
  * Sync Vulkan device features between QVulkanWindow and QRhi
  * SQLite: Update SQLite to v3.39.2
  * Update freetype to 2.12.1
  * corelib: Fix typos in documentation
  * QAtomicInteger docs: mention bool and char8_t as 8-bit types
  * qgraphicsitem_cast: replace 0 with nullptr
  * Doc: Hide weak overload template magic from documentation
  * Revert "QDateTime: fix adjusted datetime handling"
  * Fix select handles disappears issues
  * tst_QSslKey: prepare for the migration to OpenSSL v3
  * tst_qnetworkreply: replace server.pem/key pair
  * Disable unit testing setting up QTcpServer on special Apple interfaces
  * qmake/msbuild: Turn off "use full paths in diagnostics" by default
  * qmake/msbuild: Support all /DEBUG:xxx linker options
  * qmake/msbuild: Support all /LTCG:xxx options
  * Android A11Y: Add content change type to content change event
  * Enabler for fractional scaling of text in Qt Quick
  * macOS: Override logical DPI to 72
  * Add QDom internalSubset implementation
  * Fix tst_AndroidAssets, broken by recent changes on assets load speed
  * Android: Improve loading speed of individual assets
  * Darwin: Replace deprecated symbol kIOMasterPortDefault with equivalent
  * macOS: Remove code for handling logical DPI changes
  * Fix an incorrect invocation of llvm-readobj
  * macOS: Ignore deprecation for kOnSystemDisk icon domain
  * Copy only files that belongs to QML module
  * Android: fix wrong position of cursor handle and editpopup menu in split screen
  * Doc: Document QML_IMPORTS_PATH and QMLPATHS
  * Add the missing RCC_DIR to '.qrc' paths when generating deployment settings
  * Android: Fix the offset of the EditPopupMenu
  * xcb: update xkb_state mask as much as possible
  * QDom: Stop treating non-BMP characters as invalid
  * Android 13: Fix warnings on starting an application
  * qxkbcommon: Map Super/Hyper to Meta early enough to have an effect
  * macOS: Ignore update requests for offline displays
  * macOS: Avoid recursively updating screens when window moves screen
  * qmake/MinGW: Install separate debug info of DLLs next to the DLL
  * QMainWindow: fix restoreState() for toolbars
  * Make two QDT benchmarks data-driven and add more rows
  * Fix doc and example of QLoggingCategory::installCategory()
  * qmake: Document Xcode behavior when bundling translation files
  * Android: Fix missing import
  * QByteArray: more GCC 12 -Werror=array-bound whack-a-mole
  * CMake: Fix android sdk version propagation
  * Restore C++20-deprecated mixed-enum bitwise operators
  * Android: Fix ANR when QtService and QtActivity load in same process
  * Fix restart QtActivity
  * QArrayData::data(): do type-punning via quintptr, not char *
  * QIOSTextResponder: recreate responder upon reset
  * QSslSocket: make it work with OpenSSL v3
  * QFileSystemModelPrivate: de-inline ctor and dtor
  * Network: update Public Suffix List
  * macOS: Ensure proper quoting when calling otool in objc_namespace script
  * QKeySequence: Fix the one-off error in the mac glyph array size
- Commits dropped by the rebase:
  * Apply CVE-2022-27404-27405-27406-qtbase-5.15.diff
  * QArrayData: fix UB via reinterpret_cast (crash with FORTIFY_SOURCE=3)
  * Adapt for q_EVP_PKEY_base_id → q_EVP_PKEY_get_base_id rename in OpenSSL 3
  * Don't use a deprecated function if built/linked with OpenSSL v3</changelog>
  <changelog author="christophe@krop.fr" date="1696593601">- Enable the experimental native painting feature to improve
  remote desktop performances (boo#1214915)
  exporting QT_XCB_NATIVE_PAINTING is required to use the feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1697716800">- Update to version 5.15.11+kde138:
  * QLibraryPrivate: Actually merge load hints
  * QPluginLoader: report the right load hints
  * xkb: fix build with libxkbcommon 1.6.0 and later
  * a11y atspi: Map ButtonMenu role to AT-SPI equivalent</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1703851200">- Update to version 5.15.12+kde144, rebased upstream:
  * QMimeDatabase: handle buggy type definitions with circular inheritance
  * xcb: only set base size when it's valid
  * QPixmapCache: fix leaking of QStrings and Keys on clear()
  * OpenFile portal: do not use O_PATH fds
  * QSystemTrayIcon: properly disconnect old menu in setContextMenu()
  * Guard QTabBar against nested event processing during moving tabs
  * QDial: don't crash when min==max and setting a value != min &amp; max
  * QStandardItemModel: don't leak in mimeData()
  * SQL/MySQL: properly initialize variable
  * QWidgetTextControl: ignore invalid input method event
  * Update the LGPL license header
  * SQL/MySQL: fix handling of json column
  * Remove QMAKE_RANLIB and QMAKE_LINK_SHLIB from android/default_pre.prf
  * macOS: Fix less common writing systems on Catalina and later
  * Blacklist 1 tests in tst_QFtp on ubuntu-20.04
  * Update bundled libpng to version 1.6.39
  * Android: Fix signing of APKs that are generated when an AAB is also built
  * Update bundled zlib to version 1.2.13
  * doc: update the limitation of QSystemTrayIcon on X11
  * Blacklist 1 tests in tst_QTimer on ubuntu-20.04
  * Add benchmarks for QLocale number parsing
  * Add benchmarks for QString number parsing
  * Android: Fix incorrect fullscreen dimensions
  * Gtk3Theme: set XCURSOR_SIZE and XCURSOR_THEME for wayland sessions
  * xcb: Flush Display when processing xcb events
  * xcb: Add xlib wrapper for XFlush()
  * QHostAddress: Fix incorrect comparison against 'Any'
  * QSsl[OpenSSL/Android]: Fix hardcoded 1_1 suffix
  * BLACKLIST: tst_QApplication::sendEventsOnProcessEvents for RHEL 9.0
  * QMacStyle: do not set white color for grayed out button
  * Work round macOS's omission of en_DE from its own uiLanguages()
  * Suppress a deprecation warning in tst_QDateTime::toString_enumformat()
  * QJsonValue: fix incorrect to{Array,Object} when the value is empty
  * QGtk3Dialog: remove the #include for empty moc
  * Remove unneeded QWindow from QGtk3Dialog
  * tst_QSslSocket: Delete sslOptions
  * tst_QSslServer: Make the in-process server use TLS1.2
  * Android: fix Gradle warning about using enableUncompressedNativeLibs
  * Mention  limitation of QDir::drives() on Windows
  * QFileSystemEngine/Win: fix incorrect buffer size in currentPath()
  * Android: properly retrieve mime type of uri to for openUrl()
  * Android: Fix clipboard issue with urls
  * Android: Add a way to disable accessibility via an environment var
  * Update bundled libpng to version 1.6.38
  * QIOSMessageDialog::exec - work around 'windowsless' exec
  * QIosScreen: retain the right window
  * tst_Q{BitArray,ContiguousCache}: check not only count(), but size(), too
  * QIosTextResponder: stop using deprecated constants and type
  * qcompilerdetection.h: detect Coverity
  * Android: Fix Display.getRealMetrics deprecation
  * Fix broken Text rendering when noantialiased NativeRendering is used
  * forkfd: fix Clang 15 ATOMIC_VAR_INIT deprecation warning
  * eglfs: Add env.var. to disable the dedicated drmHandleEvent thread
  * doc: Don't put strings into QVector&lt;double&gt;
  * Remove focusProxyAndInputMethods from tst_QWidget
  * Bump version to 5.15.12
  * Update documentation of qWaitForWindowActive / qWaitForWindowExposed
  * QtHttp: Lower the severity of some log output
  * StyleSheetStyle: Fix color of placeholder texts in text edits
  * Android: Fix flickering on split screen mode
  * Update url to IAccessible2 Specification</changelog>
  <changelog author="alarrosa@suse.com" date="1704283200">- Update to version 5.15.12+kde147:
  * Http2: fix potential overflow in assemble_hpack_block()
    (bsc#1218413, CVE-2023-51714)
  * HPack: fix incorrect integer overflow check
  * HPack: fix a Yoda Condition</changelog>
  <changelog author="fvogt@suse.com" date="1708084800">- Update to version 5.15.12+kde151:
  * Improve KTX file reading memory safety (CVE-2024-25580, boo#1219996)
  * Revert "xcb: only set base size when it's valid"
  * Fix potential leak of QPropertyAnimation in QLineEditIconButton
  * QBitArray: correct inline keyword</changelog>
  <changelog author="alarrosa@suse.com" date="1720785600">- Add patch from upstream to fix a regression in the ODBC driver
  (bsc#1227513, QTBUG-112375):
  * 0001-QSQL-ODBC-fix-regression-trailing-NUL.patch
  * 0002-SQL-ODBC-Pass-correct-length-to-SQLColAttribute.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1722945600">- Add rebased upstream patch to delay any HTTP2 communication until
  encrypted() can be responded to (bsc#1227426, CVE-2024-39936):
  * 0001-HTTP2-Delay-any-communication-until-encrypted-can-be.patch
- Add upstream patch to fix a NULL pointer dereference via the
  function QXcbConnection::initializeAllAtoms() when there is
  anomalous behavior from the X server (bsc#1222120,
  CVE-2023-45935):
  * 0001-xcb-guard-a-pointer-before-usage.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756728000">- Add patch from upstream to fix a precondition violation in call
  to QByteArrayView::at() which can cause crashes (bsc#1243958,
  CVE-2025-5455):
  * 0001-qDecodeDataUrl-fix-precondition-violation-in-call-to.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756814400">- Add patch from upstream to initialize a member variable that was
  uninitialized under some circumstances:
  * 0001-QObjectPrivateSignal-initialize-all-members.patch
- Add patch from upstream to fix a crash when parsing a particular
  glyph in a particular font (QTBUG-124310):
  * 0001-Avoid-crash-in-font-distancefield-computation.patch
  * 0002-Fix-crash-in-font-distancefield-computation.patch
- Add patch from upstream to fix avoid repeatedly registering
  xsettings callbacks when switching cursor themes:
  * 0001-xcb-Avoid-repeatedly-registering-xsettings-callbacks-When.patch
- Add patch from upstream to check validity of RandR output info
  before using it (QTBUG-128906):
  * 0001-xcb-check-validity-of-RandR-output-info-before-using-it.patch
- Add patch from upstream to fix reparenting a window so it takes
  effect even if there are no other state changes to the window:
  * 0001-xcb-Sync-XCB-connection-after-reparenting-window.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756900800">- Add patch from upstream to fix a low performance when processing
  XML data in encodeText (bsc#1239896, CVE-2025-30348):
  * 0001-XML_QDom-speedup-encodeText.patch</changelog>
</package>
<package pkgid="bd3acab01936b7824483cdf046b5bfad5ba767bd24d2836944712991711227a5" name="libQt5Xml-devel" arch="x86_64">
  <version epoch="0" ver="5.15.12+kde151" rel="150600.3.9.1"/>
  <changelog author="fvogt@suse.com" date="1678968000">- Update to version 5.15.8+kde183:
  * Add nullptr guard in QStyleSheetStyle::drawPrimitive(PE_PanelLineEdit)
  * QAbstractItemView: don't access invalid indexes on copy-key
  * Apply CVE-2023-24607-qtbase-5.15.diff (CVE-2023-24607,
    bsc#1209616)
  * QXcbConnection::getTimestamp: do not return stale timestamp
  * QToolButton: Elide text when constraints prevent from showing whole text
  * correctly set up ref counting in QThreadPool::tryStart(std::function)
  * Do not set Qt::ToolTip flag for QShapedPixmapWindow
  * Fix deletion order also for QImageReader/Writer::setDevice()
  * Fix deletion order in QImageReader/Writer destructors
  * QNetworkReply: Fix typos in the documentation
  * Doc: Fix typo in the online documentation template
  * Doc: Link to page documenting Qt trademarks in the copyright footer
  * [doc] Fix typo in QBuffer::setBuffer() description
  * qwindowsdrag: Fix typo in documentation
  * openglblacklists: Fix typo in description
  * qxcbscreen: Fix typo in documentation
  * Fix typos in SQL driver documentation
  * qxcbwindow.cpp: Fix sign-compare and another warnings
  * QToolButton: reimplement the fix for QTBUG-95255
  * QSysInfo::prettyProductName(): Add macOS Ventura product name
  * QSysInfo::prettyProductName(): add missing macOS product names
  * xcb: correctly disconnect xsettings callbacks
  * ibus: add SetCursorLocationRelative in InputContext.xml</changelog>
  <changelog author="fvogt@suse.com" date="1680523200">- Update to version 5.15.8+kde185:
  * QFSFileEngine: fix overflow bug when using lseek64
  * Add QImage null check when QOpenGLTexture converts
- Add patch to fix return key handling in QGroupBox on GNOME (bsc#1209364):
  * 0001-Revert-QGnomeTheme-Allow-Space-Return-Enter-and-Sele.patch
- Add patch to fix XInput2 events in big-endian X11 clients (bsc#1204883, QTBUG-105157):
  * big-endian-scroll.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1682078400">- Update to version 5.15.9+kde151, rebased upstream:
  * QCborValue: fix incorrect to{Array,Map} when the value is empty
  * QMargins: fix a missing "full stop" in the docs
  * QLibrary: restore translated string
  * QLibrary: fix possible arg() format clobbering
  * iOS: Use python3 for enumerating test target devices
  * Android: Treat ACTION_CANCEL as TouchCancelEvent
  * Doc: Fix broken formatting
  * QFileSystemEngine: fix potential formatting error
  * QString::asprintf: check that passing field widths as arguments works
  * Backport recent QFlags tests
  * network: Fix typos in documentation
  * Fix accuracy with screen composition
  * Doc: Update documentation for QElapsedTimer's in Windows
  * Document that QStandardPath::findExecutable works with absolute paths
  * macOS: Use native resize cursors for diagonal resize
  * Fix clipped glyphs in text rendering of QGraphicsTextItem
  * Change comparison data type to fix int overflow
  * Add missing Q_WEAK_OVERLOAD definition
  * Update QFileInfo docs to mention macOS aliases
  * Distinguish macOS aliases from normal symbolic links
  * Windows QPA: Fix frameless maximize on secondary screens
  * Rewrite tst_qdataurl as a data-driven test
  * Fix compilation for wasm
  * QIOSFileDialog/QIOSDocumentPickerController - handle dismissed view controller
  * Fix QDockWidget's dock area permissions after hovering
  * Fix C++20 ambiguous relational operators between QJsonValue{,Ref}
  * Android: make sure that orientationChange is reported after resize
  * Android: set all QScreen's geometry-related parameters together
  * Blacklist: test cases blacklisted in tst_QDBusConnection:
  * wasm:  fix issue with passing username/password to network request
  * macOS: Pass multi arch flags when linking qmake
  * QCocoaFileDialogHelper: Always enable symlinks and aliases to directories
  * Android: terminate argv passed to main() with nullptr
  * Update bundled libjpeg-turbo to version 2.1.3
  * ANGLE: Load the DirectX libraries from the system path directly
  * SQLite: Update SQLite to v3.37.2
  * Fix compiler warnings about unused parameters
  * Fix getsockopt option_value initial initialization
  * Http2: Fix redirect-handling
  * Android A11Y: Fix value rounding
  * Android A11Y: Announce value together with element name when focused
  * Android A11Y: handle valueChanged events
  * tst_QSystemSemaphore: give proper path to test-helper
  * QNX: Silence compiler warning by initializing variable
  * Update LICENSE.QT-LICENSE-AGREEMENT
  * winrt appxmanifest: Properly replace VCLibs version for newer MSVC versions
  * QAbstractSocket: Don't pretend pause and resume is a stack
  * Gui: test also depends for clipboard feature
  * QDesktopServices: deprecate destroying URL handlers w/o explicit unsetUrlHandler()
  * macOS: Respect QMAKE_APPLE_DEVICE_ARCHS when building qmake
  * HTTP: Make redirect response parsing more generic
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 20.04
  * Android A11Y: populate child elements when constructing node info
  * Fix issue where readyRead() could happen after disconnected()
  * QStringView: add missing constexpr so we can use is_constant_evaluated
  * Use Android's View.generateViewId() for generating ids for views/surfaces
  * Remove documentation of non-existing QAccessible state
  * Doc: Fix snippet to match actual QFileInfo behavior
  * Android: Re-focus focused accessibility node after orientation change
  * Android A11Y: execute C++ code on main Qt thread
  * Android: extract parentId for hidden object in advance
  * xcb: Show valuator atom names properly in categorized logging
  * Android: replace stacktrace with debug message in search for setService
  * Better document attaching a QFutureWatcher to a started QFuture
  * doc: Update GenericDataLocation location on iOS
  * BLACKLIST test_Gestures tests for RHEL-8.4
  * QPlainTestLogger: do not print "failure location" if there's no failure
  * QAbstractItemView: do not access invalid model indices (3/N)
  * Win32: always allow the event loop to be woken up by posted events
  * rhi: d3d11: Use __uuidof where we can
  * Don't QEXPECT_FAIL tst_QLineEdit::testQuickSelectionWithMouse on macOS ARM
  * Network: Emit authenticationRequired when using Ntlm
  * testlib: Disable window restoration on macOS in a non-persistent way
  * QAbstractItemView: do not access invalid model indices (2/N)
  * QAbstractItemView: do not access invalid model indices (1/N)
  * QAbstractItemView: code tidies
  * Update float16 part of TestLib selftest
  * QGuiApplication: constant-initialize lastCursorPosition
  * Blacklist tst_QFileSystemWatcher::signalsEmittedAfterFileMoved on all Windows versions
  * [Android]: Handle the screen name, modes and refreshRate properly
  * QVersionNumber: remove the "pure" attribute from commonPrefix()
  * QEvent: initialize the static userEventTypeRegistry constexprly
  * Let QXcbGlxWindow::createVisual fallback to QXcbWindow::createVisual
  * Android A11Y: fix content update notification when object is hidden
  * Android: explicitly remove accessibility focus when element is hidden
  * BLACKLIST tst_qfont for Red Hat 8.4 and Ubuntu 20.04
  * QtCore: includemocs
  * Fix memory leak in QtConcurrent::run when called with a NULL QThreadPool
  * INTEGRITY: Prevent deletion of virtual functions
  * QMake: replace a Q_ASSERT() with a Q_UNREACHABLE()
  * QTransform benchmark: measure what was promised
  * QStaticByteArrayMatcher: add a useful comment
  * QMacStyle: use the 'momentary push in' type for push buttons
  * qopengl.h: Move C header #include(s) out of the QT_NAMESPACE
  * Enable all supported 1.0 device features in QVulkanWindow
  * Fix queue passed to vkQueuePresent
  * QFusionStyle: don't draw an invalid outline for up/down buttons
  * Doc: Make QListIterator snippets more robust
  * QVersionNumber: don't detach() in rvalue QList/QVector ctor
  * QNetworkRequest: Document how Qt handles 301 and 302 status codes
  * Convert date-time to UTC before claiming it's in GMT
  * Remove execute permission from XML files
  * Add test case for style sheet selectors for enum properties
  * FreeType: allow falling back to synthesized bold if desired
  * Fix an assertion failure in massageAdjustedDateTime()
  * Relax tst_qvulkan::vulkanVersionRequest to make it compatible with 1.1
  * Doc: Replace "C:Documents and Settings" paths
  * QOrderedMutexLocker: fix compilation with C++11
  * QHttpNetworkConnection: Always set proxy settings to all channels
  * Add a markdown writer test for a checklist item ending with `code`
  * Use QTextCharFormat::fontFixedPitch to remember Markdown backtick spans
  * QWizardLayoutInfo: make == and != operators const
  * Revert "Android: Fix screen flicker issues"
  * macOS: Handle momentum scroll NSEventPhaseBegan when scroll had ended
  * SQLite: Update SQLite to v3.37.0
  * Update copyright year to 2022
  * QTzTimeZonePrivate: use ctor delegation instead of init()
  * QTzTimeZonePrivate: fix permanently-detaching m_icu
  * tst_QGraphicsView: fix memleak
  * Doc: Update external links to Qt Creator Manual
  * macOS: assume an unidentified tablet device is a stylus
  * tst_QItemModel: fix memleaks
  * tst_qanimationgroup: fix memleaks
  * QAbstractAnimation: add missing forward-declaration
  * [doc] QCoreApplication::installTranslator() doesn't take ownership
  * tst_qtranslator: fix memleak
  * QTestData: fix streaming of u8 string literals in C++20 mode
  * QThread/Unix: extract duplicate code
  * QWindowPrivate: fix inconsistent inline on some methods
  * tst_QStringList: check that join(u'0') embeds NULs
  * macOS: Sanitize scroll deltas for NSEventPhaseCancelled
  * tst_qsharedmemory: skip readOnly() test under asan
  * QXmlStreamReader: update test distribution
  * QZipReader: update to unzip partly broken archives
  * Deliver context menu event with correct coordinates to widgets in popups
  * QTextHtmlParser: fix prefix lookahead and html comments
  * QtConcurrent::run crashes on program exit
  * tst_QPropertyAnimation: fix leaks occurring under normal operation
  * tst_QPropertyAnimation: fix wrong comment
  * QLogging: fix potential missing NUL-terminator when calling OutputDebugString
  * Fix qt_scrollRectInImage when scrolling outside of the image
- Commits dropped by the rebase:
  * Fix compile with Qt5: Use QString::mid instead of QString::sliced
  * Restore C++11 compatibility after e8b9f4c28d3ab5e960dc54f2dc0c4b749b0b50e0
  * QDateTime: Don't require c++17</changelog>
  <changelog author="fvogt@suse.com" date="1683633600">- Amend patch to fix mouse grabbing as well (bsc#1211024):
  * big-endian-scroll.patch</changelog>
  <changelog author="fvogt@suse.com" date="1684929600">- Update to version 5.15.9+kde154:
  * Hsts: match header names case insensitively (CVE-2023-32762,
    QTBUG-113392, bsc#1211797)
  * Fix specific overflow in qtextlayout (CVE-2023-32763,
    QTBUG-113337, bsc#1211798)
  * QDnsLookup/Unix: make sure we don't overflow the buffer
    (CVE-2023-33285, boo#1211642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1686657600">- Update to version 5.15.10+kde129, rebased upstream:
  * Ssl: Copy the on-demand cert loading bool from default config
  * Schannel: Reject certificate not signed by a configured CA certificate (boo#1211994, CVE-2023-34410)
  * qnetworkreplyfileimpl_p.h: fix header guard name
  * Revert "Draw the cursor considering the descent is 0"
  * Use pkgconfig in order to find libproxy configuration
  * Upgrade PCRE2 to 10.40
  * Android A11Y: handle LocationChanged event only for focused element
  * Port binary JSON to new special integer bitfields
  * INTEGRITY: enable C99 globally
  * QObject: mark two error reporting functions COLD
  * Endian: Provide special integer bitfield unions
  * Android: set useLegacyPackaging to true in build.gradle
  * QWidgetTextControl: port to new-style connects (faster)
  * Sync qxmlstream.g with qxmlstreamparser_p.h [1/2]: switched lines
  * tst_QNetworkReply try stabilize autoDeleteReplies tests
  * Remove duplicated include for &lt;limits&gt;
  * Fix recursion crash when calling setStyleSheet with `qproperty-styleSheet`
  * qwindowsxpstyle: Fix typos in documentation
  * Correct prefix reported for end element in QXmlStreamReader
  * Android A11Y: Add supported role infos to A11yNodeInfo
  * Fix handling of DateTime values in QSettings
  * Fix off-by-one for "typically" lowest value INT_MIN
  * xml: Fix typos in documentation
  * QWindowsWindow: Fix typo in documentation
  * includemocs (updated script)
  * widgets: Fix typos in documentation
  * cocoa: Fix typo in debug messages
  * Only scroll QMenu when there is a valid active action
  * QTimer: Add note in documentation
  * Fix QListView assert when the last row is moved in IconMode
  * QFileDialog: Fix adding default suffix when file path contains dot
  * QLineEdit: account for the placeholderText when computing lineRect
  * QFileDialog::saveFileContent crashes on accept
  * QCompleter: QCompleter unexpectedly changes QLineEdit text
  * Fix build error on iOS with the configure option -qtnamespace
  * Draw the cursor considering the descent is 0
  * Remove pure-virtual-signals.h include from tst_moc.cpp
  * plugins: image formats - fix odr violation
  * dbus: Fix typos
  * qwindowsdialoghelpers: Fix typo in documentation
  * QTableView: Document the customizations applied to QHeaderView
  * Unicodetools: compile
  * eglfs_x11: Fix running flag linkage
  * qcompilerdetection.h: add Q_CC_{GNU,MSVC,CLANG}_ONLY macros
  * Fix CMake warning about "missing closing ' quote"
  * Fix alignment of next/prev links in offline style
  * QtDBus: includemocs
  * Image Plugins: includemocs(-ish)
  * QtGui: includemocs
  * QXcbNativeInterface: remove unused field m_sysTraySelectionAtom
  * Windows QPA: Fix slowdown with large table/tree views with accessibility
  * Macstyle: fix the text color on the disabled button
  * QMacStyle: fix tool buttons (in checked mode)
  * QTeamCityLogger: fix .arg() placeholder injection
  * QAbstractTestLogger: disable copying
  * Fix errorMessageFromComError()
  * QtNetwork: includemocs
  * AppleUnifiedLogger: Remove manually managed os_log_t cache
  * examples: add WindowStaysOnBottomHint into preview text
  * QSharedPointer: Use matching new/delete
  * QIbusPlatformInputContextPlugin: includemocs
  * QGtk3ThemePlugin: includemocs
  * QTuioTouchPlugin: includemocs
  * QtWidgets: includemocs v2022
  * QMYSQLDriverPlugin: includemocs
  * QtDeviceDiscoverySupportPrivate: includemocs
  * QLinuxFbIntegrationPlugin: includemocs
  * QtPrintSupport: includemocs
  * QSQLiteDriverPlugin: includemocs
  * QtFbSupportPrivate: includemocs
  * QXdgDesktopPortalThemePlugin: includemocs
  * QtTest: includemocs
  * QComposePlatformInputContextPlugin: includemocs
  * QtSql: includemocs
  * QVncIntegrationPlugin: includemocs
  * Fix backingstore fractional DPR glitches for widgets in child windows
  * Include &lt;limits&gt; where std::numeric_limits is used
  * QtInputSupportPrivate: includemocs
  * Document the default value of QSFPM::sortOrder()
  * Better document how to enable sorting in QSPFM
  * Correct documentation of INI format's loss of type information
  * Android: add missing properties in AndroidManifest.xml
  * Fix assertion failure when parsing a doubly-invalid date-time text
  * Windows QPA: Correct mistake when calculating minmaxinfo
  * Android: replace ndk.dir with android.ndkVersion in build.gradle
  * Android: remove the old copy of gradle.properties after reading it
  * CMake Android Support: Fix signing of APKs
  * Android: fix A11Y object description
  * macOS: Fix warning about comparing different types in QCocoaScreen::isOnline
  * Fix qmake build on FreeBSD
  * Update documentation of enum Qt::DockWidgetArea
  * xcb: recreate xcb window under some conditions
  * objc_namespace: Add support for universal binaries
  * objc_namespace: Fix misspelled argument for silencing output
  * objc_namespace: Update parsing logic to account for otool changes
  * Blacklist passwordAuth for Ubuntu 20.04
  * Android: wrap QAndroidInputContext's m_focusObject in a QPointer
  * Fix compilation with GCC 12 (and on Fedora 35 and newer)
  * Chip example: fix an accidental bool-&gt;int conversion when using PMF connections
  * qmake: Add support for C++23
  * Android: use BCP 47 tag to create a correct Locale for QTimeZone::displayName()
  * QDateTime: fix adjusted datetime handling
  * Fix crash in tst_qmltc_examples on Android
  * macOS: Remove dead code for focus ring handling in Mac style
  * Detach for colortransforms of indexed formats
  * tst_QTcpSocket::connectToHostError - handle possible timeouts
  * CoreText: Avoid populating font family aliases if family was populated
  * Graphicsview: Avoid background clearing glitches under fractional DPR
  * Windows QPA: Avoid slowdown with UI Automation name change notification
  * Windows QPA: Avoid sending accessibility notifications before activation
  * Windows: Fix potential crash when retrieving default printer
  * Make Ubuntu with its non-standard security level happy
  * Android: Blacklist failing tests on tst_QGraphicsProxyWidget
  * Update LA 4.4.1
  * iOS A11Y: Set more accessibilityTraits
  * QNX: Fix compiler warning by when FEATURE_clipboard is not enabled
  * Document that native file dialogs might not show a title
  * Doc: Remove mentionings of overflows from QElapsedTimer
  * QTextMarkdownImporter: don't apply text char format to list item block
- Commits dropped by the rebase:
  * QBuffer: add missing &lt;limits&gt; include
  * Fix developer build</changelog>
  <changelog author="gmbr3@opensuse.org" date="1687953600">- Change %_libqt5_libexecdir to %_libexecdir/qt5 (bsc#1174075)</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch icu-devel requires to pkgconfig to allow switching libicu
  versions</changelog>
  <changelog author="fvogt@suse.com" date="1695902401">- Update to version 5.15.10+kde159 (bsc#1214327, CVE-2023-37369):
  * Fix CVE-2023-43114
  * QMimeDatabase: fix detection of pattern conflict in different prefixes
  * Fix highdpi conversion of QTabletEvent coordinates on xcb
  * widget: set WA_X11NetWmWindowType* after xcb window was created
  * Fix crash when setting override cursor on multiple clients
  * QAccessibleWidget: Remove pointless ZWSP in warning message
  * Android A11Y: Fix deadlock in QtAndroidAccessibility::runInObjectContext()
  * Correctly parse non BMP char refs in the sax parser
  * Clear the _X version of alongside the enum deprecator
  * Fix UB (signed char passed to &lt;cctype&gt; function)
  * Qt3DRender: includemocs
  * Fix capitalization error in auto-generated qdbusmacros.h include
  * QColorDialog: Ignore mouse move events when no mouse button is pressed
  * QHostInfo: fix remaining slotObj leaks
  * QXmlStreamReader: Raise error on unexpected tokens (CVE-2023-38197,
    QTBUG-92113, QTBUG-95188, bsc#1213326)
  * QTextLayout: Reconsider cursor drawing on TextObject
  * Ensure consistent cursor width under fractional scaling
  * Fix QTextEdit cursor rectangle vertical positioning
  * Return 0 in QWindow::winId in case of failed platform window creation
  * Doc: note QWindow::winId() will cause platform window creation
  * QSslDiffieHellmanParameters: fix mem-leak
  * QHostInfo: fix leaking slot object
  * Make sure we don't count down past 0 QT_FATAL_CRITICALS
  * QLogging: DRY isFatal(QtMsgType)
  * tst_QXmlStream: remove unneeded _ba UDLs
  * Fix typo in QXmlStreamReader error message
  * QXmlStreamReader: make fastScanName() indicate parsing status to callers
  * QXmlStreamReader: change fastScanName() to take a Value*
  * Fix Croatia's currency
  * SSL: upgrade the default DH parameters</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1696593600">- Update to version 5.15.11+kde134, rebased upstream:
  * Revert "Windows QPA: Add support to UiaRaiseNotificationEvent()"
  * FileChooser portal: Make sure filter.name is not empty
  * QPersistentModelIndex: fix UB (op&lt; on unrelated pointers)
  * Avoid crash when keysymToQtKey(keysym, Qt::ControlModifier) is called
  * a11y atspi: translate coords for GetOffsetAtPoint the right way
  * a11y atspi: Take dialog into account as top-level window
  * a11y atspi: Fix incorrect use of x instead of y position
  * macOS: Handle asynchronous deminiaturizing of windows
  * QTranslator: generalize a UNIX-only path
  * iOS, input panel: be more careful before enabling QIOSKeyboardListener
  * Android: Fix flickering on window resize and show keyboard
  * Android A11Y: Check for active surface before calling into native code
  * xcb: Delete touch points without target windows
  * Blacklist 1 tests in tst_QDBusConnection on ubuntu-20.04
  * Fix CMake builds without ANDROID_SDK
  * Blacklist 2 tests in tst_Http2 on ubuntu-20.04
  * Blacklist 1 tests in tst_QSqlQuery on macos
  * Defer creating the special shaders in the texture blitter
  * tst_QSslSocket::serverCipherPreferencies - fix for OpenSSL v3
  * QTemporaryFile: document rename() differences from QFile
  * Doc: 3rd party: Fix reference to FreeType LICENSE.txt
  * Update bundled libjpeg-turbo to version 2.1.4
  * tst_QSsSocket: fix verifyClientCertificate with OpenSSL 3
  * tst_QSslSocket: regenerate certificate used for setLocalCertificateChain
  * tst_QSslSocket::protocolServerSide - make it work with OpenSSL v3
  * tst_QSslSocket::oldErrorsOnSocketReuse - make it work with OpenSSL v3
  * Update zconf.h prefixes to match zlib v1.2.12 update
  * xcb: fix D&amp;D in same xembed client
  * xcb: use global coordinates for position of D&amp;D for xembed client
  * Doc: Update QMetaType::metaObject() descriptions
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 22.04
  * BLACKLIST tst_qfont for Ubuntu 22.04
  * BLACKLIST tst_QMenuBar::check_menuPosition for Ubuntu 22.04
  * tst_QDtls::verifyClientCertficiate - update certs for OpenSSL v3
  * QSslCertificate::toText(): add a file to compare against
  * Fix the spelling of the word "combination"
  * tst_QSslCertificate::pkcs12 - skip the test if OpenSSL version &gt;= 3
  * Android A11Y: Fix TalkBack scrolling behavior
  * Android A11Y: Notify android about scroll events
  * QCocoaDrag: don't add pasteboard items with non-absolute URLs
  * QDirPrivate: pass input QList by cref
  * tst_qbytearray: remove qCompress_data for QT_NO_COMPRESS
  * QDeviceDiscoveryUDev: use NSDMI
  * QAuthenticator: Fix crash when using NTLM / Negotiate
  * Provide a native interface instance in minimal platform plugin
  * Android: document the supported clipboard mimetypes
  * Windows: Account for not finding child windows when calling ChildWindowFromPointEx
  * iOS: Send touch events asynchronously to avoid deadlocking UIKit event loop
  * Disable bitcode for iOS
  * macOS: Ignore deprecation for ReleaseIconRef
  * BLACKLIST tst_QApplication::sendEventsOnProcessEvents for Ubuntu 22.04
  * Convert Latin1 to UTF-16 before passing to ICU API
  * Doc: Remove repetition of word in text
  * eglfs: Fix screen cloning when atomic is enabled
  * Fix printing of dpr&gt;1 images on Windows
  * QHttp: Fix handling of redirect loaded from cache
  * Doc: Fix return type of QLEInteger/QBEInteger post-in/decrement ops
  * qmake: Fix installation of separate debug info for plugins
  * iOS: ensure we close inputpanel after clearing focusobject
  * Convert Latin1 to UTF-16 before passing to ICU API
  * qputenv: defend against non-NUL-terminated QByteArray values
  * QFontSubset: remove unused glyphName() overload
  * Statically assert that the __mips_dsp code is only active on 32-bit
  * QGtk3Theme: Ensure gtk uses the same windowing system as Qt
  * tst_QFocusFrame: fix -Wparantheses
  * Sync Vulkan device features between QVulkanWindow and QRhi
  * SQLite: Update SQLite to v3.39.2
  * Update freetype to 2.12.1
  * corelib: Fix typos in documentation
  * QAtomicInteger docs: mention bool and char8_t as 8-bit types
  * qgraphicsitem_cast: replace 0 with nullptr
  * Doc: Hide weak overload template magic from documentation
  * Revert "QDateTime: fix adjusted datetime handling"
  * Fix select handles disappears issues
  * tst_QSslKey: prepare for the migration to OpenSSL v3
  * tst_qnetworkreply: replace server.pem/key pair
  * Disable unit testing setting up QTcpServer on special Apple interfaces
  * qmake/msbuild: Turn off "use full paths in diagnostics" by default
  * qmake/msbuild: Support all /DEBUG:xxx linker options
  * qmake/msbuild: Support all /LTCG:xxx options
  * Android A11Y: Add content change type to content change event
  * Enabler for fractional scaling of text in Qt Quick
  * macOS: Override logical DPI to 72
  * Add QDom internalSubset implementation
  * Fix tst_AndroidAssets, broken by recent changes on assets load speed
  * Android: Improve loading speed of individual assets
  * Darwin: Replace deprecated symbol kIOMasterPortDefault with equivalent
  * macOS: Remove code for handling logical DPI changes
  * Fix an incorrect invocation of llvm-readobj
  * macOS: Ignore deprecation for kOnSystemDisk icon domain
  * Copy only files that belongs to QML module
  * Android: fix wrong position of cursor handle and editpopup menu in split screen
  * Doc: Document QML_IMPORTS_PATH and QMLPATHS
  * Add the missing RCC_DIR to '.qrc' paths when generating deployment settings
  * Android: Fix the offset of the EditPopupMenu
  * xcb: update xkb_state mask as much as possible
  * QDom: Stop treating non-BMP characters as invalid
  * Android 13: Fix warnings on starting an application
  * qxkbcommon: Map Super/Hyper to Meta early enough to have an effect
  * macOS: Ignore update requests for offline displays
  * macOS: Avoid recursively updating screens when window moves screen
  * qmake/MinGW: Install separate debug info of DLLs next to the DLL
  * QMainWindow: fix restoreState() for toolbars
  * Make two QDT benchmarks data-driven and add more rows
  * Fix doc and example of QLoggingCategory::installCategory()
  * qmake: Document Xcode behavior when bundling translation files
  * Android: Fix missing import
  * QByteArray: more GCC 12 -Werror=array-bound whack-a-mole
  * CMake: Fix android sdk version propagation
  * Restore C++20-deprecated mixed-enum bitwise operators
  * Android: Fix ANR when QtService and QtActivity load in same process
  * Fix restart QtActivity
  * QArrayData::data(): do type-punning via quintptr, not char *
  * QIOSTextResponder: recreate responder upon reset
  * QSslSocket: make it work with OpenSSL v3
  * QFileSystemModelPrivate: de-inline ctor and dtor
  * Network: update Public Suffix List
  * macOS: Ensure proper quoting when calling otool in objc_namespace script
  * QKeySequence: Fix the one-off error in the mac glyph array size
- Commits dropped by the rebase:
  * Apply CVE-2022-27404-27405-27406-qtbase-5.15.diff
  * QArrayData: fix UB via reinterpret_cast (crash with FORTIFY_SOURCE=3)
  * Adapt for q_EVP_PKEY_base_id → q_EVP_PKEY_get_base_id rename in OpenSSL 3
  * Don't use a deprecated function if built/linked with OpenSSL v3</changelog>
  <changelog author="christophe@krop.fr" date="1696593601">- Enable the experimental native painting feature to improve
  remote desktop performances (boo#1214915)
  exporting QT_XCB_NATIVE_PAINTING is required to use the feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1697716800">- Update to version 5.15.11+kde138:
  * QLibraryPrivate: Actually merge load hints
  * QPluginLoader: report the right load hints
  * xkb: fix build with libxkbcommon 1.6.0 and later
  * a11y atspi: Map ButtonMenu role to AT-SPI equivalent</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1703851200">- Update to version 5.15.12+kde144, rebased upstream:
  * QMimeDatabase: handle buggy type definitions with circular inheritance
  * xcb: only set base size when it's valid
  * QPixmapCache: fix leaking of QStrings and Keys on clear()
  * OpenFile portal: do not use O_PATH fds
  * QSystemTrayIcon: properly disconnect old menu in setContextMenu()
  * Guard QTabBar against nested event processing during moving tabs
  * QDial: don't crash when min==max and setting a value != min &amp; max
  * QStandardItemModel: don't leak in mimeData()
  * SQL/MySQL: properly initialize variable
  * QWidgetTextControl: ignore invalid input method event
  * Update the LGPL license header
  * SQL/MySQL: fix handling of json column
  * Remove QMAKE_RANLIB and QMAKE_LINK_SHLIB from android/default_pre.prf
  * macOS: Fix less common writing systems on Catalina and later
  * Blacklist 1 tests in tst_QFtp on ubuntu-20.04
  * Update bundled libpng to version 1.6.39
  * Android: Fix signing of APKs that are generated when an AAB is also built
  * Update bundled zlib to version 1.2.13
  * doc: update the limitation of QSystemTrayIcon on X11
  * Blacklist 1 tests in tst_QTimer on ubuntu-20.04
  * Add benchmarks for QLocale number parsing
  * Add benchmarks for QString number parsing
  * Android: Fix incorrect fullscreen dimensions
  * Gtk3Theme: set XCURSOR_SIZE and XCURSOR_THEME for wayland sessions
  * xcb: Flush Display when processing xcb events
  * xcb: Add xlib wrapper for XFlush()
  * QHostAddress: Fix incorrect comparison against 'Any'
  * QSsl[OpenSSL/Android]: Fix hardcoded 1_1 suffix
  * BLACKLIST: tst_QApplication::sendEventsOnProcessEvents for RHEL 9.0
  * QMacStyle: do not set white color for grayed out button
  * Work round macOS's omission of en_DE from its own uiLanguages()
  * Suppress a deprecation warning in tst_QDateTime::toString_enumformat()
  * QJsonValue: fix incorrect to{Array,Object} when the value is empty
  * QGtk3Dialog: remove the #include for empty moc
  * Remove unneeded QWindow from QGtk3Dialog
  * tst_QSslSocket: Delete sslOptions
  * tst_QSslServer: Make the in-process server use TLS1.2
  * Android: fix Gradle warning about using enableUncompressedNativeLibs
  * Mention  limitation of QDir::drives() on Windows
  * QFileSystemEngine/Win: fix incorrect buffer size in currentPath()
  * Android: properly retrieve mime type of uri to for openUrl()
  * Android: Fix clipboard issue with urls
  * Android: Add a way to disable accessibility via an environment var
  * Update bundled libpng to version 1.6.38
  * QIOSMessageDialog::exec - work around 'windowsless' exec
  * QIosScreen: retain the right window
  * tst_Q{BitArray,ContiguousCache}: check not only count(), but size(), too
  * QIosTextResponder: stop using deprecated constants and type
  * qcompilerdetection.h: detect Coverity
  * Android: Fix Display.getRealMetrics deprecation
  * Fix broken Text rendering when noantialiased NativeRendering is used
  * forkfd: fix Clang 15 ATOMIC_VAR_INIT deprecation warning
  * eglfs: Add env.var. to disable the dedicated drmHandleEvent thread
  * doc: Don't put strings into QVector&lt;double&gt;
  * Remove focusProxyAndInputMethods from tst_QWidget
  * Bump version to 5.15.12
  * Update documentation of qWaitForWindowActive / qWaitForWindowExposed
  * QtHttp: Lower the severity of some log output
  * StyleSheetStyle: Fix color of placeholder texts in text edits
  * Android: Fix flickering on split screen mode
  * Update url to IAccessible2 Specification</changelog>
  <changelog author="alarrosa@suse.com" date="1704283200">- Update to version 5.15.12+kde147:
  * Http2: fix potential overflow in assemble_hpack_block()
    (bsc#1218413, CVE-2023-51714)
  * HPack: fix incorrect integer overflow check
  * HPack: fix a Yoda Condition</changelog>
  <changelog author="fvogt@suse.com" date="1708084800">- Update to version 5.15.12+kde151:
  * Improve KTX file reading memory safety (CVE-2024-25580, boo#1219996)
  * Revert "xcb: only set base size when it's valid"
  * Fix potential leak of QPropertyAnimation in QLineEditIconButton
  * QBitArray: correct inline keyword</changelog>
  <changelog author="alarrosa@suse.com" date="1720785600">- Add patch from upstream to fix a regression in the ODBC driver
  (bsc#1227513, QTBUG-112375):
  * 0001-QSQL-ODBC-fix-regression-trailing-NUL.patch
  * 0002-SQL-ODBC-Pass-correct-length-to-SQLColAttribute.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1722945600">- Add rebased upstream patch to delay any HTTP2 communication until
  encrypted() can be responded to (bsc#1227426, CVE-2024-39936):
  * 0001-HTTP2-Delay-any-communication-until-encrypted-can-be.patch
- Add upstream patch to fix a NULL pointer dereference via the
  function QXcbConnection::initializeAllAtoms() when there is
  anomalous behavior from the X server (bsc#1222120,
  CVE-2023-45935):
  * 0001-xcb-guard-a-pointer-before-usage.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756728000">- Add patch from upstream to fix a precondition violation in call
  to QByteArrayView::at() which can cause crashes (bsc#1243958,
  CVE-2025-5455):
  * 0001-qDecodeDataUrl-fix-precondition-violation-in-call-to.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756814400">- Add patch from upstream to initialize a member variable that was
  uninitialized under some circumstances:
  * 0001-QObjectPrivateSignal-initialize-all-members.patch
- Add patch from upstream to fix a crash when parsing a particular
  glyph in a particular font (QTBUG-124310):
  * 0001-Avoid-crash-in-font-distancefield-computation.patch
  * 0002-Fix-crash-in-font-distancefield-computation.patch
- Add patch from upstream to fix avoid repeatedly registering
  xsettings callbacks when switching cursor themes:
  * 0001-xcb-Avoid-repeatedly-registering-xsettings-callbacks-When.patch
- Add patch from upstream to check validity of RandR output info
  before using it (QTBUG-128906):
  * 0001-xcb-check-validity-of-RandR-output-info-before-using-it.patch
- Add patch from upstream to fix reparenting a window so it takes
  effect even if there are no other state changes to the window:
  * 0001-xcb-Sync-XCB-connection-after-reparenting-window.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756900800">- Add patch from upstream to fix a low performance when processing
  XML data in encodeText (bsc#1239896, CVE-2025-30348):
  * 0001-XML_QDom-speedup-encodeText.patch</changelog>
</package>
<package pkgid="d9099c7b3805e47cf75b80198ee7b7092e928d75e671156165ef846d370a9949" name="libQt5Xml5" arch="x86_64">
  <version epoch="0" ver="5.15.12+kde151" rel="150600.3.9.1"/>
  <changelog author="fvogt@suse.com" date="1678968000">- Update to version 5.15.8+kde183:
  * Add nullptr guard in QStyleSheetStyle::drawPrimitive(PE_PanelLineEdit)
  * QAbstractItemView: don't access invalid indexes on copy-key
  * Apply CVE-2023-24607-qtbase-5.15.diff (CVE-2023-24607,
    bsc#1209616)
  * QXcbConnection::getTimestamp: do not return stale timestamp
  * QToolButton: Elide text when constraints prevent from showing whole text
  * correctly set up ref counting in QThreadPool::tryStart(std::function)
  * Do not set Qt::ToolTip flag for QShapedPixmapWindow
  * Fix deletion order also for QImageReader/Writer::setDevice()
  * Fix deletion order in QImageReader/Writer destructors
  * QNetworkReply: Fix typos in the documentation
  * Doc: Fix typo in the online documentation template
  * Doc: Link to page documenting Qt trademarks in the copyright footer
  * [doc] Fix typo in QBuffer::setBuffer() description
  * qwindowsdrag: Fix typo in documentation
  * openglblacklists: Fix typo in description
  * qxcbscreen: Fix typo in documentation
  * Fix typos in SQL driver documentation
  * qxcbwindow.cpp: Fix sign-compare and another warnings
  * QToolButton: reimplement the fix for QTBUG-95255
  * QSysInfo::prettyProductName(): Add macOS Ventura product name
  * QSysInfo::prettyProductName(): add missing macOS product names
  * xcb: correctly disconnect xsettings callbacks
  * ibus: add SetCursorLocationRelative in InputContext.xml</changelog>
  <changelog author="fvogt@suse.com" date="1680523200">- Update to version 5.15.8+kde185:
  * QFSFileEngine: fix overflow bug when using lseek64
  * Add QImage null check when QOpenGLTexture converts
- Add patch to fix return key handling in QGroupBox on GNOME (bsc#1209364):
  * 0001-Revert-QGnomeTheme-Allow-Space-Return-Enter-and-Sele.patch
- Add patch to fix XInput2 events in big-endian X11 clients (bsc#1204883, QTBUG-105157):
  * big-endian-scroll.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1682078400">- Update to version 5.15.9+kde151, rebased upstream:
  * QCborValue: fix incorrect to{Array,Map} when the value is empty
  * QMargins: fix a missing "full stop" in the docs
  * QLibrary: restore translated string
  * QLibrary: fix possible arg() format clobbering
  * iOS: Use python3 for enumerating test target devices
  * Android: Treat ACTION_CANCEL as TouchCancelEvent
  * Doc: Fix broken formatting
  * QFileSystemEngine: fix potential formatting error
  * QString::asprintf: check that passing field widths as arguments works
  * Backport recent QFlags tests
  * network: Fix typos in documentation
  * Fix accuracy with screen composition
  * Doc: Update documentation for QElapsedTimer's in Windows
  * Document that QStandardPath::findExecutable works with absolute paths
  * macOS: Use native resize cursors for diagonal resize
  * Fix clipped glyphs in text rendering of QGraphicsTextItem
  * Change comparison data type to fix int overflow
  * Add missing Q_WEAK_OVERLOAD definition
  * Update QFileInfo docs to mention macOS aliases
  * Distinguish macOS aliases from normal symbolic links
  * Windows QPA: Fix frameless maximize on secondary screens
  * Rewrite tst_qdataurl as a data-driven test
  * Fix compilation for wasm
  * QIOSFileDialog/QIOSDocumentPickerController - handle dismissed view controller
  * Fix QDockWidget's dock area permissions after hovering
  * Fix C++20 ambiguous relational operators between QJsonValue{,Ref}
  * Android: make sure that orientationChange is reported after resize
  * Android: set all QScreen's geometry-related parameters together
  * Blacklist: test cases blacklisted in tst_QDBusConnection:
  * wasm:  fix issue with passing username/password to network request
  * macOS: Pass multi arch flags when linking qmake
  * QCocoaFileDialogHelper: Always enable symlinks and aliases to directories
  * Android: terminate argv passed to main() with nullptr
  * Update bundled libjpeg-turbo to version 2.1.3
  * ANGLE: Load the DirectX libraries from the system path directly
  * SQLite: Update SQLite to v3.37.2
  * Fix compiler warnings about unused parameters
  * Fix getsockopt option_value initial initialization
  * Http2: Fix redirect-handling
  * Android A11Y: Fix value rounding
  * Android A11Y: Announce value together with element name when focused
  * Android A11Y: handle valueChanged events
  * tst_QSystemSemaphore: give proper path to test-helper
  * QNX: Silence compiler warning by initializing variable
  * Update LICENSE.QT-LICENSE-AGREEMENT
  * winrt appxmanifest: Properly replace VCLibs version for newer MSVC versions
  * QAbstractSocket: Don't pretend pause and resume is a stack
  * Gui: test also depends for clipboard feature
  * QDesktopServices: deprecate destroying URL handlers w/o explicit unsetUrlHandler()
  * macOS: Respect QMAKE_APPLE_DEVICE_ARCHS when building qmake
  * HTTP: Make redirect response parsing more generic
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 20.04
  * Android A11Y: populate child elements when constructing node info
  * Fix issue where readyRead() could happen after disconnected()
  * QStringView: add missing constexpr so we can use is_constant_evaluated
  * Use Android's View.generateViewId() for generating ids for views/surfaces
  * Remove documentation of non-existing QAccessible state
  * Doc: Fix snippet to match actual QFileInfo behavior
  * Android: Re-focus focused accessibility node after orientation change
  * Android A11Y: execute C++ code on main Qt thread
  * Android: extract parentId for hidden object in advance
  * xcb: Show valuator atom names properly in categorized logging
  * Android: replace stacktrace with debug message in search for setService
  * Better document attaching a QFutureWatcher to a started QFuture
  * doc: Update GenericDataLocation location on iOS
  * BLACKLIST test_Gestures tests for RHEL-8.4
  * QPlainTestLogger: do not print "failure location" if there's no failure
  * QAbstractItemView: do not access invalid model indices (3/N)
  * Win32: always allow the event loop to be woken up by posted events
  * rhi: d3d11: Use __uuidof where we can
  * Don't QEXPECT_FAIL tst_QLineEdit::testQuickSelectionWithMouse on macOS ARM
  * Network: Emit authenticationRequired when using Ntlm
  * testlib: Disable window restoration on macOS in a non-persistent way
  * QAbstractItemView: do not access invalid model indices (2/N)
  * QAbstractItemView: do not access invalid model indices (1/N)
  * QAbstractItemView: code tidies
  * Update float16 part of TestLib selftest
  * QGuiApplication: constant-initialize lastCursorPosition
  * Blacklist tst_QFileSystemWatcher::signalsEmittedAfterFileMoved on all Windows versions
  * [Android]: Handle the screen name, modes and refreshRate properly
  * QVersionNumber: remove the "pure" attribute from commonPrefix()
  * QEvent: initialize the static userEventTypeRegistry constexprly
  * Let QXcbGlxWindow::createVisual fallback to QXcbWindow::createVisual
  * Android A11Y: fix content update notification when object is hidden
  * Android: explicitly remove accessibility focus when element is hidden
  * BLACKLIST tst_qfont for Red Hat 8.4 and Ubuntu 20.04
  * QtCore: includemocs
  * Fix memory leak in QtConcurrent::run when called with a NULL QThreadPool
  * INTEGRITY: Prevent deletion of virtual functions
  * QMake: replace a Q_ASSERT() with a Q_UNREACHABLE()
  * QTransform benchmark: measure what was promised
  * QStaticByteArrayMatcher: add a useful comment
  * QMacStyle: use the 'momentary push in' type for push buttons
  * qopengl.h: Move C header #include(s) out of the QT_NAMESPACE
  * Enable all supported 1.0 device features in QVulkanWindow
  * Fix queue passed to vkQueuePresent
  * QFusionStyle: don't draw an invalid outline for up/down buttons
  * Doc: Make QListIterator snippets more robust
  * QVersionNumber: don't detach() in rvalue QList/QVector ctor
  * QNetworkRequest: Document how Qt handles 301 and 302 status codes
  * Convert date-time to UTC before claiming it's in GMT
  * Remove execute permission from XML files
  * Add test case for style sheet selectors for enum properties
  * FreeType: allow falling back to synthesized bold if desired
  * Fix an assertion failure in massageAdjustedDateTime()
  * Relax tst_qvulkan::vulkanVersionRequest to make it compatible with 1.1
  * Doc: Replace "C:Documents and Settings" paths
  * QOrderedMutexLocker: fix compilation with C++11
  * QHttpNetworkConnection: Always set proxy settings to all channels
  * Add a markdown writer test for a checklist item ending with `code`
  * Use QTextCharFormat::fontFixedPitch to remember Markdown backtick spans
  * QWizardLayoutInfo: make == and != operators const
  * Revert "Android: Fix screen flicker issues"
  * macOS: Handle momentum scroll NSEventPhaseBegan when scroll had ended
  * SQLite: Update SQLite to v3.37.0
  * Update copyright year to 2022
  * QTzTimeZonePrivate: use ctor delegation instead of init()
  * QTzTimeZonePrivate: fix permanently-detaching m_icu
  * tst_QGraphicsView: fix memleak
  * Doc: Update external links to Qt Creator Manual
  * macOS: assume an unidentified tablet device is a stylus
  * tst_QItemModel: fix memleaks
  * tst_qanimationgroup: fix memleaks
  * QAbstractAnimation: add missing forward-declaration
  * [doc] QCoreApplication::installTranslator() doesn't take ownership
  * tst_qtranslator: fix memleak
  * QTestData: fix streaming of u8 string literals in C++20 mode
  * QThread/Unix: extract duplicate code
  * QWindowPrivate: fix inconsistent inline on some methods
  * tst_QStringList: check that join(u'0') embeds NULs
  * macOS: Sanitize scroll deltas for NSEventPhaseCancelled
  * tst_qsharedmemory: skip readOnly() test under asan
  * QXmlStreamReader: update test distribution
  * QZipReader: update to unzip partly broken archives
  * Deliver context menu event with correct coordinates to widgets in popups
  * QTextHtmlParser: fix prefix lookahead and html comments
  * QtConcurrent::run crashes on program exit
  * tst_QPropertyAnimation: fix leaks occurring under normal operation
  * tst_QPropertyAnimation: fix wrong comment
  * QLogging: fix potential missing NUL-terminator when calling OutputDebugString
  * Fix qt_scrollRectInImage when scrolling outside of the image
- Commits dropped by the rebase:
  * Fix compile with Qt5: Use QString::mid instead of QString::sliced
  * Restore C++11 compatibility after e8b9f4c28d3ab5e960dc54f2dc0c4b749b0b50e0
  * QDateTime: Don't require c++17</changelog>
  <changelog author="fvogt@suse.com" date="1683633600">- Amend patch to fix mouse grabbing as well (bsc#1211024):
  * big-endian-scroll.patch</changelog>
  <changelog author="fvogt@suse.com" date="1684929600">- Update to version 5.15.9+kde154:
  * Hsts: match header names case insensitively (CVE-2023-32762,
    QTBUG-113392, bsc#1211797)
  * Fix specific overflow in qtextlayout (CVE-2023-32763,
    QTBUG-113337, bsc#1211798)
  * QDnsLookup/Unix: make sure we don't overflow the buffer
    (CVE-2023-33285, boo#1211642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1686657600">- Update to version 5.15.10+kde129, rebased upstream:
  * Ssl: Copy the on-demand cert loading bool from default config
  * Schannel: Reject certificate not signed by a configured CA certificate (boo#1211994, CVE-2023-34410)
  * qnetworkreplyfileimpl_p.h: fix header guard name
  * Revert "Draw the cursor considering the descent is 0"
  * Use pkgconfig in order to find libproxy configuration
  * Upgrade PCRE2 to 10.40
  * Android A11Y: handle LocationChanged event only for focused element
  * Port binary JSON to new special integer bitfields
  * INTEGRITY: enable C99 globally
  * QObject: mark two error reporting functions COLD
  * Endian: Provide special integer bitfield unions
  * Android: set useLegacyPackaging to true in build.gradle
  * QWidgetTextControl: port to new-style connects (faster)
  * Sync qxmlstream.g with qxmlstreamparser_p.h [1/2]: switched lines
  * tst_QNetworkReply try stabilize autoDeleteReplies tests
  * Remove duplicated include for &lt;limits&gt;
  * Fix recursion crash when calling setStyleSheet with `qproperty-styleSheet`
  * qwindowsxpstyle: Fix typos in documentation
  * Correct prefix reported for end element in QXmlStreamReader
  * Android A11Y: Add supported role infos to A11yNodeInfo
  * Fix handling of DateTime values in QSettings
  * Fix off-by-one for "typically" lowest value INT_MIN
  * xml: Fix typos in documentation
  * QWindowsWindow: Fix typo in documentation
  * includemocs (updated script)
  * widgets: Fix typos in documentation
  * cocoa: Fix typo in debug messages
  * Only scroll QMenu when there is a valid active action
  * QTimer: Add note in documentation
  * Fix QListView assert when the last row is moved in IconMode
  * QFileDialog: Fix adding default suffix when file path contains dot
  * QLineEdit: account for the placeholderText when computing lineRect
  * QFileDialog::saveFileContent crashes on accept
  * QCompleter: QCompleter unexpectedly changes QLineEdit text
  * Fix build error on iOS with the configure option -qtnamespace
  * Draw the cursor considering the descent is 0
  * Remove pure-virtual-signals.h include from tst_moc.cpp
  * plugins: image formats - fix odr violation
  * dbus: Fix typos
  * qwindowsdialoghelpers: Fix typo in documentation
  * QTableView: Document the customizations applied to QHeaderView
  * Unicodetools: compile
  * eglfs_x11: Fix running flag linkage
  * qcompilerdetection.h: add Q_CC_{GNU,MSVC,CLANG}_ONLY macros
  * Fix CMake warning about "missing closing ' quote"
  * Fix alignment of next/prev links in offline style
  * QtDBus: includemocs
  * Image Plugins: includemocs(-ish)
  * QtGui: includemocs
  * QXcbNativeInterface: remove unused field m_sysTraySelectionAtom
  * Windows QPA: Fix slowdown with large table/tree views with accessibility
  * Macstyle: fix the text color on the disabled button
  * QMacStyle: fix tool buttons (in checked mode)
  * QTeamCityLogger: fix .arg() placeholder injection
  * QAbstractTestLogger: disable copying
  * Fix errorMessageFromComError()
  * QtNetwork: includemocs
  * AppleUnifiedLogger: Remove manually managed os_log_t cache
  * examples: add WindowStaysOnBottomHint into preview text
  * QSharedPointer: Use matching new/delete
  * QIbusPlatformInputContextPlugin: includemocs
  * QGtk3ThemePlugin: includemocs
  * QTuioTouchPlugin: includemocs
  * QtWidgets: includemocs v2022
  * QMYSQLDriverPlugin: includemocs
  * QtDeviceDiscoverySupportPrivate: includemocs
  * QLinuxFbIntegrationPlugin: includemocs
  * QtPrintSupport: includemocs
  * QSQLiteDriverPlugin: includemocs
  * QtFbSupportPrivate: includemocs
  * QXdgDesktopPortalThemePlugin: includemocs
  * QtTest: includemocs
  * QComposePlatformInputContextPlugin: includemocs
  * QtSql: includemocs
  * QVncIntegrationPlugin: includemocs
  * Fix backingstore fractional DPR glitches for widgets in child windows
  * Include &lt;limits&gt; where std::numeric_limits is used
  * QtInputSupportPrivate: includemocs
  * Document the default value of QSFPM::sortOrder()
  * Better document how to enable sorting in QSPFM
  * Correct documentation of INI format's loss of type information
  * Android: add missing properties in AndroidManifest.xml
  * Fix assertion failure when parsing a doubly-invalid date-time text
  * Windows QPA: Correct mistake when calculating minmaxinfo
  * Android: replace ndk.dir with android.ndkVersion in build.gradle
  * Android: remove the old copy of gradle.properties after reading it
  * CMake Android Support: Fix signing of APKs
  * Android: fix A11Y object description
  * macOS: Fix warning about comparing different types in QCocoaScreen::isOnline
  * Fix qmake build on FreeBSD
  * Update documentation of enum Qt::DockWidgetArea
  * xcb: recreate xcb window under some conditions
  * objc_namespace: Add support for universal binaries
  * objc_namespace: Fix misspelled argument for silencing output
  * objc_namespace: Update parsing logic to account for otool changes
  * Blacklist passwordAuth for Ubuntu 20.04
  * Android: wrap QAndroidInputContext's m_focusObject in a QPointer
  * Fix compilation with GCC 12 (and on Fedora 35 and newer)
  * Chip example: fix an accidental bool-&gt;int conversion when using PMF connections
  * qmake: Add support for C++23
  * Android: use BCP 47 tag to create a correct Locale for QTimeZone::displayName()
  * QDateTime: fix adjusted datetime handling
  * Fix crash in tst_qmltc_examples on Android
  * macOS: Remove dead code for focus ring handling in Mac style
  * Detach for colortransforms of indexed formats
  * tst_QTcpSocket::connectToHostError - handle possible timeouts
  * CoreText: Avoid populating font family aliases if family was populated
  * Graphicsview: Avoid background clearing glitches under fractional DPR
  * Windows QPA: Avoid slowdown with UI Automation name change notification
  * Windows QPA: Avoid sending accessibility notifications before activation
  * Windows: Fix potential crash when retrieving default printer
  * Make Ubuntu with its non-standard security level happy
  * Android: Blacklist failing tests on tst_QGraphicsProxyWidget
  * Update LA 4.4.1
  * iOS A11Y: Set more accessibilityTraits
  * QNX: Fix compiler warning by when FEATURE_clipboard is not enabled
  * Document that native file dialogs might not show a title
  * Doc: Remove mentionings of overflows from QElapsedTimer
  * QTextMarkdownImporter: don't apply text char format to list item block
- Commits dropped by the rebase:
  * QBuffer: add missing &lt;limits&gt; include
  * Fix developer build</changelog>
  <changelog author="gmbr3@opensuse.org" date="1687953600">- Change %_libqt5_libexecdir to %_libexecdir/qt5 (bsc#1174075)</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch icu-devel requires to pkgconfig to allow switching libicu
  versions</changelog>
  <changelog author="fvogt@suse.com" date="1695902401">- Update to version 5.15.10+kde159 (bsc#1214327, CVE-2023-37369):
  * Fix CVE-2023-43114
  * QMimeDatabase: fix detection of pattern conflict in different prefixes
  * Fix highdpi conversion of QTabletEvent coordinates on xcb
  * widget: set WA_X11NetWmWindowType* after xcb window was created
  * Fix crash when setting override cursor on multiple clients
  * QAccessibleWidget: Remove pointless ZWSP in warning message
  * Android A11Y: Fix deadlock in QtAndroidAccessibility::runInObjectContext()
  * Correctly parse non BMP char refs in the sax parser
  * Clear the _X version of alongside the enum deprecator
  * Fix UB (signed char passed to &lt;cctype&gt; function)
  * Qt3DRender: includemocs
  * Fix capitalization error in auto-generated qdbusmacros.h include
  * QColorDialog: Ignore mouse move events when no mouse button is pressed
  * QHostInfo: fix remaining slotObj leaks
  * QXmlStreamReader: Raise error on unexpected tokens (CVE-2023-38197,
    QTBUG-92113, QTBUG-95188, bsc#1213326)
  * QTextLayout: Reconsider cursor drawing on TextObject
  * Ensure consistent cursor width under fractional scaling
  * Fix QTextEdit cursor rectangle vertical positioning
  * Return 0 in QWindow::winId in case of failed platform window creation
  * Doc: note QWindow::winId() will cause platform window creation
  * QSslDiffieHellmanParameters: fix mem-leak
  * QHostInfo: fix leaking slot object
  * Make sure we don't count down past 0 QT_FATAL_CRITICALS
  * QLogging: DRY isFatal(QtMsgType)
  * tst_QXmlStream: remove unneeded _ba UDLs
  * Fix typo in QXmlStreamReader error message
  * QXmlStreamReader: make fastScanName() indicate parsing status to callers
  * QXmlStreamReader: change fastScanName() to take a Value*
  * Fix Croatia's currency
  * SSL: upgrade the default DH parameters</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1696593600">- Update to version 5.15.11+kde134, rebased upstream:
  * Revert "Windows QPA: Add support to UiaRaiseNotificationEvent()"
  * FileChooser portal: Make sure filter.name is not empty
  * QPersistentModelIndex: fix UB (op&lt; on unrelated pointers)
  * Avoid crash when keysymToQtKey(keysym, Qt::ControlModifier) is called
  * a11y atspi: translate coords for GetOffsetAtPoint the right way
  * a11y atspi: Take dialog into account as top-level window
  * a11y atspi: Fix incorrect use of x instead of y position
  * macOS: Handle asynchronous deminiaturizing of windows
  * QTranslator: generalize a UNIX-only path
  * iOS, input panel: be more careful before enabling QIOSKeyboardListener
  * Android: Fix flickering on window resize and show keyboard
  * Android A11Y: Check for active surface before calling into native code
  * xcb: Delete touch points without target windows
  * Blacklist 1 tests in tst_QDBusConnection on ubuntu-20.04
  * Fix CMake builds without ANDROID_SDK
  * Blacklist 2 tests in tst_Http2 on ubuntu-20.04
  * Blacklist 1 tests in tst_QSqlQuery on macos
  * Defer creating the special shaders in the texture blitter
  * tst_QSslSocket::serverCipherPreferencies - fix for OpenSSL v3
  * QTemporaryFile: document rename() differences from QFile
  * Doc: 3rd party: Fix reference to FreeType LICENSE.txt
  * Update bundled libjpeg-turbo to version 2.1.4
  * tst_QSsSocket: fix verifyClientCertificate with OpenSSL 3
  * tst_QSslSocket: regenerate certificate used for setLocalCertificateChain
  * tst_QSslSocket::protocolServerSide - make it work with OpenSSL v3
  * tst_QSslSocket::oldErrorsOnSocketReuse - make it work with OpenSSL v3
  * Update zconf.h prefixes to match zlib v1.2.12 update
  * xcb: fix D&amp;D in same xembed client
  * xcb: use global coordinates for position of D&amp;D for xembed client
  * Doc: Update QMetaType::metaObject() descriptions
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 22.04
  * BLACKLIST tst_qfont for Ubuntu 22.04
  * BLACKLIST tst_QMenuBar::check_menuPosition for Ubuntu 22.04
  * tst_QDtls::verifyClientCertficiate - update certs for OpenSSL v3
  * QSslCertificate::toText(): add a file to compare against
  * Fix the spelling of the word "combination"
  * tst_QSslCertificate::pkcs12 - skip the test if OpenSSL version &gt;= 3
  * Android A11Y: Fix TalkBack scrolling behavior
  * Android A11Y: Notify android about scroll events
  * QCocoaDrag: don't add pasteboard items with non-absolute URLs
  * QDirPrivate: pass input QList by cref
  * tst_qbytearray: remove qCompress_data for QT_NO_COMPRESS
  * QDeviceDiscoveryUDev: use NSDMI
  * QAuthenticator: Fix crash when using NTLM / Negotiate
  * Provide a native interface instance in minimal platform plugin
  * Android: document the supported clipboard mimetypes
  * Windows: Account for not finding child windows when calling ChildWindowFromPointEx
  * iOS: Send touch events asynchronously to avoid deadlocking UIKit event loop
  * Disable bitcode for iOS
  * macOS: Ignore deprecation for ReleaseIconRef
  * BLACKLIST tst_QApplication::sendEventsOnProcessEvents for Ubuntu 22.04
  * Convert Latin1 to UTF-16 before passing to ICU API
  * Doc: Remove repetition of word in text
  * eglfs: Fix screen cloning when atomic is enabled
  * Fix printing of dpr&gt;1 images on Windows
  * QHttp: Fix handling of redirect loaded from cache
  * Doc: Fix return type of QLEInteger/QBEInteger post-in/decrement ops
  * qmake: Fix installation of separate debug info for plugins
  * iOS: ensure we close inputpanel after clearing focusobject
  * Convert Latin1 to UTF-16 before passing to ICU API
  * qputenv: defend against non-NUL-terminated QByteArray values
  * QFontSubset: remove unused glyphName() overload
  * Statically assert that the __mips_dsp code is only active on 32-bit
  * QGtk3Theme: Ensure gtk uses the same windowing system as Qt
  * tst_QFocusFrame: fix -Wparantheses
  * Sync Vulkan device features between QVulkanWindow and QRhi
  * SQLite: Update SQLite to v3.39.2
  * Update freetype to 2.12.1
  * corelib: Fix typos in documentation
  * QAtomicInteger docs: mention bool and char8_t as 8-bit types
  * qgraphicsitem_cast: replace 0 with nullptr
  * Doc: Hide weak overload template magic from documentation
  * Revert "QDateTime: fix adjusted datetime handling"
  * Fix select handles disappears issues
  * tst_QSslKey: prepare for the migration to OpenSSL v3
  * tst_qnetworkreply: replace server.pem/key pair
  * Disable unit testing setting up QTcpServer on special Apple interfaces
  * qmake/msbuild: Turn off "use full paths in diagnostics" by default
  * qmake/msbuild: Support all /DEBUG:xxx linker options
  * qmake/msbuild: Support all /LTCG:xxx options
  * Android A11Y: Add content change type to content change event
  * Enabler for fractional scaling of text in Qt Quick
  * macOS: Override logical DPI to 72
  * Add QDom internalSubset implementation
  * Fix tst_AndroidAssets, broken by recent changes on assets load speed
  * Android: Improve loading speed of individual assets
  * Darwin: Replace deprecated symbol kIOMasterPortDefault with equivalent
  * macOS: Remove code for handling logical DPI changes
  * Fix an incorrect invocation of llvm-readobj
  * macOS: Ignore deprecation for kOnSystemDisk icon domain
  * Copy only files that belongs to QML module
  * Android: fix wrong position of cursor handle and editpopup menu in split screen
  * Doc: Document QML_IMPORTS_PATH and QMLPATHS
  * Add the missing RCC_DIR to '.qrc' paths when generating deployment settings
  * Android: Fix the offset of the EditPopupMenu
  * xcb: update xkb_state mask as much as possible
  * QDom: Stop treating non-BMP characters as invalid
  * Android 13: Fix warnings on starting an application
  * qxkbcommon: Map Super/Hyper to Meta early enough to have an effect
  * macOS: Ignore update requests for offline displays
  * macOS: Avoid recursively updating screens when window moves screen
  * qmake/MinGW: Install separate debug info of DLLs next to the DLL
  * QMainWindow: fix restoreState() for toolbars
  * Make two QDT benchmarks data-driven and add more rows
  * Fix doc and example of QLoggingCategory::installCategory()
  * qmake: Document Xcode behavior when bundling translation files
  * Android: Fix missing import
  * QByteArray: more GCC 12 -Werror=array-bound whack-a-mole
  * CMake: Fix android sdk version propagation
  * Restore C++20-deprecated mixed-enum bitwise operators
  * Android: Fix ANR when QtService and QtActivity load in same process
  * Fix restart QtActivity
  * QArrayData::data(): do type-punning via quintptr, not char *
  * QIOSTextResponder: recreate responder upon reset
  * QSslSocket: make it work with OpenSSL v3
  * QFileSystemModelPrivate: de-inline ctor and dtor
  * Network: update Public Suffix List
  * macOS: Ensure proper quoting when calling otool in objc_namespace script
  * QKeySequence: Fix the one-off error in the mac glyph array size
- Commits dropped by the rebase:
  * Apply CVE-2022-27404-27405-27406-qtbase-5.15.diff
  * QArrayData: fix UB via reinterpret_cast (crash with FORTIFY_SOURCE=3)
  * Adapt for q_EVP_PKEY_base_id → q_EVP_PKEY_get_base_id rename in OpenSSL 3
  * Don't use a deprecated function if built/linked with OpenSSL v3</changelog>
  <changelog author="christophe@krop.fr" date="1696593601">- Enable the experimental native painting feature to improve
  remote desktop performances (boo#1214915)
  exporting QT_XCB_NATIVE_PAINTING is required to use the feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1697716800">- Update to version 5.15.11+kde138:
  * QLibraryPrivate: Actually merge load hints
  * QPluginLoader: report the right load hints
  * xkb: fix build with libxkbcommon 1.6.0 and later
  * a11y atspi: Map ButtonMenu role to AT-SPI equivalent</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1703851200">- Update to version 5.15.12+kde144, rebased upstream:
  * QMimeDatabase: handle buggy type definitions with circular inheritance
  * xcb: only set base size when it's valid
  * QPixmapCache: fix leaking of QStrings and Keys on clear()
  * OpenFile portal: do not use O_PATH fds
  * QSystemTrayIcon: properly disconnect old menu in setContextMenu()
  * Guard QTabBar against nested event processing during moving tabs
  * QDial: don't crash when min==max and setting a value != min &amp; max
  * QStandardItemModel: don't leak in mimeData()
  * SQL/MySQL: properly initialize variable
  * QWidgetTextControl: ignore invalid input method event
  * Update the LGPL license header
  * SQL/MySQL: fix handling of json column
  * Remove QMAKE_RANLIB and QMAKE_LINK_SHLIB from android/default_pre.prf
  * macOS: Fix less common writing systems on Catalina and later
  * Blacklist 1 tests in tst_QFtp on ubuntu-20.04
  * Update bundled libpng to version 1.6.39
  * Android: Fix signing of APKs that are generated when an AAB is also built
  * Update bundled zlib to version 1.2.13
  * doc: update the limitation of QSystemTrayIcon on X11
  * Blacklist 1 tests in tst_QTimer on ubuntu-20.04
  * Add benchmarks for QLocale number parsing
  * Add benchmarks for QString number parsing
  * Android: Fix incorrect fullscreen dimensions
  * Gtk3Theme: set XCURSOR_SIZE and XCURSOR_THEME for wayland sessions
  * xcb: Flush Display when processing xcb events
  * xcb: Add xlib wrapper for XFlush()
  * QHostAddress: Fix incorrect comparison against 'Any'
  * QSsl[OpenSSL/Android]: Fix hardcoded 1_1 suffix
  * BLACKLIST: tst_QApplication::sendEventsOnProcessEvents for RHEL 9.0
  * QMacStyle: do not set white color for grayed out button
  * Work round macOS's omission of en_DE from its own uiLanguages()
  * Suppress a deprecation warning in tst_QDateTime::toString_enumformat()
  * QJsonValue: fix incorrect to{Array,Object} when the value is empty
  * QGtk3Dialog: remove the #include for empty moc
  * Remove unneeded QWindow from QGtk3Dialog
  * tst_QSslSocket: Delete sslOptions
  * tst_QSslServer: Make the in-process server use TLS1.2
  * Android: fix Gradle warning about using enableUncompressedNativeLibs
  * Mention  limitation of QDir::drives() on Windows
  * QFileSystemEngine/Win: fix incorrect buffer size in currentPath()
  * Android: properly retrieve mime type of uri to for openUrl()
  * Android: Fix clipboard issue with urls
  * Android: Add a way to disable accessibility via an environment var
  * Update bundled libpng to version 1.6.38
  * QIOSMessageDialog::exec - work around 'windowsless' exec
  * QIosScreen: retain the right window
  * tst_Q{BitArray,ContiguousCache}: check not only count(), but size(), too
  * QIosTextResponder: stop using deprecated constants and type
  * qcompilerdetection.h: detect Coverity
  * Android: Fix Display.getRealMetrics deprecation
  * Fix broken Text rendering when noantialiased NativeRendering is used
  * forkfd: fix Clang 15 ATOMIC_VAR_INIT deprecation warning
  * eglfs: Add env.var. to disable the dedicated drmHandleEvent thread
  * doc: Don't put strings into QVector&lt;double&gt;
  * Remove focusProxyAndInputMethods from tst_QWidget
  * Bump version to 5.15.12
  * Update documentation of qWaitForWindowActive / qWaitForWindowExposed
  * QtHttp: Lower the severity of some log output
  * StyleSheetStyle: Fix color of placeholder texts in text edits
  * Android: Fix flickering on split screen mode
  * Update url to IAccessible2 Specification</changelog>
  <changelog author="alarrosa@suse.com" date="1704283200">- Update to version 5.15.12+kde147:
  * Http2: fix potential overflow in assemble_hpack_block()
    (bsc#1218413, CVE-2023-51714)
  * HPack: fix incorrect integer overflow check
  * HPack: fix a Yoda Condition</changelog>
  <changelog author="fvogt@suse.com" date="1708084800">- Update to version 5.15.12+kde151:
  * Improve KTX file reading memory safety (CVE-2024-25580, boo#1219996)
  * Revert "xcb: only set base size when it's valid"
  * Fix potential leak of QPropertyAnimation in QLineEditIconButton
  * QBitArray: correct inline keyword</changelog>
  <changelog author="alarrosa@suse.com" date="1720785600">- Add patch from upstream to fix a regression in the ODBC driver
  (bsc#1227513, QTBUG-112375):
  * 0001-QSQL-ODBC-fix-regression-trailing-NUL.patch
  * 0002-SQL-ODBC-Pass-correct-length-to-SQLColAttribute.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1722945600">- Add rebased upstream patch to delay any HTTP2 communication until
  encrypted() can be responded to (bsc#1227426, CVE-2024-39936):
  * 0001-HTTP2-Delay-any-communication-until-encrypted-can-be.patch
- Add upstream patch to fix a NULL pointer dereference via the
  function QXcbConnection::initializeAllAtoms() when there is
  anomalous behavior from the X server (bsc#1222120,
  CVE-2023-45935):
  * 0001-xcb-guard-a-pointer-before-usage.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756728000">- Add patch from upstream to fix a precondition violation in call
  to QByteArrayView::at() which can cause crashes (bsc#1243958,
  CVE-2025-5455):
  * 0001-qDecodeDataUrl-fix-precondition-violation-in-call-to.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756814400">- Add patch from upstream to initialize a member variable that was
  uninitialized under some circumstances:
  * 0001-QObjectPrivateSignal-initialize-all-members.patch
- Add patch from upstream to fix a crash when parsing a particular
  glyph in a particular font (QTBUG-124310):
  * 0001-Avoid-crash-in-font-distancefield-computation.patch
  * 0002-Fix-crash-in-font-distancefield-computation.patch
- Add patch from upstream to fix avoid repeatedly registering
  xsettings callbacks when switching cursor themes:
  * 0001-xcb-Avoid-repeatedly-registering-xsettings-callbacks-When.patch
- Add patch from upstream to check validity of RandR output info
  before using it (QTBUG-128906):
  * 0001-xcb-check-validity-of-RandR-output-info-before-using-it.patch
- Add patch from upstream to fix reparenting a window so it takes
  effect even if there are no other state changes to the window:
  * 0001-xcb-Sync-XCB-connection-after-reparenting-window.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756900800">- Add patch from upstream to fix a low performance when processing
  XML data in encodeText (bsc#1239896, CVE-2025-30348):
  * 0001-XML_QDom-speedup-encodeText.patch</changelog>
</package>
<package pkgid="812c4631e617c7b568095119c7cfedc156a06b1ae38b2739a62e52a1e5ad425b" name="libX11" arch="src">
  <version epoch="0" ver="1.8.10" rel="150700.4.3.1"/>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)</changelog>
  <changelog author="sndirsch@suse.com" date="1668168000">- Update to version 1.8.2
  * This is primarily a bug fix release, including further work on
    improving the thread-safety-constructor and making it work with
    software which had incorrectly called libX11 functions from
    inside X*IfEvent() calls.
- supersedes U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1669464000">- U_Fix-797755-Allow-X-IfEvent-to-reenter-libX11.patch
  * fixed Firefox freezes (regression since 1.8.2) (boo#1205778)</changelog>
  <changelog author="sndirsch@suse.com" date="1669982400">- back to "--disable-thread-safety-constructor" for now; we see just
  too many regressions, e.g. firefox freezes and crashes, crashes with
  barrierc, crashes in Godot, assertions with vkquake (boo#1205818,
  boo#1205778)</changelog>
  <changelog author="sndirsch@suse.com" date="1670068800">- U_0001-Add-XFreeThreads-function.patch
  U_0002-Don-t-use-pragma-inside-a-function-it-breaks-compili.patch
  U_0003-Fix-797755-Allow-X-IfEvent-to-reenter-libX11.patch
  U_0004-Indentation-fixes-around-recent-dpy-in_ifevent-chang.patch
  U_0005-ChkIfEv.c-fix-wrong-handling-of-dpy-in_ifevent.patch
  * adding all patches since 1.8.2 release in order to try fixing
    regressions after introducing thread safety constructor with
    1.8.1 (boo#1205778, boo#1205818)
- supersedes U_Fix-797755-Allow-X-IfEvent-to-reenter-libX11.patch
- re-enabled thread safe constructor</changelog>
  <changelog author="sndirsch@suse.com" date="1670241600">- going back to version 1.7.5 for now to get rid of regressions,
  which were introduced by trying to get thread-safe in libX11
  itself
- re-introduced U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  which was not yet in 1.7.5
- supersedes the following patches
  * U_0001-Add-XFreeThreads-function.patch
  * U_0002-Don-t-use-pragma-inside-a-function-it-breaks-compili.patch
  * U_0003-Fix-797755-Allow-X-IfEvent-to-reenter-libX11.patch
  * U_0004-Indentation-fixes-around-recent-dpy-in_ifevent-chang.patch
  * U_0005-ChkIfEv.c-fix-wrong-handling-of-dpy-in_ifevent.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1670241601">- Update to version 1.8.1
  This release fixes the --enable-thread-safety-constructor option to the
  configure script to work as intended.  In the previous release, the changes
  for this option may not have been enabled when the option was not specified
  or when the --enable option was specified.
  While we have enabled it by default, believing that doing so will reduce
  the number of bugs users encounter running libX11 clients, in some cases
  it may expose bugs in which clients had previously gotten away with calling
  libX11 functions while a libX11 lock is already held, and thus now deadlock,
  as discussed in https://gitlab.freedesktop.org/xorg/lib/libx11/-/issues/157
- let's hope this version doesn't suffer yet from the regressions
  reported in boo#1205778, boo#1205818 (reported against 1.8.2);
  we need libX11 thread safe for totem (GNOME 43) :-(</changelog>
  <changelog author="llyyr.public@gmail.com" date="1678363200">- Update to version 1.8.4
  This release fixes the regressions in previous 1.8.x related to the thread-
  - safety-constructor option. (boo#1209176)
- supersedes U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1685620800">- Update to version 1.8.5
  * gitlab CI: Add libtool to required packages
  * configure: raise minimum autoconf requirement to 2.70
  * configure: replace deprecated AC_HELP_STRING with AS_HELP_STRING
  * configure: Use LT_INIT from libtool 2 instead of deprecated AC_PROG_LIBTOOL
  * gitlab CI: add workflow rules
  * nls: delete compose sequences that pointlessly mix upper and lower case
  * nls: remove four hundred and sixty untypable Greek compose sequences
  * nls: remove twenty two untypable Greek compose sequences
  * XSetScreenSaver.man: restore the part that was accidentally snipped
  * nls: make the Amharic compose sequences use the dead-vowel symbols
  * nls: sort three sequences alphabetically in their group, like all others
  * nls: delete six compose sequences that cannot be typed
  * nls: use a slash instead of a combining solidus in compose sequences
  * NLS: move long S compositions to respective blocks
  * NLS: implement the expansion of the six Breton N-graph keysyms
  * NLS: move dead-caron subscript compositions to the relevant Unicode block
  * NLS: Remove strange dead_cedilla cedi sign sequences
  * nls: add compose sequence for capital schwa, and delete a deviant one
- Users of the Amharic (am_ET.UTF-8) compose key sequences provided by libX11
  will also want to upgrade to xkeyboard-config 2.39 (releasing soon), in order
  to keep those sequeunces working with this release.</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
  <changelog author="dmueller@suse.com" date="1689422400">- update to 1.8.6:
  * InitExt.c: Add bounds checks for extension request,
    event, &amp; error codes
  * Fixes CVE-2023-3138: X servers could return values from
    XQueryExtension that would cause Xlib to write entries
    out-of-bounds of the arrays to store them, though this
    would only overwrite other parts of the Display
    struct, not outside the bounds allocated for that
    structure.
- drop U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch (upstream)</changelog>
  <changelog author="sndirsch@suse.com" date="1696334400">- update to 1.8.7
  This release contains fixes for the issues reported in security
  advisory here:
    https://lists.x.org/archives/xorg-announce/2023-October/003424.html
  * fixes CVE-2023-43785 libX11: out-of-bounds memory access in
    _XkbReadKeySyms() (boo#1215683)
  * fixes CVE-2023-43786 libX11: stack exhaustion from infinite recursion
  in PutSubImage() (boo#1215684)
  * fixes CVE-2023-43787 libX11: integer overflow in XCreateImage()
    leading to a heap overflow (boo#1215685)
  along with:
  * Fail XOpenDisplay() if server-provided default visual is invalid (!233)
  * Bring XKB docs in line with actual implementation (!231, !228)
  * Xutil.h: declare XEmptyRegion() and XEqualRegion() as Bool (!225)
  * Assorted updates to en_US.UTF-8 compose keys (!213, !214, !215, !216,
    !217, !219, !220, !222, !223, !226, !227, !229)</changelog>
  <changelog author="sndirsch@suse.com" date="1700481600">- this update is needed due to jsc#PED-7282; it includes the
  security fix for CVE-2022-3555 (bsc#1204425, bsc#1208881) and
  a fix for a race condition in libX11 that causes various
  applications to crash randomly (boo#1181963)</changelog>
  <changelog author="pgajdos@suse.com" date="1709294400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="jengelh@inai.de" date="1709294401">- Trim descriptions for size (keep the big one for the prominently
  installed libX11-6).
- Spin documentation off to libX11-devel-doc, this saves buildroots
  800+ files and time (mandb is run in %posttrans).</changelog>
  <changelog author="sndirsch@suse.com" date="1711368000">- update to 1.8.8
  * Fix XIM input sometimes jumbled (#198, !236)
  (bsc#1252250)
  * Fix _XkbReadGetDeviceInfoReply for nButtons == dev-&gt;buttons (!237)
  (bsc#1252250)
  * Drop ifdefs for platforms that are no longer supported (!242, !243)
  * Assorted memory handling cleanups</changelog>
  <changelog author="sndirsch@suse.com" date="1712318400">- U_0001-xlibi18n-restore-parse_line1-for-WIN32-builds.patch
  U_0002-Revert-imDefLkup-Commit-first-info-in-XimCommitInfo.patch
  U_0003-Revert-ximcp-Unmark-to-fabricate-key-events-with-XKe.patch
  * fix regressions in 1.8.8 (issues #204, #205, #206, #207, #208)</changelog>
  <changelog author="sndirsch@suse.com" date="1712404800">- Update to 1.8.9
  * Fix regressions introduced in 1.8.8 (!245, !248) - this includes
    reverting for now the previous "Fix XIM input sometimes jumbled
    (#198, !236)"
- supersedes
  * U_0001-xlibi18n-restore-parse_line1-for-WIN32-builds.patch
  * U_0002-Revert-imDefLkup-Commit-first-info-in-XimCommitInfo.patch
  * U_0003-Revert-ximcp-Unmark-to-fabricate-key-events-with-XKe.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1722340800">- Update to 1.8.10; this release includes:
  * Re-fix XIM input sometimes jumbled (#205, #206, #207, #208, !246)
  * Fix various static analysis errors (!250)
  * Add compose sequences for Arabic hamza (!218), Ezh (!221), and
  hryvnia currency (!259)
  * Make colormap private interfaces thread safe (#215, !254)
  * Fix deadlock in XRebindKeysym() (!256)
  * Assorted memory handling cleanups (!251, !258)
  * Restore VAX support still in use by NetBSD (!257)</changelog>
  <changelog author="sndirsch@suse.com" date="1740484800">- U_CVE-2025-26597-0001-xkb-Fix-buffer-overflow-in-XkbChangeTypesOfKey.patch
  * Buffer overflow in XkbChangeTypesOfKey()
    (CVE-2025-26597, bsc#1237431)</changelog>
</package>
<package pkgid="e9c9dd1bebd336412c9c727359255758a7fae1f46530077180de0e251ced80aa" name="libX11-6" arch="x86_64">
  <version epoch="0" ver="1.8.10" rel="150700.4.3.1"/>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)</changelog>
  <changelog author="sndirsch@suse.com" date="1668168000">- Update to version 1.8.2
  * This is primarily a bug fix release, including further work on
    improving the thread-safety-constructor and making it work with
    software which had incorrectly called libX11 functions from
    inside X*IfEvent() calls.
- supersedes U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1669464000">- U_Fix-797755-Allow-X-IfEvent-to-reenter-libX11.patch
  * fixed Firefox freezes (regression since 1.8.2) (boo#1205778)</changelog>
  <changelog author="sndirsch@suse.com" date="1669982400">- back to "--disable-thread-safety-constructor" for now; we see just
  too many regressions, e.g. firefox freezes and crashes, crashes with
  barrierc, crashes in Godot, assertions with vkquake (boo#1205818,
  boo#1205778)</changelog>
  <changelog author="sndirsch@suse.com" date="1670068800">- U_0001-Add-XFreeThreads-function.patch
  U_0002-Don-t-use-pragma-inside-a-function-it-breaks-compili.patch
  U_0003-Fix-797755-Allow-X-IfEvent-to-reenter-libX11.patch
  U_0004-Indentation-fixes-around-recent-dpy-in_ifevent-chang.patch
  U_0005-ChkIfEv.c-fix-wrong-handling-of-dpy-in_ifevent.patch
  * adding all patches since 1.8.2 release in order to try fixing
    regressions after introducing thread safety constructor with
    1.8.1 (boo#1205778, boo#1205818)
- supersedes U_Fix-797755-Allow-X-IfEvent-to-reenter-libX11.patch
- re-enabled thread safe constructor</changelog>
  <changelog author="sndirsch@suse.com" date="1670241600">- going back to version 1.7.5 for now to get rid of regressions,
  which were introduced by trying to get thread-safe in libX11
  itself
- re-introduced U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  which was not yet in 1.7.5
- supersedes the following patches
  * U_0001-Add-XFreeThreads-function.patch
  * U_0002-Don-t-use-pragma-inside-a-function-it-breaks-compili.patch
  * U_0003-Fix-797755-Allow-X-IfEvent-to-reenter-libX11.patch
  * U_0004-Indentation-fixes-around-recent-dpy-in_ifevent-chang.patch
  * U_0005-ChkIfEv.c-fix-wrong-handling-of-dpy-in_ifevent.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1670241601">- Update to version 1.8.1
  This release fixes the --enable-thread-safety-constructor option to the
  configure script to work as intended.  In the previous release, the changes
  for this option may not have been enabled when the option was not specified
  or when the --enable option was specified.
  While we have enabled it by default, believing that doing so will reduce
  the number of bugs users encounter running libX11 clients, in some cases
  it may expose bugs in which clients had previously gotten away with calling
  libX11 functions while a libX11 lock is already held, and thus now deadlock,
  as discussed in https://gitlab.freedesktop.org/xorg/lib/libx11/-/issues/157
- let's hope this version doesn't suffer yet from the regressions
  reported in boo#1205778, boo#1205818 (reported against 1.8.2);
  we need libX11 thread safe for totem (GNOME 43) :-(</changelog>
  <changelog author="llyyr.public@gmail.com" date="1678363200">- Update to version 1.8.4
  This release fixes the regressions in previous 1.8.x related to the thread-
  - safety-constructor option. (boo#1209176)
- supersedes U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1685620800">- Update to version 1.8.5
  * gitlab CI: Add libtool to required packages
  * configure: raise minimum autoconf requirement to 2.70
  * configure: replace deprecated AC_HELP_STRING with AS_HELP_STRING
  * configure: Use LT_INIT from libtool 2 instead of deprecated AC_PROG_LIBTOOL
  * gitlab CI: add workflow rules
  * nls: delete compose sequences that pointlessly mix upper and lower case
  * nls: remove four hundred and sixty untypable Greek compose sequences
  * nls: remove twenty two untypable Greek compose sequences
  * XSetScreenSaver.man: restore the part that was accidentally snipped
  * nls: make the Amharic compose sequences use the dead-vowel symbols
  * nls: sort three sequences alphabetically in their group, like all others
  * nls: delete six compose sequences that cannot be typed
  * nls: use a slash instead of a combining solidus in compose sequences
  * NLS: move long S compositions to respective blocks
  * NLS: implement the expansion of the six Breton N-graph keysyms
  * NLS: move dead-caron subscript compositions to the relevant Unicode block
  * NLS: Remove strange dead_cedilla cedi sign sequences
  * nls: add compose sequence for capital schwa, and delete a deviant one
- Users of the Amharic (am_ET.UTF-8) compose key sequences provided by libX11
  will also want to upgrade to xkeyboard-config 2.39 (releasing soon), in order
  to keep those sequeunces working with this release.</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
  <changelog author="dmueller@suse.com" date="1689422400">- update to 1.8.6:
  * InitExt.c: Add bounds checks for extension request,
    event, &amp; error codes
  * Fixes CVE-2023-3138: X servers could return values from
    XQueryExtension that would cause Xlib to write entries
    out-of-bounds of the arrays to store them, though this
    would only overwrite other parts of the Display
    struct, not outside the bounds allocated for that
    structure.
- drop U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch (upstream)</changelog>
  <changelog author="sndirsch@suse.com" date="1696334400">- update to 1.8.7
  This release contains fixes for the issues reported in security
  advisory here:
    https://lists.x.org/archives/xorg-announce/2023-October/003424.html
  * fixes CVE-2023-43785 libX11: out-of-bounds memory access in
    _XkbReadKeySyms() (boo#1215683)
  * fixes CVE-2023-43786 libX11: stack exhaustion from infinite recursion
  in PutSubImage() (boo#1215684)
  * fixes CVE-2023-43787 libX11: integer overflow in XCreateImage()
    leading to a heap overflow (boo#1215685)
  along with:
  * Fail XOpenDisplay() if server-provided default visual is invalid (!233)
  * Bring XKB docs in line with actual implementation (!231, !228)
  * Xutil.h: declare XEmptyRegion() and XEqualRegion() as Bool (!225)
  * Assorted updates to en_US.UTF-8 compose keys (!213, !214, !215, !216,
    !217, !219, !220, !222, !223, !226, !227, !229)</changelog>
  <changelog author="sndirsch@suse.com" date="1700481600">- this update is needed due to jsc#PED-7282; it includes the
  security fix for CVE-2022-3555 (bsc#1204425, bsc#1208881) and
  a fix for a race condition in libX11 that causes various
  applications to crash randomly (boo#1181963)</changelog>
  <changelog author="pgajdos@suse.com" date="1709294400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="jengelh@inai.de" date="1709294401">- Trim descriptions for size (keep the big one for the prominently
  installed libX11-6).
- Spin documentation off to libX11-devel-doc, this saves buildroots
  800+ files and time (mandb is run in %posttrans).</changelog>
  <changelog author="sndirsch@suse.com" date="1711368000">- update to 1.8.8
  * Fix XIM input sometimes jumbled (#198, !236)
  (bsc#1252250)
  * Fix _XkbReadGetDeviceInfoReply for nButtons == dev-&gt;buttons (!237)
  (bsc#1252250)
  * Drop ifdefs for platforms that are no longer supported (!242, !243)
  * Assorted memory handling cleanups</changelog>
  <changelog author="sndirsch@suse.com" date="1712318400">- U_0001-xlibi18n-restore-parse_line1-for-WIN32-builds.patch
  U_0002-Revert-imDefLkup-Commit-first-info-in-XimCommitInfo.patch
  U_0003-Revert-ximcp-Unmark-to-fabricate-key-events-with-XKe.patch
  * fix regressions in 1.8.8 (issues #204, #205, #206, #207, #208)</changelog>
  <changelog author="sndirsch@suse.com" date="1712404800">- Update to 1.8.9
  * Fix regressions introduced in 1.8.8 (!245, !248) - this includes
    reverting for now the previous "Fix XIM input sometimes jumbled
    (#198, !236)"
- supersedes
  * U_0001-xlibi18n-restore-parse_line1-for-WIN32-builds.patch
  * U_0002-Revert-imDefLkup-Commit-first-info-in-XimCommitInfo.patch
  * U_0003-Revert-ximcp-Unmark-to-fabricate-key-events-with-XKe.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1722340800">- Update to 1.8.10; this release includes:
  * Re-fix XIM input sometimes jumbled (#205, #206, #207, #208, !246)
  * Fix various static analysis errors (!250)
  * Add compose sequences for Arabic hamza (!218), Ezh (!221), and
  hryvnia currency (!259)
  * Make colormap private interfaces thread safe (#215, !254)
  * Fix deadlock in XRebindKeysym() (!256)
  * Assorted memory handling cleanups (!251, !258)
  * Restore VAX support still in use by NetBSD (!257)</changelog>
  <changelog author="sndirsch@suse.com" date="1740484800">- U_CVE-2025-26597-0001-xkb-Fix-buffer-overflow-in-XkbChangeTypesOfKey.patch
  * Buffer overflow in XkbChangeTypesOfKey()
    (CVE-2025-26597, bsc#1237431)</changelog>
</package>
<package pkgid="0f4bb42612c825792e97d958cc0c1dc03a4c223c37f327bacae77b6944aaf95d" name="libX11-6-32bit" arch="x86_64">
  <version epoch="0" ver="1.8.10" rel="150700.4.3.1"/>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)</changelog>
  <changelog author="sndirsch@suse.com" date="1668168000">- Update to version 1.8.2
  * This is primarily a bug fix release, including further work on
    improving the thread-safety-constructor and making it work with
    software which had incorrectly called libX11 functions from
    inside X*IfEvent() calls.
- supersedes U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1669464000">- U_Fix-797755-Allow-X-IfEvent-to-reenter-libX11.patch
  * fixed Firefox freezes (regression since 1.8.2) (boo#1205778)</changelog>
  <changelog author="sndirsch@suse.com" date="1669982400">- back to "--disable-thread-safety-constructor" for now; we see just
  too many regressions, e.g. firefox freezes and crashes, crashes with
  barrierc, crashes in Godot, assertions with vkquake (boo#1205818,
  boo#1205778)</changelog>
  <changelog author="sndirsch@suse.com" date="1670068800">- U_0001-Add-XFreeThreads-function.patch
  U_0002-Don-t-use-pragma-inside-a-function-it-breaks-compili.patch
  U_0003-Fix-797755-Allow-X-IfEvent-to-reenter-libX11.patch
  U_0004-Indentation-fixes-around-recent-dpy-in_ifevent-chang.patch
  U_0005-ChkIfEv.c-fix-wrong-handling-of-dpy-in_ifevent.patch
  * adding all patches since 1.8.2 release in order to try fixing
    regressions after introducing thread safety constructor with
    1.8.1 (boo#1205778, boo#1205818)
- supersedes U_Fix-797755-Allow-X-IfEvent-to-reenter-libX11.patch
- re-enabled thread safe constructor</changelog>
  <changelog author="sndirsch@suse.com" date="1670241600">- going back to version 1.7.5 for now to get rid of regressions,
  which were introduced by trying to get thread-safe in libX11
  itself
- re-introduced U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  which was not yet in 1.7.5
- supersedes the following patches
  * U_0001-Add-XFreeThreads-function.patch
  * U_0002-Don-t-use-pragma-inside-a-function-it-breaks-compili.patch
  * U_0003-Fix-797755-Allow-X-IfEvent-to-reenter-libX11.patch
  * U_0004-Indentation-fixes-around-recent-dpy-in_ifevent-chang.patch
  * U_0005-ChkIfEv.c-fix-wrong-handling-of-dpy-in_ifevent.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1670241601">- Update to version 1.8.1
  This release fixes the --enable-thread-safety-constructor option to the
  configure script to work as intended.  In the previous release, the changes
  for this option may not have been enabled when the option was not specified
  or when the --enable option was specified.
  While we have enabled it by default, believing that doing so will reduce
  the number of bugs users encounter running libX11 clients, in some cases
  it may expose bugs in which clients had previously gotten away with calling
  libX11 functions while a libX11 lock is already held, and thus now deadlock,
  as discussed in https://gitlab.freedesktop.org/xorg/lib/libx11/-/issues/157
- let's hope this version doesn't suffer yet from the regressions
  reported in boo#1205778, boo#1205818 (reported against 1.8.2);
  we need libX11 thread safe for totem (GNOME 43) :-(</changelog>
  <changelog author="llyyr.public@gmail.com" date="1678363200">- Update to version 1.8.4
  This release fixes the regressions in previous 1.8.x related to the thread-
  - safety-constructor option. (boo#1209176)
- supersedes U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1685620800">- Update to version 1.8.5
  * gitlab CI: Add libtool to required packages
  * configure: raise minimum autoconf requirement to 2.70
  * configure: replace deprecated AC_HELP_STRING with AS_HELP_STRING
  * configure: Use LT_INIT from libtool 2 instead of deprecated AC_PROG_LIBTOOL
  * gitlab CI: add workflow rules
  * nls: delete compose sequences that pointlessly mix upper and lower case
  * nls: remove four hundred and sixty untypable Greek compose sequences
  * nls: remove twenty two untypable Greek compose sequences
  * XSetScreenSaver.man: restore the part that was accidentally snipped
  * nls: make the Amharic compose sequences use the dead-vowel symbols
  * nls: sort three sequences alphabetically in their group, like all others
  * nls: delete six compose sequences that cannot be typed
  * nls: use a slash instead of a combining solidus in compose sequences
  * NLS: move long S compositions to respective blocks
  * NLS: implement the expansion of the six Breton N-graph keysyms
  * NLS: move dead-caron subscript compositions to the relevant Unicode block
  * NLS: Remove strange dead_cedilla cedi sign sequences
  * nls: add compose sequence for capital schwa, and delete a deviant one
- Users of the Amharic (am_ET.UTF-8) compose key sequences provided by libX11
  will also want to upgrade to xkeyboard-config 2.39 (releasing soon), in order
  to keep those sequeunces working with this release.</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
  <changelog author="dmueller@suse.com" date="1689422400">- update to 1.8.6:
  * InitExt.c: Add bounds checks for extension request,
    event, &amp; error codes
  * Fixes CVE-2023-3138: X servers could return values from
    XQueryExtension that would cause Xlib to write entries
    out-of-bounds of the arrays to store them, though this
    would only overwrite other parts of the Display
    struct, not outside the bounds allocated for that
    structure.
- drop U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch (upstream)</changelog>
  <changelog author="sndirsch@suse.com" date="1696334400">- update to 1.8.7
  This release contains fixes for the issues reported in security
  advisory here:
    https://lists.x.org/archives/xorg-announce/2023-October/003424.html
  * fixes CVE-2023-43785 libX11: out-of-bounds memory access in
    _XkbReadKeySyms() (boo#1215683)
  * fixes CVE-2023-43786 libX11: stack exhaustion from infinite recursion
  in PutSubImage() (boo#1215684)
  * fixes CVE-2023-43787 libX11: integer overflow in XCreateImage()
    leading to a heap overflow (boo#1215685)
  along with:
  * Fail XOpenDisplay() if server-provided default visual is invalid (!233)
  * Bring XKB docs in line with actual implementation (!231, !228)
  * Xutil.h: declare XEmptyRegion() and XEqualRegion() as Bool (!225)
  * Assorted updates to en_US.UTF-8 compose keys (!213, !214, !215, !216,
    !217, !219, !220, !222, !223, !226, !227, !229)</changelog>
  <changelog author="sndirsch@suse.com" date="1700481600">- this update is needed due to jsc#PED-7282; it includes the
  security fix for CVE-2022-3555 (bsc#1204425, bsc#1208881) and
  a fix for a race condition in libX11 that causes various
  applications to crash randomly (boo#1181963)</changelog>
  <changelog author="pgajdos@suse.com" date="1709294400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="jengelh@inai.de" date="1709294401">- Trim descriptions for size (keep the big one for the prominently
  installed libX11-6).
- Spin documentation off to libX11-devel-doc, this saves buildroots
  800+ files and time (mandb is run in %posttrans).</changelog>
  <changelog author="sndirsch@suse.com" date="1711368000">- update to 1.8.8
  * Fix XIM input sometimes jumbled (#198, !236)
  (bsc#1252250)
  * Fix _XkbReadGetDeviceInfoReply for nButtons == dev-&gt;buttons (!237)
  (bsc#1252250)
  * Drop ifdefs for platforms that are no longer supported (!242, !243)
  * Assorted memory handling cleanups</changelog>
  <changelog author="sndirsch@suse.com" date="1712318400">- U_0001-xlibi18n-restore-parse_line1-for-WIN32-builds.patch
  U_0002-Revert-imDefLkup-Commit-first-info-in-XimCommitInfo.patch
  U_0003-Revert-ximcp-Unmark-to-fabricate-key-events-with-XKe.patch
  * fix regressions in 1.8.8 (issues #204, #205, #206, #207, #208)</changelog>
  <changelog author="sndirsch@suse.com" date="1712404800">- Update to 1.8.9
  * Fix regressions introduced in 1.8.8 (!245, !248) - this includes
    reverting for now the previous "Fix XIM input sometimes jumbled
    (#198, !236)"
- supersedes
  * U_0001-xlibi18n-restore-parse_line1-for-WIN32-builds.patch
  * U_0002-Revert-imDefLkup-Commit-first-info-in-XimCommitInfo.patch
  * U_0003-Revert-ximcp-Unmark-to-fabricate-key-events-with-XKe.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1722340800">- Update to 1.8.10; this release includes:
  * Re-fix XIM input sometimes jumbled (#205, #206, #207, #208, !246)
  * Fix various static analysis errors (!250)
  * Add compose sequences for Arabic hamza (!218), Ezh (!221), and
  hryvnia currency (!259)
  * Make colormap private interfaces thread safe (#215, !254)
  * Fix deadlock in XRebindKeysym() (!256)
  * Assorted memory handling cleanups (!251, !258)
  * Restore VAX support still in use by NetBSD (!257)</changelog>
  <changelog author="sndirsch@suse.com" date="1740484800">- U_CVE-2025-26597-0001-xkb-Fix-buffer-overflow-in-XkbChangeTypesOfKey.patch
  * Buffer overflow in XkbChangeTypesOfKey()
    (CVE-2025-26597, bsc#1237431)</changelog>
</package>
<package pkgid="2424ed4ec5c6deff4a1b13580d2ef81e0b735e304ddb10fb6bf270f6c720dfe9" name="libX11-data" arch="noarch">
  <version epoch="0" ver="1.8.10" rel="150700.4.3.1"/>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)</changelog>
  <changelog author="sndirsch@suse.com" date="1668168000">- Update to version 1.8.2
  * This is primarily a bug fix release, including further work on
    improving the thread-safety-constructor and making it work with
    software which had incorrectly called libX11 functions from
    inside X*IfEvent() calls.
- supersedes U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1669464000">- U_Fix-797755-Allow-X-IfEvent-to-reenter-libX11.patch
  * fixed Firefox freezes (regression since 1.8.2) (boo#1205778)</changelog>
  <changelog author="sndirsch@suse.com" date="1669982400">- back to "--disable-thread-safety-constructor" for now; we see just
  too many regressions, e.g. firefox freezes and crashes, crashes with
  barrierc, crashes in Godot, assertions with vkquake (boo#1205818,
  boo#1205778)</changelog>
  <changelog author="sndirsch@suse.com" date="1670068800">- U_0001-Add-XFreeThreads-function.patch
  U_0002-Don-t-use-pragma-inside-a-function-it-breaks-compili.patch
  U_0003-Fix-797755-Allow-X-IfEvent-to-reenter-libX11.patch
  U_0004-Indentation-fixes-around-recent-dpy-in_ifevent-chang.patch
  U_0005-ChkIfEv.c-fix-wrong-handling-of-dpy-in_ifevent.patch
  * adding all patches since 1.8.2 release in order to try fixing
    regressions after introducing thread safety constructor with
    1.8.1 (boo#1205778, boo#1205818)
- supersedes U_Fix-797755-Allow-X-IfEvent-to-reenter-libX11.patch
- re-enabled thread safe constructor</changelog>
  <changelog author="sndirsch@suse.com" date="1670241600">- going back to version 1.7.5 for now to get rid of regressions,
  which were introduced by trying to get thread-safe in libX11
  itself
- re-introduced U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  which was not yet in 1.7.5
- supersedes the following patches
  * U_0001-Add-XFreeThreads-function.patch
  * U_0002-Don-t-use-pragma-inside-a-function-it-breaks-compili.patch
  * U_0003-Fix-797755-Allow-X-IfEvent-to-reenter-libX11.patch
  * U_0004-Indentation-fixes-around-recent-dpy-in_ifevent-chang.patch
  * U_0005-ChkIfEv.c-fix-wrong-handling-of-dpy-in_ifevent.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1670241601">- Update to version 1.8.1
  This release fixes the --enable-thread-safety-constructor option to the
  configure script to work as intended.  In the previous release, the changes
  for this option may not have been enabled when the option was not specified
  or when the --enable option was specified.
  While we have enabled it by default, believing that doing so will reduce
  the number of bugs users encounter running libX11 clients, in some cases
  it may expose bugs in which clients had previously gotten away with calling
  libX11 functions while a libX11 lock is already held, and thus now deadlock,
  as discussed in https://gitlab.freedesktop.org/xorg/lib/libx11/-/issues/157
- let's hope this version doesn't suffer yet from the regressions
  reported in boo#1205778, boo#1205818 (reported against 1.8.2);
  we need libX11 thread safe for totem (GNOME 43) :-(</changelog>
  <changelog author="llyyr.public@gmail.com" date="1678363200">- Update to version 1.8.4
  This release fixes the regressions in previous 1.8.x related to the thread-
  - safety-constructor option. (boo#1209176)
- supersedes U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1685620800">- Update to version 1.8.5
  * gitlab CI: Add libtool to required packages
  * configure: raise minimum autoconf requirement to 2.70
  * configure: replace deprecated AC_HELP_STRING with AS_HELP_STRING
  * configure: Use LT_INIT from libtool 2 instead of deprecated AC_PROG_LIBTOOL
  * gitlab CI: add workflow rules
  * nls: delete compose sequences that pointlessly mix upper and lower case
  * nls: remove four hundred and sixty untypable Greek compose sequences
  * nls: remove twenty two untypable Greek compose sequences
  * XSetScreenSaver.man: restore the part that was accidentally snipped
  * nls: make the Amharic compose sequences use the dead-vowel symbols
  * nls: sort three sequences alphabetically in their group, like all others
  * nls: delete six compose sequences that cannot be typed
  * nls: use a slash instead of a combining solidus in compose sequences
  * NLS: move long S compositions to respective blocks
  * NLS: implement the expansion of the six Breton N-graph keysyms
  * NLS: move dead-caron subscript compositions to the relevant Unicode block
  * NLS: Remove strange dead_cedilla cedi sign sequences
  * nls: add compose sequence for capital schwa, and delete a deviant one
- Users of the Amharic (am_ET.UTF-8) compose key sequences provided by libX11
  will also want to upgrade to xkeyboard-config 2.39 (releasing soon), in order
  to keep those sequeunces working with this release.</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
  <changelog author="dmueller@suse.com" date="1689422400">- update to 1.8.6:
  * InitExt.c: Add bounds checks for extension request,
    event, &amp; error codes
  * Fixes CVE-2023-3138: X servers could return values from
    XQueryExtension that would cause Xlib to write entries
    out-of-bounds of the arrays to store them, though this
    would only overwrite other parts of the Display
    struct, not outside the bounds allocated for that
    structure.
- drop U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch (upstream)</changelog>
  <changelog author="sndirsch@suse.com" date="1696334400">- update to 1.8.7
  This release contains fixes for the issues reported in security
  advisory here:
    https://lists.x.org/archives/xorg-announce/2023-October/003424.html
  * fixes CVE-2023-43785 libX11: out-of-bounds memory access in
    _XkbReadKeySyms() (boo#1215683)
  * fixes CVE-2023-43786 libX11: stack exhaustion from infinite recursion
  in PutSubImage() (boo#1215684)
  * fixes CVE-2023-43787 libX11: integer overflow in XCreateImage()
    leading to a heap overflow (boo#1215685)
  along with:
  * Fail XOpenDisplay() if server-provided default visual is invalid (!233)
  * Bring XKB docs in line with actual implementation (!231, !228)
  * Xutil.h: declare XEmptyRegion() and XEqualRegion() as Bool (!225)
  * Assorted updates to en_US.UTF-8 compose keys (!213, !214, !215, !216,
    !217, !219, !220, !222, !223, !226, !227, !229)</changelog>
  <changelog author="sndirsch@suse.com" date="1700481600">- this update is needed due to jsc#PED-7282; it includes the
  security fix for CVE-2022-3555 (bsc#1204425, bsc#1208881) and
  a fix for a race condition in libX11 that causes various
  applications to crash randomly (boo#1181963)</changelog>
  <changelog author="pgajdos@suse.com" date="1709294400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="jengelh@inai.de" date="1709294401">- Trim descriptions for size (keep the big one for the prominently
  installed libX11-6).
- Spin documentation off to libX11-devel-doc, this saves buildroots
  800+ files and time (mandb is run in %posttrans).</changelog>
  <changelog author="sndirsch@suse.com" date="1711368000">- update to 1.8.8
  * Fix XIM input sometimes jumbled (#198, !236)
  (bsc#1252250)
  * Fix _XkbReadGetDeviceInfoReply for nButtons == dev-&gt;buttons (!237)
  (bsc#1252250)
  * Drop ifdefs for platforms that are no longer supported (!242, !243)
  * Assorted memory handling cleanups</changelog>
  <changelog author="sndirsch@suse.com" date="1712318400">- U_0001-xlibi18n-restore-parse_line1-for-WIN32-builds.patch
  U_0002-Revert-imDefLkup-Commit-first-info-in-XimCommitInfo.patch
  U_0003-Revert-ximcp-Unmark-to-fabricate-key-events-with-XKe.patch
  * fix regressions in 1.8.8 (issues #204, #205, #206, #207, #208)</changelog>
  <changelog author="sndirsch@suse.com" date="1712404800">- Update to 1.8.9
  * Fix regressions introduced in 1.8.8 (!245, !248) - this includes
    reverting for now the previous "Fix XIM input sometimes jumbled
    (#198, !236)"
- supersedes
  * U_0001-xlibi18n-restore-parse_line1-for-WIN32-builds.patch
  * U_0002-Revert-imDefLkup-Commit-first-info-in-XimCommitInfo.patch
  * U_0003-Revert-ximcp-Unmark-to-fabricate-key-events-with-XKe.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1722340800">- Update to 1.8.10; this release includes:
  * Re-fix XIM input sometimes jumbled (#205, #206, #207, #208, !246)
  * Fix various static analysis errors (!250)
  * Add compose sequences for Arabic hamza (!218), Ezh (!221), and
  hryvnia currency (!259)
  * Make colormap private interfaces thread safe (#215, !254)
  * Fix deadlock in XRebindKeysym() (!256)
  * Assorted memory handling cleanups (!251, !258)
  * Restore VAX support still in use by NetBSD (!257)</changelog>
  <changelog author="sndirsch@suse.com" date="1740484800">- U_CVE-2025-26597-0001-xkb-Fix-buffer-overflow-in-XkbChangeTypesOfKey.patch
  * Buffer overflow in XkbChangeTypesOfKey()
    (CVE-2025-26597, bsc#1237431)</changelog>
</package>
<package pkgid="e324075a3663624b76d9f9917352d82272b0188109e05dd404ffc044cb15d7d5" name="libX11-devel" arch="x86_64">
  <version epoch="0" ver="1.8.10" rel="150700.4.3.1"/>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)</changelog>
  <changelog author="sndirsch@suse.com" date="1668168000">- Update to version 1.8.2
  * This is primarily a bug fix release, including further work on
    improving the thread-safety-constructor and making it work with
    software which had incorrectly called libX11 functions from
    inside X*IfEvent() calls.
- supersedes U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1669464000">- U_Fix-797755-Allow-X-IfEvent-to-reenter-libX11.patch
  * fixed Firefox freezes (regression since 1.8.2) (boo#1205778)</changelog>
  <changelog author="sndirsch@suse.com" date="1669982400">- back to "--disable-thread-safety-constructor" for now; we see just
  too many regressions, e.g. firefox freezes and crashes, crashes with
  barrierc, crashes in Godot, assertions with vkquake (boo#1205818,
  boo#1205778)</changelog>
  <changelog author="sndirsch@suse.com" date="1670068800">- U_0001-Add-XFreeThreads-function.patch
  U_0002-Don-t-use-pragma-inside-a-function-it-breaks-compili.patch
  U_0003-Fix-797755-Allow-X-IfEvent-to-reenter-libX11.patch
  U_0004-Indentation-fixes-around-recent-dpy-in_ifevent-chang.patch
  U_0005-ChkIfEv.c-fix-wrong-handling-of-dpy-in_ifevent.patch
  * adding all patches since 1.8.2 release in order to try fixing
    regressions after introducing thread safety constructor with
    1.8.1 (boo#1205778, boo#1205818)
- supersedes U_Fix-797755-Allow-X-IfEvent-to-reenter-libX11.patch
- re-enabled thread safe constructor</changelog>
  <changelog author="sndirsch@suse.com" date="1670241600">- going back to version 1.7.5 for now to get rid of regressions,
  which were introduced by trying to get thread-safe in libX11
  itself
- re-introduced U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  which was not yet in 1.7.5
- supersedes the following patches
  * U_0001-Add-XFreeThreads-function.patch
  * U_0002-Don-t-use-pragma-inside-a-function-it-breaks-compili.patch
  * U_0003-Fix-797755-Allow-X-IfEvent-to-reenter-libX11.patch
  * U_0004-Indentation-fixes-around-recent-dpy-in_ifevent-chang.patch
  * U_0005-ChkIfEv.c-fix-wrong-handling-of-dpy-in_ifevent.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1670241601">- Update to version 1.8.1
  This release fixes the --enable-thread-safety-constructor option to the
  configure script to work as intended.  In the previous release, the changes
  for this option may not have been enabled when the option was not specified
  or when the --enable option was specified.
  While we have enabled it by default, believing that doing so will reduce
  the number of bugs users encounter running libX11 clients, in some cases
  it may expose bugs in which clients had previously gotten away with calling
  libX11 functions while a libX11 lock is already held, and thus now deadlock,
  as discussed in https://gitlab.freedesktop.org/xorg/lib/libx11/-/issues/157
- let's hope this version doesn't suffer yet from the regressions
  reported in boo#1205778, boo#1205818 (reported against 1.8.2);
  we need libX11 thread safe for totem (GNOME 43) :-(</changelog>
  <changelog author="llyyr.public@gmail.com" date="1678363200">- Update to version 1.8.4
  This release fixes the regressions in previous 1.8.x related to the thread-
  - safety-constructor option. (boo#1209176)
- supersedes U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1685620800">- Update to version 1.8.5
  * gitlab CI: Add libtool to required packages
  * configure: raise minimum autoconf requirement to 2.70
  * configure: replace deprecated AC_HELP_STRING with AS_HELP_STRING
  * configure: Use LT_INIT from libtool 2 instead of deprecated AC_PROG_LIBTOOL
  * gitlab CI: add workflow rules
  * nls: delete compose sequences that pointlessly mix upper and lower case
  * nls: remove four hundred and sixty untypable Greek compose sequences
  * nls: remove twenty two untypable Greek compose sequences
  * XSetScreenSaver.man: restore the part that was accidentally snipped
  * nls: make the Amharic compose sequences use the dead-vowel symbols
  * nls: sort three sequences alphabetically in their group, like all others
  * nls: delete six compose sequences that cannot be typed
  * nls: use a slash instead of a combining solidus in compose sequences
  * NLS: move long S compositions to respective blocks
  * NLS: implement the expansion of the six Breton N-graph keysyms
  * NLS: move dead-caron subscript compositions to the relevant Unicode block
  * NLS: Remove strange dead_cedilla cedi sign sequences
  * nls: add compose sequence for capital schwa, and delete a deviant one
- Users of the Amharic (am_ET.UTF-8) compose key sequences provided by libX11
  will also want to upgrade to xkeyboard-config 2.39 (releasing soon), in order
  to keep those sequeunces working with this release.</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
  <changelog author="dmueller@suse.com" date="1689422400">- update to 1.8.6:
  * InitExt.c: Add bounds checks for extension request,
    event, &amp; error codes
  * Fixes CVE-2023-3138: X servers could return values from
    XQueryExtension that would cause Xlib to write entries
    out-of-bounds of the arrays to store them, though this
    would only overwrite other parts of the Display
    struct, not outside the bounds allocated for that
    structure.
- drop U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch (upstream)</changelog>
  <changelog author="sndirsch@suse.com" date="1696334400">- update to 1.8.7
  This release contains fixes for the issues reported in security
  advisory here:
    https://lists.x.org/archives/xorg-announce/2023-October/003424.html
  * fixes CVE-2023-43785 libX11: out-of-bounds memory access in
    _XkbReadKeySyms() (boo#1215683)
  * fixes CVE-2023-43786 libX11: stack exhaustion from infinite recursion
  in PutSubImage() (boo#1215684)
  * fixes CVE-2023-43787 libX11: integer overflow in XCreateImage()
    leading to a heap overflow (boo#1215685)
  along with:
  * Fail XOpenDisplay() if server-provided default visual is invalid (!233)
  * Bring XKB docs in line with actual implementation (!231, !228)
  * Xutil.h: declare XEmptyRegion() and XEqualRegion() as Bool (!225)
  * Assorted updates to en_US.UTF-8 compose keys (!213, !214, !215, !216,
    !217, !219, !220, !222, !223, !226, !227, !229)</changelog>
  <changelog author="sndirsch@suse.com" date="1700481600">- this update is needed due to jsc#PED-7282; it includes the
  security fix for CVE-2022-3555 (bsc#1204425, bsc#1208881) and
  a fix for a race condition in libX11 that causes various
  applications to crash randomly (boo#1181963)</changelog>
  <changelog author="pgajdos@suse.com" date="1709294400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="jengelh@inai.de" date="1709294401">- Trim descriptions for size (keep the big one for the prominently
  installed libX11-6).
- Spin documentation off to libX11-devel-doc, this saves buildroots
  800+ files and time (mandb is run in %posttrans).</changelog>
  <changelog author="sndirsch@suse.com" date="1711368000">- update to 1.8.8
  * Fix XIM input sometimes jumbled (#198, !236)
  (bsc#1252250)
  * Fix _XkbReadGetDeviceInfoReply for nButtons == dev-&gt;buttons (!237)
  (bsc#1252250)
  * Drop ifdefs for platforms that are no longer supported (!242, !243)
  * Assorted memory handling cleanups</changelog>
  <changelog author="sndirsch@suse.com" date="1712318400">- U_0001-xlibi18n-restore-parse_line1-for-WIN32-builds.patch
  U_0002-Revert-imDefLkup-Commit-first-info-in-XimCommitInfo.patch
  U_0003-Revert-ximcp-Unmark-to-fabricate-key-events-with-XKe.patch
  * fix regressions in 1.8.8 (issues #204, #205, #206, #207, #208)</changelog>
  <changelog author="sndirsch@suse.com" date="1712404800">- Update to 1.8.9
  * Fix regressions introduced in 1.8.8 (!245, !248) - this includes
    reverting for now the previous "Fix XIM input sometimes jumbled
    (#198, !236)"
- supersedes
  * U_0001-xlibi18n-restore-parse_line1-for-WIN32-builds.patch
  * U_0002-Revert-imDefLkup-Commit-first-info-in-XimCommitInfo.patch
  * U_0003-Revert-ximcp-Unmark-to-fabricate-key-events-with-XKe.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1722340800">- Update to 1.8.10; this release includes:
  * Re-fix XIM input sometimes jumbled (#205, #206, #207, #208, !246)
  * Fix various static analysis errors (!250)
  * Add compose sequences for Arabic hamza (!218), Ezh (!221), and
  hryvnia currency (!259)
  * Make colormap private interfaces thread safe (#215, !254)
  * Fix deadlock in XRebindKeysym() (!256)
  * Assorted memory handling cleanups (!251, !258)
  * Restore VAX support still in use by NetBSD (!257)</changelog>
  <changelog author="sndirsch@suse.com" date="1740484800">- U_CVE-2025-26597-0001-xkb-Fix-buffer-overflow-in-XkbChangeTypesOfKey.patch
  * Buffer overflow in XkbChangeTypesOfKey()
    (CVE-2025-26597, bsc#1237431)</changelog>
</package>
<package pkgid="8c213b109b4c789eb40af2b83ac905b0289cdca876a334301574cd3ef3287b99" name="libX11-xcb1" arch="x86_64">
  <version epoch="0" ver="1.8.10" rel="150700.4.3.1"/>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)</changelog>
  <changelog author="sndirsch@suse.com" date="1668168000">- Update to version 1.8.2
  * This is primarily a bug fix release, including further work on
    improving the thread-safety-constructor and making it work with
    software which had incorrectly called libX11 functions from
    inside X*IfEvent() calls.
- supersedes U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1669464000">- U_Fix-797755-Allow-X-IfEvent-to-reenter-libX11.patch
  * fixed Firefox freezes (regression since 1.8.2) (boo#1205778)</changelog>
  <changelog author="sndirsch@suse.com" date="1669982400">- back to "--disable-thread-safety-constructor" for now; we see just
  too many regressions, e.g. firefox freezes and crashes, crashes with
  barrierc, crashes in Godot, assertions with vkquake (boo#1205818,
  boo#1205778)</changelog>
  <changelog author="sndirsch@suse.com" date="1670068800">- U_0001-Add-XFreeThreads-function.patch
  U_0002-Don-t-use-pragma-inside-a-function-it-breaks-compili.patch
  U_0003-Fix-797755-Allow-X-IfEvent-to-reenter-libX11.patch
  U_0004-Indentation-fixes-around-recent-dpy-in_ifevent-chang.patch
  U_0005-ChkIfEv.c-fix-wrong-handling-of-dpy-in_ifevent.patch
  * adding all patches since 1.8.2 release in order to try fixing
    regressions after introducing thread safety constructor with
    1.8.1 (boo#1205778, boo#1205818)
- supersedes U_Fix-797755-Allow-X-IfEvent-to-reenter-libX11.patch
- re-enabled thread safe constructor</changelog>
  <changelog author="sndirsch@suse.com" date="1670241600">- going back to version 1.7.5 for now to get rid of regressions,
  which were introduced by trying to get thread-safe in libX11
  itself
- re-introduced U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  which was not yet in 1.7.5
- supersedes the following patches
  * U_0001-Add-XFreeThreads-function.patch
  * U_0002-Don-t-use-pragma-inside-a-function-it-breaks-compili.patch
  * U_0003-Fix-797755-Allow-X-IfEvent-to-reenter-libX11.patch
  * U_0004-Indentation-fixes-around-recent-dpy-in_ifevent-chang.patch
  * U_0005-ChkIfEv.c-fix-wrong-handling-of-dpy-in_ifevent.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1670241601">- Update to version 1.8.1
  This release fixes the --enable-thread-safety-constructor option to the
  configure script to work as intended.  In the previous release, the changes
  for this option may not have been enabled when the option was not specified
  or when the --enable option was specified.
  While we have enabled it by default, believing that doing so will reduce
  the number of bugs users encounter running libX11 clients, in some cases
  it may expose bugs in which clients had previously gotten away with calling
  libX11 functions while a libX11 lock is already held, and thus now deadlock,
  as discussed in https://gitlab.freedesktop.org/xorg/lib/libx11/-/issues/157
- let's hope this version doesn't suffer yet from the regressions
  reported in boo#1205778, boo#1205818 (reported against 1.8.2);
  we need libX11 thread safe for totem (GNOME 43) :-(</changelog>
  <changelog author="llyyr.public@gmail.com" date="1678363200">- Update to version 1.8.4
  This release fixes the regressions in previous 1.8.x related to the thread-
  - safety-constructor option. (boo#1209176)
- supersedes U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1685620800">- Update to version 1.8.5
  * gitlab CI: Add libtool to required packages
  * configure: raise minimum autoconf requirement to 2.70
  * configure: replace deprecated AC_HELP_STRING with AS_HELP_STRING
  * configure: Use LT_INIT from libtool 2 instead of deprecated AC_PROG_LIBTOOL
  * gitlab CI: add workflow rules
  * nls: delete compose sequences that pointlessly mix upper and lower case
  * nls: remove four hundred and sixty untypable Greek compose sequences
  * nls: remove twenty two untypable Greek compose sequences
  * XSetScreenSaver.man: restore the part that was accidentally snipped
  * nls: make the Amharic compose sequences use the dead-vowel symbols
  * nls: sort three sequences alphabetically in their group, like all others
  * nls: delete six compose sequences that cannot be typed
  * nls: use a slash instead of a combining solidus in compose sequences
  * NLS: move long S compositions to respective blocks
  * NLS: implement the expansion of the six Breton N-graph keysyms
  * NLS: move dead-caron subscript compositions to the relevant Unicode block
  * NLS: Remove strange dead_cedilla cedi sign sequences
  * nls: add compose sequence for capital schwa, and delete a deviant one
- Users of the Amharic (am_ET.UTF-8) compose key sequences provided by libX11
  will also want to upgrade to xkeyboard-config 2.39 (releasing soon), in order
  to keep those sequeunces working with this release.</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
  <changelog author="dmueller@suse.com" date="1689422400">- update to 1.8.6:
  * InitExt.c: Add bounds checks for extension request,
    event, &amp; error codes
  * Fixes CVE-2023-3138: X servers could return values from
    XQueryExtension that would cause Xlib to write entries
    out-of-bounds of the arrays to store them, though this
    would only overwrite other parts of the Display
    struct, not outside the bounds allocated for that
    structure.
- drop U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch (upstream)</changelog>
  <changelog author="sndirsch@suse.com" date="1696334400">- update to 1.8.7
  This release contains fixes for the issues reported in security
  advisory here:
    https://lists.x.org/archives/xorg-announce/2023-October/003424.html
  * fixes CVE-2023-43785 libX11: out-of-bounds memory access in
    _XkbReadKeySyms() (boo#1215683)
  * fixes CVE-2023-43786 libX11: stack exhaustion from infinite recursion
  in PutSubImage() (boo#1215684)
  * fixes CVE-2023-43787 libX11: integer overflow in XCreateImage()
    leading to a heap overflow (boo#1215685)
  along with:
  * Fail XOpenDisplay() if server-provided default visual is invalid (!233)
  * Bring XKB docs in line with actual implementation (!231, !228)
  * Xutil.h: declare XEmptyRegion() and XEqualRegion() as Bool (!225)
  * Assorted updates to en_US.UTF-8 compose keys (!213, !214, !215, !216,
    !217, !219, !220, !222, !223, !226, !227, !229)</changelog>
  <changelog author="sndirsch@suse.com" date="1700481600">- this update is needed due to jsc#PED-7282; it includes the
  security fix for CVE-2022-3555 (bsc#1204425, bsc#1208881) and
  a fix for a race condition in libX11 that causes various
  applications to crash randomly (boo#1181963)</changelog>
  <changelog author="pgajdos@suse.com" date="1709294400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="jengelh@inai.de" date="1709294401">- Trim descriptions for size (keep the big one for the prominently
  installed libX11-6).
- Spin documentation off to libX11-devel-doc, this saves buildroots
  800+ files and time (mandb is run in %posttrans).</changelog>
  <changelog author="sndirsch@suse.com" date="1711368000">- update to 1.8.8
  * Fix XIM input sometimes jumbled (#198, !236)
  (bsc#1252250)
  * Fix _XkbReadGetDeviceInfoReply for nButtons == dev-&gt;buttons (!237)
  (bsc#1252250)
  * Drop ifdefs for platforms that are no longer supported (!242, !243)
  * Assorted memory handling cleanups</changelog>
  <changelog author="sndirsch@suse.com" date="1712318400">- U_0001-xlibi18n-restore-parse_line1-for-WIN32-builds.patch
  U_0002-Revert-imDefLkup-Commit-first-info-in-XimCommitInfo.patch
  U_0003-Revert-ximcp-Unmark-to-fabricate-key-events-with-XKe.patch
  * fix regressions in 1.8.8 (issues #204, #205, #206, #207, #208)</changelog>
  <changelog author="sndirsch@suse.com" date="1712404800">- Update to 1.8.9
  * Fix regressions introduced in 1.8.8 (!245, !248) - this includes
    reverting for now the previous "Fix XIM input sometimes jumbled
    (#198, !236)"
- supersedes
  * U_0001-xlibi18n-restore-parse_line1-for-WIN32-builds.patch
  * U_0002-Revert-imDefLkup-Commit-first-info-in-XimCommitInfo.patch
  * U_0003-Revert-ximcp-Unmark-to-fabricate-key-events-with-XKe.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1722340800">- Update to 1.8.10; this release includes:
  * Re-fix XIM input sometimes jumbled (#205, #206, #207, #208, !246)
  * Fix various static analysis errors (!250)
  * Add compose sequences for Arabic hamza (!218), Ezh (!221), and
  hryvnia currency (!259)
  * Make colormap private interfaces thread safe (#215, !254)
  * Fix deadlock in XRebindKeysym() (!256)
  * Assorted memory handling cleanups (!251, !258)
  * Restore VAX support still in use by NetBSD (!257)</changelog>
  <changelog author="sndirsch@suse.com" date="1740484800">- U_CVE-2025-26597-0001-xkb-Fix-buffer-overflow-in-XkbChangeTypesOfKey.patch
  * Buffer overflow in XkbChangeTypesOfKey()
    (CVE-2025-26597, bsc#1237431)</changelog>
</package>
<package pkgid="efb11de3e10045d73bc093c9af3db80370d311bb68a53bbca78abc5abc3c1738" name="libX11-xcb1-32bit" arch="x86_64">
  <version epoch="0" ver="1.8.10" rel="150700.4.3.1"/>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)</changelog>
  <changelog author="sndirsch@suse.com" date="1668168000">- Update to version 1.8.2
  * This is primarily a bug fix release, including further work on
    improving the thread-safety-constructor and making it work with
    software which had incorrectly called libX11 functions from
    inside X*IfEvent() calls.
- supersedes U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1669464000">- U_Fix-797755-Allow-X-IfEvent-to-reenter-libX11.patch
  * fixed Firefox freezes (regression since 1.8.2) (boo#1205778)</changelog>
  <changelog author="sndirsch@suse.com" date="1669982400">- back to "--disable-thread-safety-constructor" for now; we see just
  too many regressions, e.g. firefox freezes and crashes, crashes with
  barrierc, crashes in Godot, assertions with vkquake (boo#1205818,
  boo#1205778)</changelog>
  <changelog author="sndirsch@suse.com" date="1670068800">- U_0001-Add-XFreeThreads-function.patch
  U_0002-Don-t-use-pragma-inside-a-function-it-breaks-compili.patch
  U_0003-Fix-797755-Allow-X-IfEvent-to-reenter-libX11.patch
  U_0004-Indentation-fixes-around-recent-dpy-in_ifevent-chang.patch
  U_0005-ChkIfEv.c-fix-wrong-handling-of-dpy-in_ifevent.patch
  * adding all patches since 1.8.2 release in order to try fixing
    regressions after introducing thread safety constructor with
    1.8.1 (boo#1205778, boo#1205818)
- supersedes U_Fix-797755-Allow-X-IfEvent-to-reenter-libX11.patch
- re-enabled thread safe constructor</changelog>
  <changelog author="sndirsch@suse.com" date="1670241600">- going back to version 1.7.5 for now to get rid of regressions,
  which were introduced by trying to get thread-safe in libX11
  itself
- re-introduced U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  which was not yet in 1.7.5
- supersedes the following patches
  * U_0001-Add-XFreeThreads-function.patch
  * U_0002-Don-t-use-pragma-inside-a-function-it-breaks-compili.patch
  * U_0003-Fix-797755-Allow-X-IfEvent-to-reenter-libX11.patch
  * U_0004-Indentation-fixes-around-recent-dpy-in_ifevent-chang.patch
  * U_0005-ChkIfEv.c-fix-wrong-handling-of-dpy-in_ifevent.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1670241601">- Update to version 1.8.1
  This release fixes the --enable-thread-safety-constructor option to the
  configure script to work as intended.  In the previous release, the changes
  for this option may not have been enabled when the option was not specified
  or when the --enable option was specified.
  While we have enabled it by default, believing that doing so will reduce
  the number of bugs users encounter running libX11 clients, in some cases
  it may expose bugs in which clients had previously gotten away with calling
  libX11 functions while a libX11 lock is already held, and thus now deadlock,
  as discussed in https://gitlab.freedesktop.org/xorg/lib/libx11/-/issues/157
- let's hope this version doesn't suffer yet from the regressions
  reported in boo#1205778, boo#1205818 (reported against 1.8.2);
  we need libX11 thread safe for totem (GNOME 43) :-(</changelog>
  <changelog author="llyyr.public@gmail.com" date="1678363200">- Update to version 1.8.4
  This release fixes the regressions in previous 1.8.x related to the thread-
  - safety-constructor option. (boo#1209176)
- supersedes U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1685620800">- Update to version 1.8.5
  * gitlab CI: Add libtool to required packages
  * configure: raise minimum autoconf requirement to 2.70
  * configure: replace deprecated AC_HELP_STRING with AS_HELP_STRING
  * configure: Use LT_INIT from libtool 2 instead of deprecated AC_PROG_LIBTOOL
  * gitlab CI: add workflow rules
  * nls: delete compose sequences that pointlessly mix upper and lower case
  * nls: remove four hundred and sixty untypable Greek compose sequences
  * nls: remove twenty two untypable Greek compose sequences
  * XSetScreenSaver.man: restore the part that was accidentally snipped
  * nls: make the Amharic compose sequences use the dead-vowel symbols
  * nls: sort three sequences alphabetically in their group, like all others
  * nls: delete six compose sequences that cannot be typed
  * nls: use a slash instead of a combining solidus in compose sequences
  * NLS: move long S compositions to respective blocks
  * NLS: implement the expansion of the six Breton N-graph keysyms
  * NLS: move dead-caron subscript compositions to the relevant Unicode block
  * NLS: Remove strange dead_cedilla cedi sign sequences
  * nls: add compose sequence for capital schwa, and delete a deviant one
- Users of the Amharic (am_ET.UTF-8) compose key sequences provided by libX11
  will also want to upgrade to xkeyboard-config 2.39 (releasing soon), in order
  to keep those sequeunces working with this release.</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
  <changelog author="dmueller@suse.com" date="1689422400">- update to 1.8.6:
  * InitExt.c: Add bounds checks for extension request,
    event, &amp; error codes
  * Fixes CVE-2023-3138: X servers could return values from
    XQueryExtension that would cause Xlib to write entries
    out-of-bounds of the arrays to store them, though this
    would only overwrite other parts of the Display
    struct, not outside the bounds allocated for that
    structure.
- drop U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch (upstream)</changelog>
  <changelog author="sndirsch@suse.com" date="1696334400">- update to 1.8.7
  This release contains fixes for the issues reported in security
  advisory here:
    https://lists.x.org/archives/xorg-announce/2023-October/003424.html
  * fixes CVE-2023-43785 libX11: out-of-bounds memory access in
    _XkbReadKeySyms() (boo#1215683)
  * fixes CVE-2023-43786 libX11: stack exhaustion from infinite recursion
  in PutSubImage() (boo#1215684)
  * fixes CVE-2023-43787 libX11: integer overflow in XCreateImage()
    leading to a heap overflow (boo#1215685)
  along with:
  * Fail XOpenDisplay() if server-provided default visual is invalid (!233)
  * Bring XKB docs in line with actual implementation (!231, !228)
  * Xutil.h: declare XEmptyRegion() and XEqualRegion() as Bool (!225)
  * Assorted updates to en_US.UTF-8 compose keys (!213, !214, !215, !216,
    !217, !219, !220, !222, !223, !226, !227, !229)</changelog>
  <changelog author="sndirsch@suse.com" date="1700481600">- this update is needed due to jsc#PED-7282; it includes the
  security fix for CVE-2022-3555 (bsc#1204425, bsc#1208881) and
  a fix for a race condition in libX11 that causes various
  applications to crash randomly (boo#1181963)</changelog>
  <changelog author="pgajdos@suse.com" date="1709294400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="jengelh@inai.de" date="1709294401">- Trim descriptions for size (keep the big one for the prominently
  installed libX11-6).
- Spin documentation off to libX11-devel-doc, this saves buildroots
  800+ files and time (mandb is run in %posttrans).</changelog>
  <changelog author="sndirsch@suse.com" date="1711368000">- update to 1.8.8
  * Fix XIM input sometimes jumbled (#198, !236)
  (bsc#1252250)
  * Fix _XkbReadGetDeviceInfoReply for nButtons == dev-&gt;buttons (!237)
  (bsc#1252250)
  * Drop ifdefs for platforms that are no longer supported (!242, !243)
  * Assorted memory handling cleanups</changelog>
  <changelog author="sndirsch@suse.com" date="1712318400">- U_0001-xlibi18n-restore-parse_line1-for-WIN32-builds.patch
  U_0002-Revert-imDefLkup-Commit-first-info-in-XimCommitInfo.patch
  U_0003-Revert-ximcp-Unmark-to-fabricate-key-events-with-XKe.patch
  * fix regressions in 1.8.8 (issues #204, #205, #206, #207, #208)</changelog>
  <changelog author="sndirsch@suse.com" date="1712404800">- Update to 1.8.9
  * Fix regressions introduced in 1.8.8 (!245, !248) - this includes
    reverting for now the previous "Fix XIM input sometimes jumbled
    (#198, !236)"
- supersedes
  * U_0001-xlibi18n-restore-parse_line1-for-WIN32-builds.patch
  * U_0002-Revert-imDefLkup-Commit-first-info-in-XimCommitInfo.patch
  * U_0003-Revert-ximcp-Unmark-to-fabricate-key-events-with-XKe.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1722340800">- Update to 1.8.10; this release includes:
  * Re-fix XIM input sometimes jumbled (#205, #206, #207, #208, !246)
  * Fix various static analysis errors (!250)
  * Add compose sequences for Arabic hamza (!218), Ezh (!221), and
  hryvnia currency (!259)
  * Make colormap private interfaces thread safe (#215, !254)
  * Fix deadlock in XRebindKeysym() (!256)
  * Assorted memory handling cleanups (!251, !258)
  * Restore VAX support still in use by NetBSD (!257)</changelog>
  <changelog author="sndirsch@suse.com" date="1740484800">- U_CVE-2025-26597-0001-xkb-Fix-buffer-overflow-in-XkbChangeTypesOfKey.patch
  * Buffer overflow in XkbChangeTypesOfKey()
    (CVE-2025-26597, bsc#1237431)</changelog>
</package>
<package pkgid="579fef0ac277fce86994f2b9b76127110b7da2d3e477dcd7ee1bee6306bd0f45" name="libXvnc1" arch="x86_64">
  <version epoch="0" ver="1.14.1" rel="150700.4.3.1"/>
  <changelog author="dmueller@suse.com" date="1679227200">- update to 1.13.1:
  * x0vncserver can either crash itself, or crash the X server
    it is connected to
  * The servers might crash if the clipboard is updated just as
    a client is connected
  * The vncserver service can fail to start on SELinux system
    if ~/.vnc doesn't exist</changelog>
  <changelog author="joan.torres@suse.com" date="1680523200">- Fixes for bsc#1209283
  * Drop chown vnc:vnc calls in with-vnc-key.sh
  * Add TLSNone to -securitytypes to increase security in xvnc@.service</changelog>
  <changelog author="joan.torres@suse.com" date="1681473600">- xorg-x11-Xvnc requires dbus-1-x11 (bsc#1207730)</changelog>
  <changelog author="joan.torres@suse.com" date="1700568000">- introduced n_dont_sign_java_client.patch and changed
  n_tigervnc-date-time.patch to allow the build to be reproducible
  (bsc#1208478):
  * Dont sign the Java client so the jar file won't contain a
    signed file with a variable timestamp.
  * The signing was necessary for accessing the system clipboard
    when the Java client runs as an applet.
    (This shouldn't harm due to the deprecation of Java applets
    was done in version 9).</changelog>
  <changelog author="sndirsch@suse.com" date="1708344000">- buildrequire xorg-x11-server-source/-sdk &gt;= 21.1.11 and trigger
  rebuild with newer xorg-x11-server-source package (bsc#1219311,
  bsc#1219205)</changelog>
  <changelog author="joan.torres@suse.com" date="1708430400">- Cleanup specfile
  * Use the same format for all the patches.
  * Use autosetup to apply all the patches with -p1.
  * Clean number of sources.</changelog>
  <changelog author="sndirsch@suse.com" date="1708430401">- patches have been renamed
  * u_build_libXvnc_as_separate_library.patch --&gt;
    u_tigervnc-Build-libXvnc-as-separate-library.patch
  * n_vncserver.patch --&gt;
  n_tigervnc-Vncserver.patch
  * n_correct_path_in_desktop_file.patch --&gt;
  n_tigervnc-Correct-path-in-desktop-file.patch
  * n_tigervnc-date-time.patch --&gt;
  n_tigervnc-Date-time.patch
  * u_change-button-layout-in-ServerDialog.patch --&gt;
  u_tigervnc-Change-button-layout-in-ServerDialog.patch
  * n_dont_sign_java_client.patch --&gt;
  n_tigervnc-Dont-sign-java-client.patch
  * u_tigervnc-add-autoaccept-parameter.patch --&gt;
  u_tigervnc-Add-autoaccept-parameter.patch
  * u_tigervnc-ignore-epipe-on-write.patch
  u_tigervnc-Ignore-epipe-on-write.patch</changelog>
  <changelog author="joan.torres@suse.com" date="1708516800">- Set the URL at Source0.</changelog>
  <changelog author="pgajdos@suse.com" date="1708948800">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]</changelog>
  <changelog author="sndirsch@suse.com" date="1727179200">- added conflicts to patterns-wsl-tmpfiles as this patterns package
  creates a symlink from /tmp/.X11-unix to /mnt/wslg/.X11-unix and
  therefore prevents Xvnc from creating this needed directory
  (bsc#1230755)</changelog>
  <changelog author="fstrba@suse.com" date="1727352000">- Added patch:
  * n_tigervnc-reproducible-jar-mtime.patch
    + Use SOURCE_DATE_EPOCH for reproducible jar mtime
    + Applied if building with Java &gt;= 17</changelog>
  <changelog author="dimstar@opensuse.org" date="1729252800">- Do not ship rcFOO symlinks for CODE 16 (PED-266).
- No longer use update alternatives on CODE 16: there are no
  alternatives for vncviewer present.</changelog>
  <changelog author="dimstar@opensuse.org" date="1730116800">- Require /usr/bin/dbus-launch insted of dbus-1-x11: Do not rely on
  legacy dbus-1-x11 package, which is going away after moving to
  dbus-broker.</changelog>
  <changelog author="joan.torres@suse.com" date="1730721600">- Fix path on vncviewer desktop file. Use %use_update_alternative</changelog>
  <changelog author="joan.torres@suse.com" date="1730721601">- Update to tigervnc 1.14.1
  * Default installation of native viewer can once again handle VncAuth
  * Graphic acceleration now can now be disabled through the vncserver config file the same way as other features
  * Command vncpasswd can again correctly update passwords
  * Native viewer once again consider passwd file that contain more than one password valid
  * Native viewer can once again connect to RealVNC servers
  * Users of x0vncserver should no longer experience the mouse cursor moving to the upper left corner
  * H264 encoding no longer causes crashing
- Removed patches (no longer needed):
  * u_tigervnc-Change-button-layout-in-ServerDialog.patch
- Refreshed patches:
  * n_tigervnc-Date-time.patch
  * n_tigervnc-Dont-sign-java-client.patch
  * n_tigervnc-reproducible-jar-mtime.patch
  * u_tigervnc-Add-autoaccept-parameter.patch
  * u_tigervnc-Build-libXvnc-as-separate-library.patch
  * u_tigervnc-Ignore-epipe-on-write.patch</changelog>
  <changelog author="joan.torres@suse.com" date="1737460800">- Include SELinux module.
  * Fixes bsc#1235671.</changelog>
  <changelog author="joan.torres@suse.com" date="1737720000">- Fix and clarify suse_version macros.
  * %suse_version only defines major versions, e.g. 1500, 1600...
    using %suse_version &lt; 1550 might look like for version 15.4
    is true but it isn't.
  * Use %sle_version when targeting minor releases.</changelog>
  <changelog author="fvogt@suse.com" date="1737979200">- Remove wrong %selinux_requires from the main package, it's already
  in the -selinux subpackage</changelog>
  <changelog author="joan.torres@suse.com" date="1738065600">- Only add selinux on %suse_version &gt;= 1600</changelog>
  <changelog author="sndirsch@suse.com" date="1774699200">- U_Prevent-other-users-reading-x0vncserver-screen.patch
  * Prevent other users from observing the screen, or modifying
    what is sent to the client. Malicious attackers could even
    crash x0vncserver if they timed the modifications right.
    (CVE-2026-34352, bsc#1260871)</changelog>
</package>
<package pkgid="d23d32d407c37cf0be5ec3191fe0f8bf6e384fc77ab97e3cead42b68b3ef5c2c" name="libabsl2401_0_0" arch="x86_64">
  <version epoch="0" ver="20240116.3" rel="150600.19.3.15"/>
  <changelog author="rpm@fthiessen.de" date="1619352000">- Update to LTS version 20210324.1
  * Fixed missing absl::Cleanup
  * Fixed pkgconfig install path
- Dropped upstream merged Correctly-install-pkgconfig.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210324.2 (LTS):
  * No user visible changes, only build system related</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 20211102.0:
  * absl::Cord is now implemented as a b-tree. The new implementation offers
    improved performance in most workloads.
  * absl::SimpleHexAtoi() has been added to strings library for parsing
    hexadecimal strings</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646395200">- Fix build on SLE-12-SP5</changelog>
  <changelog author="jengelh@inai.de" date="1649073600">- Implement shlib packaging policy</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1656504000">- Add options-old.patch, options-cxx17.patch (boo#1203378)
  * Ensure ABI stability regardless of compiler settings per instruction in the header.</changelog>
  <changelog author="fvogt@suse.com" date="1656504001">- Remove obsolete 0%{suse_version} &lt; 1500 conditions</changelog>
  <changelog author="elimat@opensuse.org" date="1656849600">- Update to version 20220623.0
  What's New:
  * Added absl::AnyInvocable, a move-only function type.
  * Added absl::CordBuffer, a type for buffering data for eventual inclusion an
    absl::Cord, which is useful for writing zero-copy code.
  * Added support for command-line flags of type absl::optional&lt;T&gt;.
  Breaking Changes:
  * CMake builds now use the flag ABSL_BUILD_TESTING (default: OFF) to control
    whether or not unit tests are built.
  * The ABSL_DEPRECATED macro now works with the GCC compiler. GCC users that
    are experiencing new warnings can use -Wno-deprecated-declatations silence
  the warnings or use -Wno-error=deprecated-declarations to see warnings but
  not fail the build.
  * ABSL_CONST_INIT uses the C++20 keyword constinit when available. Some
    compilers are more strict about where this keyword must appear compared to
  the pre-C++20 implementation.
  * Bazel builds now depend on the bazelbuild/bazel-skylib repository.
    See Abseil's WORKSPACE file for an example of how to add this dependency.
  Other:
  * This will be the last release to support C++11. Future releases will require at least C++14.
- run spec-cleaner</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1657540800">- Add Fix-maes-msse41-leaking-into-pkgconfig.patch
  * Do not make programs compiled with abseil require new-ish CPUs (boo#1203379)</changelog>
  <changelog author="dmueller@suse.com" date="1664020800">- update to 20220623.1:
  * minor warning fix</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to 20230125.2
  What's New:
    The Abseil logging library has been released. This library
    provides facilities for writing short text messages about the
    status of a program to stderr, disk files, or other sinks
    (via an extension API). See the logging library documentation
    for more information.
    An extension point, AbslStringify(), allows user-defined types
    to seamlessly work with Abseil's string formatting functions
    like absl::StrCat() and absl::StrFormat().
    A library for computing CRC32C checksums has been added.
    Floating-point parsing now uses the Eisel-Lemire algorithm,
    which provides a significant speed improvement.
    The flags library now provides suggestions for the closest
    flag(s) in the case of misspelled flags.
    Using CMake to install Abseil now makes the installed artifacts
    (in particular absl/base/options.h) reflect the compiled ABI.
  Breaking Changes:
    Abseil now requires at least C++14 and follows Google's Foundational
    C++ Support Policy. See this table for a list of currently supported
    versions compilers, platforms, and build tools.
    The legacy spellings of the thread annotation macros/functions
    (e.g. GUARDED_BY()) have been removed by default in favor of the
    ABSL_ prefixed versions (e.g. ABSL_GUARDED_BY()) due to clashes with
    other libraries. The compatibility macro ABSL_LEGACY_THREAD_ANNOTATIONS
    can be defined on the compile command-line to temporarily restore these
    spellings, but this compatibility macro will be removed in the future.
  Known Issues
    The Abseil logging library in this release is not a feature-complete
    replacement for glog yet. VLOG and DFATAL are examples of features
    that have not yet been released.
- obsolete Fix-maes-msse41-leaking-into-pkgconfig.patch</changelog>
  <changelog author="adrian@suse.de" date="1685016000">- update to 20230125.3
  Details can be found on:
    https://github.com/abseil/abseil-cpp/releases/tag/20230125.3</changelog>
  <changelog author="fvogt@suse.com" date="1688040000">- Add baselibs.conf to make protobuf happy. Hopefully temporary.</changelog>
  <changelog author="fstrba@suse.com" date="1691582400">- Fix build on older systems by requiring C++17 compliant compiler
- Added patch:
  * cmake.patch
    + lower the cmake requirement to 3.5 in order to be able to
    build on SLE12SP5</changelog>
  <changelog author="adrian@suse.de" date="1694088000">- update to 20230802.0
  What's New:
  * Added the nullability library for designating the expected
    nullability of pointers. Currently these serve as annotations
    only, but it is expected that compilers will one day be able
    to use these annotations for diagnostic purposes.
  * Added the prefetch library as a portable layer for moving data
    into caches before it is read.
  * Abseil's hash tables now detect many more programming errors
    in debug and sanitizer builds.
  * Abseil's synchronization objects now differentiate absolute
    waits (when passed an absl::Time) from relative waits (when
    passed an absl::Duration) when the underlying platform supports
    differentiating these cases. This only makes a difference when
    system clocks are adjusted.
  * Abseil's flag parsing library includes additional methods that
    make it easier to use when another library also expects to be
    able to parse flags.
  * absl::string_view is now available as a smaller target,
    @com_google_absl//absl/strings:string_view, so that users may
    use this library without depending on the much larger
    @com_google_absl//absl/strings target.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1696593600">- update to 20230802.1:
  * Add StdcppWaiter to the end of the list of waiter
    implementations</changelog>
  <changelog author="dmueller@suse.com" date="1705665600">- fix build for non-SUSE distributions</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1709467200">- update to 20240116.1:
  * Add absl::NoDestructor&lt;T&gt; to simplify defining static types
    that do not need to be destructed upon program exit.
  * Add configurable verbose logging (also known as VLOG).
  * Added absl::Overload(), which returns a functor that provides
    overloads based on the functors passed to it. Note that this
    functionality requires C++17 or newer.
  * Breaking Change: AbslHashValue() no longer accepts C-style
    arrays as a parameter, caller need to wrap C-string literals in
    absl::string_view.
  * Breaking Change: absl::weak_equality and absl::strong_equality
    have been removed. The corresponding std types were removed
    before C++20 was finalized</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1712836800">- SLE-only: import upstream patch to fix build with gcc7 in C++17
  mode: hash-fix-gcc7-cpp17-build.patch (bsc#1222261)
  + Upstream commit bb83aceacb554e79e7cd2404856f0be30bd00303</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1739966400">- Update to 20240116.3
  * Fix potential integer overflow in hash container create/resize (bsc#1236438)
    The sized constructors, reserve(), and rehash() methods of
    absl::{flat,node}_hash_{set,map} did not impose an upper bound on
    their size argument. As a result, it was possible for a caller to pass
    a very large size that would cause an integer overflow when computing
    the size of the container's backing store. Subsequent accesses to the
    container might then access out-of-bounds memory.
- from version 20240116.2
  * Prevent overflow in absl::CEscape(). Strings larger than 1 GiB on a
    platform with a 32-bit size_t could potentially overflow size_t in
    `CEscapedLength()`, resulting in an undersized allocation. The resulting
    write in `CEscapeAndAppendInternal()` would then write beyond the bounds
    of the output buffer.
  * A second overflow, where the calculated escaped length is added to the
    size of the string being appended to, is also fixed. In both cases the
    program will now abort prior to the overflow.
  * Workaround for NVIDIA C++ compiler being unable to parse variadic
    expansions in range of range-based for loop</changelog>
</package>
<package pkgid="2b7e45f8c51d933a1491a88a9e2eb7f64ef86ec74c856c7478a3810f6786fe8e" name="libabsl2401_0_0" arch="x86_64">
  <version epoch="0" ver="20240116.3" rel="150600.19.6.1"/>
  <changelog author="rpm@fthiessen.de" date="1619352000">- Update to LTS version 20210324.1
  * Fixed missing absl::Cleanup
  * Fixed pkgconfig install path
- Dropped upstream merged Correctly-install-pkgconfig.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210324.2 (LTS):
  * No user visible changes, only build system related</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 20211102.0:
  * absl::Cord is now implemented as a b-tree. The new implementation offers
    improved performance in most workloads.
  * absl::SimpleHexAtoi() has been added to strings library for parsing
    hexadecimal strings</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646395200">- Fix build on SLE-12-SP5</changelog>
  <changelog author="jengelh@inai.de" date="1649073600">- Implement shlib packaging policy</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1656504000">- Add options-old.patch, options-cxx17.patch (boo#1203378)
  * Ensure ABI stability regardless of compiler settings per instruction in the header.</changelog>
  <changelog author="fvogt@suse.com" date="1656504001">- Remove obsolete 0%{suse_version} &lt; 1500 conditions</changelog>
  <changelog author="elimat@opensuse.org" date="1656849600">- Update to version 20220623.0
  What's New:
  * Added absl::AnyInvocable, a move-only function type.
  * Added absl::CordBuffer, a type for buffering data for eventual inclusion an
    absl::Cord, which is useful for writing zero-copy code.
  * Added support for command-line flags of type absl::optional&lt;T&gt;.
  Breaking Changes:
  * CMake builds now use the flag ABSL_BUILD_TESTING (default: OFF) to control
    whether or not unit tests are built.
  * The ABSL_DEPRECATED macro now works with the GCC compiler. GCC users that
    are experiencing new warnings can use -Wno-deprecated-declatations silence
  the warnings or use -Wno-error=deprecated-declarations to see warnings but
  not fail the build.
  * ABSL_CONST_INIT uses the C++20 keyword constinit when available. Some
    compilers are more strict about where this keyword must appear compared to
  the pre-C++20 implementation.
  * Bazel builds now depend on the bazelbuild/bazel-skylib repository.
    See Abseil's WORKSPACE file for an example of how to add this dependency.
  Other:
  * This will be the last release to support C++11. Future releases will require at least C++14.
- run spec-cleaner</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1657540800">- Add Fix-maes-msse41-leaking-into-pkgconfig.patch
  * Do not make programs compiled with abseil require new-ish CPUs (boo#1203379)</changelog>
  <changelog author="dmueller@suse.com" date="1664020800">- update to 20220623.1:
  * minor warning fix</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to 20230125.2
  What's New:
    The Abseil logging library has been released. This library
    provides facilities for writing short text messages about the
    status of a program to stderr, disk files, or other sinks
    (via an extension API). See the logging library documentation
    for more information.
    An extension point, AbslStringify(), allows user-defined types
    to seamlessly work with Abseil's string formatting functions
    like absl::StrCat() and absl::StrFormat().
    A library for computing CRC32C checksums has been added.
    Floating-point parsing now uses the Eisel-Lemire algorithm,
    which provides a significant speed improvement.
    The flags library now provides suggestions for the closest
    flag(s) in the case of misspelled flags.
    Using CMake to install Abseil now makes the installed artifacts
    (in particular absl/base/options.h) reflect the compiled ABI.
  Breaking Changes:
    Abseil now requires at least C++14 and follows Google's Foundational
    C++ Support Policy. See this table for a list of currently supported
    versions compilers, platforms, and build tools.
    The legacy spellings of the thread annotation macros/functions
    (e.g. GUARDED_BY()) have been removed by default in favor of the
    ABSL_ prefixed versions (e.g. ABSL_GUARDED_BY()) due to clashes with
    other libraries. The compatibility macro ABSL_LEGACY_THREAD_ANNOTATIONS
    can be defined on the compile command-line to temporarily restore these
    spellings, but this compatibility macro will be removed in the future.
  Known Issues
    The Abseil logging library in this release is not a feature-complete
    replacement for glog yet. VLOG and DFATAL are examples of features
    that have not yet been released.
- obsolete Fix-maes-msse41-leaking-into-pkgconfig.patch</changelog>
  <changelog author="adrian@suse.de" date="1685016000">- update to 20230125.3
  Details can be found on:
    https://github.com/abseil/abseil-cpp/releases/tag/20230125.3</changelog>
  <changelog author="fvogt@suse.com" date="1688040000">- Add baselibs.conf to make protobuf happy. Hopefully temporary.</changelog>
  <changelog author="fstrba@suse.com" date="1691582400">- Fix build on older systems by requiring C++17 compliant compiler
- Added patch:
  * cmake.patch
    + lower the cmake requirement to 3.5 in order to be able to
    build on SLE12SP5</changelog>
  <changelog author="adrian@suse.de" date="1694088000">- update to 20230802.0
  What's New:
  * Added the nullability library for designating the expected
    nullability of pointers. Currently these serve as annotations
    only, but it is expected that compilers will one day be able
    to use these annotations for diagnostic purposes.
  * Added the prefetch library as a portable layer for moving data
    into caches before it is read.
  * Abseil's hash tables now detect many more programming errors
    in debug and sanitizer builds.
  * Abseil's synchronization objects now differentiate absolute
    waits (when passed an absl::Time) from relative waits (when
    passed an absl::Duration) when the underlying platform supports
    differentiating these cases. This only makes a difference when
    system clocks are adjusted.
  * Abseil's flag parsing library includes additional methods that
    make it easier to use when another library also expects to be
    able to parse flags.
  * absl::string_view is now available as a smaller target,
    @com_google_absl//absl/strings:string_view, so that users may
    use this library without depending on the much larger
    @com_google_absl//absl/strings target.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1696593600">- update to 20230802.1:
  * Add StdcppWaiter to the end of the list of waiter
    implementations</changelog>
  <changelog author="dmueller@suse.com" date="1705665600">- fix build for non-SUSE distributions</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1709467200">- update to 20240116.1:
  * Add absl::NoDestructor&lt;T&gt; to simplify defining static types
    that do not need to be destructed upon program exit.
  * Add configurable verbose logging (also known as VLOG).
  * Added absl::Overload(), which returns a functor that provides
    overloads based on the functors passed to it. Note that this
    functionality requires C++17 or newer.
  * Breaking Change: AbslHashValue() no longer accepts C-style
    arrays as a parameter, caller need to wrap C-string literals in
    absl::string_view.
  * Breaking Change: absl::weak_equality and absl::strong_equality
    have been removed. The corresponding std types were removed
    before C++20 was finalized</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1712836800">- SLE-only: import upstream patch to fix build with gcc7 in C++17
  mode: hash-fix-gcc7-cpp17-build.patch (bsc#1222261)
  + Upstream commit bb83aceacb554e79e7cd2404856f0be30bd00303</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1739966400">- Update to 20240116.3
  * Fix potential integer overflow in hash container create/resize (bsc#1236438)
    The sized constructors, reserve(), and rehash() methods of
    absl::{flat,node}_hash_{set,map} did not impose an upper bound on
    their size argument. As a result, it was possible for a caller to pass
    a very large size that would cause an integer overflow when computing
    the size of the container's backing store. Subsequent accesses to the
    container might then access out-of-bounds memory. (bsc#1237543, CVE-2025-0838)
- from version 20240116.2
  * Prevent overflow in absl::CEscape(). Strings larger than 1 GiB on a
    platform with a 32-bit size_t could potentially overflow size_t in
    `CEscapedLength()`, resulting in an undersized allocation. The resulting
    write in `CEscapeAndAppendInternal()` would then write beyond the bounds
    of the output buffer.
  * A second overflow, where the calculated escaped length is added to the
    size of the string being appended to, is also fixed. In both cases the
    program will now abort prior to the overflow.
  * Workaround for NVIDIA C++ compiler being unable to parse variadic
    expansions in range of range-based for loop</changelog>
</package>
<package pkgid="b84f6a386c741e615d2cdf137e8d2859a0453a564f399ae31ec4bd966a961409" name="libabsl2401_0_0-32bit" arch="x86_64">
  <version epoch="0" ver="20240116.3" rel="150600.19.3.15"/>
  <changelog author="rpm@fthiessen.de" date="1619352000">- Update to LTS version 20210324.1
  * Fixed missing absl::Cleanup
  * Fixed pkgconfig install path
- Dropped upstream merged Correctly-install-pkgconfig.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210324.2 (LTS):
  * No user visible changes, only build system related</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 20211102.0:
  * absl::Cord is now implemented as a b-tree. The new implementation offers
    improved performance in most workloads.
  * absl::SimpleHexAtoi() has been added to strings library for parsing
    hexadecimal strings</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646395200">- Fix build on SLE-12-SP5</changelog>
  <changelog author="jengelh@inai.de" date="1649073600">- Implement shlib packaging policy</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1656504000">- Add options-old.patch, options-cxx17.patch (boo#1203378)
  * Ensure ABI stability regardless of compiler settings per instruction in the header.</changelog>
  <changelog author="fvogt@suse.com" date="1656504001">- Remove obsolete 0%{suse_version} &lt; 1500 conditions</changelog>
  <changelog author="elimat@opensuse.org" date="1656849600">- Update to version 20220623.0
  What's New:
  * Added absl::AnyInvocable, a move-only function type.
  * Added absl::CordBuffer, a type for buffering data for eventual inclusion an
    absl::Cord, which is useful for writing zero-copy code.
  * Added support for command-line flags of type absl::optional&lt;T&gt;.
  Breaking Changes:
  * CMake builds now use the flag ABSL_BUILD_TESTING (default: OFF) to control
    whether or not unit tests are built.
  * The ABSL_DEPRECATED macro now works with the GCC compiler. GCC users that
    are experiencing new warnings can use -Wno-deprecated-declatations silence
  the warnings or use -Wno-error=deprecated-declarations to see warnings but
  not fail the build.
  * ABSL_CONST_INIT uses the C++20 keyword constinit when available. Some
    compilers are more strict about where this keyword must appear compared to
  the pre-C++20 implementation.
  * Bazel builds now depend on the bazelbuild/bazel-skylib repository.
    See Abseil's WORKSPACE file for an example of how to add this dependency.
  Other:
  * This will be the last release to support C++11. Future releases will require at least C++14.
- run spec-cleaner</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1657540800">- Add Fix-maes-msse41-leaking-into-pkgconfig.patch
  * Do not make programs compiled with abseil require new-ish CPUs (boo#1203379)</changelog>
  <changelog author="dmueller@suse.com" date="1664020800">- update to 20220623.1:
  * minor warning fix</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to 20230125.2
  What's New:
    The Abseil logging library has been released. This library
    provides facilities for writing short text messages about the
    status of a program to stderr, disk files, or other sinks
    (via an extension API). See the logging library documentation
    for more information.
    An extension point, AbslStringify(), allows user-defined types
    to seamlessly work with Abseil's string formatting functions
    like absl::StrCat() and absl::StrFormat().
    A library for computing CRC32C checksums has been added.
    Floating-point parsing now uses the Eisel-Lemire algorithm,
    which provides a significant speed improvement.
    The flags library now provides suggestions for the closest
    flag(s) in the case of misspelled flags.
    Using CMake to install Abseil now makes the installed artifacts
    (in particular absl/base/options.h) reflect the compiled ABI.
  Breaking Changes:
    Abseil now requires at least C++14 and follows Google's Foundational
    C++ Support Policy. See this table for a list of currently supported
    versions compilers, platforms, and build tools.
    The legacy spellings of the thread annotation macros/functions
    (e.g. GUARDED_BY()) have been removed by default in favor of the
    ABSL_ prefixed versions (e.g. ABSL_GUARDED_BY()) due to clashes with
    other libraries. The compatibility macro ABSL_LEGACY_THREAD_ANNOTATIONS
    can be defined on the compile command-line to temporarily restore these
    spellings, but this compatibility macro will be removed in the future.
  Known Issues
    The Abseil logging library in this release is not a feature-complete
    replacement for glog yet. VLOG and DFATAL are examples of features
    that have not yet been released.
- obsolete Fix-maes-msse41-leaking-into-pkgconfig.patch</changelog>
  <changelog author="adrian@suse.de" date="1685016000">- update to 20230125.3
  Details can be found on:
    https://github.com/abseil/abseil-cpp/releases/tag/20230125.3</changelog>
  <changelog author="fvogt@suse.com" date="1688040000">- Add baselibs.conf to make protobuf happy. Hopefully temporary.</changelog>
  <changelog author="fstrba@suse.com" date="1691582400">- Fix build on older systems by requiring C++17 compliant compiler
- Added patch:
  * cmake.patch
    + lower the cmake requirement to 3.5 in order to be able to
    build on SLE12SP5</changelog>
  <changelog author="adrian@suse.de" date="1694088000">- update to 20230802.0
  What's New:
  * Added the nullability library for designating the expected
    nullability of pointers. Currently these serve as annotations
    only, but it is expected that compilers will one day be able
    to use these annotations for diagnostic purposes.
  * Added the prefetch library as a portable layer for moving data
    into caches before it is read.
  * Abseil's hash tables now detect many more programming errors
    in debug and sanitizer builds.
  * Abseil's synchronization objects now differentiate absolute
    waits (when passed an absl::Time) from relative waits (when
    passed an absl::Duration) when the underlying platform supports
    differentiating these cases. This only makes a difference when
    system clocks are adjusted.
  * Abseil's flag parsing library includes additional methods that
    make it easier to use when another library also expects to be
    able to parse flags.
  * absl::string_view is now available as a smaller target,
    @com_google_absl//absl/strings:string_view, so that users may
    use this library without depending on the much larger
    @com_google_absl//absl/strings target.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1696593600">- update to 20230802.1:
  * Add StdcppWaiter to the end of the list of waiter
    implementations</changelog>
  <changelog author="dmueller@suse.com" date="1705665600">- fix build for non-SUSE distributions</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1709467200">- update to 20240116.1:
  * Add absl::NoDestructor&lt;T&gt; to simplify defining static types
    that do not need to be destructed upon program exit.
  * Add configurable verbose logging (also known as VLOG).
  * Added absl::Overload(), which returns a functor that provides
    overloads based on the functors passed to it. Note that this
    functionality requires C++17 or newer.
  * Breaking Change: AbslHashValue() no longer accepts C-style
    arrays as a parameter, caller need to wrap C-string literals in
    absl::string_view.
  * Breaking Change: absl::weak_equality and absl::strong_equality
    have been removed. The corresponding std types were removed
    before C++20 was finalized</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1712836800">- SLE-only: import upstream patch to fix build with gcc7 in C++17
  mode: hash-fix-gcc7-cpp17-build.patch (bsc#1222261)
  + Upstream commit bb83aceacb554e79e7cd2404856f0be30bd00303</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1739966400">- Update to 20240116.3
  * Fix potential integer overflow in hash container create/resize (bsc#1236438)
    The sized constructors, reserve(), and rehash() methods of
    absl::{flat,node}_hash_{set,map} did not impose an upper bound on
    their size argument. As a result, it was possible for a caller to pass
    a very large size that would cause an integer overflow when computing
    the size of the container's backing store. Subsequent accesses to the
    container might then access out-of-bounds memory.
- from version 20240116.2
  * Prevent overflow in absl::CEscape(). Strings larger than 1 GiB on a
    platform with a 32-bit size_t could potentially overflow size_t in
    `CEscapedLength()`, resulting in an undersized allocation. The resulting
    write in `CEscapeAndAppendInternal()` would then write beyond the bounds
    of the output buffer.
  * A second overflow, where the calculated escaped length is added to the
    size of the string being appended to, is also fixed. In both cases the
    program will now abort prior to the overflow.
  * Workaround for NVIDIA C++ compiler being unable to parse variadic
    expansions in range of range-based for loop</changelog>
</package>
<package pkgid="d344534b1541d2f5290202a3ee71aa9b252211d33a158a84281d823ed6ee43d4" name="libabsl2401_0_0-32bit" arch="x86_64">
  <version epoch="0" ver="20240116.3" rel="150600.19.6.1"/>
  <changelog author="rpm@fthiessen.de" date="1619352000">- Update to LTS version 20210324.1
  * Fixed missing absl::Cleanup
  * Fixed pkgconfig install path
- Dropped upstream merged Correctly-install-pkgconfig.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210324.2 (LTS):
  * No user visible changes, only build system related</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 20211102.0:
  * absl::Cord is now implemented as a b-tree. The new implementation offers
    improved performance in most workloads.
  * absl::SimpleHexAtoi() has been added to strings library for parsing
    hexadecimal strings</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646395200">- Fix build on SLE-12-SP5</changelog>
  <changelog author="jengelh@inai.de" date="1649073600">- Implement shlib packaging policy</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1656504000">- Add options-old.patch, options-cxx17.patch (boo#1203378)
  * Ensure ABI stability regardless of compiler settings per instruction in the header.</changelog>
  <changelog author="fvogt@suse.com" date="1656504001">- Remove obsolete 0%{suse_version} &lt; 1500 conditions</changelog>
  <changelog author="elimat@opensuse.org" date="1656849600">- Update to version 20220623.0
  What's New:
  * Added absl::AnyInvocable, a move-only function type.
  * Added absl::CordBuffer, a type for buffering data for eventual inclusion an
    absl::Cord, which is useful for writing zero-copy code.
  * Added support for command-line flags of type absl::optional&lt;T&gt;.
  Breaking Changes:
  * CMake builds now use the flag ABSL_BUILD_TESTING (default: OFF) to control
    whether or not unit tests are built.
  * The ABSL_DEPRECATED macro now works with the GCC compiler. GCC users that
    are experiencing new warnings can use -Wno-deprecated-declatations silence
  the warnings or use -Wno-error=deprecated-declarations to see warnings but
  not fail the build.
  * ABSL_CONST_INIT uses the C++20 keyword constinit when available. Some
    compilers are more strict about where this keyword must appear compared to
  the pre-C++20 implementation.
  * Bazel builds now depend on the bazelbuild/bazel-skylib repository.
    See Abseil's WORKSPACE file for an example of how to add this dependency.
  Other:
  * This will be the last release to support C++11. Future releases will require at least C++14.
- run spec-cleaner</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1657540800">- Add Fix-maes-msse41-leaking-into-pkgconfig.patch
  * Do not make programs compiled with abseil require new-ish CPUs (boo#1203379)</changelog>
  <changelog author="dmueller@suse.com" date="1664020800">- update to 20220623.1:
  * minor warning fix</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to 20230125.2
  What's New:
    The Abseil logging library has been released. This library
    provides facilities for writing short text messages about the
    status of a program to stderr, disk files, or other sinks
    (via an extension API). See the logging library documentation
    for more information.
    An extension point, AbslStringify(), allows user-defined types
    to seamlessly work with Abseil's string formatting functions
    like absl::StrCat() and absl::StrFormat().
    A library for computing CRC32C checksums has been added.
    Floating-point parsing now uses the Eisel-Lemire algorithm,
    which provides a significant speed improvement.
    The flags library now provides suggestions for the closest
    flag(s) in the case of misspelled flags.
    Using CMake to install Abseil now makes the installed artifacts
    (in particular absl/base/options.h) reflect the compiled ABI.
  Breaking Changes:
    Abseil now requires at least C++14 and follows Google's Foundational
    C++ Support Policy. See this table for a list of currently supported
    versions compilers, platforms, and build tools.
    The legacy spellings of the thread annotation macros/functions
    (e.g. GUARDED_BY()) have been removed by default in favor of the
    ABSL_ prefixed versions (e.g. ABSL_GUARDED_BY()) due to clashes with
    other libraries. The compatibility macro ABSL_LEGACY_THREAD_ANNOTATIONS
    can be defined on the compile command-line to temporarily restore these
    spellings, but this compatibility macro will be removed in the future.
  Known Issues
    The Abseil logging library in this release is not a feature-complete
    replacement for glog yet. VLOG and DFATAL are examples of features
    that have not yet been released.
- obsolete Fix-maes-msse41-leaking-into-pkgconfig.patch</changelog>
  <changelog author="adrian@suse.de" date="1685016000">- update to 20230125.3
  Details can be found on:
    https://github.com/abseil/abseil-cpp/releases/tag/20230125.3</changelog>
  <changelog author="fvogt@suse.com" date="1688040000">- Add baselibs.conf to make protobuf happy. Hopefully temporary.</changelog>
  <changelog author="fstrba@suse.com" date="1691582400">- Fix build on older systems by requiring C++17 compliant compiler
- Added patch:
  * cmake.patch
    + lower the cmake requirement to 3.5 in order to be able to
    build on SLE12SP5</changelog>
  <changelog author="adrian@suse.de" date="1694088000">- update to 20230802.0
  What's New:
  * Added the nullability library for designating the expected
    nullability of pointers. Currently these serve as annotations
    only, but it is expected that compilers will one day be able
    to use these annotations for diagnostic purposes.
  * Added the prefetch library as a portable layer for moving data
    into caches before it is read.
  * Abseil's hash tables now detect many more programming errors
    in debug and sanitizer builds.
  * Abseil's synchronization objects now differentiate absolute
    waits (when passed an absl::Time) from relative waits (when
    passed an absl::Duration) when the underlying platform supports
    differentiating these cases. This only makes a difference when
    system clocks are adjusted.
  * Abseil's flag parsing library includes additional methods that
    make it easier to use when another library also expects to be
    able to parse flags.
  * absl::string_view is now available as a smaller target,
    @com_google_absl//absl/strings:string_view, so that users may
    use this library without depending on the much larger
    @com_google_absl//absl/strings target.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1696593600">- update to 20230802.1:
  * Add StdcppWaiter to the end of the list of waiter
    implementations</changelog>
  <changelog author="dmueller@suse.com" date="1705665600">- fix build for non-SUSE distributions</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1709467200">- update to 20240116.1:
  * Add absl::NoDestructor&lt;T&gt; to simplify defining static types
    that do not need to be destructed upon program exit.
  * Add configurable verbose logging (also known as VLOG).
  * Added absl::Overload(), which returns a functor that provides
    overloads based on the functors passed to it. Note that this
    functionality requires C++17 or newer.
  * Breaking Change: AbslHashValue() no longer accepts C-style
    arrays as a parameter, caller need to wrap C-string literals in
    absl::string_view.
  * Breaking Change: absl::weak_equality and absl::strong_equality
    have been removed. The corresponding std types were removed
    before C++20 was finalized</changelog>
  <changelog author="eugenio.paolantonio@suse.com" date="1712836800">- SLE-only: import upstream patch to fix build with gcc7 in C++17
  mode: hash-fix-gcc7-cpp17-build.patch (bsc#1222261)
  + Upstream commit bb83aceacb554e79e7cd2404856f0be30bd00303</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1739966400">- Update to 20240116.3
  * Fix potential integer overflow in hash container create/resize (bsc#1236438)
    The sized constructors, reserve(), and rehash() methods of
    absl::{flat,node}_hash_{set,map} did not impose an upper bound on
    their size argument. As a result, it was possible for a caller to pass
    a very large size that would cause an integer overflow when computing
    the size of the container's backing store. Subsequent accesses to the
    container might then access out-of-bounds memory. (bsc#1237543, CVE-2025-0838)
- from version 20240116.2
  * Prevent overflow in absl::CEscape(). Strings larger than 1 GiB on a
    platform with a 32-bit size_t could potentially overflow size_t in
    `CEscapedLength()`, resulting in an undersized allocation. The resulting
    write in `CEscapeAndAppendInternal()` would then write beyond the bounds
    of the output buffer.
  * A second overflow, where the calculated escaped length is added to the
    size of the string being appended to, is also fixed. In both cases the
    program will now abort prior to the overflow.
  * Workaround for NVIDIA C++ compiler being unable to parse variadic
    expansions in range of range-based for loop</changelog>
</package>
<package pkgid="4697dbe716546c3a812eef1f405ed4449d3c7e768a9dab73bf3c5f0dc8e9b515" name="libaio" arch="src">
  <version epoch="0" ver="0.3.113" rel="150600.15.3.1"/>
  <changelog author="uli@suse.com" date="1317816000">- cross-build fix: use %__cc macro</changelog>
  <changelog author="ro@suse.de" date="1322481600">- fix lib64 platform check</changelog>
  <changelog author="jengelh@medozas.de" date="1322481601">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Employ shlib packaging</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="mvyskocil@suse.cz" date="1329393600">- fix typo versoin/version</changelog>
  <changelog author="coolo@suse.com" date="1329480000">- fix baselibs.conf after shlib split</changelog>
  <changelog author="dmueller@suse.com" date="1362139200">- Add libaio-aarch64-support.diff:
  * add support for aarch64
- Add libaio-generic-arch.diff:
  * support all archtes (also aarch64)</changelog>
  <changelog author="fcrozat@suse.com" date="1409054400">- Add obsoletes/provides to baselibs.conf (bsc#881698)</changelog>
  <changelog author="meissner@suse.com" date="1460894400">- libaio-optflags.diff: readd -stdlib to allow -fstack-protector-strong
  builds (unclear why it was not allowed)
- 01_link_libgcc.patch, 02_libdevdir.patch: refreshed</changelog>
  <changelog author="kukuk@suse.de" date="1527163200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="schwab@suse.de" date="1548936000">- riscv-support.patch: Add support for RISC-V</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133233).</changelog>
  <changelog author="tchvatal@suse.com" date="1564574400">- Update to 0.3.112:
  * Various patches for architectures/etc
- Update url
- Update install
- Enable tests
- Remove mostly merged patches or differently fixed issues:
  * libaio-aarch64-support.diff
  * libaio-generic-arch.diff
  * libaio-optflags.diff
  * 00_arches.patch
  * 00_arches_sh.patch
  * 01_link_libgcc.patch
  * 02_libdevdir.patch
  * 03_man_errors.patch
  * riscv-support.patch</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1566907200">-  Add _constraints for PowerPC to avoid OOM at build time</changelog>
  <changelog author="lduncan@suse.com" date="1613390400">- Update to version libaio0.3.112+29.696a5e6483ba:
  * Fix test issue with gcc-11 (bsc#1181869)
  * harness: Skip the test if io_pgetevents() is not implemented
  * harness: Print better error messages on error conditions in 22.t
  * harness: Fix PROT_WRITE mmap check
  * harness: fix read into PROT_WRITE mmap test
  * harness: skip 22.p if async_poll isn't supported
  * harness: Handle -ENOTSUP from io_submit() with RWF_NOWAIT
  * harness: Add fallback code for filesystems not supporting O_DIRECT
  * harness: add support for skipping tests
  * harness: Make the test exit with a code matching the pass/fail state</changelog>
  <changelog author="dmueller@suse.com" date="1651147200">- update to 0.3.113:
  * cases/16.t: loongarch only supports eventfd2
  * Add loongarch to supported architectures in libaio.spec
  * Add endian detection and bit width detection for loongarch
  * Use generic syscall number schema for loongarch
  * Fix struct io_iocb_vector padding for 32bit architectures
  * struct io_iocb_sockaddr padding for 32bit architectures
  * Verify structure padding is correct at build time
  * harness: add test for aio poll missed events</changelog>
  <changelog author="dmueller@suse.com" date="1657627200">- add fix-splice-signature.patch to fix build on 32bit</changelog>
  <changelog author="dmueller@suse.com" date="1663934400">- skip testsuite on qemu_linux_user builds</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Make the package respect %optflags and disable LTO.</changelog>
  <changelog author="pgajdos@suse.com" date="1709208000">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
</package>
<package pkgid="d0629c585efb1da681283b72d72a007b7ec65e1a5abb55ca460dc40cb2858483" name="libaio-devel" arch="x86_64">
  <version epoch="0" ver="0.3.113" rel="150600.15.3.1"/>
  <changelog author="meissner@suse.com" date="1460894400">- libaio-optflags.diff: readd -stdlib to allow -fstack-protector-strong
  builds (unclear why it was not allowed)
- 01_link_libgcc.patch, 02_libdevdir.patch: refreshed</changelog>
  <changelog author="kukuk@suse.de" date="1527163200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="schwab@suse.de" date="1548936000">- riscv-support.patch: Add support for RISC-V</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133233).</changelog>
  <changelog author="tchvatal@suse.com" date="1564574400">- Update to 0.3.112:
  * Various patches for architectures/etc
- Update url
- Update install
- Enable tests
- Remove mostly merged patches or differently fixed issues:
  * libaio-aarch64-support.diff
  * libaio-generic-arch.diff
  * libaio-optflags.diff
  * 00_arches.patch
  * 00_arches_sh.patch
  * 01_link_libgcc.patch
  * 02_libdevdir.patch
  * 03_man_errors.patch
  * riscv-support.patch</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1566907200">-  Add _constraints for PowerPC to avoid OOM at build time</changelog>
  <changelog author="lduncan@suse.com" date="1613390400">- Update to version libaio0.3.112+29.696a5e6483ba:
  * Fix test issue with gcc-11 (bsc#1181869)
  * harness: Skip the test if io_pgetevents() is not implemented
  * harness: Print better error messages on error conditions in 22.t
  * harness: Fix PROT_WRITE mmap check
  * harness: fix read into PROT_WRITE mmap test
  * harness: skip 22.p if async_poll isn't supported
  * harness: Handle -ENOTSUP from io_submit() with RWF_NOWAIT
  * harness: Add fallback code for filesystems not supporting O_DIRECT
  * harness: add support for skipping tests
  * harness: Make the test exit with a code matching the pass/fail state</changelog>
  <changelog author="dmueller@suse.com" date="1651147200">- update to 0.3.113:
  * cases/16.t: loongarch only supports eventfd2
  * Add loongarch to supported architectures in libaio.spec
  * Add endian detection and bit width detection for loongarch
  * Use generic syscall number schema for loongarch
  * Fix struct io_iocb_vector padding for 32bit architectures
  * struct io_iocb_sockaddr padding for 32bit architectures
  * Verify structure padding is correct at build time
  * harness: add test for aio poll missed events</changelog>
  <changelog author="dmueller@suse.com" date="1657627200">- add fix-splice-signature.patch to fix build on 32bit</changelog>
  <changelog author="dmueller@suse.com" date="1663934400">- skip testsuite on qemu_linux_user builds</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Make the package respect %optflags and disable LTO.</changelog>
  <changelog author="pgajdos@suse.com" date="1709208000">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
</package>
<package pkgid="214079909b1a87cf7d4ed48faa73a810f8a01eeb5a50c20b45854cf43a21a8e9" name="libaio1" arch="x86_64">
  <version epoch="0" ver="0.3.113" rel="150600.15.3.1"/>
  <changelog author="meissner@suse.com" date="1460894400">- libaio-optflags.diff: readd -stdlib to allow -fstack-protector-strong
  builds (unclear why it was not allowed)
- 01_link_libgcc.patch, 02_libdevdir.patch: refreshed</changelog>
  <changelog author="kukuk@suse.de" date="1527163200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="schwab@suse.de" date="1548936000">- riscv-support.patch: Add support for RISC-V</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133233).</changelog>
  <changelog author="tchvatal@suse.com" date="1564574400">- Update to 0.3.112:
  * Various patches for architectures/etc
- Update url
- Update install
- Enable tests
- Remove mostly merged patches or differently fixed issues:
  * libaio-aarch64-support.diff
  * libaio-generic-arch.diff
  * libaio-optflags.diff
  * 00_arches.patch
  * 00_arches_sh.patch
  * 01_link_libgcc.patch
  * 02_libdevdir.patch
  * 03_man_errors.patch
  * riscv-support.patch</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1566907200">-  Add _constraints for PowerPC to avoid OOM at build time</changelog>
  <changelog author="lduncan@suse.com" date="1613390400">- Update to version libaio0.3.112+29.696a5e6483ba:
  * Fix test issue with gcc-11 (bsc#1181869)
  * harness: Skip the test if io_pgetevents() is not implemented
  * harness: Print better error messages on error conditions in 22.t
  * harness: Fix PROT_WRITE mmap check
  * harness: fix read into PROT_WRITE mmap test
  * harness: skip 22.p if async_poll isn't supported
  * harness: Handle -ENOTSUP from io_submit() with RWF_NOWAIT
  * harness: Add fallback code for filesystems not supporting O_DIRECT
  * harness: add support for skipping tests
  * harness: Make the test exit with a code matching the pass/fail state</changelog>
  <changelog author="dmueller@suse.com" date="1651147200">- update to 0.3.113:
  * cases/16.t: loongarch only supports eventfd2
  * Add loongarch to supported architectures in libaio.spec
  * Add endian detection and bit width detection for loongarch
  * Use generic syscall number schema for loongarch
  * Fix struct io_iocb_vector padding for 32bit architectures
  * struct io_iocb_sockaddr padding for 32bit architectures
  * Verify structure padding is correct at build time
  * harness: add test for aio poll missed events</changelog>
  <changelog author="dmueller@suse.com" date="1657627200">- add fix-splice-signature.patch to fix build on 32bit</changelog>
  <changelog author="dmueller@suse.com" date="1663934400">- skip testsuite on qemu_linux_user builds</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Make the package respect %optflags and disable LTO.</changelog>
  <changelog author="pgajdos@suse.com" date="1709208000">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
</package>
<package pkgid="2b358fcc08f725772c74d5d8dee986ee3163a10b1c331013871ff1894dc20040" name="libapparmor" arch="src">
  <version epoch="0" ver="3.1.7" rel="150600.5.12.2"/>
  <changelog author="suse-beta@cboltz.de" date="1685361600">- update to AppArmor 3.1.4
  - parser: fix mount rules encoding (CVE-2016-1585)
  - aa-logprof: fix error when choosing named exec with plain profile names
  - aa-status: fix json output
  - several fixes for profiles and abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.4
    for the full upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1686052800">- fix aa-status --json output (aa-status-fix-json-mr1046.patch,
  boo#1211980#c12)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1686484800">- update to AppArmor 3.1.5
  - fix handling of mount rules in apparmor_parser
  - minor additions to abstractions/base and snap_browsers
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.5
    for the full upstream changelog
- remove upstreamed aa-status-fix-json-mr1046.patch
- split off apparmor-enable-precompiled-cache.diff from
  apparmor-enable-profile-cache.diff so that the precompiled cache
  path doesn't get added in parser.conf for Tumbleweed builds.
  This prevents a warning about the non-existing directory when
  loading profiles.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1687435200">- update to AppArmor 3.1.6 (jsc#PED-5600)
  - fix regression in mount rules (boo#1211989)
  - some additions to the base and authentification abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.6
    for the full upstream changelog</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1695643200">- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
  (bsc#1215596)</changelog>
  <changelog author="julio@juliogonzalez.es" date="1699444800">- Add apparmor-systemd-sessions.patch to allow read access to
  /run/systemd/sessions/ (bsc#1216878)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1699444801">- Actually apply the previously added patch for bsc#1216878</changelog>
  <changelog author="suse-beta@cboltz.de" date="1706529600">- Add dovecot-unix_chkpwd.diff to allow dovecot-auth to execute
  unix_chkpwd, and add a profile for unix_chkpwd. This is needed
  for PAM 1.6 (boo#1219139)
- Refresh apparmor.keyring - the key was renewed</changelog>
  <changelog author="suse-beta@cboltz.de" date="1707134400">- Update to AppArmor 3.1.7
  - aa-logprof: don't skip exec events in hats
  - fix aa-cleanprof to work with named profiles
  - add permissions in various abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.7
    for the full list of changes
- drop upstreamed apparmor-systemd-sessions.patch</changelog>
  <changelog author="ddiss@suse.com" date="1707393600">- Add apparmor-abstractions-openssl-allow-version-specific-en.patch to
  allow version specific engdef &amp; engines openssl paths (boo#1219571)</changelog>
  <changelog author="ddiss@suse.com" date="1708430400">- Only run utils and profiles make check if kernel LSM is enabled
  (bsc#1220084)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430401">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="lnussel@suse.com" date="1708948800">- Fix systemd userdb access in unix-chkpwd</changelog>
  <changelog author="nopower@suse.com" date="1709035200">- Add smbd-unix_chkpwd.diff to allow smbd to execute
  unix_chkpwd and fix other pam related denies; (boo#1220032).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1709294400">- Remove workaround for boo#853019 in %postun parser -
  apparmor.service contains a more safe workaround.
  This also fixes boo#1220708 (missing daemon-reload).</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1741953600">- Allow dovecot-auth to execute unix_chkpwd from /sbin, not only from /usr/bin
  (bsc#1234452)
  * Update dovecot-unix_chkpwd.diff</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1745323200">- Allow pam_unix to execute unix_chkpwd with abi/3.0
  - remove dovecot-unix_chkpwd.diff
  - Add allow-pam_unix-to-execute-unix_chkpwd.patch
  - Add revert-abi-change-for-unix_chkpwd.patch
  (bsc#1234452, bsc#1232234)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1746446400">- Add dac_read_search capability for unix_chkpwd to allow it to read the shadow
  file even if it has 000 permissions. This is needed after the CVE-2024-10041
  fix in PAM.
  * unix-chkpwd-add-read-capability.path, bsc#1241678</changelog>
  <changelog author="nopower@suse.com" date="1772625600">- Fix deny exec of rpc_witness; (bsc#1225811).
  * add apparmor-rpcd-witness.patch
- Add some misc fixes for samba-4.21.x denies; (bsc#1259441).
  * add samba-misc-rpcd-spoolss.patch</changelog>
</package>
<package pkgid="08ce5cdbd897ec7b22a14c45315c7b6ac220b5da2e4aeffd855c5de5181277f4" name="libapparmor" arch="src">
  <version epoch="0" ver="3.1.7" rel="150600.5.9.1"/>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1685361600">- update to AppArmor 3.1.4
  - parser: fix mount rules encoding (CVE-2016-1585)
  - aa-logprof: fix error when choosing named exec with plain profile names
  - aa-status: fix json output
  - several fixes for profiles and abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.4
    for the full upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1686052800">- fix aa-status --json output (aa-status-fix-json-mr1046.patch,
  boo#1211980#c12)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1686484800">- update to AppArmor 3.1.5
  - fix handling of mount rules in apparmor_parser
  - minor additions to abstractions/base and snap_browsers
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.5
    for the full upstream changelog
- remove upstreamed aa-status-fix-json-mr1046.patch
- split off apparmor-enable-precompiled-cache.diff from
  apparmor-enable-profile-cache.diff so that the precompiled cache
  path doesn't get added in parser.conf for Tumbleweed builds.
  This prevents a warning about the non-existing directory when
  loading profiles.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1687435200">- update to AppArmor 3.1.6 (jsc#PED-5600)
  - fix regression in mount rules (boo#1211989)
  - some additions to the base and authentification abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.6
    for the full upstream changelog</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1695643200">- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
  (bsc#1215596)</changelog>
  <changelog author="julio@juliogonzalez.es" date="1699444800">- Add apparmor-systemd-sessions.patch to allow read access to
  /run/systemd/sessions/ (bsc#1216878)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1699444801">- Actually apply the previously added patch for bsc#1216878</changelog>
  <changelog author="suse-beta@cboltz.de" date="1706529600">- Add dovecot-unix_chkpwd.diff to allow dovecot-auth to execute
  unix_chkpwd, and add a profile for unix_chkpwd. This is needed
  for PAM 1.6 (boo#1219139)
- Refresh apparmor.keyring - the key was renewed</changelog>
  <changelog author="suse-beta@cboltz.de" date="1707134400">- Update to AppArmor 3.1.7
  - aa-logprof: don't skip exec events in hats
  - fix aa-cleanprof to work with named profiles
  - add permissions in various abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.7
    for the full list of changes
- drop upstreamed apparmor-systemd-sessions.patch</changelog>
  <changelog author="ddiss@suse.com" date="1707393600">- Add apparmor-abstractions-openssl-allow-version-specific-en.patch to
  allow version specific engdef &amp; engines openssl paths (boo#1219571)</changelog>
  <changelog author="ddiss@suse.com" date="1708430400">- Only run utils and profiles make check if kernel LSM is enabled
  (bsc#1220084)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430401">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="lnussel@suse.com" date="1708948800">- Fix systemd userdb access in unix-chkpwd</changelog>
  <changelog author="nopower@suse.com" date="1709035200">- Add smbd-unix_chkpwd.diff to allow smbd to execute
  unix_chkpwd and fix other pam related denies; (boo#1220032).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1709294400">- Remove workaround for boo#853019 in %postun parser -
  apparmor.service contains a more safe workaround.
  This also fixes boo#1220708 (missing daemon-reload).</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1741953600">- Allow dovecot-auth to execute unix_chkpwd from /sbin, not only from /usr/bin
  (bsc#1234452)
  * Update dovecot-unix_chkpwd.diff</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1745323200">- Allow pam_unix to execute unix_chkpwd with abi/3.0
  - remove dovecot-unix_chkpwd.diff
  - Add allow-pam_unix-to-execute-unix_chkpwd.patch
  - Add revert-abi-change-for-unix_chkpwd.patch
  (bsc#1234452, bsc#1232234)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1746446400">- Add dac_read_search capability for unix_chkpwd to allow it to read the shadow
  file even if it has 000 permissions. This is needed after the CVE-2024-10041
  fix in PAM.
  * unix-chkpwd-add-read-capability.path, bsc#1241678</changelog>
</package>
<package pkgid="f920c4384a146b4769549e83a198a398a945f08af5d58b250e743e9799bf64e9" name="libapparmor-devel" arch="x86_64">
  <version epoch="0" ver="3.1.7" rel="150600.5.12.2"/>
  <changelog author="suse-beta@cboltz.de" date="1685361600">- update to AppArmor 3.1.4
  - parser: fix mount rules encoding (CVE-2016-1585)
  - aa-logprof: fix error when choosing named exec with plain profile names
  - aa-status: fix json output
  - several fixes for profiles and abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.4
    for the full upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1686052800">- fix aa-status --json output (aa-status-fix-json-mr1046.patch,
  boo#1211980#c12)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1686484800">- update to AppArmor 3.1.5
  - fix handling of mount rules in apparmor_parser
  - minor additions to abstractions/base and snap_browsers
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.5
    for the full upstream changelog
- remove upstreamed aa-status-fix-json-mr1046.patch
- split off apparmor-enable-precompiled-cache.diff from
  apparmor-enable-profile-cache.diff so that the precompiled cache
  path doesn't get added in parser.conf for Tumbleweed builds.
  This prevents a warning about the non-existing directory when
  loading profiles.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1687435200">- update to AppArmor 3.1.6 (jsc#PED-5600)
  - fix regression in mount rules (boo#1211989)
  - some additions to the base and authentification abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.6
    for the full upstream changelog</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1695643200">- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
  (bsc#1215596)</changelog>
  <changelog author="julio@juliogonzalez.es" date="1699444800">- Add apparmor-systemd-sessions.patch to allow read access to
  /run/systemd/sessions/ (bsc#1216878)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1699444801">- Actually apply the previously added patch for bsc#1216878</changelog>
  <changelog author="suse-beta@cboltz.de" date="1706529600">- Add dovecot-unix_chkpwd.diff to allow dovecot-auth to execute
  unix_chkpwd, and add a profile for unix_chkpwd. This is needed
  for PAM 1.6 (boo#1219139)
- Refresh apparmor.keyring - the key was renewed</changelog>
  <changelog author="suse-beta@cboltz.de" date="1707134400">- Update to AppArmor 3.1.7
  - aa-logprof: don't skip exec events in hats
  - fix aa-cleanprof to work with named profiles
  - add permissions in various abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.7
    for the full list of changes
- drop upstreamed apparmor-systemd-sessions.patch</changelog>
  <changelog author="ddiss@suse.com" date="1707393600">- Add apparmor-abstractions-openssl-allow-version-specific-en.patch to
  allow version specific engdef &amp; engines openssl paths (boo#1219571)</changelog>
  <changelog author="ddiss@suse.com" date="1708430400">- Only run utils and profiles make check if kernel LSM is enabled
  (bsc#1220084)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430401">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="lnussel@suse.com" date="1708948800">- Fix systemd userdb access in unix-chkpwd</changelog>
  <changelog author="nopower@suse.com" date="1709035200">- Add smbd-unix_chkpwd.diff to allow smbd to execute
  unix_chkpwd and fix other pam related denies; (boo#1220032).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1709294400">- Remove workaround for boo#853019 in %postun parser -
  apparmor.service contains a more safe workaround.
  This also fixes boo#1220708 (missing daemon-reload).</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1741953600">- Allow dovecot-auth to execute unix_chkpwd from /sbin, not only from /usr/bin
  (bsc#1234452)
  * Update dovecot-unix_chkpwd.diff</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1745323200">- Allow pam_unix to execute unix_chkpwd with abi/3.0
  - remove dovecot-unix_chkpwd.diff
  - Add allow-pam_unix-to-execute-unix_chkpwd.patch
  - Add revert-abi-change-for-unix_chkpwd.patch
  (bsc#1234452, bsc#1232234)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1746446400">- Add dac_read_search capability for unix_chkpwd to allow it to read the shadow
  file even if it has 000 permissions. This is needed after the CVE-2024-10041
  fix in PAM.
  * unix-chkpwd-add-read-capability.path, bsc#1241678</changelog>
  <changelog author="nopower@suse.com" date="1772625600">- Fix deny exec of rpc_witness; (bsc#1225811).
  * add apparmor-rpcd-witness.patch
- Add some misc fixes for samba-4.21.x denies; (bsc#1259441).
  * add samba-misc-rpcd-spoolss.patch</changelog>
</package>
<package pkgid="31cca9db2a30cc6d99695d1cd055344242d43cfe4d6f224e28b1b657ecbdace5" name="libapparmor-devel" arch="x86_64">
  <version epoch="0" ver="3.1.7" rel="150600.5.9.1"/>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1685361600">- update to AppArmor 3.1.4
  - parser: fix mount rules encoding (CVE-2016-1585)
  - aa-logprof: fix error when choosing named exec with plain profile names
  - aa-status: fix json output
  - several fixes for profiles and abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.4
    for the full upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1686052800">- fix aa-status --json output (aa-status-fix-json-mr1046.patch,
  boo#1211980#c12)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1686484800">- update to AppArmor 3.1.5
  - fix handling of mount rules in apparmor_parser
  - minor additions to abstractions/base and snap_browsers
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.5
    for the full upstream changelog
- remove upstreamed aa-status-fix-json-mr1046.patch
- split off apparmor-enable-precompiled-cache.diff from
  apparmor-enable-profile-cache.diff so that the precompiled cache
  path doesn't get added in parser.conf for Tumbleweed builds.
  This prevents a warning about the non-existing directory when
  loading profiles.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1687435200">- update to AppArmor 3.1.6 (jsc#PED-5600)
  - fix regression in mount rules (boo#1211989)
  - some additions to the base and authentification abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.6
    for the full upstream changelog</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1695643200">- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
  (bsc#1215596)</changelog>
  <changelog author="julio@juliogonzalez.es" date="1699444800">- Add apparmor-systemd-sessions.patch to allow read access to
  /run/systemd/sessions/ (bsc#1216878)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1699444801">- Actually apply the previously added patch for bsc#1216878</changelog>
  <changelog author="suse-beta@cboltz.de" date="1706529600">- Add dovecot-unix_chkpwd.diff to allow dovecot-auth to execute
  unix_chkpwd, and add a profile for unix_chkpwd. This is needed
  for PAM 1.6 (boo#1219139)
- Refresh apparmor.keyring - the key was renewed</changelog>
  <changelog author="suse-beta@cboltz.de" date="1707134400">- Update to AppArmor 3.1.7
  - aa-logprof: don't skip exec events in hats
  - fix aa-cleanprof to work with named profiles
  - add permissions in various abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.7
    for the full list of changes
- drop upstreamed apparmor-systemd-sessions.patch</changelog>
  <changelog author="ddiss@suse.com" date="1707393600">- Add apparmor-abstractions-openssl-allow-version-specific-en.patch to
  allow version specific engdef &amp; engines openssl paths (boo#1219571)</changelog>
  <changelog author="ddiss@suse.com" date="1708430400">- Only run utils and profiles make check if kernel LSM is enabled
  (bsc#1220084)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430401">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="lnussel@suse.com" date="1708948800">- Fix systemd userdb access in unix-chkpwd</changelog>
  <changelog author="nopower@suse.com" date="1709035200">- Add smbd-unix_chkpwd.diff to allow smbd to execute
  unix_chkpwd and fix other pam related denies; (boo#1220032).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1709294400">- Remove workaround for boo#853019 in %postun parser -
  apparmor.service contains a more safe workaround.
  This also fixes boo#1220708 (missing daemon-reload).</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1741953600">- Allow dovecot-auth to execute unix_chkpwd from /sbin, not only from /usr/bin
  (bsc#1234452)
  * Update dovecot-unix_chkpwd.diff</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1745323200">- Allow pam_unix to execute unix_chkpwd with abi/3.0
  - remove dovecot-unix_chkpwd.diff
  - Add allow-pam_unix-to-execute-unix_chkpwd.patch
  - Add revert-abi-change-for-unix_chkpwd.patch
  (bsc#1234452, bsc#1232234)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1746446400">- Add dac_read_search capability for unix_chkpwd to allow it to read the shadow
  file even if it has 000 permissions. This is needed after the CVE-2024-10041
  fix in PAM.
  * unix-chkpwd-add-read-capability.path, bsc#1241678</changelog>
</package>
<package pkgid="7ac6bd6e00c92dc8b27e7d6db2f825ab055024ec634c4c435172ffc7e75cfb64" name="libapparmor1" arch="x86_64">
  <version epoch="0" ver="3.1.7" rel="150600.5.12.2"/>
  <changelog author="suse-beta@cboltz.de" date="1685361600">- update to AppArmor 3.1.4
  - parser: fix mount rules encoding (CVE-2016-1585)
  - aa-logprof: fix error when choosing named exec with plain profile names
  - aa-status: fix json output
  - several fixes for profiles and abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.4
    for the full upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1686052800">- fix aa-status --json output (aa-status-fix-json-mr1046.patch,
  boo#1211980#c12)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1686484800">- update to AppArmor 3.1.5
  - fix handling of mount rules in apparmor_parser
  - minor additions to abstractions/base and snap_browsers
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.5
    for the full upstream changelog
- remove upstreamed aa-status-fix-json-mr1046.patch
- split off apparmor-enable-precompiled-cache.diff from
  apparmor-enable-profile-cache.diff so that the precompiled cache
  path doesn't get added in parser.conf for Tumbleweed builds.
  This prevents a warning about the non-existing directory when
  loading profiles.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1687435200">- update to AppArmor 3.1.6 (jsc#PED-5600)
  - fix regression in mount rules (boo#1211989)
  - some additions to the base and authentification abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.6
    for the full upstream changelog</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1695643200">- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
  (bsc#1215596)</changelog>
  <changelog author="julio@juliogonzalez.es" date="1699444800">- Add apparmor-systemd-sessions.patch to allow read access to
  /run/systemd/sessions/ (bsc#1216878)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1699444801">- Actually apply the previously added patch for bsc#1216878</changelog>
  <changelog author="suse-beta@cboltz.de" date="1706529600">- Add dovecot-unix_chkpwd.diff to allow dovecot-auth to execute
  unix_chkpwd, and add a profile for unix_chkpwd. This is needed
  for PAM 1.6 (boo#1219139)
- Refresh apparmor.keyring - the key was renewed</changelog>
  <changelog author="suse-beta@cboltz.de" date="1707134400">- Update to AppArmor 3.1.7
  - aa-logprof: don't skip exec events in hats
  - fix aa-cleanprof to work with named profiles
  - add permissions in various abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.7
    for the full list of changes
- drop upstreamed apparmor-systemd-sessions.patch</changelog>
  <changelog author="ddiss@suse.com" date="1707393600">- Add apparmor-abstractions-openssl-allow-version-specific-en.patch to
  allow version specific engdef &amp; engines openssl paths (boo#1219571)</changelog>
  <changelog author="ddiss@suse.com" date="1708430400">- Only run utils and profiles make check if kernel LSM is enabled
  (bsc#1220084)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430401">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="lnussel@suse.com" date="1708948800">- Fix systemd userdb access in unix-chkpwd</changelog>
  <changelog author="nopower@suse.com" date="1709035200">- Add smbd-unix_chkpwd.diff to allow smbd to execute
  unix_chkpwd and fix other pam related denies; (boo#1220032).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1709294400">- Remove workaround for boo#853019 in %postun parser -
  apparmor.service contains a more safe workaround.
  This also fixes boo#1220708 (missing daemon-reload).</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1741953600">- Allow dovecot-auth to execute unix_chkpwd from /sbin, not only from /usr/bin
  (bsc#1234452)
  * Update dovecot-unix_chkpwd.diff</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1745323200">- Allow pam_unix to execute unix_chkpwd with abi/3.0
  - remove dovecot-unix_chkpwd.diff
  - Add allow-pam_unix-to-execute-unix_chkpwd.patch
  - Add revert-abi-change-for-unix_chkpwd.patch
  (bsc#1234452, bsc#1232234)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1746446400">- Add dac_read_search capability for unix_chkpwd to allow it to read the shadow
  file even if it has 000 permissions. This is needed after the CVE-2024-10041
  fix in PAM.
  * unix-chkpwd-add-read-capability.path, bsc#1241678</changelog>
  <changelog author="nopower@suse.com" date="1772625600">- Fix deny exec of rpc_witness; (bsc#1225811).
  * add apparmor-rpcd-witness.patch
- Add some misc fixes for samba-4.21.x denies; (bsc#1259441).
  * add samba-misc-rpcd-spoolss.patch</changelog>
</package>
<package pkgid="f0754cbd281857591620ac8c184e94d5a496ed0cf55c5dee99d604a289e44f58" name="libapparmor1" arch="x86_64">
  <version epoch="0" ver="3.1.7" rel="150600.5.9.1"/>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1685361600">- update to AppArmor 3.1.4
  - parser: fix mount rules encoding (CVE-2016-1585)
  - aa-logprof: fix error when choosing named exec with plain profile names
  - aa-status: fix json output
  - several fixes for profiles and abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.4
    for the full upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1686052800">- fix aa-status --json output (aa-status-fix-json-mr1046.patch,
  boo#1211980#c12)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1686484800">- update to AppArmor 3.1.5
  - fix handling of mount rules in apparmor_parser
  - minor additions to abstractions/base and snap_browsers
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.5
    for the full upstream changelog
- remove upstreamed aa-status-fix-json-mr1046.patch
- split off apparmor-enable-precompiled-cache.diff from
  apparmor-enable-profile-cache.diff so that the precompiled cache
  path doesn't get added in parser.conf for Tumbleweed builds.
  This prevents a warning about the non-existing directory when
  loading profiles.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1687435200">- update to AppArmor 3.1.6 (jsc#PED-5600)
  - fix regression in mount rules (boo#1211989)
  - some additions to the base and authentification abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.6
    for the full upstream changelog</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1695643200">- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
  (bsc#1215596)</changelog>
  <changelog author="julio@juliogonzalez.es" date="1699444800">- Add apparmor-systemd-sessions.patch to allow read access to
  /run/systemd/sessions/ (bsc#1216878)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1699444801">- Actually apply the previously added patch for bsc#1216878</changelog>
  <changelog author="suse-beta@cboltz.de" date="1706529600">- Add dovecot-unix_chkpwd.diff to allow dovecot-auth to execute
  unix_chkpwd, and add a profile for unix_chkpwd. This is needed
  for PAM 1.6 (boo#1219139)
- Refresh apparmor.keyring - the key was renewed</changelog>
  <changelog author="suse-beta@cboltz.de" date="1707134400">- Update to AppArmor 3.1.7
  - aa-logprof: don't skip exec events in hats
  - fix aa-cleanprof to work with named profiles
  - add permissions in various abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.7
    for the full list of changes
- drop upstreamed apparmor-systemd-sessions.patch</changelog>
  <changelog author="ddiss@suse.com" date="1707393600">- Add apparmor-abstractions-openssl-allow-version-specific-en.patch to
  allow version specific engdef &amp; engines openssl paths (boo#1219571)</changelog>
  <changelog author="ddiss@suse.com" date="1708430400">- Only run utils and profiles make check if kernel LSM is enabled
  (bsc#1220084)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430401">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="lnussel@suse.com" date="1708948800">- Fix systemd userdb access in unix-chkpwd</changelog>
  <changelog author="nopower@suse.com" date="1709035200">- Add smbd-unix_chkpwd.diff to allow smbd to execute
  unix_chkpwd and fix other pam related denies; (boo#1220032).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1709294400">- Remove workaround for boo#853019 in %postun parser -
  apparmor.service contains a more safe workaround.
  This also fixes boo#1220708 (missing daemon-reload).</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1741953600">- Allow dovecot-auth to execute unix_chkpwd from /sbin, not only from /usr/bin
  (bsc#1234452)
  * Update dovecot-unix_chkpwd.diff</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1745323200">- Allow pam_unix to execute unix_chkpwd with abi/3.0
  - remove dovecot-unix_chkpwd.diff
  - Add allow-pam_unix-to-execute-unix_chkpwd.patch
  - Add revert-abi-change-for-unix_chkpwd.patch
  (bsc#1234452, bsc#1232234)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1746446400">- Add dac_read_search capability for unix_chkpwd to allow it to read the shadow
  file even if it has 000 permissions. This is needed after the CVE-2024-10041
  fix in PAM.
  * unix-chkpwd-add-read-capability.path, bsc#1241678</changelog>
</package>
<package pkgid="6e4c6e0bc755252545264f046c96ae9ca3e1069b83f8d6a50c4ac3ff526914fb" name="libapparmor1-32bit" arch="x86_64">
  <version epoch="0" ver="3.1.7" rel="150600.5.12.2"/>
  <changelog author="suse-beta@cboltz.de" date="1685361600">- update to AppArmor 3.1.4
  - parser: fix mount rules encoding (CVE-2016-1585)
  - aa-logprof: fix error when choosing named exec with plain profile names
  - aa-status: fix json output
  - several fixes for profiles and abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.4
    for the full upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1686052800">- fix aa-status --json output (aa-status-fix-json-mr1046.patch,
  boo#1211980#c12)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1686484800">- update to AppArmor 3.1.5
  - fix handling of mount rules in apparmor_parser
  - minor additions to abstractions/base and snap_browsers
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.5
    for the full upstream changelog
- remove upstreamed aa-status-fix-json-mr1046.patch
- split off apparmor-enable-precompiled-cache.diff from
  apparmor-enable-profile-cache.diff so that the precompiled cache
  path doesn't get added in parser.conf for Tumbleweed builds.
  This prevents a warning about the non-existing directory when
  loading profiles.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1687435200">- update to AppArmor 3.1.6 (jsc#PED-5600)
  - fix regression in mount rules (boo#1211989)
  - some additions to the base and authentification abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.6
    for the full upstream changelog</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1695643200">- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
  (bsc#1215596)</changelog>
  <changelog author="julio@juliogonzalez.es" date="1699444800">- Add apparmor-systemd-sessions.patch to allow read access to
  /run/systemd/sessions/ (bsc#1216878)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1699444801">- Actually apply the previously added patch for bsc#1216878</changelog>
  <changelog author="suse-beta@cboltz.de" date="1706529600">- Add dovecot-unix_chkpwd.diff to allow dovecot-auth to execute
  unix_chkpwd, and add a profile for unix_chkpwd. This is needed
  for PAM 1.6 (boo#1219139)
- Refresh apparmor.keyring - the key was renewed</changelog>
  <changelog author="suse-beta@cboltz.de" date="1707134400">- Update to AppArmor 3.1.7
  - aa-logprof: don't skip exec events in hats
  - fix aa-cleanprof to work with named profiles
  - add permissions in various abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.7
    for the full list of changes
- drop upstreamed apparmor-systemd-sessions.patch</changelog>
  <changelog author="ddiss@suse.com" date="1707393600">- Add apparmor-abstractions-openssl-allow-version-specific-en.patch to
  allow version specific engdef &amp; engines openssl paths (boo#1219571)</changelog>
  <changelog author="ddiss@suse.com" date="1708430400">- Only run utils and profiles make check if kernel LSM is enabled
  (bsc#1220084)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430401">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="lnussel@suse.com" date="1708948800">- Fix systemd userdb access in unix-chkpwd</changelog>
  <changelog author="nopower@suse.com" date="1709035200">- Add smbd-unix_chkpwd.diff to allow smbd to execute
  unix_chkpwd and fix other pam related denies; (boo#1220032).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1709294400">- Remove workaround for boo#853019 in %postun parser -
  apparmor.service contains a more safe workaround.
  This also fixes boo#1220708 (missing daemon-reload).</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1741953600">- Allow dovecot-auth to execute unix_chkpwd from /sbin, not only from /usr/bin
  (bsc#1234452)
  * Update dovecot-unix_chkpwd.diff</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1745323200">- Allow pam_unix to execute unix_chkpwd with abi/3.0
  - remove dovecot-unix_chkpwd.diff
  - Add allow-pam_unix-to-execute-unix_chkpwd.patch
  - Add revert-abi-change-for-unix_chkpwd.patch
  (bsc#1234452, bsc#1232234)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1746446400">- Add dac_read_search capability for unix_chkpwd to allow it to read the shadow
  file even if it has 000 permissions. This is needed after the CVE-2024-10041
  fix in PAM.
  * unix-chkpwd-add-read-capability.path, bsc#1241678</changelog>
  <changelog author="nopower@suse.com" date="1772625600">- Fix deny exec of rpc_witness; (bsc#1225811).
  * add apparmor-rpcd-witness.patch
- Add some misc fixes for samba-4.21.x denies; (bsc#1259441).
  * add samba-misc-rpcd-spoolss.patch</changelog>
</package>
<package pkgid="e9b0011d5c58b4e6d5e2bd98242254848298f0b6eb1554defba435e0fe62ce15" name="libapparmor1-32bit" arch="x86_64">
  <version epoch="0" ver="3.1.7" rel="150600.5.9.1"/>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1685361600">- update to AppArmor 3.1.4
  - parser: fix mount rules encoding (CVE-2016-1585)
  - aa-logprof: fix error when choosing named exec with plain profile names
  - aa-status: fix json output
  - several fixes for profiles and abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.4
    for the full upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1686052800">- fix aa-status --json output (aa-status-fix-json-mr1046.patch,
  boo#1211980#c12)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1686484800">- update to AppArmor 3.1.5
  - fix handling of mount rules in apparmor_parser
  - minor additions to abstractions/base and snap_browsers
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.5
    for the full upstream changelog
- remove upstreamed aa-status-fix-json-mr1046.patch
- split off apparmor-enable-precompiled-cache.diff from
  apparmor-enable-profile-cache.diff so that the precompiled cache
  path doesn't get added in parser.conf for Tumbleweed builds.
  This prevents a warning about the non-existing directory when
  loading profiles.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1687435200">- update to AppArmor 3.1.6 (jsc#PED-5600)
  - fix regression in mount rules (boo#1211989)
  - some additions to the base and authentification abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.6
    for the full upstream changelog</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1695643200">- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
  (bsc#1215596)</changelog>
  <changelog author="julio@juliogonzalez.es" date="1699444800">- Add apparmor-systemd-sessions.patch to allow read access to
  /run/systemd/sessions/ (bsc#1216878)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1699444801">- Actually apply the previously added patch for bsc#1216878</changelog>
  <changelog author="suse-beta@cboltz.de" date="1706529600">- Add dovecot-unix_chkpwd.diff to allow dovecot-auth to execute
  unix_chkpwd, and add a profile for unix_chkpwd. This is needed
  for PAM 1.6 (boo#1219139)
- Refresh apparmor.keyring - the key was renewed</changelog>
  <changelog author="suse-beta@cboltz.de" date="1707134400">- Update to AppArmor 3.1.7
  - aa-logprof: don't skip exec events in hats
  - fix aa-cleanprof to work with named profiles
  - add permissions in various abstractions
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.1.7
    for the full list of changes
- drop upstreamed apparmor-systemd-sessions.patch</changelog>
  <changelog author="ddiss@suse.com" date="1707393600">- Add apparmor-abstractions-openssl-allow-version-specific-en.patch to
  allow version specific engdef &amp; engines openssl paths (boo#1219571)</changelog>
  <changelog author="ddiss@suse.com" date="1708430400">- Only run utils and profiles make check if kernel LSM is enabled
  (bsc#1220084)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708430401">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="lnussel@suse.com" date="1708948800">- Fix systemd userdb access in unix-chkpwd</changelog>
  <changelog author="nopower@suse.com" date="1709035200">- Add smbd-unix_chkpwd.diff to allow smbd to execute
  unix_chkpwd and fix other pam related denies; (boo#1220032).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1709294400">- Remove workaround for boo#853019 in %postun parser -
  apparmor.service contains a more safe workaround.
  This also fixes boo#1220708 (missing daemon-reload).</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1741953600">- Allow dovecot-auth to execute unix_chkpwd from /sbin, not only from /usr/bin
  (bsc#1234452)
  * Update dovecot-unix_chkpwd.diff</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1745323200">- Allow pam_unix to execute unix_chkpwd with abi/3.0
  - remove dovecot-unix_chkpwd.diff
  - Add allow-pam_unix-to-execute-unix_chkpwd.patch
  - Add revert-abi-change-for-unix_chkpwd.patch
  (bsc#1234452, bsc#1232234)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1746446400">- Add dac_read_search capability for unix_chkpwd to allow it to read the shadow
  file even if it has 000 permissions. This is needed after the CVE-2024-10041
  fix in PAM.
  * unix-chkpwd-add-read-capability.path, bsc#1241678</changelog>
</package>
<package pkgid="df39b37178c7c090729fb2bface744a8b1e9070d1dae069c5411e386b0f6e984" name="libarchive" arch="src">
  <version epoch="0" ver="3.7.2" rel="150600.3.17.1"/>
  <changelog author="idonmez@suse.com" date="1606824000">- Update to version 3.5.0
  New features:
  * mtree digest reader support (#1347)
  * completed support for UTF-8 encoding conversion (#1389)
  * minor API enhancements (#1258, #1405)
  * support for system extended attributes (#1409)
  * support for decompression of symbolic links in zipx archives (#1435)
  Important bugfixes
  * fixed extraction of archives with hard links pointing to itself (#1381)
  * cpio fixes (#1387, #1388)
  * fixed uninitialized size in rar5_read_data (#1408)
  * fixed memory leaks in error case of archive_write_open() functions (#1456)
- Drop libarchive-3.4.3-fix_test_write_disk_secure.patch, fixed upstream.</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 3.5.1:
  * various compilation fixes (#1461, #1462, #1463, #1464)
  * fixed undefined behavior in a function in warc reader (#1465)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1631448000">- Fix CVE-2021-23177, extracting a symlink with ACLs modifies ACLs of target
  (CVE-2021-23177, bsc#1192425)
  * CVE-2021-23177.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1634817600">- Fix CVE-2021-31566, modifies file flags of symlink target
  (CVE-2021-31566, bsc#1192426.patch)
  CVE-2021-31566.patch
- Fix bsc#1192427, processing fixup entries may follow symbolic links
  bsc1192427.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1636286400">- update to 3.5.2:
  * CPIO: Support for PWB and v7 binary cpio formats
  * ZIP reader: Support of deflate algorithm in symbolic link decompression
  * security: fix handling of symbolic link ACLs on Linux (boo#1192425)
  * security: never follow symlinks when setting file flags on Linux (boo#1192426)
  * security: do not follow symlinks when processing the fixup list (boo#1192427)
  * fix extraction of hardlinks to symlinks
  * 7zip reader and writer fixes
  * RAR reader fixes
  * ZIP reader: fix excessive read for padded zip
  * CAB reader: fix double free
  * handle short writes from archive_write_callback
- Drop upstream mereged:
  * CVE-2021-23177.patch
  * CVE-2021-31566.patch
  * bsc1192427.patch</changelog>
  <changelog author="adrian@suse.de" date="1638187200">- fix permission settings on following symlinks (fix-following-symlinks.patch)
  this fixes also wrong permissions of /var/tmp in factory systems
  CVE-2021-31566</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645617600">- Fix CVE-2021-36976 use-after-free in copy_string
  (CVE-2021-36976, bsc#1188572)
  * fix-CVE-2021-36976.patch
- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  CVE-2017-5601, bsc#1022528, bsc#1189528</changelog>
  <changelog author="rpm@fthiessen.de" date="1645704000">- Update to 3.6.0
  * Fix use-after-free bug (CVE-2021-36976)
  * tar: new option "--no-read-sparse"
  * tar: threads support for zstd
  * RAR reader: filter support
  * RAR5 reader: self-extracting archive support
  * ZIP reader: zstd decompression support
  * tar: respect "--ignore-zeros" in c, r and u modes
  * reduced size of application binaries
  * internal code optimizations
- Drop upstream merged:
  * fix-following-symlinks.patch
  * fix-CVE-2021-36976.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1649332800">- Fix CVE-2022-26280 out-of-bounds read via the component zipx_lzma_alone_init
  (CVE-2022-26280, bsc#1197634)
  * fix-CVE-2022-26280.patch</changelog>
  <changelog author="dmueller@suse.com" date="1649419200">- update to 3.6.1:
  * 7zip reader: fix PPMD read beyond boundary (#1671)
  * ZIP reader: fix possible out of bounds read (OSS-Fuzz 38766 #1672)
  * ISO reader: fix possible heap buffer overflow in read_children() (OSS-Fuzz 38764, #1685)
  * RARv4 redaer: fix multiple issues in RARv4 filter code (introduced in libarchive 3.6.0)
  * fix heap use after free in archive_read_format_rar_read_data() (OSS-Fuzz 44547, 52efa50)
  * fix null dereference in read_data_compressed() (OSS-Fuzz 44843, 1271f77)
  * fix heap user after free in run_filters() (OSS-Fuzz 46279, #1715)
- Drop upstream merged fix-CVE-2022-26280.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1669118400">- Fix CVE-2022-36227, Handle a calloc returning NULL
  (CVE-2022-36227, bsc#1205629)
  * CVE-2022-36227.patch</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 3.6.2 (bsc#1205629, CVE-2022-36227)
  * NULL pointer dereference vulnerability in archive_write.c
  * include ZSTD in Windows builds (#1688)
  * SSL fixes on Windows (#1714, #1723, #1724)
  * rar5 reader: fix possible garbled output with bsdtar -O (#1745)
  * mtree reader: support reading mtree files with tabs (#1783)
  * various small fixes for issues found by CodeQL
- Drop upstream merged CVE-2022-36227.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1690200000">- update to 3.7.0
  * bsdunzip port from FreeBSD
  * fix 2 year 2038 issues</changelog>
  <changelog author="dmueller@suse.com" date="1694952000">- update to 3.7.2:
  * Multiple vulnerabilities have been fixed in the PAX writer
  * bsdunzip(1) now correctly handles arguments following an
  - x after the zipfile
  * zstd filter now supports the "long" write option
  * SEGV and stack buffer overflow in verbose mode of cpio
  * bsdunzip updated to match latest upstream code
  * miscellaneous functional bugfixes</changelog>
  <changelog author="dmueller@suse.com" date="1703851200">- skip write tests on 32bit, they OOM</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1718193600">- Fix CVE-2024-20696, heap based out-of-bounds write
  (CVE-2024-20696, bsc#1225971)
  * CVE-2024-20696.patch
- Fix CVE-2024-20697, Out of bounds Remote Code Execution Vulnerability
  (CVE-2024-20697, bsc#1225972)
  * CVE-2024-20697.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1728648000">- Fix CVE-2024-48957, out-of-bounds access in execute_filter_audio
  (CVE-2024-48957, bsc#1231544)
  * CVE-2024-48957.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1730203200">- Fix CVE-2024-48958, out-of-bounds access in execute_filter_delta
  (CVE-2024-48958, bsc#1231624)
  * CVE-2024-48958.patch
- Additional patch to fix CVE-2024-20697 (also attributed CVE-2024-26256)
  (CVE-2024-20697, CVE-2024-26256, bsc#1225972)
  * CVE-2024-20697-2.patch</changelog>
  <changelog author="marius.grossu@suse.com" date="1741694400">- Fix CVE-2025-1632, null pointer dereference in bsdunzip.c
  (CVE-2025-1632, bsc#1237606)
  * CVE-2025-1632.patch
- Fix CVE-2025-25724, Buffer Overflow vulnerability in libarchive
  (CVE-2025-25724, bsc#1238610)
  * CVE-2025-25724.patch</changelog>
  <changelog author="marius.grossu@suse.com" date="1751371200">- Fix CVE-2025-5918, reading past EOF may be triggered for piped file streams
  (CVE-2025-5918, bsc#1244279)
  * CVE-2025-5918.patch
- Fix CVE-2025-5917, off by one error in build_ustar_entry_name() at archive_write_set_format_pax.c
  (CVE-2025-5917, bsc#1244336)
  * CVE-2025-5917.patch
- Fix CVE-2025-5916, integer overflow while reading warc files at archive_read_support_format_warc.c
  (CVE-2025-5916, bsc#1244270)
  * CVE-2025-5916.patch
- Fix CVE-2025-5915, heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.c
  (CVE-2025-5915, bsc#1244273)
  * CVE-2025-5915.patch
- Fix CVE-2025-5914, double free due to an integer overflow in the archive_read_format_rar_seek_data() function
  (CVE-2025-5914, bsc#1244272)
  * CVE-2025-5914.patch</changelog>
</package>
<package pkgid="042a789204c1152b6f5a00c1ef050d46ae6782b91b2c451418674446154aabf9" name="libarchive-devel" arch="x86_64">
  <version epoch="0" ver="3.7.2" rel="150600.3.17.1"/>
  <changelog author="idonmez@suse.com" date="1606824000">- Update to version 3.5.0
  New features:
  * mtree digest reader support (#1347)
  * completed support for UTF-8 encoding conversion (#1389)
  * minor API enhancements (#1258, #1405)
  * support for system extended attributes (#1409)
  * support for decompression of symbolic links in zipx archives (#1435)
  Important bugfixes
  * fixed extraction of archives with hard links pointing to itself (#1381)
  * cpio fixes (#1387, #1388)
  * fixed uninitialized size in rar5_read_data (#1408)
  * fixed memory leaks in error case of archive_write_open() functions (#1456)
- Drop libarchive-3.4.3-fix_test_write_disk_secure.patch, fixed upstream.</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 3.5.1:
  * various compilation fixes (#1461, #1462, #1463, #1464)
  * fixed undefined behavior in a function in warc reader (#1465)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1631448000">- Fix CVE-2021-23177, extracting a symlink with ACLs modifies ACLs of target
  (CVE-2021-23177, bsc#1192425)
  * CVE-2021-23177.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1634817600">- Fix CVE-2021-31566, modifies file flags of symlink target
  (CVE-2021-31566, bsc#1192426.patch)
  CVE-2021-31566.patch
- Fix bsc#1192427, processing fixup entries may follow symbolic links
  bsc1192427.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1636286400">- update to 3.5.2:
  * CPIO: Support for PWB and v7 binary cpio formats
  * ZIP reader: Support of deflate algorithm in symbolic link decompression
  * security: fix handling of symbolic link ACLs on Linux (boo#1192425)
  * security: never follow symlinks when setting file flags on Linux (boo#1192426)
  * security: do not follow symlinks when processing the fixup list (boo#1192427)
  * fix extraction of hardlinks to symlinks
  * 7zip reader and writer fixes
  * RAR reader fixes
  * ZIP reader: fix excessive read for padded zip
  * CAB reader: fix double free
  * handle short writes from archive_write_callback
- Drop upstream mereged:
  * CVE-2021-23177.patch
  * CVE-2021-31566.patch
  * bsc1192427.patch</changelog>
  <changelog author="adrian@suse.de" date="1638187200">- fix permission settings on following symlinks (fix-following-symlinks.patch)
  this fixes also wrong permissions of /var/tmp in factory systems
  CVE-2021-31566</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645617600">- Fix CVE-2021-36976 use-after-free in copy_string
  (CVE-2021-36976, bsc#1188572)
  * fix-CVE-2021-36976.patch
- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  CVE-2017-5601, bsc#1022528, bsc#1189528</changelog>
  <changelog author="rpm@fthiessen.de" date="1645704000">- Update to 3.6.0
  * Fix use-after-free bug (CVE-2021-36976)
  * tar: new option "--no-read-sparse"
  * tar: threads support for zstd
  * RAR reader: filter support
  * RAR5 reader: self-extracting archive support
  * ZIP reader: zstd decompression support
  * tar: respect "--ignore-zeros" in c, r and u modes
  * reduced size of application binaries
  * internal code optimizations
- Drop upstream merged:
  * fix-following-symlinks.patch
  * fix-CVE-2021-36976.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1649332800">- Fix CVE-2022-26280 out-of-bounds read via the component zipx_lzma_alone_init
  (CVE-2022-26280, bsc#1197634)
  * fix-CVE-2022-26280.patch</changelog>
  <changelog author="dmueller@suse.com" date="1649419200">- update to 3.6.1:
  * 7zip reader: fix PPMD read beyond boundary (#1671)
  * ZIP reader: fix possible out of bounds read (OSS-Fuzz 38766 #1672)
  * ISO reader: fix possible heap buffer overflow in read_children() (OSS-Fuzz 38764, #1685)
  * RARv4 redaer: fix multiple issues in RARv4 filter code (introduced in libarchive 3.6.0)
  * fix heap use after free in archive_read_format_rar_read_data() (OSS-Fuzz 44547, 52efa50)
  * fix null dereference in read_data_compressed() (OSS-Fuzz 44843, 1271f77)
  * fix heap user after free in run_filters() (OSS-Fuzz 46279, #1715)
- Drop upstream merged fix-CVE-2022-26280.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1669118400">- Fix CVE-2022-36227, Handle a calloc returning NULL
  (CVE-2022-36227, bsc#1205629)
  * CVE-2022-36227.patch</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 3.6.2 (bsc#1205629, CVE-2022-36227)
  * NULL pointer dereference vulnerability in archive_write.c
  * include ZSTD in Windows builds (#1688)
  * SSL fixes on Windows (#1714, #1723, #1724)
  * rar5 reader: fix possible garbled output with bsdtar -O (#1745)
  * mtree reader: support reading mtree files with tabs (#1783)
  * various small fixes for issues found by CodeQL
- Drop upstream merged CVE-2022-36227.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1690200000">- update to 3.7.0
  * bsdunzip port from FreeBSD
  * fix 2 year 2038 issues</changelog>
  <changelog author="dmueller@suse.com" date="1694952000">- update to 3.7.2:
  * Multiple vulnerabilities have been fixed in the PAX writer
  * bsdunzip(1) now correctly handles arguments following an
  - x after the zipfile
  * zstd filter now supports the "long" write option
  * SEGV and stack buffer overflow in verbose mode of cpio
  * bsdunzip updated to match latest upstream code
  * miscellaneous functional bugfixes</changelog>
  <changelog author="dmueller@suse.com" date="1703851200">- skip write tests on 32bit, they OOM</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1718193600">- Fix CVE-2024-20696, heap based out-of-bounds write
  (CVE-2024-20696, bsc#1225971)
  * CVE-2024-20696.patch
- Fix CVE-2024-20697, Out of bounds Remote Code Execution Vulnerability
  (CVE-2024-20697, bsc#1225972)
  * CVE-2024-20697.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1728648000">- Fix CVE-2024-48957, out-of-bounds access in execute_filter_audio
  (CVE-2024-48957, bsc#1231544)
  * CVE-2024-48957.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1730203200">- Fix CVE-2024-48958, out-of-bounds access in execute_filter_delta
  (CVE-2024-48958, bsc#1231624)
  * CVE-2024-48958.patch
- Additional patch to fix CVE-2024-20697 (also attributed CVE-2024-26256)
  (CVE-2024-20697, CVE-2024-26256, bsc#1225972)
  * CVE-2024-20697-2.patch</changelog>
  <changelog author="marius.grossu@suse.com" date="1741694400">- Fix CVE-2025-1632, null pointer dereference in bsdunzip.c
  (CVE-2025-1632, bsc#1237606)
  * CVE-2025-1632.patch
- Fix CVE-2025-25724, Buffer Overflow vulnerability in libarchive
  (CVE-2025-25724, bsc#1238610)
  * CVE-2025-25724.patch</changelog>
  <changelog author="marius.grossu@suse.com" date="1751371200">- Fix CVE-2025-5918, reading past EOF may be triggered for piped file streams
  (CVE-2025-5918, bsc#1244279)
  * CVE-2025-5918.patch
- Fix CVE-2025-5917, off by one error in build_ustar_entry_name() at archive_write_set_format_pax.c
  (CVE-2025-5917, bsc#1244336)
  * CVE-2025-5917.patch
- Fix CVE-2025-5916, integer overflow while reading warc files at archive_read_support_format_warc.c
  (CVE-2025-5916, bsc#1244270)
  * CVE-2025-5916.patch
- Fix CVE-2025-5915, heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.c
  (CVE-2025-5915, bsc#1244273)
  * CVE-2025-5915.patch
- Fix CVE-2025-5914, double free due to an integer overflow in the archive_read_format_rar_seek_data() function
  (CVE-2025-5914, bsc#1244272)
  * CVE-2025-5914.patch</changelog>
</package>
<package pkgid="c82dbac20ea61410f53e7bf562dfb290f2c775b22f504631ad1891fd25e15faf" name="libarchive13" arch="x86_64">
  <version epoch="0" ver="3.7.2" rel="150600.3.17.1"/>
  <changelog author="idonmez@suse.com" date="1606824000">- Update to version 3.5.0
  New features:
  * mtree digest reader support (#1347)
  * completed support for UTF-8 encoding conversion (#1389)
  * minor API enhancements (#1258, #1405)
  * support for system extended attributes (#1409)
  * support for decompression of symbolic links in zipx archives (#1435)
  Important bugfixes
  * fixed extraction of archives with hard links pointing to itself (#1381)
  * cpio fixes (#1387, #1388)
  * fixed uninitialized size in rar5_read_data (#1408)
  * fixed memory leaks in error case of archive_write_open() functions (#1456)
- Drop libarchive-3.4.3-fix_test_write_disk_secure.patch, fixed upstream.</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 3.5.1:
  * various compilation fixes (#1461, #1462, #1463, #1464)
  * fixed undefined behavior in a function in warc reader (#1465)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1631448000">- Fix CVE-2021-23177, extracting a symlink with ACLs modifies ACLs of target
  (CVE-2021-23177, bsc#1192425)
  * CVE-2021-23177.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1634817600">- Fix CVE-2021-31566, modifies file flags of symlink target
  (CVE-2021-31566, bsc#1192426.patch)
  CVE-2021-31566.patch
- Fix bsc#1192427, processing fixup entries may follow symbolic links
  bsc1192427.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1636286400">- update to 3.5.2:
  * CPIO: Support for PWB and v7 binary cpio formats
  * ZIP reader: Support of deflate algorithm in symbolic link decompression
  * security: fix handling of symbolic link ACLs on Linux (boo#1192425)
  * security: never follow symlinks when setting file flags on Linux (boo#1192426)
  * security: do not follow symlinks when processing the fixup list (boo#1192427)
  * fix extraction of hardlinks to symlinks
  * 7zip reader and writer fixes
  * RAR reader fixes
  * ZIP reader: fix excessive read for padded zip
  * CAB reader: fix double free
  * handle short writes from archive_write_callback
- Drop upstream mereged:
  * CVE-2021-23177.patch
  * CVE-2021-31566.patch
  * bsc1192427.patch</changelog>
  <changelog author="adrian@suse.de" date="1638187200">- fix permission settings on following symlinks (fix-following-symlinks.patch)
  this fixes also wrong permissions of /var/tmp in factory systems
  CVE-2021-31566</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645617600">- Fix CVE-2021-36976 use-after-free in copy_string
  (CVE-2021-36976, bsc#1188572)
  * fix-CVE-2021-36976.patch
- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  CVE-2017-5601, bsc#1022528, bsc#1189528</changelog>
  <changelog author="rpm@fthiessen.de" date="1645704000">- Update to 3.6.0
  * Fix use-after-free bug (CVE-2021-36976)
  * tar: new option "--no-read-sparse"
  * tar: threads support for zstd
  * RAR reader: filter support
  * RAR5 reader: self-extracting archive support
  * ZIP reader: zstd decompression support
  * tar: respect "--ignore-zeros" in c, r and u modes
  * reduced size of application binaries
  * internal code optimizations
- Drop upstream merged:
  * fix-following-symlinks.patch
  * fix-CVE-2021-36976.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1649332800">- Fix CVE-2022-26280 out-of-bounds read via the component zipx_lzma_alone_init
  (CVE-2022-26280, bsc#1197634)
  * fix-CVE-2022-26280.patch</changelog>
  <changelog author="dmueller@suse.com" date="1649419200">- update to 3.6.1:
  * 7zip reader: fix PPMD read beyond boundary (#1671)
  * ZIP reader: fix possible out of bounds read (OSS-Fuzz 38766 #1672)
  * ISO reader: fix possible heap buffer overflow in read_children() (OSS-Fuzz 38764, #1685)
  * RARv4 redaer: fix multiple issues in RARv4 filter code (introduced in libarchive 3.6.0)
  * fix heap use after free in archive_read_format_rar_read_data() (OSS-Fuzz 44547, 52efa50)
  * fix null dereference in read_data_compressed() (OSS-Fuzz 44843, 1271f77)
  * fix heap user after free in run_filters() (OSS-Fuzz 46279, #1715)
- Drop upstream merged fix-CVE-2022-26280.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1669118400">- Fix CVE-2022-36227, Handle a calloc returning NULL
  (CVE-2022-36227, bsc#1205629)
  * CVE-2022-36227.patch</changelog>
  <changelog author="dmueller@suse.com" date="1671796800">- update to 3.6.2 (bsc#1205629, CVE-2022-36227)
  * NULL pointer dereference vulnerability in archive_write.c
  * include ZSTD in Windows builds (#1688)
  * SSL fixes on Windows (#1714, #1723, #1724)
  * rar5 reader: fix possible garbled output with bsdtar -O (#1745)
  * mtree reader: support reading mtree files with tabs (#1783)
  * various small fixes for issues found by CodeQL
- Drop upstream merged CVE-2022-36227.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1690200000">- update to 3.7.0
  * bsdunzip port from FreeBSD
  * fix 2 year 2038 issues</changelog>
  <changelog author="dmueller@suse.com" date="1694952000">- update to 3.7.2:
  * Multiple vulnerabilities have been fixed in the PAX writer
  * bsdunzip(1) now correctly handles arguments following an
  - x after the zipfile
  * zstd filter now supports the "long" write option
  * SEGV and stack buffer overflow in verbose mode of cpio
  * bsdunzip updated to match latest upstream code
  * miscellaneous functional bugfixes</changelog>
  <changelog author="dmueller@suse.com" date="1703851200">- skip write tests on 32bit, they OOM</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1718193600">- Fix CVE-2024-20696, heap based out-of-bounds write
  (CVE-2024-20696, bsc#1225971)
  * CVE-2024-20696.patch
- Fix CVE-2024-20697, Out of bounds Remote Code Execution Vulnerability
  (CVE-2024-20697, bsc#1225972)
  * CVE-2024-20697.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1728648000">- Fix CVE-2024-48957, out-of-bounds access in execute_filter_audio
  (CVE-2024-48957, bsc#1231544)
  * CVE-2024-48957.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1730203200">- Fix CVE-2024-48958, out-of-bounds access in execute_filter_delta
  (CVE-2024-48958, bsc#1231624)
  * CVE-2024-48958.patch
- Additional patch to fix CVE-2024-20697 (also attributed CVE-2024-26256)
  (CVE-2024-20697, CVE-2024-26256, bsc#1225972)
  * CVE-2024-20697-2.patch</changelog>
  <changelog author="marius.grossu@suse.com" date="1741694400">- Fix CVE-2025-1632, null pointer dereference in bsdunzip.c
  (CVE-2025-1632, bsc#1237606)
  * CVE-2025-1632.patch
- Fix CVE-2025-25724, Buffer Overflow vulnerability in libarchive
  (CVE-2025-25724, bsc#1238610)
  * CVE-2025-25724.patch</changelog>
  <changelog author="marius.grossu@suse.com" date="1751371200">- Fix CVE-2025-5918, reading past EOF may be triggered for piped file streams
  (CVE-2025-5918, bsc#1244279)
  * CVE-2025-5918.patch
- Fix CVE-2025-5917, off by one error in build_ustar_entry_name() at archive_write_set_format_pax.c
  (CVE-2025-5917, bsc#1244336)
  * CVE-2025-5917.patch
- Fix CVE-2025-5916, integer overflow while reading warc files at archive_read_support_format_warc.c
  (CVE-2025-5916, bsc#1244270)
  * CVE-2025-5916.patch
- Fix CVE-2025-5915, heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.c
  (CVE-2025-5915, bsc#1244273)
  * CVE-2025-5915.patch
- Fix CVE-2025-5914, double free due to an integer overflow in the archive_read_format_rar_seek_data() function
  (CVE-2025-5914, bsc#1244272)
  * CVE-2025-5914.patch</changelog>
</package>
<package pkgid="83995e3a2b1dd12b956a42fbb136900fbf5cf13dbb94f4f7821df80cf1ea51f4" name="libasan8" arch="x86_64">
  <version epoch="0" ver="14.3.0+git11799" rel="150000.1.11.1"/>
  <changelog author="rguenther@suse.com" date="1728475200">- Update to gcc-14 branch head, 4af44f2cf7d281f3e4f3957ef, git10750
  * includes libstdc++6 fix for parsing tzdata 2024b [gcc#116657]
- Add gcc14-pr116629.patch to fix ICE with LTO building openvino
  on aarch64 [boo#1230262]</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1732968000">- Add loongarch64 to asan_arch, atomic_arch,
  itm_arch, lsan_arch, tsan_arch and ubsan_arch
- Add larchintrin.h, lasxintrin.h and lsxintrin.h
  headers to gccXY main package in %files section
- Set build_primary_64bit to 1 for loongarch64</changelog>
  <changelog author="adrian@suse.de" date="1733140800">- disable go on loongarch64 for now</changelog>
  <changelog author="mardnh@gmx.de" date="1736078400">- Switch to glibc based cross-compiler for target hppa</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Define ALT_CC_UNDER_TEST and ALT_CXX_UNDER_TEST for compat tests</changelog>
  <changelog author="rguenther@suse.com" date="1738152000">- For cross compilers require the same or newer binutils, newlib
  or cross-glibc that was used at build time.  [bsc#1232526]</changelog>
  <changelog author="rguenther@suse.com" date="1738843200">- Adjust cross compiler requirements to use %requires_ge
- Fix condition on whether to enable plugins or JIT support to
  not check sle_version which is not defined in SLFO but to check
  is_opensuse and suse_version instead.
- Add gcc14-pr118780.patch to make the SLFO config work.</changelog>
  <changelog author="rguenther@suse.com" date="1740052800">- Update to gcc-14 branch head, 9ffecde121af883b60bbe60d0, git11321
  * fixes reported ICE in [bsc#1237442]
- Drop gcc14-pr116629.patch now backported to the branch.</changelog>
  <changelog author="rguenther@suse.com" date="1741608000">- Disable profiling during build when %want_reproducible_builds is set
  [bsc#1238491]</changelog>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
</package>
<package pkgid="4ea2fe484c208551b8e3a8783b37ed855991c4b3584514ca1c68c294865674a7" name="libasan8" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.3.3"/>
  <changelog author="rguenther@suse.com" date="1743163200">- Update to GCC trunk head, 15.0.1+git9001
  * includes -msplit-patch-nops required for user-space livepatching
    on powerpc
  * includes fix for Ada build with --enable-host-pie
- Adjust for removed avx10_2roundingintrin.h intrinsic header.
- Build GCC executables PIE on SLE.  [bsc#1239938]</changelog>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="81bcaef37913312fd593a86f61cfedefcf3ae343899b01748027e6730d4ca1b5" name="libasan8" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.6.1"/>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
</package>
<package pkgid="93e5606711e0973300396bfc6d67a0e3d360ccb95182a86d22c9ead371a23197" name="libasan8" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.9.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc14-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="bfdf9c6ac478f6302150d003ec6e45aef53c0006a366a8c8880e50a43466c76a" name="libasan8-32bit" arch="x86_64">
  <version epoch="0" ver="14.3.0+git11799" rel="150000.1.11.1"/>
  <changelog author="rguenther@suse.com" date="1728475200">- Update to gcc-14 branch head, 4af44f2cf7d281f3e4f3957ef, git10750
  * includes libstdc++6 fix for parsing tzdata 2024b [gcc#116657]
- Add gcc14-pr116629.patch to fix ICE with LTO building openvino
  on aarch64 [boo#1230262]</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1732968000">- Add loongarch64 to asan_arch, atomic_arch,
  itm_arch, lsan_arch, tsan_arch and ubsan_arch
- Add larchintrin.h, lasxintrin.h and lsxintrin.h
  headers to gccXY main package in %files section
- Set build_primary_64bit to 1 for loongarch64</changelog>
  <changelog author="adrian@suse.de" date="1733140800">- disable go on loongarch64 for now</changelog>
  <changelog author="mardnh@gmx.de" date="1736078400">- Switch to glibc based cross-compiler for target hppa</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Define ALT_CC_UNDER_TEST and ALT_CXX_UNDER_TEST for compat tests</changelog>
  <changelog author="rguenther@suse.com" date="1738152000">- For cross compilers require the same or newer binutils, newlib
  or cross-glibc that was used at build time.  [bsc#1232526]</changelog>
  <changelog author="rguenther@suse.com" date="1738843200">- Adjust cross compiler requirements to use %requires_ge
- Fix condition on whether to enable plugins or JIT support to
  not check sle_version which is not defined in SLFO but to check
  is_opensuse and suse_version instead.
- Add gcc14-pr118780.patch to make the SLFO config work.</changelog>
  <changelog author="rguenther@suse.com" date="1740052800">- Update to gcc-14 branch head, 9ffecde121af883b60bbe60d0, git11321
  * fixes reported ICE in [bsc#1237442]
- Drop gcc14-pr116629.patch now backported to the branch.</changelog>
  <changelog author="rguenther@suse.com" date="1741608000">- Disable profiling during build when %want_reproducible_builds is set
  [bsc#1238491]</changelog>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
</package>
<package pkgid="20288aaf317c788c2544fd6f8e670eb70ffa9eeea2841c7688e651698c4c2310" name="libasan8-32bit" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.3.3"/>
  <changelog author="rguenther@suse.com" date="1743163200">- Update to GCC trunk head, 15.0.1+git9001
  * includes -msplit-patch-nops required for user-space livepatching
    on powerpc
  * includes fix for Ada build with --enable-host-pie
- Adjust for removed avx10_2roundingintrin.h intrinsic header.
- Build GCC executables PIE on SLE.  [bsc#1239938]</changelog>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="3c38e4b56e0edc51c52e3cb64e032c4ec0d3a14bdcb4dac6e8abd719d5a2adc9" name="libasan8-32bit" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.6.1"/>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
</package>
<package pkgid="8526a93c91fc25b063e95062fbf5727c8c5d915edcf8ddf5b2356166d146c75a" name="libasan8-32bit" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.9.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc14-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="df73fded34566a207cb135bea73e640c3fb35f2d3737f8ee04adfeb4250a0d84" name="libasm-devel" arch="x86_64">
  <version epoch="0" ver="0.185" rel="150400.5.8.3"/>
  <changelog author="jengelh@inai.de" date="1579780800">- Avoid double-shipping libdebuginfo.so.1 in two different
  subpackages. Fixup RPM group.</changelog>
  <changelog author="mliska@suse.cz" date="1580817600">- Exclude debuginfod sub-packages and move them to elfutils-debuginfod.</changelog>
  <changelog author="dimstar@opensuse.org" date="1581336000">- Re-add libelf1 to baselibs.conf: we still generate a
  libelf-devel-32bit, which is only installable if libelf1-21bit
  also exists.</changelog>
  <changelog author="mliska@suse.cz" date="1585569600">- Update to version 0.179:
  debuginfod-client: When DEBUGINFOD_PROGRESS is set and the program doesn't
    install its own debuginfod_progressfn_t show download
    progress on stderr.
    DEBUGINFOD_TIMEOUT is now defined as seconds to get at
    least 100K, defaults to 90 seconds.
    Default to $XDG_CACHE_HOME/debuginfod_client.
    New functions debuginfod_set_user_data,
    debuginfod_get_user_data, debuginfod_get_url and
    debuginfod_add_http_header.
    Support for file:// URLs.
  debuginfod: Uses libarchive directly for reading rpm archives.
    Support for indexing .deb/.ddeb archives through dpkg-deb
    or bsdtar.
    Generic archive support through -Z EXT[=CMD]. Which can be
    used for example for arch-linux pacman files by using
  - Z '.tar.zst=zstdcat'.
    Better logging using User-Agent and X-Forwarded-For headers.
    More prometheus metrics.
    Support for eliding dots or extraneous slashes in path names.
  debuginfod-find: Accept /path/names in place of buildid hex.
  libelf: Handle PN_XNUM in elf_getphdrnum before shdr 0 is cached
    Ensure zlib resource cleanup on failure.
  libdwfl: dwfl_linux_kernel_find_elf and dwfl_linux_kernel_report_offline
    now find and handle a compressed vmlinuz image.
  readelf, elflint: Handle PT_GNU_PROPERTY.
  translations: Updated Ukrainian translation.</changelog>
  <changelog author="mliska@suse.cz" date="1591876800">- Update to version 0.180:
  elflint: Allow SHF_EXCLUDE as generic section flag when --gnu is given.
  libdw, readelf: Handle GCC LTO .gnu.debuglto_ prefix.
  libdw: Use correct CU to resolve file names in dwarf_decl_file.
  libdwfl: Handle debugaltlink in dwfl_standard_find_debuginfo.
  size: Also obey radix printing for bsd format.
  nm: Explicitly print weak 'V' or 'T' and common 'C' symbols.
- Add 0001-tests-Add-GCOV-flags-when-necessary.patch in order to fix
  an unresolved symbol.
- Enable LTO: boo#1138796 by adding -flto-partition=none and -Wno-error=stack-usage.</changelog>
  <changelog author="mliska@suse.cz" date="1592222400">- Remove cfi-fix.patch - should not be needed now.
- Remove remove-run-large-elf-file.sh.patch as it now checks for memory
  size.
- Use autosetup.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1599566400">- Update to version 0.181:
  libelf: elf_update now compensates (fixes up) a bad sh_addralign for
    SHF_COMPRESSED sections.
  libdebuginfod: configure now takes --enable-libdebuginfod=dummy or
  - -disable-libdebuginfod for bootstrapping.
    DEBUGINFOD_URLS now accepts "scheme-free" urls
    (guessing at what the user meant, either http:// or file://)
  readelf, elflint: Handle aarch64 bti, pac bits in dynamic table and gnu
    property notes.
  libdw, readelf: Recognize DW_CFA_AARCH64_negate_ra_state. Allows unwinding
    on arm64 for code that is compiled for PAC (Pointer
    Authentication Code) as long as it isn't enabled
- Drop upstream patch:
  * 0001-tests-Add-GCOV-flags-when-necessary.patch</changelog>
  <changelog author="mliska@suse.cz" date="1600776000">- Creatu dummy subpackages that can be used for build of packages
  that are in bootstrap cycle.
- Add Provides for real packages.</changelog>
  <changelog author="mliska@suse.cz" date="1604577600">- Add rpmlintrc for
  libdebuginfod1-dummy.s390x: E: shlib-policy-name-error (Badness: 10000) libdebuginfod1
  which is expected as libdebuginfod1 and it's dummy library do share equal
  soname.
- Update to version 0.182:
  backends: Support for tilegx has been removed.
  config: New /etc/profile.d files to provide default $DEBUGINFOD_URLS.
  debuginfod: More efficient package traversal, tolerate various errors
    during scanning, grooming progress is more visible and
    interruptible, more prometheus metrics.
  debuginfod-client: Now supports compressed (kernel) ELF images.
  libdwfl: Add ZSTD compression support.</changelog>
  <changelog author="mliska@suse.cz" date="1606737600">- Mention elfutils-rpmlintrc as a Source.</changelog>
  <changelog author="mliska@suse.cz" date="1611144000">- Enable LTO (boo#1138796) for elfutils.spec.</changelog>
  <changelog author="mliska@suse.cz" date="1612785600">- Update to version 0.183:
  debuginfod: New thread-busy metric and more detailed error metrics.
    New --fdcache-mintmp and tracking of filesystem freespace.
    New increased webapi concurrency while grooming.
  debuginfod-client: DEBUGINFOD_SONAME macro added to debuginfod.h which
    can be used to dlopen the libdebuginfod.so library.
    New function debuginfod_set_verbose_fd and
    DEBUGINFOD_VERBOSE environment variable.
  config: profile.sh and profile.csh won't export DEBUGINFOD_URLS unless
    configured --enable-debuginfod-urls[=URLS]
  elflint, readelf: Recognize SHF_GNU_RETAIN.
    Handle SHT_X86_64_UNWIND as valid relocation target.
- Remove config-do-not-define-DEBUGINFOD_URLS-environment-var.patch patch.</changelog>
  <changelog author="mliska@suse.cz" date="1615982400">- Add disable-run-readelf-self-test.patch in order to disable
  a failing test-case with GCC 11 (PR27367).</changelog>
  <changelog author="mliska@suse.cz" date="1620648000">- Update to version 0.184:
  debuginfod: Use libarchive's bsdtar as the .deb-family file unpacker.
  debuginfod-client: Client caches negative results. If a query for a
    file failed with 404, an empty 000 permission
    file is created in the cache. This will prevent
    requesting the same file for the next 10 minutes.
    Client objects now carry long-lived curl handles
    for outgoing connections.  This makes it more
    efficient for multiple sequential queries, because
    the TCP connections and/or TLS state info are kept
    around awhile, avoiding O(100ms) setup latencies.
  libdw: handle DW_FORM_indirect when reading attributes
  translations: Update Polish translation.</changelog>
  <changelog author="mliska@suse.cz" date="1621857600">- Update to version 0.185:
  debuginfod-client: Simplify curl handle reuse so downloads which
    return an error are retried.
  elfcompress: Always exit with code 0 when the operation succeeds (even
    when nothing was done). On error the exit code is now always 1.</changelog>
  <changelog author="jcheung@suse.com" date="1626004800">- For version 0.185, the below patches are no longer needed
  (jsc#SLE-17288, jsc#SLE-17951)
  libdw-check-end-of-attributes-list-consistently.patch
  elflint-dont-check-section-group-without-flags-word.patch
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
  elfutils-dont-trust-sh_entsize.patch
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
  size-handle-recursive-elf-ar-files.patch
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
  use-the-empty-string-for-note-names-with-zero-size.patch
  readelf-fix-off-by-one-sanity-check.patch
  libebl-check-NT_PLATFORM-core-notes.patch
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
  libelf-check-compression-before-allocate-output-buffer.patch
  libdwfl-sanity-check-partial-core-file-data-reads.patch
  arlib-check-that-sh_entsize-isnt-zero.patch</changelog>
  <changelog author="martin.liska@suse.com" date="1628251200">- Add disable-run-deleted-test.patch in order to disable
  failing test-case (boo#1189153).</changelog>
  <changelog author="martin.liska@suse.com" date="1633953600">- Enhance license fields: all the libraries actually have a different
  license to the tools. While the tools are GPL-3.0-or-later, the
  libraries are (LGPL-3.0-or-later OR GPL-2.0-or-later)
  SLE bug (for tracking the above) bsc#1191310</changelog>
  <changelog author="tonyj@suse.com" date="1645790400">- Add support for zstd, needed to inspect kernel modules (bsc#1196510)</changelog>
  <changelog author="matz@suse.com" date="1761134400">- Add elfutils-fix-large-alignment.diff and elfutils-pr28190.diff
  to fix build/testsuite for more recent glibc and kernels.
- Add elfutils-fuzz-1.diff, elfutils-fuzz-2.diff,
  elfutils-fuzz-3.diff, elfutils-fuzz-4.diff [bsc#1237236,
  bsc#1237240, bsc#1237241, bsc#1237242].
- Add elfutils-fix-debuginfod-groom-race.diff to fix a testsuite
  race in run-debuginfod-find.sh.</changelog>
</package>
<package pkgid="9ed3c6045b0914acfe3236c25099b10e2ac2338e08add780dd47e5f5b8626593" name="libasm1" arch="x86_64">
  <version epoch="0" ver="0.185" rel="150400.5.8.3"/>
  <changelog author="jengelh@inai.de" date="1579780800">- Avoid double-shipping libdebuginfo.so.1 in two different
  subpackages. Fixup RPM group.</changelog>
  <changelog author="mliska@suse.cz" date="1580817600">- Exclude debuginfod sub-packages and move them to elfutils-debuginfod.</changelog>
  <changelog author="dimstar@opensuse.org" date="1581336000">- Re-add libelf1 to baselibs.conf: we still generate a
  libelf-devel-32bit, which is only installable if libelf1-21bit
  also exists.</changelog>
  <changelog author="mliska@suse.cz" date="1585569600">- Update to version 0.179:
  debuginfod-client: When DEBUGINFOD_PROGRESS is set and the program doesn't
    install its own debuginfod_progressfn_t show download
    progress on stderr.
    DEBUGINFOD_TIMEOUT is now defined as seconds to get at
    least 100K, defaults to 90 seconds.
    Default to $XDG_CACHE_HOME/debuginfod_client.
    New functions debuginfod_set_user_data,
    debuginfod_get_user_data, debuginfod_get_url and
    debuginfod_add_http_header.
    Support for file:// URLs.
  debuginfod: Uses libarchive directly for reading rpm archives.
    Support for indexing .deb/.ddeb archives through dpkg-deb
    or bsdtar.
    Generic archive support through -Z EXT[=CMD]. Which can be
    used for example for arch-linux pacman files by using
  - Z '.tar.zst=zstdcat'.
    Better logging using User-Agent and X-Forwarded-For headers.
    More prometheus metrics.
    Support for eliding dots or extraneous slashes in path names.
  debuginfod-find: Accept /path/names in place of buildid hex.
  libelf: Handle PN_XNUM in elf_getphdrnum before shdr 0 is cached
    Ensure zlib resource cleanup on failure.
  libdwfl: dwfl_linux_kernel_find_elf and dwfl_linux_kernel_report_offline
    now find and handle a compressed vmlinuz image.
  readelf, elflint: Handle PT_GNU_PROPERTY.
  translations: Updated Ukrainian translation.</changelog>
  <changelog author="mliska@suse.cz" date="1591876800">- Update to version 0.180:
  elflint: Allow SHF_EXCLUDE as generic section flag when --gnu is given.
  libdw, readelf: Handle GCC LTO .gnu.debuglto_ prefix.
  libdw: Use correct CU to resolve file names in dwarf_decl_file.
  libdwfl: Handle debugaltlink in dwfl_standard_find_debuginfo.
  size: Also obey radix printing for bsd format.
  nm: Explicitly print weak 'V' or 'T' and common 'C' symbols.
- Add 0001-tests-Add-GCOV-flags-when-necessary.patch in order to fix
  an unresolved symbol.
- Enable LTO: boo#1138796 by adding -flto-partition=none and -Wno-error=stack-usage.</changelog>
  <changelog author="mliska@suse.cz" date="1592222400">- Remove cfi-fix.patch - should not be needed now.
- Remove remove-run-large-elf-file.sh.patch as it now checks for memory
  size.
- Use autosetup.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1599566400">- Update to version 0.181:
  libelf: elf_update now compensates (fixes up) a bad sh_addralign for
    SHF_COMPRESSED sections.
  libdebuginfod: configure now takes --enable-libdebuginfod=dummy or
  - -disable-libdebuginfod for bootstrapping.
    DEBUGINFOD_URLS now accepts "scheme-free" urls
    (guessing at what the user meant, either http:// or file://)
  readelf, elflint: Handle aarch64 bti, pac bits in dynamic table and gnu
    property notes.
  libdw, readelf: Recognize DW_CFA_AARCH64_negate_ra_state. Allows unwinding
    on arm64 for code that is compiled for PAC (Pointer
    Authentication Code) as long as it isn't enabled
- Drop upstream patch:
  * 0001-tests-Add-GCOV-flags-when-necessary.patch</changelog>
  <changelog author="mliska@suse.cz" date="1600776000">- Creatu dummy subpackages that can be used for build of packages
  that are in bootstrap cycle.
- Add Provides for real packages.</changelog>
  <changelog author="mliska@suse.cz" date="1604577600">- Add rpmlintrc for
  libdebuginfod1-dummy.s390x: E: shlib-policy-name-error (Badness: 10000) libdebuginfod1
  which is expected as libdebuginfod1 and it's dummy library do share equal
  soname.
- Update to version 0.182:
  backends: Support for tilegx has been removed.
  config: New /etc/profile.d files to provide default $DEBUGINFOD_URLS.
  debuginfod: More efficient package traversal, tolerate various errors
    during scanning, grooming progress is more visible and
    interruptible, more prometheus metrics.
  debuginfod-client: Now supports compressed (kernel) ELF images.
  libdwfl: Add ZSTD compression support.</changelog>
  <changelog author="mliska@suse.cz" date="1606737600">- Mention elfutils-rpmlintrc as a Source.</changelog>
  <changelog author="mliska@suse.cz" date="1611144000">- Enable LTO (boo#1138796) for elfutils.spec.</changelog>
  <changelog author="mliska@suse.cz" date="1612785600">- Update to version 0.183:
  debuginfod: New thread-busy metric and more detailed error metrics.
    New --fdcache-mintmp and tracking of filesystem freespace.
    New increased webapi concurrency while grooming.
  debuginfod-client: DEBUGINFOD_SONAME macro added to debuginfod.h which
    can be used to dlopen the libdebuginfod.so library.
    New function debuginfod_set_verbose_fd and
    DEBUGINFOD_VERBOSE environment variable.
  config: profile.sh and profile.csh won't export DEBUGINFOD_URLS unless
    configured --enable-debuginfod-urls[=URLS]
  elflint, readelf: Recognize SHF_GNU_RETAIN.
    Handle SHT_X86_64_UNWIND as valid relocation target.
- Remove config-do-not-define-DEBUGINFOD_URLS-environment-var.patch patch.</changelog>
  <changelog author="mliska@suse.cz" date="1615982400">- Add disable-run-readelf-self-test.patch in order to disable
  a failing test-case with GCC 11 (PR27367).</changelog>
  <changelog author="mliska@suse.cz" date="1620648000">- Update to version 0.184:
  debuginfod: Use libarchive's bsdtar as the .deb-family file unpacker.
  debuginfod-client: Client caches negative results. If a query for a
    file failed with 404, an empty 000 permission
    file is created in the cache. This will prevent
    requesting the same file for the next 10 minutes.
    Client objects now carry long-lived curl handles
    for outgoing connections.  This makes it more
    efficient for multiple sequential queries, because
    the TCP connections and/or TLS state info are kept
    around awhile, avoiding O(100ms) setup latencies.
  libdw: handle DW_FORM_indirect when reading attributes
  translations: Update Polish translation.</changelog>
  <changelog author="mliska@suse.cz" date="1621857600">- Update to version 0.185:
  debuginfod-client: Simplify curl handle reuse so downloads which
    return an error are retried.
  elfcompress: Always exit with code 0 when the operation succeeds (even
    when nothing was done). On error the exit code is now always 1.</changelog>
  <changelog author="jcheung@suse.com" date="1626004800">- For version 0.185, the below patches are no longer needed
  (jsc#SLE-17288, jsc#SLE-17951)
  libdw-check-end-of-attributes-list-consistently.patch
  elflint-dont-check-section-group-without-flags-word.patch
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
  elfutils-dont-trust-sh_entsize.patch
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
  size-handle-recursive-elf-ar-files.patch
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
  use-the-empty-string-for-note-names-with-zero-size.patch
  readelf-fix-off-by-one-sanity-check.patch
  libebl-check-NT_PLATFORM-core-notes.patch
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
  libelf-check-compression-before-allocate-output-buffer.patch
  libdwfl-sanity-check-partial-core-file-data-reads.patch
  arlib-check-that-sh_entsize-isnt-zero.patch</changelog>
  <changelog author="martin.liska@suse.com" date="1628251200">- Add disable-run-deleted-test.patch in order to disable
  failing test-case (boo#1189153).</changelog>
  <changelog author="martin.liska@suse.com" date="1633953600">- Enhance license fields: all the libraries actually have a different
  license to the tools. While the tools are GPL-3.0-or-later, the
  libraries are (LGPL-3.0-or-later OR GPL-2.0-or-later)
  SLE bug (for tracking the above) bsc#1191310</changelog>
  <changelog author="tonyj@suse.com" date="1645790400">- Add support for zstd, needed to inspect kernel modules (bsc#1196510)</changelog>
  <changelog author="matz@suse.com" date="1761134400">- Add elfutils-fix-large-alignment.diff and elfutils-pr28190.diff
  to fix build/testsuite for more recent glibc and kernels.
- Add elfutils-fuzz-1.diff, elfutils-fuzz-2.diff,
  elfutils-fuzz-3.diff, elfutils-fuzz-4.diff [bsc#1237236,
  bsc#1237240, bsc#1237241, bsc#1237242].
- Add elfutils-fix-debuginfod-groom-race.diff to fix a testsuite
  race in run-debuginfod-find.sh.</changelog>
</package>
<package pkgid="6ea8a0bfa0bd420aea5ae8ccb4d017ed51ad4c23a5f6494330eb75c230cd7b6b" name="libatomic1" arch="x86_64">
  <version epoch="0" ver="14.3.0+git11799" rel="150000.1.11.1"/>
  <changelog author="rguenther@suse.com" date="1728475200">- Update to gcc-14 branch head, 4af44f2cf7d281f3e4f3957ef, git10750
  * includes libstdc++6 fix for parsing tzdata 2024b [gcc#116657]
- Add gcc14-pr116629.patch to fix ICE with LTO building openvino
  on aarch64 [boo#1230262]</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1732968000">- Add loongarch64 to asan_arch, atomic_arch,
  itm_arch, lsan_arch, tsan_arch and ubsan_arch
- Add larchintrin.h, lasxintrin.h and lsxintrin.h
  headers to gccXY main package in %files section
- Set build_primary_64bit to 1 for loongarch64</changelog>
  <changelog author="adrian@suse.de" date="1733140800">- disable go on loongarch64 for now</changelog>
  <changelog author="mardnh@gmx.de" date="1736078400">- Switch to glibc based cross-compiler for target hppa</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Define ALT_CC_UNDER_TEST and ALT_CXX_UNDER_TEST for compat tests</changelog>
  <changelog author="rguenther@suse.com" date="1738152000">- For cross compilers require the same or newer binutils, newlib
  or cross-glibc that was used at build time.  [bsc#1232526]</changelog>
  <changelog author="rguenther@suse.com" date="1738843200">- Adjust cross compiler requirements to use %requires_ge
- Fix condition on whether to enable plugins or JIT support to
  not check sle_version which is not defined in SLFO but to check
  is_opensuse and suse_version instead.
- Add gcc14-pr118780.patch to make the SLFO config work.</changelog>
  <changelog author="rguenther@suse.com" date="1740052800">- Update to gcc-14 branch head, 9ffecde121af883b60bbe60d0, git11321
  * fixes reported ICE in [bsc#1237442]
- Drop gcc14-pr116629.patch now backported to the branch.</changelog>
  <changelog author="rguenther@suse.com" date="1741608000">- Disable profiling during build when %want_reproducible_builds is set
  [bsc#1238491]</changelog>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
</package>
<package pkgid="ed70a4ea6e2d3d65ab6bb3babcf0a41ba45ed6a1aaf373ccfd200c81b80f5d6c" name="libatomic1" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.3.3"/>
  <changelog author="rguenther@suse.com" date="1743163200">- Update to GCC trunk head, 15.0.1+git9001
  * includes -msplit-patch-nops required for user-space livepatching
    on powerpc
  * includes fix for Ada build with --enable-host-pie
- Adjust for removed avx10_2roundingintrin.h intrinsic header.
- Build GCC executables PIE on SLE.  [bsc#1239938]</changelog>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="44fde0a9463efbc4abc14d423f97640db1ca14e520ab9b9194eb0f43bc5a17ce" name="libatomic1" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.6.1"/>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
</package>
<package pkgid="4a114158c66f90c0c64343c2c1a3a04176113b6491484baad975ece6fde6ccd5" name="libatomic1" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.9.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc14-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="d9c0a59bb15033363734f6192c263dc76517db52dd473e9b419ed2c045b5b533" name="libatomic1-32bit" arch="x86_64">
  <version epoch="0" ver="14.3.0+git11799" rel="150000.1.11.1"/>
  <changelog author="rguenther@suse.com" date="1728475200">- Update to gcc-14 branch head, 4af44f2cf7d281f3e4f3957ef, git10750
  * includes libstdc++6 fix for parsing tzdata 2024b [gcc#116657]
- Add gcc14-pr116629.patch to fix ICE with LTO building openvino
  on aarch64 [boo#1230262]</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1732968000">- Add loongarch64 to asan_arch, atomic_arch,
  itm_arch, lsan_arch, tsan_arch and ubsan_arch
- Add larchintrin.h, lasxintrin.h and lsxintrin.h
  headers to gccXY main package in %files section
- Set build_primary_64bit to 1 for loongarch64</changelog>
  <changelog author="adrian@suse.de" date="1733140800">- disable go on loongarch64 for now</changelog>
  <changelog author="mardnh@gmx.de" date="1736078400">- Switch to glibc based cross-compiler for target hppa</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Define ALT_CC_UNDER_TEST and ALT_CXX_UNDER_TEST for compat tests</changelog>
  <changelog author="rguenther@suse.com" date="1738152000">- For cross compilers require the same or newer binutils, newlib
  or cross-glibc that was used at build time.  [bsc#1232526]</changelog>
  <changelog author="rguenther@suse.com" date="1738843200">- Adjust cross compiler requirements to use %requires_ge
- Fix condition on whether to enable plugins or JIT support to
  not check sle_version which is not defined in SLFO but to check
  is_opensuse and suse_version instead.
- Add gcc14-pr118780.patch to make the SLFO config work.</changelog>
  <changelog author="rguenther@suse.com" date="1740052800">- Update to gcc-14 branch head, 9ffecde121af883b60bbe60d0, git11321
  * fixes reported ICE in [bsc#1237442]
- Drop gcc14-pr116629.patch now backported to the branch.</changelog>
  <changelog author="rguenther@suse.com" date="1741608000">- Disable profiling during build when %want_reproducible_builds is set
  [bsc#1238491]</changelog>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
</package>
<package pkgid="a967ceba99d4d98937aee10c32fd4b75dd1455a9f6dbff72e410e0c0ebb9f87b" name="libatomic1-32bit" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.3.3"/>
  <changelog author="rguenther@suse.com" date="1743163200">- Update to GCC trunk head, 15.0.1+git9001
  * includes -msplit-patch-nops required for user-space livepatching
    on powerpc
  * includes fix for Ada build with --enable-host-pie
- Adjust for removed avx10_2roundingintrin.h intrinsic header.
- Build GCC executables PIE on SLE.  [bsc#1239938]</changelog>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="05c59288eb756079b9e9e041e938013e6a8d92a722e04d01e11a2f2a5d5a5f64" name="libatomic1-32bit" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.6.1"/>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
</package>
<package pkgid="4a8376da19b359074402aa0bf8a3043b3178855a1614656560330380cff83226" name="libatomic1-32bit" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.9.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc14-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="15a9dc208c259618bf0212e5dda44b1faf17568221e61ca33d267fa440aec48e" name="libaugeas0" arch="x86_64">
  <version epoch="0" ver="1.14.1" rel="150600.3.3.1"/>
  <changelog author="vcizek@suse.com" date="1509019200">- Version update to 1.9.0:
  - General changes/additions
  * Fix error in handling escaped whitespace at the end of path expressions
    (addresses CVE-2017-7555)
  * several improvements to the error messages when transforming a tree
    back to text fails. They now make it clearer what part of the tree
    was problematic, and what the tree should have looked like.
  * Fixed the pkg-config file, which should now be usable
  * Fix handling of backslash-escaping in strings and regular expressions
    in the lens language. We used to handle constructs like "\\" and
    /\\\\/ incorrectly. (Issue #495)
  * do not unescape the default value of a del on create; otherwise we are
    double unescaping these strings (Issue #507)
  * remove tempfile when saving files because destination is not writable
    (Issue #479)
  * span information is now updated on save (Issue #467)
  * fix lots of warnings generated by gcc 7.1
  * Various changes to reduce bashisms in tests and make them run on
    FreeBSD (Romain Tartière)
  - API changes
  * add function aug_ns_attr to allow iterating through a nodeset
    quickly. See examples/dump.c for an example of how to use them
    instead of aug_get, aug_label etc. and for a way to measure
    performance gains.
  - Lens changes/additions
  * Ceph: new lens for /etc/ceph/ceph.conf
  * Cgconfig: accept fperm &amp; dperm in admin &amp; task (Pino Toscano)
  * Dovecot: also load files from /usr/local/etc (Roy Hubbard)
  * Exports: relax the rules for the path at the beginning of a line so
    that double-quoted paths are legal, too
  * Getcap: new lens to parse generic termcap-style capability databases
  * Grub: accept toplevel 'boot' entry (Pino Toscano)
  * Httpd: handle empty comments with a continuation line (Issue #423);
    handle '&gt;""' in a directive properly (Issue #429); make space between
    quoted arguments optional (Issue #435); accept quoted strings as part
    of bare arguments (Issue #470)
  * Nginx: load files from sites-available directory (Omer Katz) (Issue #471)
  * Nslcd: new lens for nss-pam-ldapd config (Jose Plana)
  * Oz: New lense for /etc/oz/oz.cnf
  * postfix lenses: also load files from /usr/local/etc (Roy Hubbard)
  * Properties: accept DOS line endings (Issue #468)
  * Rtadvd: new lens to parse the rtadvd configuration file (Matt Dainty)
  * Rsyslog: load files from /etc/rsyslog.d (Doug Wilson) (Issue #475);
    allow spaces before the # starting a comment; allow comments inside
    config statements like 'module'
  * Ssh: accept '=' to separate keyword from arguments
  * Sshd: split HostKeyAlgorithms into list of values; recognize quoted
    group names with spaces in them (Issue #477)
  * Sudoers: recognize "match_group_by_gid" (Luigi Toscano) (Issue #482)
  * Syslog: allow spaces before the # starting a comment
  * Termcap: new lens to parse termcap capability databases (Matt Dainty)
  * Vsftpd: accept seccomp_sandbox (Denys Stroebel)
  * Xymon: accept 'group-sorted' directive (Issue #462)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1521547200">- update to 1.10.1:
  General changes/additions
    New CLI utility 'augmatch' to print the tree for a file and select
    some of its contents
    New command 'count' in augtool
    New function 'not(bool) -&gt; bool' for path expressions
    The path expression 'label[. = "value"]' can now be written more
    concisely as 'label["value"]'
  API changes
    libfa has now a function fa_json to export an FA as a JSON file, and
    fa_state_* functions that make it possible to iterate over the FA's
    states and transitions. (Pedro Valero Mejia)
    Add functions aug_ns_label, aug_ns_value, aug_ns_count, and
    aug_ns_path to get the label (with index), the value, the number of
    nodes, and the fully qualified path for nodes stored in a nodeset in
    a variable efficiently
  Lens changes/additions
    Grubenv: new lens to process /boot/grub/grubenv (omgold)
    Httpd: also read files from /etc/httpd/conf.modules.d/*.conf
    (Tomas Meszaros) (Issue #537)
    Nsswitch: allow comments at the end of a line (Philip Hahn) (Issue #517)
    Ntp: accept 'ntpsigndsocket' statement (Philip Hahn) (Issue #516)
    Properties: accept empty comments with DOS line endings (Issue #161)
    Rancid: new lens for RANCiD router databases (Matt Dainty)
    Resolv: accept empty comments with DOS line endings (Issue #161)
    Systemd: also process /etc/systemd/logind.conf (Pat Riehecky)
    YAML: process a document that is just a sequence (John Vandenberg)
- drop chrpath dependency, the offending dump binary is no longer shipped</changelog>
  <changelog author="jengelh@inai.de" date="1521547201">- Fix RPM groups.</changelog>
  <changelog author="ecsos@opensuse.org" date="1545652800">- update to 1.11.0
  General changes/additions
  - augmatch: add a --quiet option; make the exit status useful
    to tell whether there was a match or not
  - Drastically reduce the amount of memory needed to evaluate
    complex path expressions against large files (Issue #569)
  - Fix a segfault on OSX when 'augmatch' is run without any
    arguments (Issue #556)
  API changes
  - aug_source did not in fact return the source; and always
    returned NULL for that. That has been fixed.
  Lens changes/additions
  - Chrony: add new options supported in chrony 3.2 and 3.3
    (Miroslav Lichvar)
  - Dhclient: fix parsing of append/prepend and similar
    directives (John Morrissey)
  - Fstab: allow leading whitespace in mount entry lines
    (Pino Toscano) (Issue #544)
  - Grub: tolerate some invalid entries. Those invalid entries
    get mapped to '#error' nodes
  - Httpd: accept comments with whitespace right after a tag
    opening a section (Issue #577)
  - Json: allow escaped slashes in strings (Issue #557)
  - Multipath: accept regular expressions for devnode, wwid,
    and property in blacklist and blacklist_exceptions sections
    (Issue #564)
  - Nginx: parse /etc/nginx/sites-enabled (plumbeo) allow
    semicolons inside double quoted strings in simple directives,
    and allow simple directives without an argument (Issue #566)
  - Redis: accept the 'bind' statement with multiple IP addresses
    (yannh) (Issue #194)
  - Rsyslog: support include() directive introduced in
    rsyslog 8.33
  - Strongswan: new lens (Kaarle Ritvanen)
  - Systemd: do not try to treat *.d or *.wants directories as
    configuration files (Issue #548)</changelog>
  <changelog author="vcizek@suse.com" date="1549972800">- Don't ignore %check test result, the testsuite now successfully
  passes</changelog>
  <changelog author="mliska@suse.cz" date="1552305600">- Add gcc9-disable-broken-test.patch in order to address bsc#1120894.</changelog>
  <changelog author="elimat@opensuse.org" date="1594123200">- update to 1.12.0
  General changes/additions
  - update gnulib to 91584ed6
  Lens changes/additions
  - Anaconda: new lens to process /etc/sysconfig/anaconda instead of Shellvars (Pino Toscano) (Issue #597)
  - DevfsRules: add lens for FreeBSD devfs.rules files
  - Dovecot: permit ! in block titles (Nathan Ward) (Issue #599)
  - Hostname: Allow creation of hostname when file is missing (David Farrell) (Issue #606)
  - Krb5: add more pkinit_* options (Issue #603)
  - Logrotate: fix missing recognition of double quoted filenames (Issue #611)
  - Multipath: accept values enclosed in quotes (Issue #583)
  - Nginx: support unix sockets as server address (Issue #618)
  - Nsswitch: add merge action (Issue #609)
  - Pam: accept continuation lines (Issue #590)
  - Puppetfile: allow symbols as (optional) values (Issue #619) allow comments in entries (Issue #620)
  - Rsyslog: support dynamic file paths (Issue #622) treat #!/+/- as comment (arnolda, PR #595)
  - Syslog: accept 'include' directive (Issue #486)
  - Semanage: new lens to process /etc/selinux/semanage.conf instead of Simplevars (Pino Toscano) (Issue #594)
  - Shellvars: allow and/or in @if conditions (#582) accept functions wrapped in round brackets, accept variables with a dash in their name, exclude csh/tcsh profile scripts (Pino Toscano) (Issue #600) accept variable as command (Issue #601)
  - Ssh: accept RekeyLimit (Issue #605)
  - Sshd: accept '=' to separate option names from their values (Emil Dragu, #587)
  - Sudoers: support 'always_query_group_plugin' flag (Steve Traylen, #588)
  - Strongswan: parse lists. This is a backwards-incompatible change since list entries that were parsed into a single string are now split into a list of entries (Kaarle Ritvanen)
  - Toml: new lens to parse .toml files (PR #91)
  - Xorg: accept empty values for options (arnolda, PR #596)
- refresh patches
- run spec-cleaner</changelog>
  <changelog author="jsikes@suse.com" date="1612872000">- Add new directives and options supported in chrony since 3.3 up to 4.0.
  * augeas-new_options_for_chrony.patch
  * [bsc#1178470]
  * sourced from https://github.com/hercules-team/augeas/pull/698</changelog>
  <changelog author="jsikes@suse.com" date="1622030400">- Allow all printable ASCII characters in WPA-PSK definition
  * augeas-allow_printable_ASCII.patch
  * bsc#1185524
  * Sourced from https://github.com/hercules-team/augeas/pull/723/commits
  * Credit to Michal Filka &lt;mfilka@suse.com&gt;</changelog>
  <changelog author="dmueller@suse.com" date="1623153600">- add remove-unportable-tests.patch to fix build</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- testsuite requires glibc-locale, buildrequire it</changelog>
  <changelog author="david.anes@suse.com" date="1649246400">- add augeas-sysctl_parsing.patch (bsc#1197443)
  * backport original patch and rebase</changelog>
  <changelog author="jengelh@inai.de" date="1650974400">- Employ shared library packaging guideline and resolve this
  rpmlint report: "libaugeas0.x86_64: E: shlib-policy-name-error
  SONAME: libfa.so.1, expected package suffix: 1" [boo#1191749]</changelog>
  <changelog author="fvogt@suse.com" date="1658836800">- Unset MALLOC_PERTURB_ to speed up %check significantly
  (boo#1201884, gh#hercules-team#768)</changelog>
  <changelog author="jsikes@suse.com" date="1667563200">- Update to 1.13.0
  * Fixes bsc#1204554
  * Added augeas-1.13.0-replace_security_context_t-patch to fix a
    syntax error.
  * Rebased gcc9-disable-broken-test.patch
  * Dropped the following patches since they are now upstreamed:
  - augeas-new_options_for_chrony.patch
  - augeas-allow_printable_ASCII.patch
  - remove-unportable-tests.patch
  * General changes/additions
  - Add Dockerfile (Nicolas Gif) (Issue #650)
  - augtool: Improved readline integration to handle quoting
    issues (Pino Toscano)
  - typechecker: Allow including '/' in keys and labels. Thanks
    to felixdoerre for pointing out that this restriction was
    unnecessary. See issue #668 for the discussion.
  - Add function modified() to select nodes which are marked as
    dirty (George Hansper) (Issue #691)
  - Add CLI command 'preview' and API 'aug_preview' to preview
    file contents (George Hansper) (#690)
  - Add "else" operator to augeas path-filter expressions
    (priority selector) (George Hansper) (#692)
  - Add new axis 'seq' to allow /path/seq::*[expr] to match and
    create numeric nodes, as idempotent alternative to
    /path/*[expr] (George Hansper) (#706)
  * Lens changes/additions
  - Authinfo2: new lens to parse Authinfo2 format (Nicolas Gif)
    (Issue #649)
  - Chrony: add new options (Miroslav Lichvar) (Issue #698)
  - Cmdline: New lens to parse /proc/cmdline (Thomas Weißschuh)
  - Crypttab: support UUID in device and / in opt (Raphaël
    Pinson) (#713)
  - Fail2ban: new lens to parse Fail2ban format (Nicolas Gif)
    (Issue #651)
  - Grub: support '+' in kernel command line option names (Pino
    Toscano) (Issue #647)
  - Krb5: handle [plugins] subsection (Pino Toscano) (Issue #663)
  - Limits: support colons in the domain pattern of the limits
    lens (Xavier Mol) (Issue #645)
  - Logrotate: add hourly schedule (Jason A. Smith) (Issue #655)
  - Mke2fs: parse more common entries between [defaults] and the
    tags in [fs_types], fix the type of few entries, handle the
    [options] stanza (Pino Toscano) (Issue #642)
  - support quoted values (Pino Toscano) (Issue #661)
  - NetworkManager: allow # in values (mfilka) (#723)
  - Opendkim: update to match current conffile format (Issue #644)
  - Postfix_Master: Allow unix-dgram as type (Issue #635)
  - Postfix_transport: Allow underscore (Anton Baranov) (Issue #678)
  - Postgresql: Allow hyphen '-' in values that don't require quotes
    (Marcin Barczyński) (Issues #700 #701)
  - Properties: Allow "/" in property names (felixdoerre) (Issue #680)
  - Redis: add incl path /etc/redis.conf (Raphaël Pinson) (#726)
  - support "replicaof" (Raphaël Pinson) (#727)
  - fix support for "sentinel" (Raphaël Pinson) (#728)
  - Resolv: Support new options (Trevor Vaughan) (Issues #707 #708)
  - Rsyslog: support multiple actions in filters and selectors (Issue
    [#653])
  - Shellvars: exclude more tcsh profile scripts (Pino Toscano) (Issue
    [#627])
  - Simplevars: add ocsinventory-agent.cfg (Pat Riehecky) (Issue #637)
  - Sudoers: support new @include/@includedir directives (Pino
    Toscano) (Issue #693)
  - Sudoers: Allow AD groups (luchihoratiu) (Issue #696)
  - Support negative integers (Ando David Roots) (#724)
  - Ssh: add Match keyword support (granquet) (Issue #695)
  - Sshd: support quotes in Match conditions (Issue #739)
  - Systemd: fix parsing of envvars with spaces (Pino Toscano) (#659)
  - Add incl paths according to 'systemd.network(5)' (chruetli) (#683)
  - Tinc: new lens for Tinc VPN configuration files (Thomas Weißschuh)
    (#718)
  - Toml: support arrays (norec) in inline tables (Raphaël Pinson)
    (#703)
  - Tmpfiles: improvements to the types specification (Pino Toscano)
    (Issue #694)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680782400">- Use the correct license - LGPL-2.1</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update to 1.14.0
  * General changes/additions
  - Update submodule gnulib to 2f7479a16a3395f1429c7795f10c5d19b9b4453e
    (#781)
  - Add bash-completion for augtool, augmatch, augprint (#783) George
    Hansper
  - Fix: Allow values to contain arbitrary unbalanced square brackets
    (#782) George Hansper
  - Add package bash to build stage in Dockerfile (#776) George Hansper
  - Add augprint tool for creating idempotent augtool scripts (#752) George
    Hansper
  - Replace deprecated 'security_context_t' with 'char *' (#747) Leo-Schmit
  - src/syntax.c: Fix whitespace which confuses static checkers
    (#725) rwmjones
  - README.md: Add oss-fuzz status badge (#702) Sergey Nizovtsev
  - Package augmatch, too (#688) oleksandriegorov
  - Add Github workflow to create releases with complete source tarballs
    (#744) Hilko Bengen
  * Lens changes/additions
  - Resolv: add option trust-ad (#784) George Hansper
  - Sos: new lens for /etc/sos/sos.conf (based on IniFile) (#779) George
    Hansper
  - Pg_Hba: unquoted auth-method may contain hyphens (#777) George Hansper
  - Sysctl: Allow keys to contain * and : and / characters (#755) M Filka
  - Semanage: Fix parsing of ignoredirs (#758) Richard W M Jones
  - Systemd: allow empty quoted environment variable values (#757) Michal
    Vasko
  - Systemd: allow values starting with whitespaces for Exec* and
    Environment service entries. (#757) Michal Vasko
  - Toml: workaround to allow writing toml files (#742) Richard
  - Kdump: parse "auto_reset_crashkernel" (#754) Laszlo Ersek
  - Keepalived: add parameters notify_stop and notify_deleted (#749) Adam
    Bambuch
  - Chrony: add new directives and options (#745) Miroslav Lichvar
  - Redis: Allow redis lens to set 'SAVE ""' as a valid option (#738) Mitch
    Hagstrand
  - ClamAV: update ClamAV lens to autoload /etc/clamav/*.conf
    (#748) Guillaume Ross
  - AuthselectPam: new lens for /etc/authselect/custom/*/*-auth
    and /etc/authselect/custom/*/postlogin (#743) Heston Snodgrass
  - Sshd: Parse GSSAPIKexAlgorithms PubkeyAcceptedKeyTypes
    CASignatureAlgorithms as comma-seperated lists instead of simple
    strings (#721) Edward Garbade
  - Yum: Add additional unit tests (#677) Pat Riehecky
  - Cockpit: new lens for /etc/cockpit/cockpit.conf (#675) Pat Riehecky
  * Rebased patch gcc9-disable-broken-test.patch
  * Deleted patches:
  - augeas-sysctl_parsing.patch
  - augeas-1.13.0-replace_security_context_t-patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1692878400">- Update to 1.14.1 (jsc#PED-6581)
  * General changes/additions
  - internal.c: update #if to only use GNU-specific strerror_r() when GLIBC
    is defined (#791) Dimitry Andric
  - augeas.c: Fix bug from PR#691 where the nodes of a newly created file
    are lost upon a subsequent load operation (#810) George Hansper
  - HACKING.md: describe testing (#796) Laszlo Ersek
  - Add GitHub Actions (#714) Raphaël Pinson
  - augprint.c: remove #include &lt;malloc.h&gt; , add #include &lt;libgen.h&gt;
    (#792) Ruoyu Zhong
  * Lens changes/additions
  - TOML: support trailing commas in arrays (#809) Bao
  - Tmpfiles: allow '=', '~', '^' for letter types, allow ":" as prefix for
    the mode (#805) Pino Toscano
  - Sshd: Add keyword PubkeyAcceptedAlgorithms as comma-separated list of
    items (#806) Dave Re
  - Cmdline: Allow whitespace at the end of kernel commnd line
    (#798) rwmjones</changelog>
  <changelog author="martin.schreiner@suse.com" date="1745409600">- Add patch, fix for bsc#1239909 / CVE-2025-2588:
  * CVE-2025-2588.patch</changelog>
</package>
<package pkgid="848eea5e4f75f2212def153e37a1e717cd0ce1be9e6b997b0012a803c12448c1" name="libavahi-client3" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.12.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- avahi-daemon-check-dns.sh: convert obsolete egrep call to grep -E
  (boo#1203092)</changelog>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
</package>
<package pkgid="ec5f17bb56a8a756cc2b8645c9fa14d5cb4dba0dcb083c92b27261e4be6af949" name="libavahi-client3" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.15.1"/>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1775044800">- Add avahi-CVE-2026-24401.patch: Fix unsolicited mDNS response
  containing a recursive CNAME record (bsc#1257235).</changelog>
</package>
<package pkgid="9bc63943ac50cca1770e169891c570c8bca667ee1144ff9627fa711fd75fdda5" name="libavahi-client3" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.9.1"/>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="jengelh@inai.de" date="1650024000">- Stop requiring "avahi" from "libavahi-devel". The devel package
  ought to facilitate building programs with avahi, not run the
  whole deamon.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1657368000">- Move the dbus-1 system.d file to /usr (bsc#1201345)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- avahi-daemon-check-dns.sh: convert obsolete egrep call to grep -E
  (boo#1203092)</changelog>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
</package>
<package pkgid="811720d104476c3614a0d306de07126d9ba62a63a3c9020de62650adca7d8b99" name="libavahi-client3-32bit" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.12.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- avahi-daemon-check-dns.sh: convert obsolete egrep call to grep -E
  (boo#1203092)</changelog>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
</package>
<package pkgid="9237791fe038b40ed30fb756606a664ce233c0b4f206098e7105401ecc361da4" name="libavahi-client3-32bit" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.15.1"/>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1775044800">- Add avahi-CVE-2026-24401.patch: Fix unsolicited mDNS response
  containing a recursive CNAME record (bsc#1257235).</changelog>
</package>
<package pkgid="c66a44080dcab6849f659cede85caf05b222bdc6c77cdaa08d8586d252b31985" name="libavahi-client3-32bit" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.9.1"/>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="jengelh@inai.de" date="1650024000">- Stop requiring "avahi" from "libavahi-devel". The devel package
  ought to facilitate building programs with avahi, not run the
  whole deamon.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1657368000">- Move the dbus-1 system.d file to /usr (bsc#1201345)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- avahi-daemon-check-dns.sh: convert obsolete egrep call to grep -E
  (boo#1203092)</changelog>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
</package>
<package pkgid="ef041f314b3b570c8da553f23a2d950b7a7fc187cc9a11dc7789268eb1cedd43" name="libavahi-common3" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.12.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- avahi-daemon-check-dns.sh: convert obsolete egrep call to grep -E
  (boo#1203092)</changelog>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
</package>
<package pkgid="8c4026d5aefc10a70981b1dbfa12e9fde9247e17bd369e45c38c32cae2e0eab8" name="libavahi-common3" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.15.1"/>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1775044800">- Add avahi-CVE-2026-24401.patch: Fix unsolicited mDNS response
  containing a recursive CNAME record (bsc#1257235).</changelog>
</package>
<package pkgid="75b0601f6851fe4c626bd57196d9d2694faaa85013ece3bd57077cea5fea127d" name="libavahi-common3" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.9.1"/>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="jengelh@inai.de" date="1650024000">- Stop requiring "avahi" from "libavahi-devel". The devel package
  ought to facilitate building programs with avahi, not run the
  whole deamon.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1657368000">- Move the dbus-1 system.d file to /usr (bsc#1201345)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- avahi-daemon-check-dns.sh: convert obsolete egrep call to grep -E
  (boo#1203092)</changelog>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
</package>
<package pkgid="b8d7fdb7bfae1906c626a0406e36ac999fac50001ae37c6595d05efefb8688e2" name="libavahi-common3-32bit" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.12.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- avahi-daemon-check-dns.sh: convert obsolete egrep call to grep -E
  (boo#1203092)</changelog>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
</package>
<package pkgid="4bf1973f6c6bea428f6e5d2804a88ecf6cf64cbe9c870734083041d3b5c7b642" name="libavahi-common3-32bit" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.15.1"/>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1775044800">- Add avahi-CVE-2026-24401.patch: Fix unsolicited mDNS response
  containing a recursive CNAME record (bsc#1257235).</changelog>
</package>
<package pkgid="a44910e2967692d8d5e567e55af34ad3bce2a978209418f0a8a6e0e0b77a24fa" name="libavahi-common3-32bit" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.9.1"/>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="jengelh@inai.de" date="1650024000">- Stop requiring "avahi" from "libavahi-devel". The devel package
  ought to facilitate building programs with avahi, not run the
  whole deamon.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1657368000">- Move the dbus-1 system.d file to /usr (bsc#1201345)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- avahi-daemon-check-dns.sh: convert obsolete egrep call to grep -E
  (boo#1203092)</changelog>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
</package>
<package pkgid="be1ef241b4e4b54e8aa378fb1341fd742dfa80bcfd9f1c5b625816241858a89f" name="libavahi-core7" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.12.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- avahi-daemon-check-dns.sh: convert obsolete egrep call to grep -E
  (boo#1203092)</changelog>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
</package>
<package pkgid="45ecde74a1905e6fbdb310d571cd6183256d3084d2b7992f9a037b5677837ad0" name="libavahi-core7" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.15.1"/>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1775044800">- Add avahi-CVE-2026-24401.patch: Fix unsolicited mDNS response
  containing a recursive CNAME record (bsc#1257235).</changelog>
</package>
<package pkgid="7ae2881c24ff65d7fbc3a0b8c52dd925a464c660854d3ea96bffec2d6db2471d" name="libavahi-core7" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.9.1"/>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="jengelh@inai.de" date="1650024000">- Stop requiring "avahi" from "libavahi-devel". The devel package
  ought to facilitate building programs with avahi, not run the
  whole deamon.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1657368000">- Move the dbus-1 system.d file to /usr (bsc#1201345)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- avahi-daemon-check-dns.sh: convert obsolete egrep call to grep -E
  (boo#1203092)</changelog>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
</package>
<package pkgid="ac50658cb37b9ee42d2878cc886a3d2ed5f09334306476e693390b7f280f7f71" name="libavahi-devel" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.12.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- avahi-daemon-check-dns.sh: convert obsolete egrep call to grep -E
  (boo#1203092)</changelog>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
</package>
<package pkgid="3615e8b4eb953bab465c22a6189ed8e074e828fb67f60155ac69e35bc525ca0f" name="libavahi-devel" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.15.1"/>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1775044800">- Add avahi-CVE-2026-24401.patch: Fix unsolicited mDNS response
  containing a recursive CNAME record (bsc#1257235).</changelog>
</package>
<package pkgid="e691de8714590ed7b201348307c8f020198aad959d5f8dd1291c40c5416c4675" name="libavahi-devel" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.9.1"/>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="jengelh@inai.de" date="1650024000">- Stop requiring "avahi" from "libavahi-devel". The devel package
  ought to facilitate building programs with avahi, not run the
  whole deamon.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1657368000">- Move the dbus-1 system.d file to /usr (bsc#1201345)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- avahi-daemon-check-dns.sh: convert obsolete egrep call to grep -E
  (boo#1203092)</changelog>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
</package>
<package pkgid="959ea4f84218b268b97e06b03dc3483dc8d593afdf8cd89e52d10120fe8858cc" name="libavahi-glib-devel" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.12.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- avahi-daemon-check-dns.sh: convert obsolete egrep call to grep -E
  (boo#1203092)</changelog>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
</package>
<package pkgid="fa7dbced21d61426716e7443e5865880c916fefccb08ccd9f4700ba202b7e5f2" name="libavahi-glib-devel" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.15.1"/>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1775044800">- Add avahi-CVE-2026-24401.patch: Fix unsolicited mDNS response
  containing a recursive CNAME record (bsc#1257235).</changelog>
</package>
<package pkgid="cfa9e9915727837fdd8d9ce0c8274d1ff62507f5d10c8534c587a4caa3046d2d" name="libavahi-glib-devel" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.9.1"/>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="jengelh@inai.de" date="1650024000">- Stop requiring "avahi" from "libavahi-devel". The devel package
  ought to facilitate building programs with avahi, not run the
  whole deamon.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1657368000">- Move the dbus-1 system.d file to /usr (bsc#1201345)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- avahi-daemon-check-dns.sh: convert obsolete egrep call to grep -E
  (boo#1203092)</changelog>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
</package>
<package pkgid="8187a15ce68926dea807725c8204e914b641e3764d023797ec2454b2d356d004" name="libavahi-glib1" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.12.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- avahi-daemon-check-dns.sh: convert obsolete egrep call to grep -E
  (boo#1203092)</changelog>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
</package>
<package pkgid="ad2784d676ee055835027becc9ac32f81113791ebc86196be8337a63c7ec504d" name="libavahi-glib1" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.15.1"/>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1775044800">- Add avahi-CVE-2026-24401.patch: Fix unsolicited mDNS response
  containing a recursive CNAME record (bsc#1257235).</changelog>
</package>
<package pkgid="cfa62b88ebbac268ddbfe3f74b1adbbb7b4e8fc4ac8c70235ee808bf824791f0" name="libavahi-glib1" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.9.1"/>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="jengelh@inai.de" date="1650024000">- Stop requiring "avahi" from "libavahi-devel". The devel package
  ought to facilitate building programs with avahi, not run the
  whole deamon.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1657368000">- Move the dbus-1 system.d file to /usr (bsc#1201345)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- avahi-daemon-check-dns.sh: convert obsolete egrep call to grep -E
  (boo#1203092)</changelog>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
</package>
<package pkgid="e7926e7ff8d767a030190d0549c657c6ce56f810efc3f9bdee30e894f5e6ccad" name="libavahi-gobject0" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.12.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- avahi-daemon-check-dns.sh: convert obsolete egrep call to grep -E
  (boo#1203092)</changelog>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
</package>
<package pkgid="aa5117a97f372be1d857afd3e6c1a7f3a537a505940844afb2d80ce096c3a169" name="libavahi-gobject0" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.15.1"/>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1775044800">- Add avahi-CVE-2026-24401.patch: Fix unsolicited mDNS response
  containing a recursive CNAME record (bsc#1257235).</changelog>
</package>
<package pkgid="4ef780bdd1ce0ea3a4b637a266671d8368edb07a66930970ca94bbb9d2ddc002" name="libavahi-gobject0" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.9.1"/>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="jengelh@inai.de" date="1650024000">- Stop requiring "avahi" from "libavahi-devel". The devel package
  ought to facilitate building programs with avahi, not run the
  whole deamon.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1657368000">- Move the dbus-1 system.d file to /usr (bsc#1201345)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- avahi-daemon-check-dns.sh: convert obsolete egrep call to grep -E
  (boo#1203092)</changelog>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
</package>
<package pkgid="3f353fe8b59ece4a2d4b46776f8742f666748781e7de38422394bf1f562c87c6" name="libavahi-libevent1" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.12.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- avahi-daemon-check-dns.sh: convert obsolete egrep call to grep -E
  (boo#1203092)</changelog>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
</package>
<package pkgid="23fc97623dcb494dcebef4462b08a62a8fb99cb9ad2aad1f7453f1c25850a185" name="libavahi-libevent1" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.15.1"/>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1775044800">- Add avahi-CVE-2026-24401.patch: Fix unsolicited mDNS response
  containing a recursive CNAME record (bsc#1257235).</changelog>
</package>
<package pkgid="33c4725d3b866d89175420748ad5163a9c5984d05f7fe9ef44a53ead47bc68cc" name="libavahi-libevent1" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.9.1"/>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="jengelh@inai.de" date="1650024000">- Stop requiring "avahi" from "libavahi-devel". The devel package
  ought to facilitate building programs with avahi, not run the
  whole deamon.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1657368000">- Move the dbus-1 system.d file to /usr (bsc#1201345)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- avahi-daemon-check-dns.sh: convert obsolete egrep call to grep -E
  (boo#1203092)</changelog>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
</package>
<package pkgid="6d6f585e893ba377e425f6daa74b1376cdddcbfeb93a1b48b26d30979551c7c4" name="libavahi-ui-gtk3-0" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.12.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- avahi-daemon-check-dns.sh: convert obsolete egrep call to grep -E
  (boo#1203092)</changelog>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
</package>
<package pkgid="57a67b036ca00d108fb7371eee378b93fc85973e5f8a4f3ee2abc3f56445ddbc" name="libavahi-ui-gtk3-0" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.15.1"/>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1775044800">- Add avahi-CVE-2026-24401.patch: Fix unsolicited mDNS response
  containing a recursive CNAME record (bsc#1257235).</changelog>
</package>
<package pkgid="666970f76ea4b87224b519b55c41af83b7df9480f1060962ef94708988f6ee80" name="libavahi-ui-gtk3-0" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.9.1"/>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="jengelh@inai.de" date="1650024000">- Stop requiring "avahi" from "libavahi-devel". The devel package
  ought to facilitate building programs with avahi, not run the
  whole deamon.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1657368000">- Move the dbus-1 system.d file to /usr (bsc#1201345)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- avahi-daemon-check-dns.sh: convert obsolete egrep call to grep -E
  (boo#1203092)</changelog>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
</package>
<package pkgid="42ddd717cfd9f39e23ca31c67babaedc26911e5d69715439ed4a01368f459efd" name="libavif" arch="src">
  <version epoch="0" ver="1.3.0" rel="150700.3.6.1"/>
  <changelog author="asn@cryptomilk.org" date="1634817600">- Update to version 0.9.3
  * See https://github.com/AOMediaCodec/libavif/blob/v0.9.3/CHANGELOG.md
    for a complete changelog.</changelog>
  <changelog author="asn@cryptomilk.org" date="1640433600">- Disable libaom and use rav1e by default
  * As PHP 8.1 has AVIF support, use rav1e by default as it is more
    secure being written in Rust.</changelog>
  <changelog author="asn@cryptomilk.org" date="1649419200">- Update to version 0.10.0
  * See https://github.com/AOMediaCodec/libavif/blob/v0.10.0/CHANGELOG.md
    for a complete changelog or check the CHANGELOG.md in the doc directory.</changelog>
  <changelog author="dmueller@suse.com" date="1650801600">- update to 0.10.1:
  * tests/docker/build.sh: Build SVT-AV1 using cmake and ninja directly
  * Fix a Visual Studio 2017 compiler warning in src\reformat.c: warning C4204:
    nonstandard extension used: non-constant aggregate initializer
  * Fix the help message of avifdec: --index takes a value</changelog>
  <changelog author="gmbr3@opensuse.org" date="1659182400">- Enable libyuv on TW</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665835200">- Update to version 0.11.0:
  * There are incompatible ABI changes in this release. The
    alphaRange member was removed from the avifImage struct. The
    chromaDownsampling and avoidLibYUV members were added to the
    avifRGBImage struct. The imageDimensionLimit member was added
    to the avifDecoder struct. avifImageCopy() and
    avifImageAllocatePlanes() signatures changed. It is necessary
    to recompile your code. Also check the return values of
    avifImageCopy() and avifImageAllocatePlanes().
  * Added:
  - Add man pages for avifenc and avifdec
  - Add the avifChannelIndex type alias for enum avifChannelIndex
  - Add avifChromaDownsampling enum
  - Add chromaDownsampling field to avifRGBImage struct
  - Add support for AVIF_RGB_FORMAT_RGB_565
  - Add imageDimensionLimit field to avifDecoder struct
  - Add autoTiling field to avifEncoder struct
  - Add new avifResult codes AVIF_RESULT_CANNOT_CHANGE_SETTING
    and AVIF_RESULT_INCOMPATIBLE_IMAGE
  - Add new enum constants AVIF_PIXEL_FORMAT_COUNT and
    AVIF_RGB_FORMAT_COUNT
  - avifdec: Add --dimension-limit, which specifies the image
    dimension limit (width or height) that should be tolerated
  - avifenc: Add --sharpyuv, which enables "sharp" RGB to YUV420
    conversion, which reduces artifacts caused by 420 chroma
    downsampling. Needs libsharpyuv (part of the libwebp
    repository) at compile time.
  - avifenc: Add --ignore-exif and --ignore-xmp flags.
  - avifenc: Add --autotiling, which sets --tilerowslog2 and
  - -tilecolslog2 automatically.
  - avifenc: Input Exif orientation is converted to irot/imir by
    default.
  * Changed:
  - Fix memory leaks of metadata on avifenc exit
  - Update the handling of 'lsel' and progressive decoding to
    AVIF spec v1.1.0
  - Treat an absent lsel and layer_id == 0xFFFF equivalently for
    backward compatibility with earlier drafts of AVIF spec
    v1.1.0
  - Set libavif's own default value of cfg.rc_end_usage for
    libaom
  - Set the libaom-specific option -a tune=ssim by default
  - Bump cmake_minimum_required from 3.5 to 3.13
  - Fix https://crbug.com/oss-fuzz/48135
  - Use several new libyuv functions in reformat_libyuv.c
  - Fix SVT-AV1's issue 1957 related to uninitialized variables
    crashing the encoder
  - Update aom.cmd: v3.5.0
  - Update rav1e.cmd: v0.5.1
  - Update svt.cmd/svt.sh: v1.2.1
  - Update libgav1.cmd: v0.18.0
  - Update libyuv.cmd: f9fda6e7 (version 1844)
  - avifImageCopy() and avifImageAllocatePlanes() now return
    avifResult instead of void to report invalid parameters or
    memory allocation failures.
  - avifImageRGBToYUV() now uses libyuv fast paths by default. It
    may slightly change conversion results. The old behavior can
    be restored by setting avifRGBImage::chromaDownsampling to
    AVIF_CHROMA_DOWNSAMPLING_BEST_QUALITY and
    avifRGBImage::avoidLibYUV to AVIF_TRUE.
  - avifRGBImage::chromaUpsampling now only applies to
    conversions that need upsampling chroma from 4:2:0 or 4:2:2
    and has no impact on the use of libyuv.
  - Set avifRGBImage::avoidLibYUV accordingly to control the use
    of libyuv.
  - avifenc: Set the YUV format to 4:0:0 for grayscale PNGs
  - Support updating encoder settings and codec-specific options
    during encoding
  - Disable AVIF_STRICT_CLAP_VALID and AVIF_STRICT_PIXI_REQUIRED
    in the JNI wrapper
  - avifdec: Return proper exit code in "info" mode
  - In avifenc and avifdec, treat all arguments that start with
    '-' as options
  - Exif and XMP metadata is imported from PNG and JPEG files.
  - avifImageSetMetadataExif() parses the Exif metadata and
    converts any Exif orientation found into transformFlags, irot
    and imir values.
  - Write 'auxi' box for animated images with alpha channel
  - Write 'auxv' as handler_type for alpha channel track
  - Use PNG_COLOR_TYPE_GRAY for 8-bit grayscale output
  - Replace repeated subtraction by modulo in calcGCD
  - Change avifImageCreate to take uint32_t instead of int
    parameters
  - When writing an image sequence, check if it's safe to cast
    width and height to uint16_t
  - Allow clamped grid cells in avifEncoderAddImageGrid()
  * Removed:
  - alphaRange field was removed from the avifImage struct. It it
    presumed that alpha plane is always full range.
  - The avifCodecConfigurationBox struct becomes a private type
    for libavif internal use
- Bump lib_soversion global (also in baselibs.conf) to 15 following
  upstream change.
- Use ldconfig_scriptlets for post(un) handling.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1666872000">- Remove unused BuildRequires on nasm
- Remove indirect/incorrect Buildrequires on zlib
- add direct glib Buildrequires</changelog>
  <changelog author="ecsos@opensuse.org" date="1668427200">- Update to version 0.11.1:
  * Changed:
  - avifincrtest_helpers: Cast 64-bit offset to size_t
  - avifmetadatatest: don't include avif/internal.h
  - avifrgbtoyuvtest: skip if no libsharpyuv
  - Disable tests that may fail if the codec is not aom (#1176)</changelog>
  <changelog author="suse+build@de-korte.org" date="1683460800">- Add BuildRequires pkgconfig(libwebp) to enable libsharpyuv</changelog>
  <changelog author="info@paolostivanin.com" date="1693310400">- Update to 1.0.0:
  * Incompatible changes:
    + The clli member was added to the avifImage struct.
    + The repetitionCount member was added to the avifEncoder and avifDecoder
    structs.
    + The quality and qualityAlpha members were added to the avifEncoder struct.
    + Check that functions returning pointers do not return NULL before accessing
    those pointers.
    + Check the return value of avifEncoderSetCodecSpecificOption().
    + The maxThreads member was added to the avifRGBImage struct.
    + Check the return value of avifRGBImageAllocatePixels(), avifRWDataRealloc(),
    avifRWDataSet(), avifImageSetProfileICC(), avifImageSetMetadataExif() and
    avifImageSetMetadataXMP().
    + The meaning of the keyframeInterval member of avifEncoder struct has changed
    slightly. When set to a value of "n",
    Before: It forces a keyframe on every nth frame.
    After: Any set of "n" consecutive frame will have at least one keyframe
    (every nth frame may or may not be a keyframe).
  * Added:
    + Add clli metadata read and write support
    + Add repetitionCount member to avifEncoder and avifDecoder structs to specify
    the number of repetitions for animated image sequences.
    + Add quality and qualityAlpha to avifEncoder. Note: minQuantizer,
    maxQuantizer, minQuantizerAlpha, and maxQuantizerAlpha are deprecated. Code
    should be updated to set quality (and qualityAlpha if applicable) and leave
    minQuantizer, maxQuantizer, minQuantizerAlpha, and maxQuantizerAlpha
    initialized to the default values.
    + The --target-size flag in avifenc was added to adapt the quality so that the
    output file size is as close to the given number of bytes as possible.
    + Add the public API function avifImageIsOpaque() in avif.h.
    + Add the public API functions avifImagePlane(), avifImagePlaneRowBytes(),
    avifImagePlaneWidth(), and avifImagePlaneHeight() in avif.h.
    + Add API for multi-threaded YUV to RGB color conversion.
    + Allow lossless 4:0:0 on grayscale input.
    + Add avifenc --no-overwrite flag to avoid overwriting output file.
    + Add avifenc --clli flag to set clli.
    + Add support for all transfer functions when using libsharpyuv.
  * Changed:
    + Exif and XMP metadata is exported to PNG and JPEG files by default,
    except XMP payloads larger than 65502 bytes in JPEG.
    + The --grid flag in avifenc can be used for images that are not evenly divided
    into cells.
    + Change the encoder to write the boxes within the "stbl" box in the order of
    stsd, stts, stsc, stsz, stco, stss.
    + avifImageRGBToYUV() and avifImageYUVToRGB() handle avifImage bit depths 8, 10,
    12 and now also 16. Files read by apps/shared/ can output 16-bit avifImage
    instances.
    + avifImageCreate(), avifImageCreateEmpty(), avifEncoderCreate() and other
    internal functions now return NULL if a memory allocation failed.
    + avifEncoderSetCodecSpecificOption() now returns avifResult instead of void to
    report memory allocation failures.
- Add fix-gdkpixbuf.patch.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1701172800">- update to 1.0.2:
  * Update avifCropRectConvertCleanApertureBox() to the revised
    requirements in ISO/IEC 23000-22:2019/Amd. 2:2021 Section
    7.3.6.7.
  * CVE-2023-6350: Out of bounds memory to alphaItemIndices (boo#1217614)
  * CVE-2023-6351: use-after-free in colorProperties (boo#1217615)
- drop fix-gdkpixbuf.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1703160000">- update to 1.0.3:
  * Rewrite the fix for memory errors fixed in 1.0.2
  * Fix use-after-free errors.
    (CVE-2023-6704, boo#1218303)
  * src/reformat.c: Allocate the threadData array directly</changelog>
  <changelog author="dmueller@suse.com" date="1710676800">- update to 1.0.4:
  * AVIF_ENABLE_WERROR is set to OFF by default.
  * Fix wrong alpha plane deallocation when decoded tile pixel
    format does not match reconstructed output image pixel format
  * Fix identical chunk skipping optimization when writing
    animation data
  * Fix ID selection for artificial grid alpha item when decoding
    a grid of tiles which each have an associated auxiliary alpha
    image item (https://crbug.com/oss-fuzz/65657).</changelog>
  <changelog author="dmueller@suse.com" date="1725105600">- update to 1.1.1:
  * In avif.h, change "AVIF_API AVIF_NODISCARD" back to
    "AVIF_NODISCARD AVIF_API" to fix clang-cl and MSVC compilation
    errors in the shared library build on Windows.
  * Fix -DAVIF_GTEST=SYSTEM
  * Fix infe_type and codec_config_type wrongly read as byte-
    aligned fields in the
  * experimental feature AVIF_ENABLE_EXPERIMENTAL_METAV1.
  * When building aom as a local dependency, runtime CPU
    detection (`CONFIG_RUNTIME_CPU_DETECT`) is now always `ON`;
  * Fix CMake config shared library leaks
  * Update gain map metadata to current ISO 21496-1 draft.
  * cmake: Only search for ASM_NASM language on x86_64 platforms.
  * Fix "No known features for CXX compiler" CMake error.
  * Fix aom link flags so that transitive library link flags are
    included when aom is a static library
  * Fix out-of-order 'dimg' grid associations
  * Report files with an item used in multiple 'dimg' boxes with
  * AVIF_RESULT_NOT_IMPLEMENTED instead of
    AVIF_RESULT_INVALID_IMAGE_GRID.
  * Add experimental API for reading and writing gain maps in
    AVIF files.
  * If enabled at compile time, add `gainMap` field to
    `avifImage`,
  * add `qualityGainMap` field to `avifEncoder`, add
    `gainMapPresent`, `enableDecodingGainMap`,
    `enableParsingGainMapMetadata` and `ignoreColorAndAlpha` to
    `avifDecoder`.
  * Utility functions for working with gain maps are also added.
  * Gain maps allow readers that support them to display HDR
    images that look good on both HDR and SDR displays.
  * Add experimental support for converting jpeg files with gain
    maps to AVIF files with gain maps. Requires libxml2, and the
    AVIF_ENABLE_EXPERIMENTAL_GAIN_MAP compilation flag.
  * Add a --qgain-map flag to control the gain map quality in
    avifenc.
  * Add the headerFormat member of new type avifHeaderFormat to
    avifEncoder.
  * Add experimental API for reading and writing "mif3"-branded
    AVIF files behind the compilation flag
    AVIF_ENABLE_EXPERIMENTAL_METAV1.
  * Implement avifImageScale() fallback when libyuv is not
    available.
  * Partial import of libyuv to third_party/libyuv (new LICENSE).
  * Add avifenc flag suffixes ":update" and ":u". Quality-
    relative, tiling-relative and codec-specific flags can now be
    positional, relative to input files.
  * Add experimental support for layered AVIF encoding in
    avifenc.
  * Use the --layered flag to enable layered AVIF encoding.
  * Layered AVIF has multiple layers, which works like frame of
    animated AVIF, and layers can be rendered in progressive
    manner on supported viewers
  * Only aom supports layered AVIF encoding at the time of
    writing.
  * Add --scaling-mode flag to set scaling mode of each layer.
  * This part of AV1 encoder is not as thoroughly tested, so
    there are higher possibility encoder may crash when given certain
    configuration or input.
  * Add imageSequenceTrackPresent flag to the avifDecoder struct.
  * avifImageScale() function was made part of the public ABI.
  * Add avif_cxx.h as a C++ header with basic functionality.
  * Add enum aliases AVIF_COLOR_PRIMARIES_SRGB,
    AVIF_COLOR_PRIMARIES_BT2100,
  * AVIF_COLOR_PRIMARIES_DCI_P3,
    AVIF_TRANSFER_CHARACTERISTICS_PQ.
  * Add avifResult enum entry AVIF_RESULT_INTERNAL_ERROR.
  * Require libyuv by default (but it can still be disabled with
  * -DAVIF_LIBYUV=OFF).
  * Add avifdec --icc flag to override the output color profile.
  * Add experimental API for reading and writing 16-bit AVIF
    files behind the
  * compilation flag AVIF_ENABLE_EXPERIMENTAL_SAMPLE_TRANSFORM.
  * Add AVIF_CHROMA_SAMPLE_POSITION_RESERVED to
    avifChromaSamplePosition enum.</changelog>
  <changelog author="kieltux@gmail.com" date="1725969600">- Enable building with aom and libyuv for Leap</changelog>
  <changelog author="munix9@googlemail.com" date="1744891200">- update to 1.2.1:
  * Added since 1.2.0
  - Add support for outputting all frames of an image sequence in avifdec.
  - avifdec --index all sequence.avif out.png creates files named
  - out-xxxxxxxxxx.png where xxxxxxxxxx are the zero-padded frame indices.
  * Changed since 1.2.0
  - Fix local libargparse dependency patch step on macOS 10.15 and earlier.
  - Patch local libyuv dependency for compatibility with gcc 10.
  - Use stricter C99 syntax to avoid related compilation issues.
  - Update svt.cmd/svt.sh/LocalSvt.cmake to v3.0.1.
- update to 1.2.0:
  * Added since 1.1.1
  - Turn on the gain map API. Remove the AVIF_ENABLE_EXPERIMENTAL_GAIN_MAP CMake
    flag.
  - Allow YCgCo_Re and YCgCo_Ro encoding/decoding and update the enum values to
    the latest CICP specification. Remove the AVIF_ENABLE_EXPERIMENTAL_YCGCO_R
    CMake flag.
  - Add the properties and numProperties fields to avifImage. They are filled by
    the avifDecoder instance with the properties unrecognized by libavif. They are
    written by the avifEncoder.
  - Add avif(Un)SignedFraction structs and avifDoubleTo(Un)SignedFraction
    utility functions.
  - Add 'avifgainmaputil' command line tool to installed apps.
  - Add avifCropRectRequiresUpsampling().
  - Add experimental support for PixelInformationProperty syntax from HEIF 3rd Ed.
    Amd2 behind the compilation flag AVIF_ENABLE_EXPERIMENTAL_EXTENDED_PIXI.
  - Add experimental Sample Transform recipe
    BIT_DEPTH_EXTENSION_12B_8B_OVERLAP_4B.
  * Changed since 1.1.1
  - avifenc: Allow large images to be encoded.
  - Fix empty CMAKE_CXX_FLAGS_RELEASE if -DAVIF_CODEC_AOM=LOCAL -DAVIF_LIBYUV=OFF
    is specified. #2365.
  - Rename AVIF_ENABLE_EXPERIMENTAL_METAV1 to AVIF_ENABLE_EXPERIMENTAL_MINI and
    update the experimental reduced header feature to the latest specification
    draft. Rename AVIF_HEADER_REDUCED to AVIF_HEADER_MINI.
  - Update the experimental Sample Transform feature behind the
    AVIF_ENABLE_EXPERIMENTAL_SAMPLE_TRANSFORM CMake flag to the latest
    specification draft.
  - Ignore gain maps with unsupported metadata. Handle gain maps with
    writer_version &gt; 0 correctly.
  - Simplify gain map API: remove the enableParsingGainMapMetadata setting, now
    gain map metadata is always parsed if present and if this feature is compiled
    in. Replace enableDecodingGainMap and ignoreColorAndAlpha with a bit field to
    choose image content to decode. Remove gainMapPresent: users can check if
    decoder-&gt;image-&gt;gainMap != NULL instead. Remove avifGainMapMetadata and
    avifGainMapMetadataDouble structs.
  - Write an empty HandlerBox name field instead of "libavif" (saves 7 bytes).
  - Check for FileTypeBox precedence in avifParse().
  - Do not write an alternative group with the same ID as an item.
  - Update aom.cmd/LocalAom.cmake: v3.12.0. The new codec-specific option tune=iq
    (image quality) is added in libaom v3.12.0.
  - Update parseAV2SequenceHeader() and avm.cmd: research-v9.0.0
  - Update dav1d.cmd/dav1d_android.sh/LocalDav1d.cmake: 1.5.1
  - Update libjpeg.cmd/LocalJpeg.cmake: v3.0.4
  - Update libxml2.cmd/LocalLibXml2.cmake: v2.13.5
  - Update libyuv.cmd: ccdf87034 (1903)
  - Update svt.cmd/svt.sh/LocalSvt.cmake to v3.0.0. When available, use
    EbSvtAv1EncConfiguration::lossless and ::level_of_parallelism in libavif.
  - Remove AVIF_ENABLE_GTEST CMake option. It's now implied by
    AVIF_GTEST=LOCAL/SYSTEM.
  - Deprecate avifEncoder's minQuantizer, maxQuantizer, minQuantizerAlpha,
    and maxQuantizerAlpha fields. quality and qualityAlpha should be used
    instead. Deprecate avifenc's --min, --max, --minalpha and --maxalpha
    flags. -q or --qcolor and --qalpha should be used instead.
  - For dependencies, the deprecated way of setting AVIF_LOCAL_* to ON is
    removed. Dependency options can now only be set to OFF/LOCAL/SYSTEM.
  - Change the default quality for alpha to be the same as the quality for color.
  - Allow decoding subsampled images with odd Clean Aperture dimensions or offsets.
  - Deprecate avifCropRectConvertCleanApertureBox() and
    avifCleanApertureBoxConvertCropRect(). Replace them with
    avifCropRectFromCleanApertureBox() and avifCleanApertureBoxFromCropRect().
  - Write descriptive properties before transformative properties.
  - Reject non-essential transformative properties.
  - Treat avifenc --stdin as a regular positional file path argument.
  - Update man pages based on avifenc/dec's --help message.
  - android_jni: Support 16kb page size
  - android_jni: Set threads to 2 instead of CPU count
  - Fix overflows when dealing with alpha during YUV/RGB conversions and in
    avifRGBImageAllocatePixels().
  - Make avifEncoder.headerFormat a flag combination for future features.
  - Rename AVIF_HEADER_FULL to AVIF_HEADER_DEFAULT. Deprecate AVIF_HEADER_FULL.
  - Fix decoding image sequences with non video tracks (such as audio or subtitles).
  - Fix type checking of auxiliary tracks: previously any auxiliary track was
    assumed to be alpha, even if it was a different type. If the aux type is absent,
    it is assumed to be alpha.
- Add libargparse-ee74d1b53bd680748af14e737378de57e2a0a954.tar.gz
- Add %check/tests
- Add man pages</changelog>
  <changelog author="munix9@googlemail.com" date="1745496000">- Temporary deactivation of the generation of manual pages
  with pandoc due to restrictions in Factory/ring1.
  (https://build.opensuse.org/request/show/1272161#comment-2136811)</changelog>
  <changelog author="munix9@googlemail.com" date="1745841600">- Disable tests due to restrictions in Factory/ring1.</changelog>
  <changelog author="munix9@googlemail.com" date="1746792000">- update to 1.3.0:
  * Add grayscale conversions in avifImageRGBToYUV and avifImageYUVToRGB.
  * Add avifRGBFormatIsGray to check whether an avifRGBFormat is gray.
  * Reject the conversion in avifenc from non-monochrome/monochrome to
    monochrome/non-monochrome when an ICC profile is present and not explicitly
    discarded.
  * Forbid encoding with AVIF_MATRIX_COEFFICIENTS_IDENTITY and
    AVIF_PIXEL_FORMAT_YUV400 to be AV1 spec compatible.
  * Do not go through RGB when reading/writing a grayscale PNG/JPG images in
    avifenc/avifdec
  * Ignore tmap items not present in grpl box
  * Assume any id is present in only one altr group as per spec.
  * avifpng.c: support ImageMagick app1 exif text data
  * avifjpeg.c: check for uint32_t overflow before add
  * Update googletest.cmd/LocalGTest.cmake: v1.16.0
  * Update libjpeg.cmd/LocalJpeg.cmake: 3.1.0
  * Update libsharpyuv: v1.5.0
  * Update libxml2.cmd/LocalLibXml2.cmake: v2.14.0
  * Update libyuv.cmd/LocalLibyuv.cmake: 4db2af62d (1909)
  * Update LocalRav1e.cmake: cargo-c v0.10.12
  * Update zlibpng.cmd: libpng 1.6.47
  * Fix wrong Exif orientation set in JPEG or PNG output by avifdec when the input
    AVIF file has an ImageRotation property with angle set to 1 or 3, has no
    ImageMirror property, and carries an Exif chunk. Note that Exif orientation is
    usually ignored in PNG files, so this mainly impacts JPEG files.
  * Encoder: fix ispe property for tmap with grid.
  * Decoder: check the ispe property of tmap items.
  * Allow lowercase GUIDs in XMP when reading JPEG files.
  * Update aom.cmd/LocalAom.cmake: v3.12.1
  * Change avifenc to start in automatic tiling mode.
  * Always forward Unspecified (2) CICP color primaries, transfer characteristics,
    and matrix coefficients to the AV1 encoder. Rely on the 'colr' box instead.
  * Declare *RowBytes as size_t in avifImageRGBToYUV()
    (jsc#PED-13277, CVE-2025-48175, bsc#1243270)
  * Check ftell returned value in avifjpeg.c
  * Add integer overflow checks to makeRoom.
    (jsc#PED-13277, CVE-2025-48174, bsc#1243269)
  * LocalJpeg.cmake: Support multi-config generators.
- Remove 'Group:' tags.</changelog>
  <changelog author="qzhao@suse.com" date="1752235200">- Update libavif.spec:
  Add compile condition for SvtAv1Enc, SLE-15-SP4, and other old
  releases will not build with it to make the update successful.
  (jsc#PED-13277, CVE-2025-48175, bsc#1243270, CVE-2025-48174, bsc#1243269)</changelog>
</package>
<package pkgid="c54ee3f1f53d0966661d70565039efe015f72d95bf7e1b1152a787ac273dbd94" name="libavif16" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="150700.3.6.1"/>
  <changelog author="asn@cryptomilk.org" date="1634817600">- Update to version 0.9.3
  * See https://github.com/AOMediaCodec/libavif/blob/v0.9.3/CHANGELOG.md
    for a complete changelog.</changelog>
  <changelog author="asn@cryptomilk.org" date="1640433600">- Disable libaom and use rav1e by default
  * As PHP 8.1 has AVIF support, use rav1e by default as it is more
    secure being written in Rust.</changelog>
  <changelog author="asn@cryptomilk.org" date="1649419200">- Update to version 0.10.0
  * See https://github.com/AOMediaCodec/libavif/blob/v0.10.0/CHANGELOG.md
    for a complete changelog or check the CHANGELOG.md in the doc directory.</changelog>
  <changelog author="dmueller@suse.com" date="1650801600">- update to 0.10.1:
  * tests/docker/build.sh: Build SVT-AV1 using cmake and ninja directly
  * Fix a Visual Studio 2017 compiler warning in src\reformat.c: warning C4204:
    nonstandard extension used: non-constant aggregate initializer
  * Fix the help message of avifdec: --index takes a value</changelog>
  <changelog author="gmbr3@opensuse.org" date="1659182400">- Enable libyuv on TW</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665835200">- Update to version 0.11.0:
  * There are incompatible ABI changes in this release. The
    alphaRange member was removed from the avifImage struct. The
    chromaDownsampling and avoidLibYUV members were added to the
    avifRGBImage struct. The imageDimensionLimit member was added
    to the avifDecoder struct. avifImageCopy() and
    avifImageAllocatePlanes() signatures changed. It is necessary
    to recompile your code. Also check the return values of
    avifImageCopy() and avifImageAllocatePlanes().
  * Added:
  - Add man pages for avifenc and avifdec
  - Add the avifChannelIndex type alias for enum avifChannelIndex
  - Add avifChromaDownsampling enum
  - Add chromaDownsampling field to avifRGBImage struct
  - Add support for AVIF_RGB_FORMAT_RGB_565
  - Add imageDimensionLimit field to avifDecoder struct
  - Add autoTiling field to avifEncoder struct
  - Add new avifResult codes AVIF_RESULT_CANNOT_CHANGE_SETTING
    and AVIF_RESULT_INCOMPATIBLE_IMAGE
  - Add new enum constants AVIF_PIXEL_FORMAT_COUNT and
    AVIF_RGB_FORMAT_COUNT
  - avifdec: Add --dimension-limit, which specifies the image
    dimension limit (width or height) that should be tolerated
  - avifenc: Add --sharpyuv, which enables "sharp" RGB to YUV420
    conversion, which reduces artifacts caused by 420 chroma
    downsampling. Needs libsharpyuv (part of the libwebp
    repository) at compile time.
  - avifenc: Add --ignore-exif and --ignore-xmp flags.
  - avifenc: Add --autotiling, which sets --tilerowslog2 and
  - -tilecolslog2 automatically.
  - avifenc: Input Exif orientation is converted to irot/imir by
    default.
  * Changed:
  - Fix memory leaks of metadata on avifenc exit
  - Update the handling of 'lsel' and progressive decoding to
    AVIF spec v1.1.0
  - Treat an absent lsel and layer_id == 0xFFFF equivalently for
    backward compatibility with earlier drafts of AVIF spec
    v1.1.0
  - Set libavif's own default value of cfg.rc_end_usage for
    libaom
  - Set the libaom-specific option -a tune=ssim by default
  - Bump cmake_minimum_required from 3.5 to 3.13
  - Fix https://crbug.com/oss-fuzz/48135
  - Use several new libyuv functions in reformat_libyuv.c
  - Fix SVT-AV1's issue 1957 related to uninitialized variables
    crashing the encoder
  - Update aom.cmd: v3.5.0
  - Update rav1e.cmd: v0.5.1
  - Update svt.cmd/svt.sh: v1.2.1
  - Update libgav1.cmd: v0.18.0
  - Update libyuv.cmd: f9fda6e7 (version 1844)
  - avifImageCopy() and avifImageAllocatePlanes() now return
    avifResult instead of void to report invalid parameters or
    memory allocation failures.
  - avifImageRGBToYUV() now uses libyuv fast paths by default. It
    may slightly change conversion results. The old behavior can
    be restored by setting avifRGBImage::chromaDownsampling to
    AVIF_CHROMA_DOWNSAMPLING_BEST_QUALITY and
    avifRGBImage::avoidLibYUV to AVIF_TRUE.
  - avifRGBImage::chromaUpsampling now only applies to
    conversions that need upsampling chroma from 4:2:0 or 4:2:2
    and has no impact on the use of libyuv.
  - Set avifRGBImage::avoidLibYUV accordingly to control the use
    of libyuv.
  - avifenc: Set the YUV format to 4:0:0 for grayscale PNGs
  - Support updating encoder settings and codec-specific options
    during encoding
  - Disable AVIF_STRICT_CLAP_VALID and AVIF_STRICT_PIXI_REQUIRED
    in the JNI wrapper
  - avifdec: Return proper exit code in "info" mode
  - In avifenc and avifdec, treat all arguments that start with
    '-' as options
  - Exif and XMP metadata is imported from PNG and JPEG files.
  - avifImageSetMetadataExif() parses the Exif metadata and
    converts any Exif orientation found into transformFlags, irot
    and imir values.
  - Write 'auxi' box for animated images with alpha channel
  - Write 'auxv' as handler_type for alpha channel track
  - Use PNG_COLOR_TYPE_GRAY for 8-bit grayscale output
  - Replace repeated subtraction by modulo in calcGCD
  - Change avifImageCreate to take uint32_t instead of int
    parameters
  - When writing an image sequence, check if it's safe to cast
    width and height to uint16_t
  - Allow clamped grid cells in avifEncoderAddImageGrid()
  * Removed:
  - alphaRange field was removed from the avifImage struct. It it
    presumed that alpha plane is always full range.
  - The avifCodecConfigurationBox struct becomes a private type
    for libavif internal use
- Bump lib_soversion global (also in baselibs.conf) to 15 following
  upstream change.
- Use ldconfig_scriptlets for post(un) handling.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1666872000">- Remove unused BuildRequires on nasm
- Remove indirect/incorrect Buildrequires on zlib
- add direct glib Buildrequires</changelog>
  <changelog author="ecsos@opensuse.org" date="1668427200">- Update to version 0.11.1:
  * Changed:
  - avifincrtest_helpers: Cast 64-bit offset to size_t
  - avifmetadatatest: don't include avif/internal.h
  - avifrgbtoyuvtest: skip if no libsharpyuv
  - Disable tests that may fail if the codec is not aom (#1176)</changelog>
  <changelog author="suse+build@de-korte.org" date="1683460800">- Add BuildRequires pkgconfig(libwebp) to enable libsharpyuv</changelog>
  <changelog author="info@paolostivanin.com" date="1693310400">- Update to 1.0.0:
  * Incompatible changes:
    + The clli member was added to the avifImage struct.
    + The repetitionCount member was added to the avifEncoder and avifDecoder
    structs.
    + The quality and qualityAlpha members were added to the avifEncoder struct.
    + Check that functions returning pointers do not return NULL before accessing
    those pointers.
    + Check the return value of avifEncoderSetCodecSpecificOption().
    + The maxThreads member was added to the avifRGBImage struct.
    + Check the return value of avifRGBImageAllocatePixels(), avifRWDataRealloc(),
    avifRWDataSet(), avifImageSetProfileICC(), avifImageSetMetadataExif() and
    avifImageSetMetadataXMP().
    + The meaning of the keyframeInterval member of avifEncoder struct has changed
    slightly. When set to a value of "n",
    Before: It forces a keyframe on every nth frame.
    After: Any set of "n" consecutive frame will have at least one keyframe
    (every nth frame may or may not be a keyframe).
  * Added:
    + Add clli metadata read and write support
    + Add repetitionCount member to avifEncoder and avifDecoder structs to specify
    the number of repetitions for animated image sequences.
    + Add quality and qualityAlpha to avifEncoder. Note: minQuantizer,
    maxQuantizer, minQuantizerAlpha, and maxQuantizerAlpha are deprecated. Code
    should be updated to set quality (and qualityAlpha if applicable) and leave
    minQuantizer, maxQuantizer, minQuantizerAlpha, and maxQuantizerAlpha
    initialized to the default values.
    + The --target-size flag in avifenc was added to adapt the quality so that the
    output file size is as close to the given number of bytes as possible.
    + Add the public API function avifImageIsOpaque() in avif.h.
    + Add the public API functions avifImagePlane(), avifImagePlaneRowBytes(),
    avifImagePlaneWidth(), and avifImagePlaneHeight() in avif.h.
    + Add API for multi-threaded YUV to RGB color conversion.
    + Allow lossless 4:0:0 on grayscale input.
    + Add avifenc --no-overwrite flag to avoid overwriting output file.
    + Add avifenc --clli flag to set clli.
    + Add support for all transfer functions when using libsharpyuv.
  * Changed:
    + Exif and XMP metadata is exported to PNG and JPEG files by default,
    except XMP payloads larger than 65502 bytes in JPEG.
    + The --grid flag in avifenc can be used for images that are not evenly divided
    into cells.
    + Change the encoder to write the boxes within the "stbl" box in the order of
    stsd, stts, stsc, stsz, stco, stss.
    + avifImageRGBToYUV() and avifImageYUVToRGB() handle avifImage bit depths 8, 10,
    12 and now also 16. Files read by apps/shared/ can output 16-bit avifImage
    instances.
    + avifImageCreate(), avifImageCreateEmpty(), avifEncoderCreate() and other
    internal functions now return NULL if a memory allocation failed.
    + avifEncoderSetCodecSpecificOption() now returns avifResult instead of void to
    report memory allocation failures.
- Add fix-gdkpixbuf.patch.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1701172800">- update to 1.0.2:
  * Update avifCropRectConvertCleanApertureBox() to the revised
    requirements in ISO/IEC 23000-22:2019/Amd. 2:2021 Section
    7.3.6.7.
  * CVE-2023-6350: Out of bounds memory to alphaItemIndices (boo#1217614)
  * CVE-2023-6351: use-after-free in colorProperties (boo#1217615)
- drop fix-gdkpixbuf.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1703160000">- update to 1.0.3:
  * Rewrite the fix for memory errors fixed in 1.0.2
  * Fix use-after-free errors.
    (CVE-2023-6704, boo#1218303)
  * src/reformat.c: Allocate the threadData array directly</changelog>
  <changelog author="dmueller@suse.com" date="1710676800">- update to 1.0.4:
  * AVIF_ENABLE_WERROR is set to OFF by default.
  * Fix wrong alpha plane deallocation when decoded tile pixel
    format does not match reconstructed output image pixel format
  * Fix identical chunk skipping optimization when writing
    animation data
  * Fix ID selection for artificial grid alpha item when decoding
    a grid of tiles which each have an associated auxiliary alpha
    image item (https://crbug.com/oss-fuzz/65657).</changelog>
  <changelog author="dmueller@suse.com" date="1725105600">- update to 1.1.1:
  * In avif.h, change "AVIF_API AVIF_NODISCARD" back to
    "AVIF_NODISCARD AVIF_API" to fix clang-cl and MSVC compilation
    errors in the shared library build on Windows.
  * Fix -DAVIF_GTEST=SYSTEM
  * Fix infe_type and codec_config_type wrongly read as byte-
    aligned fields in the
  * experimental feature AVIF_ENABLE_EXPERIMENTAL_METAV1.
  * When building aom as a local dependency, runtime CPU
    detection (`CONFIG_RUNTIME_CPU_DETECT`) is now always `ON`;
  * Fix CMake config shared library leaks
  * Update gain map metadata to current ISO 21496-1 draft.
  * cmake: Only search for ASM_NASM language on x86_64 platforms.
  * Fix "No known features for CXX compiler" CMake error.
  * Fix aom link flags so that transitive library link flags are
    included when aom is a static library
  * Fix out-of-order 'dimg' grid associations
  * Report files with an item used in multiple 'dimg' boxes with
  * AVIF_RESULT_NOT_IMPLEMENTED instead of
    AVIF_RESULT_INVALID_IMAGE_GRID.
  * Add experimental API for reading and writing gain maps in
    AVIF files.
  * If enabled at compile time, add `gainMap` field to
    `avifImage`,
  * add `qualityGainMap` field to `avifEncoder`, add
    `gainMapPresent`, `enableDecodingGainMap`,
    `enableParsingGainMapMetadata` and `ignoreColorAndAlpha` to
    `avifDecoder`.
  * Utility functions for working with gain maps are also added.
  * Gain maps allow readers that support them to display HDR
    images that look good on both HDR and SDR displays.
  * Add experimental support for converting jpeg files with gain
    maps to AVIF files with gain maps. Requires libxml2, and the
    AVIF_ENABLE_EXPERIMENTAL_GAIN_MAP compilation flag.
  * Add a --qgain-map flag to control the gain map quality in
    avifenc.
  * Add the headerFormat member of new type avifHeaderFormat to
    avifEncoder.
  * Add experimental API for reading and writing "mif3"-branded
    AVIF files behind the compilation flag
    AVIF_ENABLE_EXPERIMENTAL_METAV1.
  * Implement avifImageScale() fallback when libyuv is not
    available.
  * Partial import of libyuv to third_party/libyuv (new LICENSE).
  * Add avifenc flag suffixes ":update" and ":u". Quality-
    relative, tiling-relative and codec-specific flags can now be
    positional, relative to input files.
  * Add experimental support for layered AVIF encoding in
    avifenc.
  * Use the --layered flag to enable layered AVIF encoding.
  * Layered AVIF has multiple layers, which works like frame of
    animated AVIF, and layers can be rendered in progressive
    manner on supported viewers
  * Only aom supports layered AVIF encoding at the time of
    writing.
  * Add --scaling-mode flag to set scaling mode of each layer.
  * This part of AV1 encoder is not as thoroughly tested, so
    there are higher possibility encoder may crash when given certain
    configuration or input.
  * Add imageSequenceTrackPresent flag to the avifDecoder struct.
  * avifImageScale() function was made part of the public ABI.
  * Add avif_cxx.h as a C++ header with basic functionality.
  * Add enum aliases AVIF_COLOR_PRIMARIES_SRGB,
    AVIF_COLOR_PRIMARIES_BT2100,
  * AVIF_COLOR_PRIMARIES_DCI_P3,
    AVIF_TRANSFER_CHARACTERISTICS_PQ.
  * Add avifResult enum entry AVIF_RESULT_INTERNAL_ERROR.
  * Require libyuv by default (but it can still be disabled with
  * -DAVIF_LIBYUV=OFF).
  * Add avifdec --icc flag to override the output color profile.
  * Add experimental API for reading and writing 16-bit AVIF
    files behind the
  * compilation flag AVIF_ENABLE_EXPERIMENTAL_SAMPLE_TRANSFORM.
  * Add AVIF_CHROMA_SAMPLE_POSITION_RESERVED to
    avifChromaSamplePosition enum.</changelog>
  <changelog author="kieltux@gmail.com" date="1725969600">- Enable building with aom and libyuv for Leap</changelog>
  <changelog author="munix9@googlemail.com" date="1744891200">- update to 1.2.1:
  * Added since 1.2.0
  - Add support for outputting all frames of an image sequence in avifdec.
  - avifdec --index all sequence.avif out.png creates files named
  - out-xxxxxxxxxx.png where xxxxxxxxxx are the zero-padded frame indices.
  * Changed since 1.2.0
  - Fix local libargparse dependency patch step on macOS 10.15 and earlier.
  - Patch local libyuv dependency for compatibility with gcc 10.
  - Use stricter C99 syntax to avoid related compilation issues.
  - Update svt.cmd/svt.sh/LocalSvt.cmake to v3.0.1.
- update to 1.2.0:
  * Added since 1.1.1
  - Turn on the gain map API. Remove the AVIF_ENABLE_EXPERIMENTAL_GAIN_MAP CMake
    flag.
  - Allow YCgCo_Re and YCgCo_Ro encoding/decoding and update the enum values to
    the latest CICP specification. Remove the AVIF_ENABLE_EXPERIMENTAL_YCGCO_R
    CMake flag.
  - Add the properties and numProperties fields to avifImage. They are filled by
    the avifDecoder instance with the properties unrecognized by libavif. They are
    written by the avifEncoder.
  - Add avif(Un)SignedFraction structs and avifDoubleTo(Un)SignedFraction
    utility functions.
  - Add 'avifgainmaputil' command line tool to installed apps.
  - Add avifCropRectRequiresUpsampling().
  - Add experimental support for PixelInformationProperty syntax from HEIF 3rd Ed.
    Amd2 behind the compilation flag AVIF_ENABLE_EXPERIMENTAL_EXTENDED_PIXI.
  - Add experimental Sample Transform recipe
    BIT_DEPTH_EXTENSION_12B_8B_OVERLAP_4B.
  * Changed since 1.1.1
  - avifenc: Allow large images to be encoded.
  - Fix empty CMAKE_CXX_FLAGS_RELEASE if -DAVIF_CODEC_AOM=LOCAL -DAVIF_LIBYUV=OFF
    is specified. #2365.
  - Rename AVIF_ENABLE_EXPERIMENTAL_METAV1 to AVIF_ENABLE_EXPERIMENTAL_MINI and
    update the experimental reduced header feature to the latest specification
    draft. Rename AVIF_HEADER_REDUCED to AVIF_HEADER_MINI.
  - Update the experimental Sample Transform feature behind the
    AVIF_ENABLE_EXPERIMENTAL_SAMPLE_TRANSFORM CMake flag to the latest
    specification draft.
  - Ignore gain maps with unsupported metadata. Handle gain maps with
    writer_version &gt; 0 correctly.
  - Simplify gain map API: remove the enableParsingGainMapMetadata setting, now
    gain map metadata is always parsed if present and if this feature is compiled
    in. Replace enableDecodingGainMap and ignoreColorAndAlpha with a bit field to
    choose image content to decode. Remove gainMapPresent: users can check if
    decoder-&gt;image-&gt;gainMap != NULL instead. Remove avifGainMapMetadata and
    avifGainMapMetadataDouble structs.
  - Write an empty HandlerBox name field instead of "libavif" (saves 7 bytes).
  - Check for FileTypeBox precedence in avifParse().
  - Do not write an alternative group with the same ID as an item.
  - Update aom.cmd/LocalAom.cmake: v3.12.0. The new codec-specific option tune=iq
    (image quality) is added in libaom v3.12.0.
  - Update parseAV2SequenceHeader() and avm.cmd: research-v9.0.0
  - Update dav1d.cmd/dav1d_android.sh/LocalDav1d.cmake: 1.5.1
  - Update libjpeg.cmd/LocalJpeg.cmake: v3.0.4
  - Update libxml2.cmd/LocalLibXml2.cmake: v2.13.5
  - Update libyuv.cmd: ccdf87034 (1903)
  - Update svt.cmd/svt.sh/LocalSvt.cmake to v3.0.0. When available, use
    EbSvtAv1EncConfiguration::lossless and ::level_of_parallelism in libavif.
  - Remove AVIF_ENABLE_GTEST CMake option. It's now implied by
    AVIF_GTEST=LOCAL/SYSTEM.
  - Deprecate avifEncoder's minQuantizer, maxQuantizer, minQuantizerAlpha,
    and maxQuantizerAlpha fields. quality and qualityAlpha should be used
    instead. Deprecate avifenc's --min, --max, --minalpha and --maxalpha
    flags. -q or --qcolor and --qalpha should be used instead.
  - For dependencies, the deprecated way of setting AVIF_LOCAL_* to ON is
    removed. Dependency options can now only be set to OFF/LOCAL/SYSTEM.
  - Change the default quality for alpha to be the same as the quality for color.
  - Allow decoding subsampled images with odd Clean Aperture dimensions or offsets.
  - Deprecate avifCropRectConvertCleanApertureBox() and
    avifCleanApertureBoxConvertCropRect(). Replace them with
    avifCropRectFromCleanApertureBox() and avifCleanApertureBoxFromCropRect().
  - Write descriptive properties before transformative properties.
  - Reject non-essential transformative properties.
  - Treat avifenc --stdin as a regular positional file path argument.
  - Update man pages based on avifenc/dec's --help message.
  - android_jni: Support 16kb page size
  - android_jni: Set threads to 2 instead of CPU count
  - Fix overflows when dealing with alpha during YUV/RGB conversions and in
    avifRGBImageAllocatePixels().
  - Make avifEncoder.headerFormat a flag combination for future features.
  - Rename AVIF_HEADER_FULL to AVIF_HEADER_DEFAULT. Deprecate AVIF_HEADER_FULL.
  - Fix decoding image sequences with non video tracks (such as audio or subtitles).
  - Fix type checking of auxiliary tracks: previously any auxiliary track was
    assumed to be alpha, even if it was a different type. If the aux type is absent,
    it is assumed to be alpha.
- Add libargparse-ee74d1b53bd680748af14e737378de57e2a0a954.tar.gz
- Add %check/tests
- Add man pages</changelog>
  <changelog author="munix9@googlemail.com" date="1745496000">- Temporary deactivation of the generation of manual pages
  with pandoc due to restrictions in Factory/ring1.
  (https://build.opensuse.org/request/show/1272161#comment-2136811)</changelog>
  <changelog author="munix9@googlemail.com" date="1745841600">- Disable tests due to restrictions in Factory/ring1.</changelog>
  <changelog author="munix9@googlemail.com" date="1746792000">- update to 1.3.0:
  * Add grayscale conversions in avifImageRGBToYUV and avifImageYUVToRGB.
  * Add avifRGBFormatIsGray to check whether an avifRGBFormat is gray.
  * Reject the conversion in avifenc from non-monochrome/monochrome to
    monochrome/non-monochrome when an ICC profile is present and not explicitly
    discarded.
  * Forbid encoding with AVIF_MATRIX_COEFFICIENTS_IDENTITY and
    AVIF_PIXEL_FORMAT_YUV400 to be AV1 spec compatible.
  * Do not go through RGB when reading/writing a grayscale PNG/JPG images in
    avifenc/avifdec
  * Ignore tmap items not present in grpl box
  * Assume any id is present in only one altr group as per spec.
  * avifpng.c: support ImageMagick app1 exif text data
  * avifjpeg.c: check for uint32_t overflow before add
  * Update googletest.cmd/LocalGTest.cmake: v1.16.0
  * Update libjpeg.cmd/LocalJpeg.cmake: 3.1.0
  * Update libsharpyuv: v1.5.0
  * Update libxml2.cmd/LocalLibXml2.cmake: v2.14.0
  * Update libyuv.cmd/LocalLibyuv.cmake: 4db2af62d (1909)
  * Update LocalRav1e.cmake: cargo-c v0.10.12
  * Update zlibpng.cmd: libpng 1.6.47
  * Fix wrong Exif orientation set in JPEG or PNG output by avifdec when the input
    AVIF file has an ImageRotation property with angle set to 1 or 3, has no
    ImageMirror property, and carries an Exif chunk. Note that Exif orientation is
    usually ignored in PNG files, so this mainly impacts JPEG files.
  * Encoder: fix ispe property for tmap with grid.
  * Decoder: check the ispe property of tmap items.
  * Allow lowercase GUIDs in XMP when reading JPEG files.
  * Update aom.cmd/LocalAom.cmake: v3.12.1
  * Change avifenc to start in automatic tiling mode.
  * Always forward Unspecified (2) CICP color primaries, transfer characteristics,
    and matrix coefficients to the AV1 encoder. Rely on the 'colr' box instead.
  * Declare *RowBytes as size_t in avifImageRGBToYUV()
    (jsc#PED-13277, CVE-2025-48175, bsc#1243270)
  * Check ftell returned value in avifjpeg.c
  * Add integer overflow checks to makeRoom.
    (jsc#PED-13277, CVE-2025-48174, bsc#1243269)
  * LocalJpeg.cmake: Support multi-config generators.
- Remove 'Group:' tags.</changelog>
  <changelog author="qzhao@suse.com" date="1752235200">- Update libavif.spec:
  Add compile condition for SvtAv1Enc, SLE-15-SP4, and other old
  releases will not build with it to make the update successful.
  (jsc#PED-13277, CVE-2025-48175, bsc#1243270, CVE-2025-48174, bsc#1243269)</changelog>
</package>
<package pkgid="69facb283cf454ba664e552b877f1695a9d1e9967f8b3bf5ba9f00b0b02484bd" name="libbd_crypto2" arch="x86_64">
  <version epoch="0" ver="2.26" rel="150400.3.5.1"/>
  <changelog author="jengelh@inai.de" date="1516276800">- Remove excess Provides, BuildRequires and %ifs.
- Fix %description line mismatch for s390x parts.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1519214400">- Update to version 2.16:
  * Features:
  - LUKS 2 support for luks_open/close and
    luks_add/remove/change_key.
  - Progress report support for ext filesystem checks.
- Changes from version 2.15:
  * Features:
  - The file system plugin is now split into multiple source
    files making it easier to add support for more file systems
    and technologies.
  * Fixes:
  - How GPT patition flags are set;
  - Check the btrfs module availability as part of checking the
    btrfs plugin's dependencies;
  - Memory leaks in bd_fs_vfat_get_info();
  - The file system plugin's dependency checking mechanisms.
- Add libblockdev-fix-libkmod-include.patch as openSUSE doesn't use
  /usr/include/ but /usr/include/kmod to place libkmod.h.
- Conditionalize the use of Python 2's bindings and turn it off
  defaulting Python 3.
- Drop s390's plugin due to the lack of a file still not present
  in s390-tools package.
- Drop BuildRoot tag since RPM already handles this itself.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520251200">- Move all plugins into the shared library subpackage and their
  respective development files into the devel one.
- Add '-only' to LGPL License tag to comply with SPDX 3.0.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Resplit plugins to avoid pulling clusterlvm support by default
  into the dependency chain (bsc#1086447).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1525435200">- Update to version 2.17:
  + New plugin: nvdimm, support for NVDIMM namespaces management;
  + LUKS2 support for creating LUKS2 format including authenticated
    disk encryption. Multiple new functions for working with LUKS
    devices (suspend/resume, header backup, metadata size...);
  + Extended support for opening TrueCrypt/VeraCrypt volumes.
- Drop pkgconfig(nss) and libvolume_key-devel BuildRequires now
  that they are optional and pass without-escrow to configure:
  libvolume_key's code is ancient and nearly dead upstream.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1530187200">- Update to version 2.18:
  + New plugin: vdo, support for creating and managing VDO volumes.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1542628800">- Update to version 2.20:
  + Fixes:
  - Fix parsing extra arguments for LVM methods calls in the LVM
    DBus plugin;
  - Multiple fixes for running tests on Debian testing.
  + Development: Vagrantfile template was added for easy
    development machine setup.
- Changes from version 2.19:
  + Features:
  - vdo: new functions to get statistical data for existing VDO
    volumes (bd_vdo_get_stats);
  - crypto: support for passing extra arguments for key
    derivation function when creating LUKS2 format.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1547208000">- Add pkgconfig(dbus-1) BuildRequires: Add missing BuildRequires,
  libblockdev needs dbus headerfiles during build, but configure
  does not check for it.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add pkgconfig(yaml-0.1) BuildRequires and pass with-vdo instead
  of without-vdo to configure, build vdo support.
- Following the above, add new sub-packages libbd_vdo2 and
  libbd_vdo-devel, aswell as handle the new library in post(un).</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Explain VDO. Fix grammar mishaps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.22:
  + New minor release of the libblockdev library with multiple
    fixes.
  + nvdimm: New function for getting list of supported sector sizes
    for namespaces fixes.
  + Multiple memory leaks fixed.
- Changes from version 2.21:
  + crypto: Default key size for LUKS was changed to 512bit.
  + tools:
  - New simple cli tools that use libblockdev.
  - First tool is lvm-cache-stats for displaying stats for LVM
    cache devices.
  - Use configure option --without-tools to disable building
    these.
- Package new cli tool in main package, should possibly be moved
  into own sub-package in the future.</changelog>
  <changelog author="heming.zhao@suse.com" date="1568721600">- lvm2-clvm doesn't exist in lvm2-2.03, so change SPEC file
  libbd_lvm-dbus requires from lvm2-clvm to lvm2</changelog>
  <changelog author="thomas.blume@suse.com" date="1580817600">- fix files directive for s390 in specfile</changelog>
  <changelog author="dmueller@suse.com" date="1597924800">- udpate to 2.24:
  * VDO plugin has been deprecated in this release (functionality
    replaced by LVM VDO)
  * support for creating and managing LVM VDO volumes added
  * support for unlocking of BitLocker-compatible format BITLK
    added
  * new functions for (un)freezing filesystems added
  * test suite can now be run against installed version of
    libblockdev</changelog>
  <changelog author="dmueller@suse.com" date="1611144000">- update to 2.25:
  * exec: Fix polling for stdout and stderr
  * exec: Use non-blocking read and process the buffer manually
  * exec: Clarify the BDUtilsProgExtract callback documentation
  * tests: Add bufferbloat exec tests
  * tests: Add null-byte exec tests
  * lvm: Fix bd_lvm_vdopooldata_* symbols
  * exec: Fix setting locale for util calls
  * fs: Do not report error when errors were fixed by e2fsck
  * README: Use CI status image for 2.x-branch on 2.x
  * fs: Fix compile error in ext_repair caused by cherry pick from
    master
  * Mark all GIR file constants as guint64
  * lvm: Set thin metadata limits to match limits LVM uses in
    lvcreate
  * lvm: Do not use thin_metadata_size to recommend thin metadata
    size
  * lvm: Use the UNUSED macro instead of __attribute__((unused))
  * Fix max size limit for LVM thinpool metadata
  * loop: Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add -Wno-deprecated-declarations to cflags: dealing with
  deprecations is upstreams business and should not hinder
  downstream packages from building.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1636891200">- Update to version 2.26:
  + Fixes:
  - Deprecated glib function call;
  - Build with LLVM/clang;
  - Many memory leaks;
  - Many tests.
- Fix dbus.h being wrongly packaged in libbd_lvm-dbus-devl instead
  of libbd_utils-devel (boo#1189787).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1637236800">- Fix lack of dependency on libblockdev-lvm needed by libblockdev
  package. The lvm-cache-stats binary needs the logical volume
  plugin to work (boo#1183948).</changelog>
  <changelog author="fvogt@suse.com" date="1642507200">- Remove unnecessary dependency of libbd_part2 on multipath-tools
  (bsc#1194771)</changelog>
  <changelog author="thomas.blume@suse.com" date="1749729600">- suppress privilege escalation during xfs fs resize (CVE-2025-6019)
  (bsc#1243285)
  add 0001-dont-allow-suid-and-dev-set-on-fs-resize.patch</changelog>
</package>
<package pkgid="62b2099fdc71324c3fa15515f788a6fe6cd7b6a3d8d176f498ae08dadf442cd3" name="libbd_fs2" arch="x86_64">
  <version epoch="0" ver="2.26" rel="150400.3.5.1"/>
  <changelog author="jengelh@inai.de" date="1516276800">- Remove excess Provides, BuildRequires and %ifs.
- Fix %description line mismatch for s390x parts.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1519214400">- Update to version 2.16:
  * Features:
  - LUKS 2 support for luks_open/close and
    luks_add/remove/change_key.
  - Progress report support for ext filesystem checks.
- Changes from version 2.15:
  * Features:
  - The file system plugin is now split into multiple source
    files making it easier to add support for more file systems
    and technologies.
  * Fixes:
  - How GPT patition flags are set;
  - Check the btrfs module availability as part of checking the
    btrfs plugin's dependencies;
  - Memory leaks in bd_fs_vfat_get_info();
  - The file system plugin's dependency checking mechanisms.
- Add libblockdev-fix-libkmod-include.patch as openSUSE doesn't use
  /usr/include/ but /usr/include/kmod to place libkmod.h.
- Conditionalize the use of Python 2's bindings and turn it off
  defaulting Python 3.
- Drop s390's plugin due to the lack of a file still not present
  in s390-tools package.
- Drop BuildRoot tag since RPM already handles this itself.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520251200">- Move all plugins into the shared library subpackage and their
  respective development files into the devel one.
- Add '-only' to LGPL License tag to comply with SPDX 3.0.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Resplit plugins to avoid pulling clusterlvm support by default
  into the dependency chain (bsc#1086447).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1525435200">- Update to version 2.17:
  + New plugin: nvdimm, support for NVDIMM namespaces management;
  + LUKS2 support for creating LUKS2 format including authenticated
    disk encryption. Multiple new functions for working with LUKS
    devices (suspend/resume, header backup, metadata size...);
  + Extended support for opening TrueCrypt/VeraCrypt volumes.
- Drop pkgconfig(nss) and libvolume_key-devel BuildRequires now
  that they are optional and pass without-escrow to configure:
  libvolume_key's code is ancient and nearly dead upstream.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1530187200">- Update to version 2.18:
  + New plugin: vdo, support for creating and managing VDO volumes.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1542628800">- Update to version 2.20:
  + Fixes:
  - Fix parsing extra arguments for LVM methods calls in the LVM
    DBus plugin;
  - Multiple fixes for running tests on Debian testing.
  + Development: Vagrantfile template was added for easy
    development machine setup.
- Changes from version 2.19:
  + Features:
  - vdo: new functions to get statistical data for existing VDO
    volumes (bd_vdo_get_stats);
  - crypto: support for passing extra arguments for key
    derivation function when creating LUKS2 format.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1547208000">- Add pkgconfig(dbus-1) BuildRequires: Add missing BuildRequires,
  libblockdev needs dbus headerfiles during build, but configure
  does not check for it.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add pkgconfig(yaml-0.1) BuildRequires and pass with-vdo instead
  of without-vdo to configure, build vdo support.
- Following the above, add new sub-packages libbd_vdo2 and
  libbd_vdo-devel, aswell as handle the new library in post(un).</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Explain VDO. Fix grammar mishaps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.22:
  + New minor release of the libblockdev library with multiple
    fixes.
  + nvdimm: New function for getting list of supported sector sizes
    for namespaces fixes.
  + Multiple memory leaks fixed.
- Changes from version 2.21:
  + crypto: Default key size for LUKS was changed to 512bit.
  + tools:
  - New simple cli tools that use libblockdev.
  - First tool is lvm-cache-stats for displaying stats for LVM
    cache devices.
  - Use configure option --without-tools to disable building
    these.
- Package new cli tool in main package, should possibly be moved
  into own sub-package in the future.</changelog>
  <changelog author="heming.zhao@suse.com" date="1568721600">- lvm2-clvm doesn't exist in lvm2-2.03, so change SPEC file
  libbd_lvm-dbus requires from lvm2-clvm to lvm2</changelog>
  <changelog author="thomas.blume@suse.com" date="1580817600">- fix files directive for s390 in specfile</changelog>
  <changelog author="dmueller@suse.com" date="1597924800">- udpate to 2.24:
  * VDO plugin has been deprecated in this release (functionality
    replaced by LVM VDO)
  * support for creating and managing LVM VDO volumes added
  * support for unlocking of BitLocker-compatible format BITLK
    added
  * new functions for (un)freezing filesystems added
  * test suite can now be run against installed version of
    libblockdev</changelog>
  <changelog author="dmueller@suse.com" date="1611144000">- update to 2.25:
  * exec: Fix polling for stdout and stderr
  * exec: Use non-blocking read and process the buffer manually
  * exec: Clarify the BDUtilsProgExtract callback documentation
  * tests: Add bufferbloat exec tests
  * tests: Add null-byte exec tests
  * lvm: Fix bd_lvm_vdopooldata_* symbols
  * exec: Fix setting locale for util calls
  * fs: Do not report error when errors were fixed by e2fsck
  * README: Use CI status image for 2.x-branch on 2.x
  * fs: Fix compile error in ext_repair caused by cherry pick from
    master
  * Mark all GIR file constants as guint64
  * lvm: Set thin metadata limits to match limits LVM uses in
    lvcreate
  * lvm: Do not use thin_metadata_size to recommend thin metadata
    size
  * lvm: Use the UNUSED macro instead of __attribute__((unused))
  * Fix max size limit for LVM thinpool metadata
  * loop: Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add -Wno-deprecated-declarations to cflags: dealing with
  deprecations is upstreams business and should not hinder
  downstream packages from building.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1636891200">- Update to version 2.26:
  + Fixes:
  - Deprecated glib function call;
  - Build with LLVM/clang;
  - Many memory leaks;
  - Many tests.
- Fix dbus.h being wrongly packaged in libbd_lvm-dbus-devl instead
  of libbd_utils-devel (boo#1189787).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1637236800">- Fix lack of dependency on libblockdev-lvm needed by libblockdev
  package. The lvm-cache-stats binary needs the logical volume
  plugin to work (boo#1183948).</changelog>
  <changelog author="fvogt@suse.com" date="1642507200">- Remove unnecessary dependency of libbd_part2 on multipath-tools
  (bsc#1194771)</changelog>
  <changelog author="thomas.blume@suse.com" date="1749729600">- suppress privilege escalation during xfs fs resize (CVE-2025-6019)
  (bsc#1243285)
  add 0001-dont-allow-suid-and-dev-set-on-fs-resize.patch</changelog>
</package>
<package pkgid="ef5f962ae0a7361845240d42df23b46ec3d559cd5cb7535c7d680489753efb82" name="libbd_loop2" arch="x86_64">
  <version epoch="0" ver="2.26" rel="150400.3.5.1"/>
  <changelog author="jengelh@inai.de" date="1516276800">- Remove excess Provides, BuildRequires and %ifs.
- Fix %description line mismatch for s390x parts.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1519214400">- Update to version 2.16:
  * Features:
  - LUKS 2 support for luks_open/close and
    luks_add/remove/change_key.
  - Progress report support for ext filesystem checks.
- Changes from version 2.15:
  * Features:
  - The file system plugin is now split into multiple source
    files making it easier to add support for more file systems
    and technologies.
  * Fixes:
  - How GPT patition flags are set;
  - Check the btrfs module availability as part of checking the
    btrfs plugin's dependencies;
  - Memory leaks in bd_fs_vfat_get_info();
  - The file system plugin's dependency checking mechanisms.
- Add libblockdev-fix-libkmod-include.patch as openSUSE doesn't use
  /usr/include/ but /usr/include/kmod to place libkmod.h.
- Conditionalize the use of Python 2's bindings and turn it off
  defaulting Python 3.
- Drop s390's plugin due to the lack of a file still not present
  in s390-tools package.
- Drop BuildRoot tag since RPM already handles this itself.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520251200">- Move all plugins into the shared library subpackage and their
  respective development files into the devel one.
- Add '-only' to LGPL License tag to comply with SPDX 3.0.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Resplit plugins to avoid pulling clusterlvm support by default
  into the dependency chain (bsc#1086447).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1525435200">- Update to version 2.17:
  + New plugin: nvdimm, support for NVDIMM namespaces management;
  + LUKS2 support for creating LUKS2 format including authenticated
    disk encryption. Multiple new functions for working with LUKS
    devices (suspend/resume, header backup, metadata size...);
  + Extended support for opening TrueCrypt/VeraCrypt volumes.
- Drop pkgconfig(nss) and libvolume_key-devel BuildRequires now
  that they are optional and pass without-escrow to configure:
  libvolume_key's code is ancient and nearly dead upstream.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1530187200">- Update to version 2.18:
  + New plugin: vdo, support for creating and managing VDO volumes.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1542628800">- Update to version 2.20:
  + Fixes:
  - Fix parsing extra arguments for LVM methods calls in the LVM
    DBus plugin;
  - Multiple fixes for running tests on Debian testing.
  + Development: Vagrantfile template was added for easy
    development machine setup.
- Changes from version 2.19:
  + Features:
  - vdo: new functions to get statistical data for existing VDO
    volumes (bd_vdo_get_stats);
  - crypto: support for passing extra arguments for key
    derivation function when creating LUKS2 format.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1547208000">- Add pkgconfig(dbus-1) BuildRequires: Add missing BuildRequires,
  libblockdev needs dbus headerfiles during build, but configure
  does not check for it.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add pkgconfig(yaml-0.1) BuildRequires and pass with-vdo instead
  of without-vdo to configure, build vdo support.
- Following the above, add new sub-packages libbd_vdo2 and
  libbd_vdo-devel, aswell as handle the new library in post(un).</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Explain VDO. Fix grammar mishaps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.22:
  + New minor release of the libblockdev library with multiple
    fixes.
  + nvdimm: New function for getting list of supported sector sizes
    for namespaces fixes.
  + Multiple memory leaks fixed.
- Changes from version 2.21:
  + crypto: Default key size for LUKS was changed to 512bit.
  + tools:
  - New simple cli tools that use libblockdev.
  - First tool is lvm-cache-stats for displaying stats for LVM
    cache devices.
  - Use configure option --without-tools to disable building
    these.
- Package new cli tool in main package, should possibly be moved
  into own sub-package in the future.</changelog>
  <changelog author="heming.zhao@suse.com" date="1568721600">- lvm2-clvm doesn't exist in lvm2-2.03, so change SPEC file
  libbd_lvm-dbus requires from lvm2-clvm to lvm2</changelog>
  <changelog author="thomas.blume@suse.com" date="1580817600">- fix files directive for s390 in specfile</changelog>
  <changelog author="dmueller@suse.com" date="1597924800">- udpate to 2.24:
  * VDO plugin has been deprecated in this release (functionality
    replaced by LVM VDO)
  * support for creating and managing LVM VDO volumes added
  * support for unlocking of BitLocker-compatible format BITLK
    added
  * new functions for (un)freezing filesystems added
  * test suite can now be run against installed version of
    libblockdev</changelog>
  <changelog author="dmueller@suse.com" date="1611144000">- update to 2.25:
  * exec: Fix polling for stdout and stderr
  * exec: Use non-blocking read and process the buffer manually
  * exec: Clarify the BDUtilsProgExtract callback documentation
  * tests: Add bufferbloat exec tests
  * tests: Add null-byte exec tests
  * lvm: Fix bd_lvm_vdopooldata_* symbols
  * exec: Fix setting locale for util calls
  * fs: Do not report error when errors were fixed by e2fsck
  * README: Use CI status image for 2.x-branch on 2.x
  * fs: Fix compile error in ext_repair caused by cherry pick from
    master
  * Mark all GIR file constants as guint64
  * lvm: Set thin metadata limits to match limits LVM uses in
    lvcreate
  * lvm: Do not use thin_metadata_size to recommend thin metadata
    size
  * lvm: Use the UNUSED macro instead of __attribute__((unused))
  * Fix max size limit for LVM thinpool metadata
  * loop: Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add -Wno-deprecated-declarations to cflags: dealing with
  deprecations is upstreams business and should not hinder
  downstream packages from building.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1636891200">- Update to version 2.26:
  + Fixes:
  - Deprecated glib function call;
  - Build with LLVM/clang;
  - Many memory leaks;
  - Many tests.
- Fix dbus.h being wrongly packaged in libbd_lvm-dbus-devl instead
  of libbd_utils-devel (boo#1189787).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1637236800">- Fix lack of dependency on libblockdev-lvm needed by libblockdev
  package. The lvm-cache-stats binary needs the logical volume
  plugin to work (boo#1183948).</changelog>
  <changelog author="fvogt@suse.com" date="1642507200">- Remove unnecessary dependency of libbd_part2 on multipath-tools
  (bsc#1194771)</changelog>
  <changelog author="thomas.blume@suse.com" date="1749729600">- suppress privilege escalation during xfs fs resize (CVE-2025-6019)
  (bsc#1243285)
  add 0001-dont-allow-suid-and-dev-set-on-fs-resize.patch</changelog>
</package>
<package pkgid="4c50c855c226746d0bc7cc7cdbb00b95fc6809625078eb1a90da8f00f2cdfeb1" name="libbd_lvm2" arch="x86_64">
  <version epoch="0" ver="2.26" rel="150400.3.5.1"/>
  <changelog author="jengelh@inai.de" date="1516276800">- Remove excess Provides, BuildRequires and %ifs.
- Fix %description line mismatch for s390x parts.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1519214400">- Update to version 2.16:
  * Features:
  - LUKS 2 support for luks_open/close and
    luks_add/remove/change_key.
  - Progress report support for ext filesystem checks.
- Changes from version 2.15:
  * Features:
  - The file system plugin is now split into multiple source
    files making it easier to add support for more file systems
    and technologies.
  * Fixes:
  - How GPT patition flags are set;
  - Check the btrfs module availability as part of checking the
    btrfs plugin's dependencies;
  - Memory leaks in bd_fs_vfat_get_info();
  - The file system plugin's dependency checking mechanisms.
- Add libblockdev-fix-libkmod-include.patch as openSUSE doesn't use
  /usr/include/ but /usr/include/kmod to place libkmod.h.
- Conditionalize the use of Python 2's bindings and turn it off
  defaulting Python 3.
- Drop s390's plugin due to the lack of a file still not present
  in s390-tools package.
- Drop BuildRoot tag since RPM already handles this itself.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520251200">- Move all plugins into the shared library subpackage and their
  respective development files into the devel one.
- Add '-only' to LGPL License tag to comply with SPDX 3.0.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Resplit plugins to avoid pulling clusterlvm support by default
  into the dependency chain (bsc#1086447).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1525435200">- Update to version 2.17:
  + New plugin: nvdimm, support for NVDIMM namespaces management;
  + LUKS2 support for creating LUKS2 format including authenticated
    disk encryption. Multiple new functions for working with LUKS
    devices (suspend/resume, header backup, metadata size...);
  + Extended support for opening TrueCrypt/VeraCrypt volumes.
- Drop pkgconfig(nss) and libvolume_key-devel BuildRequires now
  that they are optional and pass without-escrow to configure:
  libvolume_key's code is ancient and nearly dead upstream.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1530187200">- Update to version 2.18:
  + New plugin: vdo, support for creating and managing VDO volumes.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1542628800">- Update to version 2.20:
  + Fixes:
  - Fix parsing extra arguments for LVM methods calls in the LVM
    DBus plugin;
  - Multiple fixes for running tests on Debian testing.
  + Development: Vagrantfile template was added for easy
    development machine setup.
- Changes from version 2.19:
  + Features:
  - vdo: new functions to get statistical data for existing VDO
    volumes (bd_vdo_get_stats);
  - crypto: support for passing extra arguments for key
    derivation function when creating LUKS2 format.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1547208000">- Add pkgconfig(dbus-1) BuildRequires: Add missing BuildRequires,
  libblockdev needs dbus headerfiles during build, but configure
  does not check for it.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add pkgconfig(yaml-0.1) BuildRequires and pass with-vdo instead
  of without-vdo to configure, build vdo support.
- Following the above, add new sub-packages libbd_vdo2 and
  libbd_vdo-devel, aswell as handle the new library in post(un).</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Explain VDO. Fix grammar mishaps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.22:
  + New minor release of the libblockdev library with multiple
    fixes.
  + nvdimm: New function for getting list of supported sector sizes
    for namespaces fixes.
  + Multiple memory leaks fixed.
- Changes from version 2.21:
  + crypto: Default key size for LUKS was changed to 512bit.
  + tools:
  - New simple cli tools that use libblockdev.
  - First tool is lvm-cache-stats for displaying stats for LVM
    cache devices.
  - Use configure option --without-tools to disable building
    these.
- Package new cli tool in main package, should possibly be moved
  into own sub-package in the future.</changelog>
  <changelog author="heming.zhao@suse.com" date="1568721600">- lvm2-clvm doesn't exist in lvm2-2.03, so change SPEC file
  libbd_lvm-dbus requires from lvm2-clvm to lvm2</changelog>
  <changelog author="thomas.blume@suse.com" date="1580817600">- fix files directive for s390 in specfile</changelog>
  <changelog author="dmueller@suse.com" date="1597924800">- udpate to 2.24:
  * VDO plugin has been deprecated in this release (functionality
    replaced by LVM VDO)
  * support for creating and managing LVM VDO volumes added
  * support for unlocking of BitLocker-compatible format BITLK
    added
  * new functions for (un)freezing filesystems added
  * test suite can now be run against installed version of
    libblockdev</changelog>
  <changelog author="dmueller@suse.com" date="1611144000">- update to 2.25:
  * exec: Fix polling for stdout and stderr
  * exec: Use non-blocking read and process the buffer manually
  * exec: Clarify the BDUtilsProgExtract callback documentation
  * tests: Add bufferbloat exec tests
  * tests: Add null-byte exec tests
  * lvm: Fix bd_lvm_vdopooldata_* symbols
  * exec: Fix setting locale for util calls
  * fs: Do not report error when errors were fixed by e2fsck
  * README: Use CI status image for 2.x-branch on 2.x
  * fs: Fix compile error in ext_repair caused by cherry pick from
    master
  * Mark all GIR file constants as guint64
  * lvm: Set thin metadata limits to match limits LVM uses in
    lvcreate
  * lvm: Do not use thin_metadata_size to recommend thin metadata
    size
  * lvm: Use the UNUSED macro instead of __attribute__((unused))
  * Fix max size limit for LVM thinpool metadata
  * loop: Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add -Wno-deprecated-declarations to cflags: dealing with
  deprecations is upstreams business and should not hinder
  downstream packages from building.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1636891200">- Update to version 2.26:
  + Fixes:
  - Deprecated glib function call;
  - Build with LLVM/clang;
  - Many memory leaks;
  - Many tests.
- Fix dbus.h being wrongly packaged in libbd_lvm-dbus-devl instead
  of libbd_utils-devel (boo#1189787).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1637236800">- Fix lack of dependency on libblockdev-lvm needed by libblockdev
  package. The lvm-cache-stats binary needs the logical volume
  plugin to work (boo#1183948).</changelog>
  <changelog author="fvogt@suse.com" date="1642507200">- Remove unnecessary dependency of libbd_part2 on multipath-tools
  (bsc#1194771)</changelog>
  <changelog author="thomas.blume@suse.com" date="1749729600">- suppress privilege escalation during xfs fs resize (CVE-2025-6019)
  (bsc#1243285)
  add 0001-dont-allow-suid-and-dev-set-on-fs-resize.patch</changelog>
</package>
<package pkgid="4266b358b56a50cf4e362792f4255e15b42832d3cc541ee06a34b2562938ed64" name="libbd_mdraid2" arch="x86_64">
  <version epoch="0" ver="2.26" rel="150400.3.5.1"/>
  <changelog author="jengelh@inai.de" date="1516276800">- Remove excess Provides, BuildRequires and %ifs.
- Fix %description line mismatch for s390x parts.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1519214400">- Update to version 2.16:
  * Features:
  - LUKS 2 support for luks_open/close and
    luks_add/remove/change_key.
  - Progress report support for ext filesystem checks.
- Changes from version 2.15:
  * Features:
  - The file system plugin is now split into multiple source
    files making it easier to add support for more file systems
    and technologies.
  * Fixes:
  - How GPT patition flags are set;
  - Check the btrfs module availability as part of checking the
    btrfs plugin's dependencies;
  - Memory leaks in bd_fs_vfat_get_info();
  - The file system plugin's dependency checking mechanisms.
- Add libblockdev-fix-libkmod-include.patch as openSUSE doesn't use
  /usr/include/ but /usr/include/kmod to place libkmod.h.
- Conditionalize the use of Python 2's bindings and turn it off
  defaulting Python 3.
- Drop s390's plugin due to the lack of a file still not present
  in s390-tools package.
- Drop BuildRoot tag since RPM already handles this itself.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520251200">- Move all plugins into the shared library subpackage and their
  respective development files into the devel one.
- Add '-only' to LGPL License tag to comply with SPDX 3.0.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Resplit plugins to avoid pulling clusterlvm support by default
  into the dependency chain (bsc#1086447).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1525435200">- Update to version 2.17:
  + New plugin: nvdimm, support for NVDIMM namespaces management;
  + LUKS2 support for creating LUKS2 format including authenticated
    disk encryption. Multiple new functions for working with LUKS
    devices (suspend/resume, header backup, metadata size...);
  + Extended support for opening TrueCrypt/VeraCrypt volumes.
- Drop pkgconfig(nss) and libvolume_key-devel BuildRequires now
  that they are optional and pass without-escrow to configure:
  libvolume_key's code is ancient and nearly dead upstream.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1530187200">- Update to version 2.18:
  + New plugin: vdo, support for creating and managing VDO volumes.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1542628800">- Update to version 2.20:
  + Fixes:
  - Fix parsing extra arguments for LVM methods calls in the LVM
    DBus plugin;
  - Multiple fixes for running tests on Debian testing.
  + Development: Vagrantfile template was added for easy
    development machine setup.
- Changes from version 2.19:
  + Features:
  - vdo: new functions to get statistical data for existing VDO
    volumes (bd_vdo_get_stats);
  - crypto: support for passing extra arguments for key
    derivation function when creating LUKS2 format.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1547208000">- Add pkgconfig(dbus-1) BuildRequires: Add missing BuildRequires,
  libblockdev needs dbus headerfiles during build, but configure
  does not check for it.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add pkgconfig(yaml-0.1) BuildRequires and pass with-vdo instead
  of without-vdo to configure, build vdo support.
- Following the above, add new sub-packages libbd_vdo2 and
  libbd_vdo-devel, aswell as handle the new library in post(un).</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Explain VDO. Fix grammar mishaps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.22:
  + New minor release of the libblockdev library with multiple
    fixes.
  + nvdimm: New function for getting list of supported sector sizes
    for namespaces fixes.
  + Multiple memory leaks fixed.
- Changes from version 2.21:
  + crypto: Default key size for LUKS was changed to 512bit.
  + tools:
  - New simple cli tools that use libblockdev.
  - First tool is lvm-cache-stats for displaying stats for LVM
    cache devices.
  - Use configure option --without-tools to disable building
    these.
- Package new cli tool in main package, should possibly be moved
  into own sub-package in the future.</changelog>
  <changelog author="heming.zhao@suse.com" date="1568721600">- lvm2-clvm doesn't exist in lvm2-2.03, so change SPEC file
  libbd_lvm-dbus requires from lvm2-clvm to lvm2</changelog>
  <changelog author="thomas.blume@suse.com" date="1580817600">- fix files directive for s390 in specfile</changelog>
  <changelog author="dmueller@suse.com" date="1597924800">- udpate to 2.24:
  * VDO plugin has been deprecated in this release (functionality
    replaced by LVM VDO)
  * support for creating and managing LVM VDO volumes added
  * support for unlocking of BitLocker-compatible format BITLK
    added
  * new functions for (un)freezing filesystems added
  * test suite can now be run against installed version of
    libblockdev</changelog>
  <changelog author="dmueller@suse.com" date="1611144000">- update to 2.25:
  * exec: Fix polling for stdout and stderr
  * exec: Use non-blocking read and process the buffer manually
  * exec: Clarify the BDUtilsProgExtract callback documentation
  * tests: Add bufferbloat exec tests
  * tests: Add null-byte exec tests
  * lvm: Fix bd_lvm_vdopooldata_* symbols
  * exec: Fix setting locale for util calls
  * fs: Do not report error when errors were fixed by e2fsck
  * README: Use CI status image for 2.x-branch on 2.x
  * fs: Fix compile error in ext_repair caused by cherry pick from
    master
  * Mark all GIR file constants as guint64
  * lvm: Set thin metadata limits to match limits LVM uses in
    lvcreate
  * lvm: Do not use thin_metadata_size to recommend thin metadata
    size
  * lvm: Use the UNUSED macro instead of __attribute__((unused))
  * Fix max size limit for LVM thinpool metadata
  * loop: Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add -Wno-deprecated-declarations to cflags: dealing with
  deprecations is upstreams business and should not hinder
  downstream packages from building.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1636891200">- Update to version 2.26:
  + Fixes:
  - Deprecated glib function call;
  - Build with LLVM/clang;
  - Many memory leaks;
  - Many tests.
- Fix dbus.h being wrongly packaged in libbd_lvm-dbus-devl instead
  of libbd_utils-devel (boo#1189787).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1637236800">- Fix lack of dependency on libblockdev-lvm needed by libblockdev
  package. The lvm-cache-stats binary needs the logical volume
  plugin to work (boo#1183948).</changelog>
  <changelog author="fvogt@suse.com" date="1642507200">- Remove unnecessary dependency of libbd_part2 on multipath-tools
  (bsc#1194771)</changelog>
  <changelog author="thomas.blume@suse.com" date="1749729600">- suppress privilege escalation during xfs fs resize (CVE-2025-6019)
  (bsc#1243285)
  add 0001-dont-allow-suid-and-dev-set-on-fs-resize.patch</changelog>
</package>
<package pkgid="8008cd679cafe0f666ccb8a8384228fecd69d7cfd575877e2fe7e3d6e505e81e" name="libbd_part2" arch="x86_64">
  <version epoch="0" ver="2.26" rel="150400.3.5.1"/>
  <changelog author="jengelh@inai.de" date="1516276800">- Remove excess Provides, BuildRequires and %ifs.
- Fix %description line mismatch for s390x parts.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1519214400">- Update to version 2.16:
  * Features:
  - LUKS 2 support for luks_open/close and
    luks_add/remove/change_key.
  - Progress report support for ext filesystem checks.
- Changes from version 2.15:
  * Features:
  - The file system plugin is now split into multiple source
    files making it easier to add support for more file systems
    and technologies.
  * Fixes:
  - How GPT patition flags are set;
  - Check the btrfs module availability as part of checking the
    btrfs plugin's dependencies;
  - Memory leaks in bd_fs_vfat_get_info();
  - The file system plugin's dependency checking mechanisms.
- Add libblockdev-fix-libkmod-include.patch as openSUSE doesn't use
  /usr/include/ but /usr/include/kmod to place libkmod.h.
- Conditionalize the use of Python 2's bindings and turn it off
  defaulting Python 3.
- Drop s390's plugin due to the lack of a file still not present
  in s390-tools package.
- Drop BuildRoot tag since RPM already handles this itself.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520251200">- Move all plugins into the shared library subpackage and their
  respective development files into the devel one.
- Add '-only' to LGPL License tag to comply with SPDX 3.0.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Resplit plugins to avoid pulling clusterlvm support by default
  into the dependency chain (bsc#1086447).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1525435200">- Update to version 2.17:
  + New plugin: nvdimm, support for NVDIMM namespaces management;
  + LUKS2 support for creating LUKS2 format including authenticated
    disk encryption. Multiple new functions for working with LUKS
    devices (suspend/resume, header backup, metadata size...);
  + Extended support for opening TrueCrypt/VeraCrypt volumes.
- Drop pkgconfig(nss) and libvolume_key-devel BuildRequires now
  that they are optional and pass without-escrow to configure:
  libvolume_key's code is ancient and nearly dead upstream.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1530187200">- Update to version 2.18:
  + New plugin: vdo, support for creating and managing VDO volumes.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1542628800">- Update to version 2.20:
  + Fixes:
  - Fix parsing extra arguments for LVM methods calls in the LVM
    DBus plugin;
  - Multiple fixes for running tests on Debian testing.
  + Development: Vagrantfile template was added for easy
    development machine setup.
- Changes from version 2.19:
  + Features:
  - vdo: new functions to get statistical data for existing VDO
    volumes (bd_vdo_get_stats);
  - crypto: support for passing extra arguments for key
    derivation function when creating LUKS2 format.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1547208000">- Add pkgconfig(dbus-1) BuildRequires: Add missing BuildRequires,
  libblockdev needs dbus headerfiles during build, but configure
  does not check for it.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add pkgconfig(yaml-0.1) BuildRequires and pass with-vdo instead
  of without-vdo to configure, build vdo support.
- Following the above, add new sub-packages libbd_vdo2 and
  libbd_vdo-devel, aswell as handle the new library in post(un).</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Explain VDO. Fix grammar mishaps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.22:
  + New minor release of the libblockdev library with multiple
    fixes.
  + nvdimm: New function for getting list of supported sector sizes
    for namespaces fixes.
  + Multiple memory leaks fixed.
- Changes from version 2.21:
  + crypto: Default key size for LUKS was changed to 512bit.
  + tools:
  - New simple cli tools that use libblockdev.
  - First tool is lvm-cache-stats for displaying stats for LVM
    cache devices.
  - Use configure option --without-tools to disable building
    these.
- Package new cli tool in main package, should possibly be moved
  into own sub-package in the future.</changelog>
  <changelog author="heming.zhao@suse.com" date="1568721600">- lvm2-clvm doesn't exist in lvm2-2.03, so change SPEC file
  libbd_lvm-dbus requires from lvm2-clvm to lvm2</changelog>
  <changelog author="thomas.blume@suse.com" date="1580817600">- fix files directive for s390 in specfile</changelog>
  <changelog author="dmueller@suse.com" date="1597924800">- udpate to 2.24:
  * VDO plugin has been deprecated in this release (functionality
    replaced by LVM VDO)
  * support for creating and managing LVM VDO volumes added
  * support for unlocking of BitLocker-compatible format BITLK
    added
  * new functions for (un)freezing filesystems added
  * test suite can now be run against installed version of
    libblockdev</changelog>
  <changelog author="dmueller@suse.com" date="1611144000">- update to 2.25:
  * exec: Fix polling for stdout and stderr
  * exec: Use non-blocking read and process the buffer manually
  * exec: Clarify the BDUtilsProgExtract callback documentation
  * tests: Add bufferbloat exec tests
  * tests: Add null-byte exec tests
  * lvm: Fix bd_lvm_vdopooldata_* symbols
  * exec: Fix setting locale for util calls
  * fs: Do not report error when errors were fixed by e2fsck
  * README: Use CI status image for 2.x-branch on 2.x
  * fs: Fix compile error in ext_repair caused by cherry pick from
    master
  * Mark all GIR file constants as guint64
  * lvm: Set thin metadata limits to match limits LVM uses in
    lvcreate
  * lvm: Do not use thin_metadata_size to recommend thin metadata
    size
  * lvm: Use the UNUSED macro instead of __attribute__((unused))
  * Fix max size limit for LVM thinpool metadata
  * loop: Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add -Wno-deprecated-declarations to cflags: dealing with
  deprecations is upstreams business and should not hinder
  downstream packages from building.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1636891200">- Update to version 2.26:
  + Fixes:
  - Deprecated glib function call;
  - Build with LLVM/clang;
  - Many memory leaks;
  - Many tests.
- Fix dbus.h being wrongly packaged in libbd_lvm-dbus-devl instead
  of libbd_utils-devel (boo#1189787).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1637236800">- Fix lack of dependency on libblockdev-lvm needed by libblockdev
  package. The lvm-cache-stats binary needs the logical volume
  plugin to work (boo#1183948).</changelog>
  <changelog author="fvogt@suse.com" date="1642507200">- Remove unnecessary dependency of libbd_part2 on multipath-tools
  (bsc#1194771)</changelog>
  <changelog author="thomas.blume@suse.com" date="1749729600">- suppress privilege escalation during xfs fs resize (CVE-2025-6019)
  (bsc#1243285)
  add 0001-dont-allow-suid-and-dev-set-on-fs-resize.patch</changelog>
</package>
<package pkgid="fb517cf156aeadfc5e682c4e47f30c09d8911848f2df0327e1863d2c60a641df" name="libbd_swap2" arch="x86_64">
  <version epoch="0" ver="2.26" rel="150400.3.5.1"/>
  <changelog author="jengelh@inai.de" date="1516276800">- Remove excess Provides, BuildRequires and %ifs.
- Fix %description line mismatch for s390x parts.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1519214400">- Update to version 2.16:
  * Features:
  - LUKS 2 support for luks_open/close and
    luks_add/remove/change_key.
  - Progress report support for ext filesystem checks.
- Changes from version 2.15:
  * Features:
  - The file system plugin is now split into multiple source
    files making it easier to add support for more file systems
    and technologies.
  * Fixes:
  - How GPT patition flags are set;
  - Check the btrfs module availability as part of checking the
    btrfs plugin's dependencies;
  - Memory leaks in bd_fs_vfat_get_info();
  - The file system plugin's dependency checking mechanisms.
- Add libblockdev-fix-libkmod-include.patch as openSUSE doesn't use
  /usr/include/ but /usr/include/kmod to place libkmod.h.
- Conditionalize the use of Python 2's bindings and turn it off
  defaulting Python 3.
- Drop s390's plugin due to the lack of a file still not present
  in s390-tools package.
- Drop BuildRoot tag since RPM already handles this itself.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520251200">- Move all plugins into the shared library subpackage and their
  respective development files into the devel one.
- Add '-only' to LGPL License tag to comply with SPDX 3.0.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Resplit plugins to avoid pulling clusterlvm support by default
  into the dependency chain (bsc#1086447).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1525435200">- Update to version 2.17:
  + New plugin: nvdimm, support for NVDIMM namespaces management;
  + LUKS2 support for creating LUKS2 format including authenticated
    disk encryption. Multiple new functions for working with LUKS
    devices (suspend/resume, header backup, metadata size...);
  + Extended support for opening TrueCrypt/VeraCrypt volumes.
- Drop pkgconfig(nss) and libvolume_key-devel BuildRequires now
  that they are optional and pass without-escrow to configure:
  libvolume_key's code is ancient and nearly dead upstream.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1530187200">- Update to version 2.18:
  + New plugin: vdo, support for creating and managing VDO volumes.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1542628800">- Update to version 2.20:
  + Fixes:
  - Fix parsing extra arguments for LVM methods calls in the LVM
    DBus plugin;
  - Multiple fixes for running tests on Debian testing.
  + Development: Vagrantfile template was added for easy
    development machine setup.
- Changes from version 2.19:
  + Features:
  - vdo: new functions to get statistical data for existing VDO
    volumes (bd_vdo_get_stats);
  - crypto: support for passing extra arguments for key
    derivation function when creating LUKS2 format.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1547208000">- Add pkgconfig(dbus-1) BuildRequires: Add missing BuildRequires,
  libblockdev needs dbus headerfiles during build, but configure
  does not check for it.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add pkgconfig(yaml-0.1) BuildRequires and pass with-vdo instead
  of without-vdo to configure, build vdo support.
- Following the above, add new sub-packages libbd_vdo2 and
  libbd_vdo-devel, aswell as handle the new library in post(un).</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Explain VDO. Fix grammar mishaps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.22:
  + New minor release of the libblockdev library with multiple
    fixes.
  + nvdimm: New function for getting list of supported sector sizes
    for namespaces fixes.
  + Multiple memory leaks fixed.
- Changes from version 2.21:
  + crypto: Default key size for LUKS was changed to 512bit.
  + tools:
  - New simple cli tools that use libblockdev.
  - First tool is lvm-cache-stats for displaying stats for LVM
    cache devices.
  - Use configure option --without-tools to disable building
    these.
- Package new cli tool in main package, should possibly be moved
  into own sub-package in the future.</changelog>
  <changelog author="heming.zhao@suse.com" date="1568721600">- lvm2-clvm doesn't exist in lvm2-2.03, so change SPEC file
  libbd_lvm-dbus requires from lvm2-clvm to lvm2</changelog>
  <changelog author="thomas.blume@suse.com" date="1580817600">- fix files directive for s390 in specfile</changelog>
  <changelog author="dmueller@suse.com" date="1597924800">- udpate to 2.24:
  * VDO plugin has been deprecated in this release (functionality
    replaced by LVM VDO)
  * support for creating and managing LVM VDO volumes added
  * support for unlocking of BitLocker-compatible format BITLK
    added
  * new functions for (un)freezing filesystems added
  * test suite can now be run against installed version of
    libblockdev</changelog>
  <changelog author="dmueller@suse.com" date="1611144000">- update to 2.25:
  * exec: Fix polling for stdout and stderr
  * exec: Use non-blocking read and process the buffer manually
  * exec: Clarify the BDUtilsProgExtract callback documentation
  * tests: Add bufferbloat exec tests
  * tests: Add null-byte exec tests
  * lvm: Fix bd_lvm_vdopooldata_* symbols
  * exec: Fix setting locale for util calls
  * fs: Do not report error when errors were fixed by e2fsck
  * README: Use CI status image for 2.x-branch on 2.x
  * fs: Fix compile error in ext_repair caused by cherry pick from
    master
  * Mark all GIR file constants as guint64
  * lvm: Set thin metadata limits to match limits LVM uses in
    lvcreate
  * lvm: Do not use thin_metadata_size to recommend thin metadata
    size
  * lvm: Use the UNUSED macro instead of __attribute__((unused))
  * Fix max size limit for LVM thinpool metadata
  * loop: Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add -Wno-deprecated-declarations to cflags: dealing with
  deprecations is upstreams business and should not hinder
  downstream packages from building.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1636891200">- Update to version 2.26:
  + Fixes:
  - Deprecated glib function call;
  - Build with LLVM/clang;
  - Many memory leaks;
  - Many tests.
- Fix dbus.h being wrongly packaged in libbd_lvm-dbus-devl instead
  of libbd_utils-devel (boo#1189787).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1637236800">- Fix lack of dependency on libblockdev-lvm needed by libblockdev
  package. The lvm-cache-stats binary needs the logical volume
  plugin to work (boo#1183948).</changelog>
  <changelog author="fvogt@suse.com" date="1642507200">- Remove unnecessary dependency of libbd_part2 on multipath-tools
  (bsc#1194771)</changelog>
  <changelog author="thomas.blume@suse.com" date="1749729600">- suppress privilege escalation during xfs fs resize (CVE-2025-6019)
  (bsc#1243285)
  add 0001-dont-allow-suid-and-dev-set-on-fs-resize.patch</changelog>
</package>
<package pkgid="5dc11465f62288d64b9a8bacbfcdf1f7c20464ff096a150cc937472c19a37a05" name="libbd_utils2" arch="x86_64">
  <version epoch="0" ver="2.26" rel="150400.3.5.1"/>
  <changelog author="jengelh@inai.de" date="1516276800">- Remove excess Provides, BuildRequires and %ifs.
- Fix %description line mismatch for s390x parts.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1519214400">- Update to version 2.16:
  * Features:
  - LUKS 2 support for luks_open/close and
    luks_add/remove/change_key.
  - Progress report support for ext filesystem checks.
- Changes from version 2.15:
  * Features:
  - The file system plugin is now split into multiple source
    files making it easier to add support for more file systems
    and technologies.
  * Fixes:
  - How GPT patition flags are set;
  - Check the btrfs module availability as part of checking the
    btrfs plugin's dependencies;
  - Memory leaks in bd_fs_vfat_get_info();
  - The file system plugin's dependency checking mechanisms.
- Add libblockdev-fix-libkmod-include.patch as openSUSE doesn't use
  /usr/include/ but /usr/include/kmod to place libkmod.h.
- Conditionalize the use of Python 2's bindings and turn it off
  defaulting Python 3.
- Drop s390's plugin due to the lack of a file still not present
  in s390-tools package.
- Drop BuildRoot tag since RPM already handles this itself.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520251200">- Move all plugins into the shared library subpackage and their
  respective development files into the devel one.
- Add '-only' to LGPL License tag to comply with SPDX 3.0.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Resplit plugins to avoid pulling clusterlvm support by default
  into the dependency chain (bsc#1086447).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1525435200">- Update to version 2.17:
  + New plugin: nvdimm, support for NVDIMM namespaces management;
  + LUKS2 support for creating LUKS2 format including authenticated
    disk encryption. Multiple new functions for working with LUKS
    devices (suspend/resume, header backup, metadata size...);
  + Extended support for opening TrueCrypt/VeraCrypt volumes.
- Drop pkgconfig(nss) and libvolume_key-devel BuildRequires now
  that they are optional and pass without-escrow to configure:
  libvolume_key's code is ancient and nearly dead upstream.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1530187200">- Update to version 2.18:
  + New plugin: vdo, support for creating and managing VDO volumes.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1542628800">- Update to version 2.20:
  + Fixes:
  - Fix parsing extra arguments for LVM methods calls in the LVM
    DBus plugin;
  - Multiple fixes for running tests on Debian testing.
  + Development: Vagrantfile template was added for easy
    development machine setup.
- Changes from version 2.19:
  + Features:
  - vdo: new functions to get statistical data for existing VDO
    volumes (bd_vdo_get_stats);
  - crypto: support for passing extra arguments for key
    derivation function when creating LUKS2 format.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1547208000">- Add pkgconfig(dbus-1) BuildRequires: Add missing BuildRequires,
  libblockdev needs dbus headerfiles during build, but configure
  does not check for it.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add pkgconfig(yaml-0.1) BuildRequires and pass with-vdo instead
  of without-vdo to configure, build vdo support.
- Following the above, add new sub-packages libbd_vdo2 and
  libbd_vdo-devel, aswell as handle the new library in post(un).</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Explain VDO. Fix grammar mishaps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.22:
  + New minor release of the libblockdev library with multiple
    fixes.
  + nvdimm: New function for getting list of supported sector sizes
    for namespaces fixes.
  + Multiple memory leaks fixed.
- Changes from version 2.21:
  + crypto: Default key size for LUKS was changed to 512bit.
  + tools:
  - New simple cli tools that use libblockdev.
  - First tool is lvm-cache-stats for displaying stats for LVM
    cache devices.
  - Use configure option --without-tools to disable building
    these.
- Package new cli tool in main package, should possibly be moved
  into own sub-package in the future.</changelog>
  <changelog author="heming.zhao@suse.com" date="1568721600">- lvm2-clvm doesn't exist in lvm2-2.03, so change SPEC file
  libbd_lvm-dbus requires from lvm2-clvm to lvm2</changelog>
  <changelog author="thomas.blume@suse.com" date="1580817600">- fix files directive for s390 in specfile</changelog>
  <changelog author="dmueller@suse.com" date="1597924800">- udpate to 2.24:
  * VDO plugin has been deprecated in this release (functionality
    replaced by LVM VDO)
  * support for creating and managing LVM VDO volumes added
  * support for unlocking of BitLocker-compatible format BITLK
    added
  * new functions for (un)freezing filesystems added
  * test suite can now be run against installed version of
    libblockdev</changelog>
  <changelog author="dmueller@suse.com" date="1611144000">- update to 2.25:
  * exec: Fix polling for stdout and stderr
  * exec: Use non-blocking read and process the buffer manually
  * exec: Clarify the BDUtilsProgExtract callback documentation
  * tests: Add bufferbloat exec tests
  * tests: Add null-byte exec tests
  * lvm: Fix bd_lvm_vdopooldata_* symbols
  * exec: Fix setting locale for util calls
  * fs: Do not report error when errors were fixed by e2fsck
  * README: Use CI status image for 2.x-branch on 2.x
  * fs: Fix compile error in ext_repair caused by cherry pick from
    master
  * Mark all GIR file constants as guint64
  * lvm: Set thin metadata limits to match limits LVM uses in
    lvcreate
  * lvm: Do not use thin_metadata_size to recommend thin metadata
    size
  * lvm: Use the UNUSED macro instead of __attribute__((unused))
  * Fix max size limit for LVM thinpool metadata
  * loop: Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add -Wno-deprecated-declarations to cflags: dealing with
  deprecations is upstreams business and should not hinder
  downstream packages from building.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1636891200">- Update to version 2.26:
  + Fixes:
  - Deprecated glib function call;
  - Build with LLVM/clang;
  - Many memory leaks;
  - Many tests.
- Fix dbus.h being wrongly packaged in libbd_lvm-dbus-devl instead
  of libbd_utils-devel (boo#1189787).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1637236800">- Fix lack of dependency on libblockdev-lvm needed by libblockdev
  package. The lvm-cache-stats binary needs the logical volume
  plugin to work (boo#1183948).</changelog>
  <changelog author="fvogt@suse.com" date="1642507200">- Remove unnecessary dependency of libbd_part2 on multipath-tools
  (bsc#1194771)</changelog>
  <changelog author="thomas.blume@suse.com" date="1749729600">- suppress privilege escalation during xfs fs resize (CVE-2025-6019)
  (bsc#1243285)
  add 0001-dont-allow-suid-and-dev-set-on-fs-resize.patch</changelog>
</package>
<package pkgid="212e3c1b26b3e7c92068b27fde55b9d7db849cddc7b63c0af56933f450278a4b" name="libblkid-devel" arch="x86_64">
  <version epoch="0" ver="2.40.4" rel="150700.4.10.1"/>
  <changelog author="sbrabec@suse.com" date="1706011200">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1717934400">- Fix hang of lscpu -e (bsc#1225598,
  util-linux-libsmartcols-fix-reduction-stages-use.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1725364800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1733054400">- Update to version 2.40.2 (jsc#PED-9751):
  * Add lastlog2 (disabled for this build, SLE15/Leap15
    infrastructure is not ready for it)
  * agetty: Load autologin user from agetty.autologin credential
  * agetty: use get_terminal_default_type()
  * agetty: use sd_get_sessions() for number of users (#2088)
  * agetty: don't overwrite TERM passed by the user
  * blockdev: add support for BLKGETZONESZ
  * cfdisk: ask y/n before wipe
  * cfdisk: properly handle out-of-order partitions during resize
  * cfdisk: fix possible integer overflow
  * chcpu: document limitations of -g (bsc#1218609)
  * chsh: use libeconf to read /etc/shells
  * column: fix -l
  * column: fix memory leak
  * dmesg: fix FD leak
  * dmesg: fix delta calculation
  * dmesg: fix wrong size calculation
  * dmesg: support reading kmsg format from file
  * enosys: a new small command to make syscalls fail with ENOSYS
  * exch: new command to atomically exchanges paths between two files
  * fdisk: add support for partition resizing
  * fdisk: remove usage of VLA
  * fincore: add --output-all
  * findmnt: add --list-columns
  * findmnt: add -I, --dfi options for imitating the output of df -i
  * findmnt: add inode-related columns for implementing "df -i" like output
  * fsck.minix: fix possible overrun
  * hexdump: add '--one-byte-hex' format option
  * hwclock: add support for RTC_VL_READ/RTC_VL_CLR ioctls
  * libblkid: fix segfault when blkid.conf doesn't exist
  * libfdisk: add initializer to geometry
  * libmount: improving robustness in reading kernel messages,
    add pidfs to pseudo fs list
  * libmount: fix access check for utab in context
  * libmount: fix umount --read-only
  * login: initialize noauth from login.noauth credential
  * lsblk: add --filter
  * lsblk: add --highlight
  * lsblk: add --list-columns
  * lsclocks: new command to show clocks
  * lscpu: even more Arm part numbers (bsc#1223605)
  * lscpu: New Arm Cortex part numbers
    fix hang of lscpu -e (bsc#1225598)
  * lsfd: Refactor the pidfd logic, support pidfs
  * lsns: fix netns use
  * mkfs.minix: handle 64bit time on 32bit system
  * mkswap: implement --file
  * mkswap: implement --offset
  * mkswap.8.adoc: update note regarding swapfile creation
  * more: clean processes not cleaned up after failed SSH session
    using up 100% CPU (bsc#1220117)
  * mount: add --map-users and --map-groups convenience options
  * nsenter: add option `-c` to join the cgroup of target process
  * setarch: add riscv64/riscv32 support
  * setpgid: new command to run a program in a new process group
  * setpgid: make -f work
  * uuidd: add cont_clock persistence
  * uuidgen: add option --count
  * wall: query logind for list of users with tty (#2088)
    properly neutralize escape sequences (bsc#1221831,
    CVE-2024-28085)
  * write: query logind for list of users with tty (#2088)
  * libuuid: improved support for 64-bit time
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.2-ReleaseNotes
- Drop upstreamed patches:
    Revert-libblkid-try-LUKS2-first-when-probing.patch,
    util-linux-libsmartcols-fix-reduction-stages-use.patch,
    util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch,
    util-linux-chcpu-document-zVM-limitations.patch,
    util-linux-lscpu-add-ARM-cores-neoverse3.patch,
    util-linux-chcpu-document-zVM-limitations-generated.patch and
    util-linux-wall-CVE-2024-28085.patch.
- Add file conflict of util-linux-tty-tools and busybox-util-linux.
- Update util-linux-bash-completion-su-chsh-l.patch,
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch and
  make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.
- Move autoreconf back to %build.
- Add devel dependencies.
- Remove util-linux-rpmlintrc. It is no more needed with multibuild.
- uncomment "autoreconf --install" to use the new version of automake
- disable libmagic in more(1) for binary detection (bsc#1225197)
- Skip tests marked as ts_skip_qemu_user when running under qemu
- Mark racy lslocks test as known fail
- Re-enable lsfd tests using mkfds, as it is fixed now.</changelog>
  <changelog author="sbrabec@suse.com" date="1736856000">- Update to version 2.40.4 (jsc#PED-9751):
  * agetty: Prevent cursor escape (bsc#1194818, drop
    util-linux-agetty-prevent-cursor-escape.patch)
    add "systemd" to --version output\
  * chcpu(8): Document CPU deconfiguring behavior
  * fdisk: SGI fixes
  * hardlink: fix memory corruption
  * hardlink.1 directory|file is mandatory
  * lib/env: fix env_list_setenv() for strings without '='
  * libblkid:
    (exfat) validate fields used by prober
    (gpt) use blkid_probe_verify_csum() for partition array
    checksum
    add FSLASTBLOCK for swaparea
    bitlocker fix version on big-endian systems
  * libfdisk: make sure libblkid uses the same sector size
  * libmount:
    extract common error handling function
    propagate first error of multiple filesystem types
  * logger: correctly format tv_usec
  * lscpu: Skip aarch64 decode path for rest of the architectures
    (bsc#1229476, drop util-linux-lscpu-skip-aarch64-decode.patch)
  * lsns: ignore ESRCH errors reported when accessing files under
    /proc
  * mkswap: set selinux label also when creating file
  * more: make sure we have data on stderr
  * nsenter: support empty environ
  * umount, losetup: Document loop destroy behavior
    (bsc#1159034, drop
    util-linux-umount-losetup-lazy-destruction.patch,
    util-linux-umount-losetup-lazy-destruction-generated.patch).
  * uuidd: fix /var/lib/libuuid mode uuidd-tmpfiles.conf
    fix /var/lib/libuuid mode uuidd-tmpfiles.conf
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.3-ReleaseNotes
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.4-ReleaseNotes
  - Refresh util-linux.keyring. Key validity was extended.</changelog>
  <changelog author="sbrabec@suse.com" date="1743595200">- Use utmp as fallback for wall (bsc#1239671,
  util-linux-wall-use-utmp-fallback.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1774267200">- fdisk: Fix possible partition overlay and data corruption if EBR
  gap is missing (boo#1222465,
  util-linux-libfdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-2.patch,
  util-linux-libfdisk-ebr-missing-gap-2.patch,
  util-linux-tests-fdisk-ebr-missing-gap-3.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1774267201">- Recognize fuse "portal" as a virtual file system (boo#1234736,
  util-linux-libmount-fuse-portal.patch).</changelog>
</package>
<package pkgid="bc00c935e1371d82ebb7d6133bf9533a1efa841cecacb5c6c5e6f1048f7fe36c" name="libblkid-devel" arch="x86_64">
  <version epoch="0" ver="2.40.4" rel="150700.4.3.1"/>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1717934400">- Fix hang of lscpu -e (bsc#1225598,
  util-linux-libsmartcols-fix-reduction-stages-use.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1725364800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1733054400">- Update to version 2.40.2 (jsc#PED-9751):
  * Add lastlog2 (disabled for this build, SLE15/Leap15
    infrastructure is not ready for it)
  * agetty: Load autologin user from agetty.autologin credential
  * agetty: use get_terminal_default_type()
  * agetty: use sd_get_sessions() for number of users (#2088)
  * agetty: don't overwrite TERM passed by the user
  * blockdev: add support for BLKGETZONESZ
  * cfdisk: ask y/n before wipe
  * cfdisk: properly handle out-of-order partitions during resize
  * cfdisk: fix possible integer overflow
  * chcpu: document limitations of -g (bsc#1218609)
  * chsh: use libeconf to read /etc/shells
  * column: fix -l
  * column: fix memory leak
  * dmesg: fix FD leak
  * dmesg: fix delta calculation
  * dmesg: fix wrong size calculation
  * dmesg: support reading kmsg format from file
  * enosys: a new small command to make syscalls fail with ENOSYS
  * exch: new command to atomically exchanges paths between two files
  * fdisk: add support for partition resizing
  * fdisk: remove usage of VLA
  * fincore: add --output-all
  * findmnt: add --list-columns
  * findmnt: add -I, --dfi options for imitating the output of df -i
  * findmnt: add inode-related columns for implementing "df -i" like output
  * fsck.minix: fix possible overrun
  * hexdump: add '--one-byte-hex' format option
  * hwclock: add support for RTC_VL_READ/RTC_VL_CLR ioctls
  * libblkid: fix segfault when blkid.conf doesn't exist
  * libfdisk: add initializer to geometry
  * libmount: improving robustness in reading kernel messages,
    add pidfs to pseudo fs list
  * libmount: fix access check for utab in context
  * libmount: fix umount --read-only
  * login: initialize noauth from login.noauth credential
  * lsblk: add --filter
  * lsblk: add --highlight
  * lsblk: add --list-columns
  * lsclocks: new command to show clocks
  * lscpu: even more Arm part numbers (bsc#1223605)
  * lscpu: New Arm Cortex part numbers
    fix hang of lscpu -e (bsc#1225598)
  * lsfd: Refactor the pidfd logic, support pidfs
  * lsns: fix netns use
  * mkfs.minix: handle 64bit time on 32bit system
  * mkswap: implement --file
  * mkswap: implement --offset
  * mkswap.8.adoc: update note regarding swapfile creation
  * more: clean processes not cleaned up after failed SSH session
    using up 100% CPU (bsc#1220117)
  * mount: add --map-users and --map-groups convenience options
  * nsenter: add option `-c` to join the cgroup of target process
  * setarch: add riscv64/riscv32 support
  * setpgid: new command to run a program in a new process group
  * setpgid: make -f work
  * uuidd: add cont_clock persistence
  * uuidgen: add option --count
  * wall: query logind for list of users with tty (#2088)
    properly neutralize escape sequences (bsc#1221831,
    CVE-2024-28085)
  * write: query logind for list of users with tty (#2088)
  * libuuid: improved support for 64-bit time
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.2-ReleaseNotes
- Drop upstreamed patches:
    Revert-libblkid-try-LUKS2-first-when-probing.patch,
    util-linux-libsmartcols-fix-reduction-stages-use.patch,
    util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch,
    util-linux-chcpu-document-zVM-limitations.patch,
    util-linux-lscpu-add-ARM-cores-neoverse3.patch,
    util-linux-chcpu-document-zVM-limitations-generated.patch and
    util-linux-wall-CVE-2024-28085.patch.
- Add file conflict of util-linux-tty-tools and busybox-util-linux.
- Update util-linux-bash-completion-su-chsh-l.patch,
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch and
  make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.
- Move autoreconf back to %build.
- Add devel dependencies.
- Remove util-linux-rpmlintrc. It is no more needed with multibuild.
- uncomment "autoreconf --install" to use the new version of automake
- disable libmagic in more(1) for binary detection (bsc#1225197)
- Skip tests marked as ts_skip_qemu_user when running under qemu
- Mark racy lslocks test as known fail
- Re-enable lsfd tests using mkfds, as it is fixed now.</changelog>
  <changelog author="sbrabec@suse.com" date="1736856000">- Update to version 2.40.4 (jsc#PED-9751):
  * agetty: Prevent cursor escape (bsc#1194818, drop
    util-linux-agetty-prevent-cursor-escape.patch)
    add "systemd" to --version output\
  * chcpu(8): Document CPU deconfiguring behavior
  * fdisk: SGI fixes
  * hardlink: fix memory corruption
  * hardlink.1 directory|file is mandatory
  * lib/env: fix env_list_setenv() for strings without '='
  * libblkid:
    (exfat) validate fields used by prober
    (gpt) use blkid_probe_verify_csum() for partition array
    checksum
    add FSLASTBLOCK for swaparea
    bitlocker fix version on big-endian systems
  * libfdisk: make sure libblkid uses the same sector size
  * libmount:
    extract common error handling function
    propagate first error of multiple filesystem types
  * logger: correctly format tv_usec
  * lscpu: Skip aarch64 decode path for rest of the architectures
    (bsc#1229476, drop util-linux-lscpu-skip-aarch64-decode.patch)
  * lsns: ignore ESRCH errors reported when accessing files under
    /proc
  * mkswap: set selinux label also when creating file
  * more: make sure we have data on stderr
  * nsenter: support empty environ
  * umount, losetup: Document loop destroy behavior
    (bsc#1159034, drop
    util-linux-umount-losetup-lazy-destruction.patch,
    util-linux-umount-losetup-lazy-destruction-generated.patch).
  * uuidd: fix /var/lib/libuuid mode uuidd-tmpfiles.conf
    fix /var/lib/libuuid mode uuidd-tmpfiles.conf
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.3-ReleaseNotes
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.4-ReleaseNotes
  - Refresh util-linux.keyring. Key validity was extended.</changelog>
  <changelog author="sbrabec@suse.com" date="1743595200">- Use utmp as fallback for wall (bsc#1239671,
  util-linux-wall-use-utmp-fallback.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
</package>
<package pkgid="2d4876340bbebb581aae940a585c3da189cf73c33afe2c4adaed4a7b0992a0f2" name="libblkid-devel-static" arch="x86_64">
  <version epoch="0" ver="2.40.4" rel="150700.4.10.1"/>
  <changelog author="sbrabec@suse.com" date="1706011200">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1717934400">- Fix hang of lscpu -e (bsc#1225598,
  util-linux-libsmartcols-fix-reduction-stages-use.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1725364800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1733054400">- Update to version 2.40.2 (jsc#PED-9751):
  * Add lastlog2 (disabled for this build, SLE15/Leap15
    infrastructure is not ready for it)
  * agetty: Load autologin user from agetty.autologin credential
  * agetty: use get_terminal_default_type()
  * agetty: use sd_get_sessions() for number of users (#2088)
  * agetty: don't overwrite TERM passed by the user
  * blockdev: add support for BLKGETZONESZ
  * cfdisk: ask y/n before wipe
  * cfdisk: properly handle out-of-order partitions during resize
  * cfdisk: fix possible integer overflow
  * chcpu: document limitations of -g (bsc#1218609)
  * chsh: use libeconf to read /etc/shells
  * column: fix -l
  * column: fix memory leak
  * dmesg: fix FD leak
  * dmesg: fix delta calculation
  * dmesg: fix wrong size calculation
  * dmesg: support reading kmsg format from file
  * enosys: a new small command to make syscalls fail with ENOSYS
  * exch: new command to atomically exchanges paths between two files
  * fdisk: add support for partition resizing
  * fdisk: remove usage of VLA
  * fincore: add --output-all
  * findmnt: add --list-columns
  * findmnt: add -I, --dfi options for imitating the output of df -i
  * findmnt: add inode-related columns for implementing "df -i" like output
  * fsck.minix: fix possible overrun
  * hexdump: add '--one-byte-hex' format option
  * hwclock: add support for RTC_VL_READ/RTC_VL_CLR ioctls
  * libblkid: fix segfault when blkid.conf doesn't exist
  * libfdisk: add initializer to geometry
  * libmount: improving robustness in reading kernel messages,
    add pidfs to pseudo fs list
  * libmount: fix access check for utab in context
  * libmount: fix umount --read-only
  * login: initialize noauth from login.noauth credential
  * lsblk: add --filter
  * lsblk: add --highlight
  * lsblk: add --list-columns
  * lsclocks: new command to show clocks
  * lscpu: even more Arm part numbers (bsc#1223605)
  * lscpu: New Arm Cortex part numbers
    fix hang of lscpu -e (bsc#1225598)
  * lsfd: Refactor the pidfd logic, support pidfs
  * lsns: fix netns use
  * mkfs.minix: handle 64bit time on 32bit system
  * mkswap: implement --file
  * mkswap: implement --offset
  * mkswap.8.adoc: update note regarding swapfile creation
  * more: clean processes not cleaned up after failed SSH session
    using up 100% CPU (bsc#1220117)
  * mount: add --map-users and --map-groups convenience options
  * nsenter: add option `-c` to join the cgroup of target process
  * setarch: add riscv64/riscv32 support
  * setpgid: new command to run a program in a new process group
  * setpgid: make -f work
  * uuidd: add cont_clock persistence
  * uuidgen: add option --count
  * wall: query logind for list of users with tty (#2088)
    properly neutralize escape sequences (bsc#1221831,
    CVE-2024-28085)
  * write: query logind for list of users with tty (#2088)
  * libuuid: improved support for 64-bit time
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.2-ReleaseNotes
- Drop upstreamed patches:
    Revert-libblkid-try-LUKS2-first-when-probing.patch,
    util-linux-libsmartcols-fix-reduction-stages-use.patch,
    util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch,
    util-linux-chcpu-document-zVM-limitations.patch,
    util-linux-lscpu-add-ARM-cores-neoverse3.patch,
    util-linux-chcpu-document-zVM-limitations-generated.patch and
    util-linux-wall-CVE-2024-28085.patch.
- Add file conflict of util-linux-tty-tools and busybox-util-linux.
- Update util-linux-bash-completion-su-chsh-l.patch,
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch and
  make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.
- Move autoreconf back to %build.
- Add devel dependencies.
- Remove util-linux-rpmlintrc. It is no more needed with multibuild.
- uncomment "autoreconf --install" to use the new version of automake
- disable libmagic in more(1) for binary detection (bsc#1225197)
- Skip tests marked as ts_skip_qemu_user when running under qemu
- Mark racy lslocks test as known fail
- Re-enable lsfd tests using mkfds, as it is fixed now.</changelog>
  <changelog author="sbrabec@suse.com" date="1736856000">- Update to version 2.40.4 (jsc#PED-9751):
  * agetty: Prevent cursor escape (bsc#1194818, drop
    util-linux-agetty-prevent-cursor-escape.patch)
    add "systemd" to --version output\
  * chcpu(8): Document CPU deconfiguring behavior
  * fdisk: SGI fixes
  * hardlink: fix memory corruption
  * hardlink.1 directory|file is mandatory
  * lib/env: fix env_list_setenv() for strings without '='
  * libblkid:
    (exfat) validate fields used by prober
    (gpt) use blkid_probe_verify_csum() for partition array
    checksum
    add FSLASTBLOCK for swaparea
    bitlocker fix version on big-endian systems
  * libfdisk: make sure libblkid uses the same sector size
  * libmount:
    extract common error handling function
    propagate first error of multiple filesystem types
  * logger: correctly format tv_usec
  * lscpu: Skip aarch64 decode path for rest of the architectures
    (bsc#1229476, drop util-linux-lscpu-skip-aarch64-decode.patch)
  * lsns: ignore ESRCH errors reported when accessing files under
    /proc
  * mkswap: set selinux label also when creating file
  * more: make sure we have data on stderr
  * nsenter: support empty environ
  * umount, losetup: Document loop destroy behavior
    (bsc#1159034, drop
    util-linux-umount-losetup-lazy-destruction.patch,
    util-linux-umount-losetup-lazy-destruction-generated.patch).
  * uuidd: fix /var/lib/libuuid mode uuidd-tmpfiles.conf
    fix /var/lib/libuuid mode uuidd-tmpfiles.conf
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.3-ReleaseNotes
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.4-ReleaseNotes
  - Refresh util-linux.keyring. Key validity was extended.</changelog>
  <changelog author="sbrabec@suse.com" date="1743595200">- Use utmp as fallback for wall (bsc#1239671,
  util-linux-wall-use-utmp-fallback.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1774267200">- fdisk: Fix possible partition overlay and data corruption if EBR
  gap is missing (boo#1222465,
  util-linux-libfdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-2.patch,
  util-linux-libfdisk-ebr-missing-gap-2.patch,
  util-linux-tests-fdisk-ebr-missing-gap-3.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1774267201">- Recognize fuse "portal" as a virtual file system (boo#1234736,
  util-linux-libmount-fuse-portal.patch).</changelog>
</package>
<package pkgid="2ff3c3701b6920c0dd48303a3e2ddb22327b1ef98e3634fcc3d8bafa64474aba" name="libblkid-devel-static" arch="x86_64">
  <version epoch="0" ver="2.40.4" rel="150700.4.3.1"/>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1717934400">- Fix hang of lscpu -e (bsc#1225598,
  util-linux-libsmartcols-fix-reduction-stages-use.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1725364800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1733054400">- Update to version 2.40.2 (jsc#PED-9751):
  * Add lastlog2 (disabled for this build, SLE15/Leap15
    infrastructure is not ready for it)
  * agetty: Load autologin user from agetty.autologin credential
  * agetty: use get_terminal_default_type()
  * agetty: use sd_get_sessions() for number of users (#2088)
  * agetty: don't overwrite TERM passed by the user
  * blockdev: add support for BLKGETZONESZ
  * cfdisk: ask y/n before wipe
  * cfdisk: properly handle out-of-order partitions during resize
  * cfdisk: fix possible integer overflow
  * chcpu: document limitations of -g (bsc#1218609)
  * chsh: use libeconf to read /etc/shells
  * column: fix -l
  * column: fix memory leak
  * dmesg: fix FD leak
  * dmesg: fix delta calculation
  * dmesg: fix wrong size calculation
  * dmesg: support reading kmsg format from file
  * enosys: a new small command to make syscalls fail with ENOSYS
  * exch: new command to atomically exchanges paths between two files
  * fdisk: add support for partition resizing
  * fdisk: remove usage of VLA
  * fincore: add --output-all
  * findmnt: add --list-columns
  * findmnt: add -I, --dfi options for imitating the output of df -i
  * findmnt: add inode-related columns for implementing "df -i" like output
  * fsck.minix: fix possible overrun
  * hexdump: add '--one-byte-hex' format option
  * hwclock: add support for RTC_VL_READ/RTC_VL_CLR ioctls
  * libblkid: fix segfault when blkid.conf doesn't exist
  * libfdisk: add initializer to geometry
  * libmount: improving robustness in reading kernel messages,
    add pidfs to pseudo fs list
  * libmount: fix access check for utab in context
  * libmount: fix umount --read-only
  * login: initialize noauth from login.noauth credential
  * lsblk: add --filter
  * lsblk: add --highlight
  * lsblk: add --list-columns
  * lsclocks: new command to show clocks
  * lscpu: even more Arm part numbers (bsc#1223605)
  * lscpu: New Arm Cortex part numbers
    fix hang of lscpu -e (bsc#1225598)
  * lsfd: Refactor the pidfd logic, support pidfs
  * lsns: fix netns use
  * mkfs.minix: handle 64bit time on 32bit system
  * mkswap: implement --file
  * mkswap: implement --offset
  * mkswap.8.adoc: update note regarding swapfile creation
  * more: clean processes not cleaned up after failed SSH session
    using up 100% CPU (bsc#1220117)
  * mount: add --map-users and --map-groups convenience options
  * nsenter: add option `-c` to join the cgroup of target process
  * setarch: add riscv64/riscv32 support
  * setpgid: new command to run a program in a new process group
  * setpgid: make -f work
  * uuidd: add cont_clock persistence
  * uuidgen: add option --count
  * wall: query logind for list of users with tty (#2088)
    properly neutralize escape sequences (bsc#1221831,
    CVE-2024-28085)
  * write: query logind for list of users with tty (#2088)
  * libuuid: improved support for 64-bit time
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.2-ReleaseNotes
- Drop upstreamed patches:
    Revert-libblkid-try-LUKS2-first-when-probing.patch,
    util-linux-libsmartcols-fix-reduction-stages-use.patch,
    util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch,
    util-linux-chcpu-document-zVM-limitations.patch,
    util-linux-lscpu-add-ARM-cores-neoverse3.patch,
    util-linux-chcpu-document-zVM-limitations-generated.patch and
    util-linux-wall-CVE-2024-28085.patch.
- Add file conflict of util-linux-tty-tools and busybox-util-linux.
- Update util-linux-bash-completion-su-chsh-l.patch,
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch and
  make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.
- Move autoreconf back to %build.
- Add devel dependencies.
- Remove util-linux-rpmlintrc. It is no more needed with multibuild.
- uncomment "autoreconf --install" to use the new version of automake
- disable libmagic in more(1) for binary detection (bsc#1225197)
- Skip tests marked as ts_skip_qemu_user when running under qemu
- Mark racy lslocks test as known fail
- Re-enable lsfd tests using mkfds, as it is fixed now.</changelog>
  <changelog author="sbrabec@suse.com" date="1736856000">- Update to version 2.40.4 (jsc#PED-9751):
  * agetty: Prevent cursor escape (bsc#1194818, drop
    util-linux-agetty-prevent-cursor-escape.patch)
    add "systemd" to --version output\
  * chcpu(8): Document CPU deconfiguring behavior
  * fdisk: SGI fixes
  * hardlink: fix memory corruption
  * hardlink.1 directory|file is mandatory
  * lib/env: fix env_list_setenv() for strings without '='
  * libblkid:
    (exfat) validate fields used by prober
    (gpt) use blkid_probe_verify_csum() for partition array
    checksum
    add FSLASTBLOCK for swaparea
    bitlocker fix version on big-endian systems
  * libfdisk: make sure libblkid uses the same sector size
  * libmount:
    extract common error handling function
    propagate first error of multiple filesystem types
  * logger: correctly format tv_usec
  * lscpu: Skip aarch64 decode path for rest of the architectures
    (bsc#1229476, drop util-linux-lscpu-skip-aarch64-decode.patch)
  * lsns: ignore ESRCH errors reported when accessing files under
    /proc
  * mkswap: set selinux label also when creating file
  * more: make sure we have data on stderr
  * nsenter: support empty environ
  * umount, losetup: Document loop destroy behavior
    (bsc#1159034, drop
    util-linux-umount-losetup-lazy-destruction.patch,
    util-linux-umount-losetup-lazy-destruction-generated.patch).
  * uuidd: fix /var/lib/libuuid mode uuidd-tmpfiles.conf
    fix /var/lib/libuuid mode uuidd-tmpfiles.conf
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.3-ReleaseNotes
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.4-ReleaseNotes
  - Refresh util-linux.keyring. Key validity was extended.</changelog>
  <changelog author="sbrabec@suse.com" date="1743595200">- Use utmp as fallback for wall (bsc#1239671,
  util-linux-wall-use-utmp-fallback.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
</package>
<package pkgid="7eb989c422e75589fd88e8338c5ce99009713f4d001c56146ad3537de058e8a7" name="libblkid1" arch="x86_64">
  <version epoch="0" ver="2.40.4" rel="150700.4.10.1"/>
  <changelog author="sbrabec@suse.com" date="1706011200">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1717934400">- Fix hang of lscpu -e (bsc#1225598,
  util-linux-libsmartcols-fix-reduction-stages-use.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1725364800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1733054400">- Update to version 2.40.2 (jsc#PED-9751):
  * Add lastlog2 (disabled for this build, SLE15/Leap15
    infrastructure is not ready for it)
  * agetty: Load autologin user from agetty.autologin credential
  * agetty: use get_terminal_default_type()
  * agetty: use sd_get_sessions() for number of users (#2088)
  * agetty: don't overwrite TERM passed by the user
  * blockdev: add support for BLKGETZONESZ
  * cfdisk: ask y/n before wipe
  * cfdisk: properly handle out-of-order partitions during resize
  * cfdisk: fix possible integer overflow
  * chcpu: document limitations of -g (bsc#1218609)
  * chsh: use libeconf to read /etc/shells
  * column: fix -l
  * column: fix memory leak
  * dmesg: fix FD leak
  * dmesg: fix delta calculation
  * dmesg: fix wrong size calculation
  * dmesg: support reading kmsg format from file
  * enosys: a new small command to make syscalls fail with ENOSYS
  * exch: new command to atomically exchanges paths between two files
  * fdisk: add support for partition resizing
  * fdisk: remove usage of VLA
  * fincore: add --output-all
  * findmnt: add --list-columns
  * findmnt: add -I, --dfi options for imitating the output of df -i
  * findmnt: add inode-related columns for implementing "df -i" like output
  * fsck.minix: fix possible overrun
  * hexdump: add '--one-byte-hex' format option
  * hwclock: add support for RTC_VL_READ/RTC_VL_CLR ioctls
  * libblkid: fix segfault when blkid.conf doesn't exist
  * libfdisk: add initializer to geometry
  * libmount: improving robustness in reading kernel messages,
    add pidfs to pseudo fs list
  * libmount: fix access check for utab in context
  * libmount: fix umount --read-only
  * login: initialize noauth from login.noauth credential
  * lsblk: add --filter
  * lsblk: add --highlight
  * lsblk: add --list-columns
  * lsclocks: new command to show clocks
  * lscpu: even more Arm part numbers (bsc#1223605)
  * lscpu: New Arm Cortex part numbers
    fix hang of lscpu -e (bsc#1225598)
  * lsfd: Refactor the pidfd logic, support pidfs
  * lsns: fix netns use
  * mkfs.minix: handle 64bit time on 32bit system
  * mkswap: implement --file
  * mkswap: implement --offset
  * mkswap.8.adoc: update note regarding swapfile creation
  * more: clean processes not cleaned up after failed SSH session
    using up 100% CPU (bsc#1220117)
  * mount: add --map-users and --map-groups convenience options
  * nsenter: add option `-c` to join the cgroup of target process
  * setarch: add riscv64/riscv32 support
  * setpgid: new command to run a program in a new process group
  * setpgid: make -f work
  * uuidd: add cont_clock persistence
  * uuidgen: add option --count
  * wall: query logind for list of users with tty (#2088)
    properly neutralize escape sequences (bsc#1221831,
    CVE-2024-28085)
  * write: query logind for list of users with tty (#2088)
  * libuuid: improved support for 64-bit time
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.2-ReleaseNotes
- Drop upstreamed patches:
    Revert-libblkid-try-LUKS2-first-when-probing.patch,
    util-linux-libsmartcols-fix-reduction-stages-use.patch,
    util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch,
    util-linux-chcpu-document-zVM-limitations.patch,
    util-linux-lscpu-add-ARM-cores-neoverse3.patch,
    util-linux-chcpu-document-zVM-limitations-generated.patch and
    util-linux-wall-CVE-2024-28085.patch.
- Add file conflict of util-linux-tty-tools and busybox-util-linux.
- Update util-linux-bash-completion-su-chsh-l.patch,
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch and
  make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.
- Move autoreconf back to %build.
- Add devel dependencies.
- Remove util-linux-rpmlintrc. It is no more needed with multibuild.
- uncomment "autoreconf --install" to use the new version of automake
- disable libmagic in more(1) for binary detection (bsc#1225197)
- Skip tests marked as ts_skip_qemu_user when running under qemu
- Mark racy lslocks test as known fail
- Re-enable lsfd tests using mkfds, as it is fixed now.</changelog>
  <changelog author="sbrabec@suse.com" date="1736856000">- Update to version 2.40.4 (jsc#PED-9751):
  * agetty: Prevent cursor escape (bsc#1194818, drop
    util-linux-agetty-prevent-cursor-escape.patch)
    add "systemd" to --version output\
  * chcpu(8): Document CPU deconfiguring behavior
  * fdisk: SGI fixes
  * hardlink: fix memory corruption
  * hardlink.1 directory|file is mandatory
  * lib/env: fix env_list_setenv() for strings without '='
  * libblkid:
    (exfat) validate fields used by prober
    (gpt) use blkid_probe_verify_csum() for partition array
    checksum
    add FSLASTBLOCK for swaparea
    bitlocker fix version on big-endian systems
  * libfdisk: make sure libblkid uses the same sector size
  * libmount:
    extract common error handling function
    propagate first error of multiple filesystem types
  * logger: correctly format tv_usec
  * lscpu: Skip aarch64 decode path for rest of the architectures
    (bsc#1229476, drop util-linux-lscpu-skip-aarch64-decode.patch)
  * lsns: ignore ESRCH errors reported when accessing files under
    /proc
  * mkswap: set selinux label also when creating file
  * more: make sure we have data on stderr
  * nsenter: support empty environ
  * umount, losetup: Document loop destroy behavior
    (bsc#1159034, drop
    util-linux-umount-losetup-lazy-destruction.patch,
    util-linux-umount-losetup-lazy-destruction-generated.patch).
  * uuidd: fix /var/lib/libuuid mode uuidd-tmpfiles.conf
    fix /var/lib/libuuid mode uuidd-tmpfiles.conf
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.3-ReleaseNotes
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.4-ReleaseNotes
  - Refresh util-linux.keyring. Key validity was extended.</changelog>
  <changelog author="sbrabec@suse.com" date="1743595200">- Use utmp as fallback for wall (bsc#1239671,
  util-linux-wall-use-utmp-fallback.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1774267200">- fdisk: Fix possible partition overlay and data corruption if EBR
  gap is missing (boo#1222465,
  util-linux-libfdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-2.patch,
  util-linux-libfdisk-ebr-missing-gap-2.patch,
  util-linux-tests-fdisk-ebr-missing-gap-3.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1774267201">- Recognize fuse "portal" as a virtual file system (boo#1234736,
  util-linux-libmount-fuse-portal.patch).</changelog>
</package>
<package pkgid="cf63b7191f33d1d627b160cb0bb2075555966284132f18fa4a13a924f5918a48" name="libblkid1" arch="x86_64">
  <version epoch="0" ver="2.40.4" rel="150700.4.3.1"/>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1717934400">- Fix hang of lscpu -e (bsc#1225598,
  util-linux-libsmartcols-fix-reduction-stages-use.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1725364800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1733054400">- Update to version 2.40.2 (jsc#PED-9751):
  * Add lastlog2 (disabled for this build, SLE15/Leap15
    infrastructure is not ready for it)
  * agetty: Load autologin user from agetty.autologin credential
  * agetty: use get_terminal_default_type()
  * agetty: use sd_get_sessions() for number of users (#2088)
  * agetty: don't overwrite TERM passed by the user
  * blockdev: add support for BLKGETZONESZ
  * cfdisk: ask y/n before wipe
  * cfdisk: properly handle out-of-order partitions during resize
  * cfdisk: fix possible integer overflow
  * chcpu: document limitations of -g (bsc#1218609)
  * chsh: use libeconf to read /etc/shells
  * column: fix -l
  * column: fix memory leak
  * dmesg: fix FD leak
  * dmesg: fix delta calculation
  * dmesg: fix wrong size calculation
  * dmesg: support reading kmsg format from file
  * enosys: a new small command to make syscalls fail with ENOSYS
  * exch: new command to atomically exchanges paths between two files
  * fdisk: add support for partition resizing
  * fdisk: remove usage of VLA
  * fincore: add --output-all
  * findmnt: add --list-columns
  * findmnt: add -I, --dfi options for imitating the output of df -i
  * findmnt: add inode-related columns for implementing "df -i" like output
  * fsck.minix: fix possible overrun
  * hexdump: add '--one-byte-hex' format option
  * hwclock: add support for RTC_VL_READ/RTC_VL_CLR ioctls
  * libblkid: fix segfault when blkid.conf doesn't exist
  * libfdisk: add initializer to geometry
  * libmount: improving robustness in reading kernel messages,
    add pidfs to pseudo fs list
  * libmount: fix access check for utab in context
  * libmount: fix umount --read-only
  * login: initialize noauth from login.noauth credential
  * lsblk: add --filter
  * lsblk: add --highlight
  * lsblk: add --list-columns
  * lsclocks: new command to show clocks
  * lscpu: even more Arm part numbers (bsc#1223605)
  * lscpu: New Arm Cortex part numbers
    fix hang of lscpu -e (bsc#1225598)
  * lsfd: Refactor the pidfd logic, support pidfs
  * lsns: fix netns use
  * mkfs.minix: handle 64bit time on 32bit system
  * mkswap: implement --file
  * mkswap: implement --offset
  * mkswap.8.adoc: update note regarding swapfile creation
  * more: clean processes not cleaned up after failed SSH session
    using up 100% CPU (bsc#1220117)
  * mount: add --map-users and --map-groups convenience options
  * nsenter: add option `-c` to join the cgroup of target process
  * setarch: add riscv64/riscv32 support
  * setpgid: new command to run a program in a new process group
  * setpgid: make -f work
  * uuidd: add cont_clock persistence
  * uuidgen: add option --count
  * wall: query logind for list of users with tty (#2088)
    properly neutralize escape sequences (bsc#1221831,
    CVE-2024-28085)
  * write: query logind for list of users with tty (#2088)
  * libuuid: improved support for 64-bit time
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.2-ReleaseNotes
- Drop upstreamed patches:
    Revert-libblkid-try-LUKS2-first-when-probing.patch,
    util-linux-libsmartcols-fix-reduction-stages-use.patch,
    util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch,
    util-linux-chcpu-document-zVM-limitations.patch,
    util-linux-lscpu-add-ARM-cores-neoverse3.patch,
    util-linux-chcpu-document-zVM-limitations-generated.patch and
    util-linux-wall-CVE-2024-28085.patch.
- Add file conflict of util-linux-tty-tools and busybox-util-linux.
- Update util-linux-bash-completion-su-chsh-l.patch,
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch and
  make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.
- Move autoreconf back to %build.
- Add devel dependencies.
- Remove util-linux-rpmlintrc. It is no more needed with multibuild.
- uncomment "autoreconf --install" to use the new version of automake
- disable libmagic in more(1) for binary detection (bsc#1225197)
- Skip tests marked as ts_skip_qemu_user when running under qemu
- Mark racy lslocks test as known fail
- Re-enable lsfd tests using mkfds, as it is fixed now.</changelog>
  <changelog author="sbrabec@suse.com" date="1736856000">- Update to version 2.40.4 (jsc#PED-9751):
  * agetty: Prevent cursor escape (bsc#1194818, drop
    util-linux-agetty-prevent-cursor-escape.patch)
    add "systemd" to --version output\
  * chcpu(8): Document CPU deconfiguring behavior
  * fdisk: SGI fixes
  * hardlink: fix memory corruption
  * hardlink.1 directory|file is mandatory
  * lib/env: fix env_list_setenv() for strings without '='
  * libblkid:
    (exfat) validate fields used by prober
    (gpt) use blkid_probe_verify_csum() for partition array
    checksum
    add FSLASTBLOCK for swaparea
    bitlocker fix version on big-endian systems
  * libfdisk: make sure libblkid uses the same sector size
  * libmount:
    extract common error handling function
    propagate first error of multiple filesystem types
  * logger: correctly format tv_usec
  * lscpu: Skip aarch64 decode path for rest of the architectures
    (bsc#1229476, drop util-linux-lscpu-skip-aarch64-decode.patch)
  * lsns: ignore ESRCH errors reported when accessing files under
    /proc
  * mkswap: set selinux label also when creating file
  * more: make sure we have data on stderr
  * nsenter: support empty environ
  * umount, losetup: Document loop destroy behavior
    (bsc#1159034, drop
    util-linux-umount-losetup-lazy-destruction.patch,
    util-linux-umount-losetup-lazy-destruction-generated.patch).
  * uuidd: fix /var/lib/libuuid mode uuidd-tmpfiles.conf
    fix /var/lib/libuuid mode uuidd-tmpfiles.conf
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.3-ReleaseNotes
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.4-ReleaseNotes
  - Refresh util-linux.keyring. Key validity was extended.</changelog>
  <changelog author="sbrabec@suse.com" date="1743595200">- Use utmp as fallback for wall (bsc#1239671,
  util-linux-wall-use-utmp-fallback.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
</package>
<package pkgid="bccccbf18ca127267c4dad5e232e33704a6646f5678ca49b7d04d7367502c257" name="libblkid1-32bit" arch="x86_64">
  <version epoch="0" ver="2.40.4" rel="150700.4.10.1"/>
  <changelog author="sbrabec@suse.com" date="1706011200">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1717934400">- Fix hang of lscpu -e (bsc#1225598,
  util-linux-libsmartcols-fix-reduction-stages-use.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1725364800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1733054400">- Update to version 2.40.2 (jsc#PED-9751):
  * Add lastlog2 (disabled for this build, SLE15/Leap15
    infrastructure is not ready for it)
  * agetty: Load autologin user from agetty.autologin credential
  * agetty: use get_terminal_default_type()
  * agetty: use sd_get_sessions() for number of users (#2088)
  * agetty: don't overwrite TERM passed by the user
  * blockdev: add support for BLKGETZONESZ
  * cfdisk: ask y/n before wipe
  * cfdisk: properly handle out-of-order partitions during resize
  * cfdisk: fix possible integer overflow
  * chcpu: document limitations of -g (bsc#1218609)
  * chsh: use libeconf to read /etc/shells
  * column: fix -l
  * column: fix memory leak
  * dmesg: fix FD leak
  * dmesg: fix delta calculation
  * dmesg: fix wrong size calculation
  * dmesg: support reading kmsg format from file
  * enosys: a new small command to make syscalls fail with ENOSYS
  * exch: new command to atomically exchanges paths between two files
  * fdisk: add support for partition resizing
  * fdisk: remove usage of VLA
  * fincore: add --output-all
  * findmnt: add --list-columns
  * findmnt: add -I, --dfi options for imitating the output of df -i
  * findmnt: add inode-related columns for implementing "df -i" like output
  * fsck.minix: fix possible overrun
  * hexdump: add '--one-byte-hex' format option
  * hwclock: add support for RTC_VL_READ/RTC_VL_CLR ioctls
  * libblkid: fix segfault when blkid.conf doesn't exist
  * libfdisk: add initializer to geometry
  * libmount: improving robustness in reading kernel messages,
    add pidfs to pseudo fs list
  * libmount: fix access check for utab in context
  * libmount: fix umount --read-only
  * login: initialize noauth from login.noauth credential
  * lsblk: add --filter
  * lsblk: add --highlight
  * lsblk: add --list-columns
  * lsclocks: new command to show clocks
  * lscpu: even more Arm part numbers (bsc#1223605)
  * lscpu: New Arm Cortex part numbers
    fix hang of lscpu -e (bsc#1225598)
  * lsfd: Refactor the pidfd logic, support pidfs
  * lsns: fix netns use
  * mkfs.minix: handle 64bit time on 32bit system
  * mkswap: implement --file
  * mkswap: implement --offset
  * mkswap.8.adoc: update note regarding swapfile creation
  * more: clean processes not cleaned up after failed SSH session
    using up 100% CPU (bsc#1220117)
  * mount: add --map-users and --map-groups convenience options
  * nsenter: add option `-c` to join the cgroup of target process
  * setarch: add riscv64/riscv32 support
  * setpgid: new command to run a program in a new process group
  * setpgid: make -f work
  * uuidd: add cont_clock persistence
  * uuidgen: add option --count
  * wall: query logind for list of users with tty (#2088)
    properly neutralize escape sequences (bsc#1221831,
    CVE-2024-28085)
  * write: query logind for list of users with tty (#2088)
  * libuuid: improved support for 64-bit time
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.2-ReleaseNotes
- Drop upstreamed patches:
    Revert-libblkid-try-LUKS2-first-when-probing.patch,
    util-linux-libsmartcols-fix-reduction-stages-use.patch,
    util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch,
    util-linux-chcpu-document-zVM-limitations.patch,
    util-linux-lscpu-add-ARM-cores-neoverse3.patch,
    util-linux-chcpu-document-zVM-limitations-generated.patch and
    util-linux-wall-CVE-2024-28085.patch.
- Add file conflict of util-linux-tty-tools and busybox-util-linux.
- Update util-linux-bash-completion-su-chsh-l.patch,
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch and
  make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.
- Move autoreconf back to %build.
- Add devel dependencies.
- Remove util-linux-rpmlintrc. It is no more needed with multibuild.
- uncomment "autoreconf --install" to use the new version of automake
- disable libmagic in more(1) for binary detection (bsc#1225197)
- Skip tests marked as ts_skip_qemu_user when running under qemu
- Mark racy lslocks test as known fail
- Re-enable lsfd tests using mkfds, as it is fixed now.</changelog>
  <changelog author="sbrabec@suse.com" date="1736856000">- Update to version 2.40.4 (jsc#PED-9751):
  * agetty: Prevent cursor escape (bsc#1194818, drop
    util-linux-agetty-prevent-cursor-escape.patch)
    add "systemd" to --version output\
  * chcpu(8): Document CPU deconfiguring behavior
  * fdisk: SGI fixes
  * hardlink: fix memory corruption
  * hardlink.1 directory|file is mandatory
  * lib/env: fix env_list_setenv() for strings without '='
  * libblkid:
    (exfat) validate fields used by prober
    (gpt) use blkid_probe_verify_csum() for partition array
    checksum
    add FSLASTBLOCK for swaparea
    bitlocker fix version on big-endian systems
  * libfdisk: make sure libblkid uses the same sector size
  * libmount:
    extract common error handling function
    propagate first error of multiple filesystem types
  * logger: correctly format tv_usec
  * lscpu: Skip aarch64 decode path for rest of the architectures
    (bsc#1229476, drop util-linux-lscpu-skip-aarch64-decode.patch)
  * lsns: ignore ESRCH errors reported when accessing files under
    /proc
  * mkswap: set selinux label also when creating file
  * more: make sure we have data on stderr
  * nsenter: support empty environ
  * umount, losetup: Document loop destroy behavior
    (bsc#1159034, drop
    util-linux-umount-losetup-lazy-destruction.patch,
    util-linux-umount-losetup-lazy-destruction-generated.patch).
  * uuidd: fix /var/lib/libuuid mode uuidd-tmpfiles.conf
    fix /var/lib/libuuid mode uuidd-tmpfiles.conf
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.3-ReleaseNotes
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.4-ReleaseNotes
  - Refresh util-linux.keyring. Key validity was extended.</changelog>
  <changelog author="sbrabec@suse.com" date="1743595200">- Use utmp as fallback for wall (bsc#1239671,
  util-linux-wall-use-utmp-fallback.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1774267200">- fdisk: Fix possible partition overlay and data corruption if EBR
  gap is missing (boo#1222465,
  util-linux-libfdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-2.patch,
  util-linux-libfdisk-ebr-missing-gap-2.patch,
  util-linux-tests-fdisk-ebr-missing-gap-3.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1774267201">- Recognize fuse "portal" as a virtual file system (boo#1234736,
  util-linux-libmount-fuse-portal.patch).</changelog>
</package>
<package pkgid="d387a1f0c59a518296b846b125f5433b8622bea9279b27a549b03373ea56b4c5" name="libblkid1-32bit" arch="x86_64">
  <version epoch="0" ver="2.40.4" rel="150700.4.3.1"/>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1717934400">- Fix hang of lscpu -e (bsc#1225598,
  util-linux-libsmartcols-fix-reduction-stages-use.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1725364800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1733054400">- Update to version 2.40.2 (jsc#PED-9751):
  * Add lastlog2 (disabled for this build, SLE15/Leap15
    infrastructure is not ready for it)
  * agetty: Load autologin user from agetty.autologin credential
  * agetty: use get_terminal_default_type()
  * agetty: use sd_get_sessions() for number of users (#2088)
  * agetty: don't overwrite TERM passed by the user
  * blockdev: add support for BLKGETZONESZ
  * cfdisk: ask y/n before wipe
  * cfdisk: properly handle out-of-order partitions during resize
  * cfdisk: fix possible integer overflow
  * chcpu: document limitations of -g (bsc#1218609)
  * chsh: use libeconf to read /etc/shells
  * column: fix -l
  * column: fix memory leak
  * dmesg: fix FD leak
  * dmesg: fix delta calculation
  * dmesg: fix wrong size calculation
  * dmesg: support reading kmsg format from file
  * enosys: a new small command to make syscalls fail with ENOSYS
  * exch: new command to atomically exchanges paths between two files
  * fdisk: add support for partition resizing
  * fdisk: remove usage of VLA
  * fincore: add --output-all
  * findmnt: add --list-columns
  * findmnt: add -I, --dfi options for imitating the output of df -i
  * findmnt: add inode-related columns for implementing "df -i" like output
  * fsck.minix: fix possible overrun
  * hexdump: add '--one-byte-hex' format option
  * hwclock: add support for RTC_VL_READ/RTC_VL_CLR ioctls
  * libblkid: fix segfault when blkid.conf doesn't exist
  * libfdisk: add initializer to geometry
  * libmount: improving robustness in reading kernel messages,
    add pidfs to pseudo fs list
  * libmount: fix access check for utab in context
  * libmount: fix umount --read-only
  * login: initialize noauth from login.noauth credential
  * lsblk: add --filter
  * lsblk: add --highlight
  * lsblk: add --list-columns
  * lsclocks: new command to show clocks
  * lscpu: even more Arm part numbers (bsc#1223605)
  * lscpu: New Arm Cortex part numbers
    fix hang of lscpu -e (bsc#1225598)
  * lsfd: Refactor the pidfd logic, support pidfs
  * lsns: fix netns use
  * mkfs.minix: handle 64bit time on 32bit system
  * mkswap: implement --file
  * mkswap: implement --offset
  * mkswap.8.adoc: update note regarding swapfile creation
  * more: clean processes not cleaned up after failed SSH session
    using up 100% CPU (bsc#1220117)
  * mount: add --map-users and --map-groups convenience options
  * nsenter: add option `-c` to join the cgroup of target process
  * setarch: add riscv64/riscv32 support
  * setpgid: new command to run a program in a new process group
  * setpgid: make -f work
  * uuidd: add cont_clock persistence
  * uuidgen: add option --count
  * wall: query logind for list of users with tty (#2088)
    properly neutralize escape sequences (bsc#1221831,
    CVE-2024-28085)
  * write: query logind for list of users with tty (#2088)
  * libuuid: improved support for 64-bit time
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.2-ReleaseNotes
- Drop upstreamed patches:
    Revert-libblkid-try-LUKS2-first-when-probing.patch,
    util-linux-libsmartcols-fix-reduction-stages-use.patch,
    util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch,
    util-linux-chcpu-document-zVM-limitations.patch,
    util-linux-lscpu-add-ARM-cores-neoverse3.patch,
    util-linux-chcpu-document-zVM-limitations-generated.patch and
    util-linux-wall-CVE-2024-28085.patch.
- Add file conflict of util-linux-tty-tools and busybox-util-linux.
- Update util-linux-bash-completion-su-chsh-l.patch,
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch and
  make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.
- Move autoreconf back to %build.
- Add devel dependencies.
- Remove util-linux-rpmlintrc. It is no more needed with multibuild.
- uncomment "autoreconf --install" to use the new version of automake
- disable libmagic in more(1) for binary detection (bsc#1225197)
- Skip tests marked as ts_skip_qemu_user when running under qemu
- Mark racy lslocks test as known fail
- Re-enable lsfd tests using mkfds, as it is fixed now.</changelog>
  <changelog author="sbrabec@suse.com" date="1736856000">- Update to version 2.40.4 (jsc#PED-9751):
  * agetty: Prevent cursor escape (bsc#1194818, drop
    util-linux-agetty-prevent-cursor-escape.patch)
    add "systemd" to --version output\
  * chcpu(8): Document CPU deconfiguring behavior
  * fdisk: SGI fixes
  * hardlink: fix memory corruption
  * hardlink.1 directory|file is mandatory
  * lib/env: fix env_list_setenv() for strings without '='
  * libblkid:
    (exfat) validate fields used by prober
    (gpt) use blkid_probe_verify_csum() for partition array
    checksum
    add FSLASTBLOCK for swaparea
    bitlocker fix version on big-endian systems
  * libfdisk: make sure libblkid uses the same sector size
  * libmount:
    extract common error handling function
    propagate first error of multiple filesystem types
  * logger: correctly format tv_usec
  * lscpu: Skip aarch64 decode path for rest of the architectures
    (bsc#1229476, drop util-linux-lscpu-skip-aarch64-decode.patch)
  * lsns: ignore ESRCH errors reported when accessing files under
    /proc
  * mkswap: set selinux label also when creating file
  * more: make sure we have data on stderr
  * nsenter: support empty environ
  * umount, losetup: Document loop destroy behavior
    (bsc#1159034, drop
    util-linux-umount-losetup-lazy-destruction.patch,
    util-linux-umount-losetup-lazy-destruction-generated.patch).
  * uuidd: fix /var/lib/libuuid mode uuidd-tmpfiles.conf
    fix /var/lib/libuuid mode uuidd-tmpfiles.conf
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.3-ReleaseNotes
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.4-ReleaseNotes
  - Refresh util-linux.keyring. Key validity was extended.</changelog>
  <changelog author="sbrabec@suse.com" date="1743595200">- Use utmp as fallback for wall (bsc#1239671,
  util-linux-wall-use-utmp-fallback.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
</package>
<package pkgid="748a1856d99e7156a2be05897ebfab80f05873680258c2d01b4642856306ffcd" name="libblockdev" arch="src">
  <version epoch="0" ver="2.26" rel="150400.3.5.1"/>
  <changelog author="jengelh@inai.de" date="1516276800">- Remove excess Provides, BuildRequires and %ifs.
- Fix %description line mismatch for s390x parts.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1519214400">- Update to version 2.16:
  * Features:
  - LUKS 2 support for luks_open/close and
    luks_add/remove/change_key.
  - Progress report support for ext filesystem checks.
- Changes from version 2.15:
  * Features:
  - The file system plugin is now split into multiple source
    files making it easier to add support for more file systems
    and technologies.
  * Fixes:
  - How GPT patition flags are set;
  - Check the btrfs module availability as part of checking the
    btrfs plugin's dependencies;
  - Memory leaks in bd_fs_vfat_get_info();
  - The file system plugin's dependency checking mechanisms.
- Add libblockdev-fix-libkmod-include.patch as openSUSE doesn't use
  /usr/include/ but /usr/include/kmod to place libkmod.h.
- Conditionalize the use of Python 2's bindings and turn it off
  defaulting Python 3.
- Drop s390's plugin due to the lack of a file still not present
  in s390-tools package.
- Drop BuildRoot tag since RPM already handles this itself.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520251200">- Move all plugins into the shared library subpackage and their
  respective development files into the devel one.
- Add '-only' to LGPL License tag to comply with SPDX 3.0.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Resplit plugins to avoid pulling clusterlvm support by default
  into the dependency chain (bsc#1086447).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1525435200">- Update to version 2.17:
  + New plugin: nvdimm, support for NVDIMM namespaces management;
  + LUKS2 support for creating LUKS2 format including authenticated
    disk encryption. Multiple new functions for working with LUKS
    devices (suspend/resume, header backup, metadata size...);
  + Extended support for opening TrueCrypt/VeraCrypt volumes.
- Drop pkgconfig(nss) and libvolume_key-devel BuildRequires now
  that they are optional and pass without-escrow to configure:
  libvolume_key's code is ancient and nearly dead upstream.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1530187200">- Update to version 2.18:
  + New plugin: vdo, support for creating and managing VDO volumes.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1542628800">- Update to version 2.20:
  + Fixes:
  - Fix parsing extra arguments for LVM methods calls in the LVM
    DBus plugin;
  - Multiple fixes for running tests on Debian testing.
  + Development: Vagrantfile template was added for easy
    development machine setup.
- Changes from version 2.19:
  + Features:
  - vdo: new functions to get statistical data for existing VDO
    volumes (bd_vdo_get_stats);
  - crypto: support for passing extra arguments for key
    derivation function when creating LUKS2 format.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1547208000">- Add pkgconfig(dbus-1) BuildRequires: Add missing BuildRequires,
  libblockdev needs dbus headerfiles during build, but configure
  does not check for it.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add pkgconfig(yaml-0.1) BuildRequires and pass with-vdo instead
  of without-vdo to configure, build vdo support.
- Following the above, add new sub-packages libbd_vdo2 and
  libbd_vdo-devel, aswell as handle the new library in post(un).</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Explain VDO. Fix grammar mishaps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.22:
  + New minor release of the libblockdev library with multiple
    fixes.
  + nvdimm: New function for getting list of supported sector sizes
    for namespaces fixes.
  + Multiple memory leaks fixed.
- Changes from version 2.21:
  + crypto: Default key size for LUKS was changed to 512bit.
  + tools:
  - New simple cli tools that use libblockdev.
  - First tool is lvm-cache-stats for displaying stats for LVM
    cache devices.
  - Use configure option --without-tools to disable building
    these.
- Package new cli tool in main package, should possibly be moved
  into own sub-package in the future.</changelog>
  <changelog author="heming.zhao@suse.com" date="1568721600">- lvm2-clvm doesn't exist in lvm2-2.03, so change SPEC file
  libbd_lvm-dbus requires from lvm2-clvm to lvm2</changelog>
  <changelog author="thomas.blume@suse.com" date="1580817600">- fix files directive for s390 in specfile</changelog>
  <changelog author="dmueller@suse.com" date="1597924800">- udpate to 2.24:
  * VDO plugin has been deprecated in this release (functionality
    replaced by LVM VDO)
  * support for creating and managing LVM VDO volumes added
  * support for unlocking of BitLocker-compatible format BITLK
    added
  * new functions for (un)freezing filesystems added
  * test suite can now be run against installed version of
    libblockdev</changelog>
  <changelog author="dmueller@suse.com" date="1611144000">- update to 2.25:
  * exec: Fix polling for stdout and stderr
  * exec: Use non-blocking read and process the buffer manually
  * exec: Clarify the BDUtilsProgExtract callback documentation
  * tests: Add bufferbloat exec tests
  * tests: Add null-byte exec tests
  * lvm: Fix bd_lvm_vdopooldata_* symbols
  * exec: Fix setting locale for util calls
  * fs: Do not report error when errors were fixed by e2fsck
  * README: Use CI status image for 2.x-branch on 2.x
  * fs: Fix compile error in ext_repair caused by cherry pick from
    master
  * Mark all GIR file constants as guint64
  * lvm: Set thin metadata limits to match limits LVM uses in
    lvcreate
  * lvm: Do not use thin_metadata_size to recommend thin metadata
    size
  * lvm: Use the UNUSED macro instead of __attribute__((unused))
  * Fix max size limit for LVM thinpool metadata
  * loop: Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add -Wno-deprecated-declarations to cflags: dealing with
  deprecations is upstreams business and should not hinder
  downstream packages from building.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1636891200">- Update to version 2.26:
  + Fixes:
  - Deprecated glib function call;
  - Build with LLVM/clang;
  - Many memory leaks;
  - Many tests.
- Fix dbus.h being wrongly packaged in libbd_lvm-dbus-devl instead
  of libbd_utils-devel (boo#1189787).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1637236800">- Fix lack of dependency on libblockdev-lvm needed by libblockdev
  package. The lvm-cache-stats binary needs the logical volume
  plugin to work (boo#1183948).</changelog>
  <changelog author="fvogt@suse.com" date="1642507200">- Remove unnecessary dependency of libbd_part2 on multipath-tools
  (bsc#1194771)</changelog>
  <changelog author="thomas.blume@suse.com" date="1749729600">- suppress privilege escalation during xfs fs resize (CVE-2025-6019)
  (bsc#1243285)
  add 0001-dont-allow-suid-and-dev-set-on-fs-resize.patch</changelog>
</package>
<package pkgid="0ca838144618a91a96957362529c04ed32440d7acbb92703e9cc3842172c5e84" name="libblockdev" arch="x86_64">
  <version epoch="0" ver="2.26" rel="150400.3.5.1"/>
  <changelog author="jengelh@inai.de" date="1516276800">- Remove excess Provides, BuildRequires and %ifs.
- Fix %description line mismatch for s390x parts.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1519214400">- Update to version 2.16:
  * Features:
  - LUKS 2 support for luks_open/close and
    luks_add/remove/change_key.
  - Progress report support for ext filesystem checks.
- Changes from version 2.15:
  * Features:
  - The file system plugin is now split into multiple source
    files making it easier to add support for more file systems
    and technologies.
  * Fixes:
  - How GPT patition flags are set;
  - Check the btrfs module availability as part of checking the
    btrfs plugin's dependencies;
  - Memory leaks in bd_fs_vfat_get_info();
  - The file system plugin's dependency checking mechanisms.
- Add libblockdev-fix-libkmod-include.patch as openSUSE doesn't use
  /usr/include/ but /usr/include/kmod to place libkmod.h.
- Conditionalize the use of Python 2's bindings and turn it off
  defaulting Python 3.
- Drop s390's plugin due to the lack of a file still not present
  in s390-tools package.
- Drop BuildRoot tag since RPM already handles this itself.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520251200">- Move all plugins into the shared library subpackage and their
  respective development files into the devel one.
- Add '-only' to LGPL License tag to comply with SPDX 3.0.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Resplit plugins to avoid pulling clusterlvm support by default
  into the dependency chain (bsc#1086447).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1525435200">- Update to version 2.17:
  + New plugin: nvdimm, support for NVDIMM namespaces management;
  + LUKS2 support for creating LUKS2 format including authenticated
    disk encryption. Multiple new functions for working with LUKS
    devices (suspend/resume, header backup, metadata size...);
  + Extended support for opening TrueCrypt/VeraCrypt volumes.
- Drop pkgconfig(nss) and libvolume_key-devel BuildRequires now
  that they are optional and pass without-escrow to configure:
  libvolume_key's code is ancient and nearly dead upstream.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1530187200">- Update to version 2.18:
  + New plugin: vdo, support for creating and managing VDO volumes.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1542628800">- Update to version 2.20:
  + Fixes:
  - Fix parsing extra arguments for LVM methods calls in the LVM
    DBus plugin;
  - Multiple fixes for running tests on Debian testing.
  + Development: Vagrantfile template was added for easy
    development machine setup.
- Changes from version 2.19:
  + Features:
  - vdo: new functions to get statistical data for existing VDO
    volumes (bd_vdo_get_stats);
  - crypto: support for passing extra arguments for key
    derivation function when creating LUKS2 format.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1547208000">- Add pkgconfig(dbus-1) BuildRequires: Add missing BuildRequires,
  libblockdev needs dbus headerfiles during build, but configure
  does not check for it.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add pkgconfig(yaml-0.1) BuildRequires and pass with-vdo instead
  of without-vdo to configure, build vdo support.
- Following the above, add new sub-packages libbd_vdo2 and
  libbd_vdo-devel, aswell as handle the new library in post(un).</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Explain VDO. Fix grammar mishaps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.22:
  + New minor release of the libblockdev library with multiple
    fixes.
  + nvdimm: New function for getting list of supported sector sizes
    for namespaces fixes.
  + Multiple memory leaks fixed.
- Changes from version 2.21:
  + crypto: Default key size for LUKS was changed to 512bit.
  + tools:
  - New simple cli tools that use libblockdev.
  - First tool is lvm-cache-stats for displaying stats for LVM
    cache devices.
  - Use configure option --without-tools to disable building
    these.
- Package new cli tool in main package, should possibly be moved
  into own sub-package in the future.</changelog>
  <changelog author="heming.zhao@suse.com" date="1568721600">- lvm2-clvm doesn't exist in lvm2-2.03, so change SPEC file
  libbd_lvm-dbus requires from lvm2-clvm to lvm2</changelog>
  <changelog author="thomas.blume@suse.com" date="1580817600">- fix files directive for s390 in specfile</changelog>
  <changelog author="dmueller@suse.com" date="1597924800">- udpate to 2.24:
  * VDO plugin has been deprecated in this release (functionality
    replaced by LVM VDO)
  * support for creating and managing LVM VDO volumes added
  * support for unlocking of BitLocker-compatible format BITLK
    added
  * new functions for (un)freezing filesystems added
  * test suite can now be run against installed version of
    libblockdev</changelog>
  <changelog author="dmueller@suse.com" date="1611144000">- update to 2.25:
  * exec: Fix polling for stdout and stderr
  * exec: Use non-blocking read and process the buffer manually
  * exec: Clarify the BDUtilsProgExtract callback documentation
  * tests: Add bufferbloat exec tests
  * tests: Add null-byte exec tests
  * lvm: Fix bd_lvm_vdopooldata_* symbols
  * exec: Fix setting locale for util calls
  * fs: Do not report error when errors were fixed by e2fsck
  * README: Use CI status image for 2.x-branch on 2.x
  * fs: Fix compile error in ext_repair caused by cherry pick from
    master
  * Mark all GIR file constants as guint64
  * lvm: Set thin metadata limits to match limits LVM uses in
    lvcreate
  * lvm: Do not use thin_metadata_size to recommend thin metadata
    size
  * lvm: Use the UNUSED macro instead of __attribute__((unused))
  * Fix max size limit for LVM thinpool metadata
  * loop: Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add -Wno-deprecated-declarations to cflags: dealing with
  deprecations is upstreams business and should not hinder
  downstream packages from building.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1636891200">- Update to version 2.26:
  + Fixes:
  - Deprecated glib function call;
  - Build with LLVM/clang;
  - Many memory leaks;
  - Many tests.
- Fix dbus.h being wrongly packaged in libbd_lvm-dbus-devl instead
  of libbd_utils-devel (boo#1189787).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1637236800">- Fix lack of dependency on libblockdev-lvm needed by libblockdev
  package. The lvm-cache-stats binary needs the logical volume
  plugin to work (boo#1183948).</changelog>
  <changelog author="fvogt@suse.com" date="1642507200">- Remove unnecessary dependency of libbd_part2 on multipath-tools
  (bsc#1194771)</changelog>
  <changelog author="thomas.blume@suse.com" date="1749729600">- suppress privilege escalation during xfs fs resize (CVE-2025-6019)
  (bsc#1243285)
  add 0001-dont-allow-suid-and-dev-set-on-fs-resize.patch</changelog>
</package>
<package pkgid="b7d4bb4152bc72ddebb6a798f68f3d80be14f3da329fbf76b79bee55e65eb2b1" name="libblockdev2" arch="x86_64">
  <version epoch="0" ver="2.26" rel="150400.3.5.1"/>
  <changelog author="jengelh@inai.de" date="1516276800">- Remove excess Provides, BuildRequires and %ifs.
- Fix %description line mismatch for s390x parts.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1519214400">- Update to version 2.16:
  * Features:
  - LUKS 2 support for luks_open/close and
    luks_add/remove/change_key.
  - Progress report support for ext filesystem checks.
- Changes from version 2.15:
  * Features:
  - The file system plugin is now split into multiple source
    files making it easier to add support for more file systems
    and technologies.
  * Fixes:
  - How GPT patition flags are set;
  - Check the btrfs module availability as part of checking the
    btrfs plugin's dependencies;
  - Memory leaks in bd_fs_vfat_get_info();
  - The file system plugin's dependency checking mechanisms.
- Add libblockdev-fix-libkmod-include.patch as openSUSE doesn't use
  /usr/include/ but /usr/include/kmod to place libkmod.h.
- Conditionalize the use of Python 2's bindings and turn it off
  defaulting Python 3.
- Drop s390's plugin due to the lack of a file still not present
  in s390-tools package.
- Drop BuildRoot tag since RPM already handles this itself.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520251200">- Move all plugins into the shared library subpackage and their
  respective development files into the devel one.
- Add '-only' to LGPL License tag to comply with SPDX 3.0.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Resplit plugins to avoid pulling clusterlvm support by default
  into the dependency chain (bsc#1086447).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1525435200">- Update to version 2.17:
  + New plugin: nvdimm, support for NVDIMM namespaces management;
  + LUKS2 support for creating LUKS2 format including authenticated
    disk encryption. Multiple new functions for working with LUKS
    devices (suspend/resume, header backup, metadata size...);
  + Extended support for opening TrueCrypt/VeraCrypt volumes.
- Drop pkgconfig(nss) and libvolume_key-devel BuildRequires now
  that they are optional and pass without-escrow to configure:
  libvolume_key's code is ancient and nearly dead upstream.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1530187200">- Update to version 2.18:
  + New plugin: vdo, support for creating and managing VDO volumes.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1542628800">- Update to version 2.20:
  + Fixes:
  - Fix parsing extra arguments for LVM methods calls in the LVM
    DBus plugin;
  - Multiple fixes for running tests on Debian testing.
  + Development: Vagrantfile template was added for easy
    development machine setup.
- Changes from version 2.19:
  + Features:
  - vdo: new functions to get statistical data for existing VDO
    volumes (bd_vdo_get_stats);
  - crypto: support for passing extra arguments for key
    derivation function when creating LUKS2 format.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1547208000">- Add pkgconfig(dbus-1) BuildRequires: Add missing BuildRequires,
  libblockdev needs dbus headerfiles during build, but configure
  does not check for it.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add pkgconfig(yaml-0.1) BuildRequires and pass with-vdo instead
  of without-vdo to configure, build vdo support.
- Following the above, add new sub-packages libbd_vdo2 and
  libbd_vdo-devel, aswell as handle the new library in post(un).</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Explain VDO. Fix grammar mishaps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.22:
  + New minor release of the libblockdev library with multiple
    fixes.
  + nvdimm: New function for getting list of supported sector sizes
    for namespaces fixes.
  + Multiple memory leaks fixed.
- Changes from version 2.21:
  + crypto: Default key size for LUKS was changed to 512bit.
  + tools:
  - New simple cli tools that use libblockdev.
  - First tool is lvm-cache-stats for displaying stats for LVM
    cache devices.
  - Use configure option --without-tools to disable building
    these.
- Package new cli tool in main package, should possibly be moved
  into own sub-package in the future.</changelog>
  <changelog author="heming.zhao@suse.com" date="1568721600">- lvm2-clvm doesn't exist in lvm2-2.03, so change SPEC file
  libbd_lvm-dbus requires from lvm2-clvm to lvm2</changelog>
  <changelog author="thomas.blume@suse.com" date="1580817600">- fix files directive for s390 in specfile</changelog>
  <changelog author="dmueller@suse.com" date="1597924800">- udpate to 2.24:
  * VDO plugin has been deprecated in this release (functionality
    replaced by LVM VDO)
  * support for creating and managing LVM VDO volumes added
  * support for unlocking of BitLocker-compatible format BITLK
    added
  * new functions for (un)freezing filesystems added
  * test suite can now be run against installed version of
    libblockdev</changelog>
  <changelog author="dmueller@suse.com" date="1611144000">- update to 2.25:
  * exec: Fix polling for stdout and stderr
  * exec: Use non-blocking read and process the buffer manually
  * exec: Clarify the BDUtilsProgExtract callback documentation
  * tests: Add bufferbloat exec tests
  * tests: Add null-byte exec tests
  * lvm: Fix bd_lvm_vdopooldata_* symbols
  * exec: Fix setting locale for util calls
  * fs: Do not report error when errors were fixed by e2fsck
  * README: Use CI status image for 2.x-branch on 2.x
  * fs: Fix compile error in ext_repair caused by cherry pick from
    master
  * Mark all GIR file constants as guint64
  * lvm: Set thin metadata limits to match limits LVM uses in
    lvcreate
  * lvm: Do not use thin_metadata_size to recommend thin metadata
    size
  * lvm: Use the UNUSED macro instead of __attribute__((unused))
  * Fix max size limit for LVM thinpool metadata
  * loop: Retry LOOP_SET_STATUS64 on EAGAIN</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add -Wno-deprecated-declarations to cflags: dealing with
  deprecations is upstreams business and should not hinder
  downstream packages from building.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1636891200">- Update to version 2.26:
  + Fixes:
  - Deprecated glib function call;
  - Build with LLVM/clang;
  - Many memory leaks;
  - Many tests.
- Fix dbus.h being wrongly packaged in libbd_lvm-dbus-devl instead
  of libbd_utils-devel (boo#1189787).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1637236800">- Fix lack of dependency on libblockdev-lvm needed by libblockdev
  package. The lvm-cache-stats binary needs the logical volume
  plugin to work (boo#1183948).</changelog>
  <changelog author="fvogt@suse.com" date="1642507200">- Remove unnecessary dependency of libbd_part2 on multipath-tools
  (bsc#1194771)</changelog>
  <changelog author="thomas.blume@suse.com" date="1749729600">- suppress privilege escalation during xfs fs resize (CVE-2025-6019)
  (bsc#1243285)
  add 0001-dont-allow-suid-and-dev-set-on-fs-resize.patch</changelog>
</package>
<package pkgid="d09cd69b299267431793233d3d0baee1c1abbd37a6d6a16084149d45f56247b5" name="libboost_atomic1_66_0" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="57bdb09117eef2d7904bbf2bda392658d49db4df57be6979a897022fe796bfdf" name="libboost_atomic1_66_0-devel" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="67940788871051ec86ee8230ccd475f04ae1b4c694970f43f1becadbc4b0d7c8" name="libboost_chrono1_66_0" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="0c94787ff6ae22746db6f4cdf16a82b0d04cb8c3c7789fdf3c22b7acb32b9135" name="libboost_chrono1_66_0-devel" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="b84af2dc260103b39990a10f812681236a3dbf93c12a70243ee3b89b3daeb175" name="libboost_container1_66_0" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="2f1a3831d606cfeb518d15ffcbaf6480cb40ebe16dbb5e18259dac74fab00811" name="libboost_container1_66_0-devel" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="e4172042f9bcc3e4bf9ffdf9ca0a7200bf8cc456af670738b473599d308ee1fe" name="libboost_context1_66_0" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="4db01e16d066b6dc0ee98698cae768f591e9e39be24b5c18a823045f932b4b0d" name="libboost_context1_66_0-devel" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="65529a163f2b664f26ec4854a97abedf1ee4c58f90c67e93d1f71107d8882294" name="libboost_coroutine1_66_0" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="4bd4885d5067a33812dc28d4f0bfe54ae991bfdf459d51e51a5dc0cba052a37c" name="libboost_coroutine1_66_0-devel" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="e0d312ab316e3a59505b8296cbed92694d2c51eb7377926c754c037c7dd2c930" name="libboost_date_time1_66_0" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="59056c76085cfe15ed8c4d6ac5832a272b417563d397270e954258361307d0af" name="libboost_date_time1_66_0-devel" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="db2d0a9c89d51f7297ba6bf64614350a153fa536a3d337da6b1ec5413cd4a42e" name="libboost_fiber1_66_0" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="6c1ee8b631a0b940bb578d6b1d532c96983188e29e40a5711366d3b7718ea5d1" name="libboost_fiber1_66_0-devel" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="a2667d38258bf67995a89d15ba0346a80dfa826d39079457702b7b062dbd78b7" name="libboost_filesystem1_66_0" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="2c9a2079b2021296c731908051943fbf632731c0df07f4ab0bb5cbcceeda05fc" name="libboost_filesystem1_66_0-devel" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="9b32b1c950a7e902baaf0a97dda2e57b5646b1c687e1f6e3e10a917475c3ce67" name="libboost_graph1_66_0" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="57eae5789f71b62556f88385864e7ec6006e1e8c3088f218b12e8880a77f2d48" name="libboost_graph1_66_0-devel" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="eae347df936395c9622a948340aae30554e27905162ec14a6c117553b41cf662" name="libboost_headers1_66_0-devel" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="4c11cbb13fa5fd339795e654b3aa6c23b46cb218d24e75d72cf01d66761b42c4" name="libboost_iostreams1_66_0" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="97f6e9a2039f607fd34d218135695a66848b56cdb09eda5aec58359fe31feb37" name="libboost_iostreams1_66_0-devel" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="0c3128d981cd3fb367303acc30165cc46bcbfd23883a330010ae2611db09126f" name="libboost_locale1_66_0" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="6a59829eff1c62fb7631414ada54086d6e1fba4ec2ee390c200900cd1eeed16d" name="libboost_locale1_66_0-devel" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="b590a5918f857235deb45c9cfd47d4258d544522dfc94b20e6e043833f0a6e65" name="libboost_log1_66_0" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="fb5b3813bf89ffd2a0c8b36379ee0b72c929ed36d19fb0269316d863a5948c20" name="libboost_log1_66_0-devel" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="e3e502502fb5f6629078fce342ebdc3159aa53d7b5208fd20066caa510390cd5" name="libboost_math1_66_0" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="fb861ed27d03d107a0ee06d08f3f49f7633b456ef07815a903b75105bd4d6077" name="libboost_math1_66_0-devel" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="e4b8a125ffe134236f10fda05f199c4fcef6149a1907c2611b6a0101bca1031f" name="libboost_program_options1_66_0" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="c76aeaa9e84a3bca3af80cbe97b1a015cc35e25fa753a4fb8f27fca3be4b5ad5" name="libboost_program_options1_66_0-devel" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="5c564c96986dd1ec31edbdd0854690017d4a96514570b821e33521c86916bd77" name="libboost_python-py3-1_66_0" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="5f46266ed9048b9de9998353b3dfa7c401b87410e8159de9049992bf0bf21568" name="libboost_python-py3-1_66_0-devel" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="70365d919098134e51199daf55685ff7566ea013474eef1d6ee7edd6cbfc9668" name="libboost_random1_66_0" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="272d1f93b167611cc8a080541e081288bbb924ca971ef93b96a3ce4b0c9f62c4" name="libboost_random1_66_0-devel" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="d5fba7dbb149b39c067c568e8014b5d658cf1e0732bff1afa2ac11b84fb58849" name="libboost_regex1_66_0" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="4fcbaf0d0e3379b1552a07b56fb3f45ba0ba05c2f79efe9cb353b5634254b7bb" name="libboost_regex1_66_0-devel" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="7095a4fe9ada9d5bd74b6d08ef16ec57f935639a3467a5c4e9eb9cd21b4b6122" name="libboost_serialization1_66_0" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="d183da81cc252358a268974012ffc3bbcfb42fa42d26ed8cd2a53db73669f43b" name="libboost_serialization1_66_0-devel" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="f4d2905a47cfdcc5179afeaef4a32c98b63d0ae24d51f93a8c98d5aaba2cdf5f" name="libboost_signals1_66_0" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="fd7a9f1f5133ebfae6ed87467da820755eb93254b1e06b01981602ac97cd6e95" name="libboost_signals1_66_0-devel" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="5c624b03ae5fcb7f2ae27d76981aa8be782aa57871f946a616214ac17d620e7e" name="libboost_stacktrace1_66_0" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="7ccc58012015d9f33eefeab5c0be4868dfac08be86f3bb066b38258d72e2cf6e" name="libboost_stacktrace1_66_0-devel" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="baa9aec3024749c82c930fdb9d360270e32759001c18b12d5a5da8c51e65bbbf" name="libboost_system1_66_0" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="fc79f5960cd1a69100c5a98bc927914b1120c15c86de0ac033ec2b10b5c5dca0" name="libboost_system1_66_0-devel" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="f66de268c62b741909c1e97b09d3fecf9bed7975949478941a7e26fea88d5398" name="libboost_test1_66_0" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="c3059780d6aa280526f3652484f1bafa673574ce6a22d245ed947bf685e9f1a9" name="libboost_test1_66_0-devel" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="33dc423fd85a3f67be429872ae50f1899a64f4363813ed93ed5411e2966de535" name="libboost_thread1_66_0" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="b060e4a8f1937147a8ade177fdd3e0fd2b9f2e5b5778c721a2459b0e7a863b8e" name="libboost_thread1_66_0-devel" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="f7cc716239fd0d86772a9b8ee5d64463ac5bb8327dcc1dcd3c98297b81f1f32c" name="libboost_timer1_66_0" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="29c4ed9afd698f6125fa9d8beeb2a9eee1eaa16b7ad3b0663456ceab5f80e49c" name="libboost_timer1_66_0-devel" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="30570eb9aa2f77469d0316f816202299bece8840826392fb62318c29a2d6c7bd" name="libboost_type_erasure1_66_0" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="f705f20b080cfd452b27f0eb6e4d43c3bcdf1f9750d55d65e8b26dbbe3976ced" name="libboost_type_erasure1_66_0-devel" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="00960112c183a0cae898259dd39c980984fb62b9da15e72b6e6f74e118f4f234" name="libboost_wave1_66_0" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="4c404631cd51b8d990ef268f3984f51fc5798d9aea7d46e60a705e7cd6b7428f" name="libboost_wave1_66_0-devel" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150200.12.7.1"/>
  <changelog author="adam.majer@suse.de" date="1483531200">- update to version 1.63.0
  * updated libraries: atomic, container, context, fiber,
    fusion, geometry, hash, interprocess, intrusive, lexical cast,
    log, metaparse, move, optional, phoenix, python, test,
    typeindex, units, unordered
  * see http://www.boost.org/users/history/version_1_63_0.html
    for complete list of changes
- refresh patches
  * boost-1.55.0-python-test-PyImport_AppendInittab.patch
  * boost-strict_aliasing.patch, and enable -fno-strict-aliasing
    for python module
- baselibs.conf:
  * add libboost_locale
  * rename python to include new soname
- remove python-2059618.patch, not needed
- make build condition --without buil_mpi work
- allow building without python3 bindings, for SLE11SP4
- remove versioned build dependency on libicu-devel, apparently
  not needed.
- split out the boost-devel package into individudal compiled
  libraries and their -devel subpackages and libboost_headers-devel
  package for header-only libraries.
- remove all the -mt.so symlinks, probably not needed anymore.
- ship MPI python bindings for both Python 2.7 and 3.x
  * add python_mpi.patch to allow proper compiled library loading
- dynamic_linking.patch: first attempt to remove static library
  generation during build process.</changelog>
  <changelog author="adam.majer@suse.de" date="1484481600">- remove non-existent dependency in the boost mpi python package</changelog>
  <changelog author="adam.majer@suse.de" date="1484654400">- test_lowcase.patch: downcase Boost::Test usage of uppercase
  variables. VERSION was clashing with GNU Autotools define
  resulting in compilation errors of various packages.
- recombine headers from various devel subpackages under the
  libboost_headers-devel package. Not all usage of headers that
  have compiled parts pull in their associated compiled symbols.
- general cleanup of the spec file from old, commented stuffs</changelog>
  <changelog author="adam.majer@suse.de" date="1485345600">- Fix dependency typos.</changelog>
  <changelog author="adam.majer@suse.de" date="1486123200">- baselibs.conf: (re)add python 2.7 and 3.x libraries</changelog>
  <changelog author="jmatejek@suse.com" date="1486728000">- update python macros</changelog>
  <changelog author="adam.majer@suse.de" date="1492689600">- New upstream version 1.64.0
  + process - new library providing cross platform methods to
  - create child processes
  - setup stream for child processes
  - sync and async communication streams with children
  - sync and async wait
  - process termination
  + geometry library had some breaking changes,
  - ublas_transformer is renamed to matrix_transformer
  - explicit modifier is added to constructors of rtree
    index::dynamic_* parameters
  - strategy::area::huiller replaced by strategy::area::spherical
  + context library updates
  - deprecated API:execution-context
  - fixed bad assembly for fcontext on ppc64/sysv/elf
  + Updated libraries: any, atomic, config, container, context,
    conversion, core, coroutine2, fiber, hash, interprocess,
    intrusive, lexicalcast, math, multi-index containers,
    multiprecision, predef, program options, regex, smart pointers,
    test ,typeindex, typetraits, unordered, variant
  + for details, see
    http://www.boost.org/users/history/version_1_64_0.html
- Build PyNumpy module
  + add build requires on python-numpy
- test_lowcase.patch: upstreamed
- refreshed patches: boost-strict_aliasing.patch, gcc_path.patch,
  python_mpi.patch
- mpi_upstream.patch: pending upstream fixes to OpenMPI build
- python_library_name.patch: we are building python versions in
  different stagings so drop library renames.
- python_numpy_retfunc.patch: rpmlint fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1494244800">- make python-numpy optional build dependency
- fix building of mpi python3 plugin</changelog>
  <changelog author="adam.majer@suse.de" date="1494331200">- 1d862615.patch: Fix regression caused by refactoring of
  serialization code (bnc#1038083)</changelog>
  <changelog author="adam.majer@suse.de" date="1505908800">- New upstream version 1.65.1
  + config, fiber - Return a continuation from functions executed
    by resume_with.
  + stacktrace - Change preprocessor file extensions to work with
    the installation system.
- Changes in version 1.65.0
  + stacktrace - new library providing call sequence in human
    readable format.
  + polycollection - new library providing fast containers of
    polymorphic objects, from Joaquín M López Muñoz.
  + For full list of changes, see
    http://www.boost.org/users/history/version_1_65_1.html
- 1d862615.patch: upstreamed and removed
- gcc_path.patch: obsolete, tr1 module is removed
- mpi_upstream.patch: upstreamed and removed
- boost-1.57.0-python-abi_letters.patch: refreshed
- python_library_name.patch: refreshed and reverted upstream
  changes to mpi/build/Jamfile as we are building python2 and
  python3 versions of MPI separately.
- baselibs.conf
  + add libboost_stracktrace
  + update to version 1.65.1</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507550400">- Setup MPI environment prior to building boost.
- Switch to OpenMPI2 as OpenMPI1 is becoming deprecated.</changelog>
  <changelog author="adam.majer@suse.de" date="1507636800">- Use multibuild setup - build no-dependency libraries in the
  base package and build the rest of the compiled libraries in
  the main variant. This should speed up bootstrapping.
- boost-devel not built by default anymore.
- libboost_headers-devel now provides boost-devel for legacy
  dependencies. If you need compiled boost libraries depend on
  the current compiled devel subpackage.
- run %fdupes only on the header files and documentation
- drop build dependencies on gcc-fortran, chrpath.</changelog>
  <changelog author="jmatejek@suse.com" date="1508846400">- build Python 2 conditionally</changelog>
  <changelog author="adam.majer@suse.de" date="1511956800">- re-enable Python 2 by default. It's still conditional, but
  remains enabled by default. This can be disabled in project
  config.</changelog>
  <changelog author="adam.majer@suse.de" date="1513598400">- Update to version 1.66.0
  + Beast: new portable HTTP, WebSocket and network operations
    using Boost.Asio. Header-only library.
  + Callable Traits: new library and successor to
    Boost.FunctionTypes. Header-only library.
  + Mp11: new metaprogramming library
  + Asio:
  * implemented interface changes to reflect the Networking TS
    (N4656)
  * functions and classes that have been superseded by
    Networking TS functionality have been deprecated.
  * added support for customized handler tracking
  * removed previously deprecated functions
  + Atomic: improved compatibility with GCC 7. 128-bit operations
    on x86_64 no longer require linking with compiled library.
  + DateTime: Fixed an integral overflow that could cause incorrect
    results when adding or subtracting many years from a date.
  + Format: New format specifiers added and volatile arguments
    can not be safely used with operator%
  + Fusion:
  * fix compile error with std::array
  * remove circular preprocessor include
  + PolyCollection: backported to GCC 4.8 and 4.9 with some
    limitations
  + Uuid: added RTF-4122 namespaces in boost::uuids::ns
  + for complete changelog, see
    http://www.boost.org/users/history/version_1_66_0.html
- refreshed patches: boost-rpmoptflags-only.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1516363200">- Multibuild requires versioned Name: tag and doesn't seem to do
  this automatically. (bnc#1076640)</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="adam.majer@suse.de" date="1584619200">- libreoffice_compat_backports.patch: add a backport of
  Boost.Optional::has_value() for LibreOffice</changelog>
  <changelog author="adam.majer@suse.de" date="1641816000">- variant.patch: backport fix allowing perfect forwarding in
  apply_visitor. Also fix wrong usage of boost::move (bsc#1194522)</changelog>
  <changelog author="aschnell@suse.com" date="1751889600">- CVE-2016-9840: fixed out-of-bounds pointer arithmetic in zlib in beast
  (bsc#1245936)
  - adds patch boost-zlib.patch</changelog>
</package>
<package pkgid="6de4dbe2e91ed0ffe8a4456e02d413a35c3b9fbebb2b2b69c4d7e4c8b01f58cc" name="libbrlapi0_8" arch="x86_64">
  <version epoch="0" ver="6.6" rel="150600.3.3.1"/>
  <changelog author="mgorse@suse.com" date="1602676800">- Add coreutils and util-linux to post requires (boo#1177656).</changelog>
  <changelog author="mgorse@suse.com" date="1609502400">- Update to version 6.2:
  + See ChangeLog for changes.
- Update api_version: now 0.8.1.
- Replace brltty-5.5-systemd-install.patch with
  brltty-fix-install-dirs.patch: also adjust udev directory.
- Drop brltty-gcc10.patch: fixed upstream.
- Move udev rules patching to %build.
- Use the Makefile to install udev and polkit rules and docs.
- Brltty-config has been renamed to brltty-config.sh.
- Remove polkit conditional: we always have it enabled.
- Remove old espeak support: Leap prior to 15.0 is no longer
  supported.
- Add python3-setuptools to BuildRequires: required by rpm during
  checks.
- Add doxygen to BuildRequires: needed to build manual.
- Create a brltty user on install: now expected by service.</changelog>
  <changelog author="dimstar@opensuse.org" date="1610884800">- Starting with the TCL 8.6.11 package, the default install path
  for the TCL library is corrected to /usr/lib64/tcl: adjust the
  move command for our tcl module basedon this change.</changelog>
  <changelog author="mgorse@suse.com" date="1612267200">- Update to version 6.3:
  + See ChangeLog for changes.
- API version is now 0.8.2.
- Drop brltty-fix-install-dirs.patch: no longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1632571200">- Update to version 6.4:
  + See ChangeLog for changes.
- API version is now 0.8.3.
- Add at-spi2 to BuildRequires. Now needed for at-spi driver.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1633089600">- Use sysuser-tools to process included sysusers.d file correctly
  (bsc#1191465)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1633176000">- Move sysusers.d to separate package
- Remove old SUSE RPM constructs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1637668800">- Add all sysusers.d Requires</changelog>
  <changelog author="ohering@suse.de" date="1639483200">- Add python-rpm-macros (bsc#1180125)</changelog>
  <changelog author="dimstar@opensuse.org" date="1644494400">- Pass --with-tables-directory=%{_datadir}/%{name} to configure: do
  not install the tables to /etc, as they are not supposed to be
  modified by local admins.</changelog>
  <changelog author="mgorse@suse.com" date="1655121600">- Update to version 6.5
- Update api_version.
- Add brltty-udev-dir.patch: install udev rules into /usr/lib.
- Remove the custom disabling of rules for generic USB serial
  devices, since upstream now has these separated out. Instead,
  provide these rules in a udev-generic package.</changelog>
  <changelog author="olaf@aepfle.de" date="1671278400">- Use tmpfiles_create_package
- Use sysuser-tools unconditionally (bsc#1205161)</changelog>
  <changelog author="fbui@suse.com" date="1687262400">- Don't use %tmpfiles_create_package anymore.
  This macro cannot work on transactional systems. However this macro was
  supposed to be used only when the tmpfiles stuff was needed in advance, which
  doesn't seem to be the case for brltty.</changelog>
  <changelog author="olaf@aepfle.de" date="1687262401">- Use conditionals for sysusers_requires to allow quilt setup
- Remove workarounds for old TCL
- Enable parallel build again</changelog>
  <changelog author="mgorse@suse.com" date="1690459200">- Update to version 6.6:
  + Too many changes; please read ChangeLog
- Update api_version.
- Rebase brltty-udev-dir.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692187200">- Add e6707d5e.patch: brlapi: Fix python crash on connection error.
  Cython 3.0 started using the new Python object finalization APIs
  from PEP 442.</changelog>
  <changelog author="olaf@aepfle.de" date="1701345600">- Disable parallel build again</changelog>
  <changelog author="ohering@suse.de" date="1702382400">- Use ocaml-rpm-macros to track OCaml ABI
- Reduce amount of rpmlint warnings with brltty.rpmlintrc</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1702468800">- README.SUSE: add documentation about the state of security of the brltty
  daemon (bsc#1214158).</changelog>
  <changelog author="mgorse@suse.com" date="1746532800">- Set umask to generate brlapi.key with correct permissions; avoid
  having the file temporarily world-readable (bsc#1235438).</changelog>
</package>
<package pkgid="90de24a5c06ba843c6f00bc3f382eb753e5527136c8ceecf5fdaf1eaa1e235f8" name="libbrlapi0_8" arch="x86_64">
  <version epoch="0" ver="6.6" rel="150600.3.5.1"/>
  <changelog author="mgorse@suse.com" date="1602676800">- Add coreutils and util-linux to post requires (boo#1177656).</changelog>
  <changelog author="mgorse@suse.com" date="1609502400">- Update to version 6.2:
  + See ChangeLog for changes.
- Update api_version: now 0.8.1.
- Replace brltty-5.5-systemd-install.patch with
  brltty-fix-install-dirs.patch: also adjust udev directory.
- Drop brltty-gcc10.patch: fixed upstream.
- Move udev rules patching to %build.
- Use the Makefile to install udev and polkit rules and docs.
- Brltty-config has been renamed to brltty-config.sh.
- Remove polkit conditional: we always have it enabled.
- Remove old espeak support: Leap prior to 15.0 is no longer
  supported.
- Add python3-setuptools to BuildRequires: required by rpm during
  checks.
- Add doxygen to BuildRequires: needed to build manual.
- Create a brltty user on install: now expected by service.</changelog>
  <changelog author="dimstar@opensuse.org" date="1610884800">- Starting with the TCL 8.6.11 package, the default install path
  for the TCL library is corrected to /usr/lib64/tcl: adjust the
  move command for our tcl module basedon this change.</changelog>
  <changelog author="mgorse@suse.com" date="1612267200">- Update to version 6.3:
  + See ChangeLog for changes.
- API version is now 0.8.2.
- Drop brltty-fix-install-dirs.patch: no longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1632571200">- Update to version 6.4:
  + See ChangeLog for changes.
- API version is now 0.8.3.
- Add at-spi2 to BuildRequires. Now needed for at-spi driver.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1633089600">- Use sysuser-tools to process included sysusers.d file correctly
  (bsc#1191465)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1633176000">- Move sysusers.d to separate package
- Remove old SUSE RPM constructs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1637668800">- Add all sysusers.d Requires</changelog>
  <changelog author="ohering@suse.de" date="1639483200">- Add python-rpm-macros (bsc#1180125)</changelog>
  <changelog author="dimstar@opensuse.org" date="1644494400">- Pass --with-tables-directory=%{_datadir}/%{name} to configure: do
  not install the tables to /etc, as they are not supposed to be
  modified by local admins.</changelog>
  <changelog author="mgorse@suse.com" date="1655121600">- Update to version 6.5
- Update api_version.
- Add brltty-udev-dir.patch: install udev rules into /usr/lib.
- Remove the custom disabling of rules for generic USB serial
  devices, since upstream now has these separated out. Instead,
  provide these rules in a udev-generic package.</changelog>
  <changelog author="olaf@aepfle.de" date="1671278400">- Use tmpfiles_create_package
- Use sysuser-tools unconditionally (bsc#1205161)</changelog>
  <changelog author="fbui@suse.com" date="1687262400">- Don't use %tmpfiles_create_package anymore.
  This macro cannot work on transactional systems. However this macro was
  supposed to be used only when the tmpfiles stuff was needed in advance, which
  doesn't seem to be the case for brltty.</changelog>
  <changelog author="olaf@aepfle.de" date="1687262401">- Use conditionals for sysusers_requires to allow quilt setup
- Remove workarounds for old TCL
- Enable parallel build again</changelog>
  <changelog author="mgorse@suse.com" date="1690459200">- Update to version 6.6:
  + Too many changes; please read ChangeLog
- Update api_version.
- Rebase brltty-udev-dir.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692187200">- Add e6707d5e.patch: brlapi: Fix python crash on connection error.
  Cython 3.0 started using the new Python object finalization APIs
  from PEP 442.</changelog>
  <changelog author="olaf@aepfle.de" date="1701345600">- Disable parallel build again</changelog>
  <changelog author="ohering@suse.de" date="1702382400">- Use ocaml-rpm-macros to track OCaml ABI
- Reduce amount of rpmlint warnings with brltty.rpmlintrc</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1702468800">- README.SUSE: add documentation about the state of security of the brltty
  daemon (bsc#1214158).</changelog>
  <changelog author="mgorse@suse.com" date="1746532800">- Set umask to generate brlapi.key with correct permissions; avoid
  having the file temporarily world-readable (bsc#1235438).</changelog>
</package>
<package pkgid="3c9fe0930c919237e577f8482a286b2f70ed63d1daf6baefd1fa302abc31ad66" name="libbrotli-devel" arch="x86_64">
  <version epoch="0" ver="1.0.7" rel="150200.3.5.1"/>
  <changelog author="buschmann23@opensuse.org" date="1490356800">- initial package</changelog>
  <changelog author="buschmann23@opensuse.org" date="1498219200">- update to Brotli 0.6.0
  + better compression on 1MiB+ files
  + update "common" API to make dictionary fetching more flexible
  + fix decoder bug #502
  + faster compression on mid-low quality levels
  + fix encoder q10-11 slowdown after long copy #468
  + introduce Brotli*TakeOutput API
- now build shared libraries and development files in the following
  new packages:
  + libbrotlicommon0_6_0
  + libbrotlicommon-devel
  + libbrotlidec0_6_0
  + libbrotlidec-devel
  + libbrotlienc0_6_0
  + libbrtolienc-devel</changelog>
  <changelog author="buschmann23@opensuse.org" date="1505908800">- spec file changes
  + improve package description</changelog>
  <changelog author="buschmann23@opensuse.org" date="1508846400">- update to Brotli 1.0.1
  + updated README.md
  + fixed parallel exeuction of CMake "compatibility" tests
- update to Brotli 1.0.0
  + new CLI; bro -&gt; brotli; + man page
  + remove "custom dictionary" support
  + add ability to side-load brotli RFC dictionary
  + add decoder API to avoid ringbuffer reallocation
  + PY streaming decompression support
  + PY wrapper accepts memview
- spec file changes
  + improve descriptions
  + add man pages</changelog>
  <changelog author="buschmann23@opensuse.org" date="1512043200">- update to Brotli 1.0.2
  + Major chnages
  * added Autotools build files
  * switched shared library version to libtool scheme
  + Minor changes
  * BrotliDictionary members are not const now
  * ZopfliNode distance could be up to 128MiB
  * fixed API documentation typos
  * total_out is always set by decoder
  * fixed BROTLI_ENSURE_CAPACITY macro; no-op in preprocessed output
  + Other changes
  * fixed scripts for oss-fuzz, test them with Travis
  * made Bazel JNI tests less messy
  * fixed linter warnings in JS decoder
  * fixed permissions of various files
  * added Bazel build to Appveyor matrix
  * added Sieve dictionary generator</changelog>
  <changelog author="pgajdos@suse.com" date="1513771200">- build for SLE_12 and SLE_12_SP1</changelog>
  <changelog author="jengelh@inai.de" date="1514635200">- Avoid shipping duplicate files.
  Avoid shipping README.md, this just contains the description -
  and build instructions.
- Drop duplicate Requires on -devel.</changelog>
  <changelog author="jengelh@inai.de" date="1514980800">- Merge devel subpackages as libbrotli-devel</changelog>
  <changelog author="jengelh@inai.de" date="1520251200">- Update to new upstream release 1.0.3
  * New "Large Window Brotli" feature
  * New dictionary generator</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525262400">- Add missing libbrotlicommon%%{sover} and libbrotlidec%%{sover}
  Requires to devel subpackage.</changelog>
  <changelog author="mpluskal@suse.com" date="1530187200">- Update to version 1.0.5:
  * improve q=1 compression on small files
  * inverse Bazel workspace tree
  * add rolling-composite-hasher for large-window mode
  * add tools to download and transform static dictionary data
- Changes for version 1.0.4:
  * fix unaligned access for aarch64-cross-armhf build
  * fix aarch64 target detection
  * allow CLI to compress with enabled "large window" feature
  * add NPOSTFIX / NDIRECT encoder parameters
  * automatic NDIRECT/NPOSTFIX tuning (better compression)
  * fix "memory leak" in python tests
  * fix bug in durchschlag
  * fix source file lists (add params.h)
  * fix Bazel/MSVC compilator options
  * fix "fall though" warnings</changelog>
  <changelog author="mpluskal@suse.com" date="1532433600">- Use cmake macros for building and tests</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532520000">- Add baselibs.conf, build 32bit library support.</changelog>
  <changelog author="astieger@suse.com" date="1544788800">- brotli 1.0.7:
  * faster decoding on ARM
  * improved precision of window size calculation in CLI
- includes changes from 1.0.6:
  * fix unaligned 64-bit accesses on AArch32
  * add ASAN/MSAN unaligned read specializations
  * fix JDK 8&lt;-&gt;9 incompatibility</changelog>
  <changelog author="jengelh@inai.de" date="1544788801">- Avoid bashisms, install manpages without +x bit, get rid of
  wrap descriptions, feed through cleaner.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1547380800">- Add brotli_Verbose-CLI+Shared-Brotli.patch: Verbose CLI + start
  pulling "Shared-Brotli".
  * verbose CLI output; fix gh#google/brotlie#666.
  * pull `SHIFT` transforms; currently this is semantically dead
    code; later it will be used by "Shared-Brotli".
- Add brotli_Ensure-decompression-consumes-all-input.patch: Ensure
  decompression consumes all input. If not, it's a corrupt stream.
- Tweak spec slightly.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637928000">- Fix CVE-2020-8927, decoder: integer overflow when input chunk
  is larger than 2GiB. (CVE-2020-8927, bsc#1175825)
  * fix-cve-2020-8927.patch</changelog>
</package>
<package pkgid="86e364227a8e901d146ce5d3476c4d5885f3498a5441e655b52bd08c8894a47a" name="libbrotlicommon1" arch="x86_64">
  <version epoch="0" ver="1.0.7" rel="150200.3.5.1"/>
  <changelog author="buschmann23@opensuse.org" date="1490356800">- initial package</changelog>
  <changelog author="buschmann23@opensuse.org" date="1498219200">- update to Brotli 0.6.0
  + better compression on 1MiB+ files
  + update "common" API to make dictionary fetching more flexible
  + fix decoder bug #502
  + faster compression on mid-low quality levels
  + fix encoder q10-11 slowdown after long copy #468
  + introduce Brotli*TakeOutput API
- now build shared libraries and development files in the following
  new packages:
  + libbrotlicommon0_6_0
  + libbrotlicommon-devel
  + libbrotlidec0_6_0
  + libbrotlidec-devel
  + libbrotlienc0_6_0
  + libbrtolienc-devel</changelog>
  <changelog author="buschmann23@opensuse.org" date="1505908800">- spec file changes
  + improve package description</changelog>
  <changelog author="buschmann23@opensuse.org" date="1508846400">- update to Brotli 1.0.1
  + updated README.md
  + fixed parallel exeuction of CMake "compatibility" tests
- update to Brotli 1.0.0
  + new CLI; bro -&gt; brotli; + man page
  + remove "custom dictionary" support
  + add ability to side-load brotli RFC dictionary
  + add decoder API to avoid ringbuffer reallocation
  + PY streaming decompression support
  + PY wrapper accepts memview
- spec file changes
  + improve descriptions
  + add man pages</changelog>
  <changelog author="buschmann23@opensuse.org" date="1512043200">- update to Brotli 1.0.2
  + Major chnages
  * added Autotools build files
  * switched shared library version to libtool scheme
  + Minor changes
  * BrotliDictionary members are not const now
  * ZopfliNode distance could be up to 128MiB
  * fixed API documentation typos
  * total_out is always set by decoder
  * fixed BROTLI_ENSURE_CAPACITY macro; no-op in preprocessed output
  + Other changes
  * fixed scripts for oss-fuzz, test them with Travis
  * made Bazel JNI tests less messy
  * fixed linter warnings in JS decoder
  * fixed permissions of various files
  * added Bazel build to Appveyor matrix
  * added Sieve dictionary generator</changelog>
  <changelog author="pgajdos@suse.com" date="1513771200">- build for SLE_12 and SLE_12_SP1</changelog>
  <changelog author="jengelh@inai.de" date="1514635200">- Avoid shipping duplicate files.
  Avoid shipping README.md, this just contains the description -
  and build instructions.
- Drop duplicate Requires on -devel.</changelog>
  <changelog author="jengelh@inai.de" date="1514980800">- Merge devel subpackages as libbrotli-devel</changelog>
  <changelog author="jengelh@inai.de" date="1520251200">- Update to new upstream release 1.0.3
  * New "Large Window Brotli" feature
  * New dictionary generator</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525262400">- Add missing libbrotlicommon%%{sover} and libbrotlidec%%{sover}
  Requires to devel subpackage.</changelog>
  <changelog author="mpluskal@suse.com" date="1530187200">- Update to version 1.0.5:
  * improve q=1 compression on small files
  * inverse Bazel workspace tree
  * add rolling-composite-hasher for large-window mode
  * add tools to download and transform static dictionary data
- Changes for version 1.0.4:
  * fix unaligned access for aarch64-cross-armhf build
  * fix aarch64 target detection
  * allow CLI to compress with enabled "large window" feature
  * add NPOSTFIX / NDIRECT encoder parameters
  * automatic NDIRECT/NPOSTFIX tuning (better compression)
  * fix "memory leak" in python tests
  * fix bug in durchschlag
  * fix source file lists (add params.h)
  * fix Bazel/MSVC compilator options
  * fix "fall though" warnings</changelog>
  <changelog author="mpluskal@suse.com" date="1532433600">- Use cmake macros for building and tests</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532520000">- Add baselibs.conf, build 32bit library support.</changelog>
  <changelog author="astieger@suse.com" date="1544788800">- brotli 1.0.7:
  * faster decoding on ARM
  * improved precision of window size calculation in CLI
- includes changes from 1.0.6:
  * fix unaligned 64-bit accesses on AArch32
  * add ASAN/MSAN unaligned read specializations
  * fix JDK 8&lt;-&gt;9 incompatibility</changelog>
  <changelog author="jengelh@inai.de" date="1544788801">- Avoid bashisms, install manpages without +x bit, get rid of
  wrap descriptions, feed through cleaner.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1547380800">- Add brotli_Verbose-CLI+Shared-Brotli.patch: Verbose CLI + start
  pulling "Shared-Brotli".
  * verbose CLI output; fix gh#google/brotlie#666.
  * pull `SHIFT` transforms; currently this is semantically dead
    code; later it will be used by "Shared-Brotli".
- Add brotli_Ensure-decompression-consumes-all-input.patch: Ensure
  decompression consumes all input. If not, it's a corrupt stream.
- Tweak spec slightly.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637928000">- Fix CVE-2020-8927, decoder: integer overflow when input chunk
  is larger than 2GiB. (CVE-2020-8927, bsc#1175825)
  * fix-cve-2020-8927.patch</changelog>
</package>
<package pkgid="58e2ce0203e953634ca3a9b64e36bc7a0a1da6eb0bcb0a62a95f2d7fae3349ad" name="libbrotlicommon1-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.7" rel="150200.3.5.1"/>
  <changelog author="buschmann23@opensuse.org" date="1490356800">- initial package</changelog>
  <changelog author="buschmann23@opensuse.org" date="1498219200">- update to Brotli 0.6.0
  + better compression on 1MiB+ files
  + update "common" API to make dictionary fetching more flexible
  + fix decoder bug #502
  + faster compression on mid-low quality levels
  + fix encoder q10-11 slowdown after long copy #468
  + introduce Brotli*TakeOutput API
- now build shared libraries and development files in the following
  new packages:
  + libbrotlicommon0_6_0
  + libbrotlicommon-devel
  + libbrotlidec0_6_0
  + libbrotlidec-devel
  + libbrotlienc0_6_0
  + libbrtolienc-devel</changelog>
  <changelog author="buschmann23@opensuse.org" date="1505908800">- spec file changes
  + improve package description</changelog>
  <changelog author="buschmann23@opensuse.org" date="1508846400">- update to Brotli 1.0.1
  + updated README.md
  + fixed parallel exeuction of CMake "compatibility" tests
- update to Brotli 1.0.0
  + new CLI; bro -&gt; brotli; + man page
  + remove "custom dictionary" support
  + add ability to side-load brotli RFC dictionary
  + add decoder API to avoid ringbuffer reallocation
  + PY streaming decompression support
  + PY wrapper accepts memview
- spec file changes
  + improve descriptions
  + add man pages</changelog>
  <changelog author="buschmann23@opensuse.org" date="1512043200">- update to Brotli 1.0.2
  + Major chnages
  * added Autotools build files
  * switched shared library version to libtool scheme
  + Minor changes
  * BrotliDictionary members are not const now
  * ZopfliNode distance could be up to 128MiB
  * fixed API documentation typos
  * total_out is always set by decoder
  * fixed BROTLI_ENSURE_CAPACITY macro; no-op in preprocessed output
  + Other changes
  * fixed scripts for oss-fuzz, test them with Travis
  * made Bazel JNI tests less messy
  * fixed linter warnings in JS decoder
  * fixed permissions of various files
  * added Bazel build to Appveyor matrix
  * added Sieve dictionary generator</changelog>
  <changelog author="pgajdos@suse.com" date="1513771200">- build for SLE_12 and SLE_12_SP1</changelog>
  <changelog author="jengelh@inai.de" date="1514635200">- Avoid shipping duplicate files.
  Avoid shipping README.md, this just contains the description -
  and build instructions.
- Drop duplicate Requires on -devel.</changelog>
  <changelog author="jengelh@inai.de" date="1514980800">- Merge devel subpackages as libbrotli-devel</changelog>
  <changelog author="jengelh@inai.de" date="1520251200">- Update to new upstream release 1.0.3
  * New "Large Window Brotli" feature
  * New dictionary generator</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525262400">- Add missing libbrotlicommon%%{sover} and libbrotlidec%%{sover}
  Requires to devel subpackage.</changelog>
  <changelog author="mpluskal@suse.com" date="1530187200">- Update to version 1.0.5:
  * improve q=1 compression on small files
  * inverse Bazel workspace tree
  * add rolling-composite-hasher for large-window mode
  * add tools to download and transform static dictionary data
- Changes for version 1.0.4:
  * fix unaligned access for aarch64-cross-armhf build
  * fix aarch64 target detection
  * allow CLI to compress with enabled "large window" feature
  * add NPOSTFIX / NDIRECT encoder parameters
  * automatic NDIRECT/NPOSTFIX tuning (better compression)
  * fix "memory leak" in python tests
  * fix bug in durchschlag
  * fix source file lists (add params.h)
  * fix Bazel/MSVC compilator options
  * fix "fall though" warnings</changelog>
  <changelog author="mpluskal@suse.com" date="1532433600">- Use cmake macros for building and tests</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532520000">- Add baselibs.conf, build 32bit library support.</changelog>
  <changelog author="astieger@suse.com" date="1544788800">- brotli 1.0.7:
  * faster decoding on ARM
  * improved precision of window size calculation in CLI
- includes changes from 1.0.6:
  * fix unaligned 64-bit accesses on AArch32
  * add ASAN/MSAN unaligned read specializations
  * fix JDK 8&lt;-&gt;9 incompatibility</changelog>
  <changelog author="jengelh@inai.de" date="1544788801">- Avoid bashisms, install manpages without +x bit, get rid of
  wrap descriptions, feed through cleaner.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1547380800">- Add brotli_Verbose-CLI+Shared-Brotli.patch: Verbose CLI + start
  pulling "Shared-Brotli".
  * verbose CLI output; fix gh#google/brotlie#666.
  * pull `SHIFT` transforms; currently this is semantically dead
    code; later it will be used by "Shared-Brotli".
- Add brotli_Ensure-decompression-consumes-all-input.patch: Ensure
  decompression consumes all input. If not, it's a corrupt stream.
- Tweak spec slightly.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637928000">- Fix CVE-2020-8927, decoder: integer overflow when input chunk
  is larger than 2GiB. (CVE-2020-8927, bsc#1175825)
  * fix-cve-2020-8927.patch</changelog>
</package>
<package pkgid="5a3c5f3c05bb21333970e160990b010a158c592feb4dc31a155752f32df8ec65" name="libbrotlidec1" arch="x86_64">
  <version epoch="0" ver="1.0.7" rel="150200.3.5.1"/>
  <changelog author="buschmann23@opensuse.org" date="1490356800">- initial package</changelog>
  <changelog author="buschmann23@opensuse.org" date="1498219200">- update to Brotli 0.6.0
  + better compression on 1MiB+ files
  + update "common" API to make dictionary fetching more flexible
  + fix decoder bug #502
  + faster compression on mid-low quality levels
  + fix encoder q10-11 slowdown after long copy #468
  + introduce Brotli*TakeOutput API
- now build shared libraries and development files in the following
  new packages:
  + libbrotlicommon0_6_0
  + libbrotlicommon-devel
  + libbrotlidec0_6_0
  + libbrotlidec-devel
  + libbrotlienc0_6_0
  + libbrtolienc-devel</changelog>
  <changelog author="buschmann23@opensuse.org" date="1505908800">- spec file changes
  + improve package description</changelog>
  <changelog author="buschmann23@opensuse.org" date="1508846400">- update to Brotli 1.0.1
  + updated README.md
  + fixed parallel exeuction of CMake "compatibility" tests
- update to Brotli 1.0.0
  + new CLI; bro -&gt; brotli; + man page
  + remove "custom dictionary" support
  + add ability to side-load brotli RFC dictionary
  + add decoder API to avoid ringbuffer reallocation
  + PY streaming decompression support
  + PY wrapper accepts memview
- spec file changes
  + improve descriptions
  + add man pages</changelog>
  <changelog author="buschmann23@opensuse.org" date="1512043200">- update to Brotli 1.0.2
  + Major chnages
  * added Autotools build files
  * switched shared library version to libtool scheme
  + Minor changes
  * BrotliDictionary members are not const now
  * ZopfliNode distance could be up to 128MiB
  * fixed API documentation typos
  * total_out is always set by decoder
  * fixed BROTLI_ENSURE_CAPACITY macro; no-op in preprocessed output
  + Other changes
  * fixed scripts for oss-fuzz, test them with Travis
  * made Bazel JNI tests less messy
  * fixed linter warnings in JS decoder
  * fixed permissions of various files
  * added Bazel build to Appveyor matrix
  * added Sieve dictionary generator</changelog>
  <changelog author="pgajdos@suse.com" date="1513771200">- build for SLE_12 and SLE_12_SP1</changelog>
  <changelog author="jengelh@inai.de" date="1514635200">- Avoid shipping duplicate files.
  Avoid shipping README.md, this just contains the description -
  and build instructions.
- Drop duplicate Requires on -devel.</changelog>
  <changelog author="jengelh@inai.de" date="1514980800">- Merge devel subpackages as libbrotli-devel</changelog>
  <changelog author="jengelh@inai.de" date="1520251200">- Update to new upstream release 1.0.3
  * New "Large Window Brotli" feature
  * New dictionary generator</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525262400">- Add missing libbrotlicommon%%{sover} and libbrotlidec%%{sover}
  Requires to devel subpackage.</changelog>
  <changelog author="mpluskal@suse.com" date="1530187200">- Update to version 1.0.5:
  * improve q=1 compression on small files
  * inverse Bazel workspace tree
  * add rolling-composite-hasher for large-window mode
  * add tools to download and transform static dictionary data
- Changes for version 1.0.4:
  * fix unaligned access for aarch64-cross-armhf build
  * fix aarch64 target detection
  * allow CLI to compress with enabled "large window" feature
  * add NPOSTFIX / NDIRECT encoder parameters
  * automatic NDIRECT/NPOSTFIX tuning (better compression)
  * fix "memory leak" in python tests
  * fix bug in durchschlag
  * fix source file lists (add params.h)
  * fix Bazel/MSVC compilator options
  * fix "fall though" warnings</changelog>
  <changelog author="mpluskal@suse.com" date="1532433600">- Use cmake macros for building and tests</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532520000">- Add baselibs.conf, build 32bit library support.</changelog>
  <changelog author="astieger@suse.com" date="1544788800">- brotli 1.0.7:
  * faster decoding on ARM
  * improved precision of window size calculation in CLI
- includes changes from 1.0.6:
  * fix unaligned 64-bit accesses on AArch32
  * add ASAN/MSAN unaligned read specializations
  * fix JDK 8&lt;-&gt;9 incompatibility</changelog>
  <changelog author="jengelh@inai.de" date="1544788801">- Avoid bashisms, install manpages without +x bit, get rid of
  wrap descriptions, feed through cleaner.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1547380800">- Add brotli_Verbose-CLI+Shared-Brotli.patch: Verbose CLI + start
  pulling "Shared-Brotli".
  * verbose CLI output; fix gh#google/brotlie#666.
  * pull `SHIFT` transforms; currently this is semantically dead
    code; later it will be used by "Shared-Brotli".
- Add brotli_Ensure-decompression-consumes-all-input.patch: Ensure
  decompression consumes all input. If not, it's a corrupt stream.
- Tweak spec slightly.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637928000">- Fix CVE-2020-8927, decoder: integer overflow when input chunk
  is larger than 2GiB. (CVE-2020-8927, bsc#1175825)
  * fix-cve-2020-8927.patch</changelog>
</package>
<package pkgid="edda0b532992b41498bb821527450348bf2cd2b27301ebbb80a4ec8b60b46561" name="libbrotlidec1-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.7" rel="150200.3.5.1"/>
  <changelog author="buschmann23@opensuse.org" date="1490356800">- initial package</changelog>
  <changelog author="buschmann23@opensuse.org" date="1498219200">- update to Brotli 0.6.0
  + better compression on 1MiB+ files
  + update "common" API to make dictionary fetching more flexible
  + fix decoder bug #502
  + faster compression on mid-low quality levels
  + fix encoder q10-11 slowdown after long copy #468
  + introduce Brotli*TakeOutput API
- now build shared libraries and development files in the following
  new packages:
  + libbrotlicommon0_6_0
  + libbrotlicommon-devel
  + libbrotlidec0_6_0
  + libbrotlidec-devel
  + libbrotlienc0_6_0
  + libbrtolienc-devel</changelog>
  <changelog author="buschmann23@opensuse.org" date="1505908800">- spec file changes
  + improve package description</changelog>
  <changelog author="buschmann23@opensuse.org" date="1508846400">- update to Brotli 1.0.1
  + updated README.md
  + fixed parallel exeuction of CMake "compatibility" tests
- update to Brotli 1.0.0
  + new CLI; bro -&gt; brotli; + man page
  + remove "custom dictionary" support
  + add ability to side-load brotli RFC dictionary
  + add decoder API to avoid ringbuffer reallocation
  + PY streaming decompression support
  + PY wrapper accepts memview
- spec file changes
  + improve descriptions
  + add man pages</changelog>
  <changelog author="buschmann23@opensuse.org" date="1512043200">- update to Brotli 1.0.2
  + Major chnages
  * added Autotools build files
  * switched shared library version to libtool scheme
  + Minor changes
  * BrotliDictionary members are not const now
  * ZopfliNode distance could be up to 128MiB
  * fixed API documentation typos
  * total_out is always set by decoder
  * fixed BROTLI_ENSURE_CAPACITY macro; no-op in preprocessed output
  + Other changes
  * fixed scripts for oss-fuzz, test them with Travis
  * made Bazel JNI tests less messy
  * fixed linter warnings in JS decoder
  * fixed permissions of various files
  * added Bazel build to Appveyor matrix
  * added Sieve dictionary generator</changelog>
  <changelog author="pgajdos@suse.com" date="1513771200">- build for SLE_12 and SLE_12_SP1</changelog>
  <changelog author="jengelh@inai.de" date="1514635200">- Avoid shipping duplicate files.
  Avoid shipping README.md, this just contains the description -
  and build instructions.
- Drop duplicate Requires on -devel.</changelog>
  <changelog author="jengelh@inai.de" date="1514980800">- Merge devel subpackages as libbrotli-devel</changelog>
  <changelog author="jengelh@inai.de" date="1520251200">- Update to new upstream release 1.0.3
  * New "Large Window Brotli" feature
  * New dictionary generator</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525262400">- Add missing libbrotlicommon%%{sover} and libbrotlidec%%{sover}
  Requires to devel subpackage.</changelog>
  <changelog author="mpluskal@suse.com" date="1530187200">- Update to version 1.0.5:
  * improve q=1 compression on small files
  * inverse Bazel workspace tree
  * add rolling-composite-hasher for large-window mode
  * add tools to download and transform static dictionary data
- Changes for version 1.0.4:
  * fix unaligned access for aarch64-cross-armhf build
  * fix aarch64 target detection
  * allow CLI to compress with enabled "large window" feature
  * add NPOSTFIX / NDIRECT encoder parameters
  * automatic NDIRECT/NPOSTFIX tuning (better compression)
  * fix "memory leak" in python tests
  * fix bug in durchschlag
  * fix source file lists (add params.h)
  * fix Bazel/MSVC compilator options
  * fix "fall though" warnings</changelog>
  <changelog author="mpluskal@suse.com" date="1532433600">- Use cmake macros for building and tests</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532520000">- Add baselibs.conf, build 32bit library support.</changelog>
  <changelog author="astieger@suse.com" date="1544788800">- brotli 1.0.7:
  * faster decoding on ARM
  * improved precision of window size calculation in CLI
- includes changes from 1.0.6:
  * fix unaligned 64-bit accesses on AArch32
  * add ASAN/MSAN unaligned read specializations
  * fix JDK 8&lt;-&gt;9 incompatibility</changelog>
  <changelog author="jengelh@inai.de" date="1544788801">- Avoid bashisms, install manpages without +x bit, get rid of
  wrap descriptions, feed through cleaner.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1547380800">- Add brotli_Verbose-CLI+Shared-Brotli.patch: Verbose CLI + start
  pulling "Shared-Brotli".
  * verbose CLI output; fix gh#google/brotlie#666.
  * pull `SHIFT` transforms; currently this is semantically dead
    code; later it will be used by "Shared-Brotli".
- Add brotli_Ensure-decompression-consumes-all-input.patch: Ensure
  decompression consumes all input. If not, it's a corrupt stream.
- Tweak spec slightly.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637928000">- Fix CVE-2020-8927, decoder: integer overflow when input chunk
  is larger than 2GiB. (CVE-2020-8927, bsc#1175825)
  * fix-cve-2020-8927.patch</changelog>
</package>
<package pkgid="98e2ba69e4dd6e59c1e1ef8522aaca50c79d345a6b54a66477c6032ad4036382" name="libbrotlienc1" arch="x86_64">
  <version epoch="0" ver="1.0.7" rel="150200.3.5.1"/>
  <changelog author="buschmann23@opensuse.org" date="1490356800">- initial package</changelog>
  <changelog author="buschmann23@opensuse.org" date="1498219200">- update to Brotli 0.6.0
  + better compression on 1MiB+ files
  + update "common" API to make dictionary fetching more flexible
  + fix decoder bug #502
  + faster compression on mid-low quality levels
  + fix encoder q10-11 slowdown after long copy #468
  + introduce Brotli*TakeOutput API
- now build shared libraries and development files in the following
  new packages:
  + libbrotlicommon0_6_0
  + libbrotlicommon-devel
  + libbrotlidec0_6_0
  + libbrotlidec-devel
  + libbrotlienc0_6_0
  + libbrtolienc-devel</changelog>
  <changelog author="buschmann23@opensuse.org" date="1505908800">- spec file changes
  + improve package description</changelog>
  <changelog author="buschmann23@opensuse.org" date="1508846400">- update to Brotli 1.0.1
  + updated README.md
  + fixed parallel exeuction of CMake "compatibility" tests
- update to Brotli 1.0.0
  + new CLI; bro -&gt; brotli; + man page
  + remove "custom dictionary" support
  + add ability to side-load brotli RFC dictionary
  + add decoder API to avoid ringbuffer reallocation
  + PY streaming decompression support
  + PY wrapper accepts memview
- spec file changes
  + improve descriptions
  + add man pages</changelog>
  <changelog author="buschmann23@opensuse.org" date="1512043200">- update to Brotli 1.0.2
  + Major chnages
  * added Autotools build files
  * switched shared library version to libtool scheme
  + Minor changes
  * BrotliDictionary members are not const now
  * ZopfliNode distance could be up to 128MiB
  * fixed API documentation typos
  * total_out is always set by decoder
  * fixed BROTLI_ENSURE_CAPACITY macro; no-op in preprocessed output
  + Other changes
  * fixed scripts for oss-fuzz, test them with Travis
  * made Bazel JNI tests less messy
  * fixed linter warnings in JS decoder
  * fixed permissions of various files
  * added Bazel build to Appveyor matrix
  * added Sieve dictionary generator</changelog>
  <changelog author="pgajdos@suse.com" date="1513771200">- build for SLE_12 and SLE_12_SP1</changelog>
  <changelog author="jengelh@inai.de" date="1514635200">- Avoid shipping duplicate files.
  Avoid shipping README.md, this just contains the description -
  and build instructions.
- Drop duplicate Requires on -devel.</changelog>
  <changelog author="jengelh@inai.de" date="1514980800">- Merge devel subpackages as libbrotli-devel</changelog>
  <changelog author="jengelh@inai.de" date="1520251200">- Update to new upstream release 1.0.3
  * New "Large Window Brotli" feature
  * New dictionary generator</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525262400">- Add missing libbrotlicommon%%{sover} and libbrotlidec%%{sover}
  Requires to devel subpackage.</changelog>
  <changelog author="mpluskal@suse.com" date="1530187200">- Update to version 1.0.5:
  * improve q=1 compression on small files
  * inverse Bazel workspace tree
  * add rolling-composite-hasher for large-window mode
  * add tools to download and transform static dictionary data
- Changes for version 1.0.4:
  * fix unaligned access for aarch64-cross-armhf build
  * fix aarch64 target detection
  * allow CLI to compress with enabled "large window" feature
  * add NPOSTFIX / NDIRECT encoder parameters
  * automatic NDIRECT/NPOSTFIX tuning (better compression)
  * fix "memory leak" in python tests
  * fix bug in durchschlag
  * fix source file lists (add params.h)
  * fix Bazel/MSVC compilator options
  * fix "fall though" warnings</changelog>
  <changelog author="mpluskal@suse.com" date="1532433600">- Use cmake macros for building and tests</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532520000">- Add baselibs.conf, build 32bit library support.</changelog>
  <changelog author="astieger@suse.com" date="1544788800">- brotli 1.0.7:
  * faster decoding on ARM
  * improved precision of window size calculation in CLI
- includes changes from 1.0.6:
  * fix unaligned 64-bit accesses on AArch32
  * add ASAN/MSAN unaligned read specializations
  * fix JDK 8&lt;-&gt;9 incompatibility</changelog>
  <changelog author="jengelh@inai.de" date="1544788801">- Avoid bashisms, install manpages without +x bit, get rid of
  wrap descriptions, feed through cleaner.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1547380800">- Add brotli_Verbose-CLI+Shared-Brotli.patch: Verbose CLI + start
  pulling "Shared-Brotli".
  * verbose CLI output; fix gh#google/brotlie#666.
  * pull `SHIFT` transforms; currently this is semantically dead
    code; later it will be used by "Shared-Brotli".
- Add brotli_Ensure-decompression-consumes-all-input.patch: Ensure
  decompression consumes all input. If not, it's a corrupt stream.
- Tweak spec slightly.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637928000">- Fix CVE-2020-8927, decoder: integer overflow when input chunk
  is larger than 2GiB. (CVE-2020-8927, bsc#1175825)
  * fix-cve-2020-8927.patch</changelog>
</package>
<package pkgid="ac92fc0296e631a4ebbb2b7b168f7a3cbc3f51551d19d625ad8004927467a9be" name="libc++-devel" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="150700.3.3.1"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="martin.liska@hey.com" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="msuchanek@suse.de" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="schwab@suse.de" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="ro@suse.de" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="37cd8d5fee4e31c0aa6f996799dd4c15f4d7f6cfb628c4dde6a69998ed244afc" name="libc++-devel" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="150700.3.6.1"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="martin.liska@hey.com" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="msuchanek@suse.de" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="schwab@suse.de" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="ro@suse.de" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="bd7e915ba8db758d8fc80f2aac0c41f136ba9cc776bf983b46105aa87d2783fb" name="libc++1" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="150700.3.3.1"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="martin.liska@hey.com" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="msuchanek@suse.de" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="schwab@suse.de" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="ro@suse.de" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="b950a9fd5928933003765242a647392b3cd78bf5ad3225733a92a5f9cda56289" name="libc++1" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="150700.3.6.1"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="martin.liska@hey.com" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="msuchanek@suse.de" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="schwab@suse.de" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="ro@suse.de" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="e26a6c6c21cc75103bf1cffcccf7065ff4c36459ba4995d96d54ae015427a5ea" name="libc++abi-devel" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="150700.3.3.1"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="martin.liska@hey.com" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="msuchanek@suse.de" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="schwab@suse.de" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="ro@suse.de" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="cb5f9fd20255235e6f137621460e3752a22ee3c5d856e05d5a63d638f7f38365" name="libc++abi-devel" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="150700.3.6.1"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="martin.liska@hey.com" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="msuchanek@suse.de" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="schwab@suse.de" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="ro@suse.de" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="29f525e1fb1b82d15af6f3271edc8a30e3b60e0384e0de8a7f6dad8432d9f824" name="libc++abi1" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="150700.3.3.1"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="martin.liska@hey.com" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="msuchanek@suse.de" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="schwab@suse.de" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="ro@suse.de" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="ac49fdfc540f255bcc70df28e1a470dad27e6afaf8eba0187588d5aa8a1f1c9e" name="libc++abi1" arch="x86_64">
  <version epoch="0" ver="19.1.7" rel="150700.3.6.1"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="martin.liska@hey.com" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="msuchanek@suse.de" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="schwab@suse.de" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="ro@suse.de" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="8c236780ac0c203abed37d10198967ffa8d7725982353643064136553cc9adf0" name="libcairo-gobject2" arch="x86_64">
  <version epoch="0" ver="1.18.4" rel="150600.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523534400">- Update to version 1.15.12:
  + The main focus for this release is the addition of Variable
    Font support. Variable fonts are single font files with various
    typography characteristics, such as weight or slant, that users
    of the font can adjust between two points. Effectively this
    enables a single font to behave as multiple fonts.
  + The Skia backend is disabled in this release, due to severe
    bitrot, and will be removed in future releases. Contact the
    cairo team if you have a need of this backend.
  + Features and Enhancements:
  - Variable font support.
  - Skia backend is disabled.
  + API Changes: cairo_font_options_get_variations() and
    cairo_font_options_set_variations() are added.
  + Bugs fixed:
  - Fix errors in csi-trace --help and --version options.
  - Fix a 'memory leak' in the image compositor, with
    pixman_glyph_cache_t.
  - Fix access of uninitialized memory found by valgrind
    (fdo#91271).
  - Fix improper initialization of memory in
    _cairo_ft_font_face_create_for_pattern() (fdo#105084).
  - Fix multi-monitor virtual desktop with negative coords on
    Win32 (fdo#100793).
  - Fix issues occuring with older FreeType versions.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524571200">- Add cairo-fix-assertion-failure-in-freetype-backend.patch: Fix
  assertion failure in the freetype backend (fdo#105746).</changelog>
  <changelog author="qzheng@suse.com" date="1529496000">- Add cairo-CVE-2017-9814.patch: Replace malloc with _cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538740800">- Update to version 1.15.14:
  + Features and Enhancements:
  - Add more FreeeType font color conversions to support
    COLR/CPAL.
  - Update test reference images against current pixman.
  + Bugs fixed:
  - Fix crash when rendering Microsoft's Segoe UI Emoji Regular
    font.
  - Fix build breakage with glesv3 enabled due to non-existant
    glesv3.pc.
  - Fix memory leaks found by Coverity.
  - Fix incorrect null ptr handling found by Coverity.
  - Fix test compilation when font-config is disabled.
  - Use _cairo_malloc instead of malloc
    (fdo#101547, CVE-2017-9814).
  - Fix assertion failure in the freetype backend (fdo#105746).
- Drop upstream fixed patches:
  + cairo-fix-assertion-failure-in-freetype-backend.patch.
  + cairo-CVE-2017-9814.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540123200">- Update to version 1.16.0:
  + test: Free resources in pdf2png.
  + Drop skia backend.
  + Revert "Correctly decode Adobe CMYK JPEGs in PDF export".</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567598400">- Add 2 upstream bug fix patches:
  + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch:
    ft: Use FT_Done_MM_Var instead of free when available in
    cairo_ft_apply_variations. Fixes a crash when using freetype
    &gt;= 2.9
  + cairo-composite_color_glyphs.patch: Fix a thinko in
    composite_color_glyphs. We can't just move around the contents
    of the passed-in string, we need to make a copy. This was
    showing up as memory corruption in pango.</changelog>
  <changelog author="mwilck@suse.com" date="1582459200">- Add an upstream bug fix
  + cairo-pdf-add-missing-flush.patch: Fixes PDF generation
    see https://gitlab.freedesktop.org/cairo/cairo/issues/342</changelog>
  <changelog author="rpm@fthiessen.de" date="1634904000">- Add upstream patch
  + cairo-do-not-override-explicitly-requested-grayscale-aa.patch
    Do not replace explicitly set applications settings by user
    settings for font antialiasing.
    See: https://gitlab.freedesktop.org/cairo/cairo/-/merge_requests/114</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661947200">- Update to version 1.17.6:
  + This snapshot sees the removal of the following backends and
    platform support: Qt4, BeOS, OS/2, DirectFB, DRM, Cogl, OpenVG.
  + Thanks to all past contributors for their work on them. If you
    were using any of these backends then you will need to stick to
    Cairo 1.16.
  + This snapshot is going to be the **last** release of Cairo with
    the Autotools build system. The Meson build has seen many
    improvements and it is considerably easier to maintain and
    faster to build.
- Changes from version 1.17.4:
  + A particularly noteworthy improvement in this release is the
    addition of the meson build system as an alternative to
    autotools.
  + The cogl Cairo backend underwent significant development this
    cycle.
  + Subpixel positioning support allows improved glyph outlines
    with the Freetype font backend.
  + For a complete log of changes, please see
    https://cairographics.org/releases/ChangeLog.1.17.4
- Changes from version 1.17.2:
  + This snapshot provides the new support for writing floating
    point formats as 16 bpc PNGs, with support for RGBA128F and
    RGB96F formats. This new feature increases Cairo's pixman
    version requirement to 0.36.0.
  + Beyond this are a range of bugfixes.
    For a complete log of changes, please see
    https://cairographics.org/releases/ChangeLog.1.17.2
- Drop patches fixed upstream:
  + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch
  + cairo-composite_color_glyphs.patch
  + cairo-pdf-add-missing-flush.patch
  + cairo-do-not-override-explicitly-requested-grayscale-aa.patch
- Rebase remaining patches with quilt.
- Add 0001-Set-default-LCD-filter-to-FreeType-s-default.patch: Set
  default LCD filter to FreeType's default (patch merged upstream).
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 1.17.8:
  + In a continuing effort to reduce the amount of legacy code, and
    increase the long-term maintainability of cairo, the following
    backends have been removed:
  - GL and GLES drawing
  + Additionally, cairo's Autotools build system has been removed;
    from now on, cairo will only support the Meson build system.
    While the end result should be identical, further testing is
    appreciated.
  + In this snapshot, cairo gained support for rendering COLRv1
    fonts, and rendering SVG and COLRv1 fonts with custom palettes.
  + Support for macOS and Windows has been improved, with lots of
    build and bug fixes.
  + Lots of safety issues have been fixed, with array bounds
    checking and plugging memory leaks, as well as fixes for bugs
    identified via fuzzying.
  + This is going to be the last snapshot of the 1.17 development
    cycle; we only expect minor bug fixing and improvements until
    the 1.18.0 release.
- Switch to meson buildsystem: Add meson BuildRequires and macros.
- Update Source Url to new home.
- Drop build_gl_backend define and conditional pkgconfig(egl) and
  pkgconfig(gl) BuildRequires: No longer supported.
- Add generic c++_compiler and c_compiler BuildRequires: New
  dependencies.
- Drop 0001-Set-default-LCD-filter-to-FreeType-s-default.patch:
  Fixed upstream.
- Add upstream bug fix patches:
  + cairo-1.17.8-fix-tee-compilation.patch
  + cairo-1.17.8-ft-font-missing-glyph.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695470400">- Update to version 1.18.0:
  + The first stable cairo release in five years should be cause
    for celebration.
  + All the API added in the 1.17 development cycle is now
    considered stable, and will not change.
  + Many thanks to all the contributors for this release.
  + The cairo-sphinx tool has been removed; we could not find any
    instruction on how to use it, and no user answered our call for
    help. If you were using cairo-sphinx, please reach out to the
    cairo maintainers.
  + Cairo now implements Type 3 color fonts for PDF.
  + Multiple documentation fixes, to ensure that the cairo API
    reference is up to date. Also fixed multiple compiler warnings
    generated when building cairo.
  + The XML surface has been removed; it was disabled by default
    when building cairo, and we could not find any downstream
    distributor that would enable it.
  + The Tee surface is now automatically enabled. Downstream
    distributors of cairo have been enabling for years it in order
    to build Firefox.
  + Fixed multiple issues with the DWrite font backend.
  + Improved the Quartz surface; mainly, Quartz surfaces now use
    the main display ColorSpace, speeding up rendering operations.
  + Cairo now hides all private symbols by default on every
    platform; the old "slim" symbols hack to alias internally used
    symbols has been dropped, in favor of using
    `-Bsymbolic-functions` with toolchains that support it.
  + Fixed multiple memory leaks in the code base and test suite,
    and general maintenance.
  + Added new API to expose the Pixman dithering filter to cairo
    patterns; this is currently implemented only for image
    surfaces.
- Drop patches fixed upstream:
  + cairo-1.17.8-fix-tee-compilation.patch
  + cairo-1.17.8-ft-font-missing-glyph.patch
- Rebase patches with quilt.
- Stop passing xml=disabled to meson setup, xml backend is dropped.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1725278400">- Update to version 1.18.2:
  + The malloc-stats code has been removed from the tests directory
    the canonical location for it is:
    https://github.com/behdad/malloc-stats
  + Cairo now requires a version of pixman equal to, or newer than,
    0.40.
  + There have been multiple build fixes for newer versions of GCC
    for MSVC; for Solaris; and on macOS 10.7.
  + PNG errors caused by loading malformed data are correctly
    propagated to callers, so they can handle the case.
  + Both stroke and fill colors are now set when showing glyphs on
    a PDF surface.
  + All the font options are copied when creating a fallback font
    object.
  + When drawing text on macOS, Cairo now tries harder to select
    the appropriate font name.
  + Cairo now prefers the COLRv1 table inside a font, if one is
    available.
  + Cairo requires a C11 toolchain when building.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1726833600">- Add b9eed915f9a67380e7ef9d8746656455c43f67e2.patch: cff: Don't
  fail if no local subs. Fix regression when writing PDFs with
  fonts.</changelog>
  <changelog author="dimstar@opensuse.org" date="1732795200">- Convert to source service: allows for easier upgrades by the
  GNOME team.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1742212800">- Update to version 1.18.4:
  + The dependency on LZO has been made optional through a build
    time configuration toggle.
  + You can build Cairo against a Freetype installation that does
    not have the FT_Color type.
  + Cairo tests now build on Solaris 11.4 with GCC 14.
  + The DirectWrite backend now builds on MINGW 11.
  + The DirectWrite backend now supports font variations and proper
    glyph coverage.
  + Support for Windows 98 has been removed. The minimum
    requirement for Windows is now Vista.
- Use tarball in lieu of source service due to freedesktop gitlab
  migration, will switch back at next release at the latest.
- Drop b9eed915f9a67380e7ef9d8746656455c43f67e2.patch: Fixed
  upstream.
- Add pkgconfig(lzo2) BuildRequires: New optional dependency, build
  lzo2 support feature.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1742385600">- Switch back to using source service.</changelog>
  <changelog author="qzhao@suse.com" date="1754913600">- Add b5752618.patch:
  Backport from William Bader's request 621, Fix NULL access
  in active_edges_to_traps().
  https://gitlab.freedesktop.org/cairo/cairo/-/merge_requests/621/diffs
  https://gitlab.freedesktop.org/williamb/cairo/-/commit/b5752618
  (CVE-2025-50422, bsc#1247589)</changelog>
</package>
<package pkgid="32f77db614e61320996bcc0dc5d864399c22afb82d8cae13e9d10fed13c6d76a" name="libcairo-script-interpreter2" arch="x86_64">
  <version epoch="0" ver="1.18.4" rel="150600.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523534400">- Update to version 1.15.12:
  + The main focus for this release is the addition of Variable
    Font support. Variable fonts are single font files with various
    typography characteristics, such as weight or slant, that users
    of the font can adjust between two points. Effectively this
    enables a single font to behave as multiple fonts.
  + The Skia backend is disabled in this release, due to severe
    bitrot, and will be removed in future releases. Contact the
    cairo team if you have a need of this backend.
  + Features and Enhancements:
  - Variable font support.
  - Skia backend is disabled.
  + API Changes: cairo_font_options_get_variations() and
    cairo_font_options_set_variations() are added.
  + Bugs fixed:
  - Fix errors in csi-trace --help and --version options.
  - Fix a 'memory leak' in the image compositor, with
    pixman_glyph_cache_t.
  - Fix access of uninitialized memory found by valgrind
    (fdo#91271).
  - Fix improper initialization of memory in
    _cairo_ft_font_face_create_for_pattern() (fdo#105084).
  - Fix multi-monitor virtual desktop with negative coords on
    Win32 (fdo#100793).
  - Fix issues occuring with older FreeType versions.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524571200">- Add cairo-fix-assertion-failure-in-freetype-backend.patch: Fix
  assertion failure in the freetype backend (fdo#105746).</changelog>
  <changelog author="qzheng@suse.com" date="1529496000">- Add cairo-CVE-2017-9814.patch: Replace malloc with _cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538740800">- Update to version 1.15.14:
  + Features and Enhancements:
  - Add more FreeeType font color conversions to support
    COLR/CPAL.
  - Update test reference images against current pixman.
  + Bugs fixed:
  - Fix crash when rendering Microsoft's Segoe UI Emoji Regular
    font.
  - Fix build breakage with glesv3 enabled due to non-existant
    glesv3.pc.
  - Fix memory leaks found by Coverity.
  - Fix incorrect null ptr handling found by Coverity.
  - Fix test compilation when font-config is disabled.
  - Use _cairo_malloc instead of malloc
    (fdo#101547, CVE-2017-9814).
  - Fix assertion failure in the freetype backend (fdo#105746).
- Drop upstream fixed patches:
  + cairo-fix-assertion-failure-in-freetype-backend.patch.
  + cairo-CVE-2017-9814.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540123200">- Update to version 1.16.0:
  + test: Free resources in pdf2png.
  + Drop skia backend.
  + Revert "Correctly decode Adobe CMYK JPEGs in PDF export".</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567598400">- Add 2 upstream bug fix patches:
  + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch:
    ft: Use FT_Done_MM_Var instead of free when available in
    cairo_ft_apply_variations. Fixes a crash when using freetype
    &gt;= 2.9
  + cairo-composite_color_glyphs.patch: Fix a thinko in
    composite_color_glyphs. We can't just move around the contents
    of the passed-in string, we need to make a copy. This was
    showing up as memory corruption in pango.</changelog>
  <changelog author="mwilck@suse.com" date="1582459200">- Add an upstream bug fix
  + cairo-pdf-add-missing-flush.patch: Fixes PDF generation
    see https://gitlab.freedesktop.org/cairo/cairo/issues/342</changelog>
  <changelog author="rpm@fthiessen.de" date="1634904000">- Add upstream patch
  + cairo-do-not-override-explicitly-requested-grayscale-aa.patch
    Do not replace explicitly set applications settings by user
    settings for font antialiasing.
    See: https://gitlab.freedesktop.org/cairo/cairo/-/merge_requests/114</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661947200">- Update to version 1.17.6:
  + This snapshot sees the removal of the following backends and
    platform support: Qt4, BeOS, OS/2, DirectFB, DRM, Cogl, OpenVG.
  + Thanks to all past contributors for their work on them. If you
    were using any of these backends then you will need to stick to
    Cairo 1.16.
  + This snapshot is going to be the **last** release of Cairo with
    the Autotools build system. The Meson build has seen many
    improvements and it is considerably easier to maintain and
    faster to build.
- Changes from version 1.17.4:
  + A particularly noteworthy improvement in this release is the
    addition of the meson build system as an alternative to
    autotools.
  + The cogl Cairo backend underwent significant development this
    cycle.
  + Subpixel positioning support allows improved glyph outlines
    with the Freetype font backend.
  + For a complete log of changes, please see
    https://cairographics.org/releases/ChangeLog.1.17.4
- Changes from version 1.17.2:
  + This snapshot provides the new support for writing floating
    point formats as 16 bpc PNGs, with support for RGBA128F and
    RGB96F formats. This new feature increases Cairo's pixman
    version requirement to 0.36.0.
  + Beyond this are a range of bugfixes.
    For a complete log of changes, please see
    https://cairographics.org/releases/ChangeLog.1.17.2
- Drop patches fixed upstream:
  + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch
  + cairo-composite_color_glyphs.patch
  + cairo-pdf-add-missing-flush.patch
  + cairo-do-not-override-explicitly-requested-grayscale-aa.patch
- Rebase remaining patches with quilt.
- Add 0001-Set-default-LCD-filter-to-FreeType-s-default.patch: Set
  default LCD filter to FreeType's default (patch merged upstream).
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 1.17.8:
  + In a continuing effort to reduce the amount of legacy code, and
    increase the long-term maintainability of cairo, the following
    backends have been removed:
  - GL and GLES drawing
  + Additionally, cairo's Autotools build system has been removed;
    from now on, cairo will only support the Meson build system.
    While the end result should be identical, further testing is
    appreciated.
  + In this snapshot, cairo gained support for rendering COLRv1
    fonts, and rendering SVG and COLRv1 fonts with custom palettes.
  + Support for macOS and Windows has been improved, with lots of
    build and bug fixes.
  + Lots of safety issues have been fixed, with array bounds
    checking and plugging memory leaks, as well as fixes for bugs
    identified via fuzzying.
  + This is going to be the last snapshot of the 1.17 development
    cycle; we only expect minor bug fixing and improvements until
    the 1.18.0 release.
- Switch to meson buildsystem: Add meson BuildRequires and macros.
- Update Source Url to new home.
- Drop build_gl_backend define and conditional pkgconfig(egl) and
  pkgconfig(gl) BuildRequires: No longer supported.
- Add generic c++_compiler and c_compiler BuildRequires: New
  dependencies.
- Drop 0001-Set-default-LCD-filter-to-FreeType-s-default.patch:
  Fixed upstream.
- Add upstream bug fix patches:
  + cairo-1.17.8-fix-tee-compilation.patch
  + cairo-1.17.8-ft-font-missing-glyph.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695470400">- Update to version 1.18.0:
  + The first stable cairo release in five years should be cause
    for celebration.
  + All the API added in the 1.17 development cycle is now
    considered stable, and will not change.
  + Many thanks to all the contributors for this release.
  + The cairo-sphinx tool has been removed; we could not find any
    instruction on how to use it, and no user answered our call for
    help. If you were using cairo-sphinx, please reach out to the
    cairo maintainers.
  + Cairo now implements Type 3 color fonts for PDF.
  + Multiple documentation fixes, to ensure that the cairo API
    reference is up to date. Also fixed multiple compiler warnings
    generated when building cairo.
  + The XML surface has been removed; it was disabled by default
    when building cairo, and we could not find any downstream
    distributor that would enable it.
  + The Tee surface is now automatically enabled. Downstream
    distributors of cairo have been enabling for years it in order
    to build Firefox.
  + Fixed multiple issues with the DWrite font backend.
  + Improved the Quartz surface; mainly, Quartz surfaces now use
    the main display ColorSpace, speeding up rendering operations.
  + Cairo now hides all private symbols by default on every
    platform; the old "slim" symbols hack to alias internally used
    symbols has been dropped, in favor of using
    `-Bsymbolic-functions` with toolchains that support it.
  + Fixed multiple memory leaks in the code base and test suite,
    and general maintenance.
  + Added new API to expose the Pixman dithering filter to cairo
    patterns; this is currently implemented only for image
    surfaces.
- Drop patches fixed upstream:
  + cairo-1.17.8-fix-tee-compilation.patch
  + cairo-1.17.8-ft-font-missing-glyph.patch
- Rebase patches with quilt.
- Stop passing xml=disabled to meson setup, xml backend is dropped.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1725278400">- Update to version 1.18.2:
  + The malloc-stats code has been removed from the tests directory
    the canonical location for it is:
    https://github.com/behdad/malloc-stats
  + Cairo now requires a version of pixman equal to, or newer than,
    0.40.
  + There have been multiple build fixes for newer versions of GCC
    for MSVC; for Solaris; and on macOS 10.7.
  + PNG errors caused by loading malformed data are correctly
    propagated to callers, so they can handle the case.
  + Both stroke and fill colors are now set when showing glyphs on
    a PDF surface.
  + All the font options are copied when creating a fallback font
    object.
  + When drawing text on macOS, Cairo now tries harder to select
    the appropriate font name.
  + Cairo now prefers the COLRv1 table inside a font, if one is
    available.
  + Cairo requires a C11 toolchain when building.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1726833600">- Add b9eed915f9a67380e7ef9d8746656455c43f67e2.patch: cff: Don't
  fail if no local subs. Fix regression when writing PDFs with
  fonts.</changelog>
  <changelog author="dimstar@opensuse.org" date="1732795200">- Convert to source service: allows for easier upgrades by the
  GNOME team.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1742212800">- Update to version 1.18.4:
  + The dependency on LZO has been made optional through a build
    time configuration toggle.
  + You can build Cairo against a Freetype installation that does
    not have the FT_Color type.
  + Cairo tests now build on Solaris 11.4 with GCC 14.
  + The DirectWrite backend now builds on MINGW 11.
  + The DirectWrite backend now supports font variations and proper
    glyph coverage.
  + Support for Windows 98 has been removed. The minimum
    requirement for Windows is now Vista.
- Use tarball in lieu of source service due to freedesktop gitlab
  migration, will switch back at next release at the latest.
- Drop b9eed915f9a67380e7ef9d8746656455c43f67e2.patch: Fixed
  upstream.
- Add pkgconfig(lzo2) BuildRequires: New optional dependency, build
  lzo2 support feature.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1742385600">- Switch back to using source service.</changelog>
  <changelog author="qzhao@suse.com" date="1754913600">- Add b5752618.patch:
  Backport from William Bader's request 621, Fix NULL access
  in active_edges_to_traps().
  https://gitlab.freedesktop.org/cairo/cairo/-/merge_requests/621/diffs
  https://gitlab.freedesktop.org/williamb/cairo/-/commit/b5752618
  (CVE-2025-50422, bsc#1247589)</changelog>
</package>
<package pkgid="baef73c99b65652578e049c6e3de63f9baefd4c3b4935da1caf1a90367ad7abe" name="libcairo2" arch="x86_64">
  <version epoch="0" ver="1.18.4" rel="150600.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523534400">- Update to version 1.15.12:
  + The main focus for this release is the addition of Variable
    Font support. Variable fonts are single font files with various
    typography characteristics, such as weight or slant, that users
    of the font can adjust between two points. Effectively this
    enables a single font to behave as multiple fonts.
  + The Skia backend is disabled in this release, due to severe
    bitrot, and will be removed in future releases. Contact the
    cairo team if you have a need of this backend.
  + Features and Enhancements:
  - Variable font support.
  - Skia backend is disabled.
  + API Changes: cairo_font_options_get_variations() and
    cairo_font_options_set_variations() are added.
  + Bugs fixed:
  - Fix errors in csi-trace --help and --version options.
  - Fix a 'memory leak' in the image compositor, with
    pixman_glyph_cache_t.
  - Fix access of uninitialized memory found by valgrind
    (fdo#91271).
  - Fix improper initialization of memory in
    _cairo_ft_font_face_create_for_pattern() (fdo#105084).
  - Fix multi-monitor virtual desktop with negative coords on
    Win32 (fdo#100793).
  - Fix issues occuring with older FreeType versions.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524571200">- Add cairo-fix-assertion-failure-in-freetype-backend.patch: Fix
  assertion failure in the freetype backend (fdo#105746).</changelog>
  <changelog author="qzheng@suse.com" date="1529496000">- Add cairo-CVE-2017-9814.patch: Replace malloc with _cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538740800">- Update to version 1.15.14:
  + Features and Enhancements:
  - Add more FreeeType font color conversions to support
    COLR/CPAL.
  - Update test reference images against current pixman.
  + Bugs fixed:
  - Fix crash when rendering Microsoft's Segoe UI Emoji Regular
    font.
  - Fix build breakage with glesv3 enabled due to non-existant
    glesv3.pc.
  - Fix memory leaks found by Coverity.
  - Fix incorrect null ptr handling found by Coverity.
  - Fix test compilation when font-config is disabled.
  - Use _cairo_malloc instead of malloc
    (fdo#101547, CVE-2017-9814).
  - Fix assertion failure in the freetype backend (fdo#105746).
- Drop upstream fixed patches:
  + cairo-fix-assertion-failure-in-freetype-backend.patch.
  + cairo-CVE-2017-9814.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540123200">- Update to version 1.16.0:
  + test: Free resources in pdf2png.
  + Drop skia backend.
  + Revert "Correctly decode Adobe CMYK JPEGs in PDF export".</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567598400">- Add 2 upstream bug fix patches:
  + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch:
    ft: Use FT_Done_MM_Var instead of free when available in
    cairo_ft_apply_variations. Fixes a crash when using freetype
    &gt;= 2.9
  + cairo-composite_color_glyphs.patch: Fix a thinko in
    composite_color_glyphs. We can't just move around the contents
    of the passed-in string, we need to make a copy. This was
    showing up as memory corruption in pango.</changelog>
  <changelog author="mwilck@suse.com" date="1582459200">- Add an upstream bug fix
  + cairo-pdf-add-missing-flush.patch: Fixes PDF generation
    see https://gitlab.freedesktop.org/cairo/cairo/issues/342</changelog>
  <changelog author="rpm@fthiessen.de" date="1634904000">- Add upstream patch
  + cairo-do-not-override-explicitly-requested-grayscale-aa.patch
    Do not replace explicitly set applications settings by user
    settings for font antialiasing.
    See: https://gitlab.freedesktop.org/cairo/cairo/-/merge_requests/114</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661947200">- Update to version 1.17.6:
  + This snapshot sees the removal of the following backends and
    platform support: Qt4, BeOS, OS/2, DirectFB, DRM, Cogl, OpenVG.
  + Thanks to all past contributors for their work on them. If you
    were using any of these backends then you will need to stick to
    Cairo 1.16.
  + This snapshot is going to be the **last** release of Cairo with
    the Autotools build system. The Meson build has seen many
    improvements and it is considerably easier to maintain and
    faster to build.
- Changes from version 1.17.4:
  + A particularly noteworthy improvement in this release is the
    addition of the meson build system as an alternative to
    autotools.
  + The cogl Cairo backend underwent significant development this
    cycle.
  + Subpixel positioning support allows improved glyph outlines
    with the Freetype font backend.
  + For a complete log of changes, please see
    https://cairographics.org/releases/ChangeLog.1.17.4
- Changes from version 1.17.2:
  + This snapshot provides the new support for writing floating
    point formats as 16 bpc PNGs, with support for RGBA128F and
    RGB96F formats. This new feature increases Cairo's pixman
    version requirement to 0.36.0.
  + Beyond this are a range of bugfixes.
    For a complete log of changes, please see
    https://cairographics.org/releases/ChangeLog.1.17.2
- Drop patches fixed upstream:
  + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch
  + cairo-composite_color_glyphs.patch
  + cairo-pdf-add-missing-flush.patch
  + cairo-do-not-override-explicitly-requested-grayscale-aa.patch
- Rebase remaining patches with quilt.
- Add 0001-Set-default-LCD-filter-to-FreeType-s-default.patch: Set
  default LCD filter to FreeType's default (patch merged upstream).
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 1.17.8:
  + In a continuing effort to reduce the amount of legacy code, and
    increase the long-term maintainability of cairo, the following
    backends have been removed:
  - GL and GLES drawing
  + Additionally, cairo's Autotools build system has been removed;
    from now on, cairo will only support the Meson build system.
    While the end result should be identical, further testing is
    appreciated.
  + In this snapshot, cairo gained support for rendering COLRv1
    fonts, and rendering SVG and COLRv1 fonts with custom palettes.
  + Support for macOS and Windows has been improved, with lots of
    build and bug fixes.
  + Lots of safety issues have been fixed, with array bounds
    checking and plugging memory leaks, as well as fixes for bugs
    identified via fuzzying.
  + This is going to be the last snapshot of the 1.17 development
    cycle; we only expect minor bug fixing and improvements until
    the 1.18.0 release.
- Switch to meson buildsystem: Add meson BuildRequires and macros.
- Update Source Url to new home.
- Drop build_gl_backend define and conditional pkgconfig(egl) and
  pkgconfig(gl) BuildRequires: No longer supported.
- Add generic c++_compiler and c_compiler BuildRequires: New
  dependencies.
- Drop 0001-Set-default-LCD-filter-to-FreeType-s-default.patch:
  Fixed upstream.
- Add upstream bug fix patches:
  + cairo-1.17.8-fix-tee-compilation.patch
  + cairo-1.17.8-ft-font-missing-glyph.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695470400">- Update to version 1.18.0:
  + The first stable cairo release in five years should be cause
    for celebration.
  + All the API added in the 1.17 development cycle is now
    considered stable, and will not change.
  + Many thanks to all the contributors for this release.
  + The cairo-sphinx tool has been removed; we could not find any
    instruction on how to use it, and no user answered our call for
    help. If you were using cairo-sphinx, please reach out to the
    cairo maintainers.
  + Cairo now implements Type 3 color fonts for PDF.
  + Multiple documentation fixes, to ensure that the cairo API
    reference is up to date. Also fixed multiple compiler warnings
    generated when building cairo.
  + The XML surface has been removed; it was disabled by default
    when building cairo, and we could not find any downstream
    distributor that would enable it.
  + The Tee surface is now automatically enabled. Downstream
    distributors of cairo have been enabling for years it in order
    to build Firefox.
  + Fixed multiple issues with the DWrite font backend.
  + Improved the Quartz surface; mainly, Quartz surfaces now use
    the main display ColorSpace, speeding up rendering operations.
  + Cairo now hides all private symbols by default on every
    platform; the old "slim" symbols hack to alias internally used
    symbols has been dropped, in favor of using
    `-Bsymbolic-functions` with toolchains that support it.
  + Fixed multiple memory leaks in the code base and test suite,
    and general maintenance.
  + Added new API to expose the Pixman dithering filter to cairo
    patterns; this is currently implemented only for image
    surfaces.
- Drop patches fixed upstream:
  + cairo-1.17.8-fix-tee-compilation.patch
  + cairo-1.17.8-ft-font-missing-glyph.patch
- Rebase patches with quilt.
- Stop passing xml=disabled to meson setup, xml backend is dropped.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1725278400">- Update to version 1.18.2:
  + The malloc-stats code has been removed from the tests directory
    the canonical location for it is:
    https://github.com/behdad/malloc-stats
  + Cairo now requires a version of pixman equal to, or newer than,
    0.40.
  + There have been multiple build fixes for newer versions of GCC
    for MSVC; for Solaris; and on macOS 10.7.
  + PNG errors caused by loading malformed data are correctly
    propagated to callers, so they can handle the case.
  + Both stroke and fill colors are now set when showing glyphs on
    a PDF surface.
  + All the font options are copied when creating a fallback font
    object.
  + When drawing text on macOS, Cairo now tries harder to select
    the appropriate font name.
  + Cairo now prefers the COLRv1 table inside a font, if one is
    available.
  + Cairo requires a C11 toolchain when building.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1726833600">- Add b9eed915f9a67380e7ef9d8746656455c43f67e2.patch: cff: Don't
  fail if no local subs. Fix regression when writing PDFs with
  fonts.</changelog>
  <changelog author="dimstar@opensuse.org" date="1732795200">- Convert to source service: allows for easier upgrades by the
  GNOME team.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1742212800">- Update to version 1.18.4:
  + The dependency on LZO has been made optional through a build
    time configuration toggle.
  + You can build Cairo against a Freetype installation that does
    not have the FT_Color type.
  + Cairo tests now build on Solaris 11.4 with GCC 14.
  + The DirectWrite backend now builds on MINGW 11.
  + The DirectWrite backend now supports font variations and proper
    glyph coverage.
  + Support for Windows 98 has been removed. The minimum
    requirement for Windows is now Vista.
- Use tarball in lieu of source service due to freedesktop gitlab
  migration, will switch back at next release at the latest.
- Drop b9eed915f9a67380e7ef9d8746656455c43f67e2.patch: Fixed
  upstream.
- Add pkgconfig(lzo2) BuildRequires: New optional dependency, build
  lzo2 support feature.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1742385600">- Switch back to using source service.</changelog>
  <changelog author="qzhao@suse.com" date="1754913600">- Add b5752618.patch:
  Backport from William Bader's request 621, Fix NULL access
  in active_edges_to_traps().
  https://gitlab.freedesktop.org/cairo/cairo/-/merge_requests/621/diffs
  https://gitlab.freedesktop.org/williamb/cairo/-/commit/b5752618
  (CVE-2025-50422, bsc#1247589)</changelog>
</package>
<package pkgid="2948268bcedf00c516182d7ab464257fb7d10f56aaa5ca77d2075a37ab3c0959" name="libcap" arch="src">
  <version epoch="0" ver="2.63" rel="150400.3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1578916800">- Build using -ffat-lto-objects for static library</changelog>
  <changelog author="tiwai@suse.de" date="1580212800">- Update to version 2.31:
  * primarily a documentation update
  * fix libpam.pc to not require libpsx.pc
  * changed the text format of the default output of getpcap</changelog>
  <changelog author="tiwai@suse.de" date="1581768000">- Update to version 2.32:
  * Bug fix for fakeroot incompatibility (boo#1162014)
  * Slight perf improvement for cap_get_bound().
  * C++ support for psx header inclusion.
  * Some new testing features for capsh</changelog>
  <changelog author="info@paolostivanin.com" date="1596715200">- Update to version 2.42:
  * Closed a potential issue with "libcap/psx" Go package and errno
  * Documentation updates
  * Minor optimization for cap_to_text() and (*cap.Set).String()
  * Discovered and added a missing function (*cap.Set).SetNSOwner() to achieve parity with libcap
  * Multiple fixes
  * Support Go module abstraction
  * A new kernel capability: CAP_BPF
  * Better support for cross-compilation
  * pam_cap now honors PAM_REINITIALIZE_CRED
  * implements cap_launch functionality</changelog>
  <changelog author="dmueller@suse.com" date="1599048000">- update to 2.43
  * Linus' kernel tree defines CAP_CHECKPOINT_RESTORE (40) so support it.
  * Fix the creation of the $(FAKEROOT)$(LIBDIR) for split install targets
  * Clean up a binary from the distribution
  * Added some more release time checks for non-git tracked files.
  * Fix a deadlock in libpsx that surfaced with a set of compiler optimizations by removing the psx wrapping harder.</changelog>
  <changelog author="dmueller@suse.com" date="1605355200">- update to 2.44:
  Generally, this is a release to help package builders: no functional change
  to any of the generated code just documentation and make related fixes.</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 2.46:
  * The bulk of this release concerns fixes and improvements to libpsx
  * Fix the capsh == argument handling and add a test case
  * Added build support for systems that do not support libpthread
  * Added build support for not building shared libraries</changelog>
  <changelog author="dmueller@suse.com" date="1611748800">- update to 2.47:
  * Restructured gowns to default to uid base of getuid().
  * Augment NOPRIV libcap mode with the sticky NO_NEW_PRIVS prctl bit.
  * Improve the usage and diagnostic message for setcap
  * Documentation fixes, license declarations, example updates</changelog>
  <changelog author="dmueller@suse.com" date="1612872000">- update to 2.48:
  * More uniform use of $(MAKE) in Makefiles
  * No longer include symlinks in the git tree
  * Provide support for make GOLANG=no ...
  * Provide support for pointing at a specific build of the go binary
  * camelCase the contrib/seccomp/explore.go program
  * A number of documentation fixes to man pages and source code comments
  * Last use of GO major version 0</changelog>
  <changelog author="dmueller@suse.com" date="1616414400">- update to 2.49:
  * Implement cap_func_launcher() and cap.FuncLauncher().
  * More robust "psx" redirection for nocgo compilation - the documentation for
    the cgo implementation is now included in the nocgo one because the go.dev
    automated documentation builds the docs from the nocgo version.
  * Lots of documentation cleanups and added a few man pages: for IAB and
    Launching.
  * Some general no-op License changes that might cause folk to notice but only
    for formatting reasons. These were initially inspired by some lawyerly
    interactions, but I ended up rolling back half of them because they
    confused automated software infrastructure.</changelog>
  <changelog author="tiwai@suse.de" date="1618574400">- Add explicit dependency on libcap2 with version to libcap-progs
  (bsc#1184690)</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix a broken symlink. libcap-devel installs libpsx.so but
  didn't install the library it's pointing to.</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 2.51:
  * Fix capsh installation
  * Add an autoauth module flag to pam_cap.so
  * Unified libcap/cap (Go) and libcap (C) default generation of external format binary data
  * API enhancement cap_fill() and (*cap.Set).Fill() - to permit copying one
    capability flag to another.
  * --explain=cap_foo: describe what cap_foo does
  * --suggest=phrase: search all the cap descriptions and describe those that match the phrase
  * Add "keepcaps" module argument support to pam_cap.so (reported by Zoltan Fridrich. Bug 212945)
  * extend libcap to include cap_prctl() and cap_prctlw() functions to regain
    feature parity with Go "cap" package. These are only needed when linking
    against -lpsx for keepcaps POSIX semantics.
  * this likely requires substantial application changes to make Ambient
    capability support usable in general, but doing our part for the admin.
  * Add a test case for recent kernel fix
  * Go pragma fix for convenience functions in "cap" module</changelog>
  <changelog author="info@paolostivanin.com" date="1632830400">- update to 2.59:
  * Fixed a potential libcap memory leak by adding a destructor
  * Major improvement is that there is a path for Linux-PAM compliant
    applications to support setting Ambient vector Capabilities via pam_cap.so now
  * Added libcap cap_proc_root() API function
  * Added color support to captree
  * Fixed contrib/sucap/su to correctly handle the Inheritable flag
  * capsh enhancements
  * getcap -r / now generates readable output
  * The shared library objects: pam_cap.so, libcap.so and libpsx.so, are all now
    runnable as standalone binaries
  * The module pam_cap.so now contains support for a default=&lt;IAB&gt; module argument
  * Enhanced capsh --suggest to also compare against the capability value names
    and not just their descriptions
  * Added capsh --current support
  * Added a contrib/sucap/su.c pure-capabilities PAM implementation of su
  * Fix for a corner case infinite loop handling long strings
  * Added libcap cap_iab_compare() and cap_iab_get_pid() APIs
  * Added a Go utility, captree, to display the process (and thread) graph along with
    the POSIX.1e and IAB capabilities of each PID{TID} tree.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1637496000">- libcap 2.61:
  * Better error handling of the numerical arguments for capsh and
    setcap
  * Fix executable mode for all of the .so files. There were two
    situations where this was failing (with a hard to debug SIGSEGV
    inside libc)
  * Added an example of a shared library object with its own file
    capability
  * Fix the top-level include for Make.Rules in the contrib/sucap
    example application
  * Add support for running constructors at libcap.so start up time
    when running as stand alone binary.
- includes changes from 2.60:
  * Some build, code linting fixes, the addition of the
    cap_fill_flag() API and a memory latency optimization
  * General improvement in thread safety for libcap and cap package
  * Minor API change replacing libcap:cap_launch_*() void returning
    functions with int + errno status returns.
  * Added a cap_iab_dup(), and (*cap.IAB).Dup() to API
  * New features for capsh: --quiet, -+ and =+ arguments
- add upstream signing key and verify source signature</changelog>
  <changelog author="dmueller@suse.com" date="1640865600">- update to 2.62:
  * Bug fix for Go package "cap" and launching
  * Build cleanups
  * Documentation updates: cap_max_bits has a man page entry
  * Recognize default securebits as a libcap mode: HYBRID</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- update to 2.63:
  * restore errno to zero by the time main() is executed
  * Consistent psx handling (a panic) for syscalls that return thread dependent
    status Inconsistend behavior noticed by Lorenz Bauer
  * Add a test case for a deadlock under investigation in golang
  * Trim some of the #include file use to make the tree compile more
    efficiently</changelog>
  <changelog author="meissner@suse.com" date="1645790400">- Use "or" in the license tag to avoid confusion (bsc#1180073)</changelog>
  <changelog author="abergmann@suse.com" date="1684238400">- Fixed improper memory release in libcap/psx/psx.c:__wrap_pthread_create()
  (bsc#1211418 / CVE-2023-2602) CVE-2023-2602.patch
- Fixed integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup()
  (bsc#1211419 / CVE-2023-2603) CVE-2023-2603.patch</changelog>
  <changelog author="meissner@suse.com" date="1775822400">- CVE-2026-4878: Fixed a a potential TOCTOU race condition in cap_set_file() (bsc#1261809)
  0001-Address-a-potential-TOCTOU-race-condition-in-cap_set.patch:</changelog>
</package>
<package pkgid="a4a19fc093f5081458a635e57482836bf218783166ecaed6db8a3808cbd7e6c7" name="libcap-devel" arch="x86_64">
  <version epoch="0" ver="2.63" rel="150400.3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1578916800">- Build using -ffat-lto-objects for static library</changelog>
  <changelog author="tiwai@suse.de" date="1580212800">- Update to version 2.31:
  * primarily a documentation update
  * fix libpam.pc to not require libpsx.pc
  * changed the text format of the default output of getpcap</changelog>
  <changelog author="tiwai@suse.de" date="1581768000">- Update to version 2.32:
  * Bug fix for fakeroot incompatibility (boo#1162014)
  * Slight perf improvement for cap_get_bound().
  * C++ support for psx header inclusion.
  * Some new testing features for capsh</changelog>
  <changelog author="info@paolostivanin.com" date="1596715200">- Update to version 2.42:
  * Closed a potential issue with "libcap/psx" Go package and errno
  * Documentation updates
  * Minor optimization for cap_to_text() and (*cap.Set).String()
  * Discovered and added a missing function (*cap.Set).SetNSOwner() to achieve parity with libcap
  * Multiple fixes
  * Support Go module abstraction
  * A new kernel capability: CAP_BPF
  * Better support for cross-compilation
  * pam_cap now honors PAM_REINITIALIZE_CRED
  * implements cap_launch functionality</changelog>
  <changelog author="dmueller@suse.com" date="1599048000">- update to 2.43
  * Linus' kernel tree defines CAP_CHECKPOINT_RESTORE (40) so support it.
  * Fix the creation of the $(FAKEROOT)$(LIBDIR) for split install targets
  * Clean up a binary from the distribution
  * Added some more release time checks for non-git tracked files.
  * Fix a deadlock in libpsx that surfaced with a set of compiler optimizations by removing the psx wrapping harder.</changelog>
  <changelog author="dmueller@suse.com" date="1605355200">- update to 2.44:
  Generally, this is a release to help package builders: no functional change
  to any of the generated code just documentation and make related fixes.</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 2.46:
  * The bulk of this release concerns fixes and improvements to libpsx
  * Fix the capsh == argument handling and add a test case
  * Added build support for systems that do not support libpthread
  * Added build support for not building shared libraries</changelog>
  <changelog author="dmueller@suse.com" date="1611748800">- update to 2.47:
  * Restructured gowns to default to uid base of getuid().
  * Augment NOPRIV libcap mode with the sticky NO_NEW_PRIVS prctl bit.
  * Improve the usage and diagnostic message for setcap
  * Documentation fixes, license declarations, example updates</changelog>
  <changelog author="dmueller@suse.com" date="1612872000">- update to 2.48:
  * More uniform use of $(MAKE) in Makefiles
  * No longer include symlinks in the git tree
  * Provide support for make GOLANG=no ...
  * Provide support for pointing at a specific build of the go binary
  * camelCase the contrib/seccomp/explore.go program
  * A number of documentation fixes to man pages and source code comments
  * Last use of GO major version 0</changelog>
  <changelog author="dmueller@suse.com" date="1616414400">- update to 2.49:
  * Implement cap_func_launcher() and cap.FuncLauncher().
  * More robust "psx" redirection for nocgo compilation - the documentation for
    the cgo implementation is now included in the nocgo one because the go.dev
    automated documentation builds the docs from the nocgo version.
  * Lots of documentation cleanups and added a few man pages: for IAB and
    Launching.
  * Some general no-op License changes that might cause folk to notice but only
    for formatting reasons. These were initially inspired by some lawyerly
    interactions, but I ended up rolling back half of them because they
    confused automated software infrastructure.</changelog>
  <changelog author="tiwai@suse.de" date="1618574400">- Add explicit dependency on libcap2 with version to libcap-progs
  (bsc#1184690)</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix a broken symlink. libcap-devel installs libpsx.so but
  didn't install the library it's pointing to.</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 2.51:
  * Fix capsh installation
  * Add an autoauth module flag to pam_cap.so
  * Unified libcap/cap (Go) and libcap (C) default generation of external format binary data
  * API enhancement cap_fill() and (*cap.Set).Fill() - to permit copying one
    capability flag to another.
  * --explain=cap_foo: describe what cap_foo does
  * --suggest=phrase: search all the cap descriptions and describe those that match the phrase
  * Add "keepcaps" module argument support to pam_cap.so (reported by Zoltan Fridrich. Bug 212945)
  * extend libcap to include cap_prctl() and cap_prctlw() functions to regain
    feature parity with Go "cap" package. These are only needed when linking
    against -lpsx for keepcaps POSIX semantics.
  * this likely requires substantial application changes to make Ambient
    capability support usable in general, but doing our part for the admin.
  * Add a test case for recent kernel fix
  * Go pragma fix for convenience functions in "cap" module</changelog>
  <changelog author="info@paolostivanin.com" date="1632830400">- update to 2.59:
  * Fixed a potential libcap memory leak by adding a destructor
  * Major improvement is that there is a path for Linux-PAM compliant
    applications to support setting Ambient vector Capabilities via pam_cap.so now
  * Added libcap cap_proc_root() API function
  * Added color support to captree
  * Fixed contrib/sucap/su to correctly handle the Inheritable flag
  * capsh enhancements
  * getcap -r / now generates readable output
  * The shared library objects: pam_cap.so, libcap.so and libpsx.so, are all now
    runnable as standalone binaries
  * The module pam_cap.so now contains support for a default=&lt;IAB&gt; module argument
  * Enhanced capsh --suggest to also compare against the capability value names
    and not just their descriptions
  * Added capsh --current support
  * Added a contrib/sucap/su.c pure-capabilities PAM implementation of su
  * Fix for a corner case infinite loop handling long strings
  * Added libcap cap_iab_compare() and cap_iab_get_pid() APIs
  * Added a Go utility, captree, to display the process (and thread) graph along with
    the POSIX.1e and IAB capabilities of each PID{TID} tree.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1637496000">- libcap 2.61:
  * Better error handling of the numerical arguments for capsh and
    setcap
  * Fix executable mode for all of the .so files. There were two
    situations where this was failing (with a hard to debug SIGSEGV
    inside libc)
  * Added an example of a shared library object with its own file
    capability
  * Fix the top-level include for Make.Rules in the contrib/sucap
    example application
  * Add support for running constructors at libcap.so start up time
    when running as stand alone binary.
- includes changes from 2.60:
  * Some build, code linting fixes, the addition of the
    cap_fill_flag() API and a memory latency optimization
  * General improvement in thread safety for libcap and cap package
  * Minor API change replacing libcap:cap_launch_*() void returning
    functions with int + errno status returns.
  * Added a cap_iab_dup(), and (*cap.IAB).Dup() to API
  * New features for capsh: --quiet, -+ and =+ arguments
- add upstream signing key and verify source signature</changelog>
  <changelog author="dmueller@suse.com" date="1640865600">- update to 2.62:
  * Bug fix for Go package "cap" and launching
  * Build cleanups
  * Documentation updates: cap_max_bits has a man page entry
  * Recognize default securebits as a libcap mode: HYBRID</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- update to 2.63:
  * restore errno to zero by the time main() is executed
  * Consistent psx handling (a panic) for syscalls that return thread dependent
    status Inconsistend behavior noticed by Lorenz Bauer
  * Add a test case for a deadlock under investigation in golang
  * Trim some of the #include file use to make the tree compile more
    efficiently</changelog>
  <changelog author="meissner@suse.com" date="1645790400">- Use "or" in the license tag to avoid confusion (bsc#1180073)</changelog>
  <changelog author="abergmann@suse.com" date="1684238400">- Fixed improper memory release in libcap/psx/psx.c:__wrap_pthread_create()
  (bsc#1211418 / CVE-2023-2602) CVE-2023-2602.patch
- Fixed integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup()
  (bsc#1211419 / CVE-2023-2603) CVE-2023-2603.patch</changelog>
  <changelog author="meissner@suse.com" date="1775822400">- CVE-2026-4878: Fixed a a potential TOCTOU race condition in cap_set_file() (bsc#1261809)
  0001-Address-a-potential-TOCTOU-race-condition-in-cap_set.patch:</changelog>
</package>
<package pkgid="b07db2cbc747e565924ad546f72851004b968bf2aafde5b39a0a2a2859b3485d" name="libcap-progs" arch="x86_64">
  <version epoch="0" ver="2.63" rel="150400.3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1578916800">- Build using -ffat-lto-objects for static library</changelog>
  <changelog author="tiwai@suse.de" date="1580212800">- Update to version 2.31:
  * primarily a documentation update
  * fix libpam.pc to not require libpsx.pc
  * changed the text format of the default output of getpcap</changelog>
  <changelog author="tiwai@suse.de" date="1581768000">- Update to version 2.32:
  * Bug fix for fakeroot incompatibility (boo#1162014)
  * Slight perf improvement for cap_get_bound().
  * C++ support for psx header inclusion.
  * Some new testing features for capsh</changelog>
  <changelog author="info@paolostivanin.com" date="1596715200">- Update to version 2.42:
  * Closed a potential issue with "libcap/psx" Go package and errno
  * Documentation updates
  * Minor optimization for cap_to_text() and (*cap.Set).String()
  * Discovered and added a missing function (*cap.Set).SetNSOwner() to achieve parity with libcap
  * Multiple fixes
  * Support Go module abstraction
  * A new kernel capability: CAP_BPF
  * Better support for cross-compilation
  * pam_cap now honors PAM_REINITIALIZE_CRED
  * implements cap_launch functionality</changelog>
  <changelog author="dmueller@suse.com" date="1599048000">- update to 2.43
  * Linus' kernel tree defines CAP_CHECKPOINT_RESTORE (40) so support it.
  * Fix the creation of the $(FAKEROOT)$(LIBDIR) for split install targets
  * Clean up a binary from the distribution
  * Added some more release time checks for non-git tracked files.
  * Fix a deadlock in libpsx that surfaced with a set of compiler optimizations by removing the psx wrapping harder.</changelog>
  <changelog author="dmueller@suse.com" date="1605355200">- update to 2.44:
  Generally, this is a release to help package builders: no functional change
  to any of the generated code just documentation and make related fixes.</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 2.46:
  * The bulk of this release concerns fixes and improvements to libpsx
  * Fix the capsh == argument handling and add a test case
  * Added build support for systems that do not support libpthread
  * Added build support for not building shared libraries</changelog>
  <changelog author="dmueller@suse.com" date="1611748800">- update to 2.47:
  * Restructured gowns to default to uid base of getuid().
  * Augment NOPRIV libcap mode with the sticky NO_NEW_PRIVS prctl bit.
  * Improve the usage and diagnostic message for setcap
  * Documentation fixes, license declarations, example updates</changelog>
  <changelog author="dmueller@suse.com" date="1612872000">- update to 2.48:
  * More uniform use of $(MAKE) in Makefiles
  * No longer include symlinks in the git tree
  * Provide support for make GOLANG=no ...
  * Provide support for pointing at a specific build of the go binary
  * camelCase the contrib/seccomp/explore.go program
  * A number of documentation fixes to man pages and source code comments
  * Last use of GO major version 0</changelog>
  <changelog author="dmueller@suse.com" date="1616414400">- update to 2.49:
  * Implement cap_func_launcher() and cap.FuncLauncher().
  * More robust "psx" redirection for nocgo compilation - the documentation for
    the cgo implementation is now included in the nocgo one because the go.dev
    automated documentation builds the docs from the nocgo version.
  * Lots of documentation cleanups and added a few man pages: for IAB and
    Launching.
  * Some general no-op License changes that might cause folk to notice but only
    for formatting reasons. These were initially inspired by some lawyerly
    interactions, but I ended up rolling back half of them because they
    confused automated software infrastructure.</changelog>
  <changelog author="tiwai@suse.de" date="1618574400">- Add explicit dependency on libcap2 with version to libcap-progs
  (bsc#1184690)</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix a broken symlink. libcap-devel installs libpsx.so but
  didn't install the library it's pointing to.</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 2.51:
  * Fix capsh installation
  * Add an autoauth module flag to pam_cap.so
  * Unified libcap/cap (Go) and libcap (C) default generation of external format binary data
  * API enhancement cap_fill() and (*cap.Set).Fill() - to permit copying one
    capability flag to another.
  * --explain=cap_foo: describe what cap_foo does
  * --suggest=phrase: search all the cap descriptions and describe those that match the phrase
  * Add "keepcaps" module argument support to pam_cap.so (reported by Zoltan Fridrich. Bug 212945)
  * extend libcap to include cap_prctl() and cap_prctlw() functions to regain
    feature parity with Go "cap" package. These are only needed when linking
    against -lpsx for keepcaps POSIX semantics.
  * this likely requires substantial application changes to make Ambient
    capability support usable in general, but doing our part for the admin.
  * Add a test case for recent kernel fix
  * Go pragma fix for convenience functions in "cap" module</changelog>
  <changelog author="info@paolostivanin.com" date="1632830400">- update to 2.59:
  * Fixed a potential libcap memory leak by adding a destructor
  * Major improvement is that there is a path for Linux-PAM compliant
    applications to support setting Ambient vector Capabilities via pam_cap.so now
  * Added libcap cap_proc_root() API function
  * Added color support to captree
  * Fixed contrib/sucap/su to correctly handle the Inheritable flag
  * capsh enhancements
  * getcap -r / now generates readable output
  * The shared library objects: pam_cap.so, libcap.so and libpsx.so, are all now
    runnable as standalone binaries
  * The module pam_cap.so now contains support for a default=&lt;IAB&gt; module argument
  * Enhanced capsh --suggest to also compare against the capability value names
    and not just their descriptions
  * Added capsh --current support
  * Added a contrib/sucap/su.c pure-capabilities PAM implementation of su
  * Fix for a corner case infinite loop handling long strings
  * Added libcap cap_iab_compare() and cap_iab_get_pid() APIs
  * Added a Go utility, captree, to display the process (and thread) graph along with
    the POSIX.1e and IAB capabilities of each PID{TID} tree.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1637496000">- libcap 2.61:
  * Better error handling of the numerical arguments for capsh and
    setcap
  * Fix executable mode for all of the .so files. There were two
    situations where this was failing (with a hard to debug SIGSEGV
    inside libc)
  * Added an example of a shared library object with its own file
    capability
  * Fix the top-level include for Make.Rules in the contrib/sucap
    example application
  * Add support for running constructors at libcap.so start up time
    when running as stand alone binary.
- includes changes from 2.60:
  * Some build, code linting fixes, the addition of the
    cap_fill_flag() API and a memory latency optimization
  * General improvement in thread safety for libcap and cap package
  * Minor API change replacing libcap:cap_launch_*() void returning
    functions with int + errno status returns.
  * Added a cap_iab_dup(), and (*cap.IAB).Dup() to API
  * New features for capsh: --quiet, -+ and =+ arguments
- add upstream signing key and verify source signature</changelog>
  <changelog author="dmueller@suse.com" date="1640865600">- update to 2.62:
  * Bug fix for Go package "cap" and launching
  * Build cleanups
  * Documentation updates: cap_max_bits has a man page entry
  * Recognize default securebits as a libcap mode: HYBRID</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- update to 2.63:
  * restore errno to zero by the time main() is executed
  * Consistent psx handling (a panic) for syscalls that return thread dependent
    status Inconsistend behavior noticed by Lorenz Bauer
  * Add a test case for a deadlock under investigation in golang
  * Trim some of the #include file use to make the tree compile more
    efficiently</changelog>
  <changelog author="meissner@suse.com" date="1645790400">- Use "or" in the license tag to avoid confusion (bsc#1180073)</changelog>
  <changelog author="abergmann@suse.com" date="1684238400">- Fixed improper memory release in libcap/psx/psx.c:__wrap_pthread_create()
  (bsc#1211418 / CVE-2023-2602) CVE-2023-2602.patch
- Fixed integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup()
  (bsc#1211419 / CVE-2023-2603) CVE-2023-2603.patch</changelog>
  <changelog author="meissner@suse.com" date="1775822400">- CVE-2026-4878: Fixed a a potential TOCTOU race condition in cap_set_file() (bsc#1261809)
  0001-Address-a-potential-TOCTOU-race-condition-in-cap_set.patch:</changelog>
</package>
<package pkgid="5be2969479398c319c1fdbfe9d106f56256235857ba37517bf35af6ceeb0b8a2" name="libcap2" arch="x86_64">
  <version epoch="0" ver="2.63" rel="150400.3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1578916800">- Build using -ffat-lto-objects for static library</changelog>
  <changelog author="tiwai@suse.de" date="1580212800">- Update to version 2.31:
  * primarily a documentation update
  * fix libpam.pc to not require libpsx.pc
  * changed the text format of the default output of getpcap</changelog>
  <changelog author="tiwai@suse.de" date="1581768000">- Update to version 2.32:
  * Bug fix for fakeroot incompatibility (boo#1162014)
  * Slight perf improvement for cap_get_bound().
  * C++ support for psx header inclusion.
  * Some new testing features for capsh</changelog>
  <changelog author="info@paolostivanin.com" date="1596715200">- Update to version 2.42:
  * Closed a potential issue with "libcap/psx" Go package and errno
  * Documentation updates
  * Minor optimization for cap_to_text() and (*cap.Set).String()
  * Discovered and added a missing function (*cap.Set).SetNSOwner() to achieve parity with libcap
  * Multiple fixes
  * Support Go module abstraction
  * A new kernel capability: CAP_BPF
  * Better support for cross-compilation
  * pam_cap now honors PAM_REINITIALIZE_CRED
  * implements cap_launch functionality</changelog>
  <changelog author="dmueller@suse.com" date="1599048000">- update to 2.43
  * Linus' kernel tree defines CAP_CHECKPOINT_RESTORE (40) so support it.
  * Fix the creation of the $(FAKEROOT)$(LIBDIR) for split install targets
  * Clean up a binary from the distribution
  * Added some more release time checks for non-git tracked files.
  * Fix a deadlock in libpsx that surfaced with a set of compiler optimizations by removing the psx wrapping harder.</changelog>
  <changelog author="dmueller@suse.com" date="1605355200">- update to 2.44:
  Generally, this is a release to help package builders: no functional change
  to any of the generated code just documentation and make related fixes.</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 2.46:
  * The bulk of this release concerns fixes and improvements to libpsx
  * Fix the capsh == argument handling and add a test case
  * Added build support for systems that do not support libpthread
  * Added build support for not building shared libraries</changelog>
  <changelog author="dmueller@suse.com" date="1611748800">- update to 2.47:
  * Restructured gowns to default to uid base of getuid().
  * Augment NOPRIV libcap mode with the sticky NO_NEW_PRIVS prctl bit.
  * Improve the usage and diagnostic message for setcap
  * Documentation fixes, license declarations, example updates</changelog>
  <changelog author="dmueller@suse.com" date="1612872000">- update to 2.48:
  * More uniform use of $(MAKE) in Makefiles
  * No longer include symlinks in the git tree
  * Provide support for make GOLANG=no ...
  * Provide support for pointing at a specific build of the go binary
  * camelCase the contrib/seccomp/explore.go program
  * A number of documentation fixes to man pages and source code comments
  * Last use of GO major version 0</changelog>
  <changelog author="dmueller@suse.com" date="1616414400">- update to 2.49:
  * Implement cap_func_launcher() and cap.FuncLauncher().
  * More robust "psx" redirection for nocgo compilation - the documentation for
    the cgo implementation is now included in the nocgo one because the go.dev
    automated documentation builds the docs from the nocgo version.
  * Lots of documentation cleanups and added a few man pages: for IAB and
    Launching.
  * Some general no-op License changes that might cause folk to notice but only
    for formatting reasons. These were initially inspired by some lawyerly
    interactions, but I ended up rolling back half of them because they
    confused automated software infrastructure.</changelog>
  <changelog author="tiwai@suse.de" date="1618574400">- Add explicit dependency on libcap2 with version to libcap-progs
  (bsc#1184690)</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix a broken symlink. libcap-devel installs libpsx.so but
  didn't install the library it's pointing to.</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 2.51:
  * Fix capsh installation
  * Add an autoauth module flag to pam_cap.so
  * Unified libcap/cap (Go) and libcap (C) default generation of external format binary data
  * API enhancement cap_fill() and (*cap.Set).Fill() - to permit copying one
    capability flag to another.
  * --explain=cap_foo: describe what cap_foo does
  * --suggest=phrase: search all the cap descriptions and describe those that match the phrase
  * Add "keepcaps" module argument support to pam_cap.so (reported by Zoltan Fridrich. Bug 212945)
  * extend libcap to include cap_prctl() and cap_prctlw() functions to regain
    feature parity with Go "cap" package. These are only needed when linking
    against -lpsx for keepcaps POSIX semantics.
  * this likely requires substantial application changes to make Ambient
    capability support usable in general, but doing our part for the admin.
  * Add a test case for recent kernel fix
  * Go pragma fix for convenience functions in "cap" module</changelog>
  <changelog author="info@paolostivanin.com" date="1632830400">- update to 2.59:
  * Fixed a potential libcap memory leak by adding a destructor
  * Major improvement is that there is a path for Linux-PAM compliant
    applications to support setting Ambient vector Capabilities via pam_cap.so now
  * Added libcap cap_proc_root() API function
  * Added color support to captree
  * Fixed contrib/sucap/su to correctly handle the Inheritable flag
  * capsh enhancements
  * getcap -r / now generates readable output
  * The shared library objects: pam_cap.so, libcap.so and libpsx.so, are all now
    runnable as standalone binaries
  * The module pam_cap.so now contains support for a default=&lt;IAB&gt; module argument
  * Enhanced capsh --suggest to also compare against the capability value names
    and not just their descriptions
  * Added capsh --current support
  * Added a contrib/sucap/su.c pure-capabilities PAM implementation of su
  * Fix for a corner case infinite loop handling long strings
  * Added libcap cap_iab_compare() and cap_iab_get_pid() APIs
  * Added a Go utility, captree, to display the process (and thread) graph along with
    the POSIX.1e and IAB capabilities of each PID{TID} tree.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1637496000">- libcap 2.61:
  * Better error handling of the numerical arguments for capsh and
    setcap
  * Fix executable mode for all of the .so files. There were two
    situations where this was failing (with a hard to debug SIGSEGV
    inside libc)
  * Added an example of a shared library object with its own file
    capability
  * Fix the top-level include for Make.Rules in the contrib/sucap
    example application
  * Add support for running constructors at libcap.so start up time
    when running as stand alone binary.
- includes changes from 2.60:
  * Some build, code linting fixes, the addition of the
    cap_fill_flag() API and a memory latency optimization
  * General improvement in thread safety for libcap and cap package
  * Minor API change replacing libcap:cap_launch_*() void returning
    functions with int + errno status returns.
  * Added a cap_iab_dup(), and (*cap.IAB).Dup() to API
  * New features for capsh: --quiet, -+ and =+ arguments
- add upstream signing key and verify source signature</changelog>
  <changelog author="dmueller@suse.com" date="1640865600">- update to 2.62:
  * Bug fix for Go package "cap" and launching
  * Build cleanups
  * Documentation updates: cap_max_bits has a man page entry
  * Recognize default securebits as a libcap mode: HYBRID</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- update to 2.63:
  * restore errno to zero by the time main() is executed
  * Consistent psx handling (a panic) for syscalls that return thread dependent
    status Inconsistend behavior noticed by Lorenz Bauer
  * Add a test case for a deadlock under investigation in golang
  * Trim some of the #include file use to make the tree compile more
    efficiently</changelog>
  <changelog author="meissner@suse.com" date="1645790400">- Use "or" in the license tag to avoid confusion (bsc#1180073)</changelog>
  <changelog author="abergmann@suse.com" date="1684238400">- Fixed improper memory release in libcap/psx/psx.c:__wrap_pthread_create()
  (bsc#1211418 / CVE-2023-2602) CVE-2023-2602.patch
- Fixed integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup()
  (bsc#1211419 / CVE-2023-2603) CVE-2023-2603.patch</changelog>
  <changelog author="meissner@suse.com" date="1775822400">- CVE-2026-4878: Fixed a a potential TOCTOU race condition in cap_set_file() (bsc#1261809)
  0001-Address-a-potential-TOCTOU-race-condition-in-cap_set.patch:</changelog>
</package>
<package pkgid="c6e47b5e818df85bb437fade43ff3cd3dc36a0f0dcbeffe9d54d9f808b593cc9" name="libcap2-32bit" arch="x86_64">
  <version epoch="0" ver="2.63" rel="150400.3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1578916800">- Build using -ffat-lto-objects for static library</changelog>
  <changelog author="tiwai@suse.de" date="1580212800">- Update to version 2.31:
  * primarily a documentation update
  * fix libpam.pc to not require libpsx.pc
  * changed the text format of the default output of getpcap</changelog>
  <changelog author="tiwai@suse.de" date="1581768000">- Update to version 2.32:
  * Bug fix for fakeroot incompatibility (boo#1162014)
  * Slight perf improvement for cap_get_bound().
  * C++ support for psx header inclusion.
  * Some new testing features for capsh</changelog>
  <changelog author="info@paolostivanin.com" date="1596715200">- Update to version 2.42:
  * Closed a potential issue with "libcap/psx" Go package and errno
  * Documentation updates
  * Minor optimization for cap_to_text() and (*cap.Set).String()
  * Discovered and added a missing function (*cap.Set).SetNSOwner() to achieve parity with libcap
  * Multiple fixes
  * Support Go module abstraction
  * A new kernel capability: CAP_BPF
  * Better support for cross-compilation
  * pam_cap now honors PAM_REINITIALIZE_CRED
  * implements cap_launch functionality</changelog>
  <changelog author="dmueller@suse.com" date="1599048000">- update to 2.43
  * Linus' kernel tree defines CAP_CHECKPOINT_RESTORE (40) so support it.
  * Fix the creation of the $(FAKEROOT)$(LIBDIR) for split install targets
  * Clean up a binary from the distribution
  * Added some more release time checks for non-git tracked files.
  * Fix a deadlock in libpsx that surfaced with a set of compiler optimizations by removing the psx wrapping harder.</changelog>
  <changelog author="dmueller@suse.com" date="1605355200">- update to 2.44:
  Generally, this is a release to help package builders: no functional change
  to any of the generated code just documentation and make related fixes.</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 2.46:
  * The bulk of this release concerns fixes and improvements to libpsx
  * Fix the capsh == argument handling and add a test case
  * Added build support for systems that do not support libpthread
  * Added build support for not building shared libraries</changelog>
  <changelog author="dmueller@suse.com" date="1611748800">- update to 2.47:
  * Restructured gowns to default to uid base of getuid().
  * Augment NOPRIV libcap mode with the sticky NO_NEW_PRIVS prctl bit.
  * Improve the usage and diagnostic message for setcap
  * Documentation fixes, license declarations, example updates</changelog>
  <changelog author="dmueller@suse.com" date="1612872000">- update to 2.48:
  * More uniform use of $(MAKE) in Makefiles
  * No longer include symlinks in the git tree
  * Provide support for make GOLANG=no ...
  * Provide support for pointing at a specific build of the go binary
  * camelCase the contrib/seccomp/explore.go program
  * A number of documentation fixes to man pages and source code comments
  * Last use of GO major version 0</changelog>
  <changelog author="dmueller@suse.com" date="1616414400">- update to 2.49:
  * Implement cap_func_launcher() and cap.FuncLauncher().
  * More robust "psx" redirection for nocgo compilation - the documentation for
    the cgo implementation is now included in the nocgo one because the go.dev
    automated documentation builds the docs from the nocgo version.
  * Lots of documentation cleanups and added a few man pages: for IAB and
    Launching.
  * Some general no-op License changes that might cause folk to notice but only
    for formatting reasons. These were initially inspired by some lawyerly
    interactions, but I ended up rolling back half of them because they
    confused automated software infrastructure.</changelog>
  <changelog author="tiwai@suse.de" date="1618574400">- Add explicit dependency on libcap2 with version to libcap-progs
  (bsc#1184690)</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix a broken symlink. libcap-devel installs libpsx.so but
  didn't install the library it's pointing to.</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 2.51:
  * Fix capsh installation
  * Add an autoauth module flag to pam_cap.so
  * Unified libcap/cap (Go) and libcap (C) default generation of external format binary data
  * API enhancement cap_fill() and (*cap.Set).Fill() - to permit copying one
    capability flag to another.
  * --explain=cap_foo: describe what cap_foo does
  * --suggest=phrase: search all the cap descriptions and describe those that match the phrase
  * Add "keepcaps" module argument support to pam_cap.so (reported by Zoltan Fridrich. Bug 212945)
  * extend libcap to include cap_prctl() and cap_prctlw() functions to regain
    feature parity with Go "cap" package. These are only needed when linking
    against -lpsx for keepcaps POSIX semantics.
  * this likely requires substantial application changes to make Ambient
    capability support usable in general, but doing our part for the admin.
  * Add a test case for recent kernel fix
  * Go pragma fix for convenience functions in "cap" module</changelog>
  <changelog author="info@paolostivanin.com" date="1632830400">- update to 2.59:
  * Fixed a potential libcap memory leak by adding a destructor
  * Major improvement is that there is a path for Linux-PAM compliant
    applications to support setting Ambient vector Capabilities via pam_cap.so now
  * Added libcap cap_proc_root() API function
  * Added color support to captree
  * Fixed contrib/sucap/su to correctly handle the Inheritable flag
  * capsh enhancements
  * getcap -r / now generates readable output
  * The shared library objects: pam_cap.so, libcap.so and libpsx.so, are all now
    runnable as standalone binaries
  * The module pam_cap.so now contains support for a default=&lt;IAB&gt; module argument
  * Enhanced capsh --suggest to also compare against the capability value names
    and not just their descriptions
  * Added capsh --current support
  * Added a contrib/sucap/su.c pure-capabilities PAM implementation of su
  * Fix for a corner case infinite loop handling long strings
  * Added libcap cap_iab_compare() and cap_iab_get_pid() APIs
  * Added a Go utility, captree, to display the process (and thread) graph along with
    the POSIX.1e and IAB capabilities of each PID{TID} tree.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1637496000">- libcap 2.61:
  * Better error handling of the numerical arguments for capsh and
    setcap
  * Fix executable mode for all of the .so files. There were two
    situations where this was failing (with a hard to debug SIGSEGV
    inside libc)
  * Added an example of a shared library object with its own file
    capability
  * Fix the top-level include for Make.Rules in the contrib/sucap
    example application
  * Add support for running constructors at libcap.so start up time
    when running as stand alone binary.
- includes changes from 2.60:
  * Some build, code linting fixes, the addition of the
    cap_fill_flag() API and a memory latency optimization
  * General improvement in thread safety for libcap and cap package
  * Minor API change replacing libcap:cap_launch_*() void returning
    functions with int + errno status returns.
  * Added a cap_iab_dup(), and (*cap.IAB).Dup() to API
  * New features for capsh: --quiet, -+ and =+ arguments
- add upstream signing key and verify source signature</changelog>
  <changelog author="dmueller@suse.com" date="1640865600">- update to 2.62:
  * Bug fix for Go package "cap" and launching
  * Build cleanups
  * Documentation updates: cap_max_bits has a man page entry
  * Recognize default securebits as a libcap mode: HYBRID</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- update to 2.63:
  * restore errno to zero by the time main() is executed
  * Consistent psx handling (a panic) for syscalls that return thread dependent
    status Inconsistend behavior noticed by Lorenz Bauer
  * Add a test case for a deadlock under investigation in golang
  * Trim some of the #include file use to make the tree compile more
    efficiently</changelog>
  <changelog author="meissner@suse.com" date="1645790400">- Use "or" in the license tag to avoid confusion (bsc#1180073)</changelog>
  <changelog author="abergmann@suse.com" date="1684238400">- Fixed improper memory release in libcap/psx/psx.c:__wrap_pthread_create()
  (bsc#1211418 / CVE-2023-2602) CVE-2023-2602.patch
- Fixed integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup()
  (bsc#1211419 / CVE-2023-2603) CVE-2023-2603.patch</changelog>
  <changelog author="meissner@suse.com" date="1775822400">- CVE-2026-4878: Fixed a a potential TOCTOU race condition in cap_set_file() (bsc#1261809)
  0001-Address-a-potential-TOCTOU-race-condition-in-cap_set.patch:</changelog>
</package>
<package pkgid="6919b12ad60e57f78592d5b34e44e926be4a94785b1ccd27cc7f8d41c4e3e9d9" name="libclamav12" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="150600.18.12.1"/>
  <changelog author="suse+build@de-korte.org" date="1641988800">- Update to 0.103.5
  * CVE-2022-20698: Fix for invalid pointer read that may cause a crash.
    This issue affects 0.104.1, 0.103.4 and prior when ClamAV is compiled
    with libjson-c and the CL_SCAN_GENERAL_COLLECT_METADATA scan option
    (the clamscan --gen-json option) is enabled. (bsc#1194731)
  * Fixed ability to disable the file size limit with libclamav C API,
    like this:
    cl_engine_set_num(engine, CL_ENGINE_MAX_FILESIZE, 0);
    This issue didn't affect ClamD or ClamScan which also can disable the
    limit by setting it to zero using MaxFileSize 0 in clamd.conf for ClamD,
    or clamscan --max-filesize=0 for ClamScan.
    Note: Internally, the max file size is still set to 2 GiB. Disabling the
    limit for a scan will fall back on the internal 2 GiB limitation.
  * Increased the maximum line length for ClamAV config files from 512 bytes
    to 1,024 bytes to allow for longer config option strings.
  * SigTool: Fix insufficient buffer size for --list-sigs that caused a
    failure when listing a database containing one or more very long
    signatures. This fix was backported from 0.104.</changelog>
  <changelog author="meissner@suse.com" date="1649764800">- https source urls</changelog>
  <changelog author="suse+build@de-korte.org" date="1651752000">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
  <changelog author="ecsos@opensuse.org" date="1659700800">- Update to 0.103.7 (bsc#1202986)
  - Zip parser: tolerate 2-byte overlap in file entries
  - Fix bug with logical signature Intermediates feature
  - Update to UnRAR v6.1.7
  - Patch UnRAR: allow skipping files in solid archives
  - Patch UnRAR: limit dict winsize to 1GB</changelog>
  <changelog author="suse+build@de-korte.org" date="1676462400">- Update to 0.103.8
  * CVE-2023-20032: Fixed a possible remote code execution vulnerability
    in the HFS+ file parser. Issue affects versions 1.0.0 and earlier,
    0.105.1 and earlier, and 0.103.7 and earlier. (bsc#1208363)
  * CVE-2023-20052: Fixed a possible remote information leak
    vulnerability in the DMG file parser. Issue affects versions 1.0.0
    and earlier, 0.105.1 and earlier, and 0.103.7 and earlier.
    (bsc#1208365)
  * Update vendored libmspack library to version 0.11alpha.
    (bsc#1103032: CVE-2018-14679)
- Package huge .html documentation in a separate subpackage.</changelog>
  <changelog author="suse+build@de-korte.org" date="1692187200">- Update to 0.103.9
  * CVE-2023-20197: Fixed a possible denial of service vulnerability in
    the HFS+ file parser. This issue affects versions 1.1.0, 1.0.1 through
    1.0.0, 0.105.2 through 0.105.0, 0.104.4 through 0.104.0, and 0.103.8
    through 0.103.0. (boo#1214342)
  * Fixed compiler warnings that may turn into errors in Clang 16.</changelog>
  <changelog author="max@suse.com" date="1692360000">- Renew clamav.keyring .</changelog>
  <changelog author="suse+build@de-korte.org" date="1698235200">- Update to 0.103.11
  * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.12.
  * Windows: libjson-c 0.17 compatibility fix. with ssize_t type definition.
  * Windows: Update build system to use OpenSSL 3 and PThreads-Win32 v3.
- Update to 0.103.10
  * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.10.
    (bsc#1216625, CVE-2023-40477)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="max@suse.com" date="1710504000">- New version: 1.3.0:
  * Added support for extracting and scanning attachments found in
    Microsoft OneNote section files. OneNote parsing will be
    enabled by default, but may be optionally disabled.
  * Added file type recognition for compiled Python (`.pyc`) files.
  * Improved support for decrypting PDFs with empty passwords.
  * Fixed a warning when scanning some HTML files.
  * ClamOnAcc: Fixed an infinite loop when a watched directory
    does not exist.
  * ClamOnAcc: Fixed an infinite loop when a file has been deleted
    before a scan.
- New version: 1.2.0:
  * Added support for extracting Universal Disk Format (UDF)
    partitions.
  * Added an option to customize the size of ClamAV's clean file
    cache.
  * Raised the MaxScanSize limit so the total amount of data
    scanned when scanning a file or archive may exceed 4 gigabytes.
  * Added ability for Freshclam to use a client certificate PEM
    file and a private key PEM file for authentication to a private
    mirror.
  * Fix an issue extracting files from ISO9660 partitions where the
    files are listed in the plain ISO tree and there also exists an
    empty Joliet tree.
  * PID and socket are now located under /run/clamav/clamd.pid and
    /run/clamav/clamd.sock .
  * bsc#1211594: Fixed an issue where ClamAV does not abort the
    signature load process after partially loading an invalid
    signature.
- New version 1.1.0:
  * https://blog.clamav.net/2023/05/clamav-110-released.html
  * Added the ability to extract images embedded in HTML CSS
    &lt;style&gt; blocks.
  * Updated to Sigtool so that the --vba option will extract VBA
    code from Microsoft Office documents the same way that
    libclamav extracts VBA.
  * Added a new option --fail-if-cvd-older-than=days to clamscan
    and clamd, and FailIfCvdOlderThan to clamd.conf
  * Added a new function cl_cvdgetage() to the libclamav API.
  * Added a new function cl_engine_set_clcb_vba() to the
    libclamav API.
  * obsoletes clamav-ec32.patch.
- boo#1180296: Integrate clamonacc as a service.
- New version 1.0.1 LTS (including changes in 0.104 and 0.105):
  * As of ClamAV 0.104, CMake is required to build ClamAV.
  * As of ClamAV 0.105, Rust is now required to compile ClamAV.
  * Increased the default limits for file and scan size:
  * MaxScanSize: 100M to 400M
  * MaxFileSize: 25M to 100M
  * StreamMaxLength: 25M to 100M
  * PCREMaxFileSize: 25M to 100M
  * MaxEmbeddedPE: 10M to 40M
  * MaxHTMLNormalize: 10M to 40M
  * MaxScriptNormalize: 5M to 20M
  * MaxHTMLNoTags: 2M to 8M
  * Added image fuzzy hash subsignatures for logical signatures.
  * Support for decrypting read-only OLE2-based XLS files that are
    encrypted with the default password.
  * Overhauled the implementation of the all-match feature.
  * Added a new callback to the public API for inspecting file
    content during a scan at each layer of archive extraction.
  * Added a new function to the public API for unpacking CVD
    signature archives.
  * The option to build with an external TomsFastMath library has
    been removed. ClamAV requires non-default build options for
    TomsFastMath to support bigger floating point numbers.
  * For a full list of changes see the release announcements:
  * https://blog.clamav.net/2022/11/clamav-100-lts-released.html
  * https://blog.clamav.net/2022/05/clamav-01050-01043-01036-released.html
  * https://blog.clamav.net/2021/09/clamav-01040-released.html
- Build clamd with systemd support.
- Fix format strings on 32bit platforms (clamav-format.patch).
- Add missing endianness conversions (clamav-ec32.patch).
- Don't build on armv7l for now due to some test failures.
- Drop clamav-disable-yara.patch as yara cannot be disabled anymore</changelog>
  <changelog author="max@suse.com" date="1713787200">- New Version: 1.3.1:
  * CVE-2024-20380: Fixed a possible crash in the HTML file parser
    that could cause a denial-of-service (DoS) condition.
  * Updated select Rust dependencies to the latest versions.
  * Fixed a bug causing some text to be truncated when converting
    from UTF-16.
  * Fixed assorted complaints identified by Coverity static
    analysis.
  * Fixed a bug causing CVDs downloaded by the DatabaseCustomURL
    Freshclam config option to be pruned and then re-downloaded
    with every update.
  * Added the new 'valhalla' database name to the list of optional
    databases in preparation for future work.</changelog>
  <changelog author="bwiedemann@suse.com" date="1722254400">- Add upstream 1305.patch to fix tests (boo#1102840, https://github.com/Cisco-Talos/clamav/issues/1300)</changelog>
  <changelog author="suse+build@de-korte.org" date="1725451200">- New version 1.3.2:
  * CVE-2024-20506: Changed the logging module to disable following
    symlinks on Linux and Unix systems so as to prevent an attacker
    with existing access to the 'clamd' or 'freshclam' services from
    using a symlink to corrupt system files.
  * CVE-2024-20505: Fixed a possible out-of-bounds read bug in the PDF
    file parser that could cause a denial-of-service condition.
  * Removed unused Python modules from freshclam tests including
    deprecated 'cgi' module that is expected to cause test failures in
    Python 3.13.
  * Fix unit test caused by expiring signing certificate.
  * Fixed a build issue on Windows with newer versions of Rust. Also
    upgraded GitHub Actions imports to fix CI failures.
  * Fixed an unaligned pointer dereference issue on select architectures.
  * Fixes to Jenkins CI pipeline.
- Remove upstreamed 1305.patch</changelog>
  <changelog author="max@suse.com" date="1725969600">- New version 1.4.1:
  * [CVE-2024-20506, bsc#1230162]: Changed the logging module to
    disable following symlinks on Linux and Unix systems so as to
    prevent an attacker with existing access to the 'clamd' or
    'freshclam' services from using a symlink to corrupt system
    files.
  * [CVE-2024-20505, bsc#1230161]: Fixed a possible out-of-bounds
    read bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition.
  * https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html
- New version 1.4.0:
  * Added support for extracting ALZ archives.
  * Added support for extracting LHA/LZH archives.
  * Added the ability to disable image fuzzy hashing, if needed.
    For context, image fuzzy hashing is a detection mechanism
    useful for identifying malware by matching images included with
    the malware or phishing email/document.
  * https://blog.clamav.net/2024/08/clamav-140-feature-release-and-clamav.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734523200">- fix factory submission (clam.tcl, clamscan.log)</changelog>
  <changelog author="max@suse.com" date="1736510400">- bsc#1232242: Start clamonacc with --fdpass to avoid errors due to
  clamd not being able to access user files.</changelog>
  <changelog author="max@suse.com" date="1737547200">- New version 1.4.2:
  * CVE-2025-20128, bsc#1236307: Fixed a possible buffer overflow
    read bug in the OLE2 file parser that could cause a
    denial-of-service (DoS) condition.</changelog>
  <changelog author="max@suse.com" date="1737633600">- Drop the version dependency on libcurl. Building against versions
  older than 7.45 does not fail anymore, but disables support for
  fdpassing in clamonacc. This only affects SLE-12 up to SP3.</changelog>
  <changelog author="max@suse.com" date="1739188800">- bsc#1236949: Fix location of license files.</changelog>
  <changelog author="max@suse.com" date="1742817600">- bsc#1239957: Build with PIE.
- Eliminate some UTF-8 NBSP characters from the changes file.</changelog>
</package>
<package pkgid="73c6d84915463f50a838cf64c78fb1306cf3ecb350b4beb7558476ed9ec26cfb" name="libclamav12" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="150600.18.15.1"/>
  <changelog author="meissner@suse.com" date="1649764800">- https source urls</changelog>
  <changelog author="suse+build@de-korte.org" date="1651752000">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
  <changelog author="ecsos@opensuse.org" date="1659700800">- Update to 0.103.7 (bsc#1202986)
  - Zip parser: tolerate 2-byte overlap in file entries
  - Fix bug with logical signature Intermediates feature
  - Update to UnRAR v6.1.7
  - Patch UnRAR: allow skipping files in solid archives
  - Patch UnRAR: limit dict winsize to 1GB</changelog>
  <changelog author="suse+build@de-korte.org" date="1676462400">- Update to 0.103.8
  * CVE-2023-20032: Fixed a possible remote code execution vulnerability
    in the HFS+ file parser. Issue affects versions 1.0.0 and earlier,
    0.105.1 and earlier, and 0.103.7 and earlier. (bsc#1208363)
  * CVE-2023-20052: Fixed a possible remote information leak
    vulnerability in the DMG file parser. Issue affects versions 1.0.0
    and earlier, 0.105.1 and earlier, and 0.103.7 and earlier.
    (bsc#1208365)
  * Update vendored libmspack library to version 0.11alpha.
    (bsc#1103032: CVE-2018-14679)
- Package huge .html documentation in a separate subpackage.</changelog>
  <changelog author="suse+build@de-korte.org" date="1692187200">- Update to 0.103.9
  * CVE-2023-20197: Fixed a possible denial of service vulnerability in
    the HFS+ file parser. This issue affects versions 1.1.0, 1.0.1 through
    1.0.0, 0.105.2 through 0.105.0, 0.104.4 through 0.104.0, and 0.103.8
    through 0.103.0. (boo#1214342)
  * Fixed compiler warnings that may turn into errors in Clang 16.</changelog>
  <changelog author="max@suse.com" date="1692360000">- Renew clamav.keyring .</changelog>
  <changelog author="suse+build@de-korte.org" date="1698235200">- Update to 0.103.11
  * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.12.
  * Windows: libjson-c 0.17 compatibility fix. with ssize_t type definition.
  * Windows: Update build system to use OpenSSL 3 and PThreads-Win32 v3.
- Update to 0.103.10
  * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.10.
    (bsc#1216625, CVE-2023-40477)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="max@suse.com" date="1710504000">- New version: 1.3.0:
  * Added support for extracting and scanning attachments found in
    Microsoft OneNote section files. OneNote parsing will be
    enabled by default, but may be optionally disabled.
  * Added file type recognition for compiled Python (`.pyc`) files.
  * Improved support for decrypting PDFs with empty passwords.
  * Fixed a warning when scanning some HTML files.
  * ClamOnAcc: Fixed an infinite loop when a watched directory
    does not exist.
  * ClamOnAcc: Fixed an infinite loop when a file has been deleted
    before a scan.
- New version: 1.2.0:
  * Added support for extracting Universal Disk Format (UDF)
    partitions.
  * Added an option to customize the size of ClamAV's clean file
    cache.
  * Raised the MaxScanSize limit so the total amount of data
    scanned when scanning a file or archive may exceed 4 gigabytes.
  * Added ability for Freshclam to use a client certificate PEM
    file and a private key PEM file for authentication to a private
    mirror.
  * Fix an issue extracting files from ISO9660 partitions where the
    files are listed in the plain ISO tree and there also exists an
    empty Joliet tree.
  * PID and socket are now located under /run/clamav/clamd.pid and
    /run/clamav/clamd.sock .
  * bsc#1211594: Fixed an issue where ClamAV does not abort the
    signature load process after partially loading an invalid
    signature.
- New version 1.1.0:
  * https://blog.clamav.net/2023/05/clamav-110-released.html
  * Added the ability to extract images embedded in HTML CSS
    &lt;style&gt; blocks.
  * Updated to Sigtool so that the --vba option will extract VBA
    code from Microsoft Office documents the same way that
    libclamav extracts VBA.
  * Added a new option --fail-if-cvd-older-than=days to clamscan
    and clamd, and FailIfCvdOlderThan to clamd.conf
  * Added a new function cl_cvdgetage() to the libclamav API.
  * Added a new function cl_engine_set_clcb_vba() to the
    libclamav API.
  * obsoletes clamav-ec32.patch.
- boo#1180296: Integrate clamonacc as a service.
- New version 1.0.1 LTS (including changes in 0.104 and 0.105):
  * As of ClamAV 0.104, CMake is required to build ClamAV.
  * As of ClamAV 0.105, Rust is now required to compile ClamAV.
  * Increased the default limits for file and scan size:
  * MaxScanSize: 100M to 400M
  * MaxFileSize: 25M to 100M
  * StreamMaxLength: 25M to 100M
  * PCREMaxFileSize: 25M to 100M
  * MaxEmbeddedPE: 10M to 40M
  * MaxHTMLNormalize: 10M to 40M
  * MaxScriptNormalize: 5M to 20M
  * MaxHTMLNoTags: 2M to 8M
  * Added image fuzzy hash subsignatures for logical signatures.
  * Support for decrypting read-only OLE2-based XLS files that are
    encrypted with the default password.
  * Overhauled the implementation of the all-match feature.
  * Added a new callback to the public API for inspecting file
    content during a scan at each layer of archive extraction.
  * Added a new function to the public API for unpacking CVD
    signature archives.
  * The option to build with an external TomsFastMath library has
    been removed. ClamAV requires non-default build options for
    TomsFastMath to support bigger floating point numbers.
  * For a full list of changes see the release announcements:
  * https://blog.clamav.net/2022/11/clamav-100-lts-released.html
  * https://blog.clamav.net/2022/05/clamav-01050-01043-01036-released.html
  * https://blog.clamav.net/2021/09/clamav-01040-released.html
- Build clamd with systemd support.
- Fix format strings on 32bit platforms (clamav-format.patch).
- Add missing endianness conversions (clamav-ec32.patch).
- Don't build on armv7l for now due to some test failures.
- Drop clamav-disable-yara.patch as yara cannot be disabled anymore</changelog>
  <changelog author="max@suse.com" date="1713787200">- New Version: 1.3.1:
  * CVE-2024-20380: Fixed a possible crash in the HTML file parser
    that could cause a denial-of-service (DoS) condition.
  * Updated select Rust dependencies to the latest versions.
  * Fixed a bug causing some text to be truncated when converting
    from UTF-16.
  * Fixed assorted complaints identified by Coverity static
    analysis.
  * Fixed a bug causing CVDs downloaded by the DatabaseCustomURL
    Freshclam config option to be pruned and then re-downloaded
    with every update.
  * Added the new 'valhalla' database name to the list of optional
    databases in preparation for future work.</changelog>
  <changelog author="bwiedemann@suse.com" date="1722254400">- Add upstream 1305.patch to fix tests (boo#1102840, https://github.com/Cisco-Talos/clamav/issues/1300)</changelog>
  <changelog author="suse+build@de-korte.org" date="1725451200">- New version 1.3.2:
  * CVE-2024-20506: Changed the logging module to disable following
    symlinks on Linux and Unix systems so as to prevent an attacker
    with existing access to the 'clamd' or 'freshclam' services from
    using a symlink to corrupt system files.
  * CVE-2024-20505: Fixed a possible out-of-bounds read bug in the PDF
    file parser that could cause a denial-of-service condition.
  * Removed unused Python modules from freshclam tests including
    deprecated 'cgi' module that is expected to cause test failures in
    Python 3.13.
  * Fix unit test caused by expiring signing certificate.
  * Fixed a build issue on Windows with newer versions of Rust. Also
    upgraded GitHub Actions imports to fix CI failures.
  * Fixed an unaligned pointer dereference issue on select architectures.
  * Fixes to Jenkins CI pipeline.
- Remove upstreamed 1305.patch</changelog>
  <changelog author="max@suse.com" date="1725969600">- New version 1.4.1:
  * [CVE-2024-20506, bsc#1230162]: Changed the logging module to
    disable following symlinks on Linux and Unix systems so as to
    prevent an attacker with existing access to the 'clamd' or
    'freshclam' services from using a symlink to corrupt system
    files.
  * [CVE-2024-20505, bsc#1230161]: Fixed a possible out-of-bounds
    read bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition.
  * https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html
- New version 1.4.0:
  * Added support for extracting ALZ archives.
  * Added support for extracting LHA/LZH archives.
  * Added the ability to disable image fuzzy hashing, if needed.
    For context, image fuzzy hashing is a detection mechanism
    useful for identifying malware by matching images included with
    the malware or phishing email/document.
  * https://blog.clamav.net/2024/08/clamav-140-feature-release-and-clamav.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734523200">- fix factory submission (clam.tcl, clamscan.log)</changelog>
  <changelog author="max@suse.com" date="1736510400">- bsc#1232242: Start clamonacc with --fdpass to avoid errors due to
  clamd not being able to access user files.</changelog>
  <changelog author="max@suse.com" date="1737547200">- New version 1.4.2:
  * CVE-2025-20128, bsc#1236307: Fixed a possible buffer overflow
    read bug in the OLE2 file parser that could cause a
    denial-of-service (DoS) condition.</changelog>
  <changelog author="max@suse.com" date="1737633600">- Drop the version dependency on libcurl. Building against versions
  older than 7.45 does not fail anymore, but disables support for
  fdpassing in clamonacc. This only affects SLE-12 up to SP3.</changelog>
  <changelog author="max@suse.com" date="1739188800">- bsc#1236949: Fix location of license files.</changelog>
  <changelog author="max@suse.com" date="1742817600">- bsc#1239957: Build with PIE.
- Eliminate some UTF-8 NBSP characters from the changes file.</changelog>
  <changelog author="max@suse.com" date="1748433600">- bsc#1243565: Add clamav-freshclam_test.patch to fix a race
  condition between the mockup servers started by different test
  cases in freshclam_test.py.</changelog>
</package>
<package pkgid="1d9d6ef45a63b825b5a11484804a19aa4ed86cd8fc8ecaa00f28b0e180d3e830" name="libclamav12" arch="x86_64">
  <version epoch="0" ver="1.4.3" rel="150600.18.18.1"/>
  <changelog author="suse+build@de-korte.org" date="1651752000">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
  <changelog author="ecsos@opensuse.org" date="1659700800">- Update to 0.103.7 (bsc#1202986)
  - Zip parser: tolerate 2-byte overlap in file entries
  - Fix bug with logical signature Intermediates feature
  - Update to UnRAR v6.1.7
  - Patch UnRAR: allow skipping files in solid archives
  - Patch UnRAR: limit dict winsize to 1GB</changelog>
  <changelog author="suse+build@de-korte.org" date="1676462400">- Update to 0.103.8
  * CVE-2023-20032: Fixed a possible remote code execution vulnerability
    in the HFS+ file parser. Issue affects versions 1.0.0 and earlier,
    0.105.1 and earlier, and 0.103.7 and earlier. (bsc#1208363)
  * CVE-2023-20052: Fixed a possible remote information leak
    vulnerability in the DMG file parser. Issue affects versions 1.0.0
    and earlier, 0.105.1 and earlier, and 0.103.7 and earlier.
    (bsc#1208365)
  * Update vendored libmspack library to version 0.11alpha.
    (bsc#1103032: CVE-2018-14679)
- Package huge .html documentation in a separate subpackage.</changelog>
  <changelog author="suse+build@de-korte.org" date="1692187200">- Update to 0.103.9
  * CVE-2023-20197: Fixed a possible denial of service vulnerability in
    the HFS+ file parser. This issue affects versions 1.1.0, 1.0.1 through
    1.0.0, 0.105.2 through 0.105.0, 0.104.4 through 0.104.0, and 0.103.8
    through 0.103.0. (boo#1214342)
  * Fixed compiler warnings that may turn into errors in Clang 16.</changelog>
  <changelog author="max@suse.com" date="1692360000">- Renew clamav.keyring .</changelog>
  <changelog author="suse+build@de-korte.org" date="1698235200">- Update to 0.103.11
  * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.12.
  * Windows: libjson-c 0.17 compatibility fix. with ssize_t type definition.
  * Windows: Update build system to use OpenSSL 3 and PThreads-Win32 v3.
- Update to 0.103.10
  * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.10.
    (bsc#1216625, CVE-2023-40477)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="max@suse.com" date="1710504000">- New version: 1.3.0:
  * Added support for extracting and scanning attachments found in
    Microsoft OneNote section files. OneNote parsing will be
    enabled by default, but may be optionally disabled.
  * Added file type recognition for compiled Python (`.pyc`) files.
  * Improved support for decrypting PDFs with empty passwords.
  * Fixed a warning when scanning some HTML files.
  * ClamOnAcc: Fixed an infinite loop when a watched directory
    does not exist.
  * ClamOnAcc: Fixed an infinite loop when a file has been deleted
    before a scan.
- New version: 1.2.0:
  * Added support for extracting Universal Disk Format (UDF)
    partitions.
  * Added an option to customize the size of ClamAV's clean file
    cache.
  * Raised the MaxScanSize limit so the total amount of data
    scanned when scanning a file or archive may exceed 4 gigabytes.
  * Added ability for Freshclam to use a client certificate PEM
    file and a private key PEM file for authentication to a private
    mirror.
  * Fix an issue extracting files from ISO9660 partitions where the
    files are listed in the plain ISO tree and there also exists an
    empty Joliet tree.
  * PID and socket are now located under /run/clamav/clamd.pid and
    /run/clamav/clamd.sock .
  * bsc#1211594: Fixed an issue where ClamAV does not abort the
    signature load process after partially loading an invalid
    signature.
- New version 1.1.0:
  * https://blog.clamav.net/2023/05/clamav-110-released.html
  * Added the ability to extract images embedded in HTML CSS
    &lt;style&gt; blocks.
  * Updated to Sigtool so that the --vba option will extract VBA
    code from Microsoft Office documents the same way that
    libclamav extracts VBA.
  * Added a new option --fail-if-cvd-older-than=days to clamscan
    and clamd, and FailIfCvdOlderThan to clamd.conf
  * Added a new function cl_cvdgetage() to the libclamav API.
  * Added a new function cl_engine_set_clcb_vba() to the
    libclamav API.
  * obsoletes clamav-ec32.patch.
- boo#1180296: Integrate clamonacc as a service.
- New version 1.0.1 LTS (including changes in 0.104 and 0.105):
  * As of ClamAV 0.104, CMake is required to build ClamAV.
  * As of ClamAV 0.105, Rust is now required to compile ClamAV.
  * Increased the default limits for file and scan size:
  * MaxScanSize: 100M to 400M
  * MaxFileSize: 25M to 100M
  * StreamMaxLength: 25M to 100M
  * PCREMaxFileSize: 25M to 100M
  * MaxEmbeddedPE: 10M to 40M
  * MaxHTMLNormalize: 10M to 40M
  * MaxScriptNormalize: 5M to 20M
  * MaxHTMLNoTags: 2M to 8M
  * Added image fuzzy hash subsignatures for logical signatures.
  * Support for decrypting read-only OLE2-based XLS files that are
    encrypted with the default password.
  * Overhauled the implementation of the all-match feature.
  * Added a new callback to the public API for inspecting file
    content during a scan at each layer of archive extraction.
  * Added a new function to the public API for unpacking CVD
    signature archives.
  * The option to build with an external TomsFastMath library has
    been removed. ClamAV requires non-default build options for
    TomsFastMath to support bigger floating point numbers.
  * For a full list of changes see the release announcements:
  * https://blog.clamav.net/2022/11/clamav-100-lts-released.html
  * https://blog.clamav.net/2022/05/clamav-01050-01043-01036-released.html
  * https://blog.clamav.net/2021/09/clamav-01040-released.html
- Build clamd with systemd support.
- Fix format strings on 32bit platforms (clamav-format.patch).
- Add missing endianness conversions (clamav-ec32.patch).
- Don't build on armv7l for now due to some test failures.
- Drop clamav-disable-yara.patch as yara cannot be disabled anymore</changelog>
  <changelog author="max@suse.com" date="1713787200">- New Version: 1.3.1:
  * CVE-2024-20380: Fixed a possible crash in the HTML file parser
    that could cause a denial-of-service (DoS) condition.
  * Updated select Rust dependencies to the latest versions.
  * Fixed a bug causing some text to be truncated when converting
    from UTF-16.
  * Fixed assorted complaints identified by Coverity static
    analysis.
  * Fixed a bug causing CVDs downloaded by the DatabaseCustomURL
    Freshclam config option to be pruned and then re-downloaded
    with every update.
  * Added the new 'valhalla' database name to the list of optional
    databases in preparation for future work.</changelog>
  <changelog author="bwiedemann@suse.com" date="1722254400">- Add upstream 1305.patch to fix tests (boo#1102840, https://github.com/Cisco-Talos/clamav/issues/1300)</changelog>
  <changelog author="suse+build@de-korte.org" date="1725451200">- New version 1.3.2:
  * CVE-2024-20506: Changed the logging module to disable following
    symlinks on Linux and Unix systems so as to prevent an attacker
    with existing access to the 'clamd' or 'freshclam' services from
    using a symlink to corrupt system files.
  * CVE-2024-20505: Fixed a possible out-of-bounds read bug in the PDF
    file parser that could cause a denial-of-service condition.
  * Removed unused Python modules from freshclam tests including
    deprecated 'cgi' module that is expected to cause test failures in
    Python 3.13.
  * Fix unit test caused by expiring signing certificate.
  * Fixed a build issue on Windows with newer versions of Rust. Also
    upgraded GitHub Actions imports to fix CI failures.
  * Fixed an unaligned pointer dereference issue on select architectures.
  * Fixes to Jenkins CI pipeline.
- Remove upstreamed 1305.patch</changelog>
  <changelog author="max@suse.com" date="1725969600">- New version 1.4.1:
  * [CVE-2024-20506, bsc#1230162]: Changed the logging module to
    disable following symlinks on Linux and Unix systems so as to
    prevent an attacker with existing access to the 'clamd' or
    'freshclam' services from using a symlink to corrupt system
    files.
  * [CVE-2024-20505, bsc#1230161]: Fixed a possible out-of-bounds
    read bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition.
  * https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html
- New version 1.4.0:
  * Added support for extracting ALZ archives.
  * Added support for extracting LHA/LZH archives.
  * Added the ability to disable image fuzzy hashing, if needed.
    For context, image fuzzy hashing is a detection mechanism
    useful for identifying malware by matching images included with
    the malware or phishing email/document.
  * https://blog.clamav.net/2024/08/clamav-140-feature-release-and-clamav.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734523200">- fix factory submission (clam.tcl, clamscan.log)</changelog>
  <changelog author="max@suse.com" date="1736510400">- bsc#1232242: Start clamonacc with --fdpass to avoid errors due to
  clamd not being able to access user files.</changelog>
  <changelog author="max@suse.com" date="1737547200">- New version 1.4.2:
  * CVE-2025-20128, bsc#1236307: Fixed a possible buffer overflow
    read bug in the OLE2 file parser that could cause a
    denial-of-service (DoS) condition.</changelog>
  <changelog author="max@suse.com" date="1737633600">- Drop the version dependency on libcurl. Building against versions
  older than 7.45 does not fail anymore, but disables support for
  fdpassing in clamonacc. This only affects SLE-12 up to SP3.</changelog>
  <changelog author="max@suse.com" date="1739188800">- bsc#1236949: Fix location of license files.</changelog>
  <changelog author="max@suse.com" date="1742817600">- bsc#1239957: Build with PIE.
- Eliminate some UTF-8 NBSP characters from the changes file.</changelog>
  <changelog author="max@suse.com" date="1748433600">- bsc#1243565: Add clamav-freshclam_test.patch to fix a race
  condition between the mockup servers started by different test
  cases in freshclam_test.py.</changelog>
  <changelog author="suse+build@de-korte.org" date="1750334400">- New version 1.4.3:
  ClamAV 1.4.3 is a patch release with the following fixes:
  * CVE-2025-20260, bsc#1245054: Fixed a possible buffer overflow
    write bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition or enable remote code
    execution. This issue only affects configurations where both:
  - The max file-size scan limit is set greater than or equal to 1024MB.
  - The max scan-size scan limit is set greater than or equal to 1025MB.
    The code flaw was present prior to version 1.0.0, but a change in
    version 1.0.0 that enables larger allocations based on untrusted data
    made it possible to trigger this bug.
    This issue affects all currently supported versions.
  * CVE-2025-20234, bsc#1245055: Fixed a possible buffer overflow
    read bug in the UDF file parser that may write to a temp file
    and thus disclose information, or it may crash and cause a
    denial-of-service (DoS) condition.
    This issue was introduced in version 1.2.0.
  * Fixed a possible use-after-free bug in the Xz decompression module in
    the bundled lzma-sdk library.
    This issue was fixed in the lzma-sdk version 18.03. ClamAV bundles a
    copy of the lzma-sdk with some performance changes specific to
    libclamav, plus select bug fixes like this one in lieu of a full
    upgrade to newer lzma-sdk.
    This issue affects all ClamAV versions at least as far back as 0.99.4.
  * Windows: Fixed a build install issue when a DLL dependency such as
    libcrypto has the exact same name as one provided by the Windows
    operating system.
- Renew clamav.keyring</changelog>
</package>
<package pkgid="72c553b7d6fffdfe0707b75400e3a88302bdc014a6c02326420399a61cfc48b0" name="libclamav12" arch="x86_64">
  <version epoch="0" ver="1.5.1" rel="150600.18.22.1"/>
  <changelog author="max@suse.com" date="1713787200">- New Version: 1.3.1:
  * CVE-2024-20380: Fixed a possible crash in the HTML file parser
    that could cause a denial-of-service (DoS) condition.
  * Updated select Rust dependencies to the latest versions.
  * Fixed a bug causing some text to be truncated when converting
    from UTF-16.
  * Fixed assorted complaints identified by Coverity static
    analysis.
  * Fixed a bug causing CVDs downloaded by the DatabaseCustomURL
    Freshclam config option to be pruned and then re-downloaded
    with every update.
  * Added the new 'valhalla' database name to the list of optional
    databases in preparation for future work.</changelog>
  <changelog author="bwiedemann@suse.com" date="1722254400">- Add upstream 1305.patch to fix tests (boo#1102840, https://github.com/Cisco-Talos/clamav/issues/1300)</changelog>
  <changelog author="suse+build@de-korte.org" date="1725451200">- New version 1.3.2:
  * CVE-2024-20506: Changed the logging module to disable following
    symlinks on Linux and Unix systems so as to prevent an attacker
    with existing access to the 'clamd' or 'freshclam' services from
    using a symlink to corrupt system files.
  * CVE-2024-20505: Fixed a possible out-of-bounds read bug in the PDF
    file parser that could cause a denial-of-service condition.
  * Removed unused Python modules from freshclam tests including
    deprecated 'cgi' module that is expected to cause test failures in
    Python 3.13.
  * Fix unit test caused by expiring signing certificate.
  * Fixed a build issue on Windows with newer versions of Rust. Also
    upgraded GitHub Actions imports to fix CI failures.
  * Fixed an unaligned pointer dereference issue on select architectures.
  * Fixes to Jenkins CI pipeline.
- Remove upstreamed 1305.patch</changelog>
  <changelog author="max@suse.com" date="1725969600">- New version 1.4.1:
  * [CVE-2024-20506, bsc#1230162]: Changed the logging module to
    disable following symlinks on Linux and Unix systems so as to
    prevent an attacker with existing access to the 'clamd' or
    'freshclam' services from using a symlink to corrupt system
    files.
  * [CVE-2024-20505, bsc#1230161]: Fixed a possible out-of-bounds
    read bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition.
  * https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html
- New version 1.4.0:
  * Added support for extracting ALZ archives.
  * Added support for extracting LHA/LZH archives.
  * Added the ability to disable image fuzzy hashing, if needed.
    For context, image fuzzy hashing is a detection mechanism
    useful for identifying malware by matching images included with
    the malware or phishing email/document.
  * https://blog.clamav.net/2024/08/clamav-140-feature-release-and-clamav.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734523200">- fix factory submission (clam.tcl, clamscan.log)</changelog>
  <changelog author="max@suse.com" date="1736510400">- bsc#1232242: Start clamonacc with --fdpass to avoid errors due to
  clamd not being able to access user files.</changelog>
  <changelog author="max@suse.com" date="1737547200">- New version 1.4.2:
  * CVE-2025-20128, bsc#1236307: Fixed a possible buffer overflow
    read bug in the OLE2 file parser that could cause a
    denial-of-service (DoS) condition.</changelog>
  <changelog author="max@suse.com" date="1737633600">- Drop the version dependency on libcurl. Building against versions
  older than 7.45 does not fail anymore, but disables support for
  fdpassing in clamonacc. This only affects SLE-12 up to SP3.</changelog>
  <changelog author="max@suse.com" date="1739188800">- bsc#1236949: Fix location of license files.</changelog>
  <changelog author="max@suse.com" date="1742817600">- bsc#1239957: Build with PIE.
- Eliminate some UTF-8 NBSP characters from the changes file.</changelog>
  <changelog author="max@suse.com" date="1748433600">- bsc#1243565: Add clamav-freshclam_test.patch to fix a race
  condition between the mockup servers started by different test
  cases in freshclam_test.py.</changelog>
  <changelog author="suse+build@de-korte.org" date="1750334400">- New version 1.4.3:
  ClamAV 1.4.3 is a patch release with the following fixes:
  * CVE-2025-20260, bsc#1245054: Fixed a possible buffer overflow
    write bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition or enable remote code
    execution. This issue only affects configurations where both:
  - The max file-size scan limit is set greater than or equal to 1024MB.
  - The max scan-size scan limit is set greater than or equal to 1025MB.
    The code flaw was present prior to version 1.0.0, but a change in
    version 1.0.0 that enables larger allocations based on untrusted data
    made it possible to trigger this bug.
    This issue affects all currently supported versions.
  * CVE-2025-20234, bsc#1245055: Fixed a possible buffer overflow
    read bug in the UDF file parser that may write to a temp file
    and thus disclose information, or it may crash and cause a
    denial-of-service (DoS) condition.
    This issue was introduced in version 1.2.0.
  * Fixed a possible use-after-free bug in the Xz decompression module in
    the bundled lzma-sdk library.
    This issue was fixed in the lzma-sdk version 18.03. ClamAV bundles a
    copy of the lzma-sdk with some performance changes specific to
    libclamav, plus select bug fixes like this one in lieu of a full
    upgrade to newer lzma-sdk.
    This issue affects all ClamAV versions at least as far back as 0.99.4.
  * Windows: Fixed a build install issue when a DLL dependency such as
    libcrypto has the exact same name as one provided by the Windows
    operating system.
- Renew clamav.keyring</changelog>
  <changelog author="max@suse.com" date="1751284800">- bsc#1240363, clamav-disable-administrative-commands.patch: clamd:
  Add an option to toggle SHUTDOWN, RELOAD, STATS and VERSION.</changelog>
  <changelog author="max@suse.com" date="1759924800">- New version 1.5.0:
  * Added checks to determine if an OLE2-based Microsoft Office
    document is encrypted.
  * Added the ability to record URIs found in HTML if the
    generate-JSON-metadata feature is enabled.
  * Added the ability to record URIs found in PDFs if the
    generate-JSON-metadata feature is enabled.
  * Added regex support for the clamd.conf OnAccessExcludePath
    config option.
  * Added CVD signing/verification with external .sign files.
  * Freshclam, ClamD, ClamScan, and Sigtool: Added an option to
    enable FIPS-like limits disabling MD5 and SHA1 from being used
    for verifying digital signatures or for being used to trust a
    file when checking for false positives
  * ClamD: Added an option to disable select administrative
    commands including SHUTDOWN, RELOAD, STATS and VERSION.
  * libclamav: Added extended hashing functions with a "flags"
    parameter that allows the caller to choose if they want to
    bypass FIPS hash algorithm limits.
  * See the release announcement for the full list of changes:
    https://blog.clamav.net/2025/10/clamav-150-released.html
- Obsoleted patches:
  * clamav-freshclam_test.patch
  * clamav-disable-administrative-commands.patch
  * clamav-fips.patch
- Use macros for library versions
- Remove service symlinks: rcclamd, rcfreshclam, rcclamav-milter,
  and clamonacc.
- Use rust 1.86 for SLE-12 and SLE-15-SP2.</changelog>
  <changelog author="max@suse.com" date="1760443200">- Add json-c-json-c-0.18-20240915.tar.gz and link it statically
  into libclamav on SLE-12, because version 0.12 is too old.</changelog>
  <changelog author="max@suse.com" date="1760616000">- New version: 1.5.1:
  * Fixed a significant performance issue when scanning some PE
    files.
  * Fixed an issue recording file entries from a ZIP archive
    central directory which resulted in
    "Heuristics.Limits.Exceeded.MaxFiles" alerts when using the
    ClamScan --alert-exceeds-max command line option or ClamD
    AlertExceedsMax config file option.
  * Improved performance when scanning TNEF email attachments.
  * Fixed an issue with recording metadata for OOXML office
    documents.
  * Fixed an issue with signature matches for VBA in OLE2 office
    documents.
  * Loosened overly restrictive rules for embedded file
    identification and increased the limit for finding PE files
    embedded in other PE files.
  * Fixed an issue with extracting some RAR archives embedded in
    other files.
  * Fixed an issue with calculating fuzzy hashes affecting some
    images by updating the version for several Rust library
    dependencies.</changelog>
  <changelog author="max@suse.com" date="1762257600">- Add clamav-workaround.patch to work around symbol removals in
  version 1.5.0 and 1.5.1.</changelog>
  <changelog author="bwiedemann@suse.com" date="1763208000">- Build with older rust 1.87 for reproducible builds (boo#1249404)</changelog>
  <changelog author="max@suse.com" date="1763726400">- Provide a better fix for boo#1249404 by disabling debug mode.</changelog>
  <changelog author="max@suse.com" date="1764331200">- Fix testsuite error on SLE-15-SP6 by falling back to rust1.86.</changelog>
</package>
<package pkgid="8873d4326312727407c8157e4d5ae14bdad980a7ae157b20166d0ce8bbc0d0a0" name="libclamav12" arch="x86_64">
  <version epoch="0" ver="1.5.2" rel="150600.18.25.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1734523200">- fix factory submission (clam.tcl, clamscan.log)</changelog>
  <changelog author="max@suse.com" date="1736510400">- bsc#1232242: Start clamonacc with --fdpass to avoid errors due to
  clamd not being able to access user files.</changelog>
  <changelog author="max@suse.com" date="1737547200">- New version 1.4.2:
  * CVE-2025-20128, bsc#1236307: Fixed a possible buffer overflow
    read bug in the OLE2 file parser that could cause a
    denial-of-service (DoS) condition.</changelog>
  <changelog author="max@suse.com" date="1737633600">- Drop the version dependency on libcurl. Building against versions
  older than 7.45 does not fail anymore, but disables support for
  fdpassing in clamonacc. This only affects SLE-12 up to SP3.</changelog>
  <changelog author="max@suse.com" date="1739188800">- bsc#1236949: Fix location of license files.</changelog>
  <changelog author="max@suse.com" date="1742817600">- bsc#1239957: Build with PIE.
- Eliminate some UTF-8 NBSP characters from the changes file.</changelog>
  <changelog author="max@suse.com" date="1748433600">- bsc#1243565: Add clamav-freshclam_test.patch to fix a race
  condition between the mockup servers started by different test
  cases in freshclam_test.py.</changelog>
  <changelog author="suse+build@de-korte.org" date="1750334400">- New version 1.4.3:
  ClamAV 1.4.3 is a patch release with the following fixes:
  * CVE-2025-20260, bsc#1245054: Fixed a possible buffer overflow
    write bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition or enable remote code
    execution. This issue only affects configurations where both:
  - The max file-size scan limit is set greater than or equal to 1024MB.
  - The max scan-size scan limit is set greater than or equal to 1025MB.
    The code flaw was present prior to version 1.0.0, but a change in
    version 1.0.0 that enables larger allocations based on untrusted data
    made it possible to trigger this bug.
    This issue affects all currently supported versions.
  * CVE-2025-20234, bsc#1245055: Fixed a possible buffer overflow
    read bug in the UDF file parser that may write to a temp file
    and thus disclose information, or it may crash and cause a
    denial-of-service (DoS) condition.
    This issue was introduced in version 1.2.0.
  * Fixed a possible use-after-free bug in the Xz decompression module in
    the bundled lzma-sdk library.
    This issue was fixed in the lzma-sdk version 18.03. ClamAV bundles a
    copy of the lzma-sdk with some performance changes specific to
    libclamav, plus select bug fixes like this one in lieu of a full
    upgrade to newer lzma-sdk.
    This issue affects all ClamAV versions at least as far back as 0.99.4.
  * Windows: Fixed a build install issue when a DLL dependency such as
    libcrypto has the exact same name as one provided by the Windows
    operating system.
- Renew clamav.keyring</changelog>
  <changelog author="max@suse.com" date="1751284800">- bsc#1240363, clamav-disable-administrative-commands.patch: clamd:
  Add an option to toggle SHUTDOWN, RELOAD, STATS and VERSION.</changelog>
  <changelog author="max@suse.com" date="1759924800">- New version 1.5.0:
  * Added checks to determine if an OLE2-based Microsoft Office
    document is encrypted.
  * Added the ability to record URIs found in HTML if the
    generate-JSON-metadata feature is enabled.
  * Added the ability to record URIs found in PDFs if the
    generate-JSON-metadata feature is enabled.
  * Added regex support for the clamd.conf OnAccessExcludePath
    config option.
  * Added CVD signing/verification with external .sign files.
  * Freshclam, ClamD, ClamScan, and Sigtool: Added an option to
    enable FIPS-like limits disabling MD5 and SHA1 from being used
    for verifying digital signatures or for being used to trust a
    file when checking for false positives (bsc#1221954).
  * ClamD: Added an option to disable select administrative
    commands including SHUTDOWN, RELOAD, STATS and VERSION.
  * libclamav: Added extended hashing functions with a "flags"
    parameter that allows the caller to choose if they want to
    bypass FIPS hash algorithm limits.
  * See the release announcement for the full list of changes:
    https://blog.clamav.net/2025/10/clamav-150-released.html
- Obsoleted patches:
  * clamav-freshclam_test.patch
  * clamav-disable-administrative-commands.patch
  * clamav-fips.patch
- Use macros for library versions
- Remove service symlinks: rcclamd, rcfreshclam, rcclamav-milter,
  and clamonacc.
- Use rust 1.86 for SLE-12 and SLE-15-SP2.</changelog>
  <changelog author="max@suse.com" date="1760443200">- Add json-c-json-c-0.18-20240915.tar.gz and link it statically
  into libclamav on SLE-12, because version 0.12 is too old.</changelog>
  <changelog author="max@suse.com" date="1760616000">- New version: 1.5.1:
  * Fixed a significant performance issue when scanning some PE
    files.
  * Fixed an issue recording file entries from a ZIP archive
    central directory which resulted in
    "Heuristics.Limits.Exceeded.MaxFiles" alerts when using the
    ClamScan --alert-exceeds-max command line option or ClamD
    AlertExceedsMax config file option.
  * Improved performance when scanning TNEF email attachments.
  * Fixed an issue with recording metadata for OOXML office
    documents.
  * Fixed an issue with signature matches for VBA in OLE2 office
    documents.
  * Loosened overly restrictive rules for embedded file
    identification and increased the limit for finding PE files
    embedded in other PE files.
  * Fixed an issue with extracting some RAR archives embedded in
    other files.
  * Fixed an issue with calculating fuzzy hashes affecting some
    images by updating the version for several Rust library
    dependencies.</changelog>
  <changelog author="max@suse.com" date="1762257600">- Add clamav-workaround.patch to work around symbol removals in
  version 1.5.0 and 1.5.1.</changelog>
  <changelog author="bwiedemann@suse.com" date="1763208000">- Build with older rust 1.87 for reproducible builds (boo#1249404)</changelog>
  <changelog author="max@suse.com" date="1763726400">- Provide a better fix for boo#1249404 by disabling debug mode.</changelog>
  <changelog author="max@suse.com" date="1764331200">- Fix testsuite error on SLE-15-SP6 by falling back to rust1.86.</changelog>
  <changelog author="max@suse.com" date="1770724800">- jsc-PED-14819: Support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1770984000">- bsc#1258072: Require main and library packages to be of the same
  version and release. Given that all the core functionality is
  in the libraries it makes little sense to update the main
  package alone.</changelog>
  <changelog author="max@suse.com" date="1772712000">- New version 1.5.2:
  * bsc#1259207, CVE-2026-20031: Fixed an error handling bug in the
    HTML file parser that may crash the program and cause a
    denial-of-service (DoS) condition. This issue was introduced in
    version 1.1.0.
  * Fixed a possible infinite loop when scanning some JPEG files by
    upgrading affected ClamAV dependency, a Rust image library.
  * The CVD verification process will now ignore certificate files
    in the CVD certs directory when the user lacks read permissions.
  * Freshclam: Fix CLD verification bug with PrivateMirror option.
  * Upgraded the Rust bytes dependency to a newer version to
    resolve RUSTSEC-2026-0007 advisory.
  * Fixed a possible crash caused by invalid pointer alignment on
    some platforms.
  * Minimal required Rust version is now 1.87.</changelog>
  <changelog author="max@suse.com" date="1773316800">- Disable build for 32 bit ix86 because of testsuite failures with
  rust &gt;= 1.87 that upstream is not planning to fix.
- Run the test suite on all SUSE releases.</changelog>
</package>
<package pkgid="56491450e6a14ee7de69b29fae2171c29df3d348cc3709dcba5609b7796af16f" name="libclammspack0" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="150600.18.12.1"/>
  <changelog author="suse+build@de-korte.org" date="1641988800">- Update to 0.103.5
  * CVE-2022-20698: Fix for invalid pointer read that may cause a crash.
    This issue affects 0.104.1, 0.103.4 and prior when ClamAV is compiled
    with libjson-c and the CL_SCAN_GENERAL_COLLECT_METADATA scan option
    (the clamscan --gen-json option) is enabled. (bsc#1194731)
  * Fixed ability to disable the file size limit with libclamav C API,
    like this:
    cl_engine_set_num(engine, CL_ENGINE_MAX_FILESIZE, 0);
    This issue didn't affect ClamD or ClamScan which also can disable the
    limit by setting it to zero using MaxFileSize 0 in clamd.conf for ClamD,
    or clamscan --max-filesize=0 for ClamScan.
    Note: Internally, the max file size is still set to 2 GiB. Disabling the
    limit for a scan will fall back on the internal 2 GiB limitation.
  * Increased the maximum line length for ClamAV config files from 512 bytes
    to 1,024 bytes to allow for longer config option strings.
  * SigTool: Fix insufficient buffer size for --list-sigs that caused a
    failure when listing a database containing one or more very long
    signatures. This fix was backported from 0.104.</changelog>
  <changelog author="meissner@suse.com" date="1649764800">- https source urls</changelog>
  <changelog author="suse+build@de-korte.org" date="1651752000">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
  <changelog author="ecsos@opensuse.org" date="1659700800">- Update to 0.103.7 (bsc#1202986)
  - Zip parser: tolerate 2-byte overlap in file entries
  - Fix bug with logical signature Intermediates feature
  - Update to UnRAR v6.1.7
  - Patch UnRAR: allow skipping files in solid archives
  - Patch UnRAR: limit dict winsize to 1GB</changelog>
  <changelog author="suse+build@de-korte.org" date="1676462400">- Update to 0.103.8
  * CVE-2023-20032: Fixed a possible remote code execution vulnerability
    in the HFS+ file parser. Issue affects versions 1.0.0 and earlier,
    0.105.1 and earlier, and 0.103.7 and earlier. (bsc#1208363)
  * CVE-2023-20052: Fixed a possible remote information leak
    vulnerability in the DMG file parser. Issue affects versions 1.0.0
    and earlier, 0.105.1 and earlier, and 0.103.7 and earlier.
    (bsc#1208365)
  * Update vendored libmspack library to version 0.11alpha.
    (bsc#1103032: CVE-2018-14679)
- Package huge .html documentation in a separate subpackage.</changelog>
  <changelog author="suse+build@de-korte.org" date="1692187200">- Update to 0.103.9
  * CVE-2023-20197: Fixed a possible denial of service vulnerability in
    the HFS+ file parser. This issue affects versions 1.1.0, 1.0.1 through
    1.0.0, 0.105.2 through 0.105.0, 0.104.4 through 0.104.0, and 0.103.8
    through 0.103.0. (boo#1214342)
  * Fixed compiler warnings that may turn into errors in Clang 16.</changelog>
  <changelog author="max@suse.com" date="1692360000">- Renew clamav.keyring .</changelog>
  <changelog author="suse+build@de-korte.org" date="1698235200">- Update to 0.103.11
  * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.12.
  * Windows: libjson-c 0.17 compatibility fix. with ssize_t type definition.
  * Windows: Update build system to use OpenSSL 3 and PThreads-Win32 v3.
- Update to 0.103.10
  * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.10.
    (bsc#1216625, CVE-2023-40477)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="max@suse.com" date="1710504000">- New version: 1.3.0:
  * Added support for extracting and scanning attachments found in
    Microsoft OneNote section files. OneNote parsing will be
    enabled by default, but may be optionally disabled.
  * Added file type recognition for compiled Python (`.pyc`) files.
  * Improved support for decrypting PDFs with empty passwords.
  * Fixed a warning when scanning some HTML files.
  * ClamOnAcc: Fixed an infinite loop when a watched directory
    does not exist.
  * ClamOnAcc: Fixed an infinite loop when a file has been deleted
    before a scan.
- New version: 1.2.0:
  * Added support for extracting Universal Disk Format (UDF)
    partitions.
  * Added an option to customize the size of ClamAV's clean file
    cache.
  * Raised the MaxScanSize limit so the total amount of data
    scanned when scanning a file or archive may exceed 4 gigabytes.
  * Added ability for Freshclam to use a client certificate PEM
    file and a private key PEM file for authentication to a private
    mirror.
  * Fix an issue extracting files from ISO9660 partitions where the
    files are listed in the plain ISO tree and there also exists an
    empty Joliet tree.
  * PID and socket are now located under /run/clamav/clamd.pid and
    /run/clamav/clamd.sock .
  * bsc#1211594: Fixed an issue where ClamAV does not abort the
    signature load process after partially loading an invalid
    signature.
- New version 1.1.0:
  * https://blog.clamav.net/2023/05/clamav-110-released.html
  * Added the ability to extract images embedded in HTML CSS
    &lt;style&gt; blocks.
  * Updated to Sigtool so that the --vba option will extract VBA
    code from Microsoft Office documents the same way that
    libclamav extracts VBA.
  * Added a new option --fail-if-cvd-older-than=days to clamscan
    and clamd, and FailIfCvdOlderThan to clamd.conf
  * Added a new function cl_cvdgetage() to the libclamav API.
  * Added a new function cl_engine_set_clcb_vba() to the
    libclamav API.
  * obsoletes clamav-ec32.patch.
- boo#1180296: Integrate clamonacc as a service.
- New version 1.0.1 LTS (including changes in 0.104 and 0.105):
  * As of ClamAV 0.104, CMake is required to build ClamAV.
  * As of ClamAV 0.105, Rust is now required to compile ClamAV.
  * Increased the default limits for file and scan size:
  * MaxScanSize: 100M to 400M
  * MaxFileSize: 25M to 100M
  * StreamMaxLength: 25M to 100M
  * PCREMaxFileSize: 25M to 100M
  * MaxEmbeddedPE: 10M to 40M
  * MaxHTMLNormalize: 10M to 40M
  * MaxScriptNormalize: 5M to 20M
  * MaxHTMLNoTags: 2M to 8M
  * Added image fuzzy hash subsignatures for logical signatures.
  * Support for decrypting read-only OLE2-based XLS files that are
    encrypted with the default password.
  * Overhauled the implementation of the all-match feature.
  * Added a new callback to the public API for inspecting file
    content during a scan at each layer of archive extraction.
  * Added a new function to the public API for unpacking CVD
    signature archives.
  * The option to build with an external TomsFastMath library has
    been removed. ClamAV requires non-default build options for
    TomsFastMath to support bigger floating point numbers.
  * For a full list of changes see the release announcements:
  * https://blog.clamav.net/2022/11/clamav-100-lts-released.html
  * https://blog.clamav.net/2022/05/clamav-01050-01043-01036-released.html
  * https://blog.clamav.net/2021/09/clamav-01040-released.html
- Build clamd with systemd support.
- Fix format strings on 32bit platforms (clamav-format.patch).
- Add missing endianness conversions (clamav-ec32.patch).
- Don't build on armv7l for now due to some test failures.
- Drop clamav-disable-yara.patch as yara cannot be disabled anymore</changelog>
  <changelog author="max@suse.com" date="1713787200">- New Version: 1.3.1:
  * CVE-2024-20380: Fixed a possible crash in the HTML file parser
    that could cause a denial-of-service (DoS) condition.
  * Updated select Rust dependencies to the latest versions.
  * Fixed a bug causing some text to be truncated when converting
    from UTF-16.
  * Fixed assorted complaints identified by Coverity static
    analysis.
  * Fixed a bug causing CVDs downloaded by the DatabaseCustomURL
    Freshclam config option to be pruned and then re-downloaded
    with every update.
  * Added the new 'valhalla' database name to the list of optional
    databases in preparation for future work.</changelog>
  <changelog author="bwiedemann@suse.com" date="1722254400">- Add upstream 1305.patch to fix tests (boo#1102840, https://github.com/Cisco-Talos/clamav/issues/1300)</changelog>
  <changelog author="suse+build@de-korte.org" date="1725451200">- New version 1.3.2:
  * CVE-2024-20506: Changed the logging module to disable following
    symlinks on Linux and Unix systems so as to prevent an attacker
    with existing access to the 'clamd' or 'freshclam' services from
    using a symlink to corrupt system files.
  * CVE-2024-20505: Fixed a possible out-of-bounds read bug in the PDF
    file parser that could cause a denial-of-service condition.
  * Removed unused Python modules from freshclam tests including
    deprecated 'cgi' module that is expected to cause test failures in
    Python 3.13.
  * Fix unit test caused by expiring signing certificate.
  * Fixed a build issue on Windows with newer versions of Rust. Also
    upgraded GitHub Actions imports to fix CI failures.
  * Fixed an unaligned pointer dereference issue on select architectures.
  * Fixes to Jenkins CI pipeline.
- Remove upstreamed 1305.patch</changelog>
  <changelog author="max@suse.com" date="1725969600">- New version 1.4.1:
  * [CVE-2024-20506, bsc#1230162]: Changed the logging module to
    disable following symlinks on Linux and Unix systems so as to
    prevent an attacker with existing access to the 'clamd' or
    'freshclam' services from using a symlink to corrupt system
    files.
  * [CVE-2024-20505, bsc#1230161]: Fixed a possible out-of-bounds
    read bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition.
  * https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html
- New version 1.4.0:
  * Added support for extracting ALZ archives.
  * Added support for extracting LHA/LZH archives.
  * Added the ability to disable image fuzzy hashing, if needed.
    For context, image fuzzy hashing is a detection mechanism
    useful for identifying malware by matching images included with
    the malware or phishing email/document.
  * https://blog.clamav.net/2024/08/clamav-140-feature-release-and-clamav.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734523200">- fix factory submission (clam.tcl, clamscan.log)</changelog>
  <changelog author="max@suse.com" date="1736510400">- bsc#1232242: Start clamonacc with --fdpass to avoid errors due to
  clamd not being able to access user files.</changelog>
  <changelog author="max@suse.com" date="1737547200">- New version 1.4.2:
  * CVE-2025-20128, bsc#1236307: Fixed a possible buffer overflow
    read bug in the OLE2 file parser that could cause a
    denial-of-service (DoS) condition.</changelog>
  <changelog author="max@suse.com" date="1737633600">- Drop the version dependency on libcurl. Building against versions
  older than 7.45 does not fail anymore, but disables support for
  fdpassing in clamonacc. This only affects SLE-12 up to SP3.</changelog>
  <changelog author="max@suse.com" date="1739188800">- bsc#1236949: Fix location of license files.</changelog>
  <changelog author="max@suse.com" date="1742817600">- bsc#1239957: Build with PIE.
- Eliminate some UTF-8 NBSP characters from the changes file.</changelog>
</package>
<package pkgid="63a9a4a56558e9a691f7815a0f696686745f190bb87e56eff61e27c825d387b5" name="libclammspack0" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="150600.18.15.1"/>
  <changelog author="meissner@suse.com" date="1649764800">- https source urls</changelog>
  <changelog author="suse+build@de-korte.org" date="1651752000">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
  <changelog author="ecsos@opensuse.org" date="1659700800">- Update to 0.103.7 (bsc#1202986)
  - Zip parser: tolerate 2-byte overlap in file entries
  - Fix bug with logical signature Intermediates feature
  - Update to UnRAR v6.1.7
  - Patch UnRAR: allow skipping files in solid archives
  - Patch UnRAR: limit dict winsize to 1GB</changelog>
  <changelog author="suse+build@de-korte.org" date="1676462400">- Update to 0.103.8
  * CVE-2023-20032: Fixed a possible remote code execution vulnerability
    in the HFS+ file parser. Issue affects versions 1.0.0 and earlier,
    0.105.1 and earlier, and 0.103.7 and earlier. (bsc#1208363)
  * CVE-2023-20052: Fixed a possible remote information leak
    vulnerability in the DMG file parser. Issue affects versions 1.0.0
    and earlier, 0.105.1 and earlier, and 0.103.7 and earlier.
    (bsc#1208365)
  * Update vendored libmspack library to version 0.11alpha.
    (bsc#1103032: CVE-2018-14679)
- Package huge .html documentation in a separate subpackage.</changelog>
  <changelog author="suse+build@de-korte.org" date="1692187200">- Update to 0.103.9
  * CVE-2023-20197: Fixed a possible denial of service vulnerability in
    the HFS+ file parser. This issue affects versions 1.1.0, 1.0.1 through
    1.0.0, 0.105.2 through 0.105.0, 0.104.4 through 0.104.0, and 0.103.8
    through 0.103.0. (boo#1214342)
  * Fixed compiler warnings that may turn into errors in Clang 16.</changelog>
  <changelog author="max@suse.com" date="1692360000">- Renew clamav.keyring .</changelog>
  <changelog author="suse+build@de-korte.org" date="1698235200">- Update to 0.103.11
  * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.12.
  * Windows: libjson-c 0.17 compatibility fix. with ssize_t type definition.
  * Windows: Update build system to use OpenSSL 3 and PThreads-Win32 v3.
- Update to 0.103.10
  * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.10.
    (bsc#1216625, CVE-2023-40477)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="max@suse.com" date="1710504000">- New version: 1.3.0:
  * Added support for extracting and scanning attachments found in
    Microsoft OneNote section files. OneNote parsing will be
    enabled by default, but may be optionally disabled.
  * Added file type recognition for compiled Python (`.pyc`) files.
  * Improved support for decrypting PDFs with empty passwords.
  * Fixed a warning when scanning some HTML files.
  * ClamOnAcc: Fixed an infinite loop when a watched directory
    does not exist.
  * ClamOnAcc: Fixed an infinite loop when a file has been deleted
    before a scan.
- New version: 1.2.0:
  * Added support for extracting Universal Disk Format (UDF)
    partitions.
  * Added an option to customize the size of ClamAV's clean file
    cache.
  * Raised the MaxScanSize limit so the total amount of data
    scanned when scanning a file or archive may exceed 4 gigabytes.
  * Added ability for Freshclam to use a client certificate PEM
    file and a private key PEM file for authentication to a private
    mirror.
  * Fix an issue extracting files from ISO9660 partitions where the
    files are listed in the plain ISO tree and there also exists an
    empty Joliet tree.
  * PID and socket are now located under /run/clamav/clamd.pid and
    /run/clamav/clamd.sock .
  * bsc#1211594: Fixed an issue where ClamAV does not abort the
    signature load process after partially loading an invalid
    signature.
- New version 1.1.0:
  * https://blog.clamav.net/2023/05/clamav-110-released.html
  * Added the ability to extract images embedded in HTML CSS
    &lt;style&gt; blocks.
  * Updated to Sigtool so that the --vba option will extract VBA
    code from Microsoft Office documents the same way that
    libclamav extracts VBA.
  * Added a new option --fail-if-cvd-older-than=days to clamscan
    and clamd, and FailIfCvdOlderThan to clamd.conf
  * Added a new function cl_cvdgetage() to the libclamav API.
  * Added a new function cl_engine_set_clcb_vba() to the
    libclamav API.
  * obsoletes clamav-ec32.patch.
- boo#1180296: Integrate clamonacc as a service.
- New version 1.0.1 LTS (including changes in 0.104 and 0.105):
  * As of ClamAV 0.104, CMake is required to build ClamAV.
  * As of ClamAV 0.105, Rust is now required to compile ClamAV.
  * Increased the default limits for file and scan size:
  * MaxScanSize: 100M to 400M
  * MaxFileSize: 25M to 100M
  * StreamMaxLength: 25M to 100M
  * PCREMaxFileSize: 25M to 100M
  * MaxEmbeddedPE: 10M to 40M
  * MaxHTMLNormalize: 10M to 40M
  * MaxScriptNormalize: 5M to 20M
  * MaxHTMLNoTags: 2M to 8M
  * Added image fuzzy hash subsignatures for logical signatures.
  * Support for decrypting read-only OLE2-based XLS files that are
    encrypted with the default password.
  * Overhauled the implementation of the all-match feature.
  * Added a new callback to the public API for inspecting file
    content during a scan at each layer of archive extraction.
  * Added a new function to the public API for unpacking CVD
    signature archives.
  * The option to build with an external TomsFastMath library has
    been removed. ClamAV requires non-default build options for
    TomsFastMath to support bigger floating point numbers.
  * For a full list of changes see the release announcements:
  * https://blog.clamav.net/2022/11/clamav-100-lts-released.html
  * https://blog.clamav.net/2022/05/clamav-01050-01043-01036-released.html
  * https://blog.clamav.net/2021/09/clamav-01040-released.html
- Build clamd with systemd support.
- Fix format strings on 32bit platforms (clamav-format.patch).
- Add missing endianness conversions (clamav-ec32.patch).
- Don't build on armv7l for now due to some test failures.
- Drop clamav-disable-yara.patch as yara cannot be disabled anymore</changelog>
  <changelog author="max@suse.com" date="1713787200">- New Version: 1.3.1:
  * CVE-2024-20380: Fixed a possible crash in the HTML file parser
    that could cause a denial-of-service (DoS) condition.
  * Updated select Rust dependencies to the latest versions.
  * Fixed a bug causing some text to be truncated when converting
    from UTF-16.
  * Fixed assorted complaints identified by Coverity static
    analysis.
  * Fixed a bug causing CVDs downloaded by the DatabaseCustomURL
    Freshclam config option to be pruned and then re-downloaded
    with every update.
  * Added the new 'valhalla' database name to the list of optional
    databases in preparation for future work.</changelog>
  <changelog author="bwiedemann@suse.com" date="1722254400">- Add upstream 1305.patch to fix tests (boo#1102840, https://github.com/Cisco-Talos/clamav/issues/1300)</changelog>
  <changelog author="suse+build@de-korte.org" date="1725451200">- New version 1.3.2:
  * CVE-2024-20506: Changed the logging module to disable following
    symlinks on Linux and Unix systems so as to prevent an attacker
    with existing access to the 'clamd' or 'freshclam' services from
    using a symlink to corrupt system files.
  * CVE-2024-20505: Fixed a possible out-of-bounds read bug in the PDF
    file parser that could cause a denial-of-service condition.
  * Removed unused Python modules from freshclam tests including
    deprecated 'cgi' module that is expected to cause test failures in
    Python 3.13.
  * Fix unit test caused by expiring signing certificate.
  * Fixed a build issue on Windows with newer versions of Rust. Also
    upgraded GitHub Actions imports to fix CI failures.
  * Fixed an unaligned pointer dereference issue on select architectures.
  * Fixes to Jenkins CI pipeline.
- Remove upstreamed 1305.patch</changelog>
  <changelog author="max@suse.com" date="1725969600">- New version 1.4.1:
  * [CVE-2024-20506, bsc#1230162]: Changed the logging module to
    disable following symlinks on Linux and Unix systems so as to
    prevent an attacker with existing access to the 'clamd' or
    'freshclam' services from using a symlink to corrupt system
    files.
  * [CVE-2024-20505, bsc#1230161]: Fixed a possible out-of-bounds
    read bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition.
  * https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html
- New version 1.4.0:
  * Added support for extracting ALZ archives.
  * Added support for extracting LHA/LZH archives.
  * Added the ability to disable image fuzzy hashing, if needed.
    For context, image fuzzy hashing is a detection mechanism
    useful for identifying malware by matching images included with
    the malware or phishing email/document.
  * https://blog.clamav.net/2024/08/clamav-140-feature-release-and-clamav.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734523200">- fix factory submission (clam.tcl, clamscan.log)</changelog>
  <changelog author="max@suse.com" date="1736510400">- bsc#1232242: Start clamonacc with --fdpass to avoid errors due to
  clamd not being able to access user files.</changelog>
  <changelog author="max@suse.com" date="1737547200">- New version 1.4.2:
  * CVE-2025-20128, bsc#1236307: Fixed a possible buffer overflow
    read bug in the OLE2 file parser that could cause a
    denial-of-service (DoS) condition.</changelog>
  <changelog author="max@suse.com" date="1737633600">- Drop the version dependency on libcurl. Building against versions
  older than 7.45 does not fail anymore, but disables support for
  fdpassing in clamonacc. This only affects SLE-12 up to SP3.</changelog>
  <changelog author="max@suse.com" date="1739188800">- bsc#1236949: Fix location of license files.</changelog>
  <changelog author="max@suse.com" date="1742817600">- bsc#1239957: Build with PIE.
- Eliminate some UTF-8 NBSP characters from the changes file.</changelog>
  <changelog author="max@suse.com" date="1748433600">- bsc#1243565: Add clamav-freshclam_test.patch to fix a race
  condition between the mockup servers started by different test
  cases in freshclam_test.py.</changelog>
</package>
<package pkgid="644f8e4e807e2538d65c7b1cc70c0446e2b8e0f5ddbe512c3dfc181c117d2100" name="libclammspack0" arch="x86_64">
  <version epoch="0" ver="1.4.3" rel="150600.18.18.1"/>
  <changelog author="suse+build@de-korte.org" date="1651752000">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
  <changelog author="ecsos@opensuse.org" date="1659700800">- Update to 0.103.7 (bsc#1202986)
  - Zip parser: tolerate 2-byte overlap in file entries
  - Fix bug with logical signature Intermediates feature
  - Update to UnRAR v6.1.7
  - Patch UnRAR: allow skipping files in solid archives
  - Patch UnRAR: limit dict winsize to 1GB</changelog>
  <changelog author="suse+build@de-korte.org" date="1676462400">- Update to 0.103.8
  * CVE-2023-20032: Fixed a possible remote code execution vulnerability
    in the HFS+ file parser. Issue affects versions 1.0.0 and earlier,
    0.105.1 and earlier, and 0.103.7 and earlier. (bsc#1208363)
  * CVE-2023-20052: Fixed a possible remote information leak
    vulnerability in the DMG file parser. Issue affects versions 1.0.0
    and earlier, 0.105.1 and earlier, and 0.103.7 and earlier.
    (bsc#1208365)
  * Update vendored libmspack library to version 0.11alpha.
    (bsc#1103032: CVE-2018-14679)
- Package huge .html documentation in a separate subpackage.</changelog>
  <changelog author="suse+build@de-korte.org" date="1692187200">- Update to 0.103.9
  * CVE-2023-20197: Fixed a possible denial of service vulnerability in
    the HFS+ file parser. This issue affects versions 1.1.0, 1.0.1 through
    1.0.0, 0.105.2 through 0.105.0, 0.104.4 through 0.104.0, and 0.103.8
    through 0.103.0. (boo#1214342)
  * Fixed compiler warnings that may turn into errors in Clang 16.</changelog>
  <changelog author="max@suse.com" date="1692360000">- Renew clamav.keyring .</changelog>
  <changelog author="suse+build@de-korte.org" date="1698235200">- Update to 0.103.11
  * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.12.
  * Windows: libjson-c 0.17 compatibility fix. with ssize_t type definition.
  * Windows: Update build system to use OpenSSL 3 and PThreads-Win32 v3.
- Update to 0.103.10
  * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.10.
    (bsc#1216625, CVE-2023-40477)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="max@suse.com" date="1710504000">- New version: 1.3.0:
  * Added support for extracting and scanning attachments found in
    Microsoft OneNote section files. OneNote parsing will be
    enabled by default, but may be optionally disabled.
  * Added file type recognition for compiled Python (`.pyc`) files.
  * Improved support for decrypting PDFs with empty passwords.
  * Fixed a warning when scanning some HTML files.
  * ClamOnAcc: Fixed an infinite loop when a watched directory
    does not exist.
  * ClamOnAcc: Fixed an infinite loop when a file has been deleted
    before a scan.
- New version: 1.2.0:
  * Added support for extracting Universal Disk Format (UDF)
    partitions.
  * Added an option to customize the size of ClamAV's clean file
    cache.
  * Raised the MaxScanSize limit so the total amount of data
    scanned when scanning a file or archive may exceed 4 gigabytes.
  * Added ability for Freshclam to use a client certificate PEM
    file and a private key PEM file for authentication to a private
    mirror.
  * Fix an issue extracting files from ISO9660 partitions where the
    files are listed in the plain ISO tree and there also exists an
    empty Joliet tree.
  * PID and socket are now located under /run/clamav/clamd.pid and
    /run/clamav/clamd.sock .
  * bsc#1211594: Fixed an issue where ClamAV does not abort the
    signature load process after partially loading an invalid
    signature.
- New version 1.1.0:
  * https://blog.clamav.net/2023/05/clamav-110-released.html
  * Added the ability to extract images embedded in HTML CSS
    &lt;style&gt; blocks.
  * Updated to Sigtool so that the --vba option will extract VBA
    code from Microsoft Office documents the same way that
    libclamav extracts VBA.
  * Added a new option --fail-if-cvd-older-than=days to clamscan
    and clamd, and FailIfCvdOlderThan to clamd.conf
  * Added a new function cl_cvdgetage() to the libclamav API.
  * Added a new function cl_engine_set_clcb_vba() to the
    libclamav API.
  * obsoletes clamav-ec32.patch.
- boo#1180296: Integrate clamonacc as a service.
- New version 1.0.1 LTS (including changes in 0.104 and 0.105):
  * As of ClamAV 0.104, CMake is required to build ClamAV.
  * As of ClamAV 0.105, Rust is now required to compile ClamAV.
  * Increased the default limits for file and scan size:
  * MaxScanSize: 100M to 400M
  * MaxFileSize: 25M to 100M
  * StreamMaxLength: 25M to 100M
  * PCREMaxFileSize: 25M to 100M
  * MaxEmbeddedPE: 10M to 40M
  * MaxHTMLNormalize: 10M to 40M
  * MaxScriptNormalize: 5M to 20M
  * MaxHTMLNoTags: 2M to 8M
  * Added image fuzzy hash subsignatures for logical signatures.
  * Support for decrypting read-only OLE2-based XLS files that are
    encrypted with the default password.
  * Overhauled the implementation of the all-match feature.
  * Added a new callback to the public API for inspecting file
    content during a scan at each layer of archive extraction.
  * Added a new function to the public API for unpacking CVD
    signature archives.
  * The option to build with an external TomsFastMath library has
    been removed. ClamAV requires non-default build options for
    TomsFastMath to support bigger floating point numbers.
  * For a full list of changes see the release announcements:
  * https://blog.clamav.net/2022/11/clamav-100-lts-released.html
  * https://blog.clamav.net/2022/05/clamav-01050-01043-01036-released.html
  * https://blog.clamav.net/2021/09/clamav-01040-released.html
- Build clamd with systemd support.
- Fix format strings on 32bit platforms (clamav-format.patch).
- Add missing endianness conversions (clamav-ec32.patch).
- Don't build on armv7l for now due to some test failures.
- Drop clamav-disable-yara.patch as yara cannot be disabled anymore</changelog>
  <changelog author="max@suse.com" date="1713787200">- New Version: 1.3.1:
  * CVE-2024-20380: Fixed a possible crash in the HTML file parser
    that could cause a denial-of-service (DoS) condition.
  * Updated select Rust dependencies to the latest versions.
  * Fixed a bug causing some text to be truncated when converting
    from UTF-16.
  * Fixed assorted complaints identified by Coverity static
    analysis.
  * Fixed a bug causing CVDs downloaded by the DatabaseCustomURL
    Freshclam config option to be pruned and then re-downloaded
    with every update.
  * Added the new 'valhalla' database name to the list of optional
    databases in preparation for future work.</changelog>
  <changelog author="bwiedemann@suse.com" date="1722254400">- Add upstream 1305.patch to fix tests (boo#1102840, https://github.com/Cisco-Talos/clamav/issues/1300)</changelog>
  <changelog author="suse+build@de-korte.org" date="1725451200">- New version 1.3.2:
  * CVE-2024-20506: Changed the logging module to disable following
    symlinks on Linux and Unix systems so as to prevent an attacker
    with existing access to the 'clamd' or 'freshclam' services from
    using a symlink to corrupt system files.
  * CVE-2024-20505: Fixed a possible out-of-bounds read bug in the PDF
    file parser that could cause a denial-of-service condition.
  * Removed unused Python modules from freshclam tests including
    deprecated 'cgi' module that is expected to cause test failures in
    Python 3.13.
  * Fix unit test caused by expiring signing certificate.
  * Fixed a build issue on Windows with newer versions of Rust. Also
    upgraded GitHub Actions imports to fix CI failures.
  * Fixed an unaligned pointer dereference issue on select architectures.
  * Fixes to Jenkins CI pipeline.
- Remove upstreamed 1305.patch</changelog>
  <changelog author="max@suse.com" date="1725969600">- New version 1.4.1:
  * [CVE-2024-20506, bsc#1230162]: Changed the logging module to
    disable following symlinks on Linux and Unix systems so as to
    prevent an attacker with existing access to the 'clamd' or
    'freshclam' services from using a symlink to corrupt system
    files.
  * [CVE-2024-20505, bsc#1230161]: Fixed a possible out-of-bounds
    read bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition.
  * https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html
- New version 1.4.0:
  * Added support for extracting ALZ archives.
  * Added support for extracting LHA/LZH archives.
  * Added the ability to disable image fuzzy hashing, if needed.
    For context, image fuzzy hashing is a detection mechanism
    useful for identifying malware by matching images included with
    the malware or phishing email/document.
  * https://blog.clamav.net/2024/08/clamav-140-feature-release-and-clamav.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734523200">- fix factory submission (clam.tcl, clamscan.log)</changelog>
  <changelog author="max@suse.com" date="1736510400">- bsc#1232242: Start clamonacc with --fdpass to avoid errors due to
  clamd not being able to access user files.</changelog>
  <changelog author="max@suse.com" date="1737547200">- New version 1.4.2:
  * CVE-2025-20128, bsc#1236307: Fixed a possible buffer overflow
    read bug in the OLE2 file parser that could cause a
    denial-of-service (DoS) condition.</changelog>
  <changelog author="max@suse.com" date="1737633600">- Drop the version dependency on libcurl. Building against versions
  older than 7.45 does not fail anymore, but disables support for
  fdpassing in clamonacc. This only affects SLE-12 up to SP3.</changelog>
  <changelog author="max@suse.com" date="1739188800">- bsc#1236949: Fix location of license files.</changelog>
  <changelog author="max@suse.com" date="1742817600">- bsc#1239957: Build with PIE.
- Eliminate some UTF-8 NBSP characters from the changes file.</changelog>
  <changelog author="max@suse.com" date="1748433600">- bsc#1243565: Add clamav-freshclam_test.patch to fix a race
  condition between the mockup servers started by different test
  cases in freshclam_test.py.</changelog>
  <changelog author="suse+build@de-korte.org" date="1750334400">- New version 1.4.3:
  ClamAV 1.4.3 is a patch release with the following fixes:
  * CVE-2025-20260, bsc#1245054: Fixed a possible buffer overflow
    write bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition or enable remote code
    execution. This issue only affects configurations where both:
  - The max file-size scan limit is set greater than or equal to 1024MB.
  - The max scan-size scan limit is set greater than or equal to 1025MB.
    The code flaw was present prior to version 1.0.0, but a change in
    version 1.0.0 that enables larger allocations based on untrusted data
    made it possible to trigger this bug.
    This issue affects all currently supported versions.
  * CVE-2025-20234, bsc#1245055: Fixed a possible buffer overflow
    read bug in the UDF file parser that may write to a temp file
    and thus disclose information, or it may crash and cause a
    denial-of-service (DoS) condition.
    This issue was introduced in version 1.2.0.
  * Fixed a possible use-after-free bug in the Xz decompression module in
    the bundled lzma-sdk library.
    This issue was fixed in the lzma-sdk version 18.03. ClamAV bundles a
    copy of the lzma-sdk with some performance changes specific to
    libclamav, plus select bug fixes like this one in lieu of a full
    upgrade to newer lzma-sdk.
    This issue affects all ClamAV versions at least as far back as 0.99.4.
  * Windows: Fixed a build install issue when a DLL dependency such as
    libcrypto has the exact same name as one provided by the Windows
    operating system.
- Renew clamav.keyring</changelog>
</package>
<package pkgid="90bec0403ef8db2343f5b09fb3a2e197ccae6e5616bc94a6f835714f1d888e53" name="libclammspack0" arch="x86_64">
  <version epoch="0" ver="1.5.1" rel="150600.18.22.1"/>
  <changelog author="max@suse.com" date="1713787200">- New Version: 1.3.1:
  * CVE-2024-20380: Fixed a possible crash in the HTML file parser
    that could cause a denial-of-service (DoS) condition.
  * Updated select Rust dependencies to the latest versions.
  * Fixed a bug causing some text to be truncated when converting
    from UTF-16.
  * Fixed assorted complaints identified by Coverity static
    analysis.
  * Fixed a bug causing CVDs downloaded by the DatabaseCustomURL
    Freshclam config option to be pruned and then re-downloaded
    with every update.
  * Added the new 'valhalla' database name to the list of optional
    databases in preparation for future work.</changelog>
  <changelog author="bwiedemann@suse.com" date="1722254400">- Add upstream 1305.patch to fix tests (boo#1102840, https://github.com/Cisco-Talos/clamav/issues/1300)</changelog>
  <changelog author="suse+build@de-korte.org" date="1725451200">- New version 1.3.2:
  * CVE-2024-20506: Changed the logging module to disable following
    symlinks on Linux and Unix systems so as to prevent an attacker
    with existing access to the 'clamd' or 'freshclam' services from
    using a symlink to corrupt system files.
  * CVE-2024-20505: Fixed a possible out-of-bounds read bug in the PDF
    file parser that could cause a denial-of-service condition.
  * Removed unused Python modules from freshclam tests including
    deprecated 'cgi' module that is expected to cause test failures in
    Python 3.13.
  * Fix unit test caused by expiring signing certificate.
  * Fixed a build issue on Windows with newer versions of Rust. Also
    upgraded GitHub Actions imports to fix CI failures.
  * Fixed an unaligned pointer dereference issue on select architectures.
  * Fixes to Jenkins CI pipeline.
- Remove upstreamed 1305.patch</changelog>
  <changelog author="max@suse.com" date="1725969600">- New version 1.4.1:
  * [CVE-2024-20506, bsc#1230162]: Changed the logging module to
    disable following symlinks on Linux and Unix systems so as to
    prevent an attacker with existing access to the 'clamd' or
    'freshclam' services from using a symlink to corrupt system
    files.
  * [CVE-2024-20505, bsc#1230161]: Fixed a possible out-of-bounds
    read bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition.
  * https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html
- New version 1.4.0:
  * Added support for extracting ALZ archives.
  * Added support for extracting LHA/LZH archives.
  * Added the ability to disable image fuzzy hashing, if needed.
    For context, image fuzzy hashing is a detection mechanism
    useful for identifying malware by matching images included with
    the malware or phishing email/document.
  * https://blog.clamav.net/2024/08/clamav-140-feature-release-and-clamav.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734523200">- fix factory submission (clam.tcl, clamscan.log)</changelog>
  <changelog author="max@suse.com" date="1736510400">- bsc#1232242: Start clamonacc with --fdpass to avoid errors due to
  clamd not being able to access user files.</changelog>
  <changelog author="max@suse.com" date="1737547200">- New version 1.4.2:
  * CVE-2025-20128, bsc#1236307: Fixed a possible buffer overflow
    read bug in the OLE2 file parser that could cause a
    denial-of-service (DoS) condition.</changelog>
  <changelog author="max@suse.com" date="1737633600">- Drop the version dependency on libcurl. Building against versions
  older than 7.45 does not fail anymore, but disables support for
  fdpassing in clamonacc. This only affects SLE-12 up to SP3.</changelog>
  <changelog author="max@suse.com" date="1739188800">- bsc#1236949: Fix location of license files.</changelog>
  <changelog author="max@suse.com" date="1742817600">- bsc#1239957: Build with PIE.
- Eliminate some UTF-8 NBSP characters from the changes file.</changelog>
  <changelog author="max@suse.com" date="1748433600">- bsc#1243565: Add clamav-freshclam_test.patch to fix a race
  condition between the mockup servers started by different test
  cases in freshclam_test.py.</changelog>
  <changelog author="suse+build@de-korte.org" date="1750334400">- New version 1.4.3:
  ClamAV 1.4.3 is a patch release with the following fixes:
  * CVE-2025-20260, bsc#1245054: Fixed a possible buffer overflow
    write bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition or enable remote code
    execution. This issue only affects configurations where both:
  - The max file-size scan limit is set greater than or equal to 1024MB.
  - The max scan-size scan limit is set greater than or equal to 1025MB.
    The code flaw was present prior to version 1.0.0, but a change in
    version 1.0.0 that enables larger allocations based on untrusted data
    made it possible to trigger this bug.
    This issue affects all currently supported versions.
  * CVE-2025-20234, bsc#1245055: Fixed a possible buffer overflow
    read bug in the UDF file parser that may write to a temp file
    and thus disclose information, or it may crash and cause a
    denial-of-service (DoS) condition.
    This issue was introduced in version 1.2.0.
  * Fixed a possible use-after-free bug in the Xz decompression module in
    the bundled lzma-sdk library.
    This issue was fixed in the lzma-sdk version 18.03. ClamAV bundles a
    copy of the lzma-sdk with some performance changes specific to
    libclamav, plus select bug fixes like this one in lieu of a full
    upgrade to newer lzma-sdk.
    This issue affects all ClamAV versions at least as far back as 0.99.4.
  * Windows: Fixed a build install issue when a DLL dependency such as
    libcrypto has the exact same name as one provided by the Windows
    operating system.
- Renew clamav.keyring</changelog>
  <changelog author="max@suse.com" date="1751284800">- bsc#1240363, clamav-disable-administrative-commands.patch: clamd:
  Add an option to toggle SHUTDOWN, RELOAD, STATS and VERSION.</changelog>
  <changelog author="max@suse.com" date="1759924800">- New version 1.5.0:
  * Added checks to determine if an OLE2-based Microsoft Office
    document is encrypted.
  * Added the ability to record URIs found in HTML if the
    generate-JSON-metadata feature is enabled.
  * Added the ability to record URIs found in PDFs if the
    generate-JSON-metadata feature is enabled.
  * Added regex support for the clamd.conf OnAccessExcludePath
    config option.
  * Added CVD signing/verification with external .sign files.
  * Freshclam, ClamD, ClamScan, and Sigtool: Added an option to
    enable FIPS-like limits disabling MD5 and SHA1 from being used
    for verifying digital signatures or for being used to trust a
    file when checking for false positives
  * ClamD: Added an option to disable select administrative
    commands including SHUTDOWN, RELOAD, STATS and VERSION.
  * libclamav: Added extended hashing functions with a "flags"
    parameter that allows the caller to choose if they want to
    bypass FIPS hash algorithm limits.
  * See the release announcement for the full list of changes:
    https://blog.clamav.net/2025/10/clamav-150-released.html
- Obsoleted patches:
  * clamav-freshclam_test.patch
  * clamav-disable-administrative-commands.patch
  * clamav-fips.patch
- Use macros for library versions
- Remove service symlinks: rcclamd, rcfreshclam, rcclamav-milter,
  and clamonacc.
- Use rust 1.86 for SLE-12 and SLE-15-SP2.</changelog>
  <changelog author="max@suse.com" date="1760443200">- Add json-c-json-c-0.18-20240915.tar.gz and link it statically
  into libclamav on SLE-12, because version 0.12 is too old.</changelog>
  <changelog author="max@suse.com" date="1760616000">- New version: 1.5.1:
  * Fixed a significant performance issue when scanning some PE
    files.
  * Fixed an issue recording file entries from a ZIP archive
    central directory which resulted in
    "Heuristics.Limits.Exceeded.MaxFiles" alerts when using the
    ClamScan --alert-exceeds-max command line option or ClamD
    AlertExceedsMax config file option.
  * Improved performance when scanning TNEF email attachments.
  * Fixed an issue with recording metadata for OOXML office
    documents.
  * Fixed an issue with signature matches for VBA in OLE2 office
    documents.
  * Loosened overly restrictive rules for embedded file
    identification and increased the limit for finding PE files
    embedded in other PE files.
  * Fixed an issue with extracting some RAR archives embedded in
    other files.
  * Fixed an issue with calculating fuzzy hashes affecting some
    images by updating the version for several Rust library
    dependencies.</changelog>
  <changelog author="max@suse.com" date="1762257600">- Add clamav-workaround.patch to work around symbol removals in
  version 1.5.0 and 1.5.1.</changelog>
  <changelog author="bwiedemann@suse.com" date="1763208000">- Build with older rust 1.87 for reproducible builds (boo#1249404)</changelog>
  <changelog author="max@suse.com" date="1763726400">- Provide a better fix for boo#1249404 by disabling debug mode.</changelog>
  <changelog author="max@suse.com" date="1764331200">- Fix testsuite error on SLE-15-SP6 by falling back to rust1.86.</changelog>
</package>
<package pkgid="31967178d32a61600989dad313d6952592e8b9330d6e3e8a5650888fda027320" name="libclammspack0" arch="x86_64">
  <version epoch="0" ver="1.5.2" rel="150600.18.25.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1734523200">- fix factory submission (clam.tcl, clamscan.log)</changelog>
  <changelog author="max@suse.com" date="1736510400">- bsc#1232242: Start clamonacc with --fdpass to avoid errors due to
  clamd not being able to access user files.</changelog>
  <changelog author="max@suse.com" date="1737547200">- New version 1.4.2:
  * CVE-2025-20128, bsc#1236307: Fixed a possible buffer overflow
    read bug in the OLE2 file parser that could cause a
    denial-of-service (DoS) condition.</changelog>
  <changelog author="max@suse.com" date="1737633600">- Drop the version dependency on libcurl. Building against versions
  older than 7.45 does not fail anymore, but disables support for
  fdpassing in clamonacc. This only affects SLE-12 up to SP3.</changelog>
  <changelog author="max@suse.com" date="1739188800">- bsc#1236949: Fix location of license files.</changelog>
  <changelog author="max@suse.com" date="1742817600">- bsc#1239957: Build with PIE.
- Eliminate some UTF-8 NBSP characters from the changes file.</changelog>
  <changelog author="max@suse.com" date="1748433600">- bsc#1243565: Add clamav-freshclam_test.patch to fix a race
  condition between the mockup servers started by different test
  cases in freshclam_test.py.</changelog>
  <changelog author="suse+build@de-korte.org" date="1750334400">- New version 1.4.3:
  ClamAV 1.4.3 is a patch release with the following fixes:
  * CVE-2025-20260, bsc#1245054: Fixed a possible buffer overflow
    write bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition or enable remote code
    execution. This issue only affects configurations where both:
  - The max file-size scan limit is set greater than or equal to 1024MB.
  - The max scan-size scan limit is set greater than or equal to 1025MB.
    The code flaw was present prior to version 1.0.0, but a change in
    version 1.0.0 that enables larger allocations based on untrusted data
    made it possible to trigger this bug.
    This issue affects all currently supported versions.
  * CVE-2025-20234, bsc#1245055: Fixed a possible buffer overflow
    read bug in the UDF file parser that may write to a temp file
    and thus disclose information, or it may crash and cause a
    denial-of-service (DoS) condition.
    This issue was introduced in version 1.2.0.
  * Fixed a possible use-after-free bug in the Xz decompression module in
    the bundled lzma-sdk library.
    This issue was fixed in the lzma-sdk version 18.03. ClamAV bundles a
    copy of the lzma-sdk with some performance changes specific to
    libclamav, plus select bug fixes like this one in lieu of a full
    upgrade to newer lzma-sdk.
    This issue affects all ClamAV versions at least as far back as 0.99.4.
  * Windows: Fixed a build install issue when a DLL dependency such as
    libcrypto has the exact same name as one provided by the Windows
    operating system.
- Renew clamav.keyring</changelog>
  <changelog author="max@suse.com" date="1751284800">- bsc#1240363, clamav-disable-administrative-commands.patch: clamd:
  Add an option to toggle SHUTDOWN, RELOAD, STATS and VERSION.</changelog>
  <changelog author="max@suse.com" date="1759924800">- New version 1.5.0:
  * Added checks to determine if an OLE2-based Microsoft Office
    document is encrypted.
  * Added the ability to record URIs found in HTML if the
    generate-JSON-metadata feature is enabled.
  * Added the ability to record URIs found in PDFs if the
    generate-JSON-metadata feature is enabled.
  * Added regex support for the clamd.conf OnAccessExcludePath
    config option.
  * Added CVD signing/verification with external .sign files.
  * Freshclam, ClamD, ClamScan, and Sigtool: Added an option to
    enable FIPS-like limits disabling MD5 and SHA1 from being used
    for verifying digital signatures or for being used to trust a
    file when checking for false positives (bsc#1221954).
  * ClamD: Added an option to disable select administrative
    commands including SHUTDOWN, RELOAD, STATS and VERSION.
  * libclamav: Added extended hashing functions with a "flags"
    parameter that allows the caller to choose if they want to
    bypass FIPS hash algorithm limits.
  * See the release announcement for the full list of changes:
    https://blog.clamav.net/2025/10/clamav-150-released.html
- Obsoleted patches:
  * clamav-freshclam_test.patch
  * clamav-disable-administrative-commands.patch
  * clamav-fips.patch
- Use macros for library versions
- Remove service symlinks: rcclamd, rcfreshclam, rcclamav-milter,
  and clamonacc.
- Use rust 1.86 for SLE-12 and SLE-15-SP2.</changelog>
  <changelog author="max@suse.com" date="1760443200">- Add json-c-json-c-0.18-20240915.tar.gz and link it statically
  into libclamav on SLE-12, because version 0.12 is too old.</changelog>
  <changelog author="max@suse.com" date="1760616000">- New version: 1.5.1:
  * Fixed a significant performance issue when scanning some PE
    files.
  * Fixed an issue recording file entries from a ZIP archive
    central directory which resulted in
    "Heuristics.Limits.Exceeded.MaxFiles" alerts when using the
    ClamScan --alert-exceeds-max command line option or ClamD
    AlertExceedsMax config file option.
  * Improved performance when scanning TNEF email attachments.
  * Fixed an issue with recording metadata for OOXML office
    documents.
  * Fixed an issue with signature matches for VBA in OLE2 office
    documents.
  * Loosened overly restrictive rules for embedded file
    identification and increased the limit for finding PE files
    embedded in other PE files.
  * Fixed an issue with extracting some RAR archives embedded in
    other files.
  * Fixed an issue with calculating fuzzy hashes affecting some
    images by updating the version for several Rust library
    dependencies.</changelog>
  <changelog author="max@suse.com" date="1762257600">- Add clamav-workaround.patch to work around symbol removals in
  version 1.5.0 and 1.5.1.</changelog>
  <changelog author="bwiedemann@suse.com" date="1763208000">- Build with older rust 1.87 for reproducible builds (boo#1249404)</changelog>
  <changelog author="max@suse.com" date="1763726400">- Provide a better fix for boo#1249404 by disabling debug mode.</changelog>
  <changelog author="max@suse.com" date="1764331200">- Fix testsuite error on SLE-15-SP6 by falling back to rust1.86.</changelog>
  <changelog author="max@suse.com" date="1770724800">- jsc-PED-14819: Support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1770984000">- bsc#1258072: Require main and library packages to be of the same
  version and release. Given that all the core functionality is
  in the libraries it makes little sense to update the main
  package alone.</changelog>
  <changelog author="max@suse.com" date="1772712000">- New version 1.5.2:
  * bsc#1259207, CVE-2026-20031: Fixed an error handling bug in the
    HTML file parser that may crash the program and cause a
    denial-of-service (DoS) condition. This issue was introduced in
    version 1.1.0.
  * Fixed a possible infinite loop when scanning some JPEG files by
    upgrading affected ClamAV dependency, a Rust image library.
  * The CVD verification process will now ignore certificate files
    in the CVD certs directory when the user lacks read permissions.
  * Freshclam: Fix CLD verification bug with PrivateMirror option.
  * Upgraded the Rust bytes dependency to a newer version to
    resolve RUSTSEC-2026-0007 advisory.
  * Fixed a possible crash caused by invalid pointer alignment on
    some platforms.
  * Minimal required Rust version is now 1.87.</changelog>
  <changelog author="max@suse.com" date="1773316800">- Disable build for 32 bit ix86 because of testsuite failures with
  rust &gt;= 1.87 that upstream is not planning to fix.
- Run the test suite on all SUSE releases.</changelog>
</package>
<package pkgid="f2f31708e54056a217bb434a5ccc252834b8ad2b2613c2ac3c2214b0bc4c569e" name="libcolord2" arch="x86_64">
  <version epoch="0" ver="1.4.6" rel="150600.3.8.1"/>
  <changelog author="dimstar@opensuse.org" date="1507291200">- Collapse files section for gtk-doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520942400">- Update to version 1.4.2:
  + New Features:
  - Add cd_icc_set_created.
  - Add --enable-timestamps option for CREATED header.
  + Bugfixes:
  - Avoid buffer overflow when reading profile_id.
  - Fix the detection of duplicate EDIDs.
  - Make udev hwdb optional by using pnp.ids as fallback.
  - Raise _XOPEN_SOURCE to 700 to enable C99 on FreeBSD.
  - Refactor build directory selection.
  - Set cd-create-profile date to SOURCE_DATE_EPOCH.
- Pass new option enable-udev-rules=true to meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524398400">- Update to version 1.4.3:
  + Bugfixes:
  - Make cd_color_get_blackbody_rgb_full safer.
  - Update style of Meson build options.
  - Update warning about running daemon as root.
- Update options passed to meson following upstream changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1549886400">- Fix meson parameters: -Dargyllcms-sensor=true must be
  - Dargyllcms_sensor=true (boo#1124388).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1561550400">- Change BuildRequires to docbook-utils-minimal, otherwise the build
  pulls in half of texlive and all its dependencies. Only man pages
  and HTML API docs are generated, no need for PS/PDF generation.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1570536000">- Also allow /var/lib/colord/icc/ in AppArmor profile (boo#1112230)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 1.4.4:
  + New Features:
  - Actually install the installed tests.
  - Allow building without the daemon.
  + Bugfixes:
  - Consistently search for spotread in $PATH.
  - Don't hard-require spotread to build argyll sensor.
  - Fix linker argument checks.
  - Include C header in Colorhug-1.0.gir.
  - Pass -DCD_COMPILATION to gir compiler.
  - Port manpages to xsltproc and DocBook 5.
- Replace docbook-utils-minimal with docbook5-xsl-stylesheets
  BuildRequires following upstreams port.
- Add _constraints file, avoid random buildfails for i586 and other
  arches.</changelog>
  <changelog author="rbrown@suse.com" date="1575460800">- Add add-spyderx.patch for datacolor SpyderX supprot (will be in
  version 1.4.5).
- Move colord-session.service and tmpfiles config from
  libcolord-devel to colord package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610020800">- Update to version 1.4.5:
  + New Features:
  - Add cd_icc_create_default_full
  - Add cd_icc_utils_get_adaptation_matrix
  - Add cd_mat33_is_finite
  - Add support for datacolor SpyderX
  + Bugfixes:
  - Check for errors from more sqlite calls
  - Fix cd_icc_load_data() annotation for the data array
  - Fix cd-sensor-dummy
  - Fix more annotation for data arrays
  - Fix owner and permissions on existing state files
  - Fix segfault due to dereferencing NULL pointer
  - Make the build reproductible
  - Refactor opening of mapping database and try again if fails
- Drop add-spyderx.patch: Included upstream in new release.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1610625600">- allow access to /usr/local/share/color in AppArmor profile (boo#1180898)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1637409600">- Change to systemd-sysusers</changelog>
  <changelog author="jsegitz@suse.com" date="1639396800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_colord.service.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1648209600">- Update to version 1.4.6:
  + Add missing copyright notices.
  + Add Spyder X entry.
  + Document where to send patches.
  + Don't use exact floating point comparisons.
  + Drop option for removed reverse engineering tools.
  + Drop references to hughski.com.
  + Fix a small memory leak in sqlite3_exec().
  + Fix typo in device-removed signal documentation.
  + Make introspection optional in meson.
- Drop -Dreverse=false meson parameter: no longer supported.
- Fix a few rpmlint warnings:
  + Do not self-obsolete shared-color-profiles by providing the
    symbol with a version.
  + Call +%tmpfiles_create %{_tmpfilesdir}/colord.conf in %post.
  + Package /usr/share/bash-completion/completions/colormgr with
    mode 644: the files are not executed, but sourced.
  + Own %{_localstatedir}/lib/colord/icc (ghost): this directory is
    generated by %tmpfiles_create.</changelog>
  <changelog author="mgorse@suse.com" date="1663329600">- Add colord-CVE-2021-42523.patch: fix a small memory leak on db
  open failure (boo#1202802 CVE-2021-42523).</changelog>
  <changelog author="fcrozat@suse.com" date="1683288000">- Tune _constraints for various architectures.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- Reduce memory constraints for riscv64</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1725451200">- Remove script in %pre to change ownership of /var/lib/colord
  (bsc#1208056).</changelog>
  <changelog author="mgorse@suse.com" date="1759406400">- Rework colord-CVE-2021-42523.patch based on what is now upstream.
  The original fix was wrong and did not properly free the error,
  resulting in a crash (bsc#1250750).</changelog>
</package>
<package pkgid="ae626a7e98de2258346ee97a04f6d764a820aadf22ad809946e84ab5c7898f19" name="libcpupower1" arch="x86_64">
  <version epoch="0" ver="6.4.0" rel="150700.9.3.3"/>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Change to building the package from kernel-source based on
  how the perf package works
- Removed patches:
  * turbostat_makefile_fix_asm_header.patch
  * remove_bits_h.patch
  * x86_perf_makefile_fix_asm_header.patch
- Remove all tarballs and git script
- Use %lang_package
- Correct ix86 to %ix86</changelog>
  <changelog author="dmueller@suse.com" date="1649419200">- add rebuild subpackage to trigger rebuild on kernel updates</changelog>
  <changelog author="trenn@suse.de" date="1657022400">- Remove powercap capabilities to patch againt latest kernel sources
  - &gt; still keep the patches, will be removed after trying to get this
    mainline
- Add netlink (libnl-devel) requires</changelog>
  <changelog author="gmbr3@opensuse.org" date="1665144000">- Move bash-completion to subpackage so it isn't installed when
  not needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1666353600">- clean up sources: drop rapl_monitor.patch and
  cpupower_rapl.patch.</changelog>
  <changelog author="trenn@suse.de" date="1678017600">- Add wildcard for powercap.h since powercap patches have reached mainline
- Build bash-completion noarch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700049600">- Rename libcpupower0 to libcpupower1 following changes in SONAME.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="trenn@suse.de" date="1700481600">- Fix library file version: libcpupower.so.0.0.1 -&gt; libcpupower.so.1.0.1
  (bsc#1217044)
  A cpupower_fix_library_so_name.patch</changelog>
  <changelog author="trenn@suse.de" date="1710331200">- Source version of cpupower tools from kernel sources:
  cpupower #6feb1a9641197ee630bf43b5c34ea1d9f8b4a0aa
  turbostat 2023.11.07 #b8337e6a780dad9505f9d44da07c0a5c52fa0a04
  intel-speed-select 1.18 #a590ed62269a049a72484ce617fe2f34e2da66cf</changelog>
  <changelog author="trenn@suse.de" date="1741348800">- For latest changelog entries, please look up the changelog of
  a kernel-FLAVOR or kernel-source with the exact same version and
  release build number.
  rpm -q --changelog kernel-source |grep "turbostat\|intel-speed-select|cpupower"</changelog>
  <changelog author="trenn@suse.de" date="1753099200">- Show the first 2 lines of kernel-source sources we build against
  in the package description.
  Also show the latest git hash commit ID there to be able to track
  the exact sources the package has been built against.
  This is essential to be able to determine the exact
  sources (from kernel-source) the tools are built against.</changelog>
</package>
<package pkgid="d0771009d4163148974bf512ecb903b1ba7a104890aac0876ca5aef0c874f192" name="libcryptopp" arch="src">
  <version epoch="0" ver="8.6.0" rel="150400.3.12.1"/>
  <changelog author="i@marguerite.su" date="1466424000">- add patch cryptopp-gcc6.patch
  * fix boo#985143
  * fix narrowing conversion from unsigned int to int inside {}</changelog>
  <changelog author="bwiedemann@suse.com" date="1473681600">- Update to 5.6.4
  * Use proper openSUSE-style library naming
  * Drop upstream libcryptopp-s390.patch
  * Drop upstream libcryptopp-m68k.patch
  * Drop upstream libcryptopp-CVE-2015-2141.patch
  * Drop upstream cryptopp-gcc6.patch
  * Rebase libcryptopp-shared.patch
  * Rebase 0001-disable_os_rng_test.patch</changelog>
  <changelog author="jengelh@inai.de" date="1485604800">- Update descriptions</changelog>
  <changelog author="jengelh@inai.de" date="1485604801">- Remove libcryptoo-devel-static, this seems unused in Factory.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Add obsoletes tag for dropped static lib</changelog>
  <changelog author="adam@mizerski.pl" date="1487851200">- update to 5.6.5
  * Rebase libcryptopp-shared.patch
  * Rebase 0001-disable_os_rng_test.patch
- enable openmp usage</changelog>
  <changelog author="davejplater@gmail.com" date="1488542400">- Added patch field to soname due to library not following proper
  API/ABI versioning to fix boo#1027192.
- Removed crypto.pc and generate it in the spec file to ensure
  proper version and directories.
- Changed libcryptopp-shared.patch.
- Renamed library package and obsoleted old name.
- added precheckin_baselibs.sh and updated baselibs.conf</changelog>
  <changelog author="bwiedemann@suse.com" date="1495281600">- Add reproducible.patch to sort input files to make build fully reproducible</changelog>
  <changelog author="adam@mizerski.pl" date="1542456000">- update to v7.0.0
  * changelog available at https://cryptopp.com/release700.html
    and in packaged Readme.txt
- Refreshed patches
  * 0001-disable_os_rng_test.patch
  * libcryptopp-shared.patch
- Dropped patch reproducible.patch - merged upstream</changelog>
  <changelog author="davejplater@gmail.com" date="1563624000">- Update to major version 8.2.0
- Filter out -flto= flag for arm7 see cryptopp issue#865
- Remove 0001-disable_os_rng_test.patch which is no longer needed.
- Rebase libcryptopp-shared.patch
- Added patchs from git which is indicated in cryptopp issue#865:
  0001-Fix-TCXXFLAGS-using-openSUSE-standard-flags-GH-865.patch
  and 0001-Fix-missing-if-statement.patch.
  Upstream changes since 7.0.0:
  * use PowerPC unaligned loads and stores with Power8
  * add SKIPJACK test vectors
  * fix SHAKE-128 and SHAKE-256 compile
  * removed IS_NEON from Makefile
  * fix Aarch64 build on Fedora 29
  * fix missing GF2NT_233_Multiply_Reduce_CLMUL in FIPS DLL
  * add missing BLAKE2 constructors
  * fix missing BlockSize() in BLAKE2 classes
  * add CRYPTOPP_BUGGY_SIMD_LOAD_AND_STORE
  * add carryless multiplies for NIST b233 and k233 curves
  * fix OpenMP build due to use of OpenMP 4 with down-level compilers
  * add SignStream and VerifyStream for ed25519 and large files
  * fix missing AlgorithmProvider in PanamaHash
  * add SHAKE-128 and SHAKE-256
  * fix AVX2 build due to _mm256_broadcastsi128_si256
  * add IETF ChaCha, XChaCha, ChaChaPoly1305 and XChaChaPoly1305
  * add x25519 key exchange and ed25519 signature scheme
  * add limited Asymmetric Key Package support from RFC 5958
  * add Power9 DARN random number generator support
  * add CHAM, HC-128, HC-256, Hight, LEA, Rabbit, Simeck
  * fix FixedSizeAllocatorWithCleanup may be unaligned on some
  platforms
  * cutover to GNU Make-based cpu feature tests
  * rename files with dashes to underscores
  * fix LegacyDecryptor and LegacyDecryptorWithMAC use wrong MAC
  * avoid Singleton&lt;T&gt; when possible, avoid std::call_once completely
  * fix SPARC alignment problems due to GetAlignmentOf&lt;T&gt;() on word64
  * add ARM AES asm implementation from Cryptogams
  * remove CRYPTOPP_ALLOW_UNALIGNED_DATA_ACCESS support</changelog>
  <changelog author="davejplater@gmail.com" date="1565524800">- Added cve-2019-14318.patch which fixes (1)leak in ECDSA nonce
  length; and (2) leak in prime fields (ECP class).
- See boo#1145187
- Disabled LTO for i586 to fix build failure.</changelog>
  <changelog author="tchvatal@suse.com" date="1593691200">- Simplify the baselibs creation
- Do not BR unzip as the tarball is tar.gz
- Generate the pc file with cat not bunch of echos</changelog>
  <changelog author="davejplater@gmail.com" date="1609588800">- Update to version 8.4.0 and remove obsolete patches:
  0001-Fix-TCXXFLAGS-using-openSUSE-standard-flags-GH-865.patch,
  0001-Fix-missing-if-statement.patch and cve-2019-14318.patch
- Upstream changes:
  * fix use of macro CRYPTOPP_ALIGN_DATA
  * fix potential out-of-bounds read in ECDSA
  * fix std::bad_alloc when using ByteQueue in pipeline
  * fix missing CRYPTOPP_CXX17_EXCEPTIONS with Clang
  * fix potential out-of-bounds read in GCM mode
  * add configure.sh when preprocessor macros fail
  * fix potential out-of-bounds read in SipHash
  * fix compile error on POWER9 due to vec_xl_be
  * fix K233 curve on POWER8
  * add Cirrus CI testing
  * fix broken encryption for some 64-bit ciphers
  * disable RDRAND and RDSEED for some AMD processors
  * fix BLAKE2 hash calculation using Salt and Personalization
  * add XTS mode
  * fix circular dependency between misc.h and secblock.h
  * add Certificate interface
  * fix recursion in AES::Encryption without AESNI
  * add missing OID for ElGamal encryption
  * fix missing override in KeyDerivationFunction-derived classes
  * fix RDSEED assemble under MSVC
  * fix elliptic curve timing leaks (CVE-2019-14318)
  * add link-library variable to Makefiles
  * fix SIZE_MAX definition in misc.h
  * add GetWord64 and PutWord64 to BufferedTransformation
  * use HKDF in AutoSeededX917RNG::Reseed
  * fix Asan finding in VMAC on i686 in inline asm
  * fix undeclared identifier _mm_roti_epi64 on Gentoo
  * fix ECIES and GetSymmetricKeyLength
  * fix possible divide by zero in PKCS5_PBKDF2_HMAC
  * refine ASN.1 encoders and decoders
  * disable BMI2 code paths in Integer class
  * fix use of CRYPTOPP_CLANG_VERSION
  * add NEON SHA1, SHA256 and SHA512 from Cryptogams
  * add ARM SHA1, SHA256 and SHA512 from Cryptogams
  * fix reference binding to misaligned address in xed25519
  * clear asserts in TestDataNameValuePairs
  * fix SIGILL on POWER8 when compiling with GCC 10
  * fix potential out-of-bounds write in FixedSizeAllocatorWithCleanup
  * revert changes for constant-time elliptic curve algorithms</changelog>
  <changelog author="dmueller@suse.com" date="1615982400">- update to 8.5.0:
  * minor release, no recompile of programs required
  * expanded community input and support
  * 70 unique contributors as of this release
  * port to Apple M1 hardware</changelog>
  <changelog author="davejplater@gmail.com" date="1632571200">- Update to 8.6.0
-upstream changes:
  * This release clears CVE-2021-40530 and fixes a problem with
  ChaCha20 AVX2 implementation.
  * The CVE was due to ElGamal encryption using a work estimate to
  size encryption exponents instead subgroup order.
  * The ChaCha20 issue was due to mishandling a carry in the AVX2
  code path. The ChaCha20 issue was difficult to duplicate, so
  most users should not experience it.</changelog>
  <changelog author="josef.moellers@suse.com" date="1633953600">- Update SLE15-SP4 to 8.6.0.
  This obsoletes the following patches
  * cve-2019-14318-CryptoPP564.patch (aka cve-2019-14318.patch)
  * libcryptopp-CVE-2016-9939.patch
  [bsc#1190243]</changelog>
  <changelog author="pgajdos@suse.com" date="1703160000">- security update
- added patches
  fix CVE-2023-50980 [bsc#1218219], DoS via malformed DER public key file
  + libcryptopp-CVE-2023-50980.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1704369600">- security update
- added patches
  fix CVE-2023-50981 [bsc#1218222], issue on ModularSquareRoot function leads to potential DoS
  + libcryptopp-CVE-2023-50981.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1748520000">- Security fix [bsc#1224280, CVE-2024-28285]
  * potential leak of secret key of ElGamal encryption via fault injection
  * Added patch libcryptopp-CVE-2024-28285.patch
  * https://github.com/weidai11/cryptopp/issues/1262</changelog>
  <changelog author="angel.yankov@suse.com" date="1763985600">- Security fix [bsc#1218217, CVE-2023-50979]
  * Fix  side-channel leakage during decryption with PKCS#1v1.5 padding
  * Added patch libcryptopp-CVE-2023-50979.patch
  * https://github.com/Coralesoft/cryptopp/commit/0923d82f5c3ac8cf6c99108be2ad9260f2a61f6c
- Modernise spec file to adhere to new RPM rules</changelog>
</package>
<package pkgid="198a079f7a7fdff1f66326a9bfb31bc3d23a3451ea9a1fb7e27550fab052544c" name="libcryptopp" arch="src">
  <version epoch="0" ver="8.6.0" rel="150400.3.9.1"/>
  <changelog author="bwiedemann@suse.com" date="1436356800">- prevent timing attack to get secret key (bnc#936435, CVE-2015-2141)
  add libcryptopp-CVE-2015-2141.patch</changelog>
  <changelog author="i@marguerite.su" date="1466424000">- add patch cryptopp-gcc6.patch
  * fix boo#985143
  * fix narrowing conversion from unsigned int to int inside {}</changelog>
  <changelog author="bwiedemann@suse.com" date="1473681600">- Update to 5.6.4
  * Use proper openSUSE-style library naming
  * Drop upstream libcryptopp-s390.patch
  * Drop upstream libcryptopp-m68k.patch
  * Drop upstream libcryptopp-CVE-2015-2141.patch
  * Drop upstream cryptopp-gcc6.patch
  * Rebase libcryptopp-shared.patch
  * Rebase 0001-disable_os_rng_test.patch</changelog>
  <changelog author="jengelh@inai.de" date="1485604800">- Update descriptions</changelog>
  <changelog author="jengelh@inai.de" date="1485604801">- Remove libcryptoo-devel-static, this seems unused in Factory.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Add obsoletes tag for dropped static lib</changelog>
  <changelog author="adam@mizerski.pl" date="1487851200">- update to 5.6.5
  * Rebase libcryptopp-shared.patch
  * Rebase 0001-disable_os_rng_test.patch
- enable openmp usage</changelog>
  <changelog author="davejplater@gmail.com" date="1488542400">- Added patch field to soname due to library not following proper
  API/ABI versioning to fix boo#1027192.
- Removed crypto.pc and generate it in the spec file to ensure
  proper version and directories.
- Changed libcryptopp-shared.patch.
- Renamed library package and obsoleted old name.
- added precheckin_baselibs.sh and updated baselibs.conf</changelog>
  <changelog author="bwiedemann@suse.com" date="1495281600">- Add reproducible.patch to sort input files to make build fully reproducible</changelog>
  <changelog author="adam@mizerski.pl" date="1542456000">- update to v7.0.0
  * changelog available at https://cryptopp.com/release700.html
    and in packaged Readme.txt
- Refreshed patches
  * 0001-disable_os_rng_test.patch
  * libcryptopp-shared.patch
- Dropped patch reproducible.patch - merged upstream</changelog>
  <changelog author="davejplater@gmail.com" date="1563624000">- Update to major version 8.2.0
- Filter out -flto= flag for arm7 see cryptopp issue#865
- Remove 0001-disable_os_rng_test.patch which is no longer needed.
- Rebase libcryptopp-shared.patch
- Added patchs from git which is indicated in cryptopp issue#865:
  0001-Fix-TCXXFLAGS-using-openSUSE-standard-flags-GH-865.patch
  and 0001-Fix-missing-if-statement.patch.
  Upstream changes since 7.0.0:
  * use PowerPC unaligned loads and stores with Power8
  * add SKIPJACK test vectors
  * fix SHAKE-128 and SHAKE-256 compile
  * removed IS_NEON from Makefile
  * fix Aarch64 build on Fedora 29
  * fix missing GF2NT_233_Multiply_Reduce_CLMUL in FIPS DLL
  * add missing BLAKE2 constructors
  * fix missing BlockSize() in BLAKE2 classes
  * add CRYPTOPP_BUGGY_SIMD_LOAD_AND_STORE
  * add carryless multiplies for NIST b233 and k233 curves
  * fix OpenMP build due to use of OpenMP 4 with down-level compilers
  * add SignStream and VerifyStream for ed25519 and large files
  * fix missing AlgorithmProvider in PanamaHash
  * add SHAKE-128 and SHAKE-256
  * fix AVX2 build due to _mm256_broadcastsi128_si256
  * add IETF ChaCha, XChaCha, ChaChaPoly1305 and XChaChaPoly1305
  * add x25519 key exchange and ed25519 signature scheme
  * add limited Asymmetric Key Package support from RFC 5958
  * add Power9 DARN random number generator support
  * add CHAM, HC-128, HC-256, Hight, LEA, Rabbit, Simeck
  * fix FixedSizeAllocatorWithCleanup may be unaligned on some
  platforms
  * cutover to GNU Make-based cpu feature tests
  * rename files with dashes to underscores
  * fix LegacyDecryptor and LegacyDecryptorWithMAC use wrong MAC
  * avoid Singleton&lt;T&gt; when possible, avoid std::call_once completely
  * fix SPARC alignment problems due to GetAlignmentOf&lt;T&gt;() on word64
  * add ARM AES asm implementation from Cryptogams
  * remove CRYPTOPP_ALLOW_UNALIGNED_DATA_ACCESS support</changelog>
  <changelog author="davejplater@gmail.com" date="1565524800">- Added cve-2019-14318.patch which fixes (1)leak in ECDSA nonce
  length; and (2) leak in prime fields (ECP class).
- See boo#1145187
- Disabled LTO for i586 to fix build failure.</changelog>
  <changelog author="tchvatal@suse.com" date="1593691200">- Simplify the baselibs creation
- Do not BR unzip as the tarball is tar.gz
- Generate the pc file with cat not bunch of echos</changelog>
  <changelog author="davejplater@gmail.com" date="1609588800">- Update to version 8.4.0 and remove obsolete patches:
  0001-Fix-TCXXFLAGS-using-openSUSE-standard-flags-GH-865.patch,
  0001-Fix-missing-if-statement.patch and cve-2019-14318.patch
- Upstream changes:
  * fix use of macro CRYPTOPP_ALIGN_DATA
  * fix potential out-of-bounds read in ECDSA
  * fix std::bad_alloc when using ByteQueue in pipeline
  * fix missing CRYPTOPP_CXX17_EXCEPTIONS with Clang
  * fix potential out-of-bounds read in GCM mode
  * add configure.sh when preprocessor macros fail
  * fix potential out-of-bounds read in SipHash
  * fix compile error on POWER9 due to vec_xl_be
  * fix K233 curve on POWER8
  * add Cirrus CI testing
  * fix broken encryption for some 64-bit ciphers
  * disable RDRAND and RDSEED for some AMD processors
  * fix BLAKE2 hash calculation using Salt and Personalization
  * add XTS mode
  * fix circular dependency between misc.h and secblock.h
  * add Certificate interface
  * fix recursion in AES::Encryption without AESNI
  * add missing OID for ElGamal encryption
  * fix missing override in KeyDerivationFunction-derived classes
  * fix RDSEED assemble under MSVC
  * fix elliptic curve timing leaks (CVE-2019-14318)
  * add link-library variable to Makefiles
  * fix SIZE_MAX definition in misc.h
  * add GetWord64 and PutWord64 to BufferedTransformation
  * use HKDF in AutoSeededX917RNG::Reseed
  * fix Asan finding in VMAC on i686 in inline asm
  * fix undeclared identifier _mm_roti_epi64 on Gentoo
  * fix ECIES and GetSymmetricKeyLength
  * fix possible divide by zero in PKCS5_PBKDF2_HMAC
  * refine ASN.1 encoders and decoders
  * disable BMI2 code paths in Integer class
  * fix use of CRYPTOPP_CLANG_VERSION
  * add NEON SHA1, SHA256 and SHA512 from Cryptogams
  * add ARM SHA1, SHA256 and SHA512 from Cryptogams
  * fix reference binding to misaligned address in xed25519
  * clear asserts in TestDataNameValuePairs
  * fix SIGILL on POWER8 when compiling with GCC 10
  * fix potential out-of-bounds write in FixedSizeAllocatorWithCleanup
  * revert changes for constant-time elliptic curve algorithms</changelog>
  <changelog author="dmueller@suse.com" date="1615982400">- update to 8.5.0:
  * minor release, no recompile of programs required
  * expanded community input and support
  * 70 unique contributors as of this release
  * port to Apple M1 hardware</changelog>
  <changelog author="davejplater@gmail.com" date="1632571200">- Update to 8.6.0
-upstream changes:
  * This release clears CVE-2021-40530 and fixes a problem with
  ChaCha20 AVX2 implementation.
  * The CVE was due to ElGamal encryption using a work estimate to
  size encryption exponents instead subgroup order.
  * The ChaCha20 issue was due to mishandling a carry in the AVX2
  code path. The ChaCha20 issue was difficult to duplicate, so
  most users should not experience it.</changelog>
  <changelog author="josef.moellers@suse.com" date="1633953600">- Update SLE15-SP4 to 8.6.0.
  This obsoletes the following patches
  * cve-2019-14318-CryptoPP564.patch (aka cve-2019-14318.patch)
  * libcryptopp-CVE-2016-9939.patch
  [bsc#1190243]</changelog>
  <changelog author="pgajdos@suse.com" date="1703160000">- security update
- added patches
  fix CVE-2023-50980 [bsc#1218219], DoS via malformed DER public key file
  + libcryptopp-CVE-2023-50980.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1704369600">- security update
- added patches
  fix CVE-2023-50981 [bsc#1218222], issue on ModularSquareRoot function leads to potential DoS
  + libcryptopp-CVE-2023-50981.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1748520000">- Security fix [bsc#1224280, CVE-2024-28285]
  * potential leak of secret key of ElGamal encryption via fault injection
  * Added patch libcryptopp-CVE-2024-28285.patch
  * https://github.com/weidai11/cryptopp/issues/1262</changelog>
</package>
<package pkgid="975906de764b4da9c5c1cc3555a3909d7dbcf77848fd00d87f1b1ac1a0d576e9" name="libcryptopp-devel" arch="x86_64">
  <version epoch="0" ver="8.6.0" rel="150400.3.12.1"/>
  <changelog author="i@marguerite.su" date="1466424000">- add patch cryptopp-gcc6.patch
  * fix boo#985143
  * fix narrowing conversion from unsigned int to int inside {}</changelog>
  <changelog author="bwiedemann@suse.com" date="1473681600">- Update to 5.6.4
  * Use proper openSUSE-style library naming
  * Drop upstream libcryptopp-s390.patch
  * Drop upstream libcryptopp-m68k.patch
  * Drop upstream libcryptopp-CVE-2015-2141.patch
  * Drop upstream cryptopp-gcc6.patch
  * Rebase libcryptopp-shared.patch
  * Rebase 0001-disable_os_rng_test.patch</changelog>
  <changelog author="jengelh@inai.de" date="1485604800">- Update descriptions</changelog>
  <changelog author="jengelh@inai.de" date="1485604801">- Remove libcryptoo-devel-static, this seems unused in Factory.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Add obsoletes tag for dropped static lib</changelog>
  <changelog author="adam@mizerski.pl" date="1487851200">- update to 5.6.5
  * Rebase libcryptopp-shared.patch
  * Rebase 0001-disable_os_rng_test.patch
- enable openmp usage</changelog>
  <changelog author="davejplater@gmail.com" date="1488542400">- Added patch field to soname due to library not following proper
  API/ABI versioning to fix boo#1027192.
- Removed crypto.pc and generate it in the spec file to ensure
  proper version and directories.
- Changed libcryptopp-shared.patch.
- Renamed library package and obsoleted old name.
- added precheckin_baselibs.sh and updated baselibs.conf</changelog>
  <changelog author="bwiedemann@suse.com" date="1495281600">- Add reproducible.patch to sort input files to make build fully reproducible</changelog>
  <changelog author="adam@mizerski.pl" date="1542456000">- update to v7.0.0
  * changelog available at https://cryptopp.com/release700.html
    and in packaged Readme.txt
- Refreshed patches
  * 0001-disable_os_rng_test.patch
  * libcryptopp-shared.patch
- Dropped patch reproducible.patch - merged upstream</changelog>
  <changelog author="davejplater@gmail.com" date="1563624000">- Update to major version 8.2.0
- Filter out -flto= flag for arm7 see cryptopp issue#865
- Remove 0001-disable_os_rng_test.patch which is no longer needed.
- Rebase libcryptopp-shared.patch
- Added patchs from git which is indicated in cryptopp issue#865:
  0001-Fix-TCXXFLAGS-using-openSUSE-standard-flags-GH-865.patch
  and 0001-Fix-missing-if-statement.patch.
  Upstream changes since 7.0.0:
  * use PowerPC unaligned loads and stores with Power8
  * add SKIPJACK test vectors
  * fix SHAKE-128 and SHAKE-256 compile
  * removed IS_NEON from Makefile
  * fix Aarch64 build on Fedora 29
  * fix missing GF2NT_233_Multiply_Reduce_CLMUL in FIPS DLL
  * add missing BLAKE2 constructors
  * fix missing BlockSize() in BLAKE2 classes
  * add CRYPTOPP_BUGGY_SIMD_LOAD_AND_STORE
  * add carryless multiplies for NIST b233 and k233 curves
  * fix OpenMP build due to use of OpenMP 4 with down-level compilers
  * add SignStream and VerifyStream for ed25519 and large files
  * fix missing AlgorithmProvider in PanamaHash
  * add SHAKE-128 and SHAKE-256
  * fix AVX2 build due to _mm256_broadcastsi128_si256
  * add IETF ChaCha, XChaCha, ChaChaPoly1305 and XChaChaPoly1305
  * add x25519 key exchange and ed25519 signature scheme
  * add limited Asymmetric Key Package support from RFC 5958
  * add Power9 DARN random number generator support
  * add CHAM, HC-128, HC-256, Hight, LEA, Rabbit, Simeck
  * fix FixedSizeAllocatorWithCleanup may be unaligned on some
  platforms
  * cutover to GNU Make-based cpu feature tests
  * rename files with dashes to underscores
  * fix LegacyDecryptor and LegacyDecryptorWithMAC use wrong MAC
  * avoid Singleton&lt;T&gt; when possible, avoid std::call_once completely
  * fix SPARC alignment problems due to GetAlignmentOf&lt;T&gt;() on word64
  * add ARM AES asm implementation from Cryptogams
  * remove CRYPTOPP_ALLOW_UNALIGNED_DATA_ACCESS support</changelog>
  <changelog author="davejplater@gmail.com" date="1565524800">- Added cve-2019-14318.patch which fixes (1)leak in ECDSA nonce
  length; and (2) leak in prime fields (ECP class).
- See boo#1145187
- Disabled LTO for i586 to fix build failure.</changelog>
  <changelog author="tchvatal@suse.com" date="1593691200">- Simplify the baselibs creation
- Do not BR unzip as the tarball is tar.gz
- Generate the pc file with cat not bunch of echos</changelog>
  <changelog author="davejplater@gmail.com" date="1609588800">- Update to version 8.4.0 and remove obsolete patches:
  0001-Fix-TCXXFLAGS-using-openSUSE-standard-flags-GH-865.patch,
  0001-Fix-missing-if-statement.patch and cve-2019-14318.patch
- Upstream changes:
  * fix use of macro CRYPTOPP_ALIGN_DATA
  * fix potential out-of-bounds read in ECDSA
  * fix std::bad_alloc when using ByteQueue in pipeline
  * fix missing CRYPTOPP_CXX17_EXCEPTIONS with Clang
  * fix potential out-of-bounds read in GCM mode
  * add configure.sh when preprocessor macros fail
  * fix potential out-of-bounds read in SipHash
  * fix compile error on POWER9 due to vec_xl_be
  * fix K233 curve on POWER8
  * add Cirrus CI testing
  * fix broken encryption for some 64-bit ciphers
  * disable RDRAND and RDSEED for some AMD processors
  * fix BLAKE2 hash calculation using Salt and Personalization
  * add XTS mode
  * fix circular dependency between misc.h and secblock.h
  * add Certificate interface
  * fix recursion in AES::Encryption without AESNI
  * add missing OID for ElGamal encryption
  * fix missing override in KeyDerivationFunction-derived classes
  * fix RDSEED assemble under MSVC
  * fix elliptic curve timing leaks (CVE-2019-14318)
  * add link-library variable to Makefiles
  * fix SIZE_MAX definition in misc.h
  * add GetWord64 and PutWord64 to BufferedTransformation
  * use HKDF in AutoSeededX917RNG::Reseed
  * fix Asan finding in VMAC on i686 in inline asm
  * fix undeclared identifier _mm_roti_epi64 on Gentoo
  * fix ECIES and GetSymmetricKeyLength
  * fix possible divide by zero in PKCS5_PBKDF2_HMAC
  * refine ASN.1 encoders and decoders
  * disable BMI2 code paths in Integer class
  * fix use of CRYPTOPP_CLANG_VERSION
  * add NEON SHA1, SHA256 and SHA512 from Cryptogams
  * add ARM SHA1, SHA256 and SHA512 from Cryptogams
  * fix reference binding to misaligned address in xed25519
  * clear asserts in TestDataNameValuePairs
  * fix SIGILL on POWER8 when compiling with GCC 10
  * fix potential out-of-bounds write in FixedSizeAllocatorWithCleanup
  * revert changes for constant-time elliptic curve algorithms</changelog>
  <changelog author="dmueller@suse.com" date="1615982400">- update to 8.5.0:
  * minor release, no recompile of programs required
  * expanded community input and support
  * 70 unique contributors as of this release
  * port to Apple M1 hardware</changelog>
  <changelog author="davejplater@gmail.com" date="1632571200">- Update to 8.6.0
-upstream changes:
  * This release clears CVE-2021-40530 and fixes a problem with
  ChaCha20 AVX2 implementation.
  * The CVE was due to ElGamal encryption using a work estimate to
  size encryption exponents instead subgroup order.
  * The ChaCha20 issue was due to mishandling a carry in the AVX2
  code path. The ChaCha20 issue was difficult to duplicate, so
  most users should not experience it.</changelog>
  <changelog author="josef.moellers@suse.com" date="1633953600">- Update SLE15-SP4 to 8.6.0.
  This obsoletes the following patches
  * cve-2019-14318-CryptoPP564.patch (aka cve-2019-14318.patch)
  * libcryptopp-CVE-2016-9939.patch
  [bsc#1190243]</changelog>
  <changelog author="pgajdos@suse.com" date="1703160000">- security update
- added patches
  fix CVE-2023-50980 [bsc#1218219], DoS via malformed DER public key file
  + libcryptopp-CVE-2023-50980.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1704369600">- security update
- added patches
  fix CVE-2023-50981 [bsc#1218222], issue on ModularSquareRoot function leads to potential DoS
  + libcryptopp-CVE-2023-50981.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1748520000">- Security fix [bsc#1224280, CVE-2024-28285]
  * potential leak of secret key of ElGamal encryption via fault injection
  * Added patch libcryptopp-CVE-2024-28285.patch
  * https://github.com/weidai11/cryptopp/issues/1262</changelog>
  <changelog author="angel.yankov@suse.com" date="1763985600">- Security fix [bsc#1218217, CVE-2023-50979]
  * Fix  side-channel leakage during decryption with PKCS#1v1.5 padding
  * Added patch libcryptopp-CVE-2023-50979.patch
  * https://github.com/Coralesoft/cryptopp/commit/0923d82f5c3ac8cf6c99108be2ad9260f2a61f6c
- Modernise spec file to adhere to new RPM rules</changelog>
</package>
<package pkgid="8319680b1b3fd632f6276b392e3ff19da2acd87db0d7d60300a52ac365acfb26" name="libcryptopp-devel" arch="x86_64">
  <version epoch="0" ver="8.6.0" rel="150400.3.9.1"/>
  <changelog author="bwiedemann@suse.com" date="1436356800">- prevent timing attack to get secret key (bnc#936435, CVE-2015-2141)
  add libcryptopp-CVE-2015-2141.patch</changelog>
  <changelog author="i@marguerite.su" date="1466424000">- add patch cryptopp-gcc6.patch
  * fix boo#985143
  * fix narrowing conversion from unsigned int to int inside {}</changelog>
  <changelog author="bwiedemann@suse.com" date="1473681600">- Update to 5.6.4
  * Use proper openSUSE-style library naming
  * Drop upstream libcryptopp-s390.patch
  * Drop upstream libcryptopp-m68k.patch
  * Drop upstream libcryptopp-CVE-2015-2141.patch
  * Drop upstream cryptopp-gcc6.patch
  * Rebase libcryptopp-shared.patch
  * Rebase 0001-disable_os_rng_test.patch</changelog>
  <changelog author="jengelh@inai.de" date="1485604800">- Update descriptions</changelog>
  <changelog author="jengelh@inai.de" date="1485604801">- Remove libcryptoo-devel-static, this seems unused in Factory.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Add obsoletes tag for dropped static lib</changelog>
  <changelog author="adam@mizerski.pl" date="1487851200">- update to 5.6.5
  * Rebase libcryptopp-shared.patch
  * Rebase 0001-disable_os_rng_test.patch
- enable openmp usage</changelog>
  <changelog author="davejplater@gmail.com" date="1488542400">- Added patch field to soname due to library not following proper
  API/ABI versioning to fix boo#1027192.
- Removed crypto.pc and generate it in the spec file to ensure
  proper version and directories.
- Changed libcryptopp-shared.patch.
- Renamed library package and obsoleted old name.
- added precheckin_baselibs.sh and updated baselibs.conf</changelog>
  <changelog author="bwiedemann@suse.com" date="1495281600">- Add reproducible.patch to sort input files to make build fully reproducible</changelog>
  <changelog author="adam@mizerski.pl" date="1542456000">- update to v7.0.0
  * changelog available at https://cryptopp.com/release700.html
    and in packaged Readme.txt
- Refreshed patches
  * 0001-disable_os_rng_test.patch
  * libcryptopp-shared.patch
- Dropped patch reproducible.patch - merged upstream</changelog>
  <changelog author="davejplater@gmail.com" date="1563624000">- Update to major version 8.2.0
- Filter out -flto= flag for arm7 see cryptopp issue#865
- Remove 0001-disable_os_rng_test.patch which is no longer needed.
- Rebase libcryptopp-shared.patch
- Added patchs from git which is indicated in cryptopp issue#865:
  0001-Fix-TCXXFLAGS-using-openSUSE-standard-flags-GH-865.patch
  and 0001-Fix-missing-if-statement.patch.
  Upstream changes since 7.0.0:
  * use PowerPC unaligned loads and stores with Power8
  * add SKIPJACK test vectors
  * fix SHAKE-128 and SHAKE-256 compile
  * removed IS_NEON from Makefile
  * fix Aarch64 build on Fedora 29
  * fix missing GF2NT_233_Multiply_Reduce_CLMUL in FIPS DLL
  * add missing BLAKE2 constructors
  * fix missing BlockSize() in BLAKE2 classes
  * add CRYPTOPP_BUGGY_SIMD_LOAD_AND_STORE
  * add carryless multiplies for NIST b233 and k233 curves
  * fix OpenMP build due to use of OpenMP 4 with down-level compilers
  * add SignStream and VerifyStream for ed25519 and large files
  * fix missing AlgorithmProvider in PanamaHash
  * add SHAKE-128 and SHAKE-256
  * fix AVX2 build due to _mm256_broadcastsi128_si256
  * add IETF ChaCha, XChaCha, ChaChaPoly1305 and XChaChaPoly1305
  * add x25519 key exchange and ed25519 signature scheme
  * add limited Asymmetric Key Package support from RFC 5958
  * add Power9 DARN random number generator support
  * add CHAM, HC-128, HC-256, Hight, LEA, Rabbit, Simeck
  * fix FixedSizeAllocatorWithCleanup may be unaligned on some
  platforms
  * cutover to GNU Make-based cpu feature tests
  * rename files with dashes to underscores
  * fix LegacyDecryptor and LegacyDecryptorWithMAC use wrong MAC
  * avoid Singleton&lt;T&gt; when possible, avoid std::call_once completely
  * fix SPARC alignment problems due to GetAlignmentOf&lt;T&gt;() on word64
  * add ARM AES asm implementation from Cryptogams
  * remove CRYPTOPP_ALLOW_UNALIGNED_DATA_ACCESS support</changelog>
  <changelog author="davejplater@gmail.com" date="1565524800">- Added cve-2019-14318.patch which fixes (1)leak in ECDSA nonce
  length; and (2) leak in prime fields (ECP class).
- See boo#1145187
- Disabled LTO for i586 to fix build failure.</changelog>
  <changelog author="tchvatal@suse.com" date="1593691200">- Simplify the baselibs creation
- Do not BR unzip as the tarball is tar.gz
- Generate the pc file with cat not bunch of echos</changelog>
  <changelog author="davejplater@gmail.com" date="1609588800">- Update to version 8.4.0 and remove obsolete patches:
  0001-Fix-TCXXFLAGS-using-openSUSE-standard-flags-GH-865.patch,
  0001-Fix-missing-if-statement.patch and cve-2019-14318.patch
- Upstream changes:
  * fix use of macro CRYPTOPP_ALIGN_DATA
  * fix potential out-of-bounds read in ECDSA
  * fix std::bad_alloc when using ByteQueue in pipeline
  * fix missing CRYPTOPP_CXX17_EXCEPTIONS with Clang
  * fix potential out-of-bounds read in GCM mode
  * add configure.sh when preprocessor macros fail
  * fix potential out-of-bounds read in SipHash
  * fix compile error on POWER9 due to vec_xl_be
  * fix K233 curve on POWER8
  * add Cirrus CI testing
  * fix broken encryption for some 64-bit ciphers
  * disable RDRAND and RDSEED for some AMD processors
  * fix BLAKE2 hash calculation using Salt and Personalization
  * add XTS mode
  * fix circular dependency between misc.h and secblock.h
  * add Certificate interface
  * fix recursion in AES::Encryption without AESNI
  * add missing OID for ElGamal encryption
  * fix missing override in KeyDerivationFunction-derived classes
  * fix RDSEED assemble under MSVC
  * fix elliptic curve timing leaks (CVE-2019-14318)
  * add link-library variable to Makefiles
  * fix SIZE_MAX definition in misc.h
  * add GetWord64 and PutWord64 to BufferedTransformation
  * use HKDF in AutoSeededX917RNG::Reseed
  * fix Asan finding in VMAC on i686 in inline asm
  * fix undeclared identifier _mm_roti_epi64 on Gentoo
  * fix ECIES and GetSymmetricKeyLength
  * fix possible divide by zero in PKCS5_PBKDF2_HMAC
  * refine ASN.1 encoders and decoders
  * disable BMI2 code paths in Integer class
  * fix use of CRYPTOPP_CLANG_VERSION
  * add NEON SHA1, SHA256 and SHA512 from Cryptogams
  * add ARM SHA1, SHA256 and SHA512 from Cryptogams
  * fix reference binding to misaligned address in xed25519
  * clear asserts in TestDataNameValuePairs
  * fix SIGILL on POWER8 when compiling with GCC 10
  * fix potential out-of-bounds write in FixedSizeAllocatorWithCleanup
  * revert changes for constant-time elliptic curve algorithms</changelog>
  <changelog author="dmueller@suse.com" date="1615982400">- update to 8.5.0:
  * minor release, no recompile of programs required
  * expanded community input and support
  * 70 unique contributors as of this release
  * port to Apple M1 hardware</changelog>
  <changelog author="davejplater@gmail.com" date="1632571200">- Update to 8.6.0
-upstream changes:
  * This release clears CVE-2021-40530 and fixes a problem with
  ChaCha20 AVX2 implementation.
  * The CVE was due to ElGamal encryption using a work estimate to
  size encryption exponents instead subgroup order.
  * The ChaCha20 issue was due to mishandling a carry in the AVX2
  code path. The ChaCha20 issue was difficult to duplicate, so
  most users should not experience it.</changelog>
  <changelog author="josef.moellers@suse.com" date="1633953600">- Update SLE15-SP4 to 8.6.0.
  This obsoletes the following patches
  * cve-2019-14318-CryptoPP564.patch (aka cve-2019-14318.patch)
  * libcryptopp-CVE-2016-9939.patch
  [bsc#1190243]</changelog>
  <changelog author="pgajdos@suse.com" date="1703160000">- security update
- added patches
  fix CVE-2023-50980 [bsc#1218219], DoS via malformed DER public key file
  + libcryptopp-CVE-2023-50980.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1704369600">- security update
- added patches
  fix CVE-2023-50981 [bsc#1218222], issue on ModularSquareRoot function leads to potential DoS
  + libcryptopp-CVE-2023-50981.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1748520000">- Security fix [bsc#1224280, CVE-2024-28285]
  * potential leak of secret key of ElGamal encryption via fault injection
  * Added patch libcryptopp-CVE-2024-28285.patch
  * https://github.com/weidai11/cryptopp/issues/1262</changelog>
</package>
<package pkgid="aaeddaac03831bfdf0d59c167cd6728f926b4d938db65717e9d016c815302020" name="libcryptopp8_6_0" arch="x86_64">
  <version epoch="0" ver="8.6.0" rel="150400.3.12.1"/>
  <changelog author="i@marguerite.su" date="1466424000">- add patch cryptopp-gcc6.patch
  * fix boo#985143
  * fix narrowing conversion from unsigned int to int inside {}</changelog>
  <changelog author="bwiedemann@suse.com" date="1473681600">- Update to 5.6.4
  * Use proper openSUSE-style library naming
  * Drop upstream libcryptopp-s390.patch
  * Drop upstream libcryptopp-m68k.patch
  * Drop upstream libcryptopp-CVE-2015-2141.patch
  * Drop upstream cryptopp-gcc6.patch
  * Rebase libcryptopp-shared.patch
  * Rebase 0001-disable_os_rng_test.patch</changelog>
  <changelog author="jengelh@inai.de" date="1485604800">- Update descriptions</changelog>
  <changelog author="jengelh@inai.de" date="1485604801">- Remove libcryptoo-devel-static, this seems unused in Factory.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Add obsoletes tag for dropped static lib</changelog>
  <changelog author="adam@mizerski.pl" date="1487851200">- update to 5.6.5
  * Rebase libcryptopp-shared.patch
  * Rebase 0001-disable_os_rng_test.patch
- enable openmp usage</changelog>
  <changelog author="davejplater@gmail.com" date="1488542400">- Added patch field to soname due to library not following proper
  API/ABI versioning to fix boo#1027192.
- Removed crypto.pc and generate it in the spec file to ensure
  proper version and directories.
- Changed libcryptopp-shared.patch.
- Renamed library package and obsoleted old name.
- added precheckin_baselibs.sh and updated baselibs.conf</changelog>
  <changelog author="bwiedemann@suse.com" date="1495281600">- Add reproducible.patch to sort input files to make build fully reproducible</changelog>
  <changelog author="adam@mizerski.pl" date="1542456000">- update to v7.0.0
  * changelog available at https://cryptopp.com/release700.html
    and in packaged Readme.txt
- Refreshed patches
  * 0001-disable_os_rng_test.patch
  * libcryptopp-shared.patch
- Dropped patch reproducible.patch - merged upstream</changelog>
  <changelog author="davejplater@gmail.com" date="1563624000">- Update to major version 8.2.0
- Filter out -flto= flag for arm7 see cryptopp issue#865
- Remove 0001-disable_os_rng_test.patch which is no longer needed.
- Rebase libcryptopp-shared.patch
- Added patchs from git which is indicated in cryptopp issue#865:
  0001-Fix-TCXXFLAGS-using-openSUSE-standard-flags-GH-865.patch
  and 0001-Fix-missing-if-statement.patch.
  Upstream changes since 7.0.0:
  * use PowerPC unaligned loads and stores with Power8
  * add SKIPJACK test vectors
  * fix SHAKE-128 and SHAKE-256 compile
  * removed IS_NEON from Makefile
  * fix Aarch64 build on Fedora 29
  * fix missing GF2NT_233_Multiply_Reduce_CLMUL in FIPS DLL
  * add missing BLAKE2 constructors
  * fix missing BlockSize() in BLAKE2 classes
  * add CRYPTOPP_BUGGY_SIMD_LOAD_AND_STORE
  * add carryless multiplies for NIST b233 and k233 curves
  * fix OpenMP build due to use of OpenMP 4 with down-level compilers
  * add SignStream and VerifyStream for ed25519 and large files
  * fix missing AlgorithmProvider in PanamaHash
  * add SHAKE-128 and SHAKE-256
  * fix AVX2 build due to _mm256_broadcastsi128_si256
  * add IETF ChaCha, XChaCha, ChaChaPoly1305 and XChaChaPoly1305
  * add x25519 key exchange and ed25519 signature scheme
  * add limited Asymmetric Key Package support from RFC 5958
  * add Power9 DARN random number generator support
  * add CHAM, HC-128, HC-256, Hight, LEA, Rabbit, Simeck
  * fix FixedSizeAllocatorWithCleanup may be unaligned on some
  platforms
  * cutover to GNU Make-based cpu feature tests
  * rename files with dashes to underscores
  * fix LegacyDecryptor and LegacyDecryptorWithMAC use wrong MAC
  * avoid Singleton&lt;T&gt; when possible, avoid std::call_once completely
  * fix SPARC alignment problems due to GetAlignmentOf&lt;T&gt;() on word64
  * add ARM AES asm implementation from Cryptogams
  * remove CRYPTOPP_ALLOW_UNALIGNED_DATA_ACCESS support</changelog>
  <changelog author="davejplater@gmail.com" date="1565524800">- Added cve-2019-14318.patch which fixes (1)leak in ECDSA nonce
  length; and (2) leak in prime fields (ECP class).
- See boo#1145187
- Disabled LTO for i586 to fix build failure.</changelog>
  <changelog author="tchvatal@suse.com" date="1593691200">- Simplify the baselibs creation
- Do not BR unzip as the tarball is tar.gz
- Generate the pc file with cat not bunch of echos</changelog>
  <changelog author="davejplater@gmail.com" date="1609588800">- Update to version 8.4.0 and remove obsolete patches:
  0001-Fix-TCXXFLAGS-using-openSUSE-standard-flags-GH-865.patch,
  0001-Fix-missing-if-statement.patch and cve-2019-14318.patch
- Upstream changes:
  * fix use of macro CRYPTOPP_ALIGN_DATA
  * fix potential out-of-bounds read in ECDSA
  * fix std::bad_alloc when using ByteQueue in pipeline
  * fix missing CRYPTOPP_CXX17_EXCEPTIONS with Clang
  * fix potential out-of-bounds read in GCM mode
  * add configure.sh when preprocessor macros fail
  * fix potential out-of-bounds read in SipHash
  * fix compile error on POWER9 due to vec_xl_be
  * fix K233 curve on POWER8
  * add Cirrus CI testing
  * fix broken encryption for some 64-bit ciphers
  * disable RDRAND and RDSEED for some AMD processors
  * fix BLAKE2 hash calculation using Salt and Personalization
  * add XTS mode
  * fix circular dependency between misc.h and secblock.h
  * add Certificate interface
  * fix recursion in AES::Encryption without AESNI
  * add missing OID for ElGamal encryption
  * fix missing override in KeyDerivationFunction-derived classes
  * fix RDSEED assemble under MSVC
  * fix elliptic curve timing leaks (CVE-2019-14318)
  * add link-library variable to Makefiles
  * fix SIZE_MAX definition in misc.h
  * add GetWord64 and PutWord64 to BufferedTransformation
  * use HKDF in AutoSeededX917RNG::Reseed
  * fix Asan finding in VMAC on i686 in inline asm
  * fix undeclared identifier _mm_roti_epi64 on Gentoo
  * fix ECIES and GetSymmetricKeyLength
  * fix possible divide by zero in PKCS5_PBKDF2_HMAC
  * refine ASN.1 encoders and decoders
  * disable BMI2 code paths in Integer class
  * fix use of CRYPTOPP_CLANG_VERSION
  * add NEON SHA1, SHA256 and SHA512 from Cryptogams
  * add ARM SHA1, SHA256 and SHA512 from Cryptogams
  * fix reference binding to misaligned address in xed25519
  * clear asserts in TestDataNameValuePairs
  * fix SIGILL on POWER8 when compiling with GCC 10
  * fix potential out-of-bounds write in FixedSizeAllocatorWithCleanup
  * revert changes for constant-time elliptic curve algorithms</changelog>
  <changelog author="dmueller@suse.com" date="1615982400">- update to 8.5.0:
  * minor release, no recompile of programs required
  * expanded community input and support
  * 70 unique contributors as of this release
  * port to Apple M1 hardware</changelog>
  <changelog author="davejplater@gmail.com" date="1632571200">- Update to 8.6.0
-upstream changes:
  * This release clears CVE-2021-40530 and fixes a problem with
  ChaCha20 AVX2 implementation.
  * The CVE was due to ElGamal encryption using a work estimate to
  size encryption exponents instead subgroup order.
  * The ChaCha20 issue was due to mishandling a carry in the AVX2
  code path. The ChaCha20 issue was difficult to duplicate, so
  most users should not experience it.</changelog>
  <changelog author="josef.moellers@suse.com" date="1633953600">- Update SLE15-SP4 to 8.6.0.
  This obsoletes the following patches
  * cve-2019-14318-CryptoPP564.patch (aka cve-2019-14318.patch)
  * libcryptopp-CVE-2016-9939.patch
  [bsc#1190243]</changelog>
  <changelog author="pgajdos@suse.com" date="1703160000">- security update
- added patches
  fix CVE-2023-50980 [bsc#1218219], DoS via malformed DER public key file
  + libcryptopp-CVE-2023-50980.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1704369600">- security update
- added patches
  fix CVE-2023-50981 [bsc#1218222], issue on ModularSquareRoot function leads to potential DoS
  + libcryptopp-CVE-2023-50981.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1748520000">- Security fix [bsc#1224280, CVE-2024-28285]
  * potential leak of secret key of ElGamal encryption via fault injection
  * Added patch libcryptopp-CVE-2024-28285.patch
  * https://github.com/weidai11/cryptopp/issues/1262</changelog>
  <changelog author="angel.yankov@suse.com" date="1763985600">- Security fix [bsc#1218217, CVE-2023-50979]
  * Fix  side-channel leakage during decryption with PKCS#1v1.5 padding
  * Added patch libcryptopp-CVE-2023-50979.patch
  * https://github.com/Coralesoft/cryptopp/commit/0923d82f5c3ac8cf6c99108be2ad9260f2a61f6c
- Modernise spec file to adhere to new RPM rules</changelog>
</package>
<package pkgid="9b5405b13cda53c12db9b53d32503abe1b94176d220516745f7f876cea4b5d70" name="libcryptopp8_6_0" arch="x86_64">
  <version epoch="0" ver="8.6.0" rel="150400.3.9.1"/>
  <changelog author="bwiedemann@suse.com" date="1436356800">- prevent timing attack to get secret key (bnc#936435, CVE-2015-2141)
  add libcryptopp-CVE-2015-2141.patch</changelog>
  <changelog author="i@marguerite.su" date="1466424000">- add patch cryptopp-gcc6.patch
  * fix boo#985143
  * fix narrowing conversion from unsigned int to int inside {}</changelog>
  <changelog author="bwiedemann@suse.com" date="1473681600">- Update to 5.6.4
  * Use proper openSUSE-style library naming
  * Drop upstream libcryptopp-s390.patch
  * Drop upstream libcryptopp-m68k.patch
  * Drop upstream libcryptopp-CVE-2015-2141.patch
  * Drop upstream cryptopp-gcc6.patch
  * Rebase libcryptopp-shared.patch
  * Rebase 0001-disable_os_rng_test.patch</changelog>
  <changelog author="jengelh@inai.de" date="1485604800">- Update descriptions</changelog>
  <changelog author="jengelh@inai.de" date="1485604801">- Remove libcryptoo-devel-static, this seems unused in Factory.</changelog>
  <changelog author="jengelh@inai.de" date="1486036800">- Add obsoletes tag for dropped static lib</changelog>
  <changelog author="adam@mizerski.pl" date="1487851200">- update to 5.6.5
  * Rebase libcryptopp-shared.patch
  * Rebase 0001-disable_os_rng_test.patch
- enable openmp usage</changelog>
  <changelog author="davejplater@gmail.com" date="1488542400">- Added patch field to soname due to library not following proper
  API/ABI versioning to fix boo#1027192.
- Removed crypto.pc and generate it in the spec file to ensure
  proper version and directories.
- Changed libcryptopp-shared.patch.
- Renamed library package and obsoleted old name.
- added precheckin_baselibs.sh and updated baselibs.conf</changelog>
  <changelog author="bwiedemann@suse.com" date="1495281600">- Add reproducible.patch to sort input files to make build fully reproducible</changelog>
  <changelog author="adam@mizerski.pl" date="1542456000">- update to v7.0.0
  * changelog available at https://cryptopp.com/release700.html
    and in packaged Readme.txt
- Refreshed patches
  * 0001-disable_os_rng_test.patch
  * libcryptopp-shared.patch
- Dropped patch reproducible.patch - merged upstream</changelog>
  <changelog author="davejplater@gmail.com" date="1563624000">- Update to major version 8.2.0
- Filter out -flto= flag for arm7 see cryptopp issue#865
- Remove 0001-disable_os_rng_test.patch which is no longer needed.
- Rebase libcryptopp-shared.patch
- Added patchs from git which is indicated in cryptopp issue#865:
  0001-Fix-TCXXFLAGS-using-openSUSE-standard-flags-GH-865.patch
  and 0001-Fix-missing-if-statement.patch.
  Upstream changes since 7.0.0:
  * use PowerPC unaligned loads and stores with Power8
  * add SKIPJACK test vectors
  * fix SHAKE-128 and SHAKE-256 compile
  * removed IS_NEON from Makefile
  * fix Aarch64 build on Fedora 29
  * fix missing GF2NT_233_Multiply_Reduce_CLMUL in FIPS DLL
  * add missing BLAKE2 constructors
  * fix missing BlockSize() in BLAKE2 classes
  * add CRYPTOPP_BUGGY_SIMD_LOAD_AND_STORE
  * add carryless multiplies for NIST b233 and k233 curves
  * fix OpenMP build due to use of OpenMP 4 with down-level compilers
  * add SignStream and VerifyStream for ed25519 and large files
  * fix missing AlgorithmProvider in PanamaHash
  * add SHAKE-128 and SHAKE-256
  * fix AVX2 build due to _mm256_broadcastsi128_si256
  * add IETF ChaCha, XChaCha, ChaChaPoly1305 and XChaChaPoly1305
  * add x25519 key exchange and ed25519 signature scheme
  * add limited Asymmetric Key Package support from RFC 5958
  * add Power9 DARN random number generator support
  * add CHAM, HC-128, HC-256, Hight, LEA, Rabbit, Simeck
  * fix FixedSizeAllocatorWithCleanup may be unaligned on some
  platforms
  * cutover to GNU Make-based cpu feature tests
  * rename files with dashes to underscores
  * fix LegacyDecryptor and LegacyDecryptorWithMAC use wrong MAC
  * avoid Singleton&lt;T&gt; when possible, avoid std::call_once completely
  * fix SPARC alignment problems due to GetAlignmentOf&lt;T&gt;() on word64
  * add ARM AES asm implementation from Cryptogams
  * remove CRYPTOPP_ALLOW_UNALIGNED_DATA_ACCESS support</changelog>
  <changelog author="davejplater@gmail.com" date="1565524800">- Added cve-2019-14318.patch which fixes (1)leak in ECDSA nonce
  length; and (2) leak in prime fields (ECP class).
- See boo#1145187
- Disabled LTO for i586 to fix build failure.</changelog>
  <changelog author="tchvatal@suse.com" date="1593691200">- Simplify the baselibs creation
- Do not BR unzip as the tarball is tar.gz
- Generate the pc file with cat not bunch of echos</changelog>
  <changelog author="davejplater@gmail.com" date="1609588800">- Update to version 8.4.0 and remove obsolete patches:
  0001-Fix-TCXXFLAGS-using-openSUSE-standard-flags-GH-865.patch,
  0001-Fix-missing-if-statement.patch and cve-2019-14318.patch
- Upstream changes:
  * fix use of macro CRYPTOPP_ALIGN_DATA
  * fix potential out-of-bounds read in ECDSA
  * fix std::bad_alloc when using ByteQueue in pipeline
  * fix missing CRYPTOPP_CXX17_EXCEPTIONS with Clang
  * fix potential out-of-bounds read in GCM mode
  * add configure.sh when preprocessor macros fail
  * fix potential out-of-bounds read in SipHash
  * fix compile error on POWER9 due to vec_xl_be
  * fix K233 curve on POWER8
  * add Cirrus CI testing
  * fix broken encryption for some 64-bit ciphers
  * disable RDRAND and RDSEED for some AMD processors
  * fix BLAKE2 hash calculation using Salt and Personalization
  * add XTS mode
  * fix circular dependency between misc.h and secblock.h
  * add Certificate interface
  * fix recursion in AES::Encryption without AESNI
  * add missing OID for ElGamal encryption
  * fix missing override in KeyDerivationFunction-derived classes
  * fix RDSEED assemble under MSVC
  * fix elliptic curve timing leaks (CVE-2019-14318)
  * add link-library variable to Makefiles
  * fix SIZE_MAX definition in misc.h
  * add GetWord64 and PutWord64 to BufferedTransformation
  * use HKDF in AutoSeededX917RNG::Reseed
  * fix Asan finding in VMAC on i686 in inline asm
  * fix undeclared identifier _mm_roti_epi64 on Gentoo
  * fix ECIES and GetSymmetricKeyLength
  * fix possible divide by zero in PKCS5_PBKDF2_HMAC
  * refine ASN.1 encoders and decoders
  * disable BMI2 code paths in Integer class
  * fix use of CRYPTOPP_CLANG_VERSION
  * add NEON SHA1, SHA256 and SHA512 from Cryptogams
  * add ARM SHA1, SHA256 and SHA512 from Cryptogams
  * fix reference binding to misaligned address in xed25519
  * clear asserts in TestDataNameValuePairs
  * fix SIGILL on POWER8 when compiling with GCC 10
  * fix potential out-of-bounds write in FixedSizeAllocatorWithCleanup
  * revert changes for constant-time elliptic curve algorithms</changelog>
  <changelog author="dmueller@suse.com" date="1615982400">- update to 8.5.0:
  * minor release, no recompile of programs required
  * expanded community input and support
  * 70 unique contributors as of this release
  * port to Apple M1 hardware</changelog>
  <changelog author="davejplater@gmail.com" date="1632571200">- Update to 8.6.0
-upstream changes:
  * This release clears CVE-2021-40530 and fixes a problem with
  ChaCha20 AVX2 implementation.
  * The CVE was due to ElGamal encryption using a work estimate to
  size encryption exponents instead subgroup order.
  * The ChaCha20 issue was due to mishandling a carry in the AVX2
  code path. The ChaCha20 issue was difficult to duplicate, so
  most users should not experience it.</changelog>
  <changelog author="josef.moellers@suse.com" date="1633953600">- Update SLE15-SP4 to 8.6.0.
  This obsoletes the following patches
  * cve-2019-14318-CryptoPP564.patch (aka cve-2019-14318.patch)
  * libcryptopp-CVE-2016-9939.patch
  [bsc#1190243]</changelog>
  <changelog author="pgajdos@suse.com" date="1703160000">- security update
- added patches
  fix CVE-2023-50980 [bsc#1218219], DoS via malformed DER public key file
  + libcryptopp-CVE-2023-50980.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1704369600">- security update
- added patches
  fix CVE-2023-50981 [bsc#1218222], issue on ModularSquareRoot function leads to potential DoS
  + libcryptopp-CVE-2023-50981.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1748520000">- Security fix [bsc#1224280, CVE-2024-28285]
  * potential leak of secret key of ElGamal encryption via fault injection
  * Added patch libcryptopp-CVE-2024-28285.patch
  * https://github.com/weidai11/cryptopp/issues/1262</changelog>
</package>
<package pkgid="3583ff48461b901feb72bc10c04090041b01b7e4591a0bd082b50c568b0fd5bf" name="libctf-nobfd0" arch="x86_64">
  <version epoch="0" ver="2.45" rel="150100.7.57.1"/>
  <changelog author="schwab@suse.de" date="1708516800">- riscv-no-relax.patch: RISC-V: Don't generate branch/jump relocation if
  symbol is local when no-relax</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="bwiedemann@suse.com" date="1714564800">- Allow to disable profiling</changelog>
  <changelog author="schwab@suse.de" date="1718280000">- binutils-pr22868.diff: Remove obsolete patch
- Undefine _FORTIFY_SOURCE when running checks</changelog>
  <changelog author="matz@suse.com" date="1722945600">- Update to version 2.43:
  * new .base64 pseudo-op, allowing base64 encoded data as strings
  * Intel APX: add support for CFCMOV, CCMP, CTEST, zero-upper, NF
    (APX_F now fully supported)
  * x86 Intel syntax now warns about more mnemonic suffixes
  * macros and .irp/.irpc/.rept bodies can use \+ to get at number
    of times the macro/body was executed
  * aarch64: support 'armv9.5-a' for -march, add support for LUT
    and LUT2
  * s390: base register operand in D(X,B) and D(L,B) can now be
    omitted (ala 'D(X,)'); warn when register type doesn't match
    operand type (use option
    'warn-regtype-mismatch=[strict|relaxed|no]' to adjust)
  * riscv: support various extensions: Zacas, Zcmp, Zfbfmin,
    Zvfbfmin, Zvfbfwma, Smcsrind/Sscsrind, XCvMem, XCvBi, XCvElw,
    XSfCease, all at version 1.0;
    remove support for assembly of privileged spec 1.9.1 (linking
    support remains)
  * arm: remove support for some old co-processors: Maverick and FPA
  * mips: '--trap' now causes either trap or breakpoint instructions
    to be emitted as per current ISA, instead of always using trap
    insn and failing when current ISA was incompatible with that
  * LoongArch: accept .option pseudo-op for fine-grained control
    of assembly code options; add support for DT_RELR
  * readelf: now displays RELR relocations in full detail;
    add -j/--display-section to show just those section(s) content
    according to their type
  * objdump/readelf now dump also .eh_frame_hdr (when present) when
    dumping .eh_frame
  * gprofng: add event types for AMD Zen3/Zen4 and Intel Ice Lake
    processors; add minimal support for riscv
  * linker:
  - put .got and .got.plt into relro segment
  - add -z isa-level-report=[none|all|needed|used] to the x86 ELF
    linker to report needed and used x86-64 ISA levels
  - add --rosegment option which changes the -z separate-code
    option so that only one read-only segment is created (instead
    of two)
  - add --section-ordering-file &lt;FILE&gt; option to add extra
    mapping of input sections to output sections
  - add -plugin-save-temps to store plugin intermediate files
    permanently
- Removed binutils-2.42.tar.bz2, binutils-2.42-branch.diff.gz.
- Added binutils-2.43.tar.bz2, binutils-2.43-branch.diff.gz.
- Removed upstream patch riscv-no-relax.patch.
- Rebased ld-relro.diff and binutils-revert-rela.diff.</changelog>
  <changelog author="matz@suse.com" date="1724846400">- Update to current 2.43.1 branch [PED-10474]:
  * PR32109 - fuzzing problem
  * PR32083 - LTO vs overridden common symbols
  * PR32067 - crash with LTO-plugin and --oformat=binary
  * PR31956 - LTO vs wrapper symbols
  * riscv - add Zimop and Zcmop extensions
- Adjusted binutils-2.43-branch.diff.gz.</changelog>
  <changelog author="martin.liska@hey.com" date="1725969600">- Enable zstd compression algorithm (instead of zlib)
  for debug info sections by default.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="jslaby@suse.cz" date="1732104000">- drop ld-relro.diff (relro is the default for some time)
  and it warns on avr spuriously (bsc#1233520)</changelog>
  <changelog author="matz@suse.com" date="1733745600">- Update to current 2.43.1 branch [PED-10254, PED-10306]:
  * s390 - Add arch15 instructions
  * various fixes from upstream: PR32153, PR32171, PR32189,
    PR32196, PR32191, PR32109, PR32372, PR32387
- Adjusted binutils-2.43-branch.diff.gz.
- Disable zstd-by-default again (needs adjustments in at least
  golang,llvm15,llvm17 first)
- Add binutils-fix-branch.diff.
- Check non-changing of flex/bison inputs only after applying
  branch and fix-branch diffs.</changelog>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
</package>
<package pkgid="fa14386b8abbef5603208e84db862613536ac511d0af6f2596aeafc540c39c1e" name="libctf0" arch="x86_64">
  <version epoch="0" ver="2.45" rel="150100.7.57.1"/>
  <changelog author="schwab@suse.de" date="1708516800">- riscv-no-relax.patch: RISC-V: Don't generate branch/jump relocation if
  symbol is local when no-relax</changelog>
  <changelog author="dimstar@opensuse.org" date="1708603200">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="bwiedemann@suse.com" date="1714564800">- Allow to disable profiling</changelog>
  <changelog author="schwab@suse.de" date="1718280000">- binutils-pr22868.diff: Remove obsolete patch
- Undefine _FORTIFY_SOURCE when running checks</changelog>
  <changelog author="matz@suse.com" date="1722945600">- Update to version 2.43:
  * new .base64 pseudo-op, allowing base64 encoded data as strings
  * Intel APX: add support for CFCMOV, CCMP, CTEST, zero-upper, NF
    (APX_F now fully supported)
  * x86 Intel syntax now warns about more mnemonic suffixes
  * macros and .irp/.irpc/.rept bodies can use \+ to get at number
    of times the macro/body was executed
  * aarch64: support 'armv9.5-a' for -march, add support for LUT
    and LUT2
  * s390: base register operand in D(X,B) and D(L,B) can now be
    omitted (ala 'D(X,)'); warn when register type doesn't match
    operand type (use option
    'warn-regtype-mismatch=[strict|relaxed|no]' to adjust)
  * riscv: support various extensions: Zacas, Zcmp, Zfbfmin,
    Zvfbfmin, Zvfbfwma, Smcsrind/Sscsrind, XCvMem, XCvBi, XCvElw,
    XSfCease, all at version 1.0;
    remove support for assembly of privileged spec 1.9.1 (linking
    support remains)
  * arm: remove support for some old co-processors: Maverick and FPA
  * mips: '--trap' now causes either trap or breakpoint instructions
    to be emitted as per current ISA, instead of always using trap
    insn and failing when current ISA was incompatible with that
  * LoongArch: accept .option pseudo-op for fine-grained control
    of assembly code options; add support for DT_RELR
  * readelf: now displays RELR relocations in full detail;
    add -j/--display-section to show just those section(s) content
    according to their type
  * objdump/readelf now dump also .eh_frame_hdr (when present) when
    dumping .eh_frame
  * gprofng: add event types for AMD Zen3/Zen4 and Intel Ice Lake
    processors; add minimal support for riscv
  * linker:
  - put .got and .got.plt into relro segment
  - add -z isa-level-report=[none|all|needed|used] to the x86 ELF
    linker to report needed and used x86-64 ISA levels
  - add --rosegment option which changes the -z separate-code
    option so that only one read-only segment is created (instead
    of two)
  - add --section-ordering-file &lt;FILE&gt; option to add extra
    mapping of input sections to output sections
  - add -plugin-save-temps to store plugin intermediate files
    permanently
- Removed binutils-2.42.tar.bz2, binutils-2.42-branch.diff.gz.
- Added binutils-2.43.tar.bz2, binutils-2.43-branch.diff.gz.
- Removed upstream patch riscv-no-relax.patch.
- Rebased ld-relro.diff and binutils-revert-rela.diff.</changelog>
  <changelog author="matz@suse.com" date="1724846400">- Update to current 2.43.1 branch [PED-10474]:
  * PR32109 - fuzzing problem
  * PR32083 - LTO vs overridden common symbols
  * PR32067 - crash with LTO-plugin and --oformat=binary
  * PR31956 - LTO vs wrapper symbols
  * riscv - add Zimop and Zcmop extensions
- Adjusted binutils-2.43-branch.diff.gz.</changelog>
  <changelog author="martin.liska@hey.com" date="1725969600">- Enable zstd compression algorithm (instead of zlib)
  for debug info sections by default.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="jslaby@suse.cz" date="1732104000">- drop ld-relro.diff (relro is the default for some time)
  and it warns on avr spuriously (bsc#1233520)</changelog>
  <changelog author="matz@suse.com" date="1733745600">- Update to current 2.43.1 branch [PED-10254, PED-10306]:
  * s390 - Add arch15 instructions
  * various fixes from upstream: PR32153, PR32171, PR32189,
    PR32196, PR32191, PR32109, PR32372, PR32387
- Adjusted binutils-2.43-branch.diff.gz.
- Disable zstd-by-default again (needs adjustments in at least
  golang,llvm15,llvm17 first)
- Add binutils-fix-branch.diff.
- Check non-changing of flex/bison inputs only after applying
  branch and fix-branch diffs.</changelog>
  <changelog author="schwab@suse.de" date="1734436800">- Unset SUSE_ZNOW while running testsuite, many tests cannot cope</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1736510400">- Enable multitarget build on loongarch64</changelog>
  <changelog author="rguenther@suse.com" date="1739448000">- Do not build binutils-gold for SLFO.</changelog>
  <changelog author="matz@suse.com" date="1746532800">- Add -std=gnu17 to move gcc15 forward, as temporary measure until
  the binutils version can be updated [bsc#1241916].</changelog>
  <changelog author="schwab@suse.de" date="1748952000">- Drop aarch64-common-pagesize.patch, aarch64 no longer uses 64K page size</changelog>
  <changelog author="schwab@suse.de" date="1750248000">- pr33029.patch: Fix crash in assembler with -gdwarf-5</changelog>
  <changelog author="bwiedemann@suse.com" date="1752148800">- Skip PGO with %want_reproducible_builds (boo#1040589)</changelog>
  <changelog author="matz@suse.com" date="1760443200">- Update to version 2.45:
  * New versioned release of libsframe.so.2
  * s390: tools now support SFrame format 2; recognize "z17" as CPU
    name [bsc#1247105, jsc#IBM-1485]
  * sframe sections are now of ELF section type SHT_GNU_SFRAME.
  * sframe secions generated by the assembler have
    SFRAME_F_FDE_FUNC_START_PCREL set.
  * riscv: Support more extensions: standard: Zicfiss v1.0, Zicfilp v1.0,
    Zcmp v1.0, Zcmt v1.0, Smrnmi v1.0, S[sm]dbltrp v1.0, S[sm]ctr v1.0,
    ssqosid v1.0, ssnpm v1.0, smnpm v1.0, smmpm v1.0, sspm v1.0, supm v1.0,
    sha v1.0, zce v1.0, smcdeleg v1.0, ssccfg v1.0, svvptc v1.0, zilsd v1.0,
    zclsd v1.0, smrnmi v1.0;
    vendor: CORE-V, xcvbitmanip v1.0 and xcvsimd v1.0;
    SiFive, xsfvqmaccdod v1.0, xsfvqmaccqoqv1.0 and xsfvfnrclipxfqf v1.0;
    T-Head: xtheadvdot v1.0;
    MIPS: xmipscbop v1.0, xmipscmov v1.0, xmipsexectl v1.0, xmipslsp v1.0.
  * Support RISC-V privileged version 1.13, profiles 20/22/23, and
    .bfloat16 directive.
  * x86: Add support for these ISAs: Intel Diamond Rapids AMX, MOVRS,
    AVX10.2 (including SM4), MSR_IMM; Zhaoxin PadLock PHE2, RNG2, GMI, XMODX.
    Drop support for  AVX10.2 256 bit rounding.
  * arm: Add support for most of Armv9.6, enabled by -march=armv9.6-a and
    extensions '+cmpbr', '+f8f16mm', '+f8f32mm', '+fprcvt', '+lsfe', '+lsui',
    '+occmo', '+pops', '+sme2p2', '+ssve-aes', '+sve-aes', '+sve-aes2',
    '+sve-bfscale', '+sve-f16f32mm' and '+sve2p2'.
  * Predefined symbols "GAS(version)" and, on non-release builds, "GAS(date)"
    are now being made available.
  * Add .errif and .warnif directives.
  * linker:
  - Add --image-base=&lt;ADDR&gt; option to the ELF linker to behave the same
    as -Ttext-segment for compatibility with LLD.
  - Add support for mixed LTO and non-LTO codes in relocatable output.
  - s390: linker generates .eh_frame and/or .sframe for linker
    generated .plt sections by default (can be disabled
    by --no-ld-generated-unwind-info).
  - riscv: add new PLT formats, and GNU property merge rules for zicfiss
    and zicfilp extensions.
- gold is no longer included
- Contains fixes for these non-CVEs (not security bugs per upstreams
  SECURITY.md):
  * bsc#1236632 aka CVE-2025-0840 aka PR32560
  * bsc#1236977 aka CVE-2025-1149 aka PR32576
  * bsc#1236978 aka CVE-2025-1148 aka PR32576
  * bsc#1236999 aka CVE-2025-1176 aka PR32636
  * bsc#1237000 aka CVE-2025-1153 aka PR32603
  * bsc#1237001 aka CVE-2025-1152 aka PR32576
  * bsc#1237003 aka CVE-2025-1151 aka PR32576
  * bsc#1237005 aka CVE-2025-1150 aka PR32576
  * bsc#1237018 aka CVE-2025-1178 aka PR32638
  * bsc#1237019 aka CVE-2025-1181 aka PR32643
  * bsc#1237020 aka CVE-2025-1180 aka PR32642
  * bsc#1237021 aka CVE-2025-1179 aka PR32640
  * bsc#1237042 aka CVE-2025-1182 aka PR32644
  * bsc#1240870 aka CVE-2025-3198 aka PR32716
  * bsc#1243756 aka CVE-2025-5244 aka PR32858
  * bsc#1243760 aka CVE-2025-5245 aka PR32829
  * bsc#1246481 aka CVE-2025-7545 aka PR33049
  * bsc#1246486 aka CVE-2025-7546 aka PR33050
  * bsc#1247114 aka CVE-2025-8224 aka PR32109
  * bsc#1247117 aka CVE-2025-8225 no PR
- Add these backport patches:
  * pr32556.diff for bsc#1236976 aka CVE-2025-1147 aka PR32556
  * pr33457.diff for bsc#1250632 aka CVE-2025-11083 aka PR33457
  * pr33452.diff for bsc#1251275 aka CVE-2025-11412 aka PR33452
  * pr33456.diff and pr33456-2.diff for bsc#1251276 aka CVE-2025-11413
    aka PR33456
  * pr33450.diff for bsc#1251277 aka CVE-2025-11414 aka PR33450
  * pr33499.diff for bsc#1251794 aka CVE-2025-11494 aka PR33499
  * pr33502.diff for bsc#1251795 aka CVE-2025-11495 aka PR33502
- Adjust binutils-disable-code-arch-error.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff,
  binutils-revert-rela.diff, binutils-skip-rpaths.patch
- Remove pr33029.patch (upstreamed), enable-targets-gold.diff (obsolete),
  binutils-2.43.tar.bz2.sig, binutils-2.43.tar.bz2,
  binutils-2.43-branch.diff.gz
- Add binutils-2.45.tar.bz2.sig, binutils-2.45.tar.bz2,
  binutils-2.45-branch.diff.gz
- Rename binutils-fix-branch.diff to binutils-fix-branch.diff.templ
  as long as its empty.</changelog>
  <changelog author="matz@suse.com" date="1761652800">- Amend binutils-compat-old-behaviour.diff to not enable
  '-z gcs=implicit' on aarch64 for old codestreams.</changelog>
  <changelog author="matz@suse.com" date="1762171200">- Update to current 2.45 branch at 94cb1c075 to include fix
  for PR33584 (a problem related to LTO vs fortran COMMON
  blocks).</changelog>
</package>
<package pkgid="ab038eb7df5d4d9ef8d286457c4c0ecf2589cd9ae534d6df0648c5d0cdc9717a" name="libcups2" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.72.1"/>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
</package>
<package pkgid="1f73e130bc9bddcb9964f3450a0a164f7fdefb97302e444a13128560636f95b7" name="libcups2" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.77.1"/>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1763640000">- cups-2.2.7-CVE-2025-61915.patch is based on
  https://github.com/OpenPrinting/cups-ghsa-hxm8-vfpq-jrfc/pull/2
  backported to CUPS 2.2.7 to fix CVE-2025-61915
  "Local denial-of-service via cupsd.conf update
  and related issues"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-hxm8-vfpq-jrfc
  bsc#1253783
- cups-2.2.7-CVE-2025-58436.patch mitigates CVE-2025-58436
  "Slow client communication leads to a possible DoS attack"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-8wpw-vfgm-qrrr
  (bsc#1244057)
- cups-2.2.7-bsc1234225c76.patch is from
  https://bugzilla.suse.com/show_bug.cgi?id=1234225#c76
  to fix bsc#1234225 "cupsd stuck in poll() loop"
  see also https://github.com/OpenPrinting/cups/issues/1264
- In general regarding CUPS security issues and/or DoS issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
</package>
<package pkgid="e7937e4eb69d8626fec3f9cc1b84e4fe0286513fc0059c76f2693f7c24d1399f" name="libcups2" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.80.1"/>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1763640000">- cups-2.2.7-CVE-2025-61915.patch is based on
  https://github.com/OpenPrinting/cups-ghsa-hxm8-vfpq-jrfc/pull/2
  backported to CUPS 2.2.7 to fix CVE-2025-61915
  "Local denial-of-service via cupsd.conf update
  and related issues"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-hxm8-vfpq-jrfc
  bsc#1253783
- cups-2.2.7-CVE-2025-58436.patch mitigates CVE-2025-58436
  "Slow client communication leads to a possible DoS attack"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-8wpw-vfgm-qrrr
  (bsc#1244057)
- cups-2.2.7-bsc1234225c76.patch is from
  https://bugzilla.suse.com/show_bug.cgi?id=1234225#c76
  to fix bsc#1234225 "cupsd stuck in poll() loop"
  see also https://github.com/OpenPrinting/cups/issues/1264
- In general regarding CUPS security issues and/or DoS issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1764590400">- cups-2.2.7-CVE-2025-58436.patch causes a regression
  bsc#1254353 "CUPS ... will hang GTK applications", see also
  https://github.com/OpenPrinting/cups/issues/1429
  so disabled this patch for now until the regression is fixed</changelog>
</package>
<package pkgid="21b3388e296efed774839204d1aa2956225a5238c5ab40aaeb1ec22c31d91bda" name="libcups2" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.83.1"/>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1763640000">- cups-2.2.7-CVE-2025-61915.patch is based on
  https://github.com/OpenPrinting/cups-ghsa-hxm8-vfpq-jrfc/pull/2
  backported to CUPS 2.2.7 to fix CVE-2025-61915
  "Local denial-of-service via cupsd.conf update
  and related issues"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-hxm8-vfpq-jrfc
  bsc#1253783
- cups-2.2.7-CVE-2025-58436.patch mitigates CVE-2025-58436
  "Slow client communication leads to a possible DoS attack"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-8wpw-vfgm-qrrr
  (bsc#1244057)
- cups-2.2.7-bsc1234225c76.patch is from
  https://bugzilla.suse.com/show_bug.cgi?id=1234225#c76
  to fix bsc#1234225 "cupsd stuck in poll() loop"
  see also https://github.com/OpenPrinting/cups/issues/1264
- In general regarding CUPS security issues and/or DoS issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1764763200">- Adapted cups-2.2.7-CVE-2025-58436.patch according to
  https://github.com/OpenPrinting/cups/pull/1439
  "http.c: Fix infinite loop in GTK apps"
  which fixes the regression boo#1254353
  "Cups version 2.2.7-150000.3.77.1 will hang GTK applications"
  https://github.com/OpenPrinting/cups/issues/1429
  "CUPS 2.4.15 freezes apps requesting the GTK print dialog"</changelog>
</package>
<package pkgid="054088bd387ee0810e3b033ac77ed1b9c6fbae4d29cfe03e92b22e92589fca22" name="libcups2" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.86.1"/>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1763640000">- cups-2.2.7-CVE-2025-61915.patch is based on
  https://github.com/OpenPrinting/cups-ghsa-hxm8-vfpq-jrfc/pull/2
  backported to CUPS 2.2.7 to fix CVE-2025-61915
  "Local denial-of-service via cupsd.conf update
  and related issues"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-hxm8-vfpq-jrfc
  bsc#1253783
- cups-2.2.7-CVE-2025-58436.patch mitigates CVE-2025-58436
  "Slow client communication leads to a possible DoS attack"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-8wpw-vfgm-qrrr
  (bsc#1244057)
- cups-2.2.7-bsc1234225c76.patch is from
  https://bugzilla.suse.com/show_bug.cgi?id=1234225#c76
  to fix bsc#1234225 "cupsd stuck in poll() loop"
  see also https://github.com/OpenPrinting/cups/issues/1264
- In general regarding CUPS security issues and/or DoS issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1764763200">- Adapted cups-2.2.7-CVE-2025-58436.patch according to
  https://github.com/OpenPrinting/cups/pull/1439
  "http.c: Fix infinite loop in GTK apps"
  which fixes the regression boo#1254353
  "Cups version 2.2.7-150000.3.77.1 will hang GTK applications"
  https://github.com/OpenPrinting/cups/issues/1429
  "CUPS 2.4.15 freezes apps requesting the GTK print dialog"</changelog>
  <changelog author="jsmeix@suse.com" date="1775822400">- cups-2.2.7-CVE-2026-34990.patch is is based on
  https://github.com/OpenPrinting/cups/commit/e052dc44da9d12adfbebc51de4975fbadb2ce356
  backported to CUPS 2.2.7 to fix CVE-2026-34990
  "Local print admin token disclosure using temporary printers"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-c54j-2vqw-wpwp
  bsc#1261568
- Incompatible change needed to properly fix CVE-2026-34990:
  The ability to create/overwrite files via a 'file:' device URI
  is removed. Now the specified file must already exist
  and is opened only for writing in exclusive mode.
  In general: Historically 'file:' devices were provided
  for backwards compatibility with System V interface scripts
  that talked to serial printers over a character device, with
  very limited debugging support for writing to an ordinary file.
  It is not and never was intended as a way to "print to a file".
  For a proper debugging method see the section
  "A backend that sends its input into a file for debugging" in
  https://en.opensuse.org/SDB:Using_Your_Own_Backends_to_Print_with_CUPS</changelog>
</package>
<package pkgid="774eef02e10793dddffe05d404bdb7029816338ff43754bdd48c48c7290574bd" name="libcupscgi1" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.72.1"/>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
</package>
<package pkgid="db7612555f92ebacb005b4f9b60fbde3696f74596949028602a2f43b1c459753" name="libcupscgi1" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.77.1"/>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1763640000">- cups-2.2.7-CVE-2025-61915.patch is based on
  https://github.com/OpenPrinting/cups-ghsa-hxm8-vfpq-jrfc/pull/2
  backported to CUPS 2.2.7 to fix CVE-2025-61915
  "Local denial-of-service via cupsd.conf update
  and related issues"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-hxm8-vfpq-jrfc
  bsc#1253783
- cups-2.2.7-CVE-2025-58436.patch mitigates CVE-2025-58436
  "Slow client communication leads to a possible DoS attack"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-8wpw-vfgm-qrrr
  (bsc#1244057)
- cups-2.2.7-bsc1234225c76.patch is from
  https://bugzilla.suse.com/show_bug.cgi?id=1234225#c76
  to fix bsc#1234225 "cupsd stuck in poll() loop"
  see also https://github.com/OpenPrinting/cups/issues/1264
- In general regarding CUPS security issues and/or DoS issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
</package>
<package pkgid="57f0f3a5d4f6029669fdc57538b1cf0d3f153a9066a474fae472fabbd3119ba0" name="libcupscgi1" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.80.1"/>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1763640000">- cups-2.2.7-CVE-2025-61915.patch is based on
  https://github.com/OpenPrinting/cups-ghsa-hxm8-vfpq-jrfc/pull/2
  backported to CUPS 2.2.7 to fix CVE-2025-61915
  "Local denial-of-service via cupsd.conf update
  and related issues"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-hxm8-vfpq-jrfc
  bsc#1253783
- cups-2.2.7-CVE-2025-58436.patch mitigates CVE-2025-58436
  "Slow client communication leads to a possible DoS attack"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-8wpw-vfgm-qrrr
  (bsc#1244057)
- cups-2.2.7-bsc1234225c76.patch is from
  https://bugzilla.suse.com/show_bug.cgi?id=1234225#c76
  to fix bsc#1234225 "cupsd stuck in poll() loop"
  see also https://github.com/OpenPrinting/cups/issues/1264
- In general regarding CUPS security issues and/or DoS issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1764590400">- cups-2.2.7-CVE-2025-58436.patch causes a regression
  bsc#1254353 "CUPS ... will hang GTK applications", see also
  https://github.com/OpenPrinting/cups/issues/1429
  so disabled this patch for now until the regression is fixed</changelog>
</package>
<package pkgid="f438f400537980a3c58fa4910a0617dab610c0fdb29a43b3e5cb63e6db374ff6" name="libcupscgi1" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.83.1"/>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1763640000">- cups-2.2.7-CVE-2025-61915.patch is based on
  https://github.com/OpenPrinting/cups-ghsa-hxm8-vfpq-jrfc/pull/2
  backported to CUPS 2.2.7 to fix CVE-2025-61915
  "Local denial-of-service via cupsd.conf update
  and related issues"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-hxm8-vfpq-jrfc
  bsc#1253783
- cups-2.2.7-CVE-2025-58436.patch mitigates CVE-2025-58436
  "Slow client communication leads to a possible DoS attack"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-8wpw-vfgm-qrrr
  (bsc#1244057)
- cups-2.2.7-bsc1234225c76.patch is from
  https://bugzilla.suse.com/show_bug.cgi?id=1234225#c76
  to fix bsc#1234225 "cupsd stuck in poll() loop"
  see also https://github.com/OpenPrinting/cups/issues/1264
- In general regarding CUPS security issues and/or DoS issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1764763200">- Adapted cups-2.2.7-CVE-2025-58436.patch according to
  https://github.com/OpenPrinting/cups/pull/1439
  "http.c: Fix infinite loop in GTK apps"
  which fixes the regression boo#1254353
  "Cups version 2.2.7-150000.3.77.1 will hang GTK applications"
  https://github.com/OpenPrinting/cups/issues/1429
  "CUPS 2.4.15 freezes apps requesting the GTK print dialog"</changelog>
</package>
<package pkgid="b582a7051585d49e0222a2bee4012e83368acf7f1a647f4d565f74fa60df2e0b" name="libcupscgi1" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.86.1"/>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1763640000">- cups-2.2.7-CVE-2025-61915.patch is based on
  https://github.com/OpenPrinting/cups-ghsa-hxm8-vfpq-jrfc/pull/2
  backported to CUPS 2.2.7 to fix CVE-2025-61915
  "Local denial-of-service via cupsd.conf update
  and related issues"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-hxm8-vfpq-jrfc
  bsc#1253783
- cups-2.2.7-CVE-2025-58436.patch mitigates CVE-2025-58436
  "Slow client communication leads to a possible DoS attack"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-8wpw-vfgm-qrrr
  (bsc#1244057)
- cups-2.2.7-bsc1234225c76.patch is from
  https://bugzilla.suse.com/show_bug.cgi?id=1234225#c76
  to fix bsc#1234225 "cupsd stuck in poll() loop"
  see also https://github.com/OpenPrinting/cups/issues/1264
- In general regarding CUPS security issues and/or DoS issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1764763200">- Adapted cups-2.2.7-CVE-2025-58436.patch according to
  https://github.com/OpenPrinting/cups/pull/1439
  "http.c: Fix infinite loop in GTK apps"
  which fixes the regression boo#1254353
  "Cups version 2.2.7-150000.3.77.1 will hang GTK applications"
  https://github.com/OpenPrinting/cups/issues/1429
  "CUPS 2.4.15 freezes apps requesting the GTK print dialog"</changelog>
  <changelog author="jsmeix@suse.com" date="1775822400">- cups-2.2.7-CVE-2026-34990.patch is is based on
  https://github.com/OpenPrinting/cups/commit/e052dc44da9d12adfbebc51de4975fbadb2ce356
  backported to CUPS 2.2.7 to fix CVE-2026-34990
  "Local print admin token disclosure using temporary printers"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-c54j-2vqw-wpwp
  bsc#1261568
- Incompatible change needed to properly fix CVE-2026-34990:
  The ability to create/overwrite files via a 'file:' device URI
  is removed. Now the specified file must already exist
  and is opened only for writing in exclusive mode.
  In general: Historically 'file:' devices were provided
  for backwards compatibility with System V interface scripts
  that talked to serial printers over a character device, with
  very limited debugging support for writing to an ordinary file.
  It is not and never was intended as a way to "print to a file".
  For a proper debugging method see the section
  "A backend that sends its input into a file for debugging" in
  https://en.opensuse.org/SDB:Using_Your_Own_Backends_to_Print_with_CUPS</changelog>
</package>
<package pkgid="391df97395c8e85dfc209cc6d0a441a1d0b59423c095d8b163fcfc4a01341517" name="libcupsimage2" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.72.1"/>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
</package>
<package pkgid="e34565cd55e69a35be760853f2980a2d3f0126d0f3f967948a0f159e6cec3b30" name="libcupsimage2" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.77.1"/>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1763640000">- cups-2.2.7-CVE-2025-61915.patch is based on
  https://github.com/OpenPrinting/cups-ghsa-hxm8-vfpq-jrfc/pull/2
  backported to CUPS 2.2.7 to fix CVE-2025-61915
  "Local denial-of-service via cupsd.conf update
  and related issues"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-hxm8-vfpq-jrfc
  bsc#1253783
- cups-2.2.7-CVE-2025-58436.patch mitigates CVE-2025-58436
  "Slow client communication leads to a possible DoS attack"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-8wpw-vfgm-qrrr
  (bsc#1244057)
- cups-2.2.7-bsc1234225c76.patch is from
  https://bugzilla.suse.com/show_bug.cgi?id=1234225#c76
  to fix bsc#1234225 "cupsd stuck in poll() loop"
  see also https://github.com/OpenPrinting/cups/issues/1264
- In general regarding CUPS security issues and/or DoS issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
</package>
<package pkgid="83825f655aaf5a0d8db6f9ff9f04178f47a55f344a1b65abb634e69f2c9010a5" name="libcupsimage2" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.80.1"/>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1763640000">- cups-2.2.7-CVE-2025-61915.patch is based on
  https://github.com/OpenPrinting/cups-ghsa-hxm8-vfpq-jrfc/pull/2
  backported to CUPS 2.2.7 to fix CVE-2025-61915
  "Local denial-of-service via cupsd.conf update
  and related issues"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-hxm8-vfpq-jrfc
  bsc#1253783
- cups-2.2.7-CVE-2025-58436.patch mitigates CVE-2025-58436
  "Slow client communication leads to a possible DoS attack"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-8wpw-vfgm-qrrr
  (bsc#1244057)
- cups-2.2.7-bsc1234225c76.patch is from
  https://bugzilla.suse.com/show_bug.cgi?id=1234225#c76
  to fix bsc#1234225 "cupsd stuck in poll() loop"
  see also https://github.com/OpenPrinting/cups/issues/1264
- In general regarding CUPS security issues and/or DoS issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1764590400">- cups-2.2.7-CVE-2025-58436.patch causes a regression
  bsc#1254353 "CUPS ... will hang GTK applications", see also
  https://github.com/OpenPrinting/cups/issues/1429
  so disabled this patch for now until the regression is fixed</changelog>
</package>
<package pkgid="72aa269e3af9ea7363c4712e85863d714499e5423091015c8352122d4d710795" name="libcupsimage2" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.83.1"/>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1763640000">- cups-2.2.7-CVE-2025-61915.patch is based on
  https://github.com/OpenPrinting/cups-ghsa-hxm8-vfpq-jrfc/pull/2
  backported to CUPS 2.2.7 to fix CVE-2025-61915
  "Local denial-of-service via cupsd.conf update
  and related issues"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-hxm8-vfpq-jrfc
  bsc#1253783
- cups-2.2.7-CVE-2025-58436.patch mitigates CVE-2025-58436
  "Slow client communication leads to a possible DoS attack"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-8wpw-vfgm-qrrr
  (bsc#1244057)
- cups-2.2.7-bsc1234225c76.patch is from
  https://bugzilla.suse.com/show_bug.cgi?id=1234225#c76
  to fix bsc#1234225 "cupsd stuck in poll() loop"
  see also https://github.com/OpenPrinting/cups/issues/1264
- In general regarding CUPS security issues and/or DoS issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1764763200">- Adapted cups-2.2.7-CVE-2025-58436.patch according to
  https://github.com/OpenPrinting/cups/pull/1439
  "http.c: Fix infinite loop in GTK apps"
  which fixes the regression boo#1254353
  "Cups version 2.2.7-150000.3.77.1 will hang GTK applications"
  https://github.com/OpenPrinting/cups/issues/1429
  "CUPS 2.4.15 freezes apps requesting the GTK print dialog"</changelog>
</package>
<package pkgid="9ef1521eb8a1f7d88dc8e8f2f4a7cb7edbc9f1849ce871f20c0f2b513c23899c" name="libcupsimage2" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.86.1"/>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1763640000">- cups-2.2.7-CVE-2025-61915.patch is based on
  https://github.com/OpenPrinting/cups-ghsa-hxm8-vfpq-jrfc/pull/2
  backported to CUPS 2.2.7 to fix CVE-2025-61915
  "Local denial-of-service via cupsd.conf update
  and related issues"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-hxm8-vfpq-jrfc
  bsc#1253783
- cups-2.2.7-CVE-2025-58436.patch mitigates CVE-2025-58436
  "Slow client communication leads to a possible DoS attack"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-8wpw-vfgm-qrrr
  (bsc#1244057)
- cups-2.2.7-bsc1234225c76.patch is from
  https://bugzilla.suse.com/show_bug.cgi?id=1234225#c76
  to fix bsc#1234225 "cupsd stuck in poll() loop"
  see also https://github.com/OpenPrinting/cups/issues/1264
- In general regarding CUPS security issues and/or DoS issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1764763200">- Adapted cups-2.2.7-CVE-2025-58436.patch according to
  https://github.com/OpenPrinting/cups/pull/1439
  "http.c: Fix infinite loop in GTK apps"
  which fixes the regression boo#1254353
  "Cups version 2.2.7-150000.3.77.1 will hang GTK applications"
  https://github.com/OpenPrinting/cups/issues/1429
  "CUPS 2.4.15 freezes apps requesting the GTK print dialog"</changelog>
  <changelog author="jsmeix@suse.com" date="1775822400">- cups-2.2.7-CVE-2026-34990.patch is is based on
  https://github.com/OpenPrinting/cups/commit/e052dc44da9d12adfbebc51de4975fbadb2ce356
  backported to CUPS 2.2.7 to fix CVE-2026-34990
  "Local print admin token disclosure using temporary printers"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-c54j-2vqw-wpwp
  bsc#1261568
- Incompatible change needed to properly fix CVE-2026-34990:
  The ability to create/overwrite files via a 'file:' device URI
  is removed. Now the specified file must already exist
  and is opened only for writing in exclusive mode.
  In general: Historically 'file:' devices were provided
  for backwards compatibility with System V interface scripts
  that talked to serial printers over a character device, with
  very limited debugging support for writing to an ordinary file.
  It is not and never was intended as a way to "print to a file".
  For a proper debugging method see the section
  "A backend that sends its input into a file for debugging" in
  https://en.opensuse.org/SDB:Using_Your_Own_Backends_to_Print_with_CUPS</changelog>
</package>
<package pkgid="254d87f9ae2fab1ddae84d2102765bb5bbde4078ea219e660dcfcfe8a019371d" name="libcupsmime1" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.72.1"/>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
</package>
<package pkgid="6d512bede3c318350552fa271d5c3808886096842f02cbea2f6e16f48ed618ab" name="libcupsmime1" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.77.1"/>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1763640000">- cups-2.2.7-CVE-2025-61915.patch is based on
  https://github.com/OpenPrinting/cups-ghsa-hxm8-vfpq-jrfc/pull/2
  backported to CUPS 2.2.7 to fix CVE-2025-61915
  "Local denial-of-service via cupsd.conf update
  and related issues"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-hxm8-vfpq-jrfc
  bsc#1253783
- cups-2.2.7-CVE-2025-58436.patch mitigates CVE-2025-58436
  "Slow client communication leads to a possible DoS attack"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-8wpw-vfgm-qrrr
  (bsc#1244057)
- cups-2.2.7-bsc1234225c76.patch is from
  https://bugzilla.suse.com/show_bug.cgi?id=1234225#c76
  to fix bsc#1234225 "cupsd stuck in poll() loop"
  see also https://github.com/OpenPrinting/cups/issues/1264
- In general regarding CUPS security issues and/or DoS issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
</package>
<package pkgid="6134c3bce66f309a0e03d499cbabf129637ac626a2790b1d86a8ebd7bcb22bbf" name="libcupsmime1" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.80.1"/>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1763640000">- cups-2.2.7-CVE-2025-61915.patch is based on
  https://github.com/OpenPrinting/cups-ghsa-hxm8-vfpq-jrfc/pull/2
  backported to CUPS 2.2.7 to fix CVE-2025-61915
  "Local denial-of-service via cupsd.conf update
  and related issues"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-hxm8-vfpq-jrfc
  bsc#1253783
- cups-2.2.7-CVE-2025-58436.patch mitigates CVE-2025-58436
  "Slow client communication leads to a possible DoS attack"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-8wpw-vfgm-qrrr
  (bsc#1244057)
- cups-2.2.7-bsc1234225c76.patch is from
  https://bugzilla.suse.com/show_bug.cgi?id=1234225#c76
  to fix bsc#1234225 "cupsd stuck in poll() loop"
  see also https://github.com/OpenPrinting/cups/issues/1264
- In general regarding CUPS security issues and/or DoS issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1764590400">- cups-2.2.7-CVE-2025-58436.patch causes a regression
  bsc#1254353 "CUPS ... will hang GTK applications", see also
  https://github.com/OpenPrinting/cups/issues/1429
  so disabled this patch for now until the regression is fixed</changelog>
</package>
<package pkgid="9cc9e25a7ee82c5547013c242b9febeb1d6946c4e47b49cbddf0722bf276f029" name="libcupsmime1" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.83.1"/>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1763640000">- cups-2.2.7-CVE-2025-61915.patch is based on
  https://github.com/OpenPrinting/cups-ghsa-hxm8-vfpq-jrfc/pull/2
  backported to CUPS 2.2.7 to fix CVE-2025-61915
  "Local denial-of-service via cupsd.conf update
  and related issues"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-hxm8-vfpq-jrfc
  bsc#1253783
- cups-2.2.7-CVE-2025-58436.patch mitigates CVE-2025-58436
  "Slow client communication leads to a possible DoS attack"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-8wpw-vfgm-qrrr
  (bsc#1244057)
- cups-2.2.7-bsc1234225c76.patch is from
  https://bugzilla.suse.com/show_bug.cgi?id=1234225#c76
  to fix bsc#1234225 "cupsd stuck in poll() loop"
  see also https://github.com/OpenPrinting/cups/issues/1264
- In general regarding CUPS security issues and/or DoS issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1764763200">- Adapted cups-2.2.7-CVE-2025-58436.patch according to
  https://github.com/OpenPrinting/cups/pull/1439
  "http.c: Fix infinite loop in GTK apps"
  which fixes the regression boo#1254353
  "Cups version 2.2.7-150000.3.77.1 will hang GTK applications"
  https://github.com/OpenPrinting/cups/issues/1429
  "CUPS 2.4.15 freezes apps requesting the GTK print dialog"</changelog>
</package>
<package pkgid="276e8954488f29759743906f11e409f2be9687bbc86ef14e73e3f82dceaf5164" name="libcupsmime1" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.86.1"/>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1763640000">- cups-2.2.7-CVE-2025-61915.patch is based on
  https://github.com/OpenPrinting/cups-ghsa-hxm8-vfpq-jrfc/pull/2
  backported to CUPS 2.2.7 to fix CVE-2025-61915
  "Local denial-of-service via cupsd.conf update
  and related issues"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-hxm8-vfpq-jrfc
  bsc#1253783
- cups-2.2.7-CVE-2025-58436.patch mitigates CVE-2025-58436
  "Slow client communication leads to a possible DoS attack"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-8wpw-vfgm-qrrr
  (bsc#1244057)
- cups-2.2.7-bsc1234225c76.patch is from
  https://bugzilla.suse.com/show_bug.cgi?id=1234225#c76
  to fix bsc#1234225 "cupsd stuck in poll() loop"
  see also https://github.com/OpenPrinting/cups/issues/1264
- In general regarding CUPS security issues and/or DoS issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1764763200">- Adapted cups-2.2.7-CVE-2025-58436.patch according to
  https://github.com/OpenPrinting/cups/pull/1439
  "http.c: Fix infinite loop in GTK apps"
  which fixes the regression boo#1254353
  "Cups version 2.2.7-150000.3.77.1 will hang GTK applications"
  https://github.com/OpenPrinting/cups/issues/1429
  "CUPS 2.4.15 freezes apps requesting the GTK print dialog"</changelog>
  <changelog author="jsmeix@suse.com" date="1775822400">- cups-2.2.7-CVE-2026-34990.patch is is based on
  https://github.com/OpenPrinting/cups/commit/e052dc44da9d12adfbebc51de4975fbadb2ce356
  backported to CUPS 2.2.7 to fix CVE-2026-34990
  "Local print admin token disclosure using temporary printers"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-c54j-2vqw-wpwp
  bsc#1261568
- Incompatible change needed to properly fix CVE-2026-34990:
  The ability to create/overwrite files via a 'file:' device URI
  is removed. Now the specified file must already exist
  and is opened only for writing in exclusive mode.
  In general: Historically 'file:' devices were provided
  for backwards compatibility with System V interface scripts
  that talked to serial printers over a character device, with
  very limited debugging support for writing to an ordinary file.
  It is not and never was intended as a way to "print to a file".
  For a proper debugging method see the section
  "A backend that sends its input into a file for debugging" in
  https://en.opensuse.org/SDB:Using_Your_Own_Backends_to_Print_with_CUPS</changelog>
</package>
<package pkgid="e2ac9e773f804b2a578ea41d758b17dd489a5d7a7d8994b2093411fe06e62070" name="libcupsppdc1" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.72.1"/>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
</package>
<package pkgid="8941a699a24ba9a8c3aaa494eb43cfcdc30f786dc21de45a6f15cdad2ef57acd" name="libcupsppdc1" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.77.1"/>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1763640000">- cups-2.2.7-CVE-2025-61915.patch is based on
  https://github.com/OpenPrinting/cups-ghsa-hxm8-vfpq-jrfc/pull/2
  backported to CUPS 2.2.7 to fix CVE-2025-61915
  "Local denial-of-service via cupsd.conf update
  and related issues"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-hxm8-vfpq-jrfc
  bsc#1253783
- cups-2.2.7-CVE-2025-58436.patch mitigates CVE-2025-58436
  "Slow client communication leads to a possible DoS attack"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-8wpw-vfgm-qrrr
  (bsc#1244057)
- cups-2.2.7-bsc1234225c76.patch is from
  https://bugzilla.suse.com/show_bug.cgi?id=1234225#c76
  to fix bsc#1234225 "cupsd stuck in poll() loop"
  see also https://github.com/OpenPrinting/cups/issues/1264
- In general regarding CUPS security issues and/or DoS issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
</package>
<package pkgid="3c5cbd266b0bbde86d4202e1671083427023569891312c8489f51995a3ad3450" name="libcupsppdc1" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.80.1"/>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1763640000">- cups-2.2.7-CVE-2025-61915.patch is based on
  https://github.com/OpenPrinting/cups-ghsa-hxm8-vfpq-jrfc/pull/2
  backported to CUPS 2.2.7 to fix CVE-2025-61915
  "Local denial-of-service via cupsd.conf update
  and related issues"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-hxm8-vfpq-jrfc
  bsc#1253783
- cups-2.2.7-CVE-2025-58436.patch mitigates CVE-2025-58436
  "Slow client communication leads to a possible DoS attack"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-8wpw-vfgm-qrrr
  (bsc#1244057)
- cups-2.2.7-bsc1234225c76.patch is from
  https://bugzilla.suse.com/show_bug.cgi?id=1234225#c76
  to fix bsc#1234225 "cupsd stuck in poll() loop"
  see also https://github.com/OpenPrinting/cups/issues/1264
- In general regarding CUPS security issues and/or DoS issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1764590400">- cups-2.2.7-CVE-2025-58436.patch causes a regression
  bsc#1254353 "CUPS ... will hang GTK applications", see also
  https://github.com/OpenPrinting/cups/issues/1429
  so disabled this patch for now until the regression is fixed</changelog>
</package>
<package pkgid="7adb8867d96e0a4b1dacec81bf0712f0fd0a6a5fe7d9d6be4b1ae716662d0109" name="libcupsppdc1" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.83.1"/>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1763640000">- cups-2.2.7-CVE-2025-61915.patch is based on
  https://github.com/OpenPrinting/cups-ghsa-hxm8-vfpq-jrfc/pull/2
  backported to CUPS 2.2.7 to fix CVE-2025-61915
  "Local denial-of-service via cupsd.conf update
  and related issues"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-hxm8-vfpq-jrfc
  bsc#1253783
- cups-2.2.7-CVE-2025-58436.patch mitigates CVE-2025-58436
  "Slow client communication leads to a possible DoS attack"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-8wpw-vfgm-qrrr
  (bsc#1244057)
- cups-2.2.7-bsc1234225c76.patch is from
  https://bugzilla.suse.com/show_bug.cgi?id=1234225#c76
  to fix bsc#1234225 "cupsd stuck in poll() loop"
  see also https://github.com/OpenPrinting/cups/issues/1264
- In general regarding CUPS security issues and/or DoS issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1764763200">- Adapted cups-2.2.7-CVE-2025-58436.patch according to
  https://github.com/OpenPrinting/cups/pull/1439
  "http.c: Fix infinite loop in GTK apps"
  which fixes the regression boo#1254353
  "Cups version 2.2.7-150000.3.77.1 will hang GTK applications"
  https://github.com/OpenPrinting/cups/issues/1429
  "CUPS 2.4.15 freezes apps requesting the GTK print dialog"</changelog>
</package>
<package pkgid="61571a87a787bb05b867561ad040958344fe98c910bdba74a14eefa8d4a8adbb" name="libcupsppdc1" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.86.1"/>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
  <changelog author="nopower@suse.com" date="1715601600">- cups-2.2.7-web-ui-kerberos-authentication.patch, update
  patch to handle local 'Negotiate' authentication response
  for cli clients. (bsc#1223179).</changelog>
  <changelog author="jsmeix@suse.com" date="1716984000">- cups-2.2.7-CVE-2024-35235.patch is derived
  from the upstream patch against master (CUPS 2.5)
  to behave backward compatible for CUPS 2.2.7
  in SLE15 and openSUSE Leap 15 to fix CVE-2024-35235
  "cupsd Listen port arbitrary chmod 0140777"
  without the more secure but backward-incompatible behaviour
  of the upstream patch for CUPS 2.5
  that ignores domain sockets specified in 'Listen' entries
  in /etc/cups/cupsd.conf when cupsd is lauched via systemd
  (in particular when launched on-demand by systemd)
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-vvwp-mv6j-hw6f
  bsc#1225365</changelog>
  <changelog author="jsmeix@suse.com" date="1720526400">- Require the exact matching version-release of all libcups*
  sub-packages (bsc#1226192)</changelog>
  <changelog author="jsmeix@suse.com" date="1724155200">- cups-branch-2.2-commit-b643d6ba92f00752aa5e74ff86ad3974334914c1.diff
  is https://github.com/OpenPrinting/cups/commit/b643d6ba92f00752aa5e74ff86ad3974334914c1
  which was added in CUPS 2.2.8 that
  fixed a parsing bug in cups_auth_find() in cups/auth.c
  which lead to cupsd failing to authenticate users
  when group membership is required by cupsd configuration
  like 'Require user @GROUP' which lead to CUPS related commands
  requesting password from group users even if it is not needed
  (bsc#1226227)
- In cups.changes replaced one place where UTF-8 characters
  were used in the entry dated "Sat Sep 30 08:52:42 UTC 2017"
  for what should be ' - ' by ASCII to avoid RPMLINT warning
  about 'non-break-space' which "can lead to obscure errors".</changelog>
  <changelog author="jsmeix@suse.com" date="1756900800">- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"</changelog>
  <changelog author="jsmeix@suse.com" date="1756987200">- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128</changelog>
  <changelog author="jsmeix@suse.com" date="1757419200">- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1763640000">- cups-2.2.7-CVE-2025-61915.patch is based on
  https://github.com/OpenPrinting/cups-ghsa-hxm8-vfpq-jrfc/pull/2
  backported to CUPS 2.2.7 to fix CVE-2025-61915
  "Local denial-of-service via cupsd.conf update
  and related issues"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-hxm8-vfpq-jrfc
  bsc#1253783
- cups-2.2.7-CVE-2025-58436.patch mitigates CVE-2025-58436
  "Slow client communication leads to a possible DoS attack"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-8wpw-vfgm-qrrr
  (bsc#1244057)
- cups-2.2.7-bsc1234225c76.patch is from
  https://bugzilla.suse.com/show_bug.cgi?id=1234225#c76
  to fix bsc#1234225 "cupsd stuck in poll() loop"
  see also https://github.com/OpenPrinting/cups/issues/1264
- In general regarding CUPS security issues and/or DoS issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings</changelog>
  <changelog author="jsmeix@suse.com" date="1764763200">- Adapted cups-2.2.7-CVE-2025-58436.patch according to
  https://github.com/OpenPrinting/cups/pull/1439
  "http.c: Fix infinite loop in GTK apps"
  which fixes the regression boo#1254353
  "Cups version 2.2.7-150000.3.77.1 will hang GTK applications"
  https://github.com/OpenPrinting/cups/issues/1429
  "CUPS 2.4.15 freezes apps requesting the GTK print dialog"</changelog>
  <changelog author="jsmeix@suse.com" date="1775822400">- cups-2.2.7-CVE-2026-34990.patch is is based on
  https://github.com/OpenPrinting/cups/commit/e052dc44da9d12adfbebc51de4975fbadb2ce356
  backported to CUPS 2.2.7 to fix CVE-2026-34990
  "Local print admin token disclosure using temporary printers"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-c54j-2vqw-wpwp
  bsc#1261568
- Incompatible change needed to properly fix CVE-2026-34990:
  The ability to create/overwrite files via a 'file:' device URI
  is removed. Now the specified file must already exist
  and is opened only for writing in exclusive mode.
  In general: Historically 'file:' devices were provided
  for backwards compatibility with System V interface scripts
  that talked to serial printers over a character device, with
  very limited debugging support for writing to an ordinary file.
  It is not and never was intended as a way to "print to a file".
  For a proper debugging method see the section
  "A backend that sends its input into a file for debugging" in
  https://en.opensuse.org/SDB:Using_Your_Own_Backends_to_Print_with_CUPS</changelog>
</package>
<package pkgid="e47ef8a565f306e6c6443b46c543747dfb8b4460c7b1c2c6f3fed15e6dbb3413" name="libcurl-devel" arch="x86_64">
  <version epoch="0" ver="8.14.1" rel="150600.4.28.1"/>
  <changelog author="pmonreal@suse.com" date="1727179200">- Update to 8.10.1:
  * Bugfixes:
  - autotools: fix `--with-ca-embed` build rule
  - cmake: ensure `CURL_USE_OPENSSL`/`USE_OPENSSL_QUIC` are set in sync
  - cmake: fix MSH3 to appear on the feature list
  - connect: store connection info when really done
  - FTP: partly revert eeb7c1280742f5c8fa48a4340fc1e1a1a2c7075a
  - http2: when uploading data from stdin, fix eos forwarding
  - http: make max-filesize check not count ignored bodies
  - lib: fix AF_INET6 use outside of USE_IPV6
  - multi: check that the multi handle is valid in curl_multi_assign
  - QUIC: on connect, keep on trying on draining server
  - request: correctly reset the eos_sent flag
  - setopt: remove superfluous use of ternary expressions
  - singleuse: drop `Curl_memrchr()` for no-HTTP builds
  - tool_cb_wrt: use "curl_response" if no file name in URL
  - transfer: fix sendrecv() without interim poll
  - vtls: fix `Curl_ssl_conn_config_match` doc param</changelog>
  <changelog author="pmonreal@suse.com" date="1730289600">- Security fix: [bsc#1232528, CVE-2024-9681]
  * HSTS subdomain overwrites parent cache entry
  * Add curl-CVE-2024-9681.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730894400">- Update to 8.11.0:
  * Security fixes: [bsc#1232528, CVE-2024-9681]
  - curl: HSTS subdomain overwrites parent cache entry
  * Changes:
  - curl: --create-dirs works for --dump-header as well
  - gtls: Add P12 format support
  - ipfs: add options to disable
  - TLS: TLSv1.3 earlydata support for curl
  - WebSockets: make support official (non-experimental)
  * Bugfixes:
  - build: clarify CA embed is for curl tool, mark default, improve summary
  - build: show if CA bundle to embed was found
  - build: tidy up and improve versioned-symbols options
  - cmake/FindNGTCP2: use library path as hint for finding crypto module
  - cmake: disable default OpenSSL if BearSSL, GnuTLS or Rustls is enabled
  - cmake: rename LDAP dependency config variables to match Find modules
  - cmake: replace 'check_include_file_concat()' for LDAP and GSS detection
  - cmake: use OpenSSL for LDAP detection only if available
  - curl: add build options for safe/no CA bundle search (Windows)
  - curl: detect ECH support dynamically, not at build time
  - curl_addrinfo: support operating systems with only getaddrinfo(3)
  - ftp: fix 0-length last write on upload from stdin
  - gnutls: use session cache for QUIC
  - hsts: improve subdomain handling
  - hsts: support "implied LWS" properly around max-age
  - http2: auto reset stream on server eos
  - json.md: cli-option '--json' is an alias of '--data-binary'
  - lib: move curl_path.[ch] into vssh/
  - lib: remove function pointer typecasts for hmac/sha256/md5
  - libssh.c: handle EGAINS during proto-connect correctly
  - libssh2: use the filename buffer when getting the homedir
  - multi.c: warn/assert on stall only without timer
  - negotiate: conditional check around GSS &amp; SSL specific code
  - netrc: cache the netrc file in memory
  - ngtcp2: do not loop on recv
  - ngtcp2: set max window size to 10x of initial (128KB)
  - openssl quic: populate x509 store before handshake
  - openssl: extend the OpenSSL error messages
  - openssl: improve retries on shutdown
  - quic: use send/recvmmsg when available
  - schannel: fix TLS cert verification by IP SAN
  - schannel: ignore error on recv beyond close notify
  - select: use poll() if existing, avoid poll() with no sockets
  - sendf: add condition to max-filesize check
  - server/mqttd: fix two memory leaks
  - setopt: return error for bad input to CURLOPT_RTSP_REQUEST
  - setopt_cptr: make overflow check only done when needed
  - tls: avoid abusing CURLE_SSL_ENGINE_INITFAILED
  - tool: support --show-headers AND --remote-header-name
  - tool_operate: make --skip-existing work for --parallel
  - url: connection reuse on h3 connections
  - url: use same credentials on redirect
  - urlapi: normalize the IPv6 address
  - version: say quictls in MSH3 builds
  - vquic: fix compiler warning with gcc + MUSL
  - vquic: recv_mmsg, use fewer, but larger buffers
  - vtls: convert Curl_pin_peer_pubkey to use dynbuf
  - vtls: convert pubkey_pem_to_der to use dynbuf
  * Rebase curl-secure-getenv.patch</changelog>
  <changelog author="bjorn.bidar@thaodan.de" date="1731499200">- Add patch to fix libcurl when netrc parsing is enabled.
  curl_easy_duphandle did not init netrc which broke applications such
  as for example git. gh#curl/curl#15496
  * 0001-duphandle-also-init-netrc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733227200">- Security fix: [bsc#1234068, CVE-2024-11053]
  * curl could leak the password used for the first host to the
    followed-to host under certain circumstances.
  * netrc: address several netrc parser flaws
  * Add curl-CVE-2024-11053.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733918400">- Update to 8.11.1:
  * Security fixes:
  - netrc and redirect credential leak [bsc#1234068, CVE-2024-11053]
  * Bugfixes:
  - build: fix ECH to always enable HTTPS RR
  - cookie: treat cookie name case sensitively
  - curl-rustls.m4: keep existing 'CPPFLAGS'/'LDFLAGS' when detected
  - curl: use realtime in trace timestamps
  - digest: produce a shorter cnonce in Digest headers
  - docs: document default 'User-Agent'
  - docs: suggest --ssl-reqd instead of --ftp-ssl
  - duphandle: also init netrc
  - hostip: don't use the resolver for FQDN localhost
  - http_negotiate: allow for a one byte larger channel binding buffer
  - krb5: fix socket/sockindex confusion, MSVC compiler warnings
  - libssh: use libssh sftp_aio to upload file
  - libssh: when using IPv6 numerical address, add brackets
  - mime: fix reader stall on small read lengths
  - mk-ca-bundle: remove CKA_NSS_SERVER_DISTRUST_AFTER conditions
  - mprintf: fix the integer overflow checks
  - multi: fix callback for 'CURLMOPT_TIMERFUNCTION' not being called again when...
  - netrc: address several netrc parser flaws
  - netrc: support large file, longer lines, longer tokens
  - nghttp2: use custom memory functions
  - OpenSSL: improvde error message on expired certificate
  - openssl: remove three "Useless Assignments"
  - openssl: stop using SSL_CTX_ function prefix for our functions
  - pytest: add test for use of CURLMOPT_MAX_HOST_CONNECTIONS
  - rtsp: check EOS in the RTSP receive and return an error code
  - schannel: remove TLS 1.3 ciphersuite-list support
  - setopt: fix CURLOPT_HTTP_CONTENT_DECODING
  - setopt: fix missing options for builds without HTTP &amp; MQTT
  - socket: handle binding to "host!&lt;ip&gt;"
  - socketpair: fix enabling 'USE_EVENTFD'
  - strtok: use namespaced 'strtok_r' macro instead of redefining it
  * Remove 0001-duphandle-also-init-netrc.patch upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1736251200">- smtp: for starttls, do full upgrade [bsc#1235151]
  * Make sure the TLS handshake after a successful STARTTLS command
    is fully done before further sending/receiving on the connection.
  * Add curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238400">- Security fix: [bsc#1236588, CVE-2025-0167]
  * netrc: 'default' with no credentials is not a match
  * Add curl-CVE-2025-0167.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238401">- Security fix: [bsc#1236590, CVE-2025-0725]
  * content_encoding: drop support for zlib before 1.2.0.4
  * content_encoding: put the decomp buffers into the writer structs
  * Add curl-CVE-2025-0725.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738843200">- Update to 8.12.0:
  * Security fixes:
  - [bsc#1234068, CVE-2024-11053] curl could leak the password used
    for the first host to the followed-to host under certain circumstances.
  - [bsc#1232528, CVE-2024-9681] HSTS subdomain overwrites parent cache entry
  - [bsc#1236589, CVE-2025-0665] eventfd double close
  * Changes:
  - curl: add byte range support to --variable reading from file
  - curl: make --etag-save acknowledge --create-dirs
  - getinfo: fix CURLINFO_QUEUE_TIME_T and add 'time_queue' var
  - getinfo: provide info which auth was used for HTTP and proxy
  - hyper: drop support
  - openssl: add support to use keys and certificates from PKCS#11 provider
  - QUIC: 0RTT for gnutls via CURLSSLOPT_EARLYDATA
  - vtls: feature ssls-export for SSL session im-/export
  * Bugfixes:
  - altsvc: avoid integer overflow in expire calculation
  - asyn-ares: acknowledge CURLOPT_DNS_SERVERS set to NULL
  - asyn-ares: fix memory leak
  - asyn-ares: initial HTTPS resolve support
  - asyn-thread: use c-ares to resolve HTTPS RR
  - async-thread: avoid closing eventfd twice
  - cd2nroff: do not insist on quoted &lt;&gt; within backticks
  - cd2nroff: support "none" as a TLS backend
  - conncache: count shutdowns against host and max limits
  - content_encoding: drop support for zlib before 1.2.0.4
  - content_encoding: namespace GZIP flag constants
  - content_encoding: put the decomp buffers into the writer structs
  - content_encoding: support use of custom libzstd memory functions
  - cookie: cap expire times to 400 days
  - cookie: parse only the exact expire date
  - curl: return error if etag options are used with multiple URLs
  - curl_multi_fdset: include the shutdown connections in the set
  - curl_sha512_256: rename symbols to the curl namespace
  - curl_url_set.md: adjust the added-in to 7.62.0
  - doh: send HTTPS RR requests for all HTTP(S) transfers
  - easy: allow connect-only handle reuse with easy_perform
  - easy: make curl_easy_perform() return error if connection still there
  - easy_lock: use Sleep(1) for thread yield on old Windows
  - ECH: update APIs to those agreed with OpenSSL maintainers
  - GnuTLS: fix 'time_appconnect' for early data
  - HTTP/2: strip TE request header
  - http2: fix data_pending check
  - http2: fix value stored to 'result' is never read
  - http: ignore invalid Retry-After times
  - http_aws_sigv4: Fix invalid compare function handling zero-length pairs
  - https-connect: start next immediately on failure
  - lib: redirect handling by protocol handler
  - multi: fix curl_multi_waitfds reporting of fd_count
  - netrc: 'default' with no credentials is not a match
  - netrc: fix password-only entries
  - netrc: restore _netrc fallback logic
  - ngtcp2: fix memory leak on connect failure
  - openssl: define `HAVE_KEYLOG_CALLBACK` before use
  - openssl: fix ECH logic
  - osslq: use SSL_poll to determine writeability of QUIC streams
  - sectransp: free certificate on error
  - select: avoid a NULL deref in cwfds_add_sock
  - src: omit hugehelp and ca-embed from libcurltool
  - ssl session cache: change cache dimensions
  - system.h: add 64-bit curl_off_t definitions for NonStop
  - telnet: handle single-byte input option
  - TLS: check connection for SSL use, not handler
  - tool_formparse.c: make curlx_uztoso a static in here
  - tool_formparse: accept digits in --form type= strings
  - tool_getparam: ECH param parsing refix
  - tool_getparam: fail --hostpubsha256 if libssh2 is not used
  - tool_getparam: fix "Ignored Return Value"
  - tool_getparam: fix memory leak on error in parse_ech
  - tool_getparam: fix the ECH parser
  - tool_operate: make --etag-compare always accept a non-existing file
  - transfer: fix CURLOPT_CURLU override logic
  - urlapi: fix redirect to a new fragment or query (only)
  - vquic: make vquic_send_packets not return without setting psent
  - vtls: fix default SSL backend as a fallback
  - vtls: only remember the expiry timestamp in session cache
  - websocket: fix message send corruption
  - x509asn1: add parse recursion limit
  * Rebase pathes:
  - libcurl-ocloexec.patch
  - dont-mess-with-rpmoptflags.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739448000">- Update to 8.12.1:
  * Bugfixes:
  - asyn-thread: fix build with 'CURL_DISABLE_SOCKETPAIR'
  - asyn-thread: fix HTTPS RR crash
  - asyn-thread: fix the returned bitmask from Curl_resolver_getsock
  - asyn-thread: survive a c-ares channel set to NULL
  - cmake: always reference OpenSSL and ZLIB via imported targets
  - cmake: respect 'GNUTLS_CFLAGS' when detected via 'pkg-config'
  - cmake: respect 'GNUTLS_LIBRARY_DIRS' in 'libcurl.pc' and 'curl-config'
  - content_encoding: #error on too old zlib
  - imap: TLS upgrade fix
  - ldap: drop support for legacy Novell LDAP SDK
  - libssh2: comparison is always true because rc &lt;= -1
  - libssh2: raise lowest supported version to 1.2.8
  - libssh: drop support for libssh older than 0.9.0
  - openssl-quic: ignore ciphers for h3
  - pop3: TLS upgrade fix
  - runtests: fix the disabling of the memory tracking
  - runtests: quote commands to support paths with spaces
  - scache: add magic checks
  - smb: silence '-Warray-bounds' with gcc 13+
  - smtp: TLS upgrade fix
  - tool_cfgable: sort struct fields by size, use bitfields for booleans
  - tool_getparam: add "TLS required" flag for each such option
  - vtls: fix multissl-init
  - wakeup_write: make sure the eventfd write sends eight bytes</changelog>
  <changelog author="pmonreal@suse.com" date="1744200000">- Update to 8.13.0:
  * Changes:
  - curl: add write-out variable 'tls_earlydata'
  - curl: make --url support a file with URLs
  - gnutls: set priority via --ciphers
  - IMAP: add CURLOPT_UPLOAD_FLAGS and --upload-flags
  - lib: add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY
  - OpenSSL/quictls: add support for TLSv1.3 early data
  - rustls: add support for CERTINFO
  - rustls: add support for SSLKEYLOGFILE
  - rustls: support ECH w/ DoH lookup for config
  - rustls: support native platform verifier
  - var: add a '64dec' function that can base64 decode a string
  * Bugfixes:
  - conn: fix connection reuse when SSL is optional
  - hash: use single linked list for entries
  - http2: detect session being closed on ingress handling
  - http2: reset stream on response header error
  - http: remove a HTTP method size restriction
  - http: version negotiation
  - httpsrr: fix port detection
  - libssh: fix freeing of resources in disconnect
  - libssh: fix scp large file upload for 32-bit size_t systems
  - openssl-quic: do not iterate over multi handles
  - openssl: check return value of X509_get0_pubkey
  - openssl: drop support for old OpenSSL/LibreSSL versions
  - openssl: fix crash on missing cert password
  - openssl: fix pkcs11 URI checking for key files.
  - openssl: remove bad `goto`s into other scope
  - setopt: illegal CURLOPT_SOCKS5_AUTH should return error
  - setopt: setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine
  - sshserver.pl: adjust `AuthorizedKeysFile2` cutoff version
  - sshserver: fix excluding obsolete client config lines
  - SSLCERTS: list support for SSL_CERT_FILE and SSL_CERT_DIR
  - tftpd: prefix TFTP protocol error `E*` constants with `TFTP_`
  - tool_operate: fail SSH transfers without server auth
  - url: call protocol handler's disconnect in Curl_conn_free
  - urlapi: remove percent encoded dot sequences from the URL path
  - urldata: remove 'hostname' from struct Curl_async
  * Rebase patches:
  - libcurl-ocloexec.patch
  - curl-secure-getenv.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1744372800">- fix Leap build add curl-8.13.0-CloseSocket.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1748433600">- Update to 8.14.0:
  * Security fixes:
  - [CVE-2025-4947, bsc#1243397] QUIC certificate check skip with wolfSSL
  - [CVE-2025-5025, bsc#1243706] No QUIC certificate pinning with wolfSSL
  * Changes:
  - mqtt: send ping at upkeep interval
  - schannel: handle pkcs12 client certificates containing CA certificates
  - TLS: add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: import v2025.04.20 script + docs
  - websocket: add option to disable auto-pong reply
  * Bugfixes:
  - asny-thrdd: fix detach from running thread
  - async-threaded resolver: use ref counter
  - async: DoH improvements
  - build: enable gcc-12/13+, clang-10+ picky warnings
  - build: enable gcc-15 picky warnings
  - certs: drop unused `default_bits` from `.prm` files
  - cf-https-connect: use the passed in dns struct pointer
  - cf-socket: fix FTP accept connect
  - cfilters: remove assert
  - cmake: fix nghttp3 static linking with `USE_OPENSSL_QUIC=ON`
  - cmake: prefer `COMPILE_OPTIONS` over `CMAKE_C_FLAGS` for custom C options
  - cmake: revert `CURL_LTO` behavior for multi-config generators
  - configure: fix --disable-rt
  - CONTRIBUTE: add project guidelines for AI use
  - cpool/cshutdown: force close connections under pressure
  - curl: fix memory leak when -h is used in config file
  - curl_get_line: handle lines ending on the buffer boundary
  - headers: enforce a max number of response header to accept
  - http: fix HTTP/2 handling of TE request header using "trailers"
  - lib: include files using known path
  - lib: unify conversions to/from hex
  - libssh: add NULL check for Curl_meta_get()
  - libssh: fix memory leak
  - mqtt: use conn/easy meta hash
  - multi: do transfer book keeping using mid
  - multi: init_do(): check result
  - netrc: avoid NULL deref on weird input
  - netrc: avoid strdup NULL
  - netrc: deal with null token better
  - openssl-quic: avoid potential `-Wnull-dereference`, add assert
  - openssl-quic: fix shutdown when stream not open
  - openssl: enable builds for *both* engines and providers
  - openssl: set the cipher string before doing private cert
  - progress: avoid integer overflow when gathering total transfer size
  - rand: update comment on Curl_rand_bytes weak random
  - rustls: make max size of cert and key reasonable
  - smb: avoid integer overflow on weird input date
  - urlapi: redirecting to "" is considered fine
  * Remove curl-8.13.0-CloseSocket.patch upstream
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1749038400">- Update to 8.14.1:
  * Security fixes:
  - [bsc#1243933, CVE-2025-5399] libcurl can possibly get
    trapped in an endless busy-loop when processing specially
    crafted packets [d1145df2]
  * Bugfixes:
  - asyn-thrdd: fix cleanup when RR fails due to OOM
  - ftp: fix teardown of DATA connection in done
  - http: fail early when rewind of input failed when following redirects
  - multi: fix add_handle resizing
  - tls BIOs: handle BIO_CTRL_EOF correctly
  - tool_getparam: make --no-anyauth not be accepted
  - wolfssl: fix sending of early data
  - ws: handle blocked sends better
  - ws: tests and fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1749643200">- Update to 8.14.1: [jsc#PED-13055, jsc#PED-13056]
  * Add _multibuild
  * Remove patches fixed in the update:
  - curl-CVE-2024-11053.patch
  - curl-CVE-2024-2004.patch
  - curl-CVE-2024-2379.patch
  - curl-CVE-2024-2398.patch
  - curl-CVE-2024-2466.patch
  - curl-CVE-2024-6197.patch
  - curl-CVE-2024-7264.patch
  - curl-CVE-2024-8096.patch
  - curl-CVE-2024-9681.patch
  - curl-CVE-2025-0167.patch
  - curl-CVE-2025-0725.patch
  - curl-aws_sigv4-url-encode-the-canonical-path.patch
  - curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
</package>
<package pkgid="ec285d8bda962134f3cb5a4beeb369bb3af92738ea55a3df45753c305cb8776a" name="libcurl-devel" arch="x86_64">
  <version epoch="0" ver="8.14.1" rel="150700.7.11.1"/>
  <changelog author="bjorn.bidar@thaodan.de" date="1731499200">- Add patch to fix libcurl when netrc parsing is enabled.
  curl_easy_duphandle did not init netrc which broke applications such
  as for example git. gh#curl/curl#15496
  * 0001-duphandle-also-init-netrc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733227200">- Security fix: [bsc#1234068, CVE-2024-11053]
  * curl could leak the password used for the first host to the
    followed-to host under certain circumstances.
  * netrc: address several netrc parser flaws
  * Add curl-CVE-2024-11053.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733918400">- Update to 8.11.1:
  * Security fixes:
  - netrc and redirect credential leak [bsc#1234068, CVE-2024-11053]
  * Bugfixes:
  - build: fix ECH to always enable HTTPS RR
  - cookie: treat cookie name case sensitively
  - curl-rustls.m4: keep existing 'CPPFLAGS'/'LDFLAGS' when detected
  - curl: use realtime in trace timestamps
  - digest: produce a shorter cnonce in Digest headers
  - docs: document default 'User-Agent'
  - docs: suggest --ssl-reqd instead of --ftp-ssl
  - duphandle: also init netrc
  - hostip: don't use the resolver for FQDN localhost
  - http_negotiate: allow for a one byte larger channel binding buffer
  - krb5: fix socket/sockindex confusion, MSVC compiler warnings
  - libssh: use libssh sftp_aio to upload file
  - libssh: when using IPv6 numerical address, add brackets
  - mime: fix reader stall on small read lengths
  - mk-ca-bundle: remove CKA_NSS_SERVER_DISTRUST_AFTER conditions
  - mprintf: fix the integer overflow checks
  - multi: fix callback for 'CURLMOPT_TIMERFUNCTION' not being called again when...
  - netrc: address several netrc parser flaws
  - netrc: support large file, longer lines, longer tokens
  - nghttp2: use custom memory functions
  - OpenSSL: improvde error message on expired certificate
  - openssl: remove three "Useless Assignments"
  - openssl: stop using SSL_CTX_ function prefix for our functions
  - pytest: add test for use of CURLMOPT_MAX_HOST_CONNECTIONS
  - rtsp: check EOS in the RTSP receive and return an error code
  - schannel: remove TLS 1.3 ciphersuite-list support
  - setopt: fix CURLOPT_HTTP_CONTENT_DECODING
  - setopt: fix missing options for builds without HTTP &amp; MQTT
  - socket: handle binding to "host!&lt;ip&gt;"
  - socketpair: fix enabling 'USE_EVENTFD'
  - strtok: use namespaced 'strtok_r' macro instead of redefining it
  * Remove 0001-duphandle-also-init-netrc.patch upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1736251200">- smtp: for starttls, do full upgrade [bsc#1235151]
  * Make sure the TLS handshake after a successful STARTTLS command
    is fully done before further sending/receiving on the connection.
  * Add curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238400">- Security fix: [bsc#1236588, CVE-2025-0167]
  * netrc: 'default' with no credentials is not a match
  * Add curl-CVE-2025-0167.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238401">- Security fix: [bsc#1236590, CVE-2025-0725]
  * content_encoding: drop support for zlib before 1.2.0.4
  * content_encoding: put the decomp buffers into the writer structs
  * Add curl-CVE-2025-0725.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738843200">- Update to 8.12.0:
  * Security fixes:
  - [bsc#1234068, CVE-2024-11053] curl could leak the password used
    for the first host to the followed-to host under certain circumstances.
  - [bsc#1232528, CVE-2024-9681] HSTS subdomain overwrites parent cache entry
  - [bsc#1236589, CVE-2025-0665] eventfd double close
  * Changes:
  - curl: add byte range support to --variable reading from file
  - curl: make --etag-save acknowledge --create-dirs
  - getinfo: fix CURLINFO_QUEUE_TIME_T and add 'time_queue' var
  - getinfo: provide info which auth was used for HTTP and proxy
  - hyper: drop support
  - openssl: add support to use keys and certificates from PKCS#11 provider
  - QUIC: 0RTT for gnutls via CURLSSLOPT_EARLYDATA
  - vtls: feature ssls-export for SSL session im-/export
  * Bugfixes:
  - altsvc: avoid integer overflow in expire calculation
  - asyn-ares: acknowledge CURLOPT_DNS_SERVERS set to NULL
  - asyn-ares: fix memory leak
  - asyn-ares: initial HTTPS resolve support
  - asyn-thread: use c-ares to resolve HTTPS RR
  - async-thread: avoid closing eventfd twice
  - cd2nroff: do not insist on quoted &lt;&gt; within backticks
  - cd2nroff: support "none" as a TLS backend
  - conncache: count shutdowns against host and max limits
  - content_encoding: drop support for zlib before 1.2.0.4
  - content_encoding: namespace GZIP flag constants
  - content_encoding: put the decomp buffers into the writer structs
  - content_encoding: support use of custom libzstd memory functions
  - cookie: cap expire times to 400 days
  - cookie: parse only the exact expire date
  - curl: return error if etag options are used with multiple URLs
  - curl_multi_fdset: include the shutdown connections in the set
  - curl_sha512_256: rename symbols to the curl namespace
  - curl_url_set.md: adjust the added-in to 7.62.0
  - doh: send HTTPS RR requests for all HTTP(S) transfers
  - easy: allow connect-only handle reuse with easy_perform
  - easy: make curl_easy_perform() return error if connection still there
  - easy_lock: use Sleep(1) for thread yield on old Windows
  - ECH: update APIs to those agreed with OpenSSL maintainers
  - GnuTLS: fix 'time_appconnect' for early data
  - HTTP/2: strip TE request header
  - http2: fix data_pending check
  - http2: fix value stored to 'result' is never read
  - http: ignore invalid Retry-After times
  - http_aws_sigv4: Fix invalid compare function handling zero-length pairs
  - https-connect: start next immediately on failure
  - lib: redirect handling by protocol handler
  - multi: fix curl_multi_waitfds reporting of fd_count
  - netrc: 'default' with no credentials is not a match
  - netrc: fix password-only entries
  - netrc: restore _netrc fallback logic
  - ngtcp2: fix memory leak on connect failure
  - openssl: define `HAVE_KEYLOG_CALLBACK` before use
  - openssl: fix ECH logic
  - osslq: use SSL_poll to determine writeability of QUIC streams
  - sectransp: free certificate on error
  - select: avoid a NULL deref in cwfds_add_sock
  - src: omit hugehelp and ca-embed from libcurltool
  - ssl session cache: change cache dimensions
  - system.h: add 64-bit curl_off_t definitions for NonStop
  - telnet: handle single-byte input option
  - TLS: check connection for SSL use, not handler
  - tool_formparse.c: make curlx_uztoso a static in here
  - tool_formparse: accept digits in --form type= strings
  - tool_getparam: ECH param parsing refix
  - tool_getparam: fail --hostpubsha256 if libssh2 is not used
  - tool_getparam: fix "Ignored Return Value"
  - tool_getparam: fix memory leak on error in parse_ech
  - tool_getparam: fix the ECH parser
  - tool_operate: make --etag-compare always accept a non-existing file
  - transfer: fix CURLOPT_CURLU override logic
  - urlapi: fix redirect to a new fragment or query (only)
  - vquic: make vquic_send_packets not return without setting psent
  - vtls: fix default SSL backend as a fallback
  - vtls: only remember the expiry timestamp in session cache
  - websocket: fix message send corruption
  - x509asn1: add parse recursion limit
  * Rebase pathes:
  - libcurl-ocloexec.patch
  - dont-mess-with-rpmoptflags.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739448000">- Update to 8.12.1:
  * Bugfixes:
  - asyn-thread: fix build with 'CURL_DISABLE_SOCKETPAIR'
  - asyn-thread: fix HTTPS RR crash
  - asyn-thread: fix the returned bitmask from Curl_resolver_getsock
  - asyn-thread: survive a c-ares channel set to NULL
  - cmake: always reference OpenSSL and ZLIB via imported targets
  - cmake: respect 'GNUTLS_CFLAGS' when detected via 'pkg-config'
  - cmake: respect 'GNUTLS_LIBRARY_DIRS' in 'libcurl.pc' and 'curl-config'
  - content_encoding: #error on too old zlib
  - imap: TLS upgrade fix
  - ldap: drop support for legacy Novell LDAP SDK
  - libssh2: comparison is always true because rc &lt;= -1
  - libssh2: raise lowest supported version to 1.2.8
  - libssh: drop support for libssh older than 0.9.0
  - openssl-quic: ignore ciphers for h3
  - pop3: TLS upgrade fix
  - runtests: fix the disabling of the memory tracking
  - runtests: quote commands to support paths with spaces
  - scache: add magic checks
  - smb: silence '-Warray-bounds' with gcc 13+
  - smtp: TLS upgrade fix
  - tool_cfgable: sort struct fields by size, use bitfields for booleans
  - tool_getparam: add "TLS required" flag for each such option
  - vtls: fix multissl-init
  - wakeup_write: make sure the eventfd write sends eight bytes</changelog>
  <changelog author="pmonreal@suse.com" date="1744200000">- Update to 8.13.0:
  * Changes:
  - curl: add write-out variable 'tls_earlydata'
  - curl: make --url support a file with URLs
  - gnutls: set priority via --ciphers
  - IMAP: add CURLOPT_UPLOAD_FLAGS and --upload-flags
  - lib: add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY
  - OpenSSL/quictls: add support for TLSv1.3 early data
  - rustls: add support for CERTINFO
  - rustls: add support for SSLKEYLOGFILE
  - rustls: support ECH w/ DoH lookup for config
  - rustls: support native platform verifier
  - var: add a '64dec' function that can base64 decode a string
  * Bugfixes:
  - conn: fix connection reuse when SSL is optional
  - hash: use single linked list for entries
  - http2: detect session being closed on ingress handling
  - http2: reset stream on response header error
  - http: remove a HTTP method size restriction
  - http: version negotiation
  - httpsrr: fix port detection
  - libssh: fix freeing of resources in disconnect
  - libssh: fix scp large file upload for 32-bit size_t systems
  - openssl-quic: do not iterate over multi handles
  - openssl: check return value of X509_get0_pubkey
  - openssl: drop support for old OpenSSL/LibreSSL versions
  - openssl: fix crash on missing cert password
  - openssl: fix pkcs11 URI checking for key files.
  - openssl: remove bad `goto`s into other scope
  - setopt: illegal CURLOPT_SOCKS5_AUTH should return error
  - setopt: setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine
  - sshserver.pl: adjust `AuthorizedKeysFile2` cutoff version
  - sshserver: fix excluding obsolete client config lines
  - SSLCERTS: list support for SSL_CERT_FILE and SSL_CERT_DIR
  - tftpd: prefix TFTP protocol error `E*` constants with `TFTP_`
  - tool_operate: fail SSH transfers without server auth
  - url: call protocol handler's disconnect in Curl_conn_free
  - urlapi: remove percent encoded dot sequences from the URL path
  - urldata: remove 'hostname' from struct Curl_async
  * Rebase patches:
  - libcurl-ocloexec.patch
  - curl-secure-getenv.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1744372800">- fix Leap build add curl-8.13.0-CloseSocket.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1748433600">- Update to 8.14.0:
  * Security fixes:
  - [CVE-2025-4947, bsc#1243397] QUIC certificate check skip with wolfSSL
  - [CVE-2025-5025, bsc#1243706] No QUIC certificate pinning with wolfSSL
  * Changes:
  - mqtt: send ping at upkeep interval
  - schannel: handle pkcs12 client certificates containing CA certificates
  - TLS: add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: import v2025.04.20 script + docs
  - websocket: add option to disable auto-pong reply
  * Bugfixes:
  - asny-thrdd: fix detach from running thread
  - async-threaded resolver: use ref counter
  - async: DoH improvements
  - build: enable gcc-12/13+, clang-10+ picky warnings
  - build: enable gcc-15 picky warnings
  - certs: drop unused `default_bits` from `.prm` files
  - cf-https-connect: use the passed in dns struct pointer
  - cf-socket: fix FTP accept connect
  - cfilters: remove assert
  - cmake: fix nghttp3 static linking with `USE_OPENSSL_QUIC=ON`
  - cmake: prefer `COMPILE_OPTIONS` over `CMAKE_C_FLAGS` for custom C options
  - cmake: revert `CURL_LTO` behavior for multi-config generators
  - configure: fix --disable-rt
  - CONTRIBUTE: add project guidelines for AI use
  - cpool/cshutdown: force close connections under pressure
  - curl: fix memory leak when -h is used in config file
  - curl_get_line: handle lines ending on the buffer boundary
  - headers: enforce a max number of response header to accept
  - http: fix HTTP/2 handling of TE request header using "trailers"
  - lib: include files using known path
  - lib: unify conversions to/from hex
  - libssh: add NULL check for Curl_meta_get()
  - libssh: fix memory leak
  - mqtt: use conn/easy meta hash
  - multi: do transfer book keeping using mid
  - multi: init_do(): check result
  - netrc: avoid NULL deref on weird input
  - netrc: avoid strdup NULL
  - netrc: deal with null token better
  - openssl-quic: avoid potential `-Wnull-dereference`, add assert
  - openssl-quic: fix shutdown when stream not open
  - openssl: enable builds for *both* engines and providers
  - openssl: set the cipher string before doing private cert
  - progress: avoid integer overflow when gathering total transfer size
  - rand: update comment on Curl_rand_bytes weak random
  - rustls: make max size of cert and key reasonable
  - smb: avoid integer overflow on weird input date
  - urlapi: redirecting to "" is considered fine
  * Remove curl-8.13.0-CloseSocket.patch upstream
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1749038400">- Update to 8.14.1:
  * Security fixes:
  - [bsc#1243933, CVE-2025-5399] libcurl can possibly get
    trapped in an endless busy-loop when processing specially
    crafted packets [d1145df2]
  * Bugfixes:
  - asyn-thrdd: fix cleanup when RR fails due to OOM
  - ftp: fix teardown of DATA connection in done
  - http: fail early when rewind of input failed when following redirects
  - multi: fix add_handle resizing
  - tls BIOs: handle BIO_CTRL_EOF correctly
  - tool_getparam: make --no-anyauth not be accepted
  - wolfssl: fix sending of early data
  - ws: handle blocked sends better
  - ws: tests and fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1749643200">- Update to 8.14.1: [jsc#PED-13055, jsc#PED-13056]
  * Add _multibuild
  * Remove patches fixed in the update:
  - curl-CVE-2024-11053.patch
  - curl-CVE-2024-2004.patch
  - curl-CVE-2024-2379.patch
  - curl-CVE-2024-2398.patch
  - curl-CVE-2024-2466.patch
  - curl-CVE-2024-6197.patch
  - curl-CVE-2024-7264.patch
  - curl-CVE-2024-8096.patch
  - curl-CVE-2024-9681.patch
  - curl-CVE-2025-0167.patch
  - curl-CVE-2025-0725.patch
  - curl-aws_sigv4-url-encode-the-canonical-path.patch
  - curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1763553600">- Security fix: [bsc#1253757, CVE-2025-11563]
  * curl: wcurl path traversal with percent-encoded slashes
  * Add curl-CVE-2025-11563.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767355200">- Security fixes:
  * [bsc#1255731, CVE-2025-14524] if redirected, require permission to use bearer
  * [bsc#1255734, CVE-2025-15224] require private key or user-agent for public key auth
  * [bsc#1255732, CVE-2025-14819] toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache
  * [bsc#1255733, CVE-2025-15079] set both knownhosts options to the same file
  * Add patches:
  - curl-CVE-2025-14524.patch
  - curl-CVE-2025-15224.patch
  - curl-CVE-2025-14819.patch
  - curl-CVE-2025-15079.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767787200">- Security fix: [bsc#1256105, CVE-2025-14017]
  * call ldap_init() before setting the options
  * Add patch curl-CVE-2025-14017.patch</changelog>
</package>
<package pkgid="47dd185c0478d470a0b3a5af56b0f1e825cb8c67ae0e8a5e8ccfe2f25a694003" name="libcurl-devel" arch="x86_64">
  <version epoch="0" ver="8.14.1" rel="150700.7.14.1"/>
  <changelog author="pmonreal@suse.com" date="1733227200">- Security fix: [bsc#1234068, CVE-2024-11053]
  * curl could leak the password used for the first host to the
    followed-to host under certain circumstances.
  * netrc: address several netrc parser flaws
  * Add curl-CVE-2024-11053.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733918400">- Update to 8.11.1:
  * Security fixes:
  - netrc and redirect credential leak [bsc#1234068, CVE-2024-11053]
  * Bugfixes:
  - build: fix ECH to always enable HTTPS RR
  - cookie: treat cookie name case sensitively
  - curl-rustls.m4: keep existing 'CPPFLAGS'/'LDFLAGS' when detected
  - curl: use realtime in trace timestamps
  - digest: produce a shorter cnonce in Digest headers
  - docs: document default 'User-Agent'
  - docs: suggest --ssl-reqd instead of --ftp-ssl
  - duphandle: also init netrc
  - hostip: don't use the resolver for FQDN localhost
  - http_negotiate: allow for a one byte larger channel binding buffer
  - krb5: fix socket/sockindex confusion, MSVC compiler warnings
  - libssh: use libssh sftp_aio to upload file
  - libssh: when using IPv6 numerical address, add brackets
  - mime: fix reader stall on small read lengths
  - mk-ca-bundle: remove CKA_NSS_SERVER_DISTRUST_AFTER conditions
  - mprintf: fix the integer overflow checks
  - multi: fix callback for 'CURLMOPT_TIMERFUNCTION' not being called again when...
  - netrc: address several netrc parser flaws
  - netrc: support large file, longer lines, longer tokens
  - nghttp2: use custom memory functions
  - OpenSSL: improvde error message on expired certificate
  - openssl: remove three "Useless Assignments"
  - openssl: stop using SSL_CTX_ function prefix for our functions
  - pytest: add test for use of CURLMOPT_MAX_HOST_CONNECTIONS
  - rtsp: check EOS in the RTSP receive and return an error code
  - schannel: remove TLS 1.3 ciphersuite-list support
  - setopt: fix CURLOPT_HTTP_CONTENT_DECODING
  - setopt: fix missing options for builds without HTTP &amp; MQTT
  - socket: handle binding to "host!&lt;ip&gt;"
  - socketpair: fix enabling 'USE_EVENTFD'
  - strtok: use namespaced 'strtok_r' macro instead of redefining it
  * Remove 0001-duphandle-also-init-netrc.patch upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1736251200">- smtp: for starttls, do full upgrade [bsc#1235151]
  * Make sure the TLS handshake after a successful STARTTLS command
    is fully done before further sending/receiving on the connection.
  * Add curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238400">- Security fix: [bsc#1236588, CVE-2025-0167]
  * netrc: 'default' with no credentials is not a match
  * Add curl-CVE-2025-0167.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238401">- Security fix: [bsc#1236590, CVE-2025-0725]
  * content_encoding: drop support for zlib before 1.2.0.4
  * content_encoding: put the decomp buffers into the writer structs
  * Add curl-CVE-2025-0725.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738843200">- Update to 8.12.0:
  * Security fixes:
  - [bsc#1234068, CVE-2024-11053] curl could leak the password used
    for the first host to the followed-to host under certain circumstances.
  - [bsc#1232528, CVE-2024-9681] HSTS subdomain overwrites parent cache entry
  - [bsc#1236589, CVE-2025-0665] eventfd double close
  * Changes:
  - curl: add byte range support to --variable reading from file
  - curl: make --etag-save acknowledge --create-dirs
  - getinfo: fix CURLINFO_QUEUE_TIME_T and add 'time_queue' var
  - getinfo: provide info which auth was used for HTTP and proxy
  - hyper: drop support
  - openssl: add support to use keys and certificates from PKCS#11 provider
  - QUIC: 0RTT for gnutls via CURLSSLOPT_EARLYDATA
  - vtls: feature ssls-export for SSL session im-/export
  * Bugfixes:
  - altsvc: avoid integer overflow in expire calculation
  - asyn-ares: acknowledge CURLOPT_DNS_SERVERS set to NULL
  - asyn-ares: fix memory leak
  - asyn-ares: initial HTTPS resolve support
  - asyn-thread: use c-ares to resolve HTTPS RR
  - async-thread: avoid closing eventfd twice
  - cd2nroff: do not insist on quoted &lt;&gt; within backticks
  - cd2nroff: support "none" as a TLS backend
  - conncache: count shutdowns against host and max limits
  - content_encoding: drop support for zlib before 1.2.0.4
  - content_encoding: namespace GZIP flag constants
  - content_encoding: put the decomp buffers into the writer structs
  - content_encoding: support use of custom libzstd memory functions
  - cookie: cap expire times to 400 days
  - cookie: parse only the exact expire date
  - curl: return error if etag options are used with multiple URLs
  - curl_multi_fdset: include the shutdown connections in the set
  - curl_sha512_256: rename symbols to the curl namespace
  - curl_url_set.md: adjust the added-in to 7.62.0
  - doh: send HTTPS RR requests for all HTTP(S) transfers
  - easy: allow connect-only handle reuse with easy_perform
  - easy: make curl_easy_perform() return error if connection still there
  - easy_lock: use Sleep(1) for thread yield on old Windows
  - ECH: update APIs to those agreed with OpenSSL maintainers
  - GnuTLS: fix 'time_appconnect' for early data
  - HTTP/2: strip TE request header
  - http2: fix data_pending check
  - http2: fix value stored to 'result' is never read
  - http: ignore invalid Retry-After times
  - http_aws_sigv4: Fix invalid compare function handling zero-length pairs
  - https-connect: start next immediately on failure
  - lib: redirect handling by protocol handler
  - multi: fix curl_multi_waitfds reporting of fd_count
  - netrc: 'default' with no credentials is not a match
  - netrc: fix password-only entries
  - netrc: restore _netrc fallback logic
  - ngtcp2: fix memory leak on connect failure
  - openssl: define `HAVE_KEYLOG_CALLBACK` before use
  - openssl: fix ECH logic
  - osslq: use SSL_poll to determine writeability of QUIC streams
  - sectransp: free certificate on error
  - select: avoid a NULL deref in cwfds_add_sock
  - src: omit hugehelp and ca-embed from libcurltool
  - ssl session cache: change cache dimensions
  - system.h: add 64-bit curl_off_t definitions for NonStop
  - telnet: handle single-byte input option
  - TLS: check connection for SSL use, not handler
  - tool_formparse.c: make curlx_uztoso a static in here
  - tool_formparse: accept digits in --form type= strings
  - tool_getparam: ECH param parsing refix
  - tool_getparam: fail --hostpubsha256 if libssh2 is not used
  - tool_getparam: fix "Ignored Return Value"
  - tool_getparam: fix memory leak on error in parse_ech
  - tool_getparam: fix the ECH parser
  - tool_operate: make --etag-compare always accept a non-existing file
  - transfer: fix CURLOPT_CURLU override logic
  - urlapi: fix redirect to a new fragment or query (only)
  - vquic: make vquic_send_packets not return without setting psent
  - vtls: fix default SSL backend as a fallback
  - vtls: only remember the expiry timestamp in session cache
  - websocket: fix message send corruption
  - x509asn1: add parse recursion limit
  * Rebase pathes:
  - libcurl-ocloexec.patch
  - dont-mess-with-rpmoptflags.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739448000">- Update to 8.12.1:
  * Bugfixes:
  - asyn-thread: fix build with 'CURL_DISABLE_SOCKETPAIR'
  - asyn-thread: fix HTTPS RR crash
  - asyn-thread: fix the returned bitmask from Curl_resolver_getsock
  - asyn-thread: survive a c-ares channel set to NULL
  - cmake: always reference OpenSSL and ZLIB via imported targets
  - cmake: respect 'GNUTLS_CFLAGS' when detected via 'pkg-config'
  - cmake: respect 'GNUTLS_LIBRARY_DIRS' in 'libcurl.pc' and 'curl-config'
  - content_encoding: #error on too old zlib
  - imap: TLS upgrade fix
  - ldap: drop support for legacy Novell LDAP SDK
  - libssh2: comparison is always true because rc &lt;= -1
  - libssh2: raise lowest supported version to 1.2.8
  - libssh: drop support for libssh older than 0.9.0
  - openssl-quic: ignore ciphers for h3
  - pop3: TLS upgrade fix
  - runtests: fix the disabling of the memory tracking
  - runtests: quote commands to support paths with spaces
  - scache: add magic checks
  - smb: silence '-Warray-bounds' with gcc 13+
  - smtp: TLS upgrade fix
  - tool_cfgable: sort struct fields by size, use bitfields for booleans
  - tool_getparam: add "TLS required" flag for each such option
  - vtls: fix multissl-init
  - wakeup_write: make sure the eventfd write sends eight bytes</changelog>
  <changelog author="pmonreal@suse.com" date="1744200000">- Update to 8.13.0:
  * Changes:
  - curl: add write-out variable 'tls_earlydata'
  - curl: make --url support a file with URLs
  - gnutls: set priority via --ciphers
  - IMAP: add CURLOPT_UPLOAD_FLAGS and --upload-flags
  - lib: add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY
  - OpenSSL/quictls: add support for TLSv1.3 early data
  - rustls: add support for CERTINFO
  - rustls: add support for SSLKEYLOGFILE
  - rustls: support ECH w/ DoH lookup for config
  - rustls: support native platform verifier
  - var: add a '64dec' function that can base64 decode a string
  * Bugfixes:
  - conn: fix connection reuse when SSL is optional
  - hash: use single linked list for entries
  - http2: detect session being closed on ingress handling
  - http2: reset stream on response header error
  - http: remove a HTTP method size restriction
  - http: version negotiation
  - httpsrr: fix port detection
  - libssh: fix freeing of resources in disconnect
  - libssh: fix scp large file upload for 32-bit size_t systems
  - openssl-quic: do not iterate over multi handles
  - openssl: check return value of X509_get0_pubkey
  - openssl: drop support for old OpenSSL/LibreSSL versions
  - openssl: fix crash on missing cert password
  - openssl: fix pkcs11 URI checking for key files.
  - openssl: remove bad `goto`s into other scope
  - setopt: illegal CURLOPT_SOCKS5_AUTH should return error
  - setopt: setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine
  - sshserver.pl: adjust `AuthorizedKeysFile2` cutoff version
  - sshserver: fix excluding obsolete client config lines
  - SSLCERTS: list support for SSL_CERT_FILE and SSL_CERT_DIR
  - tftpd: prefix TFTP protocol error `E*` constants with `TFTP_`
  - tool_operate: fail SSH transfers without server auth
  - url: call protocol handler's disconnect in Curl_conn_free
  - urlapi: remove percent encoded dot sequences from the URL path
  - urldata: remove 'hostname' from struct Curl_async
  * Rebase patches:
  - libcurl-ocloexec.patch
  - curl-secure-getenv.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1744372800">- fix Leap build add curl-8.13.0-CloseSocket.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1748433600">- Update to 8.14.0:
  * Security fixes:
  - [CVE-2025-4947, bsc#1243397] QUIC certificate check skip with wolfSSL
  - [CVE-2025-5025, bsc#1243706] No QUIC certificate pinning with wolfSSL
  * Changes:
  - mqtt: send ping at upkeep interval
  - schannel: handle pkcs12 client certificates containing CA certificates
  - TLS: add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: import v2025.04.20 script + docs
  - websocket: add option to disable auto-pong reply
  * Bugfixes:
  - asny-thrdd: fix detach from running thread
  - async-threaded resolver: use ref counter
  - async: DoH improvements
  - build: enable gcc-12/13+, clang-10+ picky warnings
  - build: enable gcc-15 picky warnings
  - certs: drop unused `default_bits` from `.prm` files
  - cf-https-connect: use the passed in dns struct pointer
  - cf-socket: fix FTP accept connect
  - cfilters: remove assert
  - cmake: fix nghttp3 static linking with `USE_OPENSSL_QUIC=ON`
  - cmake: prefer `COMPILE_OPTIONS` over `CMAKE_C_FLAGS` for custom C options
  - cmake: revert `CURL_LTO` behavior for multi-config generators
  - configure: fix --disable-rt
  - CONTRIBUTE: add project guidelines for AI use
  - cpool/cshutdown: force close connections under pressure
  - curl: fix memory leak when -h is used in config file
  - curl_get_line: handle lines ending on the buffer boundary
  - headers: enforce a max number of response header to accept
  - http: fix HTTP/2 handling of TE request header using "trailers"
  - lib: include files using known path
  - lib: unify conversions to/from hex
  - libssh: add NULL check for Curl_meta_get()
  - libssh: fix memory leak
  - mqtt: use conn/easy meta hash
  - multi: do transfer book keeping using mid
  - multi: init_do(): check result
  - netrc: avoid NULL deref on weird input
  - netrc: avoid strdup NULL
  - netrc: deal with null token better
  - openssl-quic: avoid potential `-Wnull-dereference`, add assert
  - openssl-quic: fix shutdown when stream not open
  - openssl: enable builds for *both* engines and providers
  - openssl: set the cipher string before doing private cert
  - progress: avoid integer overflow when gathering total transfer size
  - rand: update comment on Curl_rand_bytes weak random
  - rustls: make max size of cert and key reasonable
  - smb: avoid integer overflow on weird input date
  - urlapi: redirecting to "" is considered fine
  * Remove curl-8.13.0-CloseSocket.patch upstream
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1749038400">- Update to 8.14.1:
  * Security fixes:
  - [bsc#1243933, CVE-2025-5399] libcurl can possibly get
    trapped in an endless busy-loop when processing specially
    crafted packets [d1145df2]
  * Bugfixes:
  - asyn-thrdd: fix cleanup when RR fails due to OOM
  - ftp: fix teardown of DATA connection in done
  - http: fail early when rewind of input failed when following redirects
  - multi: fix add_handle resizing
  - tls BIOs: handle BIO_CTRL_EOF correctly
  - tool_getparam: make --no-anyauth not be accepted
  - wolfssl: fix sending of early data
  - ws: handle blocked sends better
  - ws: tests and fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1749643200">- Update to 8.14.1: [jsc#PED-13055, jsc#PED-13056]
  * Add _multibuild
  * Remove patches fixed in the update:
  - curl-CVE-2024-11053.patch
  - curl-CVE-2024-2004.patch
  - curl-CVE-2024-2379.patch
  - curl-CVE-2024-2398.patch
  - curl-CVE-2024-2466.patch
  - curl-CVE-2024-6197.patch
  - curl-CVE-2024-7264.patch
  - curl-CVE-2024-8096.patch
  - curl-CVE-2024-9681.patch
  - curl-CVE-2025-0167.patch
  - curl-CVE-2025-0725.patch
  - curl-aws_sigv4-url-encode-the-canonical-path.patch
  - curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1763553600">- Security fix: [bsc#1253757, CVE-2025-11563]
  * curl: wcurl path traversal with percent-encoded slashes
  * Add curl-CVE-2025-11563.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767355200">- Security fixes:
  * [bsc#1255731, CVE-2025-14524] if redirected, require permission to use bearer
  * [bsc#1255734, CVE-2025-15224] require private key or user-agent for public key auth
  * [bsc#1255732, CVE-2025-14819] toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache
  * [bsc#1255733, CVE-2025-15079] set both knownhosts options to the same file
  * Add patches:
  - curl-CVE-2025-14524.patch
  - curl-CVE-2025-15224.patch
  - curl-CVE-2025-14819.patch
  - curl-CVE-2025-15079.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767787200">- Security fix: [bsc#1256105, CVE-2025-14017]
  * call ldap_init() before setting the options
  * Add patch curl-CVE-2025-14017.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1773057600">- Security fixes:
  * CVE-2026-1965: Bad reuse of HTTP Negotiate connection (bsc#1259362)
  * CVE-2026-3783: Token leak with redirect and netrc (bsc#1259363)
  * CVE-2026-3784: Wrong proxy connection reuse with credentials (bsc#1259364)
  * CVE-2026-3805: Use after free in SMB connection reuse (bsc#1259365)
  * Add patches:
  - curl-CVE-2026-1965.patch
  - curl-CVE-2026-3783.patch
  - curl-CVE-2026-3784.patch
  - curl-CVE-2026-3805.patch</changelog>
</package>
<package pkgid="42db1e45e891eb638b3775844df7c7caee855f48b04dea843d327e1fede5f9bb" name="libcurl-devel" arch="x86_64">
  <version epoch="0" ver="8.14.1" rel="150700.7.2.1"/>
  <changelog author="pmonreal@suse.com" date="1727179200">- Update to 8.10.1:
  * Bugfixes:
  - autotools: fix `--with-ca-embed` build rule
  - cmake: ensure `CURL_USE_OPENSSL`/`USE_OPENSSL_QUIC` are set in sync
  - cmake: fix MSH3 to appear on the feature list
  - connect: store connection info when really done
  - FTP: partly revert eeb7c1280742f5c8fa48a4340fc1e1a1a2c7075a
  - http2: when uploading data from stdin, fix eos forwarding
  - http: make max-filesize check not count ignored bodies
  - lib: fix AF_INET6 use outside of USE_IPV6
  - multi: check that the multi handle is valid in curl_multi_assign
  - QUIC: on connect, keep on trying on draining server
  - request: correctly reset the eos_sent flag
  - setopt: remove superfluous use of ternary expressions
  - singleuse: drop `Curl_memrchr()` for no-HTTP builds
  - tool_cb_wrt: use "curl_response" if no file name in URL
  - transfer: fix sendrecv() without interim poll
  - vtls: fix `Curl_ssl_conn_config_match` doc param</changelog>
  <changelog author="pmonreal@suse.com" date="1730289600">- Security fix: [bsc#1232528, CVE-2024-9681]
  * HSTS subdomain overwrites parent cache entry
  * Add curl-CVE-2024-9681.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730894400">- Update to 8.11.0:
  * Security fixes: [bsc#1232528, CVE-2024-9681]
  - curl: HSTS subdomain overwrites parent cache entry
  * Changes:
  - curl: --create-dirs works for --dump-header as well
  - gtls: Add P12 format support
  - ipfs: add options to disable
  - TLS: TLSv1.3 earlydata support for curl
  - WebSockets: make support official (non-experimental)
  * Bugfixes:
  - build: clarify CA embed is for curl tool, mark default, improve summary
  - build: show if CA bundle to embed was found
  - build: tidy up and improve versioned-symbols options
  - cmake/FindNGTCP2: use library path as hint for finding crypto module
  - cmake: disable default OpenSSL if BearSSL, GnuTLS or Rustls is enabled
  - cmake: rename LDAP dependency config variables to match Find modules
  - cmake: replace 'check_include_file_concat()' for LDAP and GSS detection
  - cmake: use OpenSSL for LDAP detection only if available
  - curl: add build options for safe/no CA bundle search (Windows)
  - curl: detect ECH support dynamically, not at build time
  - curl_addrinfo: support operating systems with only getaddrinfo(3)
  - ftp: fix 0-length last write on upload from stdin
  - gnutls: use session cache for QUIC
  - hsts: improve subdomain handling
  - hsts: support "implied LWS" properly around max-age
  - http2: auto reset stream on server eos
  - json.md: cli-option '--json' is an alias of '--data-binary'
  - lib: move curl_path.[ch] into vssh/
  - lib: remove function pointer typecasts for hmac/sha256/md5
  - libssh.c: handle EGAINS during proto-connect correctly
  - libssh2: use the filename buffer when getting the homedir
  - multi.c: warn/assert on stall only without timer
  - negotiate: conditional check around GSS &amp; SSL specific code
  - netrc: cache the netrc file in memory
  - ngtcp2: do not loop on recv
  - ngtcp2: set max window size to 10x of initial (128KB)
  - openssl quic: populate x509 store before handshake
  - openssl: extend the OpenSSL error messages
  - openssl: improve retries on shutdown
  - quic: use send/recvmmsg when available
  - schannel: fix TLS cert verification by IP SAN
  - schannel: ignore error on recv beyond close notify
  - select: use poll() if existing, avoid poll() with no sockets
  - sendf: add condition to max-filesize check
  - server/mqttd: fix two memory leaks
  - setopt: return error for bad input to CURLOPT_RTSP_REQUEST
  - setopt_cptr: make overflow check only done when needed
  - tls: avoid abusing CURLE_SSL_ENGINE_INITFAILED
  - tool: support --show-headers AND --remote-header-name
  - tool_operate: make --skip-existing work for --parallel
  - url: connection reuse on h3 connections
  - url: use same credentials on redirect
  - urlapi: normalize the IPv6 address
  - version: say quictls in MSH3 builds
  - vquic: fix compiler warning with gcc + MUSL
  - vquic: recv_mmsg, use fewer, but larger buffers
  - vtls: convert Curl_pin_peer_pubkey to use dynbuf
  - vtls: convert pubkey_pem_to_der to use dynbuf
  * Rebase curl-secure-getenv.patch</changelog>
  <changelog author="bjorn.bidar@thaodan.de" date="1731499200">- Add patch to fix libcurl when netrc parsing is enabled.
  curl_easy_duphandle did not init netrc which broke applications such
  as for example git. gh#curl/curl#15496
  * 0001-duphandle-also-init-netrc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733227200">- Security fix: [bsc#1234068, CVE-2024-11053]
  * curl could leak the password used for the first host to the
    followed-to host under certain circumstances.
  * netrc: address several netrc parser flaws
  * Add curl-CVE-2024-11053.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733918400">- Update to 8.11.1:
  * Security fixes:
  - netrc and redirect credential leak [bsc#1234068, CVE-2024-11053]
  * Bugfixes:
  - build: fix ECH to always enable HTTPS RR
  - cookie: treat cookie name case sensitively
  - curl-rustls.m4: keep existing 'CPPFLAGS'/'LDFLAGS' when detected
  - curl: use realtime in trace timestamps
  - digest: produce a shorter cnonce in Digest headers
  - docs: document default 'User-Agent'
  - docs: suggest --ssl-reqd instead of --ftp-ssl
  - duphandle: also init netrc
  - hostip: don't use the resolver for FQDN localhost
  - http_negotiate: allow for a one byte larger channel binding buffer
  - krb5: fix socket/sockindex confusion, MSVC compiler warnings
  - libssh: use libssh sftp_aio to upload file
  - libssh: when using IPv6 numerical address, add brackets
  - mime: fix reader stall on small read lengths
  - mk-ca-bundle: remove CKA_NSS_SERVER_DISTRUST_AFTER conditions
  - mprintf: fix the integer overflow checks
  - multi: fix callback for 'CURLMOPT_TIMERFUNCTION' not being called again when...
  - netrc: address several netrc parser flaws
  - netrc: support large file, longer lines, longer tokens
  - nghttp2: use custom memory functions
  - OpenSSL: improvde error message on expired certificate
  - openssl: remove three "Useless Assignments"
  - openssl: stop using SSL_CTX_ function prefix for our functions
  - pytest: add test for use of CURLMOPT_MAX_HOST_CONNECTIONS
  - rtsp: check EOS in the RTSP receive and return an error code
  - schannel: remove TLS 1.3 ciphersuite-list support
  - setopt: fix CURLOPT_HTTP_CONTENT_DECODING
  - setopt: fix missing options for builds without HTTP &amp; MQTT
  - socket: handle binding to "host!&lt;ip&gt;"
  - socketpair: fix enabling 'USE_EVENTFD'
  - strtok: use namespaced 'strtok_r' macro instead of redefining it
  * Remove 0001-duphandle-also-init-netrc.patch upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1736251200">- smtp: for starttls, do full upgrade [bsc#1235151]
  * Make sure the TLS handshake after a successful STARTTLS command
    is fully done before further sending/receiving on the connection.
  * Add curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238400">- Security fix: [bsc#1236588, CVE-2025-0167]
  * netrc: 'default' with no credentials is not a match
  * Add curl-CVE-2025-0167.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238401">- Security fix: [bsc#1236590, CVE-2025-0725]
  * content_encoding: drop support for zlib before 1.2.0.4
  * content_encoding: put the decomp buffers into the writer structs
  * Add curl-CVE-2025-0725.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738843200">- Update to 8.12.0:
  * Security fixes:
  - [bsc#1234068, CVE-2024-11053] curl could leak the password used
    for the first host to the followed-to host under certain circumstances.
  - [bsc#1232528, CVE-2024-9681] HSTS subdomain overwrites parent cache entry
  - [bsc#1236589, CVE-2025-0665] eventfd double close
  * Changes:
  - curl: add byte range support to --variable reading from file
  - curl: make --etag-save acknowledge --create-dirs
  - getinfo: fix CURLINFO_QUEUE_TIME_T and add 'time_queue' var
  - getinfo: provide info which auth was used for HTTP and proxy
  - hyper: drop support
  - openssl: add support to use keys and certificates from PKCS#11 provider
  - QUIC: 0RTT for gnutls via CURLSSLOPT_EARLYDATA
  - vtls: feature ssls-export for SSL session im-/export
  * Bugfixes:
  - altsvc: avoid integer overflow in expire calculation
  - asyn-ares: acknowledge CURLOPT_DNS_SERVERS set to NULL
  - asyn-ares: fix memory leak
  - asyn-ares: initial HTTPS resolve support
  - asyn-thread: use c-ares to resolve HTTPS RR
  - async-thread: avoid closing eventfd twice
  - cd2nroff: do not insist on quoted &lt;&gt; within backticks
  - cd2nroff: support "none" as a TLS backend
  - conncache: count shutdowns against host and max limits
  - content_encoding: drop support for zlib before 1.2.0.4
  - content_encoding: namespace GZIP flag constants
  - content_encoding: put the decomp buffers into the writer structs
  - content_encoding: support use of custom libzstd memory functions
  - cookie: cap expire times to 400 days
  - cookie: parse only the exact expire date
  - curl: return error if etag options are used with multiple URLs
  - curl_multi_fdset: include the shutdown connections in the set
  - curl_sha512_256: rename symbols to the curl namespace
  - curl_url_set.md: adjust the added-in to 7.62.0
  - doh: send HTTPS RR requests for all HTTP(S) transfers
  - easy: allow connect-only handle reuse with easy_perform
  - easy: make curl_easy_perform() return error if connection still there
  - easy_lock: use Sleep(1) for thread yield on old Windows
  - ECH: update APIs to those agreed with OpenSSL maintainers
  - GnuTLS: fix 'time_appconnect' for early data
  - HTTP/2: strip TE request header
  - http2: fix data_pending check
  - http2: fix value stored to 'result' is never read
  - http: ignore invalid Retry-After times
  - http_aws_sigv4: Fix invalid compare function handling zero-length pairs
  - https-connect: start next immediately on failure
  - lib: redirect handling by protocol handler
  - multi: fix curl_multi_waitfds reporting of fd_count
  - netrc: 'default' with no credentials is not a match
  - netrc: fix password-only entries
  - netrc: restore _netrc fallback logic
  - ngtcp2: fix memory leak on connect failure
  - openssl: define `HAVE_KEYLOG_CALLBACK` before use
  - openssl: fix ECH logic
  - osslq: use SSL_poll to determine writeability of QUIC streams
  - sectransp: free certificate on error
  - select: avoid a NULL deref in cwfds_add_sock
  - src: omit hugehelp and ca-embed from libcurltool
  - ssl session cache: change cache dimensions
  - system.h: add 64-bit curl_off_t definitions for NonStop
  - telnet: handle single-byte input option
  - TLS: check connection for SSL use, not handler
  - tool_formparse.c: make curlx_uztoso a static in here
  - tool_formparse: accept digits in --form type= strings
  - tool_getparam: ECH param parsing refix
  - tool_getparam: fail --hostpubsha256 if libssh2 is not used
  - tool_getparam: fix "Ignored Return Value"
  - tool_getparam: fix memory leak on error in parse_ech
  - tool_getparam: fix the ECH parser
  - tool_operate: make --etag-compare always accept a non-existing file
  - transfer: fix CURLOPT_CURLU override logic
  - urlapi: fix redirect to a new fragment or query (only)
  - vquic: make vquic_send_packets not return without setting psent
  - vtls: fix default SSL backend as a fallback
  - vtls: only remember the expiry timestamp in session cache
  - websocket: fix message send corruption
  - x509asn1: add parse recursion limit
  * Rebase pathes:
  - libcurl-ocloexec.patch
  - dont-mess-with-rpmoptflags.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739448000">- Update to 8.12.1:
  * Bugfixes:
  - asyn-thread: fix build with 'CURL_DISABLE_SOCKETPAIR'
  - asyn-thread: fix HTTPS RR crash
  - asyn-thread: fix the returned bitmask from Curl_resolver_getsock
  - asyn-thread: survive a c-ares channel set to NULL
  - cmake: always reference OpenSSL and ZLIB via imported targets
  - cmake: respect 'GNUTLS_CFLAGS' when detected via 'pkg-config'
  - cmake: respect 'GNUTLS_LIBRARY_DIRS' in 'libcurl.pc' and 'curl-config'
  - content_encoding: #error on too old zlib
  - imap: TLS upgrade fix
  - ldap: drop support for legacy Novell LDAP SDK
  - libssh2: comparison is always true because rc &lt;= -1
  - libssh2: raise lowest supported version to 1.2.8
  - libssh: drop support for libssh older than 0.9.0
  - openssl-quic: ignore ciphers for h3
  - pop3: TLS upgrade fix
  - runtests: fix the disabling of the memory tracking
  - runtests: quote commands to support paths with spaces
  - scache: add magic checks
  - smb: silence '-Warray-bounds' with gcc 13+
  - smtp: TLS upgrade fix
  - tool_cfgable: sort struct fields by size, use bitfields for booleans
  - tool_getparam: add "TLS required" flag for each such option
  - vtls: fix multissl-init
  - wakeup_write: make sure the eventfd write sends eight bytes</changelog>
  <changelog author="pmonreal@suse.com" date="1744200000">- Update to 8.13.0:
  * Changes:
  - curl: add write-out variable 'tls_earlydata'
  - curl: make --url support a file with URLs
  - gnutls: set priority via --ciphers
  - IMAP: add CURLOPT_UPLOAD_FLAGS and --upload-flags
  - lib: add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY
  - OpenSSL/quictls: add support for TLSv1.3 early data
  - rustls: add support for CERTINFO
  - rustls: add support for SSLKEYLOGFILE
  - rustls: support ECH w/ DoH lookup for config
  - rustls: support native platform verifier
  - var: add a '64dec' function that can base64 decode a string
  * Bugfixes:
  - conn: fix connection reuse when SSL is optional
  - hash: use single linked list for entries
  - http2: detect session being closed on ingress handling
  - http2: reset stream on response header error
  - http: remove a HTTP method size restriction
  - http: version negotiation
  - httpsrr: fix port detection
  - libssh: fix freeing of resources in disconnect
  - libssh: fix scp large file upload for 32-bit size_t systems
  - openssl-quic: do not iterate over multi handles
  - openssl: check return value of X509_get0_pubkey
  - openssl: drop support for old OpenSSL/LibreSSL versions
  - openssl: fix crash on missing cert password
  - openssl: fix pkcs11 URI checking for key files.
  - openssl: remove bad `goto`s into other scope
  - setopt: illegal CURLOPT_SOCKS5_AUTH should return error
  - setopt: setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine
  - sshserver.pl: adjust `AuthorizedKeysFile2` cutoff version
  - sshserver: fix excluding obsolete client config lines
  - SSLCERTS: list support for SSL_CERT_FILE and SSL_CERT_DIR
  - tftpd: prefix TFTP protocol error `E*` constants with `TFTP_`
  - tool_operate: fail SSH transfers without server auth
  - url: call protocol handler's disconnect in Curl_conn_free
  - urlapi: remove percent encoded dot sequences from the URL path
  - urldata: remove 'hostname' from struct Curl_async
  * Rebase patches:
  - libcurl-ocloexec.patch
  - curl-secure-getenv.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1744372800">- fix Leap build add curl-8.13.0-CloseSocket.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1748433600">- Update to 8.14.0:
  * Security fixes:
  - [CVE-2025-4947, bsc#1243397] QUIC certificate check skip with wolfSSL
  - [CVE-2025-5025, bsc#1243706] No QUIC certificate pinning with wolfSSL
  * Changes:
  - mqtt: send ping at upkeep interval
  - schannel: handle pkcs12 client certificates containing CA certificates
  - TLS: add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: import v2025.04.20 script + docs
  - websocket: add option to disable auto-pong reply
  * Bugfixes:
  - asny-thrdd: fix detach from running thread
  - async-threaded resolver: use ref counter
  - async: DoH improvements
  - build: enable gcc-12/13+, clang-10+ picky warnings
  - build: enable gcc-15 picky warnings
  - certs: drop unused `default_bits` from `.prm` files
  - cf-https-connect: use the passed in dns struct pointer
  - cf-socket: fix FTP accept connect
  - cfilters: remove assert
  - cmake: fix nghttp3 static linking with `USE_OPENSSL_QUIC=ON`
  - cmake: prefer `COMPILE_OPTIONS` over `CMAKE_C_FLAGS` for custom C options
  - cmake: revert `CURL_LTO` behavior for multi-config generators
  - configure: fix --disable-rt
  - CONTRIBUTE: add project guidelines for AI use
  - cpool/cshutdown: force close connections under pressure
  - curl: fix memory leak when -h is used in config file
  - curl_get_line: handle lines ending on the buffer boundary
  - headers: enforce a max number of response header to accept
  - http: fix HTTP/2 handling of TE request header using "trailers"
  - lib: include files using known path
  - lib: unify conversions to/from hex
  - libssh: add NULL check for Curl_meta_get()
  - libssh: fix memory leak
  - mqtt: use conn/easy meta hash
  - multi: do transfer book keeping using mid
  - multi: init_do(): check result
  - netrc: avoid NULL deref on weird input
  - netrc: avoid strdup NULL
  - netrc: deal with null token better
  - openssl-quic: avoid potential `-Wnull-dereference`, add assert
  - openssl-quic: fix shutdown when stream not open
  - openssl: enable builds for *both* engines and providers
  - openssl: set the cipher string before doing private cert
  - progress: avoid integer overflow when gathering total transfer size
  - rand: update comment on Curl_rand_bytes weak random
  - rustls: make max size of cert and key reasonable
  - smb: avoid integer overflow on weird input date
  - urlapi: redirecting to "" is considered fine
  * Remove curl-8.13.0-CloseSocket.patch upstream
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1749038400">- Update to 8.14.1:
  * Security fixes:
  - [bsc#1243933, CVE-2025-5399] libcurl can possibly get
    trapped in an endless busy-loop when processing specially
    crafted packets [d1145df2]
  * Bugfixes:
  - asyn-thrdd: fix cleanup when RR fails due to OOM
  - ftp: fix teardown of DATA connection in done
  - http: fail early when rewind of input failed when following redirects
  - multi: fix add_handle resizing
  - tls BIOs: handle BIO_CTRL_EOF correctly
  - tool_getparam: make --no-anyauth not be accepted
  - wolfssl: fix sending of early data
  - ws: handle blocked sends better
  - ws: tests and fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1749643200">- Update to 8.14.1: [jsc#PED-13055, jsc#PED-13056]
  * Add _multibuild
  * Remove patches fixed in the update:
  - curl-CVE-2024-11053.patch
  - curl-CVE-2024-2004.patch
  - curl-CVE-2024-2379.patch
  - curl-CVE-2024-2398.patch
  - curl-CVE-2024-2466.patch
  - curl-CVE-2024-6197.patch
  - curl-CVE-2024-7264.patch
  - curl-CVE-2024-8096.patch
  - curl-CVE-2024-9681.patch
  - curl-CVE-2025-0167.patch
  - curl-CVE-2025-0725.patch
  - curl-aws_sigv4-url-encode-the-canonical-path.patch
  - curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
</package>
<package pkgid="ec7bfa26f3e9d03cd57c14a7a41fcf266ad82e0947d3766c1b5ca5b4877fb585" name="libcurl-devel" arch="x86_64">
  <version epoch="0" ver="8.14.1" rel="150700.7.5.1"/>
  <changelog author="pmonreal@suse.com" date="1730289600">- Security fix: [bsc#1232528, CVE-2024-9681]
  * HSTS subdomain overwrites parent cache entry
  * Add curl-CVE-2024-9681.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730894400">- Update to 8.11.0:
  * Security fixes: [bsc#1232528, CVE-2024-9681]
  - curl: HSTS subdomain overwrites parent cache entry
  * Changes:
  - curl: --create-dirs works for --dump-header as well
  - gtls: Add P12 format support
  - ipfs: add options to disable
  - TLS: TLSv1.3 earlydata support for curl
  - WebSockets: make support official (non-experimental)
  * Bugfixes:
  - build: clarify CA embed is for curl tool, mark default, improve summary
  - build: show if CA bundle to embed was found
  - build: tidy up and improve versioned-symbols options
  - cmake/FindNGTCP2: use library path as hint for finding crypto module
  - cmake: disable default OpenSSL if BearSSL, GnuTLS or Rustls is enabled
  - cmake: rename LDAP dependency config variables to match Find modules
  - cmake: replace 'check_include_file_concat()' for LDAP and GSS detection
  - cmake: use OpenSSL for LDAP detection only if available
  - curl: add build options for safe/no CA bundle search (Windows)
  - curl: detect ECH support dynamically, not at build time
  - curl_addrinfo: support operating systems with only getaddrinfo(3)
  - ftp: fix 0-length last write on upload from stdin
  - gnutls: use session cache for QUIC
  - hsts: improve subdomain handling
  - hsts: support "implied LWS" properly around max-age
  - http2: auto reset stream on server eos
  - json.md: cli-option '--json' is an alias of '--data-binary'
  - lib: move curl_path.[ch] into vssh/
  - lib: remove function pointer typecasts for hmac/sha256/md5
  - libssh.c: handle EGAINS during proto-connect correctly
  - libssh2: use the filename buffer when getting the homedir
  - multi.c: warn/assert on stall only without timer
  - negotiate: conditional check around GSS &amp; SSL specific code
  - netrc: cache the netrc file in memory
  - ngtcp2: do not loop on recv
  - ngtcp2: set max window size to 10x of initial (128KB)
  - openssl quic: populate x509 store before handshake
  - openssl: extend the OpenSSL error messages
  - openssl: improve retries on shutdown
  - quic: use send/recvmmsg when available
  - schannel: fix TLS cert verification by IP SAN
  - schannel: ignore error on recv beyond close notify
  - select: use poll() if existing, avoid poll() with no sockets
  - sendf: add condition to max-filesize check
  - server/mqttd: fix two memory leaks
  - setopt: return error for bad input to CURLOPT_RTSP_REQUEST
  - setopt_cptr: make overflow check only done when needed
  - tls: avoid abusing CURLE_SSL_ENGINE_INITFAILED
  - tool: support --show-headers AND --remote-header-name
  - tool_operate: make --skip-existing work for --parallel
  - url: connection reuse on h3 connections
  - url: use same credentials on redirect
  - urlapi: normalize the IPv6 address
  - version: say quictls in MSH3 builds
  - vquic: fix compiler warning with gcc + MUSL
  - vquic: recv_mmsg, use fewer, but larger buffers
  - vtls: convert Curl_pin_peer_pubkey to use dynbuf
  - vtls: convert pubkey_pem_to_der to use dynbuf
  * Rebase curl-secure-getenv.patch</changelog>
  <changelog author="bjorn.bidar@thaodan.de" date="1731499200">- Add patch to fix libcurl when netrc parsing is enabled.
  curl_easy_duphandle did not init netrc which broke applications such
  as for example git. gh#curl/curl#15496
  * 0001-duphandle-also-init-netrc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733227200">- Security fix: [bsc#1234068, CVE-2024-11053]
  * curl could leak the password used for the first host to the
    followed-to host under certain circumstances.
  * netrc: address several netrc parser flaws
  * Add curl-CVE-2024-11053.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733918400">- Update to 8.11.1:
  * Security fixes:
  - netrc and redirect credential leak [bsc#1234068, CVE-2024-11053]
  * Bugfixes:
  - build: fix ECH to always enable HTTPS RR
  - cookie: treat cookie name case sensitively
  - curl-rustls.m4: keep existing 'CPPFLAGS'/'LDFLAGS' when detected
  - curl: use realtime in trace timestamps
  - digest: produce a shorter cnonce in Digest headers
  - docs: document default 'User-Agent'
  - docs: suggest --ssl-reqd instead of --ftp-ssl
  - duphandle: also init netrc
  - hostip: don't use the resolver for FQDN localhost
  - http_negotiate: allow for a one byte larger channel binding buffer
  - krb5: fix socket/sockindex confusion, MSVC compiler warnings
  - libssh: use libssh sftp_aio to upload file
  - libssh: when using IPv6 numerical address, add brackets
  - mime: fix reader stall on small read lengths
  - mk-ca-bundle: remove CKA_NSS_SERVER_DISTRUST_AFTER conditions
  - mprintf: fix the integer overflow checks
  - multi: fix callback for 'CURLMOPT_TIMERFUNCTION' not being called again when...
  - netrc: address several netrc parser flaws
  - netrc: support large file, longer lines, longer tokens
  - nghttp2: use custom memory functions
  - OpenSSL: improvde error message on expired certificate
  - openssl: remove three "Useless Assignments"
  - openssl: stop using SSL_CTX_ function prefix for our functions
  - pytest: add test for use of CURLMOPT_MAX_HOST_CONNECTIONS
  - rtsp: check EOS in the RTSP receive and return an error code
  - schannel: remove TLS 1.3 ciphersuite-list support
  - setopt: fix CURLOPT_HTTP_CONTENT_DECODING
  - setopt: fix missing options for builds without HTTP &amp; MQTT
  - socket: handle binding to "host!&lt;ip&gt;"
  - socketpair: fix enabling 'USE_EVENTFD'
  - strtok: use namespaced 'strtok_r' macro instead of redefining it
  * Remove 0001-duphandle-also-init-netrc.patch upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1736251200">- smtp: for starttls, do full upgrade [bsc#1235151]
  * Make sure the TLS handshake after a successful STARTTLS command
    is fully done before further sending/receiving on the connection.
  * Add curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238400">- Security fix: [bsc#1236588, CVE-2025-0167]
  * netrc: 'default' with no credentials is not a match
  * Add curl-CVE-2025-0167.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238401">- Security fix: [bsc#1236590, CVE-2025-0725]
  * content_encoding: drop support for zlib before 1.2.0.4
  * content_encoding: put the decomp buffers into the writer structs
  * Add curl-CVE-2025-0725.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738843200">- Update to 8.12.0:
  * Security fixes:
  - [bsc#1234068, CVE-2024-11053] curl could leak the password used
    for the first host to the followed-to host under certain circumstances.
  - [bsc#1232528, CVE-2024-9681] HSTS subdomain overwrites parent cache entry
  - [bsc#1236589, CVE-2025-0665] eventfd double close
  * Changes:
  - curl: add byte range support to --variable reading from file
  - curl: make --etag-save acknowledge --create-dirs
  - getinfo: fix CURLINFO_QUEUE_TIME_T and add 'time_queue' var
  - getinfo: provide info which auth was used for HTTP and proxy
  - hyper: drop support
  - openssl: add support to use keys and certificates from PKCS#11 provider
  - QUIC: 0RTT for gnutls via CURLSSLOPT_EARLYDATA
  - vtls: feature ssls-export for SSL session im-/export
  * Bugfixes:
  - altsvc: avoid integer overflow in expire calculation
  - asyn-ares: acknowledge CURLOPT_DNS_SERVERS set to NULL
  - asyn-ares: fix memory leak
  - asyn-ares: initial HTTPS resolve support
  - asyn-thread: use c-ares to resolve HTTPS RR
  - async-thread: avoid closing eventfd twice
  - cd2nroff: do not insist on quoted &lt;&gt; within backticks
  - cd2nroff: support "none" as a TLS backend
  - conncache: count shutdowns against host and max limits
  - content_encoding: drop support for zlib before 1.2.0.4
  - content_encoding: namespace GZIP flag constants
  - content_encoding: put the decomp buffers into the writer structs
  - content_encoding: support use of custom libzstd memory functions
  - cookie: cap expire times to 400 days
  - cookie: parse only the exact expire date
  - curl: return error if etag options are used with multiple URLs
  - curl_multi_fdset: include the shutdown connections in the set
  - curl_sha512_256: rename symbols to the curl namespace
  - curl_url_set.md: adjust the added-in to 7.62.0
  - doh: send HTTPS RR requests for all HTTP(S) transfers
  - easy: allow connect-only handle reuse with easy_perform
  - easy: make curl_easy_perform() return error if connection still there
  - easy_lock: use Sleep(1) for thread yield on old Windows
  - ECH: update APIs to those agreed with OpenSSL maintainers
  - GnuTLS: fix 'time_appconnect' for early data
  - HTTP/2: strip TE request header
  - http2: fix data_pending check
  - http2: fix value stored to 'result' is never read
  - http: ignore invalid Retry-After times
  - http_aws_sigv4: Fix invalid compare function handling zero-length pairs
  - https-connect: start next immediately on failure
  - lib: redirect handling by protocol handler
  - multi: fix curl_multi_waitfds reporting of fd_count
  - netrc: 'default' with no credentials is not a match
  - netrc: fix password-only entries
  - netrc: restore _netrc fallback logic
  - ngtcp2: fix memory leak on connect failure
  - openssl: define `HAVE_KEYLOG_CALLBACK` before use
  - openssl: fix ECH logic
  - osslq: use SSL_poll to determine writeability of QUIC streams
  - sectransp: free certificate on error
  - select: avoid a NULL deref in cwfds_add_sock
  - src: omit hugehelp and ca-embed from libcurltool
  - ssl session cache: change cache dimensions
  - system.h: add 64-bit curl_off_t definitions for NonStop
  - telnet: handle single-byte input option
  - TLS: check connection for SSL use, not handler
  - tool_formparse.c: make curlx_uztoso a static in here
  - tool_formparse: accept digits in --form type= strings
  - tool_getparam: ECH param parsing refix
  - tool_getparam: fail --hostpubsha256 if libssh2 is not used
  - tool_getparam: fix "Ignored Return Value"
  - tool_getparam: fix memory leak on error in parse_ech
  - tool_getparam: fix the ECH parser
  - tool_operate: make --etag-compare always accept a non-existing file
  - transfer: fix CURLOPT_CURLU override logic
  - urlapi: fix redirect to a new fragment or query (only)
  - vquic: make vquic_send_packets not return without setting psent
  - vtls: fix default SSL backend as a fallback
  - vtls: only remember the expiry timestamp in session cache
  - websocket: fix message send corruption
  - x509asn1: add parse recursion limit
  * Rebase pathes:
  - libcurl-ocloexec.patch
  - dont-mess-with-rpmoptflags.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739448000">- Update to 8.12.1:
  * Bugfixes:
  - asyn-thread: fix build with 'CURL_DISABLE_SOCKETPAIR'
  - asyn-thread: fix HTTPS RR crash
  - asyn-thread: fix the returned bitmask from Curl_resolver_getsock
  - asyn-thread: survive a c-ares channel set to NULL
  - cmake: always reference OpenSSL and ZLIB via imported targets
  - cmake: respect 'GNUTLS_CFLAGS' when detected via 'pkg-config'
  - cmake: respect 'GNUTLS_LIBRARY_DIRS' in 'libcurl.pc' and 'curl-config'
  - content_encoding: #error on too old zlib
  - imap: TLS upgrade fix
  - ldap: drop support for legacy Novell LDAP SDK
  - libssh2: comparison is always true because rc &lt;= -1
  - libssh2: raise lowest supported version to 1.2.8
  - libssh: drop support for libssh older than 0.9.0
  - openssl-quic: ignore ciphers for h3
  - pop3: TLS upgrade fix
  - runtests: fix the disabling of the memory tracking
  - runtests: quote commands to support paths with spaces
  - scache: add magic checks
  - smb: silence '-Warray-bounds' with gcc 13+
  - smtp: TLS upgrade fix
  - tool_cfgable: sort struct fields by size, use bitfields for booleans
  - tool_getparam: add "TLS required" flag for each such option
  - vtls: fix multissl-init
  - wakeup_write: make sure the eventfd write sends eight bytes</changelog>
  <changelog author="pmonreal@suse.com" date="1744200000">- Update to 8.13.0:
  * Changes:
  - curl: add write-out variable 'tls_earlydata'
  - curl: make --url support a file with URLs
  - gnutls: set priority via --ciphers
  - IMAP: add CURLOPT_UPLOAD_FLAGS and --upload-flags
  - lib: add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY
  - OpenSSL/quictls: add support for TLSv1.3 early data
  - rustls: add support for CERTINFO
  - rustls: add support for SSLKEYLOGFILE
  - rustls: support ECH w/ DoH lookup for config
  - rustls: support native platform verifier
  - var: add a '64dec' function that can base64 decode a string
  * Bugfixes:
  - conn: fix connection reuse when SSL is optional
  - hash: use single linked list for entries
  - http2: detect session being closed on ingress handling
  - http2: reset stream on response header error
  - http: remove a HTTP method size restriction
  - http: version negotiation
  - httpsrr: fix port detection
  - libssh: fix freeing of resources in disconnect
  - libssh: fix scp large file upload for 32-bit size_t systems
  - openssl-quic: do not iterate over multi handles
  - openssl: check return value of X509_get0_pubkey
  - openssl: drop support for old OpenSSL/LibreSSL versions
  - openssl: fix crash on missing cert password
  - openssl: fix pkcs11 URI checking for key files.
  - openssl: remove bad `goto`s into other scope
  - setopt: illegal CURLOPT_SOCKS5_AUTH should return error
  - setopt: setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine
  - sshserver.pl: adjust `AuthorizedKeysFile2` cutoff version
  - sshserver: fix excluding obsolete client config lines
  - SSLCERTS: list support for SSL_CERT_FILE and SSL_CERT_DIR
  - tftpd: prefix TFTP protocol error `E*` constants with `TFTP_`
  - tool_operate: fail SSH transfers without server auth
  - url: call protocol handler's disconnect in Curl_conn_free
  - urlapi: remove percent encoded dot sequences from the URL path
  - urldata: remove 'hostname' from struct Curl_async
  * Rebase patches:
  - libcurl-ocloexec.patch
  - curl-secure-getenv.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1744372800">- fix Leap build add curl-8.13.0-CloseSocket.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1748433600">- Update to 8.14.0:
  * Security fixes:
  - [CVE-2025-4947, bsc#1243397] QUIC certificate check skip with wolfSSL
  - [CVE-2025-5025, bsc#1243706] No QUIC certificate pinning with wolfSSL
  * Changes:
  - mqtt: send ping at upkeep interval
  - schannel: handle pkcs12 client certificates containing CA certificates
  - TLS: add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: import v2025.04.20 script + docs
  - websocket: add option to disable auto-pong reply
  * Bugfixes:
  - asny-thrdd: fix detach from running thread
  - async-threaded resolver: use ref counter
  - async: DoH improvements
  - build: enable gcc-12/13+, clang-10+ picky warnings
  - build: enable gcc-15 picky warnings
  - certs: drop unused `default_bits` from `.prm` files
  - cf-https-connect: use the passed in dns struct pointer
  - cf-socket: fix FTP accept connect
  - cfilters: remove assert
  - cmake: fix nghttp3 static linking with `USE_OPENSSL_QUIC=ON`
  - cmake: prefer `COMPILE_OPTIONS` over `CMAKE_C_FLAGS` for custom C options
  - cmake: revert `CURL_LTO` behavior for multi-config generators
  - configure: fix --disable-rt
  - CONTRIBUTE: add project guidelines for AI use
  - cpool/cshutdown: force close connections under pressure
  - curl: fix memory leak when -h is used in config file
  - curl_get_line: handle lines ending on the buffer boundary
  - headers: enforce a max number of response header to accept
  - http: fix HTTP/2 handling of TE request header using "trailers"
  - lib: include files using known path
  - lib: unify conversions to/from hex
  - libssh: add NULL check for Curl_meta_get()
  - libssh: fix memory leak
  - mqtt: use conn/easy meta hash
  - multi: do transfer book keeping using mid
  - multi: init_do(): check result
  - netrc: avoid NULL deref on weird input
  - netrc: avoid strdup NULL
  - netrc: deal with null token better
  - openssl-quic: avoid potential `-Wnull-dereference`, add assert
  - openssl-quic: fix shutdown when stream not open
  - openssl: enable builds for *both* engines and providers
  - openssl: set the cipher string before doing private cert
  - progress: avoid integer overflow when gathering total transfer size
  - rand: update comment on Curl_rand_bytes weak random
  - rustls: make max size of cert and key reasonable
  - smb: avoid integer overflow on weird input date
  - urlapi: redirecting to "" is considered fine
  * Remove curl-8.13.0-CloseSocket.patch upstream
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1749038400">- Update to 8.14.1:
  * Security fixes:
  - [bsc#1243933, CVE-2025-5399] libcurl can possibly get
    trapped in an endless busy-loop when processing specially
    crafted packets [d1145df2]
  * Bugfixes:
  - asyn-thrdd: fix cleanup when RR fails due to OOM
  - ftp: fix teardown of DATA connection in done
  - http: fail early when rewind of input failed when following redirects
  - multi: fix add_handle resizing
  - tls BIOs: handle BIO_CTRL_EOF correctly
  - tool_getparam: make --no-anyauth not be accepted
  - wolfssl: fix sending of early data
  - ws: handle blocked sends better
  - ws: tests and fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1749643200">- Update to 8.14.1: [jsc#PED-13055, jsc#PED-13056]
  * Add _multibuild
  * Remove patches fixed in the update:
  - curl-CVE-2024-11053.patch
  - curl-CVE-2024-2004.patch
  - curl-CVE-2024-2379.patch
  - curl-CVE-2024-2398.patch
  - curl-CVE-2024-2466.patch
  - curl-CVE-2024-6197.patch
  - curl-CVE-2024-7264.patch
  - curl-CVE-2024-8096.patch
  - curl-CVE-2024-9681.patch
  - curl-CVE-2025-0167.patch
  - curl-CVE-2025-0725.patch
  - curl-aws_sigv4-url-encode-the-canonical-path.patch
  - curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1763553600">- Security fix: [bsc#1253757, CVE-2025-11563]
  * curl: wcurl path traversal with percent-encoded slashes
  * Add curl-CVE-2025-11563.patch</changelog>
</package>
<package pkgid="bedc6d23bad70f8c01b5154d7ea135aef2b4e29aeb3cffa3305bb032c715cc01" name="libcurl-devel" arch="x86_64">
  <version epoch="0" ver="8.14.1" rel="150700.7.8.1"/>
  <changelog author="pmonreal@suse.com" date="1730894400">- Update to 8.11.0:
  * Security fixes: [bsc#1232528, CVE-2024-9681]
  - curl: HSTS subdomain overwrites parent cache entry
  * Changes:
  - curl: --create-dirs works for --dump-header as well
  - gtls: Add P12 format support
  - ipfs: add options to disable
  - TLS: TLSv1.3 earlydata support for curl
  - WebSockets: make support official (non-experimental)
  * Bugfixes:
  - build: clarify CA embed is for curl tool, mark default, improve summary
  - build: show if CA bundle to embed was found
  - build: tidy up and improve versioned-symbols options
  - cmake/FindNGTCP2: use library path as hint for finding crypto module
  - cmake: disable default OpenSSL if BearSSL, GnuTLS or Rustls is enabled
  - cmake: rename LDAP dependency config variables to match Find modules
  - cmake: replace 'check_include_file_concat()' for LDAP and GSS detection
  - cmake: use OpenSSL for LDAP detection only if available
  - curl: add build options for safe/no CA bundle search (Windows)
  - curl: detect ECH support dynamically, not at build time
  - curl_addrinfo: support operating systems with only getaddrinfo(3)
  - ftp: fix 0-length last write on upload from stdin
  - gnutls: use session cache for QUIC
  - hsts: improve subdomain handling
  - hsts: support "implied LWS" properly around max-age
  - http2: auto reset stream on server eos
  - json.md: cli-option '--json' is an alias of '--data-binary'
  - lib: move curl_path.[ch] into vssh/
  - lib: remove function pointer typecasts for hmac/sha256/md5
  - libssh.c: handle EGAINS during proto-connect correctly
  - libssh2: use the filename buffer when getting the homedir
  - multi.c: warn/assert on stall only without timer
  - negotiate: conditional check around GSS &amp; SSL specific code
  - netrc: cache the netrc file in memory
  - ngtcp2: do not loop on recv
  - ngtcp2: set max window size to 10x of initial (128KB)
  - openssl quic: populate x509 store before handshake
  - openssl: extend the OpenSSL error messages
  - openssl: improve retries on shutdown
  - quic: use send/recvmmsg when available
  - schannel: fix TLS cert verification by IP SAN
  - schannel: ignore error on recv beyond close notify
  - select: use poll() if existing, avoid poll() with no sockets
  - sendf: add condition to max-filesize check
  - server/mqttd: fix two memory leaks
  - setopt: return error for bad input to CURLOPT_RTSP_REQUEST
  - setopt_cptr: make overflow check only done when needed
  - tls: avoid abusing CURLE_SSL_ENGINE_INITFAILED
  - tool: support --show-headers AND --remote-header-name
  - tool_operate: make --skip-existing work for --parallel
  - url: connection reuse on h3 connections
  - url: use same credentials on redirect
  - urlapi: normalize the IPv6 address
  - version: say quictls in MSH3 builds
  - vquic: fix compiler warning with gcc + MUSL
  - vquic: recv_mmsg, use fewer, but larger buffers
  - vtls: convert Curl_pin_peer_pubkey to use dynbuf
  - vtls: convert pubkey_pem_to_der to use dynbuf
  * Rebase curl-secure-getenv.patch</changelog>
  <changelog author="bjorn.bidar@thaodan.de" date="1731499200">- Add patch to fix libcurl when netrc parsing is enabled.
  curl_easy_duphandle did not init netrc which broke applications such
  as for example git. gh#curl/curl#15496
  * 0001-duphandle-also-init-netrc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733227200">- Security fix: [bsc#1234068, CVE-2024-11053]
  * curl could leak the password used for the first host to the
    followed-to host under certain circumstances.
  * netrc: address several netrc parser flaws
  * Add curl-CVE-2024-11053.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733918400">- Update to 8.11.1:
  * Security fixes:
  - netrc and redirect credential leak [bsc#1234068, CVE-2024-11053]
  * Bugfixes:
  - build: fix ECH to always enable HTTPS RR
  - cookie: treat cookie name case sensitively
  - curl-rustls.m4: keep existing 'CPPFLAGS'/'LDFLAGS' when detected
  - curl: use realtime in trace timestamps
  - digest: produce a shorter cnonce in Digest headers
  - docs: document default 'User-Agent'
  - docs: suggest --ssl-reqd instead of --ftp-ssl
  - duphandle: also init netrc
  - hostip: don't use the resolver for FQDN localhost
  - http_negotiate: allow for a one byte larger channel binding buffer
  - krb5: fix socket/sockindex confusion, MSVC compiler warnings
  - libssh: use libssh sftp_aio to upload file
  - libssh: when using IPv6 numerical address, add brackets
  - mime: fix reader stall on small read lengths
  - mk-ca-bundle: remove CKA_NSS_SERVER_DISTRUST_AFTER conditions
  - mprintf: fix the integer overflow checks
  - multi: fix callback for 'CURLMOPT_TIMERFUNCTION' not being called again when...
  - netrc: address several netrc parser flaws
  - netrc: support large file, longer lines, longer tokens
  - nghttp2: use custom memory functions
  - OpenSSL: improvde error message on expired certificate
  - openssl: remove three "Useless Assignments"
  - openssl: stop using SSL_CTX_ function prefix for our functions
  - pytest: add test for use of CURLMOPT_MAX_HOST_CONNECTIONS
  - rtsp: check EOS in the RTSP receive and return an error code
  - schannel: remove TLS 1.3 ciphersuite-list support
  - setopt: fix CURLOPT_HTTP_CONTENT_DECODING
  - setopt: fix missing options for builds without HTTP &amp; MQTT
  - socket: handle binding to "host!&lt;ip&gt;"
  - socketpair: fix enabling 'USE_EVENTFD'
  - strtok: use namespaced 'strtok_r' macro instead of redefining it
  * Remove 0001-duphandle-also-init-netrc.patch upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1736251200">- smtp: for starttls, do full upgrade [bsc#1235151]
  * Make sure the TLS handshake after a successful STARTTLS command
    is fully done before further sending/receiving on the connection.
  * Add curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238400">- Security fix: [bsc#1236588, CVE-2025-0167]
  * netrc: 'default' with no credentials is not a match
  * Add curl-CVE-2025-0167.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238401">- Security fix: [bsc#1236590, CVE-2025-0725]
  * content_encoding: drop support for zlib before 1.2.0.4
  * content_encoding: put the decomp buffers into the writer structs
  * Add curl-CVE-2025-0725.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738843200">- Update to 8.12.0:
  * Security fixes:
  - [bsc#1234068, CVE-2024-11053] curl could leak the password used
    for the first host to the followed-to host under certain circumstances.
  - [bsc#1232528, CVE-2024-9681] HSTS subdomain overwrites parent cache entry
  - [bsc#1236589, CVE-2025-0665] eventfd double close
  * Changes:
  - curl: add byte range support to --variable reading from file
  - curl: make --etag-save acknowledge --create-dirs
  - getinfo: fix CURLINFO_QUEUE_TIME_T and add 'time_queue' var
  - getinfo: provide info which auth was used for HTTP and proxy
  - hyper: drop support
  - openssl: add support to use keys and certificates from PKCS#11 provider
  - QUIC: 0RTT for gnutls via CURLSSLOPT_EARLYDATA
  - vtls: feature ssls-export for SSL session im-/export
  * Bugfixes:
  - altsvc: avoid integer overflow in expire calculation
  - asyn-ares: acknowledge CURLOPT_DNS_SERVERS set to NULL
  - asyn-ares: fix memory leak
  - asyn-ares: initial HTTPS resolve support
  - asyn-thread: use c-ares to resolve HTTPS RR
  - async-thread: avoid closing eventfd twice
  - cd2nroff: do not insist on quoted &lt;&gt; within backticks
  - cd2nroff: support "none" as a TLS backend
  - conncache: count shutdowns against host and max limits
  - content_encoding: drop support for zlib before 1.2.0.4
  - content_encoding: namespace GZIP flag constants
  - content_encoding: put the decomp buffers into the writer structs
  - content_encoding: support use of custom libzstd memory functions
  - cookie: cap expire times to 400 days
  - cookie: parse only the exact expire date
  - curl: return error if etag options are used with multiple URLs
  - curl_multi_fdset: include the shutdown connections in the set
  - curl_sha512_256: rename symbols to the curl namespace
  - curl_url_set.md: adjust the added-in to 7.62.0
  - doh: send HTTPS RR requests for all HTTP(S) transfers
  - easy: allow connect-only handle reuse with easy_perform
  - easy: make curl_easy_perform() return error if connection still there
  - easy_lock: use Sleep(1) for thread yield on old Windows
  - ECH: update APIs to those agreed with OpenSSL maintainers
  - GnuTLS: fix 'time_appconnect' for early data
  - HTTP/2: strip TE request header
  - http2: fix data_pending check
  - http2: fix value stored to 'result' is never read
  - http: ignore invalid Retry-After times
  - http_aws_sigv4: Fix invalid compare function handling zero-length pairs
  - https-connect: start next immediately on failure
  - lib: redirect handling by protocol handler
  - multi: fix curl_multi_waitfds reporting of fd_count
  - netrc: 'default' with no credentials is not a match
  - netrc: fix password-only entries
  - netrc: restore _netrc fallback logic
  - ngtcp2: fix memory leak on connect failure
  - openssl: define `HAVE_KEYLOG_CALLBACK` before use
  - openssl: fix ECH logic
  - osslq: use SSL_poll to determine writeability of QUIC streams
  - sectransp: free certificate on error
  - select: avoid a NULL deref in cwfds_add_sock
  - src: omit hugehelp and ca-embed from libcurltool
  - ssl session cache: change cache dimensions
  - system.h: add 64-bit curl_off_t definitions for NonStop
  - telnet: handle single-byte input option
  - TLS: check connection for SSL use, not handler
  - tool_formparse.c: make curlx_uztoso a static in here
  - tool_formparse: accept digits in --form type= strings
  - tool_getparam: ECH param parsing refix
  - tool_getparam: fail --hostpubsha256 if libssh2 is not used
  - tool_getparam: fix "Ignored Return Value"
  - tool_getparam: fix memory leak on error in parse_ech
  - tool_getparam: fix the ECH parser
  - tool_operate: make --etag-compare always accept a non-existing file
  - transfer: fix CURLOPT_CURLU override logic
  - urlapi: fix redirect to a new fragment or query (only)
  - vquic: make vquic_send_packets not return without setting psent
  - vtls: fix default SSL backend as a fallback
  - vtls: only remember the expiry timestamp in session cache
  - websocket: fix message send corruption
  - x509asn1: add parse recursion limit
  * Rebase pathes:
  - libcurl-ocloexec.patch
  - dont-mess-with-rpmoptflags.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739448000">- Update to 8.12.1:
  * Bugfixes:
  - asyn-thread: fix build with 'CURL_DISABLE_SOCKETPAIR'
  - asyn-thread: fix HTTPS RR crash
  - asyn-thread: fix the returned bitmask from Curl_resolver_getsock
  - asyn-thread: survive a c-ares channel set to NULL
  - cmake: always reference OpenSSL and ZLIB via imported targets
  - cmake: respect 'GNUTLS_CFLAGS' when detected via 'pkg-config'
  - cmake: respect 'GNUTLS_LIBRARY_DIRS' in 'libcurl.pc' and 'curl-config'
  - content_encoding: #error on too old zlib
  - imap: TLS upgrade fix
  - ldap: drop support for legacy Novell LDAP SDK
  - libssh2: comparison is always true because rc &lt;= -1
  - libssh2: raise lowest supported version to 1.2.8
  - libssh: drop support for libssh older than 0.9.0
  - openssl-quic: ignore ciphers for h3
  - pop3: TLS upgrade fix
  - runtests: fix the disabling of the memory tracking
  - runtests: quote commands to support paths with spaces
  - scache: add magic checks
  - smb: silence '-Warray-bounds' with gcc 13+
  - smtp: TLS upgrade fix
  - tool_cfgable: sort struct fields by size, use bitfields for booleans
  - tool_getparam: add "TLS required" flag for each such option
  - vtls: fix multissl-init
  - wakeup_write: make sure the eventfd write sends eight bytes</changelog>
  <changelog author="pmonreal@suse.com" date="1744200000">- Update to 8.13.0:
  * Changes:
  - curl: add write-out variable 'tls_earlydata'
  - curl: make --url support a file with URLs
  - gnutls: set priority via --ciphers
  - IMAP: add CURLOPT_UPLOAD_FLAGS and --upload-flags
  - lib: add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY
  - OpenSSL/quictls: add support for TLSv1.3 early data
  - rustls: add support for CERTINFO
  - rustls: add support for SSLKEYLOGFILE
  - rustls: support ECH w/ DoH lookup for config
  - rustls: support native platform verifier
  - var: add a '64dec' function that can base64 decode a string
  * Bugfixes:
  - conn: fix connection reuse when SSL is optional
  - hash: use single linked list for entries
  - http2: detect session being closed on ingress handling
  - http2: reset stream on response header error
  - http: remove a HTTP method size restriction
  - http: version negotiation
  - httpsrr: fix port detection
  - libssh: fix freeing of resources in disconnect
  - libssh: fix scp large file upload for 32-bit size_t systems
  - openssl-quic: do not iterate over multi handles
  - openssl: check return value of X509_get0_pubkey
  - openssl: drop support for old OpenSSL/LibreSSL versions
  - openssl: fix crash on missing cert password
  - openssl: fix pkcs11 URI checking for key files.
  - openssl: remove bad `goto`s into other scope
  - setopt: illegal CURLOPT_SOCKS5_AUTH should return error
  - setopt: setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine
  - sshserver.pl: adjust `AuthorizedKeysFile2` cutoff version
  - sshserver: fix excluding obsolete client config lines
  - SSLCERTS: list support for SSL_CERT_FILE and SSL_CERT_DIR
  - tftpd: prefix TFTP protocol error `E*` constants with `TFTP_`
  - tool_operate: fail SSH transfers without server auth
  - url: call protocol handler's disconnect in Curl_conn_free
  - urlapi: remove percent encoded dot sequences from the URL path
  - urldata: remove 'hostname' from struct Curl_async
  * Rebase patches:
  - libcurl-ocloexec.patch
  - curl-secure-getenv.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1744372800">- fix Leap build add curl-8.13.0-CloseSocket.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1748433600">- Update to 8.14.0:
  * Security fixes:
  - [CVE-2025-4947, bsc#1243397] QUIC certificate check skip with wolfSSL
  - [CVE-2025-5025, bsc#1243706] No QUIC certificate pinning with wolfSSL
  * Changes:
  - mqtt: send ping at upkeep interval
  - schannel: handle pkcs12 client certificates containing CA certificates
  - TLS: add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: import v2025.04.20 script + docs
  - websocket: add option to disable auto-pong reply
  * Bugfixes:
  - asny-thrdd: fix detach from running thread
  - async-threaded resolver: use ref counter
  - async: DoH improvements
  - build: enable gcc-12/13+, clang-10+ picky warnings
  - build: enable gcc-15 picky warnings
  - certs: drop unused `default_bits` from `.prm` files
  - cf-https-connect: use the passed in dns struct pointer
  - cf-socket: fix FTP accept connect
  - cfilters: remove assert
  - cmake: fix nghttp3 static linking with `USE_OPENSSL_QUIC=ON`
  - cmake: prefer `COMPILE_OPTIONS` over `CMAKE_C_FLAGS` for custom C options
  - cmake: revert `CURL_LTO` behavior for multi-config generators
  - configure: fix --disable-rt
  - CONTRIBUTE: add project guidelines for AI use
  - cpool/cshutdown: force close connections under pressure
  - curl: fix memory leak when -h is used in config file
  - curl_get_line: handle lines ending on the buffer boundary
  - headers: enforce a max number of response header to accept
  - http: fix HTTP/2 handling of TE request header using "trailers"
  - lib: include files using known path
  - lib: unify conversions to/from hex
  - libssh: add NULL check for Curl_meta_get()
  - libssh: fix memory leak
  - mqtt: use conn/easy meta hash
  - multi: do transfer book keeping using mid
  - multi: init_do(): check result
  - netrc: avoid NULL deref on weird input
  - netrc: avoid strdup NULL
  - netrc: deal with null token better
  - openssl-quic: avoid potential `-Wnull-dereference`, add assert
  - openssl-quic: fix shutdown when stream not open
  - openssl: enable builds for *both* engines and providers
  - openssl: set the cipher string before doing private cert
  - progress: avoid integer overflow when gathering total transfer size
  - rand: update comment on Curl_rand_bytes weak random
  - rustls: make max size of cert and key reasonable
  - smb: avoid integer overflow on weird input date
  - urlapi: redirecting to "" is considered fine
  * Remove curl-8.13.0-CloseSocket.patch upstream
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1749038400">- Update to 8.14.1:
  * Security fixes:
  - [bsc#1243933, CVE-2025-5399] libcurl can possibly get
    trapped in an endless busy-loop when processing specially
    crafted packets [d1145df2]
  * Bugfixes:
  - asyn-thrdd: fix cleanup when RR fails due to OOM
  - ftp: fix teardown of DATA connection in done
  - http: fail early when rewind of input failed when following redirects
  - multi: fix add_handle resizing
  - tls BIOs: handle BIO_CTRL_EOF correctly
  - tool_getparam: make --no-anyauth not be accepted
  - wolfssl: fix sending of early data
  - ws: handle blocked sends better
  - ws: tests and fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1749643200">- Update to 8.14.1: [jsc#PED-13055, jsc#PED-13056]
  * Add _multibuild
  * Remove patches fixed in the update:
  - curl-CVE-2024-11053.patch
  - curl-CVE-2024-2004.patch
  - curl-CVE-2024-2379.patch
  - curl-CVE-2024-2398.patch
  - curl-CVE-2024-2466.patch
  - curl-CVE-2024-6197.patch
  - curl-CVE-2024-7264.patch
  - curl-CVE-2024-8096.patch
  - curl-CVE-2024-9681.patch
  - curl-CVE-2025-0167.patch
  - curl-CVE-2025-0725.patch
  - curl-aws_sigv4-url-encode-the-canonical-path.patch
  - curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1763553600">- Security fix: [bsc#1253757, CVE-2025-11563]
  * curl: wcurl path traversal with percent-encoded slashes
  * Add curl-CVE-2025-11563.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767355200">- Security fixes:
  * [bsc#1255731, CVE-2025-14524] if redirected, require permission to use bearer
  * [bsc#1255734, CVE-2025-15224] require private key or user-agent for public key auth
  * [bsc#1255732, CVE-2025-14819] toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache
  * [bsc#1255733, CVE-2025-15079] set both knownhosts options to the same file
  * Add patches:
  - curl-CVE-2025-14524.patch
  - curl-CVE-2025-15224.patch
  - curl-CVE-2025-14819.patch
  - curl-CVE-2025-15079.patch</changelog>
</package>
<package pkgid="8bc96bac44424befd8f01afc002d076f0e0ca484869fce9ca26c79a39ecdd86f" name="libcurl4-32bit" arch="x86_64">
  <version epoch="0" ver="8.14.1" rel="150600.4.28.1"/>
  <changelog author="pmonreal@suse.com" date="1727179200">- Update to 8.10.1:
  * Bugfixes:
  - autotools: fix `--with-ca-embed` build rule
  - cmake: ensure `CURL_USE_OPENSSL`/`USE_OPENSSL_QUIC` are set in sync
  - cmake: fix MSH3 to appear on the feature list
  - connect: store connection info when really done
  - FTP: partly revert eeb7c1280742f5c8fa48a4340fc1e1a1a2c7075a
  - http2: when uploading data from stdin, fix eos forwarding
  - http: make max-filesize check not count ignored bodies
  - lib: fix AF_INET6 use outside of USE_IPV6
  - multi: check that the multi handle is valid in curl_multi_assign
  - QUIC: on connect, keep on trying on draining server
  - request: correctly reset the eos_sent flag
  - setopt: remove superfluous use of ternary expressions
  - singleuse: drop `Curl_memrchr()` for no-HTTP builds
  - tool_cb_wrt: use "curl_response" if no file name in URL
  - transfer: fix sendrecv() without interim poll
  - vtls: fix `Curl_ssl_conn_config_match` doc param</changelog>
  <changelog author="pmonreal@suse.com" date="1730289600">- Security fix: [bsc#1232528, CVE-2024-9681]
  * HSTS subdomain overwrites parent cache entry
  * Add curl-CVE-2024-9681.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730894400">- Update to 8.11.0:
  * Security fixes: [bsc#1232528, CVE-2024-9681]
  - curl: HSTS subdomain overwrites parent cache entry
  * Changes:
  - curl: --create-dirs works for --dump-header as well
  - gtls: Add P12 format support
  - ipfs: add options to disable
  - TLS: TLSv1.3 earlydata support for curl
  - WebSockets: make support official (non-experimental)
  * Bugfixes:
  - build: clarify CA embed is for curl tool, mark default, improve summary
  - build: show if CA bundle to embed was found
  - build: tidy up and improve versioned-symbols options
  - cmake/FindNGTCP2: use library path as hint for finding crypto module
  - cmake: disable default OpenSSL if BearSSL, GnuTLS or Rustls is enabled
  - cmake: rename LDAP dependency config variables to match Find modules
  - cmake: replace 'check_include_file_concat()' for LDAP and GSS detection
  - cmake: use OpenSSL for LDAP detection only if available
  - curl: add build options for safe/no CA bundle search (Windows)
  - curl: detect ECH support dynamically, not at build time
  - curl_addrinfo: support operating systems with only getaddrinfo(3)
  - ftp: fix 0-length last write on upload from stdin
  - gnutls: use session cache for QUIC
  - hsts: improve subdomain handling
  - hsts: support "implied LWS" properly around max-age
  - http2: auto reset stream on server eos
  - json.md: cli-option '--json' is an alias of '--data-binary'
  - lib: move curl_path.[ch] into vssh/
  - lib: remove function pointer typecasts for hmac/sha256/md5
  - libssh.c: handle EGAINS during proto-connect correctly
  - libssh2: use the filename buffer when getting the homedir
  - multi.c: warn/assert on stall only without timer
  - negotiate: conditional check around GSS &amp; SSL specific code
  - netrc: cache the netrc file in memory
  - ngtcp2: do not loop on recv
  - ngtcp2: set max window size to 10x of initial (128KB)
  - openssl quic: populate x509 store before handshake
  - openssl: extend the OpenSSL error messages
  - openssl: improve retries on shutdown
  - quic: use send/recvmmsg when available
  - schannel: fix TLS cert verification by IP SAN
  - schannel: ignore error on recv beyond close notify
  - select: use poll() if existing, avoid poll() with no sockets
  - sendf: add condition to max-filesize check
  - server/mqttd: fix two memory leaks
  - setopt: return error for bad input to CURLOPT_RTSP_REQUEST
  - setopt_cptr: make overflow check only done when needed
  - tls: avoid abusing CURLE_SSL_ENGINE_INITFAILED
  - tool: support --show-headers AND --remote-header-name
  - tool_operate: make --skip-existing work for --parallel
  - url: connection reuse on h3 connections
  - url: use same credentials on redirect
  - urlapi: normalize the IPv6 address
  - version: say quictls in MSH3 builds
  - vquic: fix compiler warning with gcc + MUSL
  - vquic: recv_mmsg, use fewer, but larger buffers
  - vtls: convert Curl_pin_peer_pubkey to use dynbuf
  - vtls: convert pubkey_pem_to_der to use dynbuf
  * Rebase curl-secure-getenv.patch</changelog>
  <changelog author="bjorn.bidar@thaodan.de" date="1731499200">- Add patch to fix libcurl when netrc parsing is enabled.
  curl_easy_duphandle did not init netrc which broke applications such
  as for example git. gh#curl/curl#15496
  * 0001-duphandle-also-init-netrc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733227200">- Security fix: [bsc#1234068, CVE-2024-11053]
  * curl could leak the password used for the first host to the
    followed-to host under certain circumstances.
  * netrc: address several netrc parser flaws
  * Add curl-CVE-2024-11053.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733918400">- Update to 8.11.1:
  * Security fixes:
  - netrc and redirect credential leak [bsc#1234068, CVE-2024-11053]
  * Bugfixes:
  - build: fix ECH to always enable HTTPS RR
  - cookie: treat cookie name case sensitively
  - curl-rustls.m4: keep existing 'CPPFLAGS'/'LDFLAGS' when detected
  - curl: use realtime in trace timestamps
  - digest: produce a shorter cnonce in Digest headers
  - docs: document default 'User-Agent'
  - docs: suggest --ssl-reqd instead of --ftp-ssl
  - duphandle: also init netrc
  - hostip: don't use the resolver for FQDN localhost
  - http_negotiate: allow for a one byte larger channel binding buffer
  - krb5: fix socket/sockindex confusion, MSVC compiler warnings
  - libssh: use libssh sftp_aio to upload file
  - libssh: when using IPv6 numerical address, add brackets
  - mime: fix reader stall on small read lengths
  - mk-ca-bundle: remove CKA_NSS_SERVER_DISTRUST_AFTER conditions
  - mprintf: fix the integer overflow checks
  - multi: fix callback for 'CURLMOPT_TIMERFUNCTION' not being called again when...
  - netrc: address several netrc parser flaws
  - netrc: support large file, longer lines, longer tokens
  - nghttp2: use custom memory functions
  - OpenSSL: improvde error message on expired certificate
  - openssl: remove three "Useless Assignments"
  - openssl: stop using SSL_CTX_ function prefix for our functions
  - pytest: add test for use of CURLMOPT_MAX_HOST_CONNECTIONS
  - rtsp: check EOS in the RTSP receive and return an error code
  - schannel: remove TLS 1.3 ciphersuite-list support
  - setopt: fix CURLOPT_HTTP_CONTENT_DECODING
  - setopt: fix missing options for builds without HTTP &amp; MQTT
  - socket: handle binding to "host!&lt;ip&gt;"
  - socketpair: fix enabling 'USE_EVENTFD'
  - strtok: use namespaced 'strtok_r' macro instead of redefining it
  * Remove 0001-duphandle-also-init-netrc.patch upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1736251200">- smtp: for starttls, do full upgrade [bsc#1235151]
  * Make sure the TLS handshake after a successful STARTTLS command
    is fully done before further sending/receiving on the connection.
  * Add curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238400">- Security fix: [bsc#1236588, CVE-2025-0167]
  * netrc: 'default' with no credentials is not a match
  * Add curl-CVE-2025-0167.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238401">- Security fix: [bsc#1236590, CVE-2025-0725]
  * content_encoding: drop support for zlib before 1.2.0.4
  * content_encoding: put the decomp buffers into the writer structs
  * Add curl-CVE-2025-0725.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738843200">- Update to 8.12.0:
  * Security fixes:
  - [bsc#1234068, CVE-2024-11053] curl could leak the password used
    for the first host to the followed-to host under certain circumstances.
  - [bsc#1232528, CVE-2024-9681] HSTS subdomain overwrites parent cache entry
  - [bsc#1236589, CVE-2025-0665] eventfd double close
  * Changes:
  - curl: add byte range support to --variable reading from file
  - curl: make --etag-save acknowledge --create-dirs
  - getinfo: fix CURLINFO_QUEUE_TIME_T and add 'time_queue' var
  - getinfo: provide info which auth was used for HTTP and proxy
  - hyper: drop support
  - openssl: add support to use keys and certificates from PKCS#11 provider
  - QUIC: 0RTT for gnutls via CURLSSLOPT_EARLYDATA
  - vtls: feature ssls-export for SSL session im-/export
  * Bugfixes:
  - altsvc: avoid integer overflow in expire calculation
  - asyn-ares: acknowledge CURLOPT_DNS_SERVERS set to NULL
  - asyn-ares: fix memory leak
  - asyn-ares: initial HTTPS resolve support
  - asyn-thread: use c-ares to resolve HTTPS RR
  - async-thread: avoid closing eventfd twice
  - cd2nroff: do not insist on quoted &lt;&gt; within backticks
  - cd2nroff: support "none" as a TLS backend
  - conncache: count shutdowns against host and max limits
  - content_encoding: drop support for zlib before 1.2.0.4
  - content_encoding: namespace GZIP flag constants
  - content_encoding: put the decomp buffers into the writer structs
  - content_encoding: support use of custom libzstd memory functions
  - cookie: cap expire times to 400 days
  - cookie: parse only the exact expire date
  - curl: return error if etag options are used with multiple URLs
  - curl_multi_fdset: include the shutdown connections in the set
  - curl_sha512_256: rename symbols to the curl namespace
  - curl_url_set.md: adjust the added-in to 7.62.0
  - doh: send HTTPS RR requests for all HTTP(S) transfers
  - easy: allow connect-only handle reuse with easy_perform
  - easy: make curl_easy_perform() return error if connection still there
  - easy_lock: use Sleep(1) for thread yield on old Windows
  - ECH: update APIs to those agreed with OpenSSL maintainers
  - GnuTLS: fix 'time_appconnect' for early data
  - HTTP/2: strip TE request header
  - http2: fix data_pending check
  - http2: fix value stored to 'result' is never read
  - http: ignore invalid Retry-After times
  - http_aws_sigv4: Fix invalid compare function handling zero-length pairs
  - https-connect: start next immediately on failure
  - lib: redirect handling by protocol handler
  - multi: fix curl_multi_waitfds reporting of fd_count
  - netrc: 'default' with no credentials is not a match
  - netrc: fix password-only entries
  - netrc: restore _netrc fallback logic
  - ngtcp2: fix memory leak on connect failure
  - openssl: define `HAVE_KEYLOG_CALLBACK` before use
  - openssl: fix ECH logic
  - osslq: use SSL_poll to determine writeability of QUIC streams
  - sectransp: free certificate on error
  - select: avoid a NULL deref in cwfds_add_sock
  - src: omit hugehelp and ca-embed from libcurltool
  - ssl session cache: change cache dimensions
  - system.h: add 64-bit curl_off_t definitions for NonStop
  - telnet: handle single-byte input option
  - TLS: check connection for SSL use, not handler
  - tool_formparse.c: make curlx_uztoso a static in here
  - tool_formparse: accept digits in --form type= strings
  - tool_getparam: ECH param parsing refix
  - tool_getparam: fail --hostpubsha256 if libssh2 is not used
  - tool_getparam: fix "Ignored Return Value"
  - tool_getparam: fix memory leak on error in parse_ech
  - tool_getparam: fix the ECH parser
  - tool_operate: make --etag-compare always accept a non-existing file
  - transfer: fix CURLOPT_CURLU override logic
  - urlapi: fix redirect to a new fragment or query (only)
  - vquic: make vquic_send_packets not return without setting psent
  - vtls: fix default SSL backend as a fallback
  - vtls: only remember the expiry timestamp in session cache
  - websocket: fix message send corruption
  - x509asn1: add parse recursion limit
  * Rebase pathes:
  - libcurl-ocloexec.patch
  - dont-mess-with-rpmoptflags.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739448000">- Update to 8.12.1:
  * Bugfixes:
  - asyn-thread: fix build with 'CURL_DISABLE_SOCKETPAIR'
  - asyn-thread: fix HTTPS RR crash
  - asyn-thread: fix the returned bitmask from Curl_resolver_getsock
  - asyn-thread: survive a c-ares channel set to NULL
  - cmake: always reference OpenSSL and ZLIB via imported targets
  - cmake: respect 'GNUTLS_CFLAGS' when detected via 'pkg-config'
  - cmake: respect 'GNUTLS_LIBRARY_DIRS' in 'libcurl.pc' and 'curl-config'
  - content_encoding: #error on too old zlib
  - imap: TLS upgrade fix
  - ldap: drop support for legacy Novell LDAP SDK
  - libssh2: comparison is always true because rc &lt;= -1
  - libssh2: raise lowest supported version to 1.2.8
  - libssh: drop support for libssh older than 0.9.0
  - openssl-quic: ignore ciphers for h3
  - pop3: TLS upgrade fix
  - runtests: fix the disabling of the memory tracking
  - runtests: quote commands to support paths with spaces
  - scache: add magic checks
  - smb: silence '-Warray-bounds' with gcc 13+
  - smtp: TLS upgrade fix
  - tool_cfgable: sort struct fields by size, use bitfields for booleans
  - tool_getparam: add "TLS required" flag for each such option
  - vtls: fix multissl-init
  - wakeup_write: make sure the eventfd write sends eight bytes</changelog>
  <changelog author="pmonreal@suse.com" date="1744200000">- Update to 8.13.0:
  * Changes:
  - curl: add write-out variable 'tls_earlydata'
  - curl: make --url support a file with URLs
  - gnutls: set priority via --ciphers
  - IMAP: add CURLOPT_UPLOAD_FLAGS and --upload-flags
  - lib: add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY
  - OpenSSL/quictls: add support for TLSv1.3 early data
  - rustls: add support for CERTINFO
  - rustls: add support for SSLKEYLOGFILE
  - rustls: support ECH w/ DoH lookup for config
  - rustls: support native platform verifier
  - var: add a '64dec' function that can base64 decode a string
  * Bugfixes:
  - conn: fix connection reuse when SSL is optional
  - hash: use single linked list for entries
  - http2: detect session being closed on ingress handling
  - http2: reset stream on response header error
  - http: remove a HTTP method size restriction
  - http: version negotiation
  - httpsrr: fix port detection
  - libssh: fix freeing of resources in disconnect
  - libssh: fix scp large file upload for 32-bit size_t systems
  - openssl-quic: do not iterate over multi handles
  - openssl: check return value of X509_get0_pubkey
  - openssl: drop support for old OpenSSL/LibreSSL versions
  - openssl: fix crash on missing cert password
  - openssl: fix pkcs11 URI checking for key files.
  - openssl: remove bad `goto`s into other scope
  - setopt: illegal CURLOPT_SOCKS5_AUTH should return error
  - setopt: setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine
  - sshserver.pl: adjust `AuthorizedKeysFile2` cutoff version
  - sshserver: fix excluding obsolete client config lines
  - SSLCERTS: list support for SSL_CERT_FILE and SSL_CERT_DIR
  - tftpd: prefix TFTP protocol error `E*` constants with `TFTP_`
  - tool_operate: fail SSH transfers without server auth
  - url: call protocol handler's disconnect in Curl_conn_free
  - urlapi: remove percent encoded dot sequences from the URL path
  - urldata: remove 'hostname' from struct Curl_async
  * Rebase patches:
  - libcurl-ocloexec.patch
  - curl-secure-getenv.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1744372800">- fix Leap build add curl-8.13.0-CloseSocket.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1748433600">- Update to 8.14.0:
  * Security fixes:
  - [CVE-2025-4947, bsc#1243397] QUIC certificate check skip with wolfSSL
  - [CVE-2025-5025, bsc#1243706] No QUIC certificate pinning with wolfSSL
  * Changes:
  - mqtt: send ping at upkeep interval
  - schannel: handle pkcs12 client certificates containing CA certificates
  - TLS: add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: import v2025.04.20 script + docs
  - websocket: add option to disable auto-pong reply
  * Bugfixes:
  - asny-thrdd: fix detach from running thread
  - async-threaded resolver: use ref counter
  - async: DoH improvements
  - build: enable gcc-12/13+, clang-10+ picky warnings
  - build: enable gcc-15 picky warnings
  - certs: drop unused `default_bits` from `.prm` files
  - cf-https-connect: use the passed in dns struct pointer
  - cf-socket: fix FTP accept connect
  - cfilters: remove assert
  - cmake: fix nghttp3 static linking with `USE_OPENSSL_QUIC=ON`
  - cmake: prefer `COMPILE_OPTIONS` over `CMAKE_C_FLAGS` for custom C options
  - cmake: revert `CURL_LTO` behavior for multi-config generators
  - configure: fix --disable-rt
  - CONTRIBUTE: add project guidelines for AI use
  - cpool/cshutdown: force close connections under pressure
  - curl: fix memory leak when -h is used in config file
  - curl_get_line: handle lines ending on the buffer boundary
  - headers: enforce a max number of response header to accept
  - http: fix HTTP/2 handling of TE request header using "trailers"
  - lib: include files using known path
  - lib: unify conversions to/from hex
  - libssh: add NULL check for Curl_meta_get()
  - libssh: fix memory leak
  - mqtt: use conn/easy meta hash
  - multi: do transfer book keeping using mid
  - multi: init_do(): check result
  - netrc: avoid NULL deref on weird input
  - netrc: avoid strdup NULL
  - netrc: deal with null token better
  - openssl-quic: avoid potential `-Wnull-dereference`, add assert
  - openssl-quic: fix shutdown when stream not open
  - openssl: enable builds for *both* engines and providers
  - openssl: set the cipher string before doing private cert
  - progress: avoid integer overflow when gathering total transfer size
  - rand: update comment on Curl_rand_bytes weak random
  - rustls: make max size of cert and key reasonable
  - smb: avoid integer overflow on weird input date
  - urlapi: redirecting to "" is considered fine
  * Remove curl-8.13.0-CloseSocket.patch upstream
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1749038400">- Update to 8.14.1:
  * Security fixes:
  - [bsc#1243933, CVE-2025-5399] libcurl can possibly get
    trapped in an endless busy-loop when processing specially
    crafted packets [d1145df2]
  * Bugfixes:
  - asyn-thrdd: fix cleanup when RR fails due to OOM
  - ftp: fix teardown of DATA connection in done
  - http: fail early when rewind of input failed when following redirects
  - multi: fix add_handle resizing
  - tls BIOs: handle BIO_CTRL_EOF correctly
  - tool_getparam: make --no-anyauth not be accepted
  - wolfssl: fix sending of early data
  - ws: handle blocked sends better
  - ws: tests and fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1749643200">- Update to 8.14.1: [jsc#PED-13055, jsc#PED-13056]
  * Add _multibuild
  * Remove patches fixed in the update:
  - curl-CVE-2024-11053.patch
  - curl-CVE-2024-2004.patch
  - curl-CVE-2024-2379.patch
  - curl-CVE-2024-2398.patch
  - curl-CVE-2024-2466.patch
  - curl-CVE-2024-6197.patch
  - curl-CVE-2024-7264.patch
  - curl-CVE-2024-8096.patch
  - curl-CVE-2024-9681.patch
  - curl-CVE-2025-0167.patch
  - curl-CVE-2025-0725.patch
  - curl-aws_sigv4-url-encode-the-canonical-path.patch
  - curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
</package>
<package pkgid="075632ebe8c90e3b7008fc20825a498166a6a3e9123ebd0a7f98aaaa19e167b3" name="libcurl4-32bit" arch="x86_64">
  <version epoch="0" ver="8.14.1" rel="150700.7.11.1"/>
  <changelog author="bjorn.bidar@thaodan.de" date="1731499200">- Add patch to fix libcurl when netrc parsing is enabled.
  curl_easy_duphandle did not init netrc which broke applications such
  as for example git. gh#curl/curl#15496
  * 0001-duphandle-also-init-netrc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733227200">- Security fix: [bsc#1234068, CVE-2024-11053]
  * curl could leak the password used for the first host to the
    followed-to host under certain circumstances.
  * netrc: address several netrc parser flaws
  * Add curl-CVE-2024-11053.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733918400">- Update to 8.11.1:
  * Security fixes:
  - netrc and redirect credential leak [bsc#1234068, CVE-2024-11053]
  * Bugfixes:
  - build: fix ECH to always enable HTTPS RR
  - cookie: treat cookie name case sensitively
  - curl-rustls.m4: keep existing 'CPPFLAGS'/'LDFLAGS' when detected
  - curl: use realtime in trace timestamps
  - digest: produce a shorter cnonce in Digest headers
  - docs: document default 'User-Agent'
  - docs: suggest --ssl-reqd instead of --ftp-ssl
  - duphandle: also init netrc
  - hostip: don't use the resolver for FQDN localhost
  - http_negotiate: allow for a one byte larger channel binding buffer
  - krb5: fix socket/sockindex confusion, MSVC compiler warnings
  - libssh: use libssh sftp_aio to upload file
  - libssh: when using IPv6 numerical address, add brackets
  - mime: fix reader stall on small read lengths
  - mk-ca-bundle: remove CKA_NSS_SERVER_DISTRUST_AFTER conditions
  - mprintf: fix the integer overflow checks
  - multi: fix callback for 'CURLMOPT_TIMERFUNCTION' not being called again when...
  - netrc: address several netrc parser flaws
  - netrc: support large file, longer lines, longer tokens
  - nghttp2: use custom memory functions
  - OpenSSL: improvde error message on expired certificate
  - openssl: remove three "Useless Assignments"
  - openssl: stop using SSL_CTX_ function prefix for our functions
  - pytest: add test for use of CURLMOPT_MAX_HOST_CONNECTIONS
  - rtsp: check EOS in the RTSP receive and return an error code
  - schannel: remove TLS 1.3 ciphersuite-list support
  - setopt: fix CURLOPT_HTTP_CONTENT_DECODING
  - setopt: fix missing options for builds without HTTP &amp; MQTT
  - socket: handle binding to "host!&lt;ip&gt;"
  - socketpair: fix enabling 'USE_EVENTFD'
  - strtok: use namespaced 'strtok_r' macro instead of redefining it
  * Remove 0001-duphandle-also-init-netrc.patch upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1736251200">- smtp: for starttls, do full upgrade [bsc#1235151]
  * Make sure the TLS handshake after a successful STARTTLS command
    is fully done before further sending/receiving on the connection.
  * Add curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238400">- Security fix: [bsc#1236588, CVE-2025-0167]
  * netrc: 'default' with no credentials is not a match
  * Add curl-CVE-2025-0167.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238401">- Security fix: [bsc#1236590, CVE-2025-0725]
  * content_encoding: drop support for zlib before 1.2.0.4
  * content_encoding: put the decomp buffers into the writer structs
  * Add curl-CVE-2025-0725.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738843200">- Update to 8.12.0:
  * Security fixes:
  - [bsc#1234068, CVE-2024-11053] curl could leak the password used
    for the first host to the followed-to host under certain circumstances.
  - [bsc#1232528, CVE-2024-9681] HSTS subdomain overwrites parent cache entry
  - [bsc#1236589, CVE-2025-0665] eventfd double close
  * Changes:
  - curl: add byte range support to --variable reading from file
  - curl: make --etag-save acknowledge --create-dirs
  - getinfo: fix CURLINFO_QUEUE_TIME_T and add 'time_queue' var
  - getinfo: provide info which auth was used for HTTP and proxy
  - hyper: drop support
  - openssl: add support to use keys and certificates from PKCS#11 provider
  - QUIC: 0RTT for gnutls via CURLSSLOPT_EARLYDATA
  - vtls: feature ssls-export for SSL session im-/export
  * Bugfixes:
  - altsvc: avoid integer overflow in expire calculation
  - asyn-ares: acknowledge CURLOPT_DNS_SERVERS set to NULL
  - asyn-ares: fix memory leak
  - asyn-ares: initial HTTPS resolve support
  - asyn-thread: use c-ares to resolve HTTPS RR
  - async-thread: avoid closing eventfd twice
  - cd2nroff: do not insist on quoted &lt;&gt; within backticks
  - cd2nroff: support "none" as a TLS backend
  - conncache: count shutdowns against host and max limits
  - content_encoding: drop support for zlib before 1.2.0.4
  - content_encoding: namespace GZIP flag constants
  - content_encoding: put the decomp buffers into the writer structs
  - content_encoding: support use of custom libzstd memory functions
  - cookie: cap expire times to 400 days
  - cookie: parse only the exact expire date
  - curl: return error if etag options are used with multiple URLs
  - curl_multi_fdset: include the shutdown connections in the set
  - curl_sha512_256: rename symbols to the curl namespace
  - curl_url_set.md: adjust the added-in to 7.62.0
  - doh: send HTTPS RR requests for all HTTP(S) transfers
  - easy: allow connect-only handle reuse with easy_perform
  - easy: make curl_easy_perform() return error if connection still there
  - easy_lock: use Sleep(1) for thread yield on old Windows
  - ECH: update APIs to those agreed with OpenSSL maintainers
  - GnuTLS: fix 'time_appconnect' for early data
  - HTTP/2: strip TE request header
  - http2: fix data_pending check
  - http2: fix value stored to 'result' is never read
  - http: ignore invalid Retry-After times
  - http_aws_sigv4: Fix invalid compare function handling zero-length pairs
  - https-connect: start next immediately on failure
  - lib: redirect handling by protocol handler
  - multi: fix curl_multi_waitfds reporting of fd_count
  - netrc: 'default' with no credentials is not a match
  - netrc: fix password-only entries
  - netrc: restore _netrc fallback logic
  - ngtcp2: fix memory leak on connect failure
  - openssl: define `HAVE_KEYLOG_CALLBACK` before use
  - openssl: fix ECH logic
  - osslq: use SSL_poll to determine writeability of QUIC streams
  - sectransp: free certificate on error
  - select: avoid a NULL deref in cwfds_add_sock
  - src: omit hugehelp and ca-embed from libcurltool
  - ssl session cache: change cache dimensions
  - system.h: add 64-bit curl_off_t definitions for NonStop
  - telnet: handle single-byte input option
  - TLS: check connection for SSL use, not handler
  - tool_formparse.c: make curlx_uztoso a static in here
  - tool_formparse: accept digits in --form type= strings
  - tool_getparam: ECH param parsing refix
  - tool_getparam: fail --hostpubsha256 if libssh2 is not used
  - tool_getparam: fix "Ignored Return Value"
  - tool_getparam: fix memory leak on error in parse_ech
  - tool_getparam: fix the ECH parser
  - tool_operate: make --etag-compare always accept a non-existing file
  - transfer: fix CURLOPT_CURLU override logic
  - urlapi: fix redirect to a new fragment or query (only)
  - vquic: make vquic_send_packets not return without setting psent
  - vtls: fix default SSL backend as a fallback
  - vtls: only remember the expiry timestamp in session cache
  - websocket: fix message send corruption
  - x509asn1: add parse recursion limit
  * Rebase pathes:
  - libcurl-ocloexec.patch
  - dont-mess-with-rpmoptflags.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739448000">- Update to 8.12.1:
  * Bugfixes:
  - asyn-thread: fix build with 'CURL_DISABLE_SOCKETPAIR'
  - asyn-thread: fix HTTPS RR crash
  - asyn-thread: fix the returned bitmask from Curl_resolver_getsock
  - asyn-thread: survive a c-ares channel set to NULL
  - cmake: always reference OpenSSL and ZLIB via imported targets
  - cmake: respect 'GNUTLS_CFLAGS' when detected via 'pkg-config'
  - cmake: respect 'GNUTLS_LIBRARY_DIRS' in 'libcurl.pc' and 'curl-config'
  - content_encoding: #error on too old zlib
  - imap: TLS upgrade fix
  - ldap: drop support for legacy Novell LDAP SDK
  - libssh2: comparison is always true because rc &lt;= -1
  - libssh2: raise lowest supported version to 1.2.8
  - libssh: drop support for libssh older than 0.9.0
  - openssl-quic: ignore ciphers for h3
  - pop3: TLS upgrade fix
  - runtests: fix the disabling of the memory tracking
  - runtests: quote commands to support paths with spaces
  - scache: add magic checks
  - smb: silence '-Warray-bounds' with gcc 13+
  - smtp: TLS upgrade fix
  - tool_cfgable: sort struct fields by size, use bitfields for booleans
  - tool_getparam: add "TLS required" flag for each such option
  - vtls: fix multissl-init
  - wakeup_write: make sure the eventfd write sends eight bytes</changelog>
  <changelog author="pmonreal@suse.com" date="1744200000">- Update to 8.13.0:
  * Changes:
  - curl: add write-out variable 'tls_earlydata'
  - curl: make --url support a file with URLs
  - gnutls: set priority via --ciphers
  - IMAP: add CURLOPT_UPLOAD_FLAGS and --upload-flags
  - lib: add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY
  - OpenSSL/quictls: add support for TLSv1.3 early data
  - rustls: add support for CERTINFO
  - rustls: add support for SSLKEYLOGFILE
  - rustls: support ECH w/ DoH lookup for config
  - rustls: support native platform verifier
  - var: add a '64dec' function that can base64 decode a string
  * Bugfixes:
  - conn: fix connection reuse when SSL is optional
  - hash: use single linked list for entries
  - http2: detect session being closed on ingress handling
  - http2: reset stream on response header error
  - http: remove a HTTP method size restriction
  - http: version negotiation
  - httpsrr: fix port detection
  - libssh: fix freeing of resources in disconnect
  - libssh: fix scp large file upload for 32-bit size_t systems
  - openssl-quic: do not iterate over multi handles
  - openssl: check return value of X509_get0_pubkey
  - openssl: drop support for old OpenSSL/LibreSSL versions
  - openssl: fix crash on missing cert password
  - openssl: fix pkcs11 URI checking for key files.
  - openssl: remove bad `goto`s into other scope
  - setopt: illegal CURLOPT_SOCKS5_AUTH should return error
  - setopt: setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine
  - sshserver.pl: adjust `AuthorizedKeysFile2` cutoff version
  - sshserver: fix excluding obsolete client config lines
  - SSLCERTS: list support for SSL_CERT_FILE and SSL_CERT_DIR
  - tftpd: prefix TFTP protocol error `E*` constants with `TFTP_`
  - tool_operate: fail SSH transfers without server auth
  - url: call protocol handler's disconnect in Curl_conn_free
  - urlapi: remove percent encoded dot sequences from the URL path
  - urldata: remove 'hostname' from struct Curl_async
  * Rebase patches:
  - libcurl-ocloexec.patch
  - curl-secure-getenv.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1744372800">- fix Leap build add curl-8.13.0-CloseSocket.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1748433600">- Update to 8.14.0:
  * Security fixes:
  - [CVE-2025-4947, bsc#1243397] QUIC certificate check skip with wolfSSL
  - [CVE-2025-5025, bsc#1243706] No QUIC certificate pinning with wolfSSL
  * Changes:
  - mqtt: send ping at upkeep interval
  - schannel: handle pkcs12 client certificates containing CA certificates
  - TLS: add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: import v2025.04.20 script + docs
  - websocket: add option to disable auto-pong reply
  * Bugfixes:
  - asny-thrdd: fix detach from running thread
  - async-threaded resolver: use ref counter
  - async: DoH improvements
  - build: enable gcc-12/13+, clang-10+ picky warnings
  - build: enable gcc-15 picky warnings
  - certs: drop unused `default_bits` from `.prm` files
  - cf-https-connect: use the passed in dns struct pointer
  - cf-socket: fix FTP accept connect
  - cfilters: remove assert
  - cmake: fix nghttp3 static linking with `USE_OPENSSL_QUIC=ON`
  - cmake: prefer `COMPILE_OPTIONS` over `CMAKE_C_FLAGS` for custom C options
  - cmake: revert `CURL_LTO` behavior for multi-config generators
  - configure: fix --disable-rt
  - CONTRIBUTE: add project guidelines for AI use
  - cpool/cshutdown: force close connections under pressure
  - curl: fix memory leak when -h is used in config file
  - curl_get_line: handle lines ending on the buffer boundary
  - headers: enforce a max number of response header to accept
  - http: fix HTTP/2 handling of TE request header using "trailers"
  - lib: include files using known path
  - lib: unify conversions to/from hex
  - libssh: add NULL check for Curl_meta_get()
  - libssh: fix memory leak
  - mqtt: use conn/easy meta hash
  - multi: do transfer book keeping using mid
  - multi: init_do(): check result
  - netrc: avoid NULL deref on weird input
  - netrc: avoid strdup NULL
  - netrc: deal with null token better
  - openssl-quic: avoid potential `-Wnull-dereference`, add assert
  - openssl-quic: fix shutdown when stream not open
  - openssl: enable builds for *both* engines and providers
  - openssl: set the cipher string before doing private cert
  - progress: avoid integer overflow when gathering total transfer size
  - rand: update comment on Curl_rand_bytes weak random
  - rustls: make max size of cert and key reasonable
  - smb: avoid integer overflow on weird input date
  - urlapi: redirecting to "" is considered fine
  * Remove curl-8.13.0-CloseSocket.patch upstream
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1749038400">- Update to 8.14.1:
  * Security fixes:
  - [bsc#1243933, CVE-2025-5399] libcurl can possibly get
    trapped in an endless busy-loop when processing specially
    crafted packets [d1145df2]
  * Bugfixes:
  - asyn-thrdd: fix cleanup when RR fails due to OOM
  - ftp: fix teardown of DATA connection in done
  - http: fail early when rewind of input failed when following redirects
  - multi: fix add_handle resizing
  - tls BIOs: handle BIO_CTRL_EOF correctly
  - tool_getparam: make --no-anyauth not be accepted
  - wolfssl: fix sending of early data
  - ws: handle blocked sends better
  - ws: tests and fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1749643200">- Update to 8.14.1: [jsc#PED-13055, jsc#PED-13056]
  * Add _multibuild
  * Remove patches fixed in the update:
  - curl-CVE-2024-11053.patch
  - curl-CVE-2024-2004.patch
  - curl-CVE-2024-2379.patch
  - curl-CVE-2024-2398.patch
  - curl-CVE-2024-2466.patch
  - curl-CVE-2024-6197.patch
  - curl-CVE-2024-7264.patch
  - curl-CVE-2024-8096.patch
  - curl-CVE-2024-9681.patch
  - curl-CVE-2025-0167.patch
  - curl-CVE-2025-0725.patch
  - curl-aws_sigv4-url-encode-the-canonical-path.patch
  - curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1763553600">- Security fix: [bsc#1253757, CVE-2025-11563]
  * curl: wcurl path traversal with percent-encoded slashes
  * Add curl-CVE-2025-11563.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767355200">- Security fixes:
  * [bsc#1255731, CVE-2025-14524] if redirected, require permission to use bearer
  * [bsc#1255734, CVE-2025-15224] require private key or user-agent for public key auth
  * [bsc#1255732, CVE-2025-14819] toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache
  * [bsc#1255733, CVE-2025-15079] set both knownhosts options to the same file
  * Add patches:
  - curl-CVE-2025-14524.patch
  - curl-CVE-2025-15224.patch
  - curl-CVE-2025-14819.patch
  - curl-CVE-2025-15079.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767787200">- Security fix: [bsc#1256105, CVE-2025-14017]
  * call ldap_init() before setting the options
  * Add patch curl-CVE-2025-14017.patch</changelog>
</package>
<package pkgid="dda7eb042b113e094d111b76d29c280ce63ea46deff82db57d3231c03138bcf1" name="libcurl4-32bit" arch="x86_64">
  <version epoch="0" ver="8.14.1" rel="150700.7.14.1"/>
  <changelog author="pmonreal@suse.com" date="1733227200">- Security fix: [bsc#1234068, CVE-2024-11053]
  * curl could leak the password used for the first host to the
    followed-to host under certain circumstances.
  * netrc: address several netrc parser flaws
  * Add curl-CVE-2024-11053.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733918400">- Update to 8.11.1:
  * Security fixes:
  - netrc and redirect credential leak [bsc#1234068, CVE-2024-11053]
  * Bugfixes:
  - build: fix ECH to always enable HTTPS RR
  - cookie: treat cookie name case sensitively
  - curl-rustls.m4: keep existing 'CPPFLAGS'/'LDFLAGS' when detected
  - curl: use realtime in trace timestamps
  - digest: produce a shorter cnonce in Digest headers
  - docs: document default 'User-Agent'
  - docs: suggest --ssl-reqd instead of --ftp-ssl
  - duphandle: also init netrc
  - hostip: don't use the resolver for FQDN localhost
  - http_negotiate: allow for a one byte larger channel binding buffer
  - krb5: fix socket/sockindex confusion, MSVC compiler warnings
  - libssh: use libssh sftp_aio to upload file
  - libssh: when using IPv6 numerical address, add brackets
  - mime: fix reader stall on small read lengths
  - mk-ca-bundle: remove CKA_NSS_SERVER_DISTRUST_AFTER conditions
  - mprintf: fix the integer overflow checks
  - multi: fix callback for 'CURLMOPT_TIMERFUNCTION' not being called again when...
  - netrc: address several netrc parser flaws
  - netrc: support large file, longer lines, longer tokens
  - nghttp2: use custom memory functions
  - OpenSSL: improvde error message on expired certificate
  - openssl: remove three "Useless Assignments"
  - openssl: stop using SSL_CTX_ function prefix for our functions
  - pytest: add test for use of CURLMOPT_MAX_HOST_CONNECTIONS
  - rtsp: check EOS in the RTSP receive and return an error code
  - schannel: remove TLS 1.3 ciphersuite-list support
  - setopt: fix CURLOPT_HTTP_CONTENT_DECODING
  - setopt: fix missing options for builds without HTTP &amp; MQTT
  - socket: handle binding to "host!&lt;ip&gt;"
  - socketpair: fix enabling 'USE_EVENTFD'
  - strtok: use namespaced 'strtok_r' macro instead of redefining it
  * Remove 0001-duphandle-also-init-netrc.patch upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1736251200">- smtp: for starttls, do full upgrade [bsc#1235151]
  * Make sure the TLS handshake after a successful STARTTLS command
    is fully done before further sending/receiving on the connection.
  * Add curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238400">- Security fix: [bsc#1236588, CVE-2025-0167]
  * netrc: 'default' with no credentials is not a match
  * Add curl-CVE-2025-0167.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238401">- Security fix: [bsc#1236590, CVE-2025-0725]
  * content_encoding: drop support for zlib before 1.2.0.4
  * content_encoding: put the decomp buffers into the writer structs
  * Add curl-CVE-2025-0725.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738843200">- Update to 8.12.0:
  * Security fixes:
  - [bsc#1234068, CVE-2024-11053] curl could leak the password used
    for the first host to the followed-to host under certain circumstances.
  - [bsc#1232528, CVE-2024-9681] HSTS subdomain overwrites parent cache entry
  - [bsc#1236589, CVE-2025-0665] eventfd double close
  * Changes:
  - curl: add byte range support to --variable reading from file
  - curl: make --etag-save acknowledge --create-dirs
  - getinfo: fix CURLINFO_QUEUE_TIME_T and add 'time_queue' var
  - getinfo: provide info which auth was used for HTTP and proxy
  - hyper: drop support
  - openssl: add support to use keys and certificates from PKCS#11 provider
  - QUIC: 0RTT for gnutls via CURLSSLOPT_EARLYDATA
  - vtls: feature ssls-export for SSL session im-/export
  * Bugfixes:
  - altsvc: avoid integer overflow in expire calculation
  - asyn-ares: acknowledge CURLOPT_DNS_SERVERS set to NULL
  - asyn-ares: fix memory leak
  - asyn-ares: initial HTTPS resolve support
  - asyn-thread: use c-ares to resolve HTTPS RR
  - async-thread: avoid closing eventfd twice
  - cd2nroff: do not insist on quoted &lt;&gt; within backticks
  - cd2nroff: support "none" as a TLS backend
  - conncache: count shutdowns against host and max limits
  - content_encoding: drop support for zlib before 1.2.0.4
  - content_encoding: namespace GZIP flag constants
  - content_encoding: put the decomp buffers into the writer structs
  - content_encoding: support use of custom libzstd memory functions
  - cookie: cap expire times to 400 days
  - cookie: parse only the exact expire date
  - curl: return error if etag options are used with multiple URLs
  - curl_multi_fdset: include the shutdown connections in the set
  - curl_sha512_256: rename symbols to the curl namespace
  - curl_url_set.md: adjust the added-in to 7.62.0
  - doh: send HTTPS RR requests for all HTTP(S) transfers
  - easy: allow connect-only handle reuse with easy_perform
  - easy: make curl_easy_perform() return error if connection still there
  - easy_lock: use Sleep(1) for thread yield on old Windows
  - ECH: update APIs to those agreed with OpenSSL maintainers
  - GnuTLS: fix 'time_appconnect' for early data
  - HTTP/2: strip TE request header
  - http2: fix data_pending check
  - http2: fix value stored to 'result' is never read
  - http: ignore invalid Retry-After times
  - http_aws_sigv4: Fix invalid compare function handling zero-length pairs
  - https-connect: start next immediately on failure
  - lib: redirect handling by protocol handler
  - multi: fix curl_multi_waitfds reporting of fd_count
  - netrc: 'default' with no credentials is not a match
  - netrc: fix password-only entries
  - netrc: restore _netrc fallback logic
  - ngtcp2: fix memory leak on connect failure
  - openssl: define `HAVE_KEYLOG_CALLBACK` before use
  - openssl: fix ECH logic
  - osslq: use SSL_poll to determine writeability of QUIC streams
  - sectransp: free certificate on error
  - select: avoid a NULL deref in cwfds_add_sock
  - src: omit hugehelp and ca-embed from libcurltool
  - ssl session cache: change cache dimensions
  - system.h: add 64-bit curl_off_t definitions for NonStop
  - telnet: handle single-byte input option
  - TLS: check connection for SSL use, not handler
  - tool_formparse.c: make curlx_uztoso a static in here
  - tool_formparse: accept digits in --form type= strings
  - tool_getparam: ECH param parsing refix
  - tool_getparam: fail --hostpubsha256 if libssh2 is not used
  - tool_getparam: fix "Ignored Return Value"
  - tool_getparam: fix memory leak on error in parse_ech
  - tool_getparam: fix the ECH parser
  - tool_operate: make --etag-compare always accept a non-existing file
  - transfer: fix CURLOPT_CURLU override logic
  - urlapi: fix redirect to a new fragment or query (only)
  - vquic: make vquic_send_packets not return without setting psent
  - vtls: fix default SSL backend as a fallback
  - vtls: only remember the expiry timestamp in session cache
  - websocket: fix message send corruption
  - x509asn1: add parse recursion limit
  * Rebase pathes:
  - libcurl-ocloexec.patch
  - dont-mess-with-rpmoptflags.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739448000">- Update to 8.12.1:
  * Bugfixes:
  - asyn-thread: fix build with 'CURL_DISABLE_SOCKETPAIR'
  - asyn-thread: fix HTTPS RR crash
  - asyn-thread: fix the returned bitmask from Curl_resolver_getsock
  - asyn-thread: survive a c-ares channel set to NULL
  - cmake: always reference OpenSSL and ZLIB via imported targets
  - cmake: respect 'GNUTLS_CFLAGS' when detected via 'pkg-config'
  - cmake: respect 'GNUTLS_LIBRARY_DIRS' in 'libcurl.pc' and 'curl-config'
  - content_encoding: #error on too old zlib
  - imap: TLS upgrade fix
  - ldap: drop support for legacy Novell LDAP SDK
  - libssh2: comparison is always true because rc &lt;= -1
  - libssh2: raise lowest supported version to 1.2.8
  - libssh: drop support for libssh older than 0.9.0
  - openssl-quic: ignore ciphers for h3
  - pop3: TLS upgrade fix
  - runtests: fix the disabling of the memory tracking
  - runtests: quote commands to support paths with spaces
  - scache: add magic checks
  - smb: silence '-Warray-bounds' with gcc 13+
  - smtp: TLS upgrade fix
  - tool_cfgable: sort struct fields by size, use bitfields for booleans
  - tool_getparam: add "TLS required" flag for each such option
  - vtls: fix multissl-init
  - wakeup_write: make sure the eventfd write sends eight bytes</changelog>
  <changelog author="pmonreal@suse.com" date="1744200000">- Update to 8.13.0:
  * Changes:
  - curl: add write-out variable 'tls_earlydata'
  - curl: make --url support a file with URLs
  - gnutls: set priority via --ciphers
  - IMAP: add CURLOPT_UPLOAD_FLAGS and --upload-flags
  - lib: add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY
  - OpenSSL/quictls: add support for TLSv1.3 early data
  - rustls: add support for CERTINFO
  - rustls: add support for SSLKEYLOGFILE
  - rustls: support ECH w/ DoH lookup for config
  - rustls: support native platform verifier
  - var: add a '64dec' function that can base64 decode a string
  * Bugfixes:
  - conn: fix connection reuse when SSL is optional
  - hash: use single linked list for entries
  - http2: detect session being closed on ingress handling
  - http2: reset stream on response header error
  - http: remove a HTTP method size restriction
  - http: version negotiation
  - httpsrr: fix port detection
  - libssh: fix freeing of resources in disconnect
  - libssh: fix scp large file upload for 32-bit size_t systems
  - openssl-quic: do not iterate over multi handles
  - openssl: check return value of X509_get0_pubkey
  - openssl: drop support for old OpenSSL/LibreSSL versions
  - openssl: fix crash on missing cert password
  - openssl: fix pkcs11 URI checking for key files.
  - openssl: remove bad `goto`s into other scope
  - setopt: illegal CURLOPT_SOCKS5_AUTH should return error
  - setopt: setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine
  - sshserver.pl: adjust `AuthorizedKeysFile2` cutoff version
  - sshserver: fix excluding obsolete client config lines
  - SSLCERTS: list support for SSL_CERT_FILE and SSL_CERT_DIR
  - tftpd: prefix TFTP protocol error `E*` constants with `TFTP_`
  - tool_operate: fail SSH transfers without server auth
  - url: call protocol handler's disconnect in Curl_conn_free
  - urlapi: remove percent encoded dot sequences from the URL path
  - urldata: remove 'hostname' from struct Curl_async
  * Rebase patches:
  - libcurl-ocloexec.patch
  - curl-secure-getenv.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1744372800">- fix Leap build add curl-8.13.0-CloseSocket.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1748433600">- Update to 8.14.0:
  * Security fixes:
  - [CVE-2025-4947, bsc#1243397] QUIC certificate check skip with wolfSSL
  - [CVE-2025-5025, bsc#1243706] No QUIC certificate pinning with wolfSSL
  * Changes:
  - mqtt: send ping at upkeep interval
  - schannel: handle pkcs12 client certificates containing CA certificates
  - TLS: add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: import v2025.04.20 script + docs
  - websocket: add option to disable auto-pong reply
  * Bugfixes:
  - asny-thrdd: fix detach from running thread
  - async-threaded resolver: use ref counter
  - async: DoH improvements
  - build: enable gcc-12/13+, clang-10+ picky warnings
  - build: enable gcc-15 picky warnings
  - certs: drop unused `default_bits` from `.prm` files
  - cf-https-connect: use the passed in dns struct pointer
  - cf-socket: fix FTP accept connect
  - cfilters: remove assert
  - cmake: fix nghttp3 static linking with `USE_OPENSSL_QUIC=ON`
  - cmake: prefer `COMPILE_OPTIONS` over `CMAKE_C_FLAGS` for custom C options
  - cmake: revert `CURL_LTO` behavior for multi-config generators
  - configure: fix --disable-rt
  - CONTRIBUTE: add project guidelines for AI use
  - cpool/cshutdown: force close connections under pressure
  - curl: fix memory leak when -h is used in config file
  - curl_get_line: handle lines ending on the buffer boundary
  - headers: enforce a max number of response header to accept
  - http: fix HTTP/2 handling of TE request header using "trailers"
  - lib: include files using known path
  - lib: unify conversions to/from hex
  - libssh: add NULL check for Curl_meta_get()
  - libssh: fix memory leak
  - mqtt: use conn/easy meta hash
  - multi: do transfer book keeping using mid
  - multi: init_do(): check result
  - netrc: avoid NULL deref on weird input
  - netrc: avoid strdup NULL
  - netrc: deal with null token better
  - openssl-quic: avoid potential `-Wnull-dereference`, add assert
  - openssl-quic: fix shutdown when stream not open
  - openssl: enable builds for *both* engines and providers
  - openssl: set the cipher string before doing private cert
  - progress: avoid integer overflow when gathering total transfer size
  - rand: update comment on Curl_rand_bytes weak random
  - rustls: make max size of cert and key reasonable
  - smb: avoid integer overflow on weird input date
  - urlapi: redirecting to "" is considered fine
  * Remove curl-8.13.0-CloseSocket.patch upstream
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1749038400">- Update to 8.14.1:
  * Security fixes:
  - [bsc#1243933, CVE-2025-5399] libcurl can possibly get
    trapped in an endless busy-loop when processing specially
    crafted packets [d1145df2]
  * Bugfixes:
  - asyn-thrdd: fix cleanup when RR fails due to OOM
  - ftp: fix teardown of DATA connection in done
  - http: fail early when rewind of input failed when following redirects
  - multi: fix add_handle resizing
  - tls BIOs: handle BIO_CTRL_EOF correctly
  - tool_getparam: make --no-anyauth not be accepted
  - wolfssl: fix sending of early data
  - ws: handle blocked sends better
  - ws: tests and fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1749643200">- Update to 8.14.1: [jsc#PED-13055, jsc#PED-13056]
  * Add _multibuild
  * Remove patches fixed in the update:
  - curl-CVE-2024-11053.patch
  - curl-CVE-2024-2004.patch
  - curl-CVE-2024-2379.patch
  - curl-CVE-2024-2398.patch
  - curl-CVE-2024-2466.patch
  - curl-CVE-2024-6197.patch
  - curl-CVE-2024-7264.patch
  - curl-CVE-2024-8096.patch
  - curl-CVE-2024-9681.patch
  - curl-CVE-2025-0167.patch
  - curl-CVE-2025-0725.patch
  - curl-aws_sigv4-url-encode-the-canonical-path.patch
  - curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1763553600">- Security fix: [bsc#1253757, CVE-2025-11563]
  * curl: wcurl path traversal with percent-encoded slashes
  * Add curl-CVE-2025-11563.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767355200">- Security fixes:
  * [bsc#1255731, CVE-2025-14524] if redirected, require permission to use bearer
  * [bsc#1255734, CVE-2025-15224] require private key or user-agent for public key auth
  * [bsc#1255732, CVE-2025-14819] toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache
  * [bsc#1255733, CVE-2025-15079] set both knownhosts options to the same file
  * Add patches:
  - curl-CVE-2025-14524.patch
  - curl-CVE-2025-15224.patch
  - curl-CVE-2025-14819.patch
  - curl-CVE-2025-15079.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767787200">- Security fix: [bsc#1256105, CVE-2025-14017]
  * call ldap_init() before setting the options
  * Add patch curl-CVE-2025-14017.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1773057600">- Security fixes:
  * CVE-2026-1965: Bad reuse of HTTP Negotiate connection (bsc#1259362)
  * CVE-2026-3783: Token leak with redirect and netrc (bsc#1259363)
  * CVE-2026-3784: Wrong proxy connection reuse with credentials (bsc#1259364)
  * CVE-2026-3805: Use after free in SMB connection reuse (bsc#1259365)
  * Add patches:
  - curl-CVE-2026-1965.patch
  - curl-CVE-2026-3783.patch
  - curl-CVE-2026-3784.patch
  - curl-CVE-2026-3805.patch</changelog>
</package>
<package pkgid="02d7fd24eabb93ee346c2e5aa83f6cf8dbc0d660ea358bf05a33ad84729a8e37" name="libcurl4-32bit" arch="x86_64">
  <version epoch="0" ver="8.14.1" rel="150700.7.2.1"/>
  <changelog author="pmonreal@suse.com" date="1727179200">- Update to 8.10.1:
  * Bugfixes:
  - autotools: fix `--with-ca-embed` build rule
  - cmake: ensure `CURL_USE_OPENSSL`/`USE_OPENSSL_QUIC` are set in sync
  - cmake: fix MSH3 to appear on the feature list
  - connect: store connection info when really done
  - FTP: partly revert eeb7c1280742f5c8fa48a4340fc1e1a1a2c7075a
  - http2: when uploading data from stdin, fix eos forwarding
  - http: make max-filesize check not count ignored bodies
  - lib: fix AF_INET6 use outside of USE_IPV6
  - multi: check that the multi handle is valid in curl_multi_assign
  - QUIC: on connect, keep on trying on draining server
  - request: correctly reset the eos_sent flag
  - setopt: remove superfluous use of ternary expressions
  - singleuse: drop `Curl_memrchr()` for no-HTTP builds
  - tool_cb_wrt: use "curl_response" if no file name in URL
  - transfer: fix sendrecv() without interim poll
  - vtls: fix `Curl_ssl_conn_config_match` doc param</changelog>
  <changelog author="pmonreal@suse.com" date="1730289600">- Security fix: [bsc#1232528, CVE-2024-9681]
  * HSTS subdomain overwrites parent cache entry
  * Add curl-CVE-2024-9681.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730894400">- Update to 8.11.0:
  * Security fixes: [bsc#1232528, CVE-2024-9681]
  - curl: HSTS subdomain overwrites parent cache entry
  * Changes:
  - curl: --create-dirs works for --dump-header as well
  - gtls: Add P12 format support
  - ipfs: add options to disable
  - TLS: TLSv1.3 earlydata support for curl
  - WebSockets: make support official (non-experimental)
  * Bugfixes:
  - build: clarify CA embed is for curl tool, mark default, improve summary
  - build: show if CA bundle to embed was found
  - build: tidy up and improve versioned-symbols options
  - cmake/FindNGTCP2: use library path as hint for finding crypto module
  - cmake: disable default OpenSSL if BearSSL, GnuTLS or Rustls is enabled
  - cmake: rename LDAP dependency config variables to match Find modules
  - cmake: replace 'check_include_file_concat()' for LDAP and GSS detection
  - cmake: use OpenSSL for LDAP detection only if available
  - curl: add build options for safe/no CA bundle search (Windows)
  - curl: detect ECH support dynamically, not at build time
  - curl_addrinfo: support operating systems with only getaddrinfo(3)
  - ftp: fix 0-length last write on upload from stdin
  - gnutls: use session cache for QUIC
  - hsts: improve subdomain handling
  - hsts: support "implied LWS" properly around max-age
  - http2: auto reset stream on server eos
  - json.md: cli-option '--json' is an alias of '--data-binary'
  - lib: move curl_path.[ch] into vssh/
  - lib: remove function pointer typecasts for hmac/sha256/md5
  - libssh.c: handle EGAINS during proto-connect correctly
  - libssh2: use the filename buffer when getting the homedir
  - multi.c: warn/assert on stall only without timer
  - negotiate: conditional check around GSS &amp; SSL specific code
  - netrc: cache the netrc file in memory
  - ngtcp2: do not loop on recv
  - ngtcp2: set max window size to 10x of initial (128KB)
  - openssl quic: populate x509 store before handshake
  - openssl: extend the OpenSSL error messages
  - openssl: improve retries on shutdown
  - quic: use send/recvmmsg when available
  - schannel: fix TLS cert verification by IP SAN
  - schannel: ignore error on recv beyond close notify
  - select: use poll() if existing, avoid poll() with no sockets
  - sendf: add condition to max-filesize check
  - server/mqttd: fix two memory leaks
  - setopt: return error for bad input to CURLOPT_RTSP_REQUEST
  - setopt_cptr: make overflow check only done when needed
  - tls: avoid abusing CURLE_SSL_ENGINE_INITFAILED
  - tool: support --show-headers AND --remote-header-name
  - tool_operate: make --skip-existing work for --parallel
  - url: connection reuse on h3 connections
  - url: use same credentials on redirect
  - urlapi: normalize the IPv6 address
  - version: say quictls in MSH3 builds
  - vquic: fix compiler warning with gcc + MUSL
  - vquic: recv_mmsg, use fewer, but larger buffers
  - vtls: convert Curl_pin_peer_pubkey to use dynbuf
  - vtls: convert pubkey_pem_to_der to use dynbuf
  * Rebase curl-secure-getenv.patch</changelog>
  <changelog author="bjorn.bidar@thaodan.de" date="1731499200">- Add patch to fix libcurl when netrc parsing is enabled.
  curl_easy_duphandle did not init netrc which broke applications such
  as for example git. gh#curl/curl#15496
  * 0001-duphandle-also-init-netrc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733227200">- Security fix: [bsc#1234068, CVE-2024-11053]
  * curl could leak the password used for the first host to the
    followed-to host under certain circumstances.
  * netrc: address several netrc parser flaws
  * Add curl-CVE-2024-11053.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733918400">- Update to 8.11.1:
  * Security fixes:
  - netrc and redirect credential leak [bsc#1234068, CVE-2024-11053]
  * Bugfixes:
  - build: fix ECH to always enable HTTPS RR
  - cookie: treat cookie name case sensitively
  - curl-rustls.m4: keep existing 'CPPFLAGS'/'LDFLAGS' when detected
  - curl: use realtime in trace timestamps
  - digest: produce a shorter cnonce in Digest headers
  - docs: document default 'User-Agent'
  - docs: suggest --ssl-reqd instead of --ftp-ssl
  - duphandle: also init netrc
  - hostip: don't use the resolver for FQDN localhost
  - http_negotiate: allow for a one byte larger channel binding buffer
  - krb5: fix socket/sockindex confusion, MSVC compiler warnings
  - libssh: use libssh sftp_aio to upload file
  - libssh: when using IPv6 numerical address, add brackets
  - mime: fix reader stall on small read lengths
  - mk-ca-bundle: remove CKA_NSS_SERVER_DISTRUST_AFTER conditions
  - mprintf: fix the integer overflow checks
  - multi: fix callback for 'CURLMOPT_TIMERFUNCTION' not being called again when...
  - netrc: address several netrc parser flaws
  - netrc: support large file, longer lines, longer tokens
  - nghttp2: use custom memory functions
  - OpenSSL: improvde error message on expired certificate
  - openssl: remove three "Useless Assignments"
  - openssl: stop using SSL_CTX_ function prefix for our functions
  - pytest: add test for use of CURLMOPT_MAX_HOST_CONNECTIONS
  - rtsp: check EOS in the RTSP receive and return an error code
  - schannel: remove TLS 1.3 ciphersuite-list support
  - setopt: fix CURLOPT_HTTP_CONTENT_DECODING
  - setopt: fix missing options for builds without HTTP &amp; MQTT
  - socket: handle binding to "host!&lt;ip&gt;"
  - socketpair: fix enabling 'USE_EVENTFD'
  - strtok: use namespaced 'strtok_r' macro instead of redefining it
  * Remove 0001-duphandle-also-init-netrc.patch upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1736251200">- smtp: for starttls, do full upgrade [bsc#1235151]
  * Make sure the TLS handshake after a successful STARTTLS command
    is fully done before further sending/receiving on the connection.
  * Add curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238400">- Security fix: [bsc#1236588, CVE-2025-0167]
  * netrc: 'default' with no credentials is not a match
  * Add curl-CVE-2025-0167.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238401">- Security fix: [bsc#1236590, CVE-2025-0725]
  * content_encoding: drop support for zlib before 1.2.0.4
  * content_encoding: put the decomp buffers into the writer structs
  * Add curl-CVE-2025-0725.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738843200">- Update to 8.12.0:
  * Security fixes:
  - [bsc#1234068, CVE-2024-11053] curl could leak the password used
    for the first host to the followed-to host under certain circumstances.
  - [bsc#1232528, CVE-2024-9681] HSTS subdomain overwrites parent cache entry
  - [bsc#1236589, CVE-2025-0665] eventfd double close
  * Changes:
  - curl: add byte range support to --variable reading from file
  - curl: make --etag-save acknowledge --create-dirs
  - getinfo: fix CURLINFO_QUEUE_TIME_T and add 'time_queue' var
  - getinfo: provide info which auth was used for HTTP and proxy
  - hyper: drop support
  - openssl: add support to use keys and certificates from PKCS#11 provider
  - QUIC: 0RTT for gnutls via CURLSSLOPT_EARLYDATA
  - vtls: feature ssls-export for SSL session im-/export
  * Bugfixes:
  - altsvc: avoid integer overflow in expire calculation
  - asyn-ares: acknowledge CURLOPT_DNS_SERVERS set to NULL
  - asyn-ares: fix memory leak
  - asyn-ares: initial HTTPS resolve support
  - asyn-thread: use c-ares to resolve HTTPS RR
  - async-thread: avoid closing eventfd twice
  - cd2nroff: do not insist on quoted &lt;&gt; within backticks
  - cd2nroff: support "none" as a TLS backend
  - conncache: count shutdowns against host and max limits
  - content_encoding: drop support for zlib before 1.2.0.4
  - content_encoding: namespace GZIP flag constants
  - content_encoding: put the decomp buffers into the writer structs
  - content_encoding: support use of custom libzstd memory functions
  - cookie: cap expire times to 400 days
  - cookie: parse only the exact expire date
  - curl: return error if etag options are used with multiple URLs
  - curl_multi_fdset: include the shutdown connections in the set
  - curl_sha512_256: rename symbols to the curl namespace
  - curl_url_set.md: adjust the added-in to 7.62.0
  - doh: send HTTPS RR requests for all HTTP(S) transfers
  - easy: allow connect-only handle reuse with easy_perform
  - easy: make curl_easy_perform() return error if connection still there
  - easy_lock: use Sleep(1) for thread yield on old Windows
  - ECH: update APIs to those agreed with OpenSSL maintainers
  - GnuTLS: fix 'time_appconnect' for early data
  - HTTP/2: strip TE request header
  - http2: fix data_pending check
  - http2: fix value stored to 'result' is never read
  - http: ignore invalid Retry-After times
  - http_aws_sigv4: Fix invalid compare function handling zero-length pairs
  - https-connect: start next immediately on failure
  - lib: redirect handling by protocol handler
  - multi: fix curl_multi_waitfds reporting of fd_count
  - netrc: 'default' with no credentials is not a match
  - netrc: fix password-only entries
  - netrc: restore _netrc fallback logic
  - ngtcp2: fix memory leak on connect failure
  - openssl: define `HAVE_KEYLOG_CALLBACK` before use
  - openssl: fix ECH logic
  - osslq: use SSL_poll to determine writeability of QUIC streams
  - sectransp: free certificate on error
  - select: avoid a NULL deref in cwfds_add_sock
  - src: omit hugehelp and ca-embed from libcurltool
  - ssl session cache: change cache dimensions
  - system.h: add 64-bit curl_off_t definitions for NonStop
  - telnet: handle single-byte input option
  - TLS: check connection for SSL use, not handler
  - tool_formparse.c: make curlx_uztoso a static in here
  - tool_formparse: accept digits in --form type= strings
  - tool_getparam: ECH param parsing refix
  - tool_getparam: fail --hostpubsha256 if libssh2 is not used
  - tool_getparam: fix "Ignored Return Value"
  - tool_getparam: fix memory leak on error in parse_ech
  - tool_getparam: fix the ECH parser
  - tool_operate: make --etag-compare always accept a non-existing file
  - transfer: fix CURLOPT_CURLU override logic
  - urlapi: fix redirect to a new fragment or query (only)
  - vquic: make vquic_send_packets not return without setting psent
  - vtls: fix default SSL backend as a fallback
  - vtls: only remember the expiry timestamp in session cache
  - websocket: fix message send corruption
  - x509asn1: add parse recursion limit
  * Rebase pathes:
  - libcurl-ocloexec.patch
  - dont-mess-with-rpmoptflags.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739448000">- Update to 8.12.1:
  * Bugfixes:
  - asyn-thread: fix build with 'CURL_DISABLE_SOCKETPAIR'
  - asyn-thread: fix HTTPS RR crash
  - asyn-thread: fix the returned bitmask from Curl_resolver_getsock
  - asyn-thread: survive a c-ares channel set to NULL
  - cmake: always reference OpenSSL and ZLIB via imported targets
  - cmake: respect 'GNUTLS_CFLAGS' when detected via 'pkg-config'
  - cmake: respect 'GNUTLS_LIBRARY_DIRS' in 'libcurl.pc' and 'curl-config'
  - content_encoding: #error on too old zlib
  - imap: TLS upgrade fix
  - ldap: drop support for legacy Novell LDAP SDK
  - libssh2: comparison is always true because rc &lt;= -1
  - libssh2: raise lowest supported version to 1.2.8
  - libssh: drop support for libssh older than 0.9.0
  - openssl-quic: ignore ciphers for h3
  - pop3: TLS upgrade fix
  - runtests: fix the disabling of the memory tracking
  - runtests: quote commands to support paths with spaces
  - scache: add magic checks
  - smb: silence '-Warray-bounds' with gcc 13+
  - smtp: TLS upgrade fix
  - tool_cfgable: sort struct fields by size, use bitfields for booleans
  - tool_getparam: add "TLS required" flag for each such option
  - vtls: fix multissl-init
  - wakeup_write: make sure the eventfd write sends eight bytes</changelog>
  <changelog author="pmonreal@suse.com" date="1744200000">- Update to 8.13.0:
  * Changes:
  - curl: add write-out variable 'tls_earlydata'
  - curl: make --url support a file with URLs
  - gnutls: set priority via --ciphers
  - IMAP: add CURLOPT_UPLOAD_FLAGS and --upload-flags
  - lib: add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY
  - OpenSSL/quictls: add support for TLSv1.3 early data
  - rustls: add support for CERTINFO
  - rustls: add support for SSLKEYLOGFILE
  - rustls: support ECH w/ DoH lookup for config
  - rustls: support native platform verifier
  - var: add a '64dec' function that can base64 decode a string
  * Bugfixes:
  - conn: fix connection reuse when SSL is optional
  - hash: use single linked list for entries
  - http2: detect session being closed on ingress handling
  - http2: reset stream on response header error
  - http: remove a HTTP method size restriction
  - http: version negotiation
  - httpsrr: fix port detection
  - libssh: fix freeing of resources in disconnect
  - libssh: fix scp large file upload for 32-bit size_t systems
  - openssl-quic: do not iterate over multi handles
  - openssl: check return value of X509_get0_pubkey
  - openssl: drop support for old OpenSSL/LibreSSL versions
  - openssl: fix crash on missing cert password
  - openssl: fix pkcs11 URI checking for key files.
  - openssl: remove bad `goto`s into other scope
  - setopt: illegal CURLOPT_SOCKS5_AUTH should return error
  - setopt: setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine
  - sshserver.pl: adjust `AuthorizedKeysFile2` cutoff version
  - sshserver: fix excluding obsolete client config lines
  - SSLCERTS: list support for SSL_CERT_FILE and SSL_CERT_DIR
  - tftpd: prefix TFTP protocol error `E*` constants with `TFTP_`
  - tool_operate: fail SSH transfers without server auth
  - url: call protocol handler's disconnect in Curl_conn_free
  - urlapi: remove percent encoded dot sequences from the URL path
  - urldata: remove 'hostname' from struct Curl_async
  * Rebase patches:
  - libcurl-ocloexec.patch
  - curl-secure-getenv.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1744372800">- fix Leap build add curl-8.13.0-CloseSocket.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1748433600">- Update to 8.14.0:
  * Security fixes:
  - [CVE-2025-4947, bsc#1243397] QUIC certificate check skip with wolfSSL
  - [CVE-2025-5025, bsc#1243706] No QUIC certificate pinning with wolfSSL
  * Changes:
  - mqtt: send ping at upkeep interval
  - schannel: handle pkcs12 client certificates containing CA certificates
  - TLS: add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: import v2025.04.20 script + docs
  - websocket: add option to disable auto-pong reply
  * Bugfixes:
  - asny-thrdd: fix detach from running thread
  - async-threaded resolver: use ref counter
  - async: DoH improvements
  - build: enable gcc-12/13+, clang-10+ picky warnings
  - build: enable gcc-15 picky warnings
  - certs: drop unused `default_bits` from `.prm` files
  - cf-https-connect: use the passed in dns struct pointer
  - cf-socket: fix FTP accept connect
  - cfilters: remove assert
  - cmake: fix nghttp3 static linking with `USE_OPENSSL_QUIC=ON`
  - cmake: prefer `COMPILE_OPTIONS` over `CMAKE_C_FLAGS` for custom C options
  - cmake: revert `CURL_LTO` behavior for multi-config generators
  - configure: fix --disable-rt
  - CONTRIBUTE: add project guidelines for AI use
  - cpool/cshutdown: force close connections under pressure
  - curl: fix memory leak when -h is used in config file
  - curl_get_line: handle lines ending on the buffer boundary
  - headers: enforce a max number of response header to accept
  - http: fix HTTP/2 handling of TE request header using "trailers"
  - lib: include files using known path
  - lib: unify conversions to/from hex
  - libssh: add NULL check for Curl_meta_get()
  - libssh: fix memory leak
  - mqtt: use conn/easy meta hash
  - multi: do transfer book keeping using mid
  - multi: init_do(): check result
  - netrc: avoid NULL deref on weird input
  - netrc: avoid strdup NULL
  - netrc: deal with null token better
  - openssl-quic: avoid potential `-Wnull-dereference`, add assert
  - openssl-quic: fix shutdown when stream not open
  - openssl: enable builds for *both* engines and providers
  - openssl: set the cipher string before doing private cert
  - progress: avoid integer overflow when gathering total transfer size
  - rand: update comment on Curl_rand_bytes weak random
  - rustls: make max size of cert and key reasonable
  - smb: avoid integer overflow on weird input date
  - urlapi: redirecting to "" is considered fine
  * Remove curl-8.13.0-CloseSocket.patch upstream
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1749038400">- Update to 8.14.1:
  * Security fixes:
  - [bsc#1243933, CVE-2025-5399] libcurl can possibly get
    trapped in an endless busy-loop when processing specially
    crafted packets [d1145df2]
  * Bugfixes:
  - asyn-thrdd: fix cleanup when RR fails due to OOM
  - ftp: fix teardown of DATA connection in done
  - http: fail early when rewind of input failed when following redirects
  - multi: fix add_handle resizing
  - tls BIOs: handle BIO_CTRL_EOF correctly
  - tool_getparam: make --no-anyauth not be accepted
  - wolfssl: fix sending of early data
  - ws: handle blocked sends better
  - ws: tests and fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1749643200">- Update to 8.14.1: [jsc#PED-13055, jsc#PED-13056]
  * Add _multibuild
  * Remove patches fixed in the update:
  - curl-CVE-2024-11053.patch
  - curl-CVE-2024-2004.patch
  - curl-CVE-2024-2379.patch
  - curl-CVE-2024-2398.patch
  - curl-CVE-2024-2466.patch
  - curl-CVE-2024-6197.patch
  - curl-CVE-2024-7264.patch
  - curl-CVE-2024-8096.patch
  - curl-CVE-2024-9681.patch
  - curl-CVE-2025-0167.patch
  - curl-CVE-2025-0725.patch
  - curl-aws_sigv4-url-encode-the-canonical-path.patch
  - curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
</package>
<package pkgid="c18de6532af657746bcbd536cb098ca04cbd34cd2b876d0e153db04079edd884" name="libcurl4-32bit" arch="x86_64">
  <version epoch="0" ver="8.14.1" rel="150700.7.5.1"/>
  <changelog author="pmonreal@suse.com" date="1730289600">- Security fix: [bsc#1232528, CVE-2024-9681]
  * HSTS subdomain overwrites parent cache entry
  * Add curl-CVE-2024-9681.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730894400">- Update to 8.11.0:
  * Security fixes: [bsc#1232528, CVE-2024-9681]
  - curl: HSTS subdomain overwrites parent cache entry
  * Changes:
  - curl: --create-dirs works for --dump-header as well
  - gtls: Add P12 format support
  - ipfs: add options to disable
  - TLS: TLSv1.3 earlydata support for curl
  - WebSockets: make support official (non-experimental)
  * Bugfixes:
  - build: clarify CA embed is for curl tool, mark default, improve summary
  - build: show if CA bundle to embed was found
  - build: tidy up and improve versioned-symbols options
  - cmake/FindNGTCP2: use library path as hint for finding crypto module
  - cmake: disable default OpenSSL if BearSSL, GnuTLS or Rustls is enabled
  - cmake: rename LDAP dependency config variables to match Find modules
  - cmake: replace 'check_include_file_concat()' for LDAP and GSS detection
  - cmake: use OpenSSL for LDAP detection only if available
  - curl: add build options for safe/no CA bundle search (Windows)
  - curl: detect ECH support dynamically, not at build time
  - curl_addrinfo: support operating systems with only getaddrinfo(3)
  - ftp: fix 0-length last write on upload from stdin
  - gnutls: use session cache for QUIC
  - hsts: improve subdomain handling
  - hsts: support "implied LWS" properly around max-age
  - http2: auto reset stream on server eos
  - json.md: cli-option '--json' is an alias of '--data-binary'
  - lib: move curl_path.[ch] into vssh/
  - lib: remove function pointer typecasts for hmac/sha256/md5
  - libssh.c: handle EGAINS during proto-connect correctly
  - libssh2: use the filename buffer when getting the homedir
  - multi.c: warn/assert on stall only without timer
  - negotiate: conditional check around GSS &amp; SSL specific code
  - netrc: cache the netrc file in memory
  - ngtcp2: do not loop on recv
  - ngtcp2: set max window size to 10x of initial (128KB)
  - openssl quic: populate x509 store before handshake
  - openssl: extend the OpenSSL error messages
  - openssl: improve retries on shutdown
  - quic: use send/recvmmsg when available
  - schannel: fix TLS cert verification by IP SAN
  - schannel: ignore error on recv beyond close notify
  - select: use poll() if existing, avoid poll() with no sockets
  - sendf: add condition to max-filesize check
  - server/mqttd: fix two memory leaks
  - setopt: return error for bad input to CURLOPT_RTSP_REQUEST
  - setopt_cptr: make overflow check only done when needed
  - tls: avoid abusing CURLE_SSL_ENGINE_INITFAILED
  - tool: support --show-headers AND --remote-header-name
  - tool_operate: make --skip-existing work for --parallel
  - url: connection reuse on h3 connections
  - url: use same credentials on redirect
  - urlapi: normalize the IPv6 address
  - version: say quictls in MSH3 builds
  - vquic: fix compiler warning with gcc + MUSL
  - vquic: recv_mmsg, use fewer, but larger buffers
  - vtls: convert Curl_pin_peer_pubkey to use dynbuf
  - vtls: convert pubkey_pem_to_der to use dynbuf
  * Rebase curl-secure-getenv.patch</changelog>
  <changelog author="bjorn.bidar@thaodan.de" date="1731499200">- Add patch to fix libcurl when netrc parsing is enabled.
  curl_easy_duphandle did not init netrc which broke applications such
  as for example git. gh#curl/curl#15496
  * 0001-duphandle-also-init-netrc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733227200">- Security fix: [bsc#1234068, CVE-2024-11053]
  * curl could leak the password used for the first host to the
    followed-to host under certain circumstances.
  * netrc: address several netrc parser flaws
  * Add curl-CVE-2024-11053.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733918400">- Update to 8.11.1:
  * Security fixes:
  - netrc and redirect credential leak [bsc#1234068, CVE-2024-11053]
  * Bugfixes:
  - build: fix ECH to always enable HTTPS RR
  - cookie: treat cookie name case sensitively
  - curl-rustls.m4: keep existing 'CPPFLAGS'/'LDFLAGS' when detected
  - curl: use realtime in trace timestamps
  - digest: produce a shorter cnonce in Digest headers
  - docs: document default 'User-Agent'
  - docs: suggest --ssl-reqd instead of --ftp-ssl
  - duphandle: also init netrc
  - hostip: don't use the resolver for FQDN localhost
  - http_negotiate: allow for a one byte larger channel binding buffer
  - krb5: fix socket/sockindex confusion, MSVC compiler warnings
  - libssh: use libssh sftp_aio to upload file
  - libssh: when using IPv6 numerical address, add brackets
  - mime: fix reader stall on small read lengths
  - mk-ca-bundle: remove CKA_NSS_SERVER_DISTRUST_AFTER conditions
  - mprintf: fix the integer overflow checks
  - multi: fix callback for 'CURLMOPT_TIMERFUNCTION' not being called again when...
  - netrc: address several netrc parser flaws
  - netrc: support large file, longer lines, longer tokens
  - nghttp2: use custom memory functions
  - OpenSSL: improvde error message on expired certificate
  - openssl: remove three "Useless Assignments"
  - openssl: stop using SSL_CTX_ function prefix for our functions
  - pytest: add test for use of CURLMOPT_MAX_HOST_CONNECTIONS
  - rtsp: check EOS in the RTSP receive and return an error code
  - schannel: remove TLS 1.3 ciphersuite-list support
  - setopt: fix CURLOPT_HTTP_CONTENT_DECODING
  - setopt: fix missing options for builds without HTTP &amp; MQTT
  - socket: handle binding to "host!&lt;ip&gt;"
  - socketpair: fix enabling 'USE_EVENTFD'
  - strtok: use namespaced 'strtok_r' macro instead of redefining it
  * Remove 0001-duphandle-also-init-netrc.patch upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1736251200">- smtp: for starttls, do full upgrade [bsc#1235151]
  * Make sure the TLS handshake after a successful STARTTLS command
    is fully done before further sending/receiving on the connection.
  * Add curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238400">- Security fix: [bsc#1236588, CVE-2025-0167]
  * netrc: 'default' with no credentials is not a match
  * Add curl-CVE-2025-0167.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238401">- Security fix: [bsc#1236590, CVE-2025-0725]
  * content_encoding: drop support for zlib before 1.2.0.4
  * content_encoding: put the decomp buffers into the writer structs
  * Add curl-CVE-2025-0725.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738843200">- Update to 8.12.0:
  * Security fixes:
  - [bsc#1234068, CVE-2024-11053] curl could leak the password used
    for the first host to the followed-to host under certain circumstances.
  - [bsc#1232528, CVE-2024-9681] HSTS subdomain overwrites parent cache entry
  - [bsc#1236589, CVE-2025-0665] eventfd double close
  * Changes:
  - curl: add byte range support to --variable reading from file
  - curl: make --etag-save acknowledge --create-dirs
  - getinfo: fix CURLINFO_QUEUE_TIME_T and add 'time_queue' var
  - getinfo: provide info which auth was used for HTTP and proxy
  - hyper: drop support
  - openssl: add support to use keys and certificates from PKCS#11 provider
  - QUIC: 0RTT for gnutls via CURLSSLOPT_EARLYDATA
  - vtls: feature ssls-export for SSL session im-/export
  * Bugfixes:
  - altsvc: avoid integer overflow in expire calculation
  - asyn-ares: acknowledge CURLOPT_DNS_SERVERS set to NULL
  - asyn-ares: fix memory leak
  - asyn-ares: initial HTTPS resolve support
  - asyn-thread: use c-ares to resolve HTTPS RR
  - async-thread: avoid closing eventfd twice
  - cd2nroff: do not insist on quoted &lt;&gt; within backticks
  - cd2nroff: support "none" as a TLS backend
  - conncache: count shutdowns against host and max limits
  - content_encoding: drop support for zlib before 1.2.0.4
  - content_encoding: namespace GZIP flag constants
  - content_encoding: put the decomp buffers into the writer structs
  - content_encoding: support use of custom libzstd memory functions
  - cookie: cap expire times to 400 days
  - cookie: parse only the exact expire date
  - curl: return error if etag options are used with multiple URLs
  - curl_multi_fdset: include the shutdown connections in the set
  - curl_sha512_256: rename symbols to the curl namespace
  - curl_url_set.md: adjust the added-in to 7.62.0
  - doh: send HTTPS RR requests for all HTTP(S) transfers
  - easy: allow connect-only handle reuse with easy_perform
  - easy: make curl_easy_perform() return error if connection still there
  - easy_lock: use Sleep(1) for thread yield on old Windows
  - ECH: update APIs to those agreed with OpenSSL maintainers
  - GnuTLS: fix 'time_appconnect' for early data
  - HTTP/2: strip TE request header
  - http2: fix data_pending check
  - http2: fix value stored to 'result' is never read
  - http: ignore invalid Retry-After times
  - http_aws_sigv4: Fix invalid compare function handling zero-length pairs
  - https-connect: start next immediately on failure
  - lib: redirect handling by protocol handler
  - multi: fix curl_multi_waitfds reporting of fd_count
  - netrc: 'default' with no credentials is not a match
  - netrc: fix password-only entries
  - netrc: restore _netrc fallback logic
  - ngtcp2: fix memory leak on connect failure
  - openssl: define `HAVE_KEYLOG_CALLBACK` before use
  - openssl: fix ECH logic
  - osslq: use SSL_poll to determine writeability of QUIC streams
  - sectransp: free certificate on error
  - select: avoid a NULL deref in cwfds_add_sock
  - src: omit hugehelp and ca-embed from libcurltool
  - ssl session cache: change cache dimensions
  - system.h: add 64-bit curl_off_t definitions for NonStop
  - telnet: handle single-byte input option
  - TLS: check connection for SSL use, not handler
  - tool_formparse.c: make curlx_uztoso a static in here
  - tool_formparse: accept digits in --form type= strings
  - tool_getparam: ECH param parsing refix
  - tool_getparam: fail --hostpubsha256 if libssh2 is not used
  - tool_getparam: fix "Ignored Return Value"
  - tool_getparam: fix memory leak on error in parse_ech
  - tool_getparam: fix the ECH parser
  - tool_operate: make --etag-compare always accept a non-existing file
  - transfer: fix CURLOPT_CURLU override logic
  - urlapi: fix redirect to a new fragment or query (only)
  - vquic: make vquic_send_packets not return without setting psent
  - vtls: fix default SSL backend as a fallback
  - vtls: only remember the expiry timestamp in session cache
  - websocket: fix message send corruption
  - x509asn1: add parse recursion limit
  * Rebase pathes:
  - libcurl-ocloexec.patch
  - dont-mess-with-rpmoptflags.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739448000">- Update to 8.12.1:
  * Bugfixes:
  - asyn-thread: fix build with 'CURL_DISABLE_SOCKETPAIR'
  - asyn-thread: fix HTTPS RR crash
  - asyn-thread: fix the returned bitmask from Curl_resolver_getsock
  - asyn-thread: survive a c-ares channel set to NULL
  - cmake: always reference OpenSSL and ZLIB via imported targets
  - cmake: respect 'GNUTLS_CFLAGS' when detected via 'pkg-config'
  - cmake: respect 'GNUTLS_LIBRARY_DIRS' in 'libcurl.pc' and 'curl-config'
  - content_encoding: #error on too old zlib
  - imap: TLS upgrade fix
  - ldap: drop support for legacy Novell LDAP SDK
  - libssh2: comparison is always true because rc &lt;= -1
  - libssh2: raise lowest supported version to 1.2.8
  - libssh: drop support for libssh older than 0.9.0
  - openssl-quic: ignore ciphers for h3
  - pop3: TLS upgrade fix
  - runtests: fix the disabling of the memory tracking
  - runtests: quote commands to support paths with spaces
  - scache: add magic checks
  - smb: silence '-Warray-bounds' with gcc 13+
  - smtp: TLS upgrade fix
  - tool_cfgable: sort struct fields by size, use bitfields for booleans
  - tool_getparam: add "TLS required" flag for each such option
  - vtls: fix multissl-init
  - wakeup_write: make sure the eventfd write sends eight bytes</changelog>
  <changelog author="pmonreal@suse.com" date="1744200000">- Update to 8.13.0:
  * Changes:
  - curl: add write-out variable 'tls_earlydata'
  - curl: make --url support a file with URLs
  - gnutls: set priority via --ciphers
  - IMAP: add CURLOPT_UPLOAD_FLAGS and --upload-flags
  - lib: add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY
  - OpenSSL/quictls: add support for TLSv1.3 early data
  - rustls: add support for CERTINFO
  - rustls: add support for SSLKEYLOGFILE
  - rustls: support ECH w/ DoH lookup for config
  - rustls: support native platform verifier
  - var: add a '64dec' function that can base64 decode a string
  * Bugfixes:
  - conn: fix connection reuse when SSL is optional
  - hash: use single linked list for entries
  - http2: detect session being closed on ingress handling
  - http2: reset stream on response header error
  - http: remove a HTTP method size restriction
  - http: version negotiation
  - httpsrr: fix port detection
  - libssh: fix freeing of resources in disconnect
  - libssh: fix scp large file upload for 32-bit size_t systems
  - openssl-quic: do not iterate over multi handles
  - openssl: check return value of X509_get0_pubkey
  - openssl: drop support for old OpenSSL/LibreSSL versions
  - openssl: fix crash on missing cert password
  - openssl: fix pkcs11 URI checking for key files.
  - openssl: remove bad `goto`s into other scope
  - setopt: illegal CURLOPT_SOCKS5_AUTH should return error
  - setopt: setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine
  - sshserver.pl: adjust `AuthorizedKeysFile2` cutoff version
  - sshserver: fix excluding obsolete client config lines
  - SSLCERTS: list support for SSL_CERT_FILE and SSL_CERT_DIR
  - tftpd: prefix TFTP protocol error `E*` constants with `TFTP_`
  - tool_operate: fail SSH transfers without server auth
  - url: call protocol handler's disconnect in Curl_conn_free
  - urlapi: remove percent encoded dot sequences from the URL path
  - urldata: remove 'hostname' from struct Curl_async
  * Rebase patches:
  - libcurl-ocloexec.patch
  - curl-secure-getenv.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1744372800">- fix Leap build add curl-8.13.0-CloseSocket.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1748433600">- Update to 8.14.0:
  * Security fixes:
  - [CVE-2025-4947, bsc#1243397] QUIC certificate check skip with wolfSSL
  - [CVE-2025-5025, bsc#1243706] No QUIC certificate pinning with wolfSSL
  * Changes:
  - mqtt: send ping at upkeep interval
  - schannel: handle pkcs12 client certificates containing CA certificates
  - TLS: add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: import v2025.04.20 script + docs
  - websocket: add option to disable auto-pong reply
  * Bugfixes:
  - asny-thrdd: fix detach from running thread
  - async-threaded resolver: use ref counter
  - async: DoH improvements
  - build: enable gcc-12/13+, clang-10+ picky warnings
  - build: enable gcc-15 picky warnings
  - certs: drop unused `default_bits` from `.prm` files
  - cf-https-connect: use the passed in dns struct pointer
  - cf-socket: fix FTP accept connect
  - cfilters: remove assert
  - cmake: fix nghttp3 static linking with `USE_OPENSSL_QUIC=ON`
  - cmake: prefer `COMPILE_OPTIONS` over `CMAKE_C_FLAGS` for custom C options
  - cmake: revert `CURL_LTO` behavior for multi-config generators
  - configure: fix --disable-rt
  - CONTRIBUTE: add project guidelines for AI use
  - cpool/cshutdown: force close connections under pressure
  - curl: fix memory leak when -h is used in config file
  - curl_get_line: handle lines ending on the buffer boundary
  - headers: enforce a max number of response header to accept
  - http: fix HTTP/2 handling of TE request header using "trailers"
  - lib: include files using known path
  - lib: unify conversions to/from hex
  - libssh: add NULL check for Curl_meta_get()
  - libssh: fix memory leak
  - mqtt: use conn/easy meta hash
  - multi: do transfer book keeping using mid
  - multi: init_do(): check result
  - netrc: avoid NULL deref on weird input
  - netrc: avoid strdup NULL
  - netrc: deal with null token better
  - openssl-quic: avoid potential `-Wnull-dereference`, add assert
  - openssl-quic: fix shutdown when stream not open
  - openssl: enable builds for *both* engines and providers
  - openssl: set the cipher string before doing private cert
  - progress: avoid integer overflow when gathering total transfer size
  - rand: update comment on Curl_rand_bytes weak random
  - rustls: make max size of cert and key reasonable
  - smb: avoid integer overflow on weird input date
  - urlapi: redirecting to "" is considered fine
  * Remove curl-8.13.0-CloseSocket.patch upstream
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1749038400">- Update to 8.14.1:
  * Security fixes:
  - [bsc#1243933, CVE-2025-5399] libcurl can possibly get
    trapped in an endless busy-loop when processing specially
    crafted packets [d1145df2]
  * Bugfixes:
  - asyn-thrdd: fix cleanup when RR fails due to OOM
  - ftp: fix teardown of DATA connection in done
  - http: fail early when rewind of input failed when following redirects
  - multi: fix add_handle resizing
  - tls BIOs: handle BIO_CTRL_EOF correctly
  - tool_getparam: make --no-anyauth not be accepted
  - wolfssl: fix sending of early data
  - ws: handle blocked sends better
  - ws: tests and fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1749643200">- Update to 8.14.1: [jsc#PED-13055, jsc#PED-13056]
  * Add _multibuild
  * Remove patches fixed in the update:
  - curl-CVE-2024-11053.patch
  - curl-CVE-2024-2004.patch
  - curl-CVE-2024-2379.patch
  - curl-CVE-2024-2398.patch
  - curl-CVE-2024-2466.patch
  - curl-CVE-2024-6197.patch
  - curl-CVE-2024-7264.patch
  - curl-CVE-2024-8096.patch
  - curl-CVE-2024-9681.patch
  - curl-CVE-2025-0167.patch
  - curl-CVE-2025-0725.patch
  - curl-aws_sigv4-url-encode-the-canonical-path.patch
  - curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1763553600">- Security fix: [bsc#1253757, CVE-2025-11563]
  * curl: wcurl path traversal with percent-encoded slashes
  * Add curl-CVE-2025-11563.patch</changelog>
</package>
<package pkgid="f187015c52a079b2baabff308465bb794659b63dcffd69efc799fbe0ffba524d" name="libcurl4-32bit" arch="x86_64">
  <version epoch="0" ver="8.14.1" rel="150700.7.8.1"/>
  <changelog author="pmonreal@suse.com" date="1730894400">- Update to 8.11.0:
  * Security fixes: [bsc#1232528, CVE-2024-9681]
  - curl: HSTS subdomain overwrites parent cache entry
  * Changes:
  - curl: --create-dirs works for --dump-header as well
  - gtls: Add P12 format support
  - ipfs: add options to disable
  - TLS: TLSv1.3 earlydata support for curl
  - WebSockets: make support official (non-experimental)
  * Bugfixes:
  - build: clarify CA embed is for curl tool, mark default, improve summary
  - build: show if CA bundle to embed was found
  - build: tidy up and improve versioned-symbols options
  - cmake/FindNGTCP2: use library path as hint for finding crypto module
  - cmake: disable default OpenSSL if BearSSL, GnuTLS or Rustls is enabled
  - cmake: rename LDAP dependency config variables to match Find modules
  - cmake: replace 'check_include_file_concat()' for LDAP and GSS detection
  - cmake: use OpenSSL for LDAP detection only if available
  - curl: add build options for safe/no CA bundle search (Windows)
  - curl: detect ECH support dynamically, not at build time
  - curl_addrinfo: support operating systems with only getaddrinfo(3)
  - ftp: fix 0-length last write on upload from stdin
  - gnutls: use session cache for QUIC
  - hsts: improve subdomain handling
  - hsts: support "implied LWS" properly around max-age
  - http2: auto reset stream on server eos
  - json.md: cli-option '--json' is an alias of '--data-binary'
  - lib: move curl_path.[ch] into vssh/
  - lib: remove function pointer typecasts for hmac/sha256/md5
  - libssh.c: handle EGAINS during proto-connect correctly
  - libssh2: use the filename buffer when getting the homedir
  - multi.c: warn/assert on stall only without timer
  - negotiate: conditional check around GSS &amp; SSL specific code
  - netrc: cache the netrc file in memory
  - ngtcp2: do not loop on recv
  - ngtcp2: set max window size to 10x of initial (128KB)
  - openssl quic: populate x509 store before handshake
  - openssl: extend the OpenSSL error messages
  - openssl: improve retries on shutdown
  - quic: use send/recvmmsg when available
  - schannel: fix TLS cert verification by IP SAN
  - schannel: ignore error on recv beyond close notify
  - select: use poll() if existing, avoid poll() with no sockets
  - sendf: add condition to max-filesize check
  - server/mqttd: fix two memory leaks
  - setopt: return error for bad input to CURLOPT_RTSP_REQUEST
  - setopt_cptr: make overflow check only done when needed
  - tls: avoid abusing CURLE_SSL_ENGINE_INITFAILED
  - tool: support --show-headers AND --remote-header-name
  - tool_operate: make --skip-existing work for --parallel
  - url: connection reuse on h3 connections
  - url: use same credentials on redirect
  - urlapi: normalize the IPv6 address
  - version: say quictls in MSH3 builds
  - vquic: fix compiler warning with gcc + MUSL
  - vquic: recv_mmsg, use fewer, but larger buffers
  - vtls: convert Curl_pin_peer_pubkey to use dynbuf
  - vtls: convert pubkey_pem_to_der to use dynbuf
  * Rebase curl-secure-getenv.patch</changelog>
  <changelog author="bjorn.bidar@thaodan.de" date="1731499200">- Add patch to fix libcurl when netrc parsing is enabled.
  curl_easy_duphandle did not init netrc which broke applications such
  as for example git. gh#curl/curl#15496
  * 0001-duphandle-also-init-netrc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733227200">- Security fix: [bsc#1234068, CVE-2024-11053]
  * curl could leak the password used for the first host to the
    followed-to host under certain circumstances.
  * netrc: address several netrc parser flaws
  * Add curl-CVE-2024-11053.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733918400">- Update to 8.11.1:
  * Security fixes:
  - netrc and redirect credential leak [bsc#1234068, CVE-2024-11053]
  * Bugfixes:
  - build: fix ECH to always enable HTTPS RR
  - cookie: treat cookie name case sensitively
  - curl-rustls.m4: keep existing 'CPPFLAGS'/'LDFLAGS' when detected
  - curl: use realtime in trace timestamps
  - digest: produce a shorter cnonce in Digest headers
  - docs: document default 'User-Agent'
  - docs: suggest --ssl-reqd instead of --ftp-ssl
  - duphandle: also init netrc
  - hostip: don't use the resolver for FQDN localhost
  - http_negotiate: allow for a one byte larger channel binding buffer
  - krb5: fix socket/sockindex confusion, MSVC compiler warnings
  - libssh: use libssh sftp_aio to upload file
  - libssh: when using IPv6 numerical address, add brackets
  - mime: fix reader stall on small read lengths
  - mk-ca-bundle: remove CKA_NSS_SERVER_DISTRUST_AFTER conditions
  - mprintf: fix the integer overflow checks
  - multi: fix callback for 'CURLMOPT_TIMERFUNCTION' not being called again when...
  - netrc: address several netrc parser flaws
  - netrc: support large file, longer lines, longer tokens
  - nghttp2: use custom memory functions
  - OpenSSL: improvde error message on expired certificate
  - openssl: remove three "Useless Assignments"
  - openssl: stop using SSL_CTX_ function prefix for our functions
  - pytest: add test for use of CURLMOPT_MAX_HOST_CONNECTIONS
  - rtsp: check EOS in the RTSP receive and return an error code
  - schannel: remove TLS 1.3 ciphersuite-list support
  - setopt: fix CURLOPT_HTTP_CONTENT_DECODING
  - setopt: fix missing options for builds without HTTP &amp; MQTT
  - socket: handle binding to "host!&lt;ip&gt;"
  - socketpair: fix enabling 'USE_EVENTFD'
  - strtok: use namespaced 'strtok_r' macro instead of redefining it
  * Remove 0001-duphandle-also-init-netrc.patch upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1736251200">- smtp: for starttls, do full upgrade [bsc#1235151]
  * Make sure the TLS handshake after a successful STARTTLS command
    is fully done before further sending/receiving on the connection.
  * Add curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238400">- Security fix: [bsc#1236588, CVE-2025-0167]
  * netrc: 'default' with no credentials is not a match
  * Add curl-CVE-2025-0167.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238401">- Security fix: [bsc#1236590, CVE-2025-0725]
  * content_encoding: drop support for zlib before 1.2.0.4
  * content_encoding: put the decomp buffers into the writer structs
  * Add curl-CVE-2025-0725.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738843200">- Update to 8.12.0:
  * Security fixes:
  - [bsc#1234068, CVE-2024-11053] curl could leak the password used
    for the first host to the followed-to host under certain circumstances.
  - [bsc#1232528, CVE-2024-9681] HSTS subdomain overwrites parent cache entry
  - [bsc#1236589, CVE-2025-0665] eventfd double close
  * Changes:
  - curl: add byte range support to --variable reading from file
  - curl: make --etag-save acknowledge --create-dirs
  - getinfo: fix CURLINFO_QUEUE_TIME_T and add 'time_queue' var
  - getinfo: provide info which auth was used for HTTP and proxy
  - hyper: drop support
  - openssl: add support to use keys and certificates from PKCS#11 provider
  - QUIC: 0RTT for gnutls via CURLSSLOPT_EARLYDATA
  - vtls: feature ssls-export for SSL session im-/export
  * Bugfixes:
  - altsvc: avoid integer overflow in expire calculation
  - asyn-ares: acknowledge CURLOPT_DNS_SERVERS set to NULL
  - asyn-ares: fix memory leak
  - asyn-ares: initial HTTPS resolve support
  - asyn-thread: use c-ares to resolve HTTPS RR
  - async-thread: avoid closing eventfd twice
  - cd2nroff: do not insist on quoted &lt;&gt; within backticks
  - cd2nroff: support "none" as a TLS backend
  - conncache: count shutdowns against host and max limits
  - content_encoding: drop support for zlib before 1.2.0.4
  - content_encoding: namespace GZIP flag constants
  - content_encoding: put the decomp buffers into the writer structs
  - content_encoding: support use of custom libzstd memory functions
  - cookie: cap expire times to 400 days
  - cookie: parse only the exact expire date
  - curl: return error if etag options are used with multiple URLs
  - curl_multi_fdset: include the shutdown connections in the set
  - curl_sha512_256: rename symbols to the curl namespace
  - curl_url_set.md: adjust the added-in to 7.62.0
  - doh: send HTTPS RR requests for all HTTP(S) transfers
  - easy: allow connect-only handle reuse with easy_perform
  - easy: make curl_easy_perform() return error if connection still there
  - easy_lock: use Sleep(1) for thread yield on old Windows
  - ECH: update APIs to those agreed with OpenSSL maintainers
  - GnuTLS: fix 'time_appconnect' for early data
  - HTTP/2: strip TE request header
  - http2: fix data_pending check
  - http2: fix value stored to 'result' is never read
  - http: ignore invalid Retry-After times
  - http_aws_sigv4: Fix invalid compare function handling zero-length pairs
  - https-connect: start next immediately on failure
  - lib: redirect handling by protocol handler
  - multi: fix curl_multi_waitfds reporting of fd_count
  - netrc: 'default' with no credentials is not a match
  - netrc: fix password-only entries
  - netrc: restore _netrc fallback logic
  - ngtcp2: fix memory leak on connect failure
  - openssl: define `HAVE_KEYLOG_CALLBACK` before use
  - openssl: fix ECH logic
  - osslq: use SSL_poll to determine writeability of QUIC streams
  - sectransp: free certificate on error
  - select: avoid a NULL deref in cwfds_add_sock
  - src: omit hugehelp and ca-embed from libcurltool
  - ssl session cache: change cache dimensions
  - system.h: add 64-bit curl_off_t definitions for NonStop
  - telnet: handle single-byte input option
  - TLS: check connection for SSL use, not handler
  - tool_formparse.c: make curlx_uztoso a static in here
  - tool_formparse: accept digits in --form type= strings
  - tool_getparam: ECH param parsing refix
  - tool_getparam: fail --hostpubsha256 if libssh2 is not used
  - tool_getparam: fix "Ignored Return Value"
  - tool_getparam: fix memory leak on error in parse_ech
  - tool_getparam: fix the ECH parser
  - tool_operate: make --etag-compare always accept a non-existing file
  - transfer: fix CURLOPT_CURLU override logic
  - urlapi: fix redirect to a new fragment or query (only)
  - vquic: make vquic_send_packets not return without setting psent
  - vtls: fix default SSL backend as a fallback
  - vtls: only remember the expiry timestamp in session cache
  - websocket: fix message send corruption
  - x509asn1: add parse recursion limit
  * Rebase pathes:
  - libcurl-ocloexec.patch
  - dont-mess-with-rpmoptflags.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739448000">- Update to 8.12.1:
  * Bugfixes:
  - asyn-thread: fix build with 'CURL_DISABLE_SOCKETPAIR'
  - asyn-thread: fix HTTPS RR crash
  - asyn-thread: fix the returned bitmask from Curl_resolver_getsock
  - asyn-thread: survive a c-ares channel set to NULL
  - cmake: always reference OpenSSL and ZLIB via imported targets
  - cmake: respect 'GNUTLS_CFLAGS' when detected via 'pkg-config'
  - cmake: respect 'GNUTLS_LIBRARY_DIRS' in 'libcurl.pc' and 'curl-config'
  - content_encoding: #error on too old zlib
  - imap: TLS upgrade fix
  - ldap: drop support for legacy Novell LDAP SDK
  - libssh2: comparison is always true because rc &lt;= -1
  - libssh2: raise lowest supported version to 1.2.8
  - libssh: drop support for libssh older than 0.9.0
  - openssl-quic: ignore ciphers for h3
  - pop3: TLS upgrade fix
  - runtests: fix the disabling of the memory tracking
  - runtests: quote commands to support paths with spaces
  - scache: add magic checks
  - smb: silence '-Warray-bounds' with gcc 13+
  - smtp: TLS upgrade fix
  - tool_cfgable: sort struct fields by size, use bitfields for booleans
  - tool_getparam: add "TLS required" flag for each such option
  - vtls: fix multissl-init
  - wakeup_write: make sure the eventfd write sends eight bytes</changelog>
  <changelog author="pmonreal@suse.com" date="1744200000">- Update to 8.13.0:
  * Changes:
  - curl: add write-out variable 'tls_earlydata'
  - curl: make --url support a file with URLs
  - gnutls: set priority via --ciphers
  - IMAP: add CURLOPT_UPLOAD_FLAGS and --upload-flags
  - lib: add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY
  - OpenSSL/quictls: add support for TLSv1.3 early data
  - rustls: add support for CERTINFO
  - rustls: add support for SSLKEYLOGFILE
  - rustls: support ECH w/ DoH lookup for config
  - rustls: support native platform verifier
  - var: add a '64dec' function that can base64 decode a string
  * Bugfixes:
  - conn: fix connection reuse when SSL is optional
  - hash: use single linked list for entries
  - http2: detect session being closed on ingress handling
  - http2: reset stream on response header error
  - http: remove a HTTP method size restriction
  - http: version negotiation
  - httpsrr: fix port detection
  - libssh: fix freeing of resources in disconnect
  - libssh: fix scp large file upload for 32-bit size_t systems
  - openssl-quic: do not iterate over multi handles
  - openssl: check return value of X509_get0_pubkey
  - openssl: drop support for old OpenSSL/LibreSSL versions
  - openssl: fix crash on missing cert password
  - openssl: fix pkcs11 URI checking for key files.
  - openssl: remove bad `goto`s into other scope
  - setopt: illegal CURLOPT_SOCKS5_AUTH should return error
  - setopt: setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine
  - sshserver.pl: adjust `AuthorizedKeysFile2` cutoff version
  - sshserver: fix excluding obsolete client config lines
  - SSLCERTS: list support for SSL_CERT_FILE and SSL_CERT_DIR
  - tftpd: prefix TFTP protocol error `E*` constants with `TFTP_`
  - tool_operate: fail SSH transfers without server auth
  - url: call protocol handler's disconnect in Curl_conn_free
  - urlapi: remove percent encoded dot sequences from the URL path
  - urldata: remove 'hostname' from struct Curl_async
  * Rebase patches:
  - libcurl-ocloexec.patch
  - curl-secure-getenv.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1744372800">- fix Leap build add curl-8.13.0-CloseSocket.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1748433600">- Update to 8.14.0:
  * Security fixes:
  - [CVE-2025-4947, bsc#1243397] QUIC certificate check skip with wolfSSL
  - [CVE-2025-5025, bsc#1243706] No QUIC certificate pinning with wolfSSL
  * Changes:
  - mqtt: send ping at upkeep interval
  - schannel: handle pkcs12 client certificates containing CA certificates
  - TLS: add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: import v2025.04.20 script + docs
  - websocket: add option to disable auto-pong reply
  * Bugfixes:
  - asny-thrdd: fix detach from running thread
  - async-threaded resolver: use ref counter
  - async: DoH improvements
  - build: enable gcc-12/13+, clang-10+ picky warnings
  - build: enable gcc-15 picky warnings
  - certs: drop unused `default_bits` from `.prm` files
  - cf-https-connect: use the passed in dns struct pointer
  - cf-socket: fix FTP accept connect
  - cfilters: remove assert
  - cmake: fix nghttp3 static linking with `USE_OPENSSL_QUIC=ON`
  - cmake: prefer `COMPILE_OPTIONS` over `CMAKE_C_FLAGS` for custom C options
  - cmake: revert `CURL_LTO` behavior for multi-config generators
  - configure: fix --disable-rt
  - CONTRIBUTE: add project guidelines for AI use
  - cpool/cshutdown: force close connections under pressure
  - curl: fix memory leak when -h is used in config file
  - curl_get_line: handle lines ending on the buffer boundary
  - headers: enforce a max number of response header to accept
  - http: fix HTTP/2 handling of TE request header using "trailers"
  - lib: include files using known path
  - lib: unify conversions to/from hex
  - libssh: add NULL check for Curl_meta_get()
  - libssh: fix memory leak
  - mqtt: use conn/easy meta hash
  - multi: do transfer book keeping using mid
  - multi: init_do(): check result
  - netrc: avoid NULL deref on weird input
  - netrc: avoid strdup NULL
  - netrc: deal with null token better
  - openssl-quic: avoid potential `-Wnull-dereference`, add assert
  - openssl-quic: fix shutdown when stream not open
  - openssl: enable builds for *both* engines and providers
  - openssl: set the cipher string before doing private cert
  - progress: avoid integer overflow when gathering total transfer size
  - rand: update comment on Curl_rand_bytes weak random
  - rustls: make max size of cert and key reasonable
  - smb: avoid integer overflow on weird input date
  - urlapi: redirecting to "" is considered fine
  * Remove curl-8.13.0-CloseSocket.patch upstream
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1749038400">- Update to 8.14.1:
  * Security fixes:
  - [bsc#1243933, CVE-2025-5399] libcurl can possibly get
    trapped in an endless busy-loop when processing specially
    crafted packets [d1145df2]
  * Bugfixes:
  - asyn-thrdd: fix cleanup when RR fails due to OOM
  - ftp: fix teardown of DATA connection in done
  - http: fail early when rewind of input failed when following redirects
  - multi: fix add_handle resizing
  - tls BIOs: handle BIO_CTRL_EOF correctly
  - tool_getparam: make --no-anyauth not be accepted
  - wolfssl: fix sending of early data
  - ws: handle blocked sends better
  - ws: tests and fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1749643200">- Update to 8.14.1: [jsc#PED-13055, jsc#PED-13056]
  * Add _multibuild
  * Remove patches fixed in the update:
  - curl-CVE-2024-11053.patch
  - curl-CVE-2024-2004.patch
  - curl-CVE-2024-2379.patch
  - curl-CVE-2024-2398.patch
  - curl-CVE-2024-2466.patch
  - curl-CVE-2024-6197.patch
  - curl-CVE-2024-7264.patch
  - curl-CVE-2024-8096.patch
  - curl-CVE-2024-9681.patch
  - curl-CVE-2025-0167.patch
  - curl-CVE-2025-0725.patch
  - curl-aws_sigv4-url-encode-the-canonical-path.patch
  - curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1763553600">- Security fix: [bsc#1253757, CVE-2025-11563]
  * curl: wcurl path traversal with percent-encoded slashes
  * Add curl-CVE-2025-11563.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767355200">- Security fixes:
  * [bsc#1255731, CVE-2025-14524] if redirected, require permission to use bearer
  * [bsc#1255734, CVE-2025-15224] require private key or user-agent for public key auth
  * [bsc#1255732, CVE-2025-14819] toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache
  * [bsc#1255733, CVE-2025-15079] set both knownhosts options to the same file
  * Add patches:
  - curl-CVE-2025-14524.patch
  - curl-CVE-2025-15224.patch
  - curl-CVE-2025-14819.patch
  - curl-CVE-2025-15079.patch</changelog>
</package>
<package pkgid="eb99b54db43ae07283c892895543520b39189a9a726bf968e3c396152b7947bf" name="libcurl4" arch="x86_64">
  <version epoch="0" ver="8.14.1" rel="150600.4.28.1"/>
  <changelog author="pmonreal@suse.com" date="1727179200">- Update to 8.10.1:
  * Bugfixes:
  - autotools: fix `--with-ca-embed` build rule
  - cmake: ensure `CURL_USE_OPENSSL`/`USE_OPENSSL_QUIC` are set in sync
  - cmake: fix MSH3 to appear on the feature list
  - connect: store connection info when really done
  - FTP: partly revert eeb7c1280742f5c8fa48a4340fc1e1a1a2c7075a
  - http2: when uploading data from stdin, fix eos forwarding
  - http: make max-filesize check not count ignored bodies
  - lib: fix AF_INET6 use outside of USE_IPV6
  - multi: check that the multi handle is valid in curl_multi_assign
  - QUIC: on connect, keep on trying on draining server
  - request: correctly reset the eos_sent flag
  - setopt: remove superfluous use of ternary expressions
  - singleuse: drop `Curl_memrchr()` for no-HTTP builds
  - tool_cb_wrt: use "curl_response" if no file name in URL
  - transfer: fix sendrecv() without interim poll
  - vtls: fix `Curl_ssl_conn_config_match` doc param</changelog>
  <changelog author="pmonreal@suse.com" date="1730289600">- Security fix: [bsc#1232528, CVE-2024-9681]
  * HSTS subdomain overwrites parent cache entry
  * Add curl-CVE-2024-9681.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730894400">- Update to 8.11.0:
  * Security fixes: [bsc#1232528, CVE-2024-9681]
  - curl: HSTS subdomain overwrites parent cache entry
  * Changes:
  - curl: --create-dirs works for --dump-header as well
  - gtls: Add P12 format support
  - ipfs: add options to disable
  - TLS: TLSv1.3 earlydata support for curl
  - WebSockets: make support official (non-experimental)
  * Bugfixes:
  - build: clarify CA embed is for curl tool, mark default, improve summary
  - build: show if CA bundle to embed was found
  - build: tidy up and improve versioned-symbols options
  - cmake/FindNGTCP2: use library path as hint for finding crypto module
  - cmake: disable default OpenSSL if BearSSL, GnuTLS or Rustls is enabled
  - cmake: rename LDAP dependency config variables to match Find modules
  - cmake: replace 'check_include_file_concat()' for LDAP and GSS detection
  - cmake: use OpenSSL for LDAP detection only if available
  - curl: add build options for safe/no CA bundle search (Windows)
  - curl: detect ECH support dynamically, not at build time
  - curl_addrinfo: support operating systems with only getaddrinfo(3)
  - ftp: fix 0-length last write on upload from stdin
  - gnutls: use session cache for QUIC
  - hsts: improve subdomain handling
  - hsts: support "implied LWS" properly around max-age
  - http2: auto reset stream on server eos
  - json.md: cli-option '--json' is an alias of '--data-binary'
  - lib: move curl_path.[ch] into vssh/
  - lib: remove function pointer typecasts for hmac/sha256/md5
  - libssh.c: handle EGAINS during proto-connect correctly
  - libssh2: use the filename buffer when getting the homedir
  - multi.c: warn/assert on stall only without timer
  - negotiate: conditional check around GSS &amp; SSL specific code
  - netrc: cache the netrc file in memory
  - ngtcp2: do not loop on recv
  - ngtcp2: set max window size to 10x of initial (128KB)
  - openssl quic: populate x509 store before handshake
  - openssl: extend the OpenSSL error messages
  - openssl: improve retries on shutdown
  - quic: use send/recvmmsg when available
  - schannel: fix TLS cert verification by IP SAN
  - schannel: ignore error on recv beyond close notify
  - select: use poll() if existing, avoid poll() with no sockets
  - sendf: add condition to max-filesize check
  - server/mqttd: fix two memory leaks
  - setopt: return error for bad input to CURLOPT_RTSP_REQUEST
  - setopt_cptr: make overflow check only done when needed
  - tls: avoid abusing CURLE_SSL_ENGINE_INITFAILED
  - tool: support --show-headers AND --remote-header-name
  - tool_operate: make --skip-existing work for --parallel
  - url: connection reuse on h3 connections
  - url: use same credentials on redirect
  - urlapi: normalize the IPv6 address
  - version: say quictls in MSH3 builds
  - vquic: fix compiler warning with gcc + MUSL
  - vquic: recv_mmsg, use fewer, but larger buffers
  - vtls: convert Curl_pin_peer_pubkey to use dynbuf
  - vtls: convert pubkey_pem_to_der to use dynbuf
  * Rebase curl-secure-getenv.patch</changelog>
  <changelog author="bjorn.bidar@thaodan.de" date="1731499200">- Add patch to fix libcurl when netrc parsing is enabled.
  curl_easy_duphandle did not init netrc which broke applications such
  as for example git. gh#curl/curl#15496
  * 0001-duphandle-also-init-netrc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733227200">- Security fix: [bsc#1234068, CVE-2024-11053]
  * curl could leak the password used for the first host to the
    followed-to host under certain circumstances.
  * netrc: address several netrc parser flaws
  * Add curl-CVE-2024-11053.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733918400">- Update to 8.11.1:
  * Security fixes:
  - netrc and redirect credential leak [bsc#1234068, CVE-2024-11053]
  * Bugfixes:
  - build: fix ECH to always enable HTTPS RR
  - cookie: treat cookie name case sensitively
  - curl-rustls.m4: keep existing 'CPPFLAGS'/'LDFLAGS' when detected
  - curl: use realtime in trace timestamps
  - digest: produce a shorter cnonce in Digest headers
  - docs: document default 'User-Agent'
  - docs: suggest --ssl-reqd instead of --ftp-ssl
  - duphandle: also init netrc
  - hostip: don't use the resolver for FQDN localhost
  - http_negotiate: allow for a one byte larger channel binding buffer
  - krb5: fix socket/sockindex confusion, MSVC compiler warnings
  - libssh: use libssh sftp_aio to upload file
  - libssh: when using IPv6 numerical address, add brackets
  - mime: fix reader stall on small read lengths
  - mk-ca-bundle: remove CKA_NSS_SERVER_DISTRUST_AFTER conditions
  - mprintf: fix the integer overflow checks
  - multi: fix callback for 'CURLMOPT_TIMERFUNCTION' not being called again when...
  - netrc: address several netrc parser flaws
  - netrc: support large file, longer lines, longer tokens
  - nghttp2: use custom memory functions
  - OpenSSL: improvde error message on expired certificate
  - openssl: remove three "Useless Assignments"
  - openssl: stop using SSL_CTX_ function prefix for our functions
  - pytest: add test for use of CURLMOPT_MAX_HOST_CONNECTIONS
  - rtsp: check EOS in the RTSP receive and return an error code
  - schannel: remove TLS 1.3 ciphersuite-list support
  - setopt: fix CURLOPT_HTTP_CONTENT_DECODING
  - setopt: fix missing options for builds without HTTP &amp; MQTT
  - socket: handle binding to "host!&lt;ip&gt;"
  - socketpair: fix enabling 'USE_EVENTFD'
  - strtok: use namespaced 'strtok_r' macro instead of redefining it
  * Remove 0001-duphandle-also-init-netrc.patch upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1736251200">- smtp: for starttls, do full upgrade [bsc#1235151]
  * Make sure the TLS handshake after a successful STARTTLS command
    is fully done before further sending/receiving on the connection.
  * Add curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238400">- Security fix: [bsc#1236588, CVE-2025-0167]
  * netrc: 'default' with no credentials is not a match
  * Add curl-CVE-2025-0167.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238401">- Security fix: [bsc#1236590, CVE-2025-0725]
  * content_encoding: drop support for zlib before 1.2.0.4
  * content_encoding: put the decomp buffers into the writer structs
  * Add curl-CVE-2025-0725.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738843200">- Update to 8.12.0:
  * Security fixes:
  - [bsc#1234068, CVE-2024-11053] curl could leak the password used
    for the first host to the followed-to host under certain circumstances.
  - [bsc#1232528, CVE-2024-9681] HSTS subdomain overwrites parent cache entry
  - [bsc#1236589, CVE-2025-0665] eventfd double close
  * Changes:
  - curl: add byte range support to --variable reading from file
  - curl: make --etag-save acknowledge --create-dirs
  - getinfo: fix CURLINFO_QUEUE_TIME_T and add 'time_queue' var
  - getinfo: provide info which auth was used for HTTP and proxy
  - hyper: drop support
  - openssl: add support to use keys and certificates from PKCS#11 provider
  - QUIC: 0RTT for gnutls via CURLSSLOPT_EARLYDATA
  - vtls: feature ssls-export for SSL session im-/export
  * Bugfixes:
  - altsvc: avoid integer overflow in expire calculation
  - asyn-ares: acknowledge CURLOPT_DNS_SERVERS set to NULL
  - asyn-ares: fix memory leak
  - asyn-ares: initial HTTPS resolve support
  - asyn-thread: use c-ares to resolve HTTPS RR
  - async-thread: avoid closing eventfd twice
  - cd2nroff: do not insist on quoted &lt;&gt; within backticks
  - cd2nroff: support "none" as a TLS backend
  - conncache: count shutdowns against host and max limits
  - content_encoding: drop support for zlib before 1.2.0.4
  - content_encoding: namespace GZIP flag constants
  - content_encoding: put the decomp buffers into the writer structs
  - content_encoding: support use of custom libzstd memory functions
  - cookie: cap expire times to 400 days
  - cookie: parse only the exact expire date
  - curl: return error if etag options are used with multiple URLs
  - curl_multi_fdset: include the shutdown connections in the set
  - curl_sha512_256: rename symbols to the curl namespace
  - curl_url_set.md: adjust the added-in to 7.62.0
  - doh: send HTTPS RR requests for all HTTP(S) transfers
  - easy: allow connect-only handle reuse with easy_perform
  - easy: make curl_easy_perform() return error if connection still there
  - easy_lock: use Sleep(1) for thread yield on old Windows
  - ECH: update APIs to those agreed with OpenSSL maintainers
  - GnuTLS: fix 'time_appconnect' for early data
  - HTTP/2: strip TE request header
  - http2: fix data_pending check
  - http2: fix value stored to 'result' is never read
  - http: ignore invalid Retry-After times
  - http_aws_sigv4: Fix invalid compare function handling zero-length pairs
  - https-connect: start next immediately on failure
  - lib: redirect handling by protocol handler
  - multi: fix curl_multi_waitfds reporting of fd_count
  - netrc: 'default' with no credentials is not a match
  - netrc: fix password-only entries
  - netrc: restore _netrc fallback logic
  - ngtcp2: fix memory leak on connect failure
  - openssl: define `HAVE_KEYLOG_CALLBACK` before use
  - openssl: fix ECH logic
  - osslq: use SSL_poll to determine writeability of QUIC streams
  - sectransp: free certificate on error
  - select: avoid a NULL deref in cwfds_add_sock
  - src: omit hugehelp and ca-embed from libcurltool
  - ssl session cache: change cache dimensions
  - system.h: add 64-bit curl_off_t definitions for NonStop
  - telnet: handle single-byte input option
  - TLS: check connection for SSL use, not handler
  - tool_formparse.c: make curlx_uztoso a static in here
  - tool_formparse: accept digits in --form type= strings
  - tool_getparam: ECH param parsing refix
  - tool_getparam: fail --hostpubsha256 if libssh2 is not used
  - tool_getparam: fix "Ignored Return Value"
  - tool_getparam: fix memory leak on error in parse_ech
  - tool_getparam: fix the ECH parser
  - tool_operate: make --etag-compare always accept a non-existing file
  - transfer: fix CURLOPT_CURLU override logic
  - urlapi: fix redirect to a new fragment or query (only)
  - vquic: make vquic_send_packets not return without setting psent
  - vtls: fix default SSL backend as a fallback
  - vtls: only remember the expiry timestamp in session cache
  - websocket: fix message send corruption
  - x509asn1: add parse recursion limit
  * Rebase pathes:
  - libcurl-ocloexec.patch
  - dont-mess-with-rpmoptflags.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739448000">- Update to 8.12.1:
  * Bugfixes:
  - asyn-thread: fix build with 'CURL_DISABLE_SOCKETPAIR'
  - asyn-thread: fix HTTPS RR crash
  - asyn-thread: fix the returned bitmask from Curl_resolver_getsock
  - asyn-thread: survive a c-ares channel set to NULL
  - cmake: always reference OpenSSL and ZLIB via imported targets
  - cmake: respect 'GNUTLS_CFLAGS' when detected via 'pkg-config'
  - cmake: respect 'GNUTLS_LIBRARY_DIRS' in 'libcurl.pc' and 'curl-config'
  - content_encoding: #error on too old zlib
  - imap: TLS upgrade fix
  - ldap: drop support for legacy Novell LDAP SDK
  - libssh2: comparison is always true because rc &lt;= -1
  - libssh2: raise lowest supported version to 1.2.8
  - libssh: drop support for libssh older than 0.9.0
  - openssl-quic: ignore ciphers for h3
  - pop3: TLS upgrade fix
  - runtests: fix the disabling of the memory tracking
  - runtests: quote commands to support paths with spaces
  - scache: add magic checks
  - smb: silence '-Warray-bounds' with gcc 13+
  - smtp: TLS upgrade fix
  - tool_cfgable: sort struct fields by size, use bitfields for booleans
  - tool_getparam: add "TLS required" flag for each such option
  - vtls: fix multissl-init
  - wakeup_write: make sure the eventfd write sends eight bytes</changelog>
  <changelog author="pmonreal@suse.com" date="1744200000">- Update to 8.13.0:
  * Changes:
  - curl: add write-out variable 'tls_earlydata'
  - curl: make --url support a file with URLs
  - gnutls: set priority via --ciphers
  - IMAP: add CURLOPT_UPLOAD_FLAGS and --upload-flags
  - lib: add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY
  - OpenSSL/quictls: add support for TLSv1.3 early data
  - rustls: add support for CERTINFO
  - rustls: add support for SSLKEYLOGFILE
  - rustls: support ECH w/ DoH lookup for config
  - rustls: support native platform verifier
  - var: add a '64dec' function that can base64 decode a string
  * Bugfixes:
  - conn: fix connection reuse when SSL is optional
  - hash: use single linked list for entries
  - http2: detect session being closed on ingress handling
  - http2: reset stream on response header error
  - http: remove a HTTP method size restriction
  - http: version negotiation
  - httpsrr: fix port detection
  - libssh: fix freeing of resources in disconnect
  - libssh: fix scp large file upload for 32-bit size_t systems
  - openssl-quic: do not iterate over multi handles
  - openssl: check return value of X509_get0_pubkey
  - openssl: drop support for old OpenSSL/LibreSSL versions
  - openssl: fix crash on missing cert password
  - openssl: fix pkcs11 URI checking for key files.
  - openssl: remove bad `goto`s into other scope
  - setopt: illegal CURLOPT_SOCKS5_AUTH should return error
  - setopt: setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine
  - sshserver.pl: adjust `AuthorizedKeysFile2` cutoff version
  - sshserver: fix excluding obsolete client config lines
  - SSLCERTS: list support for SSL_CERT_FILE and SSL_CERT_DIR
  - tftpd: prefix TFTP protocol error `E*` constants with `TFTP_`
  - tool_operate: fail SSH transfers without server auth
  - url: call protocol handler's disconnect in Curl_conn_free
  - urlapi: remove percent encoded dot sequences from the URL path
  - urldata: remove 'hostname' from struct Curl_async
  * Rebase patches:
  - libcurl-ocloexec.patch
  - curl-secure-getenv.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1744372800">- fix Leap build add curl-8.13.0-CloseSocket.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1748433600">- Update to 8.14.0:
  * Security fixes:
  - [CVE-2025-4947, bsc#1243397] QUIC certificate check skip with wolfSSL
  - [CVE-2025-5025, bsc#1243706] No QUIC certificate pinning with wolfSSL
  * Changes:
  - mqtt: send ping at upkeep interval
  - schannel: handle pkcs12 client certificates containing CA certificates
  - TLS: add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: import v2025.04.20 script + docs
  - websocket: add option to disable auto-pong reply
  * Bugfixes:
  - asny-thrdd: fix detach from running thread
  - async-threaded resolver: use ref counter
  - async: DoH improvements
  - build: enable gcc-12/13+, clang-10+ picky warnings
  - build: enable gcc-15 picky warnings
  - certs: drop unused `default_bits` from `.prm` files
  - cf-https-connect: use the passed in dns struct pointer
  - cf-socket: fix FTP accept connect
  - cfilters: remove assert
  - cmake: fix nghttp3 static linking with `USE_OPENSSL_QUIC=ON`
  - cmake: prefer `COMPILE_OPTIONS` over `CMAKE_C_FLAGS` for custom C options
  - cmake: revert `CURL_LTO` behavior for multi-config generators
  - configure: fix --disable-rt
  - CONTRIBUTE: add project guidelines for AI use
  - cpool/cshutdown: force close connections under pressure
  - curl: fix memory leak when -h is used in config file
  - curl_get_line: handle lines ending on the buffer boundary
  - headers: enforce a max number of response header to accept
  - http: fix HTTP/2 handling of TE request header using "trailers"
  - lib: include files using known path
  - lib: unify conversions to/from hex
  - libssh: add NULL check for Curl_meta_get()
  - libssh: fix memory leak
  - mqtt: use conn/easy meta hash
  - multi: do transfer book keeping using mid
  - multi: init_do(): check result
  - netrc: avoid NULL deref on weird input
  - netrc: avoid strdup NULL
  - netrc: deal with null token better
  - openssl-quic: avoid potential `-Wnull-dereference`, add assert
  - openssl-quic: fix shutdown when stream not open
  - openssl: enable builds for *both* engines and providers
  - openssl: set the cipher string before doing private cert
  - progress: avoid integer overflow when gathering total transfer size
  - rand: update comment on Curl_rand_bytes weak random
  - rustls: make max size of cert and key reasonable
  - smb: avoid integer overflow on weird input date
  - urlapi: redirecting to "" is considered fine
  * Remove curl-8.13.0-CloseSocket.patch upstream
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1749038400">- Update to 8.14.1:
  * Security fixes:
  - [bsc#1243933, CVE-2025-5399] libcurl can possibly get
    trapped in an endless busy-loop when processing specially
    crafted packets [d1145df2]
  * Bugfixes:
  - asyn-thrdd: fix cleanup when RR fails due to OOM
  - ftp: fix teardown of DATA connection in done
  - http: fail early when rewind of input failed when following redirects
  - multi: fix add_handle resizing
  - tls BIOs: handle BIO_CTRL_EOF correctly
  - tool_getparam: make --no-anyauth not be accepted
  - wolfssl: fix sending of early data
  - ws: handle blocked sends better
  - ws: tests and fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1749643200">- Update to 8.14.1: [jsc#PED-13055, jsc#PED-13056]
  * Add _multibuild
  * Remove patches fixed in the update:
  - curl-CVE-2024-11053.patch
  - curl-CVE-2024-2004.patch
  - curl-CVE-2024-2379.patch
  - curl-CVE-2024-2398.patch
  - curl-CVE-2024-2466.patch
  - curl-CVE-2024-6197.patch
  - curl-CVE-2024-7264.patch
  - curl-CVE-2024-8096.patch
  - curl-CVE-2024-9681.patch
  - curl-CVE-2025-0167.patch
  - curl-CVE-2025-0725.patch
  - curl-aws_sigv4-url-encode-the-canonical-path.patch
  - curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
</package>
<package pkgid="34341752f3918924e25019e8522482bb275b17920513dcf65172a2ff067d4654" name="libcurl4" arch="x86_64">
  <version epoch="0" ver="8.14.1" rel="150700.7.11.1"/>
  <changelog author="bjorn.bidar@thaodan.de" date="1731499200">- Add patch to fix libcurl when netrc parsing is enabled.
  curl_easy_duphandle did not init netrc which broke applications such
  as for example git. gh#curl/curl#15496
  * 0001-duphandle-also-init-netrc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733227200">- Security fix: [bsc#1234068, CVE-2024-11053]
  * curl could leak the password used for the first host to the
    followed-to host under certain circumstances.
  * netrc: address several netrc parser flaws
  * Add curl-CVE-2024-11053.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733918400">- Update to 8.11.1:
  * Security fixes:
  - netrc and redirect credential leak [bsc#1234068, CVE-2024-11053]
  * Bugfixes:
  - build: fix ECH to always enable HTTPS RR
  - cookie: treat cookie name case sensitively
  - curl-rustls.m4: keep existing 'CPPFLAGS'/'LDFLAGS' when detected
  - curl: use realtime in trace timestamps
  - digest: produce a shorter cnonce in Digest headers
  - docs: document default 'User-Agent'
  - docs: suggest --ssl-reqd instead of --ftp-ssl
  - duphandle: also init netrc
  - hostip: don't use the resolver for FQDN localhost
  - http_negotiate: allow for a one byte larger channel binding buffer
  - krb5: fix socket/sockindex confusion, MSVC compiler warnings
  - libssh: use libssh sftp_aio to upload file
  - libssh: when using IPv6 numerical address, add brackets
  - mime: fix reader stall on small read lengths
  - mk-ca-bundle: remove CKA_NSS_SERVER_DISTRUST_AFTER conditions
  - mprintf: fix the integer overflow checks
  - multi: fix callback for 'CURLMOPT_TIMERFUNCTION' not being called again when...
  - netrc: address several netrc parser flaws
  - netrc: support large file, longer lines, longer tokens
  - nghttp2: use custom memory functions
  - OpenSSL: improvde error message on expired certificate
  - openssl: remove three "Useless Assignments"
  - openssl: stop using SSL_CTX_ function prefix for our functions
  - pytest: add test for use of CURLMOPT_MAX_HOST_CONNECTIONS
  - rtsp: check EOS in the RTSP receive and return an error code
  - schannel: remove TLS 1.3 ciphersuite-list support
  - setopt: fix CURLOPT_HTTP_CONTENT_DECODING
  - setopt: fix missing options for builds without HTTP &amp; MQTT
  - socket: handle binding to "host!&lt;ip&gt;"
  - socketpair: fix enabling 'USE_EVENTFD'
  - strtok: use namespaced 'strtok_r' macro instead of redefining it
  * Remove 0001-duphandle-also-init-netrc.patch upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1736251200">- smtp: for starttls, do full upgrade [bsc#1235151]
  * Make sure the TLS handshake after a successful STARTTLS command
    is fully done before further sending/receiving on the connection.
  * Add curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238400">- Security fix: [bsc#1236588, CVE-2025-0167]
  * netrc: 'default' with no credentials is not a match
  * Add curl-CVE-2025-0167.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238401">- Security fix: [bsc#1236590, CVE-2025-0725]
  * content_encoding: drop support for zlib before 1.2.0.4
  * content_encoding: put the decomp buffers into the writer structs
  * Add curl-CVE-2025-0725.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738843200">- Update to 8.12.0:
  * Security fixes:
  - [bsc#1234068, CVE-2024-11053] curl could leak the password used
    for the first host to the followed-to host under certain circumstances.
  - [bsc#1232528, CVE-2024-9681] HSTS subdomain overwrites parent cache entry
  - [bsc#1236589, CVE-2025-0665] eventfd double close
  * Changes:
  - curl: add byte range support to --variable reading from file
  - curl: make --etag-save acknowledge --create-dirs
  - getinfo: fix CURLINFO_QUEUE_TIME_T and add 'time_queue' var
  - getinfo: provide info which auth was used for HTTP and proxy
  - hyper: drop support
  - openssl: add support to use keys and certificates from PKCS#11 provider
  - QUIC: 0RTT for gnutls via CURLSSLOPT_EARLYDATA
  - vtls: feature ssls-export for SSL session im-/export
  * Bugfixes:
  - altsvc: avoid integer overflow in expire calculation
  - asyn-ares: acknowledge CURLOPT_DNS_SERVERS set to NULL
  - asyn-ares: fix memory leak
  - asyn-ares: initial HTTPS resolve support
  - asyn-thread: use c-ares to resolve HTTPS RR
  - async-thread: avoid closing eventfd twice
  - cd2nroff: do not insist on quoted &lt;&gt; within backticks
  - cd2nroff: support "none" as a TLS backend
  - conncache: count shutdowns against host and max limits
  - content_encoding: drop support for zlib before 1.2.0.4
  - content_encoding: namespace GZIP flag constants
  - content_encoding: put the decomp buffers into the writer structs
  - content_encoding: support use of custom libzstd memory functions
  - cookie: cap expire times to 400 days
  - cookie: parse only the exact expire date
  - curl: return error if etag options are used with multiple URLs
  - curl_multi_fdset: include the shutdown connections in the set
  - curl_sha512_256: rename symbols to the curl namespace
  - curl_url_set.md: adjust the added-in to 7.62.0
  - doh: send HTTPS RR requests for all HTTP(S) transfers
  - easy: allow connect-only handle reuse with easy_perform
  - easy: make curl_easy_perform() return error if connection still there
  - easy_lock: use Sleep(1) for thread yield on old Windows
  - ECH: update APIs to those agreed with OpenSSL maintainers
  - GnuTLS: fix 'time_appconnect' for early data
  - HTTP/2: strip TE request header
  - http2: fix data_pending check
  - http2: fix value stored to 'result' is never read
  - http: ignore invalid Retry-After times
  - http_aws_sigv4: Fix invalid compare function handling zero-length pairs
  - https-connect: start next immediately on failure
  - lib: redirect handling by protocol handler
  - multi: fix curl_multi_waitfds reporting of fd_count
  - netrc: 'default' with no credentials is not a match
  - netrc: fix password-only entries
  - netrc: restore _netrc fallback logic
  - ngtcp2: fix memory leak on connect failure
  - openssl: define `HAVE_KEYLOG_CALLBACK` before use
  - openssl: fix ECH logic
  - osslq: use SSL_poll to determine writeability of QUIC streams
  - sectransp: free certificate on error
  - select: avoid a NULL deref in cwfds_add_sock
  - src: omit hugehelp and ca-embed from libcurltool
  - ssl session cache: change cache dimensions
  - system.h: add 64-bit curl_off_t definitions for NonStop
  - telnet: handle single-byte input option
  - TLS: check connection for SSL use, not handler
  - tool_formparse.c: make curlx_uztoso a static in here
  - tool_formparse: accept digits in --form type= strings
  - tool_getparam: ECH param parsing refix
  - tool_getparam: fail --hostpubsha256 if libssh2 is not used
  - tool_getparam: fix "Ignored Return Value"
  - tool_getparam: fix memory leak on error in parse_ech
  - tool_getparam: fix the ECH parser
  - tool_operate: make --etag-compare always accept a non-existing file
  - transfer: fix CURLOPT_CURLU override logic
  - urlapi: fix redirect to a new fragment or query (only)
  - vquic: make vquic_send_packets not return without setting psent
  - vtls: fix default SSL backend as a fallback
  - vtls: only remember the expiry timestamp in session cache
  - websocket: fix message send corruption
  - x509asn1: add parse recursion limit
  * Rebase pathes:
  - libcurl-ocloexec.patch
  - dont-mess-with-rpmoptflags.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739448000">- Update to 8.12.1:
  * Bugfixes:
  - asyn-thread: fix build with 'CURL_DISABLE_SOCKETPAIR'
  - asyn-thread: fix HTTPS RR crash
  - asyn-thread: fix the returned bitmask from Curl_resolver_getsock
  - asyn-thread: survive a c-ares channel set to NULL
  - cmake: always reference OpenSSL and ZLIB via imported targets
  - cmake: respect 'GNUTLS_CFLAGS' when detected via 'pkg-config'
  - cmake: respect 'GNUTLS_LIBRARY_DIRS' in 'libcurl.pc' and 'curl-config'
  - content_encoding: #error on too old zlib
  - imap: TLS upgrade fix
  - ldap: drop support for legacy Novell LDAP SDK
  - libssh2: comparison is always true because rc &lt;= -1
  - libssh2: raise lowest supported version to 1.2.8
  - libssh: drop support for libssh older than 0.9.0
  - openssl-quic: ignore ciphers for h3
  - pop3: TLS upgrade fix
  - runtests: fix the disabling of the memory tracking
  - runtests: quote commands to support paths with spaces
  - scache: add magic checks
  - smb: silence '-Warray-bounds' with gcc 13+
  - smtp: TLS upgrade fix
  - tool_cfgable: sort struct fields by size, use bitfields for booleans
  - tool_getparam: add "TLS required" flag for each such option
  - vtls: fix multissl-init
  - wakeup_write: make sure the eventfd write sends eight bytes</changelog>
  <changelog author="pmonreal@suse.com" date="1744200000">- Update to 8.13.0:
  * Changes:
  - curl: add write-out variable 'tls_earlydata'
  - curl: make --url support a file with URLs
  - gnutls: set priority via --ciphers
  - IMAP: add CURLOPT_UPLOAD_FLAGS and --upload-flags
  - lib: add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY
  - OpenSSL/quictls: add support for TLSv1.3 early data
  - rustls: add support for CERTINFO
  - rustls: add support for SSLKEYLOGFILE
  - rustls: support ECH w/ DoH lookup for config
  - rustls: support native platform verifier
  - var: add a '64dec' function that can base64 decode a string
  * Bugfixes:
  - conn: fix connection reuse when SSL is optional
  - hash: use single linked list for entries
  - http2: detect session being closed on ingress handling
  - http2: reset stream on response header error
  - http: remove a HTTP method size restriction
  - http: version negotiation
  - httpsrr: fix port detection
  - libssh: fix freeing of resources in disconnect
  - libssh: fix scp large file upload for 32-bit size_t systems
  - openssl-quic: do not iterate over multi handles
  - openssl: check return value of X509_get0_pubkey
  - openssl: drop support for old OpenSSL/LibreSSL versions
  - openssl: fix crash on missing cert password
  - openssl: fix pkcs11 URI checking for key files.
  - openssl: remove bad `goto`s into other scope
  - setopt: illegal CURLOPT_SOCKS5_AUTH should return error
  - setopt: setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine
  - sshserver.pl: adjust `AuthorizedKeysFile2` cutoff version
  - sshserver: fix excluding obsolete client config lines
  - SSLCERTS: list support for SSL_CERT_FILE and SSL_CERT_DIR
  - tftpd: prefix TFTP protocol error `E*` constants with `TFTP_`
  - tool_operate: fail SSH transfers without server auth
  - url: call protocol handler's disconnect in Curl_conn_free
  - urlapi: remove percent encoded dot sequences from the URL path
  - urldata: remove 'hostname' from struct Curl_async
  * Rebase patches:
  - libcurl-ocloexec.patch
  - curl-secure-getenv.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1744372800">- fix Leap build add curl-8.13.0-CloseSocket.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1748433600">- Update to 8.14.0:
  * Security fixes:
  - [CVE-2025-4947, bsc#1243397] QUIC certificate check skip with wolfSSL
  - [CVE-2025-5025, bsc#1243706] No QUIC certificate pinning with wolfSSL
  * Changes:
  - mqtt: send ping at upkeep interval
  - schannel: handle pkcs12 client certificates containing CA certificates
  - TLS: add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: import v2025.04.20 script + docs
  - websocket: add option to disable auto-pong reply
  * Bugfixes:
  - asny-thrdd: fix detach from running thread
  - async-threaded resolver: use ref counter
  - async: DoH improvements
  - build: enable gcc-12/13+, clang-10+ picky warnings
  - build: enable gcc-15 picky warnings
  - certs: drop unused `default_bits` from `.prm` files
  - cf-https-connect: use the passed in dns struct pointer
  - cf-socket: fix FTP accept connect
  - cfilters: remove assert
  - cmake: fix nghttp3 static linking with `USE_OPENSSL_QUIC=ON`
  - cmake: prefer `COMPILE_OPTIONS` over `CMAKE_C_FLAGS` for custom C options
  - cmake: revert `CURL_LTO` behavior for multi-config generators
  - configure: fix --disable-rt
  - CONTRIBUTE: add project guidelines for AI use
  - cpool/cshutdown: force close connections under pressure
  - curl: fix memory leak when -h is used in config file
  - curl_get_line: handle lines ending on the buffer boundary
  - headers: enforce a max number of response header to accept
  - http: fix HTTP/2 handling of TE request header using "trailers"
  - lib: include files using known path
  - lib: unify conversions to/from hex
  - libssh: add NULL check for Curl_meta_get()
  - libssh: fix memory leak
  - mqtt: use conn/easy meta hash
  - multi: do transfer book keeping using mid
  - multi: init_do(): check result
  - netrc: avoid NULL deref on weird input
  - netrc: avoid strdup NULL
  - netrc: deal with null token better
  - openssl-quic: avoid potential `-Wnull-dereference`, add assert
  - openssl-quic: fix shutdown when stream not open
  - openssl: enable builds for *both* engines and providers
  - openssl: set the cipher string before doing private cert
  - progress: avoid integer overflow when gathering total transfer size
  - rand: update comment on Curl_rand_bytes weak random
  - rustls: make max size of cert and key reasonable
  - smb: avoid integer overflow on weird input date
  - urlapi: redirecting to "" is considered fine
  * Remove curl-8.13.0-CloseSocket.patch upstream
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1749038400">- Update to 8.14.1:
  * Security fixes:
  - [bsc#1243933, CVE-2025-5399] libcurl can possibly get
    trapped in an endless busy-loop when processing specially
    crafted packets [d1145df2]
  * Bugfixes:
  - asyn-thrdd: fix cleanup when RR fails due to OOM
  - ftp: fix teardown of DATA connection in done
  - http: fail early when rewind of input failed when following redirects
  - multi: fix add_handle resizing
  - tls BIOs: handle BIO_CTRL_EOF correctly
  - tool_getparam: make --no-anyauth not be accepted
  - wolfssl: fix sending of early data
  - ws: handle blocked sends better
  - ws: tests and fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1749643200">- Update to 8.14.1: [jsc#PED-13055, jsc#PED-13056]
  * Add _multibuild
  * Remove patches fixed in the update:
  - curl-CVE-2024-11053.patch
  - curl-CVE-2024-2004.patch
  - curl-CVE-2024-2379.patch
  - curl-CVE-2024-2398.patch
  - curl-CVE-2024-2466.patch
  - curl-CVE-2024-6197.patch
  - curl-CVE-2024-7264.patch
  - curl-CVE-2024-8096.patch
  - curl-CVE-2024-9681.patch
  - curl-CVE-2025-0167.patch
  - curl-CVE-2025-0725.patch
  - curl-aws_sigv4-url-encode-the-canonical-path.patch
  - curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1763553600">- Security fix: [bsc#1253757, CVE-2025-11563]
  * curl: wcurl path traversal with percent-encoded slashes
  * Add curl-CVE-2025-11563.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767355200">- Security fixes:
  * [bsc#1255731, CVE-2025-14524] if redirected, require permission to use bearer
  * [bsc#1255734, CVE-2025-15224] require private key or user-agent for public key auth
  * [bsc#1255732, CVE-2025-14819] toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache
  * [bsc#1255733, CVE-2025-15079] set both knownhosts options to the same file
  * Add patches:
  - curl-CVE-2025-14524.patch
  - curl-CVE-2025-15224.patch
  - curl-CVE-2025-14819.patch
  - curl-CVE-2025-15079.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767787200">- Security fix: [bsc#1256105, CVE-2025-14017]
  * call ldap_init() before setting the options
  * Add patch curl-CVE-2025-14017.patch</changelog>
</package>
<package pkgid="ebd57ada5130f4ba84afaa636a8b67c66c89a0aa2455d1219f50f2811e0578eb" name="libcurl4" arch="x86_64">
  <version epoch="0" ver="8.14.1" rel="150700.7.14.1"/>
  <changelog author="pmonreal@suse.com" date="1733227200">- Security fix: [bsc#1234068, CVE-2024-11053]
  * curl could leak the password used for the first host to the
    followed-to host under certain circumstances.
  * netrc: address several netrc parser flaws
  * Add curl-CVE-2024-11053.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733918400">- Update to 8.11.1:
  * Security fixes:
  - netrc and redirect credential leak [bsc#1234068, CVE-2024-11053]
  * Bugfixes:
  - build: fix ECH to always enable HTTPS RR
  - cookie: treat cookie name case sensitively
  - curl-rustls.m4: keep existing 'CPPFLAGS'/'LDFLAGS' when detected
  - curl: use realtime in trace timestamps
  - digest: produce a shorter cnonce in Digest headers
  - docs: document default 'User-Agent'
  - docs: suggest --ssl-reqd instead of --ftp-ssl
  - duphandle: also init netrc
  - hostip: don't use the resolver for FQDN localhost
  - http_negotiate: allow for a one byte larger channel binding buffer
  - krb5: fix socket/sockindex confusion, MSVC compiler warnings
  - libssh: use libssh sftp_aio to upload file
  - libssh: when using IPv6 numerical address, add brackets
  - mime: fix reader stall on small read lengths
  - mk-ca-bundle: remove CKA_NSS_SERVER_DISTRUST_AFTER conditions
  - mprintf: fix the integer overflow checks
  - multi: fix callback for 'CURLMOPT_TIMERFUNCTION' not being called again when...
  - netrc: address several netrc parser flaws
  - netrc: support large file, longer lines, longer tokens
  - nghttp2: use custom memory functions
  - OpenSSL: improvde error message on expired certificate
  - openssl: remove three "Useless Assignments"
  - openssl: stop using SSL_CTX_ function prefix for our functions
  - pytest: add test for use of CURLMOPT_MAX_HOST_CONNECTIONS
  - rtsp: check EOS in the RTSP receive and return an error code
  - schannel: remove TLS 1.3 ciphersuite-list support
  - setopt: fix CURLOPT_HTTP_CONTENT_DECODING
  - setopt: fix missing options for builds without HTTP &amp; MQTT
  - socket: handle binding to "host!&lt;ip&gt;"
  - socketpair: fix enabling 'USE_EVENTFD'
  - strtok: use namespaced 'strtok_r' macro instead of redefining it
  * Remove 0001-duphandle-also-init-netrc.patch upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1736251200">- smtp: for starttls, do full upgrade [bsc#1235151]
  * Make sure the TLS handshake after a successful STARTTLS command
    is fully done before further sending/receiving on the connection.
  * Add curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238400">- Security fix: [bsc#1236588, CVE-2025-0167]
  * netrc: 'default' with no credentials is not a match
  * Add curl-CVE-2025-0167.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238401">- Security fix: [bsc#1236590, CVE-2025-0725]
  * content_encoding: drop support for zlib before 1.2.0.4
  * content_encoding: put the decomp buffers into the writer structs
  * Add curl-CVE-2025-0725.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738843200">- Update to 8.12.0:
  * Security fixes:
  - [bsc#1234068, CVE-2024-11053] curl could leak the password used
    for the first host to the followed-to host under certain circumstances.
  - [bsc#1232528, CVE-2024-9681] HSTS subdomain overwrites parent cache entry
  - [bsc#1236589, CVE-2025-0665] eventfd double close
  * Changes:
  - curl: add byte range support to --variable reading from file
  - curl: make --etag-save acknowledge --create-dirs
  - getinfo: fix CURLINFO_QUEUE_TIME_T and add 'time_queue' var
  - getinfo: provide info which auth was used for HTTP and proxy
  - hyper: drop support
  - openssl: add support to use keys and certificates from PKCS#11 provider
  - QUIC: 0RTT for gnutls via CURLSSLOPT_EARLYDATA
  - vtls: feature ssls-export for SSL session im-/export
  * Bugfixes:
  - altsvc: avoid integer overflow in expire calculation
  - asyn-ares: acknowledge CURLOPT_DNS_SERVERS set to NULL
  - asyn-ares: fix memory leak
  - asyn-ares: initial HTTPS resolve support
  - asyn-thread: use c-ares to resolve HTTPS RR
  - async-thread: avoid closing eventfd twice
  - cd2nroff: do not insist on quoted &lt;&gt; within backticks
  - cd2nroff: support "none" as a TLS backend
  - conncache: count shutdowns against host and max limits
  - content_encoding: drop support for zlib before 1.2.0.4
  - content_encoding: namespace GZIP flag constants
  - content_encoding: put the decomp buffers into the writer structs
  - content_encoding: support use of custom libzstd memory functions
  - cookie: cap expire times to 400 days
  - cookie: parse only the exact expire date
  - curl: return error if etag options are used with multiple URLs
  - curl_multi_fdset: include the shutdown connections in the set
  - curl_sha512_256: rename symbols to the curl namespace
  - curl_url_set.md: adjust the added-in to 7.62.0
  - doh: send HTTPS RR requests for all HTTP(S) transfers
  - easy: allow connect-only handle reuse with easy_perform
  - easy: make curl_easy_perform() return error if connection still there
  - easy_lock: use Sleep(1) for thread yield on old Windows
  - ECH: update APIs to those agreed with OpenSSL maintainers
  - GnuTLS: fix 'time_appconnect' for early data
  - HTTP/2: strip TE request header
  - http2: fix data_pending check
  - http2: fix value stored to 'result' is never read
  - http: ignore invalid Retry-After times
  - http_aws_sigv4: Fix invalid compare function handling zero-length pairs
  - https-connect: start next immediately on failure
  - lib: redirect handling by protocol handler
  - multi: fix curl_multi_waitfds reporting of fd_count
  - netrc: 'default' with no credentials is not a match
  - netrc: fix password-only entries
  - netrc: restore _netrc fallback logic
  - ngtcp2: fix memory leak on connect failure
  - openssl: define `HAVE_KEYLOG_CALLBACK` before use
  - openssl: fix ECH logic
  - osslq: use SSL_poll to determine writeability of QUIC streams
  - sectransp: free certificate on error
  - select: avoid a NULL deref in cwfds_add_sock
  - src: omit hugehelp and ca-embed from libcurltool
  - ssl session cache: change cache dimensions
  - system.h: add 64-bit curl_off_t definitions for NonStop
  - telnet: handle single-byte input option
  - TLS: check connection for SSL use, not handler
  - tool_formparse.c: make curlx_uztoso a static in here
  - tool_formparse: accept digits in --form type= strings
  - tool_getparam: ECH param parsing refix
  - tool_getparam: fail --hostpubsha256 if libssh2 is not used
  - tool_getparam: fix "Ignored Return Value"
  - tool_getparam: fix memory leak on error in parse_ech
  - tool_getparam: fix the ECH parser
  - tool_operate: make --etag-compare always accept a non-existing file
  - transfer: fix CURLOPT_CURLU override logic
  - urlapi: fix redirect to a new fragment or query (only)
  - vquic: make vquic_send_packets not return without setting psent
  - vtls: fix default SSL backend as a fallback
  - vtls: only remember the expiry timestamp in session cache
  - websocket: fix message send corruption
  - x509asn1: add parse recursion limit
  * Rebase pathes:
  - libcurl-ocloexec.patch
  - dont-mess-with-rpmoptflags.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739448000">- Update to 8.12.1:
  * Bugfixes:
  - asyn-thread: fix build with 'CURL_DISABLE_SOCKETPAIR'
  - asyn-thread: fix HTTPS RR crash
  - asyn-thread: fix the returned bitmask from Curl_resolver_getsock
  - asyn-thread: survive a c-ares channel set to NULL
  - cmake: always reference OpenSSL and ZLIB via imported targets
  - cmake: respect 'GNUTLS_CFLAGS' when detected via 'pkg-config'
  - cmake: respect 'GNUTLS_LIBRARY_DIRS' in 'libcurl.pc' and 'curl-config'
  - content_encoding: #error on too old zlib
  - imap: TLS upgrade fix
  - ldap: drop support for legacy Novell LDAP SDK
  - libssh2: comparison is always true because rc &lt;= -1
  - libssh2: raise lowest supported version to 1.2.8
  - libssh: drop support for libssh older than 0.9.0
  - openssl-quic: ignore ciphers for h3
  - pop3: TLS upgrade fix
  - runtests: fix the disabling of the memory tracking
  - runtests: quote commands to support paths with spaces
  - scache: add magic checks
  - smb: silence '-Warray-bounds' with gcc 13+
  - smtp: TLS upgrade fix
  - tool_cfgable: sort struct fields by size, use bitfields for booleans
  - tool_getparam: add "TLS required" flag for each such option
  - vtls: fix multissl-init
  - wakeup_write: make sure the eventfd write sends eight bytes</changelog>
  <changelog author="pmonreal@suse.com" date="1744200000">- Update to 8.13.0:
  * Changes:
  - curl: add write-out variable 'tls_earlydata'
  - curl: make --url support a file with URLs
  - gnutls: set priority via --ciphers
  - IMAP: add CURLOPT_UPLOAD_FLAGS and --upload-flags
  - lib: add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY
  - OpenSSL/quictls: add support for TLSv1.3 early data
  - rustls: add support for CERTINFO
  - rustls: add support for SSLKEYLOGFILE
  - rustls: support ECH w/ DoH lookup for config
  - rustls: support native platform verifier
  - var: add a '64dec' function that can base64 decode a string
  * Bugfixes:
  - conn: fix connection reuse when SSL is optional
  - hash: use single linked list for entries
  - http2: detect session being closed on ingress handling
  - http2: reset stream on response header error
  - http: remove a HTTP method size restriction
  - http: version negotiation
  - httpsrr: fix port detection
  - libssh: fix freeing of resources in disconnect
  - libssh: fix scp large file upload for 32-bit size_t systems
  - openssl-quic: do not iterate over multi handles
  - openssl: check return value of X509_get0_pubkey
  - openssl: drop support for old OpenSSL/LibreSSL versions
  - openssl: fix crash on missing cert password
  - openssl: fix pkcs11 URI checking for key files.
  - openssl: remove bad `goto`s into other scope
  - setopt: illegal CURLOPT_SOCKS5_AUTH should return error
  - setopt: setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine
  - sshserver.pl: adjust `AuthorizedKeysFile2` cutoff version
  - sshserver: fix excluding obsolete client config lines
  - SSLCERTS: list support for SSL_CERT_FILE and SSL_CERT_DIR
  - tftpd: prefix TFTP protocol error `E*` constants with `TFTP_`
  - tool_operate: fail SSH transfers without server auth
  - url: call protocol handler's disconnect in Curl_conn_free
  - urlapi: remove percent encoded dot sequences from the URL path
  - urldata: remove 'hostname' from struct Curl_async
  * Rebase patches:
  - libcurl-ocloexec.patch
  - curl-secure-getenv.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1744372800">- fix Leap build add curl-8.13.0-CloseSocket.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1748433600">- Update to 8.14.0:
  * Security fixes:
  - [CVE-2025-4947, bsc#1243397] QUIC certificate check skip with wolfSSL
  - [CVE-2025-5025, bsc#1243706] No QUIC certificate pinning with wolfSSL
  * Changes:
  - mqtt: send ping at upkeep interval
  - schannel: handle pkcs12 client certificates containing CA certificates
  - TLS: add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: import v2025.04.20 script + docs
  - websocket: add option to disable auto-pong reply
  * Bugfixes:
  - asny-thrdd: fix detach from running thread
  - async-threaded resolver: use ref counter
  - async: DoH improvements
  - build: enable gcc-12/13+, clang-10+ picky warnings
  - build: enable gcc-15 picky warnings
  - certs: drop unused `default_bits` from `.prm` files
  - cf-https-connect: use the passed in dns struct pointer
  - cf-socket: fix FTP accept connect
  - cfilters: remove assert
  - cmake: fix nghttp3 static linking with `USE_OPENSSL_QUIC=ON`
  - cmake: prefer `COMPILE_OPTIONS` over `CMAKE_C_FLAGS` for custom C options
  - cmake: revert `CURL_LTO` behavior for multi-config generators
  - configure: fix --disable-rt
  - CONTRIBUTE: add project guidelines for AI use
  - cpool/cshutdown: force close connections under pressure
  - curl: fix memory leak when -h is used in config file
  - curl_get_line: handle lines ending on the buffer boundary
  - headers: enforce a max number of response header to accept
  - http: fix HTTP/2 handling of TE request header using "trailers"
  - lib: include files using known path
  - lib: unify conversions to/from hex
  - libssh: add NULL check for Curl_meta_get()
  - libssh: fix memory leak
  - mqtt: use conn/easy meta hash
  - multi: do transfer book keeping using mid
  - multi: init_do(): check result
  - netrc: avoid NULL deref on weird input
  - netrc: avoid strdup NULL
  - netrc: deal with null token better
  - openssl-quic: avoid potential `-Wnull-dereference`, add assert
  - openssl-quic: fix shutdown when stream not open
  - openssl: enable builds for *both* engines and providers
  - openssl: set the cipher string before doing private cert
  - progress: avoid integer overflow when gathering total transfer size
  - rand: update comment on Curl_rand_bytes weak random
  - rustls: make max size of cert and key reasonable
  - smb: avoid integer overflow on weird input date
  - urlapi: redirecting to "" is considered fine
  * Remove curl-8.13.0-CloseSocket.patch upstream
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1749038400">- Update to 8.14.1:
  * Security fixes:
  - [bsc#1243933, CVE-2025-5399] libcurl can possibly get
    trapped in an endless busy-loop when processing specially
    crafted packets [d1145df2]
  * Bugfixes:
  - asyn-thrdd: fix cleanup when RR fails due to OOM
  - ftp: fix teardown of DATA connection in done
  - http: fail early when rewind of input failed when following redirects
  - multi: fix add_handle resizing
  - tls BIOs: handle BIO_CTRL_EOF correctly
  - tool_getparam: make --no-anyauth not be accepted
  - wolfssl: fix sending of early data
  - ws: handle blocked sends better
  - ws: tests and fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1749643200">- Update to 8.14.1: [jsc#PED-13055, jsc#PED-13056]
  * Add _multibuild
  * Remove patches fixed in the update:
  - curl-CVE-2024-11053.patch
  - curl-CVE-2024-2004.patch
  - curl-CVE-2024-2379.patch
  - curl-CVE-2024-2398.patch
  - curl-CVE-2024-2466.patch
  - curl-CVE-2024-6197.patch
  - curl-CVE-2024-7264.patch
  - curl-CVE-2024-8096.patch
  - curl-CVE-2024-9681.patch
  - curl-CVE-2025-0167.patch
  - curl-CVE-2025-0725.patch
  - curl-aws_sigv4-url-encode-the-canonical-path.patch
  - curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1763553600">- Security fix: [bsc#1253757, CVE-2025-11563]
  * curl: wcurl path traversal with percent-encoded slashes
  * Add curl-CVE-2025-11563.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767355200">- Security fixes:
  * [bsc#1255731, CVE-2025-14524] if redirected, require permission to use bearer
  * [bsc#1255734, CVE-2025-15224] require private key or user-agent for public key auth
  * [bsc#1255732, CVE-2025-14819] toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache
  * [bsc#1255733, CVE-2025-15079] set both knownhosts options to the same file
  * Add patches:
  - curl-CVE-2025-14524.patch
  - curl-CVE-2025-15224.patch
  - curl-CVE-2025-14819.patch
  - curl-CVE-2025-15079.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767787200">- Security fix: [bsc#1256105, CVE-2025-14017]
  * call ldap_init() before setting the options
  * Add patch curl-CVE-2025-14017.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1773057600">- Security fixes:
  * CVE-2026-1965: Bad reuse of HTTP Negotiate connection (bsc#1259362)
  * CVE-2026-3783: Token leak with redirect and netrc (bsc#1259363)
  * CVE-2026-3784: Wrong proxy connection reuse with credentials (bsc#1259364)
  * CVE-2026-3805: Use after free in SMB connection reuse (bsc#1259365)
  * Add patches:
  - curl-CVE-2026-1965.patch
  - curl-CVE-2026-3783.patch
  - curl-CVE-2026-3784.patch
  - curl-CVE-2026-3805.patch</changelog>
</package>
<package pkgid="8477ed0165b872de67e85a72429e71802e87a3f7c50a0fe40b67501c94f61880" name="libcurl4" arch="x86_64">
  <version epoch="0" ver="8.14.1" rel="150700.7.2.1"/>
  <changelog author="pmonreal@suse.com" date="1727179200">- Update to 8.10.1:
  * Bugfixes:
  - autotools: fix `--with-ca-embed` build rule
  - cmake: ensure `CURL_USE_OPENSSL`/`USE_OPENSSL_QUIC` are set in sync
  - cmake: fix MSH3 to appear on the feature list
  - connect: store connection info when really done
  - FTP: partly revert eeb7c1280742f5c8fa48a4340fc1e1a1a2c7075a
  - http2: when uploading data from stdin, fix eos forwarding
  - http: make max-filesize check not count ignored bodies
  - lib: fix AF_INET6 use outside of USE_IPV6
  - multi: check that the multi handle is valid in curl_multi_assign
  - QUIC: on connect, keep on trying on draining server
  - request: correctly reset the eos_sent flag
  - setopt: remove superfluous use of ternary expressions
  - singleuse: drop `Curl_memrchr()` for no-HTTP builds
  - tool_cb_wrt: use "curl_response" if no file name in URL
  - transfer: fix sendrecv() without interim poll
  - vtls: fix `Curl_ssl_conn_config_match` doc param</changelog>
  <changelog author="pmonreal@suse.com" date="1730289600">- Security fix: [bsc#1232528, CVE-2024-9681]
  * HSTS subdomain overwrites parent cache entry
  * Add curl-CVE-2024-9681.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730894400">- Update to 8.11.0:
  * Security fixes: [bsc#1232528, CVE-2024-9681]
  - curl: HSTS subdomain overwrites parent cache entry
  * Changes:
  - curl: --create-dirs works for --dump-header as well
  - gtls: Add P12 format support
  - ipfs: add options to disable
  - TLS: TLSv1.3 earlydata support for curl
  - WebSockets: make support official (non-experimental)
  * Bugfixes:
  - build: clarify CA embed is for curl tool, mark default, improve summary
  - build: show if CA bundle to embed was found
  - build: tidy up and improve versioned-symbols options
  - cmake/FindNGTCP2: use library path as hint for finding crypto module
  - cmake: disable default OpenSSL if BearSSL, GnuTLS or Rustls is enabled
  - cmake: rename LDAP dependency config variables to match Find modules
  - cmake: replace 'check_include_file_concat()' for LDAP and GSS detection
  - cmake: use OpenSSL for LDAP detection only if available
  - curl: add build options for safe/no CA bundle search (Windows)
  - curl: detect ECH support dynamically, not at build time
  - curl_addrinfo: support operating systems with only getaddrinfo(3)
  - ftp: fix 0-length last write on upload from stdin
  - gnutls: use session cache for QUIC
  - hsts: improve subdomain handling
  - hsts: support "implied LWS" properly around max-age
  - http2: auto reset stream on server eos
  - json.md: cli-option '--json' is an alias of '--data-binary'
  - lib: move curl_path.[ch] into vssh/
  - lib: remove function pointer typecasts for hmac/sha256/md5
  - libssh.c: handle EGAINS during proto-connect correctly
  - libssh2: use the filename buffer when getting the homedir
  - multi.c: warn/assert on stall only without timer
  - negotiate: conditional check around GSS &amp; SSL specific code
  - netrc: cache the netrc file in memory
  - ngtcp2: do not loop on recv
  - ngtcp2: set max window size to 10x of initial (128KB)
  - openssl quic: populate x509 store before handshake
  - openssl: extend the OpenSSL error messages
  - openssl: improve retries on shutdown
  - quic: use send/recvmmsg when available
  - schannel: fix TLS cert verification by IP SAN
  - schannel: ignore error on recv beyond close notify
  - select: use poll() if existing, avoid poll() with no sockets
  - sendf: add condition to max-filesize check
  - server/mqttd: fix two memory leaks
  - setopt: return error for bad input to CURLOPT_RTSP_REQUEST
  - setopt_cptr: make overflow check only done when needed
  - tls: avoid abusing CURLE_SSL_ENGINE_INITFAILED
  - tool: support --show-headers AND --remote-header-name
  - tool_operate: make --skip-existing work for --parallel
  - url: connection reuse on h3 connections
  - url: use same credentials on redirect
  - urlapi: normalize the IPv6 address
  - version: say quictls in MSH3 builds
  - vquic: fix compiler warning with gcc + MUSL
  - vquic: recv_mmsg, use fewer, but larger buffers
  - vtls: convert Curl_pin_peer_pubkey to use dynbuf
  - vtls: convert pubkey_pem_to_der to use dynbuf
  * Rebase curl-secure-getenv.patch</changelog>
  <changelog author="bjorn.bidar@thaodan.de" date="1731499200">- Add patch to fix libcurl when netrc parsing is enabled.
  curl_easy_duphandle did not init netrc which broke applications such
  as for example git. gh#curl/curl#15496
  * 0001-duphandle-also-init-netrc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733227200">- Security fix: [bsc#1234068, CVE-2024-11053]
  * curl could leak the password used for the first host to the
    followed-to host under certain circumstances.
  * netrc: address several netrc parser flaws
  * Add curl-CVE-2024-11053.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733918400">- Update to 8.11.1:
  * Security fixes:
  - netrc and redirect credential leak [bsc#1234068, CVE-2024-11053]
  * Bugfixes:
  - build: fix ECH to always enable HTTPS RR
  - cookie: treat cookie name case sensitively
  - curl-rustls.m4: keep existing 'CPPFLAGS'/'LDFLAGS' when detected
  - curl: use realtime in trace timestamps
  - digest: produce a shorter cnonce in Digest headers
  - docs: document default 'User-Agent'
  - docs: suggest --ssl-reqd instead of --ftp-ssl
  - duphandle: also init netrc
  - hostip: don't use the resolver for FQDN localhost
  - http_negotiate: allow for a one byte larger channel binding buffer
  - krb5: fix socket/sockindex confusion, MSVC compiler warnings
  - libssh: use libssh sftp_aio to upload file
  - libssh: when using IPv6 numerical address, add brackets
  - mime: fix reader stall on small read lengths
  - mk-ca-bundle: remove CKA_NSS_SERVER_DISTRUST_AFTER conditions
  - mprintf: fix the integer overflow checks
  - multi: fix callback for 'CURLMOPT_TIMERFUNCTION' not being called again when...
  - netrc: address several netrc parser flaws
  - netrc: support large file, longer lines, longer tokens
  - nghttp2: use custom memory functions
  - OpenSSL: improvde error message on expired certificate
  - openssl: remove three "Useless Assignments"
  - openssl: stop using SSL_CTX_ function prefix for our functions
  - pytest: add test for use of CURLMOPT_MAX_HOST_CONNECTIONS
  - rtsp: check EOS in the RTSP receive and return an error code
  - schannel: remove TLS 1.3 ciphersuite-list support
  - setopt: fix CURLOPT_HTTP_CONTENT_DECODING
  - setopt: fix missing options for builds without HTTP &amp; MQTT
  - socket: handle binding to "host!&lt;ip&gt;"
  - socketpair: fix enabling 'USE_EVENTFD'
  - strtok: use namespaced 'strtok_r' macro instead of redefining it
  * Remove 0001-duphandle-also-init-netrc.patch upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1736251200">- smtp: for starttls, do full upgrade [bsc#1235151]
  * Make sure the TLS handshake after a successful STARTTLS command
    is fully done before further sending/receiving on the connection.
  * Add curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238400">- Security fix: [bsc#1236588, CVE-2025-0167]
  * netrc: 'default' with no credentials is not a match
  * Add curl-CVE-2025-0167.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238401">- Security fix: [bsc#1236590, CVE-2025-0725]
  * content_encoding: drop support for zlib before 1.2.0.4
  * content_encoding: put the decomp buffers into the writer structs
  * Add curl-CVE-2025-0725.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738843200">- Update to 8.12.0:
  * Security fixes:
  - [bsc#1234068, CVE-2024-11053] curl could leak the password used
    for the first host to the followed-to host under certain circumstances.
  - [bsc#1232528, CVE-2024-9681] HSTS subdomain overwrites parent cache entry
  - [bsc#1236589, CVE-2025-0665] eventfd double close
  * Changes:
  - curl: add byte range support to --variable reading from file
  - curl: make --etag-save acknowledge --create-dirs
  - getinfo: fix CURLINFO_QUEUE_TIME_T and add 'time_queue' var
  - getinfo: provide info which auth was used for HTTP and proxy
  - hyper: drop support
  - openssl: add support to use keys and certificates from PKCS#11 provider
  - QUIC: 0RTT for gnutls via CURLSSLOPT_EARLYDATA
  - vtls: feature ssls-export for SSL session im-/export
  * Bugfixes:
  - altsvc: avoid integer overflow in expire calculation
  - asyn-ares: acknowledge CURLOPT_DNS_SERVERS set to NULL
  - asyn-ares: fix memory leak
  - asyn-ares: initial HTTPS resolve support
  - asyn-thread: use c-ares to resolve HTTPS RR
  - async-thread: avoid closing eventfd twice
  - cd2nroff: do not insist on quoted &lt;&gt; within backticks
  - cd2nroff: support "none" as a TLS backend
  - conncache: count shutdowns against host and max limits
  - content_encoding: drop support for zlib before 1.2.0.4
  - content_encoding: namespace GZIP flag constants
  - content_encoding: put the decomp buffers into the writer structs
  - content_encoding: support use of custom libzstd memory functions
  - cookie: cap expire times to 400 days
  - cookie: parse only the exact expire date
  - curl: return error if etag options are used with multiple URLs
  - curl_multi_fdset: include the shutdown connections in the set
  - curl_sha512_256: rename symbols to the curl namespace
  - curl_url_set.md: adjust the added-in to 7.62.0
  - doh: send HTTPS RR requests for all HTTP(S) transfers
  - easy: allow connect-only handle reuse with easy_perform
  - easy: make curl_easy_perform() return error if connection still there
  - easy_lock: use Sleep(1) for thread yield on old Windows
  - ECH: update APIs to those agreed with OpenSSL maintainers
  - GnuTLS: fix 'time_appconnect' for early data
  - HTTP/2: strip TE request header
  - http2: fix data_pending check
  - http2: fix value stored to 'result' is never read
  - http: ignore invalid Retry-After times
  - http_aws_sigv4: Fix invalid compare function handling zero-length pairs
  - https-connect: start next immediately on failure
  - lib: redirect handling by protocol handler
  - multi: fix curl_multi_waitfds reporting of fd_count
  - netrc: 'default' with no credentials is not a match
  - netrc: fix password-only entries
  - netrc: restore _netrc fallback logic
  - ngtcp2: fix memory leak on connect failure
  - openssl: define `HAVE_KEYLOG_CALLBACK` before use
  - openssl: fix ECH logic
  - osslq: use SSL_poll to determine writeability of QUIC streams
  - sectransp: free certificate on error
  - select: avoid a NULL deref in cwfds_add_sock
  - src: omit hugehelp and ca-embed from libcurltool
  - ssl session cache: change cache dimensions
  - system.h: add 64-bit curl_off_t definitions for NonStop
  - telnet: handle single-byte input option
  - TLS: check connection for SSL use, not handler
  - tool_formparse.c: make curlx_uztoso a static in here
  - tool_formparse: accept digits in --form type= strings
  - tool_getparam: ECH param parsing refix
  - tool_getparam: fail --hostpubsha256 if libssh2 is not used
  - tool_getparam: fix "Ignored Return Value"
  - tool_getparam: fix memory leak on error in parse_ech
  - tool_getparam: fix the ECH parser
  - tool_operate: make --etag-compare always accept a non-existing file
  - transfer: fix CURLOPT_CURLU override logic
  - urlapi: fix redirect to a new fragment or query (only)
  - vquic: make vquic_send_packets not return without setting psent
  - vtls: fix default SSL backend as a fallback
  - vtls: only remember the expiry timestamp in session cache
  - websocket: fix message send corruption
  - x509asn1: add parse recursion limit
  * Rebase pathes:
  - libcurl-ocloexec.patch
  - dont-mess-with-rpmoptflags.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739448000">- Update to 8.12.1:
  * Bugfixes:
  - asyn-thread: fix build with 'CURL_DISABLE_SOCKETPAIR'
  - asyn-thread: fix HTTPS RR crash
  - asyn-thread: fix the returned bitmask from Curl_resolver_getsock
  - asyn-thread: survive a c-ares channel set to NULL
  - cmake: always reference OpenSSL and ZLIB via imported targets
  - cmake: respect 'GNUTLS_CFLAGS' when detected via 'pkg-config'
  - cmake: respect 'GNUTLS_LIBRARY_DIRS' in 'libcurl.pc' and 'curl-config'
  - content_encoding: #error on too old zlib
  - imap: TLS upgrade fix
  - ldap: drop support for legacy Novell LDAP SDK
  - libssh2: comparison is always true because rc &lt;= -1
  - libssh2: raise lowest supported version to 1.2.8
  - libssh: drop support for libssh older than 0.9.0
  - openssl-quic: ignore ciphers for h3
  - pop3: TLS upgrade fix
  - runtests: fix the disabling of the memory tracking
  - runtests: quote commands to support paths with spaces
  - scache: add magic checks
  - smb: silence '-Warray-bounds' with gcc 13+
  - smtp: TLS upgrade fix
  - tool_cfgable: sort struct fields by size, use bitfields for booleans
  - tool_getparam: add "TLS required" flag for each such option
  - vtls: fix multissl-init
  - wakeup_write: make sure the eventfd write sends eight bytes</changelog>
  <changelog author="pmonreal@suse.com" date="1744200000">- Update to 8.13.0:
  * Changes:
  - curl: add write-out variable 'tls_earlydata'
  - curl: make --url support a file with URLs
  - gnutls: set priority via --ciphers
  - IMAP: add CURLOPT_UPLOAD_FLAGS and --upload-flags
  - lib: add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY
  - OpenSSL/quictls: add support for TLSv1.3 early data
  - rustls: add support for CERTINFO
  - rustls: add support for SSLKEYLOGFILE
  - rustls: support ECH w/ DoH lookup for config
  - rustls: support native platform verifier
  - var: add a '64dec' function that can base64 decode a string
  * Bugfixes:
  - conn: fix connection reuse when SSL is optional
  - hash: use single linked list for entries
  - http2: detect session being closed on ingress handling
  - http2: reset stream on response header error
  - http: remove a HTTP method size restriction
  - http: version negotiation
  - httpsrr: fix port detection
  - libssh: fix freeing of resources in disconnect
  - libssh: fix scp large file upload for 32-bit size_t systems
  - openssl-quic: do not iterate over multi handles
  - openssl: check return value of X509_get0_pubkey
  - openssl: drop support for old OpenSSL/LibreSSL versions
  - openssl: fix crash on missing cert password
  - openssl: fix pkcs11 URI checking for key files.
  - openssl: remove bad `goto`s into other scope
  - setopt: illegal CURLOPT_SOCKS5_AUTH should return error
  - setopt: setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine
  - sshserver.pl: adjust `AuthorizedKeysFile2` cutoff version
  - sshserver: fix excluding obsolete client config lines
  - SSLCERTS: list support for SSL_CERT_FILE and SSL_CERT_DIR
  - tftpd: prefix TFTP protocol error `E*` constants with `TFTP_`
  - tool_operate: fail SSH transfers without server auth
  - url: call protocol handler's disconnect in Curl_conn_free
  - urlapi: remove percent encoded dot sequences from the URL path
  - urldata: remove 'hostname' from struct Curl_async
  * Rebase patches:
  - libcurl-ocloexec.patch
  - curl-secure-getenv.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1744372800">- fix Leap build add curl-8.13.0-CloseSocket.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1748433600">- Update to 8.14.0:
  * Security fixes:
  - [CVE-2025-4947, bsc#1243397] QUIC certificate check skip with wolfSSL
  - [CVE-2025-5025, bsc#1243706] No QUIC certificate pinning with wolfSSL
  * Changes:
  - mqtt: send ping at upkeep interval
  - schannel: handle pkcs12 client certificates containing CA certificates
  - TLS: add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: import v2025.04.20 script + docs
  - websocket: add option to disable auto-pong reply
  * Bugfixes:
  - asny-thrdd: fix detach from running thread
  - async-threaded resolver: use ref counter
  - async: DoH improvements
  - build: enable gcc-12/13+, clang-10+ picky warnings
  - build: enable gcc-15 picky warnings
  - certs: drop unused `default_bits` from `.prm` files
  - cf-https-connect: use the passed in dns struct pointer
  - cf-socket: fix FTP accept connect
  - cfilters: remove assert
  - cmake: fix nghttp3 static linking with `USE_OPENSSL_QUIC=ON`
  - cmake: prefer `COMPILE_OPTIONS` over `CMAKE_C_FLAGS` for custom C options
  - cmake: revert `CURL_LTO` behavior for multi-config generators
  - configure: fix --disable-rt
  - CONTRIBUTE: add project guidelines for AI use
  - cpool/cshutdown: force close connections under pressure
  - curl: fix memory leak when -h is used in config file
  - curl_get_line: handle lines ending on the buffer boundary
  - headers: enforce a max number of response header to accept
  - http: fix HTTP/2 handling of TE request header using "trailers"
  - lib: include files using known path
  - lib: unify conversions to/from hex
  - libssh: add NULL check for Curl_meta_get()
  - libssh: fix memory leak
  - mqtt: use conn/easy meta hash
  - multi: do transfer book keeping using mid
  - multi: init_do(): check result
  - netrc: avoid NULL deref on weird input
  - netrc: avoid strdup NULL
  - netrc: deal with null token better
  - openssl-quic: avoid potential `-Wnull-dereference`, add assert
  - openssl-quic: fix shutdown when stream not open
  - openssl: enable builds for *both* engines and providers
  - openssl: set the cipher string before doing private cert
  - progress: avoid integer overflow when gathering total transfer size
  - rand: update comment on Curl_rand_bytes weak random
  - rustls: make max size of cert and key reasonable
  - smb: avoid integer overflow on weird input date
  - urlapi: redirecting to "" is considered fine
  * Remove curl-8.13.0-CloseSocket.patch upstream
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1749038400">- Update to 8.14.1:
  * Security fixes:
  - [bsc#1243933, CVE-2025-5399] libcurl can possibly get
    trapped in an endless busy-loop when processing specially
    crafted packets [d1145df2]
  * Bugfixes:
  - asyn-thrdd: fix cleanup when RR fails due to OOM
  - ftp: fix teardown of DATA connection in done
  - http: fail early when rewind of input failed when following redirects
  - multi: fix add_handle resizing
  - tls BIOs: handle BIO_CTRL_EOF correctly
  - tool_getparam: make --no-anyauth not be accepted
  - wolfssl: fix sending of early data
  - ws: handle blocked sends better
  - ws: tests and fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1749643200">- Update to 8.14.1: [jsc#PED-13055, jsc#PED-13056]
  * Add _multibuild
  * Remove patches fixed in the update:
  - curl-CVE-2024-11053.patch
  - curl-CVE-2024-2004.patch
  - curl-CVE-2024-2379.patch
  - curl-CVE-2024-2398.patch
  - curl-CVE-2024-2466.patch
  - curl-CVE-2024-6197.patch
  - curl-CVE-2024-7264.patch
  - curl-CVE-2024-8096.patch
  - curl-CVE-2024-9681.patch
  - curl-CVE-2025-0167.patch
  - curl-CVE-2025-0725.patch
  - curl-aws_sigv4-url-encode-the-canonical-path.patch
  - curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
</package>
<package pkgid="f0cfc7c78623d415354b2d1de4f3d9e32768c71e503ba0ad617227c72719a60a" name="libcurl4" arch="x86_64">
  <version epoch="0" ver="8.14.1" rel="150700.7.5.1"/>
  <changelog author="pmonreal@suse.com" date="1730289600">- Security fix: [bsc#1232528, CVE-2024-9681]
  * HSTS subdomain overwrites parent cache entry
  * Add curl-CVE-2024-9681.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730894400">- Update to 8.11.0:
  * Security fixes: [bsc#1232528, CVE-2024-9681]
  - curl: HSTS subdomain overwrites parent cache entry
  * Changes:
  - curl: --create-dirs works for --dump-header as well
  - gtls: Add P12 format support
  - ipfs: add options to disable
  - TLS: TLSv1.3 earlydata support for curl
  - WebSockets: make support official (non-experimental)
  * Bugfixes:
  - build: clarify CA embed is for curl tool, mark default, improve summary
  - build: show if CA bundle to embed was found
  - build: tidy up and improve versioned-symbols options
  - cmake/FindNGTCP2: use library path as hint for finding crypto module
  - cmake: disable default OpenSSL if BearSSL, GnuTLS or Rustls is enabled
  - cmake: rename LDAP dependency config variables to match Find modules
  - cmake: replace 'check_include_file_concat()' for LDAP and GSS detection
  - cmake: use OpenSSL for LDAP detection only if available
  - curl: add build options for safe/no CA bundle search (Windows)
  - curl: detect ECH support dynamically, not at build time
  - curl_addrinfo: support operating systems with only getaddrinfo(3)
  - ftp: fix 0-length last write on upload from stdin
  - gnutls: use session cache for QUIC
  - hsts: improve subdomain handling
  - hsts: support "implied LWS" properly around max-age
  - http2: auto reset stream on server eos
  - json.md: cli-option '--json' is an alias of '--data-binary'
  - lib: move curl_path.[ch] into vssh/
  - lib: remove function pointer typecasts for hmac/sha256/md5
  - libssh.c: handle EGAINS during proto-connect correctly
  - libssh2: use the filename buffer when getting the homedir
  - multi.c: warn/assert on stall only without timer
  - negotiate: conditional check around GSS &amp; SSL specific code
  - netrc: cache the netrc file in memory
  - ngtcp2: do not loop on recv
  - ngtcp2: set max window size to 10x of initial (128KB)
  - openssl quic: populate x509 store before handshake
  - openssl: extend the OpenSSL error messages
  - openssl: improve retries on shutdown
  - quic: use send/recvmmsg when available
  - schannel: fix TLS cert verification by IP SAN
  - schannel: ignore error on recv beyond close notify
  - select: use poll() if existing, avoid poll() with no sockets
  - sendf: add condition to max-filesize check
  - server/mqttd: fix two memory leaks
  - setopt: return error for bad input to CURLOPT_RTSP_REQUEST
  - setopt_cptr: make overflow check only done when needed
  - tls: avoid abusing CURLE_SSL_ENGINE_INITFAILED
  - tool: support --show-headers AND --remote-header-name
  - tool_operate: make --skip-existing work for --parallel
  - url: connection reuse on h3 connections
  - url: use same credentials on redirect
  - urlapi: normalize the IPv6 address
  - version: say quictls in MSH3 builds
  - vquic: fix compiler warning with gcc + MUSL
  - vquic: recv_mmsg, use fewer, but larger buffers
  - vtls: convert Curl_pin_peer_pubkey to use dynbuf
  - vtls: convert pubkey_pem_to_der to use dynbuf
  * Rebase curl-secure-getenv.patch</changelog>
  <changelog author="bjorn.bidar@thaodan.de" date="1731499200">- Add patch to fix libcurl when netrc parsing is enabled.
  curl_easy_duphandle did not init netrc which broke applications such
  as for example git. gh#curl/curl#15496
  * 0001-duphandle-also-init-netrc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733227200">- Security fix: [bsc#1234068, CVE-2024-11053]
  * curl could leak the password used for the first host to the
    followed-to host under certain circumstances.
  * netrc: address several netrc parser flaws
  * Add curl-CVE-2024-11053.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733918400">- Update to 8.11.1:
  * Security fixes:
  - netrc and redirect credential leak [bsc#1234068, CVE-2024-11053]
  * Bugfixes:
  - build: fix ECH to always enable HTTPS RR
  - cookie: treat cookie name case sensitively
  - curl-rustls.m4: keep existing 'CPPFLAGS'/'LDFLAGS' when detected
  - curl: use realtime in trace timestamps
  - digest: produce a shorter cnonce in Digest headers
  - docs: document default 'User-Agent'
  - docs: suggest --ssl-reqd instead of --ftp-ssl
  - duphandle: also init netrc
  - hostip: don't use the resolver for FQDN localhost
  - http_negotiate: allow for a one byte larger channel binding buffer
  - krb5: fix socket/sockindex confusion, MSVC compiler warnings
  - libssh: use libssh sftp_aio to upload file
  - libssh: when using IPv6 numerical address, add brackets
  - mime: fix reader stall on small read lengths
  - mk-ca-bundle: remove CKA_NSS_SERVER_DISTRUST_AFTER conditions
  - mprintf: fix the integer overflow checks
  - multi: fix callback for 'CURLMOPT_TIMERFUNCTION' not being called again when...
  - netrc: address several netrc parser flaws
  - netrc: support large file, longer lines, longer tokens
  - nghttp2: use custom memory functions
  - OpenSSL: improvde error message on expired certificate
  - openssl: remove three "Useless Assignments"
  - openssl: stop using SSL_CTX_ function prefix for our functions
  - pytest: add test for use of CURLMOPT_MAX_HOST_CONNECTIONS
  - rtsp: check EOS in the RTSP receive and return an error code
  - schannel: remove TLS 1.3 ciphersuite-list support
  - setopt: fix CURLOPT_HTTP_CONTENT_DECODING
  - setopt: fix missing options for builds without HTTP &amp; MQTT
  - socket: handle binding to "host!&lt;ip&gt;"
  - socketpair: fix enabling 'USE_EVENTFD'
  - strtok: use namespaced 'strtok_r' macro instead of redefining it
  * Remove 0001-duphandle-also-init-netrc.patch upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1736251200">- smtp: for starttls, do full upgrade [bsc#1235151]
  * Make sure the TLS handshake after a successful STARTTLS command
    is fully done before further sending/receiving on the connection.
  * Add curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238400">- Security fix: [bsc#1236588, CVE-2025-0167]
  * netrc: 'default' with no credentials is not a match
  * Add curl-CVE-2025-0167.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238401">- Security fix: [bsc#1236590, CVE-2025-0725]
  * content_encoding: drop support for zlib before 1.2.0.4
  * content_encoding: put the decomp buffers into the writer structs
  * Add curl-CVE-2025-0725.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738843200">- Update to 8.12.0:
  * Security fixes:
  - [bsc#1234068, CVE-2024-11053] curl could leak the password used
    for the first host to the followed-to host under certain circumstances.
  - [bsc#1232528, CVE-2024-9681] HSTS subdomain overwrites parent cache entry
  - [bsc#1236589, CVE-2025-0665] eventfd double close
  * Changes:
  - curl: add byte range support to --variable reading from file
  - curl: make --etag-save acknowledge --create-dirs
  - getinfo: fix CURLINFO_QUEUE_TIME_T and add 'time_queue' var
  - getinfo: provide info which auth was used for HTTP and proxy
  - hyper: drop support
  - openssl: add support to use keys and certificates from PKCS#11 provider
  - QUIC: 0RTT for gnutls via CURLSSLOPT_EARLYDATA
  - vtls: feature ssls-export for SSL session im-/export
  * Bugfixes:
  - altsvc: avoid integer overflow in expire calculation
  - asyn-ares: acknowledge CURLOPT_DNS_SERVERS set to NULL
  - asyn-ares: fix memory leak
  - asyn-ares: initial HTTPS resolve support
  - asyn-thread: use c-ares to resolve HTTPS RR
  - async-thread: avoid closing eventfd twice
  - cd2nroff: do not insist on quoted &lt;&gt; within backticks
  - cd2nroff: support "none" as a TLS backend
  - conncache: count shutdowns against host and max limits
  - content_encoding: drop support for zlib before 1.2.0.4
  - content_encoding: namespace GZIP flag constants
  - content_encoding: put the decomp buffers into the writer structs
  - content_encoding: support use of custom libzstd memory functions
  - cookie: cap expire times to 400 days
  - cookie: parse only the exact expire date
  - curl: return error if etag options are used with multiple URLs
  - curl_multi_fdset: include the shutdown connections in the set
  - curl_sha512_256: rename symbols to the curl namespace
  - curl_url_set.md: adjust the added-in to 7.62.0
  - doh: send HTTPS RR requests for all HTTP(S) transfers
  - easy: allow connect-only handle reuse with easy_perform
  - easy: make curl_easy_perform() return error if connection still there
  - easy_lock: use Sleep(1) for thread yield on old Windows
  - ECH: update APIs to those agreed with OpenSSL maintainers
  - GnuTLS: fix 'time_appconnect' for early data
  - HTTP/2: strip TE request header
  - http2: fix data_pending check
  - http2: fix value stored to 'result' is never read
  - http: ignore invalid Retry-After times
  - http_aws_sigv4: Fix invalid compare function handling zero-length pairs
  - https-connect: start next immediately on failure
  - lib: redirect handling by protocol handler
  - multi: fix curl_multi_waitfds reporting of fd_count
  - netrc: 'default' with no credentials is not a match
  - netrc: fix password-only entries
  - netrc: restore _netrc fallback logic
  - ngtcp2: fix memory leak on connect failure
  - openssl: define `HAVE_KEYLOG_CALLBACK` before use
  - openssl: fix ECH logic
  - osslq: use SSL_poll to determine writeability of QUIC streams
  - sectransp: free certificate on error
  - select: avoid a NULL deref in cwfds_add_sock
  - src: omit hugehelp and ca-embed from libcurltool
  - ssl session cache: change cache dimensions
  - system.h: add 64-bit curl_off_t definitions for NonStop
  - telnet: handle single-byte input option
  - TLS: check connection for SSL use, not handler
  - tool_formparse.c: make curlx_uztoso a static in here
  - tool_formparse: accept digits in --form type= strings
  - tool_getparam: ECH param parsing refix
  - tool_getparam: fail --hostpubsha256 if libssh2 is not used
  - tool_getparam: fix "Ignored Return Value"
  - tool_getparam: fix memory leak on error in parse_ech
  - tool_getparam: fix the ECH parser
  - tool_operate: make --etag-compare always accept a non-existing file
  - transfer: fix CURLOPT_CURLU override logic
  - urlapi: fix redirect to a new fragment or query (only)
  - vquic: make vquic_send_packets not return without setting psent
  - vtls: fix default SSL backend as a fallback
  - vtls: only remember the expiry timestamp in session cache
  - websocket: fix message send corruption
  - x509asn1: add parse recursion limit
  * Rebase pathes:
  - libcurl-ocloexec.patch
  - dont-mess-with-rpmoptflags.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739448000">- Update to 8.12.1:
  * Bugfixes:
  - asyn-thread: fix build with 'CURL_DISABLE_SOCKETPAIR'
  - asyn-thread: fix HTTPS RR crash
  - asyn-thread: fix the returned bitmask from Curl_resolver_getsock
  - asyn-thread: survive a c-ares channel set to NULL
  - cmake: always reference OpenSSL and ZLIB via imported targets
  - cmake: respect 'GNUTLS_CFLAGS' when detected via 'pkg-config'
  - cmake: respect 'GNUTLS_LIBRARY_DIRS' in 'libcurl.pc' and 'curl-config'
  - content_encoding: #error on too old zlib
  - imap: TLS upgrade fix
  - ldap: drop support for legacy Novell LDAP SDK
  - libssh2: comparison is always true because rc &lt;= -1
  - libssh2: raise lowest supported version to 1.2.8
  - libssh: drop support for libssh older than 0.9.0
  - openssl-quic: ignore ciphers for h3
  - pop3: TLS upgrade fix
  - runtests: fix the disabling of the memory tracking
  - runtests: quote commands to support paths with spaces
  - scache: add magic checks
  - smb: silence '-Warray-bounds' with gcc 13+
  - smtp: TLS upgrade fix
  - tool_cfgable: sort struct fields by size, use bitfields for booleans
  - tool_getparam: add "TLS required" flag for each such option
  - vtls: fix multissl-init
  - wakeup_write: make sure the eventfd write sends eight bytes</changelog>
  <changelog author="pmonreal@suse.com" date="1744200000">- Update to 8.13.0:
  * Changes:
  - curl: add write-out variable 'tls_earlydata'
  - curl: make --url support a file with URLs
  - gnutls: set priority via --ciphers
  - IMAP: add CURLOPT_UPLOAD_FLAGS and --upload-flags
  - lib: add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY
  - OpenSSL/quictls: add support for TLSv1.3 early data
  - rustls: add support for CERTINFO
  - rustls: add support for SSLKEYLOGFILE
  - rustls: support ECH w/ DoH lookup for config
  - rustls: support native platform verifier
  - var: add a '64dec' function that can base64 decode a string
  * Bugfixes:
  - conn: fix connection reuse when SSL is optional
  - hash: use single linked list for entries
  - http2: detect session being closed on ingress handling
  - http2: reset stream on response header error
  - http: remove a HTTP method size restriction
  - http: version negotiation
  - httpsrr: fix port detection
  - libssh: fix freeing of resources in disconnect
  - libssh: fix scp large file upload for 32-bit size_t systems
  - openssl-quic: do not iterate over multi handles
  - openssl: check return value of X509_get0_pubkey
  - openssl: drop support for old OpenSSL/LibreSSL versions
  - openssl: fix crash on missing cert password
  - openssl: fix pkcs11 URI checking for key files.
  - openssl: remove bad `goto`s into other scope
  - setopt: illegal CURLOPT_SOCKS5_AUTH should return error
  - setopt: setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine
  - sshserver.pl: adjust `AuthorizedKeysFile2` cutoff version
  - sshserver: fix excluding obsolete client config lines
  - SSLCERTS: list support for SSL_CERT_FILE and SSL_CERT_DIR
  - tftpd: prefix TFTP protocol error `E*` constants with `TFTP_`
  - tool_operate: fail SSH transfers without server auth
  - url: call protocol handler's disconnect in Curl_conn_free
  - urlapi: remove percent encoded dot sequences from the URL path
  - urldata: remove 'hostname' from struct Curl_async
  * Rebase patches:
  - libcurl-ocloexec.patch
  - curl-secure-getenv.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1744372800">- fix Leap build add curl-8.13.0-CloseSocket.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1748433600">- Update to 8.14.0:
  * Security fixes:
  - [CVE-2025-4947, bsc#1243397] QUIC certificate check skip with wolfSSL
  - [CVE-2025-5025, bsc#1243706] No QUIC certificate pinning with wolfSSL
  * Changes:
  - mqtt: send ping at upkeep interval
  - schannel: handle pkcs12 client certificates containing CA certificates
  - TLS: add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: import v2025.04.20 script + docs
  - websocket: add option to disable auto-pong reply
  * Bugfixes:
  - asny-thrdd: fix detach from running thread
  - async-threaded resolver: use ref counter
  - async: DoH improvements
  - build: enable gcc-12/13+, clang-10+ picky warnings
  - build: enable gcc-15 picky warnings
  - certs: drop unused `default_bits` from `.prm` files
  - cf-https-connect: use the passed in dns struct pointer
  - cf-socket: fix FTP accept connect
  - cfilters: remove assert
  - cmake: fix nghttp3 static linking with `USE_OPENSSL_QUIC=ON`
  - cmake: prefer `COMPILE_OPTIONS` over `CMAKE_C_FLAGS` for custom C options
  - cmake: revert `CURL_LTO` behavior for multi-config generators
  - configure: fix --disable-rt
  - CONTRIBUTE: add project guidelines for AI use
  - cpool/cshutdown: force close connections under pressure
  - curl: fix memory leak when -h is used in config file
  - curl_get_line: handle lines ending on the buffer boundary
  - headers: enforce a max number of response header to accept
  - http: fix HTTP/2 handling of TE request header using "trailers"
  - lib: include files using known path
  - lib: unify conversions to/from hex
  - libssh: add NULL check for Curl_meta_get()
  - libssh: fix memory leak
  - mqtt: use conn/easy meta hash
  - multi: do transfer book keeping using mid
  - multi: init_do(): check result
  - netrc: avoid NULL deref on weird input
  - netrc: avoid strdup NULL
  - netrc: deal with null token better
  - openssl-quic: avoid potential `-Wnull-dereference`, add assert
  - openssl-quic: fix shutdown when stream not open
  - openssl: enable builds for *both* engines and providers
  - openssl: set the cipher string before doing private cert
  - progress: avoid integer overflow when gathering total transfer size
  - rand: update comment on Curl_rand_bytes weak random
  - rustls: make max size of cert and key reasonable
  - smb: avoid integer overflow on weird input date
  - urlapi: redirecting to "" is considered fine
  * Remove curl-8.13.0-CloseSocket.patch upstream
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1749038400">- Update to 8.14.1:
  * Security fixes:
  - [bsc#1243933, CVE-2025-5399] libcurl can possibly get
    trapped in an endless busy-loop when processing specially
    crafted packets [d1145df2]
  * Bugfixes:
  - asyn-thrdd: fix cleanup when RR fails due to OOM
  - ftp: fix teardown of DATA connection in done
  - http: fail early when rewind of input failed when following redirects
  - multi: fix add_handle resizing
  - tls BIOs: handle BIO_CTRL_EOF correctly
  - tool_getparam: make --no-anyauth not be accepted
  - wolfssl: fix sending of early data
  - ws: handle blocked sends better
  - ws: tests and fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1749643200">- Update to 8.14.1: [jsc#PED-13055, jsc#PED-13056]
  * Add _multibuild
  * Remove patches fixed in the update:
  - curl-CVE-2024-11053.patch
  - curl-CVE-2024-2004.patch
  - curl-CVE-2024-2379.patch
  - curl-CVE-2024-2398.patch
  - curl-CVE-2024-2466.patch
  - curl-CVE-2024-6197.patch
  - curl-CVE-2024-7264.patch
  - curl-CVE-2024-8096.patch
  - curl-CVE-2024-9681.patch
  - curl-CVE-2025-0167.patch
  - curl-CVE-2025-0725.patch
  - curl-aws_sigv4-url-encode-the-canonical-path.patch
  - curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1763553600">- Security fix: [bsc#1253757, CVE-2025-11563]
  * curl: wcurl path traversal with percent-encoded slashes
  * Add curl-CVE-2025-11563.patch</changelog>
</package>
<package pkgid="c8465c45386f28eea239dbf82aaa5bb4a3c67d96dd7345420ab337afae0d3ffa" name="libcurl4" arch="x86_64">
  <version epoch="0" ver="8.14.1" rel="150700.7.8.1"/>
  <changelog author="pmonreal@suse.com" date="1730894400">- Update to 8.11.0:
  * Security fixes: [bsc#1232528, CVE-2024-9681]
  - curl: HSTS subdomain overwrites parent cache entry
  * Changes:
  - curl: --create-dirs works for --dump-header as well
  - gtls: Add P12 format support
  - ipfs: add options to disable
  - TLS: TLSv1.3 earlydata support for curl
  - WebSockets: make support official (non-experimental)
  * Bugfixes:
  - build: clarify CA embed is for curl tool, mark default, improve summary
  - build: show if CA bundle to embed was found
  - build: tidy up and improve versioned-symbols options
  - cmake/FindNGTCP2: use library path as hint for finding crypto module
  - cmake: disable default OpenSSL if BearSSL, GnuTLS or Rustls is enabled
  - cmake: rename LDAP dependency config variables to match Find modules
  - cmake: replace 'check_include_file_concat()' for LDAP and GSS detection
  - cmake: use OpenSSL for LDAP detection only if available
  - curl: add build options for safe/no CA bundle search (Windows)
  - curl: detect ECH support dynamically, not at build time
  - curl_addrinfo: support operating systems with only getaddrinfo(3)
  - ftp: fix 0-length last write on upload from stdin
  - gnutls: use session cache for QUIC
  - hsts: improve subdomain handling
  - hsts: support "implied LWS" properly around max-age
  - http2: auto reset stream on server eos
  - json.md: cli-option '--json' is an alias of '--data-binary'
  - lib: move curl_path.[ch] into vssh/
  - lib: remove function pointer typecasts for hmac/sha256/md5
  - libssh.c: handle EGAINS during proto-connect correctly
  - libssh2: use the filename buffer when getting the homedir
  - multi.c: warn/assert on stall only without timer
  - negotiate: conditional check around GSS &amp; SSL specific code
  - netrc: cache the netrc file in memory
  - ngtcp2: do not loop on recv
  - ngtcp2: set max window size to 10x of initial (128KB)
  - openssl quic: populate x509 store before handshake
  - openssl: extend the OpenSSL error messages
  - openssl: improve retries on shutdown
  - quic: use send/recvmmsg when available
  - schannel: fix TLS cert verification by IP SAN
  - schannel: ignore error on recv beyond close notify
  - select: use poll() if existing, avoid poll() with no sockets
  - sendf: add condition to max-filesize check
  - server/mqttd: fix two memory leaks
  - setopt: return error for bad input to CURLOPT_RTSP_REQUEST
  - setopt_cptr: make overflow check only done when needed
  - tls: avoid abusing CURLE_SSL_ENGINE_INITFAILED
  - tool: support --show-headers AND --remote-header-name
  - tool_operate: make --skip-existing work for --parallel
  - url: connection reuse on h3 connections
  - url: use same credentials on redirect
  - urlapi: normalize the IPv6 address
  - version: say quictls in MSH3 builds
  - vquic: fix compiler warning with gcc + MUSL
  - vquic: recv_mmsg, use fewer, but larger buffers
  - vtls: convert Curl_pin_peer_pubkey to use dynbuf
  - vtls: convert pubkey_pem_to_der to use dynbuf
  * Rebase curl-secure-getenv.patch</changelog>
  <changelog author="bjorn.bidar@thaodan.de" date="1731499200">- Add patch to fix libcurl when netrc parsing is enabled.
  curl_easy_duphandle did not init netrc which broke applications such
  as for example git. gh#curl/curl#15496
  * 0001-duphandle-also-init-netrc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733227200">- Security fix: [bsc#1234068, CVE-2024-11053]
  * curl could leak the password used for the first host to the
    followed-to host under certain circumstances.
  * netrc: address several netrc parser flaws
  * Add curl-CVE-2024-11053.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733918400">- Update to 8.11.1:
  * Security fixes:
  - netrc and redirect credential leak [bsc#1234068, CVE-2024-11053]
  * Bugfixes:
  - build: fix ECH to always enable HTTPS RR
  - cookie: treat cookie name case sensitively
  - curl-rustls.m4: keep existing 'CPPFLAGS'/'LDFLAGS' when detected
  - curl: use realtime in trace timestamps
  - digest: produce a shorter cnonce in Digest headers
  - docs: document default 'User-Agent'
  - docs: suggest --ssl-reqd instead of --ftp-ssl
  - duphandle: also init netrc
  - hostip: don't use the resolver for FQDN localhost
  - http_negotiate: allow for a one byte larger channel binding buffer
  - krb5: fix socket/sockindex confusion, MSVC compiler warnings
  - libssh: use libssh sftp_aio to upload file
  - libssh: when using IPv6 numerical address, add brackets
  - mime: fix reader stall on small read lengths
  - mk-ca-bundle: remove CKA_NSS_SERVER_DISTRUST_AFTER conditions
  - mprintf: fix the integer overflow checks
  - multi: fix callback for 'CURLMOPT_TIMERFUNCTION' not being called again when...
  - netrc: address several netrc parser flaws
  - netrc: support large file, longer lines, longer tokens
  - nghttp2: use custom memory functions
  - OpenSSL: improvde error message on expired certificate
  - openssl: remove three "Useless Assignments"
  - openssl: stop using SSL_CTX_ function prefix for our functions
  - pytest: add test for use of CURLMOPT_MAX_HOST_CONNECTIONS
  - rtsp: check EOS in the RTSP receive and return an error code
  - schannel: remove TLS 1.3 ciphersuite-list support
  - setopt: fix CURLOPT_HTTP_CONTENT_DECODING
  - setopt: fix missing options for builds without HTTP &amp; MQTT
  - socket: handle binding to "host!&lt;ip&gt;"
  - socketpair: fix enabling 'USE_EVENTFD'
  - strtok: use namespaced 'strtok_r' macro instead of redefining it
  * Remove 0001-duphandle-also-init-netrc.patch upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1736251200">- smtp: for starttls, do full upgrade [bsc#1235151]
  * Make sure the TLS handshake after a successful STARTTLS command
    is fully done before further sending/receiving on the connection.
  * Add curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238400">- Security fix: [bsc#1236588, CVE-2025-0167]
  * netrc: 'default' with no credentials is not a match
  * Add curl-CVE-2025-0167.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738238401">- Security fix: [bsc#1236590, CVE-2025-0725]
  * content_encoding: drop support for zlib before 1.2.0.4
  * content_encoding: put the decomp buffers into the writer structs
  * Add curl-CVE-2025-0725.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1738843200">- Update to 8.12.0:
  * Security fixes:
  - [bsc#1234068, CVE-2024-11053] curl could leak the password used
    for the first host to the followed-to host under certain circumstances.
  - [bsc#1232528, CVE-2024-9681] HSTS subdomain overwrites parent cache entry
  - [bsc#1236589, CVE-2025-0665] eventfd double close
  * Changes:
  - curl: add byte range support to --variable reading from file
  - curl: make --etag-save acknowledge --create-dirs
  - getinfo: fix CURLINFO_QUEUE_TIME_T and add 'time_queue' var
  - getinfo: provide info which auth was used for HTTP and proxy
  - hyper: drop support
  - openssl: add support to use keys and certificates from PKCS#11 provider
  - QUIC: 0RTT for gnutls via CURLSSLOPT_EARLYDATA
  - vtls: feature ssls-export for SSL session im-/export
  * Bugfixes:
  - altsvc: avoid integer overflow in expire calculation
  - asyn-ares: acknowledge CURLOPT_DNS_SERVERS set to NULL
  - asyn-ares: fix memory leak
  - asyn-ares: initial HTTPS resolve support
  - asyn-thread: use c-ares to resolve HTTPS RR
  - async-thread: avoid closing eventfd twice
  - cd2nroff: do not insist on quoted &lt;&gt; within backticks
  - cd2nroff: support "none" as a TLS backend
  - conncache: count shutdowns against host and max limits
  - content_encoding: drop support for zlib before 1.2.0.4
  - content_encoding: namespace GZIP flag constants
  - content_encoding: put the decomp buffers into the writer structs
  - content_encoding: support use of custom libzstd memory functions
  - cookie: cap expire times to 400 days
  - cookie: parse only the exact expire date
  - curl: return error if etag options are used with multiple URLs
  - curl_multi_fdset: include the shutdown connections in the set
  - curl_sha512_256: rename symbols to the curl namespace
  - curl_url_set.md: adjust the added-in to 7.62.0
  - doh: send HTTPS RR requests for all HTTP(S) transfers
  - easy: allow connect-only handle reuse with easy_perform
  - easy: make curl_easy_perform() return error if connection still there
  - easy_lock: use Sleep(1) for thread yield on old Windows
  - ECH: update APIs to those agreed with OpenSSL maintainers
  - GnuTLS: fix 'time_appconnect' for early data
  - HTTP/2: strip TE request header
  - http2: fix data_pending check
  - http2: fix value stored to 'result' is never read
  - http: ignore invalid Retry-After times
  - http_aws_sigv4: Fix invalid compare function handling zero-length pairs
  - https-connect: start next immediately on failure
  - lib: redirect handling by protocol handler
  - multi: fix curl_multi_waitfds reporting of fd_count
  - netrc: 'default' with no credentials is not a match
  - netrc: fix password-only entries
  - netrc: restore _netrc fallback logic
  - ngtcp2: fix memory leak on connect failure
  - openssl: define `HAVE_KEYLOG_CALLBACK` before use
  - openssl: fix ECH logic
  - osslq: use SSL_poll to determine writeability of QUIC streams
  - sectransp: free certificate on error
  - select: avoid a NULL deref in cwfds_add_sock
  - src: omit hugehelp and ca-embed from libcurltool
  - ssl session cache: change cache dimensions
  - system.h: add 64-bit curl_off_t definitions for NonStop
  - telnet: handle single-byte input option
  - TLS: check connection for SSL use, not handler
  - tool_formparse.c: make curlx_uztoso a static in here
  - tool_formparse: accept digits in --form type= strings
  - tool_getparam: ECH param parsing refix
  - tool_getparam: fail --hostpubsha256 if libssh2 is not used
  - tool_getparam: fix "Ignored Return Value"
  - tool_getparam: fix memory leak on error in parse_ech
  - tool_getparam: fix the ECH parser
  - tool_operate: make --etag-compare always accept a non-existing file
  - transfer: fix CURLOPT_CURLU override logic
  - urlapi: fix redirect to a new fragment or query (only)
  - vquic: make vquic_send_packets not return without setting psent
  - vtls: fix default SSL backend as a fallback
  - vtls: only remember the expiry timestamp in session cache
  - websocket: fix message send corruption
  - x509asn1: add parse recursion limit
  * Rebase pathes:
  - libcurl-ocloexec.patch
  - dont-mess-with-rpmoptflags.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739448000">- Update to 8.12.1:
  * Bugfixes:
  - asyn-thread: fix build with 'CURL_DISABLE_SOCKETPAIR'
  - asyn-thread: fix HTTPS RR crash
  - asyn-thread: fix the returned bitmask from Curl_resolver_getsock
  - asyn-thread: survive a c-ares channel set to NULL
  - cmake: always reference OpenSSL and ZLIB via imported targets
  - cmake: respect 'GNUTLS_CFLAGS' when detected via 'pkg-config'
  - cmake: respect 'GNUTLS_LIBRARY_DIRS' in 'libcurl.pc' and 'curl-config'
  - content_encoding: #error on too old zlib
  - imap: TLS upgrade fix
  - ldap: drop support for legacy Novell LDAP SDK
  - libssh2: comparison is always true because rc &lt;= -1
  - libssh2: raise lowest supported version to 1.2.8
  - libssh: drop support for libssh older than 0.9.0
  - openssl-quic: ignore ciphers for h3
  - pop3: TLS upgrade fix
  - runtests: fix the disabling of the memory tracking
  - runtests: quote commands to support paths with spaces
  - scache: add magic checks
  - smb: silence '-Warray-bounds' with gcc 13+
  - smtp: TLS upgrade fix
  - tool_cfgable: sort struct fields by size, use bitfields for booleans
  - tool_getparam: add "TLS required" flag for each such option
  - vtls: fix multissl-init
  - wakeup_write: make sure the eventfd write sends eight bytes</changelog>
  <changelog author="pmonreal@suse.com" date="1744200000">- Update to 8.13.0:
  * Changes:
  - curl: add write-out variable 'tls_earlydata'
  - curl: make --url support a file with URLs
  - gnutls: set priority via --ciphers
  - IMAP: add CURLOPT_UPLOAD_FLAGS and --upload-flags
  - lib: add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY
  - OpenSSL/quictls: add support for TLSv1.3 early data
  - rustls: add support for CERTINFO
  - rustls: add support for SSLKEYLOGFILE
  - rustls: support ECH w/ DoH lookup for config
  - rustls: support native platform verifier
  - var: add a '64dec' function that can base64 decode a string
  * Bugfixes:
  - conn: fix connection reuse when SSL is optional
  - hash: use single linked list for entries
  - http2: detect session being closed on ingress handling
  - http2: reset stream on response header error
  - http: remove a HTTP method size restriction
  - http: version negotiation
  - httpsrr: fix port detection
  - libssh: fix freeing of resources in disconnect
  - libssh: fix scp large file upload for 32-bit size_t systems
  - openssl-quic: do not iterate over multi handles
  - openssl: check return value of X509_get0_pubkey
  - openssl: drop support for old OpenSSL/LibreSSL versions
  - openssl: fix crash on missing cert password
  - openssl: fix pkcs11 URI checking for key files.
  - openssl: remove bad `goto`s into other scope
  - setopt: illegal CURLOPT_SOCKS5_AUTH should return error
  - setopt: setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine
  - sshserver.pl: adjust `AuthorizedKeysFile2` cutoff version
  - sshserver: fix excluding obsolete client config lines
  - SSLCERTS: list support for SSL_CERT_FILE and SSL_CERT_DIR
  - tftpd: prefix TFTP protocol error `E*` constants with `TFTP_`
  - tool_operate: fail SSH transfers without server auth
  - url: call protocol handler's disconnect in Curl_conn_free
  - urlapi: remove percent encoded dot sequences from the URL path
  - urldata: remove 'hostname' from struct Curl_async
  * Rebase patches:
  - libcurl-ocloexec.patch
  - curl-secure-getenv.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1744372800">- fix Leap build add curl-8.13.0-CloseSocket.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1748433600">- Update to 8.14.0:
  * Security fixes:
  - [CVE-2025-4947, bsc#1243397] QUIC certificate check skip with wolfSSL
  - [CVE-2025-5025, bsc#1243706] No QUIC certificate pinning with wolfSSL
  * Changes:
  - mqtt: send ping at upkeep interval
  - schannel: handle pkcs12 client certificates containing CA certificates
  - TLS: add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: import v2025.04.20 script + docs
  - websocket: add option to disable auto-pong reply
  * Bugfixes:
  - asny-thrdd: fix detach from running thread
  - async-threaded resolver: use ref counter
  - async: DoH improvements
  - build: enable gcc-12/13+, clang-10+ picky warnings
  - build: enable gcc-15 picky warnings
  - certs: drop unused `default_bits` from `.prm` files
  - cf-https-connect: use the passed in dns struct pointer
  - cf-socket: fix FTP accept connect
  - cfilters: remove assert
  - cmake: fix nghttp3 static linking with `USE_OPENSSL_QUIC=ON`
  - cmake: prefer `COMPILE_OPTIONS` over `CMAKE_C_FLAGS` for custom C options
  - cmake: revert `CURL_LTO` behavior for multi-config generators
  - configure: fix --disable-rt
  - CONTRIBUTE: add project guidelines for AI use
  - cpool/cshutdown: force close connections under pressure
  - curl: fix memory leak when -h is used in config file
  - curl_get_line: handle lines ending on the buffer boundary
  - headers: enforce a max number of response header to accept
  - http: fix HTTP/2 handling of TE request header using "trailers"
  - lib: include files using known path
  - lib: unify conversions to/from hex
  - libssh: add NULL check for Curl_meta_get()
  - libssh: fix memory leak
  - mqtt: use conn/easy meta hash
  - multi: do transfer book keeping using mid
  - multi: init_do(): check result
  - netrc: avoid NULL deref on weird input
  - netrc: avoid strdup NULL
  - netrc: deal with null token better
  - openssl-quic: avoid potential `-Wnull-dereference`, add assert
  - openssl-quic: fix shutdown when stream not open
  - openssl: enable builds for *both* engines and providers
  - openssl: set the cipher string before doing private cert
  - progress: avoid integer overflow when gathering total transfer size
  - rand: update comment on Curl_rand_bytes weak random
  - rustls: make max size of cert and key reasonable
  - smb: avoid integer overflow on weird input date
  - urlapi: redirecting to "" is considered fine
  * Remove curl-8.13.0-CloseSocket.patch upstream
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1749038400">- Update to 8.14.1:
  * Security fixes:
  - [bsc#1243933, CVE-2025-5399] libcurl can possibly get
    trapped in an endless busy-loop when processing specially
    crafted packets [d1145df2]
  * Bugfixes:
  - asyn-thrdd: fix cleanup when RR fails due to OOM
  - ftp: fix teardown of DATA connection in done
  - http: fail early when rewind of input failed when following redirects
  - multi: fix add_handle resizing
  - tls BIOs: handle BIO_CTRL_EOF correctly
  - tool_getparam: make --no-anyauth not be accepted
  - wolfssl: fix sending of early data
  - ws: handle blocked sends better
  - ws: tests and fixes</changelog>
  <changelog author="pmonreal@suse.com" date="1749211200">- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.</changelog>
  <changelog author="pmonreal@suse.com" date="1749643200">- Update to 8.14.1: [jsc#PED-13055, jsc#PED-13056]
  * Add _multibuild
  * Remove patches fixed in the update:
  - curl-CVE-2024-11053.patch
  - curl-CVE-2024-2004.patch
  - curl-CVE-2024-2379.patch
  - curl-CVE-2024-2398.patch
  - curl-CVE-2024-2466.patch
  - curl-CVE-2024-6197.patch
  - curl-CVE-2024-7264.patch
  - curl-CVE-2024-8096.patch
  - curl-CVE-2024-9681.patch
  - curl-CVE-2025-0167.patch
  - curl-CVE-2025-0725.patch
  - curl-aws_sigv4-url-encode-the-canonical-path.patch
  - curl-mstp-starttls.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1752494400">- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757419200">- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1757505600">- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1763553600">- Security fix: [bsc#1253757, CVE-2025-11563]
  * curl: wcurl path traversal with percent-encoded slashes
  * Add curl-CVE-2025-11563.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767355200">- Security fixes:
  * [bsc#1255731, CVE-2025-14524] if redirected, require permission to use bearer
  * [bsc#1255734, CVE-2025-15224] require private key or user-agent for public key auth
  * [bsc#1255732, CVE-2025-14819] toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache
  * [bsc#1255733, CVE-2025-15079] set both knownhosts options to the same file
  * Add patches:
  - curl-CVE-2025-14524.patch
  - curl-CVE-2025-15224.patch
  - curl-CVE-2025-14819.patch
  - curl-CVE-2025-15079.patch</changelog>
</package>
<package pkgid="5a6838889aae3c30473873296e64968cabc50aed16828bc6da5d0f7bb842a39b" name="libdebuginfod-devel" arch="x86_64">
  <version epoch="0" ver="0.185" rel="150400.5.8.2"/>
  <changelog author="mliska@suse.cz" date="1585569600">- Update to version 0.179:
  debuginfod-client: When DEBUGINFOD_PROGRESS is set and the program doesn't
    install its own debuginfod_progressfn_t show download
    progress on stderr.
    DEBUGINFOD_TIMEOUT is now defined as seconds to get at
    least 100K, defaults to 90 seconds.
    Default to $XDG_CACHE_HOME/debuginfod_client.
    New functions debuginfod_set_user_data,
    debuginfod_get_user_data, debuginfod_get_url and
    debuginfod_add_http_header.
    Support for file:// URLs.
  debuginfod: Uses libarchive directly for reading rpm archives.
    Support for indexing .deb/.ddeb archives through dpkg-deb
    or bsdtar.
    Generic archive support through -Z EXT[=CMD]. Which can be
    used for example for arch-linux pacman files by using
  - Z '.tar.zst=zstdcat'.
    Better logging using User-Agent and X-Forwarded-For headers.
    More prometheus metrics.
    Support for eliding dots or extraneous slashes in path names.
  debuginfod-find: Accept /path/names in place of buildid hex.
  libelf: Handle PN_XNUM in elf_getphdrnum before shdr 0 is cached
    Ensure zlib resource cleanup on failure.
  libdwfl: dwfl_linux_kernel_find_elf and dwfl_linux_kernel_report_offline
    now find and handle a compressed vmlinuz image.
  readelf, elflint: Handle PT_GNU_PROPERTY.
  translations: Updated Ukrainian translation.</changelog>
  <changelog author="mliska@suse.cz" date="1591876800">- Update to version 0.180:
  elflint: Allow SHF_EXCLUDE as generic section flag when --gnu is given.
  libdw, readelf: Handle GCC LTO .gnu.debuglto_ prefix.
  libdw: Use correct CU to resolve file names in dwarf_decl_file.
  libdwfl: Handle debugaltlink in dwfl_standard_find_debuginfo.
  size: Also obey radix printing for bsd format.
  nm: Explicitly print weak 'V' or 'T' and common 'C' symbols.
- Add 0001-tests-Add-GCOV-flags-when-necessary.patch in order to fix
  an unresolved symbol.
- Enable LTO: boo#1138796 by adding -flto-partition=none and -Wno-error=stack-usage.</changelog>
  <changelog author="mliska@suse.cz" date="1592222400">- Remove remove-run-large-elf-file.sh.patch as it now checks for memory
  size.
- Use autosetup.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1599566400">- Update to version 0.181:
  libelf: elf_update now compensates (fixes up) a bad sh_addralign for
    SHF_COMPRESSED sections.
  libdebuginfod: configure now takes --enable-libdebuginfod=dummy or
  - -disable-libdebuginfod for bootstrapping.
    DEBUGINFOD_URLS now accepts "scheme-free" urls
    (guessing at what the user meant, either http:// or file://)
  readelf, elflint: Handle aarch64 bti, pac bits in dynamic table and gnu
    property notes.
  libdw, readelf: Recognize DW_CFA_AARCH64_negate_ra_state. Allows unwinding
    on arm64 for code that is compiled for PAC (Pointer
    Authentication Code) as long as it isn't enabled
- Drop upstream patch:
  * 0001-tests-Add-GCOV-flags-when-necessary.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1600171200">- Disable LTO again - boo#1138796
  Adding -flto-partition=none and -Wno-error=stack-usage were
  not enough:
    [  123s] libasm-devel.x86_64: E: lto-no-text-in-archive (Badness: 10000) /usr/lib64/libasm.a
    [  123s] libdw-devel.x86_64: E: lto-no-text-in-archive (Badness: 10000) /usr/lib64/libdw.a
    [  123s] libelf-devel.x86_64: E: lto-no-text-in-archive (Badness: 10000) /usr/lib64/libelf.a
    [  123s] This archive does not contain a non-empty .text section.  The archive was not
    [  123s] created with -ffat-lto-objects option.
  And adding -ffat-lto-objects breaks run-show-die-info.sh test.</changelog>
  <changelog author="mliska@suse.cz" date="1600776000">- Add Conflicts for dummy packages.</changelog>
  <changelog author="mliska@suse.cz" date="1604577600">- Add new /etc/profile.d/debuginfod.{,c}sh files.
- Update to version 0.182:
  backends: Support for tilegx has been removed.
  config: New /etc/profile.d files to provide default $DEBUGINFOD_URLS.
  debuginfod: More efficient package traversal, tolerate various errors
    during scanning, grooming progress is more visible and
    interruptible, more prometheus metrics.
  debuginfod-client: Now supports compressed (kernel) ELF images.
  libdwfl: Add ZSTD compression support.</changelog>
  <changelog author="mliska@suse.cz" date="1607601600">- Move profile files to libdebuginfod1 sub-package.
- Silent 2 rpmlint issues.</changelog>
  <changelog author="mliska@suse.cz" date="1609761600">- Add upstream config-do-not-define-DEBUGINFOD_URLS-environment-var.patch
  in order to fix boo#1180306.</changelog>
  <changelog author="mliska@suse.cz" date="1612785600">- Update to version 0.183:
  debuginfod: New thread-busy metric and more detailed error metrics.
    New --fdcache-mintmp and tracking of filesystem freespace.
    New increased webapi concurrency while grooming.
  debuginfod-client: DEBUGINFOD_SONAME macro added to debuginfod.h which
    can be used to dlopen the libdebuginfod.so library.
    New function debuginfod_set_verbose_fd and
    DEBUGINFOD_VERBOSE environment variable.
  config: profile.sh and profile.csh won't export DEBUGINFOD_URLS unless
    configured --enable-debuginfod-urls[=URLS]
  elflint, readelf: Recognize SHF_GNU_RETAIN.
    Handle SHT_X86_64_UNWIND as valid relocation target.
- Remove config-do-not-define-DEBUGINFOD_URLS-environment-var.patch patch.</changelog>
  <changelog author="mliska@suse.cz" date="1615896000">- Enable https://debuginfod.opensuse.org/ debuginfod server
  by default now.
- Add disable-run-readelf-self-test.patch in order to disable
  a failing test-case with GCC 11 (PR27367).</changelog>
  <changelog author="mliska@suse.cz" date="1620648000">- Update to version 0.184:
  debuginfod: Use libarchive's bsdtar as the .deb-family file unpacker.
  debuginfod-client: Client caches negative results. If a query for a
    file failed with 404, an empty 000 permission
    file is created in the cache. This will prevent
    requesting the same file for the next 10 minutes.
    Client objects now carry long-lived curl handles
    for outgoing connections.  This makes it more
    efficient for multiple sequential queries, because
    the TCP connections and/or TLS state info are kept
    around awhile, avoiding O(100ms) setup latencies.
  libdw: handle DW_FORM_indirect when reading attributes
  translations: Update Polish translation.
- Add 2 build dependences for tests.</changelog>
  <changelog author="mliska@suse.cz" date="1621857600">- Update to version 0.185:
  debuginfod-client: Simplify curl handle reuse so downloads which
    return an error are retried.
  elfcompress: Always exit with code 0 when the operation succeeds (even
    when nothing was done). On error the exit code is now always 1.</changelog>
  <changelog author="jcheung@suse.com" date="1626004800">- For version 0.185, the below patches are no longer needed
  (jsc#SLE-17288, jsc#SLE-17951)
  libdw-check-end-of-attributes-list-consistently.patch
  elflint-dont-check-section-group-without-flags-word.patch
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
  elfutils-dont-trust-sh_entsize.patch
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
  size-handle-recursive-elf-ar-files.patch
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
  use-the-empty-string-for-note-names-with-zero-size.patch
  readelf-fix-off-by-one-sanity-check.patch
  libebl-check-NT_PLATFORM-core-notes.patch
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
  libelf-check-compression-before-allocate-output-buffer.patch
  libdwfl-sanity-check-partial-core-file-data-reads.patch
  arlib-check-that-sh_entsize-isnt-zero.patch</changelog>
  <changelog author="martin.liska@suse.com" date="1628251200">- Add disable-run-deleted-test.patch in order to disable
  failing test-case (boo#1189153).</changelog>
  <changelog author="martin.liska@suse.com" date="1633953600">- Enhance license fields: all the libraries actually have a different
  license to the tools. While the tools are GPL-3.0-or-later, the
  libraries are (LGPL-3.0-or-later OR GPL-2.0-or-later)
  SLE bug (for tracking the above) bsc#1191310</changelog>
  <changelog author="tonyj@suse.com" date="1645790400">- Add support for zstd, needed to inspect kernel modules (bsc#1196510)</changelog>
  <changelog author="martin.liska@suse.com" date="1655726400">- Add missing Requires for devel package.</changelog>
  <changelog author="martin.liska@suse.com" date="1656331200">- Set --enable-debuginfod-urls only for TW.</changelog>
  <changelog author="matz@suse.com" date="1761134400">- Add elfutils-fix-large-alignment.diff and elfutils-pr28190.diff
  to fix build/testsuite for more recent glibc and kernels.
- Add elfutils-fuzz-1.diff, elfutils-fuzz-2.diff,
  elfutils-fuzz-3.diff, elfutils-fuzz-4.diff [bsc#1237236,
  bsc#1237240, bsc#1237241, bsc#1237242].
- Add elfutils-fix-debuginfod-groom-race.diff to fix a testsuite
  race in run-debuginfod-find.sh.</changelog>
</package>
<package pkgid="ac65e08a8e3dfb6c52e958f608c5ac5216763c84ea31e9136b7c74bb5153b9d6" name="libdebuginfod1" arch="x86_64">
  <version epoch="0" ver="0.185" rel="150400.5.8.2"/>
  <changelog author="mliska@suse.cz" date="1585569600">- Update to version 0.179:
  debuginfod-client: When DEBUGINFOD_PROGRESS is set and the program doesn't
    install its own debuginfod_progressfn_t show download
    progress on stderr.
    DEBUGINFOD_TIMEOUT is now defined as seconds to get at
    least 100K, defaults to 90 seconds.
    Default to $XDG_CACHE_HOME/debuginfod_client.
    New functions debuginfod_set_user_data,
    debuginfod_get_user_data, debuginfod_get_url and
    debuginfod_add_http_header.
    Support for file:// URLs.
  debuginfod: Uses libarchive directly for reading rpm archives.
    Support for indexing .deb/.ddeb archives through dpkg-deb
    or bsdtar.
    Generic archive support through -Z EXT[=CMD]. Which can be
    used for example for arch-linux pacman files by using
  - Z '.tar.zst=zstdcat'.
    Better logging using User-Agent and X-Forwarded-For headers.
    More prometheus metrics.
    Support for eliding dots or extraneous slashes in path names.
  debuginfod-find: Accept /path/names in place of buildid hex.
  libelf: Handle PN_XNUM in elf_getphdrnum before shdr 0 is cached
    Ensure zlib resource cleanup on failure.
  libdwfl: dwfl_linux_kernel_find_elf and dwfl_linux_kernel_report_offline
    now find and handle a compressed vmlinuz image.
  readelf, elflint: Handle PT_GNU_PROPERTY.
  translations: Updated Ukrainian translation.</changelog>
  <changelog author="mliska@suse.cz" date="1591876800">- Update to version 0.180:
  elflint: Allow SHF_EXCLUDE as generic section flag when --gnu is given.
  libdw, readelf: Handle GCC LTO .gnu.debuglto_ prefix.
  libdw: Use correct CU to resolve file names in dwarf_decl_file.
  libdwfl: Handle debugaltlink in dwfl_standard_find_debuginfo.
  size: Also obey radix printing for bsd format.
  nm: Explicitly print weak 'V' or 'T' and common 'C' symbols.
- Add 0001-tests-Add-GCOV-flags-when-necessary.patch in order to fix
  an unresolved symbol.
- Enable LTO: boo#1138796 by adding -flto-partition=none and -Wno-error=stack-usage.</changelog>
  <changelog author="mliska@suse.cz" date="1592222400">- Remove remove-run-large-elf-file.sh.patch as it now checks for memory
  size.
- Use autosetup.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1599566400">- Update to version 0.181:
  libelf: elf_update now compensates (fixes up) a bad sh_addralign for
    SHF_COMPRESSED sections.
  libdebuginfod: configure now takes --enable-libdebuginfod=dummy or
  - -disable-libdebuginfod for bootstrapping.
    DEBUGINFOD_URLS now accepts "scheme-free" urls
    (guessing at what the user meant, either http:// or file://)
  readelf, elflint: Handle aarch64 bti, pac bits in dynamic table and gnu
    property notes.
  libdw, readelf: Recognize DW_CFA_AARCH64_negate_ra_state. Allows unwinding
    on arm64 for code that is compiled for PAC (Pointer
    Authentication Code) as long as it isn't enabled
- Drop upstream patch:
  * 0001-tests-Add-GCOV-flags-when-necessary.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1600171200">- Disable LTO again - boo#1138796
  Adding -flto-partition=none and -Wno-error=stack-usage were
  not enough:
    [  123s] libasm-devel.x86_64: E: lto-no-text-in-archive (Badness: 10000) /usr/lib64/libasm.a
    [  123s] libdw-devel.x86_64: E: lto-no-text-in-archive (Badness: 10000) /usr/lib64/libdw.a
    [  123s] libelf-devel.x86_64: E: lto-no-text-in-archive (Badness: 10000) /usr/lib64/libelf.a
    [  123s] This archive does not contain a non-empty .text section.  The archive was not
    [  123s] created with -ffat-lto-objects option.
  And adding -ffat-lto-objects breaks run-show-die-info.sh test.</changelog>
  <changelog author="mliska@suse.cz" date="1600776000">- Add Conflicts for dummy packages.</changelog>
  <changelog author="mliska@suse.cz" date="1604577600">- Add new /etc/profile.d/debuginfod.{,c}sh files.
- Update to version 0.182:
  backends: Support for tilegx has been removed.
  config: New /etc/profile.d files to provide default $DEBUGINFOD_URLS.
  debuginfod: More efficient package traversal, tolerate various errors
    during scanning, grooming progress is more visible and
    interruptible, more prometheus metrics.
  debuginfod-client: Now supports compressed (kernel) ELF images.
  libdwfl: Add ZSTD compression support.</changelog>
  <changelog author="mliska@suse.cz" date="1607601600">- Move profile files to libdebuginfod1 sub-package.
- Silent 2 rpmlint issues.</changelog>
  <changelog author="mliska@suse.cz" date="1609761600">- Add upstream config-do-not-define-DEBUGINFOD_URLS-environment-var.patch
  in order to fix boo#1180306.</changelog>
  <changelog author="mliska@suse.cz" date="1612785600">- Update to version 0.183:
  debuginfod: New thread-busy metric and more detailed error metrics.
    New --fdcache-mintmp and tracking of filesystem freespace.
    New increased webapi concurrency while grooming.
  debuginfod-client: DEBUGINFOD_SONAME macro added to debuginfod.h which
    can be used to dlopen the libdebuginfod.so library.
    New function debuginfod_set_verbose_fd and
    DEBUGINFOD_VERBOSE environment variable.
  config: profile.sh and profile.csh won't export DEBUGINFOD_URLS unless
    configured --enable-debuginfod-urls[=URLS]
  elflint, readelf: Recognize SHF_GNU_RETAIN.
    Handle SHT_X86_64_UNWIND as valid relocation target.
- Remove config-do-not-define-DEBUGINFOD_URLS-environment-var.patch patch.</changelog>
  <changelog author="mliska@suse.cz" date="1615896000">- Enable https://debuginfod.opensuse.org/ debuginfod server
  by default now.
- Add disable-run-readelf-self-test.patch in order to disable
  a failing test-case with GCC 11 (PR27367).</changelog>
  <changelog author="mliska@suse.cz" date="1620648000">- Update to version 0.184:
  debuginfod: Use libarchive's bsdtar as the .deb-family file unpacker.
  debuginfod-client: Client caches negative results. If a query for a
    file failed with 404, an empty 000 permission
    file is created in the cache. This will prevent
    requesting the same file for the next 10 minutes.
    Client objects now carry long-lived curl handles
    for outgoing connections.  This makes it more
    efficient for multiple sequential queries, because
    the TCP connections and/or TLS state info are kept
    around awhile, avoiding O(100ms) setup latencies.
  libdw: handle DW_FORM_indirect when reading attributes
  translations: Update Polish translation.
- Add 2 build dependences for tests.</changelog>
  <changelog author="mliska@suse.cz" date="1621857600">- Update to version 0.185:
  debuginfod-client: Simplify curl handle reuse so downloads which
    return an error are retried.
  elfcompress: Always exit with code 0 when the operation succeeds (even
    when nothing was done). On error the exit code is now always 1.</changelog>
  <changelog author="jcheung@suse.com" date="1626004800">- For version 0.185, the below patches are no longer needed
  (jsc#SLE-17288, jsc#SLE-17951)
  libdw-check-end-of-attributes-list-consistently.patch
  elflint-dont-check-section-group-without-flags-word.patch
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
  elfutils-dont-trust-sh_entsize.patch
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
  size-handle-recursive-elf-ar-files.patch
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
  use-the-empty-string-for-note-names-with-zero-size.patch
  readelf-fix-off-by-one-sanity-check.patch
  libebl-check-NT_PLATFORM-core-notes.patch
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
  libelf-check-compression-before-allocate-output-buffer.patch
  libdwfl-sanity-check-partial-core-file-data-reads.patch
  arlib-check-that-sh_entsize-isnt-zero.patch</changelog>
  <changelog author="martin.liska@suse.com" date="1628251200">- Add disable-run-deleted-test.patch in order to disable
  failing test-case (boo#1189153).</changelog>
  <changelog author="martin.liska@suse.com" date="1633953600">- Enhance license fields: all the libraries actually have a different
  license to the tools. While the tools are GPL-3.0-or-later, the
  libraries are (LGPL-3.0-or-later OR GPL-2.0-or-later)
  SLE bug (for tracking the above) bsc#1191310</changelog>
  <changelog author="tonyj@suse.com" date="1645790400">- Add support for zstd, needed to inspect kernel modules (bsc#1196510)</changelog>
  <changelog author="martin.liska@suse.com" date="1655726400">- Add missing Requires for devel package.</changelog>
  <changelog author="martin.liska@suse.com" date="1656331200">- Set --enable-debuginfod-urls only for TW.</changelog>
  <changelog author="matz@suse.com" date="1761134400">- Add elfutils-fix-large-alignment.diff and elfutils-pr28190.diff
  to fix build/testsuite for more recent glibc and kernels.
- Add elfutils-fuzz-1.diff, elfutils-fuzz-2.diff,
  elfutils-fuzz-3.diff, elfutils-fuzz-4.diff [bsc#1237236,
  bsc#1237240, bsc#1237241, bsc#1237242].
- Add elfutils-fix-debuginfod-groom-race.diff to fix a testsuite
  race in run-debuginfod-find.sh.</changelog>
</package>
<package pkgid="24dcc5f0da7d519ca8ddf615187edb358d5d478962638cdc017ff0fcfa3698f5" name="libdevmapper-event1_03" arch="x86_64">
  <version epoch="0" ver="2.03.24_1.02.198" rel="150700.7.3.3"/>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6339)
  * 2.03.22:
  * Fix pv_major/pv_minor report field types so they are integers, not strings.
  * Add lvmdevices --delnotfound to delete entries for missing devices.
  * Always use cachepool name for metadata backup LV for lvconvert --repair.
  * Make metadata backup LVs read-only after pool's lvconvert --repair.
  * Handle 'lvextend --usepolicies' for pools for all activation variants.
  * Fix memleak in vgchange autoactivation setup.
  * Support conversion from thick to fully provisioned thin LV.
  * Cache/Thin-pool can use error and zero volumes for testing.
  * Individual thin volume can be cached, but cannot take snapshot.
  * internal support for handling error and zero target (for testing).
  * COW above trimmed maximal size is does not return error.
  * Add lvm.conf thin_restore and cache_restore settings.
  * Handle multiple mounts while resizing volume with a FS.
  * Handle leading/trailing spaces in sys_wwid and sys_serial used by deivce_id.
  * Fix failing -S|--select for non-reporting cmds if using LV info/status fields.
  * Allow snapshots of raid+integrity LV.
  * Fix multisegment RAID1 allocator to prevent using single disk for more legs.
  * 2.03.21:
  * Allow (write)cache over raid+integrity LV.
  * 2.03.20:
  * Fix segfault if using -S|--select with log/report_command_log=1 setting.
  * 2.03.19:
  * Do not reset SYSTEMD_READY variable in udev for PVs on MD and loop devices.
  * Ensure udev is processing origin LV before its thick snapshots LVs.
  * 2.03.18:
  * Fix warning for thin pool overprovisioning on lvextend.
  * Add support for writecache metadata_only and pause_writeback settings.
  * Fix missing error messages in lvmdbusd.
  * 2.03.17:
  * Add new options (--fs, --fsmode) for FS handling when resizing LVs (btrfs is unsupported).
  * Fix 'lvremove -S|--select LV' to not also remove its historical LV right away.
  * Fix lv_active field type to binary so --select and --binary applies properly.
  * Error out in lvm shell if using a cmd argument not supported in the shell.
  * Fix lvm shell's lastlog command to report previous pre-command failures.
  * Add --valuesonly option to lvmconfig to print only values without keys.
  * Add json_std output format for more JSON standard compliant version of output.
  * Fix many corner cases in device_id, including handling of S/N duplicates.
  * Fix various issues in lvmdbusd.
- device-mapper version upgrade to 1.02.196
  * Improve parallel creation of /dev/mapper/control device node.
  * Import previous ID_FS_* udev records in 13-dm-disk.rules for suspended DM dev.
  * Remove NAME="mapper/control" rule from 10-dm.rules to avoid udev warnings.
  * Improve 'dmsetup create' without given table line with new kernels.
  * Add DM_REPORT_GROUP_JSON_STD for more JSON standard compliant output format.
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
  <changelog author="heming.zhao@suse.com" date="1716724800">- Update lvm2 from LVM2.2.03.22 to LVM2.2.03.24
  * ** WHATS_NEW from 2.03.22 to 2.03.24 ***
  Version 2.03.24 - 16th May 2024
  ===============================
    Lvconvert supports VDO options for thin-pool with vdo conversion.
    Improve placement to .data.rel.ro and .rodata sections.
    Fix support for -y and -W when creating thinpool with vdo.
    Bettter support for runtime valgrind detection.
    Allow command interruption when communicating with dmeventd.
    Fix resize of VDO volume used for thin pool data volume.
    Use -Wl,-z,now and -Wl,--as-needed for compilation by default.
    Require 3.7 as minimal version for sanlock.
    Share code for closing opened desriptors on program startup.
    Fix memleak in lvmcache.
    Add configure --with-default-event-activation=ON setting.
    Fix return value from reporter function when hitting internal error.
    Skip checking of pools for lvremove and vgremove commands.
    VDO modprobes dm-vdo for 6.9 kernel and kvdo for older kernel version.
    Fix lvs reporting for VDO volumes with new upstream kernel driver.
    Don't import DM_UDEV_DISABLE_OTHER_RULES_FLAG in LVM rules, DM rules cover it.
    Fix table line generation for cache snapshots using cachevol.
    Enhance lvconvert support for external origins stacking.
    When swapping LV names also swap properties like hostname, time and data.
    Fix removal of stacked external origins.
    Lock filesystem when converting volume to read-only external origin.
    Support external origin between different thin-pool.
    Improve validation of acceptable volumes for external origins.
    Reduce amount of preloaded devices for complex device trees.
    Avoid logging problems from monitoring snapshots with inactive origins.
    Check for cache policy module presence in kernel's builtin modules file.
    Add configure --with-modulesdir to select kernel modules directory.
    Support creation of thin-pool with VDO use for its data volume.
  Version 2.03.23 - 21st November 2023
  ====================================
    Set the first lv_attr flag for raid integrity images to i or I.
    Add -A option for pvs and pvscan to show PVs outside devices file.
    Improve searched_devnames temp file usage to prevent redundant scanning.
    Change default search_for_devnames from auto to all.
    Add lvmdevices --refresh to search for missing PVIDs on all devices.
    Add comparison between old and new entries in lvmdevices --check.
    Fix device_id matching order - match non-devname first.
    Fix "lvconvert -m 0" when there is other than first in-sync leg.
    Use system.devices as default for dmeventd when dmeventd.devices is undefined.
    Accept WWIDs containing QEMU HARDDISK for device_id.
    Improve handling of non-standard WWID prefixes used for device_id.
    Configure automatically enables cmdlib for dmeventd and notify-dbus for dbus.
    Fix hint calculation for pools with zero or error segment.
    Configure supports --disable-shared to build only static binaries.
    Configure supports --without-{blkid|systemd|udev} for easier static build.
    Refresh device ids if the system changes.
    Fix pvmove when specifying raid components as moved LVs.
    Enhance error detection for lvm_import_vdo.
    Support PV lists with thin lvconvert.
    Fix support for lvm_import_vdo with SCSI VDO volumes.
    Fix locking issue leading to hanging concurrent vgchange --refresh.
    Recognize lvm.conf report/headings=2 for full column names in report headings.
    Add --headings none|abbrev|full cmd line option to set report headings type.
    Fix conversion to thin pool using lvmlockd.
    Fix conversion from thick into thin volume using lvmlockd.
    Require writable LV for conversion to vdo pool.
    Fix return value from lvconvert integrity remove.
    Preserve UUID for pool metadata spare.
    Preserve UUID for swapped pool metadata.
    Rewrite validation of device name entries used as device_id.
  * ** WHATS_NEW_DM from 1.02.196 to 1.02.198 ***
  Version 1.02.198 - 16th May 2024
  ================================
    Fix static only compilation of libdevmapper.a and dmsetup tool.
    Use better code for closing opened descriptors when starting dmeventd.
    Correct dmeventd -R for systemd environment.
    Restart of dmeventd -R checks pid file to detect running dmeventd first.
    Query with dmeventd -i quickly ends when there is no running dmeventd.
    Enhance dm_get_status_raid to handle mismatching status or reported legs.
    Create /dev/disk/by-label symlinks for DM devs that have crypto as next layer.
    Persist udev db for DM devs on cleanup used in initrd to rootfs transition.
    Process synthetic udev events other than 'add/change' as 'change' events.
    Increase DM_UDEV_RULES_VSN to 3 to indicate changed udev rules.
    Rename DM_NOSCAN to .DM_NOSCAN so it's not stored in udev db.
    Rename DM_SUSPENDED to .DM_SUSPENDED so it's not stored in udev db.
    Do not import DM_UDEV_DISABLE_OTHER_RULES_FLAG from db in 10-dm-disk.rules.
    Test DISK_RO after importing properties from db in 10-dm.rules.
    Also import ID_FS_TYPE in 13-dm-disk.rules from db if needed.
  Version 1.02.197 - 21st November 2023
  =====================================
    Fix invalid JSON report if using DM_REPORT_OUTPUT_MULTIPLE_TIMES and selection.
    Propagate ioctl errno from dm_task_run when creating new table line.
    Add support for group aliases in dmstats.
    Add support for exit-on file for dmeventd to reduce shutdown delays.
    Add configure option --with-dmeventd-exit-on-path to specify default path.
    Add dmsetup --headings none|abbrev|full to set report headings type.
    Add DM_REPORT_OUTPUT_FIELD_IDS_IN_HEADINGS to provide alternative headings.
- Drop patches that have been merged into upstream
  - 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  - 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  - 0003-lvconvert-fix-regresion-from-integrity-check.patch
  - 0004-gcc-cleanup-warnings.patch
  - 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  - 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  - 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  - 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  - 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  - 0010-lvmlockd-client-mutex-ordering.patch
  - 0011-filesystem-move-stat-after-open-check.patch
  - 0012-tests-check-for-writecache.patch
  - 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  - 0014-gcc-fix-warnings-for-x32-architecture.patch
  - 0015-gcc-warning-missing-braces-around-initializer.patch
  - 0016-test-improve-aux-teardown.patch
  - 0017-tests-aux-try-with-extra-sleep.patch
  - 0018-tests-aux-using-singl-lvmconf-call.patch
  - 0019-tests-missing-to-check-for-writecache-support.patch
  - 0020-tests-pvmove-large-disk-area.patch
  - 0021-tests-enforce-full-fs-check.patch
  - 0022-tests-update-for-work-in-fake-dev-environment.patch
  - 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  - 0024-tests-better-slowdown.patch
- Update patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch</changelog>
  <changelog author="glass.su@suse.com" date="1729771200">- add rpm dependency in spec file for aligning new DM udev rules (bsc#1225783 bsc#1229518 bsc#1232063)
  * update lvm2.spec for multipath-tools and udev</changelog>
  <changelog author="heming.zhao@suse.com" date="1740052800">- system with LVM on iSCSI hangs on shutdown because blk-availability.service is not enabled (bsc#1236788)
  * update lvm2.spec
  - remove blk-availability.service from %postun
  - add new Provides 'dont_stop_blk_availability_service'</changelog>
  <changelog author="heming.zhao@suse.com" date="1741003200">- Fixes the lvm2-testsuite failure to run on SUSE kernel (bsc#1238213)
  * Add upstream patch
    + tests-fix-wrong-pos-with-CONFIG_PRINTK_CALLER.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1741348800">- Fixes the lvm2-testsuite case fsadm-btrfs.sh (bsc#1238857)
  * Update SUSE special patch
    + fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1744718400">- LVM filter behaves unexpectedly for MPIO devices in SLES15SP5 (bsc#1216938)
  * set lvm.conf devices.multipath_wwids_file=""</changelog>
  <changelog author="glass.su@suse.com" date="1753876800">- L3: systemd fails to start lvmlockd with sanlock running (bsc#1246691)
  * Add upstream patches for sd_notify configure option
    + bug-1246691_01-configure.ac-build-lvmlockd-with-notify.patch
    + bug-1246691_02-configure-autoreconf.patch
    + bug-1246691_03-configure.ac-add-option-disable-enable-sd-notify.patch
    + bug-1246691_04-lvmlockd-utilize-SD_NOTIFY_SUPPORT.patch
    + bug-1246691_05-configure-autoreconf.patch
  * Update lvm2.spec
    + add pkgconfig(systemd) for lvmlockd build
    + enable configure option '--enable-sd-notify' for lvmlockd</changelog>
</package>
<package pkgid="37a9a6473b2223bbb87bb3a3a16a350d619d4ec5470da2dba80c3ab8993f3474" name="libdevmapper-event1_03" arch="x86_64">
  <version epoch="0" ver="2.03.24_1.02.198" rel="150700.7.6.1"/>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6339)
  * 2.03.22:
  * Fix pv_major/pv_minor report field types so they are integers, not strings.
  * Add lvmdevices --delnotfound to delete entries for missing devices.
  * Always use cachepool name for metadata backup LV for lvconvert --repair.
  * Make metadata backup LVs read-only after pool's lvconvert --repair.
  * Handle 'lvextend --usepolicies' for pools for all activation variants.
  * Fix memleak in vgchange autoactivation setup.
  * Support conversion from thick to fully provisioned thin LV.
  * Cache/Thin-pool can use error and zero volumes for testing.
  * Individual thin volume can be cached, but cannot take snapshot.
  * internal support for handling error and zero target (for testing).
  * COW above trimmed maximal size is does not return error.
  * Add lvm.conf thin_restore and cache_restore settings.
  * Handle multiple mounts while resizing volume with a FS.
  * Handle leading/trailing spaces in sys_wwid and sys_serial used by deivce_id.
  * Fix failing -S|--select for non-reporting cmds if using LV info/status fields.
  * Allow snapshots of raid+integrity LV.
  * Fix multisegment RAID1 allocator to prevent using single disk for more legs.
  * 2.03.21:
  * Allow (write)cache over raid+integrity LV.
  * 2.03.20:
  * Fix segfault if using -S|--select with log/report_command_log=1 setting.
  * 2.03.19:
  * Do not reset SYSTEMD_READY variable in udev for PVs on MD and loop devices.
  * Ensure udev is processing origin LV before its thick snapshots LVs.
  * 2.03.18:
  * Fix warning for thin pool overprovisioning on lvextend.
  * Add support for writecache metadata_only and pause_writeback settings.
  * Fix missing error messages in lvmdbusd.
  * 2.03.17:
  * Add new options (--fs, --fsmode) for FS handling when resizing LVs (btrfs is unsupported).
  * Fix 'lvremove -S|--select LV' to not also remove its historical LV right away.
  * Fix lv_active field type to binary so --select and --binary applies properly.
  * Error out in lvm shell if using a cmd argument not supported in the shell.
  * Fix lvm shell's lastlog command to report previous pre-command failures.
  * Add --valuesonly option to lvmconfig to print only values without keys.
  * Add json_std output format for more JSON standard compliant version of output.
  * Fix many corner cases in device_id, including handling of S/N duplicates.
  * Fix various issues in lvmdbusd.
- device-mapper version upgrade to 1.02.196
  * Improve parallel creation of /dev/mapper/control device node.
  * Import previous ID_FS_* udev records in 13-dm-disk.rules for suspended DM dev.
  * Remove NAME="mapper/control" rule from 10-dm.rules to avoid udev warnings.
  * Improve 'dmsetup create' without given table line with new kernels.
  * Add DM_REPORT_GROUP_JSON_STD for more JSON standard compliant output format.
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
  <changelog author="heming.zhao@suse.com" date="1716724800">- Update lvm2 from LVM2.2.03.22 to LVM2.2.03.24
  * ** WHATS_NEW from 2.03.22 to 2.03.24 ***
  Version 2.03.24 - 16th May 2024
  ===============================
    Lvconvert supports VDO options for thin-pool with vdo conversion.
    Improve placement to .data.rel.ro and .rodata sections.
    Fix support for -y and -W when creating thinpool with vdo.
    Bettter support for runtime valgrind detection.
    Allow command interruption when communicating with dmeventd.
    Fix resize of VDO volume used for thin pool data volume.
    Use -Wl,-z,now and -Wl,--as-needed for compilation by default.
    Require 3.7 as minimal version for sanlock.
    Share code for closing opened desriptors on program startup.
    Fix memleak in lvmcache.
    Add configure --with-default-event-activation=ON setting.
    Fix return value from reporter function when hitting internal error.
    Skip checking of pools for lvremove and vgremove commands.
    VDO modprobes dm-vdo for 6.9 kernel and kvdo for older kernel version.
    Fix lvs reporting for VDO volumes with new upstream kernel driver.
    Don't import DM_UDEV_DISABLE_OTHER_RULES_FLAG in LVM rules, DM rules cover it.
    Fix table line generation for cache snapshots using cachevol.
    Enhance lvconvert support for external origins stacking.
    When swapping LV names also swap properties like hostname, time and data.
    Fix removal of stacked external origins.
    Lock filesystem when converting volume to read-only external origin.
    Support external origin between different thin-pool.
    Improve validation of acceptable volumes for external origins.
    Reduce amount of preloaded devices for complex device trees.
    Avoid logging problems from monitoring snapshots with inactive origins.
    Check for cache policy module presence in kernel's builtin modules file.
    Add configure --with-modulesdir to select kernel modules directory.
    Support creation of thin-pool with VDO use for its data volume.
  Version 2.03.23 - 21st November 2023
  ====================================
    Set the first lv_attr flag for raid integrity images to i or I.
    Add -A option for pvs and pvscan to show PVs outside devices file.
    Improve searched_devnames temp file usage to prevent redundant scanning.
    Change default search_for_devnames from auto to all.
    Add lvmdevices --refresh to search for missing PVIDs on all devices.
    Add comparison between old and new entries in lvmdevices --check.
    Fix device_id matching order - match non-devname first.
    Fix "lvconvert -m 0" when there is other than first in-sync leg.
    Use system.devices as default for dmeventd when dmeventd.devices is undefined.
    Accept WWIDs containing QEMU HARDDISK for device_id.
    Improve handling of non-standard WWID prefixes used for device_id.
    Configure automatically enables cmdlib for dmeventd and notify-dbus for dbus.
    Fix hint calculation for pools with zero or error segment.
    Configure supports --disable-shared to build only static binaries.
    Configure supports --without-{blkid|systemd|udev} for easier static build.
    Refresh device ids if the system changes.
    Fix pvmove when specifying raid components as moved LVs.
    Enhance error detection for lvm_import_vdo.
    Support PV lists with thin lvconvert.
    Fix support for lvm_import_vdo with SCSI VDO volumes.
    Fix locking issue leading to hanging concurrent vgchange --refresh.
    Recognize lvm.conf report/headings=2 for full column names in report headings.
    Add --headings none|abbrev|full cmd line option to set report headings type.
    Fix conversion to thin pool using lvmlockd.
    Fix conversion from thick into thin volume using lvmlockd.
    Require writable LV for conversion to vdo pool.
    Fix return value from lvconvert integrity remove.
    Preserve UUID for pool metadata spare.
    Preserve UUID for swapped pool metadata.
    Rewrite validation of device name entries used as device_id.
  * ** WHATS_NEW_DM from 1.02.196 to 1.02.198 ***
  Version 1.02.198 - 16th May 2024
  ================================
    Fix static only compilation of libdevmapper.a and dmsetup tool.
    Use better code for closing opened descriptors when starting dmeventd.
    Correct dmeventd -R for systemd environment.
    Restart of dmeventd -R checks pid file to detect running dmeventd first.
    Query with dmeventd -i quickly ends when there is no running dmeventd.
    Enhance dm_get_status_raid to handle mismatching status or reported legs.
    Create /dev/disk/by-label symlinks for DM devs that have crypto as next layer.
    Persist udev db for DM devs on cleanup used in initrd to rootfs transition.
    Process synthetic udev events other than 'add/change' as 'change' events.
    Increase DM_UDEV_RULES_VSN to 3 to indicate changed udev rules.
    Rename DM_NOSCAN to .DM_NOSCAN so it's not stored in udev db.
    Rename DM_SUSPENDED to .DM_SUSPENDED so it's not stored in udev db.
    Do not import DM_UDEV_DISABLE_OTHER_RULES_FLAG from db in 10-dm-disk.rules.
    Test DISK_RO after importing properties from db in 10-dm.rules.
    Also import ID_FS_TYPE in 13-dm-disk.rules from db if needed.
  Version 1.02.197 - 21st November 2023
  =====================================
    Fix invalid JSON report if using DM_REPORT_OUTPUT_MULTIPLE_TIMES and selection.
    Propagate ioctl errno from dm_task_run when creating new table line.
    Add support for group aliases in dmstats.
    Add support for exit-on file for dmeventd to reduce shutdown delays.
    Add configure option --with-dmeventd-exit-on-path to specify default path.
    Add dmsetup --headings none|abbrev|full to set report headings type.
    Add DM_REPORT_OUTPUT_FIELD_IDS_IN_HEADINGS to provide alternative headings.
- Drop patches that have been merged into upstream
  - 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  - 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  - 0003-lvconvert-fix-regresion-from-integrity-check.patch
  - 0004-gcc-cleanup-warnings.patch
  - 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  - 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  - 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  - 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  - 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  - 0010-lvmlockd-client-mutex-ordering.patch
  - 0011-filesystem-move-stat-after-open-check.patch
  - 0012-tests-check-for-writecache.patch
  - 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  - 0014-gcc-fix-warnings-for-x32-architecture.patch
  - 0015-gcc-warning-missing-braces-around-initializer.patch
  - 0016-test-improve-aux-teardown.patch
  - 0017-tests-aux-try-with-extra-sleep.patch
  - 0018-tests-aux-using-singl-lvmconf-call.patch
  - 0019-tests-missing-to-check-for-writecache-support.patch
  - 0020-tests-pvmove-large-disk-area.patch
  - 0021-tests-enforce-full-fs-check.patch
  - 0022-tests-update-for-work-in-fake-dev-environment.patch
  - 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  - 0024-tests-better-slowdown.patch
- Update patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch</changelog>
  <changelog author="glass.su@suse.com" date="1729771200">- add rpm dependency in spec file for aligning new DM udev rules (bsc#1225783 bsc#1229518 bsc#1232063)
  * update lvm2.spec for multipath-tools and udev</changelog>
  <changelog author="heming.zhao@suse.com" date="1740052800">- system with LVM on iSCSI hangs on shutdown because blk-availability.service is not enabled (bsc#1236788)
  * update lvm2.spec
  - remove blk-availability.service from %postun
  - add new Provides 'dont_stop_blk_availability_service'</changelog>
  <changelog author="heming.zhao@suse.com" date="1741003200">- Fixes the lvm2-testsuite failure to run on SUSE kernel (bsc#1238213)
  * Add upstream patch
    + tests-fix-wrong-pos-with-CONFIG_PRINTK_CALLER.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1741348800">- Fixes the lvm2-testsuite case fsadm-btrfs.sh (bsc#1238857)
  * Update SUSE special patch
    + fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1744718400">- LVM filter behaves unexpectedly for MPIO devices in SLES15SP5 (bsc#1216938)
  * set lvm.conf devices.multipath_wwids_file=""</changelog>
  <changelog author="glass.su@suse.com" date="1753876800">- L3: systemd fails to start lvmlockd with sanlock running (bsc#1246691)
  * Add upstream patches for sd_notify configure option
    + bug-1246691_01-configure.ac-build-lvmlockd-with-notify.patch
    + bug-1246691_02-configure-autoreconf.patch
    + bug-1246691_03-configure.ac-add-option-disable-enable-sd-notify.patch
    + bug-1246691_04-lvmlockd-utilize-SD_NOTIFY_SUPPORT.patch
    + bug-1246691_05-configure-autoreconf.patch
  * Update lvm2.spec
    + add pkgconfig(systemd) for lvmlockd build
    + enable configure option '--enable-sd-notify' for lvmlockd</changelog>
  <changelog author="glass.su@suse.com" date="1770724800">- L3: LVM_SUPPRESS_FD_WARNINGS is no longer effective (bsc#1257661)
  * Add upstream patch
    + bug-1257661-libdaemon-fix-suppressing-stray-fd-warnings.patch</changelog>
</package>
<package pkgid="20e04b68abd5bc3fc798f086972c3def05941efbe235def08017a567f324ccb1" name="libdevmapper1_03" arch="x86_64">
  <version epoch="0" ver="2.03.24_1.02.198" rel="150700.7.3.3"/>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6339)
  * 2.03.22:
  * Fix pv_major/pv_minor report field types so they are integers, not strings.
  * Add lvmdevices --delnotfound to delete entries for missing devices.
  * Always use cachepool name for metadata backup LV for lvconvert --repair.
  * Make metadata backup LVs read-only after pool's lvconvert --repair.
  * Handle 'lvextend --usepolicies' for pools for all activation variants.
  * Fix memleak in vgchange autoactivation setup.
  * Support conversion from thick to fully provisioned thin LV.
  * Cache/Thin-pool can use error and zero volumes for testing.
  * Individual thin volume can be cached, but cannot take snapshot.
  * internal support for handling error and zero target (for testing).
  * COW above trimmed maximal size is does not return error.
  * Add lvm.conf thin_restore and cache_restore settings.
  * Handle multiple mounts while resizing volume with a FS.
  * Handle leading/trailing spaces in sys_wwid and sys_serial used by deivce_id.
  * Fix failing -S|--select for non-reporting cmds if using LV info/status fields.
  * Allow snapshots of raid+integrity LV.
  * Fix multisegment RAID1 allocator to prevent using single disk for more legs.
  * 2.03.21:
  * Allow (write)cache over raid+integrity LV.
  * 2.03.20:
  * Fix segfault if using -S|--select with log/report_command_log=1 setting.
  * 2.03.19:
  * Do not reset SYSTEMD_READY variable in udev for PVs on MD and loop devices.
  * Ensure udev is processing origin LV before its thick snapshots LVs.
  * 2.03.18:
  * Fix warning for thin pool overprovisioning on lvextend.
  * Add support for writecache metadata_only and pause_writeback settings.
  * Fix missing error messages in lvmdbusd.
  * 2.03.17:
  * Add new options (--fs, --fsmode) for FS handling when resizing LVs (btrfs is unsupported).
  * Fix 'lvremove -S|--select LV' to not also remove its historical LV right away.
  * Fix lv_active field type to binary so --select and --binary applies properly.
  * Error out in lvm shell if using a cmd argument not supported in the shell.
  * Fix lvm shell's lastlog command to report previous pre-command failures.
  * Add --valuesonly option to lvmconfig to print only values without keys.
  * Add json_std output format for more JSON standard compliant version of output.
  * Fix many corner cases in device_id, including handling of S/N duplicates.
  * Fix various issues in lvmdbusd.
- device-mapper version upgrade to 1.02.196
  * Improve parallel creation of /dev/mapper/control device node.
  * Import previous ID_FS_* udev records in 13-dm-disk.rules for suspended DM dev.
  * Remove NAME="mapper/control" rule from 10-dm.rules to avoid udev warnings.
  * Improve 'dmsetup create' without given table line with new kernels.
  * Add DM_REPORT_GROUP_JSON_STD for more JSON standard compliant output format.
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
  <changelog author="heming.zhao@suse.com" date="1716724800">- Update lvm2 from LVM2.2.03.22 to LVM2.2.03.24
  * ** WHATS_NEW from 2.03.22 to 2.03.24 ***
  Version 2.03.24 - 16th May 2024
  ===============================
    Lvconvert supports VDO options for thin-pool with vdo conversion.
    Improve placement to .data.rel.ro and .rodata sections.
    Fix support for -y and -W when creating thinpool with vdo.
    Bettter support for runtime valgrind detection.
    Allow command interruption when communicating with dmeventd.
    Fix resize of VDO volume used for thin pool data volume.
    Use -Wl,-z,now and -Wl,--as-needed for compilation by default.
    Require 3.7 as minimal version for sanlock.
    Share code for closing opened desriptors on program startup.
    Fix memleak in lvmcache.
    Add configure --with-default-event-activation=ON setting.
    Fix return value from reporter function when hitting internal error.
    Skip checking of pools for lvremove and vgremove commands.
    VDO modprobes dm-vdo for 6.9 kernel and kvdo for older kernel version.
    Fix lvs reporting for VDO volumes with new upstream kernel driver.
    Don't import DM_UDEV_DISABLE_OTHER_RULES_FLAG in LVM rules, DM rules cover it.
    Fix table line generation for cache snapshots using cachevol.
    Enhance lvconvert support for external origins stacking.
    When swapping LV names also swap properties like hostname, time and data.
    Fix removal of stacked external origins.
    Lock filesystem when converting volume to read-only external origin.
    Support external origin between different thin-pool.
    Improve validation of acceptable volumes for external origins.
    Reduce amount of preloaded devices for complex device trees.
    Avoid logging problems from monitoring snapshots with inactive origins.
    Check for cache policy module presence in kernel's builtin modules file.
    Add configure --with-modulesdir to select kernel modules directory.
    Support creation of thin-pool with VDO use for its data volume.
  Version 2.03.23 - 21st November 2023
  ====================================
    Set the first lv_attr flag for raid integrity images to i or I.
    Add -A option for pvs and pvscan to show PVs outside devices file.
    Improve searched_devnames temp file usage to prevent redundant scanning.
    Change default search_for_devnames from auto to all.
    Add lvmdevices --refresh to search for missing PVIDs on all devices.
    Add comparison between old and new entries in lvmdevices --check.
    Fix device_id matching order - match non-devname first.
    Fix "lvconvert -m 0" when there is other than first in-sync leg.
    Use system.devices as default for dmeventd when dmeventd.devices is undefined.
    Accept WWIDs containing QEMU HARDDISK for device_id.
    Improve handling of non-standard WWID prefixes used for device_id.
    Configure automatically enables cmdlib for dmeventd and notify-dbus for dbus.
    Fix hint calculation for pools with zero or error segment.
    Configure supports --disable-shared to build only static binaries.
    Configure supports --without-{blkid|systemd|udev} for easier static build.
    Refresh device ids if the system changes.
    Fix pvmove when specifying raid components as moved LVs.
    Enhance error detection for lvm_import_vdo.
    Support PV lists with thin lvconvert.
    Fix support for lvm_import_vdo with SCSI VDO volumes.
    Fix locking issue leading to hanging concurrent vgchange --refresh.
    Recognize lvm.conf report/headings=2 for full column names in report headings.
    Add --headings none|abbrev|full cmd line option to set report headings type.
    Fix conversion to thin pool using lvmlockd.
    Fix conversion from thick into thin volume using lvmlockd.
    Require writable LV for conversion to vdo pool.
    Fix return value from lvconvert integrity remove.
    Preserve UUID for pool metadata spare.
    Preserve UUID for swapped pool metadata.
    Rewrite validation of device name entries used as device_id.
  * ** WHATS_NEW_DM from 1.02.196 to 1.02.198 ***
  Version 1.02.198 - 16th May 2024
  ================================
    Fix static only compilation of libdevmapper.a and dmsetup tool.
    Use better code for closing opened descriptors when starting dmeventd.
    Correct dmeventd -R for systemd environment.
    Restart of dmeventd -R checks pid file to detect running dmeventd first.
    Query with dmeventd -i quickly ends when there is no running dmeventd.
    Enhance dm_get_status_raid to handle mismatching status or reported legs.
    Create /dev/disk/by-label symlinks for DM devs that have crypto as next layer.
    Persist udev db for DM devs on cleanup used in initrd to rootfs transition.
    Process synthetic udev events other than 'add/change' as 'change' events.
    Increase DM_UDEV_RULES_VSN to 3 to indicate changed udev rules.
    Rename DM_NOSCAN to .DM_NOSCAN so it's not stored in udev db.
    Rename DM_SUSPENDED to .DM_SUSPENDED so it's not stored in udev db.
    Do not import DM_UDEV_DISABLE_OTHER_RULES_FLAG from db in 10-dm-disk.rules.
    Test DISK_RO after importing properties from db in 10-dm.rules.
    Also import ID_FS_TYPE in 13-dm-disk.rules from db if needed.
  Version 1.02.197 - 21st November 2023
  =====================================
    Fix invalid JSON report if using DM_REPORT_OUTPUT_MULTIPLE_TIMES and selection.
    Propagate ioctl errno from dm_task_run when creating new table line.
    Add support for group aliases in dmstats.
    Add support for exit-on file for dmeventd to reduce shutdown delays.
    Add configure option --with-dmeventd-exit-on-path to specify default path.
    Add dmsetup --headings none|abbrev|full to set report headings type.
    Add DM_REPORT_OUTPUT_FIELD_IDS_IN_HEADINGS to provide alternative headings.
- Drop patches that have been merged into upstream
  - 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  - 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  - 0003-lvconvert-fix-regresion-from-integrity-check.patch
  - 0004-gcc-cleanup-warnings.patch
  - 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  - 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  - 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  - 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  - 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  - 0010-lvmlockd-client-mutex-ordering.patch
  - 0011-filesystem-move-stat-after-open-check.patch
  - 0012-tests-check-for-writecache.patch
  - 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  - 0014-gcc-fix-warnings-for-x32-architecture.patch
  - 0015-gcc-warning-missing-braces-around-initializer.patch
  - 0016-test-improve-aux-teardown.patch
  - 0017-tests-aux-try-with-extra-sleep.patch
  - 0018-tests-aux-using-singl-lvmconf-call.patch
  - 0019-tests-missing-to-check-for-writecache-support.patch
  - 0020-tests-pvmove-large-disk-area.patch
  - 0021-tests-enforce-full-fs-check.patch
  - 0022-tests-update-for-work-in-fake-dev-environment.patch
  - 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  - 0024-tests-better-slowdown.patch
- Update patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch</changelog>
  <changelog author="glass.su@suse.com" date="1729771200">- add rpm dependency in spec file for aligning new DM udev rules (bsc#1225783 bsc#1229518 bsc#1232063)
  * update lvm2.spec for multipath-tools and udev</changelog>
  <changelog author="heming.zhao@suse.com" date="1740052800">- system with LVM on iSCSI hangs on shutdown because blk-availability.service is not enabled (bsc#1236788)
  * update lvm2.spec
  - remove blk-availability.service from %postun
  - add new Provides 'dont_stop_blk_availability_service'</changelog>
  <changelog author="heming.zhao@suse.com" date="1741003200">- Fixes the lvm2-testsuite failure to run on SUSE kernel (bsc#1238213)
  * Add upstream patch
    + tests-fix-wrong-pos-with-CONFIG_PRINTK_CALLER.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1741348800">- Fixes the lvm2-testsuite case fsadm-btrfs.sh (bsc#1238857)
  * Update SUSE special patch
    + fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1744718400">- LVM filter behaves unexpectedly for MPIO devices in SLES15SP5 (bsc#1216938)
  * set lvm.conf devices.multipath_wwids_file=""</changelog>
  <changelog author="glass.su@suse.com" date="1753876800">- L3: systemd fails to start lvmlockd with sanlock running (bsc#1246691)
  * Add upstream patches for sd_notify configure option
    + bug-1246691_01-configure.ac-build-lvmlockd-with-notify.patch
    + bug-1246691_02-configure-autoreconf.patch
    + bug-1246691_03-configure.ac-add-option-disable-enable-sd-notify.patch
    + bug-1246691_04-lvmlockd-utilize-SD_NOTIFY_SUPPORT.patch
    + bug-1246691_05-configure-autoreconf.patch
  * Update lvm2.spec
    + add pkgconfig(systemd) for lvmlockd build
    + enable configure option '--enable-sd-notify' for lvmlockd</changelog>
</package>
<package pkgid="b43d2124dbfd7b63f7d73b156c6ab6dbff37aa6c334e2b1260db7c12678d9ec3" name="libdevmapper1_03" arch="x86_64">
  <version epoch="0" ver="2.03.24_1.02.198" rel="150700.7.6.1"/>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6339)
  * 2.03.22:
  * Fix pv_major/pv_minor report field types so they are integers, not strings.
  * Add lvmdevices --delnotfound to delete entries for missing devices.
  * Always use cachepool name for metadata backup LV for lvconvert --repair.
  * Make metadata backup LVs read-only after pool's lvconvert --repair.
  * Handle 'lvextend --usepolicies' for pools for all activation variants.
  * Fix memleak in vgchange autoactivation setup.
  * Support conversion from thick to fully provisioned thin LV.
  * Cache/Thin-pool can use error and zero volumes for testing.
  * Individual thin volume can be cached, but cannot take snapshot.
  * internal support for handling error and zero target (for testing).
  * COW above trimmed maximal size is does not return error.
  * Add lvm.conf thin_restore and cache_restore settings.
  * Handle multiple mounts while resizing volume with a FS.
  * Handle leading/trailing spaces in sys_wwid and sys_serial used by deivce_id.
  * Fix failing -S|--select for non-reporting cmds if using LV info/status fields.
  * Allow snapshots of raid+integrity LV.
  * Fix multisegment RAID1 allocator to prevent using single disk for more legs.
  * 2.03.21:
  * Allow (write)cache over raid+integrity LV.
  * 2.03.20:
  * Fix segfault if using -S|--select with log/report_command_log=1 setting.
  * 2.03.19:
  * Do not reset SYSTEMD_READY variable in udev for PVs on MD and loop devices.
  * Ensure udev is processing origin LV before its thick snapshots LVs.
  * 2.03.18:
  * Fix warning for thin pool overprovisioning on lvextend.
  * Add support for writecache metadata_only and pause_writeback settings.
  * Fix missing error messages in lvmdbusd.
  * 2.03.17:
  * Add new options (--fs, --fsmode) for FS handling when resizing LVs (btrfs is unsupported).
  * Fix 'lvremove -S|--select LV' to not also remove its historical LV right away.
  * Fix lv_active field type to binary so --select and --binary applies properly.
  * Error out in lvm shell if using a cmd argument not supported in the shell.
  * Fix lvm shell's lastlog command to report previous pre-command failures.
  * Add --valuesonly option to lvmconfig to print only values without keys.
  * Add json_std output format for more JSON standard compliant version of output.
  * Fix many corner cases in device_id, including handling of S/N duplicates.
  * Fix various issues in lvmdbusd.
- device-mapper version upgrade to 1.02.196
  * Improve parallel creation of /dev/mapper/control device node.
  * Import previous ID_FS_* udev records in 13-dm-disk.rules for suspended DM dev.
  * Remove NAME="mapper/control" rule from 10-dm.rules to avoid udev warnings.
  * Improve 'dmsetup create' without given table line with new kernels.
  * Add DM_REPORT_GROUP_JSON_STD for more JSON standard compliant output format.
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
  <changelog author="heming.zhao@suse.com" date="1716724800">- Update lvm2 from LVM2.2.03.22 to LVM2.2.03.24
  * ** WHATS_NEW from 2.03.22 to 2.03.24 ***
  Version 2.03.24 - 16th May 2024
  ===============================
    Lvconvert supports VDO options for thin-pool with vdo conversion.
    Improve placement to .data.rel.ro and .rodata sections.
    Fix support for -y and -W when creating thinpool with vdo.
    Bettter support for runtime valgrind detection.
    Allow command interruption when communicating with dmeventd.
    Fix resize of VDO volume used for thin pool data volume.
    Use -Wl,-z,now and -Wl,--as-needed for compilation by default.
    Require 3.7 as minimal version for sanlock.
    Share code for closing opened desriptors on program startup.
    Fix memleak in lvmcache.
    Add configure --with-default-event-activation=ON setting.
    Fix return value from reporter function when hitting internal error.
    Skip checking of pools for lvremove and vgremove commands.
    VDO modprobes dm-vdo for 6.9 kernel and kvdo for older kernel version.
    Fix lvs reporting for VDO volumes with new upstream kernel driver.
    Don't import DM_UDEV_DISABLE_OTHER_RULES_FLAG in LVM rules, DM rules cover it.
    Fix table line generation for cache snapshots using cachevol.
    Enhance lvconvert support for external origins stacking.
    When swapping LV names also swap properties like hostname, time and data.
    Fix removal of stacked external origins.
    Lock filesystem when converting volume to read-only external origin.
    Support external origin between different thin-pool.
    Improve validation of acceptable volumes for external origins.
    Reduce amount of preloaded devices for complex device trees.
    Avoid logging problems from monitoring snapshots with inactive origins.
    Check for cache policy module presence in kernel's builtin modules file.
    Add configure --with-modulesdir to select kernel modules directory.
    Support creation of thin-pool with VDO use for its data volume.
  Version 2.03.23 - 21st November 2023
  ====================================
    Set the first lv_attr flag for raid integrity images to i or I.
    Add -A option for pvs and pvscan to show PVs outside devices file.
    Improve searched_devnames temp file usage to prevent redundant scanning.
    Change default search_for_devnames from auto to all.
    Add lvmdevices --refresh to search for missing PVIDs on all devices.
    Add comparison between old and new entries in lvmdevices --check.
    Fix device_id matching order - match non-devname first.
    Fix "lvconvert -m 0" when there is other than first in-sync leg.
    Use system.devices as default for dmeventd when dmeventd.devices is undefined.
    Accept WWIDs containing QEMU HARDDISK for device_id.
    Improve handling of non-standard WWID prefixes used for device_id.
    Configure automatically enables cmdlib for dmeventd and notify-dbus for dbus.
    Fix hint calculation for pools with zero or error segment.
    Configure supports --disable-shared to build only static binaries.
    Configure supports --without-{blkid|systemd|udev} for easier static build.
    Refresh device ids if the system changes.
    Fix pvmove when specifying raid components as moved LVs.
    Enhance error detection for lvm_import_vdo.
    Support PV lists with thin lvconvert.
    Fix support for lvm_import_vdo with SCSI VDO volumes.
    Fix locking issue leading to hanging concurrent vgchange --refresh.
    Recognize lvm.conf report/headings=2 for full column names in report headings.
    Add --headings none|abbrev|full cmd line option to set report headings type.
    Fix conversion to thin pool using lvmlockd.
    Fix conversion from thick into thin volume using lvmlockd.
    Require writable LV for conversion to vdo pool.
    Fix return value from lvconvert integrity remove.
    Preserve UUID for pool metadata spare.
    Preserve UUID for swapped pool metadata.
    Rewrite validation of device name entries used as device_id.
  * ** WHATS_NEW_DM from 1.02.196 to 1.02.198 ***
  Version 1.02.198 - 16th May 2024
  ================================
    Fix static only compilation of libdevmapper.a and dmsetup tool.
    Use better code for closing opened descriptors when starting dmeventd.
    Correct dmeventd -R for systemd environment.
    Restart of dmeventd -R checks pid file to detect running dmeventd first.
    Query with dmeventd -i quickly ends when there is no running dmeventd.
    Enhance dm_get_status_raid to handle mismatching status or reported legs.
    Create /dev/disk/by-label symlinks for DM devs that have crypto as next layer.
    Persist udev db for DM devs on cleanup used in initrd to rootfs transition.
    Process synthetic udev events other than 'add/change' as 'change' events.
    Increase DM_UDEV_RULES_VSN to 3 to indicate changed udev rules.
    Rename DM_NOSCAN to .DM_NOSCAN so it's not stored in udev db.
    Rename DM_SUSPENDED to .DM_SUSPENDED so it's not stored in udev db.
    Do not import DM_UDEV_DISABLE_OTHER_RULES_FLAG from db in 10-dm-disk.rules.
    Test DISK_RO after importing properties from db in 10-dm.rules.
    Also import ID_FS_TYPE in 13-dm-disk.rules from db if needed.
  Version 1.02.197 - 21st November 2023
  =====================================
    Fix invalid JSON report if using DM_REPORT_OUTPUT_MULTIPLE_TIMES and selection.
    Propagate ioctl errno from dm_task_run when creating new table line.
    Add support for group aliases in dmstats.
    Add support for exit-on file for dmeventd to reduce shutdown delays.
    Add configure option --with-dmeventd-exit-on-path to specify default path.
    Add dmsetup --headings none|abbrev|full to set report headings type.
    Add DM_REPORT_OUTPUT_FIELD_IDS_IN_HEADINGS to provide alternative headings.
- Drop patches that have been merged into upstream
  - 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  - 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  - 0003-lvconvert-fix-regresion-from-integrity-check.patch
  - 0004-gcc-cleanup-warnings.patch
  - 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  - 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  - 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  - 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  - 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  - 0010-lvmlockd-client-mutex-ordering.patch
  - 0011-filesystem-move-stat-after-open-check.patch
  - 0012-tests-check-for-writecache.patch
  - 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  - 0014-gcc-fix-warnings-for-x32-architecture.patch
  - 0015-gcc-warning-missing-braces-around-initializer.patch
  - 0016-test-improve-aux-teardown.patch
  - 0017-tests-aux-try-with-extra-sleep.patch
  - 0018-tests-aux-using-singl-lvmconf-call.patch
  - 0019-tests-missing-to-check-for-writecache-support.patch
  - 0020-tests-pvmove-large-disk-area.patch
  - 0021-tests-enforce-full-fs-check.patch
  - 0022-tests-update-for-work-in-fake-dev-environment.patch
  - 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  - 0024-tests-better-slowdown.patch
- Update patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch</changelog>
  <changelog author="glass.su@suse.com" date="1729771200">- add rpm dependency in spec file for aligning new DM udev rules (bsc#1225783 bsc#1229518 bsc#1232063)
  * update lvm2.spec for multipath-tools and udev</changelog>
  <changelog author="heming.zhao@suse.com" date="1740052800">- system with LVM on iSCSI hangs on shutdown because blk-availability.service is not enabled (bsc#1236788)
  * update lvm2.spec
  - remove blk-availability.service from %postun
  - add new Provides 'dont_stop_blk_availability_service'</changelog>
  <changelog author="heming.zhao@suse.com" date="1741003200">- Fixes the lvm2-testsuite failure to run on SUSE kernel (bsc#1238213)
  * Add upstream patch
    + tests-fix-wrong-pos-with-CONFIG_PRINTK_CALLER.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1741348800">- Fixes the lvm2-testsuite case fsadm-btrfs.sh (bsc#1238857)
  * Update SUSE special patch
    + fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1744718400">- LVM filter behaves unexpectedly for MPIO devices in SLES15SP5 (bsc#1216938)
  * set lvm.conf devices.multipath_wwids_file=""</changelog>
  <changelog author="glass.su@suse.com" date="1753876800">- L3: systemd fails to start lvmlockd with sanlock running (bsc#1246691)
  * Add upstream patches for sd_notify configure option
    + bug-1246691_01-configure.ac-build-lvmlockd-with-notify.patch
    + bug-1246691_02-configure-autoreconf.patch
    + bug-1246691_03-configure.ac-add-option-disable-enable-sd-notify.patch
    + bug-1246691_04-lvmlockd-utilize-SD_NOTIFY_SUPPORT.patch
    + bug-1246691_05-configure-autoreconf.patch
  * Update lvm2.spec
    + add pkgconfig(systemd) for lvmlockd build
    + enable configure option '--enable-sd-notify' for lvmlockd</changelog>
  <changelog author="glass.su@suse.com" date="1770724800">- L3: LVM_SUPPRESS_FD_WARNINGS is no longer effective (bsc#1257661)
  * Add upstream patch
    + bug-1257661-libdaemon-fix-suppressing-stray-fd-warnings.patch</changelog>
</package>
<package pkgid="e1fd167ebd4b9897de205acaf972646dce4e2969bc40c364b6ec97b358ace3f2" name="libdevmapper1_03-32bit" arch="x86_64">
  <version epoch="0" ver="2.03.24_1.02.198" rel="150700.7.3.3"/>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6339)
  * 2.03.22:
  * Fix pv_major/pv_minor report field types so they are integers, not strings.
  * Add lvmdevices --delnotfound to delete entries for missing devices.
  * Always use cachepool name for metadata backup LV for lvconvert --repair.
  * Make metadata backup LVs read-only after pool's lvconvert --repair.
  * Handle 'lvextend --usepolicies' for pools for all activation variants.
  * Fix memleak in vgchange autoactivation setup.
  * Support conversion from thick to fully provisioned thin LV.
  * Cache/Thin-pool can use error and zero volumes for testing.
  * Individual thin volume can be cached, but cannot take snapshot.
  * internal support for handling error and zero target (for testing).
  * COW above trimmed maximal size is does not return error.
  * Add lvm.conf thin_restore and cache_restore settings.
  * Handle multiple mounts while resizing volume with a FS.
  * Handle leading/trailing spaces in sys_wwid and sys_serial used by deivce_id.
  * Fix failing -S|--select for non-reporting cmds if using LV info/status fields.
  * Allow snapshots of raid+integrity LV.
  * Fix multisegment RAID1 allocator to prevent using single disk for more legs.
  * 2.03.21:
  * Allow (write)cache over raid+integrity LV.
  * 2.03.20:
  * Fix segfault if using -S|--select with log/report_command_log=1 setting.
  * 2.03.19:
  * Do not reset SYSTEMD_READY variable in udev for PVs on MD and loop devices.
  * Ensure udev is processing origin LV before its thick snapshots LVs.
  * 2.03.18:
  * Fix warning for thin pool overprovisioning on lvextend.
  * Add support for writecache metadata_only and pause_writeback settings.
  * Fix missing error messages in lvmdbusd.
  * 2.03.17:
  * Add new options (--fs, --fsmode) for FS handling when resizing LVs (btrfs is unsupported).
  * Fix 'lvremove -S|--select LV' to not also remove its historical LV right away.
  * Fix lv_active field type to binary so --select and --binary applies properly.
  * Error out in lvm shell if using a cmd argument not supported in the shell.
  * Fix lvm shell's lastlog command to report previous pre-command failures.
  * Add --valuesonly option to lvmconfig to print only values without keys.
  * Add json_std output format for more JSON standard compliant version of output.
  * Fix many corner cases in device_id, including handling of S/N duplicates.
  * Fix various issues in lvmdbusd.
- device-mapper version upgrade to 1.02.196
  * Improve parallel creation of /dev/mapper/control device node.
  * Import previous ID_FS_* udev records in 13-dm-disk.rules for suspended DM dev.
  * Remove NAME="mapper/control" rule from 10-dm.rules to avoid udev warnings.
  * Improve 'dmsetup create' without given table line with new kernels.
  * Add DM_REPORT_GROUP_JSON_STD for more JSON standard compliant output format.
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
  <changelog author="heming.zhao@suse.com" date="1716724800">- Update lvm2 from LVM2.2.03.22 to LVM2.2.03.24
  * ** WHATS_NEW from 2.03.22 to 2.03.24 ***
  Version 2.03.24 - 16th May 2024
  ===============================
    Lvconvert supports VDO options for thin-pool with vdo conversion.
    Improve placement to .data.rel.ro and .rodata sections.
    Fix support for -y and -W when creating thinpool with vdo.
    Bettter support for runtime valgrind detection.
    Allow command interruption when communicating with dmeventd.
    Fix resize of VDO volume used for thin pool data volume.
    Use -Wl,-z,now and -Wl,--as-needed for compilation by default.
    Require 3.7 as minimal version for sanlock.
    Share code for closing opened desriptors on program startup.
    Fix memleak in lvmcache.
    Add configure --with-default-event-activation=ON setting.
    Fix return value from reporter function when hitting internal error.
    Skip checking of pools for lvremove and vgremove commands.
    VDO modprobes dm-vdo for 6.9 kernel and kvdo for older kernel version.
    Fix lvs reporting for VDO volumes with new upstream kernel driver.
    Don't import DM_UDEV_DISABLE_OTHER_RULES_FLAG in LVM rules, DM rules cover it.
    Fix table line generation for cache snapshots using cachevol.
    Enhance lvconvert support for external origins stacking.
    When swapping LV names also swap properties like hostname, time and data.
    Fix removal of stacked external origins.
    Lock filesystem when converting volume to read-only external origin.
    Support external origin between different thin-pool.
    Improve validation of acceptable volumes for external origins.
    Reduce amount of preloaded devices for complex device trees.
    Avoid logging problems from monitoring snapshots with inactive origins.
    Check for cache policy module presence in kernel's builtin modules file.
    Add configure --with-modulesdir to select kernel modules directory.
    Support creation of thin-pool with VDO use for its data volume.
  Version 2.03.23 - 21st November 2023
  ====================================
    Set the first lv_attr flag for raid integrity images to i or I.
    Add -A option for pvs and pvscan to show PVs outside devices file.
    Improve searched_devnames temp file usage to prevent redundant scanning.
    Change default search_for_devnames from auto to all.
    Add lvmdevices --refresh to search for missing PVIDs on all devices.
    Add comparison between old and new entries in lvmdevices --check.
    Fix device_id matching order - match non-devname first.
    Fix "lvconvert -m 0" when there is other than first in-sync leg.
    Use system.devices as default for dmeventd when dmeventd.devices is undefined.
    Accept WWIDs containing QEMU HARDDISK for device_id.
    Improve handling of non-standard WWID prefixes used for device_id.
    Configure automatically enables cmdlib for dmeventd and notify-dbus for dbus.
    Fix hint calculation for pools with zero or error segment.
    Configure supports --disable-shared to build only static binaries.
    Configure supports --without-{blkid|systemd|udev} for easier static build.
    Refresh device ids if the system changes.
    Fix pvmove when specifying raid components as moved LVs.
    Enhance error detection for lvm_import_vdo.
    Support PV lists with thin lvconvert.
    Fix support for lvm_import_vdo with SCSI VDO volumes.
    Fix locking issue leading to hanging concurrent vgchange --refresh.
    Recognize lvm.conf report/headings=2 for full column names in report headings.
    Add --headings none|abbrev|full cmd line option to set report headings type.
    Fix conversion to thin pool using lvmlockd.
    Fix conversion from thick into thin volume using lvmlockd.
    Require writable LV for conversion to vdo pool.
    Fix return value from lvconvert integrity remove.
    Preserve UUID for pool metadata spare.
    Preserve UUID for swapped pool metadata.
    Rewrite validation of device name entries used as device_id.
  * ** WHATS_NEW_DM from 1.02.196 to 1.02.198 ***
  Version 1.02.198 - 16th May 2024
  ================================
    Fix static only compilation of libdevmapper.a and dmsetup tool.
    Use better code for closing opened descriptors when starting dmeventd.
    Correct dmeventd -R for systemd environment.
    Restart of dmeventd -R checks pid file to detect running dmeventd first.
    Query with dmeventd -i quickly ends when there is no running dmeventd.
    Enhance dm_get_status_raid to handle mismatching status or reported legs.
    Create /dev/disk/by-label symlinks for DM devs that have crypto as next layer.
    Persist udev db for DM devs on cleanup used in initrd to rootfs transition.
    Process synthetic udev events other than 'add/change' as 'change' events.
    Increase DM_UDEV_RULES_VSN to 3 to indicate changed udev rules.
    Rename DM_NOSCAN to .DM_NOSCAN so it's not stored in udev db.
    Rename DM_SUSPENDED to .DM_SUSPENDED so it's not stored in udev db.
    Do not import DM_UDEV_DISABLE_OTHER_RULES_FLAG from db in 10-dm-disk.rules.
    Test DISK_RO after importing properties from db in 10-dm.rules.
    Also import ID_FS_TYPE in 13-dm-disk.rules from db if needed.
  Version 1.02.197 - 21st November 2023
  =====================================
    Fix invalid JSON report if using DM_REPORT_OUTPUT_MULTIPLE_TIMES and selection.
    Propagate ioctl errno from dm_task_run when creating new table line.
    Add support for group aliases in dmstats.
    Add support for exit-on file for dmeventd to reduce shutdown delays.
    Add configure option --with-dmeventd-exit-on-path to specify default path.
    Add dmsetup --headings none|abbrev|full to set report headings type.
    Add DM_REPORT_OUTPUT_FIELD_IDS_IN_HEADINGS to provide alternative headings.
- Drop patches that have been merged into upstream
  - 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  - 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  - 0003-lvconvert-fix-regresion-from-integrity-check.patch
  - 0004-gcc-cleanup-warnings.patch
  - 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  - 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  - 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  - 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  - 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  - 0010-lvmlockd-client-mutex-ordering.patch
  - 0011-filesystem-move-stat-after-open-check.patch
  - 0012-tests-check-for-writecache.patch
  - 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  - 0014-gcc-fix-warnings-for-x32-architecture.patch
  - 0015-gcc-warning-missing-braces-around-initializer.patch
  - 0016-test-improve-aux-teardown.patch
  - 0017-tests-aux-try-with-extra-sleep.patch
  - 0018-tests-aux-using-singl-lvmconf-call.patch
  - 0019-tests-missing-to-check-for-writecache-support.patch
  - 0020-tests-pvmove-large-disk-area.patch
  - 0021-tests-enforce-full-fs-check.patch
  - 0022-tests-update-for-work-in-fake-dev-environment.patch
  - 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  - 0024-tests-better-slowdown.patch
- Update patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch</changelog>
  <changelog author="glass.su@suse.com" date="1729771200">- add rpm dependency in spec file for aligning new DM udev rules (bsc#1225783 bsc#1229518 bsc#1232063)
  * update lvm2.spec for multipath-tools and udev</changelog>
  <changelog author="heming.zhao@suse.com" date="1740052800">- system with LVM on iSCSI hangs on shutdown because blk-availability.service is not enabled (bsc#1236788)
  * update lvm2.spec
  - remove blk-availability.service from %postun
  - add new Provides 'dont_stop_blk_availability_service'</changelog>
  <changelog author="heming.zhao@suse.com" date="1741003200">- Fixes the lvm2-testsuite failure to run on SUSE kernel (bsc#1238213)
  * Add upstream patch
    + tests-fix-wrong-pos-with-CONFIG_PRINTK_CALLER.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1741348800">- Fixes the lvm2-testsuite case fsadm-btrfs.sh (bsc#1238857)
  * Update SUSE special patch
    + fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1744718400">- LVM filter behaves unexpectedly for MPIO devices in SLES15SP5 (bsc#1216938)
  * set lvm.conf devices.multipath_wwids_file=""</changelog>
  <changelog author="glass.su@suse.com" date="1753876800">- L3: systemd fails to start lvmlockd with sanlock running (bsc#1246691)
  * Add upstream patches for sd_notify configure option
    + bug-1246691_01-configure.ac-build-lvmlockd-with-notify.patch
    + bug-1246691_02-configure-autoreconf.patch
    + bug-1246691_03-configure.ac-add-option-disable-enable-sd-notify.patch
    + bug-1246691_04-lvmlockd-utilize-SD_NOTIFY_SUPPORT.patch
    + bug-1246691_05-configure-autoreconf.patch
  * Update lvm2.spec
    + add pkgconfig(systemd) for lvmlockd build
    + enable configure option '--enable-sd-notify' for lvmlockd</changelog>
</package>
<package pkgid="98c2475fa3039d20e8184f466fbefef65ae393602b3fd44102477d18cec86a6d" name="libdevmapper1_03-32bit" arch="x86_64">
  <version epoch="0" ver="2.03.24_1.02.198" rel="150700.7.6.1"/>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6339)
  * 2.03.22:
  * Fix pv_major/pv_minor report field types so they are integers, not strings.
  * Add lvmdevices --delnotfound to delete entries for missing devices.
  * Always use cachepool name for metadata backup LV for lvconvert --repair.
  * Make metadata backup LVs read-only after pool's lvconvert --repair.
  * Handle 'lvextend --usepolicies' for pools for all activation variants.
  * Fix memleak in vgchange autoactivation setup.
  * Support conversion from thick to fully provisioned thin LV.
  * Cache/Thin-pool can use error and zero volumes for testing.
  * Individual thin volume can be cached, but cannot take snapshot.
  * internal support for handling error and zero target (for testing).
  * COW above trimmed maximal size is does not return error.
  * Add lvm.conf thin_restore and cache_restore settings.
  * Handle multiple mounts while resizing volume with a FS.
  * Handle leading/trailing spaces in sys_wwid and sys_serial used by deivce_id.
  * Fix failing -S|--select for non-reporting cmds if using LV info/status fields.
  * Allow snapshots of raid+integrity LV.
  * Fix multisegment RAID1 allocator to prevent using single disk for more legs.
  * 2.03.21:
  * Allow (write)cache over raid+integrity LV.
  * 2.03.20:
  * Fix segfault if using -S|--select with log/report_command_log=1 setting.
  * 2.03.19:
  * Do not reset SYSTEMD_READY variable in udev for PVs on MD and loop devices.
  * Ensure udev is processing origin LV before its thick snapshots LVs.
  * 2.03.18:
  * Fix warning for thin pool overprovisioning on lvextend.
  * Add support for writecache metadata_only and pause_writeback settings.
  * Fix missing error messages in lvmdbusd.
  * 2.03.17:
  * Add new options (--fs, --fsmode) for FS handling when resizing LVs (btrfs is unsupported).
  * Fix 'lvremove -S|--select LV' to not also remove its historical LV right away.
  * Fix lv_active field type to binary so --select and --binary applies properly.
  * Error out in lvm shell if using a cmd argument not supported in the shell.
  * Fix lvm shell's lastlog command to report previous pre-command failures.
  * Add --valuesonly option to lvmconfig to print only values without keys.
  * Add json_std output format for more JSON standard compliant version of output.
  * Fix many corner cases in device_id, including handling of S/N duplicates.
  * Fix various issues in lvmdbusd.
- device-mapper version upgrade to 1.02.196
  * Improve parallel creation of /dev/mapper/control device node.
  * Import previous ID_FS_* udev records in 13-dm-disk.rules for suspended DM dev.
  * Remove NAME="mapper/control" rule from 10-dm.rules to avoid udev warnings.
  * Improve 'dmsetup create' without given table line with new kernels.
  * Add DM_REPORT_GROUP_JSON_STD for more JSON standard compliant output format.
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
  <changelog author="heming.zhao@suse.com" date="1716724800">- Update lvm2 from LVM2.2.03.22 to LVM2.2.03.24
  * ** WHATS_NEW from 2.03.22 to 2.03.24 ***
  Version 2.03.24 - 16th May 2024
  ===============================
    Lvconvert supports VDO options for thin-pool with vdo conversion.
    Improve placement to .data.rel.ro and .rodata sections.
    Fix support for -y and -W when creating thinpool with vdo.
    Bettter support for runtime valgrind detection.
    Allow command interruption when communicating with dmeventd.
    Fix resize of VDO volume used for thin pool data volume.
    Use -Wl,-z,now and -Wl,--as-needed for compilation by default.
    Require 3.7 as minimal version for sanlock.
    Share code for closing opened desriptors on program startup.
    Fix memleak in lvmcache.
    Add configure --with-default-event-activation=ON setting.
    Fix return value from reporter function when hitting internal error.
    Skip checking of pools for lvremove and vgremove commands.
    VDO modprobes dm-vdo for 6.9 kernel and kvdo for older kernel version.
    Fix lvs reporting for VDO volumes with new upstream kernel driver.
    Don't import DM_UDEV_DISABLE_OTHER_RULES_FLAG in LVM rules, DM rules cover it.
    Fix table line generation for cache snapshots using cachevol.
    Enhance lvconvert support for external origins stacking.
    When swapping LV names also swap properties like hostname, time and data.
    Fix removal of stacked external origins.
    Lock filesystem when converting volume to read-only external origin.
    Support external origin between different thin-pool.
    Improve validation of acceptable volumes for external origins.
    Reduce amount of preloaded devices for complex device trees.
    Avoid logging problems from monitoring snapshots with inactive origins.
    Check for cache policy module presence in kernel's builtin modules file.
    Add configure --with-modulesdir to select kernel modules directory.
    Support creation of thin-pool with VDO use for its data volume.
  Version 2.03.23 - 21st November 2023
  ====================================
    Set the first lv_attr flag for raid integrity images to i or I.
    Add -A option for pvs and pvscan to show PVs outside devices file.
    Improve searched_devnames temp file usage to prevent redundant scanning.
    Change default search_for_devnames from auto to all.
    Add lvmdevices --refresh to search for missing PVIDs on all devices.
    Add comparison between old and new entries in lvmdevices --check.
    Fix device_id matching order - match non-devname first.
    Fix "lvconvert -m 0" when there is other than first in-sync leg.
    Use system.devices as default for dmeventd when dmeventd.devices is undefined.
    Accept WWIDs containing QEMU HARDDISK for device_id.
    Improve handling of non-standard WWID prefixes used for device_id.
    Configure automatically enables cmdlib for dmeventd and notify-dbus for dbus.
    Fix hint calculation for pools with zero or error segment.
    Configure supports --disable-shared to build only static binaries.
    Configure supports --without-{blkid|systemd|udev} for easier static build.
    Refresh device ids if the system changes.
    Fix pvmove when specifying raid components as moved LVs.
    Enhance error detection for lvm_import_vdo.
    Support PV lists with thin lvconvert.
    Fix support for lvm_import_vdo with SCSI VDO volumes.
    Fix locking issue leading to hanging concurrent vgchange --refresh.
    Recognize lvm.conf report/headings=2 for full column names in report headings.
    Add --headings none|abbrev|full cmd line option to set report headings type.
    Fix conversion to thin pool using lvmlockd.
    Fix conversion from thick into thin volume using lvmlockd.
    Require writable LV for conversion to vdo pool.
    Fix return value from lvconvert integrity remove.
    Preserve UUID for pool metadata spare.
    Preserve UUID for swapped pool metadata.
    Rewrite validation of device name entries used as device_id.
  * ** WHATS_NEW_DM from 1.02.196 to 1.02.198 ***
  Version 1.02.198 - 16th May 2024
  ================================
    Fix static only compilation of libdevmapper.a and dmsetup tool.
    Use better code for closing opened descriptors when starting dmeventd.
    Correct dmeventd -R for systemd environment.
    Restart of dmeventd -R checks pid file to detect running dmeventd first.
    Query with dmeventd -i quickly ends when there is no running dmeventd.
    Enhance dm_get_status_raid to handle mismatching status or reported legs.
    Create /dev/disk/by-label symlinks for DM devs that have crypto as next layer.
    Persist udev db for DM devs on cleanup used in initrd to rootfs transition.
    Process synthetic udev events other than 'add/change' as 'change' events.
    Increase DM_UDEV_RULES_VSN to 3 to indicate changed udev rules.
    Rename DM_NOSCAN to .DM_NOSCAN so it's not stored in udev db.
    Rename DM_SUSPENDED to .DM_SUSPENDED so it's not stored in udev db.
    Do not import DM_UDEV_DISABLE_OTHER_RULES_FLAG from db in 10-dm-disk.rules.
    Test DISK_RO after importing properties from db in 10-dm.rules.
    Also import ID_FS_TYPE in 13-dm-disk.rules from db if needed.
  Version 1.02.197 - 21st November 2023
  =====================================
    Fix invalid JSON report if using DM_REPORT_OUTPUT_MULTIPLE_TIMES and selection.
    Propagate ioctl errno from dm_task_run when creating new table line.
    Add support for group aliases in dmstats.
    Add support for exit-on file for dmeventd to reduce shutdown delays.
    Add configure option --with-dmeventd-exit-on-path to specify default path.
    Add dmsetup --headings none|abbrev|full to set report headings type.
    Add DM_REPORT_OUTPUT_FIELD_IDS_IN_HEADINGS to provide alternative headings.
- Drop patches that have been merged into upstream
  - 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  - 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  - 0003-lvconvert-fix-regresion-from-integrity-check.patch
  - 0004-gcc-cleanup-warnings.patch
  - 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  - 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  - 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  - 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  - 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  - 0010-lvmlockd-client-mutex-ordering.patch
  - 0011-filesystem-move-stat-after-open-check.patch
  - 0012-tests-check-for-writecache.patch
  - 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  - 0014-gcc-fix-warnings-for-x32-architecture.patch
  - 0015-gcc-warning-missing-braces-around-initializer.patch
  - 0016-test-improve-aux-teardown.patch
  - 0017-tests-aux-try-with-extra-sleep.patch
  - 0018-tests-aux-using-singl-lvmconf-call.patch
  - 0019-tests-missing-to-check-for-writecache-support.patch
  - 0020-tests-pvmove-large-disk-area.patch
  - 0021-tests-enforce-full-fs-check.patch
  - 0022-tests-update-for-work-in-fake-dev-environment.patch
  - 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  - 0024-tests-better-slowdown.patch
- Update patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch</changelog>
  <changelog author="glass.su@suse.com" date="1729771200">- add rpm dependency in spec file for aligning new DM udev rules (bsc#1225783 bsc#1229518 bsc#1232063)
  * update lvm2.spec for multipath-tools and udev</changelog>
  <changelog author="heming.zhao@suse.com" date="1740052800">- system with LVM on iSCSI hangs on shutdown because blk-availability.service is not enabled (bsc#1236788)
  * update lvm2.spec
  - remove blk-availability.service from %postun
  - add new Provides 'dont_stop_blk_availability_service'</changelog>
  <changelog author="heming.zhao@suse.com" date="1741003200">- Fixes the lvm2-testsuite failure to run on SUSE kernel (bsc#1238213)
  * Add upstream patch
    + tests-fix-wrong-pos-with-CONFIG_PRINTK_CALLER.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1741348800">- Fixes the lvm2-testsuite case fsadm-btrfs.sh (bsc#1238857)
  * Update SUSE special patch
    + fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1744718400">- LVM filter behaves unexpectedly for MPIO devices in SLES15SP5 (bsc#1216938)
  * set lvm.conf devices.multipath_wwids_file=""</changelog>
  <changelog author="glass.su@suse.com" date="1753876800">- L3: systemd fails to start lvmlockd with sanlock running (bsc#1246691)
  * Add upstream patches for sd_notify configure option
    + bug-1246691_01-configure.ac-build-lvmlockd-with-notify.patch
    + bug-1246691_02-configure-autoreconf.patch
    + bug-1246691_03-configure.ac-add-option-disable-enable-sd-notify.patch
    + bug-1246691_04-lvmlockd-utilize-SD_NOTIFY_SUPPORT.patch
    + bug-1246691_05-configure-autoreconf.patch
  * Update lvm2.spec
    + add pkgconfig(systemd) for lvmlockd build
    + enable configure option '--enable-sd-notify' for lvmlockd</changelog>
  <changelog author="glass.su@suse.com" date="1770724800">- L3: LVM_SUPPRESS_FD_WARNINGS is no longer effective (bsc#1257661)
  * Add upstream patch
    + bug-1257661-libdaemon-fix-suppressing-stray-fd-warnings.patch</changelog>
</package>
<package pkgid="d79597e5c4d99f119e626ba9b0b87b0d7b9ffc8298fa75ece67779b28a43d1a2" name="libdmmp-devel" arch="x86_64">
  <version epoch="0" ver="0.10.3+124+suse.ed5b4b11" rel="150700.3.3.1"/>
  <changelog author="mwilck@suse.com" date="1704456000">- Update to version 0.9.7+93+suse.e2f2272:
  * fix ANA prioritizer enablement logic (bsc#1218326)
  * avoid setting queue_if_no_path on multipath maps for which the
    no_path_retry timeout has expired
  * the interactive commands "restorequeueing map X" and
    "restorequeing maps" now only affect maps that had queueing
    manually disabled using "disablequeuing maps" or
    "disablequeuing map X" beforehand
  * Spelling fixes</changelog>
  <changelog author="mwilck@suse.com" date="1707739200">- Update to version 0.9.7+140+suse.2d78457:
  * This is a multipath-tools 0.9.8 pre-release
  * Socket activation via multipathd.socket has been disabled by default
    because it has undesirable side effects on systems without multipath.
    Users with multipath hardware should enable multipathd.service
  * The restorequeueing CLI command now only enables queueing if
    disablequeueing had been sent before
  * Avoid multipathd hang during map flush
  * multipathd now tracks the queueing mode of maps in its internal features string
  * Improve error messages in 'multipathd -k'
  * Fix segfault in autoresize code (bsc#1219289)
  * Fix missing map reloads (bsc#1219796)
  * Documentation fixes, spelling fixes, minor code fixes</changelog>
  <changelog author="mwilck@suse.com" date="1707739201">- Update to version 0.9.7+148+suse.7d9953e.obscpio
  * This is a multipath-tools 0.9.8 pre-release
  * fix fast_io_fail for Infinibox (bsc#1219348)
  * Fix activation of LVM volume groups during coldplug (bsc#1219142)</changelog>
  <changelog author="mwilck@suse.com" date="1707912000">- Update to version 0.9.7+148+suse.9780ae0:
  * 11-dm-mpath.rules: Fix quoting mistake (bsc#1219142)</changelog>
  <changelog author="mwilck@suse.com" date="1707998400">- Update to version 0.9.8~1+82+suse.dcd98a3:
  * Adapt package version such that it shows as a 0.9.8 prerelease
  * Add missing udev rules file</changelog>
  <changelog author="mwilck@suse.com" date="1708948800">- Update to version 0.9.8+83+suse.bcae610 (bsc#1220374)
  * multipath-tools: added NEWS.md</changelog>
  <changelog author="mwilck@suse.com" date="1709035200">- Remove libmpathpersist-example-old.c, which has been obsolete
  since multipath-tools 0.8.6.</changelog>
  <changelog author="mwilck@suse.com" date="1709640000">- Update to version 0.9.8+87+suse.f72b9f3:
  * fix misspelled DM_UDEV_DISABLE_OTHER_RULES_FLAG in udev rules
    (bsc#1220810)</changelog>
  <changelog author="mwilck@suse.com" date="1712836800">- Update to version 0.9.8+88+suse.d504d83:
  * Revert "libmultipath: fix max_sectors_kb on adding path"
  (bsc#1222458)</changelog>
  <changelog author="mwilck@suse.com" date="1719316800">- Update to version 0.9.9+90+suse.f1d2f20:
  * Fix unit tests on Tumbleweed/armv7l
- Update to 0.9.9 upstream (see NEWS.md for details)
  * Update udev rules to be compliant with device-mapper udev
  rules update in LVM2 &gt;= 2.03.24.
  * Limit real-time scheduling priority to 10 by default. This
  can now be configured in multipathd.service using "LimitRTPRIO="
  * Set max_sectors_kb only on map creation, or when a new path
  is added, to avoid IO errors
  * The configuration option "flush_on_last_del" now takes the
  values "always" (="yes"), "unused" (="no"), and "never". "yes"
  and "no" are still supported
  * Add wildcard %k for max_sectors_kb for CLI commands like
  "multipath show {paths,maps} format"
  * Accept WWID value in CLI commands that take a map name, like
  "resize map $map"
  * Removed support for CLI wildcards for pathgroups, which were
  not function anyway.
  * Fix map failure count for no_path_retry &gt; 0</changelog>
  <changelog author="mwilck@suse.com" date="1721390400">- Update to version 0.9.9+161+suse.0c835ef:
  * Update to upstream reviewed code path (787e00d)
  * Added hardware defaults for Huawei storage arrays and XSG1 vendors
  * Refactored and improved the libultipath / libdevmapper interface
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove`
  (bug introduced in 0.9.9). (bsc#1229898)
  * CI improvements
  * Documentation fixes</changelog>
  <changelog author="mwilck@suse.com" date="1724932800">- Update to 0.10.0+103+suse.0fc97cd
- Update to upstream 0.10.0 (see also NEWS.md)
  * The `multipathd show daemon` command now shows `(reconfigure pending)`
  if a reconfiguration has been triggered but not finished yet.
  * Refactored the path checker loop. Paths are now checked for each multipath
  map in turn
  * Renamed public functions, variables, and macros to comply with the glibc policy
  for reserved names (gh#opensvc/multipath-tools#91)
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove` (bug introduced in
  0.9.9). (bsc#1229898)
  * Fixed old mpathpersist bug leading to the error message "configured reservation
  key doesn't match: 0x0" when `reservation_key` was configured in the
  multipaths section of `multipath.conf`. (bsc#1228926, gh#opensvc/multipath-tools#92)
  * Fixed output of `multipath -t` and `multipath -T` for the options
  `force_sync` and `retrigger_tries`. (bsc#1229898, gh#opensvc/multipath-tools#88)
  * Fixed adding maps by WWID in CLI (command `add map $WWID`). (bsc#1229898)</changelog>
  <changelog author="mwilck@suse.com" date="1730721600">- Update to version 0.10.0+106+suse.ffbdb7a:
  * Fix reboot hang if uevent is processed for suspended device
  (bsc#1232063)</changelog>
  <changelog author="mwilck@suse.com" date="1730808000">- Update to version 0.10.0+108+suse.2c2e597:
  * Update fix for bsc#1232063 to upstream-accepted solution</changelog>
  <changelog author="mwilck@suse.com" date="1732190400">- Update to version 0.10.1~1+113+suse.d6eca5e:
  This is a pre-release of the upstream stable release 0.10.1.
  * libmultipath: dm_get_maps(): don't bail out for single-map failures
  (bsc#1233588, gh#opensvc/multipath-tools#102)
  * libmultipath: don't print error message if WATCHDOG_USEC is 0
  (bsc#1232227)
  * libmultipath: don't set dev_loss_tmo to 0 for NO_PATH_RETRY_FAIL
  * multipathd: fix deferred_failback_tick for reload removes</changelog>
  <changelog author="mwilck@suse.com" date="1732536000">- Update to version 0.10.1~2+112+suse.b66763a:
  * libmultipath: reduce log level of "map X has multiple targets"
  (bsc#1233588)</changelog>
  <changelog author="mwilck@suse.com" date="1737720000">- Update to version 0.10.2+117+suse.33411aa:
  * multipathd: trigger uevents for blacklisted paths in reconfigure
    (bsc#1236321)
  * Make sure maps are reloaded in the path checker loop after detecting an
    inconsistent or wrong kernel state (bsc#1236392)
  * Make sure udev and systemd notice changes in multipath path state
    when devices are added to or removed from multipath maps (bsc#1236321)
  * Fix the problem that `group_by_tpg` might be disabled if one or more
    paths were offline during initial configuration (bsc#1236392)
  * Fix multipathd crash because of invalid path group index value, for example
    if an invalid path device was removed from a map.
    (gh#opensvc/multipath-tools#105, bsc#1236392)
  * Fixed a memory leak in the nvme foreign library.
  * Fixed a problem in the marginal path detection algorithm that could cause
    the io error check for a recently failed path to be delayed.
    (bsc#1236390)
  * Reduce log level of harmless "map ... doesn't exist" message
    (bsc#1236390)</changelog>
  <changelog author="mwilck@suse.com" date="1741176000">- Update to version 0.10.2+122+suse.51e02cc:
  * multipathd: fix hang during shutdown with queuing maps
    (bsc#1238484).
    This adds multipathd-queueing.service.</changelog>
  <changelog author="mwilck@suse.com" date="1751371200">- Update to version 0.10.2+123+suse.48d66ee8:
  * multipathd: cli_reinstate(): avoid reinstated paths being failed again
  (bsc#1244917)</changelog>
  <changelog author="mwilck@suse.com" date="1752494400">- Update to version 0.10.3+124+suse.ed5b4b11:
  * multipath-tools: add HPE MSA Gen7 (2070/2072) to hwtable
    (bsc#1246501)</changelog>
</package>
<package pkgid="c659d2a4177d009886dd1ded3d5dfc221d40cf81f5a99d32339c48866986da57" name="libdmmp-devel" arch="x86_64">
  <version epoch="0" ver="0.10.5+198+suse.5875f383" rel="150700.3.6.1"/>
  <changelog author="mwilck@suse.com" date="1707998400">- Update to version 0.9.8~1+82+suse.dcd98a3:
  * Adapt package version such that it shows as a 0.9.8 prerelease
  * Add missing udev rules file</changelog>
  <changelog author="mwilck@suse.com" date="1708948800">- Update to version 0.9.8+83+suse.bcae610 (bsc#1220374)
  * multipath-tools: added NEWS.md</changelog>
  <changelog author="mwilck@suse.com" date="1709035200">- Remove libmpathpersist-example-old.c, which has been obsolete
  since multipath-tools 0.8.6.</changelog>
  <changelog author="mwilck@suse.com" date="1709640000">- Update to version 0.9.8+87+suse.f72b9f3:
  * fix misspelled DM_UDEV_DISABLE_OTHER_RULES_FLAG in udev rules
    (bsc#1220810)</changelog>
  <changelog author="mwilck@suse.com" date="1712836800">- Update to version 0.9.8+88+suse.d504d83:
  * Revert "libmultipath: fix max_sectors_kb on adding path"
  (bsc#1222458)</changelog>
  <changelog author="mwilck@suse.com" date="1719316800">- Update to version 0.9.9+90+suse.f1d2f20:
  * Fix unit tests on Tumbleweed/armv7l
- Update to 0.9.9 upstream (see NEWS.md for details)
  * Update udev rules to be compliant with device-mapper udev
  rules update in LVM2 &gt;= 2.03.24.
  * Limit real-time scheduling priority to 10 by default. This
  can now be configured in multipathd.service using "LimitRTPRIO="
  * Set max_sectors_kb only on map creation, or when a new path
  is added, to avoid IO errors
  * The configuration option "flush_on_last_del" now takes the
  values "always" (="yes"), "unused" (="no"), and "never". "yes"
  and "no" are still supported
  * Add wildcard %k for max_sectors_kb for CLI commands like
  "multipath show {paths,maps} format"
  * Accept WWID value in CLI commands that take a map name, like
  "resize map $map"
  * Removed support for CLI wildcards for pathgroups, which were
  not function anyway.
  * Fix map failure count for no_path_retry &gt; 0</changelog>
  <changelog author="mwilck@suse.com" date="1721390400">- Update to version 0.9.9+161+suse.0c835ef:
  * Update to upstream reviewed code path (787e00d)
  * Added hardware defaults for Huawei storage arrays and XSG1 vendors
  * Refactored and improved the libultipath / libdevmapper interface
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove`
  (bug introduced in 0.9.9). (bsc#1229898)
  * CI improvements
  * Documentation fixes</changelog>
  <changelog author="mwilck@suse.com" date="1724932800">- Update to 0.10.0+103+suse.0fc97cd
- Update to upstream 0.10.0 (see also NEWS.md)
  * The `multipathd show daemon` command now shows `(reconfigure pending)`
  if a reconfiguration has been triggered but not finished yet.
  * Refactored the path checker loop. Paths are now checked for each multipath
  map in turn
  * Renamed public functions, variables, and macros to comply with the glibc policy
  for reserved names (gh#opensvc/multipath-tools#91)
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove` (bug introduced in
  0.9.9). (bsc#1229898)
  * Fixed old mpathpersist bug leading to the error message "configured reservation
  key doesn't match: 0x0" when `reservation_key` was configured in the
  multipaths section of `multipath.conf`. (bsc#1228926, gh#opensvc/multipath-tools#92)
  * Fixed output of `multipath -t` and `multipath -T` for the options
  `force_sync` and `retrigger_tries`. (bsc#1229898, gh#opensvc/multipath-tools#88)
  * Fixed adding maps by WWID in CLI (command `add map $WWID`). (bsc#1229898)</changelog>
  <changelog author="mwilck@suse.com" date="1730721600">- Update to version 0.10.0+106+suse.ffbdb7a:
  * Fix reboot hang if uevent is processed for suspended device
  (bsc#1232063)</changelog>
  <changelog author="mwilck@suse.com" date="1730808000">- Update to version 0.10.0+108+suse.2c2e597:
  * Update fix for bsc#1232063 to upstream-accepted solution</changelog>
  <changelog author="mwilck@suse.com" date="1732190400">- Update to version 0.10.1~1+113+suse.d6eca5e:
  This is a pre-release of the upstream stable release 0.10.1.
  * libmultipath: dm_get_maps(): don't bail out for single-map failures
  (bsc#1233588, gh#opensvc/multipath-tools#102)
  * libmultipath: don't print error message if WATCHDOG_USEC is 0
  (bsc#1232227)
  * libmultipath: don't set dev_loss_tmo to 0 for NO_PATH_RETRY_FAIL
  * multipathd: fix deferred_failback_tick for reload removes</changelog>
  <changelog author="mwilck@suse.com" date="1732536000">- Update to version 0.10.1~2+112+suse.b66763a:
  * libmultipath: reduce log level of "map X has multiple targets"
  (bsc#1233588)</changelog>
  <changelog author="mwilck@suse.com" date="1737720000">- Update to version 0.10.2+117+suse.33411aa:
  * multipathd: trigger uevents for blacklisted paths in reconfigure
    (bsc#1236321)
  * Make sure maps are reloaded in the path checker loop after detecting an
    inconsistent or wrong kernel state (bsc#1236392)
  * Make sure udev and systemd notice changes in multipath path state
    when devices are added to or removed from multipath maps (bsc#1236321)
  * Fix the problem that `group_by_tpg` might be disabled if one or more
    paths were offline during initial configuration (bsc#1236392)
  * Fix multipathd crash because of invalid path group index value, for example
    if an invalid path device was removed from a map.
    (gh#opensvc/multipath-tools#105, bsc#1236392)
  * Fixed a memory leak in the nvme foreign library.
  * Fixed a problem in the marginal path detection algorithm that could cause
    the io error check for a recently failed path to be delayed.
    (bsc#1236390)
  * Reduce log level of harmless "map ... doesn't exist" message
    (bsc#1236390)</changelog>
  <changelog author="mwilck@suse.com" date="1741176000">- Update to version 0.10.2+122+suse.51e02cc:
  * multipathd: fix hang during shutdown with queuing maps
    (bsc#1238484).
    This adds multipathd-queueing.service.</changelog>
  <changelog author="mwilck@suse.com" date="1751371200">- Update to version 0.10.2+123+suse.48d66ee8:
  * multipathd: cli_reinstate(): avoid reinstated paths being failed again
  (bsc#1244917)</changelog>
  <changelog author="mwilck@suse.com" date="1752494400">- Update to version 0.10.3+124+suse.ed5b4b11:
  * multipath-tools: add HPE MSA Gen7 (2070/2072) to hwtable
    (bsc#1246501)</changelog>
  <changelog author="mwilck@suse.com" date="1762948800">- Update to version 0.10.5+125+suse.1ed79487:
- Fixes from upstream 0.10.5 (see also NEWS.md) (bsc#1253260)
  * Improved the communication with **udev** and **systemd** by triggering
    uevents when path devices are added to or removed from multipath maps,
    or when `multipathd reconfigure` is executed after changing blacklist
    directives in `multipath.conf`.
  * Failed paths should be checked every `polling_interval`. In certain cases,
    this wouldn't happen, because the check interval wasn't reset by multipathd.
  * It could happen that multipathd would accidentally release a SCSI persistent
    reservation held by another node. Fix it.
  * After manually failing some paths and then reinstating them, sometimes
    the reinstated paths were immediately failed again by multipathd. Fix it.
  * Various minor fixes reported by coverity.</changelog>
  <changelog author="mwilck@suse.com" date="1762948801">- _service: switched to tar_scm for git LFS</changelog>
  <changelog author="mwilck@suse.com" date="1763380800">- Update to version 0.10.5+190+suse.a9f87040:
  * CI: GitHub workflow updates. No code changes.</changelog>
  <changelog author="mwilck@suse.com" date="1763380801">- Update to version 0.10.5+198+suse.5875f383:
  * CI: more GitHub workflow updates. No code changes.</changelog>
</package>
<package pkgid="7d0cdb89738c607c88362d43f8c72085e36923cc606498b8a408a6e14a5a473e" name="libdmmp-devel" arch="x86_64">
  <version epoch="0" ver="0.10.6+201+suse.9f189e79" rel="150700.3.11.1"/>
  <changelog author="mwilck@suse.com" date="1709035200">- Remove libmpathpersist-example-old.c, which has been obsolete
  since multipath-tools 0.8.6.</changelog>
  <changelog author="mwilck@suse.com" date="1709640000">- Update to version 0.9.8+87+suse.f72b9f3:
  * fix misspelled DM_UDEV_DISABLE_OTHER_RULES_FLAG in udev rules
    (bsc#1220810)</changelog>
  <changelog author="mwilck@suse.com" date="1712836800">- Update to version 0.9.8+88+suse.d504d83:
  * Revert "libmultipath: fix max_sectors_kb on adding path"
  (bsc#1222458)</changelog>
  <changelog author="mwilck@suse.com" date="1719316800">- Update to version 0.9.9+90+suse.f1d2f20:
  * Fix unit tests on Tumbleweed/armv7l
- Update to 0.9.9 upstream (see NEWS.md for details)
  * Update udev rules to be compliant with device-mapper udev
  rules update in LVM2 &gt;= 2.03.24.
  * Limit real-time scheduling priority to 10 by default. This
  can now be configured in multipathd.service using "LimitRTPRIO="
  * Set max_sectors_kb only on map creation, or when a new path
  is added, to avoid IO errors
  * The configuration option "flush_on_last_del" now takes the
  values "always" (="yes"), "unused" (="no"), and "never". "yes"
  and "no" are still supported
  * Add wildcard %k for max_sectors_kb for CLI commands like
  "multipath show {paths,maps} format"
  * Accept WWID value in CLI commands that take a map name, like
  "resize map $map"
  * Removed support for CLI wildcards for pathgroups, which were
  not function anyway.
  * Fix map failure count for no_path_retry &gt; 0</changelog>
  <changelog author="mwilck@suse.com" date="1721390400">- Update to version 0.9.9+161+suse.0c835ef:
  * Update to upstream reviewed code path (787e00d)
  * Added hardware defaults for Huawei storage arrays and XSG1 vendors
  * Refactored and improved the libultipath / libdevmapper interface
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove`
  (bug introduced in 0.9.9). (bsc#1229898)
  * CI improvements
  * Documentation fixes</changelog>
  <changelog author="mwilck@suse.com" date="1724932800">- Update to 0.10.0+103+suse.0fc97cd
- Update to upstream 0.10.0 (see also NEWS.md)
  * The `multipathd show daemon` command now shows `(reconfigure pending)`
  if a reconfiguration has been triggered but not finished yet.
  * Refactored the path checker loop. Paths are now checked for each multipath
  map in turn
  * Renamed public functions, variables, and macros to comply with the glibc policy
  for reserved names (gh#opensvc/multipath-tools#91)
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove` (bug introduced in
  0.9.9). (bsc#1229898)
  * Fixed old mpathpersist bug leading to the error message "configured reservation
  key doesn't match: 0x0" when `reservation_key` was configured in the
  multipaths section of `multipath.conf`. (bsc#1228926, gh#opensvc/multipath-tools#92)
  * Fixed output of `multipath -t` and `multipath -T` for the options
  `force_sync` and `retrigger_tries`. (bsc#1229898, gh#opensvc/multipath-tools#88)
  * Fixed adding maps by WWID in CLI (command `add map $WWID`). (bsc#1229898)</changelog>
  <changelog author="mwilck@suse.com" date="1730721600">- Update to version 0.10.0+106+suse.ffbdb7a:
  * Fix reboot hang if uevent is processed for suspended device
  (bsc#1232063)</changelog>
  <changelog author="mwilck@suse.com" date="1730808000">- Update to version 0.10.0+108+suse.2c2e597:
  * Update fix for bsc#1232063 to upstream-accepted solution</changelog>
  <changelog author="mwilck@suse.com" date="1732190400">- Update to version 0.10.1~1+113+suse.d6eca5e:
  This is a pre-release of the upstream stable release 0.10.1.
  * libmultipath: dm_get_maps(): don't bail out for single-map failures
  (bsc#1233588, gh#opensvc/multipath-tools#102)
  * libmultipath: don't print error message if WATCHDOG_USEC is 0
  (bsc#1232227)
  * libmultipath: don't set dev_loss_tmo to 0 for NO_PATH_RETRY_FAIL
  * multipathd: fix deferred_failback_tick for reload removes</changelog>
  <changelog author="mwilck@suse.com" date="1732536000">- Update to version 0.10.1~2+112+suse.b66763a:
  * libmultipath: reduce log level of "map X has multiple targets"
  (bsc#1233588)</changelog>
  <changelog author="mwilck@suse.com" date="1737720000">- Update to version 0.10.2+117+suse.33411aa:
  * multipathd: trigger uevents for blacklisted paths in reconfigure
    (bsc#1236321)
  * Make sure maps are reloaded in the path checker loop after detecting an
    inconsistent or wrong kernel state (bsc#1236392)
  * Make sure udev and systemd notice changes in multipath path state
    when devices are added to or removed from multipath maps (bsc#1236321)
  * Fix the problem that `group_by_tpg` might be disabled if one or more
    paths were offline during initial configuration (bsc#1236392)
  * Fix multipathd crash because of invalid path group index value, for example
    if an invalid path device was removed from a map.
    (gh#opensvc/multipath-tools#105, bsc#1236392)
  * Fixed a memory leak in the nvme foreign library.
  * Fixed a problem in the marginal path detection algorithm that could cause
    the io error check for a recently failed path to be delayed.
    (bsc#1236390)
  * Reduce log level of harmless "map ... doesn't exist" message
    (bsc#1236390)</changelog>
  <changelog author="mwilck@suse.com" date="1741176000">- Update to version 0.10.2+122+suse.51e02cc:
  * multipathd: fix hang during shutdown with queuing maps
    (bsc#1238484).
    This adds multipathd-queueing.service.</changelog>
  <changelog author="mwilck@suse.com" date="1751371200">- Update to version 0.10.2+123+suse.48d66ee8:
  * multipathd: cli_reinstate(): avoid reinstated paths being failed again
  (bsc#1244917)</changelog>
  <changelog author="mwilck@suse.com" date="1752494400">- Update to version 0.10.3+124+suse.ed5b4b11:
  * multipath-tools: add HPE MSA Gen7 (2070/2072) to hwtable
    (bsc#1246501)</changelog>
  <changelog author="mwilck@suse.com" date="1762948800">- Update to version 0.10.5+125+suse.1ed79487:
- Fixes from upstream 0.10.5 (see also NEWS.md) (bsc#1253260)
  * Improved the communication with **udev** and **systemd** by triggering
    uevents when path devices are added to or removed from multipath maps,
    or when `multipathd reconfigure` is executed after changing blacklist
    directives in `multipath.conf`.
  * Failed paths should be checked every `polling_interval`. In certain cases,
    this wouldn't happen, because the check interval wasn't reset by multipathd.
  * It could happen that multipathd would accidentally release a SCSI persistent
    reservation held by another node. Fix it.
  * After manually failing some paths and then reinstating them, sometimes
    the reinstated paths were immediately failed again by multipathd. Fix it.
  * Various minor fixes reported by coverity.</changelog>
  <changelog author="mwilck@suse.com" date="1762948801">- _service: switched to tar_scm for git LFS</changelog>
  <changelog author="mwilck@suse.com" date="1763380800">- Update to version 0.10.5+190+suse.a9f87040:
  * CI: GitHub workflow updates. No code changes.</changelog>
  <changelog author="mwilck@suse.com" date="1763726400">- Update to version 0.10.5+213+suse.04c3a0ac:
  * Log offline path state if "log_checker_err always" is set
    (bsc#1254094)
  * mpathpersist: Fix REPORT CAPABILITIES output</changelog>
  <changelog author="mwilck@suse.com" date="1769515200">- Update to version 0.10.6+200+suse.547788f4 (bsc#1257007):
  * kpartx: fix segfault when operating on regular files
    (bsc#1257244, bsc#1257153)
  * multipathd: print path offline message even without a checker
    (bsc#1254094)
  * Fix command descriptions in the multipathd man page.
  * Fix ISO C23 compatibility issue causing errors with new compilers.
  * Fix memory leak caused by not joining the "init unwinder" thread.
  * Fix memory leaks in kpartx.
  * Print the warning "setting scsi timeouts is unsupported for protocol" only
    once per protocol.
  * Make sure multipath-tools is compiled with the compiler flag
    `-fno-strict-aliasing`. (gh#opensvc/multipath-tools#130, bsc#1255285)</changelog>
  <changelog author="mwilck@suse.com" date="1769774400">- Update to version 0.10.6+201+suse.9f189e79:
  * libmultipath: reduce log level of "map X has no targets"
  (bsc#1257476)</changelog>
</package>
<package pkgid="6db7c0973f019b83aa63ce34de646e46e56e5effd9158a8018e940cded063fb7" name="libdmmp0_2_0" arch="x86_64">
  <version epoch="0" ver="0.10.3+124+suse.ed5b4b11" rel="150700.3.3.1"/>
  <changelog author="mwilck@suse.com" date="1704456000">- Update to version 0.9.7+93+suse.e2f2272:
  * fix ANA prioritizer enablement logic (bsc#1218326)
  * avoid setting queue_if_no_path on multipath maps for which the
    no_path_retry timeout has expired
  * the interactive commands "restorequeueing map X" and
    "restorequeing maps" now only affect maps that had queueing
    manually disabled using "disablequeuing maps" or
    "disablequeuing map X" beforehand
  * Spelling fixes</changelog>
  <changelog author="mwilck@suse.com" date="1707739200">- Update to version 0.9.7+140+suse.2d78457:
  * This is a multipath-tools 0.9.8 pre-release
  * Socket activation via multipathd.socket has been disabled by default
    because it has undesirable side effects on systems without multipath.
    Users with multipath hardware should enable multipathd.service
  * The restorequeueing CLI command now only enables queueing if
    disablequeueing had been sent before
  * Avoid multipathd hang during map flush
  * multipathd now tracks the queueing mode of maps in its internal features string
  * Improve error messages in 'multipathd -k'
  * Fix segfault in autoresize code (bsc#1219289)
  * Fix missing map reloads (bsc#1219796)
  * Documentation fixes, spelling fixes, minor code fixes</changelog>
  <changelog author="mwilck@suse.com" date="1707739201">- Update to version 0.9.7+148+suse.7d9953e.obscpio
  * This is a multipath-tools 0.9.8 pre-release
  * fix fast_io_fail for Infinibox (bsc#1219348)
  * Fix activation of LVM volume groups during coldplug (bsc#1219142)</changelog>
  <changelog author="mwilck@suse.com" date="1707912000">- Update to version 0.9.7+148+suse.9780ae0:
  * 11-dm-mpath.rules: Fix quoting mistake (bsc#1219142)</changelog>
  <changelog author="mwilck@suse.com" date="1707998400">- Update to version 0.9.8~1+82+suse.dcd98a3:
  * Adapt package version such that it shows as a 0.9.8 prerelease
  * Add missing udev rules file</changelog>
  <changelog author="mwilck@suse.com" date="1708948800">- Update to version 0.9.8+83+suse.bcae610 (bsc#1220374)
  * multipath-tools: added NEWS.md</changelog>
  <changelog author="mwilck@suse.com" date="1709035200">- Remove libmpathpersist-example-old.c, which has been obsolete
  since multipath-tools 0.8.6.</changelog>
  <changelog author="mwilck@suse.com" date="1709640000">- Update to version 0.9.8+87+suse.f72b9f3:
  * fix misspelled DM_UDEV_DISABLE_OTHER_RULES_FLAG in udev rules
    (bsc#1220810)</changelog>
  <changelog author="mwilck@suse.com" date="1712836800">- Update to version 0.9.8+88+suse.d504d83:
  * Revert "libmultipath: fix max_sectors_kb on adding path"
  (bsc#1222458)</changelog>
  <changelog author="mwilck@suse.com" date="1719316800">- Update to version 0.9.9+90+suse.f1d2f20:
  * Fix unit tests on Tumbleweed/armv7l
- Update to 0.9.9 upstream (see NEWS.md for details)
  * Update udev rules to be compliant with device-mapper udev
  rules update in LVM2 &gt;= 2.03.24.
  * Limit real-time scheduling priority to 10 by default. This
  can now be configured in multipathd.service using "LimitRTPRIO="
  * Set max_sectors_kb only on map creation, or when a new path
  is added, to avoid IO errors
  * The configuration option "flush_on_last_del" now takes the
  values "always" (="yes"), "unused" (="no"), and "never". "yes"
  and "no" are still supported
  * Add wildcard %k for max_sectors_kb for CLI commands like
  "multipath show {paths,maps} format"
  * Accept WWID value in CLI commands that take a map name, like
  "resize map $map"
  * Removed support for CLI wildcards for pathgroups, which were
  not function anyway.
  * Fix map failure count for no_path_retry &gt; 0</changelog>
  <changelog author="mwilck@suse.com" date="1721390400">- Update to version 0.9.9+161+suse.0c835ef:
  * Update to upstream reviewed code path (787e00d)
  * Added hardware defaults for Huawei storage arrays and XSG1 vendors
  * Refactored and improved the libultipath / libdevmapper interface
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove`
  (bug introduced in 0.9.9). (bsc#1229898)
  * CI improvements
  * Documentation fixes</changelog>
  <changelog author="mwilck@suse.com" date="1724932800">- Update to 0.10.0+103+suse.0fc97cd
- Update to upstream 0.10.0 (see also NEWS.md)
  * The `multipathd show daemon` command now shows `(reconfigure pending)`
  if a reconfiguration has been triggered but not finished yet.
  * Refactored the path checker loop. Paths are now checked for each multipath
  map in turn
  * Renamed public functions, variables, and macros to comply with the glibc policy
  for reserved names (gh#opensvc/multipath-tools#91)
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove` (bug introduced in
  0.9.9). (bsc#1229898)
  * Fixed old mpathpersist bug leading to the error message "configured reservation
  key doesn't match: 0x0" when `reservation_key` was configured in the
  multipaths section of `multipath.conf`. (bsc#1228926, gh#opensvc/multipath-tools#92)
  * Fixed output of `multipath -t` and `multipath -T` for the options
  `force_sync` and `retrigger_tries`. (bsc#1229898, gh#opensvc/multipath-tools#88)
  * Fixed adding maps by WWID in CLI (command `add map $WWID`). (bsc#1229898)</changelog>
  <changelog author="mwilck@suse.com" date="1730721600">- Update to version 0.10.0+106+suse.ffbdb7a:
  * Fix reboot hang if uevent is processed for suspended device
  (bsc#1232063)</changelog>
  <changelog author="mwilck@suse.com" date="1730808000">- Update to version 0.10.0+108+suse.2c2e597:
  * Update fix for bsc#1232063 to upstream-accepted solution</changelog>
  <changelog author="mwilck@suse.com" date="1732190400">- Update to version 0.10.1~1+113+suse.d6eca5e:
  This is a pre-release of the upstream stable release 0.10.1.
  * libmultipath: dm_get_maps(): don't bail out for single-map failures
  (bsc#1233588, gh#opensvc/multipath-tools#102)
  * libmultipath: don't print error message if WATCHDOG_USEC is 0
  (bsc#1232227)
  * libmultipath: don't set dev_loss_tmo to 0 for NO_PATH_RETRY_FAIL
  * multipathd: fix deferred_failback_tick for reload removes</changelog>
  <changelog author="mwilck@suse.com" date="1732536000">- Update to version 0.10.1~2+112+suse.b66763a:
  * libmultipath: reduce log level of "map X has multiple targets"
  (bsc#1233588)</changelog>
  <changelog author="mwilck@suse.com" date="1737720000">- Update to version 0.10.2+117+suse.33411aa:
  * multipathd: trigger uevents for blacklisted paths in reconfigure
    (bsc#1236321)
  * Make sure maps are reloaded in the path checker loop after detecting an
    inconsistent or wrong kernel state (bsc#1236392)
  * Make sure udev and systemd notice changes in multipath path state
    when devices are added to or removed from multipath maps (bsc#1236321)
  * Fix the problem that `group_by_tpg` might be disabled if one or more
    paths were offline during initial configuration (bsc#1236392)
  * Fix multipathd crash because of invalid path group index value, for example
    if an invalid path device was removed from a map.
    (gh#opensvc/multipath-tools#105, bsc#1236392)
  * Fixed a memory leak in the nvme foreign library.
  * Fixed a problem in the marginal path detection algorithm that could cause
    the io error check for a recently failed path to be delayed.
    (bsc#1236390)
  * Reduce log level of harmless "map ... doesn't exist" message
    (bsc#1236390)</changelog>
  <changelog author="mwilck@suse.com" date="1741176000">- Update to version 0.10.2+122+suse.51e02cc:
  * multipathd: fix hang during shutdown with queuing maps
    (bsc#1238484).
    This adds multipathd-queueing.service.</changelog>
  <changelog author="mwilck@suse.com" date="1751371200">- Update to version 0.10.2+123+suse.48d66ee8:
  * multipathd: cli_reinstate(): avoid reinstated paths being failed again
  (bsc#1244917)</changelog>
  <changelog author="mwilck@suse.com" date="1752494400">- Update to version 0.10.3+124+suse.ed5b4b11:
  * multipath-tools: add HPE MSA Gen7 (2070/2072) to hwtable
    (bsc#1246501)</changelog>
</package>
<package pkgid="4fbb2e7f705769bade4e129468a589636d55013d55d14e585f1327e23a0277af" name="libdmmp0_2_0" arch="x86_64">
  <version epoch="0" ver="0.10.5+198+suse.5875f383" rel="150700.3.6.1"/>
  <changelog author="mwilck@suse.com" date="1707998400">- Update to version 0.9.8~1+82+suse.dcd98a3:
  * Adapt package version such that it shows as a 0.9.8 prerelease
  * Add missing udev rules file</changelog>
  <changelog author="mwilck@suse.com" date="1708948800">- Update to version 0.9.8+83+suse.bcae610 (bsc#1220374)
  * multipath-tools: added NEWS.md</changelog>
  <changelog author="mwilck@suse.com" date="1709035200">- Remove libmpathpersist-example-old.c, which has been obsolete
  since multipath-tools 0.8.6.</changelog>
  <changelog author="mwilck@suse.com" date="1709640000">- Update to version 0.9.8+87+suse.f72b9f3:
  * fix misspelled DM_UDEV_DISABLE_OTHER_RULES_FLAG in udev rules
    (bsc#1220810)</changelog>
  <changelog author="mwilck@suse.com" date="1712836800">- Update to version 0.9.8+88+suse.d504d83:
  * Revert "libmultipath: fix max_sectors_kb on adding path"
  (bsc#1222458)</changelog>
  <changelog author="mwilck@suse.com" date="1719316800">- Update to version 0.9.9+90+suse.f1d2f20:
  * Fix unit tests on Tumbleweed/armv7l
- Update to 0.9.9 upstream (see NEWS.md for details)
  * Update udev rules to be compliant with device-mapper udev
  rules update in LVM2 &gt;= 2.03.24.
  * Limit real-time scheduling priority to 10 by default. This
  can now be configured in multipathd.service using "LimitRTPRIO="
  * Set max_sectors_kb only on map creation, or when a new path
  is added, to avoid IO errors
  * The configuration option "flush_on_last_del" now takes the
  values "always" (="yes"), "unused" (="no"), and "never". "yes"
  and "no" are still supported
  * Add wildcard %k for max_sectors_kb for CLI commands like
  "multipath show {paths,maps} format"
  * Accept WWID value in CLI commands that take a map name, like
  "resize map $map"
  * Removed support for CLI wildcards for pathgroups, which were
  not function anyway.
  * Fix map failure count for no_path_retry &gt; 0</changelog>
  <changelog author="mwilck@suse.com" date="1721390400">- Update to version 0.9.9+161+suse.0c835ef:
  * Update to upstream reviewed code path (787e00d)
  * Added hardware defaults for Huawei storage arrays and XSG1 vendors
  * Refactored and improved the libultipath / libdevmapper interface
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove`
  (bug introduced in 0.9.9). (bsc#1229898)
  * CI improvements
  * Documentation fixes</changelog>
  <changelog author="mwilck@suse.com" date="1724932800">- Update to 0.10.0+103+suse.0fc97cd
- Update to upstream 0.10.0 (see also NEWS.md)
  * The `multipathd show daemon` command now shows `(reconfigure pending)`
  if a reconfiguration has been triggered but not finished yet.
  * Refactored the path checker loop. Paths are now checked for each multipath
  map in turn
  * Renamed public functions, variables, and macros to comply with the glibc policy
  for reserved names (gh#opensvc/multipath-tools#91)
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove` (bug introduced in
  0.9.9). (bsc#1229898)
  * Fixed old mpathpersist bug leading to the error message "configured reservation
  key doesn't match: 0x0" when `reservation_key` was configured in the
  multipaths section of `multipath.conf`. (bsc#1228926, gh#opensvc/multipath-tools#92)
  * Fixed output of `multipath -t` and `multipath -T` for the options
  `force_sync` and `retrigger_tries`. (bsc#1229898, gh#opensvc/multipath-tools#88)
  * Fixed adding maps by WWID in CLI (command `add map $WWID`). (bsc#1229898)</changelog>
  <changelog author="mwilck@suse.com" date="1730721600">- Update to version 0.10.0+106+suse.ffbdb7a:
  * Fix reboot hang if uevent is processed for suspended device
  (bsc#1232063)</changelog>
  <changelog author="mwilck@suse.com" date="1730808000">- Update to version 0.10.0+108+suse.2c2e597:
  * Update fix for bsc#1232063 to upstream-accepted solution</changelog>
  <changelog author="mwilck@suse.com" date="1732190400">- Update to version 0.10.1~1+113+suse.d6eca5e:
  This is a pre-release of the upstream stable release 0.10.1.
  * libmultipath: dm_get_maps(): don't bail out for single-map failures
  (bsc#1233588, gh#opensvc/multipath-tools#102)
  * libmultipath: don't print error message if WATCHDOG_USEC is 0
  (bsc#1232227)
  * libmultipath: don't set dev_loss_tmo to 0 for NO_PATH_RETRY_FAIL
  * multipathd: fix deferred_failback_tick for reload removes</changelog>
  <changelog author="mwilck@suse.com" date="1732536000">- Update to version 0.10.1~2+112+suse.b66763a:
  * libmultipath: reduce log level of "map X has multiple targets"
  (bsc#1233588)</changelog>
  <changelog author="mwilck@suse.com" date="1737720000">- Update to version 0.10.2+117+suse.33411aa:
  * multipathd: trigger uevents for blacklisted paths in reconfigure
    (bsc#1236321)
  * Make sure maps are reloaded in the path checker loop after detecting an
    inconsistent or wrong kernel state (bsc#1236392)
  * Make sure udev and systemd notice changes in multipath path state
    when devices are added to or removed from multipath maps (bsc#1236321)
  * Fix the problem that `group_by_tpg` might be disabled if one or more
    paths were offline during initial configuration (bsc#1236392)
  * Fix multipathd crash because of invalid path group index value, for example
    if an invalid path device was removed from a map.
    (gh#opensvc/multipath-tools#105, bsc#1236392)
  * Fixed a memory leak in the nvme foreign library.
  * Fixed a problem in the marginal path detection algorithm that could cause
    the io error check for a recently failed path to be delayed.
    (bsc#1236390)
  * Reduce log level of harmless "map ... doesn't exist" message
    (bsc#1236390)</changelog>
  <changelog author="mwilck@suse.com" date="1741176000">- Update to version 0.10.2+122+suse.51e02cc:
  * multipathd: fix hang during shutdown with queuing maps
    (bsc#1238484).
    This adds multipathd-queueing.service.</changelog>
  <changelog author="mwilck@suse.com" date="1751371200">- Update to version 0.10.2+123+suse.48d66ee8:
  * multipathd: cli_reinstate(): avoid reinstated paths being failed again
  (bsc#1244917)</changelog>
  <changelog author="mwilck@suse.com" date="1752494400">- Update to version 0.10.3+124+suse.ed5b4b11:
  * multipath-tools: add HPE MSA Gen7 (2070/2072) to hwtable
    (bsc#1246501)</changelog>
  <changelog author="mwilck@suse.com" date="1762948800">- Update to version 0.10.5+125+suse.1ed79487:
- Fixes from upstream 0.10.5 (see also NEWS.md) (bsc#1253260)
  * Improved the communication with **udev** and **systemd** by triggering
    uevents when path devices are added to or removed from multipath maps,
    or when `multipathd reconfigure` is executed after changing blacklist
    directives in `multipath.conf`.
  * Failed paths should be checked every `polling_interval`. In certain cases,
    this wouldn't happen, because the check interval wasn't reset by multipathd.
  * It could happen that multipathd would accidentally release a SCSI persistent
    reservation held by another node. Fix it.
  * After manually failing some paths and then reinstating them, sometimes
    the reinstated paths were immediately failed again by multipathd. Fix it.
  * Various minor fixes reported by coverity.</changelog>
  <changelog author="mwilck@suse.com" date="1762948801">- _service: switched to tar_scm for git LFS</changelog>
  <changelog author="mwilck@suse.com" date="1763380800">- Update to version 0.10.5+190+suse.a9f87040:
  * CI: GitHub workflow updates. No code changes.</changelog>
  <changelog author="mwilck@suse.com" date="1763380801">- Update to version 0.10.5+198+suse.5875f383:
  * CI: more GitHub workflow updates. No code changes.</changelog>
</package>
<package pkgid="25ee2f6e3d2cfb396aeff8f489271e68750bbb76c8b0755a2d34121df95ad7dd" name="libdmmp0_2_0" arch="x86_64">
  <version epoch="0" ver="0.10.6+201+suse.9f189e79" rel="150700.3.11.1"/>
  <changelog author="mwilck@suse.com" date="1709035200">- Remove libmpathpersist-example-old.c, which has been obsolete
  since multipath-tools 0.8.6.</changelog>
  <changelog author="mwilck@suse.com" date="1709640000">- Update to version 0.9.8+87+suse.f72b9f3:
  * fix misspelled DM_UDEV_DISABLE_OTHER_RULES_FLAG in udev rules
    (bsc#1220810)</changelog>
  <changelog author="mwilck@suse.com" date="1712836800">- Update to version 0.9.8+88+suse.d504d83:
  * Revert "libmultipath: fix max_sectors_kb on adding path"
  (bsc#1222458)</changelog>
  <changelog author="mwilck@suse.com" date="1719316800">- Update to version 0.9.9+90+suse.f1d2f20:
  * Fix unit tests on Tumbleweed/armv7l
- Update to 0.9.9 upstream (see NEWS.md for details)
  * Update udev rules to be compliant with device-mapper udev
  rules update in LVM2 &gt;= 2.03.24.
  * Limit real-time scheduling priority to 10 by default. This
  can now be configured in multipathd.service using "LimitRTPRIO="
  * Set max_sectors_kb only on map creation, or when a new path
  is added, to avoid IO errors
  * The configuration option "flush_on_last_del" now takes the
  values "always" (="yes"), "unused" (="no"), and "never". "yes"
  and "no" are still supported
  * Add wildcard %k for max_sectors_kb for CLI commands like
  "multipath show {paths,maps} format"
  * Accept WWID value in CLI commands that take a map name, like
  "resize map $map"
  * Removed support for CLI wildcards for pathgroups, which were
  not function anyway.
  * Fix map failure count for no_path_retry &gt; 0</changelog>
  <changelog author="mwilck@suse.com" date="1721390400">- Update to version 0.9.9+161+suse.0c835ef:
  * Update to upstream reviewed code path (787e00d)
  * Added hardware defaults for Huawei storage arrays and XSG1 vendors
  * Refactored and improved the libultipath / libdevmapper interface
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove`
  (bug introduced in 0.9.9). (bsc#1229898)
  * CI improvements
  * Documentation fixes</changelog>
  <changelog author="mwilck@suse.com" date="1724932800">- Update to 0.10.0+103+suse.0fc97cd
- Update to upstream 0.10.0 (see also NEWS.md)
  * The `multipathd show daemon` command now shows `(reconfigure pending)`
  if a reconfiguration has been triggered but not finished yet.
  * Refactored the path checker loop. Paths are now checked for each multipath
  map in turn
  * Renamed public functions, variables, and macros to comply with the glibc policy
  for reserved names (gh#opensvc/multipath-tools#91)
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove` (bug introduced in
  0.9.9). (bsc#1229898)
  * Fixed old mpathpersist bug leading to the error message "configured reservation
  key doesn't match: 0x0" when `reservation_key` was configured in the
  multipaths section of `multipath.conf`. (bsc#1228926, gh#opensvc/multipath-tools#92)
  * Fixed output of `multipath -t` and `multipath -T` for the options
  `force_sync` and `retrigger_tries`. (bsc#1229898, gh#opensvc/multipath-tools#88)
  * Fixed adding maps by WWID in CLI (command `add map $WWID`). (bsc#1229898)</changelog>
  <changelog author="mwilck@suse.com" date="1730721600">- Update to version 0.10.0+106+suse.ffbdb7a:
  * Fix reboot hang if uevent is processed for suspended device
  (bsc#1232063)</changelog>
  <changelog author="mwilck@suse.com" date="1730808000">- Update to version 0.10.0+108+suse.2c2e597:
  * Update fix for bsc#1232063 to upstream-accepted solution</changelog>
  <changelog author="mwilck@suse.com" date="1732190400">- Update to version 0.10.1~1+113+suse.d6eca5e:
  This is a pre-release of the upstream stable release 0.10.1.
  * libmultipath: dm_get_maps(): don't bail out for single-map failures
  (bsc#1233588, gh#opensvc/multipath-tools#102)
  * libmultipath: don't print error message if WATCHDOG_USEC is 0
  (bsc#1232227)
  * libmultipath: don't set dev_loss_tmo to 0 for NO_PATH_RETRY_FAIL
  * multipathd: fix deferred_failback_tick for reload removes</changelog>
  <changelog author="mwilck@suse.com" date="1732536000">- Update to version 0.10.1~2+112+suse.b66763a:
  * libmultipath: reduce log level of "map X has multiple targets"
  (bsc#1233588)</changelog>
  <changelog author="mwilck@suse.com" date="1737720000">- Update to version 0.10.2+117+suse.33411aa:
  * multipathd: trigger uevents for blacklisted paths in reconfigure
    (bsc#1236321)
  * Make sure maps are reloaded in the path checker loop after detecting an
    inconsistent or wrong kernel state (bsc#1236392)
  * Make sure udev and systemd notice changes in multipath path state
    when devices are added to or removed from multipath maps (bsc#1236321)
  * Fix the problem that `group_by_tpg` might be disabled if one or more
    paths were offline during initial configuration (bsc#1236392)
  * Fix multipathd crash because of invalid path group index value, for example
    if an invalid path device was removed from a map.
    (gh#opensvc/multipath-tools#105, bsc#1236392)
  * Fixed a memory leak in the nvme foreign library.
  * Fixed a problem in the marginal path detection algorithm that could cause
    the io error check for a recently failed path to be delayed.
    (bsc#1236390)
  * Reduce log level of harmless "map ... doesn't exist" message
    (bsc#1236390)</changelog>
  <changelog author="mwilck@suse.com" date="1741176000">- Update to version 0.10.2+122+suse.51e02cc:
  * multipathd: fix hang during shutdown with queuing maps
    (bsc#1238484).
    This adds multipathd-queueing.service.</changelog>
  <changelog author="mwilck@suse.com" date="1751371200">- Update to version 0.10.2+123+suse.48d66ee8:
  * multipathd: cli_reinstate(): avoid reinstated paths being failed again
  (bsc#1244917)</changelog>
  <changelog author="mwilck@suse.com" date="1752494400">- Update to version 0.10.3+124+suse.ed5b4b11:
  * multipath-tools: add HPE MSA Gen7 (2070/2072) to hwtable
    (bsc#1246501)</changelog>
  <changelog author="mwilck@suse.com" date="1762948800">- Update to version 0.10.5+125+suse.1ed79487:
- Fixes from upstream 0.10.5 (see also NEWS.md) (bsc#1253260)
  * Improved the communication with **udev** and **systemd** by triggering
    uevents when path devices are added to or removed from multipath maps,
    or when `multipathd reconfigure` is executed after changing blacklist
    directives in `multipath.conf`.
  * Failed paths should be checked every `polling_interval`. In certain cases,
    this wouldn't happen, because the check interval wasn't reset by multipathd.
  * It could happen that multipathd would accidentally release a SCSI persistent
    reservation held by another node. Fix it.
  * After manually failing some paths and then reinstating them, sometimes
    the reinstated paths were immediately failed again by multipathd. Fix it.
  * Various minor fixes reported by coverity.</changelog>
  <changelog author="mwilck@suse.com" date="1762948801">- _service: switched to tar_scm for git LFS</changelog>
  <changelog author="mwilck@suse.com" date="1763380800">- Update to version 0.10.5+190+suse.a9f87040:
  * CI: GitHub workflow updates. No code changes.</changelog>
  <changelog author="mwilck@suse.com" date="1763726400">- Update to version 0.10.5+213+suse.04c3a0ac:
  * Log offline path state if "log_checker_err always" is set
    (bsc#1254094)
  * mpathpersist: Fix REPORT CAPABILITIES output</changelog>
  <changelog author="mwilck@suse.com" date="1769515200">- Update to version 0.10.6+200+suse.547788f4 (bsc#1257007):
  * kpartx: fix segfault when operating on regular files
    (bsc#1257244, bsc#1257153)
  * multipathd: print path offline message even without a checker
    (bsc#1254094)
  * Fix command descriptions in the multipathd man page.
  * Fix ISO C23 compatibility issue causing errors with new compilers.
  * Fix memory leak caused by not joining the "init unwinder" thread.
  * Fix memory leaks in kpartx.
  * Print the warning "setting scsi timeouts is unsupported for protocol" only
    once per protocol.
  * Make sure multipath-tools is compiled with the compiler flag
    `-fno-strict-aliasing`. (gh#opensvc/multipath-tools#130, bsc#1255285)</changelog>
  <changelog author="mwilck@suse.com" date="1769774400">- Update to version 0.10.6+201+suse.9f189e79:
  * libmultipath: reduce log level of "map X has no targets"
  (bsc#1257476)</changelog>
</package>
<package pkgid="428fa436a0700ebb9683a77401cc1d5cb8e509c6e93b03ca14855628f0b1fb42" name="libdns1605" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="150300.22.53.1"/>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642507200">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- When using forwarders, bogus NS records supplied by, or via, those
  forwarders may be cached and used by named if it needs to recurse
  for any reason, causing it to obtain and pass on potentially
  incorrect answers.
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657108800">- Changed ownership of /var/lib/named/master from named:named to
  root:root.
  [bsc#1201247, bind.conf]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Security Fixes:
  * Previously, there was no limit to the number of database lookups
  performed while processing large delegations, which could be abused
  to severely impact the performance of named running as a recursive
  resolver. This has been fixed.
  [bsc#1203614, CVE-2022-2795, bind-CVE-2022-2795.patch]
  * A memory leak was fixed that could be externally triggered in the
  DNSSEC verification code for the ECDSA algorithm.
  [bsc#1203619, CVE-2022-38177, bind-CVE-2022-38177.patch]
  * Memory leaks were fixed that could be externally triggered in the
  DNSSEC verification code for the EdDSA algorithm.
  [bsc#1203620, CVE-2022-38178, bind-CVE-2022-38178.patch]</changelog>
  <changelog author="scabrero@suse.de" date="1669636800">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1674734400">- Security Fix:
  * An UPDATE message flood could cause named to exhaust all
    available memory. This flaw was addressed by adding a new
    update-quota option that controls the maximum number of
    outstanding DNS UPDATE messages that named can hold in a queue
    at any given time (default: 100).
  [bsc#1207471, CVE-2022-3094, bind-CVE-2022-3094.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1687435200">- Security Fix:
  * The overmem cleaning process has been improved, to prevent the
    cache from significantly exceeding the configured
    max-cache-size limit.
  [bsc#1212544, CVE-2023-2828, bind-CVE-2023-2828.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1689076800">- Add dnstap support
  [jsc#PED-4852]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1693483200">- Add libs as requires because they may need to be updated when
  installing bind
  [bsc#1213748]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1695297600">- Security Fix:
  * Previously, sending a specially crafted message over the
    control channel could cause the packet-parsing code to run out
    of available stack memory, causing named to terminate
    unexpectedly. This has been fixed.
  [bsc#1215472, CVE-2023-3341, bind-CVE-2023-3341.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1717675200">- Security Fixes:
  * Validating DNS messages containing a lot of DNSSEC signatures
    could cause excessive CPU load, leading to a denial-of-service
    condition. This has been fixed. (CVE-2023-50387)
    [bsc#1219823, bind-CVE-2023-50387-CVE-2023-50868.patch]
  * Preparing an NSEC3 closest encloser proof could cause excessiv
    CPU load, leading to a denial-of-service condition. This has
    been fixed. (CVE-2023-50868)
    [bsc#1219826, bind-CVE-2023-50387-CVE-2023-50868.patch]
  * Parsing DNS messages with many different names could cause
    excessive CPU load. This has been fixed. (CVE-2023-4408)
    [bsc#1219851, bind-CVE-2023-4408.patch]
  * Specific queries could cause named to crash with an assertion
    failure when nxdomain-redirect was enabled. This has been
    fixed. (CVE-2023-5517)
    [bsc#1219852, bind-CVE-2023-5517.patch]
  * Query patterns that continuously triggered cache database
    maintenance could cause an excessive amount of memory to be
    allocated, exceeding max-cache-size and potentially leading to
    all available memory on the host running named being exhausted
    This has been fixed. (CVE-2023-6516)
    [bsc#1219854, bind-CVE-2023-6516.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1722427200">- Security Fixes:
  * It is possible to craft excessively large numbers of resource
    record types for a given owner name, which has the effect of
    slowing down database processing. This has been addressed by
    adding a configurable limit to the number of records that can
    be stored per name and type in a cache or zone database. The
    default is 100, which can be tuned with the new
    max-types-per-name option. (CVE-2024-1737)
    [bsc#1228256, bind-9.16-CVE-2024-1737.patch]
  * Validating DNS messages signed using the SIG(0) protocol (RFC
    2931) could cause excessive CPU load, leading to a
    denial-of-service condition. Support for SIG(0) message
    validation was removed from this version of named.
    (CVE-2024-1975)
    [bsc#1228257, bind-9.16-CVE-2024-1975.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Limit additional section processing for large RDATA sets.
  When answering queries, don’t add data to the additional
  section if the answer has more than 13 names in the RDATA. This
  limits the number of lookups into the database(s) during a
  single client query, reducing the query-processing load.
  (CVE-2024-11187)
  [bsc#1236596, bind-9.16.6-CVE-2024-11187.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761220800">- Security Fixes:
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379, bind-9.16.6-CVE-2025-40778.patch]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380, bind-9.16.6-CVE-2025-40780.patch]</changelog>
</package>
<package pkgid="3535ededa799963a5fb670d567b30282750b2554aa8490384a5e2827ca8104e5" name="libdns1605" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="150300.22.56.1"/>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642507200">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- When using forwarders, bogus NS records supplied by, or via, those
  forwarders may be cached and used by named if it needs to recurse
  for any reason, causing it to obtain and pass on potentially
  incorrect answers.
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657108800">- Changed ownership of /var/lib/named/master from named:named to
  root:root.
  [bsc#1201247, bind.conf]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Security Fixes:
  * Previously, there was no limit to the number of database lookups
  performed while processing large delegations, which could be abused
  to severely impact the performance of named running as a recursive
  resolver. This has been fixed.
  [bsc#1203614, CVE-2022-2795, bind-CVE-2022-2795.patch]
  * A memory leak was fixed that could be externally triggered in the
  DNSSEC verification code for the ECDSA algorithm.
  [bsc#1203619, CVE-2022-38177, bind-CVE-2022-38177.patch]
  * Memory leaks were fixed that could be externally triggered in the
  DNSSEC verification code for the EdDSA algorithm.
  [bsc#1203620, CVE-2022-38178, bind-CVE-2022-38178.patch]</changelog>
  <changelog author="scabrero@suse.de" date="1669636800">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1674734400">- Security Fix:
  * An UPDATE message flood could cause named to exhaust all
    available memory. This flaw was addressed by adding a new
    update-quota option that controls the maximum number of
    outstanding DNS UPDATE messages that named can hold in a queue
    at any given time (default: 100).
  [bsc#1207471, CVE-2022-3094, bind-CVE-2022-3094.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1687435200">- Security Fix:
  * The overmem cleaning process has been improved, to prevent the
    cache from significantly exceeding the configured
    max-cache-size limit.
  [bsc#1212544, CVE-2023-2828, bind-CVE-2023-2828.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1689076800">- Add dnstap support
  [jsc#PED-4852]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1693483200">- Add libs as requires because they may need to be updated when
  installing bind
  [bsc#1213748]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1695297600">- Security Fix:
  * Previously, sending a specially crafted message over the
    control channel could cause the packet-parsing code to run out
    of available stack memory, causing named to terminate
    unexpectedly. This has been fixed.
  [bsc#1215472, CVE-2023-3341, bind-CVE-2023-3341.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1717675200">- Security Fixes:
  * Validating DNS messages containing a lot of DNSSEC signatures
    could cause excessive CPU load, leading to a denial-of-service
    condition. This has been fixed. (CVE-2023-50387)
    [bsc#1219823, bind-CVE-2023-50387-CVE-2023-50868.patch]
  * Preparing an NSEC3 closest encloser proof could cause excessiv
    CPU load, leading to a denial-of-service condition. This has
    been fixed. (CVE-2023-50868)
    [bsc#1219826, bind-CVE-2023-50387-CVE-2023-50868.patch]
  * Parsing DNS messages with many different names could cause
    excessive CPU load. This has been fixed. (CVE-2023-4408)
    [bsc#1219851, bind-CVE-2023-4408.patch]
  * Specific queries could cause named to crash with an assertion
    failure when nxdomain-redirect was enabled. This has been
    fixed. (CVE-2023-5517)
    [bsc#1219852, bind-CVE-2023-5517.patch]
  * Query patterns that continuously triggered cache database
    maintenance could cause an excessive amount of memory to be
    allocated, exceeding max-cache-size and potentially leading to
    all available memory on the host running named being exhausted
    This has been fixed. (CVE-2023-6516)
    [bsc#1219854, bind-CVE-2023-6516.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1722427200">- Security Fixes:
  * It is possible to craft excessively large numbers of resource
    record types for a given owner name, which has the effect of
    slowing down database processing. This has been addressed by
    adding a configurable limit to the number of records that can
    be stored per name and type in a cache or zone database. The
    default is 100, which can be tuned with the new
    max-types-per-name option. (CVE-2024-1737)
    [bsc#1228256, bind-9.16-CVE-2024-1737.patch]
  * Validating DNS messages signed using the SIG(0) protocol (RFC
    2931) could cause excessive CPU load, leading to a
    denial-of-service condition. Support for SIG(0) message
    validation was removed from this version of named.
    (CVE-2024-1975)
    [bsc#1228257, bind-9.16-CVE-2024-1975.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Limit additional section processing for large RDATA sets.
  When answering queries, don’t add data to the additional
  section if the answer has more than 13 names in the RDATA. This
  limits the number of lookups into the database(s) during a
  single client query, reducing the query-processing load.
  (CVE-2024-11187)
  [bsc#1236596, bind-9.16.6-CVE-2024-11187.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761220800">- Security Fixes:
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379, bind-9.16.6-CVE-2025-40778.patch]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380, bind-9.16.6-CVE-2025-40780.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1775044800">- Fix unbounded NSEC3 iterations when validating referrals to
  unsigned delegations.
  (CVE-2026-1519)
  [bsc#1260805, bind-9.16.6-CVE-2026-1519.patch]</changelog>
</package>
<package pkgid="6ef9cb0a84810457cd0a1c49d35e02ed2706c84fdb5e516e99287edad705122e" name="libdns_sd" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.12.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- avahi-daemon-check-dns.sh: convert obsolete egrep call to grep -E
  (boo#1203092)</changelog>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
</package>
<package pkgid="37fcdc3def3db556f055564e55bf69f8c3308e0f81a4e3e7b861576aeaf79b32" name="libdns_sd" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.15.1"/>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1775044800">- Add avahi-CVE-2026-24401.patch: Fix unsolicited mDNS response
  containing a recursive CNAME record (bsc#1257235).</changelog>
</package>
<package pkgid="65022d37a3f9fd58c1c053d2ac4ff85cffdad43c08eb7ac70e8b6bf1a7c4eb70" name="libdns_sd" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.9.1"/>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="jengelh@inai.de" date="1650024000">- Stop requiring "avahi" from "libavahi-devel". The devel package
  ought to facilitate building programs with avahi, not run the
  whole deamon.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1657368000">- Move the dbus-1 system.d file to /usr (bsc#1201345)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- avahi-daemon-check-dns.sh: convert obsolete egrep call to grep -E
  (boo#1203092)</changelog>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
</package>
<package pkgid="af814640ed5ea2db3bfc83a38fde2c3c982fd43a10eab7034e7d1b7296cf8db2" name="libdw-devel" arch="x86_64">
  <version epoch="0" ver="0.185" rel="150400.5.8.3"/>
  <changelog author="jengelh@inai.de" date="1579780800">- Avoid double-shipping libdebuginfo.so.1 in two different
  subpackages. Fixup RPM group.</changelog>
  <changelog author="mliska@suse.cz" date="1580817600">- Exclude debuginfod sub-packages and move them to elfutils-debuginfod.</changelog>
  <changelog author="dimstar@opensuse.org" date="1581336000">- Re-add libelf1 to baselibs.conf: we still generate a
  libelf-devel-32bit, which is only installable if libelf1-21bit
  also exists.</changelog>
  <changelog author="mliska@suse.cz" date="1585569600">- Update to version 0.179:
  debuginfod-client: When DEBUGINFOD_PROGRESS is set and the program doesn't
    install its own debuginfod_progressfn_t show download
    progress on stderr.
    DEBUGINFOD_TIMEOUT is now defined as seconds to get at
    least 100K, defaults to 90 seconds.
    Default to $XDG_CACHE_HOME/debuginfod_client.
    New functions debuginfod_set_user_data,
    debuginfod_get_user_data, debuginfod_get_url and
    debuginfod_add_http_header.
    Support for file:// URLs.
  debuginfod: Uses libarchive directly for reading rpm archives.
    Support for indexing .deb/.ddeb archives through dpkg-deb
    or bsdtar.
    Generic archive support through -Z EXT[=CMD]. Which can be
    used for example for arch-linux pacman files by using
  - Z '.tar.zst=zstdcat'.
    Better logging using User-Agent and X-Forwarded-For headers.
    More prometheus metrics.
    Support for eliding dots or extraneous slashes in path names.
  debuginfod-find: Accept /path/names in place of buildid hex.
  libelf: Handle PN_XNUM in elf_getphdrnum before shdr 0 is cached
    Ensure zlib resource cleanup on failure.
  libdwfl: dwfl_linux_kernel_find_elf and dwfl_linux_kernel_report_offline
    now find and handle a compressed vmlinuz image.
  readelf, elflint: Handle PT_GNU_PROPERTY.
  translations: Updated Ukrainian translation.</changelog>
  <changelog author="mliska@suse.cz" date="1591876800">- Update to version 0.180:
  elflint: Allow SHF_EXCLUDE as generic section flag when --gnu is given.
  libdw, readelf: Handle GCC LTO .gnu.debuglto_ prefix.
  libdw: Use correct CU to resolve file names in dwarf_decl_file.
  libdwfl: Handle debugaltlink in dwfl_standard_find_debuginfo.
  size: Also obey radix printing for bsd format.
  nm: Explicitly print weak 'V' or 'T' and common 'C' symbols.
- Add 0001-tests-Add-GCOV-flags-when-necessary.patch in order to fix
  an unresolved symbol.
- Enable LTO: boo#1138796 by adding -flto-partition=none and -Wno-error=stack-usage.</changelog>
  <changelog author="mliska@suse.cz" date="1592222400">- Remove cfi-fix.patch - should not be needed now.
- Remove remove-run-large-elf-file.sh.patch as it now checks for memory
  size.
- Use autosetup.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1599566400">- Update to version 0.181:
  libelf: elf_update now compensates (fixes up) a bad sh_addralign for
    SHF_COMPRESSED sections.
  libdebuginfod: configure now takes --enable-libdebuginfod=dummy or
  - -disable-libdebuginfod for bootstrapping.
    DEBUGINFOD_URLS now accepts "scheme-free" urls
    (guessing at what the user meant, either http:// or file://)
  readelf, elflint: Handle aarch64 bti, pac bits in dynamic table and gnu
    property notes.
  libdw, readelf: Recognize DW_CFA_AARCH64_negate_ra_state. Allows unwinding
    on arm64 for code that is compiled for PAC (Pointer
    Authentication Code) as long as it isn't enabled
- Drop upstream patch:
  * 0001-tests-Add-GCOV-flags-when-necessary.patch</changelog>
  <changelog author="mliska@suse.cz" date="1600776000">- Creatu dummy subpackages that can be used for build of packages
  that are in bootstrap cycle.
- Add Provides for real packages.</changelog>
  <changelog author="mliska@suse.cz" date="1604577600">- Add rpmlintrc for
  libdebuginfod1-dummy.s390x: E: shlib-policy-name-error (Badness: 10000) libdebuginfod1
  which is expected as libdebuginfod1 and it's dummy library do share equal
  soname.
- Update to version 0.182:
  backends: Support for tilegx has been removed.
  config: New /etc/profile.d files to provide default $DEBUGINFOD_URLS.
  debuginfod: More efficient package traversal, tolerate various errors
    during scanning, grooming progress is more visible and
    interruptible, more prometheus metrics.
  debuginfod-client: Now supports compressed (kernel) ELF images.
  libdwfl: Add ZSTD compression support.</changelog>
  <changelog author="mliska@suse.cz" date="1606737600">- Mention elfutils-rpmlintrc as a Source.</changelog>
  <changelog author="mliska@suse.cz" date="1611144000">- Enable LTO (boo#1138796) for elfutils.spec.</changelog>
  <changelog author="mliska@suse.cz" date="1612785600">- Update to version 0.183:
  debuginfod: New thread-busy metric and more detailed error metrics.
    New --fdcache-mintmp and tracking of filesystem freespace.
    New increased webapi concurrency while grooming.
  debuginfod-client: DEBUGINFOD_SONAME macro added to debuginfod.h which
    can be used to dlopen the libdebuginfod.so library.
    New function debuginfod_set_verbose_fd and
    DEBUGINFOD_VERBOSE environment variable.
  config: profile.sh and profile.csh won't export DEBUGINFOD_URLS unless
    configured --enable-debuginfod-urls[=URLS]
  elflint, readelf: Recognize SHF_GNU_RETAIN.
    Handle SHT_X86_64_UNWIND as valid relocation target.
- Remove config-do-not-define-DEBUGINFOD_URLS-environment-var.patch patch.</changelog>
  <changelog author="mliska@suse.cz" date="1615982400">- Add disable-run-readelf-self-test.patch in order to disable
  a failing test-case with GCC 11 (PR27367).</changelog>
  <changelog author="mliska@suse.cz" date="1620648000">- Update to version 0.184:
  debuginfod: Use libarchive's bsdtar as the .deb-family file unpacker.
  debuginfod-client: Client caches negative results. If a query for a
    file failed with 404, an empty 000 permission
    file is created in the cache. This will prevent
    requesting the same file for the next 10 minutes.
    Client objects now carry long-lived curl handles
    for outgoing connections.  This makes it more
    efficient for multiple sequential queries, because
    the TCP connections and/or TLS state info are kept
    around awhile, avoiding O(100ms) setup latencies.
  libdw: handle DW_FORM_indirect when reading attributes
  translations: Update Polish translation.</changelog>
  <changelog author="mliska@suse.cz" date="1621857600">- Update to version 0.185:
  debuginfod-client: Simplify curl handle reuse so downloads which
    return an error are retried.
  elfcompress: Always exit with code 0 when the operation succeeds (even
    when nothing was done). On error the exit code is now always 1.</changelog>
  <changelog author="jcheung@suse.com" date="1626004800">- For version 0.185, the below patches are no longer needed
  (jsc#SLE-17288, jsc#SLE-17951)
  libdw-check-end-of-attributes-list-consistently.patch
  elflint-dont-check-section-group-without-flags-word.patch
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
  elfutils-dont-trust-sh_entsize.patch
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
  size-handle-recursive-elf-ar-files.patch
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
  use-the-empty-string-for-note-names-with-zero-size.patch
  readelf-fix-off-by-one-sanity-check.patch
  libebl-check-NT_PLATFORM-core-notes.patch
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
  libelf-check-compression-before-allocate-output-buffer.patch
  libdwfl-sanity-check-partial-core-file-data-reads.patch
  arlib-check-that-sh_entsize-isnt-zero.patch</changelog>
  <changelog author="martin.liska@suse.com" date="1628251200">- Add disable-run-deleted-test.patch in order to disable
  failing test-case (boo#1189153).</changelog>
  <changelog author="martin.liska@suse.com" date="1633953600">- Enhance license fields: all the libraries actually have a different
  license to the tools. While the tools are GPL-3.0-or-later, the
  libraries are (LGPL-3.0-or-later OR GPL-2.0-or-later)
  SLE bug (for tracking the above) bsc#1191310</changelog>
  <changelog author="tonyj@suse.com" date="1645790400">- Add support for zstd, needed to inspect kernel modules (bsc#1196510)</changelog>
  <changelog author="matz@suse.com" date="1761134400">- Add elfutils-fix-large-alignment.diff and elfutils-pr28190.diff
  to fix build/testsuite for more recent glibc and kernels.
- Add elfutils-fuzz-1.diff, elfutils-fuzz-2.diff,
  elfutils-fuzz-3.diff, elfutils-fuzz-4.diff [bsc#1237236,
  bsc#1237240, bsc#1237241, bsc#1237242].
- Add elfutils-fix-debuginfod-groom-race.diff to fix a testsuite
  race in run-debuginfod-find.sh.</changelog>
</package>
<package pkgid="7c90baa2150b8ad172a7a4b8ffe436fad2cfc9e41f91a6223f40957361e94372" name="libdw1" arch="x86_64">
  <version epoch="0" ver="0.185" rel="150400.5.8.3"/>
  <changelog author="jengelh@inai.de" date="1579780800">- Avoid double-shipping libdebuginfo.so.1 in two different
  subpackages. Fixup RPM group.</changelog>
  <changelog author="mliska@suse.cz" date="1580817600">- Exclude debuginfod sub-packages and move them to elfutils-debuginfod.</changelog>
  <changelog author="dimstar@opensuse.org" date="1581336000">- Re-add libelf1 to baselibs.conf: we still generate a
  libelf-devel-32bit, which is only installable if libelf1-21bit
  also exists.</changelog>
  <changelog author="mliska@suse.cz" date="1585569600">- Update to version 0.179:
  debuginfod-client: When DEBUGINFOD_PROGRESS is set and the program doesn't
    install its own debuginfod_progressfn_t show download
    progress on stderr.
    DEBUGINFOD_TIMEOUT is now defined as seconds to get at
    least 100K, defaults to 90 seconds.
    Default to $XDG_CACHE_HOME/debuginfod_client.
    New functions debuginfod_set_user_data,
    debuginfod_get_user_data, debuginfod_get_url and
    debuginfod_add_http_header.
    Support for file:// URLs.
  debuginfod: Uses libarchive directly for reading rpm archives.
    Support for indexing .deb/.ddeb archives through dpkg-deb
    or bsdtar.
    Generic archive support through -Z EXT[=CMD]. Which can be
    used for example for arch-linux pacman files by using
  - Z '.tar.zst=zstdcat'.
    Better logging using User-Agent and X-Forwarded-For headers.
    More prometheus metrics.
    Support for eliding dots or extraneous slashes in path names.
  debuginfod-find: Accept /path/names in place of buildid hex.
  libelf: Handle PN_XNUM in elf_getphdrnum before shdr 0 is cached
    Ensure zlib resource cleanup on failure.
  libdwfl: dwfl_linux_kernel_find_elf and dwfl_linux_kernel_report_offline
    now find and handle a compressed vmlinuz image.
  readelf, elflint: Handle PT_GNU_PROPERTY.
  translations: Updated Ukrainian translation.</changelog>
  <changelog author="mliska@suse.cz" date="1591876800">- Update to version 0.180:
  elflint: Allow SHF_EXCLUDE as generic section flag when --gnu is given.
  libdw, readelf: Handle GCC LTO .gnu.debuglto_ prefix.
  libdw: Use correct CU to resolve file names in dwarf_decl_file.
  libdwfl: Handle debugaltlink in dwfl_standard_find_debuginfo.
  size: Also obey radix printing for bsd format.
  nm: Explicitly print weak 'V' or 'T' and common 'C' symbols.
- Add 0001-tests-Add-GCOV-flags-when-necessary.patch in order to fix
  an unresolved symbol.
- Enable LTO: boo#1138796 by adding -flto-partition=none and -Wno-error=stack-usage.</changelog>
  <changelog author="mliska@suse.cz" date="1592222400">- Remove cfi-fix.patch - should not be needed now.
- Remove remove-run-large-elf-file.sh.patch as it now checks for memory
  size.
- Use autosetup.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1599566400">- Update to version 0.181:
  libelf: elf_update now compensates (fixes up) a bad sh_addralign for
    SHF_COMPRESSED sections.
  libdebuginfod: configure now takes --enable-libdebuginfod=dummy or
  - -disable-libdebuginfod for bootstrapping.
    DEBUGINFOD_URLS now accepts "scheme-free" urls
    (guessing at what the user meant, either http:// or file://)
  readelf, elflint: Handle aarch64 bti, pac bits in dynamic table and gnu
    property notes.
  libdw, readelf: Recognize DW_CFA_AARCH64_negate_ra_state. Allows unwinding
    on arm64 for code that is compiled for PAC (Pointer
    Authentication Code) as long as it isn't enabled
- Drop upstream patch:
  * 0001-tests-Add-GCOV-flags-when-necessary.patch</changelog>
  <changelog author="mliska@suse.cz" date="1600776000">- Creatu dummy subpackages that can be used for build of packages
  that are in bootstrap cycle.
- Add Provides for real packages.</changelog>
  <changelog author="mliska@suse.cz" date="1604577600">- Add rpmlintrc for
  libdebuginfod1-dummy.s390x: E: shlib-policy-name-error (Badness: 10000) libdebuginfod1
  which is expected as libdebuginfod1 and it's dummy library do share equal
  soname.
- Update to version 0.182:
  backends: Support for tilegx has been removed.
  config: New /etc/profile.d files to provide default $DEBUGINFOD_URLS.
  debuginfod: More efficient package traversal, tolerate various errors
    during scanning, grooming progress is more visible and
    interruptible, more prometheus metrics.
  debuginfod-client: Now supports compressed (kernel) ELF images.
  libdwfl: Add ZSTD compression support.</changelog>
  <changelog author="mliska@suse.cz" date="1606737600">- Mention elfutils-rpmlintrc as a Source.</changelog>
  <changelog author="mliska@suse.cz" date="1611144000">- Enable LTO (boo#1138796) for elfutils.spec.</changelog>
  <changelog author="mliska@suse.cz" date="1612785600">- Update to version 0.183:
  debuginfod: New thread-busy metric and more detailed error metrics.
    New --fdcache-mintmp and tracking of filesystem freespace.
    New increased webapi concurrency while grooming.
  debuginfod-client: DEBUGINFOD_SONAME macro added to debuginfod.h which
    can be used to dlopen the libdebuginfod.so library.
    New function debuginfod_set_verbose_fd and
    DEBUGINFOD_VERBOSE environment variable.
  config: profile.sh and profile.csh won't export DEBUGINFOD_URLS unless
    configured --enable-debuginfod-urls[=URLS]
  elflint, readelf: Recognize SHF_GNU_RETAIN.
    Handle SHT_X86_64_UNWIND as valid relocation target.
- Remove config-do-not-define-DEBUGINFOD_URLS-environment-var.patch patch.</changelog>
  <changelog author="mliska@suse.cz" date="1615982400">- Add disable-run-readelf-self-test.patch in order to disable
  a failing test-case with GCC 11 (PR27367).</changelog>
  <changelog author="mliska@suse.cz" date="1620648000">- Update to version 0.184:
  debuginfod: Use libarchive's bsdtar as the .deb-family file unpacker.
  debuginfod-client: Client caches negative results. If a query for a
    file failed with 404, an empty 000 permission
    file is created in the cache. This will prevent
    requesting the same file for the next 10 minutes.
    Client objects now carry long-lived curl handles
    for outgoing connections.  This makes it more
    efficient for multiple sequential queries, because
    the TCP connections and/or TLS state info are kept
    around awhile, avoiding O(100ms) setup latencies.
  libdw: handle DW_FORM_indirect when reading attributes
  translations: Update Polish translation.</changelog>
  <changelog author="mliska@suse.cz" date="1621857600">- Update to version 0.185:
  debuginfod-client: Simplify curl handle reuse so downloads which
    return an error are retried.
  elfcompress: Always exit with code 0 when the operation succeeds (even
    when nothing was done). On error the exit code is now always 1.</changelog>
  <changelog author="jcheung@suse.com" date="1626004800">- For version 0.185, the below patches are no longer needed
  (jsc#SLE-17288, jsc#SLE-17951)
  libdw-check-end-of-attributes-list-consistently.patch
  elflint-dont-check-section-group-without-flags-word.patch
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
  elfutils-dont-trust-sh_entsize.patch
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
  size-handle-recursive-elf-ar-files.patch
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
  use-the-empty-string-for-note-names-with-zero-size.patch
  readelf-fix-off-by-one-sanity-check.patch
  libebl-check-NT_PLATFORM-core-notes.patch
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
  libelf-check-compression-before-allocate-output-buffer.patch
  libdwfl-sanity-check-partial-core-file-data-reads.patch
  arlib-check-that-sh_entsize-isnt-zero.patch</changelog>
  <changelog author="martin.liska@suse.com" date="1628251200">- Add disable-run-deleted-test.patch in order to disable
  failing test-case (boo#1189153).</changelog>
  <changelog author="martin.liska@suse.com" date="1633953600">- Enhance license fields: all the libraries actually have a different
  license to the tools. While the tools are GPL-3.0-or-later, the
  libraries are (LGPL-3.0-or-later OR GPL-2.0-or-later)
  SLE bug (for tracking the above) bsc#1191310</changelog>
  <changelog author="tonyj@suse.com" date="1645790400">- Add support for zstd, needed to inspect kernel modules (bsc#1196510)</changelog>
  <changelog author="matz@suse.com" date="1761134400">- Add elfutils-fix-large-alignment.diff and elfutils-pr28190.diff
  to fix build/testsuite for more recent glibc and kernels.
- Add elfutils-fuzz-1.diff, elfutils-fuzz-2.diff,
  elfutils-fuzz-3.diff, elfutils-fuzz-4.diff [bsc#1237236,
  bsc#1237240, bsc#1237241, bsc#1237242].
- Add elfutils-fix-debuginfod-groom-race.diff to fix a testsuite
  race in run-debuginfod-find.sh.</changelog>
</package>
<package pkgid="8b06a229ac17171f023ca624023dcaaf23ae55fcd4e065637f3f5c343cb2ab7d" name="libdw1-32bit" arch="x86_64">
  <version epoch="0" ver="0.185" rel="150400.5.8.3"/>
  <changelog author="jengelh@inai.de" date="1579780800">- Avoid double-shipping libdebuginfo.so.1 in two different
  subpackages. Fixup RPM group.</changelog>
  <changelog author="mliska@suse.cz" date="1580817600">- Exclude debuginfod sub-packages and move them to elfutils-debuginfod.</changelog>
  <changelog author="dimstar@opensuse.org" date="1581336000">- Re-add libelf1 to baselibs.conf: we still generate a
  libelf-devel-32bit, which is only installable if libelf1-21bit
  also exists.</changelog>
  <changelog author="mliska@suse.cz" date="1585569600">- Update to version 0.179:
  debuginfod-client: When DEBUGINFOD_PROGRESS is set and the program doesn't
    install its own debuginfod_progressfn_t show download
    progress on stderr.
    DEBUGINFOD_TIMEOUT is now defined as seconds to get at
    least 100K, defaults to 90 seconds.
    Default to $XDG_CACHE_HOME/debuginfod_client.
    New functions debuginfod_set_user_data,
    debuginfod_get_user_data, debuginfod_get_url and
    debuginfod_add_http_header.
    Support for file:// URLs.
  debuginfod: Uses libarchive directly for reading rpm archives.
    Support for indexing .deb/.ddeb archives through dpkg-deb
    or bsdtar.
    Generic archive support through -Z EXT[=CMD]. Which can be
    used for example for arch-linux pacman files by using
  - Z '.tar.zst=zstdcat'.
    Better logging using User-Agent and X-Forwarded-For headers.
    More prometheus metrics.
    Support for eliding dots or extraneous slashes in path names.
  debuginfod-find: Accept /path/names in place of buildid hex.
  libelf: Handle PN_XNUM in elf_getphdrnum before shdr 0 is cached
    Ensure zlib resource cleanup on failure.
  libdwfl: dwfl_linux_kernel_find_elf and dwfl_linux_kernel_report_offline
    now find and handle a compressed vmlinuz image.
  readelf, elflint: Handle PT_GNU_PROPERTY.
  translations: Updated Ukrainian translation.</changelog>
  <changelog author="mliska@suse.cz" date="1591876800">- Update to version 0.180:
  elflint: Allow SHF_EXCLUDE as generic section flag when --gnu is given.
  libdw, readelf: Handle GCC LTO .gnu.debuglto_ prefix.
  libdw: Use correct CU to resolve file names in dwarf_decl_file.
  libdwfl: Handle debugaltlink in dwfl_standard_find_debuginfo.
  size: Also obey radix printing for bsd format.
  nm: Explicitly print weak 'V' or 'T' and common 'C' symbols.
- Add 0001-tests-Add-GCOV-flags-when-necessary.patch in order to fix
  an unresolved symbol.
- Enable LTO: boo#1138796 by adding -flto-partition=none and -Wno-error=stack-usage.</changelog>
  <changelog author="mliska@suse.cz" date="1592222400">- Remove cfi-fix.patch - should not be needed now.
- Remove remove-run-large-elf-file.sh.patch as it now checks for memory
  size.
- Use autosetup.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1599566400">- Update to version 0.181:
  libelf: elf_update now compensates (fixes up) a bad sh_addralign for
    SHF_COMPRESSED sections.
  libdebuginfod: configure now takes --enable-libdebuginfod=dummy or
  - -disable-libdebuginfod for bootstrapping.
    DEBUGINFOD_URLS now accepts "scheme-free" urls
    (guessing at what the user meant, either http:// or file://)
  readelf, elflint: Handle aarch64 bti, pac bits in dynamic table and gnu
    property notes.
  libdw, readelf: Recognize DW_CFA_AARCH64_negate_ra_state. Allows unwinding
    on arm64 for code that is compiled for PAC (Pointer
    Authentication Code) as long as it isn't enabled
- Drop upstream patch:
  * 0001-tests-Add-GCOV-flags-when-necessary.patch</changelog>
  <changelog author="mliska@suse.cz" date="1600776000">- Creatu dummy subpackages that can be used for build of packages
  that are in bootstrap cycle.
- Add Provides for real packages.</changelog>
  <changelog author="mliska@suse.cz" date="1604577600">- Add rpmlintrc for
  libdebuginfod1-dummy.s390x: E: shlib-policy-name-error (Badness: 10000) libdebuginfod1
  which is expected as libdebuginfod1 and it's dummy library do share equal
  soname.
- Update to version 0.182:
  backends: Support for tilegx has been removed.
  config: New /etc/profile.d files to provide default $DEBUGINFOD_URLS.
  debuginfod: More efficient package traversal, tolerate various errors
    during scanning, grooming progress is more visible and
    interruptible, more prometheus metrics.
  debuginfod-client: Now supports compressed (kernel) ELF images.
  libdwfl: Add ZSTD compression support.</changelog>
  <changelog author="mliska@suse.cz" date="1606737600">- Mention elfutils-rpmlintrc as a Source.</changelog>
  <changelog author="mliska@suse.cz" date="1611144000">- Enable LTO (boo#1138796) for elfutils.spec.</changelog>
  <changelog author="mliska@suse.cz" date="1612785600">- Update to version 0.183:
  debuginfod: New thread-busy metric and more detailed error metrics.
    New --fdcache-mintmp and tracking of filesystem freespace.
    New increased webapi concurrency while grooming.
  debuginfod-client: DEBUGINFOD_SONAME macro added to debuginfod.h which
    can be used to dlopen the libdebuginfod.so library.
    New function debuginfod_set_verbose_fd and
    DEBUGINFOD_VERBOSE environment variable.
  config: profile.sh and profile.csh won't export DEBUGINFOD_URLS unless
    configured --enable-debuginfod-urls[=URLS]
  elflint, readelf: Recognize SHF_GNU_RETAIN.
    Handle SHT_X86_64_UNWIND as valid relocation target.
- Remove config-do-not-define-DEBUGINFOD_URLS-environment-var.patch patch.</changelog>
  <changelog author="mliska@suse.cz" date="1615982400">- Add disable-run-readelf-self-test.patch in order to disable
  a failing test-case with GCC 11 (PR27367).</changelog>
  <changelog author="mliska@suse.cz" date="1620648000">- Update to version 0.184:
  debuginfod: Use libarchive's bsdtar as the .deb-family file unpacker.
  debuginfod-client: Client caches negative results. If a query for a
    file failed with 404, an empty 000 permission
    file is created in the cache. This will prevent
    requesting the same file for the next 10 minutes.
    Client objects now carry long-lived curl handles
    for outgoing connections.  This makes it more
    efficient for multiple sequential queries, because
    the TCP connections and/or TLS state info are kept
    around awhile, avoiding O(100ms) setup latencies.
  libdw: handle DW_FORM_indirect when reading attributes
  translations: Update Polish translation.</changelog>
  <changelog author="mliska@suse.cz" date="1621857600">- Update to version 0.185:
  debuginfod-client: Simplify curl handle reuse so downloads which
    return an error are retried.
  elfcompress: Always exit with code 0 when the operation succeeds (even
    when nothing was done). On error the exit code is now always 1.</changelog>
  <changelog author="jcheung@suse.com" date="1626004800">- For version 0.185, the below patches are no longer needed
  (jsc#SLE-17288, jsc#SLE-17951)
  libdw-check-end-of-attributes-list-consistently.patch
  elflint-dont-check-section-group-without-flags-word.patch
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
  elfutils-dont-trust-sh_entsize.patch
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
  size-handle-recursive-elf-ar-files.patch
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
  use-the-empty-string-for-note-names-with-zero-size.patch
  readelf-fix-off-by-one-sanity-check.patch
  libebl-check-NT_PLATFORM-core-notes.patch
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
  libelf-check-compression-before-allocate-output-buffer.patch
  libdwfl-sanity-check-partial-core-file-data-reads.patch
  arlib-check-that-sh_entsize-isnt-zero.patch</changelog>
  <changelog author="martin.liska@suse.com" date="1628251200">- Add disable-run-deleted-test.patch in order to disable
  failing test-case (boo#1189153).</changelog>
  <changelog author="martin.liska@suse.com" date="1633953600">- Enhance license fields: all the libraries actually have a different
  license to the tools. While the tools are GPL-3.0-or-later, the
  libraries are (LGPL-3.0-or-later OR GPL-2.0-or-later)
  SLE bug (for tracking the above) bsc#1191310</changelog>
  <changelog author="tonyj@suse.com" date="1645790400">- Add support for zstd, needed to inspect kernel modules (bsc#1196510)</changelog>
  <changelog author="matz@suse.com" date="1761134400">- Add elfutils-fix-large-alignment.diff and elfutils-pr28190.diff
  to fix build/testsuite for more recent glibc and kernels.
- Add elfutils-fuzz-1.diff, elfutils-fuzz-2.diff,
  elfutils-fuzz-3.diff, elfutils-fuzz-4.diff [bsc#1237236,
  bsc#1237240, bsc#1237241, bsc#1237242].
- Add elfutils-fix-debuginfod-groom-race.diff to fix a testsuite
  race in run-debuginfod-find.sh.</changelog>
</package>
<package pkgid="ff58eff51143e93ebc83f27b4edc10ed90993640c5d1003b2e374c7afc11172c" name="libefa1" arch="x86_64">
  <version epoch="0" ver="54.0" rel="150700.3.2.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="schwab@suse.de" date="1647518400">- util-Add-barriers-support-for-RISC-V.patch: Backport from upstream: Add
  barriers support for RISC-V</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1648555200">- Update to v39.1
  - Major fixes for hns provider
  - Bug fixes for all providers
  - systemd hardening
  - NDR rate support
- Dropped srp_daemon-Detect-proper-path-to-systemctl.patch
  as it was fixed upstream</changelog>
  <changelog author="dmueller@suse.com" date="1659960000">- skip valgrind on riscv64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1663070400">- Update to v42.0
  - Fixes for all providers
- Dropped patches merged upstream:
  - util-Add-barriers-support-for-RISC-V.patch
  - cmake-Make-modprobe.d-path-configurable.patch
- Update gen-pandoc.sh to support python3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1665662400">- Add rdma-ndd-disable-systemd-ProtectHostName-feature.patch to fix issue
  where rdma-ndd would not be aware of dynamic hostnames retrived through DHCP</changelog>
  <changelog author="nicolas.morey@suse.com" date="1681905600">- Update to v45.0
  - Fixes for all providers
  - Support for Microsoft Azure Network Adapter
- Drop rdma-ndd-disable-systemd-ProtectHostName-feature.patch
  as it was fixed upstream.
- Refresh against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-Update-kernel-headers.patch</changelog>
  <changelog author="nicolas.morey@suse.com" date="1690200000">- Update to v47.0
  - Fixes for all providers</changelog>
  <changelog author="nicolas.morey@suse.com" date="1691064000">- Drop patches adding support for cxgb3 (EOL, removed from kernel 5.5)
  - cxgb3-fix-declaration-of-free_context.patch
  - cxgb3-fix-support-for-new-uquery-API.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-Update-kernel-headers.patch
- Update baselibs=.conf accordingly</changelog>
  <changelog author="jengelh@inai.de" date="1692792000">- Add missing-quoting.patch
- Use normal GNU tar option syntax
- Remove old RPM spec logic (%defattr)</changelog>
  <changelog author="nicolas.morey@suse.com" date="1695384000">- Update to v48.0
  - No release notes available.
- Drop missing-quoting.patch which was fixed upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1700913600">- Update to v49.0 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1705924800">- Update to v49.1 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1707912000">- Add kernel-boot-do-not-load-module-unsupported-on-s390.patch
  to prevent autoload of module not supported on s390. (bsc#1219805)</changelog>
  <changelog author="nicolas.morey@suse.com" date="1719316800">- Update to rdma-core v52.0
  - No release notes available
- Add upstream patch Added-suffix-libdrm-to-CMakeLists.txt-for-drm.patch
  to fix libdrm detection.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1723464000">- Update to rdma-core v53.0
  - No release notes available
- Remove Added-suffix-libdrm-to-CMakeLists.txt-for-drm.patch
  as it was merged upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1728561600">- Update to rdma-core v54.0
  - No release notes available</changelog>
</package>
<package pkgid="a1d0c9b83d10adaa0d2cc570d2be7e2e98fefc4da855a3173e4f5463ffa81cd3" name="libelf-devel" arch="x86_64">
  <version epoch="0" ver="0.185" rel="150400.5.8.3"/>
  <changelog author="jengelh@inai.de" date="1579780800">- Avoid double-shipping libdebuginfo.so.1 in two different
  subpackages. Fixup RPM group.</changelog>
  <changelog author="mliska@suse.cz" date="1580817600">- Exclude debuginfod sub-packages and move them to elfutils-debuginfod.</changelog>
  <changelog author="dimstar@opensuse.org" date="1581336000">- Re-add libelf1 to baselibs.conf: we still generate a
  libelf-devel-32bit, which is only installable if libelf1-21bit
  also exists.</changelog>
  <changelog author="mliska@suse.cz" date="1585569600">- Update to version 0.179:
  debuginfod-client: When DEBUGINFOD_PROGRESS is set and the program doesn't
    install its own debuginfod_progressfn_t show download
    progress on stderr.
    DEBUGINFOD_TIMEOUT is now defined as seconds to get at
    least 100K, defaults to 90 seconds.
    Default to $XDG_CACHE_HOME/debuginfod_client.
    New functions debuginfod_set_user_data,
    debuginfod_get_user_data, debuginfod_get_url and
    debuginfod_add_http_header.
    Support for file:// URLs.
  debuginfod: Uses libarchive directly for reading rpm archives.
    Support for indexing .deb/.ddeb archives through dpkg-deb
    or bsdtar.
    Generic archive support through -Z EXT[=CMD]. Which can be
    used for example for arch-linux pacman files by using
  - Z '.tar.zst=zstdcat'.
    Better logging using User-Agent and X-Forwarded-For headers.
    More prometheus metrics.
    Support for eliding dots or extraneous slashes in path names.
  debuginfod-find: Accept /path/names in place of buildid hex.
  libelf: Handle PN_XNUM in elf_getphdrnum before shdr 0 is cached
    Ensure zlib resource cleanup on failure.
  libdwfl: dwfl_linux_kernel_find_elf and dwfl_linux_kernel_report_offline
    now find and handle a compressed vmlinuz image.
  readelf, elflint: Handle PT_GNU_PROPERTY.
  translations: Updated Ukrainian translation.</changelog>
  <changelog author="mliska@suse.cz" date="1591876800">- Update to version 0.180:
  elflint: Allow SHF_EXCLUDE as generic section flag when --gnu is given.
  libdw, readelf: Handle GCC LTO .gnu.debuglto_ prefix.
  libdw: Use correct CU to resolve file names in dwarf_decl_file.
  libdwfl: Handle debugaltlink in dwfl_standard_find_debuginfo.
  size: Also obey radix printing for bsd format.
  nm: Explicitly print weak 'V' or 'T' and common 'C' symbols.
- Add 0001-tests-Add-GCOV-flags-when-necessary.patch in order to fix
  an unresolved symbol.
- Enable LTO: boo#1138796 by adding -flto-partition=none and -Wno-error=stack-usage.</changelog>
  <changelog author="mliska@suse.cz" date="1592222400">- Remove cfi-fix.patch - should not be needed now.
- Remove remove-run-large-elf-file.sh.patch as it now checks for memory
  size.
- Use autosetup.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1599566400">- Update to version 0.181:
  libelf: elf_update now compensates (fixes up) a bad sh_addralign for
    SHF_COMPRESSED sections.
  libdebuginfod: configure now takes --enable-libdebuginfod=dummy or
  - -disable-libdebuginfod for bootstrapping.
    DEBUGINFOD_URLS now accepts "scheme-free" urls
    (guessing at what the user meant, either http:// or file://)
  readelf, elflint: Handle aarch64 bti, pac bits in dynamic table and gnu
    property notes.
  libdw, readelf: Recognize DW_CFA_AARCH64_negate_ra_state. Allows unwinding
    on arm64 for code that is compiled for PAC (Pointer
    Authentication Code) as long as it isn't enabled
- Drop upstream patch:
  * 0001-tests-Add-GCOV-flags-when-necessary.patch</changelog>
  <changelog author="mliska@suse.cz" date="1600776000">- Creatu dummy subpackages that can be used for build of packages
  that are in bootstrap cycle.
- Add Provides for real packages.</changelog>
  <changelog author="mliska@suse.cz" date="1604577600">- Add rpmlintrc for
  libdebuginfod1-dummy.s390x: E: shlib-policy-name-error (Badness: 10000) libdebuginfod1
  which is expected as libdebuginfod1 and it's dummy library do share equal
  soname.
- Update to version 0.182:
  backends: Support for tilegx has been removed.
  config: New /etc/profile.d files to provide default $DEBUGINFOD_URLS.
  debuginfod: More efficient package traversal, tolerate various errors
    during scanning, grooming progress is more visible and
    interruptible, more prometheus metrics.
  debuginfod-client: Now supports compressed (kernel) ELF images.
  libdwfl: Add ZSTD compression support.</changelog>
  <changelog author="mliska@suse.cz" date="1606737600">- Mention elfutils-rpmlintrc as a Source.</changelog>
  <changelog author="mliska@suse.cz" date="1611144000">- Enable LTO (boo#1138796) for elfutils.spec.</changelog>
  <changelog author="mliska@suse.cz" date="1612785600">- Update to version 0.183:
  debuginfod: New thread-busy metric and more detailed error metrics.
    New --fdcache-mintmp and tracking of filesystem freespace.
    New increased webapi concurrency while grooming.
  debuginfod-client: DEBUGINFOD_SONAME macro added to debuginfod.h which
    can be used to dlopen the libdebuginfod.so library.
    New function debuginfod_set_verbose_fd and
    DEBUGINFOD_VERBOSE environment variable.
  config: profile.sh and profile.csh won't export DEBUGINFOD_URLS unless
    configured --enable-debuginfod-urls[=URLS]
  elflint, readelf: Recognize SHF_GNU_RETAIN.
    Handle SHT_X86_64_UNWIND as valid relocation target.
- Remove config-do-not-define-DEBUGINFOD_URLS-environment-var.patch patch.</changelog>
  <changelog author="mliska@suse.cz" date="1615982400">- Add disable-run-readelf-self-test.patch in order to disable
  a failing test-case with GCC 11 (PR27367).</changelog>
  <changelog author="mliska@suse.cz" date="1620648000">- Update to version 0.184:
  debuginfod: Use libarchive's bsdtar as the .deb-family file unpacker.
  debuginfod-client: Client caches negative results. If a query for a
    file failed with 404, an empty 000 permission
    file is created in the cache. This will prevent
    requesting the same file for the next 10 minutes.
    Client objects now carry long-lived curl handles
    for outgoing connections.  This makes it more
    efficient for multiple sequential queries, because
    the TCP connections and/or TLS state info are kept
    around awhile, avoiding O(100ms) setup latencies.
  libdw: handle DW_FORM_indirect when reading attributes
  translations: Update Polish translation.</changelog>
  <changelog author="mliska@suse.cz" date="1621857600">- Update to version 0.185:
  debuginfod-client: Simplify curl handle reuse so downloads which
    return an error are retried.
  elfcompress: Always exit with code 0 when the operation succeeds (even
    when nothing was done). On error the exit code is now always 1.</changelog>
  <changelog author="jcheung@suse.com" date="1626004800">- For version 0.185, the below patches are no longer needed
  (jsc#SLE-17288, jsc#SLE-17951)
  libdw-check-end-of-attributes-list-consistently.patch
  elflint-dont-check-section-group-without-flags-word.patch
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
  elfutils-dont-trust-sh_entsize.patch
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
  size-handle-recursive-elf-ar-files.patch
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
  use-the-empty-string-for-note-names-with-zero-size.patch
  readelf-fix-off-by-one-sanity-check.patch
  libebl-check-NT_PLATFORM-core-notes.patch
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
  libelf-check-compression-before-allocate-output-buffer.patch
  libdwfl-sanity-check-partial-core-file-data-reads.patch
  arlib-check-that-sh_entsize-isnt-zero.patch</changelog>
  <changelog author="martin.liska@suse.com" date="1628251200">- Add disable-run-deleted-test.patch in order to disable
  failing test-case (boo#1189153).</changelog>
  <changelog author="martin.liska@suse.com" date="1633953600">- Enhance license fields: all the libraries actually have a different
  license to the tools. While the tools are GPL-3.0-or-later, the
  libraries are (LGPL-3.0-or-later OR GPL-2.0-or-later)
  SLE bug (for tracking the above) bsc#1191310</changelog>
  <changelog author="tonyj@suse.com" date="1645790400">- Add support for zstd, needed to inspect kernel modules (bsc#1196510)</changelog>
  <changelog author="matz@suse.com" date="1761134400">- Add elfutils-fix-large-alignment.diff and elfutils-pr28190.diff
  to fix build/testsuite for more recent glibc and kernels.
- Add elfutils-fuzz-1.diff, elfutils-fuzz-2.diff,
  elfutils-fuzz-3.diff, elfutils-fuzz-4.diff [bsc#1237236,
  bsc#1237240, bsc#1237241, bsc#1237242].
- Add elfutils-fix-debuginfod-groom-race.diff to fix a testsuite
  race in run-debuginfod-find.sh.</changelog>
</package>
<package pkgid="04288d56f6e7808c6935c945e957234c965cf246799647140fe938397dc8cbed" name="libelf1" arch="x86_64">
  <version epoch="0" ver="0.185" rel="150400.5.8.3"/>
  <changelog author="jengelh@inai.de" date="1579780800">- Avoid double-shipping libdebuginfo.so.1 in two different
  subpackages. Fixup RPM group.</changelog>
  <changelog author="mliska@suse.cz" date="1580817600">- Exclude debuginfod sub-packages and move them to elfutils-debuginfod.</changelog>
  <changelog author="dimstar@opensuse.org" date="1581336000">- Re-add libelf1 to baselibs.conf: we still generate a
  libelf-devel-32bit, which is only installable if libelf1-21bit
  also exists.</changelog>
  <changelog author="mliska@suse.cz" date="1585569600">- Update to version 0.179:
  debuginfod-client: When DEBUGINFOD_PROGRESS is set and the program doesn't
    install its own debuginfod_progressfn_t show download
    progress on stderr.
    DEBUGINFOD_TIMEOUT is now defined as seconds to get at
    least 100K, defaults to 90 seconds.
    Default to $XDG_CACHE_HOME/debuginfod_client.
    New functions debuginfod_set_user_data,
    debuginfod_get_user_data, debuginfod_get_url and
    debuginfod_add_http_header.
    Support for file:// URLs.
  debuginfod: Uses libarchive directly for reading rpm archives.
    Support for indexing .deb/.ddeb archives through dpkg-deb
    or bsdtar.
    Generic archive support through -Z EXT[=CMD]. Which can be
    used for example for arch-linux pacman files by using
  - Z '.tar.zst=zstdcat'.
    Better logging using User-Agent and X-Forwarded-For headers.
    More prometheus metrics.
    Support for eliding dots or extraneous slashes in path names.
  debuginfod-find: Accept /path/names in place of buildid hex.
  libelf: Handle PN_XNUM in elf_getphdrnum before shdr 0 is cached
    Ensure zlib resource cleanup on failure.
  libdwfl: dwfl_linux_kernel_find_elf and dwfl_linux_kernel_report_offline
    now find and handle a compressed vmlinuz image.
  readelf, elflint: Handle PT_GNU_PROPERTY.
  translations: Updated Ukrainian translation.</changelog>
  <changelog author="mliska@suse.cz" date="1591876800">- Update to version 0.180:
  elflint: Allow SHF_EXCLUDE as generic section flag when --gnu is given.
  libdw, readelf: Handle GCC LTO .gnu.debuglto_ prefix.
  libdw: Use correct CU to resolve file names in dwarf_decl_file.
  libdwfl: Handle debugaltlink in dwfl_standard_find_debuginfo.
  size: Also obey radix printing for bsd format.
  nm: Explicitly print weak 'V' or 'T' and common 'C' symbols.
- Add 0001-tests-Add-GCOV-flags-when-necessary.patch in order to fix
  an unresolved symbol.
- Enable LTO: boo#1138796 by adding -flto-partition=none and -Wno-error=stack-usage.</changelog>
  <changelog author="mliska@suse.cz" date="1592222400">- Remove cfi-fix.patch - should not be needed now.
- Remove remove-run-large-elf-file.sh.patch as it now checks for memory
  size.
- Use autosetup.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1599566400">- Update to version 0.181:
  libelf: elf_update now compensates (fixes up) a bad sh_addralign for
    SHF_COMPRESSED sections.
  libdebuginfod: configure now takes --enable-libdebuginfod=dummy or
  - -disable-libdebuginfod for bootstrapping.
    DEBUGINFOD_URLS now accepts "scheme-free" urls
    (guessing at what the user meant, either http:// or file://)
  readelf, elflint: Handle aarch64 bti, pac bits in dynamic table and gnu
    property notes.
  libdw, readelf: Recognize DW_CFA_AARCH64_negate_ra_state. Allows unwinding
    on arm64 for code that is compiled for PAC (Pointer
    Authentication Code) as long as it isn't enabled
- Drop upstream patch:
  * 0001-tests-Add-GCOV-flags-when-necessary.patch</changelog>
  <changelog author="mliska@suse.cz" date="1600776000">- Creatu dummy subpackages that can be used for build of packages
  that are in bootstrap cycle.
- Add Provides for real packages.</changelog>
  <changelog author="mliska@suse.cz" date="1604577600">- Add rpmlintrc for
  libdebuginfod1-dummy.s390x: E: shlib-policy-name-error (Badness: 10000) libdebuginfod1
  which is expected as libdebuginfod1 and it's dummy library do share equal
  soname.
- Update to version 0.182:
  backends: Support for tilegx has been removed.
  config: New /etc/profile.d files to provide default $DEBUGINFOD_URLS.
  debuginfod: More efficient package traversal, tolerate various errors
    during scanning, grooming progress is more visible and
    interruptible, more prometheus metrics.
  debuginfod-client: Now supports compressed (kernel) ELF images.
  libdwfl: Add ZSTD compression support.</changelog>
  <changelog author="mliska@suse.cz" date="1606737600">- Mention elfutils-rpmlintrc as a Source.</changelog>
  <changelog author="mliska@suse.cz" date="1611144000">- Enable LTO (boo#1138796) for elfutils.spec.</changelog>
  <changelog author="mliska@suse.cz" date="1612785600">- Update to version 0.183:
  debuginfod: New thread-busy metric and more detailed error metrics.
    New --fdcache-mintmp and tracking of filesystem freespace.
    New increased webapi concurrency while grooming.
  debuginfod-client: DEBUGINFOD_SONAME macro added to debuginfod.h which
    can be used to dlopen the libdebuginfod.so library.
    New function debuginfod_set_verbose_fd and
    DEBUGINFOD_VERBOSE environment variable.
  config: profile.sh and profile.csh won't export DEBUGINFOD_URLS unless
    configured --enable-debuginfod-urls[=URLS]
  elflint, readelf: Recognize SHF_GNU_RETAIN.
    Handle SHT_X86_64_UNWIND as valid relocation target.
- Remove config-do-not-define-DEBUGINFOD_URLS-environment-var.patch patch.</changelog>
  <changelog author="mliska@suse.cz" date="1615982400">- Add disable-run-readelf-self-test.patch in order to disable
  a failing test-case with GCC 11 (PR27367).</changelog>
  <changelog author="mliska@suse.cz" date="1620648000">- Update to version 0.184:
  debuginfod: Use libarchive's bsdtar as the .deb-family file unpacker.
  debuginfod-client: Client caches negative results. If a query for a
    file failed with 404, an empty 000 permission
    file is created in the cache. This will prevent
    requesting the same file for the next 10 minutes.
    Client objects now carry long-lived curl handles
    for outgoing connections.  This makes it more
    efficient for multiple sequential queries, because
    the TCP connections and/or TLS state info are kept
    around awhile, avoiding O(100ms) setup latencies.
  libdw: handle DW_FORM_indirect when reading attributes
  translations: Update Polish translation.</changelog>
  <changelog author="mliska@suse.cz" date="1621857600">- Update to version 0.185:
  debuginfod-client: Simplify curl handle reuse so downloads which
    return an error are retried.
  elfcompress: Always exit with code 0 when the operation succeeds (even
    when nothing was done). On error the exit code is now always 1.</changelog>
  <changelog author="jcheung@suse.com" date="1626004800">- For version 0.185, the below patches are no longer needed
  (jsc#SLE-17288, jsc#SLE-17951)
  libdw-check-end-of-attributes-list-consistently.patch
  elflint-dont-check-section-group-without-flags-word.patch
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
  elfutils-dont-trust-sh_entsize.patch
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
  size-handle-recursive-elf-ar-files.patch
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
  use-the-empty-string-for-note-names-with-zero-size.patch
  readelf-fix-off-by-one-sanity-check.patch
  libebl-check-NT_PLATFORM-core-notes.patch
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
  libelf-check-compression-before-allocate-output-buffer.patch
  libdwfl-sanity-check-partial-core-file-data-reads.patch
  arlib-check-that-sh_entsize-isnt-zero.patch</changelog>
  <changelog author="martin.liska@suse.com" date="1628251200">- Add disable-run-deleted-test.patch in order to disable
  failing test-case (boo#1189153).</changelog>
  <changelog author="martin.liska@suse.com" date="1633953600">- Enhance license fields: all the libraries actually have a different
  license to the tools. While the tools are GPL-3.0-or-later, the
  libraries are (LGPL-3.0-or-later OR GPL-2.0-or-later)
  SLE bug (for tracking the above) bsc#1191310</changelog>
  <changelog author="tonyj@suse.com" date="1645790400">- Add support for zstd, needed to inspect kernel modules (bsc#1196510)</changelog>
  <changelog author="matz@suse.com" date="1761134400">- Add elfutils-fix-large-alignment.diff and elfutils-pr28190.diff
  to fix build/testsuite for more recent glibc and kernels.
- Add elfutils-fuzz-1.diff, elfutils-fuzz-2.diff,
  elfutils-fuzz-3.diff, elfutils-fuzz-4.diff [bsc#1237236,
  bsc#1237240, bsc#1237241, bsc#1237242].
- Add elfutils-fix-debuginfod-groom-race.diff to fix a testsuite
  race in run-debuginfod-find.sh.</changelog>
</package>
<package pkgid="f0fd43812fb65c941b59bd0e4873c600741a618339279e8a32fdc8aece10d6b8" name="libelf1-32bit" arch="x86_64">
  <version epoch="0" ver="0.185" rel="150400.5.8.3"/>
  <changelog author="jengelh@inai.de" date="1579780800">- Avoid double-shipping libdebuginfo.so.1 in two different
  subpackages. Fixup RPM group.</changelog>
  <changelog author="mliska@suse.cz" date="1580817600">- Exclude debuginfod sub-packages and move them to elfutils-debuginfod.</changelog>
  <changelog author="dimstar@opensuse.org" date="1581336000">- Re-add libelf1 to baselibs.conf: we still generate a
  libelf-devel-32bit, which is only installable if libelf1-21bit
  also exists.</changelog>
  <changelog author="mliska@suse.cz" date="1585569600">- Update to version 0.179:
  debuginfod-client: When DEBUGINFOD_PROGRESS is set and the program doesn't
    install its own debuginfod_progressfn_t show download
    progress on stderr.
    DEBUGINFOD_TIMEOUT is now defined as seconds to get at
    least 100K, defaults to 90 seconds.
    Default to $XDG_CACHE_HOME/debuginfod_client.
    New functions debuginfod_set_user_data,
    debuginfod_get_user_data, debuginfod_get_url and
    debuginfod_add_http_header.
    Support for file:// URLs.
  debuginfod: Uses libarchive directly for reading rpm archives.
    Support for indexing .deb/.ddeb archives through dpkg-deb
    or bsdtar.
    Generic archive support through -Z EXT[=CMD]. Which can be
    used for example for arch-linux pacman files by using
  - Z '.tar.zst=zstdcat'.
    Better logging using User-Agent and X-Forwarded-For headers.
    More prometheus metrics.
    Support for eliding dots or extraneous slashes in path names.
  debuginfod-find: Accept /path/names in place of buildid hex.
  libelf: Handle PN_XNUM in elf_getphdrnum before shdr 0 is cached
    Ensure zlib resource cleanup on failure.
  libdwfl: dwfl_linux_kernel_find_elf and dwfl_linux_kernel_report_offline
    now find and handle a compressed vmlinuz image.
  readelf, elflint: Handle PT_GNU_PROPERTY.
  translations: Updated Ukrainian translation.</changelog>
  <changelog author="mliska@suse.cz" date="1591876800">- Update to version 0.180:
  elflint: Allow SHF_EXCLUDE as generic section flag when --gnu is given.
  libdw, readelf: Handle GCC LTO .gnu.debuglto_ prefix.
  libdw: Use correct CU to resolve file names in dwarf_decl_file.
  libdwfl: Handle debugaltlink in dwfl_standard_find_debuginfo.
  size: Also obey radix printing for bsd format.
  nm: Explicitly print weak 'V' or 'T' and common 'C' symbols.
- Add 0001-tests-Add-GCOV-flags-when-necessary.patch in order to fix
  an unresolved symbol.
- Enable LTO: boo#1138796 by adding -flto-partition=none and -Wno-error=stack-usage.</changelog>
  <changelog author="mliska@suse.cz" date="1592222400">- Remove cfi-fix.patch - should not be needed now.
- Remove remove-run-large-elf-file.sh.patch as it now checks for memory
  size.
- Use autosetup.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1599566400">- Update to version 0.181:
  libelf: elf_update now compensates (fixes up) a bad sh_addralign for
    SHF_COMPRESSED sections.
  libdebuginfod: configure now takes --enable-libdebuginfod=dummy or
  - -disable-libdebuginfod for bootstrapping.
    DEBUGINFOD_URLS now accepts "scheme-free" urls
    (guessing at what the user meant, either http:// or file://)
  readelf, elflint: Handle aarch64 bti, pac bits in dynamic table and gnu
    property notes.
  libdw, readelf: Recognize DW_CFA_AARCH64_negate_ra_state. Allows unwinding
    on arm64 for code that is compiled for PAC (Pointer
    Authentication Code) as long as it isn't enabled
- Drop upstream patch:
  * 0001-tests-Add-GCOV-flags-when-necessary.patch</changelog>
  <changelog author="mliska@suse.cz" date="1600776000">- Creatu dummy subpackages that can be used for build of packages
  that are in bootstrap cycle.
- Add Provides for real packages.</changelog>
  <changelog author="mliska@suse.cz" date="1604577600">- Add rpmlintrc for
  libdebuginfod1-dummy.s390x: E: shlib-policy-name-error (Badness: 10000) libdebuginfod1
  which is expected as libdebuginfod1 and it's dummy library do share equal
  soname.
- Update to version 0.182:
  backends: Support for tilegx has been removed.
  config: New /etc/profile.d files to provide default $DEBUGINFOD_URLS.
  debuginfod: More efficient package traversal, tolerate various errors
    during scanning, grooming progress is more visible and
    interruptible, more prometheus metrics.
  debuginfod-client: Now supports compressed (kernel) ELF images.
  libdwfl: Add ZSTD compression support.</changelog>
  <changelog author="mliska@suse.cz" date="1606737600">- Mention elfutils-rpmlintrc as a Source.</changelog>
  <changelog author="mliska@suse.cz" date="1611144000">- Enable LTO (boo#1138796) for elfutils.spec.</changelog>
  <changelog author="mliska@suse.cz" date="1612785600">- Update to version 0.183:
  debuginfod: New thread-busy metric and more detailed error metrics.
    New --fdcache-mintmp and tracking of filesystem freespace.
    New increased webapi concurrency while grooming.
  debuginfod-client: DEBUGINFOD_SONAME macro added to debuginfod.h which
    can be used to dlopen the libdebuginfod.so library.
    New function debuginfod_set_verbose_fd and
    DEBUGINFOD_VERBOSE environment variable.
  config: profile.sh and profile.csh won't export DEBUGINFOD_URLS unless
    configured --enable-debuginfod-urls[=URLS]
  elflint, readelf: Recognize SHF_GNU_RETAIN.
    Handle SHT_X86_64_UNWIND as valid relocation target.
- Remove config-do-not-define-DEBUGINFOD_URLS-environment-var.patch patch.</changelog>
  <changelog author="mliska@suse.cz" date="1615982400">- Add disable-run-readelf-self-test.patch in order to disable
  a failing test-case with GCC 11 (PR27367).</changelog>
  <changelog author="mliska@suse.cz" date="1620648000">- Update to version 0.184:
  debuginfod: Use libarchive's bsdtar as the .deb-family file unpacker.
  debuginfod-client: Client caches negative results. If a query for a
    file failed with 404, an empty 000 permission
    file is created in the cache. This will prevent
    requesting the same file for the next 10 minutes.
    Client objects now carry long-lived curl handles
    for outgoing connections.  This makes it more
    efficient for multiple sequential queries, because
    the TCP connections and/or TLS state info are kept
    around awhile, avoiding O(100ms) setup latencies.
  libdw: handle DW_FORM_indirect when reading attributes
  translations: Update Polish translation.</changelog>
  <changelog author="mliska@suse.cz" date="1621857600">- Update to version 0.185:
  debuginfod-client: Simplify curl handle reuse so downloads which
    return an error are retried.
  elfcompress: Always exit with code 0 when the operation succeeds (even
    when nothing was done). On error the exit code is now always 1.</changelog>
  <changelog author="jcheung@suse.com" date="1626004800">- For version 0.185, the below patches are no longer needed
  (jsc#SLE-17288, jsc#SLE-17951)
  libdw-check-end-of-attributes-list-consistently.patch
  elflint-dont-check-section-group-without-flags-word.patch
  libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
  libdw-readelf-make-sure-there-is-enough-data-to-read.patch
  elfutils-dont-trust-sh_entsize.patch
  elflint-check-symbol-table-data-is-big-enough-before-check.patch
  size-handle-recursive-elf-ar-files.patch
  elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
  use-the-empty-string-for-note-names-with-zero-size.patch
  readelf-fix-off-by-one-sanity-check.patch
  libebl-check-NT_PLATFORM-core-notes.patch
  libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
  libelf-check-compression-before-allocate-output-buffer.patch
  libdwfl-sanity-check-partial-core-file-data-reads.patch
  arlib-check-that-sh_entsize-isnt-zero.patch</changelog>
  <changelog author="martin.liska@suse.com" date="1628251200">- Add disable-run-deleted-test.patch in order to disable
  failing test-case (boo#1189153).</changelog>
  <changelog author="martin.liska@suse.com" date="1633953600">- Enhance license fields: all the libraries actually have a different
  license to the tools. While the tools are GPL-3.0-or-later, the
  libraries are (LGPL-3.0-or-later OR GPL-2.0-or-later)
  SLE bug (for tracking the above) bsc#1191310</changelog>
  <changelog author="tonyj@suse.com" date="1645790400">- Add support for zstd, needed to inspect kernel modules (bsc#1196510)</changelog>
  <changelog author="matz@suse.com" date="1761134400">- Add elfutils-fix-large-alignment.diff and elfutils-pr28190.diff
  to fix build/testsuite for more recent glibc and kernels.
- Add elfutils-fuzz-1.diff, elfutils-fuzz-2.diff,
  elfutils-fuzz-3.diff, elfutils-fuzz-4.diff [bsc#1237236,
  bsc#1237240, bsc#1237241, bsc#1237242].
- Add elfutils-fix-debuginfod-groom-race.diff to fix a testsuite
  race in run-debuginfod-find.sh.</changelog>
</package>
<package pkgid="780dcf197dca48dea5271eb70354df47b0785a762879577321b0d39d44045b59" name="liberation-fonts" arch="noarch">
  <version epoch="0" ver="1.07.4" rel="150000.4.5.1"/>
  <changelog author="sreeves@suse.com" date="1320235200">- Fix license - bnc#725370</changelog>
  <changelog author="pgajdos@suse.com" date="1337256000">- call spec-cleaner</changelog>
  <changelog author="cfarrell@suse.com" date="1337947200">- license update: SUSE-Liberation
  The correct license from the spreadsheet linked at license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.cz" date="1341403200">- amend spec file to reflect new font packaging scheme
  (see openFATE#313536);</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1343908800">- Update to version 2.00.0.
- The package license changed to OFL-1.1.
- Build the fonts from sources. Added fontforge build requirement for this.
- Add a Provides: entry for "scalable-font-el".</changelog>
  <changelog author="pgajdos@suse.com" date="1352721600">- downgrade to 1.07.2 [bnc#788838]
  (liberation2-fonts package created)</changelog>
  <changelog author="pgajdos@suse.com" date="1396440000">- update to 1.07.3:
  * Corrected U+2588 shape to match with Dejavu fonts in Mono
  * Resolved Serbian bug #984428
  * applied patch to remove kerning for number 1
  * corrected shape of U+040D #799384</changelog>
  <changelog author="p.drouand@gmail.com" date="1423137600">- Update to version 1.07.4
  * Restored Liberation Sans Bold 'u' instructions
  * Resolved #1009650, renames serbian shapes as per AGL
  * Added new glyph for "imacron" and "g"
  * Added Correct shape for uni266B in all Liberation variants #1014357
  * Resolved Problematic shapes for macedonian alphabet #1013949</changelog>
  <changelog author="sknorr@suse.com" date="1518177600">- Set this package to obsolete liberation2-fonts to help
  with Tumbleweed upgrade (boo#1080244)</changelog>
  <changelog author="pgajdos@suse.com" date="1760702400">- use %license tag [bsc#1252157]</changelog>
</package>
<package pkgid="da655c76717c011770112a3208674475eac63a4531471cb23c6e1e5ae310327d" name="liberation-fonts" arch="src">
  <version epoch="0" ver="1.07.4" rel="150000.4.5.1"/>
  <changelog author="mfabian@suse.de" date="1178884800">- new package: liberation-fonts, version 0.1.</changelog>
  <changelog author="coolo@suse.de" date="1225627200">- update to 1.04 - released in july (bnc#440913)</changelog>
  <changelog author="sbrabec@suse.cz" date="1227787200">- Degrade to version 1.03. (bnc#440913)</changelog>
  <changelog author="tiwai@suse.de" date="1270728000">- remove unnecessary buildrequires for too old distros</changelog>
  <changelog author="tiwai@suse.de" date="1294747200">- updated to version 1.06.0.20100721, including Narrow fonts
  (bnc#661433)</changelog>
  <changelog author="sreeves@suse.com" date="1320235200">- Fix license - bnc#725370</changelog>
  <changelog author="pgajdos@suse.com" date="1337256000">- call spec-cleaner</changelog>
  <changelog author="cfarrell@suse.com" date="1337947200">- license update: SUSE-Liberation
  The correct license from the spreadsheet linked at license.opensuse.org</changelog>
  <changelog author="pgajdos@suse.cz" date="1341403200">- amend spec file to reflect new font packaging scheme
  (see openFATE#313536);</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1343908800">- Update to version 2.00.0.
- The package license changed to OFL-1.1.
- Build the fonts from sources. Added fontforge build requirement for this.
- Add a Provides: entry for "scalable-font-el".</changelog>
  <changelog author="pgajdos@suse.com" date="1352721600">- downgrade to 1.07.2 [bnc#788838]
  (liberation2-fonts package created)</changelog>
  <changelog author="pgajdos@suse.com" date="1396440000">- update to 1.07.3:
  * Corrected U+2588 shape to match with Dejavu fonts in Mono
  * Resolved Serbian bug #984428
  * applied patch to remove kerning for number 1
  * corrected shape of U+040D #799384</changelog>
  <changelog author="p.drouand@gmail.com" date="1423137600">- Update to version 1.07.4
  * Restored Liberation Sans Bold 'u' instructions
  * Resolved #1009650, renames serbian shapes as per AGL
  * Added new glyph for "imacron" and "g"
  * Added Correct shape for uni266B in all Liberation variants #1014357
  * Resolved Problematic shapes for macedonian alphabet #1013949</changelog>
  <changelog author="sknorr@suse.com" date="1518177600">- Set this package to obsolete liberation2-fonts to help
  with Tumbleweed upgrade (boo#1080244)</changelog>
  <changelog author="pgajdos@suse.com" date="1760702400">- use %license tag [bsc#1252157]</changelog>
</package>
<package pkgid="574ddbcbc903e91eca41f9c440670f3d383bc5328d5de74536e12c619aad18b0" name="libexpat-devel" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="150700.3.12.1"/>
  <changelog author="david.anes@suse.com" date="1645358400">- update to 2.4.6 (bsc#1196168, CVE-2022-25313):
  * Bug fixes:
  - Fix a regression introduced by the fix for CVE-2022-25313
    in release 2.4.5 that affects applications that (1)
    call function XML_SetElementDeclHandler and (2) are
    parsing XML that contains nested element declarations
    (e.g. "&lt;!ELEMENT junk ((bar|foo|xyz+), zebra*)&gt;").
  - Version info bumped from 9:5:8 to 9:6:8;
    see https://verbump.de/ for what these numbers do.</changelog>
  <changelog author="david.anes@suse.com" date="1646481600">- update to 2.4.7 (bsc#1196784, CVE-2022-25236):
  * Bug fixes:
  - Relax fix to CVE-2022-25236 (introduced with release 2.4.5)
    with regard to all valid URI characters (RFC 3986),
    i.e. the following set (excluding whitespace):
    ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz
    0123456789 % -._~ :/?#[]@ !$&amp;'()*+,;=
  * Other changes:
  - CMake|Windows: Store Expat version in the DLL
  - Document consequences of namespace separator choices not just
    in doc/reference.html but also in header &lt;expat.h&gt;
  - Document Expat's lack of validation of namespace URIs against
    RFC 3986, and that the XML 1.0r4 specification doesn't
    require Expat to validate namespace URIs, and that Expat
    may do more in that regard in future releases.
    If you find need for strict RFC 3986 URI validation on
    application level today, https://uriparser.github.io/ may
    be of interest.
  - Fix documentation of XML_EndDoctypeDeclHandler in &lt;expat.h&gt;
  - Document that a call to XML_FreeContentModel can be done at
    a later time from outside the element declaration handler
  - Make hardcoded namespace URIs easier to find in code
  - Update documentation on use of XML_POOR_ENTOPY on Solaris
  - tests: Resolve use of macros NAN and INFINITY for GNU G++
    4.8.2 on Solaris.
  - Version info bumped from 9:6:8 to 9:7:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1648555200">- update to 2.4.8:
  * Other changes:
  - pkg-config: Move "-lm" to section "Libs.private"
  - CMake|MSVC: Fix pkg-config section "Libs"
  - CMake|macOS: Start using linker arguments
    "-compatibility_version &lt;version&gt;" and
    "-current_version &lt;version&gt;" in a way compatible with GNU
    Libtool
  - Version info bumped from 9:7:8 to 9:8:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- update to 2.4.9: (bsc#1203438)
  * Security fixes:
  - CVE-2022-40674 -- Heap use-after-free vulnerability in
    function doContent. Expected impact is denial of service
    or potentially arbitrary code execution.
  * Bug fixes:
  - MinGW: Fix mis-compilation for -D__USE_MINGW_ANSI_STDIO=0
  - docs: Fix documentation on effect of switch XML_DTD on
    symbol visibility in doc/reference.html
  * Other changes:
  - MinGW: Make fix-xmltest-log.sh drop more Wine bug output
  - Autotools: Sync CMake templates with CMake 3.22
  - CMake: Migrate from use of CMAKE_*_POSTFIX to
    dedicated variables EXPAT_*_POSTFIX to stop affecting
    other projects
  - Windows|CMake: Add missing -DXML_STATIC to test runners
    and fuzzers
  - Windows|CMake: Render .def file from a template to fix
    linking with -DEXPAT_DTD=OFF and/or -DEXPAT_ATTR_INFO=ON
  - MinGW|CMake: Apply MSVC .def file when linking
  - MinGW|CMake: Sync library name with GNU Autotools,
    i.e. produce libexpat-1.dll rather than libexpat.dll
    by default.  Filename libexpat.dll.a is unaffected.
  - MinGW|CMake: Set missing variable CMAKE_RC_COMPILER in
    toolchain file "cmake/mingw-toolchain.cmake" to avoid
    error "windres: Command not found" on e.g. Ubuntu 20.04
  - CMake: Unify inconsistent use of set() and option() in
    context of public build time options to take need for
    set(.. FORCE) in projects using Expat by means of
    add_subdirectory(..) off Expat's users' shoulders
  - Stop exporting API symbols when building a static library
  - Resolve use of deprecated "fgrep" by "grep -F"
  - CMake: Make documentation on variables a bit more consistent
  - CMake: Drop leading whitespace from a #cmakedefine line in
    file expat_config.h.cmake
  - xmlwf: Fix harmless variable mix-up in function nsattcmp
  - Address Cppcheck warnings
  - Address Clang 15 compiler warnings
  - Version info bumped from 9:8:8 to 9:9:8;
    see https://verbump.de/ for what these numbers do
  * Infrastructure:
  - CI: Windows: Start covering MSVC 2022
  - CI: macOS: Migrate off deprecated macOS 10.15
  - CI: Linux: Make migration off deprecated Ubuntu 18.04 work
  - CI: Upgrade Clang from 14 to 15
  - apply-clang-format.sh: Add support for BSD find
  - coverage.sh: Exclude MinGW headers
  - coverage.sh: Fix name collision for -funsigned-char</changelog>
  <changelog author="david.anes@suse.com" date="1666785600">- Update to 2.5.0: (bsc#1204708)
  * Security fixes:
  - CVE-2022-43680 -- Fix heap use-after-free after overeager
    destruction of a shared DTD in function
    XML_ExternalEntityParserCreate in out-of-memory situations.
    Expected impact is denial of service or potentially arbitrary
    code execution.
  * Bug fixes:
  - Fix curruption from undefined entities
  - Fix case when parsing was suspended while processing nested
    entities
  - Stop leaking opening tag bindings after a closing tag mismatch
    error where a parser is reset through XML_ParserReset and then
    reused to parse
  - CMake: Fix generation of pkg-config file
  - MinGW|CMake: Fix static library name
  * Other changes:
  - Protect header expat_config.h from multiple inclusion
  - examples: Make use of XML_GetBuffer and be more consistent
    across examples
  - Address compiler warnings
  - Version info bumped from 9:9:8 to 9:10:8; see
    https://verbump.de/ for what these numbers do</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1670760000">- add upstream signing key and validate source signature</changelog>
  <changelog author="david.anes@suse.com" date="1707739200">- Update keyring automatically from keyserver during OBS service run.
- Explicitly use --without-docbook (before it was implicit).
- Include missing files for documentation and examples.
- Add manpage for xmlwf, which is now available in the released tarball.
- Clean the spec file a bit.
- Update to 2.6.0:
  * Security fixes:
  - CVE-2023-52425 (boo#1219559)
  - - Fix quadratic runtime issues with big tokens
    that can cause denial of service, in partial where
    dealing with compressed XML input.  Applications
    that parsed a document in one go -- a single call to
    functions XML_Parse or XML_ParseBuffer -- were not affected.
    The smaller the chunks/buffers you use for parsing
    previously, the bigger the problem prior to the fix.
    Backporters should be careful to no omit parts of
    pull request #789 and to include earlier pull request #771,
    in order to not break the fix.
  - CVE-2023-52426 (boo#1219561)
  - - Fix billion laughs attacks for users
    compiling *without* XML_DTD defined (which is not common).
    Users with XML_DTD defined have been protected since
    Expat &gt;=2.4.0 (and that was CVE-2013-0340 back then).
  * Bug fixes:
  - Fix parse-size-dependent "invalid token" error for
    external entities that start with a byte order mark
  - Fix NULL pointer dereference in setContext via
    XML_ExternalEntityParserCreate for compilation with
    XML_DTD undefined
  - Protect against closing entities out of order
  * Other changes:
  - Improve support for arc4random/arc4random_buf
  - Improve buffer growth in XML_GetBuffer and XML_Parse
  - xmlwf: Support --help and --version
  - xmlwf: Support custom buffer size for XML_GetBuffer and read
  - xmlwf: Improve language and URL clickability in help output
  - examples: Add new example "element_declarations.c"
  - Be stricter about macro XML_CONTEXT_BYTES at build time
  - Make inclusion to expat_config.h consistent
  - Autotools: configure.ac: Support --disable-maintainer-mode
  - Autotools: Sync CMake templates with CMake 3.26
  - Autotools: Make installation of shipped man page doc/xmlwf.1
    independent of docbook2man availability
  - Autotools|CMake: Add missing -DXML_STATIC to pkg-config file
    section "Cflags.private" in order to fix compilation
    against static libexpat using pkg-config on Windows
  - Autotools|CMake: Require a C99 compiler
    (a de-facto requirement already since Expat 2.2.2 of 2017)
  - Autotools|CMake: Fix PACKAGE_BUGREPORT variable
  - Autotools|CMake: Make test suite require a C++11 compiler
  - CMake: Require CMake &gt;=3.5.0
  - CMake: Lowercase off_t and size_t to help a bug in Meson
  - CMake: Sort xmlwf sources alphabetically
  - CMake|Windows: Fix generation of DLL file version info
  - CMake: Build tests/benchmark/benchmark.c as well for
    a build with -DEXPAT_BUILD_TESTS=ON
  - docs: Document the importance of isFinal + adjust tests
    accordingly
  - docs: Improve use of "NULL" and "null"
  - docs: Be specific about version of XML (XML 1.0r4)
    and version of C (C99); (XML 1.0r5 will need a sponsor.)
  - docs: reference.html: Promote function XML_ParseBuffer more
  - docs: reference.html: Add HTML anchors to XML_* macros
  - docs: reference.html: Upgrade to OK.css 1.2.0
  - docs: Fix typos
  - docs|CI: Use HTTPS URLs instead of HTTP at various places
  - Address compiler warnings
  - Address clang-tidy warnings
  - Version info bumped from 9:10:8 (libexpat*.so.1.8.10)
    to 10:0:9 (libexpat*.so.1.9.0); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1708430400">- Fix handling of xmlwf.1 to avoid workarounds in specfile:
  * Added libxml2-fix-xmlwf.1-handling.patch
- Call buildconf.sh to avoid (future) issues with expat_config.h.in</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1709294400">- update to 2.6.1:
  * Expose billion laughs API with XML_DTD defined and XML_GE
    undefined, regression from 2.6.0
  * Make tests independent of CPU speed, and thus more robust
- drop libxml2-fix-xmlwf.1-handling.patch, upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1710331200">- update to 2.6.2:
  * CVE-2024-28757 -- Prevent billion laughs attacks with isolated
    use of external parsers (boo#1221289)
  * Reject direct parameter entity recursion and avoid the related
    undefined behavior</changelog>
  <changelog author="david.anes@suse.com" date="1725537600">- Update to 2.6.3:
  * Security fixes:
  - CVE-2024-45490, bsc#1229930 -- Calling function XML_ParseBuffer with
    len &lt; 0 without noticing and then calling XML_GetBuffer
    will have XML_ParseBuffer fail to recognize the problem
    and XML_GetBuffer corrupt memory.
    With the fix, XML_ParseBuffer now complains with error
    XML_ERROR_INVALID_ARGUMENT just like sibling XML_Parse
    has been doing since Expat 2.2.1, and now documented.
    Impact is denial of service to potentially artitrary code
    execution.
  - CVE-2024-45491, bsc#1229931 -- Internal function dtdCopy can have an
    integer overflow for nDefaultAtts on 32-bit platforms
    (where UINT_MAX equals SIZE_MAX).
    Impact is denial of service to potentially artitrary code
    execution.
  - CVE-2024-45492, bsc#1229932 -- Internal function nextScaffoldPart can
    have an integer overflow for m_groupSize on 32-bit
    platforms (where UINT_MAX equals SIZE_MAX).
    Impact is denial of service to potentially artitrary code
    execution.
  * Other changes:
  - Autotools: Sync CMake templates with CMake 3.28
  - Autotools: Always provide path to find(1) for portability
  - Autotools: Ensure that the m4 directory always exists.
  - Autotools: Simplify handling of SIZEOF_VOID_P
  - Autotools: Support non-GNU sed
  - Autotools|CMake: Fix main() to main(void)
  - Autotools|CMake: Fix compile tests for HAVE_SYSCALL_GETRANDOM
  - Autotools|CMake: Stop requiring dos2unix
  - CMake: Fix check for symbols size_t and off_t
  - docs|tests: Convert README to Markdown and update
  - Windows: Drop support for Visual Studio &lt;=15.0/2017
  - Drop needless XML_DTD guards around is_param access
  - Fix typo in a code comment
  - Version info bumped from 10:2:9 (libexpat*.so.1.9.2)
    to 10:3:9 (libexpat*.so.1.9.3); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1727352000">- updated keyring [https://build.suse.de/request/show/345282]
- modified sources
  % expat.keyring</changelog>
  <changelog author="pgajdos@suse.com" date="1730980800">- version update to 2.6.4
  * Security fixes: [bsc#1232601][bsc#1232579]
    [#915]  CVE-2024-50602 -- Fix crash within function XML_ResumeParser
    from a NULL pointer dereference by disallowing function
    XML_StopParser to (stop or) suspend an unstarted parser.
    A new error code XML_ERROR_NOT_STARTED was introduced to
    properly communicate this situation.  // CWE-476 CWE-754
  * Other changes:
    [#903]  CMake: Add alias target "expat::expat"
    [#905]  docs: Document use via CMake &gt;=3.18 with FetchContent
    and SOURCE_SUBDIR and its consequences
    [#902]  tests: Reduce use of global parser instance
    [#904]  tests: Resolve duplicate handler
  [#317] #918  tests: Improve tests on doctype closing (ex CVE-2019-15903)
    [#914]  Fix signedness of format strings
  [#919] #920  Version info bumped from 10:3:9 (libexpat*.so.1.9.3)
    to 11:0:10 (libexpat*.so.1.10.0); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1731412800">- no source changes, just adding jira reference: jsc#SLE-21253</changelog>
  <changelog author="pgajdos@suse.com" date="1741953600">- version update to 2.7.0 (CVE-2024-8176 [bsc#1239618])
  * Security fixes:
    [#893] #973  CVE-2024-8176 -- Fix crash from chaining a large number
    of entities caused by stack overflow by resolving use of
    recursion, for all three uses of entities:
  - general entities in character data ("&lt;e&gt;&amp;g1;&lt;/e&gt;")
  - general entities in attribute values ("&lt;e k1='&amp;g1;'/&gt;")
  - parameter entities ("%p1;")
    Known impact is (reliable and easy) denial of service:
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:H/RL:O/RC:C
    (Base Score: 7.5, Temporal Score: 7.2)
    Please note that a layer of compression around XML can
    significantly reduce the minimum attack payload size.
  * Other changes:
    [#935] #937  Autotools: Make generated CMake files look for
    libexpat.@SO_MAJOR@.dylib on macOS
    [#925]  Autotools: Sync CMake templates with CMake 3.29
  [#945] #962 #966  CMake: Drop support for CMake &lt;3.13
    [#942]  CMake: Small fuzzing related improvements
    [#921]  docs: Add missing documentation of error code
    XML_ERROR_NOT_STARTED that was introduced with 2.6.4
    [#941]  docs: Document need for C++11 compiler for use from C++
    [#959]  tests/benchmark: Fix a (harmless) TOCTTOU
    [#944]  Windows: Fix installer target location of file xmlwf.xml
    for CMake
    [#953]  Windows: Address warning -Wunknown-warning-option
    about -Wno-pedantic-ms-format from LLVM MinGW
    [#971]  Address Cppcheck warnings
    [#969] #970  Mass-migrate links from http:// to https://
    [#947] #958 ..
    [#974] #975  Document changes since the previous release
    [#974] #975  Version info bumped from 11:0:10 (libexpat*.so.1.10.0)
    to 11:1:10 (libexpat*.so.1.10.1); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1743076800">- version update to 2.7.0 for SLE-15-SP7 (jsc#PED-12507)</changelog>
  <changelog author="pgajdos@suse.com" date="1743163200">- version update to 2.7.1
    Bug fixes:
    [#980] #989  Restore event pointer behavior from Expat 2.6.4
    (that the fix to CVE-2024-8176 changed in 2.7.0);
    affected API functions are:
  - XML_GetCurrentByteCount
  - XML_GetCurrentByteIndex
  - XML_GetCurrentColumnNumber
  - XML_GetCurrentLineNumber
  - XML_GetInputContext
    Other changes:
    [#976] #977  Autotools: Integrate files "fuzz/xml_lpm_fuzzer.{cpp,proto}"
    with Automake that were missing from 2.7.0 release tarballs
    [#983] #984  Fix printf format specifiers for 32bit Emscripten
    [#992]  docs: Promote OpenSSF Best Practices self-certification
    [#978]  tests/benchmark: Resolve mistaken double close
    [#986]  Address compiler warnings
    [#990] #993  Version info bumped from 11:1:10 (libexpat*.so.1.10.1)
    to 11:2:10 (libexpat*.so.1.10.2); see https://verbump.de/
    for what these numbers do
    Infrastructure:
    [#982]  CI: Start running Perl XML::Parser integration tests
    [#987]  CI: Enforce Clang Static Analyzer clean code
    [#991]  CI: Re-enable warning clang-analyzer-valist.Uninitialized
    for clang-tidy
    [#981]  CI: Cover compilation with musl
    [#983] #984  CI: Cover compilation with 32bit Emscripten
    [#976] #977  CI: Protect against fuzzer files missing from future
    release archives</changelog>
  <changelog author="martin.schreiner@suse.com" date="1759147200">- Fix CVE-2025-59375 / bsc#1249584.
- Add patch file:
  * CVE-2025-59375.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770120000">- security update
- added patches
  CVE-2026-24515 [bsc#1257144], NULL dereference (CWE-476) due to function XML_ExternalEntityParserCreate() failing to copy the encoding handler data passed to XML_SetUnknownEncodingHandler() from the parent to the subparser
  * expat-CVE-2026-24515.patch
  CVE-2026-25210 [bsc#1257496], lack of buffer size check can lead to an integer overflow
  * expat-CVE-2026-25210.patch</changelog>
  <changelog author="david.anes@suse.com" date="1774526400">- security update:
  * CVE-2026-32776: expat: libexpat: NULL pointer dereference when
    processing empty external parameter entities inside an entity
    declaration value (bsc#1259726)
  - Added patch expat-CVE-2026-32776.patch
  * CVE-2026-32777: expat: libexpat: denial of service due to
    infinite loop in DTD content parsing (bsc#1259711)
  - Added patch expat-CVE-2026-32777.patch
  * CVE-2026-32778: expat: libexpat: NULL pointer dereference in
    `setContext` on retry after an out-of-memory condition (bsc#1259729)
  - Added patch expat-CVE-2026-32778.patch</changelog>
</package>
<package pkgid="49f5feeeb3877a8582bd90ab291cc9fdc410d129b10ef07c3069cbe3da07b680" name="libexpat-devel" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="150700.3.3.1"/>
  <changelog author="dmueller@suse.com" date="1642420800">- update to 2.4.3 (bsc#1194251, bsc#1194362, bsc#1194474,
    bsc#1194476, bsc#1194477, bsc#1194478, bsc#1194479, bsc#1194480):
  * CVE-2021-45960 -- Fix issues with left shifts by &gt;=29 places
    resulting in
    a) realloc acting as free
    b) realloc allocating too few bytes
    c) undefined behavior
    depending on architecture and precise value
    for XML documents with &gt;=2^27+1 prefixed attributes
    on a single XML tag a la
    "&lt;r xmlns:a='[..]' a:a123='[..]' [..] /&gt;"
    where XML_ParserCreateNS is used to create the parser
    (which needs argument "-n" when running xmlwf).
    Impact is denial of service, or more.
  * CVE-2021-46143 (ZDI-CAN-16157) -- Fix integer overflow
    on variable m_groupSize in function doProlog leading
    to realloc acting as free.
    Impact is denial of service or more.
  * CVE-2022-22822 to CVE-2022-22827 -- Prevent integer overflows
    near memory allocation at multiple places.  Mitre assigned
    a dedicated CVE for each involved internal C function:
  - CVE-2022-22822 for function addBinding
  - CVE-2022-22823 for function build_model
  - CVE-2022-22824 for function defineAttribute
  - CVE-2022-22825 for function lookup
  - CVE-2022-22826 for function nextScaffoldPart
  - CVE-2022-22827 for function storeAtts
    Impact is denial of service or more.</changelog>
  <changelog author="david.anes@suse.com" date="1643630400">- update to 2.4.4 (bsc#1195217, bsc#1195054):
  * Security fixes:
  - CVE-2022-23852 -- Fix signed integer overflow
    (undefined behavior) in function XML_GetBuffer
    that is also called by function XML_Parse internally)
    for when XML_CONTEXT_BYTES is defined to &gt;0 (which is both
    common and default).
    Impact is denial of service or more.
  - CVE-2022-23990 -- Fix unsigned integer overflow in function
    doProlog triggered by large content in element type
    declarations when there is an element declaration handler
    present (from a prior call to XML_SetElementDeclHandler).
    Impact is denial of service or more.
  * Bug fixes:
  - xmlwf: Fix a memory leak on output file opening error
  * Other changes:
  - Version info bumped from 9:3:8 to 9:4:8;
    see https://verbump.de/ for what these numbers do
  * Drop unused file valid-xhtml10.png</changelog>
  <changelog author="david.anes@suse.com" date="1645272000">- update to 2.4.5 (bsc#1196171, bsc#1196169, bsc#1196168,
  bsc#1196026, bsc#1196025):
  * Security fixes:
  - CVE-2022-25235 -- Passing malformed 2- and 3-byte UTF-8
    sequences (e.g. from start tag names) to the XML
    processing application on top of Expat can cause
    arbitrary damage (e.g. code execution) depending
    on how invalid UTF-8 is handled inside the XML
    processor; validation was not their job but Expat's.
    Exploits with code execution are known to exist.
  - CVE-2022-25236 -- Passing (one or more) namespace separator
    characters in "xmlns[:prefix]" attribute values
    made Expat send malformed tag names to the XML
    processor on top of Expat which can cause
    arbitrary damage (e.g. code execution) depending
    on such unexpectable cases are handled inside the XML
    processor; validation was not their job but Expat's.
    Exploits with code execution are known to exist.
  - CVE-2022-25313 -- Fix stack exhaustion in doctype parsing
    that could be triggered by e.g. a 2 megabytes
    file with a large number of opening braces.
    Expected impact is denial of service or potentially
    arbitrary code execution.
  - CVE-2022-25314 -- Fix integer overflow in function copyString;
    only affects the encoding name parameter at parser creation
    time which is often hardcoded (rather than user input),
    takes a value in the gigabytes to trigger, and a 64-bit
    machine.  Expected impact is denial of service.
  - CVE-2022-25315 -- Fix integer overflow in function storeRawNames;
    needs input in the gigabytes and a 64-bit machine.
    Expected impact is denial of service or potentially
    arbitrary code execution.
  * Other changes:
  - Version info bumped from 9:4:8 to 9:5:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1645358400">- update to 2.4.6 (bsc#1196168, CVE-2022-25313):
  * Bug fixes:
  - Fix a regression introduced by the fix for CVE-2022-25313
    in release 2.4.5 that affects applications that (1)
    call function XML_SetElementDeclHandler and (2) are
    parsing XML that contains nested element declarations
    (e.g. "&lt;!ELEMENT junk ((bar|foo|xyz+), zebra*)&gt;").
  - Version info bumped from 9:5:8 to 9:6:8;
    see https://verbump.de/ for what these numbers do.</changelog>
  <changelog author="david.anes@suse.com" date="1646481600">- update to 2.4.7 (bsc#1196784, CVE-2022-25236):
  * Bug fixes:
  - Relax fix to CVE-2022-25236 (introduced with release 2.4.5)
    with regard to all valid URI characters (RFC 3986),
    i.e. the following set (excluding whitespace):
    ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz
    0123456789 % -._~ :/?#[]@ !$&amp;'()*+,;=
  * Other changes:
  - CMake|Windows: Store Expat version in the DLL
  - Document consequences of namespace separator choices not just
    in doc/reference.html but also in header &lt;expat.h&gt;
  - Document Expat's lack of validation of namespace URIs against
    RFC 3986, and that the XML 1.0r4 specification doesn't
    require Expat to validate namespace URIs, and that Expat
    may do more in that regard in future releases.
    If you find need for strict RFC 3986 URI validation on
    application level today, https://uriparser.github.io/ may
    be of interest.
  - Fix documentation of XML_EndDoctypeDeclHandler in &lt;expat.h&gt;
  - Document that a call to XML_FreeContentModel can be done at
    a later time from outside the element declaration handler
  - Make hardcoded namespace URIs easier to find in code
  - Update documentation on use of XML_POOR_ENTOPY on Solaris
  - tests: Resolve use of macros NAN and INFINITY for GNU G++
    4.8.2 on Solaris.
  - Version info bumped from 9:6:8 to 9:7:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1648555200">- update to 2.4.8:
  * Other changes:
  - pkg-config: Move "-lm" to section "Libs.private"
  - CMake|MSVC: Fix pkg-config section "Libs"
  - CMake|macOS: Start using linker arguments
    "-compatibility_version &lt;version&gt;" and
    "-current_version &lt;version&gt;" in a way compatible with GNU
    Libtool
  - Version info bumped from 9:7:8 to 9:8:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- update to 2.4.9: (bsc#1203438)
  * Security fixes:
  - CVE-2022-40674 -- Heap use-after-free vulnerability in
    function doContent. Expected impact is denial of service
    or potentially arbitrary code execution.
  * Bug fixes:
  - MinGW: Fix mis-compilation for -D__USE_MINGW_ANSI_STDIO=0
  - docs: Fix documentation on effect of switch XML_DTD on
    symbol visibility in doc/reference.html
  * Other changes:
  - MinGW: Make fix-xmltest-log.sh drop more Wine bug output
  - Autotools: Sync CMake templates with CMake 3.22
  - CMake: Migrate from use of CMAKE_*_POSTFIX to
    dedicated variables EXPAT_*_POSTFIX to stop affecting
    other projects
  - Windows|CMake: Add missing -DXML_STATIC to test runners
    and fuzzers
  - Windows|CMake: Render .def file from a template to fix
    linking with -DEXPAT_DTD=OFF and/or -DEXPAT_ATTR_INFO=ON
  - MinGW|CMake: Apply MSVC .def file when linking
  - MinGW|CMake: Sync library name with GNU Autotools,
    i.e. produce libexpat-1.dll rather than libexpat.dll
    by default.  Filename libexpat.dll.a is unaffected.
  - MinGW|CMake: Set missing variable CMAKE_RC_COMPILER in
    toolchain file "cmake/mingw-toolchain.cmake" to avoid
    error "windres: Command not found" on e.g. Ubuntu 20.04
  - CMake: Unify inconsistent use of set() and option() in
    context of public build time options to take need for
    set(.. FORCE) in projects using Expat by means of
    add_subdirectory(..) off Expat's users' shoulders
  - Stop exporting API symbols when building a static library
  - Resolve use of deprecated "fgrep" by "grep -F"
  - CMake: Make documentation on variables a bit more consistent
  - CMake: Drop leading whitespace from a #cmakedefine line in
    file expat_config.h.cmake
  - xmlwf: Fix harmless variable mix-up in function nsattcmp
  - Address Cppcheck warnings
  - Address Clang 15 compiler warnings
  - Version info bumped from 9:8:8 to 9:9:8;
    see https://verbump.de/ for what these numbers do
  * Infrastructure:
  - CI: Windows: Start covering MSVC 2022
  - CI: macOS: Migrate off deprecated macOS 10.15
  - CI: Linux: Make migration off deprecated Ubuntu 18.04 work
  - CI: Upgrade Clang from 14 to 15
  - apply-clang-format.sh: Add support for BSD find
  - coverage.sh: Exclude MinGW headers
  - coverage.sh: Fix name collision for -funsigned-char</changelog>
  <changelog author="david.anes@suse.com" date="1666785600">- Update to 2.5.0: (bsc#1204708)
  * Security fixes:
  - CVE-2022-43680 -- Fix heap use-after-free after overeager
    destruction of a shared DTD in function
    XML_ExternalEntityParserCreate in out-of-memory situations.
    Expected impact is denial of service or potentially arbitrary
    code execution.
  * Bug fixes:
  - Fix curruption from undefined entities
  - Fix case when parsing was suspended while processing nested
    entities
  - Stop leaking opening tag bindings after a closing tag mismatch
    error where a parser is reset through XML_ParserReset and then
    reused to parse
  - CMake: Fix generation of pkg-config file
  - MinGW|CMake: Fix static library name
  * Other changes:
  - Protect header expat_config.h from multiple inclusion
  - examples: Make use of XML_GetBuffer and be more consistent
    across examples
  - Address compiler warnings
  - Version info bumped from 9:9:8 to 9:10:8; see
    https://verbump.de/ for what these numbers do</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1670760000">- add upstream signing key and validate source signature</changelog>
  <changelog author="david.anes@suse.com" date="1707739200">- Update keyring automatically from keyserver during OBS service run.
- Explicitly use --without-docbook (before it was implicit).
- Include missing files for documentation and examples.
- Add manpage for xmlwf, which is now available in the released tarball.
- Clean the spec file a bit.
- Update to 2.6.0:
  * Security fixes:
  - CVE-2023-52425 (boo#1219559)
  - - Fix quadratic runtime issues with big tokens
    that can cause denial of service, in partial where
    dealing with compressed XML input.  Applications
    that parsed a document in one go -- a single call to
    functions XML_Parse or XML_ParseBuffer -- were not affected.
    The smaller the chunks/buffers you use for parsing
    previously, the bigger the problem prior to the fix.
    Backporters should be careful to no omit parts of
    pull request #789 and to include earlier pull request #771,
    in order to not break the fix.
  - CVE-2023-52426 (boo#1219561)
  - - Fix billion laughs attacks for users
    compiling *without* XML_DTD defined (which is not common).
    Users with XML_DTD defined have been protected since
    Expat &gt;=2.4.0 (and that was CVE-2013-0340 back then).
  * Bug fixes:
  - Fix parse-size-dependent "invalid token" error for
    external entities that start with a byte order mark
  - Fix NULL pointer dereference in setContext via
    XML_ExternalEntityParserCreate for compilation with
    XML_DTD undefined
  - Protect against closing entities out of order
  * Other changes:
  - Improve support for arc4random/arc4random_buf
  - Improve buffer growth in XML_GetBuffer and XML_Parse
  - xmlwf: Support --help and --version
  - xmlwf: Support custom buffer size for XML_GetBuffer and read
  - xmlwf: Improve language and URL clickability in help output
  - examples: Add new example "element_declarations.c"
  - Be stricter about macro XML_CONTEXT_BYTES at build time
  - Make inclusion to expat_config.h consistent
  - Autotools: configure.ac: Support --disable-maintainer-mode
  - Autotools: Sync CMake templates with CMake 3.26
  - Autotools: Make installation of shipped man page doc/xmlwf.1
    independent of docbook2man availability
  - Autotools|CMake: Add missing -DXML_STATIC to pkg-config file
    section "Cflags.private" in order to fix compilation
    against static libexpat using pkg-config on Windows
  - Autotools|CMake: Require a C99 compiler
    (a de-facto requirement already since Expat 2.2.2 of 2017)
  - Autotools|CMake: Fix PACKAGE_BUGREPORT variable
  - Autotools|CMake: Make test suite require a C++11 compiler
  - CMake: Require CMake &gt;=3.5.0
  - CMake: Lowercase off_t and size_t to help a bug in Meson
  - CMake: Sort xmlwf sources alphabetically
  - CMake|Windows: Fix generation of DLL file version info
  - CMake: Build tests/benchmark/benchmark.c as well for
    a build with -DEXPAT_BUILD_TESTS=ON
  - docs: Document the importance of isFinal + adjust tests
    accordingly
  - docs: Improve use of "NULL" and "null"
  - docs: Be specific about version of XML (XML 1.0r4)
    and version of C (C99); (XML 1.0r5 will need a sponsor.)
  - docs: reference.html: Promote function XML_ParseBuffer more
  - docs: reference.html: Add HTML anchors to XML_* macros
  - docs: reference.html: Upgrade to OK.css 1.2.0
  - docs: Fix typos
  - docs|CI: Use HTTPS URLs instead of HTTP at various places
  - Address compiler warnings
  - Address clang-tidy warnings
  - Version info bumped from 9:10:8 (libexpat*.so.1.8.10)
    to 10:0:9 (libexpat*.so.1.9.0); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1708430400">- Fix handling of xmlwf.1 to avoid workarounds in specfile:
  * Added libxml2-fix-xmlwf.1-handling.patch
- Call buildconf.sh to avoid (future) issues with expat_config.h.in</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1709294400">- update to 2.6.1:
  * Expose billion laughs API with XML_DTD defined and XML_GE
    undefined, regression from 2.6.0
  * Make tests independent of CPU speed, and thus more robust
- drop libxml2-fix-xmlwf.1-handling.patch, upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1710331200">- update to 2.6.2:
  * CVE-2024-28757 -- Prevent billion laughs attacks with isolated
    use of external parsers (boo#1221289)
  * Reject direct parameter entity recursion and avoid the related
    undefined behavior</changelog>
  <changelog author="david.anes@suse.com" date="1725537600">- Update to 2.6.3:
  * Security fixes:
  - CVE-2024-45490, bsc#1229930 -- Calling function XML_ParseBuffer with
    len &lt; 0 without noticing and then calling XML_GetBuffer
    will have XML_ParseBuffer fail to recognize the problem
    and XML_GetBuffer corrupt memory.
    With the fix, XML_ParseBuffer now complains with error
    XML_ERROR_INVALID_ARGUMENT just like sibling XML_Parse
    has been doing since Expat 2.2.1, and now documented.
    Impact is denial of service to potentially artitrary code
    execution.
  - CVE-2024-45491, bsc#1229931 -- Internal function dtdCopy can have an
    integer overflow for nDefaultAtts on 32-bit platforms
    (where UINT_MAX equals SIZE_MAX).
    Impact is denial of service to potentially artitrary code
    execution.
  - CVE-2024-45492, bsc#1229932 -- Internal function nextScaffoldPart can
    have an integer overflow for m_groupSize on 32-bit
    platforms (where UINT_MAX equals SIZE_MAX).
    Impact is denial of service to potentially artitrary code
    execution.
  * Other changes:
  - Autotools: Sync CMake templates with CMake 3.28
  - Autotools: Always provide path to find(1) for portability
  - Autotools: Ensure that the m4 directory always exists.
  - Autotools: Simplify handling of SIZEOF_VOID_P
  - Autotools: Support non-GNU sed
  - Autotools|CMake: Fix main() to main(void)
  - Autotools|CMake: Fix compile tests for HAVE_SYSCALL_GETRANDOM
  - Autotools|CMake: Stop requiring dos2unix
  - CMake: Fix check for symbols size_t and off_t
  - docs|tests: Convert README to Markdown and update
  - Windows: Drop support for Visual Studio &lt;=15.0/2017
  - Drop needless XML_DTD guards around is_param access
  - Fix typo in a code comment
  - Version info bumped from 10:2:9 (libexpat*.so.1.9.2)
    to 10:3:9 (libexpat*.so.1.9.3); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1727352000">- updated keyring [https://build.suse.de/request/show/345282]
- modified sources
  % expat.keyring</changelog>
  <changelog author="pgajdos@suse.com" date="1730980800">- version update to 2.6.4
  * Security fixes: [bsc#1232601][bsc#1232579]
    [#915]  CVE-2024-50602 -- Fix crash within function XML_ResumeParser
    from a NULL pointer dereference by disallowing function
    XML_StopParser to (stop or) suspend an unstarted parser.
    A new error code XML_ERROR_NOT_STARTED was introduced to
    properly communicate this situation.  // CWE-476 CWE-754
  * Other changes:
    [#903]  CMake: Add alias target "expat::expat"
    [#905]  docs: Document use via CMake &gt;=3.18 with FetchContent
    and SOURCE_SUBDIR and its consequences
    [#902]  tests: Reduce use of global parser instance
    [#904]  tests: Resolve duplicate handler
  [#317] #918  tests: Improve tests on doctype closing (ex CVE-2019-15903)
    [#914]  Fix signedness of format strings
  [#919] #920  Version info bumped from 10:3:9 (libexpat*.so.1.9.3)
    to 11:0:10 (libexpat*.so.1.10.0); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1731412800">- no source changes, just adding jira reference: jsc#SLE-21253</changelog>
  <changelog author="pgajdos@suse.com" date="1741953600">- version update to 2.7.0 (CVE-2024-8176 [bsc#1239618])
  * Security fixes:
    [#893] #973  CVE-2024-8176 -- Fix crash from chaining a large number
    of entities caused by stack overflow by resolving use of
    recursion, for all three uses of entities:
  - general entities in character data ("&lt;e&gt;&amp;g1;&lt;/e&gt;")
  - general entities in attribute values ("&lt;e k1='&amp;g1;'/&gt;")
  - parameter entities ("%p1;")
    Known impact is (reliable and easy) denial of service:
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:H/RL:O/RC:C
    (Base Score: 7.5, Temporal Score: 7.2)
    Please note that a layer of compression around XML can
    significantly reduce the minimum attack payload size.
  * Other changes:
    [#935] #937  Autotools: Make generated CMake files look for
    libexpat.@SO_MAJOR@.dylib on macOS
    [#925]  Autotools: Sync CMake templates with CMake 3.29
  [#945] #962 #966  CMake: Drop support for CMake &lt;3.13
    [#942]  CMake: Small fuzzing related improvements
    [#921]  docs: Add missing documentation of error code
    XML_ERROR_NOT_STARTED that was introduced with 2.6.4
    [#941]  docs: Document need for C++11 compiler for use from C++
    [#959]  tests/benchmark: Fix a (harmless) TOCTTOU
    [#944]  Windows: Fix installer target location of file xmlwf.xml
    for CMake
    [#953]  Windows: Address warning -Wunknown-warning-option
    about -Wno-pedantic-ms-format from LLVM MinGW
    [#971]  Address Cppcheck warnings
    [#969] #970  Mass-migrate links from http:// to https://
    [#947] #958 ..
    [#974] #975  Document changes since the previous release
    [#974] #975  Version info bumped from 11:0:10 (libexpat*.so.1.10.0)
    to 11:1:10 (libexpat*.so.1.10.1); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1743076800">- version update to 2.7.0 for SLE-15-SP7 (jsc#PED-12507)</changelog>
  <changelog author="pgajdos@suse.com" date="1743163200">- version update to 2.7.1
    Bug fixes:
    [#980] #989  Restore event pointer behavior from Expat 2.6.4
    (that the fix to CVE-2024-8176 changed in 2.7.0);
    affected API functions are:
  - XML_GetCurrentByteCount
  - XML_GetCurrentByteIndex
  - XML_GetCurrentColumnNumber
  - XML_GetCurrentLineNumber
  - XML_GetInputContext
    Other changes:
    [#976] #977  Autotools: Integrate files "fuzz/xml_lpm_fuzzer.{cpp,proto}"
    with Automake that were missing from 2.7.0 release tarballs
    [#983] #984  Fix printf format specifiers for 32bit Emscripten
    [#992]  docs: Promote OpenSSF Best Practices self-certification
    [#978]  tests/benchmark: Resolve mistaken double close
    [#986]  Address compiler warnings
    [#990] #993  Version info bumped from 11:1:10 (libexpat*.so.1.10.1)
    to 11:2:10 (libexpat*.so.1.10.2); see https://verbump.de/
    for what these numbers do
    Infrastructure:
    [#982]  CI: Start running Perl XML::Parser integration tests
    [#987]  CI: Enforce Clang Static Analyzer clean code
    [#991]  CI: Re-enable warning clang-analyzer-valist.Uninitialized
    for clang-tidy
    [#981]  CI: Cover compilation with musl
    [#983] #984  CI: Cover compilation with 32bit Emscripten
    [#976] #977  CI: Protect against fuzzer files missing from future
    release archives</changelog>
</package>
<package pkgid="a119e548d5c0d0d07c448b27343fb21b05106a3418a92f4bfaae20190da1d652" name="libexpat-devel" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="150700.3.6.1"/>
  <changelog author="david.anes@suse.com" date="1643630400">- update to 2.4.4 (bsc#1195217, bsc#1195054):
  * Security fixes:
  - CVE-2022-23852 -- Fix signed integer overflow
    (undefined behavior) in function XML_GetBuffer
    that is also called by function XML_Parse internally)
    for when XML_CONTEXT_BYTES is defined to &gt;0 (which is both
    common and default).
    Impact is denial of service or more.
  - CVE-2022-23990 -- Fix unsigned integer overflow in function
    doProlog triggered by large content in element type
    declarations when there is an element declaration handler
    present (from a prior call to XML_SetElementDeclHandler).
    Impact is denial of service or more.
  * Bug fixes:
  - xmlwf: Fix a memory leak on output file opening error
  * Other changes:
  - Version info bumped from 9:3:8 to 9:4:8;
    see https://verbump.de/ for what these numbers do
  * Drop unused file valid-xhtml10.png</changelog>
  <changelog author="david.anes@suse.com" date="1645272000">- update to 2.4.5 (bsc#1196171, bsc#1196169, bsc#1196168,
  bsc#1196026, bsc#1196025):
  * Security fixes:
  - CVE-2022-25235 -- Passing malformed 2- and 3-byte UTF-8
    sequences (e.g. from start tag names) to the XML
    processing application on top of Expat can cause
    arbitrary damage (e.g. code execution) depending
    on how invalid UTF-8 is handled inside the XML
    processor; validation was not their job but Expat's.
    Exploits with code execution are known to exist.
  - CVE-2022-25236 -- Passing (one or more) namespace separator
    characters in "xmlns[:prefix]" attribute values
    made Expat send malformed tag names to the XML
    processor on top of Expat which can cause
    arbitrary damage (e.g. code execution) depending
    on such unexpectable cases are handled inside the XML
    processor; validation was not their job but Expat's.
    Exploits with code execution are known to exist.
  - CVE-2022-25313 -- Fix stack exhaustion in doctype parsing
    that could be triggered by e.g. a 2 megabytes
    file with a large number of opening braces.
    Expected impact is denial of service or potentially
    arbitrary code execution.
  - CVE-2022-25314 -- Fix integer overflow in function copyString;
    only affects the encoding name parameter at parser creation
    time which is often hardcoded (rather than user input),
    takes a value in the gigabytes to trigger, and a 64-bit
    machine.  Expected impact is denial of service.
  - CVE-2022-25315 -- Fix integer overflow in function storeRawNames;
    needs input in the gigabytes and a 64-bit machine.
    Expected impact is denial of service or potentially
    arbitrary code execution.
  * Other changes:
  - Version info bumped from 9:4:8 to 9:5:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1645358400">- update to 2.4.6 (bsc#1196168, CVE-2022-25313):
  * Bug fixes:
  - Fix a regression introduced by the fix for CVE-2022-25313
    in release 2.4.5 that affects applications that (1)
    call function XML_SetElementDeclHandler and (2) are
    parsing XML that contains nested element declarations
    (e.g. "&lt;!ELEMENT junk ((bar|foo|xyz+), zebra*)&gt;").
  - Version info bumped from 9:5:8 to 9:6:8;
    see https://verbump.de/ for what these numbers do.</changelog>
  <changelog author="david.anes@suse.com" date="1646481600">- update to 2.4.7 (bsc#1196784, CVE-2022-25236):
  * Bug fixes:
  - Relax fix to CVE-2022-25236 (introduced with release 2.4.5)
    with regard to all valid URI characters (RFC 3986),
    i.e. the following set (excluding whitespace):
    ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz
    0123456789 % -._~ :/?#[]@ !$&amp;'()*+,;=
  * Other changes:
  - CMake|Windows: Store Expat version in the DLL
  - Document consequences of namespace separator choices not just
    in doc/reference.html but also in header &lt;expat.h&gt;
  - Document Expat's lack of validation of namespace URIs against
    RFC 3986, and that the XML 1.0r4 specification doesn't
    require Expat to validate namespace URIs, and that Expat
    may do more in that regard in future releases.
    If you find need for strict RFC 3986 URI validation on
    application level today, https://uriparser.github.io/ may
    be of interest.
  - Fix documentation of XML_EndDoctypeDeclHandler in &lt;expat.h&gt;
  - Document that a call to XML_FreeContentModel can be done at
    a later time from outside the element declaration handler
  - Make hardcoded namespace URIs easier to find in code
  - Update documentation on use of XML_POOR_ENTOPY on Solaris
  - tests: Resolve use of macros NAN and INFINITY for GNU G++
    4.8.2 on Solaris.
  - Version info bumped from 9:6:8 to 9:7:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1648555200">- update to 2.4.8:
  * Other changes:
  - pkg-config: Move "-lm" to section "Libs.private"
  - CMake|MSVC: Fix pkg-config section "Libs"
  - CMake|macOS: Start using linker arguments
    "-compatibility_version &lt;version&gt;" and
    "-current_version &lt;version&gt;" in a way compatible with GNU
    Libtool
  - Version info bumped from 9:7:8 to 9:8:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- update to 2.4.9: (bsc#1203438)
  * Security fixes:
  - CVE-2022-40674 -- Heap use-after-free vulnerability in
    function doContent. Expected impact is denial of service
    or potentially arbitrary code execution.
  * Bug fixes:
  - MinGW: Fix mis-compilation for -D__USE_MINGW_ANSI_STDIO=0
  - docs: Fix documentation on effect of switch XML_DTD on
    symbol visibility in doc/reference.html
  * Other changes:
  - MinGW: Make fix-xmltest-log.sh drop more Wine bug output
  - Autotools: Sync CMake templates with CMake 3.22
  - CMake: Migrate from use of CMAKE_*_POSTFIX to
    dedicated variables EXPAT_*_POSTFIX to stop affecting
    other projects
  - Windows|CMake: Add missing -DXML_STATIC to test runners
    and fuzzers
  - Windows|CMake: Render .def file from a template to fix
    linking with -DEXPAT_DTD=OFF and/or -DEXPAT_ATTR_INFO=ON
  - MinGW|CMake: Apply MSVC .def file when linking
  - MinGW|CMake: Sync library name with GNU Autotools,
    i.e. produce libexpat-1.dll rather than libexpat.dll
    by default.  Filename libexpat.dll.a is unaffected.
  - MinGW|CMake: Set missing variable CMAKE_RC_COMPILER in
    toolchain file "cmake/mingw-toolchain.cmake" to avoid
    error "windres: Command not found" on e.g. Ubuntu 20.04
  - CMake: Unify inconsistent use of set() and option() in
    context of public build time options to take need for
    set(.. FORCE) in projects using Expat by means of
    add_subdirectory(..) off Expat's users' shoulders
  - Stop exporting API symbols when building a static library
  - Resolve use of deprecated "fgrep" by "grep -F"
  - CMake: Make documentation on variables a bit more consistent
  - CMake: Drop leading whitespace from a #cmakedefine line in
    file expat_config.h.cmake
  - xmlwf: Fix harmless variable mix-up in function nsattcmp
  - Address Cppcheck warnings
  - Address Clang 15 compiler warnings
  - Version info bumped from 9:8:8 to 9:9:8;
    see https://verbump.de/ for what these numbers do
  * Infrastructure:
  - CI: Windows: Start covering MSVC 2022
  - CI: macOS: Migrate off deprecated macOS 10.15
  - CI: Linux: Make migration off deprecated Ubuntu 18.04 work
  - CI: Upgrade Clang from 14 to 15
  - apply-clang-format.sh: Add support for BSD find
  - coverage.sh: Exclude MinGW headers
  - coverage.sh: Fix name collision for -funsigned-char</changelog>
  <changelog author="david.anes@suse.com" date="1666785600">- Update to 2.5.0: (bsc#1204708)
  * Security fixes:
  - CVE-2022-43680 -- Fix heap use-after-free after overeager
    destruction of a shared DTD in function
    XML_ExternalEntityParserCreate in out-of-memory situations.
    Expected impact is denial of service or potentially arbitrary
    code execution.
  * Bug fixes:
  - Fix curruption from undefined entities
  - Fix case when parsing was suspended while processing nested
    entities
  - Stop leaking opening tag bindings after a closing tag mismatch
    error where a parser is reset through XML_ParserReset and then
    reused to parse
  - CMake: Fix generation of pkg-config file
  - MinGW|CMake: Fix static library name
  * Other changes:
  - Protect header expat_config.h from multiple inclusion
  - examples: Make use of XML_GetBuffer and be more consistent
    across examples
  - Address compiler warnings
  - Version info bumped from 9:9:8 to 9:10:8; see
    https://verbump.de/ for what these numbers do</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1670760000">- add upstream signing key and validate source signature</changelog>
  <changelog author="david.anes@suse.com" date="1707739200">- Update keyring automatically from keyserver during OBS service run.
- Explicitly use --without-docbook (before it was implicit).
- Include missing files for documentation and examples.
- Add manpage for xmlwf, which is now available in the released tarball.
- Clean the spec file a bit.
- Update to 2.6.0:
  * Security fixes:
  - CVE-2023-52425 (boo#1219559)
  - - Fix quadratic runtime issues with big tokens
    that can cause denial of service, in partial where
    dealing with compressed XML input.  Applications
    that parsed a document in one go -- a single call to
    functions XML_Parse or XML_ParseBuffer -- were not affected.
    The smaller the chunks/buffers you use for parsing
    previously, the bigger the problem prior to the fix.
    Backporters should be careful to no omit parts of
    pull request #789 and to include earlier pull request #771,
    in order to not break the fix.
  - CVE-2023-52426 (boo#1219561)
  - - Fix billion laughs attacks for users
    compiling *without* XML_DTD defined (which is not common).
    Users with XML_DTD defined have been protected since
    Expat &gt;=2.4.0 (and that was CVE-2013-0340 back then).
  * Bug fixes:
  - Fix parse-size-dependent "invalid token" error for
    external entities that start with a byte order mark
  - Fix NULL pointer dereference in setContext via
    XML_ExternalEntityParserCreate for compilation with
    XML_DTD undefined
  - Protect against closing entities out of order
  * Other changes:
  - Improve support for arc4random/arc4random_buf
  - Improve buffer growth in XML_GetBuffer and XML_Parse
  - xmlwf: Support --help and --version
  - xmlwf: Support custom buffer size for XML_GetBuffer and read
  - xmlwf: Improve language and URL clickability in help output
  - examples: Add new example "element_declarations.c"
  - Be stricter about macro XML_CONTEXT_BYTES at build time
  - Make inclusion to expat_config.h consistent
  - Autotools: configure.ac: Support --disable-maintainer-mode
  - Autotools: Sync CMake templates with CMake 3.26
  - Autotools: Make installation of shipped man page doc/xmlwf.1
    independent of docbook2man availability
  - Autotools|CMake: Add missing -DXML_STATIC to pkg-config file
    section "Cflags.private" in order to fix compilation
    against static libexpat using pkg-config on Windows
  - Autotools|CMake: Require a C99 compiler
    (a de-facto requirement already since Expat 2.2.2 of 2017)
  - Autotools|CMake: Fix PACKAGE_BUGREPORT variable
  - Autotools|CMake: Make test suite require a C++11 compiler
  - CMake: Require CMake &gt;=3.5.0
  - CMake: Lowercase off_t and size_t to help a bug in Meson
  - CMake: Sort xmlwf sources alphabetically
  - CMake|Windows: Fix generation of DLL file version info
  - CMake: Build tests/benchmark/benchmark.c as well for
    a build with -DEXPAT_BUILD_TESTS=ON
  - docs: Document the importance of isFinal + adjust tests
    accordingly
  - docs: Improve use of "NULL" and "null"
  - docs: Be specific about version of XML (XML 1.0r4)
    and version of C (C99); (XML 1.0r5 will need a sponsor.)
  - docs: reference.html: Promote function XML_ParseBuffer more
  - docs: reference.html: Add HTML anchors to XML_* macros
  - docs: reference.html: Upgrade to OK.css 1.2.0
  - docs: Fix typos
  - docs|CI: Use HTTPS URLs instead of HTTP at various places
  - Address compiler warnings
  - Address clang-tidy warnings
  - Version info bumped from 9:10:8 (libexpat*.so.1.8.10)
    to 10:0:9 (libexpat*.so.1.9.0); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1708430400">- Fix handling of xmlwf.1 to avoid workarounds in specfile:
  * Added libxml2-fix-xmlwf.1-handling.patch
- Call buildconf.sh to avoid (future) issues with expat_config.h.in</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1709294400">- update to 2.6.1:
  * Expose billion laughs API with XML_DTD defined and XML_GE
    undefined, regression from 2.6.0
  * Make tests independent of CPU speed, and thus more robust
- drop libxml2-fix-xmlwf.1-handling.patch, upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1710331200">- update to 2.6.2:
  * CVE-2024-28757 -- Prevent billion laughs attacks with isolated
    use of external parsers (boo#1221289)
  * Reject direct parameter entity recursion and avoid the related
    undefined behavior</changelog>
  <changelog author="david.anes@suse.com" date="1725537600">- Update to 2.6.3:
  * Security fixes:
  - CVE-2024-45490, bsc#1229930 -- Calling function XML_ParseBuffer with
    len &lt; 0 without noticing and then calling XML_GetBuffer
    will have XML_ParseBuffer fail to recognize the problem
    and XML_GetBuffer corrupt memory.
    With the fix, XML_ParseBuffer now complains with error
    XML_ERROR_INVALID_ARGUMENT just like sibling XML_Parse
    has been doing since Expat 2.2.1, and now documented.
    Impact is denial of service to potentially artitrary code
    execution.
  - CVE-2024-45491, bsc#1229931 -- Internal function dtdCopy can have an
    integer overflow for nDefaultAtts on 32-bit platforms
    (where UINT_MAX equals SIZE_MAX).
    Impact is denial of service to potentially artitrary code
    execution.
  - CVE-2024-45492, bsc#1229932 -- Internal function nextScaffoldPart can
    have an integer overflow for m_groupSize on 32-bit
    platforms (where UINT_MAX equals SIZE_MAX).
    Impact is denial of service to potentially artitrary code
    execution.
  * Other changes:
  - Autotools: Sync CMake templates with CMake 3.28
  - Autotools: Always provide path to find(1) for portability
  - Autotools: Ensure that the m4 directory always exists.
  - Autotools: Simplify handling of SIZEOF_VOID_P
  - Autotools: Support non-GNU sed
  - Autotools|CMake: Fix main() to main(void)
  - Autotools|CMake: Fix compile tests for HAVE_SYSCALL_GETRANDOM
  - Autotools|CMake: Stop requiring dos2unix
  - CMake: Fix check for symbols size_t and off_t
  - docs|tests: Convert README to Markdown and update
  - Windows: Drop support for Visual Studio &lt;=15.0/2017
  - Drop needless XML_DTD guards around is_param access
  - Fix typo in a code comment
  - Version info bumped from 10:2:9 (libexpat*.so.1.9.2)
    to 10:3:9 (libexpat*.so.1.9.3); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1727352000">- updated keyring [https://build.suse.de/request/show/345282]
- modified sources
  % expat.keyring</changelog>
  <changelog author="pgajdos@suse.com" date="1730980800">- version update to 2.6.4
  * Security fixes: [bsc#1232601][bsc#1232579]
    [#915]  CVE-2024-50602 -- Fix crash within function XML_ResumeParser
    from a NULL pointer dereference by disallowing function
    XML_StopParser to (stop or) suspend an unstarted parser.
    A new error code XML_ERROR_NOT_STARTED was introduced to
    properly communicate this situation.  // CWE-476 CWE-754
  * Other changes:
    [#903]  CMake: Add alias target "expat::expat"
    [#905]  docs: Document use via CMake &gt;=3.18 with FetchContent
    and SOURCE_SUBDIR and its consequences
    [#902]  tests: Reduce use of global parser instance
    [#904]  tests: Resolve duplicate handler
  [#317] #918  tests: Improve tests on doctype closing (ex CVE-2019-15903)
    [#914]  Fix signedness of format strings
  [#919] #920  Version info bumped from 10:3:9 (libexpat*.so.1.9.3)
    to 11:0:10 (libexpat*.so.1.10.0); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1731412800">- no source changes, just adding jira reference: jsc#SLE-21253</changelog>
  <changelog author="pgajdos@suse.com" date="1741953600">- version update to 2.7.0 (CVE-2024-8176 [bsc#1239618])
  * Security fixes:
    [#893] #973  CVE-2024-8176 -- Fix crash from chaining a large number
    of entities caused by stack overflow by resolving use of
    recursion, for all three uses of entities:
  - general entities in character data ("&lt;e&gt;&amp;g1;&lt;/e&gt;")
  - general entities in attribute values ("&lt;e k1='&amp;g1;'/&gt;")
  - parameter entities ("%p1;")
    Known impact is (reliable and easy) denial of service:
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:H/RL:O/RC:C
    (Base Score: 7.5, Temporal Score: 7.2)
    Please note that a layer of compression around XML can
    significantly reduce the minimum attack payload size.
  * Other changes:
    [#935] #937  Autotools: Make generated CMake files look for
    libexpat.@SO_MAJOR@.dylib on macOS
    [#925]  Autotools: Sync CMake templates with CMake 3.29
  [#945] #962 #966  CMake: Drop support for CMake &lt;3.13
    [#942]  CMake: Small fuzzing related improvements
    [#921]  docs: Add missing documentation of error code
    XML_ERROR_NOT_STARTED that was introduced with 2.6.4
    [#941]  docs: Document need for C++11 compiler for use from C++
    [#959]  tests/benchmark: Fix a (harmless) TOCTTOU
    [#944]  Windows: Fix installer target location of file xmlwf.xml
    for CMake
    [#953]  Windows: Address warning -Wunknown-warning-option
    about -Wno-pedantic-ms-format from LLVM MinGW
    [#971]  Address Cppcheck warnings
    [#969] #970  Mass-migrate links from http:// to https://
    [#947] #958 ..
    [#974] #975  Document changes since the previous release
    [#974] #975  Version info bumped from 11:0:10 (libexpat*.so.1.10.0)
    to 11:1:10 (libexpat*.so.1.10.1); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1743076800">- version update to 2.7.0 for SLE-15-SP7 (jsc#PED-12507)</changelog>
  <changelog author="pgajdos@suse.com" date="1743163200">- version update to 2.7.1
    Bug fixes:
    [#980] #989  Restore event pointer behavior from Expat 2.6.4
    (that the fix to CVE-2024-8176 changed in 2.7.0);
    affected API functions are:
  - XML_GetCurrentByteCount
  - XML_GetCurrentByteIndex
  - XML_GetCurrentColumnNumber
  - XML_GetCurrentLineNumber
  - XML_GetInputContext
    Other changes:
    [#976] #977  Autotools: Integrate files "fuzz/xml_lpm_fuzzer.{cpp,proto}"
    with Automake that were missing from 2.7.0 release tarballs
    [#983] #984  Fix printf format specifiers for 32bit Emscripten
    [#992]  docs: Promote OpenSSF Best Practices self-certification
    [#978]  tests/benchmark: Resolve mistaken double close
    [#986]  Address compiler warnings
    [#990] #993  Version info bumped from 11:1:10 (libexpat*.so.1.10.1)
    to 11:2:10 (libexpat*.so.1.10.2); see https://verbump.de/
    for what these numbers do
    Infrastructure:
    [#982]  CI: Start running Perl XML::Parser integration tests
    [#987]  CI: Enforce Clang Static Analyzer clean code
    [#991]  CI: Re-enable warning clang-analyzer-valist.Uninitialized
    for clang-tidy
    [#981]  CI: Cover compilation with musl
    [#983] #984  CI: Cover compilation with 32bit Emscripten
    [#976] #977  CI: Protect against fuzzer files missing from future
    release archives</changelog>
  <changelog author="martin.schreiner@suse.com" date="1759147200">- Fix CVE-2025-59375 / bsc#1249584.
- Add patch file:
  * CVE-2025-59375.patch</changelog>
</package>
<package pkgid="b569d0563801fca0f94a8efc3eba4edf475b8feaea3f038f26ec36399dadcd6d" name="libexpat-devel" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="150700.3.9.2"/>
  <changelog author="david.anes@suse.com" date="1645272000">- update to 2.4.5 (bsc#1196171, bsc#1196169, bsc#1196168,
  bsc#1196026, bsc#1196025):
  * Security fixes:
  - CVE-2022-25235 -- Passing malformed 2- and 3-byte UTF-8
    sequences (e.g. from start tag names) to the XML
    processing application on top of Expat can cause
    arbitrary damage (e.g. code execution) depending
    on how invalid UTF-8 is handled inside the XML
    processor; validation was not their job but Expat's.
    Exploits with code execution are known to exist.
  - CVE-2022-25236 -- Passing (one or more) namespace separator
    characters in "xmlns[:prefix]" attribute values
    made Expat send malformed tag names to the XML
    processor on top of Expat which can cause
    arbitrary damage (e.g. code execution) depending
    on such unexpectable cases are handled inside the XML
    processor; validation was not their job but Expat's.
    Exploits with code execution are known to exist.
  - CVE-2022-25313 -- Fix stack exhaustion in doctype parsing
    that could be triggered by e.g. a 2 megabytes
    file with a large number of opening braces.
    Expected impact is denial of service or potentially
    arbitrary code execution.
  - CVE-2022-25314 -- Fix integer overflow in function copyString;
    only affects the encoding name parameter at parser creation
    time which is often hardcoded (rather than user input),
    takes a value in the gigabytes to trigger, and a 64-bit
    machine.  Expected impact is denial of service.
  - CVE-2022-25315 -- Fix integer overflow in function storeRawNames;
    needs input in the gigabytes and a 64-bit machine.
    Expected impact is denial of service or potentially
    arbitrary code execution.
  * Other changes:
  - Version info bumped from 9:4:8 to 9:5:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1645358400">- update to 2.4.6 (bsc#1196168, CVE-2022-25313):
  * Bug fixes:
  - Fix a regression introduced by the fix for CVE-2022-25313
    in release 2.4.5 that affects applications that (1)
    call function XML_SetElementDeclHandler and (2) are
    parsing XML that contains nested element declarations
    (e.g. "&lt;!ELEMENT junk ((bar|foo|xyz+), zebra*)&gt;").
  - Version info bumped from 9:5:8 to 9:6:8;
    see https://verbump.de/ for what these numbers do.</changelog>
  <changelog author="david.anes@suse.com" date="1646481600">- update to 2.4.7 (bsc#1196784, CVE-2022-25236):
  * Bug fixes:
  - Relax fix to CVE-2022-25236 (introduced with release 2.4.5)
    with regard to all valid URI characters (RFC 3986),
    i.e. the following set (excluding whitespace):
    ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz
    0123456789 % -._~ :/?#[]@ !$&amp;'()*+,;=
  * Other changes:
  - CMake|Windows: Store Expat version in the DLL
  - Document consequences of namespace separator choices not just
    in doc/reference.html but also in header &lt;expat.h&gt;
  - Document Expat's lack of validation of namespace URIs against
    RFC 3986, and that the XML 1.0r4 specification doesn't
    require Expat to validate namespace URIs, and that Expat
    may do more in that regard in future releases.
    If you find need for strict RFC 3986 URI validation on
    application level today, https://uriparser.github.io/ may
    be of interest.
  - Fix documentation of XML_EndDoctypeDeclHandler in &lt;expat.h&gt;
  - Document that a call to XML_FreeContentModel can be done at
    a later time from outside the element declaration handler
  - Make hardcoded namespace URIs easier to find in code
  - Update documentation on use of XML_POOR_ENTOPY on Solaris
  - tests: Resolve use of macros NAN and INFINITY for GNU G++
    4.8.2 on Solaris.
  - Version info bumped from 9:6:8 to 9:7:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1648555200">- update to 2.4.8:
  * Other changes:
  - pkg-config: Move "-lm" to section "Libs.private"
  - CMake|MSVC: Fix pkg-config section "Libs"
  - CMake|macOS: Start using linker arguments
    "-compatibility_version &lt;version&gt;" and
    "-current_version &lt;version&gt;" in a way compatible with GNU
    Libtool
  - Version info bumped from 9:7:8 to 9:8:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- update to 2.4.9: (bsc#1203438)
  * Security fixes:
  - CVE-2022-40674 -- Heap use-after-free vulnerability in
    function doContent. Expected impact is denial of service
    or potentially arbitrary code execution.
  * Bug fixes:
  - MinGW: Fix mis-compilation for -D__USE_MINGW_ANSI_STDIO=0
  - docs: Fix documentation on effect of switch XML_DTD on
    symbol visibility in doc/reference.html
  * Other changes:
  - MinGW: Make fix-xmltest-log.sh drop more Wine bug output
  - Autotools: Sync CMake templates with CMake 3.22
  - CMake: Migrate from use of CMAKE_*_POSTFIX to
    dedicated variables EXPAT_*_POSTFIX to stop affecting
    other projects
  - Windows|CMake: Add missing -DXML_STATIC to test runners
    and fuzzers
  - Windows|CMake: Render .def file from a template to fix
    linking with -DEXPAT_DTD=OFF and/or -DEXPAT_ATTR_INFO=ON
  - MinGW|CMake: Apply MSVC .def file when linking
  - MinGW|CMake: Sync library name with GNU Autotools,
    i.e. produce libexpat-1.dll rather than libexpat.dll
    by default.  Filename libexpat.dll.a is unaffected.
  - MinGW|CMake: Set missing variable CMAKE_RC_COMPILER in
    toolchain file "cmake/mingw-toolchain.cmake" to avoid
    error "windres: Command not found" on e.g. Ubuntu 20.04
  - CMake: Unify inconsistent use of set() and option() in
    context of public build time options to take need for
    set(.. FORCE) in projects using Expat by means of
    add_subdirectory(..) off Expat's users' shoulders
  - Stop exporting API symbols when building a static library
  - Resolve use of deprecated "fgrep" by "grep -F"
  - CMake: Make documentation on variables a bit more consistent
  - CMake: Drop leading whitespace from a #cmakedefine line in
    file expat_config.h.cmake
  - xmlwf: Fix harmless variable mix-up in function nsattcmp
  - Address Cppcheck warnings
  - Address Clang 15 compiler warnings
  - Version info bumped from 9:8:8 to 9:9:8;
    see https://verbump.de/ for what these numbers do
  * Infrastructure:
  - CI: Windows: Start covering MSVC 2022
  - CI: macOS: Migrate off deprecated macOS 10.15
  - CI: Linux: Make migration off deprecated Ubuntu 18.04 work
  - CI: Upgrade Clang from 14 to 15
  - apply-clang-format.sh: Add support for BSD find
  - coverage.sh: Exclude MinGW headers
  - coverage.sh: Fix name collision for -funsigned-char</changelog>
  <changelog author="david.anes@suse.com" date="1666785600">- Update to 2.5.0: (bsc#1204708)
  * Security fixes:
  - CVE-2022-43680 -- Fix heap use-after-free after overeager
    destruction of a shared DTD in function
    XML_ExternalEntityParserCreate in out-of-memory situations.
    Expected impact is denial of service or potentially arbitrary
    code execution.
  * Bug fixes:
  - Fix curruption from undefined entities
  - Fix case when parsing was suspended while processing nested
    entities
  - Stop leaking opening tag bindings after a closing tag mismatch
    error where a parser is reset through XML_ParserReset and then
    reused to parse
  - CMake: Fix generation of pkg-config file
  - MinGW|CMake: Fix static library name
  * Other changes:
  - Protect header expat_config.h from multiple inclusion
  - examples: Make use of XML_GetBuffer and be more consistent
    across examples
  - Address compiler warnings
  - Version info bumped from 9:9:8 to 9:10:8; see
    https://verbump.de/ for what these numbers do</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1670760000">- add upstream signing key and validate source signature</changelog>
  <changelog author="david.anes@suse.com" date="1707739200">- Update keyring automatically from keyserver during OBS service run.
- Explicitly use --without-docbook (before it was implicit).
- Include missing files for documentation and examples.
- Add manpage for xmlwf, which is now available in the released tarball.
- Clean the spec file a bit.
- Update to 2.6.0:
  * Security fixes:
  - CVE-2023-52425 (boo#1219559)
  - - Fix quadratic runtime issues with big tokens
    that can cause denial of service, in partial where
    dealing with compressed XML input.  Applications
    that parsed a document in one go -- a single call to
    functions XML_Parse or XML_ParseBuffer -- were not affected.
    The smaller the chunks/buffers you use for parsing
    previously, the bigger the problem prior to the fix.
    Backporters should be careful to no omit parts of
    pull request #789 and to include earlier pull request #771,
    in order to not break the fix.
  - CVE-2023-52426 (boo#1219561)
  - - Fix billion laughs attacks for users
    compiling *without* XML_DTD defined (which is not common).
    Users with XML_DTD defined have been protected since
    Expat &gt;=2.4.0 (and that was CVE-2013-0340 back then).
  * Bug fixes:
  - Fix parse-size-dependent "invalid token" error for
    external entities that start with a byte order mark
  - Fix NULL pointer dereference in setContext via
    XML_ExternalEntityParserCreate for compilation with
    XML_DTD undefined
  - Protect against closing entities out of order
  * Other changes:
  - Improve support for arc4random/arc4random_buf
  - Improve buffer growth in XML_GetBuffer and XML_Parse
  - xmlwf: Support --help and --version
  - xmlwf: Support custom buffer size for XML_GetBuffer and read
  - xmlwf: Improve language and URL clickability in help output
  - examples: Add new example "element_declarations.c"
  - Be stricter about macro XML_CONTEXT_BYTES at build time
  - Make inclusion to expat_config.h consistent
  - Autotools: configure.ac: Support --disable-maintainer-mode
  - Autotools: Sync CMake templates with CMake 3.26
  - Autotools: Make installation of shipped man page doc/xmlwf.1
    independent of docbook2man availability
  - Autotools|CMake: Add missing -DXML_STATIC to pkg-config file
    section "Cflags.private" in order to fix compilation
    against static libexpat using pkg-config on Windows
  - Autotools|CMake: Require a C99 compiler
    (a de-facto requirement already since Expat 2.2.2 of 2017)
  - Autotools|CMake: Fix PACKAGE_BUGREPORT variable
  - Autotools|CMake: Make test suite require a C++11 compiler
  - CMake: Require CMake &gt;=3.5.0
  - CMake: Lowercase off_t and size_t to help a bug in Meson
  - CMake: Sort xmlwf sources alphabetically
  - CMake|Windows: Fix generation of DLL file version info
  - CMake: Build tests/benchmark/benchmark.c as well for
    a build with -DEXPAT_BUILD_TESTS=ON
  - docs: Document the importance of isFinal + adjust tests
    accordingly
  - docs: Improve use of "NULL" and "null"
  - docs: Be specific about version of XML (XML 1.0r4)
    and version of C (C99); (XML 1.0r5 will need a sponsor.)
  - docs: reference.html: Promote function XML_ParseBuffer more
  - docs: reference.html: Add HTML anchors to XML_* macros
  - docs: reference.html: Upgrade to OK.css 1.2.0
  - docs: Fix typos
  - docs|CI: Use HTTPS URLs instead of HTTP at various places
  - Address compiler warnings
  - Address clang-tidy warnings
  - Version info bumped from 9:10:8 (libexpat*.so.1.8.10)
    to 10:0:9 (libexpat*.so.1.9.0); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1708430400">- Fix handling of xmlwf.1 to avoid workarounds in specfile:
  * Added libxml2-fix-xmlwf.1-handling.patch
- Call buildconf.sh to avoid (future) issues with expat_config.h.in</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1709294400">- update to 2.6.1:
  * Expose billion laughs API with XML_DTD defined and XML_GE
    undefined, regression from 2.6.0
  * Make tests independent of CPU speed, and thus more robust
- drop libxml2-fix-xmlwf.1-handling.patch, upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1710331200">- update to 2.6.2:
  * CVE-2024-28757 -- Prevent billion laughs attacks with isolated
    use of external parsers (boo#1221289)
  * Reject direct parameter entity recursion and avoid the related
    undefined behavior</changelog>
  <changelog author="david.anes@suse.com" date="1725537600">- Update to 2.6.3:
  * Security fixes:
  - CVE-2024-45490, bsc#1229930 -- Calling function XML_ParseBuffer with
    len &lt; 0 without noticing and then calling XML_GetBuffer
    will have XML_ParseBuffer fail to recognize the problem
    and XML_GetBuffer corrupt memory.
    With the fix, XML_ParseBuffer now complains with error
    XML_ERROR_INVALID_ARGUMENT just like sibling XML_Parse
    has been doing since Expat 2.2.1, and now documented.
    Impact is denial of service to potentially artitrary code
    execution.
  - CVE-2024-45491, bsc#1229931 -- Internal function dtdCopy can have an
    integer overflow for nDefaultAtts on 32-bit platforms
    (where UINT_MAX equals SIZE_MAX).
    Impact is denial of service to potentially artitrary code
    execution.
  - CVE-2024-45492, bsc#1229932 -- Internal function nextScaffoldPart can
    have an integer overflow for m_groupSize on 32-bit
    platforms (where UINT_MAX equals SIZE_MAX).
    Impact is denial of service to potentially artitrary code
    execution.
  * Other changes:
  - Autotools: Sync CMake templates with CMake 3.28
  - Autotools: Always provide path to find(1) for portability
  - Autotools: Ensure that the m4 directory always exists.
  - Autotools: Simplify handling of SIZEOF_VOID_P
  - Autotools: Support non-GNU sed
  - Autotools|CMake: Fix main() to main(void)
  - Autotools|CMake: Fix compile tests for HAVE_SYSCALL_GETRANDOM
  - Autotools|CMake: Stop requiring dos2unix
  - CMake: Fix check for symbols size_t and off_t
  - docs|tests: Convert README to Markdown and update
  - Windows: Drop support for Visual Studio &lt;=15.0/2017
  - Drop needless XML_DTD guards around is_param access
  - Fix typo in a code comment
  - Version info bumped from 10:2:9 (libexpat*.so.1.9.2)
    to 10:3:9 (libexpat*.so.1.9.3); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1727352000">- updated keyring [https://build.suse.de/request/show/345282]
- modified sources
  % expat.keyring</changelog>
  <changelog author="pgajdos@suse.com" date="1730980800">- version update to 2.6.4
  * Security fixes: [bsc#1232601][bsc#1232579]
    [#915]  CVE-2024-50602 -- Fix crash within function XML_ResumeParser
    from a NULL pointer dereference by disallowing function
    XML_StopParser to (stop or) suspend an unstarted parser.
    A new error code XML_ERROR_NOT_STARTED was introduced to
    properly communicate this situation.  // CWE-476 CWE-754
  * Other changes:
    [#903]  CMake: Add alias target "expat::expat"
    [#905]  docs: Document use via CMake &gt;=3.18 with FetchContent
    and SOURCE_SUBDIR and its consequences
    [#902]  tests: Reduce use of global parser instance
    [#904]  tests: Resolve duplicate handler
  [#317] #918  tests: Improve tests on doctype closing (ex CVE-2019-15903)
    [#914]  Fix signedness of format strings
  [#919] #920  Version info bumped from 10:3:9 (libexpat*.so.1.9.3)
    to 11:0:10 (libexpat*.so.1.10.0); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1731412800">- no source changes, just adding jira reference: jsc#SLE-21253</changelog>
  <changelog author="pgajdos@suse.com" date="1741953600">- version update to 2.7.0 (CVE-2024-8176 [bsc#1239618])
  * Security fixes:
    [#893] #973  CVE-2024-8176 -- Fix crash from chaining a large number
    of entities caused by stack overflow by resolving use of
    recursion, for all three uses of entities:
  - general entities in character data ("&lt;e&gt;&amp;g1;&lt;/e&gt;")
  - general entities in attribute values ("&lt;e k1='&amp;g1;'/&gt;")
  - parameter entities ("%p1;")
    Known impact is (reliable and easy) denial of service:
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:H/RL:O/RC:C
    (Base Score: 7.5, Temporal Score: 7.2)
    Please note that a layer of compression around XML can
    significantly reduce the minimum attack payload size.
  * Other changes:
    [#935] #937  Autotools: Make generated CMake files look for
    libexpat.@SO_MAJOR@.dylib on macOS
    [#925]  Autotools: Sync CMake templates with CMake 3.29
  [#945] #962 #966  CMake: Drop support for CMake &lt;3.13
    [#942]  CMake: Small fuzzing related improvements
    [#921]  docs: Add missing documentation of error code
    XML_ERROR_NOT_STARTED that was introduced with 2.6.4
    [#941]  docs: Document need for C++11 compiler for use from C++
    [#959]  tests/benchmark: Fix a (harmless) TOCTTOU
    [#944]  Windows: Fix installer target location of file xmlwf.xml
    for CMake
    [#953]  Windows: Address warning -Wunknown-warning-option
    about -Wno-pedantic-ms-format from LLVM MinGW
    [#971]  Address Cppcheck warnings
    [#969] #970  Mass-migrate links from http:// to https://
    [#947] #958 ..
    [#974] #975  Document changes since the previous release
    [#974] #975  Version info bumped from 11:0:10 (libexpat*.so.1.10.0)
    to 11:1:10 (libexpat*.so.1.10.1); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1743076800">- version update to 2.7.0 for SLE-15-SP7 (jsc#PED-12507)</changelog>
  <changelog author="pgajdos@suse.com" date="1743163200">- version update to 2.7.1
    Bug fixes:
    [#980] #989  Restore event pointer behavior from Expat 2.6.4
    (that the fix to CVE-2024-8176 changed in 2.7.0);
    affected API functions are:
  - XML_GetCurrentByteCount
  - XML_GetCurrentByteIndex
  - XML_GetCurrentColumnNumber
  - XML_GetCurrentLineNumber
  - XML_GetInputContext
    Other changes:
    [#976] #977  Autotools: Integrate files "fuzz/xml_lpm_fuzzer.{cpp,proto}"
    with Automake that were missing from 2.7.0 release tarballs
    [#983] #984  Fix printf format specifiers for 32bit Emscripten
    [#992]  docs: Promote OpenSSF Best Practices self-certification
    [#978]  tests/benchmark: Resolve mistaken double close
    [#986]  Address compiler warnings
    [#990] #993  Version info bumped from 11:1:10 (libexpat*.so.1.10.1)
    to 11:2:10 (libexpat*.so.1.10.2); see https://verbump.de/
    for what these numbers do
    Infrastructure:
    [#982]  CI: Start running Perl XML::Parser integration tests
    [#987]  CI: Enforce Clang Static Analyzer clean code
    [#991]  CI: Re-enable warning clang-analyzer-valist.Uninitialized
    for clang-tidy
    [#981]  CI: Cover compilation with musl
    [#983] #984  CI: Cover compilation with 32bit Emscripten
    [#976] #977  CI: Protect against fuzzer files missing from future
    release archives</changelog>
  <changelog author="martin.schreiner@suse.com" date="1759147200">- Fix CVE-2025-59375 / bsc#1249584.
- Add patch file:
  * CVE-2025-59375.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770120000">- security update
- added patches
  CVE-2026-24515 [bsc#1257144], NULL dereference (CWE-476) due to function XML_ExternalEntityParserCreate() failing to copy the encoding handler data passed to XML_SetUnknownEncodingHandler() from the parent to the subparser
  * expat-CVE-2026-24515.patch
  CVE-2026-25210 [bsc#1257496], lack of buffer size check can lead to an integer overflow
  * expat-CVE-2026-25210.patch</changelog>
</package>
<package pkgid="59cc798ebd3a89bbef2b7aa526b013eec7d45c4ffeb0dcd9ff4473e90215dee0" name="libexpat1" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="150700.3.12.1"/>
  <changelog author="david.anes@suse.com" date="1645358400">- update to 2.4.6 (bsc#1196168, CVE-2022-25313):
  * Bug fixes:
  - Fix a regression introduced by the fix for CVE-2022-25313
    in release 2.4.5 that affects applications that (1)
    call function XML_SetElementDeclHandler and (2) are
    parsing XML that contains nested element declarations
    (e.g. "&lt;!ELEMENT junk ((bar|foo|xyz+), zebra*)&gt;").
  - Version info bumped from 9:5:8 to 9:6:8;
    see https://verbump.de/ for what these numbers do.</changelog>
  <changelog author="david.anes@suse.com" date="1646481600">- update to 2.4.7 (bsc#1196784, CVE-2022-25236):
  * Bug fixes:
  - Relax fix to CVE-2022-25236 (introduced with release 2.4.5)
    with regard to all valid URI characters (RFC 3986),
    i.e. the following set (excluding whitespace):
    ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz
    0123456789 % -._~ :/?#[]@ !$&amp;'()*+,;=
  * Other changes:
  - CMake|Windows: Store Expat version in the DLL
  - Document consequences of namespace separator choices not just
    in doc/reference.html but also in header &lt;expat.h&gt;
  - Document Expat's lack of validation of namespace URIs against
    RFC 3986, and that the XML 1.0r4 specification doesn't
    require Expat to validate namespace URIs, and that Expat
    may do more in that regard in future releases.
    If you find need for strict RFC 3986 URI validation on
    application level today, https://uriparser.github.io/ may
    be of interest.
  - Fix documentation of XML_EndDoctypeDeclHandler in &lt;expat.h&gt;
  - Document that a call to XML_FreeContentModel can be done at
    a later time from outside the element declaration handler
  - Make hardcoded namespace URIs easier to find in code
  - Update documentation on use of XML_POOR_ENTOPY on Solaris
  - tests: Resolve use of macros NAN and INFINITY for GNU G++
    4.8.2 on Solaris.
  - Version info bumped from 9:6:8 to 9:7:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1648555200">- update to 2.4.8:
  * Other changes:
  - pkg-config: Move "-lm" to section "Libs.private"
  - CMake|MSVC: Fix pkg-config section "Libs"
  - CMake|macOS: Start using linker arguments
    "-compatibility_version &lt;version&gt;" and
    "-current_version &lt;version&gt;" in a way compatible with GNU
    Libtool
  - Version info bumped from 9:7:8 to 9:8:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- update to 2.4.9: (bsc#1203438)
  * Security fixes:
  - CVE-2022-40674 -- Heap use-after-free vulnerability in
    function doContent. Expected impact is denial of service
    or potentially arbitrary code execution.
  * Bug fixes:
  - MinGW: Fix mis-compilation for -D__USE_MINGW_ANSI_STDIO=0
  - docs: Fix documentation on effect of switch XML_DTD on
    symbol visibility in doc/reference.html
  * Other changes:
  - MinGW: Make fix-xmltest-log.sh drop more Wine bug output
  - Autotools: Sync CMake templates with CMake 3.22
  - CMake: Migrate from use of CMAKE_*_POSTFIX to
    dedicated variables EXPAT_*_POSTFIX to stop affecting
    other projects
  - Windows|CMake: Add missing -DXML_STATIC to test runners
    and fuzzers
  - Windows|CMake: Render .def file from a template to fix
    linking with -DEXPAT_DTD=OFF and/or -DEXPAT_ATTR_INFO=ON
  - MinGW|CMake: Apply MSVC .def file when linking
  - MinGW|CMake: Sync library name with GNU Autotools,
    i.e. produce libexpat-1.dll rather than libexpat.dll
    by default.  Filename libexpat.dll.a is unaffected.
  - MinGW|CMake: Set missing variable CMAKE_RC_COMPILER in
    toolchain file "cmake/mingw-toolchain.cmake" to avoid
    error "windres: Command not found" on e.g. Ubuntu 20.04
  - CMake: Unify inconsistent use of set() and option() in
    context of public build time options to take need for
    set(.. FORCE) in projects using Expat by means of
    add_subdirectory(..) off Expat's users' shoulders
  - Stop exporting API symbols when building a static library
  - Resolve use of deprecated "fgrep" by "grep -F"
  - CMake: Make documentation on variables a bit more consistent
  - CMake: Drop leading whitespace from a #cmakedefine line in
    file expat_config.h.cmake
  - xmlwf: Fix harmless variable mix-up in function nsattcmp
  - Address Cppcheck warnings
  - Address Clang 15 compiler warnings
  - Version info bumped from 9:8:8 to 9:9:8;
    see https://verbump.de/ for what these numbers do
  * Infrastructure:
  - CI: Windows: Start covering MSVC 2022
  - CI: macOS: Migrate off deprecated macOS 10.15
  - CI: Linux: Make migration off deprecated Ubuntu 18.04 work
  - CI: Upgrade Clang from 14 to 15
  - apply-clang-format.sh: Add support for BSD find
  - coverage.sh: Exclude MinGW headers
  - coverage.sh: Fix name collision for -funsigned-char</changelog>
  <changelog author="david.anes@suse.com" date="1666785600">- Update to 2.5.0: (bsc#1204708)
  * Security fixes:
  - CVE-2022-43680 -- Fix heap use-after-free after overeager
    destruction of a shared DTD in function
    XML_ExternalEntityParserCreate in out-of-memory situations.
    Expected impact is denial of service or potentially arbitrary
    code execution.
  * Bug fixes:
  - Fix curruption from undefined entities
  - Fix case when parsing was suspended while processing nested
    entities
  - Stop leaking opening tag bindings after a closing tag mismatch
    error where a parser is reset through XML_ParserReset and then
    reused to parse
  - CMake: Fix generation of pkg-config file
  - MinGW|CMake: Fix static library name
  * Other changes:
  - Protect header expat_config.h from multiple inclusion
  - examples: Make use of XML_GetBuffer and be more consistent
    across examples
  - Address compiler warnings
  - Version info bumped from 9:9:8 to 9:10:8; see
    https://verbump.de/ for what these numbers do</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1670760000">- add upstream signing key and validate source signature</changelog>
  <changelog author="david.anes@suse.com" date="1707739200">- Update keyring automatically from keyserver during OBS service run.
- Explicitly use --without-docbook (before it was implicit).
- Include missing files for documentation and examples.
- Add manpage for xmlwf, which is now available in the released tarball.
- Clean the spec file a bit.
- Update to 2.6.0:
  * Security fixes:
  - CVE-2023-52425 (boo#1219559)
  - - Fix quadratic runtime issues with big tokens
    that can cause denial of service, in partial where
    dealing with compressed XML input.  Applications
    that parsed a document in one go -- a single call to
    functions XML_Parse or XML_ParseBuffer -- were not affected.
    The smaller the chunks/buffers you use for parsing
    previously, the bigger the problem prior to the fix.
    Backporters should be careful to no omit parts of
    pull request #789 and to include earlier pull request #771,
    in order to not break the fix.
  - CVE-2023-52426 (boo#1219561)
  - - Fix billion laughs attacks for users
    compiling *without* XML_DTD defined (which is not common).
    Users with XML_DTD defined have been protected since
    Expat &gt;=2.4.0 (and that was CVE-2013-0340 back then).
  * Bug fixes:
  - Fix parse-size-dependent "invalid token" error for
    external entities that start with a byte order mark
  - Fix NULL pointer dereference in setContext via
    XML_ExternalEntityParserCreate for compilation with
    XML_DTD undefined
  - Protect against closing entities out of order
  * Other changes:
  - Improve support for arc4random/arc4random_buf
  - Improve buffer growth in XML_GetBuffer and XML_Parse
  - xmlwf: Support --help and --version
  - xmlwf: Support custom buffer size for XML_GetBuffer and read
  - xmlwf: Improve language and URL clickability in help output
  - examples: Add new example "element_declarations.c"
  - Be stricter about macro XML_CONTEXT_BYTES at build time
  - Make inclusion to expat_config.h consistent
  - Autotools: configure.ac: Support --disable-maintainer-mode
  - Autotools: Sync CMake templates with CMake 3.26
  - Autotools: Make installation of shipped man page doc/xmlwf.1
    independent of docbook2man availability
  - Autotools|CMake: Add missing -DXML_STATIC to pkg-config file
    section "Cflags.private" in order to fix compilation
    against static libexpat using pkg-config on Windows
  - Autotools|CMake: Require a C99 compiler
    (a de-facto requirement already since Expat 2.2.2 of 2017)
  - Autotools|CMake: Fix PACKAGE_BUGREPORT variable
  - Autotools|CMake: Make test suite require a C++11 compiler
  - CMake: Require CMake &gt;=3.5.0
  - CMake: Lowercase off_t and size_t to help a bug in Meson
  - CMake: Sort xmlwf sources alphabetically
  - CMake|Windows: Fix generation of DLL file version info
  - CMake: Build tests/benchmark/benchmark.c as well for
    a build with -DEXPAT_BUILD_TESTS=ON
  - docs: Document the importance of isFinal + adjust tests
    accordingly
  - docs: Improve use of "NULL" and "null"
  - docs: Be specific about version of XML (XML 1.0r4)
    and version of C (C99); (XML 1.0r5 will need a sponsor.)
  - docs: reference.html: Promote function XML_ParseBuffer more
  - docs: reference.html: Add HTML anchors to XML_* macros
  - docs: reference.html: Upgrade to OK.css 1.2.0
  - docs: Fix typos
  - docs|CI: Use HTTPS URLs instead of HTTP at various places
  - Address compiler warnings
  - Address clang-tidy warnings
  - Version info bumped from 9:10:8 (libexpat*.so.1.8.10)
    to 10:0:9 (libexpat*.so.1.9.0); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1708430400">- Fix handling of xmlwf.1 to avoid workarounds in specfile:
  * Added libxml2-fix-xmlwf.1-handling.patch
- Call buildconf.sh to avoid (future) issues with expat_config.h.in</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1709294400">- update to 2.6.1:
  * Expose billion laughs API with XML_DTD defined and XML_GE
    undefined, regression from 2.6.0
  * Make tests independent of CPU speed, and thus more robust
- drop libxml2-fix-xmlwf.1-handling.patch, upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1710331200">- update to 2.6.2:
  * CVE-2024-28757 -- Prevent billion laughs attacks with isolated
    use of external parsers (boo#1221289)
  * Reject direct parameter entity recursion and avoid the related
    undefined behavior</changelog>
  <changelog author="david.anes@suse.com" date="1725537600">- Update to 2.6.3:
  * Security fixes:
  - CVE-2024-45490, bsc#1229930 -- Calling function XML_ParseBuffer with
    len &lt; 0 without noticing and then calling XML_GetBuffer
    will have XML_ParseBuffer fail to recognize the problem
    and XML_GetBuffer corrupt memory.
    With the fix, XML_ParseBuffer now complains with error
    XML_ERROR_INVALID_ARGUMENT just like sibling XML_Parse
    has been doing since Expat 2.2.1, and now documented.
    Impact is denial of service to potentially artitrary code
    execution.
  - CVE-2024-45491, bsc#1229931 -- Internal function dtdCopy can have an
    integer overflow for nDefaultAtts on 32-bit platforms
    (where UINT_MAX equals SIZE_MAX).
    Impact is denial of service to potentially artitrary code
    execution.
  - CVE-2024-45492, bsc#1229932 -- Internal function nextScaffoldPart can
    have an integer overflow for m_groupSize on 32-bit
    platforms (where UINT_MAX equals SIZE_MAX).
    Impact is denial of service to potentially artitrary code
    execution.
  * Other changes:
  - Autotools: Sync CMake templates with CMake 3.28
  - Autotools: Always provide path to find(1) for portability
  - Autotools: Ensure that the m4 directory always exists.
  - Autotools: Simplify handling of SIZEOF_VOID_P
  - Autotools: Support non-GNU sed
  - Autotools|CMake: Fix main() to main(void)
  - Autotools|CMake: Fix compile tests for HAVE_SYSCALL_GETRANDOM
  - Autotools|CMake: Stop requiring dos2unix
  - CMake: Fix check for symbols size_t and off_t
  - docs|tests: Convert README to Markdown and update
  - Windows: Drop support for Visual Studio &lt;=15.0/2017
  - Drop needless XML_DTD guards around is_param access
  - Fix typo in a code comment
  - Version info bumped from 10:2:9 (libexpat*.so.1.9.2)
    to 10:3:9 (libexpat*.so.1.9.3); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1727352000">- updated keyring [https://build.suse.de/request/show/345282]
- modified sources
  % expat.keyring</changelog>
  <changelog author="pgajdos@suse.com" date="1730980800">- version update to 2.6.4
  * Security fixes: [bsc#1232601][bsc#1232579]
    [#915]  CVE-2024-50602 -- Fix crash within function XML_ResumeParser
    from a NULL pointer dereference by disallowing function
    XML_StopParser to (stop or) suspend an unstarted parser.
    A new error code XML_ERROR_NOT_STARTED was introduced to
    properly communicate this situation.  // CWE-476 CWE-754
  * Other changes:
    [#903]  CMake: Add alias target "expat::expat"
    [#905]  docs: Document use via CMake &gt;=3.18 with FetchContent
    and SOURCE_SUBDIR and its consequences
    [#902]  tests: Reduce use of global parser instance
    [#904]  tests: Resolve duplicate handler
  [#317] #918  tests: Improve tests on doctype closing (ex CVE-2019-15903)
    [#914]  Fix signedness of format strings
  [#919] #920  Version info bumped from 10:3:9 (libexpat*.so.1.9.3)
    to 11:0:10 (libexpat*.so.1.10.0); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1731412800">- no source changes, just adding jira reference: jsc#SLE-21253</changelog>
  <changelog author="pgajdos@suse.com" date="1741953600">- version update to 2.7.0 (CVE-2024-8176 [bsc#1239618])
  * Security fixes:
    [#893] #973  CVE-2024-8176 -- Fix crash from chaining a large number
    of entities caused by stack overflow by resolving use of
    recursion, for all three uses of entities:
  - general entities in character data ("&lt;e&gt;&amp;g1;&lt;/e&gt;")
  - general entities in attribute values ("&lt;e k1='&amp;g1;'/&gt;")
  - parameter entities ("%p1;")
    Known impact is (reliable and easy) denial of service:
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:H/RL:O/RC:C
    (Base Score: 7.5, Temporal Score: 7.2)
    Please note that a layer of compression around XML can
    significantly reduce the minimum attack payload size.
  * Other changes:
    [#935] #937  Autotools: Make generated CMake files look for
    libexpat.@SO_MAJOR@.dylib on macOS
    [#925]  Autotools: Sync CMake templates with CMake 3.29
  [#945] #962 #966  CMake: Drop support for CMake &lt;3.13
    [#942]  CMake: Small fuzzing related improvements
    [#921]  docs: Add missing documentation of error code
    XML_ERROR_NOT_STARTED that was introduced with 2.6.4
    [#941]  docs: Document need for C++11 compiler for use from C++
    [#959]  tests/benchmark: Fix a (harmless) TOCTTOU
    [#944]  Windows: Fix installer target location of file xmlwf.xml
    for CMake
    [#953]  Windows: Address warning -Wunknown-warning-option
    about -Wno-pedantic-ms-format from LLVM MinGW
    [#971]  Address Cppcheck warnings
    [#969] #970  Mass-migrate links from http:// to https://
    [#947] #958 ..
    [#974] #975  Document changes since the previous release
    [#974] #975  Version info bumped from 11:0:10 (libexpat*.so.1.10.0)
    to 11:1:10 (libexpat*.so.1.10.1); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1743076800">- version update to 2.7.0 for SLE-15-SP7 (jsc#PED-12507)</changelog>
  <changelog author="pgajdos@suse.com" date="1743163200">- version update to 2.7.1
    Bug fixes:
    [#980] #989  Restore event pointer behavior from Expat 2.6.4
    (that the fix to CVE-2024-8176 changed in 2.7.0);
    affected API functions are:
  - XML_GetCurrentByteCount
  - XML_GetCurrentByteIndex
  - XML_GetCurrentColumnNumber
  - XML_GetCurrentLineNumber
  - XML_GetInputContext
    Other changes:
    [#976] #977  Autotools: Integrate files "fuzz/xml_lpm_fuzzer.{cpp,proto}"
    with Automake that were missing from 2.7.0 release tarballs
    [#983] #984  Fix printf format specifiers for 32bit Emscripten
    [#992]  docs: Promote OpenSSF Best Practices self-certification
    [#978]  tests/benchmark: Resolve mistaken double close
    [#986]  Address compiler warnings
    [#990] #993  Version info bumped from 11:1:10 (libexpat*.so.1.10.1)
    to 11:2:10 (libexpat*.so.1.10.2); see https://verbump.de/
    for what these numbers do
    Infrastructure:
    [#982]  CI: Start running Perl XML::Parser integration tests
    [#987]  CI: Enforce Clang Static Analyzer clean code
    [#991]  CI: Re-enable warning clang-analyzer-valist.Uninitialized
    for clang-tidy
    [#981]  CI: Cover compilation with musl
    [#983] #984  CI: Cover compilation with 32bit Emscripten
    [#976] #977  CI: Protect against fuzzer files missing from future
    release archives</changelog>
  <changelog author="martin.schreiner@suse.com" date="1759147200">- Fix CVE-2025-59375 / bsc#1249584.
- Add patch file:
  * CVE-2025-59375.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770120000">- security update
- added patches
  CVE-2026-24515 [bsc#1257144], NULL dereference (CWE-476) due to function XML_ExternalEntityParserCreate() failing to copy the encoding handler data passed to XML_SetUnknownEncodingHandler() from the parent to the subparser
  * expat-CVE-2026-24515.patch
  CVE-2026-25210 [bsc#1257496], lack of buffer size check can lead to an integer overflow
  * expat-CVE-2026-25210.patch</changelog>
  <changelog author="david.anes@suse.com" date="1774526400">- security update:
  * CVE-2026-32776: expat: libexpat: NULL pointer dereference when
    processing empty external parameter entities inside an entity
    declaration value (bsc#1259726)
  - Added patch expat-CVE-2026-32776.patch
  * CVE-2026-32777: expat: libexpat: denial of service due to
    infinite loop in DTD content parsing (bsc#1259711)
  - Added patch expat-CVE-2026-32777.patch
  * CVE-2026-32778: expat: libexpat: NULL pointer dereference in
    `setContext` on retry after an out-of-memory condition (bsc#1259729)
  - Added patch expat-CVE-2026-32778.patch</changelog>
</package>
<package pkgid="3354ec33c14b51c5c1581cbe32736ca8c47d2fecdafbebbbaa67e3bd579ec291" name="libexpat1" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="150700.3.3.1"/>
  <changelog author="dmueller@suse.com" date="1642420800">- update to 2.4.3 (bsc#1194251, bsc#1194362, bsc#1194474,
    bsc#1194476, bsc#1194477, bsc#1194478, bsc#1194479, bsc#1194480):
  * CVE-2021-45960 -- Fix issues with left shifts by &gt;=29 places
    resulting in
    a) realloc acting as free
    b) realloc allocating too few bytes
    c) undefined behavior
    depending on architecture and precise value
    for XML documents with &gt;=2^27+1 prefixed attributes
    on a single XML tag a la
    "&lt;r xmlns:a='[..]' a:a123='[..]' [..] /&gt;"
    where XML_ParserCreateNS is used to create the parser
    (which needs argument "-n" when running xmlwf).
    Impact is denial of service, or more.
  * CVE-2021-46143 (ZDI-CAN-16157) -- Fix integer overflow
    on variable m_groupSize in function doProlog leading
    to realloc acting as free.
    Impact is denial of service or more.
  * CVE-2022-22822 to CVE-2022-22827 -- Prevent integer overflows
    near memory allocation at multiple places.  Mitre assigned
    a dedicated CVE for each involved internal C function:
  - CVE-2022-22822 for function addBinding
  - CVE-2022-22823 for function build_model
  - CVE-2022-22824 for function defineAttribute
  - CVE-2022-22825 for function lookup
  - CVE-2022-22826 for function nextScaffoldPart
  - CVE-2022-22827 for function storeAtts
    Impact is denial of service or more.</changelog>
  <changelog author="david.anes@suse.com" date="1643630400">- update to 2.4.4 (bsc#1195217, bsc#1195054):
  * Security fixes:
  - CVE-2022-23852 -- Fix signed integer overflow
    (undefined behavior) in function XML_GetBuffer
    that is also called by function XML_Parse internally)
    for when XML_CONTEXT_BYTES is defined to &gt;0 (which is both
    common and default).
    Impact is denial of service or more.
  - CVE-2022-23990 -- Fix unsigned integer overflow in function
    doProlog triggered by large content in element type
    declarations when there is an element declaration handler
    present (from a prior call to XML_SetElementDeclHandler).
    Impact is denial of service or more.
  * Bug fixes:
  - xmlwf: Fix a memory leak on output file opening error
  * Other changes:
  - Version info bumped from 9:3:8 to 9:4:8;
    see https://verbump.de/ for what these numbers do
  * Drop unused file valid-xhtml10.png</changelog>
  <changelog author="david.anes@suse.com" date="1645272000">- update to 2.4.5 (bsc#1196171, bsc#1196169, bsc#1196168,
  bsc#1196026, bsc#1196025):
  * Security fixes:
  - CVE-2022-25235 -- Passing malformed 2- and 3-byte UTF-8
    sequences (e.g. from start tag names) to the XML
    processing application on top of Expat can cause
    arbitrary damage (e.g. code execution) depending
    on how invalid UTF-8 is handled inside the XML
    processor; validation was not their job but Expat's.
    Exploits with code execution are known to exist.
  - CVE-2022-25236 -- Passing (one or more) namespace separator
    characters in "xmlns[:prefix]" attribute values
    made Expat send malformed tag names to the XML
    processor on top of Expat which can cause
    arbitrary damage (e.g. code execution) depending
    on such unexpectable cases are handled inside the XML
    processor; validation was not their job but Expat's.
    Exploits with code execution are known to exist.
  - CVE-2022-25313 -- Fix stack exhaustion in doctype parsing
    that could be triggered by e.g. a 2 megabytes
    file with a large number of opening braces.
    Expected impact is denial of service or potentially
    arbitrary code execution.
  - CVE-2022-25314 -- Fix integer overflow in function copyString;
    only affects the encoding name parameter at parser creation
    time which is often hardcoded (rather than user input),
    takes a value in the gigabytes to trigger, and a 64-bit
    machine.  Expected impact is denial of service.
  - CVE-2022-25315 -- Fix integer overflow in function storeRawNames;
    needs input in the gigabytes and a 64-bit machine.
    Expected impact is denial of service or potentially
    arbitrary code execution.
  * Other changes:
  - Version info bumped from 9:4:8 to 9:5:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1645358400">- update to 2.4.6 (bsc#1196168, CVE-2022-25313):
  * Bug fixes:
  - Fix a regression introduced by the fix for CVE-2022-25313
    in release 2.4.5 that affects applications that (1)
    call function XML_SetElementDeclHandler and (2) are
    parsing XML that contains nested element declarations
    (e.g. "&lt;!ELEMENT junk ((bar|foo|xyz+), zebra*)&gt;").
  - Version info bumped from 9:5:8 to 9:6:8;
    see https://verbump.de/ for what these numbers do.</changelog>
  <changelog author="david.anes@suse.com" date="1646481600">- update to 2.4.7 (bsc#1196784, CVE-2022-25236):
  * Bug fixes:
  - Relax fix to CVE-2022-25236 (introduced with release 2.4.5)
    with regard to all valid URI characters (RFC 3986),
    i.e. the following set (excluding whitespace):
    ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz
    0123456789 % -._~ :/?#[]@ !$&amp;'()*+,;=
  * Other changes:
  - CMake|Windows: Store Expat version in the DLL
  - Document consequences of namespace separator choices not just
    in doc/reference.html but also in header &lt;expat.h&gt;
  - Document Expat's lack of validation of namespace URIs against
    RFC 3986, and that the XML 1.0r4 specification doesn't
    require Expat to validate namespace URIs, and that Expat
    may do more in that regard in future releases.
    If you find need for strict RFC 3986 URI validation on
    application level today, https://uriparser.github.io/ may
    be of interest.
  - Fix documentation of XML_EndDoctypeDeclHandler in &lt;expat.h&gt;
  - Document that a call to XML_FreeContentModel can be done at
    a later time from outside the element declaration handler
  - Make hardcoded namespace URIs easier to find in code
  - Update documentation on use of XML_POOR_ENTOPY on Solaris
  - tests: Resolve use of macros NAN and INFINITY for GNU G++
    4.8.2 on Solaris.
  - Version info bumped from 9:6:8 to 9:7:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1648555200">- update to 2.4.8:
  * Other changes:
  - pkg-config: Move "-lm" to section "Libs.private"
  - CMake|MSVC: Fix pkg-config section "Libs"
  - CMake|macOS: Start using linker arguments
    "-compatibility_version &lt;version&gt;" and
    "-current_version &lt;version&gt;" in a way compatible with GNU
    Libtool
  - Version info bumped from 9:7:8 to 9:8:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- update to 2.4.9: (bsc#1203438)
  * Security fixes:
  - CVE-2022-40674 -- Heap use-after-free vulnerability in
    function doContent. Expected impact is denial of service
    or potentially arbitrary code execution.
  * Bug fixes:
  - MinGW: Fix mis-compilation for -D__USE_MINGW_ANSI_STDIO=0
  - docs: Fix documentation on effect of switch XML_DTD on
    symbol visibility in doc/reference.html
  * Other changes:
  - MinGW: Make fix-xmltest-log.sh drop more Wine bug output
  - Autotools: Sync CMake templates with CMake 3.22
  - CMake: Migrate from use of CMAKE_*_POSTFIX to
    dedicated variables EXPAT_*_POSTFIX to stop affecting
    other projects
  - Windows|CMake: Add missing -DXML_STATIC to test runners
    and fuzzers
  - Windows|CMake: Render .def file from a template to fix
    linking with -DEXPAT_DTD=OFF and/or -DEXPAT_ATTR_INFO=ON
  - MinGW|CMake: Apply MSVC .def file when linking
  - MinGW|CMake: Sync library name with GNU Autotools,
    i.e. produce libexpat-1.dll rather than libexpat.dll
    by default.  Filename libexpat.dll.a is unaffected.
  - MinGW|CMake: Set missing variable CMAKE_RC_COMPILER in
    toolchain file "cmake/mingw-toolchain.cmake" to avoid
    error "windres: Command not found" on e.g. Ubuntu 20.04
  - CMake: Unify inconsistent use of set() and option() in
    context of public build time options to take need for
    set(.. FORCE) in projects using Expat by means of
    add_subdirectory(..) off Expat's users' shoulders
  - Stop exporting API symbols when building a static library
  - Resolve use of deprecated "fgrep" by "grep -F"
  - CMake: Make documentation on variables a bit more consistent
  - CMake: Drop leading whitespace from a #cmakedefine line in
    file expat_config.h.cmake
  - xmlwf: Fix harmless variable mix-up in function nsattcmp
  - Address Cppcheck warnings
  - Address Clang 15 compiler warnings
  - Version info bumped from 9:8:8 to 9:9:8;
    see https://verbump.de/ for what these numbers do
  * Infrastructure:
  - CI: Windows: Start covering MSVC 2022
  - CI: macOS: Migrate off deprecated macOS 10.15
  - CI: Linux: Make migration off deprecated Ubuntu 18.04 work
  - CI: Upgrade Clang from 14 to 15
  - apply-clang-format.sh: Add support for BSD find
  - coverage.sh: Exclude MinGW headers
  - coverage.sh: Fix name collision for -funsigned-char</changelog>
  <changelog author="david.anes@suse.com" date="1666785600">- Update to 2.5.0: (bsc#1204708)
  * Security fixes:
  - CVE-2022-43680 -- Fix heap use-after-free after overeager
    destruction of a shared DTD in function
    XML_ExternalEntityParserCreate in out-of-memory situations.
    Expected impact is denial of service or potentially arbitrary
    code execution.
  * Bug fixes:
  - Fix curruption from undefined entities
  - Fix case when parsing was suspended while processing nested
    entities
  - Stop leaking opening tag bindings after a closing tag mismatch
    error where a parser is reset through XML_ParserReset and then
    reused to parse
  - CMake: Fix generation of pkg-config file
  - MinGW|CMake: Fix static library name
  * Other changes:
  - Protect header expat_config.h from multiple inclusion
  - examples: Make use of XML_GetBuffer and be more consistent
    across examples
  - Address compiler warnings
  - Version info bumped from 9:9:8 to 9:10:8; see
    https://verbump.de/ for what these numbers do</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1670760000">- add upstream signing key and validate source signature</changelog>
  <changelog author="david.anes@suse.com" date="1707739200">- Update keyring automatically from keyserver during OBS service run.
- Explicitly use --without-docbook (before it was implicit).
- Include missing files for documentation and examples.
- Add manpage for xmlwf, which is now available in the released tarball.
- Clean the spec file a bit.
- Update to 2.6.0:
  * Security fixes:
  - CVE-2023-52425 (boo#1219559)
  - - Fix quadratic runtime issues with big tokens
    that can cause denial of service, in partial where
    dealing with compressed XML input.  Applications
    that parsed a document in one go -- a single call to
    functions XML_Parse or XML_ParseBuffer -- were not affected.
    The smaller the chunks/buffers you use for parsing
    previously, the bigger the problem prior to the fix.
    Backporters should be careful to no omit parts of
    pull request #789 and to include earlier pull request #771,
    in order to not break the fix.
  - CVE-2023-52426 (boo#1219561)
  - - Fix billion laughs attacks for users
    compiling *without* XML_DTD defined (which is not common).
    Users with XML_DTD defined have been protected since
    Expat &gt;=2.4.0 (and that was CVE-2013-0340 back then).
  * Bug fixes:
  - Fix parse-size-dependent "invalid token" error for
    external entities that start with a byte order mark
  - Fix NULL pointer dereference in setContext via
    XML_ExternalEntityParserCreate for compilation with
    XML_DTD undefined
  - Protect against closing entities out of order
  * Other changes:
  - Improve support for arc4random/arc4random_buf
  - Improve buffer growth in XML_GetBuffer and XML_Parse
  - xmlwf: Support --help and --version
  - xmlwf: Support custom buffer size for XML_GetBuffer and read
  - xmlwf: Improve language and URL clickability in help output
  - examples: Add new example "element_declarations.c"
  - Be stricter about macro XML_CONTEXT_BYTES at build time
  - Make inclusion to expat_config.h consistent
  - Autotools: configure.ac: Support --disable-maintainer-mode
  - Autotools: Sync CMake templates with CMake 3.26
  - Autotools: Make installation of shipped man page doc/xmlwf.1
    independent of docbook2man availability
  - Autotools|CMake: Add missing -DXML_STATIC to pkg-config file
    section "Cflags.private" in order to fix compilation
    against static libexpat using pkg-config on Windows
  - Autotools|CMake: Require a C99 compiler
    (a de-facto requirement already since Expat 2.2.2 of 2017)
  - Autotools|CMake: Fix PACKAGE_BUGREPORT variable
  - Autotools|CMake: Make test suite require a C++11 compiler
  - CMake: Require CMake &gt;=3.5.0
  - CMake: Lowercase off_t and size_t to help a bug in Meson
  - CMake: Sort xmlwf sources alphabetically
  - CMake|Windows: Fix generation of DLL file version info
  - CMake: Build tests/benchmark/benchmark.c as well for
    a build with -DEXPAT_BUILD_TESTS=ON
  - docs: Document the importance of isFinal + adjust tests
    accordingly
  - docs: Improve use of "NULL" and "null"
  - docs: Be specific about version of XML (XML 1.0r4)
    and version of C (C99); (XML 1.0r5 will need a sponsor.)
  - docs: reference.html: Promote function XML_ParseBuffer more
  - docs: reference.html: Add HTML anchors to XML_* macros
  - docs: reference.html: Upgrade to OK.css 1.2.0
  - docs: Fix typos
  - docs|CI: Use HTTPS URLs instead of HTTP at various places
  - Address compiler warnings
  - Address clang-tidy warnings
  - Version info bumped from 9:10:8 (libexpat*.so.1.8.10)
    to 10:0:9 (libexpat*.so.1.9.0); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1708430400">- Fix handling of xmlwf.1 to avoid workarounds in specfile:
  * Added libxml2-fix-xmlwf.1-handling.patch
- Call buildconf.sh to avoid (future) issues with expat_config.h.in</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1709294400">- update to 2.6.1:
  * Expose billion laughs API with XML_DTD defined and XML_GE
    undefined, regression from 2.6.0
  * Make tests independent of CPU speed, and thus more robust
- drop libxml2-fix-xmlwf.1-handling.patch, upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1710331200">- update to 2.6.2:
  * CVE-2024-28757 -- Prevent billion laughs attacks with isolated
    use of external parsers (boo#1221289)
  * Reject direct parameter entity recursion and avoid the related
    undefined behavior</changelog>
  <changelog author="david.anes@suse.com" date="1725537600">- Update to 2.6.3:
  * Security fixes:
  - CVE-2024-45490, bsc#1229930 -- Calling function XML_ParseBuffer with
    len &lt; 0 without noticing and then calling XML_GetBuffer
    will have XML_ParseBuffer fail to recognize the problem
    and XML_GetBuffer corrupt memory.
    With the fix, XML_ParseBuffer now complains with error
    XML_ERROR_INVALID_ARGUMENT just like sibling XML_Parse
    has been doing since Expat 2.2.1, and now documented.
    Impact is denial of service to potentially artitrary code
    execution.
  - CVE-2024-45491, bsc#1229931 -- Internal function dtdCopy can have an
    integer overflow for nDefaultAtts on 32-bit platforms
    (where UINT_MAX equals SIZE_MAX).
    Impact is denial of service to potentially artitrary code
    execution.
  - CVE-2024-45492, bsc#1229932 -- Internal function nextScaffoldPart can
    have an integer overflow for m_groupSize on 32-bit
    platforms (where UINT_MAX equals SIZE_MAX).
    Impact is denial of service to potentially artitrary code
    execution.
  * Other changes:
  - Autotools: Sync CMake templates with CMake 3.28
  - Autotools: Always provide path to find(1) for portability
  - Autotools: Ensure that the m4 directory always exists.
  - Autotools: Simplify handling of SIZEOF_VOID_P
  - Autotools: Support non-GNU sed
  - Autotools|CMake: Fix main() to main(void)
  - Autotools|CMake: Fix compile tests for HAVE_SYSCALL_GETRANDOM
  - Autotools|CMake: Stop requiring dos2unix
  - CMake: Fix check for symbols size_t and off_t
  - docs|tests: Convert README to Markdown and update
  - Windows: Drop support for Visual Studio &lt;=15.0/2017
  - Drop needless XML_DTD guards around is_param access
  - Fix typo in a code comment
  - Version info bumped from 10:2:9 (libexpat*.so.1.9.2)
    to 10:3:9 (libexpat*.so.1.9.3); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1727352000">- updated keyring [https://build.suse.de/request/show/345282]
- modified sources
  % expat.keyring</changelog>
  <changelog author="pgajdos@suse.com" date="1730980800">- version update to 2.6.4
  * Security fixes: [bsc#1232601][bsc#1232579]
    [#915]  CVE-2024-50602 -- Fix crash within function XML_ResumeParser
    from a NULL pointer dereference by disallowing function
    XML_StopParser to (stop or) suspend an unstarted parser.
    A new error code XML_ERROR_NOT_STARTED was introduced to
    properly communicate this situation.  // CWE-476 CWE-754
  * Other changes:
    [#903]  CMake: Add alias target "expat::expat"
    [#905]  docs: Document use via CMake &gt;=3.18 with FetchContent
    and SOURCE_SUBDIR and its consequences
    [#902]  tests: Reduce use of global parser instance
    [#904]  tests: Resolve duplicate handler
  [#317] #918  tests: Improve tests on doctype closing (ex CVE-2019-15903)
    [#914]  Fix signedness of format strings
  [#919] #920  Version info bumped from 10:3:9 (libexpat*.so.1.9.3)
    to 11:0:10 (libexpat*.so.1.10.0); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1731412800">- no source changes, just adding jira reference: jsc#SLE-21253</changelog>
  <changelog author="pgajdos@suse.com" date="1741953600">- version update to 2.7.0 (CVE-2024-8176 [bsc#1239618])
  * Security fixes:
    [#893] #973  CVE-2024-8176 -- Fix crash from chaining a large number
    of entities caused by stack overflow by resolving use of
    recursion, for all three uses of entities:
  - general entities in character data ("&lt;e&gt;&amp;g1;&lt;/e&gt;")
  - general entities in attribute values ("&lt;e k1='&amp;g1;'/&gt;")
  - parameter entities ("%p1;")
    Known impact is (reliable and easy) denial of service:
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:H/RL:O/RC:C
    (Base Score: 7.5, Temporal Score: 7.2)
    Please note that a layer of compression around XML can
    significantly reduce the minimum attack payload size.
  * Other changes:
    [#935] #937  Autotools: Make generated CMake files look for
    libexpat.@SO_MAJOR@.dylib on macOS
    [#925]  Autotools: Sync CMake templates with CMake 3.29
  [#945] #962 #966  CMake: Drop support for CMake &lt;3.13
    [#942]  CMake: Small fuzzing related improvements
    [#921]  docs: Add missing documentation of error code
    XML_ERROR_NOT_STARTED that was introduced with 2.6.4
    [#941]  docs: Document need for C++11 compiler for use from C++
    [#959]  tests/benchmark: Fix a (harmless) TOCTTOU
    [#944]  Windows: Fix installer target location of file xmlwf.xml
    for CMake
    [#953]  Windows: Address warning -Wunknown-warning-option
    about -Wno-pedantic-ms-format from LLVM MinGW
    [#971]  Address Cppcheck warnings
    [#969] #970  Mass-migrate links from http:// to https://
    [#947] #958 ..
    [#974] #975  Document changes since the previous release
    [#974] #975  Version info bumped from 11:0:10 (libexpat*.so.1.10.0)
    to 11:1:10 (libexpat*.so.1.10.1); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1743076800">- version update to 2.7.0 for SLE-15-SP7 (jsc#PED-12507)</changelog>
  <changelog author="pgajdos@suse.com" date="1743163200">- version update to 2.7.1
    Bug fixes:
    [#980] #989  Restore event pointer behavior from Expat 2.6.4
    (that the fix to CVE-2024-8176 changed in 2.7.0);
    affected API functions are:
  - XML_GetCurrentByteCount
  - XML_GetCurrentByteIndex
  - XML_GetCurrentColumnNumber
  - XML_GetCurrentLineNumber
  - XML_GetInputContext
    Other changes:
    [#976] #977  Autotools: Integrate files "fuzz/xml_lpm_fuzzer.{cpp,proto}"
    with Automake that were missing from 2.7.0 release tarballs
    [#983] #984  Fix printf format specifiers for 32bit Emscripten
    [#992]  docs: Promote OpenSSF Best Practices self-certification
    [#978]  tests/benchmark: Resolve mistaken double close
    [#986]  Address compiler warnings
    [#990] #993  Version info bumped from 11:1:10 (libexpat*.so.1.10.1)
    to 11:2:10 (libexpat*.so.1.10.2); see https://verbump.de/
    for what these numbers do
    Infrastructure:
    [#982]  CI: Start running Perl XML::Parser integration tests
    [#987]  CI: Enforce Clang Static Analyzer clean code
    [#991]  CI: Re-enable warning clang-analyzer-valist.Uninitialized
    for clang-tidy
    [#981]  CI: Cover compilation with musl
    [#983] #984  CI: Cover compilation with 32bit Emscripten
    [#976] #977  CI: Protect against fuzzer files missing from future
    release archives</changelog>
</package>
<package pkgid="e117679b3dee2a7e92c578f5f44fcbb3fd99ca4ae9b24c328cf0c6d0937f968e" name="libexpat1" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="150700.3.6.1"/>
  <changelog author="david.anes@suse.com" date="1643630400">- update to 2.4.4 (bsc#1195217, bsc#1195054):
  * Security fixes:
  - CVE-2022-23852 -- Fix signed integer overflow
    (undefined behavior) in function XML_GetBuffer
    that is also called by function XML_Parse internally)
    for when XML_CONTEXT_BYTES is defined to &gt;0 (which is both
    common and default).
    Impact is denial of service or more.
  - CVE-2022-23990 -- Fix unsigned integer overflow in function
    doProlog triggered by large content in element type
    declarations when there is an element declaration handler
    present (from a prior call to XML_SetElementDeclHandler).
    Impact is denial of service or more.
  * Bug fixes:
  - xmlwf: Fix a memory leak on output file opening error
  * Other changes:
  - Version info bumped from 9:3:8 to 9:4:8;
    see https://verbump.de/ for what these numbers do
  * Drop unused file valid-xhtml10.png</changelog>
  <changelog author="david.anes@suse.com" date="1645272000">- update to 2.4.5 (bsc#1196171, bsc#1196169, bsc#1196168,
  bsc#1196026, bsc#1196025):
  * Security fixes:
  - CVE-2022-25235 -- Passing malformed 2- and 3-byte UTF-8
    sequences (e.g. from start tag names) to the XML
    processing application on top of Expat can cause
    arbitrary damage (e.g. code execution) depending
    on how invalid UTF-8 is handled inside the XML
    processor; validation was not their job but Expat's.
    Exploits with code execution are known to exist.
  - CVE-2022-25236 -- Passing (one or more) namespace separator
    characters in "xmlns[:prefix]" attribute values
    made Expat send malformed tag names to the XML
    processor on top of Expat which can cause
    arbitrary damage (e.g. code execution) depending
    on such unexpectable cases are handled inside the XML
    processor; validation was not their job but Expat's.
    Exploits with code execution are known to exist.
  - CVE-2022-25313 -- Fix stack exhaustion in doctype parsing
    that could be triggered by e.g. a 2 megabytes
    file with a large number of opening braces.
    Expected impact is denial of service or potentially
    arbitrary code execution.
  - CVE-2022-25314 -- Fix integer overflow in function copyString;
    only affects the encoding name parameter at parser creation
    time which is often hardcoded (rather than user input),
    takes a value in the gigabytes to trigger, and a 64-bit
    machine.  Expected impact is denial of service.
  - CVE-2022-25315 -- Fix integer overflow in function storeRawNames;
    needs input in the gigabytes and a 64-bit machine.
    Expected impact is denial of service or potentially
    arbitrary code execution.
  * Other changes:
  - Version info bumped from 9:4:8 to 9:5:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1645358400">- update to 2.4.6 (bsc#1196168, CVE-2022-25313):
  * Bug fixes:
  - Fix a regression introduced by the fix for CVE-2022-25313
    in release 2.4.5 that affects applications that (1)
    call function XML_SetElementDeclHandler and (2) are
    parsing XML that contains nested element declarations
    (e.g. "&lt;!ELEMENT junk ((bar|foo|xyz+), zebra*)&gt;").
  - Version info bumped from 9:5:8 to 9:6:8;
    see https://verbump.de/ for what these numbers do.</changelog>
  <changelog author="david.anes@suse.com" date="1646481600">- update to 2.4.7 (bsc#1196784, CVE-2022-25236):
  * Bug fixes:
  - Relax fix to CVE-2022-25236 (introduced with release 2.4.5)
    with regard to all valid URI characters (RFC 3986),
    i.e. the following set (excluding whitespace):
    ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz
    0123456789 % -._~ :/?#[]@ !$&amp;'()*+,;=
  * Other changes:
  - CMake|Windows: Store Expat version in the DLL
  - Document consequences of namespace separator choices not just
    in doc/reference.html but also in header &lt;expat.h&gt;
  - Document Expat's lack of validation of namespace URIs against
    RFC 3986, and that the XML 1.0r4 specification doesn't
    require Expat to validate namespace URIs, and that Expat
    may do more in that regard in future releases.
    If you find need for strict RFC 3986 URI validation on
    application level today, https://uriparser.github.io/ may
    be of interest.
  - Fix documentation of XML_EndDoctypeDeclHandler in &lt;expat.h&gt;
  - Document that a call to XML_FreeContentModel can be done at
    a later time from outside the element declaration handler
  - Make hardcoded namespace URIs easier to find in code
  - Update documentation on use of XML_POOR_ENTOPY on Solaris
  - tests: Resolve use of macros NAN and INFINITY for GNU G++
    4.8.2 on Solaris.
  - Version info bumped from 9:6:8 to 9:7:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1648555200">- update to 2.4.8:
  * Other changes:
  - pkg-config: Move "-lm" to section "Libs.private"
  - CMake|MSVC: Fix pkg-config section "Libs"
  - CMake|macOS: Start using linker arguments
    "-compatibility_version &lt;version&gt;" and
    "-current_version &lt;version&gt;" in a way compatible with GNU
    Libtool
  - Version info bumped from 9:7:8 to 9:8:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- update to 2.4.9: (bsc#1203438)
  * Security fixes:
  - CVE-2022-40674 -- Heap use-after-free vulnerability in
    function doContent. Expected impact is denial of service
    or potentially arbitrary code execution.
  * Bug fixes:
  - MinGW: Fix mis-compilation for -D__USE_MINGW_ANSI_STDIO=0
  - docs: Fix documentation on effect of switch XML_DTD on
    symbol visibility in doc/reference.html
  * Other changes:
  - MinGW: Make fix-xmltest-log.sh drop more Wine bug output
  - Autotools: Sync CMake templates with CMake 3.22
  - CMake: Migrate from use of CMAKE_*_POSTFIX to
    dedicated variables EXPAT_*_POSTFIX to stop affecting
    other projects
  - Windows|CMake: Add missing -DXML_STATIC to test runners
    and fuzzers
  - Windows|CMake: Render .def file from a template to fix
    linking with -DEXPAT_DTD=OFF and/or -DEXPAT_ATTR_INFO=ON
  - MinGW|CMake: Apply MSVC .def file when linking
  - MinGW|CMake: Sync library name with GNU Autotools,
    i.e. produce libexpat-1.dll rather than libexpat.dll
    by default.  Filename libexpat.dll.a is unaffected.
  - MinGW|CMake: Set missing variable CMAKE_RC_COMPILER in
    toolchain file "cmake/mingw-toolchain.cmake" to avoid
    error "windres: Command not found" on e.g. Ubuntu 20.04
  - CMake: Unify inconsistent use of set() and option() in
    context of public build time options to take need for
    set(.. FORCE) in projects using Expat by means of
    add_subdirectory(..) off Expat's users' shoulders
  - Stop exporting API symbols when building a static library
  - Resolve use of deprecated "fgrep" by "grep -F"
  - CMake: Make documentation on variables a bit more consistent
  - CMake: Drop leading whitespace from a #cmakedefine line in
    file expat_config.h.cmake
  - xmlwf: Fix harmless variable mix-up in function nsattcmp
  - Address Cppcheck warnings
  - Address Clang 15 compiler warnings
  - Version info bumped from 9:8:8 to 9:9:8;
    see https://verbump.de/ for what these numbers do
  * Infrastructure:
  - CI: Windows: Start covering MSVC 2022
  - CI: macOS: Migrate off deprecated macOS 10.15
  - CI: Linux: Make migration off deprecated Ubuntu 18.04 work
  - CI: Upgrade Clang from 14 to 15
  - apply-clang-format.sh: Add support for BSD find
  - coverage.sh: Exclude MinGW headers
  - coverage.sh: Fix name collision for -funsigned-char</changelog>
  <changelog author="david.anes@suse.com" date="1666785600">- Update to 2.5.0: (bsc#1204708)
  * Security fixes:
  - CVE-2022-43680 -- Fix heap use-after-free after overeager
    destruction of a shared DTD in function
    XML_ExternalEntityParserCreate in out-of-memory situations.
    Expected impact is denial of service or potentially arbitrary
    code execution.
  * Bug fixes:
  - Fix curruption from undefined entities
  - Fix case when parsing was suspended while processing nested
    entities
  - Stop leaking opening tag bindings after a closing tag mismatch
    error where a parser is reset through XML_ParserReset and then
    reused to parse
  - CMake: Fix generation of pkg-config file
  - MinGW|CMake: Fix static library name
  * Other changes:
  - Protect header expat_config.h from multiple inclusion
  - examples: Make use of XML_GetBuffer and be more consistent
    across examples
  - Address compiler warnings
  - Version info bumped from 9:9:8 to 9:10:8; see
    https://verbump.de/ for what these numbers do</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1670760000">- add upstream signing key and validate source signature</changelog>
  <changelog author="david.anes@suse.com" date="1707739200">- Update keyring automatically from keyserver during OBS service run.
- Explicitly use --without-docbook (before it was implicit).
- Include missing files for documentation and examples.
- Add manpage for xmlwf, which is now available in the released tarball.
- Clean the spec file a bit.
- Update to 2.6.0:
  * Security fixes:
  - CVE-2023-52425 (boo#1219559)
  - - Fix quadratic runtime issues with big tokens
    that can cause denial of service, in partial where
    dealing with compressed XML input.  Applications
    that parsed a document in one go -- a single call to
    functions XML_Parse or XML_ParseBuffer -- were not affected.
    The smaller the chunks/buffers you use for parsing
    previously, the bigger the problem prior to the fix.
    Backporters should be careful to no omit parts of
    pull request #789 and to include earlier pull request #771,
    in order to not break the fix.
  - CVE-2023-52426 (boo#1219561)
  - - Fix billion laughs attacks for users
    compiling *without* XML_DTD defined (which is not common).
    Users with XML_DTD defined have been protected since
    Expat &gt;=2.4.0 (and that was CVE-2013-0340 back then).
  * Bug fixes:
  - Fix parse-size-dependent "invalid token" error for
    external entities that start with a byte order mark
  - Fix NULL pointer dereference in setContext via
    XML_ExternalEntityParserCreate for compilation with
    XML_DTD undefined
  - Protect against closing entities out of order
  * Other changes:
  - Improve support for arc4random/arc4random_buf
  - Improve buffer growth in XML_GetBuffer and XML_Parse
  - xmlwf: Support --help and --version
  - xmlwf: Support custom buffer size for XML_GetBuffer and read
  - xmlwf: Improve language and URL clickability in help output
  - examples: Add new example "element_declarations.c"
  - Be stricter about macro XML_CONTEXT_BYTES at build time
  - Make inclusion to expat_config.h consistent
  - Autotools: configure.ac: Support --disable-maintainer-mode
  - Autotools: Sync CMake templates with CMake 3.26
  - Autotools: Make installation of shipped man page doc/xmlwf.1
    independent of docbook2man availability
  - Autotools|CMake: Add missing -DXML_STATIC to pkg-config file
    section "Cflags.private" in order to fix compilation
    against static libexpat using pkg-config on Windows
  - Autotools|CMake: Require a C99 compiler
    (a de-facto requirement already since Expat 2.2.2 of 2017)
  - Autotools|CMake: Fix PACKAGE_BUGREPORT variable
  - Autotools|CMake: Make test suite require a C++11 compiler
  - CMake: Require CMake &gt;=3.5.0
  - CMake: Lowercase off_t and size_t to help a bug in Meson
  - CMake: Sort xmlwf sources alphabetically
  - CMake|Windows: Fix generation of DLL file version info
  - CMake: Build tests/benchmark/benchmark.c as well for
    a build with -DEXPAT_BUILD_TESTS=ON
  - docs: Document the importance of isFinal + adjust tests
    accordingly
  - docs: Improve use of "NULL" and "null"
  - docs: Be specific about version of XML (XML 1.0r4)
    and version of C (C99); (XML 1.0r5 will need a sponsor.)
  - docs: reference.html: Promote function XML_ParseBuffer more
  - docs: reference.html: Add HTML anchors to XML_* macros
  - docs: reference.html: Upgrade to OK.css 1.2.0
  - docs: Fix typos
  - docs|CI: Use HTTPS URLs instead of HTTP at various places
  - Address compiler warnings
  - Address clang-tidy warnings
  - Version info bumped from 9:10:8 (libexpat*.so.1.8.10)
    to 10:0:9 (libexpat*.so.1.9.0); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1708430400">- Fix handling of xmlwf.1 to avoid workarounds in specfile:
  * Added libxml2-fix-xmlwf.1-handling.patch
- Call buildconf.sh to avoid (future) issues with expat_config.h.in</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1709294400">- update to 2.6.1:
  * Expose billion laughs API with XML_DTD defined and XML_GE
    undefined, regression from 2.6.0
  * Make tests independent of CPU speed, and thus more robust
- drop libxml2-fix-xmlwf.1-handling.patch, upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1710331200">- update to 2.6.2:
  * CVE-2024-28757 -- Prevent billion laughs attacks with isolated
    use of external parsers (boo#1221289)
  * Reject direct parameter entity recursion and avoid the related
    undefined behavior</changelog>
  <changelog author="david.anes@suse.com" date="1725537600">- Update to 2.6.3:
  * Security fixes:
  - CVE-2024-45490, bsc#1229930 -- Calling function XML_ParseBuffer with
    len &lt; 0 without noticing and then calling XML_GetBuffer
    will have XML_ParseBuffer fail to recognize the problem
    and XML_GetBuffer corrupt memory.
    With the fix, XML_ParseBuffer now complains with error
    XML_ERROR_INVALID_ARGUMENT just like sibling XML_Parse
    has been doing since Expat 2.2.1, and now documented.
    Impact is denial of service to potentially artitrary code
    execution.
  - CVE-2024-45491, bsc#1229931 -- Internal function dtdCopy can have an
    integer overflow for nDefaultAtts on 32-bit platforms
    (where UINT_MAX equals SIZE_MAX).
    Impact is denial of service to potentially artitrary code
    execution.
  - CVE-2024-45492, bsc#1229932 -- Internal function nextScaffoldPart can
    have an integer overflow for m_groupSize on 32-bit
    platforms (where UINT_MAX equals SIZE_MAX).
    Impact is denial of service to potentially artitrary code
    execution.
  * Other changes:
  - Autotools: Sync CMake templates with CMake 3.28
  - Autotools: Always provide path to find(1) for portability
  - Autotools: Ensure that the m4 directory always exists.
  - Autotools: Simplify handling of SIZEOF_VOID_P
  - Autotools: Support non-GNU sed
  - Autotools|CMake: Fix main() to main(void)
  - Autotools|CMake: Fix compile tests for HAVE_SYSCALL_GETRANDOM
  - Autotools|CMake: Stop requiring dos2unix
  - CMake: Fix check for symbols size_t and off_t
  - docs|tests: Convert README to Markdown and update
  - Windows: Drop support for Visual Studio &lt;=15.0/2017
  - Drop needless XML_DTD guards around is_param access
  - Fix typo in a code comment
  - Version info bumped from 10:2:9 (libexpat*.so.1.9.2)
    to 10:3:9 (libexpat*.so.1.9.3); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1727352000">- updated keyring [https://build.suse.de/request/show/345282]
- modified sources
  % expat.keyring</changelog>
  <changelog author="pgajdos@suse.com" date="1730980800">- version update to 2.6.4
  * Security fixes: [bsc#1232601][bsc#1232579]
    [#915]  CVE-2024-50602 -- Fix crash within function XML_ResumeParser
    from a NULL pointer dereference by disallowing function
    XML_StopParser to (stop or) suspend an unstarted parser.
    A new error code XML_ERROR_NOT_STARTED was introduced to
    properly communicate this situation.  // CWE-476 CWE-754
  * Other changes:
    [#903]  CMake: Add alias target "expat::expat"
    [#905]  docs: Document use via CMake &gt;=3.18 with FetchContent
    and SOURCE_SUBDIR and its consequences
    [#902]  tests: Reduce use of global parser instance
    [#904]  tests: Resolve duplicate handler
  [#317] #918  tests: Improve tests on doctype closing (ex CVE-2019-15903)
    [#914]  Fix signedness of format strings
  [#919] #920  Version info bumped from 10:3:9 (libexpat*.so.1.9.3)
    to 11:0:10 (libexpat*.so.1.10.0); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1731412800">- no source changes, just adding jira reference: jsc#SLE-21253</changelog>
  <changelog author="pgajdos@suse.com" date="1741953600">- version update to 2.7.0 (CVE-2024-8176 [bsc#1239618])
  * Security fixes:
    [#893] #973  CVE-2024-8176 -- Fix crash from chaining a large number
    of entities caused by stack overflow by resolving use of
    recursion, for all three uses of entities:
  - general entities in character data ("&lt;e&gt;&amp;g1;&lt;/e&gt;")
  - general entities in attribute values ("&lt;e k1='&amp;g1;'/&gt;")
  - parameter entities ("%p1;")
    Known impact is (reliable and easy) denial of service:
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:H/RL:O/RC:C
    (Base Score: 7.5, Temporal Score: 7.2)
    Please note that a layer of compression around XML can
    significantly reduce the minimum attack payload size.
  * Other changes:
    [#935] #937  Autotools: Make generated CMake files look for
    libexpat.@SO_MAJOR@.dylib on macOS
    [#925]  Autotools: Sync CMake templates with CMake 3.29
  [#945] #962 #966  CMake: Drop support for CMake &lt;3.13
    [#942]  CMake: Small fuzzing related improvements
    [#921]  docs: Add missing documentation of error code
    XML_ERROR_NOT_STARTED that was introduced with 2.6.4
    [#941]  docs: Document need for C++11 compiler for use from C++
    [#959]  tests/benchmark: Fix a (harmless) TOCTTOU
    [#944]  Windows: Fix installer target location of file xmlwf.xml
    for CMake
    [#953]  Windows: Address warning -Wunknown-warning-option
    about -Wno-pedantic-ms-format from LLVM MinGW
    [#971]  Address Cppcheck warnings
    [#969] #970  Mass-migrate links from http:// to https://
    [#947] #958 ..
    [#974] #975  Document changes since the previous release
    [#974] #975  Version info bumped from 11:0:10 (libexpat*.so.1.10.0)
    to 11:1:10 (libexpat*.so.1.10.1); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1743076800">- version update to 2.7.0 for SLE-15-SP7 (jsc#PED-12507)</changelog>
  <changelog author="pgajdos@suse.com" date="1743163200">- version update to 2.7.1
    Bug fixes:
    [#980] #989  Restore event pointer behavior from Expat 2.6.4
    (that the fix to CVE-2024-8176 changed in 2.7.0);
    affected API functions are:
  - XML_GetCurrentByteCount
  - XML_GetCurrentByteIndex
  - XML_GetCurrentColumnNumber
  - XML_GetCurrentLineNumber
  - XML_GetInputContext
    Other changes:
    [#976] #977  Autotools: Integrate files "fuzz/xml_lpm_fuzzer.{cpp,proto}"
    with Automake that were missing from 2.7.0 release tarballs
    [#983] #984  Fix printf format specifiers for 32bit Emscripten
    [#992]  docs: Promote OpenSSF Best Practices self-certification
    [#978]  tests/benchmark: Resolve mistaken double close
    [#986]  Address compiler warnings
    [#990] #993  Version info bumped from 11:1:10 (libexpat*.so.1.10.1)
    to 11:2:10 (libexpat*.so.1.10.2); see https://verbump.de/
    for what these numbers do
    Infrastructure:
    [#982]  CI: Start running Perl XML::Parser integration tests
    [#987]  CI: Enforce Clang Static Analyzer clean code
    [#991]  CI: Re-enable warning clang-analyzer-valist.Uninitialized
    for clang-tidy
    [#981]  CI: Cover compilation with musl
    [#983] #984  CI: Cover compilation with 32bit Emscripten
    [#976] #977  CI: Protect against fuzzer files missing from future
    release archives</changelog>
  <changelog author="martin.schreiner@suse.com" date="1759147200">- Fix CVE-2025-59375 / bsc#1249584.
- Add patch file:
  * CVE-2025-59375.patch</changelog>
</package>
<package pkgid="3e7aee0042c79e547f424e131127b11888e208841079ca2bde5d2b12604fb5d9" name="libexpat1" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="150700.3.9.2"/>
  <changelog author="david.anes@suse.com" date="1645272000">- update to 2.4.5 (bsc#1196171, bsc#1196169, bsc#1196168,
  bsc#1196026, bsc#1196025):
  * Security fixes:
  - CVE-2022-25235 -- Passing malformed 2- and 3-byte UTF-8
    sequences (e.g. from start tag names) to the XML
    processing application on top of Expat can cause
    arbitrary damage (e.g. code execution) depending
    on how invalid UTF-8 is handled inside the XML
    processor; validation was not their job but Expat's.
    Exploits with code execution are known to exist.
  - CVE-2022-25236 -- Passing (one or more) namespace separator
    characters in "xmlns[:prefix]" attribute values
    made Expat send malformed tag names to the XML
    processor on top of Expat which can cause
    arbitrary damage (e.g. code execution) depending
    on such unexpectable cases are handled inside the XML
    processor; validation was not their job but Expat's.
    Exploits with code execution are known to exist.
  - CVE-2022-25313 -- Fix stack exhaustion in doctype parsing
    that could be triggered by e.g. a 2 megabytes
    file with a large number of opening braces.
    Expected impact is denial of service or potentially
    arbitrary code execution.
  - CVE-2022-25314 -- Fix integer overflow in function copyString;
    only affects the encoding name parameter at parser creation
    time which is often hardcoded (rather than user input),
    takes a value in the gigabytes to trigger, and a 64-bit
    machine.  Expected impact is denial of service.
  - CVE-2022-25315 -- Fix integer overflow in function storeRawNames;
    needs input in the gigabytes and a 64-bit machine.
    Expected impact is denial of service or potentially
    arbitrary code execution.
  * Other changes:
  - Version info bumped from 9:4:8 to 9:5:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1645358400">- update to 2.4.6 (bsc#1196168, CVE-2022-25313):
  * Bug fixes:
  - Fix a regression introduced by the fix for CVE-2022-25313
    in release 2.4.5 that affects applications that (1)
    call function XML_SetElementDeclHandler and (2) are
    parsing XML that contains nested element declarations
    (e.g. "&lt;!ELEMENT junk ((bar|foo|xyz+), zebra*)&gt;").
  - Version info bumped from 9:5:8 to 9:6:8;
    see https://verbump.de/ for what these numbers do.</changelog>
  <changelog author="david.anes@suse.com" date="1646481600">- update to 2.4.7 (bsc#1196784, CVE-2022-25236):
  * Bug fixes:
  - Relax fix to CVE-2022-25236 (introduced with release 2.4.5)
    with regard to all valid URI characters (RFC 3986),
    i.e. the following set (excluding whitespace):
    ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz
    0123456789 % -._~ :/?#[]@ !$&amp;'()*+,;=
  * Other changes:
  - CMake|Windows: Store Expat version in the DLL
  - Document consequences of namespace separator choices not just
    in doc/reference.html but also in header &lt;expat.h&gt;
  - Document Expat's lack of validation of namespace URIs against
    RFC 3986, and that the XML 1.0r4 specification doesn't
    require Expat to validate namespace URIs, and that Expat
    may do more in that regard in future releases.
    If you find need for strict RFC 3986 URI validation on
    application level today, https://uriparser.github.io/ may
    be of interest.
  - Fix documentation of XML_EndDoctypeDeclHandler in &lt;expat.h&gt;
  - Document that a call to XML_FreeContentModel can be done at
    a later time from outside the element declaration handler
  - Make hardcoded namespace URIs easier to find in code
  - Update documentation on use of XML_POOR_ENTOPY on Solaris
  - tests: Resolve use of macros NAN and INFINITY for GNU G++
    4.8.2 on Solaris.
  - Version info bumped from 9:6:8 to 9:7:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1648555200">- update to 2.4.8:
  * Other changes:
  - pkg-config: Move "-lm" to section "Libs.private"
  - CMake|MSVC: Fix pkg-config section "Libs"
  - CMake|macOS: Start using linker arguments
    "-compatibility_version &lt;version&gt;" and
    "-current_version &lt;version&gt;" in a way compatible with GNU
    Libtool
  - Version info bumped from 9:7:8 to 9:8:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- update to 2.4.9: (bsc#1203438)
  * Security fixes:
  - CVE-2022-40674 -- Heap use-after-free vulnerability in
    function doContent. Expected impact is denial of service
    or potentially arbitrary code execution.
  * Bug fixes:
  - MinGW: Fix mis-compilation for -D__USE_MINGW_ANSI_STDIO=0
  - docs: Fix documentation on effect of switch XML_DTD on
    symbol visibility in doc/reference.html
  * Other changes:
  - MinGW: Make fix-xmltest-log.sh drop more Wine bug output
  - Autotools: Sync CMake templates with CMake 3.22
  - CMake: Migrate from use of CMAKE_*_POSTFIX to
    dedicated variables EXPAT_*_POSTFIX to stop affecting
    other projects
  - Windows|CMake: Add missing -DXML_STATIC to test runners
    and fuzzers
  - Windows|CMake: Render .def file from a template to fix
    linking with -DEXPAT_DTD=OFF and/or -DEXPAT_ATTR_INFO=ON
  - MinGW|CMake: Apply MSVC .def file when linking
  - MinGW|CMake: Sync library name with GNU Autotools,
    i.e. produce libexpat-1.dll rather than libexpat.dll
    by default.  Filename libexpat.dll.a is unaffected.
  - MinGW|CMake: Set missing variable CMAKE_RC_COMPILER in
    toolchain file "cmake/mingw-toolchain.cmake" to avoid
    error "windres: Command not found" on e.g. Ubuntu 20.04
  - CMake: Unify inconsistent use of set() and option() in
    context of public build time options to take need for
    set(.. FORCE) in projects using Expat by means of
    add_subdirectory(..) off Expat's users' shoulders
  - Stop exporting API symbols when building a static library
  - Resolve use of deprecated "fgrep" by "grep -F"
  - CMake: Make documentation on variables a bit more consistent
  - CMake: Drop leading whitespace from a #cmakedefine line in
    file expat_config.h.cmake
  - xmlwf: Fix harmless variable mix-up in function nsattcmp
  - Address Cppcheck warnings
  - Address Clang 15 compiler warnings
  - Version info bumped from 9:8:8 to 9:9:8;
    see https://verbump.de/ for what these numbers do
  * Infrastructure:
  - CI: Windows: Start covering MSVC 2022
  - CI: macOS: Migrate off deprecated macOS 10.15
  - CI: Linux: Make migration off deprecated Ubuntu 18.04 work
  - CI: Upgrade Clang from 14 to 15
  - apply-clang-format.sh: Add support for BSD find
  - coverage.sh: Exclude MinGW headers
  - coverage.sh: Fix name collision for -funsigned-char</changelog>
  <changelog author="david.anes@suse.com" date="1666785600">- Update to 2.5.0: (bsc#1204708)
  * Security fixes:
  - CVE-2022-43680 -- Fix heap use-after-free after overeager
    destruction of a shared DTD in function
    XML_ExternalEntityParserCreate in out-of-memory situations.
    Expected impact is denial of service or potentially arbitrary
    code execution.
  * Bug fixes:
  - Fix curruption from undefined entities
  - Fix case when parsing was suspended while processing nested
    entities
  - Stop leaking opening tag bindings after a closing tag mismatch
    error where a parser is reset through XML_ParserReset and then
    reused to parse
  - CMake: Fix generation of pkg-config file
  - MinGW|CMake: Fix static library name
  * Other changes:
  - Protect header expat_config.h from multiple inclusion
  - examples: Make use of XML_GetBuffer and be more consistent
    across examples
  - Address compiler warnings
  - Version info bumped from 9:9:8 to 9:10:8; see
    https://verbump.de/ for what these numbers do</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1670760000">- add upstream signing key and validate source signature</changelog>
  <changelog author="david.anes@suse.com" date="1707739200">- Update keyring automatically from keyserver during OBS service run.
- Explicitly use --without-docbook (before it was implicit).
- Include missing files for documentation and examples.
- Add manpage for xmlwf, which is now available in the released tarball.
- Clean the spec file a bit.
- Update to 2.6.0:
  * Security fixes:
  - CVE-2023-52425 (boo#1219559)
  - - Fix quadratic runtime issues with big tokens
    that can cause denial of service, in partial where
    dealing with compressed XML input.  Applications
    that parsed a document in one go -- a single call to
    functions XML_Parse or XML_ParseBuffer -- were not affected.
    The smaller the chunks/buffers you use for parsing
    previously, the bigger the problem prior to the fix.
    Backporters should be careful to no omit parts of
    pull request #789 and to include earlier pull request #771,
    in order to not break the fix.
  - CVE-2023-52426 (boo#1219561)
  - - Fix billion laughs attacks for users
    compiling *without* XML_DTD defined (which is not common).
    Users with XML_DTD defined have been protected since
    Expat &gt;=2.4.0 (and that was CVE-2013-0340 back then).
  * Bug fixes:
  - Fix parse-size-dependent "invalid token" error for
    external entities that start with a byte order mark
  - Fix NULL pointer dereference in setContext via
    XML_ExternalEntityParserCreate for compilation with
    XML_DTD undefined
  - Protect against closing entities out of order
  * Other changes:
  - Improve support for arc4random/arc4random_buf
  - Improve buffer growth in XML_GetBuffer and XML_Parse
  - xmlwf: Support --help and --version
  - xmlwf: Support custom buffer size for XML_GetBuffer and read
  - xmlwf: Improve language and URL clickability in help output
  - examples: Add new example "element_declarations.c"
  - Be stricter about macro XML_CONTEXT_BYTES at build time
  - Make inclusion to expat_config.h consistent
  - Autotools: configure.ac: Support --disable-maintainer-mode
  - Autotools: Sync CMake templates with CMake 3.26
  - Autotools: Make installation of shipped man page doc/xmlwf.1
    independent of docbook2man availability
  - Autotools|CMake: Add missing -DXML_STATIC to pkg-config file
    section "Cflags.private" in order to fix compilation
    against static libexpat using pkg-config on Windows
  - Autotools|CMake: Require a C99 compiler
    (a de-facto requirement already since Expat 2.2.2 of 2017)
  - Autotools|CMake: Fix PACKAGE_BUGREPORT variable
  - Autotools|CMake: Make test suite require a C++11 compiler
  - CMake: Require CMake &gt;=3.5.0
  - CMake: Lowercase off_t and size_t to help a bug in Meson
  - CMake: Sort xmlwf sources alphabetically
  - CMake|Windows: Fix generation of DLL file version info
  - CMake: Build tests/benchmark/benchmark.c as well for
    a build with -DEXPAT_BUILD_TESTS=ON
  - docs: Document the importance of isFinal + adjust tests
    accordingly
  - docs: Improve use of "NULL" and "null"
  - docs: Be specific about version of XML (XML 1.0r4)
    and version of C (C99); (XML 1.0r5 will need a sponsor.)
  - docs: reference.html: Promote function XML_ParseBuffer more
  - docs: reference.html: Add HTML anchors to XML_* macros
  - docs: reference.html: Upgrade to OK.css 1.2.0
  - docs: Fix typos
  - docs|CI: Use HTTPS URLs instead of HTTP at various places
  - Address compiler warnings
  - Address clang-tidy warnings
  - Version info bumped from 9:10:8 (libexpat*.so.1.8.10)
    to 10:0:9 (libexpat*.so.1.9.0); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1708430400">- Fix handling of xmlwf.1 to avoid workarounds in specfile:
  * Added libxml2-fix-xmlwf.1-handling.patch
- Call buildconf.sh to avoid (future) issues with expat_config.h.in</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1709294400">- update to 2.6.1:
  * Expose billion laughs API with XML_DTD defined and XML_GE
    undefined, regression from 2.6.0
  * Make tests independent of CPU speed, and thus more robust
- drop libxml2-fix-xmlwf.1-handling.patch, upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1710331200">- update to 2.6.2:
  * CVE-2024-28757 -- Prevent billion laughs attacks with isolated
    use of external parsers (boo#1221289)
  * Reject direct parameter entity recursion and avoid the related
    undefined behavior</changelog>
  <changelog author="david.anes@suse.com" date="1725537600">- Update to 2.6.3:
  * Security fixes:
  - CVE-2024-45490, bsc#1229930 -- Calling function XML_ParseBuffer with
    len &lt; 0 without noticing and then calling XML_GetBuffer
    will have XML_ParseBuffer fail to recognize the problem
    and XML_GetBuffer corrupt memory.
    With the fix, XML_ParseBuffer now complains with error
    XML_ERROR_INVALID_ARGUMENT just like sibling XML_Parse
    has been doing since Expat 2.2.1, and now documented.
    Impact is denial of service to potentially artitrary code
    execution.
  - CVE-2024-45491, bsc#1229931 -- Internal function dtdCopy can have an
    integer overflow for nDefaultAtts on 32-bit platforms
    (where UINT_MAX equals SIZE_MAX).
    Impact is denial of service to potentially artitrary code
    execution.
  - CVE-2024-45492, bsc#1229932 -- Internal function nextScaffoldPart can
    have an integer overflow for m_groupSize on 32-bit
    platforms (where UINT_MAX equals SIZE_MAX).
    Impact is denial of service to potentially artitrary code
    execution.
  * Other changes:
  - Autotools: Sync CMake templates with CMake 3.28
  - Autotools: Always provide path to find(1) for portability
  - Autotools: Ensure that the m4 directory always exists.
  - Autotools: Simplify handling of SIZEOF_VOID_P
  - Autotools: Support non-GNU sed
  - Autotools|CMake: Fix main() to main(void)
  - Autotools|CMake: Fix compile tests for HAVE_SYSCALL_GETRANDOM
  - Autotools|CMake: Stop requiring dos2unix
  - CMake: Fix check for symbols size_t and off_t
  - docs|tests: Convert README to Markdown and update
  - Windows: Drop support for Visual Studio &lt;=15.0/2017
  - Drop needless XML_DTD guards around is_param access
  - Fix typo in a code comment
  - Version info bumped from 10:2:9 (libexpat*.so.1.9.2)
    to 10:3:9 (libexpat*.so.1.9.3); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1727352000">- updated keyring [https://build.suse.de/request/show/345282]
- modified sources
  % expat.keyring</changelog>
  <changelog author="pgajdos@suse.com" date="1730980800">- version update to 2.6.4
  * Security fixes: [bsc#1232601][bsc#1232579]
    [#915]  CVE-2024-50602 -- Fix crash within function XML_ResumeParser
    from a NULL pointer dereference by disallowing function
    XML_StopParser to (stop or) suspend an unstarted parser.
    A new error code XML_ERROR_NOT_STARTED was introduced to
    properly communicate this situation.  // CWE-476 CWE-754
  * Other changes:
    [#903]  CMake: Add alias target "expat::expat"
    [#905]  docs: Document use via CMake &gt;=3.18 with FetchContent
    and SOURCE_SUBDIR and its consequences
    [#902]  tests: Reduce use of global parser instance
    [#904]  tests: Resolve duplicate handler
  [#317] #918  tests: Improve tests on doctype closing (ex CVE-2019-15903)
    [#914]  Fix signedness of format strings
  [#919] #920  Version info bumped from 10:3:9 (libexpat*.so.1.9.3)
    to 11:0:10 (libexpat*.so.1.10.0); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1731412800">- no source changes, just adding jira reference: jsc#SLE-21253</changelog>
  <changelog author="pgajdos@suse.com" date="1741953600">- version update to 2.7.0 (CVE-2024-8176 [bsc#1239618])
  * Security fixes:
    [#893] #973  CVE-2024-8176 -- Fix crash from chaining a large number
    of entities caused by stack overflow by resolving use of
    recursion, for all three uses of entities:
  - general entities in character data ("&lt;e&gt;&amp;g1;&lt;/e&gt;")
  - general entities in attribute values ("&lt;e k1='&amp;g1;'/&gt;")
  - parameter entities ("%p1;")
    Known impact is (reliable and easy) denial of service:
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:H/RL:O/RC:C
    (Base Score: 7.5, Temporal Score: 7.2)
    Please note that a layer of compression around XML can
    significantly reduce the minimum attack payload size.
  * Other changes:
    [#935] #937  Autotools: Make generated CMake files look for
    libexpat.@SO_MAJOR@.dylib on macOS
    [#925]  Autotools: Sync CMake templates with CMake 3.29
  [#945] #962 #966  CMake: Drop support for CMake &lt;3.13
    [#942]  CMake: Small fuzzing related improvements
    [#921]  docs: Add missing documentation of error code
    XML_ERROR_NOT_STARTED that was introduced with 2.6.4
    [#941]  docs: Document need for C++11 compiler for use from C++
    [#959]  tests/benchmark: Fix a (harmless) TOCTTOU
    [#944]  Windows: Fix installer target location of file xmlwf.xml
    for CMake
    [#953]  Windows: Address warning -Wunknown-warning-option
    about -Wno-pedantic-ms-format from LLVM MinGW
    [#971]  Address Cppcheck warnings
    [#969] #970  Mass-migrate links from http:// to https://
    [#947] #958 ..
    [#974] #975  Document changes since the previous release
    [#974] #975  Version info bumped from 11:0:10 (libexpat*.so.1.10.0)
    to 11:1:10 (libexpat*.so.1.10.1); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1743076800">- version update to 2.7.0 for SLE-15-SP7 (jsc#PED-12507)</changelog>
  <changelog author="pgajdos@suse.com" date="1743163200">- version update to 2.7.1
    Bug fixes:
    [#980] #989  Restore event pointer behavior from Expat 2.6.4
    (that the fix to CVE-2024-8176 changed in 2.7.0);
    affected API functions are:
  - XML_GetCurrentByteCount
  - XML_GetCurrentByteIndex
  - XML_GetCurrentColumnNumber
  - XML_GetCurrentLineNumber
  - XML_GetInputContext
    Other changes:
    [#976] #977  Autotools: Integrate files "fuzz/xml_lpm_fuzzer.{cpp,proto}"
    with Automake that were missing from 2.7.0 release tarballs
    [#983] #984  Fix printf format specifiers for 32bit Emscripten
    [#992]  docs: Promote OpenSSF Best Practices self-certification
    [#978]  tests/benchmark: Resolve mistaken double close
    [#986]  Address compiler warnings
    [#990] #993  Version info bumped from 11:1:10 (libexpat*.so.1.10.1)
    to 11:2:10 (libexpat*.so.1.10.2); see https://verbump.de/
    for what these numbers do
    Infrastructure:
    [#982]  CI: Start running Perl XML::Parser integration tests
    [#987]  CI: Enforce Clang Static Analyzer clean code
    [#991]  CI: Re-enable warning clang-analyzer-valist.Uninitialized
    for clang-tidy
    [#981]  CI: Cover compilation with musl
    [#983] #984  CI: Cover compilation with 32bit Emscripten
    [#976] #977  CI: Protect against fuzzer files missing from future
    release archives</changelog>
  <changelog author="martin.schreiner@suse.com" date="1759147200">- Fix CVE-2025-59375 / bsc#1249584.
- Add patch file:
  * CVE-2025-59375.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770120000">- security update
- added patches
  CVE-2026-24515 [bsc#1257144], NULL dereference (CWE-476) due to function XML_ExternalEntityParserCreate() failing to copy the encoding handler data passed to XML_SetUnknownEncodingHandler() from the parent to the subparser
  * expat-CVE-2026-24515.patch
  CVE-2026-25210 [bsc#1257496], lack of buffer size check can lead to an integer overflow
  * expat-CVE-2026-25210.patch</changelog>
</package>
<package pkgid="415ccc0d96bac885c786e086512755b621927f537829623f07b5ccf32d37573a" name="libexpat1-32bit" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="150700.3.12.1"/>
  <changelog author="david.anes@suse.com" date="1645358400">- update to 2.4.6 (bsc#1196168, CVE-2022-25313):
  * Bug fixes:
  - Fix a regression introduced by the fix for CVE-2022-25313
    in release 2.4.5 that affects applications that (1)
    call function XML_SetElementDeclHandler and (2) are
    parsing XML that contains nested element declarations
    (e.g. "&lt;!ELEMENT junk ((bar|foo|xyz+), zebra*)&gt;").
  - Version info bumped from 9:5:8 to 9:6:8;
    see https://verbump.de/ for what these numbers do.</changelog>
  <changelog author="david.anes@suse.com" date="1646481600">- update to 2.4.7 (bsc#1196784, CVE-2022-25236):
  * Bug fixes:
  - Relax fix to CVE-2022-25236 (introduced with release 2.4.5)
    with regard to all valid URI characters (RFC 3986),
    i.e. the following set (excluding whitespace):
    ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz
    0123456789 % -._~ :/?#[]@ !$&amp;'()*+,;=
  * Other changes:
  - CMake|Windows: Store Expat version in the DLL
  - Document consequences of namespace separator choices not just
    in doc/reference.html but also in header &lt;expat.h&gt;
  - Document Expat's lack of validation of namespace URIs against
    RFC 3986, and that the XML 1.0r4 specification doesn't
    require Expat to validate namespace URIs, and that Expat
    may do more in that regard in future releases.
    If you find need for strict RFC 3986 URI validation on
    application level today, https://uriparser.github.io/ may
    be of interest.
  - Fix documentation of XML_EndDoctypeDeclHandler in &lt;expat.h&gt;
  - Document that a call to XML_FreeContentModel can be done at
    a later time from outside the element declaration handler
  - Make hardcoded namespace URIs easier to find in code
  - Update documentation on use of XML_POOR_ENTOPY on Solaris
  - tests: Resolve use of macros NAN and INFINITY for GNU G++
    4.8.2 on Solaris.
  - Version info bumped from 9:6:8 to 9:7:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1648555200">- update to 2.4.8:
  * Other changes:
  - pkg-config: Move "-lm" to section "Libs.private"
  - CMake|MSVC: Fix pkg-config section "Libs"
  - CMake|macOS: Start using linker arguments
    "-compatibility_version &lt;version&gt;" and
    "-current_version &lt;version&gt;" in a way compatible with GNU
    Libtool
  - Version info bumped from 9:7:8 to 9:8:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- update to 2.4.9: (bsc#1203438)
  * Security fixes:
  - CVE-2022-40674 -- Heap use-after-free vulnerability in
    function doContent. Expected impact is denial of service
    or potentially arbitrary code execution.
  * Bug fixes:
  - MinGW: Fix mis-compilation for -D__USE_MINGW_ANSI_STDIO=0
  - docs: Fix documentation on effect of switch XML_DTD on
    symbol visibility in doc/reference.html
  * Other changes:
  - MinGW: Make fix-xmltest-log.sh drop more Wine bug output
  - Autotools: Sync CMake templates with CMake 3.22
  - CMake: Migrate from use of CMAKE_*_POSTFIX to
    dedicated variables EXPAT_*_POSTFIX to stop affecting
    other projects
  - Windows|CMake: Add missing -DXML_STATIC to test runners
    and fuzzers
  - Windows|CMake: Render .def file from a template to fix
    linking with -DEXPAT_DTD=OFF and/or -DEXPAT_ATTR_INFO=ON
  - MinGW|CMake: Apply MSVC .def file when linking
  - MinGW|CMake: Sync library name with GNU Autotools,
    i.e. produce libexpat-1.dll rather than libexpat.dll
    by default.  Filename libexpat.dll.a is unaffected.
  - MinGW|CMake: Set missing variable CMAKE_RC_COMPILER in
    toolchain file "cmake/mingw-toolchain.cmake" to avoid
    error "windres: Command not found" on e.g. Ubuntu 20.04
  - CMake: Unify inconsistent use of set() and option() in
    context of public build time options to take need for
    set(.. FORCE) in projects using Expat by means of
    add_subdirectory(..) off Expat's users' shoulders
  - Stop exporting API symbols when building a static library
  - Resolve use of deprecated "fgrep" by "grep -F"
  - CMake: Make documentation on variables a bit more consistent
  - CMake: Drop leading whitespace from a #cmakedefine line in
    file expat_config.h.cmake
  - xmlwf: Fix harmless variable mix-up in function nsattcmp
  - Address Cppcheck warnings
  - Address Clang 15 compiler warnings
  - Version info bumped from 9:8:8 to 9:9:8;
    see https://verbump.de/ for what these numbers do
  * Infrastructure:
  - CI: Windows: Start covering MSVC 2022
  - CI: macOS: Migrate off deprecated macOS 10.15
  - CI: Linux: Make migration off deprecated Ubuntu 18.04 work
  - CI: Upgrade Clang from 14 to 15
  - apply-clang-format.sh: Add support for BSD find
  - coverage.sh: Exclude MinGW headers
  - coverage.sh: Fix name collision for -funsigned-char</changelog>
  <changelog author="david.anes@suse.com" date="1666785600">- Update to 2.5.0: (bsc#1204708)
  * Security fixes:
  - CVE-2022-43680 -- Fix heap use-after-free after overeager
    destruction of a shared DTD in function
    XML_ExternalEntityParserCreate in out-of-memory situations.
    Expected impact is denial of service or potentially arbitrary
    code execution.
  * Bug fixes:
  - Fix curruption from undefined entities
  - Fix case when parsing was suspended while processing nested
    entities
  - Stop leaking opening tag bindings after a closing tag mismatch
    error where a parser is reset through XML_ParserReset and then
    reused to parse
  - CMake: Fix generation of pkg-config file
  - MinGW|CMake: Fix static library name
  * Other changes:
  - Protect header expat_config.h from multiple inclusion
  - examples: Make use of XML_GetBuffer and be more consistent
    across examples
  - Address compiler warnings
  - Version info bumped from 9:9:8 to 9:10:8; see
    https://verbump.de/ for what these numbers do</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1670760000">- add upstream signing key and validate source signature</changelog>
  <changelog author="david.anes@suse.com" date="1707739200">- Update keyring automatically from keyserver during OBS service run.
- Explicitly use --without-docbook (before it was implicit).
- Include missing files for documentation and examples.
- Add manpage for xmlwf, which is now available in the released tarball.
- Clean the spec file a bit.
- Update to 2.6.0:
  * Security fixes:
  - CVE-2023-52425 (boo#1219559)
  - - Fix quadratic runtime issues with big tokens
    that can cause denial of service, in partial where
    dealing with compressed XML input.  Applications
    that parsed a document in one go -- a single call to
    functions XML_Parse or XML_ParseBuffer -- were not affected.
    The smaller the chunks/buffers you use for parsing
    previously, the bigger the problem prior to the fix.
    Backporters should be careful to no omit parts of
    pull request #789 and to include earlier pull request #771,
    in order to not break the fix.
  - CVE-2023-52426 (boo#1219561)
  - - Fix billion laughs attacks for users
    compiling *without* XML_DTD defined (which is not common).
    Users with XML_DTD defined have been protected since
    Expat &gt;=2.4.0 (and that was CVE-2013-0340 back then).
  * Bug fixes:
  - Fix parse-size-dependent "invalid token" error for
    external entities that start with a byte order mark
  - Fix NULL pointer dereference in setContext via
    XML_ExternalEntityParserCreate for compilation with
    XML_DTD undefined
  - Protect against closing entities out of order
  * Other changes:
  - Improve support for arc4random/arc4random_buf
  - Improve buffer growth in XML_GetBuffer and XML_Parse
  - xmlwf: Support --help and --version
  - xmlwf: Support custom buffer size for XML_GetBuffer and read
  - xmlwf: Improve language and URL clickability in help output
  - examples: Add new example "element_declarations.c"
  - Be stricter about macro XML_CONTEXT_BYTES at build time
  - Make inclusion to expat_config.h consistent
  - Autotools: configure.ac: Support --disable-maintainer-mode
  - Autotools: Sync CMake templates with CMake 3.26
  - Autotools: Make installation of shipped man page doc/xmlwf.1
    independent of docbook2man availability
  - Autotools|CMake: Add missing -DXML_STATIC to pkg-config file
    section "Cflags.private" in order to fix compilation
    against static libexpat using pkg-config on Windows
  - Autotools|CMake: Require a C99 compiler
    (a de-facto requirement already since Expat 2.2.2 of 2017)
  - Autotools|CMake: Fix PACKAGE_BUGREPORT variable
  - Autotools|CMake: Make test suite require a C++11 compiler
  - CMake: Require CMake &gt;=3.5.0
  - CMake: Lowercase off_t and size_t to help a bug in Meson
  - CMake: Sort xmlwf sources alphabetically
  - CMake|Windows: Fix generation of DLL file version info
  - CMake: Build tests/benchmark/benchmark.c as well for
    a build with -DEXPAT_BUILD_TESTS=ON
  - docs: Document the importance of isFinal + adjust tests
    accordingly
  - docs: Improve use of "NULL" and "null"
  - docs: Be specific about version of XML (XML 1.0r4)
    and version of C (C99); (XML 1.0r5 will need a sponsor.)
  - docs: reference.html: Promote function XML_ParseBuffer more
  - docs: reference.html: Add HTML anchors to XML_* macros
  - docs: reference.html: Upgrade to OK.css 1.2.0
  - docs: Fix typos
  - docs|CI: Use HTTPS URLs instead of HTTP at various places
  - Address compiler warnings
  - Address clang-tidy warnings
  - Version info bumped from 9:10:8 (libexpat*.so.1.8.10)
    to 10:0:9 (libexpat*.so.1.9.0); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1708430400">- Fix handling of xmlwf.1 to avoid workarounds in specfile:
  * Added libxml2-fix-xmlwf.1-handling.patch
- Call buildconf.sh to avoid (future) issues with expat_config.h.in</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1709294400">- update to 2.6.1:
  * Expose billion laughs API with XML_DTD defined and XML_GE
    undefined, regression from 2.6.0
  * Make tests independent of CPU speed, and thus more robust
- drop libxml2-fix-xmlwf.1-handling.patch, upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1710331200">- update to 2.6.2:
  * CVE-2024-28757 -- Prevent billion laughs attacks with isolated
    use of external parsers (boo#1221289)
  * Reject direct parameter entity recursion and avoid the related
    undefined behavior</changelog>
  <changelog author="david.anes@suse.com" date="1725537600">- Update to 2.6.3:
  * Security fixes:
  - CVE-2024-45490, bsc#1229930 -- Calling function XML_ParseBuffer with
    len &lt; 0 without noticing and then calling XML_GetBuffer
    will have XML_ParseBuffer fail to recognize the problem
    and XML_GetBuffer corrupt memory.
    With the fix, XML_ParseBuffer now complains with error
    XML_ERROR_INVALID_ARGUMENT just like sibling XML_Parse
    has been doing since Expat 2.2.1, and now documented.
    Impact is denial of service to potentially artitrary code
    execution.
  - CVE-2024-45491, bsc#1229931 -- Internal function dtdCopy can have an
    integer overflow for nDefaultAtts on 32-bit platforms
    (where UINT_MAX equals SIZE_MAX).
    Impact is denial of service to potentially artitrary code
    execution.
  - CVE-2024-45492, bsc#1229932 -- Internal function nextScaffoldPart can
    have an integer overflow for m_groupSize on 32-bit
    platforms (where UINT_MAX equals SIZE_MAX).
    Impact is denial of service to potentially artitrary code
    execution.
  * Other changes:
  - Autotools: Sync CMake templates with CMake 3.28
  - Autotools: Always provide path to find(1) for portability
  - Autotools: Ensure that the m4 directory always exists.
  - Autotools: Simplify handling of SIZEOF_VOID_P
  - Autotools: Support non-GNU sed
  - Autotools|CMake: Fix main() to main(void)
  - Autotools|CMake: Fix compile tests for HAVE_SYSCALL_GETRANDOM
  - Autotools|CMake: Stop requiring dos2unix
  - CMake: Fix check for symbols size_t and off_t
  - docs|tests: Convert README to Markdown and update
  - Windows: Drop support for Visual Studio &lt;=15.0/2017
  - Drop needless XML_DTD guards around is_param access
  - Fix typo in a code comment
  - Version info bumped from 10:2:9 (libexpat*.so.1.9.2)
    to 10:3:9 (libexpat*.so.1.9.3); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1727352000">- updated keyring [https://build.suse.de/request/show/345282]
- modified sources
  % expat.keyring</changelog>
  <changelog author="pgajdos@suse.com" date="1730980800">- version update to 2.6.4
  * Security fixes: [bsc#1232601][bsc#1232579]
    [#915]  CVE-2024-50602 -- Fix crash within function XML_ResumeParser
    from a NULL pointer dereference by disallowing function
    XML_StopParser to (stop or) suspend an unstarted parser.
    A new error code XML_ERROR_NOT_STARTED was introduced to
    properly communicate this situation.  // CWE-476 CWE-754
  * Other changes:
    [#903]  CMake: Add alias target "expat::expat"
    [#905]  docs: Document use via CMake &gt;=3.18 with FetchContent
    and SOURCE_SUBDIR and its consequences
    [#902]  tests: Reduce use of global parser instance
    [#904]  tests: Resolve duplicate handler
  [#317] #918  tests: Improve tests on doctype closing (ex CVE-2019-15903)
    [#914]  Fix signedness of format strings
  [#919] #920  Version info bumped from 10:3:9 (libexpat*.so.1.9.3)
    to 11:0:10 (libexpat*.so.1.10.0); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1731412800">- no source changes, just adding jira reference: jsc#SLE-21253</changelog>
  <changelog author="pgajdos@suse.com" date="1741953600">- version update to 2.7.0 (CVE-2024-8176 [bsc#1239618])
  * Security fixes:
    [#893] #973  CVE-2024-8176 -- Fix crash from chaining a large number
    of entities caused by stack overflow by resolving use of
    recursion, for all three uses of entities:
  - general entities in character data ("&lt;e&gt;&amp;g1;&lt;/e&gt;")
  - general entities in attribute values ("&lt;e k1='&amp;g1;'/&gt;")
  - parameter entities ("%p1;")
    Known impact is (reliable and easy) denial of service:
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:H/RL:O/RC:C
    (Base Score: 7.5, Temporal Score: 7.2)
    Please note that a layer of compression around XML can
    significantly reduce the minimum attack payload size.
  * Other changes:
    [#935] #937  Autotools: Make generated CMake files look for
    libexpat.@SO_MAJOR@.dylib on macOS
    [#925]  Autotools: Sync CMake templates with CMake 3.29
  [#945] #962 #966  CMake: Drop support for CMake &lt;3.13
    [#942]  CMake: Small fuzzing related improvements
    [#921]  docs: Add missing documentation of error code
    XML_ERROR_NOT_STARTED that was introduced with 2.6.4
    [#941]  docs: Document need for C++11 compiler for use from C++
    [#959]  tests/benchmark: Fix a (harmless) TOCTTOU
    [#944]  Windows: Fix installer target location of file xmlwf.xml
    for CMake
    [#953]  Windows: Address warning -Wunknown-warning-option
    about -Wno-pedantic-ms-format from LLVM MinGW
    [#971]  Address Cppcheck warnings
    [#969] #970  Mass-migrate links from http:// to https://
    [#947] #958 ..
    [#974] #975  Document changes since the previous release
    [#974] #975  Version info bumped from 11:0:10 (libexpat*.so.1.10.0)
    to 11:1:10 (libexpat*.so.1.10.1); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1743076800">- version update to 2.7.0 for SLE-15-SP7 (jsc#PED-12507)</changelog>
  <changelog author="pgajdos@suse.com" date="1743163200">- version update to 2.7.1
    Bug fixes:
    [#980] #989  Restore event pointer behavior from Expat 2.6.4
    (that the fix to CVE-2024-8176 changed in 2.7.0);
    affected API functions are:
  - XML_GetCurrentByteCount
  - XML_GetCurrentByteIndex
  - XML_GetCurrentColumnNumber
  - XML_GetCurrentLineNumber
  - XML_GetInputContext
    Other changes:
    [#976] #977  Autotools: Integrate files "fuzz/xml_lpm_fuzzer.{cpp,proto}"
    with Automake that were missing from 2.7.0 release tarballs
    [#983] #984  Fix printf format specifiers for 32bit Emscripten
    [#992]  docs: Promote OpenSSF Best Practices self-certification
    [#978]  tests/benchmark: Resolve mistaken double close
    [#986]  Address compiler warnings
    [#990] #993  Version info bumped from 11:1:10 (libexpat*.so.1.10.1)
    to 11:2:10 (libexpat*.so.1.10.2); see https://verbump.de/
    for what these numbers do
    Infrastructure:
    [#982]  CI: Start running Perl XML::Parser integration tests
    [#987]  CI: Enforce Clang Static Analyzer clean code
    [#991]  CI: Re-enable warning clang-analyzer-valist.Uninitialized
    for clang-tidy
    [#981]  CI: Cover compilation with musl
    [#983] #984  CI: Cover compilation with 32bit Emscripten
    [#976] #977  CI: Protect against fuzzer files missing from future
    release archives</changelog>
  <changelog author="martin.schreiner@suse.com" date="1759147200">- Fix CVE-2025-59375 / bsc#1249584.
- Add patch file:
  * CVE-2025-59375.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770120000">- security update
- added patches
  CVE-2026-24515 [bsc#1257144], NULL dereference (CWE-476) due to function XML_ExternalEntityParserCreate() failing to copy the encoding handler data passed to XML_SetUnknownEncodingHandler() from the parent to the subparser
  * expat-CVE-2026-24515.patch
  CVE-2026-25210 [bsc#1257496], lack of buffer size check can lead to an integer overflow
  * expat-CVE-2026-25210.patch</changelog>
  <changelog author="david.anes@suse.com" date="1774526400">- security update:
  * CVE-2026-32776: expat: libexpat: NULL pointer dereference when
    processing empty external parameter entities inside an entity
    declaration value (bsc#1259726)
  - Added patch expat-CVE-2026-32776.patch
  * CVE-2026-32777: expat: libexpat: denial of service due to
    infinite loop in DTD content parsing (bsc#1259711)
  - Added patch expat-CVE-2026-32777.patch
  * CVE-2026-32778: expat: libexpat: NULL pointer dereference in
    `setContext` on retry after an out-of-memory condition (bsc#1259729)
  - Added patch expat-CVE-2026-32778.patch</changelog>
</package>
<package pkgid="8955c064a22fae99c277d2a0cbfca2dce27703c386ccb03aa8121c2eac9c63a4" name="libexpat1-32bit" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="150700.3.3.1"/>
  <changelog author="dmueller@suse.com" date="1642420800">- update to 2.4.3 (bsc#1194251, bsc#1194362, bsc#1194474,
    bsc#1194476, bsc#1194477, bsc#1194478, bsc#1194479, bsc#1194480):
  * CVE-2021-45960 -- Fix issues with left shifts by &gt;=29 places
    resulting in
    a) realloc acting as free
    b) realloc allocating too few bytes
    c) undefined behavior
    depending on architecture and precise value
    for XML documents with &gt;=2^27+1 prefixed attributes
    on a single XML tag a la
    "&lt;r xmlns:a='[..]' a:a123='[..]' [..] /&gt;"
    where XML_ParserCreateNS is used to create the parser
    (which needs argument "-n" when running xmlwf).
    Impact is denial of service, or more.
  * CVE-2021-46143 (ZDI-CAN-16157) -- Fix integer overflow
    on variable m_groupSize in function doProlog leading
    to realloc acting as free.
    Impact is denial of service or more.
  * CVE-2022-22822 to CVE-2022-22827 -- Prevent integer overflows
    near memory allocation at multiple places.  Mitre assigned
    a dedicated CVE for each involved internal C function:
  - CVE-2022-22822 for function addBinding
  - CVE-2022-22823 for function build_model
  - CVE-2022-22824 for function defineAttribute
  - CVE-2022-22825 for function lookup
  - CVE-2022-22826 for function nextScaffoldPart
  - CVE-2022-22827 for function storeAtts
    Impact is denial of service or more.</changelog>
  <changelog author="david.anes@suse.com" date="1643630400">- update to 2.4.4 (bsc#1195217, bsc#1195054):
  * Security fixes:
  - CVE-2022-23852 -- Fix signed integer overflow
    (undefined behavior) in function XML_GetBuffer
    that is also called by function XML_Parse internally)
    for when XML_CONTEXT_BYTES is defined to &gt;0 (which is both
    common and default).
    Impact is denial of service or more.
  - CVE-2022-23990 -- Fix unsigned integer overflow in function
    doProlog triggered by large content in element type
    declarations when there is an element declaration handler
    present (from a prior call to XML_SetElementDeclHandler).
    Impact is denial of service or more.
  * Bug fixes:
  - xmlwf: Fix a memory leak on output file opening error
  * Other changes:
  - Version info bumped from 9:3:8 to 9:4:8;
    see https://verbump.de/ for what these numbers do
  * Drop unused file valid-xhtml10.png</changelog>
  <changelog author="david.anes@suse.com" date="1645272000">- update to 2.4.5 (bsc#1196171, bsc#1196169, bsc#1196168,
  bsc#1196026, bsc#1196025):
  * Security fixes:
  - CVE-2022-25235 -- Passing malformed 2- and 3-byte UTF-8
    sequences (e.g. from start tag names) to the XML
    processing application on top of Expat can cause
    arbitrary damage (e.g. code execution) depending
    on how invalid UTF-8 is handled inside the XML
    processor; validation was not their job but Expat's.
    Exploits with code execution are known to exist.
  - CVE-2022-25236 -- Passing (one or more) namespace separator
    characters in "xmlns[:prefix]" attribute values
    made Expat send malformed tag names to the XML
    processor on top of Expat which can cause
    arbitrary damage (e.g. code execution) depending
    on such unexpectable cases are handled inside the XML
    processor; validation was not their job but Expat's.
    Exploits with code execution are known to exist.
  - CVE-2022-25313 -- Fix stack exhaustion in doctype parsing
    that could be triggered by e.g. a 2 megabytes
    file with a large number of opening braces.
    Expected impact is denial of service or potentially
    arbitrary code execution.
  - CVE-2022-25314 -- Fix integer overflow in function copyString;
    only affects the encoding name parameter at parser creation
    time which is often hardcoded (rather than user input),
    takes a value in the gigabytes to trigger, and a 64-bit
    machine.  Expected impact is denial of service.
  - CVE-2022-25315 -- Fix integer overflow in function storeRawNames;
    needs input in the gigabytes and a 64-bit machine.
    Expected impact is denial of service or potentially
    arbitrary code execution.
  * Other changes:
  - Version info bumped from 9:4:8 to 9:5:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1645358400">- update to 2.4.6 (bsc#1196168, CVE-2022-25313):
  * Bug fixes:
  - Fix a regression introduced by the fix for CVE-2022-25313
    in release 2.4.5 that affects applications that (1)
    call function XML_SetElementDeclHandler and (2) are
    parsing XML that contains nested element declarations
    (e.g. "&lt;!ELEMENT junk ((bar|foo|xyz+), zebra*)&gt;").
  - Version info bumped from 9:5:8 to 9:6:8;
    see https://verbump.de/ for what these numbers do.</changelog>
  <changelog author="david.anes@suse.com" date="1646481600">- update to 2.4.7 (bsc#1196784, CVE-2022-25236):
  * Bug fixes:
  - Relax fix to CVE-2022-25236 (introduced with release 2.4.5)
    with regard to all valid URI characters (RFC 3986),
    i.e. the following set (excluding whitespace):
    ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz
    0123456789 % -._~ :/?#[]@ !$&amp;'()*+,;=
  * Other changes:
  - CMake|Windows: Store Expat version in the DLL
  - Document consequences of namespace separator choices not just
    in doc/reference.html but also in header &lt;expat.h&gt;
  - Document Expat's lack of validation of namespace URIs against
    RFC 3986, and that the XML 1.0r4 specification doesn't
    require Expat to validate namespace URIs, and that Expat
    may do more in that regard in future releases.
    If you find need for strict RFC 3986 URI validation on
    application level today, https://uriparser.github.io/ may
    be of interest.
  - Fix documentation of XML_EndDoctypeDeclHandler in &lt;expat.h&gt;
  - Document that a call to XML_FreeContentModel can be done at
    a later time from outside the element declaration handler
  - Make hardcoded namespace URIs easier to find in code
  - Update documentation on use of XML_POOR_ENTOPY on Solaris
  - tests: Resolve use of macros NAN and INFINITY for GNU G++
    4.8.2 on Solaris.
  - Version info bumped from 9:6:8 to 9:7:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1648555200">- update to 2.4.8:
  * Other changes:
  - pkg-config: Move "-lm" to section "Libs.private"
  - CMake|MSVC: Fix pkg-config section "Libs"
  - CMake|macOS: Start using linker arguments
    "-compatibility_version &lt;version&gt;" and
    "-current_version &lt;version&gt;" in a way compatible with GNU
    Libtool
  - Version info bumped from 9:7:8 to 9:8:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- update to 2.4.9: (bsc#1203438)
  * Security fixes:
  - CVE-2022-40674 -- Heap use-after-free vulnerability in
    function doContent. Expected impact is denial of service
    or potentially arbitrary code execution.
  * Bug fixes:
  - MinGW: Fix mis-compilation for -D__USE_MINGW_ANSI_STDIO=0
  - docs: Fix documentation on effect of switch XML_DTD on
    symbol visibility in doc/reference.html
  * Other changes:
  - MinGW: Make fix-xmltest-log.sh drop more Wine bug output
  - Autotools: Sync CMake templates with CMake 3.22
  - CMake: Migrate from use of CMAKE_*_POSTFIX to
    dedicated variables EXPAT_*_POSTFIX to stop affecting
    other projects
  - Windows|CMake: Add missing -DXML_STATIC to test runners
    and fuzzers
  - Windows|CMake: Render .def file from a template to fix
    linking with -DEXPAT_DTD=OFF and/or -DEXPAT_ATTR_INFO=ON
  - MinGW|CMake: Apply MSVC .def file when linking
  - MinGW|CMake: Sync library name with GNU Autotools,
    i.e. produce libexpat-1.dll rather than libexpat.dll
    by default.  Filename libexpat.dll.a is unaffected.
  - MinGW|CMake: Set missing variable CMAKE_RC_COMPILER in
    toolchain file "cmake/mingw-toolchain.cmake" to avoid
    error "windres: Command not found" on e.g. Ubuntu 20.04
  - CMake: Unify inconsistent use of set() and option() in
    context of public build time options to take need for
    set(.. FORCE) in projects using Expat by means of
    add_subdirectory(..) off Expat's users' shoulders
  - Stop exporting API symbols when building a static library
  - Resolve use of deprecated "fgrep" by "grep -F"
  - CMake: Make documentation on variables a bit more consistent
  - CMake: Drop leading whitespace from a #cmakedefine line in
    file expat_config.h.cmake
  - xmlwf: Fix harmless variable mix-up in function nsattcmp
  - Address Cppcheck warnings
  - Address Clang 15 compiler warnings
  - Version info bumped from 9:8:8 to 9:9:8;
    see https://verbump.de/ for what these numbers do
  * Infrastructure:
  - CI: Windows: Start covering MSVC 2022
  - CI: macOS: Migrate off deprecated macOS 10.15
  - CI: Linux: Make migration off deprecated Ubuntu 18.04 work
  - CI: Upgrade Clang from 14 to 15
  - apply-clang-format.sh: Add support for BSD find
  - coverage.sh: Exclude MinGW headers
  - coverage.sh: Fix name collision for -funsigned-char</changelog>
  <changelog author="david.anes@suse.com" date="1666785600">- Update to 2.5.0: (bsc#1204708)
  * Security fixes:
  - CVE-2022-43680 -- Fix heap use-after-free after overeager
    destruction of a shared DTD in function
    XML_ExternalEntityParserCreate in out-of-memory situations.
    Expected impact is denial of service or potentially arbitrary
    code execution.
  * Bug fixes:
  - Fix curruption from undefined entities
  - Fix case when parsing was suspended while processing nested
    entities
  - Stop leaking opening tag bindings after a closing tag mismatch
    error where a parser is reset through XML_ParserReset and then
    reused to parse
  - CMake: Fix generation of pkg-config file
  - MinGW|CMake: Fix static library name
  * Other changes:
  - Protect header expat_config.h from multiple inclusion
  - examples: Make use of XML_GetBuffer and be more consistent
    across examples
  - Address compiler warnings
  - Version info bumped from 9:9:8 to 9:10:8; see
    https://verbump.de/ for what these numbers do</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1670760000">- add upstream signing key and validate source signature</changelog>
  <changelog author="david.anes@suse.com" date="1707739200">- Update keyring automatically from keyserver during OBS service run.
- Explicitly use --without-docbook (before it was implicit).
- Include missing files for documentation and examples.
- Add manpage for xmlwf, which is now available in the released tarball.
- Clean the spec file a bit.
- Update to 2.6.0:
  * Security fixes:
  - CVE-2023-52425 (boo#1219559)
  - - Fix quadratic runtime issues with big tokens
    that can cause denial of service, in partial where
    dealing with compressed XML input.  Applications
    that parsed a document in one go -- a single call to
    functions XML_Parse or XML_ParseBuffer -- were not affected.
    The smaller the chunks/buffers you use for parsing
    previously, the bigger the problem prior to the fix.
    Backporters should be careful to no omit parts of
    pull request #789 and to include earlier pull request #771,
    in order to not break the fix.
  - CVE-2023-52426 (boo#1219561)
  - - Fix billion laughs attacks for users
    compiling *without* XML_DTD defined (which is not common).
    Users with XML_DTD defined have been protected since
    Expat &gt;=2.4.0 (and that was CVE-2013-0340 back then).
  * Bug fixes:
  - Fix parse-size-dependent "invalid token" error for
    external entities that start with a byte order mark
  - Fix NULL pointer dereference in setContext via
    XML_ExternalEntityParserCreate for compilation with
    XML_DTD undefined
  - Protect against closing entities out of order
  * Other changes:
  - Improve support for arc4random/arc4random_buf
  - Improve buffer growth in XML_GetBuffer and XML_Parse
  - xmlwf: Support --help and --version
  - xmlwf: Support custom buffer size for XML_GetBuffer and read
  - xmlwf: Improve language and URL clickability in help output
  - examples: Add new example "element_declarations.c"
  - Be stricter about macro XML_CONTEXT_BYTES at build time
  - Make inclusion to expat_config.h consistent
  - Autotools: configure.ac: Support --disable-maintainer-mode
  - Autotools: Sync CMake templates with CMake 3.26
  - Autotools: Make installation of shipped man page doc/xmlwf.1
    independent of docbook2man availability
  - Autotools|CMake: Add missing -DXML_STATIC to pkg-config file
    section "Cflags.private" in order to fix compilation
    against static libexpat using pkg-config on Windows
  - Autotools|CMake: Require a C99 compiler
    (a de-facto requirement already since Expat 2.2.2 of 2017)
  - Autotools|CMake: Fix PACKAGE_BUGREPORT variable
  - Autotools|CMake: Make test suite require a C++11 compiler
  - CMake: Require CMake &gt;=3.5.0
  - CMake: Lowercase off_t and size_t to help a bug in Meson
  - CMake: Sort xmlwf sources alphabetically
  - CMake|Windows: Fix generation of DLL file version info
  - CMake: Build tests/benchmark/benchmark.c as well for
    a build with -DEXPAT_BUILD_TESTS=ON
  - docs: Document the importance of isFinal + adjust tests
    accordingly
  - docs: Improve use of "NULL" and "null"
  - docs: Be specific about version of XML (XML 1.0r4)
    and version of C (C99); (XML 1.0r5 will need a sponsor.)
  - docs: reference.html: Promote function XML_ParseBuffer more
  - docs: reference.html: Add HTML anchors to XML_* macros
  - docs: reference.html: Upgrade to OK.css 1.2.0
  - docs: Fix typos
  - docs|CI: Use HTTPS URLs instead of HTTP at various places
  - Address compiler warnings
  - Address clang-tidy warnings
  - Version info bumped from 9:10:8 (libexpat*.so.1.8.10)
    to 10:0:9 (libexpat*.so.1.9.0); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1708430400">- Fix handling of xmlwf.1 to avoid workarounds in specfile:
  * Added libxml2-fix-xmlwf.1-handling.patch
- Call buildconf.sh to avoid (future) issues with expat_config.h.in</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1709294400">- update to 2.6.1:
  * Expose billion laughs API with XML_DTD defined and XML_GE
    undefined, regression from 2.6.0
  * Make tests independent of CPU speed, and thus more robust
- drop libxml2-fix-xmlwf.1-handling.patch, upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1710331200">- update to 2.6.2:
  * CVE-2024-28757 -- Prevent billion laughs attacks with isolated
    use of external parsers (boo#1221289)
  * Reject direct parameter entity recursion and avoid the related
    undefined behavior</changelog>
  <changelog author="david.anes@suse.com" date="1725537600">- Update to 2.6.3:
  * Security fixes:
  - CVE-2024-45490, bsc#1229930 -- Calling function XML_ParseBuffer with
    len &lt; 0 without noticing and then calling XML_GetBuffer
    will have XML_ParseBuffer fail to recognize the problem
    and XML_GetBuffer corrupt memory.
    With the fix, XML_ParseBuffer now complains with error
    XML_ERROR_INVALID_ARGUMENT just like sibling XML_Parse
    has been doing since Expat 2.2.1, and now documented.
    Impact is denial of service to potentially artitrary code
    execution.
  - CVE-2024-45491, bsc#1229931 -- Internal function dtdCopy can have an
    integer overflow for nDefaultAtts on 32-bit platforms
    (where UINT_MAX equals SIZE_MAX).
    Impact is denial of service to potentially artitrary code
    execution.
  - CVE-2024-45492, bsc#1229932 -- Internal function nextScaffoldPart can
    have an integer overflow for m_groupSize on 32-bit
    platforms (where UINT_MAX equals SIZE_MAX).
    Impact is denial of service to potentially artitrary code
    execution.
  * Other changes:
  - Autotools: Sync CMake templates with CMake 3.28
  - Autotools: Always provide path to find(1) for portability
  - Autotools: Ensure that the m4 directory always exists.
  - Autotools: Simplify handling of SIZEOF_VOID_P
  - Autotools: Support non-GNU sed
  - Autotools|CMake: Fix main() to main(void)
  - Autotools|CMake: Fix compile tests for HAVE_SYSCALL_GETRANDOM
  - Autotools|CMake: Stop requiring dos2unix
  - CMake: Fix check for symbols size_t and off_t
  - docs|tests: Convert README to Markdown and update
  - Windows: Drop support for Visual Studio &lt;=15.0/2017
  - Drop needless XML_DTD guards around is_param access
  - Fix typo in a code comment
  - Version info bumped from 10:2:9 (libexpat*.so.1.9.2)
    to 10:3:9 (libexpat*.so.1.9.3); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1727352000">- updated keyring [https://build.suse.de/request/show/345282]
- modified sources
  % expat.keyring</changelog>
  <changelog author="pgajdos@suse.com" date="1730980800">- version update to 2.6.4
  * Security fixes: [bsc#1232601][bsc#1232579]
    [#915]  CVE-2024-50602 -- Fix crash within function XML_ResumeParser
    from a NULL pointer dereference by disallowing function
    XML_StopParser to (stop or) suspend an unstarted parser.
    A new error code XML_ERROR_NOT_STARTED was introduced to
    properly communicate this situation.  // CWE-476 CWE-754
  * Other changes:
    [#903]  CMake: Add alias target "expat::expat"
    [#905]  docs: Document use via CMake &gt;=3.18 with FetchContent
    and SOURCE_SUBDIR and its consequences
    [#902]  tests: Reduce use of global parser instance
    [#904]  tests: Resolve duplicate handler
  [#317] #918  tests: Improve tests on doctype closing (ex CVE-2019-15903)
    [#914]  Fix signedness of format strings
  [#919] #920  Version info bumped from 10:3:9 (libexpat*.so.1.9.3)
    to 11:0:10 (libexpat*.so.1.10.0); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1731412800">- no source changes, just adding jira reference: jsc#SLE-21253</changelog>
  <changelog author="pgajdos@suse.com" date="1741953600">- version update to 2.7.0 (CVE-2024-8176 [bsc#1239618])
  * Security fixes:
    [#893] #973  CVE-2024-8176 -- Fix crash from chaining a large number
    of entities caused by stack overflow by resolving use of
    recursion, for all three uses of entities:
  - general entities in character data ("&lt;e&gt;&amp;g1;&lt;/e&gt;")
  - general entities in attribute values ("&lt;e k1='&amp;g1;'/&gt;")
  - parameter entities ("%p1;")
    Known impact is (reliable and easy) denial of service:
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:H/RL:O/RC:C
    (Base Score: 7.5, Temporal Score: 7.2)
    Please note that a layer of compression around XML can
    significantly reduce the minimum attack payload size.
  * Other changes:
    [#935] #937  Autotools: Make generated CMake files look for
    libexpat.@SO_MAJOR@.dylib on macOS
    [#925]  Autotools: Sync CMake templates with CMake 3.29
  [#945] #962 #966  CMake: Drop support for CMake &lt;3.13
    [#942]  CMake: Small fuzzing related improvements
    [#921]  docs: Add missing documentation of error code
    XML_ERROR_NOT_STARTED that was introduced with 2.6.4
    [#941]  docs: Document need for C++11 compiler for use from C++
    [#959]  tests/benchmark: Fix a (harmless) TOCTTOU
    [#944]  Windows: Fix installer target location of file xmlwf.xml
    for CMake
    [#953]  Windows: Address warning -Wunknown-warning-option
    about -Wno-pedantic-ms-format from LLVM MinGW
    [#971]  Address Cppcheck warnings
    [#969] #970  Mass-migrate links from http:// to https://
    [#947] #958 ..
    [#974] #975  Document changes since the previous release
    [#974] #975  Version info bumped from 11:0:10 (libexpat*.so.1.10.0)
    to 11:1:10 (libexpat*.so.1.10.1); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1743076800">- version update to 2.7.0 for SLE-15-SP7 (jsc#PED-12507)</changelog>
  <changelog author="pgajdos@suse.com" date="1743163200">- version update to 2.7.1
    Bug fixes:
    [#980] #989  Restore event pointer behavior from Expat 2.6.4
    (that the fix to CVE-2024-8176 changed in 2.7.0);
    affected API functions are:
  - XML_GetCurrentByteCount
  - XML_GetCurrentByteIndex
  - XML_GetCurrentColumnNumber
  - XML_GetCurrentLineNumber
  - XML_GetInputContext
    Other changes:
    [#976] #977  Autotools: Integrate files "fuzz/xml_lpm_fuzzer.{cpp,proto}"
    with Automake that were missing from 2.7.0 release tarballs
    [#983] #984  Fix printf format specifiers for 32bit Emscripten
    [#992]  docs: Promote OpenSSF Best Practices self-certification
    [#978]  tests/benchmark: Resolve mistaken double close
    [#986]  Address compiler warnings
    [#990] #993  Version info bumped from 11:1:10 (libexpat*.so.1.10.1)
    to 11:2:10 (libexpat*.so.1.10.2); see https://verbump.de/
    for what these numbers do
    Infrastructure:
    [#982]  CI: Start running Perl XML::Parser integration tests
    [#987]  CI: Enforce Clang Static Analyzer clean code
    [#991]  CI: Re-enable warning clang-analyzer-valist.Uninitialized
    for clang-tidy
    [#981]  CI: Cover compilation with musl
    [#983] #984  CI: Cover compilation with 32bit Emscripten
    [#976] #977  CI: Protect against fuzzer files missing from future
    release archives</changelog>
</package>
<package pkgid="36609c0f8e268a057906f7d8e23caf6bffec7eca9539eec23c0df4835bb5e198" name="libexpat1-32bit" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="150700.3.6.1"/>
  <changelog author="david.anes@suse.com" date="1643630400">- update to 2.4.4 (bsc#1195217, bsc#1195054):
  * Security fixes:
  - CVE-2022-23852 -- Fix signed integer overflow
    (undefined behavior) in function XML_GetBuffer
    that is also called by function XML_Parse internally)
    for when XML_CONTEXT_BYTES is defined to &gt;0 (which is both
    common and default).
    Impact is denial of service or more.
  - CVE-2022-23990 -- Fix unsigned integer overflow in function
    doProlog triggered by large content in element type
    declarations when there is an element declaration handler
    present (from a prior call to XML_SetElementDeclHandler).
    Impact is denial of service or more.
  * Bug fixes:
  - xmlwf: Fix a memory leak on output file opening error
  * Other changes:
  - Version info bumped from 9:3:8 to 9:4:8;
    see https://verbump.de/ for what these numbers do
  * Drop unused file valid-xhtml10.png</changelog>
  <changelog author="david.anes@suse.com" date="1645272000">- update to 2.4.5 (bsc#1196171, bsc#1196169, bsc#1196168,
  bsc#1196026, bsc#1196025):
  * Security fixes:
  - CVE-2022-25235 -- Passing malformed 2- and 3-byte UTF-8
    sequences (e.g. from start tag names) to the XML
    processing application on top of Expat can cause
    arbitrary damage (e.g. code execution) depending
    on how invalid UTF-8 is handled inside the XML
    processor; validation was not their job but Expat's.
    Exploits with code execution are known to exist.
  - CVE-2022-25236 -- Passing (one or more) namespace separator
    characters in "xmlns[:prefix]" attribute values
    made Expat send malformed tag names to the XML
    processor on top of Expat which can cause
    arbitrary damage (e.g. code execution) depending
    on such unexpectable cases are handled inside the XML
    processor; validation was not their job but Expat's.
    Exploits with code execution are known to exist.
  - CVE-2022-25313 -- Fix stack exhaustion in doctype parsing
    that could be triggered by e.g. a 2 megabytes
    file with a large number of opening braces.
    Expected impact is denial of service or potentially
    arbitrary code execution.
  - CVE-2022-25314 -- Fix integer overflow in function copyString;
    only affects the encoding name parameter at parser creation
    time which is often hardcoded (rather than user input),
    takes a value in the gigabytes to trigger, and a 64-bit
    machine.  Expected impact is denial of service.
  - CVE-2022-25315 -- Fix integer overflow in function storeRawNames;
    needs input in the gigabytes and a 64-bit machine.
    Expected impact is denial of service or potentially
    arbitrary code execution.
  * Other changes:
  - Version info bumped from 9:4:8 to 9:5:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1645358400">- update to 2.4.6 (bsc#1196168, CVE-2022-25313):
  * Bug fixes:
  - Fix a regression introduced by the fix for CVE-2022-25313
    in release 2.4.5 that affects applications that (1)
    call function XML_SetElementDeclHandler and (2) are
    parsing XML that contains nested element declarations
    (e.g. "&lt;!ELEMENT junk ((bar|foo|xyz+), zebra*)&gt;").
  - Version info bumped from 9:5:8 to 9:6:8;
    see https://verbump.de/ for what these numbers do.</changelog>
  <changelog author="david.anes@suse.com" date="1646481600">- update to 2.4.7 (bsc#1196784, CVE-2022-25236):
  * Bug fixes:
  - Relax fix to CVE-2022-25236 (introduced with release 2.4.5)
    with regard to all valid URI characters (RFC 3986),
    i.e. the following set (excluding whitespace):
    ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz
    0123456789 % -._~ :/?#[]@ !$&amp;'()*+,;=
  * Other changes:
  - CMake|Windows: Store Expat version in the DLL
  - Document consequences of namespace separator choices not just
    in doc/reference.html but also in header &lt;expat.h&gt;
  - Document Expat's lack of validation of namespace URIs against
    RFC 3986, and that the XML 1.0r4 specification doesn't
    require Expat to validate namespace URIs, and that Expat
    may do more in that regard in future releases.
    If you find need for strict RFC 3986 URI validation on
    application level today, https://uriparser.github.io/ may
    be of interest.
  - Fix documentation of XML_EndDoctypeDeclHandler in &lt;expat.h&gt;
  - Document that a call to XML_FreeContentModel can be done at
    a later time from outside the element declaration handler
  - Make hardcoded namespace URIs easier to find in code
  - Update documentation on use of XML_POOR_ENTOPY on Solaris
  - tests: Resolve use of macros NAN and INFINITY for GNU G++
    4.8.2 on Solaris.
  - Version info bumped from 9:6:8 to 9:7:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1648555200">- update to 2.4.8:
  * Other changes:
  - pkg-config: Move "-lm" to section "Libs.private"
  - CMake|MSVC: Fix pkg-config section "Libs"
  - CMake|macOS: Start using linker arguments
    "-compatibility_version &lt;version&gt;" and
    "-current_version &lt;version&gt;" in a way compatible with GNU
    Libtool
  - Version info bumped from 9:7:8 to 9:8:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- update to 2.4.9: (bsc#1203438)
  * Security fixes:
  - CVE-2022-40674 -- Heap use-after-free vulnerability in
    function doContent. Expected impact is denial of service
    or potentially arbitrary code execution.
  * Bug fixes:
  - MinGW: Fix mis-compilation for -D__USE_MINGW_ANSI_STDIO=0
  - docs: Fix documentation on effect of switch XML_DTD on
    symbol visibility in doc/reference.html
  * Other changes:
  - MinGW: Make fix-xmltest-log.sh drop more Wine bug output
  - Autotools: Sync CMake templates with CMake 3.22
  - CMake: Migrate from use of CMAKE_*_POSTFIX to
    dedicated variables EXPAT_*_POSTFIX to stop affecting
    other projects
  - Windows|CMake: Add missing -DXML_STATIC to test runners
    and fuzzers
  - Windows|CMake: Render .def file from a template to fix
    linking with -DEXPAT_DTD=OFF and/or -DEXPAT_ATTR_INFO=ON
  - MinGW|CMake: Apply MSVC .def file when linking
  - MinGW|CMake: Sync library name with GNU Autotools,
    i.e. produce libexpat-1.dll rather than libexpat.dll
    by default.  Filename libexpat.dll.a is unaffected.
  - MinGW|CMake: Set missing variable CMAKE_RC_COMPILER in
    toolchain file "cmake/mingw-toolchain.cmake" to avoid
    error "windres: Command not found" on e.g. Ubuntu 20.04
  - CMake: Unify inconsistent use of set() and option() in
    context of public build time options to take need for
    set(.. FORCE) in projects using Expat by means of
    add_subdirectory(..) off Expat's users' shoulders
  - Stop exporting API symbols when building a static library
  - Resolve use of deprecated "fgrep" by "grep -F"
  - CMake: Make documentation on variables a bit more consistent
  - CMake: Drop leading whitespace from a #cmakedefine line in
    file expat_config.h.cmake
  - xmlwf: Fix harmless variable mix-up in function nsattcmp
  - Address Cppcheck warnings
  - Address Clang 15 compiler warnings
  - Version info bumped from 9:8:8 to 9:9:8;
    see https://verbump.de/ for what these numbers do
  * Infrastructure:
  - CI: Windows: Start covering MSVC 2022
  - CI: macOS: Migrate off deprecated macOS 10.15
  - CI: Linux: Make migration off deprecated Ubuntu 18.04 work
  - CI: Upgrade Clang from 14 to 15
  - apply-clang-format.sh: Add support for BSD find
  - coverage.sh: Exclude MinGW headers
  - coverage.sh: Fix name collision for -funsigned-char</changelog>
  <changelog author="david.anes@suse.com" date="1666785600">- Update to 2.5.0: (bsc#1204708)
  * Security fixes:
  - CVE-2022-43680 -- Fix heap use-after-free after overeager
    destruction of a shared DTD in function
    XML_ExternalEntityParserCreate in out-of-memory situations.
    Expected impact is denial of service or potentially arbitrary
    code execution.
  * Bug fixes:
  - Fix curruption from undefined entities
  - Fix case when parsing was suspended while processing nested
    entities
  - Stop leaking opening tag bindings after a closing tag mismatch
    error where a parser is reset through XML_ParserReset and then
    reused to parse
  - CMake: Fix generation of pkg-config file
  - MinGW|CMake: Fix static library name
  * Other changes:
  - Protect header expat_config.h from multiple inclusion
  - examples: Make use of XML_GetBuffer and be more consistent
    across examples
  - Address compiler warnings
  - Version info bumped from 9:9:8 to 9:10:8; see
    https://verbump.de/ for what these numbers do</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1670760000">- add upstream signing key and validate source signature</changelog>
  <changelog author="david.anes@suse.com" date="1707739200">- Update keyring automatically from keyserver during OBS service run.
- Explicitly use --without-docbook (before it was implicit).
- Include missing files for documentation and examples.
- Add manpage for xmlwf, which is now available in the released tarball.
- Clean the spec file a bit.
- Update to 2.6.0:
  * Security fixes:
  - CVE-2023-52425 (boo#1219559)
  - - Fix quadratic runtime issues with big tokens
    that can cause denial of service, in partial where
    dealing with compressed XML input.  Applications
    that parsed a document in one go -- a single call to
    functions XML_Parse or XML_ParseBuffer -- were not affected.
    The smaller the chunks/buffers you use for parsing
    previously, the bigger the problem prior to the fix.
    Backporters should be careful to no omit parts of
    pull request #789 and to include earlier pull request #771,
    in order to not break the fix.
  - CVE-2023-52426 (boo#1219561)
  - - Fix billion laughs attacks for users
    compiling *without* XML_DTD defined (which is not common).
    Users with XML_DTD defined have been protected since
    Expat &gt;=2.4.0 (and that was CVE-2013-0340 back then).
  * Bug fixes:
  - Fix parse-size-dependent "invalid token" error for
    external entities that start with a byte order mark
  - Fix NULL pointer dereference in setContext via
    XML_ExternalEntityParserCreate for compilation with
    XML_DTD undefined
  - Protect against closing entities out of order
  * Other changes:
  - Improve support for arc4random/arc4random_buf
  - Improve buffer growth in XML_GetBuffer and XML_Parse
  - xmlwf: Support --help and --version
  - xmlwf: Support custom buffer size for XML_GetBuffer and read
  - xmlwf: Improve language and URL clickability in help output
  - examples: Add new example "element_declarations.c"
  - Be stricter about macro XML_CONTEXT_BYTES at build time
  - Make inclusion to expat_config.h consistent
  - Autotools: configure.ac: Support --disable-maintainer-mode
  - Autotools: Sync CMake templates with CMake 3.26
  - Autotools: Make installation of shipped man page doc/xmlwf.1
    independent of docbook2man availability
  - Autotools|CMake: Add missing -DXML_STATIC to pkg-config file
    section "Cflags.private" in order to fix compilation
    against static libexpat using pkg-config on Windows
  - Autotools|CMake: Require a C99 compiler
    (a de-facto requirement already since Expat 2.2.2 of 2017)
  - Autotools|CMake: Fix PACKAGE_BUGREPORT variable
  - Autotools|CMake: Make test suite require a C++11 compiler
  - CMake: Require CMake &gt;=3.5.0
  - CMake: Lowercase off_t and size_t to help a bug in Meson
  - CMake: Sort xmlwf sources alphabetically
  - CMake|Windows: Fix generation of DLL file version info
  - CMake: Build tests/benchmark/benchmark.c as well for
    a build with -DEXPAT_BUILD_TESTS=ON
  - docs: Document the importance of isFinal + adjust tests
    accordingly
  - docs: Improve use of "NULL" and "null"
  - docs: Be specific about version of XML (XML 1.0r4)
    and version of C (C99); (XML 1.0r5 will need a sponsor.)
  - docs: reference.html: Promote function XML_ParseBuffer more
  - docs: reference.html: Add HTML anchors to XML_* macros
  - docs: reference.html: Upgrade to OK.css 1.2.0
  - docs: Fix typos
  - docs|CI: Use HTTPS URLs instead of HTTP at various places
  - Address compiler warnings
  - Address clang-tidy warnings
  - Version info bumped from 9:10:8 (libexpat*.so.1.8.10)
    to 10:0:9 (libexpat*.so.1.9.0); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1708430400">- Fix handling of xmlwf.1 to avoid workarounds in specfile:
  * Added libxml2-fix-xmlwf.1-handling.patch
- Call buildconf.sh to avoid (future) issues with expat_config.h.in</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1709294400">- update to 2.6.1:
  * Expose billion laughs API with XML_DTD defined and XML_GE
    undefined, regression from 2.6.0
  * Make tests independent of CPU speed, and thus more robust
- drop libxml2-fix-xmlwf.1-handling.patch, upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1710331200">- update to 2.6.2:
  * CVE-2024-28757 -- Prevent billion laughs attacks with isolated
    use of external parsers (boo#1221289)
  * Reject direct parameter entity recursion and avoid the related
    undefined behavior</changelog>
  <changelog author="david.anes@suse.com" date="1725537600">- Update to 2.6.3:
  * Security fixes:
  - CVE-2024-45490, bsc#1229930 -- Calling function XML_ParseBuffer with
    len &lt; 0 without noticing and then calling XML_GetBuffer
    will have XML_ParseBuffer fail to recognize the problem
    and XML_GetBuffer corrupt memory.
    With the fix, XML_ParseBuffer now complains with error
    XML_ERROR_INVALID_ARGUMENT just like sibling XML_Parse
    has been doing since Expat 2.2.1, and now documented.
    Impact is denial of service to potentially artitrary code
    execution.
  - CVE-2024-45491, bsc#1229931 -- Internal function dtdCopy can have an
    integer overflow for nDefaultAtts on 32-bit platforms
    (where UINT_MAX equals SIZE_MAX).
    Impact is denial of service to potentially artitrary code
    execution.
  - CVE-2024-45492, bsc#1229932 -- Internal function nextScaffoldPart can
    have an integer overflow for m_groupSize on 32-bit
    platforms (where UINT_MAX equals SIZE_MAX).
    Impact is denial of service to potentially artitrary code
    execution.
  * Other changes:
  - Autotools: Sync CMake templates with CMake 3.28
  - Autotools: Always provide path to find(1) for portability
  - Autotools: Ensure that the m4 directory always exists.
  - Autotools: Simplify handling of SIZEOF_VOID_P
  - Autotools: Support non-GNU sed
  - Autotools|CMake: Fix main() to main(void)
  - Autotools|CMake: Fix compile tests for HAVE_SYSCALL_GETRANDOM
  - Autotools|CMake: Stop requiring dos2unix
  - CMake: Fix check for symbols size_t and off_t
  - docs|tests: Convert README to Markdown and update
  - Windows: Drop support for Visual Studio &lt;=15.0/2017
  - Drop needless XML_DTD guards around is_param access
  - Fix typo in a code comment
  - Version info bumped from 10:2:9 (libexpat*.so.1.9.2)
    to 10:3:9 (libexpat*.so.1.9.3); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1727352000">- updated keyring [https://build.suse.de/request/show/345282]
- modified sources
  % expat.keyring</changelog>
  <changelog author="pgajdos@suse.com" date="1730980800">- version update to 2.6.4
  * Security fixes: [bsc#1232601][bsc#1232579]
    [#915]  CVE-2024-50602 -- Fix crash within function XML_ResumeParser
    from a NULL pointer dereference by disallowing function
    XML_StopParser to (stop or) suspend an unstarted parser.
    A new error code XML_ERROR_NOT_STARTED was introduced to
    properly communicate this situation.  // CWE-476 CWE-754
  * Other changes:
    [#903]  CMake: Add alias target "expat::expat"
    [#905]  docs: Document use via CMake &gt;=3.18 with FetchContent
    and SOURCE_SUBDIR and its consequences
    [#902]  tests: Reduce use of global parser instance
    [#904]  tests: Resolve duplicate handler
  [#317] #918  tests: Improve tests on doctype closing (ex CVE-2019-15903)
    [#914]  Fix signedness of format strings
  [#919] #920  Version info bumped from 10:3:9 (libexpat*.so.1.9.3)
    to 11:0:10 (libexpat*.so.1.10.0); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1731412800">- no source changes, just adding jira reference: jsc#SLE-21253</changelog>
  <changelog author="pgajdos@suse.com" date="1741953600">- version update to 2.7.0 (CVE-2024-8176 [bsc#1239618])
  * Security fixes:
    [#893] #973  CVE-2024-8176 -- Fix crash from chaining a large number
    of entities caused by stack overflow by resolving use of
    recursion, for all three uses of entities:
  - general entities in character data ("&lt;e&gt;&amp;g1;&lt;/e&gt;")
  - general entities in attribute values ("&lt;e k1='&amp;g1;'/&gt;")
  - parameter entities ("%p1;")
    Known impact is (reliable and easy) denial of service:
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:H/RL:O/RC:C
    (Base Score: 7.5, Temporal Score: 7.2)
    Please note that a layer of compression around XML can
    significantly reduce the minimum attack payload size.
  * Other changes:
    [#935] #937  Autotools: Make generated CMake files look for
    libexpat.@SO_MAJOR@.dylib on macOS
    [#925]  Autotools: Sync CMake templates with CMake 3.29
  [#945] #962 #966  CMake: Drop support for CMake &lt;3.13
    [#942]  CMake: Small fuzzing related improvements
    [#921]  docs: Add missing documentation of error code
    XML_ERROR_NOT_STARTED that was introduced with 2.6.4
    [#941]  docs: Document need for C++11 compiler for use from C++
    [#959]  tests/benchmark: Fix a (harmless) TOCTTOU
    [#944]  Windows: Fix installer target location of file xmlwf.xml
    for CMake
    [#953]  Windows: Address warning -Wunknown-warning-option
    about -Wno-pedantic-ms-format from LLVM MinGW
    [#971]  Address Cppcheck warnings
    [#969] #970  Mass-migrate links from http:// to https://
    [#947] #958 ..
    [#974] #975  Document changes since the previous release
    [#974] #975  Version info bumped from 11:0:10 (libexpat*.so.1.10.0)
    to 11:1:10 (libexpat*.so.1.10.1); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1743076800">- version update to 2.7.0 for SLE-15-SP7 (jsc#PED-12507)</changelog>
  <changelog author="pgajdos@suse.com" date="1743163200">- version update to 2.7.1
    Bug fixes:
    [#980] #989  Restore event pointer behavior from Expat 2.6.4
    (that the fix to CVE-2024-8176 changed in 2.7.0);
    affected API functions are:
  - XML_GetCurrentByteCount
  - XML_GetCurrentByteIndex
  - XML_GetCurrentColumnNumber
  - XML_GetCurrentLineNumber
  - XML_GetInputContext
    Other changes:
    [#976] #977  Autotools: Integrate files "fuzz/xml_lpm_fuzzer.{cpp,proto}"
    with Automake that were missing from 2.7.0 release tarballs
    [#983] #984  Fix printf format specifiers for 32bit Emscripten
    [#992]  docs: Promote OpenSSF Best Practices self-certification
    [#978]  tests/benchmark: Resolve mistaken double close
    [#986]  Address compiler warnings
    [#990] #993  Version info bumped from 11:1:10 (libexpat*.so.1.10.1)
    to 11:2:10 (libexpat*.so.1.10.2); see https://verbump.de/
    for what these numbers do
    Infrastructure:
    [#982]  CI: Start running Perl XML::Parser integration tests
    [#987]  CI: Enforce Clang Static Analyzer clean code
    [#991]  CI: Re-enable warning clang-analyzer-valist.Uninitialized
    for clang-tidy
    [#981]  CI: Cover compilation with musl
    [#983] #984  CI: Cover compilation with 32bit Emscripten
    [#976] #977  CI: Protect against fuzzer files missing from future
    release archives</changelog>
  <changelog author="martin.schreiner@suse.com" date="1759147200">- Fix CVE-2025-59375 / bsc#1249584.
- Add patch file:
  * CVE-2025-59375.patch</changelog>
</package>
<package pkgid="47b4fca0de6e628a212031a2998539ab539e177bc689e6e5df2f020ed7d2e507" name="libexpat1-32bit" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="150700.3.9.2"/>
  <changelog author="david.anes@suse.com" date="1645272000">- update to 2.4.5 (bsc#1196171, bsc#1196169, bsc#1196168,
  bsc#1196026, bsc#1196025):
  * Security fixes:
  - CVE-2022-25235 -- Passing malformed 2- and 3-byte UTF-8
    sequences (e.g. from start tag names) to the XML
    processing application on top of Expat can cause
    arbitrary damage (e.g. code execution) depending
    on how invalid UTF-8 is handled inside the XML
    processor; validation was not their job but Expat's.
    Exploits with code execution are known to exist.
  - CVE-2022-25236 -- Passing (one or more) namespace separator
    characters in "xmlns[:prefix]" attribute values
    made Expat send malformed tag names to the XML
    processor on top of Expat which can cause
    arbitrary damage (e.g. code execution) depending
    on such unexpectable cases are handled inside the XML
    processor; validation was not their job but Expat's.
    Exploits with code execution are known to exist.
  - CVE-2022-25313 -- Fix stack exhaustion in doctype parsing
    that could be triggered by e.g. a 2 megabytes
    file with a large number of opening braces.
    Expected impact is denial of service or potentially
    arbitrary code execution.
  - CVE-2022-25314 -- Fix integer overflow in function copyString;
    only affects the encoding name parameter at parser creation
    time which is often hardcoded (rather than user input),
    takes a value in the gigabytes to trigger, and a 64-bit
    machine.  Expected impact is denial of service.
  - CVE-2022-25315 -- Fix integer overflow in function storeRawNames;
    needs input in the gigabytes and a 64-bit machine.
    Expected impact is denial of service or potentially
    arbitrary code execution.
  * Other changes:
  - Version info bumped from 9:4:8 to 9:5:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1645358400">- update to 2.4.6 (bsc#1196168, CVE-2022-25313):
  * Bug fixes:
  - Fix a regression introduced by the fix for CVE-2022-25313
    in release 2.4.5 that affects applications that (1)
    call function XML_SetElementDeclHandler and (2) are
    parsing XML that contains nested element declarations
    (e.g. "&lt;!ELEMENT junk ((bar|foo|xyz+), zebra*)&gt;").
  - Version info bumped from 9:5:8 to 9:6:8;
    see https://verbump.de/ for what these numbers do.</changelog>
  <changelog author="david.anes@suse.com" date="1646481600">- update to 2.4.7 (bsc#1196784, CVE-2022-25236):
  * Bug fixes:
  - Relax fix to CVE-2022-25236 (introduced with release 2.4.5)
    with regard to all valid URI characters (RFC 3986),
    i.e. the following set (excluding whitespace):
    ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz
    0123456789 % -._~ :/?#[]@ !$&amp;'()*+,;=
  * Other changes:
  - CMake|Windows: Store Expat version in the DLL
  - Document consequences of namespace separator choices not just
    in doc/reference.html but also in header &lt;expat.h&gt;
  - Document Expat's lack of validation of namespace URIs against
    RFC 3986, and that the XML 1.0r4 specification doesn't
    require Expat to validate namespace URIs, and that Expat
    may do more in that regard in future releases.
    If you find need for strict RFC 3986 URI validation on
    application level today, https://uriparser.github.io/ may
    be of interest.
  - Fix documentation of XML_EndDoctypeDeclHandler in &lt;expat.h&gt;
  - Document that a call to XML_FreeContentModel can be done at
    a later time from outside the element declaration handler
  - Make hardcoded namespace URIs easier to find in code
  - Update documentation on use of XML_POOR_ENTOPY on Solaris
  - tests: Resolve use of macros NAN and INFINITY for GNU G++
    4.8.2 on Solaris.
  - Version info bumped from 9:6:8 to 9:7:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1648555200">- update to 2.4.8:
  * Other changes:
  - pkg-config: Move "-lm" to section "Libs.private"
  - CMake|MSVC: Fix pkg-config section "Libs"
  - CMake|macOS: Start using linker arguments
    "-compatibility_version &lt;version&gt;" and
    "-current_version &lt;version&gt;" in a way compatible with GNU
    Libtool
  - Version info bumped from 9:7:8 to 9:8:8;
    see https://verbump.de/ for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1663675200">- update to 2.4.9: (bsc#1203438)
  * Security fixes:
  - CVE-2022-40674 -- Heap use-after-free vulnerability in
    function doContent. Expected impact is denial of service
    or potentially arbitrary code execution.
  * Bug fixes:
  - MinGW: Fix mis-compilation for -D__USE_MINGW_ANSI_STDIO=0
  - docs: Fix documentation on effect of switch XML_DTD on
    symbol visibility in doc/reference.html
  * Other changes:
  - MinGW: Make fix-xmltest-log.sh drop more Wine bug output
  - Autotools: Sync CMake templates with CMake 3.22
  - CMake: Migrate from use of CMAKE_*_POSTFIX to
    dedicated variables EXPAT_*_POSTFIX to stop affecting
    other projects
  - Windows|CMake: Add missing -DXML_STATIC to test runners
    and fuzzers
  - Windows|CMake: Render .def file from a template to fix
    linking with -DEXPAT_DTD=OFF and/or -DEXPAT_ATTR_INFO=ON
  - MinGW|CMake: Apply MSVC .def file when linking
  - MinGW|CMake: Sync library name with GNU Autotools,
    i.e. produce libexpat-1.dll rather than libexpat.dll
    by default.  Filename libexpat.dll.a is unaffected.
  - MinGW|CMake: Set missing variable CMAKE_RC_COMPILER in
    toolchain file "cmake/mingw-toolchain.cmake" to avoid
    error "windres: Command not found" on e.g. Ubuntu 20.04
  - CMake: Unify inconsistent use of set() and option() in
    context of public build time options to take need for
    set(.. FORCE) in projects using Expat by means of
    add_subdirectory(..) off Expat's users' shoulders
  - Stop exporting API symbols when building a static library
  - Resolve use of deprecated "fgrep" by "grep -F"
  - CMake: Make documentation on variables a bit more consistent
  - CMake: Drop leading whitespace from a #cmakedefine line in
    file expat_config.h.cmake
  - xmlwf: Fix harmless variable mix-up in function nsattcmp
  - Address Cppcheck warnings
  - Address Clang 15 compiler warnings
  - Version info bumped from 9:8:8 to 9:9:8;
    see https://verbump.de/ for what these numbers do
  * Infrastructure:
  - CI: Windows: Start covering MSVC 2022
  - CI: macOS: Migrate off deprecated macOS 10.15
  - CI: Linux: Make migration off deprecated Ubuntu 18.04 work
  - CI: Upgrade Clang from 14 to 15
  - apply-clang-format.sh: Add support for BSD find
  - coverage.sh: Exclude MinGW headers
  - coverage.sh: Fix name collision for -funsigned-char</changelog>
  <changelog author="david.anes@suse.com" date="1666785600">- Update to 2.5.0: (bsc#1204708)
  * Security fixes:
  - CVE-2022-43680 -- Fix heap use-after-free after overeager
    destruction of a shared DTD in function
    XML_ExternalEntityParserCreate in out-of-memory situations.
    Expected impact is denial of service or potentially arbitrary
    code execution.
  * Bug fixes:
  - Fix curruption from undefined entities
  - Fix case when parsing was suspended while processing nested
    entities
  - Stop leaking opening tag bindings after a closing tag mismatch
    error where a parser is reset through XML_ParserReset and then
    reused to parse
  - CMake: Fix generation of pkg-config file
  - MinGW|CMake: Fix static library name
  * Other changes:
  - Protect header expat_config.h from multiple inclusion
  - examples: Make use of XML_GetBuffer and be more consistent
    across examples
  - Address compiler warnings
  - Version info bumped from 9:9:8 to 9:10:8; see
    https://verbump.de/ for what these numbers do</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1670760000">- add upstream signing key and validate source signature</changelog>
  <changelog author="david.anes@suse.com" date="1707739200">- Update keyring automatically from keyserver during OBS service run.
- Explicitly use --without-docbook (before it was implicit).
- Include missing files for documentation and examples.
- Add manpage for xmlwf, which is now available in the released tarball.
- Clean the spec file a bit.
- Update to 2.6.0:
  * Security fixes:
  - CVE-2023-52425 (boo#1219559)
  - - Fix quadratic runtime issues with big tokens
    that can cause denial of service, in partial where
    dealing with compressed XML input.  Applications
    that parsed a document in one go -- a single call to
    functions XML_Parse or XML_ParseBuffer -- were not affected.
    The smaller the chunks/buffers you use for parsing
    previously, the bigger the problem prior to the fix.
    Backporters should be careful to no omit parts of
    pull request #789 and to include earlier pull request #771,
    in order to not break the fix.
  - CVE-2023-52426 (boo#1219561)
  - - Fix billion laughs attacks for users
    compiling *without* XML_DTD defined (which is not common).
    Users with XML_DTD defined have been protected since
    Expat &gt;=2.4.0 (and that was CVE-2013-0340 back then).
  * Bug fixes:
  - Fix parse-size-dependent "invalid token" error for
    external entities that start with a byte order mark
  - Fix NULL pointer dereference in setContext via
    XML_ExternalEntityParserCreate for compilation with
    XML_DTD undefined
  - Protect against closing entities out of order
  * Other changes:
  - Improve support for arc4random/arc4random_buf
  - Improve buffer growth in XML_GetBuffer and XML_Parse
  - xmlwf: Support --help and --version
  - xmlwf: Support custom buffer size for XML_GetBuffer and read
  - xmlwf: Improve language and URL clickability in help output
  - examples: Add new example "element_declarations.c"
  - Be stricter about macro XML_CONTEXT_BYTES at build time
  - Make inclusion to expat_config.h consistent
  - Autotools: configure.ac: Support --disable-maintainer-mode
  - Autotools: Sync CMake templates with CMake 3.26
  - Autotools: Make installation of shipped man page doc/xmlwf.1
    independent of docbook2man availability
  - Autotools|CMake: Add missing -DXML_STATIC to pkg-config file
    section "Cflags.private" in order to fix compilation
    against static libexpat using pkg-config on Windows
  - Autotools|CMake: Require a C99 compiler
    (a de-facto requirement already since Expat 2.2.2 of 2017)
  - Autotools|CMake: Fix PACKAGE_BUGREPORT variable
  - Autotools|CMake: Make test suite require a C++11 compiler
  - CMake: Require CMake &gt;=3.5.0
  - CMake: Lowercase off_t and size_t to help a bug in Meson
  - CMake: Sort xmlwf sources alphabetically
  - CMake|Windows: Fix generation of DLL file version info
  - CMake: Build tests/benchmark/benchmark.c as well for
    a build with -DEXPAT_BUILD_TESTS=ON
  - docs: Document the importance of isFinal + adjust tests
    accordingly
  - docs: Improve use of "NULL" and "null"
  - docs: Be specific about version of XML (XML 1.0r4)
    and version of C (C99); (XML 1.0r5 will need a sponsor.)
  - docs: reference.html: Promote function XML_ParseBuffer more
  - docs: reference.html: Add HTML anchors to XML_* macros
  - docs: reference.html: Upgrade to OK.css 1.2.0
  - docs: Fix typos
  - docs|CI: Use HTTPS URLs instead of HTTP at various places
  - Address compiler warnings
  - Address clang-tidy warnings
  - Version info bumped from 9:10:8 (libexpat*.so.1.8.10)
    to 10:0:9 (libexpat*.so.1.9.0); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="david.anes@suse.com" date="1708430400">- Fix handling of xmlwf.1 to avoid workarounds in specfile:
  * Added libxml2-fix-xmlwf.1-handling.patch
- Call buildconf.sh to avoid (future) issues with expat_config.h.in</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1709294400">- update to 2.6.1:
  * Expose billion laughs API with XML_DTD defined and XML_GE
    undefined, regression from 2.6.0
  * Make tests independent of CPU speed, and thus more robust
- drop libxml2-fix-xmlwf.1-handling.patch, upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1710331200">- update to 2.6.2:
  * CVE-2024-28757 -- Prevent billion laughs attacks with isolated
    use of external parsers (boo#1221289)
  * Reject direct parameter entity recursion and avoid the related
    undefined behavior</changelog>
  <changelog author="david.anes@suse.com" date="1725537600">- Update to 2.6.3:
  * Security fixes:
  - CVE-2024-45490, bsc#1229930 -- Calling function XML_ParseBuffer with
    len &lt; 0 without noticing and then calling XML_GetBuffer
    will have XML_ParseBuffer fail to recognize the problem
    and XML_GetBuffer corrupt memory.
    With the fix, XML_ParseBuffer now complains with error
    XML_ERROR_INVALID_ARGUMENT just like sibling XML_Parse
    has been doing since Expat 2.2.1, and now documented.
    Impact is denial of service to potentially artitrary code
    execution.
  - CVE-2024-45491, bsc#1229931 -- Internal function dtdCopy can have an
    integer overflow for nDefaultAtts on 32-bit platforms
    (where UINT_MAX equals SIZE_MAX).
    Impact is denial of service to potentially artitrary code
    execution.
  - CVE-2024-45492, bsc#1229932 -- Internal function nextScaffoldPart can
    have an integer overflow for m_groupSize on 32-bit
    platforms (where UINT_MAX equals SIZE_MAX).
    Impact is denial of service to potentially artitrary code
    execution.
  * Other changes:
  - Autotools: Sync CMake templates with CMake 3.28
  - Autotools: Always provide path to find(1) for portability
  - Autotools: Ensure that the m4 directory always exists.
  - Autotools: Simplify handling of SIZEOF_VOID_P
  - Autotools: Support non-GNU sed
  - Autotools|CMake: Fix main() to main(void)
  - Autotools|CMake: Fix compile tests for HAVE_SYSCALL_GETRANDOM
  - Autotools|CMake: Stop requiring dos2unix
  - CMake: Fix check for symbols size_t and off_t
  - docs|tests: Convert README to Markdown and update
  - Windows: Drop support for Visual Studio &lt;=15.0/2017
  - Drop needless XML_DTD guards around is_param access
  - Fix typo in a code comment
  - Version info bumped from 10:2:9 (libexpat*.so.1.9.2)
    to 10:3:9 (libexpat*.so.1.9.3); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1727352000">- updated keyring [https://build.suse.de/request/show/345282]
- modified sources
  % expat.keyring</changelog>
  <changelog author="pgajdos@suse.com" date="1730980800">- version update to 2.6.4
  * Security fixes: [bsc#1232601][bsc#1232579]
    [#915]  CVE-2024-50602 -- Fix crash within function XML_ResumeParser
    from a NULL pointer dereference by disallowing function
    XML_StopParser to (stop or) suspend an unstarted parser.
    A new error code XML_ERROR_NOT_STARTED was introduced to
    properly communicate this situation.  // CWE-476 CWE-754
  * Other changes:
    [#903]  CMake: Add alias target "expat::expat"
    [#905]  docs: Document use via CMake &gt;=3.18 with FetchContent
    and SOURCE_SUBDIR and its consequences
    [#902]  tests: Reduce use of global parser instance
    [#904]  tests: Resolve duplicate handler
  [#317] #918  tests: Improve tests on doctype closing (ex CVE-2019-15903)
    [#914]  Fix signedness of format strings
  [#919] #920  Version info bumped from 10:3:9 (libexpat*.so.1.9.3)
    to 11:0:10 (libexpat*.so.1.10.0); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1731412800">- no source changes, just adding jira reference: jsc#SLE-21253</changelog>
  <changelog author="pgajdos@suse.com" date="1741953600">- version update to 2.7.0 (CVE-2024-8176 [bsc#1239618])
  * Security fixes:
    [#893] #973  CVE-2024-8176 -- Fix crash from chaining a large number
    of entities caused by stack overflow by resolving use of
    recursion, for all three uses of entities:
  - general entities in character data ("&lt;e&gt;&amp;g1;&lt;/e&gt;")
  - general entities in attribute values ("&lt;e k1='&amp;g1;'/&gt;")
  - parameter entities ("%p1;")
    Known impact is (reliable and easy) denial of service:
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:H/RL:O/RC:C
    (Base Score: 7.5, Temporal Score: 7.2)
    Please note that a layer of compression around XML can
    significantly reduce the minimum attack payload size.
  * Other changes:
    [#935] #937  Autotools: Make generated CMake files look for
    libexpat.@SO_MAJOR@.dylib on macOS
    [#925]  Autotools: Sync CMake templates with CMake 3.29
  [#945] #962 #966  CMake: Drop support for CMake &lt;3.13
    [#942]  CMake: Small fuzzing related improvements
    [#921]  docs: Add missing documentation of error code
    XML_ERROR_NOT_STARTED that was introduced with 2.6.4
    [#941]  docs: Document need for C++11 compiler for use from C++
    [#959]  tests/benchmark: Fix a (harmless) TOCTTOU
    [#944]  Windows: Fix installer target location of file xmlwf.xml
    for CMake
    [#953]  Windows: Address warning -Wunknown-warning-option
    about -Wno-pedantic-ms-format from LLVM MinGW
    [#971]  Address Cppcheck warnings
    [#969] #970  Mass-migrate links from http:// to https://
    [#947] #958 ..
    [#974] #975  Document changes since the previous release
    [#974] #975  Version info bumped from 11:0:10 (libexpat*.so.1.10.0)
    to 11:1:10 (libexpat*.so.1.10.1); see https://verbump.de/
    for what these numbers do</changelog>
  <changelog author="pgajdos@suse.com" date="1743076800">- version update to 2.7.0 for SLE-15-SP7 (jsc#PED-12507)</changelog>
  <changelog author="pgajdos@suse.com" date="1743163200">- version update to 2.7.1
    Bug fixes:
    [#980] #989  Restore event pointer behavior from Expat 2.6.4
    (that the fix to CVE-2024-8176 changed in 2.7.0);
    affected API functions are:
  - XML_GetCurrentByteCount
  - XML_GetCurrentByteIndex
  - XML_GetCurrentColumnNumber
  - XML_GetCurrentLineNumber
  - XML_GetInputContext
    Other changes:
    [#976] #977  Autotools: Integrate files "fuzz/xml_lpm_fuzzer.{cpp,proto}"
    with Automake that were missing from 2.7.0 release tarballs
    [#983] #984  Fix printf format specifiers for 32bit Emscripten
    [#992]  docs: Promote OpenSSF Best Practices self-certification
    [#978]  tests/benchmark: Resolve mistaken double close
    [#986]  Address compiler warnings
    [#990] #993  Version info bumped from 11:1:10 (libexpat*.so.1.10.1)
    to 11:2:10 (libexpat*.so.1.10.2); see https://verbump.de/
    for what these numbers do
    Infrastructure:
    [#982]  CI: Start running Perl XML::Parser integration tests
    [#987]  CI: Enforce Clang Static Analyzer clean code
    [#991]  CI: Re-enable warning clang-analyzer-valist.Uninitialized
    for clang-tidy
    [#981]  CI: Cover compilation with musl
    [#983] #984  CI: Cover compilation with 32bit Emscripten
    [#976] #977  CI: Protect against fuzzer files missing from future
    release archives</changelog>
  <changelog author="martin.schreiner@suse.com" date="1759147200">- Fix CVE-2025-59375 / bsc#1249584.
- Add patch file:
  * CVE-2025-59375.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770120000">- security update
- added patches
  CVE-2026-24515 [bsc#1257144], NULL dereference (CWE-476) due to function XML_ExternalEntityParserCreate() failing to copy the encoding handler data passed to XML_SetUnknownEncodingHandler() from the parent to the subparser
  * expat-CVE-2026-24515.patch
  CVE-2026-25210 [bsc#1257496], lack of buffer size check can lead to an integer overflow
  * expat-CVE-2026-25210.patch</changelog>
</package>
<package pkgid="27fe1bdd7ee8b87c5be402e6d11ab11dfcf1e2c5f64f6adf86bc42fc8241e97a" name="libfa1" arch="x86_64">
  <version epoch="0" ver="1.14.1" rel="150600.3.3.1"/>
  <changelog author="vcizek@suse.com" date="1509019200">- Version update to 1.9.0:
  - General changes/additions
  * Fix error in handling escaped whitespace at the end of path expressions
    (addresses CVE-2017-7555)
  * several improvements to the error messages when transforming a tree
    back to text fails. They now make it clearer what part of the tree
    was problematic, and what the tree should have looked like.
  * Fixed the pkg-config file, which should now be usable
  * Fix handling of backslash-escaping in strings and regular expressions
    in the lens language. We used to handle constructs like "\\" and
    /\\\\/ incorrectly. (Issue #495)
  * do not unescape the default value of a del on create; otherwise we are
    double unescaping these strings (Issue #507)
  * remove tempfile when saving files because destination is not writable
    (Issue #479)
  * span information is now updated on save (Issue #467)
  * fix lots of warnings generated by gcc 7.1
  * Various changes to reduce bashisms in tests and make them run on
    FreeBSD (Romain Tartière)
  - API changes
  * add function aug_ns_attr to allow iterating through a nodeset
    quickly. See examples/dump.c for an example of how to use them
    instead of aug_get, aug_label etc. and for a way to measure
    performance gains.
  - Lens changes/additions
  * Ceph: new lens for /etc/ceph/ceph.conf
  * Cgconfig: accept fperm &amp; dperm in admin &amp; task (Pino Toscano)
  * Dovecot: also load files from /usr/local/etc (Roy Hubbard)
  * Exports: relax the rules for the path at the beginning of a line so
    that double-quoted paths are legal, too
  * Getcap: new lens to parse generic termcap-style capability databases
  * Grub: accept toplevel 'boot' entry (Pino Toscano)
  * Httpd: handle empty comments with a continuation line (Issue #423);
    handle '&gt;""' in a directive properly (Issue #429); make space between
    quoted arguments optional (Issue #435); accept quoted strings as part
    of bare arguments (Issue #470)
  * Nginx: load files from sites-available directory (Omer Katz) (Issue #471)
  * Nslcd: new lens for nss-pam-ldapd config (Jose Plana)
  * Oz: New lense for /etc/oz/oz.cnf
  * postfix lenses: also load files from /usr/local/etc (Roy Hubbard)
  * Properties: accept DOS line endings (Issue #468)
  * Rtadvd: new lens to parse the rtadvd configuration file (Matt Dainty)
  * Rsyslog: load files from /etc/rsyslog.d (Doug Wilson) (Issue #475);
    allow spaces before the # starting a comment; allow comments inside
    config statements like 'module'
  * Ssh: accept '=' to separate keyword from arguments
  * Sshd: split HostKeyAlgorithms into list of values; recognize quoted
    group names with spaces in them (Issue #477)
  * Sudoers: recognize "match_group_by_gid" (Luigi Toscano) (Issue #482)
  * Syslog: allow spaces before the # starting a comment
  * Termcap: new lens to parse termcap capability databases (Matt Dainty)
  * Vsftpd: accept seccomp_sandbox (Denys Stroebel)
  * Xymon: accept 'group-sorted' directive (Issue #462)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1521547200">- update to 1.10.1:
  General changes/additions
    New CLI utility 'augmatch' to print the tree for a file and select
    some of its contents
    New command 'count' in augtool
    New function 'not(bool) -&gt; bool' for path expressions
    The path expression 'label[. = "value"]' can now be written more
    concisely as 'label["value"]'
  API changes
    libfa has now a function fa_json to export an FA as a JSON file, and
    fa_state_* functions that make it possible to iterate over the FA's
    states and transitions. (Pedro Valero Mejia)
    Add functions aug_ns_label, aug_ns_value, aug_ns_count, and
    aug_ns_path to get the label (with index), the value, the number of
    nodes, and the fully qualified path for nodes stored in a nodeset in
    a variable efficiently
  Lens changes/additions
    Grubenv: new lens to process /boot/grub/grubenv (omgold)
    Httpd: also read files from /etc/httpd/conf.modules.d/*.conf
    (Tomas Meszaros) (Issue #537)
    Nsswitch: allow comments at the end of a line (Philip Hahn) (Issue #517)
    Ntp: accept 'ntpsigndsocket' statement (Philip Hahn) (Issue #516)
    Properties: accept empty comments with DOS line endings (Issue #161)
    Rancid: new lens for RANCiD router databases (Matt Dainty)
    Resolv: accept empty comments with DOS line endings (Issue #161)
    Systemd: also process /etc/systemd/logind.conf (Pat Riehecky)
    YAML: process a document that is just a sequence (John Vandenberg)
- drop chrpath dependency, the offending dump binary is no longer shipped</changelog>
  <changelog author="jengelh@inai.de" date="1521547201">- Fix RPM groups.</changelog>
  <changelog author="ecsos@opensuse.org" date="1545652800">- update to 1.11.0
  General changes/additions
  - augmatch: add a --quiet option; make the exit status useful
    to tell whether there was a match or not
  - Drastically reduce the amount of memory needed to evaluate
    complex path expressions against large files (Issue #569)
  - Fix a segfault on OSX when 'augmatch' is run without any
    arguments (Issue #556)
  API changes
  - aug_source did not in fact return the source; and always
    returned NULL for that. That has been fixed.
  Lens changes/additions
  - Chrony: add new options supported in chrony 3.2 and 3.3
    (Miroslav Lichvar)
  - Dhclient: fix parsing of append/prepend and similar
    directives (John Morrissey)
  - Fstab: allow leading whitespace in mount entry lines
    (Pino Toscano) (Issue #544)
  - Grub: tolerate some invalid entries. Those invalid entries
    get mapped to '#error' nodes
  - Httpd: accept comments with whitespace right after a tag
    opening a section (Issue #577)
  - Json: allow escaped slashes in strings (Issue #557)
  - Multipath: accept regular expressions for devnode, wwid,
    and property in blacklist and blacklist_exceptions sections
    (Issue #564)
  - Nginx: parse /etc/nginx/sites-enabled (plumbeo) allow
    semicolons inside double quoted strings in simple directives,
    and allow simple directives without an argument (Issue #566)
  - Redis: accept the 'bind' statement with multiple IP addresses
    (yannh) (Issue #194)
  - Rsyslog: support include() directive introduced in
    rsyslog 8.33
  - Strongswan: new lens (Kaarle Ritvanen)
  - Systemd: do not try to treat *.d or *.wants directories as
    configuration files (Issue #548)</changelog>
  <changelog author="vcizek@suse.com" date="1549972800">- Don't ignore %check test result, the testsuite now successfully
  passes</changelog>
  <changelog author="mliska@suse.cz" date="1552305600">- Add gcc9-disable-broken-test.patch in order to address bsc#1120894.</changelog>
  <changelog author="elimat@opensuse.org" date="1594123200">- update to 1.12.0
  General changes/additions
  - update gnulib to 91584ed6
  Lens changes/additions
  - Anaconda: new lens to process /etc/sysconfig/anaconda instead of Shellvars (Pino Toscano) (Issue #597)
  - DevfsRules: add lens for FreeBSD devfs.rules files
  - Dovecot: permit ! in block titles (Nathan Ward) (Issue #599)
  - Hostname: Allow creation of hostname when file is missing (David Farrell) (Issue #606)
  - Krb5: add more pkinit_* options (Issue #603)
  - Logrotate: fix missing recognition of double quoted filenames (Issue #611)
  - Multipath: accept values enclosed in quotes (Issue #583)
  - Nginx: support unix sockets as server address (Issue #618)
  - Nsswitch: add merge action (Issue #609)
  - Pam: accept continuation lines (Issue #590)
  - Puppetfile: allow symbols as (optional) values (Issue #619) allow comments in entries (Issue #620)
  - Rsyslog: support dynamic file paths (Issue #622) treat #!/+/- as comment (arnolda, PR #595)
  - Syslog: accept 'include' directive (Issue #486)
  - Semanage: new lens to process /etc/selinux/semanage.conf instead of Simplevars (Pino Toscano) (Issue #594)
  - Shellvars: allow and/or in @if conditions (#582) accept functions wrapped in round brackets, accept variables with a dash in their name, exclude csh/tcsh profile scripts (Pino Toscano) (Issue #600) accept variable as command (Issue #601)
  - Ssh: accept RekeyLimit (Issue #605)
  - Sshd: accept '=' to separate option names from their values (Emil Dragu, #587)
  - Sudoers: support 'always_query_group_plugin' flag (Steve Traylen, #588)
  - Strongswan: parse lists. This is a backwards-incompatible change since list entries that were parsed into a single string are now split into a list of entries (Kaarle Ritvanen)
  - Toml: new lens to parse .toml files (PR #91)
  - Xorg: accept empty values for options (arnolda, PR #596)
- refresh patches
- run spec-cleaner</changelog>
  <changelog author="jsikes@suse.com" date="1612872000">- Add new directives and options supported in chrony since 3.3 up to 4.0.
  * augeas-new_options_for_chrony.patch
  * [bsc#1178470]
  * sourced from https://github.com/hercules-team/augeas/pull/698</changelog>
  <changelog author="jsikes@suse.com" date="1622030400">- Allow all printable ASCII characters in WPA-PSK definition
  * augeas-allow_printable_ASCII.patch
  * bsc#1185524
  * Sourced from https://github.com/hercules-team/augeas/pull/723/commits
  * Credit to Michal Filka &lt;mfilka@suse.com&gt;</changelog>
  <changelog author="dmueller@suse.com" date="1623153600">- add remove-unportable-tests.patch to fix build</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- testsuite requires glibc-locale, buildrequire it</changelog>
  <changelog author="david.anes@suse.com" date="1649246400">- add augeas-sysctl_parsing.patch (bsc#1197443)
  * backport original patch and rebase</changelog>
  <changelog author="jengelh@inai.de" date="1650974400">- Employ shared library packaging guideline and resolve this
  rpmlint report: "libaugeas0.x86_64: E: shlib-policy-name-error
  SONAME: libfa.so.1, expected package suffix: 1" [boo#1191749]</changelog>
  <changelog author="fvogt@suse.com" date="1658836800">- Unset MALLOC_PERTURB_ to speed up %check significantly
  (boo#1201884, gh#hercules-team#768)</changelog>
  <changelog author="jsikes@suse.com" date="1667563200">- Update to 1.13.0
  * Fixes bsc#1204554
  * Added augeas-1.13.0-replace_security_context_t-patch to fix a
    syntax error.
  * Rebased gcc9-disable-broken-test.patch
  * Dropped the following patches since they are now upstreamed:
  - augeas-new_options_for_chrony.patch
  - augeas-allow_printable_ASCII.patch
  - remove-unportable-tests.patch
  * General changes/additions
  - Add Dockerfile (Nicolas Gif) (Issue #650)
  - augtool: Improved readline integration to handle quoting
    issues (Pino Toscano)
  - typechecker: Allow including '/' in keys and labels. Thanks
    to felixdoerre for pointing out that this restriction was
    unnecessary. See issue #668 for the discussion.
  - Add function modified() to select nodes which are marked as
    dirty (George Hansper) (Issue #691)
  - Add CLI command 'preview' and API 'aug_preview' to preview
    file contents (George Hansper) (#690)
  - Add "else" operator to augeas path-filter expressions
    (priority selector) (George Hansper) (#692)
  - Add new axis 'seq' to allow /path/seq::*[expr] to match and
    create numeric nodes, as idempotent alternative to
    /path/*[expr] (George Hansper) (#706)
  * Lens changes/additions
  - Authinfo2: new lens to parse Authinfo2 format (Nicolas Gif)
    (Issue #649)
  - Chrony: add new options (Miroslav Lichvar) (Issue #698)
  - Cmdline: New lens to parse /proc/cmdline (Thomas Weißschuh)
  - Crypttab: support UUID in device and / in opt (Raphaël
    Pinson) (#713)
  - Fail2ban: new lens to parse Fail2ban format (Nicolas Gif)
    (Issue #651)
  - Grub: support '+' in kernel command line option names (Pino
    Toscano) (Issue #647)
  - Krb5: handle [plugins] subsection (Pino Toscano) (Issue #663)
  - Limits: support colons in the domain pattern of the limits
    lens (Xavier Mol) (Issue #645)
  - Logrotate: add hourly schedule (Jason A. Smith) (Issue #655)
  - Mke2fs: parse more common entries between [defaults] and the
    tags in [fs_types], fix the type of few entries, handle the
    [options] stanza (Pino Toscano) (Issue #642)
  - support quoted values (Pino Toscano) (Issue #661)
  - NetworkManager: allow # in values (mfilka) (#723)
  - Opendkim: update to match current conffile format (Issue #644)
  - Postfix_Master: Allow unix-dgram as type (Issue #635)
  - Postfix_transport: Allow underscore (Anton Baranov) (Issue #678)
  - Postgresql: Allow hyphen '-' in values that don't require quotes
    (Marcin Barczyński) (Issues #700 #701)
  - Properties: Allow "/" in property names (felixdoerre) (Issue #680)
  - Redis: add incl path /etc/redis.conf (Raphaël Pinson) (#726)
  - support "replicaof" (Raphaël Pinson) (#727)
  - fix support for "sentinel" (Raphaël Pinson) (#728)
  - Resolv: Support new options (Trevor Vaughan) (Issues #707 #708)
  - Rsyslog: support multiple actions in filters and selectors (Issue
    [#653])
  - Shellvars: exclude more tcsh profile scripts (Pino Toscano) (Issue
    [#627])
  - Simplevars: add ocsinventory-agent.cfg (Pat Riehecky) (Issue #637)
  - Sudoers: support new @include/@includedir directives (Pino
    Toscano) (Issue #693)
  - Sudoers: Allow AD groups (luchihoratiu) (Issue #696)
  - Support negative integers (Ando David Roots) (#724)
  - Ssh: add Match keyword support (granquet) (Issue #695)
  - Sshd: support quotes in Match conditions (Issue #739)
  - Systemd: fix parsing of envvars with spaces (Pino Toscano) (#659)
  - Add incl paths according to 'systemd.network(5)' (chruetli) (#683)
  - Tinc: new lens for Tinc VPN configuration files (Thomas Weißschuh)
    (#718)
  - Toml: support arrays (norec) in inline tables (Raphaël Pinson)
    (#703)
  - Tmpfiles: improvements to the types specification (Pino Toscano)
    (Issue #694)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680782400">- Use the correct license - LGPL-2.1</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update to 1.14.0
  * General changes/additions
  - Update submodule gnulib to 2f7479a16a3395f1429c7795f10c5d19b9b4453e
    (#781)
  - Add bash-completion for augtool, augmatch, augprint (#783) George
    Hansper
  - Fix: Allow values to contain arbitrary unbalanced square brackets
    (#782) George Hansper
  - Add package bash to build stage in Dockerfile (#776) George Hansper
  - Add augprint tool for creating idempotent augtool scripts (#752) George
    Hansper
  - Replace deprecated 'security_context_t' with 'char *' (#747) Leo-Schmit
  - src/syntax.c: Fix whitespace which confuses static checkers
    (#725) rwmjones
  - README.md: Add oss-fuzz status badge (#702) Sergey Nizovtsev
  - Package augmatch, too (#688) oleksandriegorov
  - Add Github workflow to create releases with complete source tarballs
    (#744) Hilko Bengen
  * Lens changes/additions
  - Resolv: add option trust-ad (#784) George Hansper
  - Sos: new lens for /etc/sos/sos.conf (based on IniFile) (#779) George
    Hansper
  - Pg_Hba: unquoted auth-method may contain hyphens (#777) George Hansper
  - Sysctl: Allow keys to contain * and : and / characters (#755) M Filka
  - Semanage: Fix parsing of ignoredirs (#758) Richard W M Jones
  - Systemd: allow empty quoted environment variable values (#757) Michal
    Vasko
  - Systemd: allow values starting with whitespaces for Exec* and
    Environment service entries. (#757) Michal Vasko
  - Toml: workaround to allow writing toml files (#742) Richard
  - Kdump: parse "auto_reset_crashkernel" (#754) Laszlo Ersek
  - Keepalived: add parameters notify_stop and notify_deleted (#749) Adam
    Bambuch
  - Chrony: add new directives and options (#745) Miroslav Lichvar
  - Redis: Allow redis lens to set 'SAVE ""' as a valid option (#738) Mitch
    Hagstrand
  - ClamAV: update ClamAV lens to autoload /etc/clamav/*.conf
    (#748) Guillaume Ross
  - AuthselectPam: new lens for /etc/authselect/custom/*/*-auth
    and /etc/authselect/custom/*/postlogin (#743) Heston Snodgrass
  - Sshd: Parse GSSAPIKexAlgorithms PubkeyAcceptedKeyTypes
    CASignatureAlgorithms as comma-seperated lists instead of simple
    strings (#721) Edward Garbade
  - Yum: Add additional unit tests (#677) Pat Riehecky
  - Cockpit: new lens for /etc/cockpit/cockpit.conf (#675) Pat Riehecky
  * Rebased patch gcc9-disable-broken-test.patch
  * Deleted patches:
  - augeas-sysctl_parsing.patch
  - augeas-1.13.0-replace_security_context_t-patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1692878400">- Update to 1.14.1 (jsc#PED-6581)
  * General changes/additions
  - internal.c: update #if to only use GNU-specific strerror_r() when GLIBC
    is defined (#791) Dimitry Andric
  - augeas.c: Fix bug from PR#691 where the nodes of a newly created file
    are lost upon a subsequent load operation (#810) George Hansper
  - HACKING.md: describe testing (#796) Laszlo Ersek
  - Add GitHub Actions (#714) Raphaël Pinson
  - augprint.c: remove #include &lt;malloc.h&gt; , add #include &lt;libgen.h&gt;
    (#792) Ruoyu Zhong
  * Lens changes/additions
  - TOML: support trailing commas in arrays (#809) Bao
  - Tmpfiles: allow '=', '~', '^' for letter types, allow ":" as prefix for
    the mode (#805) Pino Toscano
  - Sshd: Add keyword PubkeyAcceptedAlgorithms as comma-separated list of
    items (#806) Dave Re
  - Cmdline: Allow whitespace at the end of kernel commnd line
    (#798) rwmjones</changelog>
  <changelog author="martin.schreiner@suse.com" date="1745409600">- Add patch, fix for bsc#1239909 / CVE-2025-2588:
  * CVE-2025-2588.patch</changelog>
</package>
<package pkgid="05f06312ca7dc971887e995a06a407f8cfb8dfe84bb85c1a75b5172cc5eb1292" name="libfdisk-devel" arch="x86_64">
  <version epoch="0" ver="2.40.4" rel="150700.4.10.1"/>
  <changelog author="sbrabec@suse.com" date="1706011200">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1717934400">- Fix hang of lscpu -e (bsc#1225598,
  util-linux-libsmartcols-fix-reduction-stages-use.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1725364800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1733054400">- Update to version 2.40.2 (jsc#PED-9751):
  * Add lastlog2 (disabled for this build, SLE15/Leap15
    infrastructure is not ready for it)
  * agetty: Load autologin user from agetty.autologin credential
  * agetty: use get_terminal_default_type()
  * agetty: use sd_get_sessions() for number of users (#2088)
  * agetty: don't overwrite TERM passed by the user
  * blockdev: add support for BLKGETZONESZ
  * cfdisk: ask y/n before wipe
  * cfdisk: properly handle out-of-order partitions during resize
  * cfdisk: fix possible integer overflow
  * chcpu: document limitations of -g (bsc#1218609)
  * chsh: use libeconf to read /etc/shells
  * column: fix -l
  * column: fix memory leak
  * dmesg: fix FD leak
  * dmesg: fix delta calculation
  * dmesg: fix wrong size calculation
  * dmesg: support reading kmsg format from file
  * enosys: a new small command to make syscalls fail with ENOSYS
  * exch: new command to atomically exchanges paths between two files
  * fdisk: add support for partition resizing
  * fdisk: remove usage of VLA
  * fincore: add --output-all
  * findmnt: add --list-columns
  * findmnt: add -I, --dfi options for imitating the output of df -i
  * findmnt: add inode-related columns for implementing "df -i" like output
  * fsck.minix: fix possible overrun
  * hexdump: add '--one-byte-hex' format option
  * hwclock: add support for RTC_VL_READ/RTC_VL_CLR ioctls
  * libblkid: fix segfault when blkid.conf doesn't exist
  * libfdisk: add initializer to geometry
  * libmount: improving robustness in reading kernel messages,
    add pidfs to pseudo fs list
  * libmount: fix access check for utab in context
  * libmount: fix umount --read-only
  * login: initialize noauth from login.noauth credential
  * lsblk: add --filter
  * lsblk: add --highlight
  * lsblk: add --list-columns
  * lsclocks: new command to show clocks
  * lscpu: even more Arm part numbers (bsc#1223605)
  * lscpu: New Arm Cortex part numbers
    fix hang of lscpu -e (bsc#1225598)
  * lsfd: Refactor the pidfd logic, support pidfs
  * lsns: fix netns use
  * mkfs.minix: handle 64bit time on 32bit system
  * mkswap: implement --file
  * mkswap: implement --offset
  * mkswap.8.adoc: update note regarding swapfile creation
  * more: clean processes not cleaned up after failed SSH session
    using up 100% CPU (bsc#1220117)
  * mount: add --map-users and --map-groups convenience options
  * nsenter: add option `-c` to join the cgroup of target process
  * setarch: add riscv64/riscv32 support
  * setpgid: new command to run a program in a new process group
  * setpgid: make -f work
  * uuidd: add cont_clock persistence
  * uuidgen: add option --count
  * wall: query logind for list of users with tty (#2088)
    properly neutralize escape sequences (bsc#1221831,
    CVE-2024-28085)
  * write: query logind for list of users with tty (#2088)
  * libuuid: improved support for 64-bit time
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.2-ReleaseNotes
- Drop upstreamed patches:
    Revert-libblkid-try-LUKS2-first-when-probing.patch,
    util-linux-libsmartcols-fix-reduction-stages-use.patch,
    util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch,
    util-linux-chcpu-document-zVM-limitations.patch,
    util-linux-lscpu-add-ARM-cores-neoverse3.patch,
    util-linux-chcpu-document-zVM-limitations-generated.patch and
    util-linux-wall-CVE-2024-28085.patch.
- Add file conflict of util-linux-tty-tools and busybox-util-linux.
- Update util-linux-bash-completion-su-chsh-l.patch,
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch and
  make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.
- Move autoreconf back to %build.
- Add devel dependencies.
- Remove util-linux-rpmlintrc. It is no more needed with multibuild.
- uncomment "autoreconf --install" to use the new version of automake
- disable libmagic in more(1) for binary detection (bsc#1225197)
- Skip tests marked as ts_skip_qemu_user when running under qemu
- Mark racy lslocks test as known fail
- Re-enable lsfd tests using mkfds, as it is fixed now.</changelog>
  <changelog author="sbrabec@suse.com" date="1736856000">- Update to version 2.40.4 (jsc#PED-9751):
  * agetty: Prevent cursor escape (bsc#1194818, drop
    util-linux-agetty-prevent-cursor-escape.patch)
    add "systemd" to --version output\
  * chcpu(8): Document CPU deconfiguring behavior
  * fdisk: SGI fixes
  * hardlink: fix memory corruption
  * hardlink.1 directory|file is mandatory
  * lib/env: fix env_list_setenv() for strings without '='
  * libblkid:
    (exfat) validate fields used by prober
    (gpt) use blkid_probe_verify_csum() for partition array
    checksum
    add FSLASTBLOCK for swaparea
    bitlocker fix version on big-endian systems
  * libfdisk: make sure libblkid uses the same sector size
  * libmount:
    extract common error handling function
    propagate first error of multiple filesystem types
  * logger: correctly format tv_usec
  * lscpu: Skip aarch64 decode path for rest of the architectures
    (bsc#1229476, drop util-linux-lscpu-skip-aarch64-decode.patch)
  * lsns: ignore ESRCH errors reported when accessing files under
    /proc
  * mkswap: set selinux label also when creating file
  * more: make sure we have data on stderr
  * nsenter: support empty environ
  * umount, losetup: Document loop destroy behavior
    (bsc#1159034, drop
    util-linux-umount-losetup-lazy-destruction.patch,
    util-linux-umount-losetup-lazy-destruction-generated.patch).
  * uuidd: fix /var/lib/libuuid mode uuidd-tmpfiles.conf
    fix /var/lib/libuuid mode uuidd-tmpfiles.conf
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.3-ReleaseNotes
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.4-ReleaseNotes
  - Refresh util-linux.keyring. Key validity was extended.</changelog>
  <changelog author="sbrabec@suse.com" date="1743595200">- Use utmp as fallback for wall (bsc#1239671,
  util-linux-wall-use-utmp-fallback.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1774267200">- fdisk: Fix possible partition overlay and data corruption if EBR
  gap is missing (boo#1222465,
  util-linux-libfdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-2.patch,
  util-linux-libfdisk-ebr-missing-gap-2.patch,
  util-linux-tests-fdisk-ebr-missing-gap-3.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1774267201">- Recognize fuse "portal" as a virtual file system (boo#1234736,
  util-linux-libmount-fuse-portal.patch).</changelog>
</package>
<package pkgid="f865a04763d9103c8f26c31b6a911c635c9bda0c2053035dbc3a91c57be3758b" name="libfdisk-devel" arch="x86_64">
  <version epoch="0" ver="2.40.4" rel="150700.4.3.1"/>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1717934400">- Fix hang of lscpu -e (bsc#1225598,
  util-linux-libsmartcols-fix-reduction-stages-use.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1725364800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1733054400">- Update to version 2.40.2 (jsc#PED-9751):
  * Add lastlog2 (disabled for this build, SLE15/Leap15
    infrastructure is not ready for it)
  * agetty: Load autologin user from agetty.autologin credential
  * agetty: use get_terminal_default_type()
  * agetty: use sd_get_sessions() for number of users (#2088)
  * agetty: don't overwrite TERM passed by the user
  * blockdev: add support for BLKGETZONESZ
  * cfdisk: ask y/n before wipe
  * cfdisk: properly handle out-of-order partitions during resize
  * cfdisk: fix possible integer overflow
  * chcpu: document limitations of -g (bsc#1218609)
  * chsh: use libeconf to read /etc/shells
  * column: fix -l
  * column: fix memory leak
  * dmesg: fix FD leak
  * dmesg: fix delta calculation
  * dmesg: fix wrong size calculation
  * dmesg: support reading kmsg format from file
  * enosys: a new small command to make syscalls fail with ENOSYS
  * exch: new command to atomically exchanges paths between two files
  * fdisk: add support for partition resizing
  * fdisk: remove usage of VLA
  * fincore: add --output-all
  * findmnt: add --list-columns
  * findmnt: add -I, --dfi options for imitating the output of df -i
  * findmnt: add inode-related columns for implementing "df -i" like output
  * fsck.minix: fix possible overrun
  * hexdump: add '--one-byte-hex' format option
  * hwclock: add support for RTC_VL_READ/RTC_VL_CLR ioctls
  * libblkid: fix segfault when blkid.conf doesn't exist
  * libfdisk: add initializer to geometry
  * libmount: improving robustness in reading kernel messages,
    add pidfs to pseudo fs list
  * libmount: fix access check for utab in context
  * libmount: fix umount --read-only
  * login: initialize noauth from login.noauth credential
  * lsblk: add --filter
  * lsblk: add --highlight
  * lsblk: add --list-columns
  * lsclocks: new command to show clocks
  * lscpu: even more Arm part numbers (bsc#1223605)
  * lscpu: New Arm Cortex part numbers
    fix hang of lscpu -e (bsc#1225598)
  * lsfd: Refactor the pidfd logic, support pidfs
  * lsns: fix netns use
  * mkfs.minix: handle 64bit time on 32bit system
  * mkswap: implement --file
  * mkswap: implement --offset
  * mkswap.8.adoc: update note regarding swapfile creation
  * more: clean processes not cleaned up after failed SSH session
    using up 100% CPU (bsc#1220117)
  * mount: add --map-users and --map-groups convenience options
  * nsenter: add option `-c` to join the cgroup of target process
  * setarch: add riscv64/riscv32 support
  * setpgid: new command to run a program in a new process group
  * setpgid: make -f work
  * uuidd: add cont_clock persistence
  * uuidgen: add option --count
  * wall: query logind for list of users with tty (#2088)
    properly neutralize escape sequences (bsc#1221831,
    CVE-2024-28085)
  * write: query logind for list of users with tty (#2088)
  * libuuid: improved support for 64-bit time
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.2-ReleaseNotes
- Drop upstreamed patches:
    Revert-libblkid-try-LUKS2-first-when-probing.patch,
    util-linux-libsmartcols-fix-reduction-stages-use.patch,
    util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch,
    util-linux-chcpu-document-zVM-limitations.patch,
    util-linux-lscpu-add-ARM-cores-neoverse3.patch,
    util-linux-chcpu-document-zVM-limitations-generated.patch and
    util-linux-wall-CVE-2024-28085.patch.
- Add file conflict of util-linux-tty-tools and busybox-util-linux.
- Update util-linux-bash-completion-su-chsh-l.patch,
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch and
  make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.
- Move autoreconf back to %build.
- Add devel dependencies.
- Remove util-linux-rpmlintrc. It is no more needed with multibuild.
- uncomment "autoreconf --install" to use the new version of automake
- disable libmagic in more(1) for binary detection (bsc#1225197)
- Skip tests marked as ts_skip_qemu_user when running under qemu
- Mark racy lslocks test as known fail
- Re-enable lsfd tests using mkfds, as it is fixed now.</changelog>
  <changelog author="sbrabec@suse.com" date="1736856000">- Update to version 2.40.4 (jsc#PED-9751):
  * agetty: Prevent cursor escape (bsc#1194818, drop
    util-linux-agetty-prevent-cursor-escape.patch)
    add "systemd" to --version output\
  * chcpu(8): Document CPU deconfiguring behavior
  * fdisk: SGI fixes
  * hardlink: fix memory corruption
  * hardlink.1 directory|file is mandatory
  * lib/env: fix env_list_setenv() for strings without '='
  * libblkid:
    (exfat) validate fields used by prober
    (gpt) use blkid_probe_verify_csum() for partition array
    checksum
    add FSLASTBLOCK for swaparea
    bitlocker fix version on big-endian systems
  * libfdisk: make sure libblkid uses the same sector size
  * libmount:
    extract common error handling function
    propagate first error of multiple filesystem types
  * logger: correctly format tv_usec
  * lscpu: Skip aarch64 decode path for rest of the architectures
    (bsc#1229476, drop util-linux-lscpu-skip-aarch64-decode.patch)
  * lsns: ignore ESRCH errors reported when accessing files under
    /proc
  * mkswap: set selinux label also when creating file
  * more: make sure we have data on stderr
  * nsenter: support empty environ
  * umount, losetup: Document loop destroy behavior
    (bsc#1159034, drop
    util-linux-umount-losetup-lazy-destruction.patch,
    util-linux-umount-losetup-lazy-destruction-generated.patch).
  * uuidd: fix /var/lib/libuuid mode uuidd-tmpfiles.conf
    fix /var/lib/libuuid mode uuidd-tmpfiles.conf
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.3-ReleaseNotes
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.4-ReleaseNotes
  - Refresh util-linux.keyring. Key validity was extended.</changelog>
  <changelog author="sbrabec@suse.com" date="1743595200">- Use utmp as fallback for wall (bsc#1239671,
  util-linux-wall-use-utmp-fallback.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
</package>
<package pkgid="92db4eef544e45485cca4d907fd803e86d621b8f0a1d833c7691f03121ab55f5" name="libfdisk1" arch="x86_64">
  <version epoch="0" ver="2.40.4" rel="150700.4.10.1"/>
  <changelog author="sbrabec@suse.com" date="1706011200">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1717934400">- Fix hang of lscpu -e (bsc#1225598,
  util-linux-libsmartcols-fix-reduction-stages-use.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1725364800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1733054400">- Update to version 2.40.2 (jsc#PED-9751):
  * Add lastlog2 (disabled for this build, SLE15/Leap15
    infrastructure is not ready for it)
  * agetty: Load autologin user from agetty.autologin credential
  * agetty: use get_terminal_default_type()
  * agetty: use sd_get_sessions() for number of users (#2088)
  * agetty: don't overwrite TERM passed by the user
  * blockdev: add support for BLKGETZONESZ
  * cfdisk: ask y/n before wipe
  * cfdisk: properly handle out-of-order partitions during resize
  * cfdisk: fix possible integer overflow
  * chcpu: document limitations of -g (bsc#1218609)
  * chsh: use libeconf to read /etc/shells
  * column: fix -l
  * column: fix memory leak
  * dmesg: fix FD leak
  * dmesg: fix delta calculation
  * dmesg: fix wrong size calculation
  * dmesg: support reading kmsg format from file
  * enosys: a new small command to make syscalls fail with ENOSYS
  * exch: new command to atomically exchanges paths between two files
  * fdisk: add support for partition resizing
  * fdisk: remove usage of VLA
  * fincore: add --output-all
  * findmnt: add --list-columns
  * findmnt: add -I, --dfi options for imitating the output of df -i
  * findmnt: add inode-related columns for implementing "df -i" like output
  * fsck.minix: fix possible overrun
  * hexdump: add '--one-byte-hex' format option
  * hwclock: add support for RTC_VL_READ/RTC_VL_CLR ioctls
  * libblkid: fix segfault when blkid.conf doesn't exist
  * libfdisk: add initializer to geometry
  * libmount: improving robustness in reading kernel messages,
    add pidfs to pseudo fs list
  * libmount: fix access check for utab in context
  * libmount: fix umount --read-only
  * login: initialize noauth from login.noauth credential
  * lsblk: add --filter
  * lsblk: add --highlight
  * lsblk: add --list-columns
  * lsclocks: new command to show clocks
  * lscpu: even more Arm part numbers (bsc#1223605)
  * lscpu: New Arm Cortex part numbers
    fix hang of lscpu -e (bsc#1225598)
  * lsfd: Refactor the pidfd logic, support pidfs
  * lsns: fix netns use
  * mkfs.minix: handle 64bit time on 32bit system
  * mkswap: implement --file
  * mkswap: implement --offset
  * mkswap.8.adoc: update note regarding swapfile creation
  * more: clean processes not cleaned up after failed SSH session
    using up 100% CPU (bsc#1220117)
  * mount: add --map-users and --map-groups convenience options
  * nsenter: add option `-c` to join the cgroup of target process
  * setarch: add riscv64/riscv32 support
  * setpgid: new command to run a program in a new process group
  * setpgid: make -f work
  * uuidd: add cont_clock persistence
  * uuidgen: add option --count
  * wall: query logind for list of users with tty (#2088)
    properly neutralize escape sequences (bsc#1221831,
    CVE-2024-28085)
  * write: query logind for list of users with tty (#2088)
  * libuuid: improved support for 64-bit time
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.2-ReleaseNotes
- Drop upstreamed patches:
    Revert-libblkid-try-LUKS2-first-when-probing.patch,
    util-linux-libsmartcols-fix-reduction-stages-use.patch,
    util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch,
    util-linux-chcpu-document-zVM-limitations.patch,
    util-linux-lscpu-add-ARM-cores-neoverse3.patch,
    util-linux-chcpu-document-zVM-limitations-generated.patch and
    util-linux-wall-CVE-2024-28085.patch.
- Add file conflict of util-linux-tty-tools and busybox-util-linux.
- Update util-linux-bash-completion-su-chsh-l.patch,
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch and
  make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.
- Move autoreconf back to %build.
- Add devel dependencies.
- Remove util-linux-rpmlintrc. It is no more needed with multibuild.
- uncomment "autoreconf --install" to use the new version of automake
- disable libmagic in more(1) for binary detection (bsc#1225197)
- Skip tests marked as ts_skip_qemu_user when running under qemu
- Mark racy lslocks test as known fail
- Re-enable lsfd tests using mkfds, as it is fixed now.</changelog>
  <changelog author="sbrabec@suse.com" date="1736856000">- Update to version 2.40.4 (jsc#PED-9751):
  * agetty: Prevent cursor escape (bsc#1194818, drop
    util-linux-agetty-prevent-cursor-escape.patch)
    add "systemd" to --version output\
  * chcpu(8): Document CPU deconfiguring behavior
  * fdisk: SGI fixes
  * hardlink: fix memory corruption
  * hardlink.1 directory|file is mandatory
  * lib/env: fix env_list_setenv() for strings without '='
  * libblkid:
    (exfat) validate fields used by prober
    (gpt) use blkid_probe_verify_csum() for partition array
    checksum
    add FSLASTBLOCK for swaparea
    bitlocker fix version on big-endian systems
  * libfdisk: make sure libblkid uses the same sector size
  * libmount:
    extract common error handling function
    propagate first error of multiple filesystem types
  * logger: correctly format tv_usec
  * lscpu: Skip aarch64 decode path for rest of the architectures
    (bsc#1229476, drop util-linux-lscpu-skip-aarch64-decode.patch)
  * lsns: ignore ESRCH errors reported when accessing files under
    /proc
  * mkswap: set selinux label also when creating file
  * more: make sure we have data on stderr
  * nsenter: support empty environ
  * umount, losetup: Document loop destroy behavior
    (bsc#1159034, drop
    util-linux-umount-losetup-lazy-destruction.patch,
    util-linux-umount-losetup-lazy-destruction-generated.patch).
  * uuidd: fix /var/lib/libuuid mode uuidd-tmpfiles.conf
    fix /var/lib/libuuid mode uuidd-tmpfiles.conf
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.3-ReleaseNotes
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.4-ReleaseNotes
  - Refresh util-linux.keyring. Key validity was extended.</changelog>
  <changelog author="sbrabec@suse.com" date="1743595200">- Use utmp as fallback for wall (bsc#1239671,
  util-linux-wall-use-utmp-fallback.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1774267200">- fdisk: Fix possible partition overlay and data corruption if EBR
  gap is missing (boo#1222465,
  util-linux-libfdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-2.patch,
  util-linux-libfdisk-ebr-missing-gap-2.patch,
  util-linux-tests-fdisk-ebr-missing-gap-3.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1774267201">- Recognize fuse "portal" as a virtual file system (boo#1234736,
  util-linux-libmount-fuse-portal.patch).</changelog>
</package>
<package pkgid="bbbc52618f32b72467f92d98ff586ede71df00df94822c65913073bcee152e33" name="libfdisk1" arch="x86_64">
  <version epoch="0" ver="2.40.4" rel="150700.4.3.1"/>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1717934400">- Fix hang of lscpu -e (bsc#1225598,
  util-linux-libsmartcols-fix-reduction-stages-use.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1725364800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1733054400">- Update to version 2.40.2 (jsc#PED-9751):
  * Add lastlog2 (disabled for this build, SLE15/Leap15
    infrastructure is not ready for it)
  * agetty: Load autologin user from agetty.autologin credential
  * agetty: use get_terminal_default_type()
  * agetty: use sd_get_sessions() for number of users (#2088)
  * agetty: don't overwrite TERM passed by the user
  * blockdev: add support for BLKGETZONESZ
  * cfdisk: ask y/n before wipe
  * cfdisk: properly handle out-of-order partitions during resize
  * cfdisk: fix possible integer overflow
  * chcpu: document limitations of -g (bsc#1218609)
  * chsh: use libeconf to read /etc/shells
  * column: fix -l
  * column: fix memory leak
  * dmesg: fix FD leak
  * dmesg: fix delta calculation
  * dmesg: fix wrong size calculation
  * dmesg: support reading kmsg format from file
  * enosys: a new small command to make syscalls fail with ENOSYS
  * exch: new command to atomically exchanges paths between two files
  * fdisk: add support for partition resizing
  * fdisk: remove usage of VLA
  * fincore: add --output-all
  * findmnt: add --list-columns
  * findmnt: add -I, --dfi options for imitating the output of df -i
  * findmnt: add inode-related columns for implementing "df -i" like output
  * fsck.minix: fix possible overrun
  * hexdump: add '--one-byte-hex' format option
  * hwclock: add support for RTC_VL_READ/RTC_VL_CLR ioctls
  * libblkid: fix segfault when blkid.conf doesn't exist
  * libfdisk: add initializer to geometry
  * libmount: improving robustness in reading kernel messages,
    add pidfs to pseudo fs list
  * libmount: fix access check for utab in context
  * libmount: fix umount --read-only
  * login: initialize noauth from login.noauth credential
  * lsblk: add --filter
  * lsblk: add --highlight
  * lsblk: add --list-columns
  * lsclocks: new command to show clocks
  * lscpu: even more Arm part numbers (bsc#1223605)
  * lscpu: New Arm Cortex part numbers
    fix hang of lscpu -e (bsc#1225598)
  * lsfd: Refactor the pidfd logic, support pidfs
  * lsns: fix netns use
  * mkfs.minix: handle 64bit time on 32bit system
  * mkswap: implement --file
  * mkswap: implement --offset
  * mkswap.8.adoc: update note regarding swapfile creation
  * more: clean processes not cleaned up after failed SSH session
    using up 100% CPU (bsc#1220117)
  * mount: add --map-users and --map-groups convenience options
  * nsenter: add option `-c` to join the cgroup of target process
  * setarch: add riscv64/riscv32 support
  * setpgid: new command to run a program in a new process group
  * setpgid: make -f work
  * uuidd: add cont_clock persistence
  * uuidgen: add option --count
  * wall: query logind for list of users with tty (#2088)
    properly neutralize escape sequences (bsc#1221831,
    CVE-2024-28085)
  * write: query logind for list of users with tty (#2088)
  * libuuid: improved support for 64-bit time
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.2-ReleaseNotes
- Drop upstreamed patches:
    Revert-libblkid-try-LUKS2-first-when-probing.patch,
    util-linux-libsmartcols-fix-reduction-stages-use.patch,
    util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch,
    util-linux-chcpu-document-zVM-limitations.patch,
    util-linux-lscpu-add-ARM-cores-neoverse3.patch,
    util-linux-chcpu-document-zVM-limitations-generated.patch and
    util-linux-wall-CVE-2024-28085.patch.
- Add file conflict of util-linux-tty-tools and busybox-util-linux.
- Update util-linux-bash-completion-su-chsh-l.patch,
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch and
  make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.
- Move autoreconf back to %build.
- Add devel dependencies.
- Remove util-linux-rpmlintrc. It is no more needed with multibuild.
- uncomment "autoreconf --install" to use the new version of automake
- disable libmagic in more(1) for binary detection (bsc#1225197)
- Skip tests marked as ts_skip_qemu_user when running under qemu
- Mark racy lslocks test as known fail
- Re-enable lsfd tests using mkfds, as it is fixed now.</changelog>
  <changelog author="sbrabec@suse.com" date="1736856000">- Update to version 2.40.4 (jsc#PED-9751):
  * agetty: Prevent cursor escape (bsc#1194818, drop
    util-linux-agetty-prevent-cursor-escape.patch)
    add "systemd" to --version output\
  * chcpu(8): Document CPU deconfiguring behavior
  * fdisk: SGI fixes
  * hardlink: fix memory corruption
  * hardlink.1 directory|file is mandatory
  * lib/env: fix env_list_setenv() for strings without '='
  * libblkid:
    (exfat) validate fields used by prober
    (gpt) use blkid_probe_verify_csum() for partition array
    checksum
    add FSLASTBLOCK for swaparea
    bitlocker fix version on big-endian systems
  * libfdisk: make sure libblkid uses the same sector size
  * libmount:
    extract common error handling function
    propagate first error of multiple filesystem types
  * logger: correctly format tv_usec
  * lscpu: Skip aarch64 decode path for rest of the architectures
    (bsc#1229476, drop util-linux-lscpu-skip-aarch64-decode.patch)
  * lsns: ignore ESRCH errors reported when accessing files under
    /proc
  * mkswap: set selinux label also when creating file
  * more: make sure we have data on stderr
  * nsenter: support empty environ
  * umount, losetup: Document loop destroy behavior
    (bsc#1159034, drop
    util-linux-umount-losetup-lazy-destruction.patch,
    util-linux-umount-losetup-lazy-destruction-generated.patch).
  * uuidd: fix /var/lib/libuuid mode uuidd-tmpfiles.conf
    fix /var/lib/libuuid mode uuidd-tmpfiles.conf
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.3-ReleaseNotes
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.4-ReleaseNotes
  - Refresh util-linux.keyring. Key validity was extended.</changelog>
  <changelog author="sbrabec@suse.com" date="1743595200">- Use utmp as fallback for wall (bsc#1239671,
  util-linux-wall-use-utmp-fallback.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
</package>
<package pkgid="4cccfe2925bdc6836d4da3463793e1237e693b3828334d37c3e04a788fafe75e" name="libfreebl3" arch="x86_64">
  <version epoch="0" ver="3.112" rel="150400.3.57.1"/>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
</package>
<package pkgid="47b7add303d4be6064f4fbb716edb3cd601bfaf87c5872131c057e6bc7a74124" name="libfreebl3" arch="x86_64">
  <version epoch="0" ver="3.112.2" rel="150400.3.60.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Removed upstreamed nss-reproducible-chksums.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755864000">- update to NSS 3.112.1
  * bmo#1982742 - restore support for finding certificates by decoded serial number.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759752000">- update to NSS 3.112.2
  * bmo#1970079 - Prevent leaks during pkcs12 decoding.
  * bmo#1988046 - SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates
- Adding patch bmo1980465.patch to fix bug on s390x (bmo#1980465)
- Adding patch bmo1956754.patch to fix possible undefined behaviour (bmo#1956754)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759838400">- Add bmo1990242.patch to move NSS DB password hash away from SHA-1</changelog>
</package>
<package pkgid="aca9911f3cba0046dcf957da8ce01f2a93223621d3464c9d6f322a8d8cbbaa84" name="libfreebl3" arch="x86_64">
  <version epoch="0" ver="3.112.3" rel="150400.3.63.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Removed upstreamed nss-reproducible-chksums.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755864000">- update to NSS 3.112.1
  * bmo#1982742 - restore support for finding certificates by decoded serial number.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759752000">- update to NSS 3.112.2
  * bmo#1970079 - Prevent leaks during pkcs12 decoding.
  * bmo#1988046 - SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates
- Adding patch bmo1980465.patch to fix bug on s390x (bmo#1980465)
- Adding patch bmo1956754.patch to fix possible undefined behaviour (bmo#1956754)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759838400">- Add bmo1990242.patch to move NSS DB password hash away from SHA-1</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- update to NSS 3.112.3
  * bmo#2009552 - avoid integer overflow in platform-independent ghash</changelog>
</package>
<package pkgid="9553c9e409fe97e23442f0426f7e48983c9eeee171800dd374a2a04241bf35a1" name="libfreebl3" arch="x86_64">
  <version epoch="0" ver="3.112.4" rel="150400.3.66.1"/>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Removed upstreamed nss-reproducible-chksums.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755864000">- update to NSS 3.112.1
  * bmo#1982742 - restore support for finding certificates by decoded serial number.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759752000">- update to NSS 3.112.2
  * bmo#1970079 - Prevent leaks during pkcs12 decoding.
  * bmo#1988046 - SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates
- Adding patch bmo1980465.patch to fix bug on s390x (bmo#1980465)
- Adding patch bmo1956754.patch to fix possible undefined behaviour (bmo#1956754)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759838400">- Add bmo1990242.patch to move NSS DB password hash away from SHA-1</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- update to NSS 3.112.3
  * bmo#2009552 - avoid integer overflow in platform-independent ghash</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1776168000">- update to NSS 3.112.4
  * bmo#2030135 - improve error handling in PK11_ImportPrivateKeyInfoAndReturnKey.
  * bmo#2029752 - Improving the allocation of S/MIME DecryptSymKey.
  * bmo#2029462 - store email on subject cache_entry in NSS trust domain.
  * bmo#2029425 - Heap use-after-free in cert_VerifyCertChainOld via dangling certsList[] entry on NameConstraints violation.
  * bmo#2029323 - Improve size calculations in CMS content buffering.
  * bmo#2028001 - avoid integer overflow while escaping RFC822 Names.
  * bmo#2027378 - Reject excessively large ASN.1 SEQUENCE OF in quickder.
  * bmo#2027365 - Deep copy profile data in CERT_FindSMimeProfile.
  * bmo#2027345 - Improve input validation in DSAU signature decoding.
  * bmo#2026311 - avoid integer overflow in RSA_EMSAEncodePSS.
  * bmo#2019357 - RSA_EMSAEncodePSS should validate the length of mHash.
  * bmo#2026156 - Add a maximum cert uncompressed len and tests.
  * bmo#2026089 - Clarify extension negotiation mechanism for TLS Handshakes.
  * bmo#2023209 - ensure permittedSubtrees don't match wildcards that could be outside the permitted tree.
  * bmo#2023207 - Fix integer underflow in tls13_AEAD when ciphertext is shorter than tag.
  * bmo#2019224 - Remove invalid PORT_Free().
  * bmo#1964722 - free digest objects in SEC_PKCS7DecoderFinish if they haven't already been freed.
  * bmo#1935995 - make ss-&gt;ssl3.hs.cookie an owned-copy of the cookie.</changelog>
</package>
<package pkgid="cdc4bc6f60aae514af5bdf5dff395beeb516ec466caca1e64550657f34dbd68c" name="libfreebl3-32bit" arch="x86_64">
  <version epoch="0" ver="3.112" rel="150400.3.57.1"/>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
</package>
<package pkgid="cb1477a0062c12443d3b63dac839795aade12d7b260b9ca47389f8814dd30c5b" name="libfreebl3-32bit" arch="x86_64">
  <version epoch="0" ver="3.112.2" rel="150400.3.60.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Removed upstreamed nss-reproducible-chksums.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755864000">- update to NSS 3.112.1
  * bmo#1982742 - restore support for finding certificates by decoded serial number.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759752000">- update to NSS 3.112.2
  * bmo#1970079 - Prevent leaks during pkcs12 decoding.
  * bmo#1988046 - SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates
- Adding patch bmo1980465.patch to fix bug on s390x (bmo#1980465)
- Adding patch bmo1956754.patch to fix possible undefined behaviour (bmo#1956754)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759838400">- Add bmo1990242.patch to move NSS DB password hash away from SHA-1</changelog>
</package>
<package pkgid="cd91bfec682757750f1f425b600bdadb19cdbc056f5e13f45733d752b394b750" name="libfreebl3-32bit" arch="x86_64">
  <version epoch="0" ver="3.112.3" rel="150400.3.63.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Removed upstreamed nss-reproducible-chksums.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755864000">- update to NSS 3.112.1
  * bmo#1982742 - restore support for finding certificates by decoded serial number.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759752000">- update to NSS 3.112.2
  * bmo#1970079 - Prevent leaks during pkcs12 decoding.
  * bmo#1988046 - SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates
- Adding patch bmo1980465.patch to fix bug on s390x (bmo#1980465)
- Adding patch bmo1956754.patch to fix possible undefined behaviour (bmo#1956754)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759838400">- Add bmo1990242.patch to move NSS DB password hash away from SHA-1</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- update to NSS 3.112.3
  * bmo#2009552 - avoid integer overflow in platform-independent ghash</changelog>
</package>
<package pkgid="48edeec08cc520ad070aba9347a315b3f9ccc2e24d80cd7ae6ff97ec6004a893" name="libfreebl3-32bit" arch="x86_64">
  <version epoch="0" ver="3.112.4" rel="150400.3.66.1"/>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Removed upstreamed nss-reproducible-chksums.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755864000">- update to NSS 3.112.1
  * bmo#1982742 - restore support for finding certificates by decoded serial number.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759752000">- update to NSS 3.112.2
  * bmo#1970079 - Prevent leaks during pkcs12 decoding.
  * bmo#1988046 - SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates
- Adding patch bmo1980465.patch to fix bug on s390x (bmo#1980465)
- Adding patch bmo1956754.patch to fix possible undefined behaviour (bmo#1956754)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759838400">- Add bmo1990242.patch to move NSS DB password hash away from SHA-1</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- update to NSS 3.112.3
  * bmo#2009552 - avoid integer overflow in platform-independent ghash</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1776168000">- update to NSS 3.112.4
  * bmo#2030135 - improve error handling in PK11_ImportPrivateKeyInfoAndReturnKey.
  * bmo#2029752 - Improving the allocation of S/MIME DecryptSymKey.
  * bmo#2029462 - store email on subject cache_entry in NSS trust domain.
  * bmo#2029425 - Heap use-after-free in cert_VerifyCertChainOld via dangling certsList[] entry on NameConstraints violation.
  * bmo#2029323 - Improve size calculations in CMS content buffering.
  * bmo#2028001 - avoid integer overflow while escaping RFC822 Names.
  * bmo#2027378 - Reject excessively large ASN.1 SEQUENCE OF in quickder.
  * bmo#2027365 - Deep copy profile data in CERT_FindSMimeProfile.
  * bmo#2027345 - Improve input validation in DSAU signature decoding.
  * bmo#2026311 - avoid integer overflow in RSA_EMSAEncodePSS.
  * bmo#2019357 - RSA_EMSAEncodePSS should validate the length of mHash.
  * bmo#2026156 - Add a maximum cert uncompressed len and tests.
  * bmo#2026089 - Clarify extension negotiation mechanism for TLS Handshakes.
  * bmo#2023209 - ensure permittedSubtrees don't match wildcards that could be outside the permitted tree.
  * bmo#2023207 - Fix integer underflow in tls13_AEAD when ciphertext is shorter than tag.
  * bmo#2019224 - Remove invalid PORT_Free().
  * bmo#1964722 - free digest objects in SEC_PKCS7DecoderFinish if they haven't already been freed.
  * bmo#1935995 - make ss-&gt;ssl3.hs.cookie an owned-copy of the cookie.</changelog>
</package>
<package pkgid="5f149510f915fac4d3bdd61aa1e44d836db1920040a94a59c2c71c4ae6b1a932" name="libfreeipmi17" arch="x86_64">
  <version epoch="0" ver="1.6.8" rel="150400.3.3.1"/>
  <changelog author="kkaempf@suse.com" date="1475582400">- Update to 1.5.4
  o Various changes/fixes in libipmiconsole
  - If user retrieves file descriptor from ipmiconsole_ctx_fd,
    user is required to close it.  ipmiconsole_ctx_destroy no
    longer closes it.  This is to avoid a potential double close
    which can be a problem for multithreaded applications. This
    is a change in behavior, but we do not believe this will
    affect most applications since most users close the file
    descriptor under most scenarios anyways.
  - ipmiconsole_ctx_destroy() should now be called to free
    resources even if ipmiconsole_engine_teardown() has been
    called.  This has been done to create consistent behavior in
    the API and avoid a former segfault possibility.  This is a
    change in behavior, but we do not believe this will affect
    most applications since ipmiconsole_engine_teardown() is
    only called when an application is being shutdown.
  - The use of IPMICONSOLE_ENGINE_CLOSE_FD has been clarified in
    the header file.  Some of the prior text was unclear.
    Behavior has not been changed.
  o In ipmi-oem, support Intel get-bmc-services and set-bmc-
    services commands.
  o In ipmi-oem, support Gigabyte get-nic-mode and set-nic-mode
    commands.
  o Support Gigabyte MD90-FS0-ZB OEM SEL events.</changelog>
  <changelog author="kkaempf@suse.com" date="1478174400">- Update to 1.5.5
  o Fix invalid flag clear in libipmiconsole that can lead to a potential
    double close on a file descriptor.
  o Support Supermicro H8SGL-F OEM sensors and events.</changelog>
  <changelog author="sfalken@opensuse.org" date="1489060800">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="kkaempf@suse.com" date="1499342400">- Update to 1.5.6
  o In libfreeipmi locate (used by ipmi-locate), use DMI firmware in
    sysfs if it exists.
  o Minor mem-leak corner case fix in libfreeipmi.
  o Minor documentation fixes.
  o Minor error message clarifications.</changelog>
  <changelog author="kkaempf@suse.com" date="1504094400">- Update to 1.5.7
  o In libipmimonitoring, fix several mem-leak corner cases.</changelog>
  <changelog author="alarrosa@suse.com" date="1508328000">- Follow the shared library packaging policy. Created new packages
  libipmiconsole2, libipmidetect0, libipmimonitoring6, libfreeipmi17</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kkaempf@suse.com" date="1517659200">- Update to 1.6.1
  o Add IPv6 hostname support to FreeIPMI, all of FreeIPMI can now take
    IPv6 addresses as inputs to "host" parameters, options, or inputs.
  o Support significant portions of IPMI IPv6 configuration in
    libfreeipmi.
  o Add --no-session option in ipmi-raw.
  o Add SDR cache options to ipmi-config.
  o Legacy -f short option for --flush-cache and -Q short option for
    quiet-cache.  Backwards compatible for tools that supported it
    before.
  o In ipmi-oem, support Gigabyte get-bmc-services and
    set-bmc-services.
  o Various performance improvements:
  - Remove excessive calls to secure_memset to clear memory.
  - Remove excessive memsets and clears of data.
  - Remove unnecessary "double input checks".
  - Remove expensive input checks in libfreeipmi fiid library.
    Fallout from this may include FIID_ERR_FIELD_NOT_FOUND
    errors in different fiid functions.
  - Remove unnecessary input checks in libfreeipmi fiid library.
  - Add recent 'lookups' of fields in fiid library to internal
    cache.
  o Various minor fixes/improvements
  - Update libfreeipmi core API to use poll() instead of select(), to
    avoid issues with applications with a high number of threads.
  - As a side point, while IPv6 networking support has been added, IPv6
    configuration in ipmi-config &amp; bmc-config is not supported in this
    release.</changelog>
  <changelog author="kkaempf@suse.com" date="1525435200">- Update to 1.6.2
  o Fix error in bridging where bridged requests were sent to the
    wrong LUN.
  o Fix command parsing bugs in legacy ipmi-config scripts
    (i.e. bmc-config, ipmi-pef-config, etc.)
  o Do not output full path of daemons in syslog, output only the
    daemon name (i.e. output "ipmidetected" instead of
    "/usr/sbin/ipmidetectd").
  o Update channel range from 0-7 to 0-11, per errata IPMI update.</changelog>
  <changelog author="josef.moellers@suse.com" date="1533124800">- Changed mode of .service files from 755 to 644.
  [bsc#1103311, 1103311-service-files-mode.patch]</changelog>
  <changelog author="trenn@suse.de" date="1535457600">- Enable build for aarch64 (fate#326605)</changelog>
  <changelog author="trenn@suse.de" date="1541764800">- Remove has_systemd conditions
- Add rcservice shortcut links to control services
- Fix some more build warnings
- Use %license instead of %doc where appropriate
- Extract ipmiseld service as a separate package as done with other
  services
- Declare /var/lib/freeipmi/ipckey as %ghost and do not create it
  explicitly in .spec file (bsc#1100124)</changelog>
  <changelog author="trenn@suse.de" date="1547208000">- Add provides:freeipmi:/usr/sbin/ipmiseld to the
  freeipmi-ipmiseld split package for backward compatibility
  for now</changelog>
  <changelog author="kkaempf@suse.com" date="1548417600">- Update to 1.6.3
  o In ipmi-locate, support parsing SPMI tables exported via sysfs.
  o Support Intel S2600GZ OEM sensor and SEL events.
  o Support Intel S2600WP OEM sensor and SEL events.
  o Support Gigabyte MG20-OP0-ZB OEM SEL events.
  o Fix DISCRETE_READING workaround in libipmimonitoring.
  o In libfreeipmi, add workaround for packets that are re-ordered
    during sensor bridging.
  o Minor bug fixes.
  o Various documentation updates/fixes.</changelog>
  <changelog author="kkaempf@suse.com" date="1566475200">- Update to 1.6.4
  o In libfreeipmi, add additional workarounds for packets that are
    re-ordered during sensor bridging.
  o In libfreeipmi, add additional sensor / event interpretations.
  o In libfreeipmi, fix error return value on bridging requests.
  o Add workaround in ipmi-sel for QuantaPlex T42D-2U motherboard,
    whichlists a SDR record that makes no sense.
  o Add workaround for Dell Poweredge FC830, which have an error
    when reading the last SDR record on a motherboard.
  o Support Supermicro X10 OEM dimm events.</changelog>
  <changelog author="kkaempf@suse.com" date="1590148800">- Update to 1.6.5
  o Add FRU parsing workaround for Fujitsu Primergy RX1330, in which a
    CEh is used to indicate that no FRU data is available.
  o Misc minor fixes.</changelog>
  <changelog author="kkaempf@suse.com" date="1599393600">- Update to 1.6.6
  o In libfreeipmi, fix segfault in SPMI parsing leading to immediate
    failures on some hardware across all tools.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1613304000">- freeipmi 1.6.7:
  * Do not require IPMI access when running ipmi-fru with the
  - -fru-file option
  * Minor documentation updates
- the following fixes were upstreamed:
  * Fix default permissions of various config and system files,
    drop 1103311-service-files-mode.patch</changelog>
  <changelog author="trenn@suse.de" date="1625745600">- Fix: W: name-repeated-in-summary C FreeIPMI
- Fix: freeipmi-bmc-watchdog.x86_64:
  W: non-etc-or-var-file-marked-as-conffile /usr/share/fillup-templates/sysconfig.bmc-watchdog
  Declaring fillup files as conffile is not needed
- freeipmi 1.6.8</changelog>
  <changelog author="trenn@suse.de" date="1777032000">- bsc#1260414 - CVE-2026-33554:
  freeipmi: improper memory handling and data validation can lead
  A ipmi-oem-fix-several-memory-out-of-bounds-errors.patch</changelog>
</package>
<package pkgid="2da1d6b19a53ae214391c4a678ca4e253387bd92982e0c72e39e052cdbf758e4" name="libfreetype6" arch="x86_64">
  <version epoch="0" ver="2.10.4" rel="150000.4.25.1"/>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * Advance width values of variation fonts were often wrong.
  * More fixes for variation font support; you should update to
    this version if you want to support them.
  * As a GSoC project, Ewald Hew extended the new (Adobe) CFF
    engine to handle Type 1 fonts also, thus greatly improving
    the rendering of this format. This is the new default.
  * A new function, `FT_Set_Named_Instance', can be used to set
    or change the current named instance.
  * Starting with this FreeType version, resetting variation
    coordinates will return to the currently selected named
    instance. Previously, FreeType returned to the base font
    (i.e., no instance set).
  * Some fuzzer fixes to better reject malformed fonts.</changelog>
  <changelog author="idonmez@suse.com" date="1515585600">- Add psaux-flex.patch to fix a regression in Type1 rendering</changelog>
  <changelog author="fstrba@suse.com" date="1518004800">- Added patches:
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
    + Upstream fix for bsc#1079603: Avoid NULL reference in
    src/truetype/ttinterp.c
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch
    + Upstream fix for bsc#1079601: Protection against invalid VF
    data</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Added patch:
  * enable-long-family-names-by-default.patch
    + Define PCF_CONFIG_OPTION_LONG_FAMILY_NAMES to obtain 2.7.1
    behaviour</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520337600">- Refresh spec-file via spec-cleaner.
- Add shell script freetype2.sh in separate package
  freetype2-profile-tti35 in order to be able to set TrueType
  interpreter version 35 (boo#1084085).</changelog>
  <changelog author="kbabioch@suse.com" date="1520510400">- Add bnc1079600.patch: Fix several integer overflow issues in
  truetype/ttinterp.c (bsc#1079600)</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * Type 1 fonts containing flex features were not rendered
    correctly (bug introduced in version 2.9).
  * CVE-2018-6942: Older FreeType versions can crash with certain
    malformed variation fonts.
  * Bug fix: Multiple calls to `FT_Get_MM_Var' returned garbage.
  * Emboldening of bitmaps didn't work correctly sometimes, showing
    various artifacts (bug introduced in version 2.8.1).
  * The auto-hinter script ranges have  been updated for Unicode 11.
    No support for new scripts have been added, however,  with the
    exception of Georgian Mtavruli.
- freetype-config is now deprecated by upstream and not enabled
  by default.
- Drop upstreamed patches:
  * bnc1079600.patch
  * psaux-flex.patch
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch</changelog>
  <changelog author="idonmez@suse.com" date="1526299200">- Re-enable freetype-config, there is just too many fallouts.</changelog>
  <changelog author="idonmez@suse.com" date="1540641600">- Remove old ppc64 parts in spec file
- Refresh patches:
  + bugzilla-308961-cmex-workaround.patch
  + don-t-mark-libpng-as-required-library.patch
  + enable-long-family-names-by-default.patch
- Enable subpixel rendering with infinality config:
  + enable-subpixel-rendering.patch
  + enable-infinality-subpixel-hinting.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * A bunch of new functions has been added to access and process
    COLR/CPAL data of OpenType fonts with color-layered glyphs.
  * As a GSoC 2018 project, Nikhil Ramakrishnan completely
    overhauled and modernized the API reference.
  * The logic for computing the global ascender, descender, and
    height of OpenType fonts has been slightly adjusted for
    consistency.
  * `TT_Set_MM_Blend' could fail if called repeatedly with the same
    arguments.
  * The precision of handling deltas in Variation Fonts has been
    increased.The problem did only show up with multidimensional
    designspaces.
  * New function `FT_Library_SetLcdGeometry' to set up the geometry
    of LCD subpixels.
  * FreeType now uses the `defaultChar' property of PCF fonts to set
    the  glyph for  the undefined  character  at glyph  index 0  (as
    FreeType already does for all other supported font formats).  As
    a consequence, the order of glyphs of a PCF font if accessed
    with  FreeType can be different now compared to previous
    versions.
    This change doesn't affect PCF font access with cmaps.
  * `FT_Select_Charmap' has been changed to allow  parameter value
    `FT_ENCODING_NONE', which is valid for BDF, PCF, and Windows FNT
    formats to access built-in cmaps that don't have a predefined
    `FT_Encoding' value.
  * A previously reserved field in the `FT_GlyphSlotRec' structure
    now holds the glyph index.
  * The usual round of fuzzer bug fixes to better reject malformed
    fonts.
  * `FT_Outline_New_Internal' and `FT_Outline_Done_Internal' have
    been removed.These two functions were public by oversight only
    and were never documented.
  * A new function `FT_Error_String' returns descriptions of error
    codes if configuration macro FT_CONFIG_OPTION_ERROR_STRINGS is
    defined.
  * `FT_Set_MM_WeightVector' and `FT_Get_MM_WeightVector' are new
    functions limited to Adobe MultiMaster fonts to directly set and
    get the weight vector.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The bytecode hinting of OpenType variation fonts was flawed, since
    the data in the `CVAR' table wasn't correctly applied.
  * Auto-hinter support for Mongolian.
  * The handling of  the default character in PCF fonts as  introduced
    in version 2.10.0 was partially broken, causing premature abortion
    of charmap iteration for many fonts.
  * If  `FT_Set_Named_Instance' was  called  with  the same  arguments
    twice in a row, the function  returned an incorrect error code the
    second time.
  * Direct   rendering   using  FT_RASTER_FLAG_DIRECT   crashed   (bug
    introduced in version 2.10.0).
  * Increased  precision  while  computing  OpenType  font   variation
    instances.
  * The  flattening  algorithm of  cubic  Bezier  curves was  slightly
    changed to make  it faster.  This can cause  very subtle rendering
    changes, which aren't noticeable by the eye, however.
  * The  auto-hinter  now  disables hinting  if there  are blue  zones
    defined for a `style' (i.e., a certain combination of a script and
    its related typographic features) but the font doesn't contain any
    characters needed to set up at least one blue zone.
- Add tarball signatures and freetype2.keyring</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1570622400">- Use the compiler default C std, since 2012 gcc defaults
  have changed, we now only need to get rid of ANSIFLAGS, override
  that variable instead.</changelog>
  <changelog author="idonmez@suse.com" date="1589025600">- Update to version 2.10.2
  * Support for WOFF2 fonts, add BR on pkgconfig(libbrotlidec)
  * Function `FT_Get_Var_Axis_Flags' returned random data for Type 1
    MM fonts.
  * Type 1 fonts with non-integer metrics are now supported by the new
    (CFF) engine introduced in FreeType 2.9.
  * Drop support for Python 2 in Freetype's API reference generator
  * Auto-hinter support for Hanifi Rohingya
  * Document the `FT2_KEEP_ALIVE' debugging environment variable.</changelog>
  <changelog author="idonmez@suse.com" date="1603195200">- Update to version 2.10.4
  * Fix a heap buffer overflow has been found  in the handling of
    embedded PNG bitmaps, introduced in FreeType version 2.6
    (CVE-2020-15999 bsc#1177914)
  * Minor improvements to the B/W rasterizer.
  * Auto-hinter support for Medefaidrin script.
  * Fix various  memory leaks (mainly  for CFF) and other  issues that
    might cause crashes in rare circumstances.</changelog>
  <changelog author="fstrba@suse.com" date="1661256000">- Added patches:
  * CVE-2022-27404.patch
    + fixes bsc#1198830, CVE-2022-27404: Buffer Overflow
  * CVE-2022-27405.patch
    + fixes bsc#1198832, CVE-2022-27405: Segmentation Fault
  * CVE-2022-27406.patch
    + fixes bsc#1198823, CVE-2022-27406: Segmentation violation</changelog>
  <changelog author="meissner@suse.com" date="1661947200">- disable brotli linkage / WOFF2 support for now to keep dependencies
  as before.</changelog>
  <changelog author="fstrba@suse.com" date="1692705600">- Added patch:
  * CVE-2023-2004.patch
    + fixes bsc#1210419, CVE-2023-2004: Integer overflow</changelog>
  <changelog author="fstrba@suse.com" date="1742212800">- Added patch:
  * CVE-2025-27363.patch
    + fixes bsc#1239465, CVE-2025-27363: out-of-bounds write when
    attempting to parse font subglyph structures related to
    TrueType GX and variable font files</changelog>
  <changelog author="dmueller@suse.com" date="1745409600">- enable brotli support (jsc#PED-12258)</changelog>
  <changelog author="pgajdos@suse.com" date="1762430400">- package FTL.TXT and GPLv2.TXT as %license [bsc#1252148]</changelog>
</package>
<package pkgid="41f8e71fe4667801ac26be16e6d24dce312ca6d502db3197ff5c3efd6e571ba1" name="libfreetype6-32bit" arch="x86_64">
  <version epoch="0" ver="2.10.4" rel="150000.4.25.1"/>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * Advance width values of variation fonts were often wrong.
  * More fixes for variation font support; you should update to
    this version if you want to support them.
  * As a GSoC project, Ewald Hew extended the new (Adobe) CFF
    engine to handle Type 1 fonts also, thus greatly improving
    the rendering of this format. This is the new default.
  * A new function, `FT_Set_Named_Instance', can be used to set
    or change the current named instance.
  * Starting with this FreeType version, resetting variation
    coordinates will return to the currently selected named
    instance. Previously, FreeType returned to the base font
    (i.e., no instance set).
  * Some fuzzer fixes to better reject malformed fonts.</changelog>
  <changelog author="idonmez@suse.com" date="1515585600">- Add psaux-flex.patch to fix a regression in Type1 rendering</changelog>
  <changelog author="fstrba@suse.com" date="1518004800">- Added patches:
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
    + Upstream fix for bsc#1079603: Avoid NULL reference in
    src/truetype/ttinterp.c
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch
    + Upstream fix for bsc#1079601: Protection against invalid VF
    data</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Added patch:
  * enable-long-family-names-by-default.patch
    + Define PCF_CONFIG_OPTION_LONG_FAMILY_NAMES to obtain 2.7.1
    behaviour</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520337600">- Refresh spec-file via spec-cleaner.
- Add shell script freetype2.sh in separate package
  freetype2-profile-tti35 in order to be able to set TrueType
  interpreter version 35 (boo#1084085).</changelog>
  <changelog author="kbabioch@suse.com" date="1520510400">- Add bnc1079600.patch: Fix several integer overflow issues in
  truetype/ttinterp.c (bsc#1079600)</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * Type 1 fonts containing flex features were not rendered
    correctly (bug introduced in version 2.9).
  * CVE-2018-6942: Older FreeType versions can crash with certain
    malformed variation fonts.
  * Bug fix: Multiple calls to `FT_Get_MM_Var' returned garbage.
  * Emboldening of bitmaps didn't work correctly sometimes, showing
    various artifacts (bug introduced in version 2.8.1).
  * The auto-hinter script ranges have  been updated for Unicode 11.
    No support for new scripts have been added, however,  with the
    exception of Georgian Mtavruli.
- freetype-config is now deprecated by upstream and not enabled
  by default.
- Drop upstreamed patches:
  * bnc1079600.patch
  * psaux-flex.patch
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch</changelog>
  <changelog author="idonmez@suse.com" date="1526299200">- Re-enable freetype-config, there is just too many fallouts.</changelog>
  <changelog author="idonmez@suse.com" date="1540641600">- Remove old ppc64 parts in spec file
- Refresh patches:
  + bugzilla-308961-cmex-workaround.patch
  + don-t-mark-libpng-as-required-library.patch
  + enable-long-family-names-by-default.patch
- Enable subpixel rendering with infinality config:
  + enable-subpixel-rendering.patch
  + enable-infinality-subpixel-hinting.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * A bunch of new functions has been added to access and process
    COLR/CPAL data of OpenType fonts with color-layered glyphs.
  * As a GSoC 2018 project, Nikhil Ramakrishnan completely
    overhauled and modernized the API reference.
  * The logic for computing the global ascender, descender, and
    height of OpenType fonts has been slightly adjusted for
    consistency.
  * `TT_Set_MM_Blend' could fail if called repeatedly with the same
    arguments.
  * The precision of handling deltas in Variation Fonts has been
    increased.The problem did only show up with multidimensional
    designspaces.
  * New function `FT_Library_SetLcdGeometry' to set up the geometry
    of LCD subpixels.
  * FreeType now uses the `defaultChar' property of PCF fonts to set
    the  glyph for  the undefined  character  at glyph  index 0  (as
    FreeType already does for all other supported font formats).  As
    a consequence, the order of glyphs of a PCF font if accessed
    with  FreeType can be different now compared to previous
    versions.
    This change doesn't affect PCF font access with cmaps.
  * `FT_Select_Charmap' has been changed to allow  parameter value
    `FT_ENCODING_NONE', which is valid for BDF, PCF, and Windows FNT
    formats to access built-in cmaps that don't have a predefined
    `FT_Encoding' value.
  * A previously reserved field in the `FT_GlyphSlotRec' structure
    now holds the glyph index.
  * The usual round of fuzzer bug fixes to better reject malformed
    fonts.
  * `FT_Outline_New_Internal' and `FT_Outline_Done_Internal' have
    been removed.These two functions were public by oversight only
    and were never documented.
  * A new function `FT_Error_String' returns descriptions of error
    codes if configuration macro FT_CONFIG_OPTION_ERROR_STRINGS is
    defined.
  * `FT_Set_MM_WeightVector' and `FT_Get_MM_WeightVector' are new
    functions limited to Adobe MultiMaster fonts to directly set and
    get the weight vector.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The bytecode hinting of OpenType variation fonts was flawed, since
    the data in the `CVAR' table wasn't correctly applied.
  * Auto-hinter support for Mongolian.
  * The handling of  the default character in PCF fonts as  introduced
    in version 2.10.0 was partially broken, causing premature abortion
    of charmap iteration for many fonts.
  * If  `FT_Set_Named_Instance' was  called  with  the same  arguments
    twice in a row, the function  returned an incorrect error code the
    second time.
  * Direct   rendering   using  FT_RASTER_FLAG_DIRECT   crashed   (bug
    introduced in version 2.10.0).
  * Increased  precision  while  computing  OpenType  font   variation
    instances.
  * The  flattening  algorithm of  cubic  Bezier  curves was  slightly
    changed to make  it faster.  This can cause  very subtle rendering
    changes, which aren't noticeable by the eye, however.
  * The  auto-hinter  now  disables hinting  if there  are blue  zones
    defined for a `style' (i.e., a certain combination of a script and
    its related typographic features) but the font doesn't contain any
    characters needed to set up at least one blue zone.
- Add tarball signatures and freetype2.keyring</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1570622400">- Use the compiler default C std, since 2012 gcc defaults
  have changed, we now only need to get rid of ANSIFLAGS, override
  that variable instead.</changelog>
  <changelog author="idonmez@suse.com" date="1589025600">- Update to version 2.10.2
  * Support for WOFF2 fonts, add BR on pkgconfig(libbrotlidec)
  * Function `FT_Get_Var_Axis_Flags' returned random data for Type 1
    MM fonts.
  * Type 1 fonts with non-integer metrics are now supported by the new
    (CFF) engine introduced in FreeType 2.9.
  * Drop support for Python 2 in Freetype's API reference generator
  * Auto-hinter support for Hanifi Rohingya
  * Document the `FT2_KEEP_ALIVE' debugging environment variable.</changelog>
  <changelog author="idonmez@suse.com" date="1603195200">- Update to version 2.10.4
  * Fix a heap buffer overflow has been found  in the handling of
    embedded PNG bitmaps, introduced in FreeType version 2.6
    (CVE-2020-15999 bsc#1177914)
  * Minor improvements to the B/W rasterizer.
  * Auto-hinter support for Medefaidrin script.
  * Fix various  memory leaks (mainly  for CFF) and other  issues that
    might cause crashes in rare circumstances.</changelog>
  <changelog author="fstrba@suse.com" date="1661256000">- Added patches:
  * CVE-2022-27404.patch
    + fixes bsc#1198830, CVE-2022-27404: Buffer Overflow
  * CVE-2022-27405.patch
    + fixes bsc#1198832, CVE-2022-27405: Segmentation Fault
  * CVE-2022-27406.patch
    + fixes bsc#1198823, CVE-2022-27406: Segmentation violation</changelog>
  <changelog author="meissner@suse.com" date="1661947200">- disable brotli linkage / WOFF2 support for now to keep dependencies
  as before.</changelog>
  <changelog author="fstrba@suse.com" date="1692705600">- Added patch:
  * CVE-2023-2004.patch
    + fixes bsc#1210419, CVE-2023-2004: Integer overflow</changelog>
  <changelog author="fstrba@suse.com" date="1742212800">- Added patch:
  * CVE-2025-27363.patch
    + fixes bsc#1239465, CVE-2025-27363: out-of-bounds write when
    attempting to parse font subglyph structures related to
    TrueType GX and variable font files</changelog>
  <changelog author="dmueller@suse.com" date="1745409600">- enable brotli support (jsc#PED-12258)</changelog>
  <changelog author="pgajdos@suse.com" date="1762430400">- package FTL.TXT and GPLv2.TXT as %license [bsc#1252148]</changelog>
</package>
<package pkgid="8b16e329d2d1a2bab0283da07673747216434ab3871beb5295c0a6234e39a0e6" name="libfreshclam3" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="150600.18.12.1"/>
  <changelog author="suse+build@de-korte.org" date="1641988800">- Update to 0.103.5
  * CVE-2022-20698: Fix for invalid pointer read that may cause a crash.
    This issue affects 0.104.1, 0.103.4 and prior when ClamAV is compiled
    with libjson-c and the CL_SCAN_GENERAL_COLLECT_METADATA scan option
    (the clamscan --gen-json option) is enabled. (bsc#1194731)
  * Fixed ability to disable the file size limit with libclamav C API,
    like this:
    cl_engine_set_num(engine, CL_ENGINE_MAX_FILESIZE, 0);
    This issue didn't affect ClamD or ClamScan which also can disable the
    limit by setting it to zero using MaxFileSize 0 in clamd.conf for ClamD,
    or clamscan --max-filesize=0 for ClamScan.
    Note: Internally, the max file size is still set to 2 GiB. Disabling the
    limit for a scan will fall back on the internal 2 GiB limitation.
  * Increased the maximum line length for ClamAV config files from 512 bytes
    to 1,024 bytes to allow for longer config option strings.
  * SigTool: Fix insufficient buffer size for --list-sigs that caused a
    failure when listing a database containing one or more very long
    signatures. This fix was backported from 0.104.</changelog>
  <changelog author="meissner@suse.com" date="1649764800">- https source urls</changelog>
  <changelog author="suse+build@de-korte.org" date="1651752000">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
  <changelog author="ecsos@opensuse.org" date="1659700800">- Update to 0.103.7 (bsc#1202986)
  - Zip parser: tolerate 2-byte overlap in file entries
  - Fix bug with logical signature Intermediates feature
  - Update to UnRAR v6.1.7
  - Patch UnRAR: allow skipping files in solid archives
  - Patch UnRAR: limit dict winsize to 1GB</changelog>
  <changelog author="suse+build@de-korte.org" date="1676462400">- Update to 0.103.8
  * CVE-2023-20032: Fixed a possible remote code execution vulnerability
    in the HFS+ file parser. Issue affects versions 1.0.0 and earlier,
    0.105.1 and earlier, and 0.103.7 and earlier. (bsc#1208363)
  * CVE-2023-20052: Fixed a possible remote information leak
    vulnerability in the DMG file parser. Issue affects versions 1.0.0
    and earlier, 0.105.1 and earlier, and 0.103.7 and earlier.
    (bsc#1208365)
  * Update vendored libmspack library to version 0.11alpha.
    (bsc#1103032: CVE-2018-14679)
- Package huge .html documentation in a separate subpackage.</changelog>
  <changelog author="suse+build@de-korte.org" date="1692187200">- Update to 0.103.9
  * CVE-2023-20197: Fixed a possible denial of service vulnerability in
    the HFS+ file parser. This issue affects versions 1.1.0, 1.0.1 through
    1.0.0, 0.105.2 through 0.105.0, 0.104.4 through 0.104.0, and 0.103.8
    through 0.103.0. (boo#1214342)
  * Fixed compiler warnings that may turn into errors in Clang 16.</changelog>
  <changelog author="max@suse.com" date="1692360000">- Renew clamav.keyring .</changelog>
  <changelog author="suse+build@de-korte.org" date="1698235200">- Update to 0.103.11
  * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.12.
  * Windows: libjson-c 0.17 compatibility fix. with ssize_t type definition.
  * Windows: Update build system to use OpenSSL 3 and PThreads-Win32 v3.
- Update to 0.103.10
  * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.10.
    (bsc#1216625, CVE-2023-40477)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="max@suse.com" date="1710504000">- New version: 1.3.0:
  * Added support for extracting and scanning attachments found in
    Microsoft OneNote section files. OneNote parsing will be
    enabled by default, but may be optionally disabled.
  * Added file type recognition for compiled Python (`.pyc`) files.
  * Improved support for decrypting PDFs with empty passwords.
  * Fixed a warning when scanning some HTML files.
  * ClamOnAcc: Fixed an infinite loop when a watched directory
    does not exist.
  * ClamOnAcc: Fixed an infinite loop when a file has been deleted
    before a scan.
- New version: 1.2.0:
  * Added support for extracting Universal Disk Format (UDF)
    partitions.
  * Added an option to customize the size of ClamAV's clean file
    cache.
  * Raised the MaxScanSize limit so the total amount of data
    scanned when scanning a file or archive may exceed 4 gigabytes.
  * Added ability for Freshclam to use a client certificate PEM
    file and a private key PEM file for authentication to a private
    mirror.
  * Fix an issue extracting files from ISO9660 partitions where the
    files are listed in the plain ISO tree and there also exists an
    empty Joliet tree.
  * PID and socket are now located under /run/clamav/clamd.pid and
    /run/clamav/clamd.sock .
  * bsc#1211594: Fixed an issue where ClamAV does not abort the
    signature load process after partially loading an invalid
    signature.
- New version 1.1.0:
  * https://blog.clamav.net/2023/05/clamav-110-released.html
  * Added the ability to extract images embedded in HTML CSS
    &lt;style&gt; blocks.
  * Updated to Sigtool so that the --vba option will extract VBA
    code from Microsoft Office documents the same way that
    libclamav extracts VBA.
  * Added a new option --fail-if-cvd-older-than=days to clamscan
    and clamd, and FailIfCvdOlderThan to clamd.conf
  * Added a new function cl_cvdgetage() to the libclamav API.
  * Added a new function cl_engine_set_clcb_vba() to the
    libclamav API.
  * obsoletes clamav-ec32.patch.
- boo#1180296: Integrate clamonacc as a service.
- New version 1.0.1 LTS (including changes in 0.104 and 0.105):
  * As of ClamAV 0.104, CMake is required to build ClamAV.
  * As of ClamAV 0.105, Rust is now required to compile ClamAV.
  * Increased the default limits for file and scan size:
  * MaxScanSize: 100M to 400M
  * MaxFileSize: 25M to 100M
  * StreamMaxLength: 25M to 100M
  * PCREMaxFileSize: 25M to 100M
  * MaxEmbeddedPE: 10M to 40M
  * MaxHTMLNormalize: 10M to 40M
  * MaxScriptNormalize: 5M to 20M
  * MaxHTMLNoTags: 2M to 8M
  * Added image fuzzy hash subsignatures for logical signatures.
  * Support for decrypting read-only OLE2-based XLS files that are
    encrypted with the default password.
  * Overhauled the implementation of the all-match feature.
  * Added a new callback to the public API for inspecting file
    content during a scan at each layer of archive extraction.
  * Added a new function to the public API for unpacking CVD
    signature archives.
  * The option to build with an external TomsFastMath library has
    been removed. ClamAV requires non-default build options for
    TomsFastMath to support bigger floating point numbers.
  * For a full list of changes see the release announcements:
  * https://blog.clamav.net/2022/11/clamav-100-lts-released.html
  * https://blog.clamav.net/2022/05/clamav-01050-01043-01036-released.html
  * https://blog.clamav.net/2021/09/clamav-01040-released.html
- Build clamd with systemd support.
- Fix format strings on 32bit platforms (clamav-format.patch).
- Add missing endianness conversions (clamav-ec32.patch).
- Don't build on armv7l for now due to some test failures.
- Drop clamav-disable-yara.patch as yara cannot be disabled anymore</changelog>
  <changelog author="max@suse.com" date="1713787200">- New Version: 1.3.1:
  * CVE-2024-20380: Fixed a possible crash in the HTML file parser
    that could cause a denial-of-service (DoS) condition.
  * Updated select Rust dependencies to the latest versions.
  * Fixed a bug causing some text to be truncated when converting
    from UTF-16.
  * Fixed assorted complaints identified by Coverity static
    analysis.
  * Fixed a bug causing CVDs downloaded by the DatabaseCustomURL
    Freshclam config option to be pruned and then re-downloaded
    with every update.
  * Added the new 'valhalla' database name to the list of optional
    databases in preparation for future work.</changelog>
  <changelog author="bwiedemann@suse.com" date="1722254400">- Add upstream 1305.patch to fix tests (boo#1102840, https://github.com/Cisco-Talos/clamav/issues/1300)</changelog>
  <changelog author="suse+build@de-korte.org" date="1725451200">- New version 1.3.2:
  * CVE-2024-20506: Changed the logging module to disable following
    symlinks on Linux and Unix systems so as to prevent an attacker
    with existing access to the 'clamd' or 'freshclam' services from
    using a symlink to corrupt system files.
  * CVE-2024-20505: Fixed a possible out-of-bounds read bug in the PDF
    file parser that could cause a denial-of-service condition.
  * Removed unused Python modules from freshclam tests including
    deprecated 'cgi' module that is expected to cause test failures in
    Python 3.13.
  * Fix unit test caused by expiring signing certificate.
  * Fixed a build issue on Windows with newer versions of Rust. Also
    upgraded GitHub Actions imports to fix CI failures.
  * Fixed an unaligned pointer dereference issue on select architectures.
  * Fixes to Jenkins CI pipeline.
- Remove upstreamed 1305.patch</changelog>
  <changelog author="max@suse.com" date="1725969600">- New version 1.4.1:
  * [CVE-2024-20506, bsc#1230162]: Changed the logging module to
    disable following symlinks on Linux and Unix systems so as to
    prevent an attacker with existing access to the 'clamd' or
    'freshclam' services from using a symlink to corrupt system
    files.
  * [CVE-2024-20505, bsc#1230161]: Fixed a possible out-of-bounds
    read bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition.
  * https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html
- New version 1.4.0:
  * Added support for extracting ALZ archives.
  * Added support for extracting LHA/LZH archives.
  * Added the ability to disable image fuzzy hashing, if needed.
    For context, image fuzzy hashing is a detection mechanism
    useful for identifying malware by matching images included with
    the malware or phishing email/document.
  * https://blog.clamav.net/2024/08/clamav-140-feature-release-and-clamav.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734523200">- fix factory submission (clam.tcl, clamscan.log)</changelog>
  <changelog author="max@suse.com" date="1736510400">- bsc#1232242: Start clamonacc with --fdpass to avoid errors due to
  clamd not being able to access user files.</changelog>
  <changelog author="max@suse.com" date="1737547200">- New version 1.4.2:
  * CVE-2025-20128, bsc#1236307: Fixed a possible buffer overflow
    read bug in the OLE2 file parser that could cause a
    denial-of-service (DoS) condition.</changelog>
  <changelog author="max@suse.com" date="1737633600">- Drop the version dependency on libcurl. Building against versions
  older than 7.45 does not fail anymore, but disables support for
  fdpassing in clamonacc. This only affects SLE-12 up to SP3.</changelog>
  <changelog author="max@suse.com" date="1739188800">- bsc#1236949: Fix location of license files.</changelog>
  <changelog author="max@suse.com" date="1742817600">- bsc#1239957: Build with PIE.
- Eliminate some UTF-8 NBSP characters from the changes file.</changelog>
</package>
<package pkgid="984a9fea01e3e7d5feef697a4c7dd4eb6671e80255f5cc961d0e447a93189eb2" name="libfreshclam3" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="150600.18.15.1"/>
  <changelog author="meissner@suse.com" date="1649764800">- https source urls</changelog>
  <changelog author="suse+build@de-korte.org" date="1651752000">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
  <changelog author="ecsos@opensuse.org" date="1659700800">- Update to 0.103.7 (bsc#1202986)
  - Zip parser: tolerate 2-byte overlap in file entries
  - Fix bug with logical signature Intermediates feature
  - Update to UnRAR v6.1.7
  - Patch UnRAR: allow skipping files in solid archives
  - Patch UnRAR: limit dict winsize to 1GB</changelog>
  <changelog author="suse+build@de-korte.org" date="1676462400">- Update to 0.103.8
  * CVE-2023-20032: Fixed a possible remote code execution vulnerability
    in the HFS+ file parser. Issue affects versions 1.0.0 and earlier,
    0.105.1 and earlier, and 0.103.7 and earlier. (bsc#1208363)
  * CVE-2023-20052: Fixed a possible remote information leak
    vulnerability in the DMG file parser. Issue affects versions 1.0.0
    and earlier, 0.105.1 and earlier, and 0.103.7 and earlier.
    (bsc#1208365)
  * Update vendored libmspack library to version 0.11alpha.
    (bsc#1103032: CVE-2018-14679)
- Package huge .html documentation in a separate subpackage.</changelog>
  <changelog author="suse+build@de-korte.org" date="1692187200">- Update to 0.103.9
  * CVE-2023-20197: Fixed a possible denial of service vulnerability in
    the HFS+ file parser. This issue affects versions 1.1.0, 1.0.1 through
    1.0.0, 0.105.2 through 0.105.0, 0.104.4 through 0.104.0, and 0.103.8
    through 0.103.0. (boo#1214342)
  * Fixed compiler warnings that may turn into errors in Clang 16.</changelog>
  <changelog author="max@suse.com" date="1692360000">- Renew clamav.keyring .</changelog>
  <changelog author="suse+build@de-korte.org" date="1698235200">- Update to 0.103.11
  * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.12.
  * Windows: libjson-c 0.17 compatibility fix. with ssize_t type definition.
  * Windows: Update build system to use OpenSSL 3 and PThreads-Win32 v3.
- Update to 0.103.10
  * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.10.
    (bsc#1216625, CVE-2023-40477)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="max@suse.com" date="1710504000">- New version: 1.3.0:
  * Added support for extracting and scanning attachments found in
    Microsoft OneNote section files. OneNote parsing will be
    enabled by default, but may be optionally disabled.
  * Added file type recognition for compiled Python (`.pyc`) files.
  * Improved support for decrypting PDFs with empty passwords.
  * Fixed a warning when scanning some HTML files.
  * ClamOnAcc: Fixed an infinite loop when a watched directory
    does not exist.
  * ClamOnAcc: Fixed an infinite loop when a file has been deleted
    before a scan.
- New version: 1.2.0:
  * Added support for extracting Universal Disk Format (UDF)
    partitions.
  * Added an option to customize the size of ClamAV's clean file
    cache.
  * Raised the MaxScanSize limit so the total amount of data
    scanned when scanning a file or archive may exceed 4 gigabytes.
  * Added ability for Freshclam to use a client certificate PEM
    file and a private key PEM file for authentication to a private
    mirror.
  * Fix an issue extracting files from ISO9660 partitions where the
    files are listed in the plain ISO tree and there also exists an
    empty Joliet tree.
  * PID and socket are now located under /run/clamav/clamd.pid and
    /run/clamav/clamd.sock .
  * bsc#1211594: Fixed an issue where ClamAV does not abort the
    signature load process after partially loading an invalid
    signature.
- New version 1.1.0:
  * https://blog.clamav.net/2023/05/clamav-110-released.html
  * Added the ability to extract images embedded in HTML CSS
    &lt;style&gt; blocks.
  * Updated to Sigtool so that the --vba option will extract VBA
    code from Microsoft Office documents the same way that
    libclamav extracts VBA.
  * Added a new option --fail-if-cvd-older-than=days to clamscan
    and clamd, and FailIfCvdOlderThan to clamd.conf
  * Added a new function cl_cvdgetage() to the libclamav API.
  * Added a new function cl_engine_set_clcb_vba() to the
    libclamav API.
  * obsoletes clamav-ec32.patch.
- boo#1180296: Integrate clamonacc as a service.
- New version 1.0.1 LTS (including changes in 0.104 and 0.105):
  * As of ClamAV 0.104, CMake is required to build ClamAV.
  * As of ClamAV 0.105, Rust is now required to compile ClamAV.
  * Increased the default limits for file and scan size:
  * MaxScanSize: 100M to 400M
  * MaxFileSize: 25M to 100M
  * StreamMaxLength: 25M to 100M
  * PCREMaxFileSize: 25M to 100M
  * MaxEmbeddedPE: 10M to 40M
  * MaxHTMLNormalize: 10M to 40M
  * MaxScriptNormalize: 5M to 20M
  * MaxHTMLNoTags: 2M to 8M
  * Added image fuzzy hash subsignatures for logical signatures.
  * Support for decrypting read-only OLE2-based XLS files that are
    encrypted with the default password.
  * Overhauled the implementation of the all-match feature.
  * Added a new callback to the public API for inspecting file
    content during a scan at each layer of archive extraction.
  * Added a new function to the public API for unpacking CVD
    signature archives.
  * The option to build with an external TomsFastMath library has
    been removed. ClamAV requires non-default build options for
    TomsFastMath to support bigger floating point numbers.
  * For a full list of changes see the release announcements:
  * https://blog.clamav.net/2022/11/clamav-100-lts-released.html
  * https://blog.clamav.net/2022/05/clamav-01050-01043-01036-released.html
  * https://blog.clamav.net/2021/09/clamav-01040-released.html
- Build clamd with systemd support.
- Fix format strings on 32bit platforms (clamav-format.patch).
- Add missing endianness conversions (clamav-ec32.patch).
- Don't build on armv7l for now due to some test failures.
- Drop clamav-disable-yara.patch as yara cannot be disabled anymore</changelog>
  <changelog author="max@suse.com" date="1713787200">- New Version: 1.3.1:
  * CVE-2024-20380: Fixed a possible crash in the HTML file parser
    that could cause a denial-of-service (DoS) condition.
  * Updated select Rust dependencies to the latest versions.
  * Fixed a bug causing some text to be truncated when converting
    from UTF-16.
  * Fixed assorted complaints identified by Coverity static
    analysis.
  * Fixed a bug causing CVDs downloaded by the DatabaseCustomURL
    Freshclam config option to be pruned and then re-downloaded
    with every update.
  * Added the new 'valhalla' database name to the list of optional
    databases in preparation for future work.</changelog>
  <changelog author="bwiedemann@suse.com" date="1722254400">- Add upstream 1305.patch to fix tests (boo#1102840, https://github.com/Cisco-Talos/clamav/issues/1300)</changelog>
  <changelog author="suse+build@de-korte.org" date="1725451200">- New version 1.3.2:
  * CVE-2024-20506: Changed the logging module to disable following
    symlinks on Linux and Unix systems so as to prevent an attacker
    with existing access to the 'clamd' or 'freshclam' services from
    using a symlink to corrupt system files.
  * CVE-2024-20505: Fixed a possible out-of-bounds read bug in the PDF
    file parser that could cause a denial-of-service condition.
  * Removed unused Python modules from freshclam tests including
    deprecated 'cgi' module that is expected to cause test failures in
    Python 3.13.
  * Fix unit test caused by expiring signing certificate.
  * Fixed a build issue on Windows with newer versions of Rust. Also
    upgraded GitHub Actions imports to fix CI failures.
  * Fixed an unaligned pointer dereference issue on select architectures.
  * Fixes to Jenkins CI pipeline.
- Remove upstreamed 1305.patch</changelog>
  <changelog author="max@suse.com" date="1725969600">- New version 1.4.1:
  * [CVE-2024-20506, bsc#1230162]: Changed the logging module to
    disable following symlinks on Linux and Unix systems so as to
    prevent an attacker with existing access to the 'clamd' or
    'freshclam' services from using a symlink to corrupt system
    files.
  * [CVE-2024-20505, bsc#1230161]: Fixed a possible out-of-bounds
    read bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition.
  * https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html
- New version 1.4.0:
  * Added support for extracting ALZ archives.
  * Added support for extracting LHA/LZH archives.
  * Added the ability to disable image fuzzy hashing, if needed.
    For context, image fuzzy hashing is a detection mechanism
    useful for identifying malware by matching images included with
    the malware or phishing email/document.
  * https://blog.clamav.net/2024/08/clamav-140-feature-release-and-clamav.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734523200">- fix factory submission (clam.tcl, clamscan.log)</changelog>
  <changelog author="max@suse.com" date="1736510400">- bsc#1232242: Start clamonacc with --fdpass to avoid errors due to
  clamd not being able to access user files.</changelog>
  <changelog author="max@suse.com" date="1737547200">- New version 1.4.2:
  * CVE-2025-20128, bsc#1236307: Fixed a possible buffer overflow
    read bug in the OLE2 file parser that could cause a
    denial-of-service (DoS) condition.</changelog>
  <changelog author="max@suse.com" date="1737633600">- Drop the version dependency on libcurl. Building against versions
  older than 7.45 does not fail anymore, but disables support for
  fdpassing in clamonacc. This only affects SLE-12 up to SP3.</changelog>
  <changelog author="max@suse.com" date="1739188800">- bsc#1236949: Fix location of license files.</changelog>
  <changelog author="max@suse.com" date="1742817600">- bsc#1239957: Build with PIE.
- Eliminate some UTF-8 NBSP characters from the changes file.</changelog>
  <changelog author="max@suse.com" date="1748433600">- bsc#1243565: Add clamav-freshclam_test.patch to fix a race
  condition between the mockup servers started by different test
  cases in freshclam_test.py.</changelog>
</package>
<package pkgid="5985e9372120b46ce1f601ee3719974697616c83f17a5a07e7c418ef658c9069" name="libfreshclam3" arch="x86_64">
  <version epoch="0" ver="1.4.3" rel="150600.18.18.1"/>
  <changelog author="suse+build@de-korte.org" date="1651752000">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
  <changelog author="ecsos@opensuse.org" date="1659700800">- Update to 0.103.7 (bsc#1202986)
  - Zip parser: tolerate 2-byte overlap in file entries
  - Fix bug with logical signature Intermediates feature
  - Update to UnRAR v6.1.7
  - Patch UnRAR: allow skipping files in solid archives
  - Patch UnRAR: limit dict winsize to 1GB</changelog>
  <changelog author="suse+build@de-korte.org" date="1676462400">- Update to 0.103.8
  * CVE-2023-20032: Fixed a possible remote code execution vulnerability
    in the HFS+ file parser. Issue affects versions 1.0.0 and earlier,
    0.105.1 and earlier, and 0.103.7 and earlier. (bsc#1208363)
  * CVE-2023-20052: Fixed a possible remote information leak
    vulnerability in the DMG file parser. Issue affects versions 1.0.0
    and earlier, 0.105.1 and earlier, and 0.103.7 and earlier.
    (bsc#1208365)
  * Update vendored libmspack library to version 0.11alpha.
    (bsc#1103032: CVE-2018-14679)
- Package huge .html documentation in a separate subpackage.</changelog>
  <changelog author="suse+build@de-korte.org" date="1692187200">- Update to 0.103.9
  * CVE-2023-20197: Fixed a possible denial of service vulnerability in
    the HFS+ file parser. This issue affects versions 1.1.0, 1.0.1 through
    1.0.0, 0.105.2 through 0.105.0, 0.104.4 through 0.104.0, and 0.103.8
    through 0.103.0. (boo#1214342)
  * Fixed compiler warnings that may turn into errors in Clang 16.</changelog>
  <changelog author="max@suse.com" date="1692360000">- Renew clamav.keyring .</changelog>
  <changelog author="suse+build@de-korte.org" date="1698235200">- Update to 0.103.11
  * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.12.
  * Windows: libjson-c 0.17 compatibility fix. with ssize_t type definition.
  * Windows: Update build system to use OpenSSL 3 and PThreads-Win32 v3.
- Update to 0.103.10
  * Upgrade the bundled UnRAR library (libclamunrar) to version 6.2.10.
    (bsc#1216625, CVE-2023-40477)</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="max@suse.com" date="1710504000">- New version: 1.3.0:
  * Added support for extracting and scanning attachments found in
    Microsoft OneNote section files. OneNote parsing will be
    enabled by default, but may be optionally disabled.
  * Added file type recognition for compiled Python (`.pyc`) files.
  * Improved support for decrypting PDFs with empty passwords.
  * Fixed a warning when scanning some HTML files.
  * ClamOnAcc: Fixed an infinite loop when a watched directory
    does not exist.
  * ClamOnAcc: Fixed an infinite loop when a file has been deleted
    before a scan.
- New version: 1.2.0:
  * Added support for extracting Universal Disk Format (UDF)
    partitions.
  * Added an option to customize the size of ClamAV's clean file
    cache.
  * Raised the MaxScanSize limit so the total amount of data
    scanned when scanning a file or archive may exceed 4 gigabytes.
  * Added ability for Freshclam to use a client certificate PEM
    file and a private key PEM file for authentication to a private
    mirror.
  * Fix an issue extracting files from ISO9660 partitions where the
    files are listed in the plain ISO tree and there also exists an
    empty Joliet tree.
  * PID and socket are now located under /run/clamav/clamd.pid and
    /run/clamav/clamd.sock .
  * bsc#1211594: Fixed an issue where ClamAV does not abort the
    signature load process after partially loading an invalid
    signature.
- New version 1.1.0:
  * https://blog.clamav.net/2023/05/clamav-110-released.html
  * Added the ability to extract images embedded in HTML CSS
    &lt;style&gt; blocks.
  * Updated to Sigtool so that the --vba option will extract VBA
    code from Microsoft Office documents the same way that
    libclamav extracts VBA.
  * Added a new option --fail-if-cvd-older-than=days to clamscan
    and clamd, and FailIfCvdOlderThan to clamd.conf
  * Added a new function cl_cvdgetage() to the libclamav API.
  * Added a new function cl_engine_set_clcb_vba() to the
    libclamav API.
  * obsoletes clamav-ec32.patch.
- boo#1180296: Integrate clamonacc as a service.
- New version 1.0.1 LTS (including changes in 0.104 and 0.105):
  * As of ClamAV 0.104, CMake is required to build ClamAV.
  * As of ClamAV 0.105, Rust is now required to compile ClamAV.
  * Increased the default limits for file and scan size:
  * MaxScanSize: 100M to 400M
  * MaxFileSize: 25M to 100M
  * StreamMaxLength: 25M to 100M
  * PCREMaxFileSize: 25M to 100M
  * MaxEmbeddedPE: 10M to 40M
  * MaxHTMLNormalize: 10M to 40M
  * MaxScriptNormalize: 5M to 20M
  * MaxHTMLNoTags: 2M to 8M
  * Added image fuzzy hash subsignatures for logical signatures.
  * Support for decrypting read-only OLE2-based XLS files that are
    encrypted with the default password.
  * Overhauled the implementation of the all-match feature.
  * Added a new callback to the public API for inspecting file
    content during a scan at each layer of archive extraction.
  * Added a new function to the public API for unpacking CVD
    signature archives.
  * The option to build with an external TomsFastMath library has
    been removed. ClamAV requires non-default build options for
    TomsFastMath to support bigger floating point numbers.
  * For a full list of changes see the release announcements:
  * https://blog.clamav.net/2022/11/clamav-100-lts-released.html
  * https://blog.clamav.net/2022/05/clamav-01050-01043-01036-released.html
  * https://blog.clamav.net/2021/09/clamav-01040-released.html
- Build clamd with systemd support.
- Fix format strings on 32bit platforms (clamav-format.patch).
- Add missing endianness conversions (clamav-ec32.patch).
- Don't build on armv7l for now due to some test failures.
- Drop clamav-disable-yara.patch as yara cannot be disabled anymore</changelog>
  <changelog author="max@suse.com" date="1713787200">- New Version: 1.3.1:
  * CVE-2024-20380: Fixed a possible crash in the HTML file parser
    that could cause a denial-of-service (DoS) condition.
  * Updated select Rust dependencies to the latest versions.
  * Fixed a bug causing some text to be truncated when converting
    from UTF-16.
  * Fixed assorted complaints identified by Coverity static
    analysis.
  * Fixed a bug causing CVDs downloaded by the DatabaseCustomURL
    Freshclam config option to be pruned and then re-downloaded
    with every update.
  * Added the new 'valhalla' database name to the list of optional
    databases in preparation for future work.</changelog>
  <changelog author="bwiedemann@suse.com" date="1722254400">- Add upstream 1305.patch to fix tests (boo#1102840, https://github.com/Cisco-Talos/clamav/issues/1300)</changelog>
  <changelog author="suse+build@de-korte.org" date="1725451200">- New version 1.3.2:
  * CVE-2024-20506: Changed the logging module to disable following
    symlinks on Linux and Unix systems so as to prevent an attacker
    with existing access to the 'clamd' or 'freshclam' services from
    using a symlink to corrupt system files.
  * CVE-2024-20505: Fixed a possible out-of-bounds read bug in the PDF
    file parser that could cause a denial-of-service condition.
  * Removed unused Python modules from freshclam tests including
    deprecated 'cgi' module that is expected to cause test failures in
    Python 3.13.
  * Fix unit test caused by expiring signing certificate.
  * Fixed a build issue on Windows with newer versions of Rust. Also
    upgraded GitHub Actions imports to fix CI failures.
  * Fixed an unaligned pointer dereference issue on select architectures.
  * Fixes to Jenkins CI pipeline.
- Remove upstreamed 1305.patch</changelog>
  <changelog author="max@suse.com" date="1725969600">- New version 1.4.1:
  * [CVE-2024-20506, bsc#1230162]: Changed the logging module to
    disable following symlinks on Linux and Unix systems so as to
    prevent an attacker with existing access to the 'clamd' or
    'freshclam' services from using a symlink to corrupt system
    files.
  * [CVE-2024-20505, bsc#1230161]: Fixed a possible out-of-bounds
    read bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition.
  * https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html
- New version 1.4.0:
  * Added support for extracting ALZ archives.
  * Added support for extracting LHA/LZH archives.
  * Added the ability to disable image fuzzy hashing, if needed.
    For context, image fuzzy hashing is a detection mechanism
    useful for identifying malware by matching images included with
    the malware or phishing email/document.
  * https://blog.clamav.net/2024/08/clamav-140-feature-release-and-clamav.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734523200">- fix factory submission (clam.tcl, clamscan.log)</changelog>
  <changelog author="max@suse.com" date="1736510400">- bsc#1232242: Start clamonacc with --fdpass to avoid errors due to
  clamd not being able to access user files.</changelog>
  <changelog author="max@suse.com" date="1737547200">- New version 1.4.2:
  * CVE-2025-20128, bsc#1236307: Fixed a possible buffer overflow
    read bug in the OLE2 file parser that could cause a
    denial-of-service (DoS) condition.</changelog>
  <changelog author="max@suse.com" date="1737633600">- Drop the version dependency on libcurl. Building against versions
  older than 7.45 does not fail anymore, but disables support for
  fdpassing in clamonacc. This only affects SLE-12 up to SP3.</changelog>
  <changelog author="max@suse.com" date="1739188800">- bsc#1236949: Fix location of license files.</changelog>
  <changelog author="max@suse.com" date="1742817600">- bsc#1239957: Build with PIE.
- Eliminate some UTF-8 NBSP characters from the changes file.</changelog>
  <changelog author="max@suse.com" date="1748433600">- bsc#1243565: Add clamav-freshclam_test.patch to fix a race
  condition between the mockup servers started by different test
  cases in freshclam_test.py.</changelog>
  <changelog author="suse+build@de-korte.org" date="1750334400">- New version 1.4.3:
  ClamAV 1.4.3 is a patch release with the following fixes:
  * CVE-2025-20260, bsc#1245054: Fixed a possible buffer overflow
    write bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition or enable remote code
    execution. This issue only affects configurations where both:
  - The max file-size scan limit is set greater than or equal to 1024MB.
  - The max scan-size scan limit is set greater than or equal to 1025MB.
    The code flaw was present prior to version 1.0.0, but a change in
    version 1.0.0 that enables larger allocations based on untrusted data
    made it possible to trigger this bug.
    This issue affects all currently supported versions.
  * CVE-2025-20234, bsc#1245055: Fixed a possible buffer overflow
    read bug in the UDF file parser that may write to a temp file
    and thus disclose information, or it may crash and cause a
    denial-of-service (DoS) condition.
    This issue was introduced in version 1.2.0.
  * Fixed a possible use-after-free bug in the Xz decompression module in
    the bundled lzma-sdk library.
    This issue was fixed in the lzma-sdk version 18.03. ClamAV bundles a
    copy of the lzma-sdk with some performance changes specific to
    libclamav, plus select bug fixes like this one in lieu of a full
    upgrade to newer lzma-sdk.
    This issue affects all ClamAV versions at least as far back as 0.99.4.
  * Windows: Fixed a build install issue when a DLL dependency such as
    libcrypto has the exact same name as one provided by the Windows
    operating system.
- Renew clamav.keyring</changelog>
</package>
<package pkgid="02787ec1c8b417e06a9b20edad3428f381ecfbcd0a8ab5f227e6ce9ae81e1286" name="libfreshclam4" arch="x86_64">
  <version epoch="0" ver="1.5.1" rel="150600.18.22.1"/>
  <changelog author="max@suse.com" date="1713787200">- New Version: 1.3.1:
  * CVE-2024-20380: Fixed a possible crash in the HTML file parser
    that could cause a denial-of-service (DoS) condition.
  * Updated select Rust dependencies to the latest versions.
  * Fixed a bug causing some text to be truncated when converting
    from UTF-16.
  * Fixed assorted complaints identified by Coverity static
    analysis.
  * Fixed a bug causing CVDs downloaded by the DatabaseCustomURL
    Freshclam config option to be pruned and then re-downloaded
    with every update.
  * Added the new 'valhalla' database name to the list of optional
    databases in preparation for future work.</changelog>
  <changelog author="bwiedemann@suse.com" date="1722254400">- Add upstream 1305.patch to fix tests (boo#1102840, https://github.com/Cisco-Talos/clamav/issues/1300)</changelog>
  <changelog author="suse+build@de-korte.org" date="1725451200">- New version 1.3.2:
  * CVE-2024-20506: Changed the logging module to disable following
    symlinks on Linux and Unix systems so as to prevent an attacker
    with existing access to the 'clamd' or 'freshclam' services from
    using a symlink to corrupt system files.
  * CVE-2024-20505: Fixed a possible out-of-bounds read bug in the PDF
    file parser that could cause a denial-of-service condition.
  * Removed unused Python modules from freshclam tests including
    deprecated 'cgi' module that is expected to cause test failures in
    Python 3.13.
  * Fix unit test caused by expiring signing certificate.
  * Fixed a build issue on Windows with newer versions of Rust. Also
    upgraded GitHub Actions imports to fix CI failures.
  * Fixed an unaligned pointer dereference issue on select architectures.
  * Fixes to Jenkins CI pipeline.
- Remove upstreamed 1305.patch</changelog>
  <changelog author="max@suse.com" date="1725969600">- New version 1.4.1:
  * [CVE-2024-20506, bsc#1230162]: Changed the logging module to
    disable following symlinks on Linux and Unix systems so as to
    prevent an attacker with existing access to the 'clamd' or
    'freshclam' services from using a symlink to corrupt system
    files.
  * [CVE-2024-20505, bsc#1230161]: Fixed a possible out-of-bounds
    read bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition.
  * https://blog.clamav.net/2024/09/clamav-141-132-107-and-010312-security.html
- New version 1.4.0:
  * Added support for extracting ALZ archives.
  * Added support for extracting LHA/LZH archives.
  * Added the ability to disable image fuzzy hashing, if needed.
    For context, image fuzzy hashing is a detection mechanism
    useful for identifying malware by matching images included with
    the malware or phishing email/document.
  * https://blog.clamav.net/2024/08/clamav-140-feature-release-and-clamav.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734523200">- fix factory submission (clam.tcl, clamscan.log)</changelog>
  <changelog author="max@suse.com" date="1736510400">- bsc#1232242: Start clamonacc with --fdpass to avoid errors due to
  clamd not being able to access user files.</changelog>
  <changelog author="max@suse.com" date="1737547200">- New version 1.4.2:
  * CVE-2025-20128, bsc#1236307: Fixed a possible buffer overflow
    read bug in the OLE2 file parser that could cause a
    denial-of-service (DoS) condition.</changelog>
  <changelog author="max@suse.com" date="1737633600">- Drop the version dependency on libcurl. Building against versions
  older than 7.45 does not fail anymore, but disables support for
  fdpassing in clamonacc. This only affects SLE-12 up to SP3.</changelog>
  <changelog author="max@suse.com" date="1739188800">- bsc#1236949: Fix location of license files.</changelog>
  <changelog author="max@suse.com" date="1742817600">- bsc#1239957: Build with PIE.
- Eliminate some UTF-8 NBSP characters from the changes file.</changelog>
  <changelog author="max@suse.com" date="1748433600">- bsc#1243565: Add clamav-freshclam_test.patch to fix a race
  condition between the mockup servers started by different test
  cases in freshclam_test.py.</changelog>
  <changelog author="suse+build@de-korte.org" date="1750334400">- New version 1.4.3:
  ClamAV 1.4.3 is a patch release with the following fixes:
  * CVE-2025-20260, bsc#1245054: Fixed a possible buffer overflow
    write bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition or enable remote code
    execution. This issue only affects configurations where both:
  - The max file-size scan limit is set greater than or equal to 1024MB.
  - The max scan-size scan limit is set greater than or equal to 1025MB.
    The code flaw was present prior to version 1.0.0, but a change in
    version 1.0.0 that enables larger allocations based on untrusted data
    made it possible to trigger this bug.
    This issue affects all currently supported versions.
  * CVE-2025-20234, bsc#1245055: Fixed a possible buffer overflow
    read bug in the UDF file parser that may write to a temp file
    and thus disclose information, or it may crash and cause a
    denial-of-service (DoS) condition.
    This issue was introduced in version 1.2.0.
  * Fixed a possible use-after-free bug in the Xz decompression module in
    the bundled lzma-sdk library.
    This issue was fixed in the lzma-sdk version 18.03. ClamAV bundles a
    copy of the lzma-sdk with some performance changes specific to
    libclamav, plus select bug fixes like this one in lieu of a full
    upgrade to newer lzma-sdk.
    This issue affects all ClamAV versions at least as far back as 0.99.4.
  * Windows: Fixed a build install issue when a DLL dependency such as
    libcrypto has the exact same name as one provided by the Windows
    operating system.
- Renew clamav.keyring</changelog>
  <changelog author="max@suse.com" date="1751284800">- bsc#1240363, clamav-disable-administrative-commands.patch: clamd:
  Add an option to toggle SHUTDOWN, RELOAD, STATS and VERSION.</changelog>
  <changelog author="max@suse.com" date="1759924800">- New version 1.5.0:
  * Added checks to determine if an OLE2-based Microsoft Office
    document is encrypted.
  * Added the ability to record URIs found in HTML if the
    generate-JSON-metadata feature is enabled.
  * Added the ability to record URIs found in PDFs if the
    generate-JSON-metadata feature is enabled.
  * Added regex support for the clamd.conf OnAccessExcludePath
    config option.
  * Added CVD signing/verification with external .sign files.
  * Freshclam, ClamD, ClamScan, and Sigtool: Added an option to
    enable FIPS-like limits disabling MD5 and SHA1 from being used
    for verifying digital signatures or for being used to trust a
    file when checking for false positives
  * ClamD: Added an option to disable select administrative
    commands including SHUTDOWN, RELOAD, STATS and VERSION.
  * libclamav: Added extended hashing functions with a "flags"
    parameter that allows the caller to choose if they want to
    bypass FIPS hash algorithm limits.
  * See the release announcement for the full list of changes:
    https://blog.clamav.net/2025/10/clamav-150-released.html
- Obsoleted patches:
  * clamav-freshclam_test.patch
  * clamav-disable-administrative-commands.patch
  * clamav-fips.patch
- Use macros for library versions
- Remove service symlinks: rcclamd, rcfreshclam, rcclamav-milter,
  and clamonacc.
- Use rust 1.86 for SLE-12 and SLE-15-SP2.</changelog>
  <changelog author="max@suse.com" date="1760443200">- Add json-c-json-c-0.18-20240915.tar.gz and link it statically
  into libclamav on SLE-12, because version 0.12 is too old.</changelog>
  <changelog author="max@suse.com" date="1760616000">- New version: 1.5.1:
  * Fixed a significant performance issue when scanning some PE
    files.
  * Fixed an issue recording file entries from a ZIP archive
    central directory which resulted in
    "Heuristics.Limits.Exceeded.MaxFiles" alerts when using the
    ClamScan --alert-exceeds-max command line option or ClamD
    AlertExceedsMax config file option.
  * Improved performance when scanning TNEF email attachments.
  * Fixed an issue with recording metadata for OOXML office
    documents.
  * Fixed an issue with signature matches for VBA in OLE2 office
    documents.
  * Loosened overly restrictive rules for embedded file
    identification and increased the limit for finding PE files
    embedded in other PE files.
  * Fixed an issue with extracting some RAR archives embedded in
    other files.
  * Fixed an issue with calculating fuzzy hashes affecting some
    images by updating the version for several Rust library
    dependencies.</changelog>
  <changelog author="max@suse.com" date="1762257600">- Add clamav-workaround.patch to work around symbol removals in
  version 1.5.0 and 1.5.1.</changelog>
  <changelog author="bwiedemann@suse.com" date="1763208000">- Build with older rust 1.87 for reproducible builds (boo#1249404)</changelog>
  <changelog author="max@suse.com" date="1763726400">- Provide a better fix for boo#1249404 by disabling debug mode.</changelog>
  <changelog author="max@suse.com" date="1764331200">- Fix testsuite error on SLE-15-SP6 by falling back to rust1.86.</changelog>
</package>
<package pkgid="6d4f183df53fbe7821356edd8d54527827948dc8ba8c59f57843214d47fd287a" name="libfreshclam4" arch="x86_64">
  <version epoch="0" ver="1.5.2" rel="150600.18.25.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1734523200">- fix factory submission (clam.tcl, clamscan.log)</changelog>
  <changelog author="max@suse.com" date="1736510400">- bsc#1232242: Start clamonacc with --fdpass to avoid errors due to
  clamd not being able to access user files.</changelog>
  <changelog author="max@suse.com" date="1737547200">- New version 1.4.2:
  * CVE-2025-20128, bsc#1236307: Fixed a possible buffer overflow
    read bug in the OLE2 file parser that could cause a
    denial-of-service (DoS) condition.</changelog>
  <changelog author="max@suse.com" date="1737633600">- Drop the version dependency on libcurl. Building against versions
  older than 7.45 does not fail anymore, but disables support for
  fdpassing in clamonacc. This only affects SLE-12 up to SP3.</changelog>
  <changelog author="max@suse.com" date="1739188800">- bsc#1236949: Fix location of license files.</changelog>
  <changelog author="max@suse.com" date="1742817600">- bsc#1239957: Build with PIE.
- Eliminate some UTF-8 NBSP characters from the changes file.</changelog>
  <changelog author="max@suse.com" date="1748433600">- bsc#1243565: Add clamav-freshclam_test.patch to fix a race
  condition between the mockup servers started by different test
  cases in freshclam_test.py.</changelog>
  <changelog author="suse+build@de-korte.org" date="1750334400">- New version 1.4.3:
  ClamAV 1.4.3 is a patch release with the following fixes:
  * CVE-2025-20260, bsc#1245054: Fixed a possible buffer overflow
    write bug in the PDF file parser that could cause a
    denial-of-service (DoS) condition or enable remote code
    execution. This issue only affects configurations where both:
  - The max file-size scan limit is set greater than or equal to 1024MB.
  - The max scan-size scan limit is set greater than or equal to 1025MB.
    The code flaw was present prior to version 1.0.0, but a change in
    version 1.0.0 that enables larger allocations based on untrusted data
    made it possible to trigger this bug.
    This issue affects all currently supported versions.
  * CVE-2025-20234, bsc#1245055: Fixed a possible buffer overflow
    read bug in the UDF file parser that may write to a temp file
    and thus disclose information, or it may crash and cause a
    denial-of-service (DoS) condition.
    This issue was introduced in version 1.2.0.
  * Fixed a possible use-after-free bug in the Xz decompression module in
    the bundled lzma-sdk library.
    This issue was fixed in the lzma-sdk version 18.03. ClamAV bundles a
    copy of the lzma-sdk with some performance changes specific to
    libclamav, plus select bug fixes like this one in lieu of a full
    upgrade to newer lzma-sdk.
    This issue affects all ClamAV versions at least as far back as 0.99.4.
  * Windows: Fixed a build install issue when a DLL dependency such as
    libcrypto has the exact same name as one provided by the Windows
    operating system.
- Renew clamav.keyring</changelog>
  <changelog author="max@suse.com" date="1751284800">- bsc#1240363, clamav-disable-administrative-commands.patch: clamd:
  Add an option to toggle SHUTDOWN, RELOAD, STATS and VERSION.</changelog>
  <changelog author="max@suse.com" date="1759924800">- New version 1.5.0:
  * Added checks to determine if an OLE2-based Microsoft Office
    document is encrypted.
  * Added the ability to record URIs found in HTML if the
    generate-JSON-metadata feature is enabled.
  * Added the ability to record URIs found in PDFs if the
    generate-JSON-metadata feature is enabled.
  * Added regex support for the clamd.conf OnAccessExcludePath
    config option.
  * Added CVD signing/verification with external .sign files.
  * Freshclam, ClamD, ClamScan, and Sigtool: Added an option to
    enable FIPS-like limits disabling MD5 and SHA1 from being used
    for verifying digital signatures or for being used to trust a
    file when checking for false positives (bsc#1221954).
  * ClamD: Added an option to disable select administrative
    commands including SHUTDOWN, RELOAD, STATS and VERSION.
  * libclamav: Added extended hashing functions with a "flags"
    parameter that allows the caller to choose if they want to
    bypass FIPS hash algorithm limits.
  * See the release announcement for the full list of changes:
    https://blog.clamav.net/2025/10/clamav-150-released.html
- Obsoleted patches:
  * clamav-freshclam_test.patch
  * clamav-disable-administrative-commands.patch
  * clamav-fips.patch
- Use macros for library versions
- Remove service symlinks: rcclamd, rcfreshclam, rcclamav-milter,
  and clamonacc.
- Use rust 1.86 for SLE-12 and SLE-15-SP2.</changelog>
  <changelog author="max@suse.com" date="1760443200">- Add json-c-json-c-0.18-20240915.tar.gz and link it statically
  into libclamav on SLE-12, because version 0.12 is too old.</changelog>
  <changelog author="max@suse.com" date="1760616000">- New version: 1.5.1:
  * Fixed a significant performance issue when scanning some PE
    files.
  * Fixed an issue recording file entries from a ZIP archive
    central directory which resulted in
    "Heuristics.Limits.Exceeded.MaxFiles" alerts when using the
    ClamScan --alert-exceeds-max command line option or ClamD
    AlertExceedsMax config file option.
  * Improved performance when scanning TNEF email attachments.
  * Fixed an issue with recording metadata for OOXML office
    documents.
  * Fixed an issue with signature matches for VBA in OLE2 office
    documents.
  * Loosened overly restrictive rules for embedded file
    identification and increased the limit for finding PE files
    embedded in other PE files.
  * Fixed an issue with extracting some RAR archives embedded in
    other files.
  * Fixed an issue with calculating fuzzy hashes affecting some
    images by updating the version for several Rust library
    dependencies.</changelog>
  <changelog author="max@suse.com" date="1762257600">- Add clamav-workaround.patch to work around symbol removals in
  version 1.5.0 and 1.5.1.</changelog>
  <changelog author="bwiedemann@suse.com" date="1763208000">- Build with older rust 1.87 for reproducible builds (boo#1249404)</changelog>
  <changelog author="max@suse.com" date="1763726400">- Provide a better fix for boo#1249404 by disabling debug mode.</changelog>
  <changelog author="max@suse.com" date="1764331200">- Fix testsuite error on SLE-15-SP6 by falling back to rust1.86.</changelog>
  <changelog author="max@suse.com" date="1770724800">- jsc-PED-14819: Support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1770984000">- bsc#1258072: Require main and library packages to be of the same
  version and release. Given that all the core functionality is
  in the libraries it makes little sense to update the main
  package alone.</changelog>
  <changelog author="max@suse.com" date="1772712000">- New version 1.5.2:
  * bsc#1259207, CVE-2026-20031: Fixed an error handling bug in the
    HTML file parser that may crash the program and cause a
    denial-of-service (DoS) condition. This issue was introduced in
    version 1.1.0.
  * Fixed a possible infinite loop when scanning some JPEG files by
    upgrading affected ClamAV dependency, a Rust image library.
  * The CVD verification process will now ignore certificate files
    in the CVD certs directory when the user lacks read permissions.
  * Freshclam: Fix CLD verification bug with PrivateMirror option.
  * Upgraded the Rust bytes dependency to a newer version to
    resolve RUSTSEC-2026-0007 advisory.
  * Fixed a possible crash caused by invalid pointer alignment on
    some platforms.
  * Minimal required Rust version is now 1.87.</changelog>
  <changelog author="max@suse.com" date="1773316800">- Disable build for 32 bit ix86 because of testsuite failures with
  rust &gt;= 1.87 that upstream is not planning to fix.
- Run the test suite on all SUSE releases.</changelog>
</package>
<package pkgid="dc7a501be9aa42412a9d978ce9ea2836983e23e4f776e07fa4915d31c75d691b" name="libgbm-devel" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.5.1"/>
  <changelog author="sndirsch@suse.com" date="1730376000">- added -32bit package for Mesa-libva since it's needed by Steam;
  reported on packman ML:
  https://lists.links2linux.de/pipermail/packman/2024-October/017985.html</changelog>
  <changelog author="mrueckert@suse.de" date="1730376001">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
</package>
<package pkgid="1986a651ed8f09dd028f941ddcde345660043124ac48de0b816624f227b9d449" name="libgbm-devel" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.8.1"/>
  <changelog author="mrueckert@suse.de" date="1730376000">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
</package>
<package pkgid="a0f6ae3a65b9447cf8d6f203146d73f99a8007b6d685134b695c34244a714320" name="libgbm1" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.5.1"/>
  <changelog author="sndirsch@suse.com" date="1730376000">- added -32bit package for Mesa-libva since it's needed by Steam;
  reported on packman ML:
  https://lists.links2linux.de/pipermail/packman/2024-October/017985.html</changelog>
  <changelog author="mrueckert@suse.de" date="1730376001">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
</package>
<package pkgid="ab6478a167999c2daee25da465e33649b18b1c46d4bcb2eee578c63ffa938560" name="libgbm1" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.8.1"/>
  <changelog author="mrueckert@suse.de" date="1730376000">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
</package>
<package pkgid="3cf4fc45113848bdcdc7c2db4b293a777d89bf839bdeec347cca29fd73ca9807" name="libgbm1-32bit" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.5.1"/>
  <changelog author="sndirsch@suse.com" date="1730376000">- added -32bit package for Mesa-libva since it's needed by Steam;
  reported on packman ML:
  https://lists.links2linux.de/pipermail/packman/2024-October/017985.html</changelog>
  <changelog author="mrueckert@suse.de" date="1730376001">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
</package>
<package pkgid="1dbb7786bb8a16806b36c01bd069d62adc07e0a7cba4709ef44fd31c25b9563f" name="libgbm1-32bit" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.8.1"/>
  <changelog author="mrueckert@suse.de" date="1730376000">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
</package>
<package pkgid="563fe394b4b440ad1ee21e1b5f01761fdfef1ff9feed6373f4a825e9d73cd790" name="libgcc_s1" arch="x86_64">
  <version epoch="0" ver="14.3.0+git11799" rel="150000.1.11.1"/>
  <changelog author="rguenther@suse.com" date="1728475200">- Update to gcc-14 branch head, 4af44f2cf7d281f3e4f3957ef, git10750
  * includes libstdc++6 fix for parsing tzdata 2024b [gcc#116657]
- Add gcc14-pr116629.patch to fix ICE with LTO building openvino
  on aarch64 [boo#1230262]</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1732968000">- Add loongarch64 to asan_arch, atomic_arch,
  itm_arch, lsan_arch, tsan_arch and ubsan_arch
- Add larchintrin.h, lasxintrin.h and lsxintrin.h
  headers to gccXY main package in %files section
- Set build_primary_64bit to 1 for loongarch64</changelog>
  <changelog author="adrian@suse.de" date="1733140800">- disable go on loongarch64 for now</changelog>
  <changelog author="mardnh@gmx.de" date="1736078400">- Switch to glibc based cross-compiler for target hppa</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Define ALT_CC_UNDER_TEST and ALT_CXX_UNDER_TEST for compat tests</changelog>
  <changelog author="rguenther@suse.com" date="1738152000">- For cross compilers require the same or newer binutils, newlib
  or cross-glibc that was used at build time.  [bsc#1232526]</changelog>
  <changelog author="rguenther@suse.com" date="1738843200">- Adjust cross compiler requirements to use %requires_ge
- Fix condition on whether to enable plugins or JIT support to
  not check sle_version which is not defined in SLFO but to check
  is_opensuse and suse_version instead.
- Add gcc14-pr118780.patch to make the SLFO config work.</changelog>
  <changelog author="rguenther@suse.com" date="1740052800">- Update to gcc-14 branch head, 9ffecde121af883b60bbe60d0, git11321
  * fixes reported ICE in [bsc#1237442]
- Drop gcc14-pr116629.patch now backported to the branch.</changelog>
  <changelog author="rguenther@suse.com" date="1741608000">- Disable profiling during build when %want_reproducible_builds is set
  [bsc#1238491]</changelog>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
</package>
<package pkgid="a76d467131efb698dd6c6030a48561c99c301df333ca54bf89b94bbd65021b09" name="libgcc_s1" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.3.3"/>
  <changelog author="rguenther@suse.com" date="1743163200">- Update to GCC trunk head, 15.0.1+git9001
  * includes -msplit-patch-nops required for user-space livepatching
    on powerpc
  * includes fix for Ada build with --enable-host-pie
- Adjust for removed avx10_2roundingintrin.h intrinsic header.
- Build GCC executables PIE on SLE.  [bsc#1239938]</changelog>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="309841230ce940e72e51826cd3279166576ea11d5d275896d26532526f89ff08" name="libgcc_s1" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.6.1"/>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
</package>
<package pkgid="7a6845befd0baaf835c1b114a9353a5655dd621159f524162187c7c4bd544154" name="libgcc_s1" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.9.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc14-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="0b2aaf4f06f6a1972fbbcad07d0c19102b67f758cdd628e1c37269133dff187d" name="libgcc_s1-32bit" arch="x86_64">
  <version epoch="0" ver="14.3.0+git11799" rel="150000.1.11.1"/>
  <changelog author="rguenther@suse.com" date="1728475200">- Update to gcc-14 branch head, 4af44f2cf7d281f3e4f3957ef, git10750
  * includes libstdc++6 fix for parsing tzdata 2024b [gcc#116657]
- Add gcc14-pr116629.patch to fix ICE with LTO building openvino
  on aarch64 [boo#1230262]</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1732968000">- Add loongarch64 to asan_arch, atomic_arch,
  itm_arch, lsan_arch, tsan_arch and ubsan_arch
- Add larchintrin.h, lasxintrin.h and lsxintrin.h
  headers to gccXY main package in %files section
- Set build_primary_64bit to 1 for loongarch64</changelog>
  <changelog author="adrian@suse.de" date="1733140800">- disable go on loongarch64 for now</changelog>
  <changelog author="mardnh@gmx.de" date="1736078400">- Switch to glibc based cross-compiler for target hppa</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Define ALT_CC_UNDER_TEST and ALT_CXX_UNDER_TEST for compat tests</changelog>
  <changelog author="rguenther@suse.com" date="1738152000">- For cross compilers require the same or newer binutils, newlib
  or cross-glibc that was used at build time.  [bsc#1232526]</changelog>
  <changelog author="rguenther@suse.com" date="1738843200">- Adjust cross compiler requirements to use %requires_ge
- Fix condition on whether to enable plugins or JIT support to
  not check sle_version which is not defined in SLFO but to check
  is_opensuse and suse_version instead.
- Add gcc14-pr118780.patch to make the SLFO config work.</changelog>
  <changelog author="rguenther@suse.com" date="1740052800">- Update to gcc-14 branch head, 9ffecde121af883b60bbe60d0, git11321
  * fixes reported ICE in [bsc#1237442]
- Drop gcc14-pr116629.patch now backported to the branch.</changelog>
  <changelog author="rguenther@suse.com" date="1741608000">- Disable profiling during build when %want_reproducible_builds is set
  [bsc#1238491]</changelog>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
</package>
<package pkgid="693f97b37592b98abbd8d7c65b4575c689ad34f9446818538bb5feb321ce7d9e" name="libgcc_s1-32bit" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.3.3"/>
  <changelog author="rguenther@suse.com" date="1743163200">- Update to GCC trunk head, 15.0.1+git9001
  * includes -msplit-patch-nops required for user-space livepatching
    on powerpc
  * includes fix for Ada build with --enable-host-pie
- Adjust for removed avx10_2roundingintrin.h intrinsic header.
- Build GCC executables PIE on SLE.  [bsc#1239938]</changelog>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="e8fcb9542ed803294da69303e3fae45f7c773344e191fc854d68e2d1aeb63995" name="libgcc_s1-32bit" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.6.1"/>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
</package>
<package pkgid="e20629c76b5721887ed47a58adb929c64b8273b451bedef71e834f6d5f2e7a9b" name="libgcc_s1-32bit" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.9.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc14-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="d0097ee38167a1a7c588a6c51b367c358853582471c276b7afddc36e6942bca0" name="libgcrypt" arch="src">
  <version epoch="0" ver="1.11.0" rel="150700.5.7.1"/>
  <changelog author="pmonreal@suse.com" date="1662638400">- FIPS: Get most of the entropy from rndjent_poll [bsc#1202117]
  * Add libgcrypt-FIPS-rndjent_poll.patch
  * Rebase libgcrypt-jitterentropy-3.4.0.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1663156800">- Update to 1.10.0:
  * New and extended interfaces:
  - New control codes to check for FIPS 140-3 approved algorithms.
  - New control code to switch into non-FIPS mode.
  - New cipher modes SIV and GCM-SIV as specified by RFC-5297.
  - Extended cipher mode AESWRAP with padding as specified by
    RFC-5649.
  - New set of KDF functions.
  - New KDF modes Argon2 and Balloon.
  - New functions for combining hashing and signing/verification.
  * Performance:
  - Improved support for PowerPC architectures.
  - Improved ECC performance on zSeries/s390x by using accelerated
    scalar multiplication.
  - Many more assembler performance improvements for several
    architectures.
  * Bug fixes:
  - Fix Elgamal encryption for other implementations.
    [bsc#1190239, CVE-2021-40528]
  - Check the input length of the point in ECDH.
  - Fix an abort in gcry_pk_get_param for "Curve25519".
  * Other features:
  - The control code GCRYCTL_SET_ENFORCED_FIPS_FLAG is ignored
    because it is useless with the FIPS 140-3 related changes.
  - Update of the jitter entropy RNG code.
  - Simplification of the entropy gatherer when using the getentropy
    system call.
  * Interface changes relative to the 1.10.0 release:
  - GCRYCTL_SET_DECRYPTION_TAG            NEW control code.
  - GCRYCTL_FIPS_SERVICE_INDICATOR_CIPHER NEW control code.
  - GCRYCTL_FIPS_SERVICE_INDICATOR_KDF    NEW control code.
  - GCRYCTL_NO_FIPS_MODE = 83             NEW control code.
  - GCRY_CIPHER_MODE_SIV                  NEW mode.
  - GCRY_CIPHER_MODE_GCM_SIV              NEW mode.
  - GCRY_CIPHER_EXTENDED                  NEW flag.
  - GCRY_SIV_BLOCK_LEN                    NEW macro.
  - gcry_cipher_set_decryption_tag        NEW macro.
  - GCRY_KDF_ARGON2                       NEW constant.
  - GCRY_KDF_BALLOON                      NEW constant.
  - GCRY_KDF_ARGON2D                      NEW constant.
  - GCRY_KDF_ARGON2I                      NEW constant.
  - GCRY_KDF_ARGON2ID                     NEW constant.
  - gcry_kdf_hd_t                         NEW type.
  - gcry_kdf_job_fn_t                     NEW type.
  - gcry_kdf_dispatch_job_fn_t            NEW type.
  - gcry_kdf_wait_all_jobs_fn_t           NEW type.
  - struct gcry_kdf_thread_ops            NEW struct.
  - gcry_kdf_open                         NEW function.
  - gcry_kdf_compute                      NEW function.
  - gcry_kdf_final                        NEW function.
  - gcry_kdf_close                        NEW function.
  - gcry_pk_hash_sign                     NEW function.
  - gcry_pk_hash_verify                   NEW function.
  - gcry_pk_random_override_new           NEW function.
  * Rebase libgcrypt-1.8.4-allow_FSM_same_state.patch and rename
    to libgcrypt-1.10.0-allow_FSM_same_state.patch
  * Remove unused CAVS tests and related patches:
  - cavs_driver.pl cavs-test.sh
  - libgcrypt-1.6.1-fips-cavs.patch
  - drbg_test.patch
  * Remove DSA sign/verify patches for the FIPS CAVS test since DSA
    has been disabled in FIPS mode:
  - libgcrypt-fipsdrv-enable-algo-for-dsa-sign.patch
  - libgcrypt-fipsdrv-enable-algo-for-dsa-verify.patch
  * Rebase libgcrypt-FIPS-SLI-pk.patch
  * Rebase libgcrypt_indicators_changes.patch and
    libgcrypt-indicate-shake.patch and merge both into
    libgcrypt-FIPS-SLI-hash-mac.patch
  * Rebase libgcrypt-FIPS-kdf-leylength.patch and rename to
    libgcrypt-FIPS-SLI-kdf-leylength.patch
  * Rebase libgcrypt-jitterentropy-3.4.0.patch
  * Rebase libgcrypt-FIPS-rndjent_poll.patch
  * Rebase libgcrypt-out-of-core-handler.patch and rename to
    libgcrypt-1.10.0-out-of-core-handler.patch
  * Since the FIPS .hmac file is now calculated with the internal
    tool hmac256, only the "module is complete" trigger .fips file
    is checked. Rename libgcrypt-1.6.1-use-fipscheck.patch
    to libgcrypt-1.10.0-use-fipscheck.patch
  * Remove patches fixed upstream:
  - libgcrypt-1.4.1-rijndael_no_strict_aliasing.patch
  - libgcrypt-1.5.0-LIBGCRYPT_FORCE_FIPS_MODE-env.diff
  - libgcrypt-fix-rng.patch
  - libgcrypt-1.8.3-fips-ctor.patch
  - libgcrypt-1.8.4-use_xfree.patch
  - libgcrypt-1.8.4-getrandom.patch
  - libgcrypt-1.8.4-fips_ctor_skip_integrity_check.patch
  - libgcrypt-dsa-rfc6979-test-fix.patch
  - libgcrypt-fix-tests-fipsmode.patch
  - libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch
  - libgcrypt-1.8.4-fips-keygen.patch
  - libgcrypt-invoke-global_init-from-constructor.patch
  - libgcrypt-Restore-self-tests-from-constructor.patch
  - libgcrypt-FIPS-GMAC_AES-benckmark.patch
  - libgcrypt-global_init-constructor.patch
  - libgcrypt-random_selftests-testentropy.patch
  - libgcrypt-rsa-no-blinding.patch
  - libgcrypt-ecc-ecdsa-no-blinding.patch
  - libgcrypt-PCT-DSA.patch
  - libgcrypt-PCT-ECC.patch
  - libgcrypt-PCT-RSA.patch
  - libgcrypt-fips_selftest_trigger_file.patch
  - libgcrypt-pthread-in-t-lock-test.patch
  - libgcrypt-FIPS-hw-optimizations.patch
  - libgcrypt-FIPS-module-version.patch
  - libgcrypt-FIPS-disable-3DES.patch
  - libgcrypt-FIPS-fix-regression-tests.patch
  - libgcrypt-FIPS-RSA-keylen.patch
  - libgcrypt-FIPS-RSA-keylen-tests.patch
  - libgcrypt-FIPS-fix-gcry_mpi_sub_ui.patch
  - libgcrypt-FIPS-verify-unsupported-KDF-test.patch
  - libgcrypt-FIPS-HMAC-short-keylen.patch
  - libgcrypt-FIPS-service-indicators.patch
  - libgcrypt-FIPS-disable-DSA.patch
  - libgcrypt-jitterentropy-3.3.0.patch
  - libgcrypt-FIPS-Zeroize-hmac.patch
  * Update libgcrypt.keyring</changelog>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to 1.10.1:
  * Bug fixes:
  - Fix minor memory leaks in FIPS mode.
  - Build fixes for MUSL libc.
  * Other:
  - More portable integrity check in FIPS mode.
  - Add X9.62 OIDs to sha256 and sha512 modules.
  * Add the hardware optimizations config file hwf.deny to
    the /etc/gcrypt/ directory. This file can be used to globally
    disable the use of hardware based optimizations.
  * Remove not needed separate_hmac256_binary hmac256 package</changelog>
  <changelog author="mpluskal@suse.com" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="pmonreal@suse.com" date="1681214400">- Update to 1.10.2:
  * Bug fixes:
  - Fix Argon2 for the case output &gt; 64. [rC13b5454d26]
  - Fix missing HWF_PPC_ARCH_3_10 in HW feature. [rCe073f0ed44]
  - Fix RSA key generation failure in forced FIPS mode. [T5919]
  - Fix gcry_pk_hash_verify for explicit hash. [T6066]
  - Fix a wrong result of gcry_mpi_invm. [T5970]
  - Allow building with --disable-asm for HPPA. [T5976]
  - Allow building with -Oz. [T6432]
  - Enable the fast path to ChaCha20 only when supported. [T6384]
  - Use size_t to avoid counter overflow in Keccak when directly
    feeding more than 4GiB. [T6217]
  * Other:
  - Do not use secure memory for a DRBG instance. [T5933]
  - Do not allow PKCS#1.5 padding for encryption in FIPS mode. [T5918]
  - Fix the behaviour for child process re-seeding in the DRBG. [rC019a40c990]
  - Allow verification of small RSA signatures in FIPS mode. [T5975]
  - Allow the use of a shorter salt for KDFs in FIPS mode. [T6039]
  - Run digest+sign self tests for RSA and ECC in FIPS mode. [rC06c9350165]
  - Add function-name based FIPS indicator function.
    GCRYCTL_FIPS_SERVICE_INDICATOR_FUNCTION. This is not considered
    an ABI changes because the new FIPS features were not yet
    approved. [rC822ee57f07]
  - Improve PCT in FIPS mode. [rC285bf54b1a, rC4963c127ae, T6397]
  - Use getrandom (GRND_RANDOM) in FIPS mode. [rCcf10c74bd9]
  - Disable RSA-OAEP padding in FIPS mode. [rCe5bfda492a]
  - Check minimum allowed key size in PBKDF in FIPS mode. [T6039,T6219]
  - Get maximum 32B of entropy at once in FIPS mode. [rCce0df08bba]
  - Prefer gpgrt-config when available. [T5034]
  - Mark AESWRAP as approved FIPS algorithm. [T5512]
  - Prevent usage of long salt for PSS in FIPS mode. [rCfdd2a8b332]
  - Prevent usage of X9.31 keygen in FIPS mode. [rC392e0ccd25]
  - Remove GCM mode from the allowed FIPS indicators. [rC1540698389]
  - Add explicit FIPS indicators for hash and MAC algorithms. [T6376]
  * Release-info: https://dev.gnupg.org/T5905
  * Rebase FIPS patches:
  - libgcrypt-FIPS-SLI-hash-mac.patch
  - libgcrypt-FIPS-SLI-kdf-leylength.patch
  - libgcrypt-FIPS-SLI-pk.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1684756800">- FIPS: Merge the libgcrypt20-hmac package into the library and
  remove the "module is complete" trigger file .fips [bsc#1185116]
  * Remove libgcrypt-1.10.0-use-fipscheck.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- POWER: performance enhancements for cryptography [jsc#PED-5088]
  * Optimize Chacha20 and Poly1305 for PPC P10 LE: [T6006]
  - Chacha20/poly1305: Optimized chacha20/poly1305 for
    P10 operation [rC88fe7ac33eb4]
  - ppc: enable P10 assembly with ENABLE_FORCE_SOFT_HWFEATURES
    on arch-3.00 [rC2c5e5ab6843d]
  * Add patches:
  - libgcrypt-Chacha20-poly1305-Optimized-chacha20-poly1305.patch
  - libgcrypt-ppc-enable-P10-assembly-with-ENABLE_FORCE_SOF.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1697544000">- Do not pull revision info from GIT when autoconf is run. This
  removes the -unknown suffix after the version number.
  * Add libgcrypt-nobetasuffix.patch [bsc#1216334]</changelog>
  <changelog author="pmonreal@suse.com" date="1700049600">- Update to 1.10.3:
  * Bug fixes:
  - Fix public key computation for other EdDSA curves. [rC469919751d6e]
  - Remove out of core handler diagnostic in FIPS mode. [T6515]
  - Check that the digest size is not zero in gcry_pk_sign_md and
    gcry_pk_verify_md. [T6539]
  - Make store an s-exp with \0 is considered to be binary. [T6747]
  - Various constant-time improvements.
  * Portability:
  - Use getrandom call only when supported by the platform. [T6442]
  - Change the default for --with-libtool-modification to never. [T6619]
  * Release-info: https://dev.gnupg.org/T6817
  * Remove patch upstream libgcrypt-1.10.0-out-of-core-handler.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1700568000">- Re-create HMAC checksum after RPM build strips the library
  (bsc#1217058)</changelog>
  <changelog author="dmueller@suse.com" date="1706356800">- add libgcrypt-no-deprecated-grep-alias.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1708948800">- Update upstream libgcrypt.keyring</changelog>
  <changelog author="pmonreal@suse.com" date="1710158400">- FIPS: Replace the built-in jitter rng with standalone version
  * Remove the internal jitterentropy copy [bsc#1220896]
  * Add libgcrypt-FIPS-jitter-standalone.patch
  * Remove not needed libgcrypt-jitterentropy-3.4.0.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- FIPS: Set the FSM into error state if Jitter RNG is returning an
  error code to the caller when an health test error occurs when
  random bytes are requested through the jent_read_entropy_safe()
  function. [bsc#1220895]
  * Add libgcrypt-FIPS-jitter-errorcodes.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1710936001">- FIPS: Make sure that Libgcrypt makes use of the built-in Jitter RNG
  for the whole length entropy buffer in FIPS mode. [bsc#1220893]
  * Add libgcrypt-FIPS-jitter-whole-entropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1718884800">- Update to 1.11.0:
  * New and extended interfaces:
  - Add an API for Key Encapsulation Mechanism (KEM). [T6755]
  - Add Streamlined NTRU Prime sntrup761 algorithm. [rCcf9923e1a5]
  - Add Kyber algorithm according to FIPS 203 ipd 2023-08-24. [rC18e5c0d268]
  - Add Classic McEliece algorithm. [rC003367b912]
  - Add One-Step KDF with hash and MAC. [T5964]
  - Add KDF algorithm HKDF of RFC-5869. [T5964]
  - Add KDF algorithm X963KDF for use in CMS. [rC3abac420b3]
  - Add GMAC-SM4 and Poly1305-SM4. [rCd1ccc409d4]
  - Add ARIA block cipher algorithm. [rC316c6d7715]
  - Add explicit FIPS indicators for MD and MAC algorithms. [T6376]
  - Add support for SHAKE as MGF in RSA. [T6557]
  - Add gcry_md_read support for SHAKE algorithms. [T6539]
  - Add gcry_md_hash_buffers_ext function. [T7035]
  - Add cSHAKE hash algorithm. [rC065b3f4e02]
  - Support internal generation of IV for AEAD cipher mode. [T4873]
  * Performance:
  - Add SM3 ARMv8/AArch64/CE assembly implementation. [rCfe891ff4a3]
  - Add SM4 ARMv8/AArch64 assembly implementation. [rCd8825601f1]
  - Add SM4 GFNI/AVX2 and GFI/AVX512 implementation. [rC5095d60af4,rCeaed633c16]
  - Add SM4 ARMv9 SVE CE assembly implementation. [rC2dc2654006]
  - Add PowerPC vector implementation of SM4. [rC0b2da804ee]
  - Optimize ChaCha20 and Poly1305 for PPC P10 LE. [T6006]
  - Add CTR32LE bulk acceleration for AES on PPC. [rC84f2e2d0b5]
  - Add generic bulk acceleration for CTR32LE mode (GCM-SIV) for SM4
    and Camellia. [rCcf956793af]
  - Add GFNI/AVX2 implementation of Camellia. [rC4e6896eb9f]
  - Add AVX2 and AVX512 accelerated implementations for GHASH (GCM)
    and POLYVAL (GCM-SIV). [rCd857e85cb4, rCe6f3600193]
  - Add AVX512 implementation for SHA512. [rC089223aa3b]
  - Add AVX512 implementation for Serpent. [rCce95b6ec35]
  - Add AVX512 implementation for Poly1305 and ChaCha20. [rCcd3ed49770, rC9a63cfd617]
  - Add AVX512 accelerated implementation for SHA3 and Blake2. [rCbeaad75f46,rC909daa700e]
  - Add VAES/AVX2 accelerated i386 implementation for AES. [rC4a42a042bc]
  - Add bulk processing for XTS mode of Camellia and SM4. [rC32b18cdb87, rCaad3381e93]
  - Accelerate XTS and ECB modes for Twofish and Serpent. [rCd078a928f5,rC8a1fe5f78f]
  - Add AArch64 crypto/SHA512 extension implementation for SHA512. [rCe51d3b8330]
  - Add AArch64 crypto-extension implementation for Camellia. [rC898c857206]
  - Accelerate OCB authentication on AMD with AVX2. [rC6b47e85d65]
  * Bug fixes:
  - For PowerPC check for missing optimization level for vector register usage. [T5785]
  - Fix EdDSA secret key check. [T6511]
  - Fix decoding of PKCS#1-v1.5 and OAEP padding. [rC34c2042792]
  - Allow use of PKCS#1-v1.5 with SHA3 algorithms. [T6976]
  - Fix AESWRAP padding length check. [T7130]
  * Other:
  - Allow empty password for Argon2 KDF. [rCa20700c55f]
  - Various constant time operation imporvements.
  - Add "bp256", "bp384", "bp512" aliases for Brainpool curves.
  - Support for the random server has been removed. [T5811]
  - The control code GCRYCTL_ENABLE_M_GUARD is deprecated and not
    supported any more.  Please use valgrind or other tools. [T5822]
  - Logging is now done via the libgpg-error logging functions. [rCab0bdc72c7]
  * Remove patches fixed upstream:
  - libgcrypt-no-deprecated-grep-alias.patch
  - libgcrypt-Chacha20-poly1305-Optimized-chacha20-poly1305.patch
  - libgcrypt-ppc-enable-P10-assembly-with-ENABLE_FORCE_SOF.patch
  * Rebase patches:
  - libgcrypt-FIPS-jitter-errorcodes.patch
  - libgcrypt-FIPS-jitter-whole-entropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733140800">- Remove unrecognized option: --enable-m-guard</changelog>
  <changelog author="pmonreal@suse.com" date="1733140801">- Require gcc-14 to fix AltiVec errors in ppc64le architecture.</changelog>
  <changelog author="pmonreal@suse.com" date="1742817600">- Build libgcrypt with PIE [bsc#1239956]</changelog>
  <changelog author="angel.yankov@suse.com" date="1749470400">- Security fix [bsc#1221107, CVE-2024-2236]
  * Add --enable-marvin-workaround to spec to enable workaround
  * Fix  timing based side-channel in RSA implementation ( Marvin attack )
  * Add libgcrypt-CVE-2024-2236.patch
- Fix kdf test and fail accordingly if tests fail under FIPS mode [bsc#1246934]
  * Rebased patches: libgcrypt-FIPS-SLI-kdf-leylength.patch</changelog>
</package>
<package pkgid="009b9572ed2e5bf4194d19c06ede3c3cc61a45a0c7ebceff86c09ac1c5273cf5" name="libgcrypt-devel" arch="x86_64">
  <version epoch="0" ver="1.11.0" rel="150700.5.7.1"/>
  <changelog author="pmonreal@suse.com" date="1662638400">- FIPS: Get most of the entropy from rndjent_poll [bsc#1202117]
  * Add libgcrypt-FIPS-rndjent_poll.patch
  * Rebase libgcrypt-jitterentropy-3.4.0.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1663156800">- Update to 1.10.0:
  * New and extended interfaces:
  - New control codes to check for FIPS 140-3 approved algorithms.
  - New control code to switch into non-FIPS mode.
  - New cipher modes SIV and GCM-SIV as specified by RFC-5297.
  - Extended cipher mode AESWRAP with padding as specified by
    RFC-5649.
  - New set of KDF functions.
  - New KDF modes Argon2 and Balloon.
  - New functions for combining hashing and signing/verification.
  * Performance:
  - Improved support for PowerPC architectures.
  - Improved ECC performance on zSeries/s390x by using accelerated
    scalar multiplication.
  - Many more assembler performance improvements for several
    architectures.
  * Bug fixes:
  - Fix Elgamal encryption for other implementations.
    [bsc#1190239, CVE-2021-40528]
  - Check the input length of the point in ECDH.
  - Fix an abort in gcry_pk_get_param for "Curve25519".
  * Other features:
  - The control code GCRYCTL_SET_ENFORCED_FIPS_FLAG is ignored
    because it is useless with the FIPS 140-3 related changes.
  - Update of the jitter entropy RNG code.
  - Simplification of the entropy gatherer when using the getentropy
    system call.
  * Interface changes relative to the 1.10.0 release:
  - GCRYCTL_SET_DECRYPTION_TAG            NEW control code.
  - GCRYCTL_FIPS_SERVICE_INDICATOR_CIPHER NEW control code.
  - GCRYCTL_FIPS_SERVICE_INDICATOR_KDF    NEW control code.
  - GCRYCTL_NO_FIPS_MODE = 83             NEW control code.
  - GCRY_CIPHER_MODE_SIV                  NEW mode.
  - GCRY_CIPHER_MODE_GCM_SIV              NEW mode.
  - GCRY_CIPHER_EXTENDED                  NEW flag.
  - GCRY_SIV_BLOCK_LEN                    NEW macro.
  - gcry_cipher_set_decryption_tag        NEW macro.
  - GCRY_KDF_ARGON2                       NEW constant.
  - GCRY_KDF_BALLOON                      NEW constant.
  - GCRY_KDF_ARGON2D                      NEW constant.
  - GCRY_KDF_ARGON2I                      NEW constant.
  - GCRY_KDF_ARGON2ID                     NEW constant.
  - gcry_kdf_hd_t                         NEW type.
  - gcry_kdf_job_fn_t                     NEW type.
  - gcry_kdf_dispatch_job_fn_t            NEW type.
  - gcry_kdf_wait_all_jobs_fn_t           NEW type.
  - struct gcry_kdf_thread_ops            NEW struct.
  - gcry_kdf_open                         NEW function.
  - gcry_kdf_compute                      NEW function.
  - gcry_kdf_final                        NEW function.
  - gcry_kdf_close                        NEW function.
  - gcry_pk_hash_sign                     NEW function.
  - gcry_pk_hash_verify                   NEW function.
  - gcry_pk_random_override_new           NEW function.
  * Rebase libgcrypt-1.8.4-allow_FSM_same_state.patch and rename
    to libgcrypt-1.10.0-allow_FSM_same_state.patch
  * Remove unused CAVS tests and related patches:
  - cavs_driver.pl cavs-test.sh
  - libgcrypt-1.6.1-fips-cavs.patch
  - drbg_test.patch
  * Remove DSA sign/verify patches for the FIPS CAVS test since DSA
    has been disabled in FIPS mode:
  - libgcrypt-fipsdrv-enable-algo-for-dsa-sign.patch
  - libgcrypt-fipsdrv-enable-algo-for-dsa-verify.patch
  * Rebase libgcrypt-FIPS-SLI-pk.patch
  * Rebase libgcrypt_indicators_changes.patch and
    libgcrypt-indicate-shake.patch and merge both into
    libgcrypt-FIPS-SLI-hash-mac.patch
  * Rebase libgcrypt-FIPS-kdf-leylength.patch and rename to
    libgcrypt-FIPS-SLI-kdf-leylength.patch
  * Rebase libgcrypt-jitterentropy-3.4.0.patch
  * Rebase libgcrypt-FIPS-rndjent_poll.patch
  * Rebase libgcrypt-out-of-core-handler.patch and rename to
    libgcrypt-1.10.0-out-of-core-handler.patch
  * Since the FIPS .hmac file is now calculated with the internal
    tool hmac256, only the "module is complete" trigger .fips file
    is checked. Rename libgcrypt-1.6.1-use-fipscheck.patch
    to libgcrypt-1.10.0-use-fipscheck.patch
  * Remove patches fixed upstream:
  - libgcrypt-1.4.1-rijndael_no_strict_aliasing.patch
  - libgcrypt-1.5.0-LIBGCRYPT_FORCE_FIPS_MODE-env.diff
  - libgcrypt-fix-rng.patch
  - libgcrypt-1.8.3-fips-ctor.patch
  - libgcrypt-1.8.4-use_xfree.patch
  - libgcrypt-1.8.4-getrandom.patch
  - libgcrypt-1.8.4-fips_ctor_skip_integrity_check.patch
  - libgcrypt-dsa-rfc6979-test-fix.patch
  - libgcrypt-fix-tests-fipsmode.patch
  - libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch
  - libgcrypt-1.8.4-fips-keygen.patch
  - libgcrypt-invoke-global_init-from-constructor.patch
  - libgcrypt-Restore-self-tests-from-constructor.patch
  - libgcrypt-FIPS-GMAC_AES-benckmark.patch
  - libgcrypt-global_init-constructor.patch
  - libgcrypt-random_selftests-testentropy.patch
  - libgcrypt-rsa-no-blinding.patch
  - libgcrypt-ecc-ecdsa-no-blinding.patch
  - libgcrypt-PCT-DSA.patch
  - libgcrypt-PCT-ECC.patch
  - libgcrypt-PCT-RSA.patch
  - libgcrypt-fips_selftest_trigger_file.patch
  - libgcrypt-pthread-in-t-lock-test.patch
  - libgcrypt-FIPS-hw-optimizations.patch
  - libgcrypt-FIPS-module-version.patch
  - libgcrypt-FIPS-disable-3DES.patch
  - libgcrypt-FIPS-fix-regression-tests.patch
  - libgcrypt-FIPS-RSA-keylen.patch
  - libgcrypt-FIPS-RSA-keylen-tests.patch
  - libgcrypt-FIPS-fix-gcry_mpi_sub_ui.patch
  - libgcrypt-FIPS-verify-unsupported-KDF-test.patch
  - libgcrypt-FIPS-HMAC-short-keylen.patch
  - libgcrypt-FIPS-service-indicators.patch
  - libgcrypt-FIPS-disable-DSA.patch
  - libgcrypt-jitterentropy-3.3.0.patch
  - libgcrypt-FIPS-Zeroize-hmac.patch
  * Update libgcrypt.keyring</changelog>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to 1.10.1:
  * Bug fixes:
  - Fix minor memory leaks in FIPS mode.
  - Build fixes for MUSL libc.
  * Other:
  - More portable integrity check in FIPS mode.
  - Add X9.62 OIDs to sha256 and sha512 modules.
  * Add the hardware optimizations config file hwf.deny to
    the /etc/gcrypt/ directory. This file can be used to globally
    disable the use of hardware based optimizations.
  * Remove not needed separate_hmac256_binary hmac256 package</changelog>
  <changelog author="mpluskal@suse.com" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="pmonreal@suse.com" date="1681214400">- Update to 1.10.2:
  * Bug fixes:
  - Fix Argon2 for the case output &gt; 64. [rC13b5454d26]
  - Fix missing HWF_PPC_ARCH_3_10 in HW feature. [rCe073f0ed44]
  - Fix RSA key generation failure in forced FIPS mode. [T5919]
  - Fix gcry_pk_hash_verify for explicit hash. [T6066]
  - Fix a wrong result of gcry_mpi_invm. [T5970]
  - Allow building with --disable-asm for HPPA. [T5976]
  - Allow building with -Oz. [T6432]
  - Enable the fast path to ChaCha20 only when supported. [T6384]
  - Use size_t to avoid counter overflow in Keccak when directly
    feeding more than 4GiB. [T6217]
  * Other:
  - Do not use secure memory for a DRBG instance. [T5933]
  - Do not allow PKCS#1.5 padding for encryption in FIPS mode. [T5918]
  - Fix the behaviour for child process re-seeding in the DRBG. [rC019a40c990]
  - Allow verification of small RSA signatures in FIPS mode. [T5975]
  - Allow the use of a shorter salt for KDFs in FIPS mode. [T6039]
  - Run digest+sign self tests for RSA and ECC in FIPS mode. [rC06c9350165]
  - Add function-name based FIPS indicator function.
    GCRYCTL_FIPS_SERVICE_INDICATOR_FUNCTION. This is not considered
    an ABI changes because the new FIPS features were not yet
    approved. [rC822ee57f07]
  - Improve PCT in FIPS mode. [rC285bf54b1a, rC4963c127ae, T6397]
  - Use getrandom (GRND_RANDOM) in FIPS mode. [rCcf10c74bd9]
  - Disable RSA-OAEP padding in FIPS mode. [rCe5bfda492a]
  - Check minimum allowed key size in PBKDF in FIPS mode. [T6039,T6219]
  - Get maximum 32B of entropy at once in FIPS mode. [rCce0df08bba]
  - Prefer gpgrt-config when available. [T5034]
  - Mark AESWRAP as approved FIPS algorithm. [T5512]
  - Prevent usage of long salt for PSS in FIPS mode. [rCfdd2a8b332]
  - Prevent usage of X9.31 keygen in FIPS mode. [rC392e0ccd25]
  - Remove GCM mode from the allowed FIPS indicators. [rC1540698389]
  - Add explicit FIPS indicators for hash and MAC algorithms. [T6376]
  * Release-info: https://dev.gnupg.org/T5905
  * Rebase FIPS patches:
  - libgcrypt-FIPS-SLI-hash-mac.patch
  - libgcrypt-FIPS-SLI-kdf-leylength.patch
  - libgcrypt-FIPS-SLI-pk.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1684756800">- FIPS: Merge the libgcrypt20-hmac package into the library and
  remove the "module is complete" trigger file .fips [bsc#1185116]
  * Remove libgcrypt-1.10.0-use-fipscheck.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- POWER: performance enhancements for cryptography [jsc#PED-5088]
  * Optimize Chacha20 and Poly1305 for PPC P10 LE: [T6006]
  - Chacha20/poly1305: Optimized chacha20/poly1305 for
    P10 operation [rC88fe7ac33eb4]
  - ppc: enable P10 assembly with ENABLE_FORCE_SOFT_HWFEATURES
    on arch-3.00 [rC2c5e5ab6843d]
  * Add patches:
  - libgcrypt-Chacha20-poly1305-Optimized-chacha20-poly1305.patch
  - libgcrypt-ppc-enable-P10-assembly-with-ENABLE_FORCE_SOF.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1697544000">- Do not pull revision info from GIT when autoconf is run. This
  removes the -unknown suffix after the version number.
  * Add libgcrypt-nobetasuffix.patch [bsc#1216334]</changelog>
  <changelog author="pmonreal@suse.com" date="1700049600">- Update to 1.10.3:
  * Bug fixes:
  - Fix public key computation for other EdDSA curves. [rC469919751d6e]
  - Remove out of core handler diagnostic in FIPS mode. [T6515]
  - Check that the digest size is not zero in gcry_pk_sign_md and
    gcry_pk_verify_md. [T6539]
  - Make store an s-exp with \0 is considered to be binary. [T6747]
  - Various constant-time improvements.
  * Portability:
  - Use getrandom call only when supported by the platform. [T6442]
  - Change the default for --with-libtool-modification to never. [T6619]
  * Release-info: https://dev.gnupg.org/T6817
  * Remove patch upstream libgcrypt-1.10.0-out-of-core-handler.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1700568000">- Re-create HMAC checksum after RPM build strips the library
  (bsc#1217058)</changelog>
  <changelog author="dmueller@suse.com" date="1706356800">- add libgcrypt-no-deprecated-grep-alias.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1708948800">- Update upstream libgcrypt.keyring</changelog>
  <changelog author="pmonreal@suse.com" date="1710158400">- FIPS: Replace the built-in jitter rng with standalone version
  * Remove the internal jitterentropy copy [bsc#1220896]
  * Add libgcrypt-FIPS-jitter-standalone.patch
  * Remove not needed libgcrypt-jitterentropy-3.4.0.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- FIPS: Set the FSM into error state if Jitter RNG is returning an
  error code to the caller when an health test error occurs when
  random bytes are requested through the jent_read_entropy_safe()
  function. [bsc#1220895]
  * Add libgcrypt-FIPS-jitter-errorcodes.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1710936001">- FIPS: Make sure that Libgcrypt makes use of the built-in Jitter RNG
  for the whole length entropy buffer in FIPS mode. [bsc#1220893]
  * Add libgcrypt-FIPS-jitter-whole-entropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1718884800">- Update to 1.11.0:
  * New and extended interfaces:
  - Add an API for Key Encapsulation Mechanism (KEM). [T6755]
  - Add Streamlined NTRU Prime sntrup761 algorithm. [rCcf9923e1a5]
  - Add Kyber algorithm according to FIPS 203 ipd 2023-08-24. [rC18e5c0d268]
  - Add Classic McEliece algorithm. [rC003367b912]
  - Add One-Step KDF with hash and MAC. [T5964]
  - Add KDF algorithm HKDF of RFC-5869. [T5964]
  - Add KDF algorithm X963KDF for use in CMS. [rC3abac420b3]
  - Add GMAC-SM4 and Poly1305-SM4. [rCd1ccc409d4]
  - Add ARIA block cipher algorithm. [rC316c6d7715]
  - Add explicit FIPS indicators for MD and MAC algorithms. [T6376]
  - Add support for SHAKE as MGF in RSA. [T6557]
  - Add gcry_md_read support for SHAKE algorithms. [T6539]
  - Add gcry_md_hash_buffers_ext function. [T7035]
  - Add cSHAKE hash algorithm. [rC065b3f4e02]
  - Support internal generation of IV for AEAD cipher mode. [T4873]
  * Performance:
  - Add SM3 ARMv8/AArch64/CE assembly implementation. [rCfe891ff4a3]
  - Add SM4 ARMv8/AArch64 assembly implementation. [rCd8825601f1]
  - Add SM4 GFNI/AVX2 and GFI/AVX512 implementation. [rC5095d60af4,rCeaed633c16]
  - Add SM4 ARMv9 SVE CE assembly implementation. [rC2dc2654006]
  - Add PowerPC vector implementation of SM4. [rC0b2da804ee]
  - Optimize ChaCha20 and Poly1305 for PPC P10 LE. [T6006]
  - Add CTR32LE bulk acceleration for AES on PPC. [rC84f2e2d0b5]
  - Add generic bulk acceleration for CTR32LE mode (GCM-SIV) for SM4
    and Camellia. [rCcf956793af]
  - Add GFNI/AVX2 implementation of Camellia. [rC4e6896eb9f]
  - Add AVX2 and AVX512 accelerated implementations for GHASH (GCM)
    and POLYVAL (GCM-SIV). [rCd857e85cb4, rCe6f3600193]
  - Add AVX512 implementation for SHA512. [rC089223aa3b]
  - Add AVX512 implementation for Serpent. [rCce95b6ec35]
  - Add AVX512 implementation for Poly1305 and ChaCha20. [rCcd3ed49770, rC9a63cfd617]
  - Add AVX512 accelerated implementation for SHA3 and Blake2. [rCbeaad75f46,rC909daa700e]
  - Add VAES/AVX2 accelerated i386 implementation for AES. [rC4a42a042bc]
  - Add bulk processing for XTS mode of Camellia and SM4. [rC32b18cdb87, rCaad3381e93]
  - Accelerate XTS and ECB modes for Twofish and Serpent. [rCd078a928f5,rC8a1fe5f78f]
  - Add AArch64 crypto/SHA512 extension implementation for SHA512. [rCe51d3b8330]
  - Add AArch64 crypto-extension implementation for Camellia. [rC898c857206]
  - Accelerate OCB authentication on AMD with AVX2. [rC6b47e85d65]
  * Bug fixes:
  - For PowerPC check for missing optimization level for vector register usage. [T5785]
  - Fix EdDSA secret key check. [T6511]
  - Fix decoding of PKCS#1-v1.5 and OAEP padding. [rC34c2042792]
  - Allow use of PKCS#1-v1.5 with SHA3 algorithms. [T6976]
  - Fix AESWRAP padding length check. [T7130]
  * Other:
  - Allow empty password for Argon2 KDF. [rCa20700c55f]
  - Various constant time operation imporvements.
  - Add "bp256", "bp384", "bp512" aliases for Brainpool curves.
  - Support for the random server has been removed. [T5811]
  - The control code GCRYCTL_ENABLE_M_GUARD is deprecated and not
    supported any more.  Please use valgrind or other tools. [T5822]
  - Logging is now done via the libgpg-error logging functions. [rCab0bdc72c7]
  * Remove patches fixed upstream:
  - libgcrypt-no-deprecated-grep-alias.patch
  - libgcrypt-Chacha20-poly1305-Optimized-chacha20-poly1305.patch
  - libgcrypt-ppc-enable-P10-assembly-with-ENABLE_FORCE_SOF.patch
  * Rebase patches:
  - libgcrypt-FIPS-jitter-errorcodes.patch
  - libgcrypt-FIPS-jitter-whole-entropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733140800">- Remove unrecognized option: --enable-m-guard</changelog>
  <changelog author="pmonreal@suse.com" date="1733140801">- Require gcc-14 to fix AltiVec errors in ppc64le architecture.</changelog>
  <changelog author="pmonreal@suse.com" date="1742817600">- Build libgcrypt with PIE [bsc#1239956]</changelog>
  <changelog author="angel.yankov@suse.com" date="1749470400">- Security fix [bsc#1221107, CVE-2024-2236]
  * Add --enable-marvin-workaround to spec to enable workaround
  * Fix  timing based side-channel in RSA implementation ( Marvin attack )
  * Add libgcrypt-CVE-2024-2236.patch
- Fix kdf test and fail accordingly if tests fail under FIPS mode [bsc#1246934]
  * Rebased patches: libgcrypt-FIPS-SLI-kdf-leylength.patch</changelog>
</package>
<package pkgid="4a5fc258b1829d29b8e4762e80031a043d6374ecd7abed189c91d832d2cb40b5" name="libgcrypt20" arch="x86_64">
  <version epoch="0" ver="1.11.0" rel="150700.5.7.1"/>
  <changelog author="pmonreal@suse.com" date="1662638400">- FIPS: Get most of the entropy from rndjent_poll [bsc#1202117]
  * Add libgcrypt-FIPS-rndjent_poll.patch
  * Rebase libgcrypt-jitterentropy-3.4.0.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1663156800">- Update to 1.10.0:
  * New and extended interfaces:
  - New control codes to check for FIPS 140-3 approved algorithms.
  - New control code to switch into non-FIPS mode.
  - New cipher modes SIV and GCM-SIV as specified by RFC-5297.
  - Extended cipher mode AESWRAP with padding as specified by
    RFC-5649.
  - New set of KDF functions.
  - New KDF modes Argon2 and Balloon.
  - New functions for combining hashing and signing/verification.
  * Performance:
  - Improved support for PowerPC architectures.
  - Improved ECC performance on zSeries/s390x by using accelerated
    scalar multiplication.
  - Many more assembler performance improvements for several
    architectures.
  * Bug fixes:
  - Fix Elgamal encryption for other implementations.
    [bsc#1190239, CVE-2021-40528]
  - Check the input length of the point in ECDH.
  - Fix an abort in gcry_pk_get_param for "Curve25519".
  * Other features:
  - The control code GCRYCTL_SET_ENFORCED_FIPS_FLAG is ignored
    because it is useless with the FIPS 140-3 related changes.
  - Update of the jitter entropy RNG code.
  - Simplification of the entropy gatherer when using the getentropy
    system call.
  * Interface changes relative to the 1.10.0 release:
  - GCRYCTL_SET_DECRYPTION_TAG            NEW control code.
  - GCRYCTL_FIPS_SERVICE_INDICATOR_CIPHER NEW control code.
  - GCRYCTL_FIPS_SERVICE_INDICATOR_KDF    NEW control code.
  - GCRYCTL_NO_FIPS_MODE = 83             NEW control code.
  - GCRY_CIPHER_MODE_SIV                  NEW mode.
  - GCRY_CIPHER_MODE_GCM_SIV              NEW mode.
  - GCRY_CIPHER_EXTENDED                  NEW flag.
  - GCRY_SIV_BLOCK_LEN                    NEW macro.
  - gcry_cipher_set_decryption_tag        NEW macro.
  - GCRY_KDF_ARGON2                       NEW constant.
  - GCRY_KDF_BALLOON                      NEW constant.
  - GCRY_KDF_ARGON2D                      NEW constant.
  - GCRY_KDF_ARGON2I                      NEW constant.
  - GCRY_KDF_ARGON2ID                     NEW constant.
  - gcry_kdf_hd_t                         NEW type.
  - gcry_kdf_job_fn_t                     NEW type.
  - gcry_kdf_dispatch_job_fn_t            NEW type.
  - gcry_kdf_wait_all_jobs_fn_t           NEW type.
  - struct gcry_kdf_thread_ops            NEW struct.
  - gcry_kdf_open                         NEW function.
  - gcry_kdf_compute                      NEW function.
  - gcry_kdf_final                        NEW function.
  - gcry_kdf_close                        NEW function.
  - gcry_pk_hash_sign                     NEW function.
  - gcry_pk_hash_verify                   NEW function.
  - gcry_pk_random_override_new           NEW function.
  * Rebase libgcrypt-1.8.4-allow_FSM_same_state.patch and rename
    to libgcrypt-1.10.0-allow_FSM_same_state.patch
  * Remove unused CAVS tests and related patches:
  - cavs_driver.pl cavs-test.sh
  - libgcrypt-1.6.1-fips-cavs.patch
  - drbg_test.patch
  * Remove DSA sign/verify patches for the FIPS CAVS test since DSA
    has been disabled in FIPS mode:
  - libgcrypt-fipsdrv-enable-algo-for-dsa-sign.patch
  - libgcrypt-fipsdrv-enable-algo-for-dsa-verify.patch
  * Rebase libgcrypt-FIPS-SLI-pk.patch
  * Rebase libgcrypt_indicators_changes.patch and
    libgcrypt-indicate-shake.patch and merge both into
    libgcrypt-FIPS-SLI-hash-mac.patch
  * Rebase libgcrypt-FIPS-kdf-leylength.patch and rename to
    libgcrypt-FIPS-SLI-kdf-leylength.patch
  * Rebase libgcrypt-jitterentropy-3.4.0.patch
  * Rebase libgcrypt-FIPS-rndjent_poll.patch
  * Rebase libgcrypt-out-of-core-handler.patch and rename to
    libgcrypt-1.10.0-out-of-core-handler.patch
  * Since the FIPS .hmac file is now calculated with the internal
    tool hmac256, only the "module is complete" trigger .fips file
    is checked. Rename libgcrypt-1.6.1-use-fipscheck.patch
    to libgcrypt-1.10.0-use-fipscheck.patch
  * Remove patches fixed upstream:
  - libgcrypt-1.4.1-rijndael_no_strict_aliasing.patch
  - libgcrypt-1.5.0-LIBGCRYPT_FORCE_FIPS_MODE-env.diff
  - libgcrypt-fix-rng.patch
  - libgcrypt-1.8.3-fips-ctor.patch
  - libgcrypt-1.8.4-use_xfree.patch
  - libgcrypt-1.8.4-getrandom.patch
  - libgcrypt-1.8.4-fips_ctor_skip_integrity_check.patch
  - libgcrypt-dsa-rfc6979-test-fix.patch
  - libgcrypt-fix-tests-fipsmode.patch
  - libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch
  - libgcrypt-1.8.4-fips-keygen.patch
  - libgcrypt-invoke-global_init-from-constructor.patch
  - libgcrypt-Restore-self-tests-from-constructor.patch
  - libgcrypt-FIPS-GMAC_AES-benckmark.patch
  - libgcrypt-global_init-constructor.patch
  - libgcrypt-random_selftests-testentropy.patch
  - libgcrypt-rsa-no-blinding.patch
  - libgcrypt-ecc-ecdsa-no-blinding.patch
  - libgcrypt-PCT-DSA.patch
  - libgcrypt-PCT-ECC.patch
  - libgcrypt-PCT-RSA.patch
  - libgcrypt-fips_selftest_trigger_file.patch
  - libgcrypt-pthread-in-t-lock-test.patch
  - libgcrypt-FIPS-hw-optimizations.patch
  - libgcrypt-FIPS-module-version.patch
  - libgcrypt-FIPS-disable-3DES.patch
  - libgcrypt-FIPS-fix-regression-tests.patch
  - libgcrypt-FIPS-RSA-keylen.patch
  - libgcrypt-FIPS-RSA-keylen-tests.patch
  - libgcrypt-FIPS-fix-gcry_mpi_sub_ui.patch
  - libgcrypt-FIPS-verify-unsupported-KDF-test.patch
  - libgcrypt-FIPS-HMAC-short-keylen.patch
  - libgcrypt-FIPS-service-indicators.patch
  - libgcrypt-FIPS-disable-DSA.patch
  - libgcrypt-jitterentropy-3.3.0.patch
  - libgcrypt-FIPS-Zeroize-hmac.patch
  * Update libgcrypt.keyring</changelog>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to 1.10.1:
  * Bug fixes:
  - Fix minor memory leaks in FIPS mode.
  - Build fixes for MUSL libc.
  * Other:
  - More portable integrity check in FIPS mode.
  - Add X9.62 OIDs to sha256 and sha512 modules.
  * Add the hardware optimizations config file hwf.deny to
    the /etc/gcrypt/ directory. This file can be used to globally
    disable the use of hardware based optimizations.
  * Remove not needed separate_hmac256_binary hmac256 package</changelog>
  <changelog author="mpluskal@suse.com" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="pmonreal@suse.com" date="1681214400">- Update to 1.10.2:
  * Bug fixes:
  - Fix Argon2 for the case output &gt; 64. [rC13b5454d26]
  - Fix missing HWF_PPC_ARCH_3_10 in HW feature. [rCe073f0ed44]
  - Fix RSA key generation failure in forced FIPS mode. [T5919]
  - Fix gcry_pk_hash_verify for explicit hash. [T6066]
  - Fix a wrong result of gcry_mpi_invm. [T5970]
  - Allow building with --disable-asm for HPPA. [T5976]
  - Allow building with -Oz. [T6432]
  - Enable the fast path to ChaCha20 only when supported. [T6384]
  - Use size_t to avoid counter overflow in Keccak when directly
    feeding more than 4GiB. [T6217]
  * Other:
  - Do not use secure memory for a DRBG instance. [T5933]
  - Do not allow PKCS#1.5 padding for encryption in FIPS mode. [T5918]
  - Fix the behaviour for child process re-seeding in the DRBG. [rC019a40c990]
  - Allow verification of small RSA signatures in FIPS mode. [T5975]
  - Allow the use of a shorter salt for KDFs in FIPS mode. [T6039]
  - Run digest+sign self tests for RSA and ECC in FIPS mode. [rC06c9350165]
  - Add function-name based FIPS indicator function.
    GCRYCTL_FIPS_SERVICE_INDICATOR_FUNCTION. This is not considered
    an ABI changes because the new FIPS features were not yet
    approved. [rC822ee57f07]
  - Improve PCT in FIPS mode. [rC285bf54b1a, rC4963c127ae, T6397]
  - Use getrandom (GRND_RANDOM) in FIPS mode. [rCcf10c74bd9]
  - Disable RSA-OAEP padding in FIPS mode. [rCe5bfda492a]
  - Check minimum allowed key size in PBKDF in FIPS mode. [T6039,T6219]
  - Get maximum 32B of entropy at once in FIPS mode. [rCce0df08bba]
  - Prefer gpgrt-config when available. [T5034]
  - Mark AESWRAP as approved FIPS algorithm. [T5512]
  - Prevent usage of long salt for PSS in FIPS mode. [rCfdd2a8b332]
  - Prevent usage of X9.31 keygen in FIPS mode. [rC392e0ccd25]
  - Remove GCM mode from the allowed FIPS indicators. [rC1540698389]
  - Add explicit FIPS indicators for hash and MAC algorithms. [T6376]
  * Release-info: https://dev.gnupg.org/T5905
  * Rebase FIPS patches:
  - libgcrypt-FIPS-SLI-hash-mac.patch
  - libgcrypt-FIPS-SLI-kdf-leylength.patch
  - libgcrypt-FIPS-SLI-pk.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1684756800">- FIPS: Merge the libgcrypt20-hmac package into the library and
  remove the "module is complete" trigger file .fips [bsc#1185116]
  * Remove libgcrypt-1.10.0-use-fipscheck.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- POWER: performance enhancements for cryptography [jsc#PED-5088]
  * Optimize Chacha20 and Poly1305 for PPC P10 LE: [T6006]
  - Chacha20/poly1305: Optimized chacha20/poly1305 for
    P10 operation [rC88fe7ac33eb4]
  - ppc: enable P10 assembly with ENABLE_FORCE_SOFT_HWFEATURES
    on arch-3.00 [rC2c5e5ab6843d]
  * Add patches:
  - libgcrypt-Chacha20-poly1305-Optimized-chacha20-poly1305.patch
  - libgcrypt-ppc-enable-P10-assembly-with-ENABLE_FORCE_SOF.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1697544000">- Do not pull revision info from GIT when autoconf is run. This
  removes the -unknown suffix after the version number.
  * Add libgcrypt-nobetasuffix.patch [bsc#1216334]</changelog>
  <changelog author="pmonreal@suse.com" date="1700049600">- Update to 1.10.3:
  * Bug fixes:
  - Fix public key computation for other EdDSA curves. [rC469919751d6e]
  - Remove out of core handler diagnostic in FIPS mode. [T6515]
  - Check that the digest size is not zero in gcry_pk_sign_md and
    gcry_pk_verify_md. [T6539]
  - Make store an s-exp with \0 is considered to be binary. [T6747]
  - Various constant-time improvements.
  * Portability:
  - Use getrandom call only when supported by the platform. [T6442]
  - Change the default for --with-libtool-modification to never. [T6619]
  * Release-info: https://dev.gnupg.org/T6817
  * Remove patch upstream libgcrypt-1.10.0-out-of-core-handler.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1700568000">- Re-create HMAC checksum after RPM build strips the library
  (bsc#1217058)</changelog>
  <changelog author="dmueller@suse.com" date="1706356800">- add libgcrypt-no-deprecated-grep-alias.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1708948800">- Update upstream libgcrypt.keyring</changelog>
  <changelog author="pmonreal@suse.com" date="1710158400">- FIPS: Replace the built-in jitter rng with standalone version
  * Remove the internal jitterentropy copy [bsc#1220896]
  * Add libgcrypt-FIPS-jitter-standalone.patch
  * Remove not needed libgcrypt-jitterentropy-3.4.0.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- FIPS: Set the FSM into error state if Jitter RNG is returning an
  error code to the caller when an health test error occurs when
  random bytes are requested through the jent_read_entropy_safe()
  function. [bsc#1220895]
  * Add libgcrypt-FIPS-jitter-errorcodes.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1710936001">- FIPS: Make sure that Libgcrypt makes use of the built-in Jitter RNG
  for the whole length entropy buffer in FIPS mode. [bsc#1220893]
  * Add libgcrypt-FIPS-jitter-whole-entropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1718884800">- Update to 1.11.0:
  * New and extended interfaces:
  - Add an API for Key Encapsulation Mechanism (KEM). [T6755]
  - Add Streamlined NTRU Prime sntrup761 algorithm. [rCcf9923e1a5]
  - Add Kyber algorithm according to FIPS 203 ipd 2023-08-24. [rC18e5c0d268]
  - Add Classic McEliece algorithm. [rC003367b912]
  - Add One-Step KDF with hash and MAC. [T5964]
  - Add KDF algorithm HKDF of RFC-5869. [T5964]
  - Add KDF algorithm X963KDF for use in CMS. [rC3abac420b3]
  - Add GMAC-SM4 and Poly1305-SM4. [rCd1ccc409d4]
  - Add ARIA block cipher algorithm. [rC316c6d7715]
  - Add explicit FIPS indicators for MD and MAC algorithms. [T6376]
  - Add support for SHAKE as MGF in RSA. [T6557]
  - Add gcry_md_read support for SHAKE algorithms. [T6539]
  - Add gcry_md_hash_buffers_ext function. [T7035]
  - Add cSHAKE hash algorithm. [rC065b3f4e02]
  - Support internal generation of IV for AEAD cipher mode. [T4873]
  * Performance:
  - Add SM3 ARMv8/AArch64/CE assembly implementation. [rCfe891ff4a3]
  - Add SM4 ARMv8/AArch64 assembly implementation. [rCd8825601f1]
  - Add SM4 GFNI/AVX2 and GFI/AVX512 implementation. [rC5095d60af4,rCeaed633c16]
  - Add SM4 ARMv9 SVE CE assembly implementation. [rC2dc2654006]
  - Add PowerPC vector implementation of SM4. [rC0b2da804ee]
  - Optimize ChaCha20 and Poly1305 for PPC P10 LE. [T6006]
  - Add CTR32LE bulk acceleration for AES on PPC. [rC84f2e2d0b5]
  - Add generic bulk acceleration for CTR32LE mode (GCM-SIV) for SM4
    and Camellia. [rCcf956793af]
  - Add GFNI/AVX2 implementation of Camellia. [rC4e6896eb9f]
  - Add AVX2 and AVX512 accelerated implementations for GHASH (GCM)
    and POLYVAL (GCM-SIV). [rCd857e85cb4, rCe6f3600193]
  - Add AVX512 implementation for SHA512. [rC089223aa3b]
  - Add AVX512 implementation for Serpent. [rCce95b6ec35]
  - Add AVX512 implementation for Poly1305 and ChaCha20. [rCcd3ed49770, rC9a63cfd617]
  - Add AVX512 accelerated implementation for SHA3 and Blake2. [rCbeaad75f46,rC909daa700e]
  - Add VAES/AVX2 accelerated i386 implementation for AES. [rC4a42a042bc]
  - Add bulk processing for XTS mode of Camellia and SM4. [rC32b18cdb87, rCaad3381e93]
  - Accelerate XTS and ECB modes for Twofish and Serpent. [rCd078a928f5,rC8a1fe5f78f]
  - Add AArch64 crypto/SHA512 extension implementation for SHA512. [rCe51d3b8330]
  - Add AArch64 crypto-extension implementation for Camellia. [rC898c857206]
  - Accelerate OCB authentication on AMD with AVX2. [rC6b47e85d65]
  * Bug fixes:
  - For PowerPC check for missing optimization level for vector register usage. [T5785]
  - Fix EdDSA secret key check. [T6511]
  - Fix decoding of PKCS#1-v1.5 and OAEP padding. [rC34c2042792]
  - Allow use of PKCS#1-v1.5 with SHA3 algorithms. [T6976]
  - Fix AESWRAP padding length check. [T7130]
  * Other:
  - Allow empty password for Argon2 KDF. [rCa20700c55f]
  - Various constant time operation imporvements.
  - Add "bp256", "bp384", "bp512" aliases for Brainpool curves.
  - Support for the random server has been removed. [T5811]
  - The control code GCRYCTL_ENABLE_M_GUARD is deprecated and not
    supported any more.  Please use valgrind or other tools. [T5822]
  - Logging is now done via the libgpg-error logging functions. [rCab0bdc72c7]
  * Remove patches fixed upstream:
  - libgcrypt-no-deprecated-grep-alias.patch
  - libgcrypt-Chacha20-poly1305-Optimized-chacha20-poly1305.patch
  - libgcrypt-ppc-enable-P10-assembly-with-ENABLE_FORCE_SOF.patch
  * Rebase patches:
  - libgcrypt-FIPS-jitter-errorcodes.patch
  - libgcrypt-FIPS-jitter-whole-entropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733140800">- Remove unrecognized option: --enable-m-guard</changelog>
  <changelog author="pmonreal@suse.com" date="1733140801">- Require gcc-14 to fix AltiVec errors in ppc64le architecture.</changelog>
  <changelog author="pmonreal@suse.com" date="1742817600">- Build libgcrypt with PIE [bsc#1239956]</changelog>
  <changelog author="angel.yankov@suse.com" date="1749470400">- Security fix [bsc#1221107, CVE-2024-2236]
  * Add --enable-marvin-workaround to spec to enable workaround
  * Fix  timing based side-channel in RSA implementation ( Marvin attack )
  * Add libgcrypt-CVE-2024-2236.patch
- Fix kdf test and fail accordingly if tests fail under FIPS mode [bsc#1246934]
  * Rebased patches: libgcrypt-FIPS-SLI-kdf-leylength.patch</changelog>
</package>
<package pkgid="d820ac373f1487e9295157687f65be74ab855dd2077d7ed4df9f8bceabc6f7f7" name="libgcrypt20-32bit" arch="x86_64">
  <version epoch="0" ver="1.11.0" rel="150700.5.7.1"/>
  <changelog author="pmonreal@suse.com" date="1662638400">- FIPS: Get most of the entropy from rndjent_poll [bsc#1202117]
  * Add libgcrypt-FIPS-rndjent_poll.patch
  * Rebase libgcrypt-jitterentropy-3.4.0.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1663156800">- Update to 1.10.0:
  * New and extended interfaces:
  - New control codes to check for FIPS 140-3 approved algorithms.
  - New control code to switch into non-FIPS mode.
  - New cipher modes SIV and GCM-SIV as specified by RFC-5297.
  - Extended cipher mode AESWRAP with padding as specified by
    RFC-5649.
  - New set of KDF functions.
  - New KDF modes Argon2 and Balloon.
  - New functions for combining hashing and signing/verification.
  * Performance:
  - Improved support for PowerPC architectures.
  - Improved ECC performance on zSeries/s390x by using accelerated
    scalar multiplication.
  - Many more assembler performance improvements for several
    architectures.
  * Bug fixes:
  - Fix Elgamal encryption for other implementations.
    [bsc#1190239, CVE-2021-40528]
  - Check the input length of the point in ECDH.
  - Fix an abort in gcry_pk_get_param for "Curve25519".
  * Other features:
  - The control code GCRYCTL_SET_ENFORCED_FIPS_FLAG is ignored
    because it is useless with the FIPS 140-3 related changes.
  - Update of the jitter entropy RNG code.
  - Simplification of the entropy gatherer when using the getentropy
    system call.
  * Interface changes relative to the 1.10.0 release:
  - GCRYCTL_SET_DECRYPTION_TAG            NEW control code.
  - GCRYCTL_FIPS_SERVICE_INDICATOR_CIPHER NEW control code.
  - GCRYCTL_FIPS_SERVICE_INDICATOR_KDF    NEW control code.
  - GCRYCTL_NO_FIPS_MODE = 83             NEW control code.
  - GCRY_CIPHER_MODE_SIV                  NEW mode.
  - GCRY_CIPHER_MODE_GCM_SIV              NEW mode.
  - GCRY_CIPHER_EXTENDED                  NEW flag.
  - GCRY_SIV_BLOCK_LEN                    NEW macro.
  - gcry_cipher_set_decryption_tag        NEW macro.
  - GCRY_KDF_ARGON2                       NEW constant.
  - GCRY_KDF_BALLOON                      NEW constant.
  - GCRY_KDF_ARGON2D                      NEW constant.
  - GCRY_KDF_ARGON2I                      NEW constant.
  - GCRY_KDF_ARGON2ID                     NEW constant.
  - gcry_kdf_hd_t                         NEW type.
  - gcry_kdf_job_fn_t                     NEW type.
  - gcry_kdf_dispatch_job_fn_t            NEW type.
  - gcry_kdf_wait_all_jobs_fn_t           NEW type.
  - struct gcry_kdf_thread_ops            NEW struct.
  - gcry_kdf_open                         NEW function.
  - gcry_kdf_compute                      NEW function.
  - gcry_kdf_final                        NEW function.
  - gcry_kdf_close                        NEW function.
  - gcry_pk_hash_sign                     NEW function.
  - gcry_pk_hash_verify                   NEW function.
  - gcry_pk_random_override_new           NEW function.
  * Rebase libgcrypt-1.8.4-allow_FSM_same_state.patch and rename
    to libgcrypt-1.10.0-allow_FSM_same_state.patch
  * Remove unused CAVS tests and related patches:
  - cavs_driver.pl cavs-test.sh
  - libgcrypt-1.6.1-fips-cavs.patch
  - drbg_test.patch
  * Remove DSA sign/verify patches for the FIPS CAVS test since DSA
    has been disabled in FIPS mode:
  - libgcrypt-fipsdrv-enable-algo-for-dsa-sign.patch
  - libgcrypt-fipsdrv-enable-algo-for-dsa-verify.patch
  * Rebase libgcrypt-FIPS-SLI-pk.patch
  * Rebase libgcrypt_indicators_changes.patch and
    libgcrypt-indicate-shake.patch and merge both into
    libgcrypt-FIPS-SLI-hash-mac.patch
  * Rebase libgcrypt-FIPS-kdf-leylength.patch and rename to
    libgcrypt-FIPS-SLI-kdf-leylength.patch
  * Rebase libgcrypt-jitterentropy-3.4.0.patch
  * Rebase libgcrypt-FIPS-rndjent_poll.patch
  * Rebase libgcrypt-out-of-core-handler.patch and rename to
    libgcrypt-1.10.0-out-of-core-handler.patch
  * Since the FIPS .hmac file is now calculated with the internal
    tool hmac256, only the "module is complete" trigger .fips file
    is checked. Rename libgcrypt-1.6.1-use-fipscheck.patch
    to libgcrypt-1.10.0-use-fipscheck.patch
  * Remove patches fixed upstream:
  - libgcrypt-1.4.1-rijndael_no_strict_aliasing.patch
  - libgcrypt-1.5.0-LIBGCRYPT_FORCE_FIPS_MODE-env.diff
  - libgcrypt-fix-rng.patch
  - libgcrypt-1.8.3-fips-ctor.patch
  - libgcrypt-1.8.4-use_xfree.patch
  - libgcrypt-1.8.4-getrandom.patch
  - libgcrypt-1.8.4-fips_ctor_skip_integrity_check.patch
  - libgcrypt-dsa-rfc6979-test-fix.patch
  - libgcrypt-fix-tests-fipsmode.patch
  - libgcrypt-FIPS-RSA-DSA-ECDSA-hashing-operation.patch
  - libgcrypt-1.8.4-fips-keygen.patch
  - libgcrypt-invoke-global_init-from-constructor.patch
  - libgcrypt-Restore-self-tests-from-constructor.patch
  - libgcrypt-FIPS-GMAC_AES-benckmark.patch
  - libgcrypt-global_init-constructor.patch
  - libgcrypt-random_selftests-testentropy.patch
  - libgcrypt-rsa-no-blinding.patch
  - libgcrypt-ecc-ecdsa-no-blinding.patch
  - libgcrypt-PCT-DSA.patch
  - libgcrypt-PCT-ECC.patch
  - libgcrypt-PCT-RSA.patch
  - libgcrypt-fips_selftest_trigger_file.patch
  - libgcrypt-pthread-in-t-lock-test.patch
  - libgcrypt-FIPS-hw-optimizations.patch
  - libgcrypt-FIPS-module-version.patch
  - libgcrypt-FIPS-disable-3DES.patch
  - libgcrypt-FIPS-fix-regression-tests.patch
  - libgcrypt-FIPS-RSA-keylen.patch
  - libgcrypt-FIPS-RSA-keylen-tests.patch
  - libgcrypt-FIPS-fix-gcry_mpi_sub_ui.patch
  - libgcrypt-FIPS-verify-unsupported-KDF-test.patch
  - libgcrypt-FIPS-HMAC-short-keylen.patch
  - libgcrypt-FIPS-service-indicators.patch
  - libgcrypt-FIPS-disable-DSA.patch
  - libgcrypt-jitterentropy-3.3.0.patch
  - libgcrypt-FIPS-Zeroize-hmac.patch
  * Update libgcrypt.keyring</changelog>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to 1.10.1:
  * Bug fixes:
  - Fix minor memory leaks in FIPS mode.
  - Build fixes for MUSL libc.
  * Other:
  - More portable integrity check in FIPS mode.
  - Add X9.62 OIDs to sha256 and sha512 modules.
  * Add the hardware optimizations config file hwf.deny to
    the /etc/gcrypt/ directory. This file can be used to globally
    disable the use of hardware based optimizations.
  * Remove not needed separate_hmac256_binary hmac256 package</changelog>
  <changelog author="mpluskal@suse.com" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="pmonreal@suse.com" date="1681214400">- Update to 1.10.2:
  * Bug fixes:
  - Fix Argon2 for the case output &gt; 64. [rC13b5454d26]
  - Fix missing HWF_PPC_ARCH_3_10 in HW feature. [rCe073f0ed44]
  - Fix RSA key generation failure in forced FIPS mode. [T5919]
  - Fix gcry_pk_hash_verify for explicit hash. [T6066]
  - Fix a wrong result of gcry_mpi_invm. [T5970]
  - Allow building with --disable-asm for HPPA. [T5976]
  - Allow building with -Oz. [T6432]
  - Enable the fast path to ChaCha20 only when supported. [T6384]
  - Use size_t to avoid counter overflow in Keccak when directly
    feeding more than 4GiB. [T6217]
  * Other:
  - Do not use secure memory for a DRBG instance. [T5933]
  - Do not allow PKCS#1.5 padding for encryption in FIPS mode. [T5918]
  - Fix the behaviour for child process re-seeding in the DRBG. [rC019a40c990]
  - Allow verification of small RSA signatures in FIPS mode. [T5975]
  - Allow the use of a shorter salt for KDFs in FIPS mode. [T6039]
  - Run digest+sign self tests for RSA and ECC in FIPS mode. [rC06c9350165]
  - Add function-name based FIPS indicator function.
    GCRYCTL_FIPS_SERVICE_INDICATOR_FUNCTION. This is not considered
    an ABI changes because the new FIPS features were not yet
    approved. [rC822ee57f07]
  - Improve PCT in FIPS mode. [rC285bf54b1a, rC4963c127ae, T6397]
  - Use getrandom (GRND_RANDOM) in FIPS mode. [rCcf10c74bd9]
  - Disable RSA-OAEP padding in FIPS mode. [rCe5bfda492a]
  - Check minimum allowed key size in PBKDF in FIPS mode. [T6039,T6219]
  - Get maximum 32B of entropy at once in FIPS mode. [rCce0df08bba]
  - Prefer gpgrt-config when available. [T5034]
  - Mark AESWRAP as approved FIPS algorithm. [T5512]
  - Prevent usage of long salt for PSS in FIPS mode. [rCfdd2a8b332]
  - Prevent usage of X9.31 keygen in FIPS mode. [rC392e0ccd25]
  - Remove GCM mode from the allowed FIPS indicators. [rC1540698389]
  - Add explicit FIPS indicators for hash and MAC algorithms. [T6376]
  * Release-info: https://dev.gnupg.org/T5905
  * Rebase FIPS patches:
  - libgcrypt-FIPS-SLI-hash-mac.patch
  - libgcrypt-FIPS-SLI-kdf-leylength.patch
  - libgcrypt-FIPS-SLI-pk.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1684756800">- FIPS: Merge the libgcrypt20-hmac package into the library and
  remove the "module is complete" trigger file .fips [bsc#1185116]
  * Remove libgcrypt-1.10.0-use-fipscheck.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- POWER: performance enhancements for cryptography [jsc#PED-5088]
  * Optimize Chacha20 and Poly1305 for PPC P10 LE: [T6006]
  - Chacha20/poly1305: Optimized chacha20/poly1305 for
    P10 operation [rC88fe7ac33eb4]
  - ppc: enable P10 assembly with ENABLE_FORCE_SOFT_HWFEATURES
    on arch-3.00 [rC2c5e5ab6843d]
  * Add patches:
  - libgcrypt-Chacha20-poly1305-Optimized-chacha20-poly1305.patch
  - libgcrypt-ppc-enable-P10-assembly-with-ENABLE_FORCE_SOF.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1697544000">- Do not pull revision info from GIT when autoconf is run. This
  removes the -unknown suffix after the version number.
  * Add libgcrypt-nobetasuffix.patch [bsc#1216334]</changelog>
  <changelog author="pmonreal@suse.com" date="1700049600">- Update to 1.10.3:
  * Bug fixes:
  - Fix public key computation for other EdDSA curves. [rC469919751d6e]
  - Remove out of core handler diagnostic in FIPS mode. [T6515]
  - Check that the digest size is not zero in gcry_pk_sign_md and
    gcry_pk_verify_md. [T6539]
  - Make store an s-exp with \0 is considered to be binary. [T6747]
  - Various constant-time improvements.
  * Portability:
  - Use getrandom call only when supported by the platform. [T6442]
  - Change the default for --with-libtool-modification to never. [T6619]
  * Release-info: https://dev.gnupg.org/T6817
  * Remove patch upstream libgcrypt-1.10.0-out-of-core-handler.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1700568000">- Re-create HMAC checksum after RPM build strips the library
  (bsc#1217058)</changelog>
  <changelog author="dmueller@suse.com" date="1706356800">- add libgcrypt-no-deprecated-grep-alias.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1708948800">- Update upstream libgcrypt.keyring</changelog>
  <changelog author="pmonreal@suse.com" date="1710158400">- FIPS: Replace the built-in jitter rng with standalone version
  * Remove the internal jitterentropy copy [bsc#1220896]
  * Add libgcrypt-FIPS-jitter-standalone.patch
  * Remove not needed libgcrypt-jitterentropy-3.4.0.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- FIPS: Set the FSM into error state if Jitter RNG is returning an
  error code to the caller when an health test error occurs when
  random bytes are requested through the jent_read_entropy_safe()
  function. [bsc#1220895]
  * Add libgcrypt-FIPS-jitter-errorcodes.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1710936001">- FIPS: Make sure that Libgcrypt makes use of the built-in Jitter RNG
  for the whole length entropy buffer in FIPS mode. [bsc#1220893]
  * Add libgcrypt-FIPS-jitter-whole-entropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1718884800">- Update to 1.11.0:
  * New and extended interfaces:
  - Add an API for Key Encapsulation Mechanism (KEM). [T6755]
  - Add Streamlined NTRU Prime sntrup761 algorithm. [rCcf9923e1a5]
  - Add Kyber algorithm according to FIPS 203 ipd 2023-08-24. [rC18e5c0d268]
  - Add Classic McEliece algorithm. [rC003367b912]
  - Add One-Step KDF with hash and MAC. [T5964]
  - Add KDF algorithm HKDF of RFC-5869. [T5964]
  - Add KDF algorithm X963KDF for use in CMS. [rC3abac420b3]
  - Add GMAC-SM4 and Poly1305-SM4. [rCd1ccc409d4]
  - Add ARIA block cipher algorithm. [rC316c6d7715]
  - Add explicit FIPS indicators for MD and MAC algorithms. [T6376]
  - Add support for SHAKE as MGF in RSA. [T6557]
  - Add gcry_md_read support for SHAKE algorithms. [T6539]
  - Add gcry_md_hash_buffers_ext function. [T7035]
  - Add cSHAKE hash algorithm. [rC065b3f4e02]
  - Support internal generation of IV for AEAD cipher mode. [T4873]
  * Performance:
  - Add SM3 ARMv8/AArch64/CE assembly implementation. [rCfe891ff4a3]
  - Add SM4 ARMv8/AArch64 assembly implementation. [rCd8825601f1]
  - Add SM4 GFNI/AVX2 and GFI/AVX512 implementation. [rC5095d60af4,rCeaed633c16]
  - Add SM4 ARMv9 SVE CE assembly implementation. [rC2dc2654006]
  - Add PowerPC vector implementation of SM4. [rC0b2da804ee]
  - Optimize ChaCha20 and Poly1305 for PPC P10 LE. [T6006]
  - Add CTR32LE bulk acceleration for AES on PPC. [rC84f2e2d0b5]
  - Add generic bulk acceleration for CTR32LE mode (GCM-SIV) for SM4
    and Camellia. [rCcf956793af]
  - Add GFNI/AVX2 implementation of Camellia. [rC4e6896eb9f]
  - Add AVX2 and AVX512 accelerated implementations for GHASH (GCM)
    and POLYVAL (GCM-SIV). [rCd857e85cb4, rCe6f3600193]
  - Add AVX512 implementation for SHA512. [rC089223aa3b]
  - Add AVX512 implementation for Serpent. [rCce95b6ec35]
  - Add AVX512 implementation for Poly1305 and ChaCha20. [rCcd3ed49770, rC9a63cfd617]
  - Add AVX512 accelerated implementation for SHA3 and Blake2. [rCbeaad75f46,rC909daa700e]
  - Add VAES/AVX2 accelerated i386 implementation for AES. [rC4a42a042bc]
  - Add bulk processing for XTS mode of Camellia and SM4. [rC32b18cdb87, rCaad3381e93]
  - Accelerate XTS and ECB modes for Twofish and Serpent. [rCd078a928f5,rC8a1fe5f78f]
  - Add AArch64 crypto/SHA512 extension implementation for SHA512. [rCe51d3b8330]
  - Add AArch64 crypto-extension implementation for Camellia. [rC898c857206]
  - Accelerate OCB authentication on AMD with AVX2. [rC6b47e85d65]
  * Bug fixes:
  - For PowerPC check for missing optimization level for vector register usage. [T5785]
  - Fix EdDSA secret key check. [T6511]
  - Fix decoding of PKCS#1-v1.5 and OAEP padding. [rC34c2042792]
  - Allow use of PKCS#1-v1.5 with SHA3 algorithms. [T6976]
  - Fix AESWRAP padding length check. [T7130]
  * Other:
  - Allow empty password for Argon2 KDF. [rCa20700c55f]
  - Various constant time operation imporvements.
  - Add "bp256", "bp384", "bp512" aliases for Brainpool curves.
  - Support for the random server has been removed. [T5811]
  - The control code GCRYCTL_ENABLE_M_GUARD is deprecated and not
    supported any more.  Please use valgrind or other tools. [T5822]
  - Logging is now done via the libgpg-error logging functions. [rCab0bdc72c7]
  * Remove patches fixed upstream:
  - libgcrypt-no-deprecated-grep-alias.patch
  - libgcrypt-Chacha20-poly1305-Optimized-chacha20-poly1305.patch
  - libgcrypt-ppc-enable-P10-assembly-with-ENABLE_FORCE_SOF.patch
  * Rebase patches:
  - libgcrypt-FIPS-jitter-errorcodes.patch
  - libgcrypt-FIPS-jitter-whole-entropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1733140800">- Remove unrecognized option: --enable-m-guard</changelog>
  <changelog author="pmonreal@suse.com" date="1733140801">- Require gcc-14 to fix AltiVec errors in ppc64le architecture.</changelog>
  <changelog author="pmonreal@suse.com" date="1742817600">- Build libgcrypt with PIE [bsc#1239956]</changelog>
  <changelog author="angel.yankov@suse.com" date="1749470400">- Security fix [bsc#1221107, CVE-2024-2236]
  * Add --enable-marvin-workaround to spec to enable workaround
  * Fix  timing based side-channel in RSA implementation ( Marvin attack )
  * Add libgcrypt-CVE-2024-2236.patch
- Fix kdf test and fail accordingly if tests fail under FIPS mode [bsc#1246934]
  * Rebased patches: libgcrypt-FIPS-SLI-kdf-leylength.patch</changelog>
</package>
<package pkgid="d38486b42b0dee1647d643606bec3042ab0dcb67fb78dec9989badff45f9327a" name="libgdk_pixbuf-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.42.12" rel="150600.3.11.1"/>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 2.42.4:
  + Make enum type registration thread safe.
  + Do not install skipped test files.
  + Fix GIF initialization.
  + Always run GIF loader tests.
  + Fix leaks discovered via ASan.
  + Expose GdkPixbufLoader API via introspection.
  + Fix revert-to-previous first frame behaviour for GIF files.
  + Link to libintl if needed.
  + Improve support for using gdk-pixbuf as a subproject.
  + Fix build with GModule disabled.
  + Use gi-docgen to generate the API reference from introspection
    data.
- Replace gtk-doc BuildRequires with python3-gi-docgen: follow
  upstreams port.
- As a workaround to
  https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/177, delete
  the installed gi-docgen program files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616846400">- Disable building of docs: creates a cycle with python:
  + Drop python3-gi-docgen BuildRequires.
  + Pass gtk_doc=false to meson</changelog>
  <changelog author="rpm@fthiessen.de" date="1618401600">- Update to stable 2.42.6
  + Yield gtk_doc option value in subprojects
  + Always initialise locale on thumbnailer startup
  + Add fallback subproject for libjpeg
  + Use type:array for the builtin_loaders option
  + Default to using builtin png and jpeg loaders</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop gdk-pixbuf-bsc1180393-CVE-2020-29385.patch on SLE and Leap
  15.4: fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636027200">- Stop passing no longer used nor recognized options jasper=false
  and x11=false to meson, fails the build when using meson 0.60.x.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 2.42.8 (boo#1201826):
  + Clear the pixbuf's memory buffer to avoid returning
    uninitialized memory.
  + Turn GdkPixbufModule functions into typed callbacks.
  + tiff: Use non-deprecated C99 integer types.
  + gif: Check for overflow when compositing or clearing frames.
  + Change png/jpeg/tiff build options from boolean to feature.
  + jpeg: Do not rely on UB around setjmp/longjmp.
  + Build fixes.
  + Documentation fixes.
  + Security fixes: CVE-2021-46829.
  + Updated translations.
- Stop passing options to meson that just follow upstream default,
  just rely on upstream providing sane defaults, apart from where
  we want to deviate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1660046400">- Update to version 2.42.9:
  + Fix the check for maximum value of LZW initial code size
    (boo#1194633 CVE-2021-44648).
  + Use CMake for dependencies on Windows/MSVC.
  + Add option for building tests.
  + Move man pages to reStructuredText.
  + Disable relocation when built as a static libary on Windows.
  + Update wrap file for libjpeg-turbo.
  + Limit the memory size when loading image data.
- Add docutils and pkgconfig(gi-docgen) BuildRequires: New
  dependencies.</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- avoid bashism in baselibs postscript (bsc#1195391)</changelog>
  <changelog author="mgorse@suse.com" date="1661860800">- Add 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch:
  fix loading of larger images (glgo#GNOME/gdk-pixbuf#216).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666785600">- Update to version 2.42.10:
  + Search for rst2man.py.
  + Update the memory size limit for JPEG images.
  + Updated translations.
- Drop patch fixed upstream (with different limit):
  + 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- Fix path to gdk-pixbuf-query-loader in pkg-config file: we rename
  the loader to be multi-arch compatible and thus also need to
  adjust the .pc file to have build-systems find it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714651200">- Update to version 2.42.11:
  + Disable fringe loaders by default.
  + Introspection fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714996800">- Pass -Dothers=enabled to meson: enable other image loaders (most
  notably beeded seems xpm,xbm). This is in line with upstreams
  recommendation for now, but won't be working past version 2.43.x.
  The loaders will likely be split out into a separate repo.
  (boo#1223903, glgo#GNOME/gdk-pixbuf!169).
- Add 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: Fix test
  suite with other loaders enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715774400">- Update to version 2.42.12:
  + Fix a build failure,
  + Fix occasional build failures,
  + ani: Reject files with multiple INA or IART chunks,
  + ani: Reject files with multiple anih chunks (CVE-2022-48622),
  + ani: validate chunk size,
  + Updated translations.
- Drop 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Migrate package to a regular obs_scm service, no longer password
  protecting a zip file. The originally reported bsc#1159337 seems
  no longer be applicable and we prefer the easier route.
- Drop unzip BuildRequires and pre_checkin.sh script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860801">- Enable test suite on x86_64 (other arches seem too flaky for now):
  + Add %check section and call %meson_test
  + Add gdk-pixbuf-jpeg-slow.patch: allow pixbuf-jpeg to run for
    more than 30s, by marking it as a slow test
    (glgo#GNOME/gdk-pixbuf!174).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1752840000">- Add gdk-pixbuf-fix-decoder-written-bytes-reporting.patch: Fix
  memory leak caused by wrong written bytes reported by decoder
  (CVE-2025-6199, glgo#GNOME/gdk-pixbuf#257, bsc#1245227).</changelog>
  <changelog author="mgorse@suse.com" date="1755518400">- Add gdk-pixbuf-jpeg-icc-data.patch: be more careful with icc data
  (bsc#1246114 CVE-2025-7345 glgo@GNOME/gdk-pixbuf!217).</changelog>
  <changelog author="mgorse@suse.com" date="1775736000">- Add gdk-pixbuf-CVE-2026-5201.patch: jpeg: Reject unsupported
  number of components (bsc#1261210 CVE-2026-5201
  glgo#GNOME/gdk-pixbuf#266).</changelog>
</package>
<package pkgid="38a15b081cdde9a3ba18f8ce0e80e72b0a2672206aa28c6366c28a49454bfeb7" name="libgdk_pixbuf-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.42.12" rel="150600.3.8.1"/>
  <changelog author="zcjia@suse.com" date="1610020800">- Add gdk-pixbuf-bsc1180393-CVE-2020-29385.patch:
  gif: Fix LZW decoder accepting invalid LZW code. (bsc#1180393)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 2.42.4:
  + Make enum type registration thread safe.
  + Do not install skipped test files.
  + Fix GIF initialization.
  + Always run GIF loader tests.
  + Fix leaks discovered via ASan.
  + Expose GdkPixbufLoader API via introspection.
  + Fix revert-to-previous first frame behaviour for GIF files.
  + Link to libintl if needed.
  + Improve support for using gdk-pixbuf as a subproject.
  + Fix build with GModule disabled.
  + Use gi-docgen to generate the API reference from introspection
    data.
- Replace gtk-doc BuildRequires with python3-gi-docgen: follow
  upstreams port.
- As a workaround to
  https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/177, delete
  the installed gi-docgen program files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616846400">- Disable building of docs: creates a cycle with python:
  + Drop python3-gi-docgen BuildRequires.
  + Pass gtk_doc=false to meson</changelog>
  <changelog author="rpm@fthiessen.de" date="1618401600">- Update to stable 2.42.6
  + Yield gtk_doc option value in subprojects
  + Always initialise locale on thumbnailer startup
  + Add fallback subproject for libjpeg
  + Use type:array for the builtin_loaders option
  + Default to using builtin png and jpeg loaders</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop gdk-pixbuf-bsc1180393-CVE-2020-29385.patch on SLE and Leap
  15.4: fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636027200">- Stop passing no longer used nor recognized options jasper=false
  and x11=false to meson, fails the build when using meson 0.60.x.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 2.42.8 (boo#1201826):
  + Clear the pixbuf's memory buffer to avoid returning
    uninitialized memory.
  + Turn GdkPixbufModule functions into typed callbacks.
  + tiff: Use non-deprecated C99 integer types.
  + gif: Check for overflow when compositing or clearing frames.
  + Change png/jpeg/tiff build options from boolean to feature.
  + jpeg: Do not rely on UB around setjmp/longjmp.
  + Build fixes.
  + Documentation fixes.
  + Security fixes: CVE-2021-46829.
  + Updated translations.
- Stop passing options to meson that just follow upstream default,
  just rely on upstream providing sane defaults, apart from where
  we want to deviate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1660046400">- Update to version 2.42.9:
  + Fix the check for maximum value of LZW initial code size
    (boo#1194633 CVE-2021-44648).
  + Use CMake for dependencies on Windows/MSVC.
  + Add option for building tests.
  + Move man pages to reStructuredText.
  + Disable relocation when built as a static libary on Windows.
  + Update wrap file for libjpeg-turbo.
  + Limit the memory size when loading image data.
- Add docutils and pkgconfig(gi-docgen) BuildRequires: New
  dependencies.</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- avoid bashism in baselibs postscript (bsc#1195391)</changelog>
  <changelog author="mgorse@suse.com" date="1661860800">- Add 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch:
  fix loading of larger images (glgo#GNOME/gdk-pixbuf#216).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666785600">- Update to version 2.42.10:
  + Search for rst2man.py.
  + Update the memory size limit for JPEG images.
  + Updated translations.
- Drop patch fixed upstream (with different limit):
  + 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- Fix path to gdk-pixbuf-query-loader in pkg-config file: we rename
  the loader to be multi-arch compatible and thus also need to
  adjust the .pc file to have build-systems find it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714651200">- Update to version 2.42.11:
  + Disable fringe loaders by default.
  + Introspection fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714996800">- Pass -Dothers=enabled to meson: enable other image loaders (most
  notably beeded seems xpm,xbm). This is in line with upstreams
  recommendation for now, but won't be working past version 2.43.x.
  The loaders will likely be split out into a separate repo.
  (boo#1223903, glgo#GNOME/gdk-pixbuf!169).
- Add 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: Fix test
  suite with other loaders enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715774400">- Update to version 2.42.12:
  + Fix a build failure,
  + Fix occasional build failures,
  + ani: Reject files with multiple INA or IART chunks,
  + ani: Reject files with multiple anih chunks (CVE-2022-48622),
  + ani: validate chunk size,
  + Updated translations.
- Drop 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Migrate package to a regular obs_scm service, no longer password
  protecting a zip file. The originally reported bsc#1159337 seems
  no longer be applicable and we prefer the easier route.
- Drop unzip BuildRequires and pre_checkin.sh script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860801">- Enable test suite on x86_64 (other arches seem too flaky for now):
  + Add %check section and call %meson_test
  + Add gdk-pixbuf-jpeg-slow.patch: allow pixbuf-jpeg to run for
    more than 30s, by marking it as a slow test
    (glgo#GNOME/gdk-pixbuf!174).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1752840000">- Add gdk-pixbuf-fix-decoder-written-bytes-reporting.patch: Fix
  memory leak caused by wrong written bytes reported by decoder
  (CVE-2025-6199, glgo#GNOME/gdk-pixbuf#257, bsc#1245227).</changelog>
  <changelog author="mgorse@suse.com" date="1755518400">- Add gdk-pixbuf-jpeg-icc-data.patch: be more careful with icc data
  (bsc#1246114 CVE-2025-7345 glgo@GNOME/gdk-pixbuf!217).</changelog>
</package>
<package pkgid="68701007dbe6a7735875ae1288b73a424b0a18c2327368e6e46caa1b69971c62" name="libgdk_pixbuf-2_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="2.42.12" rel="150600.3.11.1"/>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 2.42.4:
  + Make enum type registration thread safe.
  + Do not install skipped test files.
  + Fix GIF initialization.
  + Always run GIF loader tests.
  + Fix leaks discovered via ASan.
  + Expose GdkPixbufLoader API via introspection.
  + Fix revert-to-previous first frame behaviour for GIF files.
  + Link to libintl if needed.
  + Improve support for using gdk-pixbuf as a subproject.
  + Fix build with GModule disabled.
  + Use gi-docgen to generate the API reference from introspection
    data.
- Replace gtk-doc BuildRequires with python3-gi-docgen: follow
  upstreams port.
- As a workaround to
  https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/177, delete
  the installed gi-docgen program files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616846400">- Disable building of docs: creates a cycle with python:
  + Drop python3-gi-docgen BuildRequires.
  + Pass gtk_doc=false to meson</changelog>
  <changelog author="rpm@fthiessen.de" date="1618401600">- Update to stable 2.42.6
  + Yield gtk_doc option value in subprojects
  + Always initialise locale on thumbnailer startup
  + Add fallback subproject for libjpeg
  + Use type:array for the builtin_loaders option
  + Default to using builtin png and jpeg loaders</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop gdk-pixbuf-bsc1180393-CVE-2020-29385.patch on SLE and Leap
  15.4: fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636027200">- Stop passing no longer used nor recognized options jasper=false
  and x11=false to meson, fails the build when using meson 0.60.x.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 2.42.8 (boo#1201826):
  + Clear the pixbuf's memory buffer to avoid returning
    uninitialized memory.
  + Turn GdkPixbufModule functions into typed callbacks.
  + tiff: Use non-deprecated C99 integer types.
  + gif: Check for overflow when compositing or clearing frames.
  + Change png/jpeg/tiff build options from boolean to feature.
  + jpeg: Do not rely on UB around setjmp/longjmp.
  + Build fixes.
  + Documentation fixes.
  + Security fixes: CVE-2021-46829.
  + Updated translations.
- Stop passing options to meson that just follow upstream default,
  just rely on upstream providing sane defaults, apart from where
  we want to deviate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1660046400">- Update to version 2.42.9:
  + Fix the check for maximum value of LZW initial code size
    (boo#1194633 CVE-2021-44648).
  + Use CMake for dependencies on Windows/MSVC.
  + Add option for building tests.
  + Move man pages to reStructuredText.
  + Disable relocation when built as a static libary on Windows.
  + Update wrap file for libjpeg-turbo.
  + Limit the memory size when loading image data.
- Add docutils and pkgconfig(gi-docgen) BuildRequires: New
  dependencies.</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- avoid bashism in baselibs postscript (bsc#1195391)</changelog>
  <changelog author="mgorse@suse.com" date="1661860800">- Add 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch:
  fix loading of larger images (glgo#GNOME/gdk-pixbuf#216).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666785600">- Update to version 2.42.10:
  + Search for rst2man.py.
  + Update the memory size limit for JPEG images.
  + Updated translations.
- Drop patch fixed upstream (with different limit):
  + 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- Fix path to gdk-pixbuf-query-loader in pkg-config file: we rename
  the loader to be multi-arch compatible and thus also need to
  adjust the .pc file to have build-systems find it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714651200">- Update to version 2.42.11:
  + Disable fringe loaders by default.
  + Introspection fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714996800">- Pass -Dothers=enabled to meson: enable other image loaders (most
  notably beeded seems xpm,xbm). This is in line with upstreams
  recommendation for now, but won't be working past version 2.43.x.
  The loaders will likely be split out into a separate repo.
  (boo#1223903, glgo#GNOME/gdk-pixbuf!169).
- Add 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: Fix test
  suite with other loaders enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715774400">- Update to version 2.42.12:
  + Fix a build failure,
  + Fix occasional build failures,
  + ani: Reject files with multiple INA or IART chunks,
  + ani: Reject files with multiple anih chunks (CVE-2022-48622),
  + ani: validate chunk size,
  + Updated translations.
- Drop 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Migrate package to a regular obs_scm service, no longer password
  protecting a zip file. The originally reported bsc#1159337 seems
  no longer be applicable and we prefer the easier route.
- Drop unzip BuildRequires and pre_checkin.sh script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860801">- Enable test suite on x86_64 (other arches seem too flaky for now):
  + Add %check section and call %meson_test
  + Add gdk-pixbuf-jpeg-slow.patch: allow pixbuf-jpeg to run for
    more than 30s, by marking it as a slow test
    (glgo#GNOME/gdk-pixbuf!174).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1752840000">- Add gdk-pixbuf-fix-decoder-written-bytes-reporting.patch: Fix
  memory leak caused by wrong written bytes reported by decoder
  (CVE-2025-6199, glgo#GNOME/gdk-pixbuf#257, bsc#1245227).</changelog>
  <changelog author="mgorse@suse.com" date="1755518400">- Add gdk-pixbuf-jpeg-icc-data.patch: be more careful with icc data
  (bsc#1246114 CVE-2025-7345 glgo@GNOME/gdk-pixbuf!217).</changelog>
  <changelog author="mgorse@suse.com" date="1775736000">- Add gdk-pixbuf-CVE-2026-5201.patch: jpeg: Reject unsupported
  number of components (bsc#1261210 CVE-2026-5201
  glgo#GNOME/gdk-pixbuf#266).</changelog>
</package>
<package pkgid="2eba4a18899df0fcd81b5e85338d305c17249fb5f1281e523fce969c3bd0a121" name="libgdk_pixbuf-2_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="2.42.12" rel="150600.3.8.1"/>
  <changelog author="zcjia@suse.com" date="1610020800">- Add gdk-pixbuf-bsc1180393-CVE-2020-29385.patch:
  gif: Fix LZW decoder accepting invalid LZW code. (bsc#1180393)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616328000">- Update to version 2.42.4:
  + Make enum type registration thread safe.
  + Do not install skipped test files.
  + Fix GIF initialization.
  + Always run GIF loader tests.
  + Fix leaks discovered via ASan.
  + Expose GdkPixbufLoader API via introspection.
  + Fix revert-to-previous first frame behaviour for GIF files.
  + Link to libintl if needed.
  + Improve support for using gdk-pixbuf as a subproject.
  + Fix build with GModule disabled.
  + Use gi-docgen to generate the API reference from introspection
    data.
- Replace gtk-doc BuildRequires with python3-gi-docgen: follow
  upstreams port.
- As a workaround to
  https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/177, delete
  the installed gi-docgen program files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1616846400">- Disable building of docs: creates a cycle with python:
  + Drop python3-gi-docgen BuildRequires.
  + Pass gtk_doc=false to meson</changelog>
  <changelog author="rpm@fthiessen.de" date="1618401600">- Update to stable 2.42.6
  + Yield gtk_doc option value in subprojects
  + Always initialise locale on thumbnailer startup
  + Add fallback subproject for libjpeg
  + Use type:array for the builtin_loaders option
  + Default to using builtin png and jpeg loaders</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop gdk-pixbuf-bsc1180393-CVE-2020-29385.patch on SLE and Leap
  15.4: fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636027200">- Stop passing no longer used nor recognized options jasper=false
  and x11=false to meson, fails the build when using meson 0.60.x.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 2.42.8 (boo#1201826):
  + Clear the pixbuf's memory buffer to avoid returning
    uninitialized memory.
  + Turn GdkPixbufModule functions into typed callbacks.
  + tiff: Use non-deprecated C99 integer types.
  + gif: Check for overflow when compositing or clearing frames.
  + Change png/jpeg/tiff build options from boolean to feature.
  + jpeg: Do not rely on UB around setjmp/longjmp.
  + Build fixes.
  + Documentation fixes.
  + Security fixes: CVE-2021-46829.
  + Updated translations.
- Stop passing options to meson that just follow upstream default,
  just rely on upstream providing sane defaults, apart from where
  we want to deviate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1660046400">- Update to version 2.42.9:
  + Fix the check for maximum value of LZW initial code size
    (boo#1194633 CVE-2021-44648).
  + Use CMake for dependencies on Windows/MSVC.
  + Add option for building tests.
  + Move man pages to reStructuredText.
  + Disable relocation when built as a static libary on Windows.
  + Update wrap file for libjpeg-turbo.
  + Limit the memory size when loading image data.
- Add docutils and pkgconfig(gi-docgen) BuildRequires: New
  dependencies.</changelog>
  <changelog author="dmueller@suse.com" date="1660564800">- avoid bashism in baselibs postscript (bsc#1195391)</changelog>
  <changelog author="mgorse@suse.com" date="1661860800">- Add 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch:
  fix loading of larger images (glgo#GNOME/gdk-pixbuf#216).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1666785600">- Update to version 2.42.10:
  + Search for rst2man.py.
  + Update the memory size limit for JPEG images.
  + Updated translations.
- Drop patch fixed upstream (with different limit):
  + 0001-jpeg-Increase-memory-limit-for-loading-image-data.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1713182400">- Fix path to gdk-pixbuf-query-loader in pkg-config file: we rename
  the loader to be multi-arch compatible and thus also need to
  adjust the .pc file to have build-systems find it.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714651200">- Update to version 2.42.11:
  + Disable fringe loaders by default.
  + Introspection fixes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1714996800">- Pass -Dothers=enabled to meson: enable other image loaders (most
  notably beeded seems xpm,xbm). This is in line with upstreams
  recommendation for now, but won't be working past version 2.43.x.
  The loaders will likely be split out into a separate repo.
  (boo#1223903, glgo#GNOME/gdk-pixbuf!169).
- Add 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: Fix test
  suite with other loaders enabled.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715774400">- Update to version 2.42.12:
  + Fix a build failure,
  + Fix occasional build failures,
  + ani: Reject files with multiple INA or IART chunks,
  + ani: Reject files with multiple anih chunks (CVE-2022-48622),
  + ani: validate chunk size,
  + Updated translations.
- Drop 238893d8cd6f9c2616a05ab521a29651a17a38c2.patch: fixed
  upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860800">- Migrate package to a regular obs_scm service, no longer password
  protecting a zip file. The originally reported bsc#1159337 seems
  no longer be applicable and we prefer the easier route.
- Drop unzip BuildRequires and pre_checkin.sh script.</changelog>
  <changelog author="dimstar@opensuse.org" date="1715860801">- Enable test suite on x86_64 (other arches seem too flaky for now):
  + Add %check section and call %meson_test
  + Add gdk-pixbuf-jpeg-slow.patch: allow pixbuf-jpeg to run for
    more than 30s, by marking it as a slow test
    (glgo#GNOME/gdk-pixbuf!174).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1752840000">- Add gdk-pixbuf-fix-decoder-written-bytes-reporting.patch: Fix
  memory leak caused by wrong written bytes reported by decoder
  (CVE-2025-6199, glgo#GNOME/gdk-pixbuf#257, bsc#1245227).</changelog>
  <changelog author="mgorse@suse.com" date="1755518400">- Add gdk-pixbuf-jpeg-icc-data.patch: be more careful with icc data
  (bsc#1246114 CVE-2025-7345 glgo@GNOME/gdk-pixbuf!217).</changelog>
</package>
<package pkgid="c4fa452cb39df0680fa15e1176e8eb1af033916e75c1567f9fcc8c9cbb9911dc" name="libgfortran5" arch="x86_64">
  <version epoch="0" ver="14.3.0+git11799" rel="150000.1.11.1"/>
  <changelog author="rguenther@suse.com" date="1728475200">- Update to gcc-14 branch head, 4af44f2cf7d281f3e4f3957ef, git10750
  * includes libstdc++6 fix for parsing tzdata 2024b [gcc#116657]
- Add gcc14-pr116629.patch to fix ICE with LTO building openvino
  on aarch64 [boo#1230262]</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1732968000">- Add loongarch64 to asan_arch, atomic_arch,
  itm_arch, lsan_arch, tsan_arch and ubsan_arch
- Add larchintrin.h, lasxintrin.h and lsxintrin.h
  headers to gccXY main package in %files section
- Set build_primary_64bit to 1 for loongarch64</changelog>
  <changelog author="adrian@suse.de" date="1733140800">- disable go on loongarch64 for now</changelog>
  <changelog author="mardnh@gmx.de" date="1736078400">- Switch to glibc based cross-compiler for target hppa</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Define ALT_CC_UNDER_TEST and ALT_CXX_UNDER_TEST for compat tests</changelog>
  <changelog author="rguenther@suse.com" date="1738152000">- For cross compilers require the same or newer binutils, newlib
  or cross-glibc that was used at build time.  [bsc#1232526]</changelog>
  <changelog author="rguenther@suse.com" date="1738843200">- Adjust cross compiler requirements to use %requires_ge
- Fix condition on whether to enable plugins or JIT support to
  not check sle_version which is not defined in SLFO but to check
  is_opensuse and suse_version instead.
- Add gcc14-pr118780.patch to make the SLFO config work.</changelog>
  <changelog author="rguenther@suse.com" date="1740052800">- Update to gcc-14 branch head, 9ffecde121af883b60bbe60d0, git11321
  * fixes reported ICE in [bsc#1237442]
- Drop gcc14-pr116629.patch now backported to the branch.</changelog>
  <changelog author="rguenther@suse.com" date="1741608000">- Disable profiling during build when %want_reproducible_builds is set
  [bsc#1238491]</changelog>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
</package>
<package pkgid="cf05a4e8aaa6fd83a57f1eea59d2b47d147ddac5c633df0d35c4ec216ef0f8ac" name="libgfortran5" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.3.3"/>
  <changelog author="rguenther@suse.com" date="1743163200">- Update to GCC trunk head, 15.0.1+git9001
  * includes -msplit-patch-nops required for user-space livepatching
    on powerpc
  * includes fix for Ada build with --enable-host-pie
- Adjust for removed avx10_2roundingintrin.h intrinsic header.
- Build GCC executables PIE on SLE.  [bsc#1239938]</changelog>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="e470cfff6eb7dd8126049134c71bb6062381f5c2be98a3119ae76035f111a9b8" name="libgfortran5" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.6.1"/>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
</package>
<package pkgid="12f53f9328f6be2c646998dc77b079ad933fae48b26f51f8ce5d64c939ce0cb8" name="libgfortran5" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.9.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc14-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="b6bb5c7089c841d41778eb817462f26b638caa40c0d9228f00221a6b0fb4bf71" name="libgfortran5-32bit" arch="x86_64">
  <version epoch="0" ver="14.3.0+git11799" rel="150000.1.11.1"/>
  <changelog author="rguenther@suse.com" date="1728475200">- Update to gcc-14 branch head, 4af44f2cf7d281f3e4f3957ef, git10750
  * includes libstdc++6 fix for parsing tzdata 2024b [gcc#116657]
- Add gcc14-pr116629.patch to fix ICE with LTO building openvino
  on aarch64 [boo#1230262]</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1732968000">- Add loongarch64 to asan_arch, atomic_arch,
  itm_arch, lsan_arch, tsan_arch and ubsan_arch
- Add larchintrin.h, lasxintrin.h and lsxintrin.h
  headers to gccXY main package in %files section
- Set build_primary_64bit to 1 for loongarch64</changelog>
  <changelog author="adrian@suse.de" date="1733140800">- disable go on loongarch64 for now</changelog>
  <changelog author="mardnh@gmx.de" date="1736078400">- Switch to glibc based cross-compiler for target hppa</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Define ALT_CC_UNDER_TEST and ALT_CXX_UNDER_TEST for compat tests</changelog>
  <changelog author="rguenther@suse.com" date="1738152000">- For cross compilers require the same or newer binutils, newlib
  or cross-glibc that was used at build time.  [bsc#1232526]</changelog>
  <changelog author="rguenther@suse.com" date="1738843200">- Adjust cross compiler requirements to use %requires_ge
- Fix condition on whether to enable plugins or JIT support to
  not check sle_version which is not defined in SLFO but to check
  is_opensuse and suse_version instead.
- Add gcc14-pr118780.patch to make the SLFO config work.</changelog>
  <changelog author="rguenther@suse.com" date="1740052800">- Update to gcc-14 branch head, 9ffecde121af883b60bbe60d0, git11321
  * fixes reported ICE in [bsc#1237442]
- Drop gcc14-pr116629.patch now backported to the branch.</changelog>
  <changelog author="rguenther@suse.com" date="1741608000">- Disable profiling during build when %want_reproducible_builds is set
  [bsc#1238491]</changelog>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
</package>
<package pkgid="5213e62acef824c0ecce78e01052e7058460fbbc1211934968abb14156bc3cff" name="libgfortran5-32bit" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.3.3"/>
  <changelog author="rguenther@suse.com" date="1743163200">- Update to GCC trunk head, 15.0.1+git9001
  * includes -msplit-patch-nops required for user-space livepatching
    on powerpc
  * includes fix for Ada build with --enable-host-pie
- Adjust for removed avx10_2roundingintrin.h intrinsic header.
- Build GCC executables PIE on SLE.  [bsc#1239938]</changelog>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="69a158ea313c6a5293736af0cc913a5c4595032422221a062190d20b0af7c43e" name="libgfortran5-32bit" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.6.1"/>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
</package>
<package pkgid="a7069b9c738ffea64de3e1acc1da49db7791654120ed2ae62594add69cd0c4b5" name="libgfortran5-32bit" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.9.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc14-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="f0ccb22de09627059c16ea55e2dbb4098a2bf1a32bf7a9b548e81f7b88faa578" name="libgif7" arch="x86_64">
  <version epoch="0" ver="5.2.2" rel="150000.4.19.1"/>
  <changelog author="p.drouand@gmail.com" date="1421236800">- Update to version 5.1.1
  + Numerous minor fixes in getarg.c. Affects only the utilities, not the
    core library.
  + Fix SourceForge bug #59 DGifOpen can segfault if DGifGetScreenDesc fails.
  + SourceForge patch #20: In gifalloc, fix usage of realloc() in case of failure.
  + Fix SourceForge bug #61 Leak in gifsponge.
  + glibtoolize port fix for OS X.</changelog>
  <changelog author="tchvatal@suse.com" date="1421323200">- Cleanup a bit
- Remove obsolete sle10 deprecations
- Fix one tiny rpmlint warning</changelog>
  <changelog author="fstrba@suse.com" date="1453204800">- Update to version 5.1.2 (fixes CVE-2015-7555, bsc#960319)
  * Code Fixes
    + Code hardening using reallocarray() from OpenBSD.
    + Sanity check in giffilter catches files with malformed
  extension records. Fixes SourceForge bug #63: malformed gif
  causes segfault in giffilter.
  + Inexpensive sanity check in DGifSlurp() catches malformed files
    with  no image descriptor. Fixes SourceForge bug #64: malformed
  gif causes crash in giftool.
  + Fix SourceForge bug #66: GifDrawBoxedText8x8() modifying
    constant input parameter.
  + Bail out of GIF read on invalid pixel width. Addresses Savannah
    bug #67: invalid shift in dgif_lib.c
  + Fix SourceForge bug #69: #69 Malformed: Gif file with no
    extension block after a GRAPHICS_EXT_FUNC_CODE extension causes
  segfault (in giftext).
  + Fix SourceForge bug #71: Buffer overwrite when giffixing a
    malformed gif.
  + Fix SourceForge bug #73: Null pointer deference in gifclrmap
    (only reachable with malformed GIF).
  + Fix SourceForge bug #74: Double free in gifsponge under 5.1,1,
    for any valid gif image.
  + Fix SourceForge bug #75: GAGetArgs overflows due to uncounted
    use of va_arg.
  + Sanity check in giffix catches some malformed files. Addresses
    SourceForge bug #77: dgif_lib.c: extension processing error
- Modified patches:
  * giflib-automake-1_13.patch
  * giflib-visibility.patch
    + rediff to changed context</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 5.1.3
  * Prevent malloc randomess from causing the header output routine
  to emit a GIF89 version string even when no GIF89 features are
  present.
  * Prevent malloc randomess from producing sporadic failures by causing
  sanity checks added in 5.1.2 to misfire.
  * Bulletproof gif2rgb against 0-height images. Addressed sf#78:
  Heap overflow in gif2rgb with images of size 0, also sf#82.
  * Remove unnecessary duplicate EGifClose() in gifcolor.c. Fixes sf#83
  introduced in 5.1.2.
  * Fix sf#84: incorrect return of DGifSlurp().
- Add giflib-sf-88.patch to fix sf#88</changelog>
  <changelog author="fstrba@suse.com" date="1460462400">- Update to version 5.1.4
  * Fix SF bug #94: giflib 5 loves to fail to load images... a LOT.
  * Fix SF Bug #92: Fix buffer overread in gifbuild.
  * Fix SF Bug #93: Add bounds check in gifbuild netscape2.0 path
  * Fix SF Bug #89: Fix buffer overread in gifbuild.
- Removed patch:
  * giflib-sf-88.patch
    + Integrated upstream
- Added patch:
  * giflib-CVE-2016-3977.patch
  - Fix CVE-2016-3977: heap buffer overflow in gif2rgb
    (bsc#974847)</changelog>
  <changelog author="rpm@fthiessen.de" date="1463140800">- Added fix-autoconf11.patch for fixing build with older autoconf,
  requires for SLE11.</changelog>
  <changelog author="bwiedemann@suse.com" date="1499256000">- Keep timestamps before patch updates them to fix build-compare</changelog>
  <changelog author="schwab@suse.de" date="1541764800">- Remove unused build requires on X libraries
- Use %license</changelog>
  <changelog author="elimat@opensuse.org" date="1594382400">- Update to version 5.2.1
  * In gifbuild.c, avoid a core dump on no color map.
  * Restore inadvertently removed library version numbers in Makefile.
- Changes in version 5.2.0
  * The undocumented and deprecated GifQuantizeBuffer() entry point
    has been moved to the util library to reduce libgif size and attack
    surface. Applications needing this function are couraged to link the
    util library or make their own copy.
  * The following obsolete utility programs are no longer installed:
    gifecho, giffilter, gifinto, gifsponge. These were either installed in
    error or have been obsolesced by modern image-transformmation tools
    like ImageMagick convert. They may be removed entirely in a future
    release.
  * Address SourceForge issue #136: Stack-buffer-overflow in gifcolor.c:84
  * Address SF bug #134: Giflib fails to slurp significant number of gifs
  * Apply SPDX convention for license tagging.
- Changes in version 5.1.9
  * The documentation directory now includes an HTMlified version of the
    GIF89 standard, and a more detailed description of how LZW compression
    is applied to GIFs.
  * Address SF bug #129: The latest version of giflib cannot be build on windows.
  * Address SF bug #126: Cannot compile giflib using c89
- Changes in version 5.1.8
  * Address SF bug #119: MemorySanitizer: FPE on unknown address (CVE-2019-15133 bsc#1146299)
  * Address SF bug #125: 5.1.7: xmlto is still required for tarball
  * Address SF bug #124: 5.1.7: ar invocation is not crosscompile compatible
  * Address SF bug #122: 5.1.7 installs manpages to wrong directory
  * Address SF bug #121: make: getversion: Command not found
  * Address SF bug #120: 5.1.7 does not build a proper library - no
- Changes in version 5.1.7
  * Correct a minor packaging error (superfluous symlinks) in the 5.1.6 tarballs.
- Changes in version 5.1.6
  * Fix library installation in the Makefile.
- Changes in version 5.1.5
  * Fix SF bug #114: Null dereferences in main() of gifclrmp
  * Fix SF bug #113: Heap Buffer Overflow-2 in function DGifDecompressLine()
    in cgif.c.  This had been assigned (CVE-2018-11490 bsc#1094832).
  * Fix SF bug #111: segmentation fault in PrintCodeBlock
  * Fix SF bug #109: Segmentation fault of giftool reading a crafted file
  * Fix SF bug #107: Floating point exception in giftext utility
  * Fix SF bug #105: heap buffer overflow in DumpScreen2RGB in gif2rgb.c:317
  * Fix SF bug #104: Ineffective bounds check in DGifSlurp
  * Fix SF bug #103: GIFLIB 5.1.4: DGifSlurp fails on empty comment
  * Fix SF bug #87: Heap buffer overflow in 5.1.2 (gif2rgb). (CVE-2016-3977 bsc#974847)
  * The horrible old autoconf build system has been removed with extreme prejudice.
    You now build this simply by running "make" from the top-level directory.
- Run spec-cleaner
- Drop patches fixed upstream:
  * giflib-visibility.patch
  * giflib-automake-1_13.patch
  * giflib-CVE-2016-3977.patch
  * fix-autoconf11.patch
- Change build system to Make only (upstream not using autoconf)</changelog>
  <changelog author="fstrba@suse.com" date="1618401600">- Added patch:
  * PIE.patch
    + build path independent objects and inherit CFLAGS from the
    build system (bsc#1184123)</changelog>
  <changelog author="olaf@aepfle.de" date="1618488000">- prep section should just extract and patch,
  further modifications have to be done in the build section</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- add reproducible.patch to avoid timestamp patching in the build
  section and allowing it to build with -Werror=date-time</changelog>
  <changelog author="fstrba@suse.com" date="1691841600">- Define make_build for distributions which do not define them in
  system macros</changelog>
  <changelog author="fstrba@suse.com" date="1708948800">- Update to version 5.2.2
  * Fixes for CVE-2023-48161 (bsc#1217390), CVE-2022-28506
    (bsc#1198880)
  * Address SF issue #138 Documentation for obsolete utilities still
    installed
  * Address SF issue #139: Typo in "LZW image data" page
    ("110_2 = 4_10")
  * Address SF issue #140: Typo in "LZW image data" page ("LWZ")
  * Address SF issue #141: Typo in "Bits and bytes" page ("filed")
  * Note as already fixed SF issue #143: cannot compile under mingw
  * Address SF issue #144: giflib-5.2.1 cannot be build on windows
    and other platforms using c89
  * Address SF issue #145: Remove manual pages installation for
    binaries that are not installed too
  * Address SF issue #146: [PATCH] Limit installed man pages to
    binaries, move giflib to section 7
  * Address SF issue #147 [PATCH] Fixes to doc/whatsinagif/ content
  * Address SF issue #148: heap Out of Bound Read in gif2rgb.c:298
    DumpScreen2RGB
  * Declared no-info on SF issue #150: There is a denial of service
    vulnerability in GIFLIB 5.2.1
  * Declared Won't-fix on SF issue 149: Out of source builds no
    longer possible
  * Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
  * Address SF issue #152: Fix some typos on the html documentation
    and man pages
  * Address SF issue #153: Fix segmentation faults due to non
    correct checking for args
  * Address SF issue #154: Recover the giffilter manual page
  * Address SF issue #155: Add gifsponge docs
  * Address SF issue #157: An OutofMemory-Exception or Memory Leak
    in gif2rgb
  * Address SF issue #158: There is a null pointer problem in
    gif2rgb
  * Address SF issue #159 A heap-buffer-overflow in GIFLIB5.2.1
    DumpScreen2RGB() in gif2rgb.c:298:45
  * Address SF issue #163: detected memory leaks in
    openbsd_reallocarray giflib/openbsd-reallocarray.c
  * Address SF issue #164: detected memory leaks in GifMakeMapObject
    giflib/gifalloc.c
  * Address SF issue #166: a read zero page leads segment fault in
    getarg.c and memory leaks in gif2rgb.c and gifmalloc.c
  * Address SF issue #167: Heap-Buffer Overflow during Image Saving
    in DumpScreen2RGB Function at Line 321 of gif2rgb.c
- Added patch:
  * giflib-5.2.2-no-imagemagick.patch
    + do not use ImageMagick to resize one gif file. It creates a
    build cycle.
  * 0001-Clean-up-memory-better-at-end-of-run-CVE-2021-40633.patch
    + upstream fix for CVE-2021-40633 (bsc#1200551)
- Modified patches:
  * PIE.patch
  * reproducible.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1743508800">- Added patch:
  * giflib-bsc1240416.patch
    + fixing bsc#1240416: buffer overflow in function DumpScreen2RGB</changelog>
  <changelog author="fstrba@suse.com" date="1773230400">- Added patch:
  * 0001-Avoid-potentuial-double-free-on-weird-images.patch
    + fixing bsc#1259502 (CVE-2026-23868): double-free result of a
    shallow copy can lead to memory corruption</changelog>
</package>
<package pkgid="9491088fe08afb777905f101cc2790495f6ae1612a76e47228c4ae58afd10d93" name="libgio-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.16.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828801">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828802">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828804">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
</package>
<package pkgid="a18b05faa4b37e25737043bda58a35e4c639a20118efd6e5291c910722d09cb4" name="libgio-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.22.1"/>
  <changelog author="luc14n0@opensuse.org" date="1693828800">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828802">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828803">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
</package>
<package pkgid="c3d29807f7a16a07c3f9fbcb48f5ad4dd3f28f7ce3ff5e17108fcffa58ece7bb" name="libgio-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.25.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
</package>
<package pkgid="d2bfd3ca32c81ceca9b20d45c3e385241c15be97865a8dee19b4ef8ae03b791b" name="libgio-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.28.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828801">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
  <changelog author="mgorse@suse.com" date="1768996800">- Add glib2-CVE-2026-0988.patch: fix a potential integer overflow
  in g_buffered_input_stream_peek (bsc#1257049 CVE-2026-0988
  glgo#GNOME/glib#3851).</changelog>
</package>
<package pkgid="b473210242ccf159773174f14970a93a27c1d4d30457abd4ea18d7ecc75ee3ac" name="libgio-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.35.1"/>
  <changelog author="luc14n0@opensuse.org" date="1693828800">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
  <changelog author="mgorse@suse.com" date="1768996800">- Add glib2-CVE-2026-0988.patch: fix a potential integer overflow
  in g_buffered_input_stream_peek (bsc#1257049 CVE-2026-0988
  glgo#GNOME/glib#3851).</changelog>
  <changelog author="mgorse@suse.com" date="1769515200">- Add CVE fixes:
  + glib2-CVE-2026-1484.patch (bsc#1257355 CVE-2026-1484
    glgo#GNOME/glib!4979).
  + glib2-CVE-2026-1485.patch (bsc#1257354 CVE-2026-1485
    glgo#GNOME/glib!4981).
  + glib2-CVE-2026-1489.patch (bsc#1257353 CVE-2026-1489
    glgo#GNOME/glib!4984).</changelog>
</package>
<package pkgid="db8ad994880961ffbfdd72e2828d48ee3e3f4af43d0ad4c8f0e19fc2ad1ed565" name="libgio-2_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.16.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828801">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828802">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828804">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
</package>
<package pkgid="e03374f85579fb55a6e13743713a8195cf934823c4265e77ccbc8498b2d84d87" name="libgio-2_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.22.1"/>
  <changelog author="luc14n0@opensuse.org" date="1693828800">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828802">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828803">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
</package>
<package pkgid="001ed6c26f7ce5bc3f6fdf93fd8c37a97855c75c1d928043de0a408d9c1668a7" name="libgio-2_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.25.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
</package>
<package pkgid="ccf86bef6b9cb23d2341fcbf606fd0a10f64755a3eda69f9de0b22767e6e588a" name="libgio-2_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.28.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828801">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
  <changelog author="mgorse@suse.com" date="1768996800">- Add glib2-CVE-2026-0988.patch: fix a potential integer overflow
  in g_buffered_input_stream_peek (bsc#1257049 CVE-2026-0988
  glgo#GNOME/glib#3851).</changelog>
</package>
<package pkgid="3c93a278c42e861455ce7be529c7d222a5926d6bd3a67e77f184b0e4e056cc78" name="libgio-2_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.35.1"/>
  <changelog author="luc14n0@opensuse.org" date="1693828800">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
  <changelog author="mgorse@suse.com" date="1768996800">- Add glib2-CVE-2026-0988.patch: fix a potential integer overflow
  in g_buffered_input_stream_peek (bsc#1257049 CVE-2026-0988
  glgo#GNOME/glib#3851).</changelog>
  <changelog author="mgorse@suse.com" date="1769515200">- Add CVE fixes:
  + glib2-CVE-2026-1484.patch (bsc#1257355 CVE-2026-1484
    glgo#GNOME/glib!4979).
  + glib2-CVE-2026-1485.patch (bsc#1257354 CVE-2026-1485
    glgo#GNOME/glib!4981).
  + glib2-CVE-2026-1489.patch (bsc#1257353 CVE-2026-1489
    glgo#GNOME/glib!4984).</changelog>
</package>
<package pkgid="90bf50c13c6912c8f3004891497d31ee4141aab348ffd0e58dfb6d8d5d4822aa" name="libglib-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.16.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828801">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828802">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828804">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
</package>
<package pkgid="6363aa6835b3cfdb51b1c648b9a58ffebc8de00073abc8b78b39529d578e7657" name="libglib-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.22.1"/>
  <changelog author="luc14n0@opensuse.org" date="1693828800">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828802">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828803">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
</package>
<package pkgid="c297e71105c04ac5f5a803d01c0e571eb30f1aebe849f08a4e8c43b9a6f41ed2" name="libglib-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.25.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
</package>
<package pkgid="280d06e5ecbef1d0ef393eeae50c5a6ddf3eb03d451caf492bdfee2bfb32e559" name="libglib-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.28.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828801">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
  <changelog author="mgorse@suse.com" date="1768996800">- Add glib2-CVE-2026-0988.patch: fix a potential integer overflow
  in g_buffered_input_stream_peek (bsc#1257049 CVE-2026-0988
  glgo#GNOME/glib#3851).</changelog>
</package>
<package pkgid="9a6c03594d016d2ba052dd5749d891c3fdef7a6049d07191a98955e1f2abcb2d" name="libglib-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.35.1"/>
  <changelog author="luc14n0@opensuse.org" date="1693828800">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
  <changelog author="mgorse@suse.com" date="1768996800">- Add glib2-CVE-2026-0988.patch: fix a potential integer overflow
  in g_buffered_input_stream_peek (bsc#1257049 CVE-2026-0988
  glgo#GNOME/glib#3851).</changelog>
  <changelog author="mgorse@suse.com" date="1769515200">- Add CVE fixes:
  + glib2-CVE-2026-1484.patch (bsc#1257355 CVE-2026-1484
    glgo#GNOME/glib!4979).
  + glib2-CVE-2026-1485.patch (bsc#1257354 CVE-2026-1485
    glgo#GNOME/glib!4981).
  + glib2-CVE-2026-1489.patch (bsc#1257353 CVE-2026-1489
    glgo#GNOME/glib!4984).</changelog>
</package>
<package pkgid="4dfadb48bd193f21ab10b1a73835d5d4ab90e34d6508237bc9bfc333d73c5ef6" name="libglib-2_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.16.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828801">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828802">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828804">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
</package>
<package pkgid="8e6e9bfdf8ec131832d32618065ca17c191d8c8dd6fe6fdcec6fbd72d623909e" name="libglib-2_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.22.1"/>
  <changelog author="luc14n0@opensuse.org" date="1693828800">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828802">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828803">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
</package>
<package pkgid="dc36f1c4616fe534c10acaae57d7981d77908052e9ea3027564cc9c5f4e44c73" name="libglib-2_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.25.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
</package>
<package pkgid="d4c6ba85d9273e4d2b29b6f972e80098cf71ed6166d313e0dd96b4c67aae9820" name="libglib-2_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.28.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828801">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
  <changelog author="mgorse@suse.com" date="1768996800">- Add glib2-CVE-2026-0988.patch: fix a potential integer overflow
  in g_buffered_input_stream_peek (bsc#1257049 CVE-2026-0988
  glgo#GNOME/glib#3851).</changelog>
</package>
<package pkgid="1829d44027e669a737d10e9a3b3df65d98610dd1aec600d0180893ceb3122790" name="libglib-2_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.35.1"/>
  <changelog author="luc14n0@opensuse.org" date="1693828800">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
  <changelog author="mgorse@suse.com" date="1768996800">- Add glib2-CVE-2026-0988.patch: fix a potential integer overflow
  in g_buffered_input_stream_peek (bsc#1257049 CVE-2026-0988
  glgo#GNOME/glib#3851).</changelog>
  <changelog author="mgorse@suse.com" date="1769515200">- Add CVE fixes:
  + glib2-CVE-2026-1484.patch (bsc#1257355 CVE-2026-1484
    glgo#GNOME/glib!4979).
  + glib2-CVE-2026-1485.patch (bsc#1257354 CVE-2026-1485
    glgo#GNOME/glib!4981).
  + glib2-CVE-2026-1489.patch (bsc#1257353 CVE-2026-1489
    glgo#GNOME/glib!4984).</changelog>
</package>
<package pkgid="07271c0e3b1561ab1a8eee192aab654d43e3f55f4b8f61451a813f9b9dc48463" name="libgmodule-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.16.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828801">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828802">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828804">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
</package>
<package pkgid="c52383d13be3ecb5ea65521e492c2ec33430e9e19c8032e54c864c581328c6b3" name="libgmodule-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.22.1"/>
  <changelog author="luc14n0@opensuse.org" date="1693828800">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828802">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828803">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
</package>
<package pkgid="7e782df506144b751773689a5164273a197d0cc148b6b09b851f2b4d02271a36" name="libgmodule-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.25.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
</package>
<package pkgid="c4e554bdc13604a6e2e14da63e1ddd25cd70075097135b6108e5a9243e3c3ece" name="libgmodule-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.28.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828801">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
  <changelog author="mgorse@suse.com" date="1768996800">- Add glib2-CVE-2026-0988.patch: fix a potential integer overflow
  in g_buffered_input_stream_peek (bsc#1257049 CVE-2026-0988
  glgo#GNOME/glib#3851).</changelog>
</package>
<package pkgid="ee83f3bab6d02cad946d578aa4207e4a0c563a31bc09ebf943a4dc8c2f9f9ca0" name="libgmodule-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.35.1"/>
  <changelog author="luc14n0@opensuse.org" date="1693828800">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
  <changelog author="mgorse@suse.com" date="1768996800">- Add glib2-CVE-2026-0988.patch: fix a potential integer overflow
  in g_buffered_input_stream_peek (bsc#1257049 CVE-2026-0988
  glgo#GNOME/glib#3851).</changelog>
  <changelog author="mgorse@suse.com" date="1769515200">- Add CVE fixes:
  + glib2-CVE-2026-1484.patch (bsc#1257355 CVE-2026-1484
    glgo#GNOME/glib!4979).
  + glib2-CVE-2026-1485.patch (bsc#1257354 CVE-2026-1485
    glgo#GNOME/glib!4981).
  + glib2-CVE-2026-1489.patch (bsc#1257353 CVE-2026-1489
    glgo#GNOME/glib!4984).</changelog>
</package>
<package pkgid="c8037ca7441c861239b99afbd64e250279137b983be24f783be839786602cf4b" name="libgmodule-2_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.16.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828801">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828802">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828804">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
</package>
<package pkgid="cc32486efa30035c44d2160ea443b6aa9c1ce0f0088efb48bf637c428790e294" name="libgmodule-2_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.22.1"/>
  <changelog author="luc14n0@opensuse.org" date="1693828800">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828802">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828803">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
</package>
<package pkgid="282c809d86a6c51b6f6f1b52892d5a3e193a1f1ba1436e45a4ab63b75a25bcf2" name="libgmodule-2_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.25.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
</package>
<package pkgid="6f7989ff3dc9a1d9fe529d1a7871748a7d6125331cc3c970d852fd9b3fe44271" name="libgmodule-2_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.28.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828801">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
  <changelog author="mgorse@suse.com" date="1768996800">- Add glib2-CVE-2026-0988.patch: fix a potential integer overflow
  in g_buffered_input_stream_peek (bsc#1257049 CVE-2026-0988
  glgo#GNOME/glib#3851).</changelog>
</package>
<package pkgid="64a65373f7d02e52fcfba1100f766fb225e80662be8dbb2ebc2ccb55e80e00c1" name="libgmodule-2_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.35.1"/>
  <changelog author="luc14n0@opensuse.org" date="1693828800">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
  <changelog author="mgorse@suse.com" date="1768996800">- Add glib2-CVE-2026-0988.patch: fix a potential integer overflow
  in g_buffered_input_stream_peek (bsc#1257049 CVE-2026-0988
  glgo#GNOME/glib#3851).</changelog>
  <changelog author="mgorse@suse.com" date="1769515200">- Add CVE fixes:
  + glib2-CVE-2026-1484.patch (bsc#1257355 CVE-2026-1484
    glgo#GNOME/glib!4979).
  + glib2-CVE-2026-1485.patch (bsc#1257354 CVE-2026-1485
    glgo#GNOME/glib!4981).
  + glib2-CVE-2026-1489.patch (bsc#1257353 CVE-2026-1489
    glgo#GNOME/glib!4984).</changelog>
</package>
<package pkgid="3f347ea0f0ab0947f8700d0bd70d10e09a825f3a559e7ec30268b90073d18854" name="libgnutls-devel" arch="x86_64">
  <version epoch="0" ver="3.8.3" rel="150600.4.12.1"/>
  <changelog author="pmonreal@suse.com" date="1685361600">- FIPS: Fix baselibs.conf to mention libgnutls30-hmac [bsc#1211476]
  Extend also the checks in gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1691409600">- Update to version 3.8.1:
  * libgnutls: ClientHello extensions are randomized by default
    To make fingerprinting harder, TLS extensions in ClientHello
    messages are shuffled. As this behavior may cause compatibility
    issue with legacy applications that do not accept the last
    extension without payload, the behavior can be reverted with the
    %NO_SHUFFLE_EXTENSIONS priority keyword.
  * libgnutls: Add support for RFC 9258 external PSK importer.
    This enables to deploy the same PSK across multiple TLS versions
    (TLS 1.2 and TLS 1.3) in a secure manner. To use, the application
    needs to set up a callback that formats the PSK identity using
    gnutls_psk_format_imported_identity().
  * libgnutls: %GNUTLS_NO_EXTENSIONS has been renamed to
    %GNUTLS_NO_DEFAULT_EXTENSIONS.
  * libgnutls: Add additional PBKDF limit checks in FIPS mode as
    defined in SP 800-132. Minimum salt length is 128 bits and
    minimum iterations bound is 1000 for PBKDF in FIPS mode.
  * libgnutls: Add a mechanism to control whether to enforce extended
    master secret (RFC 7627). FIPS 140-3 mandates the use of TLS
    session hash (extended master secret, EMS) in TLS 1.2. To enforce
    this, a new priority keyword %FORCE_SESSION_HASH is added and if
    it is set and EMS is not set, the peer aborts the connection. This
    behavior is the default in FIPS mode, though it can be overridden
    through the configuration file with the "tls-session-hash" option.
    In either case non-EMS PRF is reported as a non-approved operation
    through the FIPS service indicator.
  * New option --attime to specify current time.
    To make testing with different timestamp to the system easier, the
    tools doing certificate verification now provide a new option
  - -attime, which takes an arbitrary time.
  * API and ABI modifications:
    gnutls_psk_client_credentials_function3: New typedef
    gnutls_psk_server_credentials_function3: New typedef
    gnutls_psk_set_server_credentials_function3: New function
    gnutls_psk_set_client_credentials_function3: New function
    gnutls_psk_format_imported_identity: New function
    GNUTLS_PSK_KEY_EXT: New enum member of gnutls_psk_key_flags
  * Rebase patches:
  - gnutls-FIPS-140-3-references.patch
  - gnutls-FIPS-jitterentropy.patch
  * Remove patches merged/fixed upstream:
  - gnutls-FIPS-PCT-DH.patch
  - gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1692619200">- tests: Fix the SRP test that fails with SIGPIPE signal return due
  to a socket being closed before using it.
  * Add gnutls-srp-test-SIGPIPE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1692705600">- Fix missing GNUTLS_NO_EXTENSIONS compatibility.
  * Upstream: gitlab.com/gnutls/gnutls/commit/abfa8634
  * Add gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to 3.8.2: [bsc#1217277, CVE-2023-5981]
  * libgnutls: Fix timing side-channel inside RSA-PSK key exchange.
    [GNUTLS-SA-2023-10-23, CVSS: medium] [CVE-2023-5981]
  * libgnutls: Add API functions to perform ECDH and DH key agreement
    The functionality has been there for a long time though they were
    not available as part of the public API.  This enables applications
    to implement custom protocols leveraging non-interactive key
    agreement with ECDH and DH.
  * libgnutls: Added support for AES-GCM-SIV ciphers (RFC 8452)
    The new algorithms GNUTLS_CIPHER_AES_128_SIV_GCM and
    GNUTLS_CIPHER_AES_256_SIV_GCM have been added to be used through
    the AEAD interface.  Note that, unlike
    GNUTLS_CIPHER_AES_{128,256}_SIV_GCM, the authentication tag is
    appended to the ciphertext, not prepended.
  * libgnutls: transparent KTLS support is extended to FreeBSD kernel
    The kernel TLS feature can now be enabled on FreeBSD as well as
    Linux when compiled with the --enable-ktls configure option.
  * gnutls-cli: New option --starttls-name
    Depending on deployment, application protocols such as XMPP may
    require a different origin address than the external address to be
    presented prior to STARTTLS negotiation.  The --starttls-name can
    be used to specify specify the addresses separately.
  * API and ABI modifications:
  - gnutls_pubkey_import_dh_raw: New function
  - gnutls_privkey_import_dh_raw: New function
  - gnutls_pubkey_export_dh_raw: New function
  - gnutls_privkey_export_dh_raw: New function
  - gnutls_x509_privkey_import_dh_raw: New function
  - gnutls_privkey_derive_secret: New function
  - GNUTLS_KEYGEN_DH: New enum member of gnutls_keygen_types_t
  - GNUTLS_CIPHER_AES_128_SIV_GCM: Added
  - GNUTLS_CIPHER_AES_256_SIV_GCM: Added
  * Rebase gnutls-FIPS-140-3-references.patch
  * Remove upstream: gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Update to 3.8.3:
  * libgnutls: Fix more timing side-channel inside RSA-PSK key
    exchange. [GNUTLS-SA-2024-01-14, CVSS: medium]
    [bsc#1218865, CVE-2024-0553]
  * libgnutls: Fix assertion failure when verifying a certificate
    chain with a cycle of cross signatures.
    [GNUTLS-SA-2024-01-09, CVSS: medium] [bsc#1218862, CVE-2024-0567]
  * libgnutls: Fix regression in handling Ed25519 keys stored in
    PKCS#11 token certtool was unable to handle Ed25519 keys
    generated on PKCS#11 with pkcs11-tool (OpenSC).
    This is a regression introduced in 3.8.2.
  * Rebase gnutls-FIPS-140-3-references.patch
  * Updated upstream gnutls.keyring</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1720785600">- FIPS: [bsc#1227671, bsc#1226731]
  * Remove not needed DSA in selfchecks in FIPS mode.
  * Add gnutls-FIPS-no_dsa_selftest.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721131200">- FIPS: bsc#1227670
  * Allow RSA signature verification with min of 2048 bit modulus.
  * Add gnutls-FIPS-rsa-min-2048.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721649600">- FIPS: bsc#1227642
  * Mark SHA1 as not allowed for signature verification in both RSA and ECDSA sigVer.
  * Add gnutls-FIPS-no-sha1-verify.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1722945600">- FIPS: bsc#1226733
  * Use full hash+sign operations, not low level primitives in PCT test.
  * Add gnutls-FIPS-full-hash_sign.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1723204800">- FIPS: bsc#1226733
  * Run pairwise consistency test only in FIPS mode
  * Backport upstream commit 5c276953c1536375fba96bc769e1cb5d3123b4a7
  * Add gnutls-pct-in-FIPS-only.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1725451200">- FIPS: bsc#1230166
  * Mark gnutls_hash_fast operations as approved in SLI.
  * Add gnutls-FIPS-gnutls_hash_fast-SLI.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725537600">- FIPS: Allow to perform the integrity check with the hmac provided
  by each library [bsc#1226724]
  * Rebase gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1726488000">- FIPS: Do not allow curve P-192 for signature or keypair verification [bsc#1227669]
  * Add gnutls-FIPS-p192-disabled.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1739534400">- Security fix [bsc#1236974, CVE-2024-12243]
  * gnutls: inefficient DER Decoding in libtasn1 could lead to remote DoS
  * Add gnutls-CVE-2024-12243.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- Fix heap buffer overread when handling the CT SCT extension during X.509
  certificate parsing [bsc#1246233, CVE-2025-32989]
  * Add patch gnutls-CVE-2025-32989.patch
- Fix double-free due to incorrect ownership handling in the export logic of
  SAN entries containing an otherName [bsc#1246232, CVE-2025-32988]
  * Add patch gnutls-CVE-2025-32988.patch
- Fix 1-byte heap buffer overflow when parsing templates with certtool
  [bsc#1246267, CVE-2025-32990]
  * Add patch gnutls-CVE-2025-32990.patch
- Fix NULL pointer dereference when 2nd Client Hello omits PSK
  [bsc#1246299, CVE-2025-6395]
  * Add patch gnutls-CVE-2025-6395.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1763985600">- Security fix bsc#1254132 CVE-2025-9820
  * Fix buffer overflow in gnutls_pkcs11_token_init
  * Added gnutls-CVE-2025-9820.patch</changelog>
</package>
<package pkgid="d9fa25b8b288d39c017e9936429a9d47ccb281b524bba1b505fb9775cd08d554" name="libgnutls-devel" arch="x86_64">
  <version epoch="0" ver="3.8.3" rel="150600.4.17.1"/>
  <changelog author="pmonreal@suse.com" date="1692619200">- tests: Fix the SRP test that fails with SIGPIPE signal return due
  to a socket being closed before using it.
  * Add gnutls-srp-test-SIGPIPE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1692705600">- Fix missing GNUTLS_NO_EXTENSIONS compatibility.
  * Upstream: gitlab.com/gnutls/gnutls/commit/abfa8634
  * Add gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to 3.8.2: [bsc#1217277, CVE-2023-5981]
  * libgnutls: Fix timing side-channel inside RSA-PSK key exchange.
    [GNUTLS-SA-2023-10-23, CVSS: medium] [CVE-2023-5981]
  * libgnutls: Add API functions to perform ECDH and DH key agreement
    The functionality has been there for a long time though they were
    not available as part of the public API.  This enables applications
    to implement custom protocols leveraging non-interactive key
    agreement with ECDH and DH.
  * libgnutls: Added support for AES-GCM-SIV ciphers (RFC 8452)
    The new algorithms GNUTLS_CIPHER_AES_128_SIV_GCM and
    GNUTLS_CIPHER_AES_256_SIV_GCM have been added to be used through
    the AEAD interface.  Note that, unlike
    GNUTLS_CIPHER_AES_{128,256}_SIV_GCM, the authentication tag is
    appended to the ciphertext, not prepended.
  * libgnutls: transparent KTLS support is extended to FreeBSD kernel
    The kernel TLS feature can now be enabled on FreeBSD as well as
    Linux when compiled with the --enable-ktls configure option.
  * gnutls-cli: New option --starttls-name
    Depending on deployment, application protocols such as XMPP may
    require a different origin address than the external address to be
    presented prior to STARTTLS negotiation.  The --starttls-name can
    be used to specify specify the addresses separately.
  * API and ABI modifications:
  - gnutls_pubkey_import_dh_raw: New function
  - gnutls_privkey_import_dh_raw: New function
  - gnutls_pubkey_export_dh_raw: New function
  - gnutls_privkey_export_dh_raw: New function
  - gnutls_x509_privkey_import_dh_raw: New function
  - gnutls_privkey_derive_secret: New function
  - GNUTLS_KEYGEN_DH: New enum member of gnutls_keygen_types_t
  - GNUTLS_CIPHER_AES_128_SIV_GCM: Added
  - GNUTLS_CIPHER_AES_256_SIV_GCM: Added
  * Rebase gnutls-FIPS-140-3-references.patch
  * Remove upstream: gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Update to 3.8.3:
  * libgnutls: Fix more timing side-channel inside RSA-PSK key
    exchange. [GNUTLS-SA-2024-01-14, CVSS: medium]
    [bsc#1218865, CVE-2024-0553]
  * libgnutls: Fix assertion failure when verifying a certificate
    chain with a cycle of cross signatures.
    [GNUTLS-SA-2024-01-09, CVSS: medium] [bsc#1218862, CVE-2024-0567]
  * libgnutls: Fix regression in handling Ed25519 keys stored in
    PKCS#11 token certtool was unable to handle Ed25519 keys
    generated on PKCS#11 with pkcs11-tool (OpenSC).
    This is a regression introduced in 3.8.2.
  * Rebase gnutls-FIPS-140-3-references.patch
  * Updated upstream gnutls.keyring</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1720785600">- FIPS: [bsc#1227671, bsc#1226731]
  * Remove not needed DSA in selfchecks in FIPS mode.
  * Add gnutls-FIPS-no_dsa_selftest.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721131200">- FIPS: bsc#1227670
  * Allow RSA signature verification with min of 2048 bit modulus.
  * Add gnutls-FIPS-rsa-min-2048.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721649600">- FIPS: bsc#1227642
  * Mark SHA1 as not allowed for signature verification in both RSA and ECDSA sigVer.
  * Add gnutls-FIPS-no-sha1-verify.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1722945600">- FIPS: bsc#1226733
  * Use full hash+sign operations, not low level primitives in PCT test.
  * Add gnutls-FIPS-full-hash_sign.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1723204800">- FIPS: bsc#1226733
  * Run pairwise consistency test only in FIPS mode
  * Backport upstream commit 5c276953c1536375fba96bc769e1cb5d3123b4a7
  * Add gnutls-pct-in-FIPS-only.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1725451200">- FIPS: bsc#1230166
  * Mark gnutls_hash_fast operations as approved in SLI.
  * Add gnutls-FIPS-gnutls_hash_fast-SLI.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725537600">- FIPS: Allow to perform the integrity check with the hmac provided
  by each library [bsc#1226724]
  * Rebase gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1726488000">- FIPS: Do not allow curve P-192 for signature or keypair verification [bsc#1227669]
  * Add gnutls-FIPS-p192-disabled.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1739534400">- Security fix [bsc#1236974, CVE-2024-12243]
  * gnutls: inefficient DER Decoding in libtasn1 could lead to remote DoS
  * Add gnutls-CVE-2024-12243.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- Fix heap buffer overread when handling the CT SCT extension during X.509
  certificate parsing [bsc#1246233, CVE-2025-32989]
  * Add patch gnutls-CVE-2025-32989.patch
- Fix double-free due to incorrect ownership handling in the export logic of
  SAN entries containing an otherName [bsc#1246232, CVE-2025-32988]
  * Add patch gnutls-CVE-2025-32988.patch
- Fix 1-byte heap buffer overflow when parsing templates with certtool
  [bsc#1246267, CVE-2025-32990]
  * Add patch gnutls-CVE-2025-32990.patch
- Fix NULL pointer dereference when 2nd Client Hello omits PSK
  [bsc#1246299, CVE-2025-6395]
  * Add patch gnutls-CVE-2025-6395.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1763985600">- Security fix bsc#1254132 CVE-2025-9820
  * Fix buffer overflow in gnutls_pkcs11_token_init
  * Added gnutls-CVE-2025-9820.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1770724800">- Security fix:
  * CVE-2025-14831: DoS via excessive resource consumption during
    certificate verification (bsc#1257960)
  * Add gnutls-CVE-2025-14831.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1771934400">- Add the functionality to allow to specify the hash algorithm for
  the PSK. This fixes a bug in the current implementation where the
  binder is always calculated with SHA256.
  * (bsc#1258083, jsc#PED-15752, jsc#PED-15753)
  * lib/psk: Add gnutls_psk_allocate_{client,server}_credentials2
  * tests/psk-file: Add testing for _credentials2 functions
  * lib/psk: add null check for binder algo
  * pre_shared_key: fix memleak when retrying with different binder algo
  * pre_shared_key: add null check on pskcred
  * Add patches:
  - gnutls-PSK-hash.patch
  - gnutls-PSK-hash-tests.patch
  - gnutls-PSK-hash-NULL-check.patch
  - gnutls-PSK-hash-NULL-check-pskcred.patch
  - gnutls-PSK-hash-fix-memleak.patch</changelog>
</package>
<package pkgid="fca592a90a9b67d265e8b0c55609537f9bcb813e7c8628e59b691ead9f68cf5d" name="libgnutls-devel" arch="x86_64">
  <version epoch="0" ver="3.8.3" rel="150600.4.20.1"/>
  <changelog author="pmonreal@suse.com" date="1692705600">- Fix missing GNUTLS_NO_EXTENSIONS compatibility.
  * Upstream: gitlab.com/gnutls/gnutls/commit/abfa8634
  * Add gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to 3.8.2: [bsc#1217277, CVE-2023-5981]
  * libgnutls: Fix timing side-channel inside RSA-PSK key exchange.
    [GNUTLS-SA-2023-10-23, CVSS: medium] [CVE-2023-5981]
  * libgnutls: Add API functions to perform ECDH and DH key agreement
    The functionality has been there for a long time though they were
    not available as part of the public API.  This enables applications
    to implement custom protocols leveraging non-interactive key
    agreement with ECDH and DH.
  * libgnutls: Added support for AES-GCM-SIV ciphers (RFC 8452)
    The new algorithms GNUTLS_CIPHER_AES_128_SIV_GCM and
    GNUTLS_CIPHER_AES_256_SIV_GCM have been added to be used through
    the AEAD interface.  Note that, unlike
    GNUTLS_CIPHER_AES_{128,256}_SIV_GCM, the authentication tag is
    appended to the ciphertext, not prepended.
  * libgnutls: transparent KTLS support is extended to FreeBSD kernel
    The kernel TLS feature can now be enabled on FreeBSD as well as
    Linux when compiled with the --enable-ktls configure option.
  * gnutls-cli: New option --starttls-name
    Depending on deployment, application protocols such as XMPP may
    require a different origin address than the external address to be
    presented prior to STARTTLS negotiation.  The --starttls-name can
    be used to specify specify the addresses separately.
  * API and ABI modifications:
  - gnutls_pubkey_import_dh_raw: New function
  - gnutls_privkey_import_dh_raw: New function
  - gnutls_pubkey_export_dh_raw: New function
  - gnutls_privkey_export_dh_raw: New function
  - gnutls_x509_privkey_import_dh_raw: New function
  - gnutls_privkey_derive_secret: New function
  - GNUTLS_KEYGEN_DH: New enum member of gnutls_keygen_types_t
  - GNUTLS_CIPHER_AES_128_SIV_GCM: Added
  - GNUTLS_CIPHER_AES_256_SIV_GCM: Added
  * Rebase gnutls-FIPS-140-3-references.patch
  * Remove upstream: gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Update to 3.8.3:
  * libgnutls: Fix more timing side-channel inside RSA-PSK key
    exchange. [GNUTLS-SA-2024-01-14, CVSS: medium]
    [bsc#1218865, CVE-2024-0553]
  * libgnutls: Fix assertion failure when verifying a certificate
    chain with a cycle of cross signatures.
    [GNUTLS-SA-2024-01-09, CVSS: medium] [bsc#1218862, CVE-2024-0567]
  * libgnutls: Fix regression in handling Ed25519 keys stored in
    PKCS#11 token certtool was unable to handle Ed25519 keys
    generated on PKCS#11 with pkcs11-tool (OpenSC).
    This is a regression introduced in 3.8.2.
  * Rebase gnutls-FIPS-140-3-references.patch
  * Updated upstream gnutls.keyring</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1720785600">- FIPS: [bsc#1227671, bsc#1226731]
  * Remove not needed DSA in selfchecks in FIPS mode.
  * Add gnutls-FIPS-no_dsa_selftest.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721131200">- FIPS: bsc#1227670
  * Allow RSA signature verification with min of 2048 bit modulus.
  * Add gnutls-FIPS-rsa-min-2048.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721649600">- FIPS: bsc#1227642
  * Mark SHA1 as not allowed for signature verification in both RSA and ECDSA sigVer.
  * Add gnutls-FIPS-no-sha1-verify.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1722945600">- FIPS: bsc#1226733
  * Use full hash+sign operations, not low level primitives in PCT test.
  * Add gnutls-FIPS-full-hash_sign.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1723204800">- FIPS: bsc#1226733
  * Run pairwise consistency test only in FIPS mode
  * Backport upstream commit 5c276953c1536375fba96bc769e1cb5d3123b4a7
  * Add gnutls-pct-in-FIPS-only.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1725451200">- FIPS: bsc#1230166
  * Mark gnutls_hash_fast operations as approved in SLI.
  * Add gnutls-FIPS-gnutls_hash_fast-SLI.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725537600">- FIPS: Allow to perform the integrity check with the hmac provided
  by each library [bsc#1226724]
  * Rebase gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1726488000">- FIPS: Do not allow curve P-192 for signature or keypair verification [bsc#1227669]
  * Add gnutls-FIPS-p192-disabled.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1739534400">- Security fix [bsc#1236974, CVE-2024-12243]
  * gnutls: inefficient DER Decoding in libtasn1 could lead to remote DoS
  * Add gnutls-CVE-2024-12243.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- Fix heap buffer overread when handling the CT SCT extension during X.509
  certificate parsing [bsc#1246233, CVE-2025-32989]
  * Add patch gnutls-CVE-2025-32989.patch
- Fix double-free due to incorrect ownership handling in the export logic of
  SAN entries containing an otherName [bsc#1246232, CVE-2025-32988]
  * Add patch gnutls-CVE-2025-32988.patch
- Fix 1-byte heap buffer overflow when parsing templates with certtool
  [bsc#1246267, CVE-2025-32990]
  * Add patch gnutls-CVE-2025-32990.patch
- Fix NULL pointer dereference when 2nd Client Hello omits PSK
  [bsc#1246299, CVE-2025-6395]
  * Add patch gnutls-CVE-2025-6395.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1763985600">- Security fix bsc#1254132 CVE-2025-9820
  * Fix buffer overflow in gnutls_pkcs11_token_init
  * Added gnutls-CVE-2025-9820.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1770724800">- Security fix:
  * CVE-2025-14831: DoS via excessive resource consumption during
    certificate verification (bsc#1257960)
  * Add gnutls-CVE-2025-14831.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1771934400">- Add the functionality to allow to specify the hash algorithm for
  the PSK. This fixes a bug in the current implementation where the
  binder is always calculated with SHA256.
  * (bsc#1258083, jsc#PED-15752, jsc#PED-15753)
  * lib/psk: Add gnutls_psk_allocate_{client,server}_credentials2
  * tests/psk-file: Add testing for _credentials2 functions
  * lib/psk: add null check for binder algo
  * pre_shared_key: fix memleak when retrying with different binder algo
  * pre_shared_key: add null check on pskcred
  * Add patches:
  - gnutls-PSK-hash.patch
  - gnutls-PSK-hash-tests.patch
  - gnutls-PSK-hash-NULL-check.patch
  - gnutls-PSK-hash-NULL-check-pskcred.patch
  - gnutls-PSK-hash-fix-memleak.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1778068800">- Security fixes:
  * CVE-2026-33846: buffers: add more checks to DTLS reassembly (bsc#1263705)
  * CVE-2026-42009: lib/buffers: ensure packets have differing sequence numbers (bsc#1263708)
  * CVE-2026-33845: buffers: switch from end_offset over to frag_length (bsc#1263704)
  * CVE-2026-42010: lib/auth/rsa_psk: fix binary PSK identity lookup (bsc#1263709)
  * CVE-2026-3833: x509/name-constraints: compare domain names case-insensitive (bsc#1263707)
  * CVE-2026-42011: x509/name_constraints: fix intersecting empty constraints (bsc#1263710)
  * CVE-2026-42012: x509/hostname-verify: make URI/SRV SAN preclude CN fallback (bsc#1263711)
  * CVE-2026-42013: x509: prevent fallback on oversized SAN (bsc#1263712)
  * CVE-2026-42014: pkcs11_write: fix UAF and leak in gnutls_pkcs11_token_set_pin (bsc#1263713)
  * CVE-2026-42015: x509/pkcs12_bag: fix off-by-one in bag element bounds check (bsc#1263714)
  * CVE-2026-5260: lib/pkcs11_privkey: guard against overreading on short ciphertexts (bsc#1263715)
  * CVE-2026-5419: gnutls_cipher_decrypt3: make PKCS#7 unpadding branch free (bsc#1263716)
  * Add patches:
    gnutls-CVE-2026-33846.patch gnutls-CVE-2026-42009.patch
    gnutls-CVE-2026-33845.patch gnutls-CVE-2026-42010.patch
    gnutls-CVE-2026-3833.patch  gnutls-CVE-2026-42011.patch
    gnutls-CVE-2026-42012.patch gnutls-CVE-2026-42013.patch
    gnutls-CVE-2026-42014.patch gnutls-CVE-2026-5260.patch
    gnutls-CVE-2026-42015.patch gnutls-CVE-2026-5419.patch</changelog>
</package>
<package pkgid="eb8342b9d8c1232ef32d1503f49b3bc5a7937484630f131befbc69e23bdf7a77" name="libgnutls-devel" arch="x86_64">
  <version epoch="0" ver="3.8.3" rel="150600.4.9.1"/>
  <changelog author="pmonreal@suse.com" date="1684929600">- FIPS: Skip the fixed HMAC verification for nettle, hogweed and
  gmp libraries. These calculated HMACs change for every build of
  each of these packages, we only have to verify that for gnutls.
  * Add gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch [bsc#1211476]</changelog>
  <changelog author="pmonreal@suse.com" date="1685361600">- FIPS: Fix baselibs.conf to mention libgnutls30-hmac [bsc#1211476]
  Extend also the checks in gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1691409600">- Update to version 3.8.1:
  * libgnutls: ClientHello extensions are randomized by default
    To make fingerprinting harder, TLS extensions in ClientHello
    messages are shuffled. As this behavior may cause compatibility
    issue with legacy applications that do not accept the last
    extension without payload, the behavior can be reverted with the
    %NO_SHUFFLE_EXTENSIONS priority keyword.
  * libgnutls: Add support for RFC 9258 external PSK importer.
    This enables to deploy the same PSK across multiple TLS versions
    (TLS 1.2 and TLS 1.3) in a secure manner. To use, the application
    needs to set up a callback that formats the PSK identity using
    gnutls_psk_format_imported_identity().
  * libgnutls: %GNUTLS_NO_EXTENSIONS has been renamed to
    %GNUTLS_NO_DEFAULT_EXTENSIONS.
  * libgnutls: Add additional PBKDF limit checks in FIPS mode as
    defined in SP 800-132. Minimum salt length is 128 bits and
    minimum iterations bound is 1000 for PBKDF in FIPS mode.
  * libgnutls: Add a mechanism to control whether to enforce extended
    master secret (RFC 7627). FIPS 140-3 mandates the use of TLS
    session hash (extended master secret, EMS) in TLS 1.2. To enforce
    this, a new priority keyword %FORCE_SESSION_HASH is added and if
    it is set and EMS is not set, the peer aborts the connection. This
    behavior is the default in FIPS mode, though it can be overridden
    through the configuration file with the "tls-session-hash" option.
    In either case non-EMS PRF is reported as a non-approved operation
    through the FIPS service indicator.
  * New option --attime to specify current time.
    To make testing with different timestamp to the system easier, the
    tools doing certificate verification now provide a new option
  - -attime, which takes an arbitrary time.
  * API and ABI modifications:
    gnutls_psk_client_credentials_function3: New typedef
    gnutls_psk_server_credentials_function3: New typedef
    gnutls_psk_set_server_credentials_function3: New function
    gnutls_psk_set_client_credentials_function3: New function
    gnutls_psk_format_imported_identity: New function
    GNUTLS_PSK_KEY_EXT: New enum member of gnutls_psk_key_flags
  * Rebase patches:
  - gnutls-FIPS-140-3-references.patch
  - gnutls-FIPS-jitterentropy.patch
  * Remove patches merged/fixed upstream:
  - gnutls-FIPS-PCT-DH.patch
  - gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1692619200">- tests: Fix the SRP test that fails with SIGPIPE signal return due
  to a socket being closed before using it.
  * Add gnutls-srp-test-SIGPIPE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1692705600">- Fix missing GNUTLS_NO_EXTENSIONS compatibility.
  * Upstream: gitlab.com/gnutls/gnutls/commit/abfa8634
  * Add gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to 3.8.2: [bsc#1217277, CVE-2023-5981]
  * libgnutls: Fix timing side-channel inside RSA-PSK key exchange.
    [GNUTLS-SA-2023-10-23, CVSS: medium] [CVE-2023-5981]
  * libgnutls: Add API functions to perform ECDH and DH key agreement
    The functionality has been there for a long time though they were
    not available as part of the public API.  This enables applications
    to implement custom protocols leveraging non-interactive key
    agreement with ECDH and DH.
  * libgnutls: Added support for AES-GCM-SIV ciphers (RFC 8452)
    The new algorithms GNUTLS_CIPHER_AES_128_SIV_GCM and
    GNUTLS_CIPHER_AES_256_SIV_GCM have been added to be used through
    the AEAD interface.  Note that, unlike
    GNUTLS_CIPHER_AES_{128,256}_SIV_GCM, the authentication tag is
    appended to the ciphertext, not prepended.
  * libgnutls: transparent KTLS support is extended to FreeBSD kernel
    The kernel TLS feature can now be enabled on FreeBSD as well as
    Linux when compiled with the --enable-ktls configure option.
  * gnutls-cli: New option --starttls-name
    Depending on deployment, application protocols such as XMPP may
    require a different origin address than the external address to be
    presented prior to STARTTLS negotiation.  The --starttls-name can
    be used to specify specify the addresses separately.
  * API and ABI modifications:
  - gnutls_pubkey_import_dh_raw: New function
  - gnutls_privkey_import_dh_raw: New function
  - gnutls_pubkey_export_dh_raw: New function
  - gnutls_privkey_export_dh_raw: New function
  - gnutls_x509_privkey_import_dh_raw: New function
  - gnutls_privkey_derive_secret: New function
  - GNUTLS_KEYGEN_DH: New enum member of gnutls_keygen_types_t
  - GNUTLS_CIPHER_AES_128_SIV_GCM: Added
  - GNUTLS_CIPHER_AES_256_SIV_GCM: Added
  * Rebase gnutls-FIPS-140-3-references.patch
  * Remove upstream: gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Update to 3.8.3:
  * libgnutls: Fix more timing side-channel inside RSA-PSK key
    exchange. [GNUTLS-SA-2024-01-14, CVSS: medium]
    [bsc#1218865, CVE-2024-0553]
  * libgnutls: Fix assertion failure when verifying a certificate
    chain with a cycle of cross signatures.
    [GNUTLS-SA-2024-01-09, CVSS: medium] [bsc#1218862, CVE-2024-0567]
  * libgnutls: Fix regression in handling Ed25519 keys stored in
    PKCS#11 token certtool was unable to handle Ed25519 keys
    generated on PKCS#11 with pkcs11-tool (OpenSC).
    This is a regression introduced in 3.8.2.
  * Rebase gnutls-FIPS-140-3-references.patch
  * Updated upstream gnutls.keyring</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1720785600">- FIPS: [bsc#1227671, bsc#1226731]
  * Remove not needed DSA in selfchecks in FIPS mode.
  * Add gnutls-FIPS-no_dsa_selftest.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721131200">- FIPS: bsc#1227670
  * Allow RSA signature verification with min of 2048 bit modulus.
  * Add gnutls-FIPS-rsa-min-2048.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721649600">- FIPS: bsc#1227642
  * Mark SHA1 as not allowed for signature verification in both RSA and ECDSA sigVer.
  * Add gnutls-FIPS-no-sha1-verify.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1722945600">- FIPS: bsc#1226733
  * Use full hash+sign operations, not low level primitives in PCT test.
  * Add gnutls-FIPS-full-hash_sign.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1723204800">- FIPS: bsc#1226733
  * Run pairwise consistency test only in FIPS mode
  * Backport upstream commit 5c276953c1536375fba96bc769e1cb5d3123b4a7
  * Add gnutls-pct-in-FIPS-only.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1725451200">- FIPS: bsc#1230166
  * Mark gnutls_hash_fast operations as approved in SLI.
  * Add gnutls-FIPS-gnutls_hash_fast-SLI.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725537600">- FIPS: Allow to perform the integrity check with the hmac provided
  by each library [bsc#1226724]
  * Rebase gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1726488000">- FIPS: Do not allow curve P-192 for signature or keypair verification [bsc#1227669]
  * Add gnutls-FIPS-p192-disabled.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1739534400">- Security fix [bsc#1236974, CVE-2024-12243]
  * gnutls: inefficient DER Decoding in libtasn1 could lead to remote DoS
  * Add gnutls-CVE-2024-12243.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- Fix heap buffer overread when handling the CT SCT extension during X.509
  certificate parsing [bsc#1246233, CVE-2025-32989]
  * Add patch gnutls-CVE-2025-32989.patch
- Fix double-free due to incorrect ownership handling in the export logic of
  SAN entries containing an otherName [bsc#1246232, CVE-2025-32988]
  * Add patch gnutls-CVE-2025-32988.patch
- Fix 1-byte heap buffer overflow when parsing templates with certtool
  [bsc#1246267, CVE-2025-32990]
  * Add patch gnutls-CVE-2025-32990.patch
- Fix NULL pointer dereference when 2nd Client Hello omits PSK
  [bsc#1246299, CVE-2025-6395]
  * Add patch gnutls-CVE-2025-6395.patch</changelog>
</package>
<package pkgid="312ee4b7dd3cabfc10d03a94e61cb95d2f818a2334ee7bd50e1f7d13a9b2f121" name="libgnutls30" arch="x86_64">
  <version epoch="0" ver="3.8.3" rel="150600.4.12.1"/>
  <changelog author="pmonreal@suse.com" date="1685361600">- FIPS: Fix baselibs.conf to mention libgnutls30-hmac [bsc#1211476]
  Extend also the checks in gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1691409600">- Update to version 3.8.1:
  * libgnutls: ClientHello extensions are randomized by default
    To make fingerprinting harder, TLS extensions in ClientHello
    messages are shuffled. As this behavior may cause compatibility
    issue with legacy applications that do not accept the last
    extension without payload, the behavior can be reverted with the
    %NO_SHUFFLE_EXTENSIONS priority keyword.
  * libgnutls: Add support for RFC 9258 external PSK importer.
    This enables to deploy the same PSK across multiple TLS versions
    (TLS 1.2 and TLS 1.3) in a secure manner. To use, the application
    needs to set up a callback that formats the PSK identity using
    gnutls_psk_format_imported_identity().
  * libgnutls: %GNUTLS_NO_EXTENSIONS has been renamed to
    %GNUTLS_NO_DEFAULT_EXTENSIONS.
  * libgnutls: Add additional PBKDF limit checks in FIPS mode as
    defined in SP 800-132. Minimum salt length is 128 bits and
    minimum iterations bound is 1000 for PBKDF in FIPS mode.
  * libgnutls: Add a mechanism to control whether to enforce extended
    master secret (RFC 7627). FIPS 140-3 mandates the use of TLS
    session hash (extended master secret, EMS) in TLS 1.2. To enforce
    this, a new priority keyword %FORCE_SESSION_HASH is added and if
    it is set and EMS is not set, the peer aborts the connection. This
    behavior is the default in FIPS mode, though it can be overridden
    through the configuration file with the "tls-session-hash" option.
    In either case non-EMS PRF is reported as a non-approved operation
    through the FIPS service indicator.
  * New option --attime to specify current time.
    To make testing with different timestamp to the system easier, the
    tools doing certificate verification now provide a new option
  - -attime, which takes an arbitrary time.
  * API and ABI modifications:
    gnutls_psk_client_credentials_function3: New typedef
    gnutls_psk_server_credentials_function3: New typedef
    gnutls_psk_set_server_credentials_function3: New function
    gnutls_psk_set_client_credentials_function3: New function
    gnutls_psk_format_imported_identity: New function
    GNUTLS_PSK_KEY_EXT: New enum member of gnutls_psk_key_flags
  * Rebase patches:
  - gnutls-FIPS-140-3-references.patch
  - gnutls-FIPS-jitterentropy.patch
  * Remove patches merged/fixed upstream:
  - gnutls-FIPS-PCT-DH.patch
  - gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1692619200">- tests: Fix the SRP test that fails with SIGPIPE signal return due
  to a socket being closed before using it.
  * Add gnutls-srp-test-SIGPIPE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1692705600">- Fix missing GNUTLS_NO_EXTENSIONS compatibility.
  * Upstream: gitlab.com/gnutls/gnutls/commit/abfa8634
  * Add gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to 3.8.2: [bsc#1217277, CVE-2023-5981]
  * libgnutls: Fix timing side-channel inside RSA-PSK key exchange.
    [GNUTLS-SA-2023-10-23, CVSS: medium] [CVE-2023-5981]
  * libgnutls: Add API functions to perform ECDH and DH key agreement
    The functionality has been there for a long time though they were
    not available as part of the public API.  This enables applications
    to implement custom protocols leveraging non-interactive key
    agreement with ECDH and DH.
  * libgnutls: Added support for AES-GCM-SIV ciphers (RFC 8452)
    The new algorithms GNUTLS_CIPHER_AES_128_SIV_GCM and
    GNUTLS_CIPHER_AES_256_SIV_GCM have been added to be used through
    the AEAD interface.  Note that, unlike
    GNUTLS_CIPHER_AES_{128,256}_SIV_GCM, the authentication tag is
    appended to the ciphertext, not prepended.
  * libgnutls: transparent KTLS support is extended to FreeBSD kernel
    The kernel TLS feature can now be enabled on FreeBSD as well as
    Linux when compiled with the --enable-ktls configure option.
  * gnutls-cli: New option --starttls-name
    Depending on deployment, application protocols such as XMPP may
    require a different origin address than the external address to be
    presented prior to STARTTLS negotiation.  The --starttls-name can
    be used to specify specify the addresses separately.
  * API and ABI modifications:
  - gnutls_pubkey_import_dh_raw: New function
  - gnutls_privkey_import_dh_raw: New function
  - gnutls_pubkey_export_dh_raw: New function
  - gnutls_privkey_export_dh_raw: New function
  - gnutls_x509_privkey_import_dh_raw: New function
  - gnutls_privkey_derive_secret: New function
  - GNUTLS_KEYGEN_DH: New enum member of gnutls_keygen_types_t
  - GNUTLS_CIPHER_AES_128_SIV_GCM: Added
  - GNUTLS_CIPHER_AES_256_SIV_GCM: Added
  * Rebase gnutls-FIPS-140-3-references.patch
  * Remove upstream: gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Update to 3.8.3:
  * libgnutls: Fix more timing side-channel inside RSA-PSK key
    exchange. [GNUTLS-SA-2024-01-14, CVSS: medium]
    [bsc#1218865, CVE-2024-0553]
  * libgnutls: Fix assertion failure when verifying a certificate
    chain with a cycle of cross signatures.
    [GNUTLS-SA-2024-01-09, CVSS: medium] [bsc#1218862, CVE-2024-0567]
  * libgnutls: Fix regression in handling Ed25519 keys stored in
    PKCS#11 token certtool was unable to handle Ed25519 keys
    generated on PKCS#11 with pkcs11-tool (OpenSC).
    This is a regression introduced in 3.8.2.
  * Rebase gnutls-FIPS-140-3-references.patch
  * Updated upstream gnutls.keyring</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1720785600">- FIPS: [bsc#1227671, bsc#1226731]
  * Remove not needed DSA in selfchecks in FIPS mode.
  * Add gnutls-FIPS-no_dsa_selftest.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721131200">- FIPS: bsc#1227670
  * Allow RSA signature verification with min of 2048 bit modulus.
  * Add gnutls-FIPS-rsa-min-2048.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721649600">- FIPS: bsc#1227642
  * Mark SHA1 as not allowed for signature verification in both RSA and ECDSA sigVer.
  * Add gnutls-FIPS-no-sha1-verify.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1722945600">- FIPS: bsc#1226733
  * Use full hash+sign operations, not low level primitives in PCT test.
  * Add gnutls-FIPS-full-hash_sign.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1723204800">- FIPS: bsc#1226733
  * Run pairwise consistency test only in FIPS mode
  * Backport upstream commit 5c276953c1536375fba96bc769e1cb5d3123b4a7
  * Add gnutls-pct-in-FIPS-only.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1725451200">- FIPS: bsc#1230166
  * Mark gnutls_hash_fast operations as approved in SLI.
  * Add gnutls-FIPS-gnutls_hash_fast-SLI.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725537600">- FIPS: Allow to perform the integrity check with the hmac provided
  by each library [bsc#1226724]
  * Rebase gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1726488000">- FIPS: Do not allow curve P-192 for signature or keypair verification [bsc#1227669]
  * Add gnutls-FIPS-p192-disabled.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1739534400">- Security fix [bsc#1236974, CVE-2024-12243]
  * gnutls: inefficient DER Decoding in libtasn1 could lead to remote DoS
  * Add gnutls-CVE-2024-12243.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- Fix heap buffer overread when handling the CT SCT extension during X.509
  certificate parsing [bsc#1246233, CVE-2025-32989]
  * Add patch gnutls-CVE-2025-32989.patch
- Fix double-free due to incorrect ownership handling in the export logic of
  SAN entries containing an otherName [bsc#1246232, CVE-2025-32988]
  * Add patch gnutls-CVE-2025-32988.patch
- Fix 1-byte heap buffer overflow when parsing templates with certtool
  [bsc#1246267, CVE-2025-32990]
  * Add patch gnutls-CVE-2025-32990.patch
- Fix NULL pointer dereference when 2nd Client Hello omits PSK
  [bsc#1246299, CVE-2025-6395]
  * Add patch gnutls-CVE-2025-6395.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1763985600">- Security fix bsc#1254132 CVE-2025-9820
  * Fix buffer overflow in gnutls_pkcs11_token_init
  * Added gnutls-CVE-2025-9820.patch</changelog>
</package>
<package pkgid="de719ca00d0b20b5aeea3ba5fae323ced05af20aed089f27f8bd24de398ba422" name="libgnutls30" arch="x86_64">
  <version epoch="0" ver="3.8.3" rel="150600.4.17.1"/>
  <changelog author="pmonreal@suse.com" date="1692619200">- tests: Fix the SRP test that fails with SIGPIPE signal return due
  to a socket being closed before using it.
  * Add gnutls-srp-test-SIGPIPE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1692705600">- Fix missing GNUTLS_NO_EXTENSIONS compatibility.
  * Upstream: gitlab.com/gnutls/gnutls/commit/abfa8634
  * Add gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to 3.8.2: [bsc#1217277, CVE-2023-5981]
  * libgnutls: Fix timing side-channel inside RSA-PSK key exchange.
    [GNUTLS-SA-2023-10-23, CVSS: medium] [CVE-2023-5981]
  * libgnutls: Add API functions to perform ECDH and DH key agreement
    The functionality has been there for a long time though they were
    not available as part of the public API.  This enables applications
    to implement custom protocols leveraging non-interactive key
    agreement with ECDH and DH.
  * libgnutls: Added support for AES-GCM-SIV ciphers (RFC 8452)
    The new algorithms GNUTLS_CIPHER_AES_128_SIV_GCM and
    GNUTLS_CIPHER_AES_256_SIV_GCM have been added to be used through
    the AEAD interface.  Note that, unlike
    GNUTLS_CIPHER_AES_{128,256}_SIV_GCM, the authentication tag is
    appended to the ciphertext, not prepended.
  * libgnutls: transparent KTLS support is extended to FreeBSD kernel
    The kernel TLS feature can now be enabled on FreeBSD as well as
    Linux when compiled with the --enable-ktls configure option.
  * gnutls-cli: New option --starttls-name
    Depending on deployment, application protocols such as XMPP may
    require a different origin address than the external address to be
    presented prior to STARTTLS negotiation.  The --starttls-name can
    be used to specify specify the addresses separately.
  * API and ABI modifications:
  - gnutls_pubkey_import_dh_raw: New function
  - gnutls_privkey_import_dh_raw: New function
  - gnutls_pubkey_export_dh_raw: New function
  - gnutls_privkey_export_dh_raw: New function
  - gnutls_x509_privkey_import_dh_raw: New function
  - gnutls_privkey_derive_secret: New function
  - GNUTLS_KEYGEN_DH: New enum member of gnutls_keygen_types_t
  - GNUTLS_CIPHER_AES_128_SIV_GCM: Added
  - GNUTLS_CIPHER_AES_256_SIV_GCM: Added
  * Rebase gnutls-FIPS-140-3-references.patch
  * Remove upstream: gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Update to 3.8.3:
  * libgnutls: Fix more timing side-channel inside RSA-PSK key
    exchange. [GNUTLS-SA-2024-01-14, CVSS: medium]
    [bsc#1218865, CVE-2024-0553]
  * libgnutls: Fix assertion failure when verifying a certificate
    chain with a cycle of cross signatures.
    [GNUTLS-SA-2024-01-09, CVSS: medium] [bsc#1218862, CVE-2024-0567]
  * libgnutls: Fix regression in handling Ed25519 keys stored in
    PKCS#11 token certtool was unable to handle Ed25519 keys
    generated on PKCS#11 with pkcs11-tool (OpenSC).
    This is a regression introduced in 3.8.2.
  * Rebase gnutls-FIPS-140-3-references.patch
  * Updated upstream gnutls.keyring</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1720785600">- FIPS: [bsc#1227671, bsc#1226731]
  * Remove not needed DSA in selfchecks in FIPS mode.
  * Add gnutls-FIPS-no_dsa_selftest.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721131200">- FIPS: bsc#1227670
  * Allow RSA signature verification with min of 2048 bit modulus.
  * Add gnutls-FIPS-rsa-min-2048.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721649600">- FIPS: bsc#1227642
  * Mark SHA1 as not allowed for signature verification in both RSA and ECDSA sigVer.
  * Add gnutls-FIPS-no-sha1-verify.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1722945600">- FIPS: bsc#1226733
  * Use full hash+sign operations, not low level primitives in PCT test.
  * Add gnutls-FIPS-full-hash_sign.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1723204800">- FIPS: bsc#1226733
  * Run pairwise consistency test only in FIPS mode
  * Backport upstream commit 5c276953c1536375fba96bc769e1cb5d3123b4a7
  * Add gnutls-pct-in-FIPS-only.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1725451200">- FIPS: bsc#1230166
  * Mark gnutls_hash_fast operations as approved in SLI.
  * Add gnutls-FIPS-gnutls_hash_fast-SLI.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725537600">- FIPS: Allow to perform the integrity check with the hmac provided
  by each library [bsc#1226724]
  * Rebase gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1726488000">- FIPS: Do not allow curve P-192 for signature or keypair verification [bsc#1227669]
  * Add gnutls-FIPS-p192-disabled.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1739534400">- Security fix [bsc#1236974, CVE-2024-12243]
  * gnutls: inefficient DER Decoding in libtasn1 could lead to remote DoS
  * Add gnutls-CVE-2024-12243.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- Fix heap buffer overread when handling the CT SCT extension during X.509
  certificate parsing [bsc#1246233, CVE-2025-32989]
  * Add patch gnutls-CVE-2025-32989.patch
- Fix double-free due to incorrect ownership handling in the export logic of
  SAN entries containing an otherName [bsc#1246232, CVE-2025-32988]
  * Add patch gnutls-CVE-2025-32988.patch
- Fix 1-byte heap buffer overflow when parsing templates with certtool
  [bsc#1246267, CVE-2025-32990]
  * Add patch gnutls-CVE-2025-32990.patch
- Fix NULL pointer dereference when 2nd Client Hello omits PSK
  [bsc#1246299, CVE-2025-6395]
  * Add patch gnutls-CVE-2025-6395.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1763985600">- Security fix bsc#1254132 CVE-2025-9820
  * Fix buffer overflow in gnutls_pkcs11_token_init
  * Added gnutls-CVE-2025-9820.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1770724800">- Security fix:
  * CVE-2025-14831: DoS via excessive resource consumption during
    certificate verification (bsc#1257960)
  * Add gnutls-CVE-2025-14831.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1771934400">- Add the functionality to allow to specify the hash algorithm for
  the PSK. This fixes a bug in the current implementation where the
  binder is always calculated with SHA256.
  * (bsc#1258083, jsc#PED-15752, jsc#PED-15753)
  * lib/psk: Add gnutls_psk_allocate_{client,server}_credentials2
  * tests/psk-file: Add testing for _credentials2 functions
  * lib/psk: add null check for binder algo
  * pre_shared_key: fix memleak when retrying with different binder algo
  * pre_shared_key: add null check on pskcred
  * Add patches:
  - gnutls-PSK-hash.patch
  - gnutls-PSK-hash-tests.patch
  - gnutls-PSK-hash-NULL-check.patch
  - gnutls-PSK-hash-NULL-check-pskcred.patch
  - gnutls-PSK-hash-fix-memleak.patch</changelog>
</package>
<package pkgid="9e21dd47243b64d9e8377158b99e75ed013f4b1b63b0cfb7a7e8a472ff62b776" name="libgnutls30" arch="x86_64">
  <version epoch="0" ver="3.8.3" rel="150600.4.20.1"/>
  <changelog author="pmonreal@suse.com" date="1692705600">- Fix missing GNUTLS_NO_EXTENSIONS compatibility.
  * Upstream: gitlab.com/gnutls/gnutls/commit/abfa8634
  * Add gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to 3.8.2: [bsc#1217277, CVE-2023-5981]
  * libgnutls: Fix timing side-channel inside RSA-PSK key exchange.
    [GNUTLS-SA-2023-10-23, CVSS: medium] [CVE-2023-5981]
  * libgnutls: Add API functions to perform ECDH and DH key agreement
    The functionality has been there for a long time though they were
    not available as part of the public API.  This enables applications
    to implement custom protocols leveraging non-interactive key
    agreement with ECDH and DH.
  * libgnutls: Added support for AES-GCM-SIV ciphers (RFC 8452)
    The new algorithms GNUTLS_CIPHER_AES_128_SIV_GCM and
    GNUTLS_CIPHER_AES_256_SIV_GCM have been added to be used through
    the AEAD interface.  Note that, unlike
    GNUTLS_CIPHER_AES_{128,256}_SIV_GCM, the authentication tag is
    appended to the ciphertext, not prepended.
  * libgnutls: transparent KTLS support is extended to FreeBSD kernel
    The kernel TLS feature can now be enabled on FreeBSD as well as
    Linux when compiled with the --enable-ktls configure option.
  * gnutls-cli: New option --starttls-name
    Depending on deployment, application protocols such as XMPP may
    require a different origin address than the external address to be
    presented prior to STARTTLS negotiation.  The --starttls-name can
    be used to specify specify the addresses separately.
  * API and ABI modifications:
  - gnutls_pubkey_import_dh_raw: New function
  - gnutls_privkey_import_dh_raw: New function
  - gnutls_pubkey_export_dh_raw: New function
  - gnutls_privkey_export_dh_raw: New function
  - gnutls_x509_privkey_import_dh_raw: New function
  - gnutls_privkey_derive_secret: New function
  - GNUTLS_KEYGEN_DH: New enum member of gnutls_keygen_types_t
  - GNUTLS_CIPHER_AES_128_SIV_GCM: Added
  - GNUTLS_CIPHER_AES_256_SIV_GCM: Added
  * Rebase gnutls-FIPS-140-3-references.patch
  * Remove upstream: gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Update to 3.8.3:
  * libgnutls: Fix more timing side-channel inside RSA-PSK key
    exchange. [GNUTLS-SA-2024-01-14, CVSS: medium]
    [bsc#1218865, CVE-2024-0553]
  * libgnutls: Fix assertion failure when verifying a certificate
    chain with a cycle of cross signatures.
    [GNUTLS-SA-2024-01-09, CVSS: medium] [bsc#1218862, CVE-2024-0567]
  * libgnutls: Fix regression in handling Ed25519 keys stored in
    PKCS#11 token certtool was unable to handle Ed25519 keys
    generated on PKCS#11 with pkcs11-tool (OpenSC).
    This is a regression introduced in 3.8.2.
  * Rebase gnutls-FIPS-140-3-references.patch
  * Updated upstream gnutls.keyring</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1720785600">- FIPS: [bsc#1227671, bsc#1226731]
  * Remove not needed DSA in selfchecks in FIPS mode.
  * Add gnutls-FIPS-no_dsa_selftest.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721131200">- FIPS: bsc#1227670
  * Allow RSA signature verification with min of 2048 bit modulus.
  * Add gnutls-FIPS-rsa-min-2048.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721649600">- FIPS: bsc#1227642
  * Mark SHA1 as not allowed for signature verification in both RSA and ECDSA sigVer.
  * Add gnutls-FIPS-no-sha1-verify.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1722945600">- FIPS: bsc#1226733
  * Use full hash+sign operations, not low level primitives in PCT test.
  * Add gnutls-FIPS-full-hash_sign.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1723204800">- FIPS: bsc#1226733
  * Run pairwise consistency test only in FIPS mode
  * Backport upstream commit 5c276953c1536375fba96bc769e1cb5d3123b4a7
  * Add gnutls-pct-in-FIPS-only.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1725451200">- FIPS: bsc#1230166
  * Mark gnutls_hash_fast operations as approved in SLI.
  * Add gnutls-FIPS-gnutls_hash_fast-SLI.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725537600">- FIPS: Allow to perform the integrity check with the hmac provided
  by each library [bsc#1226724]
  * Rebase gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1726488000">- FIPS: Do not allow curve P-192 for signature or keypair verification [bsc#1227669]
  * Add gnutls-FIPS-p192-disabled.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1739534400">- Security fix [bsc#1236974, CVE-2024-12243]
  * gnutls: inefficient DER Decoding in libtasn1 could lead to remote DoS
  * Add gnutls-CVE-2024-12243.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- Fix heap buffer overread when handling the CT SCT extension during X.509
  certificate parsing [bsc#1246233, CVE-2025-32989]
  * Add patch gnutls-CVE-2025-32989.patch
- Fix double-free due to incorrect ownership handling in the export logic of
  SAN entries containing an otherName [bsc#1246232, CVE-2025-32988]
  * Add patch gnutls-CVE-2025-32988.patch
- Fix 1-byte heap buffer overflow when parsing templates with certtool
  [bsc#1246267, CVE-2025-32990]
  * Add patch gnutls-CVE-2025-32990.patch
- Fix NULL pointer dereference when 2nd Client Hello omits PSK
  [bsc#1246299, CVE-2025-6395]
  * Add patch gnutls-CVE-2025-6395.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1763985600">- Security fix bsc#1254132 CVE-2025-9820
  * Fix buffer overflow in gnutls_pkcs11_token_init
  * Added gnutls-CVE-2025-9820.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1770724800">- Security fix:
  * CVE-2025-14831: DoS via excessive resource consumption during
    certificate verification (bsc#1257960)
  * Add gnutls-CVE-2025-14831.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1771934400">- Add the functionality to allow to specify the hash algorithm for
  the PSK. This fixes a bug in the current implementation where the
  binder is always calculated with SHA256.
  * (bsc#1258083, jsc#PED-15752, jsc#PED-15753)
  * lib/psk: Add gnutls_psk_allocate_{client,server}_credentials2
  * tests/psk-file: Add testing for _credentials2 functions
  * lib/psk: add null check for binder algo
  * pre_shared_key: fix memleak when retrying with different binder algo
  * pre_shared_key: add null check on pskcred
  * Add patches:
  - gnutls-PSK-hash.patch
  - gnutls-PSK-hash-tests.patch
  - gnutls-PSK-hash-NULL-check.patch
  - gnutls-PSK-hash-NULL-check-pskcred.patch
  - gnutls-PSK-hash-fix-memleak.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1778068800">- Security fixes:
  * CVE-2026-33846: buffers: add more checks to DTLS reassembly (bsc#1263705)
  * CVE-2026-42009: lib/buffers: ensure packets have differing sequence numbers (bsc#1263708)
  * CVE-2026-33845: buffers: switch from end_offset over to frag_length (bsc#1263704)
  * CVE-2026-42010: lib/auth/rsa_psk: fix binary PSK identity lookup (bsc#1263709)
  * CVE-2026-3833: x509/name-constraints: compare domain names case-insensitive (bsc#1263707)
  * CVE-2026-42011: x509/name_constraints: fix intersecting empty constraints (bsc#1263710)
  * CVE-2026-42012: x509/hostname-verify: make URI/SRV SAN preclude CN fallback (bsc#1263711)
  * CVE-2026-42013: x509: prevent fallback on oversized SAN (bsc#1263712)
  * CVE-2026-42014: pkcs11_write: fix UAF and leak in gnutls_pkcs11_token_set_pin (bsc#1263713)
  * CVE-2026-42015: x509/pkcs12_bag: fix off-by-one in bag element bounds check (bsc#1263714)
  * CVE-2026-5260: lib/pkcs11_privkey: guard against overreading on short ciphertexts (bsc#1263715)
  * CVE-2026-5419: gnutls_cipher_decrypt3: make PKCS#7 unpadding branch free (bsc#1263716)
  * Add patches:
    gnutls-CVE-2026-33846.patch gnutls-CVE-2026-42009.patch
    gnutls-CVE-2026-33845.patch gnutls-CVE-2026-42010.patch
    gnutls-CVE-2026-3833.patch  gnutls-CVE-2026-42011.patch
    gnutls-CVE-2026-42012.patch gnutls-CVE-2026-42013.patch
    gnutls-CVE-2026-42014.patch gnutls-CVE-2026-5260.patch
    gnutls-CVE-2026-42015.patch gnutls-CVE-2026-5419.patch</changelog>
</package>
<package pkgid="106542e3059a97fcb48559e67501ef5cdfec896217c20b32ac0120c3777de53b" name="libgnutls30" arch="x86_64">
  <version epoch="0" ver="3.8.3" rel="150600.4.9.1"/>
  <changelog author="pmonreal@suse.com" date="1684929600">- FIPS: Skip the fixed HMAC verification for nettle, hogweed and
  gmp libraries. These calculated HMACs change for every build of
  each of these packages, we only have to verify that for gnutls.
  * Add gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch [bsc#1211476]</changelog>
  <changelog author="pmonreal@suse.com" date="1685361600">- FIPS: Fix baselibs.conf to mention libgnutls30-hmac [bsc#1211476]
  Extend also the checks in gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1691409600">- Update to version 3.8.1:
  * libgnutls: ClientHello extensions are randomized by default
    To make fingerprinting harder, TLS extensions in ClientHello
    messages are shuffled. As this behavior may cause compatibility
    issue with legacy applications that do not accept the last
    extension without payload, the behavior can be reverted with the
    %NO_SHUFFLE_EXTENSIONS priority keyword.
  * libgnutls: Add support for RFC 9258 external PSK importer.
    This enables to deploy the same PSK across multiple TLS versions
    (TLS 1.2 and TLS 1.3) in a secure manner. To use, the application
    needs to set up a callback that formats the PSK identity using
    gnutls_psk_format_imported_identity().
  * libgnutls: %GNUTLS_NO_EXTENSIONS has been renamed to
    %GNUTLS_NO_DEFAULT_EXTENSIONS.
  * libgnutls: Add additional PBKDF limit checks in FIPS mode as
    defined in SP 800-132. Minimum salt length is 128 bits and
    minimum iterations bound is 1000 for PBKDF in FIPS mode.
  * libgnutls: Add a mechanism to control whether to enforce extended
    master secret (RFC 7627). FIPS 140-3 mandates the use of TLS
    session hash (extended master secret, EMS) in TLS 1.2. To enforce
    this, a new priority keyword %FORCE_SESSION_HASH is added and if
    it is set and EMS is not set, the peer aborts the connection. This
    behavior is the default in FIPS mode, though it can be overridden
    through the configuration file with the "tls-session-hash" option.
    In either case non-EMS PRF is reported as a non-approved operation
    through the FIPS service indicator.
  * New option --attime to specify current time.
    To make testing with different timestamp to the system easier, the
    tools doing certificate verification now provide a new option
  - -attime, which takes an arbitrary time.
  * API and ABI modifications:
    gnutls_psk_client_credentials_function3: New typedef
    gnutls_psk_server_credentials_function3: New typedef
    gnutls_psk_set_server_credentials_function3: New function
    gnutls_psk_set_client_credentials_function3: New function
    gnutls_psk_format_imported_identity: New function
    GNUTLS_PSK_KEY_EXT: New enum member of gnutls_psk_key_flags
  * Rebase patches:
  - gnutls-FIPS-140-3-references.patch
  - gnutls-FIPS-jitterentropy.patch
  * Remove patches merged/fixed upstream:
  - gnutls-FIPS-PCT-DH.patch
  - gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1692619200">- tests: Fix the SRP test that fails with SIGPIPE signal return due
  to a socket being closed before using it.
  * Add gnutls-srp-test-SIGPIPE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1692705600">- Fix missing GNUTLS_NO_EXTENSIONS compatibility.
  * Upstream: gitlab.com/gnutls/gnutls/commit/abfa8634
  * Add gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to 3.8.2: [bsc#1217277, CVE-2023-5981]
  * libgnutls: Fix timing side-channel inside RSA-PSK key exchange.
    [GNUTLS-SA-2023-10-23, CVSS: medium] [CVE-2023-5981]
  * libgnutls: Add API functions to perform ECDH and DH key agreement
    The functionality has been there for a long time though they were
    not available as part of the public API.  This enables applications
    to implement custom protocols leveraging non-interactive key
    agreement with ECDH and DH.
  * libgnutls: Added support for AES-GCM-SIV ciphers (RFC 8452)
    The new algorithms GNUTLS_CIPHER_AES_128_SIV_GCM and
    GNUTLS_CIPHER_AES_256_SIV_GCM have been added to be used through
    the AEAD interface.  Note that, unlike
    GNUTLS_CIPHER_AES_{128,256}_SIV_GCM, the authentication tag is
    appended to the ciphertext, not prepended.
  * libgnutls: transparent KTLS support is extended to FreeBSD kernel
    The kernel TLS feature can now be enabled on FreeBSD as well as
    Linux when compiled with the --enable-ktls configure option.
  * gnutls-cli: New option --starttls-name
    Depending on deployment, application protocols such as XMPP may
    require a different origin address than the external address to be
    presented prior to STARTTLS negotiation.  The --starttls-name can
    be used to specify specify the addresses separately.
  * API and ABI modifications:
  - gnutls_pubkey_import_dh_raw: New function
  - gnutls_privkey_import_dh_raw: New function
  - gnutls_pubkey_export_dh_raw: New function
  - gnutls_privkey_export_dh_raw: New function
  - gnutls_x509_privkey_import_dh_raw: New function
  - gnutls_privkey_derive_secret: New function
  - GNUTLS_KEYGEN_DH: New enum member of gnutls_keygen_types_t
  - GNUTLS_CIPHER_AES_128_SIV_GCM: Added
  - GNUTLS_CIPHER_AES_256_SIV_GCM: Added
  * Rebase gnutls-FIPS-140-3-references.patch
  * Remove upstream: gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Update to 3.8.3:
  * libgnutls: Fix more timing side-channel inside RSA-PSK key
    exchange. [GNUTLS-SA-2024-01-14, CVSS: medium]
    [bsc#1218865, CVE-2024-0553]
  * libgnutls: Fix assertion failure when verifying a certificate
    chain with a cycle of cross signatures.
    [GNUTLS-SA-2024-01-09, CVSS: medium] [bsc#1218862, CVE-2024-0567]
  * libgnutls: Fix regression in handling Ed25519 keys stored in
    PKCS#11 token certtool was unable to handle Ed25519 keys
    generated on PKCS#11 with pkcs11-tool (OpenSC).
    This is a regression introduced in 3.8.2.
  * Rebase gnutls-FIPS-140-3-references.patch
  * Updated upstream gnutls.keyring</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1720785600">- FIPS: [bsc#1227671, bsc#1226731]
  * Remove not needed DSA in selfchecks in FIPS mode.
  * Add gnutls-FIPS-no_dsa_selftest.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721131200">- FIPS: bsc#1227670
  * Allow RSA signature verification with min of 2048 bit modulus.
  * Add gnutls-FIPS-rsa-min-2048.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721649600">- FIPS: bsc#1227642
  * Mark SHA1 as not allowed for signature verification in both RSA and ECDSA sigVer.
  * Add gnutls-FIPS-no-sha1-verify.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1722945600">- FIPS: bsc#1226733
  * Use full hash+sign operations, not low level primitives in PCT test.
  * Add gnutls-FIPS-full-hash_sign.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1723204800">- FIPS: bsc#1226733
  * Run pairwise consistency test only in FIPS mode
  * Backport upstream commit 5c276953c1536375fba96bc769e1cb5d3123b4a7
  * Add gnutls-pct-in-FIPS-only.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1725451200">- FIPS: bsc#1230166
  * Mark gnutls_hash_fast operations as approved in SLI.
  * Add gnutls-FIPS-gnutls_hash_fast-SLI.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725537600">- FIPS: Allow to perform the integrity check with the hmac provided
  by each library [bsc#1226724]
  * Rebase gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1726488000">- FIPS: Do not allow curve P-192 for signature or keypair verification [bsc#1227669]
  * Add gnutls-FIPS-p192-disabled.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1739534400">- Security fix [bsc#1236974, CVE-2024-12243]
  * gnutls: inefficient DER Decoding in libtasn1 could lead to remote DoS
  * Add gnutls-CVE-2024-12243.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- Fix heap buffer overread when handling the CT SCT extension during X.509
  certificate parsing [bsc#1246233, CVE-2025-32989]
  * Add patch gnutls-CVE-2025-32989.patch
- Fix double-free due to incorrect ownership handling in the export logic of
  SAN entries containing an otherName [bsc#1246232, CVE-2025-32988]
  * Add patch gnutls-CVE-2025-32988.patch
- Fix 1-byte heap buffer overflow when parsing templates with certtool
  [bsc#1246267, CVE-2025-32990]
  * Add patch gnutls-CVE-2025-32990.patch
- Fix NULL pointer dereference when 2nd Client Hello omits PSK
  [bsc#1246299, CVE-2025-6395]
  * Add patch gnutls-CVE-2025-6395.patch</changelog>
</package>
<package pkgid="a399ec41da9e0ca1e79df1766eb521276d3414a1dee7d492a5ef6c7c3108dae5" name="libgnutls30-32bit" arch="x86_64">
  <version epoch="0" ver="3.8.3" rel="150600.4.12.1"/>
  <changelog author="pmonreal@suse.com" date="1685361600">- FIPS: Fix baselibs.conf to mention libgnutls30-hmac [bsc#1211476]
  Extend also the checks in gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1691409600">- Update to version 3.8.1:
  * libgnutls: ClientHello extensions are randomized by default
    To make fingerprinting harder, TLS extensions in ClientHello
    messages are shuffled. As this behavior may cause compatibility
    issue with legacy applications that do not accept the last
    extension without payload, the behavior can be reverted with the
    %NO_SHUFFLE_EXTENSIONS priority keyword.
  * libgnutls: Add support for RFC 9258 external PSK importer.
    This enables to deploy the same PSK across multiple TLS versions
    (TLS 1.2 and TLS 1.3) in a secure manner. To use, the application
    needs to set up a callback that formats the PSK identity using
    gnutls_psk_format_imported_identity().
  * libgnutls: %GNUTLS_NO_EXTENSIONS has been renamed to
    %GNUTLS_NO_DEFAULT_EXTENSIONS.
  * libgnutls: Add additional PBKDF limit checks in FIPS mode as
    defined in SP 800-132. Minimum salt length is 128 bits and
    minimum iterations bound is 1000 for PBKDF in FIPS mode.
  * libgnutls: Add a mechanism to control whether to enforce extended
    master secret (RFC 7627). FIPS 140-3 mandates the use of TLS
    session hash (extended master secret, EMS) in TLS 1.2. To enforce
    this, a new priority keyword %FORCE_SESSION_HASH is added and if
    it is set and EMS is not set, the peer aborts the connection. This
    behavior is the default in FIPS mode, though it can be overridden
    through the configuration file with the "tls-session-hash" option.
    In either case non-EMS PRF is reported as a non-approved operation
    through the FIPS service indicator.
  * New option --attime to specify current time.
    To make testing with different timestamp to the system easier, the
    tools doing certificate verification now provide a new option
  - -attime, which takes an arbitrary time.
  * API and ABI modifications:
    gnutls_psk_client_credentials_function3: New typedef
    gnutls_psk_server_credentials_function3: New typedef
    gnutls_psk_set_server_credentials_function3: New function
    gnutls_psk_set_client_credentials_function3: New function
    gnutls_psk_format_imported_identity: New function
    GNUTLS_PSK_KEY_EXT: New enum member of gnutls_psk_key_flags
  * Rebase patches:
  - gnutls-FIPS-140-3-references.patch
  - gnutls-FIPS-jitterentropy.patch
  * Remove patches merged/fixed upstream:
  - gnutls-FIPS-PCT-DH.patch
  - gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1692619200">- tests: Fix the SRP test that fails with SIGPIPE signal return due
  to a socket being closed before using it.
  * Add gnutls-srp-test-SIGPIPE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1692705600">- Fix missing GNUTLS_NO_EXTENSIONS compatibility.
  * Upstream: gitlab.com/gnutls/gnutls/commit/abfa8634
  * Add gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to 3.8.2: [bsc#1217277, CVE-2023-5981]
  * libgnutls: Fix timing side-channel inside RSA-PSK key exchange.
    [GNUTLS-SA-2023-10-23, CVSS: medium] [CVE-2023-5981]
  * libgnutls: Add API functions to perform ECDH and DH key agreement
    The functionality has been there for a long time though they were
    not available as part of the public API.  This enables applications
    to implement custom protocols leveraging non-interactive key
    agreement with ECDH and DH.
  * libgnutls: Added support for AES-GCM-SIV ciphers (RFC 8452)
    The new algorithms GNUTLS_CIPHER_AES_128_SIV_GCM and
    GNUTLS_CIPHER_AES_256_SIV_GCM have been added to be used through
    the AEAD interface.  Note that, unlike
    GNUTLS_CIPHER_AES_{128,256}_SIV_GCM, the authentication tag is
    appended to the ciphertext, not prepended.
  * libgnutls: transparent KTLS support is extended to FreeBSD kernel
    The kernel TLS feature can now be enabled on FreeBSD as well as
    Linux when compiled with the --enable-ktls configure option.
  * gnutls-cli: New option --starttls-name
    Depending on deployment, application protocols such as XMPP may
    require a different origin address than the external address to be
    presented prior to STARTTLS negotiation.  The --starttls-name can
    be used to specify specify the addresses separately.
  * API and ABI modifications:
  - gnutls_pubkey_import_dh_raw: New function
  - gnutls_privkey_import_dh_raw: New function
  - gnutls_pubkey_export_dh_raw: New function
  - gnutls_privkey_export_dh_raw: New function
  - gnutls_x509_privkey_import_dh_raw: New function
  - gnutls_privkey_derive_secret: New function
  - GNUTLS_KEYGEN_DH: New enum member of gnutls_keygen_types_t
  - GNUTLS_CIPHER_AES_128_SIV_GCM: Added
  - GNUTLS_CIPHER_AES_256_SIV_GCM: Added
  * Rebase gnutls-FIPS-140-3-references.patch
  * Remove upstream: gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Update to 3.8.3:
  * libgnutls: Fix more timing side-channel inside RSA-PSK key
    exchange. [GNUTLS-SA-2024-01-14, CVSS: medium]
    [bsc#1218865, CVE-2024-0553]
  * libgnutls: Fix assertion failure when verifying a certificate
    chain with a cycle of cross signatures.
    [GNUTLS-SA-2024-01-09, CVSS: medium] [bsc#1218862, CVE-2024-0567]
  * libgnutls: Fix regression in handling Ed25519 keys stored in
    PKCS#11 token certtool was unable to handle Ed25519 keys
    generated on PKCS#11 with pkcs11-tool (OpenSC).
    This is a regression introduced in 3.8.2.
  * Rebase gnutls-FIPS-140-3-references.patch
  * Updated upstream gnutls.keyring</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1720785600">- FIPS: [bsc#1227671, bsc#1226731]
  * Remove not needed DSA in selfchecks in FIPS mode.
  * Add gnutls-FIPS-no_dsa_selftest.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721131200">- FIPS: bsc#1227670
  * Allow RSA signature verification with min of 2048 bit modulus.
  * Add gnutls-FIPS-rsa-min-2048.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721649600">- FIPS: bsc#1227642
  * Mark SHA1 as not allowed for signature verification in both RSA and ECDSA sigVer.
  * Add gnutls-FIPS-no-sha1-verify.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1722945600">- FIPS: bsc#1226733
  * Use full hash+sign operations, not low level primitives in PCT test.
  * Add gnutls-FIPS-full-hash_sign.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1723204800">- FIPS: bsc#1226733
  * Run pairwise consistency test only in FIPS mode
  * Backport upstream commit 5c276953c1536375fba96bc769e1cb5d3123b4a7
  * Add gnutls-pct-in-FIPS-only.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1725451200">- FIPS: bsc#1230166
  * Mark gnutls_hash_fast operations as approved in SLI.
  * Add gnutls-FIPS-gnutls_hash_fast-SLI.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725537600">- FIPS: Allow to perform the integrity check with the hmac provided
  by each library [bsc#1226724]
  * Rebase gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1726488000">- FIPS: Do not allow curve P-192 for signature or keypair verification [bsc#1227669]
  * Add gnutls-FIPS-p192-disabled.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1739534400">- Security fix [bsc#1236974, CVE-2024-12243]
  * gnutls: inefficient DER Decoding in libtasn1 could lead to remote DoS
  * Add gnutls-CVE-2024-12243.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- Fix heap buffer overread when handling the CT SCT extension during X.509
  certificate parsing [bsc#1246233, CVE-2025-32989]
  * Add patch gnutls-CVE-2025-32989.patch
- Fix double-free due to incorrect ownership handling in the export logic of
  SAN entries containing an otherName [bsc#1246232, CVE-2025-32988]
  * Add patch gnutls-CVE-2025-32988.patch
- Fix 1-byte heap buffer overflow when parsing templates with certtool
  [bsc#1246267, CVE-2025-32990]
  * Add patch gnutls-CVE-2025-32990.patch
- Fix NULL pointer dereference when 2nd Client Hello omits PSK
  [bsc#1246299, CVE-2025-6395]
  * Add patch gnutls-CVE-2025-6395.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1763985600">- Security fix bsc#1254132 CVE-2025-9820
  * Fix buffer overflow in gnutls_pkcs11_token_init
  * Added gnutls-CVE-2025-9820.patch</changelog>
</package>
<package pkgid="b7bbb31215c02fb7d697f0e6bd0ee486361e427812dfbc097fb33baa19b9103d" name="libgnutls30-32bit" arch="x86_64">
  <version epoch="0" ver="3.8.3" rel="150600.4.17.1"/>
  <changelog author="pmonreal@suse.com" date="1692619200">- tests: Fix the SRP test that fails with SIGPIPE signal return due
  to a socket being closed before using it.
  * Add gnutls-srp-test-SIGPIPE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1692705600">- Fix missing GNUTLS_NO_EXTENSIONS compatibility.
  * Upstream: gitlab.com/gnutls/gnutls/commit/abfa8634
  * Add gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to 3.8.2: [bsc#1217277, CVE-2023-5981]
  * libgnutls: Fix timing side-channel inside RSA-PSK key exchange.
    [GNUTLS-SA-2023-10-23, CVSS: medium] [CVE-2023-5981]
  * libgnutls: Add API functions to perform ECDH and DH key agreement
    The functionality has been there for a long time though they were
    not available as part of the public API.  This enables applications
    to implement custom protocols leveraging non-interactive key
    agreement with ECDH and DH.
  * libgnutls: Added support for AES-GCM-SIV ciphers (RFC 8452)
    The new algorithms GNUTLS_CIPHER_AES_128_SIV_GCM and
    GNUTLS_CIPHER_AES_256_SIV_GCM have been added to be used through
    the AEAD interface.  Note that, unlike
    GNUTLS_CIPHER_AES_{128,256}_SIV_GCM, the authentication tag is
    appended to the ciphertext, not prepended.
  * libgnutls: transparent KTLS support is extended to FreeBSD kernel
    The kernel TLS feature can now be enabled on FreeBSD as well as
    Linux when compiled with the --enable-ktls configure option.
  * gnutls-cli: New option --starttls-name
    Depending on deployment, application protocols such as XMPP may
    require a different origin address than the external address to be
    presented prior to STARTTLS negotiation.  The --starttls-name can
    be used to specify specify the addresses separately.
  * API and ABI modifications:
  - gnutls_pubkey_import_dh_raw: New function
  - gnutls_privkey_import_dh_raw: New function
  - gnutls_pubkey_export_dh_raw: New function
  - gnutls_privkey_export_dh_raw: New function
  - gnutls_x509_privkey_import_dh_raw: New function
  - gnutls_privkey_derive_secret: New function
  - GNUTLS_KEYGEN_DH: New enum member of gnutls_keygen_types_t
  - GNUTLS_CIPHER_AES_128_SIV_GCM: Added
  - GNUTLS_CIPHER_AES_256_SIV_GCM: Added
  * Rebase gnutls-FIPS-140-3-references.patch
  * Remove upstream: gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Update to 3.8.3:
  * libgnutls: Fix more timing side-channel inside RSA-PSK key
    exchange. [GNUTLS-SA-2024-01-14, CVSS: medium]
    [bsc#1218865, CVE-2024-0553]
  * libgnutls: Fix assertion failure when verifying a certificate
    chain with a cycle of cross signatures.
    [GNUTLS-SA-2024-01-09, CVSS: medium] [bsc#1218862, CVE-2024-0567]
  * libgnutls: Fix regression in handling Ed25519 keys stored in
    PKCS#11 token certtool was unable to handle Ed25519 keys
    generated on PKCS#11 with pkcs11-tool (OpenSC).
    This is a regression introduced in 3.8.2.
  * Rebase gnutls-FIPS-140-3-references.patch
  * Updated upstream gnutls.keyring</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1720785600">- FIPS: [bsc#1227671, bsc#1226731]
  * Remove not needed DSA in selfchecks in FIPS mode.
  * Add gnutls-FIPS-no_dsa_selftest.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721131200">- FIPS: bsc#1227670
  * Allow RSA signature verification with min of 2048 bit modulus.
  * Add gnutls-FIPS-rsa-min-2048.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721649600">- FIPS: bsc#1227642
  * Mark SHA1 as not allowed for signature verification in both RSA and ECDSA sigVer.
  * Add gnutls-FIPS-no-sha1-verify.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1722945600">- FIPS: bsc#1226733
  * Use full hash+sign operations, not low level primitives in PCT test.
  * Add gnutls-FIPS-full-hash_sign.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1723204800">- FIPS: bsc#1226733
  * Run pairwise consistency test only in FIPS mode
  * Backport upstream commit 5c276953c1536375fba96bc769e1cb5d3123b4a7
  * Add gnutls-pct-in-FIPS-only.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1725451200">- FIPS: bsc#1230166
  * Mark gnutls_hash_fast operations as approved in SLI.
  * Add gnutls-FIPS-gnutls_hash_fast-SLI.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725537600">- FIPS: Allow to perform the integrity check with the hmac provided
  by each library [bsc#1226724]
  * Rebase gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1726488000">- FIPS: Do not allow curve P-192 for signature or keypair verification [bsc#1227669]
  * Add gnutls-FIPS-p192-disabled.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1739534400">- Security fix [bsc#1236974, CVE-2024-12243]
  * gnutls: inefficient DER Decoding in libtasn1 could lead to remote DoS
  * Add gnutls-CVE-2024-12243.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- Fix heap buffer overread when handling the CT SCT extension during X.509
  certificate parsing [bsc#1246233, CVE-2025-32989]
  * Add patch gnutls-CVE-2025-32989.patch
- Fix double-free due to incorrect ownership handling in the export logic of
  SAN entries containing an otherName [bsc#1246232, CVE-2025-32988]
  * Add patch gnutls-CVE-2025-32988.patch
- Fix 1-byte heap buffer overflow when parsing templates with certtool
  [bsc#1246267, CVE-2025-32990]
  * Add patch gnutls-CVE-2025-32990.patch
- Fix NULL pointer dereference when 2nd Client Hello omits PSK
  [bsc#1246299, CVE-2025-6395]
  * Add patch gnutls-CVE-2025-6395.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1763985600">- Security fix bsc#1254132 CVE-2025-9820
  * Fix buffer overflow in gnutls_pkcs11_token_init
  * Added gnutls-CVE-2025-9820.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1770724800">- Security fix:
  * CVE-2025-14831: DoS via excessive resource consumption during
    certificate verification (bsc#1257960)
  * Add gnutls-CVE-2025-14831.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1771934400">- Add the functionality to allow to specify the hash algorithm for
  the PSK. This fixes a bug in the current implementation where the
  binder is always calculated with SHA256.
  * (bsc#1258083, jsc#PED-15752, jsc#PED-15753)
  * lib/psk: Add gnutls_psk_allocate_{client,server}_credentials2
  * tests/psk-file: Add testing for _credentials2 functions
  * lib/psk: add null check for binder algo
  * pre_shared_key: fix memleak when retrying with different binder algo
  * pre_shared_key: add null check on pskcred
  * Add patches:
  - gnutls-PSK-hash.patch
  - gnutls-PSK-hash-tests.patch
  - gnutls-PSK-hash-NULL-check.patch
  - gnutls-PSK-hash-NULL-check-pskcred.patch
  - gnutls-PSK-hash-fix-memleak.patch</changelog>
</package>
<package pkgid="04cb90b1884173a5097c3f17647e280401be49a6d8848b798b9db83b820467ea" name="libgnutls30-32bit" arch="x86_64">
  <version epoch="0" ver="3.8.3" rel="150600.4.20.1"/>
  <changelog author="pmonreal@suse.com" date="1692705600">- Fix missing GNUTLS_NO_EXTENSIONS compatibility.
  * Upstream: gitlab.com/gnutls/gnutls/commit/abfa8634
  * Add gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to 3.8.2: [bsc#1217277, CVE-2023-5981]
  * libgnutls: Fix timing side-channel inside RSA-PSK key exchange.
    [GNUTLS-SA-2023-10-23, CVSS: medium] [CVE-2023-5981]
  * libgnutls: Add API functions to perform ECDH and DH key agreement
    The functionality has been there for a long time though they were
    not available as part of the public API.  This enables applications
    to implement custom protocols leveraging non-interactive key
    agreement with ECDH and DH.
  * libgnutls: Added support for AES-GCM-SIV ciphers (RFC 8452)
    The new algorithms GNUTLS_CIPHER_AES_128_SIV_GCM and
    GNUTLS_CIPHER_AES_256_SIV_GCM have been added to be used through
    the AEAD interface.  Note that, unlike
    GNUTLS_CIPHER_AES_{128,256}_SIV_GCM, the authentication tag is
    appended to the ciphertext, not prepended.
  * libgnutls: transparent KTLS support is extended to FreeBSD kernel
    The kernel TLS feature can now be enabled on FreeBSD as well as
    Linux when compiled with the --enable-ktls configure option.
  * gnutls-cli: New option --starttls-name
    Depending on deployment, application protocols such as XMPP may
    require a different origin address than the external address to be
    presented prior to STARTTLS negotiation.  The --starttls-name can
    be used to specify specify the addresses separately.
  * API and ABI modifications:
  - gnutls_pubkey_import_dh_raw: New function
  - gnutls_privkey_import_dh_raw: New function
  - gnutls_pubkey_export_dh_raw: New function
  - gnutls_privkey_export_dh_raw: New function
  - gnutls_x509_privkey_import_dh_raw: New function
  - gnutls_privkey_derive_secret: New function
  - GNUTLS_KEYGEN_DH: New enum member of gnutls_keygen_types_t
  - GNUTLS_CIPHER_AES_128_SIV_GCM: Added
  - GNUTLS_CIPHER_AES_256_SIV_GCM: Added
  * Rebase gnutls-FIPS-140-3-references.patch
  * Remove upstream: gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Update to 3.8.3:
  * libgnutls: Fix more timing side-channel inside RSA-PSK key
    exchange. [GNUTLS-SA-2024-01-14, CVSS: medium]
    [bsc#1218865, CVE-2024-0553]
  * libgnutls: Fix assertion failure when verifying a certificate
    chain with a cycle of cross signatures.
    [GNUTLS-SA-2024-01-09, CVSS: medium] [bsc#1218862, CVE-2024-0567]
  * libgnutls: Fix regression in handling Ed25519 keys stored in
    PKCS#11 token certtool was unable to handle Ed25519 keys
    generated on PKCS#11 with pkcs11-tool (OpenSC).
    This is a regression introduced in 3.8.2.
  * Rebase gnutls-FIPS-140-3-references.patch
  * Updated upstream gnutls.keyring</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1720785600">- FIPS: [bsc#1227671, bsc#1226731]
  * Remove not needed DSA in selfchecks in FIPS mode.
  * Add gnutls-FIPS-no_dsa_selftest.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721131200">- FIPS: bsc#1227670
  * Allow RSA signature verification with min of 2048 bit modulus.
  * Add gnutls-FIPS-rsa-min-2048.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721649600">- FIPS: bsc#1227642
  * Mark SHA1 as not allowed for signature verification in both RSA and ECDSA sigVer.
  * Add gnutls-FIPS-no-sha1-verify.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1722945600">- FIPS: bsc#1226733
  * Use full hash+sign operations, not low level primitives in PCT test.
  * Add gnutls-FIPS-full-hash_sign.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1723204800">- FIPS: bsc#1226733
  * Run pairwise consistency test only in FIPS mode
  * Backport upstream commit 5c276953c1536375fba96bc769e1cb5d3123b4a7
  * Add gnutls-pct-in-FIPS-only.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1725451200">- FIPS: bsc#1230166
  * Mark gnutls_hash_fast operations as approved in SLI.
  * Add gnutls-FIPS-gnutls_hash_fast-SLI.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725537600">- FIPS: Allow to perform the integrity check with the hmac provided
  by each library [bsc#1226724]
  * Rebase gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1726488000">- FIPS: Do not allow curve P-192 for signature or keypair verification [bsc#1227669]
  * Add gnutls-FIPS-p192-disabled.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1739534400">- Security fix [bsc#1236974, CVE-2024-12243]
  * gnutls: inefficient DER Decoding in libtasn1 could lead to remote DoS
  * Add gnutls-CVE-2024-12243.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- Fix heap buffer overread when handling the CT SCT extension during X.509
  certificate parsing [bsc#1246233, CVE-2025-32989]
  * Add patch gnutls-CVE-2025-32989.patch
- Fix double-free due to incorrect ownership handling in the export logic of
  SAN entries containing an otherName [bsc#1246232, CVE-2025-32988]
  * Add patch gnutls-CVE-2025-32988.patch
- Fix 1-byte heap buffer overflow when parsing templates with certtool
  [bsc#1246267, CVE-2025-32990]
  * Add patch gnutls-CVE-2025-32990.patch
- Fix NULL pointer dereference when 2nd Client Hello omits PSK
  [bsc#1246299, CVE-2025-6395]
  * Add patch gnutls-CVE-2025-6395.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1763985600">- Security fix bsc#1254132 CVE-2025-9820
  * Fix buffer overflow in gnutls_pkcs11_token_init
  * Added gnutls-CVE-2025-9820.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1770724800">- Security fix:
  * CVE-2025-14831: DoS via excessive resource consumption during
    certificate verification (bsc#1257960)
  * Add gnutls-CVE-2025-14831.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1771934400">- Add the functionality to allow to specify the hash algorithm for
  the PSK. This fixes a bug in the current implementation where the
  binder is always calculated with SHA256.
  * (bsc#1258083, jsc#PED-15752, jsc#PED-15753)
  * lib/psk: Add gnutls_psk_allocate_{client,server}_credentials2
  * tests/psk-file: Add testing for _credentials2 functions
  * lib/psk: add null check for binder algo
  * pre_shared_key: fix memleak when retrying with different binder algo
  * pre_shared_key: add null check on pskcred
  * Add patches:
  - gnutls-PSK-hash.patch
  - gnutls-PSK-hash-tests.patch
  - gnutls-PSK-hash-NULL-check.patch
  - gnutls-PSK-hash-NULL-check-pskcred.patch
  - gnutls-PSK-hash-fix-memleak.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1778068800">- Security fixes:
  * CVE-2026-33846: buffers: add more checks to DTLS reassembly (bsc#1263705)
  * CVE-2026-42009: lib/buffers: ensure packets have differing sequence numbers (bsc#1263708)
  * CVE-2026-33845: buffers: switch from end_offset over to frag_length (bsc#1263704)
  * CVE-2026-42010: lib/auth/rsa_psk: fix binary PSK identity lookup (bsc#1263709)
  * CVE-2026-3833: x509/name-constraints: compare domain names case-insensitive (bsc#1263707)
  * CVE-2026-42011: x509/name_constraints: fix intersecting empty constraints (bsc#1263710)
  * CVE-2026-42012: x509/hostname-verify: make URI/SRV SAN preclude CN fallback (bsc#1263711)
  * CVE-2026-42013: x509: prevent fallback on oversized SAN (bsc#1263712)
  * CVE-2026-42014: pkcs11_write: fix UAF and leak in gnutls_pkcs11_token_set_pin (bsc#1263713)
  * CVE-2026-42015: x509/pkcs12_bag: fix off-by-one in bag element bounds check (bsc#1263714)
  * CVE-2026-5260: lib/pkcs11_privkey: guard against overreading on short ciphertexts (bsc#1263715)
  * CVE-2026-5419: gnutls_cipher_decrypt3: make PKCS#7 unpadding branch free (bsc#1263716)
  * Add patches:
    gnutls-CVE-2026-33846.patch gnutls-CVE-2026-42009.patch
    gnutls-CVE-2026-33845.patch gnutls-CVE-2026-42010.patch
    gnutls-CVE-2026-3833.patch  gnutls-CVE-2026-42011.patch
    gnutls-CVE-2026-42012.patch gnutls-CVE-2026-42013.patch
    gnutls-CVE-2026-42014.patch gnutls-CVE-2026-5260.patch
    gnutls-CVE-2026-42015.patch gnutls-CVE-2026-5419.patch</changelog>
</package>
<package pkgid="e1f91e8882a50ba820e89850ba1022a6dc520e23c5af4fe423c41c277e549ada" name="libgnutls30-32bit" arch="x86_64">
  <version epoch="0" ver="3.8.3" rel="150600.4.9.1"/>
  <changelog author="pmonreal@suse.com" date="1684929600">- FIPS: Skip the fixed HMAC verification for nettle, hogweed and
  gmp libraries. These calculated HMACs change for every build of
  each of these packages, we only have to verify that for gnutls.
  * Add gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch [bsc#1211476]</changelog>
  <changelog author="pmonreal@suse.com" date="1685361600">- FIPS: Fix baselibs.conf to mention libgnutls30-hmac [bsc#1211476]
  Extend also the checks in gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1691409600">- Update to version 3.8.1:
  * libgnutls: ClientHello extensions are randomized by default
    To make fingerprinting harder, TLS extensions in ClientHello
    messages are shuffled. As this behavior may cause compatibility
    issue with legacy applications that do not accept the last
    extension without payload, the behavior can be reverted with the
    %NO_SHUFFLE_EXTENSIONS priority keyword.
  * libgnutls: Add support for RFC 9258 external PSK importer.
    This enables to deploy the same PSK across multiple TLS versions
    (TLS 1.2 and TLS 1.3) in a secure manner. To use, the application
    needs to set up a callback that formats the PSK identity using
    gnutls_psk_format_imported_identity().
  * libgnutls: %GNUTLS_NO_EXTENSIONS has been renamed to
    %GNUTLS_NO_DEFAULT_EXTENSIONS.
  * libgnutls: Add additional PBKDF limit checks in FIPS mode as
    defined in SP 800-132. Minimum salt length is 128 bits and
    minimum iterations bound is 1000 for PBKDF in FIPS mode.
  * libgnutls: Add a mechanism to control whether to enforce extended
    master secret (RFC 7627). FIPS 140-3 mandates the use of TLS
    session hash (extended master secret, EMS) in TLS 1.2. To enforce
    this, a new priority keyword %FORCE_SESSION_HASH is added and if
    it is set and EMS is not set, the peer aborts the connection. This
    behavior is the default in FIPS mode, though it can be overridden
    through the configuration file with the "tls-session-hash" option.
    In either case non-EMS PRF is reported as a non-approved operation
    through the FIPS service indicator.
  * New option --attime to specify current time.
    To make testing with different timestamp to the system easier, the
    tools doing certificate verification now provide a new option
  - -attime, which takes an arbitrary time.
  * API and ABI modifications:
    gnutls_psk_client_credentials_function3: New typedef
    gnutls_psk_server_credentials_function3: New typedef
    gnutls_psk_set_server_credentials_function3: New function
    gnutls_psk_set_client_credentials_function3: New function
    gnutls_psk_format_imported_identity: New function
    GNUTLS_PSK_KEY_EXT: New enum member of gnutls_psk_key_flags
  * Rebase patches:
  - gnutls-FIPS-140-3-references.patch
  - gnutls-FIPS-jitterentropy.patch
  * Remove patches merged/fixed upstream:
  - gnutls-FIPS-PCT-DH.patch
  - gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1692619200">- tests: Fix the SRP test that fails with SIGPIPE signal return due
  to a socket being closed before using it.
  * Add gnutls-srp-test-SIGPIPE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1692705600">- Fix missing GNUTLS_NO_EXTENSIONS compatibility.
  * Upstream: gitlab.com/gnutls/gnutls/commit/abfa8634
  * Add gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to 3.8.2: [bsc#1217277, CVE-2023-5981]
  * libgnutls: Fix timing side-channel inside RSA-PSK key exchange.
    [GNUTLS-SA-2023-10-23, CVSS: medium] [CVE-2023-5981]
  * libgnutls: Add API functions to perform ECDH and DH key agreement
    The functionality has been there for a long time though they were
    not available as part of the public API.  This enables applications
    to implement custom protocols leveraging non-interactive key
    agreement with ECDH and DH.
  * libgnutls: Added support for AES-GCM-SIV ciphers (RFC 8452)
    The new algorithms GNUTLS_CIPHER_AES_128_SIV_GCM and
    GNUTLS_CIPHER_AES_256_SIV_GCM have been added to be used through
    the AEAD interface.  Note that, unlike
    GNUTLS_CIPHER_AES_{128,256}_SIV_GCM, the authentication tag is
    appended to the ciphertext, not prepended.
  * libgnutls: transparent KTLS support is extended to FreeBSD kernel
    The kernel TLS feature can now be enabled on FreeBSD as well as
    Linux when compiled with the --enable-ktls configure option.
  * gnutls-cli: New option --starttls-name
    Depending on deployment, application protocols such as XMPP may
    require a different origin address than the external address to be
    presented prior to STARTTLS negotiation.  The --starttls-name can
    be used to specify specify the addresses separately.
  * API and ABI modifications:
  - gnutls_pubkey_import_dh_raw: New function
  - gnutls_privkey_import_dh_raw: New function
  - gnutls_pubkey_export_dh_raw: New function
  - gnutls_privkey_export_dh_raw: New function
  - gnutls_x509_privkey_import_dh_raw: New function
  - gnutls_privkey_derive_secret: New function
  - GNUTLS_KEYGEN_DH: New enum member of gnutls_keygen_types_t
  - GNUTLS_CIPHER_AES_128_SIV_GCM: Added
  - GNUTLS_CIPHER_AES_256_SIV_GCM: Added
  * Rebase gnutls-FIPS-140-3-references.patch
  * Remove upstream: gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Update to 3.8.3:
  * libgnutls: Fix more timing side-channel inside RSA-PSK key
    exchange. [GNUTLS-SA-2024-01-14, CVSS: medium]
    [bsc#1218865, CVE-2024-0553]
  * libgnutls: Fix assertion failure when verifying a certificate
    chain with a cycle of cross signatures.
    [GNUTLS-SA-2024-01-09, CVSS: medium] [bsc#1218862, CVE-2024-0567]
  * libgnutls: Fix regression in handling Ed25519 keys stored in
    PKCS#11 token certtool was unable to handle Ed25519 keys
    generated on PKCS#11 with pkcs11-tool (OpenSC).
    This is a regression introduced in 3.8.2.
  * Rebase gnutls-FIPS-140-3-references.patch
  * Updated upstream gnutls.keyring</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1720785600">- FIPS: [bsc#1227671, bsc#1226731]
  * Remove not needed DSA in selfchecks in FIPS mode.
  * Add gnutls-FIPS-no_dsa_selftest.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721131200">- FIPS: bsc#1227670
  * Allow RSA signature verification with min of 2048 bit modulus.
  * Add gnutls-FIPS-rsa-min-2048.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721649600">- FIPS: bsc#1227642
  * Mark SHA1 as not allowed for signature verification in both RSA and ECDSA sigVer.
  * Add gnutls-FIPS-no-sha1-verify.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1722945600">- FIPS: bsc#1226733
  * Use full hash+sign operations, not low level primitives in PCT test.
  * Add gnutls-FIPS-full-hash_sign.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1723204800">- FIPS: bsc#1226733
  * Run pairwise consistency test only in FIPS mode
  * Backport upstream commit 5c276953c1536375fba96bc769e1cb5d3123b4a7
  * Add gnutls-pct-in-FIPS-only.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1725451200">- FIPS: bsc#1230166
  * Mark gnutls_hash_fast operations as approved in SLI.
  * Add gnutls-FIPS-gnutls_hash_fast-SLI.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725537600">- FIPS: Allow to perform the integrity check with the hmac provided
  by each library [bsc#1226724]
  * Rebase gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1726488000">- FIPS: Do not allow curve P-192 for signature or keypair verification [bsc#1227669]
  * Add gnutls-FIPS-p192-disabled.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1739534400">- Security fix [bsc#1236974, CVE-2024-12243]
  * gnutls: inefficient DER Decoding in libtasn1 could lead to remote DoS
  * Add gnutls-CVE-2024-12243.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- Fix heap buffer overread when handling the CT SCT extension during X.509
  certificate parsing [bsc#1246233, CVE-2025-32989]
  * Add patch gnutls-CVE-2025-32989.patch
- Fix double-free due to incorrect ownership handling in the export logic of
  SAN entries containing an otherName [bsc#1246232, CVE-2025-32988]
  * Add patch gnutls-CVE-2025-32988.patch
- Fix 1-byte heap buffer overflow when parsing templates with certtool
  [bsc#1246267, CVE-2025-32990]
  * Add patch gnutls-CVE-2025-32990.patch
- Fix NULL pointer dereference when 2nd Client Hello omits PSK
  [bsc#1246299, CVE-2025-6395]
  * Add patch gnutls-CVE-2025-6395.patch</changelog>
</package>
<package pkgid="46e15db213cd5d0e7af22644eba094b0a67d7efa1896713d8e26f4273beac3f2" name="libgnutlsxx-devel" arch="x86_64">
  <version epoch="0" ver="3.8.3" rel="150600.4.12.1"/>
  <changelog author="pmonreal@suse.com" date="1685361600">- FIPS: Fix baselibs.conf to mention libgnutls30-hmac [bsc#1211476]
  Extend also the checks in gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1691409600">- Update to version 3.8.1:
  * libgnutls: ClientHello extensions are randomized by default
    To make fingerprinting harder, TLS extensions in ClientHello
    messages are shuffled. As this behavior may cause compatibility
    issue with legacy applications that do not accept the last
    extension without payload, the behavior can be reverted with the
    %NO_SHUFFLE_EXTENSIONS priority keyword.
  * libgnutls: Add support for RFC 9258 external PSK importer.
    This enables to deploy the same PSK across multiple TLS versions
    (TLS 1.2 and TLS 1.3) in a secure manner. To use, the application
    needs to set up a callback that formats the PSK identity using
    gnutls_psk_format_imported_identity().
  * libgnutls: %GNUTLS_NO_EXTENSIONS has been renamed to
    %GNUTLS_NO_DEFAULT_EXTENSIONS.
  * libgnutls: Add additional PBKDF limit checks in FIPS mode as
    defined in SP 800-132. Minimum salt length is 128 bits and
    minimum iterations bound is 1000 for PBKDF in FIPS mode.
  * libgnutls: Add a mechanism to control whether to enforce extended
    master secret (RFC 7627). FIPS 140-3 mandates the use of TLS
    session hash (extended master secret, EMS) in TLS 1.2. To enforce
    this, a new priority keyword %FORCE_SESSION_HASH is added and if
    it is set and EMS is not set, the peer aborts the connection. This
    behavior is the default in FIPS mode, though it can be overridden
    through the configuration file with the "tls-session-hash" option.
    In either case non-EMS PRF is reported as a non-approved operation
    through the FIPS service indicator.
  * New option --attime to specify current time.
    To make testing with different timestamp to the system easier, the
    tools doing certificate verification now provide a new option
  - -attime, which takes an arbitrary time.
  * API and ABI modifications:
    gnutls_psk_client_credentials_function3: New typedef
    gnutls_psk_server_credentials_function3: New typedef
    gnutls_psk_set_server_credentials_function3: New function
    gnutls_psk_set_client_credentials_function3: New function
    gnutls_psk_format_imported_identity: New function
    GNUTLS_PSK_KEY_EXT: New enum member of gnutls_psk_key_flags
  * Rebase patches:
  - gnutls-FIPS-140-3-references.patch
  - gnutls-FIPS-jitterentropy.patch
  * Remove patches merged/fixed upstream:
  - gnutls-FIPS-PCT-DH.patch
  - gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1692619200">- tests: Fix the SRP test that fails with SIGPIPE signal return due
  to a socket being closed before using it.
  * Add gnutls-srp-test-SIGPIPE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1692705600">- Fix missing GNUTLS_NO_EXTENSIONS compatibility.
  * Upstream: gitlab.com/gnutls/gnutls/commit/abfa8634
  * Add gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to 3.8.2: [bsc#1217277, CVE-2023-5981]
  * libgnutls: Fix timing side-channel inside RSA-PSK key exchange.
    [GNUTLS-SA-2023-10-23, CVSS: medium] [CVE-2023-5981]
  * libgnutls: Add API functions to perform ECDH and DH key agreement
    The functionality has been there for a long time though they were
    not available as part of the public API.  This enables applications
    to implement custom protocols leveraging non-interactive key
    agreement with ECDH and DH.
  * libgnutls: Added support for AES-GCM-SIV ciphers (RFC 8452)
    The new algorithms GNUTLS_CIPHER_AES_128_SIV_GCM and
    GNUTLS_CIPHER_AES_256_SIV_GCM have been added to be used through
    the AEAD interface.  Note that, unlike
    GNUTLS_CIPHER_AES_{128,256}_SIV_GCM, the authentication tag is
    appended to the ciphertext, not prepended.
  * libgnutls: transparent KTLS support is extended to FreeBSD kernel
    The kernel TLS feature can now be enabled on FreeBSD as well as
    Linux when compiled with the --enable-ktls configure option.
  * gnutls-cli: New option --starttls-name
    Depending on deployment, application protocols such as XMPP may
    require a different origin address than the external address to be
    presented prior to STARTTLS negotiation.  The --starttls-name can
    be used to specify specify the addresses separately.
  * API and ABI modifications:
  - gnutls_pubkey_import_dh_raw: New function
  - gnutls_privkey_import_dh_raw: New function
  - gnutls_pubkey_export_dh_raw: New function
  - gnutls_privkey_export_dh_raw: New function
  - gnutls_x509_privkey_import_dh_raw: New function
  - gnutls_privkey_derive_secret: New function
  - GNUTLS_KEYGEN_DH: New enum member of gnutls_keygen_types_t
  - GNUTLS_CIPHER_AES_128_SIV_GCM: Added
  - GNUTLS_CIPHER_AES_256_SIV_GCM: Added
  * Rebase gnutls-FIPS-140-3-references.patch
  * Remove upstream: gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Update to 3.8.3:
  * libgnutls: Fix more timing side-channel inside RSA-PSK key
    exchange. [GNUTLS-SA-2024-01-14, CVSS: medium]
    [bsc#1218865, CVE-2024-0553]
  * libgnutls: Fix assertion failure when verifying a certificate
    chain with a cycle of cross signatures.
    [GNUTLS-SA-2024-01-09, CVSS: medium] [bsc#1218862, CVE-2024-0567]
  * libgnutls: Fix regression in handling Ed25519 keys stored in
    PKCS#11 token certtool was unable to handle Ed25519 keys
    generated on PKCS#11 with pkcs11-tool (OpenSC).
    This is a regression introduced in 3.8.2.
  * Rebase gnutls-FIPS-140-3-references.patch
  * Updated upstream gnutls.keyring</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1720785600">- FIPS: [bsc#1227671, bsc#1226731]
  * Remove not needed DSA in selfchecks in FIPS mode.
  * Add gnutls-FIPS-no_dsa_selftest.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721131200">- FIPS: bsc#1227670
  * Allow RSA signature verification with min of 2048 bit modulus.
  * Add gnutls-FIPS-rsa-min-2048.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721649600">- FIPS: bsc#1227642
  * Mark SHA1 as not allowed for signature verification in both RSA and ECDSA sigVer.
  * Add gnutls-FIPS-no-sha1-verify.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1722945600">- FIPS: bsc#1226733
  * Use full hash+sign operations, not low level primitives in PCT test.
  * Add gnutls-FIPS-full-hash_sign.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1723204800">- FIPS: bsc#1226733
  * Run pairwise consistency test only in FIPS mode
  * Backport upstream commit 5c276953c1536375fba96bc769e1cb5d3123b4a7
  * Add gnutls-pct-in-FIPS-only.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1725451200">- FIPS: bsc#1230166
  * Mark gnutls_hash_fast operations as approved in SLI.
  * Add gnutls-FIPS-gnutls_hash_fast-SLI.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725537600">- FIPS: Allow to perform the integrity check with the hmac provided
  by each library [bsc#1226724]
  * Rebase gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1726488000">- FIPS: Do not allow curve P-192 for signature or keypair verification [bsc#1227669]
  * Add gnutls-FIPS-p192-disabled.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1739534400">- Security fix [bsc#1236974, CVE-2024-12243]
  * gnutls: inefficient DER Decoding in libtasn1 could lead to remote DoS
  * Add gnutls-CVE-2024-12243.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- Fix heap buffer overread when handling the CT SCT extension during X.509
  certificate parsing [bsc#1246233, CVE-2025-32989]
  * Add patch gnutls-CVE-2025-32989.patch
- Fix double-free due to incorrect ownership handling in the export logic of
  SAN entries containing an otherName [bsc#1246232, CVE-2025-32988]
  * Add patch gnutls-CVE-2025-32988.patch
- Fix 1-byte heap buffer overflow when parsing templates with certtool
  [bsc#1246267, CVE-2025-32990]
  * Add patch gnutls-CVE-2025-32990.patch
- Fix NULL pointer dereference when 2nd Client Hello omits PSK
  [bsc#1246299, CVE-2025-6395]
  * Add patch gnutls-CVE-2025-6395.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1763985600">- Security fix bsc#1254132 CVE-2025-9820
  * Fix buffer overflow in gnutls_pkcs11_token_init
  * Added gnutls-CVE-2025-9820.patch</changelog>
</package>
<package pkgid="31042532c474c55f3beca9fdae56e0e2cd8e60d469fd63a93f438b7cf63a064a" name="libgnutlsxx-devel" arch="x86_64">
  <version epoch="0" ver="3.8.3" rel="150600.4.17.1"/>
  <changelog author="pmonreal@suse.com" date="1692619200">- tests: Fix the SRP test that fails with SIGPIPE signal return due
  to a socket being closed before using it.
  * Add gnutls-srp-test-SIGPIPE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1692705600">- Fix missing GNUTLS_NO_EXTENSIONS compatibility.
  * Upstream: gitlab.com/gnutls/gnutls/commit/abfa8634
  * Add gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to 3.8.2: [bsc#1217277, CVE-2023-5981]
  * libgnutls: Fix timing side-channel inside RSA-PSK key exchange.
    [GNUTLS-SA-2023-10-23, CVSS: medium] [CVE-2023-5981]
  * libgnutls: Add API functions to perform ECDH and DH key agreement
    The functionality has been there for a long time though they were
    not available as part of the public API.  This enables applications
    to implement custom protocols leveraging non-interactive key
    agreement with ECDH and DH.
  * libgnutls: Added support for AES-GCM-SIV ciphers (RFC 8452)
    The new algorithms GNUTLS_CIPHER_AES_128_SIV_GCM and
    GNUTLS_CIPHER_AES_256_SIV_GCM have been added to be used through
    the AEAD interface.  Note that, unlike
    GNUTLS_CIPHER_AES_{128,256}_SIV_GCM, the authentication tag is
    appended to the ciphertext, not prepended.
  * libgnutls: transparent KTLS support is extended to FreeBSD kernel
    The kernel TLS feature can now be enabled on FreeBSD as well as
    Linux when compiled with the --enable-ktls configure option.
  * gnutls-cli: New option --starttls-name
    Depending on deployment, application protocols such as XMPP may
    require a different origin address than the external address to be
    presented prior to STARTTLS negotiation.  The --starttls-name can
    be used to specify specify the addresses separately.
  * API and ABI modifications:
  - gnutls_pubkey_import_dh_raw: New function
  - gnutls_privkey_import_dh_raw: New function
  - gnutls_pubkey_export_dh_raw: New function
  - gnutls_privkey_export_dh_raw: New function
  - gnutls_x509_privkey_import_dh_raw: New function
  - gnutls_privkey_derive_secret: New function
  - GNUTLS_KEYGEN_DH: New enum member of gnutls_keygen_types_t
  - GNUTLS_CIPHER_AES_128_SIV_GCM: Added
  - GNUTLS_CIPHER_AES_256_SIV_GCM: Added
  * Rebase gnutls-FIPS-140-3-references.patch
  * Remove upstream: gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Update to 3.8.3:
  * libgnutls: Fix more timing side-channel inside RSA-PSK key
    exchange. [GNUTLS-SA-2024-01-14, CVSS: medium]
    [bsc#1218865, CVE-2024-0553]
  * libgnutls: Fix assertion failure when verifying a certificate
    chain with a cycle of cross signatures.
    [GNUTLS-SA-2024-01-09, CVSS: medium] [bsc#1218862, CVE-2024-0567]
  * libgnutls: Fix regression in handling Ed25519 keys stored in
    PKCS#11 token certtool was unable to handle Ed25519 keys
    generated on PKCS#11 with pkcs11-tool (OpenSC).
    This is a regression introduced in 3.8.2.
  * Rebase gnutls-FIPS-140-3-references.patch
  * Updated upstream gnutls.keyring</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1720785600">- FIPS: [bsc#1227671, bsc#1226731]
  * Remove not needed DSA in selfchecks in FIPS mode.
  * Add gnutls-FIPS-no_dsa_selftest.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721131200">- FIPS: bsc#1227670
  * Allow RSA signature verification with min of 2048 bit modulus.
  * Add gnutls-FIPS-rsa-min-2048.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721649600">- FIPS: bsc#1227642
  * Mark SHA1 as not allowed for signature verification in both RSA and ECDSA sigVer.
  * Add gnutls-FIPS-no-sha1-verify.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1722945600">- FIPS: bsc#1226733
  * Use full hash+sign operations, not low level primitives in PCT test.
  * Add gnutls-FIPS-full-hash_sign.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1723204800">- FIPS: bsc#1226733
  * Run pairwise consistency test only in FIPS mode
  * Backport upstream commit 5c276953c1536375fba96bc769e1cb5d3123b4a7
  * Add gnutls-pct-in-FIPS-only.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1725451200">- FIPS: bsc#1230166
  * Mark gnutls_hash_fast operations as approved in SLI.
  * Add gnutls-FIPS-gnutls_hash_fast-SLI.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725537600">- FIPS: Allow to perform the integrity check with the hmac provided
  by each library [bsc#1226724]
  * Rebase gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1726488000">- FIPS: Do not allow curve P-192 for signature or keypair verification [bsc#1227669]
  * Add gnutls-FIPS-p192-disabled.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1739534400">- Security fix [bsc#1236974, CVE-2024-12243]
  * gnutls: inefficient DER Decoding in libtasn1 could lead to remote DoS
  * Add gnutls-CVE-2024-12243.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- Fix heap buffer overread when handling the CT SCT extension during X.509
  certificate parsing [bsc#1246233, CVE-2025-32989]
  * Add patch gnutls-CVE-2025-32989.patch
- Fix double-free due to incorrect ownership handling in the export logic of
  SAN entries containing an otherName [bsc#1246232, CVE-2025-32988]
  * Add patch gnutls-CVE-2025-32988.patch
- Fix 1-byte heap buffer overflow when parsing templates with certtool
  [bsc#1246267, CVE-2025-32990]
  * Add patch gnutls-CVE-2025-32990.patch
- Fix NULL pointer dereference when 2nd Client Hello omits PSK
  [bsc#1246299, CVE-2025-6395]
  * Add patch gnutls-CVE-2025-6395.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1763985600">- Security fix bsc#1254132 CVE-2025-9820
  * Fix buffer overflow in gnutls_pkcs11_token_init
  * Added gnutls-CVE-2025-9820.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1770724800">- Security fix:
  * CVE-2025-14831: DoS via excessive resource consumption during
    certificate verification (bsc#1257960)
  * Add gnutls-CVE-2025-14831.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1771934400">- Add the functionality to allow to specify the hash algorithm for
  the PSK. This fixes a bug in the current implementation where the
  binder is always calculated with SHA256.
  * (bsc#1258083, jsc#PED-15752, jsc#PED-15753)
  * lib/psk: Add gnutls_psk_allocate_{client,server}_credentials2
  * tests/psk-file: Add testing for _credentials2 functions
  * lib/psk: add null check for binder algo
  * pre_shared_key: fix memleak when retrying with different binder algo
  * pre_shared_key: add null check on pskcred
  * Add patches:
  - gnutls-PSK-hash.patch
  - gnutls-PSK-hash-tests.patch
  - gnutls-PSK-hash-NULL-check.patch
  - gnutls-PSK-hash-NULL-check-pskcred.patch
  - gnutls-PSK-hash-fix-memleak.patch</changelog>
</package>
<package pkgid="14eff33269aefb31f3747f868f7b2a7c38e09a88bf2549be329614a5a158cba9" name="libgnutlsxx-devel" arch="x86_64">
  <version epoch="0" ver="3.8.3" rel="150600.4.20.1"/>
  <changelog author="pmonreal@suse.com" date="1692705600">- Fix missing GNUTLS_NO_EXTENSIONS compatibility.
  * Upstream: gitlab.com/gnutls/gnutls/commit/abfa8634
  * Add gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to 3.8.2: [bsc#1217277, CVE-2023-5981]
  * libgnutls: Fix timing side-channel inside RSA-PSK key exchange.
    [GNUTLS-SA-2023-10-23, CVSS: medium] [CVE-2023-5981]
  * libgnutls: Add API functions to perform ECDH and DH key agreement
    The functionality has been there for a long time though they were
    not available as part of the public API.  This enables applications
    to implement custom protocols leveraging non-interactive key
    agreement with ECDH and DH.
  * libgnutls: Added support for AES-GCM-SIV ciphers (RFC 8452)
    The new algorithms GNUTLS_CIPHER_AES_128_SIV_GCM and
    GNUTLS_CIPHER_AES_256_SIV_GCM have been added to be used through
    the AEAD interface.  Note that, unlike
    GNUTLS_CIPHER_AES_{128,256}_SIV_GCM, the authentication tag is
    appended to the ciphertext, not prepended.
  * libgnutls: transparent KTLS support is extended to FreeBSD kernel
    The kernel TLS feature can now be enabled on FreeBSD as well as
    Linux when compiled with the --enable-ktls configure option.
  * gnutls-cli: New option --starttls-name
    Depending on deployment, application protocols such as XMPP may
    require a different origin address than the external address to be
    presented prior to STARTTLS negotiation.  The --starttls-name can
    be used to specify specify the addresses separately.
  * API and ABI modifications:
  - gnutls_pubkey_import_dh_raw: New function
  - gnutls_privkey_import_dh_raw: New function
  - gnutls_pubkey_export_dh_raw: New function
  - gnutls_privkey_export_dh_raw: New function
  - gnutls_x509_privkey_import_dh_raw: New function
  - gnutls_privkey_derive_secret: New function
  - GNUTLS_KEYGEN_DH: New enum member of gnutls_keygen_types_t
  - GNUTLS_CIPHER_AES_128_SIV_GCM: Added
  - GNUTLS_CIPHER_AES_256_SIV_GCM: Added
  * Rebase gnutls-FIPS-140-3-references.patch
  * Remove upstream: gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Update to 3.8.3:
  * libgnutls: Fix more timing side-channel inside RSA-PSK key
    exchange. [GNUTLS-SA-2024-01-14, CVSS: medium]
    [bsc#1218865, CVE-2024-0553]
  * libgnutls: Fix assertion failure when verifying a certificate
    chain with a cycle of cross signatures.
    [GNUTLS-SA-2024-01-09, CVSS: medium] [bsc#1218862, CVE-2024-0567]
  * libgnutls: Fix regression in handling Ed25519 keys stored in
    PKCS#11 token certtool was unable to handle Ed25519 keys
    generated on PKCS#11 with pkcs11-tool (OpenSC).
    This is a regression introduced in 3.8.2.
  * Rebase gnutls-FIPS-140-3-references.patch
  * Updated upstream gnutls.keyring</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1720785600">- FIPS: [bsc#1227671, bsc#1226731]
  * Remove not needed DSA in selfchecks in FIPS mode.
  * Add gnutls-FIPS-no_dsa_selftest.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721131200">- FIPS: bsc#1227670
  * Allow RSA signature verification with min of 2048 bit modulus.
  * Add gnutls-FIPS-rsa-min-2048.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721649600">- FIPS: bsc#1227642
  * Mark SHA1 as not allowed for signature verification in both RSA and ECDSA sigVer.
  * Add gnutls-FIPS-no-sha1-verify.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1722945600">- FIPS: bsc#1226733
  * Use full hash+sign operations, not low level primitives in PCT test.
  * Add gnutls-FIPS-full-hash_sign.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1723204800">- FIPS: bsc#1226733
  * Run pairwise consistency test only in FIPS mode
  * Backport upstream commit 5c276953c1536375fba96bc769e1cb5d3123b4a7
  * Add gnutls-pct-in-FIPS-only.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1725451200">- FIPS: bsc#1230166
  * Mark gnutls_hash_fast operations as approved in SLI.
  * Add gnutls-FIPS-gnutls_hash_fast-SLI.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725537600">- FIPS: Allow to perform the integrity check with the hmac provided
  by each library [bsc#1226724]
  * Rebase gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1726488000">- FIPS: Do not allow curve P-192 for signature or keypair verification [bsc#1227669]
  * Add gnutls-FIPS-p192-disabled.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1739534400">- Security fix [bsc#1236974, CVE-2024-12243]
  * gnutls: inefficient DER Decoding in libtasn1 could lead to remote DoS
  * Add gnutls-CVE-2024-12243.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- Fix heap buffer overread when handling the CT SCT extension during X.509
  certificate parsing [bsc#1246233, CVE-2025-32989]
  * Add patch gnutls-CVE-2025-32989.patch
- Fix double-free due to incorrect ownership handling in the export logic of
  SAN entries containing an otherName [bsc#1246232, CVE-2025-32988]
  * Add patch gnutls-CVE-2025-32988.patch
- Fix 1-byte heap buffer overflow when parsing templates with certtool
  [bsc#1246267, CVE-2025-32990]
  * Add patch gnutls-CVE-2025-32990.patch
- Fix NULL pointer dereference when 2nd Client Hello omits PSK
  [bsc#1246299, CVE-2025-6395]
  * Add patch gnutls-CVE-2025-6395.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1763985600">- Security fix bsc#1254132 CVE-2025-9820
  * Fix buffer overflow in gnutls_pkcs11_token_init
  * Added gnutls-CVE-2025-9820.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1770724800">- Security fix:
  * CVE-2025-14831: DoS via excessive resource consumption during
    certificate verification (bsc#1257960)
  * Add gnutls-CVE-2025-14831.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1771934400">- Add the functionality to allow to specify the hash algorithm for
  the PSK. This fixes a bug in the current implementation where the
  binder is always calculated with SHA256.
  * (bsc#1258083, jsc#PED-15752, jsc#PED-15753)
  * lib/psk: Add gnutls_psk_allocate_{client,server}_credentials2
  * tests/psk-file: Add testing for _credentials2 functions
  * lib/psk: add null check for binder algo
  * pre_shared_key: fix memleak when retrying with different binder algo
  * pre_shared_key: add null check on pskcred
  * Add patches:
  - gnutls-PSK-hash.patch
  - gnutls-PSK-hash-tests.patch
  - gnutls-PSK-hash-NULL-check.patch
  - gnutls-PSK-hash-NULL-check-pskcred.patch
  - gnutls-PSK-hash-fix-memleak.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1778068800">- Security fixes:
  * CVE-2026-33846: buffers: add more checks to DTLS reassembly (bsc#1263705)
  * CVE-2026-42009: lib/buffers: ensure packets have differing sequence numbers (bsc#1263708)
  * CVE-2026-33845: buffers: switch from end_offset over to frag_length (bsc#1263704)
  * CVE-2026-42010: lib/auth/rsa_psk: fix binary PSK identity lookup (bsc#1263709)
  * CVE-2026-3833: x509/name-constraints: compare domain names case-insensitive (bsc#1263707)
  * CVE-2026-42011: x509/name_constraints: fix intersecting empty constraints (bsc#1263710)
  * CVE-2026-42012: x509/hostname-verify: make URI/SRV SAN preclude CN fallback (bsc#1263711)
  * CVE-2026-42013: x509: prevent fallback on oversized SAN (bsc#1263712)
  * CVE-2026-42014: pkcs11_write: fix UAF and leak in gnutls_pkcs11_token_set_pin (bsc#1263713)
  * CVE-2026-42015: x509/pkcs12_bag: fix off-by-one in bag element bounds check (bsc#1263714)
  * CVE-2026-5260: lib/pkcs11_privkey: guard against overreading on short ciphertexts (bsc#1263715)
  * CVE-2026-5419: gnutls_cipher_decrypt3: make PKCS#7 unpadding branch free (bsc#1263716)
  * Add patches:
    gnutls-CVE-2026-33846.patch gnutls-CVE-2026-42009.patch
    gnutls-CVE-2026-33845.patch gnutls-CVE-2026-42010.patch
    gnutls-CVE-2026-3833.patch  gnutls-CVE-2026-42011.patch
    gnutls-CVE-2026-42012.patch gnutls-CVE-2026-42013.patch
    gnutls-CVE-2026-42014.patch gnutls-CVE-2026-5260.patch
    gnutls-CVE-2026-42015.patch gnutls-CVE-2026-5419.patch</changelog>
</package>
<package pkgid="b4f9ac1c782b8080b2e1dd4720a894105eaca76773edb6bd56013f57d6b96b32" name="libgnutlsxx-devel" arch="x86_64">
  <version epoch="0" ver="3.8.3" rel="150600.4.9.1"/>
  <changelog author="pmonreal@suse.com" date="1684929600">- FIPS: Skip the fixed HMAC verification for nettle, hogweed and
  gmp libraries. These calculated HMACs change for every build of
  each of these packages, we only have to verify that for gnutls.
  * Add gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch [bsc#1211476]</changelog>
  <changelog author="pmonreal@suse.com" date="1685361600">- FIPS: Fix baselibs.conf to mention libgnutls30-hmac [bsc#1211476]
  Extend also the checks in gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1691409600">- Update to version 3.8.1:
  * libgnutls: ClientHello extensions are randomized by default
    To make fingerprinting harder, TLS extensions in ClientHello
    messages are shuffled. As this behavior may cause compatibility
    issue with legacy applications that do not accept the last
    extension without payload, the behavior can be reverted with the
    %NO_SHUFFLE_EXTENSIONS priority keyword.
  * libgnutls: Add support for RFC 9258 external PSK importer.
    This enables to deploy the same PSK across multiple TLS versions
    (TLS 1.2 and TLS 1.3) in a secure manner. To use, the application
    needs to set up a callback that formats the PSK identity using
    gnutls_psk_format_imported_identity().
  * libgnutls: %GNUTLS_NO_EXTENSIONS has been renamed to
    %GNUTLS_NO_DEFAULT_EXTENSIONS.
  * libgnutls: Add additional PBKDF limit checks in FIPS mode as
    defined in SP 800-132. Minimum salt length is 128 bits and
    minimum iterations bound is 1000 for PBKDF in FIPS mode.
  * libgnutls: Add a mechanism to control whether to enforce extended
    master secret (RFC 7627). FIPS 140-3 mandates the use of TLS
    session hash (extended master secret, EMS) in TLS 1.2. To enforce
    this, a new priority keyword %FORCE_SESSION_HASH is added and if
    it is set and EMS is not set, the peer aborts the connection. This
    behavior is the default in FIPS mode, though it can be overridden
    through the configuration file with the "tls-session-hash" option.
    In either case non-EMS PRF is reported as a non-approved operation
    through the FIPS service indicator.
  * New option --attime to specify current time.
    To make testing with different timestamp to the system easier, the
    tools doing certificate verification now provide a new option
  - -attime, which takes an arbitrary time.
  * API and ABI modifications:
    gnutls_psk_client_credentials_function3: New typedef
    gnutls_psk_server_credentials_function3: New typedef
    gnutls_psk_set_server_credentials_function3: New function
    gnutls_psk_set_client_credentials_function3: New function
    gnutls_psk_format_imported_identity: New function
    GNUTLS_PSK_KEY_EXT: New enum member of gnutls_psk_key_flags
  * Rebase patches:
  - gnutls-FIPS-140-3-references.patch
  - gnutls-FIPS-jitterentropy.patch
  * Remove patches merged/fixed upstream:
  - gnutls-FIPS-PCT-DH.patch
  - gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1692619200">- tests: Fix the SRP test that fails with SIGPIPE signal return due
  to a socket being closed before using it.
  * Add gnutls-srp-test-SIGPIPE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1692705600">- Fix missing GNUTLS_NO_EXTENSIONS compatibility.
  * Upstream: gitlab.com/gnutls/gnutls/commit/abfa8634
  * Add gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to 3.8.2: [bsc#1217277, CVE-2023-5981]
  * libgnutls: Fix timing side-channel inside RSA-PSK key exchange.
    [GNUTLS-SA-2023-10-23, CVSS: medium] [CVE-2023-5981]
  * libgnutls: Add API functions to perform ECDH and DH key agreement
    The functionality has been there for a long time though they were
    not available as part of the public API.  This enables applications
    to implement custom protocols leveraging non-interactive key
    agreement with ECDH and DH.
  * libgnutls: Added support for AES-GCM-SIV ciphers (RFC 8452)
    The new algorithms GNUTLS_CIPHER_AES_128_SIV_GCM and
    GNUTLS_CIPHER_AES_256_SIV_GCM have been added to be used through
    the AEAD interface.  Note that, unlike
    GNUTLS_CIPHER_AES_{128,256}_SIV_GCM, the authentication tag is
    appended to the ciphertext, not prepended.
  * libgnutls: transparent KTLS support is extended to FreeBSD kernel
    The kernel TLS feature can now be enabled on FreeBSD as well as
    Linux when compiled with the --enable-ktls configure option.
  * gnutls-cli: New option --starttls-name
    Depending on deployment, application protocols such as XMPP may
    require a different origin address than the external address to be
    presented prior to STARTTLS negotiation.  The --starttls-name can
    be used to specify specify the addresses separately.
  * API and ABI modifications:
  - gnutls_pubkey_import_dh_raw: New function
  - gnutls_privkey_import_dh_raw: New function
  - gnutls_pubkey_export_dh_raw: New function
  - gnutls_privkey_export_dh_raw: New function
  - gnutls_x509_privkey_import_dh_raw: New function
  - gnutls_privkey_derive_secret: New function
  - GNUTLS_KEYGEN_DH: New enum member of gnutls_keygen_types_t
  - GNUTLS_CIPHER_AES_128_SIV_GCM: Added
  - GNUTLS_CIPHER_AES_256_SIV_GCM: Added
  * Rebase gnutls-FIPS-140-3-references.patch
  * Remove upstream: gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Update to 3.8.3:
  * libgnutls: Fix more timing side-channel inside RSA-PSK key
    exchange. [GNUTLS-SA-2024-01-14, CVSS: medium]
    [bsc#1218865, CVE-2024-0553]
  * libgnutls: Fix assertion failure when verifying a certificate
    chain with a cycle of cross signatures.
    [GNUTLS-SA-2024-01-09, CVSS: medium] [bsc#1218862, CVE-2024-0567]
  * libgnutls: Fix regression in handling Ed25519 keys stored in
    PKCS#11 token certtool was unable to handle Ed25519 keys
    generated on PKCS#11 with pkcs11-tool (OpenSC).
    This is a regression introduced in 3.8.2.
  * Rebase gnutls-FIPS-140-3-references.patch
  * Updated upstream gnutls.keyring</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1720785600">- FIPS: [bsc#1227671, bsc#1226731]
  * Remove not needed DSA in selfchecks in FIPS mode.
  * Add gnutls-FIPS-no_dsa_selftest.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721131200">- FIPS: bsc#1227670
  * Allow RSA signature verification with min of 2048 bit modulus.
  * Add gnutls-FIPS-rsa-min-2048.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721649600">- FIPS: bsc#1227642
  * Mark SHA1 as not allowed for signature verification in both RSA and ECDSA sigVer.
  * Add gnutls-FIPS-no-sha1-verify.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1722945600">- FIPS: bsc#1226733
  * Use full hash+sign operations, not low level primitives in PCT test.
  * Add gnutls-FIPS-full-hash_sign.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1723204800">- FIPS: bsc#1226733
  * Run pairwise consistency test only in FIPS mode
  * Backport upstream commit 5c276953c1536375fba96bc769e1cb5d3123b4a7
  * Add gnutls-pct-in-FIPS-only.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1725451200">- FIPS: bsc#1230166
  * Mark gnutls_hash_fast operations as approved in SLI.
  * Add gnutls-FIPS-gnutls_hash_fast-SLI.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725537600">- FIPS: Allow to perform the integrity check with the hmac provided
  by each library [bsc#1226724]
  * Rebase gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1726488000">- FIPS: Do not allow curve P-192 for signature or keypair verification [bsc#1227669]
  * Add gnutls-FIPS-p192-disabled.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1739534400">- Security fix [bsc#1236974, CVE-2024-12243]
  * gnutls: inefficient DER Decoding in libtasn1 could lead to remote DoS
  * Add gnutls-CVE-2024-12243.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- Fix heap buffer overread when handling the CT SCT extension during X.509
  certificate parsing [bsc#1246233, CVE-2025-32989]
  * Add patch gnutls-CVE-2025-32989.patch
- Fix double-free due to incorrect ownership handling in the export logic of
  SAN entries containing an otherName [bsc#1246232, CVE-2025-32988]
  * Add patch gnutls-CVE-2025-32988.patch
- Fix 1-byte heap buffer overflow when parsing templates with certtool
  [bsc#1246267, CVE-2025-32990]
  * Add patch gnutls-CVE-2025-32990.patch
- Fix NULL pointer dereference when 2nd Client Hello omits PSK
  [bsc#1246299, CVE-2025-6395]
  * Add patch gnutls-CVE-2025-6395.patch</changelog>
</package>
<package pkgid="409409ceb5c32de108693a816f79b329ace620f10823f82488f0c8cbddb8133a" name="libgnutlsxx30" arch="x86_64">
  <version epoch="0" ver="3.8.3" rel="150600.4.12.1"/>
  <changelog author="pmonreal@suse.com" date="1685361600">- FIPS: Fix baselibs.conf to mention libgnutls30-hmac [bsc#1211476]
  Extend also the checks in gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1691409600">- Update to version 3.8.1:
  * libgnutls: ClientHello extensions are randomized by default
    To make fingerprinting harder, TLS extensions in ClientHello
    messages are shuffled. As this behavior may cause compatibility
    issue with legacy applications that do not accept the last
    extension without payload, the behavior can be reverted with the
    %NO_SHUFFLE_EXTENSIONS priority keyword.
  * libgnutls: Add support for RFC 9258 external PSK importer.
    This enables to deploy the same PSK across multiple TLS versions
    (TLS 1.2 and TLS 1.3) in a secure manner. To use, the application
    needs to set up a callback that formats the PSK identity using
    gnutls_psk_format_imported_identity().
  * libgnutls: %GNUTLS_NO_EXTENSIONS has been renamed to
    %GNUTLS_NO_DEFAULT_EXTENSIONS.
  * libgnutls: Add additional PBKDF limit checks in FIPS mode as
    defined in SP 800-132. Minimum salt length is 128 bits and
    minimum iterations bound is 1000 for PBKDF in FIPS mode.
  * libgnutls: Add a mechanism to control whether to enforce extended
    master secret (RFC 7627). FIPS 140-3 mandates the use of TLS
    session hash (extended master secret, EMS) in TLS 1.2. To enforce
    this, a new priority keyword %FORCE_SESSION_HASH is added and if
    it is set and EMS is not set, the peer aborts the connection. This
    behavior is the default in FIPS mode, though it can be overridden
    through the configuration file with the "tls-session-hash" option.
    In either case non-EMS PRF is reported as a non-approved operation
    through the FIPS service indicator.
  * New option --attime to specify current time.
    To make testing with different timestamp to the system easier, the
    tools doing certificate verification now provide a new option
  - -attime, which takes an arbitrary time.
  * API and ABI modifications:
    gnutls_psk_client_credentials_function3: New typedef
    gnutls_psk_server_credentials_function3: New typedef
    gnutls_psk_set_server_credentials_function3: New function
    gnutls_psk_set_client_credentials_function3: New function
    gnutls_psk_format_imported_identity: New function
    GNUTLS_PSK_KEY_EXT: New enum member of gnutls_psk_key_flags
  * Rebase patches:
  - gnutls-FIPS-140-3-references.patch
  - gnutls-FIPS-jitterentropy.patch
  * Remove patches merged/fixed upstream:
  - gnutls-FIPS-PCT-DH.patch
  - gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1692619200">- tests: Fix the SRP test that fails with SIGPIPE signal return due
  to a socket being closed before using it.
  * Add gnutls-srp-test-SIGPIPE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1692705600">- Fix missing GNUTLS_NO_EXTENSIONS compatibility.
  * Upstream: gitlab.com/gnutls/gnutls/commit/abfa8634
  * Add gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to 3.8.2: [bsc#1217277, CVE-2023-5981]
  * libgnutls: Fix timing side-channel inside RSA-PSK key exchange.
    [GNUTLS-SA-2023-10-23, CVSS: medium] [CVE-2023-5981]
  * libgnutls: Add API functions to perform ECDH and DH key agreement
    The functionality has been there for a long time though they were
    not available as part of the public API.  This enables applications
    to implement custom protocols leveraging non-interactive key
    agreement with ECDH and DH.
  * libgnutls: Added support for AES-GCM-SIV ciphers (RFC 8452)
    The new algorithms GNUTLS_CIPHER_AES_128_SIV_GCM and
    GNUTLS_CIPHER_AES_256_SIV_GCM have been added to be used through
    the AEAD interface.  Note that, unlike
    GNUTLS_CIPHER_AES_{128,256}_SIV_GCM, the authentication tag is
    appended to the ciphertext, not prepended.
  * libgnutls: transparent KTLS support is extended to FreeBSD kernel
    The kernel TLS feature can now be enabled on FreeBSD as well as
    Linux when compiled with the --enable-ktls configure option.
  * gnutls-cli: New option --starttls-name
    Depending on deployment, application protocols such as XMPP may
    require a different origin address than the external address to be
    presented prior to STARTTLS negotiation.  The --starttls-name can
    be used to specify specify the addresses separately.
  * API and ABI modifications:
  - gnutls_pubkey_import_dh_raw: New function
  - gnutls_privkey_import_dh_raw: New function
  - gnutls_pubkey_export_dh_raw: New function
  - gnutls_privkey_export_dh_raw: New function
  - gnutls_x509_privkey_import_dh_raw: New function
  - gnutls_privkey_derive_secret: New function
  - GNUTLS_KEYGEN_DH: New enum member of gnutls_keygen_types_t
  - GNUTLS_CIPHER_AES_128_SIV_GCM: Added
  - GNUTLS_CIPHER_AES_256_SIV_GCM: Added
  * Rebase gnutls-FIPS-140-3-references.patch
  * Remove upstream: gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Update to 3.8.3:
  * libgnutls: Fix more timing side-channel inside RSA-PSK key
    exchange. [GNUTLS-SA-2024-01-14, CVSS: medium]
    [bsc#1218865, CVE-2024-0553]
  * libgnutls: Fix assertion failure when verifying a certificate
    chain with a cycle of cross signatures.
    [GNUTLS-SA-2024-01-09, CVSS: medium] [bsc#1218862, CVE-2024-0567]
  * libgnutls: Fix regression in handling Ed25519 keys stored in
    PKCS#11 token certtool was unable to handle Ed25519 keys
    generated on PKCS#11 with pkcs11-tool (OpenSC).
    This is a regression introduced in 3.8.2.
  * Rebase gnutls-FIPS-140-3-references.patch
  * Updated upstream gnutls.keyring</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1720785600">- FIPS: [bsc#1227671, bsc#1226731]
  * Remove not needed DSA in selfchecks in FIPS mode.
  * Add gnutls-FIPS-no_dsa_selftest.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721131200">- FIPS: bsc#1227670
  * Allow RSA signature verification with min of 2048 bit modulus.
  * Add gnutls-FIPS-rsa-min-2048.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721649600">- FIPS: bsc#1227642
  * Mark SHA1 as not allowed for signature verification in both RSA and ECDSA sigVer.
  * Add gnutls-FIPS-no-sha1-verify.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1722945600">- FIPS: bsc#1226733
  * Use full hash+sign operations, not low level primitives in PCT test.
  * Add gnutls-FIPS-full-hash_sign.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1723204800">- FIPS: bsc#1226733
  * Run pairwise consistency test only in FIPS mode
  * Backport upstream commit 5c276953c1536375fba96bc769e1cb5d3123b4a7
  * Add gnutls-pct-in-FIPS-only.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1725451200">- FIPS: bsc#1230166
  * Mark gnutls_hash_fast operations as approved in SLI.
  * Add gnutls-FIPS-gnutls_hash_fast-SLI.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725537600">- FIPS: Allow to perform the integrity check with the hmac provided
  by each library [bsc#1226724]
  * Rebase gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1726488000">- FIPS: Do not allow curve P-192 for signature or keypair verification [bsc#1227669]
  * Add gnutls-FIPS-p192-disabled.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1739534400">- Security fix [bsc#1236974, CVE-2024-12243]
  * gnutls: inefficient DER Decoding in libtasn1 could lead to remote DoS
  * Add gnutls-CVE-2024-12243.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- Fix heap buffer overread when handling the CT SCT extension during X.509
  certificate parsing [bsc#1246233, CVE-2025-32989]
  * Add patch gnutls-CVE-2025-32989.patch
- Fix double-free due to incorrect ownership handling in the export logic of
  SAN entries containing an otherName [bsc#1246232, CVE-2025-32988]
  * Add patch gnutls-CVE-2025-32988.patch
- Fix 1-byte heap buffer overflow when parsing templates with certtool
  [bsc#1246267, CVE-2025-32990]
  * Add patch gnutls-CVE-2025-32990.patch
- Fix NULL pointer dereference when 2nd Client Hello omits PSK
  [bsc#1246299, CVE-2025-6395]
  * Add patch gnutls-CVE-2025-6395.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1763985600">- Security fix bsc#1254132 CVE-2025-9820
  * Fix buffer overflow in gnutls_pkcs11_token_init
  * Added gnutls-CVE-2025-9820.patch</changelog>
</package>
<package pkgid="692f125ecaafd9778a4ed32552a90a941d7f49d53b4183a64e051d693c0f2def" name="libgnutlsxx30" arch="x86_64">
  <version epoch="0" ver="3.8.3" rel="150600.4.17.1"/>
  <changelog author="pmonreal@suse.com" date="1692619200">- tests: Fix the SRP test that fails with SIGPIPE signal return due
  to a socket being closed before using it.
  * Add gnutls-srp-test-SIGPIPE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1692705600">- Fix missing GNUTLS_NO_EXTENSIONS compatibility.
  * Upstream: gitlab.com/gnutls/gnutls/commit/abfa8634
  * Add gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to 3.8.2: [bsc#1217277, CVE-2023-5981]
  * libgnutls: Fix timing side-channel inside RSA-PSK key exchange.
    [GNUTLS-SA-2023-10-23, CVSS: medium] [CVE-2023-5981]
  * libgnutls: Add API functions to perform ECDH and DH key agreement
    The functionality has been there for a long time though they were
    not available as part of the public API.  This enables applications
    to implement custom protocols leveraging non-interactive key
    agreement with ECDH and DH.
  * libgnutls: Added support for AES-GCM-SIV ciphers (RFC 8452)
    The new algorithms GNUTLS_CIPHER_AES_128_SIV_GCM and
    GNUTLS_CIPHER_AES_256_SIV_GCM have been added to be used through
    the AEAD interface.  Note that, unlike
    GNUTLS_CIPHER_AES_{128,256}_SIV_GCM, the authentication tag is
    appended to the ciphertext, not prepended.
  * libgnutls: transparent KTLS support is extended to FreeBSD kernel
    The kernel TLS feature can now be enabled on FreeBSD as well as
    Linux when compiled with the --enable-ktls configure option.
  * gnutls-cli: New option --starttls-name
    Depending on deployment, application protocols such as XMPP may
    require a different origin address than the external address to be
    presented prior to STARTTLS negotiation.  The --starttls-name can
    be used to specify specify the addresses separately.
  * API and ABI modifications:
  - gnutls_pubkey_import_dh_raw: New function
  - gnutls_privkey_import_dh_raw: New function
  - gnutls_pubkey_export_dh_raw: New function
  - gnutls_privkey_export_dh_raw: New function
  - gnutls_x509_privkey_import_dh_raw: New function
  - gnutls_privkey_derive_secret: New function
  - GNUTLS_KEYGEN_DH: New enum member of gnutls_keygen_types_t
  - GNUTLS_CIPHER_AES_128_SIV_GCM: Added
  - GNUTLS_CIPHER_AES_256_SIV_GCM: Added
  * Rebase gnutls-FIPS-140-3-references.patch
  * Remove upstream: gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Update to 3.8.3:
  * libgnutls: Fix more timing side-channel inside RSA-PSK key
    exchange. [GNUTLS-SA-2024-01-14, CVSS: medium]
    [bsc#1218865, CVE-2024-0553]
  * libgnutls: Fix assertion failure when verifying a certificate
    chain with a cycle of cross signatures.
    [GNUTLS-SA-2024-01-09, CVSS: medium] [bsc#1218862, CVE-2024-0567]
  * libgnutls: Fix regression in handling Ed25519 keys stored in
    PKCS#11 token certtool was unable to handle Ed25519 keys
    generated on PKCS#11 with pkcs11-tool (OpenSC).
    This is a regression introduced in 3.8.2.
  * Rebase gnutls-FIPS-140-3-references.patch
  * Updated upstream gnutls.keyring</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1720785600">- FIPS: [bsc#1227671, bsc#1226731]
  * Remove not needed DSA in selfchecks in FIPS mode.
  * Add gnutls-FIPS-no_dsa_selftest.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721131200">- FIPS: bsc#1227670
  * Allow RSA signature verification with min of 2048 bit modulus.
  * Add gnutls-FIPS-rsa-min-2048.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721649600">- FIPS: bsc#1227642
  * Mark SHA1 as not allowed for signature verification in both RSA and ECDSA sigVer.
  * Add gnutls-FIPS-no-sha1-verify.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1722945600">- FIPS: bsc#1226733
  * Use full hash+sign operations, not low level primitives in PCT test.
  * Add gnutls-FIPS-full-hash_sign.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1723204800">- FIPS: bsc#1226733
  * Run pairwise consistency test only in FIPS mode
  * Backport upstream commit 5c276953c1536375fba96bc769e1cb5d3123b4a7
  * Add gnutls-pct-in-FIPS-only.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1725451200">- FIPS: bsc#1230166
  * Mark gnutls_hash_fast operations as approved in SLI.
  * Add gnutls-FIPS-gnutls_hash_fast-SLI.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725537600">- FIPS: Allow to perform the integrity check with the hmac provided
  by each library [bsc#1226724]
  * Rebase gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1726488000">- FIPS: Do not allow curve P-192 for signature or keypair verification [bsc#1227669]
  * Add gnutls-FIPS-p192-disabled.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1739534400">- Security fix [bsc#1236974, CVE-2024-12243]
  * gnutls: inefficient DER Decoding in libtasn1 could lead to remote DoS
  * Add gnutls-CVE-2024-12243.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- Fix heap buffer overread when handling the CT SCT extension during X.509
  certificate parsing [bsc#1246233, CVE-2025-32989]
  * Add patch gnutls-CVE-2025-32989.patch
- Fix double-free due to incorrect ownership handling in the export logic of
  SAN entries containing an otherName [bsc#1246232, CVE-2025-32988]
  * Add patch gnutls-CVE-2025-32988.patch
- Fix 1-byte heap buffer overflow when parsing templates with certtool
  [bsc#1246267, CVE-2025-32990]
  * Add patch gnutls-CVE-2025-32990.patch
- Fix NULL pointer dereference when 2nd Client Hello omits PSK
  [bsc#1246299, CVE-2025-6395]
  * Add patch gnutls-CVE-2025-6395.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1763985600">- Security fix bsc#1254132 CVE-2025-9820
  * Fix buffer overflow in gnutls_pkcs11_token_init
  * Added gnutls-CVE-2025-9820.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1770724800">- Security fix:
  * CVE-2025-14831: DoS via excessive resource consumption during
    certificate verification (bsc#1257960)
  * Add gnutls-CVE-2025-14831.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1771934400">- Add the functionality to allow to specify the hash algorithm for
  the PSK. This fixes a bug in the current implementation where the
  binder is always calculated with SHA256.
  * (bsc#1258083, jsc#PED-15752, jsc#PED-15753)
  * lib/psk: Add gnutls_psk_allocate_{client,server}_credentials2
  * tests/psk-file: Add testing for _credentials2 functions
  * lib/psk: add null check for binder algo
  * pre_shared_key: fix memleak when retrying with different binder algo
  * pre_shared_key: add null check on pskcred
  * Add patches:
  - gnutls-PSK-hash.patch
  - gnutls-PSK-hash-tests.patch
  - gnutls-PSK-hash-NULL-check.patch
  - gnutls-PSK-hash-NULL-check-pskcred.patch
  - gnutls-PSK-hash-fix-memleak.patch</changelog>
</package>
<package pkgid="f2cbd37dba4f6b2a86849aee2d5b9173706c31e6548599cb10fd7515bec1757e" name="libgnutlsxx30" arch="x86_64">
  <version epoch="0" ver="3.8.3" rel="150600.4.20.1"/>
  <changelog author="pmonreal@suse.com" date="1692705600">- Fix missing GNUTLS_NO_EXTENSIONS compatibility.
  * Upstream: gitlab.com/gnutls/gnutls/commit/abfa8634
  * Add gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to 3.8.2: [bsc#1217277, CVE-2023-5981]
  * libgnutls: Fix timing side-channel inside RSA-PSK key exchange.
    [GNUTLS-SA-2023-10-23, CVSS: medium] [CVE-2023-5981]
  * libgnutls: Add API functions to perform ECDH and DH key agreement
    The functionality has been there for a long time though they were
    not available as part of the public API.  This enables applications
    to implement custom protocols leveraging non-interactive key
    agreement with ECDH and DH.
  * libgnutls: Added support for AES-GCM-SIV ciphers (RFC 8452)
    The new algorithms GNUTLS_CIPHER_AES_128_SIV_GCM and
    GNUTLS_CIPHER_AES_256_SIV_GCM have been added to be used through
    the AEAD interface.  Note that, unlike
    GNUTLS_CIPHER_AES_{128,256}_SIV_GCM, the authentication tag is
    appended to the ciphertext, not prepended.
  * libgnutls: transparent KTLS support is extended to FreeBSD kernel
    The kernel TLS feature can now be enabled on FreeBSD as well as
    Linux when compiled with the --enable-ktls configure option.
  * gnutls-cli: New option --starttls-name
    Depending on deployment, application protocols such as XMPP may
    require a different origin address than the external address to be
    presented prior to STARTTLS negotiation.  The --starttls-name can
    be used to specify specify the addresses separately.
  * API and ABI modifications:
  - gnutls_pubkey_import_dh_raw: New function
  - gnutls_privkey_import_dh_raw: New function
  - gnutls_pubkey_export_dh_raw: New function
  - gnutls_privkey_export_dh_raw: New function
  - gnutls_x509_privkey_import_dh_raw: New function
  - gnutls_privkey_derive_secret: New function
  - GNUTLS_KEYGEN_DH: New enum member of gnutls_keygen_types_t
  - GNUTLS_CIPHER_AES_128_SIV_GCM: Added
  - GNUTLS_CIPHER_AES_256_SIV_GCM: Added
  * Rebase gnutls-FIPS-140-3-references.patch
  * Remove upstream: gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Update to 3.8.3:
  * libgnutls: Fix more timing side-channel inside RSA-PSK key
    exchange. [GNUTLS-SA-2024-01-14, CVSS: medium]
    [bsc#1218865, CVE-2024-0553]
  * libgnutls: Fix assertion failure when verifying a certificate
    chain with a cycle of cross signatures.
    [GNUTLS-SA-2024-01-09, CVSS: medium] [bsc#1218862, CVE-2024-0567]
  * libgnutls: Fix regression in handling Ed25519 keys stored in
    PKCS#11 token certtool was unable to handle Ed25519 keys
    generated on PKCS#11 with pkcs11-tool (OpenSC).
    This is a regression introduced in 3.8.2.
  * Rebase gnutls-FIPS-140-3-references.patch
  * Updated upstream gnutls.keyring</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1720785600">- FIPS: [bsc#1227671, bsc#1226731]
  * Remove not needed DSA in selfchecks in FIPS mode.
  * Add gnutls-FIPS-no_dsa_selftest.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721131200">- FIPS: bsc#1227670
  * Allow RSA signature verification with min of 2048 bit modulus.
  * Add gnutls-FIPS-rsa-min-2048.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721649600">- FIPS: bsc#1227642
  * Mark SHA1 as not allowed for signature verification in both RSA and ECDSA sigVer.
  * Add gnutls-FIPS-no-sha1-verify.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1722945600">- FIPS: bsc#1226733
  * Use full hash+sign operations, not low level primitives in PCT test.
  * Add gnutls-FIPS-full-hash_sign.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1723204800">- FIPS: bsc#1226733
  * Run pairwise consistency test only in FIPS mode
  * Backport upstream commit 5c276953c1536375fba96bc769e1cb5d3123b4a7
  * Add gnutls-pct-in-FIPS-only.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1725451200">- FIPS: bsc#1230166
  * Mark gnutls_hash_fast operations as approved in SLI.
  * Add gnutls-FIPS-gnutls_hash_fast-SLI.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725537600">- FIPS: Allow to perform the integrity check with the hmac provided
  by each library [bsc#1226724]
  * Rebase gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1726488000">- FIPS: Do not allow curve P-192 for signature or keypair verification [bsc#1227669]
  * Add gnutls-FIPS-p192-disabled.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1739534400">- Security fix [bsc#1236974, CVE-2024-12243]
  * gnutls: inefficient DER Decoding in libtasn1 could lead to remote DoS
  * Add gnutls-CVE-2024-12243.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- Fix heap buffer overread when handling the CT SCT extension during X.509
  certificate parsing [bsc#1246233, CVE-2025-32989]
  * Add patch gnutls-CVE-2025-32989.patch
- Fix double-free due to incorrect ownership handling in the export logic of
  SAN entries containing an otherName [bsc#1246232, CVE-2025-32988]
  * Add patch gnutls-CVE-2025-32988.patch
- Fix 1-byte heap buffer overflow when parsing templates with certtool
  [bsc#1246267, CVE-2025-32990]
  * Add patch gnutls-CVE-2025-32990.patch
- Fix NULL pointer dereference when 2nd Client Hello omits PSK
  [bsc#1246299, CVE-2025-6395]
  * Add patch gnutls-CVE-2025-6395.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1763985600">- Security fix bsc#1254132 CVE-2025-9820
  * Fix buffer overflow in gnutls_pkcs11_token_init
  * Added gnutls-CVE-2025-9820.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1770724800">- Security fix:
  * CVE-2025-14831: DoS via excessive resource consumption during
    certificate verification (bsc#1257960)
  * Add gnutls-CVE-2025-14831.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1771934400">- Add the functionality to allow to specify the hash algorithm for
  the PSK. This fixes a bug in the current implementation where the
  binder is always calculated with SHA256.
  * (bsc#1258083, jsc#PED-15752, jsc#PED-15753)
  * lib/psk: Add gnutls_psk_allocate_{client,server}_credentials2
  * tests/psk-file: Add testing for _credentials2 functions
  * lib/psk: add null check for binder algo
  * pre_shared_key: fix memleak when retrying with different binder algo
  * pre_shared_key: add null check on pskcred
  * Add patches:
  - gnutls-PSK-hash.patch
  - gnutls-PSK-hash-tests.patch
  - gnutls-PSK-hash-NULL-check.patch
  - gnutls-PSK-hash-NULL-check-pskcred.patch
  - gnutls-PSK-hash-fix-memleak.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1778068800">- Security fixes:
  * CVE-2026-33846: buffers: add more checks to DTLS reassembly (bsc#1263705)
  * CVE-2026-42009: lib/buffers: ensure packets have differing sequence numbers (bsc#1263708)
  * CVE-2026-33845: buffers: switch from end_offset over to frag_length (bsc#1263704)
  * CVE-2026-42010: lib/auth/rsa_psk: fix binary PSK identity lookup (bsc#1263709)
  * CVE-2026-3833: x509/name-constraints: compare domain names case-insensitive (bsc#1263707)
  * CVE-2026-42011: x509/name_constraints: fix intersecting empty constraints (bsc#1263710)
  * CVE-2026-42012: x509/hostname-verify: make URI/SRV SAN preclude CN fallback (bsc#1263711)
  * CVE-2026-42013: x509: prevent fallback on oversized SAN (bsc#1263712)
  * CVE-2026-42014: pkcs11_write: fix UAF and leak in gnutls_pkcs11_token_set_pin (bsc#1263713)
  * CVE-2026-42015: x509/pkcs12_bag: fix off-by-one in bag element bounds check (bsc#1263714)
  * CVE-2026-5260: lib/pkcs11_privkey: guard against overreading on short ciphertexts (bsc#1263715)
  * CVE-2026-5419: gnutls_cipher_decrypt3: make PKCS#7 unpadding branch free (bsc#1263716)
  * Add patches:
    gnutls-CVE-2026-33846.patch gnutls-CVE-2026-42009.patch
    gnutls-CVE-2026-33845.patch gnutls-CVE-2026-42010.patch
    gnutls-CVE-2026-3833.patch  gnutls-CVE-2026-42011.patch
    gnutls-CVE-2026-42012.patch gnutls-CVE-2026-42013.patch
    gnutls-CVE-2026-42014.patch gnutls-CVE-2026-5260.patch
    gnutls-CVE-2026-42015.patch gnutls-CVE-2026-5419.patch</changelog>
</package>
<package pkgid="5a22afbedf2d41bf9f7681c4ed364af7a73b82cfb0e2ea75a241fb9bc554b2bd" name="libgnutlsxx30" arch="x86_64">
  <version epoch="0" ver="3.8.3" rel="150600.4.9.1"/>
  <changelog author="pmonreal@suse.com" date="1684929600">- FIPS: Skip the fixed HMAC verification for nettle, hogweed and
  gmp libraries. These calculated HMACs change for every build of
  each of these packages, we only have to verify that for gnutls.
  * Add gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch [bsc#1211476]</changelog>
  <changelog author="pmonreal@suse.com" date="1685361600">- FIPS: Fix baselibs.conf to mention libgnutls30-hmac [bsc#1211476]
  Extend also the checks in gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1691409600">- Update to version 3.8.1:
  * libgnutls: ClientHello extensions are randomized by default
    To make fingerprinting harder, TLS extensions in ClientHello
    messages are shuffled. As this behavior may cause compatibility
    issue with legacy applications that do not accept the last
    extension without payload, the behavior can be reverted with the
    %NO_SHUFFLE_EXTENSIONS priority keyword.
  * libgnutls: Add support for RFC 9258 external PSK importer.
    This enables to deploy the same PSK across multiple TLS versions
    (TLS 1.2 and TLS 1.3) in a secure manner. To use, the application
    needs to set up a callback that formats the PSK identity using
    gnutls_psk_format_imported_identity().
  * libgnutls: %GNUTLS_NO_EXTENSIONS has been renamed to
    %GNUTLS_NO_DEFAULT_EXTENSIONS.
  * libgnutls: Add additional PBKDF limit checks in FIPS mode as
    defined in SP 800-132. Minimum salt length is 128 bits and
    minimum iterations bound is 1000 for PBKDF in FIPS mode.
  * libgnutls: Add a mechanism to control whether to enforce extended
    master secret (RFC 7627). FIPS 140-3 mandates the use of TLS
    session hash (extended master secret, EMS) in TLS 1.2. To enforce
    this, a new priority keyword %FORCE_SESSION_HASH is added and if
    it is set and EMS is not set, the peer aborts the connection. This
    behavior is the default in FIPS mode, though it can be overridden
    through the configuration file with the "tls-session-hash" option.
    In either case non-EMS PRF is reported as a non-approved operation
    through the FIPS service indicator.
  * New option --attime to specify current time.
    To make testing with different timestamp to the system easier, the
    tools doing certificate verification now provide a new option
  - -attime, which takes an arbitrary time.
  * API and ABI modifications:
    gnutls_psk_client_credentials_function3: New typedef
    gnutls_psk_server_credentials_function3: New typedef
    gnutls_psk_set_server_credentials_function3: New function
    gnutls_psk_set_client_credentials_function3: New function
    gnutls_psk_format_imported_identity: New function
    GNUTLS_PSK_KEY_EXT: New enum member of gnutls_psk_key_flags
  * Rebase patches:
  - gnutls-FIPS-140-3-references.patch
  - gnutls-FIPS-jitterentropy.patch
  * Remove patches merged/fixed upstream:
  - gnutls-FIPS-PCT-DH.patch
  - gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1692619200">- tests: Fix the SRP test that fails with SIGPIPE signal return due
  to a socket being closed before using it.
  * Add gnutls-srp-test-SIGPIPE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1692705600">- Fix missing GNUTLS_NO_EXTENSIONS compatibility.
  * Upstream: gitlab.com/gnutls/gnutls/commit/abfa8634
  * Add gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700222400">- Update to 3.8.2: [bsc#1217277, CVE-2023-5981]
  * libgnutls: Fix timing side-channel inside RSA-PSK key exchange.
    [GNUTLS-SA-2023-10-23, CVSS: medium] [CVE-2023-5981]
  * libgnutls: Add API functions to perform ECDH and DH key agreement
    The functionality has been there for a long time though they were
    not available as part of the public API.  This enables applications
    to implement custom protocols leveraging non-interactive key
    agreement with ECDH and DH.
  * libgnutls: Added support for AES-GCM-SIV ciphers (RFC 8452)
    The new algorithms GNUTLS_CIPHER_AES_128_SIV_GCM and
    GNUTLS_CIPHER_AES_256_SIV_GCM have been added to be used through
    the AEAD interface.  Note that, unlike
    GNUTLS_CIPHER_AES_{128,256}_SIV_GCM, the authentication tag is
    appended to the ciphertext, not prepended.
  * libgnutls: transparent KTLS support is extended to FreeBSD kernel
    The kernel TLS feature can now be enabled on FreeBSD as well as
    Linux when compiled with the --enable-ktls configure option.
  * gnutls-cli: New option --starttls-name
    Depending on deployment, application protocols such as XMPP may
    require a different origin address than the external address to be
    presented prior to STARTTLS negotiation.  The --starttls-name can
    be used to specify specify the addresses separately.
  * API and ABI modifications:
  - gnutls_pubkey_import_dh_raw: New function
  - gnutls_privkey_import_dh_raw: New function
  - gnutls_pubkey_export_dh_raw: New function
  - gnutls_privkey_export_dh_raw: New function
  - gnutls_x509_privkey_import_dh_raw: New function
  - gnutls_privkey_derive_secret: New function
  - GNUTLS_KEYGEN_DH: New enum member of gnutls_keygen_types_t
  - GNUTLS_CIPHER_AES_128_SIV_GCM: Added
  - GNUTLS_CIPHER_AES_256_SIV_GCM: Added
  * Rebase gnutls-FIPS-140-3-references.patch
  * Remove upstream: gnutls-GNUTLS_NO_EXTENSIONS-compatibility.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Update to 3.8.3:
  * libgnutls: Fix more timing side-channel inside RSA-PSK key
    exchange. [GNUTLS-SA-2024-01-14, CVSS: medium]
    [bsc#1218865, CVE-2024-0553]
  * libgnutls: Fix assertion failure when verifying a certificate
    chain with a cycle of cross signatures.
    [GNUTLS-SA-2024-01-09, CVSS: medium] [bsc#1218862, CVE-2024-0567]
  * libgnutls: Fix regression in handling Ed25519 keys stored in
    PKCS#11 token certtool was unable to handle Ed25519 keys
    generated on PKCS#11 with pkcs11-tool (OpenSC).
    This is a regression introduced in 3.8.2.
  * Rebase gnutls-FIPS-140-3-references.patch
  * Updated upstream gnutls.keyring</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1720785600">- FIPS: [bsc#1227671, bsc#1226731]
  * Remove not needed DSA in selfchecks in FIPS mode.
  * Add gnutls-FIPS-no_dsa_selftest.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721131200">- FIPS: bsc#1227670
  * Allow RSA signature verification with min of 2048 bit modulus.
  * Add gnutls-FIPS-rsa-min-2048.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1721649600">- FIPS: bsc#1227642
  * Mark SHA1 as not allowed for signature verification in both RSA and ECDSA sigVer.
  * Add gnutls-FIPS-no-sha1-verify.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1722945600">- FIPS: bsc#1226733
  * Use full hash+sign operations, not low level primitives in PCT test.
  * Add gnutls-FIPS-full-hash_sign.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1723204800">- FIPS: bsc#1226733
  * Run pairwise consistency test only in FIPS mode
  * Backport upstream commit 5c276953c1536375fba96bc769e1cb5d3123b4a7
  * Add gnutls-pct-in-FIPS-only.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1725451200">- FIPS: bsc#1230166
  * Mark gnutls_hash_fast operations as approved in SLI.
  * Add gnutls-FIPS-gnutls_hash_fast-SLI.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725537600">- FIPS: Allow to perform the integrity check with the hmac provided
  by each library [bsc#1226724]
  * Rebase gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1726488000">- FIPS: Do not allow curve P-192 for signature or keypair verification [bsc#1227669]
  * Add gnutls-FIPS-p192-disabled.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1739534400">- Security fix [bsc#1236974, CVE-2024-12243]
  * gnutls: inefficient DER Decoding in libtasn1 could lead to remote DoS
  * Add gnutls-CVE-2024-12243.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- Fix heap buffer overread when handling the CT SCT extension during X.509
  certificate parsing [bsc#1246233, CVE-2025-32989]
  * Add patch gnutls-CVE-2025-32989.patch
- Fix double-free due to incorrect ownership handling in the export logic of
  SAN entries containing an otherName [bsc#1246232, CVE-2025-32988]
  * Add patch gnutls-CVE-2025-32988.patch
- Fix 1-byte heap buffer overflow when parsing templates with certtool
  [bsc#1246267, CVE-2025-32990]
  * Add patch gnutls-CVE-2025-32990.patch
- Fix NULL pointer dereference when 2nd Client Hello omits PSK
  [bsc#1246299, CVE-2025-6395]
  * Add patch gnutls-CVE-2025-6395.patch</changelog>
</package>
<package pkgid="31fec5410333e68ab0164875cae7986b8421915c2913d379ce1635fde4f01d94" name="libgobject-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.16.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828801">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828802">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828804">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
</package>
<package pkgid="ced65d54a0ae74554b769cc732ff9ca3701cbbb13c90878b10f105548f209c20" name="libgobject-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.22.1"/>
  <changelog author="luc14n0@opensuse.org" date="1693828800">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828802">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828803">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
</package>
<package pkgid="0b3ebc06ec947ebcae9d5a2749e63528a02029fef8edd209e4718dcae5e049d7" name="libgobject-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.25.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
</package>
<package pkgid="a99dd1e4a401a251dbb817b5e9b5ee7c66ca60fb942ca030fea9dc4ecc07ef10" name="libgobject-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.28.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828801">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
  <changelog author="mgorse@suse.com" date="1768996800">- Add glib2-CVE-2026-0988.patch: fix a potential integer overflow
  in g_buffered_input_stream_peek (bsc#1257049 CVE-2026-0988
  glgo#GNOME/glib#3851).</changelog>
</package>
<package pkgid="6a7e0a10d97ed79f01a99391f66d8fc92a0c5eb62e32b902624b9e146e7ed220" name="libgobject-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.35.1"/>
  <changelog author="luc14n0@opensuse.org" date="1693828800">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
  <changelog author="mgorse@suse.com" date="1768996800">- Add glib2-CVE-2026-0988.patch: fix a potential integer overflow
  in g_buffered_input_stream_peek (bsc#1257049 CVE-2026-0988
  glgo#GNOME/glib#3851).</changelog>
  <changelog author="mgorse@suse.com" date="1769515200">- Add CVE fixes:
  + glib2-CVE-2026-1484.patch (bsc#1257355 CVE-2026-1484
    glgo#GNOME/glib!4979).
  + glib2-CVE-2026-1485.patch (bsc#1257354 CVE-2026-1485
    glgo#GNOME/glib!4981).
  + glib2-CVE-2026-1489.patch (bsc#1257353 CVE-2026-1489
    glgo#GNOME/glib!4984).</changelog>
</package>
<package pkgid="638d47c5fc81f6338e45abde40d79ea60eaec6bd5434f412dd2b0bd6df405849" name="libgobject-2_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.16.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828801">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828802">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828804">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
</package>
<package pkgid="074f22c3c307093ee7f8923386b521729d8ee41a0a38a18ad492d9245aad0034" name="libgobject-2_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.22.1"/>
  <changelog author="luc14n0@opensuse.org" date="1693828800">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828802">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828803">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
</package>
<package pkgid="ddc93967169992a5ab90d57c8330769b9a73d63a240c526c35979e3762a6a664" name="libgobject-2_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.25.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
</package>
<package pkgid="4581721421cd307530ac109f548e41c492aec170a30e7bf893c453bcc9d2d9e7" name="libgobject-2_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.28.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828801">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
  <changelog author="mgorse@suse.com" date="1768996800">- Add glib2-CVE-2026-0988.patch: fix a potential integer overflow
  in g_buffered_input_stream_peek (bsc#1257049 CVE-2026-0988
  glgo#GNOME/glib#3851).</changelog>
</package>
<package pkgid="29e38c841e2db0000e73c21d41c58b0e423b0e8c425a04dfbc973aa4fe9bda99" name="libgobject-2_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.35.1"/>
  <changelog author="luc14n0@opensuse.org" date="1693828800">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
  <changelog author="mgorse@suse.com" date="1768996800">- Add glib2-CVE-2026-0988.patch: fix a potential integer overflow
  in g_buffered_input_stream_peek (bsc#1257049 CVE-2026-0988
  glgo#GNOME/glib#3851).</changelog>
  <changelog author="mgorse@suse.com" date="1769515200">- Add CVE fixes:
  + glib2-CVE-2026-1484.patch (bsc#1257355 CVE-2026-1484
    glgo#GNOME/glib!4979).
  + glib2-CVE-2026-1485.patch (bsc#1257354 CVE-2026-1485
    glgo#GNOME/glib!4981).
  + glib2-CVE-2026-1489.patch (bsc#1257353 CVE-2026-1489
    glgo#GNOME/glib!4984).</changelog>
</package>
<package pkgid="cf7b0dedecbf13d3255e8d38eafd950c8d9e4443fd44ba8541d905777fbd9154" name="libgomp1" arch="x86_64">
  <version epoch="0" ver="14.3.0+git11799" rel="150000.1.11.1"/>
  <changelog author="rguenther@suse.com" date="1728475200">- Update to gcc-14 branch head, 4af44f2cf7d281f3e4f3957ef, git10750
  * includes libstdc++6 fix for parsing tzdata 2024b [gcc#116657]
- Add gcc14-pr116629.patch to fix ICE with LTO building openvino
  on aarch64 [boo#1230262]</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1732968000">- Add loongarch64 to asan_arch, atomic_arch,
  itm_arch, lsan_arch, tsan_arch and ubsan_arch
- Add larchintrin.h, lasxintrin.h and lsxintrin.h
  headers to gccXY main package in %files section
- Set build_primary_64bit to 1 for loongarch64</changelog>
  <changelog author="adrian@suse.de" date="1733140800">- disable go on loongarch64 for now</changelog>
  <changelog author="mardnh@gmx.de" date="1736078400">- Switch to glibc based cross-compiler for target hppa</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Define ALT_CC_UNDER_TEST and ALT_CXX_UNDER_TEST for compat tests</changelog>
  <changelog author="rguenther@suse.com" date="1738152000">- For cross compilers require the same or newer binutils, newlib
  or cross-glibc that was used at build time.  [bsc#1232526]</changelog>
  <changelog author="rguenther@suse.com" date="1738843200">- Adjust cross compiler requirements to use %requires_ge
- Fix condition on whether to enable plugins or JIT support to
  not check sle_version which is not defined in SLFO but to check
  is_opensuse and suse_version instead.
- Add gcc14-pr118780.patch to make the SLFO config work.</changelog>
  <changelog author="rguenther@suse.com" date="1740052800">- Update to gcc-14 branch head, 9ffecde121af883b60bbe60d0, git11321
  * fixes reported ICE in [bsc#1237442]
- Drop gcc14-pr116629.patch now backported to the branch.</changelog>
  <changelog author="rguenther@suse.com" date="1741608000">- Disable profiling during build when %want_reproducible_builds is set
  [bsc#1238491]</changelog>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
</package>
<package pkgid="3d3b6cfb5725e1d2ac2be3f8eee31a75fec78120168314365c5baa5632b08d51" name="libgomp1" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.3.3"/>
  <changelog author="rguenther@suse.com" date="1743163200">- Update to GCC trunk head, 15.0.1+git9001
  * includes -msplit-patch-nops required for user-space livepatching
    on powerpc
  * includes fix for Ada build with --enable-host-pie
- Adjust for removed avx10_2roundingintrin.h intrinsic header.
- Build GCC executables PIE on SLE.  [bsc#1239938]</changelog>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="ea3c3531a4b528ba12765dcfef323acaae00d3a8c2e60651b362aeef1d5c2628" name="libgomp1" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.6.1"/>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
</package>
<package pkgid="2a3bdc4040b8634a8421206cf0cc6731cfa4a2e02a0c6a9cf4e0fca49d2fa96f" name="libgomp1" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.9.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc14-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="61be99ca204c4c56e404054c4ebbac2236801cff7808578ec23eabee4491e5f5" name="libgomp1-32bit" arch="x86_64">
  <version epoch="0" ver="14.3.0+git11799" rel="150000.1.11.1"/>
  <changelog author="rguenther@suse.com" date="1728475200">- Update to gcc-14 branch head, 4af44f2cf7d281f3e4f3957ef, git10750
  * includes libstdc++6 fix for parsing tzdata 2024b [gcc#116657]
- Add gcc14-pr116629.patch to fix ICE with LTO building openvino
  on aarch64 [boo#1230262]</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1732968000">- Add loongarch64 to asan_arch, atomic_arch,
  itm_arch, lsan_arch, tsan_arch and ubsan_arch
- Add larchintrin.h, lasxintrin.h and lsxintrin.h
  headers to gccXY main package in %files section
- Set build_primary_64bit to 1 for loongarch64</changelog>
  <changelog author="adrian@suse.de" date="1733140800">- disable go on loongarch64 for now</changelog>
  <changelog author="mardnh@gmx.de" date="1736078400">- Switch to glibc based cross-compiler for target hppa</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Define ALT_CC_UNDER_TEST and ALT_CXX_UNDER_TEST for compat tests</changelog>
  <changelog author="rguenther@suse.com" date="1738152000">- For cross compilers require the same or newer binutils, newlib
  or cross-glibc that was used at build time.  [bsc#1232526]</changelog>
  <changelog author="rguenther@suse.com" date="1738843200">- Adjust cross compiler requirements to use %requires_ge
- Fix condition on whether to enable plugins or JIT support to
  not check sle_version which is not defined in SLFO but to check
  is_opensuse and suse_version instead.
- Add gcc14-pr118780.patch to make the SLFO config work.</changelog>
  <changelog author="rguenther@suse.com" date="1740052800">- Update to gcc-14 branch head, 9ffecde121af883b60bbe60d0, git11321
  * fixes reported ICE in [bsc#1237442]
- Drop gcc14-pr116629.patch now backported to the branch.</changelog>
  <changelog author="rguenther@suse.com" date="1741608000">- Disable profiling during build when %want_reproducible_builds is set
  [bsc#1238491]</changelog>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
</package>
<package pkgid="92fbf9d9bd7c69b04d8cd16fc1b4eb6c4f3ec0394777c9252a393fea81370702" name="libgomp1-32bit" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.3.3"/>
  <changelog author="rguenther@suse.com" date="1743163200">- Update to GCC trunk head, 15.0.1+git9001
  * includes -msplit-patch-nops required for user-space livepatching
    on powerpc
  * includes fix for Ada build with --enable-host-pie
- Adjust for removed avx10_2roundingintrin.h intrinsic header.
- Build GCC executables PIE on SLE.  [bsc#1239938]</changelog>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="b5b965a0266471f51ca5fcfc033be509dddbcfb1645af80598ce1940aa81d424" name="libgomp1-32bit" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.6.1"/>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
</package>
<package pkgid="d97edf9168ec63c01fe6d923bd85ca9bcb317d32fcbe0b00929d82898aa2c561" name="libgomp1-32bit" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.9.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc14-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="ec0228b47f7d41238b6da67bbf09d373ddba5d0ce92ed5330309ebc1ed98f48d" name="libgpgme-devel" arch="x86_64">
  <version epoch="0" ver="1.23.0" rel="150600.3.5.1"/>
  <changelog author="code@bnavigator.de" date="1616673600">- Can't assume non-existence of python38 macros in Leap.
  gh#openSUSE/python-rpm-macros#107
  Test for suse_version instead. Only Tumbleweed has and needs the
  python_subpackage_only support.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1625659200">- gpgme 1.16.0:
  * New context flag "cert-expire"
  * New data flags "io-buffer-size" and "sensitive"
  * cpp,qt: Add support for trust signatures
  * qt: Add support for flags in LDAP server options
  * qt: Fix too high memory consumption due to QProcess
  * qt: Do not set empty base DN as query of keyserver URL
  * qt: Extend SignKeyJob to create signatures with expiration date
  * python: New optional parameter filter_signatures for decrypt
- run all tests again
- add patches to fix tests:
  * gpgme-1.16.0-Use-after-free-in-t-edit-sign-test.patch
  * gpgme-1.16.0-t-various-testSignKeyWithExpiration-32-bit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1628164800">- Fix build with glibc 2.34: [bsc#1189089]
  * Use glibc's closefrom.
  * Add gpgme-use-glibc-closefrom.patch</changelog>
  <changelog author="code@bnavigator.de" date="1640347200">- Add patches to support building bindings packages for
  Python 3.10
  * gpgme-D545-python310.patch -- https://dev.gnupg.org/D545
  * gpgme-D546-python310.patch -- https://dev.gnupg.org/D546</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1660824000">- gpgme 1.18.0
  * New keylist mode to force refresh via external methods
  * The keylist operations now create an import result to report the
    result of the locate keylist modes
  * core: Return BAD_PASSPHRASE error code on symmetric decryption
    failure
  * cpp, qt: Do not export internal symbols anymore
  * cpp, qt: Support revocation of own OpenPGP keys
  * qt: The file name of (signed and) encrypted data can now be set
  * cpp, qt: Support setting the primary user ID
  * python: Fix segv(NULL) when inspecting contect after exeception
- includes changes from version 1.17.1:
  * qt: Fix a bug in the ABI compatibility of 1.17.0
- includes changes from 1.17.0:
  * New context flag "key-origin"
  * New context flag "import-filter"
  * New export mode to export secret subkeys
  * Detect errors during the export of secret keys
  * New function gpgme_op_receive_keys to import keys from a keyserver
    without first running a key listing
  * Detect bad passphrase error in certificate import
  * Allow setting --key-origin when importing keys
  * Support components "keyboxd", "gpg-agent", "scdaemon", "dirmngr",
    "pinentry", and "socketdir" in gpgme_get_dirinfo
  * Under Unix use poll(2) instead of select(2), when available.
  * Fix results returned by gpgme_data_* functions
  * Support closefrom also for glibc
    (drop upstream gpgme-use-glibc-closefrom.patch
  * cpp,qt: Add support for export of secret keys and secret subkeys.
  * cpp,qt: Support for adding existing subkeys to other keys
  * qt: Extend ChangeExpiryJob to change expiration of primary key
    and of subkeys at the same time
  * qt: Support WKD lookup without implicit import
  * qt: Allow specifying an import filter when importing keys
  * qt: Allow retrieving the default value of a config entry
- drop patches included upstream
  * gpgme-1.16.0-Use-after-free-in-t-edit-sign-test.patch
  * gpgme-1.16.0-t-various-testSignKeyWithExpiration-32-bit.patch
- add patches to fix tests:
  * gpgme-1.18.0-T6137-qt_test.patch</changelog>
  <changelog author="code@bnavigator.de" date="1667908800">- Add gpgme-suse-nobetasuffix.patch
  * remove "-unknown" suffix from version string
  * boo#1205197</changelog>
  <changelog author="dmueller@suse.com" date="1674302400">- add python311.patch to build language bindings for python 3.11</changelog>
  <changelog author="pmonreal@suse.com" date="1674475200">- Update upstream keyring: https://gnupg.org/signature_key.asc</changelog>
  <changelog author="dmueller@suse.com" date="1678449600">- drop python2 subpackage handling. we do not support python 2.x
  anymore, and if we would it would happen via singlespec</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 1.19.0:
  * New context flag "no-auto-check-trustdb". [T6261]
  * Optionally, build QGpgME for Qt 6
  * Support component "gpgtar-name" in gpgme_get_dirinfo. [T6342]
  * Extended gpgme_op_encrypt*, gpgme_op_encrypt_sign*, and
    gpgme_op_sign* to allow creating an encrypted and/or signed
    archive. [T6342]
  * Extended gpgme_op_decrypt*, gpgme_op_decrypt_verify*,
    and gpgme_op_verify* to allow extracting an encrypted and/or
    signed archive. [T6342]
  * cpp: Handle error when trying to sign expired keys. [T6155]
  * cpp: Support encryption flags ThrowKeyIds, EncryptWrap, and
    WantAddress. [T6359]
  * cpp, qt: Fix building with C++11.  [T6141]
  * qt: Fix problem with expiration dates after 2038-01-19 on 32-bit
    systems  when adding an existing subkey to another key. [T6137]
  * cpp: Allow setting the curve to use when generating ECC keys
    for smart cards. [T4429]
  * qt: Extend ListAllKeysJob to allow disabling the automatic
    trust database check when listing all keys. [T6261]
  * qt: Allow deferred start of import jobs. [T6323]
  * qt: Support creating and extracting signed and encrypted
    archives. [T6342]
  * Rebase gpgme-suse-nobetasuffix.patch
  * Remove patches upstream:
  - gpgme-D546-python310.patch
  - gpgme-1.18.0-T6137-qt_test.patch
  - python311.patch</changelog>
  <changelog author="christophe@krop.fr" date="1681214400">- Add a Qt6 flavor to build Qt6 bindings
- Use %ldconfig_scriptlets</changelog>
  <changelog author="pmonreal@suse.com" date="1682078400">- Update to 1.20.0:
  * On Windows, the gettext functions provided by gpgrt are switched
    into utf8 mode, so that all localized texts returned by GpgME or
    gpgrt, e.g. the texts for error codes are now UTF-8 encoded. [T5960]
  * Key::canSign now returns false for OpenPGP keys without signing
    (sub)key. [T6456]
  * The new macOS Homebrew location is now by default supported. [T6440]
  * Fix regression in 1.19.0.
  * Fix invocation of gpgtar on Windows.
  * Interface changes relative to the 1.19.0 release:
  - gpgme_subkey_t              EXTENDED: New field 'can_renc'.
  - gpgme_subkey_t              EXTENDED: New field 'can_timestamp'.
  - gpgme_subkey_t              EXTENDED: New field 'is_group_owned'.
  - cpp: Subkey::canRenc        NEW.
  - cpp: Subkey::canTimestamp   NEW.
  - cpp: Subkey::isGroupOwned   NEW.
  - cpp: Key::canReallySign     DEPRECATED.
  * Release-info: https://dev.gnupg.org/T6463</changelog>
  <changelog author="pmonreal@suse.com" date="1688990400">- Update to 1.21.0
  * Extended gpgme_op_encrypt, gpgme_op_encrypt_sign, and gpgme_op_sign
    to allow writing the output directly to a file. [T6530]
  * Extended gpgme_op_decrypt and gpgme_op_verify to allow reading the
    input data directly from files. [T6530]
  * For key signing and uid revoking allow an empty user id. [rMfbc3963d62]
  * Pass an input-size-hint also to the gpgsm engine. [T6534]
  * qt: Allow writing the created archives directly to a file. [T6530]
  * qt: Allow reading the signed/encrypted archive to decrypt
    or verify directly from a file. [T6530]
  * qt: Qt Jobs working with QIODeviceDataProvider now properly
    handle input-size hints and progress for files larger.
    2^32 bytes in 32 bit builds. [T6534]
  * cpp: Error::isCanceled now also returns true for error code
    GPG_ERR_FULLY_CANCELED. [T6510]
  * python: Fix wrong use of write. [T6501]
  * Interface changes relative to the 1.20.0 release:
  - cpp: Data::setFlag                            NEW.
  - cpp: Data::setSizeHint                        NEW.
  - qt: Job::startIt                              NEW.
  - qt: DecryptVerifyArchiveJob::setInputFile     NEW.
  - qt: DecryptVerifyArchiveJob::inputFile        NEW.
  - qt: EncryptArchiveJob::setRecipients          NEW.
  - qt: EncryptArchiveJob::recipients             NEW.
  - qt: EncryptArchiveJob::setInputPaths          NEW.
  - qt: EncryptArchiveJob::inputPaths             NEW.
  - qt: EncryptArchiveJob::setOutputFile          NEW.
  - qt: EncryptArchiveJob::outputFile             NEW.
  - qt: EncryptArchiveJob::setEncryptionFlags     NEW.
  - qt: EncryptArchiveJob::encryptionFlags        NEW.
  - qt: SignArchiveJob::setSigners                NEW.
  - qt: SignArchiveJob::signers                   NEW.
  - qt: SignArchiveJob::setInputPaths             NEW.
  - qt: SignArchiveJob::inputPaths                NEW.
  - qt: SignArchiveJob::setOutputFile             NEW.
  - qt: SignArchiveJob::outputFile                NEW.
  - qt: SignEncryptArchiveJob::setSigners         NEW.
  - qt: SignEncryptArchiveJob::signers            NEW.
  - qt: SignEncryptArchiveJob::setRecipients      NEW.
  - qt: SignEncryptArchiveJob::recipients         NEW.
  - qt: SignEncryptArchiveJob::setInputPaths      NEW.
  - qt: SignEncryptArchiveJob::inputPaths         NEW.
  - qt: SignEncryptArchiveJob::setOutputFile      NEW.
  - qt: SignEncryptArchiveJob::outputFile         NEW.
  - qt: SignEncryptArchiveJob::setEncryptionFlags NEW.
  - qt: SignEncryptArchiveJob::encryptionFlags    NEW.</changelog>
  <changelog author="schwab@suse.de" date="1691064000">- Run testsuite in qemu build</changelog>
  <changelog author="pmonreal@suse.com" date="1692705600">- Update to 1.22.0:
  * Prevent wrong plaintext when verifying clearsigned signature.
  * Return bad data error instead of general error on unexpected data.
  * Take care of offline mode for all operations of gpgsm engine.
  * Prepare the use of the forthcoming libassuan version 3.
  * New configure option --with-libtool-modification.
  * cpp: Expose gpgme_decrypt_result_t.is_mime.
  * qt: Clean up after failure or cancel of sign/encrypt archive operation.
  * qt: Add setInputEncoding to QGpgMe::EncryptJob.
  * qt: Make toLogString helper public.
  * Interface changes relative to the 1.21.0 release:
  - qt: EncryptJob::setInputEncoding           NEW.
  - qt: DecryptionResult::isMime               NEW.
  - qt: toLogString                            NEW.</changelog>
  <changelog author="pmonreal@suse.com" date="1692705601">- Fix builds with qt and qt6 [T6673]:
  * qt,tests: Fix build in source directory. Include Qt binding
    sources before C++ binding sources and C sources. This fixes
    the problem that the debug.h in the C sources was found before
    the one in the Qt bindings.
  * build: Suggest out-of-source build. Suggest to run configure
    from a build subdirectory.
  * Add patches:
  - gpgme-qt-tests-Fix-build-in-source-directory.patch
  - gpgme-build-Suggest-out-of-source-build.patch</changelog>
  <changelog author="christophe@krop.fr" date="1695470400">- Use GCC 12 for building the Qt6 library. The default compiler
  is too old.
- Use '%{without xxx}' rather than '!%{with xxx}' in spec file</changelog>
  <changelog author="christophe@krop.fr" date="1695470401">- Use GCC 12 for building the Qt6 library on Leap 15. The
  default compiler is too old.
- Use '%{without xxx}' rather than '!%{with xxx}' in spec file</changelog>
  <changelog author="pmonreal@suse.com" date="1698235200">- Update to 1.23.0:
  * Support GPGME_ENCRYPT_ALWAYS_TRUST also for S/MIME. [T6559]
  * New keylist mode GPGME_KEYLIST_MODE_WITH_V5FPR. [T6705]
  * New key capability flags has_*. [T6748]
  * gpgme-tool: Support use of Windows HANDLE. [T6634]
  * qt: Support refreshing keys via WKD. [T6672]
  * qt: Handle cancel in changeexpiryjob. [T6754]
  * Remove patches fixed upstream:
  - gpgme-qt-tests-Fix-build-in-source-directory.patch
  - gpgme-build-Suggest-out-of-source-build.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1761134400">- Treat empty DISPLAY variable as unset. [bsc#1252425, bsc#1231055]
  * To avoid gpgme constructing an invalid gpg command line when
    the DISPLAY variable is empty it can be treated as unset.
  * Add gpgme-Treat-empty-DISPLAY-variable-as-unset.patch
  * Reported upstream: dev.gnupg.org/T7919</changelog>
</package>
<package pkgid="70623b8fb52caf77be590bc31060a7d7caad465f301e626f5fc58e7531e55936" name="libgpgme11" arch="x86_64">
  <version epoch="0" ver="1.23.0" rel="150600.3.5.1"/>
  <changelog author="code@bnavigator.de" date="1616673600">- Can't assume non-existence of python38 macros in Leap.
  gh#openSUSE/python-rpm-macros#107
  Test for suse_version instead. Only Tumbleweed has and needs the
  python_subpackage_only support.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1625659200">- gpgme 1.16.0:
  * New context flag "cert-expire"
  * New data flags "io-buffer-size" and "sensitive"
  * cpp,qt: Add support for trust signatures
  * qt: Add support for flags in LDAP server options
  * qt: Fix too high memory consumption due to QProcess
  * qt: Do not set empty base DN as query of keyserver URL
  * qt: Extend SignKeyJob to create signatures with expiration date
  * python: New optional parameter filter_signatures for decrypt
- run all tests again
- add patches to fix tests:
  * gpgme-1.16.0-Use-after-free-in-t-edit-sign-test.patch
  * gpgme-1.16.0-t-various-testSignKeyWithExpiration-32-bit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1628164800">- Fix build with glibc 2.34: [bsc#1189089]
  * Use glibc's closefrom.
  * Add gpgme-use-glibc-closefrom.patch</changelog>
  <changelog author="code@bnavigator.de" date="1640347200">- Add patches to support building bindings packages for
  Python 3.10
  * gpgme-D545-python310.patch -- https://dev.gnupg.org/D545
  * gpgme-D546-python310.patch -- https://dev.gnupg.org/D546</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1660824000">- gpgme 1.18.0
  * New keylist mode to force refresh via external methods
  * The keylist operations now create an import result to report the
    result of the locate keylist modes
  * core: Return BAD_PASSPHRASE error code on symmetric decryption
    failure
  * cpp, qt: Do not export internal symbols anymore
  * cpp, qt: Support revocation of own OpenPGP keys
  * qt: The file name of (signed and) encrypted data can now be set
  * cpp, qt: Support setting the primary user ID
  * python: Fix segv(NULL) when inspecting contect after exeception
- includes changes from version 1.17.1:
  * qt: Fix a bug in the ABI compatibility of 1.17.0
- includes changes from 1.17.0:
  * New context flag "key-origin"
  * New context flag "import-filter"
  * New export mode to export secret subkeys
  * Detect errors during the export of secret keys
  * New function gpgme_op_receive_keys to import keys from a keyserver
    without first running a key listing
  * Detect bad passphrase error in certificate import
  * Allow setting --key-origin when importing keys
  * Support components "keyboxd", "gpg-agent", "scdaemon", "dirmngr",
    "pinentry", and "socketdir" in gpgme_get_dirinfo
  * Under Unix use poll(2) instead of select(2), when available.
  * Fix results returned by gpgme_data_* functions
  * Support closefrom also for glibc
    (drop upstream gpgme-use-glibc-closefrom.patch
  * cpp,qt: Add support for export of secret keys and secret subkeys.
  * cpp,qt: Support for adding existing subkeys to other keys
  * qt: Extend ChangeExpiryJob to change expiration of primary key
    and of subkeys at the same time
  * qt: Support WKD lookup without implicit import
  * qt: Allow specifying an import filter when importing keys
  * qt: Allow retrieving the default value of a config entry
- drop patches included upstream
  * gpgme-1.16.0-Use-after-free-in-t-edit-sign-test.patch
  * gpgme-1.16.0-t-various-testSignKeyWithExpiration-32-bit.patch
- add patches to fix tests:
  * gpgme-1.18.0-T6137-qt_test.patch</changelog>
  <changelog author="code@bnavigator.de" date="1667908800">- Add gpgme-suse-nobetasuffix.patch
  * remove "-unknown" suffix from version string
  * boo#1205197</changelog>
  <changelog author="dmueller@suse.com" date="1674302400">- add python311.patch to build language bindings for python 3.11</changelog>
  <changelog author="pmonreal@suse.com" date="1674475200">- Update upstream keyring: https://gnupg.org/signature_key.asc</changelog>
  <changelog author="dmueller@suse.com" date="1678449600">- drop python2 subpackage handling. we do not support python 2.x
  anymore, and if we would it would happen via singlespec</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 1.19.0:
  * New context flag "no-auto-check-trustdb". [T6261]
  * Optionally, build QGpgME for Qt 6
  * Support component "gpgtar-name" in gpgme_get_dirinfo. [T6342]
  * Extended gpgme_op_encrypt*, gpgme_op_encrypt_sign*, and
    gpgme_op_sign* to allow creating an encrypted and/or signed
    archive. [T6342]
  * Extended gpgme_op_decrypt*, gpgme_op_decrypt_verify*,
    and gpgme_op_verify* to allow extracting an encrypted and/or
    signed archive. [T6342]
  * cpp: Handle error when trying to sign expired keys. [T6155]
  * cpp: Support encryption flags ThrowKeyIds, EncryptWrap, and
    WantAddress. [T6359]
  * cpp, qt: Fix building with C++11.  [T6141]
  * qt: Fix problem with expiration dates after 2038-01-19 on 32-bit
    systems  when adding an existing subkey to another key. [T6137]
  * cpp: Allow setting the curve to use when generating ECC keys
    for smart cards. [T4429]
  * qt: Extend ListAllKeysJob to allow disabling the automatic
    trust database check when listing all keys. [T6261]
  * qt: Allow deferred start of import jobs. [T6323]
  * qt: Support creating and extracting signed and encrypted
    archives. [T6342]
  * Rebase gpgme-suse-nobetasuffix.patch
  * Remove patches upstream:
  - gpgme-D546-python310.patch
  - gpgme-1.18.0-T6137-qt_test.patch
  - python311.patch</changelog>
  <changelog author="christophe@krop.fr" date="1681214400">- Add a Qt6 flavor to build Qt6 bindings
- Use %ldconfig_scriptlets</changelog>
  <changelog author="pmonreal@suse.com" date="1682078400">- Update to 1.20.0:
  * On Windows, the gettext functions provided by gpgrt are switched
    into utf8 mode, so that all localized texts returned by GpgME or
    gpgrt, e.g. the texts for error codes are now UTF-8 encoded. [T5960]
  * Key::canSign now returns false for OpenPGP keys without signing
    (sub)key. [T6456]
  * The new macOS Homebrew location is now by default supported. [T6440]
  * Fix regression in 1.19.0.
  * Fix invocation of gpgtar on Windows.
  * Interface changes relative to the 1.19.0 release:
  - gpgme_subkey_t              EXTENDED: New field 'can_renc'.
  - gpgme_subkey_t              EXTENDED: New field 'can_timestamp'.
  - gpgme_subkey_t              EXTENDED: New field 'is_group_owned'.
  - cpp: Subkey::canRenc        NEW.
  - cpp: Subkey::canTimestamp   NEW.
  - cpp: Subkey::isGroupOwned   NEW.
  - cpp: Key::canReallySign     DEPRECATED.
  * Release-info: https://dev.gnupg.org/T6463</changelog>
  <changelog author="pmonreal@suse.com" date="1688990400">- Update to 1.21.0
  * Extended gpgme_op_encrypt, gpgme_op_encrypt_sign, and gpgme_op_sign
    to allow writing the output directly to a file. [T6530]
  * Extended gpgme_op_decrypt and gpgme_op_verify to allow reading the
    input data directly from files. [T6530]
  * For key signing and uid revoking allow an empty user id. [rMfbc3963d62]
  * Pass an input-size-hint also to the gpgsm engine. [T6534]
  * qt: Allow writing the created archives directly to a file. [T6530]
  * qt: Allow reading the signed/encrypted archive to decrypt
    or verify directly from a file. [T6530]
  * qt: Qt Jobs working with QIODeviceDataProvider now properly
    handle input-size hints and progress for files larger.
    2^32 bytes in 32 bit builds. [T6534]
  * cpp: Error::isCanceled now also returns true for error code
    GPG_ERR_FULLY_CANCELED. [T6510]
  * python: Fix wrong use of write. [T6501]
  * Interface changes relative to the 1.20.0 release:
  - cpp: Data::setFlag                            NEW.
  - cpp: Data::setSizeHint                        NEW.
  - qt: Job::startIt                              NEW.
  - qt: DecryptVerifyArchiveJob::setInputFile     NEW.
  - qt: DecryptVerifyArchiveJob::inputFile        NEW.
  - qt: EncryptArchiveJob::setRecipients          NEW.
  - qt: EncryptArchiveJob::recipients             NEW.
  - qt: EncryptArchiveJob::setInputPaths          NEW.
  - qt: EncryptArchiveJob::inputPaths             NEW.
  - qt: EncryptArchiveJob::setOutputFile          NEW.
  - qt: EncryptArchiveJob::outputFile             NEW.
  - qt: EncryptArchiveJob::setEncryptionFlags     NEW.
  - qt: EncryptArchiveJob::encryptionFlags        NEW.
  - qt: SignArchiveJob::setSigners                NEW.
  - qt: SignArchiveJob::signers                   NEW.
  - qt: SignArchiveJob::setInputPaths             NEW.
  - qt: SignArchiveJob::inputPaths                NEW.
  - qt: SignArchiveJob::setOutputFile             NEW.
  - qt: SignArchiveJob::outputFile                NEW.
  - qt: SignEncryptArchiveJob::setSigners         NEW.
  - qt: SignEncryptArchiveJob::signers            NEW.
  - qt: SignEncryptArchiveJob::setRecipients      NEW.
  - qt: SignEncryptArchiveJob::recipients         NEW.
  - qt: SignEncryptArchiveJob::setInputPaths      NEW.
  - qt: SignEncryptArchiveJob::inputPaths         NEW.
  - qt: SignEncryptArchiveJob::setOutputFile      NEW.
  - qt: SignEncryptArchiveJob::outputFile         NEW.
  - qt: SignEncryptArchiveJob::setEncryptionFlags NEW.
  - qt: SignEncryptArchiveJob::encryptionFlags    NEW.</changelog>
  <changelog author="schwab@suse.de" date="1691064000">- Run testsuite in qemu build</changelog>
  <changelog author="pmonreal@suse.com" date="1692705600">- Update to 1.22.0:
  * Prevent wrong plaintext when verifying clearsigned signature.
  * Return bad data error instead of general error on unexpected data.
  * Take care of offline mode for all operations of gpgsm engine.
  * Prepare the use of the forthcoming libassuan version 3.
  * New configure option --with-libtool-modification.
  * cpp: Expose gpgme_decrypt_result_t.is_mime.
  * qt: Clean up after failure or cancel of sign/encrypt archive operation.
  * qt: Add setInputEncoding to QGpgMe::EncryptJob.
  * qt: Make toLogString helper public.
  * Interface changes relative to the 1.21.0 release:
  - qt: EncryptJob::setInputEncoding           NEW.
  - qt: DecryptionResult::isMime               NEW.
  - qt: toLogString                            NEW.</changelog>
  <changelog author="pmonreal@suse.com" date="1692705601">- Fix builds with qt and qt6 [T6673]:
  * qt,tests: Fix build in source directory. Include Qt binding
    sources before C++ binding sources and C sources. This fixes
    the problem that the debug.h in the C sources was found before
    the one in the Qt bindings.
  * build: Suggest out-of-source build. Suggest to run configure
    from a build subdirectory.
  * Add patches:
  - gpgme-qt-tests-Fix-build-in-source-directory.patch
  - gpgme-build-Suggest-out-of-source-build.patch</changelog>
  <changelog author="christophe@krop.fr" date="1695470400">- Use GCC 12 for building the Qt6 library. The default compiler
  is too old.
- Use '%{without xxx}' rather than '!%{with xxx}' in spec file</changelog>
  <changelog author="christophe@krop.fr" date="1695470401">- Use GCC 12 for building the Qt6 library on Leap 15. The
  default compiler is too old.
- Use '%{without xxx}' rather than '!%{with xxx}' in spec file</changelog>
  <changelog author="pmonreal@suse.com" date="1698235200">- Update to 1.23.0:
  * Support GPGME_ENCRYPT_ALWAYS_TRUST also for S/MIME. [T6559]
  * New keylist mode GPGME_KEYLIST_MODE_WITH_V5FPR. [T6705]
  * New key capability flags has_*. [T6748]
  * gpgme-tool: Support use of Windows HANDLE. [T6634]
  * qt: Support refreshing keys via WKD. [T6672]
  * qt: Handle cancel in changeexpiryjob. [T6754]
  * Remove patches fixed upstream:
  - gpgme-qt-tests-Fix-build-in-source-directory.patch
  - gpgme-build-Suggest-out-of-source-build.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1761134400">- Treat empty DISPLAY variable as unset. [bsc#1252425, bsc#1231055]
  * To avoid gpgme constructing an invalid gpg command line when
    the DISPLAY variable is empty it can be treated as unset.
  * Add gpgme-Treat-empty-DISPLAY-variable-as-unset.patch
  * Reported upstream: dev.gnupg.org/T7919</changelog>
</package>
<package pkgid="93d75a3378767a7ca7eda26279457341d5edea5c7600faea18e4bf8056f88428" name="libgpgmepp-devel" arch="x86_64">
  <version epoch="0" ver="1.23.0" rel="150600.3.5.1"/>
  <changelog author="code@bnavigator.de" date="1616673600">- Can't assume non-existence of python38 macros in Leap.
  gh#openSUSE/python-rpm-macros#107
  Test for suse_version instead. Only Tumbleweed has and needs the
  python_subpackage_only support.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1625659200">- gpgme 1.16.0:
  * New context flag "cert-expire"
  * New data flags "io-buffer-size" and "sensitive"
  * cpp,qt: Add support for trust signatures
  * qt: Add support for flags in LDAP server options
  * qt: Fix too high memory consumption due to QProcess
  * qt: Do not set empty base DN as query of keyserver URL
  * qt: Extend SignKeyJob to create signatures with expiration date
  * python: New optional parameter filter_signatures for decrypt
- run all tests again
- add patches to fix tests:
  * gpgme-1.16.0-Use-after-free-in-t-edit-sign-test.patch
  * gpgme-1.16.0-t-various-testSignKeyWithExpiration-32-bit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1628164800">- Fix build with glibc 2.34: [bsc#1189089]
  * Use glibc's closefrom.
  * Add gpgme-use-glibc-closefrom.patch</changelog>
  <changelog author="code@bnavigator.de" date="1640347200">- Add patches to support building bindings packages for
  Python 3.10
  * gpgme-D545-python310.patch -- https://dev.gnupg.org/D545
  * gpgme-D546-python310.patch -- https://dev.gnupg.org/D546</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1660824000">- gpgme 1.18.0
  * New keylist mode to force refresh via external methods
  * The keylist operations now create an import result to report the
    result of the locate keylist modes
  * core: Return BAD_PASSPHRASE error code on symmetric decryption
    failure
  * cpp, qt: Do not export internal symbols anymore
  * cpp, qt: Support revocation of own OpenPGP keys
  * qt: The file name of (signed and) encrypted data can now be set
  * cpp, qt: Support setting the primary user ID
  * python: Fix segv(NULL) when inspecting contect after exeception
- includes changes from version 1.17.1:
  * qt: Fix a bug in the ABI compatibility of 1.17.0
- includes changes from 1.17.0:
  * New context flag "key-origin"
  * New context flag "import-filter"
  * New export mode to export secret subkeys
  * Detect errors during the export of secret keys
  * New function gpgme_op_receive_keys to import keys from a keyserver
    without first running a key listing
  * Detect bad passphrase error in certificate import
  * Allow setting --key-origin when importing keys
  * Support components "keyboxd", "gpg-agent", "scdaemon", "dirmngr",
    "pinentry", and "socketdir" in gpgme_get_dirinfo
  * Under Unix use poll(2) instead of select(2), when available.
  * Fix results returned by gpgme_data_* functions
  * Support closefrom also for glibc
    (drop upstream gpgme-use-glibc-closefrom.patch
  * cpp,qt: Add support for export of secret keys and secret subkeys.
  * cpp,qt: Support for adding existing subkeys to other keys
  * qt: Extend ChangeExpiryJob to change expiration of primary key
    and of subkeys at the same time
  * qt: Support WKD lookup without implicit import
  * qt: Allow specifying an import filter when importing keys
  * qt: Allow retrieving the default value of a config entry
- drop patches included upstream
  * gpgme-1.16.0-Use-after-free-in-t-edit-sign-test.patch
  * gpgme-1.16.0-t-various-testSignKeyWithExpiration-32-bit.patch
- add patches to fix tests:
  * gpgme-1.18.0-T6137-qt_test.patch</changelog>
  <changelog author="code@bnavigator.de" date="1667908800">- Add gpgme-suse-nobetasuffix.patch
  * remove "-unknown" suffix from version string
  * boo#1205197</changelog>
  <changelog author="dmueller@suse.com" date="1674302400">- add python311.patch to build language bindings for python 3.11</changelog>
  <changelog author="pmonreal@suse.com" date="1674475200">- Update upstream keyring: https://gnupg.org/signature_key.asc</changelog>
  <changelog author="dmueller@suse.com" date="1678449600">- drop python2 subpackage handling. we do not support python 2.x
  anymore, and if we would it would happen via singlespec</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 1.19.0:
  * New context flag "no-auto-check-trustdb". [T6261]
  * Optionally, build QGpgME for Qt 6
  * Support component "gpgtar-name" in gpgme_get_dirinfo. [T6342]
  * Extended gpgme_op_encrypt*, gpgme_op_encrypt_sign*, and
    gpgme_op_sign* to allow creating an encrypted and/or signed
    archive. [T6342]
  * Extended gpgme_op_decrypt*, gpgme_op_decrypt_verify*,
    and gpgme_op_verify* to allow extracting an encrypted and/or
    signed archive. [T6342]
  * cpp: Handle error when trying to sign expired keys. [T6155]
  * cpp: Support encryption flags ThrowKeyIds, EncryptWrap, and
    WantAddress. [T6359]
  * cpp, qt: Fix building with C++11.  [T6141]
  * qt: Fix problem with expiration dates after 2038-01-19 on 32-bit
    systems  when adding an existing subkey to another key. [T6137]
  * cpp: Allow setting the curve to use when generating ECC keys
    for smart cards. [T4429]
  * qt: Extend ListAllKeysJob to allow disabling the automatic
    trust database check when listing all keys. [T6261]
  * qt: Allow deferred start of import jobs. [T6323]
  * qt: Support creating and extracting signed and encrypted
    archives. [T6342]
  * Rebase gpgme-suse-nobetasuffix.patch
  * Remove patches upstream:
  - gpgme-D546-python310.patch
  - gpgme-1.18.0-T6137-qt_test.patch
  - python311.patch</changelog>
  <changelog author="christophe@krop.fr" date="1681214400">- Add a Qt6 flavor to build Qt6 bindings
- Use %ldconfig_scriptlets</changelog>
  <changelog author="pmonreal@suse.com" date="1682078400">- Update to 1.20.0:
  * On Windows, the gettext functions provided by gpgrt are switched
    into utf8 mode, so that all localized texts returned by GpgME or
    gpgrt, e.g. the texts for error codes are now UTF-8 encoded. [T5960]
  * Key::canSign now returns false for OpenPGP keys without signing
    (sub)key. [T6456]
  * The new macOS Homebrew location is now by default supported. [T6440]
  * Fix regression in 1.19.0.
  * Fix invocation of gpgtar on Windows.
  * Interface changes relative to the 1.19.0 release:
  - gpgme_subkey_t              EXTENDED: New field 'can_renc'.
  - gpgme_subkey_t              EXTENDED: New field 'can_timestamp'.
  - gpgme_subkey_t              EXTENDED: New field 'is_group_owned'.
  - cpp: Subkey::canRenc        NEW.
  - cpp: Subkey::canTimestamp   NEW.
  - cpp: Subkey::isGroupOwned   NEW.
  - cpp: Key::canReallySign     DEPRECATED.
  * Release-info: https://dev.gnupg.org/T6463</changelog>
  <changelog author="pmonreal@suse.com" date="1688990400">- Update to 1.21.0
  * Extended gpgme_op_encrypt, gpgme_op_encrypt_sign, and gpgme_op_sign
    to allow writing the output directly to a file. [T6530]
  * Extended gpgme_op_decrypt and gpgme_op_verify to allow reading the
    input data directly from files. [T6530]
  * For key signing and uid revoking allow an empty user id. [rMfbc3963d62]
  * Pass an input-size-hint also to the gpgsm engine. [T6534]
  * qt: Allow writing the created archives directly to a file. [T6530]
  * qt: Allow reading the signed/encrypted archive to decrypt
    or verify directly from a file. [T6530]
  * qt: Qt Jobs working with QIODeviceDataProvider now properly
    handle input-size hints and progress for files larger.
    2^32 bytes in 32 bit builds. [T6534]
  * cpp: Error::isCanceled now also returns true for error code
    GPG_ERR_FULLY_CANCELED. [T6510]
  * python: Fix wrong use of write. [T6501]
  * Interface changes relative to the 1.20.0 release:
  - cpp: Data::setFlag                            NEW.
  - cpp: Data::setSizeHint                        NEW.
  - qt: Job::startIt                              NEW.
  - qt: DecryptVerifyArchiveJob::setInputFile     NEW.
  - qt: DecryptVerifyArchiveJob::inputFile        NEW.
  - qt: EncryptArchiveJob::setRecipients          NEW.
  - qt: EncryptArchiveJob::recipients             NEW.
  - qt: EncryptArchiveJob::setInputPaths          NEW.
  - qt: EncryptArchiveJob::inputPaths             NEW.
  - qt: EncryptArchiveJob::setOutputFile          NEW.
  - qt: EncryptArchiveJob::outputFile             NEW.
  - qt: EncryptArchiveJob::setEncryptionFlags     NEW.
  - qt: EncryptArchiveJob::encryptionFlags        NEW.
  - qt: SignArchiveJob::setSigners                NEW.
  - qt: SignArchiveJob::signers                   NEW.
  - qt: SignArchiveJob::setInputPaths             NEW.
  - qt: SignArchiveJob::inputPaths                NEW.
  - qt: SignArchiveJob::setOutputFile             NEW.
  - qt: SignArchiveJob::outputFile                NEW.
  - qt: SignEncryptArchiveJob::setSigners         NEW.
  - qt: SignEncryptArchiveJob::signers            NEW.
  - qt: SignEncryptArchiveJob::setRecipients      NEW.
  - qt: SignEncryptArchiveJob::recipients         NEW.
  - qt: SignEncryptArchiveJob::setInputPaths      NEW.
  - qt: SignEncryptArchiveJob::inputPaths         NEW.
  - qt: SignEncryptArchiveJob::setOutputFile      NEW.
  - qt: SignEncryptArchiveJob::outputFile         NEW.
  - qt: SignEncryptArchiveJob::setEncryptionFlags NEW.
  - qt: SignEncryptArchiveJob::encryptionFlags    NEW.</changelog>
  <changelog author="schwab@suse.de" date="1691064000">- Run testsuite in qemu build</changelog>
  <changelog author="pmonreal@suse.com" date="1692705600">- Update to 1.22.0:
  * Prevent wrong plaintext when verifying clearsigned signature.
  * Return bad data error instead of general error on unexpected data.
  * Take care of offline mode for all operations of gpgsm engine.
  * Prepare the use of the forthcoming libassuan version 3.
  * New configure option --with-libtool-modification.
  * cpp: Expose gpgme_decrypt_result_t.is_mime.
  * qt: Clean up after failure or cancel of sign/encrypt archive operation.
  * qt: Add setInputEncoding to QGpgMe::EncryptJob.
  * qt: Make toLogString helper public.
  * Interface changes relative to the 1.21.0 release:
  - qt: EncryptJob::setInputEncoding           NEW.
  - qt: DecryptionResult::isMime               NEW.
  - qt: toLogString                            NEW.</changelog>
  <changelog author="pmonreal@suse.com" date="1692705601">- Fix builds with qt and qt6 [T6673]:
  * qt,tests: Fix build in source directory. Include Qt binding
    sources before C++ binding sources and C sources. This fixes
    the problem that the debug.h in the C sources was found before
    the one in the Qt bindings.
  * build: Suggest out-of-source build. Suggest to run configure
    from a build subdirectory.
  * Add patches:
  - gpgme-qt-tests-Fix-build-in-source-directory.patch
  - gpgme-build-Suggest-out-of-source-build.patch</changelog>
  <changelog author="christophe@krop.fr" date="1695470400">- Use GCC 12 for building the Qt6 library. The default compiler
  is too old.
- Use '%{without xxx}' rather than '!%{with xxx}' in spec file</changelog>
  <changelog author="christophe@krop.fr" date="1695470401">- Use GCC 12 for building the Qt6 library on Leap 15. The
  default compiler is too old.
- Use '%{without xxx}' rather than '!%{with xxx}' in spec file</changelog>
  <changelog author="pmonreal@suse.com" date="1698235200">- Update to 1.23.0:
  * Support GPGME_ENCRYPT_ALWAYS_TRUST also for S/MIME. [T6559]
  * New keylist mode GPGME_KEYLIST_MODE_WITH_V5FPR. [T6705]
  * New key capability flags has_*. [T6748]
  * gpgme-tool: Support use of Windows HANDLE. [T6634]
  * qt: Support refreshing keys via WKD. [T6672]
  * qt: Handle cancel in changeexpiryjob. [T6754]
  * Remove patches fixed upstream:
  - gpgme-qt-tests-Fix-build-in-source-directory.patch
  - gpgme-build-Suggest-out-of-source-build.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1761134400">- Treat empty DISPLAY variable as unset. [bsc#1252425, bsc#1231055]
  * To avoid gpgme constructing an invalid gpg command line when
    the DISPLAY variable is empty it can be treated as unset.
  * Add gpgme-Treat-empty-DISPLAY-variable-as-unset.patch
  * Reported upstream: dev.gnupg.org/T7919</changelog>
</package>
<package pkgid="98377650b1a0f29c008061c3001e49eb7de341bdd9525dea7da43707aa88d20e" name="libgpgmepp6" arch="x86_64">
  <version epoch="0" ver="1.23.0" rel="150600.3.5.1"/>
  <changelog author="code@bnavigator.de" date="1616673600">- Can't assume non-existence of python38 macros in Leap.
  gh#openSUSE/python-rpm-macros#107
  Test for suse_version instead. Only Tumbleweed has and needs the
  python_subpackage_only support.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1625659200">- gpgme 1.16.0:
  * New context flag "cert-expire"
  * New data flags "io-buffer-size" and "sensitive"
  * cpp,qt: Add support for trust signatures
  * qt: Add support for flags in LDAP server options
  * qt: Fix too high memory consumption due to QProcess
  * qt: Do not set empty base DN as query of keyserver URL
  * qt: Extend SignKeyJob to create signatures with expiration date
  * python: New optional parameter filter_signatures for decrypt
- run all tests again
- add patches to fix tests:
  * gpgme-1.16.0-Use-after-free-in-t-edit-sign-test.patch
  * gpgme-1.16.0-t-various-testSignKeyWithExpiration-32-bit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1628164800">- Fix build with glibc 2.34: [bsc#1189089]
  * Use glibc's closefrom.
  * Add gpgme-use-glibc-closefrom.patch</changelog>
  <changelog author="code@bnavigator.de" date="1640347200">- Add patches to support building bindings packages for
  Python 3.10
  * gpgme-D545-python310.patch -- https://dev.gnupg.org/D545
  * gpgme-D546-python310.patch -- https://dev.gnupg.org/D546</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1660824000">- gpgme 1.18.0
  * New keylist mode to force refresh via external methods
  * The keylist operations now create an import result to report the
    result of the locate keylist modes
  * core: Return BAD_PASSPHRASE error code on symmetric decryption
    failure
  * cpp, qt: Do not export internal symbols anymore
  * cpp, qt: Support revocation of own OpenPGP keys
  * qt: The file name of (signed and) encrypted data can now be set
  * cpp, qt: Support setting the primary user ID
  * python: Fix segv(NULL) when inspecting contect after exeception
- includes changes from version 1.17.1:
  * qt: Fix a bug in the ABI compatibility of 1.17.0
- includes changes from 1.17.0:
  * New context flag "key-origin"
  * New context flag "import-filter"
  * New export mode to export secret subkeys
  * Detect errors during the export of secret keys
  * New function gpgme_op_receive_keys to import keys from a keyserver
    without first running a key listing
  * Detect bad passphrase error in certificate import
  * Allow setting --key-origin when importing keys
  * Support components "keyboxd", "gpg-agent", "scdaemon", "dirmngr",
    "pinentry", and "socketdir" in gpgme_get_dirinfo
  * Under Unix use poll(2) instead of select(2), when available.
  * Fix results returned by gpgme_data_* functions
  * Support closefrom also for glibc
    (drop upstream gpgme-use-glibc-closefrom.patch
  * cpp,qt: Add support for export of secret keys and secret subkeys.
  * cpp,qt: Support for adding existing subkeys to other keys
  * qt: Extend ChangeExpiryJob to change expiration of primary key
    and of subkeys at the same time
  * qt: Support WKD lookup without implicit import
  * qt: Allow specifying an import filter when importing keys
  * qt: Allow retrieving the default value of a config entry
- drop patches included upstream
  * gpgme-1.16.0-Use-after-free-in-t-edit-sign-test.patch
  * gpgme-1.16.0-t-various-testSignKeyWithExpiration-32-bit.patch
- add patches to fix tests:
  * gpgme-1.18.0-T6137-qt_test.patch</changelog>
  <changelog author="code@bnavigator.de" date="1667908800">- Add gpgme-suse-nobetasuffix.patch
  * remove "-unknown" suffix from version string
  * boo#1205197</changelog>
  <changelog author="dmueller@suse.com" date="1674302400">- add python311.patch to build language bindings for python 3.11</changelog>
  <changelog author="pmonreal@suse.com" date="1674475200">- Update upstream keyring: https://gnupg.org/signature_key.asc</changelog>
  <changelog author="dmueller@suse.com" date="1678449600">- drop python2 subpackage handling. we do not support python 2.x
  anymore, and if we would it would happen via singlespec</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 1.19.0:
  * New context flag "no-auto-check-trustdb". [T6261]
  * Optionally, build QGpgME for Qt 6
  * Support component "gpgtar-name" in gpgme_get_dirinfo. [T6342]
  * Extended gpgme_op_encrypt*, gpgme_op_encrypt_sign*, and
    gpgme_op_sign* to allow creating an encrypted and/or signed
    archive. [T6342]
  * Extended gpgme_op_decrypt*, gpgme_op_decrypt_verify*,
    and gpgme_op_verify* to allow extracting an encrypted and/or
    signed archive. [T6342]
  * cpp: Handle error when trying to sign expired keys. [T6155]
  * cpp: Support encryption flags ThrowKeyIds, EncryptWrap, and
    WantAddress. [T6359]
  * cpp, qt: Fix building with C++11.  [T6141]
  * qt: Fix problem with expiration dates after 2038-01-19 on 32-bit
    systems  when adding an existing subkey to another key. [T6137]
  * cpp: Allow setting the curve to use when generating ECC keys
    for smart cards. [T4429]
  * qt: Extend ListAllKeysJob to allow disabling the automatic
    trust database check when listing all keys. [T6261]
  * qt: Allow deferred start of import jobs. [T6323]
  * qt: Support creating and extracting signed and encrypted
    archives. [T6342]
  * Rebase gpgme-suse-nobetasuffix.patch
  * Remove patches upstream:
  - gpgme-D546-python310.patch
  - gpgme-1.18.0-T6137-qt_test.patch
  - python311.patch</changelog>
  <changelog author="christophe@krop.fr" date="1681214400">- Add a Qt6 flavor to build Qt6 bindings
- Use %ldconfig_scriptlets</changelog>
  <changelog author="pmonreal@suse.com" date="1682078400">- Update to 1.20.0:
  * On Windows, the gettext functions provided by gpgrt are switched
    into utf8 mode, so that all localized texts returned by GpgME or
    gpgrt, e.g. the texts for error codes are now UTF-8 encoded. [T5960]
  * Key::canSign now returns false for OpenPGP keys without signing
    (sub)key. [T6456]
  * The new macOS Homebrew location is now by default supported. [T6440]
  * Fix regression in 1.19.0.
  * Fix invocation of gpgtar on Windows.
  * Interface changes relative to the 1.19.0 release:
  - gpgme_subkey_t              EXTENDED: New field 'can_renc'.
  - gpgme_subkey_t              EXTENDED: New field 'can_timestamp'.
  - gpgme_subkey_t              EXTENDED: New field 'is_group_owned'.
  - cpp: Subkey::canRenc        NEW.
  - cpp: Subkey::canTimestamp   NEW.
  - cpp: Subkey::isGroupOwned   NEW.
  - cpp: Key::canReallySign     DEPRECATED.
  * Release-info: https://dev.gnupg.org/T6463</changelog>
  <changelog author="pmonreal@suse.com" date="1688990400">- Update to 1.21.0
  * Extended gpgme_op_encrypt, gpgme_op_encrypt_sign, and gpgme_op_sign
    to allow writing the output directly to a file. [T6530]
  * Extended gpgme_op_decrypt and gpgme_op_verify to allow reading the
    input data directly from files. [T6530]
  * For key signing and uid revoking allow an empty user id. [rMfbc3963d62]
  * Pass an input-size-hint also to the gpgsm engine. [T6534]
  * qt: Allow writing the created archives directly to a file. [T6530]
  * qt: Allow reading the signed/encrypted archive to decrypt
    or verify directly from a file. [T6530]
  * qt: Qt Jobs working with QIODeviceDataProvider now properly
    handle input-size hints and progress for files larger.
    2^32 bytes in 32 bit builds. [T6534]
  * cpp: Error::isCanceled now also returns true for error code
    GPG_ERR_FULLY_CANCELED. [T6510]
  * python: Fix wrong use of write. [T6501]
  * Interface changes relative to the 1.20.0 release:
  - cpp: Data::setFlag                            NEW.
  - cpp: Data::setSizeHint                        NEW.
  - qt: Job::startIt                              NEW.
  - qt: DecryptVerifyArchiveJob::setInputFile     NEW.
  - qt: DecryptVerifyArchiveJob::inputFile        NEW.
  - qt: EncryptArchiveJob::setRecipients          NEW.
  - qt: EncryptArchiveJob::recipients             NEW.
  - qt: EncryptArchiveJob::setInputPaths          NEW.
  - qt: EncryptArchiveJob::inputPaths             NEW.
  - qt: EncryptArchiveJob::setOutputFile          NEW.
  - qt: EncryptArchiveJob::outputFile             NEW.
  - qt: EncryptArchiveJob::setEncryptionFlags     NEW.
  - qt: EncryptArchiveJob::encryptionFlags        NEW.
  - qt: SignArchiveJob::setSigners                NEW.
  - qt: SignArchiveJob::signers                   NEW.
  - qt: SignArchiveJob::setInputPaths             NEW.
  - qt: SignArchiveJob::inputPaths                NEW.
  - qt: SignArchiveJob::setOutputFile             NEW.
  - qt: SignArchiveJob::outputFile                NEW.
  - qt: SignEncryptArchiveJob::setSigners         NEW.
  - qt: SignEncryptArchiveJob::signers            NEW.
  - qt: SignEncryptArchiveJob::setRecipients      NEW.
  - qt: SignEncryptArchiveJob::recipients         NEW.
  - qt: SignEncryptArchiveJob::setInputPaths      NEW.
  - qt: SignEncryptArchiveJob::inputPaths         NEW.
  - qt: SignEncryptArchiveJob::setOutputFile      NEW.
  - qt: SignEncryptArchiveJob::outputFile         NEW.
  - qt: SignEncryptArchiveJob::setEncryptionFlags NEW.
  - qt: SignEncryptArchiveJob::encryptionFlags    NEW.</changelog>
  <changelog author="schwab@suse.de" date="1691064000">- Run testsuite in qemu build</changelog>
  <changelog author="pmonreal@suse.com" date="1692705600">- Update to 1.22.0:
  * Prevent wrong plaintext when verifying clearsigned signature.
  * Return bad data error instead of general error on unexpected data.
  * Take care of offline mode for all operations of gpgsm engine.
  * Prepare the use of the forthcoming libassuan version 3.
  * New configure option --with-libtool-modification.
  * cpp: Expose gpgme_decrypt_result_t.is_mime.
  * qt: Clean up after failure or cancel of sign/encrypt archive operation.
  * qt: Add setInputEncoding to QGpgMe::EncryptJob.
  * qt: Make toLogString helper public.
  * Interface changes relative to the 1.21.0 release:
  - qt: EncryptJob::setInputEncoding           NEW.
  - qt: DecryptionResult::isMime               NEW.
  - qt: toLogString                            NEW.</changelog>
  <changelog author="pmonreal@suse.com" date="1692705601">- Fix builds with qt and qt6 [T6673]:
  * qt,tests: Fix build in source directory. Include Qt binding
    sources before C++ binding sources and C sources. This fixes
    the problem that the debug.h in the C sources was found before
    the one in the Qt bindings.
  * build: Suggest out-of-source build. Suggest to run configure
    from a build subdirectory.
  * Add patches:
  - gpgme-qt-tests-Fix-build-in-source-directory.patch
  - gpgme-build-Suggest-out-of-source-build.patch</changelog>
  <changelog author="christophe@krop.fr" date="1695470400">- Use GCC 12 for building the Qt6 library. The default compiler
  is too old.
- Use '%{without xxx}' rather than '!%{with xxx}' in spec file</changelog>
  <changelog author="christophe@krop.fr" date="1695470401">- Use GCC 12 for building the Qt6 library on Leap 15. The
  default compiler is too old.
- Use '%{without xxx}' rather than '!%{with xxx}' in spec file</changelog>
  <changelog author="pmonreal@suse.com" date="1698235200">- Update to 1.23.0:
  * Support GPGME_ENCRYPT_ALWAYS_TRUST also for S/MIME. [T6559]
  * New keylist mode GPGME_KEYLIST_MODE_WITH_V5FPR. [T6705]
  * New key capability flags has_*. [T6748]
  * gpgme-tool: Support use of Windows HANDLE. [T6634]
  * qt: Support refreshing keys via WKD. [T6672]
  * qt: Handle cancel in changeexpiryjob. [T6754]
  * Remove patches fixed upstream:
  - gpgme-qt-tests-Fix-build-in-source-directory.patch
  - gpgme-build-Suggest-out-of-source-build.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1761134400">- Treat empty DISPLAY variable as unset. [bsc#1252425, bsc#1231055]
  * To avoid gpgme constructing an invalid gpg command line when
    the DISPLAY variable is empty it can be treated as unset.
  * Add gpgme-Treat-empty-DISPLAY-variable-as-unset.patch
  * Reported upstream: dev.gnupg.org/T7919</changelog>
</package>
<package pkgid="d003853108f63fe139ed019c7660eec7fa7db077f9d1e71680753ddd85f5bb02" name="libgrpc8" arch="x86_64">
  <version epoch="0" ver="1.25.0" rel="150200.3.10.1"/>
  <changelog author="jengelh@inai.de" date="1526644800">- Switch to plain makefiles since they generate more shared libs.
- Remove grpc-build.diff, grpc-versioning.diff.</changelog>
  <changelog author="tbechtold@suse.com" date="1527249600">- build grpc python module for python2 and python3
  * add 0001-Allow-building-the-python-module-with-system-openssl.patch
  * add 0002-Allow-building-the-python-module-with-system-zlib.patch
  * add 0003-Allow-building-the-python-module-with-system-cares.patch</changelog>
  <changelog author="jengelh@inai.de" date="1529755200">- Throw out silly -Werror in release builds.</changelog>
  <changelog author="tbechtold@suse.com" date="1541937600">- update to 1.15.1:
  * Document SSL portability and performance considerations. See
    https://github.com/grpc/grpc/blob/master/doc/ssl-performance.md .
  * Simplify call arena size growth.
  * PF: Check connectivity state before watching.
  * Added system roots feature to load roots from OS trust store.
  * Fix re-resolution in pick first.
  * Allow error strings in final_info to propagate to filters on
    call destruction.
  * Add resolver executor.
  * Data race fix for lockfree_event.
  * Channelz: Expose new Core API.
  * cmake: disable assembly optimizations only when necessary.
  * C++ sync server: Return status RESOURCE_EXHAUSTED if no
    thread quota available.
  * Use correct target name for gflags-config.cmake.
  * Make should generate pkg-config file for gpr as well.
  * Restrict the number of threads in C++ sync server.
  * Allow reset of connection backoff.
- update to 1.14.2:
  * Add TROUBLESHOOTING.md guide
  * Fixed gRPC channels blocking indefinitely and not respecting
    deadlines on network disconnect.
  * Add user guide for keepalive.
  * Fix GRPC_ARG_HTTP2_MIN_RECV_PING_INTERVAL_WITHOUT_DATA_MS doc
    to restrict usage to server.
  * Fixed ordering in adding pending picks to Round Robin LB.
  * Implement local channel/server credentials for UDS connections.
  * Allow extra copy in zero-copy protector integrity-only mode.
  * Update to use the canonical version of LB proto.
  * Prefer using https_proxy over http_proxy.
  * Refactor to put c-ares queries under a combiner.
  * Remove already_closed parameter from fd_orphan.
  * Add channel arg to enable/disable http proxy.
  * Fix shutdown of closed fd when c-ares opens a second fd.
  * Fixed segmentation fault when product name from BIOS is empty.
  * Introduce server-side load reporting service.
  * Reorder steps in ServerBuilder::BuildAndStart().
  * Support Per-Method Codegen Generic on Server Side.
  * Protobuf-related headers are available in a subspec of
    gRPC-C++ podspec.
- update to 1.13.1:
  * gRPC stats will only be collected for debug builds or if
    GRPC_COLLECT_STATS is defined. It will be disabled for opt
    builds.
  * Fix for Issue #13553. Unlimited can now be set as the max
    receive message length.
  * cmake install now also installs should also installs the
    roots.pem file.
- Drop 0001-Allow-building-the-python-module-with-system-openssl.patch
  Applied upstream
- Drop 0002-Allow-building-the-python-module-with-system-zlib.patch
  Applied upstream
- 0003-Allow-building-the-python-module-with-system-cares.patch
  Applied upstream</changelog>
  <changelog author="jengelh@inai.de" date="1541937601">- Update to new upstream release 1.16
  * Keepalive watchdog firing should return status UNAVAILABLE.
  * Set TCP_USER_TIMEOUT socket option for Linux.
  * Turn loading system root certificate as default.
  * Change pick_first to not unref unselected subchannels.
  * cmake: prevent C core from depending on libstdc++.
  * Implement Watch method in health check service.</changelog>
  <changelog author="mrostecki@suse.de" date="1546862400">- Add grpc-source package - some Go programs using gRPC need
  protobuf definitions which are included inside the source code,
  but are not included in the devel package.</changelog>
  <changelog author="jengelh@inai.de" date="1552737600">- Update to new upstream release 1.19.1
  * Use 32-bit nanopb fields.
  * Avoid SRV and TXT lookups for localhost.
  * Set c-ares as the default resolver.</changelog>
  <changelog author="sbrabec@suse.com" date="1555070400">- Fix typo in Groups.</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 1.21.3
  * Add SPIFFE security stack to gRPC.
  * Re-enable ALPN check in gRPC C core SSL stack.</changelog>
  <changelog author="jengelh@inai.de" date="1566129600">- Update to new upstream release 1.23 [boo#1144068]
  * Fixed a bug where POST_RECV_MESSAGE was not being triggered.
  * Renamed root certificate bundle in gRPC-C++ pod.
  * Increased lower bound on DNS re-resolution period to 30 seconds.
  * Fixed a segfault when forking while using gevent.
  * Added channel idleness support
  * Added threadpool support</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Disable LTO because it's broken.</changelog>
  <changelog author="jengelh@inai.de" date="1570017600">- Update to release 1.23.1
  * Unspecific refinements, improvements, and bug fixes.
- Add gettid.patch
- Split libgrpc into libgrpc++ because that has a SO version
  group of its own.
- Bump libgrpc6 to libgrpc7 as there is actually .so.7 files.
  Add suitable Conflicts markers.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1570708800">- Make sure that patches are included in the source package.
- Filter out several rpmlintrc warnings for the source package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1572955200">- Add patch which replaces BoringSSL with OpenSSL as the SSL
  library when grpc is used as a Bazel dependency:
  * 0001-bazel-Replace-boringssl-with-openssl.patch</changelog>
  <changelog author="mrostecki@opensuse.org" date="1573473600">- Define BoringSSL as a Bazel dependency in WORKSPACE instead of
  grpc_deps.bzl - using new_local_repository function is now always
  allowed in imported modules.</changelog>
  <changelog author="jengelh@inai.de" date="1576497600">- Update to release 1.25
  * Change RR to consider a subchannel in TF if it has failed
    since it was READY.
  * Do not create streams after a GOAWAY has been received.
  * Prevent HTTP2 parser from queueing a lot of induced frames.
- Drop gettid.patch</changelog>
  <changelog author="mrostecki@opensuse.org" date="1578571200">- Remove patch for Bazel files, which is not needed anymore:
  * 0001-bazel-Replace-boringssl-with-openssl.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1584014400">- Add conditional to build without python2 if needed</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1649160000">- Update in SLE-15 (bsc#1197726)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1772193600">- Add ignore-connection-aborted-errors-on-accept.patch to backport
  changes required by the security fix
- Add CVE-2023-33953.patch to fix unbounded memory and CPU consumption
  in the HPACK parser leads to remote DoS (bsc#1214148, CVE-2023-33953)</changelog>
</package>
<package pkgid="99085f5cdfd4e2e3e019b737d2f6044874c0c7863afe3576e18818b26e0c8fe6" name="libgstallocators-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.11.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
  <changelog author="mgorse@suse.com" date="1736164800">- Add various CVE fixes:
  + CVE-2024-47538.patch (boo#1234415 CVE-2024-47538)
  + CVE-2024-47835.patch (boo#1234450 CVe-2024-47835)
  + CVE-2024-47600.patch (boo#1234453 CVE-2024-47600)
  + CVE-2024-47615.patch (boo#1234456 CVE-2024-47615)
  + CVE-2024-47541.patch (boo#1234459 CVE-2024-47541)
  + CVE-2024-47542.patch (boo#1234460 CVE-2024-47542)</changelog>
  <changelog author="mgorse@suse.com" date="1736251200">- Add CVE-2024-47607.patch: opusdec: Set at most 64 channels to
  NONE position (boo#1234455 CVE-2024-47607).</changelog>
  <changelog author="mgorse@suse.com" date="1749643200">- Add more CVE fixes:
  + CVE-2025-47808.patch (boo#1244404 CVE-2025-47808)
  + CVE-2025-47807.patch (boo#1244403 CVE-2025-47807)
  + CVE-2025-47806.patch (boo#1244407 CVE-2025-47806)</changelog>
</package>
<package pkgid="6d87a6745301dcc663f622082c504a130cf1792f3541245c0cb9eaf9bd25d742" name="libgstapp-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.11.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
  <changelog author="mgorse@suse.com" date="1736164800">- Add various CVE fixes:
  + CVE-2024-47538.patch (boo#1234415 CVE-2024-47538)
  + CVE-2024-47835.patch (boo#1234450 CVe-2024-47835)
  + CVE-2024-47600.patch (boo#1234453 CVE-2024-47600)
  + CVE-2024-47615.patch (boo#1234456 CVE-2024-47615)
  + CVE-2024-47541.patch (boo#1234459 CVE-2024-47541)
  + CVE-2024-47542.patch (boo#1234460 CVE-2024-47542)</changelog>
  <changelog author="mgorse@suse.com" date="1736251200">- Add CVE-2024-47607.patch: opusdec: Set at most 64 channels to
  NONE position (boo#1234455 CVE-2024-47607).</changelog>
  <changelog author="mgorse@suse.com" date="1749643200">- Add more CVE fixes:
  + CVE-2025-47808.patch (boo#1244404 CVE-2025-47808)
  + CVE-2025-47807.patch (boo#1244403 CVE-2025-47807)
  + CVE-2025-47806.patch (boo#1244407 CVE-2025-47806)</changelog>
</package>
<package pkgid="15e313e4a9347ece4bf7f63f6ffef94ba5127751f0c0a5556626676996284b38" name="libgstaudio-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.11.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
  <changelog author="mgorse@suse.com" date="1736164800">- Add various CVE fixes:
  + CVE-2024-47538.patch (boo#1234415 CVE-2024-47538)
  + CVE-2024-47835.patch (boo#1234450 CVe-2024-47835)
  + CVE-2024-47600.patch (boo#1234453 CVE-2024-47600)
  + CVE-2024-47615.patch (boo#1234456 CVE-2024-47615)
  + CVE-2024-47541.patch (boo#1234459 CVE-2024-47541)
  + CVE-2024-47542.patch (boo#1234460 CVE-2024-47542)</changelog>
  <changelog author="mgorse@suse.com" date="1736251200">- Add CVE-2024-47607.patch: opusdec: Set at most 64 channels to
  NONE position (boo#1234455 CVE-2024-47607).</changelog>
  <changelog author="mgorse@suse.com" date="1749643200">- Add more CVE fixes:
  + CVE-2025-47808.patch (boo#1244404 CVE-2025-47808)
  + CVE-2025-47807.patch (boo#1244403 CVE-2025-47807)
  + CVE-2025-47806.patch (boo#1244407 CVE-2025-47806)</changelog>
</package>
<package pkgid="d5ceee0eec938d9cf00d3803acb64ec7de502ac019d606fe4864bf081f9a25c1" name="libgstfft-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.11.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
  <changelog author="mgorse@suse.com" date="1736164800">- Add various CVE fixes:
  + CVE-2024-47538.patch (boo#1234415 CVE-2024-47538)
  + CVE-2024-47835.patch (boo#1234450 CVe-2024-47835)
  + CVE-2024-47600.patch (boo#1234453 CVE-2024-47600)
  + CVE-2024-47615.patch (boo#1234456 CVE-2024-47615)
  + CVE-2024-47541.patch (boo#1234459 CVE-2024-47541)
  + CVE-2024-47542.patch (boo#1234460 CVE-2024-47542)</changelog>
  <changelog author="mgorse@suse.com" date="1736251200">- Add CVE-2024-47607.patch: opusdec: Set at most 64 channels to
  NONE position (boo#1234455 CVE-2024-47607).</changelog>
  <changelog author="mgorse@suse.com" date="1749643200">- Add more CVE fixes:
  + CVE-2025-47808.patch (boo#1244404 CVE-2025-47808)
  + CVE-2025-47807.patch (boo#1244403 CVE-2025-47807)
  + CVE-2025-47806.patch (boo#1244407 CVE-2025-47806)</changelog>
</package>
<package pkgid="f51cceb12038267c5cdf6abc99b3c711c6b1dd29f47fafee50dcfb0629a02cf5" name="libgstgl-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.11.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
  <changelog author="mgorse@suse.com" date="1736164800">- Add various CVE fixes:
  + CVE-2024-47538.patch (boo#1234415 CVE-2024-47538)
  + CVE-2024-47835.patch (boo#1234450 CVe-2024-47835)
  + CVE-2024-47600.patch (boo#1234453 CVE-2024-47600)
  + CVE-2024-47615.patch (boo#1234456 CVE-2024-47615)
  + CVE-2024-47541.patch (boo#1234459 CVE-2024-47541)
  + CVE-2024-47542.patch (boo#1234460 CVE-2024-47542)</changelog>
  <changelog author="mgorse@suse.com" date="1736251200">- Add CVE-2024-47607.patch: opusdec: Set at most 64 channels to
  NONE position (boo#1234455 CVE-2024-47607).</changelog>
  <changelog author="mgorse@suse.com" date="1749643200">- Add more CVE fixes:
  + CVE-2025-47808.patch (boo#1244404 CVE-2025-47808)
  + CVE-2025-47807.patch (boo#1244403 CVE-2025-47807)
  + CVE-2025-47806.patch (boo#1244407 CVE-2025-47806)</changelog>
</package>
<package pkgid="fe53733726eb22e4a7010b406140253cd88c0f192991bb587eab6b7f9cbd5493" name="libgstpbutils-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.11.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
  <changelog author="mgorse@suse.com" date="1736164800">- Add various CVE fixes:
  + CVE-2024-47538.patch (boo#1234415 CVE-2024-47538)
  + CVE-2024-47835.patch (boo#1234450 CVe-2024-47835)
  + CVE-2024-47600.patch (boo#1234453 CVE-2024-47600)
  + CVE-2024-47615.patch (boo#1234456 CVE-2024-47615)
  + CVE-2024-47541.patch (boo#1234459 CVE-2024-47541)
  + CVE-2024-47542.patch (boo#1234460 CVE-2024-47542)</changelog>
  <changelog author="mgorse@suse.com" date="1736251200">- Add CVE-2024-47607.patch: opusdec: Set at most 64 channels to
  NONE position (boo#1234455 CVE-2024-47607).</changelog>
  <changelog author="mgorse@suse.com" date="1749643200">- Add more CVE fixes:
  + CVE-2025-47808.patch (boo#1244404 CVE-2025-47808)
  + CVE-2025-47807.patch (boo#1244403 CVE-2025-47807)
  + CVE-2025-47806.patch (boo#1244407 CVE-2025-47806)</changelog>
</package>
<package pkgid="489508109f9d94b54a1c831ba77c6ad8a5cd1dd8afe829fd03f068f5296140a6" name="libgstphotography-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + asfmux: fix possible unaligned write on 32-bit ARM.
  + d3d11videosink: Fix error on pause and play.
  + d3dvideosink: Fix navigation event leak.
  + decklink: Correctly handle SDK strings on macOS and free
    strings after usage on Linux.
  + dvdspu: Make sure enough data is allocated for the available
    data (bsc#1213126, CVE-2023-37329).
  + fdkaacdec: Support up to 5 rear channels.
  + h265parse: Fix framerate handling.
  + kmssink: Add STM32 LTDC and NXP i.MX8M Plus LCDIFv3
    auto-detection.
  + sdpdemux: ensure that only one srcpad is created per stream.
  + srtpdec: fix critical warnings on shutdown.
  + testsrcbin: Remove spurious caps unref.
  + va: map the mbbrc to correct enum value in get_property().
  + vtenc: apply DTS offset to ensure DTS &lt;= PTS.
  + vtdec: time glitches on h264 playback.
  + waylandsink: Emit "map" signal boarder surface is ready.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + d3d11bufferpool: Fix heavy CPU usage in case of fixed-size pool
  + jpegparser: jpegdecoder: Don't pollute bus and comply with spec
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + webrtcbin: Prevent critical warning when creating an additional
    data channel
  + webrtcstats: Properly report IceCandidate type
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1695124800">- Add patch from upstream to build the package with
  webrtc-audio-processing-1 in Tumbleweed:
  * 0001-Update-code-for-webrtc-audio-processing-1.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audiolatency: Forward latency query and event upstream
  + av1parser: Fix segmentation params update
  + codecparsers: Fix MPEG-1 aspect ratio table
  + d3d11convert: Passthrough allocation query on same caps
  + h264decoder: Update latency dynamically
  + h265parser:
  - Allow partially broken hvcC data
  - Fix possible overflow using max_sub_layers_minus1
    (bsc#1215793, CVE-2023-40476)
  + hlssink2: Always use forward slash separator
  + mdns: Fix a crash on context error
  + mxfdemux: Fix integer overflow causing out of bounds writes
    when handling invalid uncompressed video and check channels for
    AES3 (bsc#1215796, CVE-2023-40474, bsc#1215792, CVE-2023-40475)
  + nvencoder: Fix negotiation error when interlace-mode is
    unspecified
  + rtmp2: Allow NULL flash version, omitting the field
  + rtmp2sink: fix crash if message conversion failed
  + transcodebin: Fixes for upstream selectable support
  + va: Fix in error logs functions mismatches
  + waylandsink:
  - Crop surfaces to their display width height
  - Fix cropping for video with non-square aspect ratio
  + webrtc: Fix docs for create-data-channel action signal
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audiobuffersplit: disable max-silence-time if set to 0
  + libde265: Do not decode the non 4:2:0 8 bits format
  + codecparsers: av1: Clip max tile rows and cols values
    (ZDI-CAN-22226, CVE-2023-44429, bsc#1217211)
  + codecs: h265: Do not free slice header before using it
  + d3d11converter: Fix 10/12bits planar output
  + d3d11decoder: Fix crash on negotiate() when decoder is not
    configured
  + d3d11videosink: Fix toggling between fullscreen and maximized
  + d3d11videosink: Fix window switching in case of fullscreen mode
  + d3d11screencapturesrc: Fix mouse cursor blending
  + decklink: Fix broken COM string conversion
  + decklink: Decklink Device Provider wrongly parses SDK strings
  + gstwayland: Don't depend on wayland-protocols
  + interaudiosrc: Add audio meta to buffers containing
    non-interleaved samples
  + kmssink: Add TIDSS auto-detection
  + mfvideoencoder: Fix typo in template caps
  + mxfdemux: Store GstMXFDemuxEssenceTrack in their own fixed
    allocation (ZDI-CAN-22300 bsc#1217213 CVE-2023-44446)
  + nvcodec: fix bounds for auto-select GPU enumeration
  + openh264: Fail gracefully if openh264 encoder/decoder creation
    fails
  + tsmux: More cleanups
  + tsmux: Fill padding packets with stuffing bytes
  + v4l2codecs: Fix tiled formats stride conversion
  + v4l2videodec: Correctly free caps to avoid memory leak
  + wasapi2: Don't use global volume control object
  + wasapi2device: Ignore activation failed device
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700568000">- Move pkgconfig(dvdnav) and pkgconfig(dvdread) BuildRequires out
  of BUILD_ORIG conditional, and stop passing resindvd=disabled and
  siren=disabled to meson setup, build dvd and siren 7 support in
  main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700740800">- Stop passing sctp=disabled and pass sctp=enabled to meson setup
  instead, enable build of sctp plugin.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + aesenc: Fix IV length addition to output buffer length
  + av1parser: Fix array sizes in scalability structure
    (ZDI-CAN-22300  bsc#1218534)
  + camerabin: Fix source updates with user filters
  + codecparsers: av1: Clip max tile rows and cols values
  + dtlscertificate: Define WINSOCKAPI before including windows.h
  + d3d11: fix building with address sanitizer
  + d3d11screencapturesrc: Fix wrong color with HDR enabled
  + h264decoder: Fix GstVideoCodecFrame leak
  + ladspa: Make RDF parsing truly optional
  + rtponviftimestamp: Fix drop-out-of-segment=false mode
  + qsvdecoder: Fix stream format detection
  + webrtcsdp: Remove fingerprint validation that doesn't make
    sense
  + GstPlay: Automatically flush the bus when disposing the
    signal adapter
  + GstPlayer: Without dispatcher emit signals directly instead
    of via the default main context
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="mlin@suse.com" date="1706011200">- Disable zxing in Leap15
  * Leap 15 can not provide zxing &gt;= 1.4.0, zxing is inherited from
    SLE15 but SLE15 do provide zxing version 1.2.0 only, Factory do
    have zxing-cpp 2.0.0 however it's not an API compatible version.</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + av1parser: Fix potential stack overflow during tile list
    parsing (CVE-2024-0444, bsc#1219453, ZDI-CAN-22300)
  + camerabin: Correctly relink viewfinderbin_queue
  + GstPlay: Fix error details parsing
  + h264decoder: Handle malformed avc/avc3 packets
  + h264decoder: h265decoder: Align with wraparound fix
  + vp8decoder: vp9decoder: av1decoder: mpeg2decoder:
    Fix multiplication wraparound
  + vah264enc/vah264dec issues after recent upgrade to 1.22.8
    from 1.22.7
  + va: fixes for Mesa Gallium drivers in Mesa versions older
    than v23.2
  + vp9parse: Fix critical warning during caps negotiation
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1706875200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)
- added support for oneVPL</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1707134400">- Require libvpl only on supported architectures (x86_64 and aarch64)</changelog>
  <changelog author="dimstar@opensuse.org" date="1709553600">- Disable webrtc audio  processing dependency on s390 s390x ppc64:
  webrtc-autio-processing is excluded on these architectures.</changelog>
  <changelog author="alarrosa@suse.com" date="1709640000">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.
- Remove patch which is already included in this version:
  * 0001-Update-code-for-webrtc-audio-processing-1.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1709726400">- Add new gstreamer plugins to baselibs.conf</changelog>
  <changelog author="dimstar@opensuse.org" date="1709726401">- baselibs.conf: Produce -32bit biarch packages of
  libgstanalytics-1_0-0 and libgstmse-1_0-0: dependencies of
  gstreamer-plugins-bad-32bit.</changelog>
  <changelog author="alarrosa@suse.com" date="1710244800">- Add patch that fixes a crash when initializing gstva, submitted
  to upstream at https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/6319
  (boo#1221150):
  * 0001-Move-PROP_RATE_CONTROL-to-the-end-of-the-array.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1710763200">- Disable the webrtcdsp plugin if webrtc-audio-processing-1 is not
  available (as in s390x).</changelog>
  <changelog author="mgorse@suse.com" date="1747656000">- Add gstreamer-plugins-bad-CVE-2025-3887.patch: fix bounds checks
  in h265parser (boo#1242809 CVE-2025-3887).</changelog>
</package>
<package pkgid="7446a769c9185d806c66a27f02c3115c15f437a3408f4255bfeff65819e888c6" name="libgstplay-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + asfmux: fix possible unaligned write on 32-bit ARM.
  + d3d11videosink: Fix error on pause and play.
  + d3dvideosink: Fix navigation event leak.
  + decklink: Correctly handle SDK strings on macOS and free
    strings after usage on Linux.
  + dvdspu: Make sure enough data is allocated for the available
    data (bsc#1213126, CVE-2023-37329).
  + fdkaacdec: Support up to 5 rear channels.
  + h265parse: Fix framerate handling.
  + kmssink: Add STM32 LTDC and NXP i.MX8M Plus LCDIFv3
    auto-detection.
  + sdpdemux: ensure that only one srcpad is created per stream.
  + srtpdec: fix critical warnings on shutdown.
  + testsrcbin: Remove spurious caps unref.
  + va: map the mbbrc to correct enum value in get_property().
  + vtenc: apply DTS offset to ensure DTS &lt;= PTS.
  + vtdec: time glitches on h264 playback.
  + waylandsink: Emit "map" signal boarder surface is ready.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + d3d11bufferpool: Fix heavy CPU usage in case of fixed-size pool
  + jpegparser: jpegdecoder: Don't pollute bus and comply with spec
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + webrtcbin: Prevent critical warning when creating an additional
    data channel
  + webrtcstats: Properly report IceCandidate type
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1695124800">- Add patch from upstream to build the package with
  webrtc-audio-processing-1 in Tumbleweed:
  * 0001-Update-code-for-webrtc-audio-processing-1.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audiolatency: Forward latency query and event upstream
  + av1parser: Fix segmentation params update
  + codecparsers: Fix MPEG-1 aspect ratio table
  + d3d11convert: Passthrough allocation query on same caps
  + h264decoder: Update latency dynamically
  + h265parser:
  - Allow partially broken hvcC data
  - Fix possible overflow using max_sub_layers_minus1
    (bsc#1215793, CVE-2023-40476)
  + hlssink2: Always use forward slash separator
  + mdns: Fix a crash on context error
  + mxfdemux: Fix integer overflow causing out of bounds writes
    when handling invalid uncompressed video and check channels for
    AES3 (bsc#1215796, CVE-2023-40474, bsc#1215792, CVE-2023-40475)
  + nvencoder: Fix negotiation error when interlace-mode is
    unspecified
  + rtmp2: Allow NULL flash version, omitting the field
  + rtmp2sink: fix crash if message conversion failed
  + transcodebin: Fixes for upstream selectable support
  + va: Fix in error logs functions mismatches
  + waylandsink:
  - Crop surfaces to their display width height
  - Fix cropping for video with non-square aspect ratio
  + webrtc: Fix docs for create-data-channel action signal
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audiobuffersplit: disable max-silence-time if set to 0
  + libde265: Do not decode the non 4:2:0 8 bits format
  + codecparsers: av1: Clip max tile rows and cols values
    (ZDI-CAN-22226, CVE-2023-44429, bsc#1217211)
  + codecs: h265: Do not free slice header before using it
  + d3d11converter: Fix 10/12bits planar output
  + d3d11decoder: Fix crash on negotiate() when decoder is not
    configured
  + d3d11videosink: Fix toggling between fullscreen and maximized
  + d3d11videosink: Fix window switching in case of fullscreen mode
  + d3d11screencapturesrc: Fix mouse cursor blending
  + decklink: Fix broken COM string conversion
  + decklink: Decklink Device Provider wrongly parses SDK strings
  + gstwayland: Don't depend on wayland-protocols
  + interaudiosrc: Add audio meta to buffers containing
    non-interleaved samples
  + kmssink: Add TIDSS auto-detection
  + mfvideoencoder: Fix typo in template caps
  + mxfdemux: Store GstMXFDemuxEssenceTrack in their own fixed
    allocation (ZDI-CAN-22300 bsc#1217213 CVE-2023-44446)
  + nvcodec: fix bounds for auto-select GPU enumeration
  + openh264: Fail gracefully if openh264 encoder/decoder creation
    fails
  + tsmux: More cleanups
  + tsmux: Fill padding packets with stuffing bytes
  + v4l2codecs: Fix tiled formats stride conversion
  + v4l2videodec: Correctly free caps to avoid memory leak
  + wasapi2: Don't use global volume control object
  + wasapi2device: Ignore activation failed device
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700568000">- Move pkgconfig(dvdnav) and pkgconfig(dvdread) BuildRequires out
  of BUILD_ORIG conditional, and stop passing resindvd=disabled and
  siren=disabled to meson setup, build dvd and siren 7 support in
  main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700740800">- Stop passing sctp=disabled and pass sctp=enabled to meson setup
  instead, enable build of sctp plugin.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + aesenc: Fix IV length addition to output buffer length
  + av1parser: Fix array sizes in scalability structure
    (ZDI-CAN-22300  bsc#1218534)
  + camerabin: Fix source updates with user filters
  + codecparsers: av1: Clip max tile rows and cols values
  + dtlscertificate: Define WINSOCKAPI before including windows.h
  + d3d11: fix building with address sanitizer
  + d3d11screencapturesrc: Fix wrong color with HDR enabled
  + h264decoder: Fix GstVideoCodecFrame leak
  + ladspa: Make RDF parsing truly optional
  + rtponviftimestamp: Fix drop-out-of-segment=false mode
  + qsvdecoder: Fix stream format detection
  + webrtcsdp: Remove fingerprint validation that doesn't make
    sense
  + GstPlay: Automatically flush the bus when disposing the
    signal adapter
  + GstPlayer: Without dispatcher emit signals directly instead
    of via the default main context
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="mlin@suse.com" date="1706011200">- Disable zxing in Leap15
  * Leap 15 can not provide zxing &gt;= 1.4.0, zxing is inherited from
    SLE15 but SLE15 do provide zxing version 1.2.0 only, Factory do
    have zxing-cpp 2.0.0 however it's not an API compatible version.</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + av1parser: Fix potential stack overflow during tile list
    parsing (CVE-2024-0444, bsc#1219453, ZDI-CAN-22300)
  + camerabin: Correctly relink viewfinderbin_queue
  + GstPlay: Fix error details parsing
  + h264decoder: Handle malformed avc/avc3 packets
  + h264decoder: h265decoder: Align with wraparound fix
  + vp8decoder: vp9decoder: av1decoder: mpeg2decoder:
    Fix multiplication wraparound
  + vah264enc/vah264dec issues after recent upgrade to 1.22.8
    from 1.22.7
  + va: fixes for Mesa Gallium drivers in Mesa versions older
    than v23.2
  + vp9parse: Fix critical warning during caps negotiation
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1706875200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)
- added support for oneVPL</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1707134400">- Require libvpl only on supported architectures (x86_64 and aarch64)</changelog>
  <changelog author="dimstar@opensuse.org" date="1709553600">- Disable webrtc audio  processing dependency on s390 s390x ppc64:
  webrtc-autio-processing is excluded on these architectures.</changelog>
  <changelog author="alarrosa@suse.com" date="1709640000">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.
- Remove patch which is already included in this version:
  * 0001-Update-code-for-webrtc-audio-processing-1.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1709726400">- Add new gstreamer plugins to baselibs.conf</changelog>
  <changelog author="dimstar@opensuse.org" date="1709726401">- baselibs.conf: Produce -32bit biarch packages of
  libgstanalytics-1_0-0 and libgstmse-1_0-0: dependencies of
  gstreamer-plugins-bad-32bit.</changelog>
  <changelog author="alarrosa@suse.com" date="1710244800">- Add patch that fixes a crash when initializing gstva, submitted
  to upstream at https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/6319
  (boo#1221150):
  * 0001-Move-PROP_RATE_CONTROL-to-the-end-of-the-array.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1710763200">- Disable the webrtcdsp plugin if webrtc-audio-processing-1 is not
  available (as in s390x).</changelog>
  <changelog author="mgorse@suse.com" date="1747656000">- Add gstreamer-plugins-bad-CVE-2025-3887.patch: fix bounds checks
  in h265parser (boo#1242809 CVE-2025-3887).</changelog>
</package>
<package pkgid="5aa107d07ce6b61417b6949cc50ef66eaebff180405b3c3d5738b5b0a35ad927" name="libgstplayer-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + asfmux: fix possible unaligned write on 32-bit ARM.
  + d3d11videosink: Fix error on pause and play.
  + d3dvideosink: Fix navigation event leak.
  + decklink: Correctly handle SDK strings on macOS and free
    strings after usage on Linux.
  + dvdspu: Make sure enough data is allocated for the available
    data (bsc#1213126, CVE-2023-37329).
  + fdkaacdec: Support up to 5 rear channels.
  + h265parse: Fix framerate handling.
  + kmssink: Add STM32 LTDC and NXP i.MX8M Plus LCDIFv3
    auto-detection.
  + sdpdemux: ensure that only one srcpad is created per stream.
  + srtpdec: fix critical warnings on shutdown.
  + testsrcbin: Remove spurious caps unref.
  + va: map the mbbrc to correct enum value in get_property().
  + vtenc: apply DTS offset to ensure DTS &lt;= PTS.
  + vtdec: time glitches on h264 playback.
  + waylandsink: Emit "map" signal boarder surface is ready.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + d3d11bufferpool: Fix heavy CPU usage in case of fixed-size pool
  + jpegparser: jpegdecoder: Don't pollute bus and comply with spec
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + webrtcbin: Prevent critical warning when creating an additional
    data channel
  + webrtcstats: Properly report IceCandidate type
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1695124800">- Add patch from upstream to build the package with
  webrtc-audio-processing-1 in Tumbleweed:
  * 0001-Update-code-for-webrtc-audio-processing-1.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audiolatency: Forward latency query and event upstream
  + av1parser: Fix segmentation params update
  + codecparsers: Fix MPEG-1 aspect ratio table
  + d3d11convert: Passthrough allocation query on same caps
  + h264decoder: Update latency dynamically
  + h265parser:
  - Allow partially broken hvcC data
  - Fix possible overflow using max_sub_layers_minus1
    (bsc#1215793, CVE-2023-40476)
  + hlssink2: Always use forward slash separator
  + mdns: Fix a crash on context error
  + mxfdemux: Fix integer overflow causing out of bounds writes
    when handling invalid uncompressed video and check channels for
    AES3 (bsc#1215796, CVE-2023-40474, bsc#1215792, CVE-2023-40475)
  + nvencoder: Fix negotiation error when interlace-mode is
    unspecified
  + rtmp2: Allow NULL flash version, omitting the field
  + rtmp2sink: fix crash if message conversion failed
  + transcodebin: Fixes for upstream selectable support
  + va: Fix in error logs functions mismatches
  + waylandsink:
  - Crop surfaces to their display width height
  - Fix cropping for video with non-square aspect ratio
  + webrtc: Fix docs for create-data-channel action signal
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audiobuffersplit: disable max-silence-time if set to 0
  + libde265: Do not decode the non 4:2:0 8 bits format
  + codecparsers: av1: Clip max tile rows and cols values
    (ZDI-CAN-22226, CVE-2023-44429, bsc#1217211)
  + codecs: h265: Do not free slice header before using it
  + d3d11converter: Fix 10/12bits planar output
  + d3d11decoder: Fix crash on negotiate() when decoder is not
    configured
  + d3d11videosink: Fix toggling between fullscreen and maximized
  + d3d11videosink: Fix window switching in case of fullscreen mode
  + d3d11screencapturesrc: Fix mouse cursor blending
  + decklink: Fix broken COM string conversion
  + decklink: Decklink Device Provider wrongly parses SDK strings
  + gstwayland: Don't depend on wayland-protocols
  + interaudiosrc: Add audio meta to buffers containing
    non-interleaved samples
  + kmssink: Add TIDSS auto-detection
  + mfvideoencoder: Fix typo in template caps
  + mxfdemux: Store GstMXFDemuxEssenceTrack in their own fixed
    allocation (ZDI-CAN-22300 bsc#1217213 CVE-2023-44446)
  + nvcodec: fix bounds for auto-select GPU enumeration
  + openh264: Fail gracefully if openh264 encoder/decoder creation
    fails
  + tsmux: More cleanups
  + tsmux: Fill padding packets with stuffing bytes
  + v4l2codecs: Fix tiled formats stride conversion
  + v4l2videodec: Correctly free caps to avoid memory leak
  + wasapi2: Don't use global volume control object
  + wasapi2device: Ignore activation failed device
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700568000">- Move pkgconfig(dvdnav) and pkgconfig(dvdread) BuildRequires out
  of BUILD_ORIG conditional, and stop passing resindvd=disabled and
  siren=disabled to meson setup, build dvd and siren 7 support in
  main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700740800">- Stop passing sctp=disabled and pass sctp=enabled to meson setup
  instead, enable build of sctp plugin.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + aesenc: Fix IV length addition to output buffer length
  + av1parser: Fix array sizes in scalability structure
    (ZDI-CAN-22300  bsc#1218534)
  + camerabin: Fix source updates with user filters
  + codecparsers: av1: Clip max tile rows and cols values
  + dtlscertificate: Define WINSOCKAPI before including windows.h
  + d3d11: fix building with address sanitizer
  + d3d11screencapturesrc: Fix wrong color with HDR enabled
  + h264decoder: Fix GstVideoCodecFrame leak
  + ladspa: Make RDF parsing truly optional
  + rtponviftimestamp: Fix drop-out-of-segment=false mode
  + qsvdecoder: Fix stream format detection
  + webrtcsdp: Remove fingerprint validation that doesn't make
    sense
  + GstPlay: Automatically flush the bus when disposing the
    signal adapter
  + GstPlayer: Without dispatcher emit signals directly instead
    of via the default main context
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="mlin@suse.com" date="1706011200">- Disable zxing in Leap15
  * Leap 15 can not provide zxing &gt;= 1.4.0, zxing is inherited from
    SLE15 but SLE15 do provide zxing version 1.2.0 only, Factory do
    have zxing-cpp 2.0.0 however it's not an API compatible version.</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + av1parser: Fix potential stack overflow during tile list
    parsing (CVE-2024-0444, bsc#1219453, ZDI-CAN-22300)
  + camerabin: Correctly relink viewfinderbin_queue
  + GstPlay: Fix error details parsing
  + h264decoder: Handle malformed avc/avc3 packets
  + h264decoder: h265decoder: Align with wraparound fix
  + vp8decoder: vp9decoder: av1decoder: mpeg2decoder:
    Fix multiplication wraparound
  + vah264enc/vah264dec issues after recent upgrade to 1.22.8
    from 1.22.7
  + va: fixes for Mesa Gallium drivers in Mesa versions older
    than v23.2
  + vp9parse: Fix critical warning during caps negotiation
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1706875200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)
- added support for oneVPL</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1707134400">- Require libvpl only on supported architectures (x86_64 and aarch64)</changelog>
  <changelog author="dimstar@opensuse.org" date="1709553600">- Disable webrtc audio  processing dependency on s390 s390x ppc64:
  webrtc-autio-processing is excluded on these architectures.</changelog>
  <changelog author="alarrosa@suse.com" date="1709640000">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.
- Remove patch which is already included in this version:
  * 0001-Update-code-for-webrtc-audio-processing-1.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1709726400">- Add new gstreamer plugins to baselibs.conf</changelog>
  <changelog author="dimstar@opensuse.org" date="1709726401">- baselibs.conf: Produce -32bit biarch packages of
  libgstanalytics-1_0-0 and libgstmse-1_0-0: dependencies of
  gstreamer-plugins-bad-32bit.</changelog>
  <changelog author="alarrosa@suse.com" date="1710244800">- Add patch that fixes a crash when initializing gstva, submitted
  to upstream at https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/6319
  (boo#1221150):
  * 0001-Move-PROP_RATE_CONTROL-to-the-end-of-the-array.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1710763200">- Disable the webrtcdsp plugin if webrtc-audio-processing-1 is not
  available (as in s390x).</changelog>
  <changelog author="mgorse@suse.com" date="1747656000">- Add gstreamer-plugins-bad-CVE-2025-3887.patch: fix bounds checks
  in h265parser (boo#1242809 CVE-2025-3887).</changelog>
</package>
<package pkgid="af30ce4d71e315e99527d97306897072f6ab645a604a32e95803a78a0df7b61e" name="libgstriff-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.11.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
  <changelog author="mgorse@suse.com" date="1736164800">- Add various CVE fixes:
  + CVE-2024-47538.patch (boo#1234415 CVE-2024-47538)
  + CVE-2024-47835.patch (boo#1234450 CVe-2024-47835)
  + CVE-2024-47600.patch (boo#1234453 CVE-2024-47600)
  + CVE-2024-47615.patch (boo#1234456 CVE-2024-47615)
  + CVE-2024-47541.patch (boo#1234459 CVE-2024-47541)
  + CVE-2024-47542.patch (boo#1234460 CVE-2024-47542)</changelog>
  <changelog author="mgorse@suse.com" date="1736251200">- Add CVE-2024-47607.patch: opusdec: Set at most 64 channels to
  NONE position (boo#1234455 CVE-2024-47607).</changelog>
  <changelog author="mgorse@suse.com" date="1749643200">- Add more CVE fixes:
  + CVE-2025-47808.patch (boo#1244404 CVE-2025-47808)
  + CVE-2025-47807.patch (boo#1244403 CVE-2025-47807)
  + CVE-2025-47806.patch (boo#1244407 CVE-2025-47806)</changelog>
</package>
<package pkgid="a99181dc25d17a8e2079de50928c510a1fc22da5960029684ab612a4ac14d95b" name="libgstrtp-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.11.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
  <changelog author="mgorse@suse.com" date="1736164800">- Add various CVE fixes:
  + CVE-2024-47538.patch (boo#1234415 CVE-2024-47538)
  + CVE-2024-47835.patch (boo#1234450 CVe-2024-47835)
  + CVE-2024-47600.patch (boo#1234453 CVE-2024-47600)
  + CVE-2024-47615.patch (boo#1234456 CVE-2024-47615)
  + CVE-2024-47541.patch (boo#1234459 CVE-2024-47541)
  + CVE-2024-47542.patch (boo#1234460 CVE-2024-47542)</changelog>
  <changelog author="mgorse@suse.com" date="1736251200">- Add CVE-2024-47607.patch: opusdec: Set at most 64 channels to
  NONE position (boo#1234455 CVE-2024-47607).</changelog>
  <changelog author="mgorse@suse.com" date="1749643200">- Add more CVE fixes:
  + CVE-2025-47808.patch (boo#1244404 CVE-2025-47808)
  + CVE-2025-47807.patch (boo#1244403 CVE-2025-47807)
  + CVE-2025-47806.patch (boo#1244407 CVE-2025-47806)</changelog>
</package>
<package pkgid="7d2ce241ab2b5526f83c99767ca45e993b5c3d2f58cc11e6b265493a4b199d09" name="libgstrtsp-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.11.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
  <changelog author="mgorse@suse.com" date="1736164800">- Add various CVE fixes:
  + CVE-2024-47538.patch (boo#1234415 CVE-2024-47538)
  + CVE-2024-47835.patch (boo#1234450 CVe-2024-47835)
  + CVE-2024-47600.patch (boo#1234453 CVE-2024-47600)
  + CVE-2024-47615.patch (boo#1234456 CVE-2024-47615)
  + CVE-2024-47541.patch (boo#1234459 CVE-2024-47541)
  + CVE-2024-47542.patch (boo#1234460 CVE-2024-47542)</changelog>
  <changelog author="mgorse@suse.com" date="1736251200">- Add CVE-2024-47607.patch: opusdec: Set at most 64 channels to
  NONE position (boo#1234455 CVE-2024-47607).</changelog>
  <changelog author="mgorse@suse.com" date="1749643200">- Add more CVE fixes:
  + CVE-2025-47808.patch (boo#1244404 CVE-2025-47808)
  + CVE-2025-47807.patch (boo#1244403 CVE-2025-47807)
  + CVE-2025-47806.patch (boo#1244407 CVE-2025-47806)</changelog>
</package>
<package pkgid="ece376d4eb2595aa80c07ad774def5aa27202b52b3c8131592129baaf808ab6e" name="libgstsdp-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.11.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
  <changelog author="mgorse@suse.com" date="1736164800">- Add various CVE fixes:
  + CVE-2024-47538.patch (boo#1234415 CVE-2024-47538)
  + CVE-2024-47835.patch (boo#1234450 CVe-2024-47835)
  + CVE-2024-47600.patch (boo#1234453 CVE-2024-47600)
  + CVE-2024-47615.patch (boo#1234456 CVE-2024-47615)
  + CVE-2024-47541.patch (boo#1234459 CVE-2024-47541)
  + CVE-2024-47542.patch (boo#1234460 CVE-2024-47542)</changelog>
  <changelog author="mgorse@suse.com" date="1736251200">- Add CVE-2024-47607.patch: opusdec: Set at most 64 channels to
  NONE position (boo#1234455 CVE-2024-47607).</changelog>
  <changelog author="mgorse@suse.com" date="1749643200">- Add more CVE fixes:
  + CVE-2025-47808.patch (boo#1244404 CVE-2025-47808)
  + CVE-2025-47807.patch (boo#1244403 CVE-2025-47807)
  + CVE-2025-47806.patch (boo#1244407 CVE-2025-47806)</changelog>
</package>
<package pkgid="ecf76d78cdd9b3b70ef8fd42f1b4db1e08f9bdd062310f82e4b4184933667066" name="libgsttag-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.11.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
  <changelog author="mgorse@suse.com" date="1736164800">- Add various CVE fixes:
  + CVE-2024-47538.patch (boo#1234415 CVE-2024-47538)
  + CVE-2024-47835.patch (boo#1234450 CVe-2024-47835)
  + CVE-2024-47600.patch (boo#1234453 CVE-2024-47600)
  + CVE-2024-47615.patch (boo#1234456 CVE-2024-47615)
  + CVE-2024-47541.patch (boo#1234459 CVE-2024-47541)
  + CVE-2024-47542.patch (boo#1234460 CVE-2024-47542)</changelog>
  <changelog author="mgorse@suse.com" date="1736251200">- Add CVE-2024-47607.patch: opusdec: Set at most 64 channels to
  NONE position (boo#1234455 CVE-2024-47607).</changelog>
  <changelog author="mgorse@suse.com" date="1749643200">- Add more CVE fixes:
  + CVE-2025-47808.patch (boo#1244404 CVE-2025-47808)
  + CVE-2025-47807.patch (boo#1244403 CVE-2025-47807)
  + CVE-2025-47806.patch (boo#1244407 CVE-2025-47806)</changelog>
</package>
<package pkgid="a27e55171b1e1cdebca17a8ca8f6fb53f5312f78db8c2e679b34abc0b835a394" name="libgsttranscoder-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + asfmux: fix possible unaligned write on 32-bit ARM.
  + d3d11videosink: Fix error on pause and play.
  + d3dvideosink: Fix navigation event leak.
  + decklink: Correctly handle SDK strings on macOS and free
    strings after usage on Linux.
  + dvdspu: Make sure enough data is allocated for the available
    data (bsc#1213126, CVE-2023-37329).
  + fdkaacdec: Support up to 5 rear channels.
  + h265parse: Fix framerate handling.
  + kmssink: Add STM32 LTDC and NXP i.MX8M Plus LCDIFv3
    auto-detection.
  + sdpdemux: ensure that only one srcpad is created per stream.
  + srtpdec: fix critical warnings on shutdown.
  + testsrcbin: Remove spurious caps unref.
  + va: map the mbbrc to correct enum value in get_property().
  + vtenc: apply DTS offset to ensure DTS &lt;= PTS.
  + vtdec: time glitches on h264 playback.
  + waylandsink: Emit "map" signal boarder surface is ready.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + d3d11bufferpool: Fix heavy CPU usage in case of fixed-size pool
  + jpegparser: jpegdecoder: Don't pollute bus and comply with spec
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + webrtcbin: Prevent critical warning when creating an additional
    data channel
  + webrtcstats: Properly report IceCandidate type
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1695124800">- Add patch from upstream to build the package with
  webrtc-audio-processing-1 in Tumbleweed:
  * 0001-Update-code-for-webrtc-audio-processing-1.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audiolatency: Forward latency query and event upstream
  + av1parser: Fix segmentation params update
  + codecparsers: Fix MPEG-1 aspect ratio table
  + d3d11convert: Passthrough allocation query on same caps
  + h264decoder: Update latency dynamically
  + h265parser:
  - Allow partially broken hvcC data
  - Fix possible overflow using max_sub_layers_minus1
    (bsc#1215793, CVE-2023-40476)
  + hlssink2: Always use forward slash separator
  + mdns: Fix a crash on context error
  + mxfdemux: Fix integer overflow causing out of bounds writes
    when handling invalid uncompressed video and check channels for
    AES3 (bsc#1215796, CVE-2023-40474, bsc#1215792, CVE-2023-40475)
  + nvencoder: Fix negotiation error when interlace-mode is
    unspecified
  + rtmp2: Allow NULL flash version, omitting the field
  + rtmp2sink: fix crash if message conversion failed
  + transcodebin: Fixes for upstream selectable support
  + va: Fix in error logs functions mismatches
  + waylandsink:
  - Crop surfaces to their display width height
  - Fix cropping for video with non-square aspect ratio
  + webrtc: Fix docs for create-data-channel action signal
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audiobuffersplit: disable max-silence-time if set to 0
  + libde265: Do not decode the non 4:2:0 8 bits format
  + codecparsers: av1: Clip max tile rows and cols values
    (ZDI-CAN-22226, CVE-2023-44429, bsc#1217211)
  + codecs: h265: Do not free slice header before using it
  + d3d11converter: Fix 10/12bits planar output
  + d3d11decoder: Fix crash on negotiate() when decoder is not
    configured
  + d3d11videosink: Fix toggling between fullscreen and maximized
  + d3d11videosink: Fix window switching in case of fullscreen mode
  + d3d11screencapturesrc: Fix mouse cursor blending
  + decklink: Fix broken COM string conversion
  + decklink: Decklink Device Provider wrongly parses SDK strings
  + gstwayland: Don't depend on wayland-protocols
  + interaudiosrc: Add audio meta to buffers containing
    non-interleaved samples
  + kmssink: Add TIDSS auto-detection
  + mfvideoencoder: Fix typo in template caps
  + mxfdemux: Store GstMXFDemuxEssenceTrack in their own fixed
    allocation (ZDI-CAN-22300 bsc#1217213 CVE-2023-44446)
  + nvcodec: fix bounds for auto-select GPU enumeration
  + openh264: Fail gracefully if openh264 encoder/decoder creation
    fails
  + tsmux: More cleanups
  + tsmux: Fill padding packets with stuffing bytes
  + v4l2codecs: Fix tiled formats stride conversion
  + v4l2videodec: Correctly free caps to avoid memory leak
  + wasapi2: Don't use global volume control object
  + wasapi2device: Ignore activation failed device
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700568000">- Move pkgconfig(dvdnav) and pkgconfig(dvdread) BuildRequires out
  of BUILD_ORIG conditional, and stop passing resindvd=disabled and
  siren=disabled to meson setup, build dvd and siren 7 support in
  main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700740800">- Stop passing sctp=disabled and pass sctp=enabled to meson setup
  instead, enable build of sctp plugin.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + aesenc: Fix IV length addition to output buffer length
  + av1parser: Fix array sizes in scalability structure
    (ZDI-CAN-22300  bsc#1218534)
  + camerabin: Fix source updates with user filters
  + codecparsers: av1: Clip max tile rows and cols values
  + dtlscertificate: Define WINSOCKAPI before including windows.h
  + d3d11: fix building with address sanitizer
  + d3d11screencapturesrc: Fix wrong color with HDR enabled
  + h264decoder: Fix GstVideoCodecFrame leak
  + ladspa: Make RDF parsing truly optional
  + rtponviftimestamp: Fix drop-out-of-segment=false mode
  + qsvdecoder: Fix stream format detection
  + webrtcsdp: Remove fingerprint validation that doesn't make
    sense
  + GstPlay: Automatically flush the bus when disposing the
    signal adapter
  + GstPlayer: Without dispatcher emit signals directly instead
    of via the default main context
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="mlin@suse.com" date="1706011200">- Disable zxing in Leap15
  * Leap 15 can not provide zxing &gt;= 1.4.0, zxing is inherited from
    SLE15 but SLE15 do provide zxing version 1.2.0 only, Factory do
    have zxing-cpp 2.0.0 however it's not an API compatible version.</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + av1parser: Fix potential stack overflow during tile list
    parsing (CVE-2024-0444, bsc#1219453, ZDI-CAN-22300)
  + camerabin: Correctly relink viewfinderbin_queue
  + GstPlay: Fix error details parsing
  + h264decoder: Handle malformed avc/avc3 packets
  + h264decoder: h265decoder: Align with wraparound fix
  + vp8decoder: vp9decoder: av1decoder: mpeg2decoder:
    Fix multiplication wraparound
  + vah264enc/vah264dec issues after recent upgrade to 1.22.8
    from 1.22.7
  + va: fixes for Mesa Gallium drivers in Mesa versions older
    than v23.2
  + vp9parse: Fix critical warning during caps negotiation
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1706875200">- drop support for libmfx, which is no longer supported upstream
  at all (boo#1219494)
- added support for oneVPL</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1707134400">- Require libvpl only on supported architectures (x86_64 and aarch64)</changelog>
  <changelog author="dimstar@opensuse.org" date="1709553600">- Disable webrtc audio  processing dependency on s390 s390x ppc64:
  webrtc-autio-processing is excluded on these architectures.</changelog>
  <changelog author="alarrosa@suse.com" date="1709640000">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.
- Remove patch which is already included in this version:
  * 0001-Update-code-for-webrtc-audio-processing-1.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1709726400">- Add new gstreamer plugins to baselibs.conf</changelog>
  <changelog author="dimstar@opensuse.org" date="1709726401">- baselibs.conf: Produce -32bit biarch packages of
  libgstanalytics-1_0-0 and libgstmse-1_0-0: dependencies of
  gstreamer-plugins-bad-32bit.</changelog>
  <changelog author="alarrosa@suse.com" date="1710244800">- Add patch that fixes a crash when initializing gstva, submitted
  to upstream at https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/6319
  (boo#1221150):
  * 0001-Move-PROP_RATE_CONTROL-to-the-end-of-the-array.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1710763200">- Disable the webrtcdsp plugin if webrtc-audio-processing-1 is not
  available (as in s390x).</changelog>
  <changelog author="mgorse@suse.com" date="1747656000">- Add gstreamer-plugins-bad-CVE-2025-3887.patch: fix bounds checks
  in h265parser (boo#1242809 CVE-2025-3887).</changelog>
</package>
<package pkgid="58f7547f1f00d6df15adf8c249a569d5f05bc530d04e7304903afa06670a8c26" name="libgstvideo-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.24.0" rel="150600.3.11.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1666353600">- Update to version 1.20.4:
  + decodebin3:
  - Fix mutex leaks
  - Fix memory issues with active selection list
  - uridecodebin3, urisourcebin: Event handling fixes
  - Fix EOS event sequence
  + parsebin:
  - Avoid crash with unknown streams
  - SIGSEGV during HLS stream using souphttpsrc
  + glimagesink:
  - Only allow setting the GL display/context if it is a valid
    value
  - Segfault on android devices
  + gstgl: Fix several memory leaks in macOS
  + opusenc: improve inband-fec property documentation
  + playsink: Hold a reference to the soft volume element
  + pbutils: descriptions: fix
    gst_pb_utils_get_caps_description_flags()
  + rtspurl: Use gst_uri_join_strings() in
    gst_rtsp_url_get_request_uri_with_control() instead of a
    hand-crafted, wrong version
  + rtspconnection: protect cancellable by a mutex
  + sdpmessage: Don't set SDP medias from caps without
    media/payload/clock-rate fields
  + samiparse: fix handling of self-closing tags
  + ssaparse: include required system headers for isspace() and
    sscanf() functions
  + subparse: fix crash when parsing invalid timestamps in mpl2
  + subparse fixes
  + textoverlay: Don't miscalculate text running times
  + videoaggregator: always convert when user provides
    converter-config
  + video: Fix scaling in 4x horizontal co-sited chroma (Y41B,
    YUV9, YVU9 and IYU9)
  + xmptag: register musicbrainz tags during init to fix critical
    in jpegparse
  + xvimagesink: fix image leaks in error code path
  + tests: skip unit tests for dependency-less elements that have
    been disabled</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671796800">- Update to version 1.20.5:
  + audioconvert, audioresample, audiofilter: fix divide by 0 for
    input buffer without caps
  + cdparanoia: Ignore compiler warning coming from the cdparanoia
    header
  + oggdemux, parsebin: More leak fixes
  + opengl:
  - Fix automatic dispmanx detection for rpi4
  - Fix usage of eglCreate/DestroyImage
  - Fix static linking on macOS
  + Bump core requirement in 1.20 branch to 1.20.4
  + oggdemux: Don't leak incoming EOS event
  + opusdec: Various channel-related fixes
  + subparse: Fix non-closed tag handling.
  + textrender:
  - Don't blindly forward all events and don't blindly forward
    all events
  - Negotiate caps on a GAP event if none were negotiated yet
  + timeoverlay: fix pad leak
  + videodecoder: Only post latency message if it changed
  + videoscale: buffer meta handling fixes (NULL-terminate array of
    valid meta tags)
  + videosink: Don't return unknown end-time from get_times()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674561600">- Update to version 1.22.0:
  + Please see changes in gstreamer main package, major version
    bump.
- Rebase patches with quilt.
- Add pkgconfig(xi) BuildRequires: New dependency.</changelog>
  <changelog author="alarrosa@suse.com" date="1674820800">- Add patch to reduce the required meson version to 0.61.0 since
  that's what we have in SLE 15:
  * reduce-required-meson.patch
- Probably because of a problem in SLE's meson, the generated
  pkgconfig files are missing some variables that are needed by
  rpm to generate the pkgconfig(...) provides correctly. In order
  to fix this, we now check for those variables and insert them
  in the pc files before installation if they're missing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update version to 1.22.1:
  + alsasink: Fix stall when going from PLAYING to NULL (stucked at
    PAUSED) with uac1 gadget
  + appsrc: Don't chain up BaseSrc::negotiate()
  + audio: channel-mix: Fix channel count limit to be able to equal
    64
  + gl/cocoa: Return a strong ref to the parent GstGLContext
  + gldisplay:
  - Mark gst_gl_display_create_context() other_context parameter
    as nullable
  - Remove unused code
  + gstglwindow_x11.c: Fix colormap leak
  + gst-play-1.0: Don't force accurate seeking
  + rtspconnection: Annotate RTSP message and RTSP events
    parameters correctly
  + sdp: gstmikey: gst_mikey_message_to_caps: extract ROC from
    first crypto session
  + sdp, typefind: Fix some annotations
  + subparse: Properly forward segment seqnum
  + uridecodebin: Set source element to READY before querying it
  + uritranscodebin: Fix unref of NULL
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681300800">- Update to version 1.22.2:
  + alsasink: Fix for being stuck in stop_streaming_threads state
  + decodebin3: fix hang when removing a failing stream
  + gl: wayland: cleanup on close
  + parsebin: Improve elementary stream handling
  + playbin: fix deadlock when stopping stream with subtitles
    visible even more
  + sdp: Skip source-specific caps fields when creating an SDP
    media from caps
  + urisourcebin:
  - Propagate sticky events from parsebin
  - Activate pad before transferring sticky events
  + typefinding: fix failure to recognize application/dash+xml in
    some cases
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684929600">- Update to version 1.22.3:
  + allocators: Fix fdmem unit test with recent GLib versions.
  + audiotestsrc: Initialize all samples in wave=ticks mode.
  + decodebin3:
  - Handle input streams without CAPS or TIME segment such as
    e.g. udpsrc or pushfilesrc.
  - Fix regression handling streams without caps.
  - Fix random hang when remove failing stream.
  + uridecodebin3: Ensure atomic urisourcebin state change.
  + glvideoflip: fix leaked caps.
  + glcontext_wgl: fix missing unref.
  + playsink: Fix volume leak.
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1687780800">- Update to version 1.22.4:
  + alsasink: Fix stall for transition from PAUSED to READY with
    USB speakerphone.
  + appsink: unref buffer in prev sample early so buffers from v4l2
    can be released properly.
  + basetextoverlay: Fix typo in "text-y" property description.
  + gldownload: handle passthrough without a critical.
  + glfilter: add parent meta to output buffer for input buffer.
  + oggdemux: vp8: Push headers downstream and detect keyframe
    packets.
  + opus: Fix potential crash when getting unexpected channel
    position.
  + streamsynchronizer: reset eos on STREAM_START.
  + subparse: Look for the closing &gt; of a tag after the opening &lt;
    (bsc#1213131, CVE-2023-37328)
  + video: convertframe: Add D3D11 specific conversion path.
  + videometa: Only validate the alignment only when it contains
    some info.
  + video-blend: Fix linking error with C++.
  + Fixes FLAC file parsing integer overflow remote code execution
    vulnerability (bsc#1213128, CVE-2023-37327)
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690286400">- Update to version 1.22.5:
  + appsink: add missing make_writable call
  + audioaggregator: Do not post message before being constructed
  + decodebin3:
  - Prevent a critical warning when reassigning output slots
  - Fix slot input linking when the associated stream has changed
  - Remove spurious input locking during parsebin reconfiguration
  + urisourcebin: Set source element to READY before querying it
  + gl/viv-fb: meson build updates
  + plugins: fix compiler warnings with GLib &gt;= 2.76
  + subtitleoverlay: fix mutex error if sink caps is not video
  + video:
  - timecode: Add support for framerates lower than 1fps
  - accept timecode of 119.88 (120/1.001) FPS
  - cannot attach time code meta when frame rate is 119.88
    (120000/1001)
  + videodecoder: fix copying buffer metas
- Rebase reduce-required-meson.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695384000">- Update to version 1.22.6:
  + audio: Make sure to stop ringbuffer on error
  + decodebin3:
  - Avoid identity, sinkpad, parsebin leakage when reset input
  - Ensure the slot is unlinked before linking to decoder
  + sdp:
  - Fix wrong debug log error message for missing clock-rate in
    caps
  - Parse zero clock-rate as default
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1700049600">- Update to version 1.22.7:
  + audioaggregator, audiomixer: Make access to the pad list
    thread-safe while mixing
  + basetextoverlay: Fix overlay never rendering again if width
    reaches 1px
  + glfiter: Protect GstGLContext access
  + glfilter: Only add parent meta if inbuf != outbuf
  + macOS: fix huge memory leak with glfilter-based elements
  + rtspconnection: Ignore trailing whitespace in rtsp headers
  + video-scaler, audio-resampler: downgrade 'can't find exact
    taps' to debug
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="alarrosa@suse.com" date="1704369600">- Update to version 1.22.8:
  + appsrc: Fix flow return when buffer is dropped
  + audioringbuffer: Don't try to map MONO channel
  + encoding-target: Properly free when missing type field in
    parse_encoding_profile
  + pbutils: Don't include default vp9 parameters in resulting
    codec mime string
  + videorate: Don't forget last_ts on caps changes
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706788800">- Update to version 1.22.9:
  + audiobasesink: Don't wait on gap events
  + audioconvert: change gst_audio_convert_get_unit_size() log
    levels
  + glcolorconvert: Correct transform_caps direction
  + gloverlay: Apply updated overlay coordinates correctly
  + videorate: keep pool if max_buffers is unlimited
- Rebase reduce-required-meson.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1709640000">- Add gst-plugins-base-audiobasesink-gap.patch:
  Revert a gap change causing EOS, affecting strawberry playback
  causing playback to stop when using mute or fading features.
  Upstream issue:
  https://gitlab.freedesktop.org/gstreamer/gstreamer/-/issues/3303</changelog>
  <changelog author="alarrosa@suse.com" date="1709640001">- Update to version 1.24.0:
  * Highlights
  - New Discourse forum and Matrix chat space
  - New Analytics and Machine Learning abstractions and elements
  - Playbin3 and decodebin3 are now stable and the default in
    gst-play-1.0, GstPlay/GstPlayer
  - The va plugin is now preferred over gst-vaapi and has higher
    ranks
  - GstMeta serialization/deserialization and other GstMeta
    improvements
  - New GstMeta for SMPTE ST-291M HANC/VANC Ancillary Data
  - New unixfd plugin for efficient 1:N inter-process
    communication on Linux
  - cudaipc source and sink for zero-copy CUDA memory sharing
    between processes
  - New intersink and intersrc elements for 1:N pipeline
    decoupling within the same process
  - Qt5 + Qt6 QML integration improvements including qml6glsrc,
    qml6glmixer, qml6gloverlay, and qml6d3d11sink elements
  - DRM Modifier Support for dmabufs on Linux
  - OpenGL, Vulkan and CUDA integration enhancements
  - Vulkan H.264 and H.265 video decoders
  - RTP stack improvements including new RFC7273 modes and more
    correct header extension handling in depayloaders
  - WebRTC improvements such as support for ICE consent
    freshness, and a new webrtcsrc element to complement
    webrtcsink
  - WebRTC signallers and webrtcsink implementations for LiveKit
    and AWS Kinesis Video Streams
  - WHIP server source and client sink, and a WHEP source
  - Precision Time Protocol (PTP) clock support for Windows and
    other additions
  - Low-Latency HLS (LL-HLS) support and many other HLS and DASH
    enhancements
  - New W3C Media Source Extensions library
  - Countless closed caption handling improvements including new
    cea608mux and cea608tocea708 elements
  - Translation support for awstranscriber
  - Bayer 10/12/14/16-bit depth support
  - MPEG-TS support for asynchronous KLV demuxing and segment
    seeking, plus various new muxer features
  - Capture source and sink for AJA capture and playout cards
  - SVT-AV1 and VA-API AV1 encoders, stateless AV1 video decoder
  - New uvcsink element for exporting streams as UVC camera
  - DirectWrite text rendering plugin for windows
  - Direct3D12-based video decoding, conversion, composition, and
    rendering
  - AMD Advanced Media Framework AV1 + H.265 video encoders with
    10-bit and HDR support
  - AVX/AVX2 support and NEON support on macOS on Apple ARM64
    CPUs via new liborc
  - GStreamer C# bindings have been updated
  - Rust bindings improvements and many new and improved Rust
    plugins
  - Rust plugins now shipped in packages for all major platforms
    including Android and iOS
  - Lots of new plugins, features, performance improvements and
    bug fixes
  * For more detailed information on this update, please see
    https://gstreamer.freedesktop.org/releases/1.24/
- Remove patch reduce-required-meson.patch since meson 1.1 is
  really required now.</changelog>
  <changelog author="qzhao@suse.com" date="1716379200">- Add gstreamer-plugins-base-CVE-2024-4453.patch:
  Backporting e68eccff from upstream, Prevent integer overflows
  and out of bounds reads when handling undefined tags.
  (CVE-2024-4453 ZDI-24-467 ZDI-CAN-23896 bsc#1224806)</changelog>
  <changelog author="mgorse@suse.com" date="1736164800">- Add various CVE fixes:
  + CVE-2024-47538.patch (boo#1234415 CVE-2024-47538)
  + CVE-2024-47835.patch (boo#1234450 CVe-2024-47835)
  + CVE-2024-47600.patch (boo#1234453 CVE-2024-47600)
  + CVE-2024-47615.patch (boo#1234456 CVE-2024-47615)
  + CVE-2024-47541.patch (boo#1234459 CVE-2024-47541)
  + CVE-2024-47542.patch (boo#1234460 CVE-2024-47542)</changelog>
  <changelog author="mgorse@suse.com" date="1736251200">- Add CVE-2024-47607.patch: opusdec: Set at most 64 channels to
  NONE position (boo#1234455 CVE-2024-47607).</changelog>
  <changelog author="mgorse@suse.com" date="1749643200">- Add more CVE fixes:
  + CVE-2025-47808.patch (boo#1244404 CVE-2025-47808)
  + CVE-2025-47807.patch (boo#1244403 CVE-2025-47807)
  + CVE-2025-47806.patch (boo#1244407 CVE-2025-47806)</changelog>
</package>
<package pkgid="d7508f25b2807a3db00559f84e5c0794b11250e31d9c461891c1f0f8da5983cf" name="libgthread-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.16.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.77.0:
  + Fix `GSocketClient` connecting to a proxy if the port is not
    specified
  + Support using `copy_file_range()` in `g_file_copy()`, if
    available
  + Improve handling of comments above groups in key files
  + Re-upgrade missing attribute debugs to criticals in `GFileInfo`
  + Do not redefine NULL on C++
  + Make `g_signal_handlers_block_matched()` work for
    `G_SIGNAL_MATCH_ID`
  + Fixes to support building with bionic libc better
  + Fix potential stack overflow in gspawn on macOS if open file
    limit is very high
  + Fix support for `--force-fallback-for libpcre` in meson
    configuration
  + Generate specific marshallers in `gdbus-codegen`
  + Fix build failure on Android with `statx()` support
  + Improve locking performance of `GSignal`
  + Improve locking performance of `g_main_context_iterate()`
  + Add an inline definition of `g_free()` to automatically use
    `g_free_sized()` if available
  + Fix race with `waitpid()` and `GChildWatchSource`
  + Add `glib_valgrind_suppressions` variable to glib pkg-config
    file
  + Fix build on macOS SDK 10.11
  + Switch to using a separate thread pool and support timeouts in
    `GThreadedResolver`
  + Track pending `GTask`s if `G_ENABLE_DEBUG` is defined
  + Support GSignal fast path and more marshallers in
    `gobject_gdb.py`
  + Disable the macOS CI because it’s too unreliable — if you rely
    on GLib working on macOS, please get in touch and do something
    to help!
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828801">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828802">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828803">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828804">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
</package>
<package pkgid="d34f2b445a6f4b48a5ed20a844d8d7e5603b19a377d49898c39a06ea602b6650" name="libgthread-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.22.1"/>
  <changelog author="luc14n0@opensuse.org" date="1693828800">- Add glib2-revert-004f48f4.patch: This patch reverts the "build/\
  gmodule-2.0.pc: Move compiler flags from Libs to Cglags" MR
  (glgo#GNOME/glib!3356), as per agreement discussed in said MR.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828802">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828803">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
</package>
<package pkgid="762f1d08e59ae30ddbef4855a5322029c537a9fdd969bb9f7fb0ce49d87fdb81" name="libgthread-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.25.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.77.1:
  + Fix some regressions with `GKeyFile` comment handling.
  + Improve handling of query and fragment components in `file:`
    URIs.
  + Various bugs fixed.
  + Updated transltations.
- Drop glib2-revert-004f48f4.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1693828801">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828802">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
</package>
<package pkgid="b17109f0ff7820466adc97d687e1c9d236120d959996066c127569ff4613a513" name="libgthread-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.28.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1693828800">- Update to version 2.77.2:
  + Bugs fixed:
  - g_test_trap_subprocess and g_test_subprocess broken in 2.77.1
  - ci: Don’t run pipeline after merging a MR
  - Fix typos
  - GTree: Handle node counter overflow and return it as an
    unsigned value
  - gspawn, gdataset: Restore nullable callback functions
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1693828801">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
  <changelog author="mgorse@suse.com" date="1768996800">- Add glib2-CVE-2026-0988.patch: fix a potential integer overflow
  in g_buffered_input_stream_peek (bsc#1257049 CVE-2026-0988
  glgo#GNOME/glib#3851).</changelog>
</package>
<package pkgid="cfcb2e45f9fb224c332c6e8e9309f9955c8022a8d7f630edee515fbd5272936a" name="libgthread-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.78.6" rel="150600.4.35.1"/>
  <changelog author="luc14n0@opensuse.org" date="1693828800">- Update to version 2.77.3:
  + Bugs fixed:
  - GSettings schemas default value translations don't work when
    using l10n=time.
  - gdbus-codegen eats indentation in RST in XML comments.
  - g_dbus_connection_export_menu_model() is not thread_safe.
  - Possible SEGV (null pointer deref) in
    distribute_method_call().
  - arg_data  in GOptionEntry is not a list.
  - Possible SEGV (null pointer deref) in _g_resource_file_new().
  - glib-unix: Clean up use of O_NONBLOCK.
  - gnetworkaddress: use reentrant getservbyname_r() if
    available.
  - gio-tool-info: Move translator comments so they’re visible.
  - gregex: set default max stack size for PCRE2 JIT compiler to
    512KiB.
  - glib-unix: Accept O_CLOEXEC as well as FD_CLOEXEC in
    g_unix_open_pipe().
  - gio: Add gresource.dtd.
  - gtestutils: Mention not ignoring SIGCHLD in
    g_test_trap_subprocess() docs.
  - [th/gchildwatch-fail-message] gmain: improve g_warning() for
    failure in g_child_watch_dispatch().
  - [th/use-localtime-r] use localtime_r() in
    g_log_writer_format_fields().
  - gregex: if JIT stack limit is reached, fall back to
    interpretive matching.
  - glib/gfileutils.c: use 64 bits for value in get_tmp_file().
  - gkeyfile: Fix overwriting of GError.
  + Updated translations.
- Update https://wiki.gnome.org/Projects/GLib URL tag to
  https://gitlab.gnome.org/GNOME/glib/, as the former points to the
  latter.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 2.78.0:
  + Bugs fixed:
  - Error handling of invalid GKeyFile string escape sequences
    changed in GLib 2.77.3
  - gdb: Workaround optimized out quark_seq_id
  - meson: fix `gnetworking.h` install tag
  - gthread: Annotate g_thread_exit() with G_NORETURN
  - Fix gutils-user-database unit test
  + Updated translations.</changelog>
  <changelog author="scabrero@suse.de" date="1695902400">- Fix NetworkManager crashing repeatedly with glib 2.78.0;
  (bsc#1215709); Add patch 0005-gthreadedresolver-Fix-race.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1697025600">- Require /usr/bin/dbus-daemon by the devel package: GDBusTest
  launches an own dbus-daemon with a separate environment, so that
  test code does not have to rely on the session bus. Ensure
  consumers of GDBusTest have the needed dep present.
- Change the dbus-launch Requires to %{_bindir}/dbus-launch: be
  flexible about potential future package layout changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698148800">- Use sed call to replace gio-querymodules with gio-querymodules-64
  in gio-2.0.pc where appropiate.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698235200">- Update to version 2.78.1:
  + Fix truncating files when `g_file_set_contents_full()` is
    called without `G_FILE_SET_CONTENTS_CONSISTENT`
  + Fix `-Dlibelf=disabled` on Linux
  + Bugs fixed:
  - NetworkManager 1.44.0 crashes repeatedly with glib 2.78.0
  - gsubprocess-testprog.c: build error with cygwin
    (sys/ptrace.h: No such file or directory)
  - gio clears modification time in microseconds when setting
    with `set_modification_date_time`
  - Build of glib 2.78.0 ignores -Dlibelf=disabled
  - glib-2.78.0 fails at gio/tests/gsubprocess.p/gsubprocess.c.o
  - Segfault when creating GIO GPropertyAction without properties
  - `g_file_set_contents_full()` doesn't truncate the file
    (without `G_FILE_SET_CONTENTS_CONSISTENT`)
  - guniprop.c: Avoid creating (temporarily) out-of-bounds
    pointers
  - Fixes for integer cast warnings when targeting CHERI
  - Fix test_find_program on FreeBSD
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - Fix gutils-user-database test on macOS
  - Add value annotation to G_TYPE_FUNDAMENTAL_MAX
  - meson: Fix Windows build with PCRE2 as sibling subproject
  - gconstructor.h: Ensure [c|d]tor prototypes are present for
    MSVC
  - glocalfileinfo: Preserve microseconds for access/modify times
  - Make sure the `GTask` is freed on a graceful disconnect
  - Buffer needs to be aligned correctly to receive
    linux_dirent64.
  - gtestutils.h: Fix warning with -Wsign-conversion caused by
    g_assert_cmpint
  - tests: Drop unnecessary include from gsubprocess-testprog.c
  - wakeup: do single read when using eventfd()
  - wakeup: Fix g_wakeup_acknowledge if signal comes in”
  - Use g_task_return in task threads
  - build: Fix -Dlibelf=disabled on Linux
  - gfileutils: Add a missing ftruncate() call when writing files
  + Updated translations.
- Drop 0005-gthreadedresolver-Fix-race.patch: Fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %autosetup instead of %setup/%patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.78.2:
  + Bugs fixed:
  - check for #ifdef PTRACE_O_EXITKILL will always fail since it
    isn't a macro
  - gsubprocess build-time test intermittently timing out since
    2.78.1
  - “meson: Improve PTRACE_O_EXITKILL presence check”
  - “Make GQuark register intentional leaks”
  - “gsignalgroup: Avoid function call with side effect in
    g_return_* macro”
  - “tests: Don't assume that sh optimizes simple commands into
    exec”
  - “xdgmime: Handle buggy type definitions with circular
    inheritance”
  - “collate: Don't segfault on bad input”</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701950400">- Update to version 2.78.3:
  + Fix a crash-causing regression in xdgmime
  + Bugs fixed:
  - Crash in __gio_xdg_cache_mime_type_subclass
  - Backport “xdgmime: Update to upstream commit c2c814d4051f232”
    to glib-2-78</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- require dbus-launch only if dbus-service is wanted. This helps
  with stripping down container-only builds (jsc#PED-8153)</changelog>
  <changelog author="mgorse@suse.com" date="1716206400">- Update to version 2.78.6 (boo#1224044):
  + Fix a regression with IBus caused by the fix for CVE-2024-34397
  + Changes in version 2.78.5:
  + Fix CVE-2024-34397: GDBus signal subscriptions for well-known
    names are vulnerable to unicast spoofing.
  + Bugs fixed:
  - gvfs-udisks2-volume-monitor SIGSEGV in
    g_content_type_guess_for_tree() due to filename with bad
    encoding
  - gcontenttype: Make filename valid utf-8 string before
    processing.
  - “gdbusconnection: Don't deliver signals if the sender
    doesn't match.
  + Changes in version 2.78.4:
  + Bugs fixed:
  - “Fix generated RST anchors for methods, signals and
    properties.
  - docs/reference: depend on a native gtk-doc.
  - “gobject_gdb.py: Do not break bt on optimized build.
  - “gregex: clean up usage of _GRegex.jit_status.</changelog>
  <changelog author="mgorse@suse.com" date="1731412800">- Add glib2-CVE-2024-52533.patch: fix a single byte buffer overflow
  (boo#1233282 CVE-2024-52533 glgo#GNOME/glib#3461).</changelog>
  <changelog author="mgorse@suse.com" date="1732708800">- Have the glib2-tools postun trigger exit normally if
  glib2-compile-schemas can't be run. Fixes error when uninstalling
  if libgio is uninstalled first (bsc#1231463).</changelog>
  <changelog author="qzhao@suse.com" date="1744113600">- Add glib2-CVE-2025-3360.patch:
  Backport 8d60d7dc from upstream, Fix integer overflow when
  parsing very long ISO8601 inputs. This will only happen with
  invalid (or maliciously invalid) potential ISO8601 strings,
  but `g_date_time_new_from_iso8601()` needs to be robust against
  that.
  (CVE-2025-3360, bsc#1240897)</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1749124800">- Add glib2-CVE-2025-4373.patch: carefully handle gssize parameters
  (bsc#1242844 CVE-2025-4373 glgo#GNOME/glib#3677).</changelog>
  <changelog author="mgorse@suse.com" date="1749816000">- Add glib2-CVE-2025-6052.patch: fix overflow check when expanding
  a GString (bsc#1244596 CVE-2025-6052).</changelog>
  <changelog author="mgorse@suse.com" date="1761912000">- Add glib2-CVE-2025-7039.patch: fix computation of temporary file
  name (bsc#1249055 CVE-2025-7039 glgo#GNOME/glib#3716).</changelog>
  <changelog author="mgorse@suse.com" date="1765454400">- Add CVE fixes:
  + glib2-CVE-2025-13601-1.patch, glib2-CVE-2025-13601-2.patch
    (bsc#1254297 CVE-2025-13601 glgo#GNOME/glib#3827).
  + glib2-CVE-2025-14087-1.patch, glib2-CVE-2025-14087-2.patch,
    glib2-CVE-2025-14087-3.patch (bsc#1254662 CVE-2025-14087
    glgo#GNOME/glib#3834).
  + glib2-CVE-2025-14512.patch (bsc#1254878 CVE-2025-14512
    glgo#GNOME/glib#3845).</changelog>
  <changelog author="mgorse@suse.com" date="1768996800">- Add glib2-CVE-2026-0988.patch: fix a potential integer overflow
  in g_buffered_input_stream_peek (bsc#1257049 CVE-2026-0988
  glgo#GNOME/glib#3851).</changelog>
  <changelog author="mgorse@suse.com" date="1769515200">- Add CVE fixes:
  + glib2-CVE-2026-1484.patch (bsc#1257355 CVE-2026-1484
    glgo#GNOME/glib!4979).
  + glib2-CVE-2026-1485.patch (bsc#1257354 CVE-2026-1485
    glgo#GNOME/glib!4981).
  + glib2-CVE-2026-1489.patch (bsc#1257353 CVE-2026-1489
    glgo#GNOME/glib!4984).</changelog>
</package>
<package pkgid="d0da903b0fc45b1204c6258e116b4bc670bf88b31fad274a5dae0dcca9907611" name="libgtk-3-0" arch="x86_64">
  <version epoch="0" ver="3.24.43" rel="150600.3.10.1"/>
  <changelog author="dimstar@opensuse.org" date="1669809600">- Update to version 3.24.35:
  + GtkFontChooserWidget: Fix a critical.
  + GtkAccelLabel: Differentiate keypad keysyms in accelerators.
  + Input:
  - Recognize stylus devices as pens.
  - Fix problems with motion compression.
  + Windows: Build system improvements.
  + Wayland:
  - Fix problems with unreliable DND.
  - Use GLES if required.
  - Add support for titlebar gestures.
  - Refactor handling of IM client updates.
  - Fix cursor hotspots with scaled surfaces.
  - Use the xdg-activation protocol.
  - Load cursors on demand.
  - Fix cursor size on hi-dpi displays.
  + MacOS: Use a CVDisplayLink based frame clock.
  + Updated translations.
- Drop upstream merged patch
  gtk3-gdkwayland-Update-selections-offer-before-updating-dnd.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1670241600">- Update to version 3.24.35+10:
  + Flush drawable surface when getting a pixbuf.
  + wayland: Look for cursor themes in $HOME (boo#1206001).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1672315200">- Update to version 3.24.36:
  + GtkLabel: Tweak selection behavior.
  + GtkEmojiChooser: Properly handle empty recent section.
  + GtkFileChooser: Make ~ key work regardless of dead keys.
  + Wayland:
  - Fix problems with X&lt;&gt;Wayland DND.
  - Revert cursor changes from 3.24.35.
  - Fix handling of surrounding text in input.
  + Updated translation.
- Switch from Autotools to Meson, dropping libtool build
  requirement while adding meson and ninja. And replace configure,
  make_build, and make_install macros with meson, meson_build and
  meson_install.
- Adopt the use of autosetup and autopatch macro facilities to
  improve package maintainability.
- Drop multibuild facility due to the fact that Gtk 3 Meson build
  scripts can't fully disable some components. And, at least for
  now, we cannot achieve the same degree of modularity we had with
  Autotools.
- Drop macros.gtk3 file as no package (if it ever had any) consumes
  its macros.
- After switching to Meson, the build doesn't produce a Wayland
  Input Method module anymore, at least not as a standalone. Update
  baselibs.conf accordingly. And some GResource files are now being
  provided in the devel package for working with emojis.
- Define __provides_exclude_from macro with ^%{_libdir}/gtk-3.0 as
  its value to prevent the automatic provision generator to offer
  private modules as requirable symbols.
- Make cloudproviders to be easily switchable, through bcond
  facility, to allow people to test it, or for maintainers to turn
  it on and off easily.
- Make gettext-its-gtk3 and gtk3-devel-doc sub-packages
  arch-independent (noarch), as they don't contain any binaries.
- Convert IM modules cache update post(un) scriptlets to RPM
  file triggers. Though we had good results with icon cache update
  scriptlets previously, we still can't use transfiletriggers to
  trigger the cache update only once, post transaction, because
  Zypper is still working on implementing support for them.
- Refresh patch with Quilt: gtk3-revert-forced-xftdpi.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1677844800">- Update to version 3.24.37:
  + Support the file transfer portal for copy-paste and DND
  + Treat XKB_MODE_NAME_LODO as super key
  + Refactor startup notification handling to be in sync with GTK 4
  + GL: Synchronie when calling MakeCurrent
  + CSS: Fix a problem with stopping animations
  + Wayland: Drop the legacy text input module
  + Updated translations.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1678190400">- Prepend gtk3 to binary_version and _immoduledir macro names to
  avoid possible name clash now that they are being defined in the
  macros.gtk3 file instead of the spec file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1679400000">- Re-add macros.gtk3: there are quite a few consumers left
  requiring the defined macros.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1681128000">- Deprecate %gtk_immodule_(requires|post|postun) macros defined in
  the macros.gtk3 file. Since we are using RPM file triggers to
  provide their functionality, without nullifying them the commands
  will run twice, once by the file triggers and another time by the
  macros.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682510400">- Update to version 3.24.37+68:
  + application: Clean up signal handlers
  + OLE2 DND: Check if move is supported
  + Address issue 5711 by checking that the context is not NULL
  + wayland:
  - Don't crash without xdg_activation_v1
  - Don't crash on cursor size 0
  + gdkscreen-wayland: Notify initial setting change from
    org.gtk.Settings
  + gdk: Swap Cairo calls when reading back from a GdkWindow
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682942400">- Update to version 3.24.37+70:
  + Fix a crash.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1684756800">- Update to version 3.24.38:
  + GtkFileChooser: Avoid warnings with GLib 2.76.
  + Theme: Set caret color in the dark theme.
  + Windows: Fix running under GLES.
  + Wayland:
  - Notify on initial setting changes.
  - Don't crash on 0 size cursors.
  - Don't crash if xdg_activation_v1 is missing.
  + Debugging: Show more information in the inspector.
  + Updated translations.</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
  <changelog author="yfjiang@suse.com" date="1692014400">- Do not use %autopatch to build on SLE where rpm version is not
  ready for the macro.</changelog>
  <changelog author="dimstar@opensuse.org" date="1694520000">- Use RPM ternary operations to specify true/false arguments based
  on build conditions (%[%{with FOO} ? "true" : "false"])</changelog>
  <changelog author="yfjiang@suse.com" date="1696766400">- Revert RPM ternary operations on SLE where rpm version is not
  ready.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701950400">- Update to version 3.24.38+111:
  + [gtk3] Support tiled windows from xdg-shell.
  + Fix a minor issue in the file portal test.
  + wayland: Be more careful when loading cursors.
  + gdk/wayland: Use g_warning_once for cursor scale mismatches.
  + gdk/wayland: Don't fall back directly to 1 for mismatched
    cursor sizes.
  + Updated translations.
- Drop upstream applied patch
  gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
  <changelog author="mgorse@suse.com" date="1721649600">- Add CVE-2024-6655.patch: CVE-2024-6655 Stop looking for modules
  in cwd (bsc#1228120).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1734609600">- Update to version 3.24.43 (bsc#1172879):
  + Stop looking for modules in cwd (bsc#1228120 CVE-2024-6655).
  + Updated translations.
- Changes from version 3.24.42:
  + GtkFileChooser:
  - Avoid warnings about floating refs.
  - Improve performance of recursive search.
  - Populate search model in an idle.
  + GtkGLArea: Fix a regression in transparency handling.
  + Printing: Avoid accessing freed printers.
  + Accessibility: Drop support for the deprecated
    atk_focus_tracker.
  + Wayland:
  - Fix monitor sizes.
  - Fix a crash related to tablet removal.
  - Infer resizable edges for tiled windows.
  - Always commit soon after acking a configure.
  + gdk:
  - Use css cursor names as far as possible.
  - Sync DND cursor use with GTK4.
  + build: Allow building against sysprof-capture-4.
  + Updated translations.
- Changes from version 3.24.41:
  + Fix a crash introduced in the X11 changes in 3.24.40.
  + Build fixes.
  + Wayland: Fix interpretation of gtk-shell protocol.
- Changes from version 3.24.40:
  * Free monitor name on finalize
  * Rework after first review
  * Rework to get rid of get_monitor_by_output
  * Use xorg 'monitor' the right way. See #2013
- Changes from version 3.24.39+23:
  * gdkdisplay-wayland: Init selection before roundtrips
  * Use consistent coordinates in get_toplevel_from_ns_event.
  * emoji: Update data to CLDR v44
  * emoji: Update data to CLDR v43
  * add hi-ja-et-fi-nb-th for gtkemojichooser
  * add bengali language bn.data for gtkemojichooser
  * emoji: Add more locales
  * emoji: Update data to CLDR v40
  * emoji: Fix the convert-emoji program
  * gtkgesture: Preserve accuracy when translating events
  * pathbar: Handle webdav where is the root is a path
  * GtkTooltip: Fix tooltip positioning on X11
  * gdkkeys-win32c: change registry key not found g_warning to g_debug
  * [gtk3/wayland] Expose XDG-shell suspended state via visibility events.
  * [gtk3/wayland] Only request v2 of xdg_wm_base.
  * test-msys2-meson: fix pipeline failure on GTK3
  * wayland: Fix wl_buffer size for custom cursors
  * GtkMenu: Fix positioning when attached to offscreen windows
  * gdk_display_get_monitor_at_window: Check for offscreen windows
  * GdkWindow: check for same impl class in set_transient_for ()
  * [gtk3] Cherry-pick gtkfilechoosernativeportal fixes from gtk4
  * wayland: Avoid more legacy cursor names
  * Fall back to the 'default' cursor
- BuildRequire gettext-devel instead of gettext-tools-mini: the
  - devel provides is part of gettext-tools, but this allows OBS to
  pick the package it deems correct.</changelog>
  <changelog author="yfjiang@suse.com" date="1754568000">- Drop upstreamed CVE-2024-6655.patch.
- Simplify %autopatch section as %autopatch macro is available in
  SLE.</changelog>
  <changelog author="yfjiang@suse.com" date="1754568001">- Add gtk3-gdk_x11_window_get_frame_extents-with-window-borders.patch
  (bsc#1247503).</changelog>
</package>
<package pkgid="e1ce65779adc86e11e8fb8c5a3826963ebb0b57fdd7c7c7538000382082c67d4" name="libharfbuzz-cairo0" arch="x86_64">
  <version epoch="0" ver="8.3.0" rel="150600.3.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1658664000">- harfbuzz 5.0.1, including changes from 5.0.0:
  + Improve for fonts with more than 65535 glyphs
  + Support version 2 of “avar” table
  + Improve support for some Arabic, Hebrew fonts
  + Support for specific script tags to be retained in the
    subsetter, and add “--layout-scripts” option to “hb-subset”
    tool
  + Improved handling of command line options
  + Improve support for multiple tables and font features,
    and font feature specific bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1659528000">- harfbuzz 5.1.0:
  + More extensive buffer tracing messages
  + Fix hb-ft regression in bitmap fonts rendering
  + Support extension promotion of lookups in hb-subset-repacker
  + A new HB_GLYPH_FLAG_SAFE_TO_INSERT_TATWEEL for scripts that use
    elongation (e.g. Arabic) to signify where it is safe to insert
    tatweel glyph without interrupting shaping
  + Add --safe-to-insert-tatweel to hb-shape tool
- add harfbuzz-5.1.0-repacker-fix-signedness-of-char-in-tests.patch
  from upstream to fix ARM and PPC builds</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1663675200">- Update to version 5.2.0:
  + Fix regressions in hb-ft font functions for FT_Faces with
    transformation matrix.
  + The experimental hb-repacker API now supports splitting several
    GPOS subtable types when needed.
  + The HarfBuzz extensions to OpenType font format are now opt-in
    behind build-time flags.
  + The experimental hb-subset variable fonts instantiation API can
    now instantiate more font tables and arbitrary axis locations.
  + Unicode 15 support.
  + Various documentation improvements.
  + The hb-view command line tool now detects WezTerm inline images
    support.
  + Fix FreeType and ICU dependency lookup with meson.
  + New API:
  - +HB_SCRIPT_KAWI
  - +HB_SCRIPT_NAG_MUNDARI
- Drop patch fixed upstream:
  + harfbuzz-5.1.0-repacker-fix-signedness-of-char-in-tests.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1665316800">- Update to version 5.3.0:
  + Don’t add glyphs from dropped MATH or COLR tables to the subset
    glyphs
  + Map rlig to appropriate AAT feature selectors
  + Update USE data files to latest version
  + Check CBDT extents first before outline tables, to help with
    fonts that also include an empty glyf table
  + More work towards variable font instancing in the subsetter
  + Subsetter repacker improvements</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1666353600">- Update to version 5.3.1:
  + Subsetter repacker fixes
  + Adjust Grapheme clusters for Katakana voiced sound marks
  + New hb-subset option --preprocess-face
- Add harfbuzz-5.3.1-Fix_check-symbols_failure.patch: Fix failing
  tests.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1671278400">- Update to version 6.0.0:
  + Add API to pre-process the face and speed up future subsetting
    operations on that face. Provides up to a 95% reduction in
    subsetting times when the same face is subset more than once.
  + Shaping have been speedup by skipping entire lookups when the
    buffer contents don't intersect with the lookup. Shows up to a
    10% speedup in shaping some fonts
  + The HarfBuzz subsetter can now drop axes by pinning them to
    specific values (also referred to as instancing)
- Drop harfbuzz-5.3.1-Fix_check-symbols_failure.patch: Fixed
  upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1675684800">- Add harfbuzz-CVE-2023-25193.patch: limit how far we skip when
  looking back (boo#1207922 CVE-2023-25193).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1676203200">- Update to version 7.0.0:
  + New hb-paint API that is designed mainly to paint COLRv1 glyphs,
    but can be also used as a unified API to paint any of the glyph
    representations supported by HarfBuzz (B/W outlines, color
    layers, or color bitmaps).
  + New hb-cairo API for integrating with cairo graphics library.
    This is provided as a separate harfbuzz-cairo library.
  + Support for instancing CFF2 table
  + Support font emboldening
  + Support feature ranges with AAT shaping
  + Experimental support to cubic curves in glyf table
  + Various subsetter improvements
  + Various documentation improvements
  + Significantly reduced memory use during shaping
  + Greatly reduced memory use during subsetting CFF table
  + New command line utility, hb-info, for querying various font
    information
  + New hb-shape/hb-view options: --glyphs, --color-palette,
  - -font-bold, --font-grade, and --named-instance
  + Miscellaneous fixes and improvements
- harfbuzz-CVE-2023-25193.patch dropped in favor of upstream
  consensus fix</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1676980800">- Update to version 7.0.1:
  + Various build and bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1677844800">- Update to version 7.1.0:
  + New experimental API that uses font variations to expand or
    shrink the text to a given advance
  + Various build and bug fixes.
  + New API: hb_font_set_variation().</changelog>
  <changelog author="Andreas.Stieger@gmx.de" date="1683460800">- update to version 7.2.0:
  + Improve Tifinagh glyph positioning
  + Fix 4.2.0 regression in applying across syllables in syllabic
    scripts.
  + Add flag to avoid glyph substitution closure during subsetting,
    and the corresponding “--no-layout-closure” option to
    “hb-subset” command line tool.
  + Support instancing COLRv1 table
  + Optimize handling of “gvar” table
  + Various subsetter bug fixes and improvements, documentation</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1683806400">- update to version 7.3.0:
  + Speedup applying glyph variation in VarComposites fonts
    (over 40% speedup)
  + Speedup instancing some fonts
    (over 20% speedup in instancing RobotoFlex)
  + Speedup shaping some fonts (over 30% speedup in shaping Roboto
  + Support subsetting VarComposites and beyond-64k fonts
  + New configuration macro HB_MINIMIZE_MEMORY_USAGE to favor
    optimizing memory usage over speed
  + Supporting setting the mapping between old and new glyph
    indices during subsetting
  + Various fixes and improvements</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1689249600">- Update to version 8.0.1:
  + Build fix on 32-bit arm.
  + More speed optimizations:
  - 60% speedup in retaingids subsetting SourceHanSans-VF.
  - 38% speed up in subsetting (beyond-64k) mega-merged Noto.
  - 16% speed up in retain-gid (used for IFT) subsetting of
    NotoSansCJKkr.
- Changes from version 8.0.0:
  + New, experimental, WebAssembly (WASM) shaper, that provides
    greater flexibility over OpenType/AAT/Graphite shaping, using
    WebAssembly embedded inside the font file. Currently WASM
    shaper is disabled by default and needs to be enabled at build
    time.
  + Improvements to Experimental features introduced in earlier
    releases:
  - Support for subsetting beyond-64k and VarComposites fonts.
  - Support for instancing variable fonts with cubic “glyf”
    table.
  - Many big speed optimizations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690891200">- Update to version 8.1.0:
  + Fix long-standing build issue with the AIX compiler and older
    Apple clang.
  + Revert optimization that could cause timeout during subsetting
    with malicious fonts.
  + More optimization work:
  - 45% speed up in shaping Noto Duployan font.
  - 10% speed up in subsetting Noto Duployan font.
  - Another 8% speed up in shaping Gulzar.
  - 5% speed up in loading Roboto.
  + New API: +hb_ot_layout_collect_features_map().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691064000">- Update to version 8.1.1:
  + Fix shaping of contextual rules at the end of string,
    introduced in 8.1.0.
  + Fix stack-overflow in repacker with malicious fonts.
  + 30% speed up loading Noto Duployan font.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 8.2.0:
  + Various build and fuzzing fixes
  + Improvements to COLRv1 painting.
  + New API:
  - hb_paint_color_glyph_func_t
  - hb_paint_funcs_set_color_glyph_func
  - hb_paint_color_glyph</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695038400">- Update to version 8.2.1:
  + Unicode 15.1 support.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697630400">- Update to version 8.2.2:
  + Fix regression from 8.1.0 in shaping fonts with duplicate
    feature tags.
  + Fix regression from 8.2.0 in parsing CSS-style feature strings.
  + Variable fonts instanciation now handles more tables.
  + Various CMake build improvements.
  + Various fixes to build without errors with gcc 4.9.2.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1699704000">- Update to version 8.3.0:
  + Improve memory barrier to fix potential segfaults
  + Various subsetting and instancing fixes.
  + Rename “hb-subset” option “--instance” to “--variations” to
    match the other tools, old option kept as an alias
- -devel: fix no-library-dependency-on libharbuzz-cairo0</changelog>
  <changelog author="mgorse@suse.com" date="1768564800">- Add harfbuzz-CVE-2026-22693.patch: fix a NULL pointer dereference
  (bsc#1256459 CVE-2026-22693).</changelog>
</package>
<package pkgid="45ebccfdae5cb1270404cd3a36fcfdc97e00bccfd987c34ccd4e7856b0a1614e" name="libharfbuzz-gobject0" arch="x86_64">
  <version epoch="0" ver="8.3.0" rel="150600.3.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1658664000">- harfbuzz 5.0.1, including changes from 5.0.0:
  + Improve for fonts with more than 65535 glyphs
  + Support version 2 of “avar” table
  + Improve support for some Arabic, Hebrew fonts
  + Support for specific script tags to be retained in the
    subsetter, and add “--layout-scripts” option to “hb-subset”
    tool
  + Improved handling of command line options
  + Improve support for multiple tables and font features,
    and font feature specific bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1659528000">- harfbuzz 5.1.0:
  + More extensive buffer tracing messages
  + Fix hb-ft regression in bitmap fonts rendering
  + Support extension promotion of lookups in hb-subset-repacker
  + A new HB_GLYPH_FLAG_SAFE_TO_INSERT_TATWEEL for scripts that use
    elongation (e.g. Arabic) to signify where it is safe to insert
    tatweel glyph without interrupting shaping
  + Add --safe-to-insert-tatweel to hb-shape tool
- add harfbuzz-5.1.0-repacker-fix-signedness-of-char-in-tests.patch
  from upstream to fix ARM and PPC builds</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1663675200">- Update to version 5.2.0:
  + Fix regressions in hb-ft font functions for FT_Faces with
    transformation matrix.
  + The experimental hb-repacker API now supports splitting several
    GPOS subtable types when needed.
  + The HarfBuzz extensions to OpenType font format are now opt-in
    behind build-time flags.
  + The experimental hb-subset variable fonts instantiation API can
    now instantiate more font tables and arbitrary axis locations.
  + Unicode 15 support.
  + Various documentation improvements.
  + The hb-view command line tool now detects WezTerm inline images
    support.
  + Fix FreeType and ICU dependency lookup with meson.
  + New API:
  - +HB_SCRIPT_KAWI
  - +HB_SCRIPT_NAG_MUNDARI
- Drop patch fixed upstream:
  + harfbuzz-5.1.0-repacker-fix-signedness-of-char-in-tests.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1665316800">- Update to version 5.3.0:
  + Don’t add glyphs from dropped MATH or COLR tables to the subset
    glyphs
  + Map rlig to appropriate AAT feature selectors
  + Update USE data files to latest version
  + Check CBDT extents first before outline tables, to help with
    fonts that also include an empty glyf table
  + More work towards variable font instancing in the subsetter
  + Subsetter repacker improvements</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1666353600">- Update to version 5.3.1:
  + Subsetter repacker fixes
  + Adjust Grapheme clusters for Katakana voiced sound marks
  + New hb-subset option --preprocess-face
- Add harfbuzz-5.3.1-Fix_check-symbols_failure.patch: Fix failing
  tests.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1671278400">- Update to version 6.0.0:
  + Add API to pre-process the face and speed up future subsetting
    operations on that face. Provides up to a 95% reduction in
    subsetting times when the same face is subset more than once.
  + Shaping have been speedup by skipping entire lookups when the
    buffer contents don't intersect with the lookup. Shows up to a
    10% speedup in shaping some fonts
  + The HarfBuzz subsetter can now drop axes by pinning them to
    specific values (also referred to as instancing)
- Drop harfbuzz-5.3.1-Fix_check-symbols_failure.patch: Fixed
  upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1675684800">- Add harfbuzz-CVE-2023-25193.patch: limit how far we skip when
  looking back (boo#1207922 CVE-2023-25193).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1676203200">- Update to version 7.0.0:
  + New hb-paint API that is designed mainly to paint COLRv1 glyphs,
    but can be also used as a unified API to paint any of the glyph
    representations supported by HarfBuzz (B/W outlines, color
    layers, or color bitmaps).
  + New hb-cairo API for integrating with cairo graphics library.
    This is provided as a separate harfbuzz-cairo library.
  + Support for instancing CFF2 table
  + Support font emboldening
  + Support feature ranges with AAT shaping
  + Experimental support to cubic curves in glyf table
  + Various subsetter improvements
  + Various documentation improvements
  + Significantly reduced memory use during shaping
  + Greatly reduced memory use during subsetting CFF table
  + New command line utility, hb-info, for querying various font
    information
  + New hb-shape/hb-view options: --glyphs, --color-palette,
  - -font-bold, --font-grade, and --named-instance
  + Miscellaneous fixes and improvements
- harfbuzz-CVE-2023-25193.patch dropped in favor of upstream
  consensus fix</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1676980800">- Update to version 7.0.1:
  + Various build and bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1677844800">- Update to version 7.1.0:
  + New experimental API that uses font variations to expand or
    shrink the text to a given advance
  + Various build and bug fixes.
  + New API: hb_font_set_variation().</changelog>
  <changelog author="Andreas.Stieger@gmx.de" date="1683460800">- update to version 7.2.0:
  + Improve Tifinagh glyph positioning
  + Fix 4.2.0 regression in applying across syllables in syllabic
    scripts.
  + Add flag to avoid glyph substitution closure during subsetting,
    and the corresponding “--no-layout-closure” option to
    “hb-subset” command line tool.
  + Support instancing COLRv1 table
  + Optimize handling of “gvar” table
  + Various subsetter bug fixes and improvements, documentation</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1683806400">- update to version 7.3.0:
  + Speedup applying glyph variation in VarComposites fonts
    (over 40% speedup)
  + Speedup instancing some fonts
    (over 20% speedup in instancing RobotoFlex)
  + Speedup shaping some fonts (over 30% speedup in shaping Roboto
  + Support subsetting VarComposites and beyond-64k fonts
  + New configuration macro HB_MINIMIZE_MEMORY_USAGE to favor
    optimizing memory usage over speed
  + Supporting setting the mapping between old and new glyph
    indices during subsetting
  + Various fixes and improvements</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1689249600">- Update to version 8.0.1:
  + Build fix on 32-bit arm.
  + More speed optimizations:
  - 60% speedup in retaingids subsetting SourceHanSans-VF.
  - 38% speed up in subsetting (beyond-64k) mega-merged Noto.
  - 16% speed up in retain-gid (used for IFT) subsetting of
    NotoSansCJKkr.
- Changes from version 8.0.0:
  + New, experimental, WebAssembly (WASM) shaper, that provides
    greater flexibility over OpenType/AAT/Graphite shaping, using
    WebAssembly embedded inside the font file. Currently WASM
    shaper is disabled by default and needs to be enabled at build
    time.
  + Improvements to Experimental features introduced in earlier
    releases:
  - Support for subsetting beyond-64k and VarComposites fonts.
  - Support for instancing variable fonts with cubic “glyf”
    table.
  - Many big speed optimizations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690891200">- Update to version 8.1.0:
  + Fix long-standing build issue with the AIX compiler and older
    Apple clang.
  + Revert optimization that could cause timeout during subsetting
    with malicious fonts.
  + More optimization work:
  - 45% speed up in shaping Noto Duployan font.
  - 10% speed up in subsetting Noto Duployan font.
  - Another 8% speed up in shaping Gulzar.
  - 5% speed up in loading Roboto.
  + New API: +hb_ot_layout_collect_features_map().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691064000">- Update to version 8.1.1:
  + Fix shaping of contextual rules at the end of string,
    introduced in 8.1.0.
  + Fix stack-overflow in repacker with malicious fonts.
  + 30% speed up loading Noto Duployan font.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 8.2.0:
  + Various build and fuzzing fixes
  + Improvements to COLRv1 painting.
  + New API:
  - hb_paint_color_glyph_func_t
  - hb_paint_funcs_set_color_glyph_func
  - hb_paint_color_glyph</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695038400">- Update to version 8.2.1:
  + Unicode 15.1 support.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697630400">- Update to version 8.2.2:
  + Fix regression from 8.1.0 in shaping fonts with duplicate
    feature tags.
  + Fix regression from 8.2.0 in parsing CSS-style feature strings.
  + Variable fonts instanciation now handles more tables.
  + Various CMake build improvements.
  + Various fixes to build without errors with gcc 4.9.2.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1699704000">- Update to version 8.3.0:
  + Improve memory barrier to fix potential segfaults
  + Various subsetting and instancing fixes.
  + Rename “hb-subset” option “--instance” to “--variations” to
    match the other tools, old option kept as an alias
- -devel: fix no-library-dependency-on libharbuzz-cairo0</changelog>
  <changelog author="mgorse@suse.com" date="1768564800">- Add harfbuzz-CVE-2026-22693.patch: fix a NULL pointer dereference
  (bsc#1256459 CVE-2026-22693).</changelog>
</package>
<package pkgid="2405a9e31c0e3bd59d15e6ef610267d3f454570db5616408fceb1574f26bdb90" name="libharfbuzz-icu0" arch="x86_64">
  <version epoch="0" ver="8.3.0" rel="150600.3.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1658664000">- harfbuzz 5.0.1, including changes from 5.0.0:
  + Improve for fonts with more than 65535 glyphs
  + Support version 2 of “avar” table
  + Improve support for some Arabic, Hebrew fonts
  + Support for specific script tags to be retained in the
    subsetter, and add “--layout-scripts” option to “hb-subset”
    tool
  + Improved handling of command line options
  + Improve support for multiple tables and font features,
    and font feature specific bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1659528000">- harfbuzz 5.1.0:
  + More extensive buffer tracing messages
  + Fix hb-ft regression in bitmap fonts rendering
  + Support extension promotion of lookups in hb-subset-repacker
  + A new HB_GLYPH_FLAG_SAFE_TO_INSERT_TATWEEL for scripts that use
    elongation (e.g. Arabic) to signify where it is safe to insert
    tatweel glyph without interrupting shaping
  + Add --safe-to-insert-tatweel to hb-shape tool
- add harfbuzz-5.1.0-repacker-fix-signedness-of-char-in-tests.patch
  from upstream to fix ARM and PPC builds</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1663675200">- Update to version 5.2.0:
  + Fix regressions in hb-ft font functions for FT_Faces with
    transformation matrix.
  + The experimental hb-repacker API now supports splitting several
    GPOS subtable types when needed.
  + The HarfBuzz extensions to OpenType font format are now opt-in
    behind build-time flags.
  + The experimental hb-subset variable fonts instantiation API can
    now instantiate more font tables and arbitrary axis locations.
  + Unicode 15 support.
  + Various documentation improvements.
  + The hb-view command line tool now detects WezTerm inline images
    support.
  + Fix FreeType and ICU dependency lookup with meson.
  + New API:
  - +HB_SCRIPT_KAWI
  - +HB_SCRIPT_NAG_MUNDARI
- Drop patch fixed upstream:
  + harfbuzz-5.1.0-repacker-fix-signedness-of-char-in-tests.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1665316800">- Update to version 5.3.0:
  + Don’t add glyphs from dropped MATH or COLR tables to the subset
    glyphs
  + Map rlig to appropriate AAT feature selectors
  + Update USE data files to latest version
  + Check CBDT extents first before outline tables, to help with
    fonts that also include an empty glyf table
  + More work towards variable font instancing in the subsetter
  + Subsetter repacker improvements</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1666353600">- Update to version 5.3.1:
  + Subsetter repacker fixes
  + Adjust Grapheme clusters for Katakana voiced sound marks
  + New hb-subset option --preprocess-face
- Add harfbuzz-5.3.1-Fix_check-symbols_failure.patch: Fix failing
  tests.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1671278400">- Update to version 6.0.0:
  + Add API to pre-process the face and speed up future subsetting
    operations on that face. Provides up to a 95% reduction in
    subsetting times when the same face is subset more than once.
  + Shaping have been speedup by skipping entire lookups when the
    buffer contents don't intersect with the lookup. Shows up to a
    10% speedup in shaping some fonts
  + The HarfBuzz subsetter can now drop axes by pinning them to
    specific values (also referred to as instancing)
- Drop harfbuzz-5.3.1-Fix_check-symbols_failure.patch: Fixed
  upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1675684800">- Add harfbuzz-CVE-2023-25193.patch: limit how far we skip when
  looking back (boo#1207922 CVE-2023-25193).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1676203200">- Update to version 7.0.0:
  + New hb-paint API that is designed mainly to paint COLRv1 glyphs,
    but can be also used as a unified API to paint any of the glyph
    representations supported by HarfBuzz (B/W outlines, color
    layers, or color bitmaps).
  + New hb-cairo API for integrating with cairo graphics library.
    This is provided as a separate harfbuzz-cairo library.
  + Support for instancing CFF2 table
  + Support font emboldening
  + Support feature ranges with AAT shaping
  + Experimental support to cubic curves in glyf table
  + Various subsetter improvements
  + Various documentation improvements
  + Significantly reduced memory use during shaping
  + Greatly reduced memory use during subsetting CFF table
  + New command line utility, hb-info, for querying various font
    information
  + New hb-shape/hb-view options: --glyphs, --color-palette,
  - -font-bold, --font-grade, and --named-instance
  + Miscellaneous fixes and improvements
- harfbuzz-CVE-2023-25193.patch dropped in favor of upstream
  consensus fix</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1676980800">- Update to version 7.0.1:
  + Various build and bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1677844800">- Update to version 7.1.0:
  + New experimental API that uses font variations to expand or
    shrink the text to a given advance
  + Various build and bug fixes.
  + New API: hb_font_set_variation().</changelog>
  <changelog author="Andreas.Stieger@gmx.de" date="1683460800">- update to version 7.2.0:
  + Improve Tifinagh glyph positioning
  + Fix 4.2.0 regression in applying across syllables in syllabic
    scripts.
  + Add flag to avoid glyph substitution closure during subsetting,
    and the corresponding “--no-layout-closure” option to
    “hb-subset” command line tool.
  + Support instancing COLRv1 table
  + Optimize handling of “gvar” table
  + Various subsetter bug fixes and improvements, documentation</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1683806400">- update to version 7.3.0:
  + Speedup applying glyph variation in VarComposites fonts
    (over 40% speedup)
  + Speedup instancing some fonts
    (over 20% speedup in instancing RobotoFlex)
  + Speedup shaping some fonts (over 30% speedup in shaping Roboto
  + Support subsetting VarComposites and beyond-64k fonts
  + New configuration macro HB_MINIMIZE_MEMORY_USAGE to favor
    optimizing memory usage over speed
  + Supporting setting the mapping between old and new glyph
    indices during subsetting
  + Various fixes and improvements</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1689249600">- Update to version 8.0.1:
  + Build fix on 32-bit arm.
  + More speed optimizations:
  - 60% speedup in retaingids subsetting SourceHanSans-VF.
  - 38% speed up in subsetting (beyond-64k) mega-merged Noto.
  - 16% speed up in retain-gid (used for IFT) subsetting of
    NotoSansCJKkr.
- Changes from version 8.0.0:
  + New, experimental, WebAssembly (WASM) shaper, that provides
    greater flexibility over OpenType/AAT/Graphite shaping, using
    WebAssembly embedded inside the font file. Currently WASM
    shaper is disabled by default and needs to be enabled at build
    time.
  + Improvements to Experimental features introduced in earlier
    releases:
  - Support for subsetting beyond-64k and VarComposites fonts.
  - Support for instancing variable fonts with cubic “glyf”
    table.
  - Many big speed optimizations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690891200">- Update to version 8.1.0:
  + Fix long-standing build issue with the AIX compiler and older
    Apple clang.
  + Revert optimization that could cause timeout during subsetting
    with malicious fonts.
  + More optimization work:
  - 45% speed up in shaping Noto Duployan font.
  - 10% speed up in subsetting Noto Duployan font.
  - Another 8% speed up in shaping Gulzar.
  - 5% speed up in loading Roboto.
  + New API: +hb_ot_layout_collect_features_map().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691064000">- Update to version 8.1.1:
  + Fix shaping of contextual rules at the end of string,
    introduced in 8.1.0.
  + Fix stack-overflow in repacker with malicious fonts.
  + 30% speed up loading Noto Duployan font.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 8.2.0:
  + Various build and fuzzing fixes
  + Improvements to COLRv1 painting.
  + New API:
  - hb_paint_color_glyph_func_t
  - hb_paint_funcs_set_color_glyph_func
  - hb_paint_color_glyph</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695038400">- Update to version 8.2.1:
  + Unicode 15.1 support.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697630400">- Update to version 8.2.2:
  + Fix regression from 8.1.0 in shaping fonts with duplicate
    feature tags.
  + Fix regression from 8.2.0 in parsing CSS-style feature strings.
  + Variable fonts instanciation now handles more tables.
  + Various CMake build improvements.
  + Various fixes to build without errors with gcc 4.9.2.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1699704000">- Update to version 8.3.0:
  + Improve memory barrier to fix potential segfaults
  + Various subsetting and instancing fixes.
  + Rename “hb-subset” option “--instance” to “--variations” to
    match the other tools, old option kept as an alias
- -devel: fix no-library-dependency-on libharbuzz-cairo0</changelog>
  <changelog author="mgorse@suse.com" date="1768564800">- Add harfbuzz-CVE-2026-22693.patch: fix a NULL pointer dereference
  (bsc#1256459 CVE-2026-22693).</changelog>
</package>
<package pkgid="4d4ccd98c485566ea9423c70c38fdaab49b92f94ea8e17529c46bed7a2193660" name="libharfbuzz-subset0" arch="x86_64">
  <version epoch="0" ver="8.3.0" rel="150600.3.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1658664000">- harfbuzz 5.0.1, including changes from 5.0.0:
  + Improve for fonts with more than 65535 glyphs
  + Support version 2 of “avar” table
  + Improve support for some Arabic, Hebrew fonts
  + Support for specific script tags to be retained in the
    subsetter, and add “--layout-scripts” option to “hb-subset”
    tool
  + Improved handling of command line options
  + Improve support for multiple tables and font features,
    and font feature specific bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1659528000">- harfbuzz 5.1.0:
  + More extensive buffer tracing messages
  + Fix hb-ft regression in bitmap fonts rendering
  + Support extension promotion of lookups in hb-subset-repacker
  + A new HB_GLYPH_FLAG_SAFE_TO_INSERT_TATWEEL for scripts that use
    elongation (e.g. Arabic) to signify where it is safe to insert
    tatweel glyph without interrupting shaping
  + Add --safe-to-insert-tatweel to hb-shape tool
- add harfbuzz-5.1.0-repacker-fix-signedness-of-char-in-tests.patch
  from upstream to fix ARM and PPC builds</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1663675200">- Update to version 5.2.0:
  + Fix regressions in hb-ft font functions for FT_Faces with
    transformation matrix.
  + The experimental hb-repacker API now supports splitting several
    GPOS subtable types when needed.
  + The HarfBuzz extensions to OpenType font format are now opt-in
    behind build-time flags.
  + The experimental hb-subset variable fonts instantiation API can
    now instantiate more font tables and arbitrary axis locations.
  + Unicode 15 support.
  + Various documentation improvements.
  + The hb-view command line tool now detects WezTerm inline images
    support.
  + Fix FreeType and ICU dependency lookup with meson.
  + New API:
  - +HB_SCRIPT_KAWI
  - +HB_SCRIPT_NAG_MUNDARI
- Drop patch fixed upstream:
  + harfbuzz-5.1.0-repacker-fix-signedness-of-char-in-tests.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1665316800">- Update to version 5.3.0:
  + Don’t add glyphs from dropped MATH or COLR tables to the subset
    glyphs
  + Map rlig to appropriate AAT feature selectors
  + Update USE data files to latest version
  + Check CBDT extents first before outline tables, to help with
    fonts that also include an empty glyf table
  + More work towards variable font instancing in the subsetter
  + Subsetter repacker improvements</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1666353600">- Update to version 5.3.1:
  + Subsetter repacker fixes
  + Adjust Grapheme clusters for Katakana voiced sound marks
  + New hb-subset option --preprocess-face
- Add harfbuzz-5.3.1-Fix_check-symbols_failure.patch: Fix failing
  tests.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1671278400">- Update to version 6.0.0:
  + Add API to pre-process the face and speed up future subsetting
    operations on that face. Provides up to a 95% reduction in
    subsetting times when the same face is subset more than once.
  + Shaping have been speedup by skipping entire lookups when the
    buffer contents don't intersect with the lookup. Shows up to a
    10% speedup in shaping some fonts
  + The HarfBuzz subsetter can now drop axes by pinning them to
    specific values (also referred to as instancing)
- Drop harfbuzz-5.3.1-Fix_check-symbols_failure.patch: Fixed
  upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1675684800">- Add harfbuzz-CVE-2023-25193.patch: limit how far we skip when
  looking back (boo#1207922 CVE-2023-25193).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1676203200">- Update to version 7.0.0:
  + New hb-paint API that is designed mainly to paint COLRv1 glyphs,
    but can be also used as a unified API to paint any of the glyph
    representations supported by HarfBuzz (B/W outlines, color
    layers, or color bitmaps).
  + New hb-cairo API for integrating with cairo graphics library.
    This is provided as a separate harfbuzz-cairo library.
  + Support for instancing CFF2 table
  + Support font emboldening
  + Support feature ranges with AAT shaping
  + Experimental support to cubic curves in glyf table
  + Various subsetter improvements
  + Various documentation improvements
  + Significantly reduced memory use during shaping
  + Greatly reduced memory use during subsetting CFF table
  + New command line utility, hb-info, for querying various font
    information
  + New hb-shape/hb-view options: --glyphs, --color-palette,
  - -font-bold, --font-grade, and --named-instance
  + Miscellaneous fixes and improvements
- harfbuzz-CVE-2023-25193.patch dropped in favor of upstream
  consensus fix</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1676980800">- Update to version 7.0.1:
  + Various build and bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1677844800">- Update to version 7.1.0:
  + New experimental API that uses font variations to expand or
    shrink the text to a given advance
  + Various build and bug fixes.
  + New API: hb_font_set_variation().</changelog>
  <changelog author="Andreas.Stieger@gmx.de" date="1683460800">- update to version 7.2.0:
  + Improve Tifinagh glyph positioning
  + Fix 4.2.0 regression in applying across syllables in syllabic
    scripts.
  + Add flag to avoid glyph substitution closure during subsetting,
    and the corresponding “--no-layout-closure” option to
    “hb-subset” command line tool.
  + Support instancing COLRv1 table
  + Optimize handling of “gvar” table
  + Various subsetter bug fixes and improvements, documentation</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1683806400">- update to version 7.3.0:
  + Speedup applying glyph variation in VarComposites fonts
    (over 40% speedup)
  + Speedup instancing some fonts
    (over 20% speedup in instancing RobotoFlex)
  + Speedup shaping some fonts (over 30% speedup in shaping Roboto
  + Support subsetting VarComposites and beyond-64k fonts
  + New configuration macro HB_MINIMIZE_MEMORY_USAGE to favor
    optimizing memory usage over speed
  + Supporting setting the mapping between old and new glyph
    indices during subsetting
  + Various fixes and improvements</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1689249600">- Update to version 8.0.1:
  + Build fix on 32-bit arm.
  + More speed optimizations:
  - 60% speedup in retaingids subsetting SourceHanSans-VF.
  - 38% speed up in subsetting (beyond-64k) mega-merged Noto.
  - 16% speed up in retain-gid (used for IFT) subsetting of
    NotoSansCJKkr.
- Changes from version 8.0.0:
  + New, experimental, WebAssembly (WASM) shaper, that provides
    greater flexibility over OpenType/AAT/Graphite shaping, using
    WebAssembly embedded inside the font file. Currently WASM
    shaper is disabled by default and needs to be enabled at build
    time.
  + Improvements to Experimental features introduced in earlier
    releases:
  - Support for subsetting beyond-64k and VarComposites fonts.
  - Support for instancing variable fonts with cubic “glyf”
    table.
  - Many big speed optimizations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690891200">- Update to version 8.1.0:
  + Fix long-standing build issue with the AIX compiler and older
    Apple clang.
  + Revert optimization that could cause timeout during subsetting
    with malicious fonts.
  + More optimization work:
  - 45% speed up in shaping Noto Duployan font.
  - 10% speed up in subsetting Noto Duployan font.
  - Another 8% speed up in shaping Gulzar.
  - 5% speed up in loading Roboto.
  + New API: +hb_ot_layout_collect_features_map().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691064000">- Update to version 8.1.1:
  + Fix shaping of contextual rules at the end of string,
    introduced in 8.1.0.
  + Fix stack-overflow in repacker with malicious fonts.
  + 30% speed up loading Noto Duployan font.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 8.2.0:
  + Various build and fuzzing fixes
  + Improvements to COLRv1 painting.
  + New API:
  - hb_paint_color_glyph_func_t
  - hb_paint_funcs_set_color_glyph_func
  - hb_paint_color_glyph</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695038400">- Update to version 8.2.1:
  + Unicode 15.1 support.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697630400">- Update to version 8.2.2:
  + Fix regression from 8.1.0 in shaping fonts with duplicate
    feature tags.
  + Fix regression from 8.2.0 in parsing CSS-style feature strings.
  + Variable fonts instanciation now handles more tables.
  + Various CMake build improvements.
  + Various fixes to build without errors with gcc 4.9.2.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1699704000">- Update to version 8.3.0:
  + Improve memory barrier to fix potential segfaults
  + Various subsetting and instancing fixes.
  + Rename “hb-subset” option “--instance” to “--variations” to
    match the other tools, old option kept as an alias
- -devel: fix no-library-dependency-on libharbuzz-cairo0</changelog>
  <changelog author="mgorse@suse.com" date="1768564800">- Add harfbuzz-CVE-2026-22693.patch: fix a NULL pointer dereference
  (bsc#1256459 CVE-2026-22693).</changelog>
</package>
<package pkgid="b4f2d799b09d4047ce1a6b9efa0b3711ff9dd4e52d2353170b567b6c722884da" name="libharfbuzz0-32bit" arch="x86_64">
  <version epoch="0" ver="8.3.0" rel="150600.3.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1658664000">- harfbuzz 5.0.1, including changes from 5.0.0:
  + Improve for fonts with more than 65535 glyphs
  + Support version 2 of “avar” table
  + Improve support for some Arabic, Hebrew fonts
  + Support for specific script tags to be retained in the
    subsetter, and add “--layout-scripts” option to “hb-subset”
    tool
  + Improved handling of command line options
  + Improve support for multiple tables and font features,
    and font feature specific bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1659528000">- harfbuzz 5.1.0:
  + More extensive buffer tracing messages
  + Fix hb-ft regression in bitmap fonts rendering
  + Support extension promotion of lookups in hb-subset-repacker
  + A new HB_GLYPH_FLAG_SAFE_TO_INSERT_TATWEEL for scripts that use
    elongation (e.g. Arabic) to signify where it is safe to insert
    tatweel glyph without interrupting shaping
  + Add --safe-to-insert-tatweel to hb-shape tool
- add harfbuzz-5.1.0-repacker-fix-signedness-of-char-in-tests.patch
  from upstream to fix ARM and PPC builds</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1663675200">- Update to version 5.2.0:
  + Fix regressions in hb-ft font functions for FT_Faces with
    transformation matrix.
  + The experimental hb-repacker API now supports splitting several
    GPOS subtable types when needed.
  + The HarfBuzz extensions to OpenType font format are now opt-in
    behind build-time flags.
  + The experimental hb-subset variable fonts instantiation API can
    now instantiate more font tables and arbitrary axis locations.
  + Unicode 15 support.
  + Various documentation improvements.
  + The hb-view command line tool now detects WezTerm inline images
    support.
  + Fix FreeType and ICU dependency lookup with meson.
  + New API:
  - +HB_SCRIPT_KAWI
  - +HB_SCRIPT_NAG_MUNDARI
- Drop patch fixed upstream:
  + harfbuzz-5.1.0-repacker-fix-signedness-of-char-in-tests.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1665316800">- Update to version 5.3.0:
  + Don’t add glyphs from dropped MATH or COLR tables to the subset
    glyphs
  + Map rlig to appropriate AAT feature selectors
  + Update USE data files to latest version
  + Check CBDT extents first before outline tables, to help with
    fonts that also include an empty glyf table
  + More work towards variable font instancing in the subsetter
  + Subsetter repacker improvements</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1666353600">- Update to version 5.3.1:
  + Subsetter repacker fixes
  + Adjust Grapheme clusters for Katakana voiced sound marks
  + New hb-subset option --preprocess-face
- Add harfbuzz-5.3.1-Fix_check-symbols_failure.patch: Fix failing
  tests.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1671278400">- Update to version 6.0.0:
  + Add API to pre-process the face and speed up future subsetting
    operations on that face. Provides up to a 95% reduction in
    subsetting times when the same face is subset more than once.
  + Shaping have been speedup by skipping entire lookups when the
    buffer contents don't intersect with the lookup. Shows up to a
    10% speedup in shaping some fonts
  + The HarfBuzz subsetter can now drop axes by pinning them to
    specific values (also referred to as instancing)
- Drop harfbuzz-5.3.1-Fix_check-symbols_failure.patch: Fixed
  upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1675684800">- Add harfbuzz-CVE-2023-25193.patch: limit how far we skip when
  looking back (boo#1207922 CVE-2023-25193).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1676203200">- Update to version 7.0.0:
  + New hb-paint API that is designed mainly to paint COLRv1 glyphs,
    but can be also used as a unified API to paint any of the glyph
    representations supported by HarfBuzz (B/W outlines, color
    layers, or color bitmaps).
  + New hb-cairo API for integrating with cairo graphics library.
    This is provided as a separate harfbuzz-cairo library.
  + Support for instancing CFF2 table
  + Support font emboldening
  + Support feature ranges with AAT shaping
  + Experimental support to cubic curves in glyf table
  + Various subsetter improvements
  + Various documentation improvements
  + Significantly reduced memory use during shaping
  + Greatly reduced memory use during subsetting CFF table
  + New command line utility, hb-info, for querying various font
    information
  + New hb-shape/hb-view options: --glyphs, --color-palette,
  - -font-bold, --font-grade, and --named-instance
  + Miscellaneous fixes and improvements
- harfbuzz-CVE-2023-25193.patch dropped in favor of upstream
  consensus fix</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1676980800">- Update to version 7.0.1:
  + Various build and bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1677844800">- Update to version 7.1.0:
  + New experimental API that uses font variations to expand or
    shrink the text to a given advance
  + Various build and bug fixes.
  + New API: hb_font_set_variation().</changelog>
  <changelog author="Andreas.Stieger@gmx.de" date="1683460800">- update to version 7.2.0:
  + Improve Tifinagh glyph positioning
  + Fix 4.2.0 regression in applying across syllables in syllabic
    scripts.
  + Add flag to avoid glyph substitution closure during subsetting,
    and the corresponding “--no-layout-closure” option to
    “hb-subset” command line tool.
  + Support instancing COLRv1 table
  + Optimize handling of “gvar” table
  + Various subsetter bug fixes and improvements, documentation</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1683806400">- update to version 7.3.0:
  + Speedup applying glyph variation in VarComposites fonts
    (over 40% speedup)
  + Speedup instancing some fonts
    (over 20% speedup in instancing RobotoFlex)
  + Speedup shaping some fonts (over 30% speedup in shaping Roboto
  + Support subsetting VarComposites and beyond-64k fonts
  + New configuration macro HB_MINIMIZE_MEMORY_USAGE to favor
    optimizing memory usage over speed
  + Supporting setting the mapping between old and new glyph
    indices during subsetting
  + Various fixes and improvements</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1689249600">- Update to version 8.0.1:
  + Build fix on 32-bit arm.
  + More speed optimizations:
  - 60% speedup in retaingids subsetting SourceHanSans-VF.
  - 38% speed up in subsetting (beyond-64k) mega-merged Noto.
  - 16% speed up in retain-gid (used for IFT) subsetting of
    NotoSansCJKkr.
- Changes from version 8.0.0:
  + New, experimental, WebAssembly (WASM) shaper, that provides
    greater flexibility over OpenType/AAT/Graphite shaping, using
    WebAssembly embedded inside the font file. Currently WASM
    shaper is disabled by default and needs to be enabled at build
    time.
  + Improvements to Experimental features introduced in earlier
    releases:
  - Support for subsetting beyond-64k and VarComposites fonts.
  - Support for instancing variable fonts with cubic “glyf”
    table.
  - Many big speed optimizations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690891200">- Update to version 8.1.0:
  + Fix long-standing build issue with the AIX compiler and older
    Apple clang.
  + Revert optimization that could cause timeout during subsetting
    with malicious fonts.
  + More optimization work:
  - 45% speed up in shaping Noto Duployan font.
  - 10% speed up in subsetting Noto Duployan font.
  - Another 8% speed up in shaping Gulzar.
  - 5% speed up in loading Roboto.
  + New API: +hb_ot_layout_collect_features_map().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691064000">- Update to version 8.1.1:
  + Fix shaping of contextual rules at the end of string,
    introduced in 8.1.0.
  + Fix stack-overflow in repacker with malicious fonts.
  + 30% speed up loading Noto Duployan font.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 8.2.0:
  + Various build and fuzzing fixes
  + Improvements to COLRv1 painting.
  + New API:
  - hb_paint_color_glyph_func_t
  - hb_paint_funcs_set_color_glyph_func
  - hb_paint_color_glyph</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695038400">- Update to version 8.2.1:
  + Unicode 15.1 support.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697630400">- Update to version 8.2.2:
  + Fix regression from 8.1.0 in shaping fonts with duplicate
    feature tags.
  + Fix regression from 8.2.0 in parsing CSS-style feature strings.
  + Variable fonts instanciation now handles more tables.
  + Various CMake build improvements.
  + Various fixes to build without errors with gcc 4.9.2.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1699704000">- Update to version 8.3.0:
  + Improve memory barrier to fix potential segfaults
  + Various subsetting and instancing fixes.
  + Rename “hb-subset” option “--instance” to “--variations” to
    match the other tools, old option kept as an alias
- -devel: fix no-library-dependency-on libharbuzz-cairo0</changelog>
  <changelog author="mgorse@suse.com" date="1768564800">- Add harfbuzz-CVE-2026-22693.patch: fix a NULL pointer dereference
  (bsc#1256459 CVE-2026-22693).</changelog>
</package>
<package pkgid="e16cd9183515014245abe93093863477089fed1e8960f89364e587d4b519b9b8" name="libharfbuzz0" arch="x86_64">
  <version epoch="0" ver="8.3.0" rel="150600.3.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1658664000">- harfbuzz 5.0.1, including changes from 5.0.0:
  + Improve for fonts with more than 65535 glyphs
  + Support version 2 of “avar” table
  + Improve support for some Arabic, Hebrew fonts
  + Support for specific script tags to be retained in the
    subsetter, and add “--layout-scripts” option to “hb-subset”
    tool
  + Improved handling of command line options
  + Improve support for multiple tables and font features,
    and font feature specific bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1659528000">- harfbuzz 5.1.0:
  + More extensive buffer tracing messages
  + Fix hb-ft regression in bitmap fonts rendering
  + Support extension promotion of lookups in hb-subset-repacker
  + A new HB_GLYPH_FLAG_SAFE_TO_INSERT_TATWEEL for scripts that use
    elongation (e.g. Arabic) to signify where it is safe to insert
    tatweel glyph without interrupting shaping
  + Add --safe-to-insert-tatweel to hb-shape tool
- add harfbuzz-5.1.0-repacker-fix-signedness-of-char-in-tests.patch
  from upstream to fix ARM and PPC builds</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1663675200">- Update to version 5.2.0:
  + Fix regressions in hb-ft font functions for FT_Faces with
    transformation matrix.
  + The experimental hb-repacker API now supports splitting several
    GPOS subtable types when needed.
  + The HarfBuzz extensions to OpenType font format are now opt-in
    behind build-time flags.
  + The experimental hb-subset variable fonts instantiation API can
    now instantiate more font tables and arbitrary axis locations.
  + Unicode 15 support.
  + Various documentation improvements.
  + The hb-view command line tool now detects WezTerm inline images
    support.
  + Fix FreeType and ICU dependency lookup with meson.
  + New API:
  - +HB_SCRIPT_KAWI
  - +HB_SCRIPT_NAG_MUNDARI
- Drop patch fixed upstream:
  + harfbuzz-5.1.0-repacker-fix-signedness-of-char-in-tests.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1665316800">- Update to version 5.3.0:
  + Don’t add glyphs from dropped MATH or COLR tables to the subset
    glyphs
  + Map rlig to appropriate AAT feature selectors
  + Update USE data files to latest version
  + Check CBDT extents first before outline tables, to help with
    fonts that also include an empty glyf table
  + More work towards variable font instancing in the subsetter
  + Subsetter repacker improvements</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1666353600">- Update to version 5.3.1:
  + Subsetter repacker fixes
  + Adjust Grapheme clusters for Katakana voiced sound marks
  + New hb-subset option --preprocess-face
- Add harfbuzz-5.3.1-Fix_check-symbols_failure.patch: Fix failing
  tests.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1671278400">- Update to version 6.0.0:
  + Add API to pre-process the face and speed up future subsetting
    operations on that face. Provides up to a 95% reduction in
    subsetting times when the same face is subset more than once.
  + Shaping have been speedup by skipping entire lookups when the
    buffer contents don't intersect with the lookup. Shows up to a
    10% speedup in shaping some fonts
  + The HarfBuzz subsetter can now drop axes by pinning them to
    specific values (also referred to as instancing)
- Drop harfbuzz-5.3.1-Fix_check-symbols_failure.patch: Fixed
  upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1675684800">- Add harfbuzz-CVE-2023-25193.patch: limit how far we skip when
  looking back (boo#1207922 CVE-2023-25193).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1676203200">- Update to version 7.0.0:
  + New hb-paint API that is designed mainly to paint COLRv1 glyphs,
    but can be also used as a unified API to paint any of the glyph
    representations supported by HarfBuzz (B/W outlines, color
    layers, or color bitmaps).
  + New hb-cairo API for integrating with cairo graphics library.
    This is provided as a separate harfbuzz-cairo library.
  + Support for instancing CFF2 table
  + Support font emboldening
  + Support feature ranges with AAT shaping
  + Experimental support to cubic curves in glyf table
  + Various subsetter improvements
  + Various documentation improvements
  + Significantly reduced memory use during shaping
  + Greatly reduced memory use during subsetting CFF table
  + New command line utility, hb-info, for querying various font
    information
  + New hb-shape/hb-view options: --glyphs, --color-palette,
  - -font-bold, --font-grade, and --named-instance
  + Miscellaneous fixes and improvements
- harfbuzz-CVE-2023-25193.patch dropped in favor of upstream
  consensus fix</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1676980800">- Update to version 7.0.1:
  + Various build and bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1677844800">- Update to version 7.1.0:
  + New experimental API that uses font variations to expand or
    shrink the text to a given advance
  + Various build and bug fixes.
  + New API: hb_font_set_variation().</changelog>
  <changelog author="Andreas.Stieger@gmx.de" date="1683460800">- update to version 7.2.0:
  + Improve Tifinagh glyph positioning
  + Fix 4.2.0 regression in applying across syllables in syllabic
    scripts.
  + Add flag to avoid glyph substitution closure during subsetting,
    and the corresponding “--no-layout-closure” option to
    “hb-subset” command line tool.
  + Support instancing COLRv1 table
  + Optimize handling of “gvar” table
  + Various subsetter bug fixes and improvements, documentation</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1683806400">- update to version 7.3.0:
  + Speedup applying glyph variation in VarComposites fonts
    (over 40% speedup)
  + Speedup instancing some fonts
    (over 20% speedup in instancing RobotoFlex)
  + Speedup shaping some fonts (over 30% speedup in shaping Roboto
  + Support subsetting VarComposites and beyond-64k fonts
  + New configuration macro HB_MINIMIZE_MEMORY_USAGE to favor
    optimizing memory usage over speed
  + Supporting setting the mapping between old and new glyph
    indices during subsetting
  + Various fixes and improvements</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1689249600">- Update to version 8.0.1:
  + Build fix on 32-bit arm.
  + More speed optimizations:
  - 60% speedup in retaingids subsetting SourceHanSans-VF.
  - 38% speed up in subsetting (beyond-64k) mega-merged Noto.
  - 16% speed up in retain-gid (used for IFT) subsetting of
    NotoSansCJKkr.
- Changes from version 8.0.0:
  + New, experimental, WebAssembly (WASM) shaper, that provides
    greater flexibility over OpenType/AAT/Graphite shaping, using
    WebAssembly embedded inside the font file. Currently WASM
    shaper is disabled by default and needs to be enabled at build
    time.
  + Improvements to Experimental features introduced in earlier
    releases:
  - Support for subsetting beyond-64k and VarComposites fonts.
  - Support for instancing variable fonts with cubic “glyf”
    table.
  - Many big speed optimizations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690891200">- Update to version 8.1.0:
  + Fix long-standing build issue with the AIX compiler and older
    Apple clang.
  + Revert optimization that could cause timeout during subsetting
    with malicious fonts.
  + More optimization work:
  - 45% speed up in shaping Noto Duployan font.
  - 10% speed up in subsetting Noto Duployan font.
  - Another 8% speed up in shaping Gulzar.
  - 5% speed up in loading Roboto.
  + New API: +hb_ot_layout_collect_features_map().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691064000">- Update to version 8.1.1:
  + Fix shaping of contextual rules at the end of string,
    introduced in 8.1.0.
  + Fix stack-overflow in repacker with malicious fonts.
  + 30% speed up loading Noto Duployan font.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694174400">- Update to version 8.2.0:
  + Various build and fuzzing fixes
  + Improvements to COLRv1 painting.
  + New API:
  - hb_paint_color_glyph_func_t
  - hb_paint_funcs_set_color_glyph_func
  - hb_paint_color_glyph</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695038400">- Update to version 8.2.1:
  + Unicode 15.1 support.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697630400">- Update to version 8.2.2:
  + Fix regression from 8.1.0 in shaping fonts with duplicate
    feature tags.
  + Fix regression from 8.2.0 in parsing CSS-style feature strings.
  + Variable fonts instanciation now handles more tables.
  + Various CMake build improvements.
  + Various fixes to build without errors with gcc 4.9.2.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1699704000">- Update to version 8.3.0:
  + Improve memory barrier to fix potential segfaults
  + Various subsetting and instancing fixes.
  + Rename “hb-subset” option “--instance” to “--variations” to
    match the other tools, old option kept as an alias
- -devel: fix no-library-dependency-on libharbuzz-cairo0</changelog>
  <changelog author="mgorse@suse.com" date="1768564800">- Add harfbuzz-CVE-2026-22693.patch: fix a NULL pointer dereference
  (bsc#1256459 CVE-2026-22693).</changelog>
</package>
<package pkgid="2a49c0cbe07c050192fccd6c3ef85873f649d8504f54de42534aa047a00fa19a" name="libhavege2" arch="x86_64">
  <version epoch="0" ver="1.9.14" rel="150600.11.3.1"/>
  <changelog author="meissner@suse.com" date="1444392000">- haveged.service: reverted the dependency on systemd-journald.socket
  for now, as it causes a dependency loop. bsc#949728 bsc#950857</changelog>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix missing dependency on coreutils for initrd macros (boo#958562)</changelog>
  <changelog author="psimons@suse.com" date="1466164800">- Add haveged-no-syslog.patch to remedy the potential for deadlocks
  when booting the system: journald reads from /dev/random, which
  receives entropy from haveged, which in turn logs to syslog
  before providing any. Ideally, haveged would provide a proper
  command-line flag to disable use of syslog. Will work with
  upstream to resolve this in a cleaner way. (bnc#959237)
- Remove "After=systemd-random-seed.service" from systemd service
  file to avoid the potential for deadlocks when booting the
  system: systemd-random-seed needs /var to read its previous
  state; mounting /var needs journald; journald needs entropy; and
  entropy is provided by haveged, which needs systemd-random-seed.
  (bnc#959237)</changelog>
  <changelog author="jengelh@inai.de" date="1466337600">- reset rpm groups</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- update to 1.9.2
  * Cross compile fixes
  * Limit watermark max to less than pool size to avoid 100% cpu
    condition
  * Add service.suse init script
- drop fix-enforced-clock-gettime.patch (fixed upstream)
- cleanup with spec-cleaner</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="werner@suse.de" date="1530100800">- Make haveged survive switch root within initrd  (boo#1075359)
  added change-sysroot.patch
  haveged-switch-root.service</changelog>
  <changelog author="werner@suse.de" date="1530532800">- Add patch change-sysroot.patch to
  move forward to socket communication within private network
- Add haveged-switch-root.service which send the new root location
  to running haveged process</changelog>
  <changelog author="mpluskal@suse.com" date="1536667200">- Update to version 1.9.4:
  * Avoid misleading message if cmd socket is in use
  * Implements a command mode and use it for chroot
- Drop upstreamed patches:
  * change-sysroot.patch
- Update project and download url's</changelog>
  <changelog author="jengelh@inai.de" date="1536667201">- Use noun phrase for summary. Grammar fixes to description.</changelog>
  <changelog author="werner@suse.de" date="1537358400">- Add patch f2193587.patch from github pull request (bsc#1134351)
  * Fix segfault on arm machines which do not eport the cache size
    or say it is -1 in sysfs
- Refresh patches</changelog>
  <changelog author="schwab@suse.de" date="1564488000">- get-poolsize.patch: Fix type mismatch in get_poolsize that breaks error
  checking (bsc#1111047)</changelog>
  <changelog author="mpluskal@suse.com" date="1590494400">- Update to version 1.9.8:
  * Fix for Unresolved symbol error_exit in libhavege #20 by pld-gitsync [Jirka Hladky]
  * order after systemd-tmpfiles-setup-dev.service (origin/pr/21) [Christian Hesse]
  * use systemd security features [Christian Hesse]
  * do not run in container [Christian Hesse]
  * do not use carriage return in line break [Christian Hesse]
  * Fixed invalid UTF-8 codes in ChangeLog [Jirka Hladky]
- Changes for version 1.9.5:
  * Added test for /dev/random symlink [Jirka Hladky]
  * Update to automake 1.16 [Jirka Hladky]
  * Fix segv at start [Andrew]
  * Fixed built issue on Cygwin [jbaker6953]
  * Fix segfault on arm machines (origin/pr/7) [Natanael Copa]
  * init.d/Makefile.am - add missing dependency [Jackie Huang]
  * service.redhat - update PIDFile [Pierre-Jean Texier]
  * Fix type mismatch in get_poolsize [Andreas Schwab]
  * Fixup upstream changelog [Nicolas Braud-Santoni]
  * Remove support for CPUID on ia64 (origin/pr/19) [Jeremy Bobbio]
  * Output some progress during CUSUM and RANDOM EXCURSION test [Sven Hartge]
  * Diagnostics capture mode now works correctly [Ethan Rahn]
- Drop upstream patches:
  * f2193587.patch
  * get-poolsize.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1593518400">- Update to 1.9.13:
  * added support for --version [Jirka Hladky]
  * updated systemd service file [Jirka Hladky]
  * fix a memory leak in havege_destroy [Anakin Zhang]
  * updated version reported by program [Jirka Hladky]
  * fix ordering cycle with private tmp [Christian Hesse]
  * Updated systemd service file [Nicolas Braud-Santoni]
  * Bump soname [Nicolas Braud-Santoni]
  * Fix crash on shutdown in threaded mode [Sergei Trofimovich]
  * Fix compilation with --enable-threads [Lars Wendler]</changelog>
  <changelog author="info@paolostivanin.com" date="1609761600">- Update to 1.9.14:
  * made enttest configurable
  * havegecmd.c - new command added to close the communication socket
- Drop haveged-conditional-enttest.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1633953600">- Improvements on the linux kernel random subsystem have made
  the haveged service/daemon obsolete, remove the service files,
  initrd modules and udev rules, the other components
  are still useful.</changelog>
  <changelog author="meissner@suse.com" date="1635854400">- revert last change, e.g. for VMs where we are not being fed entropy
  from the host or similar setups.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- Synchronize haveged instances during switching root (bsc#1203079)
  * Add haveged-switch-root.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1698408000">- Remove haveged-switch-root.service because it's implemented incorrectly and
  neither upstream don't know how to fix it (#77). On the other hand, without
  this service haveged will be started from scratch after switch root so it's
  hopefully no big deal. Also remove patch for bsc#1203079 as it's considered
  as a security threat because of creating fixed name file in world-writable
  directory. [jsc#PED-6184, bsc#1206699]
  * Remove
  - haveged-switch-root.service
  - haveged-switch-root.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765195200">- Fix for bsc#1222296 and bsc#1165294.
- Remove haveged-switch-root.service.
- Add haveged-once.service.
- Add patch files introducing the '--once' flag.
  * introduce-once-1.patch
  * introduce-once-2.patch</changelog>
</package>
<package pkgid="ce5682175428d8efd93d61a6ce82844862bf88b2816d59ff52d832bd5548b54a" name="libhavege2" arch="x86_64">
  <version epoch="0" ver="1.9.14" rel="150600.11.6.1"/>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix missing dependency on coreutils for initrd macros (boo#958562)</changelog>
  <changelog author="psimons@suse.com" date="1466164800">- Add haveged-no-syslog.patch to remedy the potential for deadlocks
  when booting the system: journald reads from /dev/random, which
  receives entropy from haveged, which in turn logs to syslog
  before providing any. Ideally, haveged would provide a proper
  command-line flag to disable use of syslog. Will work with
  upstream to resolve this in a cleaner way. (bnc#959237)
- Remove "After=systemd-random-seed.service" from systemd service
  file to avoid the potential for deadlocks when booting the
  system: systemd-random-seed needs /var to read its previous
  state; mounting /var needs journald; journald needs entropy; and
  entropy is provided by haveged, which needs systemd-random-seed.
  (bnc#959237)</changelog>
  <changelog author="jengelh@inai.de" date="1466337600">- reset rpm groups</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- update to 1.9.2
  * Cross compile fixes
  * Limit watermark max to less than pool size to avoid 100% cpu
    condition
  * Add service.suse init script
- drop fix-enforced-clock-gettime.patch (fixed upstream)
- cleanup with spec-cleaner</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="werner@suse.de" date="1530100800">- Make haveged survive switch root within initrd  (boo#1075359)
  added change-sysroot.patch
  haveged-switch-root.service</changelog>
  <changelog author="werner@suse.de" date="1530532800">- Add patch change-sysroot.patch to
  move forward to socket communication within private network
- Add haveged-switch-root.service which send the new root location
  to running haveged process</changelog>
  <changelog author="mpluskal@suse.com" date="1536667200">- Update to version 1.9.4:
  * Avoid misleading message if cmd socket is in use
  * Implements a command mode and use it for chroot
- Drop upstreamed patches:
  * change-sysroot.patch
- Update project and download url's</changelog>
  <changelog author="jengelh@inai.de" date="1536667201">- Use noun phrase for summary. Grammar fixes to description.</changelog>
  <changelog author="werner@suse.de" date="1537358400">- Add patch f2193587.patch from github pull request (bsc#1134351)
  * Fix segfault on arm machines which do not eport the cache size
    or say it is -1 in sysfs
- Refresh patches</changelog>
  <changelog author="schwab@suse.de" date="1564488000">- get-poolsize.patch: Fix type mismatch in get_poolsize that breaks error
  checking (bsc#1111047)</changelog>
  <changelog author="mpluskal@suse.com" date="1590494400">- Update to version 1.9.8:
  * Fix for Unresolved symbol error_exit in libhavege #20 by pld-gitsync [Jirka Hladky]
  * order after systemd-tmpfiles-setup-dev.service (origin/pr/21) [Christian Hesse]
  * use systemd security features [Christian Hesse]
  * do not run in container [Christian Hesse]
  * do not use carriage return in line break [Christian Hesse]
  * Fixed invalid UTF-8 codes in ChangeLog [Jirka Hladky]
- Changes for version 1.9.5:
  * Added test for /dev/random symlink [Jirka Hladky]
  * Update to automake 1.16 [Jirka Hladky]
  * Fix segv at start [Andrew]
  * Fixed built issue on Cygwin [jbaker6953]
  * Fix segfault on arm machines (origin/pr/7) [Natanael Copa]
  * init.d/Makefile.am - add missing dependency [Jackie Huang]
  * service.redhat - update PIDFile [Pierre-Jean Texier]
  * Fix type mismatch in get_poolsize [Andreas Schwab]
  * Fixup upstream changelog [Nicolas Braud-Santoni]
  * Remove support for CPUID on ia64 (origin/pr/19) [Jeremy Bobbio]
  * Output some progress during CUSUM and RANDOM EXCURSION test [Sven Hartge]
  * Diagnostics capture mode now works correctly [Ethan Rahn]
- Drop upstream patches:
  * f2193587.patch
  * get-poolsize.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1593518400">- Update to 1.9.13:
  * added support for --version [Jirka Hladky]
  * updated systemd service file [Jirka Hladky]
  * fix a memory leak in havege_destroy [Anakin Zhang]
  * updated version reported by program [Jirka Hladky]
  * fix ordering cycle with private tmp [Christian Hesse]
  * Updated systemd service file [Nicolas Braud-Santoni]
  * Bump soname [Nicolas Braud-Santoni]
  * Fix crash on shutdown in threaded mode [Sergei Trofimovich]
  * Fix compilation with --enable-threads [Lars Wendler]</changelog>
  <changelog author="info@paolostivanin.com" date="1609761600">- Update to 1.9.14:
  * made enttest configurable
  * havegecmd.c - new command added to close the communication socket
- Drop haveged-conditional-enttest.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1633953600">- Improvements on the linux kernel random subsystem have made
  the haveged service/daemon obsolete, remove the service files,
  initrd modules and udev rules, the other components
  are still useful.</changelog>
  <changelog author="meissner@suse.com" date="1635854400">- revert last change, e.g. for VMs where we are not being fed entropy
  from the host or similar setups.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- Synchronize haveged instances during switching root (bsc#1203079)
  * Add haveged-switch-root.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1698408000">- Remove haveged-switch-root.service because it's implemented incorrectly and
  neither upstream don't know how to fix it (#77). On the other hand, without
  this service haveged will be started from scratch after switch root so it's
  hopefully no big deal. Also remove patch for bsc#1203079 as it's considered
  as a security threat because of creating fixed name file in world-writable
  directory. [jsc#PED-6184, bsc#1206699]
  * Remove
  - haveged-switch-root.service
  - haveged-switch-root.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1765195200">- Fix for bsc#1222296 and bsc#1165294.
- Remove haveged-switch-root.service.
- Add haveged-once.service.
- Add patch files introducing the '--once' flag.
  * introduce-once-1.patch
  * introduce-once-2.patch</changelog>
  <changelog author="dmueller@suse.com" date="1778587200">- add CVE-2026-41054.patch (bsc#1264086, CVE-2026-41054)</changelog>
</package>
<package pkgid="3ab63fed3194f6710be40fc7d2e268cb976e44a366ea2ca8e511a3529f2e620a" name="libhns1" arch="x86_64">
  <version epoch="0" ver="54.0" rel="150700.3.2.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="schwab@suse.de" date="1647518400">- util-Add-barriers-support-for-RISC-V.patch: Backport from upstream: Add
  barriers support for RISC-V</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1648555200">- Update to v39.1
  - Major fixes for hns provider
  - Bug fixes for all providers
  - systemd hardening
  - NDR rate support
- Dropped srp_daemon-Detect-proper-path-to-systemctl.patch
  as it was fixed upstream</changelog>
  <changelog author="dmueller@suse.com" date="1659960000">- skip valgrind on riscv64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1663070400">- Update to v42.0
  - Fixes for all providers
- Dropped patches merged upstream:
  - util-Add-barriers-support-for-RISC-V.patch
  - cmake-Make-modprobe.d-path-configurable.patch
- Update gen-pandoc.sh to support python3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1665662400">- Add rdma-ndd-disable-systemd-ProtectHostName-feature.patch to fix issue
  where rdma-ndd would not be aware of dynamic hostnames retrived through DHCP</changelog>
  <changelog author="nicolas.morey@suse.com" date="1681905600">- Update to v45.0
  - Fixes for all providers
  - Support for Microsoft Azure Network Adapter
- Drop rdma-ndd-disable-systemd-ProtectHostName-feature.patch
  as it was fixed upstream.
- Refresh against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-Update-kernel-headers.patch</changelog>
  <changelog author="nicolas.morey@suse.com" date="1690200000">- Update to v47.0
  - Fixes for all providers</changelog>
  <changelog author="nicolas.morey@suse.com" date="1691064000">- Drop patches adding support for cxgb3 (EOL, removed from kernel 5.5)
  - cxgb3-fix-declaration-of-free_context.patch
  - cxgb3-fix-support-for-new-uquery-API.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-Update-kernel-headers.patch
- Update baselibs=.conf accordingly</changelog>
  <changelog author="jengelh@inai.de" date="1692792000">- Add missing-quoting.patch
- Use normal GNU tar option syntax
- Remove old RPM spec logic (%defattr)</changelog>
  <changelog author="nicolas.morey@suse.com" date="1695384000">- Update to v48.0
  - No release notes available.
- Drop missing-quoting.patch which was fixed upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1700913600">- Update to v49.0 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1705924800">- Update to v49.1 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1707912000">- Add kernel-boot-do-not-load-module-unsupported-on-s390.patch
  to prevent autoload of module not supported on s390. (bsc#1219805)</changelog>
  <changelog author="nicolas.morey@suse.com" date="1719316800">- Update to rdma-core v52.0
  - No release notes available
- Add upstream patch Added-suffix-libdrm-to-CMakeLists.txt-for-drm.patch
  to fix libdrm detection.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1723464000">- Update to rdma-core v53.0
  - No release notes available
- Remove Added-suffix-libdrm-to-CMakeLists.txt-for-drm.patch
  as it was merged upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1728561600">- Update to rdma-core v54.0
  - No release notes available</changelog>
</package>
<package pkgid="35383e2fa784e8a61f09eaf144e872fed94a0312f146c8782af6dd3a29585682" name="libhowl0" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.12.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- avahi-daemon-check-dns.sh: convert obsolete egrep call to grep -E
  (boo#1203092)</changelog>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
</package>
<package pkgid="803aa38ad105c1af79bce08c9f61e398bc91f5aab164d22411a271191d12faa0" name="libhowl0" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.15.1"/>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
  <changelog author="qzhao@suse.com" date="1768305600">- Add avahi-CVE-2025-68468.patch:
  Backport f66be13 from upstream, fix DoS bug by removing incorrect
  assertion.
  (CVE-2025-68468, bsc#1256499)</changelog>
  <changelog author="qzhao@suse.com" date="1768305601">- Add avahi-CVE-2025-68471.patch:
  Backport 9c6eb53 from upstream, fix DoS bug by changing assert to
  return.
  (CVE-2025-68471, bsc#1256500)</changelog>
  <changelog author="qzhao@suse.com" date="1768305602">- Add avahi-CVE-2025-68276.patch:
  Backport 0c013e2 from upstream, refuse to create wide-area record
  browsers when wide-area is off.
  (CVE-2025-68276, bsc#1256498)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1775044800">- Add avahi-CVE-2026-24401.patch: Fix unsolicited mDNS response
  containing a recursive CNAME record (bsc#1257235).</changelog>
</package>
<package pkgid="3c12ec43041fc8cfb2a5d843c714d1659b88145482056c611431ad6e1e100289" name="libhowl0" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150600.15.9.1"/>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="jengelh@inai.de" date="1650024000">- Stop requiring "avahi" from "libavahi-devel". The devel package
  ought to facilitate building programs with avahi, not run the
  whole deamon.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1657368000">- Move the dbus-1 system.d file to /usr (bsc#1201345)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1662292800">- avahi-daemon-check-dns.sh: convert obsolete egrep call to grep -E
  (boo#1203092)</changelog>
  <changelog author="jsegitz@suse.com" date="1670241600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_avahi-daemon.service.patch
  * harden_avahi-dnsconfd.service.patch</changelog>
  <changelog author="kukuk@suse.com" date="1670500800">- Remove avahi-daemon-check-dns.sh, avahi-daemon-check-dns-suse.patch
  and avahi-daemon.if-up
  Doesn't work since about 9 years and will not be executed on a
  fresh default installation anymore</changelog>
  <changelog author="dimstar@opensuse.org" date="1671451200">- Drop %{_sysconfdir}/sysconfig/network/if-{up,down}.d scripts:
  they are not used, or supported, in a while already.</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681214401">- Use ldconfig_scriptlets macro.</changelog>
  <changelog author="lnussel@suse.com" date="1695211200">- Don't require sudo. There is no indication it's actually used for
  anything.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="dimstar@opensuse.org" date="1699876800">- avahi-autoipd: only migrate files owned by avahi user if said
  user exists: if the user does not exist (fresh installs), then
  there is no chance any file is owned by the user (boo#1216730).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700654400">- avahi-autoipd: guard %post chown with -h, to not follow symlinks
  (boo#1217398).</changelog>
  <changelog author="dimstar@opensuse.org" date="1700740800">- avahi-autoipd: drop the post script part migrating the user
  owning files in /var/lib/avahi-autoipd: the code was aiding
  migrations from SLE&lt;=11/openSUSE&lt;=12.3, which are no longer in
  scope for upgrades nowadays.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701086400">- Reformat avahi-gacdir.patch to apply as patch -p1.
- Use %autopatch instead of deprecated %patchN format.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="mgorse@suse.com" date="1718884800">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).
- Add avahi-filter-bogus-services.patch: no longer supply bogus
  services to callbacks (bsc#1226586).</changelog>
  <changelog author="qzhao@suse.com" date="1732104000">- Add avahi-CVE-2024-52616.patch:
  Backporting 1dade81c from upstream: Properly randomize query id
  of DNS packets.
  (CVE-2024-52616, bsc#1233420)</changelog>
  <changelog author="qzhao@suse.com" date="1757937600">- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)</changelog>
</package>
<package pkgid="008e21a9cb2f9afcefc542395842f3e0633b37c097e2261f54529f82c9436171" name="libhwasan0" arch="x86_64">
  <version epoch="0" ver="14.3.0+git11799" rel="150000.1.11.1"/>
  <changelog author="rguenther@suse.com" date="1728475200">- Update to gcc-14 branch head, 4af44f2cf7d281f3e4f3957ef, git10750
  * includes libstdc++6 fix for parsing tzdata 2024b [gcc#116657]
- Add gcc14-pr116629.patch to fix ICE with LTO building openvino
  on aarch64 [boo#1230262]</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1732968000">- Add loongarch64 to asan_arch, atomic_arch,
  itm_arch, lsan_arch, tsan_arch and ubsan_arch
- Add larchintrin.h, lasxintrin.h and lsxintrin.h
  headers to gccXY main package in %files section
- Set build_primary_64bit to 1 for loongarch64</changelog>
  <changelog author="adrian@suse.de" date="1733140800">- disable go on loongarch64 for now</changelog>
  <changelog author="mardnh@gmx.de" date="1736078400">- Switch to glibc based cross-compiler for target hppa</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Define ALT_CC_UNDER_TEST and ALT_CXX_UNDER_TEST for compat tests</changelog>
  <changelog author="rguenther@suse.com" date="1738152000">- For cross compilers require the same or newer binutils, newlib
  or cross-glibc that was used at build time.  [bsc#1232526]</changelog>
  <changelog author="rguenther@suse.com" date="1738843200">- Adjust cross compiler requirements to use %requires_ge
- Fix condition on whether to enable plugins or JIT support to
  not check sle_version which is not defined in SLFO but to check
  is_opensuse and suse_version instead.
- Add gcc14-pr118780.patch to make the SLFO config work.</changelog>
  <changelog author="rguenther@suse.com" date="1740052800">- Update to gcc-14 branch head, 9ffecde121af883b60bbe60d0, git11321
  * fixes reported ICE in [bsc#1237442]
- Drop gcc14-pr116629.patch now backported to the branch.</changelog>
  <changelog author="rguenther@suse.com" date="1741608000">- Disable profiling during build when %want_reproducible_builds is set
  [bsc#1238491]</changelog>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
</package>
<package pkgid="a88d62344ab19b25cca0b83ee39ee49bc55c782f77c94016dd2c21818cd14ffa" name="libhwasan0" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.3.3"/>
  <changelog author="rguenther@suse.com" date="1743163200">- Update to GCC trunk head, 15.0.1+git9001
  * includes -msplit-patch-nops required for user-space livepatching
    on powerpc
  * includes fix for Ada build with --enable-host-pie
- Adjust for removed avx10_2roundingintrin.h intrinsic header.
- Build GCC executables PIE on SLE.  [bsc#1239938]</changelog>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="da57a919d477ba87c962baa667ba5fb171034dff6521010abf1830fd81ea555a" name="libhwasan0" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.6.1"/>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
</package>
<package pkgid="decbb06bb76c38031784bbd15988052e5ea85cd1e2fca2d85344d29d4ee52a27" name="libhwasan0" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.9.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc14-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="66d488852a51d3c275252b731405d05e01167793953e72fe397db43a86a68047" name="libibmad5" arch="x86_64">
  <version epoch="0" ver="54.0" rel="150700.3.2.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="schwab@suse.de" date="1647518400">- util-Add-barriers-support-for-RISC-V.patch: Backport from upstream: Add
  barriers support for RISC-V</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1648555200">- Update to v39.1
  - Major fixes for hns provider
  - Bug fixes for all providers
  - systemd hardening
  - NDR rate support
- Dropped srp_daemon-Detect-proper-path-to-systemctl.patch
  as it was fixed upstream</changelog>
  <changelog author="dmueller@suse.com" date="1659960000">- skip valgrind on riscv64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1663070400">- Update to v42.0
  - Fixes for all providers
- Dropped patches merged upstream:
  - util-Add-barriers-support-for-RISC-V.patch
  - cmake-Make-modprobe.d-path-configurable.patch
- Update gen-pandoc.sh to support python3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1665662400">- Add rdma-ndd-disable-systemd-ProtectHostName-feature.patch to fix issue
  where rdma-ndd would not be aware of dynamic hostnames retrived through DHCP</changelog>
  <changelog author="nicolas.morey@suse.com" date="1681905600">- Update to v45.0
  - Fixes for all providers
  - Support for Microsoft Azure Network Adapter
- Drop rdma-ndd-disable-systemd-ProtectHostName-feature.patch
  as it was fixed upstream.
- Refresh against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-Update-kernel-headers.patch</changelog>
  <changelog author="nicolas.morey@suse.com" date="1690200000">- Update to v47.0
  - Fixes for all providers</changelog>
  <changelog author="nicolas.morey@suse.com" date="1691064000">- Drop patches adding support for cxgb3 (EOL, removed from kernel 5.5)
  - cxgb3-fix-declaration-of-free_context.patch
  - cxgb3-fix-support-for-new-uquery-API.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-Update-kernel-headers.patch
- Update baselibs=.conf accordingly</changelog>
  <changelog author="jengelh@inai.de" date="1692792000">- Add missing-quoting.patch
- Use normal GNU tar option syntax
- Remove old RPM spec logic (%defattr)</changelog>
  <changelog author="nicolas.morey@suse.com" date="1695384000">- Update to v48.0
  - No release notes available.
- Drop missing-quoting.patch which was fixed upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1700913600">- Update to v49.0 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1705924800">- Update to v49.1 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1707912000">- Add kernel-boot-do-not-load-module-unsupported-on-s390.patch
  to prevent autoload of module not supported on s390. (bsc#1219805)</changelog>
  <changelog author="nicolas.morey@suse.com" date="1719316800">- Update to rdma-core v52.0
  - No release notes available
- Add upstream patch Added-suffix-libdrm-to-CMakeLists.txt-for-drm.patch
  to fix libdrm detection.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1723464000">- Update to rdma-core v53.0
  - No release notes available
- Remove Added-suffix-libdrm-to-CMakeLists.txt-for-drm.patch
  as it was merged upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1728561600">- Update to rdma-core v54.0
  - No release notes available</changelog>
</package>
<package pkgid="946125b9183397d69402cc5e11eb1bbe7e2aee2766f59489834bcdccb6621319" name="libibnetdisc5" arch="x86_64">
  <version epoch="0" ver="54.0" rel="150700.3.2.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="schwab@suse.de" date="1647518400">- util-Add-barriers-support-for-RISC-V.patch: Backport from upstream: Add
  barriers support for RISC-V</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1648555200">- Update to v39.1
  - Major fixes for hns provider
  - Bug fixes for all providers
  - systemd hardening
  - NDR rate support
- Dropped srp_daemon-Detect-proper-path-to-systemctl.patch
  as it was fixed upstream</changelog>
  <changelog author="dmueller@suse.com" date="1659960000">- skip valgrind on riscv64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1663070400">- Update to v42.0
  - Fixes for all providers
- Dropped patches merged upstream:
  - util-Add-barriers-support-for-RISC-V.patch
  - cmake-Make-modprobe.d-path-configurable.patch
- Update gen-pandoc.sh to support python3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1665662400">- Add rdma-ndd-disable-systemd-ProtectHostName-feature.patch to fix issue
  where rdma-ndd would not be aware of dynamic hostnames retrived through DHCP</changelog>
  <changelog author="nicolas.morey@suse.com" date="1681905600">- Update to v45.0
  - Fixes for all providers
  - Support for Microsoft Azure Network Adapter
- Drop rdma-ndd-disable-systemd-ProtectHostName-feature.patch
  as it was fixed upstream.
- Refresh against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-Update-kernel-headers.patch</changelog>
  <changelog author="nicolas.morey@suse.com" date="1690200000">- Update to v47.0
  - Fixes for all providers</changelog>
  <changelog author="nicolas.morey@suse.com" date="1691064000">- Drop patches adding support for cxgb3 (EOL, removed from kernel 5.5)
  - cxgb3-fix-declaration-of-free_context.patch
  - cxgb3-fix-support-for-new-uquery-API.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-Update-kernel-headers.patch
- Update baselibs=.conf accordingly</changelog>
  <changelog author="jengelh@inai.de" date="1692792000">- Add missing-quoting.patch
- Use normal GNU tar option syntax
- Remove old RPM spec logic (%defattr)</changelog>
  <changelog author="nicolas.morey@suse.com" date="1695384000">- Update to v48.0
  - No release notes available.
- Drop missing-quoting.patch which was fixed upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1700913600">- Update to v49.0 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1705924800">- Update to v49.1 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1707912000">- Add kernel-boot-do-not-load-module-unsupported-on-s390.patch
  to prevent autoload of module not supported on s390. (bsc#1219805)</changelog>
  <changelog author="nicolas.morey@suse.com" date="1719316800">- Update to rdma-core v52.0
  - No release notes available
- Add upstream patch Added-suffix-libdrm-to-CMakeLists.txt-for-drm.patch
  to fix libdrm detection.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1723464000">- Update to rdma-core v53.0
  - No release notes available
- Remove Added-suffix-libdrm-to-CMakeLists.txt-for-drm.patch
  as it was merged upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1728561600">- Update to rdma-core v54.0
  - No release notes available</changelog>
</package>
<package pkgid="01d8fb57ac6fb0a10c982841e3aac01d467a41f1cfbde49a4e46ab9a04576f3b" name="libibumad3" arch="x86_64">
  <version epoch="0" ver="54.0" rel="150700.3.2.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="schwab@suse.de" date="1647518400">- util-Add-barriers-support-for-RISC-V.patch: Backport from upstream: Add
  barriers support for RISC-V</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1648555200">- Update to v39.1
  - Major fixes for hns provider
  - Bug fixes for all providers
  - systemd hardening
  - NDR rate support
- Dropped srp_daemon-Detect-proper-path-to-systemctl.patch
  as it was fixed upstream</changelog>
  <changelog author="dmueller@suse.com" date="1659960000">- skip valgrind on riscv64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1663070400">- Update to v42.0
  - Fixes for all providers
- Dropped patches merged upstream:
  - util-Add-barriers-support-for-RISC-V.patch
  - cmake-Make-modprobe.d-path-configurable.patch
- Update gen-pandoc.sh to support python3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1665662400">- Add rdma-ndd-disable-systemd-ProtectHostName-feature.patch to fix issue
  where rdma-ndd would not be aware of dynamic hostnames retrived through DHCP</changelog>
  <changelog author="nicolas.morey@suse.com" date="1681905600">- Update to v45.0
  - Fixes for all providers
  - Support for Microsoft Azure Network Adapter
- Drop rdma-ndd-disable-systemd-ProtectHostName-feature.patch
  as it was fixed upstream.
- Refresh against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-Update-kernel-headers.patch</changelog>
  <changelog author="nicolas.morey@suse.com" date="1690200000">- Update to v47.0
  - Fixes for all providers</changelog>
  <changelog author="nicolas.morey@suse.com" date="1691064000">- Drop patches adding support for cxgb3 (EOL, removed from kernel 5.5)
  - cxgb3-fix-declaration-of-free_context.patch
  - cxgb3-fix-support-for-new-uquery-API.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-Update-kernel-headers.patch
- Update baselibs=.conf accordingly</changelog>
  <changelog author="jengelh@inai.de" date="1692792000">- Add missing-quoting.patch
- Use normal GNU tar option syntax
- Remove old RPM spec logic (%defattr)</changelog>
  <changelog author="nicolas.morey@suse.com" date="1695384000">- Update to v48.0
  - No release notes available.
- Drop missing-quoting.patch which was fixed upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1700913600">- Update to v49.0 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1705924800">- Update to v49.1 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1707912000">- Add kernel-boot-do-not-load-module-unsupported-on-s390.patch
  to prevent autoload of module not supported on s390. (bsc#1219805)</changelog>
  <changelog author="nicolas.morey@suse.com" date="1719316800">- Update to rdma-core v52.0
  - No release notes available
- Add upstream patch Added-suffix-libdrm-to-CMakeLists.txt-for-drm.patch
  to fix libdrm detection.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1723464000">- Update to rdma-core v53.0
  - No release notes available
- Remove Added-suffix-libdrm-to-CMakeLists.txt-for-drm.patch
  as it was merged upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1728561600">- Update to rdma-core v54.0
  - No release notes available</changelog>
</package>
<package pkgid="c534224c33ab1dd3d67ed4f22417e644b5b81c27caeaaab284ef9fc6eff48672" name="libibverbs" arch="x86_64">
  <version epoch="0" ver="54.0" rel="150700.3.2.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="schwab@suse.de" date="1647518400">- util-Add-barriers-support-for-RISC-V.patch: Backport from upstream: Add
  barriers support for RISC-V</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1648555200">- Update to v39.1
  - Major fixes for hns provider
  - Bug fixes for all providers
  - systemd hardening
  - NDR rate support
- Dropped srp_daemon-Detect-proper-path-to-systemctl.patch
  as it was fixed upstream</changelog>
  <changelog author="dmueller@suse.com" date="1659960000">- skip valgrind on riscv64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1663070400">- Update to v42.0
  - Fixes for all providers
- Dropped patches merged upstream:
  - util-Add-barriers-support-for-RISC-V.patch
  - cmake-Make-modprobe.d-path-configurable.patch
- Update gen-pandoc.sh to support python3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1665662400">- Add rdma-ndd-disable-systemd-ProtectHostName-feature.patch to fix issue
  where rdma-ndd would not be aware of dynamic hostnames retrived through DHCP</changelog>
  <changelog author="nicolas.morey@suse.com" date="1681905600">- Update to v45.0
  - Fixes for all providers
  - Support for Microsoft Azure Network Adapter
- Drop rdma-ndd-disable-systemd-ProtectHostName-feature.patch
  as it was fixed upstream.
- Refresh against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-Update-kernel-headers.patch</changelog>
  <changelog author="nicolas.morey@suse.com" date="1690200000">- Update to v47.0
  - Fixes for all providers</changelog>
  <changelog author="nicolas.morey@suse.com" date="1691064000">- Drop patches adding support for cxgb3 (EOL, removed from kernel 5.5)
  - cxgb3-fix-declaration-of-free_context.patch
  - cxgb3-fix-support-for-new-uquery-API.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-Update-kernel-headers.patch
- Update baselibs=.conf accordingly</changelog>
  <changelog author="jengelh@inai.de" date="1692792000">- Add missing-quoting.patch
- Use normal GNU tar option syntax
- Remove old RPM spec logic (%defattr)</changelog>
  <changelog author="nicolas.morey@suse.com" date="1695384000">- Update to v48.0
  - No release notes available.
- Drop missing-quoting.patch which was fixed upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1700913600">- Update to v49.0 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1705924800">- Update to v49.1 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1707912000">- Add kernel-boot-do-not-load-module-unsupported-on-s390.patch
  to prevent autoload of module not supported on s390. (bsc#1219805)</changelog>
  <changelog author="nicolas.morey@suse.com" date="1719316800">- Update to rdma-core v52.0
  - No release notes available
- Add upstream patch Added-suffix-libdrm-to-CMakeLists.txt-for-drm.patch
  to fix libdrm detection.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1723464000">- Update to rdma-core v53.0
  - No release notes available
- Remove Added-suffix-libdrm-to-CMakeLists.txt-for-drm.patch
  as it was merged upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1728561600">- Update to rdma-core v54.0
  - No release notes available</changelog>
</package>
<package pkgid="0349d72912323bcef256b8ebea6df8a74f89f0f4aea32b0d1b04e5ce5b220140" name="libibverbs1" arch="x86_64">
  <version epoch="0" ver="54.0" rel="150700.3.2.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="schwab@suse.de" date="1647518400">- util-Add-barriers-support-for-RISC-V.patch: Backport from upstream: Add
  barriers support for RISC-V</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1648555200">- Update to v39.1
  - Major fixes for hns provider
  - Bug fixes for all providers
  - systemd hardening
  - NDR rate support
- Dropped srp_daemon-Detect-proper-path-to-systemctl.patch
  as it was fixed upstream</changelog>
  <changelog author="dmueller@suse.com" date="1659960000">- skip valgrind on riscv64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1663070400">- Update to v42.0
  - Fixes for all providers
- Dropped patches merged upstream:
  - util-Add-barriers-support-for-RISC-V.patch
  - cmake-Make-modprobe.d-path-configurable.patch
- Update gen-pandoc.sh to support python3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1665662400">- Add rdma-ndd-disable-systemd-ProtectHostName-feature.patch to fix issue
  where rdma-ndd would not be aware of dynamic hostnames retrived through DHCP</changelog>
  <changelog author="nicolas.morey@suse.com" date="1681905600">- Update to v45.0
  - Fixes for all providers
  - Support for Microsoft Azure Network Adapter
- Drop rdma-ndd-disable-systemd-ProtectHostName-feature.patch
  as it was fixed upstream.
- Refresh against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-Update-kernel-headers.patch</changelog>
  <changelog author="nicolas.morey@suse.com" date="1690200000">- Update to v47.0
  - Fixes for all providers</changelog>
  <changelog author="nicolas.morey@suse.com" date="1691064000">- Drop patches adding support for cxgb3 (EOL, removed from kernel 5.5)
  - cxgb3-fix-declaration-of-free_context.patch
  - cxgb3-fix-support-for-new-uquery-API.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-Update-kernel-headers.patch
- Update baselibs=.conf accordingly</changelog>
  <changelog author="jengelh@inai.de" date="1692792000">- Add missing-quoting.patch
- Use normal GNU tar option syntax
- Remove old RPM spec logic (%defattr)</changelog>
  <changelog author="nicolas.morey@suse.com" date="1695384000">- Update to v48.0
  - No release notes available.
- Drop missing-quoting.patch which was fixed upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1700913600">- Update to v49.0 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1705924800">- Update to v49.1 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1707912000">- Add kernel-boot-do-not-load-module-unsupported-on-s390.patch
  to prevent autoload of module not supported on s390. (bsc#1219805)</changelog>
  <changelog author="nicolas.morey@suse.com" date="1719316800">- Update to rdma-core v52.0
  - No release notes available
- Add upstream patch Added-suffix-libdrm-to-CMakeLists.txt-for-drm.patch
  to fix libdrm detection.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1723464000">- Update to rdma-core v53.0
  - No release notes available
- Remove Added-suffix-libdrm-to-CMakeLists.txt-for-drm.patch
  as it was merged upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1728561600">- Update to rdma-core v54.0
  - No release notes available</changelog>
</package>
<package pkgid="cafb1a3167128189bf044ee848c099f2d79d4e539f78b3697ba86db9cabed153" name="libicu-devel" arch="x86_64">
  <version epoch="0" ver="65.1" rel="150200.4.15.1"/>
  <changelog author="jengelh@inai.de" date="1477051200">- Update to new upstream release 58.1
  * CLDR 30.0.2: For details of the many changes in CLDR, see
  CLDR 30. Some things to note:
  * For some combinations of numbering system (arab, arabext, latn)
  and/or locale (ar, fa, he), there were changes to the
  bidirectional control characters used with certain symbols
  (percent, minus, plus), and changes to number patterns (currency
  and/or percent, including addition of bidirectional control
  characters in some cases).
  * Thhe bidirectional controls used for such purposes include U+061C
  ARABIC LETTER MARK (ALM), which requires use of the bidirectional
  algorithm from Unicode 6.3 or later.
  * The time separator for Norwegian locales (nb, nn) was changed to
  be ':' throughout.
  * Unicode 9.0: Version 9.0 adds exactly 7,500 characters, for a
  total of 128,172 characters. These additions include six new
  scripts, 19 symbols for the new 4K TV standard, and 72 new
  emoji characters.
  * Draft Emoji 4.0 data
  * Emoji updates for word &amp; line breaking
  * UBiDiTransform/BidiTransform API for convenient transformation of
  text between different Bidi layouts.
  * MeasureFormat API for measurement unit display names
  * Most COUNT and LIMIT enum constants have been deprecated
  * SpoofChecker: Handling of "whole script confusables" has been
  removed from ICU, in accordance with its removal from UTS #39
  Version 9.0.0 and the removal of the corresponding Unicode data
  file.
  * Greek uppercasing ("el" locale ID) removes most diacritics.
  * More robust locale data loading across ICU implementation code.
  * Reduced heap memory usage in DateTimePatternGenerator</changelog>
  <changelog author="idonmez@suse.com" date="1481371200">- Update to new upstream release 58.2
  * CLDR 30.0.3:
    + Fix incorrect data for number of Cantonese speakers in China.
    + Hani_Latn transform was not updated with Unihan 9.0 kMandarin
    readings.
  * Time zone database version 2016j
  * #12815 uspoof_getSkeleton sets backwards-incompatible illegal
    argument exception
  * #12825 uspoof_check goes into an "infinite loop" when U+30FB
    is in an input string
  * #12832 GreekUpper::toUpper skips the final character on a
    non-terminated UTF-8 string
  * #12849 u_strToTitle returns incorrect length if destination
    is NULL</changelog>
  <changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 59.1
  * Emoji 5.0 data
  * CLDR 31.0.1
  * * GMT and UTC are no longer unified, and CLDR provides
    distinct UTC display names, avoiding confusion with standard
    (winter) time in Britain.
  * New case mapping API (C++ &amp; Java classes CaseMap) supports
    styled text
  * ICU4C now uses and requires C++11 language features and
    libraries.
  * ICU4C has also moved to char16_t as the type for UTF-16. This
    is a breaking change. Please see the detail section below.</changelog>
  <changelog author="rguenther@suse.com" date="1495022400">- Add icu-avoid-x87-excess-precision.diff to avoid
  FixedPrecision::initVisibleDigits failure on i586 with GCC 7.
  (bnc#1030253)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- xlocale.patch: don't use obsolete &lt;xlocale.h&gt;</changelog>
  <changelog author="jengelh@inai.de" date="1501675200">- refresh icu-avoid-x87-excess-precision.diff with p1</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 60.2
  * ICU 60 provides full support for the Unicode 10.0 release
    with many new characters and many property improvements.
    Locale data is updated to CLDR 32, which adds several
    languages and data improvements. A new number formatting API
    has been added.</changelog>
  <changelog author="jengelh@inai.de" date="1514289600">- Drop dangling symlinks /usr/lib64/icu/*.inc</changelog>
  <changelog author="jengelh@inai.de" date="1522843200">- Update to new upstream release 61.1
  * ICU 61 upgrades to CLDR 33 locale data.
- Add icu-number-grouping.diff</changelog>
  <changelog author="jengelh@inai.de" date="1528113600">- Add icu-susevers.diff and disable UTF-8 assumption
  [boo#1095425]</changelog>
  <changelog author="jengelh@inai.de" date="1532865600">- Update to new upstream release 62.1
  * Unicode 11: 684 new characters, including 7 new scripts,
    Mtavruli Georgian capital letters, 5 new Han characters, and
    66 new emoji characters.
  * CLDR 33.1
  * Under-the-hood overhaul of number parsing. Behavior is mostly
    compatible with previous versions, but there are some known
    differences.
- Remove xlocale.patch (code to patch is gone),
  icu-number-grouping.diff (merged upstream)</changelog>
  <changelog author="idonmez@suse.com" date="1539777600">- Update to new upstream release 63.1
  * CLDR 34
    + Segmentation rules and emoji sort order adjusted for
    Unicode 11
    + Somali and Javanese data now up to moderate level
    (document content)
    + Tongan, Konkani, Maori, Dzongkha, Tatar, Kurdish (ku),
    and Xhosa data now up to basic level
    + Many data additions and corrections in many other
    languages
    + The following languages have been added to ICU: Sindhi,
    Maori, Turkmen, Javanese, Interlingua, Kurdish (ku), Xhosa
  * New currency: Venezuela's Bolívar Soberano (VES)
  * New Japanese calendar era from 2019: CLDR and ICU include
    data for testing that can be enabled.
    (ICU #12973, CLDR #10750)
  * To enable CLDR new Japanese era placeholder name, set
    environment variable (and Java system property for ICU4J)
    ICU_ENABLE_TENTATIVE_ERA=true.
  * New API for number and currency range formatting
    (class NumberRangeFormatter, #11276)
  * Support for additional Unicode properties:
    Indic_Positional_Category &amp; Indic_Syllabic_Category (#8966)
    and Vertical_Orientation (#12850)
  * New API for code point maps and tries, mapping Unicode
    code points (U+0000..U+10FFFF) to integer values. (#13530)
  * Java classes CodePointMap, CodePointTrie, MutableCodePointTrie
  * C types UCPMap, UCPTrie, UMutableCPTrie
  * New API for getting a UnicodeSet per binary property and a code
    point map per enumerated/int-value property. (#20086)
  * Full conformance with UAX #14 Line Breaking
    (required BreakIterator feature work). (#7270)
  * C++ Locale class
    + Additional functions forLanguageTag()/toLanguageTag(),
    and functions that are easier and safer to use by using
    StringPiece and ByteSink rather than raw buffers. (#13417)
    + Move semantics. (#13645)
  * Various Out-Of-Memory (OOM) issues have been fixed.
- Refresh icu-versioning.diff</changelog>
  <changelog author="jengelh@inai.de" date="1554120000">- Update to new upstream release 64.1
  * Updates to Unicode 12 and to CLDR 35 locale data with many
    additions and corrections, and some new languages. ICU adds a
    data filtering/subsetting mechanism, improved formatting API,
    and a C++ LocaleBuilder.
- New python3 dependency to build intermediate file
  test/testdata/rules.mk.</changelog>
  <changelog author="jengelh@inai.de" date="1555588800">- Update to new upstream release 64.2
  * This maintenance update for ICU 64 includes draft Unicode
    12.1 update, CLDR 35.1 locale data and support for the new
    Japanese era Reiwa (令和). (boo#1112183, bnc#1103893,
    FATE#325570, bnc#1103893, fate#325570, fate#325419)</changelog>
  <changelog author="idonmez@suse.com" date="1557835200">- Add 075cefb2e21f57f4cac1bc2868e93dd1b8c077cc.patch to fix a
  regression with the C.UTF-8 locale
  https://unicode-org.atlassian.net/browse/ICU-20575</changelog>
  <changelog author="kukuk@suse.de" date="1566388800">- Remove old obsoletes/provides for migration from very old
  products, as they break our shared library policy (bsc#1146907).</changelog>
  <changelog author="jengelh@inai.de" date="1570276800">- Update to release 65.1 (jsc#SLE-11118).
  * Updated to CLDR 36 locale data with many additions and
    corrections, and some new measurement units.
  * The Java LocaleMatcher API is improved, and ported to C++.
- Drop 075cefb2e21f57f4cac1bc2868e93dd1b8c077cc.patch
  (merged)</changelog>
  <changelog author="qzhao@suse.com" date="1590926400">- Update icu.spec:
  Add "Provides:libicu = %version" for libicu to Make .Net core can
  install successfully.
  (bsc#1167603, bsc#1161007)</changelog>
  <changelog author="qzhao@suse.com" date="1660305600">- Add icu-CVE-2020-21913.patch:
  Backport 727505bdd from upstream, use LocalMemory for cmd to prevent
  use after free.
  (CVE-2020-21913, bsc#1193951)</changelog>
  <changelog author="qzhao@suse.com" date="1749816000">- Add icu-CVE-2025-5222.patch:
  Backport 2c667e3 from upstream, ICU-22973 Fix buffer overflow by
  using CharString.
  (CVE-2025-5222, bsc#1243721)</changelog>
</package>
<package pkgid="ea6118ca3ab2865ec5406f6af3f919b8d456c8c21dac3907f6ee879cd99e3744" name="libicu-suse65_1" arch="x86_64">
  <version epoch="0" ver="65.1" rel="150200.4.15.1"/>
  <changelog author="jengelh@inai.de" date="1477051200">- Update to new upstream release 58.1
  * CLDR 30.0.2: For details of the many changes in CLDR, see
  CLDR 30. Some things to note:
  * For some combinations of numbering system (arab, arabext, latn)
  and/or locale (ar, fa, he), there were changes to the
  bidirectional control characters used with certain symbols
  (percent, minus, plus), and changes to number patterns (currency
  and/or percent, including addition of bidirectional control
  characters in some cases).
  * Thhe bidirectional controls used for such purposes include U+061C
  ARABIC LETTER MARK (ALM), which requires use of the bidirectional
  algorithm from Unicode 6.3 or later.
  * The time separator for Norwegian locales (nb, nn) was changed to
  be ':' throughout.
  * Unicode 9.0: Version 9.0 adds exactly 7,500 characters, for a
  total of 128,172 characters. These additions include six new
  scripts, 19 symbols for the new 4K TV standard, and 72 new
  emoji characters.
  * Draft Emoji 4.0 data
  * Emoji updates for word &amp; line breaking
  * UBiDiTransform/BidiTransform API for convenient transformation of
  text between different Bidi layouts.
  * MeasureFormat API for measurement unit display names
  * Most COUNT and LIMIT enum constants have been deprecated
  * SpoofChecker: Handling of "whole script confusables" has been
  removed from ICU, in accordance with its removal from UTS #39
  Version 9.0.0 and the removal of the corresponding Unicode data
  file.
  * Greek uppercasing ("el" locale ID) removes most diacritics.
  * More robust locale data loading across ICU implementation code.
  * Reduced heap memory usage in DateTimePatternGenerator</changelog>
  <changelog author="idonmez@suse.com" date="1481371200">- Update to new upstream release 58.2
  * CLDR 30.0.3:
    + Fix incorrect data for number of Cantonese speakers in China.
    + Hani_Latn transform was not updated with Unihan 9.0 kMandarin
    readings.
  * Time zone database version 2016j
  * #12815 uspoof_getSkeleton sets backwards-incompatible illegal
    argument exception
  * #12825 uspoof_check goes into an "infinite loop" when U+30FB
    is in an input string
  * #12832 GreekUpper::toUpper skips the final character on a
    non-terminated UTF-8 string
  * #12849 u_strToTitle returns incorrect length if destination
    is NULL</changelog>
  <changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 59.1
  * Emoji 5.0 data
  * CLDR 31.0.1
  * * GMT and UTC are no longer unified, and CLDR provides
    distinct UTC display names, avoiding confusion with standard
    (winter) time in Britain.
  * New case mapping API (C++ &amp; Java classes CaseMap) supports
    styled text
  * ICU4C now uses and requires C++11 language features and
    libraries.
  * ICU4C has also moved to char16_t as the type for UTF-16. This
    is a breaking change. Please see the detail section below.</changelog>
  <changelog author="rguenther@suse.com" date="1495022400">- Add icu-avoid-x87-excess-precision.diff to avoid
  FixedPrecision::initVisibleDigits failure on i586 with GCC 7.
  (bnc#1030253)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- xlocale.patch: don't use obsolete &lt;xlocale.h&gt;</changelog>
  <changelog author="jengelh@inai.de" date="1501675200">- refresh icu-avoid-x87-excess-precision.diff with p1</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 60.2
  * ICU 60 provides full support for the Unicode 10.0 release
    with many new characters and many property improvements.
    Locale data is updated to CLDR 32, which adds several
    languages and data improvements. A new number formatting API
    has been added.</changelog>
  <changelog author="jengelh@inai.de" date="1514289600">- Drop dangling symlinks /usr/lib64/icu/*.inc</changelog>
  <changelog author="jengelh@inai.de" date="1522843200">- Update to new upstream release 61.1
  * ICU 61 upgrades to CLDR 33 locale data.
- Add icu-number-grouping.diff</changelog>
  <changelog author="jengelh@inai.de" date="1528113600">- Add icu-susevers.diff and disable UTF-8 assumption
  [boo#1095425]</changelog>
  <changelog author="jengelh@inai.de" date="1532865600">- Update to new upstream release 62.1
  * Unicode 11: 684 new characters, including 7 new scripts,
    Mtavruli Georgian capital letters, 5 new Han characters, and
    66 new emoji characters.
  * CLDR 33.1
  * Under-the-hood overhaul of number parsing. Behavior is mostly
    compatible with previous versions, but there are some known
    differences.
- Remove xlocale.patch (code to patch is gone),
  icu-number-grouping.diff (merged upstream)</changelog>
  <changelog author="idonmez@suse.com" date="1539777600">- Update to new upstream release 63.1
  * CLDR 34
    + Segmentation rules and emoji sort order adjusted for
    Unicode 11
    + Somali and Javanese data now up to moderate level
    (document content)
    + Tongan, Konkani, Maori, Dzongkha, Tatar, Kurdish (ku),
    and Xhosa data now up to basic level
    + Many data additions and corrections in many other
    languages
    + The following languages have been added to ICU: Sindhi,
    Maori, Turkmen, Javanese, Interlingua, Kurdish (ku), Xhosa
  * New currency: Venezuela's Bolívar Soberano (VES)
  * New Japanese calendar era from 2019: CLDR and ICU include
    data for testing that can be enabled.
    (ICU #12973, CLDR #10750)
  * To enable CLDR new Japanese era placeholder name, set
    environment variable (and Java system property for ICU4J)
    ICU_ENABLE_TENTATIVE_ERA=true.
  * New API for number and currency range formatting
    (class NumberRangeFormatter, #11276)
  * Support for additional Unicode properties:
    Indic_Positional_Category &amp; Indic_Syllabic_Category (#8966)
    and Vertical_Orientation (#12850)
  * New API for code point maps and tries, mapping Unicode
    code points (U+0000..U+10FFFF) to integer values. (#13530)
  * Java classes CodePointMap, CodePointTrie, MutableCodePointTrie
  * C types UCPMap, UCPTrie, UMutableCPTrie
  * New API for getting a UnicodeSet per binary property and a code
    point map per enumerated/int-value property. (#20086)
  * Full conformance with UAX #14 Line Breaking
    (required BreakIterator feature work). (#7270)
  * C++ Locale class
    + Additional functions forLanguageTag()/toLanguageTag(),
    and functions that are easier and safer to use by using
    StringPiece and ByteSink rather than raw buffers. (#13417)
    + Move semantics. (#13645)
  * Various Out-Of-Memory (OOM) issues have been fixed.
- Refresh icu-versioning.diff</changelog>
  <changelog author="jengelh@inai.de" date="1554120000">- Update to new upstream release 64.1
  * Updates to Unicode 12 and to CLDR 35 locale data with many
    additions and corrections, and some new languages. ICU adds a
    data filtering/subsetting mechanism, improved formatting API,
    and a C++ LocaleBuilder.
- New python3 dependency to build intermediate file
  test/testdata/rules.mk.</changelog>
  <changelog author="jengelh@inai.de" date="1555588800">- Update to new upstream release 64.2
  * This maintenance update for ICU 64 includes draft Unicode
    12.1 update, CLDR 35.1 locale data and support for the new
    Japanese era Reiwa (令和). (boo#1112183, bnc#1103893,
    FATE#325570, bnc#1103893, fate#325570, fate#325419)</changelog>
  <changelog author="idonmez@suse.com" date="1557835200">- Add 075cefb2e21f57f4cac1bc2868e93dd1b8c077cc.patch to fix a
  regression with the C.UTF-8 locale
  https://unicode-org.atlassian.net/browse/ICU-20575</changelog>
  <changelog author="kukuk@suse.de" date="1566388800">- Remove old obsoletes/provides for migration from very old
  products, as they break our shared library policy (bsc#1146907).</changelog>
  <changelog author="jengelh@inai.de" date="1570276800">- Update to release 65.1 (jsc#SLE-11118).
  * Updated to CLDR 36 locale data with many additions and
    corrections, and some new measurement units.
  * The Java LocaleMatcher API is improved, and ported to C++.
- Drop 075cefb2e21f57f4cac1bc2868e93dd1b8c077cc.patch
  (merged)</changelog>
  <changelog author="qzhao@suse.com" date="1590926400">- Update icu.spec:
  Add "Provides:libicu = %version" for libicu to Make .Net core can
  install successfully.
  (bsc#1167603, bsc#1161007)</changelog>
  <changelog author="qzhao@suse.com" date="1660305600">- Add icu-CVE-2020-21913.patch:
  Backport 727505bdd from upstream, use LocalMemory for cmd to prevent
  use after free.
  (CVE-2020-21913, bsc#1193951)</changelog>
  <changelog author="qzhao@suse.com" date="1749816000">- Add icu-CVE-2025-5222.patch:
  Backport 2c667e3 from upstream, ICU-22973 Fix buffer overflow by
  using CharString.
  (CVE-2025-5222, bsc#1243721)</changelog>
</package>
<package pkgid="8f9c646f576db1368425ddb723df1eb811f9a884dd3c3e093a4a44eb92c35057" name="libicu60_2" arch="x86_64">
  <version epoch="0" ver="60.2" rel="150000.3.18.1"/>
  <changelog author="tchvatal@suse.com" date="1430222400">- Version bump to latest release 55.1:
  * support of CLDR 27 (with a major cleanup of region locales, among many
    other improvements), formatting for scientific notation ("1.2 × 10³")
  * update to Unicode 7.0 data for spoof-checking
  * Various performance enhancements
  * Full upstream changelog:
    http://site.icu-project.org/download/55
- Refresh the soname versioning patch:
  * icu-versioning.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1430222401">- Update baselibs.conf</changelog>
  <changelog author="jengelh@inai.de" date="1444392000">- Update to new upstream release 56.1
  * CLDR 28: For details of the many changes in CLDR, see CLDR 28.
  * Unicode data updated to Unicode 8.0: 41 new emoji characters,
  5,771 new ideographs for Chinese/Japanese/Korean, 6 new scripts,
  improved character properties data, etc.
  * ICU data size reduced by about 7.2% (1.8MB) via sharing string
  values across resource bundles.
  * DateIntervalFormat now handles intervals with seconds, and sets
  FieldPosition more consistently.
  * DateFormat::createInstanceForSkeleton() caches DateFormat
  patterns rather than DateTimePatternGenerator instances, for
  better performance (for cache hits) and lower heap memory
  consumption.
  * StringSearch (based on collation) defaults to matches on
  normalization boundaries rather than grapheme cluster boundaries,
  which yields more matches on Indic text.
  * RuleBasedNumberFormat (spelled-out numbers) now handles
  infinity, NaN.
  * Most of the old Normalizer/unorm.h had been replaced by
  (and reimplemented via) Normalizer2, and is now deprecated.
  * COLON has been withdrawn as a date pattern character
  corresponding to the date field [UDAT_]TIME_SEPARATOR_FIELD;
  there is currently no pattern character corresponding to that
  field.
  * Support for locale key "cf" to specify currency format style,
  and interaction with NumberFormat values for UNumberFormatStyle.
- Drop icu-remove-datetime.patch (merged upstream)</changelog>
  <changelog author="jengelh@inai.de" date="1458907200">- Update to new upstream release 57.1
  * CLDR 29 support
  * Grapheme/word/line breaking for emoji sequences, based on
  Unicode 9 proposed rules.
  * Four new Unicode emoji properties
  * DateFormat day period formatting of "noon", "at night", etc. via
  new pattern characters b &amp; B, and DateTimePatternGenerator
  support of C for selecting the customary form.
  * RelativeDateTimeFormatter: Simpler formatting API.
  * New simple &amp; fast SimpleFormatter class for a trivial subset of
  MessageFormat as used in CLDR data.</changelog>
  <changelog author="jengelh@inai.de" date="1477051200">- Update to new upstream release 58.1
  * CLDR 30.0.2: For details of the many changes in CLDR, see
  CLDR 30. Some things to note:
  * For some combinations of numbering system (arab, arabext, latn)
  and/or locale (ar, fa, he), there were changes to the
  bidirectional control characters used with certain symbols
  (percent, minus, plus), and changes to number patterns (currency
  and/or percent, including addition of bidirectional control
  characters in some cases).
  * Thhe bidirectional controls used for such purposes include U+061C
  ARABIC LETTER MARK (ALM), which requires use of the bidirectional
  algorithm from Unicode 6.3 or later.
  * The time separator for Norwegian locales (nb, nn) was changed to
  be ':' throughout.
  * Unicode 9.0: Version 9.0 adds exactly 7,500 characters, for a
  total of 128,172 characters. These additions include six new
  scripts, 19 symbols for the new 4K TV standard, and 72 new
  emoji characters.
  * Draft Emoji 4.0 data
  * Emoji updates for word &amp; line breaking
  * UBiDiTransform/BidiTransform API for convenient transformation of
  text between different Bidi layouts.
  * MeasureFormat API for measurement unit display names
  * Most COUNT and LIMIT enum constants have been deprecated
  * SpoofChecker: Handling of "whole script confusables" has been
  removed from ICU, in accordance with its removal from UTS #39
  Version 9.0.0 and the removal of the corresponding Unicode data
  file.
  * Greek uppercasing ("el" locale ID) removes most diacritics.
  * More robust locale data loading across ICU implementation code.
  * Reduced heap memory usage in DateTimePatternGenerator</changelog>
  <changelog author="idonmez@suse.com" date="1481371200">- Update to new upstream release 58.2
  * CLDR 30.0.3:
    + Fix incorrect data for number of Cantonese speakers in China.
    + Hani_Latn transform was not updated with Unihan 9.0 kMandarin
    readings.
  * Time zone database version 2016j
  * #12815 uspoof_getSkeleton sets backwards-incompatible illegal
    argument exception
  * #12825 uspoof_check goes into an "infinite loop" when U+30FB
    is in an input string
  * #12832 GreekUpper::toUpper skips the final character on a
    non-terminated UTF-8 string
  * #12849 u_strToTitle returns incorrect length if destination
    is NULL</changelog>
  <changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 59.1
  * Emoji 5.0 data
  * CLDR 31.0.1
  * * GMT and UTC are no longer unified, and CLDR provides
    distinct UTC display names, avoiding confusion with standard
    (winter) time in Britain.
  * New case mapping API (C++ &amp; Java classes CaseMap) supports
    styled text
  * ICU4C now uses and requires C++11 language features and
    libraries.
  * ICU4C has also moved to char16_t as the type for UTF-16. This
    is a breaking change. Please see the detail section below.</changelog>
  <changelog author="rguenther@suse.com" date="1495022400">- Add icu-avoid-x87-excess-precision.diff to avoid
  FixedPrecision::initVisibleDigits failure on i586 with GCC 7.
  (bnc#1030253)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- xlocale.patch: don't use obsolete &lt;xlocale.h&gt;</changelog>
  <changelog author="jengelh@inai.de" date="1501675200">- refresh icu-avoid-x87-excess-precision.diff with p1</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 60.2
  * ICU 60 provides full support for the Unicode 10.0 release
    with many new characters and many property improvements.
    Locale data is updated to CLDR 32, which adds several
    languages and data improvements. A new number formatting API
    has been added.</changelog>
  <changelog author="jengelh@inai.de" date="1514289600">- Drop dangling symlinks /usr/lib64/icu/*.inc</changelog>
  <changelog author="kukuk@suse.de" date="1566388800">- Remove old obsoletes/provides for migration from very old
  products, as they break our shared library policy (bsc#1146907).</changelog>
  <changelog author="qzhao@suse.com" date="1576497600">- Add Japanese-era-Reiwa-support-in-ICU4C-60.patch:
  Porting upstream's Japanese new era name support.
  (bnc#1103893, fate#325570, fate#325419)</changelog>
  <changelog author="qzhao@suse.com" date="1590926400">- Update icu.spec:
  Add "Provides:libicu = %version" for libicu to Make .Net core can
  install successfully.
  (bsc#1167603, bsc#1161007)</changelog>
  <changelog author="qzhao@suse.com" date="1593518400">- Add icu-CVE-2020-10531.patch:
  Fix potential integer overflow in UnicodeString:doAppend.
  (CVE-2020-10531, bsc#1166844).</changelog>
  <changelog author="qzhao@suse.com" date="1660305600">- Add icu-CVE-2020-21913.patch:
  Backport 727505bdd from upstream, use LocalMemory for cmd to prevent
  use after free.
  (CVE-2020-21913, bsc#1193951)</changelog>
  <changelog author="qzhao@suse.com" date="1749816000">- Add icu-CVE-2025-5222-shim-dd72356.patch:
  Backport dd72356 from upstream, ICU-11276 Adding UChar* method in
  CharString. To prepare dependence code for CVE-2025-5222 fix.
  (CVE-2025-5222, bsc#1243721)</changelog>
  <changelog author="qzhao@suse.com" date="1749816001">- Add icu-CVE-2025-5222.patch:
  Backport 2c667e3 from upstream, ICU-22973 Fix buffer overflow by
  using CharString.
  (CVE-2025-5222, bsc#1243721)</changelog>
</package>
<package pkgid="f694bcf7c62a961f071aef36666a22b0399efc0116352577057057265af24fd6" name="libicu60_2-ledata" arch="noarch">
  <version epoch="0" ver="60.2" rel="150000.3.18.1"/>
  <changelog author="tchvatal@suse.com" date="1430222400">- Version bump to latest release 55.1:
  * support of CLDR 27 (with a major cleanup of region locales, among many
    other improvements), formatting for scientific notation ("1.2 × 10³")
  * update to Unicode 7.0 data for spoof-checking
  * Various performance enhancements
  * Full upstream changelog:
    http://site.icu-project.org/download/55
- Refresh the soname versioning patch:
  * icu-versioning.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1430222401">- Update baselibs.conf</changelog>
  <changelog author="jengelh@inai.de" date="1444392000">- Update to new upstream release 56.1
  * CLDR 28: For details of the many changes in CLDR, see CLDR 28.
  * Unicode data updated to Unicode 8.0: 41 new emoji characters,
  5,771 new ideographs for Chinese/Japanese/Korean, 6 new scripts,
  improved character properties data, etc.
  * ICU data size reduced by about 7.2% (1.8MB) via sharing string
  values across resource bundles.
  * DateIntervalFormat now handles intervals with seconds, and sets
  FieldPosition more consistently.
  * DateFormat::createInstanceForSkeleton() caches DateFormat
  patterns rather than DateTimePatternGenerator instances, for
  better performance (for cache hits) and lower heap memory
  consumption.
  * StringSearch (based on collation) defaults to matches on
  normalization boundaries rather than grapheme cluster boundaries,
  which yields more matches on Indic text.
  * RuleBasedNumberFormat (spelled-out numbers) now handles
  infinity, NaN.
  * Most of the old Normalizer/unorm.h had been replaced by
  (and reimplemented via) Normalizer2, and is now deprecated.
  * COLON has been withdrawn as a date pattern character
  corresponding to the date field [UDAT_]TIME_SEPARATOR_FIELD;
  there is currently no pattern character corresponding to that
  field.
  * Support for locale key "cf" to specify currency format style,
  and interaction with NumberFormat values for UNumberFormatStyle.
- Drop icu-remove-datetime.patch (merged upstream)</changelog>
  <changelog author="jengelh@inai.de" date="1458907200">- Update to new upstream release 57.1
  * CLDR 29 support
  * Grapheme/word/line breaking for emoji sequences, based on
  Unicode 9 proposed rules.
  * Four new Unicode emoji properties
  * DateFormat day period formatting of "noon", "at night", etc. via
  new pattern characters b &amp; B, and DateTimePatternGenerator
  support of C for selecting the customary form.
  * RelativeDateTimeFormatter: Simpler formatting API.
  * New simple &amp; fast SimpleFormatter class for a trivial subset of
  MessageFormat as used in CLDR data.</changelog>
  <changelog author="jengelh@inai.de" date="1477051200">- Update to new upstream release 58.1
  * CLDR 30.0.2: For details of the many changes in CLDR, see
  CLDR 30. Some things to note:
  * For some combinations of numbering system (arab, arabext, latn)
  and/or locale (ar, fa, he), there were changes to the
  bidirectional control characters used with certain symbols
  (percent, minus, plus), and changes to number patterns (currency
  and/or percent, including addition of bidirectional control
  characters in some cases).
  * Thhe bidirectional controls used for such purposes include U+061C
  ARABIC LETTER MARK (ALM), which requires use of the bidirectional
  algorithm from Unicode 6.3 or later.
  * The time separator for Norwegian locales (nb, nn) was changed to
  be ':' throughout.
  * Unicode 9.0: Version 9.0 adds exactly 7,500 characters, for a
  total of 128,172 characters. These additions include six new
  scripts, 19 symbols for the new 4K TV standard, and 72 new
  emoji characters.
  * Draft Emoji 4.0 data
  * Emoji updates for word &amp; line breaking
  * UBiDiTransform/BidiTransform API for convenient transformation of
  text between different Bidi layouts.
  * MeasureFormat API for measurement unit display names
  * Most COUNT and LIMIT enum constants have been deprecated
  * SpoofChecker: Handling of "whole script confusables" has been
  removed from ICU, in accordance with its removal from UTS #39
  Version 9.0.0 and the removal of the corresponding Unicode data
  file.
  * Greek uppercasing ("el" locale ID) removes most diacritics.
  * More robust locale data loading across ICU implementation code.
  * Reduced heap memory usage in DateTimePatternGenerator</changelog>
  <changelog author="idonmez@suse.com" date="1481371200">- Update to new upstream release 58.2
  * CLDR 30.0.3:
    + Fix incorrect data for number of Cantonese speakers in China.
    + Hani_Latn transform was not updated with Unihan 9.0 kMandarin
    readings.
  * Time zone database version 2016j
  * #12815 uspoof_getSkeleton sets backwards-incompatible illegal
    argument exception
  * #12825 uspoof_check goes into an "infinite loop" when U+30FB
    is in an input string
  * #12832 GreekUpper::toUpper skips the final character on a
    non-terminated UTF-8 string
  * #12849 u_strToTitle returns incorrect length if destination
    is NULL</changelog>
  <changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 59.1
  * Emoji 5.0 data
  * CLDR 31.0.1
  * * GMT and UTC are no longer unified, and CLDR provides
    distinct UTC display names, avoiding confusion with standard
    (winter) time in Britain.
  * New case mapping API (C++ &amp; Java classes CaseMap) supports
    styled text
  * ICU4C now uses and requires C++11 language features and
    libraries.
  * ICU4C has also moved to char16_t as the type for UTF-16. This
    is a breaking change. Please see the detail section below.</changelog>
  <changelog author="rguenther@suse.com" date="1495022400">- Add icu-avoid-x87-excess-precision.diff to avoid
  FixedPrecision::initVisibleDigits failure on i586 with GCC 7.
  (bnc#1030253)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- xlocale.patch: don't use obsolete &lt;xlocale.h&gt;</changelog>
  <changelog author="jengelh@inai.de" date="1501675200">- refresh icu-avoid-x87-excess-precision.diff with p1</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 60.2
  * ICU 60 provides full support for the Unicode 10.0 release
    with many new characters and many property improvements.
    Locale data is updated to CLDR 32, which adds several
    languages and data improvements. A new number formatting API
    has been added.</changelog>
  <changelog author="jengelh@inai.de" date="1514289600">- Drop dangling symlinks /usr/lib64/icu/*.inc</changelog>
  <changelog author="kukuk@suse.de" date="1566388800">- Remove old obsoletes/provides for migration from very old
  products, as they break our shared library policy (bsc#1146907).</changelog>
  <changelog author="qzhao@suse.com" date="1576497600">- Add Japanese-era-Reiwa-support-in-ICU4C-60.patch:
  Porting upstream's Japanese new era name support.
  (bnc#1103893, fate#325570, fate#325419)</changelog>
  <changelog author="qzhao@suse.com" date="1590926400">- Update icu.spec:
  Add "Provides:libicu = %version" for libicu to Make .Net core can
  install successfully.
  (bsc#1167603, bsc#1161007)</changelog>
  <changelog author="qzhao@suse.com" date="1593518400">- Add icu-CVE-2020-10531.patch:
  Fix potential integer overflow in UnicodeString:doAppend.
  (CVE-2020-10531, bsc#1166844).</changelog>
  <changelog author="qzhao@suse.com" date="1660305600">- Add icu-CVE-2020-21913.patch:
  Backport 727505bdd from upstream, use LocalMemory for cmd to prevent
  use after free.
  (CVE-2020-21913, bsc#1193951)</changelog>
  <changelog author="qzhao@suse.com" date="1749816000">- Add icu-CVE-2025-5222-shim-dd72356.patch:
  Backport dd72356 from upstream, ICU-11276 Adding UChar* method in
  CharString. To prepare dependence code for CVE-2025-5222 fix.
  (CVE-2025-5222, bsc#1243721)</changelog>
  <changelog author="qzhao@suse.com" date="1749816001">- Add icu-CVE-2025-5222.patch:
  Backport 2c667e3 from upstream, ICU-22973 Fix buffer overflow by
  using CharString.
  (CVE-2025-5222, bsc#1243721)</changelog>
</package>
<package pkgid="efae388a2909f9eb33ea295d308d9f0e4489448dfbfd368de86a16145bb62e55" name="libicu65_1-ledata" arch="noarch">
  <version epoch="0" ver="65.1" rel="150200.4.15.1"/>
  <changelog author="jengelh@inai.de" date="1477051200">- Update to new upstream release 58.1
  * CLDR 30.0.2: For details of the many changes in CLDR, see
  CLDR 30. Some things to note:
  * For some combinations of numbering system (arab, arabext, latn)
  and/or locale (ar, fa, he), there were changes to the
  bidirectional control characters used with certain symbols
  (percent, minus, plus), and changes to number patterns (currency
  and/or percent, including addition of bidirectional control
  characters in some cases).
  * Thhe bidirectional controls used for such purposes include U+061C
  ARABIC LETTER MARK (ALM), which requires use of the bidirectional
  algorithm from Unicode 6.3 or later.
  * The time separator for Norwegian locales (nb, nn) was changed to
  be ':' throughout.
  * Unicode 9.0: Version 9.0 adds exactly 7,500 characters, for a
  total of 128,172 characters. These additions include six new
  scripts, 19 symbols for the new 4K TV standard, and 72 new
  emoji characters.
  * Draft Emoji 4.0 data
  * Emoji updates for word &amp; line breaking
  * UBiDiTransform/BidiTransform API for convenient transformation of
  text between different Bidi layouts.
  * MeasureFormat API for measurement unit display names
  * Most COUNT and LIMIT enum constants have been deprecated
  * SpoofChecker: Handling of "whole script confusables" has been
  removed from ICU, in accordance with its removal from UTS #39
  Version 9.0.0 and the removal of the corresponding Unicode data
  file.
  * Greek uppercasing ("el" locale ID) removes most diacritics.
  * More robust locale data loading across ICU implementation code.
  * Reduced heap memory usage in DateTimePatternGenerator</changelog>
  <changelog author="idonmez@suse.com" date="1481371200">- Update to new upstream release 58.2
  * CLDR 30.0.3:
    + Fix incorrect data for number of Cantonese speakers in China.
    + Hani_Latn transform was not updated with Unihan 9.0 kMandarin
    readings.
  * Time zone database version 2016j
  * #12815 uspoof_getSkeleton sets backwards-incompatible illegal
    argument exception
  * #12825 uspoof_check goes into an "infinite loop" when U+30FB
    is in an input string
  * #12832 GreekUpper::toUpper skips the final character on a
    non-terminated UTF-8 string
  * #12849 u_strToTitle returns incorrect length if destination
    is NULL</changelog>
  <changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 59.1
  * Emoji 5.0 data
  * CLDR 31.0.1
  * * GMT and UTC are no longer unified, and CLDR provides
    distinct UTC display names, avoiding confusion with standard
    (winter) time in Britain.
  * New case mapping API (C++ &amp; Java classes CaseMap) supports
    styled text
  * ICU4C now uses and requires C++11 language features and
    libraries.
  * ICU4C has also moved to char16_t as the type for UTF-16. This
    is a breaking change. Please see the detail section below.</changelog>
  <changelog author="rguenther@suse.com" date="1495022400">- Add icu-avoid-x87-excess-precision.diff to avoid
  FixedPrecision::initVisibleDigits failure on i586 with GCC 7.
  (bnc#1030253)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- xlocale.patch: don't use obsolete &lt;xlocale.h&gt;</changelog>
  <changelog author="jengelh@inai.de" date="1501675200">- refresh icu-avoid-x87-excess-precision.diff with p1</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 60.2
  * ICU 60 provides full support for the Unicode 10.0 release
    with many new characters and many property improvements.
    Locale data is updated to CLDR 32, which adds several
    languages and data improvements. A new number formatting API
    has been added.</changelog>
  <changelog author="jengelh@inai.de" date="1514289600">- Drop dangling symlinks /usr/lib64/icu/*.inc</changelog>
  <changelog author="jengelh@inai.de" date="1522843200">- Update to new upstream release 61.1
  * ICU 61 upgrades to CLDR 33 locale data.
- Add icu-number-grouping.diff</changelog>
  <changelog author="jengelh@inai.de" date="1528113600">- Add icu-susevers.diff and disable UTF-8 assumption
  [boo#1095425]</changelog>
  <changelog author="jengelh@inai.de" date="1532865600">- Update to new upstream release 62.1
  * Unicode 11: 684 new characters, including 7 new scripts,
    Mtavruli Georgian capital letters, 5 new Han characters, and
    66 new emoji characters.
  * CLDR 33.1
  * Under-the-hood overhaul of number parsing. Behavior is mostly
    compatible with previous versions, but there are some known
    differences.
- Remove xlocale.patch (code to patch is gone),
  icu-number-grouping.diff (merged upstream)</changelog>
  <changelog author="idonmez@suse.com" date="1539777600">- Update to new upstream release 63.1
  * CLDR 34
    + Segmentation rules and emoji sort order adjusted for
    Unicode 11
    + Somali and Javanese data now up to moderate level
    (document content)
    + Tongan, Konkani, Maori, Dzongkha, Tatar, Kurdish (ku),
    and Xhosa data now up to basic level
    + Many data additions and corrections in many other
    languages
    + The following languages have been added to ICU: Sindhi,
    Maori, Turkmen, Javanese, Interlingua, Kurdish (ku), Xhosa
  * New currency: Venezuela's Bolívar Soberano (VES)
  * New Japanese calendar era from 2019: CLDR and ICU include
    data for testing that can be enabled.
    (ICU #12973, CLDR #10750)
  * To enable CLDR new Japanese era placeholder name, set
    environment variable (and Java system property for ICU4J)
    ICU_ENABLE_TENTATIVE_ERA=true.
  * New API for number and currency range formatting
    (class NumberRangeFormatter, #11276)
  * Support for additional Unicode properties:
    Indic_Positional_Category &amp; Indic_Syllabic_Category (#8966)
    and Vertical_Orientation (#12850)
  * New API for code point maps and tries, mapping Unicode
    code points (U+0000..U+10FFFF) to integer values. (#13530)
  * Java classes CodePointMap, CodePointTrie, MutableCodePointTrie
  * C types UCPMap, UCPTrie, UMutableCPTrie
  * New API for getting a UnicodeSet per binary property and a code
    point map per enumerated/int-value property. (#20086)
  * Full conformance with UAX #14 Line Breaking
    (required BreakIterator feature work). (#7270)
  * C++ Locale class
    + Additional functions forLanguageTag()/toLanguageTag(),
    and functions that are easier and safer to use by using
    StringPiece and ByteSink rather than raw buffers. (#13417)
    + Move semantics. (#13645)
  * Various Out-Of-Memory (OOM) issues have been fixed.
- Refresh icu-versioning.diff</changelog>
  <changelog author="jengelh@inai.de" date="1554120000">- Update to new upstream release 64.1
  * Updates to Unicode 12 and to CLDR 35 locale data with many
    additions and corrections, and some new languages. ICU adds a
    data filtering/subsetting mechanism, improved formatting API,
    and a C++ LocaleBuilder.
- New python3 dependency to build intermediate file
  test/testdata/rules.mk.</changelog>
  <changelog author="jengelh@inai.de" date="1555588800">- Update to new upstream release 64.2
  * This maintenance update for ICU 64 includes draft Unicode
    12.1 update, CLDR 35.1 locale data and support for the new
    Japanese era Reiwa (令和). (boo#1112183, bnc#1103893,
    FATE#325570, bnc#1103893, fate#325570, fate#325419)</changelog>
  <changelog author="idonmez@suse.com" date="1557835200">- Add 075cefb2e21f57f4cac1bc2868e93dd1b8c077cc.patch to fix a
  regression with the C.UTF-8 locale
  https://unicode-org.atlassian.net/browse/ICU-20575</changelog>
  <changelog author="kukuk@suse.de" date="1566388800">- Remove old obsoletes/provides for migration from very old
  products, as they break our shared library policy (bsc#1146907).</changelog>
  <changelog author="jengelh@inai.de" date="1570276800">- Update to release 65.1 (jsc#SLE-11118).
  * Updated to CLDR 36 locale data with many additions and
    corrections, and some new measurement units.
  * The Java LocaleMatcher API is improved, and ported to C++.
- Drop 075cefb2e21f57f4cac1bc2868e93dd1b8c077cc.patch
  (merged)</changelog>
  <changelog author="qzhao@suse.com" date="1590926400">- Update icu.spec:
  Add "Provides:libicu = %version" for libicu to Make .Net core can
  install successfully.
  (bsc#1167603, bsc#1161007)</changelog>
  <changelog author="qzhao@suse.com" date="1660305600">- Add icu-CVE-2020-21913.patch:
  Backport 727505bdd from upstream, use LocalMemory for cmd to prevent
  use after free.
  (CVE-2020-21913, bsc#1193951)</changelog>
  <changelog author="qzhao@suse.com" date="1749816000">- Add icu-CVE-2025-5222.patch:
  Backport 2c667e3 from upstream, ICU-22973 Fix buffer overflow by
  using CharString.
  (CVE-2025-5222, bsc#1243721)</changelog>
</package>
<package pkgid="03b748d82b6cad84584bcb59a74368bdde899d69d406e17d773ee34d128e7e40" name="libinotifytools0" arch="x86_64">
  <version epoch="0" ver="3.21.9.6" rel="150400.3.3.3"/>
  <changelog author="jweberhofer@weberhofer.at" date="1424952000">- Updated download location</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1425643200">- Splitted off the shared library</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1426680000">- Added inotify-tools-no-timestamp-in-doc.patch to remove date and time
  from the doxygen-generated documentation files.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1426680001">- Build noarch package for doc only for newer suse version, otherwise
  build fails.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1426852800">- Do not longer provide lib%{name}
- Package COPYING</changelog>
  <changelog author="schwab@suse.de" date="1445256000">- reserved-identifier.patch: fix invalid use of reserved identifier</changelog>
  <changelog author="adrian@suse.de" date="1535716800">- update to version 3.20.1
  * no changelog
  * drop upstreamed patch reserved-identifier.patch</changelog>
  <changelog author="dmueller@suse.com" date="1549195200">- adjust source to the github download url</changelog>
  <changelog author="bwiedemann@suse.com" date="1554379200">- Update inotify-tools-no-timestamp-in-doc.patch
  because doxygen footers are no more an issue and man page
  date needs to be normalized (boo#1047218)</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 3.20.2:
  * New maintainer
  * Fix potential buffer overflow
  * gcc 9 support
- remove inotify-tools-no-timestamp-in-doc.patch
  inotify-return.patch (merged upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 3.20.11.0:
  * Added --no-dereference to watch a symlink
  * bugfixes</changelog>
  <changelog author="dmueller@suse.com" date="1632744000">- update to 3.21.9.5:
  * Fix Wrong pointer passed to realloc
  * Fix offset compiler warning
  * various static code analyse annotations and fixes</changelog>
  <changelog author="dmueller@suse.com" date="1634385600">- update to 3.21.9.6 (jsc#SLE-21025):
  * update path for includes in stats.h
  * Fix spellings in manpages</changelog>
  <changelog author="dmueller@suse.com" date="1758024000">- add inotifywait-nullterminate.patch (bsc#1249617)</changelog>
</package>
<package pkgid="6ba1eb60177fa4398cd740adc5789dafa4982cc8aa9991af17bfa05c05e87b91" name="libipa_hbac-devel" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.17.1"/>
  <changelog author="pgajdos@suse.com" date="1709899200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
</package>
<package pkgid="3520bdbc7dbd5a6c93105dc168bc4e4f4e495f5c53f12d6edce6df96f24b70eb" name="libipa_hbac-devel" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.22.1"/>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
  <changelog author="scabrero@suse.de" date="1773144000">- Fix sss_obfuscate crash with python 3.6; (bsc#1259381); Add patch
  0008-subprocess.run-python36.patch</changelog>
  <changelog author="scabrero@suse.de" date="1773230400">- Restore default config file installation; (bsc#1259250);
- Make sure previously rotated logs are chown-ed as well;
  (bsc#1259475); Add patch
  0009-Make-sure-previously-rotated-logs-are-chown-ed-as-we.patch</changelog>
</package>
<package pkgid="5094eb4ed11768ca8b8ad3b836c6328dc4738a5b189bc6d530ccc25dd9022b6a" name="libipa_hbac-devel" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.25.1"/>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
  <changelog author="scabrero@suse.de" date="1773144000">- Fix sss_obfuscate crash with python 3.6; (bsc#1259381); Add patch
  0008-subprocess.run-python36.patch</changelog>
  <changelog author="scabrero@suse.de" date="1773230400">- Restore default config file installation; (bsc#1259250);
- Make sure previously rotated logs are chown-ed as well;
  (bsc#1259475); Add patch
  0009-Make-sure-previously-rotated-logs-are-chown-ed-as-we.patch</changelog>
  <changelog author="scabrero@suse.de" date="1775476800">- Do not package capabilities, will be applied by %set_permissions
  rpm macro; (bsc#1259436);
- Silence noisy warning from sss_cache if run prior starting the
  daemon and config.ldb does not exist; (bsc#1259545); Add patch
  0010-TOOLS-noisy-debug-messages-when-config.ldb-does-not-.patch
- Fix ldap_child process started by the backend process ending in
  defunc state. Add patch
  0011-sdap_select_principal_from_keytab_sync-waitpid-synch.patch
- Create the secrets directory for the KCM service; (bsc#1259253);
- Fix missing nss library in 32bit package; (bsc#1260409);
- Fix packaging wrong permissions for /usr/share/polkit-1/rules.d;
  (bsc#1260413);</changelog>
</package>
<package pkgid="26c6f7558c030560aa61975fee92e5aa915bd80c9536763cad14ce3012fffa83" name="libipa_hbac-devel" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.28.1"/>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
  <changelog author="scabrero@suse.de" date="1773144000">- Fix sss_obfuscate crash with python 3.6; (bsc#1259381); Add patch
  0008-subprocess.run-python36.patch</changelog>
  <changelog author="scabrero@suse.de" date="1773230400">- Restore default config file installation; (bsc#1259250);
- Make sure previously rotated logs are chown-ed as well;
  (bsc#1259475); Add patch
  0009-Make-sure-previously-rotated-logs-are-chown-ed-as-we.patch</changelog>
  <changelog author="scabrero@suse.de" date="1775476800">- Do not package capabilities, will be applied by %set_permissions
  rpm macro; (bsc#1259436);
- Silence noisy warning from sss_cache if run prior starting the
  daemon and config.ldb does not exist; (bsc#1259545); Add patch
  0010-TOOLS-noisy-debug-messages-when-config.ldb-does-not-.patch
- Fix ldap_child process started by the backend process ending in
  defunc state. Add patch
  0011-sdap_select_principal_from_keytab_sync-waitpid-synch.patch
- Create the secrets directory for the KCM service; (bsc#1259253);
- Fix missing nss library in 32bit package; (bsc#1260409);
- Fix packaging wrong permissions for /usr/share/polkit-1/rules.d;
  (bsc#1260413);</changelog>
  <changelog author="scabrero@suse.de" date="1777464000">- With the 2.10 update sssd runs under unprivileged user which is
  not possible in certain scenarios. This update reverts to run as
  root with minimum privileges; (bsc#1259436); Add patch
  0012-run-as-root.patch
- Let krb5 child tolerate missing capabilities; Add patch
  0013-KRB5-let-krb5_child-tolerate-missing-cap-set-id.patch
- Fix systemd try-restart warning when updating</changelog>
</package>
<package pkgid="4e38078c8b6180a8100f8f81a945d63bdb4cd59abd10f8cdc1de576d7603f3a4" name="libipa_hbac-devel" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.31.1"/>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
  <changelog author="scabrero@suse.de" date="1773144000">- Fix sss_obfuscate crash with python 3.6; (bsc#1259381); Add patch
  0008-subprocess.run-python36.patch</changelog>
  <changelog author="scabrero@suse.de" date="1773230400">- Restore default config file installation; (bsc#1259250);
- Make sure previously rotated logs are chown-ed as well;
  (bsc#1259475); Add patch
  0009-Make-sure-previously-rotated-logs-are-chown-ed-as-we.patch</changelog>
  <changelog author="scabrero@suse.de" date="1775476800">- Do not package capabilities, will be applied by %set_permissions
  rpm macro; (bsc#1259436);
- Silence noisy warning from sss_cache if run prior starting the
  daemon and config.ldb does not exist; (bsc#1259545); Add patch
  0010-TOOLS-noisy-debug-messages-when-config.ldb-does-not-.patch
- Fix ldap_child process started by the backend process ending in
  defunc state. Add patch
  0011-sdap_select_principal_from_keytab_sync-waitpid-synch.patch
- Create the secrets directory for the KCM service; (bsc#1259253);
- Fix missing nss library in 32bit package; (bsc#1260409);
- Fix packaging wrong permissions for /usr/share/polkit-1/rules.d;
  (bsc#1260413);</changelog>
  <changelog author="scabrero@suse.de" date="1777464000">- With the 2.10 update sssd runs under unprivileged user which is
  not possible in certain scenarios. This update reverts to run as
  root with minimum privileges; (bsc#1259436); Add patch
  0012-run-as-root.patch
- Let krb5 child tolerate missing capabilities; Add patch
  0013-KRB5-let-krb5_child-tolerate-missing-cap-set-id.patch
- Fix systemd try-restart warning when updating</changelog>
  <changelog author="scabrero@suse.de" date="1777896000">- Reduce the message severity logged when the LDAP server hosts
  multiple naming contexts without defining a default one in the
  rootdse; (bsc#1264185); Add patch
  0015-sdap-Reduce-log-level-when-get_naming_context-fails.patch
- Do not ignore tests result at build time; (bsc#1246196);
- Skip tests depending on soft-hsm; Add patch
  0014-TESTS-Disable-pam-srv-and-certmap-cmocka-tests.patch</changelog>
</package>
<package pkgid="e1abaa8e80eb8fb7610b30e4a897dccec5170af5f8dc22615307fe6dd28aded4" name="libipa_hbac-devel" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150700.9.12.1"/>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
</package>
<package pkgid="b236cb9680b9fad815f767094a7087acbd2ec29b8c88807f78eb75e3ed77edf9" name="libipa_hbac-devel" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150700.9.3.1"/>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
</package>
<package pkgid="63c1f4a261d1933d68d6b2f43f81bd1c9b0c8a58f988e954e7d002d2cf3ac639" name="libipa_hbac-devel" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150700.9.6.2"/>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
</package>
<package pkgid="bdcac5059e780b35af07c4869ff0625de393b1991db46dca2d34ceeba7ac8c95" name="libipa_hbac-devel" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150700.9.9.1"/>
  <changelog author="scabrero@suse.de" date="1698753600">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
</package>
<package pkgid="68fb2e7894b01da5e2660d35a20701c28d86a7a5f91485902a0e2843646d94c5" name="libipa_hbac0" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.17.1"/>
  <changelog author="pgajdos@suse.com" date="1709899200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
</package>
<package pkgid="22ae701aac1a167b4686e3733d136a9cf830d4ef642be5874f1f2f69531c3380" name="libipa_hbac0" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.22.1"/>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
  <changelog author="scabrero@suse.de" date="1773144000">- Fix sss_obfuscate crash with python 3.6; (bsc#1259381); Add patch
  0008-subprocess.run-python36.patch</changelog>
  <changelog author="scabrero@suse.de" date="1773230400">- Restore default config file installation; (bsc#1259250);
- Make sure previously rotated logs are chown-ed as well;
  (bsc#1259475); Add patch
  0009-Make-sure-previously-rotated-logs-are-chown-ed-as-we.patch</changelog>
</package>
<package pkgid="b8a4d5b15c81a1528a321211dfdb82777416d0a361f7fac3408bc471b02c33c3" name="libipa_hbac0" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.25.1"/>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
  <changelog author="scabrero@suse.de" date="1773144000">- Fix sss_obfuscate crash with python 3.6; (bsc#1259381); Add patch
  0008-subprocess.run-python36.patch</changelog>
  <changelog author="scabrero@suse.de" date="1773230400">- Restore default config file installation; (bsc#1259250);
- Make sure previously rotated logs are chown-ed as well;
  (bsc#1259475); Add patch
  0009-Make-sure-previously-rotated-logs-are-chown-ed-as-we.patch</changelog>
  <changelog author="scabrero@suse.de" date="1775476800">- Do not package capabilities, will be applied by %set_permissions
  rpm macro; (bsc#1259436);
- Silence noisy warning from sss_cache if run prior starting the
  daemon and config.ldb does not exist; (bsc#1259545); Add patch
  0010-TOOLS-noisy-debug-messages-when-config.ldb-does-not-.patch
- Fix ldap_child process started by the backend process ending in
  defunc state. Add patch
  0011-sdap_select_principal_from_keytab_sync-waitpid-synch.patch
- Create the secrets directory for the KCM service; (bsc#1259253);
- Fix missing nss library in 32bit package; (bsc#1260409);
- Fix packaging wrong permissions for /usr/share/polkit-1/rules.d;
  (bsc#1260413);</changelog>
</package>
<package pkgid="90bc3f86f330a93b48868214ee27614e1e108b0691c1ece6050bacdc3760531d" name="libipa_hbac0" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.28.1"/>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
  <changelog author="scabrero@suse.de" date="1773144000">- Fix sss_obfuscate crash with python 3.6; (bsc#1259381); Add patch
  0008-subprocess.run-python36.patch</changelog>
  <changelog author="scabrero@suse.de" date="1773230400">- Restore default config file installation; (bsc#1259250);
- Make sure previously rotated logs are chown-ed as well;
  (bsc#1259475); Add patch
  0009-Make-sure-previously-rotated-logs-are-chown-ed-as-we.patch</changelog>
  <changelog author="scabrero@suse.de" date="1775476800">- Do not package capabilities, will be applied by %set_permissions
  rpm macro; (bsc#1259436);
- Silence noisy warning from sss_cache if run prior starting the
  daemon and config.ldb does not exist; (bsc#1259545); Add patch
  0010-TOOLS-noisy-debug-messages-when-config.ldb-does-not-.patch
- Fix ldap_child process started by the backend process ending in
  defunc state. Add patch
  0011-sdap_select_principal_from_keytab_sync-waitpid-synch.patch
- Create the secrets directory for the KCM service; (bsc#1259253);
- Fix missing nss library in 32bit package; (bsc#1260409);
- Fix packaging wrong permissions for /usr/share/polkit-1/rules.d;
  (bsc#1260413);</changelog>
  <changelog author="scabrero@suse.de" date="1777464000">- With the 2.10 update sssd runs under unprivileged user which is
  not possible in certain scenarios. This update reverts to run as
  root with minimum privileges; (bsc#1259436); Add patch
  0012-run-as-root.patch
- Let krb5 child tolerate missing capabilities; Add patch
  0013-KRB5-let-krb5_child-tolerate-missing-cap-set-id.patch
- Fix systemd try-restart warning when updating</changelog>
</package>
<package pkgid="eef988bba59cc64836087ee9e59d0641c581484da48db754d200001e800d6a7a" name="libipa_hbac0" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.31.1"/>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
  <changelog author="scabrero@suse.de" date="1773144000">- Fix sss_obfuscate crash with python 3.6; (bsc#1259381); Add patch
  0008-subprocess.run-python36.patch</changelog>
  <changelog author="scabrero@suse.de" date="1773230400">- Restore default config file installation; (bsc#1259250);
- Make sure previously rotated logs are chown-ed as well;
  (bsc#1259475); Add patch
  0009-Make-sure-previously-rotated-logs-are-chown-ed-as-we.patch</changelog>
  <changelog author="scabrero@suse.de" date="1775476800">- Do not package capabilities, will be applied by %set_permissions
  rpm macro; (bsc#1259436);
- Silence noisy warning from sss_cache if run prior starting the
  daemon and config.ldb does not exist; (bsc#1259545); Add patch
  0010-TOOLS-noisy-debug-messages-when-config.ldb-does-not-.patch
- Fix ldap_child process started by the backend process ending in
  defunc state. Add patch
  0011-sdap_select_principal_from_keytab_sync-waitpid-synch.patch
- Create the secrets directory for the KCM service; (bsc#1259253);
- Fix missing nss library in 32bit package; (bsc#1260409);
- Fix packaging wrong permissions for /usr/share/polkit-1/rules.d;
  (bsc#1260413);</changelog>
  <changelog author="scabrero@suse.de" date="1777464000">- With the 2.10 update sssd runs under unprivileged user which is
  not possible in certain scenarios. This update reverts to run as
  root with minimum privileges; (bsc#1259436); Add patch
  0012-run-as-root.patch
- Let krb5 child tolerate missing capabilities; Add patch
  0013-KRB5-let-krb5_child-tolerate-missing-cap-set-id.patch
- Fix systemd try-restart warning when updating</changelog>
  <changelog author="scabrero@suse.de" date="1777896000">- Reduce the message severity logged when the LDAP server hosts
  multiple naming contexts without defining a default one in the
  rootdse; (bsc#1264185); Add patch
  0015-sdap-Reduce-log-level-when-get_naming_context-fails.patch
- Do not ignore tests result at build time; (bsc#1246196);
- Skip tests depending on soft-hsm; Add patch
  0014-TESTS-Disable-pam-srv-and-certmap-cmocka-tests.patch</changelog>
</package>
<package pkgid="82b8e9c423ebd5d1cf276ed47bb26b4474fedf038b6d58054c90dd2b91e28ae7" name="libipa_hbac0" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150700.9.12.1"/>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
</package>
<package pkgid="1f74f015d99092fefd4dfa27798f4ce3e2944f38d430a0e9deae436d2e7e58be" name="libipa_hbac0" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150700.9.3.1"/>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
</package>
<package pkgid="bf125dd6aac62a9224d825e8d5dc570a1f5f2a2052b337e7a1e76a250da2274a" name="libipa_hbac0" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150700.9.6.2"/>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
</package>
<package pkgid="c294f35932aecf36d0fd8a61a60e1f86d97047f41f6c3cd55b26cb72e0cf7a86" name="libipa_hbac0" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150700.9.9.1"/>
  <changelog author="scabrero@suse.de" date="1698753600">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
</package>
<package pkgid="0fedcd122281f5b2d4a74f05298bf238ee38b229d265bec97f6b036710d9bd36" name="libipmiconsole2" arch="x86_64">
  <version epoch="0" ver="1.6.8" rel="150400.3.3.1"/>
  <changelog author="kkaempf@suse.com" date="1475582400">- Update to 1.5.4
  o Various changes/fixes in libipmiconsole
  - If user retrieves file descriptor from ipmiconsole_ctx_fd,
    user is required to close it.  ipmiconsole_ctx_destroy no
    longer closes it.  This is to avoid a potential double close
    which can be a problem for multithreaded applications. This
    is a change in behavior, but we do not believe this will
    affect most applications since most users close the file
    descriptor under most scenarios anyways.
  - ipmiconsole_ctx_destroy() should now be called to free
    resources even if ipmiconsole_engine_teardown() has been
    called.  This has been done to create consistent behavior in
    the API and avoid a former segfault possibility.  This is a
    change in behavior, but we do not believe this will affect
    most applications since ipmiconsole_engine_teardown() is
    only called when an application is being shutdown.
  - The use of IPMICONSOLE_ENGINE_CLOSE_FD has been clarified in
    the header file.  Some of the prior text was unclear.
    Behavior has not been changed.
  o In ipmi-oem, support Intel get-bmc-services and set-bmc-
    services commands.
  o In ipmi-oem, support Gigabyte get-nic-mode and set-nic-mode
    commands.
  o Support Gigabyte MD90-FS0-ZB OEM SEL events.</changelog>
  <changelog author="kkaempf@suse.com" date="1478174400">- Update to 1.5.5
  o Fix invalid flag clear in libipmiconsole that can lead to a potential
    double close on a file descriptor.
  o Support Supermicro H8SGL-F OEM sensors and events.</changelog>
  <changelog author="sfalken@opensuse.org" date="1489060800">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="kkaempf@suse.com" date="1499342400">- Update to 1.5.6
  o In libfreeipmi locate (used by ipmi-locate), use DMI firmware in
    sysfs if it exists.
  o Minor mem-leak corner case fix in libfreeipmi.
  o Minor documentation fixes.
  o Minor error message clarifications.</changelog>
  <changelog author="kkaempf@suse.com" date="1504094400">- Update to 1.5.7
  o In libipmimonitoring, fix several mem-leak corner cases.</changelog>
  <changelog author="alarrosa@suse.com" date="1508328000">- Follow the shared library packaging policy. Created new packages
  libipmiconsole2, libipmidetect0, libipmimonitoring6, libfreeipmi17</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kkaempf@suse.com" date="1517659200">- Update to 1.6.1
  o Add IPv6 hostname support to FreeIPMI, all of FreeIPMI can now take
    IPv6 addresses as inputs to "host" parameters, options, or inputs.
  o Support significant portions of IPMI IPv6 configuration in
    libfreeipmi.
  o Add --no-session option in ipmi-raw.
  o Add SDR cache options to ipmi-config.
  o Legacy -f short option for --flush-cache and -Q short option for
    quiet-cache.  Backwards compatible for tools that supported it
    before.
  o In ipmi-oem, support Gigabyte get-bmc-services and
    set-bmc-services.
  o Various performance improvements:
  - Remove excessive calls to secure_memset to clear memory.
  - Remove excessive memsets and clears of data.
  - Remove unnecessary "double input checks".
  - Remove expensive input checks in libfreeipmi fiid library.
    Fallout from this may include FIID_ERR_FIELD_NOT_FOUND
    errors in different fiid functions.
  - Remove unnecessary input checks in libfreeipmi fiid library.
  - Add recent 'lookups' of fields in fiid library to internal
    cache.
  o Various minor fixes/improvements
  - Update libfreeipmi core API to use poll() instead of select(), to
    avoid issues with applications with a high number of threads.
  - As a side point, while IPv6 networking support has been added, IPv6
    configuration in ipmi-config &amp; bmc-config is not supported in this
    release.</changelog>
  <changelog author="kkaempf@suse.com" date="1525435200">- Update to 1.6.2
  o Fix error in bridging where bridged requests were sent to the
    wrong LUN.
  o Fix command parsing bugs in legacy ipmi-config scripts
    (i.e. bmc-config, ipmi-pef-config, etc.)
  o Do not output full path of daemons in syslog, output only the
    daemon name (i.e. output "ipmidetected" instead of
    "/usr/sbin/ipmidetectd").
  o Update channel range from 0-7 to 0-11, per errata IPMI update.</changelog>
  <changelog author="josef.moellers@suse.com" date="1533124800">- Changed mode of .service files from 755 to 644.
  [bsc#1103311, 1103311-service-files-mode.patch]</changelog>
  <changelog author="trenn@suse.de" date="1535457600">- Enable build for aarch64 (fate#326605)</changelog>
  <changelog author="trenn@suse.de" date="1541764800">- Remove has_systemd conditions
- Add rcservice shortcut links to control services
- Fix some more build warnings
- Use %license instead of %doc where appropriate
- Extract ipmiseld service as a separate package as done with other
  services
- Declare /var/lib/freeipmi/ipckey as %ghost and do not create it
  explicitly in .spec file (bsc#1100124)</changelog>
  <changelog author="trenn@suse.de" date="1547208000">- Add provides:freeipmi:/usr/sbin/ipmiseld to the
  freeipmi-ipmiseld split package for backward compatibility
  for now</changelog>
  <changelog author="kkaempf@suse.com" date="1548417600">- Update to 1.6.3
  o In ipmi-locate, support parsing SPMI tables exported via sysfs.
  o Support Intel S2600GZ OEM sensor and SEL events.
  o Support Intel S2600WP OEM sensor and SEL events.
  o Support Gigabyte MG20-OP0-ZB OEM SEL events.
  o Fix DISCRETE_READING workaround in libipmimonitoring.
  o In libfreeipmi, add workaround for packets that are re-ordered
    during sensor bridging.
  o Minor bug fixes.
  o Various documentation updates/fixes.</changelog>
  <changelog author="kkaempf@suse.com" date="1566475200">- Update to 1.6.4
  o In libfreeipmi, add additional workarounds for packets that are
    re-ordered during sensor bridging.
  o In libfreeipmi, add additional sensor / event interpretations.
  o In libfreeipmi, fix error return value on bridging requests.
  o Add workaround in ipmi-sel for QuantaPlex T42D-2U motherboard,
    whichlists a SDR record that makes no sense.
  o Add workaround for Dell Poweredge FC830, which have an error
    when reading the last SDR record on a motherboard.
  o Support Supermicro X10 OEM dimm events.</changelog>
  <changelog author="kkaempf@suse.com" date="1590148800">- Update to 1.6.5
  o Add FRU parsing workaround for Fujitsu Primergy RX1330, in which a
    CEh is used to indicate that no FRU data is available.
  o Misc minor fixes.</changelog>
  <changelog author="kkaempf@suse.com" date="1599393600">- Update to 1.6.6
  o In libfreeipmi, fix segfault in SPMI parsing leading to immediate
    failures on some hardware across all tools.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1613304000">- freeipmi 1.6.7:
  * Do not require IPMI access when running ipmi-fru with the
  - -fru-file option
  * Minor documentation updates
- the following fixes were upstreamed:
  * Fix default permissions of various config and system files,
    drop 1103311-service-files-mode.patch</changelog>
  <changelog author="trenn@suse.de" date="1625745600">- Fix: W: name-repeated-in-summary C FreeIPMI
- Fix: freeipmi-bmc-watchdog.x86_64:
  W: non-etc-or-var-file-marked-as-conffile /usr/share/fillup-templates/sysconfig.bmc-watchdog
  Declaring fillup files as conffile is not needed
- freeipmi 1.6.8</changelog>
  <changelog author="trenn@suse.de" date="1777032000">- bsc#1260414 - CVE-2026-33554:
  freeipmi: improper memory handling and data validation can lead
  A ipmi-oem-fix-several-memory-out-of-bounds-errors.patch</changelog>
</package>
<package pkgid="f82bb5ce1227241077a877b324962948e0ecdf5edbb9a3ef60ec34426e5348f4" name="libipmidetect0" arch="x86_64">
  <version epoch="0" ver="1.6.8" rel="150400.3.3.1"/>
  <changelog author="kkaempf@suse.com" date="1475582400">- Update to 1.5.4
  o Various changes/fixes in libipmiconsole
  - If user retrieves file descriptor from ipmiconsole_ctx_fd,
    user is required to close it.  ipmiconsole_ctx_destroy no
    longer closes it.  This is to avoid a potential double close
    which can be a problem for multithreaded applications. This
    is a change in behavior, but we do not believe this will
    affect most applications since most users close the file
    descriptor under most scenarios anyways.
  - ipmiconsole_ctx_destroy() should now be called to free
    resources even if ipmiconsole_engine_teardown() has been
    called.  This has been done to create consistent behavior in
    the API and avoid a former segfault possibility.  This is a
    change in behavior, but we do not believe this will affect
    most applications since ipmiconsole_engine_teardown() is
    only called when an application is being shutdown.
  - The use of IPMICONSOLE_ENGINE_CLOSE_FD has been clarified in
    the header file.  Some of the prior text was unclear.
    Behavior has not been changed.
  o In ipmi-oem, support Intel get-bmc-services and set-bmc-
    services commands.
  o In ipmi-oem, support Gigabyte get-nic-mode and set-nic-mode
    commands.
  o Support Gigabyte MD90-FS0-ZB OEM SEL events.</changelog>
  <changelog author="kkaempf@suse.com" date="1478174400">- Update to 1.5.5
  o Fix invalid flag clear in libipmiconsole that can lead to a potential
    double close on a file descriptor.
  o Support Supermicro H8SGL-F OEM sensors and events.</changelog>
  <changelog author="sfalken@opensuse.org" date="1489060800">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="kkaempf@suse.com" date="1499342400">- Update to 1.5.6
  o In libfreeipmi locate (used by ipmi-locate), use DMI firmware in
    sysfs if it exists.
  o Minor mem-leak corner case fix in libfreeipmi.
  o Minor documentation fixes.
  o Minor error message clarifications.</changelog>
  <changelog author="kkaempf@suse.com" date="1504094400">- Update to 1.5.7
  o In libipmimonitoring, fix several mem-leak corner cases.</changelog>
  <changelog author="alarrosa@suse.com" date="1508328000">- Follow the shared library packaging policy. Created new packages
  libipmiconsole2, libipmidetect0, libipmimonitoring6, libfreeipmi17</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kkaempf@suse.com" date="1517659200">- Update to 1.6.1
  o Add IPv6 hostname support to FreeIPMI, all of FreeIPMI can now take
    IPv6 addresses as inputs to "host" parameters, options, or inputs.
  o Support significant portions of IPMI IPv6 configuration in
    libfreeipmi.
  o Add --no-session option in ipmi-raw.
  o Add SDR cache options to ipmi-config.
  o Legacy -f short option for --flush-cache and -Q short option for
    quiet-cache.  Backwards compatible for tools that supported it
    before.
  o In ipmi-oem, support Gigabyte get-bmc-services and
    set-bmc-services.
  o Various performance improvements:
  - Remove excessive calls to secure_memset to clear memory.
  - Remove excessive memsets and clears of data.
  - Remove unnecessary "double input checks".
  - Remove expensive input checks in libfreeipmi fiid library.
    Fallout from this may include FIID_ERR_FIELD_NOT_FOUND
    errors in different fiid functions.
  - Remove unnecessary input checks in libfreeipmi fiid library.
  - Add recent 'lookups' of fields in fiid library to internal
    cache.
  o Various minor fixes/improvements
  - Update libfreeipmi core API to use poll() instead of select(), to
    avoid issues with applications with a high number of threads.
  - As a side point, while IPv6 networking support has been added, IPv6
    configuration in ipmi-config &amp; bmc-config is not supported in this
    release.</changelog>
  <changelog author="kkaempf@suse.com" date="1525435200">- Update to 1.6.2
  o Fix error in bridging where bridged requests were sent to the
    wrong LUN.
  o Fix command parsing bugs in legacy ipmi-config scripts
    (i.e. bmc-config, ipmi-pef-config, etc.)
  o Do not output full path of daemons in syslog, output only the
    daemon name (i.e. output "ipmidetected" instead of
    "/usr/sbin/ipmidetectd").
  o Update channel range from 0-7 to 0-11, per errata IPMI update.</changelog>
  <changelog author="josef.moellers@suse.com" date="1533124800">- Changed mode of .service files from 755 to 644.
  [bsc#1103311, 1103311-service-files-mode.patch]</changelog>
  <changelog author="trenn@suse.de" date="1535457600">- Enable build for aarch64 (fate#326605)</changelog>
  <changelog author="trenn@suse.de" date="1541764800">- Remove has_systemd conditions
- Add rcservice shortcut links to control services
- Fix some more build warnings
- Use %license instead of %doc where appropriate
- Extract ipmiseld service as a separate package as done with other
  services
- Declare /var/lib/freeipmi/ipckey as %ghost and do not create it
  explicitly in .spec file (bsc#1100124)</changelog>
  <changelog author="trenn@suse.de" date="1547208000">- Add provides:freeipmi:/usr/sbin/ipmiseld to the
  freeipmi-ipmiseld split package for backward compatibility
  for now</changelog>
  <changelog author="kkaempf@suse.com" date="1548417600">- Update to 1.6.3
  o In ipmi-locate, support parsing SPMI tables exported via sysfs.
  o Support Intel S2600GZ OEM sensor and SEL events.
  o Support Intel S2600WP OEM sensor and SEL events.
  o Support Gigabyte MG20-OP0-ZB OEM SEL events.
  o Fix DISCRETE_READING workaround in libipmimonitoring.
  o In libfreeipmi, add workaround for packets that are re-ordered
    during sensor bridging.
  o Minor bug fixes.
  o Various documentation updates/fixes.</changelog>
  <changelog author="kkaempf@suse.com" date="1566475200">- Update to 1.6.4
  o In libfreeipmi, add additional workarounds for packets that are
    re-ordered during sensor bridging.
  o In libfreeipmi, add additional sensor / event interpretations.
  o In libfreeipmi, fix error return value on bridging requests.
  o Add workaround in ipmi-sel for QuantaPlex T42D-2U motherboard,
    whichlists a SDR record that makes no sense.
  o Add workaround for Dell Poweredge FC830, which have an error
    when reading the last SDR record on a motherboard.
  o Support Supermicro X10 OEM dimm events.</changelog>
  <changelog author="kkaempf@suse.com" date="1590148800">- Update to 1.6.5
  o Add FRU parsing workaround for Fujitsu Primergy RX1330, in which a
    CEh is used to indicate that no FRU data is available.
  o Misc minor fixes.</changelog>
  <changelog author="kkaempf@suse.com" date="1599393600">- Update to 1.6.6
  o In libfreeipmi, fix segfault in SPMI parsing leading to immediate
    failures on some hardware across all tools.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1613304000">- freeipmi 1.6.7:
  * Do not require IPMI access when running ipmi-fru with the
  - -fru-file option
  * Minor documentation updates
- the following fixes were upstreamed:
  * Fix default permissions of various config and system files,
    drop 1103311-service-files-mode.patch</changelog>
  <changelog author="trenn@suse.de" date="1625745600">- Fix: W: name-repeated-in-summary C FreeIPMI
- Fix: freeipmi-bmc-watchdog.x86_64:
  W: non-etc-or-var-file-marked-as-conffile /usr/share/fillup-templates/sysconfig.bmc-watchdog
  Declaring fillup files as conffile is not needed
- freeipmi 1.6.8</changelog>
  <changelog author="trenn@suse.de" date="1777032000">- bsc#1260414 - CVE-2026-33554:
  freeipmi: improper memory handling and data validation can lead
  A ipmi-oem-fix-several-memory-out-of-bounds-errors.patch</changelog>
</package>
<package pkgid="a4b62c9b1364c571edce94745fc531c6b3c8939f22290b7066af53fc9c047f5e" name="libipmimonitoring6" arch="x86_64">
  <version epoch="0" ver="1.6.8" rel="150400.3.3.1"/>
  <changelog author="kkaempf@suse.com" date="1475582400">- Update to 1.5.4
  o Various changes/fixes in libipmiconsole
  - If user retrieves file descriptor from ipmiconsole_ctx_fd,
    user is required to close it.  ipmiconsole_ctx_destroy no
    longer closes it.  This is to avoid a potential double close
    which can be a problem for multithreaded applications. This
    is a change in behavior, but we do not believe this will
    affect most applications since most users close the file
    descriptor under most scenarios anyways.
  - ipmiconsole_ctx_destroy() should now be called to free
    resources even if ipmiconsole_engine_teardown() has been
    called.  This has been done to create consistent behavior in
    the API and avoid a former segfault possibility.  This is a
    change in behavior, but we do not believe this will affect
    most applications since ipmiconsole_engine_teardown() is
    only called when an application is being shutdown.
  - The use of IPMICONSOLE_ENGINE_CLOSE_FD has been clarified in
    the header file.  Some of the prior text was unclear.
    Behavior has not been changed.
  o In ipmi-oem, support Intel get-bmc-services and set-bmc-
    services commands.
  o In ipmi-oem, support Gigabyte get-nic-mode and set-nic-mode
    commands.
  o Support Gigabyte MD90-FS0-ZB OEM SEL events.</changelog>
  <changelog author="kkaempf@suse.com" date="1478174400">- Update to 1.5.5
  o Fix invalid flag clear in libipmiconsole that can lead to a potential
    double close on a file descriptor.
  o Support Supermicro H8SGL-F OEM sensors and events.</changelog>
  <changelog author="sfalken@opensuse.org" date="1489060800">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="kkaempf@suse.com" date="1499342400">- Update to 1.5.6
  o In libfreeipmi locate (used by ipmi-locate), use DMI firmware in
    sysfs if it exists.
  o Minor mem-leak corner case fix in libfreeipmi.
  o Minor documentation fixes.
  o Minor error message clarifications.</changelog>
  <changelog author="kkaempf@suse.com" date="1504094400">- Update to 1.5.7
  o In libipmimonitoring, fix several mem-leak corner cases.</changelog>
  <changelog author="alarrosa@suse.com" date="1508328000">- Follow the shared library packaging policy. Created new packages
  libipmiconsole2, libipmidetect0, libipmimonitoring6, libfreeipmi17</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kkaempf@suse.com" date="1517659200">- Update to 1.6.1
  o Add IPv6 hostname support to FreeIPMI, all of FreeIPMI can now take
    IPv6 addresses as inputs to "host" parameters, options, or inputs.
  o Support significant portions of IPMI IPv6 configuration in
    libfreeipmi.
  o Add --no-session option in ipmi-raw.
  o Add SDR cache options to ipmi-config.
  o Legacy -f short option for --flush-cache and -Q short option for
    quiet-cache.  Backwards compatible for tools that supported it
    before.
  o In ipmi-oem, support Gigabyte get-bmc-services and
    set-bmc-services.
  o Various performance improvements:
  - Remove excessive calls to secure_memset to clear memory.
  - Remove excessive memsets and clears of data.
  - Remove unnecessary "double input checks".
  - Remove expensive input checks in libfreeipmi fiid library.
    Fallout from this may include FIID_ERR_FIELD_NOT_FOUND
    errors in different fiid functions.
  - Remove unnecessary input checks in libfreeipmi fiid library.
  - Add recent 'lookups' of fields in fiid library to internal
    cache.
  o Various minor fixes/improvements
  - Update libfreeipmi core API to use poll() instead of select(), to
    avoid issues with applications with a high number of threads.
  - As a side point, while IPv6 networking support has been added, IPv6
    configuration in ipmi-config &amp; bmc-config is not supported in this
    release.</changelog>
  <changelog author="kkaempf@suse.com" date="1525435200">- Update to 1.6.2
  o Fix error in bridging where bridged requests were sent to the
    wrong LUN.
  o Fix command parsing bugs in legacy ipmi-config scripts
    (i.e. bmc-config, ipmi-pef-config, etc.)
  o Do not output full path of daemons in syslog, output only the
    daemon name (i.e. output "ipmidetected" instead of
    "/usr/sbin/ipmidetectd").
  o Update channel range from 0-7 to 0-11, per errata IPMI update.</changelog>
  <changelog author="josef.moellers@suse.com" date="1533124800">- Changed mode of .service files from 755 to 644.
  [bsc#1103311, 1103311-service-files-mode.patch]</changelog>
  <changelog author="trenn@suse.de" date="1535457600">- Enable build for aarch64 (fate#326605)</changelog>
  <changelog author="trenn@suse.de" date="1541764800">- Remove has_systemd conditions
- Add rcservice shortcut links to control services
- Fix some more build warnings
- Use %license instead of %doc where appropriate
- Extract ipmiseld service as a separate package as done with other
  services
- Declare /var/lib/freeipmi/ipckey as %ghost and do not create it
  explicitly in .spec file (bsc#1100124)</changelog>
  <changelog author="trenn@suse.de" date="1547208000">- Add provides:freeipmi:/usr/sbin/ipmiseld to the
  freeipmi-ipmiseld split package for backward compatibility
  for now</changelog>
  <changelog author="kkaempf@suse.com" date="1548417600">- Update to 1.6.3
  o In ipmi-locate, support parsing SPMI tables exported via sysfs.
  o Support Intel S2600GZ OEM sensor and SEL events.
  o Support Intel S2600WP OEM sensor and SEL events.
  o Support Gigabyte MG20-OP0-ZB OEM SEL events.
  o Fix DISCRETE_READING workaround in libipmimonitoring.
  o In libfreeipmi, add workaround for packets that are re-ordered
    during sensor bridging.
  o Minor bug fixes.
  o Various documentation updates/fixes.</changelog>
  <changelog author="kkaempf@suse.com" date="1566475200">- Update to 1.6.4
  o In libfreeipmi, add additional workarounds for packets that are
    re-ordered during sensor bridging.
  o In libfreeipmi, add additional sensor / event interpretations.
  o In libfreeipmi, fix error return value on bridging requests.
  o Add workaround in ipmi-sel for QuantaPlex T42D-2U motherboard,
    whichlists a SDR record that makes no sense.
  o Add workaround for Dell Poweredge FC830, which have an error
    when reading the last SDR record on a motherboard.
  o Support Supermicro X10 OEM dimm events.</changelog>
  <changelog author="kkaempf@suse.com" date="1590148800">- Update to 1.6.5
  o Add FRU parsing workaround for Fujitsu Primergy RX1330, in which a
    CEh is used to indicate that no FRU data is available.
  o Misc minor fixes.</changelog>
  <changelog author="kkaempf@suse.com" date="1599393600">- Update to 1.6.6
  o In libfreeipmi, fix segfault in SPMI parsing leading to immediate
    failures on some hardware across all tools.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1613304000">- freeipmi 1.6.7:
  * Do not require IPMI access when running ipmi-fru with the
  - -fru-file option
  * Minor documentation updates
- the following fixes were upstreamed:
  * Fix default permissions of various config and system files,
    drop 1103311-service-files-mode.patch</changelog>
  <changelog author="trenn@suse.de" date="1625745600">- Fix: W: name-repeated-in-summary C FreeIPMI
- Fix: freeipmi-bmc-watchdog.x86_64:
  W: non-etc-or-var-file-marked-as-conffile /usr/share/fillup-templates/sysconfig.bmc-watchdog
  Declaring fillup files as conffile is not needed
- freeipmi 1.6.8</changelog>
  <changelog author="trenn@suse.de" date="1777032000">- bsc#1260414 - CVE-2026-33554:
  freeipmi: improper memory handling and data validation can lead
  A ipmi-oem-fix-several-memory-out-of-bounds-errors.patch</changelog>
</package>
<package pkgid="34503513b528efaf11e9707bdaa299ed9f30ffb12621b230b36539da024e3c6d" name="libirs-devel" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="150300.22.53.1"/>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642507200">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- When using forwarders, bogus NS records supplied by, or via, those
  forwarders may be cached and used by named if it needs to recurse
  for any reason, causing it to obtain and pass on potentially
  incorrect answers.
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657108800">- Changed ownership of /var/lib/named/master from named:named to
  root:root.
  [bsc#1201247, bind.conf]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Security Fixes:
  * Previously, there was no limit to the number of database lookups
  performed while processing large delegations, which could be abused
  to severely impact the performance of named running as a recursive
  resolver. This has been fixed.
  [bsc#1203614, CVE-2022-2795, bind-CVE-2022-2795.patch]
  * A memory leak was fixed that could be externally triggered in the
  DNSSEC verification code for the ECDSA algorithm.
  [bsc#1203619, CVE-2022-38177, bind-CVE-2022-38177.patch]
  * Memory leaks were fixed that could be externally triggered in the
  DNSSEC verification code for the EdDSA algorithm.
  [bsc#1203620, CVE-2022-38178, bind-CVE-2022-38178.patch]</changelog>
  <changelog author="scabrero@suse.de" date="1669636800">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1674734400">- Security Fix:
  * An UPDATE message flood could cause named to exhaust all
    available memory. This flaw was addressed by adding a new
    update-quota option that controls the maximum number of
    outstanding DNS UPDATE messages that named can hold in a queue
    at any given time (default: 100).
  [bsc#1207471, CVE-2022-3094, bind-CVE-2022-3094.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1687435200">- Security Fix:
  * The overmem cleaning process has been improved, to prevent the
    cache from significantly exceeding the configured
    max-cache-size limit.
  [bsc#1212544, CVE-2023-2828, bind-CVE-2023-2828.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1689076800">- Add dnstap support
  [jsc#PED-4852]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1693483200">- Add libs as requires because they may need to be updated when
  installing bind
  [bsc#1213748]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1695297600">- Security Fix:
  * Previously, sending a specially crafted message over the
    control channel could cause the packet-parsing code to run out
    of available stack memory, causing named to terminate
    unexpectedly. This has been fixed.
  [bsc#1215472, CVE-2023-3341, bind-CVE-2023-3341.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1717675200">- Security Fixes:
  * Validating DNS messages containing a lot of DNSSEC signatures
    could cause excessive CPU load, leading to a denial-of-service
    condition. This has been fixed. (CVE-2023-50387)
    [bsc#1219823, bind-CVE-2023-50387-CVE-2023-50868.patch]
  * Preparing an NSEC3 closest encloser proof could cause excessiv
    CPU load, leading to a denial-of-service condition. This has
    been fixed. (CVE-2023-50868)
    [bsc#1219826, bind-CVE-2023-50387-CVE-2023-50868.patch]
  * Parsing DNS messages with many different names could cause
    excessive CPU load. This has been fixed. (CVE-2023-4408)
    [bsc#1219851, bind-CVE-2023-4408.patch]
  * Specific queries could cause named to crash with an assertion
    failure when nxdomain-redirect was enabled. This has been
    fixed. (CVE-2023-5517)
    [bsc#1219852, bind-CVE-2023-5517.patch]
  * Query patterns that continuously triggered cache database
    maintenance could cause an excessive amount of memory to be
    allocated, exceeding max-cache-size and potentially leading to
    all available memory on the host running named being exhausted
    This has been fixed. (CVE-2023-6516)
    [bsc#1219854, bind-CVE-2023-6516.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1722427200">- Security Fixes:
  * It is possible to craft excessively large numbers of resource
    record types for a given owner name, which has the effect of
    slowing down database processing. This has been addressed by
    adding a configurable limit to the number of records that can
    be stored per name and type in a cache or zone database. The
    default is 100, which can be tuned with the new
    max-types-per-name option. (CVE-2024-1737)
    [bsc#1228256, bind-9.16-CVE-2024-1737.patch]
  * Validating DNS messages signed using the SIG(0) protocol (RFC
    2931) could cause excessive CPU load, leading to a
    denial-of-service condition. Support for SIG(0) message
    validation was removed from this version of named.
    (CVE-2024-1975)
    [bsc#1228257, bind-9.16-CVE-2024-1975.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Limit additional section processing for large RDATA sets.
  When answering queries, don’t add data to the additional
  section if the answer has more than 13 names in the RDATA. This
  limits the number of lookups into the database(s) during a
  single client query, reducing the query-processing load.
  (CVE-2024-11187)
  [bsc#1236596, bind-9.16.6-CVE-2024-11187.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761220800">- Security Fixes:
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379, bind-9.16.6-CVE-2025-40778.patch]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380, bind-9.16.6-CVE-2025-40780.patch]</changelog>
</package>
<package pkgid="784a1df2b24f60881a0a911c287c6b6be6da44456c8877a8eb3ff2ca8d1e685b" name="libirs-devel" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="150300.22.56.1"/>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642507200">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- When using forwarders, bogus NS records supplied by, or via, those
  forwarders may be cached and used by named if it needs to recurse
  for any reason, causing it to obtain and pass on potentially
  incorrect answers.
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657108800">- Changed ownership of /var/lib/named/master from named:named to
  root:root.
  [bsc#1201247, bind.conf]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Security Fixes:
  * Previously, there was no limit to the number of database lookups
  performed while processing large delegations, which could be abused
  to severely impact the performance of named running as a recursive
  resolver. This has been fixed.
  [bsc#1203614, CVE-2022-2795, bind-CVE-2022-2795.patch]
  * A memory leak was fixed that could be externally triggered in the
  DNSSEC verification code for the ECDSA algorithm.
  [bsc#1203619, CVE-2022-38177, bind-CVE-2022-38177.patch]
  * Memory leaks were fixed that could be externally triggered in the
  DNSSEC verification code for the EdDSA algorithm.
  [bsc#1203620, CVE-2022-38178, bind-CVE-2022-38178.patch]</changelog>
  <changelog author="scabrero@suse.de" date="1669636800">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1674734400">- Security Fix:
  * An UPDATE message flood could cause named to exhaust all
    available memory. This flaw was addressed by adding a new
    update-quota option that controls the maximum number of
    outstanding DNS UPDATE messages that named can hold in a queue
    at any given time (default: 100).
  [bsc#1207471, CVE-2022-3094, bind-CVE-2022-3094.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1687435200">- Security Fix:
  * The overmem cleaning process has been improved, to prevent the
    cache from significantly exceeding the configured
    max-cache-size limit.
  [bsc#1212544, CVE-2023-2828, bind-CVE-2023-2828.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1689076800">- Add dnstap support
  [jsc#PED-4852]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1693483200">- Add libs as requires because they may need to be updated when
  installing bind
  [bsc#1213748]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1695297600">- Security Fix:
  * Previously, sending a specially crafted message over the
    control channel could cause the packet-parsing code to run out
    of available stack memory, causing named to terminate
    unexpectedly. This has been fixed.
  [bsc#1215472, CVE-2023-3341, bind-CVE-2023-3341.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1717675200">- Security Fixes:
  * Validating DNS messages containing a lot of DNSSEC signatures
    could cause excessive CPU load, leading to a denial-of-service
    condition. This has been fixed. (CVE-2023-50387)
    [bsc#1219823, bind-CVE-2023-50387-CVE-2023-50868.patch]
  * Preparing an NSEC3 closest encloser proof could cause excessiv
    CPU load, leading to a denial-of-service condition. This has
    been fixed. (CVE-2023-50868)
    [bsc#1219826, bind-CVE-2023-50387-CVE-2023-50868.patch]
  * Parsing DNS messages with many different names could cause
    excessive CPU load. This has been fixed. (CVE-2023-4408)
    [bsc#1219851, bind-CVE-2023-4408.patch]
  * Specific queries could cause named to crash with an assertion
    failure when nxdomain-redirect was enabled. This has been
    fixed. (CVE-2023-5517)
    [bsc#1219852, bind-CVE-2023-5517.patch]
  * Query patterns that continuously triggered cache database
    maintenance could cause an excessive amount of memory to be
    allocated, exceeding max-cache-size and potentially leading to
    all available memory on the host running named being exhausted
    This has been fixed. (CVE-2023-6516)
    [bsc#1219854, bind-CVE-2023-6516.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1722427200">- Security Fixes:
  * It is possible to craft excessively large numbers of resource
    record types for a given owner name, which has the effect of
    slowing down database processing. This has been addressed by
    adding a configurable limit to the number of records that can
    be stored per name and type in a cache or zone database. The
    default is 100, which can be tuned with the new
    max-types-per-name option. (CVE-2024-1737)
    [bsc#1228256, bind-9.16-CVE-2024-1737.patch]
  * Validating DNS messages signed using the SIG(0) protocol (RFC
    2931) could cause excessive CPU load, leading to a
    denial-of-service condition. Support for SIG(0) message
    validation was removed from this version of named.
    (CVE-2024-1975)
    [bsc#1228257, bind-9.16-CVE-2024-1975.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Limit additional section processing for large RDATA sets.
  When answering queries, don’t add data to the additional
  section if the answer has more than 13 names in the RDATA. This
  limits the number of lookups into the database(s) during a
  single client query, reducing the query-processing load.
  (CVE-2024-11187)
  [bsc#1236596, bind-9.16.6-CVE-2024-11187.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761220800">- Security Fixes:
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379, bind-9.16.6-CVE-2025-40778.patch]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380, bind-9.16.6-CVE-2025-40780.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1775044800">- Fix unbounded NSEC3 iterations when validating referrals to
  unsigned delegations.
  (CVE-2026-1519)
  [bsc#1260805, bind-9.16.6-CVE-2026-1519.patch]</changelog>
</package>
<package pkgid="356500f85afae052d1fd2651fe81bff8b3b690bf1715c3a2dafd2e5608e06060" name="libirs1601" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="150300.22.53.1"/>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642507200">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- When using forwarders, bogus NS records supplied by, or via, those
  forwarders may be cached and used by named if it needs to recurse
  for any reason, causing it to obtain and pass on potentially
  incorrect answers.
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657108800">- Changed ownership of /var/lib/named/master from named:named to
  root:root.
  [bsc#1201247, bind.conf]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Security Fixes:
  * Previously, there was no limit to the number of database lookups
  performed while processing large delegations, which could be abused
  to severely impact the performance of named running as a recursive
  resolver. This has been fixed.
  [bsc#1203614, CVE-2022-2795, bind-CVE-2022-2795.patch]
  * A memory leak was fixed that could be externally triggered in the
  DNSSEC verification code for the ECDSA algorithm.
  [bsc#1203619, CVE-2022-38177, bind-CVE-2022-38177.patch]
  * Memory leaks were fixed that could be externally triggered in the
  DNSSEC verification code for the EdDSA algorithm.
  [bsc#1203620, CVE-2022-38178, bind-CVE-2022-38178.patch]</changelog>
  <changelog author="scabrero@suse.de" date="1669636800">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1674734400">- Security Fix:
  * An UPDATE message flood could cause named to exhaust all
    available memory. This flaw was addressed by adding a new
    update-quota option that controls the maximum number of
    outstanding DNS UPDATE messages that named can hold in a queue
    at any given time (default: 100).
  [bsc#1207471, CVE-2022-3094, bind-CVE-2022-3094.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1687435200">- Security Fix:
  * The overmem cleaning process has been improved, to prevent the
    cache from significantly exceeding the configured
    max-cache-size limit.
  [bsc#1212544, CVE-2023-2828, bind-CVE-2023-2828.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1689076800">- Add dnstap support
  [jsc#PED-4852]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1693483200">- Add libs as requires because they may need to be updated when
  installing bind
  [bsc#1213748]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1695297600">- Security Fix:
  * Previously, sending a specially crafted message over the
    control channel could cause the packet-parsing code to run out
    of available stack memory, causing named to terminate
    unexpectedly. This has been fixed.
  [bsc#1215472, CVE-2023-3341, bind-CVE-2023-3341.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1717675200">- Security Fixes:
  * Validating DNS messages containing a lot of DNSSEC signatures
    could cause excessive CPU load, leading to a denial-of-service
    condition. This has been fixed. (CVE-2023-50387)
    [bsc#1219823, bind-CVE-2023-50387-CVE-2023-50868.patch]
  * Preparing an NSEC3 closest encloser proof could cause excessiv
    CPU load, leading to a denial-of-service condition. This has
    been fixed. (CVE-2023-50868)
    [bsc#1219826, bind-CVE-2023-50387-CVE-2023-50868.patch]
  * Parsing DNS messages with many different names could cause
    excessive CPU load. This has been fixed. (CVE-2023-4408)
    [bsc#1219851, bind-CVE-2023-4408.patch]
  * Specific queries could cause named to crash with an assertion
    failure when nxdomain-redirect was enabled. This has been
    fixed. (CVE-2023-5517)
    [bsc#1219852, bind-CVE-2023-5517.patch]
  * Query patterns that continuously triggered cache database
    maintenance could cause an excessive amount of memory to be
    allocated, exceeding max-cache-size and potentially leading to
    all available memory on the host running named being exhausted
    This has been fixed. (CVE-2023-6516)
    [bsc#1219854, bind-CVE-2023-6516.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1722427200">- Security Fixes:
  * It is possible to craft excessively large numbers of resource
    record types for a given owner name, which has the effect of
    slowing down database processing. This has been addressed by
    adding a configurable limit to the number of records that can
    be stored per name and type in a cache or zone database. The
    default is 100, which can be tuned with the new
    max-types-per-name option. (CVE-2024-1737)
    [bsc#1228256, bind-9.16-CVE-2024-1737.patch]
  * Validating DNS messages signed using the SIG(0) protocol (RFC
    2931) could cause excessive CPU load, leading to a
    denial-of-service condition. Support for SIG(0) message
    validation was removed from this version of named.
    (CVE-2024-1975)
    [bsc#1228257, bind-9.16-CVE-2024-1975.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Limit additional section processing for large RDATA sets.
  When answering queries, don’t add data to the additional
  section if the answer has more than 13 names in the RDATA. This
  limits the number of lookups into the database(s) during a
  single client query, reducing the query-processing load.
  (CVE-2024-11187)
  [bsc#1236596, bind-9.16.6-CVE-2024-11187.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761220800">- Security Fixes:
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379, bind-9.16.6-CVE-2025-40778.patch]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380, bind-9.16.6-CVE-2025-40780.patch]</changelog>
</package>
<package pkgid="fc65ef26fa4051f0d23309e55f73ac121274adced864bfba38ee024c1fdb0c5d" name="libirs1601" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="150300.22.56.1"/>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642507200">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- When using forwarders, bogus NS records supplied by, or via, those
  forwarders may be cached and used by named if it needs to recurse
  for any reason, causing it to obtain and pass on potentially
  incorrect answers.
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657108800">- Changed ownership of /var/lib/named/master from named:named to
  root:root.
  [bsc#1201247, bind.conf]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Security Fixes:
  * Previously, there was no limit to the number of database lookups
  performed while processing large delegations, which could be abused
  to severely impact the performance of named running as a recursive
  resolver. This has been fixed.
  [bsc#1203614, CVE-2022-2795, bind-CVE-2022-2795.patch]
  * A memory leak was fixed that could be externally triggered in the
  DNSSEC verification code for the ECDSA algorithm.
  [bsc#1203619, CVE-2022-38177, bind-CVE-2022-38177.patch]
  * Memory leaks were fixed that could be externally triggered in the
  DNSSEC verification code for the EdDSA algorithm.
  [bsc#1203620, CVE-2022-38178, bind-CVE-2022-38178.patch]</changelog>
  <changelog author="scabrero@suse.de" date="1669636800">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1674734400">- Security Fix:
  * An UPDATE message flood could cause named to exhaust all
    available memory. This flaw was addressed by adding a new
    update-quota option that controls the maximum number of
    outstanding DNS UPDATE messages that named can hold in a queue
    at any given time (default: 100).
  [bsc#1207471, CVE-2022-3094, bind-CVE-2022-3094.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1687435200">- Security Fix:
  * The overmem cleaning process has been improved, to prevent the
    cache from significantly exceeding the configured
    max-cache-size limit.
  [bsc#1212544, CVE-2023-2828, bind-CVE-2023-2828.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1689076800">- Add dnstap support
  [jsc#PED-4852]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1693483200">- Add libs as requires because they may need to be updated when
  installing bind
  [bsc#1213748]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1695297600">- Security Fix:
  * Previously, sending a specially crafted message over the
    control channel could cause the packet-parsing code to run out
    of available stack memory, causing named to terminate
    unexpectedly. This has been fixed.
  [bsc#1215472, CVE-2023-3341, bind-CVE-2023-3341.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1717675200">- Security Fixes:
  * Validating DNS messages containing a lot of DNSSEC signatures
    could cause excessive CPU load, leading to a denial-of-service
    condition. This has been fixed. (CVE-2023-50387)
    [bsc#1219823, bind-CVE-2023-50387-CVE-2023-50868.patch]
  * Preparing an NSEC3 closest encloser proof could cause excessiv
    CPU load, leading to a denial-of-service condition. This has
    been fixed. (CVE-2023-50868)
    [bsc#1219826, bind-CVE-2023-50387-CVE-2023-50868.patch]
  * Parsing DNS messages with many different names could cause
    excessive CPU load. This has been fixed. (CVE-2023-4408)
    [bsc#1219851, bind-CVE-2023-4408.patch]
  * Specific queries could cause named to crash with an assertion
    failure when nxdomain-redirect was enabled. This has been
    fixed. (CVE-2023-5517)
    [bsc#1219852, bind-CVE-2023-5517.patch]
  * Query patterns that continuously triggered cache database
    maintenance could cause an excessive amount of memory to be
    allocated, exceeding max-cache-size and potentially leading to
    all available memory on the host running named being exhausted
    This has been fixed. (CVE-2023-6516)
    [bsc#1219854, bind-CVE-2023-6516.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1722427200">- Security Fixes:
  * It is possible to craft excessively large numbers of resource
    record types for a given owner name, which has the effect of
    slowing down database processing. This has been addressed by
    adding a configurable limit to the number of records that can
    be stored per name and type in a cache or zone database. The
    default is 100, which can be tuned with the new
    max-types-per-name option. (CVE-2024-1737)
    [bsc#1228256, bind-9.16-CVE-2024-1737.patch]
  * Validating DNS messages signed using the SIG(0) protocol (RFC
    2931) could cause excessive CPU load, leading to a
    denial-of-service condition. Support for SIG(0) message
    validation was removed from this version of named.
    (CVE-2024-1975)
    [bsc#1228257, bind-9.16-CVE-2024-1975.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Limit additional section processing for large RDATA sets.
  When answering queries, don’t add data to the additional
  section if the answer has more than 13 names in the RDATA. This
  limits the number of lookups into the database(s) during a
  single client query, reducing the query-processing load.
  (CVE-2024-11187)
  [bsc#1236596, bind-9.16.6-CVE-2024-11187.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761220800">- Security Fixes:
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379, bind-9.16.6-CVE-2025-40778.patch]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380, bind-9.16.6-CVE-2025-40780.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1775044800">- Fix unbounded NSEC3 iterations when validating referrals to
  unsigned delegations.
  (CVE-2026-1519)
  [bsc#1260805, bind-9.16.6-CVE-2026-1519.patch]</changelog>
</package>
<package pkgid="b843de6f8bff4ec9b3586fa6049e8603bc87a7932dccb1d035dd0fc086bdd776" name="libisc1606" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="150300.22.53.1"/>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642507200">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- When using forwarders, bogus NS records supplied by, or via, those
  forwarders may be cached and used by named if it needs to recurse
  for any reason, causing it to obtain and pass on potentially
  incorrect answers.
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657108800">- Changed ownership of /var/lib/named/master from named:named to
  root:root.
  [bsc#1201247, bind.conf]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Security Fixes:
  * Previously, there was no limit to the number of database lookups
  performed while processing large delegations, which could be abused
  to severely impact the performance of named running as a recursive
  resolver. This has been fixed.
  [bsc#1203614, CVE-2022-2795, bind-CVE-2022-2795.patch]
  * A memory leak was fixed that could be externally triggered in the
  DNSSEC verification code for the ECDSA algorithm.
  [bsc#1203619, CVE-2022-38177, bind-CVE-2022-38177.patch]
  * Memory leaks were fixed that could be externally triggered in the
  DNSSEC verification code for the EdDSA algorithm.
  [bsc#1203620, CVE-2022-38178, bind-CVE-2022-38178.patch]</changelog>
  <changelog author="scabrero@suse.de" date="1669636800">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1674734400">- Security Fix:
  * An UPDATE message flood could cause named to exhaust all
    available memory. This flaw was addressed by adding a new
    update-quota option that controls the maximum number of
    outstanding DNS UPDATE messages that named can hold in a queue
    at any given time (default: 100).
  [bsc#1207471, CVE-2022-3094, bind-CVE-2022-3094.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1687435200">- Security Fix:
  * The overmem cleaning process has been improved, to prevent the
    cache from significantly exceeding the configured
    max-cache-size limit.
  [bsc#1212544, CVE-2023-2828, bind-CVE-2023-2828.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1689076800">- Add dnstap support
  [jsc#PED-4852]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1693483200">- Add libs as requires because they may need to be updated when
  installing bind
  [bsc#1213748]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1695297600">- Security Fix:
  * Previously, sending a specially crafted message over the
    control channel could cause the packet-parsing code to run out
    of available stack memory, causing named to terminate
    unexpectedly. This has been fixed.
  [bsc#1215472, CVE-2023-3341, bind-CVE-2023-3341.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1717675200">- Security Fixes:
  * Validating DNS messages containing a lot of DNSSEC signatures
    could cause excessive CPU load, leading to a denial-of-service
    condition. This has been fixed. (CVE-2023-50387)
    [bsc#1219823, bind-CVE-2023-50387-CVE-2023-50868.patch]
  * Preparing an NSEC3 closest encloser proof could cause excessiv
    CPU load, leading to a denial-of-service condition. This has
    been fixed. (CVE-2023-50868)
    [bsc#1219826, bind-CVE-2023-50387-CVE-2023-50868.patch]
  * Parsing DNS messages with many different names could cause
    excessive CPU load. This has been fixed. (CVE-2023-4408)
    [bsc#1219851, bind-CVE-2023-4408.patch]
  * Specific queries could cause named to crash with an assertion
    failure when nxdomain-redirect was enabled. This has been
    fixed. (CVE-2023-5517)
    [bsc#1219852, bind-CVE-2023-5517.patch]
  * Query patterns that continuously triggered cache database
    maintenance could cause an excessive amount of memory to be
    allocated, exceeding max-cache-size and potentially leading to
    all available memory on the host running named being exhausted
    This has been fixed. (CVE-2023-6516)
    [bsc#1219854, bind-CVE-2023-6516.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1722427200">- Security Fixes:
  * It is possible to craft excessively large numbers of resource
    record types for a given owner name, which has the effect of
    slowing down database processing. This has been addressed by
    adding a configurable limit to the number of records that can
    be stored per name and type in a cache or zone database. The
    default is 100, which can be tuned with the new
    max-types-per-name option. (CVE-2024-1737)
    [bsc#1228256, bind-9.16-CVE-2024-1737.patch]
  * Validating DNS messages signed using the SIG(0) protocol (RFC
    2931) could cause excessive CPU load, leading to a
    denial-of-service condition. Support for SIG(0) message
    validation was removed from this version of named.
    (CVE-2024-1975)
    [bsc#1228257, bind-9.16-CVE-2024-1975.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Limit additional section processing for large RDATA sets.
  When answering queries, don’t add data to the additional
  section if the answer has more than 13 names in the RDATA. This
  limits the number of lookups into the database(s) during a
  single client query, reducing the query-processing load.
  (CVE-2024-11187)
  [bsc#1236596, bind-9.16.6-CVE-2024-11187.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761220800">- Security Fixes:
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379, bind-9.16.6-CVE-2025-40778.patch]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380, bind-9.16.6-CVE-2025-40780.patch]</changelog>
</package>
<package pkgid="4354ced83b933f613f0748acecc67bf1aa6e02536b776bfb080db1846de46f8d" name="libisc1606" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="150300.22.56.1"/>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642507200">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- When using forwarders, bogus NS records supplied by, or via, those
  forwarders may be cached and used by named if it needs to recurse
  for any reason, causing it to obtain and pass on potentially
  incorrect answers.
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657108800">- Changed ownership of /var/lib/named/master from named:named to
  root:root.
  [bsc#1201247, bind.conf]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Security Fixes:
  * Previously, there was no limit to the number of database lookups
  performed while processing large delegations, which could be abused
  to severely impact the performance of named running as a recursive
  resolver. This has been fixed.
  [bsc#1203614, CVE-2022-2795, bind-CVE-2022-2795.patch]
  * A memory leak was fixed that could be externally triggered in the
  DNSSEC verification code for the ECDSA algorithm.
  [bsc#1203619, CVE-2022-38177, bind-CVE-2022-38177.patch]
  * Memory leaks were fixed that could be externally triggered in the
  DNSSEC verification code for the EdDSA algorithm.
  [bsc#1203620, CVE-2022-38178, bind-CVE-2022-38178.patch]</changelog>
  <changelog author="scabrero@suse.de" date="1669636800">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1674734400">- Security Fix:
  * An UPDATE message flood could cause named to exhaust all
    available memory. This flaw was addressed by adding a new
    update-quota option that controls the maximum number of
    outstanding DNS UPDATE messages that named can hold in a queue
    at any given time (default: 100).
  [bsc#1207471, CVE-2022-3094, bind-CVE-2022-3094.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1687435200">- Security Fix:
  * The overmem cleaning process has been improved, to prevent the
    cache from significantly exceeding the configured
    max-cache-size limit.
  [bsc#1212544, CVE-2023-2828, bind-CVE-2023-2828.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1689076800">- Add dnstap support
  [jsc#PED-4852]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1693483200">- Add libs as requires because they may need to be updated when
  installing bind
  [bsc#1213748]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1695297600">- Security Fix:
  * Previously, sending a specially crafted message over the
    control channel could cause the packet-parsing code to run out
    of available stack memory, causing named to terminate
    unexpectedly. This has been fixed.
  [bsc#1215472, CVE-2023-3341, bind-CVE-2023-3341.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1717675200">- Security Fixes:
  * Validating DNS messages containing a lot of DNSSEC signatures
    could cause excessive CPU load, leading to a denial-of-service
    condition. This has been fixed. (CVE-2023-50387)
    [bsc#1219823, bind-CVE-2023-50387-CVE-2023-50868.patch]
  * Preparing an NSEC3 closest encloser proof could cause excessiv
    CPU load, leading to a denial-of-service condition. This has
    been fixed. (CVE-2023-50868)
    [bsc#1219826, bind-CVE-2023-50387-CVE-2023-50868.patch]
  * Parsing DNS messages with many different names could cause
    excessive CPU load. This has been fixed. (CVE-2023-4408)
    [bsc#1219851, bind-CVE-2023-4408.patch]
  * Specific queries could cause named to crash with an assertion
    failure when nxdomain-redirect was enabled. This has been
    fixed. (CVE-2023-5517)
    [bsc#1219852, bind-CVE-2023-5517.patch]
  * Query patterns that continuously triggered cache database
    maintenance could cause an excessive amount of memory to be
    allocated, exceeding max-cache-size and potentially leading to
    all available memory on the host running named being exhausted
    This has been fixed. (CVE-2023-6516)
    [bsc#1219854, bind-CVE-2023-6516.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1722427200">- Security Fixes:
  * It is possible to craft excessively large numbers of resource
    record types for a given owner name, which has the effect of
    slowing down database processing. This has been addressed by
    adding a configurable limit to the number of records that can
    be stored per name and type in a cache or zone database. The
    default is 100, which can be tuned with the new
    max-types-per-name option. (CVE-2024-1737)
    [bsc#1228256, bind-9.16-CVE-2024-1737.patch]
  * Validating DNS messages signed using the SIG(0) protocol (RFC
    2931) could cause excessive CPU load, leading to a
    denial-of-service condition. Support for SIG(0) message
    validation was removed from this version of named.
    (CVE-2024-1975)
    [bsc#1228257, bind-9.16-CVE-2024-1975.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Limit additional section processing for large RDATA sets.
  When answering queries, don’t add data to the additional
  section if the answer has more than 13 names in the RDATA. This
  limits the number of lookups into the database(s) during a
  single client query, reducing the query-processing load.
  (CVE-2024-11187)
  [bsc#1236596, bind-9.16.6-CVE-2024-11187.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761220800">- Security Fixes:
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379, bind-9.16.6-CVE-2025-40778.patch]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380, bind-9.16.6-CVE-2025-40780.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1775044800">- Fix unbounded NSEC3 iterations when validating referrals to
  unsigned delegations.
  (CVE-2026-1519)
  [bsc#1260805, bind-9.16.6-CVE-2026-1519.patch]</changelog>
</package>
<package pkgid="0b6670a48e592600f4e81903caa11f402c1311b4f39e973f44e4caadacd6a593" name="libisccfg1600" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="150300.22.53.1"/>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642507200">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- When using forwarders, bogus NS records supplied by, or via, those
  forwarders may be cached and used by named if it needs to recurse
  for any reason, causing it to obtain and pass on potentially
  incorrect answers.
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657108800">- Changed ownership of /var/lib/named/master from named:named to
  root:root.
  [bsc#1201247, bind.conf]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Security Fixes:
  * Previously, there was no limit to the number of database lookups
  performed while processing large delegations, which could be abused
  to severely impact the performance of named running as a recursive
  resolver. This has been fixed.
  [bsc#1203614, CVE-2022-2795, bind-CVE-2022-2795.patch]
  * A memory leak was fixed that could be externally triggered in the
  DNSSEC verification code for the ECDSA algorithm.
  [bsc#1203619, CVE-2022-38177, bind-CVE-2022-38177.patch]
  * Memory leaks were fixed that could be externally triggered in the
  DNSSEC verification code for the EdDSA algorithm.
  [bsc#1203620, CVE-2022-38178, bind-CVE-2022-38178.patch]</changelog>
  <changelog author="scabrero@suse.de" date="1669636800">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1674734400">- Security Fix:
  * An UPDATE message flood could cause named to exhaust all
    available memory. This flaw was addressed by adding a new
    update-quota option that controls the maximum number of
    outstanding DNS UPDATE messages that named can hold in a queue
    at any given time (default: 100).
  [bsc#1207471, CVE-2022-3094, bind-CVE-2022-3094.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1687435200">- Security Fix:
  * The overmem cleaning process has been improved, to prevent the
    cache from significantly exceeding the configured
    max-cache-size limit.
  [bsc#1212544, CVE-2023-2828, bind-CVE-2023-2828.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1689076800">- Add dnstap support
  [jsc#PED-4852]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1693483200">- Add libs as requires because they may need to be updated when
  installing bind
  [bsc#1213748]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1695297600">- Security Fix:
  * Previously, sending a specially crafted message over the
    control channel could cause the packet-parsing code to run out
    of available stack memory, causing named to terminate
    unexpectedly. This has been fixed.
  [bsc#1215472, CVE-2023-3341, bind-CVE-2023-3341.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1717675200">- Security Fixes:
  * Validating DNS messages containing a lot of DNSSEC signatures
    could cause excessive CPU load, leading to a denial-of-service
    condition. This has been fixed. (CVE-2023-50387)
    [bsc#1219823, bind-CVE-2023-50387-CVE-2023-50868.patch]
  * Preparing an NSEC3 closest encloser proof could cause excessiv
    CPU load, leading to a denial-of-service condition. This has
    been fixed. (CVE-2023-50868)
    [bsc#1219826, bind-CVE-2023-50387-CVE-2023-50868.patch]
  * Parsing DNS messages with many different names could cause
    excessive CPU load. This has been fixed. (CVE-2023-4408)
    [bsc#1219851, bind-CVE-2023-4408.patch]
  * Specific queries could cause named to crash with an assertion
    failure when nxdomain-redirect was enabled. This has been
    fixed. (CVE-2023-5517)
    [bsc#1219852, bind-CVE-2023-5517.patch]
  * Query patterns that continuously triggered cache database
    maintenance could cause an excessive amount of memory to be
    allocated, exceeding max-cache-size and potentially leading to
    all available memory on the host running named being exhausted
    This has been fixed. (CVE-2023-6516)
    [bsc#1219854, bind-CVE-2023-6516.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1722427200">- Security Fixes:
  * It is possible to craft excessively large numbers of resource
    record types for a given owner name, which has the effect of
    slowing down database processing. This has been addressed by
    adding a configurable limit to the number of records that can
    be stored per name and type in a cache or zone database. The
    default is 100, which can be tuned with the new
    max-types-per-name option. (CVE-2024-1737)
    [bsc#1228256, bind-9.16-CVE-2024-1737.patch]
  * Validating DNS messages signed using the SIG(0) protocol (RFC
    2931) could cause excessive CPU load, leading to a
    denial-of-service condition. Support for SIG(0) message
    validation was removed from this version of named.
    (CVE-2024-1975)
    [bsc#1228257, bind-9.16-CVE-2024-1975.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Limit additional section processing for large RDATA sets.
  When answering queries, don’t add data to the additional
  section if the answer has more than 13 names in the RDATA. This
  limits the number of lookups into the database(s) during a
  single client query, reducing the query-processing load.
  (CVE-2024-11187)
  [bsc#1236596, bind-9.16.6-CVE-2024-11187.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761220800">- Security Fixes:
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379, bind-9.16.6-CVE-2025-40778.patch]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380, bind-9.16.6-CVE-2025-40780.patch]</changelog>
</package>
<package pkgid="f683e83196fef835c03d85e1372d211610939fcbff2b0599fa4f10eb08601a7e" name="libisccfg1600" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="150300.22.56.1"/>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642507200">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- When using forwarders, bogus NS records supplied by, or via, those
  forwarders may be cached and used by named if it needs to recurse
  for any reason, causing it to obtain and pass on potentially
  incorrect answers.
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657108800">- Changed ownership of /var/lib/named/master from named:named to
  root:root.
  [bsc#1201247, bind.conf]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Security Fixes:
  * Previously, there was no limit to the number of database lookups
  performed while processing large delegations, which could be abused
  to severely impact the performance of named running as a recursive
  resolver. This has been fixed.
  [bsc#1203614, CVE-2022-2795, bind-CVE-2022-2795.patch]
  * A memory leak was fixed that could be externally triggered in the
  DNSSEC verification code for the ECDSA algorithm.
  [bsc#1203619, CVE-2022-38177, bind-CVE-2022-38177.patch]
  * Memory leaks were fixed that could be externally triggered in the
  DNSSEC verification code for the EdDSA algorithm.
  [bsc#1203620, CVE-2022-38178, bind-CVE-2022-38178.patch]</changelog>
  <changelog author="scabrero@suse.de" date="1669636800">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1674734400">- Security Fix:
  * An UPDATE message flood could cause named to exhaust all
    available memory. This flaw was addressed by adding a new
    update-quota option that controls the maximum number of
    outstanding DNS UPDATE messages that named can hold in a queue
    at any given time (default: 100).
  [bsc#1207471, CVE-2022-3094, bind-CVE-2022-3094.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1687435200">- Security Fix:
  * The overmem cleaning process has been improved, to prevent the
    cache from significantly exceeding the configured
    max-cache-size limit.
  [bsc#1212544, CVE-2023-2828, bind-CVE-2023-2828.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1689076800">- Add dnstap support
  [jsc#PED-4852]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1693483200">- Add libs as requires because they may need to be updated when
  installing bind
  [bsc#1213748]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1695297600">- Security Fix:
  * Previously, sending a specially crafted message over the
    control channel could cause the packet-parsing code to run out
    of available stack memory, causing named to terminate
    unexpectedly. This has been fixed.
  [bsc#1215472, CVE-2023-3341, bind-CVE-2023-3341.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1717675200">- Security Fixes:
  * Validating DNS messages containing a lot of DNSSEC signatures
    could cause excessive CPU load, leading to a denial-of-service
    condition. This has been fixed. (CVE-2023-50387)
    [bsc#1219823, bind-CVE-2023-50387-CVE-2023-50868.patch]
  * Preparing an NSEC3 closest encloser proof could cause excessiv
    CPU load, leading to a denial-of-service condition. This has
    been fixed. (CVE-2023-50868)
    [bsc#1219826, bind-CVE-2023-50387-CVE-2023-50868.patch]
  * Parsing DNS messages with many different names could cause
    excessive CPU load. This has been fixed. (CVE-2023-4408)
    [bsc#1219851, bind-CVE-2023-4408.patch]
  * Specific queries could cause named to crash with an assertion
    failure when nxdomain-redirect was enabled. This has been
    fixed. (CVE-2023-5517)
    [bsc#1219852, bind-CVE-2023-5517.patch]
  * Query patterns that continuously triggered cache database
    maintenance could cause an excessive amount of memory to be
    allocated, exceeding max-cache-size and potentially leading to
    all available memory on the host running named being exhausted
    This has been fixed. (CVE-2023-6516)
    [bsc#1219854, bind-CVE-2023-6516.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1722427200">- Security Fixes:
  * It is possible to craft excessively large numbers of resource
    record types for a given owner name, which has the effect of
    slowing down database processing. This has been addressed by
    adding a configurable limit to the number of records that can
    be stored per name and type in a cache or zone database. The
    default is 100, which can be tuned with the new
    max-types-per-name option. (CVE-2024-1737)
    [bsc#1228256, bind-9.16-CVE-2024-1737.patch]
  * Validating DNS messages signed using the SIG(0) protocol (RFC
    2931) could cause excessive CPU load, leading to a
    denial-of-service condition. Support for SIG(0) message
    validation was removed from this version of named.
    (CVE-2024-1975)
    [bsc#1228257, bind-9.16-CVE-2024-1975.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1738238400">- Limit additional section processing for large RDATA sets.
  When answering queries, don’t add data to the additional
  section if the answer has more than 13 names in the RDATA. This
  limits the number of lookups into the database(s) during a
  single client query, reducing the query-processing load.
  (CVE-2024-11187)
  [bsc#1236596, bind-9.16.6-CVE-2024-11187.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1761220800">- Security Fixes:
  * Address various spoofing attacks.
    [CVE-2025-40778, bsc#1252379, bind-9.16.6-CVE-2025-40778.patch]
  * Cache-poisoning due to weak pseudo-random number generator.
    [CVE-2025-40780, bsc#1252380, bind-9.16.6-CVE-2025-40780.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1775044800">- Fix unbounded NSEC3 iterations when validating referrals to
  unsigned delegations.
  (CVE-2026-1519)
  [bsc#1260805, bind-9.16.6-CVE-2026-1519.patch]</changelog>
</package>
<package pkgid="03d72d49c0cf7265446e2fa14c32935b6a757666c1b1cbc562e6b5dab87657a9" name="libiterm1" arch="x86_64">
  <version epoch="0" ver="0.5.20040304" rel="150000.5.9.1"/>
  <changelog author="pgajdos@suse.com" date="1362484800">- builds with automake 1.13
  * automake-1.13.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1406548800">- README.SuSE renamed to README.SUSE [bnc#889032] (internal)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414843200">- Switch to pkgconfig() buildrequires instead of using
  metapackage xorg-x11-devel</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- implict-ptsname-decl.patch: fix implicit declaration of ptsname with
  glibc &gt;= 2.24</changelog>
  <changelog author="bwiedemann@suse.com" date="1493467200">- call gzip -n to make build fully reproducible</changelog>
  <changelog author="schwab@suse.de" date="1502884800">- Prerequire group(tty)</changelog>
  <changelog author="dimstar@opensuse.org" date="1505822400">- Conflict libiterm1 with terminfo-iterm: terminfo-iterm is an
  alternative to xiterm, and the conflict is meant to be.</changelog>
  <changelog author="schwab@suse.de" date="1565265600">- stropts.patch: remove use of obsolete XSI STREAMS interface</changelog>
  <changelog author="pgajdos@suse.com" date="1599048000">- added patches
  fix do not enable application keypad mode [bsc#1158271]
  + xiterm-no-keypad-application-mode.patch
- big thanks to Stefan Hundhammer</changelog>
  <changelog author="pgajdos@suse.com" date="1761048000">- use %license tag for xiterm [bsc#1252221]</changelog>
</package>
<package pkgid="cd129b838953fd70c84384f48d73cdeae29315368b4cb244ab21517a2a016013" name="libitm1" arch="x86_64">
  <version epoch="0" ver="14.3.0+git11799" rel="150000.1.11.1"/>
  <changelog author="rguenther@suse.com" date="1728475200">- Update to gcc-14 branch head, 4af44f2cf7d281f3e4f3957ef, git10750
  * includes libstdc++6 fix for parsing tzdata 2024b [gcc#116657]
- Add gcc14-pr116629.patch to fix ICE with LTO building openvino
  on aarch64 [boo#1230262]</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1732968000">- Add loongarch64 to asan_arch, atomic_arch,
  itm_arch, lsan_arch, tsan_arch and ubsan_arch
- Add larchintrin.h, lasxintrin.h and lsxintrin.h
  headers to gccXY main package in %files section
- Set build_primary_64bit to 1 for loongarch64</changelog>
  <changelog author="adrian@suse.de" date="1733140800">- disable go on loongarch64 for now</changelog>
  <changelog author="mardnh@gmx.de" date="1736078400">- Switch to glibc based cross-compiler for target hppa</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Define ALT_CC_UNDER_TEST and ALT_CXX_UNDER_TEST for compat tests</changelog>
  <changelog author="rguenther@suse.com" date="1738152000">- For cross compilers require the same or newer binutils, newlib
  or cross-glibc that was used at build time.  [bsc#1232526]</changelog>
  <changelog author="rguenther@suse.com" date="1738843200">- Adjust cross compiler requirements to use %requires_ge
- Fix condition on whether to enable plugins or JIT support to
  not check sle_version which is not defined in SLFO but to check
  is_opensuse and suse_version instead.
- Add gcc14-pr118780.patch to make the SLFO config work.</changelog>
  <changelog author="rguenther@suse.com" date="1740052800">- Update to gcc-14 branch head, 9ffecde121af883b60bbe60d0, git11321
  * fixes reported ICE in [bsc#1237442]
- Drop gcc14-pr116629.patch now backported to the branch.</changelog>
  <changelog author="rguenther@suse.com" date="1741608000">- Disable profiling during build when %want_reproducible_builds is set
  [bsc#1238491]</changelog>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
</package>
<package pkgid="dcdf089b147794a458d17a2d606f46f7db78c8044006efd36bb1fad9fb428baf" name="libitm1" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.3.3"/>
  <changelog author="rguenther@suse.com" date="1743163200">- Update to GCC trunk head, 15.0.1+git9001
  * includes -msplit-patch-nops required for user-space livepatching
    on powerpc
  * includes fix for Ada build with --enable-host-pie
- Adjust for removed avx10_2roundingintrin.h intrinsic header.
- Build GCC executables PIE on SLE.  [bsc#1239938]</changelog>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="ade91a92f71e80a142c68f9508c42174a04e2713a4f1c35e25dd5603d594dff0" name="libitm1" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.6.1"/>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
</package>
<package pkgid="8fdb0815e4e5de60ced569eacba30a10a95d5a0884207b522b315ab00f55478a" name="libitm1" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.9.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc14-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="d9f42b68b0f9e6ec4857a1858079b5385f905d83775b7d1819321e277c64e5e5" name="libitm1-32bit" arch="x86_64">
  <version epoch="0" ver="14.3.0+git11799" rel="150000.1.11.1"/>
  <changelog author="rguenther@suse.com" date="1728475200">- Update to gcc-14 branch head, 4af44f2cf7d281f3e4f3957ef, git10750
  * includes libstdc++6 fix for parsing tzdata 2024b [gcc#116657]
- Add gcc14-pr116629.patch to fix ICE with LTO building openvino
  on aarch64 [boo#1230262]</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1732968000">- Add loongarch64 to asan_arch, atomic_arch,
  itm_arch, lsan_arch, tsan_arch and ubsan_arch
- Add larchintrin.h, lasxintrin.h and lsxintrin.h
  headers to gccXY main package in %files section
- Set build_primary_64bit to 1 for loongarch64</changelog>
  <changelog author="adrian@suse.de" date="1733140800">- disable go on loongarch64 for now</changelog>
  <changelog author="mardnh@gmx.de" date="1736078400">- Switch to glibc based cross-compiler for target hppa</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Define ALT_CC_UNDER_TEST and ALT_CXX_UNDER_TEST for compat tests</changelog>
  <changelog author="rguenther@suse.com" date="1738152000">- For cross compilers require the same or newer binutils, newlib
  or cross-glibc that was used at build time.  [bsc#1232526]</changelog>
  <changelog author="rguenther@suse.com" date="1738843200">- Adjust cross compiler requirements to use %requires_ge
- Fix condition on whether to enable plugins or JIT support to
  not check sle_version which is not defined in SLFO but to check
  is_opensuse and suse_version instead.
- Add gcc14-pr118780.patch to make the SLFO config work.</changelog>
  <changelog author="rguenther@suse.com" date="1740052800">- Update to gcc-14 branch head, 9ffecde121af883b60bbe60d0, git11321
  * fixes reported ICE in [bsc#1237442]
- Drop gcc14-pr116629.patch now backported to the branch.</changelog>
  <changelog author="rguenther@suse.com" date="1741608000">- Disable profiling during build when %want_reproducible_builds is set
  [bsc#1238491]</changelog>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
</package>
<package pkgid="31b832258c561e7e4c3f2e25333ba3337c9f55d2a7fbea6dea7c2c373a36e6b5" name="libitm1-32bit" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.3.3"/>
  <changelog author="rguenther@suse.com" date="1743163200">- Update to GCC trunk head, 15.0.1+git9001
  * includes -msplit-patch-nops required for user-space livepatching
    on powerpc
  * includes fix for Ada build with --enable-host-pie
- Adjust for removed avx10_2roundingintrin.h intrinsic header.
- Build GCC executables PIE on SLE.  [bsc#1239938]</changelog>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="284b4584d1a580138601f157cad1f021958adc43d25fc034b80832864a15bc27" name="libitm1-32bit" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.6.1"/>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
</package>
<package pkgid="a67faf801df7c6da4e06348222fa34c67cfce59458ab62e4ab8def75bb7fd650" name="libitm1-32bit" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.9.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc14-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="6c71f862228c995aa62b73844a996d8e3374d6d0b5e16604defe46409b100f4e" name="libjasper4" arch="x86_64">
  <version epoch="0" ver="2.0.14" rel="150000.3.37.1"/>
  <changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
  <changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
  <changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.
  * bsc#1010960, CVE-2016-9387: jas_seq.c:90: jas_matrix&lt;= yend'
    failed.</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Upgrade to 2.0.14
  * Soname and package name change libjasper1 to libjasper4
  * Security fixes:
    + CVE-2016-9557 jasper: Signed integer overflow in jas_image.c
- Removed patches:
  * jasper-1.900.1-uninitialized.patch
    + not needed any more
  * jasper-CVE-2016-10251.patch
  * jasper-CVE-2016-8654.patch
  * jasper-CVE-2016-9262.patch
  * jasper-CVE-2016-9395.patch
  * jasper-CVE-2016-9560.patch
  * jasper-CVE-2016-9583.patch
  * jasper-CVE-2016-9591.patch
  * jasper-CVE-2016-9600.patch
  * jasper-CVE-2017-1000050.patch
  * jasper-CVE-2017-5498.patch
  * jasper-CVE-2017-6850.patch
    + Fixed upstream
- Added patches:
  * 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
    + fix assertion failure JPC_NOMINALGAIN() which can be caused
    by a crafted JP2 file.
  * 0001-Added-a-fix-from-nrusch-to-allow-JasPer-to-be-build-.patch
    + allow JasPer to be build with CMake 2.x as well as CMake 3.x.</changelog>
  <changelog author="fstrba@suse.com" date="1522324801">- Added patch:
  * jasper-CVE-2018-9055.patch
    + fix CVE-2018-9055, bsc#1087020: jasper: denial of service via
    a reachable assertion in the function jpc_firstone in
    libjasper/jpc/jpc_math.c.</changelog>
  <changelog author="mvetter@suse.com" date="1552392000">- bsc#1117511 CVE-2018-19539 Fix access violation in jas_image_readcmpt:
  * Add jasper-CVE-2018-19539.patch</changelog>
  <changelog author="mvetter@suse.com" date="1553860800">- bsc#1117505 CVE-2018-19542 Fix NULL pointer dereference jp2_decode:
  Add jasper-CVE-2018-19542.patch
- bsc#1010783 CVE-2016-9396 Fix reachable assertion in jpc_cox_getcompparms:
  * Rename 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
  to jasper-CVE-2016-9396.patch</changelog>
  <changelog author="mvetter@suse.com" date="1559822400">- bsc#1117508 CVE-2018-19540: Fix heap based overflow in jas_icctxtdesc_input
  Add jasper-CVE-2018-19540.patch: Make sure asclen is at least 1
- bsc#1117507 CVE-2018-19541: Fix heap based overread in jas_image_depalettize
  Add jasper-CVE-2018-19541.patch: Check number of lutents</changelog>
  <changelog author="adam.majer@suse.de" date="1569844800">- jasper-CVE-2018-19541.patch: verify color palette information
  in j2 files when it's read from the file as per specifications
  of JPEG2000. (bsc#1117507)</changelog>
  <changelog author="mvetter@suse.com" date="1584446400">- bsc#1092115 CVE-2018-9154: Fix possible denial of service
  Add jasper-CVE-2018-9154.patch: dont abort in jpc_dec_process_sot()</changelog>
  <changelog author="mvetter@suse.com" date="1597320000">- bsc#1010980 CVE-2016-9399: Fix assert in calcstepsizes
  Add jasper-CVE-2016-9399.patch
- bsc#1020451 CVE-2017-5499: Validate component depth bit
  Add jasper-CVE-2017-5499.patch
- bsc#1020456 CVE-2017-5503, bsc#1020458 CVE-2017-5504, bsc#1020460 CVE-2017-5505:
  Check bounds in jas_seq2d_bindsub()
  Add jasper-CVE-2017-5503-CVE-2017-5504-CVE-2017-5505.patch</changelog>
  <changelog author="mvetter@suse.com" date="1597665600">- bsc#1120807 CVE-2018-20570: Fix heap based buffer over-read in jp2_encode
  Add jasper-CVE-2018-20570.patch
- bsc#1120805 CVE-2018-20622: Fix memory leak in jas_malloc.c
  Add jasper-CVE-2018-20622.patch
- bsc#1117328 CVE-2018-19543, bsc#1045450 CVE-2017-9782: Fix numchans mixup
  Add jasper-CVE-2018-19543-CVE-2017-9782.patch
- bsc#1115637 CVE-2018-19139: Fix mem leaks by registering jpc_unk_destroyparms
  Add jasper-CVE-2018-19139.patch
- bsc#1114498 CVE-2018-18873: Fix null pointer deref in ras_putdatastd
  Add jasper-CVE-2018-18873.patch
- bsc#1088278 CVE-2018-9252: Fix reachable assertion in jpc_abstorelstepsize
  Add jasper-CVE-2018-9252.patch
- bsc#1057152 CVE-2017-14132: Fix heap base overflow in by checking components
  Add jasper-CVE-2017-14132.patch</changelog>
  <changelog author="mvetter@suse.com" date="1598443200">- bsc#1010979 CVE-2016-9398: Use new fix from upstream where we
  actually check for allowed value range instead of just negating
  Add jasper-CVE-2016-9398-upstream.patch</changelog>
  <changelog author="mvetter@suse.com" date="1612785600">- bsc#1179748 CVE-2020-27828: Fix heap overflow by checking maxrlvls
  Add jasper-CVE-2020-27828.patch
- bsc#1181483 CVE-2021-3272: Fix heap overflow by ensuring number
  of channels matches image components
  Add jasper-CVE-2021-3272.patch</changelog>
  <changelog author="mvetter@suse.com" date="1643803200">- bsc#1188437 CVE-2021-27845: Fix divide-by-zery in cp_create()
  Add jasper-CVE-2021-27845.patch</changelog>
  <changelog author="mvetter@suse.com" date="1650542400">- bsc#1184757 CVE-2021-3467: Fix NULL pointer deref in jp2_decode()
  Add jasper-CVE-2021-3467.patch
- bsc#1184798 CVE-2021-3443: Fix NULL pointer derefin jp2_decode()
  Add jasper-CVE-2021-3443.patch
- bsc#1182104 CVE-2021-26927: Fix NULL pointer deref in jp2_decode()
  bsc#1182105 CVE-2021-26926: Fix Out of bounds read in jp2_decode()
  Add jasper-CVE-2021-26926-CVE-2021-26927.patch</changelog>
  <changelog author="mvetter@suse.com" date="1663329600">- security update:
  * CVE-2022-2963 [bsc#1202642]
    + jasper-CVE-2022-2963.patch</changelog>
  <changelog author="mvetter@suse.com" date="1705320000">- bsc#1218802 CVE-2023-51257:
  Fix invalid memory write on jas_icctxt_input()
  Add jasper-CVE-CVE-2023-51257.patch</changelog>
  <changelog author="mvetter@suse.com" date="1713528000">- bsc#1223155 CVE-2024-31744:
  Add missing check to jpc_dec_process_sod()
  Add jasper-CVE-2024-31744.patch</changelog>
  <changelog author="mvetter@suse.com" date="1755259200">- bsc#1247904 CVE-2025-8835:
  Fix NULL pointer dereference in function jas_image_chclrspc
  Add jasper-CVE-2025-8835.patch
- bsc#1247902 CVE-2025-8836:
  Fix assertion failure in the jpc_floorlog2 function
  Add jasper-CVE-2025-8836.patch
- bsc#1247901 CVE-2025-8837:
  Fix use-after-free in function jpc_dec_dump
  Add jasper-CVE-2025-8837.patch</changelog>
</package>
<package pkgid="6b7587cf5f30da5efaa6b0e187fa7012c24d9e68a812382c55662ce3c6bff0ed" name="libjasper4" arch="x86_64">
  <version epoch="0" ver="2.0.14" rel="150000.3.40.1"/>
  <changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
  <changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.
  * bsc#1010960, CVE-2016-9387: jas_seq.c:90: jas_matrix&lt;= yend'
    failed.</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Upgrade to 2.0.14
  * Soname and package name change libjasper1 to libjasper4
  * Security fixes:
    + CVE-2016-9557 jasper: Signed integer overflow in jas_image.c
- Removed patches:
  * jasper-1.900.1-uninitialized.patch
    + not needed any more
  * jasper-CVE-2016-10251.patch
  * jasper-CVE-2016-8654.patch
  * jasper-CVE-2016-9262.patch
  * jasper-CVE-2016-9395.patch
  * jasper-CVE-2016-9560.patch
  * jasper-CVE-2016-9583.patch
  * jasper-CVE-2016-9591.patch
  * jasper-CVE-2016-9600.patch
  * jasper-CVE-2017-1000050.patch
  * jasper-CVE-2017-5498.patch
  * jasper-CVE-2017-6850.patch
    + Fixed upstream
- Added patches:
  * 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
    + fix assertion failure JPC_NOMINALGAIN() which can be caused
    by a crafted JP2 file.
  * 0001-Added-a-fix-from-nrusch-to-allow-JasPer-to-be-build-.patch
    + allow JasPer to be build with CMake 2.x as well as CMake 3.x.</changelog>
  <changelog author="fstrba@suse.com" date="1522324801">- Added patch:
  * jasper-CVE-2018-9055.patch
    + fix CVE-2018-9055, bsc#1087020: jasper: denial of service via
    a reachable assertion in the function jpc_firstone in
    libjasper/jpc/jpc_math.c.</changelog>
  <changelog author="mvetter@suse.com" date="1552392000">- bsc#1117511 CVE-2018-19539 Fix access violation in jas_image_readcmpt:
  * Add jasper-CVE-2018-19539.patch</changelog>
  <changelog author="mvetter@suse.com" date="1553860800">- bsc#1117505 CVE-2018-19542 Fix NULL pointer dereference jp2_decode:
  Add jasper-CVE-2018-19542.patch
- bsc#1010783 CVE-2016-9396 Fix reachable assertion in jpc_cox_getcompparms:
  * Rename 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
  to jasper-CVE-2016-9396.patch</changelog>
  <changelog author="mvetter@suse.com" date="1559822400">- bsc#1117508 CVE-2018-19540: Fix heap based overflow in jas_icctxtdesc_input
  Add jasper-CVE-2018-19540.patch: Make sure asclen is at least 1
- bsc#1117507 CVE-2018-19541: Fix heap based overread in jas_image_depalettize
  Add jasper-CVE-2018-19541.patch: Check number of lutents</changelog>
  <changelog author="adam.majer@suse.de" date="1569844800">- jasper-CVE-2018-19541.patch: verify color palette information
  in j2 files when it's read from the file as per specifications
  of JPEG2000. (bsc#1117507)</changelog>
  <changelog author="mvetter@suse.com" date="1584446400">- bsc#1092115 CVE-2018-9154: Fix possible denial of service
  Add jasper-CVE-2018-9154.patch: dont abort in jpc_dec_process_sot()</changelog>
  <changelog author="mvetter@suse.com" date="1597320000">- bsc#1010980 CVE-2016-9399: Fix assert in calcstepsizes
  Add jasper-CVE-2016-9399.patch
- bsc#1020451 CVE-2017-5499: Validate component depth bit
  Add jasper-CVE-2017-5499.patch
- bsc#1020456 CVE-2017-5503, bsc#1020458 CVE-2017-5504, bsc#1020460 CVE-2017-5505:
  Check bounds in jas_seq2d_bindsub()
  Add jasper-CVE-2017-5503-CVE-2017-5504-CVE-2017-5505.patch</changelog>
  <changelog author="mvetter@suse.com" date="1597665600">- bsc#1120807 CVE-2018-20570: Fix heap based buffer over-read in jp2_encode
  Add jasper-CVE-2018-20570.patch
- bsc#1120805 CVE-2018-20622: Fix memory leak in jas_malloc.c
  Add jasper-CVE-2018-20622.patch
- bsc#1117328 CVE-2018-19543, bsc#1045450 CVE-2017-9782: Fix numchans mixup
  Add jasper-CVE-2018-19543-CVE-2017-9782.patch
- bsc#1115637 CVE-2018-19139: Fix mem leaks by registering jpc_unk_destroyparms
  Add jasper-CVE-2018-19139.patch
- bsc#1114498 CVE-2018-18873: Fix null pointer deref in ras_putdatastd
  Add jasper-CVE-2018-18873.patch
- bsc#1088278 CVE-2018-9252: Fix reachable assertion in jpc_abstorelstepsize
  Add jasper-CVE-2018-9252.patch
- bsc#1057152 CVE-2017-14132: Fix heap base overflow in by checking components
  Add jasper-CVE-2017-14132.patch</changelog>
  <changelog author="mvetter@suse.com" date="1598443200">- bsc#1010979 CVE-2016-9398: Use new fix from upstream where we
  actually check for allowed value range instead of just negating
  Add jasper-CVE-2016-9398-upstream.patch</changelog>
  <changelog author="mvetter@suse.com" date="1612785600">- bsc#1179748 CVE-2020-27828: Fix heap overflow by checking maxrlvls
  Add jasper-CVE-2020-27828.patch
- bsc#1181483 CVE-2021-3272: Fix heap overflow by ensuring number
  of channels matches image components
  Add jasper-CVE-2021-3272.patch</changelog>
  <changelog author="mvetter@suse.com" date="1643803200">- bsc#1188437 CVE-2021-27845: Fix divide-by-zery in cp_create()
  Add jasper-CVE-2021-27845.patch</changelog>
  <changelog author="mvetter@suse.com" date="1650542400">- bsc#1184757 CVE-2021-3467: Fix NULL pointer deref in jp2_decode()
  Add jasper-CVE-2021-3467.patch
- bsc#1184798 CVE-2021-3443: Fix NULL pointer derefin jp2_decode()
  Add jasper-CVE-2021-3443.patch
- bsc#1182104 CVE-2021-26927: Fix NULL pointer deref in jp2_decode()
  bsc#1182105 CVE-2021-26926: Fix Out of bounds read in jp2_decode()
  Add jasper-CVE-2021-26926-CVE-2021-26927.patch</changelog>
  <changelog author="mvetter@suse.com" date="1663329600">- security update:
  * CVE-2022-2963 [bsc#1202642]
    + jasper-CVE-2022-2963.patch</changelog>
  <changelog author="mvetter@suse.com" date="1705320000">- bsc#1218802 CVE-2023-51257:
  Fix invalid memory write on jas_icctxt_input()
  Add jasper-CVE-CVE-2023-51257.patch</changelog>
  <changelog author="mvetter@suse.com" date="1713528000">- bsc#1223155 CVE-2024-31744:
  Add missing check to jpc_dec_process_sod()
  Add jasper-CVE-2024-31744.patch</changelog>
  <changelog author="mvetter@suse.com" date="1755259200">- bsc#1247904 CVE-2025-8835:
  Fix NULL pointer dereference in function jas_image_chclrspc
  Add jasper-CVE-2025-8835.patch
- bsc#1247902 CVE-2025-8836:
  Fix assertion failure in the jpc_floorlog2 function
  Add jasper-CVE-2025-8836.patch
- bsc#1247901 CVE-2025-8837:
  Fix use-after-free in function jpc_dec_dump
  Add jasper-CVE-2025-8837.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1760702400">- use %license tag [bsc#1252155]</changelog>
</package>
<package pkgid="b705fb613d779e58bd622a5b10719fa7b461c997f26f58460134b4724f8587da" name="libjavascriptcoregtk-4_0-18" arch="x86_64">
  <version epoch="0" ver="2.48.2" rel="150600.12.40.2"/>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213,
    CVE-2024-23271.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834, CVE-2024-27808, CVE-2024-27820,
    CVE-2024-27833.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843, CVE-2024-54658.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
  <changelog author="mgorse@suse.com" date="1723118400">- Add CVE fixes:
  + webkit2gtk3-CVE-2024-40776.patch (boo#1228613 CVE-2024-40776)
  + webkit2gtk3-CVE-2024-40779.patch (boo#1228693 CVE-2024-40779)
  + webkit2gtk3-CVE-2024-40780.patch (boo#1228694 CVE-2024-40780)
  + webkit2gtk3-CVE-2024-40782.patch (boo#1228695 CVE-2024-40782)</changelog>
  <changelog author="mgorse@suse.com" date="1724068800">- Update to version 2.44.3 (boo#1228697):
  + Fix web process cache suspend/resume when sandbox is enabled.
  + Fix accelerated images dissapearing after scrolling.
  + Fix video flickering with DMA-BUF sink.
  + Fix pointer lock on X11.
  + Fix movement delta on mouse events in GTK3.
  + Undeprecate console message API and make it available in 2022
    API.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-40776, CVE-2024-40779, CVE-2024-40780,
    CVE-2024-40782, CVE-2024-40789, CVE-2024-4558, CVE-2024-27838,
  CVE-2024-27851.
- Drop patches now upstream:
  webkit2gtk3-CVE-2024-40776.patch
  webkit2gtk3-CVE-2024-40779.patch
  webkit2gtk3-CVE-2024-40780.patch
  webkit2gtk3-CVE-2024-40782.patch</changelog>
  <changelog author="mgorse@suse.com" date="1729166400">- Update to version 2.46.0 (boo#1231039):
  + Use Skia instead of cairo for 2D rendering and enable GPU
    rendering by default.
  + Enable offscreen canvas by default.
  + Add support for system tracing with Sysprof.
  + Implement printing using the Print portal.
  + Add new API to load settings from a config file.
  + Add a new setting to enable or disable the 2D canvas
    acceleration (enabled by default).
  + Undeprecate console messages API and make it available in 6.0
    API.
  + Security fixes: CVE-2024-40866, CVE-2024-44187, CVE-2024-44185,
    CVE-2024-54534, CVE-2024-27856.
- Drop webkit2gtk3-disable-dmabuf-nvidia.patch: Should not be
  needed anymore.
- Add webkit2gtk3-angle-s390x.patch: fix the build on s390x.
- Use gcc 13 to match what is tested upstream.
- Pass USE_SYSTEM_SYSPROF_CAPTURE=NO to cmake, avoid building
  sysprof capture for now.
- Add bug281495.patch: fix crash in ProcessLauncher socket
  monitor callback.</changelog>
  <changelog author="mgorse@suse.com" date="1730721600">- Update to version 2.46.3 (boo#1232747):
  + Flatten layers to a plane when preseve-3d style is set.
  + Fix DuckDuckGo links by adding a user agent quirk.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44244, CVE-2024-44296.
  + Changes in version 2.46.2:
  + Own well-known bus name on a11y bus.
  + Improve memory consumption when putImageData is used repeatedly
    on accelerated canvas.
  + Disable cached web process suspension for now to prevent leaks.
  + Improve text kerning with different combinations of antialias
    and hinting settings.
  + Destroy all network sessions on process exit.
  + Fix visible rectangle calculation when there are animations.
  + Fix the build with ENABLE_NOTIFICATIONS=OFF.
  + Fix the build with ENABLE_FULLSCREEN_API=OFF.
  + Fix the build with ENABLE_WEB_AUDIO=OFF.
  + Fix the build on ppc64le.
  + Changes in version 2.46.1:
  + Fix login QR code not shown in WhatsApp web.
  + Disable PSON by default again in GTK 3 API versions.
  + Disable DMABuf video sink by default to prevent file descriptor
    leaks.
  + Fix the build with GCC 13.
- Drop bug281495.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1732536000">- Add webkit2gtk3-CVE-2024-44308.patch: don't allocate DFG register
  after a slow path (boo#1233631 CVE-2024-44308).
- Add webkit2gtk3-CVE-2024-44309.patch: fix a cookie management
  issue (boo#1233632 CVE-2024-44309).</changelog>
  <changelog author="mgorse@suse.com" date="1735300800">- Update to version 2.46.5 (boo#1234851):
  + Fix the build with GBM and release logs disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-54479, CVE-2024-54502, CVE-2024-54505,
    CVE-2024-54508, CVE-2024-54543.
  + Changes in version 2.46.4:
  + Improve memory consumption and performance of Canvas
    getImageData.
  + Fix preserve-3D intersection rendering.
  + Fix video dimensions since GStreamer 1.24.9.
  + Fix the HTTP-based remote Web Inspector not loading in
    Chromium.
  + Fix content filters not working on about:blank iframes.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44308, CVE-2024-44309.
- Drop webkit2gtk3-CVE-2024-44308.patch and
  webkit2gtk3-CVE-2024-44309.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1739188800">- Update to version 2.46.6 (boo#1236946):
  + Fix a crash when enabling Skia CPU rendering.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24143, CVE-2025-24150, CVE-2025-24158,
    CVE-2025-24162.</changelog>
  <changelog author="mgorse@suse.com" date="1741953600">- Add 7d784721.patch: WebGL context primitive restart can be
  toggled from WebContent process (boo#1239547 CVE-2025-24201).</changelog>
  <changelog author="mgorse@suse.com" date="1743508800">- Update to version 2.48.0 (boo#1239863 boo#1239864):
  + Move tiles rendering to worker threads when rendering with the
    GPU.
  + Fix preserve-3D intersection rendering.
  + Added new function for creating Promise objects to
    JavaScripotCore GLib API.
  + The MediaRecorder backend gained WebM support (requires at
    least GStreamer 1.24.9) and audio bitrate configuration
    support.
  + Fix invalid DPI-aware font size conversion.
  + Bring back support for OpenType-SVG fonts using Skia SVG
    module.
  + Add metadata (title and creation/modification date) to the PDF
    document generated for printing.
  + Propagate the font’s computed locale to HarfBuzz.
  + The GPU process build is now enabled for WebGL, but the web
    process is still used by default. The runtime flag
    UseGPUProcessForWebGL can be used to use the GPU process for
    WebGL.
  + Security fixes: CVE-2024-44192, CVE-2024-54467, CVE-2025-24201.
- Drop 7d784721.patch: Fixed upstream.
- Disable speech synthesis. It has been disabled until now, and
  we don't have flite or spiel in SLE.
- Add gcc13-PIE to BuildRequires (bsc#1239950).
- Add webkit2gtk3-iochannel-network-cache.patch: backport upstream
  patch to stop using IOChannel in NetworkCache: hopefully fixes
  crashes in the network process.</changelog>
  <changelog author="mgorse@suse.com" date="1744113600">- Update to version 2.48.1 (boo#1240958 boo#1240961 boo#1240962
  boo#1240963 boo#1240964 boo#1240986 boo#1240987):
  + Limit the data stored in session state.
  + Remove the empty area below the title bar in Web Inspector when
    not docked.
  + Fix the build with GST_DISABLE_GST_DEBUG.
  + Fix the build with GStreamer &lt; 1.20.
  + Fix the build with video disabled.
  + Fix the build with clang 20.
  + Security fixes: CVE-2024-54551, CVE-2025-24208, CVE-2025-24209,
    CVE-2025-24213, CVE-2025-24216, CVE-2025-24264, CVE-2025-30427.
- Add 8bee9eb9.patch: fix the build on non-x86 architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1747828800">- Update to version 2.48.2 (boo#1243282 boo#1243286 boo#1243288
  boo#1243289 boo#1243424 boo#1243596):
  + Enable CSS Overscroll Behavior by default.
  + Change threaded rendering implementation to use Skia API
    instead of WebCore display list that is not thread safe.
  + Fix rendering when device scale factor change comes before the
    web view geometry update.
  + Fix network process crash on exit.
  + Fix the build with ENABLE_RESOURCE_USAGE=OFF.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24223, CVE-2025-31204, CVE-2025-31205,
    CVE-2025-31206, CVE-2025-31215, CVE-2025-31257.
- Drop 8bee9eb9.patch: fixed upstream.</changelog>
</package>
<package pkgid="28f9d8d1c3928a3313351fb0b37390976f66756223a4a7b4e1d4ac383f2076e1" name="libjavascriptcoregtk-4_0-18" arch="x86_64">
  <version epoch="0" ver="2.48.5" rel="150600.12.43.1"/>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213,
    CVE-2024-23271.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834, CVE-2024-27808, CVE-2024-27820,
    CVE-2024-27833.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843, CVE-2024-54658.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
  <changelog author="mgorse@suse.com" date="1723118400">- Add CVE fixes:
  + webkit2gtk3-CVE-2024-40776.patch (boo#1228613 CVE-2024-40776)
  + webkit2gtk3-CVE-2024-40779.patch (boo#1228693 CVE-2024-40779)
  + webkit2gtk3-CVE-2024-40780.patch (boo#1228694 CVE-2024-40780)
  + webkit2gtk3-CVE-2024-40782.patch (boo#1228695 CVE-2024-40782)</changelog>
  <changelog author="mgorse@suse.com" date="1724068800">- Update to version 2.44.3 (boo#1228697):
  + Fix web process cache suspend/resume when sandbox is enabled.
  + Fix accelerated images dissapearing after scrolling.
  + Fix video flickering with DMA-BUF sink.
  + Fix pointer lock on X11.
  + Fix movement delta on mouse events in GTK3.
  + Undeprecate console message API and make it available in 2022
    API.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-40776, CVE-2024-40779, CVE-2024-40780,
    CVE-2024-40782, CVE-2024-40789, CVE-2024-4558, CVE-2024-27838,
  CVE-2024-27851.
- Drop patches now upstream:
  webkit2gtk3-CVE-2024-40776.patch
  webkit2gtk3-CVE-2024-40779.patch
  webkit2gtk3-CVE-2024-40780.patch
  webkit2gtk3-CVE-2024-40782.patch</changelog>
  <changelog author="mgorse@suse.com" date="1729166400">- Update to version 2.46.0 (boo#1231039):
  + Use Skia instead of cairo for 2D rendering and enable GPU
    rendering by default.
  + Enable offscreen canvas by default.
  + Add support for system tracing with Sysprof.
  + Implement printing using the Print portal.
  + Add new API to load settings from a config file.
  + Add a new setting to enable or disable the 2D canvas
    acceleration (enabled by default).
  + Undeprecate console messages API and make it available in 6.0
    API.
  + Security fixes: CVE-2024-40866, CVE-2024-44187, CVE-2024-44185,
    CVE-2024-54534, CVE-2024-27856.
- Drop webkit2gtk3-disable-dmabuf-nvidia.patch: Should not be
  needed anymore.
- Add webkit2gtk3-angle-s390x.patch: fix the build on s390x.
- Use gcc 13 to match what is tested upstream.
- Pass USE_SYSTEM_SYSPROF_CAPTURE=NO to cmake, avoid building
  sysprof capture for now.
- Add bug281495.patch: fix crash in ProcessLauncher socket
  monitor callback.</changelog>
  <changelog author="mgorse@suse.com" date="1730721600">- Update to version 2.46.3 (boo#1232747):
  + Flatten layers to a plane when preseve-3d style is set.
  + Fix DuckDuckGo links by adding a user agent quirk.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44244, CVE-2024-44296.
  + Changes in version 2.46.2:
  + Own well-known bus name on a11y bus.
  + Improve memory consumption when putImageData is used repeatedly
    on accelerated canvas.
  + Disable cached web process suspension for now to prevent leaks.
  + Improve text kerning with different combinations of antialias
    and hinting settings.
  + Destroy all network sessions on process exit.
  + Fix visible rectangle calculation when there are animations.
  + Fix the build with ENABLE_NOTIFICATIONS=OFF.
  + Fix the build with ENABLE_FULLSCREEN_API=OFF.
  + Fix the build with ENABLE_WEB_AUDIO=OFF.
  + Fix the build on ppc64le.
  + Changes in version 2.46.1:
  + Fix login QR code not shown in WhatsApp web.
  + Disable PSON by default again in GTK 3 API versions.
  + Disable DMABuf video sink by default to prevent file descriptor
    leaks.
  + Fix the build with GCC 13.
- Drop bug281495.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1732536000">- Add webkit2gtk3-CVE-2024-44308.patch: don't allocate DFG register
  after a slow path (boo#1233631 CVE-2024-44308).
- Add webkit2gtk3-CVE-2024-44309.patch: fix a cookie management
  issue (boo#1233632 CVE-2024-44309).</changelog>
  <changelog author="mgorse@suse.com" date="1735300800">- Update to version 2.46.5 (boo#1234851):
  + Fix the build with GBM and release logs disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-54479, CVE-2024-54502, CVE-2024-54505,
    CVE-2024-54508, CVE-2024-54543.
  + Changes in version 2.46.4:
  + Improve memory consumption and performance of Canvas
    getImageData.
  + Fix preserve-3D intersection rendering.
  + Fix video dimensions since GStreamer 1.24.9.
  + Fix the HTTP-based remote Web Inspector not loading in
    Chromium.
  + Fix content filters not working on about:blank iframes.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44308, CVE-2024-44309.
- Drop webkit2gtk3-CVE-2024-44308.patch and
  webkit2gtk3-CVE-2024-44309.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1739188800">- Update to version 2.46.6 (boo#1236946):
  + Fix a crash when enabling Skia CPU rendering.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24143, CVE-2025-24150, CVE-2025-24158,
    CVE-2025-24162.</changelog>
  <changelog author="mgorse@suse.com" date="1741953600">- Add 7d784721.patch: WebGL context primitive restart can be
  toggled from WebContent process (boo#1239547 CVE-2025-24201).</changelog>
  <changelog author="mgorse@suse.com" date="1743508800">- Update to version 2.48.0 (boo#1239863 boo#1239864):
  + Move tiles rendering to worker threads when rendering with the
    GPU.
  + Fix preserve-3D intersection rendering.
  + Added new function for creating Promise objects to
    JavaScripotCore GLib API.
  + The MediaRecorder backend gained WebM support (requires at
    least GStreamer 1.24.9) and audio bitrate configuration
    support.
  + Fix invalid DPI-aware font size conversion.
  + Bring back support for OpenType-SVG fonts using Skia SVG
    module.
  + Add metadata (title and creation/modification date) to the PDF
    document generated for printing.
  + Propagate the font’s computed locale to HarfBuzz.
  + The GPU process build is now enabled for WebGL, but the web
    process is still used by default. The runtime flag
    UseGPUProcessForWebGL can be used to use the GPU process for
    WebGL.
  + Security fixes: CVE-2024-44192, CVE-2024-54467, CVE-2025-24201,
  CVE-2025-24189.
- Drop 7d784721.patch: Fixed upstream.
- Disable speech synthesis. It has been disabled until now, and
  we don't have flite or spiel in SLE.
- Add gcc13-PIE to BuildRequires (bsc#1239950).
- Add webkit2gtk3-iochannel-network-cache.patch: backport upstream
  patch to stop using IOChannel in NetworkCache: hopefully fixes
  crashes in the network process.</changelog>
  <changelog author="mgorse@suse.com" date="1744113600">- Update to version 2.48.1 (boo#1240958 boo#1240961 boo#1240962
  boo#1240963 boo#1240964 boo#1240986 boo#1240987):
  + Limit the data stored in session state.
  + Remove the empty area below the title bar in Web Inspector when
    not docked.
  + Fix the build with GST_DISABLE_GST_DEBUG.
  + Fix the build with GStreamer &lt; 1.20.
  + Fix the build with video disabled.
  + Fix the build with clang 20.
  + Security fixes: CVE-2024-54551, CVE-2025-24208, CVE-2025-24209,
    CVE-2025-24213, CVE-2025-24216, CVE-2025-24264, CVE-2025-30427.
- Add 8bee9eb9.patch: fix the build on non-x86 architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1747828800">- Update to version 2.48.2 (boo#1243282 boo#1243286 boo#1243288
  boo#1243289 boo#1243424 boo#1243596):
  + Enable CSS Overscroll Behavior by default.
  + Change threaded rendering implementation to use Skia API
    instead of WebCore display list that is not thread safe.
  + Fix rendering when device scale factor change comes before the
    web view geometry update.
  + Fix network process crash on exit.
  + Fix the build with ENABLE_RESOURCE_USAGE=OFF.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24223, CVE-2025-31204, CVE-2025-31205,
    CVE-2025-31206, CVE-2025-31215, CVE-2025-31257.
- Drop 8bee9eb9.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1754395200">- Update to version 2.48.5 (boo#1247562 boo#1247563 boo#1247564
  boo#1247595 boo#1247596 boo#1247597 boo#1247598 boo#1247599
  boo#1247600):
  + Fix several crashes.
  + Security fixes: CVE-2025-31273, CVE-2025-31278, CVE-2025-43211,
    CVE-2025-43212, CVE-2025-43216, CVE-2025-43227, CVE-2025-43228,
    CVE-2025-43240, CVE-2025-43265, CVE-2025-6558.
  + Changes in version 2.48.4:
  + Improve emoji font selection with USE_SKIA=ON.
  + Improve playback of multimedia streams from blob URLs.
  + Fix the build with USE_SKIA_OPENTYPE_SVG=ON and
    USE_SYSPROF_CAPTURE=ON.
  + Fix the build on LoongArch with USE_SKIA=ON.
  + Fix crash when using a WebKitWebView widget in an offscreen
    window.
  + Fix several crashes and rendering issues.
  + Changes in version 2.48.3:
  + Fix a crash introduced by the new threaded rendering
    implementation using Skia API.
  + Improve rendering performance by recording layers once and
    replaying every dirty region in different worker threads.
  + Fix a crash when setting WEBKIT_SKIA_GPU_PAINTING_THREADS=0.
  + Fix a reference cycle in webkitmediastreamsrc preventing its
    disposal.
- Increase mem_per_process again to avoid running out of memory.</changelog>
</package>
<package pkgid="33cfb5b09e229536466e0de0ea4dd96766e6dbafacb7e92343b104573a1d9dc2" name="libjavascriptcoregtk-4_0-18" arch="x86_64">
  <version epoch="0" ver="2.50.1" rel="150600.12.48.3"/>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213,
    CVE-2024-23271.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834, CVE-2024-27808, CVE-2024-27820,
    CVE-2024-27833.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843, CVE-2024-54658.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
  <changelog author="mgorse@suse.com" date="1723118400">- Add CVE fixes:
  + webkit2gtk3-CVE-2024-40776.patch (boo#1228613 CVE-2024-40776)
  + webkit2gtk3-CVE-2024-40779.patch (boo#1228693 CVE-2024-40779)
  + webkit2gtk3-CVE-2024-40780.patch (boo#1228694 CVE-2024-40780)
  + webkit2gtk3-CVE-2024-40782.patch (boo#1228695 CVE-2024-40782)</changelog>
  <changelog author="mgorse@suse.com" date="1724068800">- Update to version 2.44.3 (boo#1228697):
  + Fix web process cache suspend/resume when sandbox is enabled.
  + Fix accelerated images dissapearing after scrolling.
  + Fix video flickering with DMA-BUF sink.
  + Fix pointer lock on X11.
  + Fix movement delta on mouse events in GTK3.
  + Undeprecate console message API and make it available in 2022
    API.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-40776, CVE-2024-40779, CVE-2024-40780,
    CVE-2024-40782, CVE-2024-40789, CVE-2024-4558, CVE-2024-27838,
  CVE-2024-27851.
- Drop patches now upstream:
  webkit2gtk3-CVE-2024-40776.patch
  webkit2gtk3-CVE-2024-40779.patch
  webkit2gtk3-CVE-2024-40780.patch
  webkit2gtk3-CVE-2024-40782.patch</changelog>
  <changelog author="mgorse@suse.com" date="1729166400">- Update to version 2.46.0 (boo#1231039):
  + Use Skia instead of cairo for 2D rendering and enable GPU
    rendering by default.
  + Enable offscreen canvas by default.
  + Add support for system tracing with Sysprof.
  + Implement printing using the Print portal.
  + Add new API to load settings from a config file.
  + Add a new setting to enable or disable the 2D canvas
    acceleration (enabled by default).
  + Undeprecate console messages API and make it available in 6.0
    API.
  + Security fixes: CVE-2024-40866, CVE-2024-44187, CVE-2024-44185,
    CVE-2024-54534, CVE-2024-27856.
- Drop webkit2gtk3-disable-dmabuf-nvidia.patch: Should not be
  needed anymore.
- Add webkit2gtk3-angle-s390x.patch: fix the build on s390x.
- Use gcc 13 to match what is tested upstream.
- Pass USE_SYSTEM_SYSPROF_CAPTURE=NO to cmake, avoid building
  sysprof capture for now.
- Add bug281495.patch: fix crash in ProcessLauncher socket
  monitor callback.</changelog>
  <changelog author="mgorse@suse.com" date="1730721600">- Update to version 2.46.3 (boo#1232747):
  + Flatten layers to a plane when preseve-3d style is set.
  + Fix DuckDuckGo links by adding a user agent quirk.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44244, CVE-2024-44296.
  + Changes in version 2.46.2:
  + Own well-known bus name on a11y bus.
  + Improve memory consumption when putImageData is used repeatedly
    on accelerated canvas.
  + Disable cached web process suspension for now to prevent leaks.
  + Improve text kerning with different combinations of antialias
    and hinting settings.
  + Destroy all network sessions on process exit.
  + Fix visible rectangle calculation when there are animations.
  + Fix the build with ENABLE_NOTIFICATIONS=OFF.
  + Fix the build with ENABLE_FULLSCREEN_API=OFF.
  + Fix the build with ENABLE_WEB_AUDIO=OFF.
  + Fix the build on ppc64le.
  + Changes in version 2.46.1:
  + Fix login QR code not shown in WhatsApp web.
  + Disable PSON by default again in GTK 3 API versions.
  + Disable DMABuf video sink by default to prevent file descriptor
    leaks.
  + Fix the build with GCC 13.
- Drop bug281495.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1732536000">- Add webkit2gtk3-CVE-2024-44308.patch: don't allocate DFG register
  after a slow path (boo#1233631 CVE-2024-44308).
- Add webkit2gtk3-CVE-2024-44309.patch: fix a cookie management
  issue (boo#1233632 CVE-2024-44309).</changelog>
  <changelog author="mgorse@suse.com" date="1735300800">- Update to version 2.46.5 (boo#1234851):
  + Fix the build with GBM and release logs disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-54479, CVE-2024-54502, CVE-2024-54505,
    CVE-2024-54508, CVE-2024-54543.
  + Changes in version 2.46.4:
  + Improve memory consumption and performance of Canvas
    getImageData.
  + Fix preserve-3D intersection rendering.
  + Fix video dimensions since GStreamer 1.24.9.
  + Fix the HTTP-based remote Web Inspector not loading in
    Chromium.
  + Fix content filters not working on about:blank iframes.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44308, CVE-2024-44309.
- Drop webkit2gtk3-CVE-2024-44308.patch and
  webkit2gtk3-CVE-2024-44309.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1739188800">- Update to version 2.46.6 (boo#1236946):
  + Fix a crash when enabling Skia CPU rendering.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24143, CVE-2025-24150, CVE-2025-24158,
    CVE-2025-24162.</changelog>
  <changelog author="mgorse@suse.com" date="1741953600">- Add 7d784721.patch: WebGL context primitive restart can be
  toggled from WebContent process (boo#1239547 CVE-2025-24201).</changelog>
  <changelog author="mgorse@suse.com" date="1743508800">- Update to version 2.48.0 (boo#1239863 boo#1239864):
  + Move tiles rendering to worker threads when rendering with the
    GPU.
  + Fix preserve-3D intersection rendering.
  + Added new function for creating Promise objects to
    JavaScripotCore GLib API.
  + The MediaRecorder backend gained WebM support (requires at
    least GStreamer 1.24.9) and audio bitrate configuration
    support.
  + Fix invalid DPI-aware font size conversion.
  + Bring back support for OpenType-SVG fonts using Skia SVG
    module.
  + Add metadata (title and creation/modification date) to the PDF
    document generated for printing.
  + Propagate the font’s computed locale to HarfBuzz.
  + The GPU process build is now enabled for WebGL, but the web
    process is still used by default. The runtime flag
    UseGPUProcessForWebGL can be used to use the GPU process for
    WebGL.
  + Security fixes: CVE-2024-44192, CVE-2024-54467, CVE-2025-24201,
  CVE-2025-24189.
- Drop 7d784721.patch: Fixed upstream.
- Disable speech synthesis. It has been disabled until now, and
  we don't have flite or spiel in SLE.
- Add gcc13-PIE to BuildRequires (bsc#1239950).
- Add webkit2gtk3-iochannel-network-cache.patch: backport upstream
  patch to stop using IOChannel in NetworkCache: hopefully fixes
  crashes in the network process.</changelog>
  <changelog author="mgorse@suse.com" date="1744113600">- Update to version 2.48.1 (boo#1240958 boo#1240961 boo#1240962
  boo#1240963 boo#1240964 boo#1240986 boo#1240987):
  + Limit the data stored in session state.
  + Remove the empty area below the title bar in Web Inspector when
    not docked.
  + Fix the build with GST_DISABLE_GST_DEBUG.
  + Fix the build with GStreamer &lt; 1.20.
  + Fix the build with video disabled.
  + Fix the build with clang 20.
  + Security fixes: CVE-2024-54551, CVE-2025-24208, CVE-2025-24209,
    CVE-2025-24213, CVE-2025-24216, CVE-2025-24264, CVE-2025-30427.
- Add 8bee9eb9.patch: fix the build on non-x86 architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1747828800">- Update to version 2.48.2 (boo#1243282 boo#1243286 boo#1243288
  boo#1243289 boo#1243424 boo#1243596):
  + Enable CSS Overscroll Behavior by default.
  + Change threaded rendering implementation to use Skia API
    instead of WebCore display list that is not thread safe.
  + Fix rendering when device scale factor change comes before the
    web view geometry update.
  + Fix network process crash on exit.
  + Fix the build with ENABLE_RESOURCE_USAGE=OFF.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24223, CVE-2025-31204, CVE-2025-31205,
    CVE-2025-31206, CVE-2025-31215, CVE-2025-31257.
- Drop 8bee9eb9.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1754395200">- Update to version 2.48.5 (boo#1247562 boo#1247563 boo#1247564
  boo#1247595 boo#1247596 boo#1247597 boo#1247598 boo#1247599
  boo#1247600):
  + Fix several crashes.
  + Security fixes: CVE-2025-31273, CVE-2025-31278, CVE-2025-43211,
    CVE-2025-43212, CVE-2025-43216, CVE-2025-43227, CVE-2025-43228,
    CVE-2025-43240, CVE-2025-43265, CVE-2025-6558.
  + Changes in version 2.48.4:
  + Improve emoji font selection with USE_SKIA=ON.
  + Improve playback of multimedia streams from blob URLs.
  + Fix the build with USE_SKIA_OPENTYPE_SVG=ON and
    USE_SYSPROF_CAPTURE=ON.
  + Fix the build on LoongArch with USE_SKIA=ON.
  + Fix crash when using a WebKitWebView widget in an offscreen
    window.
  + Fix several crashes and rendering issues.
  + Changes in version 2.48.3:
  + Fix a crash introduced by the new threaded rendering
    implementation using Skia API.
  + Improve rendering performance by recording layers once and
    replaying every dirty region in different worker threads.
  + Fix a crash when setting WEBKIT_SKIA_GPU_PAINTING_THREADS=0.
  + Fix a reference cycle in webkitmediastreamsrc preventing its
    disposal.
- Increase mem_per_process again to avoid running out of memory.</changelog>
  <changelog author="mgorse@suse.com" date="1758456000">- Update to version 2.50.0 (boo#1250439 boo#1250440 boo#1250441
  boo#1250442):
  + Improved rendering performance by recording each layer once and
    replaying every dirty region in different worker threads.
  + Enable damage propagation to the UI process by default.
  + CSS property font-variant-emoji is now enabled by default.
  + Font synthesis properties (bold/italic) are now properly
    handled.
  + Ensure web view is focused on tap gesture.
  + Added new API to get the theme color of a WebKitWebView.
  + Security fixes: CVE-2025-43272, CVE-2025-43342, CVE-2025-43356,
  CVE-2025-43368.
- Drop webkit2gtk3-iochannel-network-cache.patch: fixed upstream.
- Add webkit2gtk3-i586-build-fix.patch: fix the build on i586.
- Force the garbage collector to run more often when compiling on
  some architectures. Needed to avoid running out of memory.
- Remove _constraints override for armv6l and armv7l. They were not
  as restrictive as we would like and now seem unnecessary.</changelog>
  <changelog author="mgorse@suse.com" date="1760443200">- Update to version 2.50.1 (boo#1251975):
  + Improve text rendering performance.
  + Fix audio playback broken on instagram.
  + Fix rendering of layers with fractional transforms.
  + Fix the build with ENABLE(VIDEO) disabled.
  + Fix the build in s390x.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43343.
- Drop webkit2gtk3-i586-build-fix.patch: Merged upstream.
- Re-enable LTO on targets where it is not known to make the
  linker run out of memory.</changelog>
</package>
<package pkgid="0b9191234c46740fedb4511c9f345fb0a60947e79b387e5ee40e7f5146ebbd9f" name="libjavascriptcoregtk-4_0-18" arch="x86_64">
  <version epoch="0" ver="2.50.4" rel="150600.12.54.1"/>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834, CVE-2024-27808, CVE-2024-27820,
    CVE-2024-27833.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843, CVE-2024-54658.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
  <changelog author="mgorse@suse.com" date="1723118400">- Add CVE fixes:
  + webkit2gtk3-CVE-2024-40776.patch (boo#1228613 CVE-2024-40776)
  + webkit2gtk3-CVE-2024-40779.patch (boo#1228693 CVE-2024-40779)
  + webkit2gtk3-CVE-2024-40780.patch (boo#1228694 CVE-2024-40780)
  + webkit2gtk3-CVE-2024-40782.patch (boo#1228695 CVE-2024-40782)</changelog>
  <changelog author="mgorse@suse.com" date="1724068800">- Update to version 2.44.3 (boo#1228697):
  + Fix web process cache suspend/resume when sandbox is enabled.
  + Fix accelerated images dissapearing after scrolling.
  + Fix video flickering with DMA-BUF sink.
  + Fix pointer lock on X11.
  + Fix movement delta on mouse events in GTK3.
  + Undeprecate console message API and make it available in 2022
    API.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-40776, CVE-2024-40779, CVE-2024-40780,
    CVE-2024-40782, CVE-2024-40789, CVE-2024-4558, CVE-2024-27838,
  CVE-2024-27851.
- Drop patches now upstream:
  webkit2gtk3-CVE-2024-40776.patch
  webkit2gtk3-CVE-2024-40779.patch
  webkit2gtk3-CVE-2024-40780.patch
  webkit2gtk3-CVE-2024-40782.patch</changelog>
  <changelog author="mgorse@suse.com" date="1729166400">- Update to version 2.46.0 (boo#1231039):
  + Use Skia instead of cairo for 2D rendering and enable GPU
    rendering by default.
  + Enable offscreen canvas by default.
  + Add support for system tracing with Sysprof.
  + Implement printing using the Print portal.
  + Add new API to load settings from a config file.
  + Add a new setting to enable or disable the 2D canvas
    acceleration (enabled by default).
  + Undeprecate console messages API and make it available in 6.0
    API.
  + Security fixes: CVE-2024-40866, CVE-2024-44187, CVE-2024-44185,
    CVE-2024-54534, CVE-2024-27856, CVE-2025-43480.
- Drop webkit2gtk3-disable-dmabuf-nvidia.patch: Should not be
  needed anymore.
- Add webkit2gtk3-angle-s390x.patch: fix the build on s390x.
- Use gcc 13 to match what is tested upstream.
- Pass USE_SYSTEM_SYSPROF_CAPTURE=NO to cmake, avoid building
  sysprof capture for now.
- Add bug281495.patch: fix crash in ProcessLauncher socket
  monitor callback.</changelog>
  <changelog author="mgorse@suse.com" date="1730721600">- Update to version 2.46.3 (boo#1232747):
  + Flatten layers to a plane when preseve-3d style is set.
  + Fix DuckDuckGo links by adding a user agent quirk.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44244, CVE-2024-44296.
  + Changes in version 2.46.2:
  + Own well-known bus name on a11y bus.
  + Improve memory consumption when putImageData is used repeatedly
    on accelerated canvas.
  + Disable cached web process suspension for now to prevent leaks.
  + Improve text kerning with different combinations of antialias
    and hinting settings.
  + Destroy all network sessions on process exit.
  + Fix visible rectangle calculation when there are animations.
  + Fix the build with ENABLE_NOTIFICATIONS=OFF.
  + Fix the build with ENABLE_FULLSCREEN_API=OFF.
  + Fix the build with ENABLE_WEB_AUDIO=OFF.
  + Fix the build on ppc64le.
  + Changes in version 2.46.1:
  + Fix login QR code not shown in WhatsApp web.
  + Disable PSON by default again in GTK 3 API versions.
  + Disable DMABuf video sink by default to prevent file descriptor
    leaks.
  + Fix the build with GCC 13.
- Drop bug281495.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1732536000">- Add webkit2gtk3-CVE-2024-44308.patch: don't allocate DFG register
  after a slow path (boo#1233631 CVE-2024-44308).
- Add webkit2gtk3-CVE-2024-44309.patch: fix a cookie management
  issue (boo#1233632 CVE-2024-44309).</changelog>
  <changelog author="mgorse@suse.com" date="1735300800">- Update to version 2.46.5 (boo#1234851):
  + Fix the build with GBM and release logs disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-54479, CVE-2024-54502, CVE-2024-54505,
    CVE-2024-54508, CVE-2024-54543.
  + Changes in version 2.46.4:
  + Improve memory consumption and performance of Canvas
    getImageData.
  + Fix preserve-3D intersection rendering.
  + Fix video dimensions since GStreamer 1.24.9.
  + Fix the HTTP-based remote Web Inspector not loading in
    Chromium.
  + Fix content filters not working on about:blank iframes.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44308, CVE-2024-44309.
- Drop webkit2gtk3-CVE-2024-44308.patch and
  webkit2gtk3-CVE-2024-44309.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1739188800">- Update to version 2.46.6 (boo#1236946):
  + Fix a crash when enabling Skia CPU rendering.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24143, CVE-2025-24150, CVE-2025-24158,
    CVE-2025-24162.</changelog>
  <changelog author="mgorse@suse.com" date="1741953600">- Add 7d784721.patch: WebGL context primitive restart can be
  toggled from WebContent process (boo#1239547 CVE-2025-24201).</changelog>
  <changelog author="mgorse@suse.com" date="1743508800">- Update to version 2.48.0 (boo#1239863 boo#1239864):
  + Move tiles rendering to worker threads when rendering with the
    GPU.
  + Fix preserve-3D intersection rendering.
  + Added new function for creating Promise objects to
    JavaScripotCore GLib API.
  + The MediaRecorder backend gained WebM support (requires at
    least GStreamer 1.24.9) and audio bitrate configuration
    support.
  + Fix invalid DPI-aware font size conversion.
  + Bring back support for OpenType-SVG fonts using Skia SVG
    module.
  + Add metadata (title and creation/modification date) to the PDF
    document generated for printing.
  + Propagate the font’s computed locale to HarfBuzz.
  + The GPU process build is now enabled for WebGL, but the web
    process is still used by default. The runtime flag
    UseGPUProcessForWebGL can be used to use the GPU process for
    WebGL.
  + Security fixes: CVE-2024-44192, CVE-2024-54467, CVE-2025-24201,
  CVE-2025-24189.
- Drop 7d784721.patch: Fixed upstream.
- Disable speech synthesis. It has been disabled until now, and
  we don't have flite or spiel in SLE.
- Add gcc13-PIE to BuildRequires (bsc#1239950).
- Add webkit2gtk3-iochannel-network-cache.patch: backport upstream
  patch to stop using IOChannel in NetworkCache: hopefully fixes
  crashes in the network process.</changelog>
  <changelog author="mgorse@suse.com" date="1744113600">- Update to version 2.48.1 (boo#1240958 boo#1240961 boo#1240962
  boo#1240963 boo#1240964 boo#1240986 boo#1240987):
  + Limit the data stored in session state.
  + Remove the empty area below the title bar in Web Inspector when
    not docked.
  + Fix the build with GST_DISABLE_GST_DEBUG.
  + Fix the build with GStreamer &lt; 1.20.
  + Fix the build with video disabled.
  + Fix the build with clang 20.
  + Security fixes: CVE-2024-54551, CVE-2025-24208, CVE-2025-24209,
    CVE-2025-24213, CVE-2025-24216, CVE-2025-24264, CVE-2025-30427.
- Add 8bee9eb9.patch: fix the build on non-x86 architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1747828800">- Update to version 2.48.2 (boo#1243282 boo#1243286 boo#1243288
  boo#1243289 boo#1243424 boo#1243596):
  + Enable CSS Overscroll Behavior by default.
  + Change threaded rendering implementation to use Skia API
    instead of WebCore display list that is not thread safe.
  + Fix rendering when device scale factor change comes before the
    web view geometry update.
  + Fix network process crash on exit.
  + Fix the build with ENABLE_RESOURCE_USAGE=OFF.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24223, CVE-2025-31204, CVE-2025-31205,
    CVE-2025-31206, CVE-2025-31215, CVE-2025-31257.
- Drop 8bee9eb9.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1754395200">- Update to version 2.48.5 (boo#1247562 boo#1247563 boo#1247564
  boo#1247595 boo#1247596 boo#1247597 boo#1247598 boo#1247599
  boo#1247600):
  + Fix several crashes.
  + Security fixes: CVE-2025-31273, CVE-2025-31278, CVE-2025-43211,
    CVE-2025-43212, CVE-2025-43216, CVE-2025-43227, CVE-2025-43228,
    CVE-2025-43240, CVE-2025-43265, CVE-2025-6558.
  + Changes in version 2.48.4:
  + Improve emoji font selection with USE_SKIA=ON.
  + Improve playback of multimedia streams from blob URLs.
  + Fix the build with USE_SKIA_OPENTYPE_SVG=ON and
    USE_SYSPROF_CAPTURE=ON.
  + Fix the build on LoongArch with USE_SKIA=ON.
  + Fix crash when using a WebKitWebView widget in an offscreen
    window.
  + Fix several crashes and rendering issues.
  + Changes in version 2.48.3:
  + Fix a crash introduced by the new threaded rendering
    implementation using Skia API.
  + Improve rendering performance by recording layers once and
    replaying every dirty region in different worker threads.
  + Fix a crash when setting WEBKIT_SKIA_GPU_PAINTING_THREADS=0.
  + Fix a reference cycle in webkitmediastreamsrc preventing its
    disposal.
- Increase mem_per_process again to avoid running out of memory.</changelog>
  <changelog author="mgorse@suse.com" date="1758456000">- Update to version 2.50.0 (boo#1250439 boo#1250440 boo#1250441
  boo#1250442):
  + Improved rendering performance by recording each layer once and
    replaying every dirty region in different worker threads.
  + Enable damage propagation to the UI process by default.
  + CSS property font-variant-emoji is now enabled by default.
  + Font synthesis properties (bold/italic) are now properly
    handled.
  + Ensure web view is focused on tap gesture.
  + Added new API to get the theme color of a WebKitWebView.
  + Security fixes: CVE-2025-43272, CVE-2025-43342, CVE-2025-43356,
  CVE-2025-43368, CVE-2025-43419.
- Drop webkit2gtk3-iochannel-network-cache.patch: fixed upstream.
- Add webkit2gtk3-i586-build-fix.patch: fix the build on i586.
- Force the garbage collector to run more often when compiling on
  some architectures. Needed to avoid running out of memory.
- Remove _constraints override for armv6l and armv7l. They were not
  as restrictive as we would like and now seem unnecessary.</changelog>
  <changelog author="mgorse@suse.com" date="1760443200">- Update to version 2.50.1 (boo#1251975):
  + Improve text rendering performance.
  + Fix audio playback broken on instagram.
  + Fix rendering of layers with fractional transforms.
  + Fix the build with ENABLE(VIDEO) disabled.
  + Fix the build in s390x.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43343.
- Drop webkit2gtk3-i586-build-fix.patch: Merged upstream.
- Re-enable LTO on targets where it is not known to make the
  linker run out of memory.</changelog>
  <changelog author="mgorse@suse.com" date="1763985600">- Update to version 2.50.2 (bsc#1254165 bsc#1254166 bsc#1254167
  bsc#1254168 bsc#1254169 bsc#1254170 bsc#1254171 bsc#1254172
  bsc#1254174 bsc#1254176 bsc#1254177 bsc#1254179 bsc#1254208):
  + Prevent unsafe URI schemes from participating in media
    playback.
  + Make jsc_value_array_buffer_get_data() function introspectable.
  + Fix logging in to Google accounts that have a WebAuthn second
    factor configured.
  + Fix loading webkit://gpu when there are no threads configured
    for GPU rendering.
  + Fix rendering gradiants that use the CSS hue interpolation
    method.
  + Fix pasting image data from the clipboard.
  + Fix font-family selection when the font name contains spaces.
  + Fix the build with standard C libraries that lack execinfo.h,
    like Musl or uClibc.
  + Fix capturing canvas snapshots in the Web Inspector.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43392, CVE-2025-43425, CVE-2025-43427,
    CVE-2025-43429, CVE-2025-43430, CVE-2025-43431, CVE-2025-43432,
    CVE-2025-43434, CVE-2025-43440, CVE-2025-43443, CVE-2025-13502.
- Add webkit2gtk3-undefined-symbol.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1765195200">- Update to version 2.50.3 (bsc#1254473 bsc#1254498 bsc#1254509):
  + Fix seeking and looping of media elements that set the "loop"
    property.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-13947, CVE-2025-43421, CVE-2025-43458,
    CVE-2025-66287.
- Drop webkit2gtk3-undefined-symbol.patch: fixed upstream.
- Use %limit_build. Also define %dwz_low_mem_die_limit and
  %dwz_max_die_limit, similar to what we have in wpewebkit.
  This should simplify the logic for limiting jobs and will
  hopefully help with intermittent build failures.</changelog>
  <changelog author="mgorse@suse.com" date="1765972800">- Update to version 2.50.4 (bsc#1255183 bsc#1255191 bsc#1255194
  bsc#1255195 bsc#1255198 bsc#1255200 bsc#1255497):
  + Correctly handle the program name passed to the sleep disabler.
  + Ensure GStreamer is initialized before using the Quirks.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-14174, CVE-2025-43501, CVE-2025-43529,
    CVE-2025-43531, CVE-2025-43535, CVE-2025-43536, CVE-2025-43541.
- Add webkit2gtk3-a11y-fix-role-mapping.patch: fix a11y regression
  where AT-SPI roles were mapped incorrectly.</changelog>
</package>
<package pkgid="d57caf1886cfc39cdac239d8fbeb823ca5f50567529d93ebc8f805cf1697baf5" name="libjavascriptcoregtk-4_0-18" arch="x86_64">
  <version epoch="0" ver="2.52.1" rel="150600.12.63.1"/>
  <changelog author="mgorse@suse.com" date="1724068800">- Update to version 2.44.3 (boo#1228697):
  + Fix web process cache suspend/resume when sandbox is enabled.
  + Fix accelerated images dissapearing after scrolling.
  + Fix video flickering with DMA-BUF sink.
  + Fix pointer lock on X11.
  + Fix movement delta on mouse events in GTK3.
  + Undeprecate console message API and make it available in 2022
    API.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-40776, CVE-2024-40779, CVE-2024-40780,
    CVE-2024-40782, CVE-2024-40789, CVE-2024-4558, CVE-2024-27838,
  CVE-2024-27851.
- Drop patches now upstream:
  webkit2gtk3-CVE-2024-40776.patch
  webkit2gtk3-CVE-2024-40779.patch
  webkit2gtk3-CVE-2024-40780.patch
  webkit2gtk3-CVE-2024-40782.patch</changelog>
  <changelog author="mgorse@suse.com" date="1729166400">- Update to version 2.46.0 (boo#1231039):
  + Use Skia instead of cairo for 2D rendering and enable GPU
    rendering by default.
  + Enable offscreen canvas by default.
  + Add support for system tracing with Sysprof.
  + Implement printing using the Print portal.
  + Add new API to load settings from a config file.
  + Add a new setting to enable or disable the 2D canvas
    acceleration (enabled by default).
  + Undeprecate console messages API and make it available in 6.0
    API.
  + Security fixes: CVE-2024-40866, CVE-2024-44187, CVE-2024-44185,
    CVE-2024-54534, CVE-2024-27856, CVE-2025-43480.
- Drop webkit2gtk3-disable-dmabuf-nvidia.patch: Should not be
  needed anymore.
- Add webkit2gtk3-angle-s390x.patch: fix the build on s390x.
- Use gcc 13 to match what is tested upstream.
- Pass USE_SYSTEM_SYSPROF_CAPTURE=NO to cmake, avoid building
  sysprof capture for now.
- Add bug281495.patch: fix crash in ProcessLauncher socket
  monitor callback.</changelog>
  <changelog author="mgorse@suse.com" date="1730721600">- Update to version 2.46.3 (boo#1232747):
  + Flatten layers to a plane when preseve-3d style is set.
  + Fix DuckDuckGo links by adding a user agent quirk.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44244, CVE-2024-44296.
  + Changes in version 2.46.2:
  + Own well-known bus name on a11y bus.
  + Improve memory consumption when putImageData is used repeatedly
    on accelerated canvas.
  + Disable cached web process suspension for now to prevent leaks.
  + Improve text kerning with different combinations of antialias
    and hinting settings.
  + Destroy all network sessions on process exit.
  + Fix visible rectangle calculation when there are animations.
  + Fix the build with ENABLE_NOTIFICATIONS=OFF.
  + Fix the build with ENABLE_FULLSCREEN_API=OFF.
  + Fix the build with ENABLE_WEB_AUDIO=OFF.
  + Fix the build on ppc64le.
  + Changes in version 2.46.1:
  + Fix login QR code not shown in WhatsApp web.
  + Disable PSON by default again in GTK 3 API versions.
  + Disable DMABuf video sink by default to prevent file descriptor
    leaks.
  + Fix the build with GCC 13.
- Drop bug281495.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1732536000">- Add webkit2gtk3-CVE-2024-44308.patch: don't allocate DFG register
  after a slow path (boo#1233631 CVE-2024-44308).
- Add webkit2gtk3-CVE-2024-44309.patch: fix a cookie management
  issue (boo#1233632 CVE-2024-44309).</changelog>
  <changelog author="mgorse@suse.com" date="1735300800">- Update to version 2.46.5 (boo#1234851):
  + Fix the build with GBM and release logs disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-54479, CVE-2024-54502, CVE-2024-54505,
    CVE-2024-54508, CVE-2024-54543.
  + Changes in version 2.46.4:
  + Improve memory consumption and performance of Canvas
    getImageData.
  + Fix preserve-3D intersection rendering.
  + Fix video dimensions since GStreamer 1.24.9.
  + Fix the HTTP-based remote Web Inspector not loading in
    Chromium.
  + Fix content filters not working on about:blank iframes.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44308, CVE-2024-44309.
- Drop webkit2gtk3-CVE-2024-44308.patch and
  webkit2gtk3-CVE-2024-44309.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1739188800">- Update to version 2.46.6 (boo#1236946):
  + Fix a crash when enabling Skia CPU rendering.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24143, CVE-2025-24150, CVE-2025-24158,
    CVE-2025-24162.</changelog>
  <changelog author="mgorse@suse.com" date="1741953600">- Add 7d784721.patch: WebGL context primitive restart can be
  toggled from WebContent process (boo#1239547 CVE-2025-24201).</changelog>
  <changelog author="mgorse@suse.com" date="1743508800">- Update to version 2.48.0 (boo#1239863 boo#1239864):
  + Move tiles rendering to worker threads when rendering with the
    GPU.
  + Fix preserve-3D intersection rendering.
  + Added new function for creating Promise objects to
    JavaScripotCore GLib API.
  + The MediaRecorder backend gained WebM support (requires at
    least GStreamer 1.24.9) and audio bitrate configuration
    support.
  + Fix invalid DPI-aware font size conversion.
  + Bring back support for OpenType-SVG fonts using Skia SVG
    module.
  + Add metadata (title and creation/modification date) to the PDF
    document generated for printing.
  + Propagate the font’s computed locale to HarfBuzz.
  + The GPU process build is now enabled for WebGL, but the web
    process is still used by default. The runtime flag
    UseGPUProcessForWebGL can be used to use the GPU process for
    WebGL.
  + Security fixes: CVE-2024-44192, CVE-2024-54467, CVE-2025-24201,
  CVE-2025-24189.
- Drop 7d784721.patch: Fixed upstream.
- Disable speech synthesis. It has been disabled until now, and
  we don't have flite or spiel in SLE.
- Add gcc13-PIE to BuildRequires (bsc#1239950).
- Add webkit2gtk3-iochannel-network-cache.patch: backport upstream
  patch to stop using IOChannel in NetworkCache: hopefully fixes
  crashes in the network process.</changelog>
  <changelog author="mgorse@suse.com" date="1744113600">- Update to version 2.48.1 (boo#1240958 boo#1240961 boo#1240962
  boo#1240963 boo#1240964 boo#1240986 boo#1240987):
  + Limit the data stored in session state.
  + Remove the empty area below the title bar in Web Inspector when
    not docked.
  + Fix the build with GST_DISABLE_GST_DEBUG.
  + Fix the build with GStreamer &lt; 1.20.
  + Fix the build with video disabled.
  + Fix the build with clang 20.
  + Security fixes: CVE-2024-54551, CVE-2025-24208, CVE-2025-24209,
    CVE-2025-24213, CVE-2025-24216, CVE-2025-24264, CVE-2025-30427.
- Add 8bee9eb9.patch: fix the build on non-x86 architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1747828800">- Update to version 2.48.2 (boo#1243282 boo#1243286 boo#1243288
  boo#1243289 boo#1243424 boo#1243596):
  + Enable CSS Overscroll Behavior by default.
  + Change threaded rendering implementation to use Skia API
    instead of WebCore display list that is not thread safe.
  + Fix rendering when device scale factor change comes before the
    web view geometry update.
  + Fix network process crash on exit.
  + Fix the build with ENABLE_RESOURCE_USAGE=OFF.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24223, CVE-2025-31204, CVE-2025-31205,
    CVE-2025-31206, CVE-2025-31215, CVE-2025-31257.
- Drop 8bee9eb9.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1754395200">- Update to version 2.48.5 (boo#1247562 boo#1247563 boo#1247564
  boo#1247595 boo#1247596 boo#1247597 boo#1247598 boo#1247599
  boo#1247600):
  + Fix several crashes.
  + Security fixes: CVE-2025-31273, CVE-2025-31278, CVE-2025-43211,
    CVE-2025-43212, CVE-2025-43216, CVE-2025-43227, CVE-2025-43228,
    CVE-2025-43240, CVE-2025-43265, CVE-2025-6558.
  + Changes in version 2.48.4:
  + Improve emoji font selection with USE_SKIA=ON.
  + Improve playback of multimedia streams from blob URLs.
  + Fix the build with USE_SKIA_OPENTYPE_SVG=ON and
    USE_SYSPROF_CAPTURE=ON.
  + Fix the build on LoongArch with USE_SKIA=ON.
  + Fix crash when using a WebKitWebView widget in an offscreen
    window.
  + Fix several crashes and rendering issues.
  + Changes in version 2.48.3:
  + Fix a crash introduced by the new threaded rendering
    implementation using Skia API.
  + Improve rendering performance by recording layers once and
    replaying every dirty region in different worker threads.
  + Fix a crash when setting WEBKIT_SKIA_GPU_PAINTING_THREADS=0.
  + Fix a reference cycle in webkitmediastreamsrc preventing its
    disposal.
- Increase mem_per_process again to avoid running out of memory.</changelog>
  <changelog author="mgorse@suse.com" date="1758456000">- Update to version 2.50.0 (boo#1250439 boo#1250440 boo#1250441
  boo#1250442):
  + Improved rendering performance by recording each layer once and
    replaying every dirty region in different worker threads.
  + Enable damage propagation to the UI process by default.
  + CSS property font-variant-emoji is now enabled by default.
  + Font synthesis properties (bold/italic) are now properly
    handled.
  + Ensure web view is focused on tap gesture.
  + Added new API to get the theme color of a WebKitWebView.
  + Security fixes: CVE-2025-43272, CVE-2025-43342, CVE-2025-43356,
  CVE-2025-43368, CVE-2025-43419, CVE-2025-31223, CVE-2025-31277.
- Drop webkit2gtk3-iochannel-network-cache.patch: fixed upstream.
- Add webkit2gtk3-i586-build-fix.patch: fix the build on i586.
- Force the garbage collector to run more often when compiling on
  some architectures. Needed to avoid running out of memory.
- Remove _constraints override for armv6l and armv7l. They were not
  as restrictive as we would like and now seem unnecessary.</changelog>
  <changelog author="mgorse@suse.com" date="1760443200">- Update to version 2.50.1 (boo#1251975):
  + Improve text rendering performance.
  + Fix audio playback broken on instagram.
  + Fix rendering of layers with fractional transforms.
  + Fix the build with ENABLE(VIDEO) disabled.
  + Fix the build in s390x.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43343.
- Drop webkit2gtk3-i586-build-fix.patch: Merged upstream.
- Re-enable LTO on targets where it is not known to make the
  linker run out of memory.</changelog>
  <changelog author="mgorse@suse.com" date="1763985600">- Update to version 2.50.2 (bsc#1254165 bsc#1254166 bsc#1254167
  bsc#1254168 bsc#1254169 bsc#1254170 bsc#1254171 bsc#1254172
  bsc#1254174 bsc#1254176 bsc#1254177 bsc#1254179 bsc#1254208):
  + Prevent unsafe URI schemes from participating in media
    playback.
  + Make jsc_value_array_buffer_get_data() function introspectable.
  + Fix logging in to Google accounts that have a WebAuthn second
    factor configured.
  + Fix loading webkit://gpu when there are no threads configured
    for GPU rendering.
  + Fix rendering gradiants that use the CSS hue interpolation
    method.
  + Fix pasting image data from the clipboard.
  + Fix font-family selection when the font name contains spaces.
  + Fix the build with standard C libraries that lack execinfo.h,
    like Musl or uClibc.
  + Fix capturing canvas snapshots in the Web Inspector.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43392, CVE-2025-43425, CVE-2025-43427,
    CVE-2025-43429, CVE-2025-43430, CVE-2025-43431, CVE-2025-43432,
  +    CVE-2025-43434, CVE-2025-43440, CVE-2025-43443, CVE-2025-13502,
  +    CVE-2025-43433, CVE-2025-43438, CVE-2025-43441.
- Add webkit2gtk3-undefined-symbol.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1765195200">- Update to version 2.50.3 (bsc#1254473 bsc#1254498 bsc#1254509):
  + Fix seeking and looping of media elements that set the "loop"
    property.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-13947, CVE-2025-43421, CVE-2025-43458,
    CVE-2025-66287.
- Drop webkit2gtk3-undefined-symbol.patch: fixed upstream.
- Use %limit_build. Also define %dwz_low_mem_die_limit and
  %dwz_max_die_limit, similar to what we have in wpewebkit.
  This should simplify the logic for limiting jobs and will
  hopefully help with intermittent build failures.</changelog>
  <changelog author="mgorse@suse.com" date="1765972800">- Update to version 2.50.4 (bsc#1255183 bsc#1255191 bsc#1255194
  bsc#1255195 bsc#1255198 bsc#1255200 bsc#1255497):
  + Correctly handle the program name passed to the sleep disabler.
  + Ensure GStreamer is initialized before using the Quirks.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-14174, CVE-2025-43501, CVE-2025-43529,
    CVE-2025-43531, CVE-2025-43535, CVE-2025-43536, CVE-2025-43541.
- Add webkit2gtk3-a11y-fix-role-mapping.patch: fix a11y regression
  where AT-SPI roles were mapped incorrectly.</changelog>
  <changelog author="mgorse@suse.com" date="1773921600">- Update to version 2.52.0:
  + Make scrolling with touch input smoother for small movements.
  + Fix estimated load progress of downloads when Content-Length
    value is wrong.
  + Ensure that "scrollend" events are correctly emitted after
    scroll animations.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43213, CVE-2025-43214, CVE-2025-43457,
    CVE-2025-43511, CVE-2025-46299, CVE-2026-20608, CVE-2026-20635,
    CVE-2026-20636, CVE-2026-20644, CVE-2026-20652, CVE-2026-20676
    (bsc#1259934 bsc#1259935 bsc#1259936 bsc#1259937 bsc#1259938
    bsc#1259939 bsc#1259940 bsc#1259941 bsc#1259942 bsc#1259943
    bsc#1259944 bsc#1259945 bsc#1259946 bsc#1259947 bsc#1259948
    bsc#1259949 bsc#1259950)
- Drop webkit2gtk3-a11y-fix-role-mapping.patch: fixed upstream.
- Add webkit2gtk3-libsoup2.patch: reinstate support for libsoup2.</changelog>
  <changelog author="mgorse@suse.com" date="1774267200">- Add webkit2gtk3-aarch64-build-fix.patch: fix the build with JIT
  disabled.
- Increase limit_build to try to prevent running out of memory.</changelog>
  <changelog author="mgorse@suse.com" date="1774612800">- Pass ggc-min-expand=10 on some architectures, rather than 30.
  We are still getting "virtual memory exhausted" on i586
  sometimes, and hopefully this will help.</changelog>
  <changelog author="mgorse@suse.com" date="1775044800">- Update to version 2.52.1 (bsc#1261172 bsc#1261173 bsc#1261174
  bsc#1261175 bsc#1261176 bsc#1261177 bsc#1261178 bsc#1261179):
  + Reduce the amount of useless MPRIS notifications produced by
    MediaSesion when the information about media being played is
    incomplete.
  + Support turning off USE_GSTREAMER to configure the build with
    all multimedia features disabled.
  + Add Sysprof marks for mouse events.
  + Fix MediaSession icon for iheart.com not being displayed.
  + Fix the build with USE_GSTREAMER_GL disabled.
  + Fix the build with librice version 0.3.0 or newer.
  + Fix several crashes and rendering issues.
  + Translation updates: Georgian.
  + Security fixes: CVE-2026-20643, CVE-2026-20664, CVE-2026-20665,
    CVE-2026-20691, CVE-2026-28857, CVE-2026-28859, CVE-2026-28861,
    CVE-2026-28871.
- Rebase webkit2gtk3-libsoup2.patch.
- Add webkitgtk-gtk3-build-fix.patch: fix the gtk3 build.</changelog>
</package>
<package pkgid="26ffedea2f53745fc4d8ac4e01c36a3cc5c1daab6a45c51330141e1bae3d0461" name="libjavascriptcoregtk-6_0-1" arch="x86_64">
  <version epoch="0" ver="2.48.2" rel="150600.12.40.2"/>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213,
    CVE-2024-23271.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834, CVE-2024-27808, CVE-2024-27820,
    CVE-2024-27833.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843, CVE-2024-54658.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
  <changelog author="mgorse@suse.com" date="1723118400">- Add CVE fixes:
  + webkit2gtk3-CVE-2024-40776.patch (boo#1228613 CVE-2024-40776)
  + webkit2gtk3-CVE-2024-40779.patch (boo#1228693 CVE-2024-40779)
  + webkit2gtk3-CVE-2024-40780.patch (boo#1228694 CVE-2024-40780)
  + webkit2gtk3-CVE-2024-40782.patch (boo#1228695 CVE-2024-40782)</changelog>
  <changelog author="mgorse@suse.com" date="1724068800">- Update to version 2.44.3 (boo#1228697):
  + Fix web process cache suspend/resume when sandbox is enabled.
  + Fix accelerated images dissapearing after scrolling.
  + Fix video flickering with DMA-BUF sink.
  + Fix pointer lock on X11.
  + Fix movement delta on mouse events in GTK3.
  + Undeprecate console message API and make it available in 2022
    API.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-40776, CVE-2024-40779, CVE-2024-40780,
    CVE-2024-40782, CVE-2024-40789, CVE-2024-4558, CVE-2024-27838,
  CVE-2024-27851.
- Drop patches now upstream:
  webkit2gtk3-CVE-2024-40776.patch
  webkit2gtk3-CVE-2024-40779.patch
  webkit2gtk3-CVE-2024-40780.patch
  webkit2gtk3-CVE-2024-40782.patch</changelog>
  <changelog author="mgorse@suse.com" date="1729166400">- Update to version 2.46.0 (boo#1231039):
  + Use Skia instead of cairo for 2D rendering and enable GPU
    rendering by default.
  + Enable offscreen canvas by default.
  + Add support for system tracing with Sysprof.
  + Implement printing using the Print portal.
  + Add new API to load settings from a config file.
  + Add a new setting to enable or disable the 2D canvas
    acceleration (enabled by default).
  + Undeprecate console messages API and make it available in 6.0
    API.
  + Security fixes: CVE-2024-40866, CVE-2024-44187, CVE-2024-44185,
    CVE-2024-54534, CVE-2024-27856.
- Drop webkit2gtk3-disable-dmabuf-nvidia.patch: Should not be
  needed anymore.
- Add webkit2gtk3-angle-s390x.patch: fix the build on s390x.
- Use gcc 13 to match what is tested upstream.
- Pass USE_SYSTEM_SYSPROF_CAPTURE=NO to cmake, avoid building
  sysprof capture for now.
- Add bug281495.patch: fix crash in ProcessLauncher socket
  monitor callback.</changelog>
  <changelog author="mgorse@suse.com" date="1730721600">- Update to version 2.46.3 (boo#1232747):
  + Flatten layers to a plane when preseve-3d style is set.
  + Fix DuckDuckGo links by adding a user agent quirk.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44244, CVE-2024-44296.
  + Changes in version 2.46.2:
  + Own well-known bus name on a11y bus.
  + Improve memory consumption when putImageData is used repeatedly
    on accelerated canvas.
  + Disable cached web process suspension for now to prevent leaks.
  + Improve text kerning with different combinations of antialias
    and hinting settings.
  + Destroy all network sessions on process exit.
  + Fix visible rectangle calculation when there are animations.
  + Fix the build with ENABLE_NOTIFICATIONS=OFF.
  + Fix the build with ENABLE_FULLSCREEN_API=OFF.
  + Fix the build with ENABLE_WEB_AUDIO=OFF.
  + Fix the build on ppc64le.
  + Changes in version 2.46.1:
  + Fix login QR code not shown in WhatsApp web.
  + Disable PSON by default again in GTK 3 API versions.
  + Disable DMABuf video sink by default to prevent file descriptor
    leaks.
  + Fix the build with GCC 13.
- Drop bug281495.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1732536000">- Add webkit2gtk3-CVE-2024-44308.patch: don't allocate DFG register
  after a slow path (boo#1233631 CVE-2024-44308).
- Add webkit2gtk3-CVE-2024-44309.patch: fix a cookie management
  issue (boo#1233632 CVE-2024-44309).</changelog>
  <changelog author="mgorse@suse.com" date="1735300800">- Update to version 2.46.5 (boo#1234851):
  + Fix the build with GBM and release logs disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-54479, CVE-2024-54502, CVE-2024-54505,
    CVE-2024-54508, CVE-2024-54543.
  + Changes in version 2.46.4:
  + Improve memory consumption and performance of Canvas
    getImageData.
  + Fix preserve-3D intersection rendering.
  + Fix video dimensions since GStreamer 1.24.9.
  + Fix the HTTP-based remote Web Inspector not loading in
    Chromium.
  + Fix content filters not working on about:blank iframes.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44308, CVE-2024-44309.
- Drop webkit2gtk3-CVE-2024-44308.patch and
  webkit2gtk3-CVE-2024-44309.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1739188800">- Update to version 2.46.6 (boo#1236946):
  + Fix a crash when enabling Skia CPU rendering.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24143, CVE-2025-24150, CVE-2025-24158,
    CVE-2025-24162.</changelog>
  <changelog author="mgorse@suse.com" date="1741953600">- Add 7d784721.patch: WebGL context primitive restart can be
  toggled from WebContent process (boo#1239547 CVE-2025-24201).</changelog>
  <changelog author="mgorse@suse.com" date="1743508800">- Update to version 2.48.0 (boo#1239863 boo#1239864):
  + Move tiles rendering to worker threads when rendering with the
    GPU.
  + Fix preserve-3D intersection rendering.
  + Added new function for creating Promise objects to
    JavaScripotCore GLib API.
  + The MediaRecorder backend gained WebM support (requires at
    least GStreamer 1.24.9) and audio bitrate configuration
    support.
  + Fix invalid DPI-aware font size conversion.
  + Bring back support for OpenType-SVG fonts using Skia SVG
    module.
  + Add metadata (title and creation/modification date) to the PDF
    document generated for printing.
  + Propagate the font’s computed locale to HarfBuzz.
  + The GPU process build is now enabled for WebGL, but the web
    process is still used by default. The runtime flag
    UseGPUProcessForWebGL can be used to use the GPU process for
    WebGL.
  + Security fixes: CVE-2024-44192, CVE-2024-54467, CVE-2025-24201.
- Drop 7d784721.patch: Fixed upstream.
- Disable speech synthesis. It has been disabled until now, and
  we don't have flite or spiel in SLE.
- Add gcc13-PIE to BuildRequires (bsc#1239950).
- Add webkit2gtk3-iochannel-network-cache.patch: backport upstream
  patch to stop using IOChannel in NetworkCache: hopefully fixes
  crashes in the network process.</changelog>
  <changelog author="mgorse@suse.com" date="1744113600">- Update to version 2.48.1 (boo#1240958 boo#1240961 boo#1240962
  boo#1240963 boo#1240964 boo#1240986 boo#1240987):
  + Limit the data stored in session state.
  + Remove the empty area below the title bar in Web Inspector when
    not docked.
  + Fix the build with GST_DISABLE_GST_DEBUG.
  + Fix the build with GStreamer &lt; 1.20.
  + Fix the build with video disabled.
  + Fix the build with clang 20.
  + Security fixes: CVE-2024-54551, CVE-2025-24208, CVE-2025-24209,
    CVE-2025-24213, CVE-2025-24216, CVE-2025-24264, CVE-2025-30427.
- Add 8bee9eb9.patch: fix the build on non-x86 architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1747828800">- Update to version 2.48.2 (boo#1243282 boo#1243286 boo#1243288
  boo#1243289 boo#1243424 boo#1243596):
  + Enable CSS Overscroll Behavior by default.
  + Change threaded rendering implementation to use Skia API
    instead of WebCore display list that is not thread safe.
  + Fix rendering when device scale factor change comes before the
    web view geometry update.
  + Fix network process crash on exit.
  + Fix the build with ENABLE_RESOURCE_USAGE=OFF.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24223, CVE-2025-31204, CVE-2025-31205,
    CVE-2025-31206, CVE-2025-31215, CVE-2025-31257.
- Drop 8bee9eb9.patch: fixed upstream.</changelog>
</package>
<package pkgid="ccf8024ff804bcbed5f3588b2edeb0c1c6e3861320d99119de5f9b67b83d8bc5" name="libjavascriptcoregtk-6_0-1" arch="x86_64">
  <version epoch="0" ver="2.48.5" rel="150600.12.43.1"/>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213,
    CVE-2024-23271.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834, CVE-2024-27808, CVE-2024-27820,
    CVE-2024-27833.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843, CVE-2024-54658.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
  <changelog author="mgorse@suse.com" date="1723118400">- Add CVE fixes:
  + webkit2gtk3-CVE-2024-40776.patch (boo#1228613 CVE-2024-40776)
  + webkit2gtk3-CVE-2024-40779.patch (boo#1228693 CVE-2024-40779)
  + webkit2gtk3-CVE-2024-40780.patch (boo#1228694 CVE-2024-40780)
  + webkit2gtk3-CVE-2024-40782.patch (boo#1228695 CVE-2024-40782)</changelog>
  <changelog author="mgorse@suse.com" date="1724068800">- Update to version 2.44.3 (boo#1228697):
  + Fix web process cache suspend/resume when sandbox is enabled.
  + Fix accelerated images dissapearing after scrolling.
  + Fix video flickering with DMA-BUF sink.
  + Fix pointer lock on X11.
  + Fix movement delta on mouse events in GTK3.
  + Undeprecate console message API and make it available in 2022
    API.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-40776, CVE-2024-40779, CVE-2024-40780,
    CVE-2024-40782, CVE-2024-40789, CVE-2024-4558, CVE-2024-27838,
  CVE-2024-27851.
- Drop patches now upstream:
  webkit2gtk3-CVE-2024-40776.patch
  webkit2gtk3-CVE-2024-40779.patch
  webkit2gtk3-CVE-2024-40780.patch
  webkit2gtk3-CVE-2024-40782.patch</changelog>
  <changelog author="mgorse@suse.com" date="1729166400">- Update to version 2.46.0 (boo#1231039):
  + Use Skia instead of cairo for 2D rendering and enable GPU
    rendering by default.
  + Enable offscreen canvas by default.
  + Add support for system tracing with Sysprof.
  + Implement printing using the Print portal.
  + Add new API to load settings from a config file.
  + Add a new setting to enable or disable the 2D canvas
    acceleration (enabled by default).
  + Undeprecate console messages API and make it available in 6.0
    API.
  + Security fixes: CVE-2024-40866, CVE-2024-44187, CVE-2024-44185,
    CVE-2024-54534, CVE-2024-27856.
- Drop webkit2gtk3-disable-dmabuf-nvidia.patch: Should not be
  needed anymore.
- Add webkit2gtk3-angle-s390x.patch: fix the build on s390x.
- Use gcc 13 to match what is tested upstream.
- Pass USE_SYSTEM_SYSPROF_CAPTURE=NO to cmake, avoid building
  sysprof capture for now.
- Add bug281495.patch: fix crash in ProcessLauncher socket
  monitor callback.</changelog>
  <changelog author="mgorse@suse.com" date="1730721600">- Update to version 2.46.3 (boo#1232747):
  + Flatten layers to a plane when preseve-3d style is set.
  + Fix DuckDuckGo links by adding a user agent quirk.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44244, CVE-2024-44296.
  + Changes in version 2.46.2:
  + Own well-known bus name on a11y bus.
  + Improve memory consumption when putImageData is used repeatedly
    on accelerated canvas.
  + Disable cached web process suspension for now to prevent leaks.
  + Improve text kerning with different combinations of antialias
    and hinting settings.
  + Destroy all network sessions on process exit.
  + Fix visible rectangle calculation when there are animations.
  + Fix the build with ENABLE_NOTIFICATIONS=OFF.
  + Fix the build with ENABLE_FULLSCREEN_API=OFF.
  + Fix the build with ENABLE_WEB_AUDIO=OFF.
  + Fix the build on ppc64le.
  + Changes in version 2.46.1:
  + Fix login QR code not shown in WhatsApp web.
  + Disable PSON by default again in GTK 3 API versions.
  + Disable DMABuf video sink by default to prevent file descriptor
    leaks.
  + Fix the build with GCC 13.
- Drop bug281495.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1732536000">- Add webkit2gtk3-CVE-2024-44308.patch: don't allocate DFG register
  after a slow path (boo#1233631 CVE-2024-44308).
- Add webkit2gtk3-CVE-2024-44309.patch: fix a cookie management
  issue (boo#1233632 CVE-2024-44309).</changelog>
  <changelog author="mgorse@suse.com" date="1735300800">- Update to version 2.46.5 (boo#1234851):
  + Fix the build with GBM and release logs disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-54479, CVE-2024-54502, CVE-2024-54505,
    CVE-2024-54508, CVE-2024-54543.
  + Changes in version 2.46.4:
  + Improve memory consumption and performance of Canvas
    getImageData.
  + Fix preserve-3D intersection rendering.
  + Fix video dimensions since GStreamer 1.24.9.
  + Fix the HTTP-based remote Web Inspector not loading in
    Chromium.
  + Fix content filters not working on about:blank iframes.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44308, CVE-2024-44309.
- Drop webkit2gtk3-CVE-2024-44308.patch and
  webkit2gtk3-CVE-2024-44309.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1739188800">- Update to version 2.46.6 (boo#1236946):
  + Fix a crash when enabling Skia CPU rendering.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24143, CVE-2025-24150, CVE-2025-24158,
    CVE-2025-24162.</changelog>
  <changelog author="mgorse@suse.com" date="1741953600">- Add 7d784721.patch: WebGL context primitive restart can be
  toggled from WebContent process (boo#1239547 CVE-2025-24201).</changelog>
  <changelog author="mgorse@suse.com" date="1743508800">- Update to version 2.48.0 (boo#1239863 boo#1239864):
  + Move tiles rendering to worker threads when rendering with the
    GPU.
  + Fix preserve-3D intersection rendering.
  + Added new function for creating Promise objects to
    JavaScripotCore GLib API.
  + The MediaRecorder backend gained WebM support (requires at
    least GStreamer 1.24.9) and audio bitrate configuration
    support.
  + Fix invalid DPI-aware font size conversion.
  + Bring back support for OpenType-SVG fonts using Skia SVG
    module.
  + Add metadata (title and creation/modification date) to the PDF
    document generated for printing.
  + Propagate the font’s computed locale to HarfBuzz.
  + The GPU process build is now enabled for WebGL, but the web
    process is still used by default. The runtime flag
    UseGPUProcessForWebGL can be used to use the GPU process for
    WebGL.
  + Security fixes: CVE-2024-44192, CVE-2024-54467, CVE-2025-24201,
  CVE-2025-24189.
- Drop 7d784721.patch: Fixed upstream.
- Disable speech synthesis. It has been disabled until now, and
  we don't have flite or spiel in SLE.
- Add gcc13-PIE to BuildRequires (bsc#1239950).
- Add webkit2gtk3-iochannel-network-cache.patch: backport upstream
  patch to stop using IOChannel in NetworkCache: hopefully fixes
  crashes in the network process.</changelog>
  <changelog author="mgorse@suse.com" date="1744113600">- Update to version 2.48.1 (boo#1240958 boo#1240961 boo#1240962
  boo#1240963 boo#1240964 boo#1240986 boo#1240987):
  + Limit the data stored in session state.
  + Remove the empty area below the title bar in Web Inspector when
    not docked.
  + Fix the build with GST_DISABLE_GST_DEBUG.
  + Fix the build with GStreamer &lt; 1.20.
  + Fix the build with video disabled.
  + Fix the build with clang 20.
  + Security fixes: CVE-2024-54551, CVE-2025-24208, CVE-2025-24209,
    CVE-2025-24213, CVE-2025-24216, CVE-2025-24264, CVE-2025-30427.
- Add 8bee9eb9.patch: fix the build on non-x86 architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1747828800">- Update to version 2.48.2 (boo#1243282 boo#1243286 boo#1243288
  boo#1243289 boo#1243424 boo#1243596):
  + Enable CSS Overscroll Behavior by default.
  + Change threaded rendering implementation to use Skia API
    instead of WebCore display list that is not thread safe.
  + Fix rendering when device scale factor change comes before the
    web view geometry update.
  + Fix network process crash on exit.
  + Fix the build with ENABLE_RESOURCE_USAGE=OFF.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24223, CVE-2025-31204, CVE-2025-31205,
    CVE-2025-31206, CVE-2025-31215, CVE-2025-31257.
- Drop 8bee9eb9.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1754395200">- Update to version 2.48.5 (boo#1247562 boo#1247563 boo#1247564
  boo#1247595 boo#1247596 boo#1247597 boo#1247598 boo#1247599
  boo#1247600):
  + Fix several crashes.
  + Security fixes: CVE-2025-31273, CVE-2025-31278, CVE-2025-43211,
    CVE-2025-43212, CVE-2025-43216, CVE-2025-43227, CVE-2025-43228,
    CVE-2025-43240, CVE-2025-43265, CVE-2025-6558.
  + Changes in version 2.48.4:
  + Improve emoji font selection with USE_SKIA=ON.
  + Improve playback of multimedia streams from blob URLs.
  + Fix the build with USE_SKIA_OPENTYPE_SVG=ON and
    USE_SYSPROF_CAPTURE=ON.
  + Fix the build on LoongArch with USE_SKIA=ON.
  + Fix crash when using a WebKitWebView widget in an offscreen
    window.
  + Fix several crashes and rendering issues.
  + Changes in version 2.48.3:
  + Fix a crash introduced by the new threaded rendering
    implementation using Skia API.
  + Improve rendering performance by recording layers once and
    replaying every dirty region in different worker threads.
  + Fix a crash when setting WEBKIT_SKIA_GPU_PAINTING_THREADS=0.
  + Fix a reference cycle in webkitmediastreamsrc preventing its
    disposal.
- Increase mem_per_process again to avoid running out of memory.</changelog>
</package>
<package pkgid="b99317c0f7af977484c247da665ee3652bb07244ee0148ede24657cf9adff0c6" name="libjavascriptcoregtk-6_0-1" arch="x86_64">
  <version epoch="0" ver="2.50.1" rel="150600.12.48.3"/>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213,
    CVE-2024-23271.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834, CVE-2024-27808, CVE-2024-27820,
    CVE-2024-27833.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843, CVE-2024-54658.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
  <changelog author="mgorse@suse.com" date="1723118400">- Add CVE fixes:
  + webkit2gtk3-CVE-2024-40776.patch (boo#1228613 CVE-2024-40776)
  + webkit2gtk3-CVE-2024-40779.patch (boo#1228693 CVE-2024-40779)
  + webkit2gtk3-CVE-2024-40780.patch (boo#1228694 CVE-2024-40780)
  + webkit2gtk3-CVE-2024-40782.patch (boo#1228695 CVE-2024-40782)</changelog>
  <changelog author="mgorse@suse.com" date="1724068800">- Update to version 2.44.3 (boo#1228697):
  + Fix web process cache suspend/resume when sandbox is enabled.
  + Fix accelerated images dissapearing after scrolling.
  + Fix video flickering with DMA-BUF sink.
  + Fix pointer lock on X11.
  + Fix movement delta on mouse events in GTK3.
  + Undeprecate console message API and make it available in 2022
    API.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-40776, CVE-2024-40779, CVE-2024-40780,
    CVE-2024-40782, CVE-2024-40789, CVE-2024-4558, CVE-2024-27838,
  CVE-2024-27851.
- Drop patches now upstream:
  webkit2gtk3-CVE-2024-40776.patch
  webkit2gtk3-CVE-2024-40779.patch
  webkit2gtk3-CVE-2024-40780.patch
  webkit2gtk3-CVE-2024-40782.patch</changelog>
  <changelog author="mgorse@suse.com" date="1729166400">- Update to version 2.46.0 (boo#1231039):
  + Use Skia instead of cairo for 2D rendering and enable GPU
    rendering by default.
  + Enable offscreen canvas by default.
  + Add support for system tracing with Sysprof.
  + Implement printing using the Print portal.
  + Add new API to load settings from a config file.
  + Add a new setting to enable or disable the 2D canvas
    acceleration (enabled by default).
  + Undeprecate console messages API and make it available in 6.0
    API.
  + Security fixes: CVE-2024-40866, CVE-2024-44187, CVE-2024-44185,
    CVE-2024-54534, CVE-2024-27856.
- Drop webkit2gtk3-disable-dmabuf-nvidia.patch: Should not be
  needed anymore.
- Add webkit2gtk3-angle-s390x.patch: fix the build on s390x.
- Use gcc 13 to match what is tested upstream.
- Pass USE_SYSTEM_SYSPROF_CAPTURE=NO to cmake, avoid building
  sysprof capture for now.
- Add bug281495.patch: fix crash in ProcessLauncher socket
  monitor callback.</changelog>
  <changelog author="mgorse@suse.com" date="1730721600">- Update to version 2.46.3 (boo#1232747):
  + Flatten layers to a plane when preseve-3d style is set.
  + Fix DuckDuckGo links by adding a user agent quirk.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44244, CVE-2024-44296.
  + Changes in version 2.46.2:
  + Own well-known bus name on a11y bus.
  + Improve memory consumption when putImageData is used repeatedly
    on accelerated canvas.
  + Disable cached web process suspension for now to prevent leaks.
  + Improve text kerning with different combinations of antialias
    and hinting settings.
  + Destroy all network sessions on process exit.
  + Fix visible rectangle calculation when there are animations.
  + Fix the build with ENABLE_NOTIFICATIONS=OFF.
  + Fix the build with ENABLE_FULLSCREEN_API=OFF.
  + Fix the build with ENABLE_WEB_AUDIO=OFF.
  + Fix the build on ppc64le.
  + Changes in version 2.46.1:
  + Fix login QR code not shown in WhatsApp web.
  + Disable PSON by default again in GTK 3 API versions.
  + Disable DMABuf video sink by default to prevent file descriptor
    leaks.
  + Fix the build with GCC 13.
- Drop bug281495.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1732536000">- Add webkit2gtk3-CVE-2024-44308.patch: don't allocate DFG register
  after a slow path (boo#1233631 CVE-2024-44308).
- Add webkit2gtk3-CVE-2024-44309.patch: fix a cookie management
  issue (boo#1233632 CVE-2024-44309).</changelog>
  <changelog author="mgorse@suse.com" date="1735300800">- Update to version 2.46.5 (boo#1234851):
  + Fix the build with GBM and release logs disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-54479, CVE-2024-54502, CVE-2024-54505,
    CVE-2024-54508, CVE-2024-54543.
  + Changes in version 2.46.4:
  + Improve memory consumption and performance of Canvas
    getImageData.
  + Fix preserve-3D intersection rendering.
  + Fix video dimensions since GStreamer 1.24.9.
  + Fix the HTTP-based remote Web Inspector not loading in
    Chromium.
  + Fix content filters not working on about:blank iframes.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44308, CVE-2024-44309.
- Drop webkit2gtk3-CVE-2024-44308.patch and
  webkit2gtk3-CVE-2024-44309.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1739188800">- Update to version 2.46.6 (boo#1236946):
  + Fix a crash when enabling Skia CPU rendering.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24143, CVE-2025-24150, CVE-2025-24158,
    CVE-2025-24162.</changelog>
  <changelog author="mgorse@suse.com" date="1741953600">- Add 7d784721.patch: WebGL context primitive restart can be
  toggled from WebContent process (boo#1239547 CVE-2025-24201).</changelog>
  <changelog author="mgorse@suse.com" date="1743508800">- Update to version 2.48.0 (boo#1239863 boo#1239864):
  + Move tiles rendering to worker threads when rendering with the
    GPU.
  + Fix preserve-3D intersection rendering.
  + Added new function for creating Promise objects to
    JavaScripotCore GLib API.
  + The MediaRecorder backend gained WebM support (requires at
    least GStreamer 1.24.9) and audio bitrate configuration
    support.
  + Fix invalid DPI-aware font size conversion.
  + Bring back support for OpenType-SVG fonts using Skia SVG
    module.
  + Add metadata (title and creation/modification date) to the PDF
    document generated for printing.
  + Propagate the font’s computed locale to HarfBuzz.
  + The GPU process build is now enabled for WebGL, but the web
    process is still used by default. The runtime flag
    UseGPUProcessForWebGL can be used to use the GPU process for
    WebGL.
  + Security fixes: CVE-2024-44192, CVE-2024-54467, CVE-2025-24201,
  CVE-2025-24189.
- Drop 7d784721.patch: Fixed upstream.
- Disable speech synthesis. It has been disabled until now, and
  we don't have flite or spiel in SLE.
- Add gcc13-PIE to BuildRequires (bsc#1239950).
- Add webkit2gtk3-iochannel-network-cache.patch: backport upstream
  patch to stop using IOChannel in NetworkCache: hopefully fixes
  crashes in the network process.</changelog>
  <changelog author="mgorse@suse.com" date="1744113600">- Update to version 2.48.1 (boo#1240958 boo#1240961 boo#1240962
  boo#1240963 boo#1240964 boo#1240986 boo#1240987):
  + Limit the data stored in session state.
  + Remove the empty area below the title bar in Web Inspector when
    not docked.
  + Fix the build with GST_DISABLE_GST_DEBUG.
  + Fix the build with GStreamer &lt; 1.20.
  + Fix the build with video disabled.
  + Fix the build with clang 20.
  + Security fixes: CVE-2024-54551, CVE-2025-24208, CVE-2025-24209,
    CVE-2025-24213, CVE-2025-24216, CVE-2025-24264, CVE-2025-30427.
- Add 8bee9eb9.patch: fix the build on non-x86 architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1747828800">- Update to version 2.48.2 (boo#1243282 boo#1243286 boo#1243288
  boo#1243289 boo#1243424 boo#1243596):
  + Enable CSS Overscroll Behavior by default.
  + Change threaded rendering implementation to use Skia API
    instead of WebCore display list that is not thread safe.
  + Fix rendering when device scale factor change comes before the
    web view geometry update.
  + Fix network process crash on exit.
  + Fix the build with ENABLE_RESOURCE_USAGE=OFF.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24223, CVE-2025-31204, CVE-2025-31205,
    CVE-2025-31206, CVE-2025-31215, CVE-2025-31257.
- Drop 8bee9eb9.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1754395200">- Update to version 2.48.5 (boo#1247562 boo#1247563 boo#1247564
  boo#1247595 boo#1247596 boo#1247597 boo#1247598 boo#1247599
  boo#1247600):
  + Fix several crashes.
  + Security fixes: CVE-2025-31273, CVE-2025-31278, CVE-2025-43211,
    CVE-2025-43212, CVE-2025-43216, CVE-2025-43227, CVE-2025-43228,
    CVE-2025-43240, CVE-2025-43265, CVE-2025-6558.
  + Changes in version 2.48.4:
  + Improve emoji font selection with USE_SKIA=ON.
  + Improve playback of multimedia streams from blob URLs.
  + Fix the build with USE_SKIA_OPENTYPE_SVG=ON and
    USE_SYSPROF_CAPTURE=ON.
  + Fix the build on LoongArch with USE_SKIA=ON.
  + Fix crash when using a WebKitWebView widget in an offscreen
    window.
  + Fix several crashes and rendering issues.
  + Changes in version 2.48.3:
  + Fix a crash introduced by the new threaded rendering
    implementation using Skia API.
  + Improve rendering performance by recording layers once and
    replaying every dirty region in different worker threads.
  + Fix a crash when setting WEBKIT_SKIA_GPU_PAINTING_THREADS=0.
  + Fix a reference cycle in webkitmediastreamsrc preventing its
    disposal.
- Increase mem_per_process again to avoid running out of memory.</changelog>
  <changelog author="mgorse@suse.com" date="1758456000">- Update to version 2.50.0 (boo#1250439 boo#1250440 boo#1250441
  boo#1250442):
  + Improved rendering performance by recording each layer once and
    replaying every dirty region in different worker threads.
  + Enable damage propagation to the UI process by default.
  + CSS property font-variant-emoji is now enabled by default.
  + Font synthesis properties (bold/italic) are now properly
    handled.
  + Ensure web view is focused on tap gesture.
  + Added new API to get the theme color of a WebKitWebView.
  + Security fixes: CVE-2025-43272, CVE-2025-43342, CVE-2025-43356,
  CVE-2025-43368.
- Drop webkit2gtk3-iochannel-network-cache.patch: fixed upstream.
- Add webkit2gtk3-i586-build-fix.patch: fix the build on i586.
- Force the garbage collector to run more often when compiling on
  some architectures. Needed to avoid running out of memory.
- Remove _constraints override for armv6l and armv7l. They were not
  as restrictive as we would like and now seem unnecessary.</changelog>
  <changelog author="mgorse@suse.com" date="1760443200">- Update to version 2.50.1 (boo#1251975):
  + Improve text rendering performance.
  + Fix audio playback broken on instagram.
  + Fix rendering of layers with fractional transforms.
  + Fix the build with ENABLE(VIDEO) disabled.
  + Fix the build in s390x.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43343.
- Drop webkit2gtk3-i586-build-fix.patch: Merged upstream.
- Re-enable LTO on targets where it is not known to make the
  linker run out of memory.</changelog>
</package>
<package pkgid="8447d4dc71520f65d2a7eb85e1a45b3283397aa24dc86550553d5b56be55e8bf" name="libjavascriptcoregtk-6_0-1" arch="x86_64">
  <version epoch="0" ver="2.50.4" rel="150600.12.54.1"/>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834, CVE-2024-27808, CVE-2024-27820,
    CVE-2024-27833.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843, CVE-2024-54658.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
  <changelog author="mgorse@suse.com" date="1723118400">- Add CVE fixes:
  + webkit2gtk3-CVE-2024-40776.patch (boo#1228613 CVE-2024-40776)
  + webkit2gtk3-CVE-2024-40779.patch (boo#1228693 CVE-2024-40779)
  + webkit2gtk3-CVE-2024-40780.patch (boo#1228694 CVE-2024-40780)
  + webkit2gtk3-CVE-2024-40782.patch (boo#1228695 CVE-2024-40782)</changelog>
  <changelog author="mgorse@suse.com" date="1724068800">- Update to version 2.44.3 (boo#1228697):
  + Fix web process cache suspend/resume when sandbox is enabled.
  + Fix accelerated images dissapearing after scrolling.
  + Fix video flickering with DMA-BUF sink.
  + Fix pointer lock on X11.
  + Fix movement delta on mouse events in GTK3.
  + Undeprecate console message API and make it available in 2022
    API.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-40776, CVE-2024-40779, CVE-2024-40780,
    CVE-2024-40782, CVE-2024-40789, CVE-2024-4558, CVE-2024-27838,
  CVE-2024-27851.
- Drop patches now upstream:
  webkit2gtk3-CVE-2024-40776.patch
  webkit2gtk3-CVE-2024-40779.patch
  webkit2gtk3-CVE-2024-40780.patch
  webkit2gtk3-CVE-2024-40782.patch</changelog>
  <changelog author="mgorse@suse.com" date="1729166400">- Update to version 2.46.0 (boo#1231039):
  + Use Skia instead of cairo for 2D rendering and enable GPU
    rendering by default.
  + Enable offscreen canvas by default.
  + Add support for system tracing with Sysprof.
  + Implement printing using the Print portal.
  + Add new API to load settings from a config file.
  + Add a new setting to enable or disable the 2D canvas
    acceleration (enabled by default).
  + Undeprecate console messages API and make it available in 6.0
    API.
  + Security fixes: CVE-2024-40866, CVE-2024-44187, CVE-2024-44185,
    CVE-2024-54534, CVE-2024-27856, CVE-2025-43480.
- Drop webkit2gtk3-disable-dmabuf-nvidia.patch: Should not be
  needed anymore.
- Add webkit2gtk3-angle-s390x.patch: fix the build on s390x.
- Use gcc 13 to match what is tested upstream.
- Pass USE_SYSTEM_SYSPROF_CAPTURE=NO to cmake, avoid building
  sysprof capture for now.
- Add bug281495.patch: fix crash in ProcessLauncher socket
  monitor callback.</changelog>
  <changelog author="mgorse@suse.com" date="1730721600">- Update to version 2.46.3 (boo#1232747):
  + Flatten layers to a plane when preseve-3d style is set.
  + Fix DuckDuckGo links by adding a user agent quirk.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44244, CVE-2024-44296.
  + Changes in version 2.46.2:
  + Own well-known bus name on a11y bus.
  + Improve memory consumption when putImageData is used repeatedly
    on accelerated canvas.
  + Disable cached web process suspension for now to prevent leaks.
  + Improve text kerning with different combinations of antialias
    and hinting settings.
  + Destroy all network sessions on process exit.
  + Fix visible rectangle calculation when there are animations.
  + Fix the build with ENABLE_NOTIFICATIONS=OFF.
  + Fix the build with ENABLE_FULLSCREEN_API=OFF.
  + Fix the build with ENABLE_WEB_AUDIO=OFF.
  + Fix the build on ppc64le.
  + Changes in version 2.46.1:
  + Fix login QR code not shown in WhatsApp web.
  + Disable PSON by default again in GTK 3 API versions.
  + Disable DMABuf video sink by default to prevent file descriptor
    leaks.
  + Fix the build with GCC 13.
- Drop bug281495.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1732536000">- Add webkit2gtk3-CVE-2024-44308.patch: don't allocate DFG register
  after a slow path (boo#1233631 CVE-2024-44308).
- Add webkit2gtk3-CVE-2024-44309.patch: fix a cookie management
  issue (boo#1233632 CVE-2024-44309).</changelog>
  <changelog author="mgorse@suse.com" date="1735300800">- Update to version 2.46.5 (boo#1234851):
  + Fix the build with GBM and release logs disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-54479, CVE-2024-54502, CVE-2024-54505,
    CVE-2024-54508, CVE-2024-54543.
  + Changes in version 2.46.4:
  + Improve memory consumption and performance of Canvas
    getImageData.
  + Fix preserve-3D intersection rendering.
  + Fix video dimensions since GStreamer 1.24.9.
  + Fix the HTTP-based remote Web Inspector not loading in
    Chromium.
  + Fix content filters not working on about:blank iframes.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44308, CVE-2024-44309.
- Drop webkit2gtk3-CVE-2024-44308.patch and
  webkit2gtk3-CVE-2024-44309.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1739188800">- Update to version 2.46.6 (boo#1236946):
  + Fix a crash when enabling Skia CPU rendering.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24143, CVE-2025-24150, CVE-2025-24158,
    CVE-2025-24162.</changelog>
  <changelog author="mgorse@suse.com" date="1741953600">- Add 7d784721.patch: WebGL context primitive restart can be
  toggled from WebContent process (boo#1239547 CVE-2025-24201).</changelog>
  <changelog author="mgorse@suse.com" date="1743508800">- Update to version 2.48.0 (boo#1239863 boo#1239864):
  + Move tiles rendering to worker threads when rendering with the
    GPU.
  + Fix preserve-3D intersection rendering.
  + Added new function for creating Promise objects to
    JavaScripotCore GLib API.
  + The MediaRecorder backend gained WebM support (requires at
    least GStreamer 1.24.9) and audio bitrate configuration
    support.
  + Fix invalid DPI-aware font size conversion.
  + Bring back support for OpenType-SVG fonts using Skia SVG
    module.
  + Add metadata (title and creation/modification date) to the PDF
    document generated for printing.
  + Propagate the font’s computed locale to HarfBuzz.
  + The GPU process build is now enabled for WebGL, but the web
    process is still used by default. The runtime flag
    UseGPUProcessForWebGL can be used to use the GPU process for
    WebGL.
  + Security fixes: CVE-2024-44192, CVE-2024-54467, CVE-2025-24201,
  CVE-2025-24189.
- Drop 7d784721.patch: Fixed upstream.
- Disable speech synthesis. It has been disabled until now, and
  we don't have flite or spiel in SLE.
- Add gcc13-PIE to BuildRequires (bsc#1239950).
- Add webkit2gtk3-iochannel-network-cache.patch: backport upstream
  patch to stop using IOChannel in NetworkCache: hopefully fixes
  crashes in the network process.</changelog>
  <changelog author="mgorse@suse.com" date="1744113600">- Update to version 2.48.1 (boo#1240958 boo#1240961 boo#1240962
  boo#1240963 boo#1240964 boo#1240986 boo#1240987):
  + Limit the data stored in session state.
  + Remove the empty area below the title bar in Web Inspector when
    not docked.
  + Fix the build with GST_DISABLE_GST_DEBUG.
  + Fix the build with GStreamer &lt; 1.20.
  + Fix the build with video disabled.
  + Fix the build with clang 20.
  + Security fixes: CVE-2024-54551, CVE-2025-24208, CVE-2025-24209,
    CVE-2025-24213, CVE-2025-24216, CVE-2025-24264, CVE-2025-30427.
- Add 8bee9eb9.patch: fix the build on non-x86 architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1747828800">- Update to version 2.48.2 (boo#1243282 boo#1243286 boo#1243288
  boo#1243289 boo#1243424 boo#1243596):
  + Enable CSS Overscroll Behavior by default.
  + Change threaded rendering implementation to use Skia API
    instead of WebCore display list that is not thread safe.
  + Fix rendering when device scale factor change comes before the
    web view geometry update.
  + Fix network process crash on exit.
  + Fix the build with ENABLE_RESOURCE_USAGE=OFF.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24223, CVE-2025-31204, CVE-2025-31205,
    CVE-2025-31206, CVE-2025-31215, CVE-2025-31257.
- Drop 8bee9eb9.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1754395200">- Update to version 2.48.5 (boo#1247562 boo#1247563 boo#1247564
  boo#1247595 boo#1247596 boo#1247597 boo#1247598 boo#1247599
  boo#1247600):
  + Fix several crashes.
  + Security fixes: CVE-2025-31273, CVE-2025-31278, CVE-2025-43211,
    CVE-2025-43212, CVE-2025-43216, CVE-2025-43227, CVE-2025-43228,
    CVE-2025-43240, CVE-2025-43265, CVE-2025-6558.
  + Changes in version 2.48.4:
  + Improve emoji font selection with USE_SKIA=ON.
  + Improve playback of multimedia streams from blob URLs.
  + Fix the build with USE_SKIA_OPENTYPE_SVG=ON and
    USE_SYSPROF_CAPTURE=ON.
  + Fix the build on LoongArch with USE_SKIA=ON.
  + Fix crash when using a WebKitWebView widget in an offscreen
    window.
  + Fix several crashes and rendering issues.
  + Changes in version 2.48.3:
  + Fix a crash introduced by the new threaded rendering
    implementation using Skia API.
  + Improve rendering performance by recording layers once and
    replaying every dirty region in different worker threads.
  + Fix a crash when setting WEBKIT_SKIA_GPU_PAINTING_THREADS=0.
  + Fix a reference cycle in webkitmediastreamsrc preventing its
    disposal.
- Increase mem_per_process again to avoid running out of memory.</changelog>
  <changelog author="mgorse@suse.com" date="1758456000">- Update to version 2.50.0 (boo#1250439 boo#1250440 boo#1250441
  boo#1250442):
  + Improved rendering performance by recording each layer once and
    replaying every dirty region in different worker threads.
  + Enable damage propagation to the UI process by default.
  + CSS property font-variant-emoji is now enabled by default.
  + Font synthesis properties (bold/italic) are now properly
    handled.
  + Ensure web view is focused on tap gesture.
  + Added new API to get the theme color of a WebKitWebView.
  + Security fixes: CVE-2025-43272, CVE-2025-43342, CVE-2025-43356,
  CVE-2025-43368, CVE-2025-43419.
- Drop webkit2gtk3-iochannel-network-cache.patch: fixed upstream.
- Add webkit2gtk3-i586-build-fix.patch: fix the build on i586.
- Force the garbage collector to run more often when compiling on
  some architectures. Needed to avoid running out of memory.
- Remove _constraints override for armv6l and armv7l. They were not
  as restrictive as we would like and now seem unnecessary.</changelog>
  <changelog author="mgorse@suse.com" date="1760443200">- Update to version 2.50.1 (boo#1251975):
  + Improve text rendering performance.
  + Fix audio playback broken on instagram.
  + Fix rendering of layers with fractional transforms.
  + Fix the build with ENABLE(VIDEO) disabled.
  + Fix the build in s390x.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43343.
- Drop webkit2gtk3-i586-build-fix.patch: Merged upstream.
- Re-enable LTO on targets where it is not known to make the
  linker run out of memory.</changelog>
  <changelog author="mgorse@suse.com" date="1763985600">- Update to version 2.50.2 (bsc#1254165 bsc#1254166 bsc#1254167
  bsc#1254168 bsc#1254169 bsc#1254170 bsc#1254171 bsc#1254172
  bsc#1254174 bsc#1254176 bsc#1254177 bsc#1254179 bsc#1254208):
  + Prevent unsafe URI schemes from participating in media
    playback.
  + Make jsc_value_array_buffer_get_data() function introspectable.
  + Fix logging in to Google accounts that have a WebAuthn second
    factor configured.
  + Fix loading webkit://gpu when there are no threads configured
    for GPU rendering.
  + Fix rendering gradiants that use the CSS hue interpolation
    method.
  + Fix pasting image data from the clipboard.
  + Fix font-family selection when the font name contains spaces.
  + Fix the build with standard C libraries that lack execinfo.h,
    like Musl or uClibc.
  + Fix capturing canvas snapshots in the Web Inspector.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43392, CVE-2025-43425, CVE-2025-43427,
    CVE-2025-43429, CVE-2025-43430, CVE-2025-43431, CVE-2025-43432,
    CVE-2025-43434, CVE-2025-43440, CVE-2025-43443, CVE-2025-13502.
- Add webkit2gtk3-undefined-symbol.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1765195200">- Update to version 2.50.3 (bsc#1254473 bsc#1254498 bsc#1254509):
  + Fix seeking and looping of media elements that set the "loop"
    property.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-13947, CVE-2025-43421, CVE-2025-43458,
    CVE-2025-66287.
- Drop webkit2gtk3-undefined-symbol.patch: fixed upstream.
- Use %limit_build. Also define %dwz_low_mem_die_limit and
  %dwz_max_die_limit, similar to what we have in wpewebkit.
  This should simplify the logic for limiting jobs and will
  hopefully help with intermittent build failures.</changelog>
  <changelog author="mgorse@suse.com" date="1765972800">- Update to version 2.50.4 (bsc#1255183 bsc#1255191 bsc#1255194
  bsc#1255195 bsc#1255198 bsc#1255200 bsc#1255497):
  + Correctly handle the program name passed to the sleep disabler.
  + Ensure GStreamer is initialized before using the Quirks.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-14174, CVE-2025-43501, CVE-2025-43529,
    CVE-2025-43531, CVE-2025-43535, CVE-2025-43536, CVE-2025-43541.
- Add webkit2gtk3-a11y-fix-role-mapping.patch: fix a11y regression
  where AT-SPI roles were mapped incorrectly.</changelog>
</package>
<package pkgid="51df7f1e3bb4a6209b7d26ac924b59afc12ec79fa37373310914d4cf0bf891ab" name="libjavascriptcoregtk-6_0-1" arch="x86_64">
  <version epoch="0" ver="2.52.1" rel="150600.12.63.1"/>
  <changelog author="mgorse@suse.com" date="1724068800">- Update to version 2.44.3 (boo#1228697):
  + Fix web process cache suspend/resume when sandbox is enabled.
  + Fix accelerated images dissapearing after scrolling.
  + Fix video flickering with DMA-BUF sink.
  + Fix pointer lock on X11.
  + Fix movement delta on mouse events in GTK3.
  + Undeprecate console message API and make it available in 2022
    API.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-40776, CVE-2024-40779, CVE-2024-40780,
    CVE-2024-40782, CVE-2024-40789, CVE-2024-4558, CVE-2024-27838,
  CVE-2024-27851.
- Drop patches now upstream:
  webkit2gtk3-CVE-2024-40776.patch
  webkit2gtk3-CVE-2024-40779.patch
  webkit2gtk3-CVE-2024-40780.patch
  webkit2gtk3-CVE-2024-40782.patch</changelog>
  <changelog author="mgorse@suse.com" date="1729166400">- Update to version 2.46.0 (boo#1231039):
  + Use Skia instead of cairo for 2D rendering and enable GPU
    rendering by default.
  + Enable offscreen canvas by default.
  + Add support for system tracing with Sysprof.
  + Implement printing using the Print portal.
  + Add new API to load settings from a config file.
  + Add a new setting to enable or disable the 2D canvas
    acceleration (enabled by default).
  + Undeprecate console messages API and make it available in 6.0
    API.
  + Security fixes: CVE-2024-40866, CVE-2024-44187, CVE-2024-44185,
    CVE-2024-54534, CVE-2024-27856, CVE-2025-43480.
- Drop webkit2gtk3-disable-dmabuf-nvidia.patch: Should not be
  needed anymore.
- Add webkit2gtk3-angle-s390x.patch: fix the build on s390x.
- Use gcc 13 to match what is tested upstream.
- Pass USE_SYSTEM_SYSPROF_CAPTURE=NO to cmake, avoid building
  sysprof capture for now.
- Add bug281495.patch: fix crash in ProcessLauncher socket
  monitor callback.</changelog>
  <changelog author="mgorse@suse.com" date="1730721600">- Update to version 2.46.3 (boo#1232747):
  + Flatten layers to a plane when preseve-3d style is set.
  + Fix DuckDuckGo links by adding a user agent quirk.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44244, CVE-2024-44296.
  + Changes in version 2.46.2:
  + Own well-known bus name on a11y bus.
  + Improve memory consumption when putImageData is used repeatedly
    on accelerated canvas.
  + Disable cached web process suspension for now to prevent leaks.
  + Improve text kerning with different combinations of antialias
    and hinting settings.
  + Destroy all network sessions on process exit.
  + Fix visible rectangle calculation when there are animations.
  + Fix the build with ENABLE_NOTIFICATIONS=OFF.
  + Fix the build with ENABLE_FULLSCREEN_API=OFF.
  + Fix the build with ENABLE_WEB_AUDIO=OFF.
  + Fix the build on ppc64le.
  + Changes in version 2.46.1:
  + Fix login QR code not shown in WhatsApp web.
  + Disable PSON by default again in GTK 3 API versions.
  + Disable DMABuf video sink by default to prevent file descriptor
    leaks.
  + Fix the build with GCC 13.
- Drop bug281495.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1732536000">- Add webkit2gtk3-CVE-2024-44308.patch: don't allocate DFG register
  after a slow path (boo#1233631 CVE-2024-44308).
- Add webkit2gtk3-CVE-2024-44309.patch: fix a cookie management
  issue (boo#1233632 CVE-2024-44309).</changelog>
  <changelog author="mgorse@suse.com" date="1735300800">- Update to version 2.46.5 (boo#1234851):
  + Fix the build with GBM and release logs disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-54479, CVE-2024-54502, CVE-2024-54505,
    CVE-2024-54508, CVE-2024-54543.
  + Changes in version 2.46.4:
  + Improve memory consumption and performance of Canvas
    getImageData.
  + Fix preserve-3D intersection rendering.
  + Fix video dimensions since GStreamer 1.24.9.
  + Fix the HTTP-based remote Web Inspector not loading in
    Chromium.
  + Fix content filters not working on about:blank iframes.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44308, CVE-2024-44309.
- Drop webkit2gtk3-CVE-2024-44308.patch and
  webkit2gtk3-CVE-2024-44309.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1739188800">- Update to version 2.46.6 (boo#1236946):
  + Fix a crash when enabling Skia CPU rendering.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24143, CVE-2025-24150, CVE-2025-24158,
    CVE-2025-24162.</changelog>
  <changelog author="mgorse@suse.com" date="1741953600">- Add 7d784721.patch: WebGL context primitive restart can be
  toggled from WebContent process (boo#1239547 CVE-2025-24201).</changelog>
  <changelog author="mgorse@suse.com" date="1743508800">- Update to version 2.48.0 (boo#1239863 boo#1239864):
  + Move tiles rendering to worker threads when rendering with the
    GPU.
  + Fix preserve-3D intersection rendering.
  + Added new function for creating Promise objects to
    JavaScripotCore GLib API.
  + The MediaRecorder backend gained WebM support (requires at
    least GStreamer 1.24.9) and audio bitrate configuration
    support.
  + Fix invalid DPI-aware font size conversion.
  + Bring back support for OpenType-SVG fonts using Skia SVG
    module.
  + Add metadata (title and creation/modification date) to the PDF
    document generated for printing.
  + Propagate the font’s computed locale to HarfBuzz.
  + The GPU process build is now enabled for WebGL, but the web
    process is still used by default. The runtime flag
    UseGPUProcessForWebGL can be used to use the GPU process for
    WebGL.
  + Security fixes: CVE-2024-44192, CVE-2024-54467, CVE-2025-24201,
  CVE-2025-24189.
- Drop 7d784721.patch: Fixed upstream.
- Disable speech synthesis. It has been disabled until now, and
  we don't have flite or spiel in SLE.
- Add gcc13-PIE to BuildRequires (bsc#1239950).
- Add webkit2gtk3-iochannel-network-cache.patch: backport upstream
  patch to stop using IOChannel in NetworkCache: hopefully fixes
  crashes in the network process.</changelog>
  <changelog author="mgorse@suse.com" date="1744113600">- Update to version 2.48.1 (boo#1240958 boo#1240961 boo#1240962
  boo#1240963 boo#1240964 boo#1240986 boo#1240987):
  + Limit the data stored in session state.
  + Remove the empty area below the title bar in Web Inspector when
    not docked.
  + Fix the build with GST_DISABLE_GST_DEBUG.
  + Fix the build with GStreamer &lt; 1.20.
  + Fix the build with video disabled.
  + Fix the build with clang 20.
  + Security fixes: CVE-2024-54551, CVE-2025-24208, CVE-2025-24209,
    CVE-2025-24213, CVE-2025-24216, CVE-2025-24264, CVE-2025-30427.
- Add 8bee9eb9.patch: fix the build on non-x86 architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1747828800">- Update to version 2.48.2 (boo#1243282 boo#1243286 boo#1243288
  boo#1243289 boo#1243424 boo#1243596):
  + Enable CSS Overscroll Behavior by default.
  + Change threaded rendering implementation to use Skia API
    instead of WebCore display list that is not thread safe.
  + Fix rendering when device scale factor change comes before the
    web view geometry update.
  + Fix network process crash on exit.
  + Fix the build with ENABLE_RESOURCE_USAGE=OFF.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24223, CVE-2025-31204, CVE-2025-31205,
    CVE-2025-31206, CVE-2025-31215, CVE-2025-31257.
- Drop 8bee9eb9.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1754395200">- Update to version 2.48.5 (boo#1247562 boo#1247563 boo#1247564
  boo#1247595 boo#1247596 boo#1247597 boo#1247598 boo#1247599
  boo#1247600):
  + Fix several crashes.
  + Security fixes: CVE-2025-31273, CVE-2025-31278, CVE-2025-43211,
    CVE-2025-43212, CVE-2025-43216, CVE-2025-43227, CVE-2025-43228,
    CVE-2025-43240, CVE-2025-43265, CVE-2025-6558.
  + Changes in version 2.48.4:
  + Improve emoji font selection with USE_SKIA=ON.
  + Improve playback of multimedia streams from blob URLs.
  + Fix the build with USE_SKIA_OPENTYPE_SVG=ON and
    USE_SYSPROF_CAPTURE=ON.
  + Fix the build on LoongArch with USE_SKIA=ON.
  + Fix crash when using a WebKitWebView widget in an offscreen
    window.
  + Fix several crashes and rendering issues.
  + Changes in version 2.48.3:
  + Fix a crash introduced by the new threaded rendering
    implementation using Skia API.
  + Improve rendering performance by recording layers once and
    replaying every dirty region in different worker threads.
  + Fix a crash when setting WEBKIT_SKIA_GPU_PAINTING_THREADS=0.
  + Fix a reference cycle in webkitmediastreamsrc preventing its
    disposal.
- Increase mem_per_process again to avoid running out of memory.</changelog>
  <changelog author="mgorse@suse.com" date="1758456000">- Update to version 2.50.0 (boo#1250439 boo#1250440 boo#1250441
  boo#1250442):
  + Improved rendering performance by recording each layer once and
    replaying every dirty region in different worker threads.
  + Enable damage propagation to the UI process by default.
  + CSS property font-variant-emoji is now enabled by default.
  + Font synthesis properties (bold/italic) are now properly
    handled.
  + Ensure web view is focused on tap gesture.
  + Added new API to get the theme color of a WebKitWebView.
  + Security fixes: CVE-2025-43272, CVE-2025-43342, CVE-2025-43356,
  CVE-2025-43368, CVE-2025-43419, CVE-2025-31223, CVE-2025-31277.
- Drop webkit2gtk3-iochannel-network-cache.patch: fixed upstream.
- Add webkit2gtk3-i586-build-fix.patch: fix the build on i586.
- Force the garbage collector to run more often when compiling on
  some architectures. Needed to avoid running out of memory.
- Remove _constraints override for armv6l and armv7l. They were not
  as restrictive as we would like and now seem unnecessary.</changelog>
  <changelog author="mgorse@suse.com" date="1760443200">- Update to version 2.50.1 (boo#1251975):
  + Improve text rendering performance.
  + Fix audio playback broken on instagram.
  + Fix rendering of layers with fractional transforms.
  + Fix the build with ENABLE(VIDEO) disabled.
  + Fix the build in s390x.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43343.
- Drop webkit2gtk3-i586-build-fix.patch: Merged upstream.
- Re-enable LTO on targets where it is not known to make the
  linker run out of memory.</changelog>
  <changelog author="mgorse@suse.com" date="1763985600">- Update to version 2.50.2 (bsc#1254165 bsc#1254166 bsc#1254167
  bsc#1254168 bsc#1254169 bsc#1254170 bsc#1254171 bsc#1254172
  bsc#1254174 bsc#1254176 bsc#1254177 bsc#1254179 bsc#1254208):
  + Prevent unsafe URI schemes from participating in media
    playback.
  + Make jsc_value_array_buffer_get_data() function introspectable.
  + Fix logging in to Google accounts that have a WebAuthn second
    factor configured.
  + Fix loading webkit://gpu when there are no threads configured
    for GPU rendering.
  + Fix rendering gradiants that use the CSS hue interpolation
    method.
  + Fix pasting image data from the clipboard.
  + Fix font-family selection when the font name contains spaces.
  + Fix the build with standard C libraries that lack execinfo.h,
    like Musl or uClibc.
  + Fix capturing canvas snapshots in the Web Inspector.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43392, CVE-2025-43425, CVE-2025-43427,
    CVE-2025-43429, CVE-2025-43430, CVE-2025-43431, CVE-2025-43432,
  +    CVE-2025-43434, CVE-2025-43440, CVE-2025-43443, CVE-2025-13502,
  +    CVE-2025-43433, CVE-2025-43438, CVE-2025-43441.
- Add webkit2gtk3-undefined-symbol.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1765195200">- Update to version 2.50.3 (bsc#1254473 bsc#1254498 bsc#1254509):
  + Fix seeking and looping of media elements that set the "loop"
    property.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-13947, CVE-2025-43421, CVE-2025-43458,
    CVE-2025-66287.
- Drop webkit2gtk3-undefined-symbol.patch: fixed upstream.
- Use %limit_build. Also define %dwz_low_mem_die_limit and
  %dwz_max_die_limit, similar to what we have in wpewebkit.
  This should simplify the logic for limiting jobs and will
  hopefully help with intermittent build failures.</changelog>
  <changelog author="mgorse@suse.com" date="1765972800">- Update to version 2.50.4 (bsc#1255183 bsc#1255191 bsc#1255194
  bsc#1255195 bsc#1255198 bsc#1255200 bsc#1255497):
  + Correctly handle the program name passed to the sleep disabler.
  + Ensure GStreamer is initialized before using the Quirks.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-14174, CVE-2025-43501, CVE-2025-43529,
    CVE-2025-43531, CVE-2025-43535, CVE-2025-43536, CVE-2025-43541.
- Add webkit2gtk3-a11y-fix-role-mapping.patch: fix a11y regression
  where AT-SPI roles were mapped incorrectly.</changelog>
  <changelog author="mgorse@suse.com" date="1773921600">- Update to version 2.52.0:
  + Make scrolling with touch input smoother for small movements.
  + Fix estimated load progress of downloads when Content-Length
    value is wrong.
  + Ensure that "scrollend" events are correctly emitted after
    scroll animations.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43213, CVE-2025-43214, CVE-2025-43457,
    CVE-2025-43511, CVE-2025-46299, CVE-2026-20608, CVE-2026-20635,
    CVE-2026-20636, CVE-2026-20644, CVE-2026-20652, CVE-2026-20676
    (bsc#1259934 bsc#1259935 bsc#1259936 bsc#1259937 bsc#1259938
    bsc#1259939 bsc#1259940 bsc#1259941 bsc#1259942 bsc#1259943
    bsc#1259944 bsc#1259945 bsc#1259946 bsc#1259947 bsc#1259948
    bsc#1259949 bsc#1259950)
- Drop webkit2gtk3-a11y-fix-role-mapping.patch: fixed upstream.
- Add webkit2gtk3-libsoup2.patch: reinstate support for libsoup2.</changelog>
  <changelog author="mgorse@suse.com" date="1774267200">- Add webkit2gtk3-aarch64-build-fix.patch: fix the build with JIT
  disabled.
- Increase limit_build to try to prevent running out of memory.</changelog>
  <changelog author="mgorse@suse.com" date="1774612800">- Pass ggc-min-expand=10 on some architectures, rather than 30.
  We are still getting "virtual memory exhausted" on i586
  sometimes, and hopefully this will help.</changelog>
  <changelog author="mgorse@suse.com" date="1775044800">- Update to version 2.52.1 (bsc#1261172 bsc#1261173 bsc#1261174
  bsc#1261175 bsc#1261176 bsc#1261177 bsc#1261178 bsc#1261179):
  + Reduce the amount of useless MPRIS notifications produced by
    MediaSesion when the information about media being played is
    incomplete.
  + Support turning off USE_GSTREAMER to configure the build with
    all multimedia features disabled.
  + Add Sysprof marks for mouse events.
  + Fix MediaSession icon for iheart.com not being displayed.
  + Fix the build with USE_GSTREAMER_GL disabled.
  + Fix the build with librice version 0.3.0 or newer.
  + Fix several crashes and rendering issues.
  + Translation updates: Georgian.
  + Security fixes: CVE-2026-20643, CVE-2026-20664, CVE-2026-20665,
    CVE-2026-20691, CVE-2026-28857, CVE-2026-28859, CVE-2026-28861,
    CVE-2026-28871.
- Rebase webkit2gtk3-libsoup2.patch.
- Add webkitgtk-gtk3-build-fix.patch: fix the gtk3 build.</changelog>
</package>
<package pkgid="594fcffb9fa232bd5814ce3069cf80161e70db73bc38298f325ba572e609a1bd" name="libjq-devel" arch="x86_64">
  <version epoch="0" ver="1.6" rel="150000.3.12.1"/>
  <changelog author="idonmez@suse.com" date="1439899200">- Update to version 1.5
  * Regexp support
  * A proper module system
  * Destructuring syntax
  * Math functions
  * An online streaming parser
  * Minimal I/O builtins (inputs, debug)
  * try/catch for catching and handling errors
  * Tail call optimization
  * Datetime functions
  * Performance enhancements
- Add oniguruma-devel BuildRequires for regexp support</changelog>
  <changelog author="idonmez@suse.com" date="1461585600">- Add CVE-2015-8863.patch to fix a heap overflow bsc#976992</changelog>
  <changelog author="mpluskal@suse.com" date="1468670400">- Make building more verbose
- Run tests</changelog>
  <changelog author="mpluskal@suse.com" date="1483358400">- Update tests dependencies to increase test coverage (bsc#1017157)
  * valgrind based tests were skipped
- Do not run tests in qemu builds, valgrind does not work reliably
  in such conditions</changelog>
  <changelog author="idonmez@suse.com" date="1486123200">- Add CVE-2016-4074.patch to prevent a stack exhaustion
  CVE-2016-4074 bsc#1014176</changelog>
  <changelog author="aavindraa@gmail.com" date="1541160000">- Update to version 1.6
  * Destructuring Alternation
  * many new builtins (see docs)
  * Add support for ASAN and UBSAN
  * Make it easier to use jq with shebangs
  * Add $ENV builtin variable to access environment
  * Add JQ_COLORS env var for configuring the output colors
  * change: Calling jq without a program argument now always assumes
    "." for the program, regardless of stdin/stdout
  * fix: Make sorting stable regardless of qsort.
- cleanup with spec-cleaner
- drop CVE-2015-8863.patch (upstreamed in 8eb1367ca44e772963e704a700ef72ae2e12babd)
- drop CVE-2016-4074.patch (upstreamed in fd4ae8304e23007672af9a37855c7a76de7c78cf)</changelog>
  <changelog author="myen@suse.com" date="1562241600">- Make jq depend on libjq1, so upgrading jq upgrades both
  See: https://github.com/stedolan/jq/issues/1904</changelog>
  <changelog author="ncutler@suse.com" date="1749729600">- Add patch CVE-2024-23337.patch (CVE-2024-23337, bsc#1243450)</changelog>
  <changelog author="ncutler@suse.com" date="1754049600">- Add patches CVE-2025-48060-1.patch and CVE-2025-48060-2.patch
  (CVE-2025-48060, bsc#1244116)</changelog>
  <changelog author="ncutler@suse.com" date="1773144000">- Add patch CVE-2025-9403.patch (CVE-2025-9403, bsc#1248600)</changelog>
</package>
<package pkgid="96ce7604e795e11f5a3992f2147ca9e08731eac1485c8b5764860fc4eddd019a" name="libjq-devel" arch="x86_64">
  <version epoch="0" ver="1.6" rel="150000.3.6.1"/>
  <changelog author="prusnak@opensuse.org" date="1402833600">- Updated to 1.4
  + New command line arguments
  * jq --arg-file variable file
  * jq --unbuffered
  * jq -e / --exit-status (set exit status based on outputs)
  * jq -S / --sort-keys (now jq no longer sorts object keys by
    default
  + Syntax changes
  * .. -&gt; like // in XPath (recursive traversal)
  * question mark (e.g., .a?) to suppress errors
  * ."foo" syntax (equivalent to .["foo"])
  * better error handling for .foo
  * added % operator (modulo)
  * allow negation without requiring extra parenthesis
  * more function arguments (up to six)
  + New filters
  * any, all
  * iterables, arrays, objects, scalars, nulls, booleans,
    numbers, strings, values
  + New string built-ins
  * split
  * join (join an array of strings with a given separator string)
  * ltrimstr, rtrimstr
  * startswith, endswith
  * explode, implode
  * fromjson, tojson
  * index, rindex, indices
  + New math functions
  * floor, sqrt, cbrt, etc.
  + Addition of libjq, a C API interface to jq's JSON representation
    and for running jq programs from C applications.</changelog>
  <changelog author="idonmez@suse.com" date="1403870400">- Don't package static libs
- Fix rpath on the main binary</changelog>
  <changelog author="idonmez@suse.com" date="1439899200">- Update to version 1.5
  * Regexp support
  * A proper module system
  * Destructuring syntax
  * Math functions
  * An online streaming parser
  * Minimal I/O builtins (inputs, debug)
  * try/catch for catching and handling errors
  * Tail call optimization
  * Datetime functions
  * Performance enhancements
- Add oniguruma-devel BuildRequires for regexp support</changelog>
  <changelog author="idonmez@suse.com" date="1461585600">- Add CVE-2015-8863.patch to fix a heap overflow bsc#976992</changelog>
  <changelog author="mpluskal@suse.com" date="1468670400">- Make building more verbose
- Run tests</changelog>
  <changelog author="mpluskal@suse.com" date="1483358400">- Update tests dependencies to increase test coverage (bsc#1017157)
  * valgrind based tests were skipped
- Do not run tests in qemu builds, valgrind does not work reliably
  in such conditions</changelog>
  <changelog author="idonmez@suse.com" date="1486123200">- Add CVE-2016-4074.patch to prevent a stack exhaustion
  CVE-2016-4074 bsc#1014176</changelog>
  <changelog author="aavindraa@gmail.com" date="1541160000">- Update to version 1.6
  * Destructuring Alternation
  * many new builtins (see docs)
  * Add support for ASAN and UBSAN
  * Make it easier to use jq with shebangs
  * Add $ENV builtin variable to access environment
  * Add JQ_COLORS env var for configuring the output colors
  * change: Calling jq without a program argument now always assumes
    "." for the program, regardless of stdin/stdout
  * fix: Make sorting stable regardless of qsort.
- cleanup with spec-cleaner
- drop CVE-2015-8863.patch (upstreamed in 8eb1367ca44e772963e704a700ef72ae2e12babd)
- drop CVE-2016-4074.patch (upstreamed in fd4ae8304e23007672af9a37855c7a76de7c78cf)</changelog>
  <changelog author="myen@suse.com" date="1562241600">- Make jq depend on libjq1, so upgrading jq upgrades both
  See: https://github.com/stedolan/jq/issues/1904</changelog>
  <changelog author="ncutler@suse.com" date="1749729600">- Add patch CVE-2024-23337.patch (CVE-2024-23337, bsc#1243450)</changelog>
</package>
<package pkgid="1785ebe076170a1a2bf228cf8db788f7b851907527918cf632ff73fd23fe3355" name="libjq-devel" arch="x86_64">
  <version epoch="0" ver="1.6" rel="150000.3.9.1"/>
  <changelog author="idonmez@suse.com" date="1403870400">- Don't package static libs
- Fix rpath on the main binary</changelog>
  <changelog author="idonmez@suse.com" date="1439899200">- Update to version 1.5
  * Regexp support
  * A proper module system
  * Destructuring syntax
  * Math functions
  * An online streaming parser
  * Minimal I/O builtins (inputs, debug)
  * try/catch for catching and handling errors
  * Tail call optimization
  * Datetime functions
  * Performance enhancements
- Add oniguruma-devel BuildRequires for regexp support</changelog>
  <changelog author="idonmez@suse.com" date="1461585600">- Add CVE-2015-8863.patch to fix a heap overflow bsc#976992</changelog>
  <changelog author="mpluskal@suse.com" date="1468670400">- Make building more verbose
- Run tests</changelog>
  <changelog author="mpluskal@suse.com" date="1483358400">- Update tests dependencies to increase test coverage (bsc#1017157)
  * valgrind based tests were skipped
- Do not run tests in qemu builds, valgrind does not work reliably
  in such conditions</changelog>
  <changelog author="idonmez@suse.com" date="1486123200">- Add CVE-2016-4074.patch to prevent a stack exhaustion
  CVE-2016-4074 bsc#1014176</changelog>
  <changelog author="aavindraa@gmail.com" date="1541160000">- Update to version 1.6
  * Destructuring Alternation
  * many new builtins (see docs)
  * Add support for ASAN and UBSAN
  * Make it easier to use jq with shebangs
  * Add $ENV builtin variable to access environment
  * Add JQ_COLORS env var for configuring the output colors
  * change: Calling jq without a program argument now always assumes
    "." for the program, regardless of stdin/stdout
  * fix: Make sorting stable regardless of qsort.
- cleanup with spec-cleaner
- drop CVE-2015-8863.patch (upstreamed in 8eb1367ca44e772963e704a700ef72ae2e12babd)
- drop CVE-2016-4074.patch (upstreamed in fd4ae8304e23007672af9a37855c7a76de7c78cf)</changelog>
  <changelog author="myen@suse.com" date="1562241600">- Make jq depend on libjq1, so upgrading jq upgrades both
  See: https://github.com/stedolan/jq/issues/1904</changelog>
  <changelog author="ncutler@suse.com" date="1749729600">- Add patch CVE-2024-23337.patch (CVE-2024-23337, bsc#1243450)</changelog>
  <changelog author="ncutler@suse.com" date="1754049600">- Add patches CVE-2025-48060-1.patch and CVE-2025-48060-2.patch
  (CVE-2025-48060, bsc#1244116)</changelog>
</package>
<package pkgid="c75a9ad55bf9c70ef55217c9fc3b003c98fbb11eed56e7978d0bb60d2ff3ee5c" name="libjq1" arch="x86_64">
  <version epoch="0" ver="1.6" rel="150000.3.12.1"/>
  <changelog author="idonmez@suse.com" date="1439899200">- Update to version 1.5
  * Regexp support
  * A proper module system
  * Destructuring syntax
  * Math functions
  * An online streaming parser
  * Minimal I/O builtins (inputs, debug)
  * try/catch for catching and handling errors
  * Tail call optimization
  * Datetime functions
  * Performance enhancements
- Add oniguruma-devel BuildRequires for regexp support</changelog>
  <changelog author="idonmez@suse.com" date="1461585600">- Add CVE-2015-8863.patch to fix a heap overflow bsc#976992</changelog>
  <changelog author="mpluskal@suse.com" date="1468670400">- Make building more verbose
- Run tests</changelog>
  <changelog author="mpluskal@suse.com" date="1483358400">- Update tests dependencies to increase test coverage (bsc#1017157)
  * valgrind based tests were skipped
- Do not run tests in qemu builds, valgrind does not work reliably
  in such conditions</changelog>
  <changelog author="idonmez@suse.com" date="1486123200">- Add CVE-2016-4074.patch to prevent a stack exhaustion
  CVE-2016-4074 bsc#1014176</changelog>
  <changelog author="aavindraa@gmail.com" date="1541160000">- Update to version 1.6
  * Destructuring Alternation
  * many new builtins (see docs)
  * Add support for ASAN and UBSAN
  * Make it easier to use jq with shebangs
  * Add $ENV builtin variable to access environment
  * Add JQ_COLORS env var for configuring the output colors
  * change: Calling jq without a program argument now always assumes
    "." for the program, regardless of stdin/stdout
  * fix: Make sorting stable regardless of qsort.
- cleanup with spec-cleaner
- drop CVE-2015-8863.patch (upstreamed in 8eb1367ca44e772963e704a700ef72ae2e12babd)
- drop CVE-2016-4074.patch (upstreamed in fd4ae8304e23007672af9a37855c7a76de7c78cf)</changelog>
  <changelog author="myen@suse.com" date="1562241600">- Make jq depend on libjq1, so upgrading jq upgrades both
  See: https://github.com/stedolan/jq/issues/1904</changelog>
  <changelog author="ncutler@suse.com" date="1749729600">- Add patch CVE-2024-23337.patch (CVE-2024-23337, bsc#1243450)</changelog>
  <changelog author="ncutler@suse.com" date="1754049600">- Add patches CVE-2025-48060-1.patch and CVE-2025-48060-2.patch
  (CVE-2025-48060, bsc#1244116)</changelog>
  <changelog author="ncutler@suse.com" date="1773144000">- Add patch CVE-2025-9403.patch (CVE-2025-9403, bsc#1248600)</changelog>
</package>
<package pkgid="30e635484cddd8cece4e03795805e19255bb6f1245d4c8bd1a3c96b968ec2476" name="libjq1" arch="x86_64">
  <version epoch="0" ver="1.6" rel="150000.3.6.1"/>
  <changelog author="prusnak@opensuse.org" date="1402833600">- Updated to 1.4
  + New command line arguments
  * jq --arg-file variable file
  * jq --unbuffered
  * jq -e / --exit-status (set exit status based on outputs)
  * jq -S / --sort-keys (now jq no longer sorts object keys by
    default
  + Syntax changes
  * .. -&gt; like // in XPath (recursive traversal)
  * question mark (e.g., .a?) to suppress errors
  * ."foo" syntax (equivalent to .["foo"])
  * better error handling for .foo
  * added % operator (modulo)
  * allow negation without requiring extra parenthesis
  * more function arguments (up to six)
  + New filters
  * any, all
  * iterables, arrays, objects, scalars, nulls, booleans,
    numbers, strings, values
  + New string built-ins
  * split
  * join (join an array of strings with a given separator string)
  * ltrimstr, rtrimstr
  * startswith, endswith
  * explode, implode
  * fromjson, tojson
  * index, rindex, indices
  + New math functions
  * floor, sqrt, cbrt, etc.
  + Addition of libjq, a C API interface to jq's JSON representation
    and for running jq programs from C applications.</changelog>
  <changelog author="idonmez@suse.com" date="1403870400">- Don't package static libs
- Fix rpath on the main binary</changelog>
  <changelog author="idonmez@suse.com" date="1439899200">- Update to version 1.5
  * Regexp support
  * A proper module system
  * Destructuring syntax
  * Math functions
  * An online streaming parser
  * Minimal I/O builtins (inputs, debug)
  * try/catch for catching and handling errors
  * Tail call optimization
  * Datetime functions
  * Performance enhancements
- Add oniguruma-devel BuildRequires for regexp support</changelog>
  <changelog author="idonmez@suse.com" date="1461585600">- Add CVE-2015-8863.patch to fix a heap overflow bsc#976992</changelog>
  <changelog author="mpluskal@suse.com" date="1468670400">- Make building more verbose
- Run tests</changelog>
  <changelog author="mpluskal@suse.com" date="1483358400">- Update tests dependencies to increase test coverage (bsc#1017157)
  * valgrind based tests were skipped
- Do not run tests in qemu builds, valgrind does not work reliably
  in such conditions</changelog>
  <changelog author="idonmez@suse.com" date="1486123200">- Add CVE-2016-4074.patch to prevent a stack exhaustion
  CVE-2016-4074 bsc#1014176</changelog>
  <changelog author="aavindraa@gmail.com" date="1541160000">- Update to version 1.6
  * Destructuring Alternation
  * many new builtins (see docs)
  * Add support for ASAN and UBSAN
  * Make it easier to use jq with shebangs
  * Add $ENV builtin variable to access environment
  * Add JQ_COLORS env var for configuring the output colors
  * change: Calling jq without a program argument now always assumes
    "." for the program, regardless of stdin/stdout
  * fix: Make sorting stable regardless of qsort.
- cleanup with spec-cleaner
- drop CVE-2015-8863.patch (upstreamed in 8eb1367ca44e772963e704a700ef72ae2e12babd)
- drop CVE-2016-4074.patch (upstreamed in fd4ae8304e23007672af9a37855c7a76de7c78cf)</changelog>
  <changelog author="myen@suse.com" date="1562241600">- Make jq depend on libjq1, so upgrading jq upgrades both
  See: https://github.com/stedolan/jq/issues/1904</changelog>
  <changelog author="ncutler@suse.com" date="1749729600">- Add patch CVE-2024-23337.patch (CVE-2024-23337, bsc#1243450)</changelog>
</package>
<package pkgid="658947be2a06b87f5e21dd8f5965f68b577f435698d4603e0ff6316cd8578b5c" name="libjq1" arch="x86_64">
  <version epoch="0" ver="1.6" rel="150000.3.9.1"/>
  <changelog author="idonmez@suse.com" date="1403870400">- Don't package static libs
- Fix rpath on the main binary</changelog>
  <changelog author="idonmez@suse.com" date="1439899200">- Update to version 1.5
  * Regexp support
  * A proper module system
  * Destructuring syntax
  * Math functions
  * An online streaming parser
  * Minimal I/O builtins (inputs, debug)
  * try/catch for catching and handling errors
  * Tail call optimization
  * Datetime functions
  * Performance enhancements
- Add oniguruma-devel BuildRequires for regexp support</changelog>
  <changelog author="idonmez@suse.com" date="1461585600">- Add CVE-2015-8863.patch to fix a heap overflow bsc#976992</changelog>
  <changelog author="mpluskal@suse.com" date="1468670400">- Make building more verbose
- Run tests</changelog>
  <changelog author="mpluskal@suse.com" date="1483358400">- Update tests dependencies to increase test coverage (bsc#1017157)
  * valgrind based tests were skipped
- Do not run tests in qemu builds, valgrind does not work reliably
  in such conditions</changelog>
  <changelog author="idonmez@suse.com" date="1486123200">- Add CVE-2016-4074.patch to prevent a stack exhaustion
  CVE-2016-4074 bsc#1014176</changelog>
  <changelog author="aavindraa@gmail.com" date="1541160000">- Update to version 1.6
  * Destructuring Alternation
  * many new builtins (see docs)
  * Add support for ASAN and UBSAN
  * Make it easier to use jq with shebangs
  * Add $ENV builtin variable to access environment
  * Add JQ_COLORS env var for configuring the output colors
  * change: Calling jq without a program argument now always assumes
    "." for the program, regardless of stdin/stdout
  * fix: Make sorting stable regardless of qsort.
- cleanup with spec-cleaner
- drop CVE-2015-8863.patch (upstreamed in 8eb1367ca44e772963e704a700ef72ae2e12babd)
- drop CVE-2016-4074.patch (upstreamed in fd4ae8304e23007672af9a37855c7a76de7c78cf)</changelog>
  <changelog author="myen@suse.com" date="1562241600">- Make jq depend on libjq1, so upgrading jq upgrades both
  See: https://github.com/stedolan/jq/issues/1904</changelog>
  <changelog author="ncutler@suse.com" date="1749729600">- Add patch CVE-2024-23337.patch (CVE-2024-23337, bsc#1243450)</changelog>
  <changelog author="ncutler@suse.com" date="1754049600">- Add patches CVE-2025-48060-1.patch and CVE-2025-48060-2.patch
  (CVE-2025-48060, bsc#1244116)</changelog>
</package>
<package pkgid="79a79cc1d8df8ac87294fedb17e346c1be8e6625b71095a05d2bfccdb04323ec" name="libkmod-devel" arch="x86_64">
  <version epoch="0" ver="29" rel="150600.13.3.1"/>
  <changelog author="msuchanek@suse.com" date="1593777600">- Drop kmod-compat (boo#1173353):
  The symlinks in kmod-compat are not obsolete. They are
  desirable for kernel module autoload. The "kernel.modprobe"
  sysctl references /sbin/modprobe, and changing it to
  "/usr/bin/kmod load" is not possible, because this sysctl
  specifies a single executable, not a command (so spaces will be
  treated as part of the filename).</changelog>
  <changelog author="jengelh@inai.de" date="1594123200">- Drop old RPM constructs from the build recipe.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="jengelh@inai.de" date="1604664000">- Add usr-lib-modprobe.patch [boo#1092648]</changelog>
  <changelog author="msuchanek@suse.de" date="1610452800">- Update usr-lib-modprobe.patch to upstream submission (boo#1180821).
- Require libxslt-tools for xsltproc and use local stylesheet.
  * no-stylesheet-download.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1611835200">- Backport upstream fix 0001-Fix-modinfo-F-always-shows-name-for-built-ins.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1611835201">- Update to v28
  * Add Zstandard to the supported compression formats using libzstd
    (tests only - cannot be disabled in tests)
  * Ignore ill-formed kernel command line, e.g. with "ivrs_acpihid[00:14.5]=AMD0020:0"
    option in it
  * Fix some memory leaks
  * Fix 0-length builtin.alias.bin: it needs at least the index header</changelog>
  <changelog author="dimstar@opensuse.org" date="1611921600">- Supplement bash-completion subpackage against the main package
  and bash-completion.
- Also require the main package plus bash-completion: the
  completion package is useless without either of the two.</changelog>
  <changelog author="msuchanek@suse.de" date="1612440000">- Fix tests to not test disabled features. Disable zstd again.
  * kmod-populate-modules-Use-more-bash-more-quotes.patch
  * kmod-testsuite-compress-modules-if-feature-is-enabled.patch
  * kmod-also-test-xz-compression.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1613649600">- Fix grub's requoted kernel parameters (bsc#1181111)
  * 0001-libkmod-config-revamp-kcmdline-parsing-into-a-state-.patch
  * 0002-libkmod-config-re-quote-option-from-kernel-cmdline.patch</changelog>
  <changelog author="jengelh@inai.de" date="1622116800">- Update to release 29
  * Fix `modinfo -F` not working for built-in modules and
    certain fields.
  * Fix a memory leak, overflow and double free on error path.
- Drop 0001-Fix-modinfo-F-always-shows-name-for-built-ins.patch,
  0001-libkmod-config-revamp-kcmdline-parsing-into-a-state-.patch,
  0002-libkmod-config-re-quote-option-from-kernel-cmdline.patch
  (all merged)</changelog>
  <changelog author="msuchanek@suse.de" date="1622289600">- /usr/lib should override /lib where both are available. Support /usr/lib for
  depmod.d as well.
  * Refresh usr-lib-modprobe.patch
- Remove test patches included in release 29
  - kmod-populate-modules-Use-more-bash-more-quotes.patch
  - kmod-testsuite-compress-modules-if-feature-is-enabled.patch
  - kmod-also-test-xz-compression.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1623067200">- Enable support for ZSTD compressed modules</changelog>
  <changelog author="msuchanek@suse.de" date="1629288000">- Display module information even for modules built into the running kernel
  (bsc#1189537).
  + libkmod-Provide-info-even-for-modules-built-into-the.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1630065600">- Add ZSTD support on Tumbleweed only. Add a way to detect ZSTD.</changelog>
  <changelog author="msuchanek@suse.com" date="1630929600">- Use docbook 4 rather than docbook 5 for building man pages (bsc#1190190).
  * Refres no-stylesheet-download.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1632484800">- Enable ZSTD on 15.4 (jsc#SLE-21256).</changelog>
  <changelog author="msuchanek@suse.com" date="1635422400">- Enable ZSTD on 15.3 as well (boo#1192104).
- Only test ZSTD in testsuite on releases where it is available.</changelog>
  <changelog author="msuchanek@suse.com" date="1638792000">- Ensure that kmod and packages linking to libkmod provide same features
  (bsc#1193430).</changelog>
  <changelog author="msuchanek@suse.de" date="1763553600">- man: modprobe.d: document the config file order handling (bsc#1253741)
  * man-modprobe.d-document-the-config-file-order-handling.patch</changelog>
</package>
<package pkgid="b739fbd794b15e73a06de8c4c9d557c17b5d5ac5f366f22fbd847fc631ee3708" name="libkmod2" arch="x86_64">
  <version epoch="0" ver="29" rel="150600.13.3.1"/>
  <changelog author="msuchanek@suse.com" date="1593777600">- Drop kmod-compat (boo#1173353):
  The symlinks in kmod-compat are not obsolete. They are
  desirable for kernel module autoload. The "kernel.modprobe"
  sysctl references /sbin/modprobe, and changing it to
  "/usr/bin/kmod load" is not possible, because this sysctl
  specifies a single executable, not a command (so spaces will be
  treated as part of the filename).</changelog>
  <changelog author="jengelh@inai.de" date="1594123200">- Drop old RPM constructs from the build recipe.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="jengelh@inai.de" date="1604664000">- Add usr-lib-modprobe.patch [boo#1092648]</changelog>
  <changelog author="msuchanek@suse.de" date="1610452800">- Update usr-lib-modprobe.patch to upstream submission (boo#1180821).
- Require libxslt-tools for xsltproc and use local stylesheet.
  * no-stylesheet-download.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1611835200">- Backport upstream fix 0001-Fix-modinfo-F-always-shows-name-for-built-ins.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1611835201">- Update to v28
  * Add Zstandard to the supported compression formats using libzstd
    (tests only - cannot be disabled in tests)
  * Ignore ill-formed kernel command line, e.g. with "ivrs_acpihid[00:14.5]=AMD0020:0"
    option in it
  * Fix some memory leaks
  * Fix 0-length builtin.alias.bin: it needs at least the index header</changelog>
  <changelog author="dimstar@opensuse.org" date="1611921600">- Supplement bash-completion subpackage against the main package
  and bash-completion.
- Also require the main package plus bash-completion: the
  completion package is useless without either of the two.</changelog>
  <changelog author="msuchanek@suse.de" date="1612440000">- Fix tests to not test disabled features. Disable zstd again.
  * kmod-populate-modules-Use-more-bash-more-quotes.patch
  * kmod-testsuite-compress-modules-if-feature-is-enabled.patch
  * kmod-also-test-xz-compression.patch</changelog>
  <changelog author="jslaby@suse.cz" date="1613649600">- Fix grub's requoted kernel parameters (bsc#1181111)
  * 0001-libkmod-config-revamp-kcmdline-parsing-into-a-state-.patch
  * 0002-libkmod-config-re-quote-option-from-kernel-cmdline.patch</changelog>
  <changelog author="jengelh@inai.de" date="1622116800">- Update to release 29
  * Fix `modinfo -F` not working for built-in modules and
    certain fields.
  * Fix a memory leak, overflow and double free on error path.
- Drop 0001-Fix-modinfo-F-always-shows-name-for-built-ins.patch,
  0001-libkmod-config-revamp-kcmdline-parsing-into-a-state-.patch,
  0002-libkmod-config-re-quote-option-from-kernel-cmdline.patch
  (all merged)</changelog>
  <changelog author="msuchanek@suse.de" date="1622289600">- /usr/lib should override /lib where both are available. Support /usr/lib for
  depmod.d as well.
  * Refresh usr-lib-modprobe.patch
- Remove test patches included in release 29
  - kmod-populate-modules-Use-more-bash-more-quotes.patch
  - kmod-testsuite-compress-modules-if-feature-is-enabled.patch
  - kmod-also-test-xz-compression.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1623067200">- Enable support for ZSTD compressed modules</changelog>
  <changelog author="msuchanek@suse.de" date="1629288000">- Display module information even for modules built into the running kernel
  (bsc#1189537).
  + libkmod-Provide-info-even-for-modules-built-into-the.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1630065600">- Add ZSTD support on Tumbleweed only. Add a way to detect ZSTD.</changelog>
  <changelog author="msuchanek@suse.com" date="1630929600">- Use docbook 4 rather than docbook 5 for building man pages (bsc#1190190).
  * Refres no-stylesheet-download.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1632484800">- Enable ZSTD on 15.4 (jsc#SLE-21256).</changelog>
  <changelog author="msuchanek@suse.com" date="1635422400">- Enable ZSTD on 15.3 as well (boo#1192104).
- Only test ZSTD in testsuite on releases where it is available.</changelog>
  <changelog author="msuchanek@suse.com" date="1638792000">- Ensure that kmod and packages linking to libkmod provide same features
  (bsc#1193430).</changelog>
  <changelog author="msuchanek@suse.de" date="1763553600">- man: modprobe.d: document the config file order handling (bsc#1253741)
  * man-modprobe.d-document-the-config-file-order-handling.patch</changelog>
</package>
<package pkgid="a42a48355c2da07d31fe9e7dc9a01da8dcebcc11cb113868f8df202f479f3aa8" name="libkyotocabinet-devel" arch="x86_64">
  <version epoch="0" ver="1.2.80" rel="150000.4.6.1"/>
  <changelog author="jengelh@inai.de" date="1357300800">- Avoid explicit requires on library packages</changelog>
  <changelog author="martin.liska@suse.com" date="1464177600">- Add gcc6-fix-errors.patch to remove errors seen by GCC6.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1491307200">- kyotocabinet-fix-debuginfo.patch: Fix debuginfo generation
- gcc6-fix-errors.patch: return NULL instead, make GCC7 happy</changelog>
  <changelog author="werner@suse.de" date="1494331200">- boo#1037914: Do not optimize for native cpu of the build system!</changelog>
  <changelog author="dimstar@opensuse.org" date="1514980800">- Add baselibs.conf: Produce libkyotocabinet16-32bit, dependency to
  libpinyin13-32bit.</changelog>
  <changelog author="mpluskal@suse.com" date="1584014400">- Update to version 1.2.77:
  * kcthread.cc (CondVar::wait): a bug on Win32 was fixed.
  * kcdbext.h (IndexDB::set, IndexDB::replace): a bug of updating
    existing records was fixed.
  * kcdb.h (DB::check): new function.
- Drop no longer needed gcc6-fix-errors.patch
- Modernise spec file (bsc#1252197)</changelog>
  <changelog author="werner@suse.de" date="1619006400">- Add yet an other patch kyotocabinet-pie.patch
  * link all executables as pie (bsc#1185033)</changelog>
  <changelog author="fcrozat@suse.com" date="1685448000">- Update url to new website.</changelog>
  <changelog author="dmueller@suse.com" date="1700913600">- update to 1.2.80:
  - configure.in supports strict C99 rules.
  - Fixed errors of kcdirtest on BtrFS.
  - Fixed build warnings.</changelog>
  <changelog author="werner@suse.de" date="1760616000">- Add bug number bsc#1252197</changelog>
</package>
<package pkgid="0fcc9e1c2103047ec877a3bcac2da409e2a86f6ea610dab959857b24b8b43e38" name="libkyotocabinet16" arch="x86_64">
  <version epoch="0" ver="1.2.80" rel="150000.4.6.1"/>
  <changelog author="jengelh@inai.de" date="1357300800">- Avoid explicit requires on library packages</changelog>
  <changelog author="martin.liska@suse.com" date="1464177600">- Add gcc6-fix-errors.patch to remove errors seen by GCC6.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1491307200">- kyotocabinet-fix-debuginfo.patch: Fix debuginfo generation
- gcc6-fix-errors.patch: return NULL instead, make GCC7 happy</changelog>
  <changelog author="werner@suse.de" date="1494331200">- boo#1037914: Do not optimize for native cpu of the build system!</changelog>
  <changelog author="dimstar@opensuse.org" date="1514980800">- Add baselibs.conf: Produce libkyotocabinet16-32bit, dependency to
  libpinyin13-32bit.</changelog>
  <changelog author="mpluskal@suse.com" date="1584014400">- Update to version 1.2.77:
  * kcthread.cc (CondVar::wait): a bug on Win32 was fixed.
  * kcdbext.h (IndexDB::set, IndexDB::replace): a bug of updating
    existing records was fixed.
  * kcdb.h (DB::check): new function.
- Drop no longer needed gcc6-fix-errors.patch
- Modernise spec file (bsc#1252197)</changelog>
  <changelog author="werner@suse.de" date="1619006400">- Add yet an other patch kyotocabinet-pie.patch
  * link all executables as pie (bsc#1185033)</changelog>
  <changelog author="fcrozat@suse.com" date="1685448000">- Update url to new website.</changelog>
  <changelog author="dmueller@suse.com" date="1700913600">- update to 1.2.80:
  - configure.in supports strict C99 rules.
  - Fixed errors of kcdirtest on BtrFS.
  - Fixed build warnings.</changelog>
  <changelog author="werner@suse.de" date="1760616000">- Add bug number bsc#1252197</changelog>
</package>
<package pkgid="410c729d3c4f3756794d00dc1788cd42188d63edab97c6e4a4cd4473a45b153e" name="liblcms2-2" arch="x86_64">
  <version epoch="0" ver="2.15" rel="150600.3.3.2"/>
  <changelog author="aloisio@gmx.com" date="1435320000">- Update to version 2.7
  * improved multi-threading
  * added contexts and a new locking plug-in type
  * bugfixes and other minor features
- Dropped lcms-endian.patch that was fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="plinnell@opensuse.org" date="1471348800">- Update to 2.8
  * Fixed many typos in comments, thanks to Stefan Weil for doing that.
  * Fixed localization bug, added a new test case crayons.icc thnaks to Richard Hughes for providing the profile.
  * Fixed a bug in optimizer that made some formats (i.e, bits planar) unavailable
  * Fixed misalignment problems on Alpha. The compiler does not align strings, and accessing begin of string as a uint16 makes code to fail.
  * Added some extra checks to the tools and examples.
  * Fix a bug that prevented to read luminance tag
  * BIG amount of functionality contributed/Sponsored  by Alien Skin Software: TransformStride, copyAlpha, performance plug-ins. Fixes some warnings as well.
  * added an extra _ to _stdcall to make it more portable
  * Fixed a bug in transicc for named color profiles
  * Fixed several compiler warnings
  * Added support for Visual Studio 2015
  * Fixed for XCODE project</changelog>
  <changelog author="plinnell@opensuse.org" date="1485259200">- Added 0001-Added-an-extra-check-to-MLU-bounds.patch
  * fixes https://bugzilla.suse.com/show_bug.cgi?id=1021364</changelog>
  <changelog author="plinnell@opensuse.org" date="1511784000">- Update to 2.9
- Drop 0001-Added-an-extra-check-to-MLU-bounds.patch, it is now
  in the upstream code
  * Bugfix release
  + Several fixes related with security, and therefore not detailed here.
  + C++ compiles now without warnings
  + Added OSX and clang in travis
  + Added a travis-ci test matrix for many compilers and OS.
    Thanks to Thomas Weber (debian) for this great improvement.
  + testbed can now work with dynamic versions of library
  + Fixed wrong planar formatters regarding linestride interpretation</changelog>
  <changelog author="sbrabec@suse.com" date="1538568000">- Add check on CGATS memory allocation (bsc1108813, CVE-2018-16435,
  lcms2-cgats-memory-allocation.patch).</changelog>
  <changelog author="elimat@opensuse.org" date="1596628800">- Update to 2.11
  * Fixed __cpuid() on fast float plugin to allow gnu gcc
  * Fixed copy alpha bounds check
  * Fixed data race condition on contexts pool
  * Fixed LUT16 write matrix on multichannel V2 profiles
- Changes in 2.10
  * Added a compilation toggle to remove "register" keyword in API.
  * Previously commercial, fast_float plug-in is now released as open source
    under GPL3 license.
  * MD5 functions are now accesible through plug-in API.
  * Added support for Visual Studio 2019
  * Bug fixing.
- Drop lcms2-cgats-memory-allocation.patch, its now in upstream code
- Refresh patches
- Run spec-cleaner</changelog>
  <changelog author="dmueller@suse.com" date="1619265600">- update to 2.12:
  * Added build system for fast-float plugin (see plugin documentation)
  * Added new build-in sigmoidal tone curve
  * Added XCode 12 project
  * Added support for multichannel input up to 15 channels
  * Fix LUT8 write matrix
  * Fix version mess on 10/11
  * Fix tools &amp; samples xgetopt
  * Fix warnings on different function pointers
  * Fix matlab MEX compilation
  * plugin: cleanup and better SSE detection
  * plugin: add lab to any on float
  * plugin: it can now be compiled as C++
  * recover PDF documentation, but try to keep it under a resonable size.
  * Prevent a rare but possible out-of-bounds read in postscript generator
  * Fix some compiler warnings
  * Add named color profile building sample to testbed</changelog>
  <changelog author="info@paolostivanin.com" date="1643630400">- Update to 2.13:
  * Added support for premultiplied alpha
  * tifficc can now handle alpha channels, both unassociated and premultiplied
  * CGATS parser can now deal with very long strings
  * Added Projects for Visual Studio 2020
  * Added ARM64 target to visual studio 2019 (thanks to gaborkertesz-linaro)
  * Added thread safe code to get time
  * Added automatic linear space detection
  * Added cmsGetStageContextID function
  * Added cmsDetectRGBProfileGamma function
  * configure now accepts --without-fastfloat to turn plugin off
  * Checked to work on STM32 Cortex-A, Cortex-M families
  * Bug &amp; typos fixing (thanks to many reporters and contributors)
- Rebase lcms2-visibility.patch</changelog>
  <changelog author="dmueller@suse.com" date="1644840000">- update to 2.13.1:
  * Fix a bug on grayscale that made printing gray on white paper
  * Added support for premultiplied alpha
  * tifficc can now handle alpha channels, both unassociated and premultiplied
  * Better documentation
  * CGATS parser can now deal with very long strings
  * Added Projects for Visual Studio 2020
  * Travis CI discontinued, GitHub actions used instead
  * Added a very preliminary meson build script (thanks to xclaesse)
  * Added ARM64 target to visual studio 2019 (thanks to gaborkertesz-linaro)
  * Added thread safe code to get time
  * Added automatic linear space detection
  * Added cmsGetStageContextID function
  * Added cmsDetectRGBProfileGamma
  * configure now accepts --without-fastfloat to turn plugin off
  * autogen.sh has now a --distclean toggle to get rid of all autotools generated files
  * Checked to work on STM32 Cortex-A, Cortex-M families
  * Bug &amp; typos fixing (thanks to many reporters and contributors)
  * Fixed mem leaks and out-of bounds accesses as reported by fuzzer</changelog>
  <changelog author="christophe@krop.fr" date="1667908800">- Update to 2.14:
  * lcms2 now implements ICC specification 4.4
  * New multi-threaded plug-in
  * Several fixes to keep fuzzers happy
  * Removed check on DLL when CMS_NO_REGISTER_KEYWORD is used
  * Added more validation against broken profiles
  * Added more help to several tools
  * Revised documentation</changelog>
  <changelog author="davejplater@gmail.com" date="1668168000">- Added reverse-0001-fix-memory-leaks-on-testbed.patch to fix
  colord's i586 build failure</changelog>
  <changelog author="davejplater@gmail.com" date="1668600000">- Removed reverse-0001-fix-memory-leaks-on-testbed.patch and added
  0001-fix-memory-corruption-when-unregistering-plugins.patch as
  final fix for https://github.com/hughsie/colord/issues/145</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) for alternative providers support</changelog>
  <changelog author="dmueller@suse.com" date="1681560000">- update to 2.15:
  * New MESON build system, many thanks to amispark and Lovell
    Fuller for bringing this.
  * Fixed a bug that caused memory corruption on colord
  * cmsReadRawTag can read portions  of tags again. Removing this
    caused colord to segfault when dumping profiles
  * Added more checks based of fuzzer discoveries.
  * MSYS2 can now compile lcms2
  * Checked on Apple Silicon M1 and M2
  * Fixed a bug of fastfloat plug-in that affected Krita CMYK
    color selector
- drop 0001-fix-memory-corruption-when-unregistering-plugins.patch (upstream)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1760961600">- Enable threads support (bsc#1247985)
  * Drop lcms2-visibility.patch as it was causing linker errors when
    enabling threads</changelog>
</package>
<package pkgid="389bbe2e79bb75dddd2a81bc6d0bca4239e627f8dd5ce78d44020d283ef6dae0" name="liblcms2-devel" arch="x86_64">
  <version epoch="0" ver="2.15" rel="150600.3.3.2"/>
  <changelog author="aloisio@gmx.com" date="1435320000">- Update to version 2.7
  * improved multi-threading
  * added contexts and a new locking plug-in type
  * bugfixes and other minor features
- Dropped lcms-endian.patch that was fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1460635200">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="plinnell@opensuse.org" date="1471348800">- Update to 2.8
  * Fixed many typos in comments, thanks to Stefan Weil for doing that.
  * Fixed localization bug, added a new test case crayons.icc thnaks to Richard Hughes for providing the profile.
  * Fixed a bug in optimizer that made some formats (i.e, bits planar) unavailable
  * Fixed misalignment problems on Alpha. The compiler does not align strings, and accessing begin of string as a uint16 makes code to fail.
  * Added some extra checks to the tools and examples.
  * Fix a bug that prevented to read luminance tag
  * BIG amount of functionality contributed/Sponsored  by Alien Skin Software: TransformStride, copyAlpha, performance plug-ins. Fixes some warnings as well.
  * added an extra _ to _stdcall to make it more portable
  * Fixed a bug in transicc for named color profiles
  * Fixed several compiler warnings
  * Added support for Visual Studio 2015
  * Fixed for XCODE project</changelog>
  <changelog author="plinnell@opensuse.org" date="1485259200">- Added 0001-Added-an-extra-check-to-MLU-bounds.patch
  * fixes https://bugzilla.suse.com/show_bug.cgi?id=1021364</changelog>
  <changelog author="plinnell@opensuse.org" date="1511784000">- Update to 2.9
- Drop 0001-Added-an-extra-check-to-MLU-bounds.patch, it is now
  in the upstream code
  * Bugfix release
  + Several fixes related with security, and therefore not detailed here.
  + C++ compiles now without warnings
  + Added OSX and clang in travis
  + Added a travis-ci test matrix for many compilers and OS.
    Thanks to Thomas Weber (debian) for this great improvement.
  + testbed can now work with dynamic versions of library
  + Fixed wrong planar formatters regarding linestride interpretation</changelog>
  <changelog author="sbrabec@suse.com" date="1538568000">- Add check on CGATS memory allocation (bsc1108813, CVE-2018-16435,
  lcms2-cgats-memory-allocation.patch).</changelog>
  <changelog author="elimat@opensuse.org" date="1596628800">- Update to 2.11
  * Fixed __cpuid() on fast float plugin to allow gnu gcc
  * Fixed copy alpha bounds check
  * Fixed data race condition on contexts pool
  * Fixed LUT16 write matrix on multichannel V2 profiles
- Changes in 2.10
  * Added a compilation toggle to remove "register" keyword in API.
  * Previously commercial, fast_float plug-in is now released as open source
    under GPL3 license.
  * MD5 functions are now accesible through plug-in API.
  * Added support for Visual Studio 2019
  * Bug fixing.
- Drop lcms2-cgats-memory-allocation.patch, its now in upstream code
- Refresh patches
- Run spec-cleaner</changelog>
  <changelog author="dmueller@suse.com" date="1619265600">- update to 2.12:
  * Added build system for fast-float plugin (see plugin documentation)
  * Added new build-in sigmoidal tone curve
  * Added XCode 12 project
  * Added support for multichannel input up to 15 channels
  * Fix LUT8 write matrix
  * Fix version mess on 10/11
  * Fix tools &amp; samples xgetopt
  * Fix warnings on different function pointers
  * Fix matlab MEX compilation
  * plugin: cleanup and better SSE detection
  * plugin: add lab to any on float
  * plugin: it can now be compiled as C++
  * recover PDF documentation, but try to keep it under a resonable size.
  * Prevent a rare but possible out-of-bounds read in postscript generator
  * Fix some compiler warnings
  * Add named color profile building sample to testbed</changelog>
  <changelog author="info@paolostivanin.com" date="1643630400">- Update to 2.13:
  * Added support for premultiplied alpha
  * tifficc can now handle alpha channels, both unassociated and premultiplied
  * CGATS parser can now deal with very long strings
  * Added Projects for Visual Studio 2020
  * Added ARM64 target to visual studio 2019 (thanks to gaborkertesz-linaro)
  * Added thread safe code to get time
  * Added automatic linear space detection
  * Added cmsGetStageContextID function
  * Added cmsDetectRGBProfileGamma function
  * configure now accepts --without-fastfloat to turn plugin off
  * Checked to work on STM32 Cortex-A, Cortex-M families
  * Bug &amp; typos fixing (thanks to many reporters and contributors)
- Rebase lcms2-visibility.patch</changelog>
  <changelog author="dmueller@suse.com" date="1644840000">- update to 2.13.1:
  * Fix a bug on grayscale that made printing gray on white paper
  * Added support for premultiplied alpha
  * tifficc can now handle alpha channels, both unassociated and premultiplied
  * Better documentation
  * CGATS parser can now deal with very long strings
  * Added Projects for Visual Studio 2020
  * Travis CI discontinued, GitHub actions used instead
  * Added a very preliminary meson build script (thanks to xclaesse)
  * Added ARM64 target to visual studio 2019 (thanks to gaborkertesz-linaro)
  * Added thread safe code to get time
  * Added automatic linear space detection
  * Added cmsGetStageContextID function
  * Added cmsDetectRGBProfileGamma
  * configure now accepts --without-fastfloat to turn plugin off
  * autogen.sh has now a --distclean toggle to get rid of all autotools generated files
  * Checked to work on STM32 Cortex-A, Cortex-M families
  * Bug &amp; typos fixing (thanks to many reporters and contributors)
  * Fixed mem leaks and out-of bounds accesses as reported by fuzzer</changelog>
  <changelog author="christophe@krop.fr" date="1667908800">- Update to 2.14:
  * lcms2 now implements ICC specification 4.4
  * New multi-threaded plug-in
  * Several fixes to keep fuzzers happy
  * Removed check on DLL when CMS_NO_REGISTER_KEYWORD is used
  * Added more validation against broken profiles
  * Added more help to several tools
  * Revised documentation</changelog>
  <changelog author="davejplater@gmail.com" date="1668168000">- Added reverse-0001-fix-memory-leaks-on-testbed.patch to fix
  colord's i586 build failure</changelog>
  <changelog author="davejplater@gmail.com" date="1668600000">- Removed reverse-0001-fix-memory-leaks-on-testbed.patch and added
  0001-fix-memory-corruption-when-unregistering-plugins.patch as
  final fix for https://github.com/hughsie/colord/issues/145</changelog>
  <changelog author="dmueller@suse.com" date="1670846400">- switch to pkgconfig(zlib) for alternative providers support</changelog>
  <changelog author="dmueller@suse.com" date="1681560000">- update to 2.15:
  * New MESON build system, many thanks to amispark and Lovell
    Fuller for bringing this.
  * Fixed a bug that caused memory corruption on colord
  * cmsReadRawTag can read portions  of tags again. Removing this
    caused colord to segfault when dumping profiles
  * Added more checks based of fuzzer discoveries.
  * MSYS2 can now compile lcms2
  * Checked on Apple Silicon M1 and M2
  * Fixed a bug of fastfloat plug-in that affected Krita CMYK
    color selector
- drop 0001-fix-memory-corruption-when-unregistering-plugins.patch (upstream)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1760961600">- Enable threads support (bsc#1247985)
  * Drop lcms2-visibility.patch as it was causing linker errors when
    enabling threads</changelog>
</package>
<package pkgid="6dc1f4de1fd52a3bcf5e5441dc81e4785eb61288664275d9f30304fc00ef8234" name="libldap-2_4-2" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="150600.25.3.1"/>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
  <changelog author="william.brown@suse.com" date="1686657600">- bsc#1212260 - crash in libldap when non-ldap data responds
  * 0245-ITS-9803-Drop-connection-when-receiving-non-LDAP-dat.patch</changelog>
  <changelog author="william.brown@suse.com" date="1772280000">- jsc#PED-15735 - expose ldap_log.h in -devel
  * 0246-Include-ldap_log.h-in-devel.patch
- retcon .changes to satisfy source validator</changelog>
</package>
<package pkgid="21ad7e760aa612cc6006c45dc5a1038f65acb38003e104a13f73d4893562bae6" name="libldap-2_4-2-32bit" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="150600.25.3.1"/>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
  <changelog author="william.brown@suse.com" date="1686657600">- bsc#1212260 - crash in libldap when non-ldap data responds
  * 0245-ITS-9803-Drop-connection-when-receiving-non-LDAP-dat.patch</changelog>
  <changelog author="william.brown@suse.com" date="1772280000">- jsc#PED-15735 - expose ldap_log.h in -devel
  * 0246-Include-ldap_log.h-in-devel.patch
- retcon .changes to satisfy source validator</changelog>
</package>
<package pkgid="53486f78d35a505a50bd744e9a351c820c936b09b597706072b04e2669a9905a" name="libldap-2_5-0" arch="x86_64">
  <version epoch="0" ver="2.5.20+10" rel="150500.11.35.1"/>
  <changelog author="william.brown@suse.com" date="1715774400">- Add initial OpenLDAP2_5 version 2.5.17+50, see:
  * jsc#PED-7178
  * jsc#PED-7240
- Apply SUSE Hardening Patches
  * Change malloc to use calloc to prevent memory reuse corruption
  * [PATCH] Use OpenSSL API to verify host</changelog>
  <changelog author="william.brown@suse.com" date="1729080000">- bsc#1231335 - Update openldap2.conf for tmpfiles to create
  and manage /run/slapd
- Update to upstream patch/stabilty fix version 2.5.18+31
  * https://www.openldap.org/software/release/changes_lts.html</changelog>
  <changelog author="william.brown@suse.com" date="1729080001">- bsc#1231335 - Update openldap2.conf for tmpfiles to create
  and manage /run/slapd
- Update to upstream patch/stabilty fix version 2.5.18+31</changelog>
  <changelog author="william.brown@suse.com" date="1730894400">- bsc#1232783 - Enable sasl passthrough authentication</changelog>
  <changelog author="william.brown@suse.com" date="1741780800">- bsc#1238217 - add admin guide.html</changelog>
  <changelog author="william.brown@suse.com" date="1741953600">- bsc#1239557 - Set default ldapi path to be consistent for SUSE</changelog>
  <changelog author="william.brown@suse.com" date="1742990400">- bsc#1240017 - Enable argon2id</changelog>
  <changelog author="william.brown@suse.com" date="1743768000">- Update to version 2.5.18+34:
  * bsc#1239787 - prevent double free in info rewrite</changelog>
  <changelog author="william.brown@suse.com" date="1745582400">- Update to upstream version 2.5.19
  * bsc#1241901 - upstream patch rollup</changelog>
  <changelog author="william.brown@suse.com" date="1749902400">- bsc#1241889 - resolve syncprov crash
- Update to version 2.5.19+8:
  * Clear after free
  * prevent double free
  * liblber calloc</changelog>
  <changelog author="william.brown@suse.com" date="1751457600">- bsc#1241210 - resolve syncprov hang after online configuration (see ITS#10327)
- Update to version 2.5.19+47:
  * Return to RE
  * Prep for release
  * ITS#10331
  * ITS#10331 Add helpful error messages for usage errors
  * ITS#10328
  * ITS#10328 librewrite: fix substitution cleanup
  * ITS#10327
  * ITS#10327 Allow lockless config_back_search() during server pause
  * ITS#10323
  * ITS#10323 Apply olcBkLloadStartTLS runtime changes directly
  * ITS#10320
  * ITS#10320 autogroup: mark internal searches
  * ITS#9934
  * ITS#9934 slapd-config(5) add new TLS cert/key settings
  * ITS#10020
  * ITS#10020 slapo-dynlist(5) note static objectclasses can only be used once
  * ITS#10270
  * ITS#10270 slapo-pcache: negative cache entries are not loaded when pcachePersist is on
  * ITS#10270 slapo-pcache: queries with ttr/x-refresh are not loaded when pcachePersist is on
  * ITS#10270 slapo-pcache: ttr was not being applied to negatively cached entries
  * Add missing olcFrontendConfig to example
  * ITS#10309
  * ITS#10309 Check for strdup allocation failures
  * ITS#10279
  * ITS#10279 Let client notify when LDAP_DEBUG is disabled but -d specified
  * ITS#10307
  * ITS#10307 Initialise last if we use it later
  * ITS#10226
  * ITS#10226 - Fix ldap.conf(5) formatting issues
  * Return to release engineering</changelog>
  <changelog author="william.brown@suse.com" date="1762430400">- Update to version 2.5.20+10:
  * jsc#PED-13741 - Import ppolicy-check-password module</changelog>
</package>
<package pkgid="34a991a9fbc3ee15ca60a60c5da23b062793a8c077982e2228bab746d63aee56" name="libldap-2_5-0" arch="x86_64">
  <version epoch="0" ver="2.5.20+11" rel="150500.11.38.1"/>
  <changelog author="william.brown@suse.com" date="1715774400">- Add initial OpenLDAP2_5 version 2.5.17+50, see:
  * jsc#PED-7178
  * jsc#PED-7240
- Apply SUSE Hardening Patches
  * Change malloc to use calloc to prevent memory reuse corruption
  * [PATCH] Use OpenSSL API to verify host</changelog>
  <changelog author="william.brown@suse.com" date="1729080000">- bsc#1231335 - Update openldap2.conf for tmpfiles to create
  and manage /run/slapd
- Update to upstream patch/stabilty fix version 2.5.18+31
  * https://www.openldap.org/software/release/changes_lts.html</changelog>
  <changelog author="william.brown@suse.com" date="1729080001">- bsc#1231335 - Update openldap2.conf for tmpfiles to create
  and manage /run/slapd
- Update to upstream patch/stabilty fix version 2.5.18+31</changelog>
  <changelog author="william.brown@suse.com" date="1730894400">- bsc#1232783 - Enable sasl passthrough authentication</changelog>
  <changelog author="william.brown@suse.com" date="1741780800">- bsc#1238217 - add admin guide.html</changelog>
  <changelog author="william.brown@suse.com" date="1741953600">- bsc#1239557 - Set default ldapi path to be consistent for SUSE</changelog>
  <changelog author="william.brown@suse.com" date="1742990400">- bsc#1240017 - Enable argon2id</changelog>
  <changelog author="william.brown@suse.com" date="1743768000">- Update to version 2.5.18+34:
  * bsc#1239787 - prevent double free in info rewrite</changelog>
  <changelog author="william.brown@suse.com" date="1745582400">- Update to upstream version 2.5.19
  * bsc#1241901 - upstream patch rollup</changelog>
  <changelog author="william.brown@suse.com" date="1749902400">- bsc#1241889 - resolve syncprov crash
- Update to version 2.5.19+8:
  * Clear after free
  * prevent double free
  * liblber calloc</changelog>
  <changelog author="william.brown@suse.com" date="1751457600">- bsc#1241210 - resolve syncprov hang after online configuration (see ITS#10327)
- Update to version 2.5.19+47:
  * Return to RE
  * Prep for release
  * ITS#10331
  * ITS#10331 Add helpful error messages for usage errors
  * ITS#10328
  * ITS#10328 librewrite: fix substitution cleanup
  * ITS#10327
  * ITS#10327 Allow lockless config_back_search() during server pause
  * ITS#10323
  * ITS#10323 Apply olcBkLloadStartTLS runtime changes directly
  * ITS#10320
  * ITS#10320 autogroup: mark internal searches
  * ITS#9934
  * ITS#9934 slapd-config(5) add new TLS cert/key settings
  * ITS#10020
  * ITS#10020 slapo-dynlist(5) note static objectclasses can only be used once
  * ITS#10270
  * ITS#10270 slapo-pcache: negative cache entries are not loaded when pcachePersist is on
  * ITS#10270 slapo-pcache: queries with ttr/x-refresh are not loaded when pcachePersist is on
  * ITS#10270 slapo-pcache: ttr was not being applied to negatively cached entries
  * Add missing olcFrontendConfig to example
  * ITS#10309
  * ITS#10309 Check for strdup allocation failures
  * ITS#10279
  * ITS#10279 Let client notify when LDAP_DEBUG is disabled but -d specified
  * ITS#10307
  * ITS#10307 Initialise last if we use it later
  * ITS#10226
  * ITS#10226 - Fix ldap.conf(5) formatting issues
  * Return to release engineering</changelog>
  <changelog author="william.brown@suse.com" date="1762430400">- Update to version 2.5.20+10:
  * jsc#PED-13741 - Import ppolicy-check-password module</changelog>
  <changelog author="william.brown@suse.com" date="1768305600">- bsc#1256297 - CVE-2026-22185 - possible crash in malicious DB
- Update to version 2.5.20+11:
  * ITS#10421 mdb_load: check for malicious input</changelog>
</package>
<package pkgid="21f8861cf2f7146d117e46bec4f49241b9b73aef920e59eb89b55bcca9931e23" name="libldap-data" arch="noarch">
  <version epoch="0" ver="2.4.46" rel="150600.25.3.1"/>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
  <changelog author="william.brown@suse.com" date="1686657600">- bsc#1212260 - crash in libldap when non-ldap data responds
  * 0245-ITS-9803-Drop-connection-when-receiving-non-LDAP-dat.patch</changelog>
  <changelog author="william.brown@suse.com" date="1772280000">- jsc#PED-15735 - expose ldap_log.h in -devel
  * 0246-Include-ldap_log.h-in-devel.patch
- retcon .changes to satisfy source validator</changelog>
</package>
<package pkgid="d8a1d67c15cc847adf80a8f448cb13701cef8329390f41e4432bef35f74dbc21" name="libldb-devel" arch="x86_64">
  <version epoch="0" ver="4.21.10+git.424.0b233794b52" rel="150700.3.14.10"/>
  <changelog author="nopower@suse.com" date="1704801600">- Update to 4.19.4
  * net changesecretpw cannot set the machine account password if
    secrets.tdb is empty; (bso#13577).
  * For generating doc, take, if defined, env XML_CATALOG_FILES;
    (bso#15540).
  * Trivial C typo in nsswitch/winbind_nss_netbsd.c; (bso#15541).
  * vfs_linux_xfs is incorrectly named; (bso#15542).
  * systemd stumbled over copyright-message at smbd startup;
    (bso#15377).
  * Following intermediate abolute share-local symlinks is
    broken; (bso#15505).
  * ctdb RELEASE_IP causes a crash in release_ip if a connection
    to a non-public address disconnects first; (bso#15523).
  * shadow_copy2 broken when current fileset's directories are
    removed; (bso#15544).
  * smbd does not detect ctdb public ipv6 addresses for
    multichannel exclusion; (bso#15534).
  * 'force user = localunixuser' doesn't work if 'allow trusted
    domains = no' is set; (bso#15469).
  * smbget debug logging doesn't work; (bso#15525).
  * smget: username in the smburl and interactive password entry
    doesn't work; (bso#15532).
  * smbget auth function doesn't set values for password prompt
    correctly; (bso#15538).
  * Unable to copy and write files from clients to Ceph cluster
    via SMB Linux gateway with Ceph VFS module; (bso#15440).
  * Multichannel refresh network information; (bso#15547).</changelog>
  <changelog author="nopower@suse.com" date="1704888000">- Remove -x from bash shebang update-apparmor-samba-profile;
  (bsc#1218431).</changelog>
  <changelog author="nopower@suse.com" date="1708430400">- Update to 4.19.5
  * Windows 2016 fails to restore previous version of a file from
    a shadow_copy2 snapshot; (bso#13688).
  * Symlinks on AIX are broken in 4.19 (and a few version before
    that); (bso#15549).
  * Fake directory create times has no effect; (bso#12421).
  * ctime mixed up with mtime by smbd; (bso#15550).
  * samba-gpupdate --rsop fails if machine is not in a site;
    (bso#15548).
  * gpupdate: The root cert import when NDES is not available is
    broken; (bso#15557).
  * samba-gpupdate should print a useful message if cepces-submit
    can't be found; (bso#15552).
  * samba-gpupdate logging doesn't work; (bso#15558).
  * smbpasswd reset permissions only if not 0600; (bso#15555).</changelog>
  <changelog author="nopower@suse.com" date="1718884800">- Update to 4.19.7
  * ldb qsort might r/w out of bounds with an intransitive
    compare function (ldb 2.8.1 is already released);
    (bso#15569).
  * Many qsort() comparison functions are non-transitive, which
    can lead to out-of-bounds access in some circumstances (ldb
    2.8.1 is already released); (bso#15625).
  * Need to change gitlab-ci.yml tags in all branches to avoid CI
    bill; (bso#15638).
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * Anonymous smb3 signing/encryption should be allowed (similar
    to Windows Server 2022); (bso#15412).
  * Panic in dreplsrv_op_pull_source_apply_changes_trigger;
    (bso#15573).
  * winbindd, net ads join and other things don't work on an ipv6
    only host; (bso#15642).
  * Smbcacls incorrectly propagates inheritance with Inherit-Only
    flag; (bso#15636).
  * http library doesn't support  'chunked transfer encoding';
    (bso#15611).
- Update to 4.19.6
  * fd_handle_destructor() panics within an smbd_smb2_close() if
    vfs_stat_fsp() fails in fd_close(); (bso#15527).
  * samba-gpupdate: Correctly implement site support;
    (bso#15588).
  * libgpo: Segfault in python bindings; (bso#15599).
  * Packet marshalling push support missing for
    CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and
    CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580).</changelog>
  <changelog author="scabrero@suse.de" date="1722513600">- Fix a crash when joining offline and 'kerberos method' includes
  keytab; (bsc#1228732);
- Fix reading the password from STDIN or environment vars if it
  was already given in the command line; (bsc#1228732);</changelog>
  <changelog author="ddiss@suse.com" date="1725537600">- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated;
  (bso#15699); (bsc#1229684).
- Update to 4.19.8
  * Invalid client warning about command line passwords;
    (bso#15671);
  * Version string is truncated in manpages; (bso#15672);
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673);
  * cmdline_burn does not always burn secrets; (bso#15674);
  * Samba doesn't parse SDDL found in defaultSecurityDescriptor
    in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685);
  * We have added new options --vendor-name and --vendor-patch-
    revision arguments to ./configure to allow distributions and
    packagers to put their name in the Samba version string so that
    when debugging Samba the source of the binary is obvious;
    (bso#15654);
  * When claims enabled with heimdal kerberos, unable to log on to a
    Windows computer when user account need to change their own
    password; (bso#15655);
  * Fix clock skew error message and memory cache clock skew
    recovery; (bso#15676);
  * CTDB RADOS mutex helper misses namespace support; (bso#15665);
  * The images don't build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660);
  * Fix unnecessary delays in CTDB while processing requests under
    high load; (bso#15678);
  * Dynamic DNS updates with the internal DNS are not working;
    (bso#13019);
  * s4:nbt_server: does not provide unexpected handling, so winbindd
    can't use nmb requests instead cldap; (bso#15620);
  * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664);
  * "client use kerberos" and --use-kerberos is ignored for the machine
    account; (bso#15666);
  * Regression DFS not working with widelinks = true; (bso#15435);
  * ntlm_auth make logs more consistent with length check; (bso#15677);</changelog>
  <changelog author="nopower@suse.com" date="1728475200">-  Adjust spec to split out rpcd_* binaries into a separate
  sub package; (bsc#1231414).</changelog>
  <changelog author="nopower@suse.com" date="1728993600">- Update to 4.21.1
  * DH reconnect error handling can lead to stale sharemode
    entries; (bso#15624).
  * "inherit permissions = yes" triggers assert() in vfs_default
    when creating a stream; (bso#15695).
  * Samba 4.21.0 broke FreeIPA domain member integration;
    (bso#15715).
  * Missing conversion for msDS-UserTGTLifetime, msDS-
    ComputerTGTLifetime and msDS-ServiceTGTLifetime on "samba-
    tool domain auth policy modify"; (bso#15692).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * Durable handle is not granted when a previous OPEN exists
    with NoOplock; (bso#15649).
  * Durable handle is granted but reconnect fails; (bso#15651).
  * Disconnected durable handles with RH lease should not be
    purged by a new non conflicting open; (bso#15708).
  * net ads testjoin and other commands use the wrong secrets.tdb
    in a cluster; (bso#15714).
  * 4.21 using --with-system-mitkrb5 requires MIT krb5 1.16 as
    rfc 8009 etypes are used; (bso#15726).
  * VFS_OPEN_HOW_WITH_BACKUP_INTENT breaks shadow_copy2;
    (bso#15730).
  * Samba 4.20.0 DLZ module crashes BIND on startup; (bso#15643).
  * Cannot build libldb lmdb backend on a build without AD DC;
    (bso#15721).
  * Consistent log level for sighup handler; (bso#15706).
- Package ceph_new VFS module.
- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated;
  (bso#15699); (bsc#1229684).
- Update to 4.21.0
  * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when
    truncated; (bso#15699).
  * Bad variable definition for ParseTuple causing test failure
    for Smb3UnixTests.test_create_context_reparse; (bso#15702).
  * Add new vfs_ceph module (based on low level API);
    (bso#15686).
  * samba-tool can not load the default configuration file;
    (bso#15698).
  * Crash when readlinkat fails; (bso#15700).
  * Can't add/delete special keys to keytab for nfs, cifs, http
    etc; (bso#15689).
  * Compound SMB2 requests don't return
    NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses
    MacOSX clients; (bso#15696).
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673).
  * ldb_version.h is missing from ldb public library;
    (bso#15690).
  * Can not add/delete special keys to keytab for nfs, cifs, http
    etc; (bso#15689).
  * undefined reference to winbind_lookup_name_ex; (bso#15687).
  * per user veto and hide file syntax is to complex;
    (bso#15688).
- Update to 4.20.4
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673).
- Update to 4.20.3
  * Running samba-bgqd a a standalone systemd service does not
    work; (bso#15683).
  * When claims enabled with heimdal kerberos, unable to log on
    to a Windows computer when user account need to change their
    own password; (bso#15655).
  * Invalid client warning about command line passwords;
    (bso#15671).
  * Version string is truncated in manpages; (bso#15672).
  * cmdline_burn does not always burn secrets; (bso#15674).
  * Samba does not parse SDDL found in defaultSecurityDescriptor
    in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685).
  * The images don\'t build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660).
  * Fix clock skew error message and memory cache clock skew
    recovery; (bso#15676).
  * Heimdal ignores _gsskrb5_decapsulate errors in
    init_sec_context/repl_mutual; (bso#15603).
  * s4:ldap_server: does not support tls channel bindings for
    sasl binds; (bso#15621).
  * CTDB socket output queues may suffer unbounded delays under
    some special conditions; (bso#15678).
- Update samba-tool package to require python3-Markdown also in
  the Heimdal ADDC build
- Fix named crash when using samba's DLZ plugin; (bsc#1224003);
  (bso#15643);
- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]
- Update to 4.20.2
  * vfs_widelinks with DFS shares breaks case insensitivity;
    (bso#15662); (bsc#1213607).
  * Samba build is not reproducible; (bso#13213).
  * ldb qsort might r/w out of bounds with an intransitive
    compare function; (bso#15569).
  * Many qsort() comparison functions are non-transitive, which
    can lead to out-of-bounds access in some circumstances;
    (bso#15625).
  * Need to change gitlab-ci.yml tags in all branches to avoid CI
    bill; (bso#15638).
  * We have added new options --vendor-name and --vendor-patch-
    revision arguments to ./configure to allow distributions and
    packagers to put their name in the Samba version string so
    that when debugging Samba the source of the binary is
    obvious; (bso#15654).
  * CTDB RADOS mutex helper misses namespace support;
    (bso#15665).
  * Dynamic DNS updates with the internal DNS are not working;
    (bso#13019).
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * Anonymous smb3 signing/encryption should be allowed (similar
    to Windows Server 2022); (bso#15412).
  * Panic in dreplsrv_op_pull_source_apply_changes_trigger;
    (bso#15573).
  * s4:nbt_server: does not provide unexpected handling, so
    winbindd can't use nmb requests instead cldap; (bso#15620).
  * winbindd, net ads join and other things don't work on an ipv6
    only host; (bso#15642).
  * Segmentation fault when deleting files in vfs_recycle;
    (bso#15659).
  * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664).
  * "client use kerberos" and --use-kerberos is ignored for the
    machine account; (bso#15666).
  * Regression DFS not working with widelinks = true;
    (bso#15435).
  * samba-gpupdate - Invalid NtVer in netlogon_samlogon_response;
    (bso#15633).
  * idmap_ad creates an incorrect local krb5.conf in case of
    trusted domain lookups; (bso#15653).
  * The images don't build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660).
- Fix non deterministic builds; (bsc#1225754); (bso#13213);
- Update to 4.20.1
  * dns update debug message is too noisy; (bso#15630);
  * Do not fail PAC validation for RFC8009 checksums types; (bso#15635);
  * Improve performance of lookup_groupmem() in idmap_ad; (bso#15605);
  * Smbcacls incorrectly propagates inheritance with Inherit-Only flag; (bso#15636);
  * http library doesn't support 'chunked transfer encoding'; (bso#15611);
  * Provide a systemd service file for the background queue daemon; (bso#15600);
- Update to 4.20.0
  New features:
  * samba-tool user getpassword / syncpasswords ;rounds= change
  * Group Managed service account client-side features
  * New Windows Search Protocol Client
  * Allow 'smbcacls' to save/restore DACLs to file
  * Samba-tool extensions for AD Claims, Authentication Policies and Silos
  * AD DC support for Authentication Silos and Authentication Policies
  * Conditional ACEs and Resource Attribute ACEs
  * Service Witness Protocol [MS-SWN]
  Removed features:
  * Get locally logged on users from utmp
  Fixed bugs:
  * Avoid null-dereference with bad claims; (bso#15606);
  * ndr_pull_security_ace can leave resource attribute ACE coda
    claim struct undefined; (bso#15613);
  * fd_handle_destructor() panics within an smbd_smb2_close() if
    vfs_stat_fsp() fails in fd_close(); (bso#15527);
  * set_nt_acl sometimes fails with NT_STATUS_INVALID_PARAMETER -
    openat() EACCES; (bso#15583);
  * libgpo: Segfault in python bindings; (bso#15599);
  * Samba AD is missing some authentication policy tests;
    (bso#15607);
  * samba-gpupdate: Correctly implement site support; (bso#15588);
  * Remove unsupported "Final" keyword missing from Python 3.6;
    (bso#15575);
  * Additional witness backports for 4.20.0; (bso#15577);
  * Error output with wspsearch; (bso#15579);
  * Packet marshalling push support missing for
    CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and
    CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580);
  * Performance regression for NDR parsing of security
    descriptors; (bso#15574);
  * Build and install man page for wspsearch client utility;
    (bso#15565);
- Update to 4.19.9
  * libldb: performance issue with indexes (ldb 2.8.2 is already
    released); (bso#15590).
  * DH reconnect error handling can lead to stale sharemode
    entries; (bso#15624).
  * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when
    truncated; (bso#15699).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * Compound SMB2 requests don't return
    NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses
    MacOSX clients; (bso#15696).
  * Crash when readlinkat fails; (bso#15700).</changelog>
  <changelog author="nopower@suse.com" date="1729080000">-  Adjust spec to split out rpcd_* binaries into a separate
  sub package; (bsc#1231414).</changelog>
  <changelog author="nopower@suse.com" date="1730376000">- Add placeholder changelog for sle15-sp7; (jsc#PED-11210).</changelog>
  <changelog author="nopower@suse.com" date="1732536000">- Update to 4.21.2
  * smbd fails to correctly check sharemode against OVERWRITE
    dispositions; (bso#15732).
  * Panic in close_directory; (bso#15754).
  * winexe no longer works with samba 4.21; (bso#15752).
  * protocol error - Unclear debug message "pad length mismatch"
    for invalid bind packet; (bso#14356).
  * NetrGetLogonCapabilities QueryLevel 2 needs to be
    implemented; (bso#15425).
  * gss_accept_sec_context() from Heimdal does not imply
    GSS_C_MUTUAL_FLAG with GSS_C_DCE_STYLE; (bso#15740).
  * winbindd should call process_set_title() for locator child;
    (bso#15749).
  * Update CTDB to track all TCP connections to public IP
    addresses; (bso#15320).</changelog>
  <changelog author="nopower@suse.com" date="1733486400">- Update shipped /etc/samba/smb.conf to point to smb.conf
  man page;(bsc#1233880).</changelog>
  <changelog author="nopower@suse.com" date="1736251200">- Update to 4.21.3
  * More possible replication loops against Azure AD;
    (bso#15701).
  * Compound rename from Mac clients can fail with
    NT_STATUS_INTERNAL_ERROR if the file has a lease;
    (bso#15697).
  * vfs crossrename seems not work correctly; (bso#15724).
  * After 'machine password timeout' /etc/krb5.keytab is not
    updated; (bso#6750).
  * Memory leak wbcCtxLookupSid; (bso#15771).
  * Fix heap-user-after-free with association groups;
    (bso#15765).
  * Segfault in vfs_btrfs; (bso#15758).
  * Avoid event failure race when disabling an event script;
    (bso#15755).</changelog>
  <changelog author="nopower@suse.com" date="1739966400">- Update to 4.21.4
  * Increasing slowness of sharesec performance with high number
    of registry shares; (bso#15780).
  * winbindd shows memleak in kerberos_decode_pac; (bso#15782).
  * Creation of GPOs applicable to more than one group is
    impossible with Samba 4.20.0 and later; (bso#15738).
  * Replace `crypt` module in
    python/samba/netcmd/user/readpasswords/common.py;
    (bso#15756).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * Spotlight search results don't show file size and creation
    date; (bso#15796).
  * General improvements for vfs_ceph_new module; (bso#15703).
  * net offlinejoin not working correctly; (bso#15777).
  * net ads create/join/winbind producing unix dysfunctional
    keytabs; (bso#15759).
  * Windows Explorer crashes on S-1-22-* Unix-SIDs when accessing
    security tab; (bso#14213).
  * The values from hresult_errstr_const and hresult_errstr are
    reversed in 4.20 and 4.21; (bso#15769).
  * Kerberos referral tickets are generated for principals in our
    domain if we have a trust to a top level domain; (bso#15778).
  * NETLOGON_NTLMV2_ENABLED is missing in the SamLogon*
    user_flags field; (bso#15783).
  * Regression: stack-use-after-return in crypt_as_best_we_can();
    (bso#15784).
  * libreplace:readline: gcc 15 complains about incompatible
    pointer types; (bso#15788).</changelog>
  <changelog author="nopower@suse.com" date="1743595200">- Update to 4.21.5
  * ldb index cache is too small on known large transactions
    (schemaupgrade, provision); (bso#15795).
  * Enable support for cephfs case insensitive behavior;
    (bso#15822).
  * Subnet based interfaces definition not listening on all
    covered IP addresses; (bso#15823).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727); (bsc#1238063).
  * Remove of file or directory not possible with vfs_acl_tdb;
    (bso#15791).
  * Unable to connect to CephFS subvolume shares with
    vfs_shadow_copy2; (bso#15797).
  * Add async io API from libcephfs to ceph_new VFS module;
    (bso#15810).
  * vfs_ceph_new module does not work with other modules for
    snapshot management; (bso#15818).
  * vfs_ceph_new: Add path based fallback for SMB_VFS_FCHOWN,
    SMB_VFS_FCHMOD and SMB_VFS_FNTIMES; (bso#15834).
  * Incorrect FSF address in ctdb pcp scripts; (bso#15820).
  * "samba-tool domain backup offline" hangs; (bso#15804).</changelog>
  <changelog author="nopower@suse.com" date="1748952000">- Update to 4.21.6
  * Running "gpo manage motd set" twice fails with backtrace;
    (bso#15774).
  * samba-tool gpo backup creates entity backups it can't read;
    (bso#15829).
  * gp_cert_auto_enroll_ext.py has problem unpacking GUIDs with
    prepended 0's; (bso#15839).
  * CVE-2025-0620 [SECURITY] smbd doesn't pick up group
    membership changes when re-authenticating an expired SMB
    session; (bso#15707), (bsc#1244136).
  * Deadlock between two smbd processes; (bso#15767).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727).
  * Wide link issue in samba 4.22; (bso#15841).
  * dcerpcd not able to bind to listening port; (bso#15851).
  * vfs_ceph_snapshots fails to list snapshots for entries at any
    level beyond share root; (bso#15819).
  * CTDB does not put nodes running NFS into grace on graceful
    shutdown; (bso#15858).</changelog>
  <changelog author="scabrero@suse.de" date="1751976000">- Update to 4.21.7
  * Windows security hardening locks out schannel'ed netlogon dc
    calls like netr_DsRGetDCName; (bsc#1246431); (bso#15876);
  * Trust domains are not created; (bso#15680);
  * Startup messages of rpc deamons fills /var/log/messages;
    (bso#15869);</changelog>
  <changelog author="nopower@suse.com" date="1757419200">- - Update to 4.21.8
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * getpwuid does not shift to new DC when current DC is down;
    (bso#15844).
  * Windows security hardening locks out schannel'ed netlogon dc
    calls like netr_DsRGetDCName; (bso#15876).
  * kinit command is failing with Missing cache Error;
    (bso#15840).
  * Figuring out the DC name from IP address fails and breaks
    fork_domain_child(); (bso#15891).
  * Delayed leader broadcast can block ctdb forever; (bso#15892).
  * 'net ads group' failed to list domain groups; (bso#15900).
  * Apparently there is a conflict between shadow_copy2 module
    and virusfilter (action quarantine); (bso#15663).
  * Fix handling of empty GPO link; (bso#15877).
  * SMB ACL inheritance doesn't work for files created;
    (bso#15880).</changelog>
  <changelog author="nopower@suse.com" date="1758628800">- CVE-2025-9640: fix vfs_streams_xattr uninitialized memory write;
  (bsc#1251279);(bso#15885).
- CVE-2025-10230: fix command Injection in WINS Server Hook Script;
  (bsc#1251280);(bso#15903).</changelog>
  <changelog author="nopower@suse.com" date="1763553600">- Update to 4.21.10
  * Crash in ctdbd on failed updateip; (bso#15935).
  * samba-4.21 fails to join AD when multiple DCs are returned;
    (bso#15905).
  * vfs_ceph_new should not use ceph_ll_nonblocking_readv_writev
    for fsync_send; (bso#15919).
  * CTDB_SOCKET can be used even when CTDB_TEST_MODE is not set;
    (bso#15921).
- Update to 4.21.9
  * CVE-2025-10230; (bso#15903); (bsc#1251279).
  * CVE-2025-9640; (bso#15885); (bsc#1251280).</changelog>
</package>
<package pkgid="51fb8bf9e771de2810b95be77899afe91aeff401af4f82d7fc2d447f2588ce19" name="libldb-devel" arch="x86_64">
  <version epoch="0" ver="4.21.10+git.449.dcced69e1b5" rel="150700.3.19.1"/>
  <changelog author="nopower@suse.com" date="1718884800">- Update to 4.19.7
  * ldb qsort might r/w out of bounds with an intransitive
    compare function (ldb 2.8.1 is already released);
    (bso#15569).
  * Many qsort() comparison functions are non-transitive, which
    can lead to out-of-bounds access in some circumstances (ldb
    2.8.1 is already released); (bso#15625).
  * Need to change gitlab-ci.yml tags in all branches to avoid CI
    bill; (bso#15638).
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * Anonymous smb3 signing/encryption should be allowed (similar
    to Windows Server 2022); (bso#15412).
  * Panic in dreplsrv_op_pull_source_apply_changes_trigger;
    (bso#15573).
  * winbindd, net ads join and other things don't work on an ipv6
    only host; (bso#15642).
  * Smbcacls incorrectly propagates inheritance with Inherit-Only
    flag; (bso#15636).
  * http library doesn't support  'chunked transfer encoding';
    (bso#15611).
- Update to 4.19.6
  * fd_handle_destructor() panics within an smbd_smb2_close() if
    vfs_stat_fsp() fails in fd_close(); (bso#15527).
  * samba-gpupdate: Correctly implement site support;
    (bso#15588).
  * libgpo: Segfault in python bindings; (bso#15599).
  * Packet marshalling push support missing for
    CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and
    CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580).</changelog>
  <changelog author="scabrero@suse.de" date="1722513600">- Fix a crash when joining offline and 'kerberos method' includes
  keytab; (bsc#1228732);
- Fix reading the password from STDIN or environment vars if it
  was already given in the command line; (bsc#1228732);</changelog>
  <changelog author="ddiss@suse.com" date="1725537600">- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated;
  (bso#15699); (bsc#1229684).
- Update to 4.19.8
  * Invalid client warning about command line passwords;
    (bso#15671);
  * Version string is truncated in manpages; (bso#15672);
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673);
  * cmdline_burn does not always burn secrets; (bso#15674);
  * Samba doesn't parse SDDL found in defaultSecurityDescriptor
    in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685);
  * We have added new options --vendor-name and --vendor-patch-
    revision arguments to ./configure to allow distributions and
    packagers to put their name in the Samba version string so that
    when debugging Samba the source of the binary is obvious;
    (bso#15654);
  * When claims enabled with heimdal kerberos, unable to log on to a
    Windows computer when user account need to change their own
    password; (bso#15655);
  * Fix clock skew error message and memory cache clock skew
    recovery; (bso#15676);
  * CTDB RADOS mutex helper misses namespace support; (bso#15665);
  * The images don't build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660);
  * Fix unnecessary delays in CTDB while processing requests under
    high load; (bso#15678);
  * Dynamic DNS updates with the internal DNS are not working;
    (bso#13019);
  * s4:nbt_server: does not provide unexpected handling, so winbindd
    can't use nmb requests instead cldap; (bso#15620);
  * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664);
  * "client use kerberos" and --use-kerberos is ignored for the machine
    account; (bso#15666);
  * Regression DFS not working with widelinks = true; (bso#15435);
  * ntlm_auth make logs more consistent with length check; (bso#15677);</changelog>
  <changelog author="nopower@suse.com" date="1728475200">-  Adjust spec to split out rpcd_* binaries into a separate
  sub package; (bsc#1231414).</changelog>
  <changelog author="nopower@suse.com" date="1728993600">- Update to 4.21.1
  * DH reconnect error handling can lead to stale sharemode
    entries; (bso#15624).
  * "inherit permissions = yes" triggers assert() in vfs_default
    when creating a stream; (bso#15695).
  * Samba 4.21.0 broke FreeIPA domain member integration;
    (bso#15715).
  * Missing conversion for msDS-UserTGTLifetime, msDS-
    ComputerTGTLifetime and msDS-ServiceTGTLifetime on "samba-
    tool domain auth policy modify"; (bso#15692).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * Durable handle is not granted when a previous OPEN exists
    with NoOplock; (bso#15649).
  * Durable handle is granted but reconnect fails; (bso#15651).
  * Disconnected durable handles with RH lease should not be
    purged by a new non conflicting open; (bso#15708).
  * net ads testjoin and other commands use the wrong secrets.tdb
    in a cluster; (bso#15714).
  * 4.21 using --with-system-mitkrb5 requires MIT krb5 1.16 as
    rfc 8009 etypes are used; (bso#15726).
  * VFS_OPEN_HOW_WITH_BACKUP_INTENT breaks shadow_copy2;
    (bso#15730).
  * Samba 4.20.0 DLZ module crashes BIND on startup; (bso#15643).
  * Cannot build libldb lmdb backend on a build without AD DC;
    (bso#15721).
  * Consistent log level for sighup handler; (bso#15706).
- Package ceph_new VFS module.
- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated;
  (bso#15699); (bsc#1229684).
- Update to 4.21.0
  * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when
    truncated; (bso#15699).
  * Bad variable definition for ParseTuple causing test failure
    for Smb3UnixTests.test_create_context_reparse; (bso#15702).
  * Add new vfs_ceph module (based on low level API);
    (bso#15686).
  * samba-tool can not load the default configuration file;
    (bso#15698).
  * Crash when readlinkat fails; (bso#15700).
  * Can't add/delete special keys to keytab for nfs, cifs, http
    etc; (bso#15689).
  * Compound SMB2 requests don't return
    NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses
    MacOSX clients; (bso#15696).
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673).
  * ldb_version.h is missing from ldb public library;
    (bso#15690).
  * Can not add/delete special keys to keytab for nfs, cifs, http
    etc; (bso#15689).
  * undefined reference to winbind_lookup_name_ex; (bso#15687).
  * per user veto and hide file syntax is to complex;
    (bso#15688).
- Update to 4.20.4
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673).
- Update to 4.20.3
  * Running samba-bgqd a a standalone systemd service does not
    work; (bso#15683).
  * When claims enabled with heimdal kerberos, unable to log on
    to a Windows computer when user account need to change their
    own password; (bso#15655).
  * Invalid client warning about command line passwords;
    (bso#15671).
  * Version string is truncated in manpages; (bso#15672).
  * cmdline_burn does not always burn secrets; (bso#15674).
  * Samba does not parse SDDL found in defaultSecurityDescriptor
    in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685).
  * The images don\'t build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660).
  * Fix clock skew error message and memory cache clock skew
    recovery; (bso#15676).
  * Heimdal ignores _gsskrb5_decapsulate errors in
    init_sec_context/repl_mutual; (bso#15603).
  * s4:ldap_server: does not support tls channel bindings for
    sasl binds; (bso#15621).
  * CTDB socket output queues may suffer unbounded delays under
    some special conditions; (bso#15678).
- Update samba-tool package to require python3-Markdown also in
  the Heimdal ADDC build
- Fix named crash when using samba's DLZ plugin; (bsc#1224003);
  (bso#15643);
- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]
- Update to 4.20.2
  * vfs_widelinks with DFS shares breaks case insensitivity;
    (bso#15662); (bsc#1213607).
  * Samba build is not reproducible; (bso#13213).
  * ldb qsort might r/w out of bounds with an intransitive
    compare function; (bso#15569).
  * Many qsort() comparison functions are non-transitive, which
    can lead to out-of-bounds access in some circumstances;
    (bso#15625).
  * Need to change gitlab-ci.yml tags in all branches to avoid CI
    bill; (bso#15638).
  * We have added new options --vendor-name and --vendor-patch-
    revision arguments to ./configure to allow distributions and
    packagers to put their name in the Samba version string so
    that when debugging Samba the source of the binary is
    obvious; (bso#15654).
  * CTDB RADOS mutex helper misses namespace support;
    (bso#15665).
  * Dynamic DNS updates with the internal DNS are not working;
    (bso#13019).
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * Anonymous smb3 signing/encryption should be allowed (similar
    to Windows Server 2022); (bso#15412).
  * Panic in dreplsrv_op_pull_source_apply_changes_trigger;
    (bso#15573).
  * s4:nbt_server: does not provide unexpected handling, so
    winbindd can't use nmb requests instead cldap; (bso#15620).
  * winbindd, net ads join and other things don't work on an ipv6
    only host; (bso#15642).
  * Segmentation fault when deleting files in vfs_recycle;
    (bso#15659).
  * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664).
  * "client use kerberos" and --use-kerberos is ignored for the
    machine account; (bso#15666).
  * Regression DFS not working with widelinks = true;
    (bso#15435).
  * samba-gpupdate - Invalid NtVer in netlogon_samlogon_response;
    (bso#15633).
  * idmap_ad creates an incorrect local krb5.conf in case of
    trusted domain lookups; (bso#15653).
  * The images don't build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660).
- Fix non deterministic builds; (bsc#1225754); (bso#13213);
- Update to 4.20.1
  * dns update debug message is too noisy; (bso#15630);
  * Do not fail PAC validation for RFC8009 checksums types; (bso#15635);
  * Improve performance of lookup_groupmem() in idmap_ad; (bso#15605);
  * Smbcacls incorrectly propagates inheritance with Inherit-Only flag; (bso#15636);
  * http library doesn't support 'chunked transfer encoding'; (bso#15611);
  * Provide a systemd service file for the background queue daemon; (bso#15600);
- Update to 4.20.0
  New features:
  * samba-tool user getpassword / syncpasswords ;rounds= change
  * Group Managed service account client-side features
  * New Windows Search Protocol Client
  * Allow 'smbcacls' to save/restore DACLs to file
  * Samba-tool extensions for AD Claims, Authentication Policies and Silos
  * AD DC support for Authentication Silos and Authentication Policies
  * Conditional ACEs and Resource Attribute ACEs
  * Service Witness Protocol [MS-SWN]
  Removed features:
  * Get locally logged on users from utmp
  Fixed bugs:
  * Avoid null-dereference with bad claims; (bso#15606);
  * ndr_pull_security_ace can leave resource attribute ACE coda
    claim struct undefined; (bso#15613);
  * fd_handle_destructor() panics within an smbd_smb2_close() if
    vfs_stat_fsp() fails in fd_close(); (bso#15527);
  * set_nt_acl sometimes fails with NT_STATUS_INVALID_PARAMETER -
    openat() EACCES; (bso#15583);
  * libgpo: Segfault in python bindings; (bso#15599);
  * Samba AD is missing some authentication policy tests;
    (bso#15607);
  * samba-gpupdate: Correctly implement site support; (bso#15588);
  * Remove unsupported "Final" keyword missing from Python 3.6;
    (bso#15575);
  * Additional witness backports for 4.20.0; (bso#15577);
  * Error output with wspsearch; (bso#15579);
  * Packet marshalling push support missing for
    CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and
    CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580);
  * Performance regression for NDR parsing of security
    descriptors; (bso#15574);
  * Build and install man page for wspsearch client utility;
    (bso#15565);
- Update to 4.19.9
  * libldb: performance issue with indexes (ldb 2.8.2 is already
    released); (bso#15590).
  * DH reconnect error handling can lead to stale sharemode
    entries; (bso#15624).
  * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when
    truncated; (bso#15699).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * Compound SMB2 requests don't return
    NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses
    MacOSX clients; (bso#15696).
  * Crash when readlinkat fails; (bso#15700).</changelog>
  <changelog author="nopower@suse.com" date="1729080000">-  Adjust spec to split out rpcd_* binaries into a separate
  sub package; (bsc#1231414).</changelog>
  <changelog author="nopower@suse.com" date="1730376000">- Add placeholder changelog for sle15-sp7; (jsc#PED-11210).</changelog>
  <changelog author="nopower@suse.com" date="1732536000">- Update to 4.21.2
  * smbd fails to correctly check sharemode against OVERWRITE
    dispositions; (bso#15732).
  * Panic in close_directory; (bso#15754).
  * winexe no longer works with samba 4.21; (bso#15752).
  * protocol error - Unclear debug message "pad length mismatch"
    for invalid bind packet; (bso#14356).
  * NetrGetLogonCapabilities QueryLevel 2 needs to be
    implemented; (bso#15425).
  * gss_accept_sec_context() from Heimdal does not imply
    GSS_C_MUTUAL_FLAG with GSS_C_DCE_STYLE; (bso#15740).
  * winbindd should call process_set_title() for locator child;
    (bso#15749).
  * Update CTDB to track all TCP connections to public IP
    addresses; (bso#15320).</changelog>
  <changelog author="nopower@suse.com" date="1733486400">- Update shipped /etc/samba/smb.conf to point to smb.conf
  man page;(bsc#1233880).</changelog>
  <changelog author="nopower@suse.com" date="1736251200">- Update to 4.21.3
  * More possible replication loops against Azure AD;
    (bso#15701).
  * Compound rename from Mac clients can fail with
    NT_STATUS_INTERNAL_ERROR if the file has a lease;
    (bso#15697).
  * vfs crossrename seems not work correctly; (bso#15724).
  * After 'machine password timeout' /etc/krb5.keytab is not
    updated; (bso#6750).
  * Memory leak wbcCtxLookupSid; (bso#15771).
  * Fix heap-user-after-free with association groups;
    (bso#15765).
  * Segfault in vfs_btrfs; (bso#15758).
  * Avoid event failure race when disabling an event script;
    (bso#15755).</changelog>
  <changelog author="nopower@suse.com" date="1739966400">- Update to 4.21.4
  * Increasing slowness of sharesec performance with high number
    of registry shares; (bso#15780).
  * winbindd shows memleak in kerberos_decode_pac; (bso#15782).
  * Creation of GPOs applicable to more than one group is
    impossible with Samba 4.20.0 and later; (bso#15738).
  * Replace `crypt` module in
    python/samba/netcmd/user/readpasswords/common.py;
    (bso#15756).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * Spotlight search results don't show file size and creation
    date; (bso#15796).
  * General improvements for vfs_ceph_new module; (bso#15703).
  * net offlinejoin not working correctly; (bso#15777).
  * net ads create/join/winbind producing unix dysfunctional
    keytabs; (bso#15759).
  * Windows Explorer crashes on S-1-22-* Unix-SIDs when accessing
    security tab; (bso#14213).
  * The values from hresult_errstr_const and hresult_errstr are
    reversed in 4.20 and 4.21; (bso#15769).
  * Kerberos referral tickets are generated for principals in our
    domain if we have a trust to a top level domain; (bso#15778).
  * NETLOGON_NTLMV2_ENABLED is missing in the SamLogon*
    user_flags field; (bso#15783).
  * Regression: stack-use-after-return in crypt_as_best_we_can();
    (bso#15784).
  * libreplace:readline: gcc 15 complains about incompatible
    pointer types; (bso#15788).</changelog>
  <changelog author="nopower@suse.com" date="1743595200">- Update to 4.21.5
  * ldb index cache is too small on known large transactions
    (schemaupgrade, provision); (bso#15795).
  * Enable support for cephfs case insensitive behavior;
    (bso#15822).
  * Subnet based interfaces definition not listening on all
    covered IP addresses; (bso#15823).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727); (bsc#1238063).
  * Remove of file or directory not possible with vfs_acl_tdb;
    (bso#15791).
  * Unable to connect to CephFS subvolume shares with
    vfs_shadow_copy2; (bso#15797).
  * Add async io API from libcephfs to ceph_new VFS module;
    (bso#15810).
  * vfs_ceph_new module does not work with other modules for
    snapshot management; (bso#15818).
  * vfs_ceph_new: Add path based fallback for SMB_VFS_FCHOWN,
    SMB_VFS_FCHMOD and SMB_VFS_FNTIMES; (bso#15834).
  * Incorrect FSF address in ctdb pcp scripts; (bso#15820).
  * "samba-tool domain backup offline" hangs; (bso#15804).</changelog>
  <changelog author="nopower@suse.com" date="1748952000">- Update to 4.21.6
  * Running "gpo manage motd set" twice fails with backtrace;
    (bso#15774).
  * samba-tool gpo backup creates entity backups it can't read;
    (bso#15829).
  * gp_cert_auto_enroll_ext.py has problem unpacking GUIDs with
    prepended 0's; (bso#15839).
  * CVE-2025-0620 [SECURITY] smbd doesn't pick up group
    membership changes when re-authenticating an expired SMB
    session; (bso#15707), (bsc#1244136).
  * Deadlock between two smbd processes; (bso#15767).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727).
  * Wide link issue in samba 4.22; (bso#15841).
  * dcerpcd not able to bind to listening port; (bso#15851).
  * vfs_ceph_snapshots fails to list snapshots for entries at any
    level beyond share root; (bso#15819).
  * CTDB does not put nodes running NFS into grace on graceful
    shutdown; (bso#15858).</changelog>
  <changelog author="scabrero@suse.de" date="1751976000">- Update to 4.21.7
  * Windows security hardening locks out schannel'ed netlogon dc
    calls like netr_DsRGetDCName; (bsc#1246431); (bso#15876);
  * Trust domains are not created; (bso#15680);
  * Startup messages of rpc deamons fills /var/log/messages;
    (bso#15869);</changelog>
  <changelog author="nopower@suse.com" date="1757419200">- - Update to 4.21.8
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * getpwuid does not shift to new DC when current DC is down;
    (bso#15844).
  * Windows security hardening locks out schannel'ed netlogon dc
    calls like netr_DsRGetDCName; (bso#15876).
  * kinit command is failing with Missing cache Error;
    (bso#15840).
  * Figuring out the DC name from IP address fails and breaks
    fork_domain_child(); (bso#15891).
  * Delayed leader broadcast can block ctdb forever; (bso#15892).
  * 'net ads group' failed to list domain groups; (bso#15900).
  * Apparently there is a conflict between shadow_copy2 module
    and virusfilter (action quarantine); (bso#15663).
  * Fix handling of empty GPO link; (bso#15877).
  * SMB ACL inheritance doesn't work for files created;
    (bso#15880).</changelog>
  <changelog author="nopower@suse.com" date="1758628800">- CVE-2025-9640: fix vfs_streams_xattr uninitialized memory write;
  (bsc#1251279);(bso#15885).
- CVE-2025-10230: fix command Injection in WINS Server Hook Script;
  (bsc#1251280);(bso#15903).</changelog>
  <changelog author="nopower@suse.com" date="1763553600">- Update to 4.21.10
  * Crash in ctdbd on failed updateip; (bso#15935).
  * samba-4.21 fails to join AD when multiple DCs are returned;
    (bso#15905).
  * vfs_ceph_new should not use ceph_ll_nonblocking_readv_writev
    for fsync_send; (bso#15919).
  * CTDB_SOCKET can be used even when CTDB_TEST_MODE is not set;
    (bso#15921).
- Update to 4.21.9
  * CVE-2025-10230; (bso#15903); (bsc#1251279).
  * CVE-2025-9640; (bso#15885); (bsc#1251280).</changelog>
  <changelog author="noel.power@suse.com" date="1765281600">- samba-bgqd can't find [printers] share; (bso#15936);
  (bsc#1254586).</changelog>
  <changelog author="nopower@suse.com" date="1765540800">- Fix Samba printers reporting invalid sid during print jobs;
  (bsc#1234210); (bsc#1254926); (bso#15792).</changelog>
  <changelog author="scabrero@suse.de" date="1766491200">- Fix testparm error handling the "sync machine password to keytab"
  option; (bsc#1254439);</changelog>
</package>
<package pkgid="8b90ae1ed09ac4d57fdeb4313036602e7d761dd01791a9825212dee5c0ec32f4" name="libldb-devel" arch="x86_64">
  <version epoch="0" ver="4.21.10+git.501.277ba349a01" rel="150700.3.26.1"/>
  <changelog author="nopower@suse.com" date="1729080000">-  Adjust spec to split out rpcd_* binaries into a separate
  sub package; (bsc#1231414).</changelog>
  <changelog author="nopower@suse.com" date="1730376000">- Add placeholder changelog for sle15-sp7; (jsc#PED-11210).</changelog>
  <changelog author="nopower@suse.com" date="1732536000">- Update to 4.21.2
  * smbd fails to correctly check sharemode against OVERWRITE
    dispositions; (bso#15732).
  * Panic in close_directory; (bso#15754).
  * winexe no longer works with samba 4.21; (bso#15752).
  * protocol error - Unclear debug message "pad length mismatch"
    for invalid bind packet; (bso#14356).
  * NetrGetLogonCapabilities QueryLevel 2 needs to be
    implemented; (bso#15425).
  * gss_accept_sec_context() from Heimdal does not imply
    GSS_C_MUTUAL_FLAG with GSS_C_DCE_STYLE; (bso#15740).
  * winbindd should call process_set_title() for locator child;
    (bso#15749).
  * Update CTDB to track all TCP connections to public IP
    addresses; (bso#15320).</changelog>
  <changelog author="nopower@suse.com" date="1733486400">- Update shipped /etc/samba/smb.conf to point to smb.conf
  man page;(bsc#1233880).</changelog>
  <changelog author="nopower@suse.com" date="1736251200">- Update to 4.21.3
  * More possible replication loops against Azure AD;
    (bso#15701).
  * Compound rename from Mac clients can fail with
    NT_STATUS_INTERNAL_ERROR if the file has a lease;
    (bso#15697).
  * vfs crossrename seems not work correctly; (bso#15724).
  * After 'machine password timeout' /etc/krb5.keytab is not
    updated; (bso#6750).
  * Memory leak wbcCtxLookupSid; (bso#15771).
  * Fix heap-user-after-free with association groups;
    (bso#15765).
  * Segfault in vfs_btrfs; (bso#15758).
  * Avoid event failure race when disabling an event script;
    (bso#15755).</changelog>
  <changelog author="nopower@suse.com" date="1739966400">- Update to 4.21.4
  * Increasing slowness of sharesec performance with high number
    of registry shares; (bso#15780).
  * winbindd shows memleak in kerberos_decode_pac; (bso#15782).
  * Creation of GPOs applicable to more than one group is
    impossible with Samba 4.20.0 and later; (bso#15738).
  * Replace `crypt` module in
    python/samba/netcmd/user/readpasswords/common.py;
    (bso#15756).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * Spotlight search results don't show file size and creation
    date; (bso#15796).
  * General improvements for vfs_ceph_new module; (bso#15703).
  * net offlinejoin not working correctly; (bso#15777).
  * net ads create/join/winbind producing unix dysfunctional
    keytabs; (bso#15759).
  * Windows Explorer crashes on S-1-22-* Unix-SIDs when accessing
    security tab; (bso#14213).
  * The values from hresult_errstr_const and hresult_errstr are
    reversed in 4.20 and 4.21; (bso#15769).
  * Kerberos referral tickets are generated for principals in our
    domain if we have a trust to a top level domain; (bso#15778).
  * NETLOGON_NTLMV2_ENABLED is missing in the SamLogon*
    user_flags field; (bso#15783).
  * Regression: stack-use-after-return in crypt_as_best_we_can();
    (bso#15784).
  * libreplace:readline: gcc 15 complains about incompatible
    pointer types; (bso#15788).</changelog>
  <changelog author="nopower@suse.com" date="1743595200">- Update to 4.21.5
  * ldb index cache is too small on known large transactions
    (schemaupgrade, provision); (bso#15795).
  * Enable support for cephfs case insensitive behavior;
    (bso#15822).
  * Subnet based interfaces definition not listening on all
    covered IP addresses; (bso#15823).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727); (bsc#1238063).
  * Remove of file or directory not possible with vfs_acl_tdb;
    (bso#15791).
  * Unable to connect to CephFS subvolume shares with
    vfs_shadow_copy2; (bso#15797).
  * Add async io API from libcephfs to ceph_new VFS module;
    (bso#15810).
  * vfs_ceph_new module does not work with other modules for
    snapshot management; (bso#15818).
  * vfs_ceph_new: Add path based fallback for SMB_VFS_FCHOWN,
    SMB_VFS_FCHMOD and SMB_VFS_FNTIMES; (bso#15834).
  * Incorrect FSF address in ctdb pcp scripts; (bso#15820).
  * "samba-tool domain backup offline" hangs; (bso#15804).</changelog>
  <changelog author="nopower@suse.com" date="1748952000">- Update to 4.21.6
  * Running "gpo manage motd set" twice fails with backtrace;
    (bso#15774).
  * samba-tool gpo backup creates entity backups it can't read;
    (bso#15829).
  * gp_cert_auto_enroll_ext.py has problem unpacking GUIDs with
    prepended 0's; (bso#15839).
  * CVE-2025-0620 [SECURITY] smbd doesn't pick up group
    membership changes when re-authenticating an expired SMB
    session; (bso#15707), (bsc#1244136).
  * Deadlock between two smbd processes; (bso#15767).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727).
  * Wide link issue in samba 4.22; (bso#15841).
  * dcerpcd not able to bind to listening port; (bso#15851).
  * vfs_ceph_snapshots fails to list snapshots for entries at any
    level beyond share root; (bso#15819).
  * CTDB does not put nodes running NFS into grace on graceful
    shutdown; (bso#15858).</changelog>
  <changelog author="scabrero@suse.de" date="1751976000">- Update to 4.21.7
  * Windows security hardening locks out schannel'ed netlogon dc
    calls like netr_DsRGetDCName; (bsc#1246431); (bso#15876);
  * Trust domains are not created; (bso#15680);
  * Startup messages of rpc deamons fills /var/log/messages;
    (bso#15869);</changelog>
  <changelog author="nopower@suse.com" date="1757419200">- - Update to 4.21.8
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * getpwuid does not shift to new DC when current DC is down;
    (bso#15844).
  * Windows security hardening locks out schannel'ed netlogon dc
    calls like netr_DsRGetDCName; (bso#15876).
  * kinit command is failing with Missing cache Error;
    (bso#15840).
  * Figuring out the DC name from IP address fails and breaks
    fork_domain_child(); (bso#15891).
  * Delayed leader broadcast can block ctdb forever; (bso#15892).
  * 'net ads group' failed to list domain groups; (bso#15900).
  * Apparently there is a conflict between shadow_copy2 module
    and virusfilter (action quarantine); (bso#15663).
  * Fix handling of empty GPO link; (bso#15877).
  * SMB ACL inheritance doesn't work for files created;
    (bso#15880).</changelog>
  <changelog author="nopower@suse.com" date="1758628800">- CVE-2025-9640: fix vfs_streams_xattr uninitialized memory write;
  (bsc#1251279);(bso#15885).
- CVE-2025-10230: fix command Injection in WINS Server Hook Script;
  (bsc#1251280);(bso#15903).</changelog>
  <changelog author="nopower@suse.com" date="1763553600">- Update to 4.21.10
  * Crash in ctdbd on failed updateip; (bso#15935).
  * samba-4.21 fails to join AD when multiple DCs are returned;
    (bso#15905).
  * vfs_ceph_new should not use ceph_ll_nonblocking_readv_writev
    for fsync_send; (bso#15919).
  * CTDB_SOCKET can be used even when CTDB_TEST_MODE is not set;
    (bso#15921).
- Update to 4.21.9
  * CVE-2025-10230; (bso#15903); (bsc#1251279).
  * CVE-2025-9640; (bso#15885); (bsc#1251280).</changelog>
  <changelog author="noel.power@suse.com" date="1765281600">- samba-bgqd can't find [printers] share; (bso#15936);
  (bsc#1254586).</changelog>
  <changelog author="nopower@suse.com" date="1765540800">- Fix Samba printers reporting invalid sid during print jobs;
  (bsc#1234210); (bsc#1254926); (bso#15792).</changelog>
  <changelog author="scabrero@suse.de" date="1766491200">- Fix testparm error handling the "sync machine password to keytab"
  option; (bsc#1254439);</changelog>
  <changelog author="noel.power@suse.com" date="1769515200">- Fix memory leak opening local named pipe; (bso#15979);
  (bsc#1257200).</changelog>
  <changelog author="noel.power@suse.com" date="1772020800">- Fix regression "use-kerberos=desired" broken doesn't even try
  to authenticate with kerberos and instead fallsback to NTLM;
  (bsc#1255755); (bso#15789).
- Fix memory leak using cups parsed options and from filename
  allocated when processing end of printing job; (bso#15979);
  (bsc#1257200).
- fix manpage for "net offlinejoin requestodj"; (bso#15964)
- fix "ctdbd socket" documentation in manpage for smb.conf;
  (bso#15977)</changelog>
  <changelog author="noel.power@suse.com" date="1773144000">- Generated dynamic profile based on path to special 'printers'
  share. (bsc#1259441).</changelog>
  <changelog author="nopower@suse.com" date="1774872000">- Fix rpc workers with long living clients from growing server
  memory keytab and increasing memory used by workers;
  (bso#16042); (bsc#1257200).</changelog>
  <changelog author="nopower@suse.com" date="1777291200">- CVE-2026-4480: Fix Unauthenticated Remote Code Execution;
  (bso#16033); (bsc#1261161).
- CVE-2026-4408: Fix Remote Code Execution in SAMR;(bso#16034);
  (bsc#1261163).
- CVE-2026-3238: Fix unauthenticated udp packet crashes AD DC
  nbt server; (bso#16012); (bsc#1261160).
- CVE-2026-3012: Fix CVE-2026-3012 group policy certificate
  enrollment using http:// without validation;(bso#16003);
  (bsc#1261159).
- CVE-2026-1933: Fix missing access check on reparse point
  operations; (bso#15992); (bsc#1261188).
- CVE-2026-2340: vfs_worm does not block directory modification;
  (bso#15997); (bsc#1261158).</changelog>
</package>
<package pkgid="6525965fc69bfe0261db08106a16a704b0ab3a6f5ec639d5f2ade8c10ba8771a" name="libldb-devel" arch="x86_64">
  <version epoch="0" ver="4.21.6+git.402.80f493f530f" rel="150700.3.3.1"/>
  <changelog author="nopower@suse.com" date="1697112000">- use systemd-logind rather than utmp for y2038 safety;
  (bsc#1216159).</changelog>
  <changelog author="nopower@suse.com" date="1697457600">- Update to 4.19.2
  * Use-after-free in aio_del_req_from_fsp during smbd shutdown
    after failed IPC FSCTL_PIPE_TRANSCEIVE; (bso#15423).
  * clidfs.c do_connect() missing a "return" after a
    cli_shutdown() call; (bso#15426).
  * macOS mdfind returns only 50 results; (bso#15463).
  * GETREALFILENAME_CACHE can modify incoming new filename with
    previous cache entry value; (bso#15481).
  * libnss_winbind causes memory corruption since samba-4.18,
    impacts sendmail, zabbix, potentially more; (bso#15464).
  * ctdbd: setproctitle not initialized messages flooding logs;
    (bso#15479).
  * CVE-2023-5568 Heap buffer overflow with freshness tokens in
    the Heimdal KDC in Samba 4.19; (bso#15491).
  * The heimdal KDC doesn't detect s4u2self correctly when fast
    is in use; (bso#15477).</changelog>
  <changelog author="dmulder@suse.com" date="1698062400">- packaging: samba-tool domain provision requires python3-Markdown;
  (bsc#1216519).</changelog>
  <changelog author="nopower@suse.com" date="1701086400">- Update to 4.19.3
  * sid_strings test broken by unix epoch &gt; 1700000000;
    (bso#15520).
  * smbd crashes if asked to return full information on close of
    a stream handle with delete on close disposition set;
    (bso#15487).
  * smbd: fix close order of base_fsp and stream_fsp in
    smb_fname_fsp_destructor(); (bso#15521).
  * Improve logging for failover scenarios; (bso#15499).
  * Files without "read attributes" NFS4 ACL permission are not
    listed in directories; (bso#15093).
  * CVE-2018-14628 [SECURITY] Deleted Object tombstones visible
    in AD LDAP to normal users; (bso#13595).
  * Kerberos TGS-REQ with User2User does not work for normal
    accounts; (bso#15492).
  * vfs_gpfs stat calls fail due to file system permissions;
    (bso#15507).
  * Samba doesn't build with Python 3.12; (bso#15513).</changelog>
  <changelog author="nopower@suse.com" date="1704801600">- Update to 4.19.4
  * net changesecretpw cannot set the machine account password if
    secrets.tdb is empty; (bso#13577).
  * For generating doc, take, if defined, env XML_CATALOG_FILES;
    (bso#15540).
  * Trivial C typo in nsswitch/winbind_nss_netbsd.c; (bso#15541).
  * vfs_linux_xfs is incorrectly named; (bso#15542).
  * systemd stumbled over copyright-message at smbd startup;
    (bso#15377).
  * Following intermediate abolute share-local symlinks is
    broken; (bso#15505).
  * ctdb RELEASE_IP causes a crash in release_ip if a connection
    to a non-public address disconnects first; (bso#15523).
  * shadow_copy2 broken when current fileset's directories are
    removed; (bso#15544).
  * smbd does not detect ctdb public ipv6 addresses for
    multichannel exclusion; (bso#15534).
  * 'force user = localunixuser' doesn't work if 'allow trusted
    domains = no' is set; (bso#15469).
  * smbget debug logging doesn't work; (bso#15525).
  * smget: username in the smburl and interactive password entry
    doesn't work; (bso#15532).
  * smbget auth function doesn't set values for password prompt
    correctly; (bso#15538).
  * Unable to copy and write files from clients to Ceph cluster
    via SMB Linux gateway with Ceph VFS module; (bso#15440).
  * Multichannel refresh network information; (bso#15547).</changelog>
  <changelog author="nopower@suse.com" date="1704888000">- Remove -x from bash shebang update-apparmor-samba-profile;
  (bsc#1218431).</changelog>
  <changelog author="nopower@suse.com" date="1708430400">- Update to 4.19.5
  * Windows 2016 fails to restore previous version of a file from
    a shadow_copy2 snapshot; (bso#13688).
  * Symlinks on AIX are broken in 4.19 (and a few version before
    that); (bso#15549).
  * Fake directory create times has no effect; (bso#12421).
  * ctime mixed up with mtime by smbd; (bso#15550).
  * samba-gpupdate --rsop fails if machine is not in a site;
    (bso#15548).
  * gpupdate: The root cert import when NDES is not available is
    broken; (bso#15557).
  * samba-gpupdate should print a useful message if cepces-submit
    can't be found; (bso#15552).
  * samba-gpupdate logging doesn't work; (bso#15558).
  * smbpasswd reset permissions only if not 0600; (bso#15555).</changelog>
  <changelog author="nopower@suse.com" date="1718884800">- Update to 4.19.7
  * ldb qsort might r/w out of bounds with an intransitive
    compare function (ldb 2.8.1 is already released);
    (bso#15569).
  * Many qsort() comparison functions are non-transitive, which
    can lead to out-of-bounds access in some circumstances (ldb
    2.8.1 is already released); (bso#15625).
  * Need to change gitlab-ci.yml tags in all branches to avoid CI
    bill; (bso#15638).
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * Anonymous smb3 signing/encryption should be allowed (similar
    to Windows Server 2022); (bso#15412).
  * Panic in dreplsrv_op_pull_source_apply_changes_trigger;
    (bso#15573).
  * winbindd, net ads join and other things don't work on an ipv6
    only host; (bso#15642).
  * Smbcacls incorrectly propagates inheritance with Inherit-Only
    flag; (bso#15636).
  * http library doesn't support  'chunked transfer encoding';
    (bso#15611).
- Update to 4.19.6
  * fd_handle_destructor() panics within an smbd_smb2_close() if
    vfs_stat_fsp() fails in fd_close(); (bso#15527).
  * samba-gpupdate: Correctly implement site support;
    (bso#15588).
  * libgpo: Segfault in python bindings; (bso#15599).
  * Packet marshalling push support missing for
    CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and
    CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580).</changelog>
  <changelog author="scabrero@suse.de" date="1722513600">- Fix a crash when joining offline and 'kerberos method' includes
  keytab; (bsc#1228732);
- Fix reading the password from STDIN or environment vars if it
  was already given in the command line; (bsc#1228732);</changelog>
  <changelog author="ddiss@suse.com" date="1725537600">- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated;
  (bso#15699); (bsc#1229684).
- Update to 4.19.8
  * Invalid client warning about command line passwords;
    (bso#15671);
  * Version string is truncated in manpages; (bso#15672);
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673);
  * cmdline_burn does not always burn secrets; (bso#15674);
  * Samba doesn't parse SDDL found in defaultSecurityDescriptor
    in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685);
  * We have added new options --vendor-name and --vendor-patch-
    revision arguments to ./configure to allow distributions and
    packagers to put their name in the Samba version string so that
    when debugging Samba the source of the binary is obvious;
    (bso#15654);
  * When claims enabled with heimdal kerberos, unable to log on to a
    Windows computer when user account need to change their own
    password; (bso#15655);
  * Fix clock skew error message and memory cache clock skew
    recovery; (bso#15676);
  * CTDB RADOS mutex helper misses namespace support; (bso#15665);
  * The images don't build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660);
  * Fix unnecessary delays in CTDB while processing requests under
    high load; (bso#15678);
  * Dynamic DNS updates with the internal DNS are not working;
    (bso#13019);
  * s4:nbt_server: does not provide unexpected handling, so winbindd
    can't use nmb requests instead cldap; (bso#15620);
  * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664);
  * "client use kerberos" and --use-kerberos is ignored for the machine
    account; (bso#15666);
  * Regression DFS not working with widelinks = true; (bso#15435);
  * ntlm_auth make logs more consistent with length check; (bso#15677);</changelog>
  <changelog author="nopower@suse.com" date="1728475200">-  Adjust spec to split out rpcd_* binaries into a separate
  sub package; (bsc#1231414).</changelog>
  <changelog author="nopower@suse.com" date="1728993600">- Update to 4.21.1
  * DH reconnect error handling can lead to stale sharemode
    entries; (bso#15624).
  * "inherit permissions = yes" triggers assert() in vfs_default
    when creating a stream; (bso#15695).
  * Samba 4.21.0 broke FreeIPA domain member integration;
    (bso#15715).
  * Missing conversion for msDS-UserTGTLifetime, msDS-
    ComputerTGTLifetime and msDS-ServiceTGTLifetime on "samba-
    tool domain auth policy modify"; (bso#15692).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * Durable handle is not granted when a previous OPEN exists
    with NoOplock; (bso#15649).
  * Durable handle is granted but reconnect fails; (bso#15651).
  * Disconnected durable handles with RH lease should not be
    purged by a new non conflicting open; (bso#15708).
  * net ads testjoin and other commands use the wrong secrets.tdb
    in a cluster; (bso#15714).
  * 4.21 using --with-system-mitkrb5 requires MIT krb5 1.16 as
    rfc 8009 etypes are used; (bso#15726).
  * VFS_OPEN_HOW_WITH_BACKUP_INTENT breaks shadow_copy2;
    (bso#15730).
  * Samba 4.20.0 DLZ module crashes BIND on startup; (bso#15643).
  * Cannot build libldb lmdb backend on a build without AD DC;
    (bso#15721).
  * Consistent log level for sighup handler; (bso#15706).
- Package ceph_new VFS module.
- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated;
  (bso#15699); (bsc#1229684).
- Update to 4.21.0
  * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when
    truncated; (bso#15699).
  * Bad variable definition for ParseTuple causing test failure
    for Smb3UnixTests.test_create_context_reparse; (bso#15702).
  * Add new vfs_ceph module (based on low level API);
    (bso#15686).
  * samba-tool can not load the default configuration file;
    (bso#15698).
  * Crash when readlinkat fails; (bso#15700).
  * Can't add/delete special keys to keytab for nfs, cifs, http
    etc; (bso#15689).
  * Compound SMB2 requests don't return
    NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses
    MacOSX clients; (bso#15696).
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673).
  * ldb_version.h is missing from ldb public library;
    (bso#15690).
  * Can not add/delete special keys to keytab for nfs, cifs, http
    etc; (bso#15689).
  * undefined reference to winbind_lookup_name_ex; (bso#15687).
  * per user veto and hide file syntax is to complex;
    (bso#15688).
- Update to 4.20.4
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673).
- Update to 4.20.3
  * Running samba-bgqd a a standalone systemd service does not
    work; (bso#15683).
  * When claims enabled with heimdal kerberos, unable to log on
    to a Windows computer when user account need to change their
    own password; (bso#15655).
  * Invalid client warning about command line passwords;
    (bso#15671).
  * Version string is truncated in manpages; (bso#15672).
  * cmdline_burn does not always burn secrets; (bso#15674).
  * Samba does not parse SDDL found in defaultSecurityDescriptor
    in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685).
  * The images don\'t build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660).
  * Fix clock skew error message and memory cache clock skew
    recovery; (bso#15676).
  * Heimdal ignores _gsskrb5_decapsulate errors in
    init_sec_context/repl_mutual; (bso#15603).
  * s4:ldap_server: does not support tls channel bindings for
    sasl binds; (bso#15621).
  * CTDB socket output queues may suffer unbounded delays under
    some special conditions; (bso#15678).
- Update samba-tool package to require python3-Markdown also in
  the Heimdal ADDC build
- Fix named crash when using samba's DLZ plugin; (bsc#1224003);
  (bso#15643);
- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]
- Update to 4.20.2
  * vfs_widelinks with DFS shares breaks case insensitivity;
    (bso#15662); (bsc#1213607).
  * Samba build is not reproducible; (bso#13213).
  * ldb qsort might r/w out of bounds with an intransitive
    compare function; (bso#15569).
  * Many qsort() comparison functions are non-transitive, which
    can lead to out-of-bounds access in some circumstances;
    (bso#15625).
  * Need to change gitlab-ci.yml tags in all branches to avoid CI
    bill; (bso#15638).
  * We have added new options --vendor-name and --vendor-patch-
    revision arguments to ./configure to allow distributions and
    packagers to put their name in the Samba version string so
    that when debugging Samba the source of the binary is
    obvious; (bso#15654).
  * CTDB RADOS mutex helper misses namespace support;
    (bso#15665).
  * Dynamic DNS updates with the internal DNS are not working;
    (bso#13019).
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * Anonymous smb3 signing/encryption should be allowed (similar
    to Windows Server 2022); (bso#15412).
  * Panic in dreplsrv_op_pull_source_apply_changes_trigger;
    (bso#15573).
  * s4:nbt_server: does not provide unexpected handling, so
    winbindd can't use nmb requests instead cldap; (bso#15620).
  * winbindd, net ads join and other things don't work on an ipv6
    only host; (bso#15642).
  * Segmentation fault when deleting files in vfs_recycle;
    (bso#15659).
  * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664).
  * "client use kerberos" and --use-kerberos is ignored for the
    machine account; (bso#15666).
  * Regression DFS not working with widelinks = true;
    (bso#15435).
  * samba-gpupdate - Invalid NtVer in netlogon_samlogon_response;
    (bso#15633).
  * idmap_ad creates an incorrect local krb5.conf in case of
    trusted domain lookups; (bso#15653).
  * The images don't build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660).
- Fix non deterministic builds; (bsc#1225754); (bso#13213);
- Update to 4.20.1
  * dns update debug message is too noisy; (bso#15630);
  * Do not fail PAC validation for RFC8009 checksums types; (bso#15635);
  * Improve performance of lookup_groupmem() in idmap_ad; (bso#15605);
  * Smbcacls incorrectly propagates inheritance with Inherit-Only flag; (bso#15636);
  * http library doesn't support 'chunked transfer encoding'; (bso#15611);
  * Provide a systemd service file for the background queue daemon; (bso#15600);
- Update to 4.20.0
  New features:
  * samba-tool user getpassword / syncpasswords ;rounds= change
  * Group Managed service account client-side features
  * New Windows Search Protocol Client
  * Allow 'smbcacls' to save/restore DACLs to file
  * Samba-tool extensions for AD Claims, Authentication Policies and Silos
  * AD DC support for Authentication Silos and Authentication Policies
  * Conditional ACEs and Resource Attribute ACEs
  * Service Witness Protocol [MS-SWN]
  Removed features:
  * Get locally logged on users from utmp
  Fixed bugs:
  * Avoid null-dereference with bad claims; (bso#15606);
  * ndr_pull_security_ace can leave resource attribute ACE coda
    claim struct undefined; (bso#15613);
  * fd_handle_destructor() panics within an smbd_smb2_close() if
    vfs_stat_fsp() fails in fd_close(); (bso#15527);
  * set_nt_acl sometimes fails with NT_STATUS_INVALID_PARAMETER -
    openat() EACCES; (bso#15583);
  * libgpo: Segfault in python bindings; (bso#15599);
  * Samba AD is missing some authentication policy tests;
    (bso#15607);
  * samba-gpupdate: Correctly implement site support; (bso#15588);
  * Remove unsupported "Final" keyword missing from Python 3.6;
    (bso#15575);
  * Additional witness backports for 4.20.0; (bso#15577);
  * Error output with wspsearch; (bso#15579);
  * Packet marshalling push support missing for
    CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and
    CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580);
  * Performance regression for NDR parsing of security
    descriptors; (bso#15574);
  * Build and install man page for wspsearch client utility;
    (bso#15565);
- Update to 4.19.9
  * libldb: performance issue with indexes (ldb 2.8.2 is already
    released); (bso#15590).
  * DH reconnect error handling can lead to stale sharemode
    entries; (bso#15624).
  * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when
    truncated; (bso#15699).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * Compound SMB2 requests don't return
    NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses
    MacOSX clients; (bso#15696).
  * Crash when readlinkat fails; (bso#15700).</changelog>
  <changelog author="nopower@suse.com" date="1729080000">-  Adjust spec to split out rpcd_* binaries into a separate
  sub package; (bsc#1231414).</changelog>
  <changelog author="nopower@suse.com" date="1730376000">- Add placeholder changelog for sle15-sp7; (jsc#PED-11210).</changelog>
  <changelog author="nopower@suse.com" date="1732536000">- Update to 4.21.2
  * smbd fails to correctly check sharemode against OVERWRITE
    dispositions; (bso#15732).
  * Panic in close_directory; (bso#15754).
  * winexe no longer works with samba 4.21; (bso#15752).
  * protocol error - Unclear debug message "pad length mismatch"
    for invalid bind packet; (bso#14356).
  * NetrGetLogonCapabilities QueryLevel 2 needs to be
    implemented; (bso#15425).
  * gss_accept_sec_context() from Heimdal does not imply
    GSS_C_MUTUAL_FLAG with GSS_C_DCE_STYLE; (bso#15740).
  * winbindd should call process_set_title() for locator child;
    (bso#15749).
  * Update CTDB to track all TCP connections to public IP
    addresses; (bso#15320).</changelog>
  <changelog author="nopower@suse.com" date="1733486400">- Update shipped /etc/samba/smb.conf to point to smb.conf
  man page;(bsc#1233880).</changelog>
  <changelog author="nopower@suse.com" date="1736251200">- Update to 4.21.3
  * More possible replication loops against Azure AD;
    (bso#15701).
  * Compound rename from Mac clients can fail with
    NT_STATUS_INTERNAL_ERROR if the file has a lease;
    (bso#15697).
  * vfs crossrename seems not work correctly; (bso#15724).
  * After 'machine password timeout' /etc/krb5.keytab is not
    updated; (bso#6750).
  * Memory leak wbcCtxLookupSid; (bso#15771).
  * Fix heap-user-after-free with association groups;
    (bso#15765).
  * Segfault in vfs_btrfs; (bso#15758).
  * Avoid event failure race when disabling an event script;
    (bso#15755).</changelog>
  <changelog author="nopower@suse.com" date="1739966400">- Update to 4.21.4
  * Increasing slowness of sharesec performance with high number
    of registry shares; (bso#15780).
  * winbindd shows memleak in kerberos_decode_pac; (bso#15782).
  * Creation of GPOs applicable to more than one group is
    impossible with Samba 4.20.0 and later; (bso#15738).
  * Replace `crypt` module in
    python/samba/netcmd/user/readpasswords/common.py;
    (bso#15756).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * Spotlight search results don't show file size and creation
    date; (bso#15796).
  * General improvements for vfs_ceph_new module; (bso#15703).
  * net offlinejoin not working correctly; (bso#15777).
  * net ads create/join/winbind producing unix dysfunctional
    keytabs; (bso#15759).
  * Windows Explorer crashes on S-1-22-* Unix-SIDs when accessing
    security tab; (bso#14213).
  * The values from hresult_errstr_const and hresult_errstr are
    reversed in 4.20 and 4.21; (bso#15769).
  * Kerberos referral tickets are generated for principals in our
    domain if we have a trust to a top level domain; (bso#15778).
  * NETLOGON_NTLMV2_ENABLED is missing in the SamLogon*
    user_flags field; (bso#15783).
  * Regression: stack-use-after-return in crypt_as_best_we_can();
    (bso#15784).
  * libreplace:readline: gcc 15 complains about incompatible
    pointer types; (bso#15788).</changelog>
  <changelog author="nopower@suse.com" date="1743595200">- Update to 4.21.5
  * ldb index cache is too small on known large transactions
    (schemaupgrade, provision); (bso#15795).
  * Enable support for cephfs case insensitive behavior;
    (bso#15822).
  * Subnet based interfaces definition not listening on all
    covered IP addresses; (bso#15823).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727); (bsc#1238063).
  * Remove of file or directory not possible with vfs_acl_tdb;
    (bso#15791).
  * Unable to connect to CephFS subvolume shares with
    vfs_shadow_copy2; (bso#15797).
  * Add async io API from libcephfs to ceph_new VFS module;
    (bso#15810).
  * vfs_ceph_new module does not work with other modules for
    snapshot management; (bso#15818).
  * vfs_ceph_new: Add path based fallback for SMB_VFS_FCHOWN,
    SMB_VFS_FCHMOD and SMB_VFS_FNTIMES; (bso#15834).
  * Incorrect FSF address in ctdb pcp scripts; (bso#15820).
  * "samba-tool domain backup offline" hangs; (bso#15804).</changelog>
  <changelog author="nopower@suse.com" date="1748952000">- Update to 4.21.6
  * Running "gpo manage motd set" twice fails with backtrace;
    (bso#15774).
  * samba-tool gpo backup creates entity backups it can't read;
    (bso#15829).
  * gp_cert_auto_enroll_ext.py has problem unpacking GUIDs with
    prepended 0's; (bso#15839).
  * CVE-2025-0620 [SECURITY] smbd doesn't pick up group
    membership changes when re-authenticating an expired SMB
    session; (bso#15707), (bsc#1244136).
  * Deadlock between two smbd processes; (bso#15767).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727).
  * Wide link issue in samba 4.22; (bso#15841).
  * dcerpcd not able to bind to listening port; (bso#15851).
  * vfs_ceph_snapshots fails to list snapshots for entries at any
    level beyond share root; (bso#15819).
  * CTDB does not put nodes running NFS into grace on graceful
    shutdown; (bso#15858).</changelog>
</package>
<package pkgid="27fb17e26fab28a134a1e2a8a78ec8dbe97890d1d6a8c3c6717a8112c4e88f2c" name="libldb-devel" arch="x86_64">
  <version epoch="0" ver="4.21.6+git.493.f39e13aba14" rel="150700.3.6.1"/>
  <changelog author="nopower@suse.com" date="1697457600">- Update to 4.19.2
  * Use-after-free in aio_del_req_from_fsp during smbd shutdown
    after failed IPC FSCTL_PIPE_TRANSCEIVE; (bso#15423).
  * clidfs.c do_connect() missing a "return" after a
    cli_shutdown() call; (bso#15426).
  * macOS mdfind returns only 50 results; (bso#15463).
  * GETREALFILENAME_CACHE can modify incoming new filename with
    previous cache entry value; (bso#15481).
  * libnss_winbind causes memory corruption since samba-4.18,
    impacts sendmail, zabbix, potentially more; (bso#15464).
  * ctdbd: setproctitle not initialized messages flooding logs;
    (bso#15479).
  * CVE-2023-5568 Heap buffer overflow with freshness tokens in
    the Heimdal KDC in Samba 4.19; (bso#15491).
  * The heimdal KDC doesn't detect s4u2self correctly when fast
    is in use; (bso#15477).</changelog>
  <changelog author="dmulder@suse.com" date="1698062400">- packaging: samba-tool domain provision requires python3-Markdown;
  (bsc#1216519).</changelog>
  <changelog author="nopower@suse.com" date="1701086400">- Update to 4.19.3
  * sid_strings test broken by unix epoch &gt; 1700000000;
    (bso#15520).
  * smbd crashes if asked to return full information on close of
    a stream handle with delete on close disposition set;
    (bso#15487).
  * smbd: fix close order of base_fsp and stream_fsp in
    smb_fname_fsp_destructor(); (bso#15521).
  * Improve logging for failover scenarios; (bso#15499).
  * Files without "read attributes" NFS4 ACL permission are not
    listed in directories; (bso#15093).
  * CVE-2018-14628 [SECURITY] Deleted Object tombstones visible
    in AD LDAP to normal users; (bso#13595).
  * Kerberos TGS-REQ with User2User does not work for normal
    accounts; (bso#15492).
  * vfs_gpfs stat calls fail due to file system permissions;
    (bso#15507).
  * Samba doesn't build with Python 3.12; (bso#15513).</changelog>
  <changelog author="nopower@suse.com" date="1704801600">- Update to 4.19.4
  * net changesecretpw cannot set the machine account password if
    secrets.tdb is empty; (bso#13577).
  * For generating doc, take, if defined, env XML_CATALOG_FILES;
    (bso#15540).
  * Trivial C typo in nsswitch/winbind_nss_netbsd.c; (bso#15541).
  * vfs_linux_xfs is incorrectly named; (bso#15542).
  * systemd stumbled over copyright-message at smbd startup;
    (bso#15377).
  * Following intermediate abolute share-local symlinks is
    broken; (bso#15505).
  * ctdb RELEASE_IP causes a crash in release_ip if a connection
    to a non-public address disconnects first; (bso#15523).
  * shadow_copy2 broken when current fileset's directories are
    removed; (bso#15544).
  * smbd does not detect ctdb public ipv6 addresses for
    multichannel exclusion; (bso#15534).
  * 'force user = localunixuser' doesn't work if 'allow trusted
    domains = no' is set; (bso#15469).
  * smbget debug logging doesn't work; (bso#15525).
  * smget: username in the smburl and interactive password entry
    doesn't work; (bso#15532).
  * smbget auth function doesn't set values for password prompt
    correctly; (bso#15538).
  * Unable to copy and write files from clients to Ceph cluster
    via SMB Linux gateway with Ceph VFS module; (bso#15440).
  * Multichannel refresh network information; (bso#15547).</changelog>
  <changelog author="nopower@suse.com" date="1704888000">- Remove -x from bash shebang update-apparmor-samba-profile;
  (bsc#1218431).</changelog>
  <changelog author="nopower@suse.com" date="1708430400">- Update to 4.19.5
  * Windows 2016 fails to restore previous version of a file from
    a shadow_copy2 snapshot; (bso#13688).
  * Symlinks on AIX are broken in 4.19 (and a few version before
    that); (bso#15549).
  * Fake directory create times has no effect; (bso#12421).
  * ctime mixed up with mtime by smbd; (bso#15550).
  * samba-gpupdate --rsop fails if machine is not in a site;
    (bso#15548).
  * gpupdate: The root cert import when NDES is not available is
    broken; (bso#15557).
  * samba-gpupdate should print a useful message if cepces-submit
    can't be found; (bso#15552).
  * samba-gpupdate logging doesn't work; (bso#15558).
  * smbpasswd reset permissions only if not 0600; (bso#15555).</changelog>
  <changelog author="nopower@suse.com" date="1718884800">- Update to 4.19.7
  * ldb qsort might r/w out of bounds with an intransitive
    compare function (ldb 2.8.1 is already released);
    (bso#15569).
  * Many qsort() comparison functions are non-transitive, which
    can lead to out-of-bounds access in some circumstances (ldb
    2.8.1 is already released); (bso#15625).
  * Need to change gitlab-ci.yml tags in all branches to avoid CI
    bill; (bso#15638).
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * Anonymous smb3 signing/encryption should be allowed (similar
    to Windows Server 2022); (bso#15412).
  * Panic in dreplsrv_op_pull_source_apply_changes_trigger;
    (bso#15573).
  * winbindd, net ads join and other things don't work on an ipv6
    only host; (bso#15642).
  * Smbcacls incorrectly propagates inheritance with Inherit-Only
    flag; (bso#15636).
  * http library doesn't support  'chunked transfer encoding';
    (bso#15611).
- Update to 4.19.6
  * fd_handle_destructor() panics within an smbd_smb2_close() if
    vfs_stat_fsp() fails in fd_close(); (bso#15527).
  * samba-gpupdate: Correctly implement site support;
    (bso#15588).
  * libgpo: Segfault in python bindings; (bso#15599).
  * Packet marshalling push support missing for
    CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and
    CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580).</changelog>
  <changelog author="scabrero@suse.de" date="1722513600">- Fix a crash when joining offline and 'kerberos method' includes
  keytab; (bsc#1228732);
- Fix reading the password from STDIN or environment vars if it
  was already given in the command line; (bsc#1228732);</changelog>
  <changelog author="ddiss@suse.com" date="1725537600">- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated;
  (bso#15699); (bsc#1229684).
- Update to 4.19.8
  * Invalid client warning about command line passwords;
    (bso#15671);
  * Version string is truncated in manpages; (bso#15672);
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673);
  * cmdline_burn does not always burn secrets; (bso#15674);
  * Samba doesn't parse SDDL found in defaultSecurityDescriptor
    in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685);
  * We have added new options --vendor-name and --vendor-patch-
    revision arguments to ./configure to allow distributions and
    packagers to put their name in the Samba version string so that
    when debugging Samba the source of the binary is obvious;
    (bso#15654);
  * When claims enabled with heimdal kerberos, unable to log on to a
    Windows computer when user account need to change their own
    password; (bso#15655);
  * Fix clock skew error message and memory cache clock skew
    recovery; (bso#15676);
  * CTDB RADOS mutex helper misses namespace support; (bso#15665);
  * The images don't build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660);
  * Fix unnecessary delays in CTDB while processing requests under
    high load; (bso#15678);
  * Dynamic DNS updates with the internal DNS are not working;
    (bso#13019);
  * s4:nbt_server: does not provide unexpected handling, so winbindd
    can't use nmb requests instead cldap; (bso#15620);
  * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664);
  * "client use kerberos" and --use-kerberos is ignored for the machine
    account; (bso#15666);
  * Regression DFS not working with widelinks = true; (bso#15435);
  * ntlm_auth make logs more consistent with length check; (bso#15677);</changelog>
  <changelog author="nopower@suse.com" date="1728475200">-  Adjust spec to split out rpcd_* binaries into a separate
  sub package; (bsc#1231414).</changelog>
  <changelog author="nopower@suse.com" date="1728993600">- Update to 4.21.1
  * DH reconnect error handling can lead to stale sharemode
    entries; (bso#15624).
  * "inherit permissions = yes" triggers assert() in vfs_default
    when creating a stream; (bso#15695).
  * Samba 4.21.0 broke FreeIPA domain member integration;
    (bso#15715).
  * Missing conversion for msDS-UserTGTLifetime, msDS-
    ComputerTGTLifetime and msDS-ServiceTGTLifetime on "samba-
    tool domain auth policy modify"; (bso#15692).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * Durable handle is not granted when a previous OPEN exists
    with NoOplock; (bso#15649).
  * Durable handle is granted but reconnect fails; (bso#15651).
  * Disconnected durable handles with RH lease should not be
    purged by a new non conflicting open; (bso#15708).
  * net ads testjoin and other commands use the wrong secrets.tdb
    in a cluster; (bso#15714).
  * 4.21 using --with-system-mitkrb5 requires MIT krb5 1.16 as
    rfc 8009 etypes are used; (bso#15726).
  * VFS_OPEN_HOW_WITH_BACKUP_INTENT breaks shadow_copy2;
    (bso#15730).
  * Samba 4.20.0 DLZ module crashes BIND on startup; (bso#15643).
  * Cannot build libldb lmdb backend on a build without AD DC;
    (bso#15721).
  * Consistent log level for sighup handler; (bso#15706).
- Package ceph_new VFS module.
- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated;
  (bso#15699); (bsc#1229684).
- Update to 4.21.0
  * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when
    truncated; (bso#15699).
  * Bad variable definition for ParseTuple causing test failure
    for Smb3UnixTests.test_create_context_reparse; (bso#15702).
  * Add new vfs_ceph module (based on low level API);
    (bso#15686).
  * samba-tool can not load the default configuration file;
    (bso#15698).
  * Crash when readlinkat fails; (bso#15700).
  * Can't add/delete special keys to keytab for nfs, cifs, http
    etc; (bso#15689).
  * Compound SMB2 requests don't return
    NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses
    MacOSX clients; (bso#15696).
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673).
  * ldb_version.h is missing from ldb public library;
    (bso#15690).
  * Can not add/delete special keys to keytab for nfs, cifs, http
    etc; (bso#15689).
  * undefined reference to winbind_lookup_name_ex; (bso#15687).
  * per user veto and hide file syntax is to complex;
    (bso#15688).
- Update to 4.20.4
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673).
- Update to 4.20.3
  * Running samba-bgqd a a standalone systemd service does not
    work; (bso#15683).
  * When claims enabled with heimdal kerberos, unable to log on
    to a Windows computer when user account need to change their
    own password; (bso#15655).
  * Invalid client warning about command line passwords;
    (bso#15671).
  * Version string is truncated in manpages; (bso#15672).
  * cmdline_burn does not always burn secrets; (bso#15674).
  * Samba does not parse SDDL found in defaultSecurityDescriptor
    in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685).
  * The images don\'t build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660).
  * Fix clock skew error message and memory cache clock skew
    recovery; (bso#15676).
  * Heimdal ignores _gsskrb5_decapsulate errors in
    init_sec_context/repl_mutual; (bso#15603).
  * s4:ldap_server: does not support tls channel bindings for
    sasl binds; (bso#15621).
  * CTDB socket output queues may suffer unbounded delays under
    some special conditions; (bso#15678).
- Update samba-tool package to require python3-Markdown also in
  the Heimdal ADDC build
- Fix named crash when using samba's DLZ plugin; (bsc#1224003);
  (bso#15643);
- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]
- Update to 4.20.2
  * vfs_widelinks with DFS shares breaks case insensitivity;
    (bso#15662); (bsc#1213607).
  * Samba build is not reproducible; (bso#13213).
  * ldb qsort might r/w out of bounds with an intransitive
    compare function; (bso#15569).
  * Many qsort() comparison functions are non-transitive, which
    can lead to out-of-bounds access in some circumstances;
    (bso#15625).
  * Need to change gitlab-ci.yml tags in all branches to avoid CI
    bill; (bso#15638).
  * We have added new options --vendor-name and --vendor-patch-
    revision arguments to ./configure to allow distributions and
    packagers to put their name in the Samba version string so
    that when debugging Samba the source of the binary is
    obvious; (bso#15654).
  * CTDB RADOS mutex helper misses namespace support;
    (bso#15665).
  * Dynamic DNS updates with the internal DNS are not working;
    (bso#13019).
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * Anonymous smb3 signing/encryption should be allowed (similar
    to Windows Server 2022); (bso#15412).
  * Panic in dreplsrv_op_pull_source_apply_changes_trigger;
    (bso#15573).
  * s4:nbt_server: does not provide unexpected handling, so
    winbindd can't use nmb requests instead cldap; (bso#15620).
  * winbindd, net ads join and other things don't work on an ipv6
    only host; (bso#15642).
  * Segmentation fault when deleting files in vfs_recycle;
    (bso#15659).
  * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664).
  * "client use kerberos" and --use-kerberos is ignored for the
    machine account; (bso#15666).
  * Regression DFS not working with widelinks = true;
    (bso#15435).
  * samba-gpupdate - Invalid NtVer in netlogon_samlogon_response;
    (bso#15633).
  * idmap_ad creates an incorrect local krb5.conf in case of
    trusted domain lookups; (bso#15653).
  * The images don't build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660).
- Fix non deterministic builds; (bsc#1225754); (bso#13213);
- Update to 4.20.1
  * dns update debug message is too noisy; (bso#15630);
  * Do not fail PAC validation for RFC8009 checksums types; (bso#15635);
  * Improve performance of lookup_groupmem() in idmap_ad; (bso#15605);
  * Smbcacls incorrectly propagates inheritance with Inherit-Only flag; (bso#15636);
  * http library doesn't support 'chunked transfer encoding'; (bso#15611);
  * Provide a systemd service file for the background queue daemon; (bso#15600);
- Update to 4.20.0
  New features:
  * samba-tool user getpassword / syncpasswords ;rounds= change
  * Group Managed service account client-side features
  * New Windows Search Protocol Client
  * Allow 'smbcacls' to save/restore DACLs to file
  * Samba-tool extensions for AD Claims, Authentication Policies and Silos
  * AD DC support for Authentication Silos and Authentication Policies
  * Conditional ACEs and Resource Attribute ACEs
  * Service Witness Protocol [MS-SWN]
  Removed features:
  * Get locally logged on users from utmp
  Fixed bugs:
  * Avoid null-dereference with bad claims; (bso#15606);
  * ndr_pull_security_ace can leave resource attribute ACE coda
    claim struct undefined; (bso#15613);
  * fd_handle_destructor() panics within an smbd_smb2_close() if
    vfs_stat_fsp() fails in fd_close(); (bso#15527);
  * set_nt_acl sometimes fails with NT_STATUS_INVALID_PARAMETER -
    openat() EACCES; (bso#15583);
  * libgpo: Segfault in python bindings; (bso#15599);
  * Samba AD is missing some authentication policy tests;
    (bso#15607);
  * samba-gpupdate: Correctly implement site support; (bso#15588);
  * Remove unsupported "Final" keyword missing from Python 3.6;
    (bso#15575);
  * Additional witness backports for 4.20.0; (bso#15577);
  * Error output with wspsearch; (bso#15579);
  * Packet marshalling push support missing for
    CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and
    CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580);
  * Performance regression for NDR parsing of security
    descriptors; (bso#15574);
  * Build and install man page for wspsearch client utility;
    (bso#15565);
- Update to 4.19.9
  * libldb: performance issue with indexes (ldb 2.8.2 is already
    released); (bso#15590).
  * DH reconnect error handling can lead to stale sharemode
    entries; (bso#15624).
  * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when
    truncated; (bso#15699).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * Compound SMB2 requests don't return
    NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses
    MacOSX clients; (bso#15696).
  * Crash when readlinkat fails; (bso#15700).</changelog>
  <changelog author="nopower@suse.com" date="1729080000">-  Adjust spec to split out rpcd_* binaries into a separate
  sub package; (bsc#1231414).</changelog>
  <changelog author="nopower@suse.com" date="1730376000">- Add placeholder changelog for sle15-sp7; (jsc#PED-11210).</changelog>
  <changelog author="nopower@suse.com" date="1732536000">- Update to 4.21.2
  * smbd fails to correctly check sharemode against OVERWRITE
    dispositions; (bso#15732).
  * Panic in close_directory; (bso#15754).
  * winexe no longer works with samba 4.21; (bso#15752).
  * protocol error - Unclear debug message "pad length mismatch"
    for invalid bind packet; (bso#14356).
  * NetrGetLogonCapabilities QueryLevel 2 needs to be
    implemented; (bso#15425).
  * gss_accept_sec_context() from Heimdal does not imply
    GSS_C_MUTUAL_FLAG with GSS_C_DCE_STYLE; (bso#15740).
  * winbindd should call process_set_title() for locator child;
    (bso#15749).
  * Update CTDB to track all TCP connections to public IP
    addresses; (bso#15320).</changelog>
  <changelog author="nopower@suse.com" date="1733486400">- Update shipped /etc/samba/smb.conf to point to smb.conf
  man page;(bsc#1233880).</changelog>
  <changelog author="nopower@suse.com" date="1736251200">- Update to 4.21.3
  * More possible replication loops against Azure AD;
    (bso#15701).
  * Compound rename from Mac clients can fail with
    NT_STATUS_INTERNAL_ERROR if the file has a lease;
    (bso#15697).
  * vfs crossrename seems not work correctly; (bso#15724).
  * After 'machine password timeout' /etc/krb5.keytab is not
    updated; (bso#6750).
  * Memory leak wbcCtxLookupSid; (bso#15771).
  * Fix heap-user-after-free with association groups;
    (bso#15765).
  * Segfault in vfs_btrfs; (bso#15758).
  * Avoid event failure race when disabling an event script;
    (bso#15755).</changelog>
  <changelog author="nopower@suse.com" date="1739966400">- Update to 4.21.4
  * Increasing slowness of sharesec performance with high number
    of registry shares; (bso#15780).
  * winbindd shows memleak in kerberos_decode_pac; (bso#15782).
  * Creation of GPOs applicable to more than one group is
    impossible with Samba 4.20.0 and later; (bso#15738).
  * Replace `crypt` module in
    python/samba/netcmd/user/readpasswords/common.py;
    (bso#15756).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * Spotlight search results don't show file size and creation
    date; (bso#15796).
  * General improvements for vfs_ceph_new module; (bso#15703).
  * net offlinejoin not working correctly; (bso#15777).
  * net ads create/join/winbind producing unix dysfunctional
    keytabs; (bso#15759).
  * Windows Explorer crashes on S-1-22-* Unix-SIDs when accessing
    security tab; (bso#14213).
  * The values from hresult_errstr_const and hresult_errstr are
    reversed in 4.20 and 4.21; (bso#15769).
  * Kerberos referral tickets are generated for principals in our
    domain if we have a trust to a top level domain; (bso#15778).
  * NETLOGON_NTLMV2_ENABLED is missing in the SamLogon*
    user_flags field; (bso#15783).
  * Regression: stack-use-after-return in crypt_as_best_we_can();
    (bso#15784).
  * libreplace:readline: gcc 15 complains about incompatible
    pointer types; (bso#15788).</changelog>
  <changelog author="nopower@suse.com" date="1743595200">- Update to 4.21.5
  * ldb index cache is too small on known large transactions
    (schemaupgrade, provision); (bso#15795).
  * Enable support for cephfs case insensitive behavior;
    (bso#15822).
  * Subnet based interfaces definition not listening on all
    covered IP addresses; (bso#15823).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727); (bsc#1238063).
  * Remove of file or directory not possible with vfs_acl_tdb;
    (bso#15791).
  * Unable to connect to CephFS subvolume shares with
    vfs_shadow_copy2; (bso#15797).
  * Add async io API from libcephfs to ceph_new VFS module;
    (bso#15810).
  * vfs_ceph_new module does not work with other modules for
    snapshot management; (bso#15818).
  * vfs_ceph_new: Add path based fallback for SMB_VFS_FCHOWN,
    SMB_VFS_FCHMOD and SMB_VFS_FNTIMES; (bso#15834).
  * Incorrect FSF address in ctdb pcp scripts; (bso#15820).
  * "samba-tool domain backup offline" hangs; (bso#15804).</changelog>
  <changelog author="nopower@suse.com" date="1748952000">- Update to 4.21.6
  * Running "gpo manage motd set" twice fails with backtrace;
    (bso#15774).
  * samba-tool gpo backup creates entity backups it can't read;
    (bso#15829).
  * gp_cert_auto_enroll_ext.py has problem unpacking GUIDs with
    prepended 0's; (bso#15839).
  * CVE-2025-0620 [SECURITY] smbd doesn't pick up group
    membership changes when re-authenticating an expired SMB
    session; (bso#15707), (bsc#1244136).
  * Deadlock between two smbd processes; (bso#15767).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727).
  * Wide link issue in samba 4.22; (bso#15841).
  * dcerpcd not able to bind to listening port; (bso#15851).
  * vfs_ceph_snapshots fails to list snapshots for entries at any
    level beyond share root; (bso#15819).
  * CTDB does not put nodes running NFS into grace on graceful
    shutdown; (bso#15858).</changelog>
  <changelog author="scabrero@suse.de" date="1751976000">- Update to 4.21.7
  * Windows security hardening locks out schannel'ed netlogon dc
    calls like netr_DsRGetDCName; (bsc#1246431); (bso#15876);
  * Trust domains are not created; (bso#15680);
  * Startup messages of rpc deamons fills /var/log/messages;
    (bso#15869);</changelog>
</package>
<package pkgid="094021a1047e1de2086be661d40fbae59551bcac8cf87f0074cc685e27f9c270" name="libldb-devel" arch="x86_64">
  <version epoch="0" ver="4.21.8+git.418.e80c9b2a88c" rel="150700.3.11.2"/>
  <changelog author="nopower@suse.com" date="1701086400">- Update to 4.19.3
  * sid_strings test broken by unix epoch &gt; 1700000000;
    (bso#15520).
  * smbd crashes if asked to return full information on close of
    a stream handle with delete on close disposition set;
    (bso#15487).
  * smbd: fix close order of base_fsp and stream_fsp in
    smb_fname_fsp_destructor(); (bso#15521).
  * Improve logging for failover scenarios; (bso#15499).
  * Files without "read attributes" NFS4 ACL permission are not
    listed in directories; (bso#15093).
  * CVE-2018-14628 [SECURITY] Deleted Object tombstones visible
    in AD LDAP to normal users; (bso#13595).
  * Kerberos TGS-REQ with User2User does not work for normal
    accounts; (bso#15492).
  * vfs_gpfs stat calls fail due to file system permissions;
    (bso#15507).
  * Samba doesn't build with Python 3.12; (bso#15513).</changelog>
  <changelog author="nopower@suse.com" date="1704801600">- Update to 4.19.4
  * net changesecretpw cannot set the machine account password if
    secrets.tdb is empty; (bso#13577).
  * For generating doc, take, if defined, env XML_CATALOG_FILES;
    (bso#15540).
  * Trivial C typo in nsswitch/winbind_nss_netbsd.c; (bso#15541).
  * vfs_linux_xfs is incorrectly named; (bso#15542).
  * systemd stumbled over copyright-message at smbd startup;
    (bso#15377).
  * Following intermediate abolute share-local symlinks is
    broken; (bso#15505).
  * ctdb RELEASE_IP causes a crash in release_ip if a connection
    to a non-public address disconnects first; (bso#15523).
  * shadow_copy2 broken when current fileset's directories are
    removed; (bso#15544).
  * smbd does not detect ctdb public ipv6 addresses for
    multichannel exclusion; (bso#15534).
  * 'force user = localunixuser' doesn't work if 'allow trusted
    domains = no' is set; (bso#15469).
  * smbget debug logging doesn't work; (bso#15525).
  * smget: username in the smburl and interactive password entry
    doesn't work; (bso#15532).
  * smbget auth function doesn't set values for password prompt
    correctly; (bso#15538).
  * Unable to copy and write files from clients to Ceph cluster
    via SMB Linux gateway with Ceph VFS module; (bso#15440).
  * Multichannel refresh network information; (bso#15547).</changelog>
  <changelog author="nopower@suse.com" date="1704888000">- Remove -x from bash shebang update-apparmor-samba-profile;
  (bsc#1218431).</changelog>
  <changelog author="nopower@suse.com" date="1708430400">- Update to 4.19.5
  * Windows 2016 fails to restore previous version of a file from
    a shadow_copy2 snapshot; (bso#13688).
  * Symlinks on AIX are broken in 4.19 (and a few version before
    that); (bso#15549).
  * Fake directory create times has no effect; (bso#12421).
  * ctime mixed up with mtime by smbd; (bso#15550).
  * samba-gpupdate --rsop fails if machine is not in a site;
    (bso#15548).
  * gpupdate: The root cert import when NDES is not available is
    broken; (bso#15557).
  * samba-gpupdate should print a useful message if cepces-submit
    can't be found; (bso#15552).
  * samba-gpupdate logging doesn't work; (bso#15558).
  * smbpasswd reset permissions only if not 0600; (bso#15555).</changelog>
  <changelog author="nopower@suse.com" date="1718884800">- Update to 4.19.7
  * ldb qsort might r/w out of bounds with an intransitive
    compare function (ldb 2.8.1 is already released);
    (bso#15569).
  * Many qsort() comparison functions are non-transitive, which
    can lead to out-of-bounds access in some circumstances (ldb
    2.8.1 is already released); (bso#15625).
  * Need to change gitlab-ci.yml tags in all branches to avoid CI
    bill; (bso#15638).
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * Anonymous smb3 signing/encryption should be allowed (similar
    to Windows Server 2022); (bso#15412).
  * Panic in dreplsrv_op_pull_source_apply_changes_trigger;
    (bso#15573).
  * winbindd, net ads join and other things don't work on an ipv6
    only host; (bso#15642).
  * Smbcacls incorrectly propagates inheritance with Inherit-Only
    flag; (bso#15636).
  * http library doesn't support  'chunked transfer encoding';
    (bso#15611).
- Update to 4.19.6
  * fd_handle_destructor() panics within an smbd_smb2_close() if
    vfs_stat_fsp() fails in fd_close(); (bso#15527).
  * samba-gpupdate: Correctly implement site support;
    (bso#15588).
  * libgpo: Segfault in python bindings; (bso#15599).
  * Packet marshalling push support missing for
    CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and
    CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580).</changelog>
  <changelog author="scabrero@suse.de" date="1722513600">- Fix a crash when joining offline and 'kerberos method' includes
  keytab; (bsc#1228732);
- Fix reading the password from STDIN or environment vars if it
  was already given in the command line; (bsc#1228732);</changelog>
  <changelog author="ddiss@suse.com" date="1725537600">- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated;
  (bso#15699); (bsc#1229684).
- Update to 4.19.8
  * Invalid client warning about command line passwords;
    (bso#15671);
  * Version string is truncated in manpages; (bso#15672);
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673);
  * cmdline_burn does not always burn secrets; (bso#15674);
  * Samba doesn't parse SDDL found in defaultSecurityDescriptor
    in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685);
  * We have added new options --vendor-name and --vendor-patch-
    revision arguments to ./configure to allow distributions and
    packagers to put their name in the Samba version string so that
    when debugging Samba the source of the binary is obvious;
    (bso#15654);
  * When claims enabled with heimdal kerberos, unable to log on to a
    Windows computer when user account need to change their own
    password; (bso#15655);
  * Fix clock skew error message and memory cache clock skew
    recovery; (bso#15676);
  * CTDB RADOS mutex helper misses namespace support; (bso#15665);
  * The images don't build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660);
  * Fix unnecessary delays in CTDB while processing requests under
    high load; (bso#15678);
  * Dynamic DNS updates with the internal DNS are not working;
    (bso#13019);
  * s4:nbt_server: does not provide unexpected handling, so winbindd
    can't use nmb requests instead cldap; (bso#15620);
  * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664);
  * "client use kerberos" and --use-kerberos is ignored for the machine
    account; (bso#15666);
  * Regression DFS not working with widelinks = true; (bso#15435);
  * ntlm_auth make logs more consistent with length check; (bso#15677);</changelog>
  <changelog author="nopower@suse.com" date="1728475200">-  Adjust spec to split out rpcd_* binaries into a separate
  sub package; (bsc#1231414).</changelog>
  <changelog author="nopower@suse.com" date="1728993600">- Update to 4.21.1
  * DH reconnect error handling can lead to stale sharemode
    entries; (bso#15624).
  * "inherit permissions = yes" triggers assert() in vfs_default
    when creating a stream; (bso#15695).
  * Samba 4.21.0 broke FreeIPA domain member integration;
    (bso#15715).
  * Missing conversion for msDS-UserTGTLifetime, msDS-
    ComputerTGTLifetime and msDS-ServiceTGTLifetime on "samba-
    tool domain auth policy modify"; (bso#15692).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * Durable handle is not granted when a previous OPEN exists
    with NoOplock; (bso#15649).
  * Durable handle is granted but reconnect fails; (bso#15651).
  * Disconnected durable handles with RH lease should not be
    purged by a new non conflicting open; (bso#15708).
  * net ads testjoin and other commands use the wrong secrets.tdb
    in a cluster; (bso#15714).
  * 4.21 using --with-system-mitkrb5 requires MIT krb5 1.16 as
    rfc 8009 etypes are used; (bso#15726).
  * VFS_OPEN_HOW_WITH_BACKUP_INTENT breaks shadow_copy2;
    (bso#15730).
  * Samba 4.20.0 DLZ module crashes BIND on startup; (bso#15643).
  * Cannot build libldb lmdb backend on a build without AD DC;
    (bso#15721).
  * Consistent log level for sighup handler; (bso#15706).
- Package ceph_new VFS module.
- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated;
  (bso#15699); (bsc#1229684).
- Update to 4.21.0
  * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when
    truncated; (bso#15699).
  * Bad variable definition for ParseTuple causing test failure
    for Smb3UnixTests.test_create_context_reparse; (bso#15702).
  * Add new vfs_ceph module (based on low level API);
    (bso#15686).
  * samba-tool can not load the default configuration file;
    (bso#15698).
  * Crash when readlinkat fails; (bso#15700).
  * Can't add/delete special keys to keytab for nfs, cifs, http
    etc; (bso#15689).
  * Compound SMB2 requests don't return
    NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses
    MacOSX clients; (bso#15696).
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673).
  * ldb_version.h is missing from ldb public library;
    (bso#15690).
  * Can not add/delete special keys to keytab for nfs, cifs, http
    etc; (bso#15689).
  * undefined reference to winbind_lookup_name_ex; (bso#15687).
  * per user veto and hide file syntax is to complex;
    (bso#15688).
- Update to 4.20.4
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673).
- Update to 4.20.3
  * Running samba-bgqd a a standalone systemd service does not
    work; (bso#15683).
  * When claims enabled with heimdal kerberos, unable to log on
    to a Windows computer when user account need to change their
    own password; (bso#15655).
  * Invalid client warning about command line passwords;
    (bso#15671).
  * Version string is truncated in manpages; (bso#15672).
  * cmdline_burn does not always burn secrets; (bso#15674).
  * Samba does not parse SDDL found in defaultSecurityDescriptor
    in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685).
  * The images don\'t build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660).
  * Fix clock skew error message and memory cache clock skew
    recovery; (bso#15676).
  * Heimdal ignores _gsskrb5_decapsulate errors in
    init_sec_context/repl_mutual; (bso#15603).
  * s4:ldap_server: does not support tls channel bindings for
    sasl binds; (bso#15621).
  * CTDB socket output queues may suffer unbounded delays under
    some special conditions; (bso#15678).
- Update samba-tool package to require python3-Markdown also in
  the Heimdal ADDC build
- Fix named crash when using samba's DLZ plugin; (bsc#1224003);
  (bso#15643);
- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]
- Update to 4.20.2
  * vfs_widelinks with DFS shares breaks case insensitivity;
    (bso#15662); (bsc#1213607).
  * Samba build is not reproducible; (bso#13213).
  * ldb qsort might r/w out of bounds with an intransitive
    compare function; (bso#15569).
  * Many qsort() comparison functions are non-transitive, which
    can lead to out-of-bounds access in some circumstances;
    (bso#15625).
  * Need to change gitlab-ci.yml tags in all branches to avoid CI
    bill; (bso#15638).
  * We have added new options --vendor-name and --vendor-patch-
    revision arguments to ./configure to allow distributions and
    packagers to put their name in the Samba version string so
    that when debugging Samba the source of the binary is
    obvious; (bso#15654).
  * CTDB RADOS mutex helper misses namespace support;
    (bso#15665).
  * Dynamic DNS updates with the internal DNS are not working;
    (bso#13019).
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * Anonymous smb3 signing/encryption should be allowed (similar
    to Windows Server 2022); (bso#15412).
  * Panic in dreplsrv_op_pull_source_apply_changes_trigger;
    (bso#15573).
  * s4:nbt_server: does not provide unexpected handling, so
    winbindd can't use nmb requests instead cldap; (bso#15620).
  * winbindd, net ads join and other things don't work on an ipv6
    only host; (bso#15642).
  * Segmentation fault when deleting files in vfs_recycle;
    (bso#15659).
  * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664).
  * "client use kerberos" and --use-kerberos is ignored for the
    machine account; (bso#15666).
  * Regression DFS not working with widelinks = true;
    (bso#15435).
  * samba-gpupdate - Invalid NtVer in netlogon_samlogon_response;
    (bso#15633).
  * idmap_ad creates an incorrect local krb5.conf in case of
    trusted domain lookups; (bso#15653).
  * The images don't build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660).
- Fix non deterministic builds; (bsc#1225754); (bso#13213);
- Update to 4.20.1
  * dns update debug message is too noisy; (bso#15630);
  * Do not fail PAC validation for RFC8009 checksums types; (bso#15635);
  * Improve performance of lookup_groupmem() in idmap_ad; (bso#15605);
  * Smbcacls incorrectly propagates inheritance with Inherit-Only flag; (bso#15636);
  * http library doesn't support 'chunked transfer encoding'; (bso#15611);
  * Provide a systemd service file for the background queue daemon; (bso#15600);
- Update to 4.20.0
  New features:
  * samba-tool user getpassword / syncpasswords ;rounds= change
  * Group Managed service account client-side features
  * New Windows Search Protocol Client
  * Allow 'smbcacls' to save/restore DACLs to file
  * Samba-tool extensions for AD Claims, Authentication Policies and Silos
  * AD DC support for Authentication Silos and Authentication Policies
  * Conditional ACEs and Resource Attribute ACEs
  * Service Witness Protocol [MS-SWN]
  Removed features:
  * Get locally logged on users from utmp
  Fixed bugs:
  * Avoid null-dereference with bad claims; (bso#15606);
  * ndr_pull_security_ace can leave resource attribute ACE coda
    claim struct undefined; (bso#15613);
  * fd_handle_destructor() panics within an smbd_smb2_close() if
    vfs_stat_fsp() fails in fd_close(); (bso#15527);
  * set_nt_acl sometimes fails with NT_STATUS_INVALID_PARAMETER -
    openat() EACCES; (bso#15583);
  * libgpo: Segfault in python bindings; (bso#15599);
  * Samba AD is missing some authentication policy tests;
    (bso#15607);
  * samba-gpupdate: Correctly implement site support; (bso#15588);
  * Remove unsupported "Final" keyword missing from Python 3.6;
    (bso#15575);
  * Additional witness backports for 4.20.0; (bso#15577);
  * Error output with wspsearch; (bso#15579);
  * Packet marshalling push support missing for
    CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and
    CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580);
  * Performance regression for NDR parsing of security
    descriptors; (bso#15574);
  * Build and install man page for wspsearch client utility;
    (bso#15565);
- Update to 4.19.9
  * libldb: performance issue with indexes (ldb 2.8.2 is already
    released); (bso#15590).
  * DH reconnect error handling can lead to stale sharemode
    entries; (bso#15624).
  * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when
    truncated; (bso#15699).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * Compound SMB2 requests don't return
    NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses
    MacOSX clients; (bso#15696).
  * Crash when readlinkat fails; (bso#15700).</changelog>
  <changelog author="nopower@suse.com" date="1729080000">-  Adjust spec to split out rpcd_* binaries into a separate
  sub package; (bsc#1231414).</changelog>
  <changelog author="nopower@suse.com" date="1730376000">- Add placeholder changelog for sle15-sp7; (jsc#PED-11210).</changelog>
  <changelog author="nopower@suse.com" date="1732536000">- Update to 4.21.2
  * smbd fails to correctly check sharemode against OVERWRITE
    dispositions; (bso#15732).
  * Panic in close_directory; (bso#15754).
  * winexe no longer works with samba 4.21; (bso#15752).
  * protocol error - Unclear debug message "pad length mismatch"
    for invalid bind packet; (bso#14356).
  * NetrGetLogonCapabilities QueryLevel 2 needs to be
    implemented; (bso#15425).
  * gss_accept_sec_context() from Heimdal does not imply
    GSS_C_MUTUAL_FLAG with GSS_C_DCE_STYLE; (bso#15740).
  * winbindd should call process_set_title() for locator child;
    (bso#15749).
  * Update CTDB to track all TCP connections to public IP
    addresses; (bso#15320).</changelog>
  <changelog author="nopower@suse.com" date="1733486400">- Update shipped /etc/samba/smb.conf to point to smb.conf
  man page;(bsc#1233880).</changelog>
  <changelog author="nopower@suse.com" date="1736251200">- Update to 4.21.3
  * More possible replication loops against Azure AD;
    (bso#15701).
  * Compound rename from Mac clients can fail with
    NT_STATUS_INTERNAL_ERROR if the file has a lease;
    (bso#15697).
  * vfs crossrename seems not work correctly; (bso#15724).
  * After 'machine password timeout' /etc/krb5.keytab is not
    updated; (bso#6750).
  * Memory leak wbcCtxLookupSid; (bso#15771).
  * Fix heap-user-after-free with association groups;
    (bso#15765).
  * Segfault in vfs_btrfs; (bso#15758).
  * Avoid event failure race when disabling an event script;
    (bso#15755).</changelog>
  <changelog author="nopower@suse.com" date="1739966400">- Update to 4.21.4
  * Increasing slowness of sharesec performance with high number
    of registry shares; (bso#15780).
  * winbindd shows memleak in kerberos_decode_pac; (bso#15782).
  * Creation of GPOs applicable to more than one group is
    impossible with Samba 4.20.0 and later; (bso#15738).
  * Replace `crypt` module in
    python/samba/netcmd/user/readpasswords/common.py;
    (bso#15756).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * Spotlight search results don't show file size and creation
    date; (bso#15796).
  * General improvements for vfs_ceph_new module; (bso#15703).
  * net offlinejoin not working correctly; (bso#15777).
  * net ads create/join/winbind producing unix dysfunctional
    keytabs; (bso#15759).
  * Windows Explorer crashes on S-1-22-* Unix-SIDs when accessing
    security tab; (bso#14213).
  * The values from hresult_errstr_const and hresult_errstr are
    reversed in 4.20 and 4.21; (bso#15769).
  * Kerberos referral tickets are generated for principals in our
    domain if we have a trust to a top level domain; (bso#15778).
  * NETLOGON_NTLMV2_ENABLED is missing in the SamLogon*
    user_flags field; (bso#15783).
  * Regression: stack-use-after-return in crypt_as_best_we_can();
    (bso#15784).
  * libreplace:readline: gcc 15 complains about incompatible
    pointer types; (bso#15788).</changelog>
  <changelog author="nopower@suse.com" date="1743595200">- Update to 4.21.5
  * ldb index cache is too small on known large transactions
    (schemaupgrade, provision); (bso#15795).
  * Enable support for cephfs case insensitive behavior;
    (bso#15822).
  * Subnet based interfaces definition not listening on all
    covered IP addresses; (bso#15823).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727); (bsc#1238063).
  * Remove of file or directory not possible with vfs_acl_tdb;
    (bso#15791).
  * Unable to connect to CephFS subvolume shares with
    vfs_shadow_copy2; (bso#15797).
  * Add async io API from libcephfs to ceph_new VFS module;
    (bso#15810).
  * vfs_ceph_new module does not work with other modules for
    snapshot management; (bso#15818).
  * vfs_ceph_new: Add path based fallback for SMB_VFS_FCHOWN,
    SMB_VFS_FCHMOD and SMB_VFS_FNTIMES; (bso#15834).
  * Incorrect FSF address in ctdb pcp scripts; (bso#15820).
  * "samba-tool domain backup offline" hangs; (bso#15804).</changelog>
  <changelog author="nopower@suse.com" date="1748952000">- Update to 4.21.6
  * Running "gpo manage motd set" twice fails with backtrace;
    (bso#15774).
  * samba-tool gpo backup creates entity backups it can't read;
    (bso#15829).
  * gp_cert_auto_enroll_ext.py has problem unpacking GUIDs with
    prepended 0's; (bso#15839).
  * CVE-2025-0620 [SECURITY] smbd doesn't pick up group
    membership changes when re-authenticating an expired SMB
    session; (bso#15707), (bsc#1244136).
  * Deadlock between two smbd processes; (bso#15767).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727).
  * Wide link issue in samba 4.22; (bso#15841).
  * dcerpcd not able to bind to listening port; (bso#15851).
  * vfs_ceph_snapshots fails to list snapshots for entries at any
    level beyond share root; (bso#15819).
  * CTDB does not put nodes running NFS into grace on graceful
    shutdown; (bso#15858).</changelog>
  <changelog author="scabrero@suse.de" date="1751976000">- Update to 4.21.7
  * Windows security hardening locks out schannel'ed netlogon dc
    calls like netr_DsRGetDCName; (bsc#1246431); (bso#15876);
  * Trust domains are not created; (bso#15680);
  * Startup messages of rpc deamons fills /var/log/messages;
    (bso#15869);</changelog>
  <changelog author="nopower@suse.com" date="1757419200">- - Update to 4.21.8
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * getpwuid does not shift to new DC when current DC is down;
    (bso#15844).
  * Windows security hardening locks out schannel'ed netlogon dc
    calls like netr_DsRGetDCName; (bso#15876).
  * kinit command is failing with Missing cache Error;
    (bso#15840).
  * Figuring out the DC name from IP address fails and breaks
    fork_domain_child(); (bso#15891).
  * Delayed leader broadcast can block ctdb forever; (bso#15892).
  * 'net ads group' failed to list domain groups; (bso#15900).
  * Apparently there is a conflict between shadow_copy2 module
    and virusfilter (action quarantine); (bso#15663).
  * Fix handling of empty GPO link; (bso#15877).
  * SMB ACL inheritance doesn't work for files created;
    (bso#15880).</changelog>
  <changelog author="nopower@suse.com" date="1758628800">- CVE-2025-9640: fix vfs_streams_xattr uninitialized memory write;
  (bsc#1251279);(bso#15885).
- CVE-2025-10230: fix command Injection in WINS Server Hook Script;
  (bsc#1251280);(bso#15903).</changelog>
</package>
<package pkgid="48e89223c2f0a4096f6cd35e947dfee8196bd4bfea474d8c877e54e96a884d98" name="libldb2-32bit" arch="x86_64">
  <version epoch="0" ver="4.21.10+git.424.0b233794b52" rel="150700.3.14.10"/>
  <changelog author="nopower@suse.com" date="1704801600">- Update to 4.19.4
  * net changesecretpw cannot set the machine account password if
    secrets.tdb is empty; (bso#13577).
  * For generating doc, take, if defined, env XML_CATALOG_FILES;
    (bso#15540).
  * Trivial C typo in nsswitch/winbind_nss_netbsd.c; (bso#15541).
  * vfs_linux_xfs is incorrectly named; (bso#15542).
  * systemd stumbled over copyright-message at smbd startup;
    (bso#15377).
  * Following intermediate abolute share-local symlinks is
    broken; (bso#15505).
  * ctdb RELEASE_IP causes a crash in release_ip if a connection
    to a non-public address disconnects first; (bso#15523).
  * shadow_copy2 broken when current fileset's directories are
    removed; (bso#15544).
  * smbd does not detect ctdb public ipv6 addresses for
    multichannel exclusion; (bso#15534).
  * 'force user = localunixuser' doesn't work if 'allow trusted
    domains = no' is set; (bso#15469).
  * smbget debug logging doesn't work; (bso#15525).
  * smget: username in the smburl and interactive password entry
    doesn't work; (bso#15532).
  * smbget auth function doesn't set values for password prompt
    correctly; (bso#15538).
  * Unable to copy and write files from clients to Ceph cluster
    via SMB Linux gateway with Ceph VFS module; (bso#15440).
  * Multichannel refresh network information; (bso#15547).</changelog>
  <changelog author="nopower@suse.com" date="1704888000">- Remove -x from bash shebang update-apparmor-samba-profile;
  (bsc#1218431).</changelog>
  <changelog author="nopower@suse.com" date="1708430400">- Update to 4.19.5
  * Windows 2016 fails to restore previous version of a file from
    a shadow_copy2 snapshot; (bso#13688).
  * Symlinks on AIX are broken in 4.19 (and a few version before
    that); (bso#15549).
  * Fake directory create times has no effect; (bso#12421).
  * ctime mixed up with mtime by smbd; (bso#15550).
  * samba-gpupdate --rsop fails if machine is not in a site;
    (bso#15548).
  * gpupdate: The root cert import when NDES is not available is
    broken; (bso#15557).
  * samba-gpupdate should print a useful message if cepces-submit
    can't be found; (bso#15552).
  * samba-gpupdate logging doesn't work; (bso#15558).
  * smbpasswd reset permissions only if not 0600; (bso#15555).</changelog>
  <changelog author="nopower@suse.com" date="1718884800">- Update to 4.19.7
  * ldb qsort might r/w out of bounds with an intransitive
    compare function (ldb 2.8.1 is already released);
    (bso#15569).
  * Many qsort() comparison functions are non-transitive, which
    can lead to out-of-bounds access in some circumstances (ldb
    2.8.1 is already released); (bso#15625).
  * Need to change gitlab-ci.yml tags in all branches to avoid CI
    bill; (bso#15638).
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * Anonymous smb3 signing/encryption should be allowed (similar
    to Windows Server 2022); (bso#15412).
  * Panic in dreplsrv_op_pull_source_apply_changes_trigger;
    (bso#15573).
  * winbindd, net ads join and other things don't work on an ipv6
    only host; (bso#15642).
  * Smbcacls incorrectly propagates inheritance with Inherit-Only
    flag; (bso#15636).
  * http library doesn't support  'chunked transfer encoding';
    (bso#15611).
- Update to 4.19.6
  * fd_handle_destructor() panics within an smbd_smb2_close() if
    vfs_stat_fsp() fails in fd_close(); (bso#15527).
  * samba-gpupdate: Correctly implement site support;
    (bso#15588).
  * libgpo: Segfault in python bindings; (bso#15599).
  * Packet marshalling push support missing for
    CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and
    CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580).</changelog>
  <changelog author="scabrero@suse.de" date="1722513600">- Fix a crash when joining offline and 'kerberos method' includes
  keytab; (bsc#1228732);
- Fix reading the password from STDIN or environment vars if it
  was already given in the command line; (bsc#1228732);</changelog>
  <changelog author="ddiss@suse.com" date="1725537600">- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated;
  (bso#15699); (bsc#1229684).
- Update to 4.19.8
  * Invalid client warning about command line passwords;
    (bso#15671);
  * Version string is truncated in manpages; (bso#15672);
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673);
  * cmdline_burn does not always burn secrets; (bso#15674);
  * Samba doesn't parse SDDL found in defaultSecurityDescriptor
    in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685);
  * We have added new options --vendor-name and --vendor-patch-
    revision arguments to ./configure to allow distributions and
    packagers to put their name in the Samba version string so that
    when debugging Samba the source of the binary is obvious;
    (bso#15654);
  * When claims enabled with heimdal kerberos, unable to log on to a
    Windows computer when user account need to change their own
    password; (bso#15655);
  * Fix clock skew error message and memory cache clock skew
    recovery; (bso#15676);
  * CTDB RADOS mutex helper misses namespace support; (bso#15665);
  * The images don't build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660);
  * Fix unnecessary delays in CTDB while processing requests under
    high load; (bso#15678);
  * Dynamic DNS updates with the internal DNS are not working;
    (bso#13019);
  * s4:nbt_server: does not provide unexpected handling, so winbindd
    can't use nmb requests instead cldap; (bso#15620);
  * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664);
  * "client use kerberos" and --use-kerberos is ignored for the machine
    account; (bso#15666);
  * Regression DFS not working with widelinks = true; (bso#15435);
  * ntlm_auth make logs more consistent with length check; (bso#15677);</changelog>
  <changelog author="nopower@suse.com" date="1728475200">-  Adjust spec to split out rpcd_* binaries into a separate
  sub package; (bsc#1231414).</changelog>
  <changelog author="nopower@suse.com" date="1728993600">- Update to 4.21.1
  * DH reconnect error handling can lead to stale sharemode
    entries; (bso#15624).
  * "inherit permissions = yes" triggers assert() in vfs_default
    when creating a stream; (bso#15695).
  * Samba 4.21.0 broke FreeIPA domain member integration;
    (bso#15715).
  * Missing conversion for msDS-UserTGTLifetime, msDS-
    ComputerTGTLifetime and msDS-ServiceTGTLifetime on "samba-
    tool domain auth policy modify"; (bso#15692).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * Durable handle is not granted when a previous OPEN exists
    with NoOplock; (bso#15649).
  * Durable handle is granted but reconnect fails; (bso#15651).
  * Disconnected durable handles with RH lease should not be
    purged by a new non conflicting open; (bso#15708).
  * net ads testjoin and other commands use the wrong secrets.tdb
    in a cluster; (bso#15714).
  * 4.21 using --with-system-mitkrb5 requires MIT krb5 1.16 as
    rfc 8009 etypes are used; (bso#15726).
  * VFS_OPEN_HOW_WITH_BACKUP_INTENT breaks shadow_copy2;
    (bso#15730).
  * Samba 4.20.0 DLZ module crashes BIND on startup; (bso#15643).
  * Cannot build libldb lmdb backend on a build without AD DC;
    (bso#15721).
  * Consistent log level for sighup handler; (bso#15706).
- Package ceph_new VFS module.
- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated;
  (bso#15699); (bsc#1229684).
- Update to 4.21.0
  * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when
    truncated; (bso#15699).
  * Bad variable definition for ParseTuple causing test failure
    for Smb3UnixTests.test_create_context_reparse; (bso#15702).
  * Add new vfs_ceph module (based on low level API);
    (bso#15686).
  * samba-tool can not load the default configuration file;
    (bso#15698).
  * Crash when readlinkat fails; (bso#15700).
  * Can't add/delete special keys to keytab for nfs, cifs, http
    etc; (bso#15689).
  * Compound SMB2 requests don't return
    NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses
    MacOSX clients; (bso#15696).
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673).
  * ldb_version.h is missing from ldb public library;
    (bso#15690).
  * Can not add/delete special keys to keytab for nfs, cifs, http
    etc; (bso#15689).
  * undefined reference to winbind_lookup_name_ex; (bso#15687).
  * per user veto and hide file syntax is to complex;
    (bso#15688).
- Update to 4.20.4
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673).
- Update to 4.20.3
  * Running samba-bgqd a a standalone systemd service does not
    work; (bso#15683).
  * When claims enabled with heimdal kerberos, unable to log on
    to a Windows computer when user account need to change their
    own password; (bso#15655).
  * Invalid client warning about command line passwords;
    (bso#15671).
  * Version string is truncated in manpages; (bso#15672).
  * cmdline_burn does not always burn secrets; (bso#15674).
  * Samba does not parse SDDL found in defaultSecurityDescriptor
    in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685).
  * The images don\'t build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660).
  * Fix clock skew error message and memory cache clock skew
    recovery; (bso#15676).
  * Heimdal ignores _gsskrb5_decapsulate errors in
    init_sec_context/repl_mutual; (bso#15603).
  * s4:ldap_server: does not support tls channel bindings for
    sasl binds; (bso#15621).
  * CTDB socket output queues may suffer unbounded delays under
    some special conditions; (bso#15678).
- Update samba-tool package to require python3-Markdown also in
  the Heimdal ADDC build
- Fix named crash when using samba's DLZ plugin; (bsc#1224003);
  (bso#15643);
- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]
- Update to 4.20.2
  * vfs_widelinks with DFS shares breaks case insensitivity;
    (bso#15662); (bsc#1213607).
  * Samba build is not reproducible; (bso#13213).
  * ldb qsort might r/w out of bounds with an intransitive
    compare function; (bso#15569).
  * Many qsort() comparison functions are non-transitive, which
    can lead to out-of-bounds access in some circumstances;
    (bso#15625).
  * Need to change gitlab-ci.yml tags in all branches to avoid CI
    bill; (bso#15638).
  * We have added new options --vendor-name and --vendor-patch-
    revision arguments to ./configure to allow distributions and
    packagers to put their name in the Samba version string so
    that when debugging Samba the source of the binary is
    obvious; (bso#15654).
  * CTDB RADOS mutex helper misses namespace support;
    (bso#15665).
  * Dynamic DNS updates with the internal DNS are not working;
    (bso#13019).
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * Anonymous smb3 signing/encryption should be allowed (similar
    to Windows Server 2022); (bso#15412).
  * Panic in dreplsrv_op_pull_source_apply_changes_trigger;
    (bso#15573).
  * s4:nbt_server: does not provide unexpected handling, so
    winbindd can't use nmb requests instead cldap; (bso#15620).
  * winbindd, net ads join and other things don't work on an ipv6
    only host; (bso#15642).
  * Segmentation fault when deleting files in vfs_recycle;
    (bso#15659).
  * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664).
  * "client use kerberos" and --use-kerberos is ignored for the
    machine account; (bso#15666).
  * Regression DFS not working with widelinks = true;
    (bso#15435).
  * samba-gpupdate - Invalid NtVer in netlogon_samlogon_response;
    (bso#15633).
  * idmap_ad creates an incorrect local krb5.conf in case of
    trusted domain lookups; (bso#15653).
  * The images don't build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660).
- Fix non deterministic builds; (bsc#1225754); (bso#13213);
- Update to 4.20.1
  * dns update debug message is too noisy; (bso#15630);
  * Do not fail PAC validation for RFC8009 checksums types; (bso#15635);
  * Improve performance of lookup_groupmem() in idmap_ad; (bso#15605);
  * Smbcacls incorrectly propagates inheritance with Inherit-Only flag; (bso#15636);
  * http library doesn't support 'chunked transfer encoding'; (bso#15611);
  * Provide a systemd service file for the background queue daemon; (bso#15600);
- Update to 4.20.0
  New features:
  * samba-tool user getpassword / syncpasswords ;rounds= change
  * Group Managed service account client-side features
  * New Windows Search Protocol Client
  * Allow 'smbcacls' to save/restore DACLs to file
  * Samba-tool extensions for AD Claims, Authentication Policies and Silos
  * AD DC support for Authentication Silos and Authentication Policies
  * Conditional ACEs and Resource Attribute ACEs
  * Service Witness Protocol [MS-SWN]
  Removed features:
  * Get locally logged on users from utmp
  Fixed bugs:
  * Avoid null-dereference with bad claims; (bso#15606);
  * ndr_pull_security_ace can leave resource attribute ACE coda
    claim struct undefined; (bso#15613);
  * fd_handle_destructor() panics within an smbd_smb2_close() if
    vfs_stat_fsp() fails in fd_close(); (bso#15527);
  * set_nt_acl sometimes fails with NT_STATUS_INVALID_PARAMETER -
    openat() EACCES; (bso#15583);
  * libgpo: Segfault in python bindings; (bso#15599);
  * Samba AD is missing some authentication policy tests;
    (bso#15607);
  * samba-gpupdate: Correctly implement site support; (bso#15588);
  * Remove unsupported "Final" keyword missing from Python 3.6;
    (bso#15575);
  * Additional witness backports for 4.20.0; (bso#15577);
  * Error output with wspsearch; (bso#15579);
  * Packet marshalling push support missing for
    CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and
    CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580);
  * Performance regression for NDR parsing of security
    descriptors; (bso#15574);
  * Build and install man page for wspsearch client utility;
    (bso#15565);
- Update to 4.19.9
  * libldb: performance issue with indexes (ldb 2.8.2 is already
    released); (bso#15590).
  * DH reconnect error handling can lead to stale sharemode
    entries; (bso#15624).
  * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when
    truncated; (bso#15699).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * Compound SMB2 requests don't return
    NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses
    MacOSX clients; (bso#15696).
  * Crash when readlinkat fails; (bso#15700).</changelog>
  <changelog author="nopower@suse.com" date="1729080000">-  Adjust spec to split out rpcd_* binaries into a separate
  sub package; (bsc#1231414).</changelog>
  <changelog author="nopower@suse.com" date="1730376000">- Add placeholder changelog for sle15-sp7; (jsc#PED-11210).</changelog>
  <changelog author="nopower@suse.com" date="1732536000">- Update to 4.21.2
  * smbd fails to correctly check sharemode against OVERWRITE
    dispositions; (bso#15732).
  * Panic in close_directory; (bso#15754).
  * winexe no longer works with samba 4.21; (bso#15752).
  * protocol error - Unclear debug message "pad length mismatch"
    for invalid bind packet; (bso#14356).
  * NetrGetLogonCapabilities QueryLevel 2 needs to be
    implemented; (bso#15425).
  * gss_accept_sec_context() from Heimdal does not imply
    GSS_C_MUTUAL_FLAG with GSS_C_DCE_STYLE; (bso#15740).
  * winbindd should call process_set_title() for locator child;
    (bso#15749).
  * Update CTDB to track all TCP connections to public IP
    addresses; (bso#15320).</changelog>
  <changelog author="nopower@suse.com" date="1733486400">- Update shipped /etc/samba/smb.conf to point to smb.conf
  man page;(bsc#1233880).</changelog>
  <changelog author="nopower@suse.com" date="1736251200">- Update to 4.21.3
  * More possible replication loops against Azure AD;
    (bso#15701).
  * Compound rename from Mac clients can fail with
    NT_STATUS_INTERNAL_ERROR if the file has a lease;
    (bso#15697).
  * vfs crossrename seems not work correctly; (bso#15724).
  * After 'machine password timeout' /etc/krb5.keytab is not
    updated; (bso#6750).
  * Memory leak wbcCtxLookupSid; (bso#15771).
  * Fix heap-user-after-free with association groups;
    (bso#15765).
  * Segfault in vfs_btrfs; (bso#15758).
  * Avoid event failure race when disabling an event script;
    (bso#15755).</changelog>
  <changelog author="nopower@suse.com" date="1739966400">- Update to 4.21.4
  * Increasing slowness of sharesec performance with high number
    of registry shares; (bso#15780).
  * winbindd shows memleak in kerberos_decode_pac; (bso#15782).
  * Creation of GPOs applicable to more than one group is
    impossible with Samba 4.20.0 and later; (bso#15738).
  * Replace `crypt` module in
    python/samba/netcmd/user/readpasswords/common.py;
    (bso#15756).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * Spotlight search results don't show file size and creation
    date; (bso#15796).
  * General improvements for vfs_ceph_new module; (bso#15703).
  * net offlinejoin not working correctly; (bso#15777).
  * net ads create/join/winbind producing unix dysfunctional
    keytabs; (bso#15759).
  * Windows Explorer crashes on S-1-22-* Unix-SIDs when accessing
    security tab; (bso#14213).
  * The values from hresult_errstr_const and hresult_errstr are
    reversed in 4.20 and 4.21; (bso#15769).
  * Kerberos referral tickets are generated for principals in our
    domain if we have a trust to a top level domain; (bso#15778).
  * NETLOGON_NTLMV2_ENABLED is missing in the SamLogon*
    user_flags field; (bso#15783).
  * Regression: stack-use-after-return in crypt_as_best_we_can();
    (bso#15784).
  * libreplace:readline: gcc 15 complains about incompatible
    pointer types; (bso#15788).</changelog>
  <changelog author="nopower@suse.com" date="1743595200">- Update to 4.21.5
  * ldb index cache is too small on known large transactions
    (schemaupgrade, provision); (bso#15795).
  * Enable support for cephfs case insensitive behavior;
    (bso#15822).
  * Subnet based interfaces definition not listening on all
    covered IP addresses; (bso#15823).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727); (bsc#1238063).
  * Remove of file or directory not possible with vfs_acl_tdb;
    (bso#15791).
  * Unable to connect to CephFS subvolume shares with
    vfs_shadow_copy2; (bso#15797).
  * Add async io API from libcephfs to ceph_new VFS module;
    (bso#15810).
  * vfs_ceph_new module does not work with other modules for
    snapshot management; (bso#15818).
  * vfs_ceph_new: Add path based fallback for SMB_VFS_FCHOWN,
    SMB_VFS_FCHMOD and SMB_VFS_FNTIMES; (bso#15834).
  * Incorrect FSF address in ctdb pcp scripts; (bso#15820).
  * "samba-tool domain backup offline" hangs; (bso#15804).</changelog>
  <changelog author="nopower@suse.com" date="1748952000">- Update to 4.21.6
  * Running "gpo manage motd set" twice fails with backtrace;
    (bso#15774).
  * samba-tool gpo backup creates entity backups it can't read;
    (bso#15829).
  * gp_cert_auto_enroll_ext.py has problem unpacking GUIDs with
    prepended 0's; (bso#15839).
  * CVE-2025-0620 [SECURITY] smbd doesn't pick up group
    membership changes when re-authenticating an expired SMB
    session; (bso#15707), (bsc#1244136).
  * Deadlock between two smbd processes; (bso#15767).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727).
  * Wide link issue in samba 4.22; (bso#15841).
  * dcerpcd not able to bind to listening port; (bso#15851).
  * vfs_ceph_snapshots fails to list snapshots for entries at any
    level beyond share root; (bso#15819).
  * CTDB does not put nodes running NFS into grace on graceful
    shutdown; (bso#15858).</changelog>
  <changelog author="scabrero@suse.de" date="1751976000">- Update to 4.21.7
  * Windows security hardening locks out schannel'ed netlogon dc
    calls like netr_DsRGetDCName; (bsc#1246431); (bso#15876);
  * Trust domains are not created; (bso#15680);
  * Startup messages of rpc deamons fills /var/log/messages;
    (bso#15869);</changelog>
  <changelog author="nopower@suse.com" date="1757419200">- - Update to 4.21.8
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * getpwuid does not shift to new DC when current DC is down;
    (bso#15844).
  * Windows security hardening locks out schannel'ed netlogon dc
    calls like netr_DsRGetDCName; (bso#15876).
  * kinit command is failing with Missing cache Error;
    (bso#15840).
  * Figuring out the DC name from IP address fails and breaks
    fork_domain_child(); (bso#15891).
  * Delayed leader broadcast can block ctdb forever; (bso#15892).
  * 'net ads group' failed to list domain groups; (bso#15900).
  * Apparently there is a conflict between shadow_copy2 module
    and virusfilter (action quarantine); (bso#15663).
  * Fix handling of empty GPO link; (bso#15877).
  * SMB ACL inheritance doesn't work for files created;
    (bso#15880).</changelog>
  <changelog author="nopower@suse.com" date="1758628800">- CVE-2025-9640: fix vfs_streams_xattr uninitialized memory write;
  (bsc#1251279);(bso#15885).
- CVE-2025-10230: fix command Injection in WINS Server Hook Script;
  (bsc#1251280);(bso#15903).</changelog>
  <changelog author="nopower@suse.com" date="1763553600">- Update to 4.21.10
  * Crash in ctdbd on failed updateip; (bso#15935).
  * samba-4.21 fails to join AD when multiple DCs are returned;
    (bso#15905).
  * vfs_ceph_new should not use ceph_ll_nonblocking_readv_writev
    for fsync_send; (bso#15919).
  * CTDB_SOCKET can be used even when CTDB_TEST_MODE is not set;
    (bso#15921).
- Update to 4.21.9
  * CVE-2025-10230; (bso#15903); (bsc#1251279).
  * CVE-2025-9640; (bso#15885); (bsc#1251280).</changelog>
</package>
<package pkgid="ef7623ee3d301e201f495fb455b44b4b77217b80abfcce4bde45896eaf37fe9b" name="libldb2-32bit" arch="x86_64">
  <version epoch="0" ver="4.21.10+git.449.dcced69e1b5" rel="150700.3.19.1"/>
  <changelog author="nopower@suse.com" date="1718884800">- Update to 4.19.7
  * ldb qsort might r/w out of bounds with an intransitive
    compare function (ldb 2.8.1 is already released);
    (bso#15569).
  * Many qsort() comparison functions are non-transitive, which
    can lead to out-of-bounds access in some circumstances (ldb
    2.8.1 is already released); (bso#15625).
  * Need to change gitlab-ci.yml tags in all branches to avoid CI
    bill; (bso#15638).
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * Anonymous smb3 signing/encryption should be allowed (similar
    to Windows Server 2022); (bso#15412).
  * Panic in dreplsrv_op_pull_source_apply_changes_trigger;
    (bso#15573).
  * winbindd, net ads join and other things don't work on an ipv6
    only host; (bso#15642).
  * Smbcacls incorrectly propagates inheritance with Inherit-Only
    flag; (bso#15636).
  * http library doesn't support  'chunked transfer encoding';
    (bso#15611).
- Update to 4.19.6
  * fd_handle_destructor() panics within an smbd_smb2_close() if
    vfs_stat_fsp() fails in fd_close(); (bso#15527).
  * samba-gpupdate: Correctly implement site support;
    (bso#15588).
  * libgpo: Segfault in python bindings; (bso#15599).
  * Packet marshalling push support missing for
    CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and
    CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580).</changelog>
  <changelog author="scabrero@suse.de" date="1722513600">- Fix a crash when joining offline and 'kerberos method' includes
  keytab; (bsc#1228732);
- Fix reading the password from STDIN or environment vars if it
  was already given in the command line; (bsc#1228732);</changelog>
  <changelog author="ddiss@suse.com" date="1725537600">- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated;
  (bso#15699); (bsc#1229684).
- Update to 4.19.8
  * Invalid client warning about command line passwords;
    (bso#15671);
  * Version string is truncated in manpages; (bso#15672);
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673);
  * cmdline_burn does not always burn secrets; (bso#15674);
  * Samba doesn't parse SDDL found in defaultSecurityDescriptor
    in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685);
  * We have added new options --vendor-name and --vendor-patch-
    revision arguments to ./configure to allow distributions and
    packagers to put their name in the Samba version string so that
    when debugging Samba the source of the binary is obvious;
    (bso#15654);
  * When claims enabled with heimdal kerberos, unable to log on to a
    Windows computer when user account need to change their own
    password; (bso#15655);
  * Fix clock skew error message and memory cache clock skew
    recovery; (bso#15676);
  * CTDB RADOS mutex helper misses namespace support; (bso#15665);
  * The images don't build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660);
  * Fix unnecessary delays in CTDB while processing requests under
    high load; (bso#15678);
  * Dynamic DNS updates with the internal DNS are not working;
    (bso#13019);
  * s4:nbt_server: does not provide unexpected handling, so winbindd
    can't use nmb requests instead cldap; (bso#15620);
  * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664);
  * "client use kerberos" and --use-kerberos is ignored for the machine
    account; (bso#15666);
  * Regression DFS not working with widelinks = true; (bso#15435);
  * ntlm_auth make logs more consistent with length check; (bso#15677);</changelog>
  <changelog author="nopower@suse.com" date="1728475200">-  Adjust spec to split out rpcd_* binaries into a separate
  sub package; (bsc#1231414).</changelog>
  <changelog author="nopower@suse.com" date="1728993600">- Update to 4.21.1
  * DH reconnect error handling can lead to stale sharemode
    entries; (bso#15624).
  * "inherit permissions = yes" triggers assert() in vfs_default
    when creating a stream; (bso#15695).
  * Samba 4.21.0 broke FreeIPA domain member integration;
    (bso#15715).
  * Missing conversion for msDS-UserTGTLifetime, msDS-
    ComputerTGTLifetime and msDS-ServiceTGTLifetime on "samba-
    tool domain auth policy modify"; (bso#15692).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * Durable handle is not granted when a previous OPEN exists
    with NoOplock; (bso#15649).
  * Durable handle is granted but reconnect fails; (bso#15651).
  * Disconnected durable handles with RH lease should not be
    purged by a new non conflicting open; (bso#15708).
  * net ads testjoin and other commands use the wrong secrets.tdb
    in a cluster; (bso#15714).
  * 4.21 using --with-system-mitkrb5 requires MIT krb5 1.16 as
    rfc 8009 etypes are used; (bso#15726).
  * VFS_OPEN_HOW_WITH_BACKUP_INTENT breaks shadow_copy2;
    (bso#15730).
  * Samba 4.20.0 DLZ module crashes BIND on startup; (bso#15643).
  * Cannot build libldb lmdb backend on a build without AD DC;
    (bso#15721).
  * Consistent log level for sighup handler; (bso#15706).
- Package ceph_new VFS module.
- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated;
  (bso#15699); (bsc#1229684).
- Update to 4.21.0
  * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when
    truncated; (bso#15699).
  * Bad variable definition for ParseTuple causing test failure
    for Smb3UnixTests.test_create_context_reparse; (bso#15702).
  * Add new vfs_ceph module (based on low level API);
    (bso#15686).
  * samba-tool can not load the default configuration file;
    (bso#15698).
  * Crash when readlinkat fails; (bso#15700).
  * Can't add/delete special keys to keytab for nfs, cifs, http
    etc; (bso#15689).
  * Compound SMB2 requests don't return
    NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses
    MacOSX clients; (bso#15696).
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673).
  * ldb_version.h is missing from ldb public library;
    (bso#15690).
  * Can not add/delete special keys to keytab for nfs, cifs, http
    etc; (bso#15689).
  * undefined reference to winbind_lookup_name_ex; (bso#15687).
  * per user veto and hide file syntax is to complex;
    (bso#15688).
- Update to 4.20.4
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673).
- Update to 4.20.3
  * Running samba-bgqd a a standalone systemd service does not
    work; (bso#15683).
  * When claims enabled with heimdal kerberos, unable to log on
    to a Windows computer when user account need to change their
    own password; (bso#15655).
  * Invalid client warning about command line passwords;
    (bso#15671).
  * Version string is truncated in manpages; (bso#15672).
  * cmdline_burn does not always burn secrets; (bso#15674).
  * Samba does not parse SDDL found in defaultSecurityDescriptor
    in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685).
  * The images don\'t build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660).
  * Fix clock skew error message and memory cache clock skew
    recovery; (bso#15676).
  * Heimdal ignores _gsskrb5_decapsulate errors in
    init_sec_context/repl_mutual; (bso#15603).
  * s4:ldap_server: does not support tls channel bindings for
    sasl binds; (bso#15621).
  * CTDB socket output queues may suffer unbounded delays under
    some special conditions; (bso#15678).
- Update samba-tool package to require python3-Markdown also in
  the Heimdal ADDC build
- Fix named crash when using samba's DLZ plugin; (bsc#1224003);
  (bso#15643);
- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]
- Update to 4.20.2
  * vfs_widelinks with DFS shares breaks case insensitivity;
    (bso#15662); (bsc#1213607).
  * Samba build is not reproducible; (bso#13213).
  * ldb qsort might r/w out of bounds with an intransitive
    compare function; (bso#15569).
  * Many qsort() comparison functions are non-transitive, which
    can lead to out-of-bounds access in some circumstances;
    (bso#15625).
  * Need to change gitlab-ci.yml tags in all branches to avoid CI
    bill; (bso#15638).
  * We have added new options --vendor-name and --vendor-patch-
    revision arguments to ./configure to allow distributions and
    packagers to put their name in the Samba version string so
    that when debugging Samba the source of the binary is
    obvious; (bso#15654).
  * CTDB RADOS mutex helper misses namespace support;
    (bso#15665).
  * Dynamic DNS updates with the internal DNS are not working;
    (bso#13019).
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * Anonymous smb3 signing/encryption should be allowed (similar
    to Windows Server 2022); (bso#15412).
  * Panic in dreplsrv_op_pull_source_apply_changes_trigger;
    (bso#15573).
  * s4:nbt_server: does not provide unexpected handling, so
    winbindd can't use nmb requests instead cldap; (bso#15620).
  * winbindd, net ads join and other things don't work on an ipv6
    only host; (bso#15642).
  * Segmentation fault when deleting files in vfs_recycle;
    (bso#15659).
  * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664).
  * "client use kerberos" and --use-kerberos is ignored for the
    machine account; (bso#15666).
  * Regression DFS not working with widelinks = true;
    (bso#15435).
  * samba-gpupdate - Invalid NtVer in netlogon_samlogon_response;
    (bso#15633).
  * idmap_ad creates an incorrect local krb5.conf in case of
    trusted domain lookups; (bso#15653).
  * The images don't build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660).
- Fix non deterministic builds; (bsc#1225754); (bso#13213);
- Update to 4.20.1
  * dns update debug message is too noisy; (bso#15630);
  * Do not fail PAC validation for RFC8009 checksums types; (bso#15635);
  * Improve performance of lookup_groupmem() in idmap_ad; (bso#15605);
  * Smbcacls incorrectly propagates inheritance with Inherit-Only flag; (bso#15636);
  * http library doesn't support 'chunked transfer encoding'; (bso#15611);
  * Provide a systemd service file for the background queue daemon; (bso#15600);
- Update to 4.20.0
  New features:
  * samba-tool user getpassword / syncpasswords ;rounds= change
  * Group Managed service account client-side features
  * New Windows Search Protocol Client
  * Allow 'smbcacls' to save/restore DACLs to file
  * Samba-tool extensions for AD Claims, Authentication Policies and Silos
  * AD DC support for Authentication Silos and Authentication Policies
  * Conditional ACEs and Resource Attribute ACEs
  * Service Witness Protocol [MS-SWN]
  Removed features:
  * Get locally logged on users from utmp
  Fixed bugs:
  * Avoid null-dereference with bad claims; (bso#15606);
  * ndr_pull_security_ace can leave resource attribute ACE coda
    claim struct undefined; (bso#15613);
  * fd_handle_destructor() panics within an smbd_smb2_close() if
    vfs_stat_fsp() fails in fd_close(); (bso#15527);
  * set_nt_acl sometimes fails with NT_STATUS_INVALID_PARAMETER -
    openat() EACCES; (bso#15583);
  * libgpo: Segfault in python bindings; (bso#15599);
  * Samba AD is missing some authentication policy tests;
    (bso#15607);
  * samba-gpupdate: Correctly implement site support; (bso#15588);
  * Remove unsupported "Final" keyword missing from Python 3.6;
    (bso#15575);
  * Additional witness backports for 4.20.0; (bso#15577);
  * Error output with wspsearch; (bso#15579);
  * Packet marshalling push support missing for
    CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and
    CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580);
  * Performance regression for NDR parsing of security
    descriptors; (bso#15574);
  * Build and install man page for wspsearch client utility;
    (bso#15565);
- Update to 4.19.9
  * libldb: performance issue with indexes (ldb 2.8.2 is already
    released); (bso#15590).
  * DH reconnect error handling can lead to stale sharemode
    entries; (bso#15624).
  * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when
    truncated; (bso#15699).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * Compound SMB2 requests don't return
    NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses
    MacOSX clients; (bso#15696).
  * Crash when readlinkat fails; (bso#15700).</changelog>
  <changelog author="nopower@suse.com" date="1729080000">-  Adjust spec to split out rpcd_* binaries into a separate
  sub package; (bsc#1231414).</changelog>
  <changelog author="nopower@suse.com" date="1730376000">- Add placeholder changelog for sle15-sp7; (jsc#PED-11210).</changelog>
  <changelog author="nopower@suse.com" date="1732536000">- Update to 4.21.2
  * smbd fails to correctly check sharemode against OVERWRITE
    dispositions; (bso#15732).
  * Panic in close_directory; (bso#15754).
  * winexe no longer works with samba 4.21; (bso#15752).
  * protocol error - Unclear debug message "pad length mismatch"
    for invalid bind packet; (bso#14356).
  * NetrGetLogonCapabilities QueryLevel 2 needs to be
    implemented; (bso#15425).
  * gss_accept_sec_context() from Heimdal does not imply
    GSS_C_MUTUAL_FLAG with GSS_C_DCE_STYLE; (bso#15740).
  * winbindd should call process_set_title() for locator child;
    (bso#15749).
  * Update CTDB to track all TCP connections to public IP
    addresses; (bso#15320).</changelog>
  <changelog author="nopower@suse.com" date="1733486400">- Update shipped /etc/samba/smb.conf to point to smb.conf
  man page;(bsc#1233880).</changelog>
  <changelog author="nopower@suse.com" date="1736251200">- Update to 4.21.3
  * More possible replication loops against Azure AD;
    (bso#15701).
  * Compound rename from Mac clients can fail with
    NT_STATUS_INTERNAL_ERROR if the file has a lease;
    (bso#15697).
  * vfs crossrename seems not work correctly; (bso#15724).
  * After 'machine password timeout' /etc/krb5.keytab is not
    updated; (bso#6750).
  * Memory leak wbcCtxLookupSid; (bso#15771).
  * Fix heap-user-after-free with association groups;
    (bso#15765).
  * Segfault in vfs_btrfs; (bso#15758).
  * Avoid event failure race when disabling an event script;
    (bso#15755).</changelog>
  <changelog author="nopower@suse.com" date="1739966400">- Update to 4.21.4
  * Increasing slowness of sharesec performance with high number
    of registry shares; (bso#15780).
  * winbindd shows memleak in kerberos_decode_pac; (bso#15782).
  * Creation of GPOs applicable to more than one group is
    impossible with Samba 4.20.0 and later; (bso#15738).
  * Replace `crypt` module in
    python/samba/netcmd/user/readpasswords/common.py;
    (bso#15756).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * Spotlight search results don't show file size and creation
    date; (bso#15796).
  * General improvements for vfs_ceph_new module; (bso#15703).
  * net offlinejoin not working correctly; (bso#15777).
  * net ads create/join/winbind producing unix dysfunctional
    keytabs; (bso#15759).
  * Windows Explorer crashes on S-1-22-* Unix-SIDs when accessing
    security tab; (bso#14213).
  * The values from hresult_errstr_const and hresult_errstr are
    reversed in 4.20 and 4.21; (bso#15769).
  * Kerberos referral tickets are generated for principals in our
    domain if we have a trust to a top level domain; (bso#15778).
  * NETLOGON_NTLMV2_ENABLED is missing in the SamLogon*
    user_flags field; (bso#15783).
  * Regression: stack-use-after-return in crypt_as_best_we_can();
    (bso#15784).
  * libreplace:readline: gcc 15 complains about incompatible
    pointer types; (bso#15788).</changelog>
  <changelog author="nopower@suse.com" date="1743595200">- Update to 4.21.5
  * ldb index cache is too small on known large transactions
    (schemaupgrade, provision); (bso#15795).
  * Enable support for cephfs case insensitive behavior;
    (bso#15822).
  * Subnet based interfaces definition not listening on all
    covered IP addresses; (bso#15823).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727); (bsc#1238063).
  * Remove of file or directory not possible with vfs_acl_tdb;
    (bso#15791).
  * Unable to connect to CephFS subvolume shares with
    vfs_shadow_copy2; (bso#15797).
  * Add async io API from libcephfs to ceph_new VFS module;
    (bso#15810).
  * vfs_ceph_new module does not work with other modules for
    snapshot management; (bso#15818).
  * vfs_ceph_new: Add path based fallback for SMB_VFS_FCHOWN,
    SMB_VFS_FCHMOD and SMB_VFS_FNTIMES; (bso#15834).
  * Incorrect FSF address in ctdb pcp scripts; (bso#15820).
  * "samba-tool domain backup offline" hangs; (bso#15804).</changelog>
  <changelog author="nopower@suse.com" date="1748952000">- Update to 4.21.6
  * Running "gpo manage motd set" twice fails with backtrace;
    (bso#15774).
  * samba-tool gpo backup creates entity backups it can't read;
    (bso#15829).
  * gp_cert_auto_enroll_ext.py has problem unpacking GUIDs with
    prepended 0's; (bso#15839).
  * CVE-2025-0620 [SECURITY] smbd doesn't pick up group
    membership changes when re-authenticating an expired SMB
    session; (bso#15707), (bsc#1244136).
  * Deadlock between two smbd processes; (bso#15767).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727).
  * Wide link issue in samba 4.22; (bso#15841).
  * dcerpcd not able to bind to listening port; (bso#15851).
  * vfs_ceph_snapshots fails to list snapshots for entries at any
    level beyond share root; (bso#15819).
  * CTDB does not put nodes running NFS into grace on graceful
    shutdown; (bso#15858).</changelog>
  <changelog author="scabrero@suse.de" date="1751976000">- Update to 4.21.7
  * Windows security hardening locks out schannel'ed netlogon dc
    calls like netr_DsRGetDCName; (bsc#1246431); (bso#15876);
  * Trust domains are not created; (bso#15680);
  * Startup messages of rpc deamons fills /var/log/messages;
    (bso#15869);</changelog>
  <changelog author="nopower@suse.com" date="1757419200">- - Update to 4.21.8
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * getpwuid does not shift to new DC when current DC is down;
    (bso#15844).
  * Windows security hardening locks out schannel'ed netlogon dc
    calls like netr_DsRGetDCName; (bso#15876).
  * kinit command is failing with Missing cache Error;
    (bso#15840).
  * Figuring out the DC name from IP address fails and breaks
    fork_domain_child(); (bso#15891).
  * Delayed leader broadcast can block ctdb forever; (bso#15892).
  * 'net ads group' failed to list domain groups; (bso#15900).
  * Apparently there is a conflict between shadow_copy2 module
    and virusfilter (action quarantine); (bso#15663).
  * Fix handling of empty GPO link; (bso#15877).
  * SMB ACL inheritance doesn't work for files created;
    (bso#15880).</changelog>
  <changelog author="nopower@suse.com" date="1758628800">- CVE-2025-9640: fix vfs_streams_xattr uninitialized memory write;
  (bsc#1251279);(bso#15885).
- CVE-2025-10230: fix command Injection in WINS Server Hook Script;
  (bsc#1251280);(bso#15903).</changelog>
  <changelog author="nopower@suse.com" date="1763553600">- Update to 4.21.10
  * Crash in ctdbd on failed updateip; (bso#15935).
  * samba-4.21 fails to join AD when multiple DCs are returned;
    (bso#15905).
  * vfs_ceph_new should not use ceph_ll_nonblocking_readv_writev
    for fsync_send; (bso#15919).
  * CTDB_SOCKET can be used even when CTDB_TEST_MODE is not set;
    (bso#15921).
- Update to 4.21.9
  * CVE-2025-10230; (bso#15903); (bsc#1251279).
  * CVE-2025-9640; (bso#15885); (bsc#1251280).</changelog>
  <changelog author="noel.power@suse.com" date="1765281600">- samba-bgqd can't find [printers] share; (bso#15936);
  (bsc#1254586).</changelog>
  <changelog author="nopower@suse.com" date="1765540800">- Fix Samba printers reporting invalid sid during print jobs;
  (bsc#1234210); (bsc#1254926); (bso#15792).</changelog>
  <changelog author="scabrero@suse.de" date="1766491200">- Fix testparm error handling the "sync machine password to keytab"
  option; (bsc#1254439);</changelog>
</package>
<package pkgid="c531eccd690a8437a1f0e1682fcfa8fb4cb1377e9509169f07f993e27017f304" name="libldb2-32bit" arch="x86_64">
  <version epoch="0" ver="4.21.10+git.501.277ba349a01" rel="150700.3.26.1"/>
  <changelog author="nopower@suse.com" date="1729080000">-  Adjust spec to split out rpcd_* binaries into a separate
  sub package; (bsc#1231414).</changelog>
  <changelog author="nopower@suse.com" date="1730376000">- Add placeholder changelog for sle15-sp7; (jsc#PED-11210).</changelog>
  <changelog author="nopower@suse.com" date="1732536000">- Update to 4.21.2
  * smbd fails to correctly check sharemode against OVERWRITE
    dispositions; (bso#15732).
  * Panic in close_directory; (bso#15754).
  * winexe no longer works with samba 4.21; (bso#15752).
  * protocol error - Unclear debug message "pad length mismatch"
    for invalid bind packet; (bso#14356).
  * NetrGetLogonCapabilities QueryLevel 2 needs to be
    implemented; (bso#15425).
  * gss_accept_sec_context() from Heimdal does not imply
    GSS_C_MUTUAL_FLAG with GSS_C_DCE_STYLE; (bso#15740).
  * winbindd should call process_set_title() for locator child;
    (bso#15749).
  * Update CTDB to track all TCP connections to public IP
    addresses; (bso#15320).</changelog>
  <changelog author="nopower@suse.com" date="1733486400">- Update shipped /etc/samba/smb.conf to point to smb.conf
  man page;(bsc#1233880).</changelog>
  <changelog author="nopower@suse.com" date="1736251200">- Update to 4.21.3
  * More possible replication loops against Azure AD;
    (bso#15701).
  * Compound rename from Mac clients can fail with
    NT_STATUS_INTERNAL_ERROR if the file has a lease;
    (bso#15697).
  * vfs crossrename seems not work correctly; (bso#15724).
  * After 'machine password timeout' /etc/krb5.keytab is not
    updated; (bso#6750).
  * Memory leak wbcCtxLookupSid; (bso#15771).
  * Fix heap-user-after-free with association groups;
    (bso#15765).
  * Segfault in vfs_btrfs; (bso#15758).
  * Avoid event failure race when disabling an event script;
    (bso#15755).</changelog>
  <changelog author="nopower@suse.com" date="1739966400">- Update to 4.21.4
  * Increasing slowness of sharesec performance with high number
    of registry shares; (bso#15780).
  * winbindd shows memleak in kerberos_decode_pac; (bso#15782).
  * Creation of GPOs applicable to more than one group is
    impossible with Samba 4.20.0 and later; (bso#15738).
  * Replace `crypt` module in
    python/samba/netcmd/user/readpasswords/common.py;
    (bso#15756).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * Spotlight search results don't show file size and creation
    date; (bso#15796).
  * General improvements for vfs_ceph_new module; (bso#15703).
  * net offlinejoin not working correctly; (bso#15777).
  * net ads create/join/winbind producing unix dysfunctional
    keytabs; (bso#15759).
  * Windows Explorer crashes on S-1-22-* Unix-SIDs when accessing
    security tab; (bso#14213).
  * The values from hresult_errstr_const and hresult_errstr are
    reversed in 4.20 and 4.21; (bso#15769).
  * Kerberos referral tickets are generated for principals in our
    domain if we have a trust to a top level domain; (bso#15778).
  * NETLOGON_NTLMV2_ENABLED is missing in the SamLogon*
    user_flags field; (bso#15783).
  * Regression: stack-use-after-return in crypt_as_best_we_can();
    (bso#15784).
  * libreplace:readline: gcc 15 complains about incompatible
    pointer types; (bso#15788).</changelog>
  <changelog author="nopower@suse.com" date="1743595200">- Update to 4.21.5
  * ldb index cache is too small on known large transactions
    (schemaupgrade, provision); (bso#15795).
  * Enable support for cephfs case insensitive behavior;
    (bso#15822).
  * Subnet based interfaces definition not listening on all
    covered IP addresses; (bso#15823).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727); (bsc#1238063).
  * Remove of file or directory not possible with vfs_acl_tdb;
    (bso#15791).
  * Unable to connect to CephFS subvolume shares with
    vfs_shadow_copy2; (bso#15797).
  * Add async io API from libcephfs to ceph_new VFS module;
    (bso#15810).
  * vfs_ceph_new module does not work with other modules for
    snapshot management; (bso#15818).
  * vfs_ceph_new: Add path based fallback for SMB_VFS_FCHOWN,
    SMB_VFS_FCHMOD and SMB_VFS_FNTIMES; (bso#15834).
  * Incorrect FSF address in ctdb pcp scripts; (bso#15820).
  * "samba-tool domain backup offline" hangs; (bso#15804).</changelog>
  <changelog author="nopower@suse.com" date="1748952000">- Update to 4.21.6
  * Running "gpo manage motd set" twice fails with backtrace;
    (bso#15774).
  * samba-tool gpo backup creates entity backups it can't read;
    (bso#15829).
  * gp_cert_auto_enroll_ext.py has problem unpacking GUIDs with
    prepended 0's; (bso#15839).
  * CVE-2025-0620 [SECURITY] smbd doesn't pick up group
    membership changes when re-authenticating an expired SMB
    session; (bso#15707), (bsc#1244136).
  * Deadlock between two smbd processes; (bso#15767).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727).
  * Wide link issue in samba 4.22; (bso#15841).
  * dcerpcd not able to bind to listening port; (bso#15851).
  * vfs_ceph_snapshots fails to list snapshots for entries at any
    level beyond share root; (bso#15819).
  * CTDB does not put nodes running NFS into grace on graceful
    shutdown; (bso#15858).</changelog>
  <changelog author="scabrero@suse.de" date="1751976000">- Update to 4.21.7
  * Windows security hardening locks out schannel'ed netlogon dc
    calls like netr_DsRGetDCName; (bsc#1246431); (bso#15876);
  * Trust domains are not created; (bso#15680);
  * Startup messages of rpc deamons fills /var/log/messages;
    (bso#15869);</changelog>
  <changelog author="nopower@suse.com" date="1757419200">- - Update to 4.21.8
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * getpwuid does not shift to new DC when current DC is down;
    (bso#15844).
  * Windows security hardening locks out schannel'ed netlogon dc
    calls like netr_DsRGetDCName; (bso#15876).
  * kinit command is failing with Missing cache Error;
    (bso#15840).
  * Figuring out the DC name from IP address fails and breaks
    fork_domain_child(); (bso#15891).
  * Delayed leader broadcast can block ctdb forever; (bso#15892).
  * 'net ads group' failed to list domain groups; (bso#15900).
  * Apparently there is a conflict between shadow_copy2 module
    and virusfilter (action quarantine); (bso#15663).
  * Fix handling of empty GPO link; (bso#15877).
  * SMB ACL inheritance doesn't work for files created;
    (bso#15880).</changelog>
  <changelog author="nopower@suse.com" date="1758628800">- CVE-2025-9640: fix vfs_streams_xattr uninitialized memory write;
  (bsc#1251279);(bso#15885).
- CVE-2025-10230: fix command Injection in WINS Server Hook Script;
  (bsc#1251280);(bso#15903).</changelog>
  <changelog author="nopower@suse.com" date="1763553600">- Update to 4.21.10
  * Crash in ctdbd on failed updateip; (bso#15935).
  * samba-4.21 fails to join AD when multiple DCs are returned;
    (bso#15905).
  * vfs_ceph_new should not use ceph_ll_nonblocking_readv_writev
    for fsync_send; (bso#15919).
  * CTDB_SOCKET can be used even when CTDB_TEST_MODE is not set;
    (bso#15921).
- Update to 4.21.9
  * CVE-2025-10230; (bso#15903); (bsc#1251279).
  * CVE-2025-9640; (bso#15885); (bsc#1251280).</changelog>
  <changelog author="noel.power@suse.com" date="1765281600">- samba-bgqd can't find [printers] share; (bso#15936);
  (bsc#1254586).</changelog>
  <changelog author="nopower@suse.com" date="1765540800">- Fix Samba printers reporting invalid sid during print jobs;
  (bsc#1234210); (bsc#1254926); (bso#15792).</changelog>
  <changelog author="scabrero@suse.de" date="1766491200">- Fix testparm error handling the "sync machine password to keytab"
  option; (bsc#1254439);</changelog>
  <changelog author="noel.power@suse.com" date="1769515200">- Fix memory leak opening local named pipe; (bso#15979);
  (bsc#1257200).</changelog>
  <changelog author="noel.power@suse.com" date="1772020800">- Fix regression "use-kerberos=desired" broken doesn't even try
  to authenticate with kerberos and instead fallsback to NTLM;
  (bsc#1255755); (bso#15789).
- Fix memory leak using cups parsed options and from filename
  allocated when processing end of printing job; (bso#15979);
  (bsc#1257200).
- fix manpage for "net offlinejoin requestodj"; (bso#15964)
- fix "ctdbd socket" documentation in manpage for smb.conf;
  (bso#15977)</changelog>
  <changelog author="noel.power@suse.com" date="1773144000">- Generated dynamic profile based on path to special 'printers'
  share. (bsc#1259441).</changelog>
  <changelog author="nopower@suse.com" date="1774872000">- Fix rpc workers with long living clients from growing server
  memory keytab and increasing memory used by workers;
  (bso#16042); (bsc#1257200).</changelog>
  <changelog author="nopower@suse.com" date="1777291200">- CVE-2026-4480: Fix Unauthenticated Remote Code Execution;
  (bso#16033); (bsc#1261161).
- CVE-2026-4408: Fix Remote Code Execution in SAMR;(bso#16034);
  (bsc#1261163).
- CVE-2026-3238: Fix unauthenticated udp packet crashes AD DC
  nbt server; (bso#16012); (bsc#1261160).
- CVE-2026-3012: Fix CVE-2026-3012 group policy certificate
  enrollment using http:// without validation;(bso#16003);
  (bsc#1261159).
- CVE-2026-1933: Fix missing access check on reparse point
  operations; (bso#15992); (bsc#1261188).
- CVE-2026-2340: vfs_worm does not block directory modification;
  (bso#15997); (bsc#1261158).</changelog>
</package>
<package pkgid="e026ff6886a36d4eb41ef0d7deeaed76f03f92a102a13bb5cf9a594f64fc431e" name="libldb2-32bit" arch="x86_64">
  <version epoch="0" ver="4.21.6+git.402.80f493f530f" rel="150700.3.3.1"/>
  <changelog author="nopower@suse.com" date="1697112000">- use systemd-logind rather than utmp for y2038 safety;
  (bsc#1216159).</changelog>
  <changelog author="nopower@suse.com" date="1697457600">- Update to 4.19.2
  * Use-after-free in aio_del_req_from_fsp during smbd shutdown
    after failed IPC FSCTL_PIPE_TRANSCEIVE; (bso#15423).
  * clidfs.c do_connect() missing a "return" after a
    cli_shutdown() call; (bso#15426).
  * macOS mdfind returns only 50 results; (bso#15463).
  * GETREALFILENAME_CACHE can modify incoming new filename with
    previous cache entry value; (bso#15481).
  * libnss_winbind causes memory corruption since samba-4.18,
    impacts sendmail, zabbix, potentially more; (bso#15464).
  * ctdbd: setproctitle not initialized messages flooding logs;
    (bso#15479).
  * CVE-2023-5568 Heap buffer overflow with freshness tokens in
    the Heimdal KDC in Samba 4.19; (bso#15491).
  * The heimdal KDC doesn't detect s4u2self correctly when fast
    is in use; (bso#15477).</changelog>
  <changelog author="dmulder@suse.com" date="1698062400">- packaging: samba-tool domain provision requires python3-Markdown;
  (bsc#1216519).</changelog>
  <changelog author="nopower@suse.com" date="1701086400">- Update to 4.19.3
  * sid_strings test broken by unix epoch &gt; 1700000000;
    (bso#15520).
  * smbd crashes if asked to return full information on close of
    a stream handle with delete on close disposition set;
    (bso#15487).
  * smbd: fix close order of base_fsp and stream_fsp in
    smb_fname_fsp_destructor(); (bso#15521).
  * Improve logging for failover scenarios; (bso#15499).
  * Files without "read attributes" NFS4 ACL permission are not
    listed in directories; (bso#15093).
  * CVE-2018-14628 [SECURITY] Deleted Object tombstones visible
    in AD LDAP to normal users; (bso#13595).
  * Kerberos TGS-REQ with User2User does not work for normal
    accounts; (bso#15492).
  * vfs_gpfs stat calls fail due to file system permissions;
    (bso#15507).
  * Samba doesn't build with Python 3.12; (bso#15513).</changelog>
  <changelog author="nopower@suse.com" date="1704801600">- Update to 4.19.4
  * net changesecretpw cannot set the machine account password if
    secrets.tdb is empty; (bso#13577).
  * For generating doc, take, if defined, env XML_CATALOG_FILES;
    (bso#15540).
  * Trivial C typo in nsswitch/winbind_nss_netbsd.c; (bso#15541).
  * vfs_linux_xfs is incorrectly named; (bso#15542).
  * systemd stumbled over copyright-message at smbd startup;
    (bso#15377).
  * Following intermediate abolute share-local symlinks is
    broken; (bso#15505).
  * ctdb RELEASE_IP causes a crash in release_ip if a connection
    to a non-public address disconnects first; (bso#15523).
  * shadow_copy2 broken when current fileset's directories are
    removed; (bso#15544).
  * smbd does not detect ctdb public ipv6 addresses for
    multichannel exclusion; (bso#15534).
  * 'force user = localunixuser' doesn't work if 'allow trusted
    domains = no' is set; (bso#15469).
  * smbget debug logging doesn't work; (bso#15525).
  * smget: username in the smburl and interactive password entry
    doesn't work; (bso#15532).
  * smbget auth function doesn't set values for password prompt
    correctly; (bso#15538).
  * Unable to copy and write files from clients to Ceph cluster
    via SMB Linux gateway with Ceph VFS module; (bso#15440).
  * Multichannel refresh network information; (bso#15547).</changelog>
  <changelog author="nopower@suse.com" date="1704888000">- Remove -x from bash shebang update-apparmor-samba-profile;
  (bsc#1218431).</changelog>
  <changelog author="nopower@suse.com" date="1708430400">- Update to 4.19.5
  * Windows 2016 fails to restore previous version of a file from
    a shadow_copy2 snapshot; (bso#13688).
  * Symlinks on AIX are broken in 4.19 (and a few version before
    that); (bso#15549).
  * Fake directory create times has no effect; (bso#12421).
  * ctime mixed up with mtime by smbd; (bso#15550).
  * samba-gpupdate --rsop fails if machine is not in a site;
    (bso#15548).
  * gpupdate: The root cert import when NDES is not available is
    broken; (bso#15557).
  * samba-gpupdate should print a useful message if cepces-submit
    can't be found; (bso#15552).
  * samba-gpupdate logging doesn't work; (bso#15558).
  * smbpasswd reset permissions only if not 0600; (bso#15555).</changelog>
  <changelog author="nopower@suse.com" date="1718884800">- Update to 4.19.7
  * ldb qsort might r/w out of bounds with an intransitive
    compare function (ldb 2.8.1 is already released);
    (bso#15569).
  * Many qsort() comparison functions are non-transitive, which
    can lead to out-of-bounds access in some circumstances (ldb
    2.8.1 is already released); (bso#15625).
  * Need to change gitlab-ci.yml tags in all branches to avoid CI
    bill; (bso#15638).
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * Anonymous smb3 signing/encryption should be allowed (similar
    to Windows Server 2022); (bso#15412).
  * Panic in dreplsrv_op_pull_source_apply_changes_trigger;
    (bso#15573).
  * winbindd, net ads join and other things don't work on an ipv6
    only host; (bso#15642).
  * Smbcacls incorrectly propagates inheritance with Inherit-Only
    flag; (bso#15636).
  * http library doesn't support  'chunked transfer encoding';
    (bso#15611).
- Update to 4.19.6
  * fd_handle_destructor() panics within an smbd_smb2_close() if
    vfs_stat_fsp() fails in fd_close(); (bso#15527).
  * samba-gpupdate: Correctly implement site support;
    (bso#15588).
  * libgpo: Segfault in python bindings; (bso#15599).
  * Packet marshalling push support missing for
    CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and
    CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580).</changelog>
  <changelog author="scabrero@suse.de" date="1722513600">- Fix a crash when joining offline and 'kerberos method' includes
  keytab; (bsc#1228732);
- Fix reading the password from STDIN or environment vars if it
  was already given in the command line; (bsc#1228732);</changelog>
  <changelog author="ddiss@suse.com" date="1725537600">- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated;
  (bso#15699); (bsc#1229684).
- Update to 4.19.8
  * Invalid client warning about command line passwords;
    (bso#15671);
  * Version string is truncated in manpages; (bso#15672);
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673);
  * cmdline_burn does not always burn secrets; (bso#15674);
  * Samba doesn't parse SDDL found in defaultSecurityDescriptor
    in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685);
  * We have added new options --vendor-name and --vendor-patch-
    revision arguments to ./configure to allow distributions and
    packagers to put their name in the Samba version string so that
    when debugging Samba the source of the binary is obvious;
    (bso#15654);
  * When claims enabled with heimdal kerberos, unable to log on to a
    Windows computer when user account need to change their own
    password; (bso#15655);
  * Fix clock skew error message and memory cache clock skew
    recovery; (bso#15676);
  * CTDB RADOS mutex helper misses namespace support; (bso#15665);
  * The images don't build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660);
  * Fix unnecessary delays in CTDB while processing requests under
    high load; (bso#15678);
  * Dynamic DNS updates with the internal DNS are not working;
    (bso#13019);
  * s4:nbt_server: does not provide unexpected handling, so winbindd
    can't use nmb requests instead cldap; (bso#15620);
  * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664);
  * "client use kerberos" and --use-kerberos is ignored for the machine
    account; (bso#15666);
  * Regression DFS not working with widelinks = true; (bso#15435);
  * ntlm_auth make logs more consistent with length check; (bso#15677);</changelog>
  <changelog author="nopower@suse.com" date="1728475200">-  Adjust spec to split out rpcd_* binaries into a separate
  sub package; (bsc#1231414).</changelog>
  <changelog author="nopower@suse.com" date="1728993600">- Update to 4.21.1
  * DH reconnect error handling can lead to stale sharemode
    entries; (bso#15624).
  * "inherit permissions = yes" triggers assert() in vfs_default
    when creating a stream; (bso#15695).
  * Samba 4.21.0 broke FreeIPA domain member integration;
    (bso#15715).
  * Missing conversion for msDS-UserTGTLifetime, msDS-
    ComputerTGTLifetime and msDS-ServiceTGTLifetime on "samba-
    tool domain auth policy modify"; (bso#15692).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * Durable handle is not granted when a previous OPEN exists
    with NoOplock; (bso#15649).
  * Durable handle is granted but reconnect fails; (bso#15651).
  * Disconnected durable handles with RH lease should not be
    purged by a new non conflicting open; (bso#15708).
  * net ads testjoin and other commands use the wrong secrets.tdb
    in a cluster; (bso#15714).
  * 4.21 using --with-system-mitkrb5 requires MIT krb5 1.16 as
    rfc 8009 etypes are used; (bso#15726).
  * VFS_OPEN_HOW_WITH_BACKUP_INTENT breaks shadow_copy2;
    (bso#15730).
  * Samba 4.20.0 DLZ module crashes BIND on startup; (bso#15643).
  * Cannot build libldb lmdb backend on a build without AD DC;
    (bso#15721).
  * Consistent log level for sighup handler; (bso#15706).
- Package ceph_new VFS module.
- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated;
  (bso#15699); (bsc#1229684).
- Update to 4.21.0
  * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when
    truncated; (bso#15699).
  * Bad variable definition for ParseTuple causing test failure
    for Smb3UnixTests.test_create_context_reparse; (bso#15702).
  * Add new vfs_ceph module (based on low level API);
    (bso#15686).
  * samba-tool can not load the default configuration file;
    (bso#15698).
  * Crash when readlinkat fails; (bso#15700).
  * Can't add/delete special keys to keytab for nfs, cifs, http
    etc; (bso#15689).
  * Compound SMB2 requests don't return
    NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses
    MacOSX clients; (bso#15696).
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673).
  * ldb_version.h is missing from ldb public library;
    (bso#15690).
  * Can not add/delete special keys to keytab for nfs, cifs, http
    etc; (bso#15689).
  * undefined reference to winbind_lookup_name_ex; (bso#15687).
  * per user veto and hide file syntax is to complex;
    (bso#15688).
- Update to 4.20.4
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673).
- Update to 4.20.3
  * Running samba-bgqd a a standalone systemd service does not
    work; (bso#15683).
  * When claims enabled with heimdal kerberos, unable to log on
    to a Windows computer when user account need to change their
    own password; (bso#15655).
  * Invalid client warning about command line passwords;
    (bso#15671).
  * Version string is truncated in manpages; (bso#15672).
  * cmdline_burn does not always burn secrets; (bso#15674).
  * Samba does not parse SDDL found in defaultSecurityDescriptor
    in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685).
  * The images don\'t build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660).
  * Fix clock skew error message and memory cache clock skew
    recovery; (bso#15676).
  * Heimdal ignores _gsskrb5_decapsulate errors in
    init_sec_context/repl_mutual; (bso#15603).
  * s4:ldap_server: does not support tls channel bindings for
    sasl binds; (bso#15621).
  * CTDB socket output queues may suffer unbounded delays under
    some special conditions; (bso#15678).
- Update samba-tool package to require python3-Markdown also in
  the Heimdal ADDC build
- Fix named crash when using samba's DLZ plugin; (bsc#1224003);
  (bso#15643);
- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]
- Update to 4.20.2
  * vfs_widelinks with DFS shares breaks case insensitivity;
    (bso#15662); (bsc#1213607).
  * Samba build is not reproducible; (bso#13213).
  * ldb qsort might r/w out of bounds with an intransitive
    compare function; (bso#15569).
  * Many qsort() comparison functions are non-transitive, which
    can lead to out-of-bounds access in some circumstances;
    (bso#15625).
  * Need to change gitlab-ci.yml tags in all branches to avoid CI
    bill; (bso#15638).
  * We have added new options --vendor-name and --vendor-patch-
    revision arguments to ./configure to allow distributions and
    packagers to put their name in the Samba version string so
    that when debugging Samba the source of the binary is
    obvious; (bso#15654).
  * CTDB RADOS mutex helper misses namespace support;
    (bso#15665).
  * Dynamic DNS updates with the internal DNS are not working;
    (bso#13019).
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * Anonymous smb3 signing/encryption should be allowed (similar
    to Windows Server 2022); (bso#15412).
  * Panic in dreplsrv_op_pull_source_apply_changes_trigger;
    (bso#15573).
  * s4:nbt_server: does not provide unexpected handling, so
    winbindd can't use nmb requests instead cldap; (bso#15620).
  * winbindd, net ads join and other things don't work on an ipv6
    only host; (bso#15642).
  * Segmentation fault when deleting files in vfs_recycle;
    (bso#15659).
  * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664).
  * "client use kerberos" and --use-kerberos is ignored for the
    machine account; (bso#15666).
  * Regression DFS not working with widelinks = true;
    (bso#15435).
  * samba-gpupdate - Invalid NtVer in netlogon_samlogon_response;
    (bso#15633).
  * idmap_ad creates an incorrect local krb5.conf in case of
    trusted domain lookups; (bso#15653).
  * The images don't build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660).
- Fix non deterministic builds; (bsc#1225754); (bso#13213);
- Update to 4.20.1
  * dns update debug message is too noisy; (bso#15630);
  * Do not fail PAC validation for RFC8009 checksums types; (bso#15635);
  * Improve performance of lookup_groupmem() in idmap_ad; (bso#15605);
  * Smbcacls incorrectly propagates inheritance with Inherit-Only flag; (bso#15636);
  * http library doesn't support 'chunked transfer encoding'; (bso#15611);
  * Provide a systemd service file for the background queue daemon; (bso#15600);
- Update to 4.20.0
  New features:
  * samba-tool user getpassword / syncpasswords ;rounds= change
  * Group Managed service account client-side features
  * New Windows Search Protocol Client
  * Allow 'smbcacls' to save/restore DACLs to file
  * Samba-tool extensions for AD Claims, Authentication Policies and Silos
  * AD DC support for Authentication Silos and Authentication Policies
  * Conditional ACEs and Resource Attribute ACEs
  * Service Witness Protocol [MS-SWN]
  Removed features:
  * Get locally logged on users from utmp
  Fixed bugs:
  * Avoid null-dereference with bad claims; (bso#15606);
  * ndr_pull_security_ace can leave resource attribute ACE coda
    claim struct undefined; (bso#15613);
  * fd_handle_destructor() panics within an smbd_smb2_close() if
    vfs_stat_fsp() fails in fd_close(); (bso#15527);
  * set_nt_acl sometimes fails with NT_STATUS_INVALID_PARAMETER -
    openat() EACCES; (bso#15583);
  * libgpo: Segfault in python bindings; (bso#15599);
  * Samba AD is missing some authentication policy tests;
    (bso#15607);
  * samba-gpupdate: Correctly implement site support; (bso#15588);
  * Remove unsupported "Final" keyword missing from Python 3.6;
    (bso#15575);
  * Additional witness backports for 4.20.0; (bso#15577);
  * Error output with wspsearch; (bso#15579);
  * Packet marshalling push support missing for
    CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and
    CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580);
  * Performance regression for NDR parsing of security
    descriptors; (bso#15574);
  * Build and install man page for wspsearch client utility;
    (bso#15565);
- Update to 4.19.9
  * libldb: performance issue with indexes (ldb 2.8.2 is already
    released); (bso#15590).
  * DH reconnect error handling can lead to stale sharemode
    entries; (bso#15624).
  * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when
    truncated; (bso#15699).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * Compound SMB2 requests don't return
    NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses
    MacOSX clients; (bso#15696).
  * Crash when readlinkat fails; (bso#15700).</changelog>
  <changelog author="nopower@suse.com" date="1729080000">-  Adjust spec to split out rpcd_* binaries into a separate
  sub package; (bsc#1231414).</changelog>
  <changelog author="nopower@suse.com" date="1730376000">- Add placeholder changelog for sle15-sp7; (jsc#PED-11210).</changelog>
  <changelog author="nopower@suse.com" date="1732536000">- Update to 4.21.2
  * smbd fails to correctly check sharemode against OVERWRITE
    dispositions; (bso#15732).
  * Panic in close_directory; (bso#15754).
  * winexe no longer works with samba 4.21; (bso#15752).
  * protocol error - Unclear debug message "pad length mismatch"
    for invalid bind packet; (bso#14356).
  * NetrGetLogonCapabilities QueryLevel 2 needs to be
    implemented; (bso#15425).
  * gss_accept_sec_context() from Heimdal does not imply
    GSS_C_MUTUAL_FLAG with GSS_C_DCE_STYLE; (bso#15740).
  * winbindd should call process_set_title() for locator child;
    (bso#15749).
  * Update CTDB to track all TCP connections to public IP
    addresses; (bso#15320).</changelog>
  <changelog author="nopower@suse.com" date="1733486400">- Update shipped /etc/samba/smb.conf to point to smb.conf
  man page;(bsc#1233880).</changelog>
  <changelog author="nopower@suse.com" date="1736251200">- Update to 4.21.3
  * More possible replication loops against Azure AD;
    (bso#15701).
  * Compound rename from Mac clients can fail with
    NT_STATUS_INTERNAL_ERROR if the file has a lease;
    (bso#15697).
  * vfs crossrename seems not work correctly; (bso#15724).
  * After 'machine password timeout' /etc/krb5.keytab is not
    updated; (bso#6750).
  * Memory leak wbcCtxLookupSid; (bso#15771).
  * Fix heap-user-after-free with association groups;
    (bso#15765).
  * Segfault in vfs_btrfs; (bso#15758).
  * Avoid event failure race when disabling an event script;
    (bso#15755).</changelog>
  <changelog author="nopower@suse.com" date="1739966400">- Update to 4.21.4
  * Increasing slowness of sharesec performance with high number
    of registry shares; (bso#15780).
  * winbindd shows memleak in kerberos_decode_pac; (bso#15782).
  * Creation of GPOs applicable to more than one group is
    impossible with Samba 4.20.0 and later; (bso#15738).
  * Replace `crypt` module in
    python/samba/netcmd/user/readpasswords/common.py;
    (bso#15756).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * Spotlight search results don't show file size and creation
    date; (bso#15796).
  * General improvements for vfs_ceph_new module; (bso#15703).
  * net offlinejoin not working correctly; (bso#15777).
  * net ads create/join/winbind producing unix dysfunctional
    keytabs; (bso#15759).
  * Windows Explorer crashes on S-1-22-* Unix-SIDs when accessing
    security tab; (bso#14213).
  * The values from hresult_errstr_const and hresult_errstr are
    reversed in 4.20 and 4.21; (bso#15769).
  * Kerberos referral tickets are generated for principals in our
    domain if we have a trust to a top level domain; (bso#15778).
  * NETLOGON_NTLMV2_ENABLED is missing in the SamLogon*
    user_flags field; (bso#15783).
  * Regression: stack-use-after-return in crypt_as_best_we_can();
    (bso#15784).
  * libreplace:readline: gcc 15 complains about incompatible
    pointer types; (bso#15788).</changelog>
  <changelog author="nopower@suse.com" date="1743595200">- Update to 4.21.5
  * ldb index cache is too small on known large transactions
    (schemaupgrade, provision); (bso#15795).
  * Enable support for cephfs case insensitive behavior;
    (bso#15822).
  * Subnet based interfaces definition not listening on all
    covered IP addresses; (bso#15823).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727); (bsc#1238063).
  * Remove of file or directory not possible with vfs_acl_tdb;
    (bso#15791).
  * Unable to connect to CephFS subvolume shares with
    vfs_shadow_copy2; (bso#15797).
  * Add async io API from libcephfs to ceph_new VFS module;
    (bso#15810).
  * vfs_ceph_new module does not work with other modules for
    snapshot management; (bso#15818).
  * vfs_ceph_new: Add path based fallback for SMB_VFS_FCHOWN,
    SMB_VFS_FCHMOD and SMB_VFS_FNTIMES; (bso#15834).
  * Incorrect FSF address in ctdb pcp scripts; (bso#15820).
  * "samba-tool domain backup offline" hangs; (bso#15804).</changelog>
  <changelog author="nopower@suse.com" date="1748952000">- Update to 4.21.6
  * Running "gpo manage motd set" twice fails with backtrace;
    (bso#15774).
  * samba-tool gpo backup creates entity backups it can't read;
    (bso#15829).
  * gp_cert_auto_enroll_ext.py has problem unpacking GUIDs with
    prepended 0's; (bso#15839).
  * CVE-2025-0620 [SECURITY] smbd doesn't pick up group
    membership changes when re-authenticating an expired SMB
    session; (bso#15707), (bsc#1244136).
  * Deadlock between two smbd processes; (bso#15767).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727).
  * Wide link issue in samba 4.22; (bso#15841).
  * dcerpcd not able to bind to listening port; (bso#15851).
  * vfs_ceph_snapshots fails to list snapshots for entries at any
    level beyond share root; (bso#15819).
  * CTDB does not put nodes running NFS into grace on graceful
    shutdown; (bso#15858).</changelog>
</package>
<package pkgid="eb7b7a88f34b3c10399b1a6c364d8d6334f0375fc4ccc288b11e3e4f522b5107" name="libldb2-32bit" arch="x86_64">
  <version epoch="0" ver="4.21.6+git.493.f39e13aba14" rel="150700.3.6.1"/>
  <changelog author="nopower@suse.com" date="1697457600">- Update to 4.19.2
  * Use-after-free in aio_del_req_from_fsp during smbd shutdown
    after failed IPC FSCTL_PIPE_TRANSCEIVE; (bso#15423).
  * clidfs.c do_connect() missing a "return" after a
    cli_shutdown() call; (bso#15426).
  * macOS mdfind returns only 50 results; (bso#15463).
  * GETREALFILENAME_CACHE can modify incoming new filename with
    previous cache entry value; (bso#15481).
  * libnss_winbind causes memory corruption since samba-4.18,
    impacts sendmail, zabbix, potentially more; (bso#15464).
  * ctdbd: setproctitle not initialized messages flooding logs;
    (bso#15479).
  * CVE-2023-5568 Heap buffer overflow with freshness tokens in
    the Heimdal KDC in Samba 4.19; (bso#15491).
  * The heimdal KDC doesn't detect s4u2self correctly when fast
    is in use; (bso#15477).</changelog>
  <changelog author="dmulder@suse.com" date="1698062400">- packaging: samba-tool domain provision requires python3-Markdown;
  (bsc#1216519).</changelog>
  <changelog author="nopower@suse.com" date="1701086400">- Update to 4.19.3
  * sid_strings test broken by unix epoch &gt; 1700000000;
    (bso#15520).
  * smbd crashes if asked to return full information on close of
    a stream handle with delete on close disposition set;
    (bso#15487).
  * smbd: fix close order of base_fsp and stream_fsp in
    smb_fname_fsp_destructor(); (bso#15521).
  * Improve logging for failover scenarios; (bso#15499).
  * Files without "read attributes" NFS4 ACL permission are not
    listed in directories; (bso#15093).
  * CVE-2018-14628 [SECURITY] Deleted Object tombstones visible
    in AD LDAP to normal users; (bso#13595).
  * Kerberos TGS-REQ with User2User does not work for normal
    accounts; (bso#15492).
  * vfs_gpfs stat calls fail due to file system permissions;
    (bso#15507).
  * Samba doesn't build with Python 3.12; (bso#15513).</changelog>
  <changelog author="nopower@suse.com" date="1704801600">- Update to 4.19.4
  * net changesecretpw cannot set the machine account password if
    secrets.tdb is empty; (bso#13577).
  * For generating doc, take, if defined, env XML_CATALOG_FILES;
    (bso#15540).
  * Trivial C typo in nsswitch/winbind_nss_netbsd.c; (bso#15541).
  * vfs_linux_xfs is incorrectly named; (bso#15542).
  * systemd stumbled over copyright-message at smbd startup;
    (bso#15377).
  * Following intermediate abolute share-local symlinks is
    broken; (bso#15505).
  * ctdb RELEASE_IP causes a crash in release_ip if a connection
    to a non-public address disconnects first; (bso#15523).
  * shadow_copy2 broken when current fileset's directories are
    removed; (bso#15544).
  * smbd does not detect ctdb public ipv6 addresses for
    multichannel exclusion; (bso#15534).
  * 'force user = localunixuser' doesn't work if 'allow trusted
    domains = no' is set; (bso#15469).
  * smbget debug logging doesn't work; (bso#15525).
  * smget: username in the smburl and interactive password entry
    doesn't work; (bso#15532).
  * smbget auth function doesn't set values for password prompt
    correctly; (bso#15538).
  * Unable to copy and write files from clients to Ceph cluster
    via SMB Linux gateway with Ceph VFS module; (bso#15440).
  * Multichannel refresh network information; (bso#15547).</changelog>
  <changelog author="nopower@suse.com" date="1704888000">- Remove -x from bash shebang update-apparmor-samba-profile;
  (bsc#1218431).</changelog>
  <changelog author="nopower@suse.com" date="1708430400">- Update to 4.19.5
  * Windows 2016 fails to restore previous version of a file from
    a shadow_copy2 snapshot; (bso#13688).
  * Symlinks on AIX are broken in 4.19 (and a few version before
    that); (bso#15549).
  * Fake directory create times has no effect; (bso#12421).
  * ctime mixed up with mtime by smbd; (bso#15550).
  * samba-gpupdate --rsop fails if machine is not in a site;
    (bso#15548).
  * gpupdate: The root cert import when NDES is not available is
    broken; (bso#15557).
  * samba-gpupdate should print a useful message if cepces-submit
    can't be found; (bso#15552).
  * samba-gpupdate logging doesn't work; (bso#15558).
  * smbpasswd reset permissions only if not 0600; (bso#15555).</changelog>
  <changelog author="nopower@suse.com" date="1718884800">- Update to 4.19.7
  * ldb qsort might r/w out of bounds with an intransitive
    compare function (ldb 2.8.1 is already released);
    (bso#15569).
  * Many qsort() comparison functions are non-transitive, which
    can lead to out-of-bounds access in some circumstances (ldb
    2.8.1 is already released); (bso#15625).
  * Need to change gitlab-ci.yml tags in all branches to avoid CI
    bill; (bso#15638).
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * Anonymous smb3 signing/encryption should be allowed (similar
    to Windows Server 2022); (bso#15412).
  * Panic in dreplsrv_op_pull_source_apply_changes_trigger;
    (bso#15573).
  * winbindd, net ads join and other things don't work on an ipv6
    only host; (bso#15642).
  * Smbcacls incorrectly propagates inheritance with Inherit-Only
    flag; (bso#15636).
  * http library doesn't support  'chunked transfer encoding';
    (bso#15611).
- Update to 4.19.6
  * fd_handle_destructor() panics within an smbd_smb2_close() if
    vfs_stat_fsp() fails in fd_close(); (bso#15527).
  * samba-gpupdate: Correctly implement site support;
    (bso#15588).
  * libgpo: Segfault in python bindings; (bso#15599).
  * Packet marshalling push support missing for
    CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and
    CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580).</changelog>
  <changelog author="scabrero@suse.de" date="1722513600">- Fix a crash when joining offline and 'kerberos method' includes
  keytab; (bsc#1228732);
- Fix reading the password from STDIN or environment vars if it
  was already given in the command line; (bsc#1228732);</changelog>
  <changelog author="ddiss@suse.com" date="1725537600">- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated;
  (bso#15699); (bsc#1229684).
- Update to 4.19.8
  * Invalid client warning about command line passwords;
    (bso#15671);
  * Version string is truncated in manpages; (bso#15672);
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673);
  * cmdline_burn does not always burn secrets; (bso#15674);
  * Samba doesn't parse SDDL found in defaultSecurityDescriptor
    in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685);
  * We have added new options --vendor-name and --vendor-patch-
    revision arguments to ./configure to allow distributions and
    packagers to put their name in the Samba version string so that
    when debugging Samba the source of the binary is obvious;
    (bso#15654);
  * When claims enabled with heimdal kerberos, unable to log on to a
    Windows computer when user account need to change their own
    password; (bso#15655);
  * Fix clock skew error message and memory cache clock skew
    recovery; (bso#15676);
  * CTDB RADOS mutex helper misses namespace support; (bso#15665);
  * The images don't build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660);
  * Fix unnecessary delays in CTDB while processing requests under
    high load; (bso#15678);
  * Dynamic DNS updates with the internal DNS are not working;
    (bso#13019);
  * s4:nbt_server: does not provide unexpected handling, so winbindd
    can't use nmb requests instead cldap; (bso#15620);
  * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664);
  * "client use kerberos" and --use-kerberos is ignored for the machine
    account; (bso#15666);
  * Regression DFS not working with widelinks = true; (bso#15435);
  * ntlm_auth make logs more consistent with length check; (bso#15677);</changelog>
  <changelog author="nopower@suse.com" date="1728475200">-  Adjust spec to split out rpcd_* binaries into a separate
  sub package; (bsc#1231414).</changelog>
  <changelog author="nopower@suse.com" date="1728993600">- Update to 4.21.1
  * DH reconnect error handling can lead to stale sharemode
    entries; (bso#15624).
  * "inherit permissions = yes" triggers assert() in vfs_default
    when creating a stream; (bso#15695).
  * Samba 4.21.0 broke FreeIPA domain member integration;
    (bso#15715).
  * Missing conversion for msDS-UserTGTLifetime, msDS-
    ComputerTGTLifetime and msDS-ServiceTGTLifetime on "samba-
    tool domain auth policy modify"; (bso#15692).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * Durable handle is not granted when a previous OPEN exists
    with NoOplock; (bso#15649).
  * Durable handle is granted but reconnect fails; (bso#15651).
  * Disconnected durable handles with RH lease should not be
    purged by a new non conflicting open; (bso#15708).
  * net ads testjoin and other commands use the wrong secrets.tdb
    in a cluster; (bso#15714).
  * 4.21 using --with-system-mitkrb5 requires MIT krb5 1.16 as
    rfc 8009 etypes are used; (bso#15726).
  * VFS_OPEN_HOW_WITH_BACKUP_INTENT breaks shadow_copy2;
    (bso#15730).
  * Samba 4.20.0 DLZ module crashes BIND on startup; (bso#15643).
  * Cannot build libldb lmdb backend on a build without AD DC;
    (bso#15721).
  * Consistent log level for sighup handler; (bso#15706).
- Package ceph_new VFS module.
- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated;
  (bso#15699); (bsc#1229684).
- Update to 4.21.0
  * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when
    truncated; (bso#15699).
  * Bad variable definition for ParseTuple causing test failure
    for Smb3UnixTests.test_create_context_reparse; (bso#15702).
  * Add new vfs_ceph module (based on low level API);
    (bso#15686).
  * samba-tool can not load the default configuration file;
    (bso#15698).
  * Crash when readlinkat fails; (bso#15700).
  * Can't add/delete special keys to keytab for nfs, cifs, http
    etc; (bso#15689).
  * Compound SMB2 requests don't return
    NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses
    MacOSX clients; (bso#15696).
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673).
  * ldb_version.h is missing from ldb public library;
    (bso#15690).
  * Can not add/delete special keys to keytab for nfs, cifs, http
    etc; (bso#15689).
  * undefined reference to winbind_lookup_name_ex; (bso#15687).
  * per user veto and hide file syntax is to complex;
    (bso#15688).
- Update to 4.20.4
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673).
- Update to 4.20.3
  * Running samba-bgqd a a standalone systemd service does not
    work; (bso#15683).
  * When claims enabled with heimdal kerberos, unable to log on
    to a Windows computer when user account need to change their
    own password; (bso#15655).
  * Invalid client warning about command line passwords;
    (bso#15671).
  * Version string is truncated in manpages; (bso#15672).
  * cmdline_burn does not always burn secrets; (bso#15674).
  * Samba does not parse SDDL found in defaultSecurityDescriptor
    in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685).
  * The images don\'t build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660).
  * Fix clock skew error message and memory cache clock skew
    recovery; (bso#15676).
  * Heimdal ignores _gsskrb5_decapsulate errors in
    init_sec_context/repl_mutual; (bso#15603).
  * s4:ldap_server: does not support tls channel bindings for
    sasl binds; (bso#15621).
  * CTDB socket output queues may suffer unbounded delays under
    some special conditions; (bso#15678).
- Update samba-tool package to require python3-Markdown also in
  the Heimdal ADDC build
- Fix named crash when using samba's DLZ plugin; (bsc#1224003);
  (bso#15643);
- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]
- Update to 4.20.2
  * vfs_widelinks with DFS shares breaks case insensitivity;
    (bso#15662); (bsc#1213607).
  * Samba build is not reproducible; (bso#13213).
  * ldb qsort might r/w out of bounds with an intransitive
    compare function; (bso#15569).
  * Many qsort() comparison functions are non-transitive, which
    can lead to out-of-bounds access in some circumstances;
    (bso#15625).
  * Need to change gitlab-ci.yml tags in all branches to avoid CI
    bill; (bso#15638).
  * We have added new options --vendor-name and --vendor-patch-
    revision arguments to ./configure to allow distributions and
    packagers to put their name in the Samba version string so
    that when debugging Samba the source of the binary is
    obvious; (bso#15654).
  * CTDB RADOS mutex helper misses namespace support;
    (bso#15665).
  * Dynamic DNS updates with the internal DNS are not working;
    (bso#13019).
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * Anonymous smb3 signing/encryption should be allowed (similar
    to Windows Server 2022); (bso#15412).
  * Panic in dreplsrv_op_pull_source_apply_changes_trigger;
    (bso#15573).
  * s4:nbt_server: does not provide unexpected handling, so
    winbindd can't use nmb requests instead cldap; (bso#15620).
  * winbindd, net ads join and other things don't work on an ipv6
    only host; (bso#15642).
  * Segmentation fault when deleting files in vfs_recycle;
    (bso#15659).
  * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664).
  * "client use kerberos" and --use-kerberos is ignored for the
    machine account; (bso#15666).
  * Regression DFS not working with widelinks = true;
    (bso#15435).
  * samba-gpupdate - Invalid NtVer in netlogon_samlogon_response;
    (bso#15633).
  * idmap_ad creates an incorrect local krb5.conf in case of
    trusted domain lookups; (bso#15653).
  * The images don't build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660).
- Fix non deterministic builds; (bsc#1225754); (bso#13213);
- Update to 4.20.1
  * dns update debug message is too noisy; (bso#15630);
  * Do not fail PAC validation for RFC8009 checksums types; (bso#15635);
  * Improve performance of lookup_groupmem() in idmap_ad; (bso#15605);
  * Smbcacls incorrectly propagates inheritance with Inherit-Only flag; (bso#15636);
  * http library doesn't support 'chunked transfer encoding'; (bso#15611);
  * Provide a systemd service file for the background queue daemon; (bso#15600);
- Update to 4.20.0
  New features:
  * samba-tool user getpassword / syncpasswords ;rounds= change
  * Group Managed service account client-side features
  * New Windows Search Protocol Client
  * Allow 'smbcacls' to save/restore DACLs to file
  * Samba-tool extensions for AD Claims, Authentication Policies and Silos
  * AD DC support for Authentication Silos and Authentication Policies
  * Conditional ACEs and Resource Attribute ACEs
  * Service Witness Protocol [MS-SWN]
  Removed features:
  * Get locally logged on users from utmp
  Fixed bugs:
  * Avoid null-dereference with bad claims; (bso#15606);
  * ndr_pull_security_ace can leave resource attribute ACE coda
    claim struct undefined; (bso#15613);
  * fd_handle_destructor() panics within an smbd_smb2_close() if
    vfs_stat_fsp() fails in fd_close(); (bso#15527);
  * set_nt_acl sometimes fails with NT_STATUS_INVALID_PARAMETER -
    openat() EACCES; (bso#15583);
  * libgpo: Segfault in python bindings; (bso#15599);
  * Samba AD is missing some authentication policy tests;
    (bso#15607);
  * samba-gpupdate: Correctly implement site support; (bso#15588);
  * Remove unsupported "Final" keyword missing from Python 3.6;
    (bso#15575);
  * Additional witness backports for 4.20.0; (bso#15577);
  * Error output with wspsearch; (bso#15579);
  * Packet marshalling push support missing for
    CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and
    CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580);
  * Performance regression for NDR parsing of security
    descriptors; (bso#15574);
  * Build and install man page for wspsearch client utility;
    (bso#15565);
- Update to 4.19.9
  * libldb: performance issue with indexes (ldb 2.8.2 is already
    released); (bso#15590).
  * DH reconnect error handling can lead to stale sharemode
    entries; (bso#15624).
  * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when
    truncated; (bso#15699).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * Compound SMB2 requests don't return
    NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses
    MacOSX clients; (bso#15696).
  * Crash when readlinkat fails; (bso#15700).</changelog>
  <changelog author="nopower@suse.com" date="1729080000">-  Adjust spec to split out rpcd_* binaries into a separate
  sub package; (bsc#1231414).</changelog>
  <changelog author="nopower@suse.com" date="1730376000">- Add placeholder changelog for sle15-sp7; (jsc#PED-11210).</changelog>
  <changelog author="nopower@suse.com" date="1732536000">- Update to 4.21.2
  * smbd fails to correctly check sharemode against OVERWRITE
    dispositions; (bso#15732).
  * Panic in close_directory; (bso#15754).
  * winexe no longer works with samba 4.21; (bso#15752).
  * protocol error - Unclear debug message "pad length mismatch"
    for invalid bind packet; (bso#14356).
  * NetrGetLogonCapabilities QueryLevel 2 needs to be
    implemented; (bso#15425).
  * gss_accept_sec_context() from Heimdal does not imply
    GSS_C_MUTUAL_FLAG with GSS_C_DCE_STYLE; (bso#15740).
  * winbindd should call process_set_title() for locator child;
    (bso#15749).
  * Update CTDB to track all TCP connections to public IP
    addresses; (bso#15320).</changelog>
  <changelog author="nopower@suse.com" date="1733486400">- Update shipped /etc/samba/smb.conf to point to smb.conf
  man page;(bsc#1233880).</changelog>
  <changelog author="nopower@suse.com" date="1736251200">- Update to 4.21.3
  * More possible replication loops against Azure AD;
    (bso#15701).
  * Compound rename from Mac clients can fail with
    NT_STATUS_INTERNAL_ERROR if the file has a lease;
    (bso#15697).
  * vfs crossrename seems not work correctly; (bso#15724).
  * After 'machine password timeout' /etc/krb5.keytab is not
    updated; (bso#6750).
  * Memory leak wbcCtxLookupSid; (bso#15771).
  * Fix heap-user-after-free with association groups;
    (bso#15765).
  * Segfault in vfs_btrfs; (bso#15758).
  * Avoid event failure race when disabling an event script;
    (bso#15755).</changelog>
  <changelog author="nopower@suse.com" date="1739966400">- Update to 4.21.4
  * Increasing slowness of sharesec performance with high number
    of registry shares; (bso#15780).
  * winbindd shows memleak in kerberos_decode_pac; (bso#15782).
  * Creation of GPOs applicable to more than one group is
    impossible with Samba 4.20.0 and later; (bso#15738).
  * Replace `crypt` module in
    python/samba/netcmd/user/readpasswords/common.py;
    (bso#15756).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * Spotlight search results don't show file size and creation
    date; (bso#15796).
  * General improvements for vfs_ceph_new module; (bso#15703).
  * net offlinejoin not working correctly; (bso#15777).
  * net ads create/join/winbind producing unix dysfunctional
    keytabs; (bso#15759).
  * Windows Explorer crashes on S-1-22-* Unix-SIDs when accessing
    security tab; (bso#14213).
  * The values from hresult_errstr_const and hresult_errstr are
    reversed in 4.20 and 4.21; (bso#15769).
  * Kerberos referral tickets are generated for principals in our
    domain if we have a trust to a top level domain; (bso#15778).
  * NETLOGON_NTLMV2_ENABLED is missing in the SamLogon*
    user_flags field; (bso#15783).
  * Regression: stack-use-after-return in crypt_as_best_we_can();
    (bso#15784).
  * libreplace:readline: gcc 15 complains about incompatible
    pointer types; (bso#15788).</changelog>
  <changelog author="nopower@suse.com" date="1743595200">- Update to 4.21.5
  * ldb index cache is too small on known large transactions
    (schemaupgrade, provision); (bso#15795).
  * Enable support for cephfs case insensitive behavior;
    (bso#15822).
  * Subnet based interfaces definition not listening on all
    covered IP addresses; (bso#15823).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727); (bsc#1238063).
  * Remove of file or directory not possible with vfs_acl_tdb;
    (bso#15791).
  * Unable to connect to CephFS subvolume shares with
    vfs_shadow_copy2; (bso#15797).
  * Add async io API from libcephfs to ceph_new VFS module;
    (bso#15810).
  * vfs_ceph_new module does not work with other modules for
    snapshot management; (bso#15818).
  * vfs_ceph_new: Add path based fallback for SMB_VFS_FCHOWN,
    SMB_VFS_FCHMOD and SMB_VFS_FNTIMES; (bso#15834).
  * Incorrect FSF address in ctdb pcp scripts; (bso#15820).
  * "samba-tool domain backup offline" hangs; (bso#15804).</changelog>
  <changelog author="nopower@suse.com" date="1748952000">- Update to 4.21.6
  * Running "gpo manage motd set" twice fails with backtrace;
    (bso#15774).
  * samba-tool gpo backup creates entity backups it can't read;
    (bso#15829).
  * gp_cert_auto_enroll_ext.py has problem unpacking GUIDs with
    prepended 0's; (bso#15839).
  * CVE-2025-0620 [SECURITY] smbd doesn't pick up group
    membership changes when re-authenticating an expired SMB
    session; (bso#15707), (bsc#1244136).
  * Deadlock between two smbd processes; (bso#15767).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727).
  * Wide link issue in samba 4.22; (bso#15841).
  * dcerpcd not able to bind to listening port; (bso#15851).
  * vfs_ceph_snapshots fails to list snapshots for entries at any
    level beyond share root; (bso#15819).
  * CTDB does not put nodes running NFS into grace on graceful
    shutdown; (bso#15858).</changelog>
  <changelog author="scabrero@suse.de" date="1751976000">- Update to 4.21.7
  * Windows security hardening locks out schannel'ed netlogon dc
    calls like netr_DsRGetDCName; (bsc#1246431); (bso#15876);
  * Trust domains are not created; (bso#15680);
  * Startup messages of rpc deamons fills /var/log/messages;
    (bso#15869);</changelog>
</package>
<package pkgid="325596c8406bea264be1f4853f2099dc23c36049de70caefd930e8352ba4ba96" name="libldb2-32bit" arch="x86_64">
  <version epoch="0" ver="4.21.8+git.418.e80c9b2a88c" rel="150700.3.11.2"/>
  <changelog author="nopower@suse.com" date="1701086400">- Update to 4.19.3
  * sid_strings test broken by unix epoch &gt; 1700000000;
    (bso#15520).
  * smbd crashes if asked to return full information on close of
    a stream handle with delete on close disposition set;
    (bso#15487).
  * smbd: fix close order of base_fsp and stream_fsp in
    smb_fname_fsp_destructor(); (bso#15521).
  * Improve logging for failover scenarios; (bso#15499).
  * Files without "read attributes" NFS4 ACL permission are not
    listed in directories; (bso#15093).
  * CVE-2018-14628 [SECURITY] Deleted Object tombstones visible
    in AD LDAP to normal users; (bso#13595).
  * Kerberos TGS-REQ with User2User does not work for normal
    accounts; (bso#15492).
  * vfs_gpfs stat calls fail due to file system permissions;
    (bso#15507).
  * Samba doesn't build with Python 3.12; (bso#15513).</changelog>
  <changelog author="nopower@suse.com" date="1704801600">- Update to 4.19.4
  * net changesecretpw cannot set the machine account password if
    secrets.tdb is empty; (bso#13577).
  * For generating doc, take, if defined, env XML_CATALOG_FILES;
    (bso#15540).
  * Trivial C typo in nsswitch/winbind_nss_netbsd.c; (bso#15541).
  * vfs_linux_xfs is incorrectly named; (bso#15542).
  * systemd stumbled over copyright-message at smbd startup;
    (bso#15377).
  * Following intermediate abolute share-local symlinks is
    broken; (bso#15505).
  * ctdb RELEASE_IP causes a crash in release_ip if a connection
    to a non-public address disconnects first; (bso#15523).
  * shadow_copy2 broken when current fileset's directories are
    removed; (bso#15544).
  * smbd does not detect ctdb public ipv6 addresses for
    multichannel exclusion; (bso#15534).
  * 'force user = localunixuser' doesn't work if 'allow trusted
    domains = no' is set; (bso#15469).
  * smbget debug logging doesn't work; (bso#15525).
  * smget: username in the smburl and interactive password entry
    doesn't work; (bso#15532).
  * smbget auth function doesn't set values for password prompt
    correctly; (bso#15538).
  * Unable to copy and write files from clients to Ceph cluster
    via SMB Linux gateway with Ceph VFS module; (bso#15440).
  * Multichannel refresh network information; (bso#15547).</changelog>
  <changelog author="nopower@suse.com" date="1704888000">- Remove -x from bash shebang update-apparmor-samba-profile;
  (bsc#1218431).</changelog>
  <changelog author="nopower@suse.com" date="1708430400">- Update to 4.19.5
  * Windows 2016 fails to restore previous version of a file from
    a shadow_copy2 snapshot; (bso#13688).
  * Symlinks on AIX are broken in 4.19 (and a few version before
    that); (bso#15549).
  * Fake directory create times has no effect; (bso#12421).
  * ctime mixed up with mtime by smbd; (bso#15550).
  * samba-gpupdate --rsop fails if machine is not in a site;
    (bso#15548).
  * gpupdate: The root cert import when NDES is not available is
    broken; (bso#15557).
  * samba-gpupdate should print a useful message if cepces-submit
    can't be found; (bso#15552).
  * samba-gpupdate logging doesn't work; (bso#15558).
  * smbpasswd reset permissions only if not 0600; (bso#15555).</changelog>
  <changelog author="nopower@suse.com" date="1718884800">- Update to 4.19.7
  * ldb qsort might r/w out of bounds with an intransitive
    compare function (ldb 2.8.1 is already released);
    (bso#15569).
  * Many qsort() comparison functions are non-transitive, which
    can lead to out-of-bounds access in some circumstances (ldb
    2.8.1 is already released); (bso#15625).
  * Need to change gitlab-ci.yml tags in all branches to avoid CI
    bill; (bso#15638).
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * Anonymous smb3 signing/encryption should be allowed (similar
    to Windows Server 2022); (bso#15412).
  * Panic in dreplsrv_op_pull_source_apply_changes_trigger;
    (bso#15573).
  * winbindd, net ads join and other things don't work on an ipv6
    only host; (bso#15642).
  * Smbcacls incorrectly propagates inheritance with Inherit-Only
    flag; (bso#15636).
  * http library doesn't support  'chunked transfer encoding';
    (bso#15611).
- Update to 4.19.6
  * fd_handle_destructor() panics within an smbd_smb2_close() if
    vfs_stat_fsp() fails in fd_close(); (bso#15527).
  * samba-gpupdate: Correctly implement site support;
    (bso#15588).
  * libgpo: Segfault in python bindings; (bso#15599).
  * Packet marshalling push support missing for
    CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and
    CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580).</changelog>
  <changelog author="scabrero@suse.de" date="1722513600">- Fix a crash when joining offline and 'kerberos method' includes
  keytab; (bsc#1228732);
- Fix reading the password from STDIN or environment vars if it
  was already given in the command line; (bsc#1228732);</changelog>
  <changelog author="ddiss@suse.com" date="1725537600">- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated;
  (bso#15699); (bsc#1229684).
- Update to 4.19.8
  * Invalid client warning about command line passwords;
    (bso#15671);
  * Version string is truncated in manpages; (bso#15672);
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673);
  * cmdline_burn does not always burn secrets; (bso#15674);
  * Samba doesn't parse SDDL found in defaultSecurityDescriptor
    in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685);
  * We have added new options --vendor-name and --vendor-patch-
    revision arguments to ./configure to allow distributions and
    packagers to put their name in the Samba version string so that
    when debugging Samba the source of the binary is obvious;
    (bso#15654);
  * When claims enabled with heimdal kerberos, unable to log on to a
    Windows computer when user account need to change their own
    password; (bso#15655);
  * Fix clock skew error message and memory cache clock skew
    recovery; (bso#15676);
  * CTDB RADOS mutex helper misses namespace support; (bso#15665);
  * The images don't build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660);
  * Fix unnecessary delays in CTDB while processing requests under
    high load; (bso#15678);
  * Dynamic DNS updates with the internal DNS are not working;
    (bso#13019);
  * s4:nbt_server: does not provide unexpected handling, so winbindd
    can't use nmb requests instead cldap; (bso#15620);
  * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664);
  * "client use kerberos" and --use-kerberos is ignored for the machine
    account; (bso#15666);
  * Regression DFS not working with widelinks = true; (bso#15435);
  * ntlm_auth make logs more consistent with length check; (bso#15677);</changelog>
  <changelog author="nopower@suse.com" date="1728475200">-  Adjust spec to split out rpcd_* binaries into a separate
  sub package; (bsc#1231414).</changelog>
  <changelog author="nopower@suse.com" date="1728993600">- Update to 4.21.1
  * DH reconnect error handling can lead to stale sharemode
    entries; (bso#15624).
  * "inherit permissions = yes" triggers assert() in vfs_default
    when creating a stream; (bso#15695).
  * Samba 4.21.0 broke FreeIPA domain member integration;
    (bso#15715).
  * Missing conversion for msDS-UserTGTLifetime, msDS-
    ComputerTGTLifetime and msDS-ServiceTGTLifetime on "samba-
    tool domain auth policy modify"; (bso#15692).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * Durable handle is not granted when a previous OPEN exists
    with NoOplock; (bso#15649).
  * Durable handle is granted but reconnect fails; (bso#15651).
  * Disconnected durable handles with RH lease should not be
    purged by a new non conflicting open; (bso#15708).
  * net ads testjoin and other commands use the wrong secrets.tdb
    in a cluster; (bso#15714).
  * 4.21 using --with-system-mitkrb5 requires MIT krb5 1.16 as
    rfc 8009 etypes are used; (bso#15726).
  * VFS_OPEN_HOW_WITH_BACKUP_INTENT breaks shadow_copy2;
    (bso#15730).
  * Samba 4.20.0 DLZ module crashes BIND on startup; (bso#15643).
  * Cannot build libldb lmdb backend on a build without AD DC;
    (bso#15721).
  * Consistent log level for sighup handler; (bso#15706).
- Package ceph_new VFS module.
- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated;
  (bso#15699); (bsc#1229684).
- Update to 4.21.0
  * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when
    truncated; (bso#15699).
  * Bad variable definition for ParseTuple causing test failure
    for Smb3UnixTests.test_create_context_reparse; (bso#15702).
  * Add new vfs_ceph module (based on low level API);
    (bso#15686).
  * samba-tool can not load the default configuration file;
    (bso#15698).
  * Crash when readlinkat fails; (bso#15700).
  * Can't add/delete special keys to keytab for nfs, cifs, http
    etc; (bso#15689).
  * Compound SMB2 requests don't return
    NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses
    MacOSX clients; (bso#15696).
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673).
  * ldb_version.h is missing from ldb public library;
    (bso#15690).
  * Can not add/delete special keys to keytab for nfs, cifs, http
    etc; (bso#15689).
  * undefined reference to winbind_lookup_name_ex; (bso#15687).
  * per user veto and hide file syntax is to complex;
    (bso#15688).
- Update to 4.20.4
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673).
- Update to 4.20.3
  * Running samba-bgqd a a standalone systemd service does not
    work; (bso#15683).
  * When claims enabled with heimdal kerberos, unable to log on
    to a Windows computer when user account need to change their
    own password; (bso#15655).
  * Invalid client warning about command line passwords;
    (bso#15671).
  * Version string is truncated in manpages; (bso#15672).
  * cmdline_burn does not always burn secrets; (bso#15674).
  * Samba does not parse SDDL found in defaultSecurityDescriptor
    in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685).
  * The images don\'t build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660).
  * Fix clock skew error message and memory cache clock skew
    recovery; (bso#15676).
  * Heimdal ignores _gsskrb5_decapsulate errors in
    init_sec_context/repl_mutual; (bso#15603).
  * s4:ldap_server: does not support tls channel bindings for
    sasl binds; (bso#15621).
  * CTDB socket output queues may suffer unbounded delays under
    some special conditions; (bso#15678).
- Update samba-tool package to require python3-Markdown also in
  the Heimdal ADDC build
- Fix named crash when using samba's DLZ plugin; (bsc#1224003);
  (bso#15643);
- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]
- Update to 4.20.2
  * vfs_widelinks with DFS shares breaks case insensitivity;
    (bso#15662); (bsc#1213607).
  * Samba build is not reproducible; (bso#13213).
  * ldb qsort might r/w out of bounds with an intransitive
    compare function; (bso#15569).
  * Many qsort() comparison functions are non-transitive, which
    can lead to out-of-bounds access in some circumstances;
    (bso#15625).
  * Need to change gitlab-ci.yml tags in all branches to avoid CI
    bill; (bso#15638).
  * We have added new options --vendor-name and --vendor-patch-
    revision arguments to ./configure to allow distributions and
    packagers to put their name in the Samba version string so
    that when debugging Samba the source of the binary is
    obvious; (bso#15654).
  * CTDB RADOS mutex helper misses namespace support;
    (bso#15665).
  * Dynamic DNS updates with the internal DNS are not working;
    (bso#13019).
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * Anonymous smb3 signing/encryption should be allowed (similar
    to Windows Server 2022); (bso#15412).
  * Panic in dreplsrv_op_pull_source_apply_changes_trigger;
    (bso#15573).
  * s4:nbt_server: does not provide unexpected handling, so
    winbindd can't use nmb requests instead cldap; (bso#15620).
  * winbindd, net ads join and other things don't work on an ipv6
    only host; (bso#15642).
  * Segmentation fault when deleting files in vfs_recycle;
    (bso#15659).
  * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664).
  * "client use kerberos" and --use-kerberos is ignored for the
    machine account; (bso#15666).
  * Regression DFS not working with widelinks = true;
    (bso#15435).
  * samba-gpupdate - Invalid NtVer in netlogon_samlogon_response;
    (bso#15633).
  * idmap_ad creates an incorrect local krb5.conf in case of
    trusted domain lookups; (bso#15653).
  * The images don't build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660).
- Fix non deterministic builds; (bsc#1225754); (bso#13213);
- Update to 4.20.1
  * dns update debug message is too noisy; (bso#15630);
  * Do not fail PAC validation for RFC8009 checksums types; (bso#15635);
  * Improve performance of lookup_groupmem() in idmap_ad; (bso#15605);
  * Smbcacls incorrectly propagates inheritance with Inherit-Only flag; (bso#15636);
  * http library doesn't support 'chunked transfer encoding'; (bso#15611);
  * Provide a systemd service file for the background queue daemon; (bso#15600);
- Update to 4.20.0
  New features:
  * samba-tool user getpassword / syncpasswords ;rounds= change
  * Group Managed service account client-side features
  * New Windows Search Protocol Client
  * Allow 'smbcacls' to save/restore DACLs to file
  * Samba-tool extensions for AD Claims, Authentication Policies and Silos
  * AD DC support for Authentication Silos and Authentication Policies
  * Conditional ACEs and Resource Attribute ACEs
  * Service Witness Protocol [MS-SWN]
  Removed features:
  * Get locally logged on users from utmp
  Fixed bugs:
  * Avoid null-dereference with bad claims; (bso#15606);
  * ndr_pull_security_ace can leave resource attribute ACE coda
    claim struct undefined; (bso#15613);
  * fd_handle_destructor() panics within an smbd_smb2_close() if
    vfs_stat_fsp() fails in fd_close(); (bso#15527);
  * set_nt_acl sometimes fails with NT_STATUS_INVALID_PARAMETER -
    openat() EACCES; (bso#15583);
  * libgpo: Segfault in python bindings; (bso#15599);
  * Samba AD is missing some authentication policy tests;
    (bso#15607);
  * samba-gpupdate: Correctly implement site support; (bso#15588);
  * Remove unsupported "Final" keyword missing from Python 3.6;
    (bso#15575);
  * Additional witness backports for 4.20.0; (bso#15577);
  * Error output with wspsearch; (bso#15579);
  * Packet marshalling push support missing for
    CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and
    CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580);
  * Performance regression for NDR parsing of security
    descriptors; (bso#15574);
  * Build and install man page for wspsearch client utility;
    (bso#15565);
- Update to 4.19.9
  * libldb: performance issue with indexes (ldb 2.8.2 is already
    released); (bso#15590).
  * DH reconnect error handling can lead to stale sharemode
    entries; (bso#15624).
  * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when
    truncated; (bso#15699).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * Compound SMB2 requests don't return
    NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses
    MacOSX clients; (bso#15696).
  * Crash when readlinkat fails; (bso#15700).</changelog>
  <changelog author="nopower@suse.com" date="1729080000">-  Adjust spec to split out rpcd_* binaries into a separate
  sub package; (bsc#1231414).</changelog>
  <changelog author="nopower@suse.com" date="1730376000">- Add placeholder changelog for sle15-sp7; (jsc#PED-11210).</changelog>
  <changelog author="nopower@suse.com" date="1732536000">- Update to 4.21.2
  * smbd fails to correctly check sharemode against OVERWRITE
    dispositions; (bso#15732).
  * Panic in close_directory; (bso#15754).
  * winexe no longer works with samba 4.21; (bso#15752).
  * protocol error - Unclear debug message "pad length mismatch"
    for invalid bind packet; (bso#14356).
  * NetrGetLogonCapabilities QueryLevel 2 needs to be
    implemented; (bso#15425).
  * gss_accept_sec_context() from Heimdal does not imply
    GSS_C_MUTUAL_FLAG with GSS_C_DCE_STYLE; (bso#15740).
  * winbindd should call process_set_title() for locator child;
    (bso#15749).
  * Update CTDB to track all TCP connections to public IP
    addresses; (bso#15320).</changelog>
  <changelog author="nopower@suse.com" date="1733486400">- Update shipped /etc/samba/smb.conf to point to smb.conf
  man page;(bsc#1233880).</changelog>
  <changelog author="nopower@suse.com" date="1736251200">- Update to 4.21.3
  * More possible replication loops against Azure AD;
    (bso#15701).
  * Compound rename from Mac clients can fail with
    NT_STATUS_INTERNAL_ERROR if the file has a lease;
    (bso#15697).
  * vfs crossrename seems not work correctly; (bso#15724).
  * After 'machine password timeout' /etc/krb5.keytab is not
    updated; (bso#6750).
  * Memory leak wbcCtxLookupSid; (bso#15771).
  * Fix heap-user-after-free with association groups;
    (bso#15765).
  * Segfault in vfs_btrfs; (bso#15758).
  * Avoid event failure race when disabling an event script;
    (bso#15755).</changelog>
  <changelog author="nopower@suse.com" date="1739966400">- Update to 4.21.4
  * Increasing slowness of sharesec performance with high number
    of registry shares; (bso#15780).
  * winbindd shows memleak in kerberos_decode_pac; (bso#15782).
  * Creation of GPOs applicable to more than one group is
    impossible with Samba 4.20.0 and later; (bso#15738).
  * Replace `crypt` module in
    python/samba/netcmd/user/readpasswords/common.py;
    (bso#15756).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * Spotlight search results don't show file size and creation
    date; (bso#15796).
  * General improvements for vfs_ceph_new module; (bso#15703).
  * net offlinejoin not working correctly; (bso#15777).
  * net ads create/join/winbind producing unix dysfunctional
    keytabs; (bso#15759).
  * Windows Explorer crashes on S-1-22-* Unix-SIDs when accessing
    security tab; (bso#14213).
  * The values from hresult_errstr_const and hresult_errstr are
    reversed in 4.20 and 4.21; (bso#15769).
  * Kerberos referral tickets are generated for principals in our
    domain if we have a trust to a top level domain; (bso#15778).
  * NETLOGON_NTLMV2_ENABLED is missing in the SamLogon*
    user_flags field; (bso#15783).
  * Regression: stack-use-after-return in crypt_as_best_we_can();
    (bso#15784).
  * libreplace:readline: gcc 15 complains about incompatible
    pointer types; (bso#15788).</changelog>
  <changelog author="nopower@suse.com" date="1743595200">- Update to 4.21.5
  * ldb index cache is too small on known large transactions
    (schemaupgrade, provision); (bso#15795).
  * Enable support for cephfs case insensitive behavior;
    (bso#15822).
  * Subnet based interfaces definition not listening on all
    covered IP addresses; (bso#15823).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727); (bsc#1238063).
  * Remove of file or directory not possible with vfs_acl_tdb;
    (bso#15791).
  * Unable to connect to CephFS subvolume shares with
    vfs_shadow_copy2; (bso#15797).
  * Add async io API from libcephfs to ceph_new VFS module;
    (bso#15810).
  * vfs_ceph_new module does not work with other modules for
    snapshot management; (bso#15818).
  * vfs_ceph_new: Add path based fallback for SMB_VFS_FCHOWN,
    SMB_VFS_FCHMOD and SMB_VFS_FNTIMES; (bso#15834).
  * Incorrect FSF address in ctdb pcp scripts; (bso#15820).
  * "samba-tool domain backup offline" hangs; (bso#15804).</changelog>
  <changelog author="nopower@suse.com" date="1748952000">- Update to 4.21.6
  * Running "gpo manage motd set" twice fails with backtrace;
    (bso#15774).
  * samba-tool gpo backup creates entity backups it can't read;
    (bso#15829).
  * gp_cert_auto_enroll_ext.py has problem unpacking GUIDs with
    prepended 0's; (bso#15839).
  * CVE-2025-0620 [SECURITY] smbd doesn't pick up group
    membership changes when re-authenticating an expired SMB
    session; (bso#15707), (bsc#1244136).
  * Deadlock between two smbd processes; (bso#15767).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727).
  * Wide link issue in samba 4.22; (bso#15841).
  * dcerpcd not able to bind to listening port; (bso#15851).
  * vfs_ceph_snapshots fails to list snapshots for entries at any
    level beyond share root; (bso#15819).
  * CTDB does not put nodes running NFS into grace on graceful
    shutdown; (bso#15858).</changelog>
  <changelog author="scabrero@suse.de" date="1751976000">- Update to 4.21.7
  * Windows security hardening locks out schannel'ed netlogon dc
    calls like netr_DsRGetDCName; (bsc#1246431); (bso#15876);
  * Trust domains are not created; (bso#15680);
  * Startup messages of rpc deamons fills /var/log/messages;
    (bso#15869);</changelog>
  <changelog author="nopower@suse.com" date="1757419200">- - Update to 4.21.8
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * getpwuid does not shift to new DC when current DC is down;
    (bso#15844).
  * Windows security hardening locks out schannel'ed netlogon dc
    calls like netr_DsRGetDCName; (bso#15876).
  * kinit command is failing with Missing cache Error;
    (bso#15840).
  * Figuring out the DC name from IP address fails and breaks
    fork_domain_child(); (bso#15891).
  * Delayed leader broadcast can block ctdb forever; (bso#15892).
  * 'net ads group' failed to list domain groups; (bso#15900).
  * Apparently there is a conflict between shadow_copy2 module
    and virusfilter (action quarantine); (bso#15663).
  * Fix handling of empty GPO link; (bso#15877).
  * SMB ACL inheritance doesn't work for files created;
    (bso#15880).</changelog>
  <changelog author="nopower@suse.com" date="1758628800">- CVE-2025-9640: fix vfs_streams_xattr uninitialized memory write;
  (bsc#1251279);(bso#15885).
- CVE-2025-10230: fix command Injection in WINS Server Hook Script;
  (bsc#1251280);(bso#15903).</changelog>
</package>
<package pkgid="d8f1ddd616b10d85b608d0c9cd05fb8f13560de29e3d79352a5c1d77225ff6aa" name="libldb2" arch="x86_64">
  <version epoch="0" ver="4.21.10+git.424.0b233794b52" rel="150700.3.14.10"/>
  <changelog author="nopower@suse.com" date="1704801600">- Update to 4.19.4
  * net changesecretpw cannot set the machine account password if
    secrets.tdb is empty; (bso#13577).
  * For generating doc, take, if defined, env XML_CATALOG_FILES;
    (bso#15540).
  * Trivial C typo in nsswitch/winbind_nss_netbsd.c; (bso#15541).
  * vfs_linux_xfs is incorrectly named; (bso#15542).
  * systemd stumbled over copyright-message at smbd startup;
    (bso#15377).
  * Following intermediate abolute share-local symlinks is
    broken; (bso#15505).
  * ctdb RELEASE_IP causes a crash in release_ip if a connection
    to a non-public address disconnects first; (bso#15523).
  * shadow_copy2 broken when current fileset's directories are
    removed; (bso#15544).
  * smbd does not detect ctdb public ipv6 addresses for
    multichannel exclusion; (bso#15534).
  * 'force user = localunixuser' doesn't work if 'allow trusted
    domains = no' is set; (bso#15469).
  * smbget debug logging doesn't work; (bso#15525).
  * smget: username in the smburl and interactive password entry
    doesn't work; (bso#15532).
  * smbget auth function doesn't set values for password prompt
    correctly; (bso#15538).
  * Unable to copy and write files from clients to Ceph cluster
    via SMB Linux gateway with Ceph VFS module; (bso#15440).
  * Multichannel refresh network information; (bso#15547).</changelog>
  <changelog author="nopower@suse.com" date="1704888000">- Remove -x from bash shebang update-apparmor-samba-profile;
  (bsc#1218431).</changelog>
  <changelog author="nopower@suse.com" date="1708430400">- Update to 4.19.5
  * Windows 2016 fails to restore previous version of a file from
    a shadow_copy2 snapshot; (bso#13688).
  * Symlinks on AIX are broken in 4.19 (and a few version before
    that); (bso#15549).
  * Fake directory create times has no effect; (bso#12421).
  * ctime mixed up with mtime by smbd; (bso#15550).
  * samba-gpupdate --rsop fails if machine is not in a site;
    (bso#15548).
  * gpupdate: The root cert import when NDES is not available is
    broken; (bso#15557).
  * samba-gpupdate should print a useful message if cepces-submit
    can't be found; (bso#15552).
  * samba-gpupdate logging doesn't work; (bso#15558).
  * smbpasswd reset permissions only if not 0600; (bso#15555).</changelog>
  <changelog author="nopower@suse.com" date="1718884800">- Update to 4.19.7
  * ldb qsort might r/w out of bounds with an intransitive
    compare function (ldb 2.8.1 is already released);
    (bso#15569).
  * Many qsort() comparison functions are non-transitive, which
    can lead to out-of-bounds access in some circumstances (ldb
    2.8.1 is already released); (bso#15625).
  * Need to change gitlab-ci.yml tags in all branches to avoid CI
    bill; (bso#15638).
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * Anonymous smb3 signing/encryption should be allowed (similar
    to Windows Server 2022); (bso#15412).
  * Panic in dreplsrv_op_pull_source_apply_changes_trigger;
    (bso#15573).
  * winbindd, net ads join and other things don't work on an ipv6
    only host; (bso#15642).
  * Smbcacls incorrectly propagates inheritance with Inherit-Only
    flag; (bso#15636).
  * http library doesn't support  'chunked transfer encoding';
    (bso#15611).
- Update to 4.19.6
  * fd_handle_destructor() panics within an smbd_smb2_close() if
    vfs_stat_fsp() fails in fd_close(); (bso#15527).
  * samba-gpupdate: Correctly implement site support;
    (bso#15588).
  * libgpo: Segfault in python bindings; (bso#15599).
  * Packet marshalling push support missing for
    CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and
    CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580).</changelog>
  <changelog author="scabrero@suse.de" date="1722513600">- Fix a crash when joining offline and 'kerberos method' includes
  keytab; (bsc#1228732);
- Fix reading the password from STDIN or environment vars if it
  was already given in the command line; (bsc#1228732);</changelog>
  <changelog author="ddiss@suse.com" date="1725537600">- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated;
  (bso#15699); (bsc#1229684).
- Update to 4.19.8
  * Invalid client warning about command line passwords;
    (bso#15671);
  * Version string is truncated in manpages; (bso#15672);
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673);
  * cmdline_burn does not always burn secrets; (bso#15674);
  * Samba doesn't parse SDDL found in defaultSecurityDescriptor
    in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685);
  * We have added new options --vendor-name and --vendor-patch-
    revision arguments to ./configure to allow distributions and
    packagers to put their name in the Samba version string so that
    when debugging Samba the source of the binary is obvious;
    (bso#15654);
  * When claims enabled with heimdal kerberos, unable to log on to a
    Windows computer when user account need to change their own
    password; (bso#15655);
  * Fix clock skew error message and memory cache clock skew
    recovery; (bso#15676);
  * CTDB RADOS mutex helper misses namespace support; (bso#15665);
  * The images don't build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660);
  * Fix unnecessary delays in CTDB while processing requests under
    high load; (bso#15678);
  * Dynamic DNS updates with the internal DNS are not working;
    (bso#13019);
  * s4:nbt_server: does not provide unexpected handling, so winbindd
    can't use nmb requests instead cldap; (bso#15620);
  * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664);
  * "client use kerberos" and --use-kerberos is ignored for the machine
    account; (bso#15666);
  * Regression DFS not working with widelinks = true; (bso#15435);
  * ntlm_auth make logs more consistent with length check; (bso#15677);</changelog>
  <changelog author="nopower@suse.com" date="1728475200">-  Adjust spec to split out rpcd_* binaries into a separate
  sub package; (bsc#1231414).</changelog>
  <changelog author="nopower@suse.com" date="1728993600">- Update to 4.21.1
  * DH reconnect error handling can lead to stale sharemode
    entries; (bso#15624).
  * "inherit permissions = yes" triggers assert() in vfs_default
    when creating a stream; (bso#15695).
  * Samba 4.21.0 broke FreeIPA domain member integration;
    (bso#15715).
  * Missing conversion for msDS-UserTGTLifetime, msDS-
    ComputerTGTLifetime and msDS-ServiceTGTLifetime on "samba-
    tool domain auth policy modify"; (bso#15692).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * Durable handle is not granted when a previous OPEN exists
    with NoOplock; (bso#15649).
  * Durable handle is granted but reconnect fails; (bso#15651).
  * Disconnected durable handles with RH lease should not be
    purged by a new non conflicting open; (bso#15708).
  * net ads testjoin and other commands use the wrong secrets.tdb
    in a cluster; (bso#15714).
  * 4.21 using --with-system-mitkrb5 requires MIT krb5 1.16 as
    rfc 8009 etypes are used; (bso#15726).
  * VFS_OPEN_HOW_WITH_BACKUP_INTENT breaks shadow_copy2;
    (bso#15730).
  * Samba 4.20.0 DLZ module crashes BIND on startup; (bso#15643).
  * Cannot build libldb lmdb backend on a build without AD DC;
    (bso#15721).
  * Consistent log level for sighup handler; (bso#15706).
- Package ceph_new VFS module.
- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated;
  (bso#15699); (bsc#1229684).
- Update to 4.21.0
  * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when
    truncated; (bso#15699).
  * Bad variable definition for ParseTuple causing test failure
    for Smb3UnixTests.test_create_context_reparse; (bso#15702).
  * Add new vfs_ceph module (based on low level API);
    (bso#15686).
  * samba-tool can not load the default configuration file;
    (bso#15698).
  * Crash when readlinkat fails; (bso#15700).
  * Can't add/delete special keys to keytab for nfs, cifs, http
    etc; (bso#15689).
  * Compound SMB2 requests don't return
    NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses
    MacOSX clients; (bso#15696).
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673).
  * ldb_version.h is missing from ldb public library;
    (bso#15690).
  * Can not add/delete special keys to keytab for nfs, cifs, http
    etc; (bso#15689).
  * undefined reference to winbind_lookup_name_ex; (bso#15687).
  * per user veto and hide file syntax is to complex;
    (bso#15688).
- Update to 4.20.4
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673).
- Update to 4.20.3
  * Running samba-bgqd a a standalone systemd service does not
    work; (bso#15683).
  * When claims enabled with heimdal kerberos, unable to log on
    to a Windows computer when user account need to change their
    own password; (bso#15655).
  * Invalid client warning about command line passwords;
    (bso#15671).
  * Version string is truncated in manpages; (bso#15672).
  * cmdline_burn does not always burn secrets; (bso#15674).
  * Samba does not parse SDDL found in defaultSecurityDescriptor
    in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685).
  * The images don\'t build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660).
  * Fix clock skew error message and memory cache clock skew
    recovery; (bso#15676).
  * Heimdal ignores _gsskrb5_decapsulate errors in
    init_sec_context/repl_mutual; (bso#15603).
  * s4:ldap_server: does not support tls channel bindings for
    sasl binds; (bso#15621).
  * CTDB socket output queues may suffer unbounded delays under
    some special conditions; (bso#15678).
- Update samba-tool package to require python3-Markdown also in
  the Heimdal ADDC build
- Fix named crash when using samba's DLZ plugin; (bsc#1224003);
  (bso#15643);
- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]
- Update to 4.20.2
  * vfs_widelinks with DFS shares breaks case insensitivity;
    (bso#15662); (bsc#1213607).
  * Samba build is not reproducible; (bso#13213).
  * ldb qsort might r/w out of bounds with an intransitive
    compare function; (bso#15569).
  * Many qsort() comparison functions are non-transitive, which
    can lead to out-of-bounds access in some circumstances;
    (bso#15625).
  * Need to change gitlab-ci.yml tags in all branches to avoid CI
    bill; (bso#15638).
  * We have added new options --vendor-name and --vendor-patch-
    revision arguments to ./configure to allow distributions and
    packagers to put their name in the Samba version string so
    that when debugging Samba the source of the binary is
    obvious; (bso#15654).
  * CTDB RADOS mutex helper misses namespace support;
    (bso#15665).
  * Dynamic DNS updates with the internal DNS are not working;
    (bso#13019).
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * Anonymous smb3 signing/encryption should be allowed (similar
    to Windows Server 2022); (bso#15412).
  * Panic in dreplsrv_op_pull_source_apply_changes_trigger;
    (bso#15573).
  * s4:nbt_server: does not provide unexpected handling, so
    winbindd can't use nmb requests instead cldap; (bso#15620).
  * winbindd, net ads join and other things don't work on an ipv6
    only host; (bso#15642).
  * Segmentation fault when deleting files in vfs_recycle;
    (bso#15659).
  * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664).
  * "client use kerberos" and --use-kerberos is ignored for the
    machine account; (bso#15666).
  * Regression DFS not working with widelinks = true;
    (bso#15435).
  * samba-gpupdate - Invalid NtVer in netlogon_samlogon_response;
    (bso#15633).
  * idmap_ad creates an incorrect local krb5.conf in case of
    trusted domain lookups; (bso#15653).
  * The images don't build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660).
- Fix non deterministic builds; (bsc#1225754); (bso#13213);
- Update to 4.20.1
  * dns update debug message is too noisy; (bso#15630);
  * Do not fail PAC validation for RFC8009 checksums types; (bso#15635);
  * Improve performance of lookup_groupmem() in idmap_ad; (bso#15605);
  * Smbcacls incorrectly propagates inheritance with Inherit-Only flag; (bso#15636);
  * http library doesn't support 'chunked transfer encoding'; (bso#15611);
  * Provide a systemd service file for the background queue daemon; (bso#15600);
- Update to 4.20.0
  New features:
  * samba-tool user getpassword / syncpasswords ;rounds= change
  * Group Managed service account client-side features
  * New Windows Search Protocol Client
  * Allow 'smbcacls' to save/restore DACLs to file
  * Samba-tool extensions for AD Claims, Authentication Policies and Silos
  * AD DC support for Authentication Silos and Authentication Policies
  * Conditional ACEs and Resource Attribute ACEs
  * Service Witness Protocol [MS-SWN]
  Removed features:
  * Get locally logged on users from utmp
  Fixed bugs:
  * Avoid null-dereference with bad claims; (bso#15606);
  * ndr_pull_security_ace can leave resource attribute ACE coda
    claim struct undefined; (bso#15613);
  * fd_handle_destructor() panics within an smbd_smb2_close() if
    vfs_stat_fsp() fails in fd_close(); (bso#15527);
  * set_nt_acl sometimes fails with NT_STATUS_INVALID_PARAMETER -
    openat() EACCES; (bso#15583);
  * libgpo: Segfault in python bindings; (bso#15599);
  * Samba AD is missing some authentication policy tests;
    (bso#15607);
  * samba-gpupdate: Correctly implement site support; (bso#15588);
  * Remove unsupported "Final" keyword missing from Python 3.6;
    (bso#15575);
  * Additional witness backports for 4.20.0; (bso#15577);
  * Error output with wspsearch; (bso#15579);
  * Packet marshalling push support missing for
    CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and
    CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580);
  * Performance regression for NDR parsing of security
    descriptors; (bso#15574);
  * Build and install man page for wspsearch client utility;
    (bso#15565);
- Update to 4.19.9
  * libldb: performance issue with indexes (ldb 2.8.2 is already
    released); (bso#15590).
  * DH reconnect error handling can lead to stale sharemode
    entries; (bso#15624).
  * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when
    truncated; (bso#15699).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * Compound SMB2 requests don't return
    NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses
    MacOSX clients; (bso#15696).
  * Crash when readlinkat fails; (bso#15700).</changelog>
  <changelog author="nopower@suse.com" date="1729080000">-  Adjust spec to split out rpcd_* binaries into a separate
  sub package; (bsc#1231414).</changelog>
  <changelog author="nopower@suse.com" date="1730376000">- Add placeholder changelog for sle15-sp7; (jsc#PED-11210).</changelog>
  <changelog author="nopower@suse.com" date="1732536000">- Update to 4.21.2
  * smbd fails to correctly check sharemode against OVERWRITE
    dispositions; (bso#15732).
  * Panic in close_directory; (bso#15754).
  * winexe no longer works with samba 4.21; (bso#15752).
  * protocol error - Unclear debug message "pad length mismatch"
    for invalid bind packet; (bso#14356).
  * NetrGetLogonCapabilities QueryLevel 2 needs to be
    implemented; (bso#15425).
  * gss_accept_sec_context() from Heimdal does not imply
    GSS_C_MUTUAL_FLAG with GSS_C_DCE_STYLE; (bso#15740).
  * winbindd should call process_set_title() for locator child;
    (bso#15749).
  * Update CTDB to track all TCP connections to public IP
    addresses; (bso#15320).</changelog>
  <changelog author="nopower@suse.com" date="1733486400">- Update shipped /etc/samba/smb.conf to point to smb.conf
  man page;(bsc#1233880).</changelog>
  <changelog author="nopower@suse.com" date="1736251200">- Update to 4.21.3
  * More possible replication loops against Azure AD;
    (bso#15701).
  * Compound rename from Mac clients can fail with
    NT_STATUS_INTERNAL_ERROR if the file has a lease;
    (bso#15697).
  * vfs crossrename seems not work correctly; (bso#15724).
  * After 'machine password timeout' /etc/krb5.keytab is not
    updated; (bso#6750).
  * Memory leak wbcCtxLookupSid; (bso#15771).
  * Fix heap-user-after-free with association groups;
    (bso#15765).
  * Segfault in vfs_btrfs; (bso#15758).
  * Avoid event failure race when disabling an event script;
    (bso#15755).</changelog>
  <changelog author="nopower@suse.com" date="1739966400">- Update to 4.21.4
  * Increasing slowness of sharesec performance with high number
    of registry shares; (bso#15780).
  * winbindd shows memleak in kerberos_decode_pac; (bso#15782).
  * Creation of GPOs applicable to more than one group is
    impossible with Samba 4.20.0 and later; (bso#15738).
  * Replace `crypt` module in
    python/samba/netcmd/user/readpasswords/common.py;
    (bso#15756).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * Spotlight search results don't show file size and creation
    date; (bso#15796).
  * General improvements for vfs_ceph_new module; (bso#15703).
  * net offlinejoin not working correctly; (bso#15777).
  * net ads create/join/winbind producing unix dysfunctional
    keytabs; (bso#15759).
  * Windows Explorer crashes on S-1-22-* Unix-SIDs when accessing
    security tab; (bso#14213).
  * The values from hresult_errstr_const and hresult_errstr are
    reversed in 4.20 and 4.21; (bso#15769).
  * Kerberos referral tickets are generated for principals in our
    domain if we have a trust to a top level domain; (bso#15778).
  * NETLOGON_NTLMV2_ENABLED is missing in the SamLogon*
    user_flags field; (bso#15783).
  * Regression: stack-use-after-return in crypt_as_best_we_can();
    (bso#15784).
  * libreplace:readline: gcc 15 complains about incompatible
    pointer types; (bso#15788).</changelog>
  <changelog author="nopower@suse.com" date="1743595200">- Update to 4.21.5
  * ldb index cache is too small on known large transactions
    (schemaupgrade, provision); (bso#15795).
  * Enable support for cephfs case insensitive behavior;
    (bso#15822).
  * Subnet based interfaces definition not listening on all
    covered IP addresses; (bso#15823).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727); (bsc#1238063).
  * Remove of file or directory not possible with vfs_acl_tdb;
    (bso#15791).
  * Unable to connect to CephFS subvolume shares with
    vfs_shadow_copy2; (bso#15797).
  * Add async io API from libcephfs to ceph_new VFS module;
    (bso#15810).
  * vfs_ceph_new module does not work with other modules for
    snapshot management; (bso#15818).
  * vfs_ceph_new: Add path based fallback for SMB_VFS_FCHOWN,
    SMB_VFS_FCHMOD and SMB_VFS_FNTIMES; (bso#15834).
  * Incorrect FSF address in ctdb pcp scripts; (bso#15820).
  * "samba-tool domain backup offline" hangs; (bso#15804).</changelog>
  <changelog author="nopower@suse.com" date="1748952000">- Update to 4.21.6
  * Running "gpo manage motd set" twice fails with backtrace;
    (bso#15774).
  * samba-tool gpo backup creates entity backups it can't read;
    (bso#15829).
  * gp_cert_auto_enroll_ext.py has problem unpacking GUIDs with
    prepended 0's; (bso#15839).
  * CVE-2025-0620 [SECURITY] smbd doesn't pick up group
    membership changes when re-authenticating an expired SMB
    session; (bso#15707), (bsc#1244136).
  * Deadlock between two smbd processes; (bso#15767).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727).
  * Wide link issue in samba 4.22; (bso#15841).
  * dcerpcd not able to bind to listening port; (bso#15851).
  * vfs_ceph_snapshots fails to list snapshots for entries at any
    level beyond share root; (bso#15819).
  * CTDB does not put nodes running NFS into grace on graceful
    shutdown; (bso#15858).</changelog>
  <changelog author="scabrero@suse.de" date="1751976000">- Update to 4.21.7
  * Windows security hardening locks out schannel'ed netlogon dc
    calls like netr_DsRGetDCName; (bsc#1246431); (bso#15876);
  * Trust domains are not created; (bso#15680);
  * Startup messages of rpc deamons fills /var/log/messages;
    (bso#15869);</changelog>
  <changelog author="nopower@suse.com" date="1757419200">- - Update to 4.21.8
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * getpwuid does not shift to new DC when current DC is down;
    (bso#15844).
  * Windows security hardening locks out schannel'ed netlogon dc
    calls like netr_DsRGetDCName; (bso#15876).
  * kinit command is failing with Missing cache Error;
    (bso#15840).
  * Figuring out the DC name from IP address fails and breaks
    fork_domain_child(); (bso#15891).
  * Delayed leader broadcast can block ctdb forever; (bso#15892).
  * 'net ads group' failed to list domain groups; (bso#15900).
  * Apparently there is a conflict between shadow_copy2 module
    and virusfilter (action quarantine); (bso#15663).
  * Fix handling of empty GPO link; (bso#15877).
  * SMB ACL inheritance doesn't work for files created;
    (bso#15880).</changelog>
  <changelog author="nopower@suse.com" date="1758628800">- CVE-2025-9640: fix vfs_streams_xattr uninitialized memory write;
  (bsc#1251279);(bso#15885).
- CVE-2025-10230: fix command Injection in WINS Server Hook Script;
  (bsc#1251280);(bso#15903).</changelog>
  <changelog author="nopower@suse.com" date="1763553600">- Update to 4.21.10
  * Crash in ctdbd on failed updateip; (bso#15935).
  * samba-4.21 fails to join AD when multiple DCs are returned;
    (bso#15905).
  * vfs_ceph_new should not use ceph_ll_nonblocking_readv_writev
    for fsync_send; (bso#15919).
  * CTDB_SOCKET can be used even when CTDB_TEST_MODE is not set;
    (bso#15921).
- Update to 4.21.9
  * CVE-2025-10230; (bso#15903); (bsc#1251279).
  * CVE-2025-9640; (bso#15885); (bsc#1251280).</changelog>
</package>
<package pkgid="6b33ae3e7c7730be742362d39fc2c787d498566a10064c951a00090094ea29b6" name="libldb2" arch="x86_64">
  <version epoch="0" ver="4.21.10+git.449.dcced69e1b5" rel="150700.3.19.1"/>
  <changelog author="nopower@suse.com" date="1718884800">- Update to 4.19.7
  * ldb qsort might r/w out of bounds with an intransitive
    compare function (ldb 2.8.1 is already released);
    (bso#15569).
  * Many qsort() comparison functions are non-transitive, which
    can lead to out-of-bounds access in some circumstances (ldb
    2.8.1 is already released); (bso#15625).
  * Need to change gitlab-ci.yml tags in all branches to avoid CI
    bill; (bso#15638).
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * Anonymous smb3 signing/encryption should be allowed (similar
    to Windows Server 2022); (bso#15412).
  * Panic in dreplsrv_op_pull_source_apply_changes_trigger;
    (bso#15573).
  * winbindd, net ads join and other things don't work on an ipv6
    only host; (bso#15642).
  * Smbcacls incorrectly propagates inheritance with Inherit-Only
    flag; (bso#15636).
  * http library doesn't support  'chunked transfer encoding';
    (bso#15611).
- Update to 4.19.6
  * fd_handle_destructor() panics within an smbd_smb2_close() if
    vfs_stat_fsp() fails in fd_close(); (bso#15527).
  * samba-gpupdate: Correctly implement site support;
    (bso#15588).
  * libgpo: Segfault in python bindings; (bso#15599).
  * Packet marshalling push support missing for
    CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and
    CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580).</changelog>
  <changelog author="scabrero@suse.de" date="1722513600">- Fix a crash when joining offline and 'kerberos method' includes
  keytab; (bsc#1228732);
- Fix reading the password from STDIN or environment vars if it
  was already given in the command line; (bsc#1228732);</changelog>
  <changelog author="ddiss@suse.com" date="1725537600">- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated;
  (bso#15699); (bsc#1229684).
- Update to 4.19.8
  * Invalid client warning about command line passwords;
    (bso#15671);
  * Version string is truncated in manpages; (bso#15672);
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673);
  * cmdline_burn does not always burn secrets; (bso#15674);
  * Samba doesn't parse SDDL found in defaultSecurityDescriptor
    in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685);
  * We have added new options --vendor-name and --vendor-patch-
    revision arguments to ./configure to allow distributions and
    packagers to put their name in the Samba version string so that
    when debugging Samba the source of the binary is obvious;
    (bso#15654);
  * When claims enabled with heimdal kerberos, unable to log on to a
    Windows computer when user account need to change their own
    password; (bso#15655);
  * Fix clock skew error message and memory cache clock skew
    recovery; (bso#15676);
  * CTDB RADOS mutex helper misses namespace support; (bso#15665);
  * The images don't build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660);
  * Fix unnecessary delays in CTDB while processing requests under
    high load; (bso#15678);
  * Dynamic DNS updates with the internal DNS are not working;
    (bso#13019);
  * s4:nbt_server: does not provide unexpected handling, so winbindd
    can't use nmb requests instead cldap; (bso#15620);
  * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664);
  * "client use kerberos" and --use-kerberos is ignored for the machine
    account; (bso#15666);
  * Regression DFS not working with widelinks = true; (bso#15435);
  * ntlm_auth make logs more consistent with length check; (bso#15677);</changelog>
  <changelog author="nopower@suse.com" date="1728475200">-  Adjust spec to split out rpcd_* binaries into a separate
  sub package; (bsc#1231414).</changelog>
  <changelog author="nopower@suse.com" date="1728993600">- Update to 4.21.1
  * DH reconnect error handling can lead to stale sharemode
    entries; (bso#15624).
  * "inherit permissions = yes" triggers assert() in vfs_default
    when creating a stream; (bso#15695).
  * Samba 4.21.0 broke FreeIPA domain member integration;
    (bso#15715).
  * Missing conversion for msDS-UserTGTLifetime, msDS-
    ComputerTGTLifetime and msDS-ServiceTGTLifetime on "samba-
    tool domain auth policy modify"; (bso#15692).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * Durable handle is not granted when a previous OPEN exists
    with NoOplock; (bso#15649).
  * Durable handle is granted but reconnect fails; (bso#15651).
  * Disconnected durable handles with RH lease should not be
    purged by a new non conflicting open; (bso#15708).
  * net ads testjoin and other commands use the wrong secrets.tdb
    in a cluster; (bso#15714).
  * 4.21 using --with-system-mitkrb5 requires MIT krb5 1.16 as
    rfc 8009 etypes are used; (bso#15726).
  * VFS_OPEN_HOW_WITH_BACKUP_INTENT breaks shadow_copy2;
    (bso#15730).
  * Samba 4.20.0 DLZ module crashes BIND on startup; (bso#15643).
  * Cannot build libldb lmdb backend on a build without AD DC;
    (bso#15721).
  * Consistent log level for sighup handler; (bso#15706).
- Package ceph_new VFS module.
- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated;
  (bso#15699); (bsc#1229684).
- Update to 4.21.0
  * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when
    truncated; (bso#15699).
  * Bad variable definition for ParseTuple causing test failure
    for Smb3UnixTests.test_create_context_reparse; (bso#15702).
  * Add new vfs_ceph module (based on low level API);
    (bso#15686).
  * samba-tool can not load the default configuration file;
    (bso#15698).
  * Crash when readlinkat fails; (bso#15700).
  * Can't add/delete special keys to keytab for nfs, cifs, http
    etc; (bso#15689).
  * Compound SMB2 requests don't return
    NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses
    MacOSX clients; (bso#15696).
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673).
  * ldb_version.h is missing from ldb public library;
    (bso#15690).
  * Can not add/delete special keys to keytab for nfs, cifs, http
    etc; (bso#15689).
  * undefined reference to winbind_lookup_name_ex; (bso#15687).
  * per user veto and hide file syntax is to complex;
    (bso#15688).
- Update to 4.20.4
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673).
- Update to 4.20.3
  * Running samba-bgqd a a standalone systemd service does not
    work; (bso#15683).
  * When claims enabled with heimdal kerberos, unable to log on
    to a Windows computer when user account need to change their
    own password; (bso#15655).
  * Invalid client warning about command line passwords;
    (bso#15671).
  * Version string is truncated in manpages; (bso#15672).
  * cmdline_burn does not always burn secrets; (bso#15674).
  * Samba does not parse SDDL found in defaultSecurityDescriptor
    in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685).
  * The images don\'t build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660).
  * Fix clock skew error message and memory cache clock skew
    recovery; (bso#15676).
  * Heimdal ignores _gsskrb5_decapsulate errors in
    init_sec_context/repl_mutual; (bso#15603).
  * s4:ldap_server: does not support tls channel bindings for
    sasl binds; (bso#15621).
  * CTDB socket output queues may suffer unbounded delays under
    some special conditions; (bso#15678).
- Update samba-tool package to require python3-Markdown also in
  the Heimdal ADDC build
- Fix named crash when using samba's DLZ plugin; (bsc#1224003);
  (bso#15643);
- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]
- Update to 4.20.2
  * vfs_widelinks with DFS shares breaks case insensitivity;
    (bso#15662); (bsc#1213607).
  * Samba build is not reproducible; (bso#13213).
  * ldb qsort might r/w out of bounds with an intransitive
    compare function; (bso#15569).
  * Many qsort() comparison functions are non-transitive, which
    can lead to out-of-bounds access in some circumstances;
    (bso#15625).
  * Need to change gitlab-ci.yml tags in all branches to avoid CI
    bill; (bso#15638).
  * We have added new options --vendor-name and --vendor-patch-
    revision arguments to ./configure to allow distributions and
    packagers to put their name in the Samba version string so
    that when debugging Samba the source of the binary is
    obvious; (bso#15654).
  * CTDB RADOS mutex helper misses namespace support;
    (bso#15665).
  * Dynamic DNS updates with the internal DNS are not working;
    (bso#13019).
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * Anonymous smb3 signing/encryption should be allowed (similar
    to Windows Server 2022); (bso#15412).
  * Panic in dreplsrv_op_pull_source_apply_changes_trigger;
    (bso#15573).
  * s4:nbt_server: does not provide unexpected handling, so
    winbindd can't use nmb requests instead cldap; (bso#15620).
  * winbindd, net ads join and other things don't work on an ipv6
    only host; (bso#15642).
  * Segmentation fault when deleting files in vfs_recycle;
    (bso#15659).
  * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664).
  * "client use kerberos" and --use-kerberos is ignored for the
    machine account; (bso#15666).
  * Regression DFS not working with widelinks = true;
    (bso#15435).
  * samba-gpupdate - Invalid NtVer in netlogon_samlogon_response;
    (bso#15633).
  * idmap_ad creates an incorrect local krb5.conf in case of
    trusted domain lookups; (bso#15653).
  * The images don't build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660).
- Fix non deterministic builds; (bsc#1225754); (bso#13213);
- Update to 4.20.1
  * dns update debug message is too noisy; (bso#15630);
  * Do not fail PAC validation for RFC8009 checksums types; (bso#15635);
  * Improve performance of lookup_groupmem() in idmap_ad; (bso#15605);
  * Smbcacls incorrectly propagates inheritance with Inherit-Only flag; (bso#15636);
  * http library doesn't support 'chunked transfer encoding'; (bso#15611);
  * Provide a systemd service file for the background queue daemon; (bso#15600);
- Update to 4.20.0
  New features:
  * samba-tool user getpassword / syncpasswords ;rounds= change
  * Group Managed service account client-side features
  * New Windows Search Protocol Client
  * Allow 'smbcacls' to save/restore DACLs to file
  * Samba-tool extensions for AD Claims, Authentication Policies and Silos
  * AD DC support for Authentication Silos and Authentication Policies
  * Conditional ACEs and Resource Attribute ACEs
  * Service Witness Protocol [MS-SWN]
  Removed features:
  * Get locally logged on users from utmp
  Fixed bugs:
  * Avoid null-dereference with bad claims; (bso#15606);
  * ndr_pull_security_ace can leave resource attribute ACE coda
    claim struct undefined; (bso#15613);
  * fd_handle_destructor() panics within an smbd_smb2_close() if
    vfs_stat_fsp() fails in fd_close(); (bso#15527);
  * set_nt_acl sometimes fails with NT_STATUS_INVALID_PARAMETER -
    openat() EACCES; (bso#15583);
  * libgpo: Segfault in python bindings; (bso#15599);
  * Samba AD is missing some authentication policy tests;
    (bso#15607);
  * samba-gpupdate: Correctly implement site support; (bso#15588);
  * Remove unsupported "Final" keyword missing from Python 3.6;
    (bso#15575);
  * Additional witness backports for 4.20.0; (bso#15577);
  * Error output with wspsearch; (bso#15579);
  * Packet marshalling push support missing for
    CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and
    CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580);
  * Performance regression for NDR parsing of security
    descriptors; (bso#15574);
  * Build and install man page for wspsearch client utility;
    (bso#15565);
- Update to 4.19.9
  * libldb: performance issue with indexes (ldb 2.8.2 is already
    released); (bso#15590).
  * DH reconnect error handling can lead to stale sharemode
    entries; (bso#15624).
  * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when
    truncated; (bso#15699).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * Compound SMB2 requests don't return
    NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses
    MacOSX clients; (bso#15696).
  * Crash when readlinkat fails; (bso#15700).</changelog>
  <changelog author="nopower@suse.com" date="1729080000">-  Adjust spec to split out rpcd_* binaries into a separate
  sub package; (bsc#1231414).</changelog>
  <changelog author="nopower@suse.com" date="1730376000">- Add placeholder changelog for sle15-sp7; (jsc#PED-11210).</changelog>
  <changelog author="nopower@suse.com" date="1732536000">- Update to 4.21.2
  * smbd fails to correctly check sharemode against OVERWRITE
    dispositions; (bso#15732).
  * Panic in close_directory; (bso#15754).
  * winexe no longer works with samba 4.21; (bso#15752).
  * protocol error - Unclear debug message "pad length mismatch"
    for invalid bind packet; (bso#14356).
  * NetrGetLogonCapabilities QueryLevel 2 needs to be
    implemented; (bso#15425).
  * gss_accept_sec_context() from Heimdal does not imply
    GSS_C_MUTUAL_FLAG with GSS_C_DCE_STYLE; (bso#15740).
  * winbindd should call process_set_title() for locator child;
    (bso#15749).
  * Update CTDB to track all TCP connections to public IP
    addresses; (bso#15320).</changelog>
  <changelog author="nopower@suse.com" date="1733486400">- Update shipped /etc/samba/smb.conf to point to smb.conf
  man page;(bsc#1233880).</changelog>
  <changelog author="nopower@suse.com" date="1736251200">- Update to 4.21.3
  * More possible replication loops against Azure AD;
    (bso#15701).
  * Compound rename from Mac clients can fail with
    NT_STATUS_INTERNAL_ERROR if the file has a lease;
    (bso#15697).
  * vfs crossrename seems not work correctly; (bso#15724).
  * After 'machine password timeout' /etc/krb5.keytab is not
    updated; (bso#6750).
  * Memory leak wbcCtxLookupSid; (bso#15771).
  * Fix heap-user-after-free with association groups;
    (bso#15765).
  * Segfault in vfs_btrfs; (bso#15758).
  * Avoid event failure race when disabling an event script;
    (bso#15755).</changelog>
  <changelog author="nopower@suse.com" date="1739966400">- Update to 4.21.4
  * Increasing slowness of sharesec performance with high number
    of registry shares; (bso#15780).
  * winbindd shows memleak in kerberos_decode_pac; (bso#15782).
  * Creation of GPOs applicable to more than one group is
    impossible with Samba 4.20.0 and later; (bso#15738).
  * Replace `crypt` module in
    python/samba/netcmd/user/readpasswords/common.py;
    (bso#15756).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * Spotlight search results don't show file size and creation
    date; (bso#15796).
  * General improvements for vfs_ceph_new module; (bso#15703).
  * net offlinejoin not working correctly; (bso#15777).
  * net ads create/join/winbind producing unix dysfunctional
    keytabs; (bso#15759).
  * Windows Explorer crashes on S-1-22-* Unix-SIDs when accessing
    security tab; (bso#14213).
  * The values from hresult_errstr_const and hresult_errstr are
    reversed in 4.20 and 4.21; (bso#15769).
  * Kerberos referral tickets are generated for principals in our
    domain if we have a trust to a top level domain; (bso#15778).
  * NETLOGON_NTLMV2_ENABLED is missing in the SamLogon*
    user_flags field; (bso#15783).
  * Regression: stack-use-after-return in crypt_as_best_we_can();
    (bso#15784).
  * libreplace:readline: gcc 15 complains about incompatible
    pointer types; (bso#15788).</changelog>
  <changelog author="nopower@suse.com" date="1743595200">- Update to 4.21.5
  * ldb index cache is too small on known large transactions
    (schemaupgrade, provision); (bso#15795).
  * Enable support for cephfs case insensitive behavior;
    (bso#15822).
  * Subnet based interfaces definition not listening on all
    covered IP addresses; (bso#15823).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727); (bsc#1238063).
  * Remove of file or directory not possible with vfs_acl_tdb;
    (bso#15791).
  * Unable to connect to CephFS subvolume shares with
    vfs_shadow_copy2; (bso#15797).
  * Add async io API from libcephfs to ceph_new VFS module;
    (bso#15810).
  * vfs_ceph_new module does not work with other modules for
    snapshot management; (bso#15818).
  * vfs_ceph_new: Add path based fallback for SMB_VFS_FCHOWN,
    SMB_VFS_FCHMOD and SMB_VFS_FNTIMES; (bso#15834).
  * Incorrect FSF address in ctdb pcp scripts; (bso#15820).
  * "samba-tool domain backup offline" hangs; (bso#15804).</changelog>
  <changelog author="nopower@suse.com" date="1748952000">- Update to 4.21.6
  * Running "gpo manage motd set" twice fails with backtrace;
    (bso#15774).
  * samba-tool gpo backup creates entity backups it can't read;
    (bso#15829).
  * gp_cert_auto_enroll_ext.py has problem unpacking GUIDs with
    prepended 0's; (bso#15839).
  * CVE-2025-0620 [SECURITY] smbd doesn't pick up group
    membership changes when re-authenticating an expired SMB
    session; (bso#15707), (bsc#1244136).
  * Deadlock between two smbd processes; (bso#15767).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727).
  * Wide link issue in samba 4.22; (bso#15841).
  * dcerpcd not able to bind to listening port; (bso#15851).
  * vfs_ceph_snapshots fails to list snapshots for entries at any
    level beyond share root; (bso#15819).
  * CTDB does not put nodes running NFS into grace on graceful
    shutdown; (bso#15858).</changelog>
  <changelog author="scabrero@suse.de" date="1751976000">- Update to 4.21.7
  * Windows security hardening locks out schannel'ed netlogon dc
    calls like netr_DsRGetDCName; (bsc#1246431); (bso#15876);
  * Trust domains are not created; (bso#15680);
  * Startup messages of rpc deamons fills /var/log/messages;
    (bso#15869);</changelog>
  <changelog author="nopower@suse.com" date="1757419200">- - Update to 4.21.8
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * getpwuid does not shift to new DC when current DC is down;
    (bso#15844).
  * Windows security hardening locks out schannel'ed netlogon dc
    calls like netr_DsRGetDCName; (bso#15876).
  * kinit command is failing with Missing cache Error;
    (bso#15840).
  * Figuring out the DC name from IP address fails and breaks
    fork_domain_child(); (bso#15891).
  * Delayed leader broadcast can block ctdb forever; (bso#15892).
  * 'net ads group' failed to list domain groups; (bso#15900).
  * Apparently there is a conflict between shadow_copy2 module
    and virusfilter (action quarantine); (bso#15663).
  * Fix handling of empty GPO link; (bso#15877).
  * SMB ACL inheritance doesn't work for files created;
    (bso#15880).</changelog>
  <changelog author="nopower@suse.com" date="1758628800">- CVE-2025-9640: fix vfs_streams_xattr uninitialized memory write;
  (bsc#1251279);(bso#15885).
- CVE-2025-10230: fix command Injection in WINS Server Hook Script;
  (bsc#1251280);(bso#15903).</changelog>
  <changelog author="nopower@suse.com" date="1763553600">- Update to 4.21.10
  * Crash in ctdbd on failed updateip; (bso#15935).
  * samba-4.21 fails to join AD when multiple DCs are returned;
    (bso#15905).
  * vfs_ceph_new should not use ceph_ll_nonblocking_readv_writev
    for fsync_send; (bso#15919).
  * CTDB_SOCKET can be used even when CTDB_TEST_MODE is not set;
    (bso#15921).
- Update to 4.21.9
  * CVE-2025-10230; (bso#15903); (bsc#1251279).
  * CVE-2025-9640; (bso#15885); (bsc#1251280).</changelog>
  <changelog author="noel.power@suse.com" date="1765281600">- samba-bgqd can't find [printers] share; (bso#15936);
  (bsc#1254586).</changelog>
  <changelog author="nopower@suse.com" date="1765540800">- Fix Samba printers reporting invalid sid during print jobs;
  (bsc#1234210); (bsc#1254926); (bso#15792).</changelog>
  <changelog author="scabrero@suse.de" date="1766491200">- Fix testparm error handling the "sync machine password to keytab"
  option; (bsc#1254439);</changelog>
</package>
<package pkgid="4ee65b9b7eaba430ac09cac52dea7e0002e9957f21a8882f59def1602c9b60d4" name="libldb2" arch="x86_64">
  <version epoch="0" ver="4.21.10+git.501.277ba349a01" rel="150700.3.26.1"/>
  <changelog author="nopower@suse.com" date="1729080000">-  Adjust spec to split out rpcd_* binaries into a separate
  sub package; (bsc#1231414).</changelog>
  <changelog author="nopower@suse.com" date="1730376000">- Add placeholder changelog for sle15-sp7; (jsc#PED-11210).</changelog>
  <changelog author="nopower@suse.com" date="1732536000">- Update to 4.21.2
  * smbd fails to correctly check sharemode against OVERWRITE
    dispositions; (bso#15732).
  * Panic in close_directory; (bso#15754).
  * winexe no longer works with samba 4.21; (bso#15752).
  * protocol error - Unclear debug message "pad length mismatch"
    for invalid bind packet; (bso#14356).
  * NetrGetLogonCapabilities QueryLevel 2 needs to be
    implemented; (bso#15425).
  * gss_accept_sec_context() from Heimdal does not imply
    GSS_C_MUTUAL_FLAG with GSS_C_DCE_STYLE; (bso#15740).
  * winbindd should call process_set_title() for locator child;
    (bso#15749).
  * Update CTDB to track all TCP connections to public IP
    addresses; (bso#15320).</changelog>
  <changelog author="nopower@suse.com" date="1733486400">- Update shipped /etc/samba/smb.conf to point to smb.conf
  man page;(bsc#1233880).</changelog>
  <changelog author="nopower@suse.com" date="1736251200">- Update to 4.21.3
  * More possible replication loops against Azure AD;
    (bso#15701).
  * Compound rename from Mac clients can fail with
    NT_STATUS_INTERNAL_ERROR if the file has a lease;
    (bso#15697).
  * vfs crossrename seems not work correctly; (bso#15724).
  * After 'machine password timeout' /etc/krb5.keytab is not
    updated; (bso#6750).
  * Memory leak wbcCtxLookupSid; (bso#15771).
  * Fix heap-user-after-free with association groups;
    (bso#15765).
  * Segfault in vfs_btrfs; (bso#15758).
  * Avoid event failure race when disabling an event script;
    (bso#15755).</changelog>
  <changelog author="nopower@suse.com" date="1739966400">- Update to 4.21.4
  * Increasing slowness of sharesec performance with high number
    of registry shares; (bso#15780).
  * winbindd shows memleak in kerberos_decode_pac; (bso#15782).
  * Creation of GPOs applicable to more than one group is
    impossible with Samba 4.20.0 and later; (bso#15738).
  * Replace `crypt` module in
    python/samba/netcmd/user/readpasswords/common.py;
    (bso#15756).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * Spotlight search results don't show file size and creation
    date; (bso#15796).
  * General improvements for vfs_ceph_new module; (bso#15703).
  * net offlinejoin not working correctly; (bso#15777).
  * net ads create/join/winbind producing unix dysfunctional
    keytabs; (bso#15759).
  * Windows Explorer crashes on S-1-22-* Unix-SIDs when accessing
    security tab; (bso#14213).
  * The values from hresult_errstr_const and hresult_errstr are
    reversed in 4.20 and 4.21; (bso#15769).
  * Kerberos referral tickets are generated for principals in our
    domain if we have a trust to a top level domain; (bso#15778).
  * NETLOGON_NTLMV2_ENABLED is missing in the SamLogon*
    user_flags field; (bso#15783).
  * Regression: stack-use-after-return in crypt_as_best_we_can();
    (bso#15784).
  * libreplace:readline: gcc 15 complains about incompatible
    pointer types; (bso#15788).</changelog>
  <changelog author="nopower@suse.com" date="1743595200">- Update to 4.21.5
  * ldb index cache is too small on known large transactions
    (schemaupgrade, provision); (bso#15795).
  * Enable support for cephfs case insensitive behavior;
    (bso#15822).
  * Subnet based interfaces definition not listening on all
    covered IP addresses; (bso#15823).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727); (bsc#1238063).
  * Remove of file or directory not possible with vfs_acl_tdb;
    (bso#15791).
  * Unable to connect to CephFS subvolume shares with
    vfs_shadow_copy2; (bso#15797).
  * Add async io API from libcephfs to ceph_new VFS module;
    (bso#15810).
  * vfs_ceph_new module does not work with other modules for
    snapshot management; (bso#15818).
  * vfs_ceph_new: Add path based fallback for SMB_VFS_FCHOWN,
    SMB_VFS_FCHMOD and SMB_VFS_FNTIMES; (bso#15834).
  * Incorrect FSF address in ctdb pcp scripts; (bso#15820).
  * "samba-tool domain backup offline" hangs; (bso#15804).</changelog>
  <changelog author="nopower@suse.com" date="1748952000">- Update to 4.21.6
  * Running "gpo manage motd set" twice fails with backtrace;
    (bso#15774).
  * samba-tool gpo backup creates entity backups it can't read;
    (bso#15829).
  * gp_cert_auto_enroll_ext.py has problem unpacking GUIDs with
    prepended 0's; (bso#15839).
  * CVE-2025-0620 [SECURITY] smbd doesn't pick up group
    membership changes when re-authenticating an expired SMB
    session; (bso#15707), (bsc#1244136).
  * Deadlock between two smbd processes; (bso#15767).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727).
  * Wide link issue in samba 4.22; (bso#15841).
  * dcerpcd not able to bind to listening port; (bso#15851).
  * vfs_ceph_snapshots fails to list snapshots for entries at any
    level beyond share root; (bso#15819).
  * CTDB does not put nodes running NFS into grace on graceful
    shutdown; (bso#15858).</changelog>
  <changelog author="scabrero@suse.de" date="1751976000">- Update to 4.21.7
  * Windows security hardening locks out schannel'ed netlogon dc
    calls like netr_DsRGetDCName; (bsc#1246431); (bso#15876);
  * Trust domains are not created; (bso#15680);
  * Startup messages of rpc deamons fills /var/log/messages;
    (bso#15869);</changelog>
  <changelog author="nopower@suse.com" date="1757419200">- - Update to 4.21.8
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * getpwuid does not shift to new DC when current DC is down;
    (bso#15844).
  * Windows security hardening locks out schannel'ed netlogon dc
    calls like netr_DsRGetDCName; (bso#15876).
  * kinit command is failing with Missing cache Error;
    (bso#15840).
  * Figuring out the DC name from IP address fails and breaks
    fork_domain_child(); (bso#15891).
  * Delayed leader broadcast can block ctdb forever; (bso#15892).
  * 'net ads group' failed to list domain groups; (bso#15900).
  * Apparently there is a conflict between shadow_copy2 module
    and virusfilter (action quarantine); (bso#15663).
  * Fix handling of empty GPO link; (bso#15877).
  * SMB ACL inheritance doesn't work for files created;
    (bso#15880).</changelog>
  <changelog author="nopower@suse.com" date="1758628800">- CVE-2025-9640: fix vfs_streams_xattr uninitialized memory write;
  (bsc#1251279);(bso#15885).
- CVE-2025-10230: fix command Injection in WINS Server Hook Script;
  (bsc#1251280);(bso#15903).</changelog>
  <changelog author="nopower@suse.com" date="1763553600">- Update to 4.21.10
  * Crash in ctdbd on failed updateip; (bso#15935).
  * samba-4.21 fails to join AD when multiple DCs are returned;
    (bso#15905).
  * vfs_ceph_new should not use ceph_ll_nonblocking_readv_writev
    for fsync_send; (bso#15919).
  * CTDB_SOCKET can be used even when CTDB_TEST_MODE is not set;
    (bso#15921).
- Update to 4.21.9
  * CVE-2025-10230; (bso#15903); (bsc#1251279).
  * CVE-2025-9640; (bso#15885); (bsc#1251280).</changelog>
  <changelog author="noel.power@suse.com" date="1765281600">- samba-bgqd can't find [printers] share; (bso#15936);
  (bsc#1254586).</changelog>
  <changelog author="nopower@suse.com" date="1765540800">- Fix Samba printers reporting invalid sid during print jobs;
  (bsc#1234210); (bsc#1254926); (bso#15792).</changelog>
  <changelog author="scabrero@suse.de" date="1766491200">- Fix testparm error handling the "sync machine password to keytab"
  option; (bsc#1254439);</changelog>
  <changelog author="noel.power@suse.com" date="1769515200">- Fix memory leak opening local named pipe; (bso#15979);
  (bsc#1257200).</changelog>
  <changelog author="noel.power@suse.com" date="1772020800">- Fix regression "use-kerberos=desired" broken doesn't even try
  to authenticate with kerberos and instead fallsback to NTLM;
  (bsc#1255755); (bso#15789).
- Fix memory leak using cups parsed options and from filename
  allocated when processing end of printing job; (bso#15979);
  (bsc#1257200).
- fix manpage for "net offlinejoin requestodj"; (bso#15964)
- fix "ctdbd socket" documentation in manpage for smb.conf;
  (bso#15977)</changelog>
  <changelog author="noel.power@suse.com" date="1773144000">- Generated dynamic profile based on path to special 'printers'
  share. (bsc#1259441).</changelog>
  <changelog author="nopower@suse.com" date="1774872000">- Fix rpc workers with long living clients from growing server
  memory keytab and increasing memory used by workers;
  (bso#16042); (bsc#1257200).</changelog>
  <changelog author="nopower@suse.com" date="1777291200">- CVE-2026-4480: Fix Unauthenticated Remote Code Execution;
  (bso#16033); (bsc#1261161).
- CVE-2026-4408: Fix Remote Code Execution in SAMR;(bso#16034);
  (bsc#1261163).
- CVE-2026-3238: Fix unauthenticated udp packet crashes AD DC
  nbt server; (bso#16012); (bsc#1261160).
- CVE-2026-3012: Fix CVE-2026-3012 group policy certificate
  enrollment using http:// without validation;(bso#16003);
  (bsc#1261159).
- CVE-2026-1933: Fix missing access check on reparse point
  operations; (bso#15992); (bsc#1261188).
- CVE-2026-2340: vfs_worm does not block directory modification;
  (bso#15997); (bsc#1261158).</changelog>
</package>
<package pkgid="f8792dd9d82e236241ef3db227aaebb6ccdb11a1d05f8f8f1355615d0f4c1cb9" name="libldb2" arch="x86_64">
  <version epoch="0" ver="4.21.6+git.402.80f493f530f" rel="150700.3.3.1"/>
  <changelog author="nopower@suse.com" date="1697112000">- use systemd-logind rather than utmp for y2038 safety;
  (bsc#1216159).</changelog>
  <changelog author="nopower@suse.com" date="1697457600">- Update to 4.19.2
  * Use-after-free in aio_del_req_from_fsp during smbd shutdown
    after failed IPC FSCTL_PIPE_TRANSCEIVE; (bso#15423).
  * clidfs.c do_connect() missing a "return" after a
    cli_shutdown() call; (bso#15426).
  * macOS mdfind returns only 50 results; (bso#15463).
  * GETREALFILENAME_CACHE can modify incoming new filename with
    previous cache entry value; (bso#15481).
  * libnss_winbind causes memory corruption since samba-4.18,
    impacts sendmail, zabbix, potentially more; (bso#15464).
  * ctdbd: setproctitle not initialized messages flooding logs;
    (bso#15479).
  * CVE-2023-5568 Heap buffer overflow with freshness tokens in
    the Heimdal KDC in Samba 4.19; (bso#15491).
  * The heimdal KDC doesn't detect s4u2self correctly when fast
    is in use; (bso#15477).</changelog>
  <changelog author="dmulder@suse.com" date="1698062400">- packaging: samba-tool domain provision requires python3-Markdown;
  (bsc#1216519).</changelog>
  <changelog author="nopower@suse.com" date="1701086400">- Update to 4.19.3
  * sid_strings test broken by unix epoch &gt; 1700000000;
    (bso#15520).
  * smbd crashes if asked to return full information on close of
    a stream handle with delete on close disposition set;
    (bso#15487).
  * smbd: fix close order of base_fsp and stream_fsp in
    smb_fname_fsp_destructor(); (bso#15521).
  * Improve logging for failover scenarios; (bso#15499).
  * Files without "read attributes" NFS4 ACL permission are not
    listed in directories; (bso#15093).
  * CVE-2018-14628 [SECURITY] Deleted Object tombstones visible
    in AD LDAP to normal users; (bso#13595).
  * Kerberos TGS-REQ with User2User does not work for normal
    accounts; (bso#15492).
  * vfs_gpfs stat calls fail due to file system permissions;
    (bso#15507).
  * Samba doesn't build with Python 3.12; (bso#15513).</changelog>
  <changelog author="nopower@suse.com" date="1704801600">- Update to 4.19.4
  * net changesecretpw cannot set the machine account password if
    secrets.tdb is empty; (bso#13577).
  * For generating doc, take, if defined, env XML_CATALOG_FILES;
    (bso#15540).
  * Trivial C typo in nsswitch/winbind_nss_netbsd.c; (bso#15541).
  * vfs_linux_xfs is incorrectly named; (bso#15542).
  * systemd stumbled over copyright-message at smbd startup;
    (bso#15377).
  * Following intermediate abolute share-local symlinks is
    broken; (bso#15505).
  * ctdb RELEASE_IP causes a crash in release_ip if a connection
    to a non-public address disconnects first; (bso#15523).
  * shadow_copy2 broken when current fileset's directories are
    removed; (bso#15544).
  * smbd does not detect ctdb public ipv6 addresses for
    multichannel exclusion; (bso#15534).
  * 'force user = localunixuser' doesn't work if 'allow trusted
    domains = no' is set; (bso#15469).
  * smbget debug logging doesn't work; (bso#15525).
  * smget: username in the smburl and interactive password entry
    doesn't work; (bso#15532).
  * smbget auth function doesn't set values for password prompt
    correctly; (bso#15538).
  * Unable to copy and write files from clients to Ceph cluster
    via SMB Linux gateway with Ceph VFS module; (bso#15440).
  * Multichannel refresh network information; (bso#15547).</changelog>
  <changelog author="nopower@suse.com" date="1704888000">- Remove -x from bash shebang update-apparmor-samba-profile;
  (bsc#1218431).</changelog>
  <changelog author="nopower@suse.com" date="1708430400">- Update to 4.19.5
  * Windows 2016 fails to restore previous version of a file from
    a shadow_copy2 snapshot; (bso#13688).
  * Symlinks on AIX are broken in 4.19 (and a few version before
    that); (bso#15549).
  * Fake directory create times has no effect; (bso#12421).
  * ctime mixed up with mtime by smbd; (bso#15550).
  * samba-gpupdate --rsop fails if machine is not in a site;
    (bso#15548).
  * gpupdate: The root cert import when NDES is not available is
    broken; (bso#15557).
  * samba-gpupdate should print a useful message if cepces-submit
    can't be found; (bso#15552).
  * samba-gpupdate logging doesn't work; (bso#15558).
  * smbpasswd reset permissions only if not 0600; (bso#15555).</changelog>
  <changelog author="nopower@suse.com" date="1718884800">- Update to 4.19.7
  * ldb qsort might r/w out of bounds with an intransitive
    compare function (ldb 2.8.1 is already released);
    (bso#15569).
  * Many qsort() comparison functions are non-transitive, which
    can lead to out-of-bounds access in some circumstances (ldb
    2.8.1 is already released); (bso#15625).
  * Need to change gitlab-ci.yml tags in all branches to avoid CI
    bill; (bso#15638).
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * Anonymous smb3 signing/encryption should be allowed (similar
    to Windows Server 2022); (bso#15412).
  * Panic in dreplsrv_op_pull_source_apply_changes_trigger;
    (bso#15573).
  * winbindd, net ads join and other things don't work on an ipv6
    only host; (bso#15642).
  * Smbcacls incorrectly propagates inheritance with Inherit-Only
    flag; (bso#15636).
  * http library doesn't support  'chunked transfer encoding';
    (bso#15611).
- Update to 4.19.6
  * fd_handle_destructor() panics within an smbd_smb2_close() if
    vfs_stat_fsp() fails in fd_close(); (bso#15527).
  * samba-gpupdate: Correctly implement site support;
    (bso#15588).
  * libgpo: Segfault in python bindings; (bso#15599).
  * Packet marshalling push support missing for
    CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and
    CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580).</changelog>
  <changelog author="scabrero@suse.de" date="1722513600">- Fix a crash when joining offline and 'kerberos method' includes
  keytab; (bsc#1228732);
- Fix reading the password from STDIN or environment vars if it
  was already given in the command line; (bsc#1228732);</changelog>
  <changelog author="ddiss@suse.com" date="1725537600">- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated;
  (bso#15699); (bsc#1229684).
- Update to 4.19.8
  * Invalid client warning about command line passwords;
    (bso#15671);
  * Version string is truncated in manpages; (bso#15672);
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673);
  * cmdline_burn does not always burn secrets; (bso#15674);
  * Samba doesn't parse SDDL found in defaultSecurityDescriptor
    in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685);
  * We have added new options --vendor-name and --vendor-patch-
    revision arguments to ./configure to allow distributions and
    packagers to put their name in the Samba version string so that
    when debugging Samba the source of the binary is obvious;
    (bso#15654);
  * When claims enabled with heimdal kerberos, unable to log on to a
    Windows computer when user account need to change their own
    password; (bso#15655);
  * Fix clock skew error message and memory cache clock skew
    recovery; (bso#15676);
  * CTDB RADOS mutex helper misses namespace support; (bso#15665);
  * The images don't build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660);
  * Fix unnecessary delays in CTDB while processing requests under
    high load; (bso#15678);
  * Dynamic DNS updates with the internal DNS are not working;
    (bso#13019);
  * s4:nbt_server: does not provide unexpected handling, so winbindd
    can't use nmb requests instead cldap; (bso#15620);
  * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664);
  * "client use kerberos" and --use-kerberos is ignored for the machine
    account; (bso#15666);
  * Regression DFS not working with widelinks = true; (bso#15435);
  * ntlm_auth make logs more consistent with length check; (bso#15677);</changelog>
  <changelog author="nopower@suse.com" date="1728475200">-  Adjust spec to split out rpcd_* binaries into a separate
  sub package; (bsc#1231414).</changelog>
  <changelog author="nopower@suse.com" date="1728993600">- Update to 4.21.1
  * DH reconnect error handling can lead to stale sharemode
    entries; (bso#15624).
  * "inherit permissions = yes" triggers assert() in vfs_default
    when creating a stream; (bso#15695).
  * Samba 4.21.0 broke FreeIPA domain member integration;
    (bso#15715).
  * Missing conversion for msDS-UserTGTLifetime, msDS-
    ComputerTGTLifetime and msDS-ServiceTGTLifetime on "samba-
    tool domain auth policy modify"; (bso#15692).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * Durable handle is not granted when a previous OPEN exists
    with NoOplock; (bso#15649).
  * Durable handle is granted but reconnect fails; (bso#15651).
  * Disconnected durable handles with RH lease should not be
    purged by a new non conflicting open; (bso#15708).
  * net ads testjoin and other commands use the wrong secrets.tdb
    in a cluster; (bso#15714).
  * 4.21 using --with-system-mitkrb5 requires MIT krb5 1.16 as
    rfc 8009 etypes are used; (bso#15726).
  * VFS_OPEN_HOW_WITH_BACKUP_INTENT breaks shadow_copy2;
    (bso#15730).
  * Samba 4.20.0 DLZ module crashes BIND on startup; (bso#15643).
  * Cannot build libldb lmdb backend on a build without AD DC;
    (bso#15721).
  * Consistent log level for sighup handler; (bso#15706).
- Package ceph_new VFS module.
- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated;
  (bso#15699); (bsc#1229684).
- Update to 4.21.0
  * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when
    truncated; (bso#15699).
  * Bad variable definition for ParseTuple causing test failure
    for Smb3UnixTests.test_create_context_reparse; (bso#15702).
  * Add new vfs_ceph module (based on low level API);
    (bso#15686).
  * samba-tool can not load the default configuration file;
    (bso#15698).
  * Crash when readlinkat fails; (bso#15700).
  * Can't add/delete special keys to keytab for nfs, cifs, http
    etc; (bso#15689).
  * Compound SMB2 requests don't return
    NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses
    MacOSX clients; (bso#15696).
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673).
  * ldb_version.h is missing from ldb public library;
    (bso#15690).
  * Can not add/delete special keys to keytab for nfs, cifs, http
    etc; (bso#15689).
  * undefined reference to winbind_lookup_name_ex; (bso#15687).
  * per user veto and hide file syntax is to complex;
    (bso#15688).
- Update to 4.20.4
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673).
- Update to 4.20.3
  * Running samba-bgqd a a standalone systemd service does not
    work; (bso#15683).
  * When claims enabled with heimdal kerberos, unable to log on
    to a Windows computer when user account need to change their
    own password; (bso#15655).
  * Invalid client warning about command line passwords;
    (bso#15671).
  * Version string is truncated in manpages; (bso#15672).
  * cmdline_burn does not always burn secrets; (bso#15674).
  * Samba does not parse SDDL found in defaultSecurityDescriptor
    in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685).
  * The images don\'t build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660).
  * Fix clock skew error message and memory cache clock skew
    recovery; (bso#15676).
  * Heimdal ignores _gsskrb5_decapsulate errors in
    init_sec_context/repl_mutual; (bso#15603).
  * s4:ldap_server: does not support tls channel bindings for
    sasl binds; (bso#15621).
  * CTDB socket output queues may suffer unbounded delays under
    some special conditions; (bso#15678).
- Update samba-tool package to require python3-Markdown also in
  the Heimdal ADDC build
- Fix named crash when using samba's DLZ plugin; (bsc#1224003);
  (bso#15643);
- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]
- Update to 4.20.2
  * vfs_widelinks with DFS shares breaks case insensitivity;
    (bso#15662); (bsc#1213607).
  * Samba build is not reproducible; (bso#13213).
  * ldb qsort might r/w out of bounds with an intransitive
    compare function; (bso#15569).
  * Many qsort() comparison functions are non-transitive, which
    can lead to out-of-bounds access in some circumstances;
    (bso#15625).
  * Need to change gitlab-ci.yml tags in all branches to avoid CI
    bill; (bso#15638).
  * We have added new options --vendor-name and --vendor-patch-
    revision arguments to ./configure to allow distributions and
    packagers to put their name in the Samba version string so
    that when debugging Samba the source of the binary is
    obvious; (bso#15654).
  * CTDB RADOS mutex helper misses namespace support;
    (bso#15665).
  * Dynamic DNS updates with the internal DNS are not working;
    (bso#13019).
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * Anonymous smb3 signing/encryption should be allowed (similar
    to Windows Server 2022); (bso#15412).
  * Panic in dreplsrv_op_pull_source_apply_changes_trigger;
    (bso#15573).
  * s4:nbt_server: does not provide unexpected handling, so
    winbindd can't use nmb requests instead cldap; (bso#15620).
  * winbindd, net ads join and other things don't work on an ipv6
    only host; (bso#15642).
  * Segmentation fault when deleting files in vfs_recycle;
    (bso#15659).
  * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664).
  * "client use kerberos" and --use-kerberos is ignored for the
    machine account; (bso#15666).
  * Regression DFS not working with widelinks = true;
    (bso#15435).
  * samba-gpupdate - Invalid NtVer in netlogon_samlogon_response;
    (bso#15633).
  * idmap_ad creates an incorrect local krb5.conf in case of
    trusted domain lookups; (bso#15653).
  * The images don't build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660).
- Fix non deterministic builds; (bsc#1225754); (bso#13213);
- Update to 4.20.1
  * dns update debug message is too noisy; (bso#15630);
  * Do not fail PAC validation for RFC8009 checksums types; (bso#15635);
  * Improve performance of lookup_groupmem() in idmap_ad; (bso#15605);
  * Smbcacls incorrectly propagates inheritance with Inherit-Only flag; (bso#15636);
  * http library doesn't support 'chunked transfer encoding'; (bso#15611);
  * Provide a systemd service file for the background queue daemon; (bso#15600);
- Update to 4.20.0
  New features:
  * samba-tool user getpassword / syncpasswords ;rounds= change
  * Group Managed service account client-side features
  * New Windows Search Protocol Client
  * Allow 'smbcacls' to save/restore DACLs to file
  * Samba-tool extensions for AD Claims, Authentication Policies and Silos
  * AD DC support for Authentication Silos and Authentication Policies
  * Conditional ACEs and Resource Attribute ACEs
  * Service Witness Protocol [MS-SWN]
  Removed features:
  * Get locally logged on users from utmp
  Fixed bugs:
  * Avoid null-dereference with bad claims; (bso#15606);
  * ndr_pull_security_ace can leave resource attribute ACE coda
    claim struct undefined; (bso#15613);
  * fd_handle_destructor() panics within an smbd_smb2_close() if
    vfs_stat_fsp() fails in fd_close(); (bso#15527);
  * set_nt_acl sometimes fails with NT_STATUS_INVALID_PARAMETER -
    openat() EACCES; (bso#15583);
  * libgpo: Segfault in python bindings; (bso#15599);
  * Samba AD is missing some authentication policy tests;
    (bso#15607);
  * samba-gpupdate: Correctly implement site support; (bso#15588);
  * Remove unsupported "Final" keyword missing from Python 3.6;
    (bso#15575);
  * Additional witness backports for 4.20.0; (bso#15577);
  * Error output with wspsearch; (bso#15579);
  * Packet marshalling push support missing for
    CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and
    CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580);
  * Performance regression for NDR parsing of security
    descriptors; (bso#15574);
  * Build and install man page for wspsearch client utility;
    (bso#15565);
- Update to 4.19.9
  * libldb: performance issue with indexes (ldb 2.8.2 is already
    released); (bso#15590).
  * DH reconnect error handling can lead to stale sharemode
    entries; (bso#15624).
  * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when
    truncated; (bso#15699).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * Compound SMB2 requests don't return
    NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses
    MacOSX clients; (bso#15696).
  * Crash when readlinkat fails; (bso#15700).</changelog>
  <changelog author="nopower@suse.com" date="1729080000">-  Adjust spec to split out rpcd_* binaries into a separate
  sub package; (bsc#1231414).</changelog>
  <changelog author="nopower@suse.com" date="1730376000">- Add placeholder changelog for sle15-sp7; (jsc#PED-11210).</changelog>
  <changelog author="nopower@suse.com" date="1732536000">- Update to 4.21.2
  * smbd fails to correctly check sharemode against OVERWRITE
    dispositions; (bso#15732).
  * Panic in close_directory; (bso#15754).
  * winexe no longer works with samba 4.21; (bso#15752).
  * protocol error - Unclear debug message "pad length mismatch"
    for invalid bind packet; (bso#14356).
  * NetrGetLogonCapabilities QueryLevel 2 needs to be
    implemented; (bso#15425).
  * gss_accept_sec_context() from Heimdal does not imply
    GSS_C_MUTUAL_FLAG with GSS_C_DCE_STYLE; (bso#15740).
  * winbindd should call process_set_title() for locator child;
    (bso#15749).
  * Update CTDB to track all TCP connections to public IP
    addresses; (bso#15320).</changelog>
  <changelog author="nopower@suse.com" date="1733486400">- Update shipped /etc/samba/smb.conf to point to smb.conf
  man page;(bsc#1233880).</changelog>
  <changelog author="nopower@suse.com" date="1736251200">- Update to 4.21.3
  * More possible replication loops against Azure AD;
    (bso#15701).
  * Compound rename from Mac clients can fail with
    NT_STATUS_INTERNAL_ERROR if the file has a lease;
    (bso#15697).
  * vfs crossrename seems not work correctly; (bso#15724).
  * After 'machine password timeout' /etc/krb5.keytab is not
    updated; (bso#6750).
  * Memory leak wbcCtxLookupSid; (bso#15771).
  * Fix heap-user-after-free with association groups;
    (bso#15765).
  * Segfault in vfs_btrfs; (bso#15758).
  * Avoid event failure race when disabling an event script;
    (bso#15755).</changelog>
  <changelog author="nopower@suse.com" date="1739966400">- Update to 4.21.4
  * Increasing slowness of sharesec performance with high number
    of registry shares; (bso#15780).
  * winbindd shows memleak in kerberos_decode_pac; (bso#15782).
  * Creation of GPOs applicable to more than one group is
    impossible with Samba 4.20.0 and later; (bso#15738).
  * Replace `crypt` module in
    python/samba/netcmd/user/readpasswords/common.py;
    (bso#15756).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * Spotlight search results don't show file size and creation
    date; (bso#15796).
  * General improvements for vfs_ceph_new module; (bso#15703).
  * net offlinejoin not working correctly; (bso#15777).
  * net ads create/join/winbind producing unix dysfunctional
    keytabs; (bso#15759).
  * Windows Explorer crashes on S-1-22-* Unix-SIDs when accessing
    security tab; (bso#14213).
  * The values from hresult_errstr_const and hresult_errstr are
    reversed in 4.20 and 4.21; (bso#15769).
  * Kerberos referral tickets are generated for principals in our
    domain if we have a trust to a top level domain; (bso#15778).
  * NETLOGON_NTLMV2_ENABLED is missing in the SamLogon*
    user_flags field; (bso#15783).
  * Regression: stack-use-after-return in crypt_as_best_we_can();
    (bso#15784).
  * libreplace:readline: gcc 15 complains about incompatible
    pointer types; (bso#15788).</changelog>
  <changelog author="nopower@suse.com" date="1743595200">- Update to 4.21.5
  * ldb index cache is too small on known large transactions
    (schemaupgrade, provision); (bso#15795).
  * Enable support for cephfs case insensitive behavior;
    (bso#15822).
  * Subnet based interfaces definition not listening on all
    covered IP addresses; (bso#15823).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727); (bsc#1238063).
  * Remove of file or directory not possible with vfs_acl_tdb;
    (bso#15791).
  * Unable to connect to CephFS subvolume shares with
    vfs_shadow_copy2; (bso#15797).
  * Add async io API from libcephfs to ceph_new VFS module;
    (bso#15810).
  * vfs_ceph_new module does not work with other modules for
    snapshot management; (bso#15818).
  * vfs_ceph_new: Add path based fallback for SMB_VFS_FCHOWN,
    SMB_VFS_FCHMOD and SMB_VFS_FNTIMES; (bso#15834).
  * Incorrect FSF address in ctdb pcp scripts; (bso#15820).
  * "samba-tool domain backup offline" hangs; (bso#15804).</changelog>
  <changelog author="nopower@suse.com" date="1748952000">- Update to 4.21.6
  * Running "gpo manage motd set" twice fails with backtrace;
    (bso#15774).
  * samba-tool gpo backup creates entity backups it can't read;
    (bso#15829).
  * gp_cert_auto_enroll_ext.py has problem unpacking GUIDs with
    prepended 0's; (bso#15839).
  * CVE-2025-0620 [SECURITY] smbd doesn't pick up group
    membership changes when re-authenticating an expired SMB
    session; (bso#15707), (bsc#1244136).
  * Deadlock between two smbd processes; (bso#15767).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727).
  * Wide link issue in samba 4.22; (bso#15841).
  * dcerpcd not able to bind to listening port; (bso#15851).
  * vfs_ceph_snapshots fails to list snapshots for entries at any
    level beyond share root; (bso#15819).
  * CTDB does not put nodes running NFS into grace on graceful
    shutdown; (bso#15858).</changelog>
</package>
<package pkgid="70726506777e2a04f5dec5bc23563e3dda99142e2bd5955a979a1a46a0478042" name="libldb2" arch="x86_64">
  <version epoch="0" ver="4.21.6+git.493.f39e13aba14" rel="150700.3.6.1"/>
  <changelog author="nopower@suse.com" date="1697457600">- Update to 4.19.2
  * Use-after-free in aio_del_req_from_fsp during smbd shutdown
    after failed IPC FSCTL_PIPE_TRANSCEIVE; (bso#15423).
  * clidfs.c do_connect() missing a "return" after a
    cli_shutdown() call; (bso#15426).
  * macOS mdfind returns only 50 results; (bso#15463).
  * GETREALFILENAME_CACHE can modify incoming new filename with
    previous cache entry value; (bso#15481).
  * libnss_winbind causes memory corruption since samba-4.18,
    impacts sendmail, zabbix, potentially more; (bso#15464).
  * ctdbd: setproctitle not initialized messages flooding logs;
    (bso#15479).
  * CVE-2023-5568 Heap buffer overflow with freshness tokens in
    the Heimdal KDC in Samba 4.19; (bso#15491).
  * The heimdal KDC doesn't detect s4u2self correctly when fast
    is in use; (bso#15477).</changelog>
  <changelog author="dmulder@suse.com" date="1698062400">- packaging: samba-tool domain provision requires python3-Markdown;
  (bsc#1216519).</changelog>
  <changelog author="nopower@suse.com" date="1701086400">- Update to 4.19.3
  * sid_strings test broken by unix epoch &gt; 1700000000;
    (bso#15520).
  * smbd crashes if asked to return full information on close of
    a stream handle with delete on close disposition set;
    (bso#15487).
  * smbd: fix close order of base_fsp and stream_fsp in
    smb_fname_fsp_destructor(); (bso#15521).
  * Improve logging for failover scenarios; (bso#15499).
  * Files without "read attributes" NFS4 ACL permission are not
    listed in directories; (bso#15093).
  * CVE-2018-14628 [SECURITY] Deleted Object tombstones visible
    in AD LDAP to normal users; (bso#13595).
  * Kerberos TGS-REQ with User2User does not work for normal
    accounts; (bso#15492).
  * vfs_gpfs stat calls fail due to file system permissions;
    (bso#15507).
  * Samba doesn't build with Python 3.12; (bso#15513).</changelog>
  <changelog author="nopower@suse.com" date="1704801600">- Update to 4.19.4
  * net changesecretpw cannot set the machine account password if
    secrets.tdb is empty; (bso#13577).
  * For generating doc, take, if defined, env XML_CATALOG_FILES;
    (bso#15540).
  * Trivial C typo in nsswitch/winbind_nss_netbsd.c; (bso#15541).
  * vfs_linux_xfs is incorrectly named; (bso#15542).
  * systemd stumbled over copyright-message at smbd startup;
    (bso#15377).
  * Following intermediate abolute share-local symlinks is
    broken; (bso#15505).
  * ctdb RELEASE_IP causes a crash in release_ip if a connection
    to a non-public address disconnects first; (bso#15523).
  * shadow_copy2 broken when current fileset's directories are
    removed; (bso#15544).
  * smbd does not detect ctdb public ipv6 addresses for
    multichannel exclusion; (bso#15534).
  * 'force user = localunixuser' doesn't work if 'allow trusted
    domains = no' is set; (bso#15469).
  * smbget debug logging doesn't work; (bso#15525).
  * smget: username in the smburl and interactive password entry
    doesn't work; (bso#15532).
  * smbget auth function doesn't set values for password prompt
    correctly; (bso#15538).
  * Unable to copy and write files from clients to Ceph cluster
    via SMB Linux gateway with Ceph VFS module; (bso#15440).
  * Multichannel refresh network information; (bso#15547).</changelog>
  <changelog author="nopower@suse.com" date="1704888000">- Remove -x from bash shebang update-apparmor-samba-profile;
  (bsc#1218431).</changelog>
  <changelog author="nopower@suse.com" date="1708430400">- Update to 4.19.5
  * Windows 2016 fails to restore previous version of a file from
    a shadow_copy2 snapshot; (bso#13688).
  * Symlinks on AIX are broken in 4.19 (and a few version before
    that); (bso#15549).
  * Fake directory create times has no effect; (bso#12421).
  * ctime mixed up with mtime by smbd; (bso#15550).
  * samba-gpupdate --rsop fails if machine is not in a site;
    (bso#15548).
  * gpupdate: The root cert import when NDES is not available is
    broken; (bso#15557).
  * samba-gpupdate should print a useful message if cepces-submit
    can't be found; (bso#15552).
  * samba-gpupdate logging doesn't work; (bso#15558).
  * smbpasswd reset permissions only if not 0600; (bso#15555).</changelog>
  <changelog author="nopower@suse.com" date="1718884800">- Update to 4.19.7
  * ldb qsort might r/w out of bounds with an intransitive
    compare function (ldb 2.8.1 is already released);
    (bso#15569).
  * Many qsort() comparison functions are non-transitive, which
    can lead to out-of-bounds access in some circumstances (ldb
    2.8.1 is already released); (bso#15625).
  * Need to change gitlab-ci.yml tags in all branches to avoid CI
    bill; (bso#15638).
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * Anonymous smb3 signing/encryption should be allowed (similar
    to Windows Server 2022); (bso#15412).
  * Panic in dreplsrv_op_pull_source_apply_changes_trigger;
    (bso#15573).
  * winbindd, net ads join and other things don't work on an ipv6
    only host; (bso#15642).
  * Smbcacls incorrectly propagates inheritance with Inherit-Only
    flag; (bso#15636).
  * http library doesn't support  'chunked transfer encoding';
    (bso#15611).
- Update to 4.19.6
  * fd_handle_destructor() panics within an smbd_smb2_close() if
    vfs_stat_fsp() fails in fd_close(); (bso#15527).
  * samba-gpupdate: Correctly implement site support;
    (bso#15588).
  * libgpo: Segfault in python bindings; (bso#15599).
  * Packet marshalling push support missing for
    CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and
    CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580).</changelog>
  <changelog author="scabrero@suse.de" date="1722513600">- Fix a crash when joining offline and 'kerberos method' includes
  keytab; (bsc#1228732);
- Fix reading the password from STDIN or environment vars if it
  was already given in the command line; (bsc#1228732);</changelog>
  <changelog author="ddiss@suse.com" date="1725537600">- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated;
  (bso#15699); (bsc#1229684).
- Update to 4.19.8
  * Invalid client warning about command line passwords;
    (bso#15671);
  * Version string is truncated in manpages; (bso#15672);
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673);
  * cmdline_burn does not always burn secrets; (bso#15674);
  * Samba doesn't parse SDDL found in defaultSecurityDescriptor
    in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685);
  * We have added new options --vendor-name and --vendor-patch-
    revision arguments to ./configure to allow distributions and
    packagers to put their name in the Samba version string so that
    when debugging Samba the source of the binary is obvious;
    (bso#15654);
  * When claims enabled with heimdal kerberos, unable to log on to a
    Windows computer when user account need to change their own
    password; (bso#15655);
  * Fix clock skew error message and memory cache clock skew
    recovery; (bso#15676);
  * CTDB RADOS mutex helper misses namespace support; (bso#15665);
  * The images don't build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660);
  * Fix unnecessary delays in CTDB while processing requests under
    high load; (bso#15678);
  * Dynamic DNS updates with the internal DNS are not working;
    (bso#13019);
  * s4:nbt_server: does not provide unexpected handling, so winbindd
    can't use nmb requests instead cldap; (bso#15620);
  * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664);
  * "client use kerberos" and --use-kerberos is ignored for the machine
    account; (bso#15666);
  * Regression DFS not working with widelinks = true; (bso#15435);
  * ntlm_auth make logs more consistent with length check; (bso#15677);</changelog>
  <changelog author="nopower@suse.com" date="1728475200">-  Adjust spec to split out rpcd_* binaries into a separate
  sub package; (bsc#1231414).</changelog>
  <changelog author="nopower@suse.com" date="1728993600">- Update to 4.21.1
  * DH reconnect error handling can lead to stale sharemode
    entries; (bso#15624).
  * "inherit permissions = yes" triggers assert() in vfs_default
    when creating a stream; (bso#15695).
  * Samba 4.21.0 broke FreeIPA domain member integration;
    (bso#15715).
  * Missing conversion for msDS-UserTGTLifetime, msDS-
    ComputerTGTLifetime and msDS-ServiceTGTLifetime on "samba-
    tool domain auth policy modify"; (bso#15692).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * Durable handle is not granted when a previous OPEN exists
    with NoOplock; (bso#15649).
  * Durable handle is granted but reconnect fails; (bso#15651).
  * Disconnected durable handles with RH lease should not be
    purged by a new non conflicting open; (bso#15708).
  * net ads testjoin and other commands use the wrong secrets.tdb
    in a cluster; (bso#15714).
  * 4.21 using --with-system-mitkrb5 requires MIT krb5 1.16 as
    rfc 8009 etypes are used; (bso#15726).
  * VFS_OPEN_HOW_WITH_BACKUP_INTENT breaks shadow_copy2;
    (bso#15730).
  * Samba 4.20.0 DLZ module crashes BIND on startup; (bso#15643).
  * Cannot build libldb lmdb backend on a build without AD DC;
    (bso#15721).
  * Consistent log level for sighup handler; (bso#15706).
- Package ceph_new VFS module.
- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated;
  (bso#15699); (bsc#1229684).
- Update to 4.21.0
  * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when
    truncated; (bso#15699).
  * Bad variable definition for ParseTuple causing test failure
    for Smb3UnixTests.test_create_context_reparse; (bso#15702).
  * Add new vfs_ceph module (based on low level API);
    (bso#15686).
  * samba-tool can not load the default configuration file;
    (bso#15698).
  * Crash when readlinkat fails; (bso#15700).
  * Can't add/delete special keys to keytab for nfs, cifs, http
    etc; (bso#15689).
  * Compound SMB2 requests don't return
    NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses
    MacOSX clients; (bso#15696).
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673).
  * ldb_version.h is missing from ldb public library;
    (bso#15690).
  * Can not add/delete special keys to keytab for nfs, cifs, http
    etc; (bso#15689).
  * undefined reference to winbind_lookup_name_ex; (bso#15687).
  * per user veto and hide file syntax is to complex;
    (bso#15688).
- Update to 4.20.4
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673).
- Update to 4.20.3
  * Running samba-bgqd a a standalone systemd service does not
    work; (bso#15683).
  * When claims enabled with heimdal kerberos, unable to log on
    to a Windows computer when user account need to change their
    own password; (bso#15655).
  * Invalid client warning about command line passwords;
    (bso#15671).
  * Version string is truncated in manpages; (bso#15672).
  * cmdline_burn does not always burn secrets; (bso#15674).
  * Samba does not parse SDDL found in defaultSecurityDescriptor
    in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685).
  * The images don\'t build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660).
  * Fix clock skew error message and memory cache clock skew
    recovery; (bso#15676).
  * Heimdal ignores _gsskrb5_decapsulate errors in
    init_sec_context/repl_mutual; (bso#15603).
  * s4:ldap_server: does not support tls channel bindings for
    sasl binds; (bso#15621).
  * CTDB socket output queues may suffer unbounded delays under
    some special conditions; (bso#15678).
- Update samba-tool package to require python3-Markdown also in
  the Heimdal ADDC build
- Fix named crash when using samba's DLZ plugin; (bsc#1224003);
  (bso#15643);
- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]
- Update to 4.20.2
  * vfs_widelinks with DFS shares breaks case insensitivity;
    (bso#15662); (bsc#1213607).
  * Samba build is not reproducible; (bso#13213).
  * ldb qsort might r/w out of bounds with an intransitive
    compare function; (bso#15569).
  * Many qsort() comparison functions are non-transitive, which
    can lead to out-of-bounds access in some circumstances;
    (bso#15625).
  * Need to change gitlab-ci.yml tags in all branches to avoid CI
    bill; (bso#15638).
  * We have added new options --vendor-name and --vendor-patch-
    revision arguments to ./configure to allow distributions and
    packagers to put their name in the Samba version string so
    that when debugging Samba the source of the binary is
    obvious; (bso#15654).
  * CTDB RADOS mutex helper misses namespace support;
    (bso#15665).
  * Dynamic DNS updates with the internal DNS are not working;
    (bso#13019).
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * Anonymous smb3 signing/encryption should be allowed (similar
    to Windows Server 2022); (bso#15412).
  * Panic in dreplsrv_op_pull_source_apply_changes_trigger;
    (bso#15573).
  * s4:nbt_server: does not provide unexpected handling, so
    winbindd can't use nmb requests instead cldap; (bso#15620).
  * winbindd, net ads join and other things don't work on an ipv6
    only host; (bso#15642).
  * Segmentation fault when deleting files in vfs_recycle;
    (bso#15659).
  * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664).
  * "client use kerberos" and --use-kerberos is ignored for the
    machine account; (bso#15666).
  * Regression DFS not working with widelinks = true;
    (bso#15435).
  * samba-gpupdate - Invalid NtVer in netlogon_samlogon_response;
    (bso#15633).
  * idmap_ad creates an incorrect local krb5.conf in case of
    trusted domain lookups; (bso#15653).
  * The images don't build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660).
- Fix non deterministic builds; (bsc#1225754); (bso#13213);
- Update to 4.20.1
  * dns update debug message is too noisy; (bso#15630);
  * Do not fail PAC validation for RFC8009 checksums types; (bso#15635);
  * Improve performance of lookup_groupmem() in idmap_ad; (bso#15605);
  * Smbcacls incorrectly propagates inheritance with Inherit-Only flag; (bso#15636);
  * http library doesn't support 'chunked transfer encoding'; (bso#15611);
  * Provide a systemd service file for the background queue daemon; (bso#15600);
- Update to 4.20.0
  New features:
  * samba-tool user getpassword / syncpasswords ;rounds= change
  * Group Managed service account client-side features
  * New Windows Search Protocol Client
  * Allow 'smbcacls' to save/restore DACLs to file
  * Samba-tool extensions for AD Claims, Authentication Policies and Silos
  * AD DC support for Authentication Silos and Authentication Policies
  * Conditional ACEs and Resource Attribute ACEs
  * Service Witness Protocol [MS-SWN]
  Removed features:
  * Get locally logged on users from utmp
  Fixed bugs:
  * Avoid null-dereference with bad claims; (bso#15606);
  * ndr_pull_security_ace can leave resource attribute ACE coda
    claim struct undefined; (bso#15613);
  * fd_handle_destructor() panics within an smbd_smb2_close() if
    vfs_stat_fsp() fails in fd_close(); (bso#15527);
  * set_nt_acl sometimes fails with NT_STATUS_INVALID_PARAMETER -
    openat() EACCES; (bso#15583);
  * libgpo: Segfault in python bindings; (bso#15599);
  * Samba AD is missing some authentication policy tests;
    (bso#15607);
  * samba-gpupdate: Correctly implement site support; (bso#15588);
  * Remove unsupported "Final" keyword missing from Python 3.6;
    (bso#15575);
  * Additional witness backports for 4.20.0; (bso#15577);
  * Error output with wspsearch; (bso#15579);
  * Packet marshalling push support missing for
    CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and
    CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580);
  * Performance regression for NDR parsing of security
    descriptors; (bso#15574);
  * Build and install man page for wspsearch client utility;
    (bso#15565);
- Update to 4.19.9
  * libldb: performance issue with indexes (ldb 2.8.2 is already
    released); (bso#15590).
  * DH reconnect error handling can lead to stale sharemode
    entries; (bso#15624).
  * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when
    truncated; (bso#15699).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * Compound SMB2 requests don't return
    NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses
    MacOSX clients; (bso#15696).
  * Crash when readlinkat fails; (bso#15700).</changelog>
  <changelog author="nopower@suse.com" date="1729080000">-  Adjust spec to split out rpcd_* binaries into a separate
  sub package; (bsc#1231414).</changelog>
  <changelog author="nopower@suse.com" date="1730376000">- Add placeholder changelog for sle15-sp7; (jsc#PED-11210).</changelog>
  <changelog author="nopower@suse.com" date="1732536000">- Update to 4.21.2
  * smbd fails to correctly check sharemode against OVERWRITE
    dispositions; (bso#15732).
  * Panic in close_directory; (bso#15754).
  * winexe no longer works with samba 4.21; (bso#15752).
  * protocol error - Unclear debug message "pad length mismatch"
    for invalid bind packet; (bso#14356).
  * NetrGetLogonCapabilities QueryLevel 2 needs to be
    implemented; (bso#15425).
  * gss_accept_sec_context() from Heimdal does not imply
    GSS_C_MUTUAL_FLAG with GSS_C_DCE_STYLE; (bso#15740).
  * winbindd should call process_set_title() for locator child;
    (bso#15749).
  * Update CTDB to track all TCP connections to public IP
    addresses; (bso#15320).</changelog>
  <changelog author="nopower@suse.com" date="1733486400">- Update shipped /etc/samba/smb.conf to point to smb.conf
  man page;(bsc#1233880).</changelog>
  <changelog author="nopower@suse.com" date="1736251200">- Update to 4.21.3
  * More possible replication loops against Azure AD;
    (bso#15701).
  * Compound rename from Mac clients can fail with
    NT_STATUS_INTERNAL_ERROR if the file has a lease;
    (bso#15697).
  * vfs crossrename seems not work correctly; (bso#15724).
  * After 'machine password timeout' /etc/krb5.keytab is not
    updated; (bso#6750).
  * Memory leak wbcCtxLookupSid; (bso#15771).
  * Fix heap-user-after-free with association groups;
    (bso#15765).
  * Segfault in vfs_btrfs; (bso#15758).
  * Avoid event failure race when disabling an event script;
    (bso#15755).</changelog>
  <changelog author="nopower@suse.com" date="1739966400">- Update to 4.21.4
  * Increasing slowness of sharesec performance with high number
    of registry shares; (bso#15780).
  * winbindd shows memleak in kerberos_decode_pac; (bso#15782).
  * Creation of GPOs applicable to more than one group is
    impossible with Samba 4.20.0 and later; (bso#15738).
  * Replace `crypt` module in
    python/samba/netcmd/user/readpasswords/common.py;
    (bso#15756).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * Spotlight search results don't show file size and creation
    date; (bso#15796).
  * General improvements for vfs_ceph_new module; (bso#15703).
  * net offlinejoin not working correctly; (bso#15777).
  * net ads create/join/winbind producing unix dysfunctional
    keytabs; (bso#15759).
  * Windows Explorer crashes on S-1-22-* Unix-SIDs when accessing
    security tab; (bso#14213).
  * The values from hresult_errstr_const and hresult_errstr are
    reversed in 4.20 and 4.21; (bso#15769).
  * Kerberos referral tickets are generated for principals in our
    domain if we have a trust to a top level domain; (bso#15778).
  * NETLOGON_NTLMV2_ENABLED is missing in the SamLogon*
    user_flags field; (bso#15783).
  * Regression: stack-use-after-return in crypt_as_best_we_can();
    (bso#15784).
  * libreplace:readline: gcc 15 complains about incompatible
    pointer types; (bso#15788).</changelog>
  <changelog author="nopower@suse.com" date="1743595200">- Update to 4.21.5
  * ldb index cache is too small on known large transactions
    (schemaupgrade, provision); (bso#15795).
  * Enable support for cephfs case insensitive behavior;
    (bso#15822).
  * Subnet based interfaces definition not listening on all
    covered IP addresses; (bso#15823).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727); (bsc#1238063).
  * Remove of file or directory not possible with vfs_acl_tdb;
    (bso#15791).
  * Unable to connect to CephFS subvolume shares with
    vfs_shadow_copy2; (bso#15797).
  * Add async io API from libcephfs to ceph_new VFS module;
    (bso#15810).
  * vfs_ceph_new module does not work with other modules for
    snapshot management; (bso#15818).
  * vfs_ceph_new: Add path based fallback for SMB_VFS_FCHOWN,
    SMB_VFS_FCHMOD and SMB_VFS_FNTIMES; (bso#15834).
  * Incorrect FSF address in ctdb pcp scripts; (bso#15820).
  * "samba-tool domain backup offline" hangs; (bso#15804).</changelog>
  <changelog author="nopower@suse.com" date="1748952000">- Update to 4.21.6
  * Running "gpo manage motd set" twice fails with backtrace;
    (bso#15774).
  * samba-tool gpo backup creates entity backups it can't read;
    (bso#15829).
  * gp_cert_auto_enroll_ext.py has problem unpacking GUIDs with
    prepended 0's; (bso#15839).
  * CVE-2025-0620 [SECURITY] smbd doesn't pick up group
    membership changes when re-authenticating an expired SMB
    session; (bso#15707), (bsc#1244136).
  * Deadlock between two smbd processes; (bso#15767).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727).
  * Wide link issue in samba 4.22; (bso#15841).
  * dcerpcd not able to bind to listening port; (bso#15851).
  * vfs_ceph_snapshots fails to list snapshots for entries at any
    level beyond share root; (bso#15819).
  * CTDB does not put nodes running NFS into grace on graceful
    shutdown; (bso#15858).</changelog>
  <changelog author="scabrero@suse.de" date="1751976000">- Update to 4.21.7
  * Windows security hardening locks out schannel'ed netlogon dc
    calls like netr_DsRGetDCName; (bsc#1246431); (bso#15876);
  * Trust domains are not created; (bso#15680);
  * Startup messages of rpc deamons fills /var/log/messages;
    (bso#15869);</changelog>
</package>
<package pkgid="604393686397c09fe3e6f950e5074daf917310be01e626c4c98c5e8e7c60d5c1" name="libldb2" arch="x86_64">
  <version epoch="0" ver="4.21.8+git.418.e80c9b2a88c" rel="150700.3.11.2"/>
  <changelog author="nopower@suse.com" date="1701086400">- Update to 4.19.3
  * sid_strings test broken by unix epoch &gt; 1700000000;
    (bso#15520).
  * smbd crashes if asked to return full information on close of
    a stream handle with delete on close disposition set;
    (bso#15487).
  * smbd: fix close order of base_fsp and stream_fsp in
    smb_fname_fsp_destructor(); (bso#15521).
  * Improve logging for failover scenarios; (bso#15499).
  * Files without "read attributes" NFS4 ACL permission are not
    listed in directories; (bso#15093).
  * CVE-2018-14628 [SECURITY] Deleted Object tombstones visible
    in AD LDAP to normal users; (bso#13595).
  * Kerberos TGS-REQ with User2User does not work for normal
    accounts; (bso#15492).
  * vfs_gpfs stat calls fail due to file system permissions;
    (bso#15507).
  * Samba doesn't build with Python 3.12; (bso#15513).</changelog>
  <changelog author="nopower@suse.com" date="1704801600">- Update to 4.19.4
  * net changesecretpw cannot set the machine account password if
    secrets.tdb is empty; (bso#13577).
  * For generating doc, take, if defined, env XML_CATALOG_FILES;
    (bso#15540).
  * Trivial C typo in nsswitch/winbind_nss_netbsd.c; (bso#15541).
  * vfs_linux_xfs is incorrectly named; (bso#15542).
  * systemd stumbled over copyright-message at smbd startup;
    (bso#15377).
  * Following intermediate abolute share-local symlinks is
    broken; (bso#15505).
  * ctdb RELEASE_IP causes a crash in release_ip if a connection
    to a non-public address disconnects first; (bso#15523).
  * shadow_copy2 broken when current fileset's directories are
    removed; (bso#15544).
  * smbd does not detect ctdb public ipv6 addresses for
    multichannel exclusion; (bso#15534).
  * 'force user = localunixuser' doesn't work if 'allow trusted
    domains = no' is set; (bso#15469).
  * smbget debug logging doesn't work; (bso#15525).
  * smget: username in the smburl and interactive password entry
    doesn't work; (bso#15532).
  * smbget auth function doesn't set values for password prompt
    correctly; (bso#15538).
  * Unable to copy and write files from clients to Ceph cluster
    via SMB Linux gateway with Ceph VFS module; (bso#15440).
  * Multichannel refresh network information; (bso#15547).</changelog>
  <changelog author="nopower@suse.com" date="1704888000">- Remove -x from bash shebang update-apparmor-samba-profile;
  (bsc#1218431).</changelog>
  <changelog author="nopower@suse.com" date="1708430400">- Update to 4.19.5
  * Windows 2016 fails to restore previous version of a file from
    a shadow_copy2 snapshot; (bso#13688).
  * Symlinks on AIX are broken in 4.19 (and a few version before
    that); (bso#15549).
  * Fake directory create times has no effect; (bso#12421).
  * ctime mixed up with mtime by smbd; (bso#15550).
  * samba-gpupdate --rsop fails if machine is not in a site;
    (bso#15548).
  * gpupdate: The root cert import when NDES is not available is
    broken; (bso#15557).
  * samba-gpupdate should print a useful message if cepces-submit
    can't be found; (bso#15552).
  * samba-gpupdate logging doesn't work; (bso#15558).
  * smbpasswd reset permissions only if not 0600; (bso#15555).</changelog>
  <changelog author="nopower@suse.com" date="1718884800">- Update to 4.19.7
  * ldb qsort might r/w out of bounds with an intransitive
    compare function (ldb 2.8.1 is already released);
    (bso#15569).
  * Many qsort() comparison functions are non-transitive, which
    can lead to out-of-bounds access in some circumstances (ldb
    2.8.1 is already released); (bso#15625).
  * Need to change gitlab-ci.yml tags in all branches to avoid CI
    bill; (bso#15638).
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * Anonymous smb3 signing/encryption should be allowed (similar
    to Windows Server 2022); (bso#15412).
  * Panic in dreplsrv_op_pull_source_apply_changes_trigger;
    (bso#15573).
  * winbindd, net ads join and other things don't work on an ipv6
    only host; (bso#15642).
  * Smbcacls incorrectly propagates inheritance with Inherit-Only
    flag; (bso#15636).
  * http library doesn't support  'chunked transfer encoding';
    (bso#15611).
- Update to 4.19.6
  * fd_handle_destructor() panics within an smbd_smb2_close() if
    vfs_stat_fsp() fails in fd_close(); (bso#15527).
  * samba-gpupdate: Correctly implement site support;
    (bso#15588).
  * libgpo: Segfault in python bindings; (bso#15599).
  * Packet marshalling push support missing for
    CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and
    CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580).</changelog>
  <changelog author="scabrero@suse.de" date="1722513600">- Fix a crash when joining offline and 'kerberos method' includes
  keytab; (bsc#1228732);
- Fix reading the password from STDIN or environment vars if it
  was already given in the command line; (bsc#1228732);</changelog>
  <changelog author="ddiss@suse.com" date="1725537600">- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated;
  (bso#15699); (bsc#1229684).
- Update to 4.19.8
  * Invalid client warning about command line passwords;
    (bso#15671);
  * Version string is truncated in manpages; (bso#15672);
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673);
  * cmdline_burn does not always burn secrets; (bso#15674);
  * Samba doesn't parse SDDL found in defaultSecurityDescriptor
    in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685);
  * We have added new options --vendor-name and --vendor-patch-
    revision arguments to ./configure to allow distributions and
    packagers to put their name in the Samba version string so that
    when debugging Samba the source of the binary is obvious;
    (bso#15654);
  * When claims enabled with heimdal kerberos, unable to log on to a
    Windows computer when user account need to change their own
    password; (bso#15655);
  * Fix clock skew error message and memory cache clock skew
    recovery; (bso#15676);
  * CTDB RADOS mutex helper misses namespace support; (bso#15665);
  * The images don't build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660);
  * Fix unnecessary delays in CTDB while processing requests under
    high load; (bso#15678);
  * Dynamic DNS updates with the internal DNS are not working;
    (bso#13019);
  * s4:nbt_server: does not provide unexpected handling, so winbindd
    can't use nmb requests instead cldap; (bso#15620);
  * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664);
  * "client use kerberos" and --use-kerberos is ignored for the machine
    account; (bso#15666);
  * Regression DFS not working with widelinks = true; (bso#15435);
  * ntlm_auth make logs more consistent with length check; (bso#15677);</changelog>
  <changelog author="nopower@suse.com" date="1728475200">-  Adjust spec to split out rpcd_* binaries into a separate
  sub package; (bsc#1231414).</changelog>
  <changelog author="nopower@suse.com" date="1728993600">- Update to 4.21.1
  * DH reconnect error handling can lead to stale sharemode
    entries; (bso#15624).
  * "inherit permissions = yes" triggers assert() in vfs_default
    when creating a stream; (bso#15695).
  * Samba 4.21.0 broke FreeIPA domain member integration;
    (bso#15715).
  * Missing conversion for msDS-UserTGTLifetime, msDS-
    ComputerTGTLifetime and msDS-ServiceTGTLifetime on "samba-
    tool domain auth policy modify"; (bso#15692).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * Durable handle is not granted when a previous OPEN exists
    with NoOplock; (bso#15649).
  * Durable handle is granted but reconnect fails; (bso#15651).
  * Disconnected durable handles with RH lease should not be
    purged by a new non conflicting open; (bso#15708).
  * net ads testjoin and other commands use the wrong secrets.tdb
    in a cluster; (bso#15714).
  * 4.21 using --with-system-mitkrb5 requires MIT krb5 1.16 as
    rfc 8009 etypes are used; (bso#15726).
  * VFS_OPEN_HOW_WITH_BACKUP_INTENT breaks shadow_copy2;
    (bso#15730).
  * Samba 4.20.0 DLZ module crashes BIND on startup; (bso#15643).
  * Cannot build libldb lmdb backend on a build without AD DC;
    (bso#15721).
  * Consistent log level for sighup handler; (bso#15706).
- Package ceph_new VFS module.
- Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when truncated;
  (bso#15699); (bsc#1229684).
- Update to 4.21.0
  * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when
    truncated; (bso#15699).
  * Bad variable definition for ParseTuple causing test failure
    for Smb3UnixTests.test_create_context_reparse; (bso#15702).
  * Add new vfs_ceph module (based on low level API);
    (bso#15686).
  * samba-tool can not load the default configuration file;
    (bso#15698).
  * Crash when readlinkat fails; (bso#15700).
  * Can't add/delete special keys to keytab for nfs, cifs, http
    etc; (bso#15689).
  * Compound SMB2 requests don't return
    NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses
    MacOSX clients; (bso#15696).
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673).
  * ldb_version.h is missing from ldb public library;
    (bso#15690).
  * Can not add/delete special keys to keytab for nfs, cifs, http
    etc; (bso#15689).
  * undefined reference to winbind_lookup_name_ex; (bso#15687).
  * per user veto and hide file syntax is to complex;
    (bso#15688).
- Update to 4.20.4
  * --version-* options are still not ergonomic, and they reject
    tilde characters; (bso#15673).
- Update to 4.20.3
  * Running samba-bgqd a a standalone systemd service does not
    work; (bso#15683).
  * When claims enabled with heimdal kerberos, unable to log on
    to a Windows computer when user account need to change their
    own password; (bso#15655).
  * Invalid client warning about command line passwords;
    (bso#15671).
  * Version string is truncated in manpages; (bso#15672).
  * cmdline_burn does not always burn secrets; (bso#15674).
  * Samba does not parse SDDL found in defaultSecurityDescriptor
    in AD_DS_Classes_Windows_Server_v1903.ldf; (bso#15685).
  * The images don\'t build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660).
  * Fix clock skew error message and memory cache clock skew
    recovery; (bso#15676).
  * Heimdal ignores _gsskrb5_decapsulate errors in
    init_sec_context/repl_mutual; (bso#15603).
  * s4:ldap_server: does not support tls channel bindings for
    sasl binds; (bso#15621).
  * CTDB socket output queues may suffer unbounded delays under
    some special conditions; (bso#15678).
- Update samba-tool package to require python3-Markdown also in
  the Heimdal ADDC build
- Fix named crash when using samba's DLZ plugin; (bsc#1224003);
  (bso#15643);
- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]
- Update to 4.20.2
  * vfs_widelinks with DFS shares breaks case insensitivity;
    (bso#15662); (bsc#1213607).
  * Samba build is not reproducible; (bso#13213).
  * ldb qsort might r/w out of bounds with an intransitive
    compare function; (bso#15569).
  * Many qsort() comparison functions are non-transitive, which
    can lead to out-of-bounds access in some circumstances;
    (bso#15625).
  * Need to change gitlab-ci.yml tags in all branches to avoid CI
    bill; (bso#15638).
  * We have added new options --vendor-name and --vendor-patch-
    revision arguments to ./configure to allow distributions and
    packagers to put their name in the Samba version string so
    that when debugging Samba the source of the binary is
    obvious; (bso#15654).
  * CTDB RADOS mutex helper misses namespace support;
    (bso#15665).
  * Dynamic DNS updates with the internal DNS are not working;
    (bso#13019).
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * Anonymous smb3 signing/encryption should be allowed (similar
    to Windows Server 2022); (bso#15412).
  * Panic in dreplsrv_op_pull_source_apply_changes_trigger;
    (bso#15573).
  * s4:nbt_server: does not provide unexpected handling, so
    winbindd can't use nmb requests instead cldap; (bso#15620).
  * winbindd, net ads join and other things don't work on an ipv6
    only host; (bso#15642).
  * Segmentation fault when deleting files in vfs_recycle;
    (bso#15659).
  * Panic in vfs_offload_token_db_fetch_fsp(); (bso#15664).
  * "client use kerberos" and --use-kerberos is ignored for the
    machine account; (bso#15666).
  * Regression DFS not working with widelinks = true;
    (bso#15435).
  * samba-gpupdate - Invalid NtVer in netlogon_samlogon_response;
    (bso#15633).
  * idmap_ad creates an incorrect local krb5.conf in case of
    trusted domain lookups; (bso#15653).
  * The images don't build after the git security release and
    CentOS 8 Stream is EOL; (bso#15660).
- Fix non deterministic builds; (bsc#1225754); (bso#13213);
- Update to 4.20.1
  * dns update debug message is too noisy; (bso#15630);
  * Do not fail PAC validation for RFC8009 checksums types; (bso#15635);
  * Improve performance of lookup_groupmem() in idmap_ad; (bso#15605);
  * Smbcacls incorrectly propagates inheritance with Inherit-Only flag; (bso#15636);
  * http library doesn't support 'chunked transfer encoding'; (bso#15611);
  * Provide a systemd service file for the background queue daemon; (bso#15600);
- Update to 4.20.0
  New features:
  * samba-tool user getpassword / syncpasswords ;rounds= change
  * Group Managed service account client-side features
  * New Windows Search Protocol Client
  * Allow 'smbcacls' to save/restore DACLs to file
  * Samba-tool extensions for AD Claims, Authentication Policies and Silos
  * AD DC support for Authentication Silos and Authentication Policies
  * Conditional ACEs and Resource Attribute ACEs
  * Service Witness Protocol [MS-SWN]
  Removed features:
  * Get locally logged on users from utmp
  Fixed bugs:
  * Avoid null-dereference with bad claims; (bso#15606);
  * ndr_pull_security_ace can leave resource attribute ACE coda
    claim struct undefined; (bso#15613);
  * fd_handle_destructor() panics within an smbd_smb2_close() if
    vfs_stat_fsp() fails in fd_close(); (bso#15527);
  * set_nt_acl sometimes fails with NT_STATUS_INVALID_PARAMETER -
    openat() EACCES; (bso#15583);
  * libgpo: Segfault in python bindings; (bso#15599);
  * Samba AD is missing some authentication policy tests;
    (bso#15607);
  * samba-gpupdate: Correctly implement site support; (bso#15588);
  * Remove unsupported "Final" keyword missing from Python 3.6;
    (bso#15575);
  * Additional witness backports for 4.20.0; (bso#15577);
  * Error output with wspsearch; (bso#15579);
  * Packet marshalling push support missing for
    CTDB_CONTROL_TCP_CLIENT_DISCONNECTED and
    CTDB_CONTROL_TCP_CLIENT_PASSED; (bso#15580);
  * Performance regression for NDR parsing of security
    descriptors; (bso#15574);
  * Build and install man page for wspsearch client utility;
    (bso#15565);
- Update to 4.19.9
  * libldb: performance issue with indexes (ldb 2.8.2 is already
    released); (bso#15590).
  * DH reconnect error handling can lead to stale sharemode
    entries; (bso#15624).
  * Incorrect FSCTL_QUERY_ALLOCATED_RANGES response when
    truncated; (bso#15699).
  * irpc_destructor may crash during shutdown; (bso#15280).
  * Compound SMB2 requests don't return
    NT_STATUS_NETWORK_SESSION_EXPIRED for all requests, confuses
    MacOSX clients; (bso#15696).
  * Crash when readlinkat fails; (bso#15700).</changelog>
  <changelog author="nopower@suse.com" date="1729080000">-  Adjust spec to split out rpcd_* binaries into a separate
  sub package; (bsc#1231414).</changelog>
  <changelog author="nopower@suse.com" date="1730376000">- Add placeholder changelog for sle15-sp7; (jsc#PED-11210).</changelog>
  <changelog author="nopower@suse.com" date="1732536000">- Update to 4.21.2
  * smbd fails to correctly check sharemode against OVERWRITE
    dispositions; (bso#15732).
  * Panic in close_directory; (bso#15754).
  * winexe no longer works with samba 4.21; (bso#15752).
  * protocol error - Unclear debug message "pad length mismatch"
    for invalid bind packet; (bso#14356).
  * NetrGetLogonCapabilities QueryLevel 2 needs to be
    implemented; (bso#15425).
  * gss_accept_sec_context() from Heimdal does not imply
    GSS_C_MUTUAL_FLAG with GSS_C_DCE_STYLE; (bso#15740).
  * winbindd should call process_set_title() for locator child;
    (bso#15749).
  * Update CTDB to track all TCP connections to public IP
    addresses; (bso#15320).</changelog>
  <changelog author="nopower@suse.com" date="1733486400">- Update shipped /etc/samba/smb.conf to point to smb.conf
  man page;(bsc#1233880).</changelog>
  <changelog author="nopower@suse.com" date="1736251200">- Update to 4.21.3
  * More possible replication loops against Azure AD;
    (bso#15701).
  * Compound rename from Mac clients can fail with
    NT_STATUS_INTERNAL_ERROR if the file has a lease;
    (bso#15697).
  * vfs crossrename seems not work correctly; (bso#15724).
  * After 'machine password timeout' /etc/krb5.keytab is not
    updated; (bso#6750).
  * Memory leak wbcCtxLookupSid; (bso#15771).
  * Fix heap-user-after-free with association groups;
    (bso#15765).
  * Segfault in vfs_btrfs; (bso#15758).
  * Avoid event failure race when disabling an event script;
    (bso#15755).</changelog>
  <changelog author="nopower@suse.com" date="1739966400">- Update to 4.21.4
  * Increasing slowness of sharesec performance with high number
    of registry shares; (bso#15780).
  * winbindd shows memleak in kerberos_decode_pac; (bso#15782).
  * Creation of GPOs applicable to more than one group is
    impossible with Samba 4.20.0 and later; (bso#15738).
  * Replace `crypt` module in
    python/samba/netcmd/user/readpasswords/common.py;
    (bso#15756).
  * vfs_gpfs silently garbles timestamps &gt; year 2106;
    (bso#15151).
  * Spotlight search results don't show file size and creation
    date; (bso#15796).
  * General improvements for vfs_ceph_new module; (bso#15703).
  * net offlinejoin not working correctly; (bso#15777).
  * net ads create/join/winbind producing unix dysfunctional
    keytabs; (bso#15759).
  * Windows Explorer crashes on S-1-22-* Unix-SIDs when accessing
    security tab; (bso#14213).
  * The values from hresult_errstr_const and hresult_errstr are
    reversed in 4.20 and 4.21; (bso#15769).
  * Kerberos referral tickets are generated for principals in our
    domain if we have a trust to a top level domain; (bso#15778).
  * NETLOGON_NTLMV2_ENABLED is missing in the SamLogon*
    user_flags field; (bso#15783).
  * Regression: stack-use-after-return in crypt_as_best_we_can();
    (bso#15784).
  * libreplace:readline: gcc 15 complains about incompatible
    pointer types; (bso#15788).</changelog>
  <changelog author="nopower@suse.com" date="1743595200">- Update to 4.21.5
  * ldb index cache is too small on known large transactions
    (schemaupgrade, provision); (bso#15795).
  * Enable support for cephfs case insensitive behavior;
    (bso#15822).
  * Subnet based interfaces definition not listening on all
    covered IP addresses; (bso#15823).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727); (bsc#1238063).
  * Remove of file or directory not possible with vfs_acl_tdb;
    (bso#15791).
  * Unable to connect to CephFS subvolume shares with
    vfs_shadow_copy2; (bso#15797).
  * Add async io API from libcephfs to ceph_new VFS module;
    (bso#15810).
  * vfs_ceph_new module does not work with other modules for
    snapshot management; (bso#15818).
  * vfs_ceph_new: Add path based fallback for SMB_VFS_FCHOWN,
    SMB_VFS_FCHMOD and SMB_VFS_FNTIMES; (bso#15834).
  * Incorrect FSF address in ctdb pcp scripts; (bso#15820).
  * "samba-tool domain backup offline" hangs; (bso#15804).</changelog>
  <changelog author="nopower@suse.com" date="1748952000">- Update to 4.21.6
  * Running "gpo manage motd set" twice fails with backtrace;
    (bso#15774).
  * samba-tool gpo backup creates entity backups it can't read;
    (bso#15829).
  * gp_cert_auto_enroll_ext.py has problem unpacking GUIDs with
    prepended 0's; (bso#15839).
  * CVE-2025-0620 [SECURITY] smbd doesn't pick up group
    membership changes when re-authenticating an expired SMB
    session; (bso#15707), (bsc#1244136).
  * Deadlock between two smbd processes; (bso#15767).
  * net ad join fails with "Failed to join domain: failed to
    create kerberos keytab"; (bso#15727).
  * Wide link issue in samba 4.22; (bso#15841).
  * dcerpcd not able to bind to listening port; (bso#15851).
  * vfs_ceph_snapshots fails to list snapshots for entries at any
    level beyond share root; (bso#15819).
  * CTDB does not put nodes running NFS into grace on graceful
    shutdown; (bso#15858).</changelog>
  <changelog author="scabrero@suse.de" date="1751976000">- Update to 4.21.7
  * Windows security hardening locks out schannel'ed netlogon dc
    calls like netr_DsRGetDCName; (bsc#1246431); (bso#15876);
  * Trust domains are not created; (bso#15680);
  * Startup messages of rpc deamons fills /var/log/messages;
    (bso#15869);</changelog>
  <changelog author="nopower@suse.com" date="1757419200">- - Update to 4.21.8
  * netr_LogonSamLogonEx returns NR_STATUS_ACCESS_DENIED with
    SysvolReady=0; (bso#14981).
  * getpwuid does not shift to new DC when current DC is down;
    (bso#15844).
  * Windows security hardening locks out schannel'ed netlogon dc
    calls like netr_DsRGetDCName; (bso#15876).
  * kinit command is failing with Missing cache Error;
    (bso#15840).
  * Figuring out the DC name from IP address fails and breaks
    fork_domain_child(); (bso#15891).
  * Delayed leader broadcast can block ctdb forever; (bso#15892).
  * 'net ads group' failed to list domain groups; (bso#15900).
  * Apparently there is a conflict between shadow_copy2 module
    and virusfilter (action quarantine); (bso#15663).
  * Fix handling of empty GPO link; (bso#15877).
  * SMB ACL inheritance doesn't work for files created;
    (bso#15880).</changelog>
  <changelog author="nopower@suse.com" date="1758628800">- CVE-2025-9640: fix vfs_streams_xattr uninitialized memory write;
  (bsc#1251279);(bso#15885).
- CVE-2025-10230: fix command Injection in WINS Server Hook Script;
  (bsc#1251280);(bso#15903).</changelog>
</package>
<package pkgid="8cd358d7fb2ef7d5a2f571f204fc5dce3299fbd988738d65e9056a2bf4ed3a20" name="liblmdb-0_9_30" arch="x86_64">
  <version epoch="0" ver="0.9.30" rel="150500.3.2.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1427803200">- Update to 0.9.14:
  * Fix to support 64K page size (ITS#7713)
  * Fix to persist decreased as well as increased mapsizes (ITS#7789)
  * Fix cursor bug when deleting last node of a DUPSORT key
  * Fix mdb_env_info to return FIXEDMAP address
  * Fix ambiguous error code from writing to closed DBI (ITS#7825)
  * Fix mdb_copy copying past end of file (ITS#7886)
  * Fix cursor bugs from page_merge/rebalance
  * Fix to dirty fewer pages in deletes (mdb_page_loose())
  * Fix mdb_dbi_open creating subDBs (ITS#7917)
  * Fix mdb_cursor_get(_DUP) with single value (ITS#7913)
  * Fix Windows compat issues in mtests (ITS#7879)
  * Add compacting variant of mdb_copy
  * Add BigEndian integer key compare code
  * Add mdb_dump/mdb_load utilities
  - Changes since 0.9.13:
  * Fix mdb_page_alloc unlimited overflow page search
  * Documentation:
  Re-fix MDB_CURRENT doc (ITS#7793)
  Fix MDB_GET_MULTIPLE/MDB_NEXT_MULTIPLE doc
  - Changes since 0.9.12:
  * Fix MDB_GET_BOTH regression (ITS#7875,#7681)
  * Fix MDB_MULTIPLE writing multiple keys (ITS#7834)
  * Fix mdb_rebalance (ITS#7829)
  * Fix mdb_page_split (ITS#7815)
  * Fix md_entries count (ITS#7861,#7828,#7793)
  * Fix MDB_CURRENT (ITS#7793)
  * Fix possible crash on Windows DLL detach
  * Misc code cleanup
  * Documentation:
  mdb_cursor_put: cursor moves on error (ITS#7771)
- Rebase automake.diff and 0001-Patch-for-LMDB-to-use-robust-mutexes.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1442577600">- Add baselibs.conf: liblmdb*-32bit is required by
  libKF5Baloo5-32bit.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1445688000">- Update to 0.9.16:
  * Fix cursor EOF bug (ITS#8190)
  * Fix handling of subDB records (ITS#8181)
  * Fix mdb_midl_shrink() usage (ITS#8200)
  - Changes since 0.9.15:
  * Fix txn init (ITS#7961,#7987)
  * Fix MDB_PREV_DUP (ITS#7955,#7671)
  * Fix compact of empty env (ITS#7956)
  * Fix mdb_copy file mode
  * Fix mdb_env_close() after failed mdb_env_open()
  * Fix mdb_rebalance collapsing root (ITS#8062)
  * Fix mdb_load with large values (ITS#8066)
  * Fix to retry writes on EINTR (ITS#8106)
  * Fix mdb_cursor_del on empty DB (ITS#8109)
  * Fix MDB_INTEGERDUP key compare (ITS#8117)
  * Fix error handling (ITS#7959,#8157,etc.)
  * Fix race conditions (ITS#7969,7970)
  * Added workaround for fdatasync bug in ext3fs
  * Build:
  * Don't use -fPIC for static lib
  * Update .gitignore (ITS#7952,#7953)
  * Cleanup for "make test" (ITS#7841), "make clean", mtest*.c
  * Misc. Android/Windows cleanup
  * Documentation
  * Fix MDB_APPEND doc
  * Fix MDB_MAXKEYSIZE doc (ITS#8156)
  * Fix mdb_cursor_put,mdb_cursor_del EACCES description
  * Fix mdb_env_sync(MDB_RDONLY env) doc (ITS#8021)
  * Clarify MDB_WRITEMAP doc (ITS#8021)
  * Clarify mdb_env_open doc
  * Clarify mdb_dbi_open doc</changelog>
  <changelog author="jengelh@inai.de" date="1447588800">- Use a source URL</changelog>
  <changelog author="kkaempf@suse.com" date="1454328000">- Renamed patches
  0002-Add-extra-tools-and-CFEngine-modifications-for-LMDB.patch
  - &gt; 0001-Add-extra-tools-and-CFEngine-modifications-for-LMDB.patch
  automake.diff
  - &gt; 0002-Autoconf-files.patch
  0003-Optimization-Define-correct-cacheline-size-on-HPUX.patch
- Dropped patch (upstream)
  0001-Patch-for-LMDB-to-use-robust-mutexes.patch
- Update to 0.9.17
  Fix ITS#7377 catch calloc failure
  Fix ITS#8237 regression from ITS#7589
  Fix ITS#8238 page_split for DUPFIXED pages
  Fix ITS#8221 MDB_PAGE_FULL on delete/rebalance
  Fix ITS#8258 rebalance/split assert
  Fix ITS#8263 cursor_put cursor tracking
  Fix ITS#8264 cursor_del cursor tracking
  Fix ITS#8310 cursor_del cursor tracking
  Fix ITS#8299 mdb_del cursor tracking
  Fix ITS#8300 mdb_del cursor tracking
  Fix ITS#8304 mdb_del cursor tracking
  Fix ITS#7771 fakepage cursor tracking
  Fix ITS#7789 ensure mapsize &gt;= pages in use
  Fix ITS#7971 mdb_txn_renew0() new reader slots
  Fix ITS#7969 use __sync_synchronize on non-x86
  Fix ITS#8311 page_split from update_key
  Fix ITS#8312 loose pages in nested txn
  Fix ITS#8313 mdb_rebalance dummy cursor
  Fix ITS#8315 dirty_room in nested txn
  Fix ITS#8323 dirty_list in nested txn
  Fix ITS#8316 page_merge cursor tracking
  Fix ITS#8321 cursor tracking
  Fix ITS#8319 mdb_load error messages
  Fix ITS#8320 mdb_load plaintext input
  Added mdb_txn_id() (ITS#7994)
  Added robust mutex support
  Miscellaneous cleanup/simplification
  Build
    Create install dirs if needed (ITS#8256)
    Fix ThreadProc decl on Win32/MSVC (ITS#8270)
    Added ssize_t typedef for MSVC (ITS#8067)
    Use ANSI apis on Windows (ITS#8069)
    Use O_SYNC if O_DSYNC,MDB_DSYNC are not defined (ITS#7209)
    Allow passing AR to make (ITS#8168)
    Allow passing mandir to make install (ITS#8169)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1466337600">- Update 0001-Add-extra-tools-and-CFEngine-modifications-for-LMDB.patch
  * do not force enable NOSUBDIR option in mdb_copy
- Update 0002-Autoconf-files.patch
  * build mdb_dump, mdb_load
  * distribute manpages</changelog>
  <changelog author="dmueller@suse.com" date="1507896000">- add soname-configurable.patch: Actually set the soname in the
  shared library rather than just renaming the files on disk post
  install (which does not actually do anything)</changelog>
  <changelog author="varkoly@suse.com" date="1562760000">- Fix occasional crash when freed pages landed on the dirty list twice
  (bnc#1136132).
  * Add 0001-ITS-8756-remove-loose-pg-from-dirty-list-in-freelist.patch</changelog>
  <changelog author="scabrero@suse.de" date="1576152000">- Fix assert in mdb_page_search_root (bsc#1159086).
  * Add 0001-ITS-8336-fix-page_search_root-assert-on-FreeDB.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1584792000">- LMDB 0.9.24 Release (2019/07/24)
  * ITS#8969 Tweak mdb_page_split
  * ITS#8975 WIN32 fix writemap set_mapsize crash
  * ITS#9007 Fix loose pages in WRITEMAP
- LMDB 0.9.23 Release (2018/12/19)
  * ITS#8756 Fix loose pages in dirty list
  * ITS#8831 Fix mdb_load flag init
  * ITS#8844 Fix mdb_env_close in forked process
  * Documentation
    + ITS#8857 mdb_cursor_del doesn't invalidate cursor
    + ITS#8908 GET_MULTIPLE etc don't change passed in key
- Drop upstream 0001-ITS-8756-remove-loose-pg-from-dirty-list-in-freelist.patch
- Drop upstream 0001-ITS-8336-fix-page_search_root-assert-on-FreeDB.patch
- Cleanup:
  * Use %license, drop %defattr
  * Use https for Url tag
- LMDB 0.9.22 Release (2018-03-22)
  * Fix MDB_DUPSORT alignment bug (ITS#8819)
  * Fix regression with new db from 0.9.19 (ITS#8760)
  * Fix liblmdb to build on Solaris (ITS#8612)
  * Fix delete behavior with DUPSORT DB (ITS#8622)
  * Fix mdb_cursor_get/mdb_cursor_del behavior (ITS#8722)
- LMDB 0.9.21 Release (2017/06/01)
  * Fix xcursor after cursor_del (ITS#8622)
- LMDB 0.9.20 (Withdrawn)
  * Fix mdb_load with escaped plaintext (ITS#8558)
  * Fix mdb_cursor_last / mdb_put interaction (ITS#8557)
- LMDB 0.9.19 Release (2016/12/28)
  * Fix mdb_env_cwalk cursor init (ITS#8424)
  * Fix robust mutexes on Solaris 10/11 (ITS#8339)
  * Tweak Win32 error message buffer
  * Fix MDB_GET_BOTH on non-dup record (ITS#8393)
  * Optimize mdb_drop
  * Fix xcursors after mdb_cursor_del (ITS#8406)
  * Fix MDB_NEXT_DUP after mdb_cursor_del (ITS#8412)
  * Fix mdb_cursor_put resetting C_EOF (ITS#8489)
  * Fix mdb_env_copyfd2 to return EPIPE on SIGPIPE (ITS#8504)
  * Fix mdb_env_copy with empty DB (ITS#8209)
  * Fix behaviors with fork (ITS#8505)
    LMDB leaks database FD into child processes (bsc#1178706)
  * Fix mdb_dbi_open with mainDB cursors (ITS#8542)
  * Fix robust mutexes on kFreeBSD (ITS#8554)
  * Fix utf8_to_utf16 error checks (ITS#7992)
  * Fix F_NOCACHE on MacOS, error is non-fatal (ITS#7682)
  * Build
    Make shared lib suffix overridable (ITS#8481)
  * Documentation
    + Cleanup doxygen nits
    + Note reserved vs actual mem/disk usage
- LMDB 0.9.18 Release (2016/02/05)
  * Fix robust mutex detection on glibc 2.10-11 (ITS#8330)
  * Fix page_search_root assert on FreeDB (ITS#8336)
  * Fix MDB_APPENDDUP vs. rewrite(single item) (ITS#8334)
  * Fix mdb_copy of large files on Windows
  * Fix subcursor move after delete (ITS#8355)
  * Fix mdb_midl_shirnk off-by-one (ITS#8363)
  * Check for utf8_to_utf16 failures (ITS#7992)
  * Catch strdup failure in mdb_dbi_open
  * Build
    + Additional makefile var tweaks (ITS#8169)
  * Documentation
    + Add Getting Started page
    + Update WRITEMAP description
- Drop 0002-Autoconf-files.patch, soname-configurable.patch and
  add Makefile-build-use-shared-lib.patch instead. Instead of
  replacing the Makefile with a libtool/automake based one, just
  patch the relevant parts of the upstream Makefile.</changelog>
  <changelog author="mrueckert@suse.de" date="1584792001">- copy the pkg config support from the fedora package</changelog>
  <changelog author="jgwang@suse.com" date="1614772800">- LMDB 0.9.28 Release (2021/02/04)
  * ITS#8662 add -a append option to mdb_load
- LMDB 0.9.27 Release (2020/10/26)
  * ITS#9376 fix repeated DUPSORT cursor deletes
- LMDB 0.9.26 Release (2020/08/11)
  * ITS#9278 fix robust mutex cleanup for FreeBSD
- LMDB 0.9.25 Release (2020/01/30)
  * ITS#9068 fix mdb_dump/load backslashes in printable content
  * ITS#9118 add MAP_NOSYNC for FreeBSD
  * ITS#9155 free mt_spill_pgs in non-nested txn on end</changelog>
  <changelog author="dmueller@suse.com" date="1616155200">- update to 0.9.29:
  * ITS#9461 refix ITS#9376
  * ITS#9500 fix regression from ITS#8662</changelog>
  <changelog author="alx.kuzza@gmail.com" date="1674475200">- update to 0.9.29:
  * lmdump is not creating lock files</changelog>
  <changelog author="dmueller@suse.com" date="1679227200">- update to 0.9.30:
  * LMDB page_split: key threshold depends on page
    size
  * avoid gcc optimization bug on sparc64 linux
  * - Mark infrequently used functions as cold
  * clear C_EOF on cursor with MDB_FIRST_DUP
  * Use sys/cachectl.h rather than asm/cachectl.h on
    mips</changelog>
</package>
<package pkgid="14bdf699fad11049d70ae6c92c70b0823ec61a24c85fe8fab4ff42d3724495ce" name="liblsan0" arch="x86_64">
  <version epoch="0" ver="14.3.0+git11799" rel="150000.1.11.1"/>
  <changelog author="rguenther@suse.com" date="1728475200">- Update to gcc-14 branch head, 4af44f2cf7d281f3e4f3957ef, git10750
  * includes libstdc++6 fix for parsing tzdata 2024b [gcc#116657]
- Add gcc14-pr116629.patch to fix ICE with LTO building openvino
  on aarch64 [boo#1230262]</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1732968000">- Add loongarch64 to asan_arch, atomic_arch,
  itm_arch, lsan_arch, tsan_arch and ubsan_arch
- Add larchintrin.h, lasxintrin.h and lsxintrin.h
  headers to gccXY main package in %files section
- Set build_primary_64bit to 1 for loongarch64</changelog>
  <changelog author="adrian@suse.de" date="1733140800">- disable go on loongarch64 for now</changelog>
  <changelog author="mardnh@gmx.de" date="1736078400">- Switch to glibc based cross-compiler for target hppa</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Define ALT_CC_UNDER_TEST and ALT_CXX_UNDER_TEST for compat tests</changelog>
  <changelog author="rguenther@suse.com" date="1738152000">- For cross compilers require the same or newer binutils, newlib
  or cross-glibc that was used at build time.  [bsc#1232526]</changelog>
  <changelog author="rguenther@suse.com" date="1738843200">- Adjust cross compiler requirements to use %requires_ge
- Fix condition on whether to enable plugins or JIT support to
  not check sle_version which is not defined in SLFO but to check
  is_opensuse and suse_version instead.
- Add gcc14-pr118780.patch to make the SLFO config work.</changelog>
  <changelog author="rguenther@suse.com" date="1740052800">- Update to gcc-14 branch head, 9ffecde121af883b60bbe60d0, git11321
  * fixes reported ICE in [bsc#1237442]
- Drop gcc14-pr116629.patch now backported to the branch.</changelog>
  <changelog author="rguenther@suse.com" date="1741608000">- Disable profiling during build when %want_reproducible_builds is set
  [bsc#1238491]</changelog>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
</package>
<package pkgid="f0f94871bab34946c439ec16abbe7e4f90e4b166ab3e4e4d988b012c2cb4ab73" name="liblsan0" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.3.3"/>
  <changelog author="rguenther@suse.com" date="1743163200">- Update to GCC trunk head, 15.0.1+git9001
  * includes -msplit-patch-nops required for user-space livepatching
    on powerpc
  * includes fix for Ada build with --enable-host-pie
- Adjust for removed avx10_2roundingintrin.h intrinsic header.
- Build GCC executables PIE on SLE.  [bsc#1239938]</changelog>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="06cacb0004fa1812393f571cb74e88a583680e661ecd85cd0b1d59f822b282ef" name="liblsan0" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.6.1"/>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
</package>
<package pkgid="d731b75adbfcbcd2867f25581f14ad098a05ccbc88c7c0c0310a4bd188816891" name="liblsan0" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.9.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc14-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="60a8cbfb7a64d07d6d0a78bea39d955fb3cf4e53793a8180171f539f9e7d364a" name="libluajit-5_1-2" arch="x86_64">
  <version epoch="0" ver="2.1.0~beta3+git.1624618403.e9577376" rel="150400.4.5.1"/>
  <changelog author="munix9@googlemail.com" date="1624536000">- Update to version 2.1.0~beta3+git291.3f9389ed:
  * Throw any errors before stack changes in trace stitching.
  * DynASM/x86: Add missing escape in pattern.
  * Fix HTML.
  * String buffers, part 2e: add serialization string dictionary.
  * DynASM/ARM64: Fix LSL/BFI* encoding with variable shifts.
  * Fix MinGW static build.
  * Fix dependencies.
  * Fix IR_BUFHDR assembly.</changelog>
  <changelog author="munix9@googlemail.com" date="1624968000">- Update to version 2.1.0~beta3+git294.e9577376:
  * Disable unreliable assertion for external frame unwinding.
  * Flush and close output file after profiling run.
  * Avoid conflict between 64 bit lightuserdata and ITERN key.</changelog>
  <changelog author="mcepl@suse.com" date="1626091200">- Clean up SPEC. We don't need update-alternatives after all.</changelog>
  <changelog author="mgorse@suse.com" date="1633608000">- Exclude s390x for now. There is a not-yet-upstreamed port
  available, but we would need to rebase it for our release.</changelog>
  <changelog author="mgorse@suse.com" date="1635163200">- Add luajit-ppc64-remove-asserts.patch: remove calls to
  lua_assert. Fixes the build with our revision (bsc#1191615).
- Add luajit-s390x.patch: add s390x support, based on Fedora's
  patch and ported to our revision.
- Remove ExcludeArch, since package currently builds on s390x.</changelog>
  <changelog author="fvogt@suse.com" date="1635336000">- Replace luajit-ppc64-remove-asserts.patch with
  luajit-ppc64-replace-asserts.patch to use the proper assert
  functions instead of removing them.</changelog>
  <changelog author="mgorse@suse.com" date="1754395200">- Add luajit-CVE-2024-25176.patch: fix zero stripping in %g number
  formatting (bsc#1246077 CVE-2024-25176).
- Add luajit-CVE-2024-25177.patch: fix unsinking of IR_FSTORE for
  NULL metatable (bsc#1246078 CVE-2024-25177).
- Add luajit-CVE-2024-25178.patch: rework stack overflow handling
  (bsc#1246079 CVE-2024-25178).</changelog>
</package>
<package pkgid="27d19b0036ea8205399d27b23cee9dd4b3add07e10e04294846f5ff4a5466bb3" name="libluajit-5_1-2" arch="x86_64">
  <version epoch="0" ver="2.1.0~beta3+git.1624618403.e9577376" rel="150400.4.7.1"/>
  <changelog author="munix9@googlemail.com" date="1624536000">- Update to version 2.1.0~beta3+git291.3f9389ed:
  * Throw any errors before stack changes in trace stitching.
  * DynASM/x86: Add missing escape in pattern.
  * Fix HTML.
  * String buffers, part 2e: add serialization string dictionary.
  * DynASM/ARM64: Fix LSL/BFI* encoding with variable shifts.
  * Fix MinGW static build.
  * Fix dependencies.
  * Fix IR_BUFHDR assembly.</changelog>
  <changelog author="munix9@googlemail.com" date="1624968000">- Update to version 2.1.0~beta3+git294.e9577376:
  * Disable unreliable assertion for external frame unwinding.
  * Flush and close output file after profiling run.
  * Avoid conflict between 64 bit lightuserdata and ITERN key.</changelog>
  <changelog author="mcepl@suse.com" date="1626091200">- Clean up SPEC. We don't need update-alternatives after all.</changelog>
  <changelog author="mgorse@suse.com" date="1633608000">- Exclude s390x for now. There is a not-yet-upstreamed port
  available, but we would need to rebase it for our release.</changelog>
  <changelog author="mgorse@suse.com" date="1635163200">- Add luajit-ppc64-remove-asserts.patch: remove calls to
  lua_assert. Fixes the build with our revision (bsc#1191615).
- Add luajit-s390x.patch: add s390x support, based on Fedora's
  patch and ported to our revision.
- Remove ExcludeArch, since package currently builds on s390x.</changelog>
  <changelog author="fvogt@suse.com" date="1635336000">- Replace luajit-ppc64-remove-asserts.patch with
  luajit-ppc64-replace-asserts.patch to use the proper assert
  functions instead of removing them.</changelog>
  <changelog author="mgorse@suse.com" date="1754395200">- Add luajit-CVE-2024-25176.patch: fix zero stripping in %g number
  formatting (bsc#1246077 CVE-2024-25176).
- Add luajit-CVE-2024-25177.patch: fix unsinking of IR_FSTORE for
  NULL metatable (bsc#1246078 CVE-2024-25177).
- Add luajit-CVE-2024-25178.patch: rework stack overflow handling
  (bsc#1246079 CVE-2024-25178).</changelog>
</package>
<package pkgid="bf5d7310ec892264e2e35dd3a644603d4a76454dff72b1d24710e2b6229d281e" name="liblvm2cmd2_03" arch="x86_64">
  <version epoch="0" ver="2.03.24" rel="150700.7.3.3"/>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6339)
  * 2.03.22:
  * Fix pv_major/pv_minor report field types so they are integers, not strings.
  * Add lvmdevices --delnotfound to delete entries for missing devices.
  * Always use cachepool name for metadata backup LV for lvconvert --repair.
  * Make metadata backup LVs read-only after pool's lvconvert --repair.
  * Handle 'lvextend --usepolicies' for pools for all activation variants.
  * Fix memleak in vgchange autoactivation setup.
  * Support conversion from thick to fully provisioned thin LV.
  * Cache/Thin-pool can use error and zero volumes for testing.
  * Individual thin volume can be cached, but cannot take snapshot.
  * internal support for handling error and zero target (for testing).
  * COW above trimmed maximal size is does not return error.
  * Add lvm.conf thin_restore and cache_restore settings.
  * Handle multiple mounts while resizing volume with a FS.
  * Handle leading/trailing spaces in sys_wwid and sys_serial used by deivce_id.
  * Fix failing -S|--select for non-reporting cmds if using LV info/status fields.
  * Allow snapshots of raid+integrity LV.
  * Fix multisegment RAID1 allocator to prevent using single disk for more legs.
  * 2.03.21:
  * Allow (write)cache over raid+integrity LV.
  * 2.03.20:
  * Fix segfault if using -S|--select with log/report_command_log=1 setting.
  * 2.03.19:
  * Do not reset SYSTEMD_READY variable in udev for PVs on MD and loop devices.
  * Ensure udev is processing origin LV before its thick snapshots LVs.
  * 2.03.18:
  * Fix warning for thin pool overprovisioning on lvextend.
  * Add support for writecache metadata_only and pause_writeback settings.
  * Fix missing error messages in lvmdbusd.
  * 2.03.17:
  * Add new options (--fs, --fsmode) for FS handling when resizing LVs (btrfs is unsupported).
  * Fix 'lvremove -S|--select LV' to not also remove its historical LV right away.
  * Fix lv_active field type to binary so --select and --binary applies properly.
  * Error out in lvm shell if using a cmd argument not supported in the shell.
  * Fix lvm shell's lastlog command to report previous pre-command failures.
  * Add --valuesonly option to lvmconfig to print only values without keys.
  * Add json_std output format for more JSON standard compliant version of output.
  * Fix many corner cases in device_id, including handling of S/N duplicates.
  * Fix various issues in lvmdbusd.
- device-mapper version upgrade to 1.02.196
  * Improve parallel creation of /dev/mapper/control device node.
  * Import previous ID_FS_* udev records in 13-dm-disk.rules for suspended DM dev.
  * Remove NAME="mapper/control" rule from 10-dm.rules to avoid udev warnings.
  * Improve 'dmsetup create' without given table line with new kernels.
  * Add DM_REPORT_GROUP_JSON_STD for more JSON standard compliant output format.
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
  <changelog author="heming.zhao@suse.com" date="1716724800">- Update lvm2 from LVM2.2.03.22 to LVM2.2.03.24
  * ** WHATS_NEW from 2.03.22 to 2.03.24 ***
  Version 2.03.24 - 16th May 2024
  ===============================
    Lvconvert supports VDO options for thin-pool with vdo conversion.
    Improve placement to .data.rel.ro and .rodata sections.
    Fix support for -y and -W when creating thinpool with vdo.
    Bettter support for runtime valgrind detection.
    Allow command interruption when communicating with dmeventd.
    Fix resize of VDO volume used for thin pool data volume.
    Use -Wl,-z,now and -Wl,--as-needed for compilation by default.
    Require 3.7 as minimal version for sanlock.
    Share code for closing opened desriptors on program startup.
    Fix memleak in lvmcache.
    Add configure --with-default-event-activation=ON setting.
    Fix return value from reporter function when hitting internal error.
    Skip checking of pools for lvremove and vgremove commands.
    VDO modprobes dm-vdo for 6.9 kernel and kvdo for older kernel version.
    Fix lvs reporting for VDO volumes with new upstream kernel driver.
    Don't import DM_UDEV_DISABLE_OTHER_RULES_FLAG in LVM rules, DM rules cover it.
    Fix table line generation for cache snapshots using cachevol.
    Enhance lvconvert support for external origins stacking.
    When swapping LV names also swap properties like hostname, time and data.
    Fix removal of stacked external origins.
    Lock filesystem when converting volume to read-only external origin.
    Support external origin between different thin-pool.
    Improve validation of acceptable volumes for external origins.
    Reduce amount of preloaded devices for complex device trees.
    Avoid logging problems from monitoring snapshots with inactive origins.
    Check for cache policy module presence in kernel's builtin modules file.
    Add configure --with-modulesdir to select kernel modules directory.
    Support creation of thin-pool with VDO use for its data volume.
  Version 2.03.23 - 21st November 2023
  ====================================
    Set the first lv_attr flag for raid integrity images to i or I.
    Add -A option for pvs and pvscan to show PVs outside devices file.
    Improve searched_devnames temp file usage to prevent redundant scanning.
    Change default search_for_devnames from auto to all.
    Add lvmdevices --refresh to search for missing PVIDs on all devices.
    Add comparison between old and new entries in lvmdevices --check.
    Fix device_id matching order - match non-devname first.
    Fix "lvconvert -m 0" when there is other than first in-sync leg.
    Use system.devices as default for dmeventd when dmeventd.devices is undefined.
    Accept WWIDs containing QEMU HARDDISK for device_id.
    Improve handling of non-standard WWID prefixes used for device_id.
    Configure automatically enables cmdlib for dmeventd and notify-dbus for dbus.
    Fix hint calculation for pools with zero or error segment.
    Configure supports --disable-shared to build only static binaries.
    Configure supports --without-{blkid|systemd|udev} for easier static build.
    Refresh device ids if the system changes.
    Fix pvmove when specifying raid components as moved LVs.
    Enhance error detection for lvm_import_vdo.
    Support PV lists with thin lvconvert.
    Fix support for lvm_import_vdo with SCSI VDO volumes.
    Fix locking issue leading to hanging concurrent vgchange --refresh.
    Recognize lvm.conf report/headings=2 for full column names in report headings.
    Add --headings none|abbrev|full cmd line option to set report headings type.
    Fix conversion to thin pool using lvmlockd.
    Fix conversion from thick into thin volume using lvmlockd.
    Require writable LV for conversion to vdo pool.
    Fix return value from lvconvert integrity remove.
    Preserve UUID for pool metadata spare.
    Preserve UUID for swapped pool metadata.
    Rewrite validation of device name entries used as device_id.
  * ** WHATS_NEW_DM from 1.02.196 to 1.02.198 ***
  Version 1.02.198 - 16th May 2024
  ================================
    Fix static only compilation of libdevmapper.a and dmsetup tool.
    Use better code for closing opened descriptors when starting dmeventd.
    Correct dmeventd -R for systemd environment.
    Restart of dmeventd -R checks pid file to detect running dmeventd first.
    Query with dmeventd -i quickly ends when there is no running dmeventd.
    Enhance dm_get_status_raid to handle mismatching status or reported legs.
    Create /dev/disk/by-label symlinks for DM devs that have crypto as next layer.
    Persist udev db for DM devs on cleanup used in initrd to rootfs transition.
    Process synthetic udev events other than 'add/change' as 'change' events.
    Increase DM_UDEV_RULES_VSN to 3 to indicate changed udev rules.
    Rename DM_NOSCAN to .DM_NOSCAN so it's not stored in udev db.
    Rename DM_SUSPENDED to .DM_SUSPENDED so it's not stored in udev db.
    Do not import DM_UDEV_DISABLE_OTHER_RULES_FLAG from db in 10-dm-disk.rules.
    Test DISK_RO after importing properties from db in 10-dm.rules.
    Also import ID_FS_TYPE in 13-dm-disk.rules from db if needed.
  Version 1.02.197 - 21st November 2023
  =====================================
    Fix invalid JSON report if using DM_REPORT_OUTPUT_MULTIPLE_TIMES and selection.
    Propagate ioctl errno from dm_task_run when creating new table line.
    Add support for group aliases in dmstats.
    Add support for exit-on file for dmeventd to reduce shutdown delays.
    Add configure option --with-dmeventd-exit-on-path to specify default path.
    Add dmsetup --headings none|abbrev|full to set report headings type.
    Add DM_REPORT_OUTPUT_FIELD_IDS_IN_HEADINGS to provide alternative headings.
- Drop patches that have been merged into upstream
  - 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  - 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  - 0003-lvconvert-fix-regresion-from-integrity-check.patch
  - 0004-gcc-cleanup-warnings.patch
  - 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  - 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  - 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  - 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  - 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  - 0010-lvmlockd-client-mutex-ordering.patch
  - 0011-filesystem-move-stat-after-open-check.patch
  - 0012-tests-check-for-writecache.patch
  - 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  - 0014-gcc-fix-warnings-for-x32-architecture.patch
  - 0015-gcc-warning-missing-braces-around-initializer.patch
  - 0016-test-improve-aux-teardown.patch
  - 0017-tests-aux-try-with-extra-sleep.patch
  - 0018-tests-aux-using-singl-lvmconf-call.patch
  - 0019-tests-missing-to-check-for-writecache-support.patch
  - 0020-tests-pvmove-large-disk-area.patch
  - 0021-tests-enforce-full-fs-check.patch
  - 0022-tests-update-for-work-in-fake-dev-environment.patch
  - 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  - 0024-tests-better-slowdown.patch
- Update patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch</changelog>
  <changelog author="glass.su@suse.com" date="1729771200">- add rpm dependency in spec file for aligning new DM udev rules (bsc#1225783 bsc#1229518 bsc#1232063)
  * update lvm2.spec for multipath-tools and udev</changelog>
  <changelog author="heming.zhao@suse.com" date="1740052800">- system with LVM on iSCSI hangs on shutdown because blk-availability.service is not enabled (bsc#1236788)
  * update lvm2.spec
  - remove blk-availability.service from %postun
  - add new Provides 'dont_stop_blk_availability_service'</changelog>
  <changelog author="heming.zhao@suse.com" date="1741003200">- Fixes the lvm2-testsuite failure to run on SUSE kernel (bsc#1238213)
  * Add upstream patch
    + tests-fix-wrong-pos-with-CONFIG_PRINTK_CALLER.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1741348800">- Fixes the lvm2-testsuite case fsadm-btrfs.sh (bsc#1238857)
  * Update SUSE special patch
    + fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1744718400">- LVM filter behaves unexpectedly for MPIO devices in SLES15SP5 (bsc#1216938)
  * set lvm.conf devices.multipath_wwids_file=""</changelog>
  <changelog author="glass.su@suse.com" date="1753876800">- L3: systemd fails to start lvmlockd with sanlock running (bsc#1246691)
  * Add upstream patches for sd_notify configure option
    + bug-1246691_01-configure.ac-build-lvmlockd-with-notify.patch
    + bug-1246691_02-configure-autoreconf.patch
    + bug-1246691_03-configure.ac-add-option-disable-enable-sd-notify.patch
    + bug-1246691_04-lvmlockd-utilize-SD_NOTIFY_SUPPORT.patch
    + bug-1246691_05-configure-autoreconf.patch
  * Update lvm2.spec
    + add pkgconfig(systemd) for lvmlockd build
    + enable configure option '--enable-sd-notify' for lvmlockd</changelog>
</package>
<package pkgid="77af679fa381222c3a2a2c8bc341772441b3a23c3851be0807ba873d444da746" name="liblvm2cmd2_03" arch="x86_64">
  <version epoch="0" ver="2.03.24" rel="150700.7.6.1"/>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6339)
  * 2.03.22:
  * Fix pv_major/pv_minor report field types so they are integers, not strings.
  * Add lvmdevices --delnotfound to delete entries for missing devices.
  * Always use cachepool name for metadata backup LV for lvconvert --repair.
  * Make metadata backup LVs read-only after pool's lvconvert --repair.
  * Handle 'lvextend --usepolicies' for pools for all activation variants.
  * Fix memleak in vgchange autoactivation setup.
  * Support conversion from thick to fully provisioned thin LV.
  * Cache/Thin-pool can use error and zero volumes for testing.
  * Individual thin volume can be cached, but cannot take snapshot.
  * internal support for handling error and zero target (for testing).
  * COW above trimmed maximal size is does not return error.
  * Add lvm.conf thin_restore and cache_restore settings.
  * Handle multiple mounts while resizing volume with a FS.
  * Handle leading/trailing spaces in sys_wwid and sys_serial used by deivce_id.
  * Fix failing -S|--select for non-reporting cmds if using LV info/status fields.
  * Allow snapshots of raid+integrity LV.
  * Fix multisegment RAID1 allocator to prevent using single disk for more legs.
  * 2.03.21:
  * Allow (write)cache over raid+integrity LV.
  * 2.03.20:
  * Fix segfault if using -S|--select with log/report_command_log=1 setting.
  * 2.03.19:
  * Do not reset SYSTEMD_READY variable in udev for PVs on MD and loop devices.
  * Ensure udev is processing origin LV before its thick snapshots LVs.
  * 2.03.18:
  * Fix warning for thin pool overprovisioning on lvextend.
  * Add support for writecache metadata_only and pause_writeback settings.
  * Fix missing error messages in lvmdbusd.
  * 2.03.17:
  * Add new options (--fs, --fsmode) for FS handling when resizing LVs (btrfs is unsupported).
  * Fix 'lvremove -S|--select LV' to not also remove its historical LV right away.
  * Fix lv_active field type to binary so --select and --binary applies properly.
  * Error out in lvm shell if using a cmd argument not supported in the shell.
  * Fix lvm shell's lastlog command to report previous pre-command failures.
  * Add --valuesonly option to lvmconfig to print only values without keys.
  * Add json_std output format for more JSON standard compliant version of output.
  * Fix many corner cases in device_id, including handling of S/N duplicates.
  * Fix various issues in lvmdbusd.
- device-mapper version upgrade to 1.02.196
  * Improve parallel creation of /dev/mapper/control device node.
  * Import previous ID_FS_* udev records in 13-dm-disk.rules for suspended DM dev.
  * Remove NAME="mapper/control" rule from 10-dm.rules to avoid udev warnings.
  * Improve 'dmsetup create' without given table line with new kernels.
  * Add DM_REPORT_GROUP_JSON_STD for more JSON standard compliant output format.
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
  <changelog author="heming.zhao@suse.com" date="1716724800">- Update lvm2 from LVM2.2.03.22 to LVM2.2.03.24
  * ** WHATS_NEW from 2.03.22 to 2.03.24 ***
  Version 2.03.24 - 16th May 2024
  ===============================
    Lvconvert supports VDO options for thin-pool with vdo conversion.
    Improve placement to .data.rel.ro and .rodata sections.
    Fix support for -y and -W when creating thinpool with vdo.
    Bettter support for runtime valgrind detection.
    Allow command interruption when communicating with dmeventd.
    Fix resize of VDO volume used for thin pool data volume.
    Use -Wl,-z,now and -Wl,--as-needed for compilation by default.
    Require 3.7 as minimal version for sanlock.
    Share code for closing opened desriptors on program startup.
    Fix memleak in lvmcache.
    Add configure --with-default-event-activation=ON setting.
    Fix return value from reporter function when hitting internal error.
    Skip checking of pools for lvremove and vgremove commands.
    VDO modprobes dm-vdo for 6.9 kernel and kvdo for older kernel version.
    Fix lvs reporting for VDO volumes with new upstream kernel driver.
    Don't import DM_UDEV_DISABLE_OTHER_RULES_FLAG in LVM rules, DM rules cover it.
    Fix table line generation for cache snapshots using cachevol.
    Enhance lvconvert support for external origins stacking.
    When swapping LV names also swap properties like hostname, time and data.
    Fix removal of stacked external origins.
    Lock filesystem when converting volume to read-only external origin.
    Support external origin between different thin-pool.
    Improve validation of acceptable volumes for external origins.
    Reduce amount of preloaded devices for complex device trees.
    Avoid logging problems from monitoring snapshots with inactive origins.
    Check for cache policy module presence in kernel's builtin modules file.
    Add configure --with-modulesdir to select kernel modules directory.
    Support creation of thin-pool with VDO use for its data volume.
  Version 2.03.23 - 21st November 2023
  ====================================
    Set the first lv_attr flag for raid integrity images to i or I.
    Add -A option for pvs and pvscan to show PVs outside devices file.
    Improve searched_devnames temp file usage to prevent redundant scanning.
    Change default search_for_devnames from auto to all.
    Add lvmdevices --refresh to search for missing PVIDs on all devices.
    Add comparison between old and new entries in lvmdevices --check.
    Fix device_id matching order - match non-devname first.
    Fix "lvconvert -m 0" when there is other than first in-sync leg.
    Use system.devices as default for dmeventd when dmeventd.devices is undefined.
    Accept WWIDs containing QEMU HARDDISK for device_id.
    Improve handling of non-standard WWID prefixes used for device_id.
    Configure automatically enables cmdlib for dmeventd and notify-dbus for dbus.
    Fix hint calculation for pools with zero or error segment.
    Configure supports --disable-shared to build only static binaries.
    Configure supports --without-{blkid|systemd|udev} for easier static build.
    Refresh device ids if the system changes.
    Fix pvmove when specifying raid components as moved LVs.
    Enhance error detection for lvm_import_vdo.
    Support PV lists with thin lvconvert.
    Fix support for lvm_import_vdo with SCSI VDO volumes.
    Fix locking issue leading to hanging concurrent vgchange --refresh.
    Recognize lvm.conf report/headings=2 for full column names in report headings.
    Add --headings none|abbrev|full cmd line option to set report headings type.
    Fix conversion to thin pool using lvmlockd.
    Fix conversion from thick into thin volume using lvmlockd.
    Require writable LV for conversion to vdo pool.
    Fix return value from lvconvert integrity remove.
    Preserve UUID for pool metadata spare.
    Preserve UUID for swapped pool metadata.
    Rewrite validation of device name entries used as device_id.
  * ** WHATS_NEW_DM from 1.02.196 to 1.02.198 ***
  Version 1.02.198 - 16th May 2024
  ================================
    Fix static only compilation of libdevmapper.a and dmsetup tool.
    Use better code for closing opened descriptors when starting dmeventd.
    Correct dmeventd -R for systemd environment.
    Restart of dmeventd -R checks pid file to detect running dmeventd first.
    Query with dmeventd -i quickly ends when there is no running dmeventd.
    Enhance dm_get_status_raid to handle mismatching status or reported legs.
    Create /dev/disk/by-label symlinks for DM devs that have crypto as next layer.
    Persist udev db for DM devs on cleanup used in initrd to rootfs transition.
    Process synthetic udev events other than 'add/change' as 'change' events.
    Increase DM_UDEV_RULES_VSN to 3 to indicate changed udev rules.
    Rename DM_NOSCAN to .DM_NOSCAN so it's not stored in udev db.
    Rename DM_SUSPENDED to .DM_SUSPENDED so it's not stored in udev db.
    Do not import DM_UDEV_DISABLE_OTHER_RULES_FLAG from db in 10-dm-disk.rules.
    Test DISK_RO after importing properties from db in 10-dm.rules.
    Also import ID_FS_TYPE in 13-dm-disk.rules from db if needed.
  Version 1.02.197 - 21st November 2023
  =====================================
    Fix invalid JSON report if using DM_REPORT_OUTPUT_MULTIPLE_TIMES and selection.
    Propagate ioctl errno from dm_task_run when creating new table line.
    Add support for group aliases in dmstats.
    Add support for exit-on file for dmeventd to reduce shutdown delays.
    Add configure option --with-dmeventd-exit-on-path to specify default path.
    Add dmsetup --headings none|abbrev|full to set report headings type.
    Add DM_REPORT_OUTPUT_FIELD_IDS_IN_HEADINGS to provide alternative headings.
- Drop patches that have been merged into upstream
  - 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  - 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  - 0003-lvconvert-fix-regresion-from-integrity-check.patch
  - 0004-gcc-cleanup-warnings.patch
  - 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  - 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  - 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  - 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  - 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  - 0010-lvmlockd-client-mutex-ordering.patch
  - 0011-filesystem-move-stat-after-open-check.patch
  - 0012-tests-check-for-writecache.patch
  - 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  - 0014-gcc-fix-warnings-for-x32-architecture.patch
  - 0015-gcc-warning-missing-braces-around-initializer.patch
  - 0016-test-improve-aux-teardown.patch
  - 0017-tests-aux-try-with-extra-sleep.patch
  - 0018-tests-aux-using-singl-lvmconf-call.patch
  - 0019-tests-missing-to-check-for-writecache-support.patch
  - 0020-tests-pvmove-large-disk-area.patch
  - 0021-tests-enforce-full-fs-check.patch
  - 0022-tests-update-for-work-in-fake-dev-environment.patch
  - 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  - 0024-tests-better-slowdown.patch
- Update patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch</changelog>
  <changelog author="glass.su@suse.com" date="1729771200">- add rpm dependency in spec file for aligning new DM udev rules (bsc#1225783 bsc#1229518 bsc#1232063)
  * update lvm2.spec for multipath-tools and udev</changelog>
  <changelog author="heming.zhao@suse.com" date="1740052800">- system with LVM on iSCSI hangs on shutdown because blk-availability.service is not enabled (bsc#1236788)
  * update lvm2.spec
  - remove blk-availability.service from %postun
  - add new Provides 'dont_stop_blk_availability_service'</changelog>
  <changelog author="heming.zhao@suse.com" date="1741003200">- Fixes the lvm2-testsuite failure to run on SUSE kernel (bsc#1238213)
  * Add upstream patch
    + tests-fix-wrong-pos-with-CONFIG_PRINTK_CALLER.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1741348800">- Fixes the lvm2-testsuite case fsadm-btrfs.sh (bsc#1238857)
  * Update SUSE special patch
    + fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1744718400">- LVM filter behaves unexpectedly for MPIO devices in SLES15SP5 (bsc#1216938)
  * set lvm.conf devices.multipath_wwids_file=""</changelog>
  <changelog author="glass.su@suse.com" date="1753876800">- L3: systemd fails to start lvmlockd with sanlock running (bsc#1246691)
  * Add upstream patches for sd_notify configure option
    + bug-1246691_01-configure.ac-build-lvmlockd-with-notify.patch
    + bug-1246691_02-configure-autoreconf.patch
    + bug-1246691_03-configure.ac-add-option-disable-enable-sd-notify.patch
    + bug-1246691_04-lvmlockd-utilize-SD_NOTIFY_SUPPORT.patch
    + bug-1246691_05-configure-autoreconf.patch
  * Update lvm2.spec
    + add pkgconfig(systemd) for lvmlockd build
    + enable configure option '--enable-sd-notify' for lvmlockd</changelog>
  <changelog author="glass.su@suse.com" date="1770724800">- L3: LVM_SUPPRESS_FD_WARNINGS is no longer effective (bsc#1257661)
  * Add upstream patch
    + bug-1257661-libdaemon-fix-suppressing-stray-fd-warnings.patch</changelog>
</package>
<package pkgid="cd3e6139a7720eed4e72eb83bb8b73587aa551679a4446fe266f8214694f2e89" name="liblzma5-32bit" arch="x86_64">
  <version epoch="0" ver="5.4.1" rel="150600.3.6.1"/>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a supplements.</changelog>
  <changelog author="info@paolostivanin.com" date="1584532800">- Update to 5.2.5:
  * liblzma:
  - Fixed several C99/C11 conformance bugs. Now the code is clean
    under gcc/clang -fsanitize=undefined. Some of these changes
    might have a negative effect on performance with old GCC
    versions or compilers other than GCC and Clang. The configure
    option --enable-unsafe-type-punning can be used to (mostly)
    restore the old behavior but it shouldn't normally be used.
  - Improved API documentation of lzma_properties_decode().
  - Added a very minor encoder speed optimization.
  * xz:
  - Fixed a crash in "xz -dcfv not_an_xz_file". All four options
    were required to trigger it. The crash occurred in the
    progress indicator code when xz was in passthru mode where
    xz works like "cat".
  - Fixed an integer overflow with 32-bit off_t. It could happen
    when decompressing a file that has a long run of zero bytes
    which xz would try to write as a sparse file. Since the build
    system enables large file support by default, off_t is
    normally 64-bit even on 32-bit systems.
  - Fixes for --flush-timeout:
  * Fix semi-busy-waiting.
  * Avoid unneeded flushes when no new input has arrived
    since the previous flush was completed.
  - Added a special case for 32-bit xz: If --memlimit-compress is
    used to specify a limit that exceeds 4020 MiB, the limit will
    be set to 4020 MiB. The values "0" and "max" aren't affected
    by this and neither is decompression. This hack can be
    helpful when a 32-bit xz has access to 4 GiB address space
    but the specified memlimit exceeds 4 GiB. This can happen
    e.g. with some scripts.
  - Capsicum sandbox is now enabled by default where available
    (FreeBSD &gt;= 10). The sandbox debug messages (xz -vv) were
    removed since they seemed to be more annoying than useful.</changelog>
  <changelog author="jengelh@inai.de" date="1623067200">- Upgrade old rpm constructs.</changelog>
  <changelog author="meissner@suse.com" date="1649764800">- use https urls.</changelog>
  <changelog author="dmueller@suse.com" date="1660305600">- update to 5.2.6 (CVE-2022-1271, bsc#1198062):
  * xz:
  - The --keep option now accepts symlinks, hardlinks, and
    setuid, setgid, and sticky files.
  - When copying metadata from the source file to the destination
    file, don't try to set the group (GID) if it is already set
    correctly. This avoids a failure on OpenBSD (and possibly on
    a few other OSes) where files may get created so that their
    group doesn't belong to the user, and fchown(2) can fail even
    if it needs to do nothing.
  - Cap --memlimit-compress to 2000 MiB instead of 4020 MiB on
    MIPS32 because on MIPS32 userspace processes are limited
    to 2 GiB of address space.
  * liblzma:
  - Fixed a missing error-check in the threaded encoder. If a
    small memory allocation fails, a .xz file with an invalid
    Index field would be created. Decompressing such a file would
    produce the correct output but result in an error at the end.
    Thus this is a "mild" data corruption bug. Note that while
    a failed memory allocation can trigger the bug, it cannot
    cause invalid memory access.
  - The decoder for .lzma files now supports files that have
    uncompressed size stored in the header and still use the
    end of payload marker (end of stream marker) at the end
    of the LZMA stream. Such files are rare but, according to
    the documentation in LZMA SDK, they are valid.
    doc/lzma-file-format.txt was updated too.
  - Improved 32-bit x86 assembly files:
  * Support Intel Control-flow Enforcement Technology (CET)
  * Use non-executable stack on FreeBSD.
  * xzgrep:
  - Fixed arbitrary command injection via a malicious filename
    (CVE-2022-1271, ZDI-CAN-16587). A standalone patch for
    this was released to the public on 2022-04-07. A slight
    robustness improvement has been made since then and, if
    using GNU or *BSD grep, a new faster method is now used
    that doesn't use the old sed-based construct at all. This
    also fixes bad output with GNU grep &gt;= 3.5 (2020-09-27)
    when xzgrepping binary files.
  - Fixed detection of corrupt .bz2 files.
  - Improved error handling to fix exit status in some situations
    and to fix handling of signals: in some situations a signal
    didn't make xzgrep exit when it clearly should have. It's
    possible that the signal handling still isn't quite perfect
    but hopefully it's good enough.
  - Documented exit statuses on the man page.
  - xzegrep and xzfgrep now use "grep -E" and "grep -F" instead
    of the deprecated egrep and fgrep commands.
  - Fixed parsing of the options -E, -F, -G, -P, and -X. The
    problem occurred when multiple options were specied in
    a single argument, for example,
    echo foo | xzgrep -Fe foo
    treated foo as a filename because -Fe wasn't correctly
    split into -F -e.
  - Added zstd support.
  * xzdiff/xzcmp:
  - Fixed wrong exit status. Exit status could be 2 when the
    correct value is 1.
  - Documented on the man page that exit status of 2 is used
    for decompression errors.
  - Added zstd support.
  * xzless:
  - Fix less(1) version detection. It failed if the version number
    from "less -V" contained a dot.</changelog>
  <changelog author="c.j@tuta.io" date="1664539200">- update to 5.2.7:
  * liblzma:
  - Add API doc note about the .xz decoder LZMA_MEMLIMIT_ERROR bug.
  - Add dest and src NULL checks to lzma_index_cat.
    The documentation states LZMA_PROG_ERROR can be returned from
    lzma_index_cat. Previously, lzma_index_cat could not return
    LZMA_PROG_ERROR. Now, the validation is similar to
    lzma_index_append, which does a NULL check on the index
    parameter.
  - Fix copying of check type statistics in lzma_index_cat().
    The check type of the last Stream in dest was never copied to
    dest-&gt;checks (the code tried to copy it but it was done too late).
    This meant that the value returned by lzma_index_checks() would
    only include the check type of the last Stream when multiple
    lzma_indexes had been concatenated.
    In xz --list this meant that the summary would only list the
    check type of the last Stream, so in this sense this was only
    a visual bug. However, it's possible that some applications
    use this information for purposes other than merely showing
    it to the users in an informational message. I'm not aware of
    such applications though and it's quite possible that such
    applications don't exist.
    Regular streamed decompression in xz or any other application
    doesn't use lzma_index_cat() and so this bug cannot affect them.
  - Stream decoder: Fix restarting after LZMA_MEMLIMIT_ERROR.
    If lzma_code() returns LZMA_MEMLIMIT_ERROR it is now possible
    to use lzma_memlimit_set() to increase the limit and continue
    decoding. This was supposed to work from the beginning but
    there was a bug. With other decoders (.lzma or threaded .xz)
    this already worked correctly.
  - lzma_filters_copy: Keep dest[] unmodified if an error occurs.
    lzma_stream_encoder() and lzma_stream_encoder_mt() always assumed
    this. Before this patch, failing lzma_filters_copy() could result
    in free(invalid_pointer) or invalid memory reads in stream_encoder.c
    or stream_encoder_mt.c.
    To trigger this, allocating memory for a filter options structure
    has to fail. These are tiny allocations so in practice they very
    rarely fail.
    Certain badness in the filter chain array could also make
    lzma_filters_copy() fail but both stream_encoder.c and
    stream_encoder_mt.c validate the filter chain before
    trying to copy it, so the crash cannot occur this way.
  - lzma_index_append: Add missing integer overflow check.
    The documentation in src/liblzma/api/lzma/index.h suggests that
    both the unpadded (compressed) size and the uncompressed size
    are checked for overflow, but only the unpadded size was checked.
    The uncompressed check is done first since that is more likely to
    occur than the unpadded or index field size overflows.
  - Vaccinate against an ill patch from RHEL/CentOS 7.
  * xzgrep:
  - Fix compatibility with old shells.
    Turns out that some old shells don't like apostrophes (') inside
    command substitutions. The problem was introduced by commits
    69d1b3fc29677af8ade8dc15dba83f0589cb63d6 (2022-03-29),
    bd7b290f3fe4faeceb7d3497ed9bf2e6ed5e7dc5 (2022-07-18), and
    a648978b20495b7aa4a8b029c5a810b5ad9d08ff (2022-07-19).
    5.2.6 is the only stable release that included
    this problem.
  * Translations: Add Turkish translation.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1664884800">- Move localised man pages to lang subpackage</changelog>
  <changelog author="danilo.spinella@suse.com" date="1668772800">- Update to 5.2.8:
  * xz:
  - If xz cannot remove an input file when it should, this
    is now treated as a warning (exit status 2) instead of
    an error (exit status 1). This matches GNU gzip and it
    is more logical as at that point the output file has
    already been successfully closed.
  - Fix handling of .xz files with an unsupported check type.
    Previously such printed a warning message but then xz
    behaved as if an error had occurred (didn't decompress,
    exit status 1). Now a warning is printed, decompression
    is done anyway, and exit status is 2. This used to work
    slightly before 5.0.0. In practice this bug matters only
    if xz has been built with some check types disabled. As
    instructed in PACKAGERS, such builds should be done in
    special situations only.
  - Fix "xz -dc --single-stream tests/files/good-0-empty.xz"
    which failed with "Internal error (bug)". That is,
  - -single-stream was broken if the first .xz stream in
    the input file didn't contain any uncompressed data.
  - Fix displaying file sizes in the progress indicator when
    working in passthru mode and there are multiple input files.
    Just like "gzip -cdf", "xz -cdf" works like "cat" when the
    input file isn't a supported compressed file format. In
    this case the file size counters weren't reset between
    files so with multiple input files the progress indicator
    displayed an incorrect (too large) value.
  * liblzma:
  - API docs in lzma/container.h:
  * Update the list of decoder flags in the decoder
    function docs.
  * Explain LZMA_CONCATENATED behavior with .lzma files
    in lzma_auto_decoder() docs.
  - OpenBSD: Use HW_NCPUONLINE to detect the number of
    available hardware threads in lzma_physmem().
  - Fix use of wrong macro to detect x86 SSE2 support.
    __SSE2_MATH__ was used with GCC/Clang but the correct
    one is __SSE2__. The first one means that SSE2 is used
    for floating point math which is irrelevant here.
    The affected SSE2 code isn't used on x86-64 so this affects
    only 32-bit x86 builds that use -msse2 without -mfpmath=sse
    (there is no runtime detection for SSE2). It improves LZMA
    compression speed (not decompression).
  - Fix the build with Intel C compiler 2021 (ICC, not ICX)
    on Linux. It defines __GNUC__ to 10 but doesn't support
    the __symver__ attribute introduced in GCC 10.
  * Scripts: Ignore warnings from xz by using --quiet --no-warn.
  This is needed if the input .xz files use an unsupported
  check type.
  * Translations:
  - Updated Croatian and Turkish translations.
  - One new translations wasn't included because it needed
    technical fixes. It will be in upcoming 5.4.0. No new
    translations will be added to the 5.2.x branch anymore.
  - Renamed the French man page translation file from
    fr_FR.po to fr.po and thus also its install directory
    (like /usr/share/man/fr_FR -&gt; .../fr).
  - Man page translations for upcoming 5.4.0 are now handled
    in the Translation Project.
  * Update doc/faq.txt a little so it's less out-of-date.</changelog>
  <changelog author="jengelh@inai.de" date="1669896000">- Rename xz-static-devel -&gt; xz-devel-static to follow the general
  naming used in openSUSE.</changelog>
  <changelog author="dmueller@suse.com" date="1671278400">- update to 5.2.10:
  * xz: Don't modify argv[] when parsing the --memlimit* and
  - -block-list command line options. This fixes confusing
    arguments in process listing (like "ps auxf").
  * GNU/Linux only: Use __has_attribute(__symver__) to detect if
    that attribute is supported. This fixes build on Mandriva where
    Clang is patched to define __GNUC__ to 11 by default (instead
    of 4 as used by Clang upstream).
  * liblzma:
  - Fixed an infinite loop in LZMA encoder initialization
    if dict_size &gt;= 2 GiB.
  - Fixed two cases of invalid free() that can happen if
    a tiny allocation fails in encoder re-initialization
    or in lzma_filters_update(). These bugs had some
    similarities with the bug fixed in 5.2.7.
  - Fixed lzma_block_encoder() not allowing the use of
    LZMA_SYNC_FLUSH with lzma_code() even though it was
    documented to be supported. The sync-flush code in
    the Block encoder was already used internally via
    lzma_stream_encoder(), so this was just a missing flag
    in the lzma_block_encoder() API function.
  - GNU/Linux only: Don't put symbol versions into static
    liblzma as it breaks things in some cases (and even if
    it didn't break anything, symbol versions in static
    libraries are useless anyway). The downside of the fix
    is that if the configure options --with-pic or --without-pic
    are used then it's not possible to build both shared and
    static liblzma at the same time on GNU/Linux anymore;
    with those options --disable-static or --disable-shared
    must be used too.
- drop unused xz-devel-static which is no longer supported when using
  - -with-pic (which is needed for shared libs)</changelog>
  <changelog author="dmueller@suse.com" date="1672401600">- update to 5.4.0:
    This bumps the minor version of liblzma because new features were
    added. The API and ABI are still backward compatible with liblzma
    5.2.x and 5.0.x.
    Summary of new features added in the 5.3.x development releases:
  * liblzma:
  - Added threaded .xz decompressor lzma_stream_decoder_mt().
    It can use multiple threads with .xz files that have multiple
    Blocks with size information in Block Headers. The threaded
    encoder in xz has always created such files.
    Single-threaded encoder cannot store the size information in
    Block Headers even if one used LZMA_FULL_FLUSH to create
    multiple Blocks, so this threaded decoder cannot use multiple
    threads with such files.
    If there are multiple Streams (concatenated .xz files), one
    Stream will be decompressed completely before starting the
    next Stream.
  - A new decoder flag LZMA_FAIL_FAST was added. It makes the
    threaded decompressor report errors soon instead of first
    flushing all pending data before the error location.
  - New Filter IDs:
  * LZMA_FILTER_ARM64 is for ARM64 binaries.
  * LZMA_FILTER_LZMA1EXT is for raw LZMA1 streams that don't
    necessarily use the end marker.
  - Added lzma_str_to_filters(), lzma_str_from_filters(), and
    lzma_str_list_filters() to convert a preset or a filter chain
    string to a lzma_filter[] and vice versa. These should make
    it easier to write applications that allow users to specify
    custom compression options.
  - Added lzma_filters_free() which can be convenient for freeing
    the filter options in a filter chain (an array of lzma_filter
    structures).
  - lzma_file_info_decoder() to makes it a little easier to get
    the Index field from .xz files. This helps in getting the
    uncompressed file size but an easy-to-use random access
    API is still missing which has existed in XZ for Java for
    a long time.
  - Added lzma_microlzma_encoder() and lzma_microlzma_decoder().
    It is used by erofs-utils and may be used by others too.
    The MicroLZMA format is a raw LZMA stream (without end marker)
    whose first byte (always 0x00) has been replaced with
    bitwise-negation of the LZMA properties (lc/lp/pb). It was
    created for use in EROFS but may be used in other contexts
    as well where it is important to avoid wasting bytes for
    stream headers or footers. The format is also supported by
    XZ Embedded (the XZ Embedded version in Linux got MicroLZMA
    support in Linux 5.16).
    The MicroLZMA encoder API in liblzma can compress into a
    fixed-sized output buffer so that as much data is compressed
    as can be fit into the buffer while still creating a valid
    MicroLZMA stream. This is needed for EROFS.
  - Added lzma_lzip_decoder() to decompress the .lz (lzip) file
    format version 0 and the original unextended version 1 files.
    Also lzma_auto_decoder() supports .lz files.
  - lzma_filters_update() can now be used with the multi-threaded
    encoder (lzma_stream_encoder_mt()) to change the filter chain
    after LZMA_FULL_BARRIER or LZMA_FULL_FLUSH.
  - In lzma_options_lzma, allow nice_len = 2 and 3 with the match
    finders that require at least 3 or 4. Now it is internally
    rounded up if needed.
  - CLMUL-based CRC64 on x86-64 and E2K with runtime processor
    detection. On 32-bit x86 it currently isn't available unless
  - -disable-assembler is used which can make the non-CLMUL
    CRC64 slower; this might be fixed in the future.
  - Building with --disable-threads --enable-small
    is now thread-safe if the compiler supports
    __attribute__((__constructor__)).
  * xz:
  - Using -T0 (--threads=0) will now use multi-threaded encoder
    even on a single-core system. This is to ensure that output
    from the same xz binary is identical on both single-core and
    multi-core systems.
  - --threads=+1 or -T+1 is now a way to put xz into
    multi-threaded mode while using only one worker thread.
    The + is ignored if the number is not 1.
  - A default soft memory usage limit is now used for compression
    when -T0 is used and no explicit limit has been specified.
    This soft limit is used to restrict the number of threads
    but if the limit is exceeded with even one thread then xz
    will continue with one thread using the multi-threaded
    encoder and this limit is ignored. If the number of threads
    is specified manually then no default limit will be used;
    this affects only -T0.
    This change helps on systems that have very many cores and
    using all of them for xz makes no sense. Previously xz -T0
    could run out of memory on such systems because it attempted
    to reserve memory for too many threads.
    This also helps with 32-bit builds which don't have a large
    amount of address space that would be required for many
    threads. The default soft limit for -T0 is at most 1400 MiB
    on all 32-bit platforms.
  - Previously a low value in --memlimit-compress wouldn't cause
    xz to switch from multi-threaded mode to single-threaded mode
    if the limit cannot otherwise be met; xz failed instead. Now
    xz can switch to single-threaded mode and then, if needed,
    scale down the LZMA2 dictionary size too just like it already
    did when it was started in single-threaded mode.
  - The option --no-adjust no longer prevents xz from scaling down
    the number of threads as that doesn't affect the compressed
    output (only performance). Now --no-adjust only prevents
    adjustments that affect compressed output, that is, with
  - -no-adjust xz won't switch from multi-threaded mode to
    single-threaded mode and won't scale down the LZMA2
    dictionary size.
  - Added a new option --memlimit-mt-decompress=LIMIT. This is
    used to limit the number of decompressor threads (possibly
    falling back to single-threaded mode) but it will never make
    xz refuse to decompress a file. This has a system-specific
    default value because without any limit xz could end up
    allocating memory for the whole compressed input file, the
    whole uncompressed output file, multiple thread-specific
    decompressor instances and so on. Basically xz could
    attempt to use an insane amount of memory even with fairly
    common files. The system-specific default value is currently
    the same as the one used for compression with -T0.
    The new option works together with the existing option
  - -memlimit-decompress=LIMIT. The old option sets a hard limit
    that must not be exceeded (xz will refuse to decompress)
    while the new option only restricts the number of threads.
    If the limit set with --memlimit-mt-decompress is greater
    than the limit set with --memlimit-compress, then the latter
    value is used also for --memlimit-mt-decompress.
  - Added new information to the output of xz --info-memory and
    new fields to the output of xz --robot --info-memory.
  - In --lzma2=nice=NUMBER allow 2 and 3 with all match finders
    now that liblzma handles it.
  - Don't mention endianness for ARM and ARM-Thumb filters in
  - -long-help. The filters only work for little endian
    instruction encoding but modern ARM processors using
    big endian data access still use little endian
    instruction encoding. So the help text was misleading.
    In contrast, the PowerPC filter is only for big endian
    32/64-bit PowerPC code. Little endian PowerPC would need
    a separate filter.
  - Added decompression support for the .lz (lzip) file format
    version 0 and the original unextended version 1. It is
    autodetected by default. See also the option --format on
    the xz man page.
  - Sandboxing enabled by default:
  * Capsicum (FreeBSD)
  * pledge(2) (OpenBSD)
  * Scripts now support the .lz format using xz.
  * A few new tests were added.
  * The liblzma-specific tests are now supported in CMake-based
    builds too ("make test").</changelog>
  <changelog author="dmueller@suse.com" date="1674302400">- update to 5.4.1:
  * liblzma:
  - Fixed the return value of lzma_microlzma_encoder() if the
    LZMA options lc/lp/pb are invalid. Invalid lc/lp/pb options
    made the function return LZMA_STREAM_END without encoding
    anything instead of returning LZMA_OPTIONS_ERROR.
  * Tests:
  - Fixed test script compatibility with ancient /bin/sh
    versions. Now the five test_compress_* tests should
    no longer fail on Solaris 10.
  - Added and refactored a few tests.
  * Translations:
  - Updated the Catalan and Esperanto translations.
  - Added Korean and Ukrainian man page translations.</changelog>
  <changelog author="mpluskal@suse.com" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="fcrozat@suse.com" date="1680782400">- Update license tag, there is GPL-3.0-or-later code too.</changelog>
  <changelog author="dimstar@opensuse.org" date="1692187200">- xznew: Remove bashsism.
- build: pass CONFIG_SHELL=/bin/sh to configure: the posix tools
  are setting the current SHELL as the shebang, which is overkill:
  any posix compliant shell, aka /bin/sh, is sufficient.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1706529600">- Build static library on SLE</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- revert to 5.4.1, last release from Lasse Collin</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1743508800">- Add CVE-2025-31115.patch
  * Fix heap use after free and writing to an address based on the null
    pointer plus an offset (CVE-2025-31115, bsc#1240414)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1779105600">- Fix buffer overflow in lzma_index_append (bsc#1261280, CVE-2026-34743)
  * CVE-2026-34743.patch
- Change SUSE-Public-Domain license to LicenseRef-SUSE-Public-Domain to
  fix rpmlint errors</changelog>
</package>
<package pkgid="1a0f49bbe2d471a93e1455e96aaedff10a980d30ee78ad0ed177dc5e05fed88b" name="liblzma5" arch="x86_64">
  <version epoch="0" ver="5.4.1" rel="150600.3.6.1"/>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a supplements.</changelog>
  <changelog author="info@paolostivanin.com" date="1584532800">- Update to 5.2.5:
  * liblzma:
  - Fixed several C99/C11 conformance bugs. Now the code is clean
    under gcc/clang -fsanitize=undefined. Some of these changes
    might have a negative effect on performance with old GCC
    versions or compilers other than GCC and Clang. The configure
    option --enable-unsafe-type-punning can be used to (mostly)
    restore the old behavior but it shouldn't normally be used.
  - Improved API documentation of lzma_properties_decode().
  - Added a very minor encoder speed optimization.
  * xz:
  - Fixed a crash in "xz -dcfv not_an_xz_file". All four options
    were required to trigger it. The crash occurred in the
    progress indicator code when xz was in passthru mode where
    xz works like "cat".
  - Fixed an integer overflow with 32-bit off_t. It could happen
    when decompressing a file that has a long run of zero bytes
    which xz would try to write as a sparse file. Since the build
    system enables large file support by default, off_t is
    normally 64-bit even on 32-bit systems.
  - Fixes for --flush-timeout:
  * Fix semi-busy-waiting.
  * Avoid unneeded flushes when no new input has arrived
    since the previous flush was completed.
  - Added a special case for 32-bit xz: If --memlimit-compress is
    used to specify a limit that exceeds 4020 MiB, the limit will
    be set to 4020 MiB. The values "0" and "max" aren't affected
    by this and neither is decompression. This hack can be
    helpful when a 32-bit xz has access to 4 GiB address space
    but the specified memlimit exceeds 4 GiB. This can happen
    e.g. with some scripts.
  - Capsicum sandbox is now enabled by default where available
    (FreeBSD &gt;= 10). The sandbox debug messages (xz -vv) were
    removed since they seemed to be more annoying than useful.</changelog>
  <changelog author="jengelh@inai.de" date="1623067200">- Upgrade old rpm constructs.</changelog>
  <changelog author="meissner@suse.com" date="1649764800">- use https urls.</changelog>
  <changelog author="dmueller@suse.com" date="1660305600">- update to 5.2.6 (CVE-2022-1271, bsc#1198062):
  * xz:
  - The --keep option now accepts symlinks, hardlinks, and
    setuid, setgid, and sticky files.
  - When copying metadata from the source file to the destination
    file, don't try to set the group (GID) if it is already set
    correctly. This avoids a failure on OpenBSD (and possibly on
    a few other OSes) where files may get created so that their
    group doesn't belong to the user, and fchown(2) can fail even
    if it needs to do nothing.
  - Cap --memlimit-compress to 2000 MiB instead of 4020 MiB on
    MIPS32 because on MIPS32 userspace processes are limited
    to 2 GiB of address space.
  * liblzma:
  - Fixed a missing error-check in the threaded encoder. If a
    small memory allocation fails, a .xz file with an invalid
    Index field would be created. Decompressing such a file would
    produce the correct output but result in an error at the end.
    Thus this is a "mild" data corruption bug. Note that while
    a failed memory allocation can trigger the bug, it cannot
    cause invalid memory access.
  - The decoder for .lzma files now supports files that have
    uncompressed size stored in the header and still use the
    end of payload marker (end of stream marker) at the end
    of the LZMA stream. Such files are rare but, according to
    the documentation in LZMA SDK, they are valid.
    doc/lzma-file-format.txt was updated too.
  - Improved 32-bit x86 assembly files:
  * Support Intel Control-flow Enforcement Technology (CET)
  * Use non-executable stack on FreeBSD.
  * xzgrep:
  - Fixed arbitrary command injection via a malicious filename
    (CVE-2022-1271, ZDI-CAN-16587). A standalone patch for
    this was released to the public on 2022-04-07. A slight
    robustness improvement has been made since then and, if
    using GNU or *BSD grep, a new faster method is now used
    that doesn't use the old sed-based construct at all. This
    also fixes bad output with GNU grep &gt;= 3.5 (2020-09-27)
    when xzgrepping binary files.
  - Fixed detection of corrupt .bz2 files.
  - Improved error handling to fix exit status in some situations
    and to fix handling of signals: in some situations a signal
    didn't make xzgrep exit when it clearly should have. It's
    possible that the signal handling still isn't quite perfect
    but hopefully it's good enough.
  - Documented exit statuses on the man page.
  - xzegrep and xzfgrep now use "grep -E" and "grep -F" instead
    of the deprecated egrep and fgrep commands.
  - Fixed parsing of the options -E, -F, -G, -P, and -X. The
    problem occurred when multiple options were specied in
    a single argument, for example,
    echo foo | xzgrep -Fe foo
    treated foo as a filename because -Fe wasn't correctly
    split into -F -e.
  - Added zstd support.
  * xzdiff/xzcmp:
  - Fixed wrong exit status. Exit status could be 2 when the
    correct value is 1.
  - Documented on the man page that exit status of 2 is used
    for decompression errors.
  - Added zstd support.
  * xzless:
  - Fix less(1) version detection. It failed if the version number
    from "less -V" contained a dot.</changelog>
  <changelog author="c.j@tuta.io" date="1664539200">- update to 5.2.7:
  * liblzma:
  - Add API doc note about the .xz decoder LZMA_MEMLIMIT_ERROR bug.
  - Add dest and src NULL checks to lzma_index_cat.
    The documentation states LZMA_PROG_ERROR can be returned from
    lzma_index_cat. Previously, lzma_index_cat could not return
    LZMA_PROG_ERROR. Now, the validation is similar to
    lzma_index_append, which does a NULL check on the index
    parameter.
  - Fix copying of check type statistics in lzma_index_cat().
    The check type of the last Stream in dest was never copied to
    dest-&gt;checks (the code tried to copy it but it was done too late).
    This meant that the value returned by lzma_index_checks() would
    only include the check type of the last Stream when multiple
    lzma_indexes had been concatenated.
    In xz --list this meant that the summary would only list the
    check type of the last Stream, so in this sense this was only
    a visual bug. However, it's possible that some applications
    use this information for purposes other than merely showing
    it to the users in an informational message. I'm not aware of
    such applications though and it's quite possible that such
    applications don't exist.
    Regular streamed decompression in xz or any other application
    doesn't use lzma_index_cat() and so this bug cannot affect them.
  - Stream decoder: Fix restarting after LZMA_MEMLIMIT_ERROR.
    If lzma_code() returns LZMA_MEMLIMIT_ERROR it is now possible
    to use lzma_memlimit_set() to increase the limit and continue
    decoding. This was supposed to work from the beginning but
    there was a bug. With other decoders (.lzma or threaded .xz)
    this already worked correctly.
  - lzma_filters_copy: Keep dest[] unmodified if an error occurs.
    lzma_stream_encoder() and lzma_stream_encoder_mt() always assumed
    this. Before this patch, failing lzma_filters_copy() could result
    in free(invalid_pointer) or invalid memory reads in stream_encoder.c
    or stream_encoder_mt.c.
    To trigger this, allocating memory for a filter options structure
    has to fail. These are tiny allocations so in practice they very
    rarely fail.
    Certain badness in the filter chain array could also make
    lzma_filters_copy() fail but both stream_encoder.c and
    stream_encoder_mt.c validate the filter chain before
    trying to copy it, so the crash cannot occur this way.
  - lzma_index_append: Add missing integer overflow check.
    The documentation in src/liblzma/api/lzma/index.h suggests that
    both the unpadded (compressed) size and the uncompressed size
    are checked for overflow, but only the unpadded size was checked.
    The uncompressed check is done first since that is more likely to
    occur than the unpadded or index field size overflows.
  - Vaccinate against an ill patch from RHEL/CentOS 7.
  * xzgrep:
  - Fix compatibility with old shells.
    Turns out that some old shells don't like apostrophes (') inside
    command substitutions. The problem was introduced by commits
    69d1b3fc29677af8ade8dc15dba83f0589cb63d6 (2022-03-29),
    bd7b290f3fe4faeceb7d3497ed9bf2e6ed5e7dc5 (2022-07-18), and
    a648978b20495b7aa4a8b029c5a810b5ad9d08ff (2022-07-19).
    5.2.6 is the only stable release that included
    this problem.
  * Translations: Add Turkish translation.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1664884800">- Move localised man pages to lang subpackage</changelog>
  <changelog author="danilo.spinella@suse.com" date="1668772800">- Update to 5.2.8:
  * xz:
  - If xz cannot remove an input file when it should, this
    is now treated as a warning (exit status 2) instead of
    an error (exit status 1). This matches GNU gzip and it
    is more logical as at that point the output file has
    already been successfully closed.
  - Fix handling of .xz files with an unsupported check type.
    Previously such printed a warning message but then xz
    behaved as if an error had occurred (didn't decompress,
    exit status 1). Now a warning is printed, decompression
    is done anyway, and exit status is 2. This used to work
    slightly before 5.0.0. In practice this bug matters only
    if xz has been built with some check types disabled. As
    instructed in PACKAGERS, such builds should be done in
    special situations only.
  - Fix "xz -dc --single-stream tests/files/good-0-empty.xz"
    which failed with "Internal error (bug)". That is,
  - -single-stream was broken if the first .xz stream in
    the input file didn't contain any uncompressed data.
  - Fix displaying file sizes in the progress indicator when
    working in passthru mode and there are multiple input files.
    Just like "gzip -cdf", "xz -cdf" works like "cat" when the
    input file isn't a supported compressed file format. In
    this case the file size counters weren't reset between
    files so with multiple input files the progress indicator
    displayed an incorrect (too large) value.
  * liblzma:
  - API docs in lzma/container.h:
  * Update the list of decoder flags in the decoder
    function docs.
  * Explain LZMA_CONCATENATED behavior with .lzma files
    in lzma_auto_decoder() docs.
  - OpenBSD: Use HW_NCPUONLINE to detect the number of
    available hardware threads in lzma_physmem().
  - Fix use of wrong macro to detect x86 SSE2 support.
    __SSE2_MATH__ was used with GCC/Clang but the correct
    one is __SSE2__. The first one means that SSE2 is used
    for floating point math which is irrelevant here.
    The affected SSE2 code isn't used on x86-64 so this affects
    only 32-bit x86 builds that use -msse2 without -mfpmath=sse
    (there is no runtime detection for SSE2). It improves LZMA
    compression speed (not decompression).
  - Fix the build with Intel C compiler 2021 (ICC, not ICX)
    on Linux. It defines __GNUC__ to 10 but doesn't support
    the __symver__ attribute introduced in GCC 10.
  * Scripts: Ignore warnings from xz by using --quiet --no-warn.
  This is needed if the input .xz files use an unsupported
  check type.
  * Translations:
  - Updated Croatian and Turkish translations.
  - One new translations wasn't included because it needed
    technical fixes. It will be in upcoming 5.4.0. No new
    translations will be added to the 5.2.x branch anymore.
  - Renamed the French man page translation file from
    fr_FR.po to fr.po and thus also its install directory
    (like /usr/share/man/fr_FR -&gt; .../fr).
  - Man page translations for upcoming 5.4.0 are now handled
    in the Translation Project.
  * Update doc/faq.txt a little so it's less out-of-date.</changelog>
  <changelog author="jengelh@inai.de" date="1669896000">- Rename xz-static-devel -&gt; xz-devel-static to follow the general
  naming used in openSUSE.</changelog>
  <changelog author="dmueller@suse.com" date="1671278400">- update to 5.2.10:
  * xz: Don't modify argv[] when parsing the --memlimit* and
  - -block-list command line options. This fixes confusing
    arguments in process listing (like "ps auxf").
  * GNU/Linux only: Use __has_attribute(__symver__) to detect if
    that attribute is supported. This fixes build on Mandriva where
    Clang is patched to define __GNUC__ to 11 by default (instead
    of 4 as used by Clang upstream).
  * liblzma:
  - Fixed an infinite loop in LZMA encoder initialization
    if dict_size &gt;= 2 GiB.
  - Fixed two cases of invalid free() that can happen if
    a tiny allocation fails in encoder re-initialization
    or in lzma_filters_update(). These bugs had some
    similarities with the bug fixed in 5.2.7.
  - Fixed lzma_block_encoder() not allowing the use of
    LZMA_SYNC_FLUSH with lzma_code() even though it was
    documented to be supported. The sync-flush code in
    the Block encoder was already used internally via
    lzma_stream_encoder(), so this was just a missing flag
    in the lzma_block_encoder() API function.
  - GNU/Linux only: Don't put symbol versions into static
    liblzma as it breaks things in some cases (and even if
    it didn't break anything, symbol versions in static
    libraries are useless anyway). The downside of the fix
    is that if the configure options --with-pic or --without-pic
    are used then it's not possible to build both shared and
    static liblzma at the same time on GNU/Linux anymore;
    with those options --disable-static or --disable-shared
    must be used too.
- drop unused xz-devel-static which is no longer supported when using
  - -with-pic (which is needed for shared libs)</changelog>
  <changelog author="dmueller@suse.com" date="1672401600">- update to 5.4.0:
    This bumps the minor version of liblzma because new features were
    added. The API and ABI are still backward compatible with liblzma
    5.2.x and 5.0.x.
    Summary of new features added in the 5.3.x development releases:
  * liblzma:
  - Added threaded .xz decompressor lzma_stream_decoder_mt().
    It can use multiple threads with .xz files that have multiple
    Blocks with size information in Block Headers. The threaded
    encoder in xz has always created such files.
    Single-threaded encoder cannot store the size information in
    Block Headers even if one used LZMA_FULL_FLUSH to create
    multiple Blocks, so this threaded decoder cannot use multiple
    threads with such files.
    If there are multiple Streams (concatenated .xz files), one
    Stream will be decompressed completely before starting the
    next Stream.
  - A new decoder flag LZMA_FAIL_FAST was added. It makes the
    threaded decompressor report errors soon instead of first
    flushing all pending data before the error location.
  - New Filter IDs:
  * LZMA_FILTER_ARM64 is for ARM64 binaries.
  * LZMA_FILTER_LZMA1EXT is for raw LZMA1 streams that don't
    necessarily use the end marker.
  - Added lzma_str_to_filters(), lzma_str_from_filters(), and
    lzma_str_list_filters() to convert a preset or a filter chain
    string to a lzma_filter[] and vice versa. These should make
    it easier to write applications that allow users to specify
    custom compression options.
  - Added lzma_filters_free() which can be convenient for freeing
    the filter options in a filter chain (an array of lzma_filter
    structures).
  - lzma_file_info_decoder() to makes it a little easier to get
    the Index field from .xz files. This helps in getting the
    uncompressed file size but an easy-to-use random access
    API is still missing which has existed in XZ for Java for
    a long time.
  - Added lzma_microlzma_encoder() and lzma_microlzma_decoder().
    It is used by erofs-utils and may be used by others too.
    The MicroLZMA format is a raw LZMA stream (without end marker)
    whose first byte (always 0x00) has been replaced with
    bitwise-negation of the LZMA properties (lc/lp/pb). It was
    created for use in EROFS but may be used in other contexts
    as well where it is important to avoid wasting bytes for
    stream headers or footers. The format is also supported by
    XZ Embedded (the XZ Embedded version in Linux got MicroLZMA
    support in Linux 5.16).
    The MicroLZMA encoder API in liblzma can compress into a
    fixed-sized output buffer so that as much data is compressed
    as can be fit into the buffer while still creating a valid
    MicroLZMA stream. This is needed for EROFS.
  - Added lzma_lzip_decoder() to decompress the .lz (lzip) file
    format version 0 and the original unextended version 1 files.
    Also lzma_auto_decoder() supports .lz files.
  - lzma_filters_update() can now be used with the multi-threaded
    encoder (lzma_stream_encoder_mt()) to change the filter chain
    after LZMA_FULL_BARRIER or LZMA_FULL_FLUSH.
  - In lzma_options_lzma, allow nice_len = 2 and 3 with the match
    finders that require at least 3 or 4. Now it is internally
    rounded up if needed.
  - CLMUL-based CRC64 on x86-64 and E2K with runtime processor
    detection. On 32-bit x86 it currently isn't available unless
  - -disable-assembler is used which can make the non-CLMUL
    CRC64 slower; this might be fixed in the future.
  - Building with --disable-threads --enable-small
    is now thread-safe if the compiler supports
    __attribute__((__constructor__)).
  * xz:
  - Using -T0 (--threads=0) will now use multi-threaded encoder
    even on a single-core system. This is to ensure that output
    from the same xz binary is identical on both single-core and
    multi-core systems.
  - --threads=+1 or -T+1 is now a way to put xz into
    multi-threaded mode while using only one worker thread.
    The + is ignored if the number is not 1.
  - A default soft memory usage limit is now used for compression
    when -T0 is used and no explicit limit has been specified.
    This soft limit is used to restrict the number of threads
    but if the limit is exceeded with even one thread then xz
    will continue with one thread using the multi-threaded
    encoder and this limit is ignored. If the number of threads
    is specified manually then no default limit will be used;
    this affects only -T0.
    This change helps on systems that have very many cores and
    using all of them for xz makes no sense. Previously xz -T0
    could run out of memory on such systems because it attempted
    to reserve memory for too many threads.
    This also helps with 32-bit builds which don't have a large
    amount of address space that would be required for many
    threads. The default soft limit for -T0 is at most 1400 MiB
    on all 32-bit platforms.
  - Previously a low value in --memlimit-compress wouldn't cause
    xz to switch from multi-threaded mode to single-threaded mode
    if the limit cannot otherwise be met; xz failed instead. Now
    xz can switch to single-threaded mode and then, if needed,
    scale down the LZMA2 dictionary size too just like it already
    did when it was started in single-threaded mode.
  - The option --no-adjust no longer prevents xz from scaling down
    the number of threads as that doesn't affect the compressed
    output (only performance). Now --no-adjust only prevents
    adjustments that affect compressed output, that is, with
  - -no-adjust xz won't switch from multi-threaded mode to
    single-threaded mode and won't scale down the LZMA2
    dictionary size.
  - Added a new option --memlimit-mt-decompress=LIMIT. This is
    used to limit the number of decompressor threads (possibly
    falling back to single-threaded mode) but it will never make
    xz refuse to decompress a file. This has a system-specific
    default value because without any limit xz could end up
    allocating memory for the whole compressed input file, the
    whole uncompressed output file, multiple thread-specific
    decompressor instances and so on. Basically xz could
    attempt to use an insane amount of memory even with fairly
    common files. The system-specific default value is currently
    the same as the one used for compression with -T0.
    The new option works together with the existing option
  - -memlimit-decompress=LIMIT. The old option sets a hard limit
    that must not be exceeded (xz will refuse to decompress)
    while the new option only restricts the number of threads.
    If the limit set with --memlimit-mt-decompress is greater
    than the limit set with --memlimit-compress, then the latter
    value is used also for --memlimit-mt-decompress.
  - Added new information to the output of xz --info-memory and
    new fields to the output of xz --robot --info-memory.
  - In --lzma2=nice=NUMBER allow 2 and 3 with all match finders
    now that liblzma handles it.
  - Don't mention endianness for ARM and ARM-Thumb filters in
  - -long-help. The filters only work for little endian
    instruction encoding but modern ARM processors using
    big endian data access still use little endian
    instruction encoding. So the help text was misleading.
    In contrast, the PowerPC filter is only for big endian
    32/64-bit PowerPC code. Little endian PowerPC would need
    a separate filter.
  - Added decompression support for the .lz (lzip) file format
    version 0 and the original unextended version 1. It is
    autodetected by default. See also the option --format on
    the xz man page.
  - Sandboxing enabled by default:
  * Capsicum (FreeBSD)
  * pledge(2) (OpenBSD)
  * Scripts now support the .lz format using xz.
  * A few new tests were added.
  * The liblzma-specific tests are now supported in CMake-based
    builds too ("make test").</changelog>
  <changelog author="dmueller@suse.com" date="1674302400">- update to 5.4.1:
  * liblzma:
  - Fixed the return value of lzma_microlzma_encoder() if the
    LZMA options lc/lp/pb are invalid. Invalid lc/lp/pb options
    made the function return LZMA_STREAM_END without encoding
    anything instead of returning LZMA_OPTIONS_ERROR.
  * Tests:
  - Fixed test script compatibility with ancient /bin/sh
    versions. Now the five test_compress_* tests should
    no longer fail on Solaris 10.
  - Added and refactored a few tests.
  * Translations:
  - Updated the Catalan and Esperanto translations.
  - Added Korean and Ukrainian man page translations.</changelog>
  <changelog author="mpluskal@suse.com" date="1678276800">- Build AVX2 enabled hwcaps library for x86_64-v3</changelog>
  <changelog author="fcrozat@suse.com" date="1680782400">- Update license tag, there is GPL-3.0-or-later code too.</changelog>
  <changelog author="dimstar@opensuse.org" date="1692187200">- xznew: Remove bashsism.
- build: pass CONFIG_SHELL=/bin/sh to configure: the posix tools
  are setting the current SHELL as the shebang, which is overkill:
  any posix compliant shell, aka /bin/sh, is sufficient.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1706529600">- Build static library on SLE</changelog>
  <changelog author="dmueller@suse.com" date="1712059200">- revert to 5.4.1, last release from Lasse Collin</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1743508800">- Add CVE-2025-31115.patch
  * Fix heap use after free and writing to an address based on the null
    pointer plus an offset (CVE-2025-31115, bsc#1240414)</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1779105600">- Fix buffer overflow in lzma_index_append (bsc#1261280, CVE-2026-34743)
  * CVE-2026-34743.patch
- Change SUSE-Public-Domain license to LicenseRef-SUSE-Public-Domain to
  fix rpmlint errors</changelog>
</package>
<package pkgid="8c0563e2afab94d2ae909bcca3b2a72a2cc82416aba81c803181d4041583fcce" name="libm2cor19" arch="x86_64">
  <version epoch="0" ver="14.3.0+git11799" rel="150000.1.11.1"/>
  <changelog author="rguenther@suse.com" date="1728475200">- Update to gcc-14 branch head, 4af44f2cf7d281f3e4f3957ef, git10750
  * includes libstdc++6 fix for parsing tzdata 2024b [gcc#116657]
- Add gcc14-pr116629.patch to fix ICE with LTO building openvino
  on aarch64 [boo#1230262]</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1732968000">- Add loongarch64 to asan_arch, atomic_arch,
  itm_arch, lsan_arch, tsan_arch and ubsan_arch
- Add larchintrin.h, lasxintrin.h and lsxintrin.h
  headers to gccXY main package in %files section
- Set build_primary_64bit to 1 for loongarch64</changelog>
  <changelog author="adrian@suse.de" date="1733140800">- disable go on loongarch64 for now</changelog>
  <changelog author="mardnh@gmx.de" date="1736078400">- Switch to glibc based cross-compiler for target hppa</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Define ALT_CC_UNDER_TEST and ALT_CXX_UNDER_TEST for compat tests</changelog>
  <changelog author="rguenther@suse.com" date="1738152000">- For cross compilers require the same or newer binutils, newlib
  or cross-glibc that was used at build time.  [bsc#1232526]</changelog>
  <changelog author="rguenther@suse.com" date="1738843200">- Adjust cross compiler requirements to use %requires_ge
- Fix condition on whether to enable plugins or JIT support to
  not check sle_version which is not defined in SLFO but to check
  is_opensuse and suse_version instead.
- Add gcc14-pr118780.patch to make the SLFO config work.</changelog>
  <changelog author="rguenther@suse.com" date="1740052800">- Update to gcc-14 branch head, 9ffecde121af883b60bbe60d0, git11321
  * fixes reported ICE in [bsc#1237442]
- Drop gcc14-pr116629.patch now backported to the branch.</changelog>
  <changelog author="rguenther@suse.com" date="1741608000">- Disable profiling during build when %want_reproducible_builds is set
  [bsc#1238491]</changelog>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
</package>
<package pkgid="d12c77c675c4da997929ddbc200e5be97693765d8e5bbae24573cec77bcba205" name="libm2cor19" arch="x86_64">
  <version epoch="0" ver="14.3.0+git11799" rel="150000.1.14.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1732968000">- Add loongarch64 to asan_arch, atomic_arch,
  itm_arch, lsan_arch, tsan_arch and ubsan_arch
- Add larchintrin.h, lasxintrin.h and lsxintrin.h
  headers to gccXY main package in %files section
- Set build_primary_64bit to 1 for loongarch64</changelog>
  <changelog author="adrian@suse.de" date="1733140800">- disable go on loongarch64 for now</changelog>
  <changelog author="mardnh@gmx.de" date="1736078400">- Switch to glibc based cross-compiler for target hppa</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Define ALT_CC_UNDER_TEST and ALT_CXX_UNDER_TEST for compat tests</changelog>
  <changelog author="rguenther@suse.com" date="1738152000">- For cross compilers require the same or newer binutils, newlib
  or cross-glibc that was used at build time.  [bsc#1232526]</changelog>
  <changelog author="rguenther@suse.com" date="1738843200">- Adjust cross compiler requirements to use %requires_ge
- Fix condition on whether to enable plugins or JIT support to
  not check sle_version which is not defined in SLFO but to check
  is_opensuse and suse_version instead.
- Add gcc14-pr118780.patch to make the SLFO config work.</changelog>
  <changelog author="rguenther@suse.com" date="1740052800">- Update to gcc-14 branch head, 9ffecde121af883b60bbe60d0, git11321
  * fixes reported ICE in [bsc#1237442]
- Drop gcc14-pr116629.patch now backported to the branch.</changelog>
  <changelog author="rguenther@suse.com" date="1741608000">- Disable profiling during build when %want_reproducible_builds is set
  [bsc#1238491]</changelog>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc14-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="c65c2f2e3dab84c26c5d63f4eedf8db11470791990a81d7cfb44b8d6a20182c4" name="libm2cor19-32bit" arch="x86_64">
  <version epoch="0" ver="14.3.0+git11799" rel="150000.1.11.1"/>
  <changelog author="rguenther@suse.com" date="1728475200">- Update to gcc-14 branch head, 4af44f2cf7d281f3e4f3957ef, git10750
  * includes libstdc++6 fix for parsing tzdata 2024b [gcc#116657]
- Add gcc14-pr116629.patch to fix ICE with LTO building openvino
  on aarch64 [boo#1230262]</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1732968000">- Add loongarch64 to asan_arch, atomic_arch,
  itm_arch, lsan_arch, tsan_arch and ubsan_arch
- Add larchintrin.h, lasxintrin.h and lsxintrin.h
  headers to gccXY main package in %files section
- Set build_primary_64bit to 1 for loongarch64</changelog>
  <changelog author="adrian@suse.de" date="1733140800">- disable go on loongarch64 for now</changelog>
  <changelog author="mardnh@gmx.de" date="1736078400">- Switch to glibc based cross-compiler for target hppa</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Define ALT_CC_UNDER_TEST and ALT_CXX_UNDER_TEST for compat tests</changelog>
  <changelog author="rguenther@suse.com" date="1738152000">- For cross compilers require the same or newer binutils, newlib
  or cross-glibc that was used at build time.  [bsc#1232526]</changelog>
  <changelog author="rguenther@suse.com" date="1738843200">- Adjust cross compiler requirements to use %requires_ge
- Fix condition on whether to enable plugins or JIT support to
  not check sle_version which is not defined in SLFO but to check
  is_opensuse and suse_version instead.
- Add gcc14-pr118780.patch to make the SLFO config work.</changelog>
  <changelog author="rguenther@suse.com" date="1740052800">- Update to gcc-14 branch head, 9ffecde121af883b60bbe60d0, git11321
  * fixes reported ICE in [bsc#1237442]
- Drop gcc14-pr116629.patch now backported to the branch.</changelog>
  <changelog author="rguenther@suse.com" date="1741608000">- Disable profiling during build when %want_reproducible_builds is set
  [bsc#1238491]</changelog>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
</package>
<package pkgid="af1fe4310c87ef8767c35d1ba3f05a059bc919790fbd95491f0b49d50d441286" name="libm2cor19-32bit" arch="x86_64">
  <version epoch="0" ver="14.3.0+git11799" rel="150000.1.14.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1732968000">- Add loongarch64 to asan_arch, atomic_arch,
  itm_arch, lsan_arch, tsan_arch and ubsan_arch
- Add larchintrin.h, lasxintrin.h and lsxintrin.h
  headers to gccXY main package in %files section
- Set build_primary_64bit to 1 for loongarch64</changelog>
  <changelog author="adrian@suse.de" date="1733140800">- disable go on loongarch64 for now</changelog>
  <changelog author="mardnh@gmx.de" date="1736078400">- Switch to glibc based cross-compiler for target hppa</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Define ALT_CC_UNDER_TEST and ALT_CXX_UNDER_TEST for compat tests</changelog>
  <changelog author="rguenther@suse.com" date="1738152000">- For cross compilers require the same or newer binutils, newlib
  or cross-glibc that was used at build time.  [bsc#1232526]</changelog>
  <changelog author="rguenther@suse.com" date="1738843200">- Adjust cross compiler requirements to use %requires_ge
- Fix condition on whether to enable plugins or JIT support to
  not check sle_version which is not defined in SLFO but to check
  is_opensuse and suse_version instead.
- Add gcc14-pr118780.patch to make the SLFO config work.</changelog>
  <changelog author="rguenther@suse.com" date="1740052800">- Update to gcc-14 branch head, 9ffecde121af883b60bbe60d0, git11321
  * fixes reported ICE in [bsc#1237442]
- Drop gcc14-pr116629.patch now backported to the branch.</changelog>
  <changelog author="rguenther@suse.com" date="1741608000">- Disable profiling during build when %want_reproducible_builds is set
  [bsc#1238491]</changelog>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc14-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="f563716fe0f184f201ffaa43cc566fa10d9cc06e503a385825b2ba39eb269520" name="libm2iso19" arch="x86_64">
  <version epoch="0" ver="14.3.0+git11799" rel="150000.1.11.1"/>
  <changelog author="rguenther@suse.com" date="1728475200">- Update to gcc-14 branch head, 4af44f2cf7d281f3e4f3957ef, git10750
  * includes libstdc++6 fix for parsing tzdata 2024b [gcc#116657]
- Add gcc14-pr116629.patch to fix ICE with LTO building openvino
  on aarch64 [boo#1230262]</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1732968000">- Add loongarch64 to asan_arch, atomic_arch,
  itm_arch, lsan_arch, tsan_arch and ubsan_arch
- Add larchintrin.h, lasxintrin.h and lsxintrin.h
  headers to gccXY main package in %files section
- Set build_primary_64bit to 1 for loongarch64</changelog>
  <changelog author="adrian@suse.de" date="1733140800">- disable go on loongarch64 for now</changelog>
  <changelog author="mardnh@gmx.de" date="1736078400">- Switch to glibc based cross-compiler for target hppa</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Define ALT_CC_UNDER_TEST and ALT_CXX_UNDER_TEST for compat tests</changelog>
  <changelog author="rguenther@suse.com" date="1738152000">- For cross compilers require the same or newer binutils, newlib
  or cross-glibc that was used at build time.  [bsc#1232526]</changelog>
  <changelog author="rguenther@suse.com" date="1738843200">- Adjust cross compiler requirements to use %requires_ge
- Fix condition on whether to enable plugins or JIT support to
  not check sle_version which is not defined in SLFO but to check
  is_opensuse and suse_version instead.
- Add gcc14-pr118780.patch to make the SLFO config work.</changelog>
  <changelog author="rguenther@suse.com" date="1740052800">- Update to gcc-14 branch head, 9ffecde121af883b60bbe60d0, git11321
  * fixes reported ICE in [bsc#1237442]
- Drop gcc14-pr116629.patch now backported to the branch.</changelog>
  <changelog author="rguenther@suse.com" date="1741608000">- Disable profiling during build when %want_reproducible_builds is set
  [bsc#1238491]</changelog>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
</package>
<package pkgid="9f47472bd4e31263a86141e2ee424627efc6743f574eebe76d7926ec7a8eb6d8" name="libm2iso19" arch="x86_64">
  <version epoch="0" ver="14.3.0+git11799" rel="150000.1.14.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1732968000">- Add loongarch64 to asan_arch, atomic_arch,
  itm_arch, lsan_arch, tsan_arch and ubsan_arch
- Add larchintrin.h, lasxintrin.h and lsxintrin.h
  headers to gccXY main package in %files section
- Set build_primary_64bit to 1 for loongarch64</changelog>
  <changelog author="adrian@suse.de" date="1733140800">- disable go on loongarch64 for now</changelog>
  <changelog author="mardnh@gmx.de" date="1736078400">- Switch to glibc based cross-compiler for target hppa</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Define ALT_CC_UNDER_TEST and ALT_CXX_UNDER_TEST for compat tests</changelog>
  <changelog author="rguenther@suse.com" date="1738152000">- For cross compilers require the same or newer binutils, newlib
  or cross-glibc that was used at build time.  [bsc#1232526]</changelog>
  <changelog author="rguenther@suse.com" date="1738843200">- Adjust cross compiler requirements to use %requires_ge
- Fix condition on whether to enable plugins or JIT support to
  not check sle_version which is not defined in SLFO but to check
  is_opensuse and suse_version instead.
- Add gcc14-pr118780.patch to make the SLFO config work.</changelog>
  <changelog author="rguenther@suse.com" date="1740052800">- Update to gcc-14 branch head, 9ffecde121af883b60bbe60d0, git11321
  * fixes reported ICE in [bsc#1237442]
- Drop gcc14-pr116629.patch now backported to the branch.</changelog>
  <changelog author="rguenther@suse.com" date="1741608000">- Disable profiling during build when %want_reproducible_builds is set
  [bsc#1238491]</changelog>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc14-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="f0b0691181fdded58dbca15ae64feed9a753f79c22ffdb5f5fbe26ca8d6e3964" name="libm2iso19-32bit" arch="x86_64">
  <version epoch="0" ver="14.3.0+git11799" rel="150000.1.11.1"/>
  <changelog author="rguenther@suse.com" date="1728475200">- Update to gcc-14 branch head, 4af44f2cf7d281f3e4f3957ef, git10750
  * includes libstdc++6 fix for parsing tzdata 2024b [gcc#116657]
- Add gcc14-pr116629.patch to fix ICE with LTO building openvino
  on aarch64 [boo#1230262]</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1732968000">- Add loongarch64 to asan_arch, atomic_arch,
  itm_arch, lsan_arch, tsan_arch and ubsan_arch
- Add larchintrin.h, lasxintrin.h and lsxintrin.h
  headers to gccXY main package in %files section
- Set build_primary_64bit to 1 for loongarch64</changelog>
  <changelog author="adrian@suse.de" date="1733140800">- disable go on loongarch64 for now</changelog>
  <changelog author="mardnh@gmx.de" date="1736078400">- Switch to glibc based cross-compiler for target hppa</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Define ALT_CC_UNDER_TEST and ALT_CXX_UNDER_TEST for compat tests</changelog>
  <changelog author="rguenther@suse.com" date="1738152000">- For cross compilers require the same or newer binutils, newlib
  or cross-glibc that was used at build time.  [bsc#1232526]</changelog>
  <changelog author="rguenther@suse.com" date="1738843200">- Adjust cross compiler requirements to use %requires_ge
- Fix condition on whether to enable plugins or JIT support to
  not check sle_version which is not defined in SLFO but to check
  is_opensuse and suse_version instead.
- Add gcc14-pr118780.patch to make the SLFO config work.</changelog>
  <changelog author="rguenther@suse.com" date="1740052800">- Update to gcc-14 branch head, 9ffecde121af883b60bbe60d0, git11321
  * fixes reported ICE in [bsc#1237442]
- Drop gcc14-pr116629.patch now backported to the branch.</changelog>
  <changelog author="rguenther@suse.com" date="1741608000">- Disable profiling during build when %want_reproducible_builds is set
  [bsc#1238491]</changelog>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
</package>
<package pkgid="64f80baf516f30c73f8f5ca72f9c185d59c7d4c50ac5b44c128ba7b914789981" name="libm2iso19-32bit" arch="x86_64">
  <version epoch="0" ver="14.3.0+git11799" rel="150000.1.14.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1732968000">- Add loongarch64 to asan_arch, atomic_arch,
  itm_arch, lsan_arch, tsan_arch and ubsan_arch
- Add larchintrin.h, lasxintrin.h and lsxintrin.h
  headers to gccXY main package in %files section
- Set build_primary_64bit to 1 for loongarch64</changelog>
  <changelog author="adrian@suse.de" date="1733140800">- disable go on loongarch64 for now</changelog>
  <changelog author="mardnh@gmx.de" date="1736078400">- Switch to glibc based cross-compiler for target hppa</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Define ALT_CC_UNDER_TEST and ALT_CXX_UNDER_TEST for compat tests</changelog>
  <changelog author="rguenther@suse.com" date="1738152000">- For cross compilers require the same or newer binutils, newlib
  or cross-glibc that was used at build time.  [bsc#1232526]</changelog>
  <changelog author="rguenther@suse.com" date="1738843200">- Adjust cross compiler requirements to use %requires_ge
- Fix condition on whether to enable plugins or JIT support to
  not check sle_version which is not defined in SLFO but to check
  is_opensuse and suse_version instead.
- Add gcc14-pr118780.patch to make the SLFO config work.</changelog>
  <changelog author="rguenther@suse.com" date="1740052800">- Update to gcc-14 branch head, 9ffecde121af883b60bbe60d0, git11321
  * fixes reported ICE in [bsc#1237442]
- Drop gcc14-pr116629.patch now backported to the branch.</changelog>
  <changelog author="rguenther@suse.com" date="1741608000">- Disable profiling during build when %want_reproducible_builds is set
  [bsc#1238491]</changelog>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc14-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="c397b677089b1bdf9475b0863ffe41ce45755e298871dee9ca9de48dfb7f2dc7" name="libm2log19" arch="x86_64">
  <version epoch="0" ver="14.3.0+git11799" rel="150000.1.11.1"/>
  <changelog author="rguenther@suse.com" date="1728475200">- Update to gcc-14 branch head, 4af44f2cf7d281f3e4f3957ef, git10750
  * includes libstdc++6 fix for parsing tzdata 2024b [gcc#116657]
- Add gcc14-pr116629.patch to fix ICE with LTO building openvino
  on aarch64 [boo#1230262]</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1732968000">- Add loongarch64 to asan_arch, atomic_arch,
  itm_arch, lsan_arch, tsan_arch and ubsan_arch
- Add larchintrin.h, lasxintrin.h and lsxintrin.h
  headers to gccXY main package in %files section
- Set build_primary_64bit to 1 for loongarch64</changelog>
  <changelog author="adrian@suse.de" date="1733140800">- disable go on loongarch64 for now</changelog>
  <changelog author="mardnh@gmx.de" date="1736078400">- Switch to glibc based cross-compiler for target hppa</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Define ALT_CC_UNDER_TEST and ALT_CXX_UNDER_TEST for compat tests</changelog>
  <changelog author="rguenther@suse.com" date="1738152000">- For cross compilers require the same or newer binutils, newlib
  or cross-glibc that was used at build time.  [bsc#1232526]</changelog>
  <changelog author="rguenther@suse.com" date="1738843200">- Adjust cross compiler requirements to use %requires_ge
- Fix condition on whether to enable plugins or JIT support to
  not check sle_version which is not defined in SLFO but to check
  is_opensuse and suse_version instead.
- Add gcc14-pr118780.patch to make the SLFO config work.</changelog>
  <changelog author="rguenther@suse.com" date="1740052800">- Update to gcc-14 branch head, 9ffecde121af883b60bbe60d0, git11321
  * fixes reported ICE in [bsc#1237442]
- Drop gcc14-pr116629.patch now backported to the branch.</changelog>
  <changelog author="rguenther@suse.com" date="1741608000">- Disable profiling during build when %want_reproducible_builds is set
  [bsc#1238491]</changelog>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
</package>
<package pkgid="8ba4025b162e840b3ad4a98691a6e7e3f7a2e6ea70a42b98d73ab4bbd887e4d4" name="libm2log19" arch="x86_64">
  <version epoch="0" ver="14.3.0+git11799" rel="150000.1.14.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1732968000">- Add loongarch64 to asan_arch, atomic_arch,
  itm_arch, lsan_arch, tsan_arch and ubsan_arch
- Add larchintrin.h, lasxintrin.h and lsxintrin.h
  headers to gccXY main package in %files section
- Set build_primary_64bit to 1 for loongarch64</changelog>
  <changelog author="adrian@suse.de" date="1733140800">- disable go on loongarch64 for now</changelog>
  <changelog author="mardnh@gmx.de" date="1736078400">- Switch to glibc based cross-compiler for target hppa</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Define ALT_CC_UNDER_TEST and ALT_CXX_UNDER_TEST for compat tests</changelog>
  <changelog author="rguenther@suse.com" date="1738152000">- For cross compilers require the same or newer binutils, newlib
  or cross-glibc that was used at build time.  [bsc#1232526]</changelog>
  <changelog author="rguenther@suse.com" date="1738843200">- Adjust cross compiler requirements to use %requires_ge
- Fix condition on whether to enable plugins or JIT support to
  not check sle_version which is not defined in SLFO but to check
  is_opensuse and suse_version instead.
- Add gcc14-pr118780.patch to make the SLFO config work.</changelog>
  <changelog author="rguenther@suse.com" date="1740052800">- Update to gcc-14 branch head, 9ffecde121af883b60bbe60d0, git11321
  * fixes reported ICE in [bsc#1237442]
- Drop gcc14-pr116629.patch now backported to the branch.</changelog>
  <changelog author="rguenther@suse.com" date="1741608000">- Disable profiling during build when %want_reproducible_builds is set
  [bsc#1238491]</changelog>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc14-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="ede6185fa2b03d9816302d6ae9e7ac178cf3e18ad1f4e168ef0f394297d69181" name="libm2log19-32bit" arch="x86_64">
  <version epoch="0" ver="14.3.0+git11799" rel="150000.1.11.1"/>
  <changelog author="rguenther@suse.com" date="1728475200">- Update to gcc-14 branch head, 4af44f2cf7d281f3e4f3957ef, git10750
  * includes libstdc++6 fix for parsing tzdata 2024b [gcc#116657]
- Add gcc14-pr116629.patch to fix ICE with LTO building openvino
  on aarch64 [boo#1230262]</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1732968000">- Add loongarch64 to asan_arch, atomic_arch,
  itm_arch, lsan_arch, tsan_arch and ubsan_arch
- Add larchintrin.h, lasxintrin.h and lsxintrin.h
  headers to gccXY main package in %files section
- Set build_primary_64bit to 1 for loongarch64</changelog>
  <changelog author="adrian@suse.de" date="1733140800">- disable go on loongarch64 for now</changelog>
  <changelog author="mardnh@gmx.de" date="1736078400">- Switch to glibc based cross-compiler for target hppa</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Define ALT_CC_UNDER_TEST and ALT_CXX_UNDER_TEST for compat tests</changelog>
  <changelog author="rguenther@suse.com" date="1738152000">- For cross compilers require the same or newer binutils, newlib
  or cross-glibc that was used at build time.  [bsc#1232526]</changelog>
  <changelog author="rguenther@suse.com" date="1738843200">- Adjust cross compiler requirements to use %requires_ge
- Fix condition on whether to enable plugins or JIT support to
  not check sle_version which is not defined in SLFO but to check
  is_opensuse and suse_version instead.
- Add gcc14-pr118780.patch to make the SLFO config work.</changelog>
  <changelog author="rguenther@suse.com" date="1740052800">- Update to gcc-14 branch head, 9ffecde121af883b60bbe60d0, git11321
  * fixes reported ICE in [bsc#1237442]
- Drop gcc14-pr116629.patch now backported to the branch.</changelog>
  <changelog author="rguenther@suse.com" date="1741608000">- Disable profiling during build when %want_reproducible_builds is set
  [bsc#1238491]</changelog>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
</package>
<package pkgid="75298eeff06ab4f356189033b5c7ba41323bfc882e8708f5c9db38f701d88938" name="libm2log19-32bit" arch="x86_64">
  <version epoch="0" ver="14.3.0+git11799" rel="150000.1.14.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1732968000">- Add loongarch64 to asan_arch, atomic_arch,
  itm_arch, lsan_arch, tsan_arch and ubsan_arch
- Add larchintrin.h, lasxintrin.h and lsxintrin.h
  headers to gccXY main package in %files section
- Set build_primary_64bit to 1 for loongarch64</changelog>
  <changelog author="adrian@suse.de" date="1733140800">- disable go on loongarch64 for now</changelog>
  <changelog author="mardnh@gmx.de" date="1736078400">- Switch to glibc based cross-compiler for target hppa</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Define ALT_CC_UNDER_TEST and ALT_CXX_UNDER_TEST for compat tests</changelog>
  <changelog author="rguenther@suse.com" date="1738152000">- For cross compilers require the same or newer binutils, newlib
  or cross-glibc that was used at build time.  [bsc#1232526]</changelog>
  <changelog author="rguenther@suse.com" date="1738843200">- Adjust cross compiler requirements to use %requires_ge
- Fix condition on whether to enable plugins or JIT support to
  not check sle_version which is not defined in SLFO but to check
  is_opensuse and suse_version instead.
- Add gcc14-pr118780.patch to make the SLFO config work.</changelog>
  <changelog author="rguenther@suse.com" date="1740052800">- Update to gcc-14 branch head, 9ffecde121af883b60bbe60d0, git11321
  * fixes reported ICE in [bsc#1237442]
- Drop gcc14-pr116629.patch now backported to the branch.</changelog>
  <changelog author="rguenther@suse.com" date="1741608000">- Disable profiling during build when %want_reproducible_builds is set
  [bsc#1238491]</changelog>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc14-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="31577f9636b83962ad2027abda2e3ddcf4e182d09e7b3d8ec8bf218fab0c66b2" name="libm2min19" arch="x86_64">
  <version epoch="0" ver="14.3.0+git11799" rel="150000.1.11.1"/>
  <changelog author="rguenther@suse.com" date="1728475200">- Update to gcc-14 branch head, 4af44f2cf7d281f3e4f3957ef, git10750
  * includes libstdc++6 fix for parsing tzdata 2024b [gcc#116657]
- Add gcc14-pr116629.patch to fix ICE with LTO building openvino
  on aarch64 [boo#1230262]</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1732968000">- Add loongarch64 to asan_arch, atomic_arch,
  itm_arch, lsan_arch, tsan_arch and ubsan_arch
- Add larchintrin.h, lasxintrin.h and lsxintrin.h
  headers to gccXY main package in %files section
- Set build_primary_64bit to 1 for loongarch64</changelog>
  <changelog author="adrian@suse.de" date="1733140800">- disable go on loongarch64 for now</changelog>
  <changelog author="mardnh@gmx.de" date="1736078400">- Switch to glibc based cross-compiler for target hppa</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Define ALT_CC_UNDER_TEST and ALT_CXX_UNDER_TEST for compat tests</changelog>
  <changelog author="rguenther@suse.com" date="1738152000">- For cross compilers require the same or newer binutils, newlib
  or cross-glibc that was used at build time.  [bsc#1232526]</changelog>
  <changelog author="rguenther@suse.com" date="1738843200">- Adjust cross compiler requirements to use %requires_ge
- Fix condition on whether to enable plugins or JIT support to
  not check sle_version which is not defined in SLFO but to check
  is_opensuse and suse_version instead.
- Add gcc14-pr118780.patch to make the SLFO config work.</changelog>
  <changelog author="rguenther@suse.com" date="1740052800">- Update to gcc-14 branch head, 9ffecde121af883b60bbe60d0, git11321
  * fixes reported ICE in [bsc#1237442]
- Drop gcc14-pr116629.patch now backported to the branch.</changelog>
  <changelog author="rguenther@suse.com" date="1741608000">- Disable profiling during build when %want_reproducible_builds is set
  [bsc#1238491]</changelog>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
</package>
<package pkgid="aea084a42e82539d36ba07381f9ef2cd82a74d803f00251d125c7281c290a79d" name="libm2min19" arch="x86_64">
  <version epoch="0" ver="14.3.0+git11799" rel="150000.1.14.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1732968000">- Add loongarch64 to asan_arch, atomic_arch,
  itm_arch, lsan_arch, tsan_arch and ubsan_arch
- Add larchintrin.h, lasxintrin.h and lsxintrin.h
  headers to gccXY main package in %files section
- Set build_primary_64bit to 1 for loongarch64</changelog>
  <changelog author="adrian@suse.de" date="1733140800">- disable go on loongarch64 for now</changelog>
  <changelog author="mardnh@gmx.de" date="1736078400">- Switch to glibc based cross-compiler for target hppa</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Define ALT_CC_UNDER_TEST and ALT_CXX_UNDER_TEST for compat tests</changelog>
  <changelog author="rguenther@suse.com" date="1738152000">- For cross compilers require the same or newer binutils, newlib
  or cross-glibc that was used at build time.  [bsc#1232526]</changelog>
  <changelog author="rguenther@suse.com" date="1738843200">- Adjust cross compiler requirements to use %requires_ge
- Fix condition on whether to enable plugins or JIT support to
  not check sle_version which is not defined in SLFO but to check
  is_opensuse and suse_version instead.
- Add gcc14-pr118780.patch to make the SLFO config work.</changelog>
  <changelog author="rguenther@suse.com" date="1740052800">- Update to gcc-14 branch head, 9ffecde121af883b60bbe60d0, git11321
  * fixes reported ICE in [bsc#1237442]
- Drop gcc14-pr116629.patch now backported to the branch.</changelog>
  <changelog author="rguenther@suse.com" date="1741608000">- Disable profiling during build when %want_reproducible_builds is set
  [bsc#1238491]</changelog>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc14-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="72c481902dd58de464999ad07f24c3eed650b7889fb01c913fb1cbe0f7617dd1" name="libm2min19-32bit" arch="x86_64">
  <version epoch="0" ver="14.3.0+git11799" rel="150000.1.11.1"/>
  <changelog author="rguenther@suse.com" date="1728475200">- Update to gcc-14 branch head, 4af44f2cf7d281f3e4f3957ef, git10750
  * includes libstdc++6 fix for parsing tzdata 2024b [gcc#116657]
- Add gcc14-pr116629.patch to fix ICE with LTO building openvino
  on aarch64 [boo#1230262]</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1732968000">- Add loongarch64 to asan_arch, atomic_arch,
  itm_arch, lsan_arch, tsan_arch and ubsan_arch
- Add larchintrin.h, lasxintrin.h and lsxintrin.h
  headers to gccXY main package in %files section
- Set build_primary_64bit to 1 for loongarch64</changelog>
  <changelog author="adrian@suse.de" date="1733140800">- disable go on loongarch64 for now</changelog>
  <changelog author="mardnh@gmx.de" date="1736078400">- Switch to glibc based cross-compiler for target hppa</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Define ALT_CC_UNDER_TEST and ALT_CXX_UNDER_TEST for compat tests</changelog>
  <changelog author="rguenther@suse.com" date="1738152000">- For cross compilers require the same or newer binutils, newlib
  or cross-glibc that was used at build time.  [bsc#1232526]</changelog>
  <changelog author="rguenther@suse.com" date="1738843200">- Adjust cross compiler requirements to use %requires_ge
- Fix condition on whether to enable plugins or JIT support to
  not check sle_version which is not defined in SLFO but to check
  is_opensuse and suse_version instead.
- Add gcc14-pr118780.patch to make the SLFO config work.</changelog>
  <changelog author="rguenther@suse.com" date="1740052800">- Update to gcc-14 branch head, 9ffecde121af883b60bbe60d0, git11321
  * fixes reported ICE in [bsc#1237442]
- Drop gcc14-pr116629.patch now backported to the branch.</changelog>
  <changelog author="rguenther@suse.com" date="1741608000">- Disable profiling during build when %want_reproducible_builds is set
  [bsc#1238491]</changelog>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
</package>
<package pkgid="540ad852fd99631305e3d7cc6084b707792511b697f22c9a3b72d05adec67dd4" name="libm2min19-32bit" arch="x86_64">
  <version epoch="0" ver="14.3.0+git11799" rel="150000.1.14.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1732968000">- Add loongarch64 to asan_arch, atomic_arch,
  itm_arch, lsan_arch, tsan_arch and ubsan_arch
- Add larchintrin.h, lasxintrin.h and lsxintrin.h
  headers to gccXY main package in %files section
- Set build_primary_64bit to 1 for loongarch64</changelog>
  <changelog author="adrian@suse.de" date="1733140800">- disable go on loongarch64 for now</changelog>
  <changelog author="mardnh@gmx.de" date="1736078400">- Switch to glibc based cross-compiler for target hppa</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Define ALT_CC_UNDER_TEST and ALT_CXX_UNDER_TEST for compat tests</changelog>
  <changelog author="rguenther@suse.com" date="1738152000">- For cross compilers require the same or newer binutils, newlib
  or cross-glibc that was used at build time.  [bsc#1232526]</changelog>
  <changelog author="rguenther@suse.com" date="1738843200">- Adjust cross compiler requirements to use %requires_ge
- Fix condition on whether to enable plugins or JIT support to
  not check sle_version which is not defined in SLFO but to check
  is_opensuse and suse_version instead.
- Add gcc14-pr118780.patch to make the SLFO config work.</changelog>
  <changelog author="rguenther@suse.com" date="1740052800">- Update to gcc-14 branch head, 9ffecde121af883b60bbe60d0, git11321
  * fixes reported ICE in [bsc#1237442]
- Drop gcc14-pr116629.patch now backported to the branch.</changelog>
  <changelog author="rguenther@suse.com" date="1741608000">- Disable profiling during build when %want_reproducible_builds is set
  [bsc#1238491]</changelog>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc14-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="bf487e746f8f000fc5429beb07529d26a5387d2468a356fb17ca1dd2a83d8bfc" name="libm2pim19" arch="x86_64">
  <version epoch="0" ver="14.3.0+git11799" rel="150000.1.11.1"/>
  <changelog author="rguenther@suse.com" date="1728475200">- Update to gcc-14 branch head, 4af44f2cf7d281f3e4f3957ef, git10750
  * includes libstdc++6 fix for parsing tzdata 2024b [gcc#116657]
- Add gcc14-pr116629.patch to fix ICE with LTO building openvino
  on aarch64 [boo#1230262]</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1732968000">- Add loongarch64 to asan_arch, atomic_arch,
  itm_arch, lsan_arch, tsan_arch and ubsan_arch
- Add larchintrin.h, lasxintrin.h and lsxintrin.h
  headers to gccXY main package in %files section
- Set build_primary_64bit to 1 for loongarch64</changelog>
  <changelog author="adrian@suse.de" date="1733140800">- disable go on loongarch64 for now</changelog>
  <changelog author="mardnh@gmx.de" date="1736078400">- Switch to glibc based cross-compiler for target hppa</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Define ALT_CC_UNDER_TEST and ALT_CXX_UNDER_TEST for compat tests</changelog>
  <changelog author="rguenther@suse.com" date="1738152000">- For cross compilers require the same or newer binutils, newlib
  or cross-glibc that was used at build time.  [bsc#1232526]</changelog>
  <changelog author="rguenther@suse.com" date="1738843200">- Adjust cross compiler requirements to use %requires_ge
- Fix condition on whether to enable plugins or JIT support to
  not check sle_version which is not defined in SLFO but to check
  is_opensuse and suse_version instead.
- Add gcc14-pr118780.patch to make the SLFO config work.</changelog>
  <changelog author="rguenther@suse.com" date="1740052800">- Update to gcc-14 branch head, 9ffecde121af883b60bbe60d0, git11321
  * fixes reported ICE in [bsc#1237442]
- Drop gcc14-pr116629.patch now backported to the branch.</changelog>
  <changelog author="rguenther@suse.com" date="1741608000">- Disable profiling during build when %want_reproducible_builds is set
  [bsc#1238491]</changelog>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
</package>
<package pkgid="a8ac4d9c2eb303ef5c37c81b71c8ddb76fcde17ffbf5f3edc1e79b88c9c0898d" name="libm2pim19" arch="x86_64">
  <version epoch="0" ver="14.3.0+git11799" rel="150000.1.14.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1732968000">- Add loongarch64 to asan_arch, atomic_arch,
  itm_arch, lsan_arch, tsan_arch and ubsan_arch
- Add larchintrin.h, lasxintrin.h and lsxintrin.h
  headers to gccXY main package in %files section
- Set build_primary_64bit to 1 for loongarch64</changelog>
  <changelog author="adrian@suse.de" date="1733140800">- disable go on loongarch64 for now</changelog>
  <changelog author="mardnh@gmx.de" date="1736078400">- Switch to glibc based cross-compiler for target hppa</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Define ALT_CC_UNDER_TEST and ALT_CXX_UNDER_TEST for compat tests</changelog>
  <changelog author="rguenther@suse.com" date="1738152000">- For cross compilers require the same or newer binutils, newlib
  or cross-glibc that was used at build time.  [bsc#1232526]</changelog>
  <changelog author="rguenther@suse.com" date="1738843200">- Adjust cross compiler requirements to use %requires_ge
- Fix condition on whether to enable plugins or JIT support to
  not check sle_version which is not defined in SLFO but to check
  is_opensuse and suse_version instead.
- Add gcc14-pr118780.patch to make the SLFO config work.</changelog>
  <changelog author="rguenther@suse.com" date="1740052800">- Update to gcc-14 branch head, 9ffecde121af883b60bbe60d0, git11321
  * fixes reported ICE in [bsc#1237442]
- Drop gcc14-pr116629.patch now backported to the branch.</changelog>
  <changelog author="rguenther@suse.com" date="1741608000">- Disable profiling during build when %want_reproducible_builds is set
  [bsc#1238491]</changelog>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc14-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="3a95f81413d0447c5566511c551152ba4a05bd79d6f022fd5b7ef10668d621fc" name="libm2pim19-32bit" arch="x86_64">
  <version epoch="0" ver="14.3.0+git11799" rel="150000.1.11.1"/>
  <changelog author="rguenther@suse.com" date="1728475200">- Update to gcc-14 branch head, 4af44f2cf7d281f3e4f3957ef, git10750
  * includes libstdc++6 fix for parsing tzdata 2024b [gcc#116657]
- Add gcc14-pr116629.patch to fix ICE with LTO building openvino
  on aarch64 [boo#1230262]</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1732968000">- Add loongarch64 to asan_arch, atomic_arch,
  itm_arch, lsan_arch, tsan_arch and ubsan_arch
- Add larchintrin.h, lasxintrin.h and lsxintrin.h
  headers to gccXY main package in %files section
- Set build_primary_64bit to 1 for loongarch64</changelog>
  <changelog author="adrian@suse.de" date="1733140800">- disable go on loongarch64 for now</changelog>
  <changelog author="mardnh@gmx.de" date="1736078400">- Switch to glibc based cross-compiler for target hppa</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Define ALT_CC_UNDER_TEST and ALT_CXX_UNDER_TEST for compat tests</changelog>
  <changelog author="rguenther@suse.com" date="1738152000">- For cross compilers require the same or newer binutils, newlib
  or cross-glibc that was used at build time.  [bsc#1232526]</changelog>
  <changelog author="rguenther@suse.com" date="1738843200">- Adjust cross compiler requirements to use %requires_ge
- Fix condition on whether to enable plugins or JIT support to
  not check sle_version which is not defined in SLFO but to check
  is_opensuse and suse_version instead.
- Add gcc14-pr118780.patch to make the SLFO config work.</changelog>
  <changelog author="rguenther@suse.com" date="1740052800">- Update to gcc-14 branch head, 9ffecde121af883b60bbe60d0, git11321
  * fixes reported ICE in [bsc#1237442]
- Drop gcc14-pr116629.patch now backported to the branch.</changelog>
  <changelog author="rguenther@suse.com" date="1741608000">- Disable profiling during build when %want_reproducible_builds is set
  [bsc#1238491]</changelog>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
</package>
<package pkgid="abed2f1ea7385501d6ef6c922002e6e1aeda406c3c4e06ae2ffa75990eefc1ca" name="libm2pim19-32bit" arch="x86_64">
  <version epoch="0" ver="14.3.0+git11799" rel="150000.1.14.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1732968000">- Add loongarch64 to asan_arch, atomic_arch,
  itm_arch, lsan_arch, tsan_arch and ubsan_arch
- Add larchintrin.h, lasxintrin.h and lsxintrin.h
  headers to gccXY main package in %files section
- Set build_primary_64bit to 1 for loongarch64</changelog>
  <changelog author="adrian@suse.de" date="1733140800">- disable go on loongarch64 for now</changelog>
  <changelog author="mardnh@gmx.de" date="1736078400">- Switch to glibc based cross-compiler for target hppa</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Define ALT_CC_UNDER_TEST and ALT_CXX_UNDER_TEST for compat tests</changelog>
  <changelog author="rguenther@suse.com" date="1738152000">- For cross compilers require the same or newer binutils, newlib
  or cross-glibc that was used at build time.  [bsc#1232526]</changelog>
  <changelog author="rguenther@suse.com" date="1738843200">- Adjust cross compiler requirements to use %requires_ge
- Fix condition on whether to enable plugins or JIT support to
  not check sle_version which is not defined in SLFO but to check
  is_opensuse and suse_version instead.
- Add gcc14-pr118780.patch to make the SLFO config work.</changelog>
  <changelog author="rguenther@suse.com" date="1740052800">- Update to gcc-14 branch head, 9ffecde121af883b60bbe60d0, git11321
  * fixes reported ICE in [bsc#1237442]
- Drop gcc14-pr116629.patch now backported to the branch.</changelog>
  <changelog author="rguenther@suse.com" date="1741608000">- Disable profiling during build when %want_reproducible_builds is set
  [bsc#1238491]</changelog>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc14-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="6a24dc9d64ccaadf03cd23b0824a0671c5db3161dec4504c7c12d98d64ba17b8" name="libmana1" arch="x86_64">
  <version epoch="0" ver="54.0" rel="150700.3.2.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="schwab@suse.de" date="1647518400">- util-Add-barriers-support-for-RISC-V.patch: Backport from upstream: Add
  barriers support for RISC-V</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1648555200">- Update to v39.1
  - Major fixes for hns provider
  - Bug fixes for all providers
  - systemd hardening
  - NDR rate support
- Dropped srp_daemon-Detect-proper-path-to-systemctl.patch
  as it was fixed upstream</changelog>
  <changelog author="dmueller@suse.com" date="1659960000">- skip valgrind on riscv64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1663070400">- Update to v42.0
  - Fixes for all providers
- Dropped patches merged upstream:
  - util-Add-barriers-support-for-RISC-V.patch
  - cmake-Make-modprobe.d-path-configurable.patch
- Update gen-pandoc.sh to support python3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1665662400">- Add rdma-ndd-disable-systemd-ProtectHostName-feature.patch to fix issue
  where rdma-ndd would not be aware of dynamic hostnames retrived through DHCP</changelog>
  <changelog author="nicolas.morey@suse.com" date="1681905600">- Update to v45.0
  - Fixes for all providers
  - Support for Microsoft Azure Network Adapter
- Drop rdma-ndd-disable-systemd-ProtectHostName-feature.patch
  as it was fixed upstream.
- Refresh against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-Update-kernel-headers.patch</changelog>
  <changelog author="nicolas.morey@suse.com" date="1690200000">- Update to v47.0
  - Fixes for all providers</changelog>
  <changelog author="nicolas.morey@suse.com" date="1691064000">- Drop patches adding support for cxgb3 (EOL, removed from kernel 5.5)
  - cxgb3-fix-declaration-of-free_context.patch
  - cxgb3-fix-support-for-new-uquery-API.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-Update-kernel-headers.patch
- Update baselibs=.conf accordingly</changelog>
  <changelog author="jengelh@inai.de" date="1692792000">- Add missing-quoting.patch
- Use normal GNU tar option syntax
- Remove old RPM spec logic (%defattr)</changelog>
  <changelog author="nicolas.morey@suse.com" date="1695384000">- Update to v48.0
  - No release notes available.
- Drop missing-quoting.patch which was fixed upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1700913600">- Update to v49.0 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1705924800">- Update to v49.1 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1707912000">- Add kernel-boot-do-not-load-module-unsupported-on-s390.patch
  to prevent autoload of module not supported on s390. (bsc#1219805)</changelog>
  <changelog author="nicolas.morey@suse.com" date="1719316800">- Update to rdma-core v52.0
  - No release notes available
- Add upstream patch Added-suffix-libdrm-to-CMakeLists.txt-for-drm.patch
  to fix libdrm detection.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1723464000">- Update to rdma-core v53.0
  - No release notes available
- Remove Added-suffix-libdrm-to-CMakeLists.txt-for-drm.patch
  as it was merged upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1728561600">- Update to rdma-core v54.0
  - No release notes available</changelog>
</package>
<package pkgid="7e8cc0e2165dabb65d99572aeaac9cf413ea169f1ca7e23c49fc1e2da8f7c109" name="libmediacheck-devel" arch="x86_64">
  <version epoch="0" ver="6.5" rel="150600.3.3.1"/>
  <changelog author="snwint@suse.com" date="1422360000">- updated git2log script
- 3.4</changelog>
  <changelog author="snwint@suse.com" date="1443528000">- Add information about openSUSE development
- Convert README to Markdown
- 3.5</changelog>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/checkmedia#3
- sort input files (boo#1041090)
- 3.6</changelog>
  <changelog author="wfeldt@opensuse.org" date="1512129600">- merge gh#openSUSE/checkmedia#4
- determine image size correctly (bsc#1070745)
- more comments
- 3.7</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524744000">- merge gh#openSUSE/checkmedia#5
- improve documentation
- fix Makefile
- update git2log script
- add simple usage examples
- 3.8</changelog>
  <changelog author="wfeldt@opensuse.org" date="1530273600">- merge gh#openSUSE/checkmedia#6
- change tagmedia to also store checksum over partition
  (bsc#1000947)
- update Makefile
- update documentation
- rewrite checkmedia to use new mediacheck library
- digestdemo: add simple demo tool for libmediacheck usage
- mediacheck library header file
- mediacheck library code
- add test tool for mediachecks
- test data
- enhance code
- fix typo in tagmedia
- 4.0</changelog>
  <changelog author="snwint@suse.de" date="1543406400">- merge gh#openSUSE/checkmedia#8
- fix digest calculation in tagmedia (bsc#1117499)
- added testcases
- adjust function descriptions
- 4.1</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563278400">- merge gh#openSUSE/checkmedia#10
- add support for signed media (bsc#1139561)
- adjust tagmedia script
- update doc
- adjust test cases
- add links to signature magic value origins
- allow to set specific gpg key for signature verification
- rearrange data structure to provide some compatibility
- check for empty signature
- better error log
- added tests for signature verification
- signature test results reference
- 5.0</changelog>
  <changelog author="jengelh@inai.de" date="1563364800">- Use noun phrase in summaries.
- Drop redundant ldconfig PreReq.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563364801">- merge gh#openSUSE/checkmedia#11
- work also with older gpg versions
- 5.1</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563364802">- merge gh#openSUSE/checkmedia#12
- fix compat issue with older gcc
- 5.2</changelog>
  <changelog author="wfeldt@opensuse.org" date="1564401600">- merge gh#openSUSE/checkmedia#13
- mediacheck.md: fix typos
- 5.3</changelog>
  <changelog author="wfeldt@opensuse.org" date="1586952000">- merge gh#openSUSE/checkmedia#14
- work better with broken media (bsc#1169420)
- 5.4</changelog>
  <changelog author="wfeldt@opensuse.org" date="1633089600">- merge gh#openSUSE/checkmedia#15
- add --version option to tagmedia
- use volume id if app id is missing for nice output
- add support for rh style meta data and digest calculation
- extend fragment calculation to suse style
- show signee if signature is ok
- add --create-signature option
- fix large file support
- updated unit tests
- enhance documentation
- add new and shiny README.adoc
- 6.0</changelog>
  <changelog author="wfeldt@opensuse.org" date="1633694400">- merge gh#openSUSE/checkmedia#16
- fix auto-detecting a suitable signature location for rh media
  (jsc#SCL-6)
- 6.1</changelog>
  <changelog author="snwint@suse.com" date="1636459200">- minor spec file adjustments</changelog>
  <changelog author="wfeldt@opensuse.org" date="1685707200">- merge gh#openSUSE/checkmedia#17
- do not select EFI System Partition for digest calculation
  (bsc#1211953)
- use default for SKIPSECTORS only for RH media
- add man pages for checkmedia and tagmedia
- add spec file for OBS
- 6.2</changelog>
  <changelog author="wfeldt@opensuse.org" date="1709640000">- merge gh#openSUSE/checkmedia#18
- tagmedia: fix size detection for block devices (bsc#1220972)
- 6.3</changelog>
  <changelog author="wfeldt@opensuse.org" date="1747137600">- merge gh#openSUSE/checkmedia#20
- added --[no-]signature-tag options for explicit handling of the
  'signature' tag (bsc#1243125)
- 6.4</changelog>
  <changelog author="wfeldt@opensuse.org" date="1755518400">- merge gh#openSUSE/checkmedia#21
- set LC_MESSAGES to C when running gpg (bsc#1248168)
- fix minor issue when printing app_id
- 6.5</changelog>
</package>
<package pkgid="ce5e4e72a6c95b77c94c9f1cb47784b0266ffc50e91da9fd41497301db598151" name="libmediacheck-devel" arch="x86_64">
  <version epoch="0" ver="6.6" rel="150600.3.6.1"/>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/checkmedia#3
- sort input files (boo#1041090)
- 3.6</changelog>
  <changelog author="wfeldt@opensuse.org" date="1512129600">- merge gh#openSUSE/checkmedia#4
- determine image size correctly (bsc#1070745)
- more comments
- 3.7</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524744000">- merge gh#openSUSE/checkmedia#5
- improve documentation
- fix Makefile
- update git2log script
- add simple usage examples
- 3.8</changelog>
  <changelog author="wfeldt@opensuse.org" date="1530273600">- merge gh#openSUSE/checkmedia#6
- change tagmedia to also store checksum over partition
  (bsc#1000947)
- update Makefile
- update documentation
- rewrite checkmedia to use new mediacheck library
- digestdemo: add simple demo tool for libmediacheck usage
- mediacheck library header file
- mediacheck library code
- add test tool for mediachecks
- test data
- enhance code
- fix typo in tagmedia
- 4.0</changelog>
  <changelog author="snwint@suse.de" date="1543406400">- merge gh#openSUSE/checkmedia#8
- fix digest calculation in tagmedia (bsc#1117499)
- added testcases
- adjust function descriptions
- 4.1</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563278400">- merge gh#openSUSE/checkmedia#10
- add support for signed media (bsc#1139561)
- adjust tagmedia script
- update doc
- adjust test cases
- add links to signature magic value origins
- allow to set specific gpg key for signature verification
- rearrange data structure to provide some compatibility
- check for empty signature
- better error log
- added tests for signature verification
- signature test results reference
- 5.0</changelog>
  <changelog author="jengelh@inai.de" date="1563364800">- Use noun phrase in summaries.
- Drop redundant ldconfig PreReq.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563364801">- merge gh#openSUSE/checkmedia#11
- work also with older gpg versions
- 5.1</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563364802">- merge gh#openSUSE/checkmedia#12
- fix compat issue with older gcc
- 5.2</changelog>
  <changelog author="wfeldt@opensuse.org" date="1564401600">- merge gh#openSUSE/checkmedia#13
- mediacheck.md: fix typos
- 5.3</changelog>
  <changelog author="wfeldt@opensuse.org" date="1586952000">- merge gh#openSUSE/checkmedia#14
- work better with broken media (bsc#1169420)
- 5.4</changelog>
  <changelog author="wfeldt@opensuse.org" date="1633089600">- merge gh#openSUSE/checkmedia#15
- add --version option to tagmedia
- use volume id if app id is missing for nice output
- add support for rh style meta data and digest calculation
- extend fragment calculation to suse style
- show signee if signature is ok
- add --create-signature option
- fix large file support
- updated unit tests
- enhance documentation
- add new and shiny README.adoc
- 6.0</changelog>
  <changelog author="wfeldt@opensuse.org" date="1633694400">- merge gh#openSUSE/checkmedia#16
- fix auto-detecting a suitable signature location for rh media
  (jsc#SCL-6)
- 6.1</changelog>
  <changelog author="snwint@suse.com" date="1636459200">- minor spec file adjustments</changelog>
  <changelog author="wfeldt@opensuse.org" date="1685707200">- merge gh#openSUSE/checkmedia#17
- do not select EFI System Partition for digest calculation
  (bsc#1211953)
- use default for SKIPSECTORS only for RH media
- add man pages for checkmedia and tagmedia
- add spec file for OBS
- 6.2</changelog>
  <changelog author="wfeldt@opensuse.org" date="1709640000">- merge gh#openSUSE/checkmedia#18
- tagmedia: fix size detection for block devices (bsc#1220972)
- 6.3</changelog>
  <changelog author="wfeldt@opensuse.org" date="1747137600">- merge gh#openSUSE/checkmedia#20
- added --[no-]signature-tag options for explicit handling of the
  'signature' tag (bsc#1243125)
- 6.4</changelog>
  <changelog author="wfeldt@opensuse.org" date="1755518400">- merge gh#openSUSE/checkmedia#21
- set LC_MESSAGES to C when running gpg (bsc#1248168)
- fix minor issue when printing app_id
- 6.5</changelog>
  <changelog author="wfeldt@opensuse.org" date="1774612800">- merge gh#openSUSE/checkmedia#22
- Add support for GPT partitions</changelog>
  <changelog author="wfeldt@opensuse.org" date="1774612801">- merge gh#openSUSE/checkmedia#23
- include pre-built documentation (bsc#1260860)
- simplify spec file
- 6.6</changelog>
</package>
<package pkgid="3cb208506f3300d24249fdbb1d22ff055afbebd11b96b563675d5494f7488bf2" name="libmediacheck6" arch="x86_64">
  <version epoch="0" ver="6.5" rel="150600.3.3.1"/>
  <changelog author="snwint@suse.com" date="1422360000">- updated git2log script
- 3.4</changelog>
  <changelog author="snwint@suse.com" date="1443528000">- Add information about openSUSE development
- Convert README to Markdown
- 3.5</changelog>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/checkmedia#3
- sort input files (boo#1041090)
- 3.6</changelog>
  <changelog author="wfeldt@opensuse.org" date="1512129600">- merge gh#openSUSE/checkmedia#4
- determine image size correctly (bsc#1070745)
- more comments
- 3.7</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524744000">- merge gh#openSUSE/checkmedia#5
- improve documentation
- fix Makefile
- update git2log script
- add simple usage examples
- 3.8</changelog>
  <changelog author="wfeldt@opensuse.org" date="1530273600">- merge gh#openSUSE/checkmedia#6
- change tagmedia to also store checksum over partition
  (bsc#1000947)
- update Makefile
- update documentation
- rewrite checkmedia to use new mediacheck library
- digestdemo: add simple demo tool for libmediacheck usage
- mediacheck library header file
- mediacheck library code
- add test tool for mediachecks
- test data
- enhance code
- fix typo in tagmedia
- 4.0</changelog>
  <changelog author="snwint@suse.de" date="1543406400">- merge gh#openSUSE/checkmedia#8
- fix digest calculation in tagmedia (bsc#1117499)
- added testcases
- adjust function descriptions
- 4.1</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563278400">- merge gh#openSUSE/checkmedia#10
- add support for signed media (bsc#1139561)
- adjust tagmedia script
- update doc
- adjust test cases
- add links to signature magic value origins
- allow to set specific gpg key for signature verification
- rearrange data structure to provide some compatibility
- check for empty signature
- better error log
- added tests for signature verification
- signature test results reference
- 5.0</changelog>
  <changelog author="jengelh@inai.de" date="1563364800">- Use noun phrase in summaries.
- Drop redundant ldconfig PreReq.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563364801">- merge gh#openSUSE/checkmedia#11
- work also with older gpg versions
- 5.1</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563364802">- merge gh#openSUSE/checkmedia#12
- fix compat issue with older gcc
- 5.2</changelog>
  <changelog author="wfeldt@opensuse.org" date="1564401600">- merge gh#openSUSE/checkmedia#13
- mediacheck.md: fix typos
- 5.3</changelog>
  <changelog author="wfeldt@opensuse.org" date="1586952000">- merge gh#openSUSE/checkmedia#14
- work better with broken media (bsc#1169420)
- 5.4</changelog>
  <changelog author="wfeldt@opensuse.org" date="1633089600">- merge gh#openSUSE/checkmedia#15
- add --version option to tagmedia
- use volume id if app id is missing for nice output
- add support for rh style meta data and digest calculation
- extend fragment calculation to suse style
- show signee if signature is ok
- add --create-signature option
- fix large file support
- updated unit tests
- enhance documentation
- add new and shiny README.adoc
- 6.0</changelog>
  <changelog author="wfeldt@opensuse.org" date="1633694400">- merge gh#openSUSE/checkmedia#16
- fix auto-detecting a suitable signature location for rh media
  (jsc#SCL-6)
- 6.1</changelog>
  <changelog author="snwint@suse.com" date="1636459200">- minor spec file adjustments</changelog>
  <changelog author="wfeldt@opensuse.org" date="1685707200">- merge gh#openSUSE/checkmedia#17
- do not select EFI System Partition for digest calculation
  (bsc#1211953)
- use default for SKIPSECTORS only for RH media
- add man pages for checkmedia and tagmedia
- add spec file for OBS
- 6.2</changelog>
  <changelog author="wfeldt@opensuse.org" date="1709640000">- merge gh#openSUSE/checkmedia#18
- tagmedia: fix size detection for block devices (bsc#1220972)
- 6.3</changelog>
  <changelog author="wfeldt@opensuse.org" date="1747137600">- merge gh#openSUSE/checkmedia#20
- added --[no-]signature-tag options for explicit handling of the
  'signature' tag (bsc#1243125)
- 6.4</changelog>
  <changelog author="wfeldt@opensuse.org" date="1755518400">- merge gh#openSUSE/checkmedia#21
- set LC_MESSAGES to C when running gpg (bsc#1248168)
- fix minor issue when printing app_id
- 6.5</changelog>
</package>
<package pkgid="9fd7cca6afe518c547f3c0f069bb04bc79fb205186d6309045b3f675cbf1c57b" name="libmediacheck6" arch="x86_64">
  <version epoch="0" ver="6.6" rel="150600.3.6.1"/>
  <changelog author="bwiedemann@suse.de" date="1505217600">- merge gh#openSUSE/checkmedia#3
- sort input files (boo#1041090)
- 3.6</changelog>
  <changelog author="wfeldt@opensuse.org" date="1512129600">- merge gh#openSUSE/checkmedia#4
- determine image size correctly (bsc#1070745)
- more comments
- 3.7</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524744000">- merge gh#openSUSE/checkmedia#5
- improve documentation
- fix Makefile
- update git2log script
- add simple usage examples
- 3.8</changelog>
  <changelog author="wfeldt@opensuse.org" date="1530273600">- merge gh#openSUSE/checkmedia#6
- change tagmedia to also store checksum over partition
  (bsc#1000947)
- update Makefile
- update documentation
- rewrite checkmedia to use new mediacheck library
- digestdemo: add simple demo tool for libmediacheck usage
- mediacheck library header file
- mediacheck library code
- add test tool for mediachecks
- test data
- enhance code
- fix typo in tagmedia
- 4.0</changelog>
  <changelog author="snwint@suse.de" date="1543406400">- merge gh#openSUSE/checkmedia#8
- fix digest calculation in tagmedia (bsc#1117499)
- added testcases
- adjust function descriptions
- 4.1</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563278400">- merge gh#openSUSE/checkmedia#10
- add support for signed media (bsc#1139561)
- adjust tagmedia script
- update doc
- adjust test cases
- add links to signature magic value origins
- allow to set specific gpg key for signature verification
- rearrange data structure to provide some compatibility
- check for empty signature
- better error log
- added tests for signature verification
- signature test results reference
- 5.0</changelog>
  <changelog author="jengelh@inai.de" date="1563364800">- Use noun phrase in summaries.
- Drop redundant ldconfig PreReq.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563364801">- merge gh#openSUSE/checkmedia#11
- work also with older gpg versions
- 5.1</changelog>
  <changelog author="wfeldt@opensuse.org" date="1563364802">- merge gh#openSUSE/checkmedia#12
- fix compat issue with older gcc
- 5.2</changelog>
  <changelog author="wfeldt@opensuse.org" date="1564401600">- merge gh#openSUSE/checkmedia#13
- mediacheck.md: fix typos
- 5.3</changelog>
  <changelog author="wfeldt@opensuse.org" date="1586952000">- merge gh#openSUSE/checkmedia#14
- work better with broken media (bsc#1169420)
- 5.4</changelog>
  <changelog author="wfeldt@opensuse.org" date="1633089600">- merge gh#openSUSE/checkmedia#15
- add --version option to tagmedia
- use volume id if app id is missing for nice output
- add support for rh style meta data and digest calculation
- extend fragment calculation to suse style
- show signee if signature is ok
- add --create-signature option
- fix large file support
- updated unit tests
- enhance documentation
- add new and shiny README.adoc
- 6.0</changelog>
  <changelog author="wfeldt@opensuse.org" date="1633694400">- merge gh#openSUSE/checkmedia#16
- fix auto-detecting a suitable signature location for rh media
  (jsc#SCL-6)
- 6.1</changelog>
  <changelog author="snwint@suse.com" date="1636459200">- minor spec file adjustments</changelog>
  <changelog author="wfeldt@opensuse.org" date="1685707200">- merge gh#openSUSE/checkmedia#17
- do not select EFI System Partition for digest calculation
  (bsc#1211953)
- use default for SKIPSECTORS only for RH media
- add man pages for checkmedia and tagmedia
- add spec file for OBS
- 6.2</changelog>
  <changelog author="wfeldt@opensuse.org" date="1709640000">- merge gh#openSUSE/checkmedia#18
- tagmedia: fix size detection for block devices (bsc#1220972)
- 6.3</changelog>
  <changelog author="wfeldt@opensuse.org" date="1747137600">- merge gh#openSUSE/checkmedia#20
- added --[no-]signature-tag options for explicit handling of the
  'signature' tag (bsc#1243125)
- 6.4</changelog>
  <changelog author="wfeldt@opensuse.org" date="1755518400">- merge gh#openSUSE/checkmedia#21
- set LC_MESSAGES to C when running gpg (bsc#1248168)
- fix minor issue when printing app_id
- 6.5</changelog>
  <changelog author="wfeldt@opensuse.org" date="1774612800">- merge gh#openSUSE/checkmedia#22
- Add support for GPT partitions</changelog>
  <changelog author="wfeldt@opensuse.org" date="1774612801">- merge gh#openSUSE/checkmedia#23
- include pre-built documentation (bsc#1260860)
- simplify spec file
- 6.6</changelog>
</package>
<package pkgid="bfc167ac25b672fe56b1c259e18d4eaeac9c466023c1d6202c4f47a8f8ff52f4" name="libmicrohttpd" arch="src">
  <version epoch="0" ver="0.9.77" rel="150600.3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1512129600">- Install copying</changelog>
  <changelog author="mardnh@gmx.de" date="1519646400">- Update to version 0.9.59:
  * Fix masking operation.
  * Fix deadlock when failing to prepare chunked response
  * Fix __clang_major__ related warnings for non-clang compilers.
  * Fixed tests on platforms with huge number of CPUs.
  * Doxygen configuration was updated.
  * Various doxygen fixes.
- Update to version 0.9.58:
  * Fixed HTTPS tests on modern platforms.
  * Minor documentation installation fixes.
  * Tolerate AF_UNIX when trying to determine our binding port
    from socket.  Use `sockaddr_storage` instead of trying to
    guess the sockaddr type before calling getsockname().</changelog>
  <changelog author="malte.kraus@suse.com" date="1544184000">- Update to version 0.9.61:
  * parse arguments with (properly) escaped URLs correctly. Replace
    sprintf with snprintf in testcases.
  * Fix build issue with GnuTLS &lt; 3.0.
  * Add MHD_create_response_from_buffer_with_free_callback.
- Update to version 0.9.60:
  * gettext updated to 0.19.8
  * can use epoll() without listen socket now
  * in thread-per-connection mode, socket closure is now
    communicated in a timely fashion to the application
  * added MHD_RF_HTTP_VERSION_1_0_RESPONSE option
  * preventing bogus transfer-encoding values
  * Added MHD_OPTION_GNUTLS_PSK_CRED_HANDLER
  * allow digest authentication with hashed password
  * ensure request completed callback is called from correct thread
    and also for upgraded connections</changelog>
  <changelog author="mardnh@gmx.de" date="1549800000">- Update to version 0.9.63:
  * Extended test_get to test URI logging and query string parsing
    to avoid regression fixed in previous patch in the future.
  * Preliminary patch for the raw query string issue, to be tested.
  * Added minimal example for how to compress HTTP response.
  * Check for GNUTLS_E_AGAIN instead of GNUTLS_E_INTERRUPTED when
    giving up on a TLS connection. -LM/CG
  * Fix connection timeout logic if in thread-per-connection mode the
    working thread takes longer than the timeout to queue the response.
  * Add logic to avoid VLA arrays with compilers that do not support them.
  * Fixed missing WSA_FLAG_OVERLAPPED which can cause W32 to block on
    socket races when using threadpool. (See very detailed description
    of the issue in the libmicrohttpd mailinglist post of today.)
  * Added test for RFC 7616 and documented new API.
- Update to version 0.9.62:
  * Added test for RFC 7616 and documented new API.
  * Adding support for RFC 7616, experimental, needs
    testing and documentation still!
  * Add option to build MHD without any threads
    and MHD_FEATURE_THREADS to test for it.
  * Renamed all occurrences from _model(s)_ to _mode(s)_.
  * Optimized the function MHD_create_response_from_callback() for
    Windows by increasing its internal buffer size and allowed to
    customize it via macro MHD_FD_BLOCK_SIZE.
  * Referenced the gnutls_load_file() function in the HTTPs examples.
  * Fix regression causing URLs to be unescaped twice.</changelog>
  <changelog author="mardnh@gmx.de" date="1560168000">- Update to version 0.9.64:
  * Updated HTTP headers, methods and status codes from registries,
  * Added scripts to import new headers, methods and status codes
    from registries.
  * Reodered includes in microhttpd.h
  * Fixed compiler warnings
  * Updated and fixed libcurl tests.
  * Added checks for too long TLS parameters strings.
  * Spelling fixes.
  * Fixed example for non-64bits platforms.
  * Optimized and improved processing speed by using precalculated and
    already calculated lengths of strings.
  * Store connection's keys and values with sizes;
  * Speedup keys search be comparing key length first;
  * Added functions for working with keys and values with binary zeros;
  * Fixed test_postprocessor_amp to fail on problems.
  * Reverted change of MHD_KeyValueIterator, implemented
    MHD_KeyValueIteratorN with sizes for connection's key and value to
    get keys and values with binary zeros.
  * Fixed signed/unsigned comparison in example
    http_chunked_compression.c.
  * Bit manipulations moved to separate header file.
  * Improved shell compatibility for 'bootstrap', removed bash-ism.
  * Adding additional "value_length" argument to MHD_KeyValueIterator
    callback to support binary zeros in values.  This is done in a
    backwards-compatible way, but may require adding a cast to
    existing code to avoid a compiler warning.
  * Added example for how to compress a chunked HTTP response.</changelog>
  <changelog author="mardnh@gmx.de" date="1562414400">- Update to versin 0.9.65:
  * Many fixes and improvements for connection-specific memory pool
  * Better handled connection's memory shortage situations:
    + error response could be sent to client even if all buffer
    space was used;
    + if buffer space become low when receiving, do not allocate
    last buffer space and use small receive blocks instead.
  * Improved sending speed by using all available buffer space for
    sending.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1564747200">- update to 0.9.66:
  * Fix issue with discarding unhandled upload data discovered
  * Fix hanging situation with large transmission over upgraded
    (i.e. Web socket) connection with epoll() and HTTPS enabled
  * Add MHD_OPTION_HTTPS_CERT_CALLBACK2 to allow OCSP stapling
    and MHD_FEATURE_HTTPS_CERT_CALLBACK2 to check for
- clean up build dependency list</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1564747201">- fix build with SLE 12 with older GnuTLS:
  * libmicrohttpd-0.9.66-fix-gnutls-dependency.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1571918400">- update to 0.9.67:
  * improvements that eliminate system and C library calls
- drop libmicrohttpd-0.9.66-fix-gnutls-dependency.patch, upstream
- add libmicrohttpd-0.9.67-fix-nonvoid-return.patch from upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1572955200">- update to 0.9.68:
  * Fix regression where MHD would fail to return an empty response
    when used with HTTPS.
  * Introduce MHD_RF_INSANITY_HEADER_CONTENT_LENGTH
- drop libmicrohttpd-0.9.67-fix-nonvoid-return.patch, in release</changelog>
  <changelog author="mardnh@gmx.de" date="1576411200">- update to 0.9.69:
  * If application suspends a connection before we could send
    100 CONTINUE, give application another shot at queuing a reply
    before the upload begins.</changelog>
  <changelog author="mardnh@gmx.de" date="1581249600">- Update to 0.9.70:
  * Fixed 100-continue handling for PATCH method
  * Fixed FTBFS from wrong #endif position for certain builds
  * Fixed connection overflow issue when combining
    MHD_USE_NO_LISTEN_SOCKET with MHD_USE_THREAD_PER_CONNECTION
  * Updated m4 script to fix FTBFS when using
  - Werror=unused-but-set-parameter
  * Adding fix for urlencoding of keys without values in
    post-processor logic.
  * Adding patch from Ethan Tuttle with test case for urlencoding
    in post-processor for keys without values.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1593864000">- libmicrohttpd 0.9.71:
  * Fix buffer overflow issue in URL parser [boo#1173718]
  * Fixed PostProcessor bug
  * Documentation and example fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609243200">- libmicrohttpd 0.9.72:
  * improved performance with stay-alive HTTP and HTTPS connections
  * bug fixes
- remove deprecated texinfo macros</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1621339200">- libmicrohttpd 0.9.73:
  * new function for vector-backed responses
  * compatibility with autoconf 2.70+
  * Implement ALPN support</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1640001600">- libmicrohttpd 0.9.74:
  * new experimental implementation of WebSockets disabled by default
  * improved compliance with the RFC HTTP specifications
  * new implementation of reply header forming
  * new implementation of request chunked encoding parsing
  * new automatic error replies
  * Keep-alive header is omitted by default for HTTP/1.1 connections.
    Use of header can be enforced by response flag.
  * Chunked encoding is used for HTTP/1.1 non-keep-alive connections
    for responses with unknown size. Previously MHD used "indication
    of the end of the response by closing connection" in such cases,
    however it is not correct for HTTP/1.1 connections as per HTTP
    RFC.
  * As required by HTTP RFC, use HTTP/1.1 version instead of HTTP/1.0
    in reply headers when client is HTTP/1.0 . HTTP/1.0 version can
    be enforced by response flag.
  * User response headers are used in replies in the same order as
    was added by application.
  * Allowed tab characters in response header values.
  * All custom "Connection:" response headers are automatically
    combined into single "Connection:" header.
  * "keep-alive" token silently dropped from custom "Connection:"
    response header. "Keep-alive" cannot be enforced and used
    automatically if possible.
  * Allow tab character in custom response header value.
  * Disallow space character in custom response header value.
  * Do not allow responses with 1xx codes for HTTP/1.0 requests.
  * Detected and reported incorrect "Upgrade" responses.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1640606400">- libmicrohttpd 0.9.75:
  * fixes for where "monotonic" clock may jump back</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1677585600">- libmicrohttpd 0.9.76
  * CVE-2023-27371: Fix potential DoS vector in MHD_PostProcessor
    (boo#1208745)</changelog>
  <changelog author="Andreas.Stieger@gmx.de" date="1685534400">- libmicrohttpd 0.9.77:
  * improvements for Digest and Basic authorizations
  * fix efficiency for TLS upgraded connections
  * fix processing of folded headers in requests
  * fix functionality with blocking sockets
- update upstream signing key</changelog>
  <changelog author="martin.schreiner@suse.com" date="1763726400">- Fix for the following bugs:
  * bsc#1253177 CVE-2025-59777
  * bsc#1253178 CVE-2025-62689
- Add patch:
  * CVE-2025-59777.patch
  * this same patch fixes both CVEs
  * git commit ff13abc1c1d7d2b30d69d5c0bd4a237e1801c50b</changelog>
</package>
<package pkgid="27dd30b25bf3b03e1f9bc835eaad6a2f9c794d95933a0fc0eed9754b2b502a2e" name="libmicrohttpd" arch="src">
  <version epoch="0" ver="0.9.77" rel="150600.3.6.1"/>
  <changelog author="mardnh@gmx.de" date="1519646400">- Update to version 0.9.59:
  * Fix masking operation.
  * Fix deadlock when failing to prepare chunked response
  * Fix __clang_major__ related warnings for non-clang compilers.
  * Fixed tests on platforms with huge number of CPUs.
  * Doxygen configuration was updated.
  * Various doxygen fixes.
- Update to version 0.9.58:
  * Fixed HTTPS tests on modern platforms.
  * Minor documentation installation fixes.
  * Tolerate AF_UNIX when trying to determine our binding port
    from socket.  Use `sockaddr_storage` instead of trying to
    guess the sockaddr type before calling getsockname().</changelog>
  <changelog author="malte.kraus@suse.com" date="1544184000">- Update to version 0.9.61:
  * parse arguments with (properly) escaped URLs correctly. Replace
    sprintf with snprintf in testcases.
  * Fix build issue with GnuTLS &lt; 3.0.
  * Add MHD_create_response_from_buffer_with_free_callback.
- Update to version 0.9.60:
  * gettext updated to 0.19.8
  * can use epoll() without listen socket now
  * in thread-per-connection mode, socket closure is now
    communicated in a timely fashion to the application
  * added MHD_RF_HTTP_VERSION_1_0_RESPONSE option
  * preventing bogus transfer-encoding values
  * Added MHD_OPTION_GNUTLS_PSK_CRED_HANDLER
  * allow digest authentication with hashed password
  * ensure request completed callback is called from correct thread
    and also for upgraded connections</changelog>
  <changelog author="mardnh@gmx.de" date="1549800000">- Update to version 0.9.63:
  * Extended test_get to test URI logging and query string parsing
    to avoid regression fixed in previous patch in the future.
  * Preliminary patch for the raw query string issue, to be tested.
  * Added minimal example for how to compress HTTP response.
  * Check for GNUTLS_E_AGAIN instead of GNUTLS_E_INTERRUPTED when
    giving up on a TLS connection. -LM/CG
  * Fix connection timeout logic if in thread-per-connection mode the
    working thread takes longer than the timeout to queue the response.
  * Add logic to avoid VLA arrays with compilers that do not support them.
  * Fixed missing WSA_FLAG_OVERLAPPED which can cause W32 to block on
    socket races when using threadpool. (See very detailed description
    of the issue in the libmicrohttpd mailinglist post of today.)
  * Added test for RFC 7616 and documented new API.
- Update to version 0.9.62:
  * Added test for RFC 7616 and documented new API.
  * Adding support for RFC 7616, experimental, needs
    testing and documentation still!
  * Add option to build MHD without any threads
    and MHD_FEATURE_THREADS to test for it.
  * Renamed all occurrences from _model(s)_ to _mode(s)_.
  * Optimized the function MHD_create_response_from_callback() for
    Windows by increasing its internal buffer size and allowed to
    customize it via macro MHD_FD_BLOCK_SIZE.
  * Referenced the gnutls_load_file() function in the HTTPs examples.
  * Fix regression causing URLs to be unescaped twice.</changelog>
  <changelog author="mardnh@gmx.de" date="1560168000">- Update to version 0.9.64:
  * Updated HTTP headers, methods and status codes from registries,
  * Added scripts to import new headers, methods and status codes
    from registries.
  * Reodered includes in microhttpd.h
  * Fixed compiler warnings
  * Updated and fixed libcurl tests.
  * Added checks for too long TLS parameters strings.
  * Spelling fixes.
  * Fixed example for non-64bits platforms.
  * Optimized and improved processing speed by using precalculated and
    already calculated lengths of strings.
  * Store connection's keys and values with sizes;
  * Speedup keys search be comparing key length first;
  * Added functions for working with keys and values with binary zeros;
  * Fixed test_postprocessor_amp to fail on problems.
  * Reverted change of MHD_KeyValueIterator, implemented
    MHD_KeyValueIteratorN with sizes for connection's key and value to
    get keys and values with binary zeros.
  * Fixed signed/unsigned comparison in example
    http_chunked_compression.c.
  * Bit manipulations moved to separate header file.
  * Improved shell compatibility for 'bootstrap', removed bash-ism.
  * Adding additional "value_length" argument to MHD_KeyValueIterator
    callback to support binary zeros in values.  This is done in a
    backwards-compatible way, but may require adding a cast to
    existing code to avoid a compiler warning.
  * Added example for how to compress a chunked HTTP response.</changelog>
  <changelog author="mardnh@gmx.de" date="1562414400">- Update to versin 0.9.65:
  * Many fixes and improvements for connection-specific memory pool
  * Better handled connection's memory shortage situations:
    + error response could be sent to client even if all buffer
    space was used;
    + if buffer space become low when receiving, do not allocate
    last buffer space and use small receive blocks instead.
  * Improved sending speed by using all available buffer space for
    sending.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1564747200">- update to 0.9.66:
  * Fix issue with discarding unhandled upload data discovered
  * Fix hanging situation with large transmission over upgraded
    (i.e. Web socket) connection with epoll() and HTTPS enabled
  * Add MHD_OPTION_HTTPS_CERT_CALLBACK2 to allow OCSP stapling
    and MHD_FEATURE_HTTPS_CERT_CALLBACK2 to check for
- clean up build dependency list</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1564747201">- fix build with SLE 12 with older GnuTLS:
  * libmicrohttpd-0.9.66-fix-gnutls-dependency.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1571918400">- update to 0.9.67:
  * improvements that eliminate system and C library calls
- drop libmicrohttpd-0.9.66-fix-gnutls-dependency.patch, upstream
- add libmicrohttpd-0.9.67-fix-nonvoid-return.patch from upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1572955200">- update to 0.9.68:
  * Fix regression where MHD would fail to return an empty response
    when used with HTTPS.
  * Introduce MHD_RF_INSANITY_HEADER_CONTENT_LENGTH
- drop libmicrohttpd-0.9.67-fix-nonvoid-return.patch, in release</changelog>
  <changelog author="mardnh@gmx.de" date="1576411200">- update to 0.9.69:
  * If application suspends a connection before we could send
    100 CONTINUE, give application another shot at queuing a reply
    before the upload begins.</changelog>
  <changelog author="mardnh@gmx.de" date="1581249600">- Update to 0.9.70:
  * Fixed 100-continue handling for PATCH method
  * Fixed FTBFS from wrong #endif position for certain builds
  * Fixed connection overflow issue when combining
    MHD_USE_NO_LISTEN_SOCKET with MHD_USE_THREAD_PER_CONNECTION
  * Updated m4 script to fix FTBFS when using
  - Werror=unused-but-set-parameter
  * Adding fix for urlencoding of keys without values in
    post-processor logic.
  * Adding patch from Ethan Tuttle with test case for urlencoding
    in post-processor for keys without values.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1593864000">- libmicrohttpd 0.9.71:
  * Fix buffer overflow issue in URL parser [boo#1173718]
  * Fixed PostProcessor bug
  * Documentation and example fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609243200">- libmicrohttpd 0.9.72:
  * improved performance with stay-alive HTTP and HTTPS connections
  * bug fixes
- remove deprecated texinfo macros</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1621339200">- libmicrohttpd 0.9.73:
  * new function for vector-backed responses
  * compatibility with autoconf 2.70+
  * Implement ALPN support</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1640001600">- libmicrohttpd 0.9.74:
  * new experimental implementation of WebSockets disabled by default
  * improved compliance with the RFC HTTP specifications
  * new implementation of reply header forming
  * new implementation of request chunked encoding parsing
  * new automatic error replies
  * Keep-alive header is omitted by default for HTTP/1.1 connections.
    Use of header can be enforced by response flag.
  * Chunked encoding is used for HTTP/1.1 non-keep-alive connections
    for responses with unknown size. Previously MHD used "indication
    of the end of the response by closing connection" in such cases,
    however it is not correct for HTTP/1.1 connections as per HTTP
    RFC.
  * As required by HTTP RFC, use HTTP/1.1 version instead of HTTP/1.0
    in reply headers when client is HTTP/1.0 . HTTP/1.0 version can
    be enforced by response flag.
  * User response headers are used in replies in the same order as
    was added by application.
  * Allowed tab characters in response header values.
  * All custom "Connection:" response headers are automatically
    combined into single "Connection:" header.
  * "keep-alive" token silently dropped from custom "Connection:"
    response header. "Keep-alive" cannot be enforced and used
    automatically if possible.
  * Allow tab character in custom response header value.
  * Disallow space character in custom response header value.
  * Do not allow responses with 1xx codes for HTTP/1.0 requests.
  * Detected and reported incorrect "Upgrade" responses.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1640606400">- libmicrohttpd 0.9.75:
  * fixes for where "monotonic" clock may jump back</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1677585600">- libmicrohttpd 0.9.76
  * CVE-2023-27371: Fix potential DoS vector in MHD_PostProcessor
    (boo#1208745)</changelog>
  <changelog author="Andreas.Stieger@gmx.de" date="1685534400">- libmicrohttpd 0.9.77:
  * improvements for Digest and Basic authorizations
  * fix efficiency for TLS upgraded connections
  * fix processing of folded headers in requests
  * fix functionality with blocking sockets
- update upstream signing key</changelog>
  <changelog author="martin.schreiner@suse.com" date="1763726400">- Fix for the following bugs:
  * bsc#1253177 CVE-2025-59777
  * bsc#1253178 CVE-2025-62689
- Add patch:
  * CVE-2025-59777.patch
  * this same patch fixes both CVEs
  * git commit ff13abc1c1d7d2b30d69d5c0bd4a237e1801c50b</changelog>
  <changelog author="martin.schreiner@suse.com" date="1766318400">- Fix bsc#1254301.
- Add patch:
  * fix-test-tricky-url.patch</changelog>
</package>
<package pkgid="a27a7f2dd992a00abd614dfb2037c4daadcff1db8a0b798f25263c3ca4527ed9" name="libmicrohttpd12" arch="x86_64">
  <version epoch="0" ver="0.9.77" rel="150600.3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1512129600">- Install copying</changelog>
  <changelog author="mardnh@gmx.de" date="1519646400">- Update to version 0.9.59:
  * Fix masking operation.
  * Fix deadlock when failing to prepare chunked response
  * Fix __clang_major__ related warnings for non-clang compilers.
  * Fixed tests on platforms with huge number of CPUs.
  * Doxygen configuration was updated.
  * Various doxygen fixes.
- Update to version 0.9.58:
  * Fixed HTTPS tests on modern platforms.
  * Minor documentation installation fixes.
  * Tolerate AF_UNIX when trying to determine our binding port
    from socket.  Use `sockaddr_storage` instead of trying to
    guess the sockaddr type before calling getsockname().</changelog>
  <changelog author="malte.kraus@suse.com" date="1544184000">- Update to version 0.9.61:
  * parse arguments with (properly) escaped URLs correctly. Replace
    sprintf with snprintf in testcases.
  * Fix build issue with GnuTLS &lt; 3.0.
  * Add MHD_create_response_from_buffer_with_free_callback.
- Update to version 0.9.60:
  * gettext updated to 0.19.8
  * can use epoll() without listen socket now
  * in thread-per-connection mode, socket closure is now
    communicated in a timely fashion to the application
  * added MHD_RF_HTTP_VERSION_1_0_RESPONSE option
  * preventing bogus transfer-encoding values
  * Added MHD_OPTION_GNUTLS_PSK_CRED_HANDLER
  * allow digest authentication with hashed password
  * ensure request completed callback is called from correct thread
    and also for upgraded connections</changelog>
  <changelog author="mardnh@gmx.de" date="1549800000">- Update to version 0.9.63:
  * Extended test_get to test URI logging and query string parsing
    to avoid regression fixed in previous patch in the future.
  * Preliminary patch for the raw query string issue, to be tested.
  * Added minimal example for how to compress HTTP response.
  * Check for GNUTLS_E_AGAIN instead of GNUTLS_E_INTERRUPTED when
    giving up on a TLS connection. -LM/CG
  * Fix connection timeout logic if in thread-per-connection mode the
    working thread takes longer than the timeout to queue the response.
  * Add logic to avoid VLA arrays with compilers that do not support them.
  * Fixed missing WSA_FLAG_OVERLAPPED which can cause W32 to block on
    socket races when using threadpool. (See very detailed description
    of the issue in the libmicrohttpd mailinglist post of today.)
  * Added test for RFC 7616 and documented new API.
- Update to version 0.9.62:
  * Added test for RFC 7616 and documented new API.
  * Adding support for RFC 7616, experimental, needs
    testing and documentation still!
  * Add option to build MHD without any threads
    and MHD_FEATURE_THREADS to test for it.
  * Renamed all occurrences from _model(s)_ to _mode(s)_.
  * Optimized the function MHD_create_response_from_callback() for
    Windows by increasing its internal buffer size and allowed to
    customize it via macro MHD_FD_BLOCK_SIZE.
  * Referenced the gnutls_load_file() function in the HTTPs examples.
  * Fix regression causing URLs to be unescaped twice.</changelog>
  <changelog author="mardnh@gmx.de" date="1560168000">- Update to version 0.9.64:
  * Updated HTTP headers, methods and status codes from registries,
  * Added scripts to import new headers, methods and status codes
    from registries.
  * Reodered includes in microhttpd.h
  * Fixed compiler warnings
  * Updated and fixed libcurl tests.
  * Added checks for too long TLS parameters strings.
  * Spelling fixes.
  * Fixed example for non-64bits platforms.
  * Optimized and improved processing speed by using precalculated and
    already calculated lengths of strings.
  * Store connection's keys and values with sizes;
  * Speedup keys search be comparing key length first;
  * Added functions for working with keys and values with binary zeros;
  * Fixed test_postprocessor_amp to fail on problems.
  * Reverted change of MHD_KeyValueIterator, implemented
    MHD_KeyValueIteratorN with sizes for connection's key and value to
    get keys and values with binary zeros.
  * Fixed signed/unsigned comparison in example
    http_chunked_compression.c.
  * Bit manipulations moved to separate header file.
  * Improved shell compatibility for 'bootstrap', removed bash-ism.
  * Adding additional "value_length" argument to MHD_KeyValueIterator
    callback to support binary zeros in values.  This is done in a
    backwards-compatible way, but may require adding a cast to
    existing code to avoid a compiler warning.
  * Added example for how to compress a chunked HTTP response.</changelog>
  <changelog author="mardnh@gmx.de" date="1562414400">- Update to versin 0.9.65:
  * Many fixes and improvements for connection-specific memory pool
  * Better handled connection's memory shortage situations:
    + error response could be sent to client even if all buffer
    space was used;
    + if buffer space become low when receiving, do not allocate
    last buffer space and use small receive blocks instead.
  * Improved sending speed by using all available buffer space for
    sending.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1564747200">- update to 0.9.66:
  * Fix issue with discarding unhandled upload data discovered
  * Fix hanging situation with large transmission over upgraded
    (i.e. Web socket) connection with epoll() and HTTPS enabled
  * Add MHD_OPTION_HTTPS_CERT_CALLBACK2 to allow OCSP stapling
    and MHD_FEATURE_HTTPS_CERT_CALLBACK2 to check for
- clean up build dependency list</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1564747201">- fix build with SLE 12 with older GnuTLS:
  * libmicrohttpd-0.9.66-fix-gnutls-dependency.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1571918400">- update to 0.9.67:
  * improvements that eliminate system and C library calls
- drop libmicrohttpd-0.9.66-fix-gnutls-dependency.patch, upstream
- add libmicrohttpd-0.9.67-fix-nonvoid-return.patch from upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1572955200">- update to 0.9.68:
  * Fix regression where MHD would fail to return an empty response
    when used with HTTPS.
  * Introduce MHD_RF_INSANITY_HEADER_CONTENT_LENGTH
- drop libmicrohttpd-0.9.67-fix-nonvoid-return.patch, in release</changelog>
  <changelog author="mardnh@gmx.de" date="1576411200">- update to 0.9.69:
  * If application suspends a connection before we could send
    100 CONTINUE, give application another shot at queuing a reply
    before the upload begins.</changelog>
  <changelog author="mardnh@gmx.de" date="1581249600">- Update to 0.9.70:
  * Fixed 100-continue handling for PATCH method
  * Fixed FTBFS from wrong #endif position for certain builds
  * Fixed connection overflow issue when combining
    MHD_USE_NO_LISTEN_SOCKET with MHD_USE_THREAD_PER_CONNECTION
  * Updated m4 script to fix FTBFS when using
  - Werror=unused-but-set-parameter
  * Adding fix for urlencoding of keys without values in
    post-processor logic.
  * Adding patch from Ethan Tuttle with test case for urlencoding
    in post-processor for keys without values.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1593864000">- libmicrohttpd 0.9.71:
  * Fix buffer overflow issue in URL parser [boo#1173718]
  * Fixed PostProcessor bug
  * Documentation and example fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609243200">- libmicrohttpd 0.9.72:
  * improved performance with stay-alive HTTP and HTTPS connections
  * bug fixes
- remove deprecated texinfo macros</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1621339200">- libmicrohttpd 0.9.73:
  * new function for vector-backed responses
  * compatibility with autoconf 2.70+
  * Implement ALPN support</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1640001600">- libmicrohttpd 0.9.74:
  * new experimental implementation of WebSockets disabled by default
  * improved compliance with the RFC HTTP specifications
  * new implementation of reply header forming
  * new implementation of request chunked encoding parsing
  * new automatic error replies
  * Keep-alive header is omitted by default for HTTP/1.1 connections.
    Use of header can be enforced by response flag.
  * Chunked encoding is used for HTTP/1.1 non-keep-alive connections
    for responses with unknown size. Previously MHD used "indication
    of the end of the response by closing connection" in such cases,
    however it is not correct for HTTP/1.1 connections as per HTTP
    RFC.
  * As required by HTTP RFC, use HTTP/1.1 version instead of HTTP/1.0
    in reply headers when client is HTTP/1.0 . HTTP/1.0 version can
    be enforced by response flag.
  * User response headers are used in replies in the same order as
    was added by application.
  * Allowed tab characters in response header values.
  * All custom "Connection:" response headers are automatically
    combined into single "Connection:" header.
  * "keep-alive" token silently dropped from custom "Connection:"
    response header. "Keep-alive" cannot be enforced and used
    automatically if possible.
  * Allow tab character in custom response header value.
  * Disallow space character in custom response header value.
  * Do not allow responses with 1xx codes for HTTP/1.0 requests.
  * Detected and reported incorrect "Upgrade" responses.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1640606400">- libmicrohttpd 0.9.75:
  * fixes for where "monotonic" clock may jump back</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1677585600">- libmicrohttpd 0.9.76
  * CVE-2023-27371: Fix potential DoS vector in MHD_PostProcessor
    (boo#1208745)</changelog>
  <changelog author="Andreas.Stieger@gmx.de" date="1685534400">- libmicrohttpd 0.9.77:
  * improvements for Digest and Basic authorizations
  * fix efficiency for TLS upgraded connections
  * fix processing of folded headers in requests
  * fix functionality with blocking sockets
- update upstream signing key</changelog>
  <changelog author="martin.schreiner@suse.com" date="1763726400">- Fix for the following bugs:
  * bsc#1253177 CVE-2025-59777
  * bsc#1253178 CVE-2025-62689
- Add patch:
  * CVE-2025-59777.patch
  * this same patch fixes both CVEs
  * git commit ff13abc1c1d7d2b30d69d5c0bd4a237e1801c50b</changelog>
</package>
<package pkgid="70da160d81974798c98cb50ac87b342c241b8f2328ff014dc2c0d01cc6aa4b3c" name="libmicrohttpd12" arch="x86_64">
  <version epoch="0" ver="0.9.77" rel="150600.3.6.1"/>
  <changelog author="mardnh@gmx.de" date="1519646400">- Update to version 0.9.59:
  * Fix masking operation.
  * Fix deadlock when failing to prepare chunked response
  * Fix __clang_major__ related warnings for non-clang compilers.
  * Fixed tests on platforms with huge number of CPUs.
  * Doxygen configuration was updated.
  * Various doxygen fixes.
- Update to version 0.9.58:
  * Fixed HTTPS tests on modern platforms.
  * Minor documentation installation fixes.
  * Tolerate AF_UNIX when trying to determine our binding port
    from socket.  Use `sockaddr_storage` instead of trying to
    guess the sockaddr type before calling getsockname().</changelog>
  <changelog author="malte.kraus@suse.com" date="1544184000">- Update to version 0.9.61:
  * parse arguments with (properly) escaped URLs correctly. Replace
    sprintf with snprintf in testcases.
  * Fix build issue with GnuTLS &lt; 3.0.
  * Add MHD_create_response_from_buffer_with_free_callback.
- Update to version 0.9.60:
  * gettext updated to 0.19.8
  * can use epoll() without listen socket now
  * in thread-per-connection mode, socket closure is now
    communicated in a timely fashion to the application
  * added MHD_RF_HTTP_VERSION_1_0_RESPONSE option
  * preventing bogus transfer-encoding values
  * Added MHD_OPTION_GNUTLS_PSK_CRED_HANDLER
  * allow digest authentication with hashed password
  * ensure request completed callback is called from correct thread
    and also for upgraded connections</changelog>
  <changelog author="mardnh@gmx.de" date="1549800000">- Update to version 0.9.63:
  * Extended test_get to test URI logging and query string parsing
    to avoid regression fixed in previous patch in the future.
  * Preliminary patch for the raw query string issue, to be tested.
  * Added minimal example for how to compress HTTP response.
  * Check for GNUTLS_E_AGAIN instead of GNUTLS_E_INTERRUPTED when
    giving up on a TLS connection. -LM/CG
  * Fix connection timeout logic if in thread-per-connection mode the
    working thread takes longer than the timeout to queue the response.
  * Add logic to avoid VLA arrays with compilers that do not support them.
  * Fixed missing WSA_FLAG_OVERLAPPED which can cause W32 to block on
    socket races when using threadpool. (See very detailed description
    of the issue in the libmicrohttpd mailinglist post of today.)
  * Added test for RFC 7616 and documented new API.
- Update to version 0.9.62:
  * Added test for RFC 7616 and documented new API.
  * Adding support for RFC 7616, experimental, needs
    testing and documentation still!
  * Add option to build MHD without any threads
    and MHD_FEATURE_THREADS to test for it.
  * Renamed all occurrences from _model(s)_ to _mode(s)_.
  * Optimized the function MHD_create_response_from_callback() for
    Windows by increasing its internal buffer size and allowed to
    customize it via macro MHD_FD_BLOCK_SIZE.
  * Referenced the gnutls_load_file() function in the HTTPs examples.
  * Fix regression causing URLs to be unescaped twice.</changelog>
  <changelog author="mardnh@gmx.de" date="1560168000">- Update to version 0.9.64:
  * Updated HTTP headers, methods and status codes from registries,
  * Added scripts to import new headers, methods and status codes
    from registries.
  * Reodered includes in microhttpd.h
  * Fixed compiler warnings
  * Updated and fixed libcurl tests.
  * Added checks for too long TLS parameters strings.
  * Spelling fixes.
  * Fixed example for non-64bits platforms.
  * Optimized and improved processing speed by using precalculated and
    already calculated lengths of strings.
  * Store connection's keys and values with sizes;
  * Speedup keys search be comparing key length first;
  * Added functions for working with keys and values with binary zeros;
  * Fixed test_postprocessor_amp to fail on problems.
  * Reverted change of MHD_KeyValueIterator, implemented
    MHD_KeyValueIteratorN with sizes for connection's key and value to
    get keys and values with binary zeros.
  * Fixed signed/unsigned comparison in example
    http_chunked_compression.c.
  * Bit manipulations moved to separate header file.
  * Improved shell compatibility for 'bootstrap', removed bash-ism.
  * Adding additional "value_length" argument to MHD_KeyValueIterator
    callback to support binary zeros in values.  This is done in a
    backwards-compatible way, but may require adding a cast to
    existing code to avoid a compiler warning.
  * Added example for how to compress a chunked HTTP response.</changelog>
  <changelog author="mardnh@gmx.de" date="1562414400">- Update to versin 0.9.65:
  * Many fixes and improvements for connection-specific memory pool
  * Better handled connection's memory shortage situations:
    + error response could be sent to client even if all buffer
    space was used;
    + if buffer space become low when receiving, do not allocate
    last buffer space and use small receive blocks instead.
  * Improved sending speed by using all available buffer space for
    sending.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1564747200">- update to 0.9.66:
  * Fix issue with discarding unhandled upload data discovered
  * Fix hanging situation with large transmission over upgraded
    (i.e. Web socket) connection with epoll() and HTTPS enabled
  * Add MHD_OPTION_HTTPS_CERT_CALLBACK2 to allow OCSP stapling
    and MHD_FEATURE_HTTPS_CERT_CALLBACK2 to check for
- clean up build dependency list</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1564747201">- fix build with SLE 12 with older GnuTLS:
  * libmicrohttpd-0.9.66-fix-gnutls-dependency.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1571918400">- update to 0.9.67:
  * improvements that eliminate system and C library calls
- drop libmicrohttpd-0.9.66-fix-gnutls-dependency.patch, upstream
- add libmicrohttpd-0.9.67-fix-nonvoid-return.patch from upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1572955200">- update to 0.9.68:
  * Fix regression where MHD would fail to return an empty response
    when used with HTTPS.
  * Introduce MHD_RF_INSANITY_HEADER_CONTENT_LENGTH
- drop libmicrohttpd-0.9.67-fix-nonvoid-return.patch, in release</changelog>
  <changelog author="mardnh@gmx.de" date="1576411200">- update to 0.9.69:
  * If application suspends a connection before we could send
    100 CONTINUE, give application another shot at queuing a reply
    before the upload begins.</changelog>
  <changelog author="mardnh@gmx.de" date="1581249600">- Update to 0.9.70:
  * Fixed 100-continue handling for PATCH method
  * Fixed FTBFS from wrong #endif position for certain builds
  * Fixed connection overflow issue when combining
    MHD_USE_NO_LISTEN_SOCKET with MHD_USE_THREAD_PER_CONNECTION
  * Updated m4 script to fix FTBFS when using
  - Werror=unused-but-set-parameter
  * Adding fix for urlencoding of keys without values in
    post-processor logic.
  * Adding patch from Ethan Tuttle with test case for urlencoding
    in post-processor for keys without values.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1593864000">- libmicrohttpd 0.9.71:
  * Fix buffer overflow issue in URL parser [boo#1173718]
  * Fixed PostProcessor bug
  * Documentation and example fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609243200">- libmicrohttpd 0.9.72:
  * improved performance with stay-alive HTTP and HTTPS connections
  * bug fixes
- remove deprecated texinfo macros</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1621339200">- libmicrohttpd 0.9.73:
  * new function for vector-backed responses
  * compatibility with autoconf 2.70+
  * Implement ALPN support</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1640001600">- libmicrohttpd 0.9.74:
  * new experimental implementation of WebSockets disabled by default
  * improved compliance with the RFC HTTP specifications
  * new implementation of reply header forming
  * new implementation of request chunked encoding parsing
  * new automatic error replies
  * Keep-alive header is omitted by default for HTTP/1.1 connections.
    Use of header can be enforced by response flag.
  * Chunked encoding is used for HTTP/1.1 non-keep-alive connections
    for responses with unknown size. Previously MHD used "indication
    of the end of the response by closing connection" in such cases,
    however it is not correct for HTTP/1.1 connections as per HTTP
    RFC.
  * As required by HTTP RFC, use HTTP/1.1 version instead of HTTP/1.0
    in reply headers when client is HTTP/1.0 . HTTP/1.0 version can
    be enforced by response flag.
  * User response headers are used in replies in the same order as
    was added by application.
  * Allowed tab characters in response header values.
  * All custom "Connection:" response headers are automatically
    combined into single "Connection:" header.
  * "keep-alive" token silently dropped from custom "Connection:"
    response header. "Keep-alive" cannot be enforced and used
    automatically if possible.
  * Allow tab character in custom response header value.
  * Disallow space character in custom response header value.
  * Do not allow responses with 1xx codes for HTTP/1.0 requests.
  * Detected and reported incorrect "Upgrade" responses.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1640606400">- libmicrohttpd 0.9.75:
  * fixes for where "monotonic" clock may jump back</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1677585600">- libmicrohttpd 0.9.76
  * CVE-2023-27371: Fix potential DoS vector in MHD_PostProcessor
    (boo#1208745)</changelog>
  <changelog author="Andreas.Stieger@gmx.de" date="1685534400">- libmicrohttpd 0.9.77:
  * improvements for Digest and Basic authorizations
  * fix efficiency for TLS upgraded connections
  * fix processing of folded headers in requests
  * fix functionality with blocking sockets
- update upstream signing key</changelog>
  <changelog author="martin.schreiner@suse.com" date="1763726400">- Fix for the following bugs:
  * bsc#1253177 CVE-2025-59777
  * bsc#1253178 CVE-2025-62689
- Add patch:
  * CVE-2025-59777.patch
  * this same patch fixes both CVEs
  * git commit ff13abc1c1d7d2b30d69d5c0bd4a237e1801c50b</changelog>
  <changelog author="martin.schreiner@suse.com" date="1766318400">- Fix bsc#1254301.
- Add patch:
  * fix-test-tricky-url.patch</changelog>
</package>
<package pkgid="d582ad898ff3a844194d68b818d5773bce383db2c79fb5238c6b1243053ad634" name="libminizip1" arch="x86_64">
  <version epoch="0" ver="1.2.13" rel="150500.4.6.1"/>
  <changelog author="tchvatal@suse.com" date="1563364800">- Update the s390 patchset bsc#1137624:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1571659200">- Add SUSE specific patch to fix bsc#1138793, we simply don't want
  to test if the app was linked with exactly same version of zlib
  like the one that is present on the runtime:
  * zlib-no-version-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1572350400">- Update the zlib-no-version-check.patch to be even more forgiving
  with the versions on the zlib to allow updates without rebuilds</changelog>
  <changelog author="tchvatal@suse.com" date="1587643200">- Update 410.patch to contain latest fixes from IBM bsc#1166260
  * The build behaviour changed</changelog>
  <changelog author="lidong.zhong@suse.com" date="1596715200">- Permit a deflateParams() parameter change as soon as possible(bsc#1174736)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  Fix DFLTCC not flushing EOBS when creating raw streams(bsc#1174551)
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1598529600">- Set -DDFLTCC_LEVEL_MASK=0x7e on s390/s390x jsc#13776</changelog>
  <changelog author="tchvatal@suse.com" date="1598616000">- Add patch to fix compression level switching
  bsc#1175811 bsc#1175830 bsc#1175831
  * zlib-compression-switching.patch</changelog>
  <changelog author="coolo@suse.com" date="1600257600">- Provide a testsuite subpackage to run post-build validation</changelog>
  <changelog author="lnussel@suse.de" date="1603886400">- install to /usr (boo#1029961)</changelog>
  <changelog author="ali.abdallah@suse.com" date="1604923200">- Fix hw compression on z15 bsc#1176201
- Add zlib-s390x-z15-fix-hw-compression.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1647000000">- Don't install (internal) crypt.h header in minizip
  * minizip-dont-install-crypt-header.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1648209600">- Fix memory corruption on deflate, bsc#1197459
  * bsc1197459.patch - CVE-2018-25032
- Update 410.patch
  * Remove included patches:
    bsc1174551-fxi-imcomplete-raw-streams.patch
    zlib-compression-switching.patch
    zlib-s390x-z15-fix-hw-compression.patch
- Refresh bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch</changelog>
  <changelog author="meissner@suse.com" date="1656763200">- switch to https urls</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661256000">- Update to 1.2.12:
  * A lot of bug fixes
  * Improve speed of crc32 functions
  * Use ARM crc32 instructions if the ARM architecture has them
  For the complete changes, see ChangeLog
- Fixes CVE-2022-37434,  heap-based buffer over-read or buffer overflow in
  inflate.c via a large gzip header extra field
  (CVE-2022-37434, bsc#1202175)
- Added patches:
  * zlib-1.2.11-covscan-issues-rhel9.patch
  * zlib-1.2.11-covscan-issues.patch
  * zlib-1.2.12-s390-vectorize-crc32.patch
  * zlib-1.2.12-optimized-crc32-power8.patch
  * zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.12-fix-configure.patch
  * zlib-1.2.12-correct-inputs-provided-to-crc-func.patch
  * zlib-1.2.12-fix-CVE-2022-37434.patch
  * zlib-1.2.5-minizip-fixuncrypt.patch
- Removed patches:
  * bsc1197459.patch (upstreamed)
  * zlib-power8-fate325307.patch
    (replaced by zlib-1.2.12-optimized-crc32-power8.patch)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
    (replaced by zlib-1.2.12-IBM-Z-hw-accelrated-deflate-s390x.patch)
  * 410.patch
    (replaced by zlib-1.2.12-IBM-Z-hw-accelrated-deflate-s390x.patch)
- Refreshed patches:
  * zlib-format.patch
  * zlib-no-version-check.patch
- Disable profiling since it breaks tests
- Update zlib-rpmlintrc</changelog>
  <changelog author="danilo.spinella@suse.com" date="1665403200">- Add Power8 optimizations:
  * zlib-1.2.12-add-optimized-slide_hash-for-power.patch
  * zlib-1.2.12-add-vectorized-longest_match-for-power.patch
  * zlib-1.2.12-adler32-vector-optimizations-for-power.patch
  * zlib-1.2.12-fix-invalid-memory-access-on-ppc-and-ppc64.patch
- Update zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch</changelog>
  <changelog author="dmueller@suse.com" date="1670760000">- build zlib with optflags again</changelog>
  <changelog author="danilo.spinella@suse.com" date="1674129600">- Update to 1.13:
  * Fix configure issue that discarded provided CC definition
  * Correct incorrect inputs provided to the CRC functions
  * Repair prototypes and exporting of new CRC functions
  * Fix inflateBack to detect invalid input with distances too far
  * Have infback() deliver all of the available output up to any error
  * Fix a bug when getting a gzip header extra field with inflate()
  * Fix bug in block type selection when Z_FIXED used
  * Tighten deflateBound bounds
  * Remove deleted assembler code references
  * Various portability and appearance improvements
- Added patches:
  * zlib-1.2.13-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.13-fix-bug-deflateBound.patch
  * zlib-1.2.13-optimized-s390.patch
- Refreshed patches:
  * zlib-1.2.12-add-optimized-slide_hash-for-power.patch
  * zlib-1.2.12-add-vectorized-longest_match-for-power.patch
  * zlib-1.2.12-s390-vectorize-crc32.patch
- Removed patches:
  * zlib-1.2.12-fix-configure.patch
  * zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.12-optimized-crc32-power8.patch
  * zlib-1.2.12-correct-inputs-provided-to-crc-func.patch
  * zlib-1.2.12-fix-CVE-2022-37434.patch
  * zlib-1.2.11-optimized-s390.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1683201600">- Fix deflateBound() before deflateInit(), bsc#1210593, bsc#1211005
  bsc1210593.patch</changelog>
  <changelog author="oss@danyspin97.org" date="1697716800">- Fix CVE-2023-45853, integer overflow and resultant heap-based buffer
  overflow in zipOpenNewFileInZip4_6, bsc#1216378
  * CVE-2023-45853.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1771416000">- Fix CVE-2026-27171, infinite loop via the crc32_combine64 and
  crc32_combine_gen64 functions due to missing checks for negative
  lengths (bsc#1258392)
  * CVE-2026-27171.patch</changelog>
</package>
<package pkgid="1e1347f2cf8655244d4c46fb93630a47984a2c99f1f4fa0645f3f4e449eae00a" name="libmlx4-1" arch="x86_64">
  <version epoch="0" ver="54.0" rel="150700.3.2.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="schwab@suse.de" date="1647518400">- util-Add-barriers-support-for-RISC-V.patch: Backport from upstream: Add
  barriers support for RISC-V</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1648555200">- Update to v39.1
  - Major fixes for hns provider
  - Bug fixes for all providers
  - systemd hardening
  - NDR rate support
- Dropped srp_daemon-Detect-proper-path-to-systemctl.patch
  as it was fixed upstream</changelog>
  <changelog author="dmueller@suse.com" date="1659960000">- skip valgrind on riscv64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1663070400">- Update to v42.0
  - Fixes for all providers
- Dropped patches merged upstream:
  - util-Add-barriers-support-for-RISC-V.patch
  - cmake-Make-modprobe.d-path-configurable.patch
- Update gen-pandoc.sh to support python3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1665662400">- Add rdma-ndd-disable-systemd-ProtectHostName-feature.patch to fix issue
  where rdma-ndd would not be aware of dynamic hostnames retrived through DHCP</changelog>
  <changelog author="nicolas.morey@suse.com" date="1681905600">- Update to v45.0
  - Fixes for all providers
  - Support for Microsoft Azure Network Adapter
- Drop rdma-ndd-disable-systemd-ProtectHostName-feature.patch
  as it was fixed upstream.
- Refresh against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-Update-kernel-headers.patch</changelog>
  <changelog author="nicolas.morey@suse.com" date="1690200000">- Update to v47.0
  - Fixes for all providers</changelog>
  <changelog author="nicolas.morey@suse.com" date="1691064000">- Drop patches adding support for cxgb3 (EOL, removed from kernel 5.5)
  - cxgb3-fix-declaration-of-free_context.patch
  - cxgb3-fix-support-for-new-uquery-API.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-Update-kernel-headers.patch
- Update baselibs=.conf accordingly</changelog>
  <changelog author="jengelh@inai.de" date="1692792000">- Add missing-quoting.patch
- Use normal GNU tar option syntax
- Remove old RPM spec logic (%defattr)</changelog>
  <changelog author="nicolas.morey@suse.com" date="1695384000">- Update to v48.0
  - No release notes available.
- Drop missing-quoting.patch which was fixed upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1700913600">- Update to v49.0 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1705924800">- Update to v49.1 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1707912000">- Add kernel-boot-do-not-load-module-unsupported-on-s390.patch
  to prevent autoload of module not supported on s390. (bsc#1219805)</changelog>
  <changelog author="nicolas.morey@suse.com" date="1719316800">- Update to rdma-core v52.0
  - No release notes available
- Add upstream patch Added-suffix-libdrm-to-CMakeLists.txt-for-drm.patch
  to fix libdrm detection.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1723464000">- Update to rdma-core v53.0
  - No release notes available
- Remove Added-suffix-libdrm-to-CMakeLists.txt-for-drm.patch
  as it was merged upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1728561600">- Update to rdma-core v54.0
  - No release notes available</changelog>
</package>
<package pkgid="b572948bec34da25376b040fc63f5bc5a097d6e8e6e14fbc8dac9be9b3d4aa11" name="libmlx5-1" arch="x86_64">
  <version epoch="0" ver="54.0" rel="150700.3.2.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="schwab@suse.de" date="1647518400">- util-Add-barriers-support-for-RISC-V.patch: Backport from upstream: Add
  barriers support for RISC-V</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1648555200">- Update to v39.1
  - Major fixes for hns provider
  - Bug fixes for all providers
  - systemd hardening
  - NDR rate support
- Dropped srp_daemon-Detect-proper-path-to-systemctl.patch
  as it was fixed upstream</changelog>
  <changelog author="dmueller@suse.com" date="1659960000">- skip valgrind on riscv64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1663070400">- Update to v42.0
  - Fixes for all providers
- Dropped patches merged upstream:
  - util-Add-barriers-support-for-RISC-V.patch
  - cmake-Make-modprobe.d-path-configurable.patch
- Update gen-pandoc.sh to support python3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1665662400">- Add rdma-ndd-disable-systemd-ProtectHostName-feature.patch to fix issue
  where rdma-ndd would not be aware of dynamic hostnames retrived through DHCP</changelog>
  <changelog author="nicolas.morey@suse.com" date="1681905600">- Update to v45.0
  - Fixes for all providers
  - Support for Microsoft Azure Network Adapter
- Drop rdma-ndd-disable-systemd-ProtectHostName-feature.patch
  as it was fixed upstream.
- Refresh against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-Update-kernel-headers.patch</changelog>
  <changelog author="nicolas.morey@suse.com" date="1690200000">- Update to v47.0
  - Fixes for all providers</changelog>
  <changelog author="nicolas.morey@suse.com" date="1691064000">- Drop patches adding support for cxgb3 (EOL, removed from kernel 5.5)
  - cxgb3-fix-declaration-of-free_context.patch
  - cxgb3-fix-support-for-new-uquery-API.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-Update-kernel-headers.patch
- Update baselibs=.conf accordingly</changelog>
  <changelog author="jengelh@inai.de" date="1692792000">- Add missing-quoting.patch
- Use normal GNU tar option syntax
- Remove old RPM spec logic (%defattr)</changelog>
  <changelog author="nicolas.morey@suse.com" date="1695384000">- Update to v48.0
  - No release notes available.
- Drop missing-quoting.patch which was fixed upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1700913600">- Update to v49.0 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1705924800">- Update to v49.1 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1707912000">- Add kernel-boot-do-not-load-module-unsupported-on-s390.patch
  to prevent autoload of module not supported on s390. (bsc#1219805)</changelog>
  <changelog author="nicolas.morey@suse.com" date="1719316800">- Update to rdma-core v52.0
  - No release notes available
- Add upstream patch Added-suffix-libdrm-to-CMakeLists.txt-for-drm.patch
  to fix libdrm detection.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1723464000">- Update to rdma-core v53.0
  - No release notes available
- Remove Added-suffix-libdrm-to-CMakeLists.txt-for-drm.patch
  as it was merged upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1728561600">- Update to rdma-core v54.0
  - No release notes available</changelog>
</package>
<package pkgid="a3714efd85443fc3de957bb168b8a256820c8cb3d4450a7b460d0a0d5466fe71" name="libmount-devel" arch="x86_64">
  <version epoch="0" ver="2.40.4" rel="150700.4.10.1"/>
  <changelog author="sbrabec@suse.com" date="1706011200">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1717934400">- Fix hang of lscpu -e (bsc#1225598,
  util-linux-libsmartcols-fix-reduction-stages-use.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1725364800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1733054400">- Update to version 2.40.2 (jsc#PED-9751):
  * Add lastlog2 (disabled for this build, SLE15/Leap15
    infrastructure is not ready for it)
  * agetty: Load autologin user from agetty.autologin credential
  * agetty: use get_terminal_default_type()
  * agetty: use sd_get_sessions() for number of users (#2088)
  * agetty: don't overwrite TERM passed by the user
  * blockdev: add support for BLKGETZONESZ
  * cfdisk: ask y/n before wipe
  * cfdisk: properly handle out-of-order partitions during resize
  * cfdisk: fix possible integer overflow
  * chcpu: document limitations of -g (bsc#1218609)
  * chsh: use libeconf to read /etc/shells
  * column: fix -l
  * column: fix memory leak
  * dmesg: fix FD leak
  * dmesg: fix delta calculation
  * dmesg: fix wrong size calculation
  * dmesg: support reading kmsg format from file
  * enosys: a new small command to make syscalls fail with ENOSYS
  * exch: new command to atomically exchanges paths between two files
  * fdisk: add support for partition resizing
  * fdisk: remove usage of VLA
  * fincore: add --output-all
  * findmnt: add --list-columns
  * findmnt: add -I, --dfi options for imitating the output of df -i
  * findmnt: add inode-related columns for implementing "df -i" like output
  * fsck.minix: fix possible overrun
  * hexdump: add '--one-byte-hex' format option
  * hwclock: add support for RTC_VL_READ/RTC_VL_CLR ioctls
  * libblkid: fix segfault when blkid.conf doesn't exist
  * libfdisk: add initializer to geometry
  * libmount: improving robustness in reading kernel messages,
    add pidfs to pseudo fs list
  * libmount: fix access check for utab in context
  * libmount: fix umount --read-only
  * login: initialize noauth from login.noauth credential
  * lsblk: add --filter
  * lsblk: add --highlight
  * lsblk: add --list-columns
  * lsclocks: new command to show clocks
  * lscpu: even more Arm part numbers (bsc#1223605)
  * lscpu: New Arm Cortex part numbers
    fix hang of lscpu -e (bsc#1225598)
  * lsfd: Refactor the pidfd logic, support pidfs
  * lsns: fix netns use
  * mkfs.minix: handle 64bit time on 32bit system
  * mkswap: implement --file
  * mkswap: implement --offset
  * mkswap.8.adoc: update note regarding swapfile creation
  * more: clean processes not cleaned up after failed SSH session
    using up 100% CPU (bsc#1220117)
  * mount: add --map-users and --map-groups convenience options
  * nsenter: add option `-c` to join the cgroup of target process
  * setarch: add riscv64/riscv32 support
  * setpgid: new command to run a program in a new process group
  * setpgid: make -f work
  * uuidd: add cont_clock persistence
  * uuidgen: add option --count
  * wall: query logind for list of users with tty (#2088)
    properly neutralize escape sequences (bsc#1221831,
    CVE-2024-28085)
  * write: query logind for list of users with tty (#2088)
  * libuuid: improved support for 64-bit time
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.2-ReleaseNotes
- Drop upstreamed patches:
    Revert-libblkid-try-LUKS2-first-when-probing.patch,
    util-linux-libsmartcols-fix-reduction-stages-use.patch,
    util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch,
    util-linux-chcpu-document-zVM-limitations.patch,
    util-linux-lscpu-add-ARM-cores-neoverse3.patch,
    util-linux-chcpu-document-zVM-limitations-generated.patch and
    util-linux-wall-CVE-2024-28085.patch.
- Add file conflict of util-linux-tty-tools and busybox-util-linux.
- Update util-linux-bash-completion-su-chsh-l.patch,
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch and
  make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.
- Move autoreconf back to %build.
- Add devel dependencies.
- Remove util-linux-rpmlintrc. It is no more needed with multibuild.
- uncomment "autoreconf --install" to use the new version of automake
- disable libmagic in more(1) for binary detection (bsc#1225197)
- Skip tests marked as ts_skip_qemu_user when running under qemu
- Mark racy lslocks test as known fail
- Re-enable lsfd tests using mkfds, as it is fixed now.</changelog>
  <changelog author="sbrabec@suse.com" date="1736856000">- Update to version 2.40.4 (jsc#PED-9751):
  * agetty: Prevent cursor escape (bsc#1194818, drop
    util-linux-agetty-prevent-cursor-escape.patch)
    add "systemd" to --version output\
  * chcpu(8): Document CPU deconfiguring behavior
  * fdisk: SGI fixes
  * hardlink: fix memory corruption
  * hardlink.1 directory|file is mandatory
  * lib/env: fix env_list_setenv() for strings without '='
  * libblkid:
    (exfat) validate fields used by prober
    (gpt) use blkid_probe_verify_csum() for partition array
    checksum
    add FSLASTBLOCK for swaparea
    bitlocker fix version on big-endian systems
  * libfdisk: make sure libblkid uses the same sector size
  * libmount:
    extract common error handling function
    propagate first error of multiple filesystem types
  * logger: correctly format tv_usec
  * lscpu: Skip aarch64 decode path for rest of the architectures
    (bsc#1229476, drop util-linux-lscpu-skip-aarch64-decode.patch)
  * lsns: ignore ESRCH errors reported when accessing files under
    /proc
  * mkswap: set selinux label also when creating file
  * more: make sure we have data on stderr
  * nsenter: support empty environ
  * umount, losetup: Document loop destroy behavior
    (bsc#1159034, drop
    util-linux-umount-losetup-lazy-destruction.patch,
    util-linux-umount-losetup-lazy-destruction-generated.patch).
  * uuidd: fix /var/lib/libuuid mode uuidd-tmpfiles.conf
    fix /var/lib/libuuid mode uuidd-tmpfiles.conf
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.3-ReleaseNotes
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.4-ReleaseNotes
  - Refresh util-linux.keyring. Key validity was extended.</changelog>
  <changelog author="sbrabec@suse.com" date="1743595200">- Use utmp as fallback for wall (bsc#1239671,
  util-linux-wall-use-utmp-fallback.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1774267200">- fdisk: Fix possible partition overlay and data corruption if EBR
  gap is missing (boo#1222465,
  util-linux-libfdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-2.patch,
  util-linux-libfdisk-ebr-missing-gap-2.patch,
  util-linux-tests-fdisk-ebr-missing-gap-3.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1774267201">- Recognize fuse "portal" as a virtual file system (boo#1234736,
  util-linux-libmount-fuse-portal.patch).</changelog>
</package>
<package pkgid="6cf32ed6e7f85f3c41d74effc5fbc725cd5a7f50cfda28821cde98d9fcae24b9" name="libmount-devel" arch="x86_64">
  <version epoch="0" ver="2.40.4" rel="150700.4.3.1"/>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1717934400">- Fix hang of lscpu -e (bsc#1225598,
  util-linux-libsmartcols-fix-reduction-stages-use.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1725364800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1733054400">- Update to version 2.40.2 (jsc#PED-9751):
  * Add lastlog2 (disabled for this build, SLE15/Leap15
    infrastructure is not ready for it)
  * agetty: Load autologin user from agetty.autologin credential
  * agetty: use get_terminal_default_type()
  * agetty: use sd_get_sessions() for number of users (#2088)
  * agetty: don't overwrite TERM passed by the user
  * blockdev: add support for BLKGETZONESZ
  * cfdisk: ask y/n before wipe
  * cfdisk: properly handle out-of-order partitions during resize
  * cfdisk: fix possible integer overflow
  * chcpu: document limitations of -g (bsc#1218609)
  * chsh: use libeconf to read /etc/shells
  * column: fix -l
  * column: fix memory leak
  * dmesg: fix FD leak
  * dmesg: fix delta calculation
  * dmesg: fix wrong size calculation
  * dmesg: support reading kmsg format from file
  * enosys: a new small command to make syscalls fail with ENOSYS
  * exch: new command to atomically exchanges paths between two files
  * fdisk: add support for partition resizing
  * fdisk: remove usage of VLA
  * fincore: add --output-all
  * findmnt: add --list-columns
  * findmnt: add -I, --dfi options for imitating the output of df -i
  * findmnt: add inode-related columns for implementing "df -i" like output
  * fsck.minix: fix possible overrun
  * hexdump: add '--one-byte-hex' format option
  * hwclock: add support for RTC_VL_READ/RTC_VL_CLR ioctls
  * libblkid: fix segfault when blkid.conf doesn't exist
  * libfdisk: add initializer to geometry
  * libmount: improving robustness in reading kernel messages,
    add pidfs to pseudo fs list
  * libmount: fix access check for utab in context
  * libmount: fix umount --read-only
  * login: initialize noauth from login.noauth credential
  * lsblk: add --filter
  * lsblk: add --highlight
  * lsblk: add --list-columns
  * lsclocks: new command to show clocks
  * lscpu: even more Arm part numbers (bsc#1223605)
  * lscpu: New Arm Cortex part numbers
    fix hang of lscpu -e (bsc#1225598)
  * lsfd: Refactor the pidfd logic, support pidfs
  * lsns: fix netns use
  * mkfs.minix: handle 64bit time on 32bit system
  * mkswap: implement --file
  * mkswap: implement --offset
  * mkswap.8.adoc: update note regarding swapfile creation
  * more: clean processes not cleaned up after failed SSH session
    using up 100% CPU (bsc#1220117)
  * mount: add --map-users and --map-groups convenience options
  * nsenter: add option `-c` to join the cgroup of target process
  * setarch: add riscv64/riscv32 support
  * setpgid: new command to run a program in a new process group
  * setpgid: make -f work
  * uuidd: add cont_clock persistence
  * uuidgen: add option --count
  * wall: query logind for list of users with tty (#2088)
    properly neutralize escape sequences (bsc#1221831,
    CVE-2024-28085)
  * write: query logind for list of users with tty (#2088)
  * libuuid: improved support for 64-bit time
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.2-ReleaseNotes
- Drop upstreamed patches:
    Revert-libblkid-try-LUKS2-first-when-probing.patch,
    util-linux-libsmartcols-fix-reduction-stages-use.patch,
    util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch,
    util-linux-chcpu-document-zVM-limitations.patch,
    util-linux-lscpu-add-ARM-cores-neoverse3.patch,
    util-linux-chcpu-document-zVM-limitations-generated.patch and
    util-linux-wall-CVE-2024-28085.patch.
- Add file conflict of util-linux-tty-tools and busybox-util-linux.
- Update util-linux-bash-completion-su-chsh-l.patch,
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch and
  make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.
- Move autoreconf back to %build.
- Add devel dependencies.
- Remove util-linux-rpmlintrc. It is no more needed with multibuild.
- uncomment "autoreconf --install" to use the new version of automake
- disable libmagic in more(1) for binary detection (bsc#1225197)
- Skip tests marked as ts_skip_qemu_user when running under qemu
- Mark racy lslocks test as known fail
- Re-enable lsfd tests using mkfds, as it is fixed now.</changelog>
  <changelog author="sbrabec@suse.com" date="1736856000">- Update to version 2.40.4 (jsc#PED-9751):
  * agetty: Prevent cursor escape (bsc#1194818, drop
    util-linux-agetty-prevent-cursor-escape.patch)
    add "systemd" to --version output\
  * chcpu(8): Document CPU deconfiguring behavior
  * fdisk: SGI fixes
  * hardlink: fix memory corruption
  * hardlink.1 directory|file is mandatory
  * lib/env: fix env_list_setenv() for strings without '='
  * libblkid:
    (exfat) validate fields used by prober
    (gpt) use blkid_probe_verify_csum() for partition array
    checksum
    add FSLASTBLOCK for swaparea
    bitlocker fix version on big-endian systems
  * libfdisk: make sure libblkid uses the same sector size
  * libmount:
    extract common error handling function
    propagate first error of multiple filesystem types
  * logger: correctly format tv_usec
  * lscpu: Skip aarch64 decode path for rest of the architectures
    (bsc#1229476, drop util-linux-lscpu-skip-aarch64-decode.patch)
  * lsns: ignore ESRCH errors reported when accessing files under
    /proc
  * mkswap: set selinux label also when creating file
  * more: make sure we have data on stderr
  * nsenter: support empty environ
  * umount, losetup: Document loop destroy behavior
    (bsc#1159034, drop
    util-linux-umount-losetup-lazy-destruction.patch,
    util-linux-umount-losetup-lazy-destruction-generated.patch).
  * uuidd: fix /var/lib/libuuid mode uuidd-tmpfiles.conf
    fix /var/lib/libuuid mode uuidd-tmpfiles.conf
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.3-ReleaseNotes
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.4-ReleaseNotes
  - Refresh util-linux.keyring. Key validity was extended.</changelog>
  <changelog author="sbrabec@suse.com" date="1743595200">- Use utmp as fallback for wall (bsc#1239671,
  util-linux-wall-use-utmp-fallback.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
</package>
<package pkgid="dc6c839e50c667ca889b068ef5fd2133790507b3b2aa95900dc58069802ee869" name="libmount1" arch="x86_64">
  <version epoch="0" ver="2.40.4" rel="150700.4.10.1"/>
  <changelog author="sbrabec@suse.com" date="1706011200">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1717934400">- Fix hang of lscpu -e (bsc#1225598,
  util-linux-libsmartcols-fix-reduction-stages-use.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1725364800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1733054400">- Update to version 2.40.2 (jsc#PED-9751):
  * Add lastlog2 (disabled for this build, SLE15/Leap15
    infrastructure is not ready for it)
  * agetty: Load autologin user from agetty.autologin credential
  * agetty: use get_terminal_default_type()
  * agetty: use sd_get_sessions() for number of users (#2088)
  * agetty: don't overwrite TERM passed by the user
  * blockdev: add support for BLKGETZONESZ
  * cfdisk: ask y/n before wipe
  * cfdisk: properly handle out-of-order partitions during resize
  * cfdisk: fix possible integer overflow
  * chcpu: document limitations of -g (bsc#1218609)
  * chsh: use libeconf to read /etc/shells
  * column: fix -l
  * column: fix memory leak
  * dmesg: fix FD leak
  * dmesg: fix delta calculation
  * dmesg: fix wrong size calculation
  * dmesg: support reading kmsg format from file
  * enosys: a new small command to make syscalls fail with ENOSYS
  * exch: new command to atomically exchanges paths between two files
  * fdisk: add support for partition resizing
  * fdisk: remove usage of VLA
  * fincore: add --output-all
  * findmnt: add --list-columns
  * findmnt: add -I, --dfi options for imitating the output of df -i
  * findmnt: add inode-related columns for implementing "df -i" like output
  * fsck.minix: fix possible overrun
  * hexdump: add '--one-byte-hex' format option
  * hwclock: add support for RTC_VL_READ/RTC_VL_CLR ioctls
  * libblkid: fix segfault when blkid.conf doesn't exist
  * libfdisk: add initializer to geometry
  * libmount: improving robustness in reading kernel messages,
    add pidfs to pseudo fs list
  * libmount: fix access check for utab in context
  * libmount: fix umount --read-only
  * login: initialize noauth from login.noauth credential
  * lsblk: add --filter
  * lsblk: add --highlight
  * lsblk: add --list-columns
  * lsclocks: new command to show clocks
  * lscpu: even more Arm part numbers (bsc#1223605)
  * lscpu: New Arm Cortex part numbers
    fix hang of lscpu -e (bsc#1225598)
  * lsfd: Refactor the pidfd logic, support pidfs
  * lsns: fix netns use
  * mkfs.minix: handle 64bit time on 32bit system
  * mkswap: implement --file
  * mkswap: implement --offset
  * mkswap.8.adoc: update note regarding swapfile creation
  * more: clean processes not cleaned up after failed SSH session
    using up 100% CPU (bsc#1220117)
  * mount: add --map-users and --map-groups convenience options
  * nsenter: add option `-c` to join the cgroup of target process
  * setarch: add riscv64/riscv32 support
  * setpgid: new command to run a program in a new process group
  * setpgid: make -f work
  * uuidd: add cont_clock persistence
  * uuidgen: add option --count
  * wall: query logind for list of users with tty (#2088)
    properly neutralize escape sequences (bsc#1221831,
    CVE-2024-28085)
  * write: query logind for list of users with tty (#2088)
  * libuuid: improved support for 64-bit time
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.2-ReleaseNotes
- Drop upstreamed patches:
    Revert-libblkid-try-LUKS2-first-when-probing.patch,
    util-linux-libsmartcols-fix-reduction-stages-use.patch,
    util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch,
    util-linux-chcpu-document-zVM-limitations.patch,
    util-linux-lscpu-add-ARM-cores-neoverse3.patch,
    util-linux-chcpu-document-zVM-limitations-generated.patch and
    util-linux-wall-CVE-2024-28085.patch.
- Add file conflict of util-linux-tty-tools and busybox-util-linux.
- Update util-linux-bash-completion-su-chsh-l.patch,
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch and
  make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.
- Move autoreconf back to %build.
- Add devel dependencies.
- Remove util-linux-rpmlintrc. It is no more needed with multibuild.
- uncomment "autoreconf --install" to use the new version of automake
- disable libmagic in more(1) for binary detection (bsc#1225197)
- Skip tests marked as ts_skip_qemu_user when running under qemu
- Mark racy lslocks test as known fail
- Re-enable lsfd tests using mkfds, as it is fixed now.</changelog>
  <changelog author="sbrabec@suse.com" date="1736856000">- Update to version 2.40.4 (jsc#PED-9751):
  * agetty: Prevent cursor escape (bsc#1194818, drop
    util-linux-agetty-prevent-cursor-escape.patch)
    add "systemd" to --version output\
  * chcpu(8): Document CPU deconfiguring behavior
  * fdisk: SGI fixes
  * hardlink: fix memory corruption
  * hardlink.1 directory|file is mandatory
  * lib/env: fix env_list_setenv() for strings without '='
  * libblkid:
    (exfat) validate fields used by prober
    (gpt) use blkid_probe_verify_csum() for partition array
    checksum
    add FSLASTBLOCK for swaparea
    bitlocker fix version on big-endian systems
  * libfdisk: make sure libblkid uses the same sector size
  * libmount:
    extract common error handling function
    propagate first error of multiple filesystem types
  * logger: correctly format tv_usec
  * lscpu: Skip aarch64 decode path for rest of the architectures
    (bsc#1229476, drop util-linux-lscpu-skip-aarch64-decode.patch)
  * lsns: ignore ESRCH errors reported when accessing files under
    /proc
  * mkswap: set selinux label also when creating file
  * more: make sure we have data on stderr
  * nsenter: support empty environ
  * umount, losetup: Document loop destroy behavior
    (bsc#1159034, drop
    util-linux-umount-losetup-lazy-destruction.patch,
    util-linux-umount-losetup-lazy-destruction-generated.patch).
  * uuidd: fix /var/lib/libuuid mode uuidd-tmpfiles.conf
    fix /var/lib/libuuid mode uuidd-tmpfiles.conf
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.3-ReleaseNotes
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.4-ReleaseNotes
  - Refresh util-linux.keyring. Key validity was extended.</changelog>
  <changelog author="sbrabec@suse.com" date="1743595200">- Use utmp as fallback for wall (bsc#1239671,
  util-linux-wall-use-utmp-fallback.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1774267200">- fdisk: Fix possible partition overlay and data corruption if EBR
  gap is missing (boo#1222465,
  util-linux-libfdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-2.patch,
  util-linux-libfdisk-ebr-missing-gap-2.patch,
  util-linux-tests-fdisk-ebr-missing-gap-3.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1774267201">- Recognize fuse "portal" as a virtual file system (boo#1234736,
  util-linux-libmount-fuse-portal.patch).</changelog>
</package>
<package pkgid="663b24b3ed37559e104fb88caf87829385c716a6073975417dedb61da8755aa9" name="libmount1" arch="x86_64">
  <version epoch="0" ver="2.40.4" rel="150700.4.3.1"/>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1717934400">- Fix hang of lscpu -e (bsc#1225598,
  util-linux-libsmartcols-fix-reduction-stages-use.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1725364800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1733054400">- Update to version 2.40.2 (jsc#PED-9751):
  * Add lastlog2 (disabled for this build, SLE15/Leap15
    infrastructure is not ready for it)
  * agetty: Load autologin user from agetty.autologin credential
  * agetty: use get_terminal_default_type()
  * agetty: use sd_get_sessions() for number of users (#2088)
  * agetty: don't overwrite TERM passed by the user
  * blockdev: add support for BLKGETZONESZ
  * cfdisk: ask y/n before wipe
  * cfdisk: properly handle out-of-order partitions during resize
  * cfdisk: fix possible integer overflow
  * chcpu: document limitations of -g (bsc#1218609)
  * chsh: use libeconf to read /etc/shells
  * column: fix -l
  * column: fix memory leak
  * dmesg: fix FD leak
  * dmesg: fix delta calculation
  * dmesg: fix wrong size calculation
  * dmesg: support reading kmsg format from file
  * enosys: a new small command to make syscalls fail with ENOSYS
  * exch: new command to atomically exchanges paths between two files
  * fdisk: add support for partition resizing
  * fdisk: remove usage of VLA
  * fincore: add --output-all
  * findmnt: add --list-columns
  * findmnt: add -I, --dfi options for imitating the output of df -i
  * findmnt: add inode-related columns for implementing "df -i" like output
  * fsck.minix: fix possible overrun
  * hexdump: add '--one-byte-hex' format option
  * hwclock: add support for RTC_VL_READ/RTC_VL_CLR ioctls
  * libblkid: fix segfault when blkid.conf doesn't exist
  * libfdisk: add initializer to geometry
  * libmount: improving robustness in reading kernel messages,
    add pidfs to pseudo fs list
  * libmount: fix access check for utab in context
  * libmount: fix umount --read-only
  * login: initialize noauth from login.noauth credential
  * lsblk: add --filter
  * lsblk: add --highlight
  * lsblk: add --list-columns
  * lsclocks: new command to show clocks
  * lscpu: even more Arm part numbers (bsc#1223605)
  * lscpu: New Arm Cortex part numbers
    fix hang of lscpu -e (bsc#1225598)
  * lsfd: Refactor the pidfd logic, support pidfs
  * lsns: fix netns use
  * mkfs.minix: handle 64bit time on 32bit system
  * mkswap: implement --file
  * mkswap: implement --offset
  * mkswap.8.adoc: update note regarding swapfile creation
  * more: clean processes not cleaned up after failed SSH session
    using up 100% CPU (bsc#1220117)
  * mount: add --map-users and --map-groups convenience options
  * nsenter: add option `-c` to join the cgroup of target process
  * setarch: add riscv64/riscv32 support
  * setpgid: new command to run a program in a new process group
  * setpgid: make -f work
  * uuidd: add cont_clock persistence
  * uuidgen: add option --count
  * wall: query logind for list of users with tty (#2088)
    properly neutralize escape sequences (bsc#1221831,
    CVE-2024-28085)
  * write: query logind for list of users with tty (#2088)
  * libuuid: improved support for 64-bit time
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.2-ReleaseNotes
- Drop upstreamed patches:
    Revert-libblkid-try-LUKS2-first-when-probing.patch,
    util-linux-libsmartcols-fix-reduction-stages-use.patch,
    util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch,
    util-linux-chcpu-document-zVM-limitations.patch,
    util-linux-lscpu-add-ARM-cores-neoverse3.patch,
    util-linux-chcpu-document-zVM-limitations-generated.patch and
    util-linux-wall-CVE-2024-28085.patch.
- Add file conflict of util-linux-tty-tools and busybox-util-linux.
- Update util-linux-bash-completion-su-chsh-l.patch,
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch and
  make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.
- Move autoreconf back to %build.
- Add devel dependencies.
- Remove util-linux-rpmlintrc. It is no more needed with multibuild.
- uncomment "autoreconf --install" to use the new version of automake
- disable libmagic in more(1) for binary detection (bsc#1225197)
- Skip tests marked as ts_skip_qemu_user when running under qemu
- Mark racy lslocks test as known fail
- Re-enable lsfd tests using mkfds, as it is fixed now.</changelog>
  <changelog author="sbrabec@suse.com" date="1736856000">- Update to version 2.40.4 (jsc#PED-9751):
  * agetty: Prevent cursor escape (bsc#1194818, drop
    util-linux-agetty-prevent-cursor-escape.patch)
    add "systemd" to --version output\
  * chcpu(8): Document CPU deconfiguring behavior
  * fdisk: SGI fixes
  * hardlink: fix memory corruption
  * hardlink.1 directory|file is mandatory
  * lib/env: fix env_list_setenv() for strings without '='
  * libblkid:
    (exfat) validate fields used by prober
    (gpt) use blkid_probe_verify_csum() for partition array
    checksum
    add FSLASTBLOCK for swaparea
    bitlocker fix version on big-endian systems
  * libfdisk: make sure libblkid uses the same sector size
  * libmount:
    extract common error handling function
    propagate first error of multiple filesystem types
  * logger: correctly format tv_usec
  * lscpu: Skip aarch64 decode path for rest of the architectures
    (bsc#1229476, drop util-linux-lscpu-skip-aarch64-decode.patch)
  * lsns: ignore ESRCH errors reported when accessing files under
    /proc
  * mkswap: set selinux label also when creating file
  * more: make sure we have data on stderr
  * nsenter: support empty environ
  * umount, losetup: Document loop destroy behavior
    (bsc#1159034, drop
    util-linux-umount-losetup-lazy-destruction.patch,
    util-linux-umount-losetup-lazy-destruction-generated.patch).
  * uuidd: fix /var/lib/libuuid mode uuidd-tmpfiles.conf
    fix /var/lib/libuuid mode uuidd-tmpfiles.conf
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.3-ReleaseNotes
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.4-ReleaseNotes
  - Refresh util-linux.keyring. Key validity was extended.</changelog>
  <changelog author="sbrabec@suse.com" date="1743595200">- Use utmp as fallback for wall (bsc#1239671,
  util-linux-wall-use-utmp-fallback.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
</package>
<package pkgid="893bf07d6c811c4ead6cc67e2a645c1ba4ffde7ce0c3358d5110f544282c193b" name="libmount1-32bit" arch="x86_64">
  <version epoch="0" ver="2.40.4" rel="150700.4.10.1"/>
  <changelog author="sbrabec@suse.com" date="1706011200">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1717934400">- Fix hang of lscpu -e (bsc#1225598,
  util-linux-libsmartcols-fix-reduction-stages-use.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1725364800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1733054400">- Update to version 2.40.2 (jsc#PED-9751):
  * Add lastlog2 (disabled for this build, SLE15/Leap15
    infrastructure is not ready for it)
  * agetty: Load autologin user from agetty.autologin credential
  * agetty: use get_terminal_default_type()
  * agetty: use sd_get_sessions() for number of users (#2088)
  * agetty: don't overwrite TERM passed by the user
  * blockdev: add support for BLKGETZONESZ
  * cfdisk: ask y/n before wipe
  * cfdisk: properly handle out-of-order partitions during resize
  * cfdisk: fix possible integer overflow
  * chcpu: document limitations of -g (bsc#1218609)
  * chsh: use libeconf to read /etc/shells
  * column: fix -l
  * column: fix memory leak
  * dmesg: fix FD leak
  * dmesg: fix delta calculation
  * dmesg: fix wrong size calculation
  * dmesg: support reading kmsg format from file
  * enosys: a new small command to make syscalls fail with ENOSYS
  * exch: new command to atomically exchanges paths between two files
  * fdisk: add support for partition resizing
  * fdisk: remove usage of VLA
  * fincore: add --output-all
  * findmnt: add --list-columns
  * findmnt: add -I, --dfi options for imitating the output of df -i
  * findmnt: add inode-related columns for implementing "df -i" like output
  * fsck.minix: fix possible overrun
  * hexdump: add '--one-byte-hex' format option
  * hwclock: add support for RTC_VL_READ/RTC_VL_CLR ioctls
  * libblkid: fix segfault when blkid.conf doesn't exist
  * libfdisk: add initializer to geometry
  * libmount: improving robustness in reading kernel messages,
    add pidfs to pseudo fs list
  * libmount: fix access check for utab in context
  * libmount: fix umount --read-only
  * login: initialize noauth from login.noauth credential
  * lsblk: add --filter
  * lsblk: add --highlight
  * lsblk: add --list-columns
  * lsclocks: new command to show clocks
  * lscpu: even more Arm part numbers (bsc#1223605)
  * lscpu: New Arm Cortex part numbers
    fix hang of lscpu -e (bsc#1225598)
  * lsfd: Refactor the pidfd logic, support pidfs
  * lsns: fix netns use
  * mkfs.minix: handle 64bit time on 32bit system
  * mkswap: implement --file
  * mkswap: implement --offset
  * mkswap.8.adoc: update note regarding swapfile creation
  * more: clean processes not cleaned up after failed SSH session
    using up 100% CPU (bsc#1220117)
  * mount: add --map-users and --map-groups convenience options
  * nsenter: add option `-c` to join the cgroup of target process
  * setarch: add riscv64/riscv32 support
  * setpgid: new command to run a program in a new process group
  * setpgid: make -f work
  * uuidd: add cont_clock persistence
  * uuidgen: add option --count
  * wall: query logind for list of users with tty (#2088)
    properly neutralize escape sequences (bsc#1221831,
    CVE-2024-28085)
  * write: query logind for list of users with tty (#2088)
  * libuuid: improved support for 64-bit time
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.2-ReleaseNotes
- Drop upstreamed patches:
    Revert-libblkid-try-LUKS2-first-when-probing.patch,
    util-linux-libsmartcols-fix-reduction-stages-use.patch,
    util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch,
    util-linux-chcpu-document-zVM-limitations.patch,
    util-linux-lscpu-add-ARM-cores-neoverse3.patch,
    util-linux-chcpu-document-zVM-limitations-generated.patch and
    util-linux-wall-CVE-2024-28085.patch.
- Add file conflict of util-linux-tty-tools and busybox-util-linux.
- Update util-linux-bash-completion-su-chsh-l.patch,
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch and
  make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.
- Move autoreconf back to %build.
- Add devel dependencies.
- Remove util-linux-rpmlintrc. It is no more needed with multibuild.
- uncomment "autoreconf --install" to use the new version of automake
- disable libmagic in more(1) for binary detection (bsc#1225197)
- Skip tests marked as ts_skip_qemu_user when running under qemu
- Mark racy lslocks test as known fail
- Re-enable lsfd tests using mkfds, as it is fixed now.</changelog>
  <changelog author="sbrabec@suse.com" date="1736856000">- Update to version 2.40.4 (jsc#PED-9751):
  * agetty: Prevent cursor escape (bsc#1194818, drop
    util-linux-agetty-prevent-cursor-escape.patch)
    add "systemd" to --version output\
  * chcpu(8): Document CPU deconfiguring behavior
  * fdisk: SGI fixes
  * hardlink: fix memory corruption
  * hardlink.1 directory|file is mandatory
  * lib/env: fix env_list_setenv() for strings without '='
  * libblkid:
    (exfat) validate fields used by prober
    (gpt) use blkid_probe_verify_csum() for partition array
    checksum
    add FSLASTBLOCK for swaparea
    bitlocker fix version on big-endian systems
  * libfdisk: make sure libblkid uses the same sector size
  * libmount:
    extract common error handling function
    propagate first error of multiple filesystem types
  * logger: correctly format tv_usec
  * lscpu: Skip aarch64 decode path for rest of the architectures
    (bsc#1229476, drop util-linux-lscpu-skip-aarch64-decode.patch)
  * lsns: ignore ESRCH errors reported when accessing files under
    /proc
  * mkswap: set selinux label also when creating file
  * more: make sure we have data on stderr
  * nsenter: support empty environ
  * umount, losetup: Document loop destroy behavior
    (bsc#1159034, drop
    util-linux-umount-losetup-lazy-destruction.patch,
    util-linux-umount-losetup-lazy-destruction-generated.patch).
  * uuidd: fix /var/lib/libuuid mode uuidd-tmpfiles.conf
    fix /var/lib/libuuid mode uuidd-tmpfiles.conf
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.3-ReleaseNotes
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.4-ReleaseNotes
  - Refresh util-linux.keyring. Key validity was extended.</changelog>
  <changelog author="sbrabec@suse.com" date="1743595200">- Use utmp as fallback for wall (bsc#1239671,
  util-linux-wall-use-utmp-fallback.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1774267200">- fdisk: Fix possible partition overlay and data corruption if EBR
  gap is missing (boo#1222465,
  util-linux-libfdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-2.patch,
  util-linux-libfdisk-ebr-missing-gap-2.patch,
  util-linux-tests-fdisk-ebr-missing-gap-3.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1774267201">- Recognize fuse "portal" as a virtual file system (boo#1234736,
  util-linux-libmount-fuse-portal.patch).</changelog>
</package>
<package pkgid="85f1a112381473d9f600f4fc685e08f0e222d9d6d5bb69342a2caa2e52b4eeed" name="libmount1-32bit" arch="x86_64">
  <version epoch="0" ver="2.40.4" rel="150700.4.3.1"/>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1717934400">- Fix hang of lscpu -e (bsc#1225598,
  util-linux-libsmartcols-fix-reduction-stages-use.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1725364800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1733054400">- Update to version 2.40.2 (jsc#PED-9751):
  * Add lastlog2 (disabled for this build, SLE15/Leap15
    infrastructure is not ready for it)
  * agetty: Load autologin user from agetty.autologin credential
  * agetty: use get_terminal_default_type()
  * agetty: use sd_get_sessions() for number of users (#2088)
  * agetty: don't overwrite TERM passed by the user
  * blockdev: add support for BLKGETZONESZ
  * cfdisk: ask y/n before wipe
  * cfdisk: properly handle out-of-order partitions during resize
  * cfdisk: fix possible integer overflow
  * chcpu: document limitations of -g (bsc#1218609)
  * chsh: use libeconf to read /etc/shells
  * column: fix -l
  * column: fix memory leak
  * dmesg: fix FD leak
  * dmesg: fix delta calculation
  * dmesg: fix wrong size calculation
  * dmesg: support reading kmsg format from file
  * enosys: a new small command to make syscalls fail with ENOSYS
  * exch: new command to atomically exchanges paths between two files
  * fdisk: add support for partition resizing
  * fdisk: remove usage of VLA
  * fincore: add --output-all
  * findmnt: add --list-columns
  * findmnt: add -I, --dfi options for imitating the output of df -i
  * findmnt: add inode-related columns for implementing "df -i" like output
  * fsck.minix: fix possible overrun
  * hexdump: add '--one-byte-hex' format option
  * hwclock: add support for RTC_VL_READ/RTC_VL_CLR ioctls
  * libblkid: fix segfault when blkid.conf doesn't exist
  * libfdisk: add initializer to geometry
  * libmount: improving robustness in reading kernel messages,
    add pidfs to pseudo fs list
  * libmount: fix access check for utab in context
  * libmount: fix umount --read-only
  * login: initialize noauth from login.noauth credential
  * lsblk: add --filter
  * lsblk: add --highlight
  * lsblk: add --list-columns
  * lsclocks: new command to show clocks
  * lscpu: even more Arm part numbers (bsc#1223605)
  * lscpu: New Arm Cortex part numbers
    fix hang of lscpu -e (bsc#1225598)
  * lsfd: Refactor the pidfd logic, support pidfs
  * lsns: fix netns use
  * mkfs.minix: handle 64bit time on 32bit system
  * mkswap: implement --file
  * mkswap: implement --offset
  * mkswap.8.adoc: update note regarding swapfile creation
  * more: clean processes not cleaned up after failed SSH session
    using up 100% CPU (bsc#1220117)
  * mount: add --map-users and --map-groups convenience options
  * nsenter: add option `-c` to join the cgroup of target process
  * setarch: add riscv64/riscv32 support
  * setpgid: new command to run a program in a new process group
  * setpgid: make -f work
  * uuidd: add cont_clock persistence
  * uuidgen: add option --count
  * wall: query logind for list of users with tty (#2088)
    properly neutralize escape sequences (bsc#1221831,
    CVE-2024-28085)
  * write: query logind for list of users with tty (#2088)
  * libuuid: improved support for 64-bit time
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.2-ReleaseNotes
- Drop upstreamed patches:
    Revert-libblkid-try-LUKS2-first-when-probing.patch,
    util-linux-libsmartcols-fix-reduction-stages-use.patch,
    util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch,
    util-linux-chcpu-document-zVM-limitations.patch,
    util-linux-lscpu-add-ARM-cores-neoverse3.patch,
    util-linux-chcpu-document-zVM-limitations-generated.patch and
    util-linux-wall-CVE-2024-28085.patch.
- Add file conflict of util-linux-tty-tools and busybox-util-linux.
- Update util-linux-bash-completion-su-chsh-l.patch,
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch and
  make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.
- Move autoreconf back to %build.
- Add devel dependencies.
- Remove util-linux-rpmlintrc. It is no more needed with multibuild.
- uncomment "autoreconf --install" to use the new version of automake
- disable libmagic in more(1) for binary detection (bsc#1225197)
- Skip tests marked as ts_skip_qemu_user when running under qemu
- Mark racy lslocks test as known fail
- Re-enable lsfd tests using mkfds, as it is fixed now.</changelog>
  <changelog author="sbrabec@suse.com" date="1736856000">- Update to version 2.40.4 (jsc#PED-9751):
  * agetty: Prevent cursor escape (bsc#1194818, drop
    util-linux-agetty-prevent-cursor-escape.patch)
    add "systemd" to --version output\
  * chcpu(8): Document CPU deconfiguring behavior
  * fdisk: SGI fixes
  * hardlink: fix memory corruption
  * hardlink.1 directory|file is mandatory
  * lib/env: fix env_list_setenv() for strings without '='
  * libblkid:
    (exfat) validate fields used by prober
    (gpt) use blkid_probe_verify_csum() for partition array
    checksum
    add FSLASTBLOCK for swaparea
    bitlocker fix version on big-endian systems
  * libfdisk: make sure libblkid uses the same sector size
  * libmount:
    extract common error handling function
    propagate first error of multiple filesystem types
  * logger: correctly format tv_usec
  * lscpu: Skip aarch64 decode path for rest of the architectures
    (bsc#1229476, drop util-linux-lscpu-skip-aarch64-decode.patch)
  * lsns: ignore ESRCH errors reported when accessing files under
    /proc
  * mkswap: set selinux label also when creating file
  * more: make sure we have data on stderr
  * nsenter: support empty environ
  * umount, losetup: Document loop destroy behavior
    (bsc#1159034, drop
    util-linux-umount-losetup-lazy-destruction.patch,
    util-linux-umount-losetup-lazy-destruction-generated.patch).
  * uuidd: fix /var/lib/libuuid mode uuidd-tmpfiles.conf
    fix /var/lib/libuuid mode uuidd-tmpfiles.conf
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.3-ReleaseNotes
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.4-ReleaseNotes
  - Refresh util-linux.keyring. Key validity was extended.</changelog>
  <changelog author="sbrabec@suse.com" date="1743595200">- Use utmp as fallback for wall (bsc#1239671,
  util-linux-wall-use-utmp-fallback.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
</package>
<package pkgid="c14241fe24ccbcb4fba2ccfb6ae121b0027bf201dfc33664794f356e96cdf276" name="libmozjs-60" arch="x86_64">
  <version epoch="0" ver="60.9.0" rel="150200.6.11.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1533124800">- Initial package (based on mozjs52), version 60.1.0:
  * New syntax:
  - `for await (... of ...)` syntax is used for async iteration;
  - The rest operator is now supported in object destructuring:
    e.g. `({a, b, ...cd} = {a: 1, b: 2, c: 3, d: 4});`;
  - The spread operator is now supported in object literals: e.g.
    `mergedObject = {...obj1, ...obj2};`;
  - Generator methods can now be async, using the `async
    function*` syntax, or `async* f() {...}` method shorthand;
  - It's now allowed to omit the variable binding from a catch
    statement, if you don't need to access the thrown exception:
    `try {...} catch {}`.
  * New APIs:
  - Promise.prototype.finally(), popular in many third-party
    Promise libraries, is now available natively;
  - String.prototype.toLocaleLowerCase() and
    String.prototype.toLocaleUpperCase() now take an optional
    locale or array of locales;
  - Intl.PluralRules is now available;
  - Intl.NumberFormat.protoype.formatToParts() is now available;
  - Intl.Collator now has a caseFirst option;
  - Intl.DateTimeFormat now has an hourCycle option.
  * New behaviour: There are a lot of minor behaviour changes as
    SpiderMonkey's JS implementation conforms ever closer to
    ECMAScript standards.
  * Backwards-incompatible changes:
  - Conditional catch clauses have been removed, as they were a
    Mozilla extension which will not be standardized;
  - The nonstandard `for each (... in ...)` loop was removed;
  - The nonstandard legacy lambda syntax (`function(x) x*x`) was
    removed;
  - The nonstandard Mozilla iteration protocol was removed, as
    well as nonstandard Mozilla generators, including the
    Iterator and StopIteration objects, and the
    Function.prototype.isGenerator() method.
  - Array comprehensions and generator comprehensions have been
    removed.
  - Several nonstandard methods were removed: ArrayBuffer.slice()
    (but not the standard version, ArrayBuffer.prototype.\
    slice()), Date.prototype.toLocaleFormat(), Function.\
    prototype.isGenerator(), Object.prototype.watch(), and
    Object.prototype.unwatch().
- Drop bmo1176787.patch inherited from mozjs52: fixed upstream.
- Add patches:
  mozjs60-fix-memory-leak-in-LCovCompartment-esr60.patch
  (bmo#1478679) and
  mozjs60-prevent-an-internal-gcc-8_0_1-error.patch
  (bmo#1458382).</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1536840000">- Use memory-constraints to avoid OOM errors</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540382400">- Update to version 60.2.2:
  * Bug fix release.
- Drop mozjs60-fix-memory-leak-in-LCovCompartment-esr60.patch and
  mozjs60-prevent-an-internal-gcc-8_0_1-error.patch: Fixed upstream</changelog>
  <changelog author="schwab@suse.de" date="1549108800">- mozjs60-mozilla-s390-bigendian.patch: rediff and apply on more big
  endian archs
- mozjs60-xulrunner-24.0-s390-inlines.patch: remove
- Replace icudt58b.dat.xz by icudt60b.dat.xz
- riscv-support.patch: add basic support for riscv64</changelog>
  <changelog author="wr@rosenauer.org" date="1549195200">- update to ESR codebase (60.4.0)
- rebased riscv-support.patch</changelog>
  <changelog author="schwab@suse.de" date="1549886400">- riscv-support.patch: fix last change</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- No longer pass --enable-debug to configure. It is not needed for
  our endusers, and will only slow down the engine. Nor have we
  built it with debug in the past.</changelog>
  <changelog author="dimstar@opensuse.org" date="1561032000">- Drop python-wheel BuildRequires: causes a build cycle, and is not
  needed.</changelog>
  <changelog author="mgorse@suse.com" date="1570190400">- Update to version 60.9.0
- rebased riscv-support.patch
- Remove source modifications that made some private functions
  public. Probably not needed anymore, and was introducing a
  build error
- Regenerate icudt60b.dat.xz
- Added some upstream bug fixes included in Debian and Fedora:
  Always-use-the-equivalent-year-to-determine-the-time-zone.patch
  emitter.patch
  emitter_test.patch
  init_patch.patch
  enddianness.patch
  jsproperty-endian.patch
  Save-x28-before-clobbering-it-in-the-regex-compiler.patch
  Save-and-restore-non-volatile-x28-on-ARM64-for-generated-unboxed-object-constructor.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1575979200">- Add Don-t-run-non262-extensions-clone-errors.js-on-s390x.patch,
  based on Debian patch, to enable back tests on s390x (and ppc64).
- Add tests-Expect-a-test-to-fail-on-big-endian.patch, based on
  Debian patch, accept a test failure on big-endian like s390x.
- Ensure build for x86 is with SSE2 (SSE for floating point math),*
  required by upstream (requires switching package to i686).
- enable back tests on s390x and i586
- Remove build workaround on ppc64le.
- Reorder/change build flags to follow Debian and Fedora.
- Enable back tests on all platforms (except JIT on s390).
- Ensure we don't build bundled security libs.
- Don't ship a icu bundle for big-endian, recreate it instead, with
  patches icu_sources_data-Write-command-output-to-our-stderr.patch
  and icu_sources_data.py-Decouple-from-Mozilla-build-system.patch.
- Update patch enddianness.patch with more fixes from
  bmo#1590907 to fix strings usage on s390x (bsc#1158355).
- Add Skip-some-i18n-tests-because-we-are-now-using-system-ICU.patch
  Update-to-ICU-61-Part-3-Update-tests.patch,
  Update-to-ICU-64-Part-3-Update-tests.patch,
  Update-to-ICU-65-Part-3-Update-tests.patch to allow building
  with system icu
- Add flag to switch between system icu and embedded icu and
  enable system icu.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Remove Update-to-ICU-64-Part-3-Update-tests.patch, SLE is back to
  ICU 60.x.</changelog>
  <changelog author="fcrozat@suse.com" date="1576756800">- SLE 15 SP2 will ship with ICU 65, apply patches accordingly
  (jsc#SLE-11118).</changelog>
  <changelog author="qzhao@suse.com" date="1727697600">- Add mozjs115-CVE-2024-45490-part01-5c1a3164.patch:
  Backporting 5c1a3164 from libexpat upstream, Reject negative len
  for XML_ParseBuffer.
  CVE-2024-45490's fixes including 3 parts: 5c1a3164 for libexpat
  sources; c12f039b for libexpat tests; 2db23301 for libexpat docs;
  Because mozjs only embeds libexpat sources, so unnecessary to
  port prart02 and part03.
  (CVE-2024-45490, bsc#1230036)</changelog>
  <changelog author="qzhao@suse.com" date="1727697601">- Add mozjs115-CVE-2024-45491.patch:
  Backporting 8e439a99 from libexpat upstream, Detect integer
  overflow in dtdCopy.
  (CVE-2024-45491, bsc#1230037)</changelog>
  <changelog author="qzhao@suse.com" date="1727697602">- Add mozjs115-CVE-2024-45492.patch:
  Backporting 9bf0f2c1 from libexpat upstream, Detect integer
  overflow in function nextScaffoldPart.
  (CVE-2024-45492, bsc#1230038)</changelog>
  <changelog author="qzhao@suse.com" date="1733400000">- Add mozjs52-CVE-2024-50602_part01_51c70190.patch:
  Backporting 51c70190 from upstream,
  * lib: Make XML_StopParser refuse to stop/suspend an unstarted parser.
  * lib: Be explicit about XML_PARSING in XML_StopParser.
  (CVE-2024-50602, bsc#1232599, bsc#1232602)</changelog>
  <changelog author="qzhao@suse.com" date="1733486400">- Add mozjs52-CVE-2024-50602_part02_5fb89e7b.patch:
  Backporting 5c1a3164 from upstream, Be explicit about XML_PARSING
  in XML_StopParser.
  (CVE-2024-50602, bsc#1232599, bsc#1232602)</changelog>
  <changelog author="mgorse@suse.com" date="1744286400">- Add libtheora-avoid-negative-shift.patch: avoid negative shift in
  huffdec.c (bsc#1234837 CVE-2024-56431).
- Explicitly require libicu-devel, rather than using pkgconfig, to
  avoid unintentionally building against icu 73.</changelog>
  <changelog author="mgorse@suse.com" date="1777204800">- Add security fixes:
  + mozjs60-CVE-2026-32776.patch (bsc#1259728 CVE-2026-32776)
  + mozjs60-CVE-2026-32777.patch (bsc#1259713 CVE-2026-32777)
  + mozjs60-CVE-2026-32778.patch (bsc#1259731 CVE-2026-32778)</changelog>
</package>
<package pkgid="12f434630dea4cd75d9f24cc3b7046f79f0f4e0ff58db8ce49597c6622bc97be" name="libmozjs-60" arch="x86_64">
  <version epoch="0" ver="60.9.0" rel="150200.6.8.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1533124800">- Initial package (based on mozjs52), version 60.1.0:
  * New syntax:
  - `for await (... of ...)` syntax is used for async iteration;
  - The rest operator is now supported in object destructuring:
    e.g. `({a, b, ...cd} = {a: 1, b: 2, c: 3, d: 4});`;
  - The spread operator is now supported in object literals: e.g.
    `mergedObject = {...obj1, ...obj2};`;
  - Generator methods can now be async, using the `async
    function*` syntax, or `async* f() {...}` method shorthand;
  - It's now allowed to omit the variable binding from a catch
    statement, if you don't need to access the thrown exception:
    `try {...} catch {}`.
  * New APIs:
  - Promise.prototype.finally(), popular in many third-party
    Promise libraries, is now available natively;
  - String.prototype.toLocaleLowerCase() and
    String.prototype.toLocaleUpperCase() now take an optional
    locale or array of locales;
  - Intl.PluralRules is now available;
  - Intl.NumberFormat.protoype.formatToParts() is now available;
  - Intl.Collator now has a caseFirst option;
  - Intl.DateTimeFormat now has an hourCycle option.
  * New behaviour: There are a lot of minor behaviour changes as
    SpiderMonkey's JS implementation conforms ever closer to
    ECMAScript standards.
  * Backwards-incompatible changes:
  - Conditional catch clauses have been removed, as they were a
    Mozilla extension which will not be standardized;
  - The nonstandard `for each (... in ...)` loop was removed;
  - The nonstandard legacy lambda syntax (`function(x) x*x`) was
    removed;
  - The nonstandard Mozilla iteration protocol was removed, as
    well as nonstandard Mozilla generators, including the
    Iterator and StopIteration objects, and the
    Function.prototype.isGenerator() method.
  - Array comprehensions and generator comprehensions have been
    removed.
  - Several nonstandard methods were removed: ArrayBuffer.slice()
    (but not the standard version, ArrayBuffer.prototype.\
    slice()), Date.prototype.toLocaleFormat(), Function.\
    prototype.isGenerator(), Object.prototype.watch(), and
    Object.prototype.unwatch().
- Drop bmo1176787.patch inherited from mozjs52: fixed upstream.
- Add patches:
  mozjs60-fix-memory-leak-in-LCovCompartment-esr60.patch
  (bmo#1478679) and
  mozjs60-prevent-an-internal-gcc-8_0_1-error.patch
  (bmo#1458382).</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1536840000">- Use memory-constraints to avoid OOM errors</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540382400">- Update to version 60.2.2:
  * Bug fix release.
- Drop mozjs60-fix-memory-leak-in-LCovCompartment-esr60.patch and
  mozjs60-prevent-an-internal-gcc-8_0_1-error.patch: Fixed upstream</changelog>
  <changelog author="schwab@suse.de" date="1549108800">- mozjs60-mozilla-s390-bigendian.patch: rediff and apply on more big
  endian archs
- mozjs60-xulrunner-24.0-s390-inlines.patch: remove
- Replace icudt58b.dat.xz by icudt60b.dat.xz
- riscv-support.patch: add basic support for riscv64</changelog>
  <changelog author="wr@rosenauer.org" date="1549195200">- update to ESR codebase (60.4.0)
- rebased riscv-support.patch</changelog>
  <changelog author="schwab@suse.de" date="1549886400">- riscv-support.patch: fix last change</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- No longer pass --enable-debug to configure. It is not needed for
  our endusers, and will only slow down the engine. Nor have we
  built it with debug in the past.</changelog>
  <changelog author="dimstar@opensuse.org" date="1561032000">- Drop python-wheel BuildRequires: causes a build cycle, and is not
  needed.</changelog>
  <changelog author="mgorse@suse.com" date="1570190400">- Update to version 60.9.0
- rebased riscv-support.patch
- Remove source modifications that made some private functions
  public. Probably not needed anymore, and was introducing a
  build error
- Regenerate icudt60b.dat.xz
- Added some upstream bug fixes included in Debian and Fedora:
  Always-use-the-equivalent-year-to-determine-the-time-zone.patch
  emitter.patch
  emitter_test.patch
  init_patch.patch
  enddianness.patch
  jsproperty-endian.patch
  Save-x28-before-clobbering-it-in-the-regex-compiler.patch
  Save-and-restore-non-volatile-x28-on-ARM64-for-generated-unboxed-object-constructor.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1575979200">- Add Don-t-run-non262-extensions-clone-errors.js-on-s390x.patch,
  based on Debian patch, to enable back tests on s390x (and ppc64).
- Add tests-Expect-a-test-to-fail-on-big-endian.patch, based on
  Debian patch, accept a test failure on big-endian like s390x.
- Ensure build for x86 is with SSE2 (SSE for floating point math),*
  required by upstream (requires switching package to i686).
- enable back tests on s390x and i586
- Remove build workaround on ppc64le.
- Reorder/change build flags to follow Debian and Fedora.
- Enable back tests on all platforms (except JIT on s390).
- Ensure we don't build bundled security libs.
- Don't ship a icu bundle for big-endian, recreate it instead, with
  patches icu_sources_data-Write-command-output-to-our-stderr.patch
  and icu_sources_data.py-Decouple-from-Mozilla-build-system.patch.
- Update patch enddianness.patch with more fixes from
  bmo#1590907 to fix strings usage on s390x (bsc#1158355).
- Add Skip-some-i18n-tests-because-we-are-now-using-system-ICU.patch
  Update-to-ICU-61-Part-3-Update-tests.patch,
  Update-to-ICU-64-Part-3-Update-tests.patch,
  Update-to-ICU-65-Part-3-Update-tests.patch to allow building
  with system icu
- Add flag to switch between system icu and embedded icu and
  enable system icu.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Remove Update-to-ICU-64-Part-3-Update-tests.patch, SLE is back to
  ICU 60.x.</changelog>
  <changelog author="fcrozat@suse.com" date="1576756800">- SLE 15 SP2 will ship with ICU 65, apply patches accordingly
  (jsc#SLE-11118).</changelog>
  <changelog author="qzhao@suse.com" date="1727697600">- Add mozjs115-CVE-2024-45490-part01-5c1a3164.patch:
  Backporting 5c1a3164 from libexpat upstream, Reject negative len
  for XML_ParseBuffer.
  CVE-2024-45490's fixes including 3 parts: 5c1a3164 for libexpat
  sources; c12f039b for libexpat tests; 2db23301 for libexpat docs;
  Because mozjs only embeds libexpat sources, so unnecessary to
  port prart02 and part03.
  (CVE-2024-45490, bsc#1230036)</changelog>
  <changelog author="qzhao@suse.com" date="1727697601">- Add mozjs115-CVE-2024-45491.patch:
  Backporting 8e439a99 from libexpat upstream, Detect integer
  overflow in dtdCopy.
  (CVE-2024-45491, bsc#1230037)</changelog>
  <changelog author="qzhao@suse.com" date="1727697602">- Add mozjs115-CVE-2024-45492.patch:
  Backporting 9bf0f2c1 from libexpat upstream, Detect integer
  overflow in function nextScaffoldPart.
  (CVE-2024-45492, bsc#1230038)</changelog>
  <changelog author="qzhao@suse.com" date="1733400000">- Add mozjs52-CVE-2024-50602_part01_51c70190.patch:
  Backporting 51c70190 from upstream,
  * lib: Make XML_StopParser refuse to stop/suspend an unstarted parser.
  * lib: Be explicit about XML_PARSING in XML_StopParser.
  (CVE-2024-50602, bsc#1232599, bsc#1232602)</changelog>
  <changelog author="qzhao@suse.com" date="1733486400">- Add mozjs52-CVE-2024-50602_part02_5fb89e7b.patch:
  Backporting 5c1a3164 from upstream, Be explicit about XML_PARSING
  in XML_StopParser.
  (CVE-2024-50602, bsc#1232599, bsc#1232602)</changelog>
  <changelog author="mgorse@suse.com" date="1744286400">- Add libtheora-avoid-negative-shift.patch: avoid negative shift in
  huffdec.c (bsc#1234837 CVE-2024-56431).
- Explicitly require libicu-devel, rather than using pkgconfig, to
  avoid unintentionally building against icu 73.</changelog>
</package>
<package pkgid="fc958341a5869e889d5e63a69a20f5de9e68769d36c840a17d336c02c93944c9" name="libmpath0" arch="x86_64">
  <version epoch="0" ver="0.10.3+124+suse.ed5b4b11" rel="150700.3.3.1"/>
  <changelog author="mwilck@suse.com" date="1704456000">- Update to version 0.9.7+93+suse.e2f2272:
  * fix ANA prioritizer enablement logic (bsc#1218326)
  * avoid setting queue_if_no_path on multipath maps for which the
    no_path_retry timeout has expired
  * the interactive commands "restorequeueing map X" and
    "restorequeing maps" now only affect maps that had queueing
    manually disabled using "disablequeuing maps" or
    "disablequeuing map X" beforehand
  * Spelling fixes</changelog>
  <changelog author="mwilck@suse.com" date="1707739200">- Update to version 0.9.7+140+suse.2d78457:
  * This is a multipath-tools 0.9.8 pre-release
  * Socket activation via multipathd.socket has been disabled by default
    because it has undesirable side effects on systems without multipath.
    Users with multipath hardware should enable multipathd.service
  * The restorequeueing CLI command now only enables queueing if
    disablequeueing had been sent before
  * Avoid multipathd hang during map flush
  * multipathd now tracks the queueing mode of maps in its internal features string
  * Improve error messages in 'multipathd -k'
  * Fix segfault in autoresize code (bsc#1219289)
  * Fix missing map reloads (bsc#1219796)
  * Documentation fixes, spelling fixes, minor code fixes</changelog>
  <changelog author="mwilck@suse.com" date="1707739201">- Update to version 0.9.7+148+suse.7d9953e.obscpio
  * This is a multipath-tools 0.9.8 pre-release
  * fix fast_io_fail for Infinibox (bsc#1219348)
  * Fix activation of LVM volume groups during coldplug (bsc#1219142)</changelog>
  <changelog author="mwilck@suse.com" date="1707912000">- Update to version 0.9.7+148+suse.9780ae0:
  * 11-dm-mpath.rules: Fix quoting mistake (bsc#1219142)</changelog>
  <changelog author="mwilck@suse.com" date="1707998400">- Update to version 0.9.8~1+82+suse.dcd98a3:
  * Adapt package version such that it shows as a 0.9.8 prerelease
  * Add missing udev rules file</changelog>
  <changelog author="mwilck@suse.com" date="1708948800">- Update to version 0.9.8+83+suse.bcae610 (bsc#1220374)
  * multipath-tools: added NEWS.md</changelog>
  <changelog author="mwilck@suse.com" date="1709035200">- Remove libmpathpersist-example-old.c, which has been obsolete
  since multipath-tools 0.8.6.</changelog>
  <changelog author="mwilck@suse.com" date="1709640000">- Update to version 0.9.8+87+suse.f72b9f3:
  * fix misspelled DM_UDEV_DISABLE_OTHER_RULES_FLAG in udev rules
    (bsc#1220810)</changelog>
  <changelog author="mwilck@suse.com" date="1712836800">- Update to version 0.9.8+88+suse.d504d83:
  * Revert "libmultipath: fix max_sectors_kb on adding path"
  (bsc#1222458)</changelog>
  <changelog author="mwilck@suse.com" date="1719316800">- Update to version 0.9.9+90+suse.f1d2f20:
  * Fix unit tests on Tumbleweed/armv7l
- Update to 0.9.9 upstream (see NEWS.md for details)
  * Update udev rules to be compliant with device-mapper udev
  rules update in LVM2 &gt;= 2.03.24.
  * Limit real-time scheduling priority to 10 by default. This
  can now be configured in multipathd.service using "LimitRTPRIO="
  * Set max_sectors_kb only on map creation, or when a new path
  is added, to avoid IO errors
  * The configuration option "flush_on_last_del" now takes the
  values "always" (="yes"), "unused" (="no"), and "never". "yes"
  and "no" are still supported
  * Add wildcard %k for max_sectors_kb for CLI commands like
  "multipath show {paths,maps} format"
  * Accept WWID value in CLI commands that take a map name, like
  "resize map $map"
  * Removed support for CLI wildcards for pathgroups, which were
  not function anyway.
  * Fix map failure count for no_path_retry &gt; 0</changelog>
  <changelog author="mwilck@suse.com" date="1721390400">- Update to version 0.9.9+161+suse.0c835ef:
  * Update to upstream reviewed code path (787e00d)
  * Added hardware defaults for Huawei storage arrays and XSG1 vendors
  * Refactored and improved the libultipath / libdevmapper interface
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove`
  (bug introduced in 0.9.9). (bsc#1229898)
  * CI improvements
  * Documentation fixes</changelog>
  <changelog author="mwilck@suse.com" date="1724932800">- Update to 0.10.0+103+suse.0fc97cd
- Update to upstream 0.10.0 (see also NEWS.md)
  * The `multipathd show daemon` command now shows `(reconfigure pending)`
  if a reconfiguration has been triggered but not finished yet.
  * Refactored the path checker loop. Paths are now checked for each multipath
  map in turn
  * Renamed public functions, variables, and macros to comply with the glibc policy
  for reserved names (gh#opensvc/multipath-tools#91)
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove` (bug introduced in
  0.9.9). (bsc#1229898)
  * Fixed old mpathpersist bug leading to the error message "configured reservation
  key doesn't match: 0x0" when `reservation_key` was configured in the
  multipaths section of `multipath.conf`. (bsc#1228926, gh#opensvc/multipath-tools#92)
  * Fixed output of `multipath -t` and `multipath -T` for the options
  `force_sync` and `retrigger_tries`. (bsc#1229898, gh#opensvc/multipath-tools#88)
  * Fixed adding maps by WWID in CLI (command `add map $WWID`). (bsc#1229898)</changelog>
  <changelog author="mwilck@suse.com" date="1730721600">- Update to version 0.10.0+106+suse.ffbdb7a:
  * Fix reboot hang if uevent is processed for suspended device
  (bsc#1232063)</changelog>
  <changelog author="mwilck@suse.com" date="1730808000">- Update to version 0.10.0+108+suse.2c2e597:
  * Update fix for bsc#1232063 to upstream-accepted solution</changelog>
  <changelog author="mwilck@suse.com" date="1732190400">- Update to version 0.10.1~1+113+suse.d6eca5e:
  This is a pre-release of the upstream stable release 0.10.1.
  * libmultipath: dm_get_maps(): don't bail out for single-map failures
  (bsc#1233588, gh#opensvc/multipath-tools#102)
  * libmultipath: don't print error message if WATCHDOG_USEC is 0
  (bsc#1232227)
  * libmultipath: don't set dev_loss_tmo to 0 for NO_PATH_RETRY_FAIL
  * multipathd: fix deferred_failback_tick for reload removes</changelog>
  <changelog author="mwilck@suse.com" date="1732536000">- Update to version 0.10.1~2+112+suse.b66763a:
  * libmultipath: reduce log level of "map X has multiple targets"
  (bsc#1233588)</changelog>
  <changelog author="mwilck@suse.com" date="1737720000">- Update to version 0.10.2+117+suse.33411aa:
  * multipathd: trigger uevents for blacklisted paths in reconfigure
    (bsc#1236321)
  * Make sure maps are reloaded in the path checker loop after detecting an
    inconsistent or wrong kernel state (bsc#1236392)
  * Make sure udev and systemd notice changes in multipath path state
    when devices are added to or removed from multipath maps (bsc#1236321)
  * Fix the problem that `group_by_tpg` might be disabled if one or more
    paths were offline during initial configuration (bsc#1236392)
  * Fix multipathd crash because of invalid path group index value, for example
    if an invalid path device was removed from a map.
    (gh#opensvc/multipath-tools#105, bsc#1236392)
  * Fixed a memory leak in the nvme foreign library.
  * Fixed a problem in the marginal path detection algorithm that could cause
    the io error check for a recently failed path to be delayed.
    (bsc#1236390)
  * Reduce log level of harmless "map ... doesn't exist" message
    (bsc#1236390)</changelog>
  <changelog author="mwilck@suse.com" date="1741176000">- Update to version 0.10.2+122+suse.51e02cc:
  * multipathd: fix hang during shutdown with queuing maps
    (bsc#1238484).
    This adds multipathd-queueing.service.</changelog>
  <changelog author="mwilck@suse.com" date="1751371200">- Update to version 0.10.2+123+suse.48d66ee8:
  * multipathd: cli_reinstate(): avoid reinstated paths being failed again
  (bsc#1244917)</changelog>
  <changelog author="mwilck@suse.com" date="1752494400">- Update to version 0.10.3+124+suse.ed5b4b11:
  * multipath-tools: add HPE MSA Gen7 (2070/2072) to hwtable
    (bsc#1246501)</changelog>
</package>
<package pkgid="e50fa44f386a0944ac3337000850e4ba302d99e288886da95ca55783ca946d1b" name="libmpath0" arch="x86_64">
  <version epoch="0" ver="0.10.5+198+suse.5875f383" rel="150700.3.6.1"/>
  <changelog author="mwilck@suse.com" date="1707998400">- Update to version 0.9.8~1+82+suse.dcd98a3:
  * Adapt package version such that it shows as a 0.9.8 prerelease
  * Add missing udev rules file</changelog>
  <changelog author="mwilck@suse.com" date="1708948800">- Update to version 0.9.8+83+suse.bcae610 (bsc#1220374)
  * multipath-tools: added NEWS.md</changelog>
  <changelog author="mwilck@suse.com" date="1709035200">- Remove libmpathpersist-example-old.c, which has been obsolete
  since multipath-tools 0.8.6.</changelog>
  <changelog author="mwilck@suse.com" date="1709640000">- Update to version 0.9.8+87+suse.f72b9f3:
  * fix misspelled DM_UDEV_DISABLE_OTHER_RULES_FLAG in udev rules
    (bsc#1220810)</changelog>
  <changelog author="mwilck@suse.com" date="1712836800">- Update to version 0.9.8+88+suse.d504d83:
  * Revert "libmultipath: fix max_sectors_kb on adding path"
  (bsc#1222458)</changelog>
  <changelog author="mwilck@suse.com" date="1719316800">- Update to version 0.9.9+90+suse.f1d2f20:
  * Fix unit tests on Tumbleweed/armv7l
- Update to 0.9.9 upstream (see NEWS.md for details)
  * Update udev rules to be compliant with device-mapper udev
  rules update in LVM2 &gt;= 2.03.24.
  * Limit real-time scheduling priority to 10 by default. This
  can now be configured in multipathd.service using "LimitRTPRIO="
  * Set max_sectors_kb only on map creation, or when a new path
  is added, to avoid IO errors
  * The configuration option "flush_on_last_del" now takes the
  values "always" (="yes"), "unused" (="no"), and "never". "yes"
  and "no" are still supported
  * Add wildcard %k for max_sectors_kb for CLI commands like
  "multipath show {paths,maps} format"
  * Accept WWID value in CLI commands that take a map name, like
  "resize map $map"
  * Removed support for CLI wildcards for pathgroups, which were
  not function anyway.
  * Fix map failure count for no_path_retry &gt; 0</changelog>
  <changelog author="mwilck@suse.com" date="1721390400">- Update to version 0.9.9+161+suse.0c835ef:
  * Update to upstream reviewed code path (787e00d)
  * Added hardware defaults for Huawei storage arrays and XSG1 vendors
  * Refactored and improved the libultipath / libdevmapper interface
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove`
  (bug introduced in 0.9.9). (bsc#1229898)
  * CI improvements
  * Documentation fixes</changelog>
  <changelog author="mwilck@suse.com" date="1724932800">- Update to 0.10.0+103+suse.0fc97cd
- Update to upstream 0.10.0 (see also NEWS.md)
  * The `multipathd show daemon` command now shows `(reconfigure pending)`
  if a reconfiguration has been triggered but not finished yet.
  * Refactored the path checker loop. Paths are now checked for each multipath
  map in turn
  * Renamed public functions, variables, and macros to comply with the glibc policy
  for reserved names (gh#opensvc/multipath-tools#91)
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove` (bug introduced in
  0.9.9). (bsc#1229898)
  * Fixed old mpathpersist bug leading to the error message "configured reservation
  key doesn't match: 0x0" when `reservation_key` was configured in the
  multipaths section of `multipath.conf`. (bsc#1228926, gh#opensvc/multipath-tools#92)
  * Fixed output of `multipath -t` and `multipath -T` for the options
  `force_sync` and `retrigger_tries`. (bsc#1229898, gh#opensvc/multipath-tools#88)
  * Fixed adding maps by WWID in CLI (command `add map $WWID`). (bsc#1229898)</changelog>
  <changelog author="mwilck@suse.com" date="1730721600">- Update to version 0.10.0+106+suse.ffbdb7a:
  * Fix reboot hang if uevent is processed for suspended device
  (bsc#1232063)</changelog>
  <changelog author="mwilck@suse.com" date="1730808000">- Update to version 0.10.0+108+suse.2c2e597:
  * Update fix for bsc#1232063 to upstream-accepted solution</changelog>
  <changelog author="mwilck@suse.com" date="1732190400">- Update to version 0.10.1~1+113+suse.d6eca5e:
  This is a pre-release of the upstream stable release 0.10.1.
  * libmultipath: dm_get_maps(): don't bail out for single-map failures
  (bsc#1233588, gh#opensvc/multipath-tools#102)
  * libmultipath: don't print error message if WATCHDOG_USEC is 0
  (bsc#1232227)
  * libmultipath: don't set dev_loss_tmo to 0 for NO_PATH_RETRY_FAIL
  * multipathd: fix deferred_failback_tick for reload removes</changelog>
  <changelog author="mwilck@suse.com" date="1732536000">- Update to version 0.10.1~2+112+suse.b66763a:
  * libmultipath: reduce log level of "map X has multiple targets"
  (bsc#1233588)</changelog>
  <changelog author="mwilck@suse.com" date="1737720000">- Update to version 0.10.2+117+suse.33411aa:
  * multipathd: trigger uevents for blacklisted paths in reconfigure
    (bsc#1236321)
  * Make sure maps are reloaded in the path checker loop after detecting an
    inconsistent or wrong kernel state (bsc#1236392)
  * Make sure udev and systemd notice changes in multipath path state
    when devices are added to or removed from multipath maps (bsc#1236321)
  * Fix the problem that `group_by_tpg` might be disabled if one or more
    paths were offline during initial configuration (bsc#1236392)
  * Fix multipathd crash because of invalid path group index value, for example
    if an invalid path device was removed from a map.
    (gh#opensvc/multipath-tools#105, bsc#1236392)
  * Fixed a memory leak in the nvme foreign library.
  * Fixed a problem in the marginal path detection algorithm that could cause
    the io error check for a recently failed path to be delayed.
    (bsc#1236390)
  * Reduce log level of harmless "map ... doesn't exist" message
    (bsc#1236390)</changelog>
  <changelog author="mwilck@suse.com" date="1741176000">- Update to version 0.10.2+122+suse.51e02cc:
  * multipathd: fix hang during shutdown with queuing maps
    (bsc#1238484).
    This adds multipathd-queueing.service.</changelog>
  <changelog author="mwilck@suse.com" date="1751371200">- Update to version 0.10.2+123+suse.48d66ee8:
  * multipathd: cli_reinstate(): avoid reinstated paths being failed again
  (bsc#1244917)</changelog>
  <changelog author="mwilck@suse.com" date="1752494400">- Update to version 0.10.3+124+suse.ed5b4b11:
  * multipath-tools: add HPE MSA Gen7 (2070/2072) to hwtable
    (bsc#1246501)</changelog>
  <changelog author="mwilck@suse.com" date="1762948800">- Update to version 0.10.5+125+suse.1ed79487:
- Fixes from upstream 0.10.5 (see also NEWS.md) (bsc#1253260)
  * Improved the communication with **udev** and **systemd** by triggering
    uevents when path devices are added to or removed from multipath maps,
    or when `multipathd reconfigure` is executed after changing blacklist
    directives in `multipath.conf`.
  * Failed paths should be checked every `polling_interval`. In certain cases,
    this wouldn't happen, because the check interval wasn't reset by multipathd.
  * It could happen that multipathd would accidentally release a SCSI persistent
    reservation held by another node. Fix it.
  * After manually failing some paths and then reinstating them, sometimes
    the reinstated paths were immediately failed again by multipathd. Fix it.
  * Various minor fixes reported by coverity.</changelog>
  <changelog author="mwilck@suse.com" date="1762948801">- _service: switched to tar_scm for git LFS</changelog>
  <changelog author="mwilck@suse.com" date="1763380800">- Update to version 0.10.5+190+suse.a9f87040:
  * CI: GitHub workflow updates. No code changes.</changelog>
  <changelog author="mwilck@suse.com" date="1763380801">- Update to version 0.10.5+198+suse.5875f383:
  * CI: more GitHub workflow updates. No code changes.</changelog>
</package>
<package pkgid="70b0553ecea387e1b15a102beb1ecc9bd089d515dc8981b49f405da3d5a3629e" name="libmpath0" arch="x86_64">
  <version epoch="0" ver="0.10.6+201+suse.9f189e79" rel="150700.3.11.1"/>
  <changelog author="mwilck@suse.com" date="1709035200">- Remove libmpathpersist-example-old.c, which has been obsolete
  since multipath-tools 0.8.6.</changelog>
  <changelog author="mwilck@suse.com" date="1709640000">- Update to version 0.9.8+87+suse.f72b9f3:
  * fix misspelled DM_UDEV_DISABLE_OTHER_RULES_FLAG in udev rules
    (bsc#1220810)</changelog>
  <changelog author="mwilck@suse.com" date="1712836800">- Update to version 0.9.8+88+suse.d504d83:
  * Revert "libmultipath: fix max_sectors_kb on adding path"
  (bsc#1222458)</changelog>
  <changelog author="mwilck@suse.com" date="1719316800">- Update to version 0.9.9+90+suse.f1d2f20:
  * Fix unit tests on Tumbleweed/armv7l
- Update to 0.9.9 upstream (see NEWS.md for details)
  * Update udev rules to be compliant with device-mapper udev
  rules update in LVM2 &gt;= 2.03.24.
  * Limit real-time scheduling priority to 10 by default. This
  can now be configured in multipathd.service using "LimitRTPRIO="
  * Set max_sectors_kb only on map creation, or when a new path
  is added, to avoid IO errors
  * The configuration option "flush_on_last_del" now takes the
  values "always" (="yes"), "unused" (="no"), and "never". "yes"
  and "no" are still supported
  * Add wildcard %k for max_sectors_kb for CLI commands like
  "multipath show {paths,maps} format"
  * Accept WWID value in CLI commands that take a map name, like
  "resize map $map"
  * Removed support for CLI wildcards for pathgroups, which were
  not function anyway.
  * Fix map failure count for no_path_retry &gt; 0</changelog>
  <changelog author="mwilck@suse.com" date="1721390400">- Update to version 0.9.9+161+suse.0c835ef:
  * Update to upstream reviewed code path (787e00d)
  * Added hardware defaults for Huawei storage arrays and XSG1 vendors
  * Refactored and improved the libultipath / libdevmapper interface
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove`
  (bug introduced in 0.9.9). (bsc#1229898)
  * CI improvements
  * Documentation fixes</changelog>
  <changelog author="mwilck@suse.com" date="1724932800">- Update to 0.10.0+103+suse.0fc97cd
- Update to upstream 0.10.0 (see also NEWS.md)
  * The `multipathd show daemon` command now shows `(reconfigure pending)`
  if a reconfiguration has been triggered but not finished yet.
  * Refactored the path checker loop. Paths are now checked for each multipath
  map in turn
  * Renamed public functions, variables, and macros to comply with the glibc policy
  for reserved names (gh#opensvc/multipath-tools#91)
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove` (bug introduced in
  0.9.9). (bsc#1229898)
  * Fixed old mpathpersist bug leading to the error message "configured reservation
  key doesn't match: 0x0" when `reservation_key` was configured in the
  multipaths section of `multipath.conf`. (bsc#1228926, gh#opensvc/multipath-tools#92)
  * Fixed output of `multipath -t` and `multipath -T` for the options
  `force_sync` and `retrigger_tries`. (bsc#1229898, gh#opensvc/multipath-tools#88)
  * Fixed adding maps by WWID in CLI (command `add map $WWID`). (bsc#1229898)</changelog>
  <changelog author="mwilck@suse.com" date="1730721600">- Update to version 0.10.0+106+suse.ffbdb7a:
  * Fix reboot hang if uevent is processed for suspended device
  (bsc#1232063)</changelog>
  <changelog author="mwilck@suse.com" date="1730808000">- Update to version 0.10.0+108+suse.2c2e597:
  * Update fix for bsc#1232063 to upstream-accepted solution</changelog>
  <changelog author="mwilck@suse.com" date="1732190400">- Update to version 0.10.1~1+113+suse.d6eca5e:
  This is a pre-release of the upstream stable release 0.10.1.
  * libmultipath: dm_get_maps(): don't bail out for single-map failures
  (bsc#1233588, gh#opensvc/multipath-tools#102)
  * libmultipath: don't print error message if WATCHDOG_USEC is 0
  (bsc#1232227)
  * libmultipath: don't set dev_loss_tmo to 0 for NO_PATH_RETRY_FAIL
  * multipathd: fix deferred_failback_tick for reload removes</changelog>
  <changelog author="mwilck@suse.com" date="1732536000">- Update to version 0.10.1~2+112+suse.b66763a:
  * libmultipath: reduce log level of "map X has multiple targets"
  (bsc#1233588)</changelog>
  <changelog author="mwilck@suse.com" date="1737720000">- Update to version 0.10.2+117+suse.33411aa:
  * multipathd: trigger uevents for blacklisted paths in reconfigure
    (bsc#1236321)
  * Make sure maps are reloaded in the path checker loop after detecting an
    inconsistent or wrong kernel state (bsc#1236392)
  * Make sure udev and systemd notice changes in multipath path state
    when devices are added to or removed from multipath maps (bsc#1236321)
  * Fix the problem that `group_by_tpg` might be disabled if one or more
    paths were offline during initial configuration (bsc#1236392)
  * Fix multipathd crash because of invalid path group index value, for example
    if an invalid path device was removed from a map.
    (gh#opensvc/multipath-tools#105, bsc#1236392)
  * Fixed a memory leak in the nvme foreign library.
  * Fixed a problem in the marginal path detection algorithm that could cause
    the io error check for a recently failed path to be delayed.
    (bsc#1236390)
  * Reduce log level of harmless "map ... doesn't exist" message
    (bsc#1236390)</changelog>
  <changelog author="mwilck@suse.com" date="1741176000">- Update to version 0.10.2+122+suse.51e02cc:
  * multipathd: fix hang during shutdown with queuing maps
    (bsc#1238484).
    This adds multipathd-queueing.service.</changelog>
  <changelog author="mwilck@suse.com" date="1751371200">- Update to version 0.10.2+123+suse.48d66ee8:
  * multipathd: cli_reinstate(): avoid reinstated paths being failed again
  (bsc#1244917)</changelog>
  <changelog author="mwilck@suse.com" date="1752494400">- Update to version 0.10.3+124+suse.ed5b4b11:
  * multipath-tools: add HPE MSA Gen7 (2070/2072) to hwtable
    (bsc#1246501)</changelog>
  <changelog author="mwilck@suse.com" date="1762948800">- Update to version 0.10.5+125+suse.1ed79487:
- Fixes from upstream 0.10.5 (see also NEWS.md) (bsc#1253260)
  * Improved the communication with **udev** and **systemd** by triggering
    uevents when path devices are added to or removed from multipath maps,
    or when `multipathd reconfigure` is executed after changing blacklist
    directives in `multipath.conf`.
  * Failed paths should be checked every `polling_interval`. In certain cases,
    this wouldn't happen, because the check interval wasn't reset by multipathd.
  * It could happen that multipathd would accidentally release a SCSI persistent
    reservation held by another node. Fix it.
  * After manually failing some paths and then reinstating them, sometimes
    the reinstated paths were immediately failed again by multipathd. Fix it.
  * Various minor fixes reported by coverity.</changelog>
  <changelog author="mwilck@suse.com" date="1762948801">- _service: switched to tar_scm for git LFS</changelog>
  <changelog author="mwilck@suse.com" date="1763380800">- Update to version 0.10.5+190+suse.a9f87040:
  * CI: GitHub workflow updates. No code changes.</changelog>
  <changelog author="mwilck@suse.com" date="1763726400">- Update to version 0.10.5+213+suse.04c3a0ac:
  * Log offline path state if "log_checker_err always" is set
    (bsc#1254094)
  * mpathpersist: Fix REPORT CAPABILITIES output</changelog>
  <changelog author="mwilck@suse.com" date="1769515200">- Update to version 0.10.6+200+suse.547788f4 (bsc#1257007):
  * kpartx: fix segfault when operating on regular files
    (bsc#1257244, bsc#1257153)
  * multipathd: print path offline message even without a checker
    (bsc#1254094)
  * Fix command descriptions in the multipathd man page.
  * Fix ISO C23 compatibility issue causing errors with new compilers.
  * Fix memory leak caused by not joining the "init unwinder" thread.
  * Fix memory leaks in kpartx.
  * Print the warning "setting scsi timeouts is unsupported for protocol" only
    once per protocol.
  * Make sure multipath-tools is compiled with the compiler flag
    `-fno-strict-aliasing`. (gh#opensvc/multipath-tools#130, bsc#1255285)</changelog>
  <changelog author="mwilck@suse.com" date="1769774400">- Update to version 0.10.6+201+suse.9f189e79:
  * libmultipath: reduce log level of "map X has no targets"
  (bsc#1257476)</changelog>
</package>
<package pkgid="fb1969686d758be53663c1edca2dfd12b667ed03789e0877a41c6af37515202c" name="libncurses6-32bit" arch="x86_64">
  <version epoch="0" ver="6.1" rel="150000.5.30.1"/>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()
    (bsc#1218014)</changelog>
  <changelog author="werner@suse.de" date="1708344000">- Add patch ncurses-6.1-bsc1220061.patch (bsc#1220061, CVE-2023-45918)
  * Backport from ncurses-6.4-20230615.patch
    improve checks in convert_string() for corrupt terminfo entry</changelog>
  <changelog author="werner@suse.de" date="1725969600">- Add patch ncurses-6.1-boo1229028.patch (boo#1229028)
  * Allow that terminal description based on static fallback
    entries can be freed.</changelog>
  <changelog author="werner@suse.de" date="1744200000">- Modify patch ncurses-5.9-ibm327x.dif
  * Backport sclp terminfo description entry if for s390 sclp terminal lines
  * Add a further sclp entry for qemu s390 based systems
  * Make use of dumb</changelog>
</package>
<package pkgid="51c0dcdeb2325eac1872919a262e7927a2293a2419f1009b444276aa18cb8252" name="libncurses6-32bit" arch="x86_64">
  <version epoch="0" ver="6.1" rel="150000.5.33.1"/>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()
    (bsc#1218014)</changelog>
  <changelog author="werner@suse.de" date="1708344000">- Add patch ncurses-6.1-bsc1220061.patch (bsc#1220061, CVE-2023-45918)
  * Backport from ncurses-6.4-20230615.patch
    improve checks in convert_string() for corrupt terminfo entry</changelog>
  <changelog author="werner@suse.de" date="1725969600">- Add patch ncurses-6.1-boo1229028.patch (boo#1229028)
  * Allow that terminal description based on static fallback
    entries can be freed.</changelog>
  <changelog author="werner@suse.de" date="1744200000">- Modify patch ncurses-5.9-ibm327x.dif
  * Backport sclp terminfo description entry if for s390 sclp terminal lines
  * Add a further sclp entry for qemu s390 based systems
  * Make use of dumb</changelog>
  <changelog author="werner@suse.de" date="1776340800">- Add patch fix-bsc1259924.patch (bsc#1259924, CVE-2025-69720)
  * Backport from ncurses-6.5-20251213.patch</changelog>
</package>
<package pkgid="806feafc40cd66f08515f1b97eb8fcd0a84a3e08114377e9ffedc0f02ad1da1a" name="libncurses6" arch="x86_64">
  <version epoch="0" ver="6.1" rel="150000.5.30.1"/>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()
    (bsc#1218014)</changelog>
  <changelog author="werner@suse.de" date="1708344000">- Add patch ncurses-6.1-bsc1220061.patch (bsc#1220061, CVE-2023-45918)
  * Backport from ncurses-6.4-20230615.patch
    improve checks in convert_string() for corrupt terminfo entry</changelog>
  <changelog author="werner@suse.de" date="1725969600">- Add patch ncurses-6.1-boo1229028.patch (boo#1229028)
  * Allow that terminal description based on static fallback
    entries can be freed.</changelog>
  <changelog author="werner@suse.de" date="1744200000">- Modify patch ncurses-5.9-ibm327x.dif
  * Backport sclp terminfo description entry if for s390 sclp terminal lines
  * Add a further sclp entry for qemu s390 based systems
  * Make use of dumb</changelog>
</package>
<package pkgid="ca6617fedc1e1d39b3df25d4c2421f3a0ae9f157435c3e8f97861a94c164f9d6" name="libncurses6" arch="x86_64">
  <version epoch="0" ver="6.1" rel="150000.5.33.1"/>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()
    (bsc#1218014)</changelog>
  <changelog author="werner@suse.de" date="1708344000">- Add patch ncurses-6.1-bsc1220061.patch (bsc#1220061, CVE-2023-45918)
  * Backport from ncurses-6.4-20230615.patch
    improve checks in convert_string() for corrupt terminfo entry</changelog>
  <changelog author="werner@suse.de" date="1725969600">- Add patch ncurses-6.1-boo1229028.patch (boo#1229028)
  * Allow that terminal description based on static fallback
    entries can be freed.</changelog>
  <changelog author="werner@suse.de" date="1744200000">- Modify patch ncurses-5.9-ibm327x.dif
  * Backport sclp terminfo description entry if for s390 sclp terminal lines
  * Add a further sclp entry for qemu s390 based systems
  * Make use of dumb</changelog>
  <changelog author="werner@suse.de" date="1776340800">- Add patch fix-bsc1259924.patch (bsc#1259924, CVE-2025-69720)
  * Backport from ncurses-6.5-20251213.patch</changelog>
</package>
<package pkgid="c8cdb7aef16267d9907c73c62d75aa4f24a5661c9799946eb10a0167fb6eb028" name="libnetlink-devel" arch="x86_64">
  <version epoch="0" ver="6.4" rel="150600.7.12.1"/>
  <changelog author="mkubecek@suse.cz" date="1547726400">- VF stats backport for SLE15-SP1 (fate#326021 bsc#1104003):
  ip-Add-violation-counters-to-VF-statisctics.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1569499200">- upgrade to upstream version 5.3 (jsc#SLE-7290)
  * replace upstream tarball and signature
  * import specfile updates from Factory package
  * drop mainline backports contained in 5.3:
  - bpf-remove-obsolete-samples.patch
  - utils-return-default-family-when-rtm_family-is-not-R.patch
  - Really-fix-get_addr-and-get_prefix-error-messages.patch
  - iproute-Add-support-for-extended-ack-to-rtnl_talk.patch
  - ss-enclose-IPv6-address-in-brackets.patch
  - lib-fix-extended-ack-with-and-without-libmnl.patch
  - lib-need-to-pass-LIBMNL-flag.patch
  - tc-ip-more-Makefile-updates-for-LIBMNL.patch
  - change-how-Config-is-used-in-Makefile-s.patch
  - lib-Dump-ext-ack-string-by-default.patch
  - bpf-unbreak-libelf-linkage-for-bpf-obj-loader.patch
  - libnetlink-Fix-extack-attribute-parsing.patch
  - ifstat-Fix-memleak-in-dump_kern_db-for-json-output.patch
  - ss-Fix-potential-memleak-in-unix_stats_print.patch
  - utils-Move-BIT-macro-to-common-header.patch
  - rdma-Add-basic-infrastructure-for-RDMA-tool.patch
  - rdma-Add-dev-object.patch
  - rdma-Add-link-object.patch
  - rdma-Add-json-and-pretty-outputs.patch
  - rdma-Implement-json-output-for-dev-object.patch
  - rdma-Add-json-output-to-link-object.patch
  - rdma-Add-initial-manual-for-the-tool.patch
  - iproute-Fix-for-missing-Oifs-display.patch
  - ipmaddr-Avoid-accessing-uninitialized-data.patch
  - rdma-fix-duplicate-initialization-in-port_names.patch
  - ss-Fix-for-added-diag-support-check.patch
  - link_gre6-Fix-for-changing-tclass-flowlabel.patch
  - iplink-check-for-message-truncation-in-iplink_get.patch
  - iplink-double-the-buffer-size-also-in-iplink_get.patch
  - tc-actions-store-and-dump-correct-length-of-user-coo.patch
  - json_writer-add-new-json-handlers-null-float-with-fo.patch
  - doc-remove-obsolete-ip-tunnels-documentation.patch
  - doc-remove-outdated-ss-documentation.patch
  - doc-remove-outdated-arpd-documentation.patch
  - doc-remove-outdated-nstat-rtstat-documentation.patch
  - doc-remove-outdated-tc-filters-documentation.patch
  - doc-remove-outdated-IPv6-flow-label-document.patch
  - doc-drop-old-ip-command-documentation.patch
  - ss-Distinguish-between-IPv4-and-IPv6-wildcard-socket.patch
  - ip-maddr-fix-filtering-by-device.patch
  - man-add-additional-explainations-for-ss.patch
  - lib-libnetlink-re-malloc-buff-if-size-is-not-enough.patch
  - lib-libnetlink-update-rtnl_talk-to-support-malloc-bu.patch
  - tc-move-action-cookie-print-out-of-the-stats-if.patch
  - tc-remove-action-cookie-len-from-printout.patch
  - link_gre6-Detect-invalid-encaplimit-values.patch
  - man-tc-csum.8-Fix-inconsistency-in-example-descripti.patch
  - tc-bash-completion-add-missing-classid-keyword.patch
  - tc-fix-command-tc-actions-del-hang-issue.patch
  - gre-ip6tnl-tunnel-Fix-noencap-support.patch
  - Restore-no-print-directory-option-for-silent-builds.patch
  - iplink-Validate-minimum-tx-rate-is-less-than-maximum.patch
  - ipaddress-Make-sure-VF-min-max-rate-API-is-supported.patch
  - rdma-Reduce-scope-of-_dev_map_lookup-call.patch
  - rdma-Protect-dev_map_lookup-from-wrong-input.patch
  - rdma-Move-per-device-handler-function-to-generic-cod.patch
  - rdma-Fix-misspelled-SYS_IMAGE_GUID.patch
  - rdma-Check-that-port-index-exists-before-operate-on-.patch
  - rdma-Rename-free-function-to-be-rd_cleanup.patch
  - rdma-Rename-rd_free_devmap-to-be-rd_free.patch
  - rdma-Move-link-execution-logic-to-common-code.patch
  - rdma-Add-option-to-provide-sign-for-the-port-number.patch
  - rdma-Make-visible-the-number-of-arguments.patch
  - rdma-Add-filtering-infrastructure.patch
  - rdma-Set-pointer-to-device-name-position.patch
  - rdma-Add-resource-tracking-summary.patch
  - rdma-Add-QP-resource-tracking-information.patch
  - rdma-Check-return-value-of-strdup-call.patch
  - README-update-location-of-git-repositories-remove-br.patch
  - Remove-leftovers-from-removed-Latex-documentation.patch
  - README-re-add-updated-information-link.patch
  - rdma-Avoid-memory-leak-for-skipper-resource.patch
  - ip-link-Fix-use-after-free-in-nl_get_ll_addr_len.patch
  - ip-address-Fix-negative-prints-of-large-TX-rate-limi.patch
  - devlink-fix-port-new-monitoring-message-typo.patch
  - rdma-Add-CM_ID-resource-tracking-information.patch
  - rdma-Add-CQ-resource-tracking-information.patch
  - rdma-Add-MR-resource-tracking-information.patch
  - rdma-Add-PD-resource-tracking-information.patch
  - rdma-Ignore-unknown-netlink-attributes.patch
  - bridge-fix-typo-in-hairpin-error-message.patch
  - iproute-Abort-if-nexthop-cannot-be-parsed.patch
  - iplink_vrf-Save-device-index-from-response-for-retur.patch
  - rdma-Print-net-device-name-and-index-for-RDMA-device.patch
  - rdma-print-driver-resource-attributes.patch
  - rdma-sync-some-IP-headers-with-glibc.patch
  - devlink-CTRL_ATTR_FAMILY_ID-is-a-u16.patch
  - ip-Add-violation-counters-to-VF-statisctics.patch
  - ip-route-Fix-segfault-with-many-nexthops.patch
  - rdma-Fix-representation-of-PortInfo-CapabilityMask.patch
  - macsec-fix-off-by-one-when-parsing-attributes.patch
  - rdma-Fix-for-ineffective-check-in-add_filter.patch
  - ip-route-Fix-for-memleak-in-error-path.patch
  - rdma-Don-t-pass-garbage-to-rd_check_is_filtered.patch
  - ip-route-Fix-parse_encap_seg6-srh-parsing.patch
  - rdma-Refresh-help-section-of-resource-information.patch
  - tc-f_u32-allow-skip_hw-and-skip_sw-flags-to-be-last.patch
  - ip-route-Fix-nexthop-encap-parsing.patch
  - rdma-Fix-broken-32-bit-compilation.patch
  - rdma-Fix-incorrectly-handled-NLA-validation.patch
  - rdma-Introduce-command-execution-helper-with-require.patch
  - rdma-Add-an-option-to-rename-IB-device-interface.patch
  - rdma-Add-print-of-link-CapabilityMask2-flags.patch
  * drop non-upstream patches obsoleted by rebase to 5.3:
  - sync-UAPI-header-copies-with-SLE15-SP1.patch
  - man-fix-documentation-references-in-manual-pages.patch
  * refresh remaining patches:
  - adjust-installation-directories-for-openSUSE-SLE.patch
  - use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  - add-explicit-typecast-to-avoid-gcc-warning.patch
  - xfrm-support-displaying-transformations-used-for-Mob.patch
  - split-link-and-compile-steps-for-binaries.patch
  - examples-fix-bashisms-in-example-script.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1578484800">- follow-up fixes backported from upstream (bsc#1160242):
  bpf-replace-snprintf-with-asprintf-when-dealing-with.patch
  bridge-Deduplicate-vlan-show-functions.patch
  bridge-Fix-BRIDGE_VLAN_TUNNEL-attribute-sizes.patch
  bridge-Fix-src_vni-argument-in-man-page.patch
  bridge-Fix-tunnelshow-json-output.patch
  bridge-Fix-typo-in-error-messages.patch
  bridge-Fix-vni-printing.patch
  devlink-Add-a-new-time-stamp-format-for-health-repor.patch
  devlink-Add-helper-for-left-justification-print.patch
  devlink-Fix-fmsg-nesting-in-non-JSON-output.patch
  devlink-Fix-inconsistency-between-command-input-and-.patch
  devlink-Left-justification-on-FMSG-output.patch
  devlink-Print-health-reporter-s-dump-time-stamp-in-a.patch
  devlink-allow-full-range-of-resource-sizes.patch
  devlink-require-resource-parameters.patch
  introduce-print_masked_u16-and-print_masked_u32.patch
  ip-fix-ip-route-show-json-output-for-multipath-nexth.patch
  ip-xfrm-if_id-ve-value-is-error.patch
  json_print-Remove-declaration-without-implementation.patch
  sync-UAPI-header-copies-with-SLE15-SP2.patch
  tc-fix-segmentation-fault-on-gact-action.patch
  tc-fix-warning-in-tc-q_pie.c.patch
  tc-flower-fix-output-for-ip-tos-and-ttl.patch
  tc-fq_codel-fix-missing-statistic-in-JSON-output.patch
  tc-pie-add-dq_rate_estimator-option.patch
  tc_util-add-an-option-to-print-masked-numbers-with-w.patch
  tc_util-add-functions-for-big-endian-masked-numbers.patch
  tc_util-introduce-a-function-to-print-JSON-non-JSON-.patch
  testsuite-Fix-line-count-test.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1578484801">- support alternative names as we already support them in SLE15-SP2
  kernel (jsc#SLE-7290):
  lib-ll_map-cache-alternative-names.patch
  ip-add-support-for-alternative-name-addition-deletio.patch
  ip-allow-to-use-alternative-names-as-handle.patch
  ip-fix-oneline-output.patch</changelog>
  <changelog author="kukuk@suse.com" date="1586347200">- Move arpd into own subpackage to avoid libdb dependency
  [jsc#SLE-12189]</changelog>
  <changelog author="mkubecek@suse.cz" date="1587729600">- follow-up fixes backported from upstream (bsc#1160242):
  ip-fix-link-type-and-vlan-oneline-output.patch
  ip-xfrm-Fix-help-messages.patch
  ip-link-xstats-fix-TX-IGMP-reports-string.patch
  erspan-set-erspan_ver-to-1-by-default.patch
  xfrm-not-try-to-delete-ipcomp-states-when-using-dele.patch
  nexthop-fix-error-reporting-in-filter-dump.patch
- refresh:
  xfrm-support-displaying-transformations-used-for-Mob.patch
- fix duplicated patch metadata:
  introduce-print_masked_u16-and-print_masked_u32.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633089600">- follow-up fixes backported from upstream (bsc#1160242):
  ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633348800">- follow-up fixes backported from upstream (bsc#1160242):
  ss-fix-end-of-line-printing-in-misc-ss.c.patch
  xfrm-also-check-for-ipv6-state-in-xfrm_state_keep.patch
  bridge-Fix-typo.patch
  bridge-Fix-output-with-empty-vlan-lists.patch
  tc-action-fix-time-values-output-in-JSON-format.patch
  Revert-bpf-replace-snprintf-with-asprintf-when-deali.patch
  bpf-Fixes-a-snprintf-truncation-warning.patch
  tipc-fixed-a-compile-warning-in-tipc-link.c.patch
  ip-xfrm-update-man-page-on-setting-printing-XFRMA_IF.patch
  bridge-fdb-show-fix-fdb-entry-state-output-for-json-.patch
  ip-link-Fix-indenting-in-help-text.patch
  ip-iplink_ipoib.c-Remove-extra-spaces.patch
  devlink-fix-uninitialized-warning.patch
  bridge-fix-string-length-warning.patch
  f_u32-fix-compiler-gcc-10-compiler-warning.patch
  rdma-Fix-statistics-bind-unbing-argument-handling.patch
  lib-namespace-fix-ip-all-netns-return-code.patch
  lib-bpf-Fix-and-simplify-bpf_mnt_check_target.patch
  lib-fs-avoid-double-call-to-mkdir-on-make_path.patch
  q_cake-Fix-incorrect-printing-of-signed-values-in-cl.patch
  ip-xfrm-limit-the-length-of-the-security-context-nam.patch
  erspan-fix-JSON-output.patch
  devlink-always-check-strslashrsplit-return-value.patch
  nexthop-fix-memory-leak-in-add_nh_group_attr.patch
  rdma-stat-initialize-ret-in-stat_qp_show_parse_cb.patch
  rdma-stat-fix-return-code.patch
  lib-bpf_legacy-treat-0-as-a-valid-file-descriptor.patch
  lib-bpf_legacy-fix-missing-socket-close-when-connect.patch
  ip-drop-2-char-command-assumption.patch
  man-fix-syntax-for-ip-link-property.patch
  lib-bpf_legacy-avoid-to-pass-invalid-argument-to-clo.patch
  ip-route-ignore-ENOENT-during-save-if-RT_TABLE_MAIN-.patch
  libnetlink-check-error-handler-is-present-before-a-c.patch
  ipmonitor-Fix-recvmsg-with-ancillary-data.patch
  tc-u32-Fix-key-folding-in-sample-option.patch
  man-bridge-fix-the-typo-to-change-c-lor-into-c-olor-.patch
  ss-fix-fallback-to-procfs-for-raw-sockets.patch
  iptuntap-fix-multi-queue-flag-display.patch
  tc-f_flower-fix-port-range-parsing.patch
  lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
- refresh:
  ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633435200">- upgrade to upstream version 5.14 (jsc#SLE-17360 jsc#SLE-18994
  jsc#SLE-19271)
  * replace upstream tarball and signature
  * update specfile with changes from Factory package
  * drop mainline backports contained in 5.14:
  - Revert-bpf-replace-snprintf-with-asprintf-when-deali.patch
  - bpf-Fixes-a-snprintf-truncation-warning.patch
  - bpf-replace-snprintf-with-asprintf-when-dealing-with.patch
  - bridge-Deduplicate-vlan-show-functions.patch
  - bridge-Fix-BRIDGE_VLAN_TUNNEL-attribute-sizes.patch
  - bridge-Fix-output-with-empty-vlan-lists.patch
  - bridge-Fix-src_vni-argument-in-man-page.patch
  - bridge-Fix-tunnelshow-json-output.patch
  - bridge-Fix-typo-in-error-messages.patch
  - bridge-Fix-typo.patch
  - bridge-Fix-vni-printing.patch
  - bridge-fdb-show-fix-fdb-entry-state-output-for-json-.patch
  - bridge-fix-string-length-warning.patch
  - devlink-Add-a-new-time-stamp-format-for-health-repor.patch
  - devlink-Add-helper-for-left-justification-print.patch
  - devlink-Fix-fmsg-nesting-in-non-JSON-output.patch
  - devlink-Fix-inconsistency-between-command-input-and-.patch
  - devlink-Left-justification-on-FMSG-output.patch
  - devlink-Print-health-reporter-s-dump-time-stamp-in-a.patch
  - devlink-allow-full-range-of-resource-sizes.patch
  - devlink-always-check-strslashrsplit-return-value.patch
  - devlink-fix-uninitialized-warning.patch
  - devlink-require-resource-parameters.patch
  - erspan-fix-JSON-output.patch
  - erspan-set-erspan_ver-to-1-by-default.patch
  - f_u32-fix-compiler-gcc-10-compiler-warning.patch
  - introduce-print_masked_u16-and-print_masked_u32.patch
  - ip-add-support-for-alternative-name-addition-deletio.patch
  - ip-allow-to-use-alternative-names-as-handle.patch
  - ip-drop-2-char-command-assumption.patch
  - ip-fix-ip-route-show-json-output-for-multipath-nexth.patch
  - ip-fix-link-type-and-vlan-oneline-output.patch
  - ip-fix-oneline-output.patch
  - ip-iplink_ipoib.c-Remove-extra-spaces.patch
  - ip-link-Fix-indenting-in-help-text.patch
  - ip-link-xstats-fix-TX-IGMP-reports-string.patch
  - ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  - ip-route-ignore-ENOENT-during-save-if-RT_TABLE_MAIN-.patch
  - ip-xfrm-Fix-help-messages.patch
  - ip-xfrm-if_id-ve-value-is-error.patch
  - ip-xfrm-limit-the-length-of-the-security-context-nam.patch
  - ip-xfrm-update-man-page-on-setting-printing-XFRMA_IF.patch
  - ipmonitor-Fix-recvmsg-with-ancillary-data.patch
  - json_print-Remove-declaration-without-implementation.patch
  - lib-bpf-Fix-and-simplify-bpf_mnt_check_target.patch
  - lib-bpf_legacy-avoid-to-pass-invalid-argument-to-clo.patch
  - lib-bpf_legacy-fix-missing-socket-close-when-connect.patch
  - lib-bpf_legacy-treat-0-as-a-valid-file-descriptor.patch
  - lib-fs-avoid-double-call-to-mkdir-on-make_path.patch
  - lib-ll_map-cache-alternative-names.patch
  - lib-namespace-fix-ip-all-netns-return-code.patch
  - libnetlink-check-error-handler-is-present-before-a-c.patch
  - man-bridge-fix-the-typo-to-change-c-lor-into-c-olor-.patch
  - man-fix-syntax-for-ip-link-property.patch
  - nexthop-fix-error-reporting-in-filter-dump.patch
  - nexthop-fix-memory-leak-in-add_nh_group_attr.patch
  - q_cake-Fix-incorrect-printing-of-signed-values-in-cl.patch
  - rdma-Fix-statistics-bind-unbing-argument-handling.patch
  - rdma-stat-fix-return-code.patch
  - rdma-stat-initialize-ret-in-stat_qp_show_parse_cb.patch
  - ss-fix-end-of-line-printing-in-misc-ss.c.patch
  - ss-fix-fallback-to-procfs-for-raw-sockets.patch
  - tc-action-fix-time-values-output-in-JSON-format.patch
  - tc-fix-segmentation-fault-on-gact-action.patch
  - tc-fix-warning-in-tc-q_pie.c.patch
  - tc-flower-fix-output-for-ip-tos-and-ttl.patch
  - tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch
  - tc-fq_codel-fix-missing-statistic-in-JSON-output.patch
  - tc-pie-add-dq_rate_estimator-option.patch
  - tc-u32-Fix-key-folding-in-sample-option.patch
  - tc_util-add-an-option-to-print-masked-numbers-with-w.patch
  - tc_util-add-functions-for-big-endian-masked-numbers.patch
  - tc_util-introduce-a-function-to-print-JSON-non-JSON-.patch
  - testsuite-Fix-line-count-test.patch
  - tipc-fixed-a-compile-warning-in-tipc-link.c.patch
  - xfrm-also-check-for-ipv6-state-in-xfrm_state_keep.patch
  - xfrm-not-try-to-delete-ipcomp-states-when-using-dele.patch
  * drop non-upstream patches obsoleted by rebase to 5.14:
  - sync-UAPI-header-copies-with-SLE15-SP2.patch
  - examples-fix-bashisms-in-example-script.patch
  * refresh remaining patches:
  - lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
  - split-link-and-compile-steps-for-binaries.patch
  - tc-f_flower-fix-port-range-parsing.patch
  - xfrm-support-displaying-transformations-used-for-Mob.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633435201">- follow-up fixes backported from upstream (bsc#1191316):
  tree-wide-fix-some-typos-found-by-Lintian.patch
  configure-restore-backward-compatibility.patch
  man-ip-link-remove-double-of.patch
  mptcp-unbreak-JSON-endpoint-list.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1705492800">- upgrade to upstream version 6.4 (jsc#PED-6820 jsc#PED-6844)
  * for detailed list of changes between 5.14 and 6.4, see Factory
    package changelog
  * replace upstream tarball and signature
  * update specfile with changes from Factory package
  * drop mainline backports contained in 6.4:
  - tree-wide-fix-some-typos-found-by-Lintian.patch
  - configure-restore-backward-compatibility.patch
  - man-ip-link-remove-double-of.patch
  - iptuntap-fix-multi-queue-flag-display.patch
  - tc-f_flower-fix-port-range-parsing.patch
  - lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
  - mptcp-unbreak-JSON-endpoint-list.patch
  * drop non-upstream patch obsoleted by rebase to 6.4:
  - xfrm-support-displaying-transformations-used-for-Mob.patch
  * refresh remaining patches:
  - adjust-installation-directories-for-openSUSE-SLE.patch
  - use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  - add-explicit-typecast-to-avoid-gcc-warning.patch
  - split-link-and-compile-steps-for-binaries.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1713873600">- iproute2.spec: ensure execute permissions of supplied scripts
  (fixes IBS build failure)</changelog>
  <changelog author="mkubecek@suse.cz" date="1713873601">- support display of bound but unconnected sockets (bsc#1204562)
  * ss-Add-support-for-dumping-TCP-bound-inactive-socket.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1742385600">- avoid spurious cgroup warning (bsc#1234383):
  - ss-Tone-down-cgroup-path-resolution.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1746792000">- add post-6.4 follow-up fixes (bsc#1243005):
  * bpf-fix-warning-from-basename.patch
  * bridge-fdb-add-an-error-print-for-unknown-command.patch
  * bridge-vni-Accept-del-command.patch
  * bridge-vni-Fix-duplicate-group-and-remote-error-mess.patch
  * bridge-vni-Fix-vni-filter-help-strings.patch
  * bridge-vni-Remove-dead-code-in-group-argument-parsin.patch
  * bridge-vni-Report-duplicate-vni-argument-using-dupar.patch
  * f_flower-Treat-port-0-as-valid.patch
  * genl-ctrl.c-spelling-fix-in-error-message.patch
  * ip-Add-missing-echo-option-to-usage.patch
  * ip-Add-missing-stats-command-to-usage.patch
  * ip-ipmroute-use-preferred_family-to-get-prefix.patch
  * ip-remove-non-existent-amt-subcommand-from-usage.patch
  * iplink-fix-fd-leak-when-playing-with-netns.patch
  * iplink_bridge-fix-incorrect-root-id-dump.patch
  * iplink_xstats-spelling-fix-in-error-message.patch
  * iproute2-fix-type-incompatibility-in-ifstat.c.patch
  * iproute2-prevent-memory-leak.patch
  * libnetlink-validate-nlmsg-header-length-first.patch
  * man-devlink-resource-add-missing-words-in-the-exampl.patch
  * mnl_utils-sanitize-incoming-netlink-payload-size-in-.patch
  * rdma-Fix-help-information-of-rdma-resource.patch
  * rdma-Fix-the-error-of-accessing-string-variable-outs.patch
  * rdma-use-print_XXX-instead-of-COLOR_NONE.patch
  * ss-Fix-socket-type-check-in-packet_show_line.patch
  * ss-fix-directory-leak-when-T-option-is-used.patch
  * ss-mptcp-display-info-counters-as-unsigned.patch
  * ss-prevent-Process-column-from-being-printed-unless-.patch
  * tc-taprio-don-t-print-netlink-attributes-which-weren.patch
  * tc-taprio-fix-JSON-output-when-TCA_TAPRIO_ATTR_ADMIN.patch
  * tc-taprio-fix-parsing-of-fp-option-when-it-doesn-t-a.patch
  * vdpa-consume-device_features-parameter.patch
- add to blacklist:
  * af0ea2cd0b9e (duplicate of 92eac7e4bf14)
- refresh:
  * ss-Add-support-for-dumping-TCP-bound-inactive-socket.patch
  * add-explicit-typecast-to-avoid-gcc-warning.patch
  * use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1746878400">- add post-6.4 follow-up fix (bsc#1243005)
  * ss-show-extra-info-when-processes-is-not-used.patch</changelog>
  <changelog author="sjaeckel@suse.de" date="1756296000">- devlink: support ipsec_crypto and ipsec_packet cap (bsc#1248660)
  * add Update-kernel-headers.patch
  * add devlink-Support-setting-port-function-ipsec_crypto-c.patch
  * add devlink-Support-setting-port-function-ipsec_packet-c.patch
  * refresh ss-Tone-down-cgroup-path-resolution.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1757592000">- sync UAPI header copies with SLE15-SP6 kernel
  * sync-UAPI-header-copies-with-SLE15-SP6.patch
- drop Update-kernel-headers.patch
  (no longer needed with full UAPI sync)</changelog>
  <changelog author="mkubecek@suse.cz" date="1757592001">- add post-6.4 follow-up fixes (bsc#1243005)
  * patches/bond-fix-stack-smash-in-xstats.patch
  * patches/tc-gred-fix-debug-print.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1775649600">- add CVE fix (CVE-2024-58251 bsc#1254324)
  * ss-escape-characters-in-command-name.patch</changelog>
</package>
<package pkgid="7df40a40a605973be4f55728f88f20ae2351d3ec0506d4c7e4e3c715ee0885a6" name="libnetlink-devel" arch="x86_64">
  <version epoch="0" ver="6.4" rel="150600.7.9.1"/>
  <changelog author="mkubecek@suse.cz" date="1547726400">- RDMA backport for SLE15-SP1 (fate#326021 bsc#1104003):
  sync-UAPI-header-copies-with-SLE15-SP1.patch
  bpf-remove-obsolete-samples.patch
  json_writer-add-new-json-handlers-null-float-with-fo.patch
  rdma-Move-per-device-handler-function-to-generic-cod.patch
  rdma-Rename-free-function-to-be-rd_cleanup.patch
  rdma-Rename-rd_free_devmap-to-be-rd_free.patch
  rdma-Move-link-execution-logic-to-common-code.patch
  rdma-Add-option-to-provide-sign-for-the-port-number.patch
  rdma-Make-visible-the-number-of-arguments.patch
  rdma-Set-pointer-to-device-name-position.patch
  rdma-Add-filtering-infrastructure.patch
  rdma-Add-resource-tracking-summary.patch
  rdma-Add-QP-resource-tracking-information.patch
  rdma-Avoid-memory-leak-for-skipper-resource.patch
  rdma-Add-CM_ID-resource-tracking-information.patch
  rdma-Add-CQ-resource-tracking-information.patch
  rdma-Add-MR-resource-tracking-information.patch
  rdma-Add-PD-resource-tracking-information.patch
  rdma-Print-net-device-name-and-index-for-RDMA-device.patch
  rdma-print-driver-resource-attributes.patch
  rdma-sync-some-IP-headers-with-glibc.patch
  rdma-Fix-for-ineffective-check-in-add_filter.patch
  rdma-Don-t-pass-garbage-to-rd_check_is_filtered.patch
  rdma-Refresh-help-section-of-resource-information.patch
  rdma-Introduce-command-execution-helper-with-require.patch
  rdma-Add-an-option-to-rename-IB-device-interface.patch
  rdma-Add-print-of-link-CapabilityMask2-flags.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1547726401">- VF stats backport for SLE15-SP1 (fate#326021 bsc#1104003):
  ip-Add-violation-counters-to-VF-statisctics.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1569499200">- upgrade to upstream version 5.3 (jsc#SLE-7290)
  * replace upstream tarball and signature
  * import specfile updates from Factory package
  * drop mainline backports contained in 5.3:
  - bpf-remove-obsolete-samples.patch
  - utils-return-default-family-when-rtm_family-is-not-R.patch
  - Really-fix-get_addr-and-get_prefix-error-messages.patch
  - iproute-Add-support-for-extended-ack-to-rtnl_talk.patch
  - ss-enclose-IPv6-address-in-brackets.patch
  - lib-fix-extended-ack-with-and-without-libmnl.patch
  - lib-need-to-pass-LIBMNL-flag.patch
  - tc-ip-more-Makefile-updates-for-LIBMNL.patch
  - change-how-Config-is-used-in-Makefile-s.patch
  - lib-Dump-ext-ack-string-by-default.patch
  - bpf-unbreak-libelf-linkage-for-bpf-obj-loader.patch
  - libnetlink-Fix-extack-attribute-parsing.patch
  - ifstat-Fix-memleak-in-dump_kern_db-for-json-output.patch
  - ss-Fix-potential-memleak-in-unix_stats_print.patch
  - utils-Move-BIT-macro-to-common-header.patch
  - rdma-Add-basic-infrastructure-for-RDMA-tool.patch
  - rdma-Add-dev-object.patch
  - rdma-Add-link-object.patch
  - rdma-Add-json-and-pretty-outputs.patch
  - rdma-Implement-json-output-for-dev-object.patch
  - rdma-Add-json-output-to-link-object.patch
  - rdma-Add-initial-manual-for-the-tool.patch
  - iproute-Fix-for-missing-Oifs-display.patch
  - ipmaddr-Avoid-accessing-uninitialized-data.patch
  - rdma-fix-duplicate-initialization-in-port_names.patch
  - ss-Fix-for-added-diag-support-check.patch
  - link_gre6-Fix-for-changing-tclass-flowlabel.patch
  - iplink-check-for-message-truncation-in-iplink_get.patch
  - iplink-double-the-buffer-size-also-in-iplink_get.patch
  - tc-actions-store-and-dump-correct-length-of-user-coo.patch
  - json_writer-add-new-json-handlers-null-float-with-fo.patch
  - doc-remove-obsolete-ip-tunnels-documentation.patch
  - doc-remove-outdated-ss-documentation.patch
  - doc-remove-outdated-arpd-documentation.patch
  - doc-remove-outdated-nstat-rtstat-documentation.patch
  - doc-remove-outdated-tc-filters-documentation.patch
  - doc-remove-outdated-IPv6-flow-label-document.patch
  - doc-drop-old-ip-command-documentation.patch
  - ss-Distinguish-between-IPv4-and-IPv6-wildcard-socket.patch
  - ip-maddr-fix-filtering-by-device.patch
  - man-add-additional-explainations-for-ss.patch
  - lib-libnetlink-re-malloc-buff-if-size-is-not-enough.patch
  - lib-libnetlink-update-rtnl_talk-to-support-malloc-bu.patch
  - tc-move-action-cookie-print-out-of-the-stats-if.patch
  - tc-remove-action-cookie-len-from-printout.patch
  - link_gre6-Detect-invalid-encaplimit-values.patch
  - man-tc-csum.8-Fix-inconsistency-in-example-descripti.patch
  - tc-bash-completion-add-missing-classid-keyword.patch
  - tc-fix-command-tc-actions-del-hang-issue.patch
  - gre-ip6tnl-tunnel-Fix-noencap-support.patch
  - Restore-no-print-directory-option-for-silent-builds.patch
  - iplink-Validate-minimum-tx-rate-is-less-than-maximum.patch
  - ipaddress-Make-sure-VF-min-max-rate-API-is-supported.patch
  - rdma-Reduce-scope-of-_dev_map_lookup-call.patch
  - rdma-Protect-dev_map_lookup-from-wrong-input.patch
  - rdma-Move-per-device-handler-function-to-generic-cod.patch
  - rdma-Fix-misspelled-SYS_IMAGE_GUID.patch
  - rdma-Check-that-port-index-exists-before-operate-on-.patch
  - rdma-Rename-free-function-to-be-rd_cleanup.patch
  - rdma-Rename-rd_free_devmap-to-be-rd_free.patch
  - rdma-Move-link-execution-logic-to-common-code.patch
  - rdma-Add-option-to-provide-sign-for-the-port-number.patch
  - rdma-Make-visible-the-number-of-arguments.patch
  - rdma-Add-filtering-infrastructure.patch
  - rdma-Set-pointer-to-device-name-position.patch
  - rdma-Add-resource-tracking-summary.patch
  - rdma-Add-QP-resource-tracking-information.patch
  - rdma-Check-return-value-of-strdup-call.patch
  - README-update-location-of-git-repositories-remove-br.patch
  - Remove-leftovers-from-removed-Latex-documentation.patch
  - README-re-add-updated-information-link.patch
  - rdma-Avoid-memory-leak-for-skipper-resource.patch
  - ip-link-Fix-use-after-free-in-nl_get_ll_addr_len.patch
  - ip-address-Fix-negative-prints-of-large-TX-rate-limi.patch
  - devlink-fix-port-new-monitoring-message-typo.patch
  - rdma-Add-CM_ID-resource-tracking-information.patch
  - rdma-Add-CQ-resource-tracking-information.patch
  - rdma-Add-MR-resource-tracking-information.patch
  - rdma-Add-PD-resource-tracking-information.patch
  - rdma-Ignore-unknown-netlink-attributes.patch
  - bridge-fix-typo-in-hairpin-error-message.patch
  - iproute-Abort-if-nexthop-cannot-be-parsed.patch
  - iplink_vrf-Save-device-index-from-response-for-retur.patch
  - rdma-Print-net-device-name-and-index-for-RDMA-device.patch
  - rdma-print-driver-resource-attributes.patch
  - rdma-sync-some-IP-headers-with-glibc.patch
  - devlink-CTRL_ATTR_FAMILY_ID-is-a-u16.patch
  - ip-Add-violation-counters-to-VF-statisctics.patch
  - ip-route-Fix-segfault-with-many-nexthops.patch
  - rdma-Fix-representation-of-PortInfo-CapabilityMask.patch
  - macsec-fix-off-by-one-when-parsing-attributes.patch
  - rdma-Fix-for-ineffective-check-in-add_filter.patch
  - ip-route-Fix-for-memleak-in-error-path.patch
  - rdma-Don-t-pass-garbage-to-rd_check_is_filtered.patch
  - ip-route-Fix-parse_encap_seg6-srh-parsing.patch
  - rdma-Refresh-help-section-of-resource-information.patch
  - tc-f_u32-allow-skip_hw-and-skip_sw-flags-to-be-last.patch
  - ip-route-Fix-nexthop-encap-parsing.patch
  - rdma-Fix-broken-32-bit-compilation.patch
  - rdma-Fix-incorrectly-handled-NLA-validation.patch
  - rdma-Introduce-command-execution-helper-with-require.patch
  - rdma-Add-an-option-to-rename-IB-device-interface.patch
  - rdma-Add-print-of-link-CapabilityMask2-flags.patch
  * drop non-upstream patches obsoleted by rebase to 5.3:
  - sync-UAPI-header-copies-with-SLE15-SP1.patch
  - man-fix-documentation-references-in-manual-pages.patch
  * refresh remaining patches:
  - adjust-installation-directories-for-openSUSE-SLE.patch
  - use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  - add-explicit-typecast-to-avoid-gcc-warning.patch
  - xfrm-support-displaying-transformations-used-for-Mob.patch
  - split-link-and-compile-steps-for-binaries.patch
  - examples-fix-bashisms-in-example-script.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1578484800">- follow-up fixes backported from upstream (bsc#1160242):
  bpf-replace-snprintf-with-asprintf-when-dealing-with.patch
  bridge-Deduplicate-vlan-show-functions.patch
  bridge-Fix-BRIDGE_VLAN_TUNNEL-attribute-sizes.patch
  bridge-Fix-src_vni-argument-in-man-page.patch
  bridge-Fix-tunnelshow-json-output.patch
  bridge-Fix-typo-in-error-messages.patch
  bridge-Fix-vni-printing.patch
  devlink-Add-a-new-time-stamp-format-for-health-repor.patch
  devlink-Add-helper-for-left-justification-print.patch
  devlink-Fix-fmsg-nesting-in-non-JSON-output.patch
  devlink-Fix-inconsistency-between-command-input-and-.patch
  devlink-Left-justification-on-FMSG-output.patch
  devlink-Print-health-reporter-s-dump-time-stamp-in-a.patch
  devlink-allow-full-range-of-resource-sizes.patch
  devlink-require-resource-parameters.patch
  introduce-print_masked_u16-and-print_masked_u32.patch
  ip-fix-ip-route-show-json-output-for-multipath-nexth.patch
  ip-xfrm-if_id-ve-value-is-error.patch
  json_print-Remove-declaration-without-implementation.patch
  sync-UAPI-header-copies-with-SLE15-SP2.patch
  tc-fix-segmentation-fault-on-gact-action.patch
  tc-fix-warning-in-tc-q_pie.c.patch
  tc-flower-fix-output-for-ip-tos-and-ttl.patch
  tc-fq_codel-fix-missing-statistic-in-JSON-output.patch
  tc-pie-add-dq_rate_estimator-option.patch
  tc_util-add-an-option-to-print-masked-numbers-with-w.patch
  tc_util-add-functions-for-big-endian-masked-numbers.patch
  tc_util-introduce-a-function-to-print-JSON-non-JSON-.patch
  testsuite-Fix-line-count-test.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1578484801">- support alternative names as we already support them in SLE15-SP2
  kernel (jsc#SLE-7290):
  lib-ll_map-cache-alternative-names.patch
  ip-add-support-for-alternative-name-addition-deletio.patch
  ip-allow-to-use-alternative-names-as-handle.patch
  ip-fix-oneline-output.patch</changelog>
  <changelog author="kukuk@suse.com" date="1586347200">- Move arpd into own subpackage to avoid libdb dependency
  [jsc#SLE-12189]</changelog>
  <changelog author="mkubecek@suse.cz" date="1587729600">- follow-up fixes backported from upstream (bsc#1160242):
  ip-fix-link-type-and-vlan-oneline-output.patch
  ip-xfrm-Fix-help-messages.patch
  ip-link-xstats-fix-TX-IGMP-reports-string.patch
  erspan-set-erspan_ver-to-1-by-default.patch
  xfrm-not-try-to-delete-ipcomp-states-when-using-dele.patch
  nexthop-fix-error-reporting-in-filter-dump.patch
- refresh:
  xfrm-support-displaying-transformations-used-for-Mob.patch
- fix duplicated patch metadata:
  introduce-print_masked_u16-and-print_masked_u32.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633089600">- follow-up fixes backported from upstream (bsc#1160242):
  ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633348800">- follow-up fixes backported from upstream (bsc#1160242):
  ss-fix-end-of-line-printing-in-misc-ss.c.patch
  xfrm-also-check-for-ipv6-state-in-xfrm_state_keep.patch
  bridge-Fix-typo.patch
  bridge-Fix-output-with-empty-vlan-lists.patch
  tc-action-fix-time-values-output-in-JSON-format.patch
  Revert-bpf-replace-snprintf-with-asprintf-when-deali.patch
  bpf-Fixes-a-snprintf-truncation-warning.patch
  tipc-fixed-a-compile-warning-in-tipc-link.c.patch
  ip-xfrm-update-man-page-on-setting-printing-XFRMA_IF.patch
  bridge-fdb-show-fix-fdb-entry-state-output-for-json-.patch
  ip-link-Fix-indenting-in-help-text.patch
  ip-iplink_ipoib.c-Remove-extra-spaces.patch
  devlink-fix-uninitialized-warning.patch
  bridge-fix-string-length-warning.patch
  f_u32-fix-compiler-gcc-10-compiler-warning.patch
  rdma-Fix-statistics-bind-unbing-argument-handling.patch
  lib-namespace-fix-ip-all-netns-return-code.patch
  lib-bpf-Fix-and-simplify-bpf_mnt_check_target.patch
  lib-fs-avoid-double-call-to-mkdir-on-make_path.patch
  q_cake-Fix-incorrect-printing-of-signed-values-in-cl.patch
  ip-xfrm-limit-the-length-of-the-security-context-nam.patch
  erspan-fix-JSON-output.patch
  devlink-always-check-strslashrsplit-return-value.patch
  nexthop-fix-memory-leak-in-add_nh_group_attr.patch
  rdma-stat-initialize-ret-in-stat_qp_show_parse_cb.patch
  rdma-stat-fix-return-code.patch
  lib-bpf_legacy-treat-0-as-a-valid-file-descriptor.patch
  lib-bpf_legacy-fix-missing-socket-close-when-connect.patch
  ip-drop-2-char-command-assumption.patch
  man-fix-syntax-for-ip-link-property.patch
  lib-bpf_legacy-avoid-to-pass-invalid-argument-to-clo.patch
  ip-route-ignore-ENOENT-during-save-if-RT_TABLE_MAIN-.patch
  libnetlink-check-error-handler-is-present-before-a-c.patch
  ipmonitor-Fix-recvmsg-with-ancillary-data.patch
  tc-u32-Fix-key-folding-in-sample-option.patch
  man-bridge-fix-the-typo-to-change-c-lor-into-c-olor-.patch
  ss-fix-fallback-to-procfs-for-raw-sockets.patch
  iptuntap-fix-multi-queue-flag-display.patch
  tc-f_flower-fix-port-range-parsing.patch
  lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
- refresh:
  ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633435200">- upgrade to upstream version 5.14 (jsc#SLE-17360 jsc#SLE-18994
  jsc#SLE-19271)
  * replace upstream tarball and signature
  * update specfile with changes from Factory package
  * drop mainline backports contained in 5.14:
  - Revert-bpf-replace-snprintf-with-asprintf-when-deali.patch
  - bpf-Fixes-a-snprintf-truncation-warning.patch
  - bpf-replace-snprintf-with-asprintf-when-dealing-with.patch
  - bridge-Deduplicate-vlan-show-functions.patch
  - bridge-Fix-BRIDGE_VLAN_TUNNEL-attribute-sizes.patch
  - bridge-Fix-output-with-empty-vlan-lists.patch
  - bridge-Fix-src_vni-argument-in-man-page.patch
  - bridge-Fix-tunnelshow-json-output.patch
  - bridge-Fix-typo-in-error-messages.patch
  - bridge-Fix-typo.patch
  - bridge-Fix-vni-printing.patch
  - bridge-fdb-show-fix-fdb-entry-state-output-for-json-.patch
  - bridge-fix-string-length-warning.patch
  - devlink-Add-a-new-time-stamp-format-for-health-repor.patch
  - devlink-Add-helper-for-left-justification-print.patch
  - devlink-Fix-fmsg-nesting-in-non-JSON-output.patch
  - devlink-Fix-inconsistency-between-command-input-and-.patch
  - devlink-Left-justification-on-FMSG-output.patch
  - devlink-Print-health-reporter-s-dump-time-stamp-in-a.patch
  - devlink-allow-full-range-of-resource-sizes.patch
  - devlink-always-check-strslashrsplit-return-value.patch
  - devlink-fix-uninitialized-warning.patch
  - devlink-require-resource-parameters.patch
  - erspan-fix-JSON-output.patch
  - erspan-set-erspan_ver-to-1-by-default.patch
  - f_u32-fix-compiler-gcc-10-compiler-warning.patch
  - introduce-print_masked_u16-and-print_masked_u32.patch
  - ip-add-support-for-alternative-name-addition-deletio.patch
  - ip-allow-to-use-alternative-names-as-handle.patch
  - ip-drop-2-char-command-assumption.patch
  - ip-fix-ip-route-show-json-output-for-multipath-nexth.patch
  - ip-fix-link-type-and-vlan-oneline-output.patch
  - ip-fix-oneline-output.patch
  - ip-iplink_ipoib.c-Remove-extra-spaces.patch
  - ip-link-Fix-indenting-in-help-text.patch
  - ip-link-xstats-fix-TX-IGMP-reports-string.patch
  - ip-link_gre-Do-not-send-ERSPAN-attributes-to-GRE-tun.patch
  - ip-route-ignore-ENOENT-during-save-if-RT_TABLE_MAIN-.patch
  - ip-xfrm-Fix-help-messages.patch
  - ip-xfrm-if_id-ve-value-is-error.patch
  - ip-xfrm-limit-the-length-of-the-security-context-nam.patch
  - ip-xfrm-update-man-page-on-setting-printing-XFRMA_IF.patch
  - ipmonitor-Fix-recvmsg-with-ancillary-data.patch
  - json_print-Remove-declaration-without-implementation.patch
  - lib-bpf-Fix-and-simplify-bpf_mnt_check_target.patch
  - lib-bpf_legacy-avoid-to-pass-invalid-argument-to-clo.patch
  - lib-bpf_legacy-fix-missing-socket-close-when-connect.patch
  - lib-bpf_legacy-treat-0-as-a-valid-file-descriptor.patch
  - lib-fs-avoid-double-call-to-mkdir-on-make_path.patch
  - lib-ll_map-cache-alternative-names.patch
  - lib-namespace-fix-ip-all-netns-return-code.patch
  - libnetlink-check-error-handler-is-present-before-a-c.patch
  - man-bridge-fix-the-typo-to-change-c-lor-into-c-olor-.patch
  - man-fix-syntax-for-ip-link-property.patch
  - nexthop-fix-error-reporting-in-filter-dump.patch
  - nexthop-fix-memory-leak-in-add_nh_group_attr.patch
  - q_cake-Fix-incorrect-printing-of-signed-values-in-cl.patch
  - rdma-Fix-statistics-bind-unbing-argument-handling.patch
  - rdma-stat-fix-return-code.patch
  - rdma-stat-initialize-ret-in-stat_qp_show_parse_cb.patch
  - ss-fix-end-of-line-printing-in-misc-ss.c.patch
  - ss-fix-fallback-to-procfs-for-raw-sockets.patch
  - tc-action-fix-time-values-output-in-JSON-format.patch
  - tc-fix-segmentation-fault-on-gact-action.patch
  - tc-fix-warning-in-tc-q_pie.c.patch
  - tc-flower-fix-output-for-ip-tos-and-ttl.patch
  - tc-fq_codel-fix-class-stat-deficit-is-signed-int.patch
  - tc-fq_codel-fix-missing-statistic-in-JSON-output.patch
  - tc-pie-add-dq_rate_estimator-option.patch
  - tc-u32-Fix-key-folding-in-sample-option.patch
  - tc_util-add-an-option-to-print-masked-numbers-with-w.patch
  - tc_util-add-functions-for-big-endian-masked-numbers.patch
  - tc_util-introduce-a-function-to-print-JSON-non-JSON-.patch
  - testsuite-Fix-line-count-test.patch
  - tipc-fixed-a-compile-warning-in-tipc-link.c.patch
  - xfrm-also-check-for-ipv6-state-in-xfrm_state_keep.patch
  - xfrm-not-try-to-delete-ipcomp-states-when-using-dele.patch
  * drop non-upstream patches obsoleted by rebase to 5.14:
  - sync-UAPI-header-copies-with-SLE15-SP2.patch
  - examples-fix-bashisms-in-example-script.patch
  * refresh remaining patches:
  - lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
  - split-link-and-compile-steps-for-binaries.patch
  - tc-f_flower-fix-port-range-parsing.patch
  - xfrm-support-displaying-transformations-used-for-Mob.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1633435201">- follow-up fixes backported from upstream (bsc#1191316):
  tree-wide-fix-some-typos-found-by-Lintian.patch
  configure-restore-backward-compatibility.patch
  man-ip-link-remove-double-of.patch
  mptcp-unbreak-JSON-endpoint-list.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1705492800">- upgrade to upstream version 6.4 (jsc#PED-6820 jsc#PED-6844)
  * for detailed list of changes between 5.14 and 6.4, see Factory
    package changelog
  * replace upstream tarball and signature
  * update specfile with changes from Factory package
  * drop mainline backports contained in 6.4:
  - tree-wide-fix-some-typos-found-by-Lintian.patch
  - configure-restore-backward-compatibility.patch
  - man-ip-link-remove-double-of.patch
  - iptuntap-fix-multi-queue-flag-display.patch
  - tc-f_flower-fix-port-range-parsing.patch
  - lib-bpf_legacy-fix-bpffs-mount-when-sys-fs-bpf-exist.patch
  - mptcp-unbreak-JSON-endpoint-list.patch
  * drop non-upstream patch obsoleted by rebase to 6.4:
  - xfrm-support-displaying-transformations-used-for-Mob.patch
  * refresh remaining patches:
  - adjust-installation-directories-for-openSUSE-SLE.patch
  - use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch
  - add-explicit-typecast-to-avoid-gcc-warning.patch
  - split-link-and-compile-steps-for-binaries.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1713873600">- iproute2.spec: ensure execute permissions of supplied scripts
  (fixes IBS build failure)</changelog>
  <changelog author="mkubecek@suse.cz" date="1713873601">- support display of bound but unconnected sockets (bsc#1204562)
  * ss-Add-support-for-dumping-TCP-bound-inactive-socket.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1742385600">- avoid spurious cgroup warning (bsc#1234383):
  - ss-Tone-down-cgroup-path-resolution.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1746792000">- add post-6.4 follow-up fixes (bsc#1243005):
  * bpf-fix-warning-from-basename.patch
  * bridge-fdb-add-an-error-print-for-unknown-command.patch
  * bridge-vni-Accept-del-command.patch
  * bridge-vni-Fix-duplicate-group-and-remote-error-mess.patch
  * bridge-vni-Fix-vni-filter-help-strings.patch
  * bridge-vni-Remove-dead-code-in-group-argument-parsin.patch
  * bridge-vni-Report-duplicate-vni-argument-using-dupar.patch
  * f_flower-Treat-port-0-as-valid.patch
  * genl-ctrl.c-spelling-fix-in-error-message.patch
  * ip-Add-missing-echo-option-to-usage.patch
  * ip-Add-missing-stats-command-to-usage.patch
  * ip-ipmroute-use-preferred_family-to-get-prefix.patch
  * ip-remove-non-existent-amt-subcommand-from-usage.patch
  * iplink-fix-fd-leak-when-playing-with-netns.patch
  * iplink_bridge-fix-incorrect-root-id-dump.patch
  * iplink_xstats-spelling-fix-in-error-message.patch
  * iproute2-fix-type-incompatibility-in-ifstat.c.patch
  * iproute2-prevent-memory-leak.patch
  * libnetlink-validate-nlmsg-header-length-first.patch
  * man-devlink-resource-add-missing-words-in-the-exampl.patch
  * mnl_utils-sanitize-incoming-netlink-payload-size-in-.patch
  * rdma-Fix-help-information-of-rdma-resource.patch
  * rdma-Fix-the-error-of-accessing-string-variable-outs.patch
  * rdma-use-print_XXX-instead-of-COLOR_NONE.patch
  * ss-Fix-socket-type-check-in-packet_show_line.patch
  * ss-fix-directory-leak-when-T-option-is-used.patch
  * ss-mptcp-display-info-counters-as-unsigned.patch
  * ss-prevent-Process-column-from-being-printed-unless-.patch
  * tc-taprio-don-t-print-netlink-attributes-which-weren.patch
  * tc-taprio-fix-JSON-output-when-TCA_TAPRIO_ATTR_ADMIN.patch
  * tc-taprio-fix-parsing-of-fp-option-when-it-doesn-t-a.patch
  * vdpa-consume-device_features-parameter.patch
- add to blacklist:
  * af0ea2cd0b9e (duplicate of 92eac7e4bf14)
- refresh:
  * ss-Add-support-for-dumping-TCP-bound-inactive-socket.patch
  * add-explicit-typecast-to-avoid-gcc-warning.patch
  * use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1746878400">- add post-6.4 follow-up fix (bsc#1243005)
  * ss-show-extra-info-when-processes-is-not-used.patch</changelog>
  <changelog author="sjaeckel@suse.de" date="1756296000">- devlink: support ipsec_crypto and ipsec_packet cap (bsc#1248660)
  * add Update-kernel-headers.patch
  * add devlink-Support-setting-port-function-ipsec_crypto-c.patch
  * add devlink-Support-setting-port-function-ipsec_packet-c.patch
  * refresh ss-Tone-down-cgroup-path-resolution.patch</changelog>
  <changelog author="mkubecek@suse.cz" date="1757592000">- sync UAPI header copies with SLE15-SP6 kernel
  * sync-UAPI-header-copies-with-SLE15-SP6.patch
- drop Update-kernel-headers.patch
  (no longer needed with full UAPI sync)</changelog>
  <changelog author="mkubecek@suse.cz" date="1757592001">- add post-6.4 follow-up fixes (bsc#1243005)
  * patches/bond-fix-stack-smash-in-xstats.patch
  * patches/tc-gred-fix-debug-print.patch</changelog>
</package>
<package pkgid="4609745cc893e24f64ff8c6b6a6bf8fc903d22dfc5c6dcbf72549d687da74155" name="libnfsidmap0" arch="x86_64">
  <version epoch="0" ver="0.26" rel="150600.28.12.1"/>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
  <changelog author="nfbrown@suse.com" date="1648123200">- Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
  Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch
  Ensure "sloppy" is added correctly for newer kernels.  Particularly
  required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels.
  (boo#1197297)</changelog>
  <changelog author="nfbrown@suse.com" date="1648814400">- Add 0023-cache.c-removed-a-couple-warning.patch
  Fix compilation with new glibc (SLE15-SP4)
  (bsc#1197788)</changelog>
  <changelog author="nfbrown@suse.com" date="1655208000">- 0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)</changelog>
  <changelog author="nfbrown@suse.com" date="1662379200">- add 0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
  Fix nfsdcltrack bug that affected non-x86 archs.
  (bsc#1202627)</changelog>
  <changelog author="nfbrown@suse.com" date="1673697600">- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Avoid modprobe errors when sysctl is not installed.
  (bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
  config.
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
  <changelog author="nfbrown@suse.com" date="1680091200">- Add 0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
  boo#1157881
- Add 0029-nfsd.man-fix-typo-in-section-on-scope.patch
  bsc#1209859
- Allow scope to be set in sysconfig: NFSD_SCOPE</changelog>
  <changelog author="nfbrown@suse.com" date="1686052800">- Add 0030-systemd-use-correct-modprobe-d-directory
  SLE15-SP5 an earlier don't use /usr/lib/modprobe.d
  (bsc#1200710)
- Add 0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
  Avoid unhelpful warning if rpcsec_gss_krb5.ko not installed</changelog>
  <changelog author="nfbrown@suse.com" date="1687867200">- Add 0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
  Inconsistencies in /etc/exports shouldn't be fatal.
  (bsc#1212594)</changelog>
  <changelog author="nfbrown@suse.com" date="1709726400">- Update to 2.6.4, to get many improvements, particularly
  got NFS-over-TLS support
  (bsc#1220075)
  Patches removed because that have been included upstream:
    nsm-headers.patch
    0001-conffile-ignore-empty-environment-variables.patch
    0002-mount-call-setgroups-before-setuid.patch
    0003-nfs-server-generator-handle-noauto-mounts-correctly.patch
    0002-Let-systemd-know-when-rpc.statd-is-needed.patch
    0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
    0007-statd-user-from-sm
    0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
    0009-Convert-remaining-python-scripts-to-python3.patch
    0010-gssd-Fix-locking-for-machine-principal-list.patch
    0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
    0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
    0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
    0014-mountd-update-man-page.patch
    0015-mountd-add-logging-for-authentication-results-for-ac.patch
    0016-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
    0017-mountd-make-default-ttl-settable-by-option.patch
    0018-Replace-all-var-run-with-run.patch
    0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
    0020-mountd-Initialize-logging-early.patch
    0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
    0022-mount.nfs-Fix-the-sloppy-option-processing.patch
    0023-cache.c-removed-a-couple-warning.patch
    0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
    0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
    0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
    0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
    0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
    0029-nfsd.man-fix-typo-in-section-on-scope.patch
    0030-systemd-use-correct-modprobe-d-directory
    0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
    0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
  Patches added from upstream, or to fix build errors:
    0001-exportfs-remove-warning-if-neither-subtree_check-or-.patch
    0002-conffile-don-t-report-error-from-conf_init_file.patch
    0003-conffile-allow-usr-etc-to-provide-any-config-files-e.patch
    0004-fsidd-call-anonymous-sockets-by-their-name-only-don-.patch
    buildfix.patch</changelog>
  <changelog author="nfbrown@suse.com" date="1722427200">- Include source for libnfsidmap 0.26 and build that.
  This is needed for compatability with SLE15-SP5 and earlier
  (bsc#1228159)
  Copied from old nfsidmap package:
    libnfsidmap-0.26.tar.bz2
    idmap-fix-prototype.patch
    idmap-libnfsidmap-export-symbols.patch
    idmap-0001-libnfsidmap-add-options-to-aid-id-mapping-in-multi-d.patch
    idmap-0002-nss_gss_princ_to_ids-and-nss_gss_princ_to_grouplist-.patch
    idmap-0001-Removed-some-unused-and-set-but-not-used-warnings.patch
    idmap-0002-Handle-NULL-names-better.patch
    idmap-0003-Strip-newlines-out-of-IDMAP_LOG-messages.patch
    idmap-0004-onf_parse_line-Ignore-whitespace-at-the-beginning-of.patch
    idmap-0005-nss.c-wrong-check-of-return-value.patch
    idmap-0006-Fixed-a-memory-leak-nss_name_to_gid.patch</changelog>
  <changelog author="ailiop@suse.com" date="1729080000">- nfsd: Revert "nfsd: Remove the ability to enable NFS v2."
  (bsc#1230914)
  - add 0005-Revert-nfsd-Remove-the-ability-to-enable-NFS-v2.patch
- mount.nfs: Revert "mount: Remove NFS v2 support from mount.nfs"
  (bsc#1230914)
  - add 0006-Revert-mount-Remove-NFS-v2-support-from-mount.nfs.patch</changelog>
  <changelog author="ailiop@suse.com" date="1741089600">- enable ldap support for nfsidmap (bsc#1226533)</changelog>
  <changelog author="ailiop@suse.com" date="1741608000">- rpc.idmapd: nfsopen() failures should not be fatal (bsc#1239165)
  - add 0007-rpc.idmapd-nfsopen-failures-should-not-be-fatal.patch</changelog>
  <changelog author="ailiop@suse.com" date="1744372800">- gssd: add support for an "allowed-enctypes" option in nfs.conf
  (bsc#1240899)
  - add 0008-gssd-add-support-for-an-allowed-enctypes-option-in-n.patch</changelog>
</package>
<package pkgid="30e08baadfc6db2fb6763753a328c9a8c250dfe52bc93b78e889f69f8396553b" name="libnfsidmap0" arch="src">
  <version epoch="0" ver="0.26" rel="150600.28.19.1"/>
  <changelog author="scabrero@suse.de" date="1752494400">- Split from nfs-utils into its own spec and changelog file
  (bsc#1246505)</changelog>
</package>
<package pkgid="4c1d2e0797a02871169fe73b3277bb7caaeaf2222756c27994ceed6313bbee70" name="libnfsidmap0" arch="x86_64">
  <version epoch="0" ver="0.26" rel="150600.28.19.1"/>
  <changelog author="scabrero@suse.de" date="1752494400">- Split from nfs-utils into its own spec and changelog file
  (bsc#1246505)</changelog>
</package>
<package pkgid="da146cae68a7660da5f6eb8b32b709512ebb5387b5a5f240cb9db9e6707a815d" name="libnfsidmap1" arch="x86_64">
  <version epoch="0" ver="1.0" rel="150600.28.12.1"/>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
  <changelog author="nfbrown@suse.com" date="1648123200">- Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
  Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch
  Ensure "sloppy" is added correctly for newer kernels.  Particularly
  required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels.
  (boo#1197297)</changelog>
  <changelog author="nfbrown@suse.com" date="1648814400">- Add 0023-cache.c-removed-a-couple-warning.patch
  Fix compilation with new glibc (SLE15-SP4)
  (bsc#1197788)</changelog>
  <changelog author="nfbrown@suse.com" date="1655208000">- 0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)</changelog>
  <changelog author="nfbrown@suse.com" date="1662379200">- add 0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
  Fix nfsdcltrack bug that affected non-x86 archs.
  (bsc#1202627)</changelog>
  <changelog author="nfbrown@suse.com" date="1673697600">- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Avoid modprobe errors when sysctl is not installed.
  (bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
  config.
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
  <changelog author="nfbrown@suse.com" date="1680091200">- Add 0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
  boo#1157881
- Add 0029-nfsd.man-fix-typo-in-section-on-scope.patch
  bsc#1209859
- Allow scope to be set in sysconfig: NFSD_SCOPE</changelog>
  <changelog author="nfbrown@suse.com" date="1686052800">- Add 0030-systemd-use-correct-modprobe-d-directory
  SLE15-SP5 an earlier don't use /usr/lib/modprobe.d
  (bsc#1200710)
- Add 0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
  Avoid unhelpful warning if rpcsec_gss_krb5.ko not installed</changelog>
  <changelog author="nfbrown@suse.com" date="1687867200">- Add 0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
  Inconsistencies in /etc/exports shouldn't be fatal.
  (bsc#1212594)</changelog>
  <changelog author="nfbrown@suse.com" date="1709726400">- Update to 2.6.4, to get many improvements, particularly
  got NFS-over-TLS support
  (bsc#1220075)
  Patches removed because that have been included upstream:
    nsm-headers.patch
    0001-conffile-ignore-empty-environment-variables.patch
    0002-mount-call-setgroups-before-setuid.patch
    0003-nfs-server-generator-handle-noauto-mounts-correctly.patch
    0002-Let-systemd-know-when-rpc.statd-is-needed.patch
    0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
    0007-statd-user-from-sm
    0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
    0009-Convert-remaining-python-scripts-to-python3.patch
    0010-gssd-Fix-locking-for-machine-principal-list.patch
    0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
    0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
    0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
    0014-mountd-update-man-page.patch
    0015-mountd-add-logging-for-authentication-results-for-ac.patch
    0016-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
    0017-mountd-make-default-ttl-settable-by-option.patch
    0018-Replace-all-var-run-with-run.patch
    0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
    0020-mountd-Initialize-logging-early.patch
    0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
    0022-mount.nfs-Fix-the-sloppy-option-processing.patch
    0023-cache.c-removed-a-couple-warning.patch
    0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
    0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
    0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
    0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
    0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
    0029-nfsd.man-fix-typo-in-section-on-scope.patch
    0030-systemd-use-correct-modprobe-d-directory
    0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
    0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
  Patches added from upstream, or to fix build errors:
    0001-exportfs-remove-warning-if-neither-subtree_check-or-.patch
    0002-conffile-don-t-report-error-from-conf_init_file.patch
    0003-conffile-allow-usr-etc-to-provide-any-config-files-e.patch
    0004-fsidd-call-anonymous-sockets-by-their-name-only-don-.patch
    buildfix.patch</changelog>
  <changelog author="nfbrown@suse.com" date="1722427200">- Include source for libnfsidmap 0.26 and build that.
  This is needed for compatability with SLE15-SP5 and earlier
  (bsc#1228159)
  Copied from old nfsidmap package:
    libnfsidmap-0.26.tar.bz2
    idmap-fix-prototype.patch
    idmap-libnfsidmap-export-symbols.patch
    idmap-0001-libnfsidmap-add-options-to-aid-id-mapping-in-multi-d.patch
    idmap-0002-nss_gss_princ_to_ids-and-nss_gss_princ_to_grouplist-.patch
    idmap-0001-Removed-some-unused-and-set-but-not-used-warnings.patch
    idmap-0002-Handle-NULL-names-better.patch
    idmap-0003-Strip-newlines-out-of-IDMAP_LOG-messages.patch
    idmap-0004-onf_parse_line-Ignore-whitespace-at-the-beginning-of.patch
    idmap-0005-nss.c-wrong-check-of-return-value.patch
    idmap-0006-Fixed-a-memory-leak-nss_name_to_gid.patch</changelog>
  <changelog author="ailiop@suse.com" date="1729080000">- nfsd: Revert "nfsd: Remove the ability to enable NFS v2."
  (bsc#1230914)
  - add 0005-Revert-nfsd-Remove-the-ability-to-enable-NFS-v2.patch
- mount.nfs: Revert "mount: Remove NFS v2 support from mount.nfs"
  (bsc#1230914)
  - add 0006-Revert-mount-Remove-NFS-v2-support-from-mount.nfs.patch</changelog>
  <changelog author="ailiop@suse.com" date="1741089600">- enable ldap support for nfsidmap (bsc#1226533)</changelog>
  <changelog author="ailiop@suse.com" date="1741608000">- rpc.idmapd: nfsopen() failures should not be fatal (bsc#1239165)
  - add 0007-rpc.idmapd-nfsopen-failures-should-not-be-fatal.patch</changelog>
  <changelog author="ailiop@suse.com" date="1744372800">- gssd: add support for an "allowed-enctypes" option in nfs.conf
  (bsc#1240899)
  - add 0008-gssd-add-support-for-an-allowed-enctypes-option-in-n.patch</changelog>
</package>
<package pkgid="54ad197adceb0f8b7bd6ee7509f21163aa56a041f1d5957f9afe73527c0dd0ab" name="libnfsidmap1" arch="x86_64">
  <version epoch="0" ver="1.0" rel="150600.28.19.1"/>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
  <changelog author="nfbrown@suse.com" date="1648123200">- Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
  Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch
  Ensure "sloppy" is added correctly for newer kernels.  Particularly
  required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels.
  (boo#1197297)</changelog>
  <changelog author="nfbrown@suse.com" date="1648814400">- Add 0023-cache.c-removed-a-couple-warning.patch
  Fix compilation with new glibc (SLE15-SP4)
  (bsc#1197788)</changelog>
  <changelog author="nfbrown@suse.com" date="1655208000">- 0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)</changelog>
  <changelog author="nfbrown@suse.com" date="1662379200">- add 0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
  Fix nfsdcltrack bug that affected non-x86 archs.
  (bsc#1202627)</changelog>
  <changelog author="nfbrown@suse.com" date="1673697600">- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Avoid modprobe errors when sysctl is not installed.
  (bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
  config.
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
  <changelog author="nfbrown@suse.com" date="1680091200">- Add 0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
  boo#1157881
- Add 0029-nfsd.man-fix-typo-in-section-on-scope.patch
  bsc#1209859
- Allow scope to be set in sysconfig: NFSD_SCOPE</changelog>
  <changelog author="nfbrown@suse.com" date="1686052800">- Add 0030-systemd-use-correct-modprobe-d-directory
  SLE15-SP5 an earlier don't use /usr/lib/modprobe.d
  (bsc#1200710)
- Add 0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
  Avoid unhelpful warning if rpcsec_gss_krb5.ko not installed</changelog>
  <changelog author="nfbrown@suse.com" date="1687867200">- Add 0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
  Inconsistencies in /etc/exports shouldn't be fatal.
  (bsc#1212594)</changelog>
  <changelog author="nfbrown@suse.com" date="1709726400">- Update to 2.6.4, to get many improvements, particularly
  got NFS-over-TLS support
  (bsc#1220075)
  Patches removed because that have been included upstream:
    nsm-headers.patch
    0001-conffile-ignore-empty-environment-variables.patch
    0002-mount-call-setgroups-before-setuid.patch
    0003-nfs-server-generator-handle-noauto-mounts-correctly.patch
    0002-Let-systemd-know-when-rpc.statd-is-needed.patch
    0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
    0007-statd-user-from-sm
    0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
    0009-Convert-remaining-python-scripts-to-python3.patch
    0010-gssd-Fix-locking-for-machine-principal-list.patch
    0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
    0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
    0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
    0014-mountd-update-man-page.patch
    0015-mountd-add-logging-for-authentication-results-for-ac.patch
    0016-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
    0017-mountd-make-default-ttl-settable-by-option.patch
    0018-Replace-all-var-run-with-run.patch
    0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
    0020-mountd-Initialize-logging-early.patch
    0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
    0022-mount.nfs-Fix-the-sloppy-option-processing.patch
    0023-cache.c-removed-a-couple-warning.patch
    0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
    0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
    0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
    0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
    0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
    0029-nfsd.man-fix-typo-in-section-on-scope.patch
    0030-systemd-use-correct-modprobe-d-directory
    0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
    0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
  Patches added from upstream, or to fix build errors:
    0001-exportfs-remove-warning-if-neither-subtree_check-or-.patch
    0002-conffile-don-t-report-error-from-conf_init_file.patch
    0003-conffile-allow-usr-etc-to-provide-any-config-files-e.patch
    0004-fsidd-call-anonymous-sockets-by-their-name-only-don-.patch
    buildfix.patch</changelog>
  <changelog author="nfbrown@suse.com" date="1722427200">- Include source for libnfsidmap 0.26 and build that.
  This is needed for compatability with SLE15-SP5 and earlier
  (bsc#1228159)
  Copied from old nfsidmap package:
    libnfsidmap-0.26.tar.bz2
    idmap-fix-prototype.patch
    idmap-libnfsidmap-export-symbols.patch
    idmap-0001-libnfsidmap-add-options-to-aid-id-mapping-in-multi-d.patch
    idmap-0002-nss_gss_princ_to_ids-and-nss_gss_princ_to_grouplist-.patch
    idmap-0001-Removed-some-unused-and-set-but-not-used-warnings.patch
    idmap-0002-Handle-NULL-names-better.patch
    idmap-0003-Strip-newlines-out-of-IDMAP_LOG-messages.patch
    idmap-0004-onf_parse_line-Ignore-whitespace-at-the-beginning-of.patch
    idmap-0005-nss.c-wrong-check-of-return-value.patch
    idmap-0006-Fixed-a-memory-leak-nss_name_to_gid.patch</changelog>
  <changelog author="ailiop@suse.com" date="1729080000">- nfsd: Revert "nfsd: Remove the ability to enable NFS v2."
  (bsc#1230914)
  - add 0005-Revert-nfsd-Remove-the-ability-to-enable-NFS-v2.patch
- mount.nfs: Revert "mount: Remove NFS v2 support from mount.nfs"
  (bsc#1230914)
  - add 0006-Revert-mount-Remove-NFS-v2-support-from-mount.nfs.patch</changelog>
  <changelog author="ailiop@suse.com" date="1741089600">- enable ldap support for nfsidmap (bsc#1226533)</changelog>
  <changelog author="ailiop@suse.com" date="1741608000">- rpc.idmapd: nfsopen() failures should not be fatal (bsc#1239165)
  - add 0007-rpc.idmapd-nfsopen-failures-should-not-be-fatal.patch</changelog>
  <changelog author="ailiop@suse.com" date="1744372800">- gssd: add support for an "allowed-enctypes" option in nfs.conf
  (bsc#1240899)
  - add 0008-gssd-add-support-for-an-allowed-enctypes-option-in-n.patch</changelog>
  <changelog author="scabrero@suse.de" date="1752494400">- Split legacy libnfsidmap0 into a separate spec file (bsc#1246505)</changelog>
  <changelog author="ailiop@suse.com" date="1773230400">- Fix access checks when mounting subdirectories in NFSv3
  (CVE-2025-12801 bsc#1259204)
  - add Fix-access-checks-when-mounting-subdirectories-in-NFSv3.patch
  - add NFS-export-symlink-vulnerability-fix.patch
  - add configure-check-for-rpc_gss_seccreate.patch
  - add mountd-Minor-refactor-of-get_rootfh.patch
  - add mountd-Separate-lookup-of-the-exported-directory-and-the-m.patch
  - add support-Add-a-mini-library-to-extract-and-apply-RPC-creden.patch</changelog>
</package>
<package pkgid="9c478deea8813c8561903c29b197c3f8d6b6d9247d9a675652003d96db7a61d9" name="libnghttp2-14" arch="x86_64">
  <version epoch="0" ver="1.64.0" rel="150700.3.3.1"/>
  <changelog author="dmueller@suse.com" date="1661169600">- update to 1.49.0:
  * https://nghttp2.org/blog/2022/08/22/nghttp2-v1-49-0/</changelog>
  <changelog author="dmueller@suse.com" date="1663934400">- disable asio by default as it is deprecated by upstream and
  will be removed in the next release</changelog>
  <changelog author="dmueller@suse.com" date="1664020800">- update to 1.50.0:
  * https://nghttp2.org/blog/2022/09/21/nghttp2-v1-50-0/
  This release adds
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation which disables
  checking leading and trailing white spaces against HTTP field value.</changelog>
  <changelog author="dmueller@suse.com" date="1668686400">- update to 1.51.0:
  * https://nghttp2.org/blog/2022/11/13/nghttp2-v1-51-0/
  This release fixes affinity-cookie-stickiness parameter handling.</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- update to 1.52.0:
  * https://nghttp2.org/blog/2023/02/13/nghttp2-v1-52-0/
  * sphinx_rtd_theme has been removed from the repository
    and archive.
  * The deprecated Python bindings has been removed.
  * The deprecated libnghttp2_asio has been removed.
  * llhttp and neverbleed have been updated.
  * This release fixes the bug that stalls TLS connection.
  * This release adds more http3 integration tests.
- drop nghttp2-remove-python-build.patch: obsolete as the code got removed</changelog>
  <changelog author="mpluskal@suse.com" date="1684411200">- Update to version 1.53.0:
  * https://nghttp2.org/blog/2023/05/10/nghttp2-v1-53-0/</changelog>
  <changelog author="dmueller@suse.com" date="1687262400">- update to 1.54.0:
  * nghttpx: Consistent error handling and use of high-level API
  * h2load: Fix http3 upload stall
  * h2load: Use std::chrono::steady_clock for quic timestamp</changelog>
  <changelog author="dmueller@suse.com" date="1689422400">- update to 1.55.1:
  * Fix memory leak (bsc#1215713)
    This commit fixes memory leak that happens when
    PUSH_PROMISE or HEADERS frame cannot be sent, and
    nghttp2_on_stream_close_callback fails with a fatal error.
    For example, if GOAWAY frame has been received, a
    HEADERS frame that opens new stream cannot be sent.
    This issue has already been made public via CVE-2023-35945
    by envoyproxy/envoy project.  During embargo period, the
    patch to fix this bug was accidentally submitted to
    nghttp2/nghttp2 repository [2]. And they decided to
    disclose CVE early.  I was notified just 1.5 hours
    before disclosure.  I had no time to respond.
    PoC described in [1] is quite simple, but I think it is
    not enough to trigger this bug.  While it is true that
    receiving GOAWAY prevents a client from opening new stream,
    and nghttp2 enters error handling branch, in order to cause
    the memory leak, nghttp2_session_close_stream function
    must return a fatal error.
    NGHTTP2_ERR_NOMEM, as its name suggests, indicates out of
    memory.  It is unlikely that a process gets short of
    memory with this simple PoC scenario unless application
    does something memory heavy processing.
  * NGHTTP2_ERR_CALLBACK_FAILURE is returned from application
    defined callback function (nghttp2_on_stream_close_callback, in
    this case), which indicates something fatal happened inside a
    callback, and a connection must be closed immediately without
    any further action.  As nghttp2_on_stream_close_error_callback
    documentation says, any error code other than 0 or
    NGHTTP2_ERR_CALLBACK_FAILURE is treated as fatal
    error code.  More specifically, it is treated as if
    NGHTTP2_ERR_CALLBACK_FAILURE is returned.  I guess that
    envoy returns
    NGHTTP2_ERR_CALLBACK_FAILURE or other error code which is
    translated into NGHTTP2_ERR_CALLBACK_FAILURE.
    https://github.com/envoyproxy/envoy/security/advisories/GHSA-
    jfxv-29pc-x22r</changelog>
  <changelog author="pgajdos@suse.com" date="1697457600">- version update to 1.57.0 [bsc#1216174]
  1.57.0
  * Fixes CVE-2023-44487 (bsc#1216123)
  * Bump ngtcp2 by @tatsuhiro-t in #1944
  * Add dependabot to update actions by @tatsuhiro-t in #1946
  * Bump golang.org/x/net to v0.15.0 by @tatsuhiro-t in #1950
  * Bump actions/setup-go from 3 to 4 by @dependabot in #1948
  * Bump actions/checkout from 3 to 4 by @dependabot in #1949
  * Bump actions/upload-artifact from 1 to 3 by @dependabot in #1947
  * docker: Bump base image to debian 12 by @tatsuhiro-t in #1951
  * nghttpx: Header field name must be lowercase by @tatsuhiro-t in #1953
  * Bump quictls by @tatsuhiro-t in #1945
  * Apps fix by @tatsuhiro-t in #1957
  * nghttpx: Fix bug that --single-process does not work by @tatsuhiro-t in #1958
  * Fix clang-format by @tatsuhiro-t in #1959
  * Rework session management by @tatsuhiro-t in #1961
  1.56.0
  * doc: Bump boringssl by @tatsuhiro-t in #1928
  * Fix memory leak by @tatsuhiro-t in #1930
  * Return void by @tatsuhiro-t in #1931
  * nghttpx: Rework sending and receiving ECN bits by @tatsuhiro-t in #1934
  * CMSG_DATA does not necessarily return an aligned pointer by @tatsuhiro-t in #1935
  * Bump quictls by @tatsuhiro-t in #1937
  * Bump ngtcp2 and its dependencies by @tatsuhiro-t in #1939
  * nghttpx: Simplify std::unique_ptr get and release by @tatsuhiro-t in #1940
  * Bump llhttp to 926c982942eb53a13f01c1e9e6b19bd3b196e7dd by @tatsuhiro-t in #1941
  * Bump libbpf to v1.2.2 by @tatsuhiro-t in #1942
  * Update Dockerfile by @tatsuhiro-t in #1943</changelog>
  <changelog author="dmueller@suse.com" date="1699358400">- add keyring for gpg validation
- spec file cleanups</changelog>
  <changelog author="dmueller@suse.com" date="1700568000">- fix unversioned provides to be in sync with nghttp3</changelog>
  <changelog author="dmueller@suse.com" date="1700913600">- update to 1.58.0:
  * Update manual pages
  * Bump neverbleed
  * Bump ngtcp2
  * Prefer clock_gettime if __CYGWIN__ defined
  * Do not require strict c++ mode
  * nghttpx: Stricter transfer-encoding checks
  * Refactor character comparison
  * Integration servertester h3
  * integration: Enable http3 test with cmake</changelog>
  <changelog author="dmueller@suse.com" date="1706443200">- update to 1.59.0:
  * Update bash_completion
  * h2load: Fix bug that ttfb is not recorded if h3 stream
    has no data
  * h2load: Consider all h2 HEADERS when counting bytes and
    recording ttfb
  * h2load: Ignore 1xx status code
  * nghttpd: Free SSL_CTX on exit
  * nghttpx: OpenSSL needs SSL_CTX_set_recv_max_early_data
  * nghttpx: OpenSSL needs SSL_CTX_set_recv_max_early_data
  * cmake: Require OpenSSL &gt;= 1.1.1
  * Add nghttp2_select_alpn and deprecate
    nghttp2_select_next_protocol
  * nghttpx: Add --alpn-list and deprecate --npn-list
  * h2load: Add --alpn-list and deprecate --npn-list
  * Remove NPN
  * src: Support building with aws-lc
  * Avoid detecting OpenSSL 3.2 as quictls
  * Use nghttp3_pri_parse_priority added since nghttp3 v1.1.0
  * h2load: Fix IPv6 address in :authority
  * h2load: Fix IPv6 address in :authority
  * nghttpx: Propagate stream priority from backend to
    frontend
  * nghttpx: Propagate stream priority from backend to
    frontend
  * Merge pull request #1991 from nghttp2/get-and-parse-
    extpri
  * Add API to get and parse RFC 9218 priority
  * nghttpx: Prefer __FILE_NAME__ if defined</changelog>
  <changelog author="pgajdos@suse.com" date="1710763200">- version update to 1.60.0
  * makerelease.sh: Speed up git submodule
  * Speed up git clone
  * build(deps): bump actions/cache from 3 to 4
  * Fixing the build and install trees
  * build(deps): bump microsoft/setup-msbuild from 1 to 2
  * nghttpx: Set ocsp response to SSL in case of boringssl
  * Run with python3
  * src: Certificate Compression with boringssl
  * Fix missing newline
  * Switch to aws lc
  * Libbrotli fixup
  * Deprecate RFC 7540 priorities (aka stream dependencies)
  * Let dependabot manage go modules
  * build(deps): bump golang.org/x/net from 0.20.0 to 0.21.0
  * integration-tests: Omit unused parameters
  * Munit
  * Introduce nghttp2_ssize API
  * Move deprecated warning upfront
  * Describe RFC 7540 priorities deprecation plan
  * Apps migrate nghttp2 ssize
  * src: Remove unused functions
  * Reconsider ssize t usage in src
  * Use GitHub private vulnerability reporting
  * Move security policy to GitHub standard location
  * Bump mruby to 3.3.0
  * Bump llhttp to 48588093ca4219b5f689acfc9ebea9e4c8c37663
  * h2load: Add --sni option
  * Bump ngtcp2 dependencies
  * mruby: Adopt deprecation of mrbc_ prefix
  * neverbleed: Define _GNU_SOURCE for pthread_setaffinity_np
  * bpf: Pre-expand aes key
  * mruby: Exclude mrdb gem which causes nghttpx to crash
  * nghttpx: Reuse EVP_CIPHER_CTX for QUIC connection ID encryption
  * Run apt-get update before install
  * src: Deal with the case that send_quantum &lt; max_udp_payload_size
  * nghttpx: Remove SHRPX_QUIC_MAX_UDP_PAYLOAD_SIZE
  * Fix build when AI_NUMERICSERV is undefined
- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="mpluskal@suse.com" date="1710763201">- Update keyring with current key</changelog>
  <changelog author="adam.majer@suse.de" date="1712145600">- gcc7.patch: Fix compilation for SLE-15 (jsc#PED-8206)</changelog>
  <changelog author="pgajdos@suse.com" date="1712232000">- version update to 1.61.0
  * Fixes CVE-2024-28182 [bsc#1221399]
  * nghttpx: Shutdown h3 stream read with trailer as well by @tatsuhiro-t in #2087
  * Checkout with submodules by @jonaski in #2093
  * Respect BUILD_STATIC_LIBS and add option for tests by @jonaski in #2092
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.22.0 by @dependabot in #2097
  * Workaround llvm issue on github ubuntu runner by @tatsuhiro-t in #2098
  * docker: Use copy --link by @tatsuhiro-t in #2099
  * Nghttpx header idle timeout by @tatsuhiro-t in #2100
  * nghttpx: Fix frontend-header-timeout does not work in config file by @tatsuhiro-t in #2101
  * Rewrite hexdump by @tatsuhiro-t in #2102
  * Switch to distroless/base-nossl by @tatsuhiro-t in #2103
  * Bump ngtcp2 by @tatsuhiro-t in #2105
  * nghttpx: Simplify quic connection close handling by @tatsuhiro-t in #2106
  * build(deps): bump github.com/quic-go/quic-go from 0.41.0 to 0.42.0 by @dependabot in #2107
  * autotools: Use tar-ustar automake option by @tatsuhiro-t in #2108
  * Automate release process by @tatsuhiro-t in #2109
  * autotools: Switch to tar-pax by @tatsuhiro-t in #2110
  * nghttpx: Drop a UDP datagram from well-known port by @tatsuhiro-t in #2111
  * nghttpx: Fix port byte order by @tatsuhiro-t in #2112
  * h2load: Allow host header to be overridden by @tatsuhiro-t in #2113
  * nghttpx: Rework QUIC stateless reset packet size by @tatsuhiro-t in #2114
  * nghttpx: More QUIC prohibited ports by @tatsuhiro-t in #2115
  * Add actions/stale by @tatsuhiro-t in #2116
  * nghttpx: Discard UDP datagram that is too short to be a valid QUIC packet by @tatsuhiro-t in #2117
  * nghttp: Support SSLKEYLOGFILE by @tatsuhiro-t in #2119
  * No rfc7540 priority fix by @tatsuhiro-t in #2120
  * Further reduce Stateless reset emission by @tatsuhiro-t in #2122
  * nghttpx: Rework Connection ID construction by @tatsuhiro-t in #2124
  * Nghttpx faster worker lookup by @tatsuhiro-t in #2125
  * nghttpx: Split thread into worker_process and thread by @tatsuhiro-t in #2126
  * bpf: Drop bad QUIC packet by @tatsuhiro-t in #2127
  * cmake: check SSL_provide_quic_data when ENABLE_HTTP3 is ON by @jimmy-park in #2128
  * nghttpx: Allocate 3 bits for QUIC configuration in Connection ID by @tatsuhiro-t in #2129
  * nghttpx: Migrate to ares_getaddrinfo by @tatsuhiro-t in #2132
  * Bump munit by @tatsuhiro-t in #2131
  * nghttpx: Fix error message by @tatsuhiro-t in #2133
  * nghttpd: Fix read stall by @tatsuhiro-t in #2134</changelog>
  <changelog author="dmueller@suse.com" date="1718625600">- update to 1.62.1:
  * nghttpx: Fix batch UDP QUIC packet dropped on GRO read
- update to 1.62.0:
  * nghttpx: Fix QUIC stateless reset stack buffer overflow
  * Require c-ares &gt;= 1.16.0 for ares_getaddrinfo
  * Require C++20 compiler
  * Adopt std::to_array and remove make_array
  * nghttpx: Define APIEndpoints separately
  * nghttpx: Do not send error/status body when method is HEAD
  * nghttpx: Fix alignment issues in BlockAllocator
  * nghttpx: Simplify parameter declaration for ipc_fd functions
  * nghttpx: Add extent to ipc_fd explicitly
  * Make make_byte_ref return std::span
  * Make util::decode_hex return std::span
  * Rewrite util::parse_uint
  * Let base64::decode return std::span
  * Refactor StringRef
  * Stringref refactor c str and str
  * Add StringRef literal operator and remove StringRef::from_lit
  * Make StringRef(const std::string&amp;) implicit
  * Add http2::make_field family functions
  * Remove std::string conversion operator from StringRef
  * Optimize StringRef comparisons against c-string
  * Pack more quic pkt
  * nghttpx: Dynamic GSO failover
  * Refactor ImmutableString
  * nghttpx: Refactor QUIC data path
  * nghttpx: Fix inherited TCP port comparison
  * make_websocket_accept_token: Lesser conversions
  * Add http3::make_field family functions
  * Remove unnecessary namespace qualifications
  * Refactor http utils
  * Refactor streq
  * Remove util::streq and let StringRef operator== deal with it
  * Update the link for the Prefix.pdf document. fix #2178
  * Introduce typed nghttp2_min and nghttp2_max
- drop gcc7.patch (obsolete, we require C++20 now)</changelog>
  <changelog author="pgajdos@suse.com" date="1731412800">- version update to 1.64.0
  1.64.0
  * Change clang-format options by @tatsuhiro-t in #2240
  * build(deps): bump github.com/quic-go/quic-go from 0.46.0 to 0.47.0 by @dependabot in #2243
  * build(deps): bump golang.org/x/net from 0.28.0 to 0.29.0 by @dependabot in #2244
  * nghttp2_map: Port ngtcp2 changes by @tatsuhiro-t in #2245
  * h2load: Fix UDP datagram send/recv metric by @tatsuhiro-t in #2248
  * build(deps): bump golang.org/x/net from 0.29.0 to 0.30.0 by @dependabot in #2252
  * fix race condition on h1 connection close by @TuxInvader in #2249
  * Gha ubuntu 24.04 by @tatsuhiro-t in #2254
  * GHA: Run tests for i686-w64-mingw32 host by @tatsuhiro-t in #2255
  * cmake: Fix c-ares v1.34.0 version detection failure by @tatsuhiro-t in #2256
  * fix: -Wextra-semi errors in nghttp2_helper.h by @codebytere in #2258
  * clang-format macros that do not need semicolon at the end by @tatsuhiro-t in #2259
  * Remove extra semicolons by @tatsuhiro-t in #2260
  * Bump ngtcp2 and its dependencies by @tatsuhiro-t in #2261
  * Do not allow '@' in :authority or host field values by @tatsuhiro-t in #2262
  * h2load: GRO buffer size should be 64KiB by @tatsuhiro-t in #2263
  * Bump libbpf to v1.4.6 by @tatsuhiro-t in #2264
  * Update nghttp2_check_authority doc by @tatsuhiro-t in #2265
  1.63.0
  * Bump libbpf to v1.4.2 by @tatsuhiro-t in #2191
  * build(deps): bump golang.org/x/net from 0.24.0 to 0.25.0 by @dependabot in #2193
  * nghttpx: Fix batch UDP QUIC packet dropped on GRO read by @tatsuhiro-t in #2196
  * CMakeLists.txt: allow to compile the C only lib without CXX compiler by @ThomasDevoogdt in #2200
  * build(deps): bump github.com/quic-go/quic-go from 0.43.1 to 0.44.0 by @dependabot in #2197
  * Fix compiler versions in readme by @ryandesign in #2203
  * build(deps): bump golang.org/x/net from 0.25.0 to 0.26.0 by @dependabot in #2205
  * build(deps): bump github.com/quic-go/quic-go from 0.44.0 to 0.45.0 by @dependabot in #2206
  * Bump ngtcp2 and its dependencies by @tatsuhiro-t in #2207
  * build(deps): bump docker/build-push-action from 5 to 6 by @dependabot in #2208
  * Add wolfSSL support by @tatsuhiro-t in #2209
  * Append --shallow-submodules to git clone --recursive by @tatsuhiro-t in #2210
  * Always append options to extra options by @tatsuhiro-t in #2211
  * build(deps): bump github.com/quic-go/quic-go from 0.45.0 to 0.45.1 by @dependabot in #2213
  * Disable dependency tracking by @tatsuhiro-t in #2214
  * Fix Dockerfile.android build failure by @tatsuhiro-t in #2215
  * Fix UDP_GRO struct cmsghdr data type by @tatsuhiro-t in #2216
  * GHA: Suppress warnings by @tatsuhiro-t in #2217
  * Fix levenshtein initialization by @tatsuhiro-t in #2218
  * build(deps): bump golang.org/x/net from 0.26.0 to 0.27.0 by @dependabot in #2220
  * Undefine NGHTTP2_NO_SSIZE_T if BUILDING_NGHTTP2 is defined by @tatsuhiro-t in #2224
  * Bump clang format by @tatsuhiro-t in #2226
  * Suppress old compiler error by @tatsuhiro-t in #2228
  * build(deps): bump github.com/quic-go/quic-go from 0.45.1 to 0.45.2 by @dependabot in #2229
  * build(deps): bump golang.org/x/net from 0.27.0 to 0.28.0 by @dependabot in #2231
  * build(deps): bump github.com/quic-go/quic-go from 0.45.2 to 0.46.0 by @dependabot in #2232
  * Bump ngtcp2 and its dependencies by @tatsuhiro-t in #2236
  * Bump libbpf to v1.4.5 by @tatsuhiro-t in #2237
  * Update go by @tatsuhiro-t in #2238
  * levenshtein: Use size_t by @tatsuhiro-t in #2239</changelog>
  <changelog author="pgajdos@suse.com" date="1774008000">- added patches
  CVE-2026-27135: assertion failure due to missing state validation can lead to DoS (bsc#1259845)
  * nghttp2-CVE-2026-27135.patch</changelog>
</package>
<package pkgid="dc01c2adb4a3d721811a5baace46729b62c6edd24719ba8b325d3a8747dc721c" name="libnghttp2-14-32bit" arch="x86_64">
  <version epoch="0" ver="1.64.0" rel="150700.3.3.1"/>
  <changelog author="dmueller@suse.com" date="1661169600">- update to 1.49.0:
  * https://nghttp2.org/blog/2022/08/22/nghttp2-v1-49-0/</changelog>
  <changelog author="dmueller@suse.com" date="1663934400">- disable asio by default as it is deprecated by upstream and
  will be removed in the next release</changelog>
  <changelog author="dmueller@suse.com" date="1664020800">- update to 1.50.0:
  * https://nghttp2.org/blog/2022/09/21/nghttp2-v1-50-0/
  This release adds
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation which disables
  checking leading and trailing white spaces against HTTP field value.</changelog>
  <changelog author="dmueller@suse.com" date="1668686400">- update to 1.51.0:
  * https://nghttp2.org/blog/2022/11/13/nghttp2-v1-51-0/
  This release fixes affinity-cookie-stickiness parameter handling.</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- update to 1.52.0:
  * https://nghttp2.org/blog/2023/02/13/nghttp2-v1-52-0/
  * sphinx_rtd_theme has been removed from the repository
    and archive.
  * The deprecated Python bindings has been removed.
  * The deprecated libnghttp2_asio has been removed.
  * llhttp and neverbleed have been updated.
  * This release fixes the bug that stalls TLS connection.
  * This release adds more http3 integration tests.
- drop nghttp2-remove-python-build.patch: obsolete as the code got removed</changelog>
  <changelog author="mpluskal@suse.com" date="1684411200">- Update to version 1.53.0:
  * https://nghttp2.org/blog/2023/05/10/nghttp2-v1-53-0/</changelog>
  <changelog author="dmueller@suse.com" date="1687262400">- update to 1.54.0:
  * nghttpx: Consistent error handling and use of high-level API
  * h2load: Fix http3 upload stall
  * h2load: Use std::chrono::steady_clock for quic timestamp</changelog>
  <changelog author="dmueller@suse.com" date="1689422400">- update to 1.55.1:
  * Fix memory leak (bsc#1215713)
    This commit fixes memory leak that happens when
    PUSH_PROMISE or HEADERS frame cannot be sent, and
    nghttp2_on_stream_close_callback fails with a fatal error.
    For example, if GOAWAY frame has been received, a
    HEADERS frame that opens new stream cannot be sent.
    This issue has already been made public via CVE-2023-35945
    by envoyproxy/envoy project.  During embargo period, the
    patch to fix this bug was accidentally submitted to
    nghttp2/nghttp2 repository [2]. And they decided to
    disclose CVE early.  I was notified just 1.5 hours
    before disclosure.  I had no time to respond.
    PoC described in [1] is quite simple, but I think it is
    not enough to trigger this bug.  While it is true that
    receiving GOAWAY prevents a client from opening new stream,
    and nghttp2 enters error handling branch, in order to cause
    the memory leak, nghttp2_session_close_stream function
    must return a fatal error.
    NGHTTP2_ERR_NOMEM, as its name suggests, indicates out of
    memory.  It is unlikely that a process gets short of
    memory with this simple PoC scenario unless application
    does something memory heavy processing.
  * NGHTTP2_ERR_CALLBACK_FAILURE is returned from application
    defined callback function (nghttp2_on_stream_close_callback, in
    this case), which indicates something fatal happened inside a
    callback, and a connection must be closed immediately without
    any further action.  As nghttp2_on_stream_close_error_callback
    documentation says, any error code other than 0 or
    NGHTTP2_ERR_CALLBACK_FAILURE is treated as fatal
    error code.  More specifically, it is treated as if
    NGHTTP2_ERR_CALLBACK_FAILURE is returned.  I guess that
    envoy returns
    NGHTTP2_ERR_CALLBACK_FAILURE or other error code which is
    translated into NGHTTP2_ERR_CALLBACK_FAILURE.
    https://github.com/envoyproxy/envoy/security/advisories/GHSA-
    jfxv-29pc-x22r</changelog>
  <changelog author="pgajdos@suse.com" date="1697457600">- version update to 1.57.0 [bsc#1216174]
  1.57.0
  * Fixes CVE-2023-44487 (bsc#1216123)
  * Bump ngtcp2 by @tatsuhiro-t in #1944
  * Add dependabot to update actions by @tatsuhiro-t in #1946
  * Bump golang.org/x/net to v0.15.0 by @tatsuhiro-t in #1950
  * Bump actions/setup-go from 3 to 4 by @dependabot in #1948
  * Bump actions/checkout from 3 to 4 by @dependabot in #1949
  * Bump actions/upload-artifact from 1 to 3 by @dependabot in #1947
  * docker: Bump base image to debian 12 by @tatsuhiro-t in #1951
  * nghttpx: Header field name must be lowercase by @tatsuhiro-t in #1953
  * Bump quictls by @tatsuhiro-t in #1945
  * Apps fix by @tatsuhiro-t in #1957
  * nghttpx: Fix bug that --single-process does not work by @tatsuhiro-t in #1958
  * Fix clang-format by @tatsuhiro-t in #1959
  * Rework session management by @tatsuhiro-t in #1961
  1.56.0
  * doc: Bump boringssl by @tatsuhiro-t in #1928
  * Fix memory leak by @tatsuhiro-t in #1930
  * Return void by @tatsuhiro-t in #1931
  * nghttpx: Rework sending and receiving ECN bits by @tatsuhiro-t in #1934
  * CMSG_DATA does not necessarily return an aligned pointer by @tatsuhiro-t in #1935
  * Bump quictls by @tatsuhiro-t in #1937
  * Bump ngtcp2 and its dependencies by @tatsuhiro-t in #1939
  * nghttpx: Simplify std::unique_ptr get and release by @tatsuhiro-t in #1940
  * Bump llhttp to 926c982942eb53a13f01c1e9e6b19bd3b196e7dd by @tatsuhiro-t in #1941
  * Bump libbpf to v1.2.2 by @tatsuhiro-t in #1942
  * Update Dockerfile by @tatsuhiro-t in #1943</changelog>
  <changelog author="dmueller@suse.com" date="1699358400">- add keyring for gpg validation
- spec file cleanups</changelog>
  <changelog author="dmueller@suse.com" date="1700568000">- fix unversioned provides to be in sync with nghttp3</changelog>
  <changelog author="dmueller@suse.com" date="1700913600">- update to 1.58.0:
  * Update manual pages
  * Bump neverbleed
  * Bump ngtcp2
  * Prefer clock_gettime if __CYGWIN__ defined
  * Do not require strict c++ mode
  * nghttpx: Stricter transfer-encoding checks
  * Refactor character comparison
  * Integration servertester h3
  * integration: Enable http3 test with cmake</changelog>
  <changelog author="dmueller@suse.com" date="1706443200">- update to 1.59.0:
  * Update bash_completion
  * h2load: Fix bug that ttfb is not recorded if h3 stream
    has no data
  * h2load: Consider all h2 HEADERS when counting bytes and
    recording ttfb
  * h2load: Ignore 1xx status code
  * nghttpd: Free SSL_CTX on exit
  * nghttpx: OpenSSL needs SSL_CTX_set_recv_max_early_data
  * nghttpx: OpenSSL needs SSL_CTX_set_recv_max_early_data
  * cmake: Require OpenSSL &gt;= 1.1.1
  * Add nghttp2_select_alpn and deprecate
    nghttp2_select_next_protocol
  * nghttpx: Add --alpn-list and deprecate --npn-list
  * h2load: Add --alpn-list and deprecate --npn-list
  * Remove NPN
  * src: Support building with aws-lc
  * Avoid detecting OpenSSL 3.2 as quictls
  * Use nghttp3_pri_parse_priority added since nghttp3 v1.1.0
  * h2load: Fix IPv6 address in :authority
  * h2load: Fix IPv6 address in :authority
  * nghttpx: Propagate stream priority from backend to
    frontend
  * nghttpx: Propagate stream priority from backend to
    frontend
  * Merge pull request #1991 from nghttp2/get-and-parse-
    extpri
  * Add API to get and parse RFC 9218 priority
  * nghttpx: Prefer __FILE_NAME__ if defined</changelog>
  <changelog author="pgajdos@suse.com" date="1710763200">- version update to 1.60.0
  * makerelease.sh: Speed up git submodule
  * Speed up git clone
  * build(deps): bump actions/cache from 3 to 4
  * Fixing the build and install trees
  * build(deps): bump microsoft/setup-msbuild from 1 to 2
  * nghttpx: Set ocsp response to SSL in case of boringssl
  * Run with python3
  * src: Certificate Compression with boringssl
  * Fix missing newline
  * Switch to aws lc
  * Libbrotli fixup
  * Deprecate RFC 7540 priorities (aka stream dependencies)
  * Let dependabot manage go modules
  * build(deps): bump golang.org/x/net from 0.20.0 to 0.21.0
  * integration-tests: Omit unused parameters
  * Munit
  * Introduce nghttp2_ssize API
  * Move deprecated warning upfront
  * Describe RFC 7540 priorities deprecation plan
  * Apps migrate nghttp2 ssize
  * src: Remove unused functions
  * Reconsider ssize t usage in src
  * Use GitHub private vulnerability reporting
  * Move security policy to GitHub standard location
  * Bump mruby to 3.3.0
  * Bump llhttp to 48588093ca4219b5f689acfc9ebea9e4c8c37663
  * h2load: Add --sni option
  * Bump ngtcp2 dependencies
  * mruby: Adopt deprecation of mrbc_ prefix
  * neverbleed: Define _GNU_SOURCE for pthread_setaffinity_np
  * bpf: Pre-expand aes key
  * mruby: Exclude mrdb gem which causes nghttpx to crash
  * nghttpx: Reuse EVP_CIPHER_CTX for QUIC connection ID encryption
  * Run apt-get update before install
  * src: Deal with the case that send_quantum &lt; max_udp_payload_size
  * nghttpx: Remove SHRPX_QUIC_MAX_UDP_PAYLOAD_SIZE
  * Fix build when AI_NUMERICSERV is undefined
- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="mpluskal@suse.com" date="1710763201">- Update keyring with current key</changelog>
  <changelog author="adam.majer@suse.de" date="1712145600">- gcc7.patch: Fix compilation for SLE-15 (jsc#PED-8206)</changelog>
  <changelog author="pgajdos@suse.com" date="1712232000">- version update to 1.61.0
  * Fixes CVE-2024-28182 [bsc#1221399]
  * nghttpx: Shutdown h3 stream read with trailer as well by @tatsuhiro-t in #2087
  * Checkout with submodules by @jonaski in #2093
  * Respect BUILD_STATIC_LIBS and add option for tests by @jonaski in #2092
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.22.0 by @dependabot in #2097
  * Workaround llvm issue on github ubuntu runner by @tatsuhiro-t in #2098
  * docker: Use copy --link by @tatsuhiro-t in #2099
  * Nghttpx header idle timeout by @tatsuhiro-t in #2100
  * nghttpx: Fix frontend-header-timeout does not work in config file by @tatsuhiro-t in #2101
  * Rewrite hexdump by @tatsuhiro-t in #2102
  * Switch to distroless/base-nossl by @tatsuhiro-t in #2103
  * Bump ngtcp2 by @tatsuhiro-t in #2105
  * nghttpx: Simplify quic connection close handling by @tatsuhiro-t in #2106
  * build(deps): bump github.com/quic-go/quic-go from 0.41.0 to 0.42.0 by @dependabot in #2107
  * autotools: Use tar-ustar automake option by @tatsuhiro-t in #2108
  * Automate release process by @tatsuhiro-t in #2109
  * autotools: Switch to tar-pax by @tatsuhiro-t in #2110
  * nghttpx: Drop a UDP datagram from well-known port by @tatsuhiro-t in #2111
  * nghttpx: Fix port byte order by @tatsuhiro-t in #2112
  * h2load: Allow host header to be overridden by @tatsuhiro-t in #2113
  * nghttpx: Rework QUIC stateless reset packet size by @tatsuhiro-t in #2114
  * nghttpx: More QUIC prohibited ports by @tatsuhiro-t in #2115
  * Add actions/stale by @tatsuhiro-t in #2116
  * nghttpx: Discard UDP datagram that is too short to be a valid QUIC packet by @tatsuhiro-t in #2117
  * nghttp: Support SSLKEYLOGFILE by @tatsuhiro-t in #2119
  * No rfc7540 priority fix by @tatsuhiro-t in #2120
  * Further reduce Stateless reset emission by @tatsuhiro-t in #2122
  * nghttpx: Rework Connection ID construction by @tatsuhiro-t in #2124
  * Nghttpx faster worker lookup by @tatsuhiro-t in #2125
  * nghttpx: Split thread into worker_process and thread by @tatsuhiro-t in #2126
  * bpf: Drop bad QUIC packet by @tatsuhiro-t in #2127
  * cmake: check SSL_provide_quic_data when ENABLE_HTTP3 is ON by @jimmy-park in #2128
  * nghttpx: Allocate 3 bits for QUIC configuration in Connection ID by @tatsuhiro-t in #2129
  * nghttpx: Migrate to ares_getaddrinfo by @tatsuhiro-t in #2132
  * Bump munit by @tatsuhiro-t in #2131
  * nghttpx: Fix error message by @tatsuhiro-t in #2133
  * nghttpd: Fix read stall by @tatsuhiro-t in #2134</changelog>
  <changelog author="dmueller@suse.com" date="1718625600">- update to 1.62.1:
  * nghttpx: Fix batch UDP QUIC packet dropped on GRO read
- update to 1.62.0:
  * nghttpx: Fix QUIC stateless reset stack buffer overflow
  * Require c-ares &gt;= 1.16.0 for ares_getaddrinfo
  * Require C++20 compiler
  * Adopt std::to_array and remove make_array
  * nghttpx: Define APIEndpoints separately
  * nghttpx: Do not send error/status body when method is HEAD
  * nghttpx: Fix alignment issues in BlockAllocator
  * nghttpx: Simplify parameter declaration for ipc_fd functions
  * nghttpx: Add extent to ipc_fd explicitly
  * Make make_byte_ref return std::span
  * Make util::decode_hex return std::span
  * Rewrite util::parse_uint
  * Let base64::decode return std::span
  * Refactor StringRef
  * Stringref refactor c str and str
  * Add StringRef literal operator and remove StringRef::from_lit
  * Make StringRef(const std::string&amp;) implicit
  * Add http2::make_field family functions
  * Remove std::string conversion operator from StringRef
  * Optimize StringRef comparisons against c-string
  * Pack more quic pkt
  * nghttpx: Dynamic GSO failover
  * Refactor ImmutableString
  * nghttpx: Refactor QUIC data path
  * nghttpx: Fix inherited TCP port comparison
  * make_websocket_accept_token: Lesser conversions
  * Add http3::make_field family functions
  * Remove unnecessary namespace qualifications
  * Refactor http utils
  * Refactor streq
  * Remove util::streq and let StringRef operator== deal with it
  * Update the link for the Prefix.pdf document. fix #2178
  * Introduce typed nghttp2_min and nghttp2_max
- drop gcc7.patch (obsolete, we require C++20 now)</changelog>
  <changelog author="pgajdos@suse.com" date="1731412800">- version update to 1.64.0
  1.64.0
  * Change clang-format options by @tatsuhiro-t in #2240
  * build(deps): bump github.com/quic-go/quic-go from 0.46.0 to 0.47.0 by @dependabot in #2243
  * build(deps): bump golang.org/x/net from 0.28.0 to 0.29.0 by @dependabot in #2244
  * nghttp2_map: Port ngtcp2 changes by @tatsuhiro-t in #2245
  * h2load: Fix UDP datagram send/recv metric by @tatsuhiro-t in #2248
  * build(deps): bump golang.org/x/net from 0.29.0 to 0.30.0 by @dependabot in #2252
  * fix race condition on h1 connection close by @TuxInvader in #2249
  * Gha ubuntu 24.04 by @tatsuhiro-t in #2254
  * GHA: Run tests for i686-w64-mingw32 host by @tatsuhiro-t in #2255
  * cmake: Fix c-ares v1.34.0 version detection failure by @tatsuhiro-t in #2256
  * fix: -Wextra-semi errors in nghttp2_helper.h by @codebytere in #2258
  * clang-format macros that do not need semicolon at the end by @tatsuhiro-t in #2259
  * Remove extra semicolons by @tatsuhiro-t in #2260
  * Bump ngtcp2 and its dependencies by @tatsuhiro-t in #2261
  * Do not allow '@' in :authority or host field values by @tatsuhiro-t in #2262
  * h2load: GRO buffer size should be 64KiB by @tatsuhiro-t in #2263
  * Bump libbpf to v1.4.6 by @tatsuhiro-t in #2264
  * Update nghttp2_check_authority doc by @tatsuhiro-t in #2265
  1.63.0
  * Bump libbpf to v1.4.2 by @tatsuhiro-t in #2191
  * build(deps): bump golang.org/x/net from 0.24.0 to 0.25.0 by @dependabot in #2193
  * nghttpx: Fix batch UDP QUIC packet dropped on GRO read by @tatsuhiro-t in #2196
  * CMakeLists.txt: allow to compile the C only lib without CXX compiler by @ThomasDevoogdt in #2200
  * build(deps): bump github.com/quic-go/quic-go from 0.43.1 to 0.44.0 by @dependabot in #2197
  * Fix compiler versions in readme by @ryandesign in #2203
  * build(deps): bump golang.org/x/net from 0.25.0 to 0.26.0 by @dependabot in #2205
  * build(deps): bump github.com/quic-go/quic-go from 0.44.0 to 0.45.0 by @dependabot in #2206
  * Bump ngtcp2 and its dependencies by @tatsuhiro-t in #2207
  * build(deps): bump docker/build-push-action from 5 to 6 by @dependabot in #2208
  * Add wolfSSL support by @tatsuhiro-t in #2209
  * Append --shallow-submodules to git clone --recursive by @tatsuhiro-t in #2210
  * Always append options to extra options by @tatsuhiro-t in #2211
  * build(deps): bump github.com/quic-go/quic-go from 0.45.0 to 0.45.1 by @dependabot in #2213
  * Disable dependency tracking by @tatsuhiro-t in #2214
  * Fix Dockerfile.android build failure by @tatsuhiro-t in #2215
  * Fix UDP_GRO struct cmsghdr data type by @tatsuhiro-t in #2216
  * GHA: Suppress warnings by @tatsuhiro-t in #2217
  * Fix levenshtein initialization by @tatsuhiro-t in #2218
  * build(deps): bump golang.org/x/net from 0.26.0 to 0.27.0 by @dependabot in #2220
  * Undefine NGHTTP2_NO_SSIZE_T if BUILDING_NGHTTP2 is defined by @tatsuhiro-t in #2224
  * Bump clang format by @tatsuhiro-t in #2226
  * Suppress old compiler error by @tatsuhiro-t in #2228
  * build(deps): bump github.com/quic-go/quic-go from 0.45.1 to 0.45.2 by @dependabot in #2229
  * build(deps): bump golang.org/x/net from 0.27.0 to 0.28.0 by @dependabot in #2231
  * build(deps): bump github.com/quic-go/quic-go from 0.45.2 to 0.46.0 by @dependabot in #2232
  * Bump ngtcp2 and its dependencies by @tatsuhiro-t in #2236
  * Bump libbpf to v1.4.5 by @tatsuhiro-t in #2237
  * Update go by @tatsuhiro-t in #2238
  * levenshtein: Use size_t by @tatsuhiro-t in #2239</changelog>
  <changelog author="pgajdos@suse.com" date="1774008000">- added patches
  CVE-2026-27135: assertion failure due to missing state validation can lead to DoS (bsc#1259845)
  * nghttp2-CVE-2026-27135.patch</changelog>
</package>
<package pkgid="3f7b451f66d7ed5c4a086aaf4773141d575006ece4b9de0d15c76dc5b1acbc84" name="libnghttp2-devel" arch="x86_64">
  <version epoch="0" ver="1.64.0" rel="150700.3.3.1"/>
  <changelog author="dmueller@suse.com" date="1661169600">- update to 1.49.0:
  * https://nghttp2.org/blog/2022/08/22/nghttp2-v1-49-0/</changelog>
  <changelog author="dmueller@suse.com" date="1663934400">- disable asio by default as it is deprecated by upstream and
  will be removed in the next release</changelog>
  <changelog author="dmueller@suse.com" date="1664020800">- update to 1.50.0:
  * https://nghttp2.org/blog/2022/09/21/nghttp2-v1-50-0/
  This release adds
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation which disables
  checking leading and trailing white spaces against HTTP field value.</changelog>
  <changelog author="dmueller@suse.com" date="1668686400">- update to 1.51.0:
  * https://nghttp2.org/blog/2022/11/13/nghttp2-v1-51-0/
  This release fixes affinity-cookie-stickiness parameter handling.</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- update to 1.52.0:
  * https://nghttp2.org/blog/2023/02/13/nghttp2-v1-52-0/
  * sphinx_rtd_theme has been removed from the repository
    and archive.
  * The deprecated Python bindings has been removed.
  * The deprecated libnghttp2_asio has been removed.
  * llhttp and neverbleed have been updated.
  * This release fixes the bug that stalls TLS connection.
  * This release adds more http3 integration tests.
- drop nghttp2-remove-python-build.patch: obsolete as the code got removed</changelog>
  <changelog author="mpluskal@suse.com" date="1684411200">- Update to version 1.53.0:
  * https://nghttp2.org/blog/2023/05/10/nghttp2-v1-53-0/</changelog>
  <changelog author="dmueller@suse.com" date="1687262400">- update to 1.54.0:
  * nghttpx: Consistent error handling and use of high-level API
  * h2load: Fix http3 upload stall
  * h2load: Use std::chrono::steady_clock for quic timestamp</changelog>
  <changelog author="dmueller@suse.com" date="1689422400">- update to 1.55.1:
  * Fix memory leak (bsc#1215713)
    This commit fixes memory leak that happens when
    PUSH_PROMISE or HEADERS frame cannot be sent, and
    nghttp2_on_stream_close_callback fails with a fatal error.
    For example, if GOAWAY frame has been received, a
    HEADERS frame that opens new stream cannot be sent.
    This issue has already been made public via CVE-2023-35945
    by envoyproxy/envoy project.  During embargo period, the
    patch to fix this bug was accidentally submitted to
    nghttp2/nghttp2 repository [2]. And they decided to
    disclose CVE early.  I was notified just 1.5 hours
    before disclosure.  I had no time to respond.
    PoC described in [1] is quite simple, but I think it is
    not enough to trigger this bug.  While it is true that
    receiving GOAWAY prevents a client from opening new stream,
    and nghttp2 enters error handling branch, in order to cause
    the memory leak, nghttp2_session_close_stream function
    must return a fatal error.
    NGHTTP2_ERR_NOMEM, as its name suggests, indicates out of
    memory.  It is unlikely that a process gets short of
    memory with this simple PoC scenario unless application
    does something memory heavy processing.
  * NGHTTP2_ERR_CALLBACK_FAILURE is returned from application
    defined callback function (nghttp2_on_stream_close_callback, in
    this case), which indicates something fatal happened inside a
    callback, and a connection must be closed immediately without
    any further action.  As nghttp2_on_stream_close_error_callback
    documentation says, any error code other than 0 or
    NGHTTP2_ERR_CALLBACK_FAILURE is treated as fatal
    error code.  More specifically, it is treated as if
    NGHTTP2_ERR_CALLBACK_FAILURE is returned.  I guess that
    envoy returns
    NGHTTP2_ERR_CALLBACK_FAILURE or other error code which is
    translated into NGHTTP2_ERR_CALLBACK_FAILURE.
    https://github.com/envoyproxy/envoy/security/advisories/GHSA-
    jfxv-29pc-x22r</changelog>
  <changelog author="pgajdos@suse.com" date="1697457600">- version update to 1.57.0 [bsc#1216174]
  1.57.0
  * Fixes CVE-2023-44487 (bsc#1216123)
  * Bump ngtcp2 by @tatsuhiro-t in #1944
  * Add dependabot to update actions by @tatsuhiro-t in #1946
  * Bump golang.org/x/net to v0.15.0 by @tatsuhiro-t in #1950
  * Bump actions/setup-go from 3 to 4 by @dependabot in #1948
  * Bump actions/checkout from 3 to 4 by @dependabot in #1949
  * Bump actions/upload-artifact from 1 to 3 by @dependabot in #1947
  * docker: Bump base image to debian 12 by @tatsuhiro-t in #1951
  * nghttpx: Header field name must be lowercase by @tatsuhiro-t in #1953
  * Bump quictls by @tatsuhiro-t in #1945
  * Apps fix by @tatsuhiro-t in #1957
  * nghttpx: Fix bug that --single-process does not work by @tatsuhiro-t in #1958
  * Fix clang-format by @tatsuhiro-t in #1959
  * Rework session management by @tatsuhiro-t in #1961
  1.56.0
  * doc: Bump boringssl by @tatsuhiro-t in #1928
  * Fix memory leak by @tatsuhiro-t in #1930
  * Return void by @tatsuhiro-t in #1931
  * nghttpx: Rework sending and receiving ECN bits by @tatsuhiro-t in #1934
  * CMSG_DATA does not necessarily return an aligned pointer by @tatsuhiro-t in #1935
  * Bump quictls by @tatsuhiro-t in #1937
  * Bump ngtcp2 and its dependencies by @tatsuhiro-t in #1939
  * nghttpx: Simplify std::unique_ptr get and release by @tatsuhiro-t in #1940
  * Bump llhttp to 926c982942eb53a13f01c1e9e6b19bd3b196e7dd by @tatsuhiro-t in #1941
  * Bump libbpf to v1.2.2 by @tatsuhiro-t in #1942
  * Update Dockerfile by @tatsuhiro-t in #1943</changelog>
  <changelog author="dmueller@suse.com" date="1699358400">- add keyring for gpg validation
- spec file cleanups</changelog>
  <changelog author="dmueller@suse.com" date="1700568000">- fix unversioned provides to be in sync with nghttp3</changelog>
  <changelog author="dmueller@suse.com" date="1700913600">- update to 1.58.0:
  * Update manual pages
  * Bump neverbleed
  * Bump ngtcp2
  * Prefer clock_gettime if __CYGWIN__ defined
  * Do not require strict c++ mode
  * nghttpx: Stricter transfer-encoding checks
  * Refactor character comparison
  * Integration servertester h3
  * integration: Enable http3 test with cmake</changelog>
  <changelog author="dmueller@suse.com" date="1706443200">- update to 1.59.0:
  * Update bash_completion
  * h2load: Fix bug that ttfb is not recorded if h3 stream
    has no data
  * h2load: Consider all h2 HEADERS when counting bytes and
    recording ttfb
  * h2load: Ignore 1xx status code
  * nghttpd: Free SSL_CTX on exit
  * nghttpx: OpenSSL needs SSL_CTX_set_recv_max_early_data
  * nghttpx: OpenSSL needs SSL_CTX_set_recv_max_early_data
  * cmake: Require OpenSSL &gt;= 1.1.1
  * Add nghttp2_select_alpn and deprecate
    nghttp2_select_next_protocol
  * nghttpx: Add --alpn-list and deprecate --npn-list
  * h2load: Add --alpn-list and deprecate --npn-list
  * Remove NPN
  * src: Support building with aws-lc
  * Avoid detecting OpenSSL 3.2 as quictls
  * Use nghttp3_pri_parse_priority added since nghttp3 v1.1.0
  * h2load: Fix IPv6 address in :authority
  * h2load: Fix IPv6 address in :authority
  * nghttpx: Propagate stream priority from backend to
    frontend
  * nghttpx: Propagate stream priority from backend to
    frontend
  * Merge pull request #1991 from nghttp2/get-and-parse-
    extpri
  * Add API to get and parse RFC 9218 priority
  * nghttpx: Prefer __FILE_NAME__ if defined</changelog>
  <changelog author="pgajdos@suse.com" date="1710763200">- version update to 1.60.0
  * makerelease.sh: Speed up git submodule
  * Speed up git clone
  * build(deps): bump actions/cache from 3 to 4
  * Fixing the build and install trees
  * build(deps): bump microsoft/setup-msbuild from 1 to 2
  * nghttpx: Set ocsp response to SSL in case of boringssl
  * Run with python3
  * src: Certificate Compression with boringssl
  * Fix missing newline
  * Switch to aws lc
  * Libbrotli fixup
  * Deprecate RFC 7540 priorities (aka stream dependencies)
  * Let dependabot manage go modules
  * build(deps): bump golang.org/x/net from 0.20.0 to 0.21.0
  * integration-tests: Omit unused parameters
  * Munit
  * Introduce nghttp2_ssize API
  * Move deprecated warning upfront
  * Describe RFC 7540 priorities deprecation plan
  * Apps migrate nghttp2 ssize
  * src: Remove unused functions
  * Reconsider ssize t usage in src
  * Use GitHub private vulnerability reporting
  * Move security policy to GitHub standard location
  * Bump mruby to 3.3.0
  * Bump llhttp to 48588093ca4219b5f689acfc9ebea9e4c8c37663
  * h2load: Add --sni option
  * Bump ngtcp2 dependencies
  * mruby: Adopt deprecation of mrbc_ prefix
  * neverbleed: Define _GNU_SOURCE for pthread_setaffinity_np
  * bpf: Pre-expand aes key
  * mruby: Exclude mrdb gem which causes nghttpx to crash
  * nghttpx: Reuse EVP_CIPHER_CTX for QUIC connection ID encryption
  * Run apt-get update before install
  * src: Deal with the case that send_quantum &lt; max_udp_payload_size
  * nghttpx: Remove SHRPX_QUIC_MAX_UDP_PAYLOAD_SIZE
  * Fix build when AI_NUMERICSERV is undefined
- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="mpluskal@suse.com" date="1710763201">- Update keyring with current key</changelog>
  <changelog author="adam.majer@suse.de" date="1712145600">- gcc7.patch: Fix compilation for SLE-15 (jsc#PED-8206)</changelog>
  <changelog author="pgajdos@suse.com" date="1712232000">- version update to 1.61.0
  * Fixes CVE-2024-28182 [bsc#1221399]
  * nghttpx: Shutdown h3 stream read with trailer as well by @tatsuhiro-t in #2087
  * Checkout with submodules by @jonaski in #2093
  * Respect BUILD_STATIC_LIBS and add option for tests by @jonaski in #2092
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.22.0 by @dependabot in #2097
  * Workaround llvm issue on github ubuntu runner by @tatsuhiro-t in #2098
  * docker: Use copy --link by @tatsuhiro-t in #2099
  * Nghttpx header idle timeout by @tatsuhiro-t in #2100
  * nghttpx: Fix frontend-header-timeout does not work in config file by @tatsuhiro-t in #2101
  * Rewrite hexdump by @tatsuhiro-t in #2102
  * Switch to distroless/base-nossl by @tatsuhiro-t in #2103
  * Bump ngtcp2 by @tatsuhiro-t in #2105
  * nghttpx: Simplify quic connection close handling by @tatsuhiro-t in #2106
  * build(deps): bump github.com/quic-go/quic-go from 0.41.0 to 0.42.0 by @dependabot in #2107
  * autotools: Use tar-ustar automake option by @tatsuhiro-t in #2108
  * Automate release process by @tatsuhiro-t in #2109
  * autotools: Switch to tar-pax by @tatsuhiro-t in #2110
  * nghttpx: Drop a UDP datagram from well-known port by @tatsuhiro-t in #2111
  * nghttpx: Fix port byte order by @tatsuhiro-t in #2112
  * h2load: Allow host header to be overridden by @tatsuhiro-t in #2113
  * nghttpx: Rework QUIC stateless reset packet size by @tatsuhiro-t in #2114
  * nghttpx: More QUIC prohibited ports by @tatsuhiro-t in #2115
  * Add actions/stale by @tatsuhiro-t in #2116
  * nghttpx: Discard UDP datagram that is too short to be a valid QUIC packet by @tatsuhiro-t in #2117
  * nghttp: Support SSLKEYLOGFILE by @tatsuhiro-t in #2119
  * No rfc7540 priority fix by @tatsuhiro-t in #2120
  * Further reduce Stateless reset emission by @tatsuhiro-t in #2122
  * nghttpx: Rework Connection ID construction by @tatsuhiro-t in #2124
  * Nghttpx faster worker lookup by @tatsuhiro-t in #2125
  * nghttpx: Split thread into worker_process and thread by @tatsuhiro-t in #2126
  * bpf: Drop bad QUIC packet by @tatsuhiro-t in #2127
  * cmake: check SSL_provide_quic_data when ENABLE_HTTP3 is ON by @jimmy-park in #2128
  * nghttpx: Allocate 3 bits for QUIC configuration in Connection ID by @tatsuhiro-t in #2129
  * nghttpx: Migrate to ares_getaddrinfo by @tatsuhiro-t in #2132
  * Bump munit by @tatsuhiro-t in #2131
  * nghttpx: Fix error message by @tatsuhiro-t in #2133
  * nghttpd: Fix read stall by @tatsuhiro-t in #2134</changelog>
  <changelog author="dmueller@suse.com" date="1718625600">- update to 1.62.1:
  * nghttpx: Fix batch UDP QUIC packet dropped on GRO read
- update to 1.62.0:
  * nghttpx: Fix QUIC stateless reset stack buffer overflow
  * Require c-ares &gt;= 1.16.0 for ares_getaddrinfo
  * Require C++20 compiler
  * Adopt std::to_array and remove make_array
  * nghttpx: Define APIEndpoints separately
  * nghttpx: Do not send error/status body when method is HEAD
  * nghttpx: Fix alignment issues in BlockAllocator
  * nghttpx: Simplify parameter declaration for ipc_fd functions
  * nghttpx: Add extent to ipc_fd explicitly
  * Make make_byte_ref return std::span
  * Make util::decode_hex return std::span
  * Rewrite util::parse_uint
  * Let base64::decode return std::span
  * Refactor StringRef
  * Stringref refactor c str and str
  * Add StringRef literal operator and remove StringRef::from_lit
  * Make StringRef(const std::string&amp;) implicit
  * Add http2::make_field family functions
  * Remove std::string conversion operator from StringRef
  * Optimize StringRef comparisons against c-string
  * Pack more quic pkt
  * nghttpx: Dynamic GSO failover
  * Refactor ImmutableString
  * nghttpx: Refactor QUIC data path
  * nghttpx: Fix inherited TCP port comparison
  * make_websocket_accept_token: Lesser conversions
  * Add http3::make_field family functions
  * Remove unnecessary namespace qualifications
  * Refactor http utils
  * Refactor streq
  * Remove util::streq and let StringRef operator== deal with it
  * Update the link for the Prefix.pdf document. fix #2178
  * Introduce typed nghttp2_min and nghttp2_max
- drop gcc7.patch (obsolete, we require C++20 now)</changelog>
  <changelog author="pgajdos@suse.com" date="1731412800">- version update to 1.64.0
  1.64.0
  * Change clang-format options by @tatsuhiro-t in #2240
  * build(deps): bump github.com/quic-go/quic-go from 0.46.0 to 0.47.0 by @dependabot in #2243
  * build(deps): bump golang.org/x/net from 0.28.0 to 0.29.0 by @dependabot in #2244
  * nghttp2_map: Port ngtcp2 changes by @tatsuhiro-t in #2245
  * h2load: Fix UDP datagram send/recv metric by @tatsuhiro-t in #2248
  * build(deps): bump golang.org/x/net from 0.29.0 to 0.30.0 by @dependabot in #2252
  * fix race condition on h1 connection close by @TuxInvader in #2249
  * Gha ubuntu 24.04 by @tatsuhiro-t in #2254
  * GHA: Run tests for i686-w64-mingw32 host by @tatsuhiro-t in #2255
  * cmake: Fix c-ares v1.34.0 version detection failure by @tatsuhiro-t in #2256
  * fix: -Wextra-semi errors in nghttp2_helper.h by @codebytere in #2258
  * clang-format macros that do not need semicolon at the end by @tatsuhiro-t in #2259
  * Remove extra semicolons by @tatsuhiro-t in #2260
  * Bump ngtcp2 and its dependencies by @tatsuhiro-t in #2261
  * Do not allow '@' in :authority or host field values by @tatsuhiro-t in #2262
  * h2load: GRO buffer size should be 64KiB by @tatsuhiro-t in #2263
  * Bump libbpf to v1.4.6 by @tatsuhiro-t in #2264
  * Update nghttp2_check_authority doc by @tatsuhiro-t in #2265
  1.63.0
  * Bump libbpf to v1.4.2 by @tatsuhiro-t in #2191
  * build(deps): bump golang.org/x/net from 0.24.0 to 0.25.0 by @dependabot in #2193
  * nghttpx: Fix batch UDP QUIC packet dropped on GRO read by @tatsuhiro-t in #2196
  * CMakeLists.txt: allow to compile the C only lib without CXX compiler by @ThomasDevoogdt in #2200
  * build(deps): bump github.com/quic-go/quic-go from 0.43.1 to 0.44.0 by @dependabot in #2197
  * Fix compiler versions in readme by @ryandesign in #2203
  * build(deps): bump golang.org/x/net from 0.25.0 to 0.26.0 by @dependabot in #2205
  * build(deps): bump github.com/quic-go/quic-go from 0.44.0 to 0.45.0 by @dependabot in #2206
  * Bump ngtcp2 and its dependencies by @tatsuhiro-t in #2207
  * build(deps): bump docker/build-push-action from 5 to 6 by @dependabot in #2208
  * Add wolfSSL support by @tatsuhiro-t in #2209
  * Append --shallow-submodules to git clone --recursive by @tatsuhiro-t in #2210
  * Always append options to extra options by @tatsuhiro-t in #2211
  * build(deps): bump github.com/quic-go/quic-go from 0.45.0 to 0.45.1 by @dependabot in #2213
  * Disable dependency tracking by @tatsuhiro-t in #2214
  * Fix Dockerfile.android build failure by @tatsuhiro-t in #2215
  * Fix UDP_GRO struct cmsghdr data type by @tatsuhiro-t in #2216
  * GHA: Suppress warnings by @tatsuhiro-t in #2217
  * Fix levenshtein initialization by @tatsuhiro-t in #2218
  * build(deps): bump golang.org/x/net from 0.26.0 to 0.27.0 by @dependabot in #2220
  * Undefine NGHTTP2_NO_SSIZE_T if BUILDING_NGHTTP2 is defined by @tatsuhiro-t in #2224
  * Bump clang format by @tatsuhiro-t in #2226
  * Suppress old compiler error by @tatsuhiro-t in #2228
  * build(deps): bump github.com/quic-go/quic-go from 0.45.1 to 0.45.2 by @dependabot in #2229
  * build(deps): bump golang.org/x/net from 0.27.0 to 0.28.0 by @dependabot in #2231
  * build(deps): bump github.com/quic-go/quic-go from 0.45.2 to 0.46.0 by @dependabot in #2232
  * Bump ngtcp2 and its dependencies by @tatsuhiro-t in #2236
  * Bump libbpf to v1.4.5 by @tatsuhiro-t in #2237
  * Update go by @tatsuhiro-t in #2238
  * levenshtein: Use size_t by @tatsuhiro-t in #2239</changelog>
  <changelog author="pgajdos@suse.com" date="1774008000">- added patches
  CVE-2026-27135: assertion failure due to missing state validation can lead to DoS (bsc#1259845)
  * nghttp2-CVE-2026-27135.patch</changelog>
</package>
<package pkgid="9f31ace2fbac3d9ab396a2826259d5e0c721c0ca8846f7a8690925eaf0928c71" name="libnghttp2_asio-devel" arch="x86_64">
  <version epoch="0" ver="1.40.0" rel="150600.25.5.1"/>
  <changelog author="tchvatal@suse.com" date="1523275200">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 “Data Dribble” and CVE-2019-9513
  “Resource Loop” vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695729600">- Fixes memory leak that happens when PUSH_PROMISE or HEADERS frame cannot be
  sent, and nghttp2_on_stream_close_callback fails with a fatal error.
  [CVE-2023-35945 bsc#1215713]
  + nghttp2-CVE-2023-35945.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1697716800">- security update
- added patches
  fix CVE-2023-44487 [bsc#1216123], HTTP/2 Rapid Reset Attack
  + nghttp2-CVE-2023-44487.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- security update
- added patches
  fix CVE-2024-28182 [bsc#1221399], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + nghttp2-CVE-2024-28182-1.patch
  fix CVE-2024-28182-2 [bsc#1221399], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + nghttp2-CVE-2024-28182-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1774008000">- added patches
  CVE-2026-27135: assertion failure due to missing state validation can lead to DoS (bsc#1259845)
  * nghttp2-CVE-2026-27135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1774872000">- added patches
  https://github.com/nghttp2/nghttp2/commit/61caf66f1b002105e5603fba030de57d445330a8
  * nghttp2-TZ-fix-test-failure.patch</changelog>
</package>
<package pkgid="d2a3f7b3e98bde9277846d3aaa6f469b602914070dc694f87404305b27e73ca1" name="libnghttp2_asio1" arch="x86_64">
  <version epoch="0" ver="1.40.0" rel="150600.25.5.1"/>
  <changelog author="tchvatal@suse.com" date="1523275200">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 “Data Dribble” and CVE-2019-9513
  “Resource Loop” vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695729600">- Fixes memory leak that happens when PUSH_PROMISE or HEADERS frame cannot be
  sent, and nghttp2_on_stream_close_callback fails with a fatal error.
  [CVE-2023-35945 bsc#1215713]
  + nghttp2-CVE-2023-35945.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1697716800">- security update
- added patches
  fix CVE-2023-44487 [bsc#1216123], HTTP/2 Rapid Reset Attack
  + nghttp2-CVE-2023-44487.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- security update
- added patches
  fix CVE-2024-28182 [bsc#1221399], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + nghttp2-CVE-2024-28182-1.patch
  fix CVE-2024-28182-2 [bsc#1221399], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + nghttp2-CVE-2024-28182-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1774008000">- added patches
  CVE-2026-27135: assertion failure due to missing state validation can lead to DoS (bsc#1259845)
  * nghttp2-CVE-2026-27135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1774872000">- added patches
  https://github.com/nghttp2/nghttp2/commit/61caf66f1b002105e5603fba030de57d445330a8
  * nghttp2-TZ-fix-test-failure.patch</changelog>
</package>
<package pkgid="a98fd293c9fbc6e27dd7de792f6d2dc886e5feeda47db389e360214f7cb6fe02" name="libnm0" arch="x86_64">
  <version epoch="0" ver="1.44.2" rel="150600.3.4.1"/>
  <changelog author="cfamullaconrad@suse.com" date="1667822400">- Keep netconfig support. The rc-manager auto detection will select
  appropriate manager during runtime.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1669982400">- Update to version 1.40.6:
  + team:
  - Also set empty port configuration so teamd knows about the
    port.
  - Restore port configuration after teamd respawn.
- Changes from version 1.40.4:
  + dhcp: revert restarting DHCP when MAC address changes, for
    example during a bond fail over.
  + Various documentation fixes.
  + Fix non-exported ABI in libnm which was wrongly present in the
    header files but unusable so far.
  + ifcfg-rh: fix writing ethtool pause settings to file.
  + core: set "proto static" for manual routing rules configured by
    NetworkManager.
  + Various minor bugfixes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1671537600">- Drop iptables BuildRequires and -Diptables meson parameter:
  iptables is legacy (obsoleted in favor of nft). Additionally.
  meson has proper fallback detection to assume the correct path,
  should it need to use iptables.
- Recommend nftables instead of iptables.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671537601">- Update to version 1.40.8:
  + Fixed a bug that caused devices (MACsec in particular) to be
    stuck in UNAVAILABLE state and not transition to DISCONNECTED
    if the carrier was ready too early.
  + Improved interoperability of MACsec with some Aruba switches by
    allowing CKN shorter than 64 characters.
  + Fixed an assertion failure when restarting NetworkManager with
    MACsec links configured.
  + Fixed a possible DHCP helper crash when handling failure to
    connect to D-Bus.
  + Corrected calculation of expiration time for items configured
    from IPv6 neighbor discovery messages.
  + Various fixes for platforms that don't allow unaligned memory
    access.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1673438400">- Update to version 1.40.10:
  + Fix the evaluation of the autoconnect retries.
  + nm-cloud-setup now preserves addresses added externally.
  + Ensure that dnsmasq is stopped after changing the dns backend
    and restarting the service.
  + Fix honoring an explicit DHCPv6 DUID with dhclient.
  + Other various fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674820800">- Update to version 1.40.12:
  + Make sure "external-ids" stays up to date in Open vSwitch
    database on a connection reapply.
  + Retry if a netlink sockets runs out of buffer space before
    we're able to read results of a link change.
  + Fix a possible race involving concurrent invocation of iptables
    in IPv4 shared mode.
  + Other various fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676030400">- Update to version 1.42.0:
  + Added support for source load balancing for Ethernet Bonds.
  + Allow specifying vhost name (SNI) for a manually DNS-over-TLS
    server. Only works with systemd-resolved plugin.
  + Connections can now be activated on a loopback interface.
  + Added support of IPv4 ECMP routes. The ECMP routes will get
    merged.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676289600">- Pass session_tracking=systemd and
  session_tracking_consolekit=false to meson, no longer build
  support for consolekit as session tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1676894400">- Add 1539.patch: Fix constructing the IPv4 nameserver variable
  (boo#1208371).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1677153600">- Update to version 1.42.2:
  + Add build option to set the mobile-broadband-provider-info
    database path.
  + Add new "ipv[46].replace-local-rule" setting to control whether
    to remove the local route rule that is automatically generated.
  + Add the DHCPv6 IAID to the lease information exposed in /run
    and on D-Bus.
  + Fix assuming team connections at boot.
  + Fix race condition when setting the MAC address of an OVS
    interface.
  + Fix constructing the IPv4 name servers variable passed to
    dispatcher scripts.
  + Don't use tentative IPv6 address to resolve the system hostname
    via DNS.
  + Deprecate the "Master" property of the NMActiveConnection D-Bus
    object in favor of the new "Controller" property.
- Drop 1539.patch: Fixed upstream.
- Refresh patch with quilt:
  + 0001-Coerce-connectivity-LIMITED-to-NONE-when-device-is-d.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Changes from version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update to version 1.42.4:
  + Fix a possible crash when [global-dns] is used and improve the
    documentation.
  + Documentation improvements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681992000">- Update to version 1.42.6:
  + Emit the dhcp-change dispatcher event also after a lease
    renewal.
  + Fix assertion failure on DHCP renewal.
  + Add support for EC2 IMDSv2 in nm-cloud-setup.
  + Allow setting tunnel flags for ip6gre &amp; ip6gretap connection
    profiles.
  + Improve the Wi-Fi hotspot functionality.
  + Fix setting the Wi-Fi roaming policy based on the number of
    seen BSSIDs.
  + Support the "no-aaaa" resolv.conf option.
  + Some oFono fixes.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1683979200">- Add nm-runstatedir.patch: to correct rundir from /var/run to /run
  for systemd FHS compatibility</changelog>
  <changelog author="luc14n0@opensuse.org" date="1685534400">- Update https://www.gnome.org/projects/NetworkManager/ URL tag to
  NM's newest home page: https://networkmanager.dev/, and main
  package summary to: standard Linux network configuration tool
  suite.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688040000">- Update to version 1.42.8:
  + Add support for ppp 2.5.0.
  + Fix nft rules for balance-slb bonding.
  + Support port priority for bonding.
  + Fix regression handling the PKEY_ID for infiniband profiles in
    ifcfg-rh format.
  + Fix race in nm-cloud-setup that caused partial configuration
    and loss of connectivity with multiple interfaces.
  + Don't touch "net.ipv6.conf.$IFACE.forwarding" unless explicitly
    required for IPv6 sharing.
  + Various bugfixes related to team, Wi-Fi P2P, IPv6LL.
  + Automatically unblock autoconnect of profiles during reapply.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691582400">- Update to version 1.44.0:
  + Introduce a new "link" setting that holds properties related to
    the kernel link such as "tx-queue-length", "gso-max-size",
    "gso-max-segments", "gro-max-size".
  + Support sending a DHCPv6 prefix delegation hint via the
    "ipv6.dhcp-pd-hint" connection property.
  + Support new bond options: "arp_missed_max", "lacp_active",
    "ns_ip6_target".
  + Add new "initial-eps-bearer-configure" and
    "initial-eps-bearer-apn" properties in the GSM setting.
  + Setting "connection.stable-id=default${CONNECTION}" changed
    behavior to be identical to the built-in default value when the
    stable-id is not set.
  + Add a "[keyfile].rename" option to NetworkManager.conf to force
    renaming profiles on disk when their name changes.
  + The ifcfg-rh plugin is deprecated; it will only receive
    bugfixes and no new features. A warning is emitted the log when
    a connection in ifcfg-rh format is found.
  + To automatically migrate existing ifcfg-rh connections to the
    keyfile format, a new configuration option
    "main.migrate-ifcfg-rh" is provided. Migration is disabled by
    default, but the default value can be changed at build time via
    "--with-config-migrate-ifcfg-rh-default=yes".
  + When configuring hostnames in non-public TLD (like
    "example.local"), use the TLD as default search domain instead
    of the full hostname.
  + Always apply DNS options from the [global-dns] configuration
    section
  + The NetworkManager daemon now acquires the D-Bus name only
    after populating the D-Bus tree. This can add a delay during
    startup but it is required to avoid race conditions with other
    services depending on NM.
  + Add a "version-id" argument to the Update2() D-Bus call to
    guard against concurrent modifications of profiles.
  + Don't use tentative IPv6 addresses to resolve the system
    hostname via DNS.
  + Track the number of autoconnect retries left for each device
    and connection. Previously it was tracked only per connection
    and this lead to unexpected behaviors in case of multiconnect
    profiles.
  + Set VLAN filtering options on bridge via netlink instead of
    sysfs.
  + nm-cloud-setup now supports IMDSv2 on Amazon EC2.
  + nmtui now allows to enable or disable Wi-Fi and WWAN radios.
  + Honor ignore-carrier=no for bond/bridge/team devices.
  + Add version mismatch warning when running nmcli commands.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1696334400">- Update to version 1.44.2:
  + Better log IPv4 Address Conflict Detection (ACD) conflicts
  + Remove the upper limit of 65535 for PIDs read from the PID file
  + Allow missing default gateway with oFono
  + Honor the CLICOLOR_FORCE environment variable
  + Fix generating connection with IPv6 method disabled vs ignored
  + Fix possible segmentation fault when doing a checkpoint
    rollback
  + Documentation improvements
- Switch to source services, use explicit released tag.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="yfjiang@suse.com" date="1701604800">- Add python3.6-in-sle.patch: SLE still takes python 3.6 as primary
  system, the patch allows meson to find python 3.6 in SLE.</changelog>
</package>
<package pkgid="11671630d5e842eb84bb1f6b012d0a3ca0fdb8b3c51640b4c021584bc4e84258" name="libnm0" arch="x86_64">
  <version epoch="0" ver="1.44.2" rel="150600.3.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1671537600">- Drop iptables BuildRequires and -Diptables meson parameter:
  iptables is legacy (obsoleted in favor of nft). Additionally.
  meson has proper fallback detection to assume the correct path,
  should it need to use iptables.
- Recommend nftables instead of iptables.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1671537601">- Update to version 1.40.8:
  + Fixed a bug that caused devices (MACsec in particular) to be
    stuck in UNAVAILABLE state and not transition to DISCONNECTED
    if the carrier was ready too early.
  + Improved interoperability of MACsec with some Aruba switches by
    allowing CKN shorter than 64 characters.
  + Fixed an assertion failure when restarting NetworkManager with
    MACsec links configured.
  + Fixed a possible DHCP helper crash when handling failure to
    connect to D-Bus.
  + Corrected calculation of expiration time for items configured
    from IPv6 neighbor discovery messages.
  + Various fixes for platforms that don't allow unaligned memory
    access.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1673438400">- Update to version 1.40.10:
  + Fix the evaluation of the autoconnect retries.
  + nm-cloud-setup now preserves addresses added externally.
  + Ensure that dnsmasq is stopped after changing the dns backend
    and restarting the service.
  + Fix honoring an explicit DHCPv6 DUID with dhclient.
  + Other various fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674820800">- Update to version 1.40.12:
  + Make sure "external-ids" stays up to date in Open vSwitch
    database on a connection reapply.
  + Retry if a netlink sockets runs out of buffer space before
    we're able to read results of a link change.
  + Fix a possible race involving concurrent invocation of iptables
    in IPv4 shared mode.
  + Other various fixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676030400">- Update to version 1.42.0:
  + Added support for source load balancing for Ethernet Bonds.
  + Allow specifying vhost name (SNI) for a manually DNS-over-TLS
    server. Only works with systemd-resolved plugin.
  + Connections can now be activated on a loopback interface.
  + Added support of IPv4 ECMP routes. The ECMP routes will get
    merged.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676289600">- Pass session_tracking=systemd and
  session_tracking_consolekit=false to meson, no longer build
  support for consolekit as session tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1676894400">- Add 1539.patch: Fix constructing the IPv4 nameserver variable
  (boo#1208371).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1677153600">- Update to version 1.42.2:
  + Add build option to set the mobile-broadband-provider-info
    database path.
  + Add new "ipv[46].replace-local-rule" setting to control whether
    to remove the local route rule that is automatically generated.
  + Add the DHCPv6 IAID to the lease information exposed in /run
    and on D-Bus.
  + Fix assuming team connections at boot.
  + Fix race condition when setting the MAC address of an OVS
    interface.
  + Fix constructing the IPv4 name servers variable passed to
    dispatcher scripts.
  + Don't use tentative IPv6 address to resolve the system hostname
    via DNS.
  + Deprecate the "Master" property of the NMActiveConnection D-Bus
    object in favor of the new "Controller" property.
- Drop 1539.patch: Fixed upstream.
- Refresh patch with quilt:
  + 0001-Coerce-connectivity-LIMITED-to-NONE-when-device-is-d.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1678104000">- Changes from version 1.38.6 (bsc#1208631):
  + Fix honoring DNS priority.
  + Decline DHCPv6 lease when DAD fails.
  + Various bugfixes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update to version 1.42.4:
  + Fix a possible crash when [global-dns] is used and improve the
    documentation.
  + Documentation improvements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681992000">- Update to version 1.42.6:
  + Emit the dhcp-change dispatcher event also after a lease
    renewal.
  + Fix assertion failure on DHCP renewal.
  + Add support for EC2 IMDSv2 in nm-cloud-setup.
  + Allow setting tunnel flags for ip6gre &amp; ip6gretap connection
    profiles.
  + Improve the Wi-Fi hotspot functionality.
  + Fix setting the Wi-Fi roaming policy based on the number of
    seen BSSIDs.
  + Support the "no-aaaa" resolv.conf option.
  + Some oFono fixes.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1683979200">- Add nm-runstatedir.patch: to correct rundir from /var/run to /run
  for systemd FHS compatibility</changelog>
  <changelog author="luc14n0@opensuse.org" date="1685534400">- Update https://www.gnome.org/projects/NetworkManager/ URL tag to
  NM's newest home page: https://networkmanager.dev/, and main
  package summary to: standard Linux network configuration tool
  suite.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1688040000">- Update to version 1.42.8:
  + Add support for ppp 2.5.0.
  + Fix nft rules for balance-slb bonding.
  + Support port priority for bonding.
  + Fix regression handling the PKEY_ID for infiniband profiles in
    ifcfg-rh format.
  + Fix race in nm-cloud-setup that caused partial configuration
    and loss of connectivity with multiple interfaces.
  + Don't touch "net.ipv6.conf.$IFACE.forwarding" unless explicitly
    required for IPv6 sharing.
  + Various bugfixes related to team, Wi-Fi P2P, IPv6LL.
  + Automatically unblock autoconnect of profiles during reapply.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691582400">- Update to version 1.44.0:
  + Introduce a new "link" setting that holds properties related to
    the kernel link such as "tx-queue-length", "gso-max-size",
    "gso-max-segments", "gro-max-size".
  + Support sending a DHCPv6 prefix delegation hint via the
    "ipv6.dhcp-pd-hint" connection property.
  + Support new bond options: "arp_missed_max", "lacp_active",
    "ns_ip6_target".
  + Add new "initial-eps-bearer-configure" and
    "initial-eps-bearer-apn" properties in the GSM setting.
  + Setting "connection.stable-id=default${CONNECTION}" changed
    behavior to be identical to the built-in default value when the
    stable-id is not set.
  + Add a "[keyfile].rename" option to NetworkManager.conf to force
    renaming profiles on disk when their name changes.
  + The ifcfg-rh plugin is deprecated; it will only receive
    bugfixes and no new features. A warning is emitted the log when
    a connection in ifcfg-rh format is found.
  + To automatically migrate existing ifcfg-rh connections to the
    keyfile format, a new configuration option
    "main.migrate-ifcfg-rh" is provided. Migration is disabled by
    default, but the default value can be changed at build time via
    "--with-config-migrate-ifcfg-rh-default=yes".
  + When configuring hostnames in non-public TLD (like
    "example.local"), use the TLD as default search domain instead
    of the full hostname.
  + Always apply DNS options from the [global-dns] configuration
    section
  + The NetworkManager daemon now acquires the D-Bus name only
    after populating the D-Bus tree. This can add a delay during
    startup but it is required to avoid race conditions with other
    services depending on NM.
  + Add a "version-id" argument to the Update2() D-Bus call to
    guard against concurrent modifications of profiles.
  + Don't use tentative IPv6 addresses to resolve the system
    hostname via DNS.
  + Track the number of autoconnect retries left for each device
    and connection. Previously it was tracked only per connection
    and this lead to unexpected behaviors in case of multiconnect
    profiles.
  + Set VLAN filtering options on bridge via netlink instead of
    sysfs.
  + nm-cloud-setup now supports IMDSv2 on Amazon EC2.
  + nmtui now allows to enable or disable Wi-Fi and WWAN radios.
  + Honor ignore-carrier=no for bond/bridge/team devices.
  + Add version mismatch warning when running nmcli commands.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1696334400">- Update to version 1.44.2:
  + Better log IPv4 Address Conflict Detection (ACD) conflicts
  + Remove the upper limit of 65535 for PIDs read from the PID file
  + Allow missing default gateway with oFono
  + Honor the CLICOLOR_FORCE environment variable
  + Fix generating connection with IPv6 method disabled vs ignored
  + Fix possible segmentation fault when doing a checkpoint
    rollback
  + Documentation improvements
- Switch to source services, use explicit released tag.</changelog>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Use %patch -p N instead of deprecated %patchN.</changelog>
  <changelog author="yfjiang@suse.com" date="1701604800">- Add python3.6-in-sle.patch: SLE still takes python 3.6 as primary
  system, the patch allows meson to find python 3.6 in SLE.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1722254400">- Add NetworkManager-dont-renew-bridge-dhcp-if-no-mac-on-wakeup.patch:
  manager: don't renew dhcp lease when software devices' MAC is empty
  (bsc#1225498, glfd#NetworkManager/NetworkManager#1587).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1773230400">- Add NetworkManager-CVE-2025-9615.patch: avoid that non-admin user
  using other users' certificates
  (bsc#1257359, CVE-2025-9615, glfd#NetworkManager/NetworkManager!2324).</changelog>
</package>
<package pkgid="f65a1b29434612340b1582db4ddbff2782348d25b149bab161d165646232962d" name="libnsl1" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.32.1"/>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
</package>
<package pkgid="88062b934a44e43bbf5f7edfa9d117b7cc3cec6152c49bad2e33a16324934cbd" name="libnsl1" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.37.1"/>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
</package>
<package pkgid="7e61267fb09457bd7d8366b51745bafebcfbf0884ed3f6721ce615eb61506c30" name="libnsl1" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.40.1"/>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1768824000">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256437, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
</package>
<package pkgid="bf6b729b68f6718917a931e31a47a1ad4b41d6ffba157f0374d9e8b3515a5a3f" name="libnsl1" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.43.1"/>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1768824000">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256437, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
  <changelog author="schwab@suse.de" date="1771329600">- nss-missing-checks.patch: nss: Missing checks in __nss_configure_lookup,
  __nss_database_get (bsc#1258319, BZ #28940)</changelog>
</package>
<package pkgid="45f960b462f026d651e7573bb476156f692082301c58d8705c1fcb3f79dfc97e" name="libnsl1" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.46.1"/>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1768824000">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256437, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
  <changelog author="schwab@suse.de" date="1771329600">- nss-missing-checks.patch: nss: Missing checks in __nss_configure_lookup,
  __nss_database_get (bsc#1258319, BZ #28940)</changelog>
  <changelog author="schwab@suse.de" date="1774872000">- resolv-count-resource-records.patch: resolv: Count records correctly
  (CVE-2026-4437, bsc#1260078, BZ #34014)
- resolv-check-hostname.patch: resolv: Check hostname for validity
  (CVE-2026-4438, bsc#1260082, BZ #34015)</changelog>
</package>
<package pkgid="c51a6493ef143e4c1f6961b3a82f95d8aa4aac1c67c1a47d7eab9c2a073644f9" name="libnsl1-32bit" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.32.1"/>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
</package>
<package pkgid="1b502c00da4a745c6a91e36c8050a73dce7df65f629a30b8d76249c0bc05d6ad" name="libnsl1-32bit" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.37.1"/>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
</package>
<package pkgid="8474ff09d65578e683245187191db8ecead62f6695f8ad07cf7fc5a230514f4a" name="libnsl1-32bit" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.40.1"/>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1768824000">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256437, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
</package>
<package pkgid="c2afa5e82ba0bf145edf263de9f4cb7b2ae244dd2aaa66f7b0c4b546a0a6049a" name="libnsl1-32bit" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.43.1"/>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1768824000">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256437, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
  <changelog author="schwab@suse.de" date="1771329600">- nss-missing-checks.patch: nss: Missing checks in __nss_configure_lookup,
  __nss_database_get (bsc#1258319, BZ #28940)</changelog>
</package>
<package pkgid="7d08e0434c337ad05fc0de343f008bf19527c0f6af3fd39bfd7c5aa19d005fe4" name="libnsl1-32bit" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.46.1"/>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1768824000">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256437, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
  <changelog author="schwab@suse.de" date="1771329600">- nss-missing-checks.patch: nss: Missing checks in __nss_configure_lookup,
  __nss_database_get (bsc#1258319, BZ #28940)</changelog>
  <changelog author="schwab@suse.de" date="1774872000">- resolv-count-resource-records.patch: resolv: Count records correctly
  (CVE-2026-4437, bsc#1260078, BZ #34014)
- resolv-check-hostname.patch: resolv: Check hostname for validity
  (CVE-2026-4438, bsc#1260082, BZ #34015)</changelog>
</package>
<package pkgid="bbbecae34d7de45edc8abbf11a8ad34492490a41a137eb823e4e85bb9fa158ad" name="libnss_himmelblau2" arch="x86_64">
  <version epoch="0" ver="0.7.17+git.0.1ebdab0" rel="150700.3.3.2"/>
  <changelog author="david.mulder@suse.com" date="1715342400">- Himmelblau requires libopenssl-3 for PRT messages.</changelog>
  <changelog author="david.mulder@suse.com" date="1715774400">- Update to version 0.3.4+git.0.01d099f:
  * Version 0.3.4
  * Only remove cached user if it doesn't exist
  * Use existing user token at refresh
  * Always use the spn of the user for nss requests
  * Generate a fake user token to please SSH
  * Fix aad-tool to handle MFA
  * Fix lib_crypto version
  * Fix user dropping from NSS</changelog>
  <changelog author="david.mulder@suse.com" date="1716206400">- Update to version 0.4.0+git.0.69b64fe:
  * Add github workflows for the 0.4.x branch
  * Do not append to pam_allow_groups automatically
  * Pam Allow Groups must be specified by Object ID
  * Request the correct resource and permissions
  * Improve error output on group lookup failure
  * When faking a uuid for NSS, use a random uuid
  * Fix clippy warning about inefficient use of clone()
  * Remove the initial uid hack, use name mapping
  * Don't stop an MR based on a clippy warning
  * Update Kanidm tracking
  * Modify CI workflows to handle idmap build
  * Add CI job for cargo test
  * Test the new and legacy idmapping
  * Ensure duplicate providers are not started
  * Use the SSSD Idmap code in Himmelblau
  * Specify in conf that pam_allow_groups is required
  * Remove code duplication in Hello PIN auth
  * Fix Device authentication failed after enrollment
  * Update the base64urlsafedata version
  * Update README.md with Matrix contact info
  * Version 0.4.0</changelog>
  <changelog author="david.mulder@suse.com" date="1716379200">- Update to version 0.4.0+git.2.7b57f5e:
  * Always normalize idmap upn inputs</changelog>
  <changelog author="david.mulder@suse.com" date="1716379201">- Update to version 0.4.0+git.4.63e3704:
  * Fix a refresh token leak in debug from msal</changelog>
  <changelog author="david.mulder@suse.com" date="1716984000">- Update to version 0.4.1+git.0.41dd0dc:
  * Version 0.4.1
  * Use latest msal with MFA fixes
  * PhoneAppNotification is not a cred request algorithm
  * The polling_interval is in milliseconds, not seconds
  * OneWaySMS is additionally a valid OTP
  * Relicensing as GPL3, as SSSD source inclusion requires</changelog>
  <changelog author="david.mulder@suse.com" date="1721044800">- Update to version 0.4.3+git.2.6379abc:
  * Specifically use msal 0.2.6
  * Version 0.4.3
  * update libnss requirement from 0.7.0 to 0.8.0
  * himmelblaud stops working after suspend
  * Version 0.4.2
  * Fix ConsolidatedTelephony MFA method</changelog>
  <changelog author="david.mulder@suse.com" date="1725451200">- Update to version 0.5.0+git.0.22f84f0:
  * Update workflows for 0.5.x
  * Update Debian dependencies in README.md
  * Compilation fails on Ubuntu, missing ldb header
  * Fix base32 with kandim updates
  * deps(rust): update base32 requirement from ^0.4.0 to ^0.5.0
  * deps(rust): update scim_proto requirement from ^0.2.1 to ^1.3.2
  * deps(rust): update bindgen requirement from 0.69.4 to 0.70.1
  * Fix CI failures caused by cargo 1.80.1
  * Update to libhimmelblau version 0.2.9
  * deps(rust): update rusqlite requirement from ^0.31.0 to ^0.32.0
  * deps(rust): update tonic requirement from 0.11.0 to 0.12.0
  * update libnss requirement from 0.7.0 to 0.8.0
  * Switch to using libhimmelblau
  * himmelblaud stops working after suspend
  * Update required packages for tumbleweed
  * Disable the SFA fallback by default
  * Fix ConsolidatedTelephony MFA method
  * Use the group ID for the name if no display name
  * Use latest msal with MFA fixes
  * PhoneAppNotification is not a cred request algorithm
  * The polling_interval is in milliseconds, not seconds
  * OneWaySMS is additionally a valid OTP
  * Relicensing as GPL3, as SSSD source inclusion requires
  * Utilize the graph code in msal
  * config: Remove comments about experimental policy enforement
  * Remove the experimental policy code from the id provider
  * Fix a refresh token leak in debug from msal
  * Correct README details
  * Always normalize idmap upn inputs
  * Add video links to the README
  * Minor updates to the Contributing section
  * Add a Installation section to the README
  * Add the new SSSD idmap build deps to the README
  * Add a section about donations
  * Include the Samba Technical matrix channel
  * Add github workflows for the 0.4.x branch
  * Version 0.5.0 bump for main</changelog>
  <changelog author="william.brown@suse.com" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="david.mulder@suse.com" date="1727870400">- Update to version 0.6.0+git.0.b8dae18:
  * Attempt to fix the cargo version in launchpad build
  * Add branch stable-0.6.x to the workflows
  * Install the pam module to the proper location
  * Update README.md
  * Add a debug option to the config
  * Add a pam option for the OpenSSH 2876 workaround
  * Update to the latest libhimmelblau
  * Authorize all users when pam_allow_groups is empty
  * Fix clippy warnings
  * Fix pam echo not displayed via ssh
  * Fix pam failure to register Pin following mfa poll
  * Fork from kanidm
  * Version 0.6.0
  * Add cargo deb build
  * Version 0.5.3
  * Improve the README installation instructions
  * Add `make install` command
  * Improve Debian/Ubuntu install instructions
  * Fix tag push permissions for tag-version workflow
  * Version 0.5.2
  * Add a version check script
  * Version 0.5.1
  * Remove the rustc dependency, breaking rustup
  * Added Debian packaging workflow and files</changelog>
  <changelog author="david.mulder@suse.com" date="1729598400">- Update to version 0.6.14+git.0.bbda0b6:
  * Version 0.6.14
  * postinst should not fail on patch or apparmor update
  * Version 0.6.13
  * Don't use sudo in postinst/postrm scripts for deb
  * Version 0.6.12
  * PAM should be placed first in the stack
  * Match the object ID of the fake user and group
  * Version 0.6.11
  * Move sshd config into it's own debian package
  * Version 0.6.10
  * Allow the graph to start w/out network
  * Add hello_pin_min_length conf option
  * Version 0.6.9
  * Don't attempt SFA fallback if AADSTSError
  * Have libhimmelblau handle the DAG fallback
  * Add a warning to user that SSH needs restarted
  * Version 0.6.8
  * Ensure local users are ignored when CN mapping
  * Ensure DAG is rejected if lifetime expires
  * Version 0.6.7
  * Rework the poll logic to resolve timeout issues
  * Version 0.6.6
  * Add a sshd soft depends for the deb package
  * CN name mapping in PAM and NSS
  * Version 0.6.5
  * Make CN an optional home directory attribute
  * Version 0.6.4
  * Add Ubuntu pam-config for pam_himmelblau
  * Configuration patches for himmelblau on Debian
  * Version 0.6.3
  * Bug in pam which needs defended against
  * Version 0.6.2
  * Never return the Pam result from get_user()
  * Correct installation directory of the deb pam module
  * Makefile typo fixes
  * Add libdbus-1-dev dep
  * Version 0.6.1
  * Debian build requires libdbus-1-dev</changelog>
  <changelog author="david.mulder@suse.com" date="1732536000">- Update to version 0.7.2+git.0.c76ac0e:
  * Version 0.7.2
  * Hello support depends on openssl3
  * Version 0.7.1
  * Fix sshd rpm depends
  * Resolve RPM dependencies automatically
  * Revert "deps(rust): update notify-debouncer-full requirement from 0.3 to 0.4"
  * Add openSUSE Tumbleweed packaging
  * Fix RPM packaging placement of systemd files
  * Remove the failed attempt at debian packaging
  * Add stable-0.7.x to CI workflows
  * deps(rust): update utoipa requirement from 4.0.0 to 4.2.0
  * deps(rust): update hashbrown requirement from 0.14.0 to 0.15.1
  * Remove missing feature causing warnings
  * deps(rust): update notify-debouncer-full requirement from 0.3 to 0.4
  * Specify scopes when making an SSO request
  * Implement logon script for ensuring compliance
  * Option for adding Entra Id users to local groups
  * Configure EL sshd with ChallengeResponseAuthentication yes
  * Add rocky 8 packaging
  * Add RPM packaging for EL9
  * Modify Ubuntu defaults to fix snaps
  * Resolve Libreoffice fails to start on Ubuntu
  * Minor formatting fix
  * Revert RwLock -&gt; Arc&lt;Mutex&gt; change in idmap
  * Ignore broker scopes requests for now
  * Ensure every file specifies the proper license
  * postinst should not fail on patch or apparmor update
  * Install pam module to additional location via make
  * Add sshd config to the Makefile
  * Don't use sudo in postinst/postrm scripts for deb
  * PAM should be placed first in the stack
  * Add the libutf8proc-dev dep for deb
  * Match the object ID of the fake user and group
  * Make it possible to stop the broker service
  * Move sshd config into it's own debian package
  * Allow the graph to start w/out network
  * Add hello_pin_min_length conf option
  * Don't attempt SFA fallback if AADSTSError
  * Have libhimmelblau handle the DAG fallback
  * Add a warning to user that SSH needs restarted
  * Ensure local users are ignored when CN mapping
  * Ensure DAG is rejected if lifetime expires
  * Rework the poll logic to resolve timeout issues
  * Add a sshd soft depends for the deb package
  * CN name mapping in PAM and NSS
  * Make CN an optional home directory attribute
  * Remove the sssd build dependencies
  * Configuration patches for himmelblau on Debian
  * Simplify PAM get_item_string calls
  * Bug in pam which needs defended against
  * Fix deb build by adding Broker service file
  * WIP: Install Ubuntu unix-chkpwd apparmor deps
  * Ensure make install places pam_himmelblau correctly
  * Add Ubuntu pam-config for pam_himmelblau
  * Never return Err(PAM_SUCCESS) from get_user
  * Never return the Pam result from get_user()
  * Revert "Speed up nss requests w/out auth attempt"
  * Speed up nss requests w/out auth attempt
  * Fix some broker responses
  * Fixes for the dbus broker
  * Attempt to fix the cargo version in launchpad build
  * Makefile typo fixes
  * Version 0.7.0
  * Add libdbus-1-dev dep
  * Improve the README installation instructions
  * Add `make install` command
  * Improve Debian/Ubuntu install instructions
  * Fix tag push permissions for tag-version workflow
  * Add a version check script
  * Remove the rustc dependency, breaking rustup
  * Add a debug option to the config
  * DBus requires that the service file match the name
  * Add a pam option for the OpenSSH 2876 workaround
  * Update to the latest libhimmelblau</changelog>
  <changelog author="david.mulder@suse.com" date="1732536001">- Update to version 0.7.4+git.0.d1291c6:
  * Version 0.7.4
  * Fix missing dependency utf8proc_NFKC_Casefold
  * Package Siemens Linux Entra SSO for Himmelblau
  * Add SLE15SP6 packaging
  * Add Fedora 41 packaging
  * Add Fedora Rawhide packaging
  * The tasks daemon needs /etc/groups write access
  * Version 0.7.3
  * Increase the cache timeout to 5 minutes
  * Always fetch and cache the graph url</changelog>
  <changelog author="david.mulder@suse.com" date="1732536002">- Update to version 0.7.5+git.0.8f421b0:
  * Version 0.7.5
  * Remove the org.samba.himmelblau dbus service</changelog>
  <changelog author="david.mulder@suse.com" date="1733140800">- Update to version 0.7.7+git.0.b48d0bb:
  * Version 0.7.7
  * Fix CVE-2024-11738: rustls network-reachable panic in `Acceptor::accept`
    (bsc#1233949).
  * Version 0.7.6
  * Enable module for utf8proc-devel in Rocky8</changelog>
  <changelog author="david.mulder@suse.com" date="1733400000">- Update to version 0.7.9+git.0.93655d2:
  * Version 0.7.9
  * Update to the latest libhimmelblau
  * Version 0.7.8
  * Add a himmelblau.conf man page, and package the man pages
  * Add DAG flow as a fallback for MFA</changelog>
  <changelog author="david.mulder@suse.com" date="1734004800">- Update to version 0.7.13+git.0.d790d31:
  * Version 0.7.13
  * Fix Fedora build dependencies
  * Version 0.7.12
  * Add Debian 12 packaging
  * Update github CI dependencies
  * Version 0.7.11
  * Implement Hello Pin changes via PAM; (jira#PED-11682).
  * Utilize HimmelblauConfig directly in pam and nss
  * Version 0.7.10
  * Add config parsing unit tests
  * Fix incorrect default domain
  * Fix config hsm type Tpm error
  * Include multi-domain important info in himmelblau.conf man</changelog>
  <changelog author="david.mulder@suse.com" date="1737979200">- Update to version 0.7.15+git.0.7a70a0b:
  * Version 0.7.15
  * Fix Credentials leaking in the debug log; (bsc#1236354).
  * Version 0.7.14
  * Update libhimmelblau version
  * Custom domains matching</changelog>
  <changelog author="david.mulder@suse.com" date="1746532800">- Update to version 0.7.16+git.0.f6e7faf:
  * Version 0.7.16
  * Fix CI failure caused by package revision
  * Update sccache-action version to use new cache service
  * CVE-2025-3416: Fix openssl Use After Free; (bsc#1242648).</changelog>
  <changelog author="david.mulder@suse.com" date="1750161600">- Update to version 0.7.17+git.0.1ebdab0:
  * CVE-2025-5791: Stop using deprecated `users` crate; (bsc#1244202).</changelog>
</package>
<package pkgid="bf5263b1abe17f50f4c33f86eac18d96bec49f28efa88b9a0b84ac60d8427329" name="libnss_himmelblau2" arch="x86_64">
  <version epoch="0" ver="0.7.18+git.0.8485a75" rel="150700.3.6.1"/>
  <changelog author="david.mulder@suse.com" date="1715774400">- Update to version 0.3.4+git.0.01d099f:
  * Version 0.3.4
  * Only remove cached user if it doesn't exist
  * Use existing user token at refresh
  * Always use the spn of the user for nss requests
  * Generate a fake user token to please SSH
  * Fix aad-tool to handle MFA
  * Fix lib_crypto version
  * Fix user dropping from NSS</changelog>
  <changelog author="david.mulder@suse.com" date="1716206400">- Update to version 0.4.0+git.0.69b64fe:
  * Add github workflows for the 0.4.x branch
  * Do not append to pam_allow_groups automatically
  * Pam Allow Groups must be specified by Object ID
  * Request the correct resource and permissions
  * Improve error output on group lookup failure
  * When faking a uuid for NSS, use a random uuid
  * Fix clippy warning about inefficient use of clone()
  * Remove the initial uid hack, use name mapping
  * Don't stop an MR based on a clippy warning
  * Update Kanidm tracking
  * Modify CI workflows to handle idmap build
  * Add CI job for cargo test
  * Test the new and legacy idmapping
  * Ensure duplicate providers are not started
  * Use the SSSD Idmap code in Himmelblau
  * Specify in conf that pam_allow_groups is required
  * Remove code duplication in Hello PIN auth
  * Fix Device authentication failed after enrollment
  * Update the base64urlsafedata version
  * Update README.md with Matrix contact info
  * Version 0.4.0</changelog>
  <changelog author="david.mulder@suse.com" date="1716379200">- Update to version 0.4.0+git.2.7b57f5e:
  * Always normalize idmap upn inputs</changelog>
  <changelog author="david.mulder@suse.com" date="1716379201">- Update to version 0.4.0+git.4.63e3704:
  * Fix a refresh token leak in debug from msal</changelog>
  <changelog author="david.mulder@suse.com" date="1716984000">- Update to version 0.4.1+git.0.41dd0dc:
  * Version 0.4.1
  * Use latest msal with MFA fixes
  * PhoneAppNotification is not a cred request algorithm
  * The polling_interval is in milliseconds, not seconds
  * OneWaySMS is additionally a valid OTP
  * Relicensing as GPL3, as SSSD source inclusion requires</changelog>
  <changelog author="david.mulder@suse.com" date="1721044800">- Update to version 0.4.3+git.2.6379abc:
  * Specifically use msal 0.2.6
  * Version 0.4.3
  * update libnss requirement from 0.7.0 to 0.8.0
  * himmelblaud stops working after suspend
  * Version 0.4.2
  * Fix ConsolidatedTelephony MFA method</changelog>
  <changelog author="david.mulder@suse.com" date="1725451200">- Update to version 0.5.0+git.0.22f84f0:
  * Update workflows for 0.5.x
  * Update Debian dependencies in README.md
  * Compilation fails on Ubuntu, missing ldb header
  * Fix base32 with kandim updates
  * deps(rust): update base32 requirement from ^0.4.0 to ^0.5.0
  * deps(rust): update scim_proto requirement from ^0.2.1 to ^1.3.2
  * deps(rust): update bindgen requirement from 0.69.4 to 0.70.1
  * Fix CI failures caused by cargo 1.80.1
  * Update to libhimmelblau version 0.2.9
  * deps(rust): update rusqlite requirement from ^0.31.0 to ^0.32.0
  * deps(rust): update tonic requirement from 0.11.0 to 0.12.0
  * update libnss requirement from 0.7.0 to 0.8.0
  * Switch to using libhimmelblau
  * himmelblaud stops working after suspend
  * Update required packages for tumbleweed
  * Disable the SFA fallback by default
  * Fix ConsolidatedTelephony MFA method
  * Use the group ID for the name if no display name
  * Use latest msal with MFA fixes
  * PhoneAppNotification is not a cred request algorithm
  * The polling_interval is in milliseconds, not seconds
  * OneWaySMS is additionally a valid OTP
  * Relicensing as GPL3, as SSSD source inclusion requires
  * Utilize the graph code in msal
  * config: Remove comments about experimental policy enforement
  * Remove the experimental policy code from the id provider
  * Fix a refresh token leak in debug from msal
  * Correct README details
  * Always normalize idmap upn inputs
  * Add video links to the README
  * Minor updates to the Contributing section
  * Add a Installation section to the README
  * Add the new SSSD idmap build deps to the README
  * Add a section about donations
  * Include the Samba Technical matrix channel
  * Add github workflows for the 0.4.x branch
  * Version 0.5.0 bump for main</changelog>
  <changelog author="william.brown@suse.com" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="david.mulder@suse.com" date="1727870400">- Update to version 0.6.0+git.0.b8dae18:
  * Attempt to fix the cargo version in launchpad build
  * Add branch stable-0.6.x to the workflows
  * Install the pam module to the proper location
  * Update README.md
  * Add a debug option to the config
  * Add a pam option for the OpenSSH 2876 workaround
  * Update to the latest libhimmelblau
  * Authorize all users when pam_allow_groups is empty
  * Fix clippy warnings
  * Fix pam echo not displayed via ssh
  * Fix pam failure to register Pin following mfa poll
  * Fork from kanidm
  * Version 0.6.0
  * Add cargo deb build
  * Version 0.5.3
  * Improve the README installation instructions
  * Add `make install` command
  * Improve Debian/Ubuntu install instructions
  * Fix tag push permissions for tag-version workflow
  * Version 0.5.2
  * Add a version check script
  * Version 0.5.1
  * Remove the rustc dependency, breaking rustup
  * Added Debian packaging workflow and files</changelog>
  <changelog author="david.mulder@suse.com" date="1729598400">- Update to version 0.6.14+git.0.bbda0b6:
  * Version 0.6.14
  * postinst should not fail on patch or apparmor update
  * Version 0.6.13
  * Don't use sudo in postinst/postrm scripts for deb
  * Version 0.6.12
  * PAM should be placed first in the stack
  * Match the object ID of the fake user and group
  * Version 0.6.11
  * Move sshd config into it's own debian package
  * Version 0.6.10
  * Allow the graph to start w/out network
  * Add hello_pin_min_length conf option
  * Version 0.6.9
  * Don't attempt SFA fallback if AADSTSError
  * Have libhimmelblau handle the DAG fallback
  * Add a warning to user that SSH needs restarted
  * Version 0.6.8
  * Ensure local users are ignored when CN mapping
  * Ensure DAG is rejected if lifetime expires
  * Version 0.6.7
  * Rework the poll logic to resolve timeout issues
  * Version 0.6.6
  * Add a sshd soft depends for the deb package
  * CN name mapping in PAM and NSS
  * Version 0.6.5
  * Make CN an optional home directory attribute
  * Version 0.6.4
  * Add Ubuntu pam-config for pam_himmelblau
  * Configuration patches for himmelblau on Debian
  * Version 0.6.3
  * Bug in pam which needs defended against
  * Version 0.6.2
  * Never return the Pam result from get_user()
  * Correct installation directory of the deb pam module
  * Makefile typo fixes
  * Add libdbus-1-dev dep
  * Version 0.6.1
  * Debian build requires libdbus-1-dev</changelog>
  <changelog author="david.mulder@suse.com" date="1732536000">- Update to version 0.7.2+git.0.c76ac0e:
  * Version 0.7.2
  * Hello support depends on openssl3
  * Version 0.7.1
  * Fix sshd rpm depends
  * Resolve RPM dependencies automatically
  * Revert "deps(rust): update notify-debouncer-full requirement from 0.3 to 0.4"
  * Add openSUSE Tumbleweed packaging
  * Fix RPM packaging placement of systemd files
  * Remove the failed attempt at debian packaging
  * Add stable-0.7.x to CI workflows
  * deps(rust): update utoipa requirement from 4.0.0 to 4.2.0
  * deps(rust): update hashbrown requirement from 0.14.0 to 0.15.1
  * Remove missing feature causing warnings
  * deps(rust): update notify-debouncer-full requirement from 0.3 to 0.4
  * Specify scopes when making an SSO request
  * Implement logon script for ensuring compliance
  * Option for adding Entra Id users to local groups
  * Configure EL sshd with ChallengeResponseAuthentication yes
  * Add rocky 8 packaging
  * Add RPM packaging for EL9
  * Modify Ubuntu defaults to fix snaps
  * Resolve Libreoffice fails to start on Ubuntu
  * Minor formatting fix
  * Revert RwLock -&gt; Arc&lt;Mutex&gt; change in idmap
  * Ignore broker scopes requests for now
  * Ensure every file specifies the proper license
  * postinst should not fail on patch or apparmor update
  * Install pam module to additional location via make
  * Add sshd config to the Makefile
  * Don't use sudo in postinst/postrm scripts for deb
  * PAM should be placed first in the stack
  * Add the libutf8proc-dev dep for deb
  * Match the object ID of the fake user and group
  * Make it possible to stop the broker service
  * Move sshd config into it's own debian package
  * Allow the graph to start w/out network
  * Add hello_pin_min_length conf option
  * Don't attempt SFA fallback if AADSTSError
  * Have libhimmelblau handle the DAG fallback
  * Add a warning to user that SSH needs restarted
  * Ensure local users are ignored when CN mapping
  * Ensure DAG is rejected if lifetime expires
  * Rework the poll logic to resolve timeout issues
  * Add a sshd soft depends for the deb package
  * CN name mapping in PAM and NSS
  * Make CN an optional home directory attribute
  * Remove the sssd build dependencies
  * Configuration patches for himmelblau on Debian
  * Simplify PAM get_item_string calls
  * Bug in pam which needs defended against
  * Fix deb build by adding Broker service file
  * WIP: Install Ubuntu unix-chkpwd apparmor deps
  * Ensure make install places pam_himmelblau correctly
  * Add Ubuntu pam-config for pam_himmelblau
  * Never return Err(PAM_SUCCESS) from get_user
  * Never return the Pam result from get_user()
  * Revert "Speed up nss requests w/out auth attempt"
  * Speed up nss requests w/out auth attempt
  * Fix some broker responses
  * Fixes for the dbus broker
  * Attempt to fix the cargo version in launchpad build
  * Makefile typo fixes
  * Version 0.7.0
  * Add libdbus-1-dev dep
  * Improve the README installation instructions
  * Add `make install` command
  * Improve Debian/Ubuntu install instructions
  * Fix tag push permissions for tag-version workflow
  * Add a version check script
  * Remove the rustc dependency, breaking rustup
  * Add a debug option to the config
  * DBus requires that the service file match the name
  * Add a pam option for the OpenSSH 2876 workaround
  * Update to the latest libhimmelblau</changelog>
  <changelog author="david.mulder@suse.com" date="1732536001">- Update to version 0.7.4+git.0.d1291c6:
  * Version 0.7.4
  * Fix missing dependency utf8proc_NFKC_Casefold
  * Package Siemens Linux Entra SSO for Himmelblau
  * Add SLE15SP6 packaging
  * Add Fedora 41 packaging
  * Add Fedora Rawhide packaging
  * The tasks daemon needs /etc/groups write access
  * Version 0.7.3
  * Increase the cache timeout to 5 minutes
  * Always fetch and cache the graph url</changelog>
  <changelog author="david.mulder@suse.com" date="1732536002">- Update to version 0.7.5+git.0.8f421b0:
  * Version 0.7.5
  * Remove the org.samba.himmelblau dbus service</changelog>
  <changelog author="david.mulder@suse.com" date="1733140800">- Update to version 0.7.7+git.0.b48d0bb:
  * Version 0.7.7
  * Fix CVE-2024-11738: rustls network-reachable panic in `Acceptor::accept`
    (bsc#1233949).
  * Version 0.7.6
  * Enable module for utf8proc-devel in Rocky8</changelog>
  <changelog author="david.mulder@suse.com" date="1733400000">- Update to version 0.7.9+git.0.93655d2:
  * Version 0.7.9
  * Update to the latest libhimmelblau
  * Version 0.7.8
  * Add a himmelblau.conf man page, and package the man pages
  * Add DAG flow as a fallback for MFA</changelog>
  <changelog author="david.mulder@suse.com" date="1734004800">- Update to version 0.7.13+git.0.d790d31:
  * Version 0.7.13
  * Fix Fedora build dependencies
  * Version 0.7.12
  * Add Debian 12 packaging
  * Update github CI dependencies
  * Version 0.7.11
  * Implement Hello Pin changes via PAM; (jira#PED-11682).
  * Utilize HimmelblauConfig directly in pam and nss
  * Version 0.7.10
  * Add config parsing unit tests
  * Fix incorrect default domain
  * Fix config hsm type Tpm error
  * Include multi-domain important info in himmelblau.conf man</changelog>
  <changelog author="david.mulder@suse.com" date="1737979200">- Update to version 0.7.15+git.0.7a70a0b:
  * Version 0.7.15
  * Fix Credentials leaking in the debug log; (bsc#1236354).
  * Version 0.7.14
  * Update libhimmelblau version
  * Custom domains matching</changelog>
  <changelog author="david.mulder@suse.com" date="1746532800">- Update to version 0.7.16+git.0.f6e7faf:
  * Version 0.7.16
  * Fix CI failure caused by package revision
  * Update sccache-action version to use new cache service
  * CVE-2025-3416: Fix openssl Use After Free; (bsc#1242648).</changelog>
  <changelog author="david.mulder@suse.com" date="1750161600">- Update to version 0.7.17+git.0.1ebdab0:
  * CVE-2025-5791: Stop using deprecated `users` crate; (bsc#1244202).</changelog>
  <changelog author="david.mulder@suse.com" date="1756814400">- Update to version 0.7.18+git.0.8485a75:
  * Version 0.7.18
  * deps(rust): bump tracing-subscriber in the cargo group; (bsc#1249013), (CVE-2025-58160)</changelog>
</package>
<package pkgid="8363238f8c9ab69a286d61d5706d7d14da2d486eb0a6edf97a653026cf56568d" name="libnss_himmelblau2" arch="x86_64">
  <version epoch="0" ver="2.3.9+git0.a9fd29b" rel="150700.3.15.1"/>
  <changelog author="david.mulder@suse.com" date="1716379200">- Update to version 0.4.0+git.4.63e3704:
  * Fix a refresh token leak in debug from msal</changelog>
  <changelog author="david.mulder@suse.com" date="1716984000">- Update to version 0.4.1+git.0.41dd0dc:
  * Version 0.4.1
  * Use latest msal with MFA fixes
  * PhoneAppNotification is not a cred request algorithm
  * The polling_interval is in milliseconds, not seconds
  * OneWaySMS is additionally a valid OTP
  * Relicensing as GPL3, as SSSD source inclusion requires</changelog>
  <changelog author="david.mulder@suse.com" date="1721044800">- Update to version 0.4.3+git.2.6379abc:
  * Specifically use msal 0.2.6
  * Version 0.4.3
  * update libnss requirement from 0.7.0 to 0.8.0
  * himmelblaud stops working after suspend
  * Version 0.4.2
  * Fix ConsolidatedTelephony MFA method</changelog>
  <changelog author="david.mulder@suse.com" date="1725451200">- Update to version 0.5.0+git.0.22f84f0:
  * Update workflows for 0.5.x
  * Update Debian dependencies in README.md
  * Compilation fails on Ubuntu, missing ldb header
  * Fix base32 with kandim updates
  * deps(rust): update base32 requirement from ^0.4.0 to ^0.5.0
  * deps(rust): update scim_proto requirement from ^0.2.1 to ^1.3.2
  * deps(rust): update bindgen requirement from 0.69.4 to 0.70.1
  * Fix CI failures caused by cargo 1.80.1
  * Update to libhimmelblau version 0.2.9
  * deps(rust): update rusqlite requirement from ^0.31.0 to ^0.32.0
  * deps(rust): update tonic requirement from 0.11.0 to 0.12.0
  * update libnss requirement from 0.7.0 to 0.8.0
  * Switch to using libhimmelblau
  * himmelblaud stops working after suspend
  * Update required packages for tumbleweed
  * Disable the SFA fallback by default
  * Fix ConsolidatedTelephony MFA method
  * Use the group ID for the name if no display name
  * Use latest msal with MFA fixes
  * PhoneAppNotification is not a cred request algorithm
  * The polling_interval is in milliseconds, not seconds
  * OneWaySMS is additionally a valid OTP
  * Relicensing as GPL3, as SSSD source inclusion requires
  * Utilize the graph code in msal
  * config: Remove comments about experimental policy enforement
  * Remove the experimental policy code from the id provider
  * Fix a refresh token leak in debug from msal
  * Correct README details
  * Always normalize idmap upn inputs
  * Add video links to the README
  * Minor updates to the Contributing section
  * Add a Installation section to the README
  * Add the new SSSD idmap build deps to the README
  * Add a section about donations
  * Include the Samba Technical matrix channel
  * Add github workflows for the 0.4.x branch
  * Version 0.5.0 bump for main</changelog>
  <changelog author="william.brown@suse.com" date="1726142400">- explicitly depend on cargo to pull in latest compiler revision</changelog>
  <changelog author="david.mulder@suse.com" date="1727870400">- Update to version 0.6.0+git.0.b8dae18:
  * Attempt to fix the cargo version in launchpad build
  * Add branch stable-0.6.x to the workflows
  * Install the pam module to the proper location
  * Update README.md
  * Add a debug option to the config
  * Add a pam option for the OpenSSH 2876 workaround
  * Update to the latest libhimmelblau
  * Authorize all users when pam_allow_groups is empty
  * Fix clippy warnings
  * Fix pam echo not displayed via ssh
  * Fix pam failure to register Pin following mfa poll
  * Fork from kanidm
  * Version 0.6.0
  * Add cargo deb build
  * Version 0.5.3
  * Improve the README installation instructions
  * Add `make install` command
  * Improve Debian/Ubuntu install instructions
  * Fix tag push permissions for tag-version workflow
  * Version 0.5.2
  * Add a version check script
  * Version 0.5.1
  * Remove the rustc dependency, breaking rustup
  * Added Debian packaging workflow and files</changelog>
  <changelog author="david.mulder@suse.com" date="1729598400">- Update to version 0.6.14+git.0.bbda0b6:
  * Version 0.6.14
  * postinst should not fail on patch or apparmor update
  * Version 0.6.13
  * Don't use sudo in postinst/postrm scripts for deb
  * Version 0.6.12
  * PAM should be placed first in the stack
  * Match the object ID of the fake user and group
  * Version 0.6.11
  * Move sshd config into it's own debian package
  * Version 0.6.10
  * Allow the graph to start w/out network
  * Add hello_pin_min_length conf option
  * Version 0.6.9
  * Don't attempt SFA fallback if AADSTSError
  * Have libhimmelblau handle the DAG fallback
  * Add a warning to user that SSH needs restarted
  * Version 0.6.8
  * Ensure local users are ignored when CN mapping
  * Ensure DAG is rejected if lifetime expires
  * Version 0.6.7
  * Rework the poll logic to resolve timeout issues
  * Version 0.6.6
  * Add a sshd soft depends for the deb package
  * CN name mapping in PAM and NSS
  * Version 0.6.5
  * Make CN an optional home directory attribute
  * Version 0.6.4
  * Add Ubuntu pam-config for pam_himmelblau
  * Configuration patches for himmelblau on Debian
  * Version 0.6.3
  * Bug in pam which needs defended against
  * Version 0.6.2
  * Never return the Pam result from get_user()
  * Correct installation directory of the deb pam module
  * Makefile typo fixes
  * Add libdbus-1-dev dep
  * Version 0.6.1
  * Debian build requires libdbus-1-dev</changelog>
  <changelog author="david.mulder@suse.com" date="1732536000">- Update to version 0.7.2+git.0.c76ac0e:
  * Version 0.7.2
  * Hello support depends on openssl3
  * Version 0.7.1
  * Fix sshd rpm depends
  * Resolve RPM dependencies automatically
  * Revert "deps(rust): update notify-debouncer-full requirement from 0.3 to 0.4"
  * Add openSUSE Tumbleweed packaging
  * Fix RPM packaging placement of systemd files
  * Remove the failed attempt at debian packaging
  * Add stable-0.7.x to CI workflows
  * deps(rust): update utoipa requirement from 4.0.0 to 4.2.0
  * deps(rust): update hashbrown requirement from 0.14.0 to 0.15.1
  * Remove missing feature causing warnings
  * deps(rust): update notify-debouncer-full requirement from 0.3 to 0.4
  * Specify scopes when making an SSO request
  * Implement logon script for ensuring compliance
  * Option for adding Entra Id users to local groups
  * Configure EL sshd with ChallengeResponseAuthentication yes
  * Add rocky 8 packaging
  * Add RPM packaging for EL9
  * Modify Ubuntu defaults to fix snaps
  * Resolve Libreoffice fails to start on Ubuntu
  * Minor formatting fix
  * Revert RwLock -&gt; Arc&lt;Mutex&gt; change in idmap
  * Ignore broker scopes requests for now
  * Ensure every file specifies the proper license
  * postinst should not fail on patch or apparmor update
  * Install pam module to additional location via make
  * Add sshd config to the Makefile
  * Don't use sudo in postinst/postrm scripts for deb
  * PAM should be placed first in the stack
  * Add the libutf8proc-dev dep for deb
  * Match the object ID of the fake user and group
  * Make it possible to stop the broker service
  * Move sshd config into it's own debian package
  * Allow the graph to start w/out network
  * Add hello_pin_min_length conf option
  * Don't attempt SFA fallback if AADSTSError
  * Have libhimmelblau handle the DAG fallback
  * Add a warning to user that SSH needs restarted
  * Ensure local users are ignored when CN mapping
  * Ensure DAG is rejected if lifetime expires
  * Rework the poll logic to resolve timeout issues
  * Add a sshd soft depends for the deb package
  * CN name mapping in PAM and NSS
  * Make CN an optional home directory attribute
  * Remove the sssd build dependencies
  * Configuration patches for himmelblau on Debian
  * Simplify PAM get_item_string calls
  * Bug in pam which needs defended against
  * Fix deb build by adding Broker service file
  * WIP: Install Ubuntu unix-chkpwd apparmor deps
  * Ensure make install places pam_himmelblau correctly
  * Add Ubuntu pam-config for pam_himmelblau
  * Never return Err(PAM_SUCCESS) from get_user
  * Never return the Pam result from get_user()
  * Revert "Speed up nss requests w/out auth attempt"
  * Speed up nss requests w/out auth attempt
  * Fix some broker responses
  * Fixes for the dbus broker
  * Attempt to fix the cargo version in launchpad build
  * Makefile typo fixes
  * Version 0.7.0
  * Add libdbus-1-dev dep
  * Improve the README installation instructions
  * Add `make install` command
  * Improve Debian/Ubuntu install instructions
  * Fix tag push permissions for tag-version workflow
  * Add a version check script
  * Remove the rustc dependency, breaking rustup
  * Add a debug option to the config
  * DBus requires that the service file match the name
  * Add a pam option for the OpenSSH 2876 workaround
  * Update to the latest libhimmelblau</changelog>
  <changelog author="david.mulder@suse.com" date="1732536001">- Update to version 0.7.4+git.0.d1291c6:
  * Version 0.7.4
  * Fix missing dependency utf8proc_NFKC_Casefold
  * Package Siemens Linux Entra SSO for Himmelblau
  * Add SLE15SP6 packaging
  * Add Fedora 41 packaging
  * Add Fedora Rawhide packaging
  * The tasks daemon needs /etc/groups write access
  * Version 0.7.3
  * Increase the cache timeout to 5 minutes
  * Always fetch and cache the graph url</changelog>
  <changelog author="david.mulder@suse.com" date="1732536002">- Update to version 0.7.5+git.0.8f421b0:
  * Version 0.7.5
  * Remove the org.samba.himmelblau dbus service</changelog>
  <changelog author="david.mulder@suse.com" date="1733140800">- Update to version 0.7.7+git.0.b48d0bb:
  * Version 0.7.7
  * Fix CVE-2024-11738: rustls network-reachable panic in `Acceptor::accept`
    (bsc#1233949).
  * Version 0.7.6
  * Enable module for utf8proc-devel in Rocky8</changelog>
  <changelog author="david.mulder@suse.com" date="1733400000">- Update to version 0.7.9+git.0.93655d2:
  * Version 0.7.9
  * Update to the latest libhimmelblau
  * Version 0.7.8
  * Add a himmelblau.conf man page, and package the man pages
  * Add DAG flow as a fallback for MFA</changelog>
  <changelog author="david.mulder@suse.com" date="1734004800">- Update to version 0.7.13+git.0.d790d31:
  * Version 0.7.13
  * Fix Fedora build dependencies
  * Version 0.7.12
  * Add Debian 12 packaging
  * Update github CI dependencies
  * Version 0.7.11
  * Implement Hello Pin changes via PAM; (jira#PED-11682).
  * Utilize HimmelblauConfig directly in pam and nss
  * Version 0.7.10
  * Add config parsing unit tests
  * Fix incorrect default domain
  * Fix config hsm type Tpm error
  * Include multi-domain important info in himmelblau.conf man</changelog>
  <changelog author="david.mulder@suse.com" date="1737979200">- Update to version 0.7.15+git.0.7a70a0b:
  * Version 0.7.15
  * Fix Credentials leaking in the debug log; (bsc#1236354).
  * Version 0.7.14
  * Update libhimmelblau version
  * Custom domains matching</changelog>
  <changelog author="david.mulder@suse.com" date="1746532800">- Update to version 0.7.16+git.0.f6e7faf:
  * Version 0.7.16
  * Fix CI failure caused by package revision
  * Update sccache-action version to use new cache service
  * CVE-2025-3416: Fix openssl Use After Free; (bsc#1242648).</changelog>
  <changelog author="david.mulder@suse.com" date="1750161600">- Update to version 0.7.17+git.0.1ebdab0:
  * CVE-2025-5791: Stop using deprecated `users` crate; (bsc#1244202).</changelog>
  <changelog author="david.mulder@suse.com" date="1756814400">- Update to version 0.7.18+git.0.8485a75:
  * Version 0.7.18
  * deps(rust): bump tracing-subscriber in the cargo group; (bsc#1249013), (CVE-2025-58160)</changelog>
  <changelog author="david.mulder@suse.com" date="1771934400">- Update to version 2.3.5+git0.9dd526c; (jsc#PED-14511):
  * Better handle Intune API version
  * deps(rust): bump the all-cargo-updates group with 8 updates; (bsc#1257904), (CVE-2026-25727)
  * Update make vet from main branch
  * pam_himmelblau: call split_username once in chauthtok
  * pam_himmelblau: return PAM_IGNORE in chauthtok for local users
  * Don't attempt a DAG when Hello fails with SSPR demand
- Update to version 2.3.4+git0.db5df80:
  * Version 2.3.4
  * cargo vet
  * deps(rust): bump the all-cargo-updates group across 1 directory with 8 updates
  * Revert sketching update (which breaks SLE16 build)
- Update to version 2.3.3+git0.25e8b73:
  * Version 2.3.3
  * cargo vet
  * /var/cache/private/himmelblaud should not be created tmpfiles
  * Updatee python vers for dataclasses dep
  * deps(rust): bump the all-cargo-updates group across 1 directory with 3 updates
  * Generate pin init service file systemd &lt; 250
  * Checkin missing himmelblaud.if file for SELinux
  * Resolve typos in selinux package commands
- Update to version 2.3.2+git0.5a7a598:
  * Compile SELinux policy at install time for cross-distro compatibility
  * Improve PAM configuration on openSUSE/SLE
  * Fix SELinux policy
  * Add a git hook to ensure selinux policy is tested
  * Ignore generated himmelblau-hsm-pin-init service file
  * Refactor SELinux policy for cross-distro compatibility
  * cargo vet
  * Fix NSS lookup for mapped local users
  * Skip OS version compliance checks when min/max values are empty
- Update to version 2.3.1+git0.2418ec2:
  * Version 2.3.1
  * Remove references to qrcodegen (these are 3.x features)
  * QR Greeter compatibility for old GNOME
  * Enable QR greeter automatically
  * ci: Use latest cargo-vet from git to fix CI
  * Fix HSM pin migration failure on Debian/Ubuntu upgrades from v1.4.x
  * Version 2.3.0
  * cargo vet
  * Update make vet from main branch
  * Autostart the daemons on fresh install or upgrade
  * Restart sshd when installing the ssh config
  * Allow tasks daemon to write krb ccache
  * Do not enumerate mapped users in NSS
  * deps(rust): bump the all-cargo-updates group across 1 directory with 8 updates
  * Update libhimmelblau to latest version
  * Fix Tumbleweed build
  * cargo vet
  * Version 2.2.0
  * Update libhimmelblau to 0.8.x series
  * deps(rust): bump the all-cargo-updates group with 17 updates
  * Only use OpenSSH bug workaround for ssh service
  * Fix debug noise from removing user from sudo group
  * systemd: install files to /usr/lib/, not /etc/
  * Version 2.1.0
  * Fix nightly authselect build failure
  * Generate the authselect profiles for each distro
  * Improve pam config handling in aad-tool
  * Make `aad-tool configure-pam` detect location of pam files
  * Version 2.0.5
  * /var/lib/private/himmelblaud should be owned by root
  * Use tmpfiles.d to create himmelblaud private data directory
- Resolve mode mismatch with Chromium package.
- Update to version 2.0.4+git.2.5d26a19:
  * deps(rust): bump the all-cargo-updates group with 13 updates
  * Version 2.0.4
  * Update kanidm_build_profiles mask version
  * Utilize cargo vet from main
  * Add policies cache patch via systemd-tmpfiles
- Update to version 2.0.3+git.4.4f6e025:
  * Fix man page comments about change idmap_range
  * Stub picky-krb for osc build
  * Stub a kanidm_build_profiles which builds in osc
  * Ensure nss cache is created on Ubuntu/Debian
  * Request a user token if NSS hasn't been called
  * Version 2.0.3
  * Add nss cache patch via systemd-tmpfiles
  * Version 2.0.2
  * Recommend `patch` with the pam package
  * Fix passwordless FIDO authentication not being used when available
  * Git workflow updates for stable-2.x
  * Only warn on Intune failure
  * Version 2.0.1
  * Force o365 desktop files to always rebuild
  * Always rebuild the o365 apps
  * Add restart on-failure to systemd services
  * Clarify `domain` SHOULD match login domain
  * Remove warning about `domain` himmelblau.conf opt
  * Pseudo eliminate multi-tenant and domains section
  * Revert "Fix Hello PIN lookup when an alias domain"
  * Comment out `KbdInteractiveAuthentication on` in sshd conf
  * Check the nxset sooner, to avoid unwanted errors
  * Recommend oddjob_mkhomedir with authselect
  * Pin libhimmelblau to 0.7.x
  * Deprecate Fedora 41
  * Cargo vet
  * deps(rust): bump the all-cargo-updates group with 11 updates
  * Bump github/codeql-action from 4.30.8 to 4.31.2
  * Bump cachix/install-nix-action from 31.8.1 to 31.8.2
  * Bump actions/upload-artifact from 4.6.2 to 5.0.0
  * cargo clippy and rebase fix
  * fixup! add extra debug output to NotFound error code
  * force error output to show up in CI logs
  * wrap repeated sources of IdpError::NotFound in helper functions
  * add extra debug output to NotFound error code
  * use direnv for loading the nix devshell
  * We should still encourage mapping by name
  * Add support for Fedora 43
  * Provide a offline 'breakglass' mode
  * cargo clippy
  * Add warning about incorrect nsswitch configuration
  * Distinguish between online and offline token fail
  * Ensure user token uses original name
  * Fix alias domain in auth result causing failure
  * Resolve cargo clippy warnings
  * Only map on cn name for the primary domain
  * Install systemd in build scripts for gen service
  * Fix systemd version parsing
  * cargo vet
  * Update libhimmelblau to 0.7.19
  * Resolve SELinux build failures in nightly (part 2)
  * Rocky container image updates were failing
  * Warn instead of error when no idmap_range specified
  * deps(rust): bump the all-cargo-updates group across 1 directory with 7 updates
  * Trim whitespace from local group names
  * Fix borrowing error
  * Fix reference to local_sudo_group in condition
  * Only run sudo_groups if local_groups does not contain local_sudo_group
  * Leave SELinux in permissive mode for Himmelblau
  * Resolve SELinux build failures in nightly
  * nix: add join_type option to nixos-module settings
  * Build host configuration changes
  * Ensure that hsm_pin isn't present decrypted
  * Document Soft HSM changes to TPM bound
  * Disable SELinux by default on NixOS
  * sh doesn't have `source`
  * Encrypt hsm-pin using systemd-creds
  * Recommend uuid id mapping
  * Improve himmelblau.conf man page formatting
  * Implement Local User Mapping
  * Add o365 dependency for jq
  * Add selinux rules for gdm login
  * Narrow the scope of selinux policy with audit2allow
  * Generate the systemd service files
  * Fix selinux build for SLE16
  * Resolve SLE16 build dependency failure
  * Fix the rawhide build
  * Mask the sshkey-attest package
  * Bump cachix/install-nix-action from 31.7.0 to 31.8.1
  * cargo vet dependency updates
  * deps(rust): bump the all-cargo-updates group across 1 directory with 13 updates
  * Bump actions/dependency-review-action from 4.8.0 to 4.8.1
  * Bump cachix/install-nix-action from 31.7.0 to 31.8.0
  * Bump github/codeql-action from 3.30.5 to 4.30.8
  * Bump ossf/scorecard-action from 2.4.2 to 2.4.3
  * SELinux improvements
  * Fix a typo in package gen scripts
  * cargo fmt
  * Permit NSS response for mapped primary fake group
  * Fix Nix Error With Fuzz
  * Decrease CI fuzzer setup time
  * Document join types
  * Support for Entra registered devices
  * Run `cargo test` in a container
  * Bump cachix/install-nix-action from 31.6.2 to 31.7.0
  * cargo vet
  * deps(rust): bump the all-cargo-updates group across 1 directory with 2 updates
  * Bump github/codeql-action from 3.30.4 to 3.30.5
  * Use pastey crate instead of unmaintained paste
  * cargo vet
  * Pin unmaintained serde_cbor dep to serde_cbor_2
  * Resolve tower-http `cargo audit` warning
  * Replace unmaintained fxhash with own version
  * Resolve warning about workflow top level write permissions
  * Remove dependabot automerge
  * Resolve division by 0 in idmap code
  * deps(rust): bump the all-cargo-updates group across 1 directory with 3 updates
  * [StepSecurity] ci: Harden GitHub Actions
  * Only idmap against initialized domains
  * Resolve invalid init of idmap with same domain
  * Resolve division by 0 in idmap code
  * Add fuzzing of idmap code
  * Add basic fuzzing of the config options
  * cargo clippy
  * Resolve error found by fuzzing
  * cargo vet prune
  * deps(rust): bump regex in the all-cargo-updates group
  * Bump actions/dependency-review-action from 4.7.3 to 4.8.0
  * Bump actions/checkout from 3.6.0 to 5.0.0
  * Bump cachix/cachix-action from 14 to 16
  * Bump ossf/scorecard-action from 2.4.0 to 2.4.2
  * Bump cachix/install-nix-action from 25 to 31
  * Add the OpenSSF Best Practices badge
  * Add scorecard badge
  * [StepSecurity] Apply security best practices
  * Fix group static mapping
  * Move aad-tool idmap cache clear to the idmap cmd
  * Resolve errant "Hello key missing." messages
  * Update flake.nix
  * Slow the dependabot update frequency
  * Audit dependabot updates
  * deps(rust): bump the all-cargo-updates group across 1 directory with 11 updates
  * feat: Add support for aarch64 on Debian-based distributions
  * Resolve possible invalid pointer dereferences
  * Cargo clippy
  * Cargo fmt
  * Avoid revealing account ids in debug log
  * Cause doc links to open in the correct apps
  * Permit opening multiple instances of Word/Excel
  * Modify systray and app close behavior
  * Don't use questionably licensed icons for o365
  * Resolve NixOS CI failure
  * Fix building w/out deprecated interactive feature
  * Update himmelblau.conf.5 sudo_groups example
  * Entra group based sudo access
  * Audited the cargo updates
  * deps(rust): bump the all-cargo-updates group with 6 updates
  * Vet libhimmelblau
  * Add `make vet` command
  * Update deny.toml
  * Remove incompatible licenses from deps
  * Fix RHEL8 package signing
  * Add SBOM generation
  * Add an IRP checklist for security incidents
  * Run the nixos build/release on the correct version
  * Add crate dependency auditing on MR
  * Add some exceptions
  * Initialize cargo vet
  * Remove in-tree kanidm dependencies
  * Fix Hello PIN lookup when an alias domain
  * Raise maximum group lookup from 100 to 999
  * Always work with lowercase account names
  * Modify FUNDING.yml for funding sources
  * Remove glib dependency
  * deps(rust): bump the all-cargo-updates group with 10 updates
  * Add CI check for licenses
  * Update dependabot.yml to target all stable branches
  * Add authselect module for Rocky/Fedora
  * Recommend packages, instead of require
  * Add a Contributing document
  * Add a Code of Conduct
  * add withSelinux flag to nix build, brings SELinux binaries into the build environment.
  * deps(rust): bump tracing-subscriber in the cargo group
  * Don't overwrite the himmelblau.conf on rpm upgrade
  * Add help output to the Makefile
  * Fix building packages with docker in root mode
  * Update to latest libhimmelblau and identity_dbus_broker
  * Make PRT SSO cookie via broker work as well for Edge
  * Make broker work for Edge
  * Generate Office 365 desktop apps
  * Update README
  * Add `make uninstall` command
  * Remove the deprecated tests suite
  * Himmelblau no longer has git submodules
  * Make install using packages
  * Add Debian 13 packages
  * Generate Dockerfiles automatically
  * Add SELinux configuration
  * Himmelblau daemon requires system tss user
  * Add cron dependency for Intune scripts
  * Do not mangle /usr/etc configuration files
  * Fix building packages with docker in root mode
  * deps(rust): bump the all-cargo-updates group with 11 updates
  * deps(rust): bump the all-cargo-updates group with 7 updates
  * Add SLE16 (beta) build target
  * Automatically append to nsswitch.conf in postinst
  * Correct the RPM postinst script syntax
  * Fix Kerberos credential cache permissions
  * Set file owner and group before writing its content
  * Create SECURITY.md
  * deps(rust): bump the all-cargo-updates group with 6 updates
  * Rev the dev version to 2.0.0
  * Ensure alias domains match when checking Intune device id
  * Debian 12 doesn't support ConditionPathExists and notify-reload
  * Write scripts policy to a readable directory
  * Apply Intune policies right after enrollment
  * Add more debug instrumentation
  * Provide device_id to Intune enrollment if not cached
  * Ensure nss cache directory is created during install
  * Remove /var/cache/himmelblaud access from tasks daemon
  * Resolve daemon startup absolute path warnings
  * Delay Intune enrollment on Device Auth fail
  * Do not leak the Intune IW service token in the logs
- Update to version 1.4.2+git.0.52da279:
  * Version 1.4.2
  * Rocky container image updates were failing
  * Revert libhimmelblau unstable update
  * Version 1.4.1
  * Update Intune to use app version 1.2511.7
  * Version 1.4.0
  * Resolve build failures
  * deps(rust): bump the all-cargo-updates group across 1 directory with 6 updates
  * Permit NSS response for mapped primary fake group
- Update to version 1.3.0+git.0.f8cabb7:
  * Resolve errant "Hello key missing." messages
  * Version 1.3.0
  * Fix group static mapping
  * Move aad-tool idmap cache clear to the idmap cmd
  * deps(rust): bump the all-cargo-updates group across 1 directory with 11 updates
  * deps(rust): bump the all-cargo-updates group with 6 updates
  * Fix RHEL8 package signing
  * Fix Hello PIN lookup when an alias domain
  * Raise maximum group lookup from 100 to 999
  * Always work with lowercase account names
  * Revert the self-hosted runner name
  * deps(rust): bump the all-cargo-updates group with 23 updates
- Update to version 1.2.2+git.0.2d04bca:
  * Include latest branch in CI
  * Self hosted runners
  * Version 1.2.2
  * deps(rust): bump tracing-subscriber in the cargo group; (bsc#1249013), (CVE-2025-58160)
  * Version 1.2.1
  * Automatically append to nsswitch.conf in postinst
  * Correct the RPM postinst script syntax
- Update to version 1.2.0+git.0.6befefc:
  * Version 1.2.0
  * Fix Kerberos credential cache permissions; (bsc#1247735), (CVE-2025-54882)
  * Set file owner and group before writing its content
  * Ensure alias domains match when checking Intune device id
  * Debian 12 doesn't support ConditionPathExists and notify-reload
  * Write scripts policy to a readable directory
  * Apply Intune policies right after enrollment
  * Add more debug instrumentation
  * Provide device_id to Intune enrollment if not cached
  * Ensure nss cache directory is created during install
  * Remove /var/cache/himmelblaud access from tasks daemon
  * Resolve daemon startup absolute path warnings
  * Version 1.1.0
  * Delay Intune enrollment on Device Auth fail
  * Do not leak the Intune IW service token in the logs
- Update to version 1.0.0+git.0.d01709b:
  * Fix policy application
  * Add remaining Linux password compliance policies
  * Add custom compliance enforcement
  * deps(rust): bump the all-cargo-updates group with 3 updates
  * deps(rust): bump the all-cargo-updates group with 5 updates
  * Add SLE15SP7 build target
  * Add RHEL 10 build target
  * Fix Intermittent auth issue AADSTSError 16000
  * Remove old utf8proc dependency
  * Add `fedora42` build target
  * Handle PRT expiration and tie to offline auth
  * Correctly delete the Hello keys on bad pin count
  * Add ability to disable Hello PIN per-service
  * Update NixOS support to 25.05
  * Handle disabled device by attempting re-enrollment
  * Always attempt confidential client creds for aad-tool
  * Include HSM option defs in himmelblau.conf man page
  * Update flake.nix
  * Improve the aad-tool cache-clear command
  * Add `mfaSshWorkaroundFlag` configuration option to Nix Flake.
  * Add the ability to remove confidential client creds
  * If bad PIN count is exceeded, delete the Hello key
  * deps(rust): bump the all-cargo-updates group with 4 updates
  * Add instructions for creating developer builds
  * Fix GDM3 first time login password prompt
  * Default HsmType should be soft
  * Add himmelblaud to tss group for TPM startup
  * Enforce strict order for the systemd units
  * Update libhimmelblau and compact_jwt
  * Fix builds w/tpm
  * aad-tool Authentication flow improvements
  * Filter out irrelevant debug in aad-tool
  * Create a unified login experience for aad-tool
  * Utilize confidential creds for aad-tool enumerate
  * himmelblau should get posix attributes w/out delegate user access
  * Always use the Object Id for mapping Group to GID
  * Update enhancement-request.md for SPI donations
  * Update bug_report.md with SPI donation
  * deps(rust): bump the all-cargo-updates group with 4 updates
  * Update build requires in README.md
  * Enforce strict order for the systemd units
  * Update FUNDING.yml with SPI Paypal donation button
  * Don't break from tasks loop when policies fail
  * Enroll in Intune as soon as it is enabled
  * Implement `decoupled hello` behavior
  * Cache encrypted PRT to disk for offline login SSO
  * Update to latest hsm-crypto
  * Enable tpm functionality
  * Allow altering the password and PIN prompt messages
  * Ensure Hello PIN lockout happens when online
  * Cache the build target output to improve build times
  * Easier build selection w/ Makefile
  * Revert mistaken removal from Makefile
  * Make the user wait longer with each incorrect PIN
  * Make the bad PIN count configurable
  * Improve aad-tool manpage
  * aad-tool fails if the user has FIDO2 enabled
  * Offline auth permits authentication with invalid Hello PIN
  * PIN complexity to match Windows
  * Update to latest SSSD idmap code
  * Add aad-tool options for setting posix attrs
  * Add scopes and redirect uris aad-tool application create
  * Add aad-tool commands for managaging extension attrs
  * deps(rust): bump the all-cargo-updates group with 4 updates
  * cargo clippy
  * cargo fmt
  * Utilize the sidtoname call for object id mapping
  * Add commands for listing/creating App registrations
  * Potential fix for code scanning alert no. 2: Workflow does not contain permissions
  * Potential fix for code scanning alert no. 4: Workflow does not contain permissions
  * Potential fix for code scanning alert: Workflow does not contain permissions
  * Never write the app_id to the server config
  * Disable passwordless Fido by default
  * Stop using deprecated `users` crate
  * When group membership lookup fails, use cached groups
  * deps(rust): bump the all-cargo-updates group across 1 directory with 11 updates
  * deps(rust): bump the all-cargo-updates group with 4 updates
  * aad-tool command for enumerating users and groups
  * Name-Based Group Matching in `pam_allow_groups` Leads to Potential Security Bypass
  * Add the configure-pam option to aad-tool man page
  * Add static idmap cache for on-prem to cloud migration
  * Update bug_report.md with request for himmelblau.conf
  * deps(rust): bump the all-cargo-updates group with 2 updates
  * Update crates in a group
  * Update crate bumps
  * Utilize new Intune compliance enforcement via libhimmelblau
  * Correct the README regarding Intune policy compliance
  * Disable Chromium policy
  * Re-enable Intune policy and add scripts and compliance policies
  * himmelblau.conf alias `domain` as `domains`
  * Support Fido auth in pam passwd
  * Add TAP support to himmelblaud and pam passwd
  * Mixed case names should properly identify Hello Key
  * Update linux-entra-sso to latest version
  * Fix group lookup for Entra Id group name
  * Fix mixed case name lookup from PRT cache
  * Crate updates
  * Fix tasks daemon debug output
  * Remove write locks where unecessary
  * Fix deadlock in nss
  * systemd notify fixes
  * Console
  * Address Feedback
  * Order services before gdb/nss-user-target
  * deps(rust): bump rpassword from 7.3.1 to 7.4.0
  * deps(rust): bump tokio from 1.44.2 to 1.45.0
  * deps(rust): bump sha2 from 0.10.8 to 0.10.9
  * deps(rust): bump systemd-journal-logger from 2.2.0 to 2.2.2
  * deps(rust): bump clap from 4.5.31 to 4.5.38
  * Update notify-debouncer-full
  * Update opentelemetry
  * Update dependencies
  * deps(rust): bump time from 0.3.39 to 0.3.41
  * Replace source filter that blacklists files with filter that whitelists files.
  * Mark himmelblau.conf as config in rpm
  * Update README.md
  * Ensure only the base URL is printed to log
  * If unix_user_get fails, wait, and try again
  * Supplying a PRT cookie to SSO doesn't require network
  * Don't send a password prompt if the network is down
  * Auth via MFA if Hello PIN fails 3 times
  * Improve Hello PIN failed auth error
  * Fix rocky9 build
  * deps(rust): bump anyhow from 1.0.96 to 1.0.98
  * deps(rust): bump libc from 0.2.170 to 0.2.172
  * deps(rust): bump cc from 1.2.16 to 1.2.19
  * Update README.md
  * deps(rust): bump tokio from 1.43.0 to 1.44.2
  * deps(rust): bump openssl from 0.10.71 to 0.10.72 in the cargo group
  * deps(rust): bump reqwest from 0.12.12 to 0.12.15
  * Update libhimmelblau in Cargo.lock
  * Fix nss and offline checks for domain aliases
  * Report error when MS Authenticator denies authorization
  * Bail out of invalid offline auth
  * Handle AADSTS errors from BeginAuth response
  * Never dump failed reqwests to the log
  * Update sccache-action version to use new cache service
  * Permit daemon to start when network is down
  * Add an nss cache for when daemon is down
  * Additional pam info cues
  * Proceed with Hello auth even with net down
  * Indicate to the user what the password and PIN are
  * Ensure pam messages are seen
  * Display the minimum PIN length during Hello setup
  * PAM should loop, not die on error
  * Ensure prompt msg remains for confirmation
  * Update bug_report.md
  * Ignore demands for setting up MS Authenticator
  * Login fails if Entra is configured to recommend MS authenticator
  * Add pam configure command to aad-tool
  * Update README.md with pam passwd instructions
  * aad-tool authtest needs to map names
  * Update demo video in README.md
  * Sign RPM packages
  * Ensure the pam module is installed correctly for SLE
  * Improve pam error handling and messaging
  * Only push cachix builds for stable releases
  * Terminate linux-entra-sso when browser terminates
  * On deb, push pam config after install
  * Increase priority of deb PAM passwd for Himmelblau
  * Improve offline state handling
  * Specify request for Entra Id password in PAM
  * QR Greeter also supports gnome-shell 47
  * Fix profile photo loading
  * Clarify pam_allow_groups in himmelblau.conf man page
  * Don't hide debug for pam_allow_groups miss
  * Handle failures in passwordless auth
  * build all root packages
  * split config options that can be defined per-domain from those which are global only
  * configure cachix signing and upload in ci
  * deps(rust): bump serde_json from 1.0.138 to 1.0.140
  * deps(rust): bump serde from 1.0.218 to 1.0.219
  * deps(rust): bump time from 0.3.37 to 0.3.39
  * deps(rust): bump bytes from 1.10.0 to 1.10.1
  * deps(rust): bump pkg-config from 0.3.31 to 0.3.32
  * Entra Id is case insensitive, cache lookup must match
  * deps(rust): bump ring from 0.17.9 to 0.17.13 in the cargo group
  * Support CompanionAppsNotification mfa method
  * QR code for gnome-shell greeter
  * Allow tasks to start if AccountsService dir missing
  * Remove invalid python dependency from sso package
  * Fixes https://github.com/himmelblau-idm/himmelblau/issues/397
  * Clear server config when clearing cache
  * Update version in the Cargo.lock
  * deps(rust): bump async-trait from 0.1.86 to 0.1.87
  * deps(rust): bump chrono from 0.4.39 to 0.4.40
  * Fix himmelblau.conf man page cn_name_mapping entry
  * deps(rust): bump pem from 3.0.4 to 3.0.5
  * deps(rust): bump serde from 1.0.217 to 1.0.218
  * Version 1.0.0
  * deps(rust): bump cc from 1.2.15 to 1.2.16
  * Update workflow versions
- Update to version 0.9.21+git.0.6963ee0:
  * Fix authentication when passkeys are enabled
  * Version 0.9.20
  * Fix Intermittent auth issue AADSTSError 16000
  * Version 0.9.19
  * Disable cookies
  * Version 0.9.18
  * Cache the build target output to improve build times
  * Easier build selection w/ Makefile
  * Never write the app_id to the server config
- Update to version 0.9.17+git.0.4a97692:
  * Version 0.9.17
  * Offline auth permits authentication with invalid Hello PIN; (CVE-2025-53013).
  * Cargo fmt
  * Don't neglect to sign the rpm packages
- Update to version 0.9.16+git.0.aac2205:
  * Disable passwordless Fido by default
  * Stop using deprecated `users` crate
  * Version 0.9.16
  * When group membership lookup fails, use cached groups
  * Just report whether some passwordless type is available
  * Version 0.9.15
  * Name-Based Group Matching in `pam_allow_groups` Leads to Potential Security Bypass
  * Version 0.9.14
  * Support Fido auth in pam passwd
  * Add TAP support to himmelblaud and pam passwd
  * Mixed case names should properly identify Hello Key
  * Remove write locks where unecessary
  * Fix group lookup for Entra Id group name
  * Version 0.9.13
  * Fix mixed case name lookup from PRT cache
- Update to version 0.9.12+git.0.99b5ca6:
  * Version 0.9.12
  * Fix deadlock in nss
  * systemd notify fixes
- Update to version 0.9.11+git.0.04ef9c8:
  * Ensure only the base URL is printed to log
  * Version 0.9.11
  * Supplying a PRT cookie to SSO doesn't require network
  * Improve Hello PIN failed auth error
  * Fix rocky9 build
  * Fix nss and offline checks for domain aliases
  * Report error when MS Authenticator denies authorization
  * Bail out of invalid offline auth
  * Handle AADSTS errors from BeginAuth response
  * Never dump failed reqwests to the log
  * Update sccache-action version to use new cache service
  * Permit daemon to start when network is down
  * Version 0.9.10
  * Add an nss cache for when daemon is down
  * Additional pam info cues
  * Proceed with Hello auth even with net down
  * Indicate to the user what the password and PIN are
  * Specify request for Entra Id password in PAM
  * Ensure pam messages are seen
  * Display the minimum PIN length during Hello setup
  * PAM should loop, not die on error
  * Ensure prompt msg remains for confirmation
- Update to version 0.9.9+git.0.5425b98:
  * Version 0.9.9
  * Ignore demands for setting up MS Authenticator
- Update to version 0.9.8+git.0.3f20b1b:
  * configure cachix signing and upload in ci
  * Version 0.9.8
  * Improve pam error handling and messaging
  * Version 0.9.7
  * Terminate linux-entra-sso when browser terminates
  * On deb, push pam config after install
  * Increase priority of deb PAM passwd for Himmelblau
  * Improve offline state handling
  * QR Greeter also supports gnome-shell 47
  * Version 0.9.6
  * Fix profile photo loading
  * Clarify pam_allow_groups in himmelblau.conf man page
  * Don't hide debug for pam_allow_groups miss
  * Version 0.9.5
  * Handle failures in passwordless auth
- Update to version 0.9.4+git.0.9909238:
  * Version 0.9.4
  * bump ring from 0.17.9 to 0.17.13
  * Entra Id is case insensitive, cache lookup must match
  * Support CompanionAppsNotification mfa method
  * Version 0.9.2
  * QR code for gnome-shell greeter
  * Allow tasks to start if AccountsService dir missing
  * Remove invalid python dependency from sso package
  * Version 0.9.1
  * himmelblaud-tasks stops due to missing dir
  * Clear server config when clearing cache
  * Fix himmelblau.conf man page cn_name_mapping entry
  * Update workflow versions
  * Document the requirements for app_id
  * Properly handle aad error from auth code req
  * Provide a group gid fallback for rfc2307 id map
  * Remove option defs from the default debian himmelblau.conf
  * Ensure tasks daemon creates files w/ correct gid
  * Isolate the name mapping so it only happens if enabled
  * Default to request group info via Edge browser
  * Avoid modifying the cache entries
  * Utilize systemd notify to avoid tasks started fail
  * Ubuntu PAM module configuration to change PIN
  * Resolve migration error `real_gidnumber` missing
  * deps(rust): bump libc from 0.2.169 to 0.2.170
  * deps(rust): bump clap_complete from 4.5.45 to 4.5.46
  * Fix some clippy warnings
  * Cause tasks daemon to honor configured debug
  * Fetch user profile photo via tasks daemon
  * deps(rust): bump clap from 4.5.30 to 4.5.31
  * deps(rust): bump anyhow from 1.0.95 to 1.0.96
  * deps(rust): bump cc from 1.2.14 to 1.2.15
  * Add apparmor whitelisting for nss mapping cache
  * Dramatically improve debug logging
  * Move the NixOS CI to a different workflow (w/out main)
  * Add a sample himmelblau.conf in docs
  * Resolve missed auth code redirect
  * Implement mapped name caching in NSS
  * Add script on-behalf-of flow for logon scripts
  * Update Cargo.lock deps
  * Update installation instructions in the README
  * Donation requests in the issue templates
  * Update README.md with contribute badge
  * Update README.md with contributions statement
  * Create FUNDING.yml
  * Update README.md
  * fix failing test expecting /bin/echo to be available
  * add nixos ci tests
  * Use sd_notify to signal service readiness, prevent startup failures
  * Add build command to Makefile
  * Update documentation
  * Add NixOS Module
  * enable build with nix
  * Implement logon name script mapping
  * deps(rust): update libnss requirement from 0.8.0 to 0.9.0
  * Only the himmelblau-sso package should conflict with intune-portal
  * deps(rust): update gethostname requirement from 0.5.0 to 1.0.0
  * deps(rust): update lru requirement from ^0.12.3 to ^0.13.0
  * deps(rust): update rand requirement from ^0.8.5 to ^0.9.0
  * Fetch the group extension attrs with the group object
  * Ensure access token has the GroupMember.Read.All scope
  * Replace the unix attribute option with a rfc2307 idmap
  * Map the extended attr gidNumber to primary group
  * Permit configuration of an Application for group fetching
  * Use posix attributes synchronized from on-prem AD
  * Fix debug option in himmelblau.conf
  * Add a span around server initialisation for correct log coalescing
  * Fix GOA crash when krb5.conf doesn't include /etc/krb5.conf.d
  * Fix libutf8proc dependency issue on Ubuntu 22.04
  * Fix Credentials leaking in the debug log
  * deps(rust): update rusqlite requirement from ^0.32.0 to ^0.33.0 (#345)
  * Decrease CI build time
  * Fix CI failure caused by package revision
  * Support password changes when demanded
  * Update README.md
  * Entra Id no longer permits SFA enrollment
  * Rewrite the sso code in Rust
  * Add profile photo fetching
  * Version 0.9.0
- Update to version 0.8.3+git.5.1510f5a:
  * Decrease CI build time
  * Fix CI failure caused by package revision
  * Version 0.8.4
  * Fix libutf8proc dependency issue on Ubuntu 22.04
  * Version 0.8.3
  * Fix Credentials leaking in the debug log
- Update to version 0.8.2+git.0.553c632:
  * Version 0.8.2
  * Entra Id no longer permits SFA enrollment
  * Remove SSO python dependencies
  * Version 0.8.1
  * Rewrite the sso code in Rust
- Update to version 0.8.0+git.0.249ba5f:
  * Branch version stable-0.8.x
  * Passwordless auth doesn't provide polling numbers
  * Resolve deadlock introduced by Fido auth
  * Implement NGC Passwordless authentication
  * Remove unused commit checklist
  * deps(rust): update bindgen requirement from 0.70.1 to 0.71.1
  * Update libhimmelblau version
  * Custom domains matching
  * Fix IdmapError to indicate the failure
  * Fix Fedora build dependencies
  * Add Fido MFA
  * Add Debian 12 packaging
  * Disable SELinux labeling on build container volume mounts
  * Update github CI dependencies
  * Implement Hello Pin changes via PAM
  * Formatting fix
  * Utilize HimmelblauConfig directly in pam and nss
  * Add config parsing unit tests
  * Fix incorrect default domain
  * Fix config hsm type Tpm error
  * Include multi-domain important info in himmelblau.conf man
  * Update to the latest libhimmelblau
  * Add DAG flow as a fallback for MFA
  * Fix CVE-2024-11738: rustls network-reachable panic in `Acceptor::accept`
  * Update README.md with build requires
  * Enable module for utf8proc-devel in Rocky8
  * Remove the org.samba.himmelblau dbus service
  * Fix missing dependency utf8proc_NFKC_Casefold
  * The tasks daemon needs /etc/groups write access
  * Revert "Fix Ubuntu PAM fallback to password prompt"
  * Fix Ubuntu PAM fallback to password prompt
  * Increase the cache timeout to 5 minutes
  * Always fetch and cache the graph url
  * Package Siemens Linux Entra SSO for Himmelblau
  * Add Kerberos CCache support
  * Update the tasks daemon man page
  * Add a himmelblau.conf man page, and package the man pages
  * Add SLE15SP6 packaging
  * Add Fedora 41 packaging
  * Add Fedora Rawhide packaging
  * Provide enhancement request template
  * Create an issue template
  * Hello support depends on openssl3
  * Fix sshd rpm depends
  * Resolve RPM dependencies automatically
  * Revert "deps(rust): update notify-debouncer-full requirement from 0.3 to 0.4"
  * Add openSUSE Tumbleweed packaging
  * Fix RPM packaging placement of systemd files
  * Remove the failed attempt at debian packaging
  * Add stable-0.7.x to CI workflows
  * Version 0.8.0</changelog>
  <changelog author="david.mulder@suse.com" date="1773230400">- Fix SELinux module packaging to use standard policy macros (bsc#1258236):
  * Build and install precompiled himmelblaud.pp at package build time
  * Replace custom semodule scriptlets with %selinux_modules_install/uninstall
- Update to version 2.3.8+git0.dec3693 (CVE-2026-31979, bsc#1259548):
  * Version 2.3.8
  * Add PrivateTmp back to Tasks Daemon
  * Drop dead code
  * Drop krb5 ccache dir code
  * Add a TODO comment
  * Drop non working packaged krb5 snippet file
  * Write kerberos config snippet
  * Extend resolver interface to return kerberos config together with TGTs
  * Backport SELinux fixes from main
  * Use libkrimes to store TGTs
- Update to version 2.3.7+git0.81088cd:
  * Version 2.3.7
  * cargo vet
  * Fix AWS-LC has PKCS7_verify Certificate Chain Validation Bypass
  * Revert dependency change which broke the nightly build
  * gen_dockerfiles: only himmelblaud has tpm feature, fix all others
  * fix(build): gen_dockerfiles.py mutates shared features list mid-loop
  * Update to libhimmelblau
  on leap 15.6, selinux-policy-devel doesn't exist</changelog>
  <changelog author="david.mulder@suse.com" date="1775044800">- - Update to version 2.3.9+git0.a9fd29b:
  * cargo vet
  * nss: block local group-name collisions on getgrnam (CVE-2026-34397).
  * update aws-lc-sys to 0.39.0 for security fixes
  * update rustls-webpki to 0.103.10 for CRL revocation fix
  * Version 2.3.9
  * cargo vet
  * packaging: fix if/else block for debian's postrm
  * Update apparmor.unix-chkpwd.local (Issue #1252)
  * When Hello user encounters SSPR demand, be permissive
  * add tests for sudo_groups functionality
  * Fix config tests to ignore local host config
  * Do not clear $NOTIFY_SOCKET when calling sd_ready
  * Fix token cache 24h purge
  * broker: use SSO server nonce for PRT only when provided
  * Fix pam_himmelblau blocking local user password changes (#1199)
  * Remove unused File import
  * Use is_ascii_alphanumeric() for account_id validation
  * Fix path traversal in LoadProfilePhoto AccountsService writes
  * Drop initialization tracing span
  * himmelblau-hsm-pin-init: drop RemainAfterExit=yes
  * Add fallback behavior when consent is required
  * qr-greeter: enable extension without socket noise
  * debian: make install/remove noninteractive; reduce QR postinst noise; soften missing hello prt
  * Never respond with BadRequest without error detail
  * deps(rust): bump the all-cargo-updates group across 1 directory with 7 updates</changelog>
</package>
<package pkgid="709c29bec3e03359422ee1feb2f2c369373dcd832b5ed0eab9ead037cf8b3b15" name="libntfs-3g87" arch="x86_64">
  <version epoch="0" ver="2022.5.17" rel="150000.3.24.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1416312000">- Enable ACL support
- Buildrequire libuuid-devel and hwinfo-devel, silences build warning
  about the need of that libraries.</changelog>
  <changelog author="meissner@suse.com" date="1420113600">- build with PIE</changelog>
  <changelog author="Greg.Freemyer@gmail.com" date="1423742400">- remove buildall.sh file and spec file reference
    It is a remnant from a previous maintainer and is well out of date</changelog>
  <changelog author="idonmez@suse.com" date="1433246400">- Update to STABLE Version 2015.3.14 (March 31, 2015)
    ntfs-3g: Fixed inserting a new ACL after wiping out by chkdsk
    ntfs-3g: Fixed Windows-type inheritance
    ntfs-3g: Fixed ignoring the umask mount option when permissions are used
    ntfs-3g: Fixed checking permissions when Posix ACLs are compiled in but not enabled
    ntfs-3g: Disabled option remove_hiberfile on read-only mounts
    ntfs-3g: Implemented an extended attribute to get/set EAs
    ntfs-3g: Avoid full runlist updating in more situations
    ntfs-3g: Update ctime after setting an ACL
    ntfs-3g: Use MFT record 15 for the first extent to MFT:DATA
    ntfs-3g: Ignore the sloppy mount option (-s)
    ntfs-3g: Implemented FITRIM (fstrim) ioctl
    ntfs-3g: Reengineered the compression algorithm
    ntfsprogs: Added manuals for ntfsdecrypt, ntfswipe, ntfstruncate and ntfsfallocate</changelog>
  <changelog author="Greg.Freemyer@gmail.com" date="1458561600">- change soname to 87
- add "--enable-extras" arg to configure
  Start including the extra programs: ntfswipe, ntfstruncate, ntfsrecover
- add "--enable-crypto" arg to configure
  Start including the optional program: ntfsdecrypt
- add "--enable-quarantined" arg to configure
  Start including the optional programs: ntfsck, ntfsdump_logfile, ntfsfallocate, ntfsmftalloc, ntfsmove
  Put these "quarantined" applications in a new -extra sub-project
- add specfile updates to support the above new program builds
- create a -extra sub-package to hold the "quarantined" utilities.
- update to stable Versions 2016.2.22 (Mar 21, 2016 release date)
  Changes to NTFS-3G driver:
  – Write as much data as possible in compressed attribute pwrite
  – Fixed getting space for making an index non resident
  – Alleviated constraints relative to reparse points
  – Fixed special case of decompressing a runlist
  – Fixed returning the trimming count to fstrim()
  – Fixed the range of valid subauthority counts in a SID
  – Updated the read-only flag even when the security attribute was cached
  – Defended against reusing data from an invalid MFT record
  – Simplified NTFS ACLs when group same as owner and same permission as world
  – Packed/unpacked st_rdev transported as 32-bits on Solaris 64-bits
  – Zero uninitialized bytes before writing compressed data
  – Clear the environment when starting mount or umount
  – Implemented rewinding a directory in lowntfs-3g
  – Use incremental offsets when reading a directory in lowntfs-3g
  Changes to mkntfs:
  – Make installing mkntfs /sbin symlinks dependent on ENABLE_MOUNT_HELPER
  – Mention the starting sector when it overflows in mkntfs
  – Upgraded the upper-case table to same as Windows 7, 8 and 10
  Changes to ntfsresize:
  – Fixed relocating the MFT runlists
  – Decode the full list of bad clusters
  – Fixed resizing an extended bad cluster list
  Changes to ntfsclone:
  – Decoded the full list of bad clusters
  Changes to ntfsinfo:
  – Displayed reparse point information
  Changes to ntfsdecrypt:
  – Fixed DESX decryption
  Changes to ntfswipe:
  – Added clarifications about several options to the manual
  New ntfsprogs tool:
  – Included ntfsrecover to recover the updates committed by Windows (experimental)
  Overall:
  – Made a general cleanup of endianness types for easier checks</changelog>
  <changelog author="Greg.Freemyer@gmail.com" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zenitur@ya.ru" date="1491048000">- Fix SLES 11 build.</changelog>
  <changelog author="qzheng@suse.com" date="1554206400">- Add CVE-2019-9755.patch to fix a heap-based buffer overflow
  issue (CVE-2019-9755, boo#1130165).</changelog>
  <changelog author="mgorse@suse.com" date="1630497600">- Update to version 2021.8.22 (boo#1189720):
  * Fixed compile error when building with libfuse &lt; 2.8.0
  * Fixed obsolete macros in configure.ac
  * Signalled support of UTIME_OMIT to external libfuse2
  * Fixed an improper macro usage in ntfscp.c
  * Updated the repository change in the README
  * Fixed vulnerability threats caused by maliciously tampered
    NTFS partitions
  * Security fixes: CVE-2021-33285, CVE-2021-33286, CVE-2021-33287,
    CVE-2021-33289, CVE-2021-35266, CVE-2021-35267, CVE-2021-35268,
    CVE-2021-35269, CVE-2021-39251, CVE-2021-39252, CVE-2021-39253,
    CVE_2021-39254, CVE-2021-39255, CVE-2021-39256, CVE-2021-39257,
    CVE-2021-39258, CVE-2021-39259, CVE-2021-39260, CVE-2021-39261,
    CVE-2021-39262, CVE-2021-39263.
- Sover is now 89
  * Changes in version 2017.3.23
  * Delegated processing of special reparse points to external plugins
  * Allowed kernel cacheing by lowntfs-3g when not using Posix ACLs
  * Enabled fallback to read-only mount when the volume is hibernated
  * Made a full check for whether an extended attribute is allowed
  * Moved secaudit and usermap to ntfsprogs (now ntfssecaudit and ntfsusermap)
  * Enabled encoding broken UTF-16 into broken UTF-8
  * Autoconfigured selecting &lt;sys/sysmacros.h&gt; vs &lt;sys/mkdev&gt;
  * Allowed using the full library API on systems without extended attributes support
  * Fixed DISABLE_PLUGINS as the condition for not using plugins
  * Corrected validation of multi sector transfer protected records
  * Denied creating/removing files from $Extend
  * Returned the size of locale encoded target as the size of symlinks
- Update URL.
- Drop CVE-2019-9755.patch: included upstream.
- Add ntfs-3g-old-api.patch: back out potentially API-incompatible
  changes.
- Add ntfs-3g-old-prognames.patch: rename ntfsusermap and
  ntfssecaudit to their old names.
- Add libtool to BuildRequires, and regenerate configure and
  Makefile.in..</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- update to 2022.5.17 (bsc#1199978):
  * Improved defence against maliciously tampered NTFS partitions
  * Improved defence against improper use of options
  * Updated the documentation
  * CVE-2022-30783, CVE-2022-30785, CVE-2022-30787
  * CVE-2021-46790, CVE-2022-30784, CVE-2022-30786,
  * CVE-2022-30788, CVE-2022-30789
- Rebase ntfs-3g-old-api.patch and ntfs-3g-old-prognames.patch.</changelog>
  <changelog author="yfjiang@suse.com" date="1666872000">- Add patches to fix CVE-2022-40284 (bsc#1204734):
  * ntfs-3g-CVE-2022-40284-0001-Rejected-zero-sized-runs.patch
  * ntfs-3g-CVE-2022-40284-0002-Avoided-merging-runlists-with-no-runs.patch</changelog>
  <changelog author="mgorse@suse.com" date="1718020800">- Add ntfs3g-unistr-use-after-free.patch: fix a use after free in
  ntfs_uppercase_mbs (boo#1226007 CVE-2023-52890).</changelog>
  <changelog author="sreeves@suse.com" date="1776427200">- Add ntfs3g-heap-overflow.patch: bsc#1262216 CVE-2026-40706.</changelog>
</package>
<package pkgid="9d155a14bb7cb59e85beebd21b90d0cb30fbef1024a6252b242897fd4dd0ef14" name="libnvme" arch="src">
  <version epoch="0" ver="1.11+17.g61f36cae" rel="150700.4.14.1"/>
  <changelog author="mwilck@suse.com" date="1675080000">- temporarily disable unit tests on s390x (bsc#1207687, bsc#1207686)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1680264000">- Update to version 1.4: (jsc#PED-553 jsc#PED-3884)
  * fabrics: Filter out invalid UUIDs from DMI
  * fabrics: Add define for DMI sysinfo
  * Print out correct TREQ strings for discovery
  * tree: fix generic device open failure
  * fabrics: add configuration option 'tls_key'
  * fabrics: add configuration option 'keyring'
  * linux: add key helper functions
  * nvme: add 'nvme_insert_tls_key()' function
  * linux: add nvme_lookup_keyring()
  * python: Change python option from combo to feature
  * types: add opcode field to error log page (TP4113)
  * python: Add setter property for controller DHCHAP Key
  * python: Remove redundant host.set_key() method
  * build, meson: Print option summary
  * Python: Add support for setting/getting Host DHCHAP key
  * Python: Add hostnqn_from_file() and hostid_from_file()
  * types: Update position of elbatm in struct nvme_copy_range{_f1}
  * doc: fix kernel-doc-check warning
  * python, meson: Assert that deps are present for -Dpython=true
  * python: Reformat SWIG input file
  * python test: Check there is no SIGSEGV during garbage collection
  * python: Return PyObject* from __str__() instead of a static char[]
  * python: Fix segmentation fault during garbage collection
  * build: Enable test in muon minimal build
  * build: Streamline workflows with nvme-cli
  * mi: Add nvme_mi_admin_get_log_page
  * ioctl: Set file descriptor in nvme_get_log_page()
  * fix endians
  * fabrics: Do not ignore one char whitespace when string sanitizing
- Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
- Fix invalid string lenght calculcation for UUID (bsc#1209906)
- Fix segmentation fault during garbage collection (bsc#1209905)
- Always sanitize traddr and trsvcid entries (bsc#1207435)
- Allow tracking unique discover controllers (bsc#1186689)</changelog>
  <changelog author="ana.guerrero@suse.com" date="1690459200">- Fix build with meson 1.2.0</changelog>
  <changelog author="daniel.wagner@suse.com" date="1695988800">- Update to version 1.6: (jsc#PED-3610 jsc#PED-4879 jsc#PED-5061)
  * docs: Fix Read-the-Docs configuration (deprecated config param)
  * mi-mctp: Fix free() in error path of mi_open_mctp
  * types: Use NVME_SET for status type mask to get status value
  * types: Define FLBAS MASK and SHIFT to use NVME_GET
  * types: Support Phy Rx Eye Opening Measurement Log
  * log: Add nvme root global variable to set for default output
  * types: Add support for the OAQD ID controller field
  * test: use non deprecated API
  * test: add tests for Get/Set Features functions
  * ioctl: implement nvme_set_features_lba_range()
  * ioctl: pass NSID in Get/Set Features commands that use it
  * ioctl: fix swapped parameters in nvme_set_features_host_id()
  * ioctl: export nvme_{g,s}et_features_iocs_profile()
  * ioctl: pass ENDGID in nvme_get_features_endurance_event_cfg()
  * ioctl: don't set SAVE bit on unsaveable features
  * ioctl: avoid sending uninitialized timestamp
  * ioctl: pass data for Get/Set Features commands
  * ioctl: set correct bits in Set Features commands
  * ioctl: correct feature IDs in Get/Set Features commands
  * tree: Add 2 new public functions to lookup existing controllers
  * ioctl: Add debugging feature to show command outputs
  * Fix incorrect article 'an' as 'a' to use for a description
  * linux: Added functions to enable faster telemetry data retrieval. Moved telemetry data area support detection into separate function. Added possibility to modify data transfer chunk size. Enable telemetry extraction up to specified data area. Removed some printf() and perror().
  * test: account for discovery log page entry stripping
  * fabrics: unconditionally strip discovery entry strings
  * fabrics: only look for spaces in strchomp()
  * tree: Use early return instead of else statements
  * test: fix lookup test case
  * test: make all function static
  * test: add tests for new tcp controller matching algorithm
  * tree: Improve TCP controller matching algorithm
  * util: Add functions to parse the system's interfaces
  * types: Add support for EGFEAT, Domain Identifier, TEGCAP and UEGCAP
  * mi: remove nsid from nvme_mi_admin_identify_secondary_ctrl_list()
  * test: add tests for nvme_ctrl_get_src_addr()
  * tree: Add nvme_ctrl_get_src_addr() to get the controller's src_addr
  * util: Split _nvme_ipaddrs_eq() from nvme_ipaddrs_eq()
  * test: add tests for Identify functions
  * ioctl: use available Identify helper functions
  * test: pass a large enough buffer to nvme_identify_ns_descs()
  * ioctl: remove nsid from nvme_identify_secondary_ctrl_list()
  * meson: Don't hard-code path to "internal/config.h"
  * fabrics: Do not pass disable_sqflow if not supported
  * fabrics: Read the supported options lazy
  * test: add discovery log page tests
  * test: add infra for mocking passthru ioctls
  * tree: fix segfault in nvme_scan_subsystem() (bsc#1213993)
  * src/nvme/tree.c: make __nvme_scan_subsystem() returning bool (bsc#1213993)
  * doc: fix minor mistake in README.md about dependencies
  * nvme-tree: avoid warning in 'list-subsys' (bsc#1212598)
  * tree: Add getter for subsystem iopolicy (bsc#1124564)
  * fabrics: Consider also all hosts settings for context match
  * tree: Scan all subsystems (bsc#1212598)
  * doc: Fixing compile instruction in README
  * mi: allow non-4-byte-aligned responses
  * mi-mctp: use a linear response buffer
  * mi: implement length and offset alignment checks in admin_xfer()
  * tree: Don't open nvme devices until it's absolutely required
    (bsc#1213527 bsc#1213686)
  * tree: missing closedir() causes fd leak for "/sys/bus/pci/slots"
  * mi: don't return from mi_mctp_submit with a tag held
  * util: Provide empty nvme_ipaddrs_eq for static builds
  * fabrics: Relax match on well known disc ctrl lookup
  * tree: Ignore NULL address pointer for phy slot lookup
  * fabrics: Filter discovery ctrls out during application context check
  * util: Add ignored error code
  * json: Use memory block allocated by realloc() instead printbuf
  * util: Use HAVE_NETDB instead of HAVE_LIBNSS
  * tree: Add PCI physical slot number for controller
  * tree: Use nvme_ipaddrs_eq() to compare IP addresses
  * fabrics: Add EADDRNOTAVAIL error mapping
  * fabrics: filter out subsystems with non-matching application string
  * libnvme: add 'application' setting to nvme_root
  * libnvme: add 'application' setting to the subsystem
  * test: Add more code coverage for nvme_ipaddrs_eq()
  * util: rename ipaddrs_eq() to nvme_ipaddrs_eq() and make public.
  * util: Add ipaddrs_eq() to check whether two IP addresses are equal
  * test: Add unit test for ctrl lookups
  * ioctl: fix RAE bit on last Get Log Page command (bsc#1213618)
  * fabrics: check genctr after getting discovery entries (bsc#1213618)
  * fabrics: handle /dev/nvme-fabrics read failure
  * fabrics: fix potential invalid memory access in __nvmf_supported_option()
  * Python: Fix crash during garbage collection
  * python/swig: Check swig version to determine whether -py3 is needed
  * python/swig: Wrap swig-sensitive struct inside #ifwdef SWIG
  * mi: Add nvme_mi_ctrl_id to retrieve controller ID
  * Python: Suppress swig warnings about unnamed struct
  * examples: fix incorrect controller status in MI info output
  * ioctl: Explicitly initialize all members of struct nvme_ns_mgmt_args
  * Python: make NBFT data more pythonic
  * ioctl: io management send, receive args fix
  * python: Update test data
  * NBFT: Remove documentation from nbft.c since it's also in nbft.h
  * Python: Add NBFT support
  * nbft: Doc typo - Use nvme_nbft_free() instead of nbft_free()
  * nbft: Parse the {HOSTID,HOSTNQN}_CONFIGURED flags
  * nbft: Fix nbft_ssns_flags endianness test
  * nbft: Add a simple unit test
  * doc: Update README
  * build: Simple muon build configuration
  * build: Extend summary section
  * build: Make json-c dependency lookup not fail
  * nbft: Move added symbols to LIBNVME_1_5
  * build: Update wrap mode defaults
  * build: Disable fallback on default
  * tree: Fix offset argument check in nvme_bytes_to_lba
  * nbft: add NBFT v1.0 table support (jsc#PED-1449)
  * types: Add IO command set specific field on nsmgmt
  * fabrics: Do not pass unsupported options to kernel
  * types: Add ns-mgmt host software specified fields
  * types.h: Add FDP related Status Code
  * tree: Fix argument check in nvme_bytes_to_lba</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420800">- Drop unencessary minimum version depedency on meson.
- Re-enable libdbus feature. Upstream defaults changed.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420801">- Enable tests during build
- Set git version tag
- Drop unused make dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696852800">- Use glob for python3-libnvme file listening. Workaround pycache_only
  problems for SLE/Leap builds.
- Drop usused libuuid dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1697112000">- Add missing jsc# tracking references to changelog</changelog>
  <changelog author="mwilck@suse.com" date="1697544000">- Update to version 1.6+5.g68c6ffb:
  * avoid stack corruption by unaligned DMA to user space buffers
    (bsc#1216344, gh#linux-nvme/libnvme#727)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1702987200">- Update to version 1.7+0.gf38b1d7:
  * tree: do not open blk device on default
  * tree: read all attributes from sysfs when available
  * ioctl: set data length when retrieving LBA status
  * types: fix regression for vendor-specific field in nvme_id_ns
  * util: use cleanup functions
  * linux: use cleanup functions
  * json: use cleanup functions
  * fabrics: use cleanup functions
  * tree: use cleanup functions
  * cleanup: add cleanup functions
  * tree: fix incorrect return value
  * tree: Fix clearing application strings
  * libnvme: reshuffle nvme_generate_tls_key_identity()
  * libnvme: fixup error codes
  * libnvme: Implement 'nvme_generate_tls_key_identity()'
  * libnvme: support NVMe TLS identities version 1 (bsc#1219086)
  * libnvme: Add base64 functions
  * libnvme: separate out 'gen_tls_identity' and reshuffle 'derive_nvme_keys'
  * libnvme: separate out a function 'select_hmac'
  * libnvme: fix a memory leak when calling read_ssns()
  * libnvme: fix a memory leak in read_discovery()
  * fabrics: avoid redundant args in nvme_discovery_log()
  * fabrics: have nvmf_get_discovery_log() call nvmf_get_discovery_wargs()
  * fabrics: fetch smaller Discovery Log Page header
  * fabrics: avoid redundant Get Log Page on retry
  * fabrics: clear RAE for discovery log page commands
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * types: add Host Behavior Support field definitions
  * mi: Cast values to u32 if shift overflows int
  * types: Cast values to u32 if shift overflows int
  * test: Avoid unaligned pointer dereferences
  * nbft: Avoid unaligned pointer dereferences
  * types: add cross-namespace copy formats, status codes, ONCS bits
  * nvme: Add length field to Hkdf-Expand-Label computation
  * ioctl: use lsp arg in nvme_get_log_boot_partition
  * fabrics: use SECTYPE to determine whether to use TLS (bsc#1219086)
  * fabrics: Allocate aligned payloads for id_ctrl and discovery log calls
  * linux: Allocate aligned payloads for id_ctrl and id_ns calls
  * ioctl: MSB variable-size storage/reference tags</changelog>
  <changelog author="daniel.wagner@suse.com" date="1703073600">- Update to version 1.7.1+0.g13ba383:
  * tree: do no free ns on error in nvme_ns_init</changelog>
  <changelog author="daniel.wagner@suse.com" date="1707912000">- Update to version 1.8+0.gbff7dda:
  * linux: Explicitly initialize auto-cleanup variables
  * example: fix mi identify failed with error cntid
  * tree: do not issue an error when subsys lookup fails during scanning
  * types: Add controller properties CMBEBS, CMBSWTP and NSSD
  * tests: Add sample NBFT table from Dell PowerEdge R660
  * tests: Add sample NBFT table from Dell PowerEdge R760
  * tests: Fix diffs output for duplicate HFI entries
  * nbft: avoid duplicate entries in ssns-&gt;hfis
  * nbft: Fix (struct nbft_info_subsystem_ns).num_hfis off-by-one
  * test: read and dump sysfs tar file
  * nvme: allow to overwrite hostnqn and hostid
  * nvme: allow to overwrite base sysfs path
  * json: dump the output to the user selected filedescriptor
  * libnvme: export nvme_dump_tree
  * fabrics: add 'concat' option
  * mi: set correct rc and errno when crc mismatch
  * tree: use logical block size for lba
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * build: checkout full repo for checkpatch
  * linux: avoid segfault in check-tls-key due to null hostnqn/subsysnqn (bsc#1219086)
  * meson.build: fixup 'join' syntax
  * util: Explicitly initialize auto-cleanup variables
  * tree: Explicitly initialize auto-cleanup variables
  * linux: Explicitly initialize auto-cleanup variables
  * fabrics: Explicitly initialize auto-cleanup variables
  * util: Added function to find specific UUID in UUID list.
  * build: fix release python tag match
- Disable new unit test which is not running stable in OSB
  * add 0001-build-disable-sysfs-test.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737600">- Update to version 1.9+0.g80c5cf2:
  * types: Added Command and Feature Lockdown LID
  * types: add ASQ, ACQ and BPMBL controller properties definitions
  * types: add controller properties enum documentation
  * types: fix CRTO.CRIMT mask value definition
  * tree: use strtou32 to read lba_size
  * types: Fix PMRWBM register name
  * examples: fix mi-mctp build warning errors
  * test: add CSTS.ST, CAP.CPS and CAP.NSSS registers
  * types: add CAP.CPS and CAP.NSSS definitions
  * types: add enum nvme_cap documentation
  * types: Add enum nvme_unit/cmbebs/cmbswtp/flbas/cmic documentation
  * util: Add string constant for ENVME_CONNECT_IGNORED
  * tests: Add sample NBFT table with mpath IPv4+IPv6 discovery
  * types: add controller status shutdown type (CSTS.ST) definition
  * types: Add enum nvme_csts documentation
  * types: Add NVME_CMIC definitions
  * types: Add CMBSWTP property definitions
  * types: Add NVME_CMBEBS property definitions
  * types: Fix boot partition read offset (BPROF) mask value
  * tree: fix mem leak in nvme_ns_init() (bsc#1223331)
  * fabrics: retry discovery log page when DNR is not set
  * ioctl: return EPROTO when an NVMe status occurred
  * linux: Allocate aligned payload for nvme_get_telemetry_log
  * test: use diff to compare sysfs output (bsc#1226216)
  * tree: fix lba_count size calculation
  * tree: Add NVM subsystem controller identifier (bsc#1224024)
  * test: Add unit test for nvme_id_ns_flbas_to_lbaf_inuse()
  * types: Fix NVME_CSTS_SHST_MASK definition
  * util: Fixed nvme_id_ns_flbas_to_lbaf_inuse()
  * types: Add optional data present filed mask and shift definition
  * types: Fix EOM header optional data present fields definition
  * libnvme : record the nvme pci adapter physical slot (bsc#1223208)
  * sysfs: minimize heap allocations of sysfs paths
  * json: Fix uninitialized variables
  * libnvme: add missing symbol nvme_scan_tls_keys (bsc#1226197)
  * nbft: Whitespace fixes (bsc#1222026)
  * tests: Add complex NBFT table from Dell R660 (bsc#1222026)
  * tests: Adapt to added NBFT SSNS flags (bsc#1222026)
  * nbft: Add SSNS 'discovered' flag (bsc#1222026)
  * nbft: Add SSNS 'unavailable' flag (bsc#1222026)
  * doc: Document the NBFT API (bsc#1222026)
  * ioctl: Move nvme_cmd_dword_fields definitions into header file
  * types: Add PEL set feature event layout definitions
  * types: Fix enum nvme_pel_rci documentation error
  * types: Add boot partition information definitions
  * types: Add PEL header additional information definitions
  * fabrics: keyring is a long (bsc#1216982)
  * config-schema.json.in: tls keys and keyrings are strings (bsc#1216982)
  * linux: Add nvme_scan_tls_keys() (bsc#1216982)
  * json: dump TLS key data in PSK interchange format (bsc#1216982)
  * json: import TLS key from PSK interchange format (bsc#1216982)
  * json: export TLS key in PSK interchange format (bsc#1216982)
  * tree: read TLS key in nvme_configure_ctrl() (bsc#1216982)
  * linux: rework nvme_insert_tls_key_versioned() (bsc#1216982)
  * linux: add nvme_import_tls_key() (bsc#1216982)
  * linux: add nvme_export_tls_key() (bsc#1216982)
  * crc32: Add CRC32 algorithm (bsc#1216982)
  * linux: add nvme_update_key() (bsc#1216982)
  * linux: add nvme_read_key() (bsc#1216982)
  * linux: allow for NULL argument in nvme_lookup_keyring() (bsc#1216982)
  * log: Respect DEFAULT_LOGLEVEL on uninitialized logging
  * log: Introduce nvme_get_logging_level()
  * ioctl: remove incomplete debug logging infrastructure
  * ioctl: export nvme_submit_passthru{64} as weak symbol (bsc#1231668)
  * log: move nvme_{set|get}_debug to log.c
  * fabrics: check the read() return value
  * types: Add PEL reporting context port identifier type definitions
  * types: Add persistent event log reporting context definitions
-  Upstream changed the sysfs test setup, thus sysfs test works in OSB
  * remove 0001-build-disable-sysfs-test.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1722600000">- Update to version 1.10:
  * linux: update TLS version 1 PSK derivation (bsc#1228376)
  * tree: fix nvme_read_config() to not set errno if return 0
  * types: add new fields added in TP4165 (bsc#1231668)
  * types: Changed the space into tap space (bsc#1231668)
  * tree: handle no address phy slot dirs (bsc#1229193)
  * linux: Remove the use of OpenSSL Engine API
  * types: Added new controller attribute as per TP4104
  * tree: add helper to lookup hostnqn/hostid (bsc#1226216)
  * fabrics: extend hostnqn/hostid variable inject interface (bsc#1226216)
  * json: filter out pcie transport (bsc#1226216)
  * tree: preserve parsing order of a config file (bsc#1226216)
  * types: add new field added in TP4099
  * types: add new field added in TP4090 (bsc#1231668)
  * linux: add nvme_revoke_tls_key (bsc#1226197)
  * tree: fix segfault in nvme_free_tree() (bsc#1231668)
  * types: add PEL vendor specific and TCG defined events definitions
  * mi-mctp: initialize the rc variable in handle_mctp_endpoint()
  * linux: avoid potential null pointer dereference
  * linux: add nvme_get_ana_log_len_from_id_ctrl()
  * libnvme: export nvme_mi_admin_get_ana_log_atomic()
  * ioctl: add support for atomic, piecewise ANA log fetch
  * ioctl: replace nvme_ana_rsp_hdr in doc comments
  * ioctl: respect rae in nvme_get_log_ana()
  * ioctl: fix nvme_get_log_ana_groups() pointer type
  * types: add new filed added in TP4141a
  * mi: Probe quirks on first command submission
  * tree: optionally skip namespaces during scanning
  * ioctl: update nvme_set_var_size_tags() to properly use reftag
  * types: add enum for Protection Information Format
  * libnvme: Introduce functions to generate host identifier and host NQN (bsc#1226216)
  * fabrics: Unescape URI elements
  * tests: Add uriparser tests
  * fabrics: Introduce simple URI parser
  * linux: default init cleanup variable
  * linux: Fix uninitialized variables
  * types: add the nvme Cancel command opcode
  * log: split log variables from root object
  * log: keep log level logic in one place
  * mi: restore default ep timeout during admin_passthru
  * mi: fix the rc for nvme_mi_scan_ep
  * ccan/endian.h: Only define __{BIG,LITTLE}_ENDIAN if undefined.
  * Use C99 types for uint32_t
  * mi: fix the return error code.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1730376000">- Update to version 1.11:
  * prefix: Use Request or Response Length in DLEN and DOFF for MI
  * types: Add ETPVDS and SSI fields of sanitize status log
  * json: do not escape strings when printing the configuration
  * tree: do no export tls keys when not provided by user
  * types: add struct nvme_id_ctrl_nvm ver and lbamqf member variables
  * types: add NVMe 2.1 get log page LIDs
  * type: Added enums for ANSAN and RGCNS bit of OAES field
  * linux: fixup PSK HMAC type '0' handling
  * util: added error code for ENOKEY
  * fabrics: fix map error level in __nvmf_add_ctrl
  * fabrics: add ctrl connect interface
  * fabrics: use hex numbers when generating command line options
  * fabrics: rename first argument for argument macros
  * linux: handle key import correctly
  * linux: export keys to config
  * tree: read tls_configured_key and tls_keyring from sysfs
  * tree: move dhchap and tls sysfs parser into separate functions
  * json: move keystore operations out of the JSON parser
  * tree: add getter/setters for TLS PSK
  * linux: add import/export function for TLS pre-shared keys
  * linux: only return the description of a key
  * linux: use ssize_t as return type for nvme_identity_len
  * linux: reorder variable declarations
  * types: Added enum for SMVES event of PEL log
  * libnvme: add lockdown log page support(LID : 0x14)
  * libnvme: add EMVS support to sanitize command
  * types: Add TP4159 PCIe Infrastructure for Live Migration definitions
  * types: add NVME_CTRL_OAES get macro definitions
  * types: add NVME_CTRL_OAES_TTHR definition
  * types: add NVME_CTRL_FNA definitions to get field values
  * types: add NVME_VAL() definition
  * tree: fix tls key mem leak (bsc#1231668)
  * tree: fix dhchap_ctrl_key mem leak (bsc#1231668)
  * tree: fix dhchap_key mem leak (bsc#1231668)
  * types: add NVME_CHECK() definition to check nvme register field value
  * types: add kv opcodes
  * types: added new fields in nvme_nvme_id_ns
  * types: Add enum for Completion Condition of Get LBA status command
  * ioctl: refactoring set_features
  * types: add new fields added in TP4142
  * mi: add control primitive command
  * linux: Correct error handling for derive_psk_digest (bsc#1228376)
  * types: Added new field CSER in enum as per TP4167
- build fix for OpenSSL 1.1
  * add 0001-linux-fix-derive_psk_digest-OpenSSL-1.1-version.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1732536000">- Fix tests on s390
  * add 0002-test-mock-pass-thru-unknown-ioctls.patch</changelog>
  <changelog author="dwagner@suse.de" date="1745323200">- Update to version 1.11+4.ge68a91ae:
  * tree: add routine to fetch subsys firmware rev (bsc#1240518)
  * tree: add routine to fetch subsys model (bsc#1240518)
  * test/mock: pass thru unknown ioctls
  * linux: fix derive_psk_digest OpenSSL 1.1 version
  - Remove merged patches
  * remove 0001-linux-fix-derive_psk_digest-OpenSSL-1.1-version.patch
  * remove 0002-test-mock-pass-thru-unknown-ioctls.patch</changelog>
  <changelog author="dwagner@suse.de" date="1753185600">- Update to version 1.11+6.g0d17be77:
  * tree: free ctrl attributes when (re)configure ctrl (bsc#1243716)
  * tree: filter tree after scan has completed (bsc#1243716)</changelog>
  <changelog author="dwagner@suse.de" date="1757419200">- Update to version 1.11+8.gfb9b581c:
  * tree: do not try to strdup NULL pointer (bsc#1247225)
  * tree: always set the host key (bsc#1246560)</changelog>
  <changelog author="dwagner@suse.de" date="1758196800">- Update to version 1.11+17.g61f36cae:
  * linux: use EVP_PKEY_CTX_add1_hkdf_info only once in compat function (bsc#1246914)
  * nvme/linux: check for empty digest in gen_tls_identity() (bsc#1246914)
  * nvme/linux: add fallback implementation for nvme_insert_tls_key_compat() (bsc#1246914)
  * linux: fix HKDF TLS key derivation back to OpenSSL 3.0.8 (bsc#1246914)
  * libnvme: TLS PSK derivation fixes (bsc#1246914)
  * linux: rename __nvme_insert_tls_key_versioned() to __nvme_insert_tls_key() (bsc#1246914)
  * linux: rename __nvme_insert_tls_key() to __nvme_import_tls_key() (bsc#1246914)
  * test/psk: add testcase for TLS identity derivation (bsc#1246914)
  * linux: set errno when nvme_generate_tls_key_identity() fails (bsc#1246914)</changelog>
</package>
<package pkgid="e99bf72f43a4007a84722aab09c115bae8d7d1387f66b6a0502be0ae9e2a1c65" name="libnvme" arch="src">
  <version epoch="0" ver="1.11+22.gc0b8e5f8" rel="150700.4.17.1"/>
  <changelog author="daniel.wagner@suse.com" date="1680264000">- Update to version 1.4: (jsc#PED-553 jsc#PED-3884)
  * fabrics: Filter out invalid UUIDs from DMI
  * fabrics: Add define for DMI sysinfo
  * Print out correct TREQ strings for discovery
  * tree: fix generic device open failure
  * fabrics: add configuration option 'tls_key'
  * fabrics: add configuration option 'keyring'
  * linux: add key helper functions
  * nvme: add 'nvme_insert_tls_key()' function
  * linux: add nvme_lookup_keyring()
  * python: Change python option from combo to feature
  * types: add opcode field to error log page (TP4113)
  * python: Add setter property for controller DHCHAP Key
  * python: Remove redundant host.set_key() method
  * build, meson: Print option summary
  * Python: Add support for setting/getting Host DHCHAP key
  * Python: Add hostnqn_from_file() and hostid_from_file()
  * types: Update position of elbatm in struct nvme_copy_range{_f1}
  * doc: fix kernel-doc-check warning
  * python, meson: Assert that deps are present for -Dpython=true
  * python: Reformat SWIG input file
  * python test: Check there is no SIGSEGV during garbage collection
  * python: Return PyObject* from __str__() instead of a static char[]
  * python: Fix segmentation fault during garbage collection
  * build: Enable test in muon minimal build
  * build: Streamline workflows with nvme-cli
  * mi: Add nvme_mi_admin_get_log_page
  * ioctl: Set file descriptor in nvme_get_log_page()
  * fix endians
  * fabrics: Do not ignore one char whitespace when string sanitizing
- Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
- Fix invalid string lenght calculcation for UUID (bsc#1209906)
- Fix segmentation fault during garbage collection (bsc#1209905)
- Always sanitize traddr and trsvcid entries (bsc#1207435)
- Allow tracking unique discover controllers (bsc#1186689)</changelog>
  <changelog author="ana.guerrero@suse.com" date="1690459200">- Fix build with meson 1.2.0</changelog>
  <changelog author="daniel.wagner@suse.com" date="1695988800">- Update to version 1.6: (jsc#PED-3610 jsc#PED-4879 jsc#PED-5061)
  * docs: Fix Read-the-Docs configuration (deprecated config param)
  * mi-mctp: Fix free() in error path of mi_open_mctp
  * types: Use NVME_SET for status type mask to get status value
  * types: Define FLBAS MASK and SHIFT to use NVME_GET
  * types: Support Phy Rx Eye Opening Measurement Log
  * log: Add nvme root global variable to set for default output
  * types: Add support for the OAQD ID controller field
  * test: use non deprecated API
  * test: add tests for Get/Set Features functions
  * ioctl: implement nvme_set_features_lba_range()
  * ioctl: pass NSID in Get/Set Features commands that use it
  * ioctl: fix swapped parameters in nvme_set_features_host_id()
  * ioctl: export nvme_{g,s}et_features_iocs_profile()
  * ioctl: pass ENDGID in nvme_get_features_endurance_event_cfg()
  * ioctl: don't set SAVE bit on unsaveable features
  * ioctl: avoid sending uninitialized timestamp
  * ioctl: pass data for Get/Set Features commands
  * ioctl: set correct bits in Set Features commands
  * ioctl: correct feature IDs in Get/Set Features commands
  * tree: Add 2 new public functions to lookup existing controllers
  * ioctl: Add debugging feature to show command outputs
  * Fix incorrect article 'an' as 'a' to use for a description
  * linux: Added functions to enable faster telemetry data retrieval. Moved telemetry data area support detection into separate function. Added possibility to modify data transfer chunk size. Enable telemetry extraction up to specified data area. Removed some printf() and perror().
  * test: account for discovery log page entry stripping
  * fabrics: unconditionally strip discovery entry strings
  * fabrics: only look for spaces in strchomp()
  * tree: Use early return instead of else statements
  * test: fix lookup test case
  * test: make all function static
  * test: add tests for new tcp controller matching algorithm
  * tree: Improve TCP controller matching algorithm
  * util: Add functions to parse the system's interfaces
  * types: Add support for EGFEAT, Domain Identifier, TEGCAP and UEGCAP
  * mi: remove nsid from nvme_mi_admin_identify_secondary_ctrl_list()
  * test: add tests for nvme_ctrl_get_src_addr()
  * tree: Add nvme_ctrl_get_src_addr() to get the controller's src_addr
  * util: Split _nvme_ipaddrs_eq() from nvme_ipaddrs_eq()
  * test: add tests for Identify functions
  * ioctl: use available Identify helper functions
  * test: pass a large enough buffer to nvme_identify_ns_descs()
  * ioctl: remove nsid from nvme_identify_secondary_ctrl_list()
  * meson: Don't hard-code path to "internal/config.h"
  * fabrics: Do not pass disable_sqflow if not supported
  * fabrics: Read the supported options lazy
  * test: add discovery log page tests
  * test: add infra for mocking passthru ioctls
  * tree: fix segfault in nvme_scan_subsystem() (bsc#1213993)
  * src/nvme/tree.c: make __nvme_scan_subsystem() returning bool (bsc#1213993)
  * doc: fix minor mistake in README.md about dependencies
  * nvme-tree: avoid warning in 'list-subsys' (bsc#1212598)
  * tree: Add getter for subsystem iopolicy (bsc#1124564)
  * fabrics: Consider also all hosts settings for context match
  * tree: Scan all subsystems (bsc#1212598)
  * doc: Fixing compile instruction in README
  * mi: allow non-4-byte-aligned responses
  * mi-mctp: use a linear response buffer
  * mi: implement length and offset alignment checks in admin_xfer()
  * tree: Don't open nvme devices until it's absolutely required
    (bsc#1213527 bsc#1213686)
  * tree: missing closedir() causes fd leak for "/sys/bus/pci/slots"
  * mi: don't return from mi_mctp_submit with a tag held
  * util: Provide empty nvme_ipaddrs_eq for static builds
  * fabrics: Relax match on well known disc ctrl lookup
  * tree: Ignore NULL address pointer for phy slot lookup
  * fabrics: Filter discovery ctrls out during application context check
  * util: Add ignored error code
  * json: Use memory block allocated by realloc() instead printbuf
  * util: Use HAVE_NETDB instead of HAVE_LIBNSS
  * tree: Add PCI physical slot number for controller
  * tree: Use nvme_ipaddrs_eq() to compare IP addresses
  * fabrics: Add EADDRNOTAVAIL error mapping
  * fabrics: filter out subsystems with non-matching application string
  * libnvme: add 'application' setting to nvme_root
  * libnvme: add 'application' setting to the subsystem
  * test: Add more code coverage for nvme_ipaddrs_eq()
  * util: rename ipaddrs_eq() to nvme_ipaddrs_eq() and make public.
  * util: Add ipaddrs_eq() to check whether two IP addresses are equal
  * test: Add unit test for ctrl lookups
  * ioctl: fix RAE bit on last Get Log Page command (bsc#1213618)
  * fabrics: check genctr after getting discovery entries (bsc#1213618)
  * fabrics: handle /dev/nvme-fabrics read failure
  * fabrics: fix potential invalid memory access in __nvmf_supported_option()
  * Python: Fix crash during garbage collection
  * python/swig: Check swig version to determine whether -py3 is needed
  * python/swig: Wrap swig-sensitive struct inside #ifwdef SWIG
  * mi: Add nvme_mi_ctrl_id to retrieve controller ID
  * Python: Suppress swig warnings about unnamed struct
  * examples: fix incorrect controller status in MI info output
  * ioctl: Explicitly initialize all members of struct nvme_ns_mgmt_args
  * Python: make NBFT data more pythonic
  * ioctl: io management send, receive args fix
  * python: Update test data
  * NBFT: Remove documentation from nbft.c since it's also in nbft.h
  * Python: Add NBFT support
  * nbft: Doc typo - Use nvme_nbft_free() instead of nbft_free()
  * nbft: Parse the {HOSTID,HOSTNQN}_CONFIGURED flags
  * nbft: Fix nbft_ssns_flags endianness test
  * nbft: Add a simple unit test
  * doc: Update README
  * build: Simple muon build configuration
  * build: Extend summary section
  * build: Make json-c dependency lookup not fail
  * nbft: Move added symbols to LIBNVME_1_5
  * build: Update wrap mode defaults
  * build: Disable fallback on default
  * tree: Fix offset argument check in nvme_bytes_to_lba
  * nbft: add NBFT v1.0 table support (jsc#PED-1449)
  * types: Add IO command set specific field on nsmgmt
  * fabrics: Do not pass unsupported options to kernel
  * types: Add ns-mgmt host software specified fields
  * types.h: Add FDP related Status Code
  * tree: Fix argument check in nvme_bytes_to_lba</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420800">- Drop unencessary minimum version depedency on meson.
- Re-enable libdbus feature. Upstream defaults changed.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420801">- Enable tests during build
- Set git version tag
- Drop unused make dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696852800">- Use glob for python3-libnvme file listening. Workaround pycache_only
  problems for SLE/Leap builds.
- Drop usused libuuid dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1697112000">- Add missing jsc# tracking references to changelog</changelog>
  <changelog author="mwilck@suse.com" date="1697544000">- Update to version 1.6+5.g68c6ffb:
  * avoid stack corruption by unaligned DMA to user space buffers
    (bsc#1216344, gh#linux-nvme/libnvme#727)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1702987200">- Update to version 1.7+0.gf38b1d7:
  * tree: do not open blk device on default
  * tree: read all attributes from sysfs when available
  * ioctl: set data length when retrieving LBA status
  * types: fix regression for vendor-specific field in nvme_id_ns
  * util: use cleanup functions
  * linux: use cleanup functions
  * json: use cleanup functions
  * fabrics: use cleanup functions
  * tree: use cleanup functions
  * cleanup: add cleanup functions
  * tree: fix incorrect return value
  * tree: Fix clearing application strings
  * libnvme: reshuffle nvme_generate_tls_key_identity()
  * libnvme: fixup error codes
  * libnvme: Implement 'nvme_generate_tls_key_identity()'
  * libnvme: support NVMe TLS identities version 1 (bsc#1219086)
  * libnvme: Add base64 functions
  * libnvme: separate out 'gen_tls_identity' and reshuffle 'derive_nvme_keys'
  * libnvme: separate out a function 'select_hmac'
  * libnvme: fix a memory leak when calling read_ssns()
  * libnvme: fix a memory leak in read_discovery()
  * fabrics: avoid redundant args in nvme_discovery_log()
  * fabrics: have nvmf_get_discovery_log() call nvmf_get_discovery_wargs()
  * fabrics: fetch smaller Discovery Log Page header
  * fabrics: avoid redundant Get Log Page on retry
  * fabrics: clear RAE for discovery log page commands
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * types: add Host Behavior Support field definitions
  * mi: Cast values to u32 if shift overflows int
  * types: Cast values to u32 if shift overflows int
  * test: Avoid unaligned pointer dereferences
  * nbft: Avoid unaligned pointer dereferences
  * types: add cross-namespace copy formats, status codes, ONCS bits
  * nvme: Add length field to Hkdf-Expand-Label computation
  * ioctl: use lsp arg in nvme_get_log_boot_partition
  * fabrics: use SECTYPE to determine whether to use TLS (bsc#1219086)
  * fabrics: Allocate aligned payloads for id_ctrl and discovery log calls
  * linux: Allocate aligned payloads for id_ctrl and id_ns calls
  * ioctl: MSB variable-size storage/reference tags</changelog>
  <changelog author="daniel.wagner@suse.com" date="1703073600">- Update to version 1.7.1+0.g13ba383:
  * tree: do no free ns on error in nvme_ns_init</changelog>
  <changelog author="daniel.wagner@suse.com" date="1707912000">- Update to version 1.8+0.gbff7dda:
  * linux: Explicitly initialize auto-cleanup variables
  * example: fix mi identify failed with error cntid
  * tree: do not issue an error when subsys lookup fails during scanning
  * types: Add controller properties CMBEBS, CMBSWTP and NSSD
  * tests: Add sample NBFT table from Dell PowerEdge R660
  * tests: Add sample NBFT table from Dell PowerEdge R760
  * tests: Fix diffs output for duplicate HFI entries
  * nbft: avoid duplicate entries in ssns-&gt;hfis
  * nbft: Fix (struct nbft_info_subsystem_ns).num_hfis off-by-one
  * test: read and dump sysfs tar file
  * nvme: allow to overwrite hostnqn and hostid
  * nvme: allow to overwrite base sysfs path
  * json: dump the output to the user selected filedescriptor
  * libnvme: export nvme_dump_tree
  * fabrics: add 'concat' option
  * mi: set correct rc and errno when crc mismatch
  * tree: use logical block size for lba
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * build: checkout full repo for checkpatch
  * linux: avoid segfault in check-tls-key due to null hostnqn/subsysnqn (bsc#1219086)
  * meson.build: fixup 'join' syntax
  * util: Explicitly initialize auto-cleanup variables
  * tree: Explicitly initialize auto-cleanup variables
  * linux: Explicitly initialize auto-cleanup variables
  * fabrics: Explicitly initialize auto-cleanup variables
  * util: Added function to find specific UUID in UUID list.
  * build: fix release python tag match
- Disable new unit test which is not running stable in OSB
  * add 0001-build-disable-sysfs-test.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737600">- Update to version 1.9+0.g80c5cf2:
  * types: Added Command and Feature Lockdown LID
  * types: add ASQ, ACQ and BPMBL controller properties definitions
  * types: add controller properties enum documentation
  * types: fix CRTO.CRIMT mask value definition
  * tree: use strtou32 to read lba_size
  * types: Fix PMRWBM register name
  * examples: fix mi-mctp build warning errors
  * test: add CSTS.ST, CAP.CPS and CAP.NSSS registers
  * types: add CAP.CPS and CAP.NSSS definitions
  * types: add enum nvme_cap documentation
  * types: Add enum nvme_unit/cmbebs/cmbswtp/flbas/cmic documentation
  * util: Add string constant for ENVME_CONNECT_IGNORED
  * tests: Add sample NBFT table with mpath IPv4+IPv6 discovery
  * types: add controller status shutdown type (CSTS.ST) definition
  * types: Add enum nvme_csts documentation
  * types: Add NVME_CMIC definitions
  * types: Add CMBSWTP property definitions
  * types: Add NVME_CMBEBS property definitions
  * types: Fix boot partition read offset (BPROF) mask value
  * tree: fix mem leak in nvme_ns_init() (bsc#1223331)
  * fabrics: retry discovery log page when DNR is not set
  * ioctl: return EPROTO when an NVMe status occurred
  * linux: Allocate aligned payload for nvme_get_telemetry_log
  * test: use diff to compare sysfs output (bsc#1226216)
  * tree: fix lba_count size calculation
  * tree: Add NVM subsystem controller identifier (bsc#1224024)
  * test: Add unit test for nvme_id_ns_flbas_to_lbaf_inuse()
  * types: Fix NVME_CSTS_SHST_MASK definition
  * util: Fixed nvme_id_ns_flbas_to_lbaf_inuse()
  * types: Add optional data present filed mask and shift definition
  * types: Fix EOM header optional data present fields definition
  * libnvme : record the nvme pci adapter physical slot (bsc#1223208)
  * sysfs: minimize heap allocations of sysfs paths
  * json: Fix uninitialized variables
  * libnvme: add missing symbol nvme_scan_tls_keys (bsc#1226197)
  * nbft: Whitespace fixes (bsc#1222026)
  * tests: Add complex NBFT table from Dell R660 (bsc#1222026)
  * tests: Adapt to added NBFT SSNS flags (bsc#1222026)
  * nbft: Add SSNS 'discovered' flag (bsc#1222026)
  * nbft: Add SSNS 'unavailable' flag (bsc#1222026)
  * doc: Document the NBFT API (bsc#1222026)
  * ioctl: Move nvme_cmd_dword_fields definitions into header file
  * types: Add PEL set feature event layout definitions
  * types: Fix enum nvme_pel_rci documentation error
  * types: Add boot partition information definitions
  * types: Add PEL header additional information definitions
  * fabrics: keyring is a long (bsc#1216982)
  * config-schema.json.in: tls keys and keyrings are strings (bsc#1216982)
  * linux: Add nvme_scan_tls_keys() (bsc#1216982)
  * json: dump TLS key data in PSK interchange format (bsc#1216982)
  * json: import TLS key from PSK interchange format (bsc#1216982)
  * json: export TLS key in PSK interchange format (bsc#1216982)
  * tree: read TLS key in nvme_configure_ctrl() (bsc#1216982)
  * linux: rework nvme_insert_tls_key_versioned() (bsc#1216982)
  * linux: add nvme_import_tls_key() (bsc#1216982)
  * linux: add nvme_export_tls_key() (bsc#1216982)
  * crc32: Add CRC32 algorithm (bsc#1216982)
  * linux: add nvme_update_key() (bsc#1216982)
  * linux: add nvme_read_key() (bsc#1216982)
  * linux: allow for NULL argument in nvme_lookup_keyring() (bsc#1216982)
  * log: Respect DEFAULT_LOGLEVEL on uninitialized logging
  * log: Introduce nvme_get_logging_level()
  * ioctl: remove incomplete debug logging infrastructure
  * ioctl: export nvme_submit_passthru{64} as weak symbol (bsc#1231668)
  * log: move nvme_{set|get}_debug to log.c
  * fabrics: check the read() return value
  * types: Add PEL reporting context port identifier type definitions
  * types: Add persistent event log reporting context definitions
-  Upstream changed the sysfs test setup, thus sysfs test works in OSB
  * remove 0001-build-disable-sysfs-test.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1722600000">- Update to version 1.10:
  * linux: update TLS version 1 PSK derivation (bsc#1228376)
  * tree: fix nvme_read_config() to not set errno if return 0
  * types: add new fields added in TP4165 (bsc#1231668)
  * types: Changed the space into tap space (bsc#1231668)
  * tree: handle no address phy slot dirs (bsc#1229193)
  * linux: Remove the use of OpenSSL Engine API
  * types: Added new controller attribute as per TP4104
  * tree: add helper to lookup hostnqn/hostid (bsc#1226216)
  * fabrics: extend hostnqn/hostid variable inject interface (bsc#1226216)
  * json: filter out pcie transport (bsc#1226216)
  * tree: preserve parsing order of a config file (bsc#1226216)
  * types: add new field added in TP4099
  * types: add new field added in TP4090 (bsc#1231668)
  * linux: add nvme_revoke_tls_key (bsc#1226197)
  * tree: fix segfault in nvme_free_tree() (bsc#1231668)
  * types: add PEL vendor specific and TCG defined events definitions
  * mi-mctp: initialize the rc variable in handle_mctp_endpoint()
  * linux: avoid potential null pointer dereference
  * linux: add nvme_get_ana_log_len_from_id_ctrl()
  * libnvme: export nvme_mi_admin_get_ana_log_atomic()
  * ioctl: add support for atomic, piecewise ANA log fetch
  * ioctl: replace nvme_ana_rsp_hdr in doc comments
  * ioctl: respect rae in nvme_get_log_ana()
  * ioctl: fix nvme_get_log_ana_groups() pointer type
  * types: add new filed added in TP4141a
  * mi: Probe quirks on first command submission
  * tree: optionally skip namespaces during scanning
  * ioctl: update nvme_set_var_size_tags() to properly use reftag
  * types: add enum for Protection Information Format
  * libnvme: Introduce functions to generate host identifier and host NQN (bsc#1226216)
  * fabrics: Unescape URI elements
  * tests: Add uriparser tests
  * fabrics: Introduce simple URI parser
  * linux: default init cleanup variable
  * linux: Fix uninitialized variables
  * types: add the nvme Cancel command opcode
  * log: split log variables from root object
  * log: keep log level logic in one place
  * mi: restore default ep timeout during admin_passthru
  * mi: fix the rc for nvme_mi_scan_ep
  * ccan/endian.h: Only define __{BIG,LITTLE}_ENDIAN if undefined.
  * Use C99 types for uint32_t
  * mi: fix the return error code.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1730376000">- Update to version 1.11:
  * prefix: Use Request or Response Length in DLEN and DOFF for MI
  * types: Add ETPVDS and SSI fields of sanitize status log
  * json: do not escape strings when printing the configuration
  * tree: do no export tls keys when not provided by user
  * types: add struct nvme_id_ctrl_nvm ver and lbamqf member variables
  * types: add NVMe 2.1 get log page LIDs
  * type: Added enums for ANSAN and RGCNS bit of OAES field
  * linux: fixup PSK HMAC type '0' handling
  * util: added error code for ENOKEY
  * fabrics: fix map error level in __nvmf_add_ctrl
  * fabrics: add ctrl connect interface
  * fabrics: use hex numbers when generating command line options
  * fabrics: rename first argument for argument macros
  * linux: handle key import correctly
  * linux: export keys to config
  * tree: read tls_configured_key and tls_keyring from sysfs
  * tree: move dhchap and tls sysfs parser into separate functions
  * json: move keystore operations out of the JSON parser
  * tree: add getter/setters for TLS PSK
  * linux: add import/export function for TLS pre-shared keys
  * linux: only return the description of a key
  * linux: use ssize_t as return type for nvme_identity_len
  * linux: reorder variable declarations
  * types: Added enum for SMVES event of PEL log
  * libnvme: add lockdown log page support(LID : 0x14)
  * libnvme: add EMVS support to sanitize command
  * types: Add TP4159 PCIe Infrastructure for Live Migration definitions
  * types: add NVME_CTRL_OAES get macro definitions
  * types: add NVME_CTRL_OAES_TTHR definition
  * types: add NVME_CTRL_FNA definitions to get field values
  * types: add NVME_VAL() definition
  * tree: fix tls key mem leak (bsc#1231668)
  * tree: fix dhchap_ctrl_key mem leak (bsc#1231668)
  * tree: fix dhchap_key mem leak (bsc#1231668)
  * types: add NVME_CHECK() definition to check nvme register field value
  * types: add kv opcodes
  * types: added new fields in nvme_nvme_id_ns
  * types: Add enum for Completion Condition of Get LBA status command
  * ioctl: refactoring set_features
  * types: add new fields added in TP4142
  * mi: add control primitive command
  * linux: Correct error handling for derive_psk_digest (bsc#1228376)
  * types: Added new field CSER in enum as per TP4167
- build fix for OpenSSL 1.1
  * add 0001-linux-fix-derive_psk_digest-OpenSSL-1.1-version.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1732536000">- Fix tests on s390
  * add 0002-test-mock-pass-thru-unknown-ioctls.patch</changelog>
  <changelog author="dwagner@suse.de" date="1745323200">- Update to version 1.11+4.ge68a91ae:
  * tree: add routine to fetch subsys firmware rev (bsc#1240518)
  * tree: add routine to fetch subsys model (bsc#1240518)
  * test/mock: pass thru unknown ioctls
  * linux: fix derive_psk_digest OpenSSL 1.1 version
  - Remove merged patches
  * remove 0001-linux-fix-derive_psk_digest-OpenSSL-1.1-version.patch
  * remove 0002-test-mock-pass-thru-unknown-ioctls.patch</changelog>
  <changelog author="dwagner@suse.de" date="1753185600">- Update to version 1.11+6.g0d17be77:
  * tree: free ctrl attributes when (re)configure ctrl (bsc#1243716)
  * tree: filter tree after scan has completed (bsc#1243716)</changelog>
  <changelog author="dwagner@suse.de" date="1757419200">- Update to version 1.11+8.gfb9b581c:
  * tree: do not try to strdup NULL pointer (bsc#1247225)
  * tree: always set the host key (bsc#1246560)</changelog>
  <changelog author="dwagner@suse.de" date="1758196800">- Update to version 1.11+17.g61f36cae:
  * linux: use EVP_PKEY_CTX_add1_hkdf_info only once in compat function (bsc#1246914)
  * nvme/linux: check for empty digest in gen_tls_identity() (bsc#1246914)
  * nvme/linux: add fallback implementation for nvme_insert_tls_key_compat() (bsc#1246914)
  * linux: fix HKDF TLS key derivation back to OpenSSL 3.0.8 (bsc#1246914)
  * libnvme: TLS PSK derivation fixes (bsc#1246914)
  * linux: rename __nvme_insert_tls_key_versioned() to __nvme_insert_tls_key() (bsc#1246914)
  * linux: rename __nvme_insert_tls_key() to __nvme_import_tls_key() (bsc#1246914)
  * test/psk: add testcase for TLS identity derivation (bsc#1246914)
  * linux: set errno when nvme_generate_tls_key_identity() fails (bsc#1246914)</changelog>
  <changelog author="dwagner@suse.de" date="1770811200">- Update to version 1.11+22.gc0b8e5f8:
  * fabrics: add additional debug messages for --tls and --concat (bsc#1256043)
  * fabrics: add error if dhchap-ctrl-secret is specified with --concat (bsc#1256043)
  * fabrics: add error if no dhchap-secret is specified with --concat (bsc#1256043)
  * fabrics: add error if --tls and --concat are invoked together (bsc#1256043)
  * fabrics: fix concat during nvme connect-all (bsc#1256043)</changelog>
</package>
<package pkgid="eb3c5fc5bdc0814eedfc2cd72a0a878df820227d2321a00684d1ce59962ba06b" name="libnvme" arch="src">
  <version epoch="0" ver="1.11+4.ge68a91ae" rel="150700.4.3.2"/>
  <changelog author="bwiedemann@suse.com" date="1667217600">- Use fixed manpage build date (boo#1047218)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 1.2:
  * Add more details for return code of MI admin cmds
  * Parse dhchap_host_key on controller level
  * Update json config schema for missing dhchap host key
  * fabrics: Add new TP8010 definitions
  * fabrics: Add nvmf_get_discovery_wargs()
  * fabrics: Duplicate strings when merging configs
  * fabrics: Filter out empty strings in add_argument()
  * fabrics: Use fallthrough statement
  * ioctl: Set log page offset for nvme_get_log_telemetry_host
  * json-schema: add dhchap_key details to host section
  * json: Enforce correctly formatted JSON config files
  * json: Verify JSON config file starts with an array
  * mi: Add Get Log Page helpers
  * mi: Add Identify function for secondary controller list
  * mi: Add Identify helper for ns-descs and primary-ctrl-caps
  * mi: Add firmware download and commit commands
  * mi: Add identify helper for nsid-capable Controller List
  * mi: Add identify helpers for namespace lists
  * mi: Add identify helpers for namespaces
  * mi: Allow Admin-message sized More Processing Required responses
  * mi: Distinguish MI status from NVMe (CDW3) status
  * mi: Fix C++ compiler errors
  * mi: Implement Format NVM command
  * mi: Implement Get &amp; Set Features Admin commands
  * mi: Implement NS attach command and helpers
  * mi: Implement Namespace Management command and create/delete helpers
  * mi: Implement Sanitize command
  * mi: Init ctrl_id within xfer
  * mi: Introduce a helper for response status, unify values with ioctls
  * mi: Set log page offset for nvme_get_log_telemetry_host
  * mi: add nvme_mi_status_to_string()
  * mi: fix a memory leak in nvme_mi_open_mctp()
  * mi: fix get_log_page chunked offset check
  * nvme-tree: avoid segfault if auth keys are unavailable
  * python: Use nvmf_get_discovery_wargs()
  * tree: rename controller 'dhchap_key' to 'dhchap_ctrl_key'
  * types: Move enum nvme_data_tfr to types
  * util: Add LINE_MAX define
  * util: Add get feature length 2 API to support direction parameter
  * util: Add simple UUID type
  * util: Do not expose fallthrough defines
- Make man page build conditiional. Install man page location has been
  fixed upstream.
- Mark the Python directory own by the libnvme3-python package</changelog>
  <changelog author="daniel.wagner@suse.com" date="1675080000">- Update to version 1.3:
  * Support added for Flexible Data Placement (TP4146)
  * Fabrics: added support for Persistent Discovery Controllers.
  * libnvme-mi added a quirk framework to workaround special behavior of
  certain devices
  * The python binding behaves more friendly in a threading environment
  by release the GIL on blocking calls.
  * Replaced  3the libsystemd dependency with libdbus
  * A lot of small fixes everywhere (leaks, wrong ordering of arguments, ...)
- Update spec file
  * Project depends on meson &gt;= 0.50.0</changelog>
  <changelog author="mwilck@suse.com" date="1675080001">- temporarily disable unit tests on s390x (bsc#1207687, bsc#1207686)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1680264000">- Update to version 1.4: (jsc#PED-553 jsc#PED-3884)
  * fabrics: Filter out invalid UUIDs from DMI
  * fabrics: Add define for DMI sysinfo
  * Print out correct TREQ strings for discovery
  * tree: fix generic device open failure
  * fabrics: add configuration option 'tls_key'
  * fabrics: add configuration option 'keyring'
  * linux: add key helper functions
  * nvme: add 'nvme_insert_tls_key()' function
  * linux: add nvme_lookup_keyring()
  * python: Change python option from combo to feature
  * types: add opcode field to error log page (TP4113)
  * python: Add setter property for controller DHCHAP Key
  * python: Remove redundant host.set_key() method
  * build, meson: Print option summary
  * Python: Add support for setting/getting Host DHCHAP key
  * Python: Add hostnqn_from_file() and hostid_from_file()
  * types: Update position of elbatm in struct nvme_copy_range{_f1}
  * doc: fix kernel-doc-check warning
  * python, meson: Assert that deps are present for -Dpython=true
  * python: Reformat SWIG input file
  * python test: Check there is no SIGSEGV during garbage collection
  * python: Return PyObject* from __str__() instead of a static char[]
  * python: Fix segmentation fault during garbage collection
  * build: Enable test in muon minimal build
  * build: Streamline workflows with nvme-cli
  * mi: Add nvme_mi_admin_get_log_page
  * ioctl: Set file descriptor in nvme_get_log_page()
  * fix endians
  * fabrics: Do not ignore one char whitespace when string sanitizing
- Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
- Fix invalid string lenght calculcation for UUID (bsc#1209906)
- Fix segmentation fault during garbage collection (bsc#1209905)
- Always sanitize traddr and trsvcid entries (bsc#1207435)
- Allow tracking unique discover controllers (bsc#1186689)</changelog>
  <changelog author="ana.guerrero@suse.com" date="1690459200">- Fix build with meson 1.2.0</changelog>
  <changelog author="daniel.wagner@suse.com" date="1695988800">- Update to version 1.6: (jsc#PED-3610 jsc#PED-4879 jsc#PED-5061)
  * docs: Fix Read-the-Docs configuration (deprecated config param)
  * mi-mctp: Fix free() in error path of mi_open_mctp
  * types: Use NVME_SET for status type mask to get status value
  * types: Define FLBAS MASK and SHIFT to use NVME_GET
  * types: Support Phy Rx Eye Opening Measurement Log
  * log: Add nvme root global variable to set for default output
  * types: Add support for the OAQD ID controller field
  * test: use non deprecated API
  * test: add tests for Get/Set Features functions
  * ioctl: implement nvme_set_features_lba_range()
  * ioctl: pass NSID in Get/Set Features commands that use it
  * ioctl: fix swapped parameters in nvme_set_features_host_id()
  * ioctl: export nvme_{g,s}et_features_iocs_profile()
  * ioctl: pass ENDGID in nvme_get_features_endurance_event_cfg()
  * ioctl: don't set SAVE bit on unsaveable features
  * ioctl: avoid sending uninitialized timestamp
  * ioctl: pass data for Get/Set Features commands
  * ioctl: set correct bits in Set Features commands
  * ioctl: correct feature IDs in Get/Set Features commands
  * tree: Add 2 new public functions to lookup existing controllers
  * ioctl: Add debugging feature to show command outputs
  * Fix incorrect article 'an' as 'a' to use for a description
  * linux: Added functions to enable faster telemetry data retrieval. Moved telemetry data area support detection into separate function. Added possibility to modify data transfer chunk size. Enable telemetry extraction up to specified data area. Removed some printf() and perror().
  * test: account for discovery log page entry stripping
  * fabrics: unconditionally strip discovery entry strings
  * fabrics: only look for spaces in strchomp()
  * tree: Use early return instead of else statements
  * test: fix lookup test case
  * test: make all function static
  * test: add tests for new tcp controller matching algorithm
  * tree: Improve TCP controller matching algorithm
  * util: Add functions to parse the system's interfaces
  * types: Add support for EGFEAT, Domain Identifier, TEGCAP and UEGCAP
  * mi: remove nsid from nvme_mi_admin_identify_secondary_ctrl_list()
  * test: add tests for nvme_ctrl_get_src_addr()
  * tree: Add nvme_ctrl_get_src_addr() to get the controller's src_addr
  * util: Split _nvme_ipaddrs_eq() from nvme_ipaddrs_eq()
  * test: add tests for Identify functions
  * ioctl: use available Identify helper functions
  * test: pass a large enough buffer to nvme_identify_ns_descs()
  * ioctl: remove nsid from nvme_identify_secondary_ctrl_list()
  * meson: Don't hard-code path to "internal/config.h"
  * fabrics: Do not pass disable_sqflow if not supported
  * fabrics: Read the supported options lazy
  * test: add discovery log page tests
  * test: add infra for mocking passthru ioctls
  * tree: fix segfault in nvme_scan_subsystem() (bsc#1213993)
  * src/nvme/tree.c: make __nvme_scan_subsystem() returning bool (bsc#1213993)
  * doc: fix minor mistake in README.md about dependencies
  * nvme-tree: avoid warning in 'list-subsys' (bsc#1212598)
  * tree: Add getter for subsystem iopolicy (bsc#1124564)
  * fabrics: Consider also all hosts settings for context match
  * tree: Scan all subsystems (bsc#1212598)
  * doc: Fixing compile instruction in README
  * mi: allow non-4-byte-aligned responses
  * mi-mctp: use a linear response buffer
  * mi: implement length and offset alignment checks in admin_xfer()
  * tree: Don't open nvme devices until it's absolutely required
    (bsc#1213527 bsc#1213686)
  * tree: missing closedir() causes fd leak for "/sys/bus/pci/slots"
  * mi: don't return from mi_mctp_submit with a tag held
  * util: Provide empty nvme_ipaddrs_eq for static builds
  * fabrics: Relax match on well known disc ctrl lookup
  * tree: Ignore NULL address pointer for phy slot lookup
  * fabrics: Filter discovery ctrls out during application context check
  * util: Add ignored error code
  * json: Use memory block allocated by realloc() instead printbuf
  * util: Use HAVE_NETDB instead of HAVE_LIBNSS
  * tree: Add PCI physical slot number for controller
  * tree: Use nvme_ipaddrs_eq() to compare IP addresses
  * fabrics: Add EADDRNOTAVAIL error mapping
  * fabrics: filter out subsystems with non-matching application string
  * libnvme: add 'application' setting to nvme_root
  * libnvme: add 'application' setting to the subsystem
  * test: Add more code coverage for nvme_ipaddrs_eq()
  * util: rename ipaddrs_eq() to nvme_ipaddrs_eq() and make public.
  * util: Add ipaddrs_eq() to check whether two IP addresses are equal
  * test: Add unit test for ctrl lookups
  * ioctl: fix RAE bit on last Get Log Page command (bsc#1213618)
  * fabrics: check genctr after getting discovery entries (bsc#1213618)
  * fabrics: handle /dev/nvme-fabrics read failure
  * fabrics: fix potential invalid memory access in __nvmf_supported_option()
  * Python: Fix crash during garbage collection
  * python/swig: Check swig version to determine whether -py3 is needed
  * python/swig: Wrap swig-sensitive struct inside #ifwdef SWIG
  * mi: Add nvme_mi_ctrl_id to retrieve controller ID
  * Python: Suppress swig warnings about unnamed struct
  * examples: fix incorrect controller status in MI info output
  * ioctl: Explicitly initialize all members of struct nvme_ns_mgmt_args
  * Python: make NBFT data more pythonic
  * ioctl: io management send, receive args fix
  * python: Update test data
  * NBFT: Remove documentation from nbft.c since it's also in nbft.h
  * Python: Add NBFT support
  * nbft: Doc typo - Use nvme_nbft_free() instead of nbft_free()
  * nbft: Parse the {HOSTID,HOSTNQN}_CONFIGURED flags
  * nbft: Fix nbft_ssns_flags endianness test
  * nbft: Add a simple unit test
  * doc: Update README
  * build: Simple muon build configuration
  * build: Extend summary section
  * build: Make json-c dependency lookup not fail
  * nbft: Move added symbols to LIBNVME_1_5
  * build: Update wrap mode defaults
  * build: Disable fallback on default
  * tree: Fix offset argument check in nvme_bytes_to_lba
  * nbft: add NBFT v1.0 table support (jsc#PED-1449)
  * types: Add IO command set specific field on nsmgmt
  * fabrics: Do not pass unsupported options to kernel
  * types: Add ns-mgmt host software specified fields
  * types.h: Add FDP related Status Code
  * tree: Fix argument check in nvme_bytes_to_lba</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420800">- Drop unencessary minimum version depedency on meson.
- Re-enable libdbus feature. Upstream defaults changed.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420801">- Enable tests during build
- Set git version tag
- Drop unused make dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696852800">- Use glob for python3-libnvme file listening. Workaround pycache_only
  problems for SLE/Leap builds.
- Drop usused libuuid dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1697112000">- Add missing jsc# tracking references to changelog</changelog>
  <changelog author="mwilck@suse.com" date="1697544000">- Update to version 1.6+5.g68c6ffb:
  * avoid stack corruption by unaligned DMA to user space buffers
    (bsc#1216344, gh#linux-nvme/libnvme#727)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1702987200">- Update to version 1.7+0.gf38b1d7:
  * tree: do not open blk device on default
  * tree: read all attributes from sysfs when available
  * ioctl: set data length when retrieving LBA status
  * types: fix regression for vendor-specific field in nvme_id_ns
  * util: use cleanup functions
  * linux: use cleanup functions
  * json: use cleanup functions
  * fabrics: use cleanup functions
  * tree: use cleanup functions
  * cleanup: add cleanup functions
  * tree: fix incorrect return value
  * tree: Fix clearing application strings
  * libnvme: reshuffle nvme_generate_tls_key_identity()
  * libnvme: fixup error codes
  * libnvme: Implement 'nvme_generate_tls_key_identity()'
  * libnvme: support NVMe TLS identities version 1 (bsc#1219086)
  * libnvme: Add base64 functions
  * libnvme: separate out 'gen_tls_identity' and reshuffle 'derive_nvme_keys'
  * libnvme: separate out a function 'select_hmac'
  * libnvme: fix a memory leak when calling read_ssns()
  * libnvme: fix a memory leak in read_discovery()
  * fabrics: avoid redundant args in nvme_discovery_log()
  * fabrics: have nvmf_get_discovery_log() call nvmf_get_discovery_wargs()
  * fabrics: fetch smaller Discovery Log Page header
  * fabrics: avoid redundant Get Log Page on retry
  * fabrics: clear RAE for discovery log page commands
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * types: add Host Behavior Support field definitions
  * mi: Cast values to u32 if shift overflows int
  * types: Cast values to u32 if shift overflows int
  * test: Avoid unaligned pointer dereferences
  * nbft: Avoid unaligned pointer dereferences
  * types: add cross-namespace copy formats, status codes, ONCS bits
  * nvme: Add length field to Hkdf-Expand-Label computation
  * ioctl: use lsp arg in nvme_get_log_boot_partition
  * fabrics: use SECTYPE to determine whether to use TLS (bsc#1219086)
  * fabrics: Allocate aligned payloads for id_ctrl and discovery log calls
  * linux: Allocate aligned payloads for id_ctrl and id_ns calls
  * ioctl: MSB variable-size storage/reference tags</changelog>
  <changelog author="daniel.wagner@suse.com" date="1703073600">- Update to version 1.7.1+0.g13ba383:
  * tree: do no free ns on error in nvme_ns_init</changelog>
  <changelog author="daniel.wagner@suse.com" date="1707912000">- Update to version 1.8+0.gbff7dda:
  * linux: Explicitly initialize auto-cleanup variables
  * example: fix mi identify failed with error cntid
  * tree: do not issue an error when subsys lookup fails during scanning
  * types: Add controller properties CMBEBS, CMBSWTP and NSSD
  * tests: Add sample NBFT table from Dell PowerEdge R660
  * tests: Add sample NBFT table from Dell PowerEdge R760
  * tests: Fix diffs output for duplicate HFI entries
  * nbft: avoid duplicate entries in ssns-&gt;hfis
  * nbft: Fix (struct nbft_info_subsystem_ns).num_hfis off-by-one
  * test: read and dump sysfs tar file
  * nvme: allow to overwrite hostnqn and hostid
  * nvme: allow to overwrite base sysfs path
  * json: dump the output to the user selected filedescriptor
  * libnvme: export nvme_dump_tree
  * fabrics: add 'concat' option
  * mi: set correct rc and errno when crc mismatch
  * tree: use logical block size for lba
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * build: checkout full repo for checkpatch
  * linux: avoid segfault in check-tls-key due to null hostnqn/subsysnqn (bsc#1219086)
  * meson.build: fixup 'join' syntax
  * util: Explicitly initialize auto-cleanup variables
  * tree: Explicitly initialize auto-cleanup variables
  * linux: Explicitly initialize auto-cleanup variables
  * fabrics: Explicitly initialize auto-cleanup variables
  * util: Added function to find specific UUID in UUID list.
  * build: fix release python tag match
- Disable new unit test which is not running stable in OSB
  * add 0001-build-disable-sysfs-test.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737600">- Update to version 1.9+0.g80c5cf2:
  * types: Added Command and Feature Lockdown LID
  * types: add ASQ, ACQ and BPMBL controller properties definitions
  * types: add controller properties enum documentation
  * types: fix CRTO.CRIMT mask value definition
  * tree: use strtou32 to read lba_size
  * types: Fix PMRWBM register name
  * examples: fix mi-mctp build warning errors
  * test: add CSTS.ST, CAP.CPS and CAP.NSSS registers
  * types: add CAP.CPS and CAP.NSSS definitions
  * types: add enum nvme_cap documentation
  * types: Add enum nvme_unit/cmbebs/cmbswtp/flbas/cmic documentation
  * util: Add string constant for ENVME_CONNECT_IGNORED
  * tests: Add sample NBFT table with mpath IPv4+IPv6 discovery
  * types: add controller status shutdown type (CSTS.ST) definition
  * types: Add enum nvme_csts documentation
  * types: Add NVME_CMIC definitions
  * types: Add CMBSWTP property definitions
  * types: Add NVME_CMBEBS property definitions
  * types: Fix boot partition read offset (BPROF) mask value
  * tree: fix mem leak in nvme_ns_init() (bsc#1223331)
  * fabrics: retry discovery log page when DNR is not set
  * ioctl: return EPROTO when an NVMe status occurred
  * linux: Allocate aligned payload for nvme_get_telemetry_log
  * test: use diff to compare sysfs output (bsc#1226216)
  * tree: fix lba_count size calculation
  * tree: Add NVM subsystem controller identifier (bsc#1224024)
  * test: Add unit test for nvme_id_ns_flbas_to_lbaf_inuse()
  * types: Fix NVME_CSTS_SHST_MASK definition
  * util: Fixed nvme_id_ns_flbas_to_lbaf_inuse()
  * types: Add optional data present filed mask and shift definition
  * types: Fix EOM header optional data present fields definition
  * libnvme : record the nvme pci adapter physical slot (bsc#1223208)
  * sysfs: minimize heap allocations of sysfs paths
  * json: Fix uninitialized variables
  * libnvme: add missing symbol nvme_scan_tls_keys (bsc#1226197)
  * nbft: Whitespace fixes (bsc#1222026)
  * tests: Add complex NBFT table from Dell R660 (bsc#1222026)
  * tests: Adapt to added NBFT SSNS flags (bsc#1222026)
  * nbft: Add SSNS 'discovered' flag (bsc#1222026)
  * nbft: Add SSNS 'unavailable' flag (bsc#1222026)
  * doc: Document the NBFT API (bsc#1222026)
  * ioctl: Move nvme_cmd_dword_fields definitions into header file
  * types: Add PEL set feature event layout definitions
  * types: Fix enum nvme_pel_rci documentation error
  * types: Add boot partition information definitions
  * types: Add PEL header additional information definitions
  * fabrics: keyring is a long (bsc#1216982)
  * config-schema.json.in: tls keys and keyrings are strings (bsc#1216982)
  * linux: Add nvme_scan_tls_keys() (bsc#1216982)
  * json: dump TLS key data in PSK interchange format (bsc#1216982)
  * json: import TLS key from PSK interchange format (bsc#1216982)
  * json: export TLS key in PSK interchange format (bsc#1216982)
  * tree: read TLS key in nvme_configure_ctrl() (bsc#1216982)
  * linux: rework nvme_insert_tls_key_versioned() (bsc#1216982)
  * linux: add nvme_import_tls_key() (bsc#1216982)
  * linux: add nvme_export_tls_key() (bsc#1216982)
  * crc32: Add CRC32 algorithm (bsc#1216982)
  * linux: add nvme_update_key() (bsc#1216982)
  * linux: add nvme_read_key() (bsc#1216982)
  * linux: allow for NULL argument in nvme_lookup_keyring() (bsc#1216982)
  * log: Respect DEFAULT_LOGLEVEL on uninitialized logging
  * log: Introduce nvme_get_logging_level()
  * ioctl: remove incomplete debug logging infrastructure
  * ioctl: export nvme_submit_passthru{64} as weak symbol (bsc#1231668)
  * log: move nvme_{set|get}_debug to log.c
  * fabrics: check the read() return value
  * types: Add PEL reporting context port identifier type definitions
  * types: Add persistent event log reporting context definitions
-  Upstream changed the sysfs test setup, thus sysfs test works in OSB
  * remove 0001-build-disable-sysfs-test.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1722600000">- Update to version 1.10:
  * linux: update TLS version 1 PSK derivation (bsc#1228376)
  * tree: fix nvme_read_config() to not set errno if return 0
  * types: add new fields added in TP4165 (bsc#1231668)
  * types: Changed the space into tap space (bsc#1231668)
  * tree: handle no address phy slot dirs (bsc#1229193)
  * linux: Remove the use of OpenSSL Engine API
  * types: Added new controller attribute as per TP4104
  * tree: add helper to lookup hostnqn/hostid (bsc#1226216)
  * fabrics: extend hostnqn/hostid variable inject interface (bsc#1226216)
  * json: filter out pcie transport (bsc#1226216)
  * tree: preserve parsing order of a config file (bsc#1226216)
  * types: add new field added in TP4099
  * types: add new field added in TP4090 (bsc#1231668)
  * linux: add nvme_revoke_tls_key (bsc#1226197)
  * tree: fix segfault in nvme_free_tree() (bsc#1231668)
  * types: add PEL vendor specific and TCG defined events definitions
  * mi-mctp: initialize the rc variable in handle_mctp_endpoint()
  * linux: avoid potential null pointer dereference
  * linux: add nvme_get_ana_log_len_from_id_ctrl()
  * libnvme: export nvme_mi_admin_get_ana_log_atomic()
  * ioctl: add support for atomic, piecewise ANA log fetch
  * ioctl: replace nvme_ana_rsp_hdr in doc comments
  * ioctl: respect rae in nvme_get_log_ana()
  * ioctl: fix nvme_get_log_ana_groups() pointer type
  * types: add new filed added in TP4141a
  * mi: Probe quirks on first command submission
  * tree: optionally skip namespaces during scanning
  * ioctl: update nvme_set_var_size_tags() to properly use reftag
  * types: add enum for Protection Information Format
  * libnvme: Introduce functions to generate host identifier and host NQN (bsc#1226216)
  * fabrics: Unescape URI elements
  * tests: Add uriparser tests
  * fabrics: Introduce simple URI parser
  * linux: default init cleanup variable
  * linux: Fix uninitialized variables
  * types: add the nvme Cancel command opcode
  * log: split log variables from root object
  * log: keep log level logic in one place
  * mi: restore default ep timeout during admin_passthru
  * mi: fix the rc for nvme_mi_scan_ep
  * ccan/endian.h: Only define __{BIG,LITTLE}_ENDIAN if undefined.
  * Use C99 types for uint32_t
  * mi: fix the return error code.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1730376000">- Update to version 1.11:
  * prefix: Use Request or Response Length in DLEN and DOFF for MI
  * types: Add ETPVDS and SSI fields of sanitize status log
  * json: do not escape strings when printing the configuration
  * tree: do no export tls keys when not provided by user
  * types: add struct nvme_id_ctrl_nvm ver and lbamqf member variables
  * types: add NVMe 2.1 get log page LIDs
  * type: Added enums for ANSAN and RGCNS bit of OAES field
  * linux: fixup PSK HMAC type '0' handling
  * util: added error code for ENOKEY
  * fabrics: fix map error level in __nvmf_add_ctrl
  * fabrics: add ctrl connect interface
  * fabrics: use hex numbers when generating command line options
  * fabrics: rename first argument for argument macros
  * linux: handle key import correctly
  * linux: export keys to config
  * tree: read tls_configured_key and tls_keyring from sysfs
  * tree: move dhchap and tls sysfs parser into separate functions
  * json: move keystore operations out of the JSON parser
  * tree: add getter/setters for TLS PSK
  * linux: add import/export function for TLS pre-shared keys
  * linux: only return the description of a key
  * linux: use ssize_t as return type for nvme_identity_len
  * linux: reorder variable declarations
  * types: Added enum for SMVES event of PEL log
  * libnvme: add lockdown log page support(LID : 0x14)
  * libnvme: add EMVS support to sanitize command
  * types: Add TP4159 PCIe Infrastructure for Live Migration definitions
  * types: add NVME_CTRL_OAES get macro definitions
  * types: add NVME_CTRL_OAES_TTHR definition
  * types: add NVME_CTRL_FNA definitions to get field values
  * types: add NVME_VAL() definition
  * tree: fix tls key mem leak (bsc#1231668)
  * tree: fix dhchap_ctrl_key mem leak (bsc#1231668)
  * tree: fix dhchap_key mem leak (bsc#1231668)
  * types: add NVME_CHECK() definition to check nvme register field value
  * types: add kv opcodes
  * types: added new fields in nvme_nvme_id_ns
  * types: Add enum for Completion Condition of Get LBA status command
  * ioctl: refactoring set_features
  * types: add new fields added in TP4142
  * mi: add control primitive command
  * linux: Correct error handling for derive_psk_digest (bsc#1228376)
  * types: Added new field CSER in enum as per TP4167
- build fix for OpenSSL 1.1
  * add 0001-linux-fix-derive_psk_digest-OpenSSL-1.1-version.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1732536000">- Fix tests on s390
  * add 0002-test-mock-pass-thru-unknown-ioctls.patch</changelog>
  <changelog author="dwagner@suse.de" date="1745323200">- Update to version 1.11+4.ge68a91ae:
  * tree: add routine to fetch subsys firmware rev (bsc#1240518)
  * tree: add routine to fetch subsys model (bsc#1240518)
  * test/mock: pass thru unknown ioctls
  * linux: fix derive_psk_digest OpenSSL 1.1 version
  - Remove merged patches
  * remove 0001-linux-fix-derive_psk_digest-OpenSSL-1.1-version.patch
  * remove 0002-test-mock-pass-thru-unknown-ioctls.patch</changelog>
</package>
<package pkgid="b6145274327a3faaba48f37a3f0cec113e4b6232a1b928a97dbca1729ec208de" name="libnvme" arch="src">
  <version epoch="0" ver="1.11+6.g0d17be77" rel="150700.4.6.2"/>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 1.2:
  * Add more details for return code of MI admin cmds
  * Parse dhchap_host_key on controller level
  * Update json config schema for missing dhchap host key
  * fabrics: Add new TP8010 definitions
  * fabrics: Add nvmf_get_discovery_wargs()
  * fabrics: Duplicate strings when merging configs
  * fabrics: Filter out empty strings in add_argument()
  * fabrics: Use fallthrough statement
  * ioctl: Set log page offset for nvme_get_log_telemetry_host
  * json-schema: add dhchap_key details to host section
  * json: Enforce correctly formatted JSON config files
  * json: Verify JSON config file starts with an array
  * mi: Add Get Log Page helpers
  * mi: Add Identify function for secondary controller list
  * mi: Add Identify helper for ns-descs and primary-ctrl-caps
  * mi: Add firmware download and commit commands
  * mi: Add identify helper for nsid-capable Controller List
  * mi: Add identify helpers for namespace lists
  * mi: Add identify helpers for namespaces
  * mi: Allow Admin-message sized More Processing Required responses
  * mi: Distinguish MI status from NVMe (CDW3) status
  * mi: Fix C++ compiler errors
  * mi: Implement Format NVM command
  * mi: Implement Get &amp; Set Features Admin commands
  * mi: Implement NS attach command and helpers
  * mi: Implement Namespace Management command and create/delete helpers
  * mi: Implement Sanitize command
  * mi: Init ctrl_id within xfer
  * mi: Introduce a helper for response status, unify values with ioctls
  * mi: Set log page offset for nvme_get_log_telemetry_host
  * mi: add nvme_mi_status_to_string()
  * mi: fix a memory leak in nvme_mi_open_mctp()
  * mi: fix get_log_page chunked offset check
  * nvme-tree: avoid segfault if auth keys are unavailable
  * python: Use nvmf_get_discovery_wargs()
  * tree: rename controller 'dhchap_key' to 'dhchap_ctrl_key'
  * types: Move enum nvme_data_tfr to types
  * util: Add LINE_MAX define
  * util: Add get feature length 2 API to support direction parameter
  * util: Add simple UUID type
  * util: Do not expose fallthrough defines
- Make man page build conditiional. Install man page location has been
  fixed upstream.
- Mark the Python directory own by the libnvme3-python package</changelog>
  <changelog author="daniel.wagner@suse.com" date="1675080000">- Update to version 1.3:
  * Support added for Flexible Data Placement (TP4146)
  * Fabrics: added support for Persistent Discovery Controllers.
  * libnvme-mi added a quirk framework to workaround special behavior of
  certain devices
  * The python binding behaves more friendly in a threading environment
  by release the GIL on blocking calls.
  * Replaced  3the libsystemd dependency with libdbus
  * A lot of small fixes everywhere (leaks, wrong ordering of arguments, ...)
- Update spec file
  * Project depends on meson &gt;= 0.50.0</changelog>
  <changelog author="mwilck@suse.com" date="1675080001">- temporarily disable unit tests on s390x (bsc#1207687, bsc#1207686)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1680264000">- Update to version 1.4: (jsc#PED-553 jsc#PED-3884)
  * fabrics: Filter out invalid UUIDs from DMI
  * fabrics: Add define for DMI sysinfo
  * Print out correct TREQ strings for discovery
  * tree: fix generic device open failure
  * fabrics: add configuration option 'tls_key'
  * fabrics: add configuration option 'keyring'
  * linux: add key helper functions
  * nvme: add 'nvme_insert_tls_key()' function
  * linux: add nvme_lookup_keyring()
  * python: Change python option from combo to feature
  * types: add opcode field to error log page (TP4113)
  * python: Add setter property for controller DHCHAP Key
  * python: Remove redundant host.set_key() method
  * build, meson: Print option summary
  * Python: Add support for setting/getting Host DHCHAP key
  * Python: Add hostnqn_from_file() and hostid_from_file()
  * types: Update position of elbatm in struct nvme_copy_range{_f1}
  * doc: fix kernel-doc-check warning
  * python, meson: Assert that deps are present for -Dpython=true
  * python: Reformat SWIG input file
  * python test: Check there is no SIGSEGV during garbage collection
  * python: Return PyObject* from __str__() instead of a static char[]
  * python: Fix segmentation fault during garbage collection
  * build: Enable test in muon minimal build
  * build: Streamline workflows with nvme-cli
  * mi: Add nvme_mi_admin_get_log_page
  * ioctl: Set file descriptor in nvme_get_log_page()
  * fix endians
  * fabrics: Do not ignore one char whitespace when string sanitizing
- Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
- Fix invalid string lenght calculcation for UUID (bsc#1209906)
- Fix segmentation fault during garbage collection (bsc#1209905)
- Always sanitize traddr and trsvcid entries (bsc#1207435)
- Allow tracking unique discover controllers (bsc#1186689)</changelog>
  <changelog author="ana.guerrero@suse.com" date="1690459200">- Fix build with meson 1.2.0</changelog>
  <changelog author="daniel.wagner@suse.com" date="1695988800">- Update to version 1.6: (jsc#PED-3610 jsc#PED-4879 jsc#PED-5061)
  * docs: Fix Read-the-Docs configuration (deprecated config param)
  * mi-mctp: Fix free() in error path of mi_open_mctp
  * types: Use NVME_SET for status type mask to get status value
  * types: Define FLBAS MASK and SHIFT to use NVME_GET
  * types: Support Phy Rx Eye Opening Measurement Log
  * log: Add nvme root global variable to set for default output
  * types: Add support for the OAQD ID controller field
  * test: use non deprecated API
  * test: add tests for Get/Set Features functions
  * ioctl: implement nvme_set_features_lba_range()
  * ioctl: pass NSID in Get/Set Features commands that use it
  * ioctl: fix swapped parameters in nvme_set_features_host_id()
  * ioctl: export nvme_{g,s}et_features_iocs_profile()
  * ioctl: pass ENDGID in nvme_get_features_endurance_event_cfg()
  * ioctl: don't set SAVE bit on unsaveable features
  * ioctl: avoid sending uninitialized timestamp
  * ioctl: pass data for Get/Set Features commands
  * ioctl: set correct bits in Set Features commands
  * ioctl: correct feature IDs in Get/Set Features commands
  * tree: Add 2 new public functions to lookup existing controllers
  * ioctl: Add debugging feature to show command outputs
  * Fix incorrect article 'an' as 'a' to use for a description
  * linux: Added functions to enable faster telemetry data retrieval. Moved telemetry data area support detection into separate function. Added possibility to modify data transfer chunk size. Enable telemetry extraction up to specified data area. Removed some printf() and perror().
  * test: account for discovery log page entry stripping
  * fabrics: unconditionally strip discovery entry strings
  * fabrics: only look for spaces in strchomp()
  * tree: Use early return instead of else statements
  * test: fix lookup test case
  * test: make all function static
  * test: add tests for new tcp controller matching algorithm
  * tree: Improve TCP controller matching algorithm
  * util: Add functions to parse the system's interfaces
  * types: Add support for EGFEAT, Domain Identifier, TEGCAP and UEGCAP
  * mi: remove nsid from nvme_mi_admin_identify_secondary_ctrl_list()
  * test: add tests for nvme_ctrl_get_src_addr()
  * tree: Add nvme_ctrl_get_src_addr() to get the controller's src_addr
  * util: Split _nvme_ipaddrs_eq() from nvme_ipaddrs_eq()
  * test: add tests for Identify functions
  * ioctl: use available Identify helper functions
  * test: pass a large enough buffer to nvme_identify_ns_descs()
  * ioctl: remove nsid from nvme_identify_secondary_ctrl_list()
  * meson: Don't hard-code path to "internal/config.h"
  * fabrics: Do not pass disable_sqflow if not supported
  * fabrics: Read the supported options lazy
  * test: add discovery log page tests
  * test: add infra for mocking passthru ioctls
  * tree: fix segfault in nvme_scan_subsystem() (bsc#1213993)
  * src/nvme/tree.c: make __nvme_scan_subsystem() returning bool (bsc#1213993)
  * doc: fix minor mistake in README.md about dependencies
  * nvme-tree: avoid warning in 'list-subsys' (bsc#1212598)
  * tree: Add getter for subsystem iopolicy (bsc#1124564)
  * fabrics: Consider also all hosts settings for context match
  * tree: Scan all subsystems (bsc#1212598)
  * doc: Fixing compile instruction in README
  * mi: allow non-4-byte-aligned responses
  * mi-mctp: use a linear response buffer
  * mi: implement length and offset alignment checks in admin_xfer()
  * tree: Don't open nvme devices until it's absolutely required
    (bsc#1213527 bsc#1213686)
  * tree: missing closedir() causes fd leak for "/sys/bus/pci/slots"
  * mi: don't return from mi_mctp_submit with a tag held
  * util: Provide empty nvme_ipaddrs_eq for static builds
  * fabrics: Relax match on well known disc ctrl lookup
  * tree: Ignore NULL address pointer for phy slot lookup
  * fabrics: Filter discovery ctrls out during application context check
  * util: Add ignored error code
  * json: Use memory block allocated by realloc() instead printbuf
  * util: Use HAVE_NETDB instead of HAVE_LIBNSS
  * tree: Add PCI physical slot number for controller
  * tree: Use nvme_ipaddrs_eq() to compare IP addresses
  * fabrics: Add EADDRNOTAVAIL error mapping
  * fabrics: filter out subsystems with non-matching application string
  * libnvme: add 'application' setting to nvme_root
  * libnvme: add 'application' setting to the subsystem
  * test: Add more code coverage for nvme_ipaddrs_eq()
  * util: rename ipaddrs_eq() to nvme_ipaddrs_eq() and make public.
  * util: Add ipaddrs_eq() to check whether two IP addresses are equal
  * test: Add unit test for ctrl lookups
  * ioctl: fix RAE bit on last Get Log Page command (bsc#1213618)
  * fabrics: check genctr after getting discovery entries (bsc#1213618)
  * fabrics: handle /dev/nvme-fabrics read failure
  * fabrics: fix potential invalid memory access in __nvmf_supported_option()
  * Python: Fix crash during garbage collection
  * python/swig: Check swig version to determine whether -py3 is needed
  * python/swig: Wrap swig-sensitive struct inside #ifwdef SWIG
  * mi: Add nvme_mi_ctrl_id to retrieve controller ID
  * Python: Suppress swig warnings about unnamed struct
  * examples: fix incorrect controller status in MI info output
  * ioctl: Explicitly initialize all members of struct nvme_ns_mgmt_args
  * Python: make NBFT data more pythonic
  * ioctl: io management send, receive args fix
  * python: Update test data
  * NBFT: Remove documentation from nbft.c since it's also in nbft.h
  * Python: Add NBFT support
  * nbft: Doc typo - Use nvme_nbft_free() instead of nbft_free()
  * nbft: Parse the {HOSTID,HOSTNQN}_CONFIGURED flags
  * nbft: Fix nbft_ssns_flags endianness test
  * nbft: Add a simple unit test
  * doc: Update README
  * build: Simple muon build configuration
  * build: Extend summary section
  * build: Make json-c dependency lookup not fail
  * nbft: Move added symbols to LIBNVME_1_5
  * build: Update wrap mode defaults
  * build: Disable fallback on default
  * tree: Fix offset argument check in nvme_bytes_to_lba
  * nbft: add NBFT v1.0 table support (jsc#PED-1449)
  * types: Add IO command set specific field on nsmgmt
  * fabrics: Do not pass unsupported options to kernel
  * types: Add ns-mgmt host software specified fields
  * types.h: Add FDP related Status Code
  * tree: Fix argument check in nvme_bytes_to_lba</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420800">- Drop unencessary minimum version depedency on meson.
- Re-enable libdbus feature. Upstream defaults changed.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420801">- Enable tests during build
- Set git version tag
- Drop unused make dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696852800">- Use glob for python3-libnvme file listening. Workaround pycache_only
  problems for SLE/Leap builds.
- Drop usused libuuid dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1697112000">- Add missing jsc# tracking references to changelog</changelog>
  <changelog author="mwilck@suse.com" date="1697544000">- Update to version 1.6+5.g68c6ffb:
  * avoid stack corruption by unaligned DMA to user space buffers
    (bsc#1216344, gh#linux-nvme/libnvme#727)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1702987200">- Update to version 1.7+0.gf38b1d7:
  * tree: do not open blk device on default
  * tree: read all attributes from sysfs when available
  * ioctl: set data length when retrieving LBA status
  * types: fix regression for vendor-specific field in nvme_id_ns
  * util: use cleanup functions
  * linux: use cleanup functions
  * json: use cleanup functions
  * fabrics: use cleanup functions
  * tree: use cleanup functions
  * cleanup: add cleanup functions
  * tree: fix incorrect return value
  * tree: Fix clearing application strings
  * libnvme: reshuffle nvme_generate_tls_key_identity()
  * libnvme: fixup error codes
  * libnvme: Implement 'nvme_generate_tls_key_identity()'
  * libnvme: support NVMe TLS identities version 1 (bsc#1219086)
  * libnvme: Add base64 functions
  * libnvme: separate out 'gen_tls_identity' and reshuffle 'derive_nvme_keys'
  * libnvme: separate out a function 'select_hmac'
  * libnvme: fix a memory leak when calling read_ssns()
  * libnvme: fix a memory leak in read_discovery()
  * fabrics: avoid redundant args in nvme_discovery_log()
  * fabrics: have nvmf_get_discovery_log() call nvmf_get_discovery_wargs()
  * fabrics: fetch smaller Discovery Log Page header
  * fabrics: avoid redundant Get Log Page on retry
  * fabrics: clear RAE for discovery log page commands
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * types: add Host Behavior Support field definitions
  * mi: Cast values to u32 if shift overflows int
  * types: Cast values to u32 if shift overflows int
  * test: Avoid unaligned pointer dereferences
  * nbft: Avoid unaligned pointer dereferences
  * types: add cross-namespace copy formats, status codes, ONCS bits
  * nvme: Add length field to Hkdf-Expand-Label computation
  * ioctl: use lsp arg in nvme_get_log_boot_partition
  * fabrics: use SECTYPE to determine whether to use TLS (bsc#1219086)
  * fabrics: Allocate aligned payloads for id_ctrl and discovery log calls
  * linux: Allocate aligned payloads for id_ctrl and id_ns calls
  * ioctl: MSB variable-size storage/reference tags</changelog>
  <changelog author="daniel.wagner@suse.com" date="1703073600">- Update to version 1.7.1+0.g13ba383:
  * tree: do no free ns on error in nvme_ns_init</changelog>
  <changelog author="daniel.wagner@suse.com" date="1707912000">- Update to version 1.8+0.gbff7dda:
  * linux: Explicitly initialize auto-cleanup variables
  * example: fix mi identify failed with error cntid
  * tree: do not issue an error when subsys lookup fails during scanning
  * types: Add controller properties CMBEBS, CMBSWTP and NSSD
  * tests: Add sample NBFT table from Dell PowerEdge R660
  * tests: Add sample NBFT table from Dell PowerEdge R760
  * tests: Fix diffs output for duplicate HFI entries
  * nbft: avoid duplicate entries in ssns-&gt;hfis
  * nbft: Fix (struct nbft_info_subsystem_ns).num_hfis off-by-one
  * test: read and dump sysfs tar file
  * nvme: allow to overwrite hostnqn and hostid
  * nvme: allow to overwrite base sysfs path
  * json: dump the output to the user selected filedescriptor
  * libnvme: export nvme_dump_tree
  * fabrics: add 'concat' option
  * mi: set correct rc and errno when crc mismatch
  * tree: use logical block size for lba
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * build: checkout full repo for checkpatch
  * linux: avoid segfault in check-tls-key due to null hostnqn/subsysnqn (bsc#1219086)
  * meson.build: fixup 'join' syntax
  * util: Explicitly initialize auto-cleanup variables
  * tree: Explicitly initialize auto-cleanup variables
  * linux: Explicitly initialize auto-cleanup variables
  * fabrics: Explicitly initialize auto-cleanup variables
  * util: Added function to find specific UUID in UUID list.
  * build: fix release python tag match
- Disable new unit test which is not running stable in OSB
  * add 0001-build-disable-sysfs-test.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737600">- Update to version 1.9+0.g80c5cf2:
  * types: Added Command and Feature Lockdown LID
  * types: add ASQ, ACQ and BPMBL controller properties definitions
  * types: add controller properties enum documentation
  * types: fix CRTO.CRIMT mask value definition
  * tree: use strtou32 to read lba_size
  * types: Fix PMRWBM register name
  * examples: fix mi-mctp build warning errors
  * test: add CSTS.ST, CAP.CPS and CAP.NSSS registers
  * types: add CAP.CPS and CAP.NSSS definitions
  * types: add enum nvme_cap documentation
  * types: Add enum nvme_unit/cmbebs/cmbswtp/flbas/cmic documentation
  * util: Add string constant for ENVME_CONNECT_IGNORED
  * tests: Add sample NBFT table with mpath IPv4+IPv6 discovery
  * types: add controller status shutdown type (CSTS.ST) definition
  * types: Add enum nvme_csts documentation
  * types: Add NVME_CMIC definitions
  * types: Add CMBSWTP property definitions
  * types: Add NVME_CMBEBS property definitions
  * types: Fix boot partition read offset (BPROF) mask value
  * tree: fix mem leak in nvme_ns_init() (bsc#1223331)
  * fabrics: retry discovery log page when DNR is not set
  * ioctl: return EPROTO when an NVMe status occurred
  * linux: Allocate aligned payload for nvme_get_telemetry_log
  * test: use diff to compare sysfs output (bsc#1226216)
  * tree: fix lba_count size calculation
  * tree: Add NVM subsystem controller identifier (bsc#1224024)
  * test: Add unit test for nvme_id_ns_flbas_to_lbaf_inuse()
  * types: Fix NVME_CSTS_SHST_MASK definition
  * util: Fixed nvme_id_ns_flbas_to_lbaf_inuse()
  * types: Add optional data present filed mask and shift definition
  * types: Fix EOM header optional data present fields definition
  * libnvme : record the nvme pci adapter physical slot (bsc#1223208)
  * sysfs: minimize heap allocations of sysfs paths
  * json: Fix uninitialized variables
  * libnvme: add missing symbol nvme_scan_tls_keys (bsc#1226197)
  * nbft: Whitespace fixes (bsc#1222026)
  * tests: Add complex NBFT table from Dell R660 (bsc#1222026)
  * tests: Adapt to added NBFT SSNS flags (bsc#1222026)
  * nbft: Add SSNS 'discovered' flag (bsc#1222026)
  * nbft: Add SSNS 'unavailable' flag (bsc#1222026)
  * doc: Document the NBFT API (bsc#1222026)
  * ioctl: Move nvme_cmd_dword_fields definitions into header file
  * types: Add PEL set feature event layout definitions
  * types: Fix enum nvme_pel_rci documentation error
  * types: Add boot partition information definitions
  * types: Add PEL header additional information definitions
  * fabrics: keyring is a long (bsc#1216982)
  * config-schema.json.in: tls keys and keyrings are strings (bsc#1216982)
  * linux: Add nvme_scan_tls_keys() (bsc#1216982)
  * json: dump TLS key data in PSK interchange format (bsc#1216982)
  * json: import TLS key from PSK interchange format (bsc#1216982)
  * json: export TLS key in PSK interchange format (bsc#1216982)
  * tree: read TLS key in nvme_configure_ctrl() (bsc#1216982)
  * linux: rework nvme_insert_tls_key_versioned() (bsc#1216982)
  * linux: add nvme_import_tls_key() (bsc#1216982)
  * linux: add nvme_export_tls_key() (bsc#1216982)
  * crc32: Add CRC32 algorithm (bsc#1216982)
  * linux: add nvme_update_key() (bsc#1216982)
  * linux: add nvme_read_key() (bsc#1216982)
  * linux: allow for NULL argument in nvme_lookup_keyring() (bsc#1216982)
  * log: Respect DEFAULT_LOGLEVEL on uninitialized logging
  * log: Introduce nvme_get_logging_level()
  * ioctl: remove incomplete debug logging infrastructure
  * ioctl: export nvme_submit_passthru{64} as weak symbol (bsc#1231668)
  * log: move nvme_{set|get}_debug to log.c
  * fabrics: check the read() return value
  * types: Add PEL reporting context port identifier type definitions
  * types: Add persistent event log reporting context definitions
-  Upstream changed the sysfs test setup, thus sysfs test works in OSB
  * remove 0001-build-disable-sysfs-test.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1722600000">- Update to version 1.10:
  * linux: update TLS version 1 PSK derivation (bsc#1228376)
  * tree: fix nvme_read_config() to not set errno if return 0
  * types: add new fields added in TP4165 (bsc#1231668)
  * types: Changed the space into tap space (bsc#1231668)
  * tree: handle no address phy slot dirs (bsc#1229193)
  * linux: Remove the use of OpenSSL Engine API
  * types: Added new controller attribute as per TP4104
  * tree: add helper to lookup hostnqn/hostid (bsc#1226216)
  * fabrics: extend hostnqn/hostid variable inject interface (bsc#1226216)
  * json: filter out pcie transport (bsc#1226216)
  * tree: preserve parsing order of a config file (bsc#1226216)
  * types: add new field added in TP4099
  * types: add new field added in TP4090 (bsc#1231668)
  * linux: add nvme_revoke_tls_key (bsc#1226197)
  * tree: fix segfault in nvme_free_tree() (bsc#1231668)
  * types: add PEL vendor specific and TCG defined events definitions
  * mi-mctp: initialize the rc variable in handle_mctp_endpoint()
  * linux: avoid potential null pointer dereference
  * linux: add nvme_get_ana_log_len_from_id_ctrl()
  * libnvme: export nvme_mi_admin_get_ana_log_atomic()
  * ioctl: add support for atomic, piecewise ANA log fetch
  * ioctl: replace nvme_ana_rsp_hdr in doc comments
  * ioctl: respect rae in nvme_get_log_ana()
  * ioctl: fix nvme_get_log_ana_groups() pointer type
  * types: add new filed added in TP4141a
  * mi: Probe quirks on first command submission
  * tree: optionally skip namespaces during scanning
  * ioctl: update nvme_set_var_size_tags() to properly use reftag
  * types: add enum for Protection Information Format
  * libnvme: Introduce functions to generate host identifier and host NQN (bsc#1226216)
  * fabrics: Unescape URI elements
  * tests: Add uriparser tests
  * fabrics: Introduce simple URI parser
  * linux: default init cleanup variable
  * linux: Fix uninitialized variables
  * types: add the nvme Cancel command opcode
  * log: split log variables from root object
  * log: keep log level logic in one place
  * mi: restore default ep timeout during admin_passthru
  * mi: fix the rc for nvme_mi_scan_ep
  * ccan/endian.h: Only define __{BIG,LITTLE}_ENDIAN if undefined.
  * Use C99 types for uint32_t
  * mi: fix the return error code.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1730376000">- Update to version 1.11:
  * prefix: Use Request or Response Length in DLEN and DOFF for MI
  * types: Add ETPVDS and SSI fields of sanitize status log
  * json: do not escape strings when printing the configuration
  * tree: do no export tls keys when not provided by user
  * types: add struct nvme_id_ctrl_nvm ver and lbamqf member variables
  * types: add NVMe 2.1 get log page LIDs
  * type: Added enums for ANSAN and RGCNS bit of OAES field
  * linux: fixup PSK HMAC type '0' handling
  * util: added error code for ENOKEY
  * fabrics: fix map error level in __nvmf_add_ctrl
  * fabrics: add ctrl connect interface
  * fabrics: use hex numbers when generating command line options
  * fabrics: rename first argument for argument macros
  * linux: handle key import correctly
  * linux: export keys to config
  * tree: read tls_configured_key and tls_keyring from sysfs
  * tree: move dhchap and tls sysfs parser into separate functions
  * json: move keystore operations out of the JSON parser
  * tree: add getter/setters for TLS PSK
  * linux: add import/export function for TLS pre-shared keys
  * linux: only return the description of a key
  * linux: use ssize_t as return type for nvme_identity_len
  * linux: reorder variable declarations
  * types: Added enum for SMVES event of PEL log
  * libnvme: add lockdown log page support(LID : 0x14)
  * libnvme: add EMVS support to sanitize command
  * types: Add TP4159 PCIe Infrastructure for Live Migration definitions
  * types: add NVME_CTRL_OAES get macro definitions
  * types: add NVME_CTRL_OAES_TTHR definition
  * types: add NVME_CTRL_FNA definitions to get field values
  * types: add NVME_VAL() definition
  * tree: fix tls key mem leak (bsc#1231668)
  * tree: fix dhchap_ctrl_key mem leak (bsc#1231668)
  * tree: fix dhchap_key mem leak (bsc#1231668)
  * types: add NVME_CHECK() definition to check nvme register field value
  * types: add kv opcodes
  * types: added new fields in nvme_nvme_id_ns
  * types: Add enum for Completion Condition of Get LBA status command
  * ioctl: refactoring set_features
  * types: add new fields added in TP4142
  * mi: add control primitive command
  * linux: Correct error handling for derive_psk_digest (bsc#1228376)
  * types: Added new field CSER in enum as per TP4167
- build fix for OpenSSL 1.1
  * add 0001-linux-fix-derive_psk_digest-OpenSSL-1.1-version.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1732536000">- Fix tests on s390
  * add 0002-test-mock-pass-thru-unknown-ioctls.patch</changelog>
  <changelog author="dwagner@suse.de" date="1745323200">- Update to version 1.11+4.ge68a91ae:
  * tree: add routine to fetch subsys firmware rev (bsc#1240518)
  * tree: add routine to fetch subsys model (bsc#1240518)
  * test/mock: pass thru unknown ioctls
  * linux: fix derive_psk_digest OpenSSL 1.1 version
  - Remove merged patches
  * remove 0001-linux-fix-derive_psk_digest-OpenSSL-1.1-version.patch
  * remove 0002-test-mock-pass-thru-unknown-ioctls.patch</changelog>
  <changelog author="dwagner@suse.de" date="1753185600">- Update to version 1.11+6.g0d17be77:
  * tree: free ctrl attributes when (re)configure ctrl (bsc#1243716)
  * tree: filter tree after scan has completed (bsc#1243716)</changelog>
</package>
<package pkgid="423da9d941c48679e003d2bc4f23413f9c5d9b2dbc9084a994096c75e515c48e" name="libnvme" arch="src">
  <version epoch="0" ver="1.11+8.gfb9b581c" rel="150700.4.9.1"/>
  <changelog author="daniel.wagner@suse.com" date="1675080000">- Update to version 1.3:
  * Support added for Flexible Data Placement (TP4146)
  * Fabrics: added support for Persistent Discovery Controllers.
  * libnvme-mi added a quirk framework to workaround special behavior of
  certain devices
  * The python binding behaves more friendly in a threading environment
  by release the GIL on blocking calls.
  * Replaced  3the libsystemd dependency with libdbus
  * A lot of small fixes everywhere (leaks, wrong ordering of arguments, ...)
- Update spec file
  * Project depends on meson &gt;= 0.50.0</changelog>
  <changelog author="mwilck@suse.com" date="1675080001">- temporarily disable unit tests on s390x (bsc#1207687, bsc#1207686)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1680264000">- Update to version 1.4: (jsc#PED-553 jsc#PED-3884)
  * fabrics: Filter out invalid UUIDs from DMI
  * fabrics: Add define for DMI sysinfo
  * Print out correct TREQ strings for discovery
  * tree: fix generic device open failure
  * fabrics: add configuration option 'tls_key'
  * fabrics: add configuration option 'keyring'
  * linux: add key helper functions
  * nvme: add 'nvme_insert_tls_key()' function
  * linux: add nvme_lookup_keyring()
  * python: Change python option from combo to feature
  * types: add opcode field to error log page (TP4113)
  * python: Add setter property for controller DHCHAP Key
  * python: Remove redundant host.set_key() method
  * build, meson: Print option summary
  * Python: Add support for setting/getting Host DHCHAP key
  * Python: Add hostnqn_from_file() and hostid_from_file()
  * types: Update position of elbatm in struct nvme_copy_range{_f1}
  * doc: fix kernel-doc-check warning
  * python, meson: Assert that deps are present for -Dpython=true
  * python: Reformat SWIG input file
  * python test: Check there is no SIGSEGV during garbage collection
  * python: Return PyObject* from __str__() instead of a static char[]
  * python: Fix segmentation fault during garbage collection
  * build: Enable test in muon minimal build
  * build: Streamline workflows with nvme-cli
  * mi: Add nvme_mi_admin_get_log_page
  * ioctl: Set file descriptor in nvme_get_log_page()
  * fix endians
  * fabrics: Do not ignore one char whitespace when string sanitizing
- Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
- Fix invalid string lenght calculcation for UUID (bsc#1209906)
- Fix segmentation fault during garbage collection (bsc#1209905)
- Always sanitize traddr and trsvcid entries (bsc#1207435)
- Allow tracking unique discover controllers (bsc#1186689)</changelog>
  <changelog author="ana.guerrero@suse.com" date="1690459200">- Fix build with meson 1.2.0</changelog>
  <changelog author="daniel.wagner@suse.com" date="1695988800">- Update to version 1.6: (jsc#PED-3610 jsc#PED-4879 jsc#PED-5061)
  * docs: Fix Read-the-Docs configuration (deprecated config param)
  * mi-mctp: Fix free() in error path of mi_open_mctp
  * types: Use NVME_SET for status type mask to get status value
  * types: Define FLBAS MASK and SHIFT to use NVME_GET
  * types: Support Phy Rx Eye Opening Measurement Log
  * log: Add nvme root global variable to set for default output
  * types: Add support for the OAQD ID controller field
  * test: use non deprecated API
  * test: add tests for Get/Set Features functions
  * ioctl: implement nvme_set_features_lba_range()
  * ioctl: pass NSID in Get/Set Features commands that use it
  * ioctl: fix swapped parameters in nvme_set_features_host_id()
  * ioctl: export nvme_{g,s}et_features_iocs_profile()
  * ioctl: pass ENDGID in nvme_get_features_endurance_event_cfg()
  * ioctl: don't set SAVE bit on unsaveable features
  * ioctl: avoid sending uninitialized timestamp
  * ioctl: pass data for Get/Set Features commands
  * ioctl: set correct bits in Set Features commands
  * ioctl: correct feature IDs in Get/Set Features commands
  * tree: Add 2 new public functions to lookup existing controllers
  * ioctl: Add debugging feature to show command outputs
  * Fix incorrect article 'an' as 'a' to use for a description
  * linux: Added functions to enable faster telemetry data retrieval. Moved telemetry data area support detection into separate function. Added possibility to modify data transfer chunk size. Enable telemetry extraction up to specified data area. Removed some printf() and perror().
  * test: account for discovery log page entry stripping
  * fabrics: unconditionally strip discovery entry strings
  * fabrics: only look for spaces in strchomp()
  * tree: Use early return instead of else statements
  * test: fix lookup test case
  * test: make all function static
  * test: add tests for new tcp controller matching algorithm
  * tree: Improve TCP controller matching algorithm
  * util: Add functions to parse the system's interfaces
  * types: Add support for EGFEAT, Domain Identifier, TEGCAP and UEGCAP
  * mi: remove nsid from nvme_mi_admin_identify_secondary_ctrl_list()
  * test: add tests for nvme_ctrl_get_src_addr()
  * tree: Add nvme_ctrl_get_src_addr() to get the controller's src_addr
  * util: Split _nvme_ipaddrs_eq() from nvme_ipaddrs_eq()
  * test: add tests for Identify functions
  * ioctl: use available Identify helper functions
  * test: pass a large enough buffer to nvme_identify_ns_descs()
  * ioctl: remove nsid from nvme_identify_secondary_ctrl_list()
  * meson: Don't hard-code path to "internal/config.h"
  * fabrics: Do not pass disable_sqflow if not supported
  * fabrics: Read the supported options lazy
  * test: add discovery log page tests
  * test: add infra for mocking passthru ioctls
  * tree: fix segfault in nvme_scan_subsystem() (bsc#1213993)
  * src/nvme/tree.c: make __nvme_scan_subsystem() returning bool (bsc#1213993)
  * doc: fix minor mistake in README.md about dependencies
  * nvme-tree: avoid warning in 'list-subsys' (bsc#1212598)
  * tree: Add getter for subsystem iopolicy (bsc#1124564)
  * fabrics: Consider also all hosts settings for context match
  * tree: Scan all subsystems (bsc#1212598)
  * doc: Fixing compile instruction in README
  * mi: allow non-4-byte-aligned responses
  * mi-mctp: use a linear response buffer
  * mi: implement length and offset alignment checks in admin_xfer()
  * tree: Don't open nvme devices until it's absolutely required
    (bsc#1213527 bsc#1213686)
  * tree: missing closedir() causes fd leak for "/sys/bus/pci/slots"
  * mi: don't return from mi_mctp_submit with a tag held
  * util: Provide empty nvme_ipaddrs_eq for static builds
  * fabrics: Relax match on well known disc ctrl lookup
  * tree: Ignore NULL address pointer for phy slot lookup
  * fabrics: Filter discovery ctrls out during application context check
  * util: Add ignored error code
  * json: Use memory block allocated by realloc() instead printbuf
  * util: Use HAVE_NETDB instead of HAVE_LIBNSS
  * tree: Add PCI physical slot number for controller
  * tree: Use nvme_ipaddrs_eq() to compare IP addresses
  * fabrics: Add EADDRNOTAVAIL error mapping
  * fabrics: filter out subsystems with non-matching application string
  * libnvme: add 'application' setting to nvme_root
  * libnvme: add 'application' setting to the subsystem
  * test: Add more code coverage for nvme_ipaddrs_eq()
  * util: rename ipaddrs_eq() to nvme_ipaddrs_eq() and make public.
  * util: Add ipaddrs_eq() to check whether two IP addresses are equal
  * test: Add unit test for ctrl lookups
  * ioctl: fix RAE bit on last Get Log Page command (bsc#1213618)
  * fabrics: check genctr after getting discovery entries (bsc#1213618)
  * fabrics: handle /dev/nvme-fabrics read failure
  * fabrics: fix potential invalid memory access in __nvmf_supported_option()
  * Python: Fix crash during garbage collection
  * python/swig: Check swig version to determine whether -py3 is needed
  * python/swig: Wrap swig-sensitive struct inside #ifwdef SWIG
  * mi: Add nvme_mi_ctrl_id to retrieve controller ID
  * Python: Suppress swig warnings about unnamed struct
  * examples: fix incorrect controller status in MI info output
  * ioctl: Explicitly initialize all members of struct nvme_ns_mgmt_args
  * Python: make NBFT data more pythonic
  * ioctl: io management send, receive args fix
  * python: Update test data
  * NBFT: Remove documentation from nbft.c since it's also in nbft.h
  * Python: Add NBFT support
  * nbft: Doc typo - Use nvme_nbft_free() instead of nbft_free()
  * nbft: Parse the {HOSTID,HOSTNQN}_CONFIGURED flags
  * nbft: Fix nbft_ssns_flags endianness test
  * nbft: Add a simple unit test
  * doc: Update README
  * build: Simple muon build configuration
  * build: Extend summary section
  * build: Make json-c dependency lookup not fail
  * nbft: Move added symbols to LIBNVME_1_5
  * build: Update wrap mode defaults
  * build: Disable fallback on default
  * tree: Fix offset argument check in nvme_bytes_to_lba
  * nbft: add NBFT v1.0 table support (jsc#PED-1449)
  * types: Add IO command set specific field on nsmgmt
  * fabrics: Do not pass unsupported options to kernel
  * types: Add ns-mgmt host software specified fields
  * types.h: Add FDP related Status Code
  * tree: Fix argument check in nvme_bytes_to_lba</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420800">- Drop unencessary minimum version depedency on meson.
- Re-enable libdbus feature. Upstream defaults changed.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420801">- Enable tests during build
- Set git version tag
- Drop unused make dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696852800">- Use glob for python3-libnvme file listening. Workaround pycache_only
  problems for SLE/Leap builds.
- Drop usused libuuid dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1697112000">- Add missing jsc# tracking references to changelog</changelog>
  <changelog author="mwilck@suse.com" date="1697544000">- Update to version 1.6+5.g68c6ffb:
  * avoid stack corruption by unaligned DMA to user space buffers
    (bsc#1216344, gh#linux-nvme/libnvme#727)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1702987200">- Update to version 1.7+0.gf38b1d7:
  * tree: do not open blk device on default
  * tree: read all attributes from sysfs when available
  * ioctl: set data length when retrieving LBA status
  * types: fix regression for vendor-specific field in nvme_id_ns
  * util: use cleanup functions
  * linux: use cleanup functions
  * json: use cleanup functions
  * fabrics: use cleanup functions
  * tree: use cleanup functions
  * cleanup: add cleanup functions
  * tree: fix incorrect return value
  * tree: Fix clearing application strings
  * libnvme: reshuffle nvme_generate_tls_key_identity()
  * libnvme: fixup error codes
  * libnvme: Implement 'nvme_generate_tls_key_identity()'
  * libnvme: support NVMe TLS identities version 1 (bsc#1219086)
  * libnvme: Add base64 functions
  * libnvme: separate out 'gen_tls_identity' and reshuffle 'derive_nvme_keys'
  * libnvme: separate out a function 'select_hmac'
  * libnvme: fix a memory leak when calling read_ssns()
  * libnvme: fix a memory leak in read_discovery()
  * fabrics: avoid redundant args in nvme_discovery_log()
  * fabrics: have nvmf_get_discovery_log() call nvmf_get_discovery_wargs()
  * fabrics: fetch smaller Discovery Log Page header
  * fabrics: avoid redundant Get Log Page on retry
  * fabrics: clear RAE for discovery log page commands
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * types: add Host Behavior Support field definitions
  * mi: Cast values to u32 if shift overflows int
  * types: Cast values to u32 if shift overflows int
  * test: Avoid unaligned pointer dereferences
  * nbft: Avoid unaligned pointer dereferences
  * types: add cross-namespace copy formats, status codes, ONCS bits
  * nvme: Add length field to Hkdf-Expand-Label computation
  * ioctl: use lsp arg in nvme_get_log_boot_partition
  * fabrics: use SECTYPE to determine whether to use TLS (bsc#1219086)
  * fabrics: Allocate aligned payloads for id_ctrl and discovery log calls
  * linux: Allocate aligned payloads for id_ctrl and id_ns calls
  * ioctl: MSB variable-size storage/reference tags</changelog>
  <changelog author="daniel.wagner@suse.com" date="1703073600">- Update to version 1.7.1+0.g13ba383:
  * tree: do no free ns on error in nvme_ns_init</changelog>
  <changelog author="daniel.wagner@suse.com" date="1707912000">- Update to version 1.8+0.gbff7dda:
  * linux: Explicitly initialize auto-cleanup variables
  * example: fix mi identify failed with error cntid
  * tree: do not issue an error when subsys lookup fails during scanning
  * types: Add controller properties CMBEBS, CMBSWTP and NSSD
  * tests: Add sample NBFT table from Dell PowerEdge R660
  * tests: Add sample NBFT table from Dell PowerEdge R760
  * tests: Fix diffs output for duplicate HFI entries
  * nbft: avoid duplicate entries in ssns-&gt;hfis
  * nbft: Fix (struct nbft_info_subsystem_ns).num_hfis off-by-one
  * test: read and dump sysfs tar file
  * nvme: allow to overwrite hostnqn and hostid
  * nvme: allow to overwrite base sysfs path
  * json: dump the output to the user selected filedescriptor
  * libnvme: export nvme_dump_tree
  * fabrics: add 'concat' option
  * mi: set correct rc and errno when crc mismatch
  * tree: use logical block size for lba
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * build: checkout full repo for checkpatch
  * linux: avoid segfault in check-tls-key due to null hostnqn/subsysnqn (bsc#1219086)
  * meson.build: fixup 'join' syntax
  * util: Explicitly initialize auto-cleanup variables
  * tree: Explicitly initialize auto-cleanup variables
  * linux: Explicitly initialize auto-cleanup variables
  * fabrics: Explicitly initialize auto-cleanup variables
  * util: Added function to find specific UUID in UUID list.
  * build: fix release python tag match
- Disable new unit test which is not running stable in OSB
  * add 0001-build-disable-sysfs-test.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737600">- Update to version 1.9+0.g80c5cf2:
  * types: Added Command and Feature Lockdown LID
  * types: add ASQ, ACQ and BPMBL controller properties definitions
  * types: add controller properties enum documentation
  * types: fix CRTO.CRIMT mask value definition
  * tree: use strtou32 to read lba_size
  * types: Fix PMRWBM register name
  * examples: fix mi-mctp build warning errors
  * test: add CSTS.ST, CAP.CPS and CAP.NSSS registers
  * types: add CAP.CPS and CAP.NSSS definitions
  * types: add enum nvme_cap documentation
  * types: Add enum nvme_unit/cmbebs/cmbswtp/flbas/cmic documentation
  * util: Add string constant for ENVME_CONNECT_IGNORED
  * tests: Add sample NBFT table with mpath IPv4+IPv6 discovery
  * types: add controller status shutdown type (CSTS.ST) definition
  * types: Add enum nvme_csts documentation
  * types: Add NVME_CMIC definitions
  * types: Add CMBSWTP property definitions
  * types: Add NVME_CMBEBS property definitions
  * types: Fix boot partition read offset (BPROF) mask value
  * tree: fix mem leak in nvme_ns_init() (bsc#1223331)
  * fabrics: retry discovery log page when DNR is not set
  * ioctl: return EPROTO when an NVMe status occurred
  * linux: Allocate aligned payload for nvme_get_telemetry_log
  * test: use diff to compare sysfs output (bsc#1226216)
  * tree: fix lba_count size calculation
  * tree: Add NVM subsystem controller identifier (bsc#1224024)
  * test: Add unit test for nvme_id_ns_flbas_to_lbaf_inuse()
  * types: Fix NVME_CSTS_SHST_MASK definition
  * util: Fixed nvme_id_ns_flbas_to_lbaf_inuse()
  * types: Add optional data present filed mask and shift definition
  * types: Fix EOM header optional data present fields definition
  * libnvme : record the nvme pci adapter physical slot (bsc#1223208)
  * sysfs: minimize heap allocations of sysfs paths
  * json: Fix uninitialized variables
  * libnvme: add missing symbol nvme_scan_tls_keys (bsc#1226197)
  * nbft: Whitespace fixes (bsc#1222026)
  * tests: Add complex NBFT table from Dell R660 (bsc#1222026)
  * tests: Adapt to added NBFT SSNS flags (bsc#1222026)
  * nbft: Add SSNS 'discovered' flag (bsc#1222026)
  * nbft: Add SSNS 'unavailable' flag (bsc#1222026)
  * doc: Document the NBFT API (bsc#1222026)
  * ioctl: Move nvme_cmd_dword_fields definitions into header file
  * types: Add PEL set feature event layout definitions
  * types: Fix enum nvme_pel_rci documentation error
  * types: Add boot partition information definitions
  * types: Add PEL header additional information definitions
  * fabrics: keyring is a long (bsc#1216982)
  * config-schema.json.in: tls keys and keyrings are strings (bsc#1216982)
  * linux: Add nvme_scan_tls_keys() (bsc#1216982)
  * json: dump TLS key data in PSK interchange format (bsc#1216982)
  * json: import TLS key from PSK interchange format (bsc#1216982)
  * json: export TLS key in PSK interchange format (bsc#1216982)
  * tree: read TLS key in nvme_configure_ctrl() (bsc#1216982)
  * linux: rework nvme_insert_tls_key_versioned() (bsc#1216982)
  * linux: add nvme_import_tls_key() (bsc#1216982)
  * linux: add nvme_export_tls_key() (bsc#1216982)
  * crc32: Add CRC32 algorithm (bsc#1216982)
  * linux: add nvme_update_key() (bsc#1216982)
  * linux: add nvme_read_key() (bsc#1216982)
  * linux: allow for NULL argument in nvme_lookup_keyring() (bsc#1216982)
  * log: Respect DEFAULT_LOGLEVEL on uninitialized logging
  * log: Introduce nvme_get_logging_level()
  * ioctl: remove incomplete debug logging infrastructure
  * ioctl: export nvme_submit_passthru{64} as weak symbol (bsc#1231668)
  * log: move nvme_{set|get}_debug to log.c
  * fabrics: check the read() return value
  * types: Add PEL reporting context port identifier type definitions
  * types: Add persistent event log reporting context definitions
-  Upstream changed the sysfs test setup, thus sysfs test works in OSB
  * remove 0001-build-disable-sysfs-test.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1722600000">- Update to version 1.10:
  * linux: update TLS version 1 PSK derivation (bsc#1228376)
  * tree: fix nvme_read_config() to not set errno if return 0
  * types: add new fields added in TP4165 (bsc#1231668)
  * types: Changed the space into tap space (bsc#1231668)
  * tree: handle no address phy slot dirs (bsc#1229193)
  * linux: Remove the use of OpenSSL Engine API
  * types: Added new controller attribute as per TP4104
  * tree: add helper to lookup hostnqn/hostid (bsc#1226216)
  * fabrics: extend hostnqn/hostid variable inject interface (bsc#1226216)
  * json: filter out pcie transport (bsc#1226216)
  * tree: preserve parsing order of a config file (bsc#1226216)
  * types: add new field added in TP4099
  * types: add new field added in TP4090 (bsc#1231668)
  * linux: add nvme_revoke_tls_key (bsc#1226197)
  * tree: fix segfault in nvme_free_tree() (bsc#1231668)
  * types: add PEL vendor specific and TCG defined events definitions
  * mi-mctp: initialize the rc variable in handle_mctp_endpoint()
  * linux: avoid potential null pointer dereference
  * linux: add nvme_get_ana_log_len_from_id_ctrl()
  * libnvme: export nvme_mi_admin_get_ana_log_atomic()
  * ioctl: add support for atomic, piecewise ANA log fetch
  * ioctl: replace nvme_ana_rsp_hdr in doc comments
  * ioctl: respect rae in nvme_get_log_ana()
  * ioctl: fix nvme_get_log_ana_groups() pointer type
  * types: add new filed added in TP4141a
  * mi: Probe quirks on first command submission
  * tree: optionally skip namespaces during scanning
  * ioctl: update nvme_set_var_size_tags() to properly use reftag
  * types: add enum for Protection Information Format
  * libnvme: Introduce functions to generate host identifier and host NQN (bsc#1226216)
  * fabrics: Unescape URI elements
  * tests: Add uriparser tests
  * fabrics: Introduce simple URI parser
  * linux: default init cleanup variable
  * linux: Fix uninitialized variables
  * types: add the nvme Cancel command opcode
  * log: split log variables from root object
  * log: keep log level logic in one place
  * mi: restore default ep timeout during admin_passthru
  * mi: fix the rc for nvme_mi_scan_ep
  * ccan/endian.h: Only define __{BIG,LITTLE}_ENDIAN if undefined.
  * Use C99 types for uint32_t
  * mi: fix the return error code.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1730376000">- Update to version 1.11:
  * prefix: Use Request or Response Length in DLEN and DOFF for MI
  * types: Add ETPVDS and SSI fields of sanitize status log
  * json: do not escape strings when printing the configuration
  * tree: do no export tls keys when not provided by user
  * types: add struct nvme_id_ctrl_nvm ver and lbamqf member variables
  * types: add NVMe 2.1 get log page LIDs
  * type: Added enums for ANSAN and RGCNS bit of OAES field
  * linux: fixup PSK HMAC type '0' handling
  * util: added error code for ENOKEY
  * fabrics: fix map error level in __nvmf_add_ctrl
  * fabrics: add ctrl connect interface
  * fabrics: use hex numbers when generating command line options
  * fabrics: rename first argument for argument macros
  * linux: handle key import correctly
  * linux: export keys to config
  * tree: read tls_configured_key and tls_keyring from sysfs
  * tree: move dhchap and tls sysfs parser into separate functions
  * json: move keystore operations out of the JSON parser
  * tree: add getter/setters for TLS PSK
  * linux: add import/export function for TLS pre-shared keys
  * linux: only return the description of a key
  * linux: use ssize_t as return type for nvme_identity_len
  * linux: reorder variable declarations
  * types: Added enum for SMVES event of PEL log
  * libnvme: add lockdown log page support(LID : 0x14)
  * libnvme: add EMVS support to sanitize command
  * types: Add TP4159 PCIe Infrastructure for Live Migration definitions
  * types: add NVME_CTRL_OAES get macro definitions
  * types: add NVME_CTRL_OAES_TTHR definition
  * types: add NVME_CTRL_FNA definitions to get field values
  * types: add NVME_VAL() definition
  * tree: fix tls key mem leak (bsc#1231668)
  * tree: fix dhchap_ctrl_key mem leak (bsc#1231668)
  * tree: fix dhchap_key mem leak (bsc#1231668)
  * types: add NVME_CHECK() definition to check nvme register field value
  * types: add kv opcodes
  * types: added new fields in nvme_nvme_id_ns
  * types: Add enum for Completion Condition of Get LBA status command
  * ioctl: refactoring set_features
  * types: add new fields added in TP4142
  * mi: add control primitive command
  * linux: Correct error handling for derive_psk_digest (bsc#1228376)
  * types: Added new field CSER in enum as per TP4167
- build fix for OpenSSL 1.1
  * add 0001-linux-fix-derive_psk_digest-OpenSSL-1.1-version.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1732536000">- Fix tests on s390
  * add 0002-test-mock-pass-thru-unknown-ioctls.patch</changelog>
  <changelog author="dwagner@suse.de" date="1745323200">- Update to version 1.11+4.ge68a91ae:
  * tree: add routine to fetch subsys firmware rev (bsc#1240518)
  * tree: add routine to fetch subsys model (bsc#1240518)
  * test/mock: pass thru unknown ioctls
  * linux: fix derive_psk_digest OpenSSL 1.1 version
  - Remove merged patches
  * remove 0001-linux-fix-derive_psk_digest-OpenSSL-1.1-version.patch
  * remove 0002-test-mock-pass-thru-unknown-ioctls.patch</changelog>
  <changelog author="dwagner@suse.de" date="1753185600">- Update to version 1.11+6.g0d17be77:
  * tree: free ctrl attributes when (re)configure ctrl (bsc#1243716)
  * tree: filter tree after scan has completed (bsc#1243716)</changelog>
  <changelog author="dwagner@suse.de" date="1757419200">- Update to version 1.11+8.gfb9b581c:
  * tree: do not try to strdup NULL pointer (bsc#1247225)
  * tree: always set the host key (bsc#1246560)</changelog>
</package>
<package pkgid="351e70fc67b779cf71e79704ae49dd2237c7c23a54b6238cdfbfe4475d65f446" name="libnvme-devel" arch="x86_64">
  <version epoch="0" ver="1.11+17.g61f36cae" rel="150700.4.14.1"/>
  <changelog author="mwilck@suse.com" date="1675080000">- temporarily disable unit tests on s390x (bsc#1207687, bsc#1207686)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1680264000">- Update to version 1.4: (jsc#PED-553 jsc#PED-3884)
  * fabrics: Filter out invalid UUIDs from DMI
  * fabrics: Add define for DMI sysinfo
  * Print out correct TREQ strings for discovery
  * tree: fix generic device open failure
  * fabrics: add configuration option 'tls_key'
  * fabrics: add configuration option 'keyring'
  * linux: add key helper functions
  * nvme: add 'nvme_insert_tls_key()' function
  * linux: add nvme_lookup_keyring()
  * python: Change python option from combo to feature
  * types: add opcode field to error log page (TP4113)
  * python: Add setter property for controller DHCHAP Key
  * python: Remove redundant host.set_key() method
  * build, meson: Print option summary
  * Python: Add support for setting/getting Host DHCHAP key
  * Python: Add hostnqn_from_file() and hostid_from_file()
  * types: Update position of elbatm in struct nvme_copy_range{_f1}
  * doc: fix kernel-doc-check warning
  * python, meson: Assert that deps are present for -Dpython=true
  * python: Reformat SWIG input file
  * python test: Check there is no SIGSEGV during garbage collection
  * python: Return PyObject* from __str__() instead of a static char[]
  * python: Fix segmentation fault during garbage collection
  * build: Enable test in muon minimal build
  * build: Streamline workflows with nvme-cli
  * mi: Add nvme_mi_admin_get_log_page
  * ioctl: Set file descriptor in nvme_get_log_page()
  * fix endians
  * fabrics: Do not ignore one char whitespace when string sanitizing
- Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
- Fix invalid string lenght calculcation for UUID (bsc#1209906)
- Fix segmentation fault during garbage collection (bsc#1209905)
- Always sanitize traddr and trsvcid entries (bsc#1207435)
- Allow tracking unique discover controllers (bsc#1186689)</changelog>
  <changelog author="ana.guerrero@suse.com" date="1690459200">- Fix build with meson 1.2.0</changelog>
  <changelog author="daniel.wagner@suse.com" date="1695988800">- Update to version 1.6: (jsc#PED-3610 jsc#PED-4879 jsc#PED-5061)
  * docs: Fix Read-the-Docs configuration (deprecated config param)
  * mi-mctp: Fix free() in error path of mi_open_mctp
  * types: Use NVME_SET for status type mask to get status value
  * types: Define FLBAS MASK and SHIFT to use NVME_GET
  * types: Support Phy Rx Eye Opening Measurement Log
  * log: Add nvme root global variable to set for default output
  * types: Add support for the OAQD ID controller field
  * test: use non deprecated API
  * test: add tests for Get/Set Features functions
  * ioctl: implement nvme_set_features_lba_range()
  * ioctl: pass NSID in Get/Set Features commands that use it
  * ioctl: fix swapped parameters in nvme_set_features_host_id()
  * ioctl: export nvme_{g,s}et_features_iocs_profile()
  * ioctl: pass ENDGID in nvme_get_features_endurance_event_cfg()
  * ioctl: don't set SAVE bit on unsaveable features
  * ioctl: avoid sending uninitialized timestamp
  * ioctl: pass data for Get/Set Features commands
  * ioctl: set correct bits in Set Features commands
  * ioctl: correct feature IDs in Get/Set Features commands
  * tree: Add 2 new public functions to lookup existing controllers
  * ioctl: Add debugging feature to show command outputs
  * Fix incorrect article 'an' as 'a' to use for a description
  * linux: Added functions to enable faster telemetry data retrieval. Moved telemetry data area support detection into separate function. Added possibility to modify data transfer chunk size. Enable telemetry extraction up to specified data area. Removed some printf() and perror().
  * test: account for discovery log page entry stripping
  * fabrics: unconditionally strip discovery entry strings
  * fabrics: only look for spaces in strchomp()
  * tree: Use early return instead of else statements
  * test: fix lookup test case
  * test: make all function static
  * test: add tests for new tcp controller matching algorithm
  * tree: Improve TCP controller matching algorithm
  * util: Add functions to parse the system's interfaces
  * types: Add support for EGFEAT, Domain Identifier, TEGCAP and UEGCAP
  * mi: remove nsid from nvme_mi_admin_identify_secondary_ctrl_list()
  * test: add tests for nvme_ctrl_get_src_addr()
  * tree: Add nvme_ctrl_get_src_addr() to get the controller's src_addr
  * util: Split _nvme_ipaddrs_eq() from nvme_ipaddrs_eq()
  * test: add tests for Identify functions
  * ioctl: use available Identify helper functions
  * test: pass a large enough buffer to nvme_identify_ns_descs()
  * ioctl: remove nsid from nvme_identify_secondary_ctrl_list()
  * meson: Don't hard-code path to "internal/config.h"
  * fabrics: Do not pass disable_sqflow if not supported
  * fabrics: Read the supported options lazy
  * test: add discovery log page tests
  * test: add infra for mocking passthru ioctls
  * tree: fix segfault in nvme_scan_subsystem() (bsc#1213993)
  * src/nvme/tree.c: make __nvme_scan_subsystem() returning bool (bsc#1213993)
  * doc: fix minor mistake in README.md about dependencies
  * nvme-tree: avoid warning in 'list-subsys' (bsc#1212598)
  * tree: Add getter for subsystem iopolicy (bsc#1124564)
  * fabrics: Consider also all hosts settings for context match
  * tree: Scan all subsystems (bsc#1212598)
  * doc: Fixing compile instruction in README
  * mi: allow non-4-byte-aligned responses
  * mi-mctp: use a linear response buffer
  * mi: implement length and offset alignment checks in admin_xfer()
  * tree: Don't open nvme devices until it's absolutely required
    (bsc#1213527 bsc#1213686)
  * tree: missing closedir() causes fd leak for "/sys/bus/pci/slots"
  * mi: don't return from mi_mctp_submit with a tag held
  * util: Provide empty nvme_ipaddrs_eq for static builds
  * fabrics: Relax match on well known disc ctrl lookup
  * tree: Ignore NULL address pointer for phy slot lookup
  * fabrics: Filter discovery ctrls out during application context check
  * util: Add ignored error code
  * json: Use memory block allocated by realloc() instead printbuf
  * util: Use HAVE_NETDB instead of HAVE_LIBNSS
  * tree: Add PCI physical slot number for controller
  * tree: Use nvme_ipaddrs_eq() to compare IP addresses
  * fabrics: Add EADDRNOTAVAIL error mapping
  * fabrics: filter out subsystems with non-matching application string
  * libnvme: add 'application' setting to nvme_root
  * libnvme: add 'application' setting to the subsystem
  * test: Add more code coverage for nvme_ipaddrs_eq()
  * util: rename ipaddrs_eq() to nvme_ipaddrs_eq() and make public.
  * util: Add ipaddrs_eq() to check whether two IP addresses are equal
  * test: Add unit test for ctrl lookups
  * ioctl: fix RAE bit on last Get Log Page command (bsc#1213618)
  * fabrics: check genctr after getting discovery entries (bsc#1213618)
  * fabrics: handle /dev/nvme-fabrics read failure
  * fabrics: fix potential invalid memory access in __nvmf_supported_option()
  * Python: Fix crash during garbage collection
  * python/swig: Check swig version to determine whether -py3 is needed
  * python/swig: Wrap swig-sensitive struct inside #ifwdef SWIG
  * mi: Add nvme_mi_ctrl_id to retrieve controller ID
  * Python: Suppress swig warnings about unnamed struct
  * examples: fix incorrect controller status in MI info output
  * ioctl: Explicitly initialize all members of struct nvme_ns_mgmt_args
  * Python: make NBFT data more pythonic
  * ioctl: io management send, receive args fix
  * python: Update test data
  * NBFT: Remove documentation from nbft.c since it's also in nbft.h
  * Python: Add NBFT support
  * nbft: Doc typo - Use nvme_nbft_free() instead of nbft_free()
  * nbft: Parse the {HOSTID,HOSTNQN}_CONFIGURED flags
  * nbft: Fix nbft_ssns_flags endianness test
  * nbft: Add a simple unit test
  * doc: Update README
  * build: Simple muon build configuration
  * build: Extend summary section
  * build: Make json-c dependency lookup not fail
  * nbft: Move added symbols to LIBNVME_1_5
  * build: Update wrap mode defaults
  * build: Disable fallback on default
  * tree: Fix offset argument check in nvme_bytes_to_lba
  * nbft: add NBFT v1.0 table support (jsc#PED-1449)
  * types: Add IO command set specific field on nsmgmt
  * fabrics: Do not pass unsupported options to kernel
  * types: Add ns-mgmt host software specified fields
  * types.h: Add FDP related Status Code
  * tree: Fix argument check in nvme_bytes_to_lba</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420800">- Drop unencessary minimum version depedency on meson.
- Re-enable libdbus feature. Upstream defaults changed.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420801">- Enable tests during build
- Set git version tag
- Drop unused make dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696852800">- Use glob for python3-libnvme file listening. Workaround pycache_only
  problems for SLE/Leap builds.
- Drop usused libuuid dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1697112000">- Add missing jsc# tracking references to changelog</changelog>
  <changelog author="mwilck@suse.com" date="1697544000">- Update to version 1.6+5.g68c6ffb:
  * avoid stack corruption by unaligned DMA to user space buffers
    (bsc#1216344, gh#linux-nvme/libnvme#727)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1702987200">- Update to version 1.7+0.gf38b1d7:
  * tree: do not open blk device on default
  * tree: read all attributes from sysfs when available
  * ioctl: set data length when retrieving LBA status
  * types: fix regression for vendor-specific field in nvme_id_ns
  * util: use cleanup functions
  * linux: use cleanup functions
  * json: use cleanup functions
  * fabrics: use cleanup functions
  * tree: use cleanup functions
  * cleanup: add cleanup functions
  * tree: fix incorrect return value
  * tree: Fix clearing application strings
  * libnvme: reshuffle nvme_generate_tls_key_identity()
  * libnvme: fixup error codes
  * libnvme: Implement 'nvme_generate_tls_key_identity()'
  * libnvme: support NVMe TLS identities version 1 (bsc#1219086)
  * libnvme: Add base64 functions
  * libnvme: separate out 'gen_tls_identity' and reshuffle 'derive_nvme_keys'
  * libnvme: separate out a function 'select_hmac'
  * libnvme: fix a memory leak when calling read_ssns()
  * libnvme: fix a memory leak in read_discovery()
  * fabrics: avoid redundant args in nvme_discovery_log()
  * fabrics: have nvmf_get_discovery_log() call nvmf_get_discovery_wargs()
  * fabrics: fetch smaller Discovery Log Page header
  * fabrics: avoid redundant Get Log Page on retry
  * fabrics: clear RAE for discovery log page commands
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * types: add Host Behavior Support field definitions
  * mi: Cast values to u32 if shift overflows int
  * types: Cast values to u32 if shift overflows int
  * test: Avoid unaligned pointer dereferences
  * nbft: Avoid unaligned pointer dereferences
  * types: add cross-namespace copy formats, status codes, ONCS bits
  * nvme: Add length field to Hkdf-Expand-Label computation
  * ioctl: use lsp arg in nvme_get_log_boot_partition
  * fabrics: use SECTYPE to determine whether to use TLS (bsc#1219086)
  * fabrics: Allocate aligned payloads for id_ctrl and discovery log calls
  * linux: Allocate aligned payloads for id_ctrl and id_ns calls
  * ioctl: MSB variable-size storage/reference tags</changelog>
  <changelog author="daniel.wagner@suse.com" date="1703073600">- Update to version 1.7.1+0.g13ba383:
  * tree: do no free ns on error in nvme_ns_init</changelog>
  <changelog author="daniel.wagner@suse.com" date="1707912000">- Update to version 1.8+0.gbff7dda:
  * linux: Explicitly initialize auto-cleanup variables
  * example: fix mi identify failed with error cntid
  * tree: do not issue an error when subsys lookup fails during scanning
  * types: Add controller properties CMBEBS, CMBSWTP and NSSD
  * tests: Add sample NBFT table from Dell PowerEdge R660
  * tests: Add sample NBFT table from Dell PowerEdge R760
  * tests: Fix diffs output for duplicate HFI entries
  * nbft: avoid duplicate entries in ssns-&gt;hfis
  * nbft: Fix (struct nbft_info_subsystem_ns).num_hfis off-by-one
  * test: read and dump sysfs tar file
  * nvme: allow to overwrite hostnqn and hostid
  * nvme: allow to overwrite base sysfs path
  * json: dump the output to the user selected filedescriptor
  * libnvme: export nvme_dump_tree
  * fabrics: add 'concat' option
  * mi: set correct rc and errno when crc mismatch
  * tree: use logical block size for lba
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * build: checkout full repo for checkpatch
  * linux: avoid segfault in check-tls-key due to null hostnqn/subsysnqn (bsc#1219086)
  * meson.build: fixup 'join' syntax
  * util: Explicitly initialize auto-cleanup variables
  * tree: Explicitly initialize auto-cleanup variables
  * linux: Explicitly initialize auto-cleanup variables
  * fabrics: Explicitly initialize auto-cleanup variables
  * util: Added function to find specific UUID in UUID list.
  * build: fix release python tag match
- Disable new unit test which is not running stable in OSB
  * add 0001-build-disable-sysfs-test.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737600">- Update to version 1.9+0.g80c5cf2:
  * types: Added Command and Feature Lockdown LID
  * types: add ASQ, ACQ and BPMBL controller properties definitions
  * types: add controller properties enum documentation
  * types: fix CRTO.CRIMT mask value definition
  * tree: use strtou32 to read lba_size
  * types: Fix PMRWBM register name
  * examples: fix mi-mctp build warning errors
  * test: add CSTS.ST, CAP.CPS and CAP.NSSS registers
  * types: add CAP.CPS and CAP.NSSS definitions
  * types: add enum nvme_cap documentation
  * types: Add enum nvme_unit/cmbebs/cmbswtp/flbas/cmic documentation
  * util: Add string constant for ENVME_CONNECT_IGNORED
  * tests: Add sample NBFT table with mpath IPv4+IPv6 discovery
  * types: add controller status shutdown type (CSTS.ST) definition
  * types: Add enum nvme_csts documentation
  * types: Add NVME_CMIC definitions
  * types: Add CMBSWTP property definitions
  * types: Add NVME_CMBEBS property definitions
  * types: Fix boot partition read offset (BPROF) mask value
  * tree: fix mem leak in nvme_ns_init() (bsc#1223331)
  * fabrics: retry discovery log page when DNR is not set
  * ioctl: return EPROTO when an NVMe status occurred
  * linux: Allocate aligned payload for nvme_get_telemetry_log
  * test: use diff to compare sysfs output (bsc#1226216)
  * tree: fix lba_count size calculation
  * tree: Add NVM subsystem controller identifier (bsc#1224024)
  * test: Add unit test for nvme_id_ns_flbas_to_lbaf_inuse()
  * types: Fix NVME_CSTS_SHST_MASK definition
  * util: Fixed nvme_id_ns_flbas_to_lbaf_inuse()
  * types: Add optional data present filed mask and shift definition
  * types: Fix EOM header optional data present fields definition
  * libnvme : record the nvme pci adapter physical slot (bsc#1223208)
  * sysfs: minimize heap allocations of sysfs paths
  * json: Fix uninitialized variables
  * libnvme: add missing symbol nvme_scan_tls_keys (bsc#1226197)
  * nbft: Whitespace fixes (bsc#1222026)
  * tests: Add complex NBFT table from Dell R660 (bsc#1222026)
  * tests: Adapt to added NBFT SSNS flags (bsc#1222026)
  * nbft: Add SSNS 'discovered' flag (bsc#1222026)
  * nbft: Add SSNS 'unavailable' flag (bsc#1222026)
  * doc: Document the NBFT API (bsc#1222026)
  * ioctl: Move nvme_cmd_dword_fields definitions into header file
  * types: Add PEL set feature event layout definitions
  * types: Fix enum nvme_pel_rci documentation error
  * types: Add boot partition information definitions
  * types: Add PEL header additional information definitions
  * fabrics: keyring is a long (bsc#1216982)
  * config-schema.json.in: tls keys and keyrings are strings (bsc#1216982)
  * linux: Add nvme_scan_tls_keys() (bsc#1216982)
  * json: dump TLS key data in PSK interchange format (bsc#1216982)
  * json: import TLS key from PSK interchange format (bsc#1216982)
  * json: export TLS key in PSK interchange format (bsc#1216982)
  * tree: read TLS key in nvme_configure_ctrl() (bsc#1216982)
  * linux: rework nvme_insert_tls_key_versioned() (bsc#1216982)
  * linux: add nvme_import_tls_key() (bsc#1216982)
  * linux: add nvme_export_tls_key() (bsc#1216982)
  * crc32: Add CRC32 algorithm (bsc#1216982)
  * linux: add nvme_update_key() (bsc#1216982)
  * linux: add nvme_read_key() (bsc#1216982)
  * linux: allow for NULL argument in nvme_lookup_keyring() (bsc#1216982)
  * log: Respect DEFAULT_LOGLEVEL on uninitialized logging
  * log: Introduce nvme_get_logging_level()
  * ioctl: remove incomplete debug logging infrastructure
  * ioctl: export nvme_submit_passthru{64} as weak symbol (bsc#1231668)
  * log: move nvme_{set|get}_debug to log.c
  * fabrics: check the read() return value
  * types: Add PEL reporting context port identifier type definitions
  * types: Add persistent event log reporting context definitions
-  Upstream changed the sysfs test setup, thus sysfs test works in OSB
  * remove 0001-build-disable-sysfs-test.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1722600000">- Update to version 1.10:
  * linux: update TLS version 1 PSK derivation (bsc#1228376)
  * tree: fix nvme_read_config() to not set errno if return 0
  * types: add new fields added in TP4165 (bsc#1231668)
  * types: Changed the space into tap space (bsc#1231668)
  * tree: handle no address phy slot dirs (bsc#1229193)
  * linux: Remove the use of OpenSSL Engine API
  * types: Added new controller attribute as per TP4104
  * tree: add helper to lookup hostnqn/hostid (bsc#1226216)
  * fabrics: extend hostnqn/hostid variable inject interface (bsc#1226216)
  * json: filter out pcie transport (bsc#1226216)
  * tree: preserve parsing order of a config file (bsc#1226216)
  * types: add new field added in TP4099
  * types: add new field added in TP4090 (bsc#1231668)
  * linux: add nvme_revoke_tls_key (bsc#1226197)
  * tree: fix segfault in nvme_free_tree() (bsc#1231668)
  * types: add PEL vendor specific and TCG defined events definitions
  * mi-mctp: initialize the rc variable in handle_mctp_endpoint()
  * linux: avoid potential null pointer dereference
  * linux: add nvme_get_ana_log_len_from_id_ctrl()
  * libnvme: export nvme_mi_admin_get_ana_log_atomic()
  * ioctl: add support for atomic, piecewise ANA log fetch
  * ioctl: replace nvme_ana_rsp_hdr in doc comments
  * ioctl: respect rae in nvme_get_log_ana()
  * ioctl: fix nvme_get_log_ana_groups() pointer type
  * types: add new filed added in TP4141a
  * mi: Probe quirks on first command submission
  * tree: optionally skip namespaces during scanning
  * ioctl: update nvme_set_var_size_tags() to properly use reftag
  * types: add enum for Protection Information Format
  * libnvme: Introduce functions to generate host identifier and host NQN (bsc#1226216)
  * fabrics: Unescape URI elements
  * tests: Add uriparser tests
  * fabrics: Introduce simple URI parser
  * linux: default init cleanup variable
  * linux: Fix uninitialized variables
  * types: add the nvme Cancel command opcode
  * log: split log variables from root object
  * log: keep log level logic in one place
  * mi: restore default ep timeout during admin_passthru
  * mi: fix the rc for nvme_mi_scan_ep
  * ccan/endian.h: Only define __{BIG,LITTLE}_ENDIAN if undefined.
  * Use C99 types for uint32_t
  * mi: fix the return error code.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1730376000">- Update to version 1.11:
  * prefix: Use Request or Response Length in DLEN and DOFF for MI
  * types: Add ETPVDS and SSI fields of sanitize status log
  * json: do not escape strings when printing the configuration
  * tree: do no export tls keys when not provided by user
  * types: add struct nvme_id_ctrl_nvm ver and lbamqf member variables
  * types: add NVMe 2.1 get log page LIDs
  * type: Added enums for ANSAN and RGCNS bit of OAES field
  * linux: fixup PSK HMAC type '0' handling
  * util: added error code for ENOKEY
  * fabrics: fix map error level in __nvmf_add_ctrl
  * fabrics: add ctrl connect interface
  * fabrics: use hex numbers when generating command line options
  * fabrics: rename first argument for argument macros
  * linux: handle key import correctly
  * linux: export keys to config
  * tree: read tls_configured_key and tls_keyring from sysfs
  * tree: move dhchap and tls sysfs parser into separate functions
  * json: move keystore operations out of the JSON parser
  * tree: add getter/setters for TLS PSK
  * linux: add import/export function for TLS pre-shared keys
  * linux: only return the description of a key
  * linux: use ssize_t as return type for nvme_identity_len
  * linux: reorder variable declarations
  * types: Added enum for SMVES event of PEL log
  * libnvme: add lockdown log page support(LID : 0x14)
  * libnvme: add EMVS support to sanitize command
  * types: Add TP4159 PCIe Infrastructure for Live Migration definitions
  * types: add NVME_CTRL_OAES get macro definitions
  * types: add NVME_CTRL_OAES_TTHR definition
  * types: add NVME_CTRL_FNA definitions to get field values
  * types: add NVME_VAL() definition
  * tree: fix tls key mem leak (bsc#1231668)
  * tree: fix dhchap_ctrl_key mem leak (bsc#1231668)
  * tree: fix dhchap_key mem leak (bsc#1231668)
  * types: add NVME_CHECK() definition to check nvme register field value
  * types: add kv opcodes
  * types: added new fields in nvme_nvme_id_ns
  * types: Add enum for Completion Condition of Get LBA status command
  * ioctl: refactoring set_features
  * types: add new fields added in TP4142
  * mi: add control primitive command
  * linux: Correct error handling for derive_psk_digest (bsc#1228376)
  * types: Added new field CSER in enum as per TP4167
- build fix for OpenSSL 1.1
  * add 0001-linux-fix-derive_psk_digest-OpenSSL-1.1-version.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1732536000">- Fix tests on s390
  * add 0002-test-mock-pass-thru-unknown-ioctls.patch</changelog>
  <changelog author="dwagner@suse.de" date="1745323200">- Update to version 1.11+4.ge68a91ae:
  * tree: add routine to fetch subsys firmware rev (bsc#1240518)
  * tree: add routine to fetch subsys model (bsc#1240518)
  * test/mock: pass thru unknown ioctls
  * linux: fix derive_psk_digest OpenSSL 1.1 version
  - Remove merged patches
  * remove 0001-linux-fix-derive_psk_digest-OpenSSL-1.1-version.patch
  * remove 0002-test-mock-pass-thru-unknown-ioctls.patch</changelog>
  <changelog author="dwagner@suse.de" date="1753185600">- Update to version 1.11+6.g0d17be77:
  * tree: free ctrl attributes when (re)configure ctrl (bsc#1243716)
  * tree: filter tree after scan has completed (bsc#1243716)</changelog>
  <changelog author="dwagner@suse.de" date="1757419200">- Update to version 1.11+8.gfb9b581c:
  * tree: do not try to strdup NULL pointer (bsc#1247225)
  * tree: always set the host key (bsc#1246560)</changelog>
  <changelog author="dwagner@suse.de" date="1758196800">- Update to version 1.11+17.g61f36cae:
  * linux: use EVP_PKEY_CTX_add1_hkdf_info only once in compat function (bsc#1246914)
  * nvme/linux: check for empty digest in gen_tls_identity() (bsc#1246914)
  * nvme/linux: add fallback implementation for nvme_insert_tls_key_compat() (bsc#1246914)
  * linux: fix HKDF TLS key derivation back to OpenSSL 3.0.8 (bsc#1246914)
  * libnvme: TLS PSK derivation fixes (bsc#1246914)
  * linux: rename __nvme_insert_tls_key_versioned() to __nvme_insert_tls_key() (bsc#1246914)
  * linux: rename __nvme_insert_tls_key() to __nvme_import_tls_key() (bsc#1246914)
  * test/psk: add testcase for TLS identity derivation (bsc#1246914)
  * linux: set errno when nvme_generate_tls_key_identity() fails (bsc#1246914)</changelog>
</package>
<package pkgid="896c9b1b631e0c9ac4a632714f12f35c2f15087f2455f10ca7481268c6216d38" name="libnvme-devel" arch="x86_64">
  <version epoch="0" ver="1.11+22.gc0b8e5f8" rel="150700.4.17.1"/>
  <changelog author="daniel.wagner@suse.com" date="1680264000">- Update to version 1.4: (jsc#PED-553 jsc#PED-3884)
  * fabrics: Filter out invalid UUIDs from DMI
  * fabrics: Add define for DMI sysinfo
  * Print out correct TREQ strings for discovery
  * tree: fix generic device open failure
  * fabrics: add configuration option 'tls_key'
  * fabrics: add configuration option 'keyring'
  * linux: add key helper functions
  * nvme: add 'nvme_insert_tls_key()' function
  * linux: add nvme_lookup_keyring()
  * python: Change python option from combo to feature
  * types: add opcode field to error log page (TP4113)
  * python: Add setter property for controller DHCHAP Key
  * python: Remove redundant host.set_key() method
  * build, meson: Print option summary
  * Python: Add support for setting/getting Host DHCHAP key
  * Python: Add hostnqn_from_file() and hostid_from_file()
  * types: Update position of elbatm in struct nvme_copy_range{_f1}
  * doc: fix kernel-doc-check warning
  * python, meson: Assert that deps are present for -Dpython=true
  * python: Reformat SWIG input file
  * python test: Check there is no SIGSEGV during garbage collection
  * python: Return PyObject* from __str__() instead of a static char[]
  * python: Fix segmentation fault during garbage collection
  * build: Enable test in muon minimal build
  * build: Streamline workflows with nvme-cli
  * mi: Add nvme_mi_admin_get_log_page
  * ioctl: Set file descriptor in nvme_get_log_page()
  * fix endians
  * fabrics: Do not ignore one char whitespace when string sanitizing
- Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
- Fix invalid string lenght calculcation for UUID (bsc#1209906)
- Fix segmentation fault during garbage collection (bsc#1209905)
- Always sanitize traddr and trsvcid entries (bsc#1207435)
- Allow tracking unique discover controllers (bsc#1186689)</changelog>
  <changelog author="ana.guerrero@suse.com" date="1690459200">- Fix build with meson 1.2.0</changelog>
  <changelog author="daniel.wagner@suse.com" date="1695988800">- Update to version 1.6: (jsc#PED-3610 jsc#PED-4879 jsc#PED-5061)
  * docs: Fix Read-the-Docs configuration (deprecated config param)
  * mi-mctp: Fix free() in error path of mi_open_mctp
  * types: Use NVME_SET for status type mask to get status value
  * types: Define FLBAS MASK and SHIFT to use NVME_GET
  * types: Support Phy Rx Eye Opening Measurement Log
  * log: Add nvme root global variable to set for default output
  * types: Add support for the OAQD ID controller field
  * test: use non deprecated API
  * test: add tests for Get/Set Features functions
  * ioctl: implement nvme_set_features_lba_range()
  * ioctl: pass NSID in Get/Set Features commands that use it
  * ioctl: fix swapped parameters in nvme_set_features_host_id()
  * ioctl: export nvme_{g,s}et_features_iocs_profile()
  * ioctl: pass ENDGID in nvme_get_features_endurance_event_cfg()
  * ioctl: don't set SAVE bit on unsaveable features
  * ioctl: avoid sending uninitialized timestamp
  * ioctl: pass data for Get/Set Features commands
  * ioctl: set correct bits in Set Features commands
  * ioctl: correct feature IDs in Get/Set Features commands
  * tree: Add 2 new public functions to lookup existing controllers
  * ioctl: Add debugging feature to show command outputs
  * Fix incorrect article 'an' as 'a' to use for a description
  * linux: Added functions to enable faster telemetry data retrieval. Moved telemetry data area support detection into separate function. Added possibility to modify data transfer chunk size. Enable telemetry extraction up to specified data area. Removed some printf() and perror().
  * test: account for discovery log page entry stripping
  * fabrics: unconditionally strip discovery entry strings
  * fabrics: only look for spaces in strchomp()
  * tree: Use early return instead of else statements
  * test: fix lookup test case
  * test: make all function static
  * test: add tests for new tcp controller matching algorithm
  * tree: Improve TCP controller matching algorithm
  * util: Add functions to parse the system's interfaces
  * types: Add support for EGFEAT, Domain Identifier, TEGCAP and UEGCAP
  * mi: remove nsid from nvme_mi_admin_identify_secondary_ctrl_list()
  * test: add tests for nvme_ctrl_get_src_addr()
  * tree: Add nvme_ctrl_get_src_addr() to get the controller's src_addr
  * util: Split _nvme_ipaddrs_eq() from nvme_ipaddrs_eq()
  * test: add tests for Identify functions
  * ioctl: use available Identify helper functions
  * test: pass a large enough buffer to nvme_identify_ns_descs()
  * ioctl: remove nsid from nvme_identify_secondary_ctrl_list()
  * meson: Don't hard-code path to "internal/config.h"
  * fabrics: Do not pass disable_sqflow if not supported
  * fabrics: Read the supported options lazy
  * test: add discovery log page tests
  * test: add infra for mocking passthru ioctls
  * tree: fix segfault in nvme_scan_subsystem() (bsc#1213993)
  * src/nvme/tree.c: make __nvme_scan_subsystem() returning bool (bsc#1213993)
  * doc: fix minor mistake in README.md about dependencies
  * nvme-tree: avoid warning in 'list-subsys' (bsc#1212598)
  * tree: Add getter for subsystem iopolicy (bsc#1124564)
  * fabrics: Consider also all hosts settings for context match
  * tree: Scan all subsystems (bsc#1212598)
  * doc: Fixing compile instruction in README
  * mi: allow non-4-byte-aligned responses
  * mi-mctp: use a linear response buffer
  * mi: implement length and offset alignment checks in admin_xfer()
  * tree: Don't open nvme devices until it's absolutely required
    (bsc#1213527 bsc#1213686)
  * tree: missing closedir() causes fd leak for "/sys/bus/pci/slots"
  * mi: don't return from mi_mctp_submit with a tag held
  * util: Provide empty nvme_ipaddrs_eq for static builds
  * fabrics: Relax match on well known disc ctrl lookup
  * tree: Ignore NULL address pointer for phy slot lookup
  * fabrics: Filter discovery ctrls out during application context check
  * util: Add ignored error code
  * json: Use memory block allocated by realloc() instead printbuf
  * util: Use HAVE_NETDB instead of HAVE_LIBNSS
  * tree: Add PCI physical slot number for controller
  * tree: Use nvme_ipaddrs_eq() to compare IP addresses
  * fabrics: Add EADDRNOTAVAIL error mapping
  * fabrics: filter out subsystems with non-matching application string
  * libnvme: add 'application' setting to nvme_root
  * libnvme: add 'application' setting to the subsystem
  * test: Add more code coverage for nvme_ipaddrs_eq()
  * util: rename ipaddrs_eq() to nvme_ipaddrs_eq() and make public.
  * util: Add ipaddrs_eq() to check whether two IP addresses are equal
  * test: Add unit test for ctrl lookups
  * ioctl: fix RAE bit on last Get Log Page command (bsc#1213618)
  * fabrics: check genctr after getting discovery entries (bsc#1213618)
  * fabrics: handle /dev/nvme-fabrics read failure
  * fabrics: fix potential invalid memory access in __nvmf_supported_option()
  * Python: Fix crash during garbage collection
  * python/swig: Check swig version to determine whether -py3 is needed
  * python/swig: Wrap swig-sensitive struct inside #ifwdef SWIG
  * mi: Add nvme_mi_ctrl_id to retrieve controller ID
  * Python: Suppress swig warnings about unnamed struct
  * examples: fix incorrect controller status in MI info output
  * ioctl: Explicitly initialize all members of struct nvme_ns_mgmt_args
  * Python: make NBFT data more pythonic
  * ioctl: io management send, receive args fix
  * python: Update test data
  * NBFT: Remove documentation from nbft.c since it's also in nbft.h
  * Python: Add NBFT support
  * nbft: Doc typo - Use nvme_nbft_free() instead of nbft_free()
  * nbft: Parse the {HOSTID,HOSTNQN}_CONFIGURED flags
  * nbft: Fix nbft_ssns_flags endianness test
  * nbft: Add a simple unit test
  * doc: Update README
  * build: Simple muon build configuration
  * build: Extend summary section
  * build: Make json-c dependency lookup not fail
  * nbft: Move added symbols to LIBNVME_1_5
  * build: Update wrap mode defaults
  * build: Disable fallback on default
  * tree: Fix offset argument check in nvme_bytes_to_lba
  * nbft: add NBFT v1.0 table support (jsc#PED-1449)
  * types: Add IO command set specific field on nsmgmt
  * fabrics: Do not pass unsupported options to kernel
  * types: Add ns-mgmt host software specified fields
  * types.h: Add FDP related Status Code
  * tree: Fix argument check in nvme_bytes_to_lba</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420800">- Drop unencessary minimum version depedency on meson.
- Re-enable libdbus feature. Upstream defaults changed.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420801">- Enable tests during build
- Set git version tag
- Drop unused make dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696852800">- Use glob for python3-libnvme file listening. Workaround pycache_only
  problems for SLE/Leap builds.
- Drop usused libuuid dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1697112000">- Add missing jsc# tracking references to changelog</changelog>
  <changelog author="mwilck@suse.com" date="1697544000">- Update to version 1.6+5.g68c6ffb:
  * avoid stack corruption by unaligned DMA to user space buffers
    (bsc#1216344, gh#linux-nvme/libnvme#727)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1702987200">- Update to version 1.7+0.gf38b1d7:
  * tree: do not open blk device on default
  * tree: read all attributes from sysfs when available
  * ioctl: set data length when retrieving LBA status
  * types: fix regression for vendor-specific field in nvme_id_ns
  * util: use cleanup functions
  * linux: use cleanup functions
  * json: use cleanup functions
  * fabrics: use cleanup functions
  * tree: use cleanup functions
  * cleanup: add cleanup functions
  * tree: fix incorrect return value
  * tree: Fix clearing application strings
  * libnvme: reshuffle nvme_generate_tls_key_identity()
  * libnvme: fixup error codes
  * libnvme: Implement 'nvme_generate_tls_key_identity()'
  * libnvme: support NVMe TLS identities version 1 (bsc#1219086)
  * libnvme: Add base64 functions
  * libnvme: separate out 'gen_tls_identity' and reshuffle 'derive_nvme_keys'
  * libnvme: separate out a function 'select_hmac'
  * libnvme: fix a memory leak when calling read_ssns()
  * libnvme: fix a memory leak in read_discovery()
  * fabrics: avoid redundant args in nvme_discovery_log()
  * fabrics: have nvmf_get_discovery_log() call nvmf_get_discovery_wargs()
  * fabrics: fetch smaller Discovery Log Page header
  * fabrics: avoid redundant Get Log Page on retry
  * fabrics: clear RAE for discovery log page commands
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * types: add Host Behavior Support field definitions
  * mi: Cast values to u32 if shift overflows int
  * types: Cast values to u32 if shift overflows int
  * test: Avoid unaligned pointer dereferences
  * nbft: Avoid unaligned pointer dereferences
  * types: add cross-namespace copy formats, status codes, ONCS bits
  * nvme: Add length field to Hkdf-Expand-Label computation
  * ioctl: use lsp arg in nvme_get_log_boot_partition
  * fabrics: use SECTYPE to determine whether to use TLS (bsc#1219086)
  * fabrics: Allocate aligned payloads for id_ctrl and discovery log calls
  * linux: Allocate aligned payloads for id_ctrl and id_ns calls
  * ioctl: MSB variable-size storage/reference tags</changelog>
  <changelog author="daniel.wagner@suse.com" date="1703073600">- Update to version 1.7.1+0.g13ba383:
  * tree: do no free ns on error in nvme_ns_init</changelog>
  <changelog author="daniel.wagner@suse.com" date="1707912000">- Update to version 1.8+0.gbff7dda:
  * linux: Explicitly initialize auto-cleanup variables
  * example: fix mi identify failed with error cntid
  * tree: do not issue an error when subsys lookup fails during scanning
  * types: Add controller properties CMBEBS, CMBSWTP and NSSD
  * tests: Add sample NBFT table from Dell PowerEdge R660
  * tests: Add sample NBFT table from Dell PowerEdge R760
  * tests: Fix diffs output for duplicate HFI entries
  * nbft: avoid duplicate entries in ssns-&gt;hfis
  * nbft: Fix (struct nbft_info_subsystem_ns).num_hfis off-by-one
  * test: read and dump sysfs tar file
  * nvme: allow to overwrite hostnqn and hostid
  * nvme: allow to overwrite base sysfs path
  * json: dump the output to the user selected filedescriptor
  * libnvme: export nvme_dump_tree
  * fabrics: add 'concat' option
  * mi: set correct rc and errno when crc mismatch
  * tree: use logical block size for lba
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * build: checkout full repo for checkpatch
  * linux: avoid segfault in check-tls-key due to null hostnqn/subsysnqn (bsc#1219086)
  * meson.build: fixup 'join' syntax
  * util: Explicitly initialize auto-cleanup variables
  * tree: Explicitly initialize auto-cleanup variables
  * linux: Explicitly initialize auto-cleanup variables
  * fabrics: Explicitly initialize auto-cleanup variables
  * util: Added function to find specific UUID in UUID list.
  * build: fix release python tag match
- Disable new unit test which is not running stable in OSB
  * add 0001-build-disable-sysfs-test.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737600">- Update to version 1.9+0.g80c5cf2:
  * types: Added Command and Feature Lockdown LID
  * types: add ASQ, ACQ and BPMBL controller properties definitions
  * types: add controller properties enum documentation
  * types: fix CRTO.CRIMT mask value definition
  * tree: use strtou32 to read lba_size
  * types: Fix PMRWBM register name
  * examples: fix mi-mctp build warning errors
  * test: add CSTS.ST, CAP.CPS and CAP.NSSS registers
  * types: add CAP.CPS and CAP.NSSS definitions
  * types: add enum nvme_cap documentation
  * types: Add enum nvme_unit/cmbebs/cmbswtp/flbas/cmic documentation
  * util: Add string constant for ENVME_CONNECT_IGNORED
  * tests: Add sample NBFT table with mpath IPv4+IPv6 discovery
  * types: add controller status shutdown type (CSTS.ST) definition
  * types: Add enum nvme_csts documentation
  * types: Add NVME_CMIC definitions
  * types: Add CMBSWTP property definitions
  * types: Add NVME_CMBEBS property definitions
  * types: Fix boot partition read offset (BPROF) mask value
  * tree: fix mem leak in nvme_ns_init() (bsc#1223331)
  * fabrics: retry discovery log page when DNR is not set
  * ioctl: return EPROTO when an NVMe status occurred
  * linux: Allocate aligned payload for nvme_get_telemetry_log
  * test: use diff to compare sysfs output (bsc#1226216)
  * tree: fix lba_count size calculation
  * tree: Add NVM subsystem controller identifier (bsc#1224024)
  * test: Add unit test for nvme_id_ns_flbas_to_lbaf_inuse()
  * types: Fix NVME_CSTS_SHST_MASK definition
  * util: Fixed nvme_id_ns_flbas_to_lbaf_inuse()
  * types: Add optional data present filed mask and shift definition
  * types: Fix EOM header optional data present fields definition
  * libnvme : record the nvme pci adapter physical slot (bsc#1223208)
  * sysfs: minimize heap allocations of sysfs paths
  * json: Fix uninitialized variables
  * libnvme: add missing symbol nvme_scan_tls_keys (bsc#1226197)
  * nbft: Whitespace fixes (bsc#1222026)
  * tests: Add complex NBFT table from Dell R660 (bsc#1222026)
  * tests: Adapt to added NBFT SSNS flags (bsc#1222026)
  * nbft: Add SSNS 'discovered' flag (bsc#1222026)
  * nbft: Add SSNS 'unavailable' flag (bsc#1222026)
  * doc: Document the NBFT API (bsc#1222026)
  * ioctl: Move nvme_cmd_dword_fields definitions into header file
  * types: Add PEL set feature event layout definitions
  * types: Fix enum nvme_pel_rci documentation error
  * types: Add boot partition information definitions
  * types: Add PEL header additional information definitions
  * fabrics: keyring is a long (bsc#1216982)
  * config-schema.json.in: tls keys and keyrings are strings (bsc#1216982)
  * linux: Add nvme_scan_tls_keys() (bsc#1216982)
  * json: dump TLS key data in PSK interchange format (bsc#1216982)
  * json: import TLS key from PSK interchange format (bsc#1216982)
  * json: export TLS key in PSK interchange format (bsc#1216982)
  * tree: read TLS key in nvme_configure_ctrl() (bsc#1216982)
  * linux: rework nvme_insert_tls_key_versioned() (bsc#1216982)
  * linux: add nvme_import_tls_key() (bsc#1216982)
  * linux: add nvme_export_tls_key() (bsc#1216982)
  * crc32: Add CRC32 algorithm (bsc#1216982)
  * linux: add nvme_update_key() (bsc#1216982)
  * linux: add nvme_read_key() (bsc#1216982)
  * linux: allow for NULL argument in nvme_lookup_keyring() (bsc#1216982)
  * log: Respect DEFAULT_LOGLEVEL on uninitialized logging
  * log: Introduce nvme_get_logging_level()
  * ioctl: remove incomplete debug logging infrastructure
  * ioctl: export nvme_submit_passthru{64} as weak symbol (bsc#1231668)
  * log: move nvme_{set|get}_debug to log.c
  * fabrics: check the read() return value
  * types: Add PEL reporting context port identifier type definitions
  * types: Add persistent event log reporting context definitions
-  Upstream changed the sysfs test setup, thus sysfs test works in OSB
  * remove 0001-build-disable-sysfs-test.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1722600000">- Update to version 1.10:
  * linux: update TLS version 1 PSK derivation (bsc#1228376)
  * tree: fix nvme_read_config() to not set errno if return 0
  * types: add new fields added in TP4165 (bsc#1231668)
  * types: Changed the space into tap space (bsc#1231668)
  * tree: handle no address phy slot dirs (bsc#1229193)
  * linux: Remove the use of OpenSSL Engine API
  * types: Added new controller attribute as per TP4104
  * tree: add helper to lookup hostnqn/hostid (bsc#1226216)
  * fabrics: extend hostnqn/hostid variable inject interface (bsc#1226216)
  * json: filter out pcie transport (bsc#1226216)
  * tree: preserve parsing order of a config file (bsc#1226216)
  * types: add new field added in TP4099
  * types: add new field added in TP4090 (bsc#1231668)
  * linux: add nvme_revoke_tls_key (bsc#1226197)
  * tree: fix segfault in nvme_free_tree() (bsc#1231668)
  * types: add PEL vendor specific and TCG defined events definitions
  * mi-mctp: initialize the rc variable in handle_mctp_endpoint()
  * linux: avoid potential null pointer dereference
  * linux: add nvme_get_ana_log_len_from_id_ctrl()
  * libnvme: export nvme_mi_admin_get_ana_log_atomic()
  * ioctl: add support for atomic, piecewise ANA log fetch
  * ioctl: replace nvme_ana_rsp_hdr in doc comments
  * ioctl: respect rae in nvme_get_log_ana()
  * ioctl: fix nvme_get_log_ana_groups() pointer type
  * types: add new filed added in TP4141a
  * mi: Probe quirks on first command submission
  * tree: optionally skip namespaces during scanning
  * ioctl: update nvme_set_var_size_tags() to properly use reftag
  * types: add enum for Protection Information Format
  * libnvme: Introduce functions to generate host identifier and host NQN (bsc#1226216)
  * fabrics: Unescape URI elements
  * tests: Add uriparser tests
  * fabrics: Introduce simple URI parser
  * linux: default init cleanup variable
  * linux: Fix uninitialized variables
  * types: add the nvme Cancel command opcode
  * log: split log variables from root object
  * log: keep log level logic in one place
  * mi: restore default ep timeout during admin_passthru
  * mi: fix the rc for nvme_mi_scan_ep
  * ccan/endian.h: Only define __{BIG,LITTLE}_ENDIAN if undefined.
  * Use C99 types for uint32_t
  * mi: fix the return error code.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1730376000">- Update to version 1.11:
  * prefix: Use Request or Response Length in DLEN and DOFF for MI
  * types: Add ETPVDS and SSI fields of sanitize status log
  * json: do not escape strings when printing the configuration
  * tree: do no export tls keys when not provided by user
  * types: add struct nvme_id_ctrl_nvm ver and lbamqf member variables
  * types: add NVMe 2.1 get log page LIDs
  * type: Added enums for ANSAN and RGCNS bit of OAES field
  * linux: fixup PSK HMAC type '0' handling
  * util: added error code for ENOKEY
  * fabrics: fix map error level in __nvmf_add_ctrl
  * fabrics: add ctrl connect interface
  * fabrics: use hex numbers when generating command line options
  * fabrics: rename first argument for argument macros
  * linux: handle key import correctly
  * linux: export keys to config
  * tree: read tls_configured_key and tls_keyring from sysfs
  * tree: move dhchap and tls sysfs parser into separate functions
  * json: move keystore operations out of the JSON parser
  * tree: add getter/setters for TLS PSK
  * linux: add import/export function for TLS pre-shared keys
  * linux: only return the description of a key
  * linux: use ssize_t as return type for nvme_identity_len
  * linux: reorder variable declarations
  * types: Added enum for SMVES event of PEL log
  * libnvme: add lockdown log page support(LID : 0x14)
  * libnvme: add EMVS support to sanitize command
  * types: Add TP4159 PCIe Infrastructure for Live Migration definitions
  * types: add NVME_CTRL_OAES get macro definitions
  * types: add NVME_CTRL_OAES_TTHR definition
  * types: add NVME_CTRL_FNA definitions to get field values
  * types: add NVME_VAL() definition
  * tree: fix tls key mem leak (bsc#1231668)
  * tree: fix dhchap_ctrl_key mem leak (bsc#1231668)
  * tree: fix dhchap_key mem leak (bsc#1231668)
  * types: add NVME_CHECK() definition to check nvme register field value
  * types: add kv opcodes
  * types: added new fields in nvme_nvme_id_ns
  * types: Add enum for Completion Condition of Get LBA status command
  * ioctl: refactoring set_features
  * types: add new fields added in TP4142
  * mi: add control primitive command
  * linux: Correct error handling for derive_psk_digest (bsc#1228376)
  * types: Added new field CSER in enum as per TP4167
- build fix for OpenSSL 1.1
  * add 0001-linux-fix-derive_psk_digest-OpenSSL-1.1-version.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1732536000">- Fix tests on s390
  * add 0002-test-mock-pass-thru-unknown-ioctls.patch</changelog>
  <changelog author="dwagner@suse.de" date="1745323200">- Update to version 1.11+4.ge68a91ae:
  * tree: add routine to fetch subsys firmware rev (bsc#1240518)
  * tree: add routine to fetch subsys model (bsc#1240518)
  * test/mock: pass thru unknown ioctls
  * linux: fix derive_psk_digest OpenSSL 1.1 version
  - Remove merged patches
  * remove 0001-linux-fix-derive_psk_digest-OpenSSL-1.1-version.patch
  * remove 0002-test-mock-pass-thru-unknown-ioctls.patch</changelog>
  <changelog author="dwagner@suse.de" date="1753185600">- Update to version 1.11+6.g0d17be77:
  * tree: free ctrl attributes when (re)configure ctrl (bsc#1243716)
  * tree: filter tree after scan has completed (bsc#1243716)</changelog>
  <changelog author="dwagner@suse.de" date="1757419200">- Update to version 1.11+8.gfb9b581c:
  * tree: do not try to strdup NULL pointer (bsc#1247225)
  * tree: always set the host key (bsc#1246560)</changelog>
  <changelog author="dwagner@suse.de" date="1758196800">- Update to version 1.11+17.g61f36cae:
  * linux: use EVP_PKEY_CTX_add1_hkdf_info only once in compat function (bsc#1246914)
  * nvme/linux: check for empty digest in gen_tls_identity() (bsc#1246914)
  * nvme/linux: add fallback implementation for nvme_insert_tls_key_compat() (bsc#1246914)
  * linux: fix HKDF TLS key derivation back to OpenSSL 3.0.8 (bsc#1246914)
  * libnvme: TLS PSK derivation fixes (bsc#1246914)
  * linux: rename __nvme_insert_tls_key_versioned() to __nvme_insert_tls_key() (bsc#1246914)
  * linux: rename __nvme_insert_tls_key() to __nvme_import_tls_key() (bsc#1246914)
  * test/psk: add testcase for TLS identity derivation (bsc#1246914)
  * linux: set errno when nvme_generate_tls_key_identity() fails (bsc#1246914)</changelog>
  <changelog author="dwagner@suse.de" date="1770811200">- Update to version 1.11+22.gc0b8e5f8:
  * fabrics: add additional debug messages for --tls and --concat (bsc#1256043)
  * fabrics: add error if dhchap-ctrl-secret is specified with --concat (bsc#1256043)
  * fabrics: add error if no dhchap-secret is specified with --concat (bsc#1256043)
  * fabrics: add error if --tls and --concat are invoked together (bsc#1256043)
  * fabrics: fix concat during nvme connect-all (bsc#1256043)</changelog>
</package>
<package pkgid="3fc64fe9fee7faf7ae7c815322238f1839f28cea8694c4a63d486b9658525006" name="libnvme-devel" arch="x86_64">
  <version epoch="0" ver="1.11+4.ge68a91ae" rel="150700.4.3.2"/>
  <changelog author="bwiedemann@suse.com" date="1667217600">- Use fixed manpage build date (boo#1047218)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 1.2:
  * Add more details for return code of MI admin cmds
  * Parse dhchap_host_key on controller level
  * Update json config schema for missing dhchap host key
  * fabrics: Add new TP8010 definitions
  * fabrics: Add nvmf_get_discovery_wargs()
  * fabrics: Duplicate strings when merging configs
  * fabrics: Filter out empty strings in add_argument()
  * fabrics: Use fallthrough statement
  * ioctl: Set log page offset for nvme_get_log_telemetry_host
  * json-schema: add dhchap_key details to host section
  * json: Enforce correctly formatted JSON config files
  * json: Verify JSON config file starts with an array
  * mi: Add Get Log Page helpers
  * mi: Add Identify function for secondary controller list
  * mi: Add Identify helper for ns-descs and primary-ctrl-caps
  * mi: Add firmware download and commit commands
  * mi: Add identify helper for nsid-capable Controller List
  * mi: Add identify helpers for namespace lists
  * mi: Add identify helpers for namespaces
  * mi: Allow Admin-message sized More Processing Required responses
  * mi: Distinguish MI status from NVMe (CDW3) status
  * mi: Fix C++ compiler errors
  * mi: Implement Format NVM command
  * mi: Implement Get &amp; Set Features Admin commands
  * mi: Implement NS attach command and helpers
  * mi: Implement Namespace Management command and create/delete helpers
  * mi: Implement Sanitize command
  * mi: Init ctrl_id within xfer
  * mi: Introduce a helper for response status, unify values with ioctls
  * mi: Set log page offset for nvme_get_log_telemetry_host
  * mi: add nvme_mi_status_to_string()
  * mi: fix a memory leak in nvme_mi_open_mctp()
  * mi: fix get_log_page chunked offset check
  * nvme-tree: avoid segfault if auth keys are unavailable
  * python: Use nvmf_get_discovery_wargs()
  * tree: rename controller 'dhchap_key' to 'dhchap_ctrl_key'
  * types: Move enum nvme_data_tfr to types
  * util: Add LINE_MAX define
  * util: Add get feature length 2 API to support direction parameter
  * util: Add simple UUID type
  * util: Do not expose fallthrough defines
- Make man page build conditiional. Install man page location has been
  fixed upstream.
- Mark the Python directory own by the libnvme3-python package</changelog>
  <changelog author="daniel.wagner@suse.com" date="1675080000">- Update to version 1.3:
  * Support added for Flexible Data Placement (TP4146)
  * Fabrics: added support for Persistent Discovery Controllers.
  * libnvme-mi added a quirk framework to workaround special behavior of
  certain devices
  * The python binding behaves more friendly in a threading environment
  by release the GIL on blocking calls.
  * Replaced  3the libsystemd dependency with libdbus
  * A lot of small fixes everywhere (leaks, wrong ordering of arguments, ...)
- Update spec file
  * Project depends on meson &gt;= 0.50.0</changelog>
  <changelog author="mwilck@suse.com" date="1675080001">- temporarily disable unit tests on s390x (bsc#1207687, bsc#1207686)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1680264000">- Update to version 1.4: (jsc#PED-553 jsc#PED-3884)
  * fabrics: Filter out invalid UUIDs from DMI
  * fabrics: Add define for DMI sysinfo
  * Print out correct TREQ strings for discovery
  * tree: fix generic device open failure
  * fabrics: add configuration option 'tls_key'
  * fabrics: add configuration option 'keyring'
  * linux: add key helper functions
  * nvme: add 'nvme_insert_tls_key()' function
  * linux: add nvme_lookup_keyring()
  * python: Change python option from combo to feature
  * types: add opcode field to error log page (TP4113)
  * python: Add setter property for controller DHCHAP Key
  * python: Remove redundant host.set_key() method
  * build, meson: Print option summary
  * Python: Add support for setting/getting Host DHCHAP key
  * Python: Add hostnqn_from_file() and hostid_from_file()
  * types: Update position of elbatm in struct nvme_copy_range{_f1}
  * doc: fix kernel-doc-check warning
  * python, meson: Assert that deps are present for -Dpython=true
  * python: Reformat SWIG input file
  * python test: Check there is no SIGSEGV during garbage collection
  * python: Return PyObject* from __str__() instead of a static char[]
  * python: Fix segmentation fault during garbage collection
  * build: Enable test in muon minimal build
  * build: Streamline workflows with nvme-cli
  * mi: Add nvme_mi_admin_get_log_page
  * ioctl: Set file descriptor in nvme_get_log_page()
  * fix endians
  * fabrics: Do not ignore one char whitespace when string sanitizing
- Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
- Fix invalid string lenght calculcation for UUID (bsc#1209906)
- Fix segmentation fault during garbage collection (bsc#1209905)
- Always sanitize traddr and trsvcid entries (bsc#1207435)
- Allow tracking unique discover controllers (bsc#1186689)</changelog>
  <changelog author="ana.guerrero@suse.com" date="1690459200">- Fix build with meson 1.2.0</changelog>
  <changelog author="daniel.wagner@suse.com" date="1695988800">- Update to version 1.6: (jsc#PED-3610 jsc#PED-4879 jsc#PED-5061)
  * docs: Fix Read-the-Docs configuration (deprecated config param)
  * mi-mctp: Fix free() in error path of mi_open_mctp
  * types: Use NVME_SET for status type mask to get status value
  * types: Define FLBAS MASK and SHIFT to use NVME_GET
  * types: Support Phy Rx Eye Opening Measurement Log
  * log: Add nvme root global variable to set for default output
  * types: Add support for the OAQD ID controller field
  * test: use non deprecated API
  * test: add tests for Get/Set Features functions
  * ioctl: implement nvme_set_features_lba_range()
  * ioctl: pass NSID in Get/Set Features commands that use it
  * ioctl: fix swapped parameters in nvme_set_features_host_id()
  * ioctl: export nvme_{g,s}et_features_iocs_profile()
  * ioctl: pass ENDGID in nvme_get_features_endurance_event_cfg()
  * ioctl: don't set SAVE bit on unsaveable features
  * ioctl: avoid sending uninitialized timestamp
  * ioctl: pass data for Get/Set Features commands
  * ioctl: set correct bits in Set Features commands
  * ioctl: correct feature IDs in Get/Set Features commands
  * tree: Add 2 new public functions to lookup existing controllers
  * ioctl: Add debugging feature to show command outputs
  * Fix incorrect article 'an' as 'a' to use for a description
  * linux: Added functions to enable faster telemetry data retrieval. Moved telemetry data area support detection into separate function. Added possibility to modify data transfer chunk size. Enable telemetry extraction up to specified data area. Removed some printf() and perror().
  * test: account for discovery log page entry stripping
  * fabrics: unconditionally strip discovery entry strings
  * fabrics: only look for spaces in strchomp()
  * tree: Use early return instead of else statements
  * test: fix lookup test case
  * test: make all function static
  * test: add tests for new tcp controller matching algorithm
  * tree: Improve TCP controller matching algorithm
  * util: Add functions to parse the system's interfaces
  * types: Add support for EGFEAT, Domain Identifier, TEGCAP and UEGCAP
  * mi: remove nsid from nvme_mi_admin_identify_secondary_ctrl_list()
  * test: add tests for nvme_ctrl_get_src_addr()
  * tree: Add nvme_ctrl_get_src_addr() to get the controller's src_addr
  * util: Split _nvme_ipaddrs_eq() from nvme_ipaddrs_eq()
  * test: add tests for Identify functions
  * ioctl: use available Identify helper functions
  * test: pass a large enough buffer to nvme_identify_ns_descs()
  * ioctl: remove nsid from nvme_identify_secondary_ctrl_list()
  * meson: Don't hard-code path to "internal/config.h"
  * fabrics: Do not pass disable_sqflow if not supported
  * fabrics: Read the supported options lazy
  * test: add discovery log page tests
  * test: add infra for mocking passthru ioctls
  * tree: fix segfault in nvme_scan_subsystem() (bsc#1213993)
  * src/nvme/tree.c: make __nvme_scan_subsystem() returning bool (bsc#1213993)
  * doc: fix minor mistake in README.md about dependencies
  * nvme-tree: avoid warning in 'list-subsys' (bsc#1212598)
  * tree: Add getter for subsystem iopolicy (bsc#1124564)
  * fabrics: Consider also all hosts settings for context match
  * tree: Scan all subsystems (bsc#1212598)
  * doc: Fixing compile instruction in README
  * mi: allow non-4-byte-aligned responses
  * mi-mctp: use a linear response buffer
  * mi: implement length and offset alignment checks in admin_xfer()
  * tree: Don't open nvme devices until it's absolutely required
    (bsc#1213527 bsc#1213686)
  * tree: missing closedir() causes fd leak for "/sys/bus/pci/slots"
  * mi: don't return from mi_mctp_submit with a tag held
  * util: Provide empty nvme_ipaddrs_eq for static builds
  * fabrics: Relax match on well known disc ctrl lookup
  * tree: Ignore NULL address pointer for phy slot lookup
  * fabrics: Filter discovery ctrls out during application context check
  * util: Add ignored error code
  * json: Use memory block allocated by realloc() instead printbuf
  * util: Use HAVE_NETDB instead of HAVE_LIBNSS
  * tree: Add PCI physical slot number for controller
  * tree: Use nvme_ipaddrs_eq() to compare IP addresses
  * fabrics: Add EADDRNOTAVAIL error mapping
  * fabrics: filter out subsystems with non-matching application string
  * libnvme: add 'application' setting to nvme_root
  * libnvme: add 'application' setting to the subsystem
  * test: Add more code coverage for nvme_ipaddrs_eq()
  * util: rename ipaddrs_eq() to nvme_ipaddrs_eq() and make public.
  * util: Add ipaddrs_eq() to check whether two IP addresses are equal
  * test: Add unit test for ctrl lookups
  * ioctl: fix RAE bit on last Get Log Page command (bsc#1213618)
  * fabrics: check genctr after getting discovery entries (bsc#1213618)
  * fabrics: handle /dev/nvme-fabrics read failure
  * fabrics: fix potential invalid memory access in __nvmf_supported_option()
  * Python: Fix crash during garbage collection
  * python/swig: Check swig version to determine whether -py3 is needed
  * python/swig: Wrap swig-sensitive struct inside #ifwdef SWIG
  * mi: Add nvme_mi_ctrl_id to retrieve controller ID
  * Python: Suppress swig warnings about unnamed struct
  * examples: fix incorrect controller status in MI info output
  * ioctl: Explicitly initialize all members of struct nvme_ns_mgmt_args
  * Python: make NBFT data more pythonic
  * ioctl: io management send, receive args fix
  * python: Update test data
  * NBFT: Remove documentation from nbft.c since it's also in nbft.h
  * Python: Add NBFT support
  * nbft: Doc typo - Use nvme_nbft_free() instead of nbft_free()
  * nbft: Parse the {HOSTID,HOSTNQN}_CONFIGURED flags
  * nbft: Fix nbft_ssns_flags endianness test
  * nbft: Add a simple unit test
  * doc: Update README
  * build: Simple muon build configuration
  * build: Extend summary section
  * build: Make json-c dependency lookup not fail
  * nbft: Move added symbols to LIBNVME_1_5
  * build: Update wrap mode defaults
  * build: Disable fallback on default
  * tree: Fix offset argument check in nvme_bytes_to_lba
  * nbft: add NBFT v1.0 table support (jsc#PED-1449)
  * types: Add IO command set specific field on nsmgmt
  * fabrics: Do not pass unsupported options to kernel
  * types: Add ns-mgmt host software specified fields
  * types.h: Add FDP related Status Code
  * tree: Fix argument check in nvme_bytes_to_lba</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420800">- Drop unencessary minimum version depedency on meson.
- Re-enable libdbus feature. Upstream defaults changed.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420801">- Enable tests during build
- Set git version tag
- Drop unused make dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696852800">- Use glob for python3-libnvme file listening. Workaround pycache_only
  problems for SLE/Leap builds.
- Drop usused libuuid dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1697112000">- Add missing jsc# tracking references to changelog</changelog>
  <changelog author="mwilck@suse.com" date="1697544000">- Update to version 1.6+5.g68c6ffb:
  * avoid stack corruption by unaligned DMA to user space buffers
    (bsc#1216344, gh#linux-nvme/libnvme#727)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1702987200">- Update to version 1.7+0.gf38b1d7:
  * tree: do not open blk device on default
  * tree: read all attributes from sysfs when available
  * ioctl: set data length when retrieving LBA status
  * types: fix regression for vendor-specific field in nvme_id_ns
  * util: use cleanup functions
  * linux: use cleanup functions
  * json: use cleanup functions
  * fabrics: use cleanup functions
  * tree: use cleanup functions
  * cleanup: add cleanup functions
  * tree: fix incorrect return value
  * tree: Fix clearing application strings
  * libnvme: reshuffle nvme_generate_tls_key_identity()
  * libnvme: fixup error codes
  * libnvme: Implement 'nvme_generate_tls_key_identity()'
  * libnvme: support NVMe TLS identities version 1 (bsc#1219086)
  * libnvme: Add base64 functions
  * libnvme: separate out 'gen_tls_identity' and reshuffle 'derive_nvme_keys'
  * libnvme: separate out a function 'select_hmac'
  * libnvme: fix a memory leak when calling read_ssns()
  * libnvme: fix a memory leak in read_discovery()
  * fabrics: avoid redundant args in nvme_discovery_log()
  * fabrics: have nvmf_get_discovery_log() call nvmf_get_discovery_wargs()
  * fabrics: fetch smaller Discovery Log Page header
  * fabrics: avoid redundant Get Log Page on retry
  * fabrics: clear RAE for discovery log page commands
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * types: add Host Behavior Support field definitions
  * mi: Cast values to u32 if shift overflows int
  * types: Cast values to u32 if shift overflows int
  * test: Avoid unaligned pointer dereferences
  * nbft: Avoid unaligned pointer dereferences
  * types: add cross-namespace copy formats, status codes, ONCS bits
  * nvme: Add length field to Hkdf-Expand-Label computation
  * ioctl: use lsp arg in nvme_get_log_boot_partition
  * fabrics: use SECTYPE to determine whether to use TLS (bsc#1219086)
  * fabrics: Allocate aligned payloads for id_ctrl and discovery log calls
  * linux: Allocate aligned payloads for id_ctrl and id_ns calls
  * ioctl: MSB variable-size storage/reference tags</changelog>
  <changelog author="daniel.wagner@suse.com" date="1703073600">- Update to version 1.7.1+0.g13ba383:
  * tree: do no free ns on error in nvme_ns_init</changelog>
  <changelog author="daniel.wagner@suse.com" date="1707912000">- Update to version 1.8+0.gbff7dda:
  * linux: Explicitly initialize auto-cleanup variables
  * example: fix mi identify failed with error cntid
  * tree: do not issue an error when subsys lookup fails during scanning
  * types: Add controller properties CMBEBS, CMBSWTP and NSSD
  * tests: Add sample NBFT table from Dell PowerEdge R660
  * tests: Add sample NBFT table from Dell PowerEdge R760
  * tests: Fix diffs output for duplicate HFI entries
  * nbft: avoid duplicate entries in ssns-&gt;hfis
  * nbft: Fix (struct nbft_info_subsystem_ns).num_hfis off-by-one
  * test: read and dump sysfs tar file
  * nvme: allow to overwrite hostnqn and hostid
  * nvme: allow to overwrite base sysfs path
  * json: dump the output to the user selected filedescriptor
  * libnvme: export nvme_dump_tree
  * fabrics: add 'concat' option
  * mi: set correct rc and errno when crc mismatch
  * tree: use logical block size for lba
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * build: checkout full repo for checkpatch
  * linux: avoid segfault in check-tls-key due to null hostnqn/subsysnqn (bsc#1219086)
  * meson.build: fixup 'join' syntax
  * util: Explicitly initialize auto-cleanup variables
  * tree: Explicitly initialize auto-cleanup variables
  * linux: Explicitly initialize auto-cleanup variables
  * fabrics: Explicitly initialize auto-cleanup variables
  * util: Added function to find specific UUID in UUID list.
  * build: fix release python tag match
- Disable new unit test which is not running stable in OSB
  * add 0001-build-disable-sysfs-test.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737600">- Update to version 1.9+0.g80c5cf2:
  * types: Added Command and Feature Lockdown LID
  * types: add ASQ, ACQ and BPMBL controller properties definitions
  * types: add controller properties enum documentation
  * types: fix CRTO.CRIMT mask value definition
  * tree: use strtou32 to read lba_size
  * types: Fix PMRWBM register name
  * examples: fix mi-mctp build warning errors
  * test: add CSTS.ST, CAP.CPS and CAP.NSSS registers
  * types: add CAP.CPS and CAP.NSSS definitions
  * types: add enum nvme_cap documentation
  * types: Add enum nvme_unit/cmbebs/cmbswtp/flbas/cmic documentation
  * util: Add string constant for ENVME_CONNECT_IGNORED
  * tests: Add sample NBFT table with mpath IPv4+IPv6 discovery
  * types: add controller status shutdown type (CSTS.ST) definition
  * types: Add enum nvme_csts documentation
  * types: Add NVME_CMIC definitions
  * types: Add CMBSWTP property definitions
  * types: Add NVME_CMBEBS property definitions
  * types: Fix boot partition read offset (BPROF) mask value
  * tree: fix mem leak in nvme_ns_init() (bsc#1223331)
  * fabrics: retry discovery log page when DNR is not set
  * ioctl: return EPROTO when an NVMe status occurred
  * linux: Allocate aligned payload for nvme_get_telemetry_log
  * test: use diff to compare sysfs output (bsc#1226216)
  * tree: fix lba_count size calculation
  * tree: Add NVM subsystem controller identifier (bsc#1224024)
  * test: Add unit test for nvme_id_ns_flbas_to_lbaf_inuse()
  * types: Fix NVME_CSTS_SHST_MASK definition
  * util: Fixed nvme_id_ns_flbas_to_lbaf_inuse()
  * types: Add optional data present filed mask and shift definition
  * types: Fix EOM header optional data present fields definition
  * libnvme : record the nvme pci adapter physical slot (bsc#1223208)
  * sysfs: minimize heap allocations of sysfs paths
  * json: Fix uninitialized variables
  * libnvme: add missing symbol nvme_scan_tls_keys (bsc#1226197)
  * nbft: Whitespace fixes (bsc#1222026)
  * tests: Add complex NBFT table from Dell R660 (bsc#1222026)
  * tests: Adapt to added NBFT SSNS flags (bsc#1222026)
  * nbft: Add SSNS 'discovered' flag (bsc#1222026)
  * nbft: Add SSNS 'unavailable' flag (bsc#1222026)
  * doc: Document the NBFT API (bsc#1222026)
  * ioctl: Move nvme_cmd_dword_fields definitions into header file
  * types: Add PEL set feature event layout definitions
  * types: Fix enum nvme_pel_rci documentation error
  * types: Add boot partition information definitions
  * types: Add PEL header additional information definitions
  * fabrics: keyring is a long (bsc#1216982)
  * config-schema.json.in: tls keys and keyrings are strings (bsc#1216982)
  * linux: Add nvme_scan_tls_keys() (bsc#1216982)
  * json: dump TLS key data in PSK interchange format (bsc#1216982)
  * json: import TLS key from PSK interchange format (bsc#1216982)
  * json: export TLS key in PSK interchange format (bsc#1216982)
  * tree: read TLS key in nvme_configure_ctrl() (bsc#1216982)
  * linux: rework nvme_insert_tls_key_versioned() (bsc#1216982)
  * linux: add nvme_import_tls_key() (bsc#1216982)
  * linux: add nvme_export_tls_key() (bsc#1216982)
  * crc32: Add CRC32 algorithm (bsc#1216982)
  * linux: add nvme_update_key() (bsc#1216982)
  * linux: add nvme_read_key() (bsc#1216982)
  * linux: allow for NULL argument in nvme_lookup_keyring() (bsc#1216982)
  * log: Respect DEFAULT_LOGLEVEL on uninitialized logging
  * log: Introduce nvme_get_logging_level()
  * ioctl: remove incomplete debug logging infrastructure
  * ioctl: export nvme_submit_passthru{64} as weak symbol (bsc#1231668)
  * log: move nvme_{set|get}_debug to log.c
  * fabrics: check the read() return value
  * types: Add PEL reporting context port identifier type definitions
  * types: Add persistent event log reporting context definitions
-  Upstream changed the sysfs test setup, thus sysfs test works in OSB
  * remove 0001-build-disable-sysfs-test.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1722600000">- Update to version 1.10:
  * linux: update TLS version 1 PSK derivation (bsc#1228376)
  * tree: fix nvme_read_config() to not set errno if return 0
  * types: add new fields added in TP4165 (bsc#1231668)
  * types: Changed the space into tap space (bsc#1231668)
  * tree: handle no address phy slot dirs (bsc#1229193)
  * linux: Remove the use of OpenSSL Engine API
  * types: Added new controller attribute as per TP4104
  * tree: add helper to lookup hostnqn/hostid (bsc#1226216)
  * fabrics: extend hostnqn/hostid variable inject interface (bsc#1226216)
  * json: filter out pcie transport (bsc#1226216)
  * tree: preserve parsing order of a config file (bsc#1226216)
  * types: add new field added in TP4099
  * types: add new field added in TP4090 (bsc#1231668)
  * linux: add nvme_revoke_tls_key (bsc#1226197)
  * tree: fix segfault in nvme_free_tree() (bsc#1231668)
  * types: add PEL vendor specific and TCG defined events definitions
  * mi-mctp: initialize the rc variable in handle_mctp_endpoint()
  * linux: avoid potential null pointer dereference
  * linux: add nvme_get_ana_log_len_from_id_ctrl()
  * libnvme: export nvme_mi_admin_get_ana_log_atomic()
  * ioctl: add support for atomic, piecewise ANA log fetch
  * ioctl: replace nvme_ana_rsp_hdr in doc comments
  * ioctl: respect rae in nvme_get_log_ana()
  * ioctl: fix nvme_get_log_ana_groups() pointer type
  * types: add new filed added in TP4141a
  * mi: Probe quirks on first command submission
  * tree: optionally skip namespaces during scanning
  * ioctl: update nvme_set_var_size_tags() to properly use reftag
  * types: add enum for Protection Information Format
  * libnvme: Introduce functions to generate host identifier and host NQN (bsc#1226216)
  * fabrics: Unescape URI elements
  * tests: Add uriparser tests
  * fabrics: Introduce simple URI parser
  * linux: default init cleanup variable
  * linux: Fix uninitialized variables
  * types: add the nvme Cancel command opcode
  * log: split log variables from root object
  * log: keep log level logic in one place
  * mi: restore default ep timeout during admin_passthru
  * mi: fix the rc for nvme_mi_scan_ep
  * ccan/endian.h: Only define __{BIG,LITTLE}_ENDIAN if undefined.
  * Use C99 types for uint32_t
  * mi: fix the return error code.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1730376000">- Update to version 1.11:
  * prefix: Use Request or Response Length in DLEN and DOFF for MI
  * types: Add ETPVDS and SSI fields of sanitize status log
  * json: do not escape strings when printing the configuration
  * tree: do no export tls keys when not provided by user
  * types: add struct nvme_id_ctrl_nvm ver and lbamqf member variables
  * types: add NVMe 2.1 get log page LIDs
  * type: Added enums for ANSAN and RGCNS bit of OAES field
  * linux: fixup PSK HMAC type '0' handling
  * util: added error code for ENOKEY
  * fabrics: fix map error level in __nvmf_add_ctrl
  * fabrics: add ctrl connect interface
  * fabrics: use hex numbers when generating command line options
  * fabrics: rename first argument for argument macros
  * linux: handle key import correctly
  * linux: export keys to config
  * tree: read tls_configured_key and tls_keyring from sysfs
  * tree: move dhchap and tls sysfs parser into separate functions
  * json: move keystore operations out of the JSON parser
  * tree: add getter/setters for TLS PSK
  * linux: add import/export function for TLS pre-shared keys
  * linux: only return the description of a key
  * linux: use ssize_t as return type for nvme_identity_len
  * linux: reorder variable declarations
  * types: Added enum for SMVES event of PEL log
  * libnvme: add lockdown log page support(LID : 0x14)
  * libnvme: add EMVS support to sanitize command
  * types: Add TP4159 PCIe Infrastructure for Live Migration definitions
  * types: add NVME_CTRL_OAES get macro definitions
  * types: add NVME_CTRL_OAES_TTHR definition
  * types: add NVME_CTRL_FNA definitions to get field values
  * types: add NVME_VAL() definition
  * tree: fix tls key mem leak (bsc#1231668)
  * tree: fix dhchap_ctrl_key mem leak (bsc#1231668)
  * tree: fix dhchap_key mem leak (bsc#1231668)
  * types: add NVME_CHECK() definition to check nvme register field value
  * types: add kv opcodes
  * types: added new fields in nvme_nvme_id_ns
  * types: Add enum for Completion Condition of Get LBA status command
  * ioctl: refactoring set_features
  * types: add new fields added in TP4142
  * mi: add control primitive command
  * linux: Correct error handling for derive_psk_digest (bsc#1228376)
  * types: Added new field CSER in enum as per TP4167
- build fix for OpenSSL 1.1
  * add 0001-linux-fix-derive_psk_digest-OpenSSL-1.1-version.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1732536000">- Fix tests on s390
  * add 0002-test-mock-pass-thru-unknown-ioctls.patch</changelog>
  <changelog author="dwagner@suse.de" date="1745323200">- Update to version 1.11+4.ge68a91ae:
  * tree: add routine to fetch subsys firmware rev (bsc#1240518)
  * tree: add routine to fetch subsys model (bsc#1240518)
  * test/mock: pass thru unknown ioctls
  * linux: fix derive_psk_digest OpenSSL 1.1 version
  - Remove merged patches
  * remove 0001-linux-fix-derive_psk_digest-OpenSSL-1.1-version.patch
  * remove 0002-test-mock-pass-thru-unknown-ioctls.patch</changelog>
</package>
<package pkgid="393444f90ba3b8541a16242e198721b5c5f4b1abdfff4f611d81ceb27d2ba829" name="libnvme-devel" arch="x86_64">
  <version epoch="0" ver="1.11+6.g0d17be77" rel="150700.4.6.2"/>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 1.2:
  * Add more details for return code of MI admin cmds
  * Parse dhchap_host_key on controller level
  * Update json config schema for missing dhchap host key
  * fabrics: Add new TP8010 definitions
  * fabrics: Add nvmf_get_discovery_wargs()
  * fabrics: Duplicate strings when merging configs
  * fabrics: Filter out empty strings in add_argument()
  * fabrics: Use fallthrough statement
  * ioctl: Set log page offset for nvme_get_log_telemetry_host
  * json-schema: add dhchap_key details to host section
  * json: Enforce correctly formatted JSON config files
  * json: Verify JSON config file starts with an array
  * mi: Add Get Log Page helpers
  * mi: Add Identify function for secondary controller list
  * mi: Add Identify helper for ns-descs and primary-ctrl-caps
  * mi: Add firmware download and commit commands
  * mi: Add identify helper for nsid-capable Controller List
  * mi: Add identify helpers for namespace lists
  * mi: Add identify helpers for namespaces
  * mi: Allow Admin-message sized More Processing Required responses
  * mi: Distinguish MI status from NVMe (CDW3) status
  * mi: Fix C++ compiler errors
  * mi: Implement Format NVM command
  * mi: Implement Get &amp; Set Features Admin commands
  * mi: Implement NS attach command and helpers
  * mi: Implement Namespace Management command and create/delete helpers
  * mi: Implement Sanitize command
  * mi: Init ctrl_id within xfer
  * mi: Introduce a helper for response status, unify values with ioctls
  * mi: Set log page offset for nvme_get_log_telemetry_host
  * mi: add nvme_mi_status_to_string()
  * mi: fix a memory leak in nvme_mi_open_mctp()
  * mi: fix get_log_page chunked offset check
  * nvme-tree: avoid segfault if auth keys are unavailable
  * python: Use nvmf_get_discovery_wargs()
  * tree: rename controller 'dhchap_key' to 'dhchap_ctrl_key'
  * types: Move enum nvme_data_tfr to types
  * util: Add LINE_MAX define
  * util: Add get feature length 2 API to support direction parameter
  * util: Add simple UUID type
  * util: Do not expose fallthrough defines
- Make man page build conditiional. Install man page location has been
  fixed upstream.
- Mark the Python directory own by the libnvme3-python package</changelog>
  <changelog author="daniel.wagner@suse.com" date="1675080000">- Update to version 1.3:
  * Support added for Flexible Data Placement (TP4146)
  * Fabrics: added support for Persistent Discovery Controllers.
  * libnvme-mi added a quirk framework to workaround special behavior of
  certain devices
  * The python binding behaves more friendly in a threading environment
  by release the GIL on blocking calls.
  * Replaced  3the libsystemd dependency with libdbus
  * A lot of small fixes everywhere (leaks, wrong ordering of arguments, ...)
- Update spec file
  * Project depends on meson &gt;= 0.50.0</changelog>
  <changelog author="mwilck@suse.com" date="1675080001">- temporarily disable unit tests on s390x (bsc#1207687, bsc#1207686)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1680264000">- Update to version 1.4: (jsc#PED-553 jsc#PED-3884)
  * fabrics: Filter out invalid UUIDs from DMI
  * fabrics: Add define for DMI sysinfo
  * Print out correct TREQ strings for discovery
  * tree: fix generic device open failure
  * fabrics: add configuration option 'tls_key'
  * fabrics: add configuration option 'keyring'
  * linux: add key helper functions
  * nvme: add 'nvme_insert_tls_key()' function
  * linux: add nvme_lookup_keyring()
  * python: Change python option from combo to feature
  * types: add opcode field to error log page (TP4113)
  * python: Add setter property for controller DHCHAP Key
  * python: Remove redundant host.set_key() method
  * build, meson: Print option summary
  * Python: Add support for setting/getting Host DHCHAP key
  * Python: Add hostnqn_from_file() and hostid_from_file()
  * types: Update position of elbatm in struct nvme_copy_range{_f1}
  * doc: fix kernel-doc-check warning
  * python, meson: Assert that deps are present for -Dpython=true
  * python: Reformat SWIG input file
  * python test: Check there is no SIGSEGV during garbage collection
  * python: Return PyObject* from __str__() instead of a static char[]
  * python: Fix segmentation fault during garbage collection
  * build: Enable test in muon minimal build
  * build: Streamline workflows with nvme-cli
  * mi: Add nvme_mi_admin_get_log_page
  * ioctl: Set file descriptor in nvme_get_log_page()
  * fix endians
  * fabrics: Do not ignore one char whitespace when string sanitizing
- Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
- Fix invalid string lenght calculcation for UUID (bsc#1209906)
- Fix segmentation fault during garbage collection (bsc#1209905)
- Always sanitize traddr and trsvcid entries (bsc#1207435)
- Allow tracking unique discover controllers (bsc#1186689)</changelog>
  <changelog author="ana.guerrero@suse.com" date="1690459200">- Fix build with meson 1.2.0</changelog>
  <changelog author="daniel.wagner@suse.com" date="1695988800">- Update to version 1.6: (jsc#PED-3610 jsc#PED-4879 jsc#PED-5061)
  * docs: Fix Read-the-Docs configuration (deprecated config param)
  * mi-mctp: Fix free() in error path of mi_open_mctp
  * types: Use NVME_SET for status type mask to get status value
  * types: Define FLBAS MASK and SHIFT to use NVME_GET
  * types: Support Phy Rx Eye Opening Measurement Log
  * log: Add nvme root global variable to set for default output
  * types: Add support for the OAQD ID controller field
  * test: use non deprecated API
  * test: add tests for Get/Set Features functions
  * ioctl: implement nvme_set_features_lba_range()
  * ioctl: pass NSID in Get/Set Features commands that use it
  * ioctl: fix swapped parameters in nvme_set_features_host_id()
  * ioctl: export nvme_{g,s}et_features_iocs_profile()
  * ioctl: pass ENDGID in nvme_get_features_endurance_event_cfg()
  * ioctl: don't set SAVE bit on unsaveable features
  * ioctl: avoid sending uninitialized timestamp
  * ioctl: pass data for Get/Set Features commands
  * ioctl: set correct bits in Set Features commands
  * ioctl: correct feature IDs in Get/Set Features commands
  * tree: Add 2 new public functions to lookup existing controllers
  * ioctl: Add debugging feature to show command outputs
  * Fix incorrect article 'an' as 'a' to use for a description
  * linux: Added functions to enable faster telemetry data retrieval. Moved telemetry data area support detection into separate function. Added possibility to modify data transfer chunk size. Enable telemetry extraction up to specified data area. Removed some printf() and perror().
  * test: account for discovery log page entry stripping
  * fabrics: unconditionally strip discovery entry strings
  * fabrics: only look for spaces in strchomp()
  * tree: Use early return instead of else statements
  * test: fix lookup test case
  * test: make all function static
  * test: add tests for new tcp controller matching algorithm
  * tree: Improve TCP controller matching algorithm
  * util: Add functions to parse the system's interfaces
  * types: Add support for EGFEAT, Domain Identifier, TEGCAP and UEGCAP
  * mi: remove nsid from nvme_mi_admin_identify_secondary_ctrl_list()
  * test: add tests for nvme_ctrl_get_src_addr()
  * tree: Add nvme_ctrl_get_src_addr() to get the controller's src_addr
  * util: Split _nvme_ipaddrs_eq() from nvme_ipaddrs_eq()
  * test: add tests for Identify functions
  * ioctl: use available Identify helper functions
  * test: pass a large enough buffer to nvme_identify_ns_descs()
  * ioctl: remove nsid from nvme_identify_secondary_ctrl_list()
  * meson: Don't hard-code path to "internal/config.h"
  * fabrics: Do not pass disable_sqflow if not supported
  * fabrics: Read the supported options lazy
  * test: add discovery log page tests
  * test: add infra for mocking passthru ioctls
  * tree: fix segfault in nvme_scan_subsystem() (bsc#1213993)
  * src/nvme/tree.c: make __nvme_scan_subsystem() returning bool (bsc#1213993)
  * doc: fix minor mistake in README.md about dependencies
  * nvme-tree: avoid warning in 'list-subsys' (bsc#1212598)
  * tree: Add getter for subsystem iopolicy (bsc#1124564)
  * fabrics: Consider also all hosts settings for context match
  * tree: Scan all subsystems (bsc#1212598)
  * doc: Fixing compile instruction in README
  * mi: allow non-4-byte-aligned responses
  * mi-mctp: use a linear response buffer
  * mi: implement length and offset alignment checks in admin_xfer()
  * tree: Don't open nvme devices until it's absolutely required
    (bsc#1213527 bsc#1213686)
  * tree: missing closedir() causes fd leak for "/sys/bus/pci/slots"
  * mi: don't return from mi_mctp_submit with a tag held
  * util: Provide empty nvme_ipaddrs_eq for static builds
  * fabrics: Relax match on well known disc ctrl lookup
  * tree: Ignore NULL address pointer for phy slot lookup
  * fabrics: Filter discovery ctrls out during application context check
  * util: Add ignored error code
  * json: Use memory block allocated by realloc() instead printbuf
  * util: Use HAVE_NETDB instead of HAVE_LIBNSS
  * tree: Add PCI physical slot number for controller
  * tree: Use nvme_ipaddrs_eq() to compare IP addresses
  * fabrics: Add EADDRNOTAVAIL error mapping
  * fabrics: filter out subsystems with non-matching application string
  * libnvme: add 'application' setting to nvme_root
  * libnvme: add 'application' setting to the subsystem
  * test: Add more code coverage for nvme_ipaddrs_eq()
  * util: rename ipaddrs_eq() to nvme_ipaddrs_eq() and make public.
  * util: Add ipaddrs_eq() to check whether two IP addresses are equal
  * test: Add unit test for ctrl lookups
  * ioctl: fix RAE bit on last Get Log Page command (bsc#1213618)
  * fabrics: check genctr after getting discovery entries (bsc#1213618)
  * fabrics: handle /dev/nvme-fabrics read failure
  * fabrics: fix potential invalid memory access in __nvmf_supported_option()
  * Python: Fix crash during garbage collection
  * python/swig: Check swig version to determine whether -py3 is needed
  * python/swig: Wrap swig-sensitive struct inside #ifwdef SWIG
  * mi: Add nvme_mi_ctrl_id to retrieve controller ID
  * Python: Suppress swig warnings about unnamed struct
  * examples: fix incorrect controller status in MI info output
  * ioctl: Explicitly initialize all members of struct nvme_ns_mgmt_args
  * Python: make NBFT data more pythonic
  * ioctl: io management send, receive args fix
  * python: Update test data
  * NBFT: Remove documentation from nbft.c since it's also in nbft.h
  * Python: Add NBFT support
  * nbft: Doc typo - Use nvme_nbft_free() instead of nbft_free()
  * nbft: Parse the {HOSTID,HOSTNQN}_CONFIGURED flags
  * nbft: Fix nbft_ssns_flags endianness test
  * nbft: Add a simple unit test
  * doc: Update README
  * build: Simple muon build configuration
  * build: Extend summary section
  * build: Make json-c dependency lookup not fail
  * nbft: Move added symbols to LIBNVME_1_5
  * build: Update wrap mode defaults
  * build: Disable fallback on default
  * tree: Fix offset argument check in nvme_bytes_to_lba
  * nbft: add NBFT v1.0 table support (jsc#PED-1449)
  * types: Add IO command set specific field on nsmgmt
  * fabrics: Do not pass unsupported options to kernel
  * types: Add ns-mgmt host software specified fields
  * types.h: Add FDP related Status Code
  * tree: Fix argument check in nvme_bytes_to_lba</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420800">- Drop unencessary minimum version depedency on meson.
- Re-enable libdbus feature. Upstream defaults changed.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420801">- Enable tests during build
- Set git version tag
- Drop unused make dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696852800">- Use glob for python3-libnvme file listening. Workaround pycache_only
  problems for SLE/Leap builds.
- Drop usused libuuid dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1697112000">- Add missing jsc# tracking references to changelog</changelog>
  <changelog author="mwilck@suse.com" date="1697544000">- Update to version 1.6+5.g68c6ffb:
  * avoid stack corruption by unaligned DMA to user space buffers
    (bsc#1216344, gh#linux-nvme/libnvme#727)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1702987200">- Update to version 1.7+0.gf38b1d7:
  * tree: do not open blk device on default
  * tree: read all attributes from sysfs when available
  * ioctl: set data length when retrieving LBA status
  * types: fix regression for vendor-specific field in nvme_id_ns
  * util: use cleanup functions
  * linux: use cleanup functions
  * json: use cleanup functions
  * fabrics: use cleanup functions
  * tree: use cleanup functions
  * cleanup: add cleanup functions
  * tree: fix incorrect return value
  * tree: Fix clearing application strings
  * libnvme: reshuffle nvme_generate_tls_key_identity()
  * libnvme: fixup error codes
  * libnvme: Implement 'nvme_generate_tls_key_identity()'
  * libnvme: support NVMe TLS identities version 1 (bsc#1219086)
  * libnvme: Add base64 functions
  * libnvme: separate out 'gen_tls_identity' and reshuffle 'derive_nvme_keys'
  * libnvme: separate out a function 'select_hmac'
  * libnvme: fix a memory leak when calling read_ssns()
  * libnvme: fix a memory leak in read_discovery()
  * fabrics: avoid redundant args in nvme_discovery_log()
  * fabrics: have nvmf_get_discovery_log() call nvmf_get_discovery_wargs()
  * fabrics: fetch smaller Discovery Log Page header
  * fabrics: avoid redundant Get Log Page on retry
  * fabrics: clear RAE for discovery log page commands
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * types: add Host Behavior Support field definitions
  * mi: Cast values to u32 if shift overflows int
  * types: Cast values to u32 if shift overflows int
  * test: Avoid unaligned pointer dereferences
  * nbft: Avoid unaligned pointer dereferences
  * types: add cross-namespace copy formats, status codes, ONCS bits
  * nvme: Add length field to Hkdf-Expand-Label computation
  * ioctl: use lsp arg in nvme_get_log_boot_partition
  * fabrics: use SECTYPE to determine whether to use TLS (bsc#1219086)
  * fabrics: Allocate aligned payloads for id_ctrl and discovery log calls
  * linux: Allocate aligned payloads for id_ctrl and id_ns calls
  * ioctl: MSB variable-size storage/reference tags</changelog>
  <changelog author="daniel.wagner@suse.com" date="1703073600">- Update to version 1.7.1+0.g13ba383:
  * tree: do no free ns on error in nvme_ns_init</changelog>
  <changelog author="daniel.wagner@suse.com" date="1707912000">- Update to version 1.8+0.gbff7dda:
  * linux: Explicitly initialize auto-cleanup variables
  * example: fix mi identify failed with error cntid
  * tree: do not issue an error when subsys lookup fails during scanning
  * types: Add controller properties CMBEBS, CMBSWTP and NSSD
  * tests: Add sample NBFT table from Dell PowerEdge R660
  * tests: Add sample NBFT table from Dell PowerEdge R760
  * tests: Fix diffs output for duplicate HFI entries
  * nbft: avoid duplicate entries in ssns-&gt;hfis
  * nbft: Fix (struct nbft_info_subsystem_ns).num_hfis off-by-one
  * test: read and dump sysfs tar file
  * nvme: allow to overwrite hostnqn and hostid
  * nvme: allow to overwrite base sysfs path
  * json: dump the output to the user selected filedescriptor
  * libnvme: export nvme_dump_tree
  * fabrics: add 'concat' option
  * mi: set correct rc and errno when crc mismatch
  * tree: use logical block size for lba
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * build: checkout full repo for checkpatch
  * linux: avoid segfault in check-tls-key due to null hostnqn/subsysnqn (bsc#1219086)
  * meson.build: fixup 'join' syntax
  * util: Explicitly initialize auto-cleanup variables
  * tree: Explicitly initialize auto-cleanup variables
  * linux: Explicitly initialize auto-cleanup variables
  * fabrics: Explicitly initialize auto-cleanup variables
  * util: Added function to find specific UUID in UUID list.
  * build: fix release python tag match
- Disable new unit test which is not running stable in OSB
  * add 0001-build-disable-sysfs-test.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737600">- Update to version 1.9+0.g80c5cf2:
  * types: Added Command and Feature Lockdown LID
  * types: add ASQ, ACQ and BPMBL controller properties definitions
  * types: add controller properties enum documentation
  * types: fix CRTO.CRIMT mask value definition
  * tree: use strtou32 to read lba_size
  * types: Fix PMRWBM register name
  * examples: fix mi-mctp build warning errors
  * test: add CSTS.ST, CAP.CPS and CAP.NSSS registers
  * types: add CAP.CPS and CAP.NSSS definitions
  * types: add enum nvme_cap documentation
  * types: Add enum nvme_unit/cmbebs/cmbswtp/flbas/cmic documentation
  * util: Add string constant for ENVME_CONNECT_IGNORED
  * tests: Add sample NBFT table with mpath IPv4+IPv6 discovery
  * types: add controller status shutdown type (CSTS.ST) definition
  * types: Add enum nvme_csts documentation
  * types: Add NVME_CMIC definitions
  * types: Add CMBSWTP property definitions
  * types: Add NVME_CMBEBS property definitions
  * types: Fix boot partition read offset (BPROF) mask value
  * tree: fix mem leak in nvme_ns_init() (bsc#1223331)
  * fabrics: retry discovery log page when DNR is not set
  * ioctl: return EPROTO when an NVMe status occurred
  * linux: Allocate aligned payload for nvme_get_telemetry_log
  * test: use diff to compare sysfs output (bsc#1226216)
  * tree: fix lba_count size calculation
  * tree: Add NVM subsystem controller identifier (bsc#1224024)
  * test: Add unit test for nvme_id_ns_flbas_to_lbaf_inuse()
  * types: Fix NVME_CSTS_SHST_MASK definition
  * util: Fixed nvme_id_ns_flbas_to_lbaf_inuse()
  * types: Add optional data present filed mask and shift definition
  * types: Fix EOM header optional data present fields definition
  * libnvme : record the nvme pci adapter physical slot (bsc#1223208)
  * sysfs: minimize heap allocations of sysfs paths
  * json: Fix uninitialized variables
  * libnvme: add missing symbol nvme_scan_tls_keys (bsc#1226197)
  * nbft: Whitespace fixes (bsc#1222026)
  * tests: Add complex NBFT table from Dell R660 (bsc#1222026)
  * tests: Adapt to added NBFT SSNS flags (bsc#1222026)
  * nbft: Add SSNS 'discovered' flag (bsc#1222026)
  * nbft: Add SSNS 'unavailable' flag (bsc#1222026)
  * doc: Document the NBFT API (bsc#1222026)
  * ioctl: Move nvme_cmd_dword_fields definitions into header file
  * types: Add PEL set feature event layout definitions
  * types: Fix enum nvme_pel_rci documentation error
  * types: Add boot partition information definitions
  * types: Add PEL header additional information definitions
  * fabrics: keyring is a long (bsc#1216982)
  * config-schema.json.in: tls keys and keyrings are strings (bsc#1216982)
  * linux: Add nvme_scan_tls_keys() (bsc#1216982)
  * json: dump TLS key data in PSK interchange format (bsc#1216982)
  * json: import TLS key from PSK interchange format (bsc#1216982)
  * json: export TLS key in PSK interchange format (bsc#1216982)
  * tree: read TLS key in nvme_configure_ctrl() (bsc#1216982)
  * linux: rework nvme_insert_tls_key_versioned() (bsc#1216982)
  * linux: add nvme_import_tls_key() (bsc#1216982)
  * linux: add nvme_export_tls_key() (bsc#1216982)
  * crc32: Add CRC32 algorithm (bsc#1216982)
  * linux: add nvme_update_key() (bsc#1216982)
  * linux: add nvme_read_key() (bsc#1216982)
  * linux: allow for NULL argument in nvme_lookup_keyring() (bsc#1216982)
  * log: Respect DEFAULT_LOGLEVEL on uninitialized logging
  * log: Introduce nvme_get_logging_level()
  * ioctl: remove incomplete debug logging infrastructure
  * ioctl: export nvme_submit_passthru{64} as weak symbol (bsc#1231668)
  * log: move nvme_{set|get}_debug to log.c
  * fabrics: check the read() return value
  * types: Add PEL reporting context port identifier type definitions
  * types: Add persistent event log reporting context definitions
-  Upstream changed the sysfs test setup, thus sysfs test works in OSB
  * remove 0001-build-disable-sysfs-test.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1722600000">- Update to version 1.10:
  * linux: update TLS version 1 PSK derivation (bsc#1228376)
  * tree: fix nvme_read_config() to not set errno if return 0
  * types: add new fields added in TP4165 (bsc#1231668)
  * types: Changed the space into tap space (bsc#1231668)
  * tree: handle no address phy slot dirs (bsc#1229193)
  * linux: Remove the use of OpenSSL Engine API
  * types: Added new controller attribute as per TP4104
  * tree: add helper to lookup hostnqn/hostid (bsc#1226216)
  * fabrics: extend hostnqn/hostid variable inject interface (bsc#1226216)
  * json: filter out pcie transport (bsc#1226216)
  * tree: preserve parsing order of a config file (bsc#1226216)
  * types: add new field added in TP4099
  * types: add new field added in TP4090 (bsc#1231668)
  * linux: add nvme_revoke_tls_key (bsc#1226197)
  * tree: fix segfault in nvme_free_tree() (bsc#1231668)
  * types: add PEL vendor specific and TCG defined events definitions
  * mi-mctp: initialize the rc variable in handle_mctp_endpoint()
  * linux: avoid potential null pointer dereference
  * linux: add nvme_get_ana_log_len_from_id_ctrl()
  * libnvme: export nvme_mi_admin_get_ana_log_atomic()
  * ioctl: add support for atomic, piecewise ANA log fetch
  * ioctl: replace nvme_ana_rsp_hdr in doc comments
  * ioctl: respect rae in nvme_get_log_ana()
  * ioctl: fix nvme_get_log_ana_groups() pointer type
  * types: add new filed added in TP4141a
  * mi: Probe quirks on first command submission
  * tree: optionally skip namespaces during scanning
  * ioctl: update nvme_set_var_size_tags() to properly use reftag
  * types: add enum for Protection Information Format
  * libnvme: Introduce functions to generate host identifier and host NQN (bsc#1226216)
  * fabrics: Unescape URI elements
  * tests: Add uriparser tests
  * fabrics: Introduce simple URI parser
  * linux: default init cleanup variable
  * linux: Fix uninitialized variables
  * types: add the nvme Cancel command opcode
  * log: split log variables from root object
  * log: keep log level logic in one place
  * mi: restore default ep timeout during admin_passthru
  * mi: fix the rc for nvme_mi_scan_ep
  * ccan/endian.h: Only define __{BIG,LITTLE}_ENDIAN if undefined.
  * Use C99 types for uint32_t
  * mi: fix the return error code.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1730376000">- Update to version 1.11:
  * prefix: Use Request or Response Length in DLEN and DOFF for MI
  * types: Add ETPVDS and SSI fields of sanitize status log
  * json: do not escape strings when printing the configuration
  * tree: do no export tls keys when not provided by user
  * types: add struct nvme_id_ctrl_nvm ver and lbamqf member variables
  * types: add NVMe 2.1 get log page LIDs
  * type: Added enums for ANSAN and RGCNS bit of OAES field
  * linux: fixup PSK HMAC type '0' handling
  * util: added error code for ENOKEY
  * fabrics: fix map error level in __nvmf_add_ctrl
  * fabrics: add ctrl connect interface
  * fabrics: use hex numbers when generating command line options
  * fabrics: rename first argument for argument macros
  * linux: handle key import correctly
  * linux: export keys to config
  * tree: read tls_configured_key and tls_keyring from sysfs
  * tree: move dhchap and tls sysfs parser into separate functions
  * json: move keystore operations out of the JSON parser
  * tree: add getter/setters for TLS PSK
  * linux: add import/export function for TLS pre-shared keys
  * linux: only return the description of a key
  * linux: use ssize_t as return type for nvme_identity_len
  * linux: reorder variable declarations
  * types: Added enum for SMVES event of PEL log
  * libnvme: add lockdown log page support(LID : 0x14)
  * libnvme: add EMVS support to sanitize command
  * types: Add TP4159 PCIe Infrastructure for Live Migration definitions
  * types: add NVME_CTRL_OAES get macro definitions
  * types: add NVME_CTRL_OAES_TTHR definition
  * types: add NVME_CTRL_FNA definitions to get field values
  * types: add NVME_VAL() definition
  * tree: fix tls key mem leak (bsc#1231668)
  * tree: fix dhchap_ctrl_key mem leak (bsc#1231668)
  * tree: fix dhchap_key mem leak (bsc#1231668)
  * types: add NVME_CHECK() definition to check nvme register field value
  * types: add kv opcodes
  * types: added new fields in nvme_nvme_id_ns
  * types: Add enum for Completion Condition of Get LBA status command
  * ioctl: refactoring set_features
  * types: add new fields added in TP4142
  * mi: add control primitive command
  * linux: Correct error handling for derive_psk_digest (bsc#1228376)
  * types: Added new field CSER in enum as per TP4167
- build fix for OpenSSL 1.1
  * add 0001-linux-fix-derive_psk_digest-OpenSSL-1.1-version.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1732536000">- Fix tests on s390
  * add 0002-test-mock-pass-thru-unknown-ioctls.patch</changelog>
  <changelog author="dwagner@suse.de" date="1745323200">- Update to version 1.11+4.ge68a91ae:
  * tree: add routine to fetch subsys firmware rev (bsc#1240518)
  * tree: add routine to fetch subsys model (bsc#1240518)
  * test/mock: pass thru unknown ioctls
  * linux: fix derive_psk_digest OpenSSL 1.1 version
  - Remove merged patches
  * remove 0001-linux-fix-derive_psk_digest-OpenSSL-1.1-version.patch
  * remove 0002-test-mock-pass-thru-unknown-ioctls.patch</changelog>
  <changelog author="dwagner@suse.de" date="1753185600">- Update to version 1.11+6.g0d17be77:
  * tree: free ctrl attributes when (re)configure ctrl (bsc#1243716)
  * tree: filter tree after scan has completed (bsc#1243716)</changelog>
</package>
<package pkgid="a4f1d812ce5f606bf145585c199907cfc1703c303dde030b2fc48bd890e6309d" name="libnvme-devel" arch="x86_64">
  <version epoch="0" ver="1.11+8.gfb9b581c" rel="150700.4.9.1"/>
  <changelog author="daniel.wagner@suse.com" date="1675080000">- Update to version 1.3:
  * Support added for Flexible Data Placement (TP4146)
  * Fabrics: added support for Persistent Discovery Controllers.
  * libnvme-mi added a quirk framework to workaround special behavior of
  certain devices
  * The python binding behaves more friendly in a threading environment
  by release the GIL on blocking calls.
  * Replaced  3the libsystemd dependency with libdbus
  * A lot of small fixes everywhere (leaks, wrong ordering of arguments, ...)
- Update spec file
  * Project depends on meson &gt;= 0.50.0</changelog>
  <changelog author="mwilck@suse.com" date="1675080001">- temporarily disable unit tests on s390x (bsc#1207687, bsc#1207686)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1680264000">- Update to version 1.4: (jsc#PED-553 jsc#PED-3884)
  * fabrics: Filter out invalid UUIDs from DMI
  * fabrics: Add define for DMI sysinfo
  * Print out correct TREQ strings for discovery
  * tree: fix generic device open failure
  * fabrics: add configuration option 'tls_key'
  * fabrics: add configuration option 'keyring'
  * linux: add key helper functions
  * nvme: add 'nvme_insert_tls_key()' function
  * linux: add nvme_lookup_keyring()
  * python: Change python option from combo to feature
  * types: add opcode field to error log page (TP4113)
  * python: Add setter property for controller DHCHAP Key
  * python: Remove redundant host.set_key() method
  * build, meson: Print option summary
  * Python: Add support for setting/getting Host DHCHAP key
  * Python: Add hostnqn_from_file() and hostid_from_file()
  * types: Update position of elbatm in struct nvme_copy_range{_f1}
  * doc: fix kernel-doc-check warning
  * python, meson: Assert that deps are present for -Dpython=true
  * python: Reformat SWIG input file
  * python test: Check there is no SIGSEGV during garbage collection
  * python: Return PyObject* from __str__() instead of a static char[]
  * python: Fix segmentation fault during garbage collection
  * build: Enable test in muon minimal build
  * build: Streamline workflows with nvme-cli
  * mi: Add nvme_mi_admin_get_log_page
  * ioctl: Set file descriptor in nvme_get_log_page()
  * fix endians
  * fabrics: Do not ignore one char whitespace when string sanitizing
- Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
- Fix invalid string lenght calculcation for UUID (bsc#1209906)
- Fix segmentation fault during garbage collection (bsc#1209905)
- Always sanitize traddr and trsvcid entries (bsc#1207435)
- Allow tracking unique discover controllers (bsc#1186689)</changelog>
  <changelog author="ana.guerrero@suse.com" date="1690459200">- Fix build with meson 1.2.0</changelog>
  <changelog author="daniel.wagner@suse.com" date="1695988800">- Update to version 1.6: (jsc#PED-3610 jsc#PED-4879 jsc#PED-5061)
  * docs: Fix Read-the-Docs configuration (deprecated config param)
  * mi-mctp: Fix free() in error path of mi_open_mctp
  * types: Use NVME_SET for status type mask to get status value
  * types: Define FLBAS MASK and SHIFT to use NVME_GET
  * types: Support Phy Rx Eye Opening Measurement Log
  * log: Add nvme root global variable to set for default output
  * types: Add support for the OAQD ID controller field
  * test: use non deprecated API
  * test: add tests for Get/Set Features functions
  * ioctl: implement nvme_set_features_lba_range()
  * ioctl: pass NSID in Get/Set Features commands that use it
  * ioctl: fix swapped parameters in nvme_set_features_host_id()
  * ioctl: export nvme_{g,s}et_features_iocs_profile()
  * ioctl: pass ENDGID in nvme_get_features_endurance_event_cfg()
  * ioctl: don't set SAVE bit on unsaveable features
  * ioctl: avoid sending uninitialized timestamp
  * ioctl: pass data for Get/Set Features commands
  * ioctl: set correct bits in Set Features commands
  * ioctl: correct feature IDs in Get/Set Features commands
  * tree: Add 2 new public functions to lookup existing controllers
  * ioctl: Add debugging feature to show command outputs
  * Fix incorrect article 'an' as 'a' to use for a description
  * linux: Added functions to enable faster telemetry data retrieval. Moved telemetry data area support detection into separate function. Added possibility to modify data transfer chunk size. Enable telemetry extraction up to specified data area. Removed some printf() and perror().
  * test: account for discovery log page entry stripping
  * fabrics: unconditionally strip discovery entry strings
  * fabrics: only look for spaces in strchomp()
  * tree: Use early return instead of else statements
  * test: fix lookup test case
  * test: make all function static
  * test: add tests for new tcp controller matching algorithm
  * tree: Improve TCP controller matching algorithm
  * util: Add functions to parse the system's interfaces
  * types: Add support for EGFEAT, Domain Identifier, TEGCAP and UEGCAP
  * mi: remove nsid from nvme_mi_admin_identify_secondary_ctrl_list()
  * test: add tests for nvme_ctrl_get_src_addr()
  * tree: Add nvme_ctrl_get_src_addr() to get the controller's src_addr
  * util: Split _nvme_ipaddrs_eq() from nvme_ipaddrs_eq()
  * test: add tests for Identify functions
  * ioctl: use available Identify helper functions
  * test: pass a large enough buffer to nvme_identify_ns_descs()
  * ioctl: remove nsid from nvme_identify_secondary_ctrl_list()
  * meson: Don't hard-code path to "internal/config.h"
  * fabrics: Do not pass disable_sqflow if not supported
  * fabrics: Read the supported options lazy
  * test: add discovery log page tests
  * test: add infra for mocking passthru ioctls
  * tree: fix segfault in nvme_scan_subsystem() (bsc#1213993)
  * src/nvme/tree.c: make __nvme_scan_subsystem() returning bool (bsc#1213993)
  * doc: fix minor mistake in README.md about dependencies
  * nvme-tree: avoid warning in 'list-subsys' (bsc#1212598)
  * tree: Add getter for subsystem iopolicy (bsc#1124564)
  * fabrics: Consider also all hosts settings for context match
  * tree: Scan all subsystems (bsc#1212598)
  * doc: Fixing compile instruction in README
  * mi: allow non-4-byte-aligned responses
  * mi-mctp: use a linear response buffer
  * mi: implement length and offset alignment checks in admin_xfer()
  * tree: Don't open nvme devices until it's absolutely required
    (bsc#1213527 bsc#1213686)
  * tree: missing closedir() causes fd leak for "/sys/bus/pci/slots"
  * mi: don't return from mi_mctp_submit with a tag held
  * util: Provide empty nvme_ipaddrs_eq for static builds
  * fabrics: Relax match on well known disc ctrl lookup
  * tree: Ignore NULL address pointer for phy slot lookup
  * fabrics: Filter discovery ctrls out during application context check
  * util: Add ignored error code
  * json: Use memory block allocated by realloc() instead printbuf
  * util: Use HAVE_NETDB instead of HAVE_LIBNSS
  * tree: Add PCI physical slot number for controller
  * tree: Use nvme_ipaddrs_eq() to compare IP addresses
  * fabrics: Add EADDRNOTAVAIL error mapping
  * fabrics: filter out subsystems with non-matching application string
  * libnvme: add 'application' setting to nvme_root
  * libnvme: add 'application' setting to the subsystem
  * test: Add more code coverage for nvme_ipaddrs_eq()
  * util: rename ipaddrs_eq() to nvme_ipaddrs_eq() and make public.
  * util: Add ipaddrs_eq() to check whether two IP addresses are equal
  * test: Add unit test for ctrl lookups
  * ioctl: fix RAE bit on last Get Log Page command (bsc#1213618)
  * fabrics: check genctr after getting discovery entries (bsc#1213618)
  * fabrics: handle /dev/nvme-fabrics read failure
  * fabrics: fix potential invalid memory access in __nvmf_supported_option()
  * Python: Fix crash during garbage collection
  * python/swig: Check swig version to determine whether -py3 is needed
  * python/swig: Wrap swig-sensitive struct inside #ifwdef SWIG
  * mi: Add nvme_mi_ctrl_id to retrieve controller ID
  * Python: Suppress swig warnings about unnamed struct
  * examples: fix incorrect controller status in MI info output
  * ioctl: Explicitly initialize all members of struct nvme_ns_mgmt_args
  * Python: make NBFT data more pythonic
  * ioctl: io management send, receive args fix
  * python: Update test data
  * NBFT: Remove documentation from nbft.c since it's also in nbft.h
  * Python: Add NBFT support
  * nbft: Doc typo - Use nvme_nbft_free() instead of nbft_free()
  * nbft: Parse the {HOSTID,HOSTNQN}_CONFIGURED flags
  * nbft: Fix nbft_ssns_flags endianness test
  * nbft: Add a simple unit test
  * doc: Update README
  * build: Simple muon build configuration
  * build: Extend summary section
  * build: Make json-c dependency lookup not fail
  * nbft: Move added symbols to LIBNVME_1_5
  * build: Update wrap mode defaults
  * build: Disable fallback on default
  * tree: Fix offset argument check in nvme_bytes_to_lba
  * nbft: add NBFT v1.0 table support (jsc#PED-1449)
  * types: Add IO command set specific field on nsmgmt
  * fabrics: Do not pass unsupported options to kernel
  * types: Add ns-mgmt host software specified fields
  * types.h: Add FDP related Status Code
  * tree: Fix argument check in nvme_bytes_to_lba</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420800">- Drop unencessary minimum version depedency on meson.
- Re-enable libdbus feature. Upstream defaults changed.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420801">- Enable tests during build
- Set git version tag
- Drop unused make dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696852800">- Use glob for python3-libnvme file listening. Workaround pycache_only
  problems for SLE/Leap builds.
- Drop usused libuuid dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1697112000">- Add missing jsc# tracking references to changelog</changelog>
  <changelog author="mwilck@suse.com" date="1697544000">- Update to version 1.6+5.g68c6ffb:
  * avoid stack corruption by unaligned DMA to user space buffers
    (bsc#1216344, gh#linux-nvme/libnvme#727)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1702987200">- Update to version 1.7+0.gf38b1d7:
  * tree: do not open blk device on default
  * tree: read all attributes from sysfs when available
  * ioctl: set data length when retrieving LBA status
  * types: fix regression for vendor-specific field in nvme_id_ns
  * util: use cleanup functions
  * linux: use cleanup functions
  * json: use cleanup functions
  * fabrics: use cleanup functions
  * tree: use cleanup functions
  * cleanup: add cleanup functions
  * tree: fix incorrect return value
  * tree: Fix clearing application strings
  * libnvme: reshuffle nvme_generate_tls_key_identity()
  * libnvme: fixup error codes
  * libnvme: Implement 'nvme_generate_tls_key_identity()'
  * libnvme: support NVMe TLS identities version 1 (bsc#1219086)
  * libnvme: Add base64 functions
  * libnvme: separate out 'gen_tls_identity' and reshuffle 'derive_nvme_keys'
  * libnvme: separate out a function 'select_hmac'
  * libnvme: fix a memory leak when calling read_ssns()
  * libnvme: fix a memory leak in read_discovery()
  * fabrics: avoid redundant args in nvme_discovery_log()
  * fabrics: have nvmf_get_discovery_log() call nvmf_get_discovery_wargs()
  * fabrics: fetch smaller Discovery Log Page header
  * fabrics: avoid redundant Get Log Page on retry
  * fabrics: clear RAE for discovery log page commands
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * types: add Host Behavior Support field definitions
  * mi: Cast values to u32 if shift overflows int
  * types: Cast values to u32 if shift overflows int
  * test: Avoid unaligned pointer dereferences
  * nbft: Avoid unaligned pointer dereferences
  * types: add cross-namespace copy formats, status codes, ONCS bits
  * nvme: Add length field to Hkdf-Expand-Label computation
  * ioctl: use lsp arg in nvme_get_log_boot_partition
  * fabrics: use SECTYPE to determine whether to use TLS (bsc#1219086)
  * fabrics: Allocate aligned payloads for id_ctrl and discovery log calls
  * linux: Allocate aligned payloads for id_ctrl and id_ns calls
  * ioctl: MSB variable-size storage/reference tags</changelog>
  <changelog author="daniel.wagner@suse.com" date="1703073600">- Update to version 1.7.1+0.g13ba383:
  * tree: do no free ns on error in nvme_ns_init</changelog>
  <changelog author="daniel.wagner@suse.com" date="1707912000">- Update to version 1.8+0.gbff7dda:
  * linux: Explicitly initialize auto-cleanup variables
  * example: fix mi identify failed with error cntid
  * tree: do not issue an error when subsys lookup fails during scanning
  * types: Add controller properties CMBEBS, CMBSWTP and NSSD
  * tests: Add sample NBFT table from Dell PowerEdge R660
  * tests: Add sample NBFT table from Dell PowerEdge R760
  * tests: Fix diffs output for duplicate HFI entries
  * nbft: avoid duplicate entries in ssns-&gt;hfis
  * nbft: Fix (struct nbft_info_subsystem_ns).num_hfis off-by-one
  * test: read and dump sysfs tar file
  * nvme: allow to overwrite hostnqn and hostid
  * nvme: allow to overwrite base sysfs path
  * json: dump the output to the user selected filedescriptor
  * libnvme: export nvme_dump_tree
  * fabrics: add 'concat' option
  * mi: set correct rc and errno when crc mismatch
  * tree: use logical block size for lba
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * build: checkout full repo for checkpatch
  * linux: avoid segfault in check-tls-key due to null hostnqn/subsysnqn (bsc#1219086)
  * meson.build: fixup 'join' syntax
  * util: Explicitly initialize auto-cleanup variables
  * tree: Explicitly initialize auto-cleanup variables
  * linux: Explicitly initialize auto-cleanup variables
  * fabrics: Explicitly initialize auto-cleanup variables
  * util: Added function to find specific UUID in UUID list.
  * build: fix release python tag match
- Disable new unit test which is not running stable in OSB
  * add 0001-build-disable-sysfs-test.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737600">- Update to version 1.9+0.g80c5cf2:
  * types: Added Command and Feature Lockdown LID
  * types: add ASQ, ACQ and BPMBL controller properties definitions
  * types: add controller properties enum documentation
  * types: fix CRTO.CRIMT mask value definition
  * tree: use strtou32 to read lba_size
  * types: Fix PMRWBM register name
  * examples: fix mi-mctp build warning errors
  * test: add CSTS.ST, CAP.CPS and CAP.NSSS registers
  * types: add CAP.CPS and CAP.NSSS definitions
  * types: add enum nvme_cap documentation
  * types: Add enum nvme_unit/cmbebs/cmbswtp/flbas/cmic documentation
  * util: Add string constant for ENVME_CONNECT_IGNORED
  * tests: Add sample NBFT table with mpath IPv4+IPv6 discovery
  * types: add controller status shutdown type (CSTS.ST) definition
  * types: Add enum nvme_csts documentation
  * types: Add NVME_CMIC definitions
  * types: Add CMBSWTP property definitions
  * types: Add NVME_CMBEBS property definitions
  * types: Fix boot partition read offset (BPROF) mask value
  * tree: fix mem leak in nvme_ns_init() (bsc#1223331)
  * fabrics: retry discovery log page when DNR is not set
  * ioctl: return EPROTO when an NVMe status occurred
  * linux: Allocate aligned payload for nvme_get_telemetry_log
  * test: use diff to compare sysfs output (bsc#1226216)
  * tree: fix lba_count size calculation
  * tree: Add NVM subsystem controller identifier (bsc#1224024)
  * test: Add unit test for nvme_id_ns_flbas_to_lbaf_inuse()
  * types: Fix NVME_CSTS_SHST_MASK definition
  * util: Fixed nvme_id_ns_flbas_to_lbaf_inuse()
  * types: Add optional data present filed mask and shift definition
  * types: Fix EOM header optional data present fields definition
  * libnvme : record the nvme pci adapter physical slot (bsc#1223208)
  * sysfs: minimize heap allocations of sysfs paths
  * json: Fix uninitialized variables
  * libnvme: add missing symbol nvme_scan_tls_keys (bsc#1226197)
  * nbft: Whitespace fixes (bsc#1222026)
  * tests: Add complex NBFT table from Dell R660 (bsc#1222026)
  * tests: Adapt to added NBFT SSNS flags (bsc#1222026)
  * nbft: Add SSNS 'discovered' flag (bsc#1222026)
  * nbft: Add SSNS 'unavailable' flag (bsc#1222026)
  * doc: Document the NBFT API (bsc#1222026)
  * ioctl: Move nvme_cmd_dword_fields definitions into header file
  * types: Add PEL set feature event layout definitions
  * types: Fix enum nvme_pel_rci documentation error
  * types: Add boot partition information definitions
  * types: Add PEL header additional information definitions
  * fabrics: keyring is a long (bsc#1216982)
  * config-schema.json.in: tls keys and keyrings are strings (bsc#1216982)
  * linux: Add nvme_scan_tls_keys() (bsc#1216982)
  * json: dump TLS key data in PSK interchange format (bsc#1216982)
  * json: import TLS key from PSK interchange format (bsc#1216982)
  * json: export TLS key in PSK interchange format (bsc#1216982)
  * tree: read TLS key in nvme_configure_ctrl() (bsc#1216982)
  * linux: rework nvme_insert_tls_key_versioned() (bsc#1216982)
  * linux: add nvme_import_tls_key() (bsc#1216982)
  * linux: add nvme_export_tls_key() (bsc#1216982)
  * crc32: Add CRC32 algorithm (bsc#1216982)
  * linux: add nvme_update_key() (bsc#1216982)
  * linux: add nvme_read_key() (bsc#1216982)
  * linux: allow for NULL argument in nvme_lookup_keyring() (bsc#1216982)
  * log: Respect DEFAULT_LOGLEVEL on uninitialized logging
  * log: Introduce nvme_get_logging_level()
  * ioctl: remove incomplete debug logging infrastructure
  * ioctl: export nvme_submit_passthru{64} as weak symbol (bsc#1231668)
  * log: move nvme_{set|get}_debug to log.c
  * fabrics: check the read() return value
  * types: Add PEL reporting context port identifier type definitions
  * types: Add persistent event log reporting context definitions
-  Upstream changed the sysfs test setup, thus sysfs test works in OSB
  * remove 0001-build-disable-sysfs-test.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1722600000">- Update to version 1.10:
  * linux: update TLS version 1 PSK derivation (bsc#1228376)
  * tree: fix nvme_read_config() to not set errno if return 0
  * types: add new fields added in TP4165 (bsc#1231668)
  * types: Changed the space into tap space (bsc#1231668)
  * tree: handle no address phy slot dirs (bsc#1229193)
  * linux: Remove the use of OpenSSL Engine API
  * types: Added new controller attribute as per TP4104
  * tree: add helper to lookup hostnqn/hostid (bsc#1226216)
  * fabrics: extend hostnqn/hostid variable inject interface (bsc#1226216)
  * json: filter out pcie transport (bsc#1226216)
  * tree: preserve parsing order of a config file (bsc#1226216)
  * types: add new field added in TP4099
  * types: add new field added in TP4090 (bsc#1231668)
  * linux: add nvme_revoke_tls_key (bsc#1226197)
  * tree: fix segfault in nvme_free_tree() (bsc#1231668)
  * types: add PEL vendor specific and TCG defined events definitions
  * mi-mctp: initialize the rc variable in handle_mctp_endpoint()
  * linux: avoid potential null pointer dereference
  * linux: add nvme_get_ana_log_len_from_id_ctrl()
  * libnvme: export nvme_mi_admin_get_ana_log_atomic()
  * ioctl: add support for atomic, piecewise ANA log fetch
  * ioctl: replace nvme_ana_rsp_hdr in doc comments
  * ioctl: respect rae in nvme_get_log_ana()
  * ioctl: fix nvme_get_log_ana_groups() pointer type
  * types: add new filed added in TP4141a
  * mi: Probe quirks on first command submission
  * tree: optionally skip namespaces during scanning
  * ioctl: update nvme_set_var_size_tags() to properly use reftag
  * types: add enum for Protection Information Format
  * libnvme: Introduce functions to generate host identifier and host NQN (bsc#1226216)
  * fabrics: Unescape URI elements
  * tests: Add uriparser tests
  * fabrics: Introduce simple URI parser
  * linux: default init cleanup variable
  * linux: Fix uninitialized variables
  * types: add the nvme Cancel command opcode
  * log: split log variables from root object
  * log: keep log level logic in one place
  * mi: restore default ep timeout during admin_passthru
  * mi: fix the rc for nvme_mi_scan_ep
  * ccan/endian.h: Only define __{BIG,LITTLE}_ENDIAN if undefined.
  * Use C99 types for uint32_t
  * mi: fix the return error code.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1730376000">- Update to version 1.11:
  * prefix: Use Request or Response Length in DLEN and DOFF for MI
  * types: Add ETPVDS and SSI fields of sanitize status log
  * json: do not escape strings when printing the configuration
  * tree: do no export tls keys when not provided by user
  * types: add struct nvme_id_ctrl_nvm ver and lbamqf member variables
  * types: add NVMe 2.1 get log page LIDs
  * type: Added enums for ANSAN and RGCNS bit of OAES field
  * linux: fixup PSK HMAC type '0' handling
  * util: added error code for ENOKEY
  * fabrics: fix map error level in __nvmf_add_ctrl
  * fabrics: add ctrl connect interface
  * fabrics: use hex numbers when generating command line options
  * fabrics: rename first argument for argument macros
  * linux: handle key import correctly
  * linux: export keys to config
  * tree: read tls_configured_key and tls_keyring from sysfs
  * tree: move dhchap and tls sysfs parser into separate functions
  * json: move keystore operations out of the JSON parser
  * tree: add getter/setters for TLS PSK
  * linux: add import/export function for TLS pre-shared keys
  * linux: only return the description of a key
  * linux: use ssize_t as return type for nvme_identity_len
  * linux: reorder variable declarations
  * types: Added enum for SMVES event of PEL log
  * libnvme: add lockdown log page support(LID : 0x14)
  * libnvme: add EMVS support to sanitize command
  * types: Add TP4159 PCIe Infrastructure for Live Migration definitions
  * types: add NVME_CTRL_OAES get macro definitions
  * types: add NVME_CTRL_OAES_TTHR definition
  * types: add NVME_CTRL_FNA definitions to get field values
  * types: add NVME_VAL() definition
  * tree: fix tls key mem leak (bsc#1231668)
  * tree: fix dhchap_ctrl_key mem leak (bsc#1231668)
  * tree: fix dhchap_key mem leak (bsc#1231668)
  * types: add NVME_CHECK() definition to check nvme register field value
  * types: add kv opcodes
  * types: added new fields in nvme_nvme_id_ns
  * types: Add enum for Completion Condition of Get LBA status command
  * ioctl: refactoring set_features
  * types: add new fields added in TP4142
  * mi: add control primitive command
  * linux: Correct error handling for derive_psk_digest (bsc#1228376)
  * types: Added new field CSER in enum as per TP4167
- build fix for OpenSSL 1.1
  * add 0001-linux-fix-derive_psk_digest-OpenSSL-1.1-version.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1732536000">- Fix tests on s390
  * add 0002-test-mock-pass-thru-unknown-ioctls.patch</changelog>
  <changelog author="dwagner@suse.de" date="1745323200">- Update to version 1.11+4.ge68a91ae:
  * tree: add routine to fetch subsys firmware rev (bsc#1240518)
  * tree: add routine to fetch subsys model (bsc#1240518)
  * test/mock: pass thru unknown ioctls
  * linux: fix derive_psk_digest OpenSSL 1.1 version
  - Remove merged patches
  * remove 0001-linux-fix-derive_psk_digest-OpenSSL-1.1-version.patch
  * remove 0002-test-mock-pass-thru-unknown-ioctls.patch</changelog>
  <changelog author="dwagner@suse.de" date="1753185600">- Update to version 1.11+6.g0d17be77:
  * tree: free ctrl attributes when (re)configure ctrl (bsc#1243716)
  * tree: filter tree after scan has completed (bsc#1243716)</changelog>
  <changelog author="dwagner@suse.de" date="1757419200">- Update to version 1.11+8.gfb9b581c:
  * tree: do not try to strdup NULL pointer (bsc#1247225)
  * tree: always set the host key (bsc#1246560)</changelog>
</package>
<package pkgid="d8cba279af73e0e4ad3a66bb0e4ef7403af411f4518de18ca334b0221f13e125" name="libnvme-mi1" arch="x86_64">
  <version epoch="0" ver="1.11+17.g61f36cae" rel="150700.4.14.1"/>
  <changelog author="mwilck@suse.com" date="1675080000">- temporarily disable unit tests on s390x (bsc#1207687, bsc#1207686)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1680264000">- Update to version 1.4: (jsc#PED-553 jsc#PED-3884)
  * fabrics: Filter out invalid UUIDs from DMI
  * fabrics: Add define for DMI sysinfo
  * Print out correct TREQ strings for discovery
  * tree: fix generic device open failure
  * fabrics: add configuration option 'tls_key'
  * fabrics: add configuration option 'keyring'
  * linux: add key helper functions
  * nvme: add 'nvme_insert_tls_key()' function
  * linux: add nvme_lookup_keyring()
  * python: Change python option from combo to feature
  * types: add opcode field to error log page (TP4113)
  * python: Add setter property for controller DHCHAP Key
  * python: Remove redundant host.set_key() method
  * build, meson: Print option summary
  * Python: Add support for setting/getting Host DHCHAP key
  * Python: Add hostnqn_from_file() and hostid_from_file()
  * types: Update position of elbatm in struct nvme_copy_range{_f1}
  * doc: fix kernel-doc-check warning
  * python, meson: Assert that deps are present for -Dpython=true
  * python: Reformat SWIG input file
  * python test: Check there is no SIGSEGV during garbage collection
  * python: Return PyObject* from __str__() instead of a static char[]
  * python: Fix segmentation fault during garbage collection
  * build: Enable test in muon minimal build
  * build: Streamline workflows with nvme-cli
  * mi: Add nvme_mi_admin_get_log_page
  * ioctl: Set file descriptor in nvme_get_log_page()
  * fix endians
  * fabrics: Do not ignore one char whitespace when string sanitizing
- Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
- Fix invalid string lenght calculcation for UUID (bsc#1209906)
- Fix segmentation fault during garbage collection (bsc#1209905)
- Always sanitize traddr and trsvcid entries (bsc#1207435)
- Allow tracking unique discover controllers (bsc#1186689)</changelog>
  <changelog author="ana.guerrero@suse.com" date="1690459200">- Fix build with meson 1.2.0</changelog>
  <changelog author="daniel.wagner@suse.com" date="1695988800">- Update to version 1.6: (jsc#PED-3610 jsc#PED-4879 jsc#PED-5061)
  * docs: Fix Read-the-Docs configuration (deprecated config param)
  * mi-mctp: Fix free() in error path of mi_open_mctp
  * types: Use NVME_SET for status type mask to get status value
  * types: Define FLBAS MASK and SHIFT to use NVME_GET
  * types: Support Phy Rx Eye Opening Measurement Log
  * log: Add nvme root global variable to set for default output
  * types: Add support for the OAQD ID controller field
  * test: use non deprecated API
  * test: add tests for Get/Set Features functions
  * ioctl: implement nvme_set_features_lba_range()
  * ioctl: pass NSID in Get/Set Features commands that use it
  * ioctl: fix swapped parameters in nvme_set_features_host_id()
  * ioctl: export nvme_{g,s}et_features_iocs_profile()
  * ioctl: pass ENDGID in nvme_get_features_endurance_event_cfg()
  * ioctl: don't set SAVE bit on unsaveable features
  * ioctl: avoid sending uninitialized timestamp
  * ioctl: pass data for Get/Set Features commands
  * ioctl: set correct bits in Set Features commands
  * ioctl: correct feature IDs in Get/Set Features commands
  * tree: Add 2 new public functions to lookup existing controllers
  * ioctl: Add debugging feature to show command outputs
  * Fix incorrect article 'an' as 'a' to use for a description
  * linux: Added functions to enable faster telemetry data retrieval. Moved telemetry data area support detection into separate function. Added possibility to modify data transfer chunk size. Enable telemetry extraction up to specified data area. Removed some printf() and perror().
  * test: account for discovery log page entry stripping
  * fabrics: unconditionally strip discovery entry strings
  * fabrics: only look for spaces in strchomp()
  * tree: Use early return instead of else statements
  * test: fix lookup test case
  * test: make all function static
  * test: add tests for new tcp controller matching algorithm
  * tree: Improve TCP controller matching algorithm
  * util: Add functions to parse the system's interfaces
  * types: Add support for EGFEAT, Domain Identifier, TEGCAP and UEGCAP
  * mi: remove nsid from nvme_mi_admin_identify_secondary_ctrl_list()
  * test: add tests for nvme_ctrl_get_src_addr()
  * tree: Add nvme_ctrl_get_src_addr() to get the controller's src_addr
  * util: Split _nvme_ipaddrs_eq() from nvme_ipaddrs_eq()
  * test: add tests for Identify functions
  * ioctl: use available Identify helper functions
  * test: pass a large enough buffer to nvme_identify_ns_descs()
  * ioctl: remove nsid from nvme_identify_secondary_ctrl_list()
  * meson: Don't hard-code path to "internal/config.h"
  * fabrics: Do not pass disable_sqflow if not supported
  * fabrics: Read the supported options lazy
  * test: add discovery log page tests
  * test: add infra for mocking passthru ioctls
  * tree: fix segfault in nvme_scan_subsystem() (bsc#1213993)
  * src/nvme/tree.c: make __nvme_scan_subsystem() returning bool (bsc#1213993)
  * doc: fix minor mistake in README.md about dependencies
  * nvme-tree: avoid warning in 'list-subsys' (bsc#1212598)
  * tree: Add getter for subsystem iopolicy (bsc#1124564)
  * fabrics: Consider also all hosts settings for context match
  * tree: Scan all subsystems (bsc#1212598)
  * doc: Fixing compile instruction in README
  * mi: allow non-4-byte-aligned responses
  * mi-mctp: use a linear response buffer
  * mi: implement length and offset alignment checks in admin_xfer()
  * tree: Don't open nvme devices until it's absolutely required
    (bsc#1213527 bsc#1213686)
  * tree: missing closedir() causes fd leak for "/sys/bus/pci/slots"
  * mi: don't return from mi_mctp_submit with a tag held
  * util: Provide empty nvme_ipaddrs_eq for static builds
  * fabrics: Relax match on well known disc ctrl lookup
  * tree: Ignore NULL address pointer for phy slot lookup
  * fabrics: Filter discovery ctrls out during application context check
  * util: Add ignored error code
  * json: Use memory block allocated by realloc() instead printbuf
  * util: Use HAVE_NETDB instead of HAVE_LIBNSS
  * tree: Add PCI physical slot number for controller
  * tree: Use nvme_ipaddrs_eq() to compare IP addresses
  * fabrics: Add EADDRNOTAVAIL error mapping
  * fabrics: filter out subsystems with non-matching application string
  * libnvme: add 'application' setting to nvme_root
  * libnvme: add 'application' setting to the subsystem
  * test: Add more code coverage for nvme_ipaddrs_eq()
  * util: rename ipaddrs_eq() to nvme_ipaddrs_eq() and make public.
  * util: Add ipaddrs_eq() to check whether two IP addresses are equal
  * test: Add unit test for ctrl lookups
  * ioctl: fix RAE bit on last Get Log Page command (bsc#1213618)
  * fabrics: check genctr after getting discovery entries (bsc#1213618)
  * fabrics: handle /dev/nvme-fabrics read failure
  * fabrics: fix potential invalid memory access in __nvmf_supported_option()
  * Python: Fix crash during garbage collection
  * python/swig: Check swig version to determine whether -py3 is needed
  * python/swig: Wrap swig-sensitive struct inside #ifwdef SWIG
  * mi: Add nvme_mi_ctrl_id to retrieve controller ID
  * Python: Suppress swig warnings about unnamed struct
  * examples: fix incorrect controller status in MI info output
  * ioctl: Explicitly initialize all members of struct nvme_ns_mgmt_args
  * Python: make NBFT data more pythonic
  * ioctl: io management send, receive args fix
  * python: Update test data
  * NBFT: Remove documentation from nbft.c since it's also in nbft.h
  * Python: Add NBFT support
  * nbft: Doc typo - Use nvme_nbft_free() instead of nbft_free()
  * nbft: Parse the {HOSTID,HOSTNQN}_CONFIGURED flags
  * nbft: Fix nbft_ssns_flags endianness test
  * nbft: Add a simple unit test
  * doc: Update README
  * build: Simple muon build configuration
  * build: Extend summary section
  * build: Make json-c dependency lookup not fail
  * nbft: Move added symbols to LIBNVME_1_5
  * build: Update wrap mode defaults
  * build: Disable fallback on default
  * tree: Fix offset argument check in nvme_bytes_to_lba
  * nbft: add NBFT v1.0 table support (jsc#PED-1449)
  * types: Add IO command set specific field on nsmgmt
  * fabrics: Do not pass unsupported options to kernel
  * types: Add ns-mgmt host software specified fields
  * types.h: Add FDP related Status Code
  * tree: Fix argument check in nvme_bytes_to_lba</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420800">- Drop unencessary minimum version depedency on meson.
- Re-enable libdbus feature. Upstream defaults changed.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420801">- Enable tests during build
- Set git version tag
- Drop unused make dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696852800">- Use glob for python3-libnvme file listening. Workaround pycache_only
  problems for SLE/Leap builds.
- Drop usused libuuid dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1697112000">- Add missing jsc# tracking references to changelog</changelog>
  <changelog author="mwilck@suse.com" date="1697544000">- Update to version 1.6+5.g68c6ffb:
  * avoid stack corruption by unaligned DMA to user space buffers
    (bsc#1216344, gh#linux-nvme/libnvme#727)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1702987200">- Update to version 1.7+0.gf38b1d7:
  * tree: do not open blk device on default
  * tree: read all attributes from sysfs when available
  * ioctl: set data length when retrieving LBA status
  * types: fix regression for vendor-specific field in nvme_id_ns
  * util: use cleanup functions
  * linux: use cleanup functions
  * json: use cleanup functions
  * fabrics: use cleanup functions
  * tree: use cleanup functions
  * cleanup: add cleanup functions
  * tree: fix incorrect return value
  * tree: Fix clearing application strings
  * libnvme: reshuffle nvme_generate_tls_key_identity()
  * libnvme: fixup error codes
  * libnvme: Implement 'nvme_generate_tls_key_identity()'
  * libnvme: support NVMe TLS identities version 1 (bsc#1219086)
  * libnvme: Add base64 functions
  * libnvme: separate out 'gen_tls_identity' and reshuffle 'derive_nvme_keys'
  * libnvme: separate out a function 'select_hmac'
  * libnvme: fix a memory leak when calling read_ssns()
  * libnvme: fix a memory leak in read_discovery()
  * fabrics: avoid redundant args in nvme_discovery_log()
  * fabrics: have nvmf_get_discovery_log() call nvmf_get_discovery_wargs()
  * fabrics: fetch smaller Discovery Log Page header
  * fabrics: avoid redundant Get Log Page on retry
  * fabrics: clear RAE for discovery log page commands
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * types: add Host Behavior Support field definitions
  * mi: Cast values to u32 if shift overflows int
  * types: Cast values to u32 if shift overflows int
  * test: Avoid unaligned pointer dereferences
  * nbft: Avoid unaligned pointer dereferences
  * types: add cross-namespace copy formats, status codes, ONCS bits
  * nvme: Add length field to Hkdf-Expand-Label computation
  * ioctl: use lsp arg in nvme_get_log_boot_partition
  * fabrics: use SECTYPE to determine whether to use TLS (bsc#1219086)
  * fabrics: Allocate aligned payloads for id_ctrl and discovery log calls
  * linux: Allocate aligned payloads for id_ctrl and id_ns calls
  * ioctl: MSB variable-size storage/reference tags</changelog>
  <changelog author="daniel.wagner@suse.com" date="1703073600">- Update to version 1.7.1+0.g13ba383:
  * tree: do no free ns on error in nvme_ns_init</changelog>
  <changelog author="daniel.wagner@suse.com" date="1707912000">- Update to version 1.8+0.gbff7dda:
  * linux: Explicitly initialize auto-cleanup variables
  * example: fix mi identify failed with error cntid
  * tree: do not issue an error when subsys lookup fails during scanning
  * types: Add controller properties CMBEBS, CMBSWTP and NSSD
  * tests: Add sample NBFT table from Dell PowerEdge R660
  * tests: Add sample NBFT table from Dell PowerEdge R760
  * tests: Fix diffs output for duplicate HFI entries
  * nbft: avoid duplicate entries in ssns-&gt;hfis
  * nbft: Fix (struct nbft_info_subsystem_ns).num_hfis off-by-one
  * test: read and dump sysfs tar file
  * nvme: allow to overwrite hostnqn and hostid
  * nvme: allow to overwrite base sysfs path
  * json: dump the output to the user selected filedescriptor
  * libnvme: export nvme_dump_tree
  * fabrics: add 'concat' option
  * mi: set correct rc and errno when crc mismatch
  * tree: use logical block size for lba
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * build: checkout full repo for checkpatch
  * linux: avoid segfault in check-tls-key due to null hostnqn/subsysnqn (bsc#1219086)
  * meson.build: fixup 'join' syntax
  * util: Explicitly initialize auto-cleanup variables
  * tree: Explicitly initialize auto-cleanup variables
  * linux: Explicitly initialize auto-cleanup variables
  * fabrics: Explicitly initialize auto-cleanup variables
  * util: Added function to find specific UUID in UUID list.
  * build: fix release python tag match
- Disable new unit test which is not running stable in OSB
  * add 0001-build-disable-sysfs-test.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737600">- Update to version 1.9+0.g80c5cf2:
  * types: Added Command and Feature Lockdown LID
  * types: add ASQ, ACQ and BPMBL controller properties definitions
  * types: add controller properties enum documentation
  * types: fix CRTO.CRIMT mask value definition
  * tree: use strtou32 to read lba_size
  * types: Fix PMRWBM register name
  * examples: fix mi-mctp build warning errors
  * test: add CSTS.ST, CAP.CPS and CAP.NSSS registers
  * types: add CAP.CPS and CAP.NSSS definitions
  * types: add enum nvme_cap documentation
  * types: Add enum nvme_unit/cmbebs/cmbswtp/flbas/cmic documentation
  * util: Add string constant for ENVME_CONNECT_IGNORED
  * tests: Add sample NBFT table with mpath IPv4+IPv6 discovery
  * types: add controller status shutdown type (CSTS.ST) definition
  * types: Add enum nvme_csts documentation
  * types: Add NVME_CMIC definitions
  * types: Add CMBSWTP property definitions
  * types: Add NVME_CMBEBS property definitions
  * types: Fix boot partition read offset (BPROF) mask value
  * tree: fix mem leak in nvme_ns_init() (bsc#1223331)
  * fabrics: retry discovery log page when DNR is not set
  * ioctl: return EPROTO when an NVMe status occurred
  * linux: Allocate aligned payload for nvme_get_telemetry_log
  * test: use diff to compare sysfs output (bsc#1226216)
  * tree: fix lba_count size calculation
  * tree: Add NVM subsystem controller identifier (bsc#1224024)
  * test: Add unit test for nvme_id_ns_flbas_to_lbaf_inuse()
  * types: Fix NVME_CSTS_SHST_MASK definition
  * util: Fixed nvme_id_ns_flbas_to_lbaf_inuse()
  * types: Add optional data present filed mask and shift definition
  * types: Fix EOM header optional data present fields definition
  * libnvme : record the nvme pci adapter physical slot (bsc#1223208)
  * sysfs: minimize heap allocations of sysfs paths
  * json: Fix uninitialized variables
  * libnvme: add missing symbol nvme_scan_tls_keys (bsc#1226197)
  * nbft: Whitespace fixes (bsc#1222026)
  * tests: Add complex NBFT table from Dell R660 (bsc#1222026)
  * tests: Adapt to added NBFT SSNS flags (bsc#1222026)
  * nbft: Add SSNS 'discovered' flag (bsc#1222026)
  * nbft: Add SSNS 'unavailable' flag (bsc#1222026)
  * doc: Document the NBFT API (bsc#1222026)
  * ioctl: Move nvme_cmd_dword_fields definitions into header file
  * types: Add PEL set feature event layout definitions
  * types: Fix enum nvme_pel_rci documentation error
  * types: Add boot partition information definitions
  * types: Add PEL header additional information definitions
  * fabrics: keyring is a long (bsc#1216982)
  * config-schema.json.in: tls keys and keyrings are strings (bsc#1216982)
  * linux: Add nvme_scan_tls_keys() (bsc#1216982)
  * json: dump TLS key data in PSK interchange format (bsc#1216982)
  * json: import TLS key from PSK interchange format (bsc#1216982)
  * json: export TLS key in PSK interchange format (bsc#1216982)
  * tree: read TLS key in nvme_configure_ctrl() (bsc#1216982)
  * linux: rework nvme_insert_tls_key_versioned() (bsc#1216982)
  * linux: add nvme_import_tls_key() (bsc#1216982)
  * linux: add nvme_export_tls_key() (bsc#1216982)
  * crc32: Add CRC32 algorithm (bsc#1216982)
  * linux: add nvme_update_key() (bsc#1216982)
  * linux: add nvme_read_key() (bsc#1216982)
  * linux: allow for NULL argument in nvme_lookup_keyring() (bsc#1216982)
  * log: Respect DEFAULT_LOGLEVEL on uninitialized logging
  * log: Introduce nvme_get_logging_level()
  * ioctl: remove incomplete debug logging infrastructure
  * ioctl: export nvme_submit_passthru{64} as weak symbol (bsc#1231668)
  * log: move nvme_{set|get}_debug to log.c
  * fabrics: check the read() return value
  * types: Add PEL reporting context port identifier type definitions
  * types: Add persistent event log reporting context definitions
-  Upstream changed the sysfs test setup, thus sysfs test works in OSB
  * remove 0001-build-disable-sysfs-test.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1722600000">- Update to version 1.10:
  * linux: update TLS version 1 PSK derivation (bsc#1228376)
  * tree: fix nvme_read_config() to not set errno if return 0
  * types: add new fields added in TP4165 (bsc#1231668)
  * types: Changed the space into tap space (bsc#1231668)
  * tree: handle no address phy slot dirs (bsc#1229193)
  * linux: Remove the use of OpenSSL Engine API
  * types: Added new controller attribute as per TP4104
  * tree: add helper to lookup hostnqn/hostid (bsc#1226216)
  * fabrics: extend hostnqn/hostid variable inject interface (bsc#1226216)
  * json: filter out pcie transport (bsc#1226216)
  * tree: preserve parsing order of a config file (bsc#1226216)
  * types: add new field added in TP4099
  * types: add new field added in TP4090 (bsc#1231668)
  * linux: add nvme_revoke_tls_key (bsc#1226197)
  * tree: fix segfault in nvme_free_tree() (bsc#1231668)
  * types: add PEL vendor specific and TCG defined events definitions
  * mi-mctp: initialize the rc variable in handle_mctp_endpoint()
  * linux: avoid potential null pointer dereference
  * linux: add nvme_get_ana_log_len_from_id_ctrl()
  * libnvme: export nvme_mi_admin_get_ana_log_atomic()
  * ioctl: add support for atomic, piecewise ANA log fetch
  * ioctl: replace nvme_ana_rsp_hdr in doc comments
  * ioctl: respect rae in nvme_get_log_ana()
  * ioctl: fix nvme_get_log_ana_groups() pointer type
  * types: add new filed added in TP4141a
  * mi: Probe quirks on first command submission
  * tree: optionally skip namespaces during scanning
  * ioctl: update nvme_set_var_size_tags() to properly use reftag
  * types: add enum for Protection Information Format
  * libnvme: Introduce functions to generate host identifier and host NQN (bsc#1226216)
  * fabrics: Unescape URI elements
  * tests: Add uriparser tests
  * fabrics: Introduce simple URI parser
  * linux: default init cleanup variable
  * linux: Fix uninitialized variables
  * types: add the nvme Cancel command opcode
  * log: split log variables from root object
  * log: keep log level logic in one place
  * mi: restore default ep timeout during admin_passthru
  * mi: fix the rc for nvme_mi_scan_ep
  * ccan/endian.h: Only define __{BIG,LITTLE}_ENDIAN if undefined.
  * Use C99 types for uint32_t
  * mi: fix the return error code.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1730376000">- Update to version 1.11:
  * prefix: Use Request or Response Length in DLEN and DOFF for MI
  * types: Add ETPVDS and SSI fields of sanitize status log
  * json: do not escape strings when printing the configuration
  * tree: do no export tls keys when not provided by user
  * types: add struct nvme_id_ctrl_nvm ver and lbamqf member variables
  * types: add NVMe 2.1 get log page LIDs
  * type: Added enums for ANSAN and RGCNS bit of OAES field
  * linux: fixup PSK HMAC type '0' handling
  * util: added error code for ENOKEY
  * fabrics: fix map error level in __nvmf_add_ctrl
  * fabrics: add ctrl connect interface
  * fabrics: use hex numbers when generating command line options
  * fabrics: rename first argument for argument macros
  * linux: handle key import correctly
  * linux: export keys to config
  * tree: read tls_configured_key and tls_keyring from sysfs
  * tree: move dhchap and tls sysfs parser into separate functions
  * json: move keystore operations out of the JSON parser
  * tree: add getter/setters for TLS PSK
  * linux: add import/export function for TLS pre-shared keys
  * linux: only return the description of a key
  * linux: use ssize_t as return type for nvme_identity_len
  * linux: reorder variable declarations
  * types: Added enum for SMVES event of PEL log
  * libnvme: add lockdown log page support(LID : 0x14)
  * libnvme: add EMVS support to sanitize command
  * types: Add TP4159 PCIe Infrastructure for Live Migration definitions
  * types: add NVME_CTRL_OAES get macro definitions
  * types: add NVME_CTRL_OAES_TTHR definition
  * types: add NVME_CTRL_FNA definitions to get field values
  * types: add NVME_VAL() definition
  * tree: fix tls key mem leak (bsc#1231668)
  * tree: fix dhchap_ctrl_key mem leak (bsc#1231668)
  * tree: fix dhchap_key mem leak (bsc#1231668)
  * types: add NVME_CHECK() definition to check nvme register field value
  * types: add kv opcodes
  * types: added new fields in nvme_nvme_id_ns
  * types: Add enum for Completion Condition of Get LBA status command
  * ioctl: refactoring set_features
  * types: add new fields added in TP4142
  * mi: add control primitive command
  * linux: Correct error handling for derive_psk_digest (bsc#1228376)
  * types: Added new field CSER in enum as per TP4167
- build fix for OpenSSL 1.1
  * add 0001-linux-fix-derive_psk_digest-OpenSSL-1.1-version.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1732536000">- Fix tests on s390
  * add 0002-test-mock-pass-thru-unknown-ioctls.patch</changelog>
  <changelog author="dwagner@suse.de" date="1745323200">- Update to version 1.11+4.ge68a91ae:
  * tree: add routine to fetch subsys firmware rev (bsc#1240518)
  * tree: add routine to fetch subsys model (bsc#1240518)
  * test/mock: pass thru unknown ioctls
  * linux: fix derive_psk_digest OpenSSL 1.1 version
  - Remove merged patches
  * remove 0001-linux-fix-derive_psk_digest-OpenSSL-1.1-version.patch
  * remove 0002-test-mock-pass-thru-unknown-ioctls.patch</changelog>
  <changelog author="dwagner@suse.de" date="1753185600">- Update to version 1.11+6.g0d17be77:
  * tree: free ctrl attributes when (re)configure ctrl (bsc#1243716)
  * tree: filter tree after scan has completed (bsc#1243716)</changelog>
  <changelog author="dwagner@suse.de" date="1757419200">- Update to version 1.11+8.gfb9b581c:
  * tree: do not try to strdup NULL pointer (bsc#1247225)
  * tree: always set the host key (bsc#1246560)</changelog>
  <changelog author="dwagner@suse.de" date="1758196800">- Update to version 1.11+17.g61f36cae:
  * linux: use EVP_PKEY_CTX_add1_hkdf_info only once in compat function (bsc#1246914)
  * nvme/linux: check for empty digest in gen_tls_identity() (bsc#1246914)
  * nvme/linux: add fallback implementation for nvme_insert_tls_key_compat() (bsc#1246914)
  * linux: fix HKDF TLS key derivation back to OpenSSL 3.0.8 (bsc#1246914)
  * libnvme: TLS PSK derivation fixes (bsc#1246914)
  * linux: rename __nvme_insert_tls_key_versioned() to __nvme_insert_tls_key() (bsc#1246914)
  * linux: rename __nvme_insert_tls_key() to __nvme_import_tls_key() (bsc#1246914)
  * test/psk: add testcase for TLS identity derivation (bsc#1246914)
  * linux: set errno when nvme_generate_tls_key_identity() fails (bsc#1246914)</changelog>
</package>
<package pkgid="8410cd7829f8f1164a27a0c747c6f8e0b22625d47f66aff2ef9f63a5b10afa09" name="libnvme-mi1" arch="x86_64">
  <version epoch="0" ver="1.11+22.gc0b8e5f8" rel="150700.4.17.1"/>
  <changelog author="daniel.wagner@suse.com" date="1680264000">- Update to version 1.4: (jsc#PED-553 jsc#PED-3884)
  * fabrics: Filter out invalid UUIDs from DMI
  * fabrics: Add define for DMI sysinfo
  * Print out correct TREQ strings for discovery
  * tree: fix generic device open failure
  * fabrics: add configuration option 'tls_key'
  * fabrics: add configuration option 'keyring'
  * linux: add key helper functions
  * nvme: add 'nvme_insert_tls_key()' function
  * linux: add nvme_lookup_keyring()
  * python: Change python option from combo to feature
  * types: add opcode field to error log page (TP4113)
  * python: Add setter property for controller DHCHAP Key
  * python: Remove redundant host.set_key() method
  * build, meson: Print option summary
  * Python: Add support for setting/getting Host DHCHAP key
  * Python: Add hostnqn_from_file() and hostid_from_file()
  * types: Update position of elbatm in struct nvme_copy_range{_f1}
  * doc: fix kernel-doc-check warning
  * python, meson: Assert that deps are present for -Dpython=true
  * python: Reformat SWIG input file
  * python test: Check there is no SIGSEGV during garbage collection
  * python: Return PyObject* from __str__() instead of a static char[]
  * python: Fix segmentation fault during garbage collection
  * build: Enable test in muon minimal build
  * build: Streamline workflows with nvme-cli
  * mi: Add nvme_mi_admin_get_log_page
  * ioctl: Set file descriptor in nvme_get_log_page()
  * fix endians
  * fabrics: Do not ignore one char whitespace when string sanitizing
- Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
- Fix invalid string lenght calculcation for UUID (bsc#1209906)
- Fix segmentation fault during garbage collection (bsc#1209905)
- Always sanitize traddr and trsvcid entries (bsc#1207435)
- Allow tracking unique discover controllers (bsc#1186689)</changelog>
  <changelog author="ana.guerrero@suse.com" date="1690459200">- Fix build with meson 1.2.0</changelog>
  <changelog author="daniel.wagner@suse.com" date="1695988800">- Update to version 1.6: (jsc#PED-3610 jsc#PED-4879 jsc#PED-5061)
  * docs: Fix Read-the-Docs configuration (deprecated config param)
  * mi-mctp: Fix free() in error path of mi_open_mctp
  * types: Use NVME_SET for status type mask to get status value
  * types: Define FLBAS MASK and SHIFT to use NVME_GET
  * types: Support Phy Rx Eye Opening Measurement Log
  * log: Add nvme root global variable to set for default output
  * types: Add support for the OAQD ID controller field
  * test: use non deprecated API
  * test: add tests for Get/Set Features functions
  * ioctl: implement nvme_set_features_lba_range()
  * ioctl: pass NSID in Get/Set Features commands that use it
  * ioctl: fix swapped parameters in nvme_set_features_host_id()
  * ioctl: export nvme_{g,s}et_features_iocs_profile()
  * ioctl: pass ENDGID in nvme_get_features_endurance_event_cfg()
  * ioctl: don't set SAVE bit on unsaveable features
  * ioctl: avoid sending uninitialized timestamp
  * ioctl: pass data for Get/Set Features commands
  * ioctl: set correct bits in Set Features commands
  * ioctl: correct feature IDs in Get/Set Features commands
  * tree: Add 2 new public functions to lookup existing controllers
  * ioctl: Add debugging feature to show command outputs
  * Fix incorrect article 'an' as 'a' to use for a description
  * linux: Added functions to enable faster telemetry data retrieval. Moved telemetry data area support detection into separate function. Added possibility to modify data transfer chunk size. Enable telemetry extraction up to specified data area. Removed some printf() and perror().
  * test: account for discovery log page entry stripping
  * fabrics: unconditionally strip discovery entry strings
  * fabrics: only look for spaces in strchomp()
  * tree: Use early return instead of else statements
  * test: fix lookup test case
  * test: make all function static
  * test: add tests for new tcp controller matching algorithm
  * tree: Improve TCP controller matching algorithm
  * util: Add functions to parse the system's interfaces
  * types: Add support for EGFEAT, Domain Identifier, TEGCAP and UEGCAP
  * mi: remove nsid from nvme_mi_admin_identify_secondary_ctrl_list()
  * test: add tests for nvme_ctrl_get_src_addr()
  * tree: Add nvme_ctrl_get_src_addr() to get the controller's src_addr
  * util: Split _nvme_ipaddrs_eq() from nvme_ipaddrs_eq()
  * test: add tests for Identify functions
  * ioctl: use available Identify helper functions
  * test: pass a large enough buffer to nvme_identify_ns_descs()
  * ioctl: remove nsid from nvme_identify_secondary_ctrl_list()
  * meson: Don't hard-code path to "internal/config.h"
  * fabrics: Do not pass disable_sqflow if not supported
  * fabrics: Read the supported options lazy
  * test: add discovery log page tests
  * test: add infra for mocking passthru ioctls
  * tree: fix segfault in nvme_scan_subsystem() (bsc#1213993)
  * src/nvme/tree.c: make __nvme_scan_subsystem() returning bool (bsc#1213993)
  * doc: fix minor mistake in README.md about dependencies
  * nvme-tree: avoid warning in 'list-subsys' (bsc#1212598)
  * tree: Add getter for subsystem iopolicy (bsc#1124564)
  * fabrics: Consider also all hosts settings for context match
  * tree: Scan all subsystems (bsc#1212598)
  * doc: Fixing compile instruction in README
  * mi: allow non-4-byte-aligned responses
  * mi-mctp: use a linear response buffer
  * mi: implement length and offset alignment checks in admin_xfer()
  * tree: Don't open nvme devices until it's absolutely required
    (bsc#1213527 bsc#1213686)
  * tree: missing closedir() causes fd leak for "/sys/bus/pci/slots"
  * mi: don't return from mi_mctp_submit with a tag held
  * util: Provide empty nvme_ipaddrs_eq for static builds
  * fabrics: Relax match on well known disc ctrl lookup
  * tree: Ignore NULL address pointer for phy slot lookup
  * fabrics: Filter discovery ctrls out during application context check
  * util: Add ignored error code
  * json: Use memory block allocated by realloc() instead printbuf
  * util: Use HAVE_NETDB instead of HAVE_LIBNSS
  * tree: Add PCI physical slot number for controller
  * tree: Use nvme_ipaddrs_eq() to compare IP addresses
  * fabrics: Add EADDRNOTAVAIL error mapping
  * fabrics: filter out subsystems with non-matching application string
  * libnvme: add 'application' setting to nvme_root
  * libnvme: add 'application' setting to the subsystem
  * test: Add more code coverage for nvme_ipaddrs_eq()
  * util: rename ipaddrs_eq() to nvme_ipaddrs_eq() and make public.
  * util: Add ipaddrs_eq() to check whether two IP addresses are equal
  * test: Add unit test for ctrl lookups
  * ioctl: fix RAE bit on last Get Log Page command (bsc#1213618)
  * fabrics: check genctr after getting discovery entries (bsc#1213618)
  * fabrics: handle /dev/nvme-fabrics read failure
  * fabrics: fix potential invalid memory access in __nvmf_supported_option()
  * Python: Fix crash during garbage collection
  * python/swig: Check swig version to determine whether -py3 is needed
  * python/swig: Wrap swig-sensitive struct inside #ifwdef SWIG
  * mi: Add nvme_mi_ctrl_id to retrieve controller ID
  * Python: Suppress swig warnings about unnamed struct
  * examples: fix incorrect controller status in MI info output
  * ioctl: Explicitly initialize all members of struct nvme_ns_mgmt_args
  * Python: make NBFT data more pythonic
  * ioctl: io management send, receive args fix
  * python: Update test data
  * NBFT: Remove documentation from nbft.c since it's also in nbft.h
  * Python: Add NBFT support
  * nbft: Doc typo - Use nvme_nbft_free() instead of nbft_free()
  * nbft: Parse the {HOSTID,HOSTNQN}_CONFIGURED flags
  * nbft: Fix nbft_ssns_flags endianness test
  * nbft: Add a simple unit test
  * doc: Update README
  * build: Simple muon build configuration
  * build: Extend summary section
  * build: Make json-c dependency lookup not fail
  * nbft: Move added symbols to LIBNVME_1_5
  * build: Update wrap mode defaults
  * build: Disable fallback on default
  * tree: Fix offset argument check in nvme_bytes_to_lba
  * nbft: add NBFT v1.0 table support (jsc#PED-1449)
  * types: Add IO command set specific field on nsmgmt
  * fabrics: Do not pass unsupported options to kernel
  * types: Add ns-mgmt host software specified fields
  * types.h: Add FDP related Status Code
  * tree: Fix argument check in nvme_bytes_to_lba</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420800">- Drop unencessary minimum version depedency on meson.
- Re-enable libdbus feature. Upstream defaults changed.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420801">- Enable tests during build
- Set git version tag
- Drop unused make dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696852800">- Use glob for python3-libnvme file listening. Workaround pycache_only
  problems for SLE/Leap builds.
- Drop usused libuuid dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1697112000">- Add missing jsc# tracking references to changelog</changelog>
  <changelog author="mwilck@suse.com" date="1697544000">- Update to version 1.6+5.g68c6ffb:
  * avoid stack corruption by unaligned DMA to user space buffers
    (bsc#1216344, gh#linux-nvme/libnvme#727)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1702987200">- Update to version 1.7+0.gf38b1d7:
  * tree: do not open blk device on default
  * tree: read all attributes from sysfs when available
  * ioctl: set data length when retrieving LBA status
  * types: fix regression for vendor-specific field in nvme_id_ns
  * util: use cleanup functions
  * linux: use cleanup functions
  * json: use cleanup functions
  * fabrics: use cleanup functions
  * tree: use cleanup functions
  * cleanup: add cleanup functions
  * tree: fix incorrect return value
  * tree: Fix clearing application strings
  * libnvme: reshuffle nvme_generate_tls_key_identity()
  * libnvme: fixup error codes
  * libnvme: Implement 'nvme_generate_tls_key_identity()'
  * libnvme: support NVMe TLS identities version 1 (bsc#1219086)
  * libnvme: Add base64 functions
  * libnvme: separate out 'gen_tls_identity' and reshuffle 'derive_nvme_keys'
  * libnvme: separate out a function 'select_hmac'
  * libnvme: fix a memory leak when calling read_ssns()
  * libnvme: fix a memory leak in read_discovery()
  * fabrics: avoid redundant args in nvme_discovery_log()
  * fabrics: have nvmf_get_discovery_log() call nvmf_get_discovery_wargs()
  * fabrics: fetch smaller Discovery Log Page header
  * fabrics: avoid redundant Get Log Page on retry
  * fabrics: clear RAE for discovery log page commands
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * types: add Host Behavior Support field definitions
  * mi: Cast values to u32 if shift overflows int
  * types: Cast values to u32 if shift overflows int
  * test: Avoid unaligned pointer dereferences
  * nbft: Avoid unaligned pointer dereferences
  * types: add cross-namespace copy formats, status codes, ONCS bits
  * nvme: Add length field to Hkdf-Expand-Label computation
  * ioctl: use lsp arg in nvme_get_log_boot_partition
  * fabrics: use SECTYPE to determine whether to use TLS (bsc#1219086)
  * fabrics: Allocate aligned payloads for id_ctrl and discovery log calls
  * linux: Allocate aligned payloads for id_ctrl and id_ns calls
  * ioctl: MSB variable-size storage/reference tags</changelog>
  <changelog author="daniel.wagner@suse.com" date="1703073600">- Update to version 1.7.1+0.g13ba383:
  * tree: do no free ns on error in nvme_ns_init</changelog>
  <changelog author="daniel.wagner@suse.com" date="1707912000">- Update to version 1.8+0.gbff7dda:
  * linux: Explicitly initialize auto-cleanup variables
  * example: fix mi identify failed with error cntid
  * tree: do not issue an error when subsys lookup fails during scanning
  * types: Add controller properties CMBEBS, CMBSWTP and NSSD
  * tests: Add sample NBFT table from Dell PowerEdge R660
  * tests: Add sample NBFT table from Dell PowerEdge R760
  * tests: Fix diffs output for duplicate HFI entries
  * nbft: avoid duplicate entries in ssns-&gt;hfis
  * nbft: Fix (struct nbft_info_subsystem_ns).num_hfis off-by-one
  * test: read and dump sysfs tar file
  * nvme: allow to overwrite hostnqn and hostid
  * nvme: allow to overwrite base sysfs path
  * json: dump the output to the user selected filedescriptor
  * libnvme: export nvme_dump_tree
  * fabrics: add 'concat' option
  * mi: set correct rc and errno when crc mismatch
  * tree: use logical block size for lba
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * build: checkout full repo for checkpatch
  * linux: avoid segfault in check-tls-key due to null hostnqn/subsysnqn (bsc#1219086)
  * meson.build: fixup 'join' syntax
  * util: Explicitly initialize auto-cleanup variables
  * tree: Explicitly initialize auto-cleanup variables
  * linux: Explicitly initialize auto-cleanup variables
  * fabrics: Explicitly initialize auto-cleanup variables
  * util: Added function to find specific UUID in UUID list.
  * build: fix release python tag match
- Disable new unit test which is not running stable in OSB
  * add 0001-build-disable-sysfs-test.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737600">- Update to version 1.9+0.g80c5cf2:
  * types: Added Command and Feature Lockdown LID
  * types: add ASQ, ACQ and BPMBL controller properties definitions
  * types: add controller properties enum documentation
  * types: fix CRTO.CRIMT mask value definition
  * tree: use strtou32 to read lba_size
  * types: Fix PMRWBM register name
  * examples: fix mi-mctp build warning errors
  * test: add CSTS.ST, CAP.CPS and CAP.NSSS registers
  * types: add CAP.CPS and CAP.NSSS definitions
  * types: add enum nvme_cap documentation
  * types: Add enum nvme_unit/cmbebs/cmbswtp/flbas/cmic documentation
  * util: Add string constant for ENVME_CONNECT_IGNORED
  * tests: Add sample NBFT table with mpath IPv4+IPv6 discovery
  * types: add controller status shutdown type (CSTS.ST) definition
  * types: Add enum nvme_csts documentation
  * types: Add NVME_CMIC definitions
  * types: Add CMBSWTP property definitions
  * types: Add NVME_CMBEBS property definitions
  * types: Fix boot partition read offset (BPROF) mask value
  * tree: fix mem leak in nvme_ns_init() (bsc#1223331)
  * fabrics: retry discovery log page when DNR is not set
  * ioctl: return EPROTO when an NVMe status occurred
  * linux: Allocate aligned payload for nvme_get_telemetry_log
  * test: use diff to compare sysfs output (bsc#1226216)
  * tree: fix lba_count size calculation
  * tree: Add NVM subsystem controller identifier (bsc#1224024)
  * test: Add unit test for nvme_id_ns_flbas_to_lbaf_inuse()
  * types: Fix NVME_CSTS_SHST_MASK definition
  * util: Fixed nvme_id_ns_flbas_to_lbaf_inuse()
  * types: Add optional data present filed mask and shift definition
  * types: Fix EOM header optional data present fields definition
  * libnvme : record the nvme pci adapter physical slot (bsc#1223208)
  * sysfs: minimize heap allocations of sysfs paths
  * json: Fix uninitialized variables
  * libnvme: add missing symbol nvme_scan_tls_keys (bsc#1226197)
  * nbft: Whitespace fixes (bsc#1222026)
  * tests: Add complex NBFT table from Dell R660 (bsc#1222026)
  * tests: Adapt to added NBFT SSNS flags (bsc#1222026)
  * nbft: Add SSNS 'discovered' flag (bsc#1222026)
  * nbft: Add SSNS 'unavailable' flag (bsc#1222026)
  * doc: Document the NBFT API (bsc#1222026)
  * ioctl: Move nvme_cmd_dword_fields definitions into header file
  * types: Add PEL set feature event layout definitions
  * types: Fix enum nvme_pel_rci documentation error
  * types: Add boot partition information definitions
  * types: Add PEL header additional information definitions
  * fabrics: keyring is a long (bsc#1216982)
  * config-schema.json.in: tls keys and keyrings are strings (bsc#1216982)
  * linux: Add nvme_scan_tls_keys() (bsc#1216982)
  * json: dump TLS key data in PSK interchange format (bsc#1216982)
  * json: import TLS key from PSK interchange format (bsc#1216982)
  * json: export TLS key in PSK interchange format (bsc#1216982)
  * tree: read TLS key in nvme_configure_ctrl() (bsc#1216982)
  * linux: rework nvme_insert_tls_key_versioned() (bsc#1216982)
  * linux: add nvme_import_tls_key() (bsc#1216982)
  * linux: add nvme_export_tls_key() (bsc#1216982)
  * crc32: Add CRC32 algorithm (bsc#1216982)
  * linux: add nvme_update_key() (bsc#1216982)
  * linux: add nvme_read_key() (bsc#1216982)
  * linux: allow for NULL argument in nvme_lookup_keyring() (bsc#1216982)
  * log: Respect DEFAULT_LOGLEVEL on uninitialized logging
  * log: Introduce nvme_get_logging_level()
  * ioctl: remove incomplete debug logging infrastructure
  * ioctl: export nvme_submit_passthru{64} as weak symbol (bsc#1231668)
  * log: move nvme_{set|get}_debug to log.c
  * fabrics: check the read() return value
  * types: Add PEL reporting context port identifier type definitions
  * types: Add persistent event log reporting context definitions
-  Upstream changed the sysfs test setup, thus sysfs test works in OSB
  * remove 0001-build-disable-sysfs-test.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1722600000">- Update to version 1.10:
  * linux: update TLS version 1 PSK derivation (bsc#1228376)
  * tree: fix nvme_read_config() to not set errno if return 0
  * types: add new fields added in TP4165 (bsc#1231668)
  * types: Changed the space into tap space (bsc#1231668)
  * tree: handle no address phy slot dirs (bsc#1229193)
  * linux: Remove the use of OpenSSL Engine API
  * types: Added new controller attribute as per TP4104
  * tree: add helper to lookup hostnqn/hostid (bsc#1226216)
  * fabrics: extend hostnqn/hostid variable inject interface (bsc#1226216)
  * json: filter out pcie transport (bsc#1226216)
  * tree: preserve parsing order of a config file (bsc#1226216)
  * types: add new field added in TP4099
  * types: add new field added in TP4090 (bsc#1231668)
  * linux: add nvme_revoke_tls_key (bsc#1226197)
  * tree: fix segfault in nvme_free_tree() (bsc#1231668)
  * types: add PEL vendor specific and TCG defined events definitions
  * mi-mctp: initialize the rc variable in handle_mctp_endpoint()
  * linux: avoid potential null pointer dereference
  * linux: add nvme_get_ana_log_len_from_id_ctrl()
  * libnvme: export nvme_mi_admin_get_ana_log_atomic()
  * ioctl: add support for atomic, piecewise ANA log fetch
  * ioctl: replace nvme_ana_rsp_hdr in doc comments
  * ioctl: respect rae in nvme_get_log_ana()
  * ioctl: fix nvme_get_log_ana_groups() pointer type
  * types: add new filed added in TP4141a
  * mi: Probe quirks on first command submission
  * tree: optionally skip namespaces during scanning
  * ioctl: update nvme_set_var_size_tags() to properly use reftag
  * types: add enum for Protection Information Format
  * libnvme: Introduce functions to generate host identifier and host NQN (bsc#1226216)
  * fabrics: Unescape URI elements
  * tests: Add uriparser tests
  * fabrics: Introduce simple URI parser
  * linux: default init cleanup variable
  * linux: Fix uninitialized variables
  * types: add the nvme Cancel command opcode
  * log: split log variables from root object
  * log: keep log level logic in one place
  * mi: restore default ep timeout during admin_passthru
  * mi: fix the rc for nvme_mi_scan_ep
  * ccan/endian.h: Only define __{BIG,LITTLE}_ENDIAN if undefined.
  * Use C99 types for uint32_t
  * mi: fix the return error code.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1730376000">- Update to version 1.11:
  * prefix: Use Request or Response Length in DLEN and DOFF for MI
  * types: Add ETPVDS and SSI fields of sanitize status log
  * json: do not escape strings when printing the configuration
  * tree: do no export tls keys when not provided by user
  * types: add struct nvme_id_ctrl_nvm ver and lbamqf member variables
  * types: add NVMe 2.1 get log page LIDs
  * type: Added enums for ANSAN and RGCNS bit of OAES field
  * linux: fixup PSK HMAC type '0' handling
  * util: added error code for ENOKEY
  * fabrics: fix map error level in __nvmf_add_ctrl
  * fabrics: add ctrl connect interface
  * fabrics: use hex numbers when generating command line options
  * fabrics: rename first argument for argument macros
  * linux: handle key import correctly
  * linux: export keys to config
  * tree: read tls_configured_key and tls_keyring from sysfs
  * tree: move dhchap and tls sysfs parser into separate functions
  * json: move keystore operations out of the JSON parser
  * tree: add getter/setters for TLS PSK
  * linux: add import/export function for TLS pre-shared keys
  * linux: only return the description of a key
  * linux: use ssize_t as return type for nvme_identity_len
  * linux: reorder variable declarations
  * types: Added enum for SMVES event of PEL log
  * libnvme: add lockdown log page support(LID : 0x14)
  * libnvme: add EMVS support to sanitize command
  * types: Add TP4159 PCIe Infrastructure for Live Migration definitions
  * types: add NVME_CTRL_OAES get macro definitions
  * types: add NVME_CTRL_OAES_TTHR definition
  * types: add NVME_CTRL_FNA definitions to get field values
  * types: add NVME_VAL() definition
  * tree: fix tls key mem leak (bsc#1231668)
  * tree: fix dhchap_ctrl_key mem leak (bsc#1231668)
  * tree: fix dhchap_key mem leak (bsc#1231668)
  * types: add NVME_CHECK() definition to check nvme register field value
  * types: add kv opcodes
  * types: added new fields in nvme_nvme_id_ns
  * types: Add enum for Completion Condition of Get LBA status command
  * ioctl: refactoring set_features
  * types: add new fields added in TP4142
  * mi: add control primitive command
  * linux: Correct error handling for derive_psk_digest (bsc#1228376)
  * types: Added new field CSER in enum as per TP4167
- build fix for OpenSSL 1.1
  * add 0001-linux-fix-derive_psk_digest-OpenSSL-1.1-version.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1732536000">- Fix tests on s390
  * add 0002-test-mock-pass-thru-unknown-ioctls.patch</changelog>
  <changelog author="dwagner@suse.de" date="1745323200">- Update to version 1.11+4.ge68a91ae:
  * tree: add routine to fetch subsys firmware rev (bsc#1240518)
  * tree: add routine to fetch subsys model (bsc#1240518)
  * test/mock: pass thru unknown ioctls
  * linux: fix derive_psk_digest OpenSSL 1.1 version
  - Remove merged patches
  * remove 0001-linux-fix-derive_psk_digest-OpenSSL-1.1-version.patch
  * remove 0002-test-mock-pass-thru-unknown-ioctls.patch</changelog>
  <changelog author="dwagner@suse.de" date="1753185600">- Update to version 1.11+6.g0d17be77:
  * tree: free ctrl attributes when (re)configure ctrl (bsc#1243716)
  * tree: filter tree after scan has completed (bsc#1243716)</changelog>
  <changelog author="dwagner@suse.de" date="1757419200">- Update to version 1.11+8.gfb9b581c:
  * tree: do not try to strdup NULL pointer (bsc#1247225)
  * tree: always set the host key (bsc#1246560)</changelog>
  <changelog author="dwagner@suse.de" date="1758196800">- Update to version 1.11+17.g61f36cae:
  * linux: use EVP_PKEY_CTX_add1_hkdf_info only once in compat function (bsc#1246914)
  * nvme/linux: check for empty digest in gen_tls_identity() (bsc#1246914)
  * nvme/linux: add fallback implementation for nvme_insert_tls_key_compat() (bsc#1246914)
  * linux: fix HKDF TLS key derivation back to OpenSSL 3.0.8 (bsc#1246914)
  * libnvme: TLS PSK derivation fixes (bsc#1246914)
  * linux: rename __nvme_insert_tls_key_versioned() to __nvme_insert_tls_key() (bsc#1246914)
  * linux: rename __nvme_insert_tls_key() to __nvme_import_tls_key() (bsc#1246914)
  * test/psk: add testcase for TLS identity derivation (bsc#1246914)
  * linux: set errno when nvme_generate_tls_key_identity() fails (bsc#1246914)</changelog>
  <changelog author="dwagner@suse.de" date="1770811200">- Update to version 1.11+22.gc0b8e5f8:
  * fabrics: add additional debug messages for --tls and --concat (bsc#1256043)
  * fabrics: add error if dhchap-ctrl-secret is specified with --concat (bsc#1256043)
  * fabrics: add error if no dhchap-secret is specified with --concat (bsc#1256043)
  * fabrics: add error if --tls and --concat are invoked together (bsc#1256043)
  * fabrics: fix concat during nvme connect-all (bsc#1256043)</changelog>
</package>
<package pkgid="47f7cf1a16658059bfdf0ee6f8dc3c6a4b64954147dc2686f17bcf2a8ebd11f8" name="libnvme-mi1" arch="x86_64">
  <version epoch="0" ver="1.11+4.ge68a91ae" rel="150700.4.3.2"/>
  <changelog author="bwiedemann@suse.com" date="1667217600">- Use fixed manpage build date (boo#1047218)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 1.2:
  * Add more details for return code of MI admin cmds
  * Parse dhchap_host_key on controller level
  * Update json config schema for missing dhchap host key
  * fabrics: Add new TP8010 definitions
  * fabrics: Add nvmf_get_discovery_wargs()
  * fabrics: Duplicate strings when merging configs
  * fabrics: Filter out empty strings in add_argument()
  * fabrics: Use fallthrough statement
  * ioctl: Set log page offset for nvme_get_log_telemetry_host
  * json-schema: add dhchap_key details to host section
  * json: Enforce correctly formatted JSON config files
  * json: Verify JSON config file starts with an array
  * mi: Add Get Log Page helpers
  * mi: Add Identify function for secondary controller list
  * mi: Add Identify helper for ns-descs and primary-ctrl-caps
  * mi: Add firmware download and commit commands
  * mi: Add identify helper for nsid-capable Controller List
  * mi: Add identify helpers for namespace lists
  * mi: Add identify helpers for namespaces
  * mi: Allow Admin-message sized More Processing Required responses
  * mi: Distinguish MI status from NVMe (CDW3) status
  * mi: Fix C++ compiler errors
  * mi: Implement Format NVM command
  * mi: Implement Get &amp; Set Features Admin commands
  * mi: Implement NS attach command and helpers
  * mi: Implement Namespace Management command and create/delete helpers
  * mi: Implement Sanitize command
  * mi: Init ctrl_id within xfer
  * mi: Introduce a helper for response status, unify values with ioctls
  * mi: Set log page offset for nvme_get_log_telemetry_host
  * mi: add nvme_mi_status_to_string()
  * mi: fix a memory leak in nvme_mi_open_mctp()
  * mi: fix get_log_page chunked offset check
  * nvme-tree: avoid segfault if auth keys are unavailable
  * python: Use nvmf_get_discovery_wargs()
  * tree: rename controller 'dhchap_key' to 'dhchap_ctrl_key'
  * types: Move enum nvme_data_tfr to types
  * util: Add LINE_MAX define
  * util: Add get feature length 2 API to support direction parameter
  * util: Add simple UUID type
  * util: Do not expose fallthrough defines
- Make man page build conditiional. Install man page location has been
  fixed upstream.
- Mark the Python directory own by the libnvme3-python package</changelog>
  <changelog author="daniel.wagner@suse.com" date="1675080000">- Update to version 1.3:
  * Support added for Flexible Data Placement (TP4146)
  * Fabrics: added support for Persistent Discovery Controllers.
  * libnvme-mi added a quirk framework to workaround special behavior of
  certain devices
  * The python binding behaves more friendly in a threading environment
  by release the GIL on blocking calls.
  * Replaced  3the libsystemd dependency with libdbus
  * A lot of small fixes everywhere (leaks, wrong ordering of arguments, ...)
- Update spec file
  * Project depends on meson &gt;= 0.50.0</changelog>
  <changelog author="mwilck@suse.com" date="1675080001">- temporarily disable unit tests on s390x (bsc#1207687, bsc#1207686)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1680264000">- Update to version 1.4: (jsc#PED-553 jsc#PED-3884)
  * fabrics: Filter out invalid UUIDs from DMI
  * fabrics: Add define for DMI sysinfo
  * Print out correct TREQ strings for discovery
  * tree: fix generic device open failure
  * fabrics: add configuration option 'tls_key'
  * fabrics: add configuration option 'keyring'
  * linux: add key helper functions
  * nvme: add 'nvme_insert_tls_key()' function
  * linux: add nvme_lookup_keyring()
  * python: Change python option from combo to feature
  * types: add opcode field to error log page (TP4113)
  * python: Add setter property for controller DHCHAP Key
  * python: Remove redundant host.set_key() method
  * build, meson: Print option summary
  * Python: Add support for setting/getting Host DHCHAP key
  * Python: Add hostnqn_from_file() and hostid_from_file()
  * types: Update position of elbatm in struct nvme_copy_range{_f1}
  * doc: fix kernel-doc-check warning
  * python, meson: Assert that deps are present for -Dpython=true
  * python: Reformat SWIG input file
  * python test: Check there is no SIGSEGV during garbage collection
  * python: Return PyObject* from __str__() instead of a static char[]
  * python: Fix segmentation fault during garbage collection
  * build: Enable test in muon minimal build
  * build: Streamline workflows with nvme-cli
  * mi: Add nvme_mi_admin_get_log_page
  * ioctl: Set file descriptor in nvme_get_log_page()
  * fix endians
  * fabrics: Do not ignore one char whitespace when string sanitizing
- Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
- Fix invalid string lenght calculcation for UUID (bsc#1209906)
- Fix segmentation fault during garbage collection (bsc#1209905)
- Always sanitize traddr and trsvcid entries (bsc#1207435)
- Allow tracking unique discover controllers (bsc#1186689)</changelog>
  <changelog author="ana.guerrero@suse.com" date="1690459200">- Fix build with meson 1.2.0</changelog>
  <changelog author="daniel.wagner@suse.com" date="1695988800">- Update to version 1.6: (jsc#PED-3610 jsc#PED-4879 jsc#PED-5061)
  * docs: Fix Read-the-Docs configuration (deprecated config param)
  * mi-mctp: Fix free() in error path of mi_open_mctp
  * types: Use NVME_SET for status type mask to get status value
  * types: Define FLBAS MASK and SHIFT to use NVME_GET
  * types: Support Phy Rx Eye Opening Measurement Log
  * log: Add nvme root global variable to set for default output
  * types: Add support for the OAQD ID controller field
  * test: use non deprecated API
  * test: add tests for Get/Set Features functions
  * ioctl: implement nvme_set_features_lba_range()
  * ioctl: pass NSID in Get/Set Features commands that use it
  * ioctl: fix swapped parameters in nvme_set_features_host_id()
  * ioctl: export nvme_{g,s}et_features_iocs_profile()
  * ioctl: pass ENDGID in nvme_get_features_endurance_event_cfg()
  * ioctl: don't set SAVE bit on unsaveable features
  * ioctl: avoid sending uninitialized timestamp
  * ioctl: pass data for Get/Set Features commands
  * ioctl: set correct bits in Set Features commands
  * ioctl: correct feature IDs in Get/Set Features commands
  * tree: Add 2 new public functions to lookup existing controllers
  * ioctl: Add debugging feature to show command outputs
  * Fix incorrect article 'an' as 'a' to use for a description
  * linux: Added functions to enable faster telemetry data retrieval. Moved telemetry data area support detection into separate function. Added possibility to modify data transfer chunk size. Enable telemetry extraction up to specified data area. Removed some printf() and perror().
  * test: account for discovery log page entry stripping
  * fabrics: unconditionally strip discovery entry strings
  * fabrics: only look for spaces in strchomp()
  * tree: Use early return instead of else statements
  * test: fix lookup test case
  * test: make all function static
  * test: add tests for new tcp controller matching algorithm
  * tree: Improve TCP controller matching algorithm
  * util: Add functions to parse the system's interfaces
  * types: Add support for EGFEAT, Domain Identifier, TEGCAP and UEGCAP
  * mi: remove nsid from nvme_mi_admin_identify_secondary_ctrl_list()
  * test: add tests for nvme_ctrl_get_src_addr()
  * tree: Add nvme_ctrl_get_src_addr() to get the controller's src_addr
  * util: Split _nvme_ipaddrs_eq() from nvme_ipaddrs_eq()
  * test: add tests for Identify functions
  * ioctl: use available Identify helper functions
  * test: pass a large enough buffer to nvme_identify_ns_descs()
  * ioctl: remove nsid from nvme_identify_secondary_ctrl_list()
  * meson: Don't hard-code path to "internal/config.h"
  * fabrics: Do not pass disable_sqflow if not supported
  * fabrics: Read the supported options lazy
  * test: add discovery log page tests
  * test: add infra for mocking passthru ioctls
  * tree: fix segfault in nvme_scan_subsystem() (bsc#1213993)
  * src/nvme/tree.c: make __nvme_scan_subsystem() returning bool (bsc#1213993)
  * doc: fix minor mistake in README.md about dependencies
  * nvme-tree: avoid warning in 'list-subsys' (bsc#1212598)
  * tree: Add getter for subsystem iopolicy (bsc#1124564)
  * fabrics: Consider also all hosts settings for context match
  * tree: Scan all subsystems (bsc#1212598)
  * doc: Fixing compile instruction in README
  * mi: allow non-4-byte-aligned responses
  * mi-mctp: use a linear response buffer
  * mi: implement length and offset alignment checks in admin_xfer()
  * tree: Don't open nvme devices until it's absolutely required
    (bsc#1213527 bsc#1213686)
  * tree: missing closedir() causes fd leak for "/sys/bus/pci/slots"
  * mi: don't return from mi_mctp_submit with a tag held
  * util: Provide empty nvme_ipaddrs_eq for static builds
  * fabrics: Relax match on well known disc ctrl lookup
  * tree: Ignore NULL address pointer for phy slot lookup
  * fabrics: Filter discovery ctrls out during application context check
  * util: Add ignored error code
  * json: Use memory block allocated by realloc() instead printbuf
  * util: Use HAVE_NETDB instead of HAVE_LIBNSS
  * tree: Add PCI physical slot number for controller
  * tree: Use nvme_ipaddrs_eq() to compare IP addresses
  * fabrics: Add EADDRNOTAVAIL error mapping
  * fabrics: filter out subsystems with non-matching application string
  * libnvme: add 'application' setting to nvme_root
  * libnvme: add 'application' setting to the subsystem
  * test: Add more code coverage for nvme_ipaddrs_eq()
  * util: rename ipaddrs_eq() to nvme_ipaddrs_eq() and make public.
  * util: Add ipaddrs_eq() to check whether two IP addresses are equal
  * test: Add unit test for ctrl lookups
  * ioctl: fix RAE bit on last Get Log Page command (bsc#1213618)
  * fabrics: check genctr after getting discovery entries (bsc#1213618)
  * fabrics: handle /dev/nvme-fabrics read failure
  * fabrics: fix potential invalid memory access in __nvmf_supported_option()
  * Python: Fix crash during garbage collection
  * python/swig: Check swig version to determine whether -py3 is needed
  * python/swig: Wrap swig-sensitive struct inside #ifwdef SWIG
  * mi: Add nvme_mi_ctrl_id to retrieve controller ID
  * Python: Suppress swig warnings about unnamed struct
  * examples: fix incorrect controller status in MI info output
  * ioctl: Explicitly initialize all members of struct nvme_ns_mgmt_args
  * Python: make NBFT data more pythonic
  * ioctl: io management send, receive args fix
  * python: Update test data
  * NBFT: Remove documentation from nbft.c since it's also in nbft.h
  * Python: Add NBFT support
  * nbft: Doc typo - Use nvme_nbft_free() instead of nbft_free()
  * nbft: Parse the {HOSTID,HOSTNQN}_CONFIGURED flags
  * nbft: Fix nbft_ssns_flags endianness test
  * nbft: Add a simple unit test
  * doc: Update README
  * build: Simple muon build configuration
  * build: Extend summary section
  * build: Make json-c dependency lookup not fail
  * nbft: Move added symbols to LIBNVME_1_5
  * build: Update wrap mode defaults
  * build: Disable fallback on default
  * tree: Fix offset argument check in nvme_bytes_to_lba
  * nbft: add NBFT v1.0 table support (jsc#PED-1449)
  * types: Add IO command set specific field on nsmgmt
  * fabrics: Do not pass unsupported options to kernel
  * types: Add ns-mgmt host software specified fields
  * types.h: Add FDP related Status Code
  * tree: Fix argument check in nvme_bytes_to_lba</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420800">- Drop unencessary minimum version depedency on meson.
- Re-enable libdbus feature. Upstream defaults changed.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420801">- Enable tests during build
- Set git version tag
- Drop unused make dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696852800">- Use glob for python3-libnvme file listening. Workaround pycache_only
  problems for SLE/Leap builds.
- Drop usused libuuid dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1697112000">- Add missing jsc# tracking references to changelog</changelog>
  <changelog author="mwilck@suse.com" date="1697544000">- Update to version 1.6+5.g68c6ffb:
  * avoid stack corruption by unaligned DMA to user space buffers
    (bsc#1216344, gh#linux-nvme/libnvme#727)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1702987200">- Update to version 1.7+0.gf38b1d7:
  * tree: do not open blk device on default
  * tree: read all attributes from sysfs when available
  * ioctl: set data length when retrieving LBA status
  * types: fix regression for vendor-specific field in nvme_id_ns
  * util: use cleanup functions
  * linux: use cleanup functions
  * json: use cleanup functions
  * fabrics: use cleanup functions
  * tree: use cleanup functions
  * cleanup: add cleanup functions
  * tree: fix incorrect return value
  * tree: Fix clearing application strings
  * libnvme: reshuffle nvme_generate_tls_key_identity()
  * libnvme: fixup error codes
  * libnvme: Implement 'nvme_generate_tls_key_identity()'
  * libnvme: support NVMe TLS identities version 1 (bsc#1219086)
  * libnvme: Add base64 functions
  * libnvme: separate out 'gen_tls_identity' and reshuffle 'derive_nvme_keys'
  * libnvme: separate out a function 'select_hmac'
  * libnvme: fix a memory leak when calling read_ssns()
  * libnvme: fix a memory leak in read_discovery()
  * fabrics: avoid redundant args in nvme_discovery_log()
  * fabrics: have nvmf_get_discovery_log() call nvmf_get_discovery_wargs()
  * fabrics: fetch smaller Discovery Log Page header
  * fabrics: avoid redundant Get Log Page on retry
  * fabrics: clear RAE for discovery log page commands
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * types: add Host Behavior Support field definitions
  * mi: Cast values to u32 if shift overflows int
  * types: Cast values to u32 if shift overflows int
  * test: Avoid unaligned pointer dereferences
  * nbft: Avoid unaligned pointer dereferences
  * types: add cross-namespace copy formats, status codes, ONCS bits
  * nvme: Add length field to Hkdf-Expand-Label computation
  * ioctl: use lsp arg in nvme_get_log_boot_partition
  * fabrics: use SECTYPE to determine whether to use TLS (bsc#1219086)
  * fabrics: Allocate aligned payloads for id_ctrl and discovery log calls
  * linux: Allocate aligned payloads for id_ctrl and id_ns calls
  * ioctl: MSB variable-size storage/reference tags</changelog>
  <changelog author="daniel.wagner@suse.com" date="1703073600">- Update to version 1.7.1+0.g13ba383:
  * tree: do no free ns on error in nvme_ns_init</changelog>
  <changelog author="daniel.wagner@suse.com" date="1707912000">- Update to version 1.8+0.gbff7dda:
  * linux: Explicitly initialize auto-cleanup variables
  * example: fix mi identify failed with error cntid
  * tree: do not issue an error when subsys lookup fails during scanning
  * types: Add controller properties CMBEBS, CMBSWTP and NSSD
  * tests: Add sample NBFT table from Dell PowerEdge R660
  * tests: Add sample NBFT table from Dell PowerEdge R760
  * tests: Fix diffs output for duplicate HFI entries
  * nbft: avoid duplicate entries in ssns-&gt;hfis
  * nbft: Fix (struct nbft_info_subsystem_ns).num_hfis off-by-one
  * test: read and dump sysfs tar file
  * nvme: allow to overwrite hostnqn and hostid
  * nvme: allow to overwrite base sysfs path
  * json: dump the output to the user selected filedescriptor
  * libnvme: export nvme_dump_tree
  * fabrics: add 'concat' option
  * mi: set correct rc and errno when crc mismatch
  * tree: use logical block size for lba
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * build: checkout full repo for checkpatch
  * linux: avoid segfault in check-tls-key due to null hostnqn/subsysnqn (bsc#1219086)
  * meson.build: fixup 'join' syntax
  * util: Explicitly initialize auto-cleanup variables
  * tree: Explicitly initialize auto-cleanup variables
  * linux: Explicitly initialize auto-cleanup variables
  * fabrics: Explicitly initialize auto-cleanup variables
  * util: Added function to find specific UUID in UUID list.
  * build: fix release python tag match
- Disable new unit test which is not running stable in OSB
  * add 0001-build-disable-sysfs-test.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737600">- Update to version 1.9+0.g80c5cf2:
  * types: Added Command and Feature Lockdown LID
  * types: add ASQ, ACQ and BPMBL controller properties definitions
  * types: add controller properties enum documentation
  * types: fix CRTO.CRIMT mask value definition
  * tree: use strtou32 to read lba_size
  * types: Fix PMRWBM register name
  * examples: fix mi-mctp build warning errors
  * test: add CSTS.ST, CAP.CPS and CAP.NSSS registers
  * types: add CAP.CPS and CAP.NSSS definitions
  * types: add enum nvme_cap documentation
  * types: Add enum nvme_unit/cmbebs/cmbswtp/flbas/cmic documentation
  * util: Add string constant for ENVME_CONNECT_IGNORED
  * tests: Add sample NBFT table with mpath IPv4+IPv6 discovery
  * types: add controller status shutdown type (CSTS.ST) definition
  * types: Add enum nvme_csts documentation
  * types: Add NVME_CMIC definitions
  * types: Add CMBSWTP property definitions
  * types: Add NVME_CMBEBS property definitions
  * types: Fix boot partition read offset (BPROF) mask value
  * tree: fix mem leak in nvme_ns_init() (bsc#1223331)
  * fabrics: retry discovery log page when DNR is not set
  * ioctl: return EPROTO when an NVMe status occurred
  * linux: Allocate aligned payload for nvme_get_telemetry_log
  * test: use diff to compare sysfs output (bsc#1226216)
  * tree: fix lba_count size calculation
  * tree: Add NVM subsystem controller identifier (bsc#1224024)
  * test: Add unit test for nvme_id_ns_flbas_to_lbaf_inuse()
  * types: Fix NVME_CSTS_SHST_MASK definition
  * util: Fixed nvme_id_ns_flbas_to_lbaf_inuse()
  * types: Add optional data present filed mask and shift definition
  * types: Fix EOM header optional data present fields definition
  * libnvme : record the nvme pci adapter physical slot (bsc#1223208)
  * sysfs: minimize heap allocations of sysfs paths
  * json: Fix uninitialized variables
  * libnvme: add missing symbol nvme_scan_tls_keys (bsc#1226197)
  * nbft: Whitespace fixes (bsc#1222026)
  * tests: Add complex NBFT table from Dell R660 (bsc#1222026)
  * tests: Adapt to added NBFT SSNS flags (bsc#1222026)
  * nbft: Add SSNS 'discovered' flag (bsc#1222026)
  * nbft: Add SSNS 'unavailable' flag (bsc#1222026)
  * doc: Document the NBFT API (bsc#1222026)
  * ioctl: Move nvme_cmd_dword_fields definitions into header file
  * types: Add PEL set feature event layout definitions
  * types: Fix enum nvme_pel_rci documentation error
  * types: Add boot partition information definitions
  * types: Add PEL header additional information definitions
  * fabrics: keyring is a long (bsc#1216982)
  * config-schema.json.in: tls keys and keyrings are strings (bsc#1216982)
  * linux: Add nvme_scan_tls_keys() (bsc#1216982)
  * json: dump TLS key data in PSK interchange format (bsc#1216982)
  * json: import TLS key from PSK interchange format (bsc#1216982)
  * json: export TLS key in PSK interchange format (bsc#1216982)
  * tree: read TLS key in nvme_configure_ctrl() (bsc#1216982)
  * linux: rework nvme_insert_tls_key_versioned() (bsc#1216982)
  * linux: add nvme_import_tls_key() (bsc#1216982)
  * linux: add nvme_export_tls_key() (bsc#1216982)
  * crc32: Add CRC32 algorithm (bsc#1216982)
  * linux: add nvme_update_key() (bsc#1216982)
  * linux: add nvme_read_key() (bsc#1216982)
  * linux: allow for NULL argument in nvme_lookup_keyring() (bsc#1216982)
  * log: Respect DEFAULT_LOGLEVEL on uninitialized logging
  * log: Introduce nvme_get_logging_level()
  * ioctl: remove incomplete debug logging infrastructure
  * ioctl: export nvme_submit_passthru{64} as weak symbol (bsc#1231668)
  * log: move nvme_{set|get}_debug to log.c
  * fabrics: check the read() return value
  * types: Add PEL reporting context port identifier type definitions
  * types: Add persistent event log reporting context definitions
-  Upstream changed the sysfs test setup, thus sysfs test works in OSB
  * remove 0001-build-disable-sysfs-test.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1722600000">- Update to version 1.10:
  * linux: update TLS version 1 PSK derivation (bsc#1228376)
  * tree: fix nvme_read_config() to not set errno if return 0
  * types: add new fields added in TP4165 (bsc#1231668)
  * types: Changed the space into tap space (bsc#1231668)
  * tree: handle no address phy slot dirs (bsc#1229193)
  * linux: Remove the use of OpenSSL Engine API
  * types: Added new controller attribute as per TP4104
  * tree: add helper to lookup hostnqn/hostid (bsc#1226216)
  * fabrics: extend hostnqn/hostid variable inject interface (bsc#1226216)
  * json: filter out pcie transport (bsc#1226216)
  * tree: preserve parsing order of a config file (bsc#1226216)
  * types: add new field added in TP4099
  * types: add new field added in TP4090 (bsc#1231668)
  * linux: add nvme_revoke_tls_key (bsc#1226197)
  * tree: fix segfault in nvme_free_tree() (bsc#1231668)
  * types: add PEL vendor specific and TCG defined events definitions
  * mi-mctp: initialize the rc variable in handle_mctp_endpoint()
  * linux: avoid potential null pointer dereference
  * linux: add nvme_get_ana_log_len_from_id_ctrl()
  * libnvme: export nvme_mi_admin_get_ana_log_atomic()
  * ioctl: add support for atomic, piecewise ANA log fetch
  * ioctl: replace nvme_ana_rsp_hdr in doc comments
  * ioctl: respect rae in nvme_get_log_ana()
  * ioctl: fix nvme_get_log_ana_groups() pointer type
  * types: add new filed added in TP4141a
  * mi: Probe quirks on first command submission
  * tree: optionally skip namespaces during scanning
  * ioctl: update nvme_set_var_size_tags() to properly use reftag
  * types: add enum for Protection Information Format
  * libnvme: Introduce functions to generate host identifier and host NQN (bsc#1226216)
  * fabrics: Unescape URI elements
  * tests: Add uriparser tests
  * fabrics: Introduce simple URI parser
  * linux: default init cleanup variable
  * linux: Fix uninitialized variables
  * types: add the nvme Cancel command opcode
  * log: split log variables from root object
  * log: keep log level logic in one place
  * mi: restore default ep timeout during admin_passthru
  * mi: fix the rc for nvme_mi_scan_ep
  * ccan/endian.h: Only define __{BIG,LITTLE}_ENDIAN if undefined.
  * Use C99 types for uint32_t
  * mi: fix the return error code.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1730376000">- Update to version 1.11:
  * prefix: Use Request or Response Length in DLEN and DOFF for MI
  * types: Add ETPVDS and SSI fields of sanitize status log
  * json: do not escape strings when printing the configuration
  * tree: do no export tls keys when not provided by user
  * types: add struct nvme_id_ctrl_nvm ver and lbamqf member variables
  * types: add NVMe 2.1 get log page LIDs
  * type: Added enums for ANSAN and RGCNS bit of OAES field
  * linux: fixup PSK HMAC type '0' handling
  * util: added error code for ENOKEY
  * fabrics: fix map error level in __nvmf_add_ctrl
  * fabrics: add ctrl connect interface
  * fabrics: use hex numbers when generating command line options
  * fabrics: rename first argument for argument macros
  * linux: handle key import correctly
  * linux: export keys to config
  * tree: read tls_configured_key and tls_keyring from sysfs
  * tree: move dhchap and tls sysfs parser into separate functions
  * json: move keystore operations out of the JSON parser
  * tree: add getter/setters for TLS PSK
  * linux: add import/export function for TLS pre-shared keys
  * linux: only return the description of a key
  * linux: use ssize_t as return type for nvme_identity_len
  * linux: reorder variable declarations
  * types: Added enum for SMVES event of PEL log
  * libnvme: add lockdown log page support(LID : 0x14)
  * libnvme: add EMVS support to sanitize command
  * types: Add TP4159 PCIe Infrastructure for Live Migration definitions
  * types: add NVME_CTRL_OAES get macro definitions
  * types: add NVME_CTRL_OAES_TTHR definition
  * types: add NVME_CTRL_FNA definitions to get field values
  * types: add NVME_VAL() definition
  * tree: fix tls key mem leak (bsc#1231668)
  * tree: fix dhchap_ctrl_key mem leak (bsc#1231668)
  * tree: fix dhchap_key mem leak (bsc#1231668)
  * types: add NVME_CHECK() definition to check nvme register field value
  * types: add kv opcodes
  * types: added new fields in nvme_nvme_id_ns
  * types: Add enum for Completion Condition of Get LBA status command
  * ioctl: refactoring set_features
  * types: add new fields added in TP4142
  * mi: add control primitive command
  * linux: Correct error handling for derive_psk_digest (bsc#1228376)
  * types: Added new field CSER in enum as per TP4167
- build fix for OpenSSL 1.1
  * add 0001-linux-fix-derive_psk_digest-OpenSSL-1.1-version.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1732536000">- Fix tests on s390
  * add 0002-test-mock-pass-thru-unknown-ioctls.patch</changelog>
  <changelog author="dwagner@suse.de" date="1745323200">- Update to version 1.11+4.ge68a91ae:
  * tree: add routine to fetch subsys firmware rev (bsc#1240518)
  * tree: add routine to fetch subsys model (bsc#1240518)
  * test/mock: pass thru unknown ioctls
  * linux: fix derive_psk_digest OpenSSL 1.1 version
  - Remove merged patches
  * remove 0001-linux-fix-derive_psk_digest-OpenSSL-1.1-version.patch
  * remove 0002-test-mock-pass-thru-unknown-ioctls.patch</changelog>
</package>
<package pkgid="3518b23b5e272629e50fe8fae74365c31a3b01c83f8982304e4f3fe723c8c2e6" name="libnvme-mi1" arch="x86_64">
  <version epoch="0" ver="1.11+6.g0d17be77" rel="150700.4.6.2"/>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 1.2:
  * Add more details for return code of MI admin cmds
  * Parse dhchap_host_key on controller level
  * Update json config schema for missing dhchap host key
  * fabrics: Add new TP8010 definitions
  * fabrics: Add nvmf_get_discovery_wargs()
  * fabrics: Duplicate strings when merging configs
  * fabrics: Filter out empty strings in add_argument()
  * fabrics: Use fallthrough statement
  * ioctl: Set log page offset for nvme_get_log_telemetry_host
  * json-schema: add dhchap_key details to host section
  * json: Enforce correctly formatted JSON config files
  * json: Verify JSON config file starts with an array
  * mi: Add Get Log Page helpers
  * mi: Add Identify function for secondary controller list
  * mi: Add Identify helper for ns-descs and primary-ctrl-caps
  * mi: Add firmware download and commit commands
  * mi: Add identify helper for nsid-capable Controller List
  * mi: Add identify helpers for namespace lists
  * mi: Add identify helpers for namespaces
  * mi: Allow Admin-message sized More Processing Required responses
  * mi: Distinguish MI status from NVMe (CDW3) status
  * mi: Fix C++ compiler errors
  * mi: Implement Format NVM command
  * mi: Implement Get &amp; Set Features Admin commands
  * mi: Implement NS attach command and helpers
  * mi: Implement Namespace Management command and create/delete helpers
  * mi: Implement Sanitize command
  * mi: Init ctrl_id within xfer
  * mi: Introduce a helper for response status, unify values with ioctls
  * mi: Set log page offset for nvme_get_log_telemetry_host
  * mi: add nvme_mi_status_to_string()
  * mi: fix a memory leak in nvme_mi_open_mctp()
  * mi: fix get_log_page chunked offset check
  * nvme-tree: avoid segfault if auth keys are unavailable
  * python: Use nvmf_get_discovery_wargs()
  * tree: rename controller 'dhchap_key' to 'dhchap_ctrl_key'
  * types: Move enum nvme_data_tfr to types
  * util: Add LINE_MAX define
  * util: Add get feature length 2 API to support direction parameter
  * util: Add simple UUID type
  * util: Do not expose fallthrough defines
- Make man page build conditiional. Install man page location has been
  fixed upstream.
- Mark the Python directory own by the libnvme3-python package</changelog>
  <changelog author="daniel.wagner@suse.com" date="1675080000">- Update to version 1.3:
  * Support added for Flexible Data Placement (TP4146)
  * Fabrics: added support for Persistent Discovery Controllers.
  * libnvme-mi added a quirk framework to workaround special behavior of
  certain devices
  * The python binding behaves more friendly in a threading environment
  by release the GIL on blocking calls.
  * Replaced  3the libsystemd dependency with libdbus
  * A lot of small fixes everywhere (leaks, wrong ordering of arguments, ...)
- Update spec file
  * Project depends on meson &gt;= 0.50.0</changelog>
  <changelog author="mwilck@suse.com" date="1675080001">- temporarily disable unit tests on s390x (bsc#1207687, bsc#1207686)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1680264000">- Update to version 1.4: (jsc#PED-553 jsc#PED-3884)
  * fabrics: Filter out invalid UUIDs from DMI
  * fabrics: Add define for DMI sysinfo
  * Print out correct TREQ strings for discovery
  * tree: fix generic device open failure
  * fabrics: add configuration option 'tls_key'
  * fabrics: add configuration option 'keyring'
  * linux: add key helper functions
  * nvme: add 'nvme_insert_tls_key()' function
  * linux: add nvme_lookup_keyring()
  * python: Change python option from combo to feature
  * types: add opcode field to error log page (TP4113)
  * python: Add setter property for controller DHCHAP Key
  * python: Remove redundant host.set_key() method
  * build, meson: Print option summary
  * Python: Add support for setting/getting Host DHCHAP key
  * Python: Add hostnqn_from_file() and hostid_from_file()
  * types: Update position of elbatm in struct nvme_copy_range{_f1}
  * doc: fix kernel-doc-check warning
  * python, meson: Assert that deps are present for -Dpython=true
  * python: Reformat SWIG input file
  * python test: Check there is no SIGSEGV during garbage collection
  * python: Return PyObject* from __str__() instead of a static char[]
  * python: Fix segmentation fault during garbage collection
  * build: Enable test in muon minimal build
  * build: Streamline workflows with nvme-cli
  * mi: Add nvme_mi_admin_get_log_page
  * ioctl: Set file descriptor in nvme_get_log_page()
  * fix endians
  * fabrics: Do not ignore one char whitespace when string sanitizing
- Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
- Fix invalid string lenght calculcation for UUID (bsc#1209906)
- Fix segmentation fault during garbage collection (bsc#1209905)
- Always sanitize traddr and trsvcid entries (bsc#1207435)
- Allow tracking unique discover controllers (bsc#1186689)</changelog>
  <changelog author="ana.guerrero@suse.com" date="1690459200">- Fix build with meson 1.2.0</changelog>
  <changelog author="daniel.wagner@suse.com" date="1695988800">- Update to version 1.6: (jsc#PED-3610 jsc#PED-4879 jsc#PED-5061)
  * docs: Fix Read-the-Docs configuration (deprecated config param)
  * mi-mctp: Fix free() in error path of mi_open_mctp
  * types: Use NVME_SET for status type mask to get status value
  * types: Define FLBAS MASK and SHIFT to use NVME_GET
  * types: Support Phy Rx Eye Opening Measurement Log
  * log: Add nvme root global variable to set for default output
  * types: Add support for the OAQD ID controller field
  * test: use non deprecated API
  * test: add tests for Get/Set Features functions
  * ioctl: implement nvme_set_features_lba_range()
  * ioctl: pass NSID in Get/Set Features commands that use it
  * ioctl: fix swapped parameters in nvme_set_features_host_id()
  * ioctl: export nvme_{g,s}et_features_iocs_profile()
  * ioctl: pass ENDGID in nvme_get_features_endurance_event_cfg()
  * ioctl: don't set SAVE bit on unsaveable features
  * ioctl: avoid sending uninitialized timestamp
  * ioctl: pass data for Get/Set Features commands
  * ioctl: set correct bits in Set Features commands
  * ioctl: correct feature IDs in Get/Set Features commands
  * tree: Add 2 new public functions to lookup existing controllers
  * ioctl: Add debugging feature to show command outputs
  * Fix incorrect article 'an' as 'a' to use for a description
  * linux: Added functions to enable faster telemetry data retrieval. Moved telemetry data area support detection into separate function. Added possibility to modify data transfer chunk size. Enable telemetry extraction up to specified data area. Removed some printf() and perror().
  * test: account for discovery log page entry stripping
  * fabrics: unconditionally strip discovery entry strings
  * fabrics: only look for spaces in strchomp()
  * tree: Use early return instead of else statements
  * test: fix lookup test case
  * test: make all function static
  * test: add tests for new tcp controller matching algorithm
  * tree: Improve TCP controller matching algorithm
  * util: Add functions to parse the system's interfaces
  * types: Add support for EGFEAT, Domain Identifier, TEGCAP and UEGCAP
  * mi: remove nsid from nvme_mi_admin_identify_secondary_ctrl_list()
  * test: add tests for nvme_ctrl_get_src_addr()
  * tree: Add nvme_ctrl_get_src_addr() to get the controller's src_addr
  * util: Split _nvme_ipaddrs_eq() from nvme_ipaddrs_eq()
  * test: add tests for Identify functions
  * ioctl: use available Identify helper functions
  * test: pass a large enough buffer to nvme_identify_ns_descs()
  * ioctl: remove nsid from nvme_identify_secondary_ctrl_list()
  * meson: Don't hard-code path to "internal/config.h"
  * fabrics: Do not pass disable_sqflow if not supported
  * fabrics: Read the supported options lazy
  * test: add discovery log page tests
  * test: add infra for mocking passthru ioctls
  * tree: fix segfault in nvme_scan_subsystem() (bsc#1213993)
  * src/nvme/tree.c: make __nvme_scan_subsystem() returning bool (bsc#1213993)
  * doc: fix minor mistake in README.md about dependencies
  * nvme-tree: avoid warning in 'list-subsys' (bsc#1212598)
  * tree: Add getter for subsystem iopolicy (bsc#1124564)
  * fabrics: Consider also all hosts settings for context match
  * tree: Scan all subsystems (bsc#1212598)
  * doc: Fixing compile instruction in README
  * mi: allow non-4-byte-aligned responses
  * mi-mctp: use a linear response buffer
  * mi: implement length and offset alignment checks in admin_xfer()
  * tree: Don't open nvme devices until it's absolutely required
    (bsc#1213527 bsc#1213686)
  * tree: missing closedir() causes fd leak for "/sys/bus/pci/slots"
  * mi: don't return from mi_mctp_submit with a tag held
  * util: Provide empty nvme_ipaddrs_eq for static builds
  * fabrics: Relax match on well known disc ctrl lookup
  * tree: Ignore NULL address pointer for phy slot lookup
  * fabrics: Filter discovery ctrls out during application context check
  * util: Add ignored error code
  * json: Use memory block allocated by realloc() instead printbuf
  * util: Use HAVE_NETDB instead of HAVE_LIBNSS
  * tree: Add PCI physical slot number for controller
  * tree: Use nvme_ipaddrs_eq() to compare IP addresses
  * fabrics: Add EADDRNOTAVAIL error mapping
  * fabrics: filter out subsystems with non-matching application string
  * libnvme: add 'application' setting to nvme_root
  * libnvme: add 'application' setting to the subsystem
  * test: Add more code coverage for nvme_ipaddrs_eq()
  * util: rename ipaddrs_eq() to nvme_ipaddrs_eq() and make public.
  * util: Add ipaddrs_eq() to check whether two IP addresses are equal
  * test: Add unit test for ctrl lookups
  * ioctl: fix RAE bit on last Get Log Page command (bsc#1213618)
  * fabrics: check genctr after getting discovery entries (bsc#1213618)
  * fabrics: handle /dev/nvme-fabrics read failure
  * fabrics: fix potential invalid memory access in __nvmf_supported_option()
  * Python: Fix crash during garbage collection
  * python/swig: Check swig version to determine whether -py3 is needed
  * python/swig: Wrap swig-sensitive struct inside #ifwdef SWIG
  * mi: Add nvme_mi_ctrl_id to retrieve controller ID
  * Python: Suppress swig warnings about unnamed struct
  * examples: fix incorrect controller status in MI info output
  * ioctl: Explicitly initialize all members of struct nvme_ns_mgmt_args
  * Python: make NBFT data more pythonic
  * ioctl: io management send, receive args fix
  * python: Update test data
  * NBFT: Remove documentation from nbft.c since it's also in nbft.h
  * Python: Add NBFT support
  * nbft: Doc typo - Use nvme_nbft_free() instead of nbft_free()
  * nbft: Parse the {HOSTID,HOSTNQN}_CONFIGURED flags
  * nbft: Fix nbft_ssns_flags endianness test
  * nbft: Add a simple unit test
  * doc: Update README
  * build: Simple muon build configuration
  * build: Extend summary section
  * build: Make json-c dependency lookup not fail
  * nbft: Move added symbols to LIBNVME_1_5
  * build: Update wrap mode defaults
  * build: Disable fallback on default
  * tree: Fix offset argument check in nvme_bytes_to_lba
  * nbft: add NBFT v1.0 table support (jsc#PED-1449)
  * types: Add IO command set specific field on nsmgmt
  * fabrics: Do not pass unsupported options to kernel
  * types: Add ns-mgmt host software specified fields
  * types.h: Add FDP related Status Code
  * tree: Fix argument check in nvme_bytes_to_lba</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420800">- Drop unencessary minimum version depedency on meson.
- Re-enable libdbus feature. Upstream defaults changed.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420801">- Enable tests during build
- Set git version tag
- Drop unused make dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696852800">- Use glob for python3-libnvme file listening. Workaround pycache_only
  problems for SLE/Leap builds.
- Drop usused libuuid dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1697112000">- Add missing jsc# tracking references to changelog</changelog>
  <changelog author="mwilck@suse.com" date="1697544000">- Update to version 1.6+5.g68c6ffb:
  * avoid stack corruption by unaligned DMA to user space buffers
    (bsc#1216344, gh#linux-nvme/libnvme#727)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1702987200">- Update to version 1.7+0.gf38b1d7:
  * tree: do not open blk device on default
  * tree: read all attributes from sysfs when available
  * ioctl: set data length when retrieving LBA status
  * types: fix regression for vendor-specific field in nvme_id_ns
  * util: use cleanup functions
  * linux: use cleanup functions
  * json: use cleanup functions
  * fabrics: use cleanup functions
  * tree: use cleanup functions
  * cleanup: add cleanup functions
  * tree: fix incorrect return value
  * tree: Fix clearing application strings
  * libnvme: reshuffle nvme_generate_tls_key_identity()
  * libnvme: fixup error codes
  * libnvme: Implement 'nvme_generate_tls_key_identity()'
  * libnvme: support NVMe TLS identities version 1 (bsc#1219086)
  * libnvme: Add base64 functions
  * libnvme: separate out 'gen_tls_identity' and reshuffle 'derive_nvme_keys'
  * libnvme: separate out a function 'select_hmac'
  * libnvme: fix a memory leak when calling read_ssns()
  * libnvme: fix a memory leak in read_discovery()
  * fabrics: avoid redundant args in nvme_discovery_log()
  * fabrics: have nvmf_get_discovery_log() call nvmf_get_discovery_wargs()
  * fabrics: fetch smaller Discovery Log Page header
  * fabrics: avoid redundant Get Log Page on retry
  * fabrics: clear RAE for discovery log page commands
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * types: add Host Behavior Support field definitions
  * mi: Cast values to u32 if shift overflows int
  * types: Cast values to u32 if shift overflows int
  * test: Avoid unaligned pointer dereferences
  * nbft: Avoid unaligned pointer dereferences
  * types: add cross-namespace copy formats, status codes, ONCS bits
  * nvme: Add length field to Hkdf-Expand-Label computation
  * ioctl: use lsp arg in nvme_get_log_boot_partition
  * fabrics: use SECTYPE to determine whether to use TLS (bsc#1219086)
  * fabrics: Allocate aligned payloads for id_ctrl and discovery log calls
  * linux: Allocate aligned payloads for id_ctrl and id_ns calls
  * ioctl: MSB variable-size storage/reference tags</changelog>
  <changelog author="daniel.wagner@suse.com" date="1703073600">- Update to version 1.7.1+0.g13ba383:
  * tree: do no free ns on error in nvme_ns_init</changelog>
  <changelog author="daniel.wagner@suse.com" date="1707912000">- Update to version 1.8+0.gbff7dda:
  * linux: Explicitly initialize auto-cleanup variables
  * example: fix mi identify failed with error cntid
  * tree: do not issue an error when subsys lookup fails during scanning
  * types: Add controller properties CMBEBS, CMBSWTP and NSSD
  * tests: Add sample NBFT table from Dell PowerEdge R660
  * tests: Add sample NBFT table from Dell PowerEdge R760
  * tests: Fix diffs output for duplicate HFI entries
  * nbft: avoid duplicate entries in ssns-&gt;hfis
  * nbft: Fix (struct nbft_info_subsystem_ns).num_hfis off-by-one
  * test: read and dump sysfs tar file
  * nvme: allow to overwrite hostnqn and hostid
  * nvme: allow to overwrite base sysfs path
  * json: dump the output to the user selected filedescriptor
  * libnvme: export nvme_dump_tree
  * fabrics: add 'concat' option
  * mi: set correct rc and errno when crc mismatch
  * tree: use logical block size for lba
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * build: checkout full repo for checkpatch
  * linux: avoid segfault in check-tls-key due to null hostnqn/subsysnqn (bsc#1219086)
  * meson.build: fixup 'join' syntax
  * util: Explicitly initialize auto-cleanup variables
  * tree: Explicitly initialize auto-cleanup variables
  * linux: Explicitly initialize auto-cleanup variables
  * fabrics: Explicitly initialize auto-cleanup variables
  * util: Added function to find specific UUID in UUID list.
  * build: fix release python tag match
- Disable new unit test which is not running stable in OSB
  * add 0001-build-disable-sysfs-test.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737600">- Update to version 1.9+0.g80c5cf2:
  * types: Added Command and Feature Lockdown LID
  * types: add ASQ, ACQ and BPMBL controller properties definitions
  * types: add controller properties enum documentation
  * types: fix CRTO.CRIMT mask value definition
  * tree: use strtou32 to read lba_size
  * types: Fix PMRWBM register name
  * examples: fix mi-mctp build warning errors
  * test: add CSTS.ST, CAP.CPS and CAP.NSSS registers
  * types: add CAP.CPS and CAP.NSSS definitions
  * types: add enum nvme_cap documentation
  * types: Add enum nvme_unit/cmbebs/cmbswtp/flbas/cmic documentation
  * util: Add string constant for ENVME_CONNECT_IGNORED
  * tests: Add sample NBFT table with mpath IPv4+IPv6 discovery
  * types: add controller status shutdown type (CSTS.ST) definition
  * types: Add enum nvme_csts documentation
  * types: Add NVME_CMIC definitions
  * types: Add CMBSWTP property definitions
  * types: Add NVME_CMBEBS property definitions
  * types: Fix boot partition read offset (BPROF) mask value
  * tree: fix mem leak in nvme_ns_init() (bsc#1223331)
  * fabrics: retry discovery log page when DNR is not set
  * ioctl: return EPROTO when an NVMe status occurred
  * linux: Allocate aligned payload for nvme_get_telemetry_log
  * test: use diff to compare sysfs output (bsc#1226216)
  * tree: fix lba_count size calculation
  * tree: Add NVM subsystem controller identifier (bsc#1224024)
  * test: Add unit test for nvme_id_ns_flbas_to_lbaf_inuse()
  * types: Fix NVME_CSTS_SHST_MASK definition
  * util: Fixed nvme_id_ns_flbas_to_lbaf_inuse()
  * types: Add optional data present filed mask and shift definition
  * types: Fix EOM header optional data present fields definition
  * libnvme : record the nvme pci adapter physical slot (bsc#1223208)
  * sysfs: minimize heap allocations of sysfs paths
  * json: Fix uninitialized variables
  * libnvme: add missing symbol nvme_scan_tls_keys (bsc#1226197)
  * nbft: Whitespace fixes (bsc#1222026)
  * tests: Add complex NBFT table from Dell R660 (bsc#1222026)
  * tests: Adapt to added NBFT SSNS flags (bsc#1222026)
  * nbft: Add SSNS 'discovered' flag (bsc#1222026)
  * nbft: Add SSNS 'unavailable' flag (bsc#1222026)
  * doc: Document the NBFT API (bsc#1222026)
  * ioctl: Move nvme_cmd_dword_fields definitions into header file
  * types: Add PEL set feature event layout definitions
  * types: Fix enum nvme_pel_rci documentation error
  * types: Add boot partition information definitions
  * types: Add PEL header additional information definitions
  * fabrics: keyring is a long (bsc#1216982)
  * config-schema.json.in: tls keys and keyrings are strings (bsc#1216982)
  * linux: Add nvme_scan_tls_keys() (bsc#1216982)
  * json: dump TLS key data in PSK interchange format (bsc#1216982)
  * json: import TLS key from PSK interchange format (bsc#1216982)
  * json: export TLS key in PSK interchange format (bsc#1216982)
  * tree: read TLS key in nvme_configure_ctrl() (bsc#1216982)
  * linux: rework nvme_insert_tls_key_versioned() (bsc#1216982)
  * linux: add nvme_import_tls_key() (bsc#1216982)
  * linux: add nvme_export_tls_key() (bsc#1216982)
  * crc32: Add CRC32 algorithm (bsc#1216982)
  * linux: add nvme_update_key() (bsc#1216982)
  * linux: add nvme_read_key() (bsc#1216982)
  * linux: allow for NULL argument in nvme_lookup_keyring() (bsc#1216982)
  * log: Respect DEFAULT_LOGLEVEL on uninitialized logging
  * log: Introduce nvme_get_logging_level()
  * ioctl: remove incomplete debug logging infrastructure
  * ioctl: export nvme_submit_passthru{64} as weak symbol (bsc#1231668)
  * log: move nvme_{set|get}_debug to log.c
  * fabrics: check the read() return value
  * types: Add PEL reporting context port identifier type definitions
  * types: Add persistent event log reporting context definitions
-  Upstream changed the sysfs test setup, thus sysfs test works in OSB
  * remove 0001-build-disable-sysfs-test.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1722600000">- Update to version 1.10:
  * linux: update TLS version 1 PSK derivation (bsc#1228376)
  * tree: fix nvme_read_config() to not set errno if return 0
  * types: add new fields added in TP4165 (bsc#1231668)
  * types: Changed the space into tap space (bsc#1231668)
  * tree: handle no address phy slot dirs (bsc#1229193)
  * linux: Remove the use of OpenSSL Engine API
  * types: Added new controller attribute as per TP4104
  * tree: add helper to lookup hostnqn/hostid (bsc#1226216)
  * fabrics: extend hostnqn/hostid variable inject interface (bsc#1226216)
  * json: filter out pcie transport (bsc#1226216)
  * tree: preserve parsing order of a config file (bsc#1226216)
  * types: add new field added in TP4099
  * types: add new field added in TP4090 (bsc#1231668)
  * linux: add nvme_revoke_tls_key (bsc#1226197)
  * tree: fix segfault in nvme_free_tree() (bsc#1231668)
  * types: add PEL vendor specific and TCG defined events definitions
  * mi-mctp: initialize the rc variable in handle_mctp_endpoint()
  * linux: avoid potential null pointer dereference
  * linux: add nvme_get_ana_log_len_from_id_ctrl()
  * libnvme: export nvme_mi_admin_get_ana_log_atomic()
  * ioctl: add support for atomic, piecewise ANA log fetch
  * ioctl: replace nvme_ana_rsp_hdr in doc comments
  * ioctl: respect rae in nvme_get_log_ana()
  * ioctl: fix nvme_get_log_ana_groups() pointer type
  * types: add new filed added in TP4141a
  * mi: Probe quirks on first command submission
  * tree: optionally skip namespaces during scanning
  * ioctl: update nvme_set_var_size_tags() to properly use reftag
  * types: add enum for Protection Information Format
  * libnvme: Introduce functions to generate host identifier and host NQN (bsc#1226216)
  * fabrics: Unescape URI elements
  * tests: Add uriparser tests
  * fabrics: Introduce simple URI parser
  * linux: default init cleanup variable
  * linux: Fix uninitialized variables
  * types: add the nvme Cancel command opcode
  * log: split log variables from root object
  * log: keep log level logic in one place
  * mi: restore default ep timeout during admin_passthru
  * mi: fix the rc for nvme_mi_scan_ep
  * ccan/endian.h: Only define __{BIG,LITTLE}_ENDIAN if undefined.
  * Use C99 types for uint32_t
  * mi: fix the return error code.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1730376000">- Update to version 1.11:
  * prefix: Use Request or Response Length in DLEN and DOFF for MI
  * types: Add ETPVDS and SSI fields of sanitize status log
  * json: do not escape strings when printing the configuration
  * tree: do no export tls keys when not provided by user
  * types: add struct nvme_id_ctrl_nvm ver and lbamqf member variables
  * types: add NVMe 2.1 get log page LIDs
  * type: Added enums for ANSAN and RGCNS bit of OAES field
  * linux: fixup PSK HMAC type '0' handling
  * util: added error code for ENOKEY
  * fabrics: fix map error level in __nvmf_add_ctrl
  * fabrics: add ctrl connect interface
  * fabrics: use hex numbers when generating command line options
  * fabrics: rename first argument for argument macros
  * linux: handle key import correctly
  * linux: export keys to config
  * tree: read tls_configured_key and tls_keyring from sysfs
  * tree: move dhchap and tls sysfs parser into separate functions
  * json: move keystore operations out of the JSON parser
  * tree: add getter/setters for TLS PSK
  * linux: add import/export function for TLS pre-shared keys
  * linux: only return the description of a key
  * linux: use ssize_t as return type for nvme_identity_len
  * linux: reorder variable declarations
  * types: Added enum for SMVES event of PEL log
  * libnvme: add lockdown log page support(LID : 0x14)
  * libnvme: add EMVS support to sanitize command
  * types: Add TP4159 PCIe Infrastructure for Live Migration definitions
  * types: add NVME_CTRL_OAES get macro definitions
  * types: add NVME_CTRL_OAES_TTHR definition
  * types: add NVME_CTRL_FNA definitions to get field values
  * types: add NVME_VAL() definition
  * tree: fix tls key mem leak (bsc#1231668)
  * tree: fix dhchap_ctrl_key mem leak (bsc#1231668)
  * tree: fix dhchap_key mem leak (bsc#1231668)
  * types: add NVME_CHECK() definition to check nvme register field value
  * types: add kv opcodes
  * types: added new fields in nvme_nvme_id_ns
  * types: Add enum for Completion Condition of Get LBA status command
  * ioctl: refactoring set_features
  * types: add new fields added in TP4142
  * mi: add control primitive command
  * linux: Correct error handling for derive_psk_digest (bsc#1228376)
  * types: Added new field CSER in enum as per TP4167
- build fix for OpenSSL 1.1
  * add 0001-linux-fix-derive_psk_digest-OpenSSL-1.1-version.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1732536000">- Fix tests on s390
  * add 0002-test-mock-pass-thru-unknown-ioctls.patch</changelog>
  <changelog author="dwagner@suse.de" date="1745323200">- Update to version 1.11+4.ge68a91ae:
  * tree: add routine to fetch subsys firmware rev (bsc#1240518)
  * tree: add routine to fetch subsys model (bsc#1240518)
  * test/mock: pass thru unknown ioctls
  * linux: fix derive_psk_digest OpenSSL 1.1 version
  - Remove merged patches
  * remove 0001-linux-fix-derive_psk_digest-OpenSSL-1.1-version.patch
  * remove 0002-test-mock-pass-thru-unknown-ioctls.patch</changelog>
  <changelog author="dwagner@suse.de" date="1753185600">- Update to version 1.11+6.g0d17be77:
  * tree: free ctrl attributes when (re)configure ctrl (bsc#1243716)
  * tree: filter tree after scan has completed (bsc#1243716)</changelog>
</package>
<package pkgid="355d108f57c2ea76cd85cb47adc2f21c6d7aa0b23d08cb936d7216259c606315" name="libnvme-mi1" arch="x86_64">
  <version epoch="0" ver="1.11+8.gfb9b581c" rel="150700.4.9.1"/>
  <changelog author="daniel.wagner@suse.com" date="1675080000">- Update to version 1.3:
  * Support added for Flexible Data Placement (TP4146)
  * Fabrics: added support for Persistent Discovery Controllers.
  * libnvme-mi added a quirk framework to workaround special behavior of
  certain devices
  * The python binding behaves more friendly in a threading environment
  by release the GIL on blocking calls.
  * Replaced  3the libsystemd dependency with libdbus
  * A lot of small fixes everywhere (leaks, wrong ordering of arguments, ...)
- Update spec file
  * Project depends on meson &gt;= 0.50.0</changelog>
  <changelog author="mwilck@suse.com" date="1675080001">- temporarily disable unit tests on s390x (bsc#1207687, bsc#1207686)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1680264000">- Update to version 1.4: (jsc#PED-553 jsc#PED-3884)
  * fabrics: Filter out invalid UUIDs from DMI
  * fabrics: Add define for DMI sysinfo
  * Print out correct TREQ strings for discovery
  * tree: fix generic device open failure
  * fabrics: add configuration option 'tls_key'
  * fabrics: add configuration option 'keyring'
  * linux: add key helper functions
  * nvme: add 'nvme_insert_tls_key()' function
  * linux: add nvme_lookup_keyring()
  * python: Change python option from combo to feature
  * types: add opcode field to error log page (TP4113)
  * python: Add setter property for controller DHCHAP Key
  * python: Remove redundant host.set_key() method
  * build, meson: Print option summary
  * Python: Add support for setting/getting Host DHCHAP key
  * Python: Add hostnqn_from_file() and hostid_from_file()
  * types: Update position of elbatm in struct nvme_copy_range{_f1}
  * doc: fix kernel-doc-check warning
  * python, meson: Assert that deps are present for -Dpython=true
  * python: Reformat SWIG input file
  * python test: Check there is no SIGSEGV during garbage collection
  * python: Return PyObject* from __str__() instead of a static char[]
  * python: Fix segmentation fault during garbage collection
  * build: Enable test in muon minimal build
  * build: Streamline workflows with nvme-cli
  * mi: Add nvme_mi_admin_get_log_page
  * ioctl: Set file descriptor in nvme_get_log_page()
  * fix endians
  * fabrics: Do not ignore one char whitespace when string sanitizing
- Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
- Fix invalid string lenght calculcation for UUID (bsc#1209906)
- Fix segmentation fault during garbage collection (bsc#1209905)
- Always sanitize traddr and trsvcid entries (bsc#1207435)
- Allow tracking unique discover controllers (bsc#1186689)</changelog>
  <changelog author="ana.guerrero@suse.com" date="1690459200">- Fix build with meson 1.2.0</changelog>
  <changelog author="daniel.wagner@suse.com" date="1695988800">- Update to version 1.6: (jsc#PED-3610 jsc#PED-4879 jsc#PED-5061)
  * docs: Fix Read-the-Docs configuration (deprecated config param)
  * mi-mctp: Fix free() in error path of mi_open_mctp
  * types: Use NVME_SET for status type mask to get status value
  * types: Define FLBAS MASK and SHIFT to use NVME_GET
  * types: Support Phy Rx Eye Opening Measurement Log
  * log: Add nvme root global variable to set for default output
  * types: Add support for the OAQD ID controller field
  * test: use non deprecated API
  * test: add tests for Get/Set Features functions
  * ioctl: implement nvme_set_features_lba_range()
  * ioctl: pass NSID in Get/Set Features commands that use it
  * ioctl: fix swapped parameters in nvme_set_features_host_id()
  * ioctl: export nvme_{g,s}et_features_iocs_profile()
  * ioctl: pass ENDGID in nvme_get_features_endurance_event_cfg()
  * ioctl: don't set SAVE bit on unsaveable features
  * ioctl: avoid sending uninitialized timestamp
  * ioctl: pass data for Get/Set Features commands
  * ioctl: set correct bits in Set Features commands
  * ioctl: correct feature IDs in Get/Set Features commands
  * tree: Add 2 new public functions to lookup existing controllers
  * ioctl: Add debugging feature to show command outputs
  * Fix incorrect article 'an' as 'a' to use for a description
  * linux: Added functions to enable faster telemetry data retrieval. Moved telemetry data area support detection into separate function. Added possibility to modify data transfer chunk size. Enable telemetry extraction up to specified data area. Removed some printf() and perror().
  * test: account for discovery log page entry stripping
  * fabrics: unconditionally strip discovery entry strings
  * fabrics: only look for spaces in strchomp()
  * tree: Use early return instead of else statements
  * test: fix lookup test case
  * test: make all function static
  * test: add tests for new tcp controller matching algorithm
  * tree: Improve TCP controller matching algorithm
  * util: Add functions to parse the system's interfaces
  * types: Add support for EGFEAT, Domain Identifier, TEGCAP and UEGCAP
  * mi: remove nsid from nvme_mi_admin_identify_secondary_ctrl_list()
  * test: add tests for nvme_ctrl_get_src_addr()
  * tree: Add nvme_ctrl_get_src_addr() to get the controller's src_addr
  * util: Split _nvme_ipaddrs_eq() from nvme_ipaddrs_eq()
  * test: add tests for Identify functions
  * ioctl: use available Identify helper functions
  * test: pass a large enough buffer to nvme_identify_ns_descs()
  * ioctl: remove nsid from nvme_identify_secondary_ctrl_list()
  * meson: Don't hard-code path to "internal/config.h"
  * fabrics: Do not pass disable_sqflow if not supported
  * fabrics: Read the supported options lazy
  * test: add discovery log page tests
  * test: add infra for mocking passthru ioctls
  * tree: fix segfault in nvme_scan_subsystem() (bsc#1213993)
  * src/nvme/tree.c: make __nvme_scan_subsystem() returning bool (bsc#1213993)
  * doc: fix minor mistake in README.md about dependencies
  * nvme-tree: avoid warning in 'list-subsys' (bsc#1212598)
  * tree: Add getter for subsystem iopolicy (bsc#1124564)
  * fabrics: Consider also all hosts settings for context match
  * tree: Scan all subsystems (bsc#1212598)
  * doc: Fixing compile instruction in README
  * mi: allow non-4-byte-aligned responses
  * mi-mctp: use a linear response buffer
  * mi: implement length and offset alignment checks in admin_xfer()
  * tree: Don't open nvme devices until it's absolutely required
    (bsc#1213527 bsc#1213686)
  * tree: missing closedir() causes fd leak for "/sys/bus/pci/slots"
  * mi: don't return from mi_mctp_submit with a tag held
  * util: Provide empty nvme_ipaddrs_eq for static builds
  * fabrics: Relax match on well known disc ctrl lookup
  * tree: Ignore NULL address pointer for phy slot lookup
  * fabrics: Filter discovery ctrls out during application context check
  * util: Add ignored error code
  * json: Use memory block allocated by realloc() instead printbuf
  * util: Use HAVE_NETDB instead of HAVE_LIBNSS
  * tree: Add PCI physical slot number for controller
  * tree: Use nvme_ipaddrs_eq() to compare IP addresses
  * fabrics: Add EADDRNOTAVAIL error mapping
  * fabrics: filter out subsystems with non-matching application string
  * libnvme: add 'application' setting to nvme_root
  * libnvme: add 'application' setting to the subsystem
  * test: Add more code coverage for nvme_ipaddrs_eq()
  * util: rename ipaddrs_eq() to nvme_ipaddrs_eq() and make public.
  * util: Add ipaddrs_eq() to check whether two IP addresses are equal
  * test: Add unit test for ctrl lookups
  * ioctl: fix RAE bit on last Get Log Page command (bsc#1213618)
  * fabrics: check genctr after getting discovery entries (bsc#1213618)
  * fabrics: handle /dev/nvme-fabrics read failure
  * fabrics: fix potential invalid memory access in __nvmf_supported_option()
  * Python: Fix crash during garbage collection
  * python/swig: Check swig version to determine whether -py3 is needed
  * python/swig: Wrap swig-sensitive struct inside #ifwdef SWIG
  * mi: Add nvme_mi_ctrl_id to retrieve controller ID
  * Python: Suppress swig warnings about unnamed struct
  * examples: fix incorrect controller status in MI info output
  * ioctl: Explicitly initialize all members of struct nvme_ns_mgmt_args
  * Python: make NBFT data more pythonic
  * ioctl: io management send, receive args fix
  * python: Update test data
  * NBFT: Remove documentation from nbft.c since it's also in nbft.h
  * Python: Add NBFT support
  * nbft: Doc typo - Use nvme_nbft_free() instead of nbft_free()
  * nbft: Parse the {HOSTID,HOSTNQN}_CONFIGURED flags
  * nbft: Fix nbft_ssns_flags endianness test
  * nbft: Add a simple unit test
  * doc: Update README
  * build: Simple muon build configuration
  * build: Extend summary section
  * build: Make json-c dependency lookup not fail
  * nbft: Move added symbols to LIBNVME_1_5
  * build: Update wrap mode defaults
  * build: Disable fallback on default
  * tree: Fix offset argument check in nvme_bytes_to_lba
  * nbft: add NBFT v1.0 table support (jsc#PED-1449)
  * types: Add IO command set specific field on nsmgmt
  * fabrics: Do not pass unsupported options to kernel
  * types: Add ns-mgmt host software specified fields
  * types.h: Add FDP related Status Code
  * tree: Fix argument check in nvme_bytes_to_lba</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420800">- Drop unencessary minimum version depedency on meson.
- Re-enable libdbus feature. Upstream defaults changed.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420801">- Enable tests during build
- Set git version tag
- Drop unused make dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696852800">- Use glob for python3-libnvme file listening. Workaround pycache_only
  problems for SLE/Leap builds.
- Drop usused libuuid dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1697112000">- Add missing jsc# tracking references to changelog</changelog>
  <changelog author="mwilck@suse.com" date="1697544000">- Update to version 1.6+5.g68c6ffb:
  * avoid stack corruption by unaligned DMA to user space buffers
    (bsc#1216344, gh#linux-nvme/libnvme#727)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1702987200">- Update to version 1.7+0.gf38b1d7:
  * tree: do not open blk device on default
  * tree: read all attributes from sysfs when available
  * ioctl: set data length when retrieving LBA status
  * types: fix regression for vendor-specific field in nvme_id_ns
  * util: use cleanup functions
  * linux: use cleanup functions
  * json: use cleanup functions
  * fabrics: use cleanup functions
  * tree: use cleanup functions
  * cleanup: add cleanup functions
  * tree: fix incorrect return value
  * tree: Fix clearing application strings
  * libnvme: reshuffle nvme_generate_tls_key_identity()
  * libnvme: fixup error codes
  * libnvme: Implement 'nvme_generate_tls_key_identity()'
  * libnvme: support NVMe TLS identities version 1 (bsc#1219086)
  * libnvme: Add base64 functions
  * libnvme: separate out 'gen_tls_identity' and reshuffle 'derive_nvme_keys'
  * libnvme: separate out a function 'select_hmac'
  * libnvme: fix a memory leak when calling read_ssns()
  * libnvme: fix a memory leak in read_discovery()
  * fabrics: avoid redundant args in nvme_discovery_log()
  * fabrics: have nvmf_get_discovery_log() call nvmf_get_discovery_wargs()
  * fabrics: fetch smaller Discovery Log Page header
  * fabrics: avoid redundant Get Log Page on retry
  * fabrics: clear RAE for discovery log page commands
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * types: add Host Behavior Support field definitions
  * mi: Cast values to u32 if shift overflows int
  * types: Cast values to u32 if shift overflows int
  * test: Avoid unaligned pointer dereferences
  * nbft: Avoid unaligned pointer dereferences
  * types: add cross-namespace copy formats, status codes, ONCS bits
  * nvme: Add length field to Hkdf-Expand-Label computation
  * ioctl: use lsp arg in nvme_get_log_boot_partition
  * fabrics: use SECTYPE to determine whether to use TLS (bsc#1219086)
  * fabrics: Allocate aligned payloads for id_ctrl and discovery log calls
  * linux: Allocate aligned payloads for id_ctrl and id_ns calls
  * ioctl: MSB variable-size storage/reference tags</changelog>
  <changelog author="daniel.wagner@suse.com" date="1703073600">- Update to version 1.7.1+0.g13ba383:
  * tree: do no free ns on error in nvme_ns_init</changelog>
  <changelog author="daniel.wagner@suse.com" date="1707912000">- Update to version 1.8+0.gbff7dda:
  * linux: Explicitly initialize auto-cleanup variables
  * example: fix mi identify failed with error cntid
  * tree: do not issue an error when subsys lookup fails during scanning
  * types: Add controller properties CMBEBS, CMBSWTP and NSSD
  * tests: Add sample NBFT table from Dell PowerEdge R660
  * tests: Add sample NBFT table from Dell PowerEdge R760
  * tests: Fix diffs output for duplicate HFI entries
  * nbft: avoid duplicate entries in ssns-&gt;hfis
  * nbft: Fix (struct nbft_info_subsystem_ns).num_hfis off-by-one
  * test: read and dump sysfs tar file
  * nvme: allow to overwrite hostnqn and hostid
  * nvme: allow to overwrite base sysfs path
  * json: dump the output to the user selected filedescriptor
  * libnvme: export nvme_dump_tree
  * fabrics: add 'concat' option
  * mi: set correct rc and errno when crc mismatch
  * tree: use logical block size for lba
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * build: checkout full repo for checkpatch
  * linux: avoid segfault in check-tls-key due to null hostnqn/subsysnqn (bsc#1219086)
  * meson.build: fixup 'join' syntax
  * util: Explicitly initialize auto-cleanup variables
  * tree: Explicitly initialize auto-cleanup variables
  * linux: Explicitly initialize auto-cleanup variables
  * fabrics: Explicitly initialize auto-cleanup variables
  * util: Added function to find specific UUID in UUID list.
  * build: fix release python tag match
- Disable new unit test which is not running stable in OSB
  * add 0001-build-disable-sysfs-test.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737600">- Update to version 1.9+0.g80c5cf2:
  * types: Added Command and Feature Lockdown LID
  * types: add ASQ, ACQ and BPMBL controller properties definitions
  * types: add controller properties enum documentation
  * types: fix CRTO.CRIMT mask value definition
  * tree: use strtou32 to read lba_size
  * types: Fix PMRWBM register name
  * examples: fix mi-mctp build warning errors
  * test: add CSTS.ST, CAP.CPS and CAP.NSSS registers
  * types: add CAP.CPS and CAP.NSSS definitions
  * types: add enum nvme_cap documentation
  * types: Add enum nvme_unit/cmbebs/cmbswtp/flbas/cmic documentation
  * util: Add string constant for ENVME_CONNECT_IGNORED
  * tests: Add sample NBFT table with mpath IPv4+IPv6 discovery
  * types: add controller status shutdown type (CSTS.ST) definition
  * types: Add enum nvme_csts documentation
  * types: Add NVME_CMIC definitions
  * types: Add CMBSWTP property definitions
  * types: Add NVME_CMBEBS property definitions
  * types: Fix boot partition read offset (BPROF) mask value
  * tree: fix mem leak in nvme_ns_init() (bsc#1223331)
  * fabrics: retry discovery log page when DNR is not set
  * ioctl: return EPROTO when an NVMe status occurred
  * linux: Allocate aligned payload for nvme_get_telemetry_log
  * test: use diff to compare sysfs output (bsc#1226216)
  * tree: fix lba_count size calculation
  * tree: Add NVM subsystem controller identifier (bsc#1224024)
  * test: Add unit test for nvme_id_ns_flbas_to_lbaf_inuse()
  * types: Fix NVME_CSTS_SHST_MASK definition
  * util: Fixed nvme_id_ns_flbas_to_lbaf_inuse()
  * types: Add optional data present filed mask and shift definition
  * types: Fix EOM header optional data present fields definition
  * libnvme : record the nvme pci adapter physical slot (bsc#1223208)
  * sysfs: minimize heap allocations of sysfs paths
  * json: Fix uninitialized variables
  * libnvme: add missing symbol nvme_scan_tls_keys (bsc#1226197)
  * nbft: Whitespace fixes (bsc#1222026)
  * tests: Add complex NBFT table from Dell R660 (bsc#1222026)
  * tests: Adapt to added NBFT SSNS flags (bsc#1222026)
  * nbft: Add SSNS 'discovered' flag (bsc#1222026)
  * nbft: Add SSNS 'unavailable' flag (bsc#1222026)
  * doc: Document the NBFT API (bsc#1222026)
  * ioctl: Move nvme_cmd_dword_fields definitions into header file
  * types: Add PEL set feature event layout definitions
  * types: Fix enum nvme_pel_rci documentation error
  * types: Add boot partition information definitions
  * types: Add PEL header additional information definitions
  * fabrics: keyring is a long (bsc#1216982)
  * config-schema.json.in: tls keys and keyrings are strings (bsc#1216982)
  * linux: Add nvme_scan_tls_keys() (bsc#1216982)
  * json: dump TLS key data in PSK interchange format (bsc#1216982)
  * json: import TLS key from PSK interchange format (bsc#1216982)
  * json: export TLS key in PSK interchange format (bsc#1216982)
  * tree: read TLS key in nvme_configure_ctrl() (bsc#1216982)
  * linux: rework nvme_insert_tls_key_versioned() (bsc#1216982)
  * linux: add nvme_import_tls_key() (bsc#1216982)
  * linux: add nvme_export_tls_key() (bsc#1216982)
  * crc32: Add CRC32 algorithm (bsc#1216982)
  * linux: add nvme_update_key() (bsc#1216982)
  * linux: add nvme_read_key() (bsc#1216982)
  * linux: allow for NULL argument in nvme_lookup_keyring() (bsc#1216982)
  * log: Respect DEFAULT_LOGLEVEL on uninitialized logging
  * log: Introduce nvme_get_logging_level()
  * ioctl: remove incomplete debug logging infrastructure
  * ioctl: export nvme_submit_passthru{64} as weak symbol (bsc#1231668)
  * log: move nvme_{set|get}_debug to log.c
  * fabrics: check the read() return value
  * types: Add PEL reporting context port identifier type definitions
  * types: Add persistent event log reporting context definitions
-  Upstream changed the sysfs test setup, thus sysfs test works in OSB
  * remove 0001-build-disable-sysfs-test.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1722600000">- Update to version 1.10:
  * linux: update TLS version 1 PSK derivation (bsc#1228376)
  * tree: fix nvme_read_config() to not set errno if return 0
  * types: add new fields added in TP4165 (bsc#1231668)
  * types: Changed the space into tap space (bsc#1231668)
  * tree: handle no address phy slot dirs (bsc#1229193)
  * linux: Remove the use of OpenSSL Engine API
  * types: Added new controller attribute as per TP4104
  * tree: add helper to lookup hostnqn/hostid (bsc#1226216)
  * fabrics: extend hostnqn/hostid variable inject interface (bsc#1226216)
  * json: filter out pcie transport (bsc#1226216)
  * tree: preserve parsing order of a config file (bsc#1226216)
  * types: add new field added in TP4099
  * types: add new field added in TP4090 (bsc#1231668)
  * linux: add nvme_revoke_tls_key (bsc#1226197)
  * tree: fix segfault in nvme_free_tree() (bsc#1231668)
  * types: add PEL vendor specific and TCG defined events definitions
  * mi-mctp: initialize the rc variable in handle_mctp_endpoint()
  * linux: avoid potential null pointer dereference
  * linux: add nvme_get_ana_log_len_from_id_ctrl()
  * libnvme: export nvme_mi_admin_get_ana_log_atomic()
  * ioctl: add support for atomic, piecewise ANA log fetch
  * ioctl: replace nvme_ana_rsp_hdr in doc comments
  * ioctl: respect rae in nvme_get_log_ana()
  * ioctl: fix nvme_get_log_ana_groups() pointer type
  * types: add new filed added in TP4141a
  * mi: Probe quirks on first command submission
  * tree: optionally skip namespaces during scanning
  * ioctl: update nvme_set_var_size_tags() to properly use reftag
  * types: add enum for Protection Information Format
  * libnvme: Introduce functions to generate host identifier and host NQN (bsc#1226216)
  * fabrics: Unescape URI elements
  * tests: Add uriparser tests
  * fabrics: Introduce simple URI parser
  * linux: default init cleanup variable
  * linux: Fix uninitialized variables
  * types: add the nvme Cancel command opcode
  * log: split log variables from root object
  * log: keep log level logic in one place
  * mi: restore default ep timeout during admin_passthru
  * mi: fix the rc for nvme_mi_scan_ep
  * ccan/endian.h: Only define __{BIG,LITTLE}_ENDIAN if undefined.
  * Use C99 types for uint32_t
  * mi: fix the return error code.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1730376000">- Update to version 1.11:
  * prefix: Use Request or Response Length in DLEN and DOFF for MI
  * types: Add ETPVDS and SSI fields of sanitize status log
  * json: do not escape strings when printing the configuration
  * tree: do no export tls keys when not provided by user
  * types: add struct nvme_id_ctrl_nvm ver and lbamqf member variables
  * types: add NVMe 2.1 get log page LIDs
  * type: Added enums for ANSAN and RGCNS bit of OAES field
  * linux: fixup PSK HMAC type '0' handling
  * util: added error code for ENOKEY
  * fabrics: fix map error level in __nvmf_add_ctrl
  * fabrics: add ctrl connect interface
  * fabrics: use hex numbers when generating command line options
  * fabrics: rename first argument for argument macros
  * linux: handle key import correctly
  * linux: export keys to config
  * tree: read tls_configured_key and tls_keyring from sysfs
  * tree: move dhchap and tls sysfs parser into separate functions
  * json: move keystore operations out of the JSON parser
  * tree: add getter/setters for TLS PSK
  * linux: add import/export function for TLS pre-shared keys
  * linux: only return the description of a key
  * linux: use ssize_t as return type for nvme_identity_len
  * linux: reorder variable declarations
  * types: Added enum for SMVES event of PEL log
  * libnvme: add lockdown log page support(LID : 0x14)
  * libnvme: add EMVS support to sanitize command
  * types: Add TP4159 PCIe Infrastructure for Live Migration definitions
  * types: add NVME_CTRL_OAES get macro definitions
  * types: add NVME_CTRL_OAES_TTHR definition
  * types: add NVME_CTRL_FNA definitions to get field values
  * types: add NVME_VAL() definition
  * tree: fix tls key mem leak (bsc#1231668)
  * tree: fix dhchap_ctrl_key mem leak (bsc#1231668)
  * tree: fix dhchap_key mem leak (bsc#1231668)
  * types: add NVME_CHECK() definition to check nvme register field value
  * types: add kv opcodes
  * types: added new fields in nvme_nvme_id_ns
  * types: Add enum for Completion Condition of Get LBA status command
  * ioctl: refactoring set_features
  * types: add new fields added in TP4142
  * mi: add control primitive command
  * linux: Correct error handling for derive_psk_digest (bsc#1228376)
  * types: Added new field CSER in enum as per TP4167
- build fix for OpenSSL 1.1
  * add 0001-linux-fix-derive_psk_digest-OpenSSL-1.1-version.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1732536000">- Fix tests on s390
  * add 0002-test-mock-pass-thru-unknown-ioctls.patch</changelog>
  <changelog author="dwagner@suse.de" date="1745323200">- Update to version 1.11+4.ge68a91ae:
  * tree: add routine to fetch subsys firmware rev (bsc#1240518)
  * tree: add routine to fetch subsys model (bsc#1240518)
  * test/mock: pass thru unknown ioctls
  * linux: fix derive_psk_digest OpenSSL 1.1 version
  - Remove merged patches
  * remove 0001-linux-fix-derive_psk_digest-OpenSSL-1.1-version.patch
  * remove 0002-test-mock-pass-thru-unknown-ioctls.patch</changelog>
  <changelog author="dwagner@suse.de" date="1753185600">- Update to version 1.11+6.g0d17be77:
  * tree: free ctrl attributes when (re)configure ctrl (bsc#1243716)
  * tree: filter tree after scan has completed (bsc#1243716)</changelog>
  <changelog author="dwagner@suse.de" date="1757419200">- Update to version 1.11+8.gfb9b581c:
  * tree: do not try to strdup NULL pointer (bsc#1247225)
  * tree: always set the host key (bsc#1246560)</changelog>
</package>
<package pkgid="cd072ce0a169e8b3b3ca113373105a3be0ab68c383b986bfb997096c9e41deb9" name="libnvme1" arch="x86_64">
  <version epoch="0" ver="1.11+17.g61f36cae" rel="150700.4.14.1"/>
  <changelog author="mwilck@suse.com" date="1675080000">- temporarily disable unit tests on s390x (bsc#1207687, bsc#1207686)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1680264000">- Update to version 1.4: (jsc#PED-553 jsc#PED-3884)
  * fabrics: Filter out invalid UUIDs from DMI
  * fabrics: Add define for DMI sysinfo
  * Print out correct TREQ strings for discovery
  * tree: fix generic device open failure
  * fabrics: add configuration option 'tls_key'
  * fabrics: add configuration option 'keyring'
  * linux: add key helper functions
  * nvme: add 'nvme_insert_tls_key()' function
  * linux: add nvme_lookup_keyring()
  * python: Change python option from combo to feature
  * types: add opcode field to error log page (TP4113)
  * python: Add setter property for controller DHCHAP Key
  * python: Remove redundant host.set_key() method
  * build, meson: Print option summary
  * Python: Add support for setting/getting Host DHCHAP key
  * Python: Add hostnqn_from_file() and hostid_from_file()
  * types: Update position of elbatm in struct nvme_copy_range{_f1}
  * doc: fix kernel-doc-check warning
  * python, meson: Assert that deps are present for -Dpython=true
  * python: Reformat SWIG input file
  * python test: Check there is no SIGSEGV during garbage collection
  * python: Return PyObject* from __str__() instead of a static char[]
  * python: Fix segmentation fault during garbage collection
  * build: Enable test in muon minimal build
  * build: Streamline workflows with nvme-cli
  * mi: Add nvme_mi_admin_get_log_page
  * ioctl: Set file descriptor in nvme_get_log_page()
  * fix endians
  * fabrics: Do not ignore one char whitespace when string sanitizing
- Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
- Fix invalid string lenght calculcation for UUID (bsc#1209906)
- Fix segmentation fault during garbage collection (bsc#1209905)
- Always sanitize traddr and trsvcid entries (bsc#1207435)
- Allow tracking unique discover controllers (bsc#1186689)</changelog>
  <changelog author="ana.guerrero@suse.com" date="1690459200">- Fix build with meson 1.2.0</changelog>
  <changelog author="daniel.wagner@suse.com" date="1695988800">- Update to version 1.6: (jsc#PED-3610 jsc#PED-4879 jsc#PED-5061)
  * docs: Fix Read-the-Docs configuration (deprecated config param)
  * mi-mctp: Fix free() in error path of mi_open_mctp
  * types: Use NVME_SET for status type mask to get status value
  * types: Define FLBAS MASK and SHIFT to use NVME_GET
  * types: Support Phy Rx Eye Opening Measurement Log
  * log: Add nvme root global variable to set for default output
  * types: Add support for the OAQD ID controller field
  * test: use non deprecated API
  * test: add tests for Get/Set Features functions
  * ioctl: implement nvme_set_features_lba_range()
  * ioctl: pass NSID in Get/Set Features commands that use it
  * ioctl: fix swapped parameters in nvme_set_features_host_id()
  * ioctl: export nvme_{g,s}et_features_iocs_profile()
  * ioctl: pass ENDGID in nvme_get_features_endurance_event_cfg()
  * ioctl: don't set SAVE bit on unsaveable features
  * ioctl: avoid sending uninitialized timestamp
  * ioctl: pass data for Get/Set Features commands
  * ioctl: set correct bits in Set Features commands
  * ioctl: correct feature IDs in Get/Set Features commands
  * tree: Add 2 new public functions to lookup existing controllers
  * ioctl: Add debugging feature to show command outputs
  * Fix incorrect article 'an' as 'a' to use for a description
  * linux: Added functions to enable faster telemetry data retrieval. Moved telemetry data area support detection into separate function. Added possibility to modify data transfer chunk size. Enable telemetry extraction up to specified data area. Removed some printf() and perror().
  * test: account for discovery log page entry stripping
  * fabrics: unconditionally strip discovery entry strings
  * fabrics: only look for spaces in strchomp()
  * tree: Use early return instead of else statements
  * test: fix lookup test case
  * test: make all function static
  * test: add tests for new tcp controller matching algorithm
  * tree: Improve TCP controller matching algorithm
  * util: Add functions to parse the system's interfaces
  * types: Add support for EGFEAT, Domain Identifier, TEGCAP and UEGCAP
  * mi: remove nsid from nvme_mi_admin_identify_secondary_ctrl_list()
  * test: add tests for nvme_ctrl_get_src_addr()
  * tree: Add nvme_ctrl_get_src_addr() to get the controller's src_addr
  * util: Split _nvme_ipaddrs_eq() from nvme_ipaddrs_eq()
  * test: add tests for Identify functions
  * ioctl: use available Identify helper functions
  * test: pass a large enough buffer to nvme_identify_ns_descs()
  * ioctl: remove nsid from nvme_identify_secondary_ctrl_list()
  * meson: Don't hard-code path to "internal/config.h"
  * fabrics: Do not pass disable_sqflow if not supported
  * fabrics: Read the supported options lazy
  * test: add discovery log page tests
  * test: add infra for mocking passthru ioctls
  * tree: fix segfault in nvme_scan_subsystem() (bsc#1213993)
  * src/nvme/tree.c: make __nvme_scan_subsystem() returning bool (bsc#1213993)
  * doc: fix minor mistake in README.md about dependencies
  * nvme-tree: avoid warning in 'list-subsys' (bsc#1212598)
  * tree: Add getter for subsystem iopolicy (bsc#1124564)
  * fabrics: Consider also all hosts settings for context match
  * tree: Scan all subsystems (bsc#1212598)
  * doc: Fixing compile instruction in README
  * mi: allow non-4-byte-aligned responses
  * mi-mctp: use a linear response buffer
  * mi: implement length and offset alignment checks in admin_xfer()
  * tree: Don't open nvme devices until it's absolutely required
    (bsc#1213527 bsc#1213686)
  * tree: missing closedir() causes fd leak for "/sys/bus/pci/slots"
  * mi: don't return from mi_mctp_submit with a tag held
  * util: Provide empty nvme_ipaddrs_eq for static builds
  * fabrics: Relax match on well known disc ctrl lookup
  * tree: Ignore NULL address pointer for phy slot lookup
  * fabrics: Filter discovery ctrls out during application context check
  * util: Add ignored error code
  * json: Use memory block allocated by realloc() instead printbuf
  * util: Use HAVE_NETDB instead of HAVE_LIBNSS
  * tree: Add PCI physical slot number for controller
  * tree: Use nvme_ipaddrs_eq() to compare IP addresses
  * fabrics: Add EADDRNOTAVAIL error mapping
  * fabrics: filter out subsystems with non-matching application string
  * libnvme: add 'application' setting to nvme_root
  * libnvme: add 'application' setting to the subsystem
  * test: Add more code coverage for nvme_ipaddrs_eq()
  * util: rename ipaddrs_eq() to nvme_ipaddrs_eq() and make public.
  * util: Add ipaddrs_eq() to check whether two IP addresses are equal
  * test: Add unit test for ctrl lookups
  * ioctl: fix RAE bit on last Get Log Page command (bsc#1213618)
  * fabrics: check genctr after getting discovery entries (bsc#1213618)
  * fabrics: handle /dev/nvme-fabrics read failure
  * fabrics: fix potential invalid memory access in __nvmf_supported_option()
  * Python: Fix crash during garbage collection
  * python/swig: Check swig version to determine whether -py3 is needed
  * python/swig: Wrap swig-sensitive struct inside #ifwdef SWIG
  * mi: Add nvme_mi_ctrl_id to retrieve controller ID
  * Python: Suppress swig warnings about unnamed struct
  * examples: fix incorrect controller status in MI info output
  * ioctl: Explicitly initialize all members of struct nvme_ns_mgmt_args
  * Python: make NBFT data more pythonic
  * ioctl: io management send, receive args fix
  * python: Update test data
  * NBFT: Remove documentation from nbft.c since it's also in nbft.h
  * Python: Add NBFT support
  * nbft: Doc typo - Use nvme_nbft_free() instead of nbft_free()
  * nbft: Parse the {HOSTID,HOSTNQN}_CONFIGURED flags
  * nbft: Fix nbft_ssns_flags endianness test
  * nbft: Add a simple unit test
  * doc: Update README
  * build: Simple muon build configuration
  * build: Extend summary section
  * build: Make json-c dependency lookup not fail
  * nbft: Move added symbols to LIBNVME_1_5
  * build: Update wrap mode defaults
  * build: Disable fallback on default
  * tree: Fix offset argument check in nvme_bytes_to_lba
  * nbft: add NBFT v1.0 table support (jsc#PED-1449)
  * types: Add IO command set specific field on nsmgmt
  * fabrics: Do not pass unsupported options to kernel
  * types: Add ns-mgmt host software specified fields
  * types.h: Add FDP related Status Code
  * tree: Fix argument check in nvme_bytes_to_lba</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420800">- Drop unencessary minimum version depedency on meson.
- Re-enable libdbus feature. Upstream defaults changed.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420801">- Enable tests during build
- Set git version tag
- Drop unused make dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696852800">- Use glob for python3-libnvme file listening. Workaround pycache_only
  problems for SLE/Leap builds.
- Drop usused libuuid dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1697112000">- Add missing jsc# tracking references to changelog</changelog>
  <changelog author="mwilck@suse.com" date="1697544000">- Update to version 1.6+5.g68c6ffb:
  * avoid stack corruption by unaligned DMA to user space buffers
    (bsc#1216344, gh#linux-nvme/libnvme#727)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1702987200">- Update to version 1.7+0.gf38b1d7:
  * tree: do not open blk device on default
  * tree: read all attributes from sysfs when available
  * ioctl: set data length when retrieving LBA status
  * types: fix regression for vendor-specific field in nvme_id_ns
  * util: use cleanup functions
  * linux: use cleanup functions
  * json: use cleanup functions
  * fabrics: use cleanup functions
  * tree: use cleanup functions
  * cleanup: add cleanup functions
  * tree: fix incorrect return value
  * tree: Fix clearing application strings
  * libnvme: reshuffle nvme_generate_tls_key_identity()
  * libnvme: fixup error codes
  * libnvme: Implement 'nvme_generate_tls_key_identity()'
  * libnvme: support NVMe TLS identities version 1 (bsc#1219086)
  * libnvme: Add base64 functions
  * libnvme: separate out 'gen_tls_identity' and reshuffle 'derive_nvme_keys'
  * libnvme: separate out a function 'select_hmac'
  * libnvme: fix a memory leak when calling read_ssns()
  * libnvme: fix a memory leak in read_discovery()
  * fabrics: avoid redundant args in nvme_discovery_log()
  * fabrics: have nvmf_get_discovery_log() call nvmf_get_discovery_wargs()
  * fabrics: fetch smaller Discovery Log Page header
  * fabrics: avoid redundant Get Log Page on retry
  * fabrics: clear RAE for discovery log page commands
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * types: add Host Behavior Support field definitions
  * mi: Cast values to u32 if shift overflows int
  * types: Cast values to u32 if shift overflows int
  * test: Avoid unaligned pointer dereferences
  * nbft: Avoid unaligned pointer dereferences
  * types: add cross-namespace copy formats, status codes, ONCS bits
  * nvme: Add length field to Hkdf-Expand-Label computation
  * ioctl: use lsp arg in nvme_get_log_boot_partition
  * fabrics: use SECTYPE to determine whether to use TLS (bsc#1219086)
  * fabrics: Allocate aligned payloads for id_ctrl and discovery log calls
  * linux: Allocate aligned payloads for id_ctrl and id_ns calls
  * ioctl: MSB variable-size storage/reference tags</changelog>
  <changelog author="daniel.wagner@suse.com" date="1703073600">- Update to version 1.7.1+0.g13ba383:
  * tree: do no free ns on error in nvme_ns_init</changelog>
  <changelog author="daniel.wagner@suse.com" date="1707912000">- Update to version 1.8+0.gbff7dda:
  * linux: Explicitly initialize auto-cleanup variables
  * example: fix mi identify failed with error cntid
  * tree: do not issue an error when subsys lookup fails during scanning
  * types: Add controller properties CMBEBS, CMBSWTP and NSSD
  * tests: Add sample NBFT table from Dell PowerEdge R660
  * tests: Add sample NBFT table from Dell PowerEdge R760
  * tests: Fix diffs output for duplicate HFI entries
  * nbft: avoid duplicate entries in ssns-&gt;hfis
  * nbft: Fix (struct nbft_info_subsystem_ns).num_hfis off-by-one
  * test: read and dump sysfs tar file
  * nvme: allow to overwrite hostnqn and hostid
  * nvme: allow to overwrite base sysfs path
  * json: dump the output to the user selected filedescriptor
  * libnvme: export nvme_dump_tree
  * fabrics: add 'concat' option
  * mi: set correct rc and errno when crc mismatch
  * tree: use logical block size for lba
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * build: checkout full repo for checkpatch
  * linux: avoid segfault in check-tls-key due to null hostnqn/subsysnqn (bsc#1219086)
  * meson.build: fixup 'join' syntax
  * util: Explicitly initialize auto-cleanup variables
  * tree: Explicitly initialize auto-cleanup variables
  * linux: Explicitly initialize auto-cleanup variables
  * fabrics: Explicitly initialize auto-cleanup variables
  * util: Added function to find specific UUID in UUID list.
  * build: fix release python tag match
- Disable new unit test which is not running stable in OSB
  * add 0001-build-disable-sysfs-test.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737600">- Update to version 1.9+0.g80c5cf2:
  * types: Added Command and Feature Lockdown LID
  * types: add ASQ, ACQ and BPMBL controller properties definitions
  * types: add controller properties enum documentation
  * types: fix CRTO.CRIMT mask value definition
  * tree: use strtou32 to read lba_size
  * types: Fix PMRWBM register name
  * examples: fix mi-mctp build warning errors
  * test: add CSTS.ST, CAP.CPS and CAP.NSSS registers
  * types: add CAP.CPS and CAP.NSSS definitions
  * types: add enum nvme_cap documentation
  * types: Add enum nvme_unit/cmbebs/cmbswtp/flbas/cmic documentation
  * util: Add string constant for ENVME_CONNECT_IGNORED
  * tests: Add sample NBFT table with mpath IPv4+IPv6 discovery
  * types: add controller status shutdown type (CSTS.ST) definition
  * types: Add enum nvme_csts documentation
  * types: Add NVME_CMIC definitions
  * types: Add CMBSWTP property definitions
  * types: Add NVME_CMBEBS property definitions
  * types: Fix boot partition read offset (BPROF) mask value
  * tree: fix mem leak in nvme_ns_init() (bsc#1223331)
  * fabrics: retry discovery log page when DNR is not set
  * ioctl: return EPROTO when an NVMe status occurred
  * linux: Allocate aligned payload for nvme_get_telemetry_log
  * test: use diff to compare sysfs output (bsc#1226216)
  * tree: fix lba_count size calculation
  * tree: Add NVM subsystem controller identifier (bsc#1224024)
  * test: Add unit test for nvme_id_ns_flbas_to_lbaf_inuse()
  * types: Fix NVME_CSTS_SHST_MASK definition
  * util: Fixed nvme_id_ns_flbas_to_lbaf_inuse()
  * types: Add optional data present filed mask and shift definition
  * types: Fix EOM header optional data present fields definition
  * libnvme : record the nvme pci adapter physical slot (bsc#1223208)
  * sysfs: minimize heap allocations of sysfs paths
  * json: Fix uninitialized variables
  * libnvme: add missing symbol nvme_scan_tls_keys (bsc#1226197)
  * nbft: Whitespace fixes (bsc#1222026)
  * tests: Add complex NBFT table from Dell R660 (bsc#1222026)
  * tests: Adapt to added NBFT SSNS flags (bsc#1222026)
  * nbft: Add SSNS 'discovered' flag (bsc#1222026)
  * nbft: Add SSNS 'unavailable' flag (bsc#1222026)
  * doc: Document the NBFT API (bsc#1222026)
  * ioctl: Move nvme_cmd_dword_fields definitions into header file
  * types: Add PEL set feature event layout definitions
  * types: Fix enum nvme_pel_rci documentation error
  * types: Add boot partition information definitions
  * types: Add PEL header additional information definitions
  * fabrics: keyring is a long (bsc#1216982)
  * config-schema.json.in: tls keys and keyrings are strings (bsc#1216982)
  * linux: Add nvme_scan_tls_keys() (bsc#1216982)
  * json: dump TLS key data in PSK interchange format (bsc#1216982)
  * json: import TLS key from PSK interchange format (bsc#1216982)
  * json: export TLS key in PSK interchange format (bsc#1216982)
  * tree: read TLS key in nvme_configure_ctrl() (bsc#1216982)
  * linux: rework nvme_insert_tls_key_versioned() (bsc#1216982)
  * linux: add nvme_import_tls_key() (bsc#1216982)
  * linux: add nvme_export_tls_key() (bsc#1216982)
  * crc32: Add CRC32 algorithm (bsc#1216982)
  * linux: add nvme_update_key() (bsc#1216982)
  * linux: add nvme_read_key() (bsc#1216982)
  * linux: allow for NULL argument in nvme_lookup_keyring() (bsc#1216982)
  * log: Respect DEFAULT_LOGLEVEL on uninitialized logging
  * log: Introduce nvme_get_logging_level()
  * ioctl: remove incomplete debug logging infrastructure
  * ioctl: export nvme_submit_passthru{64} as weak symbol (bsc#1231668)
  * log: move nvme_{set|get}_debug to log.c
  * fabrics: check the read() return value
  * types: Add PEL reporting context port identifier type definitions
  * types: Add persistent event log reporting context definitions
-  Upstream changed the sysfs test setup, thus sysfs test works in OSB
  * remove 0001-build-disable-sysfs-test.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1722600000">- Update to version 1.10:
  * linux: update TLS version 1 PSK derivation (bsc#1228376)
  * tree: fix nvme_read_config() to not set errno if return 0
  * types: add new fields added in TP4165 (bsc#1231668)
  * types: Changed the space into tap space (bsc#1231668)
  * tree: handle no address phy slot dirs (bsc#1229193)
  * linux: Remove the use of OpenSSL Engine API
  * types: Added new controller attribute as per TP4104
  * tree: add helper to lookup hostnqn/hostid (bsc#1226216)
  * fabrics: extend hostnqn/hostid variable inject interface (bsc#1226216)
  * json: filter out pcie transport (bsc#1226216)
  * tree: preserve parsing order of a config file (bsc#1226216)
  * types: add new field added in TP4099
  * types: add new field added in TP4090 (bsc#1231668)
  * linux: add nvme_revoke_tls_key (bsc#1226197)
  * tree: fix segfault in nvme_free_tree() (bsc#1231668)
  * types: add PEL vendor specific and TCG defined events definitions
  * mi-mctp: initialize the rc variable in handle_mctp_endpoint()
  * linux: avoid potential null pointer dereference
  * linux: add nvme_get_ana_log_len_from_id_ctrl()
  * libnvme: export nvme_mi_admin_get_ana_log_atomic()
  * ioctl: add support for atomic, piecewise ANA log fetch
  * ioctl: replace nvme_ana_rsp_hdr in doc comments
  * ioctl: respect rae in nvme_get_log_ana()
  * ioctl: fix nvme_get_log_ana_groups() pointer type
  * types: add new filed added in TP4141a
  * mi: Probe quirks on first command submission
  * tree: optionally skip namespaces during scanning
  * ioctl: update nvme_set_var_size_tags() to properly use reftag
  * types: add enum for Protection Information Format
  * libnvme: Introduce functions to generate host identifier and host NQN (bsc#1226216)
  * fabrics: Unescape URI elements
  * tests: Add uriparser tests
  * fabrics: Introduce simple URI parser
  * linux: default init cleanup variable
  * linux: Fix uninitialized variables
  * types: add the nvme Cancel command opcode
  * log: split log variables from root object
  * log: keep log level logic in one place
  * mi: restore default ep timeout during admin_passthru
  * mi: fix the rc for nvme_mi_scan_ep
  * ccan/endian.h: Only define __{BIG,LITTLE}_ENDIAN if undefined.
  * Use C99 types for uint32_t
  * mi: fix the return error code.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1730376000">- Update to version 1.11:
  * prefix: Use Request or Response Length in DLEN and DOFF for MI
  * types: Add ETPVDS and SSI fields of sanitize status log
  * json: do not escape strings when printing the configuration
  * tree: do no export tls keys when not provided by user
  * types: add struct nvme_id_ctrl_nvm ver and lbamqf member variables
  * types: add NVMe 2.1 get log page LIDs
  * type: Added enums for ANSAN and RGCNS bit of OAES field
  * linux: fixup PSK HMAC type '0' handling
  * util: added error code for ENOKEY
  * fabrics: fix map error level in __nvmf_add_ctrl
  * fabrics: add ctrl connect interface
  * fabrics: use hex numbers when generating command line options
  * fabrics: rename first argument for argument macros
  * linux: handle key import correctly
  * linux: export keys to config
  * tree: read tls_configured_key and tls_keyring from sysfs
  * tree: move dhchap and tls sysfs parser into separate functions
  * json: move keystore operations out of the JSON parser
  * tree: add getter/setters for TLS PSK
  * linux: add import/export function for TLS pre-shared keys
  * linux: only return the description of a key
  * linux: use ssize_t as return type for nvme_identity_len
  * linux: reorder variable declarations
  * types: Added enum for SMVES event of PEL log
  * libnvme: add lockdown log page support(LID : 0x14)
  * libnvme: add EMVS support to sanitize command
  * types: Add TP4159 PCIe Infrastructure for Live Migration definitions
  * types: add NVME_CTRL_OAES get macro definitions
  * types: add NVME_CTRL_OAES_TTHR definition
  * types: add NVME_CTRL_FNA definitions to get field values
  * types: add NVME_VAL() definition
  * tree: fix tls key mem leak (bsc#1231668)
  * tree: fix dhchap_ctrl_key mem leak (bsc#1231668)
  * tree: fix dhchap_key mem leak (bsc#1231668)
  * types: add NVME_CHECK() definition to check nvme register field value
  * types: add kv opcodes
  * types: added new fields in nvme_nvme_id_ns
  * types: Add enum for Completion Condition of Get LBA status command
  * ioctl: refactoring set_features
  * types: add new fields added in TP4142
  * mi: add control primitive command
  * linux: Correct error handling for derive_psk_digest (bsc#1228376)
  * types: Added new field CSER in enum as per TP4167
- build fix for OpenSSL 1.1
  * add 0001-linux-fix-derive_psk_digest-OpenSSL-1.1-version.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1732536000">- Fix tests on s390
  * add 0002-test-mock-pass-thru-unknown-ioctls.patch</changelog>
  <changelog author="dwagner@suse.de" date="1745323200">- Update to version 1.11+4.ge68a91ae:
  * tree: add routine to fetch subsys firmware rev (bsc#1240518)
  * tree: add routine to fetch subsys model (bsc#1240518)
  * test/mock: pass thru unknown ioctls
  * linux: fix derive_psk_digest OpenSSL 1.1 version
  - Remove merged patches
  * remove 0001-linux-fix-derive_psk_digest-OpenSSL-1.1-version.patch
  * remove 0002-test-mock-pass-thru-unknown-ioctls.patch</changelog>
  <changelog author="dwagner@suse.de" date="1753185600">- Update to version 1.11+6.g0d17be77:
  * tree: free ctrl attributes when (re)configure ctrl (bsc#1243716)
  * tree: filter tree after scan has completed (bsc#1243716)</changelog>
  <changelog author="dwagner@suse.de" date="1757419200">- Update to version 1.11+8.gfb9b581c:
  * tree: do not try to strdup NULL pointer (bsc#1247225)
  * tree: always set the host key (bsc#1246560)</changelog>
  <changelog author="dwagner@suse.de" date="1758196800">- Update to version 1.11+17.g61f36cae:
  * linux: use EVP_PKEY_CTX_add1_hkdf_info only once in compat function (bsc#1246914)
  * nvme/linux: check for empty digest in gen_tls_identity() (bsc#1246914)
  * nvme/linux: add fallback implementation for nvme_insert_tls_key_compat() (bsc#1246914)
  * linux: fix HKDF TLS key derivation back to OpenSSL 3.0.8 (bsc#1246914)
  * libnvme: TLS PSK derivation fixes (bsc#1246914)
  * linux: rename __nvme_insert_tls_key_versioned() to __nvme_insert_tls_key() (bsc#1246914)
  * linux: rename __nvme_insert_tls_key() to __nvme_import_tls_key() (bsc#1246914)
  * test/psk: add testcase for TLS identity derivation (bsc#1246914)
  * linux: set errno when nvme_generate_tls_key_identity() fails (bsc#1246914)</changelog>
</package>
<package pkgid="d0e16f818a896b3da5c89dc40b40a4e6c3800621334aff6b867d6cccba7e70d7" name="libnvme1" arch="x86_64">
  <version epoch="0" ver="1.11+22.gc0b8e5f8" rel="150700.4.17.1"/>
  <changelog author="daniel.wagner@suse.com" date="1680264000">- Update to version 1.4: (jsc#PED-553 jsc#PED-3884)
  * fabrics: Filter out invalid UUIDs from DMI
  * fabrics: Add define for DMI sysinfo
  * Print out correct TREQ strings for discovery
  * tree: fix generic device open failure
  * fabrics: add configuration option 'tls_key'
  * fabrics: add configuration option 'keyring'
  * linux: add key helper functions
  * nvme: add 'nvme_insert_tls_key()' function
  * linux: add nvme_lookup_keyring()
  * python: Change python option from combo to feature
  * types: add opcode field to error log page (TP4113)
  * python: Add setter property for controller DHCHAP Key
  * python: Remove redundant host.set_key() method
  * build, meson: Print option summary
  * Python: Add support for setting/getting Host DHCHAP key
  * Python: Add hostnqn_from_file() and hostid_from_file()
  * types: Update position of elbatm in struct nvme_copy_range{_f1}
  * doc: fix kernel-doc-check warning
  * python, meson: Assert that deps are present for -Dpython=true
  * python: Reformat SWIG input file
  * python test: Check there is no SIGSEGV during garbage collection
  * python: Return PyObject* from __str__() instead of a static char[]
  * python: Fix segmentation fault during garbage collection
  * build: Enable test in muon minimal build
  * build: Streamline workflows with nvme-cli
  * mi: Add nvme_mi_admin_get_log_page
  * ioctl: Set file descriptor in nvme_get_log_page()
  * fix endians
  * fabrics: Do not ignore one char whitespace when string sanitizing
- Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
- Fix invalid string lenght calculcation for UUID (bsc#1209906)
- Fix segmentation fault during garbage collection (bsc#1209905)
- Always sanitize traddr and trsvcid entries (bsc#1207435)
- Allow tracking unique discover controllers (bsc#1186689)</changelog>
  <changelog author="ana.guerrero@suse.com" date="1690459200">- Fix build with meson 1.2.0</changelog>
  <changelog author="daniel.wagner@suse.com" date="1695988800">- Update to version 1.6: (jsc#PED-3610 jsc#PED-4879 jsc#PED-5061)
  * docs: Fix Read-the-Docs configuration (deprecated config param)
  * mi-mctp: Fix free() in error path of mi_open_mctp
  * types: Use NVME_SET for status type mask to get status value
  * types: Define FLBAS MASK and SHIFT to use NVME_GET
  * types: Support Phy Rx Eye Opening Measurement Log
  * log: Add nvme root global variable to set for default output
  * types: Add support for the OAQD ID controller field
  * test: use non deprecated API
  * test: add tests for Get/Set Features functions
  * ioctl: implement nvme_set_features_lba_range()
  * ioctl: pass NSID in Get/Set Features commands that use it
  * ioctl: fix swapped parameters in nvme_set_features_host_id()
  * ioctl: export nvme_{g,s}et_features_iocs_profile()
  * ioctl: pass ENDGID in nvme_get_features_endurance_event_cfg()
  * ioctl: don't set SAVE bit on unsaveable features
  * ioctl: avoid sending uninitialized timestamp
  * ioctl: pass data for Get/Set Features commands
  * ioctl: set correct bits in Set Features commands
  * ioctl: correct feature IDs in Get/Set Features commands
  * tree: Add 2 new public functions to lookup existing controllers
  * ioctl: Add debugging feature to show command outputs
  * Fix incorrect article 'an' as 'a' to use for a description
  * linux: Added functions to enable faster telemetry data retrieval. Moved telemetry data area support detection into separate function. Added possibility to modify data transfer chunk size. Enable telemetry extraction up to specified data area. Removed some printf() and perror().
  * test: account for discovery log page entry stripping
  * fabrics: unconditionally strip discovery entry strings
  * fabrics: only look for spaces in strchomp()
  * tree: Use early return instead of else statements
  * test: fix lookup test case
  * test: make all function static
  * test: add tests for new tcp controller matching algorithm
  * tree: Improve TCP controller matching algorithm
  * util: Add functions to parse the system's interfaces
  * types: Add support for EGFEAT, Domain Identifier, TEGCAP and UEGCAP
  * mi: remove nsid from nvme_mi_admin_identify_secondary_ctrl_list()
  * test: add tests for nvme_ctrl_get_src_addr()
  * tree: Add nvme_ctrl_get_src_addr() to get the controller's src_addr
  * util: Split _nvme_ipaddrs_eq() from nvme_ipaddrs_eq()
  * test: add tests for Identify functions
  * ioctl: use available Identify helper functions
  * test: pass a large enough buffer to nvme_identify_ns_descs()
  * ioctl: remove nsid from nvme_identify_secondary_ctrl_list()
  * meson: Don't hard-code path to "internal/config.h"
  * fabrics: Do not pass disable_sqflow if not supported
  * fabrics: Read the supported options lazy
  * test: add discovery log page tests
  * test: add infra for mocking passthru ioctls
  * tree: fix segfault in nvme_scan_subsystem() (bsc#1213993)
  * src/nvme/tree.c: make __nvme_scan_subsystem() returning bool (bsc#1213993)
  * doc: fix minor mistake in README.md about dependencies
  * nvme-tree: avoid warning in 'list-subsys' (bsc#1212598)
  * tree: Add getter for subsystem iopolicy (bsc#1124564)
  * fabrics: Consider also all hosts settings for context match
  * tree: Scan all subsystems (bsc#1212598)
  * doc: Fixing compile instruction in README
  * mi: allow non-4-byte-aligned responses
  * mi-mctp: use a linear response buffer
  * mi: implement length and offset alignment checks in admin_xfer()
  * tree: Don't open nvme devices until it's absolutely required
    (bsc#1213527 bsc#1213686)
  * tree: missing closedir() causes fd leak for "/sys/bus/pci/slots"
  * mi: don't return from mi_mctp_submit with a tag held
  * util: Provide empty nvme_ipaddrs_eq for static builds
  * fabrics: Relax match on well known disc ctrl lookup
  * tree: Ignore NULL address pointer for phy slot lookup
  * fabrics: Filter discovery ctrls out during application context check
  * util: Add ignored error code
  * json: Use memory block allocated by realloc() instead printbuf
  * util: Use HAVE_NETDB instead of HAVE_LIBNSS
  * tree: Add PCI physical slot number for controller
  * tree: Use nvme_ipaddrs_eq() to compare IP addresses
  * fabrics: Add EADDRNOTAVAIL error mapping
  * fabrics: filter out subsystems with non-matching application string
  * libnvme: add 'application' setting to nvme_root
  * libnvme: add 'application' setting to the subsystem
  * test: Add more code coverage for nvme_ipaddrs_eq()
  * util: rename ipaddrs_eq() to nvme_ipaddrs_eq() and make public.
  * util: Add ipaddrs_eq() to check whether two IP addresses are equal
  * test: Add unit test for ctrl lookups
  * ioctl: fix RAE bit on last Get Log Page command (bsc#1213618)
  * fabrics: check genctr after getting discovery entries (bsc#1213618)
  * fabrics: handle /dev/nvme-fabrics read failure
  * fabrics: fix potential invalid memory access in __nvmf_supported_option()
  * Python: Fix crash during garbage collection
  * python/swig: Check swig version to determine whether -py3 is needed
  * python/swig: Wrap swig-sensitive struct inside #ifwdef SWIG
  * mi: Add nvme_mi_ctrl_id to retrieve controller ID
  * Python: Suppress swig warnings about unnamed struct
  * examples: fix incorrect controller status in MI info output
  * ioctl: Explicitly initialize all members of struct nvme_ns_mgmt_args
  * Python: make NBFT data more pythonic
  * ioctl: io management send, receive args fix
  * python: Update test data
  * NBFT: Remove documentation from nbft.c since it's also in nbft.h
  * Python: Add NBFT support
  * nbft: Doc typo - Use nvme_nbft_free() instead of nbft_free()
  * nbft: Parse the {HOSTID,HOSTNQN}_CONFIGURED flags
  * nbft: Fix nbft_ssns_flags endianness test
  * nbft: Add a simple unit test
  * doc: Update README
  * build: Simple muon build configuration
  * build: Extend summary section
  * build: Make json-c dependency lookup not fail
  * nbft: Move added symbols to LIBNVME_1_5
  * build: Update wrap mode defaults
  * build: Disable fallback on default
  * tree: Fix offset argument check in nvme_bytes_to_lba
  * nbft: add NBFT v1.0 table support (jsc#PED-1449)
  * types: Add IO command set specific field on nsmgmt
  * fabrics: Do not pass unsupported options to kernel
  * types: Add ns-mgmt host software specified fields
  * types.h: Add FDP related Status Code
  * tree: Fix argument check in nvme_bytes_to_lba</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420800">- Drop unencessary minimum version depedency on meson.
- Re-enable libdbus feature. Upstream defaults changed.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420801">- Enable tests during build
- Set git version tag
- Drop unused make dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696852800">- Use glob for python3-libnvme file listening. Workaround pycache_only
  problems for SLE/Leap builds.
- Drop usused libuuid dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1697112000">- Add missing jsc# tracking references to changelog</changelog>
  <changelog author="mwilck@suse.com" date="1697544000">- Update to version 1.6+5.g68c6ffb:
  * avoid stack corruption by unaligned DMA to user space buffers
    (bsc#1216344, gh#linux-nvme/libnvme#727)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1702987200">- Update to version 1.7+0.gf38b1d7:
  * tree: do not open blk device on default
  * tree: read all attributes from sysfs when available
  * ioctl: set data length when retrieving LBA status
  * types: fix regression for vendor-specific field in nvme_id_ns
  * util: use cleanup functions
  * linux: use cleanup functions
  * json: use cleanup functions
  * fabrics: use cleanup functions
  * tree: use cleanup functions
  * cleanup: add cleanup functions
  * tree: fix incorrect return value
  * tree: Fix clearing application strings
  * libnvme: reshuffle nvme_generate_tls_key_identity()
  * libnvme: fixup error codes
  * libnvme: Implement 'nvme_generate_tls_key_identity()'
  * libnvme: support NVMe TLS identities version 1 (bsc#1219086)
  * libnvme: Add base64 functions
  * libnvme: separate out 'gen_tls_identity' and reshuffle 'derive_nvme_keys'
  * libnvme: separate out a function 'select_hmac'
  * libnvme: fix a memory leak when calling read_ssns()
  * libnvme: fix a memory leak in read_discovery()
  * fabrics: avoid redundant args in nvme_discovery_log()
  * fabrics: have nvmf_get_discovery_log() call nvmf_get_discovery_wargs()
  * fabrics: fetch smaller Discovery Log Page header
  * fabrics: avoid redundant Get Log Page on retry
  * fabrics: clear RAE for discovery log page commands
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * types: add Host Behavior Support field definitions
  * mi: Cast values to u32 if shift overflows int
  * types: Cast values to u32 if shift overflows int
  * test: Avoid unaligned pointer dereferences
  * nbft: Avoid unaligned pointer dereferences
  * types: add cross-namespace copy formats, status codes, ONCS bits
  * nvme: Add length field to Hkdf-Expand-Label computation
  * ioctl: use lsp arg in nvme_get_log_boot_partition
  * fabrics: use SECTYPE to determine whether to use TLS (bsc#1219086)
  * fabrics: Allocate aligned payloads for id_ctrl and discovery log calls
  * linux: Allocate aligned payloads for id_ctrl and id_ns calls
  * ioctl: MSB variable-size storage/reference tags</changelog>
  <changelog author="daniel.wagner@suse.com" date="1703073600">- Update to version 1.7.1+0.g13ba383:
  * tree: do no free ns on error in nvme_ns_init</changelog>
  <changelog author="daniel.wagner@suse.com" date="1707912000">- Update to version 1.8+0.gbff7dda:
  * linux: Explicitly initialize auto-cleanup variables
  * example: fix mi identify failed with error cntid
  * tree: do not issue an error when subsys lookup fails during scanning
  * types: Add controller properties CMBEBS, CMBSWTP and NSSD
  * tests: Add sample NBFT table from Dell PowerEdge R660
  * tests: Add sample NBFT table from Dell PowerEdge R760
  * tests: Fix diffs output for duplicate HFI entries
  * nbft: avoid duplicate entries in ssns-&gt;hfis
  * nbft: Fix (struct nbft_info_subsystem_ns).num_hfis off-by-one
  * test: read and dump sysfs tar file
  * nvme: allow to overwrite hostnqn and hostid
  * nvme: allow to overwrite base sysfs path
  * json: dump the output to the user selected filedescriptor
  * libnvme: export nvme_dump_tree
  * fabrics: add 'concat' option
  * mi: set correct rc and errno when crc mismatch
  * tree: use logical block size for lba
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * build: checkout full repo for checkpatch
  * linux: avoid segfault in check-tls-key due to null hostnqn/subsysnqn (bsc#1219086)
  * meson.build: fixup 'join' syntax
  * util: Explicitly initialize auto-cleanup variables
  * tree: Explicitly initialize auto-cleanup variables
  * linux: Explicitly initialize auto-cleanup variables
  * fabrics: Explicitly initialize auto-cleanup variables
  * util: Added function to find specific UUID in UUID list.
  * build: fix release python tag match
- Disable new unit test which is not running stable in OSB
  * add 0001-build-disable-sysfs-test.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737600">- Update to version 1.9+0.g80c5cf2:
  * types: Added Command and Feature Lockdown LID
  * types: add ASQ, ACQ and BPMBL controller properties definitions
  * types: add controller properties enum documentation
  * types: fix CRTO.CRIMT mask value definition
  * tree: use strtou32 to read lba_size
  * types: Fix PMRWBM register name
  * examples: fix mi-mctp build warning errors
  * test: add CSTS.ST, CAP.CPS and CAP.NSSS registers
  * types: add CAP.CPS and CAP.NSSS definitions
  * types: add enum nvme_cap documentation
  * types: Add enum nvme_unit/cmbebs/cmbswtp/flbas/cmic documentation
  * util: Add string constant for ENVME_CONNECT_IGNORED
  * tests: Add sample NBFT table with mpath IPv4+IPv6 discovery
  * types: add controller status shutdown type (CSTS.ST) definition
  * types: Add enum nvme_csts documentation
  * types: Add NVME_CMIC definitions
  * types: Add CMBSWTP property definitions
  * types: Add NVME_CMBEBS property definitions
  * types: Fix boot partition read offset (BPROF) mask value
  * tree: fix mem leak in nvme_ns_init() (bsc#1223331)
  * fabrics: retry discovery log page when DNR is not set
  * ioctl: return EPROTO when an NVMe status occurred
  * linux: Allocate aligned payload for nvme_get_telemetry_log
  * test: use diff to compare sysfs output (bsc#1226216)
  * tree: fix lba_count size calculation
  * tree: Add NVM subsystem controller identifier (bsc#1224024)
  * test: Add unit test for nvme_id_ns_flbas_to_lbaf_inuse()
  * types: Fix NVME_CSTS_SHST_MASK definition
  * util: Fixed nvme_id_ns_flbas_to_lbaf_inuse()
  * types: Add optional data present filed mask and shift definition
  * types: Fix EOM header optional data present fields definition
  * libnvme : record the nvme pci adapter physical slot (bsc#1223208)
  * sysfs: minimize heap allocations of sysfs paths
  * json: Fix uninitialized variables
  * libnvme: add missing symbol nvme_scan_tls_keys (bsc#1226197)
  * nbft: Whitespace fixes (bsc#1222026)
  * tests: Add complex NBFT table from Dell R660 (bsc#1222026)
  * tests: Adapt to added NBFT SSNS flags (bsc#1222026)
  * nbft: Add SSNS 'discovered' flag (bsc#1222026)
  * nbft: Add SSNS 'unavailable' flag (bsc#1222026)
  * doc: Document the NBFT API (bsc#1222026)
  * ioctl: Move nvme_cmd_dword_fields definitions into header file
  * types: Add PEL set feature event layout definitions
  * types: Fix enum nvme_pel_rci documentation error
  * types: Add boot partition information definitions
  * types: Add PEL header additional information definitions
  * fabrics: keyring is a long (bsc#1216982)
  * config-schema.json.in: tls keys and keyrings are strings (bsc#1216982)
  * linux: Add nvme_scan_tls_keys() (bsc#1216982)
  * json: dump TLS key data in PSK interchange format (bsc#1216982)
  * json: import TLS key from PSK interchange format (bsc#1216982)
  * json: export TLS key in PSK interchange format (bsc#1216982)
  * tree: read TLS key in nvme_configure_ctrl() (bsc#1216982)
  * linux: rework nvme_insert_tls_key_versioned() (bsc#1216982)
  * linux: add nvme_import_tls_key() (bsc#1216982)
  * linux: add nvme_export_tls_key() (bsc#1216982)
  * crc32: Add CRC32 algorithm (bsc#1216982)
  * linux: add nvme_update_key() (bsc#1216982)
  * linux: add nvme_read_key() (bsc#1216982)
  * linux: allow for NULL argument in nvme_lookup_keyring() (bsc#1216982)
  * log: Respect DEFAULT_LOGLEVEL on uninitialized logging
  * log: Introduce nvme_get_logging_level()
  * ioctl: remove incomplete debug logging infrastructure
  * ioctl: export nvme_submit_passthru{64} as weak symbol (bsc#1231668)
  * log: move nvme_{set|get}_debug to log.c
  * fabrics: check the read() return value
  * types: Add PEL reporting context port identifier type definitions
  * types: Add persistent event log reporting context definitions
-  Upstream changed the sysfs test setup, thus sysfs test works in OSB
  * remove 0001-build-disable-sysfs-test.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1722600000">- Update to version 1.10:
  * linux: update TLS version 1 PSK derivation (bsc#1228376)
  * tree: fix nvme_read_config() to not set errno if return 0
  * types: add new fields added in TP4165 (bsc#1231668)
  * types: Changed the space into tap space (bsc#1231668)
  * tree: handle no address phy slot dirs (bsc#1229193)
  * linux: Remove the use of OpenSSL Engine API
  * types: Added new controller attribute as per TP4104
  * tree: add helper to lookup hostnqn/hostid (bsc#1226216)
  * fabrics: extend hostnqn/hostid variable inject interface (bsc#1226216)
  * json: filter out pcie transport (bsc#1226216)
  * tree: preserve parsing order of a config file (bsc#1226216)
  * types: add new field added in TP4099
  * types: add new field added in TP4090 (bsc#1231668)
  * linux: add nvme_revoke_tls_key (bsc#1226197)
  * tree: fix segfault in nvme_free_tree() (bsc#1231668)
  * types: add PEL vendor specific and TCG defined events definitions
  * mi-mctp: initialize the rc variable in handle_mctp_endpoint()
  * linux: avoid potential null pointer dereference
  * linux: add nvme_get_ana_log_len_from_id_ctrl()
  * libnvme: export nvme_mi_admin_get_ana_log_atomic()
  * ioctl: add support for atomic, piecewise ANA log fetch
  * ioctl: replace nvme_ana_rsp_hdr in doc comments
  * ioctl: respect rae in nvme_get_log_ana()
  * ioctl: fix nvme_get_log_ana_groups() pointer type
  * types: add new filed added in TP4141a
  * mi: Probe quirks on first command submission
  * tree: optionally skip namespaces during scanning
  * ioctl: update nvme_set_var_size_tags() to properly use reftag
  * types: add enum for Protection Information Format
  * libnvme: Introduce functions to generate host identifier and host NQN (bsc#1226216)
  * fabrics: Unescape URI elements
  * tests: Add uriparser tests
  * fabrics: Introduce simple URI parser
  * linux: default init cleanup variable
  * linux: Fix uninitialized variables
  * types: add the nvme Cancel command opcode
  * log: split log variables from root object
  * log: keep log level logic in one place
  * mi: restore default ep timeout during admin_passthru
  * mi: fix the rc for nvme_mi_scan_ep
  * ccan/endian.h: Only define __{BIG,LITTLE}_ENDIAN if undefined.
  * Use C99 types for uint32_t
  * mi: fix the return error code.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1730376000">- Update to version 1.11:
  * prefix: Use Request or Response Length in DLEN and DOFF for MI
  * types: Add ETPVDS and SSI fields of sanitize status log
  * json: do not escape strings when printing the configuration
  * tree: do no export tls keys when not provided by user
  * types: add struct nvme_id_ctrl_nvm ver and lbamqf member variables
  * types: add NVMe 2.1 get log page LIDs
  * type: Added enums for ANSAN and RGCNS bit of OAES field
  * linux: fixup PSK HMAC type '0' handling
  * util: added error code for ENOKEY
  * fabrics: fix map error level in __nvmf_add_ctrl
  * fabrics: add ctrl connect interface
  * fabrics: use hex numbers when generating command line options
  * fabrics: rename first argument for argument macros
  * linux: handle key import correctly
  * linux: export keys to config
  * tree: read tls_configured_key and tls_keyring from sysfs
  * tree: move dhchap and tls sysfs parser into separate functions
  * json: move keystore operations out of the JSON parser
  * tree: add getter/setters for TLS PSK
  * linux: add import/export function for TLS pre-shared keys
  * linux: only return the description of a key
  * linux: use ssize_t as return type for nvme_identity_len
  * linux: reorder variable declarations
  * types: Added enum for SMVES event of PEL log
  * libnvme: add lockdown log page support(LID : 0x14)
  * libnvme: add EMVS support to sanitize command
  * types: Add TP4159 PCIe Infrastructure for Live Migration definitions
  * types: add NVME_CTRL_OAES get macro definitions
  * types: add NVME_CTRL_OAES_TTHR definition
  * types: add NVME_CTRL_FNA definitions to get field values
  * types: add NVME_VAL() definition
  * tree: fix tls key mem leak (bsc#1231668)
  * tree: fix dhchap_ctrl_key mem leak (bsc#1231668)
  * tree: fix dhchap_key mem leak (bsc#1231668)
  * types: add NVME_CHECK() definition to check nvme register field value
  * types: add kv opcodes
  * types: added new fields in nvme_nvme_id_ns
  * types: Add enum for Completion Condition of Get LBA status command
  * ioctl: refactoring set_features
  * types: add new fields added in TP4142
  * mi: add control primitive command
  * linux: Correct error handling for derive_psk_digest (bsc#1228376)
  * types: Added new field CSER in enum as per TP4167
- build fix for OpenSSL 1.1
  * add 0001-linux-fix-derive_psk_digest-OpenSSL-1.1-version.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1732536000">- Fix tests on s390
  * add 0002-test-mock-pass-thru-unknown-ioctls.patch</changelog>
  <changelog author="dwagner@suse.de" date="1745323200">- Update to version 1.11+4.ge68a91ae:
  * tree: add routine to fetch subsys firmware rev (bsc#1240518)
  * tree: add routine to fetch subsys model (bsc#1240518)
  * test/mock: pass thru unknown ioctls
  * linux: fix derive_psk_digest OpenSSL 1.1 version
  - Remove merged patches
  * remove 0001-linux-fix-derive_psk_digest-OpenSSL-1.1-version.patch
  * remove 0002-test-mock-pass-thru-unknown-ioctls.patch</changelog>
  <changelog author="dwagner@suse.de" date="1753185600">- Update to version 1.11+6.g0d17be77:
  * tree: free ctrl attributes when (re)configure ctrl (bsc#1243716)
  * tree: filter tree after scan has completed (bsc#1243716)</changelog>
  <changelog author="dwagner@suse.de" date="1757419200">- Update to version 1.11+8.gfb9b581c:
  * tree: do not try to strdup NULL pointer (bsc#1247225)
  * tree: always set the host key (bsc#1246560)</changelog>
  <changelog author="dwagner@suse.de" date="1758196800">- Update to version 1.11+17.g61f36cae:
  * linux: use EVP_PKEY_CTX_add1_hkdf_info only once in compat function (bsc#1246914)
  * nvme/linux: check for empty digest in gen_tls_identity() (bsc#1246914)
  * nvme/linux: add fallback implementation for nvme_insert_tls_key_compat() (bsc#1246914)
  * linux: fix HKDF TLS key derivation back to OpenSSL 3.0.8 (bsc#1246914)
  * libnvme: TLS PSK derivation fixes (bsc#1246914)
  * linux: rename __nvme_insert_tls_key_versioned() to __nvme_insert_tls_key() (bsc#1246914)
  * linux: rename __nvme_insert_tls_key() to __nvme_import_tls_key() (bsc#1246914)
  * test/psk: add testcase for TLS identity derivation (bsc#1246914)
  * linux: set errno when nvme_generate_tls_key_identity() fails (bsc#1246914)</changelog>
  <changelog author="dwagner@suse.de" date="1770811200">- Update to version 1.11+22.gc0b8e5f8:
  * fabrics: add additional debug messages for --tls and --concat (bsc#1256043)
  * fabrics: add error if dhchap-ctrl-secret is specified with --concat (bsc#1256043)
  * fabrics: add error if no dhchap-secret is specified with --concat (bsc#1256043)
  * fabrics: add error if --tls and --concat are invoked together (bsc#1256043)
  * fabrics: fix concat during nvme connect-all (bsc#1256043)</changelog>
</package>
<package pkgid="0a19e0d9d5bfdbe60b987208755acd67d0bf81d77a4dee92bc03b2164e7f7dcf" name="libnvme1" arch="x86_64">
  <version epoch="0" ver="1.11+4.ge68a91ae" rel="150700.4.3.2"/>
  <changelog author="bwiedemann@suse.com" date="1667217600">- Use fixed manpage build date (boo#1047218)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 1.2:
  * Add more details for return code of MI admin cmds
  * Parse dhchap_host_key on controller level
  * Update json config schema for missing dhchap host key
  * fabrics: Add new TP8010 definitions
  * fabrics: Add nvmf_get_discovery_wargs()
  * fabrics: Duplicate strings when merging configs
  * fabrics: Filter out empty strings in add_argument()
  * fabrics: Use fallthrough statement
  * ioctl: Set log page offset for nvme_get_log_telemetry_host
  * json-schema: add dhchap_key details to host section
  * json: Enforce correctly formatted JSON config files
  * json: Verify JSON config file starts with an array
  * mi: Add Get Log Page helpers
  * mi: Add Identify function for secondary controller list
  * mi: Add Identify helper for ns-descs and primary-ctrl-caps
  * mi: Add firmware download and commit commands
  * mi: Add identify helper for nsid-capable Controller List
  * mi: Add identify helpers for namespace lists
  * mi: Add identify helpers for namespaces
  * mi: Allow Admin-message sized More Processing Required responses
  * mi: Distinguish MI status from NVMe (CDW3) status
  * mi: Fix C++ compiler errors
  * mi: Implement Format NVM command
  * mi: Implement Get &amp; Set Features Admin commands
  * mi: Implement NS attach command and helpers
  * mi: Implement Namespace Management command and create/delete helpers
  * mi: Implement Sanitize command
  * mi: Init ctrl_id within xfer
  * mi: Introduce a helper for response status, unify values with ioctls
  * mi: Set log page offset for nvme_get_log_telemetry_host
  * mi: add nvme_mi_status_to_string()
  * mi: fix a memory leak in nvme_mi_open_mctp()
  * mi: fix get_log_page chunked offset check
  * nvme-tree: avoid segfault if auth keys are unavailable
  * python: Use nvmf_get_discovery_wargs()
  * tree: rename controller 'dhchap_key' to 'dhchap_ctrl_key'
  * types: Move enum nvme_data_tfr to types
  * util: Add LINE_MAX define
  * util: Add get feature length 2 API to support direction parameter
  * util: Add simple UUID type
  * util: Do not expose fallthrough defines
- Make man page build conditiional. Install man page location has been
  fixed upstream.
- Mark the Python directory own by the libnvme3-python package</changelog>
  <changelog author="daniel.wagner@suse.com" date="1675080000">- Update to version 1.3:
  * Support added for Flexible Data Placement (TP4146)
  * Fabrics: added support for Persistent Discovery Controllers.
  * libnvme-mi added a quirk framework to workaround special behavior of
  certain devices
  * The python binding behaves more friendly in a threading environment
  by release the GIL on blocking calls.
  * Replaced  3the libsystemd dependency with libdbus
  * A lot of small fixes everywhere (leaks, wrong ordering of arguments, ...)
- Update spec file
  * Project depends on meson &gt;= 0.50.0</changelog>
  <changelog author="mwilck@suse.com" date="1675080001">- temporarily disable unit tests on s390x (bsc#1207687, bsc#1207686)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1680264000">- Update to version 1.4: (jsc#PED-553 jsc#PED-3884)
  * fabrics: Filter out invalid UUIDs from DMI
  * fabrics: Add define for DMI sysinfo
  * Print out correct TREQ strings for discovery
  * tree: fix generic device open failure
  * fabrics: add configuration option 'tls_key'
  * fabrics: add configuration option 'keyring'
  * linux: add key helper functions
  * nvme: add 'nvme_insert_tls_key()' function
  * linux: add nvme_lookup_keyring()
  * python: Change python option from combo to feature
  * types: add opcode field to error log page (TP4113)
  * python: Add setter property for controller DHCHAP Key
  * python: Remove redundant host.set_key() method
  * build, meson: Print option summary
  * Python: Add support for setting/getting Host DHCHAP key
  * Python: Add hostnqn_from_file() and hostid_from_file()
  * types: Update position of elbatm in struct nvme_copy_range{_f1}
  * doc: fix kernel-doc-check warning
  * python, meson: Assert that deps are present for -Dpython=true
  * python: Reformat SWIG input file
  * python test: Check there is no SIGSEGV during garbage collection
  * python: Return PyObject* from __str__() instead of a static char[]
  * python: Fix segmentation fault during garbage collection
  * build: Enable test in muon minimal build
  * build: Streamline workflows with nvme-cli
  * mi: Add nvme_mi_admin_get_log_page
  * ioctl: Set file descriptor in nvme_get_log_page()
  * fix endians
  * fabrics: Do not ignore one char whitespace when string sanitizing
- Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
- Fix invalid string lenght calculcation for UUID (bsc#1209906)
- Fix segmentation fault during garbage collection (bsc#1209905)
- Always sanitize traddr and trsvcid entries (bsc#1207435)
- Allow tracking unique discover controllers (bsc#1186689)</changelog>
  <changelog author="ana.guerrero@suse.com" date="1690459200">- Fix build with meson 1.2.0</changelog>
  <changelog author="daniel.wagner@suse.com" date="1695988800">- Update to version 1.6: (jsc#PED-3610 jsc#PED-4879 jsc#PED-5061)
  * docs: Fix Read-the-Docs configuration (deprecated config param)
  * mi-mctp: Fix free() in error path of mi_open_mctp
  * types: Use NVME_SET for status type mask to get status value
  * types: Define FLBAS MASK and SHIFT to use NVME_GET
  * types: Support Phy Rx Eye Opening Measurement Log
  * log: Add nvme root global variable to set for default output
  * types: Add support for the OAQD ID controller field
  * test: use non deprecated API
  * test: add tests for Get/Set Features functions
  * ioctl: implement nvme_set_features_lba_range()
  * ioctl: pass NSID in Get/Set Features commands that use it
  * ioctl: fix swapped parameters in nvme_set_features_host_id()
  * ioctl: export nvme_{g,s}et_features_iocs_profile()
  * ioctl: pass ENDGID in nvme_get_features_endurance_event_cfg()
  * ioctl: don't set SAVE bit on unsaveable features
  * ioctl: avoid sending uninitialized timestamp
  * ioctl: pass data for Get/Set Features commands
  * ioctl: set correct bits in Set Features commands
  * ioctl: correct feature IDs in Get/Set Features commands
  * tree: Add 2 new public functions to lookup existing controllers
  * ioctl: Add debugging feature to show command outputs
  * Fix incorrect article 'an' as 'a' to use for a description
  * linux: Added functions to enable faster telemetry data retrieval. Moved telemetry data area support detection into separate function. Added possibility to modify data transfer chunk size. Enable telemetry extraction up to specified data area. Removed some printf() and perror().
  * test: account for discovery log page entry stripping
  * fabrics: unconditionally strip discovery entry strings
  * fabrics: only look for spaces in strchomp()
  * tree: Use early return instead of else statements
  * test: fix lookup test case
  * test: make all function static
  * test: add tests for new tcp controller matching algorithm
  * tree: Improve TCP controller matching algorithm
  * util: Add functions to parse the system's interfaces
  * types: Add support for EGFEAT, Domain Identifier, TEGCAP and UEGCAP
  * mi: remove nsid from nvme_mi_admin_identify_secondary_ctrl_list()
  * test: add tests for nvme_ctrl_get_src_addr()
  * tree: Add nvme_ctrl_get_src_addr() to get the controller's src_addr
  * util: Split _nvme_ipaddrs_eq() from nvme_ipaddrs_eq()
  * test: add tests for Identify functions
  * ioctl: use available Identify helper functions
  * test: pass a large enough buffer to nvme_identify_ns_descs()
  * ioctl: remove nsid from nvme_identify_secondary_ctrl_list()
  * meson: Don't hard-code path to "internal/config.h"
  * fabrics: Do not pass disable_sqflow if not supported
  * fabrics: Read the supported options lazy
  * test: add discovery log page tests
  * test: add infra for mocking passthru ioctls
  * tree: fix segfault in nvme_scan_subsystem() (bsc#1213993)
  * src/nvme/tree.c: make __nvme_scan_subsystem() returning bool (bsc#1213993)
  * doc: fix minor mistake in README.md about dependencies
  * nvme-tree: avoid warning in 'list-subsys' (bsc#1212598)
  * tree: Add getter for subsystem iopolicy (bsc#1124564)
  * fabrics: Consider also all hosts settings for context match
  * tree: Scan all subsystems (bsc#1212598)
  * doc: Fixing compile instruction in README
  * mi: allow non-4-byte-aligned responses
  * mi-mctp: use a linear response buffer
  * mi: implement length and offset alignment checks in admin_xfer()
  * tree: Don't open nvme devices until it's absolutely required
    (bsc#1213527 bsc#1213686)
  * tree: missing closedir() causes fd leak for "/sys/bus/pci/slots"
  * mi: don't return from mi_mctp_submit with a tag held
  * util: Provide empty nvme_ipaddrs_eq for static builds
  * fabrics: Relax match on well known disc ctrl lookup
  * tree: Ignore NULL address pointer for phy slot lookup
  * fabrics: Filter discovery ctrls out during application context check
  * util: Add ignored error code
  * json: Use memory block allocated by realloc() instead printbuf
  * util: Use HAVE_NETDB instead of HAVE_LIBNSS
  * tree: Add PCI physical slot number for controller
  * tree: Use nvme_ipaddrs_eq() to compare IP addresses
  * fabrics: Add EADDRNOTAVAIL error mapping
  * fabrics: filter out subsystems with non-matching application string
  * libnvme: add 'application' setting to nvme_root
  * libnvme: add 'application' setting to the subsystem
  * test: Add more code coverage for nvme_ipaddrs_eq()
  * util: rename ipaddrs_eq() to nvme_ipaddrs_eq() and make public.
  * util: Add ipaddrs_eq() to check whether two IP addresses are equal
  * test: Add unit test for ctrl lookups
  * ioctl: fix RAE bit on last Get Log Page command (bsc#1213618)
  * fabrics: check genctr after getting discovery entries (bsc#1213618)
  * fabrics: handle /dev/nvme-fabrics read failure
  * fabrics: fix potential invalid memory access in __nvmf_supported_option()
  * Python: Fix crash during garbage collection
  * python/swig: Check swig version to determine whether -py3 is needed
  * python/swig: Wrap swig-sensitive struct inside #ifwdef SWIG
  * mi: Add nvme_mi_ctrl_id to retrieve controller ID
  * Python: Suppress swig warnings about unnamed struct
  * examples: fix incorrect controller status in MI info output
  * ioctl: Explicitly initialize all members of struct nvme_ns_mgmt_args
  * Python: make NBFT data more pythonic
  * ioctl: io management send, receive args fix
  * python: Update test data
  * NBFT: Remove documentation from nbft.c since it's also in nbft.h
  * Python: Add NBFT support
  * nbft: Doc typo - Use nvme_nbft_free() instead of nbft_free()
  * nbft: Parse the {HOSTID,HOSTNQN}_CONFIGURED flags
  * nbft: Fix nbft_ssns_flags endianness test
  * nbft: Add a simple unit test
  * doc: Update README
  * build: Simple muon build configuration
  * build: Extend summary section
  * build: Make json-c dependency lookup not fail
  * nbft: Move added symbols to LIBNVME_1_5
  * build: Update wrap mode defaults
  * build: Disable fallback on default
  * tree: Fix offset argument check in nvme_bytes_to_lba
  * nbft: add NBFT v1.0 table support (jsc#PED-1449)
  * types: Add IO command set specific field on nsmgmt
  * fabrics: Do not pass unsupported options to kernel
  * types: Add ns-mgmt host software specified fields
  * types.h: Add FDP related Status Code
  * tree: Fix argument check in nvme_bytes_to_lba</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420800">- Drop unencessary minimum version depedency on meson.
- Re-enable libdbus feature. Upstream defaults changed.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420801">- Enable tests during build
- Set git version tag
- Drop unused make dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696852800">- Use glob for python3-libnvme file listening. Workaround pycache_only
  problems for SLE/Leap builds.
- Drop usused libuuid dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1697112000">- Add missing jsc# tracking references to changelog</changelog>
  <changelog author="mwilck@suse.com" date="1697544000">- Update to version 1.6+5.g68c6ffb:
  * avoid stack corruption by unaligned DMA to user space buffers
    (bsc#1216344, gh#linux-nvme/libnvme#727)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1702987200">- Update to version 1.7+0.gf38b1d7:
  * tree: do not open blk device on default
  * tree: read all attributes from sysfs when available
  * ioctl: set data length when retrieving LBA status
  * types: fix regression for vendor-specific field in nvme_id_ns
  * util: use cleanup functions
  * linux: use cleanup functions
  * json: use cleanup functions
  * fabrics: use cleanup functions
  * tree: use cleanup functions
  * cleanup: add cleanup functions
  * tree: fix incorrect return value
  * tree: Fix clearing application strings
  * libnvme: reshuffle nvme_generate_tls_key_identity()
  * libnvme: fixup error codes
  * libnvme: Implement 'nvme_generate_tls_key_identity()'
  * libnvme: support NVMe TLS identities version 1 (bsc#1219086)
  * libnvme: Add base64 functions
  * libnvme: separate out 'gen_tls_identity' and reshuffle 'derive_nvme_keys'
  * libnvme: separate out a function 'select_hmac'
  * libnvme: fix a memory leak when calling read_ssns()
  * libnvme: fix a memory leak in read_discovery()
  * fabrics: avoid redundant args in nvme_discovery_log()
  * fabrics: have nvmf_get_discovery_log() call nvmf_get_discovery_wargs()
  * fabrics: fetch smaller Discovery Log Page header
  * fabrics: avoid redundant Get Log Page on retry
  * fabrics: clear RAE for discovery log page commands
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * types: add Host Behavior Support field definitions
  * mi: Cast values to u32 if shift overflows int
  * types: Cast values to u32 if shift overflows int
  * test: Avoid unaligned pointer dereferences
  * nbft: Avoid unaligned pointer dereferences
  * types: add cross-namespace copy formats, status codes, ONCS bits
  * nvme: Add length field to Hkdf-Expand-Label computation
  * ioctl: use lsp arg in nvme_get_log_boot_partition
  * fabrics: use SECTYPE to determine whether to use TLS (bsc#1219086)
  * fabrics: Allocate aligned payloads for id_ctrl and discovery log calls
  * linux: Allocate aligned payloads for id_ctrl and id_ns calls
  * ioctl: MSB variable-size storage/reference tags</changelog>
  <changelog author="daniel.wagner@suse.com" date="1703073600">- Update to version 1.7.1+0.g13ba383:
  * tree: do no free ns on error in nvme_ns_init</changelog>
  <changelog author="daniel.wagner@suse.com" date="1707912000">- Update to version 1.8+0.gbff7dda:
  * linux: Explicitly initialize auto-cleanup variables
  * example: fix mi identify failed with error cntid
  * tree: do not issue an error when subsys lookup fails during scanning
  * types: Add controller properties CMBEBS, CMBSWTP and NSSD
  * tests: Add sample NBFT table from Dell PowerEdge R660
  * tests: Add sample NBFT table from Dell PowerEdge R760
  * tests: Fix diffs output for duplicate HFI entries
  * nbft: avoid duplicate entries in ssns-&gt;hfis
  * nbft: Fix (struct nbft_info_subsystem_ns).num_hfis off-by-one
  * test: read and dump sysfs tar file
  * nvme: allow to overwrite hostnqn and hostid
  * nvme: allow to overwrite base sysfs path
  * json: dump the output to the user selected filedescriptor
  * libnvme: export nvme_dump_tree
  * fabrics: add 'concat' option
  * mi: set correct rc and errno when crc mismatch
  * tree: use logical block size for lba
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * build: checkout full repo for checkpatch
  * linux: avoid segfault in check-tls-key due to null hostnqn/subsysnqn (bsc#1219086)
  * meson.build: fixup 'join' syntax
  * util: Explicitly initialize auto-cleanup variables
  * tree: Explicitly initialize auto-cleanup variables
  * linux: Explicitly initialize auto-cleanup variables
  * fabrics: Explicitly initialize auto-cleanup variables
  * util: Added function to find specific UUID in UUID list.
  * build: fix release python tag match
- Disable new unit test which is not running stable in OSB
  * add 0001-build-disable-sysfs-test.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737600">- Update to version 1.9+0.g80c5cf2:
  * types: Added Command and Feature Lockdown LID
  * types: add ASQ, ACQ and BPMBL controller properties definitions
  * types: add controller properties enum documentation
  * types: fix CRTO.CRIMT mask value definition
  * tree: use strtou32 to read lba_size
  * types: Fix PMRWBM register name
  * examples: fix mi-mctp build warning errors
  * test: add CSTS.ST, CAP.CPS and CAP.NSSS registers
  * types: add CAP.CPS and CAP.NSSS definitions
  * types: add enum nvme_cap documentation
  * types: Add enum nvme_unit/cmbebs/cmbswtp/flbas/cmic documentation
  * util: Add string constant for ENVME_CONNECT_IGNORED
  * tests: Add sample NBFT table with mpath IPv4+IPv6 discovery
  * types: add controller status shutdown type (CSTS.ST) definition
  * types: Add enum nvme_csts documentation
  * types: Add NVME_CMIC definitions
  * types: Add CMBSWTP property definitions
  * types: Add NVME_CMBEBS property definitions
  * types: Fix boot partition read offset (BPROF) mask value
  * tree: fix mem leak in nvme_ns_init() (bsc#1223331)
  * fabrics: retry discovery log page when DNR is not set
  * ioctl: return EPROTO when an NVMe status occurred
  * linux: Allocate aligned payload for nvme_get_telemetry_log
  * test: use diff to compare sysfs output (bsc#1226216)
  * tree: fix lba_count size calculation
  * tree: Add NVM subsystem controller identifier (bsc#1224024)
  * test: Add unit test for nvme_id_ns_flbas_to_lbaf_inuse()
  * types: Fix NVME_CSTS_SHST_MASK definition
  * util: Fixed nvme_id_ns_flbas_to_lbaf_inuse()
  * types: Add optional data present filed mask and shift definition
  * types: Fix EOM header optional data present fields definition
  * libnvme : record the nvme pci adapter physical slot (bsc#1223208)
  * sysfs: minimize heap allocations of sysfs paths
  * json: Fix uninitialized variables
  * libnvme: add missing symbol nvme_scan_tls_keys (bsc#1226197)
  * nbft: Whitespace fixes (bsc#1222026)
  * tests: Add complex NBFT table from Dell R660 (bsc#1222026)
  * tests: Adapt to added NBFT SSNS flags (bsc#1222026)
  * nbft: Add SSNS 'discovered' flag (bsc#1222026)
  * nbft: Add SSNS 'unavailable' flag (bsc#1222026)
  * doc: Document the NBFT API (bsc#1222026)
  * ioctl: Move nvme_cmd_dword_fields definitions into header file
  * types: Add PEL set feature event layout definitions
  * types: Fix enum nvme_pel_rci documentation error
  * types: Add boot partition information definitions
  * types: Add PEL header additional information definitions
  * fabrics: keyring is a long (bsc#1216982)
  * config-schema.json.in: tls keys and keyrings are strings (bsc#1216982)
  * linux: Add nvme_scan_tls_keys() (bsc#1216982)
  * json: dump TLS key data in PSK interchange format (bsc#1216982)
  * json: import TLS key from PSK interchange format (bsc#1216982)
  * json: export TLS key in PSK interchange format (bsc#1216982)
  * tree: read TLS key in nvme_configure_ctrl() (bsc#1216982)
  * linux: rework nvme_insert_tls_key_versioned() (bsc#1216982)
  * linux: add nvme_import_tls_key() (bsc#1216982)
  * linux: add nvme_export_tls_key() (bsc#1216982)
  * crc32: Add CRC32 algorithm (bsc#1216982)
  * linux: add nvme_update_key() (bsc#1216982)
  * linux: add nvme_read_key() (bsc#1216982)
  * linux: allow for NULL argument in nvme_lookup_keyring() (bsc#1216982)
  * log: Respect DEFAULT_LOGLEVEL on uninitialized logging
  * log: Introduce nvme_get_logging_level()
  * ioctl: remove incomplete debug logging infrastructure
  * ioctl: export nvme_submit_passthru{64} as weak symbol (bsc#1231668)
  * log: move nvme_{set|get}_debug to log.c
  * fabrics: check the read() return value
  * types: Add PEL reporting context port identifier type definitions
  * types: Add persistent event log reporting context definitions
-  Upstream changed the sysfs test setup, thus sysfs test works in OSB
  * remove 0001-build-disable-sysfs-test.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1722600000">- Update to version 1.10:
  * linux: update TLS version 1 PSK derivation (bsc#1228376)
  * tree: fix nvme_read_config() to not set errno if return 0
  * types: add new fields added in TP4165 (bsc#1231668)
  * types: Changed the space into tap space (bsc#1231668)
  * tree: handle no address phy slot dirs (bsc#1229193)
  * linux: Remove the use of OpenSSL Engine API
  * types: Added new controller attribute as per TP4104
  * tree: add helper to lookup hostnqn/hostid (bsc#1226216)
  * fabrics: extend hostnqn/hostid variable inject interface (bsc#1226216)
  * json: filter out pcie transport (bsc#1226216)
  * tree: preserve parsing order of a config file (bsc#1226216)
  * types: add new field added in TP4099
  * types: add new field added in TP4090 (bsc#1231668)
  * linux: add nvme_revoke_tls_key (bsc#1226197)
  * tree: fix segfault in nvme_free_tree() (bsc#1231668)
  * types: add PEL vendor specific and TCG defined events definitions
  * mi-mctp: initialize the rc variable in handle_mctp_endpoint()
  * linux: avoid potential null pointer dereference
  * linux: add nvme_get_ana_log_len_from_id_ctrl()
  * libnvme: export nvme_mi_admin_get_ana_log_atomic()
  * ioctl: add support for atomic, piecewise ANA log fetch
  * ioctl: replace nvme_ana_rsp_hdr in doc comments
  * ioctl: respect rae in nvme_get_log_ana()
  * ioctl: fix nvme_get_log_ana_groups() pointer type
  * types: add new filed added in TP4141a
  * mi: Probe quirks on first command submission
  * tree: optionally skip namespaces during scanning
  * ioctl: update nvme_set_var_size_tags() to properly use reftag
  * types: add enum for Protection Information Format
  * libnvme: Introduce functions to generate host identifier and host NQN (bsc#1226216)
  * fabrics: Unescape URI elements
  * tests: Add uriparser tests
  * fabrics: Introduce simple URI parser
  * linux: default init cleanup variable
  * linux: Fix uninitialized variables
  * types: add the nvme Cancel command opcode
  * log: split log variables from root object
  * log: keep log level logic in one place
  * mi: restore default ep timeout during admin_passthru
  * mi: fix the rc for nvme_mi_scan_ep
  * ccan/endian.h: Only define __{BIG,LITTLE}_ENDIAN if undefined.
  * Use C99 types for uint32_t
  * mi: fix the return error code.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1730376000">- Update to version 1.11:
  * prefix: Use Request or Response Length in DLEN and DOFF for MI
  * types: Add ETPVDS and SSI fields of sanitize status log
  * json: do not escape strings when printing the configuration
  * tree: do no export tls keys when not provided by user
  * types: add struct nvme_id_ctrl_nvm ver and lbamqf member variables
  * types: add NVMe 2.1 get log page LIDs
  * type: Added enums for ANSAN and RGCNS bit of OAES field
  * linux: fixup PSK HMAC type '0' handling
  * util: added error code for ENOKEY
  * fabrics: fix map error level in __nvmf_add_ctrl
  * fabrics: add ctrl connect interface
  * fabrics: use hex numbers when generating command line options
  * fabrics: rename first argument for argument macros
  * linux: handle key import correctly
  * linux: export keys to config
  * tree: read tls_configured_key and tls_keyring from sysfs
  * tree: move dhchap and tls sysfs parser into separate functions
  * json: move keystore operations out of the JSON parser
  * tree: add getter/setters for TLS PSK
  * linux: add import/export function for TLS pre-shared keys
  * linux: only return the description of a key
  * linux: use ssize_t as return type for nvme_identity_len
  * linux: reorder variable declarations
  * types: Added enum for SMVES event of PEL log
  * libnvme: add lockdown log page support(LID : 0x14)
  * libnvme: add EMVS support to sanitize command
  * types: Add TP4159 PCIe Infrastructure for Live Migration definitions
  * types: add NVME_CTRL_OAES get macro definitions
  * types: add NVME_CTRL_OAES_TTHR definition
  * types: add NVME_CTRL_FNA definitions to get field values
  * types: add NVME_VAL() definition
  * tree: fix tls key mem leak (bsc#1231668)
  * tree: fix dhchap_ctrl_key mem leak (bsc#1231668)
  * tree: fix dhchap_key mem leak (bsc#1231668)
  * types: add NVME_CHECK() definition to check nvme register field value
  * types: add kv opcodes
  * types: added new fields in nvme_nvme_id_ns
  * types: Add enum for Completion Condition of Get LBA status command
  * ioctl: refactoring set_features
  * types: add new fields added in TP4142
  * mi: add control primitive command
  * linux: Correct error handling for derive_psk_digest (bsc#1228376)
  * types: Added new field CSER in enum as per TP4167
- build fix for OpenSSL 1.1
  * add 0001-linux-fix-derive_psk_digest-OpenSSL-1.1-version.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1732536000">- Fix tests on s390
  * add 0002-test-mock-pass-thru-unknown-ioctls.patch</changelog>
  <changelog author="dwagner@suse.de" date="1745323200">- Update to version 1.11+4.ge68a91ae:
  * tree: add routine to fetch subsys firmware rev (bsc#1240518)
  * tree: add routine to fetch subsys model (bsc#1240518)
  * test/mock: pass thru unknown ioctls
  * linux: fix derive_psk_digest OpenSSL 1.1 version
  - Remove merged patches
  * remove 0001-linux-fix-derive_psk_digest-OpenSSL-1.1-version.patch
  * remove 0002-test-mock-pass-thru-unknown-ioctls.patch</changelog>
</package>
<package pkgid="365e54d6bd431bd9d0dffc23985b3bdeba7841060fc88094f091f805e1532024" name="libnvme1" arch="x86_64">
  <version epoch="0" ver="1.11+6.g0d17be77" rel="150700.4.6.2"/>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 1.2:
  * Add more details for return code of MI admin cmds
  * Parse dhchap_host_key on controller level
  * Update json config schema for missing dhchap host key
  * fabrics: Add new TP8010 definitions
  * fabrics: Add nvmf_get_discovery_wargs()
  * fabrics: Duplicate strings when merging configs
  * fabrics: Filter out empty strings in add_argument()
  * fabrics: Use fallthrough statement
  * ioctl: Set log page offset for nvme_get_log_telemetry_host
  * json-schema: add dhchap_key details to host section
  * json: Enforce correctly formatted JSON config files
  * json: Verify JSON config file starts with an array
  * mi: Add Get Log Page helpers
  * mi: Add Identify function for secondary controller list
  * mi: Add Identify helper for ns-descs and primary-ctrl-caps
  * mi: Add firmware download and commit commands
  * mi: Add identify helper for nsid-capable Controller List
  * mi: Add identify helpers for namespace lists
  * mi: Add identify helpers for namespaces
  * mi: Allow Admin-message sized More Processing Required responses
  * mi: Distinguish MI status from NVMe (CDW3) status
  * mi: Fix C++ compiler errors
  * mi: Implement Format NVM command
  * mi: Implement Get &amp; Set Features Admin commands
  * mi: Implement NS attach command and helpers
  * mi: Implement Namespace Management command and create/delete helpers
  * mi: Implement Sanitize command
  * mi: Init ctrl_id within xfer
  * mi: Introduce a helper for response status, unify values with ioctls
  * mi: Set log page offset for nvme_get_log_telemetry_host
  * mi: add nvme_mi_status_to_string()
  * mi: fix a memory leak in nvme_mi_open_mctp()
  * mi: fix get_log_page chunked offset check
  * nvme-tree: avoid segfault if auth keys are unavailable
  * python: Use nvmf_get_discovery_wargs()
  * tree: rename controller 'dhchap_key' to 'dhchap_ctrl_key'
  * types: Move enum nvme_data_tfr to types
  * util: Add LINE_MAX define
  * util: Add get feature length 2 API to support direction parameter
  * util: Add simple UUID type
  * util: Do not expose fallthrough defines
- Make man page build conditiional. Install man page location has been
  fixed upstream.
- Mark the Python directory own by the libnvme3-python package</changelog>
  <changelog author="daniel.wagner@suse.com" date="1675080000">- Update to version 1.3:
  * Support added for Flexible Data Placement (TP4146)
  * Fabrics: added support for Persistent Discovery Controllers.
  * libnvme-mi added a quirk framework to workaround special behavior of
  certain devices
  * The python binding behaves more friendly in a threading environment
  by release the GIL on blocking calls.
  * Replaced  3the libsystemd dependency with libdbus
  * A lot of small fixes everywhere (leaks, wrong ordering of arguments, ...)
- Update spec file
  * Project depends on meson &gt;= 0.50.0</changelog>
  <changelog author="mwilck@suse.com" date="1675080001">- temporarily disable unit tests on s390x (bsc#1207687, bsc#1207686)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1680264000">- Update to version 1.4: (jsc#PED-553 jsc#PED-3884)
  * fabrics: Filter out invalid UUIDs from DMI
  * fabrics: Add define for DMI sysinfo
  * Print out correct TREQ strings for discovery
  * tree: fix generic device open failure
  * fabrics: add configuration option 'tls_key'
  * fabrics: add configuration option 'keyring'
  * linux: add key helper functions
  * nvme: add 'nvme_insert_tls_key()' function
  * linux: add nvme_lookup_keyring()
  * python: Change python option from combo to feature
  * types: add opcode field to error log page (TP4113)
  * python: Add setter property for controller DHCHAP Key
  * python: Remove redundant host.set_key() method
  * build, meson: Print option summary
  * Python: Add support for setting/getting Host DHCHAP key
  * Python: Add hostnqn_from_file() and hostid_from_file()
  * types: Update position of elbatm in struct nvme_copy_range{_f1}
  * doc: fix kernel-doc-check warning
  * python, meson: Assert that deps are present for -Dpython=true
  * python: Reformat SWIG input file
  * python test: Check there is no SIGSEGV during garbage collection
  * python: Return PyObject* from __str__() instead of a static char[]
  * python: Fix segmentation fault during garbage collection
  * build: Enable test in muon minimal build
  * build: Streamline workflows with nvme-cli
  * mi: Add nvme_mi_admin_get_log_page
  * ioctl: Set file descriptor in nvme_get_log_page()
  * fix endians
  * fabrics: Do not ignore one char whitespace when string sanitizing
- Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
- Fix invalid string lenght calculcation for UUID (bsc#1209906)
- Fix segmentation fault during garbage collection (bsc#1209905)
- Always sanitize traddr and trsvcid entries (bsc#1207435)
- Allow tracking unique discover controllers (bsc#1186689)</changelog>
  <changelog author="ana.guerrero@suse.com" date="1690459200">- Fix build with meson 1.2.0</changelog>
  <changelog author="daniel.wagner@suse.com" date="1695988800">- Update to version 1.6: (jsc#PED-3610 jsc#PED-4879 jsc#PED-5061)
  * docs: Fix Read-the-Docs configuration (deprecated config param)
  * mi-mctp: Fix free() in error path of mi_open_mctp
  * types: Use NVME_SET for status type mask to get status value
  * types: Define FLBAS MASK and SHIFT to use NVME_GET
  * types: Support Phy Rx Eye Opening Measurement Log
  * log: Add nvme root global variable to set for default output
  * types: Add support for the OAQD ID controller field
  * test: use non deprecated API
  * test: add tests for Get/Set Features functions
  * ioctl: implement nvme_set_features_lba_range()
  * ioctl: pass NSID in Get/Set Features commands that use it
  * ioctl: fix swapped parameters in nvme_set_features_host_id()
  * ioctl: export nvme_{g,s}et_features_iocs_profile()
  * ioctl: pass ENDGID in nvme_get_features_endurance_event_cfg()
  * ioctl: don't set SAVE bit on unsaveable features
  * ioctl: avoid sending uninitialized timestamp
  * ioctl: pass data for Get/Set Features commands
  * ioctl: set correct bits in Set Features commands
  * ioctl: correct feature IDs in Get/Set Features commands
  * tree: Add 2 new public functions to lookup existing controllers
  * ioctl: Add debugging feature to show command outputs
  * Fix incorrect article 'an' as 'a' to use for a description
  * linux: Added functions to enable faster telemetry data retrieval. Moved telemetry data area support detection into separate function. Added possibility to modify data transfer chunk size. Enable telemetry extraction up to specified data area. Removed some printf() and perror().
  * test: account for discovery log page entry stripping
  * fabrics: unconditionally strip discovery entry strings
  * fabrics: only look for spaces in strchomp()
  * tree: Use early return instead of else statements
  * test: fix lookup test case
  * test: make all function static
  * test: add tests for new tcp controller matching algorithm
  * tree: Improve TCP controller matching algorithm
  * util: Add functions to parse the system's interfaces
  * types: Add support for EGFEAT, Domain Identifier, TEGCAP and UEGCAP
  * mi: remove nsid from nvme_mi_admin_identify_secondary_ctrl_list()
  * test: add tests for nvme_ctrl_get_src_addr()
  * tree: Add nvme_ctrl_get_src_addr() to get the controller's src_addr
  * util: Split _nvme_ipaddrs_eq() from nvme_ipaddrs_eq()
  * test: add tests for Identify functions
  * ioctl: use available Identify helper functions
  * test: pass a large enough buffer to nvme_identify_ns_descs()
  * ioctl: remove nsid from nvme_identify_secondary_ctrl_list()
  * meson: Don't hard-code path to "internal/config.h"
  * fabrics: Do not pass disable_sqflow if not supported
  * fabrics: Read the supported options lazy
  * test: add discovery log page tests
  * test: add infra for mocking passthru ioctls
  * tree: fix segfault in nvme_scan_subsystem() (bsc#1213993)
  * src/nvme/tree.c: make __nvme_scan_subsystem() returning bool (bsc#1213993)
  * doc: fix minor mistake in README.md about dependencies
  * nvme-tree: avoid warning in 'list-subsys' (bsc#1212598)
  * tree: Add getter for subsystem iopolicy (bsc#1124564)
  * fabrics: Consider also all hosts settings for context match
  * tree: Scan all subsystems (bsc#1212598)
  * doc: Fixing compile instruction in README
  * mi: allow non-4-byte-aligned responses
  * mi-mctp: use a linear response buffer
  * mi: implement length and offset alignment checks in admin_xfer()
  * tree: Don't open nvme devices until it's absolutely required
    (bsc#1213527 bsc#1213686)
  * tree: missing closedir() causes fd leak for "/sys/bus/pci/slots"
  * mi: don't return from mi_mctp_submit with a tag held
  * util: Provide empty nvme_ipaddrs_eq for static builds
  * fabrics: Relax match on well known disc ctrl lookup
  * tree: Ignore NULL address pointer for phy slot lookup
  * fabrics: Filter discovery ctrls out during application context check
  * util: Add ignored error code
  * json: Use memory block allocated by realloc() instead printbuf
  * util: Use HAVE_NETDB instead of HAVE_LIBNSS
  * tree: Add PCI physical slot number for controller
  * tree: Use nvme_ipaddrs_eq() to compare IP addresses
  * fabrics: Add EADDRNOTAVAIL error mapping
  * fabrics: filter out subsystems with non-matching application string
  * libnvme: add 'application' setting to nvme_root
  * libnvme: add 'application' setting to the subsystem
  * test: Add more code coverage for nvme_ipaddrs_eq()
  * util: rename ipaddrs_eq() to nvme_ipaddrs_eq() and make public.
  * util: Add ipaddrs_eq() to check whether two IP addresses are equal
  * test: Add unit test for ctrl lookups
  * ioctl: fix RAE bit on last Get Log Page command (bsc#1213618)
  * fabrics: check genctr after getting discovery entries (bsc#1213618)
  * fabrics: handle /dev/nvme-fabrics read failure
  * fabrics: fix potential invalid memory access in __nvmf_supported_option()
  * Python: Fix crash during garbage collection
  * python/swig: Check swig version to determine whether -py3 is needed
  * python/swig: Wrap swig-sensitive struct inside #ifwdef SWIG
  * mi: Add nvme_mi_ctrl_id to retrieve controller ID
  * Python: Suppress swig warnings about unnamed struct
  * examples: fix incorrect controller status in MI info output
  * ioctl: Explicitly initialize all members of struct nvme_ns_mgmt_args
  * Python: make NBFT data more pythonic
  * ioctl: io management send, receive args fix
  * python: Update test data
  * NBFT: Remove documentation from nbft.c since it's also in nbft.h
  * Python: Add NBFT support
  * nbft: Doc typo - Use nvme_nbft_free() instead of nbft_free()
  * nbft: Parse the {HOSTID,HOSTNQN}_CONFIGURED flags
  * nbft: Fix nbft_ssns_flags endianness test
  * nbft: Add a simple unit test
  * doc: Update README
  * build: Simple muon build configuration
  * build: Extend summary section
  * build: Make json-c dependency lookup not fail
  * nbft: Move added symbols to LIBNVME_1_5
  * build: Update wrap mode defaults
  * build: Disable fallback on default
  * tree: Fix offset argument check in nvme_bytes_to_lba
  * nbft: add NBFT v1.0 table support (jsc#PED-1449)
  * types: Add IO command set specific field on nsmgmt
  * fabrics: Do not pass unsupported options to kernel
  * types: Add ns-mgmt host software specified fields
  * types.h: Add FDP related Status Code
  * tree: Fix argument check in nvme_bytes_to_lba</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420800">- Drop unencessary minimum version depedency on meson.
- Re-enable libdbus feature. Upstream defaults changed.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420801">- Enable tests during build
- Set git version tag
- Drop unused make dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696852800">- Use glob for python3-libnvme file listening. Workaround pycache_only
  problems for SLE/Leap builds.
- Drop usused libuuid dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1697112000">- Add missing jsc# tracking references to changelog</changelog>
  <changelog author="mwilck@suse.com" date="1697544000">- Update to version 1.6+5.g68c6ffb:
  * avoid stack corruption by unaligned DMA to user space buffers
    (bsc#1216344, gh#linux-nvme/libnvme#727)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1702987200">- Update to version 1.7+0.gf38b1d7:
  * tree: do not open blk device on default
  * tree: read all attributes from sysfs when available
  * ioctl: set data length when retrieving LBA status
  * types: fix regression for vendor-specific field in nvme_id_ns
  * util: use cleanup functions
  * linux: use cleanup functions
  * json: use cleanup functions
  * fabrics: use cleanup functions
  * tree: use cleanup functions
  * cleanup: add cleanup functions
  * tree: fix incorrect return value
  * tree: Fix clearing application strings
  * libnvme: reshuffle nvme_generate_tls_key_identity()
  * libnvme: fixup error codes
  * libnvme: Implement 'nvme_generate_tls_key_identity()'
  * libnvme: support NVMe TLS identities version 1 (bsc#1219086)
  * libnvme: Add base64 functions
  * libnvme: separate out 'gen_tls_identity' and reshuffle 'derive_nvme_keys'
  * libnvme: separate out a function 'select_hmac'
  * libnvme: fix a memory leak when calling read_ssns()
  * libnvme: fix a memory leak in read_discovery()
  * fabrics: avoid redundant args in nvme_discovery_log()
  * fabrics: have nvmf_get_discovery_log() call nvmf_get_discovery_wargs()
  * fabrics: fetch smaller Discovery Log Page header
  * fabrics: avoid redundant Get Log Page on retry
  * fabrics: clear RAE for discovery log page commands
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * types: add Host Behavior Support field definitions
  * mi: Cast values to u32 if shift overflows int
  * types: Cast values to u32 if shift overflows int
  * test: Avoid unaligned pointer dereferences
  * nbft: Avoid unaligned pointer dereferences
  * types: add cross-namespace copy formats, status codes, ONCS bits
  * nvme: Add length field to Hkdf-Expand-Label computation
  * ioctl: use lsp arg in nvme_get_log_boot_partition
  * fabrics: use SECTYPE to determine whether to use TLS (bsc#1219086)
  * fabrics: Allocate aligned payloads for id_ctrl and discovery log calls
  * linux: Allocate aligned payloads for id_ctrl and id_ns calls
  * ioctl: MSB variable-size storage/reference tags</changelog>
  <changelog author="daniel.wagner@suse.com" date="1703073600">- Update to version 1.7.1+0.g13ba383:
  * tree: do no free ns on error in nvme_ns_init</changelog>
  <changelog author="daniel.wagner@suse.com" date="1707912000">- Update to version 1.8+0.gbff7dda:
  * linux: Explicitly initialize auto-cleanup variables
  * example: fix mi identify failed with error cntid
  * tree: do not issue an error when subsys lookup fails during scanning
  * types: Add controller properties CMBEBS, CMBSWTP and NSSD
  * tests: Add sample NBFT table from Dell PowerEdge R660
  * tests: Add sample NBFT table from Dell PowerEdge R760
  * tests: Fix diffs output for duplicate HFI entries
  * nbft: avoid duplicate entries in ssns-&gt;hfis
  * nbft: Fix (struct nbft_info_subsystem_ns).num_hfis off-by-one
  * test: read and dump sysfs tar file
  * nvme: allow to overwrite hostnqn and hostid
  * nvme: allow to overwrite base sysfs path
  * json: dump the output to the user selected filedescriptor
  * libnvme: export nvme_dump_tree
  * fabrics: add 'concat' option
  * mi: set correct rc and errno when crc mismatch
  * tree: use logical block size for lba
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * build: checkout full repo for checkpatch
  * linux: avoid segfault in check-tls-key due to null hostnqn/subsysnqn (bsc#1219086)
  * meson.build: fixup 'join' syntax
  * util: Explicitly initialize auto-cleanup variables
  * tree: Explicitly initialize auto-cleanup variables
  * linux: Explicitly initialize auto-cleanup variables
  * fabrics: Explicitly initialize auto-cleanup variables
  * util: Added function to find specific UUID in UUID list.
  * build: fix release python tag match
- Disable new unit test which is not running stable in OSB
  * add 0001-build-disable-sysfs-test.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737600">- Update to version 1.9+0.g80c5cf2:
  * types: Added Command and Feature Lockdown LID
  * types: add ASQ, ACQ and BPMBL controller properties definitions
  * types: add controller properties enum documentation
  * types: fix CRTO.CRIMT mask value definition
  * tree: use strtou32 to read lba_size
  * types: Fix PMRWBM register name
  * examples: fix mi-mctp build warning errors
  * test: add CSTS.ST, CAP.CPS and CAP.NSSS registers
  * types: add CAP.CPS and CAP.NSSS definitions
  * types: add enum nvme_cap documentation
  * types: Add enum nvme_unit/cmbebs/cmbswtp/flbas/cmic documentation
  * util: Add string constant for ENVME_CONNECT_IGNORED
  * tests: Add sample NBFT table with mpath IPv4+IPv6 discovery
  * types: add controller status shutdown type (CSTS.ST) definition
  * types: Add enum nvme_csts documentation
  * types: Add NVME_CMIC definitions
  * types: Add CMBSWTP property definitions
  * types: Add NVME_CMBEBS property definitions
  * types: Fix boot partition read offset (BPROF) mask value
  * tree: fix mem leak in nvme_ns_init() (bsc#1223331)
  * fabrics: retry discovery log page when DNR is not set
  * ioctl: return EPROTO when an NVMe status occurred
  * linux: Allocate aligned payload for nvme_get_telemetry_log
  * test: use diff to compare sysfs output (bsc#1226216)
  * tree: fix lba_count size calculation
  * tree: Add NVM subsystem controller identifier (bsc#1224024)
  * test: Add unit test for nvme_id_ns_flbas_to_lbaf_inuse()
  * types: Fix NVME_CSTS_SHST_MASK definition
  * util: Fixed nvme_id_ns_flbas_to_lbaf_inuse()
  * types: Add optional data present filed mask and shift definition
  * types: Fix EOM header optional data present fields definition
  * libnvme : record the nvme pci adapter physical slot (bsc#1223208)
  * sysfs: minimize heap allocations of sysfs paths
  * json: Fix uninitialized variables
  * libnvme: add missing symbol nvme_scan_tls_keys (bsc#1226197)
  * nbft: Whitespace fixes (bsc#1222026)
  * tests: Add complex NBFT table from Dell R660 (bsc#1222026)
  * tests: Adapt to added NBFT SSNS flags (bsc#1222026)
  * nbft: Add SSNS 'discovered' flag (bsc#1222026)
  * nbft: Add SSNS 'unavailable' flag (bsc#1222026)
  * doc: Document the NBFT API (bsc#1222026)
  * ioctl: Move nvme_cmd_dword_fields definitions into header file
  * types: Add PEL set feature event layout definitions
  * types: Fix enum nvme_pel_rci documentation error
  * types: Add boot partition information definitions
  * types: Add PEL header additional information definitions
  * fabrics: keyring is a long (bsc#1216982)
  * config-schema.json.in: tls keys and keyrings are strings (bsc#1216982)
  * linux: Add nvme_scan_tls_keys() (bsc#1216982)
  * json: dump TLS key data in PSK interchange format (bsc#1216982)
  * json: import TLS key from PSK interchange format (bsc#1216982)
  * json: export TLS key in PSK interchange format (bsc#1216982)
  * tree: read TLS key in nvme_configure_ctrl() (bsc#1216982)
  * linux: rework nvme_insert_tls_key_versioned() (bsc#1216982)
  * linux: add nvme_import_tls_key() (bsc#1216982)
  * linux: add nvme_export_tls_key() (bsc#1216982)
  * crc32: Add CRC32 algorithm (bsc#1216982)
  * linux: add nvme_update_key() (bsc#1216982)
  * linux: add nvme_read_key() (bsc#1216982)
  * linux: allow for NULL argument in nvme_lookup_keyring() (bsc#1216982)
  * log: Respect DEFAULT_LOGLEVEL on uninitialized logging
  * log: Introduce nvme_get_logging_level()
  * ioctl: remove incomplete debug logging infrastructure
  * ioctl: export nvme_submit_passthru{64} as weak symbol (bsc#1231668)
  * log: move nvme_{set|get}_debug to log.c
  * fabrics: check the read() return value
  * types: Add PEL reporting context port identifier type definitions
  * types: Add persistent event log reporting context definitions
-  Upstream changed the sysfs test setup, thus sysfs test works in OSB
  * remove 0001-build-disable-sysfs-test.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1722600000">- Update to version 1.10:
  * linux: update TLS version 1 PSK derivation (bsc#1228376)
  * tree: fix nvme_read_config() to not set errno if return 0
  * types: add new fields added in TP4165 (bsc#1231668)
  * types: Changed the space into tap space (bsc#1231668)
  * tree: handle no address phy slot dirs (bsc#1229193)
  * linux: Remove the use of OpenSSL Engine API
  * types: Added new controller attribute as per TP4104
  * tree: add helper to lookup hostnqn/hostid (bsc#1226216)
  * fabrics: extend hostnqn/hostid variable inject interface (bsc#1226216)
  * json: filter out pcie transport (bsc#1226216)
  * tree: preserve parsing order of a config file (bsc#1226216)
  * types: add new field added in TP4099
  * types: add new field added in TP4090 (bsc#1231668)
  * linux: add nvme_revoke_tls_key (bsc#1226197)
  * tree: fix segfault in nvme_free_tree() (bsc#1231668)
  * types: add PEL vendor specific and TCG defined events definitions
  * mi-mctp: initialize the rc variable in handle_mctp_endpoint()
  * linux: avoid potential null pointer dereference
  * linux: add nvme_get_ana_log_len_from_id_ctrl()
  * libnvme: export nvme_mi_admin_get_ana_log_atomic()
  * ioctl: add support for atomic, piecewise ANA log fetch
  * ioctl: replace nvme_ana_rsp_hdr in doc comments
  * ioctl: respect rae in nvme_get_log_ana()
  * ioctl: fix nvme_get_log_ana_groups() pointer type
  * types: add new filed added in TP4141a
  * mi: Probe quirks on first command submission
  * tree: optionally skip namespaces during scanning
  * ioctl: update nvme_set_var_size_tags() to properly use reftag
  * types: add enum for Protection Information Format
  * libnvme: Introduce functions to generate host identifier and host NQN (bsc#1226216)
  * fabrics: Unescape URI elements
  * tests: Add uriparser tests
  * fabrics: Introduce simple URI parser
  * linux: default init cleanup variable
  * linux: Fix uninitialized variables
  * types: add the nvme Cancel command opcode
  * log: split log variables from root object
  * log: keep log level logic in one place
  * mi: restore default ep timeout during admin_passthru
  * mi: fix the rc for nvme_mi_scan_ep
  * ccan/endian.h: Only define __{BIG,LITTLE}_ENDIAN if undefined.
  * Use C99 types for uint32_t
  * mi: fix the return error code.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1730376000">- Update to version 1.11:
  * prefix: Use Request or Response Length in DLEN and DOFF for MI
  * types: Add ETPVDS and SSI fields of sanitize status log
  * json: do not escape strings when printing the configuration
  * tree: do no export tls keys when not provided by user
  * types: add struct nvme_id_ctrl_nvm ver and lbamqf member variables
  * types: add NVMe 2.1 get log page LIDs
  * type: Added enums for ANSAN and RGCNS bit of OAES field
  * linux: fixup PSK HMAC type '0' handling
  * util: added error code for ENOKEY
  * fabrics: fix map error level in __nvmf_add_ctrl
  * fabrics: add ctrl connect interface
  * fabrics: use hex numbers when generating command line options
  * fabrics: rename first argument for argument macros
  * linux: handle key import correctly
  * linux: export keys to config
  * tree: read tls_configured_key and tls_keyring from sysfs
  * tree: move dhchap and tls sysfs parser into separate functions
  * json: move keystore operations out of the JSON parser
  * tree: add getter/setters for TLS PSK
  * linux: add import/export function for TLS pre-shared keys
  * linux: only return the description of a key
  * linux: use ssize_t as return type for nvme_identity_len
  * linux: reorder variable declarations
  * types: Added enum for SMVES event of PEL log
  * libnvme: add lockdown log page support(LID : 0x14)
  * libnvme: add EMVS support to sanitize command
  * types: Add TP4159 PCIe Infrastructure for Live Migration definitions
  * types: add NVME_CTRL_OAES get macro definitions
  * types: add NVME_CTRL_OAES_TTHR definition
  * types: add NVME_CTRL_FNA definitions to get field values
  * types: add NVME_VAL() definition
  * tree: fix tls key mem leak (bsc#1231668)
  * tree: fix dhchap_ctrl_key mem leak (bsc#1231668)
  * tree: fix dhchap_key mem leak (bsc#1231668)
  * types: add NVME_CHECK() definition to check nvme register field value
  * types: add kv opcodes
  * types: added new fields in nvme_nvme_id_ns
  * types: Add enum for Completion Condition of Get LBA status command
  * ioctl: refactoring set_features
  * types: add new fields added in TP4142
  * mi: add control primitive command
  * linux: Correct error handling for derive_psk_digest (bsc#1228376)
  * types: Added new field CSER in enum as per TP4167
- build fix for OpenSSL 1.1
  * add 0001-linux-fix-derive_psk_digest-OpenSSL-1.1-version.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1732536000">- Fix tests on s390
  * add 0002-test-mock-pass-thru-unknown-ioctls.patch</changelog>
  <changelog author="dwagner@suse.de" date="1745323200">- Update to version 1.11+4.ge68a91ae:
  * tree: add routine to fetch subsys firmware rev (bsc#1240518)
  * tree: add routine to fetch subsys model (bsc#1240518)
  * test/mock: pass thru unknown ioctls
  * linux: fix derive_psk_digest OpenSSL 1.1 version
  - Remove merged patches
  * remove 0001-linux-fix-derive_psk_digest-OpenSSL-1.1-version.patch
  * remove 0002-test-mock-pass-thru-unknown-ioctls.patch</changelog>
  <changelog author="dwagner@suse.de" date="1753185600">- Update to version 1.11+6.g0d17be77:
  * tree: free ctrl attributes when (re)configure ctrl (bsc#1243716)
  * tree: filter tree after scan has completed (bsc#1243716)</changelog>
</package>
<package pkgid="42e43d9f901633a831c367a4de57fe1e74d2c40e53385998dca0fd1cd34d1211" name="libnvme1" arch="x86_64">
  <version epoch="0" ver="1.11+8.gfb9b581c" rel="150700.4.9.1"/>
  <changelog author="daniel.wagner@suse.com" date="1675080000">- Update to version 1.3:
  * Support added for Flexible Data Placement (TP4146)
  * Fabrics: added support for Persistent Discovery Controllers.
  * libnvme-mi added a quirk framework to workaround special behavior of
  certain devices
  * The python binding behaves more friendly in a threading environment
  by release the GIL on blocking calls.
  * Replaced  3the libsystemd dependency with libdbus
  * A lot of small fixes everywhere (leaks, wrong ordering of arguments, ...)
- Update spec file
  * Project depends on meson &gt;= 0.50.0</changelog>
  <changelog author="mwilck@suse.com" date="1675080001">- temporarily disable unit tests on s390x (bsc#1207687, bsc#1207686)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1680264000">- Update to version 1.4: (jsc#PED-553 jsc#PED-3884)
  * fabrics: Filter out invalid UUIDs from DMI
  * fabrics: Add define for DMI sysinfo
  * Print out correct TREQ strings for discovery
  * tree: fix generic device open failure
  * fabrics: add configuration option 'tls_key'
  * fabrics: add configuration option 'keyring'
  * linux: add key helper functions
  * nvme: add 'nvme_insert_tls_key()' function
  * linux: add nvme_lookup_keyring()
  * python: Change python option from combo to feature
  * types: add opcode field to error log page (TP4113)
  * python: Add setter property for controller DHCHAP Key
  * python: Remove redundant host.set_key() method
  * build, meson: Print option summary
  * Python: Add support for setting/getting Host DHCHAP key
  * Python: Add hostnqn_from_file() and hostid_from_file()
  * types: Update position of elbatm in struct nvme_copy_range{_f1}
  * doc: fix kernel-doc-check warning
  * python, meson: Assert that deps are present for -Dpython=true
  * python: Reformat SWIG input file
  * python test: Check there is no SIGSEGV during garbage collection
  * python: Return PyObject* from __str__() instead of a static char[]
  * python: Fix segmentation fault during garbage collection
  * build: Enable test in muon minimal build
  * build: Streamline workflows with nvme-cli
  * mi: Add nvme_mi_admin_get_log_page
  * ioctl: Set file descriptor in nvme_get_log_page()
  * fix endians
  * fabrics: Do not ignore one char whitespace when string sanitizing
- Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
- Fix invalid string lenght calculcation for UUID (bsc#1209906)
- Fix segmentation fault during garbage collection (bsc#1209905)
- Always sanitize traddr and trsvcid entries (bsc#1207435)
- Allow tracking unique discover controllers (bsc#1186689)</changelog>
  <changelog author="ana.guerrero@suse.com" date="1690459200">- Fix build with meson 1.2.0</changelog>
  <changelog author="daniel.wagner@suse.com" date="1695988800">- Update to version 1.6: (jsc#PED-3610 jsc#PED-4879 jsc#PED-5061)
  * docs: Fix Read-the-Docs configuration (deprecated config param)
  * mi-mctp: Fix free() in error path of mi_open_mctp
  * types: Use NVME_SET for status type mask to get status value
  * types: Define FLBAS MASK and SHIFT to use NVME_GET
  * types: Support Phy Rx Eye Opening Measurement Log
  * log: Add nvme root global variable to set for default output
  * types: Add support for the OAQD ID controller field
  * test: use non deprecated API
  * test: add tests for Get/Set Features functions
  * ioctl: implement nvme_set_features_lba_range()
  * ioctl: pass NSID in Get/Set Features commands that use it
  * ioctl: fix swapped parameters in nvme_set_features_host_id()
  * ioctl: export nvme_{g,s}et_features_iocs_profile()
  * ioctl: pass ENDGID in nvme_get_features_endurance_event_cfg()
  * ioctl: don't set SAVE bit on unsaveable features
  * ioctl: avoid sending uninitialized timestamp
  * ioctl: pass data for Get/Set Features commands
  * ioctl: set correct bits in Set Features commands
  * ioctl: correct feature IDs in Get/Set Features commands
  * tree: Add 2 new public functions to lookup existing controllers
  * ioctl: Add debugging feature to show command outputs
  * Fix incorrect article 'an' as 'a' to use for a description
  * linux: Added functions to enable faster telemetry data retrieval. Moved telemetry data area support detection into separate function. Added possibility to modify data transfer chunk size. Enable telemetry extraction up to specified data area. Removed some printf() and perror().
  * test: account for discovery log page entry stripping
  * fabrics: unconditionally strip discovery entry strings
  * fabrics: only look for spaces in strchomp()
  * tree: Use early return instead of else statements
  * test: fix lookup test case
  * test: make all function static
  * test: add tests for new tcp controller matching algorithm
  * tree: Improve TCP controller matching algorithm
  * util: Add functions to parse the system's interfaces
  * types: Add support for EGFEAT, Domain Identifier, TEGCAP and UEGCAP
  * mi: remove nsid from nvme_mi_admin_identify_secondary_ctrl_list()
  * test: add tests for nvme_ctrl_get_src_addr()
  * tree: Add nvme_ctrl_get_src_addr() to get the controller's src_addr
  * util: Split _nvme_ipaddrs_eq() from nvme_ipaddrs_eq()
  * test: add tests for Identify functions
  * ioctl: use available Identify helper functions
  * test: pass a large enough buffer to nvme_identify_ns_descs()
  * ioctl: remove nsid from nvme_identify_secondary_ctrl_list()
  * meson: Don't hard-code path to "internal/config.h"
  * fabrics: Do not pass disable_sqflow if not supported
  * fabrics: Read the supported options lazy
  * test: add discovery log page tests
  * test: add infra for mocking passthru ioctls
  * tree: fix segfault in nvme_scan_subsystem() (bsc#1213993)
  * src/nvme/tree.c: make __nvme_scan_subsystem() returning bool (bsc#1213993)
  * doc: fix minor mistake in README.md about dependencies
  * nvme-tree: avoid warning in 'list-subsys' (bsc#1212598)
  * tree: Add getter for subsystem iopolicy (bsc#1124564)
  * fabrics: Consider also all hosts settings for context match
  * tree: Scan all subsystems (bsc#1212598)
  * doc: Fixing compile instruction in README
  * mi: allow non-4-byte-aligned responses
  * mi-mctp: use a linear response buffer
  * mi: implement length and offset alignment checks in admin_xfer()
  * tree: Don't open nvme devices until it's absolutely required
    (bsc#1213527 bsc#1213686)
  * tree: missing closedir() causes fd leak for "/sys/bus/pci/slots"
  * mi: don't return from mi_mctp_submit with a tag held
  * util: Provide empty nvme_ipaddrs_eq for static builds
  * fabrics: Relax match on well known disc ctrl lookup
  * tree: Ignore NULL address pointer for phy slot lookup
  * fabrics: Filter discovery ctrls out during application context check
  * util: Add ignored error code
  * json: Use memory block allocated by realloc() instead printbuf
  * util: Use HAVE_NETDB instead of HAVE_LIBNSS
  * tree: Add PCI physical slot number for controller
  * tree: Use nvme_ipaddrs_eq() to compare IP addresses
  * fabrics: Add EADDRNOTAVAIL error mapping
  * fabrics: filter out subsystems with non-matching application string
  * libnvme: add 'application' setting to nvme_root
  * libnvme: add 'application' setting to the subsystem
  * test: Add more code coverage for nvme_ipaddrs_eq()
  * util: rename ipaddrs_eq() to nvme_ipaddrs_eq() and make public.
  * util: Add ipaddrs_eq() to check whether two IP addresses are equal
  * test: Add unit test for ctrl lookups
  * ioctl: fix RAE bit on last Get Log Page command (bsc#1213618)
  * fabrics: check genctr after getting discovery entries (bsc#1213618)
  * fabrics: handle /dev/nvme-fabrics read failure
  * fabrics: fix potential invalid memory access in __nvmf_supported_option()
  * Python: Fix crash during garbage collection
  * python/swig: Check swig version to determine whether -py3 is needed
  * python/swig: Wrap swig-sensitive struct inside #ifwdef SWIG
  * mi: Add nvme_mi_ctrl_id to retrieve controller ID
  * Python: Suppress swig warnings about unnamed struct
  * examples: fix incorrect controller status in MI info output
  * ioctl: Explicitly initialize all members of struct nvme_ns_mgmt_args
  * Python: make NBFT data more pythonic
  * ioctl: io management send, receive args fix
  * python: Update test data
  * NBFT: Remove documentation from nbft.c since it's also in nbft.h
  * Python: Add NBFT support
  * nbft: Doc typo - Use nvme_nbft_free() instead of nbft_free()
  * nbft: Parse the {HOSTID,HOSTNQN}_CONFIGURED flags
  * nbft: Fix nbft_ssns_flags endianness test
  * nbft: Add a simple unit test
  * doc: Update README
  * build: Simple muon build configuration
  * build: Extend summary section
  * build: Make json-c dependency lookup not fail
  * nbft: Move added symbols to LIBNVME_1_5
  * build: Update wrap mode defaults
  * build: Disable fallback on default
  * tree: Fix offset argument check in nvme_bytes_to_lba
  * nbft: add NBFT v1.0 table support (jsc#PED-1449)
  * types: Add IO command set specific field on nsmgmt
  * fabrics: Do not pass unsupported options to kernel
  * types: Add ns-mgmt host software specified fields
  * types.h: Add FDP related Status Code
  * tree: Fix argument check in nvme_bytes_to_lba</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420800">- Drop unencessary minimum version depedency on meson.
- Re-enable libdbus feature. Upstream defaults changed.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420801">- Enable tests during build
- Set git version tag
- Drop unused make dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696852800">- Use glob for python3-libnvme file listening. Workaround pycache_only
  problems for SLE/Leap builds.
- Drop usused libuuid dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1697112000">- Add missing jsc# tracking references to changelog</changelog>
  <changelog author="mwilck@suse.com" date="1697544000">- Update to version 1.6+5.g68c6ffb:
  * avoid stack corruption by unaligned DMA to user space buffers
    (bsc#1216344, gh#linux-nvme/libnvme#727)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1702987200">- Update to version 1.7+0.gf38b1d7:
  * tree: do not open blk device on default
  * tree: read all attributes from sysfs when available
  * ioctl: set data length when retrieving LBA status
  * types: fix regression for vendor-specific field in nvme_id_ns
  * util: use cleanup functions
  * linux: use cleanup functions
  * json: use cleanup functions
  * fabrics: use cleanup functions
  * tree: use cleanup functions
  * cleanup: add cleanup functions
  * tree: fix incorrect return value
  * tree: Fix clearing application strings
  * libnvme: reshuffle nvme_generate_tls_key_identity()
  * libnvme: fixup error codes
  * libnvme: Implement 'nvme_generate_tls_key_identity()'
  * libnvme: support NVMe TLS identities version 1 (bsc#1219086)
  * libnvme: Add base64 functions
  * libnvme: separate out 'gen_tls_identity' and reshuffle 'derive_nvme_keys'
  * libnvme: separate out a function 'select_hmac'
  * libnvme: fix a memory leak when calling read_ssns()
  * libnvme: fix a memory leak in read_discovery()
  * fabrics: avoid redundant args in nvme_discovery_log()
  * fabrics: have nvmf_get_discovery_log() call nvmf_get_discovery_wargs()
  * fabrics: fetch smaller Discovery Log Page header
  * fabrics: avoid redundant Get Log Page on retry
  * fabrics: clear RAE for discovery log page commands
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * types: add Host Behavior Support field definitions
  * mi: Cast values to u32 if shift overflows int
  * types: Cast values to u32 if shift overflows int
  * test: Avoid unaligned pointer dereferences
  * nbft: Avoid unaligned pointer dereferences
  * types: add cross-namespace copy formats, status codes, ONCS bits
  * nvme: Add length field to Hkdf-Expand-Label computation
  * ioctl: use lsp arg in nvme_get_log_boot_partition
  * fabrics: use SECTYPE to determine whether to use TLS (bsc#1219086)
  * fabrics: Allocate aligned payloads for id_ctrl and discovery log calls
  * linux: Allocate aligned payloads for id_ctrl and id_ns calls
  * ioctl: MSB variable-size storage/reference tags</changelog>
  <changelog author="daniel.wagner@suse.com" date="1703073600">- Update to version 1.7.1+0.g13ba383:
  * tree: do no free ns on error in nvme_ns_init</changelog>
  <changelog author="daniel.wagner@suse.com" date="1707912000">- Update to version 1.8+0.gbff7dda:
  * linux: Explicitly initialize auto-cleanup variables
  * example: fix mi identify failed with error cntid
  * tree: do not issue an error when subsys lookup fails during scanning
  * types: Add controller properties CMBEBS, CMBSWTP and NSSD
  * tests: Add sample NBFT table from Dell PowerEdge R660
  * tests: Add sample NBFT table from Dell PowerEdge R760
  * tests: Fix diffs output for duplicate HFI entries
  * nbft: avoid duplicate entries in ssns-&gt;hfis
  * nbft: Fix (struct nbft_info_subsystem_ns).num_hfis off-by-one
  * test: read and dump sysfs tar file
  * nvme: allow to overwrite hostnqn and hostid
  * nvme: allow to overwrite base sysfs path
  * json: dump the output to the user selected filedescriptor
  * libnvme: export nvme_dump_tree
  * fabrics: add 'concat' option
  * mi: set correct rc and errno when crc mismatch
  * tree: use logical block size for lba
  * json-schema: add keyring and tls_key details (bsc#1219086)
  * build: checkout full repo for checkpatch
  * linux: avoid segfault in check-tls-key due to null hostnqn/subsysnqn (bsc#1219086)
  * meson.build: fixup 'join' syntax
  * util: Explicitly initialize auto-cleanup variables
  * tree: Explicitly initialize auto-cleanup variables
  * linux: Explicitly initialize auto-cleanup variables
  * fabrics: Explicitly initialize auto-cleanup variables
  * util: Added function to find specific UUID in UUID list.
  * build: fix release python tag match
- Disable new unit test which is not running stable in OSB
  * add 0001-build-disable-sysfs-test.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737600">- Update to version 1.9+0.g80c5cf2:
  * types: Added Command and Feature Lockdown LID
  * types: add ASQ, ACQ and BPMBL controller properties definitions
  * types: add controller properties enum documentation
  * types: fix CRTO.CRIMT mask value definition
  * tree: use strtou32 to read lba_size
  * types: Fix PMRWBM register name
  * examples: fix mi-mctp build warning errors
  * test: add CSTS.ST, CAP.CPS and CAP.NSSS registers
  * types: add CAP.CPS and CAP.NSSS definitions
  * types: add enum nvme_cap documentation
  * types: Add enum nvme_unit/cmbebs/cmbswtp/flbas/cmic documentation
  * util: Add string constant for ENVME_CONNECT_IGNORED
  * tests: Add sample NBFT table with mpath IPv4+IPv6 discovery
  * types: add controller status shutdown type (CSTS.ST) definition
  * types: Add enum nvme_csts documentation
  * types: Add NVME_CMIC definitions
  * types: Add CMBSWTP property definitions
  * types: Add NVME_CMBEBS property definitions
  * types: Fix boot partition read offset (BPROF) mask value
  * tree: fix mem leak in nvme_ns_init() (bsc#1223331)
  * fabrics: retry discovery log page when DNR is not set
  * ioctl: return EPROTO when an NVMe status occurred
  * linux: Allocate aligned payload for nvme_get_telemetry_log
  * test: use diff to compare sysfs output (bsc#1226216)
  * tree: fix lba_count size calculation
  * tree: Add NVM subsystem controller identifier (bsc#1224024)
  * test: Add unit test for nvme_id_ns_flbas_to_lbaf_inuse()
  * types: Fix NVME_CSTS_SHST_MASK definition
  * util: Fixed nvme_id_ns_flbas_to_lbaf_inuse()
  * types: Add optional data present filed mask and shift definition
  * types: Fix EOM header optional data present fields definition
  * libnvme : record the nvme pci adapter physical slot (bsc#1223208)
  * sysfs: minimize heap allocations of sysfs paths
  * json: Fix uninitialized variables
  * libnvme: add missing symbol nvme_scan_tls_keys (bsc#1226197)
  * nbft: Whitespace fixes (bsc#1222026)
  * tests: Add complex NBFT table from Dell R660 (bsc#1222026)
  * tests: Adapt to added NBFT SSNS flags (bsc#1222026)
  * nbft: Add SSNS 'discovered' flag (bsc#1222026)
  * nbft: Add SSNS 'unavailable' flag (bsc#1222026)
  * doc: Document the NBFT API (bsc#1222026)
  * ioctl: Move nvme_cmd_dword_fields definitions into header file
  * types: Add PEL set feature event layout definitions
  * types: Fix enum nvme_pel_rci documentation error
  * types: Add boot partition information definitions
  * types: Add PEL header additional information definitions
  * fabrics: keyring is a long (bsc#1216982)
  * config-schema.json.in: tls keys and keyrings are strings (bsc#1216982)
  * linux: Add nvme_scan_tls_keys() (bsc#1216982)
  * json: dump TLS key data in PSK interchange format (bsc#1216982)
  * json: import TLS key from PSK interchange format (bsc#1216982)
  * json: export TLS key in PSK interchange format (bsc#1216982)
  * tree: read TLS key in nvme_configure_ctrl() (bsc#1216982)
  * linux: rework nvme_insert_tls_key_versioned() (bsc#1216982)
  * linux: add nvme_import_tls_key() (bsc#1216982)
  * linux: add nvme_export_tls_key() (bsc#1216982)
  * crc32: Add CRC32 algorithm (bsc#1216982)
  * linux: add nvme_update_key() (bsc#1216982)
  * linux: add nvme_read_key() (bsc#1216982)
  * linux: allow for NULL argument in nvme_lookup_keyring() (bsc#1216982)
  * log: Respect DEFAULT_LOGLEVEL on uninitialized logging
  * log: Introduce nvme_get_logging_level()
  * ioctl: remove incomplete debug logging infrastructure
  * ioctl: export nvme_submit_passthru{64} as weak symbol (bsc#1231668)
  * log: move nvme_{set|get}_debug to log.c
  * fabrics: check the read() return value
  * types: Add PEL reporting context port identifier type definitions
  * types: Add persistent event log reporting context definitions
-  Upstream changed the sysfs test setup, thus sysfs test works in OSB
  * remove 0001-build-disable-sysfs-test.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1722600000">- Update to version 1.10:
  * linux: update TLS version 1 PSK derivation (bsc#1228376)
  * tree: fix nvme_read_config() to not set errno if return 0
  * types: add new fields added in TP4165 (bsc#1231668)
  * types: Changed the space into tap space (bsc#1231668)
  * tree: handle no address phy slot dirs (bsc#1229193)
  * linux: Remove the use of OpenSSL Engine API
  * types: Added new controller attribute as per TP4104
  * tree: add helper to lookup hostnqn/hostid (bsc#1226216)
  * fabrics: extend hostnqn/hostid variable inject interface (bsc#1226216)
  * json: filter out pcie transport (bsc#1226216)
  * tree: preserve parsing order of a config file (bsc#1226216)
  * types: add new field added in TP4099
  * types: add new field added in TP4090 (bsc#1231668)
  * linux: add nvme_revoke_tls_key (bsc#1226197)
  * tree: fix segfault in nvme_free_tree() (bsc#1231668)
  * types: add PEL vendor specific and TCG defined events definitions
  * mi-mctp: initialize the rc variable in handle_mctp_endpoint()
  * linux: avoid potential null pointer dereference
  * linux: add nvme_get_ana_log_len_from_id_ctrl()
  * libnvme: export nvme_mi_admin_get_ana_log_atomic()
  * ioctl: add support for atomic, piecewise ANA log fetch
  * ioctl: replace nvme_ana_rsp_hdr in doc comments
  * ioctl: respect rae in nvme_get_log_ana()
  * ioctl: fix nvme_get_log_ana_groups() pointer type
  * types: add new filed added in TP4141a
  * mi: Probe quirks on first command submission
  * tree: optionally skip namespaces during scanning
  * ioctl: update nvme_set_var_size_tags() to properly use reftag
  * types: add enum for Protection Information Format
  * libnvme: Introduce functions to generate host identifier and host NQN (bsc#1226216)
  * fabrics: Unescape URI elements
  * tests: Add uriparser tests
  * fabrics: Introduce simple URI parser
  * linux: default init cleanup variable
  * linux: Fix uninitialized variables
  * types: add the nvme Cancel command opcode
  * log: split log variables from root object
  * log: keep log level logic in one place
  * mi: restore default ep timeout during admin_passthru
  * mi: fix the rc for nvme_mi_scan_ep
  * ccan/endian.h: Only define __{BIG,LITTLE}_ENDIAN if undefined.
  * Use C99 types for uint32_t
  * mi: fix the return error code.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1730376000">- Update to version 1.11:
  * prefix: Use Request or Response Length in DLEN and DOFF for MI
  * types: Add ETPVDS and SSI fields of sanitize status log
  * json: do not escape strings when printing the configuration
  * tree: do no export tls keys when not provided by user
  * types: add struct nvme_id_ctrl_nvm ver and lbamqf member variables
  * types: add NVMe 2.1 get log page LIDs
  * type: Added enums for ANSAN and RGCNS bit of OAES field
  * linux: fixup PSK HMAC type '0' handling
  * util: added error code for ENOKEY
  * fabrics: fix map error level in __nvmf_add_ctrl
  * fabrics: add ctrl connect interface
  * fabrics: use hex numbers when generating command line options
  * fabrics: rename first argument for argument macros
  * linux: handle key import correctly
  * linux: export keys to config
  * tree: read tls_configured_key and tls_keyring from sysfs
  * tree: move dhchap and tls sysfs parser into separate functions
  * json: move keystore operations out of the JSON parser
  * tree: add getter/setters for TLS PSK
  * linux: add import/export function for TLS pre-shared keys
  * linux: only return the description of a key
  * linux: use ssize_t as return type for nvme_identity_len
  * linux: reorder variable declarations
  * types: Added enum for SMVES event of PEL log
  * libnvme: add lockdown log page support(LID : 0x14)
  * libnvme: add EMVS support to sanitize command
  * types: Add TP4159 PCIe Infrastructure for Live Migration definitions
  * types: add NVME_CTRL_OAES get macro definitions
  * types: add NVME_CTRL_OAES_TTHR definition
  * types: add NVME_CTRL_FNA definitions to get field values
  * types: add NVME_VAL() definition
  * tree: fix tls key mem leak (bsc#1231668)
  * tree: fix dhchap_ctrl_key mem leak (bsc#1231668)
  * tree: fix dhchap_key mem leak (bsc#1231668)
  * types: add NVME_CHECK() definition to check nvme register field value
  * types: add kv opcodes
  * types: added new fields in nvme_nvme_id_ns
  * types: Add enum for Completion Condition of Get LBA status command
  * ioctl: refactoring set_features
  * types: add new fields added in TP4142
  * mi: add control primitive command
  * linux: Correct error handling for derive_psk_digest (bsc#1228376)
  * types: Added new field CSER in enum as per TP4167
- build fix for OpenSSL 1.1
  * add 0001-linux-fix-derive_psk_digest-OpenSSL-1.1-version.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1732536000">- Fix tests on s390
  * add 0002-test-mock-pass-thru-unknown-ioctls.patch</changelog>
  <changelog author="dwagner@suse.de" date="1745323200">- Update to version 1.11+4.ge68a91ae:
  * tree: add routine to fetch subsys firmware rev (bsc#1240518)
  * tree: add routine to fetch subsys model (bsc#1240518)
  * test/mock: pass thru unknown ioctls
  * linux: fix derive_psk_digest OpenSSL 1.1 version
  - Remove merged patches
  * remove 0001-linux-fix-derive_psk_digest-OpenSSL-1.1-version.patch
  * remove 0002-test-mock-pass-thru-unknown-ioctls.patch</changelog>
  <changelog author="dwagner@suse.de" date="1753185600">- Update to version 1.11+6.g0d17be77:
  * tree: free ctrl attributes when (re)configure ctrl (bsc#1243716)
  * tree: filter tree after scan has completed (bsc#1243716)</changelog>
  <changelog author="dwagner@suse.de" date="1757419200">- Update to version 1.11+8.gfb9b581c:
  * tree: do not try to strdup NULL pointer (bsc#1247225)
  * tree: always set the host key (bsc#1246560)</changelog>
</package>
<package pkgid="268ff413c982d48e68e59c8e1c2190d11f94da119c971765ef648278eb89b078" name="liboath-devel" arch="x86_64">
  <version epoch="0" ver="2.6.2" rel="150000.3.7.1"/>
  <changelog author="vuntz@opensuse.org" date="1382529600">- Update to version 2.4.0:
  + liboath: Add new API methods for validating TOTP OTPs
- Changes from version 2.2.0:
  + libpskc: Add functions for setting PSKC data.
  + liboath: Permit different passwords for different tokens for
    the same user.
  + liboath: Make header file usable from C++ (extern "C" guard).
  + build: Improve building from git with most recent automake and
    gengetopt.
  + build: Valgrind is not enabled by default.
- Fix license: libraries are LGPL-2.1+ and everything else is
  GPL-3.0+. Also properly package the COPYING files.
- Prepare build libpskc, hidden under a %{build_pskc} define:
  + Add libxml2-devel and pkgconfig(xmlsec1) BuildRequires.
  + Create libpskc0 and libpskc-devel subpackages.
  + Define %{build_pskc} to 0 since we don't have libxmlsec1 yet.
- Rework summaries and descriptions.</changelog>
  <changelog author="darin@darins.net" date="1405080000">- Ran through spec-cleaner</changelog>
  <changelog author="mardnh@gmx.de" date="1422100800">- Update to version 2.4.1:
  + liboath: Fix usersfile bug that caused it to update the wrong line.
    When an usersfile contain multiple lines for the same user but with an
    unparseable token type (e.g., HOTP vs TOTP), the code would update the
    wrong line of the file.  Since the then updated line could be a
    commented out line, this can lead to the same OTP being accepted
    multiple times which is a security vulnerability.  Reported by Bas van
    Schaik &lt;bas@sj-vs.net&gt; and patch provided by Ilkka Virta
    &lt;itvirta@iki.fi&gt;.  CVE-2013-7322</changelog>
  <changelog author="t.gruner@katodev.de" date="1441800000">- Update to Version 2.6.1 (released 2015-07-31)
  - liboath: Fix 'make check' on 32-bit systems.
- Version 2.6.0 (released 2015-05-19)
  - liboath: Support TOTP with HMAC-SHA256 and HMAC-SHA512.
    This adds new APIs oath_totp_generate2, oath_totp_validate4 and
    oath_totp_validate4_callback.
  - oathtool: The --totp parameter now take an optional argument to specify MAC.
    For example use --totp=sha256 to use HMAC-SHA256.  When --totp is used
    the default HMAC-SHA1 is used, as before.
  - pam_oath: Mention in README that you shouldn't use insecure keys.
  - pam_oath: Check return value from strdup.
  - The files 'gdoc' and 'expect.oath' are now included in the tarball.</changelog>
  <changelog author="mardnh@gmx.de" date="1472472000">- Update to Version 2.6.2
  - no changes in upstream code
- Fix RPM groups for -devel packages
- build with libpskc on supported suse-versions
- Add patch:
  - 0001-Fix-no-return-in-nonvoid-function-errors-reported-by.patch</changelog>
  <changelog author="dmarcoux@posteo.de" date="1516104000">- Add patch (last commit which changed source, not released in 2.6.2):
  - 0002-update_gnulibs_files.patch</changelog>
  <changelog author="ncutler@suse.com" date="1523448000">- use %license instead of %doc to package license-related files</changelog>
  <changelog author="ncutler@suse.com" date="1523448001">- bring License line into closer accordance with actual licenses
  mentioned in the tarball
- split off xml/pskc/ directory/files from liboath0 into a separate
  "oath-toolkit-xml" subpackage to prevent conflicts if two versions of the
  liboath library were ever installed at the same time</changelog>
  <changelog author="mpluskal@suse.com" date="1523620800">- Run spe-cleaner
- Drop useless conditions</changelog>
  <changelog author="pgajdos@suse.com" date="1649851200">- fix [bsc#1197790] -- FTBFS: oath-toolkit won't compile on SP4
- added patches
  part of https://gitlab.com/oath-toolkit/oath-toolkit/-/commit/9b54ca84f92f4747751449aa645f07737b7bc7ea
  + 0003-update_gnulibs_files-fseeko.c.patch</changelog>
</package>
<package pkgid="f6c8fd6325b3922f4e90e84a1f2b641716360d34f309189bbda5f5650b37b1d7" name="liboath0" arch="x86_64">
  <version epoch="0" ver="2.6.2" rel="150000.3.7.1"/>
  <changelog author="vuntz@opensuse.org" date="1382529600">- Update to version 2.4.0:
  + liboath: Add new API methods for validating TOTP OTPs
- Changes from version 2.2.0:
  + libpskc: Add functions for setting PSKC data.
  + liboath: Permit different passwords for different tokens for
    the same user.
  + liboath: Make header file usable from C++ (extern "C" guard).
  + build: Improve building from git with most recent automake and
    gengetopt.
  + build: Valgrind is not enabled by default.
- Fix license: libraries are LGPL-2.1+ and everything else is
  GPL-3.0+. Also properly package the COPYING files.
- Prepare build libpskc, hidden under a %{build_pskc} define:
  + Add libxml2-devel and pkgconfig(xmlsec1) BuildRequires.
  + Create libpskc0 and libpskc-devel subpackages.
  + Define %{build_pskc} to 0 since we don't have libxmlsec1 yet.
- Rework summaries and descriptions.</changelog>
  <changelog author="darin@darins.net" date="1405080000">- Ran through spec-cleaner</changelog>
  <changelog author="mardnh@gmx.de" date="1422100800">- Update to version 2.4.1:
  + liboath: Fix usersfile bug that caused it to update the wrong line.
    When an usersfile contain multiple lines for the same user but with an
    unparseable token type (e.g., HOTP vs TOTP), the code would update the
    wrong line of the file.  Since the then updated line could be a
    commented out line, this can lead to the same OTP being accepted
    multiple times which is a security vulnerability.  Reported by Bas van
    Schaik &lt;bas@sj-vs.net&gt; and patch provided by Ilkka Virta
    &lt;itvirta@iki.fi&gt;.  CVE-2013-7322</changelog>
  <changelog author="t.gruner@katodev.de" date="1441800000">- Update to Version 2.6.1 (released 2015-07-31)
  - liboath: Fix 'make check' on 32-bit systems.
- Version 2.6.0 (released 2015-05-19)
  - liboath: Support TOTP with HMAC-SHA256 and HMAC-SHA512.
    This adds new APIs oath_totp_generate2, oath_totp_validate4 and
    oath_totp_validate4_callback.
  - oathtool: The --totp parameter now take an optional argument to specify MAC.
    For example use --totp=sha256 to use HMAC-SHA256.  When --totp is used
    the default HMAC-SHA1 is used, as before.
  - pam_oath: Mention in README that you shouldn't use insecure keys.
  - pam_oath: Check return value from strdup.
  - The files 'gdoc' and 'expect.oath' are now included in the tarball.</changelog>
  <changelog author="mardnh@gmx.de" date="1472472000">- Update to Version 2.6.2
  - no changes in upstream code
- Fix RPM groups for -devel packages
- build with libpskc on supported suse-versions
- Add patch:
  - 0001-Fix-no-return-in-nonvoid-function-errors-reported-by.patch</changelog>
  <changelog author="dmarcoux@posteo.de" date="1516104000">- Add patch (last commit which changed source, not released in 2.6.2):
  - 0002-update_gnulibs_files.patch</changelog>
  <changelog author="ncutler@suse.com" date="1523448000">- use %license instead of %doc to package license-related files</changelog>
  <changelog author="ncutler@suse.com" date="1523448001">- bring License line into closer accordance with actual licenses
  mentioned in the tarball
- split off xml/pskc/ directory/files from liboath0 into a separate
  "oath-toolkit-xml" subpackage to prevent conflicts if two versions of the
  liboath library were ever installed at the same time</changelog>
  <changelog author="mpluskal@suse.com" date="1523620800">- Run spe-cleaner
- Drop useless conditions</changelog>
  <changelog author="pgajdos@suse.com" date="1649851200">- fix [bsc#1197790] -- FTBFS: oath-toolkit won't compile on SP4
- added patches
  part of https://gitlab.com/oath-toolkit/oath-toolkit/-/commit/9b54ca84f92f4747751449aa645f07737b7bc7ea
  + 0003-update_gnulibs_files-fseeko.c.patch</changelog>
</package>
<package pkgid="c6c3d59b62f4d59b59a2cf763fdea8ae63d2f0620ea4a85ebba79972978e5d7e" name="libobjc4" arch="x86_64">
  <version epoch="0" ver="14.3.0+git11799" rel="150000.1.11.1"/>
  <changelog author="rguenther@suse.com" date="1728475200">- Update to gcc-14 branch head, 4af44f2cf7d281f3e4f3957ef, git10750
  * includes libstdc++6 fix for parsing tzdata 2024b [gcc#116657]
- Add gcc14-pr116629.patch to fix ICE with LTO building openvino
  on aarch64 [boo#1230262]</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1732968000">- Add loongarch64 to asan_arch, atomic_arch,
  itm_arch, lsan_arch, tsan_arch and ubsan_arch
- Add larchintrin.h, lasxintrin.h and lsxintrin.h
  headers to gccXY main package in %files section
- Set build_primary_64bit to 1 for loongarch64</changelog>
  <changelog author="adrian@suse.de" date="1733140800">- disable go on loongarch64 for now</changelog>
  <changelog author="mardnh@gmx.de" date="1736078400">- Switch to glibc based cross-compiler for target hppa</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Define ALT_CC_UNDER_TEST and ALT_CXX_UNDER_TEST for compat tests</changelog>
  <changelog author="rguenther@suse.com" date="1738152000">- For cross compilers require the same or newer binutils, newlib
  or cross-glibc that was used at build time.  [bsc#1232526]</changelog>
  <changelog author="rguenther@suse.com" date="1738843200">- Adjust cross compiler requirements to use %requires_ge
- Fix condition on whether to enable plugins or JIT support to
  not check sle_version which is not defined in SLFO but to check
  is_opensuse and suse_version instead.
- Add gcc14-pr118780.patch to make the SLFO config work.</changelog>
  <changelog author="rguenther@suse.com" date="1740052800">- Update to gcc-14 branch head, 9ffecde121af883b60bbe60d0, git11321
  * fixes reported ICE in [bsc#1237442]
- Drop gcc14-pr116629.patch now backported to the branch.</changelog>
  <changelog author="rguenther@suse.com" date="1741608000">- Disable profiling during build when %want_reproducible_builds is set
  [bsc#1238491]</changelog>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
</package>
<package pkgid="03269ffe18576abb5e3c10c368f80a24162d6f02242c2aeadb10ffbcf7188921" name="libobjc4" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.3.3"/>
  <changelog author="rguenther@suse.com" date="1743163200">- Update to GCC trunk head, 15.0.1+git9001
  * includes -msplit-patch-nops required for user-space livepatching
    on powerpc
  * includes fix for Ada build with --enable-host-pie
- Adjust for removed avx10_2roundingintrin.h intrinsic header.
- Build GCC executables PIE on SLE.  [bsc#1239938]</changelog>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="8b7913a16357c90c8dac009f2a8685c29049566c8173fed8848b95a9383d8e07" name="libobjc4" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.6.1"/>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
</package>
<package pkgid="5206f1bc7ddef0bbf00165891c76c175f147a13e6062be95bc22d3c62f7d1a62" name="libobjc4" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.9.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc14-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="9af0b862381eedab8622e5687db1f5b932a731562af4e7eba752270749802485" name="libobjc4-32bit" arch="x86_64">
  <version epoch="0" ver="14.3.0+git11799" rel="150000.1.11.1"/>
  <changelog author="rguenther@suse.com" date="1728475200">- Update to gcc-14 branch head, 4af44f2cf7d281f3e4f3957ef, git10750
  * includes libstdc++6 fix for parsing tzdata 2024b [gcc#116657]
- Add gcc14-pr116629.patch to fix ICE with LTO building openvino
  on aarch64 [boo#1230262]</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1732968000">- Add loongarch64 to asan_arch, atomic_arch,
  itm_arch, lsan_arch, tsan_arch and ubsan_arch
- Add larchintrin.h, lasxintrin.h and lsxintrin.h
  headers to gccXY main package in %files section
- Set build_primary_64bit to 1 for loongarch64</changelog>
  <changelog author="adrian@suse.de" date="1733140800">- disable go on loongarch64 for now</changelog>
  <changelog author="mardnh@gmx.de" date="1736078400">- Switch to glibc based cross-compiler for target hppa</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Define ALT_CC_UNDER_TEST and ALT_CXX_UNDER_TEST for compat tests</changelog>
  <changelog author="rguenther@suse.com" date="1738152000">- For cross compilers require the same or newer binutils, newlib
  or cross-glibc that was used at build time.  [bsc#1232526]</changelog>
  <changelog author="rguenther@suse.com" date="1738843200">- Adjust cross compiler requirements to use %requires_ge
- Fix condition on whether to enable plugins or JIT support to
  not check sle_version which is not defined in SLFO but to check
  is_opensuse and suse_version instead.
- Add gcc14-pr118780.patch to make the SLFO config work.</changelog>
  <changelog author="rguenther@suse.com" date="1740052800">- Update to gcc-14 branch head, 9ffecde121af883b60bbe60d0, git11321
  * fixes reported ICE in [bsc#1237442]
- Drop gcc14-pr116629.patch now backported to the branch.</changelog>
  <changelog author="rguenther@suse.com" date="1741608000">- Disable profiling during build when %want_reproducible_builds is set
  [bsc#1238491]</changelog>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
</package>
<package pkgid="4624c775c97b7a37b73b61f90b6e6384147310011de707e8888c7f12ef701905" name="libobjc4-32bit" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.3.3"/>
  <changelog author="rguenther@suse.com" date="1743163200">- Update to GCC trunk head, 15.0.1+git9001
  * includes -msplit-patch-nops required for user-space livepatching
    on powerpc
  * includes fix for Ada build with --enable-host-pie
- Adjust for removed avx10_2roundingintrin.h intrinsic header.
- Build GCC executables PIE on SLE.  [bsc#1239938]</changelog>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="f31f467bef30501976765c1d623ae061cd18a99c785da4f705acb9f170bd2cde" name="libobjc4-32bit" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.6.1"/>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
</package>
<package pkgid="702cb22e54726c43de6727f390a0a3c67c8b9ae3a49acf4ae54069341c7d6e6d" name="libobjc4-32bit" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.9.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc14-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="ab8936421ed8b6f4153a146677c87978993b2590fc32a81f6f2e2647f5e3466e" name="libopeniscsiusr0" arch="x86_64">
  <version epoch="0" ver="0.2.0" rel="150700.57.3.1"/>
  <changelog author="lduncan@suse.com" date="1652443200">- Set initiatorname in %post (at end of install), for cases
  where root is read-only at startup time (bsc#1198457)</changelog>
  <changelog author="lduncan@suse.com" date="1655467200">- For Tumbleweed, moved logrotate files from user-specific
  directory /etc/logrotate.d to vendor-specific
  /usr/etc/logrotate.d
  (for Stefan Schubert &lt;schubi@suse.com&gt;)</changelog>
  <changelog author="lduncan@suse.com" date="1657108800">- Modify SPEC file so systemd unit files are mode 644 (not 755)
  (bsc#1200570)</changelog>
  <changelog author="lduncan@suse.com" date="1664193600">- Update to upstream version 2.1.8, which includes some bug fixes,
  and adds the ability to build using meson. The SPEC file was
  updated to use meson.
  Also, some files have moved:
  * the "lock" file has moved from /etc/iscsi to /var/lock/iscsi
  * the "database files" have moved from /etc/iscsi to
    /var/lib/iscsi</changelog>
  <changelog author="lduncan@suse.com" date="1668600000">- Updated to latest upstream. Changes:
  * iscsid/iscsiuio: fix OOM adjustment (github issue #377)</changelog>
  <changelog author="lduncan@suse.com" date="1670414400">- Moving DB files from /etc/iscsi/* to /var/lib/iscsi/* for
  SLE-15-SP5 and forward, as is done in Tumbleweed.
- Added /etc/iscsi/README.DB-files-moved, and added SPEC file
  changes to support this, including a post-install script to
  move the DB files, only installed if DB files are moved.
- Renamed shared library from libopeniscsiusr0_2_0 to
  libopeniscsiusr0, to correctly match SONAME in library.</changelog>
  <changelog author="lduncan@suse.com" date="1671451200">- Updated SPEC file dependencies for libopeniscsiusr to avoid
  conflicting package installation.</changelog>
  <changelog author="lduncan@suse.com" date="1671624000">- Update iscsid.service so it starts iscsid.socket, if needed
  (bsc#1206132).</changelog>
  <changelog author="lduncan@suse.com" date="1677326400">- Build system: meson builds were ignoring optflags, and other
  passed in compiler options.</changelog>
  <changelog author="lduncan@suse.com" date="1681732800">- Remove "--strip" in SPEC file for meson build, so that
  debuginfo is generated. (from mwilck) (bsc#1210536)</changelog>
  <changelog author="lduncan@suse.com" date="1686830400">- Upgrade to upstream version 2.1.9 with tag "2.1.9-suse"
  (bsc#1210514), replacing open-iscsi-2.1.8-suse.tar.bz2 with
  open-iscsi-2.1.9-suse.tar.bz2, and resetting
  open-iscsi-SUSE-latest.diff.bz2. A summary from the ChangeLog
  file:
  * Fix discoveryd compiler warning
  * Sync iscsi_if.h with kernel
  * Handle old DB records correctly
  * Make IQN configuration for iscsi-iname
  * remove OFFLOAD_BOOT_SUPPORTED, which is always true
  * Use UUID for IPC, not "root"
  * do not support SHA3 for libressl
  * build meson cleanups, including changing default DB home
  * Updated README about NOPs
  * Remove "BindTo" in systemd service file
  * Some iscsiuio fixes, including licensing and memory leaks
    (bsc#1210514)
  * Small netlink fixes
  * Fix OOM adjustment
  * Some error recovery fixes
  * Some spelling fixes</changelog>
  <changelog author="lduncan@suse.com" date="1687262400">- Fix iscsiuio build version by updating iscsiuio/meson.build
  and RPM SPEC file (bsc#1210514), updating
  open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1698235200">- Updated to latest upstream, which includes (bsc#1210514):
  * several fixes to harden iscsiuio, including:
  - logging now uses syslog
  - shutdown now waits for helper threads to complete
  - netlink socket cleanup
  * some minor bug fixes, some helping builds on musl
  This updates iscsiuio version to 0.7.8.8.
  This updates open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1703073600">- Updated to latest upstream: two small changes, with no known
  functional changes:
  * Incorrect documentation for `iscsiadm -m session` print level
    (upstream issue #432)
  * Stop using deprecated inet_aton and inet_ntoa (upstream issue
    [#435])
- Also, stopped using pre-prepared tarballs for the build, instead
  now using a service file to get latest SUSE srouces directly.
  This removed these two files:
  * open-iscsi-2.1.9-suse.tar.bz2, and
  * open-iscsi-SUSE-latest.diff.bz2
  whcih were both created by a shell script, and added a service-
  file-generated file of the form:
  * open-iscsi-2.1.9.suse+TAG_OFFSET.tar.xz
  where TAG_OFFSET is of the form "COMMIT_COUNT.HASH", where
  COMMIT_COUNT is the count of commits since 2.1.9-suse (in this
  case), and HASH is the git commit hash being used.</changelog>
  <changelog author="lduncan@suse.com" date="1727697600">- Update to version 2.1.10.suse+51.fea0fde82ed1:
  * Incudes upstream version 2.1.10 plus some fixes
  * Fix firmware targets startup to always be "onboot" (#482)
    (bsc#1228084)
  * Change a discovery function to void return type (#481)
  * Fix gcc issues (#480)
  * Bugfix read specific sysfs value "off" of session attribute (#466)
  * Fix bug where abort_tmo read failures were ignored. (#467)
  * grammar nitpicks (#464)
  * Fix memory leak in iscsi_check_session_use_count (#465)
  * improve the comments in idbm_lock() (#458)
  * Make it visible when memory allocation failure (#457)
  * Better handle multiple iscsiadm commands (#453)
  * iscsiadm: allow hostnames in node-mode commands (#451)
  * Modify how workqueue priority is set (#445)
  * Fix authmethod check by printing a warning message when CHAP used and authmethod=None (#443)
  * iscsid: Rescan devices on relogin (#444)
  * Adds missing characters in README. (#440)
  * Turn off iSCSI NOP-Outs, by default.
  * fix: add usr/iscsid_req.h missinig underline (#431) (#436)</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="lduncan@suse.com" date="1744027200">- Update to version 2.1.11.suse+65.65365e1cdedb:
  * doc: fixup iscsiadm man page option for -r (#501)
  * Modify log function to print session id (#498)
  * Fix minor typo ("authenticaton") (#500)
  * Preparing for version 2.1.11 (#499)
  * iscsid: Rate limit session reopen log messages (#492)
  * IPv6 support for iBFT iSCSI boot (#493)
  * Improve iscsiadm command line parsing messages (#494)
  * More testing cleanup, and fix dprint test usage (#491)
  * Fix a typo in test/README (#486)
  * iscsid: Fix hang during login with scan=manual (#485)
  * fix 4 issues which are finded when building with clang 17 (#478)</changelog>
  <changelog author="lduncan@suse.com" date="1744027201">- Change SPEC file so that open-iscsi lock files always go
  in /run/lock/iscsi (bsc#1239107)</changelog>
  <changelog author="lduncan@suse.com" date="1744804800">- Update to version 2.1.11.suse+66.13c070123738:
  * Fix iscsid.conf NOP configuration (bsc#1240541)</changelog>
  <changelog author="lduncan@suse.com" date="1752408000">- Update to version 2.1.11.suse+73.1723affc61eb:
  * README for rpm build directory
  * Fix issue with IPv6 adapter interfaces (#508, bsc#1240969)
  * fwparam_ppc.c: Fix the calloc-transposed-args issue (#504)
  * Makefile: fix "No rule to make target 'iscsiuio/Makefile.in" issue (#506)
  * Fix typo in initiator.c (#507)
- Fixed some issues in this changes file
  * One date had incorrect format from 2014
  * Two separator lines were formatted incrrectly</changelog>
</package>
<package pkgid="9bfa11e2d49eb1cbc1e49660f31506cecf18a85fc6ff2e350f6270e3c6aa627e" name="libopenjp2-7" arch="x86_64">
  <version epoch="0" ver="2.3.0" rel="150000.3.21.1"/>
  <changelog author="mpluskal@suse.com" date="1441368000">- Use cmake macro
- Remove baselibs.conf (it was broken anyways for months)
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1445256000">- Re-add baselibs.conf, needed by poppler and leptonica</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Add a pkg-config dependency; expand pkgconfig</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1482148800">- update to version 2.1.2
  Bug fixes including security fixes among which:
  CVE-2016-8332 CVE-2016-7163
  CVE-2016-5139 CVE-2016-5159
  CVE-2016-5158 (not listed but solved different way)
  Huge amount of critical bugfixes
  Speed improvements
  No API/ABI break compared to v2.1.1/v2.1
- some doc files now have '.md' suffix (like README.md)
- CVE-2016-5152 with new 0018-tcd_get_decoded_tile_size.patch</changelog>
  <changelog author="hpj@suse.com" date="1505217600">- Add security fixes:
  openjpeg2-CVE-2016-10504.patch (CVE-2016-10504, bsc#1056351),
  openjpeg2-CVE-2016-10505.patch (CVE-2016-10505, bsc#1056363),
  openjpeg2-CVE-2016-10506.patch (CVE-2016-10506, bsc#1056396),
  openjpeg2-CVE-2017-12982.patch (CVE-2017-12982, bsc#1054696),
  openjpeg2-CVE-2017-14039.patch (CVE-2017-14039, CVE-2017-14164,
  bsc#1056622, bsc#1057511),
  openjpeg2-CVE-2017-14040.patch (CVE-2017-14040, bsc#1056621),
  openjpeg2-CVE-2017-14041.patch (CVE-2017-14041, bsc#1056562),
  openjpeg2-CVE-2017-14151.patch (CVE-2017-14151, bsc#1057336),
  openjpeg2-CVE-2017-14152.patch (CVE-2017-14152, bsc#1057335),
  most of which are critical, including heap and stack overwrites,
  over-reads and division by zero errors.</changelog>
  <changelog author="idonmez@suse.com" date="1508760000">- Update to version 2.3.0
- Drop upstream patches:
  * 0018-tcd_get_decoded_tile_size.patch
  * openjpeg2-CVE-2016-10504.patch
  * openjpeg2-CVE-2016-10505.patch
  * openjpeg2-CVE-2016-10506.patch
  * openjpeg2-CVE-2017-12982.patch
  * openjpeg2-CVE-2017-14039.patch
  * openjpeg2-CVE-2017-14040.patch
  * openjpeg2-CVE-2017-14041.patch
  * openjpeg2-CVE-2017-14151.patch
  * openjpeg2-CVE-2017-14152.patch
- Add install-fix.patch from upstream to fix library installation.</changelog>
  <changelog author="hpj@suse.com" date="1648814400">- Add security fixes:
  openjpeg2-CVE-2018-5727.patch (CVE-2018-5727, bsc#1076314),
  openjpeg2-CVE-2018-5785.patch (CVE-2018-5785, bsc#1076967),
  openjpeg2-CVE-2018-6616.patch (CVE-2018-6616, bsc#1079845),
  openjpeg2-CVE-2018-14423.patch (CVE-2018-14423, bsc#1102016),
  openjpeg2-CVE-2018-16375.patch (CVE-2018-16375, bsc#1106882),
  openjpeg2-CVE-2018-16376.patch (CVE-2018-16376, bsc#1106881),
  openjpeg2-CVE-2018-20845.patch (CVE-2018-20845, bsc#1140130),
  openjpeg2-CVE-2020-6851.patch (CVE-2020-6851, bsc#1160782),
  openjpeg2-CVE-2020-8112.patch (CVE-2020-8112, bsc#1162090),
  openjpeg2-CVE-2020-15389.patch (CVE-2020-15389, bsc#1173578),
  openjpeg2-CVE-2020-27823.patch (CVE-2020-27823, bsc#1180457),
  openjpeg2-CVE-2021-29338.patch (CVE-2021-29338, bsc#1184774),
  openjpeg2-CVE-2022-1122.patch (CVE-2022-1122, bsc#1197738).</changelog>
  <changelog author="hp.jansen@suse.com" date="1660046400">- openjpeg2-devel requires openjpeg, some cmake targets may fail
  without the base package installed. Fixes boo#1201799</changelog>
  <changelog author="hpj@suse.com" date="1666612800">- Add security fixes:
  openjpeg2-CVE-2018-20846.patch (CVE-2018-20846, bsc#1140205),
  openjpeg2-CVE-2018-21010.patch (CVE-2018-21010, bsc#1149789),
  openjpeg2-CVE-2020-27814.patch (CVE-2020-27814, bsc#1179594),
  openjpeg2-CVE-2020-27824.patch (CVE-2020-27824, bsc#1179821),
  openjpeg2-CVE-2020-27841.patch (CVE-2020-27841, bsc#1180042),
  openjpeg2-CVE-2020-27842.patch (CVE-2020-27842, bsc#1180043),
  openjpeg2-CVE-2020-27843.patch (CVE-2020-27843, bsc#1180044),
  openjpeg2-CVE-2020-27845.patch (CVE-2020-27845, bsc#1180046).</changelog>
  <changelog author="pgajdos@suse.com" date="1735905600">- security update
- added patches
  fix CVE-2024-56826 [bsc#1235029], heap buffer overflow in bin/common/color.c
  + openjpeg2-CVE-2024-56826.patch</changelog>
  <changelog author="hpj@suse.com" date="1752494400">- Add security fix:
  openjpeg2-CVE-2018-18088.patch (CVE-2018-18088, bsc#1111638).</changelog>
</package>
<package pkgid="7f74399861565ab9d92da30da59bbdfbae02ec6b848df481ed5928b03736a500" name="libopenjp2-7" arch="x86_64">
  <version epoch="0" ver="2.3.0" rel="150000.3.24.1"/>
  <changelog author="mpluskal@suse.com" date="1441368000">- Use cmake macro
- Remove baselibs.conf (it was broken anyways for months)
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1445256000">- Re-add baselibs.conf, needed by poppler and leptonica</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Add a pkg-config dependency; expand pkgconfig</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1482148800">- update to version 2.1.2
  Bug fixes including security fixes among which:
  CVE-2016-8332 CVE-2016-7163
  CVE-2016-5139 CVE-2016-5159
  CVE-2016-5158 (not listed but solved different way)
  Huge amount of critical bugfixes
  Speed improvements
  No API/ABI break compared to v2.1.1/v2.1
- some doc files now have '.md' suffix (like README.md)
- CVE-2016-5152 with new 0018-tcd_get_decoded_tile_size.patch</changelog>
  <changelog author="hpj@suse.com" date="1505217600">- Add security fixes:
  openjpeg2-CVE-2016-10504.patch (CVE-2016-10504, bsc#1056351),
  openjpeg2-CVE-2016-10505.patch (CVE-2016-10505, bsc#1056363),
  openjpeg2-CVE-2016-10506.patch (CVE-2016-10506, bsc#1056396),
  openjpeg2-CVE-2017-12982.patch (CVE-2017-12982, bsc#1054696),
  openjpeg2-CVE-2017-14039.patch (CVE-2017-14039, CVE-2017-14164,
  bsc#1056622, bsc#1057511),
  openjpeg2-CVE-2017-14040.patch (CVE-2017-14040, bsc#1056621),
  openjpeg2-CVE-2017-14041.patch (CVE-2017-14041, bsc#1056562),
  openjpeg2-CVE-2017-14151.patch (CVE-2017-14151, bsc#1057336),
  openjpeg2-CVE-2017-14152.patch (CVE-2017-14152, bsc#1057335),
  most of which are critical, including heap and stack overwrites,
  over-reads and division by zero errors.</changelog>
  <changelog author="idonmez@suse.com" date="1508760000">- Update to version 2.3.0
- Drop upstream patches:
  * 0018-tcd_get_decoded_tile_size.patch
  * openjpeg2-CVE-2016-10504.patch
  * openjpeg2-CVE-2016-10505.patch
  * openjpeg2-CVE-2016-10506.patch
  * openjpeg2-CVE-2017-12982.patch
  * openjpeg2-CVE-2017-14039.patch
  * openjpeg2-CVE-2017-14040.patch
  * openjpeg2-CVE-2017-14041.patch
  * openjpeg2-CVE-2017-14151.patch
  * openjpeg2-CVE-2017-14152.patch
- Add install-fix.patch from upstream to fix library installation.</changelog>
  <changelog author="hpj@suse.com" date="1648814400">- Add security fixes:
  openjpeg2-CVE-2018-5727.patch (CVE-2018-5727, bsc#1076314),
  openjpeg2-CVE-2018-5785.patch (CVE-2018-5785, bsc#1076967),
  openjpeg2-CVE-2018-6616.patch (CVE-2018-6616, bsc#1079845),
  openjpeg2-CVE-2018-14423.patch (CVE-2018-14423, bsc#1102016),
  openjpeg2-CVE-2018-16375.patch (CVE-2018-16375, bsc#1106882),
  openjpeg2-CVE-2018-16376.patch (CVE-2018-16376, bsc#1106881),
  openjpeg2-CVE-2018-20845.patch (CVE-2018-20845, bsc#1140130),
  openjpeg2-CVE-2020-6851.patch (CVE-2020-6851, bsc#1160782),
  openjpeg2-CVE-2020-8112.patch (CVE-2020-8112, bsc#1162090),
  openjpeg2-CVE-2020-15389.patch (CVE-2020-15389, bsc#1173578),
  openjpeg2-CVE-2020-27823.patch (CVE-2020-27823, bsc#1180457),
  openjpeg2-CVE-2021-29338.patch (CVE-2021-29338, bsc#1184774),
  openjpeg2-CVE-2022-1122.patch (CVE-2022-1122, bsc#1197738).</changelog>
  <changelog author="hp.jansen@suse.com" date="1660046400">- openjpeg2-devel requires openjpeg, some cmake targets may fail
  without the base package installed. Fixes boo#1201799</changelog>
  <changelog author="hpj@suse.com" date="1666612800">- Add security fixes:
  openjpeg2-CVE-2018-20846.patch (CVE-2018-20846, bsc#1140205),
  openjpeg2-CVE-2018-21010.patch (CVE-2018-21010, bsc#1149789),
  openjpeg2-CVE-2020-27814.patch (CVE-2020-27814, bsc#1179594),
  openjpeg2-CVE-2020-27824.patch (CVE-2020-27824, bsc#1179821),
  openjpeg2-CVE-2020-27841.patch (CVE-2020-27841, bsc#1180042),
  openjpeg2-CVE-2020-27842.patch (CVE-2020-27842, bsc#1180043),
  openjpeg2-CVE-2020-27843.patch (CVE-2020-27843, bsc#1180044),
  openjpeg2-CVE-2020-27845.patch (CVE-2020-27845, bsc#1180046).</changelog>
  <changelog author="pgajdos@suse.com" date="1735905600">- security update
- added patches
  fix CVE-2024-56826 [bsc#1235029], heap buffer overflow in bin/common/color.c
  + openjpeg2-CVE-2024-56826.patch</changelog>
  <changelog author="hpj@suse.com" date="1752494400">- Add security fix:
  openjpeg2-CVE-2018-18088.patch (CVE-2018-18088, bsc#1111638).</changelog>
  <changelog author="hpj@suse.com" date="1769169600">- Add openjpeg2-CVE-2023-39327.patch (CVE-2023-39327, bsc#1227412).
- Add openjpeg2-require-eph-when-specified.patch (bsc#1227412).</changelog>
</package>
<package pkgid="393bd63c1bfde152fbf4b7d17d75816a2304daad2ffa40b312cd9196224eb79a" name="libopenssl-3-devel" arch="x86_64">
  <version epoch="0" ver="3.2.3" rel="150700.5.10.1"/>
  <changelog author="abergmann@suse.com" date="1724328000">- Security fix: [bsc#1229465, CVE-2024-6119]
  * possible denial of service in X.509 name checks
  * openssl-CVE-2024-6119.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1727265600">- Security fix: [bsc#1230698, CVE-2024-41996]
  * Validating the order of the public keys in the Diffie-Hellman
    Key Agreement Protocol, when an approved safe prime is used.
  * Added openssl-3-CVE-2024-41996.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1220262, CVE-2023-50782]
  * Implicit rejection in PKCS#1 v1.5
  * Add openssl-CVE-2023-50782.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166401">- Security fix: [bsc#1231741, CVE-2024-9143]
  * Low-level invalid GF(2^m) parameters lead to OOB memory access
  * Add openssl-CVE-2024-9143.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729512000">- Update to 3.1.7:
  * Major changes between OpenSSL 3.1.6 and OpenSSL 3.1.7 [3 Sep 2024]
  - Fixed possible denial of service in X.509 name checks (CVE-2024-6119)
  - Fixed possible buffer overread in SSL_select_next_proto()
    (CVE-2024-5535)
  * Major changes between OpenSSL 3.1.5 and OpenSSL 3.1.6 [4 Jun 2024]
  - Fixed potential use after free after SSL_free_buffers() is
    called (CVE-2024-4741)
  - Fixed an issue where checking excessively long DSA keys or
    parameters may be very slow (CVE-2024-4603)
  - Fixed unbounded memory growth with session handling in TLSv1.3
    (CVE-2024-2511)
  * Major changes between OpenSSL 3.1.4 and OpenSSL 3.1.5 [30 Jan 2024]
  - Fixed PKCS12 Decoding crashes (CVE-2024-0727)
  - Fixed Excessive time spent checking invalid RSA public keys
    [CVE-2023-6237)
  - Fixed POLY1305 MAC implementation corrupting vector registers
    on PowerPC CPUs which support PowerISA 2.07 (CVE-2023-6129)
  - Fix excessive time spent in DH check / generation with large
    Q parameter value (CVE-2023-5678)
  * Update openssl.keyring with BA5473A2B0587B07FB27CF2D216094DFD0CB81EF
  * Rebase patches:
  - openssl-Force-FIPS.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-CVE-2023-50782.patch
  * Remove patches fixed in the update:
  - openssl-Improve-performance-for-6x-unrolling-with-vpermxor-i.patch
  - openssl-CVE-2024-6119.patch openssl-CVE-2024-5535.patch
  - openssl-CVE-2024-4741.patch openssl-CVE-2024-4603.patch
  - openssl-CVE-2024-2511.patch openssl-CVE-2024-0727.patch
  - openssl-CVE-2023-6237.patch openssl-CVE-2023-6129.patch
  - openssl-CVE-2023-5678.patch openssl-3-CVE-2024-41996.patch
  - openssl-Enable-BTI-feature-for-md5-on-aarch64.patch
  - openssl-Fix-EVP_PKEY_CTX_add1_hkdf_info-behavior.patch
  - openssl-Handle-empty-param-in-EVP_PKEY_CTX_add1_hkdf_info.patch
  - reproducible.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729857600">- Update to 3.2.0:
  * Changes between 3.1.x and 3.2.0:
  - Fix excessive time spent in DH check/ generation with large Q parameter
    value. [CVE-2023-5678]
  - The BLAKE2b hash algorithm supports a configurable output length
    by setting the "size" parameter.
  - Added a function to delete objects from store by URI - OSSL_STORE_delete()
    and the corresponding provider-storemgmt API function OSSL_FUNC_store_delete().
  - Added OSSL_FUNC_store_open_ex() provider-storemgmt API function to pass
    a passphrase callback when opening a store.
  - Changed the default salt length used by PBES2 KDF's (PBKDF2 and scrypt)
    from 8 bytes to 16 bytes.
  - Changed the default value of the 'ess_cert_id_alg' configuration
    option which is used to calculate the TSA's public key certificate
    identifier. The default algorithm is updated to be sha256 instead of sha1.
  - Added optimization for SM2 algorithm on aarch64. A new configure option
    'no-sm2-precomp' has been added to disable the precomputed table.
  - Added client side support for QUIC
  - Added secp384r1 implementation using Solinas' reduction to improve
    speed of the NIST P-384 elliptic curve. To enable the implementation
    the build option 'enable-ec_nistp_64_gcc_128' must be used.
  - Improved RFC7468 compliance of the asn1parse command.
  - Added SHA256/192 algorithm support.
  - Added support for securely getting root CA certificate update in CMP.
  - Improved contention on global write locks by using more read locks where
    appropriate.
  - Improved performance of OSSL_PARAM lookups in performance critical
    provider functions.
  - Added the SSL_get0_group_name() function to provide access to the
    name of the group used for the TLS key exchange.
  - Provide a new configure option 'no-http' that can be used to disable the
    HTTP support. Provide new configure options 'no-apps' and 'no-docs' to
    disable building the openssl command line application and the documentation.
  - Provide a new configure option 'no-ecx' that can be used to disable the
    X25519, X448, and EdDSA support.
  - When multiple OSSL_KDF_PARAM_INFO parameters are passed to
    the EVP_KDF_CTX_set_params() function they are now concatenated not just
    for the HKDF algorithm but also for SSKDF and X9.63 KDF algorithms.
  - Added OSSL_FUNC_keymgmt_im/export_types_ex() provider functions that get
    the provider context as a parameter.
  - TLS round-trip time calculation was added by a Brigham Young University
    Capstone team partnering with Sandia National Laboratories. A new function
    in ssl_lib titled SSL_get_handshake_rtt will calculate and retrieve this
    value.
  - Added the "-quic" option to s_client to enable connectivity to QUIC servers.
    QUIC requires the use of ALPN, so this must be specified via the "-alpn"
    option. Use of the "advanced" s_client command command via the "-adv" option
    is recommended.
  - Added an "advanced" command mode to s_client. Use this with the "-adv" option.
  - Add Raw Public Key (RFC7250) support.
  - Added support for modular exponentiation and CRT offloading for the
    S390x architecture.
  - Added further assembler code for the RISC-V architecture.
  - Added EC_GROUP_to_params() which creates an OSSL_PARAM array
    from a given EC_GROUP.
  - Improved support for non-default library contexts and property queries
    when parsing PKCS#12 files.
  - Implemented support for all five instances of EdDSA from RFC8032:
    Ed25519, Ed25519ctx, Ed25519ph, Ed448, and Ed448ph.
    The streaming is not yet supported for the HashEdDSA variants
    (Ed25519ph and Ed448ph).
  - Added SM4 optimization for ARM processors using ASIMD and AES HW instructions.
  - Implemented SM4-XTS support.
  - Added platform-agnostic OSSL_sleep() function.
  - Implemented deterministic ECDSA signatures (RFC6979) support.
  - Implemented AES-GCM-SIV (RFC8452) support.
  - Added support for pluggable (provider-based) TLS signature algorithms.
    This enables TLS 1.3 authentication operations with algorithms embedded
    in providers not included by default in OpenSSL. In combination with
    the already available pluggable KEM and X.509 support, this enables
    for example suitable providers to deliver post-quantum or quantum-safe
    cryptography to OpenSSL users.
  - Added support for pluggable (provider-based) CMS signature algorithms.
    This enables CMS sign and verify operations with algorithms embedded
    in providers not included by default in OpenSSL.
  - Implemented HPKE DHKEM support in providers used by HPKE (RFC9180) API.
  - Add support for certificate compression (RFC8879), including
    library support for Brotli and Zstandard compression.
  - Add the ability to add custom attributes to PKCS12 files. Add a new API
    PKCS12_create_ex2, identical to the existing PKCS12_create_ex but allows
    for a user specified callback and optional argument.
    Added a new PKCS12_SAFEBAG_set0_attr, which allows for a new attr to be
    added to the existing STACK_OF attrs.
  - Major refactor of the libssl record layer.
  - Add a mac salt length option for the pkcs12 command.
  - Add more SRTP protection profiles from RFC8723 and RFC8269.
  - Extended Kernel TLS (KTLS) to support TLS 1.3 receive offload.
  - Add support for TCP Fast Open (RFC7413) to macOS, Linux, and FreeBSD where
    supported and enabled.
  - Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489)
    to the list of ciphersuites providing Perfect Forward Secrecy as
    required by SECLEVEL &gt;= 3.
  - Add new SSL APIs to aid in efficiently implementing TLS/SSL fingerprinting.
    The SSL_CTRL_GET_IANA_GROUPS control code, exposed as the
    SSL_get0_iana_groups() function-like macro, retrieves the list of
    supported groups sent by the peer.
  - Fixed PEM_write_bio_PKCS8PrivateKey() and PEM_write_bio_PKCS8PrivateKey_nid()
    to make it possible to use empty passphrase strings.
  - The PKCS12_parse() function now supports MAC-less PKCS12 files.
  - Added ASYNC_set_mem_functions() and ASYNC_get_mem_functions() calls to be able
    to change functions used for allocating the memory of asynchronous call stack.
  - Added support for signed BIGNUMs in the OSSL_PARAM APIs.
  - A failure exit code is returned when using the openssl x509 command to check
    certificate attributes and the checks fail.
  - The default SSL/TLS security level has been changed from 1 to 2. RSA,
    DSA and DH keys of 1024 bits and above and less than 2048 bits and ECC keys
    of 160 bits and above and less than 224 bits were previously accepted by
    default but are now no longer allowed. By default TLS compression was
    already disabled in previous OpenSSL versions. At security level 2 it cannot
    be enabled.
  - The SSL_CTX_set_cipher_list family functions now accept ciphers using their
    IANA standard names.
  - The PVK key derivation function has been moved from b2i_PVK_bio_ex() into
    the legacy crypto provider as an EVP_KDF. Applications requiring this KDF
    will need to load the legacy crypto provider.
  - CCM8 cipher suites in TLS have been downgraded to security level zero
    because they use a short authentication tag which lowers their strength.
  - Subject or issuer names in X.509 objects are now displayed as UTF-8 strings
    by default. Also spaces surrounding '=' in DN output are removed.
  - Add X.509 certificate codeSigning purpose and related checks on key usage and
    extended key usage of the leaf certificate according to the CA/Browser Forum.
  - The 'x509', 'ca', and 'req' apps now produce X.509 v3 certificates.
    The '-x509v1' option of 'req' prefers generation of X.509 v1 certificates.
    'X509_sign()' and 'X509_sign_ctx()' make sure that the certificate has
    X.509 version 3 if the certificate information includes X.509 extensions.
  - Fix and extend certificate handling and the apps 'x509', 'verify' etc.
    such as adding a trace facility for debugging certificate chain building.
  - Various fixes and extensions to the CMP+CRMF implementation and the 'cmp' app
    in particular supporting requests for central key generation, generalized
    polling, and various types of genm/genp exchanges defined in CMP Updates.
  - Fixes and extensions to the HTTP client and to the HTTP server in 'apps/'
    like correcting the TLS and proxy support and adding tracing for debugging.
  - Extended the CMS API for handling 'CMS_SignedData' and 'CMS_EnvelopedData'.
  - 'CMS_add0_cert()' and 'CMS_add1_cert()' no longer throw an error if
    a certificate to be added is already present. 'CMS_sign_ex()' and
    'CMS_sign()' now ignore any duplicate certificates in their 'certs' argument
    and no longer throw an error for them.
  - Added BIO_s_dgram_pair() and BIO_s_dgram_mem() that provide memory-based
    BIOs with datagram semantics and support for BIO_sendmmsg() and BIO_recvmmsg()
    calls. They can be used as the transport BIOs for QUIC.
  - Add new BIO_sendmmsg() and BIO_recvmmsg() BIO methods which allow
    sending and receiving multiple messages in a single call. An implementation
    is provided for BIO_dgram. For further details, see BIO_sendmmsg(3).
  - Support for loading root certificates from the Windows certificate store
    has been added.
  - Enable KTLS with the TLS 1.3 CCM mode ciphersuites. Note that some linux
    kernel versions that support KTLS have a known bug in CCM processing. That
    has been fixed in stable releases starting from 5.4.164, 5.10.84, 5.15.7,
    and all releases since 5.16. KTLS with CCM ciphersuites should be only used
    on these releases.
  - Added '-ktls' option to 's_server' and 's_client' commands to enable the
    KTLS support.
  - Zerocopy KTLS sendfile() support on Linux.
  - The OBJ_ calls are now thread safe using a global lock.
  - New parameter '-digest' for openssl cms command allowing signing
    pre-computed digests and new CMS API functions supporting that
    functionality.
  - OPENSSL_malloc() and other allocation functions now raise errors on
    allocation failures. The callers do not need to explicitly raise errors
    unless they want to for tracing purposes.
  - Added support for Brainpool curves in TLS-1.3.
  - Support for Argon2d, Argon2i, Argon2id KDFs has been added along with
    a basic thread pool implementation for select platforms.</changelog>
  <changelog author="pmonreal@suse.com" date="1729857601">- Update to 3.2.1:
  * Changes between 3.2.0 and 3.2.1:
  - A file in PKCS12 format can contain certificates and keys and may come from
    an untrusted source. The PKCS12 specification allows certain fields to be
    NULL, but OpenSSL did not correctly check for this case. [CVE-2024-0727]
  - When function EVP_PKEY_public_check() is called on RSA public keys,
    a computation is done to confirm that the RSA modulus, n, is composite.
    For valid RSA keys, n is a product of two or more large primes and this
    computation completes quickly. However, if n is an overly large prime,
    then this computation would take a long time. [CVE-2023-6237]
  - Restore the encoding of SM2 PrivateKeyInfo and SubjectPublicKeyInfo to
    have the contained AlgorithmIdentifier.algorithm set to id-ecPublicKey
    rather than SM2.
  - The POLY1305 MAC (message authentication code) implementation in OpenSSL
    for PowerPC CPUs saves the contents of vector registers in different
    order than they are restored. [CVE-2023-6129]
  - Disable building QUIC server utility when OpenSSL is configured with 'no-apps'.
  * The openssl-crypto-policies-support.patch has been merged into
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Rename openssl-Disable-default-provider-for-test-suite.patch and rebase to
    openssl-TESTS-Disable-default-provider-crypto-policies.patch
  * Patches removed in the update:
  - openssl-Add_support_for_Windows_CA_certificate_store.patch
  - openssl-ec-56-bit-Limb-Solinas-Strategy-for-secp384r1.patch
  - openssl-ec-Use-static-linkage-on-nistp521-felem_-square-mul-.patch
  - openssl-ec-powerpc64le-Add-asm-implementation-of-felem_-squa.patch
  - openssl-ecc-Remove-extraneous-parentheses-in-secp384r1.patch
  - openssl-powerpc-ecc-Fix-stack-allocation-secp384r1-asm.patch
  - openssl-CVE-2024-41996.patch
  - openssl-CVE-2023-50782.patch
  - openssl-CVE-2024-9143.patch
  * Patches rebased:
  - openssl-3-use-include-directive.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-DEFAULT_SUSE_cipher.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Force-FIPS.patch
  - openssl-load-legacy-provider.patch
  - openssl-no-html-docs.patch
  - openssl-pkgconfig.patch
  - openssl-ppc64-config.patch
  - openssl-truststore.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116800">- Remove the hardcoded DEFAULT_SUSE cipherlist selection.
  * Remove openssl-DEFAULT_SUSE_cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116801">- Update to 3.2.3:
  * Changes between 3.2.2 and 3.2.3:
  - Fixed possible denial of service in X.509 name checks. [CVE-2024-6119]
  - Fixed possible buffer overread in SSL_select_next_proto(). [CVE-2024-5535]
  * Changes between 3.2.1 and 3.2.2:
  - Fixed potential use after free after SSL_free_buffers() is called. [CVE-2024-4741]
  - Fixed an issue where checking excessively long DSA keys or parameters may
    be very slow. [CVE-2024-4603]
  - Improved EC/DSA nonce generation routines to avoid bias and timing
    side channel leaks.
  - Fixed an issue where some non-default TLS server configurations can cause
    unbounded memory growth when processing TLSv1.3 sessions. [CVE-2024-2511]
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded. This can be used on platforms
    where using atexit() from shared libraries causes crashes on exit.
  - Fixed bug where SSL_export_keying_material() could not be used with QUIC
    connections.
  * Add openssl-skip-quic-pairwise.patch to adapt the pairwise tests.
  * Merge openssl-FIPS-release_num_in_version_string.patch into
    openssl-FIPS-services-minimize.patch
  * Rebase patches:
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Remove-EC-curves.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-3-use-include-directive.patch
  * Remove not needed patches:
  - openssl-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  - openssl-3-FIPS-PCT_rsa_keygen.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730462400">- Support MSA 12 SHA3 on s390x [jsc#PED-10280]
  * Add openssl-3-add_EVP_DigestSqueeze_api.patch
  * Add openssl-3-support-multiple-sha3_squeeze_s390x.patch
  * Add openssl-3-add-xof-state-handling-s3_absorb.patch
  * Add openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  * Add openssl-3-fix-state-handling-sha3_final_s390x.patch
  * Add openssl-3-fix-state-handling-shake_final_s390x.patch
  * Add openssl-3-fix-state-handling-keccak_final_s390x.patch
  * Add openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  * Add openssl-3-add-defines-CPACF-funcs.patch
  * Add openssl-3-add-hw-acceleration-hmac.patch
  * Add openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  * Add openssl-3-fix-s390x_sha3_absorb.patch
  * Add openssl-3-fix-s390x_shake_squeeze.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808000">- Support MSA 10 XTS on s390x [jsc#PED-10273]
  * s390x: Add hardware acceleration for full AES-XTS
  * Add openssl-3-hw-acceleration-aes-xts-s390x.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808001">- Support MSA 11 HMAC on s390x [jsc#PED-10274]
  * Add openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  * Add openssl-3-fix-hmac-digest-detection-s390x.patch
  * Add openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730980800">- Add missing fixes for SHA3_squeeze and quic_multistream_test on
  pcc64 arch. [jsc#PED-10280]
  * Added openssl-3-fix-sha3-squeeze-ppc64.patch
  * Added openssl-3-fix-quic_multistream_test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1731412800">- Do not use HASHBANGPERL to avoid introducing a dependency on the
  perl-base package. [bsc#1233235]</changelog>
  <changelog author="pmonreal@suse.com" date="1734436800">- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
  - openssl-3-use-include-directive.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1738238400">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Security fix: [bsc#1236599, CVE-2024-12797]
  * RFC7250 handshakes with unauthenticated servers don't abort as
    expected.
  * Add openssl-CVE-2024-12797.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1746014400">- Security fix: [bsc#1240366, CVE-2025-27587]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
  <changelog author="mls@suse.de" date="1751371200">- Backport mdless cms signing support [jsc#PED-12895]
  * Add openssl-3-support-mdless-cms.patch</changelog>
</package>
<package pkgid="203a5dbce5c6a9a4180b5930f26da95d0287be37b59bfee54a87e02130a2fa43" name="libopenssl-3-devel" arch="x86_64">
  <version epoch="0" ver="3.2.3" rel="150700.5.15.1"/>
  <changelog author="angel.yankov@suse.com" date="1727265600">- Security fix: [bsc#1230698, CVE-2024-41996]
  * Validating the order of the public keys in the Diffie-Hellman
    Key Agreement Protocol, when an approved safe prime is used.
  * Added openssl-3-CVE-2024-41996.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1220262, CVE-2023-50782]
  * Implicit rejection in PKCS#1 v1.5
  * Add openssl-CVE-2023-50782.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166401">- Security fix: [bsc#1231741, CVE-2024-9143]
  * Low-level invalid GF(2^m) parameters lead to OOB memory access
  * Add openssl-CVE-2024-9143.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729512000">- Update to 3.1.7:
  * Major changes between OpenSSL 3.1.6 and OpenSSL 3.1.7 [3 Sep 2024]
  - Fixed possible denial of service in X.509 name checks (CVE-2024-6119)
  - Fixed possible buffer overread in SSL_select_next_proto()
    (CVE-2024-5535)
  * Major changes between OpenSSL 3.1.5 and OpenSSL 3.1.6 [4 Jun 2024]
  - Fixed potential use after free after SSL_free_buffers() is
    called (CVE-2024-4741)
  - Fixed an issue where checking excessively long DSA keys or
    parameters may be very slow (CVE-2024-4603)
  - Fixed unbounded memory growth with session handling in TLSv1.3
    (CVE-2024-2511)
  * Major changes between OpenSSL 3.1.4 and OpenSSL 3.1.5 [30 Jan 2024]
  - Fixed PKCS12 Decoding crashes (CVE-2024-0727)
  - Fixed Excessive time spent checking invalid RSA public keys
    [CVE-2023-6237)
  - Fixed POLY1305 MAC implementation corrupting vector registers
    on PowerPC CPUs which support PowerISA 2.07 (CVE-2023-6129)
  - Fix excessive time spent in DH check / generation with large
    Q parameter value (CVE-2023-5678)
  * Update openssl.keyring with BA5473A2B0587B07FB27CF2D216094DFD0CB81EF
  * Rebase patches:
  - openssl-Force-FIPS.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-CVE-2023-50782.patch
  * Remove patches fixed in the update:
  - openssl-Improve-performance-for-6x-unrolling-with-vpermxor-i.patch
  - openssl-CVE-2024-6119.patch openssl-CVE-2024-5535.patch
  - openssl-CVE-2024-4741.patch openssl-CVE-2024-4603.patch
  - openssl-CVE-2024-2511.patch openssl-CVE-2024-0727.patch
  - openssl-CVE-2023-6237.patch openssl-CVE-2023-6129.patch
  - openssl-CVE-2023-5678.patch openssl-3-CVE-2024-41996.patch
  - openssl-Enable-BTI-feature-for-md5-on-aarch64.patch
  - openssl-Fix-EVP_PKEY_CTX_add1_hkdf_info-behavior.patch
  - openssl-Handle-empty-param-in-EVP_PKEY_CTX_add1_hkdf_info.patch
  - reproducible.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729857600">- Update to 3.2.0:
  * Changes between 3.1.x and 3.2.0:
  - Fix excessive time spent in DH check/ generation with large Q parameter
    value. [CVE-2023-5678]
  - The BLAKE2b hash algorithm supports a configurable output length
    by setting the "size" parameter.
  - Added a function to delete objects from store by URI - OSSL_STORE_delete()
    and the corresponding provider-storemgmt API function OSSL_FUNC_store_delete().
  - Added OSSL_FUNC_store_open_ex() provider-storemgmt API function to pass
    a passphrase callback when opening a store.
  - Changed the default salt length used by PBES2 KDF's (PBKDF2 and scrypt)
    from 8 bytes to 16 bytes.
  - Changed the default value of the 'ess_cert_id_alg' configuration
    option which is used to calculate the TSA's public key certificate
    identifier. The default algorithm is updated to be sha256 instead of sha1.
  - Added optimization for SM2 algorithm on aarch64. A new configure option
    'no-sm2-precomp' has been added to disable the precomputed table.
  - Added client side support for QUIC
  - Added secp384r1 implementation using Solinas' reduction to improve
    speed of the NIST P-384 elliptic curve. To enable the implementation
    the build option 'enable-ec_nistp_64_gcc_128' must be used.
  - Improved RFC7468 compliance of the asn1parse command.
  - Added SHA256/192 algorithm support.
  - Added support for securely getting root CA certificate update in CMP.
  - Improved contention on global write locks by using more read locks where
    appropriate.
  - Improved performance of OSSL_PARAM lookups in performance critical
    provider functions.
  - Added the SSL_get0_group_name() function to provide access to the
    name of the group used for the TLS key exchange.
  - Provide a new configure option 'no-http' that can be used to disable the
    HTTP support. Provide new configure options 'no-apps' and 'no-docs' to
    disable building the openssl command line application and the documentation.
  - Provide a new configure option 'no-ecx' that can be used to disable the
    X25519, X448, and EdDSA support.
  - When multiple OSSL_KDF_PARAM_INFO parameters are passed to
    the EVP_KDF_CTX_set_params() function they are now concatenated not just
    for the HKDF algorithm but also for SSKDF and X9.63 KDF algorithms.
  - Added OSSL_FUNC_keymgmt_im/export_types_ex() provider functions that get
    the provider context as a parameter.
  - TLS round-trip time calculation was added by a Brigham Young University
    Capstone team partnering with Sandia National Laboratories. A new function
    in ssl_lib titled SSL_get_handshake_rtt will calculate and retrieve this
    value.
  - Added the "-quic" option to s_client to enable connectivity to QUIC servers.
    QUIC requires the use of ALPN, so this must be specified via the "-alpn"
    option. Use of the "advanced" s_client command command via the "-adv" option
    is recommended.
  - Added an "advanced" command mode to s_client. Use this with the "-adv" option.
  - Add Raw Public Key (RFC7250) support.
  - Added support for modular exponentiation and CRT offloading for the
    S390x architecture.
  - Added further assembler code for the RISC-V architecture.
  - Added EC_GROUP_to_params() which creates an OSSL_PARAM array
    from a given EC_GROUP.
  - Improved support for non-default library contexts and property queries
    when parsing PKCS#12 files.
  - Implemented support for all five instances of EdDSA from RFC8032:
    Ed25519, Ed25519ctx, Ed25519ph, Ed448, and Ed448ph.
    The streaming is not yet supported for the HashEdDSA variants
    (Ed25519ph and Ed448ph).
  - Added SM4 optimization for ARM processors using ASIMD and AES HW instructions.
  - Implemented SM4-XTS support.
  - Added platform-agnostic OSSL_sleep() function.
  - Implemented deterministic ECDSA signatures (RFC6979) support.
  - Implemented AES-GCM-SIV (RFC8452) support.
  - Added support for pluggable (provider-based) TLS signature algorithms.
    This enables TLS 1.3 authentication operations with algorithms embedded
    in providers not included by default in OpenSSL. In combination with
    the already available pluggable KEM and X.509 support, this enables
    for example suitable providers to deliver post-quantum or quantum-safe
    cryptography to OpenSSL users.
  - Added support for pluggable (provider-based) CMS signature algorithms.
    This enables CMS sign and verify operations with algorithms embedded
    in providers not included by default in OpenSSL.
  - Implemented HPKE DHKEM support in providers used by HPKE (RFC9180) API.
  - Add support for certificate compression (RFC8879), including
    library support for Brotli and Zstandard compression.
  - Add the ability to add custom attributes to PKCS12 files. Add a new API
    PKCS12_create_ex2, identical to the existing PKCS12_create_ex but allows
    for a user specified callback and optional argument.
    Added a new PKCS12_SAFEBAG_set0_attr, which allows for a new attr to be
    added to the existing STACK_OF attrs.
  - Major refactor of the libssl record layer.
  - Add a mac salt length option for the pkcs12 command.
  - Add more SRTP protection profiles from RFC8723 and RFC8269.
  - Extended Kernel TLS (KTLS) to support TLS 1.3 receive offload.
  - Add support for TCP Fast Open (RFC7413) to macOS, Linux, and FreeBSD where
    supported and enabled.
  - Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489)
    to the list of ciphersuites providing Perfect Forward Secrecy as
    required by SECLEVEL &gt;= 3.
  - Add new SSL APIs to aid in efficiently implementing TLS/SSL fingerprinting.
    The SSL_CTRL_GET_IANA_GROUPS control code, exposed as the
    SSL_get0_iana_groups() function-like macro, retrieves the list of
    supported groups sent by the peer.
  - Fixed PEM_write_bio_PKCS8PrivateKey() and PEM_write_bio_PKCS8PrivateKey_nid()
    to make it possible to use empty passphrase strings.
  - The PKCS12_parse() function now supports MAC-less PKCS12 files.
  - Added ASYNC_set_mem_functions() and ASYNC_get_mem_functions() calls to be able
    to change functions used for allocating the memory of asynchronous call stack.
  - Added support for signed BIGNUMs in the OSSL_PARAM APIs.
  - A failure exit code is returned when using the openssl x509 command to check
    certificate attributes and the checks fail.
  - The default SSL/TLS security level has been changed from 1 to 2. RSA,
    DSA and DH keys of 1024 bits and above and less than 2048 bits and ECC keys
    of 160 bits and above and less than 224 bits were previously accepted by
    default but are now no longer allowed. By default TLS compression was
    already disabled in previous OpenSSL versions. At security level 2 it cannot
    be enabled.
  - The SSL_CTX_set_cipher_list family functions now accept ciphers using their
    IANA standard names.
  - The PVK key derivation function has been moved from b2i_PVK_bio_ex() into
    the legacy crypto provider as an EVP_KDF. Applications requiring this KDF
    will need to load the legacy crypto provider.
  - CCM8 cipher suites in TLS have been downgraded to security level zero
    because they use a short authentication tag which lowers their strength.
  - Subject or issuer names in X.509 objects are now displayed as UTF-8 strings
    by default. Also spaces surrounding '=' in DN output are removed.
  - Add X.509 certificate codeSigning purpose and related checks on key usage and
    extended key usage of the leaf certificate according to the CA/Browser Forum.
  - The 'x509', 'ca', and 'req' apps now produce X.509 v3 certificates.
    The '-x509v1' option of 'req' prefers generation of X.509 v1 certificates.
    'X509_sign()' and 'X509_sign_ctx()' make sure that the certificate has
    X.509 version 3 if the certificate information includes X.509 extensions.
  - Fix and extend certificate handling and the apps 'x509', 'verify' etc.
    such as adding a trace facility for debugging certificate chain building.
  - Various fixes and extensions to the CMP+CRMF implementation and the 'cmp' app
    in particular supporting requests for central key generation, generalized
    polling, and various types of genm/genp exchanges defined in CMP Updates.
  - Fixes and extensions to the HTTP client and to the HTTP server in 'apps/'
    like correcting the TLS and proxy support and adding tracing for debugging.
  - Extended the CMS API for handling 'CMS_SignedData' and 'CMS_EnvelopedData'.
  - 'CMS_add0_cert()' and 'CMS_add1_cert()' no longer throw an error if
    a certificate to be added is already present. 'CMS_sign_ex()' and
    'CMS_sign()' now ignore any duplicate certificates in their 'certs' argument
    and no longer throw an error for them.
  - Added BIO_s_dgram_pair() and BIO_s_dgram_mem() that provide memory-based
    BIOs with datagram semantics and support for BIO_sendmmsg() and BIO_recvmmsg()
    calls. They can be used as the transport BIOs for QUIC.
  - Add new BIO_sendmmsg() and BIO_recvmmsg() BIO methods which allow
    sending and receiving multiple messages in a single call. An implementation
    is provided for BIO_dgram. For further details, see BIO_sendmmsg(3).
  - Support for loading root certificates from the Windows certificate store
    has been added.
  - Enable KTLS with the TLS 1.3 CCM mode ciphersuites. Note that some linux
    kernel versions that support KTLS have a known bug in CCM processing. That
    has been fixed in stable releases starting from 5.4.164, 5.10.84, 5.15.7,
    and all releases since 5.16. KTLS with CCM ciphersuites should be only used
    on these releases.
  - Added '-ktls' option to 's_server' and 's_client' commands to enable the
    KTLS support.
  - Zerocopy KTLS sendfile() support on Linux.
  - The OBJ_ calls are now thread safe using a global lock.
  - New parameter '-digest' for openssl cms command allowing signing
    pre-computed digests and new CMS API functions supporting that
    functionality.
  - OPENSSL_malloc() and other allocation functions now raise errors on
    allocation failures. The callers do not need to explicitly raise errors
    unless they want to for tracing purposes.
  - Added support for Brainpool curves in TLS-1.3.
  - Support for Argon2d, Argon2i, Argon2id KDFs has been added along with
    a basic thread pool implementation for select platforms.</changelog>
  <changelog author="pmonreal@suse.com" date="1729857601">- Update to 3.2.1:
  * Changes between 3.2.0 and 3.2.1:
  - A file in PKCS12 format can contain certificates and keys and may come from
    an untrusted source. The PKCS12 specification allows certain fields to be
    NULL, but OpenSSL did not correctly check for this case. [CVE-2024-0727]
  - When function EVP_PKEY_public_check() is called on RSA public keys,
    a computation is done to confirm that the RSA modulus, n, is composite.
    For valid RSA keys, n is a product of two or more large primes and this
    computation completes quickly. However, if n is an overly large prime,
    then this computation would take a long time. [CVE-2023-6237]
  - Restore the encoding of SM2 PrivateKeyInfo and SubjectPublicKeyInfo to
    have the contained AlgorithmIdentifier.algorithm set to id-ecPublicKey
    rather than SM2.
  - The POLY1305 MAC (message authentication code) implementation in OpenSSL
    for PowerPC CPUs saves the contents of vector registers in different
    order than they are restored. [CVE-2023-6129]
  - Disable building QUIC server utility when OpenSSL is configured with 'no-apps'.
  * The openssl-crypto-policies-support.patch has been merged into
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Rename openssl-Disable-default-provider-for-test-suite.patch and rebase to
    openssl-TESTS-Disable-default-provider-crypto-policies.patch
  * Patches removed in the update:
  - openssl-Add_support_for_Windows_CA_certificate_store.patch
  - openssl-ec-56-bit-Limb-Solinas-Strategy-for-secp384r1.patch
  - openssl-ec-Use-static-linkage-on-nistp521-felem_-square-mul-.patch
  - openssl-ec-powerpc64le-Add-asm-implementation-of-felem_-squa.patch
  - openssl-ecc-Remove-extraneous-parentheses-in-secp384r1.patch
  - openssl-powerpc-ecc-Fix-stack-allocation-secp384r1-asm.patch
  - openssl-CVE-2024-41996.patch
  - openssl-CVE-2023-50782.patch
  - openssl-CVE-2024-9143.patch
  * Patches rebased:
  - openssl-3-use-include-directive.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-DEFAULT_SUSE_cipher.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Force-FIPS.patch
  - openssl-load-legacy-provider.patch
  - openssl-no-html-docs.patch
  - openssl-pkgconfig.patch
  - openssl-ppc64-config.patch
  - openssl-truststore.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116800">- Remove the hardcoded DEFAULT_SUSE cipherlist selection.
  * Remove openssl-DEFAULT_SUSE_cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116801">- Update to 3.2.3:
  * Changes between 3.2.2 and 3.2.3:
  - Fixed possible denial of service in X.509 name checks. [CVE-2024-6119]
  - Fixed possible buffer overread in SSL_select_next_proto(). [CVE-2024-5535]
  * Changes between 3.2.1 and 3.2.2:
  - Fixed potential use after free after SSL_free_buffers() is called. [CVE-2024-4741]
  - Fixed an issue where checking excessively long DSA keys or parameters may
    be very slow. [CVE-2024-4603]
  - Improved EC/DSA nonce generation routines to avoid bias and timing
    side channel leaks.
  - Fixed an issue where some non-default TLS server configurations can cause
    unbounded memory growth when processing TLSv1.3 sessions. [CVE-2024-2511]
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded. This can be used on platforms
    where using atexit() from shared libraries causes crashes on exit.
  - Fixed bug where SSL_export_keying_material() could not be used with QUIC
    connections.
  * Add openssl-skip-quic-pairwise.patch to adapt the pairwise tests.
  * Merge openssl-FIPS-release_num_in_version_string.patch into
    openssl-FIPS-services-minimize.patch
  * Rebase patches:
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Remove-EC-curves.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-3-use-include-directive.patch
  * Remove not needed patches:
  - openssl-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  - openssl-3-FIPS-PCT_rsa_keygen.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730462400">- Support MSA 12 SHA3 on s390x [jsc#PED-10280]
  * Add openssl-3-add_EVP_DigestSqueeze_api.patch
  * Add openssl-3-support-multiple-sha3_squeeze_s390x.patch
  * Add openssl-3-add-xof-state-handling-s3_absorb.patch
  * Add openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  * Add openssl-3-fix-state-handling-sha3_final_s390x.patch
  * Add openssl-3-fix-state-handling-shake_final_s390x.patch
  * Add openssl-3-fix-state-handling-keccak_final_s390x.patch
  * Add openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  * Add openssl-3-add-defines-CPACF-funcs.patch
  * Add openssl-3-add-hw-acceleration-hmac.patch
  * Add openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  * Add openssl-3-fix-s390x_sha3_absorb.patch
  * Add openssl-3-fix-s390x_shake_squeeze.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808000">- Support MSA 10 XTS on s390x [jsc#PED-10273]
  * s390x: Add hardware acceleration for full AES-XTS
  * Add openssl-3-hw-acceleration-aes-xts-s390x.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808001">- Support MSA 11 HMAC on s390x [jsc#PED-10274]
  * Add openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  * Add openssl-3-fix-hmac-digest-detection-s390x.patch
  * Add openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730980800">- Add missing fixes for SHA3_squeeze and quic_multistream_test on
  pcc64 arch. [jsc#PED-10280]
  * Added openssl-3-fix-sha3-squeeze-ppc64.patch
  * Added openssl-3-fix-quic_multistream_test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1731412800">- Do not use HASHBANGPERL to avoid introducing a dependency on the
  perl-base package. [bsc#1233235]</changelog>
  <changelog author="pmonreal@suse.com" date="1734436800">- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
  - openssl-3-use-include-directive.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1738238400">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Security fix: [bsc#1236599, CVE-2024-12797]
  * RFC7250 handshakes with unauthenticated servers don't abort as
    expected.
  * Add openssl-CVE-2024-12797.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1746014400">- Security fix: [bsc#1240366, CVE-2025-27587]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
  <changelog author="mls@suse.de" date="1751371200">- Backport mdless cms signing support [jsc#PED-12895]
  * Add openssl-3-support-mdless-cms.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- FIPS: Fix EMS in crypto-policies FIPS:NO-ENFORCE-EMS
  * [bsc#1230959, bsc#1232326, bsc#1231748, bsc#1246428]
  * Add patch openssl-FIPS-fix-EMS-support.patch</changelog>
</package>
<package pkgid="f639c3a899228f395933c998c8a6b7496ced1e8e473ee67901b640c57ca16c71" name="libopenssl-3-devel" arch="x86_64">
  <version epoch="0" ver="3.2.3" rel="150700.5.18.1"/>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1220262, CVE-2023-50782]
  * Implicit rejection in PKCS#1 v1.5
  * Add openssl-CVE-2023-50782.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166401">- Security fix: [bsc#1231741, CVE-2024-9143]
  * Low-level invalid GF(2^m) parameters lead to OOB memory access
  * Add openssl-CVE-2024-9143.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729512000">- Update to 3.1.7:
  * Major changes between OpenSSL 3.1.6 and OpenSSL 3.1.7 [3 Sep 2024]
  - Fixed possible denial of service in X.509 name checks (CVE-2024-6119)
  - Fixed possible buffer overread in SSL_select_next_proto()
    (CVE-2024-5535)
  * Major changes between OpenSSL 3.1.5 and OpenSSL 3.1.6 [4 Jun 2024]
  - Fixed potential use after free after SSL_free_buffers() is
    called (CVE-2024-4741)
  - Fixed an issue where checking excessively long DSA keys or
    parameters may be very slow (CVE-2024-4603)
  - Fixed unbounded memory growth with session handling in TLSv1.3
    (CVE-2024-2511)
  * Major changes between OpenSSL 3.1.4 and OpenSSL 3.1.5 [30 Jan 2024]
  - Fixed PKCS12 Decoding crashes (CVE-2024-0727)
  - Fixed Excessive time spent checking invalid RSA public keys
    [CVE-2023-6237)
  - Fixed POLY1305 MAC implementation corrupting vector registers
    on PowerPC CPUs which support PowerISA 2.07 (CVE-2023-6129)
  - Fix excessive time spent in DH check / generation with large
    Q parameter value (CVE-2023-5678)
  * Update openssl.keyring with BA5473A2B0587B07FB27CF2D216094DFD0CB81EF
  * Rebase patches:
  - openssl-Force-FIPS.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-CVE-2023-50782.patch
  * Remove patches fixed in the update:
  - openssl-Improve-performance-for-6x-unrolling-with-vpermxor-i.patch
  - openssl-CVE-2024-6119.patch openssl-CVE-2024-5535.patch
  - openssl-CVE-2024-4741.patch openssl-CVE-2024-4603.patch
  - openssl-CVE-2024-2511.patch openssl-CVE-2024-0727.patch
  - openssl-CVE-2023-6237.patch openssl-CVE-2023-6129.patch
  - openssl-CVE-2023-5678.patch openssl-3-CVE-2024-41996.patch
  - openssl-Enable-BTI-feature-for-md5-on-aarch64.patch
  - openssl-Fix-EVP_PKEY_CTX_add1_hkdf_info-behavior.patch
  - openssl-Handle-empty-param-in-EVP_PKEY_CTX_add1_hkdf_info.patch
  - reproducible.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729857600">- Update to 3.2.0:
  * Changes between 3.1.x and 3.2.0:
  - Fix excessive time spent in DH check/ generation with large Q parameter
    value. [CVE-2023-5678]
  - The BLAKE2b hash algorithm supports a configurable output length
    by setting the "size" parameter.
  - Added a function to delete objects from store by URI - OSSL_STORE_delete()
    and the corresponding provider-storemgmt API function OSSL_FUNC_store_delete().
  - Added OSSL_FUNC_store_open_ex() provider-storemgmt API function to pass
    a passphrase callback when opening a store.
  - Changed the default salt length used by PBES2 KDF's (PBKDF2 and scrypt)
    from 8 bytes to 16 bytes.
  - Changed the default value of the 'ess_cert_id_alg' configuration
    option which is used to calculate the TSA's public key certificate
    identifier. The default algorithm is updated to be sha256 instead of sha1.
  - Added optimization for SM2 algorithm on aarch64. A new configure option
    'no-sm2-precomp' has been added to disable the precomputed table.
  - Added client side support for QUIC
  - Added secp384r1 implementation using Solinas' reduction to improve
    speed of the NIST P-384 elliptic curve. To enable the implementation
    the build option 'enable-ec_nistp_64_gcc_128' must be used.
  - Improved RFC7468 compliance of the asn1parse command.
  - Added SHA256/192 algorithm support.
  - Added support for securely getting root CA certificate update in CMP.
  - Improved contention on global write locks by using more read locks where
    appropriate.
  - Improved performance of OSSL_PARAM lookups in performance critical
    provider functions.
  - Added the SSL_get0_group_name() function to provide access to the
    name of the group used for the TLS key exchange.
  - Provide a new configure option 'no-http' that can be used to disable the
    HTTP support. Provide new configure options 'no-apps' and 'no-docs' to
    disable building the openssl command line application and the documentation.
  - Provide a new configure option 'no-ecx' that can be used to disable the
    X25519, X448, and EdDSA support.
  - When multiple OSSL_KDF_PARAM_INFO parameters are passed to
    the EVP_KDF_CTX_set_params() function they are now concatenated not just
    for the HKDF algorithm but also for SSKDF and X9.63 KDF algorithms.
  - Added OSSL_FUNC_keymgmt_im/export_types_ex() provider functions that get
    the provider context as a parameter.
  - TLS round-trip time calculation was added by a Brigham Young University
    Capstone team partnering with Sandia National Laboratories. A new function
    in ssl_lib titled SSL_get_handshake_rtt will calculate and retrieve this
    value.
  - Added the "-quic" option to s_client to enable connectivity to QUIC servers.
    QUIC requires the use of ALPN, so this must be specified via the "-alpn"
    option. Use of the "advanced" s_client command command via the "-adv" option
    is recommended.
  - Added an "advanced" command mode to s_client. Use this with the "-adv" option.
  - Add Raw Public Key (RFC7250) support.
  - Added support for modular exponentiation and CRT offloading for the
    S390x architecture.
  - Added further assembler code for the RISC-V architecture.
  - Added EC_GROUP_to_params() which creates an OSSL_PARAM array
    from a given EC_GROUP.
  - Improved support for non-default library contexts and property queries
    when parsing PKCS#12 files.
  - Implemented support for all five instances of EdDSA from RFC8032:
    Ed25519, Ed25519ctx, Ed25519ph, Ed448, and Ed448ph.
    The streaming is not yet supported for the HashEdDSA variants
    (Ed25519ph and Ed448ph).
  - Added SM4 optimization for ARM processors using ASIMD and AES HW instructions.
  - Implemented SM4-XTS support.
  - Added platform-agnostic OSSL_sleep() function.
  - Implemented deterministic ECDSA signatures (RFC6979) support.
  - Implemented AES-GCM-SIV (RFC8452) support.
  - Added support for pluggable (provider-based) TLS signature algorithms.
    This enables TLS 1.3 authentication operations with algorithms embedded
    in providers not included by default in OpenSSL. In combination with
    the already available pluggable KEM and X.509 support, this enables
    for example suitable providers to deliver post-quantum or quantum-safe
    cryptography to OpenSSL users.
  - Added support for pluggable (provider-based) CMS signature algorithms.
    This enables CMS sign and verify operations with algorithms embedded
    in providers not included by default in OpenSSL.
  - Implemented HPKE DHKEM support in providers used by HPKE (RFC9180) API.
  - Add support for certificate compression (RFC8879), including
    library support for Brotli and Zstandard compression.
  - Add the ability to add custom attributes to PKCS12 files. Add a new API
    PKCS12_create_ex2, identical to the existing PKCS12_create_ex but allows
    for a user specified callback and optional argument.
    Added a new PKCS12_SAFEBAG_set0_attr, which allows for a new attr to be
    added to the existing STACK_OF attrs.
  - Major refactor of the libssl record layer.
  - Add a mac salt length option for the pkcs12 command.
  - Add more SRTP protection profiles from RFC8723 and RFC8269.
  - Extended Kernel TLS (KTLS) to support TLS 1.3 receive offload.
  - Add support for TCP Fast Open (RFC7413) to macOS, Linux, and FreeBSD where
    supported and enabled.
  - Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489)
    to the list of ciphersuites providing Perfect Forward Secrecy as
    required by SECLEVEL &gt;= 3.
  - Add new SSL APIs to aid in efficiently implementing TLS/SSL fingerprinting.
    The SSL_CTRL_GET_IANA_GROUPS control code, exposed as the
    SSL_get0_iana_groups() function-like macro, retrieves the list of
    supported groups sent by the peer.
  - Fixed PEM_write_bio_PKCS8PrivateKey() and PEM_write_bio_PKCS8PrivateKey_nid()
    to make it possible to use empty passphrase strings.
  - The PKCS12_parse() function now supports MAC-less PKCS12 files.
  - Added ASYNC_set_mem_functions() and ASYNC_get_mem_functions() calls to be able
    to change functions used for allocating the memory of asynchronous call stack.
  - Added support for signed BIGNUMs in the OSSL_PARAM APIs.
  - A failure exit code is returned when using the openssl x509 command to check
    certificate attributes and the checks fail.
  - The default SSL/TLS security level has been changed from 1 to 2. RSA,
    DSA and DH keys of 1024 bits and above and less than 2048 bits and ECC keys
    of 160 bits and above and less than 224 bits were previously accepted by
    default but are now no longer allowed. By default TLS compression was
    already disabled in previous OpenSSL versions. At security level 2 it cannot
    be enabled.
  - The SSL_CTX_set_cipher_list family functions now accept ciphers using their
    IANA standard names.
  - The PVK key derivation function has been moved from b2i_PVK_bio_ex() into
    the legacy crypto provider as an EVP_KDF. Applications requiring this KDF
    will need to load the legacy crypto provider.
  - CCM8 cipher suites in TLS have been downgraded to security level zero
    because they use a short authentication tag which lowers their strength.
  - Subject or issuer names in X.509 objects are now displayed as UTF-8 strings
    by default. Also spaces surrounding '=' in DN output are removed.
  - Add X.509 certificate codeSigning purpose and related checks on key usage and
    extended key usage of the leaf certificate according to the CA/Browser Forum.
  - The 'x509', 'ca', and 'req' apps now produce X.509 v3 certificates.
    The '-x509v1' option of 'req' prefers generation of X.509 v1 certificates.
    'X509_sign()' and 'X509_sign_ctx()' make sure that the certificate has
    X.509 version 3 if the certificate information includes X.509 extensions.
  - Fix and extend certificate handling and the apps 'x509', 'verify' etc.
    such as adding a trace facility for debugging certificate chain building.
  - Various fixes and extensions to the CMP+CRMF implementation and the 'cmp' app
    in particular supporting requests for central key generation, generalized
    polling, and various types of genm/genp exchanges defined in CMP Updates.
  - Fixes and extensions to the HTTP client and to the HTTP server in 'apps/'
    like correcting the TLS and proxy support and adding tracing for debugging.
  - Extended the CMS API for handling 'CMS_SignedData' and 'CMS_EnvelopedData'.
  - 'CMS_add0_cert()' and 'CMS_add1_cert()' no longer throw an error if
    a certificate to be added is already present. 'CMS_sign_ex()' and
    'CMS_sign()' now ignore any duplicate certificates in their 'certs' argument
    and no longer throw an error for them.
  - Added BIO_s_dgram_pair() and BIO_s_dgram_mem() that provide memory-based
    BIOs with datagram semantics and support for BIO_sendmmsg() and BIO_recvmmsg()
    calls. They can be used as the transport BIOs for QUIC.
  - Add new BIO_sendmmsg() and BIO_recvmmsg() BIO methods which allow
    sending and receiving multiple messages in a single call. An implementation
    is provided for BIO_dgram. For further details, see BIO_sendmmsg(3).
  - Support for loading root certificates from the Windows certificate store
    has been added.
  - Enable KTLS with the TLS 1.3 CCM mode ciphersuites. Note that some linux
    kernel versions that support KTLS have a known bug in CCM processing. That
    has been fixed in stable releases starting from 5.4.164, 5.10.84, 5.15.7,
    and all releases since 5.16. KTLS with CCM ciphersuites should be only used
    on these releases.
  - Added '-ktls' option to 's_server' and 's_client' commands to enable the
    KTLS support.
  - Zerocopy KTLS sendfile() support on Linux.
  - The OBJ_ calls are now thread safe using a global lock.
  - New parameter '-digest' for openssl cms command allowing signing
    pre-computed digests and new CMS API functions supporting that
    functionality.
  - OPENSSL_malloc() and other allocation functions now raise errors on
    allocation failures. The callers do not need to explicitly raise errors
    unless they want to for tracing purposes.
  - Added support for Brainpool curves in TLS-1.3.
  - Support for Argon2d, Argon2i, Argon2id KDFs has been added along with
    a basic thread pool implementation for select platforms.</changelog>
  <changelog author="pmonreal@suse.com" date="1729857601">- Update to 3.2.1:
  * Changes between 3.2.0 and 3.2.1:
  - A file in PKCS12 format can contain certificates and keys and may come from
    an untrusted source. The PKCS12 specification allows certain fields to be
    NULL, but OpenSSL did not correctly check for this case. [CVE-2024-0727]
  - When function EVP_PKEY_public_check() is called on RSA public keys,
    a computation is done to confirm that the RSA modulus, n, is composite.
    For valid RSA keys, n is a product of two or more large primes and this
    computation completes quickly. However, if n is an overly large prime,
    then this computation would take a long time. [CVE-2023-6237]
  - Restore the encoding of SM2 PrivateKeyInfo and SubjectPublicKeyInfo to
    have the contained AlgorithmIdentifier.algorithm set to id-ecPublicKey
    rather than SM2.
  - The POLY1305 MAC (message authentication code) implementation in OpenSSL
    for PowerPC CPUs saves the contents of vector registers in different
    order than they are restored. [CVE-2023-6129]
  - Disable building QUIC server utility when OpenSSL is configured with 'no-apps'.
  * The openssl-crypto-policies-support.patch has been merged into
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Rename openssl-Disable-default-provider-for-test-suite.patch and rebase to
    openssl-TESTS-Disable-default-provider-crypto-policies.patch
  * Patches removed in the update:
  - openssl-Add_support_for_Windows_CA_certificate_store.patch
  - openssl-ec-56-bit-Limb-Solinas-Strategy-for-secp384r1.patch
  - openssl-ec-Use-static-linkage-on-nistp521-felem_-square-mul-.patch
  - openssl-ec-powerpc64le-Add-asm-implementation-of-felem_-squa.patch
  - openssl-ecc-Remove-extraneous-parentheses-in-secp384r1.patch
  - openssl-powerpc-ecc-Fix-stack-allocation-secp384r1-asm.patch
  - openssl-CVE-2024-41996.patch
  - openssl-CVE-2023-50782.patch
  - openssl-CVE-2024-9143.patch
  * Patches rebased:
  - openssl-3-use-include-directive.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-DEFAULT_SUSE_cipher.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Force-FIPS.patch
  - openssl-load-legacy-provider.patch
  - openssl-no-html-docs.patch
  - openssl-pkgconfig.patch
  - openssl-ppc64-config.patch
  - openssl-truststore.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116800">- Remove the hardcoded DEFAULT_SUSE cipherlist selection.
  * Remove openssl-DEFAULT_SUSE_cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116801">- Update to 3.2.3:
  * Changes between 3.2.2 and 3.2.3:
  - Fixed possible denial of service in X.509 name checks. [CVE-2024-6119]
  - Fixed possible buffer overread in SSL_select_next_proto(). [CVE-2024-5535]
  * Changes between 3.2.1 and 3.2.2:
  - Fixed potential use after free after SSL_free_buffers() is called. [CVE-2024-4741]
  - Fixed an issue where checking excessively long DSA keys or parameters may
    be very slow. [CVE-2024-4603]
  - Improved EC/DSA nonce generation routines to avoid bias and timing
    side channel leaks.
  - Fixed an issue where some non-default TLS server configurations can cause
    unbounded memory growth when processing TLSv1.3 sessions. [CVE-2024-2511]
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded. This can be used on platforms
    where using atexit() from shared libraries causes crashes on exit.
  - Fixed bug where SSL_export_keying_material() could not be used with QUIC
    connections.
  * Add openssl-skip-quic-pairwise.patch to adapt the pairwise tests.
  * Merge openssl-FIPS-release_num_in_version_string.patch into
    openssl-FIPS-services-minimize.patch
  * Rebase patches:
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Remove-EC-curves.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-3-use-include-directive.patch
  * Remove not needed patches:
  - openssl-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  - openssl-3-FIPS-PCT_rsa_keygen.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730462400">- Support MSA 12 SHA3 on s390x [jsc#PED-10280]
  * Add openssl-3-add_EVP_DigestSqueeze_api.patch
  * Add openssl-3-support-multiple-sha3_squeeze_s390x.patch
  * Add openssl-3-add-xof-state-handling-s3_absorb.patch
  * Add openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  * Add openssl-3-fix-state-handling-sha3_final_s390x.patch
  * Add openssl-3-fix-state-handling-shake_final_s390x.patch
  * Add openssl-3-fix-state-handling-keccak_final_s390x.patch
  * Add openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  * Add openssl-3-add-defines-CPACF-funcs.patch
  * Add openssl-3-add-hw-acceleration-hmac.patch
  * Add openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  * Add openssl-3-fix-s390x_sha3_absorb.patch
  * Add openssl-3-fix-s390x_shake_squeeze.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808000">- Support MSA 10 XTS on s390x [jsc#PED-10273]
  * s390x: Add hardware acceleration for full AES-XTS
  * Add openssl-3-hw-acceleration-aes-xts-s390x.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808001">- Support MSA 11 HMAC on s390x [jsc#PED-10274]
  * Add openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  * Add openssl-3-fix-hmac-digest-detection-s390x.patch
  * Add openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730980800">- Add missing fixes for SHA3_squeeze and quic_multistream_test on
  pcc64 arch. [jsc#PED-10280]
  * Added openssl-3-fix-sha3-squeeze-ppc64.patch
  * Added openssl-3-fix-quic_multistream_test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1731412800">- Do not use HASHBANGPERL to avoid introducing a dependency on the
  perl-base package. [bsc#1233235]</changelog>
  <changelog author="pmonreal@suse.com" date="1734436800">- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
  - openssl-3-use-include-directive.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1738238400">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Security fix: [bsc#1236599, CVE-2024-12797]
  * RFC7250 handshakes with unauthenticated servers don't abort as
    expected.
  * Add openssl-CVE-2024-12797.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1746014400">- Security fix: [bsc#1240366, CVE-2025-27587]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
  <changelog author="mls@suse.de" date="1751371200">- Backport mdless cms signing support [jsc#PED-12895]
  * Add openssl-3-support-mdless-cms.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- FIPS: Fix EMS in crypto-policies FIPS:NO-ENFORCE-EMS
  * [bsc#1230959, bsc#1232326, bsc#1231748, bsc#1246428]
  * Add patch openssl-FIPS-fix-EMS-support.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1753876800">- Increase limit for CRL download [bsc#1247148, bsc#1247144]
  * Add openssl-3-large-CRLs.patch</changelog>
</package>
<package pkgid="062f1e639989e2107aeba199e159d57ae74d5ef6cc92c1eddcdae42b0099baf8" name="libopenssl-3-devel" arch="x86_64">
  <version epoch="0" ver="3.2.3" rel="150700.5.21.1"/>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1231741, CVE-2024-9143]
  * Low-level invalid GF(2^m) parameters lead to OOB memory access
  * Add openssl-CVE-2024-9143.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729512000">- Update to 3.1.7:
  * Major changes between OpenSSL 3.1.6 and OpenSSL 3.1.7 [3 Sep 2024]
  - Fixed possible denial of service in X.509 name checks (CVE-2024-6119)
  - Fixed possible buffer overread in SSL_select_next_proto()
    (CVE-2024-5535)
  * Major changes between OpenSSL 3.1.5 and OpenSSL 3.1.6 [4 Jun 2024]
  - Fixed potential use after free after SSL_free_buffers() is
    called (CVE-2024-4741)
  - Fixed an issue where checking excessively long DSA keys or
    parameters may be very slow (CVE-2024-4603)
  - Fixed unbounded memory growth with session handling in TLSv1.3
    (CVE-2024-2511)
  * Major changes between OpenSSL 3.1.4 and OpenSSL 3.1.5 [30 Jan 2024]
  - Fixed PKCS12 Decoding crashes (CVE-2024-0727)
  - Fixed Excessive time spent checking invalid RSA public keys
    [CVE-2023-6237)
  - Fixed POLY1305 MAC implementation corrupting vector registers
    on PowerPC CPUs which support PowerISA 2.07 (CVE-2023-6129)
  - Fix excessive time spent in DH check / generation with large
    Q parameter value (CVE-2023-5678)
  * Update openssl.keyring with BA5473A2B0587B07FB27CF2D216094DFD0CB81EF
  * Rebase patches:
  - openssl-Force-FIPS.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-CVE-2023-50782.patch
  * Remove patches fixed in the update:
  - openssl-Improve-performance-for-6x-unrolling-with-vpermxor-i.patch
  - openssl-CVE-2024-6119.patch openssl-CVE-2024-5535.patch
  - openssl-CVE-2024-4741.patch openssl-CVE-2024-4603.patch
  - openssl-CVE-2024-2511.patch openssl-CVE-2024-0727.patch
  - openssl-CVE-2023-6237.patch openssl-CVE-2023-6129.patch
  - openssl-CVE-2023-5678.patch openssl-3-CVE-2024-41996.patch
  - openssl-Enable-BTI-feature-for-md5-on-aarch64.patch
  - openssl-Fix-EVP_PKEY_CTX_add1_hkdf_info-behavior.patch
  - openssl-Handle-empty-param-in-EVP_PKEY_CTX_add1_hkdf_info.patch
  - reproducible.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729857600">- Update to 3.2.0:
  * Changes between 3.1.x and 3.2.0:
  - Fix excessive time spent in DH check/ generation with large Q parameter
    value. [CVE-2023-5678]
  - The BLAKE2b hash algorithm supports a configurable output length
    by setting the "size" parameter.
  - Added a function to delete objects from store by URI - OSSL_STORE_delete()
    and the corresponding provider-storemgmt API function OSSL_FUNC_store_delete().
  - Added OSSL_FUNC_store_open_ex() provider-storemgmt API function to pass
    a passphrase callback when opening a store.
  - Changed the default salt length used by PBES2 KDF's (PBKDF2 and scrypt)
    from 8 bytes to 16 bytes.
  - Changed the default value of the 'ess_cert_id_alg' configuration
    option which is used to calculate the TSA's public key certificate
    identifier. The default algorithm is updated to be sha256 instead of sha1.
  - Added optimization for SM2 algorithm on aarch64. A new configure option
    'no-sm2-precomp' has been added to disable the precomputed table.
  - Added client side support for QUIC
  - Added secp384r1 implementation using Solinas' reduction to improve
    speed of the NIST P-384 elliptic curve. To enable the implementation
    the build option 'enable-ec_nistp_64_gcc_128' must be used.
  - Improved RFC7468 compliance of the asn1parse command.
  - Added SHA256/192 algorithm support.
  - Added support for securely getting root CA certificate update in CMP.
  - Improved contention on global write locks by using more read locks where
    appropriate.
  - Improved performance of OSSL_PARAM lookups in performance critical
    provider functions.
  - Added the SSL_get0_group_name() function to provide access to the
    name of the group used for the TLS key exchange.
  - Provide a new configure option 'no-http' that can be used to disable the
    HTTP support. Provide new configure options 'no-apps' and 'no-docs' to
    disable building the openssl command line application and the documentation.
  - Provide a new configure option 'no-ecx' that can be used to disable the
    X25519, X448, and EdDSA support.
  - When multiple OSSL_KDF_PARAM_INFO parameters are passed to
    the EVP_KDF_CTX_set_params() function they are now concatenated not just
    for the HKDF algorithm but also for SSKDF and X9.63 KDF algorithms.
  - Added OSSL_FUNC_keymgmt_im/export_types_ex() provider functions that get
    the provider context as a parameter.
  - TLS round-trip time calculation was added by a Brigham Young University
    Capstone team partnering with Sandia National Laboratories. A new function
    in ssl_lib titled SSL_get_handshake_rtt will calculate and retrieve this
    value.
  - Added the "-quic" option to s_client to enable connectivity to QUIC servers.
    QUIC requires the use of ALPN, so this must be specified via the "-alpn"
    option. Use of the "advanced" s_client command command via the "-adv" option
    is recommended.
  - Added an "advanced" command mode to s_client. Use this with the "-adv" option.
  - Add Raw Public Key (RFC7250) support.
  - Added support for modular exponentiation and CRT offloading for the
    S390x architecture.
  - Added further assembler code for the RISC-V architecture.
  - Added EC_GROUP_to_params() which creates an OSSL_PARAM array
    from a given EC_GROUP.
  - Improved support for non-default library contexts and property queries
    when parsing PKCS#12 files.
  - Implemented support for all five instances of EdDSA from RFC8032:
    Ed25519, Ed25519ctx, Ed25519ph, Ed448, and Ed448ph.
    The streaming is not yet supported for the HashEdDSA variants
    (Ed25519ph and Ed448ph).
  - Added SM4 optimization for ARM processors using ASIMD and AES HW instructions.
  - Implemented SM4-XTS support.
  - Added platform-agnostic OSSL_sleep() function.
  - Implemented deterministic ECDSA signatures (RFC6979) support.
  - Implemented AES-GCM-SIV (RFC8452) support.
  - Added support for pluggable (provider-based) TLS signature algorithms.
    This enables TLS 1.3 authentication operations with algorithms embedded
    in providers not included by default in OpenSSL. In combination with
    the already available pluggable KEM and X.509 support, this enables
    for example suitable providers to deliver post-quantum or quantum-safe
    cryptography to OpenSSL users.
  - Added support for pluggable (provider-based) CMS signature algorithms.
    This enables CMS sign and verify operations with algorithms embedded
    in providers not included by default in OpenSSL.
  - Implemented HPKE DHKEM support in providers used by HPKE (RFC9180) API.
  - Add support for certificate compression (RFC8879), including
    library support for Brotli and Zstandard compression.
  - Add the ability to add custom attributes to PKCS12 files. Add a new API
    PKCS12_create_ex2, identical to the existing PKCS12_create_ex but allows
    for a user specified callback and optional argument.
    Added a new PKCS12_SAFEBAG_set0_attr, which allows for a new attr to be
    added to the existing STACK_OF attrs.
  - Major refactor of the libssl record layer.
  - Add a mac salt length option for the pkcs12 command.
  - Add more SRTP protection profiles from RFC8723 and RFC8269.
  - Extended Kernel TLS (KTLS) to support TLS 1.3 receive offload.
  - Add support for TCP Fast Open (RFC7413) to macOS, Linux, and FreeBSD where
    supported and enabled.
  - Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489)
    to the list of ciphersuites providing Perfect Forward Secrecy as
    required by SECLEVEL &gt;= 3.
  - Add new SSL APIs to aid in efficiently implementing TLS/SSL fingerprinting.
    The SSL_CTRL_GET_IANA_GROUPS control code, exposed as the
    SSL_get0_iana_groups() function-like macro, retrieves the list of
    supported groups sent by the peer.
  - Fixed PEM_write_bio_PKCS8PrivateKey() and PEM_write_bio_PKCS8PrivateKey_nid()
    to make it possible to use empty passphrase strings.
  - The PKCS12_parse() function now supports MAC-less PKCS12 files.
  - Added ASYNC_set_mem_functions() and ASYNC_get_mem_functions() calls to be able
    to change functions used for allocating the memory of asynchronous call stack.
  - Added support for signed BIGNUMs in the OSSL_PARAM APIs.
  - A failure exit code is returned when using the openssl x509 command to check
    certificate attributes and the checks fail.
  - The default SSL/TLS security level has been changed from 1 to 2. RSA,
    DSA and DH keys of 1024 bits and above and less than 2048 bits and ECC keys
    of 160 bits and above and less than 224 bits were previously accepted by
    default but are now no longer allowed. By default TLS compression was
    already disabled in previous OpenSSL versions. At security level 2 it cannot
    be enabled.
  - The SSL_CTX_set_cipher_list family functions now accept ciphers using their
    IANA standard names.
  - The PVK key derivation function has been moved from b2i_PVK_bio_ex() into
    the legacy crypto provider as an EVP_KDF. Applications requiring this KDF
    will need to load the legacy crypto provider.
  - CCM8 cipher suites in TLS have been downgraded to security level zero
    because they use a short authentication tag which lowers their strength.
  - Subject or issuer names in X.509 objects are now displayed as UTF-8 strings
    by default. Also spaces surrounding '=' in DN output are removed.
  - Add X.509 certificate codeSigning purpose and related checks on key usage and
    extended key usage of the leaf certificate according to the CA/Browser Forum.
  - The 'x509', 'ca', and 'req' apps now produce X.509 v3 certificates.
    The '-x509v1' option of 'req' prefers generation of X.509 v1 certificates.
    'X509_sign()' and 'X509_sign_ctx()' make sure that the certificate has
    X.509 version 3 if the certificate information includes X.509 extensions.
  - Fix and extend certificate handling and the apps 'x509', 'verify' etc.
    such as adding a trace facility for debugging certificate chain building.
  - Various fixes and extensions to the CMP+CRMF implementation and the 'cmp' app
    in particular supporting requests for central key generation, generalized
    polling, and various types of genm/genp exchanges defined in CMP Updates.
  - Fixes and extensions to the HTTP client and to the HTTP server in 'apps/'
    like correcting the TLS and proxy support and adding tracing for debugging.
  - Extended the CMS API for handling 'CMS_SignedData' and 'CMS_EnvelopedData'.
  - 'CMS_add0_cert()' and 'CMS_add1_cert()' no longer throw an error if
    a certificate to be added is already present. 'CMS_sign_ex()' and
    'CMS_sign()' now ignore any duplicate certificates in their 'certs' argument
    and no longer throw an error for them.
  - Added BIO_s_dgram_pair() and BIO_s_dgram_mem() that provide memory-based
    BIOs with datagram semantics and support for BIO_sendmmsg() and BIO_recvmmsg()
    calls. They can be used as the transport BIOs for QUIC.
  - Add new BIO_sendmmsg() and BIO_recvmmsg() BIO methods which allow
    sending and receiving multiple messages in a single call. An implementation
    is provided for BIO_dgram. For further details, see BIO_sendmmsg(3).
  - Support for loading root certificates from the Windows certificate store
    has been added.
  - Enable KTLS with the TLS 1.3 CCM mode ciphersuites. Note that some linux
    kernel versions that support KTLS have a known bug in CCM processing. That
    has been fixed in stable releases starting from 5.4.164, 5.10.84, 5.15.7,
    and all releases since 5.16. KTLS with CCM ciphersuites should be only used
    on these releases.
  - Added '-ktls' option to 's_server' and 's_client' commands to enable the
    KTLS support.
  - Zerocopy KTLS sendfile() support on Linux.
  - The OBJ_ calls are now thread safe using a global lock.
  - New parameter '-digest' for openssl cms command allowing signing
    pre-computed digests and new CMS API functions supporting that
    functionality.
  - OPENSSL_malloc() and other allocation functions now raise errors on
    allocation failures. The callers do not need to explicitly raise errors
    unless they want to for tracing purposes.
  - Added support for Brainpool curves in TLS-1.3.
  - Support for Argon2d, Argon2i, Argon2id KDFs has been added along with
    a basic thread pool implementation for select platforms.</changelog>
  <changelog author="pmonreal@suse.com" date="1729857601">- Update to 3.2.1:
  * Changes between 3.2.0 and 3.2.1:
  - A file in PKCS12 format can contain certificates and keys and may come from
    an untrusted source. The PKCS12 specification allows certain fields to be
    NULL, but OpenSSL did not correctly check for this case. [CVE-2024-0727]
  - When function EVP_PKEY_public_check() is called on RSA public keys,
    a computation is done to confirm that the RSA modulus, n, is composite.
    For valid RSA keys, n is a product of two or more large primes and this
    computation completes quickly. However, if n is an overly large prime,
    then this computation would take a long time. [CVE-2023-6237]
  - Restore the encoding of SM2 PrivateKeyInfo and SubjectPublicKeyInfo to
    have the contained AlgorithmIdentifier.algorithm set to id-ecPublicKey
    rather than SM2.
  - The POLY1305 MAC (message authentication code) implementation in OpenSSL
    for PowerPC CPUs saves the contents of vector registers in different
    order than they are restored. [CVE-2023-6129]
  - Disable building QUIC server utility when OpenSSL is configured with 'no-apps'.
  * The openssl-crypto-policies-support.patch has been merged into
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Rename openssl-Disable-default-provider-for-test-suite.patch and rebase to
    openssl-TESTS-Disable-default-provider-crypto-policies.patch
  * Patches removed in the update:
  - openssl-Add_support_for_Windows_CA_certificate_store.patch
  - openssl-ec-56-bit-Limb-Solinas-Strategy-for-secp384r1.patch
  - openssl-ec-Use-static-linkage-on-nistp521-felem_-square-mul-.patch
  - openssl-ec-powerpc64le-Add-asm-implementation-of-felem_-squa.patch
  - openssl-ecc-Remove-extraneous-parentheses-in-secp384r1.patch
  - openssl-powerpc-ecc-Fix-stack-allocation-secp384r1-asm.patch
  - openssl-CVE-2024-41996.patch
  - openssl-CVE-2023-50782.patch
  - openssl-CVE-2024-9143.patch
  * Patches rebased:
  - openssl-3-use-include-directive.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-DEFAULT_SUSE_cipher.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Force-FIPS.patch
  - openssl-load-legacy-provider.patch
  - openssl-no-html-docs.patch
  - openssl-pkgconfig.patch
  - openssl-ppc64-config.patch
  - openssl-truststore.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116800">- Remove the hardcoded DEFAULT_SUSE cipherlist selection.
  * Remove openssl-DEFAULT_SUSE_cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116801">- Update to 3.2.3:
  * Changes between 3.2.2 and 3.2.3:
  - Fixed possible denial of service in X.509 name checks. [CVE-2024-6119]
  - Fixed possible buffer overread in SSL_select_next_proto(). [CVE-2024-5535]
  * Changes between 3.2.1 and 3.2.2:
  - Fixed potential use after free after SSL_free_buffers() is called. [CVE-2024-4741]
  - Fixed an issue where checking excessively long DSA keys or parameters may
    be very slow. [CVE-2024-4603]
  - Improved EC/DSA nonce generation routines to avoid bias and timing
    side channel leaks.
  - Fixed an issue where some non-default TLS server configurations can cause
    unbounded memory growth when processing TLSv1.3 sessions. [CVE-2024-2511]
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded. This can be used on platforms
    where using atexit() from shared libraries causes crashes on exit.
  - Fixed bug where SSL_export_keying_material() could not be used with QUIC
    connections.
  * Add openssl-skip-quic-pairwise.patch to adapt the pairwise tests.
  * Merge openssl-FIPS-release_num_in_version_string.patch into
    openssl-FIPS-services-minimize.patch
  * Rebase patches:
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Remove-EC-curves.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-3-use-include-directive.patch
  * Remove not needed patches:
  - openssl-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  - openssl-3-FIPS-PCT_rsa_keygen.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730462400">- Support MSA 12 SHA3 on s390x [jsc#PED-10280]
  * Add openssl-3-add_EVP_DigestSqueeze_api.patch
  * Add openssl-3-support-multiple-sha3_squeeze_s390x.patch
  * Add openssl-3-add-xof-state-handling-s3_absorb.patch
  * Add openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  * Add openssl-3-fix-state-handling-sha3_final_s390x.patch
  * Add openssl-3-fix-state-handling-shake_final_s390x.patch
  * Add openssl-3-fix-state-handling-keccak_final_s390x.patch
  * Add openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  * Add openssl-3-add-defines-CPACF-funcs.patch
  * Add openssl-3-add-hw-acceleration-hmac.patch
  * Add openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  * Add openssl-3-fix-s390x_sha3_absorb.patch
  * Add openssl-3-fix-s390x_shake_squeeze.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808000">- Support MSA 10 XTS on s390x [jsc#PED-10273]
  * s390x: Add hardware acceleration for full AES-XTS
  * Add openssl-3-hw-acceleration-aes-xts-s390x.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808001">- Support MSA 11 HMAC on s390x [jsc#PED-10274]
  * Add openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  * Add openssl-3-fix-hmac-digest-detection-s390x.patch
  * Add openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730980800">- Add missing fixes for SHA3_squeeze and quic_multistream_test on
  pcc64 arch. [jsc#PED-10280]
  * Added openssl-3-fix-sha3-squeeze-ppc64.patch
  * Added openssl-3-fix-quic_multistream_test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1731412800">- Do not use HASHBANGPERL to avoid introducing a dependency on the
  perl-base package. [bsc#1233235]</changelog>
  <changelog author="pmonreal@suse.com" date="1734436800">- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
  - openssl-3-use-include-directive.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1738238400">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Security fix: [bsc#1236599, CVE-2024-12797]
  * RFC7250 handshakes with unauthenticated servers don't abort as
    expected.
  * Add openssl-CVE-2024-12797.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1746014400">- Security fix: [bsc#1240366, CVE-2025-27587]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
  <changelog author="mls@suse.de" date="1751371200">- Backport mdless cms signing support [jsc#PED-12895]
  * Add openssl-3-support-mdless-cms.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- FIPS: Fix EMS in crypto-policies FIPS:NO-ENFORCE-EMS
  * [bsc#1230959, bsc#1232326, bsc#1231748, bsc#1246428]
  * Add patch openssl-FIPS-fix-EMS-support.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1753876800">- Increase limit for CRL download [bsc#1247148, bsc#1247144]
  * Add openssl-3-large-CRLs.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1759233600">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl3-CVE-2025-9230.patch</changelog>
</package>
<package pkgid="2b2b21a5bb5e3dda9019f8623295e6c53de01a85597e4dcb09b56b44f5e99405" name="libopenssl-3-devel" arch="x86_64">
  <version epoch="0" ver="3.2.3" rel="150700.5.24.1"/>
  <changelog author="pmonreal@suse.com" date="1729512000">- Update to 3.1.7:
  * Major changes between OpenSSL 3.1.6 and OpenSSL 3.1.7 [3 Sep 2024]
  - Fixed possible denial of service in X.509 name checks (CVE-2024-6119)
  - Fixed possible buffer overread in SSL_select_next_proto()
    (CVE-2024-5535)
  * Major changes between OpenSSL 3.1.5 and OpenSSL 3.1.6 [4 Jun 2024]
  - Fixed potential use after free after SSL_free_buffers() is
    called (CVE-2024-4741)
  - Fixed an issue where checking excessively long DSA keys or
    parameters may be very slow (CVE-2024-4603)
  - Fixed unbounded memory growth with session handling in TLSv1.3
    (CVE-2024-2511)
  * Major changes between OpenSSL 3.1.4 and OpenSSL 3.1.5 [30 Jan 2024]
  - Fixed PKCS12 Decoding crashes (CVE-2024-0727)
  - Fixed Excessive time spent checking invalid RSA public keys
    [CVE-2023-6237)
  - Fixed POLY1305 MAC implementation corrupting vector registers
    on PowerPC CPUs which support PowerISA 2.07 (CVE-2023-6129)
  - Fix excessive time spent in DH check / generation with large
    Q parameter value (CVE-2023-5678)
  * Update openssl.keyring with BA5473A2B0587B07FB27CF2D216094DFD0CB81EF
  * Rebase patches:
  - openssl-Force-FIPS.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-CVE-2023-50782.patch
  * Remove patches fixed in the update:
  - openssl-Improve-performance-for-6x-unrolling-with-vpermxor-i.patch
  - openssl-CVE-2024-6119.patch openssl-CVE-2024-5535.patch
  - openssl-CVE-2024-4741.patch openssl-CVE-2024-4603.patch
  - openssl-CVE-2024-2511.patch openssl-CVE-2024-0727.patch
  - openssl-CVE-2023-6237.patch openssl-CVE-2023-6129.patch
  - openssl-CVE-2023-5678.patch openssl-3-CVE-2024-41996.patch
  - openssl-Enable-BTI-feature-for-md5-on-aarch64.patch
  - openssl-Fix-EVP_PKEY_CTX_add1_hkdf_info-behavior.patch
  - openssl-Handle-empty-param-in-EVP_PKEY_CTX_add1_hkdf_info.patch
  - reproducible.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729857600">- Update to 3.2.0:
  * Changes between 3.1.x and 3.2.0:
  - Fix excessive time spent in DH check/ generation with large Q parameter
    value. [CVE-2023-5678]
  - The BLAKE2b hash algorithm supports a configurable output length
    by setting the "size" parameter.
  - Added a function to delete objects from store by URI - OSSL_STORE_delete()
    and the corresponding provider-storemgmt API function OSSL_FUNC_store_delete().
  - Added OSSL_FUNC_store_open_ex() provider-storemgmt API function to pass
    a passphrase callback when opening a store.
  - Changed the default salt length used by PBES2 KDF's (PBKDF2 and scrypt)
    from 8 bytes to 16 bytes.
  - Changed the default value of the 'ess_cert_id_alg' configuration
    option which is used to calculate the TSA's public key certificate
    identifier. The default algorithm is updated to be sha256 instead of sha1.
  - Added optimization for SM2 algorithm on aarch64. A new configure option
    'no-sm2-precomp' has been added to disable the precomputed table.
  - Added client side support for QUIC
  - Added secp384r1 implementation using Solinas' reduction to improve
    speed of the NIST P-384 elliptic curve. To enable the implementation
    the build option 'enable-ec_nistp_64_gcc_128' must be used.
  - Improved RFC7468 compliance of the asn1parse command.
  - Added SHA256/192 algorithm support.
  - Added support for securely getting root CA certificate update in CMP.
  - Improved contention on global write locks by using more read locks where
    appropriate.
  - Improved performance of OSSL_PARAM lookups in performance critical
    provider functions.
  - Added the SSL_get0_group_name() function to provide access to the
    name of the group used for the TLS key exchange.
  - Provide a new configure option 'no-http' that can be used to disable the
    HTTP support. Provide new configure options 'no-apps' and 'no-docs' to
    disable building the openssl command line application and the documentation.
  - Provide a new configure option 'no-ecx' that can be used to disable the
    X25519, X448, and EdDSA support.
  - When multiple OSSL_KDF_PARAM_INFO parameters are passed to
    the EVP_KDF_CTX_set_params() function they are now concatenated not just
    for the HKDF algorithm but also for SSKDF and X9.63 KDF algorithms.
  - Added OSSL_FUNC_keymgmt_im/export_types_ex() provider functions that get
    the provider context as a parameter.
  - TLS round-trip time calculation was added by a Brigham Young University
    Capstone team partnering with Sandia National Laboratories. A new function
    in ssl_lib titled SSL_get_handshake_rtt will calculate and retrieve this
    value.
  - Added the "-quic" option to s_client to enable connectivity to QUIC servers.
    QUIC requires the use of ALPN, so this must be specified via the "-alpn"
    option. Use of the "advanced" s_client command command via the "-adv" option
    is recommended.
  - Added an "advanced" command mode to s_client. Use this with the "-adv" option.
  - Add Raw Public Key (RFC7250) support.
  - Added support for modular exponentiation and CRT offloading for the
    S390x architecture.
  - Added further assembler code for the RISC-V architecture.
  - Added EC_GROUP_to_params() which creates an OSSL_PARAM array
    from a given EC_GROUP.
  - Improved support for non-default library contexts and property queries
    when parsing PKCS#12 files.
  - Implemented support for all five instances of EdDSA from RFC8032:
    Ed25519, Ed25519ctx, Ed25519ph, Ed448, and Ed448ph.
    The streaming is not yet supported for the HashEdDSA variants
    (Ed25519ph and Ed448ph).
  - Added SM4 optimization for ARM processors using ASIMD and AES HW instructions.
  - Implemented SM4-XTS support.
  - Added platform-agnostic OSSL_sleep() function.
  - Implemented deterministic ECDSA signatures (RFC6979) support.
  - Implemented AES-GCM-SIV (RFC8452) support.
  - Added support for pluggable (provider-based) TLS signature algorithms.
    This enables TLS 1.3 authentication operations with algorithms embedded
    in providers not included by default in OpenSSL. In combination with
    the already available pluggable KEM and X.509 support, this enables
    for example suitable providers to deliver post-quantum or quantum-safe
    cryptography to OpenSSL users.
  - Added support for pluggable (provider-based) CMS signature algorithms.
    This enables CMS sign and verify operations with algorithms embedded
    in providers not included by default in OpenSSL.
  - Implemented HPKE DHKEM support in providers used by HPKE (RFC9180) API.
  - Add support for certificate compression (RFC8879), including
    library support for Brotli and Zstandard compression.
  - Add the ability to add custom attributes to PKCS12 files. Add a new API
    PKCS12_create_ex2, identical to the existing PKCS12_create_ex but allows
    for a user specified callback and optional argument.
    Added a new PKCS12_SAFEBAG_set0_attr, which allows for a new attr to be
    added to the existing STACK_OF attrs.
  - Major refactor of the libssl record layer.
  - Add a mac salt length option for the pkcs12 command.
  - Add more SRTP protection profiles from RFC8723 and RFC8269.
  - Extended Kernel TLS (KTLS) to support TLS 1.3 receive offload.
  - Add support for TCP Fast Open (RFC7413) to macOS, Linux, and FreeBSD where
    supported and enabled.
  - Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489)
    to the list of ciphersuites providing Perfect Forward Secrecy as
    required by SECLEVEL &gt;= 3.
  - Add new SSL APIs to aid in efficiently implementing TLS/SSL fingerprinting.
    The SSL_CTRL_GET_IANA_GROUPS control code, exposed as the
    SSL_get0_iana_groups() function-like macro, retrieves the list of
    supported groups sent by the peer.
  - Fixed PEM_write_bio_PKCS8PrivateKey() and PEM_write_bio_PKCS8PrivateKey_nid()
    to make it possible to use empty passphrase strings.
  - The PKCS12_parse() function now supports MAC-less PKCS12 files.
  - Added ASYNC_set_mem_functions() and ASYNC_get_mem_functions() calls to be able
    to change functions used for allocating the memory of asynchronous call stack.
  - Added support for signed BIGNUMs in the OSSL_PARAM APIs.
  - A failure exit code is returned when using the openssl x509 command to check
    certificate attributes and the checks fail.
  - The default SSL/TLS security level has been changed from 1 to 2. RSA,
    DSA and DH keys of 1024 bits and above and less than 2048 bits and ECC keys
    of 160 bits and above and less than 224 bits were previously accepted by
    default but are now no longer allowed. By default TLS compression was
    already disabled in previous OpenSSL versions. At security level 2 it cannot
    be enabled.
  - The SSL_CTX_set_cipher_list family functions now accept ciphers using their
    IANA standard names.
  - The PVK key derivation function has been moved from b2i_PVK_bio_ex() into
    the legacy crypto provider as an EVP_KDF. Applications requiring this KDF
    will need to load the legacy crypto provider.
  - CCM8 cipher suites in TLS have been downgraded to security level zero
    because they use a short authentication tag which lowers their strength.
  - Subject or issuer names in X.509 objects are now displayed as UTF-8 strings
    by default. Also spaces surrounding '=' in DN output are removed.
  - Add X.509 certificate codeSigning purpose and related checks on key usage and
    extended key usage of the leaf certificate according to the CA/Browser Forum.
  - The 'x509', 'ca', and 'req' apps now produce X.509 v3 certificates.
    The '-x509v1' option of 'req' prefers generation of X.509 v1 certificates.
    'X509_sign()' and 'X509_sign_ctx()' make sure that the certificate has
    X.509 version 3 if the certificate information includes X.509 extensions.
  - Fix and extend certificate handling and the apps 'x509', 'verify' etc.
    such as adding a trace facility for debugging certificate chain building.
  - Various fixes and extensions to the CMP+CRMF implementation and the 'cmp' app
    in particular supporting requests for central key generation, generalized
    polling, and various types of genm/genp exchanges defined in CMP Updates.
  - Fixes and extensions to the HTTP client and to the HTTP server in 'apps/'
    like correcting the TLS and proxy support and adding tracing for debugging.
  - Extended the CMS API for handling 'CMS_SignedData' and 'CMS_EnvelopedData'.
  - 'CMS_add0_cert()' and 'CMS_add1_cert()' no longer throw an error if
    a certificate to be added is already present. 'CMS_sign_ex()' and
    'CMS_sign()' now ignore any duplicate certificates in their 'certs' argument
    and no longer throw an error for them.
  - Added BIO_s_dgram_pair() and BIO_s_dgram_mem() that provide memory-based
    BIOs with datagram semantics and support for BIO_sendmmsg() and BIO_recvmmsg()
    calls. They can be used as the transport BIOs for QUIC.
  - Add new BIO_sendmmsg() and BIO_recvmmsg() BIO methods which allow
    sending and receiving multiple messages in a single call. An implementation
    is provided for BIO_dgram. For further details, see BIO_sendmmsg(3).
  - Support for loading root certificates from the Windows certificate store
    has been added.
  - Enable KTLS with the TLS 1.3 CCM mode ciphersuites. Note that some linux
    kernel versions that support KTLS have a known bug in CCM processing. That
    has been fixed in stable releases starting from 5.4.164, 5.10.84, 5.15.7,
    and all releases since 5.16. KTLS with CCM ciphersuites should be only used
    on these releases.
  - Added '-ktls' option to 's_server' and 's_client' commands to enable the
    KTLS support.
  - Zerocopy KTLS sendfile() support on Linux.
  - The OBJ_ calls are now thread safe using a global lock.
  - New parameter '-digest' for openssl cms command allowing signing
    pre-computed digests and new CMS API functions supporting that
    functionality.
  - OPENSSL_malloc() and other allocation functions now raise errors on
    allocation failures. The callers do not need to explicitly raise errors
    unless they want to for tracing purposes.
  - Added support for Brainpool curves in TLS-1.3.
  - Support for Argon2d, Argon2i, Argon2id KDFs has been added along with
    a basic thread pool implementation for select platforms.</changelog>
  <changelog author="pmonreal@suse.com" date="1729857601">- Update to 3.2.1:
  * Changes between 3.2.0 and 3.2.1:
  - A file in PKCS12 format can contain certificates and keys and may come from
    an untrusted source. The PKCS12 specification allows certain fields to be
    NULL, but OpenSSL did not correctly check for this case. [CVE-2024-0727]
  - When function EVP_PKEY_public_check() is called on RSA public keys,
    a computation is done to confirm that the RSA modulus, n, is composite.
    For valid RSA keys, n is a product of two or more large primes and this
    computation completes quickly. However, if n is an overly large prime,
    then this computation would take a long time. [CVE-2023-6237]
  - Restore the encoding of SM2 PrivateKeyInfo and SubjectPublicKeyInfo to
    have the contained AlgorithmIdentifier.algorithm set to id-ecPublicKey
    rather than SM2.
  - The POLY1305 MAC (message authentication code) implementation in OpenSSL
    for PowerPC CPUs saves the contents of vector registers in different
    order than they are restored. [CVE-2023-6129]
  - Disable building QUIC server utility when OpenSSL is configured with 'no-apps'.
  * The openssl-crypto-policies-support.patch has been merged into
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Rename openssl-Disable-default-provider-for-test-suite.patch and rebase to
    openssl-TESTS-Disable-default-provider-crypto-policies.patch
  * Patches removed in the update:
  - openssl-Add_support_for_Windows_CA_certificate_store.patch
  - openssl-ec-56-bit-Limb-Solinas-Strategy-for-secp384r1.patch
  - openssl-ec-Use-static-linkage-on-nistp521-felem_-square-mul-.patch
  - openssl-ec-powerpc64le-Add-asm-implementation-of-felem_-squa.patch
  - openssl-ecc-Remove-extraneous-parentheses-in-secp384r1.patch
  - openssl-powerpc-ecc-Fix-stack-allocation-secp384r1-asm.patch
  - openssl-CVE-2024-41996.patch
  - openssl-CVE-2023-50782.patch
  - openssl-CVE-2024-9143.patch
  * Patches rebased:
  - openssl-3-use-include-directive.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-DEFAULT_SUSE_cipher.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Force-FIPS.patch
  - openssl-load-legacy-provider.patch
  - openssl-no-html-docs.patch
  - openssl-pkgconfig.patch
  - openssl-ppc64-config.patch
  - openssl-truststore.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116800">- Remove the hardcoded DEFAULT_SUSE cipherlist selection.
  * Remove openssl-DEFAULT_SUSE_cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116801">- Update to 3.2.3:
  * Changes between 3.2.2 and 3.2.3:
  - Fixed possible denial of service in X.509 name checks. [CVE-2024-6119]
  - Fixed possible buffer overread in SSL_select_next_proto(). [CVE-2024-5535]
  * Changes between 3.2.1 and 3.2.2:
  - Fixed potential use after free after SSL_free_buffers() is called. [CVE-2024-4741]
  - Fixed an issue where checking excessively long DSA keys or parameters may
    be very slow. [CVE-2024-4603]
  - Improved EC/DSA nonce generation routines to avoid bias and timing
    side channel leaks.
  - Fixed an issue where some non-default TLS server configurations can cause
    unbounded memory growth when processing TLSv1.3 sessions. [CVE-2024-2511]
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded. This can be used on platforms
    where using atexit() from shared libraries causes crashes on exit.
  - Fixed bug where SSL_export_keying_material() could not be used with QUIC
    connections.
  * Add openssl-skip-quic-pairwise.patch to adapt the pairwise tests.
  * Merge openssl-FIPS-release_num_in_version_string.patch into
    openssl-FIPS-services-minimize.patch
  * Rebase patches:
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Remove-EC-curves.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-3-use-include-directive.patch
  * Remove not needed patches:
  - openssl-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  - openssl-3-FIPS-PCT_rsa_keygen.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730462400">- Support MSA 12 SHA3 on s390x [jsc#PED-10280]
  * Add openssl-3-add_EVP_DigestSqueeze_api.patch
  * Add openssl-3-support-multiple-sha3_squeeze_s390x.patch
  * Add openssl-3-add-xof-state-handling-s3_absorb.patch
  * Add openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  * Add openssl-3-fix-state-handling-sha3_final_s390x.patch
  * Add openssl-3-fix-state-handling-shake_final_s390x.patch
  * Add openssl-3-fix-state-handling-keccak_final_s390x.patch
  * Add openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  * Add openssl-3-add-defines-CPACF-funcs.patch
  * Add openssl-3-add-hw-acceleration-hmac.patch
  * Add openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  * Add openssl-3-fix-s390x_sha3_absorb.patch
  * Add openssl-3-fix-s390x_shake_squeeze.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808000">- Support MSA 10 XTS on s390x [jsc#PED-10273]
  * s390x: Add hardware acceleration for full AES-XTS
  * Add openssl-3-hw-acceleration-aes-xts-s390x.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808001">- Support MSA 11 HMAC on s390x [jsc#PED-10274]
  * Add openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  * Add openssl-3-fix-hmac-digest-detection-s390x.patch
  * Add openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730980800">- Add missing fixes for SHA3_squeeze and quic_multistream_test on
  pcc64 arch. [jsc#PED-10280]
  * Added openssl-3-fix-sha3-squeeze-ppc64.patch
  * Added openssl-3-fix-quic_multistream_test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1731412800">- Do not use HASHBANGPERL to avoid introducing a dependency on the
  perl-base package. [bsc#1233235]</changelog>
  <changelog author="pmonreal@suse.com" date="1734436800">- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
  - openssl-3-use-include-directive.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1738238400">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Security fix: [bsc#1236599, CVE-2024-12797]
  * RFC7250 handshakes with unauthenticated servers don't abort as
    expected.
  * Add openssl-CVE-2024-12797.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1746014400">- Security fix: [bsc#1240366, CVE-2025-27587]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
  <changelog author="mls@suse.de" date="1751371200">- Backport mdless cms signing support [jsc#PED-12895]
  * Add openssl-3-support-mdless-cms.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- FIPS: Fix EMS in crypto-policies FIPS:NO-ENFORCE-EMS
  * [bsc#1230959, bsc#1232326, bsc#1231748, bsc#1246428]
  * Add patch openssl-FIPS-fix-EMS-support.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1753876800">- Increase limit for CRL download [bsc#1247148, bsc#1247144]
  * Add openssl-3-large-CRLs.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1759233600">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl3-CVE-2025-9230.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1768824000">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795]
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * Stack buffer overflow in CMS AuthEnvelopedData parsing
  - openssl-CVE-2025-15467.patch [bsc#1256830, CVE-2025-15467]
  - openssl-CVE-2025-15467-comments.patch
  - openssl-CVE-2025-15467-test.patch</changelog>
</package>
<package pkgid="036692bb619207715704083bf093fddd7a50d5940d59156a34395004e8eabe77" name="libopenssl-3-devel" arch="x86_64">
  <version epoch="0" ver="3.2.3" rel="150700.5.31.1"/>
  <changelog author="pmonreal@suse.com" date="1730116800">- Remove the hardcoded DEFAULT_SUSE cipherlist selection.
  * Remove openssl-DEFAULT_SUSE_cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116801">- Update to 3.2.3:
  * Changes between 3.2.2 and 3.2.3:
  - Fixed possible denial of service in X.509 name checks. [CVE-2024-6119]
  - Fixed possible buffer overread in SSL_select_next_proto(). [CVE-2024-5535]
  * Changes between 3.2.1 and 3.2.2:
  - Fixed potential use after free after SSL_free_buffers() is called. [CVE-2024-4741]
  - Fixed an issue where checking excessively long DSA keys or parameters may
    be very slow. [CVE-2024-4603]
  - Improved EC/DSA nonce generation routines to avoid bias and timing
    side channel leaks.
  - Fixed an issue where some non-default TLS server configurations can cause
    unbounded memory growth when processing TLSv1.3 sessions. [CVE-2024-2511]
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded. This can be used on platforms
    where using atexit() from shared libraries causes crashes on exit.
  - Fixed bug where SSL_export_keying_material() could not be used with QUIC
    connections.
  * Add openssl-skip-quic-pairwise.patch to adapt the pairwise tests.
  * Merge openssl-FIPS-release_num_in_version_string.patch into
    openssl-FIPS-services-minimize.patch
  * Rebase patches:
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Remove-EC-curves.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-3-use-include-directive.patch
  * Remove not needed patches:
  - openssl-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  - openssl-3-FIPS-PCT_rsa_keygen.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730462400">- Support MSA 12 SHA3 on s390x [jsc#PED-10280]
  * Add openssl-3-add_EVP_DigestSqueeze_api.patch
  * Add openssl-3-support-multiple-sha3_squeeze_s390x.patch
  * Add openssl-3-add-xof-state-handling-s3_absorb.patch
  * Add openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  * Add openssl-3-fix-state-handling-sha3_final_s390x.patch
  * Add openssl-3-fix-state-handling-shake_final_s390x.patch
  * Add openssl-3-fix-state-handling-keccak_final_s390x.patch
  * Add openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  * Add openssl-3-add-defines-CPACF-funcs.patch
  * Add openssl-3-add-hw-acceleration-hmac.patch
  * Add openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  * Add openssl-3-fix-s390x_sha3_absorb.patch
  * Add openssl-3-fix-s390x_shake_squeeze.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808000">- Support MSA 10 XTS on s390x [jsc#PED-10273]
  * s390x: Add hardware acceleration for full AES-XTS
  * Add openssl-3-hw-acceleration-aes-xts-s390x.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808001">- Support MSA 11 HMAC on s390x [jsc#PED-10274]
  * Add openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  * Add openssl-3-fix-hmac-digest-detection-s390x.patch
  * Add openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730980800">- Add missing fixes for SHA3_squeeze and quic_multistream_test on
  pcc64 arch. [jsc#PED-10280]
  * Added openssl-3-fix-sha3-squeeze-ppc64.patch
  * Added openssl-3-fix-quic_multistream_test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1731412800">- Do not use HASHBANGPERL to avoid introducing a dependency on the
  perl-base package. [bsc#1233235]</changelog>
  <changelog author="pmonreal@suse.com" date="1734436800">- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
  - openssl-3-use-include-directive.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1738238400">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Security fix: [bsc#1236599, CVE-2024-12797]
  * RFC7250 handshakes with unauthenticated servers don't abort as
    expected.
  * Add openssl-CVE-2024-12797.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1746014400">- Security fix: [bsc#1240366, CVE-2025-27587]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
  <changelog author="mls@suse.de" date="1751371200">- Backport mdless cms signing support [jsc#PED-12895]
  * Add openssl-3-support-mdless-cms.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- FIPS: Fix EMS in crypto-policies FIPS:NO-ENFORCE-EMS
  * [bsc#1230959, bsc#1232326, bsc#1231748, bsc#1246428]
  * Add patch openssl-FIPS-fix-EMS-support.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1753876800">- Increase limit for CRL download [bsc#1247148, bsc#1247144]
  * Add openssl-3-large-CRLs.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1759233600">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl3-CVE-2025-9230.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1768824000">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795]
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * Stack buffer overflow in CMS AuthEnvelopedData parsing
  - openssl-CVE-2025-15467.patch [bsc#1256830, CVE-2025-15467]
  - openssl-CVE-2025-15467-comments.patch
  - openssl-CVE-2025-15467-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1774526400">- Security fixes:
  * CVE-2026-28387: Potential use-after-free in DANE client code
    (bsc#1260441)
  * CVE-2026-28388: NULL Pointer Dereference When Processing a
    Delta (bsc#1260442)
  * CVE-2026-28389: Possible NULL dereference when processing CMS
    KeyAgreeRecipientInfo (bsc#1260443)
  * CVE-2026-31789: Heap buffer overflow in hexadecimal conversion
    (bsc#1260444)
  * CVE-2026-31790: Incorrect failure handling in RSA KEM RSASVE
    encapsulation (bsc#1260445)
  * NULL pointer dereference when processing an OCSP response
    (bsc#1260446)
  * Add patches: openssl-CVE-2026-28387.patch
    openssl-CVE-2026-28388.patch openssl-CVE-2026-28388-tests.patch
    openssl-CVE-2026-28389.patch openssl-CVE-2026-31789.patch
    openssl-CVE-2026-31790.patch openssl-CVE-2026-31790-tests.patch
    openssl-NULL-pointer-dereference-in-ocsp_find_signer_sk.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1775649600">- Security fix:
  * CVE-2026-28390: NULL pointer dereference during processing of a crafted
    CMS EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678)
  * Add openssl-CVE-2026-28390.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1775822400">- Enable MD2 in legacy provider (jsc#PED-15724)</changelog>
</package>
<package pkgid="41462446e4ca9f2eef39639725126134e4690c73df43fe3431645c309eb680f9" name="libopenssl-3-devel" arch="x86_64">
  <version epoch="0" ver="3.2.3" rel="150700.5.5.1"/>
  <changelog author="pmonreal@suse.com" date="1721649600">- Build with no-afalgeng [bsc#1226463]</changelog>
  <changelog author="abergmann@suse.com" date="1724328000">- Security fix: [bsc#1229465, CVE-2024-6119]
  * possible denial of service in X.509 name checks
  * openssl-CVE-2024-6119.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1727265600">- Security fix: [bsc#1230698, CVE-2024-41996]
  * Validating the order of the public keys in the Diffie-Hellman
    Key Agreement Protocol, when an approved safe prime is used.
  * Added openssl-3-CVE-2024-41996.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1220262, CVE-2023-50782]
  * Implicit rejection in PKCS#1 v1.5
  * Add openssl-CVE-2023-50782.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166401">- Security fix: [bsc#1231741, CVE-2024-9143]
  * Low-level invalid GF(2^m) parameters lead to OOB memory access
  * Add openssl-CVE-2024-9143.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729512000">- Update to 3.1.7:
  * Major changes between OpenSSL 3.1.6 and OpenSSL 3.1.7 [3 Sep 2024]
  - Fixed possible denial of service in X.509 name checks (CVE-2024-6119)
  - Fixed possible buffer overread in SSL_select_next_proto()
    (CVE-2024-5535)
  * Major changes between OpenSSL 3.1.5 and OpenSSL 3.1.6 [4 Jun 2024]
  - Fixed potential use after free after SSL_free_buffers() is
    called (CVE-2024-4741)
  - Fixed an issue where checking excessively long DSA keys or
    parameters may be very slow (CVE-2024-4603)
  - Fixed unbounded memory growth with session handling in TLSv1.3
    (CVE-2024-2511)
  * Major changes between OpenSSL 3.1.4 and OpenSSL 3.1.5 [30 Jan 2024]
  - Fixed PKCS12 Decoding crashes (CVE-2024-0727)
  - Fixed Excessive time spent checking invalid RSA public keys
    [CVE-2023-6237)
  - Fixed POLY1305 MAC implementation corrupting vector registers
    on PowerPC CPUs which support PowerISA 2.07 (CVE-2023-6129)
  - Fix excessive time spent in DH check / generation with large
    Q parameter value (CVE-2023-5678)
  * Update openssl.keyring with BA5473A2B0587B07FB27CF2D216094DFD0CB81EF
  * Rebase patches:
  - openssl-Force-FIPS.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-CVE-2023-50782.patch
  * Remove patches fixed in the update:
  - openssl-Improve-performance-for-6x-unrolling-with-vpermxor-i.patch
  - openssl-CVE-2024-6119.patch openssl-CVE-2024-5535.patch
  - openssl-CVE-2024-4741.patch openssl-CVE-2024-4603.patch
  - openssl-CVE-2024-2511.patch openssl-CVE-2024-0727.patch
  - openssl-CVE-2023-6237.patch openssl-CVE-2023-6129.patch
  - openssl-CVE-2023-5678.patch openssl-3-CVE-2024-41996.patch
  - openssl-Enable-BTI-feature-for-md5-on-aarch64.patch
  - openssl-Fix-EVP_PKEY_CTX_add1_hkdf_info-behavior.patch
  - openssl-Handle-empty-param-in-EVP_PKEY_CTX_add1_hkdf_info.patch
  - reproducible.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729857600">- Update to 3.2.0:
  * Changes between 3.1.x and 3.2.0:
  - Fix excessive time spent in DH check/ generation with large Q parameter
    value. [CVE-2023-5678]
  - The BLAKE2b hash algorithm supports a configurable output length
    by setting the "size" parameter.
  - Added a function to delete objects from store by URI - OSSL_STORE_delete()
    and the corresponding provider-storemgmt API function OSSL_FUNC_store_delete().
  - Added OSSL_FUNC_store_open_ex() provider-storemgmt API function to pass
    a passphrase callback when opening a store.
  - Changed the default salt length used by PBES2 KDF's (PBKDF2 and scrypt)
    from 8 bytes to 16 bytes.
  - Changed the default value of the 'ess_cert_id_alg' configuration
    option which is used to calculate the TSA's public key certificate
    identifier. The default algorithm is updated to be sha256 instead of sha1.
  - Added optimization for SM2 algorithm on aarch64. A new configure option
    'no-sm2-precomp' has been added to disable the precomputed table.
  - Added client side support for QUIC
  - Added secp384r1 implementation using Solinas' reduction to improve
    speed of the NIST P-384 elliptic curve. To enable the implementation
    the build option 'enable-ec_nistp_64_gcc_128' must be used.
  - Improved RFC7468 compliance of the asn1parse command.
  - Added SHA256/192 algorithm support.
  - Added support for securely getting root CA certificate update in CMP.
  - Improved contention on global write locks by using more read locks where
    appropriate.
  - Improved performance of OSSL_PARAM lookups in performance critical
    provider functions.
  - Added the SSL_get0_group_name() function to provide access to the
    name of the group used for the TLS key exchange.
  - Provide a new configure option 'no-http' that can be used to disable the
    HTTP support. Provide new configure options 'no-apps' and 'no-docs' to
    disable building the openssl command line application and the documentation.
  - Provide a new configure option 'no-ecx' that can be used to disable the
    X25519, X448, and EdDSA support.
  - When multiple OSSL_KDF_PARAM_INFO parameters are passed to
    the EVP_KDF_CTX_set_params() function they are now concatenated not just
    for the HKDF algorithm but also for SSKDF and X9.63 KDF algorithms.
  - Added OSSL_FUNC_keymgmt_im/export_types_ex() provider functions that get
    the provider context as a parameter.
  - TLS round-trip time calculation was added by a Brigham Young University
    Capstone team partnering with Sandia National Laboratories. A new function
    in ssl_lib titled SSL_get_handshake_rtt will calculate and retrieve this
    value.
  - Added the "-quic" option to s_client to enable connectivity to QUIC servers.
    QUIC requires the use of ALPN, so this must be specified via the "-alpn"
    option. Use of the "advanced" s_client command command via the "-adv" option
    is recommended.
  - Added an "advanced" command mode to s_client. Use this with the "-adv" option.
  - Add Raw Public Key (RFC7250) support.
  - Added support for modular exponentiation and CRT offloading for the
    S390x architecture.
  - Added further assembler code for the RISC-V architecture.
  - Added EC_GROUP_to_params() which creates an OSSL_PARAM array
    from a given EC_GROUP.
  - Improved support for non-default library contexts and property queries
    when parsing PKCS#12 files.
  - Implemented support for all five instances of EdDSA from RFC8032:
    Ed25519, Ed25519ctx, Ed25519ph, Ed448, and Ed448ph.
    The streaming is not yet supported for the HashEdDSA variants
    (Ed25519ph and Ed448ph).
  - Added SM4 optimization for ARM processors using ASIMD and AES HW instructions.
  - Implemented SM4-XTS support.
  - Added platform-agnostic OSSL_sleep() function.
  - Implemented deterministic ECDSA signatures (RFC6979) support.
  - Implemented AES-GCM-SIV (RFC8452) support.
  - Added support for pluggable (provider-based) TLS signature algorithms.
    This enables TLS 1.3 authentication operations with algorithms embedded
    in providers not included by default in OpenSSL. In combination with
    the already available pluggable KEM and X.509 support, this enables
    for example suitable providers to deliver post-quantum or quantum-safe
    cryptography to OpenSSL users.
  - Added support for pluggable (provider-based) CMS signature algorithms.
    This enables CMS sign and verify operations with algorithms embedded
    in providers not included by default in OpenSSL.
  - Implemented HPKE DHKEM support in providers used by HPKE (RFC9180) API.
  - Add support for certificate compression (RFC8879), including
    library support for Brotli and Zstandard compression.
  - Add the ability to add custom attributes to PKCS12 files. Add a new API
    PKCS12_create_ex2, identical to the existing PKCS12_create_ex but allows
    for a user specified callback and optional argument.
    Added a new PKCS12_SAFEBAG_set0_attr, which allows for a new attr to be
    added to the existing STACK_OF attrs.
  - Major refactor of the libssl record layer.
  - Add a mac salt length option for the pkcs12 command.
  - Add more SRTP protection profiles from RFC8723 and RFC8269.
  - Extended Kernel TLS (KTLS) to support TLS 1.3 receive offload.
  - Add support for TCP Fast Open (RFC7413) to macOS, Linux, and FreeBSD where
    supported and enabled.
  - Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489)
    to the list of ciphersuites providing Perfect Forward Secrecy as
    required by SECLEVEL &gt;= 3.
  - Add new SSL APIs to aid in efficiently implementing TLS/SSL fingerprinting.
    The SSL_CTRL_GET_IANA_GROUPS control code, exposed as the
    SSL_get0_iana_groups() function-like macro, retrieves the list of
    supported groups sent by the peer.
  - Fixed PEM_write_bio_PKCS8PrivateKey() and PEM_write_bio_PKCS8PrivateKey_nid()
    to make it possible to use empty passphrase strings.
  - The PKCS12_parse() function now supports MAC-less PKCS12 files.
  - Added ASYNC_set_mem_functions() and ASYNC_get_mem_functions() calls to be able
    to change functions used for allocating the memory of asynchronous call stack.
  - Added support for signed BIGNUMs in the OSSL_PARAM APIs.
  - A failure exit code is returned when using the openssl x509 command to check
    certificate attributes and the checks fail.
  - The default SSL/TLS security level has been changed from 1 to 2. RSA,
    DSA and DH keys of 1024 bits and above and less than 2048 bits and ECC keys
    of 160 bits and above and less than 224 bits were previously accepted by
    default but are now no longer allowed. By default TLS compression was
    already disabled in previous OpenSSL versions. At security level 2 it cannot
    be enabled.
  - The SSL_CTX_set_cipher_list family functions now accept ciphers using their
    IANA standard names.
  - The PVK key derivation function has been moved from b2i_PVK_bio_ex() into
    the legacy crypto provider as an EVP_KDF. Applications requiring this KDF
    will need to load the legacy crypto provider.
  - CCM8 cipher suites in TLS have been downgraded to security level zero
    because they use a short authentication tag which lowers their strength.
  - Subject or issuer names in X.509 objects are now displayed as UTF-8 strings
    by default. Also spaces surrounding '=' in DN output are removed.
  - Add X.509 certificate codeSigning purpose and related checks on key usage and
    extended key usage of the leaf certificate according to the CA/Browser Forum.
  - The 'x509', 'ca', and 'req' apps now produce X.509 v3 certificates.
    The '-x509v1' option of 'req' prefers generation of X.509 v1 certificates.
    'X509_sign()' and 'X509_sign_ctx()' make sure that the certificate has
    X.509 version 3 if the certificate information includes X.509 extensions.
  - Fix and extend certificate handling and the apps 'x509', 'verify' etc.
    such as adding a trace facility for debugging certificate chain building.
  - Various fixes and extensions to the CMP+CRMF implementation and the 'cmp' app
    in particular supporting requests for central key generation, generalized
    polling, and various types of genm/genp exchanges defined in CMP Updates.
  - Fixes and extensions to the HTTP client and to the HTTP server in 'apps/'
    like correcting the TLS and proxy support and adding tracing for debugging.
  - Extended the CMS API for handling 'CMS_SignedData' and 'CMS_EnvelopedData'.
  - 'CMS_add0_cert()' and 'CMS_add1_cert()' no longer throw an error if
    a certificate to be added is already present. 'CMS_sign_ex()' and
    'CMS_sign()' now ignore any duplicate certificates in their 'certs' argument
    and no longer throw an error for them.
  - Added BIO_s_dgram_pair() and BIO_s_dgram_mem() that provide memory-based
    BIOs with datagram semantics and support for BIO_sendmmsg() and BIO_recvmmsg()
    calls. They can be used as the transport BIOs for QUIC.
  - Add new BIO_sendmmsg() and BIO_recvmmsg() BIO methods which allow
    sending and receiving multiple messages in a single call. An implementation
    is provided for BIO_dgram. For further details, see BIO_sendmmsg(3).
  - Support for loading root certificates from the Windows certificate store
    has been added.
  - Enable KTLS with the TLS 1.3 CCM mode ciphersuites. Note that some linux
    kernel versions that support KTLS have a known bug in CCM processing. That
    has been fixed in stable releases starting from 5.4.164, 5.10.84, 5.15.7,
    and all releases since 5.16. KTLS with CCM ciphersuites should be only used
    on these releases.
  - Added '-ktls' option to 's_server' and 's_client' commands to enable the
    KTLS support.
  - Zerocopy KTLS sendfile() support on Linux.
  - The OBJ_ calls are now thread safe using a global lock.
  - New parameter '-digest' for openssl cms command allowing signing
    pre-computed digests and new CMS API functions supporting that
    functionality.
  - OPENSSL_malloc() and other allocation functions now raise errors on
    allocation failures. The callers do not need to explicitly raise errors
    unless they want to for tracing purposes.
  - Added support for Brainpool curves in TLS-1.3.
  - Support for Argon2d, Argon2i, Argon2id KDFs has been added along with
    a basic thread pool implementation for select platforms.</changelog>
  <changelog author="pmonreal@suse.com" date="1729857601">- Update to 3.2.1:
  * Changes between 3.2.0 and 3.2.1:
  - A file in PKCS12 format can contain certificates and keys and may come from
    an untrusted source. The PKCS12 specification allows certain fields to be
    NULL, but OpenSSL did not correctly check for this case. [CVE-2024-0727]
  - When function EVP_PKEY_public_check() is called on RSA public keys,
    a computation is done to confirm that the RSA modulus, n, is composite.
    For valid RSA keys, n is a product of two or more large primes and this
    computation completes quickly. However, if n is an overly large prime,
    then this computation would take a long time. [CVE-2023-6237]
  - Restore the encoding of SM2 PrivateKeyInfo and SubjectPublicKeyInfo to
    have the contained AlgorithmIdentifier.algorithm set to id-ecPublicKey
    rather than SM2.
  - The POLY1305 MAC (message authentication code) implementation in OpenSSL
    for PowerPC CPUs saves the contents of vector registers in different
    order than they are restored. [CVE-2023-6129]
  - Disable building QUIC server utility when OpenSSL is configured with 'no-apps'.
  * The openssl-crypto-policies-support.patch has been merged into
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Rename openssl-Disable-default-provider-for-test-suite.patch and rebase to
    openssl-TESTS-Disable-default-provider-crypto-policies.patch
  * Patches removed in the update:
  - openssl-Add_support_for_Windows_CA_certificate_store.patch
  - openssl-ec-56-bit-Limb-Solinas-Strategy-for-secp384r1.patch
  - openssl-ec-Use-static-linkage-on-nistp521-felem_-square-mul-.patch
  - openssl-ec-powerpc64le-Add-asm-implementation-of-felem_-squa.patch
  - openssl-ecc-Remove-extraneous-parentheses-in-secp384r1.patch
  - openssl-powerpc-ecc-Fix-stack-allocation-secp384r1-asm.patch
  - openssl-CVE-2024-41996.patch
  - openssl-CVE-2023-50782.patch
  - openssl-CVE-2024-9143.patch
  * Patches rebased:
  - openssl-3-use-include-directive.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-DEFAULT_SUSE_cipher.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Force-FIPS.patch
  - openssl-load-legacy-provider.patch
  - openssl-no-html-docs.patch
  - openssl-pkgconfig.patch
  - openssl-ppc64-config.patch
  - openssl-truststore.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116800">- Remove the hardcoded DEFAULT_SUSE cipherlist selection.
  * Remove openssl-DEFAULT_SUSE_cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116801">- Update to 3.2.3:
  * Changes between 3.2.2 and 3.2.3:
  - Fixed possible denial of service in X.509 name checks. [CVE-2024-6119]
  - Fixed possible buffer overread in SSL_select_next_proto(). [CVE-2024-5535]
  * Changes between 3.2.1 and 3.2.2:
  - Fixed potential use after free after SSL_free_buffers() is called. [CVE-2024-4741]
  - Fixed an issue where checking excessively long DSA keys or parameters may
    be very slow. [CVE-2024-4603]
  - Improved EC/DSA nonce generation routines to avoid bias and timing
    side channel leaks.
  - Fixed an issue where some non-default TLS server configurations can cause
    unbounded memory growth when processing TLSv1.3 sessions. [CVE-2024-2511]
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded. This can be used on platforms
    where using atexit() from shared libraries causes crashes on exit.
  - Fixed bug where SSL_export_keying_material() could not be used with QUIC
    connections.
  * Add openssl-skip-quic-pairwise.patch to adapt the pairwise tests.
  * Merge openssl-FIPS-release_num_in_version_string.patch into
    openssl-FIPS-services-minimize.patch
  * Rebase patches:
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Remove-EC-curves.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-3-use-include-directive.patch
  * Remove not needed patches:
  - openssl-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  - openssl-3-FIPS-PCT_rsa_keygen.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730462400">- Support MSA 12 SHA3 on s390x [jsc#PED-10280]
  * Add openssl-3-add_EVP_DigestSqueeze_api.patch
  * Add openssl-3-support-multiple-sha3_squeeze_s390x.patch
  * Add openssl-3-add-xof-state-handling-s3_absorb.patch
  * Add openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  * Add openssl-3-fix-state-handling-sha3_final_s390x.patch
  * Add openssl-3-fix-state-handling-shake_final_s390x.patch
  * Add openssl-3-fix-state-handling-keccak_final_s390x.patch
  * Add openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  * Add openssl-3-add-defines-CPACF-funcs.patch
  * Add openssl-3-add-hw-acceleration-hmac.patch
  * Add openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  * Add openssl-3-fix-s390x_sha3_absorb.patch
  * Add openssl-3-fix-s390x_shake_squeeze.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808000">- Support MSA 10 XTS on s390x [jsc#PED-10273]
  * s390x: Add hardware acceleration for full AES-XTS
  * Add openssl-3-hw-acceleration-aes-xts-s390x.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808001">- Support MSA 11 HMAC on s390x [jsc#PED-10274]
  * Add openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  * Add openssl-3-fix-hmac-digest-detection-s390x.patch
  * Add openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730980800">- Add missing fixes for SHA3_squeeze and quic_multistream_test on
  pcc64 arch. [jsc#PED-10280]
  * Added openssl-3-fix-sha3-squeeze-ppc64.patch
  * Added openssl-3-fix-quic_multistream_test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1731412800">- Do not use HASHBANGPERL to avoid introducing a dependency on the
  perl-base package. [bsc#1233235]</changelog>
  <changelog author="pmonreal@suse.com" date="1734436800">- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
  - openssl-3-use-include-directive.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1738238400">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Security fix: [bsc#1236599, CVE-2024-12797]
  * RFC7250 handshakes with unauthenticated servers don't abort as
    expected.
  * Add openssl-CVE-2024-12797.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1746014400">- Security fix: [bsc#1240366]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
</package>
<package pkgid="0f3be3db80b897d61cc8b683ec8bda87778fd27206f6ae30b59de321aa63e385" name="libopenssl-3-fips-provider" arch="x86_64">
  <version epoch="0" ver="3.2.3" rel="150700.5.10.1"/>
  <changelog author="abergmann@suse.com" date="1724328000">- Security fix: [bsc#1229465, CVE-2024-6119]
  * possible denial of service in X.509 name checks
  * openssl-CVE-2024-6119.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1727265600">- Security fix: [bsc#1230698, CVE-2024-41996]
  * Validating the order of the public keys in the Diffie-Hellman
    Key Agreement Protocol, when an approved safe prime is used.
  * Added openssl-3-CVE-2024-41996.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1220262, CVE-2023-50782]
  * Implicit rejection in PKCS#1 v1.5
  * Add openssl-CVE-2023-50782.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166401">- Security fix: [bsc#1231741, CVE-2024-9143]
  * Low-level invalid GF(2^m) parameters lead to OOB memory access
  * Add openssl-CVE-2024-9143.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729512000">- Update to 3.1.7:
  * Major changes between OpenSSL 3.1.6 and OpenSSL 3.1.7 [3 Sep 2024]
  - Fixed possible denial of service in X.509 name checks (CVE-2024-6119)
  - Fixed possible buffer overread in SSL_select_next_proto()
    (CVE-2024-5535)
  * Major changes between OpenSSL 3.1.5 and OpenSSL 3.1.6 [4 Jun 2024]
  - Fixed potential use after free after SSL_free_buffers() is
    called (CVE-2024-4741)
  - Fixed an issue where checking excessively long DSA keys or
    parameters may be very slow (CVE-2024-4603)
  - Fixed unbounded memory growth with session handling in TLSv1.3
    (CVE-2024-2511)
  * Major changes between OpenSSL 3.1.4 and OpenSSL 3.1.5 [30 Jan 2024]
  - Fixed PKCS12 Decoding crashes (CVE-2024-0727)
  - Fixed Excessive time spent checking invalid RSA public keys
    [CVE-2023-6237)
  - Fixed POLY1305 MAC implementation corrupting vector registers
    on PowerPC CPUs which support PowerISA 2.07 (CVE-2023-6129)
  - Fix excessive time spent in DH check / generation with large
    Q parameter value (CVE-2023-5678)
  * Update openssl.keyring with BA5473A2B0587B07FB27CF2D216094DFD0CB81EF
  * Rebase patches:
  - openssl-Force-FIPS.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-CVE-2023-50782.patch
  * Remove patches fixed in the update:
  - openssl-Improve-performance-for-6x-unrolling-with-vpermxor-i.patch
  - openssl-CVE-2024-6119.patch openssl-CVE-2024-5535.patch
  - openssl-CVE-2024-4741.patch openssl-CVE-2024-4603.patch
  - openssl-CVE-2024-2511.patch openssl-CVE-2024-0727.patch
  - openssl-CVE-2023-6237.patch openssl-CVE-2023-6129.patch
  - openssl-CVE-2023-5678.patch openssl-3-CVE-2024-41996.patch
  - openssl-Enable-BTI-feature-for-md5-on-aarch64.patch
  - openssl-Fix-EVP_PKEY_CTX_add1_hkdf_info-behavior.patch
  - openssl-Handle-empty-param-in-EVP_PKEY_CTX_add1_hkdf_info.patch
  - reproducible.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729857600">- Update to 3.2.0:
  * Changes between 3.1.x and 3.2.0:
  - Fix excessive time spent in DH check/ generation with large Q parameter
    value. [CVE-2023-5678]
  - The BLAKE2b hash algorithm supports a configurable output length
    by setting the "size" parameter.
  - Added a function to delete objects from store by URI - OSSL_STORE_delete()
    and the corresponding provider-storemgmt API function OSSL_FUNC_store_delete().
  - Added OSSL_FUNC_store_open_ex() provider-storemgmt API function to pass
    a passphrase callback when opening a store.
  - Changed the default salt length used by PBES2 KDF's (PBKDF2 and scrypt)
    from 8 bytes to 16 bytes.
  - Changed the default value of the 'ess_cert_id_alg' configuration
    option which is used to calculate the TSA's public key certificate
    identifier. The default algorithm is updated to be sha256 instead of sha1.
  - Added optimization for SM2 algorithm on aarch64. A new configure option
    'no-sm2-precomp' has been added to disable the precomputed table.
  - Added client side support for QUIC
  - Added secp384r1 implementation using Solinas' reduction to improve
    speed of the NIST P-384 elliptic curve. To enable the implementation
    the build option 'enable-ec_nistp_64_gcc_128' must be used.
  - Improved RFC7468 compliance of the asn1parse command.
  - Added SHA256/192 algorithm support.
  - Added support for securely getting root CA certificate update in CMP.
  - Improved contention on global write locks by using more read locks where
    appropriate.
  - Improved performance of OSSL_PARAM lookups in performance critical
    provider functions.
  - Added the SSL_get0_group_name() function to provide access to the
    name of the group used for the TLS key exchange.
  - Provide a new configure option 'no-http' that can be used to disable the
    HTTP support. Provide new configure options 'no-apps' and 'no-docs' to
    disable building the openssl command line application and the documentation.
  - Provide a new configure option 'no-ecx' that can be used to disable the
    X25519, X448, and EdDSA support.
  - When multiple OSSL_KDF_PARAM_INFO parameters are passed to
    the EVP_KDF_CTX_set_params() function they are now concatenated not just
    for the HKDF algorithm but also for SSKDF and X9.63 KDF algorithms.
  - Added OSSL_FUNC_keymgmt_im/export_types_ex() provider functions that get
    the provider context as a parameter.
  - TLS round-trip time calculation was added by a Brigham Young University
    Capstone team partnering with Sandia National Laboratories. A new function
    in ssl_lib titled SSL_get_handshake_rtt will calculate and retrieve this
    value.
  - Added the "-quic" option to s_client to enable connectivity to QUIC servers.
    QUIC requires the use of ALPN, so this must be specified via the "-alpn"
    option. Use of the "advanced" s_client command command via the "-adv" option
    is recommended.
  - Added an "advanced" command mode to s_client. Use this with the "-adv" option.
  - Add Raw Public Key (RFC7250) support.
  - Added support for modular exponentiation and CRT offloading for the
    S390x architecture.
  - Added further assembler code for the RISC-V architecture.
  - Added EC_GROUP_to_params() which creates an OSSL_PARAM array
    from a given EC_GROUP.
  - Improved support for non-default library contexts and property queries
    when parsing PKCS#12 files.
  - Implemented support for all five instances of EdDSA from RFC8032:
    Ed25519, Ed25519ctx, Ed25519ph, Ed448, and Ed448ph.
    The streaming is not yet supported for the HashEdDSA variants
    (Ed25519ph and Ed448ph).
  - Added SM4 optimization for ARM processors using ASIMD and AES HW instructions.
  - Implemented SM4-XTS support.
  - Added platform-agnostic OSSL_sleep() function.
  - Implemented deterministic ECDSA signatures (RFC6979) support.
  - Implemented AES-GCM-SIV (RFC8452) support.
  - Added support for pluggable (provider-based) TLS signature algorithms.
    This enables TLS 1.3 authentication operations with algorithms embedded
    in providers not included by default in OpenSSL. In combination with
    the already available pluggable KEM and X.509 support, this enables
    for example suitable providers to deliver post-quantum or quantum-safe
    cryptography to OpenSSL users.
  - Added support for pluggable (provider-based) CMS signature algorithms.
    This enables CMS sign and verify operations with algorithms embedded
    in providers not included by default in OpenSSL.
  - Implemented HPKE DHKEM support in providers used by HPKE (RFC9180) API.
  - Add support for certificate compression (RFC8879), including
    library support for Brotli and Zstandard compression.
  - Add the ability to add custom attributes to PKCS12 files. Add a new API
    PKCS12_create_ex2, identical to the existing PKCS12_create_ex but allows
    for a user specified callback and optional argument.
    Added a new PKCS12_SAFEBAG_set0_attr, which allows for a new attr to be
    added to the existing STACK_OF attrs.
  - Major refactor of the libssl record layer.
  - Add a mac salt length option for the pkcs12 command.
  - Add more SRTP protection profiles from RFC8723 and RFC8269.
  - Extended Kernel TLS (KTLS) to support TLS 1.3 receive offload.
  - Add support for TCP Fast Open (RFC7413) to macOS, Linux, and FreeBSD where
    supported and enabled.
  - Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489)
    to the list of ciphersuites providing Perfect Forward Secrecy as
    required by SECLEVEL &gt;= 3.
  - Add new SSL APIs to aid in efficiently implementing TLS/SSL fingerprinting.
    The SSL_CTRL_GET_IANA_GROUPS control code, exposed as the
    SSL_get0_iana_groups() function-like macro, retrieves the list of
    supported groups sent by the peer.
  - Fixed PEM_write_bio_PKCS8PrivateKey() and PEM_write_bio_PKCS8PrivateKey_nid()
    to make it possible to use empty passphrase strings.
  - The PKCS12_parse() function now supports MAC-less PKCS12 files.
  - Added ASYNC_set_mem_functions() and ASYNC_get_mem_functions() calls to be able
    to change functions used for allocating the memory of asynchronous call stack.
  - Added support for signed BIGNUMs in the OSSL_PARAM APIs.
  - A failure exit code is returned when using the openssl x509 command to check
    certificate attributes and the checks fail.
  - The default SSL/TLS security level has been changed from 1 to 2. RSA,
    DSA and DH keys of 1024 bits and above and less than 2048 bits and ECC keys
    of 160 bits and above and less than 224 bits were previously accepted by
    default but are now no longer allowed. By default TLS compression was
    already disabled in previous OpenSSL versions. At security level 2 it cannot
    be enabled.
  - The SSL_CTX_set_cipher_list family functions now accept ciphers using their
    IANA standard names.
  - The PVK key derivation function has been moved from b2i_PVK_bio_ex() into
    the legacy crypto provider as an EVP_KDF. Applications requiring this KDF
    will need to load the legacy crypto provider.
  - CCM8 cipher suites in TLS have been downgraded to security level zero
    because they use a short authentication tag which lowers their strength.
  - Subject or issuer names in X.509 objects are now displayed as UTF-8 strings
    by default. Also spaces surrounding '=' in DN output are removed.
  - Add X.509 certificate codeSigning purpose and related checks on key usage and
    extended key usage of the leaf certificate according to the CA/Browser Forum.
  - The 'x509', 'ca', and 'req' apps now produce X.509 v3 certificates.
    The '-x509v1' option of 'req' prefers generation of X.509 v1 certificates.
    'X509_sign()' and 'X509_sign_ctx()' make sure that the certificate has
    X.509 version 3 if the certificate information includes X.509 extensions.
  - Fix and extend certificate handling and the apps 'x509', 'verify' etc.
    such as adding a trace facility for debugging certificate chain building.
  - Various fixes and extensions to the CMP+CRMF implementation and the 'cmp' app
    in particular supporting requests for central key generation, generalized
    polling, and various types of genm/genp exchanges defined in CMP Updates.
  - Fixes and extensions to the HTTP client and to the HTTP server in 'apps/'
    like correcting the TLS and proxy support and adding tracing for debugging.
  - Extended the CMS API for handling 'CMS_SignedData' and 'CMS_EnvelopedData'.
  - 'CMS_add0_cert()' and 'CMS_add1_cert()' no longer throw an error if
    a certificate to be added is already present. 'CMS_sign_ex()' and
    'CMS_sign()' now ignore any duplicate certificates in their 'certs' argument
    and no longer throw an error for them.
  - Added BIO_s_dgram_pair() and BIO_s_dgram_mem() that provide memory-based
    BIOs with datagram semantics and support for BIO_sendmmsg() and BIO_recvmmsg()
    calls. They can be used as the transport BIOs for QUIC.
  - Add new BIO_sendmmsg() and BIO_recvmmsg() BIO methods which allow
    sending and receiving multiple messages in a single call. An implementation
    is provided for BIO_dgram. For further details, see BIO_sendmmsg(3).
  - Support for loading root certificates from the Windows certificate store
    has been added.
  - Enable KTLS with the TLS 1.3 CCM mode ciphersuites. Note that some linux
    kernel versions that support KTLS have a known bug in CCM processing. That
    has been fixed in stable releases starting from 5.4.164, 5.10.84, 5.15.7,
    and all releases since 5.16. KTLS with CCM ciphersuites should be only used
    on these releases.
  - Added '-ktls' option to 's_server' and 's_client' commands to enable the
    KTLS support.
  - Zerocopy KTLS sendfile() support on Linux.
  - The OBJ_ calls are now thread safe using a global lock.
  - New parameter '-digest' for openssl cms command allowing signing
    pre-computed digests and new CMS API functions supporting that
    functionality.
  - OPENSSL_malloc() and other allocation functions now raise errors on
    allocation failures. The callers do not need to explicitly raise errors
    unless they want to for tracing purposes.
  - Added support for Brainpool curves in TLS-1.3.
  - Support for Argon2d, Argon2i, Argon2id KDFs has been added along with
    a basic thread pool implementation for select platforms.</changelog>
  <changelog author="pmonreal@suse.com" date="1729857601">- Update to 3.2.1:
  * Changes between 3.2.0 and 3.2.1:
  - A file in PKCS12 format can contain certificates and keys and may come from
    an untrusted source. The PKCS12 specification allows certain fields to be
    NULL, but OpenSSL did not correctly check for this case. [CVE-2024-0727]
  - When function EVP_PKEY_public_check() is called on RSA public keys,
    a computation is done to confirm that the RSA modulus, n, is composite.
    For valid RSA keys, n is a product of two or more large primes and this
    computation completes quickly. However, if n is an overly large prime,
    then this computation would take a long time. [CVE-2023-6237]
  - Restore the encoding of SM2 PrivateKeyInfo and SubjectPublicKeyInfo to
    have the contained AlgorithmIdentifier.algorithm set to id-ecPublicKey
    rather than SM2.
  - The POLY1305 MAC (message authentication code) implementation in OpenSSL
    for PowerPC CPUs saves the contents of vector registers in different
    order than they are restored. [CVE-2023-6129]
  - Disable building QUIC server utility when OpenSSL is configured with 'no-apps'.
  * The openssl-crypto-policies-support.patch has been merged into
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Rename openssl-Disable-default-provider-for-test-suite.patch and rebase to
    openssl-TESTS-Disable-default-provider-crypto-policies.patch
  * Patches removed in the update:
  - openssl-Add_support_for_Windows_CA_certificate_store.patch
  - openssl-ec-56-bit-Limb-Solinas-Strategy-for-secp384r1.patch
  - openssl-ec-Use-static-linkage-on-nistp521-felem_-square-mul-.patch
  - openssl-ec-powerpc64le-Add-asm-implementation-of-felem_-squa.patch
  - openssl-ecc-Remove-extraneous-parentheses-in-secp384r1.patch
  - openssl-powerpc-ecc-Fix-stack-allocation-secp384r1-asm.patch
  - openssl-CVE-2024-41996.patch
  - openssl-CVE-2023-50782.patch
  - openssl-CVE-2024-9143.patch
  * Patches rebased:
  - openssl-3-use-include-directive.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-DEFAULT_SUSE_cipher.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Force-FIPS.patch
  - openssl-load-legacy-provider.patch
  - openssl-no-html-docs.patch
  - openssl-pkgconfig.patch
  - openssl-ppc64-config.patch
  - openssl-truststore.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116800">- Remove the hardcoded DEFAULT_SUSE cipherlist selection.
  * Remove openssl-DEFAULT_SUSE_cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116801">- Update to 3.2.3:
  * Changes between 3.2.2 and 3.2.3:
  - Fixed possible denial of service in X.509 name checks. [CVE-2024-6119]
  - Fixed possible buffer overread in SSL_select_next_proto(). [CVE-2024-5535]
  * Changes between 3.2.1 and 3.2.2:
  - Fixed potential use after free after SSL_free_buffers() is called. [CVE-2024-4741]
  - Fixed an issue where checking excessively long DSA keys or parameters may
    be very slow. [CVE-2024-4603]
  - Improved EC/DSA nonce generation routines to avoid bias and timing
    side channel leaks.
  - Fixed an issue where some non-default TLS server configurations can cause
    unbounded memory growth when processing TLSv1.3 sessions. [CVE-2024-2511]
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded. This can be used on platforms
    where using atexit() from shared libraries causes crashes on exit.
  - Fixed bug where SSL_export_keying_material() could not be used with QUIC
    connections.
  * Add openssl-skip-quic-pairwise.patch to adapt the pairwise tests.
  * Merge openssl-FIPS-release_num_in_version_string.patch into
    openssl-FIPS-services-minimize.patch
  * Rebase patches:
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Remove-EC-curves.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-3-use-include-directive.patch
  * Remove not needed patches:
  - openssl-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  - openssl-3-FIPS-PCT_rsa_keygen.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730462400">- Support MSA 12 SHA3 on s390x [jsc#PED-10280]
  * Add openssl-3-add_EVP_DigestSqueeze_api.patch
  * Add openssl-3-support-multiple-sha3_squeeze_s390x.patch
  * Add openssl-3-add-xof-state-handling-s3_absorb.patch
  * Add openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  * Add openssl-3-fix-state-handling-sha3_final_s390x.patch
  * Add openssl-3-fix-state-handling-shake_final_s390x.patch
  * Add openssl-3-fix-state-handling-keccak_final_s390x.patch
  * Add openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  * Add openssl-3-add-defines-CPACF-funcs.patch
  * Add openssl-3-add-hw-acceleration-hmac.patch
  * Add openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  * Add openssl-3-fix-s390x_sha3_absorb.patch
  * Add openssl-3-fix-s390x_shake_squeeze.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808000">- Support MSA 10 XTS on s390x [jsc#PED-10273]
  * s390x: Add hardware acceleration for full AES-XTS
  * Add openssl-3-hw-acceleration-aes-xts-s390x.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808001">- Support MSA 11 HMAC on s390x [jsc#PED-10274]
  * Add openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  * Add openssl-3-fix-hmac-digest-detection-s390x.patch
  * Add openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730980800">- Add missing fixes for SHA3_squeeze and quic_multistream_test on
  pcc64 arch. [jsc#PED-10280]
  * Added openssl-3-fix-sha3-squeeze-ppc64.patch
  * Added openssl-3-fix-quic_multistream_test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1731412800">- Do not use HASHBANGPERL to avoid introducing a dependency on the
  perl-base package. [bsc#1233235]</changelog>
  <changelog author="pmonreal@suse.com" date="1734436800">- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
  - openssl-3-use-include-directive.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1738238400">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Security fix: [bsc#1236599, CVE-2024-12797]
  * RFC7250 handshakes with unauthenticated servers don't abort as
    expected.
  * Add openssl-CVE-2024-12797.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1746014400">- Security fix: [bsc#1240366, CVE-2025-27587]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
  <changelog author="mls@suse.de" date="1751371200">- Backport mdless cms signing support [jsc#PED-12895]
  * Add openssl-3-support-mdless-cms.patch</changelog>
</package>
<package pkgid="fcdd05846f90da480eddedd2b6d7a786ad1acce221e620429d77da7801346d0d" name="libopenssl-3-fips-provider" arch="x86_64">
  <version epoch="0" ver="3.2.3" rel="150700.5.15.1"/>
  <changelog author="angel.yankov@suse.com" date="1727265600">- Security fix: [bsc#1230698, CVE-2024-41996]
  * Validating the order of the public keys in the Diffie-Hellman
    Key Agreement Protocol, when an approved safe prime is used.
  * Added openssl-3-CVE-2024-41996.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1220262, CVE-2023-50782]
  * Implicit rejection in PKCS#1 v1.5
  * Add openssl-CVE-2023-50782.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166401">- Security fix: [bsc#1231741, CVE-2024-9143]
  * Low-level invalid GF(2^m) parameters lead to OOB memory access
  * Add openssl-CVE-2024-9143.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729512000">- Update to 3.1.7:
  * Major changes between OpenSSL 3.1.6 and OpenSSL 3.1.7 [3 Sep 2024]
  - Fixed possible denial of service in X.509 name checks (CVE-2024-6119)
  - Fixed possible buffer overread in SSL_select_next_proto()
    (CVE-2024-5535)
  * Major changes between OpenSSL 3.1.5 and OpenSSL 3.1.6 [4 Jun 2024]
  - Fixed potential use after free after SSL_free_buffers() is
    called (CVE-2024-4741)
  - Fixed an issue where checking excessively long DSA keys or
    parameters may be very slow (CVE-2024-4603)
  - Fixed unbounded memory growth with session handling in TLSv1.3
    (CVE-2024-2511)
  * Major changes between OpenSSL 3.1.4 and OpenSSL 3.1.5 [30 Jan 2024]
  - Fixed PKCS12 Decoding crashes (CVE-2024-0727)
  - Fixed Excessive time spent checking invalid RSA public keys
    [CVE-2023-6237)
  - Fixed POLY1305 MAC implementation corrupting vector registers
    on PowerPC CPUs which support PowerISA 2.07 (CVE-2023-6129)
  - Fix excessive time spent in DH check / generation with large
    Q parameter value (CVE-2023-5678)
  * Update openssl.keyring with BA5473A2B0587B07FB27CF2D216094DFD0CB81EF
  * Rebase patches:
  - openssl-Force-FIPS.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-CVE-2023-50782.patch
  * Remove patches fixed in the update:
  - openssl-Improve-performance-for-6x-unrolling-with-vpermxor-i.patch
  - openssl-CVE-2024-6119.patch openssl-CVE-2024-5535.patch
  - openssl-CVE-2024-4741.patch openssl-CVE-2024-4603.patch
  - openssl-CVE-2024-2511.patch openssl-CVE-2024-0727.patch
  - openssl-CVE-2023-6237.patch openssl-CVE-2023-6129.patch
  - openssl-CVE-2023-5678.patch openssl-3-CVE-2024-41996.patch
  - openssl-Enable-BTI-feature-for-md5-on-aarch64.patch
  - openssl-Fix-EVP_PKEY_CTX_add1_hkdf_info-behavior.patch
  - openssl-Handle-empty-param-in-EVP_PKEY_CTX_add1_hkdf_info.patch
  - reproducible.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729857600">- Update to 3.2.0:
  * Changes between 3.1.x and 3.2.0:
  - Fix excessive time spent in DH check/ generation with large Q parameter
    value. [CVE-2023-5678]
  - The BLAKE2b hash algorithm supports a configurable output length
    by setting the "size" parameter.
  - Added a function to delete objects from store by URI - OSSL_STORE_delete()
    and the corresponding provider-storemgmt API function OSSL_FUNC_store_delete().
  - Added OSSL_FUNC_store_open_ex() provider-storemgmt API function to pass
    a passphrase callback when opening a store.
  - Changed the default salt length used by PBES2 KDF's (PBKDF2 and scrypt)
    from 8 bytes to 16 bytes.
  - Changed the default value of the 'ess_cert_id_alg' configuration
    option which is used to calculate the TSA's public key certificate
    identifier. The default algorithm is updated to be sha256 instead of sha1.
  - Added optimization for SM2 algorithm on aarch64. A new configure option
    'no-sm2-precomp' has been added to disable the precomputed table.
  - Added client side support for QUIC
  - Added secp384r1 implementation using Solinas' reduction to improve
    speed of the NIST P-384 elliptic curve. To enable the implementation
    the build option 'enable-ec_nistp_64_gcc_128' must be used.
  - Improved RFC7468 compliance of the asn1parse command.
  - Added SHA256/192 algorithm support.
  - Added support for securely getting root CA certificate update in CMP.
  - Improved contention on global write locks by using more read locks where
    appropriate.
  - Improved performance of OSSL_PARAM lookups in performance critical
    provider functions.
  - Added the SSL_get0_group_name() function to provide access to the
    name of the group used for the TLS key exchange.
  - Provide a new configure option 'no-http' that can be used to disable the
    HTTP support. Provide new configure options 'no-apps' and 'no-docs' to
    disable building the openssl command line application and the documentation.
  - Provide a new configure option 'no-ecx' that can be used to disable the
    X25519, X448, and EdDSA support.
  - When multiple OSSL_KDF_PARAM_INFO parameters are passed to
    the EVP_KDF_CTX_set_params() function they are now concatenated not just
    for the HKDF algorithm but also for SSKDF and X9.63 KDF algorithms.
  - Added OSSL_FUNC_keymgmt_im/export_types_ex() provider functions that get
    the provider context as a parameter.
  - TLS round-trip time calculation was added by a Brigham Young University
    Capstone team partnering with Sandia National Laboratories. A new function
    in ssl_lib titled SSL_get_handshake_rtt will calculate and retrieve this
    value.
  - Added the "-quic" option to s_client to enable connectivity to QUIC servers.
    QUIC requires the use of ALPN, so this must be specified via the "-alpn"
    option. Use of the "advanced" s_client command command via the "-adv" option
    is recommended.
  - Added an "advanced" command mode to s_client. Use this with the "-adv" option.
  - Add Raw Public Key (RFC7250) support.
  - Added support for modular exponentiation and CRT offloading for the
    S390x architecture.
  - Added further assembler code for the RISC-V architecture.
  - Added EC_GROUP_to_params() which creates an OSSL_PARAM array
    from a given EC_GROUP.
  - Improved support for non-default library contexts and property queries
    when parsing PKCS#12 files.
  - Implemented support for all five instances of EdDSA from RFC8032:
    Ed25519, Ed25519ctx, Ed25519ph, Ed448, and Ed448ph.
    The streaming is not yet supported for the HashEdDSA variants
    (Ed25519ph and Ed448ph).
  - Added SM4 optimization for ARM processors using ASIMD and AES HW instructions.
  - Implemented SM4-XTS support.
  - Added platform-agnostic OSSL_sleep() function.
  - Implemented deterministic ECDSA signatures (RFC6979) support.
  - Implemented AES-GCM-SIV (RFC8452) support.
  - Added support for pluggable (provider-based) TLS signature algorithms.
    This enables TLS 1.3 authentication operations with algorithms embedded
    in providers not included by default in OpenSSL. In combination with
    the already available pluggable KEM and X.509 support, this enables
    for example suitable providers to deliver post-quantum or quantum-safe
    cryptography to OpenSSL users.
  - Added support for pluggable (provider-based) CMS signature algorithms.
    This enables CMS sign and verify operations with algorithms embedded
    in providers not included by default in OpenSSL.
  - Implemented HPKE DHKEM support in providers used by HPKE (RFC9180) API.
  - Add support for certificate compression (RFC8879), including
    library support for Brotli and Zstandard compression.
  - Add the ability to add custom attributes to PKCS12 files. Add a new API
    PKCS12_create_ex2, identical to the existing PKCS12_create_ex but allows
    for a user specified callback and optional argument.
    Added a new PKCS12_SAFEBAG_set0_attr, which allows for a new attr to be
    added to the existing STACK_OF attrs.
  - Major refactor of the libssl record layer.
  - Add a mac salt length option for the pkcs12 command.
  - Add more SRTP protection profiles from RFC8723 and RFC8269.
  - Extended Kernel TLS (KTLS) to support TLS 1.3 receive offload.
  - Add support for TCP Fast Open (RFC7413) to macOS, Linux, and FreeBSD where
    supported and enabled.
  - Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489)
    to the list of ciphersuites providing Perfect Forward Secrecy as
    required by SECLEVEL &gt;= 3.
  - Add new SSL APIs to aid in efficiently implementing TLS/SSL fingerprinting.
    The SSL_CTRL_GET_IANA_GROUPS control code, exposed as the
    SSL_get0_iana_groups() function-like macro, retrieves the list of
    supported groups sent by the peer.
  - Fixed PEM_write_bio_PKCS8PrivateKey() and PEM_write_bio_PKCS8PrivateKey_nid()
    to make it possible to use empty passphrase strings.
  - The PKCS12_parse() function now supports MAC-less PKCS12 files.
  - Added ASYNC_set_mem_functions() and ASYNC_get_mem_functions() calls to be able
    to change functions used for allocating the memory of asynchronous call stack.
  - Added support for signed BIGNUMs in the OSSL_PARAM APIs.
  - A failure exit code is returned when using the openssl x509 command to check
    certificate attributes and the checks fail.
  - The default SSL/TLS security level has been changed from 1 to 2. RSA,
    DSA and DH keys of 1024 bits and above and less than 2048 bits and ECC keys
    of 160 bits and above and less than 224 bits were previously accepted by
    default but are now no longer allowed. By default TLS compression was
    already disabled in previous OpenSSL versions. At security level 2 it cannot
    be enabled.
  - The SSL_CTX_set_cipher_list family functions now accept ciphers using their
    IANA standard names.
  - The PVK key derivation function has been moved from b2i_PVK_bio_ex() into
    the legacy crypto provider as an EVP_KDF. Applications requiring this KDF
    will need to load the legacy crypto provider.
  - CCM8 cipher suites in TLS have been downgraded to security level zero
    because they use a short authentication tag which lowers their strength.
  - Subject or issuer names in X.509 objects are now displayed as UTF-8 strings
    by default. Also spaces surrounding '=' in DN output are removed.
  - Add X.509 certificate codeSigning purpose and related checks on key usage and
    extended key usage of the leaf certificate according to the CA/Browser Forum.
  - The 'x509', 'ca', and 'req' apps now produce X.509 v3 certificates.
    The '-x509v1' option of 'req' prefers generation of X.509 v1 certificates.
    'X509_sign()' and 'X509_sign_ctx()' make sure that the certificate has
    X.509 version 3 if the certificate information includes X.509 extensions.
  - Fix and extend certificate handling and the apps 'x509', 'verify' etc.
    such as adding a trace facility for debugging certificate chain building.
  - Various fixes and extensions to the CMP+CRMF implementation and the 'cmp' app
    in particular supporting requests for central key generation, generalized
    polling, and various types of genm/genp exchanges defined in CMP Updates.
  - Fixes and extensions to the HTTP client and to the HTTP server in 'apps/'
    like correcting the TLS and proxy support and adding tracing for debugging.
  - Extended the CMS API for handling 'CMS_SignedData' and 'CMS_EnvelopedData'.
  - 'CMS_add0_cert()' and 'CMS_add1_cert()' no longer throw an error if
    a certificate to be added is already present. 'CMS_sign_ex()' and
    'CMS_sign()' now ignore any duplicate certificates in their 'certs' argument
    and no longer throw an error for them.
  - Added BIO_s_dgram_pair() and BIO_s_dgram_mem() that provide memory-based
    BIOs with datagram semantics and support for BIO_sendmmsg() and BIO_recvmmsg()
    calls. They can be used as the transport BIOs for QUIC.
  - Add new BIO_sendmmsg() and BIO_recvmmsg() BIO methods which allow
    sending and receiving multiple messages in a single call. An implementation
    is provided for BIO_dgram. For further details, see BIO_sendmmsg(3).
  - Support for loading root certificates from the Windows certificate store
    has been added.
  - Enable KTLS with the TLS 1.3 CCM mode ciphersuites. Note that some linux
    kernel versions that support KTLS have a known bug in CCM processing. That
    has been fixed in stable releases starting from 5.4.164, 5.10.84, 5.15.7,
    and all releases since 5.16. KTLS with CCM ciphersuites should be only used
    on these releases.
  - Added '-ktls' option to 's_server' and 's_client' commands to enable the
    KTLS support.
  - Zerocopy KTLS sendfile() support on Linux.
  - The OBJ_ calls are now thread safe using a global lock.
  - New parameter '-digest' for openssl cms command allowing signing
    pre-computed digests and new CMS API functions supporting that
    functionality.
  - OPENSSL_malloc() and other allocation functions now raise errors on
    allocation failures. The callers do not need to explicitly raise errors
    unless they want to for tracing purposes.
  - Added support for Brainpool curves in TLS-1.3.
  - Support for Argon2d, Argon2i, Argon2id KDFs has been added along with
    a basic thread pool implementation for select platforms.</changelog>
  <changelog author="pmonreal@suse.com" date="1729857601">- Update to 3.2.1:
  * Changes between 3.2.0 and 3.2.1:
  - A file in PKCS12 format can contain certificates and keys and may come from
    an untrusted source. The PKCS12 specification allows certain fields to be
    NULL, but OpenSSL did not correctly check for this case. [CVE-2024-0727]
  - When function EVP_PKEY_public_check() is called on RSA public keys,
    a computation is done to confirm that the RSA modulus, n, is composite.
    For valid RSA keys, n is a product of two or more large primes and this
    computation completes quickly. However, if n is an overly large prime,
    then this computation would take a long time. [CVE-2023-6237]
  - Restore the encoding of SM2 PrivateKeyInfo and SubjectPublicKeyInfo to
    have the contained AlgorithmIdentifier.algorithm set to id-ecPublicKey
    rather than SM2.
  - The POLY1305 MAC (message authentication code) implementation in OpenSSL
    for PowerPC CPUs saves the contents of vector registers in different
    order than they are restored. [CVE-2023-6129]
  - Disable building QUIC server utility when OpenSSL is configured with 'no-apps'.
  * The openssl-crypto-policies-support.patch has been merged into
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Rename openssl-Disable-default-provider-for-test-suite.patch and rebase to
    openssl-TESTS-Disable-default-provider-crypto-policies.patch
  * Patches removed in the update:
  - openssl-Add_support_for_Windows_CA_certificate_store.patch
  - openssl-ec-56-bit-Limb-Solinas-Strategy-for-secp384r1.patch
  - openssl-ec-Use-static-linkage-on-nistp521-felem_-square-mul-.patch
  - openssl-ec-powerpc64le-Add-asm-implementation-of-felem_-squa.patch
  - openssl-ecc-Remove-extraneous-parentheses-in-secp384r1.patch
  - openssl-powerpc-ecc-Fix-stack-allocation-secp384r1-asm.patch
  - openssl-CVE-2024-41996.patch
  - openssl-CVE-2023-50782.patch
  - openssl-CVE-2024-9143.patch
  * Patches rebased:
  - openssl-3-use-include-directive.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-DEFAULT_SUSE_cipher.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Force-FIPS.patch
  - openssl-load-legacy-provider.patch
  - openssl-no-html-docs.patch
  - openssl-pkgconfig.patch
  - openssl-ppc64-config.patch
  - openssl-truststore.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116800">- Remove the hardcoded DEFAULT_SUSE cipherlist selection.
  * Remove openssl-DEFAULT_SUSE_cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116801">- Update to 3.2.3:
  * Changes between 3.2.2 and 3.2.3:
  - Fixed possible denial of service in X.509 name checks. [CVE-2024-6119]
  - Fixed possible buffer overread in SSL_select_next_proto(). [CVE-2024-5535]
  * Changes between 3.2.1 and 3.2.2:
  - Fixed potential use after free after SSL_free_buffers() is called. [CVE-2024-4741]
  - Fixed an issue where checking excessively long DSA keys or parameters may
    be very slow. [CVE-2024-4603]
  - Improved EC/DSA nonce generation routines to avoid bias and timing
    side channel leaks.
  - Fixed an issue where some non-default TLS server configurations can cause
    unbounded memory growth when processing TLSv1.3 sessions. [CVE-2024-2511]
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded. This can be used on platforms
    where using atexit() from shared libraries causes crashes on exit.
  - Fixed bug where SSL_export_keying_material() could not be used with QUIC
    connections.
  * Add openssl-skip-quic-pairwise.patch to adapt the pairwise tests.
  * Merge openssl-FIPS-release_num_in_version_string.patch into
    openssl-FIPS-services-minimize.patch
  * Rebase patches:
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Remove-EC-curves.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-3-use-include-directive.patch
  * Remove not needed patches:
  - openssl-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  - openssl-3-FIPS-PCT_rsa_keygen.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730462400">- Support MSA 12 SHA3 on s390x [jsc#PED-10280]
  * Add openssl-3-add_EVP_DigestSqueeze_api.patch
  * Add openssl-3-support-multiple-sha3_squeeze_s390x.patch
  * Add openssl-3-add-xof-state-handling-s3_absorb.patch
  * Add openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  * Add openssl-3-fix-state-handling-sha3_final_s390x.patch
  * Add openssl-3-fix-state-handling-shake_final_s390x.patch
  * Add openssl-3-fix-state-handling-keccak_final_s390x.patch
  * Add openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  * Add openssl-3-add-defines-CPACF-funcs.patch
  * Add openssl-3-add-hw-acceleration-hmac.patch
  * Add openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  * Add openssl-3-fix-s390x_sha3_absorb.patch
  * Add openssl-3-fix-s390x_shake_squeeze.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808000">- Support MSA 10 XTS on s390x [jsc#PED-10273]
  * s390x: Add hardware acceleration for full AES-XTS
  * Add openssl-3-hw-acceleration-aes-xts-s390x.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808001">- Support MSA 11 HMAC on s390x [jsc#PED-10274]
  * Add openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  * Add openssl-3-fix-hmac-digest-detection-s390x.patch
  * Add openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730980800">- Add missing fixes for SHA3_squeeze and quic_multistream_test on
  pcc64 arch. [jsc#PED-10280]
  * Added openssl-3-fix-sha3-squeeze-ppc64.patch
  * Added openssl-3-fix-quic_multistream_test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1731412800">- Do not use HASHBANGPERL to avoid introducing a dependency on the
  perl-base package. [bsc#1233235]</changelog>
  <changelog author="pmonreal@suse.com" date="1734436800">- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
  - openssl-3-use-include-directive.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1738238400">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Security fix: [bsc#1236599, CVE-2024-12797]
  * RFC7250 handshakes with unauthenticated servers don't abort as
    expected.
  * Add openssl-CVE-2024-12797.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1746014400">- Security fix: [bsc#1240366, CVE-2025-27587]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
  <changelog author="mls@suse.de" date="1751371200">- Backport mdless cms signing support [jsc#PED-12895]
  * Add openssl-3-support-mdless-cms.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- FIPS: Fix EMS in crypto-policies FIPS:NO-ENFORCE-EMS
  * [bsc#1230959, bsc#1232326, bsc#1231748, bsc#1246428]
  * Add patch openssl-FIPS-fix-EMS-support.patch</changelog>
</package>
<package pkgid="79e35c19103fdaac896331d5db087aa1b060cdf394fa01ff2394d30f71e3281a" name="libopenssl-3-fips-provider" arch="x86_64">
  <version epoch="0" ver="3.2.3" rel="150700.5.18.1"/>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1220262, CVE-2023-50782]
  * Implicit rejection in PKCS#1 v1.5
  * Add openssl-CVE-2023-50782.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166401">- Security fix: [bsc#1231741, CVE-2024-9143]
  * Low-level invalid GF(2^m) parameters lead to OOB memory access
  * Add openssl-CVE-2024-9143.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729512000">- Update to 3.1.7:
  * Major changes between OpenSSL 3.1.6 and OpenSSL 3.1.7 [3 Sep 2024]
  - Fixed possible denial of service in X.509 name checks (CVE-2024-6119)
  - Fixed possible buffer overread in SSL_select_next_proto()
    (CVE-2024-5535)
  * Major changes between OpenSSL 3.1.5 and OpenSSL 3.1.6 [4 Jun 2024]
  - Fixed potential use after free after SSL_free_buffers() is
    called (CVE-2024-4741)
  - Fixed an issue where checking excessively long DSA keys or
    parameters may be very slow (CVE-2024-4603)
  - Fixed unbounded memory growth with session handling in TLSv1.3
    (CVE-2024-2511)
  * Major changes between OpenSSL 3.1.4 and OpenSSL 3.1.5 [30 Jan 2024]
  - Fixed PKCS12 Decoding crashes (CVE-2024-0727)
  - Fixed Excessive time spent checking invalid RSA public keys
    [CVE-2023-6237)
  - Fixed POLY1305 MAC implementation corrupting vector registers
    on PowerPC CPUs which support PowerISA 2.07 (CVE-2023-6129)
  - Fix excessive time spent in DH check / generation with large
    Q parameter value (CVE-2023-5678)
  * Update openssl.keyring with BA5473A2B0587B07FB27CF2D216094DFD0CB81EF
  * Rebase patches:
  - openssl-Force-FIPS.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-CVE-2023-50782.patch
  * Remove patches fixed in the update:
  - openssl-Improve-performance-for-6x-unrolling-with-vpermxor-i.patch
  - openssl-CVE-2024-6119.patch openssl-CVE-2024-5535.patch
  - openssl-CVE-2024-4741.patch openssl-CVE-2024-4603.patch
  - openssl-CVE-2024-2511.patch openssl-CVE-2024-0727.patch
  - openssl-CVE-2023-6237.patch openssl-CVE-2023-6129.patch
  - openssl-CVE-2023-5678.patch openssl-3-CVE-2024-41996.patch
  - openssl-Enable-BTI-feature-for-md5-on-aarch64.patch
  - openssl-Fix-EVP_PKEY_CTX_add1_hkdf_info-behavior.patch
  - openssl-Handle-empty-param-in-EVP_PKEY_CTX_add1_hkdf_info.patch
  - reproducible.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729857600">- Update to 3.2.0:
  * Changes between 3.1.x and 3.2.0:
  - Fix excessive time spent in DH check/ generation with large Q parameter
    value. [CVE-2023-5678]
  - The BLAKE2b hash algorithm supports a configurable output length
    by setting the "size" parameter.
  - Added a function to delete objects from store by URI - OSSL_STORE_delete()
    and the corresponding provider-storemgmt API function OSSL_FUNC_store_delete().
  - Added OSSL_FUNC_store_open_ex() provider-storemgmt API function to pass
    a passphrase callback when opening a store.
  - Changed the default salt length used by PBES2 KDF's (PBKDF2 and scrypt)
    from 8 bytes to 16 bytes.
  - Changed the default value of the 'ess_cert_id_alg' configuration
    option which is used to calculate the TSA's public key certificate
    identifier. The default algorithm is updated to be sha256 instead of sha1.
  - Added optimization for SM2 algorithm on aarch64. A new configure option
    'no-sm2-precomp' has been added to disable the precomputed table.
  - Added client side support for QUIC
  - Added secp384r1 implementation using Solinas' reduction to improve
    speed of the NIST P-384 elliptic curve. To enable the implementation
    the build option 'enable-ec_nistp_64_gcc_128' must be used.
  - Improved RFC7468 compliance of the asn1parse command.
  - Added SHA256/192 algorithm support.
  - Added support for securely getting root CA certificate update in CMP.
  - Improved contention on global write locks by using more read locks where
    appropriate.
  - Improved performance of OSSL_PARAM lookups in performance critical
    provider functions.
  - Added the SSL_get0_group_name() function to provide access to the
    name of the group used for the TLS key exchange.
  - Provide a new configure option 'no-http' that can be used to disable the
    HTTP support. Provide new configure options 'no-apps' and 'no-docs' to
    disable building the openssl command line application and the documentation.
  - Provide a new configure option 'no-ecx' that can be used to disable the
    X25519, X448, and EdDSA support.
  - When multiple OSSL_KDF_PARAM_INFO parameters are passed to
    the EVP_KDF_CTX_set_params() function they are now concatenated not just
    for the HKDF algorithm but also for SSKDF and X9.63 KDF algorithms.
  - Added OSSL_FUNC_keymgmt_im/export_types_ex() provider functions that get
    the provider context as a parameter.
  - TLS round-trip time calculation was added by a Brigham Young University
    Capstone team partnering with Sandia National Laboratories. A new function
    in ssl_lib titled SSL_get_handshake_rtt will calculate and retrieve this
    value.
  - Added the "-quic" option to s_client to enable connectivity to QUIC servers.
    QUIC requires the use of ALPN, so this must be specified via the "-alpn"
    option. Use of the "advanced" s_client command command via the "-adv" option
    is recommended.
  - Added an "advanced" command mode to s_client. Use this with the "-adv" option.
  - Add Raw Public Key (RFC7250) support.
  - Added support for modular exponentiation and CRT offloading for the
    S390x architecture.
  - Added further assembler code for the RISC-V architecture.
  - Added EC_GROUP_to_params() which creates an OSSL_PARAM array
    from a given EC_GROUP.
  - Improved support for non-default library contexts and property queries
    when parsing PKCS#12 files.
  - Implemented support for all five instances of EdDSA from RFC8032:
    Ed25519, Ed25519ctx, Ed25519ph, Ed448, and Ed448ph.
    The streaming is not yet supported for the HashEdDSA variants
    (Ed25519ph and Ed448ph).
  - Added SM4 optimization for ARM processors using ASIMD and AES HW instructions.
  - Implemented SM4-XTS support.
  - Added platform-agnostic OSSL_sleep() function.
  - Implemented deterministic ECDSA signatures (RFC6979) support.
  - Implemented AES-GCM-SIV (RFC8452) support.
  - Added support for pluggable (provider-based) TLS signature algorithms.
    This enables TLS 1.3 authentication operations with algorithms embedded
    in providers not included by default in OpenSSL. In combination with
    the already available pluggable KEM and X.509 support, this enables
    for example suitable providers to deliver post-quantum or quantum-safe
    cryptography to OpenSSL users.
  - Added support for pluggable (provider-based) CMS signature algorithms.
    This enables CMS sign and verify operations with algorithms embedded
    in providers not included by default in OpenSSL.
  - Implemented HPKE DHKEM support in providers used by HPKE (RFC9180) API.
  - Add support for certificate compression (RFC8879), including
    library support for Brotli and Zstandard compression.
  - Add the ability to add custom attributes to PKCS12 files. Add a new API
    PKCS12_create_ex2, identical to the existing PKCS12_create_ex but allows
    for a user specified callback and optional argument.
    Added a new PKCS12_SAFEBAG_set0_attr, which allows for a new attr to be
    added to the existing STACK_OF attrs.
  - Major refactor of the libssl record layer.
  - Add a mac salt length option for the pkcs12 command.
  - Add more SRTP protection profiles from RFC8723 and RFC8269.
  - Extended Kernel TLS (KTLS) to support TLS 1.3 receive offload.
  - Add support for TCP Fast Open (RFC7413) to macOS, Linux, and FreeBSD where
    supported and enabled.
  - Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489)
    to the list of ciphersuites providing Perfect Forward Secrecy as
    required by SECLEVEL &gt;= 3.
  - Add new SSL APIs to aid in efficiently implementing TLS/SSL fingerprinting.
    The SSL_CTRL_GET_IANA_GROUPS control code, exposed as the
    SSL_get0_iana_groups() function-like macro, retrieves the list of
    supported groups sent by the peer.
  - Fixed PEM_write_bio_PKCS8PrivateKey() and PEM_write_bio_PKCS8PrivateKey_nid()
    to make it possible to use empty passphrase strings.
  - The PKCS12_parse() function now supports MAC-less PKCS12 files.
  - Added ASYNC_set_mem_functions() and ASYNC_get_mem_functions() calls to be able
    to change functions used for allocating the memory of asynchronous call stack.
  - Added support for signed BIGNUMs in the OSSL_PARAM APIs.
  - A failure exit code is returned when using the openssl x509 command to check
    certificate attributes and the checks fail.
  - The default SSL/TLS security level has been changed from 1 to 2. RSA,
    DSA and DH keys of 1024 bits and above and less than 2048 bits and ECC keys
    of 160 bits and above and less than 224 bits were previously accepted by
    default but are now no longer allowed. By default TLS compression was
    already disabled in previous OpenSSL versions. At security level 2 it cannot
    be enabled.
  - The SSL_CTX_set_cipher_list family functions now accept ciphers using their
    IANA standard names.
  - The PVK key derivation function has been moved from b2i_PVK_bio_ex() into
    the legacy crypto provider as an EVP_KDF. Applications requiring this KDF
    will need to load the legacy crypto provider.
  - CCM8 cipher suites in TLS have been downgraded to security level zero
    because they use a short authentication tag which lowers their strength.
  - Subject or issuer names in X.509 objects are now displayed as UTF-8 strings
    by default. Also spaces surrounding '=' in DN output are removed.
  - Add X.509 certificate codeSigning purpose and related checks on key usage and
    extended key usage of the leaf certificate according to the CA/Browser Forum.
  - The 'x509', 'ca', and 'req' apps now produce X.509 v3 certificates.
    The '-x509v1' option of 'req' prefers generation of X.509 v1 certificates.
    'X509_sign()' and 'X509_sign_ctx()' make sure that the certificate has
    X.509 version 3 if the certificate information includes X.509 extensions.
  - Fix and extend certificate handling and the apps 'x509', 'verify' etc.
    such as adding a trace facility for debugging certificate chain building.
  - Various fixes and extensions to the CMP+CRMF implementation and the 'cmp' app
    in particular supporting requests for central key generation, generalized
    polling, and various types of genm/genp exchanges defined in CMP Updates.
  - Fixes and extensions to the HTTP client and to the HTTP server in 'apps/'
    like correcting the TLS and proxy support and adding tracing for debugging.
  - Extended the CMS API for handling 'CMS_SignedData' and 'CMS_EnvelopedData'.
  - 'CMS_add0_cert()' and 'CMS_add1_cert()' no longer throw an error if
    a certificate to be added is already present. 'CMS_sign_ex()' and
    'CMS_sign()' now ignore any duplicate certificates in their 'certs' argument
    and no longer throw an error for them.
  - Added BIO_s_dgram_pair() and BIO_s_dgram_mem() that provide memory-based
    BIOs with datagram semantics and support for BIO_sendmmsg() and BIO_recvmmsg()
    calls. They can be used as the transport BIOs for QUIC.
  - Add new BIO_sendmmsg() and BIO_recvmmsg() BIO methods which allow
    sending and receiving multiple messages in a single call. An implementation
    is provided for BIO_dgram. For further details, see BIO_sendmmsg(3).
  - Support for loading root certificates from the Windows certificate store
    has been added.
  - Enable KTLS with the TLS 1.3 CCM mode ciphersuites. Note that some linux
    kernel versions that support KTLS have a known bug in CCM processing. That
    has been fixed in stable releases starting from 5.4.164, 5.10.84, 5.15.7,
    and all releases since 5.16. KTLS with CCM ciphersuites should be only used
    on these releases.
  - Added '-ktls' option to 's_server' and 's_client' commands to enable the
    KTLS support.
  - Zerocopy KTLS sendfile() support on Linux.
  - The OBJ_ calls are now thread safe using a global lock.
  - New parameter '-digest' for openssl cms command allowing signing
    pre-computed digests and new CMS API functions supporting that
    functionality.
  - OPENSSL_malloc() and other allocation functions now raise errors on
    allocation failures. The callers do not need to explicitly raise errors
    unless they want to for tracing purposes.
  - Added support for Brainpool curves in TLS-1.3.
  - Support for Argon2d, Argon2i, Argon2id KDFs has been added along with
    a basic thread pool implementation for select platforms.</changelog>
  <changelog author="pmonreal@suse.com" date="1729857601">- Update to 3.2.1:
  * Changes between 3.2.0 and 3.2.1:
  - A file in PKCS12 format can contain certificates and keys and may come from
    an untrusted source. The PKCS12 specification allows certain fields to be
    NULL, but OpenSSL did not correctly check for this case. [CVE-2024-0727]
  - When function EVP_PKEY_public_check() is called on RSA public keys,
    a computation is done to confirm that the RSA modulus, n, is composite.
    For valid RSA keys, n is a product of two or more large primes and this
    computation completes quickly. However, if n is an overly large prime,
    then this computation would take a long time. [CVE-2023-6237]
  - Restore the encoding of SM2 PrivateKeyInfo and SubjectPublicKeyInfo to
    have the contained AlgorithmIdentifier.algorithm set to id-ecPublicKey
    rather than SM2.
  - The POLY1305 MAC (message authentication code) implementation in OpenSSL
    for PowerPC CPUs saves the contents of vector registers in different
    order than they are restored. [CVE-2023-6129]
  - Disable building QUIC server utility when OpenSSL is configured with 'no-apps'.
  * The openssl-crypto-policies-support.patch has been merged into
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Rename openssl-Disable-default-provider-for-test-suite.patch and rebase to
    openssl-TESTS-Disable-default-provider-crypto-policies.patch
  * Patches removed in the update:
  - openssl-Add_support_for_Windows_CA_certificate_store.patch
  - openssl-ec-56-bit-Limb-Solinas-Strategy-for-secp384r1.patch
  - openssl-ec-Use-static-linkage-on-nistp521-felem_-square-mul-.patch
  - openssl-ec-powerpc64le-Add-asm-implementation-of-felem_-squa.patch
  - openssl-ecc-Remove-extraneous-parentheses-in-secp384r1.patch
  - openssl-powerpc-ecc-Fix-stack-allocation-secp384r1-asm.patch
  - openssl-CVE-2024-41996.patch
  - openssl-CVE-2023-50782.patch
  - openssl-CVE-2024-9143.patch
  * Patches rebased:
  - openssl-3-use-include-directive.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-DEFAULT_SUSE_cipher.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Force-FIPS.patch
  - openssl-load-legacy-provider.patch
  - openssl-no-html-docs.patch
  - openssl-pkgconfig.patch
  - openssl-ppc64-config.patch
  - openssl-truststore.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116800">- Remove the hardcoded DEFAULT_SUSE cipherlist selection.
  * Remove openssl-DEFAULT_SUSE_cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116801">- Update to 3.2.3:
  * Changes between 3.2.2 and 3.2.3:
  - Fixed possible denial of service in X.509 name checks. [CVE-2024-6119]
  - Fixed possible buffer overread in SSL_select_next_proto(). [CVE-2024-5535]
  * Changes between 3.2.1 and 3.2.2:
  - Fixed potential use after free after SSL_free_buffers() is called. [CVE-2024-4741]
  - Fixed an issue where checking excessively long DSA keys or parameters may
    be very slow. [CVE-2024-4603]
  - Improved EC/DSA nonce generation routines to avoid bias and timing
    side channel leaks.
  - Fixed an issue where some non-default TLS server configurations can cause
    unbounded memory growth when processing TLSv1.3 sessions. [CVE-2024-2511]
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded. This can be used on platforms
    where using atexit() from shared libraries causes crashes on exit.
  - Fixed bug where SSL_export_keying_material() could not be used with QUIC
    connections.
  * Add openssl-skip-quic-pairwise.patch to adapt the pairwise tests.
  * Merge openssl-FIPS-release_num_in_version_string.patch into
    openssl-FIPS-services-minimize.patch
  * Rebase patches:
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Remove-EC-curves.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-3-use-include-directive.patch
  * Remove not needed patches:
  - openssl-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  - openssl-3-FIPS-PCT_rsa_keygen.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730462400">- Support MSA 12 SHA3 on s390x [jsc#PED-10280]
  * Add openssl-3-add_EVP_DigestSqueeze_api.patch
  * Add openssl-3-support-multiple-sha3_squeeze_s390x.patch
  * Add openssl-3-add-xof-state-handling-s3_absorb.patch
  * Add openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  * Add openssl-3-fix-state-handling-sha3_final_s390x.patch
  * Add openssl-3-fix-state-handling-shake_final_s390x.patch
  * Add openssl-3-fix-state-handling-keccak_final_s390x.patch
  * Add openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  * Add openssl-3-add-defines-CPACF-funcs.patch
  * Add openssl-3-add-hw-acceleration-hmac.patch
  * Add openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  * Add openssl-3-fix-s390x_sha3_absorb.patch
  * Add openssl-3-fix-s390x_shake_squeeze.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808000">- Support MSA 10 XTS on s390x [jsc#PED-10273]
  * s390x: Add hardware acceleration for full AES-XTS
  * Add openssl-3-hw-acceleration-aes-xts-s390x.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808001">- Support MSA 11 HMAC on s390x [jsc#PED-10274]
  * Add openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  * Add openssl-3-fix-hmac-digest-detection-s390x.patch
  * Add openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730980800">- Add missing fixes for SHA3_squeeze and quic_multistream_test on
  pcc64 arch. [jsc#PED-10280]
  * Added openssl-3-fix-sha3-squeeze-ppc64.patch
  * Added openssl-3-fix-quic_multistream_test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1731412800">- Do not use HASHBANGPERL to avoid introducing a dependency on the
  perl-base package. [bsc#1233235]</changelog>
  <changelog author="pmonreal@suse.com" date="1734436800">- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
  - openssl-3-use-include-directive.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1738238400">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Security fix: [bsc#1236599, CVE-2024-12797]
  * RFC7250 handshakes with unauthenticated servers don't abort as
    expected.
  * Add openssl-CVE-2024-12797.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1746014400">- Security fix: [bsc#1240366, CVE-2025-27587]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
  <changelog author="mls@suse.de" date="1751371200">- Backport mdless cms signing support [jsc#PED-12895]
  * Add openssl-3-support-mdless-cms.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- FIPS: Fix EMS in crypto-policies FIPS:NO-ENFORCE-EMS
  * [bsc#1230959, bsc#1232326, bsc#1231748, bsc#1246428]
  * Add patch openssl-FIPS-fix-EMS-support.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1753876800">- Increase limit for CRL download [bsc#1247148, bsc#1247144]
  * Add openssl-3-large-CRLs.patch</changelog>
</package>
<package pkgid="84bda286af2cca4e9256017fee62734373a18aec09c91d0c733a0ffd6ea71774" name="libopenssl-3-fips-provider" arch="x86_64">
  <version epoch="0" ver="3.2.3" rel="150700.5.21.1"/>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1231741, CVE-2024-9143]
  * Low-level invalid GF(2^m) parameters lead to OOB memory access
  * Add openssl-CVE-2024-9143.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729512000">- Update to 3.1.7:
  * Major changes between OpenSSL 3.1.6 and OpenSSL 3.1.7 [3 Sep 2024]
  - Fixed possible denial of service in X.509 name checks (CVE-2024-6119)
  - Fixed possible buffer overread in SSL_select_next_proto()
    (CVE-2024-5535)
  * Major changes between OpenSSL 3.1.5 and OpenSSL 3.1.6 [4 Jun 2024]
  - Fixed potential use after free after SSL_free_buffers() is
    called (CVE-2024-4741)
  - Fixed an issue where checking excessively long DSA keys or
    parameters may be very slow (CVE-2024-4603)
  - Fixed unbounded memory growth with session handling in TLSv1.3
    (CVE-2024-2511)
  * Major changes between OpenSSL 3.1.4 and OpenSSL 3.1.5 [30 Jan 2024]
  - Fixed PKCS12 Decoding crashes (CVE-2024-0727)
  - Fixed Excessive time spent checking invalid RSA public keys
    [CVE-2023-6237)
  - Fixed POLY1305 MAC implementation corrupting vector registers
    on PowerPC CPUs which support PowerISA 2.07 (CVE-2023-6129)
  - Fix excessive time spent in DH check / generation with large
    Q parameter value (CVE-2023-5678)
  * Update openssl.keyring with BA5473A2B0587B07FB27CF2D216094DFD0CB81EF
  * Rebase patches:
  - openssl-Force-FIPS.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-CVE-2023-50782.patch
  * Remove patches fixed in the update:
  - openssl-Improve-performance-for-6x-unrolling-with-vpermxor-i.patch
  - openssl-CVE-2024-6119.patch openssl-CVE-2024-5535.patch
  - openssl-CVE-2024-4741.patch openssl-CVE-2024-4603.patch
  - openssl-CVE-2024-2511.patch openssl-CVE-2024-0727.patch
  - openssl-CVE-2023-6237.patch openssl-CVE-2023-6129.patch
  - openssl-CVE-2023-5678.patch openssl-3-CVE-2024-41996.patch
  - openssl-Enable-BTI-feature-for-md5-on-aarch64.patch
  - openssl-Fix-EVP_PKEY_CTX_add1_hkdf_info-behavior.patch
  - openssl-Handle-empty-param-in-EVP_PKEY_CTX_add1_hkdf_info.patch
  - reproducible.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729857600">- Update to 3.2.0:
  * Changes between 3.1.x and 3.2.0:
  - Fix excessive time spent in DH check/ generation with large Q parameter
    value. [CVE-2023-5678]
  - The BLAKE2b hash algorithm supports a configurable output length
    by setting the "size" parameter.
  - Added a function to delete objects from store by URI - OSSL_STORE_delete()
    and the corresponding provider-storemgmt API function OSSL_FUNC_store_delete().
  - Added OSSL_FUNC_store_open_ex() provider-storemgmt API function to pass
    a passphrase callback when opening a store.
  - Changed the default salt length used by PBES2 KDF's (PBKDF2 and scrypt)
    from 8 bytes to 16 bytes.
  - Changed the default value of the 'ess_cert_id_alg' configuration
    option which is used to calculate the TSA's public key certificate
    identifier. The default algorithm is updated to be sha256 instead of sha1.
  - Added optimization for SM2 algorithm on aarch64. A new configure option
    'no-sm2-precomp' has been added to disable the precomputed table.
  - Added client side support for QUIC
  - Added secp384r1 implementation using Solinas' reduction to improve
    speed of the NIST P-384 elliptic curve. To enable the implementation
    the build option 'enable-ec_nistp_64_gcc_128' must be used.
  - Improved RFC7468 compliance of the asn1parse command.
  - Added SHA256/192 algorithm support.
  - Added support for securely getting root CA certificate update in CMP.
  - Improved contention on global write locks by using more read locks where
    appropriate.
  - Improved performance of OSSL_PARAM lookups in performance critical
    provider functions.
  - Added the SSL_get0_group_name() function to provide access to the
    name of the group used for the TLS key exchange.
  - Provide a new configure option 'no-http' that can be used to disable the
    HTTP support. Provide new configure options 'no-apps' and 'no-docs' to
    disable building the openssl command line application and the documentation.
  - Provide a new configure option 'no-ecx' that can be used to disable the
    X25519, X448, and EdDSA support.
  - When multiple OSSL_KDF_PARAM_INFO parameters are passed to
    the EVP_KDF_CTX_set_params() function they are now concatenated not just
    for the HKDF algorithm but also for SSKDF and X9.63 KDF algorithms.
  - Added OSSL_FUNC_keymgmt_im/export_types_ex() provider functions that get
    the provider context as a parameter.
  - TLS round-trip time calculation was added by a Brigham Young University
    Capstone team partnering with Sandia National Laboratories. A new function
    in ssl_lib titled SSL_get_handshake_rtt will calculate and retrieve this
    value.
  - Added the "-quic" option to s_client to enable connectivity to QUIC servers.
    QUIC requires the use of ALPN, so this must be specified via the "-alpn"
    option. Use of the "advanced" s_client command command via the "-adv" option
    is recommended.
  - Added an "advanced" command mode to s_client. Use this with the "-adv" option.
  - Add Raw Public Key (RFC7250) support.
  - Added support for modular exponentiation and CRT offloading for the
    S390x architecture.
  - Added further assembler code for the RISC-V architecture.
  - Added EC_GROUP_to_params() which creates an OSSL_PARAM array
    from a given EC_GROUP.
  - Improved support for non-default library contexts and property queries
    when parsing PKCS#12 files.
  - Implemented support for all five instances of EdDSA from RFC8032:
    Ed25519, Ed25519ctx, Ed25519ph, Ed448, and Ed448ph.
    The streaming is not yet supported for the HashEdDSA variants
    (Ed25519ph and Ed448ph).
  - Added SM4 optimization for ARM processors using ASIMD and AES HW instructions.
  - Implemented SM4-XTS support.
  - Added platform-agnostic OSSL_sleep() function.
  - Implemented deterministic ECDSA signatures (RFC6979) support.
  - Implemented AES-GCM-SIV (RFC8452) support.
  - Added support for pluggable (provider-based) TLS signature algorithms.
    This enables TLS 1.3 authentication operations with algorithms embedded
    in providers not included by default in OpenSSL. In combination with
    the already available pluggable KEM and X.509 support, this enables
    for example suitable providers to deliver post-quantum or quantum-safe
    cryptography to OpenSSL users.
  - Added support for pluggable (provider-based) CMS signature algorithms.
    This enables CMS sign and verify operations with algorithms embedded
    in providers not included by default in OpenSSL.
  - Implemented HPKE DHKEM support in providers used by HPKE (RFC9180) API.
  - Add support for certificate compression (RFC8879), including
    library support for Brotli and Zstandard compression.
  - Add the ability to add custom attributes to PKCS12 files. Add a new API
    PKCS12_create_ex2, identical to the existing PKCS12_create_ex but allows
    for a user specified callback and optional argument.
    Added a new PKCS12_SAFEBAG_set0_attr, which allows for a new attr to be
    added to the existing STACK_OF attrs.
  - Major refactor of the libssl record layer.
  - Add a mac salt length option for the pkcs12 command.
  - Add more SRTP protection profiles from RFC8723 and RFC8269.
  - Extended Kernel TLS (KTLS) to support TLS 1.3 receive offload.
  - Add support for TCP Fast Open (RFC7413) to macOS, Linux, and FreeBSD where
    supported and enabled.
  - Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489)
    to the list of ciphersuites providing Perfect Forward Secrecy as
    required by SECLEVEL &gt;= 3.
  - Add new SSL APIs to aid in efficiently implementing TLS/SSL fingerprinting.
    The SSL_CTRL_GET_IANA_GROUPS control code, exposed as the
    SSL_get0_iana_groups() function-like macro, retrieves the list of
    supported groups sent by the peer.
  - Fixed PEM_write_bio_PKCS8PrivateKey() and PEM_write_bio_PKCS8PrivateKey_nid()
    to make it possible to use empty passphrase strings.
  - The PKCS12_parse() function now supports MAC-less PKCS12 files.
  - Added ASYNC_set_mem_functions() and ASYNC_get_mem_functions() calls to be able
    to change functions used for allocating the memory of asynchronous call stack.
  - Added support for signed BIGNUMs in the OSSL_PARAM APIs.
  - A failure exit code is returned when using the openssl x509 command to check
    certificate attributes and the checks fail.
  - The default SSL/TLS security level has been changed from 1 to 2. RSA,
    DSA and DH keys of 1024 bits and above and less than 2048 bits and ECC keys
    of 160 bits and above and less than 224 bits were previously accepted by
    default but are now no longer allowed. By default TLS compression was
    already disabled in previous OpenSSL versions. At security level 2 it cannot
    be enabled.
  - The SSL_CTX_set_cipher_list family functions now accept ciphers using their
    IANA standard names.
  - The PVK key derivation function has been moved from b2i_PVK_bio_ex() into
    the legacy crypto provider as an EVP_KDF. Applications requiring this KDF
    will need to load the legacy crypto provider.
  - CCM8 cipher suites in TLS have been downgraded to security level zero
    because they use a short authentication tag which lowers their strength.
  - Subject or issuer names in X.509 objects are now displayed as UTF-8 strings
    by default. Also spaces surrounding '=' in DN output are removed.
  - Add X.509 certificate codeSigning purpose and related checks on key usage and
    extended key usage of the leaf certificate according to the CA/Browser Forum.
  - The 'x509', 'ca', and 'req' apps now produce X.509 v3 certificates.
    The '-x509v1' option of 'req' prefers generation of X.509 v1 certificates.
    'X509_sign()' and 'X509_sign_ctx()' make sure that the certificate has
    X.509 version 3 if the certificate information includes X.509 extensions.
  - Fix and extend certificate handling and the apps 'x509', 'verify' etc.
    such as adding a trace facility for debugging certificate chain building.
  - Various fixes and extensions to the CMP+CRMF implementation and the 'cmp' app
    in particular supporting requests for central key generation, generalized
    polling, and various types of genm/genp exchanges defined in CMP Updates.
  - Fixes and extensions to the HTTP client and to the HTTP server in 'apps/'
    like correcting the TLS and proxy support and adding tracing for debugging.
  - Extended the CMS API for handling 'CMS_SignedData' and 'CMS_EnvelopedData'.
  - 'CMS_add0_cert()' and 'CMS_add1_cert()' no longer throw an error if
    a certificate to be added is already present. 'CMS_sign_ex()' and
    'CMS_sign()' now ignore any duplicate certificates in their 'certs' argument
    and no longer throw an error for them.
  - Added BIO_s_dgram_pair() and BIO_s_dgram_mem() that provide memory-based
    BIOs with datagram semantics and support for BIO_sendmmsg() and BIO_recvmmsg()
    calls. They can be used as the transport BIOs for QUIC.
  - Add new BIO_sendmmsg() and BIO_recvmmsg() BIO methods which allow
    sending and receiving multiple messages in a single call. An implementation
    is provided for BIO_dgram. For further details, see BIO_sendmmsg(3).
  - Support for loading root certificates from the Windows certificate store
    has been added.
  - Enable KTLS with the TLS 1.3 CCM mode ciphersuites. Note that some linux
    kernel versions that support KTLS have a known bug in CCM processing. That
    has been fixed in stable releases starting from 5.4.164, 5.10.84, 5.15.7,
    and all releases since 5.16. KTLS with CCM ciphersuites should be only used
    on these releases.
  - Added '-ktls' option to 's_server' and 's_client' commands to enable the
    KTLS support.
  - Zerocopy KTLS sendfile() support on Linux.
  - The OBJ_ calls are now thread safe using a global lock.
  - New parameter '-digest' for openssl cms command allowing signing
    pre-computed digests and new CMS API functions supporting that
    functionality.
  - OPENSSL_malloc() and other allocation functions now raise errors on
    allocation failures. The callers do not need to explicitly raise errors
    unless they want to for tracing purposes.
  - Added support for Brainpool curves in TLS-1.3.
  - Support for Argon2d, Argon2i, Argon2id KDFs has been added along with
    a basic thread pool implementation for select platforms.</changelog>
  <changelog author="pmonreal@suse.com" date="1729857601">- Update to 3.2.1:
  * Changes between 3.2.0 and 3.2.1:
  - A file in PKCS12 format can contain certificates and keys and may come from
    an untrusted source. The PKCS12 specification allows certain fields to be
    NULL, but OpenSSL did not correctly check for this case. [CVE-2024-0727]
  - When function EVP_PKEY_public_check() is called on RSA public keys,
    a computation is done to confirm that the RSA modulus, n, is composite.
    For valid RSA keys, n is a product of two or more large primes and this
    computation completes quickly. However, if n is an overly large prime,
    then this computation would take a long time. [CVE-2023-6237]
  - Restore the encoding of SM2 PrivateKeyInfo and SubjectPublicKeyInfo to
    have the contained AlgorithmIdentifier.algorithm set to id-ecPublicKey
    rather than SM2.
  - The POLY1305 MAC (message authentication code) implementation in OpenSSL
    for PowerPC CPUs saves the contents of vector registers in different
    order than they are restored. [CVE-2023-6129]
  - Disable building QUIC server utility when OpenSSL is configured with 'no-apps'.
  * The openssl-crypto-policies-support.patch has been merged into
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Rename openssl-Disable-default-provider-for-test-suite.patch and rebase to
    openssl-TESTS-Disable-default-provider-crypto-policies.patch
  * Patches removed in the update:
  - openssl-Add_support_for_Windows_CA_certificate_store.patch
  - openssl-ec-56-bit-Limb-Solinas-Strategy-for-secp384r1.patch
  - openssl-ec-Use-static-linkage-on-nistp521-felem_-square-mul-.patch
  - openssl-ec-powerpc64le-Add-asm-implementation-of-felem_-squa.patch
  - openssl-ecc-Remove-extraneous-parentheses-in-secp384r1.patch
  - openssl-powerpc-ecc-Fix-stack-allocation-secp384r1-asm.patch
  - openssl-CVE-2024-41996.patch
  - openssl-CVE-2023-50782.patch
  - openssl-CVE-2024-9143.patch
  * Patches rebased:
  - openssl-3-use-include-directive.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-DEFAULT_SUSE_cipher.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Force-FIPS.patch
  - openssl-load-legacy-provider.patch
  - openssl-no-html-docs.patch
  - openssl-pkgconfig.patch
  - openssl-ppc64-config.patch
  - openssl-truststore.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116800">- Remove the hardcoded DEFAULT_SUSE cipherlist selection.
  * Remove openssl-DEFAULT_SUSE_cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116801">- Update to 3.2.3:
  * Changes between 3.2.2 and 3.2.3:
  - Fixed possible denial of service in X.509 name checks. [CVE-2024-6119]
  - Fixed possible buffer overread in SSL_select_next_proto(). [CVE-2024-5535]
  * Changes between 3.2.1 and 3.2.2:
  - Fixed potential use after free after SSL_free_buffers() is called. [CVE-2024-4741]
  - Fixed an issue where checking excessively long DSA keys or parameters may
    be very slow. [CVE-2024-4603]
  - Improved EC/DSA nonce generation routines to avoid bias and timing
    side channel leaks.
  - Fixed an issue where some non-default TLS server configurations can cause
    unbounded memory growth when processing TLSv1.3 sessions. [CVE-2024-2511]
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded. This can be used on platforms
    where using atexit() from shared libraries causes crashes on exit.
  - Fixed bug where SSL_export_keying_material() could not be used with QUIC
    connections.
  * Add openssl-skip-quic-pairwise.patch to adapt the pairwise tests.
  * Merge openssl-FIPS-release_num_in_version_string.patch into
    openssl-FIPS-services-minimize.patch
  * Rebase patches:
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Remove-EC-curves.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-3-use-include-directive.patch
  * Remove not needed patches:
  - openssl-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  - openssl-3-FIPS-PCT_rsa_keygen.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730462400">- Support MSA 12 SHA3 on s390x [jsc#PED-10280]
  * Add openssl-3-add_EVP_DigestSqueeze_api.patch
  * Add openssl-3-support-multiple-sha3_squeeze_s390x.patch
  * Add openssl-3-add-xof-state-handling-s3_absorb.patch
  * Add openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  * Add openssl-3-fix-state-handling-sha3_final_s390x.patch
  * Add openssl-3-fix-state-handling-shake_final_s390x.patch
  * Add openssl-3-fix-state-handling-keccak_final_s390x.patch
  * Add openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  * Add openssl-3-add-defines-CPACF-funcs.patch
  * Add openssl-3-add-hw-acceleration-hmac.patch
  * Add openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  * Add openssl-3-fix-s390x_sha3_absorb.patch
  * Add openssl-3-fix-s390x_shake_squeeze.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808000">- Support MSA 10 XTS on s390x [jsc#PED-10273]
  * s390x: Add hardware acceleration for full AES-XTS
  * Add openssl-3-hw-acceleration-aes-xts-s390x.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808001">- Support MSA 11 HMAC on s390x [jsc#PED-10274]
  * Add openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  * Add openssl-3-fix-hmac-digest-detection-s390x.patch
  * Add openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730980800">- Add missing fixes for SHA3_squeeze and quic_multistream_test on
  pcc64 arch. [jsc#PED-10280]
  * Added openssl-3-fix-sha3-squeeze-ppc64.patch
  * Added openssl-3-fix-quic_multistream_test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1731412800">- Do not use HASHBANGPERL to avoid introducing a dependency on the
  perl-base package. [bsc#1233235]</changelog>
  <changelog author="pmonreal@suse.com" date="1734436800">- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
  - openssl-3-use-include-directive.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1738238400">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Security fix: [bsc#1236599, CVE-2024-12797]
  * RFC7250 handshakes with unauthenticated servers don't abort as
    expected.
  * Add openssl-CVE-2024-12797.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1746014400">- Security fix: [bsc#1240366, CVE-2025-27587]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
  <changelog author="mls@suse.de" date="1751371200">- Backport mdless cms signing support [jsc#PED-12895]
  * Add openssl-3-support-mdless-cms.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- FIPS: Fix EMS in crypto-policies FIPS:NO-ENFORCE-EMS
  * [bsc#1230959, bsc#1232326, bsc#1231748, bsc#1246428]
  * Add patch openssl-FIPS-fix-EMS-support.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1753876800">- Increase limit for CRL download [bsc#1247148, bsc#1247144]
  * Add openssl-3-large-CRLs.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1759233600">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl3-CVE-2025-9230.patch</changelog>
</package>
<package pkgid="c3f84dabc1f8cecd39da904879627e51d471296908d23d2ded7b40a9cb3c79eb" name="libopenssl-3-fips-provider" arch="x86_64">
  <version epoch="0" ver="3.2.3" rel="150700.5.24.1"/>
  <changelog author="pmonreal@suse.com" date="1729512000">- Update to 3.1.7:
  * Major changes between OpenSSL 3.1.6 and OpenSSL 3.1.7 [3 Sep 2024]
  - Fixed possible denial of service in X.509 name checks (CVE-2024-6119)
  - Fixed possible buffer overread in SSL_select_next_proto()
    (CVE-2024-5535)
  * Major changes between OpenSSL 3.1.5 and OpenSSL 3.1.6 [4 Jun 2024]
  - Fixed potential use after free after SSL_free_buffers() is
    called (CVE-2024-4741)
  - Fixed an issue where checking excessively long DSA keys or
    parameters may be very slow (CVE-2024-4603)
  - Fixed unbounded memory growth with session handling in TLSv1.3
    (CVE-2024-2511)
  * Major changes between OpenSSL 3.1.4 and OpenSSL 3.1.5 [30 Jan 2024]
  - Fixed PKCS12 Decoding crashes (CVE-2024-0727)
  - Fixed Excessive time spent checking invalid RSA public keys
    [CVE-2023-6237)
  - Fixed POLY1305 MAC implementation corrupting vector registers
    on PowerPC CPUs which support PowerISA 2.07 (CVE-2023-6129)
  - Fix excessive time spent in DH check / generation with large
    Q parameter value (CVE-2023-5678)
  * Update openssl.keyring with BA5473A2B0587B07FB27CF2D216094DFD0CB81EF
  * Rebase patches:
  - openssl-Force-FIPS.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-CVE-2023-50782.patch
  * Remove patches fixed in the update:
  - openssl-Improve-performance-for-6x-unrolling-with-vpermxor-i.patch
  - openssl-CVE-2024-6119.patch openssl-CVE-2024-5535.patch
  - openssl-CVE-2024-4741.patch openssl-CVE-2024-4603.patch
  - openssl-CVE-2024-2511.patch openssl-CVE-2024-0727.patch
  - openssl-CVE-2023-6237.patch openssl-CVE-2023-6129.patch
  - openssl-CVE-2023-5678.patch openssl-3-CVE-2024-41996.patch
  - openssl-Enable-BTI-feature-for-md5-on-aarch64.patch
  - openssl-Fix-EVP_PKEY_CTX_add1_hkdf_info-behavior.patch
  - openssl-Handle-empty-param-in-EVP_PKEY_CTX_add1_hkdf_info.patch
  - reproducible.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729857600">- Update to 3.2.0:
  * Changes between 3.1.x and 3.2.0:
  - Fix excessive time spent in DH check/ generation with large Q parameter
    value. [CVE-2023-5678]
  - The BLAKE2b hash algorithm supports a configurable output length
    by setting the "size" parameter.
  - Added a function to delete objects from store by URI - OSSL_STORE_delete()
    and the corresponding provider-storemgmt API function OSSL_FUNC_store_delete().
  - Added OSSL_FUNC_store_open_ex() provider-storemgmt API function to pass
    a passphrase callback when opening a store.
  - Changed the default salt length used by PBES2 KDF's (PBKDF2 and scrypt)
    from 8 bytes to 16 bytes.
  - Changed the default value of the 'ess_cert_id_alg' configuration
    option which is used to calculate the TSA's public key certificate
    identifier. The default algorithm is updated to be sha256 instead of sha1.
  - Added optimization for SM2 algorithm on aarch64. A new configure option
    'no-sm2-precomp' has been added to disable the precomputed table.
  - Added client side support for QUIC
  - Added secp384r1 implementation using Solinas' reduction to improve
    speed of the NIST P-384 elliptic curve. To enable the implementation
    the build option 'enable-ec_nistp_64_gcc_128' must be used.
  - Improved RFC7468 compliance of the asn1parse command.
  - Added SHA256/192 algorithm support.
  - Added support for securely getting root CA certificate update in CMP.
  - Improved contention on global write locks by using more read locks where
    appropriate.
  - Improved performance of OSSL_PARAM lookups in performance critical
    provider functions.
  - Added the SSL_get0_group_name() function to provide access to the
    name of the group used for the TLS key exchange.
  - Provide a new configure option 'no-http' that can be used to disable the
    HTTP support. Provide new configure options 'no-apps' and 'no-docs' to
    disable building the openssl command line application and the documentation.
  - Provide a new configure option 'no-ecx' that can be used to disable the
    X25519, X448, and EdDSA support.
  - When multiple OSSL_KDF_PARAM_INFO parameters are passed to
    the EVP_KDF_CTX_set_params() function they are now concatenated not just
    for the HKDF algorithm but also for SSKDF and X9.63 KDF algorithms.
  - Added OSSL_FUNC_keymgmt_im/export_types_ex() provider functions that get
    the provider context as a parameter.
  - TLS round-trip time calculation was added by a Brigham Young University
    Capstone team partnering with Sandia National Laboratories. A new function
    in ssl_lib titled SSL_get_handshake_rtt will calculate and retrieve this
    value.
  - Added the "-quic" option to s_client to enable connectivity to QUIC servers.
    QUIC requires the use of ALPN, so this must be specified via the "-alpn"
    option. Use of the "advanced" s_client command command via the "-adv" option
    is recommended.
  - Added an "advanced" command mode to s_client. Use this with the "-adv" option.
  - Add Raw Public Key (RFC7250) support.
  - Added support for modular exponentiation and CRT offloading for the
    S390x architecture.
  - Added further assembler code for the RISC-V architecture.
  - Added EC_GROUP_to_params() which creates an OSSL_PARAM array
    from a given EC_GROUP.
  - Improved support for non-default library contexts and property queries
    when parsing PKCS#12 files.
  - Implemented support for all five instances of EdDSA from RFC8032:
    Ed25519, Ed25519ctx, Ed25519ph, Ed448, and Ed448ph.
    The streaming is not yet supported for the HashEdDSA variants
    (Ed25519ph and Ed448ph).
  - Added SM4 optimization for ARM processors using ASIMD and AES HW instructions.
  - Implemented SM4-XTS support.
  - Added platform-agnostic OSSL_sleep() function.
  - Implemented deterministic ECDSA signatures (RFC6979) support.
  - Implemented AES-GCM-SIV (RFC8452) support.
  - Added support for pluggable (provider-based) TLS signature algorithms.
    This enables TLS 1.3 authentication operations with algorithms embedded
    in providers not included by default in OpenSSL. In combination with
    the already available pluggable KEM and X.509 support, this enables
    for example suitable providers to deliver post-quantum or quantum-safe
    cryptography to OpenSSL users.
  - Added support for pluggable (provider-based) CMS signature algorithms.
    This enables CMS sign and verify operations with algorithms embedded
    in providers not included by default in OpenSSL.
  - Implemented HPKE DHKEM support in providers used by HPKE (RFC9180) API.
  - Add support for certificate compression (RFC8879), including
    library support for Brotli and Zstandard compression.
  - Add the ability to add custom attributes to PKCS12 files. Add a new API
    PKCS12_create_ex2, identical to the existing PKCS12_create_ex but allows
    for a user specified callback and optional argument.
    Added a new PKCS12_SAFEBAG_set0_attr, which allows for a new attr to be
    added to the existing STACK_OF attrs.
  - Major refactor of the libssl record layer.
  - Add a mac salt length option for the pkcs12 command.
  - Add more SRTP protection profiles from RFC8723 and RFC8269.
  - Extended Kernel TLS (KTLS) to support TLS 1.3 receive offload.
  - Add support for TCP Fast Open (RFC7413) to macOS, Linux, and FreeBSD where
    supported and enabled.
  - Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489)
    to the list of ciphersuites providing Perfect Forward Secrecy as
    required by SECLEVEL &gt;= 3.
  - Add new SSL APIs to aid in efficiently implementing TLS/SSL fingerprinting.
    The SSL_CTRL_GET_IANA_GROUPS control code, exposed as the
    SSL_get0_iana_groups() function-like macro, retrieves the list of
    supported groups sent by the peer.
  - Fixed PEM_write_bio_PKCS8PrivateKey() and PEM_write_bio_PKCS8PrivateKey_nid()
    to make it possible to use empty passphrase strings.
  - The PKCS12_parse() function now supports MAC-less PKCS12 files.
  - Added ASYNC_set_mem_functions() and ASYNC_get_mem_functions() calls to be able
    to change functions used for allocating the memory of asynchronous call stack.
  - Added support for signed BIGNUMs in the OSSL_PARAM APIs.
  - A failure exit code is returned when using the openssl x509 command to check
    certificate attributes and the checks fail.
  - The default SSL/TLS security level has been changed from 1 to 2. RSA,
    DSA and DH keys of 1024 bits and above and less than 2048 bits and ECC keys
    of 160 bits and above and less than 224 bits were previously accepted by
    default but are now no longer allowed. By default TLS compression was
    already disabled in previous OpenSSL versions. At security level 2 it cannot
    be enabled.
  - The SSL_CTX_set_cipher_list family functions now accept ciphers using their
    IANA standard names.
  - The PVK key derivation function has been moved from b2i_PVK_bio_ex() into
    the legacy crypto provider as an EVP_KDF. Applications requiring this KDF
    will need to load the legacy crypto provider.
  - CCM8 cipher suites in TLS have been downgraded to security level zero
    because they use a short authentication tag which lowers their strength.
  - Subject or issuer names in X.509 objects are now displayed as UTF-8 strings
    by default. Also spaces surrounding '=' in DN output are removed.
  - Add X.509 certificate codeSigning purpose and related checks on key usage and
    extended key usage of the leaf certificate according to the CA/Browser Forum.
  - The 'x509', 'ca', and 'req' apps now produce X.509 v3 certificates.
    The '-x509v1' option of 'req' prefers generation of X.509 v1 certificates.
    'X509_sign()' and 'X509_sign_ctx()' make sure that the certificate has
    X.509 version 3 if the certificate information includes X.509 extensions.
  - Fix and extend certificate handling and the apps 'x509', 'verify' etc.
    such as adding a trace facility for debugging certificate chain building.
  - Various fixes and extensions to the CMP+CRMF implementation and the 'cmp' app
    in particular supporting requests for central key generation, generalized
    polling, and various types of genm/genp exchanges defined in CMP Updates.
  - Fixes and extensions to the HTTP client and to the HTTP server in 'apps/'
    like correcting the TLS and proxy support and adding tracing for debugging.
  - Extended the CMS API for handling 'CMS_SignedData' and 'CMS_EnvelopedData'.
  - 'CMS_add0_cert()' and 'CMS_add1_cert()' no longer throw an error if
    a certificate to be added is already present. 'CMS_sign_ex()' and
    'CMS_sign()' now ignore any duplicate certificates in their 'certs' argument
    and no longer throw an error for them.
  - Added BIO_s_dgram_pair() and BIO_s_dgram_mem() that provide memory-based
    BIOs with datagram semantics and support for BIO_sendmmsg() and BIO_recvmmsg()
    calls. They can be used as the transport BIOs for QUIC.
  - Add new BIO_sendmmsg() and BIO_recvmmsg() BIO methods which allow
    sending and receiving multiple messages in a single call. An implementation
    is provided for BIO_dgram. For further details, see BIO_sendmmsg(3).
  - Support for loading root certificates from the Windows certificate store
    has been added.
  - Enable KTLS with the TLS 1.3 CCM mode ciphersuites. Note that some linux
    kernel versions that support KTLS have a known bug in CCM processing. That
    has been fixed in stable releases starting from 5.4.164, 5.10.84, 5.15.7,
    and all releases since 5.16. KTLS with CCM ciphersuites should be only used
    on these releases.
  - Added '-ktls' option to 's_server' and 's_client' commands to enable the
    KTLS support.
  - Zerocopy KTLS sendfile() support on Linux.
  - The OBJ_ calls are now thread safe using a global lock.
  - New parameter '-digest' for openssl cms command allowing signing
    pre-computed digests and new CMS API functions supporting that
    functionality.
  - OPENSSL_malloc() and other allocation functions now raise errors on
    allocation failures. The callers do not need to explicitly raise errors
    unless they want to for tracing purposes.
  - Added support for Brainpool curves in TLS-1.3.
  - Support for Argon2d, Argon2i, Argon2id KDFs has been added along with
    a basic thread pool implementation for select platforms.</changelog>
  <changelog author="pmonreal@suse.com" date="1729857601">- Update to 3.2.1:
  * Changes between 3.2.0 and 3.2.1:
  - A file in PKCS12 format can contain certificates and keys and may come from
    an untrusted source. The PKCS12 specification allows certain fields to be
    NULL, but OpenSSL did not correctly check for this case. [CVE-2024-0727]
  - When function EVP_PKEY_public_check() is called on RSA public keys,
    a computation is done to confirm that the RSA modulus, n, is composite.
    For valid RSA keys, n is a product of two or more large primes and this
    computation completes quickly. However, if n is an overly large prime,
    then this computation would take a long time. [CVE-2023-6237]
  - Restore the encoding of SM2 PrivateKeyInfo and SubjectPublicKeyInfo to
    have the contained AlgorithmIdentifier.algorithm set to id-ecPublicKey
    rather than SM2.
  - The POLY1305 MAC (message authentication code) implementation in OpenSSL
    for PowerPC CPUs saves the contents of vector registers in different
    order than they are restored. [CVE-2023-6129]
  - Disable building QUIC server utility when OpenSSL is configured with 'no-apps'.
  * The openssl-crypto-policies-support.patch has been merged into
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Rename openssl-Disable-default-provider-for-test-suite.patch and rebase to
    openssl-TESTS-Disable-default-provider-crypto-policies.patch
  * Patches removed in the update:
  - openssl-Add_support_for_Windows_CA_certificate_store.patch
  - openssl-ec-56-bit-Limb-Solinas-Strategy-for-secp384r1.patch
  - openssl-ec-Use-static-linkage-on-nistp521-felem_-square-mul-.patch
  - openssl-ec-powerpc64le-Add-asm-implementation-of-felem_-squa.patch
  - openssl-ecc-Remove-extraneous-parentheses-in-secp384r1.patch
  - openssl-powerpc-ecc-Fix-stack-allocation-secp384r1-asm.patch
  - openssl-CVE-2024-41996.patch
  - openssl-CVE-2023-50782.patch
  - openssl-CVE-2024-9143.patch
  * Patches rebased:
  - openssl-3-use-include-directive.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-DEFAULT_SUSE_cipher.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Force-FIPS.patch
  - openssl-load-legacy-provider.patch
  - openssl-no-html-docs.patch
  - openssl-pkgconfig.patch
  - openssl-ppc64-config.patch
  - openssl-truststore.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116800">- Remove the hardcoded DEFAULT_SUSE cipherlist selection.
  * Remove openssl-DEFAULT_SUSE_cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116801">- Update to 3.2.3:
  * Changes between 3.2.2 and 3.2.3:
  - Fixed possible denial of service in X.509 name checks. [CVE-2024-6119]
  - Fixed possible buffer overread in SSL_select_next_proto(). [CVE-2024-5535]
  * Changes between 3.2.1 and 3.2.2:
  - Fixed potential use after free after SSL_free_buffers() is called. [CVE-2024-4741]
  - Fixed an issue where checking excessively long DSA keys or parameters may
    be very slow. [CVE-2024-4603]
  - Improved EC/DSA nonce generation routines to avoid bias and timing
    side channel leaks.
  - Fixed an issue where some non-default TLS server configurations can cause
    unbounded memory growth when processing TLSv1.3 sessions. [CVE-2024-2511]
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded. This can be used on platforms
    where using atexit() from shared libraries causes crashes on exit.
  - Fixed bug where SSL_export_keying_material() could not be used with QUIC
    connections.
  * Add openssl-skip-quic-pairwise.patch to adapt the pairwise tests.
  * Merge openssl-FIPS-release_num_in_version_string.patch into
    openssl-FIPS-services-minimize.patch
  * Rebase patches:
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Remove-EC-curves.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-3-use-include-directive.patch
  * Remove not needed patches:
  - openssl-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  - openssl-3-FIPS-PCT_rsa_keygen.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730462400">- Support MSA 12 SHA3 on s390x [jsc#PED-10280]
  * Add openssl-3-add_EVP_DigestSqueeze_api.patch
  * Add openssl-3-support-multiple-sha3_squeeze_s390x.patch
  * Add openssl-3-add-xof-state-handling-s3_absorb.patch
  * Add openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  * Add openssl-3-fix-state-handling-sha3_final_s390x.patch
  * Add openssl-3-fix-state-handling-shake_final_s390x.patch
  * Add openssl-3-fix-state-handling-keccak_final_s390x.patch
  * Add openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  * Add openssl-3-add-defines-CPACF-funcs.patch
  * Add openssl-3-add-hw-acceleration-hmac.patch
  * Add openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  * Add openssl-3-fix-s390x_sha3_absorb.patch
  * Add openssl-3-fix-s390x_shake_squeeze.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808000">- Support MSA 10 XTS on s390x [jsc#PED-10273]
  * s390x: Add hardware acceleration for full AES-XTS
  * Add openssl-3-hw-acceleration-aes-xts-s390x.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808001">- Support MSA 11 HMAC on s390x [jsc#PED-10274]
  * Add openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  * Add openssl-3-fix-hmac-digest-detection-s390x.patch
  * Add openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730980800">- Add missing fixes for SHA3_squeeze and quic_multistream_test on
  pcc64 arch. [jsc#PED-10280]
  * Added openssl-3-fix-sha3-squeeze-ppc64.patch
  * Added openssl-3-fix-quic_multistream_test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1731412800">- Do not use HASHBANGPERL to avoid introducing a dependency on the
  perl-base package. [bsc#1233235]</changelog>
  <changelog author="pmonreal@suse.com" date="1734436800">- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
  - openssl-3-use-include-directive.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1738238400">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Security fix: [bsc#1236599, CVE-2024-12797]
  * RFC7250 handshakes with unauthenticated servers don't abort as
    expected.
  * Add openssl-CVE-2024-12797.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1746014400">- Security fix: [bsc#1240366, CVE-2025-27587]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
  <changelog author="mls@suse.de" date="1751371200">- Backport mdless cms signing support [jsc#PED-12895]
  * Add openssl-3-support-mdless-cms.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- FIPS: Fix EMS in crypto-policies FIPS:NO-ENFORCE-EMS
  * [bsc#1230959, bsc#1232326, bsc#1231748, bsc#1246428]
  * Add patch openssl-FIPS-fix-EMS-support.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1753876800">- Increase limit for CRL download [bsc#1247148, bsc#1247144]
  * Add openssl-3-large-CRLs.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1759233600">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl3-CVE-2025-9230.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1768824000">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795]
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * Stack buffer overflow in CMS AuthEnvelopedData parsing
  - openssl-CVE-2025-15467.patch [bsc#1256830, CVE-2025-15467]
  - openssl-CVE-2025-15467-comments.patch
  - openssl-CVE-2025-15467-test.patch</changelog>
</package>
<package pkgid="06eb851713f6dfdd35334d33abd540303cdc84bc192ab1377290935e039f2714" name="libopenssl-3-fips-provider" arch="x86_64">
  <version epoch="0" ver="3.2.3" rel="150700.5.31.1"/>
  <changelog author="pmonreal@suse.com" date="1730116800">- Remove the hardcoded DEFAULT_SUSE cipherlist selection.
  * Remove openssl-DEFAULT_SUSE_cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116801">- Update to 3.2.3:
  * Changes between 3.2.2 and 3.2.3:
  - Fixed possible denial of service in X.509 name checks. [CVE-2024-6119]
  - Fixed possible buffer overread in SSL_select_next_proto(). [CVE-2024-5535]
  * Changes between 3.2.1 and 3.2.2:
  - Fixed potential use after free after SSL_free_buffers() is called. [CVE-2024-4741]
  - Fixed an issue where checking excessively long DSA keys or parameters may
    be very slow. [CVE-2024-4603]
  - Improved EC/DSA nonce generation routines to avoid bias and timing
    side channel leaks.
  - Fixed an issue where some non-default TLS server configurations can cause
    unbounded memory growth when processing TLSv1.3 sessions. [CVE-2024-2511]
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded. This can be used on platforms
    where using atexit() from shared libraries causes crashes on exit.
  - Fixed bug where SSL_export_keying_material() could not be used with QUIC
    connections.
  * Add openssl-skip-quic-pairwise.patch to adapt the pairwise tests.
  * Merge openssl-FIPS-release_num_in_version_string.patch into
    openssl-FIPS-services-minimize.patch
  * Rebase patches:
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Remove-EC-curves.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-3-use-include-directive.patch
  * Remove not needed patches:
  - openssl-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  - openssl-3-FIPS-PCT_rsa_keygen.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730462400">- Support MSA 12 SHA3 on s390x [jsc#PED-10280]
  * Add openssl-3-add_EVP_DigestSqueeze_api.patch
  * Add openssl-3-support-multiple-sha3_squeeze_s390x.patch
  * Add openssl-3-add-xof-state-handling-s3_absorb.patch
  * Add openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  * Add openssl-3-fix-state-handling-sha3_final_s390x.patch
  * Add openssl-3-fix-state-handling-shake_final_s390x.patch
  * Add openssl-3-fix-state-handling-keccak_final_s390x.patch
  * Add openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  * Add openssl-3-add-defines-CPACF-funcs.patch
  * Add openssl-3-add-hw-acceleration-hmac.patch
  * Add openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  * Add openssl-3-fix-s390x_sha3_absorb.patch
  * Add openssl-3-fix-s390x_shake_squeeze.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808000">- Support MSA 10 XTS on s390x [jsc#PED-10273]
  * s390x: Add hardware acceleration for full AES-XTS
  * Add openssl-3-hw-acceleration-aes-xts-s390x.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808001">- Support MSA 11 HMAC on s390x [jsc#PED-10274]
  * Add openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  * Add openssl-3-fix-hmac-digest-detection-s390x.patch
  * Add openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730980800">- Add missing fixes for SHA3_squeeze and quic_multistream_test on
  pcc64 arch. [jsc#PED-10280]
  * Added openssl-3-fix-sha3-squeeze-ppc64.patch
  * Added openssl-3-fix-quic_multistream_test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1731412800">- Do not use HASHBANGPERL to avoid introducing a dependency on the
  perl-base package. [bsc#1233235]</changelog>
  <changelog author="pmonreal@suse.com" date="1734436800">- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
  - openssl-3-use-include-directive.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1738238400">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Security fix: [bsc#1236599, CVE-2024-12797]
  * RFC7250 handshakes with unauthenticated servers don't abort as
    expected.
  * Add openssl-CVE-2024-12797.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1746014400">- Security fix: [bsc#1240366, CVE-2025-27587]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
  <changelog author="mls@suse.de" date="1751371200">- Backport mdless cms signing support [jsc#PED-12895]
  * Add openssl-3-support-mdless-cms.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- FIPS: Fix EMS in crypto-policies FIPS:NO-ENFORCE-EMS
  * [bsc#1230959, bsc#1232326, bsc#1231748, bsc#1246428]
  * Add patch openssl-FIPS-fix-EMS-support.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1753876800">- Increase limit for CRL download [bsc#1247148, bsc#1247144]
  * Add openssl-3-large-CRLs.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1759233600">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl3-CVE-2025-9230.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1768824000">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795]
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * Stack buffer overflow in CMS AuthEnvelopedData parsing
  - openssl-CVE-2025-15467.patch [bsc#1256830, CVE-2025-15467]
  - openssl-CVE-2025-15467-comments.patch
  - openssl-CVE-2025-15467-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1774526400">- Security fixes:
  * CVE-2026-28387: Potential use-after-free in DANE client code
    (bsc#1260441)
  * CVE-2026-28388: NULL Pointer Dereference When Processing a
    Delta (bsc#1260442)
  * CVE-2026-28389: Possible NULL dereference when processing CMS
    KeyAgreeRecipientInfo (bsc#1260443)
  * CVE-2026-31789: Heap buffer overflow in hexadecimal conversion
    (bsc#1260444)
  * CVE-2026-31790: Incorrect failure handling in RSA KEM RSASVE
    encapsulation (bsc#1260445)
  * NULL pointer dereference when processing an OCSP response
    (bsc#1260446)
  * Add patches: openssl-CVE-2026-28387.patch
    openssl-CVE-2026-28388.patch openssl-CVE-2026-28388-tests.patch
    openssl-CVE-2026-28389.patch openssl-CVE-2026-31789.patch
    openssl-CVE-2026-31790.patch openssl-CVE-2026-31790-tests.patch
    openssl-NULL-pointer-dereference-in-ocsp_find_signer_sk.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1775649600">- Security fix:
  * CVE-2026-28390: NULL pointer dereference during processing of a crafted
    CMS EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678)
  * Add openssl-CVE-2026-28390.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1775822400">- Enable MD2 in legacy provider (jsc#PED-15724)</changelog>
</package>
<package pkgid="3b94a1586854d3eba32fab777bb46a17626a424ee22ffe141a0a7e7bcf20da58" name="libopenssl-3-fips-provider" arch="x86_64">
  <version epoch="0" ver="3.2.3" rel="150700.5.5.1"/>
  <changelog author="pmonreal@suse.com" date="1721649600">- Build with no-afalgeng [bsc#1226463]</changelog>
  <changelog author="abergmann@suse.com" date="1724328000">- Security fix: [bsc#1229465, CVE-2024-6119]
  * possible denial of service in X.509 name checks
  * openssl-CVE-2024-6119.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1727265600">- Security fix: [bsc#1230698, CVE-2024-41996]
  * Validating the order of the public keys in the Diffie-Hellman
    Key Agreement Protocol, when an approved safe prime is used.
  * Added openssl-3-CVE-2024-41996.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1220262, CVE-2023-50782]
  * Implicit rejection in PKCS#1 v1.5
  * Add openssl-CVE-2023-50782.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166401">- Security fix: [bsc#1231741, CVE-2024-9143]
  * Low-level invalid GF(2^m) parameters lead to OOB memory access
  * Add openssl-CVE-2024-9143.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729512000">- Update to 3.1.7:
  * Major changes between OpenSSL 3.1.6 and OpenSSL 3.1.7 [3 Sep 2024]
  - Fixed possible denial of service in X.509 name checks (CVE-2024-6119)
  - Fixed possible buffer overread in SSL_select_next_proto()
    (CVE-2024-5535)
  * Major changes between OpenSSL 3.1.5 and OpenSSL 3.1.6 [4 Jun 2024]
  - Fixed potential use after free after SSL_free_buffers() is
    called (CVE-2024-4741)
  - Fixed an issue where checking excessively long DSA keys or
    parameters may be very slow (CVE-2024-4603)
  - Fixed unbounded memory growth with session handling in TLSv1.3
    (CVE-2024-2511)
  * Major changes between OpenSSL 3.1.4 and OpenSSL 3.1.5 [30 Jan 2024]
  - Fixed PKCS12 Decoding crashes (CVE-2024-0727)
  - Fixed Excessive time spent checking invalid RSA public keys
    [CVE-2023-6237)
  - Fixed POLY1305 MAC implementation corrupting vector registers
    on PowerPC CPUs which support PowerISA 2.07 (CVE-2023-6129)
  - Fix excessive time spent in DH check / generation with large
    Q parameter value (CVE-2023-5678)
  * Update openssl.keyring with BA5473A2B0587B07FB27CF2D216094DFD0CB81EF
  * Rebase patches:
  - openssl-Force-FIPS.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-CVE-2023-50782.patch
  * Remove patches fixed in the update:
  - openssl-Improve-performance-for-6x-unrolling-with-vpermxor-i.patch
  - openssl-CVE-2024-6119.patch openssl-CVE-2024-5535.patch
  - openssl-CVE-2024-4741.patch openssl-CVE-2024-4603.patch
  - openssl-CVE-2024-2511.patch openssl-CVE-2024-0727.patch
  - openssl-CVE-2023-6237.patch openssl-CVE-2023-6129.patch
  - openssl-CVE-2023-5678.patch openssl-3-CVE-2024-41996.patch
  - openssl-Enable-BTI-feature-for-md5-on-aarch64.patch
  - openssl-Fix-EVP_PKEY_CTX_add1_hkdf_info-behavior.patch
  - openssl-Handle-empty-param-in-EVP_PKEY_CTX_add1_hkdf_info.patch
  - reproducible.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729857600">- Update to 3.2.0:
  * Changes between 3.1.x and 3.2.0:
  - Fix excessive time spent in DH check/ generation with large Q parameter
    value. [CVE-2023-5678]
  - The BLAKE2b hash algorithm supports a configurable output length
    by setting the "size" parameter.
  - Added a function to delete objects from store by URI - OSSL_STORE_delete()
    and the corresponding provider-storemgmt API function OSSL_FUNC_store_delete().
  - Added OSSL_FUNC_store_open_ex() provider-storemgmt API function to pass
    a passphrase callback when opening a store.
  - Changed the default salt length used by PBES2 KDF's (PBKDF2 and scrypt)
    from 8 bytes to 16 bytes.
  - Changed the default value of the 'ess_cert_id_alg' configuration
    option which is used to calculate the TSA's public key certificate
    identifier. The default algorithm is updated to be sha256 instead of sha1.
  - Added optimization for SM2 algorithm on aarch64. A new configure option
    'no-sm2-precomp' has been added to disable the precomputed table.
  - Added client side support for QUIC
  - Added secp384r1 implementation using Solinas' reduction to improve
    speed of the NIST P-384 elliptic curve. To enable the implementation
    the build option 'enable-ec_nistp_64_gcc_128' must be used.
  - Improved RFC7468 compliance of the asn1parse command.
  - Added SHA256/192 algorithm support.
  - Added support for securely getting root CA certificate update in CMP.
  - Improved contention on global write locks by using more read locks where
    appropriate.
  - Improved performance of OSSL_PARAM lookups in performance critical
    provider functions.
  - Added the SSL_get0_group_name() function to provide access to the
    name of the group used for the TLS key exchange.
  - Provide a new configure option 'no-http' that can be used to disable the
    HTTP support. Provide new configure options 'no-apps' and 'no-docs' to
    disable building the openssl command line application and the documentation.
  - Provide a new configure option 'no-ecx' that can be used to disable the
    X25519, X448, and EdDSA support.
  - When multiple OSSL_KDF_PARAM_INFO parameters are passed to
    the EVP_KDF_CTX_set_params() function they are now concatenated not just
    for the HKDF algorithm but also for SSKDF and X9.63 KDF algorithms.
  - Added OSSL_FUNC_keymgmt_im/export_types_ex() provider functions that get
    the provider context as a parameter.
  - TLS round-trip time calculation was added by a Brigham Young University
    Capstone team partnering with Sandia National Laboratories. A new function
    in ssl_lib titled SSL_get_handshake_rtt will calculate and retrieve this
    value.
  - Added the "-quic" option to s_client to enable connectivity to QUIC servers.
    QUIC requires the use of ALPN, so this must be specified via the "-alpn"
    option. Use of the "advanced" s_client command command via the "-adv" option
    is recommended.
  - Added an "advanced" command mode to s_client. Use this with the "-adv" option.
  - Add Raw Public Key (RFC7250) support.
  - Added support for modular exponentiation and CRT offloading for the
    S390x architecture.
  - Added further assembler code for the RISC-V architecture.
  - Added EC_GROUP_to_params() which creates an OSSL_PARAM array
    from a given EC_GROUP.
  - Improved support for non-default library contexts and property queries
    when parsing PKCS#12 files.
  - Implemented support for all five instances of EdDSA from RFC8032:
    Ed25519, Ed25519ctx, Ed25519ph, Ed448, and Ed448ph.
    The streaming is not yet supported for the HashEdDSA variants
    (Ed25519ph and Ed448ph).
  - Added SM4 optimization for ARM processors using ASIMD and AES HW instructions.
  - Implemented SM4-XTS support.
  - Added platform-agnostic OSSL_sleep() function.
  - Implemented deterministic ECDSA signatures (RFC6979) support.
  - Implemented AES-GCM-SIV (RFC8452) support.
  - Added support for pluggable (provider-based) TLS signature algorithms.
    This enables TLS 1.3 authentication operations with algorithms embedded
    in providers not included by default in OpenSSL. In combination with
    the already available pluggable KEM and X.509 support, this enables
    for example suitable providers to deliver post-quantum or quantum-safe
    cryptography to OpenSSL users.
  - Added support for pluggable (provider-based) CMS signature algorithms.
    This enables CMS sign and verify operations with algorithms embedded
    in providers not included by default in OpenSSL.
  - Implemented HPKE DHKEM support in providers used by HPKE (RFC9180) API.
  - Add support for certificate compression (RFC8879), including
    library support for Brotli and Zstandard compression.
  - Add the ability to add custom attributes to PKCS12 files. Add a new API
    PKCS12_create_ex2, identical to the existing PKCS12_create_ex but allows
    for a user specified callback and optional argument.
    Added a new PKCS12_SAFEBAG_set0_attr, which allows for a new attr to be
    added to the existing STACK_OF attrs.
  - Major refactor of the libssl record layer.
  - Add a mac salt length option for the pkcs12 command.
  - Add more SRTP protection profiles from RFC8723 and RFC8269.
  - Extended Kernel TLS (KTLS) to support TLS 1.3 receive offload.
  - Add support for TCP Fast Open (RFC7413) to macOS, Linux, and FreeBSD where
    supported and enabled.
  - Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489)
    to the list of ciphersuites providing Perfect Forward Secrecy as
    required by SECLEVEL &gt;= 3.
  - Add new SSL APIs to aid in efficiently implementing TLS/SSL fingerprinting.
    The SSL_CTRL_GET_IANA_GROUPS control code, exposed as the
    SSL_get0_iana_groups() function-like macro, retrieves the list of
    supported groups sent by the peer.
  - Fixed PEM_write_bio_PKCS8PrivateKey() and PEM_write_bio_PKCS8PrivateKey_nid()
    to make it possible to use empty passphrase strings.
  - The PKCS12_parse() function now supports MAC-less PKCS12 files.
  - Added ASYNC_set_mem_functions() and ASYNC_get_mem_functions() calls to be able
    to change functions used for allocating the memory of asynchronous call stack.
  - Added support for signed BIGNUMs in the OSSL_PARAM APIs.
  - A failure exit code is returned when using the openssl x509 command to check
    certificate attributes and the checks fail.
  - The default SSL/TLS security level has been changed from 1 to 2. RSA,
    DSA and DH keys of 1024 bits and above and less than 2048 bits and ECC keys
    of 160 bits and above and less than 224 bits were previously accepted by
    default but are now no longer allowed. By default TLS compression was
    already disabled in previous OpenSSL versions. At security level 2 it cannot
    be enabled.
  - The SSL_CTX_set_cipher_list family functions now accept ciphers using their
    IANA standard names.
  - The PVK key derivation function has been moved from b2i_PVK_bio_ex() into
    the legacy crypto provider as an EVP_KDF. Applications requiring this KDF
    will need to load the legacy crypto provider.
  - CCM8 cipher suites in TLS have been downgraded to security level zero
    because they use a short authentication tag which lowers their strength.
  - Subject or issuer names in X.509 objects are now displayed as UTF-8 strings
    by default. Also spaces surrounding '=' in DN output are removed.
  - Add X.509 certificate codeSigning purpose and related checks on key usage and
    extended key usage of the leaf certificate according to the CA/Browser Forum.
  - The 'x509', 'ca', and 'req' apps now produce X.509 v3 certificates.
    The '-x509v1' option of 'req' prefers generation of X.509 v1 certificates.
    'X509_sign()' and 'X509_sign_ctx()' make sure that the certificate has
    X.509 version 3 if the certificate information includes X.509 extensions.
  - Fix and extend certificate handling and the apps 'x509', 'verify' etc.
    such as adding a trace facility for debugging certificate chain building.
  - Various fixes and extensions to the CMP+CRMF implementation and the 'cmp' app
    in particular supporting requests for central key generation, generalized
    polling, and various types of genm/genp exchanges defined in CMP Updates.
  - Fixes and extensions to the HTTP client and to the HTTP server in 'apps/'
    like correcting the TLS and proxy support and adding tracing for debugging.
  - Extended the CMS API for handling 'CMS_SignedData' and 'CMS_EnvelopedData'.
  - 'CMS_add0_cert()' and 'CMS_add1_cert()' no longer throw an error if
    a certificate to be added is already present. 'CMS_sign_ex()' and
    'CMS_sign()' now ignore any duplicate certificates in their 'certs' argument
    and no longer throw an error for them.
  - Added BIO_s_dgram_pair() and BIO_s_dgram_mem() that provide memory-based
    BIOs with datagram semantics and support for BIO_sendmmsg() and BIO_recvmmsg()
    calls. They can be used as the transport BIOs for QUIC.
  - Add new BIO_sendmmsg() and BIO_recvmmsg() BIO methods which allow
    sending and receiving multiple messages in a single call. An implementation
    is provided for BIO_dgram. For further details, see BIO_sendmmsg(3).
  - Support for loading root certificates from the Windows certificate store
    has been added.
  - Enable KTLS with the TLS 1.3 CCM mode ciphersuites. Note that some linux
    kernel versions that support KTLS have a known bug in CCM processing. That
    has been fixed in stable releases starting from 5.4.164, 5.10.84, 5.15.7,
    and all releases since 5.16. KTLS with CCM ciphersuites should be only used
    on these releases.
  - Added '-ktls' option to 's_server' and 's_client' commands to enable the
    KTLS support.
  - Zerocopy KTLS sendfile() support on Linux.
  - The OBJ_ calls are now thread safe using a global lock.
  - New parameter '-digest' for openssl cms command allowing signing
    pre-computed digests and new CMS API functions supporting that
    functionality.
  - OPENSSL_malloc() and other allocation functions now raise errors on
    allocation failures. The callers do not need to explicitly raise errors
    unless they want to for tracing purposes.
  - Added support for Brainpool curves in TLS-1.3.
  - Support for Argon2d, Argon2i, Argon2id KDFs has been added along with
    a basic thread pool implementation for select platforms.</changelog>
  <changelog author="pmonreal@suse.com" date="1729857601">- Update to 3.2.1:
  * Changes between 3.2.0 and 3.2.1:
  - A file in PKCS12 format can contain certificates and keys and may come from
    an untrusted source. The PKCS12 specification allows certain fields to be
    NULL, but OpenSSL did not correctly check for this case. [CVE-2024-0727]
  - When function EVP_PKEY_public_check() is called on RSA public keys,
    a computation is done to confirm that the RSA modulus, n, is composite.
    For valid RSA keys, n is a product of two or more large primes and this
    computation completes quickly. However, if n is an overly large prime,
    then this computation would take a long time. [CVE-2023-6237]
  - Restore the encoding of SM2 PrivateKeyInfo and SubjectPublicKeyInfo to
    have the contained AlgorithmIdentifier.algorithm set to id-ecPublicKey
    rather than SM2.
  - The POLY1305 MAC (message authentication code) implementation in OpenSSL
    for PowerPC CPUs saves the contents of vector registers in different
    order than they are restored. [CVE-2023-6129]
  - Disable building QUIC server utility when OpenSSL is configured with 'no-apps'.
  * The openssl-crypto-policies-support.patch has been merged into
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Rename openssl-Disable-default-provider-for-test-suite.patch and rebase to
    openssl-TESTS-Disable-default-provider-crypto-policies.patch
  * Patches removed in the update:
  - openssl-Add_support_for_Windows_CA_certificate_store.patch
  - openssl-ec-56-bit-Limb-Solinas-Strategy-for-secp384r1.patch
  - openssl-ec-Use-static-linkage-on-nistp521-felem_-square-mul-.patch
  - openssl-ec-powerpc64le-Add-asm-implementation-of-felem_-squa.patch
  - openssl-ecc-Remove-extraneous-parentheses-in-secp384r1.patch
  - openssl-powerpc-ecc-Fix-stack-allocation-secp384r1-asm.patch
  - openssl-CVE-2024-41996.patch
  - openssl-CVE-2023-50782.patch
  - openssl-CVE-2024-9143.patch
  * Patches rebased:
  - openssl-3-use-include-directive.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-DEFAULT_SUSE_cipher.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Force-FIPS.patch
  - openssl-load-legacy-provider.patch
  - openssl-no-html-docs.patch
  - openssl-pkgconfig.patch
  - openssl-ppc64-config.patch
  - openssl-truststore.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116800">- Remove the hardcoded DEFAULT_SUSE cipherlist selection.
  * Remove openssl-DEFAULT_SUSE_cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116801">- Update to 3.2.3:
  * Changes between 3.2.2 and 3.2.3:
  - Fixed possible denial of service in X.509 name checks. [CVE-2024-6119]
  - Fixed possible buffer overread in SSL_select_next_proto(). [CVE-2024-5535]
  * Changes between 3.2.1 and 3.2.2:
  - Fixed potential use after free after SSL_free_buffers() is called. [CVE-2024-4741]
  - Fixed an issue where checking excessively long DSA keys or parameters may
    be very slow. [CVE-2024-4603]
  - Improved EC/DSA nonce generation routines to avoid bias and timing
    side channel leaks.
  - Fixed an issue where some non-default TLS server configurations can cause
    unbounded memory growth when processing TLSv1.3 sessions. [CVE-2024-2511]
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded. This can be used on platforms
    where using atexit() from shared libraries causes crashes on exit.
  - Fixed bug where SSL_export_keying_material() could not be used with QUIC
    connections.
  * Add openssl-skip-quic-pairwise.patch to adapt the pairwise tests.
  * Merge openssl-FIPS-release_num_in_version_string.patch into
    openssl-FIPS-services-minimize.patch
  * Rebase patches:
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Remove-EC-curves.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-3-use-include-directive.patch
  * Remove not needed patches:
  - openssl-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  - openssl-3-FIPS-PCT_rsa_keygen.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730462400">- Support MSA 12 SHA3 on s390x [jsc#PED-10280]
  * Add openssl-3-add_EVP_DigestSqueeze_api.patch
  * Add openssl-3-support-multiple-sha3_squeeze_s390x.patch
  * Add openssl-3-add-xof-state-handling-s3_absorb.patch
  * Add openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  * Add openssl-3-fix-state-handling-sha3_final_s390x.patch
  * Add openssl-3-fix-state-handling-shake_final_s390x.patch
  * Add openssl-3-fix-state-handling-keccak_final_s390x.patch
  * Add openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  * Add openssl-3-add-defines-CPACF-funcs.patch
  * Add openssl-3-add-hw-acceleration-hmac.patch
  * Add openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  * Add openssl-3-fix-s390x_sha3_absorb.patch
  * Add openssl-3-fix-s390x_shake_squeeze.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808000">- Support MSA 10 XTS on s390x [jsc#PED-10273]
  * s390x: Add hardware acceleration for full AES-XTS
  * Add openssl-3-hw-acceleration-aes-xts-s390x.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808001">- Support MSA 11 HMAC on s390x [jsc#PED-10274]
  * Add openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  * Add openssl-3-fix-hmac-digest-detection-s390x.patch
  * Add openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730980800">- Add missing fixes for SHA3_squeeze and quic_multistream_test on
  pcc64 arch. [jsc#PED-10280]
  * Added openssl-3-fix-sha3-squeeze-ppc64.patch
  * Added openssl-3-fix-quic_multistream_test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1731412800">- Do not use HASHBANGPERL to avoid introducing a dependency on the
  perl-base package. [bsc#1233235]</changelog>
  <changelog author="pmonreal@suse.com" date="1734436800">- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
  - openssl-3-use-include-directive.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1738238400">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Security fix: [bsc#1236599, CVE-2024-12797]
  * RFC7250 handshakes with unauthenticated servers don't abort as
    expected.
  * Add openssl-CVE-2024-12797.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1746014400">- Security fix: [bsc#1240366]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
</package>
<package pkgid="15a1fbd8cb037ec1e0df07cc141b160b52eff013f64949e6bc67e3b24673bde7" name="libopenssl-3-fips-provider-32bit" arch="x86_64">
  <version epoch="0" ver="3.2.3" rel="150700.5.10.1"/>
  <changelog author="abergmann@suse.com" date="1724328000">- Security fix: [bsc#1229465, CVE-2024-6119]
  * possible denial of service in X.509 name checks
  * openssl-CVE-2024-6119.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1727265600">- Security fix: [bsc#1230698, CVE-2024-41996]
  * Validating the order of the public keys in the Diffie-Hellman
    Key Agreement Protocol, when an approved safe prime is used.
  * Added openssl-3-CVE-2024-41996.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1220262, CVE-2023-50782]
  * Implicit rejection in PKCS#1 v1.5
  * Add openssl-CVE-2023-50782.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166401">- Security fix: [bsc#1231741, CVE-2024-9143]
  * Low-level invalid GF(2^m) parameters lead to OOB memory access
  * Add openssl-CVE-2024-9143.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729512000">- Update to 3.1.7:
  * Major changes between OpenSSL 3.1.6 and OpenSSL 3.1.7 [3 Sep 2024]
  - Fixed possible denial of service in X.509 name checks (CVE-2024-6119)
  - Fixed possible buffer overread in SSL_select_next_proto()
    (CVE-2024-5535)
  * Major changes between OpenSSL 3.1.5 and OpenSSL 3.1.6 [4 Jun 2024]
  - Fixed potential use after free after SSL_free_buffers() is
    called (CVE-2024-4741)
  - Fixed an issue where checking excessively long DSA keys or
    parameters may be very slow (CVE-2024-4603)
  - Fixed unbounded memory growth with session handling in TLSv1.3
    (CVE-2024-2511)
  * Major changes between OpenSSL 3.1.4 and OpenSSL 3.1.5 [30 Jan 2024]
  - Fixed PKCS12 Decoding crashes (CVE-2024-0727)
  - Fixed Excessive time spent checking invalid RSA public keys
    [CVE-2023-6237)
  - Fixed POLY1305 MAC implementation corrupting vector registers
    on PowerPC CPUs which support PowerISA 2.07 (CVE-2023-6129)
  - Fix excessive time spent in DH check / generation with large
    Q parameter value (CVE-2023-5678)
  * Update openssl.keyring with BA5473A2B0587B07FB27CF2D216094DFD0CB81EF
  * Rebase patches:
  - openssl-Force-FIPS.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-CVE-2023-50782.patch
  * Remove patches fixed in the update:
  - openssl-Improve-performance-for-6x-unrolling-with-vpermxor-i.patch
  - openssl-CVE-2024-6119.patch openssl-CVE-2024-5535.patch
  - openssl-CVE-2024-4741.patch openssl-CVE-2024-4603.patch
  - openssl-CVE-2024-2511.patch openssl-CVE-2024-0727.patch
  - openssl-CVE-2023-6237.patch openssl-CVE-2023-6129.patch
  - openssl-CVE-2023-5678.patch openssl-3-CVE-2024-41996.patch
  - openssl-Enable-BTI-feature-for-md5-on-aarch64.patch
  - openssl-Fix-EVP_PKEY_CTX_add1_hkdf_info-behavior.patch
  - openssl-Handle-empty-param-in-EVP_PKEY_CTX_add1_hkdf_info.patch
  - reproducible.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729857600">- Update to 3.2.0:
  * Changes between 3.1.x and 3.2.0:
  - Fix excessive time spent in DH check/ generation with large Q parameter
    value. [CVE-2023-5678]
  - The BLAKE2b hash algorithm supports a configurable output length
    by setting the "size" parameter.
  - Added a function to delete objects from store by URI - OSSL_STORE_delete()
    and the corresponding provider-storemgmt API function OSSL_FUNC_store_delete().
  - Added OSSL_FUNC_store_open_ex() provider-storemgmt API function to pass
    a passphrase callback when opening a store.
  - Changed the default salt length used by PBES2 KDF's (PBKDF2 and scrypt)
    from 8 bytes to 16 bytes.
  - Changed the default value of the 'ess_cert_id_alg' configuration
    option which is used to calculate the TSA's public key certificate
    identifier. The default algorithm is updated to be sha256 instead of sha1.
  - Added optimization for SM2 algorithm on aarch64. A new configure option
    'no-sm2-precomp' has been added to disable the precomputed table.
  - Added client side support for QUIC
  - Added secp384r1 implementation using Solinas' reduction to improve
    speed of the NIST P-384 elliptic curve. To enable the implementation
    the build option 'enable-ec_nistp_64_gcc_128' must be used.
  - Improved RFC7468 compliance of the asn1parse command.
  - Added SHA256/192 algorithm support.
  - Added support for securely getting root CA certificate update in CMP.
  - Improved contention on global write locks by using more read locks where
    appropriate.
  - Improved performance of OSSL_PARAM lookups in performance critical
    provider functions.
  - Added the SSL_get0_group_name() function to provide access to the
    name of the group used for the TLS key exchange.
  - Provide a new configure option 'no-http' that can be used to disable the
    HTTP support. Provide new configure options 'no-apps' and 'no-docs' to
    disable building the openssl command line application and the documentation.
  - Provide a new configure option 'no-ecx' that can be used to disable the
    X25519, X448, and EdDSA support.
  - When multiple OSSL_KDF_PARAM_INFO parameters are passed to
    the EVP_KDF_CTX_set_params() function they are now concatenated not just
    for the HKDF algorithm but also for SSKDF and X9.63 KDF algorithms.
  - Added OSSL_FUNC_keymgmt_im/export_types_ex() provider functions that get
    the provider context as a parameter.
  - TLS round-trip time calculation was added by a Brigham Young University
    Capstone team partnering with Sandia National Laboratories. A new function
    in ssl_lib titled SSL_get_handshake_rtt will calculate and retrieve this
    value.
  - Added the "-quic" option to s_client to enable connectivity to QUIC servers.
    QUIC requires the use of ALPN, so this must be specified via the "-alpn"
    option. Use of the "advanced" s_client command command via the "-adv" option
    is recommended.
  - Added an "advanced" command mode to s_client. Use this with the "-adv" option.
  - Add Raw Public Key (RFC7250) support.
  - Added support for modular exponentiation and CRT offloading for the
    S390x architecture.
  - Added further assembler code for the RISC-V architecture.
  - Added EC_GROUP_to_params() which creates an OSSL_PARAM array
    from a given EC_GROUP.
  - Improved support for non-default library contexts and property queries
    when parsing PKCS#12 files.
  - Implemented support for all five instances of EdDSA from RFC8032:
    Ed25519, Ed25519ctx, Ed25519ph, Ed448, and Ed448ph.
    The streaming is not yet supported for the HashEdDSA variants
    (Ed25519ph and Ed448ph).
  - Added SM4 optimization for ARM processors using ASIMD and AES HW instructions.
  - Implemented SM4-XTS support.
  - Added platform-agnostic OSSL_sleep() function.
  - Implemented deterministic ECDSA signatures (RFC6979) support.
  - Implemented AES-GCM-SIV (RFC8452) support.
  - Added support for pluggable (provider-based) TLS signature algorithms.
    This enables TLS 1.3 authentication operations with algorithms embedded
    in providers not included by default in OpenSSL. In combination with
    the already available pluggable KEM and X.509 support, this enables
    for example suitable providers to deliver post-quantum or quantum-safe
    cryptography to OpenSSL users.
  - Added support for pluggable (provider-based) CMS signature algorithms.
    This enables CMS sign and verify operations with algorithms embedded
    in providers not included by default in OpenSSL.
  - Implemented HPKE DHKEM support in providers used by HPKE (RFC9180) API.
  - Add support for certificate compression (RFC8879), including
    library support for Brotli and Zstandard compression.
  - Add the ability to add custom attributes to PKCS12 files. Add a new API
    PKCS12_create_ex2, identical to the existing PKCS12_create_ex but allows
    for a user specified callback and optional argument.
    Added a new PKCS12_SAFEBAG_set0_attr, which allows for a new attr to be
    added to the existing STACK_OF attrs.
  - Major refactor of the libssl record layer.
  - Add a mac salt length option for the pkcs12 command.
  - Add more SRTP protection profiles from RFC8723 and RFC8269.
  - Extended Kernel TLS (KTLS) to support TLS 1.3 receive offload.
  - Add support for TCP Fast Open (RFC7413) to macOS, Linux, and FreeBSD where
    supported and enabled.
  - Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489)
    to the list of ciphersuites providing Perfect Forward Secrecy as
    required by SECLEVEL &gt;= 3.
  - Add new SSL APIs to aid in efficiently implementing TLS/SSL fingerprinting.
    The SSL_CTRL_GET_IANA_GROUPS control code, exposed as the
    SSL_get0_iana_groups() function-like macro, retrieves the list of
    supported groups sent by the peer.
  - Fixed PEM_write_bio_PKCS8PrivateKey() and PEM_write_bio_PKCS8PrivateKey_nid()
    to make it possible to use empty passphrase strings.
  - The PKCS12_parse() function now supports MAC-less PKCS12 files.
  - Added ASYNC_set_mem_functions() and ASYNC_get_mem_functions() calls to be able
    to change functions used for allocating the memory of asynchronous call stack.
  - Added support for signed BIGNUMs in the OSSL_PARAM APIs.
  - A failure exit code is returned when using the openssl x509 command to check
    certificate attributes and the checks fail.
  - The default SSL/TLS security level has been changed from 1 to 2. RSA,
    DSA and DH keys of 1024 bits and above and less than 2048 bits and ECC keys
    of 160 bits and above and less than 224 bits were previously accepted by
    default but are now no longer allowed. By default TLS compression was
    already disabled in previous OpenSSL versions. At security level 2 it cannot
    be enabled.
  - The SSL_CTX_set_cipher_list family functions now accept ciphers using their
    IANA standard names.
  - The PVK key derivation function has been moved from b2i_PVK_bio_ex() into
    the legacy crypto provider as an EVP_KDF. Applications requiring this KDF
    will need to load the legacy crypto provider.
  - CCM8 cipher suites in TLS have been downgraded to security level zero
    because they use a short authentication tag which lowers their strength.
  - Subject or issuer names in X.509 objects are now displayed as UTF-8 strings
    by default. Also spaces surrounding '=' in DN output are removed.
  - Add X.509 certificate codeSigning purpose and related checks on key usage and
    extended key usage of the leaf certificate according to the CA/Browser Forum.
  - The 'x509', 'ca', and 'req' apps now produce X.509 v3 certificates.
    The '-x509v1' option of 'req' prefers generation of X.509 v1 certificates.
    'X509_sign()' and 'X509_sign_ctx()' make sure that the certificate has
    X.509 version 3 if the certificate information includes X.509 extensions.
  - Fix and extend certificate handling and the apps 'x509', 'verify' etc.
    such as adding a trace facility for debugging certificate chain building.
  - Various fixes and extensions to the CMP+CRMF implementation and the 'cmp' app
    in particular supporting requests for central key generation, generalized
    polling, and various types of genm/genp exchanges defined in CMP Updates.
  - Fixes and extensions to the HTTP client and to the HTTP server in 'apps/'
    like correcting the TLS and proxy support and adding tracing for debugging.
  - Extended the CMS API for handling 'CMS_SignedData' and 'CMS_EnvelopedData'.
  - 'CMS_add0_cert()' and 'CMS_add1_cert()' no longer throw an error if
    a certificate to be added is already present. 'CMS_sign_ex()' and
    'CMS_sign()' now ignore any duplicate certificates in their 'certs' argument
    and no longer throw an error for them.
  - Added BIO_s_dgram_pair() and BIO_s_dgram_mem() that provide memory-based
    BIOs with datagram semantics and support for BIO_sendmmsg() and BIO_recvmmsg()
    calls. They can be used as the transport BIOs for QUIC.
  - Add new BIO_sendmmsg() and BIO_recvmmsg() BIO methods which allow
    sending and receiving multiple messages in a single call. An implementation
    is provided for BIO_dgram. For further details, see BIO_sendmmsg(3).
  - Support for loading root certificates from the Windows certificate store
    has been added.
  - Enable KTLS with the TLS 1.3 CCM mode ciphersuites. Note that some linux
    kernel versions that support KTLS have a known bug in CCM processing. That
    has been fixed in stable releases starting from 5.4.164, 5.10.84, 5.15.7,
    and all releases since 5.16. KTLS with CCM ciphersuites should be only used
    on these releases.
  - Added '-ktls' option to 's_server' and 's_client' commands to enable the
    KTLS support.
  - Zerocopy KTLS sendfile() support on Linux.
  - The OBJ_ calls are now thread safe using a global lock.
  - New parameter '-digest' for openssl cms command allowing signing
    pre-computed digests and new CMS API functions supporting that
    functionality.
  - OPENSSL_malloc() and other allocation functions now raise errors on
    allocation failures. The callers do not need to explicitly raise errors
    unless they want to for tracing purposes.
  - Added support for Brainpool curves in TLS-1.3.
  - Support for Argon2d, Argon2i, Argon2id KDFs has been added along with
    a basic thread pool implementation for select platforms.</changelog>
  <changelog author="pmonreal@suse.com" date="1729857601">- Update to 3.2.1:
  * Changes between 3.2.0 and 3.2.1:
  - A file in PKCS12 format can contain certificates and keys and may come from
    an untrusted source. The PKCS12 specification allows certain fields to be
    NULL, but OpenSSL did not correctly check for this case. [CVE-2024-0727]
  - When function EVP_PKEY_public_check() is called on RSA public keys,
    a computation is done to confirm that the RSA modulus, n, is composite.
    For valid RSA keys, n is a product of two or more large primes and this
    computation completes quickly. However, if n is an overly large prime,
    then this computation would take a long time. [CVE-2023-6237]
  - Restore the encoding of SM2 PrivateKeyInfo and SubjectPublicKeyInfo to
    have the contained AlgorithmIdentifier.algorithm set to id-ecPublicKey
    rather than SM2.
  - The POLY1305 MAC (message authentication code) implementation in OpenSSL
    for PowerPC CPUs saves the contents of vector registers in different
    order than they are restored. [CVE-2023-6129]
  - Disable building QUIC server utility when OpenSSL is configured with 'no-apps'.
  * The openssl-crypto-policies-support.patch has been merged into
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Rename openssl-Disable-default-provider-for-test-suite.patch and rebase to
    openssl-TESTS-Disable-default-provider-crypto-policies.patch
  * Patches removed in the update:
  - openssl-Add_support_for_Windows_CA_certificate_store.patch
  - openssl-ec-56-bit-Limb-Solinas-Strategy-for-secp384r1.patch
  - openssl-ec-Use-static-linkage-on-nistp521-felem_-square-mul-.patch
  - openssl-ec-powerpc64le-Add-asm-implementation-of-felem_-squa.patch
  - openssl-ecc-Remove-extraneous-parentheses-in-secp384r1.patch
  - openssl-powerpc-ecc-Fix-stack-allocation-secp384r1-asm.patch
  - openssl-CVE-2024-41996.patch
  - openssl-CVE-2023-50782.patch
  - openssl-CVE-2024-9143.patch
  * Patches rebased:
  - openssl-3-use-include-directive.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-DEFAULT_SUSE_cipher.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Force-FIPS.patch
  - openssl-load-legacy-provider.patch
  - openssl-no-html-docs.patch
  - openssl-pkgconfig.patch
  - openssl-ppc64-config.patch
  - openssl-truststore.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116800">- Remove the hardcoded DEFAULT_SUSE cipherlist selection.
  * Remove openssl-DEFAULT_SUSE_cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116801">- Update to 3.2.3:
  * Changes between 3.2.2 and 3.2.3:
  - Fixed possible denial of service in X.509 name checks. [CVE-2024-6119]
  - Fixed possible buffer overread in SSL_select_next_proto(). [CVE-2024-5535]
  * Changes between 3.2.1 and 3.2.2:
  - Fixed potential use after free after SSL_free_buffers() is called. [CVE-2024-4741]
  - Fixed an issue where checking excessively long DSA keys or parameters may
    be very slow. [CVE-2024-4603]
  - Improved EC/DSA nonce generation routines to avoid bias and timing
    side channel leaks.
  - Fixed an issue where some non-default TLS server configurations can cause
    unbounded memory growth when processing TLSv1.3 sessions. [CVE-2024-2511]
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded. This can be used on platforms
    where using atexit() from shared libraries causes crashes on exit.
  - Fixed bug where SSL_export_keying_material() could not be used with QUIC
    connections.
  * Add openssl-skip-quic-pairwise.patch to adapt the pairwise tests.
  * Merge openssl-FIPS-release_num_in_version_string.patch into
    openssl-FIPS-services-minimize.patch
  * Rebase patches:
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Remove-EC-curves.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-3-use-include-directive.patch
  * Remove not needed patches:
  - openssl-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  - openssl-3-FIPS-PCT_rsa_keygen.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730462400">- Support MSA 12 SHA3 on s390x [jsc#PED-10280]
  * Add openssl-3-add_EVP_DigestSqueeze_api.patch
  * Add openssl-3-support-multiple-sha3_squeeze_s390x.patch
  * Add openssl-3-add-xof-state-handling-s3_absorb.patch
  * Add openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  * Add openssl-3-fix-state-handling-sha3_final_s390x.patch
  * Add openssl-3-fix-state-handling-shake_final_s390x.patch
  * Add openssl-3-fix-state-handling-keccak_final_s390x.patch
  * Add openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  * Add openssl-3-add-defines-CPACF-funcs.patch
  * Add openssl-3-add-hw-acceleration-hmac.patch
  * Add openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  * Add openssl-3-fix-s390x_sha3_absorb.patch
  * Add openssl-3-fix-s390x_shake_squeeze.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808000">- Support MSA 10 XTS on s390x [jsc#PED-10273]
  * s390x: Add hardware acceleration for full AES-XTS
  * Add openssl-3-hw-acceleration-aes-xts-s390x.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808001">- Support MSA 11 HMAC on s390x [jsc#PED-10274]
  * Add openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  * Add openssl-3-fix-hmac-digest-detection-s390x.patch
  * Add openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730980800">- Add missing fixes for SHA3_squeeze and quic_multistream_test on
  pcc64 arch. [jsc#PED-10280]
  * Added openssl-3-fix-sha3-squeeze-ppc64.patch
  * Added openssl-3-fix-quic_multistream_test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1731412800">- Do not use HASHBANGPERL to avoid introducing a dependency on the
  perl-base package. [bsc#1233235]</changelog>
  <changelog author="pmonreal@suse.com" date="1734436800">- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
  - openssl-3-use-include-directive.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1738238400">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Security fix: [bsc#1236599, CVE-2024-12797]
  * RFC7250 handshakes with unauthenticated servers don't abort as
    expected.
  * Add openssl-CVE-2024-12797.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1746014400">- Security fix: [bsc#1240366, CVE-2025-27587]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
  <changelog author="mls@suse.de" date="1751371200">- Backport mdless cms signing support [jsc#PED-12895]
  * Add openssl-3-support-mdless-cms.patch</changelog>
</package>
<package pkgid="49ffba6dc5f26bf446a9ce96878bae3978ab6405d9e0327a95c15ca988d47d96" name="libopenssl-3-fips-provider-32bit" arch="x86_64">
  <version epoch="0" ver="3.2.3" rel="150700.5.15.1"/>
  <changelog author="angel.yankov@suse.com" date="1727265600">- Security fix: [bsc#1230698, CVE-2024-41996]
  * Validating the order of the public keys in the Diffie-Hellman
    Key Agreement Protocol, when an approved safe prime is used.
  * Added openssl-3-CVE-2024-41996.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1220262, CVE-2023-50782]
  * Implicit rejection in PKCS#1 v1.5
  * Add openssl-CVE-2023-50782.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166401">- Security fix: [bsc#1231741, CVE-2024-9143]
  * Low-level invalid GF(2^m) parameters lead to OOB memory access
  * Add openssl-CVE-2024-9143.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729512000">- Update to 3.1.7:
  * Major changes between OpenSSL 3.1.6 and OpenSSL 3.1.7 [3 Sep 2024]
  - Fixed possible denial of service in X.509 name checks (CVE-2024-6119)
  - Fixed possible buffer overread in SSL_select_next_proto()
    (CVE-2024-5535)
  * Major changes between OpenSSL 3.1.5 and OpenSSL 3.1.6 [4 Jun 2024]
  - Fixed potential use after free after SSL_free_buffers() is
    called (CVE-2024-4741)
  - Fixed an issue where checking excessively long DSA keys or
    parameters may be very slow (CVE-2024-4603)
  - Fixed unbounded memory growth with session handling in TLSv1.3
    (CVE-2024-2511)
  * Major changes between OpenSSL 3.1.4 and OpenSSL 3.1.5 [30 Jan 2024]
  - Fixed PKCS12 Decoding crashes (CVE-2024-0727)
  - Fixed Excessive time spent checking invalid RSA public keys
    [CVE-2023-6237)
  - Fixed POLY1305 MAC implementation corrupting vector registers
    on PowerPC CPUs which support PowerISA 2.07 (CVE-2023-6129)
  - Fix excessive time spent in DH check / generation with large
    Q parameter value (CVE-2023-5678)
  * Update openssl.keyring with BA5473A2B0587B07FB27CF2D216094DFD0CB81EF
  * Rebase patches:
  - openssl-Force-FIPS.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-CVE-2023-50782.patch
  * Remove patches fixed in the update:
  - openssl-Improve-performance-for-6x-unrolling-with-vpermxor-i.patch
  - openssl-CVE-2024-6119.patch openssl-CVE-2024-5535.patch
  - openssl-CVE-2024-4741.patch openssl-CVE-2024-4603.patch
  - openssl-CVE-2024-2511.patch openssl-CVE-2024-0727.patch
  - openssl-CVE-2023-6237.patch openssl-CVE-2023-6129.patch
  - openssl-CVE-2023-5678.patch openssl-3-CVE-2024-41996.patch
  - openssl-Enable-BTI-feature-for-md5-on-aarch64.patch
  - openssl-Fix-EVP_PKEY_CTX_add1_hkdf_info-behavior.patch
  - openssl-Handle-empty-param-in-EVP_PKEY_CTX_add1_hkdf_info.patch
  - reproducible.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729857600">- Update to 3.2.0:
  * Changes between 3.1.x and 3.2.0:
  - Fix excessive time spent in DH check/ generation with large Q parameter
    value. [CVE-2023-5678]
  - The BLAKE2b hash algorithm supports a configurable output length
    by setting the "size" parameter.
  - Added a function to delete objects from store by URI - OSSL_STORE_delete()
    and the corresponding provider-storemgmt API function OSSL_FUNC_store_delete().
  - Added OSSL_FUNC_store_open_ex() provider-storemgmt API function to pass
    a passphrase callback when opening a store.
  - Changed the default salt length used by PBES2 KDF's (PBKDF2 and scrypt)
    from 8 bytes to 16 bytes.
  - Changed the default value of the 'ess_cert_id_alg' configuration
    option which is used to calculate the TSA's public key certificate
    identifier. The default algorithm is updated to be sha256 instead of sha1.
  - Added optimization for SM2 algorithm on aarch64. A new configure option
    'no-sm2-precomp' has been added to disable the precomputed table.
  - Added client side support for QUIC
  - Added secp384r1 implementation using Solinas' reduction to improve
    speed of the NIST P-384 elliptic curve. To enable the implementation
    the build option 'enable-ec_nistp_64_gcc_128' must be used.
  - Improved RFC7468 compliance of the asn1parse command.
  - Added SHA256/192 algorithm support.
  - Added support for securely getting root CA certificate update in CMP.
  - Improved contention on global write locks by using more read locks where
    appropriate.
  - Improved performance of OSSL_PARAM lookups in performance critical
    provider functions.
  - Added the SSL_get0_group_name() function to provide access to the
    name of the group used for the TLS key exchange.
  - Provide a new configure option 'no-http' that can be used to disable the
    HTTP support. Provide new configure options 'no-apps' and 'no-docs' to
    disable building the openssl command line application and the documentation.
  - Provide a new configure option 'no-ecx' that can be used to disable the
    X25519, X448, and EdDSA support.
  - When multiple OSSL_KDF_PARAM_INFO parameters are passed to
    the EVP_KDF_CTX_set_params() function they are now concatenated not just
    for the HKDF algorithm but also for SSKDF and X9.63 KDF algorithms.
  - Added OSSL_FUNC_keymgmt_im/export_types_ex() provider functions that get
    the provider context as a parameter.
  - TLS round-trip time calculation was added by a Brigham Young University
    Capstone team partnering with Sandia National Laboratories. A new function
    in ssl_lib titled SSL_get_handshake_rtt will calculate and retrieve this
    value.
  - Added the "-quic" option to s_client to enable connectivity to QUIC servers.
    QUIC requires the use of ALPN, so this must be specified via the "-alpn"
    option. Use of the "advanced" s_client command command via the "-adv" option
    is recommended.
  - Added an "advanced" command mode to s_client. Use this with the "-adv" option.
  - Add Raw Public Key (RFC7250) support.
  - Added support for modular exponentiation and CRT offloading for the
    S390x architecture.
  - Added further assembler code for the RISC-V architecture.
  - Added EC_GROUP_to_params() which creates an OSSL_PARAM array
    from a given EC_GROUP.
  - Improved support for non-default library contexts and property queries
    when parsing PKCS#12 files.
  - Implemented support for all five instances of EdDSA from RFC8032:
    Ed25519, Ed25519ctx, Ed25519ph, Ed448, and Ed448ph.
    The streaming is not yet supported for the HashEdDSA variants
    (Ed25519ph and Ed448ph).
  - Added SM4 optimization for ARM processors using ASIMD and AES HW instructions.
  - Implemented SM4-XTS support.
  - Added platform-agnostic OSSL_sleep() function.
  - Implemented deterministic ECDSA signatures (RFC6979) support.
  - Implemented AES-GCM-SIV (RFC8452) support.
  - Added support for pluggable (provider-based) TLS signature algorithms.
    This enables TLS 1.3 authentication operations with algorithms embedded
    in providers not included by default in OpenSSL. In combination with
    the already available pluggable KEM and X.509 support, this enables
    for example suitable providers to deliver post-quantum or quantum-safe
    cryptography to OpenSSL users.
  - Added support for pluggable (provider-based) CMS signature algorithms.
    This enables CMS sign and verify operations with algorithms embedded
    in providers not included by default in OpenSSL.
  - Implemented HPKE DHKEM support in providers used by HPKE (RFC9180) API.
  - Add support for certificate compression (RFC8879), including
    library support for Brotli and Zstandard compression.
  - Add the ability to add custom attributes to PKCS12 files. Add a new API
    PKCS12_create_ex2, identical to the existing PKCS12_create_ex but allows
    for a user specified callback and optional argument.
    Added a new PKCS12_SAFEBAG_set0_attr, which allows for a new attr to be
    added to the existing STACK_OF attrs.
  - Major refactor of the libssl record layer.
  - Add a mac salt length option for the pkcs12 command.
  - Add more SRTP protection profiles from RFC8723 and RFC8269.
  - Extended Kernel TLS (KTLS) to support TLS 1.3 receive offload.
  - Add support for TCP Fast Open (RFC7413) to macOS, Linux, and FreeBSD where
    supported and enabled.
  - Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489)
    to the list of ciphersuites providing Perfect Forward Secrecy as
    required by SECLEVEL &gt;= 3.
  - Add new SSL APIs to aid in efficiently implementing TLS/SSL fingerprinting.
    The SSL_CTRL_GET_IANA_GROUPS control code, exposed as the
    SSL_get0_iana_groups() function-like macro, retrieves the list of
    supported groups sent by the peer.
  - Fixed PEM_write_bio_PKCS8PrivateKey() and PEM_write_bio_PKCS8PrivateKey_nid()
    to make it possible to use empty passphrase strings.
  - The PKCS12_parse() function now supports MAC-less PKCS12 files.
  - Added ASYNC_set_mem_functions() and ASYNC_get_mem_functions() calls to be able
    to change functions used for allocating the memory of asynchronous call stack.
  - Added support for signed BIGNUMs in the OSSL_PARAM APIs.
  - A failure exit code is returned when using the openssl x509 command to check
    certificate attributes and the checks fail.
  - The default SSL/TLS security level has been changed from 1 to 2. RSA,
    DSA and DH keys of 1024 bits and above and less than 2048 bits and ECC keys
    of 160 bits and above and less than 224 bits were previously accepted by
    default but are now no longer allowed. By default TLS compression was
    already disabled in previous OpenSSL versions. At security level 2 it cannot
    be enabled.
  - The SSL_CTX_set_cipher_list family functions now accept ciphers using their
    IANA standard names.
  - The PVK key derivation function has been moved from b2i_PVK_bio_ex() into
    the legacy crypto provider as an EVP_KDF. Applications requiring this KDF
    will need to load the legacy crypto provider.
  - CCM8 cipher suites in TLS have been downgraded to security level zero
    because they use a short authentication tag which lowers their strength.
  - Subject or issuer names in X.509 objects are now displayed as UTF-8 strings
    by default. Also spaces surrounding '=' in DN output are removed.
  - Add X.509 certificate codeSigning purpose and related checks on key usage and
    extended key usage of the leaf certificate according to the CA/Browser Forum.
  - The 'x509', 'ca', and 'req' apps now produce X.509 v3 certificates.
    The '-x509v1' option of 'req' prefers generation of X.509 v1 certificates.
    'X509_sign()' and 'X509_sign_ctx()' make sure that the certificate has
    X.509 version 3 if the certificate information includes X.509 extensions.
  - Fix and extend certificate handling and the apps 'x509', 'verify' etc.
    such as adding a trace facility for debugging certificate chain building.
  - Various fixes and extensions to the CMP+CRMF implementation and the 'cmp' app
    in particular supporting requests for central key generation, generalized
    polling, and various types of genm/genp exchanges defined in CMP Updates.
  - Fixes and extensions to the HTTP client and to the HTTP server in 'apps/'
    like correcting the TLS and proxy support and adding tracing for debugging.
  - Extended the CMS API for handling 'CMS_SignedData' and 'CMS_EnvelopedData'.
  - 'CMS_add0_cert()' and 'CMS_add1_cert()' no longer throw an error if
    a certificate to be added is already present. 'CMS_sign_ex()' and
    'CMS_sign()' now ignore any duplicate certificates in their 'certs' argument
    and no longer throw an error for them.
  - Added BIO_s_dgram_pair() and BIO_s_dgram_mem() that provide memory-based
    BIOs with datagram semantics and support for BIO_sendmmsg() and BIO_recvmmsg()
    calls. They can be used as the transport BIOs for QUIC.
  - Add new BIO_sendmmsg() and BIO_recvmmsg() BIO methods which allow
    sending and receiving multiple messages in a single call. An implementation
    is provided for BIO_dgram. For further details, see BIO_sendmmsg(3).
  - Support for loading root certificates from the Windows certificate store
    has been added.
  - Enable KTLS with the TLS 1.3 CCM mode ciphersuites. Note that some linux
    kernel versions that support KTLS have a known bug in CCM processing. That
    has been fixed in stable releases starting from 5.4.164, 5.10.84, 5.15.7,
    and all releases since 5.16. KTLS with CCM ciphersuites should be only used
    on these releases.
  - Added '-ktls' option to 's_server' and 's_client' commands to enable the
    KTLS support.
  - Zerocopy KTLS sendfile() support on Linux.
  - The OBJ_ calls are now thread safe using a global lock.
  - New parameter '-digest' for openssl cms command allowing signing
    pre-computed digests and new CMS API functions supporting that
    functionality.
  - OPENSSL_malloc() and other allocation functions now raise errors on
    allocation failures. The callers do not need to explicitly raise errors
    unless they want to for tracing purposes.
  - Added support for Brainpool curves in TLS-1.3.
  - Support for Argon2d, Argon2i, Argon2id KDFs has been added along with
    a basic thread pool implementation for select platforms.</changelog>
  <changelog author="pmonreal@suse.com" date="1729857601">- Update to 3.2.1:
  * Changes between 3.2.0 and 3.2.1:
  - A file in PKCS12 format can contain certificates and keys and may come from
    an untrusted source. The PKCS12 specification allows certain fields to be
    NULL, but OpenSSL did not correctly check for this case. [CVE-2024-0727]
  - When function EVP_PKEY_public_check() is called on RSA public keys,
    a computation is done to confirm that the RSA modulus, n, is composite.
    For valid RSA keys, n is a product of two or more large primes and this
    computation completes quickly. However, if n is an overly large prime,
    then this computation would take a long time. [CVE-2023-6237]
  - Restore the encoding of SM2 PrivateKeyInfo and SubjectPublicKeyInfo to
    have the contained AlgorithmIdentifier.algorithm set to id-ecPublicKey
    rather than SM2.
  - The POLY1305 MAC (message authentication code) implementation in OpenSSL
    for PowerPC CPUs saves the contents of vector registers in different
    order than they are restored. [CVE-2023-6129]
  - Disable building QUIC server utility when OpenSSL is configured with 'no-apps'.
  * The openssl-crypto-policies-support.patch has been merged into
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Rename openssl-Disable-default-provider-for-test-suite.patch and rebase to
    openssl-TESTS-Disable-default-provider-crypto-policies.patch
  * Patches removed in the update:
  - openssl-Add_support_for_Windows_CA_certificate_store.patch
  - openssl-ec-56-bit-Limb-Solinas-Strategy-for-secp384r1.patch
  - openssl-ec-Use-static-linkage-on-nistp521-felem_-square-mul-.patch
  - openssl-ec-powerpc64le-Add-asm-implementation-of-felem_-squa.patch
  - openssl-ecc-Remove-extraneous-parentheses-in-secp384r1.patch
  - openssl-powerpc-ecc-Fix-stack-allocation-secp384r1-asm.patch
  - openssl-CVE-2024-41996.patch
  - openssl-CVE-2023-50782.patch
  - openssl-CVE-2024-9143.patch
  * Patches rebased:
  - openssl-3-use-include-directive.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-DEFAULT_SUSE_cipher.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Force-FIPS.patch
  - openssl-load-legacy-provider.patch
  - openssl-no-html-docs.patch
  - openssl-pkgconfig.patch
  - openssl-ppc64-config.patch
  - openssl-truststore.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116800">- Remove the hardcoded DEFAULT_SUSE cipherlist selection.
  * Remove openssl-DEFAULT_SUSE_cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116801">- Update to 3.2.3:
  * Changes between 3.2.2 and 3.2.3:
  - Fixed possible denial of service in X.509 name checks. [CVE-2024-6119]
  - Fixed possible buffer overread in SSL_select_next_proto(). [CVE-2024-5535]
  * Changes between 3.2.1 and 3.2.2:
  - Fixed potential use after free after SSL_free_buffers() is called. [CVE-2024-4741]
  - Fixed an issue where checking excessively long DSA keys or parameters may
    be very slow. [CVE-2024-4603]
  - Improved EC/DSA nonce generation routines to avoid bias and timing
    side channel leaks.
  - Fixed an issue where some non-default TLS server configurations can cause
    unbounded memory growth when processing TLSv1.3 sessions. [CVE-2024-2511]
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded. This can be used on platforms
    where using atexit() from shared libraries causes crashes on exit.
  - Fixed bug where SSL_export_keying_material() could not be used with QUIC
    connections.
  * Add openssl-skip-quic-pairwise.patch to adapt the pairwise tests.
  * Merge openssl-FIPS-release_num_in_version_string.patch into
    openssl-FIPS-services-minimize.patch
  * Rebase patches:
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Remove-EC-curves.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-3-use-include-directive.patch
  * Remove not needed patches:
  - openssl-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  - openssl-3-FIPS-PCT_rsa_keygen.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730462400">- Support MSA 12 SHA3 on s390x [jsc#PED-10280]
  * Add openssl-3-add_EVP_DigestSqueeze_api.patch
  * Add openssl-3-support-multiple-sha3_squeeze_s390x.patch
  * Add openssl-3-add-xof-state-handling-s3_absorb.patch
  * Add openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  * Add openssl-3-fix-state-handling-sha3_final_s390x.patch
  * Add openssl-3-fix-state-handling-shake_final_s390x.patch
  * Add openssl-3-fix-state-handling-keccak_final_s390x.patch
  * Add openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  * Add openssl-3-add-defines-CPACF-funcs.patch
  * Add openssl-3-add-hw-acceleration-hmac.patch
  * Add openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  * Add openssl-3-fix-s390x_sha3_absorb.patch
  * Add openssl-3-fix-s390x_shake_squeeze.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808000">- Support MSA 10 XTS on s390x [jsc#PED-10273]
  * s390x: Add hardware acceleration for full AES-XTS
  * Add openssl-3-hw-acceleration-aes-xts-s390x.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808001">- Support MSA 11 HMAC on s390x [jsc#PED-10274]
  * Add openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  * Add openssl-3-fix-hmac-digest-detection-s390x.patch
  * Add openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730980800">- Add missing fixes for SHA3_squeeze and quic_multistream_test on
  pcc64 arch. [jsc#PED-10280]
  * Added openssl-3-fix-sha3-squeeze-ppc64.patch
  * Added openssl-3-fix-quic_multistream_test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1731412800">- Do not use HASHBANGPERL to avoid introducing a dependency on the
  perl-base package. [bsc#1233235]</changelog>
  <changelog author="pmonreal@suse.com" date="1734436800">- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
  - openssl-3-use-include-directive.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1738238400">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Security fix: [bsc#1236599, CVE-2024-12797]
  * RFC7250 handshakes with unauthenticated servers don't abort as
    expected.
  * Add openssl-CVE-2024-12797.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1746014400">- Security fix: [bsc#1240366, CVE-2025-27587]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
  <changelog author="mls@suse.de" date="1751371200">- Backport mdless cms signing support [jsc#PED-12895]
  * Add openssl-3-support-mdless-cms.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- FIPS: Fix EMS in crypto-policies FIPS:NO-ENFORCE-EMS
  * [bsc#1230959, bsc#1232326, bsc#1231748, bsc#1246428]
  * Add patch openssl-FIPS-fix-EMS-support.patch</changelog>
</package>
<package pkgid="d4b397374833ba7ca825f7dcc43798fe2c3ddc5222d41219908742db40ee5eb2" name="libopenssl-3-fips-provider-32bit" arch="x86_64">
  <version epoch="0" ver="3.2.3" rel="150700.5.18.1"/>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1220262, CVE-2023-50782]
  * Implicit rejection in PKCS#1 v1.5
  * Add openssl-CVE-2023-50782.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166401">- Security fix: [bsc#1231741, CVE-2024-9143]
  * Low-level invalid GF(2^m) parameters lead to OOB memory access
  * Add openssl-CVE-2024-9143.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729512000">- Update to 3.1.7:
  * Major changes between OpenSSL 3.1.6 and OpenSSL 3.1.7 [3 Sep 2024]
  - Fixed possible denial of service in X.509 name checks (CVE-2024-6119)
  - Fixed possible buffer overread in SSL_select_next_proto()
    (CVE-2024-5535)
  * Major changes between OpenSSL 3.1.5 and OpenSSL 3.1.6 [4 Jun 2024]
  - Fixed potential use after free after SSL_free_buffers() is
    called (CVE-2024-4741)
  - Fixed an issue where checking excessively long DSA keys or
    parameters may be very slow (CVE-2024-4603)
  - Fixed unbounded memory growth with session handling in TLSv1.3
    (CVE-2024-2511)
  * Major changes between OpenSSL 3.1.4 and OpenSSL 3.1.5 [30 Jan 2024]
  - Fixed PKCS12 Decoding crashes (CVE-2024-0727)
  - Fixed Excessive time spent checking invalid RSA public keys
    [CVE-2023-6237)
  - Fixed POLY1305 MAC implementation corrupting vector registers
    on PowerPC CPUs which support PowerISA 2.07 (CVE-2023-6129)
  - Fix excessive time spent in DH check / generation with large
    Q parameter value (CVE-2023-5678)
  * Update openssl.keyring with BA5473A2B0587B07FB27CF2D216094DFD0CB81EF
  * Rebase patches:
  - openssl-Force-FIPS.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-CVE-2023-50782.patch
  * Remove patches fixed in the update:
  - openssl-Improve-performance-for-6x-unrolling-with-vpermxor-i.patch
  - openssl-CVE-2024-6119.patch openssl-CVE-2024-5535.patch
  - openssl-CVE-2024-4741.patch openssl-CVE-2024-4603.patch
  - openssl-CVE-2024-2511.patch openssl-CVE-2024-0727.patch
  - openssl-CVE-2023-6237.patch openssl-CVE-2023-6129.patch
  - openssl-CVE-2023-5678.patch openssl-3-CVE-2024-41996.patch
  - openssl-Enable-BTI-feature-for-md5-on-aarch64.patch
  - openssl-Fix-EVP_PKEY_CTX_add1_hkdf_info-behavior.patch
  - openssl-Handle-empty-param-in-EVP_PKEY_CTX_add1_hkdf_info.patch
  - reproducible.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729857600">- Update to 3.2.0:
  * Changes between 3.1.x and 3.2.0:
  - Fix excessive time spent in DH check/ generation with large Q parameter
    value. [CVE-2023-5678]
  - The BLAKE2b hash algorithm supports a configurable output length
    by setting the "size" parameter.
  - Added a function to delete objects from store by URI - OSSL_STORE_delete()
    and the corresponding provider-storemgmt API function OSSL_FUNC_store_delete().
  - Added OSSL_FUNC_store_open_ex() provider-storemgmt API function to pass
    a passphrase callback when opening a store.
  - Changed the default salt length used by PBES2 KDF's (PBKDF2 and scrypt)
    from 8 bytes to 16 bytes.
  - Changed the default value of the 'ess_cert_id_alg' configuration
    option which is used to calculate the TSA's public key certificate
    identifier. The default algorithm is updated to be sha256 instead of sha1.
  - Added optimization for SM2 algorithm on aarch64. A new configure option
    'no-sm2-precomp' has been added to disable the precomputed table.
  - Added client side support for QUIC
  - Added secp384r1 implementation using Solinas' reduction to improve
    speed of the NIST P-384 elliptic curve. To enable the implementation
    the build option 'enable-ec_nistp_64_gcc_128' must be used.
  - Improved RFC7468 compliance of the asn1parse command.
  - Added SHA256/192 algorithm support.
  - Added support for securely getting root CA certificate update in CMP.
  - Improved contention on global write locks by using more read locks where
    appropriate.
  - Improved performance of OSSL_PARAM lookups in performance critical
    provider functions.
  - Added the SSL_get0_group_name() function to provide access to the
    name of the group used for the TLS key exchange.
  - Provide a new configure option 'no-http' that can be used to disable the
    HTTP support. Provide new configure options 'no-apps' and 'no-docs' to
    disable building the openssl command line application and the documentation.
  - Provide a new configure option 'no-ecx' that can be used to disable the
    X25519, X448, and EdDSA support.
  - When multiple OSSL_KDF_PARAM_INFO parameters are passed to
    the EVP_KDF_CTX_set_params() function they are now concatenated not just
    for the HKDF algorithm but also for SSKDF and X9.63 KDF algorithms.
  - Added OSSL_FUNC_keymgmt_im/export_types_ex() provider functions that get
    the provider context as a parameter.
  - TLS round-trip time calculation was added by a Brigham Young University
    Capstone team partnering with Sandia National Laboratories. A new function
    in ssl_lib titled SSL_get_handshake_rtt will calculate and retrieve this
    value.
  - Added the "-quic" option to s_client to enable connectivity to QUIC servers.
    QUIC requires the use of ALPN, so this must be specified via the "-alpn"
    option. Use of the "advanced" s_client command command via the "-adv" option
    is recommended.
  - Added an "advanced" command mode to s_client. Use this with the "-adv" option.
  - Add Raw Public Key (RFC7250) support.
  - Added support for modular exponentiation and CRT offloading for the
    S390x architecture.
  - Added further assembler code for the RISC-V architecture.
  - Added EC_GROUP_to_params() which creates an OSSL_PARAM array
    from a given EC_GROUP.
  - Improved support for non-default library contexts and property queries
    when parsing PKCS#12 files.
  - Implemented support for all five instances of EdDSA from RFC8032:
    Ed25519, Ed25519ctx, Ed25519ph, Ed448, and Ed448ph.
    The streaming is not yet supported for the HashEdDSA variants
    (Ed25519ph and Ed448ph).
  - Added SM4 optimization for ARM processors using ASIMD and AES HW instructions.
  - Implemented SM4-XTS support.
  - Added platform-agnostic OSSL_sleep() function.
  - Implemented deterministic ECDSA signatures (RFC6979) support.
  - Implemented AES-GCM-SIV (RFC8452) support.
  - Added support for pluggable (provider-based) TLS signature algorithms.
    This enables TLS 1.3 authentication operations with algorithms embedded
    in providers not included by default in OpenSSL. In combination with
    the already available pluggable KEM and X.509 support, this enables
    for example suitable providers to deliver post-quantum or quantum-safe
    cryptography to OpenSSL users.
  - Added support for pluggable (provider-based) CMS signature algorithms.
    This enables CMS sign and verify operations with algorithms embedded
    in providers not included by default in OpenSSL.
  - Implemented HPKE DHKEM support in providers used by HPKE (RFC9180) API.
  - Add support for certificate compression (RFC8879), including
    library support for Brotli and Zstandard compression.
  - Add the ability to add custom attributes to PKCS12 files. Add a new API
    PKCS12_create_ex2, identical to the existing PKCS12_create_ex but allows
    for a user specified callback and optional argument.
    Added a new PKCS12_SAFEBAG_set0_attr, which allows for a new attr to be
    added to the existing STACK_OF attrs.
  - Major refactor of the libssl record layer.
  - Add a mac salt length option for the pkcs12 command.
  - Add more SRTP protection profiles from RFC8723 and RFC8269.
  - Extended Kernel TLS (KTLS) to support TLS 1.3 receive offload.
  - Add support for TCP Fast Open (RFC7413) to macOS, Linux, and FreeBSD where
    supported and enabled.
  - Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489)
    to the list of ciphersuites providing Perfect Forward Secrecy as
    required by SECLEVEL &gt;= 3.
  - Add new SSL APIs to aid in efficiently implementing TLS/SSL fingerprinting.
    The SSL_CTRL_GET_IANA_GROUPS control code, exposed as the
    SSL_get0_iana_groups() function-like macro, retrieves the list of
    supported groups sent by the peer.
  - Fixed PEM_write_bio_PKCS8PrivateKey() and PEM_write_bio_PKCS8PrivateKey_nid()
    to make it possible to use empty passphrase strings.
  - The PKCS12_parse() function now supports MAC-less PKCS12 files.
  - Added ASYNC_set_mem_functions() and ASYNC_get_mem_functions() calls to be able
    to change functions used for allocating the memory of asynchronous call stack.
  - Added support for signed BIGNUMs in the OSSL_PARAM APIs.
  - A failure exit code is returned when using the openssl x509 command to check
    certificate attributes and the checks fail.
  - The default SSL/TLS security level has been changed from 1 to 2. RSA,
    DSA and DH keys of 1024 bits and above and less than 2048 bits and ECC keys
    of 160 bits and above and less than 224 bits were previously accepted by
    default but are now no longer allowed. By default TLS compression was
    already disabled in previous OpenSSL versions. At security level 2 it cannot
    be enabled.
  - The SSL_CTX_set_cipher_list family functions now accept ciphers using their
    IANA standard names.
  - The PVK key derivation function has been moved from b2i_PVK_bio_ex() into
    the legacy crypto provider as an EVP_KDF. Applications requiring this KDF
    will need to load the legacy crypto provider.
  - CCM8 cipher suites in TLS have been downgraded to security level zero
    because they use a short authentication tag which lowers their strength.
  - Subject or issuer names in X.509 objects are now displayed as UTF-8 strings
    by default. Also spaces surrounding '=' in DN output are removed.
  - Add X.509 certificate codeSigning purpose and related checks on key usage and
    extended key usage of the leaf certificate according to the CA/Browser Forum.
  - The 'x509', 'ca', and 'req' apps now produce X.509 v3 certificates.
    The '-x509v1' option of 'req' prefers generation of X.509 v1 certificates.
    'X509_sign()' and 'X509_sign_ctx()' make sure that the certificate has
    X.509 version 3 if the certificate information includes X.509 extensions.
  - Fix and extend certificate handling and the apps 'x509', 'verify' etc.
    such as adding a trace facility for debugging certificate chain building.
  - Various fixes and extensions to the CMP+CRMF implementation and the 'cmp' app
    in particular supporting requests for central key generation, generalized
    polling, and various types of genm/genp exchanges defined in CMP Updates.
  - Fixes and extensions to the HTTP client and to the HTTP server in 'apps/'
    like correcting the TLS and proxy support and adding tracing for debugging.
  - Extended the CMS API for handling 'CMS_SignedData' and 'CMS_EnvelopedData'.
  - 'CMS_add0_cert()' and 'CMS_add1_cert()' no longer throw an error if
    a certificate to be added is already present. 'CMS_sign_ex()' and
    'CMS_sign()' now ignore any duplicate certificates in their 'certs' argument
    and no longer throw an error for them.
  - Added BIO_s_dgram_pair() and BIO_s_dgram_mem() that provide memory-based
    BIOs with datagram semantics and support for BIO_sendmmsg() and BIO_recvmmsg()
    calls. They can be used as the transport BIOs for QUIC.
  - Add new BIO_sendmmsg() and BIO_recvmmsg() BIO methods which allow
    sending and receiving multiple messages in a single call. An implementation
    is provided for BIO_dgram. For further details, see BIO_sendmmsg(3).
  - Support for loading root certificates from the Windows certificate store
    has been added.
  - Enable KTLS with the TLS 1.3 CCM mode ciphersuites. Note that some linux
    kernel versions that support KTLS have a known bug in CCM processing. That
    has been fixed in stable releases starting from 5.4.164, 5.10.84, 5.15.7,
    and all releases since 5.16. KTLS with CCM ciphersuites should be only used
    on these releases.
  - Added '-ktls' option to 's_server' and 's_client' commands to enable the
    KTLS support.
  - Zerocopy KTLS sendfile() support on Linux.
  - The OBJ_ calls are now thread safe using a global lock.
  - New parameter '-digest' for openssl cms command allowing signing
    pre-computed digests and new CMS API functions supporting that
    functionality.
  - OPENSSL_malloc() and other allocation functions now raise errors on
    allocation failures. The callers do not need to explicitly raise errors
    unless they want to for tracing purposes.
  - Added support for Brainpool curves in TLS-1.3.
  - Support for Argon2d, Argon2i, Argon2id KDFs has been added along with
    a basic thread pool implementation for select platforms.</changelog>
  <changelog author="pmonreal@suse.com" date="1729857601">- Update to 3.2.1:
  * Changes between 3.2.0 and 3.2.1:
  - A file in PKCS12 format can contain certificates and keys and may come from
    an untrusted source. The PKCS12 specification allows certain fields to be
    NULL, but OpenSSL did not correctly check for this case. [CVE-2024-0727]
  - When function EVP_PKEY_public_check() is called on RSA public keys,
    a computation is done to confirm that the RSA modulus, n, is composite.
    For valid RSA keys, n is a product of two or more large primes and this
    computation completes quickly. However, if n is an overly large prime,
    then this computation would take a long time. [CVE-2023-6237]
  - Restore the encoding of SM2 PrivateKeyInfo and SubjectPublicKeyInfo to
    have the contained AlgorithmIdentifier.algorithm set to id-ecPublicKey
    rather than SM2.
  - The POLY1305 MAC (message authentication code) implementation in OpenSSL
    for PowerPC CPUs saves the contents of vector registers in different
    order than they are restored. [CVE-2023-6129]
  - Disable building QUIC server utility when OpenSSL is configured with 'no-apps'.
  * The openssl-crypto-policies-support.patch has been merged into
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Rename openssl-Disable-default-provider-for-test-suite.patch and rebase to
    openssl-TESTS-Disable-default-provider-crypto-policies.patch
  * Patches removed in the update:
  - openssl-Add_support_for_Windows_CA_certificate_store.patch
  - openssl-ec-56-bit-Limb-Solinas-Strategy-for-secp384r1.patch
  - openssl-ec-Use-static-linkage-on-nistp521-felem_-square-mul-.patch
  - openssl-ec-powerpc64le-Add-asm-implementation-of-felem_-squa.patch
  - openssl-ecc-Remove-extraneous-parentheses-in-secp384r1.patch
  - openssl-powerpc-ecc-Fix-stack-allocation-secp384r1-asm.patch
  - openssl-CVE-2024-41996.patch
  - openssl-CVE-2023-50782.patch
  - openssl-CVE-2024-9143.patch
  * Patches rebased:
  - openssl-3-use-include-directive.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-DEFAULT_SUSE_cipher.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Force-FIPS.patch
  - openssl-load-legacy-provider.patch
  - openssl-no-html-docs.patch
  - openssl-pkgconfig.patch
  - openssl-ppc64-config.patch
  - openssl-truststore.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116800">- Remove the hardcoded DEFAULT_SUSE cipherlist selection.
  * Remove openssl-DEFAULT_SUSE_cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116801">- Update to 3.2.3:
  * Changes between 3.2.2 and 3.2.3:
  - Fixed possible denial of service in X.509 name checks. [CVE-2024-6119]
  - Fixed possible buffer overread in SSL_select_next_proto(). [CVE-2024-5535]
  * Changes between 3.2.1 and 3.2.2:
  - Fixed potential use after free after SSL_free_buffers() is called. [CVE-2024-4741]
  - Fixed an issue where checking excessively long DSA keys or parameters may
    be very slow. [CVE-2024-4603]
  - Improved EC/DSA nonce generation routines to avoid bias and timing
    side channel leaks.
  - Fixed an issue where some non-default TLS server configurations can cause
    unbounded memory growth when processing TLSv1.3 sessions. [CVE-2024-2511]
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded. This can be used on platforms
    where using atexit() from shared libraries causes crashes on exit.
  - Fixed bug where SSL_export_keying_material() could not be used with QUIC
    connections.
  * Add openssl-skip-quic-pairwise.patch to adapt the pairwise tests.
  * Merge openssl-FIPS-release_num_in_version_string.patch into
    openssl-FIPS-services-minimize.patch
  * Rebase patches:
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Remove-EC-curves.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-3-use-include-directive.patch
  * Remove not needed patches:
  - openssl-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  - openssl-3-FIPS-PCT_rsa_keygen.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730462400">- Support MSA 12 SHA3 on s390x [jsc#PED-10280]
  * Add openssl-3-add_EVP_DigestSqueeze_api.patch
  * Add openssl-3-support-multiple-sha3_squeeze_s390x.patch
  * Add openssl-3-add-xof-state-handling-s3_absorb.patch
  * Add openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  * Add openssl-3-fix-state-handling-sha3_final_s390x.patch
  * Add openssl-3-fix-state-handling-shake_final_s390x.patch
  * Add openssl-3-fix-state-handling-keccak_final_s390x.patch
  * Add openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  * Add openssl-3-add-defines-CPACF-funcs.patch
  * Add openssl-3-add-hw-acceleration-hmac.patch
  * Add openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  * Add openssl-3-fix-s390x_sha3_absorb.patch
  * Add openssl-3-fix-s390x_shake_squeeze.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808000">- Support MSA 10 XTS on s390x [jsc#PED-10273]
  * s390x: Add hardware acceleration for full AES-XTS
  * Add openssl-3-hw-acceleration-aes-xts-s390x.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808001">- Support MSA 11 HMAC on s390x [jsc#PED-10274]
  * Add openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  * Add openssl-3-fix-hmac-digest-detection-s390x.patch
  * Add openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730980800">- Add missing fixes for SHA3_squeeze and quic_multistream_test on
  pcc64 arch. [jsc#PED-10280]
  * Added openssl-3-fix-sha3-squeeze-ppc64.patch
  * Added openssl-3-fix-quic_multistream_test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1731412800">- Do not use HASHBANGPERL to avoid introducing a dependency on the
  perl-base package. [bsc#1233235]</changelog>
  <changelog author="pmonreal@suse.com" date="1734436800">- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
  - openssl-3-use-include-directive.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1738238400">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Security fix: [bsc#1236599, CVE-2024-12797]
  * RFC7250 handshakes with unauthenticated servers don't abort as
    expected.
  * Add openssl-CVE-2024-12797.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1746014400">- Security fix: [bsc#1240366, CVE-2025-27587]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
  <changelog author="mls@suse.de" date="1751371200">- Backport mdless cms signing support [jsc#PED-12895]
  * Add openssl-3-support-mdless-cms.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- FIPS: Fix EMS in crypto-policies FIPS:NO-ENFORCE-EMS
  * [bsc#1230959, bsc#1232326, bsc#1231748, bsc#1246428]
  * Add patch openssl-FIPS-fix-EMS-support.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1753876800">- Increase limit for CRL download [bsc#1247148, bsc#1247144]
  * Add openssl-3-large-CRLs.patch</changelog>
</package>
<package pkgid="1bd9150076ddbd0070b71947ac689e8623fbd78e8dec858f76c063bdc2403495" name="libopenssl-3-fips-provider-32bit" arch="x86_64">
  <version epoch="0" ver="3.2.3" rel="150700.5.21.1"/>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1231741, CVE-2024-9143]
  * Low-level invalid GF(2^m) parameters lead to OOB memory access
  * Add openssl-CVE-2024-9143.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729512000">- Update to 3.1.7:
  * Major changes between OpenSSL 3.1.6 and OpenSSL 3.1.7 [3 Sep 2024]
  - Fixed possible denial of service in X.509 name checks (CVE-2024-6119)
  - Fixed possible buffer overread in SSL_select_next_proto()
    (CVE-2024-5535)
  * Major changes between OpenSSL 3.1.5 and OpenSSL 3.1.6 [4 Jun 2024]
  - Fixed potential use after free after SSL_free_buffers() is
    called (CVE-2024-4741)
  - Fixed an issue where checking excessively long DSA keys or
    parameters may be very slow (CVE-2024-4603)
  - Fixed unbounded memory growth with session handling in TLSv1.3
    (CVE-2024-2511)
  * Major changes between OpenSSL 3.1.4 and OpenSSL 3.1.5 [30 Jan 2024]
  - Fixed PKCS12 Decoding crashes (CVE-2024-0727)
  - Fixed Excessive time spent checking invalid RSA public keys
    [CVE-2023-6237)
  - Fixed POLY1305 MAC implementation corrupting vector registers
    on PowerPC CPUs which support PowerISA 2.07 (CVE-2023-6129)
  - Fix excessive time spent in DH check / generation with large
    Q parameter value (CVE-2023-5678)
  * Update openssl.keyring with BA5473A2B0587B07FB27CF2D216094DFD0CB81EF
  * Rebase patches:
  - openssl-Force-FIPS.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-CVE-2023-50782.patch
  * Remove patches fixed in the update:
  - openssl-Improve-performance-for-6x-unrolling-with-vpermxor-i.patch
  - openssl-CVE-2024-6119.patch openssl-CVE-2024-5535.patch
  - openssl-CVE-2024-4741.patch openssl-CVE-2024-4603.patch
  - openssl-CVE-2024-2511.patch openssl-CVE-2024-0727.patch
  - openssl-CVE-2023-6237.patch openssl-CVE-2023-6129.patch
  - openssl-CVE-2023-5678.patch openssl-3-CVE-2024-41996.patch
  - openssl-Enable-BTI-feature-for-md5-on-aarch64.patch
  - openssl-Fix-EVP_PKEY_CTX_add1_hkdf_info-behavior.patch
  - openssl-Handle-empty-param-in-EVP_PKEY_CTX_add1_hkdf_info.patch
  - reproducible.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729857600">- Update to 3.2.0:
  * Changes between 3.1.x and 3.2.0:
  - Fix excessive time spent in DH check/ generation with large Q parameter
    value. [CVE-2023-5678]
  - The BLAKE2b hash algorithm supports a configurable output length
    by setting the "size" parameter.
  - Added a function to delete objects from store by URI - OSSL_STORE_delete()
    and the corresponding provider-storemgmt API function OSSL_FUNC_store_delete().
  - Added OSSL_FUNC_store_open_ex() provider-storemgmt API function to pass
    a passphrase callback when opening a store.
  - Changed the default salt length used by PBES2 KDF's (PBKDF2 and scrypt)
    from 8 bytes to 16 bytes.
  - Changed the default value of the 'ess_cert_id_alg' configuration
    option which is used to calculate the TSA's public key certificate
    identifier. The default algorithm is updated to be sha256 instead of sha1.
  - Added optimization for SM2 algorithm on aarch64. A new configure option
    'no-sm2-precomp' has been added to disable the precomputed table.
  - Added client side support for QUIC
  - Added secp384r1 implementation using Solinas' reduction to improve
    speed of the NIST P-384 elliptic curve. To enable the implementation
    the build option 'enable-ec_nistp_64_gcc_128' must be used.
  - Improved RFC7468 compliance of the asn1parse command.
  - Added SHA256/192 algorithm support.
  - Added support for securely getting root CA certificate update in CMP.
  - Improved contention on global write locks by using more read locks where
    appropriate.
  - Improved performance of OSSL_PARAM lookups in performance critical
    provider functions.
  - Added the SSL_get0_group_name() function to provide access to the
    name of the group used for the TLS key exchange.
  - Provide a new configure option 'no-http' that can be used to disable the
    HTTP support. Provide new configure options 'no-apps' and 'no-docs' to
    disable building the openssl command line application and the documentation.
  - Provide a new configure option 'no-ecx' that can be used to disable the
    X25519, X448, and EdDSA support.
  - When multiple OSSL_KDF_PARAM_INFO parameters are passed to
    the EVP_KDF_CTX_set_params() function they are now concatenated not just
    for the HKDF algorithm but also for SSKDF and X9.63 KDF algorithms.
  - Added OSSL_FUNC_keymgmt_im/export_types_ex() provider functions that get
    the provider context as a parameter.
  - TLS round-trip time calculation was added by a Brigham Young University
    Capstone team partnering with Sandia National Laboratories. A new function
    in ssl_lib titled SSL_get_handshake_rtt will calculate and retrieve this
    value.
  - Added the "-quic" option to s_client to enable connectivity to QUIC servers.
    QUIC requires the use of ALPN, so this must be specified via the "-alpn"
    option. Use of the "advanced" s_client command command via the "-adv" option
    is recommended.
  - Added an "advanced" command mode to s_client. Use this with the "-adv" option.
  - Add Raw Public Key (RFC7250) support.
  - Added support for modular exponentiation and CRT offloading for the
    S390x architecture.
  - Added further assembler code for the RISC-V architecture.
  - Added EC_GROUP_to_params() which creates an OSSL_PARAM array
    from a given EC_GROUP.
  - Improved support for non-default library contexts and property queries
    when parsing PKCS#12 files.
  - Implemented support for all five instances of EdDSA from RFC8032:
    Ed25519, Ed25519ctx, Ed25519ph, Ed448, and Ed448ph.
    The streaming is not yet supported for the HashEdDSA variants
    (Ed25519ph and Ed448ph).
  - Added SM4 optimization for ARM processors using ASIMD and AES HW instructions.
  - Implemented SM4-XTS support.
  - Added platform-agnostic OSSL_sleep() function.
  - Implemented deterministic ECDSA signatures (RFC6979) support.
  - Implemented AES-GCM-SIV (RFC8452) support.
  - Added support for pluggable (provider-based) TLS signature algorithms.
    This enables TLS 1.3 authentication operations with algorithms embedded
    in providers not included by default in OpenSSL. In combination with
    the already available pluggable KEM and X.509 support, this enables
    for example suitable providers to deliver post-quantum or quantum-safe
    cryptography to OpenSSL users.
  - Added support for pluggable (provider-based) CMS signature algorithms.
    This enables CMS sign and verify operations with algorithms embedded
    in providers not included by default in OpenSSL.
  - Implemented HPKE DHKEM support in providers used by HPKE (RFC9180) API.
  - Add support for certificate compression (RFC8879), including
    library support for Brotli and Zstandard compression.
  - Add the ability to add custom attributes to PKCS12 files. Add a new API
    PKCS12_create_ex2, identical to the existing PKCS12_create_ex but allows
    for a user specified callback and optional argument.
    Added a new PKCS12_SAFEBAG_set0_attr, which allows for a new attr to be
    added to the existing STACK_OF attrs.
  - Major refactor of the libssl record layer.
  - Add a mac salt length option for the pkcs12 command.
  - Add more SRTP protection profiles from RFC8723 and RFC8269.
  - Extended Kernel TLS (KTLS) to support TLS 1.3 receive offload.
  - Add support for TCP Fast Open (RFC7413) to macOS, Linux, and FreeBSD where
    supported and enabled.
  - Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489)
    to the list of ciphersuites providing Perfect Forward Secrecy as
    required by SECLEVEL &gt;= 3.
  - Add new SSL APIs to aid in efficiently implementing TLS/SSL fingerprinting.
    The SSL_CTRL_GET_IANA_GROUPS control code, exposed as the
    SSL_get0_iana_groups() function-like macro, retrieves the list of
    supported groups sent by the peer.
  - Fixed PEM_write_bio_PKCS8PrivateKey() and PEM_write_bio_PKCS8PrivateKey_nid()
    to make it possible to use empty passphrase strings.
  - The PKCS12_parse() function now supports MAC-less PKCS12 files.
  - Added ASYNC_set_mem_functions() and ASYNC_get_mem_functions() calls to be able
    to change functions used for allocating the memory of asynchronous call stack.
  - Added support for signed BIGNUMs in the OSSL_PARAM APIs.
  - A failure exit code is returned when using the openssl x509 command to check
    certificate attributes and the checks fail.
  - The default SSL/TLS security level has been changed from 1 to 2. RSA,
    DSA and DH keys of 1024 bits and above and less than 2048 bits and ECC keys
    of 160 bits and above and less than 224 bits were previously accepted by
    default but are now no longer allowed. By default TLS compression was
    already disabled in previous OpenSSL versions. At security level 2 it cannot
    be enabled.
  - The SSL_CTX_set_cipher_list family functions now accept ciphers using their
    IANA standard names.
  - The PVK key derivation function has been moved from b2i_PVK_bio_ex() into
    the legacy crypto provider as an EVP_KDF. Applications requiring this KDF
    will need to load the legacy crypto provider.
  - CCM8 cipher suites in TLS have been downgraded to security level zero
    because they use a short authentication tag which lowers their strength.
  - Subject or issuer names in X.509 objects are now displayed as UTF-8 strings
    by default. Also spaces surrounding '=' in DN output are removed.
  - Add X.509 certificate codeSigning purpose and related checks on key usage and
    extended key usage of the leaf certificate according to the CA/Browser Forum.
  - The 'x509', 'ca', and 'req' apps now produce X.509 v3 certificates.
    The '-x509v1' option of 'req' prefers generation of X.509 v1 certificates.
    'X509_sign()' and 'X509_sign_ctx()' make sure that the certificate has
    X.509 version 3 if the certificate information includes X.509 extensions.
  - Fix and extend certificate handling and the apps 'x509', 'verify' etc.
    such as adding a trace facility for debugging certificate chain building.
  - Various fixes and extensions to the CMP+CRMF implementation and the 'cmp' app
    in particular supporting requests for central key generation, generalized
    polling, and various types of genm/genp exchanges defined in CMP Updates.
  - Fixes and extensions to the HTTP client and to the HTTP server in 'apps/'
    like correcting the TLS and proxy support and adding tracing for debugging.
  - Extended the CMS API for handling 'CMS_SignedData' and 'CMS_EnvelopedData'.
  - 'CMS_add0_cert()' and 'CMS_add1_cert()' no longer throw an error if
    a certificate to be added is already present. 'CMS_sign_ex()' and
    'CMS_sign()' now ignore any duplicate certificates in their 'certs' argument
    and no longer throw an error for them.
  - Added BIO_s_dgram_pair() and BIO_s_dgram_mem() that provide memory-based
    BIOs with datagram semantics and support for BIO_sendmmsg() and BIO_recvmmsg()
    calls. They can be used as the transport BIOs for QUIC.
  - Add new BIO_sendmmsg() and BIO_recvmmsg() BIO methods which allow
    sending and receiving multiple messages in a single call. An implementation
    is provided for BIO_dgram. For further details, see BIO_sendmmsg(3).
  - Support for loading root certificates from the Windows certificate store
    has been added.
  - Enable KTLS with the TLS 1.3 CCM mode ciphersuites. Note that some linux
    kernel versions that support KTLS have a known bug in CCM processing. That
    has been fixed in stable releases starting from 5.4.164, 5.10.84, 5.15.7,
    and all releases since 5.16. KTLS with CCM ciphersuites should be only used
    on these releases.
  - Added '-ktls' option to 's_server' and 's_client' commands to enable the
    KTLS support.
  - Zerocopy KTLS sendfile() support on Linux.
  - The OBJ_ calls are now thread safe using a global lock.
  - New parameter '-digest' for openssl cms command allowing signing
    pre-computed digests and new CMS API functions supporting that
    functionality.
  - OPENSSL_malloc() and other allocation functions now raise errors on
    allocation failures. The callers do not need to explicitly raise errors
    unless they want to for tracing purposes.
  - Added support for Brainpool curves in TLS-1.3.
  - Support for Argon2d, Argon2i, Argon2id KDFs has been added along with
    a basic thread pool implementation for select platforms.</changelog>
  <changelog author="pmonreal@suse.com" date="1729857601">- Update to 3.2.1:
  * Changes between 3.2.0 and 3.2.1:
  - A file in PKCS12 format can contain certificates and keys and may come from
    an untrusted source. The PKCS12 specification allows certain fields to be
    NULL, but OpenSSL did not correctly check for this case. [CVE-2024-0727]
  - When function EVP_PKEY_public_check() is called on RSA public keys,
    a computation is done to confirm that the RSA modulus, n, is composite.
    For valid RSA keys, n is a product of two or more large primes and this
    computation completes quickly. However, if n is an overly large prime,
    then this computation would take a long time. [CVE-2023-6237]
  - Restore the encoding of SM2 PrivateKeyInfo and SubjectPublicKeyInfo to
    have the contained AlgorithmIdentifier.algorithm set to id-ecPublicKey
    rather than SM2.
  - The POLY1305 MAC (message authentication code) implementation in OpenSSL
    for PowerPC CPUs saves the contents of vector registers in different
    order than they are restored. [CVE-2023-6129]
  - Disable building QUIC server utility when OpenSSL is configured with 'no-apps'.
  * The openssl-crypto-policies-support.patch has been merged into
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Rename openssl-Disable-default-provider-for-test-suite.patch and rebase to
    openssl-TESTS-Disable-default-provider-crypto-policies.patch
  * Patches removed in the update:
  - openssl-Add_support_for_Windows_CA_certificate_store.patch
  - openssl-ec-56-bit-Limb-Solinas-Strategy-for-secp384r1.patch
  - openssl-ec-Use-static-linkage-on-nistp521-felem_-square-mul-.patch
  - openssl-ec-powerpc64le-Add-asm-implementation-of-felem_-squa.patch
  - openssl-ecc-Remove-extraneous-parentheses-in-secp384r1.patch
  - openssl-powerpc-ecc-Fix-stack-allocation-secp384r1-asm.patch
  - openssl-CVE-2024-41996.patch
  - openssl-CVE-2023-50782.patch
  - openssl-CVE-2024-9143.patch
  * Patches rebased:
  - openssl-3-use-include-directive.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-DEFAULT_SUSE_cipher.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Force-FIPS.patch
  - openssl-load-legacy-provider.patch
  - openssl-no-html-docs.patch
  - openssl-pkgconfig.patch
  - openssl-ppc64-config.patch
  - openssl-truststore.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116800">- Remove the hardcoded DEFAULT_SUSE cipherlist selection.
  * Remove openssl-DEFAULT_SUSE_cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116801">- Update to 3.2.3:
  * Changes between 3.2.2 and 3.2.3:
  - Fixed possible denial of service in X.509 name checks. [CVE-2024-6119]
  - Fixed possible buffer overread in SSL_select_next_proto(). [CVE-2024-5535]
  * Changes between 3.2.1 and 3.2.2:
  - Fixed potential use after free after SSL_free_buffers() is called. [CVE-2024-4741]
  - Fixed an issue where checking excessively long DSA keys or parameters may
    be very slow. [CVE-2024-4603]
  - Improved EC/DSA nonce generation routines to avoid bias and timing
    side channel leaks.
  - Fixed an issue where some non-default TLS server configurations can cause
    unbounded memory growth when processing TLSv1.3 sessions. [CVE-2024-2511]
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded. This can be used on platforms
    where using atexit() from shared libraries causes crashes on exit.
  - Fixed bug where SSL_export_keying_material() could not be used with QUIC
    connections.
  * Add openssl-skip-quic-pairwise.patch to adapt the pairwise tests.
  * Merge openssl-FIPS-release_num_in_version_string.patch into
    openssl-FIPS-services-minimize.patch
  * Rebase patches:
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Remove-EC-curves.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-3-use-include-directive.patch
  * Remove not needed patches:
  - openssl-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  - openssl-3-FIPS-PCT_rsa_keygen.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730462400">- Support MSA 12 SHA3 on s390x [jsc#PED-10280]
  * Add openssl-3-add_EVP_DigestSqueeze_api.patch
  * Add openssl-3-support-multiple-sha3_squeeze_s390x.patch
  * Add openssl-3-add-xof-state-handling-s3_absorb.patch
  * Add openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  * Add openssl-3-fix-state-handling-sha3_final_s390x.patch
  * Add openssl-3-fix-state-handling-shake_final_s390x.patch
  * Add openssl-3-fix-state-handling-keccak_final_s390x.patch
  * Add openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  * Add openssl-3-add-defines-CPACF-funcs.patch
  * Add openssl-3-add-hw-acceleration-hmac.patch
  * Add openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  * Add openssl-3-fix-s390x_sha3_absorb.patch
  * Add openssl-3-fix-s390x_shake_squeeze.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808000">- Support MSA 10 XTS on s390x [jsc#PED-10273]
  * s390x: Add hardware acceleration for full AES-XTS
  * Add openssl-3-hw-acceleration-aes-xts-s390x.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808001">- Support MSA 11 HMAC on s390x [jsc#PED-10274]
  * Add openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  * Add openssl-3-fix-hmac-digest-detection-s390x.patch
  * Add openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730980800">- Add missing fixes for SHA3_squeeze and quic_multistream_test on
  pcc64 arch. [jsc#PED-10280]
  * Added openssl-3-fix-sha3-squeeze-ppc64.patch
  * Added openssl-3-fix-quic_multistream_test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1731412800">- Do not use HASHBANGPERL to avoid introducing a dependency on the
  perl-base package. [bsc#1233235]</changelog>
  <changelog author="pmonreal@suse.com" date="1734436800">- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
  - openssl-3-use-include-directive.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1738238400">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Security fix: [bsc#1236599, CVE-2024-12797]
  * RFC7250 handshakes with unauthenticated servers don't abort as
    expected.
  * Add openssl-CVE-2024-12797.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1746014400">- Security fix: [bsc#1240366, CVE-2025-27587]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
  <changelog author="mls@suse.de" date="1751371200">- Backport mdless cms signing support [jsc#PED-12895]
  * Add openssl-3-support-mdless-cms.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- FIPS: Fix EMS in crypto-policies FIPS:NO-ENFORCE-EMS
  * [bsc#1230959, bsc#1232326, bsc#1231748, bsc#1246428]
  * Add patch openssl-FIPS-fix-EMS-support.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1753876800">- Increase limit for CRL download [bsc#1247148, bsc#1247144]
  * Add openssl-3-large-CRLs.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1759233600">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl3-CVE-2025-9230.patch</changelog>
</package>
<package pkgid="fb611a2b1da53c893f2a002ad1537262ec6f7e6b9f853eaa6fb6616d053f4965" name="libopenssl-3-fips-provider-32bit" arch="x86_64">
  <version epoch="0" ver="3.2.3" rel="150700.5.24.1"/>
  <changelog author="pmonreal@suse.com" date="1729512000">- Update to 3.1.7:
  * Major changes between OpenSSL 3.1.6 and OpenSSL 3.1.7 [3 Sep 2024]
  - Fixed possible denial of service in X.509 name checks (CVE-2024-6119)
  - Fixed possible buffer overread in SSL_select_next_proto()
    (CVE-2024-5535)
  * Major changes between OpenSSL 3.1.5 and OpenSSL 3.1.6 [4 Jun 2024]
  - Fixed potential use after free after SSL_free_buffers() is
    called (CVE-2024-4741)
  - Fixed an issue where checking excessively long DSA keys or
    parameters may be very slow (CVE-2024-4603)
  - Fixed unbounded memory growth with session handling in TLSv1.3
    (CVE-2024-2511)
  * Major changes between OpenSSL 3.1.4 and OpenSSL 3.1.5 [30 Jan 2024]
  - Fixed PKCS12 Decoding crashes (CVE-2024-0727)
  - Fixed Excessive time spent checking invalid RSA public keys
    [CVE-2023-6237)
  - Fixed POLY1305 MAC implementation corrupting vector registers
    on PowerPC CPUs which support PowerISA 2.07 (CVE-2023-6129)
  - Fix excessive time spent in DH check / generation with large
    Q parameter value (CVE-2023-5678)
  * Update openssl.keyring with BA5473A2B0587B07FB27CF2D216094DFD0CB81EF
  * Rebase patches:
  - openssl-Force-FIPS.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-CVE-2023-50782.patch
  * Remove patches fixed in the update:
  - openssl-Improve-performance-for-6x-unrolling-with-vpermxor-i.patch
  - openssl-CVE-2024-6119.patch openssl-CVE-2024-5535.patch
  - openssl-CVE-2024-4741.patch openssl-CVE-2024-4603.patch
  - openssl-CVE-2024-2511.patch openssl-CVE-2024-0727.patch
  - openssl-CVE-2023-6237.patch openssl-CVE-2023-6129.patch
  - openssl-CVE-2023-5678.patch openssl-3-CVE-2024-41996.patch
  - openssl-Enable-BTI-feature-for-md5-on-aarch64.patch
  - openssl-Fix-EVP_PKEY_CTX_add1_hkdf_info-behavior.patch
  - openssl-Handle-empty-param-in-EVP_PKEY_CTX_add1_hkdf_info.patch
  - reproducible.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729857600">- Update to 3.2.0:
  * Changes between 3.1.x and 3.2.0:
  - Fix excessive time spent in DH check/ generation with large Q parameter
    value. [CVE-2023-5678]
  - The BLAKE2b hash algorithm supports a configurable output length
    by setting the "size" parameter.
  - Added a function to delete objects from store by URI - OSSL_STORE_delete()
    and the corresponding provider-storemgmt API function OSSL_FUNC_store_delete().
  - Added OSSL_FUNC_store_open_ex() provider-storemgmt API function to pass
    a passphrase callback when opening a store.
  - Changed the default salt length used by PBES2 KDF's (PBKDF2 and scrypt)
    from 8 bytes to 16 bytes.
  - Changed the default value of the 'ess_cert_id_alg' configuration
    option which is used to calculate the TSA's public key certificate
    identifier. The default algorithm is updated to be sha256 instead of sha1.
  - Added optimization for SM2 algorithm on aarch64. A new configure option
    'no-sm2-precomp' has been added to disable the precomputed table.
  - Added client side support for QUIC
  - Added secp384r1 implementation using Solinas' reduction to improve
    speed of the NIST P-384 elliptic curve. To enable the implementation
    the build option 'enable-ec_nistp_64_gcc_128' must be used.
  - Improved RFC7468 compliance of the asn1parse command.
  - Added SHA256/192 algorithm support.
  - Added support for securely getting root CA certificate update in CMP.
  - Improved contention on global write locks by using more read locks where
    appropriate.
  - Improved performance of OSSL_PARAM lookups in performance critical
    provider functions.
  - Added the SSL_get0_group_name() function to provide access to the
    name of the group used for the TLS key exchange.
  - Provide a new configure option 'no-http' that can be used to disable the
    HTTP support. Provide new configure options 'no-apps' and 'no-docs' to
    disable building the openssl command line application and the documentation.
  - Provide a new configure option 'no-ecx' that can be used to disable the
    X25519, X448, and EdDSA support.
  - When multiple OSSL_KDF_PARAM_INFO parameters are passed to
    the EVP_KDF_CTX_set_params() function they are now concatenated not just
    for the HKDF algorithm but also for SSKDF and X9.63 KDF algorithms.
  - Added OSSL_FUNC_keymgmt_im/export_types_ex() provider functions that get
    the provider context as a parameter.
  - TLS round-trip time calculation was added by a Brigham Young University
    Capstone team partnering with Sandia National Laboratories. A new function
    in ssl_lib titled SSL_get_handshake_rtt will calculate and retrieve this
    value.
  - Added the "-quic" option to s_client to enable connectivity to QUIC servers.
    QUIC requires the use of ALPN, so this must be specified via the "-alpn"
    option. Use of the "advanced" s_client command command via the "-adv" option
    is recommended.
  - Added an "advanced" command mode to s_client. Use this with the "-adv" option.
  - Add Raw Public Key (RFC7250) support.
  - Added support for modular exponentiation and CRT offloading for the
    S390x architecture.
  - Added further assembler code for the RISC-V architecture.
  - Added EC_GROUP_to_params() which creates an OSSL_PARAM array
    from a given EC_GROUP.
  - Improved support for non-default library contexts and property queries
    when parsing PKCS#12 files.
  - Implemented support for all five instances of EdDSA from RFC8032:
    Ed25519, Ed25519ctx, Ed25519ph, Ed448, and Ed448ph.
    The streaming is not yet supported for the HashEdDSA variants
    (Ed25519ph and Ed448ph).
  - Added SM4 optimization for ARM processors using ASIMD and AES HW instructions.
  - Implemented SM4-XTS support.
  - Added platform-agnostic OSSL_sleep() function.
  - Implemented deterministic ECDSA signatures (RFC6979) support.
  - Implemented AES-GCM-SIV (RFC8452) support.
  - Added support for pluggable (provider-based) TLS signature algorithms.
    This enables TLS 1.3 authentication operations with algorithms embedded
    in providers not included by default in OpenSSL. In combination with
    the already available pluggable KEM and X.509 support, this enables
    for example suitable providers to deliver post-quantum or quantum-safe
    cryptography to OpenSSL users.
  - Added support for pluggable (provider-based) CMS signature algorithms.
    This enables CMS sign and verify operations with algorithms embedded
    in providers not included by default in OpenSSL.
  - Implemented HPKE DHKEM support in providers used by HPKE (RFC9180) API.
  - Add support for certificate compression (RFC8879), including
    library support for Brotli and Zstandard compression.
  - Add the ability to add custom attributes to PKCS12 files. Add a new API
    PKCS12_create_ex2, identical to the existing PKCS12_create_ex but allows
    for a user specified callback and optional argument.
    Added a new PKCS12_SAFEBAG_set0_attr, which allows for a new attr to be
    added to the existing STACK_OF attrs.
  - Major refactor of the libssl record layer.
  - Add a mac salt length option for the pkcs12 command.
  - Add more SRTP protection profiles from RFC8723 and RFC8269.
  - Extended Kernel TLS (KTLS) to support TLS 1.3 receive offload.
  - Add support for TCP Fast Open (RFC7413) to macOS, Linux, and FreeBSD where
    supported and enabled.
  - Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489)
    to the list of ciphersuites providing Perfect Forward Secrecy as
    required by SECLEVEL &gt;= 3.
  - Add new SSL APIs to aid in efficiently implementing TLS/SSL fingerprinting.
    The SSL_CTRL_GET_IANA_GROUPS control code, exposed as the
    SSL_get0_iana_groups() function-like macro, retrieves the list of
    supported groups sent by the peer.
  - Fixed PEM_write_bio_PKCS8PrivateKey() and PEM_write_bio_PKCS8PrivateKey_nid()
    to make it possible to use empty passphrase strings.
  - The PKCS12_parse() function now supports MAC-less PKCS12 files.
  - Added ASYNC_set_mem_functions() and ASYNC_get_mem_functions() calls to be able
    to change functions used for allocating the memory of asynchronous call stack.
  - Added support for signed BIGNUMs in the OSSL_PARAM APIs.
  - A failure exit code is returned when using the openssl x509 command to check
    certificate attributes and the checks fail.
  - The default SSL/TLS security level has been changed from 1 to 2. RSA,
    DSA and DH keys of 1024 bits and above and less than 2048 bits and ECC keys
    of 160 bits and above and less than 224 bits were previously accepted by
    default but are now no longer allowed. By default TLS compression was
    already disabled in previous OpenSSL versions. At security level 2 it cannot
    be enabled.
  - The SSL_CTX_set_cipher_list family functions now accept ciphers using their
    IANA standard names.
  - The PVK key derivation function has been moved from b2i_PVK_bio_ex() into
    the legacy crypto provider as an EVP_KDF. Applications requiring this KDF
    will need to load the legacy crypto provider.
  - CCM8 cipher suites in TLS have been downgraded to security level zero
    because they use a short authentication tag which lowers their strength.
  - Subject or issuer names in X.509 objects are now displayed as UTF-8 strings
    by default. Also spaces surrounding '=' in DN output are removed.
  - Add X.509 certificate codeSigning purpose and related checks on key usage and
    extended key usage of the leaf certificate according to the CA/Browser Forum.
  - The 'x509', 'ca', and 'req' apps now produce X.509 v3 certificates.
    The '-x509v1' option of 'req' prefers generation of X.509 v1 certificates.
    'X509_sign()' and 'X509_sign_ctx()' make sure that the certificate has
    X.509 version 3 if the certificate information includes X.509 extensions.
  - Fix and extend certificate handling and the apps 'x509', 'verify' etc.
    such as adding a trace facility for debugging certificate chain building.
  - Various fixes and extensions to the CMP+CRMF implementation and the 'cmp' app
    in particular supporting requests for central key generation, generalized
    polling, and various types of genm/genp exchanges defined in CMP Updates.
  - Fixes and extensions to the HTTP client and to the HTTP server in 'apps/'
    like correcting the TLS and proxy support and adding tracing for debugging.
  - Extended the CMS API for handling 'CMS_SignedData' and 'CMS_EnvelopedData'.
  - 'CMS_add0_cert()' and 'CMS_add1_cert()' no longer throw an error if
    a certificate to be added is already present. 'CMS_sign_ex()' and
    'CMS_sign()' now ignore any duplicate certificates in their 'certs' argument
    and no longer throw an error for them.
  - Added BIO_s_dgram_pair() and BIO_s_dgram_mem() that provide memory-based
    BIOs with datagram semantics and support for BIO_sendmmsg() and BIO_recvmmsg()
    calls. They can be used as the transport BIOs for QUIC.
  - Add new BIO_sendmmsg() and BIO_recvmmsg() BIO methods which allow
    sending and receiving multiple messages in a single call. An implementation
    is provided for BIO_dgram. For further details, see BIO_sendmmsg(3).
  - Support for loading root certificates from the Windows certificate store
    has been added.
  - Enable KTLS with the TLS 1.3 CCM mode ciphersuites. Note that some linux
    kernel versions that support KTLS have a known bug in CCM processing. That
    has been fixed in stable releases starting from 5.4.164, 5.10.84, 5.15.7,
    and all releases since 5.16. KTLS with CCM ciphersuites should be only used
    on these releases.
  - Added '-ktls' option to 's_server' and 's_client' commands to enable the
    KTLS support.
  - Zerocopy KTLS sendfile() support on Linux.
  - The OBJ_ calls are now thread safe using a global lock.
  - New parameter '-digest' for openssl cms command allowing signing
    pre-computed digests and new CMS API functions supporting that
    functionality.
  - OPENSSL_malloc() and other allocation functions now raise errors on
    allocation failures. The callers do not need to explicitly raise errors
    unless they want to for tracing purposes.
  - Added support for Brainpool curves in TLS-1.3.
  - Support for Argon2d, Argon2i, Argon2id KDFs has been added along with
    a basic thread pool implementation for select platforms.</changelog>
  <changelog author="pmonreal@suse.com" date="1729857601">- Update to 3.2.1:
  * Changes between 3.2.0 and 3.2.1:
  - A file in PKCS12 format can contain certificates and keys and may come from
    an untrusted source. The PKCS12 specification allows certain fields to be
    NULL, but OpenSSL did not correctly check for this case. [CVE-2024-0727]
  - When function EVP_PKEY_public_check() is called on RSA public keys,
    a computation is done to confirm that the RSA modulus, n, is composite.
    For valid RSA keys, n is a product of two or more large primes and this
    computation completes quickly. However, if n is an overly large prime,
    then this computation would take a long time. [CVE-2023-6237]
  - Restore the encoding of SM2 PrivateKeyInfo and SubjectPublicKeyInfo to
    have the contained AlgorithmIdentifier.algorithm set to id-ecPublicKey
    rather than SM2.
  - The POLY1305 MAC (message authentication code) implementation in OpenSSL
    for PowerPC CPUs saves the contents of vector registers in different
    order than they are restored. [CVE-2023-6129]
  - Disable building QUIC server utility when OpenSSL is configured with 'no-apps'.
  * The openssl-crypto-policies-support.patch has been merged into
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Rename openssl-Disable-default-provider-for-test-suite.patch and rebase to
    openssl-TESTS-Disable-default-provider-crypto-policies.patch
  * Patches removed in the update:
  - openssl-Add_support_for_Windows_CA_certificate_store.patch
  - openssl-ec-56-bit-Limb-Solinas-Strategy-for-secp384r1.patch
  - openssl-ec-Use-static-linkage-on-nistp521-felem_-square-mul-.patch
  - openssl-ec-powerpc64le-Add-asm-implementation-of-felem_-squa.patch
  - openssl-ecc-Remove-extraneous-parentheses-in-secp384r1.patch
  - openssl-powerpc-ecc-Fix-stack-allocation-secp384r1-asm.patch
  - openssl-CVE-2024-41996.patch
  - openssl-CVE-2023-50782.patch
  - openssl-CVE-2024-9143.patch
  * Patches rebased:
  - openssl-3-use-include-directive.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-DEFAULT_SUSE_cipher.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Force-FIPS.patch
  - openssl-load-legacy-provider.patch
  - openssl-no-html-docs.patch
  - openssl-pkgconfig.patch
  - openssl-ppc64-config.patch
  - openssl-truststore.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116800">- Remove the hardcoded DEFAULT_SUSE cipherlist selection.
  * Remove openssl-DEFAULT_SUSE_cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116801">- Update to 3.2.3:
  * Changes between 3.2.2 and 3.2.3:
  - Fixed possible denial of service in X.509 name checks. [CVE-2024-6119]
  - Fixed possible buffer overread in SSL_select_next_proto(). [CVE-2024-5535]
  * Changes between 3.2.1 and 3.2.2:
  - Fixed potential use after free after SSL_free_buffers() is called. [CVE-2024-4741]
  - Fixed an issue where checking excessively long DSA keys or parameters may
    be very slow. [CVE-2024-4603]
  - Improved EC/DSA nonce generation routines to avoid bias and timing
    side channel leaks.
  - Fixed an issue where some non-default TLS server configurations can cause
    unbounded memory growth when processing TLSv1.3 sessions. [CVE-2024-2511]
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded. This can be used on platforms
    where using atexit() from shared libraries causes crashes on exit.
  - Fixed bug where SSL_export_keying_material() could not be used with QUIC
    connections.
  * Add openssl-skip-quic-pairwise.patch to adapt the pairwise tests.
  * Merge openssl-FIPS-release_num_in_version_string.patch into
    openssl-FIPS-services-minimize.patch
  * Rebase patches:
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Remove-EC-curves.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-3-use-include-directive.patch
  * Remove not needed patches:
  - openssl-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  - openssl-3-FIPS-PCT_rsa_keygen.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730462400">- Support MSA 12 SHA3 on s390x [jsc#PED-10280]
  * Add openssl-3-add_EVP_DigestSqueeze_api.patch
  * Add openssl-3-support-multiple-sha3_squeeze_s390x.patch
  * Add openssl-3-add-xof-state-handling-s3_absorb.patch
  * Add openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  * Add openssl-3-fix-state-handling-sha3_final_s390x.patch
  * Add openssl-3-fix-state-handling-shake_final_s390x.patch
  * Add openssl-3-fix-state-handling-keccak_final_s390x.patch
  * Add openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  * Add openssl-3-add-defines-CPACF-funcs.patch
  * Add openssl-3-add-hw-acceleration-hmac.patch
  * Add openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  * Add openssl-3-fix-s390x_sha3_absorb.patch
  * Add openssl-3-fix-s390x_shake_squeeze.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808000">- Support MSA 10 XTS on s390x [jsc#PED-10273]
  * s390x: Add hardware acceleration for full AES-XTS
  * Add openssl-3-hw-acceleration-aes-xts-s390x.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808001">- Support MSA 11 HMAC on s390x [jsc#PED-10274]
  * Add openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  * Add openssl-3-fix-hmac-digest-detection-s390x.patch
  * Add openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730980800">- Add missing fixes for SHA3_squeeze and quic_multistream_test on
  pcc64 arch. [jsc#PED-10280]
  * Added openssl-3-fix-sha3-squeeze-ppc64.patch
  * Added openssl-3-fix-quic_multistream_test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1731412800">- Do not use HASHBANGPERL to avoid introducing a dependency on the
  perl-base package. [bsc#1233235]</changelog>
  <changelog author="pmonreal@suse.com" date="1734436800">- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
  - openssl-3-use-include-directive.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1738238400">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Security fix: [bsc#1236599, CVE-2024-12797]
  * RFC7250 handshakes with unauthenticated servers don't abort as
    expected.
  * Add openssl-CVE-2024-12797.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1746014400">- Security fix: [bsc#1240366, CVE-2025-27587]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
  <changelog author="mls@suse.de" date="1751371200">- Backport mdless cms signing support [jsc#PED-12895]
  * Add openssl-3-support-mdless-cms.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- FIPS: Fix EMS in crypto-policies FIPS:NO-ENFORCE-EMS
  * [bsc#1230959, bsc#1232326, bsc#1231748, bsc#1246428]
  * Add patch openssl-FIPS-fix-EMS-support.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1753876800">- Increase limit for CRL download [bsc#1247148, bsc#1247144]
  * Add openssl-3-large-CRLs.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1759233600">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl3-CVE-2025-9230.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1768824000">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795]
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * Stack buffer overflow in CMS AuthEnvelopedData parsing
  - openssl-CVE-2025-15467.patch [bsc#1256830, CVE-2025-15467]
  - openssl-CVE-2025-15467-comments.patch
  - openssl-CVE-2025-15467-test.patch</changelog>
</package>
<package pkgid="677b15ef2c92e2c91a80bc4f1c4685f7248530d710d8ac626bf373fe9c9c3274" name="libopenssl-3-fips-provider-32bit" arch="x86_64">
  <version epoch="0" ver="3.2.3" rel="150700.5.31.1"/>
  <changelog author="pmonreal@suse.com" date="1730116800">- Remove the hardcoded DEFAULT_SUSE cipherlist selection.
  * Remove openssl-DEFAULT_SUSE_cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116801">- Update to 3.2.3:
  * Changes between 3.2.2 and 3.2.3:
  - Fixed possible denial of service in X.509 name checks. [CVE-2024-6119]
  - Fixed possible buffer overread in SSL_select_next_proto(). [CVE-2024-5535]
  * Changes between 3.2.1 and 3.2.2:
  - Fixed potential use after free after SSL_free_buffers() is called. [CVE-2024-4741]
  - Fixed an issue where checking excessively long DSA keys or parameters may
    be very slow. [CVE-2024-4603]
  - Improved EC/DSA nonce generation routines to avoid bias and timing
    side channel leaks.
  - Fixed an issue where some non-default TLS server configurations can cause
    unbounded memory growth when processing TLSv1.3 sessions. [CVE-2024-2511]
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded. This can be used on platforms
    where using atexit() from shared libraries causes crashes on exit.
  - Fixed bug where SSL_export_keying_material() could not be used with QUIC
    connections.
  * Add openssl-skip-quic-pairwise.patch to adapt the pairwise tests.
  * Merge openssl-FIPS-release_num_in_version_string.patch into
    openssl-FIPS-services-minimize.patch
  * Rebase patches:
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Remove-EC-curves.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-3-use-include-directive.patch
  * Remove not needed patches:
  - openssl-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  - openssl-3-FIPS-PCT_rsa_keygen.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730462400">- Support MSA 12 SHA3 on s390x [jsc#PED-10280]
  * Add openssl-3-add_EVP_DigestSqueeze_api.patch
  * Add openssl-3-support-multiple-sha3_squeeze_s390x.patch
  * Add openssl-3-add-xof-state-handling-s3_absorb.patch
  * Add openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  * Add openssl-3-fix-state-handling-sha3_final_s390x.patch
  * Add openssl-3-fix-state-handling-shake_final_s390x.patch
  * Add openssl-3-fix-state-handling-keccak_final_s390x.patch
  * Add openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  * Add openssl-3-add-defines-CPACF-funcs.patch
  * Add openssl-3-add-hw-acceleration-hmac.patch
  * Add openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  * Add openssl-3-fix-s390x_sha3_absorb.patch
  * Add openssl-3-fix-s390x_shake_squeeze.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808000">- Support MSA 10 XTS on s390x [jsc#PED-10273]
  * s390x: Add hardware acceleration for full AES-XTS
  * Add openssl-3-hw-acceleration-aes-xts-s390x.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808001">- Support MSA 11 HMAC on s390x [jsc#PED-10274]
  * Add openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  * Add openssl-3-fix-hmac-digest-detection-s390x.patch
  * Add openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730980800">- Add missing fixes for SHA3_squeeze and quic_multistream_test on
  pcc64 arch. [jsc#PED-10280]
  * Added openssl-3-fix-sha3-squeeze-ppc64.patch
  * Added openssl-3-fix-quic_multistream_test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1731412800">- Do not use HASHBANGPERL to avoid introducing a dependency on the
  perl-base package. [bsc#1233235]</changelog>
  <changelog author="pmonreal@suse.com" date="1734436800">- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
  - openssl-3-use-include-directive.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1738238400">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Security fix: [bsc#1236599, CVE-2024-12797]
  * RFC7250 handshakes with unauthenticated servers don't abort as
    expected.
  * Add openssl-CVE-2024-12797.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1746014400">- Security fix: [bsc#1240366, CVE-2025-27587]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
  <changelog author="mls@suse.de" date="1751371200">- Backport mdless cms signing support [jsc#PED-12895]
  * Add openssl-3-support-mdless-cms.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- FIPS: Fix EMS in crypto-policies FIPS:NO-ENFORCE-EMS
  * [bsc#1230959, bsc#1232326, bsc#1231748, bsc#1246428]
  * Add patch openssl-FIPS-fix-EMS-support.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1753876800">- Increase limit for CRL download [bsc#1247148, bsc#1247144]
  * Add openssl-3-large-CRLs.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1759233600">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl3-CVE-2025-9230.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1768824000">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795]
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * Stack buffer overflow in CMS AuthEnvelopedData parsing
  - openssl-CVE-2025-15467.patch [bsc#1256830, CVE-2025-15467]
  - openssl-CVE-2025-15467-comments.patch
  - openssl-CVE-2025-15467-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1774526400">- Security fixes:
  * CVE-2026-28387: Potential use-after-free in DANE client code
    (bsc#1260441)
  * CVE-2026-28388: NULL Pointer Dereference When Processing a
    Delta (bsc#1260442)
  * CVE-2026-28389: Possible NULL dereference when processing CMS
    KeyAgreeRecipientInfo (bsc#1260443)
  * CVE-2026-31789: Heap buffer overflow in hexadecimal conversion
    (bsc#1260444)
  * CVE-2026-31790: Incorrect failure handling in RSA KEM RSASVE
    encapsulation (bsc#1260445)
  * NULL pointer dereference when processing an OCSP response
    (bsc#1260446)
  * Add patches: openssl-CVE-2026-28387.patch
    openssl-CVE-2026-28388.patch openssl-CVE-2026-28388-tests.patch
    openssl-CVE-2026-28389.patch openssl-CVE-2026-31789.patch
    openssl-CVE-2026-31790.patch openssl-CVE-2026-31790-tests.patch
    openssl-NULL-pointer-dereference-in-ocsp_find_signer_sk.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1775649600">- Security fix:
  * CVE-2026-28390: NULL pointer dereference during processing of a crafted
    CMS EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678)
  * Add openssl-CVE-2026-28390.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1775822400">- Enable MD2 in legacy provider (jsc#PED-15724)</changelog>
</package>
<package pkgid="f2ad93b7211e449dc39ec129b6d002cee4230b4f77bec070b9ea86bdbbec8d0a" name="libopenssl-3-fips-provider-32bit" arch="x86_64">
  <version epoch="0" ver="3.2.3" rel="150700.5.5.1"/>
  <changelog author="pmonreal@suse.com" date="1721649600">- Build with no-afalgeng [bsc#1226463]</changelog>
  <changelog author="abergmann@suse.com" date="1724328000">- Security fix: [bsc#1229465, CVE-2024-6119]
  * possible denial of service in X.509 name checks
  * openssl-CVE-2024-6119.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1727265600">- Security fix: [bsc#1230698, CVE-2024-41996]
  * Validating the order of the public keys in the Diffie-Hellman
    Key Agreement Protocol, when an approved safe prime is used.
  * Added openssl-3-CVE-2024-41996.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1220262, CVE-2023-50782]
  * Implicit rejection in PKCS#1 v1.5
  * Add openssl-CVE-2023-50782.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166401">- Security fix: [bsc#1231741, CVE-2024-9143]
  * Low-level invalid GF(2^m) parameters lead to OOB memory access
  * Add openssl-CVE-2024-9143.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729512000">- Update to 3.1.7:
  * Major changes between OpenSSL 3.1.6 and OpenSSL 3.1.7 [3 Sep 2024]
  - Fixed possible denial of service in X.509 name checks (CVE-2024-6119)
  - Fixed possible buffer overread in SSL_select_next_proto()
    (CVE-2024-5535)
  * Major changes between OpenSSL 3.1.5 and OpenSSL 3.1.6 [4 Jun 2024]
  - Fixed potential use after free after SSL_free_buffers() is
    called (CVE-2024-4741)
  - Fixed an issue where checking excessively long DSA keys or
    parameters may be very slow (CVE-2024-4603)
  - Fixed unbounded memory growth with session handling in TLSv1.3
    (CVE-2024-2511)
  * Major changes between OpenSSL 3.1.4 and OpenSSL 3.1.5 [30 Jan 2024]
  - Fixed PKCS12 Decoding crashes (CVE-2024-0727)
  - Fixed Excessive time spent checking invalid RSA public keys
    [CVE-2023-6237)
  - Fixed POLY1305 MAC implementation corrupting vector registers
    on PowerPC CPUs which support PowerISA 2.07 (CVE-2023-6129)
  - Fix excessive time spent in DH check / generation with large
    Q parameter value (CVE-2023-5678)
  * Update openssl.keyring with BA5473A2B0587B07FB27CF2D216094DFD0CB81EF
  * Rebase patches:
  - openssl-Force-FIPS.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-CVE-2023-50782.patch
  * Remove patches fixed in the update:
  - openssl-Improve-performance-for-6x-unrolling-with-vpermxor-i.patch
  - openssl-CVE-2024-6119.patch openssl-CVE-2024-5535.patch
  - openssl-CVE-2024-4741.patch openssl-CVE-2024-4603.patch
  - openssl-CVE-2024-2511.patch openssl-CVE-2024-0727.patch
  - openssl-CVE-2023-6237.patch openssl-CVE-2023-6129.patch
  - openssl-CVE-2023-5678.patch openssl-3-CVE-2024-41996.patch
  - openssl-Enable-BTI-feature-for-md5-on-aarch64.patch
  - openssl-Fix-EVP_PKEY_CTX_add1_hkdf_info-behavior.patch
  - openssl-Handle-empty-param-in-EVP_PKEY_CTX_add1_hkdf_info.patch
  - reproducible.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729857600">- Update to 3.2.0:
  * Changes between 3.1.x and 3.2.0:
  - Fix excessive time spent in DH check/ generation with large Q parameter
    value. [CVE-2023-5678]
  - The BLAKE2b hash algorithm supports a configurable output length
    by setting the "size" parameter.
  - Added a function to delete objects from store by URI - OSSL_STORE_delete()
    and the corresponding provider-storemgmt API function OSSL_FUNC_store_delete().
  - Added OSSL_FUNC_store_open_ex() provider-storemgmt API function to pass
    a passphrase callback when opening a store.
  - Changed the default salt length used by PBES2 KDF's (PBKDF2 and scrypt)
    from 8 bytes to 16 bytes.
  - Changed the default value of the 'ess_cert_id_alg' configuration
    option which is used to calculate the TSA's public key certificate
    identifier. The default algorithm is updated to be sha256 instead of sha1.
  - Added optimization for SM2 algorithm on aarch64. A new configure option
    'no-sm2-precomp' has been added to disable the precomputed table.
  - Added client side support for QUIC
  - Added secp384r1 implementation using Solinas' reduction to improve
    speed of the NIST P-384 elliptic curve. To enable the implementation
    the build option 'enable-ec_nistp_64_gcc_128' must be used.
  - Improved RFC7468 compliance of the asn1parse command.
  - Added SHA256/192 algorithm support.
  - Added support for securely getting root CA certificate update in CMP.
  - Improved contention on global write locks by using more read locks where
    appropriate.
  - Improved performance of OSSL_PARAM lookups in performance critical
    provider functions.
  - Added the SSL_get0_group_name() function to provide access to the
    name of the group used for the TLS key exchange.
  - Provide a new configure option 'no-http' that can be used to disable the
    HTTP support. Provide new configure options 'no-apps' and 'no-docs' to
    disable building the openssl command line application and the documentation.
  - Provide a new configure option 'no-ecx' that can be used to disable the
    X25519, X448, and EdDSA support.
  - When multiple OSSL_KDF_PARAM_INFO parameters are passed to
    the EVP_KDF_CTX_set_params() function they are now concatenated not just
    for the HKDF algorithm but also for SSKDF and X9.63 KDF algorithms.
  - Added OSSL_FUNC_keymgmt_im/export_types_ex() provider functions that get
    the provider context as a parameter.
  - TLS round-trip time calculation was added by a Brigham Young University
    Capstone team partnering with Sandia National Laboratories. A new function
    in ssl_lib titled SSL_get_handshake_rtt will calculate and retrieve this
    value.
  - Added the "-quic" option to s_client to enable connectivity to QUIC servers.
    QUIC requires the use of ALPN, so this must be specified via the "-alpn"
    option. Use of the "advanced" s_client command command via the "-adv" option
    is recommended.
  - Added an "advanced" command mode to s_client. Use this with the "-adv" option.
  - Add Raw Public Key (RFC7250) support.
  - Added support for modular exponentiation and CRT offloading for the
    S390x architecture.
  - Added further assembler code for the RISC-V architecture.
  - Added EC_GROUP_to_params() which creates an OSSL_PARAM array
    from a given EC_GROUP.
  - Improved support for non-default library contexts and property queries
    when parsing PKCS#12 files.
  - Implemented support for all five instances of EdDSA from RFC8032:
    Ed25519, Ed25519ctx, Ed25519ph, Ed448, and Ed448ph.
    The streaming is not yet supported for the HashEdDSA variants
    (Ed25519ph and Ed448ph).
  - Added SM4 optimization for ARM processors using ASIMD and AES HW instructions.
  - Implemented SM4-XTS support.
  - Added platform-agnostic OSSL_sleep() function.
  - Implemented deterministic ECDSA signatures (RFC6979) support.
  - Implemented AES-GCM-SIV (RFC8452) support.
  - Added support for pluggable (provider-based) TLS signature algorithms.
    This enables TLS 1.3 authentication operations with algorithms embedded
    in providers not included by default in OpenSSL. In combination with
    the already available pluggable KEM and X.509 support, this enables
    for example suitable providers to deliver post-quantum or quantum-safe
    cryptography to OpenSSL users.
  - Added support for pluggable (provider-based) CMS signature algorithms.
    This enables CMS sign and verify operations with algorithms embedded
    in providers not included by default in OpenSSL.
  - Implemented HPKE DHKEM support in providers used by HPKE (RFC9180) API.
  - Add support for certificate compression (RFC8879), including
    library support for Brotli and Zstandard compression.
  - Add the ability to add custom attributes to PKCS12 files. Add a new API
    PKCS12_create_ex2, identical to the existing PKCS12_create_ex but allows
    for a user specified callback and optional argument.
    Added a new PKCS12_SAFEBAG_set0_attr, which allows for a new attr to be
    added to the existing STACK_OF attrs.
  - Major refactor of the libssl record layer.
  - Add a mac salt length option for the pkcs12 command.
  - Add more SRTP protection profiles from RFC8723 and RFC8269.
  - Extended Kernel TLS (KTLS) to support TLS 1.3 receive offload.
  - Add support for TCP Fast Open (RFC7413) to macOS, Linux, and FreeBSD where
    supported and enabled.
  - Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489)
    to the list of ciphersuites providing Perfect Forward Secrecy as
    required by SECLEVEL &gt;= 3.
  - Add new SSL APIs to aid in efficiently implementing TLS/SSL fingerprinting.
    The SSL_CTRL_GET_IANA_GROUPS control code, exposed as the
    SSL_get0_iana_groups() function-like macro, retrieves the list of
    supported groups sent by the peer.
  - Fixed PEM_write_bio_PKCS8PrivateKey() and PEM_write_bio_PKCS8PrivateKey_nid()
    to make it possible to use empty passphrase strings.
  - The PKCS12_parse() function now supports MAC-less PKCS12 files.
  - Added ASYNC_set_mem_functions() and ASYNC_get_mem_functions() calls to be able
    to change functions used for allocating the memory of asynchronous call stack.
  - Added support for signed BIGNUMs in the OSSL_PARAM APIs.
  - A failure exit code is returned when using the openssl x509 command to check
    certificate attributes and the checks fail.
  - The default SSL/TLS security level has been changed from 1 to 2. RSA,
    DSA and DH keys of 1024 bits and above and less than 2048 bits and ECC keys
    of 160 bits and above and less than 224 bits were previously accepted by
    default but are now no longer allowed. By default TLS compression was
    already disabled in previous OpenSSL versions. At security level 2 it cannot
    be enabled.
  - The SSL_CTX_set_cipher_list family functions now accept ciphers using their
    IANA standard names.
  - The PVK key derivation function has been moved from b2i_PVK_bio_ex() into
    the legacy crypto provider as an EVP_KDF. Applications requiring this KDF
    will need to load the legacy crypto provider.
  - CCM8 cipher suites in TLS have been downgraded to security level zero
    because they use a short authentication tag which lowers their strength.
  - Subject or issuer names in X.509 objects are now displayed as UTF-8 strings
    by default. Also spaces surrounding '=' in DN output are removed.
  - Add X.509 certificate codeSigning purpose and related checks on key usage and
    extended key usage of the leaf certificate according to the CA/Browser Forum.
  - The 'x509', 'ca', and 'req' apps now produce X.509 v3 certificates.
    The '-x509v1' option of 'req' prefers generation of X.509 v1 certificates.
    'X509_sign()' and 'X509_sign_ctx()' make sure that the certificate has
    X.509 version 3 if the certificate information includes X.509 extensions.
  - Fix and extend certificate handling and the apps 'x509', 'verify' etc.
    such as adding a trace facility for debugging certificate chain building.
  - Various fixes and extensions to the CMP+CRMF implementation and the 'cmp' app
    in particular supporting requests for central key generation, generalized
    polling, and various types of genm/genp exchanges defined in CMP Updates.
  - Fixes and extensions to the HTTP client and to the HTTP server in 'apps/'
    like correcting the TLS and proxy support and adding tracing for debugging.
  - Extended the CMS API for handling 'CMS_SignedData' and 'CMS_EnvelopedData'.
  - 'CMS_add0_cert()' and 'CMS_add1_cert()' no longer throw an error if
    a certificate to be added is already present. 'CMS_sign_ex()' and
    'CMS_sign()' now ignore any duplicate certificates in their 'certs' argument
    and no longer throw an error for them.
  - Added BIO_s_dgram_pair() and BIO_s_dgram_mem() that provide memory-based
    BIOs with datagram semantics and support for BIO_sendmmsg() and BIO_recvmmsg()
    calls. They can be used as the transport BIOs for QUIC.
  - Add new BIO_sendmmsg() and BIO_recvmmsg() BIO methods which allow
    sending and receiving multiple messages in a single call. An implementation
    is provided for BIO_dgram. For further details, see BIO_sendmmsg(3).
  - Support for loading root certificates from the Windows certificate store
    has been added.
  - Enable KTLS with the TLS 1.3 CCM mode ciphersuites. Note that some linux
    kernel versions that support KTLS have a known bug in CCM processing. That
    has been fixed in stable releases starting from 5.4.164, 5.10.84, 5.15.7,
    and all releases since 5.16. KTLS with CCM ciphersuites should be only used
    on these releases.
  - Added '-ktls' option to 's_server' and 's_client' commands to enable the
    KTLS support.
  - Zerocopy KTLS sendfile() support on Linux.
  - The OBJ_ calls are now thread safe using a global lock.
  - New parameter '-digest' for openssl cms command allowing signing
    pre-computed digests and new CMS API functions supporting that
    functionality.
  - OPENSSL_malloc() and other allocation functions now raise errors on
    allocation failures. The callers do not need to explicitly raise errors
    unless they want to for tracing purposes.
  - Added support for Brainpool curves in TLS-1.3.
  - Support for Argon2d, Argon2i, Argon2id KDFs has been added along with
    a basic thread pool implementation for select platforms.</changelog>
  <changelog author="pmonreal@suse.com" date="1729857601">- Update to 3.2.1:
  * Changes between 3.2.0 and 3.2.1:
  - A file in PKCS12 format can contain certificates and keys and may come from
    an untrusted source. The PKCS12 specification allows certain fields to be
    NULL, but OpenSSL did not correctly check for this case. [CVE-2024-0727]
  - When function EVP_PKEY_public_check() is called on RSA public keys,
    a computation is done to confirm that the RSA modulus, n, is composite.
    For valid RSA keys, n is a product of two or more large primes and this
    computation completes quickly. However, if n is an overly large prime,
    then this computation would take a long time. [CVE-2023-6237]
  - Restore the encoding of SM2 PrivateKeyInfo and SubjectPublicKeyInfo to
    have the contained AlgorithmIdentifier.algorithm set to id-ecPublicKey
    rather than SM2.
  - The POLY1305 MAC (message authentication code) implementation in OpenSSL
    for PowerPC CPUs saves the contents of vector registers in different
    order than they are restored. [CVE-2023-6129]
  - Disable building QUIC server utility when OpenSSL is configured with 'no-apps'.
  * The openssl-crypto-policies-support.patch has been merged into
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Rename openssl-Disable-default-provider-for-test-suite.patch and rebase to
    openssl-TESTS-Disable-default-provider-crypto-policies.patch
  * Patches removed in the update:
  - openssl-Add_support_for_Windows_CA_certificate_store.patch
  - openssl-ec-56-bit-Limb-Solinas-Strategy-for-secp384r1.patch
  - openssl-ec-Use-static-linkage-on-nistp521-felem_-square-mul-.patch
  - openssl-ec-powerpc64le-Add-asm-implementation-of-felem_-squa.patch
  - openssl-ecc-Remove-extraneous-parentheses-in-secp384r1.patch
  - openssl-powerpc-ecc-Fix-stack-allocation-secp384r1-asm.patch
  - openssl-CVE-2024-41996.patch
  - openssl-CVE-2023-50782.patch
  - openssl-CVE-2024-9143.patch
  * Patches rebased:
  - openssl-3-use-include-directive.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-DEFAULT_SUSE_cipher.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Force-FIPS.patch
  - openssl-load-legacy-provider.patch
  - openssl-no-html-docs.patch
  - openssl-pkgconfig.patch
  - openssl-ppc64-config.patch
  - openssl-truststore.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116800">- Remove the hardcoded DEFAULT_SUSE cipherlist selection.
  * Remove openssl-DEFAULT_SUSE_cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116801">- Update to 3.2.3:
  * Changes between 3.2.2 and 3.2.3:
  - Fixed possible denial of service in X.509 name checks. [CVE-2024-6119]
  - Fixed possible buffer overread in SSL_select_next_proto(). [CVE-2024-5535]
  * Changes between 3.2.1 and 3.2.2:
  - Fixed potential use after free after SSL_free_buffers() is called. [CVE-2024-4741]
  - Fixed an issue where checking excessively long DSA keys or parameters may
    be very slow. [CVE-2024-4603]
  - Improved EC/DSA nonce generation routines to avoid bias and timing
    side channel leaks.
  - Fixed an issue where some non-default TLS server configurations can cause
    unbounded memory growth when processing TLSv1.3 sessions. [CVE-2024-2511]
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded. This can be used on platforms
    where using atexit() from shared libraries causes crashes on exit.
  - Fixed bug where SSL_export_keying_material() could not be used with QUIC
    connections.
  * Add openssl-skip-quic-pairwise.patch to adapt the pairwise tests.
  * Merge openssl-FIPS-release_num_in_version_string.patch into
    openssl-FIPS-services-minimize.patch
  * Rebase patches:
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Remove-EC-curves.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-3-use-include-directive.patch
  * Remove not needed patches:
  - openssl-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  - openssl-3-FIPS-PCT_rsa_keygen.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730462400">- Support MSA 12 SHA3 on s390x [jsc#PED-10280]
  * Add openssl-3-add_EVP_DigestSqueeze_api.patch
  * Add openssl-3-support-multiple-sha3_squeeze_s390x.patch
  * Add openssl-3-add-xof-state-handling-s3_absorb.patch
  * Add openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  * Add openssl-3-fix-state-handling-sha3_final_s390x.patch
  * Add openssl-3-fix-state-handling-shake_final_s390x.patch
  * Add openssl-3-fix-state-handling-keccak_final_s390x.patch
  * Add openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  * Add openssl-3-add-defines-CPACF-funcs.patch
  * Add openssl-3-add-hw-acceleration-hmac.patch
  * Add openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  * Add openssl-3-fix-s390x_sha3_absorb.patch
  * Add openssl-3-fix-s390x_shake_squeeze.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808000">- Support MSA 10 XTS on s390x [jsc#PED-10273]
  * s390x: Add hardware acceleration for full AES-XTS
  * Add openssl-3-hw-acceleration-aes-xts-s390x.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808001">- Support MSA 11 HMAC on s390x [jsc#PED-10274]
  * Add openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  * Add openssl-3-fix-hmac-digest-detection-s390x.patch
  * Add openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730980800">- Add missing fixes for SHA3_squeeze and quic_multistream_test on
  pcc64 arch. [jsc#PED-10280]
  * Added openssl-3-fix-sha3-squeeze-ppc64.patch
  * Added openssl-3-fix-quic_multistream_test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1731412800">- Do not use HASHBANGPERL to avoid introducing a dependency on the
  perl-base package. [bsc#1233235]</changelog>
  <changelog author="pmonreal@suse.com" date="1734436800">- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
  - openssl-3-use-include-directive.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1738238400">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Security fix: [bsc#1236599, CVE-2024-12797]
  * RFC7250 handshakes with unauthenticated servers don't abort as
    expected.
  * Add openssl-CVE-2024-12797.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1746014400">- Security fix: [bsc#1240366]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
</package>
<package pkgid="52b3b5a5c6da96375459b6cf9f2ce2a29b159ad079577ed4946b259dd2f9915f" name="libopenssl1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1w" rel="150700.11.11.1"/>
  <changelog author="pmonreal@suse.com" date="1719576000">- FIPS: Disallow non-approved KDF types [bsc#1224267]
  * Add openssl-1_1-ossl-sli-011-SSHKDF.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1719576001">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1224265]
  * Add PCT in function crypto/dh/dh_key.c:generate_key() to meet
    assurance 5.6.2.1.4 of SP 800-56Arev3.
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1719576002">- FIPS: Remove not needed FIPS DRBG files [bsc#1224268]</changelog>
  <changelog author="pmonreal@suse.com" date="1721649600">- Security fix: [bsc#1227138, CVE-2024-5535]
  * SSL_select_next_proto buffer overread
  * Add openssl-CVE-2024-5535.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1721649601">- Build with no-afalgeng [bsc#1226463]</changelog>
  <changelog author="pmonreal@suse.com" date="1723809600">- FIPS: DH FIPS selftest and safe prime group [bsc#1224264]
  * Add openssl-1_1-ossl-sli-012-DH-selftest-and-safe-prime-group.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809601">- FIPS: Mark SHA1 as non-approved in the SLI [bsc#1224266]
  * Add openssl-1_1-ossl-sli-013-Mark-SHA1-unapproved.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809602">- FIPS: Disable PKCSv1.5 and shake in FIPS mode [bsc#1224271]
  * FIPS 186-5 Section 5.4 disallows RSA PKCSv1.5 signature
    operations with XOF.
  * Add openssl-1_1-ossl-sli-014-PKCSv1.5-and-shake.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809603">- FIPS: Mark sigGen and sigVer primitives as non-approved [bsc#1224272]
  * Add openssl-1_1-ossl-sli-015-sigver-hashing.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809604">- FIPS: Differentiate the PSS length requirements [bsc#1224275]
  * Add openssl-1_1-ossl-sli-016-PSS-length.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725364800">- FIPS: The X9.31 scheme is not approved for RSA signature
  operations in FIPS 186-5. [bsc#1224269]
  * Add openssl-1_1-ossl-sli-017-X9.31-sign.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1726228800">- FIPS: Mark HKDF and TLSv1.3 KDF as approved in the SLI [bsc#1228619]
  * Add openssl-1_1-ossl-sli-018-TLS13-HKDF.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1726488000">- FIPS: Enforce KDF in FIPS style [bsc#1224270]
  * Add openssl-1_1-ossl-sli-019-Enforce-KDF.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1726488001">- FIPS: Mark PBKDF2 and HKDF HMAC input keys with size &gt;= 112 bits
  as approved in the SLI. [bsc#1228623]
  * openssl-1_1-ossl-sli-020-PBKDF2-HMAC-size-SLI.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1728734400">- FIPS: AES GCM external IV implementation [bsc#1228618]
  * Mark the standalone AES-GCM encryption with external IV
    as non-approved in the SLI.
  * Add openssl-1_1-ossl-sli-021-AES-GCM-external-IV.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1220262, CVE-2023-50782]
  * Implicit rejection in PKCS#1 v1.5
  * Add openssl-CVE-2023-50782.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="pmonreal@suse.com" date="1753185600">- FIPS: Use the NID_X9_62_prime256v1 curve in ECDSA KAT test
  instead of NID_secp256k1. [bsc#1246697]
  * Add openssl-fips-ECDSA-KAT.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1759233600">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl3-CVE-2025-9230.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1769083200">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795], [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]</changelog>
</package>
<package pkgid="404e712f9fb24896a37a5c222e911c775172e89374a2b32e4953242f7ec96b63" name="libopenssl1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1w" rel="150700.11.16.1"/>
  <changelog author="pmonreal@suse.com" date="1719576000">- FIPS: Remove not needed FIPS DRBG files [bsc#1224268]</changelog>
  <changelog author="pmonreal@suse.com" date="1721649600">- Security fix: [bsc#1227138, CVE-2024-5535]
  * SSL_select_next_proto buffer overread
  * Add openssl-CVE-2024-5535.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1721649601">- Build with no-afalgeng [bsc#1226463]</changelog>
  <changelog author="pmonreal@suse.com" date="1723809600">- FIPS: DH FIPS selftest and safe prime group [bsc#1224264]
  * Add openssl-1_1-ossl-sli-012-DH-selftest-and-safe-prime-group.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809601">- FIPS: Mark SHA1 as non-approved in the SLI [bsc#1224266]
  * Add openssl-1_1-ossl-sli-013-Mark-SHA1-unapproved.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809602">- FIPS: Disable PKCSv1.5 and shake in FIPS mode [bsc#1224271]
  * FIPS 186-5 Section 5.4 disallows RSA PKCSv1.5 signature
    operations with XOF.
  * Add openssl-1_1-ossl-sli-014-PKCSv1.5-and-shake.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809603">- FIPS: Mark sigGen and sigVer primitives as non-approved [bsc#1224272]
  * Add openssl-1_1-ossl-sli-015-sigver-hashing.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809604">- FIPS: Differentiate the PSS length requirements [bsc#1224275]
  * Add openssl-1_1-ossl-sli-016-PSS-length.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725364800">- FIPS: The X9.31 scheme is not approved for RSA signature
  operations in FIPS 186-5. [bsc#1224269]
  * Add openssl-1_1-ossl-sli-017-X9.31-sign.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1726228800">- FIPS: Mark HKDF and TLSv1.3 KDF as approved in the SLI [bsc#1228619]
  * Add openssl-1_1-ossl-sli-018-TLS13-HKDF.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1726488000">- FIPS: Enforce KDF in FIPS style [bsc#1224270]
  * Add openssl-1_1-ossl-sli-019-Enforce-KDF.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1726488001">- FIPS: Mark PBKDF2 and HKDF HMAC input keys with size &gt;= 112 bits
  as approved in the SLI. [bsc#1228623]
  * openssl-1_1-ossl-sli-020-PBKDF2-HMAC-size-SLI.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1728734400">- FIPS: AES GCM external IV implementation [bsc#1228618]
  * Mark the standalone AES-GCM encryption with external IV
    as non-approved in the SLI.
  * Add openssl-1_1-ossl-sli-021-AES-GCM-external-IV.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1220262, CVE-2023-50782]
  * Implicit rejection in PKCS#1 v1.5
  * Add openssl-CVE-2023-50782.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="pmonreal@suse.com" date="1753185600">- FIPS: Use the NID_X9_62_prime256v1 curve in ECDSA KAT test
  instead of NID_secp256k1. [bsc#1246697]
  * Add openssl-fips-ECDSA-KAT.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1759233600">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl3-CVE-2025-9230.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1769083200">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795], [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]</changelog>
  <changelog author="pmonreal@suse.com" date="1774526400">- Security fixes:
  * CVE-2026-28387: Potential use-after-free in DANE client code
    (bsc#1260441)
  * CVE-2026-28388: NULL Pointer Dereference When Processing a
    Delta (bsc#1260442)
  * CVE-2026-28389: Possible NULL dereference when processing CMS
    KeyAgreeRecipientInfo (bsc#1260443)
  * CVE-2026-31789: Heap buffer overflow in hexadecimal conversion
    (bsc#1260444)
  * NULL pointer dereference when processing an
    OCSP response (bsc#1260446)
  * Add	patches:
    openssl-CVE-2026-28387.patch
    openssl-CVE-2026-28388.patch
    openssl-CVE-2026-28389.patch
    openssl-CVE-2026-31789.patch
    openssl-NULL-pointer-dereference-in-ocsp_find_signer_sk.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1775649600">- Security fix:
  * CVE-2026-28390: NULL pointer dereference during processing of a crafted
    CMS EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678)
  * Add openssl-CVE-2026-28390.patch</changelog>
</package>
<package pkgid="1d91f09a8c3f0963ef78b3f4937a5328fbd01a7dec6fe45f037f9db8b0ee49c9" name="libopenssl1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1w" rel="150700.11.19.1"/>
  <changelog author="pmonreal@suse.com" date="1721649600">- Security fix: [bsc#1227138, CVE-2024-5535]
  * SSL_select_next_proto buffer overread
  * Add openssl-CVE-2024-5535.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1721649601">- Build with no-afalgeng [bsc#1226463]</changelog>
  <changelog author="pmonreal@suse.com" date="1723809600">- FIPS: DH FIPS selftest and safe prime group [bsc#1224264]
  * Add openssl-1_1-ossl-sli-012-DH-selftest-and-safe-prime-group.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809601">- FIPS: Mark SHA1 as non-approved in the SLI [bsc#1224266]
  * Add openssl-1_1-ossl-sli-013-Mark-SHA1-unapproved.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809602">- FIPS: Disable PKCSv1.5 and shake in FIPS mode [bsc#1224271]
  * FIPS 186-5 Section 5.4 disallows RSA PKCSv1.5 signature
    operations with XOF.
  * Add openssl-1_1-ossl-sli-014-PKCSv1.5-and-shake.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809603">- FIPS: Mark sigGen and sigVer primitives as non-approved [bsc#1224272]
  * Add openssl-1_1-ossl-sli-015-sigver-hashing.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809604">- FIPS: Differentiate the PSS length requirements [bsc#1224275]
  * Add openssl-1_1-ossl-sli-016-PSS-length.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725364800">- FIPS: The X9.31 scheme is not approved for RSA signature
  operations in FIPS 186-5. [bsc#1224269]
  * Add openssl-1_1-ossl-sli-017-X9.31-sign.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1726228800">- FIPS: Mark HKDF and TLSv1.3 KDF as approved in the SLI [bsc#1228619]
  * Add openssl-1_1-ossl-sli-018-TLS13-HKDF.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1726488000">- FIPS: Enforce KDF in FIPS style [bsc#1224270]
  * Add openssl-1_1-ossl-sli-019-Enforce-KDF.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1726488001">- FIPS: Mark PBKDF2 and HKDF HMAC input keys with size &gt;= 112 bits
  as approved in the SLI. [bsc#1228623]
  * openssl-1_1-ossl-sli-020-PBKDF2-HMAC-size-SLI.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1728734400">- FIPS: AES GCM external IV implementation [bsc#1228618]
  * Mark the standalone AES-GCM encryption with external IV
    as non-approved in the SLI.
  * Add openssl-1_1-ossl-sli-021-AES-GCM-external-IV.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1220262, CVE-2023-50782]
  * Implicit rejection in PKCS#1 v1.5
  * Add openssl-CVE-2023-50782.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="pmonreal@suse.com" date="1753185600">- FIPS: Use the NID_X9_62_prime256v1 curve in ECDSA KAT test
  instead of NID_secp256k1. [bsc#1246697]
  * Add openssl-fips-ECDSA-KAT.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1759233600">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl3-CVE-2025-9230.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1769083200">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795], [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]</changelog>
  <changelog author="pmonreal@suse.com" date="1774526400">- Security fixes:
  * CVE-2026-28387: Potential use-after-free in DANE client code
    (bsc#1260441)
  * CVE-2026-28388: NULL Pointer Dereference When Processing a
    Delta (bsc#1260442)
  * CVE-2026-28389: Possible NULL dereference when processing CMS
    KeyAgreeRecipientInfo (bsc#1260443)
  * CVE-2026-31789: Heap buffer overflow in hexadecimal conversion
    (bsc#1260444)
  * NULL pointer dereference when processing an
    OCSP response (bsc#1260446)
  * Add	patches:
    openssl-CVE-2026-28387.patch
    openssl-CVE-2026-28388.patch
    openssl-CVE-2026-28389.patch
    openssl-CVE-2026-31789.patch
    openssl-NULL-pointer-dereference-in-ocsp_find_signer_sk.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1775649600">- Security fix:
  * CVE-2026-28390: NULL pointer dereference during processing of a crafted
    CMS EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678)
  * Add openssl-CVE-2026-28390.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1776772800">- bsc#1250782 Fix 30-test_fips_sli.t fails intermittently on s390x
  Fix AES_GCM IV test sometimes failing on s390x.
  * Add openssl-fix-fips-slitest-s390x.patch</changelog>
</package>
<package pkgid="52fa81e63b857a7a7f26fdfc222fa4c4775c4c536675052223bfc4264fc803cc" name="libopenssl1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1w" rel="150700.11.3.1"/>
  <changelog author="pmonreal@suse.com" date="1719403200">- FIPS: DRBG component chaining [bsc#1224258]
  * Add prediction resistance and oversampling of the noise source.
  * Allow setting the FIPS error state if jitterentropy fails the
    health-tests.
  * Add patches:
  - openssl-1_1-FIPS-140-3-DRBG-prediction-resistance.patch
  - openssl-1_1-FIPS-140-3-DRBG-oversampling.patch
  - openssl-1_1-jitterentropy-error-state.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1719576000">- FIPS: Disallow RSA sigVer with 1024 and ECDSA sigVer/keyVer P-192 [bsc#1224273]
  * Add openssl-1_1-ossl-sli-009-RSA-sigver.patch
  * Add openssl-1_1-ossl-sli-010-ECDSA-sigver-keyver.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1719576001">- FIPS: Disallow non-approved KDF types [bsc#1224267]
  * Add openssl-1_1-ossl-sli-011-SSHKDF.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1719576002">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1224265]
  * Add PCT in function crypto/dh/dh_key.c:generate_key() to meet
    assurance 5.6.2.1.4 of SP 800-56Arev3.
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1719576003">- FIPS: Remove not needed FIPS DRBG files [bsc#1224268]</changelog>
  <changelog author="pmonreal@suse.com" date="1721649600">- Security fix: [bsc#1227138, CVE-2024-5535]
  * SSL_select_next_proto buffer overread
  * Add openssl-CVE-2024-5535.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1721649601">- Build with no-afalgeng [bsc#1226463]</changelog>
  <changelog author="pmonreal@suse.com" date="1723809600">- FIPS: DH FIPS selftest and safe prime group [bsc#1224264]
  * Add openssl-1_1-ossl-sli-012-DH-selftest-and-safe-prime-group.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809601">- FIPS: Mark SHA1 as non-approved in the SLI [bsc#1224266]
  * Add openssl-1_1-ossl-sli-013-Mark-SHA1-unapproved.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809602">- FIPS: Disable PKCSv1.5 and shake in FIPS mode [bsc#1224271]
  * FIPS 186-5 Section 5.4 disallows RSA PKCSv1.5 signature
    operations with XOF.
  * Add openssl-1_1-ossl-sli-014-PKCSv1.5-and-shake.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809603">- FIPS: Mark sigGen and sigVer primitives as non-approved [bsc#1224272]
  * Add openssl-1_1-ossl-sli-015-sigver-hashing.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809604">- FIPS: Differentiate the PSS length requirements [bsc#1224275]
  * Add openssl-1_1-ossl-sli-016-PSS-length.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725364800">- FIPS: The X9.31 scheme is not approved for RSA signature
  operations in FIPS 186-5. [bsc#1224269]
  * Add openssl-1_1-ossl-sli-017-X9.31-sign.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1726228800">- FIPS: Mark HKDF and TLSv1.3 KDF as approved in the SLI [bsc#1228619]
  * Add openssl-1_1-ossl-sli-018-TLS13-HKDF.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1726488000">- FIPS: Enforce KDF in FIPS style [bsc#1224270]
  * Add openssl-1_1-ossl-sli-019-Enforce-KDF.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1726488001">- FIPS: Mark PBKDF2 and HKDF HMAC input keys with size &gt;= 112 bits
  as approved in the SLI. [bsc#1228623]
  * openssl-1_1-ossl-sli-020-PBKDF2-HMAC-size-SLI.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1728734400">- FIPS: AES GCM external IV implementation [bsc#1228618]
  * Mark the standalone AES-GCM encryption with external IV
    as non-approved in the SLI.
  * Add openssl-1_1-ossl-sli-021-AES-GCM-external-IV.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1220262, CVE-2023-50782]
  * Implicit rejection in PKCS#1 v1.5
  * Add openssl-CVE-2023-50782.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="pmonreal@suse.com" date="1753185600">- FIPS: Use the NID_X9_62_prime256v1 curve in ECDSA KAT test
  instead of NID_secp256k1. [bsc#1246697]
  * Add openssl-fips-ECDSA-KAT.patch</changelog>
</package>
<package pkgid="1c0c547250e5749a746bbedc623b619983a42c59398017372e26ef19acb78675" name="libopenssl1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1w" rel="150700.11.6.1"/>
  <changelog author="pmonreal@suse.com" date="1719576000">- FIPS: Disallow RSA sigVer with 1024 and ECDSA sigVer/keyVer P-192 [bsc#1224273]
  * Add openssl-1_1-ossl-sli-009-RSA-sigver.patch
  * Add openssl-1_1-ossl-sli-010-ECDSA-sigver-keyver.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1719576001">- FIPS: Disallow non-approved KDF types [bsc#1224267]
  * Add openssl-1_1-ossl-sli-011-SSHKDF.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1719576002">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1224265]
  * Add PCT in function crypto/dh/dh_key.c:generate_key() to meet
    assurance 5.6.2.1.4 of SP 800-56Arev3.
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1719576003">- FIPS: Remove not needed FIPS DRBG files [bsc#1224268]</changelog>
  <changelog author="pmonreal@suse.com" date="1721649600">- Security fix: [bsc#1227138, CVE-2024-5535]
  * SSL_select_next_proto buffer overread
  * Add openssl-CVE-2024-5535.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1721649601">- Build with no-afalgeng [bsc#1226463]</changelog>
  <changelog author="pmonreal@suse.com" date="1723809600">- FIPS: DH FIPS selftest and safe prime group [bsc#1224264]
  * Add openssl-1_1-ossl-sli-012-DH-selftest-and-safe-prime-group.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809601">- FIPS: Mark SHA1 as non-approved in the SLI [bsc#1224266]
  * Add openssl-1_1-ossl-sli-013-Mark-SHA1-unapproved.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809602">- FIPS: Disable PKCSv1.5 and shake in FIPS mode [bsc#1224271]
  * FIPS 186-5 Section 5.4 disallows RSA PKCSv1.5 signature
    operations with XOF.
  * Add openssl-1_1-ossl-sli-014-PKCSv1.5-and-shake.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809603">- FIPS: Mark sigGen and sigVer primitives as non-approved [bsc#1224272]
  * Add openssl-1_1-ossl-sli-015-sigver-hashing.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809604">- FIPS: Differentiate the PSS length requirements [bsc#1224275]
  * Add openssl-1_1-ossl-sli-016-PSS-length.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725364800">- FIPS: The X9.31 scheme is not approved for RSA signature
  operations in FIPS 186-5. [bsc#1224269]
  * Add openssl-1_1-ossl-sli-017-X9.31-sign.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1726228800">- FIPS: Mark HKDF and TLSv1.3 KDF as approved in the SLI [bsc#1228619]
  * Add openssl-1_1-ossl-sli-018-TLS13-HKDF.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1726488000">- FIPS: Enforce KDF in FIPS style [bsc#1224270]
  * Add openssl-1_1-ossl-sli-019-Enforce-KDF.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1726488001">- FIPS: Mark PBKDF2 and HKDF HMAC input keys with size &gt;= 112 bits
  as approved in the SLI. [bsc#1228623]
  * openssl-1_1-ossl-sli-020-PBKDF2-HMAC-size-SLI.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1728734400">- FIPS: AES GCM external IV implementation [bsc#1228618]
  * Mark the standalone AES-GCM encryption with external IV
    as non-approved in the SLI.
  * Add openssl-1_1-ossl-sli-021-AES-GCM-external-IV.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1220262, CVE-2023-50782]
  * Implicit rejection in PKCS#1 v1.5
  * Add openssl-CVE-2023-50782.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="pmonreal@suse.com" date="1753185600">- FIPS: Use the NID_X9_62_prime256v1 curve in ECDSA KAT test
  instead of NID_secp256k1. [bsc#1246697]
  * Add openssl-fips-ECDSA-KAT.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1759233600">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl3-CVE-2025-9230.patch</changelog>
</package>
<package pkgid="2ef0e2e226c6ad4a4acbe0ef2852f97b0ce2dd3e27e6a9dd40408251fe86f61b" name="libopenssl1_1-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.1w" rel="150700.11.11.1"/>
  <changelog author="pmonreal@suse.com" date="1719576000">- FIPS: Disallow non-approved KDF types [bsc#1224267]
  * Add openssl-1_1-ossl-sli-011-SSHKDF.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1719576001">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1224265]
  * Add PCT in function crypto/dh/dh_key.c:generate_key() to meet
    assurance 5.6.2.1.4 of SP 800-56Arev3.
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1719576002">- FIPS: Remove not needed FIPS DRBG files [bsc#1224268]</changelog>
  <changelog author="pmonreal@suse.com" date="1721649600">- Security fix: [bsc#1227138, CVE-2024-5535]
  * SSL_select_next_proto buffer overread
  * Add openssl-CVE-2024-5535.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1721649601">- Build with no-afalgeng [bsc#1226463]</changelog>
  <changelog author="pmonreal@suse.com" date="1723809600">- FIPS: DH FIPS selftest and safe prime group [bsc#1224264]
  * Add openssl-1_1-ossl-sli-012-DH-selftest-and-safe-prime-group.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809601">- FIPS: Mark SHA1 as non-approved in the SLI [bsc#1224266]
  * Add openssl-1_1-ossl-sli-013-Mark-SHA1-unapproved.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809602">- FIPS: Disable PKCSv1.5 and shake in FIPS mode [bsc#1224271]
  * FIPS 186-5 Section 5.4 disallows RSA PKCSv1.5 signature
    operations with XOF.
  * Add openssl-1_1-ossl-sli-014-PKCSv1.5-and-shake.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809603">- FIPS: Mark sigGen and sigVer primitives as non-approved [bsc#1224272]
  * Add openssl-1_1-ossl-sli-015-sigver-hashing.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809604">- FIPS: Differentiate the PSS length requirements [bsc#1224275]
  * Add openssl-1_1-ossl-sli-016-PSS-length.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725364800">- FIPS: The X9.31 scheme is not approved for RSA signature
  operations in FIPS 186-5. [bsc#1224269]
  * Add openssl-1_1-ossl-sli-017-X9.31-sign.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1726228800">- FIPS: Mark HKDF and TLSv1.3 KDF as approved in the SLI [bsc#1228619]
  * Add openssl-1_1-ossl-sli-018-TLS13-HKDF.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1726488000">- FIPS: Enforce KDF in FIPS style [bsc#1224270]
  * Add openssl-1_1-ossl-sli-019-Enforce-KDF.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1726488001">- FIPS: Mark PBKDF2 and HKDF HMAC input keys with size &gt;= 112 bits
  as approved in the SLI. [bsc#1228623]
  * openssl-1_1-ossl-sli-020-PBKDF2-HMAC-size-SLI.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1728734400">- FIPS: AES GCM external IV implementation [bsc#1228618]
  * Mark the standalone AES-GCM encryption with external IV
    as non-approved in the SLI.
  * Add openssl-1_1-ossl-sli-021-AES-GCM-external-IV.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1220262, CVE-2023-50782]
  * Implicit rejection in PKCS#1 v1.5
  * Add openssl-CVE-2023-50782.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="pmonreal@suse.com" date="1753185600">- FIPS: Use the NID_X9_62_prime256v1 curve in ECDSA KAT test
  instead of NID_secp256k1. [bsc#1246697]
  * Add openssl-fips-ECDSA-KAT.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1759233600">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl3-CVE-2025-9230.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1769083200">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795], [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]</changelog>
</package>
<package pkgid="1b4074f53092a02254510446f09523c821f574f7b0ef6d53df019f60869541b1" name="libopenssl1_1-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.1w" rel="150700.11.16.1"/>
  <changelog author="pmonreal@suse.com" date="1719576000">- FIPS: Remove not needed FIPS DRBG files [bsc#1224268]</changelog>
  <changelog author="pmonreal@suse.com" date="1721649600">- Security fix: [bsc#1227138, CVE-2024-5535]
  * SSL_select_next_proto buffer overread
  * Add openssl-CVE-2024-5535.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1721649601">- Build with no-afalgeng [bsc#1226463]</changelog>
  <changelog author="pmonreal@suse.com" date="1723809600">- FIPS: DH FIPS selftest and safe prime group [bsc#1224264]
  * Add openssl-1_1-ossl-sli-012-DH-selftest-and-safe-prime-group.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809601">- FIPS: Mark SHA1 as non-approved in the SLI [bsc#1224266]
  * Add openssl-1_1-ossl-sli-013-Mark-SHA1-unapproved.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809602">- FIPS: Disable PKCSv1.5 and shake in FIPS mode [bsc#1224271]
  * FIPS 186-5 Section 5.4 disallows RSA PKCSv1.5 signature
    operations with XOF.
  * Add openssl-1_1-ossl-sli-014-PKCSv1.5-and-shake.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809603">- FIPS: Mark sigGen and sigVer primitives as non-approved [bsc#1224272]
  * Add openssl-1_1-ossl-sli-015-sigver-hashing.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809604">- FIPS: Differentiate the PSS length requirements [bsc#1224275]
  * Add openssl-1_1-ossl-sli-016-PSS-length.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725364800">- FIPS: The X9.31 scheme is not approved for RSA signature
  operations in FIPS 186-5. [bsc#1224269]
  * Add openssl-1_1-ossl-sli-017-X9.31-sign.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1726228800">- FIPS: Mark HKDF and TLSv1.3 KDF as approved in the SLI [bsc#1228619]
  * Add openssl-1_1-ossl-sli-018-TLS13-HKDF.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1726488000">- FIPS: Enforce KDF in FIPS style [bsc#1224270]
  * Add openssl-1_1-ossl-sli-019-Enforce-KDF.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1726488001">- FIPS: Mark PBKDF2 and HKDF HMAC input keys with size &gt;= 112 bits
  as approved in the SLI. [bsc#1228623]
  * openssl-1_1-ossl-sli-020-PBKDF2-HMAC-size-SLI.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1728734400">- FIPS: AES GCM external IV implementation [bsc#1228618]
  * Mark the standalone AES-GCM encryption with external IV
    as non-approved in the SLI.
  * Add openssl-1_1-ossl-sli-021-AES-GCM-external-IV.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1220262, CVE-2023-50782]
  * Implicit rejection in PKCS#1 v1.5
  * Add openssl-CVE-2023-50782.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="pmonreal@suse.com" date="1753185600">- FIPS: Use the NID_X9_62_prime256v1 curve in ECDSA KAT test
  instead of NID_secp256k1. [bsc#1246697]
  * Add openssl-fips-ECDSA-KAT.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1759233600">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl3-CVE-2025-9230.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1769083200">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795], [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]</changelog>
  <changelog author="pmonreal@suse.com" date="1774526400">- Security fixes:
  * CVE-2026-28387: Potential use-after-free in DANE client code
    (bsc#1260441)
  * CVE-2026-28388: NULL Pointer Dereference When Processing a
    Delta (bsc#1260442)
  * CVE-2026-28389: Possible NULL dereference when processing CMS
    KeyAgreeRecipientInfo (bsc#1260443)
  * CVE-2026-31789: Heap buffer overflow in hexadecimal conversion
    (bsc#1260444)
  * NULL pointer dereference when processing an
    OCSP response (bsc#1260446)
  * Add	patches:
    openssl-CVE-2026-28387.patch
    openssl-CVE-2026-28388.patch
    openssl-CVE-2026-28389.patch
    openssl-CVE-2026-31789.patch
    openssl-NULL-pointer-dereference-in-ocsp_find_signer_sk.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1775649600">- Security fix:
  * CVE-2026-28390: NULL pointer dereference during processing of a crafted
    CMS EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678)
  * Add openssl-CVE-2026-28390.patch</changelog>
</package>
<package pkgid="b2e845a4c0fcb04d8021e6cb4708df2fa54544714190c93882cf2e8df61cb3d6" name="libopenssl1_1-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.1w" rel="150700.11.19.1"/>
  <changelog author="pmonreal@suse.com" date="1721649600">- Security fix: [bsc#1227138, CVE-2024-5535]
  * SSL_select_next_proto buffer overread
  * Add openssl-CVE-2024-5535.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1721649601">- Build with no-afalgeng [bsc#1226463]</changelog>
  <changelog author="pmonreal@suse.com" date="1723809600">- FIPS: DH FIPS selftest and safe prime group [bsc#1224264]
  * Add openssl-1_1-ossl-sli-012-DH-selftest-and-safe-prime-group.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809601">- FIPS: Mark SHA1 as non-approved in the SLI [bsc#1224266]
  * Add openssl-1_1-ossl-sli-013-Mark-SHA1-unapproved.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809602">- FIPS: Disable PKCSv1.5 and shake in FIPS mode [bsc#1224271]
  * FIPS 186-5 Section 5.4 disallows RSA PKCSv1.5 signature
    operations with XOF.
  * Add openssl-1_1-ossl-sli-014-PKCSv1.5-and-shake.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809603">- FIPS: Mark sigGen and sigVer primitives as non-approved [bsc#1224272]
  * Add openssl-1_1-ossl-sli-015-sigver-hashing.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809604">- FIPS: Differentiate the PSS length requirements [bsc#1224275]
  * Add openssl-1_1-ossl-sli-016-PSS-length.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725364800">- FIPS: The X9.31 scheme is not approved for RSA signature
  operations in FIPS 186-5. [bsc#1224269]
  * Add openssl-1_1-ossl-sli-017-X9.31-sign.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1726228800">- FIPS: Mark HKDF and TLSv1.3 KDF as approved in the SLI [bsc#1228619]
  * Add openssl-1_1-ossl-sli-018-TLS13-HKDF.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1726488000">- FIPS: Enforce KDF in FIPS style [bsc#1224270]
  * Add openssl-1_1-ossl-sli-019-Enforce-KDF.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1726488001">- FIPS: Mark PBKDF2 and HKDF HMAC input keys with size &gt;= 112 bits
  as approved in the SLI. [bsc#1228623]
  * openssl-1_1-ossl-sli-020-PBKDF2-HMAC-size-SLI.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1728734400">- FIPS: AES GCM external IV implementation [bsc#1228618]
  * Mark the standalone AES-GCM encryption with external IV
    as non-approved in the SLI.
  * Add openssl-1_1-ossl-sli-021-AES-GCM-external-IV.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1220262, CVE-2023-50782]
  * Implicit rejection in PKCS#1 v1.5
  * Add openssl-CVE-2023-50782.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="pmonreal@suse.com" date="1753185600">- FIPS: Use the NID_X9_62_prime256v1 curve in ECDSA KAT test
  instead of NID_secp256k1. [bsc#1246697]
  * Add openssl-fips-ECDSA-KAT.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1759233600">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl3-CVE-2025-9230.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1769083200">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795], [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]</changelog>
  <changelog author="pmonreal@suse.com" date="1774526400">- Security fixes:
  * CVE-2026-28387: Potential use-after-free in DANE client code
    (bsc#1260441)
  * CVE-2026-28388: NULL Pointer Dereference When Processing a
    Delta (bsc#1260442)
  * CVE-2026-28389: Possible NULL dereference when processing CMS
    KeyAgreeRecipientInfo (bsc#1260443)
  * CVE-2026-31789: Heap buffer overflow in hexadecimal conversion
    (bsc#1260444)
  * NULL pointer dereference when processing an
    OCSP response (bsc#1260446)
  * Add	patches:
    openssl-CVE-2026-28387.patch
    openssl-CVE-2026-28388.patch
    openssl-CVE-2026-28389.patch
    openssl-CVE-2026-31789.patch
    openssl-NULL-pointer-dereference-in-ocsp_find_signer_sk.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1775649600">- Security fix:
  * CVE-2026-28390: NULL pointer dereference during processing of a crafted
    CMS EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678)
  * Add openssl-CVE-2026-28390.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1776772800">- bsc#1250782 Fix 30-test_fips_sli.t fails intermittently on s390x
  Fix AES_GCM IV test sometimes failing on s390x.
  * Add openssl-fix-fips-slitest-s390x.patch</changelog>
</package>
<package pkgid="79c5661397d07c16fa9217c70cb1f2b878f1e4049be28c95d5516523d5dbee37" name="libopenssl1_1-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.1w" rel="150700.11.3.1"/>
  <changelog author="pmonreal@suse.com" date="1719403200">- FIPS: DRBG component chaining [bsc#1224258]
  * Add prediction resistance and oversampling of the noise source.
  * Allow setting the FIPS error state if jitterentropy fails the
    health-tests.
  * Add patches:
  - openssl-1_1-FIPS-140-3-DRBG-prediction-resistance.patch
  - openssl-1_1-FIPS-140-3-DRBG-oversampling.patch
  - openssl-1_1-jitterentropy-error-state.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1719576000">- FIPS: Disallow RSA sigVer with 1024 and ECDSA sigVer/keyVer P-192 [bsc#1224273]
  * Add openssl-1_1-ossl-sli-009-RSA-sigver.patch
  * Add openssl-1_1-ossl-sli-010-ECDSA-sigver-keyver.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1719576001">- FIPS: Disallow non-approved KDF types [bsc#1224267]
  * Add openssl-1_1-ossl-sli-011-SSHKDF.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1719576002">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1224265]
  * Add PCT in function crypto/dh/dh_key.c:generate_key() to meet
    assurance 5.6.2.1.4 of SP 800-56Arev3.
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1719576003">- FIPS: Remove not needed FIPS DRBG files [bsc#1224268]</changelog>
  <changelog author="pmonreal@suse.com" date="1721649600">- Security fix: [bsc#1227138, CVE-2024-5535]
  * SSL_select_next_proto buffer overread
  * Add openssl-CVE-2024-5535.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1721649601">- Build with no-afalgeng [bsc#1226463]</changelog>
  <changelog author="pmonreal@suse.com" date="1723809600">- FIPS: DH FIPS selftest and safe prime group [bsc#1224264]
  * Add openssl-1_1-ossl-sli-012-DH-selftest-and-safe-prime-group.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809601">- FIPS: Mark SHA1 as non-approved in the SLI [bsc#1224266]
  * Add openssl-1_1-ossl-sli-013-Mark-SHA1-unapproved.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809602">- FIPS: Disable PKCSv1.5 and shake in FIPS mode [bsc#1224271]
  * FIPS 186-5 Section 5.4 disallows RSA PKCSv1.5 signature
    operations with XOF.
  * Add openssl-1_1-ossl-sli-014-PKCSv1.5-and-shake.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809603">- FIPS: Mark sigGen and sigVer primitives as non-approved [bsc#1224272]
  * Add openssl-1_1-ossl-sli-015-sigver-hashing.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809604">- FIPS: Differentiate the PSS length requirements [bsc#1224275]
  * Add openssl-1_1-ossl-sli-016-PSS-length.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725364800">- FIPS: The X9.31 scheme is not approved for RSA signature
  operations in FIPS 186-5. [bsc#1224269]
  * Add openssl-1_1-ossl-sli-017-X9.31-sign.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1726228800">- FIPS: Mark HKDF and TLSv1.3 KDF as approved in the SLI [bsc#1228619]
  * Add openssl-1_1-ossl-sli-018-TLS13-HKDF.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1726488000">- FIPS: Enforce KDF in FIPS style [bsc#1224270]
  * Add openssl-1_1-ossl-sli-019-Enforce-KDF.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1726488001">- FIPS: Mark PBKDF2 and HKDF HMAC input keys with size &gt;= 112 bits
  as approved in the SLI. [bsc#1228623]
  * openssl-1_1-ossl-sli-020-PBKDF2-HMAC-size-SLI.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1728734400">- FIPS: AES GCM external IV implementation [bsc#1228618]
  * Mark the standalone AES-GCM encryption with external IV
    as non-approved in the SLI.
  * Add openssl-1_1-ossl-sli-021-AES-GCM-external-IV.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1220262, CVE-2023-50782]
  * Implicit rejection in PKCS#1 v1.5
  * Add openssl-CVE-2023-50782.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="pmonreal@suse.com" date="1753185600">- FIPS: Use the NID_X9_62_prime256v1 curve in ECDSA KAT test
  instead of NID_secp256k1. [bsc#1246697]
  * Add openssl-fips-ECDSA-KAT.patch</changelog>
</package>
<package pkgid="12409b73087c8e3361a01dfcc2a29eff70c98d7fbd12432234e04651bc3f71bd" name="libopenssl1_1-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.1w" rel="150700.11.6.1"/>
  <changelog author="pmonreal@suse.com" date="1719576000">- FIPS: Disallow RSA sigVer with 1024 and ECDSA sigVer/keyVer P-192 [bsc#1224273]
  * Add openssl-1_1-ossl-sli-009-RSA-sigver.patch
  * Add openssl-1_1-ossl-sli-010-ECDSA-sigver-keyver.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1719576001">- FIPS: Disallow non-approved KDF types [bsc#1224267]
  * Add openssl-1_1-ossl-sli-011-SSHKDF.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1719576002">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1224265]
  * Add PCT in function crypto/dh/dh_key.c:generate_key() to meet
    assurance 5.6.2.1.4 of SP 800-56Arev3.
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1719576003">- FIPS: Remove not needed FIPS DRBG files [bsc#1224268]</changelog>
  <changelog author="pmonreal@suse.com" date="1721649600">- Security fix: [bsc#1227138, CVE-2024-5535]
  * SSL_select_next_proto buffer overread
  * Add openssl-CVE-2024-5535.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1721649601">- Build with no-afalgeng [bsc#1226463]</changelog>
  <changelog author="pmonreal@suse.com" date="1723809600">- FIPS: DH FIPS selftest and safe prime group [bsc#1224264]
  * Add openssl-1_1-ossl-sli-012-DH-selftest-and-safe-prime-group.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809601">- FIPS: Mark SHA1 as non-approved in the SLI [bsc#1224266]
  * Add openssl-1_1-ossl-sli-013-Mark-SHA1-unapproved.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809602">- FIPS: Disable PKCSv1.5 and shake in FIPS mode [bsc#1224271]
  * FIPS 186-5 Section 5.4 disallows RSA PKCSv1.5 signature
    operations with XOF.
  * Add openssl-1_1-ossl-sli-014-PKCSv1.5-and-shake.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809603">- FIPS: Mark sigGen and sigVer primitives as non-approved [bsc#1224272]
  * Add openssl-1_1-ossl-sli-015-sigver-hashing.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809604">- FIPS: Differentiate the PSS length requirements [bsc#1224275]
  * Add openssl-1_1-ossl-sli-016-PSS-length.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725364800">- FIPS: The X9.31 scheme is not approved for RSA signature
  operations in FIPS 186-5. [bsc#1224269]
  * Add openssl-1_1-ossl-sli-017-X9.31-sign.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1726228800">- FIPS: Mark HKDF and TLSv1.3 KDF as approved in the SLI [bsc#1228619]
  * Add openssl-1_1-ossl-sli-018-TLS13-HKDF.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1726488000">- FIPS: Enforce KDF in FIPS style [bsc#1224270]
  * Add openssl-1_1-ossl-sli-019-Enforce-KDF.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1726488001">- FIPS: Mark PBKDF2 and HKDF HMAC input keys with size &gt;= 112 bits
  as approved in the SLI. [bsc#1228623]
  * openssl-1_1-ossl-sli-020-PBKDF2-HMAC-size-SLI.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1728734400">- FIPS: AES GCM external IV implementation [bsc#1228618]
  * Mark the standalone AES-GCM encryption with external IV
    as non-approved in the SLI.
  * Add openssl-1_1-ossl-sli-021-AES-GCM-external-IV.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1220262, CVE-2023-50782]
  * Implicit rejection in PKCS#1 v1.5
  * Add openssl-CVE-2023-50782.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="pmonreal@suse.com" date="1753185600">- FIPS: Use the NID_X9_62_prime256v1 curve in ECDSA KAT test
  instead of NID_secp256k1. [bsc#1246697]
  * Add openssl-fips-ECDSA-KAT.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1759233600">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl3-CVE-2025-9230.patch</changelog>
</package>
<package pkgid="4e6a8337b00430a899d69880c9c6416aca14a324a0588dd51443286e3878b970" name="libopenssl3" arch="x86_64">
  <version epoch="0" ver="3.2.3" rel="150700.5.10.1"/>
  <changelog author="abergmann@suse.com" date="1724328000">- Security fix: [bsc#1229465, CVE-2024-6119]
  * possible denial of service in X.509 name checks
  * openssl-CVE-2024-6119.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1727265600">- Security fix: [bsc#1230698, CVE-2024-41996]
  * Validating the order of the public keys in the Diffie-Hellman
    Key Agreement Protocol, when an approved safe prime is used.
  * Added openssl-3-CVE-2024-41996.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1220262, CVE-2023-50782]
  * Implicit rejection in PKCS#1 v1.5
  * Add openssl-CVE-2023-50782.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166401">- Security fix: [bsc#1231741, CVE-2024-9143]
  * Low-level invalid GF(2^m) parameters lead to OOB memory access
  * Add openssl-CVE-2024-9143.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729512000">- Update to 3.1.7:
  * Major changes between OpenSSL 3.1.6 and OpenSSL 3.1.7 [3 Sep 2024]
  - Fixed possible denial of service in X.509 name checks (CVE-2024-6119)
  - Fixed possible buffer overread in SSL_select_next_proto()
    (CVE-2024-5535)
  * Major changes between OpenSSL 3.1.5 and OpenSSL 3.1.6 [4 Jun 2024]
  - Fixed potential use after free after SSL_free_buffers() is
    called (CVE-2024-4741)
  - Fixed an issue where checking excessively long DSA keys or
    parameters may be very slow (CVE-2024-4603)
  - Fixed unbounded memory growth with session handling in TLSv1.3
    (CVE-2024-2511)
  * Major changes between OpenSSL 3.1.4 and OpenSSL 3.1.5 [30 Jan 2024]
  - Fixed PKCS12 Decoding crashes (CVE-2024-0727)
  - Fixed Excessive time spent checking invalid RSA public keys
    [CVE-2023-6237)
  - Fixed POLY1305 MAC implementation corrupting vector registers
    on PowerPC CPUs which support PowerISA 2.07 (CVE-2023-6129)
  - Fix excessive time spent in DH check / generation with large
    Q parameter value (CVE-2023-5678)
  * Update openssl.keyring with BA5473A2B0587B07FB27CF2D216094DFD0CB81EF
  * Rebase patches:
  - openssl-Force-FIPS.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-CVE-2023-50782.patch
  * Remove patches fixed in the update:
  - openssl-Improve-performance-for-6x-unrolling-with-vpermxor-i.patch
  - openssl-CVE-2024-6119.patch openssl-CVE-2024-5535.patch
  - openssl-CVE-2024-4741.patch openssl-CVE-2024-4603.patch
  - openssl-CVE-2024-2511.patch openssl-CVE-2024-0727.patch
  - openssl-CVE-2023-6237.patch openssl-CVE-2023-6129.patch
  - openssl-CVE-2023-5678.patch openssl-3-CVE-2024-41996.patch
  - openssl-Enable-BTI-feature-for-md5-on-aarch64.patch
  - openssl-Fix-EVP_PKEY_CTX_add1_hkdf_info-behavior.patch
  - openssl-Handle-empty-param-in-EVP_PKEY_CTX_add1_hkdf_info.patch
  - reproducible.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729857600">- Update to 3.2.0:
  * Changes between 3.1.x and 3.2.0:
  - Fix excessive time spent in DH check/ generation with large Q parameter
    value. [CVE-2023-5678]
  - The BLAKE2b hash algorithm supports a configurable output length
    by setting the "size" parameter.
  - Added a function to delete objects from store by URI - OSSL_STORE_delete()
    and the corresponding provider-storemgmt API function OSSL_FUNC_store_delete().
  - Added OSSL_FUNC_store_open_ex() provider-storemgmt API function to pass
    a passphrase callback when opening a store.
  - Changed the default salt length used by PBES2 KDF's (PBKDF2 and scrypt)
    from 8 bytes to 16 bytes.
  - Changed the default value of the 'ess_cert_id_alg' configuration
    option which is used to calculate the TSA's public key certificate
    identifier. The default algorithm is updated to be sha256 instead of sha1.
  - Added optimization for SM2 algorithm on aarch64. A new configure option
    'no-sm2-precomp' has been added to disable the precomputed table.
  - Added client side support for QUIC
  - Added secp384r1 implementation using Solinas' reduction to improve
    speed of the NIST P-384 elliptic curve. To enable the implementation
    the build option 'enable-ec_nistp_64_gcc_128' must be used.
  - Improved RFC7468 compliance of the asn1parse command.
  - Added SHA256/192 algorithm support.
  - Added support for securely getting root CA certificate update in CMP.
  - Improved contention on global write locks by using more read locks where
    appropriate.
  - Improved performance of OSSL_PARAM lookups in performance critical
    provider functions.
  - Added the SSL_get0_group_name() function to provide access to the
    name of the group used for the TLS key exchange.
  - Provide a new configure option 'no-http' that can be used to disable the
    HTTP support. Provide new configure options 'no-apps' and 'no-docs' to
    disable building the openssl command line application and the documentation.
  - Provide a new configure option 'no-ecx' that can be used to disable the
    X25519, X448, and EdDSA support.
  - When multiple OSSL_KDF_PARAM_INFO parameters are passed to
    the EVP_KDF_CTX_set_params() function they are now concatenated not just
    for the HKDF algorithm but also for SSKDF and X9.63 KDF algorithms.
  - Added OSSL_FUNC_keymgmt_im/export_types_ex() provider functions that get
    the provider context as a parameter.
  - TLS round-trip time calculation was added by a Brigham Young University
    Capstone team partnering with Sandia National Laboratories. A new function
    in ssl_lib titled SSL_get_handshake_rtt will calculate and retrieve this
    value.
  - Added the "-quic" option to s_client to enable connectivity to QUIC servers.
    QUIC requires the use of ALPN, so this must be specified via the "-alpn"
    option. Use of the "advanced" s_client command command via the "-adv" option
    is recommended.
  - Added an "advanced" command mode to s_client. Use this with the "-adv" option.
  - Add Raw Public Key (RFC7250) support.
  - Added support for modular exponentiation and CRT offloading for the
    S390x architecture.
  - Added further assembler code for the RISC-V architecture.
  - Added EC_GROUP_to_params() which creates an OSSL_PARAM array
    from a given EC_GROUP.
  - Improved support for non-default library contexts and property queries
    when parsing PKCS#12 files.
  - Implemented support for all five instances of EdDSA from RFC8032:
    Ed25519, Ed25519ctx, Ed25519ph, Ed448, and Ed448ph.
    The streaming is not yet supported for the HashEdDSA variants
    (Ed25519ph and Ed448ph).
  - Added SM4 optimization for ARM processors using ASIMD and AES HW instructions.
  - Implemented SM4-XTS support.
  - Added platform-agnostic OSSL_sleep() function.
  - Implemented deterministic ECDSA signatures (RFC6979) support.
  - Implemented AES-GCM-SIV (RFC8452) support.
  - Added support for pluggable (provider-based) TLS signature algorithms.
    This enables TLS 1.3 authentication operations with algorithms embedded
    in providers not included by default in OpenSSL. In combination with
    the already available pluggable KEM and X.509 support, this enables
    for example suitable providers to deliver post-quantum or quantum-safe
    cryptography to OpenSSL users.
  - Added support for pluggable (provider-based) CMS signature algorithms.
    This enables CMS sign and verify operations with algorithms embedded
    in providers not included by default in OpenSSL.
  - Implemented HPKE DHKEM support in providers used by HPKE (RFC9180) API.
  - Add support for certificate compression (RFC8879), including
    library support for Brotli and Zstandard compression.
  - Add the ability to add custom attributes to PKCS12 files. Add a new API
    PKCS12_create_ex2, identical to the existing PKCS12_create_ex but allows
    for a user specified callback and optional argument.
    Added a new PKCS12_SAFEBAG_set0_attr, which allows for a new attr to be
    added to the existing STACK_OF attrs.
  - Major refactor of the libssl record layer.
  - Add a mac salt length option for the pkcs12 command.
  - Add more SRTP protection profiles from RFC8723 and RFC8269.
  - Extended Kernel TLS (KTLS) to support TLS 1.3 receive offload.
  - Add support for TCP Fast Open (RFC7413) to macOS, Linux, and FreeBSD where
    supported and enabled.
  - Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489)
    to the list of ciphersuites providing Perfect Forward Secrecy as
    required by SECLEVEL &gt;= 3.
  - Add new SSL APIs to aid in efficiently implementing TLS/SSL fingerprinting.
    The SSL_CTRL_GET_IANA_GROUPS control code, exposed as the
    SSL_get0_iana_groups() function-like macro, retrieves the list of
    supported groups sent by the peer.
  - Fixed PEM_write_bio_PKCS8PrivateKey() and PEM_write_bio_PKCS8PrivateKey_nid()
    to make it possible to use empty passphrase strings.
  - The PKCS12_parse() function now supports MAC-less PKCS12 files.
  - Added ASYNC_set_mem_functions() and ASYNC_get_mem_functions() calls to be able
    to change functions used for allocating the memory of asynchronous call stack.
  - Added support for signed BIGNUMs in the OSSL_PARAM APIs.
  - A failure exit code is returned when using the openssl x509 command to check
    certificate attributes and the checks fail.
  - The default SSL/TLS security level has been changed from 1 to 2. RSA,
    DSA and DH keys of 1024 bits and above and less than 2048 bits and ECC keys
    of 160 bits and above and less than 224 bits were previously accepted by
    default but are now no longer allowed. By default TLS compression was
    already disabled in previous OpenSSL versions. At security level 2 it cannot
    be enabled.
  - The SSL_CTX_set_cipher_list family functions now accept ciphers using their
    IANA standard names.
  - The PVK key derivation function has been moved from b2i_PVK_bio_ex() into
    the legacy crypto provider as an EVP_KDF. Applications requiring this KDF
    will need to load the legacy crypto provider.
  - CCM8 cipher suites in TLS have been downgraded to security level zero
    because they use a short authentication tag which lowers their strength.
  - Subject or issuer names in X.509 objects are now displayed as UTF-8 strings
    by default. Also spaces surrounding '=' in DN output are removed.
  - Add X.509 certificate codeSigning purpose and related checks on key usage and
    extended key usage of the leaf certificate according to the CA/Browser Forum.
  - The 'x509', 'ca', and 'req' apps now produce X.509 v3 certificates.
    The '-x509v1' option of 'req' prefers generation of X.509 v1 certificates.
    'X509_sign()' and 'X509_sign_ctx()' make sure that the certificate has
    X.509 version 3 if the certificate information includes X.509 extensions.
  - Fix and extend certificate handling and the apps 'x509', 'verify' etc.
    such as adding a trace facility for debugging certificate chain building.
  - Various fixes and extensions to the CMP+CRMF implementation and the 'cmp' app
    in particular supporting requests for central key generation, generalized
    polling, and various types of genm/genp exchanges defined in CMP Updates.
  - Fixes and extensions to the HTTP client and to the HTTP server in 'apps/'
    like correcting the TLS and proxy support and adding tracing for debugging.
  - Extended the CMS API for handling 'CMS_SignedData' and 'CMS_EnvelopedData'.
  - 'CMS_add0_cert()' and 'CMS_add1_cert()' no longer throw an error if
    a certificate to be added is already present. 'CMS_sign_ex()' and
    'CMS_sign()' now ignore any duplicate certificates in their 'certs' argument
    and no longer throw an error for them.
  - Added BIO_s_dgram_pair() and BIO_s_dgram_mem() that provide memory-based
    BIOs with datagram semantics and support for BIO_sendmmsg() and BIO_recvmmsg()
    calls. They can be used as the transport BIOs for QUIC.
  - Add new BIO_sendmmsg() and BIO_recvmmsg() BIO methods which allow
    sending and receiving multiple messages in a single call. An implementation
    is provided for BIO_dgram. For further details, see BIO_sendmmsg(3).
  - Support for loading root certificates from the Windows certificate store
    has been added.
  - Enable KTLS with the TLS 1.3 CCM mode ciphersuites. Note that some linux
    kernel versions that support KTLS have a known bug in CCM processing. That
    has been fixed in stable releases starting from 5.4.164, 5.10.84, 5.15.7,
    and all releases since 5.16. KTLS with CCM ciphersuites should be only used
    on these releases.
  - Added '-ktls' option to 's_server' and 's_client' commands to enable the
    KTLS support.
  - Zerocopy KTLS sendfile() support on Linux.
  - The OBJ_ calls are now thread safe using a global lock.
  - New parameter '-digest' for openssl cms command allowing signing
    pre-computed digests and new CMS API functions supporting that
    functionality.
  - OPENSSL_malloc() and other allocation functions now raise errors on
    allocation failures. The callers do not need to explicitly raise errors
    unless they want to for tracing purposes.
  - Added support for Brainpool curves in TLS-1.3.
  - Support for Argon2d, Argon2i, Argon2id KDFs has been added along with
    a basic thread pool implementation for select platforms.</changelog>
  <changelog author="pmonreal@suse.com" date="1729857601">- Update to 3.2.1:
  * Changes between 3.2.0 and 3.2.1:
  - A file in PKCS12 format can contain certificates and keys and may come from
    an untrusted source. The PKCS12 specification allows certain fields to be
    NULL, but OpenSSL did not correctly check for this case. [CVE-2024-0727]
  - When function EVP_PKEY_public_check() is called on RSA public keys,
    a computation is done to confirm that the RSA modulus, n, is composite.
    For valid RSA keys, n is a product of two or more large primes and this
    computation completes quickly. However, if n is an overly large prime,
    then this computation would take a long time. [CVE-2023-6237]
  - Restore the encoding of SM2 PrivateKeyInfo and SubjectPublicKeyInfo to
    have the contained AlgorithmIdentifier.algorithm set to id-ecPublicKey
    rather than SM2.
  - The POLY1305 MAC (message authentication code) implementation in OpenSSL
    for PowerPC CPUs saves the contents of vector registers in different
    order than they are restored. [CVE-2023-6129]
  - Disable building QUIC server utility when OpenSSL is configured with 'no-apps'.
  * The openssl-crypto-policies-support.patch has been merged into
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Rename openssl-Disable-default-provider-for-test-suite.patch and rebase to
    openssl-TESTS-Disable-default-provider-crypto-policies.patch
  * Patches removed in the update:
  - openssl-Add_support_for_Windows_CA_certificate_store.patch
  - openssl-ec-56-bit-Limb-Solinas-Strategy-for-secp384r1.patch
  - openssl-ec-Use-static-linkage-on-nistp521-felem_-square-mul-.patch
  - openssl-ec-powerpc64le-Add-asm-implementation-of-felem_-squa.patch
  - openssl-ecc-Remove-extraneous-parentheses-in-secp384r1.patch
  - openssl-powerpc-ecc-Fix-stack-allocation-secp384r1-asm.patch
  - openssl-CVE-2024-41996.patch
  - openssl-CVE-2023-50782.patch
  - openssl-CVE-2024-9143.patch
  * Patches rebased:
  - openssl-3-use-include-directive.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-DEFAULT_SUSE_cipher.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Force-FIPS.patch
  - openssl-load-legacy-provider.patch
  - openssl-no-html-docs.patch
  - openssl-pkgconfig.patch
  - openssl-ppc64-config.patch
  - openssl-truststore.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116800">- Remove the hardcoded DEFAULT_SUSE cipherlist selection.
  * Remove openssl-DEFAULT_SUSE_cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116801">- Update to 3.2.3:
  * Changes between 3.2.2 and 3.2.3:
  - Fixed possible denial of service in X.509 name checks. [CVE-2024-6119]
  - Fixed possible buffer overread in SSL_select_next_proto(). [CVE-2024-5535]
  * Changes between 3.2.1 and 3.2.2:
  - Fixed potential use after free after SSL_free_buffers() is called. [CVE-2024-4741]
  - Fixed an issue where checking excessively long DSA keys or parameters may
    be very slow. [CVE-2024-4603]
  - Improved EC/DSA nonce generation routines to avoid bias and timing
    side channel leaks.
  - Fixed an issue where some non-default TLS server configurations can cause
    unbounded memory growth when processing TLSv1.3 sessions. [CVE-2024-2511]
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded. This can be used on platforms
    where using atexit() from shared libraries causes crashes on exit.
  - Fixed bug where SSL_export_keying_material() could not be used with QUIC
    connections.
  * Add openssl-skip-quic-pairwise.patch to adapt the pairwise tests.
  * Merge openssl-FIPS-release_num_in_version_string.patch into
    openssl-FIPS-services-minimize.patch
  * Rebase patches:
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Remove-EC-curves.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-3-use-include-directive.patch
  * Remove not needed patches:
  - openssl-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  - openssl-3-FIPS-PCT_rsa_keygen.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730462400">- Support MSA 12 SHA3 on s390x [jsc#PED-10280]
  * Add openssl-3-add_EVP_DigestSqueeze_api.patch
  * Add openssl-3-support-multiple-sha3_squeeze_s390x.patch
  * Add openssl-3-add-xof-state-handling-s3_absorb.patch
  * Add openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  * Add openssl-3-fix-state-handling-sha3_final_s390x.patch
  * Add openssl-3-fix-state-handling-shake_final_s390x.patch
  * Add openssl-3-fix-state-handling-keccak_final_s390x.patch
  * Add openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  * Add openssl-3-add-defines-CPACF-funcs.patch
  * Add openssl-3-add-hw-acceleration-hmac.patch
  * Add openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  * Add openssl-3-fix-s390x_sha3_absorb.patch
  * Add openssl-3-fix-s390x_shake_squeeze.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808000">- Support MSA 10 XTS on s390x [jsc#PED-10273]
  * s390x: Add hardware acceleration for full AES-XTS
  * Add openssl-3-hw-acceleration-aes-xts-s390x.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808001">- Support MSA 11 HMAC on s390x [jsc#PED-10274]
  * Add openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  * Add openssl-3-fix-hmac-digest-detection-s390x.patch
  * Add openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730980800">- Add missing fixes for SHA3_squeeze and quic_multistream_test on
  pcc64 arch. [jsc#PED-10280]
  * Added openssl-3-fix-sha3-squeeze-ppc64.patch
  * Added openssl-3-fix-quic_multistream_test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1731412800">- Do not use HASHBANGPERL to avoid introducing a dependency on the
  perl-base package. [bsc#1233235]</changelog>
  <changelog author="pmonreal@suse.com" date="1734436800">- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
  - openssl-3-use-include-directive.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1738238400">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Security fix: [bsc#1236599, CVE-2024-12797]
  * RFC7250 handshakes with unauthenticated servers don't abort as
    expected.
  * Add openssl-CVE-2024-12797.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1746014400">- Security fix: [bsc#1240366, CVE-2025-27587]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
  <changelog author="mls@suse.de" date="1751371200">- Backport mdless cms signing support [jsc#PED-12895]
  * Add openssl-3-support-mdless-cms.patch</changelog>
</package>
<package pkgid="fd5d93cc40f2ffc5a9e472bb67ed8628124bf4231773192ca3300539a19406a4" name="libopenssl3" arch="x86_64">
  <version epoch="0" ver="3.2.3" rel="150700.5.15.1"/>
  <changelog author="angel.yankov@suse.com" date="1727265600">- Security fix: [bsc#1230698, CVE-2024-41996]
  * Validating the order of the public keys in the Diffie-Hellman
    Key Agreement Protocol, when an approved safe prime is used.
  * Added openssl-3-CVE-2024-41996.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1220262, CVE-2023-50782]
  * Implicit rejection in PKCS#1 v1.5
  * Add openssl-CVE-2023-50782.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166401">- Security fix: [bsc#1231741, CVE-2024-9143]
  * Low-level invalid GF(2^m) parameters lead to OOB memory access
  * Add openssl-CVE-2024-9143.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729512000">- Update to 3.1.7:
  * Major changes between OpenSSL 3.1.6 and OpenSSL 3.1.7 [3 Sep 2024]
  - Fixed possible denial of service in X.509 name checks (CVE-2024-6119)
  - Fixed possible buffer overread in SSL_select_next_proto()
    (CVE-2024-5535)
  * Major changes between OpenSSL 3.1.5 and OpenSSL 3.1.6 [4 Jun 2024]
  - Fixed potential use after free after SSL_free_buffers() is
    called (CVE-2024-4741)
  - Fixed an issue where checking excessively long DSA keys or
    parameters may be very slow (CVE-2024-4603)
  - Fixed unbounded memory growth with session handling in TLSv1.3
    (CVE-2024-2511)
  * Major changes between OpenSSL 3.1.4 and OpenSSL 3.1.5 [30 Jan 2024]
  - Fixed PKCS12 Decoding crashes (CVE-2024-0727)
  - Fixed Excessive time spent checking invalid RSA public keys
    [CVE-2023-6237)
  - Fixed POLY1305 MAC implementation corrupting vector registers
    on PowerPC CPUs which support PowerISA 2.07 (CVE-2023-6129)
  - Fix excessive time spent in DH check / generation with large
    Q parameter value (CVE-2023-5678)
  * Update openssl.keyring with BA5473A2B0587B07FB27CF2D216094DFD0CB81EF
  * Rebase patches:
  - openssl-Force-FIPS.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-CVE-2023-50782.patch
  * Remove patches fixed in the update:
  - openssl-Improve-performance-for-6x-unrolling-with-vpermxor-i.patch
  - openssl-CVE-2024-6119.patch openssl-CVE-2024-5535.patch
  - openssl-CVE-2024-4741.patch openssl-CVE-2024-4603.patch
  - openssl-CVE-2024-2511.patch openssl-CVE-2024-0727.patch
  - openssl-CVE-2023-6237.patch openssl-CVE-2023-6129.patch
  - openssl-CVE-2023-5678.patch openssl-3-CVE-2024-41996.patch
  - openssl-Enable-BTI-feature-for-md5-on-aarch64.patch
  - openssl-Fix-EVP_PKEY_CTX_add1_hkdf_info-behavior.patch
  - openssl-Handle-empty-param-in-EVP_PKEY_CTX_add1_hkdf_info.patch
  - reproducible.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729857600">- Update to 3.2.0:
  * Changes between 3.1.x and 3.2.0:
  - Fix excessive time spent in DH check/ generation with large Q parameter
    value. [CVE-2023-5678]
  - The BLAKE2b hash algorithm supports a configurable output length
    by setting the "size" parameter.
  - Added a function to delete objects from store by URI - OSSL_STORE_delete()
    and the corresponding provider-storemgmt API function OSSL_FUNC_store_delete().
  - Added OSSL_FUNC_store_open_ex() provider-storemgmt API function to pass
    a passphrase callback when opening a store.
  - Changed the default salt length used by PBES2 KDF's (PBKDF2 and scrypt)
    from 8 bytes to 16 bytes.
  - Changed the default value of the 'ess_cert_id_alg' configuration
    option which is used to calculate the TSA's public key certificate
    identifier. The default algorithm is updated to be sha256 instead of sha1.
  - Added optimization for SM2 algorithm on aarch64. A new configure option
    'no-sm2-precomp' has been added to disable the precomputed table.
  - Added client side support for QUIC
  - Added secp384r1 implementation using Solinas' reduction to improve
    speed of the NIST P-384 elliptic curve. To enable the implementation
    the build option 'enable-ec_nistp_64_gcc_128' must be used.
  - Improved RFC7468 compliance of the asn1parse command.
  - Added SHA256/192 algorithm support.
  - Added support for securely getting root CA certificate update in CMP.
  - Improved contention on global write locks by using more read locks where
    appropriate.
  - Improved performance of OSSL_PARAM lookups in performance critical
    provider functions.
  - Added the SSL_get0_group_name() function to provide access to the
    name of the group used for the TLS key exchange.
  - Provide a new configure option 'no-http' that can be used to disable the
    HTTP support. Provide new configure options 'no-apps' and 'no-docs' to
    disable building the openssl command line application and the documentation.
  - Provide a new configure option 'no-ecx' that can be used to disable the
    X25519, X448, and EdDSA support.
  - When multiple OSSL_KDF_PARAM_INFO parameters are passed to
    the EVP_KDF_CTX_set_params() function they are now concatenated not just
    for the HKDF algorithm but also for SSKDF and X9.63 KDF algorithms.
  - Added OSSL_FUNC_keymgmt_im/export_types_ex() provider functions that get
    the provider context as a parameter.
  - TLS round-trip time calculation was added by a Brigham Young University
    Capstone team partnering with Sandia National Laboratories. A new function
    in ssl_lib titled SSL_get_handshake_rtt will calculate and retrieve this
    value.
  - Added the "-quic" option to s_client to enable connectivity to QUIC servers.
    QUIC requires the use of ALPN, so this must be specified via the "-alpn"
    option. Use of the "advanced" s_client command command via the "-adv" option
    is recommended.
  - Added an "advanced" command mode to s_client. Use this with the "-adv" option.
  - Add Raw Public Key (RFC7250) support.
  - Added support for modular exponentiation and CRT offloading for the
    S390x architecture.
  - Added further assembler code for the RISC-V architecture.
  - Added EC_GROUP_to_params() which creates an OSSL_PARAM array
    from a given EC_GROUP.
  - Improved support for non-default library contexts and property queries
    when parsing PKCS#12 files.
  - Implemented support for all five instances of EdDSA from RFC8032:
    Ed25519, Ed25519ctx, Ed25519ph, Ed448, and Ed448ph.
    The streaming is not yet supported for the HashEdDSA variants
    (Ed25519ph and Ed448ph).
  - Added SM4 optimization for ARM processors using ASIMD and AES HW instructions.
  - Implemented SM4-XTS support.
  - Added platform-agnostic OSSL_sleep() function.
  - Implemented deterministic ECDSA signatures (RFC6979) support.
  - Implemented AES-GCM-SIV (RFC8452) support.
  - Added support for pluggable (provider-based) TLS signature algorithms.
    This enables TLS 1.3 authentication operations with algorithms embedded
    in providers not included by default in OpenSSL. In combination with
    the already available pluggable KEM and X.509 support, this enables
    for example suitable providers to deliver post-quantum or quantum-safe
    cryptography to OpenSSL users.
  - Added support for pluggable (provider-based) CMS signature algorithms.
    This enables CMS sign and verify operations with algorithms embedded
    in providers not included by default in OpenSSL.
  - Implemented HPKE DHKEM support in providers used by HPKE (RFC9180) API.
  - Add support for certificate compression (RFC8879), including
    library support for Brotli and Zstandard compression.
  - Add the ability to add custom attributes to PKCS12 files. Add a new API
    PKCS12_create_ex2, identical to the existing PKCS12_create_ex but allows
    for a user specified callback and optional argument.
    Added a new PKCS12_SAFEBAG_set0_attr, which allows for a new attr to be
    added to the existing STACK_OF attrs.
  - Major refactor of the libssl record layer.
  - Add a mac salt length option for the pkcs12 command.
  - Add more SRTP protection profiles from RFC8723 and RFC8269.
  - Extended Kernel TLS (KTLS) to support TLS 1.3 receive offload.
  - Add support for TCP Fast Open (RFC7413) to macOS, Linux, and FreeBSD where
    supported and enabled.
  - Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489)
    to the list of ciphersuites providing Perfect Forward Secrecy as
    required by SECLEVEL &gt;= 3.
  - Add new SSL APIs to aid in efficiently implementing TLS/SSL fingerprinting.
    The SSL_CTRL_GET_IANA_GROUPS control code, exposed as the
    SSL_get0_iana_groups() function-like macro, retrieves the list of
    supported groups sent by the peer.
  - Fixed PEM_write_bio_PKCS8PrivateKey() and PEM_write_bio_PKCS8PrivateKey_nid()
    to make it possible to use empty passphrase strings.
  - The PKCS12_parse() function now supports MAC-less PKCS12 files.
  - Added ASYNC_set_mem_functions() and ASYNC_get_mem_functions() calls to be able
    to change functions used for allocating the memory of asynchronous call stack.
  - Added support for signed BIGNUMs in the OSSL_PARAM APIs.
  - A failure exit code is returned when using the openssl x509 command to check
    certificate attributes and the checks fail.
  - The default SSL/TLS security level has been changed from 1 to 2. RSA,
    DSA and DH keys of 1024 bits and above and less than 2048 bits and ECC keys
    of 160 bits and above and less than 224 bits were previously accepted by
    default but are now no longer allowed. By default TLS compression was
    already disabled in previous OpenSSL versions. At security level 2 it cannot
    be enabled.
  - The SSL_CTX_set_cipher_list family functions now accept ciphers using their
    IANA standard names.
  - The PVK key derivation function has been moved from b2i_PVK_bio_ex() into
    the legacy crypto provider as an EVP_KDF. Applications requiring this KDF
    will need to load the legacy crypto provider.
  - CCM8 cipher suites in TLS have been downgraded to security level zero
    because they use a short authentication tag which lowers their strength.
  - Subject or issuer names in X.509 objects are now displayed as UTF-8 strings
    by default. Also spaces surrounding '=' in DN output are removed.
  - Add X.509 certificate codeSigning purpose and related checks on key usage and
    extended key usage of the leaf certificate according to the CA/Browser Forum.
  - The 'x509', 'ca', and 'req' apps now produce X.509 v3 certificates.
    The '-x509v1' option of 'req' prefers generation of X.509 v1 certificates.
    'X509_sign()' and 'X509_sign_ctx()' make sure that the certificate has
    X.509 version 3 if the certificate information includes X.509 extensions.
  - Fix and extend certificate handling and the apps 'x509', 'verify' etc.
    such as adding a trace facility for debugging certificate chain building.
  - Various fixes and extensions to the CMP+CRMF implementation and the 'cmp' app
    in particular supporting requests for central key generation, generalized
    polling, and various types of genm/genp exchanges defined in CMP Updates.
  - Fixes and extensions to the HTTP client and to the HTTP server in 'apps/'
    like correcting the TLS and proxy support and adding tracing for debugging.
  - Extended the CMS API for handling 'CMS_SignedData' and 'CMS_EnvelopedData'.
  - 'CMS_add0_cert()' and 'CMS_add1_cert()' no longer throw an error if
    a certificate to be added is already present. 'CMS_sign_ex()' and
    'CMS_sign()' now ignore any duplicate certificates in their 'certs' argument
    and no longer throw an error for them.
  - Added BIO_s_dgram_pair() and BIO_s_dgram_mem() that provide memory-based
    BIOs with datagram semantics and support for BIO_sendmmsg() and BIO_recvmmsg()
    calls. They can be used as the transport BIOs for QUIC.
  - Add new BIO_sendmmsg() and BIO_recvmmsg() BIO methods which allow
    sending and receiving multiple messages in a single call. An implementation
    is provided for BIO_dgram. For further details, see BIO_sendmmsg(3).
  - Support for loading root certificates from the Windows certificate store
    has been added.
  - Enable KTLS with the TLS 1.3 CCM mode ciphersuites. Note that some linux
    kernel versions that support KTLS have a known bug in CCM processing. That
    has been fixed in stable releases starting from 5.4.164, 5.10.84, 5.15.7,
    and all releases since 5.16. KTLS with CCM ciphersuites should be only used
    on these releases.
  - Added '-ktls' option to 's_server' and 's_client' commands to enable the
    KTLS support.
  - Zerocopy KTLS sendfile() support on Linux.
  - The OBJ_ calls are now thread safe using a global lock.
  - New parameter '-digest' for openssl cms command allowing signing
    pre-computed digests and new CMS API functions supporting that
    functionality.
  - OPENSSL_malloc() and other allocation functions now raise errors on
    allocation failures. The callers do not need to explicitly raise errors
    unless they want to for tracing purposes.
  - Added support for Brainpool curves in TLS-1.3.
  - Support for Argon2d, Argon2i, Argon2id KDFs has been added along with
    a basic thread pool implementation for select platforms.</changelog>
  <changelog author="pmonreal@suse.com" date="1729857601">- Update to 3.2.1:
  * Changes between 3.2.0 and 3.2.1:
  - A file in PKCS12 format can contain certificates and keys and may come from
    an untrusted source. The PKCS12 specification allows certain fields to be
    NULL, but OpenSSL did not correctly check for this case. [CVE-2024-0727]
  - When function EVP_PKEY_public_check() is called on RSA public keys,
    a computation is done to confirm that the RSA modulus, n, is composite.
    For valid RSA keys, n is a product of two or more large primes and this
    computation completes quickly. However, if n is an overly large prime,
    then this computation would take a long time. [CVE-2023-6237]
  - Restore the encoding of SM2 PrivateKeyInfo and SubjectPublicKeyInfo to
    have the contained AlgorithmIdentifier.algorithm set to id-ecPublicKey
    rather than SM2.
  - The POLY1305 MAC (message authentication code) implementation in OpenSSL
    for PowerPC CPUs saves the contents of vector registers in different
    order than they are restored. [CVE-2023-6129]
  - Disable building QUIC server utility when OpenSSL is configured with 'no-apps'.
  * The openssl-crypto-policies-support.patch has been merged into
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Rename openssl-Disable-default-provider-for-test-suite.patch and rebase to
    openssl-TESTS-Disable-default-provider-crypto-policies.patch
  * Patches removed in the update:
  - openssl-Add_support_for_Windows_CA_certificate_store.patch
  - openssl-ec-56-bit-Limb-Solinas-Strategy-for-secp384r1.patch
  - openssl-ec-Use-static-linkage-on-nistp521-felem_-square-mul-.patch
  - openssl-ec-powerpc64le-Add-asm-implementation-of-felem_-squa.patch
  - openssl-ecc-Remove-extraneous-parentheses-in-secp384r1.patch
  - openssl-powerpc-ecc-Fix-stack-allocation-secp384r1-asm.patch
  - openssl-CVE-2024-41996.patch
  - openssl-CVE-2023-50782.patch
  - openssl-CVE-2024-9143.patch
  * Patches rebased:
  - openssl-3-use-include-directive.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-DEFAULT_SUSE_cipher.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Force-FIPS.patch
  - openssl-load-legacy-provider.patch
  - openssl-no-html-docs.patch
  - openssl-pkgconfig.patch
  - openssl-ppc64-config.patch
  - openssl-truststore.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116800">- Remove the hardcoded DEFAULT_SUSE cipherlist selection.
  * Remove openssl-DEFAULT_SUSE_cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116801">- Update to 3.2.3:
  * Changes between 3.2.2 and 3.2.3:
  - Fixed possible denial of service in X.509 name checks. [CVE-2024-6119]
  - Fixed possible buffer overread in SSL_select_next_proto(). [CVE-2024-5535]
  * Changes between 3.2.1 and 3.2.2:
  - Fixed potential use after free after SSL_free_buffers() is called. [CVE-2024-4741]
  - Fixed an issue where checking excessively long DSA keys or parameters may
    be very slow. [CVE-2024-4603]
  - Improved EC/DSA nonce generation routines to avoid bias and timing
    side channel leaks.
  - Fixed an issue where some non-default TLS server configurations can cause
    unbounded memory growth when processing TLSv1.3 sessions. [CVE-2024-2511]
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded. This can be used on platforms
    where using atexit() from shared libraries causes crashes on exit.
  - Fixed bug where SSL_export_keying_material() could not be used with QUIC
    connections.
  * Add openssl-skip-quic-pairwise.patch to adapt the pairwise tests.
  * Merge openssl-FIPS-release_num_in_version_string.patch into
    openssl-FIPS-services-minimize.patch
  * Rebase patches:
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Remove-EC-curves.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-3-use-include-directive.patch
  * Remove not needed patches:
  - openssl-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  - openssl-3-FIPS-PCT_rsa_keygen.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730462400">- Support MSA 12 SHA3 on s390x [jsc#PED-10280]
  * Add openssl-3-add_EVP_DigestSqueeze_api.patch
  * Add openssl-3-support-multiple-sha3_squeeze_s390x.patch
  * Add openssl-3-add-xof-state-handling-s3_absorb.patch
  * Add openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  * Add openssl-3-fix-state-handling-sha3_final_s390x.patch
  * Add openssl-3-fix-state-handling-shake_final_s390x.patch
  * Add openssl-3-fix-state-handling-keccak_final_s390x.patch
  * Add openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  * Add openssl-3-add-defines-CPACF-funcs.patch
  * Add openssl-3-add-hw-acceleration-hmac.patch
  * Add openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  * Add openssl-3-fix-s390x_sha3_absorb.patch
  * Add openssl-3-fix-s390x_shake_squeeze.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808000">- Support MSA 10 XTS on s390x [jsc#PED-10273]
  * s390x: Add hardware acceleration for full AES-XTS
  * Add openssl-3-hw-acceleration-aes-xts-s390x.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808001">- Support MSA 11 HMAC on s390x [jsc#PED-10274]
  * Add openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  * Add openssl-3-fix-hmac-digest-detection-s390x.patch
  * Add openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730980800">- Add missing fixes for SHA3_squeeze and quic_multistream_test on
  pcc64 arch. [jsc#PED-10280]
  * Added openssl-3-fix-sha3-squeeze-ppc64.patch
  * Added openssl-3-fix-quic_multistream_test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1731412800">- Do not use HASHBANGPERL to avoid introducing a dependency on the
  perl-base package. [bsc#1233235]</changelog>
  <changelog author="pmonreal@suse.com" date="1734436800">- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
  - openssl-3-use-include-directive.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1738238400">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Security fix: [bsc#1236599, CVE-2024-12797]
  * RFC7250 handshakes with unauthenticated servers don't abort as
    expected.
  * Add openssl-CVE-2024-12797.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1746014400">- Security fix: [bsc#1240366, CVE-2025-27587]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
  <changelog author="mls@suse.de" date="1751371200">- Backport mdless cms signing support [jsc#PED-12895]
  * Add openssl-3-support-mdless-cms.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- FIPS: Fix EMS in crypto-policies FIPS:NO-ENFORCE-EMS
  * [bsc#1230959, bsc#1232326, bsc#1231748, bsc#1246428]
  * Add patch openssl-FIPS-fix-EMS-support.patch</changelog>
</package>
<package pkgid="4462af8d6d1395552e69a76eecf789ee934381afb2c17a55ef8e4ccaa8a8886e" name="libopenssl3" arch="x86_64">
  <version epoch="0" ver="3.2.3" rel="150700.5.18.1"/>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1220262, CVE-2023-50782]
  * Implicit rejection in PKCS#1 v1.5
  * Add openssl-CVE-2023-50782.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166401">- Security fix: [bsc#1231741, CVE-2024-9143]
  * Low-level invalid GF(2^m) parameters lead to OOB memory access
  * Add openssl-CVE-2024-9143.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729512000">- Update to 3.1.7:
  * Major changes between OpenSSL 3.1.6 and OpenSSL 3.1.7 [3 Sep 2024]
  - Fixed possible denial of service in X.509 name checks (CVE-2024-6119)
  - Fixed possible buffer overread in SSL_select_next_proto()
    (CVE-2024-5535)
  * Major changes between OpenSSL 3.1.5 and OpenSSL 3.1.6 [4 Jun 2024]
  - Fixed potential use after free after SSL_free_buffers() is
    called (CVE-2024-4741)
  - Fixed an issue where checking excessively long DSA keys or
    parameters may be very slow (CVE-2024-4603)
  - Fixed unbounded memory growth with session handling in TLSv1.3
    (CVE-2024-2511)
  * Major changes between OpenSSL 3.1.4 and OpenSSL 3.1.5 [30 Jan 2024]
  - Fixed PKCS12 Decoding crashes (CVE-2024-0727)
  - Fixed Excessive time spent checking invalid RSA public keys
    [CVE-2023-6237)
  - Fixed POLY1305 MAC implementation corrupting vector registers
    on PowerPC CPUs which support PowerISA 2.07 (CVE-2023-6129)
  - Fix excessive time spent in DH check / generation with large
    Q parameter value (CVE-2023-5678)
  * Update openssl.keyring with BA5473A2B0587B07FB27CF2D216094DFD0CB81EF
  * Rebase patches:
  - openssl-Force-FIPS.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-CVE-2023-50782.patch
  * Remove patches fixed in the update:
  - openssl-Improve-performance-for-6x-unrolling-with-vpermxor-i.patch
  - openssl-CVE-2024-6119.patch openssl-CVE-2024-5535.patch
  - openssl-CVE-2024-4741.patch openssl-CVE-2024-4603.patch
  - openssl-CVE-2024-2511.patch openssl-CVE-2024-0727.patch
  - openssl-CVE-2023-6237.patch openssl-CVE-2023-6129.patch
  - openssl-CVE-2023-5678.patch openssl-3-CVE-2024-41996.patch
  - openssl-Enable-BTI-feature-for-md5-on-aarch64.patch
  - openssl-Fix-EVP_PKEY_CTX_add1_hkdf_info-behavior.patch
  - openssl-Handle-empty-param-in-EVP_PKEY_CTX_add1_hkdf_info.patch
  - reproducible.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729857600">- Update to 3.2.0:
  * Changes between 3.1.x and 3.2.0:
  - Fix excessive time spent in DH check/ generation with large Q parameter
    value. [CVE-2023-5678]
  - The BLAKE2b hash algorithm supports a configurable output length
    by setting the "size" parameter.
  - Added a function to delete objects from store by URI - OSSL_STORE_delete()
    and the corresponding provider-storemgmt API function OSSL_FUNC_store_delete().
  - Added OSSL_FUNC_store_open_ex() provider-storemgmt API function to pass
    a passphrase callback when opening a store.
  - Changed the default salt length used by PBES2 KDF's (PBKDF2 and scrypt)
    from 8 bytes to 16 bytes.
  - Changed the default value of the 'ess_cert_id_alg' configuration
    option which is used to calculate the TSA's public key certificate
    identifier. The default algorithm is updated to be sha256 instead of sha1.
  - Added optimization for SM2 algorithm on aarch64. A new configure option
    'no-sm2-precomp' has been added to disable the precomputed table.
  - Added client side support for QUIC
  - Added secp384r1 implementation using Solinas' reduction to improve
    speed of the NIST P-384 elliptic curve. To enable the implementation
    the build option 'enable-ec_nistp_64_gcc_128' must be used.
  - Improved RFC7468 compliance of the asn1parse command.
  - Added SHA256/192 algorithm support.
  - Added support for securely getting root CA certificate update in CMP.
  - Improved contention on global write locks by using more read locks where
    appropriate.
  - Improved performance of OSSL_PARAM lookups in performance critical
    provider functions.
  - Added the SSL_get0_group_name() function to provide access to the
    name of the group used for the TLS key exchange.
  - Provide a new configure option 'no-http' that can be used to disable the
    HTTP support. Provide new configure options 'no-apps' and 'no-docs' to
    disable building the openssl command line application and the documentation.
  - Provide a new configure option 'no-ecx' that can be used to disable the
    X25519, X448, and EdDSA support.
  - When multiple OSSL_KDF_PARAM_INFO parameters are passed to
    the EVP_KDF_CTX_set_params() function they are now concatenated not just
    for the HKDF algorithm but also for SSKDF and X9.63 KDF algorithms.
  - Added OSSL_FUNC_keymgmt_im/export_types_ex() provider functions that get
    the provider context as a parameter.
  - TLS round-trip time calculation was added by a Brigham Young University
    Capstone team partnering with Sandia National Laboratories. A new function
    in ssl_lib titled SSL_get_handshake_rtt will calculate and retrieve this
    value.
  - Added the "-quic" option to s_client to enable connectivity to QUIC servers.
    QUIC requires the use of ALPN, so this must be specified via the "-alpn"
    option. Use of the "advanced" s_client command command via the "-adv" option
    is recommended.
  - Added an "advanced" command mode to s_client. Use this with the "-adv" option.
  - Add Raw Public Key (RFC7250) support.
  - Added support for modular exponentiation and CRT offloading for the
    S390x architecture.
  - Added further assembler code for the RISC-V architecture.
  - Added EC_GROUP_to_params() which creates an OSSL_PARAM array
    from a given EC_GROUP.
  - Improved support for non-default library contexts and property queries
    when parsing PKCS#12 files.
  - Implemented support for all five instances of EdDSA from RFC8032:
    Ed25519, Ed25519ctx, Ed25519ph, Ed448, and Ed448ph.
    The streaming is not yet supported for the HashEdDSA variants
    (Ed25519ph and Ed448ph).
  - Added SM4 optimization for ARM processors using ASIMD and AES HW instructions.
  - Implemented SM4-XTS support.
  - Added platform-agnostic OSSL_sleep() function.
  - Implemented deterministic ECDSA signatures (RFC6979) support.
  - Implemented AES-GCM-SIV (RFC8452) support.
  - Added support for pluggable (provider-based) TLS signature algorithms.
    This enables TLS 1.3 authentication operations with algorithms embedded
    in providers not included by default in OpenSSL. In combination with
    the already available pluggable KEM and X.509 support, this enables
    for example suitable providers to deliver post-quantum or quantum-safe
    cryptography to OpenSSL users.
  - Added support for pluggable (provider-based) CMS signature algorithms.
    This enables CMS sign and verify operations with algorithms embedded
    in providers not included by default in OpenSSL.
  - Implemented HPKE DHKEM support in providers used by HPKE (RFC9180) API.
  - Add support for certificate compression (RFC8879), including
    library support for Brotli and Zstandard compression.
  - Add the ability to add custom attributes to PKCS12 files. Add a new API
    PKCS12_create_ex2, identical to the existing PKCS12_create_ex but allows
    for a user specified callback and optional argument.
    Added a new PKCS12_SAFEBAG_set0_attr, which allows for a new attr to be
    added to the existing STACK_OF attrs.
  - Major refactor of the libssl record layer.
  - Add a mac salt length option for the pkcs12 command.
  - Add more SRTP protection profiles from RFC8723 and RFC8269.
  - Extended Kernel TLS (KTLS) to support TLS 1.3 receive offload.
  - Add support for TCP Fast Open (RFC7413) to macOS, Linux, and FreeBSD where
    supported and enabled.
  - Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489)
    to the list of ciphersuites providing Perfect Forward Secrecy as
    required by SECLEVEL &gt;= 3.
  - Add new SSL APIs to aid in efficiently implementing TLS/SSL fingerprinting.
    The SSL_CTRL_GET_IANA_GROUPS control code, exposed as the
    SSL_get0_iana_groups() function-like macro, retrieves the list of
    supported groups sent by the peer.
  - Fixed PEM_write_bio_PKCS8PrivateKey() and PEM_write_bio_PKCS8PrivateKey_nid()
    to make it possible to use empty passphrase strings.
  - The PKCS12_parse() function now supports MAC-less PKCS12 files.
  - Added ASYNC_set_mem_functions() and ASYNC_get_mem_functions() calls to be able
    to change functions used for allocating the memory of asynchronous call stack.
  - Added support for signed BIGNUMs in the OSSL_PARAM APIs.
  - A failure exit code is returned when using the openssl x509 command to check
    certificate attributes and the checks fail.
  - The default SSL/TLS security level has been changed from 1 to 2. RSA,
    DSA and DH keys of 1024 bits and above and less than 2048 bits and ECC keys
    of 160 bits and above and less than 224 bits were previously accepted by
    default but are now no longer allowed. By default TLS compression was
    already disabled in previous OpenSSL versions. At security level 2 it cannot
    be enabled.
  - The SSL_CTX_set_cipher_list family functions now accept ciphers using their
    IANA standard names.
  - The PVK key derivation function has been moved from b2i_PVK_bio_ex() into
    the legacy crypto provider as an EVP_KDF. Applications requiring this KDF
    will need to load the legacy crypto provider.
  - CCM8 cipher suites in TLS have been downgraded to security level zero
    because they use a short authentication tag which lowers their strength.
  - Subject or issuer names in X.509 objects are now displayed as UTF-8 strings
    by default. Also spaces surrounding '=' in DN output are removed.
  - Add X.509 certificate codeSigning purpose and related checks on key usage and
    extended key usage of the leaf certificate according to the CA/Browser Forum.
  - The 'x509', 'ca', and 'req' apps now produce X.509 v3 certificates.
    The '-x509v1' option of 'req' prefers generation of X.509 v1 certificates.
    'X509_sign()' and 'X509_sign_ctx()' make sure that the certificate has
    X.509 version 3 if the certificate information includes X.509 extensions.
  - Fix and extend certificate handling and the apps 'x509', 'verify' etc.
    such as adding a trace facility for debugging certificate chain building.
  - Various fixes and extensions to the CMP+CRMF implementation and the 'cmp' app
    in particular supporting requests for central key generation, generalized
    polling, and various types of genm/genp exchanges defined in CMP Updates.
  - Fixes and extensions to the HTTP client and to the HTTP server in 'apps/'
    like correcting the TLS and proxy support and adding tracing for debugging.
  - Extended the CMS API for handling 'CMS_SignedData' and 'CMS_EnvelopedData'.
  - 'CMS_add0_cert()' and 'CMS_add1_cert()' no longer throw an error if
    a certificate to be added is already present. 'CMS_sign_ex()' and
    'CMS_sign()' now ignore any duplicate certificates in their 'certs' argument
    and no longer throw an error for them.
  - Added BIO_s_dgram_pair() and BIO_s_dgram_mem() that provide memory-based
    BIOs with datagram semantics and support for BIO_sendmmsg() and BIO_recvmmsg()
    calls. They can be used as the transport BIOs for QUIC.
  - Add new BIO_sendmmsg() and BIO_recvmmsg() BIO methods which allow
    sending and receiving multiple messages in a single call. An implementation
    is provided for BIO_dgram. For further details, see BIO_sendmmsg(3).
  - Support for loading root certificates from the Windows certificate store
    has been added.
  - Enable KTLS with the TLS 1.3 CCM mode ciphersuites. Note that some linux
    kernel versions that support KTLS have a known bug in CCM processing. That
    has been fixed in stable releases starting from 5.4.164, 5.10.84, 5.15.7,
    and all releases since 5.16. KTLS with CCM ciphersuites should be only used
    on these releases.
  - Added '-ktls' option to 's_server' and 's_client' commands to enable the
    KTLS support.
  - Zerocopy KTLS sendfile() support on Linux.
  - The OBJ_ calls are now thread safe using a global lock.
  - New parameter '-digest' for openssl cms command allowing signing
    pre-computed digests and new CMS API functions supporting that
    functionality.
  - OPENSSL_malloc() and other allocation functions now raise errors on
    allocation failures. The callers do not need to explicitly raise errors
    unless they want to for tracing purposes.
  - Added support for Brainpool curves in TLS-1.3.
  - Support for Argon2d, Argon2i, Argon2id KDFs has been added along with
    a basic thread pool implementation for select platforms.</changelog>
  <changelog author="pmonreal@suse.com" date="1729857601">- Update to 3.2.1:
  * Changes between 3.2.0 and 3.2.1:
  - A file in PKCS12 format can contain certificates and keys and may come from
    an untrusted source. The PKCS12 specification allows certain fields to be
    NULL, but OpenSSL did not correctly check for this case. [CVE-2024-0727]
  - When function EVP_PKEY_public_check() is called on RSA public keys,
    a computation is done to confirm that the RSA modulus, n, is composite.
    For valid RSA keys, n is a product of two or more large primes and this
    computation completes quickly. However, if n is an overly large prime,
    then this computation would take a long time. [CVE-2023-6237]
  - Restore the encoding of SM2 PrivateKeyInfo and SubjectPublicKeyInfo to
    have the contained AlgorithmIdentifier.algorithm set to id-ecPublicKey
    rather than SM2.
  - The POLY1305 MAC (message authentication code) implementation in OpenSSL
    for PowerPC CPUs saves the contents of vector registers in different
    order than they are restored. [CVE-2023-6129]
  - Disable building QUIC server utility when OpenSSL is configured with 'no-apps'.
  * The openssl-crypto-policies-support.patch has been merged into
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Rename openssl-Disable-default-provider-for-test-suite.patch and rebase to
    openssl-TESTS-Disable-default-provider-crypto-policies.patch
  * Patches removed in the update:
  - openssl-Add_support_for_Windows_CA_certificate_store.patch
  - openssl-ec-56-bit-Limb-Solinas-Strategy-for-secp384r1.patch
  - openssl-ec-Use-static-linkage-on-nistp521-felem_-square-mul-.patch
  - openssl-ec-powerpc64le-Add-asm-implementation-of-felem_-squa.patch
  - openssl-ecc-Remove-extraneous-parentheses-in-secp384r1.patch
  - openssl-powerpc-ecc-Fix-stack-allocation-secp384r1-asm.patch
  - openssl-CVE-2024-41996.patch
  - openssl-CVE-2023-50782.patch
  - openssl-CVE-2024-9143.patch
  * Patches rebased:
  - openssl-3-use-include-directive.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-DEFAULT_SUSE_cipher.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Force-FIPS.patch
  - openssl-load-legacy-provider.patch
  - openssl-no-html-docs.patch
  - openssl-pkgconfig.patch
  - openssl-ppc64-config.patch
  - openssl-truststore.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116800">- Remove the hardcoded DEFAULT_SUSE cipherlist selection.
  * Remove openssl-DEFAULT_SUSE_cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116801">- Update to 3.2.3:
  * Changes between 3.2.2 and 3.2.3:
  - Fixed possible denial of service in X.509 name checks. [CVE-2024-6119]
  - Fixed possible buffer overread in SSL_select_next_proto(). [CVE-2024-5535]
  * Changes between 3.2.1 and 3.2.2:
  - Fixed potential use after free after SSL_free_buffers() is called. [CVE-2024-4741]
  - Fixed an issue where checking excessively long DSA keys or parameters may
    be very slow. [CVE-2024-4603]
  - Improved EC/DSA nonce generation routines to avoid bias and timing
    side channel leaks.
  - Fixed an issue where some non-default TLS server configurations can cause
    unbounded memory growth when processing TLSv1.3 sessions. [CVE-2024-2511]
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded. This can be used on platforms
    where using atexit() from shared libraries causes crashes on exit.
  - Fixed bug where SSL_export_keying_material() could not be used with QUIC
    connections.
  * Add openssl-skip-quic-pairwise.patch to adapt the pairwise tests.
  * Merge openssl-FIPS-release_num_in_version_string.patch into
    openssl-FIPS-services-minimize.patch
  * Rebase patches:
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Remove-EC-curves.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-3-use-include-directive.patch
  * Remove not needed patches:
  - openssl-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  - openssl-3-FIPS-PCT_rsa_keygen.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730462400">- Support MSA 12 SHA3 on s390x [jsc#PED-10280]
  * Add openssl-3-add_EVP_DigestSqueeze_api.patch
  * Add openssl-3-support-multiple-sha3_squeeze_s390x.patch
  * Add openssl-3-add-xof-state-handling-s3_absorb.patch
  * Add openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  * Add openssl-3-fix-state-handling-sha3_final_s390x.patch
  * Add openssl-3-fix-state-handling-shake_final_s390x.patch
  * Add openssl-3-fix-state-handling-keccak_final_s390x.patch
  * Add openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  * Add openssl-3-add-defines-CPACF-funcs.patch
  * Add openssl-3-add-hw-acceleration-hmac.patch
  * Add openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  * Add openssl-3-fix-s390x_sha3_absorb.patch
  * Add openssl-3-fix-s390x_shake_squeeze.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808000">- Support MSA 10 XTS on s390x [jsc#PED-10273]
  * s390x: Add hardware acceleration for full AES-XTS
  * Add openssl-3-hw-acceleration-aes-xts-s390x.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808001">- Support MSA 11 HMAC on s390x [jsc#PED-10274]
  * Add openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  * Add openssl-3-fix-hmac-digest-detection-s390x.patch
  * Add openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730980800">- Add missing fixes for SHA3_squeeze and quic_multistream_test on
  pcc64 arch. [jsc#PED-10280]
  * Added openssl-3-fix-sha3-squeeze-ppc64.patch
  * Added openssl-3-fix-quic_multistream_test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1731412800">- Do not use HASHBANGPERL to avoid introducing a dependency on the
  perl-base package. [bsc#1233235]</changelog>
  <changelog author="pmonreal@suse.com" date="1734436800">- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
  - openssl-3-use-include-directive.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1738238400">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Security fix: [bsc#1236599, CVE-2024-12797]
  * RFC7250 handshakes with unauthenticated servers don't abort as
    expected.
  * Add openssl-CVE-2024-12797.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1746014400">- Security fix: [bsc#1240366, CVE-2025-27587]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
  <changelog author="mls@suse.de" date="1751371200">- Backport mdless cms signing support [jsc#PED-12895]
  * Add openssl-3-support-mdless-cms.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- FIPS: Fix EMS in crypto-policies FIPS:NO-ENFORCE-EMS
  * [bsc#1230959, bsc#1232326, bsc#1231748, bsc#1246428]
  * Add patch openssl-FIPS-fix-EMS-support.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1753876800">- Increase limit for CRL download [bsc#1247148, bsc#1247144]
  * Add openssl-3-large-CRLs.patch</changelog>
</package>
<package pkgid="285c0718c4e66af83be015b9fc00a3ac8ae8a6a29e1302cfb5300932bcebcc91" name="libopenssl3" arch="x86_64">
  <version epoch="0" ver="3.2.3" rel="150700.5.21.1"/>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1231741, CVE-2024-9143]
  * Low-level invalid GF(2^m) parameters lead to OOB memory access
  * Add openssl-CVE-2024-9143.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729512000">- Update to 3.1.7:
  * Major changes between OpenSSL 3.1.6 and OpenSSL 3.1.7 [3 Sep 2024]
  - Fixed possible denial of service in X.509 name checks (CVE-2024-6119)
  - Fixed possible buffer overread in SSL_select_next_proto()
    (CVE-2024-5535)
  * Major changes between OpenSSL 3.1.5 and OpenSSL 3.1.6 [4 Jun 2024]
  - Fixed potential use after free after SSL_free_buffers() is
    called (CVE-2024-4741)
  - Fixed an issue where checking excessively long DSA keys or
    parameters may be very slow (CVE-2024-4603)
  - Fixed unbounded memory growth with session handling in TLSv1.3
    (CVE-2024-2511)
  * Major changes between OpenSSL 3.1.4 and OpenSSL 3.1.5 [30 Jan 2024]
  - Fixed PKCS12 Decoding crashes (CVE-2024-0727)
  - Fixed Excessive time spent checking invalid RSA public keys
    [CVE-2023-6237)
  - Fixed POLY1305 MAC implementation corrupting vector registers
    on PowerPC CPUs which support PowerISA 2.07 (CVE-2023-6129)
  - Fix excessive time spent in DH check / generation with large
    Q parameter value (CVE-2023-5678)
  * Update openssl.keyring with BA5473A2B0587B07FB27CF2D216094DFD0CB81EF
  * Rebase patches:
  - openssl-Force-FIPS.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-CVE-2023-50782.patch
  * Remove patches fixed in the update:
  - openssl-Improve-performance-for-6x-unrolling-with-vpermxor-i.patch
  - openssl-CVE-2024-6119.patch openssl-CVE-2024-5535.patch
  - openssl-CVE-2024-4741.patch openssl-CVE-2024-4603.patch
  - openssl-CVE-2024-2511.patch openssl-CVE-2024-0727.patch
  - openssl-CVE-2023-6237.patch openssl-CVE-2023-6129.patch
  - openssl-CVE-2023-5678.patch openssl-3-CVE-2024-41996.patch
  - openssl-Enable-BTI-feature-for-md5-on-aarch64.patch
  - openssl-Fix-EVP_PKEY_CTX_add1_hkdf_info-behavior.patch
  - openssl-Handle-empty-param-in-EVP_PKEY_CTX_add1_hkdf_info.patch
  - reproducible.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729857600">- Update to 3.2.0:
  * Changes between 3.1.x and 3.2.0:
  - Fix excessive time spent in DH check/ generation with large Q parameter
    value. [CVE-2023-5678]
  - The BLAKE2b hash algorithm supports a configurable output length
    by setting the "size" parameter.
  - Added a function to delete objects from store by URI - OSSL_STORE_delete()
    and the corresponding provider-storemgmt API function OSSL_FUNC_store_delete().
  - Added OSSL_FUNC_store_open_ex() provider-storemgmt API function to pass
    a passphrase callback when opening a store.
  - Changed the default salt length used by PBES2 KDF's (PBKDF2 and scrypt)
    from 8 bytes to 16 bytes.
  - Changed the default value of the 'ess_cert_id_alg' configuration
    option which is used to calculate the TSA's public key certificate
    identifier. The default algorithm is updated to be sha256 instead of sha1.
  - Added optimization for SM2 algorithm on aarch64. A new configure option
    'no-sm2-precomp' has been added to disable the precomputed table.
  - Added client side support for QUIC
  - Added secp384r1 implementation using Solinas' reduction to improve
    speed of the NIST P-384 elliptic curve. To enable the implementation
    the build option 'enable-ec_nistp_64_gcc_128' must be used.
  - Improved RFC7468 compliance of the asn1parse command.
  - Added SHA256/192 algorithm support.
  - Added support for securely getting root CA certificate update in CMP.
  - Improved contention on global write locks by using more read locks where
    appropriate.
  - Improved performance of OSSL_PARAM lookups in performance critical
    provider functions.
  - Added the SSL_get0_group_name() function to provide access to the
    name of the group used for the TLS key exchange.
  - Provide a new configure option 'no-http' that can be used to disable the
    HTTP support. Provide new configure options 'no-apps' and 'no-docs' to
    disable building the openssl command line application and the documentation.
  - Provide a new configure option 'no-ecx' that can be used to disable the
    X25519, X448, and EdDSA support.
  - When multiple OSSL_KDF_PARAM_INFO parameters are passed to
    the EVP_KDF_CTX_set_params() function they are now concatenated not just
    for the HKDF algorithm but also for SSKDF and X9.63 KDF algorithms.
  - Added OSSL_FUNC_keymgmt_im/export_types_ex() provider functions that get
    the provider context as a parameter.
  - TLS round-trip time calculation was added by a Brigham Young University
    Capstone team partnering with Sandia National Laboratories. A new function
    in ssl_lib titled SSL_get_handshake_rtt will calculate and retrieve this
    value.
  - Added the "-quic" option to s_client to enable connectivity to QUIC servers.
    QUIC requires the use of ALPN, so this must be specified via the "-alpn"
    option. Use of the "advanced" s_client command command via the "-adv" option
    is recommended.
  - Added an "advanced" command mode to s_client. Use this with the "-adv" option.
  - Add Raw Public Key (RFC7250) support.
  - Added support for modular exponentiation and CRT offloading for the
    S390x architecture.
  - Added further assembler code for the RISC-V architecture.
  - Added EC_GROUP_to_params() which creates an OSSL_PARAM array
    from a given EC_GROUP.
  - Improved support for non-default library contexts and property queries
    when parsing PKCS#12 files.
  - Implemented support for all five instances of EdDSA from RFC8032:
    Ed25519, Ed25519ctx, Ed25519ph, Ed448, and Ed448ph.
    The streaming is not yet supported for the HashEdDSA variants
    (Ed25519ph and Ed448ph).
  - Added SM4 optimization for ARM processors using ASIMD and AES HW instructions.
  - Implemented SM4-XTS support.
  - Added platform-agnostic OSSL_sleep() function.
  - Implemented deterministic ECDSA signatures (RFC6979) support.
  - Implemented AES-GCM-SIV (RFC8452) support.
  - Added support for pluggable (provider-based) TLS signature algorithms.
    This enables TLS 1.3 authentication operations with algorithms embedded
    in providers not included by default in OpenSSL. In combination with
    the already available pluggable KEM and X.509 support, this enables
    for example suitable providers to deliver post-quantum or quantum-safe
    cryptography to OpenSSL users.
  - Added support for pluggable (provider-based) CMS signature algorithms.
    This enables CMS sign and verify operations with algorithms embedded
    in providers not included by default in OpenSSL.
  - Implemented HPKE DHKEM support in providers used by HPKE (RFC9180) API.
  - Add support for certificate compression (RFC8879), including
    library support for Brotli and Zstandard compression.
  - Add the ability to add custom attributes to PKCS12 files. Add a new API
    PKCS12_create_ex2, identical to the existing PKCS12_create_ex but allows
    for a user specified callback and optional argument.
    Added a new PKCS12_SAFEBAG_set0_attr, which allows for a new attr to be
    added to the existing STACK_OF attrs.
  - Major refactor of the libssl record layer.
  - Add a mac salt length option for the pkcs12 command.
  - Add more SRTP protection profiles from RFC8723 and RFC8269.
  - Extended Kernel TLS (KTLS) to support TLS 1.3 receive offload.
  - Add support for TCP Fast Open (RFC7413) to macOS, Linux, and FreeBSD where
    supported and enabled.
  - Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489)
    to the list of ciphersuites providing Perfect Forward Secrecy as
    required by SECLEVEL &gt;= 3.
  - Add new SSL APIs to aid in efficiently implementing TLS/SSL fingerprinting.
    The SSL_CTRL_GET_IANA_GROUPS control code, exposed as the
    SSL_get0_iana_groups() function-like macro, retrieves the list of
    supported groups sent by the peer.
  - Fixed PEM_write_bio_PKCS8PrivateKey() and PEM_write_bio_PKCS8PrivateKey_nid()
    to make it possible to use empty passphrase strings.
  - The PKCS12_parse() function now supports MAC-less PKCS12 files.
  - Added ASYNC_set_mem_functions() and ASYNC_get_mem_functions() calls to be able
    to change functions used for allocating the memory of asynchronous call stack.
  - Added support for signed BIGNUMs in the OSSL_PARAM APIs.
  - A failure exit code is returned when using the openssl x509 command to check
    certificate attributes and the checks fail.
  - The default SSL/TLS security level has been changed from 1 to 2. RSA,
    DSA and DH keys of 1024 bits and above and less than 2048 bits and ECC keys
    of 160 bits and above and less than 224 bits were previously accepted by
    default but are now no longer allowed. By default TLS compression was
    already disabled in previous OpenSSL versions. At security level 2 it cannot
    be enabled.
  - The SSL_CTX_set_cipher_list family functions now accept ciphers using their
    IANA standard names.
  - The PVK key derivation function has been moved from b2i_PVK_bio_ex() into
    the legacy crypto provider as an EVP_KDF. Applications requiring this KDF
    will need to load the legacy crypto provider.
  - CCM8 cipher suites in TLS have been downgraded to security level zero
    because they use a short authentication tag which lowers their strength.
  - Subject or issuer names in X.509 objects are now displayed as UTF-8 strings
    by default. Also spaces surrounding '=' in DN output are removed.
  - Add X.509 certificate codeSigning purpose and related checks on key usage and
    extended key usage of the leaf certificate according to the CA/Browser Forum.
  - The 'x509', 'ca', and 'req' apps now produce X.509 v3 certificates.
    The '-x509v1' option of 'req' prefers generation of X.509 v1 certificates.
    'X509_sign()' and 'X509_sign_ctx()' make sure that the certificate has
    X.509 version 3 if the certificate information includes X.509 extensions.
  - Fix and extend certificate handling and the apps 'x509', 'verify' etc.
    such as adding a trace facility for debugging certificate chain building.
  - Various fixes and extensions to the CMP+CRMF implementation and the 'cmp' app
    in particular supporting requests for central key generation, generalized
    polling, and various types of genm/genp exchanges defined in CMP Updates.
  - Fixes and extensions to the HTTP client and to the HTTP server in 'apps/'
    like correcting the TLS and proxy support and adding tracing for debugging.
  - Extended the CMS API for handling 'CMS_SignedData' and 'CMS_EnvelopedData'.
  - 'CMS_add0_cert()' and 'CMS_add1_cert()' no longer throw an error if
    a certificate to be added is already present. 'CMS_sign_ex()' and
    'CMS_sign()' now ignore any duplicate certificates in their 'certs' argument
    and no longer throw an error for them.
  - Added BIO_s_dgram_pair() and BIO_s_dgram_mem() that provide memory-based
    BIOs with datagram semantics and support for BIO_sendmmsg() and BIO_recvmmsg()
    calls. They can be used as the transport BIOs for QUIC.
  - Add new BIO_sendmmsg() and BIO_recvmmsg() BIO methods which allow
    sending and receiving multiple messages in a single call. An implementation
    is provided for BIO_dgram. For further details, see BIO_sendmmsg(3).
  - Support for loading root certificates from the Windows certificate store
    has been added.
  - Enable KTLS with the TLS 1.3 CCM mode ciphersuites. Note that some linux
    kernel versions that support KTLS have a known bug in CCM processing. That
    has been fixed in stable releases starting from 5.4.164, 5.10.84, 5.15.7,
    and all releases since 5.16. KTLS with CCM ciphersuites should be only used
    on these releases.
  - Added '-ktls' option to 's_server' and 's_client' commands to enable the
    KTLS support.
  - Zerocopy KTLS sendfile() support on Linux.
  - The OBJ_ calls are now thread safe using a global lock.
  - New parameter '-digest' for openssl cms command allowing signing
    pre-computed digests and new CMS API functions supporting that
    functionality.
  - OPENSSL_malloc() and other allocation functions now raise errors on
    allocation failures. The callers do not need to explicitly raise errors
    unless they want to for tracing purposes.
  - Added support for Brainpool curves in TLS-1.3.
  - Support for Argon2d, Argon2i, Argon2id KDFs has been added along with
    a basic thread pool implementation for select platforms.</changelog>
  <changelog author="pmonreal@suse.com" date="1729857601">- Update to 3.2.1:
  * Changes between 3.2.0 and 3.2.1:
  - A file in PKCS12 format can contain certificates and keys and may come from
    an untrusted source. The PKCS12 specification allows certain fields to be
    NULL, but OpenSSL did not correctly check for this case. [CVE-2024-0727]
  - When function EVP_PKEY_public_check() is called on RSA public keys,
    a computation is done to confirm that the RSA modulus, n, is composite.
    For valid RSA keys, n is a product of two or more large primes and this
    computation completes quickly. However, if n is an overly large prime,
    then this computation would take a long time. [CVE-2023-6237]
  - Restore the encoding of SM2 PrivateKeyInfo and SubjectPublicKeyInfo to
    have the contained AlgorithmIdentifier.algorithm set to id-ecPublicKey
    rather than SM2.
  - The POLY1305 MAC (message authentication code) implementation in OpenSSL
    for PowerPC CPUs saves the contents of vector registers in different
    order than they are restored. [CVE-2023-6129]
  - Disable building QUIC server utility when OpenSSL is configured with 'no-apps'.
  * The openssl-crypto-policies-support.patch has been merged into
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Rename openssl-Disable-default-provider-for-test-suite.patch and rebase to
    openssl-TESTS-Disable-default-provider-crypto-policies.patch
  * Patches removed in the update:
  - openssl-Add_support_for_Windows_CA_certificate_store.patch
  - openssl-ec-56-bit-Limb-Solinas-Strategy-for-secp384r1.patch
  - openssl-ec-Use-static-linkage-on-nistp521-felem_-square-mul-.patch
  - openssl-ec-powerpc64le-Add-asm-implementation-of-felem_-squa.patch
  - openssl-ecc-Remove-extraneous-parentheses-in-secp384r1.patch
  - openssl-powerpc-ecc-Fix-stack-allocation-secp384r1-asm.patch
  - openssl-CVE-2024-41996.patch
  - openssl-CVE-2023-50782.patch
  - openssl-CVE-2024-9143.patch
  * Patches rebased:
  - openssl-3-use-include-directive.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-DEFAULT_SUSE_cipher.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Force-FIPS.patch
  - openssl-load-legacy-provider.patch
  - openssl-no-html-docs.patch
  - openssl-pkgconfig.patch
  - openssl-ppc64-config.patch
  - openssl-truststore.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116800">- Remove the hardcoded DEFAULT_SUSE cipherlist selection.
  * Remove openssl-DEFAULT_SUSE_cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116801">- Update to 3.2.3:
  * Changes between 3.2.2 and 3.2.3:
  - Fixed possible denial of service in X.509 name checks. [CVE-2024-6119]
  - Fixed possible buffer overread in SSL_select_next_proto(). [CVE-2024-5535]
  * Changes between 3.2.1 and 3.2.2:
  - Fixed potential use after free after SSL_free_buffers() is called. [CVE-2024-4741]
  - Fixed an issue where checking excessively long DSA keys or parameters may
    be very slow. [CVE-2024-4603]
  - Improved EC/DSA nonce generation routines to avoid bias and timing
    side channel leaks.
  - Fixed an issue where some non-default TLS server configurations can cause
    unbounded memory growth when processing TLSv1.3 sessions. [CVE-2024-2511]
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded. This can be used on platforms
    where using atexit() from shared libraries causes crashes on exit.
  - Fixed bug where SSL_export_keying_material() could not be used with QUIC
    connections.
  * Add openssl-skip-quic-pairwise.patch to adapt the pairwise tests.
  * Merge openssl-FIPS-release_num_in_version_string.patch into
    openssl-FIPS-services-minimize.patch
  * Rebase patches:
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Remove-EC-curves.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-3-use-include-directive.patch
  * Remove not needed patches:
  - openssl-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  - openssl-3-FIPS-PCT_rsa_keygen.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730462400">- Support MSA 12 SHA3 on s390x [jsc#PED-10280]
  * Add openssl-3-add_EVP_DigestSqueeze_api.patch
  * Add openssl-3-support-multiple-sha3_squeeze_s390x.patch
  * Add openssl-3-add-xof-state-handling-s3_absorb.patch
  * Add openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  * Add openssl-3-fix-state-handling-sha3_final_s390x.patch
  * Add openssl-3-fix-state-handling-shake_final_s390x.patch
  * Add openssl-3-fix-state-handling-keccak_final_s390x.patch
  * Add openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  * Add openssl-3-add-defines-CPACF-funcs.patch
  * Add openssl-3-add-hw-acceleration-hmac.patch
  * Add openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  * Add openssl-3-fix-s390x_sha3_absorb.patch
  * Add openssl-3-fix-s390x_shake_squeeze.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808000">- Support MSA 10 XTS on s390x [jsc#PED-10273]
  * s390x: Add hardware acceleration for full AES-XTS
  * Add openssl-3-hw-acceleration-aes-xts-s390x.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808001">- Support MSA 11 HMAC on s390x [jsc#PED-10274]
  * Add openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  * Add openssl-3-fix-hmac-digest-detection-s390x.patch
  * Add openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730980800">- Add missing fixes for SHA3_squeeze and quic_multistream_test on
  pcc64 arch. [jsc#PED-10280]
  * Added openssl-3-fix-sha3-squeeze-ppc64.patch
  * Added openssl-3-fix-quic_multistream_test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1731412800">- Do not use HASHBANGPERL to avoid introducing a dependency on the
  perl-base package. [bsc#1233235]</changelog>
  <changelog author="pmonreal@suse.com" date="1734436800">- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
  - openssl-3-use-include-directive.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1738238400">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Security fix: [bsc#1236599, CVE-2024-12797]
  * RFC7250 handshakes with unauthenticated servers don't abort as
    expected.
  * Add openssl-CVE-2024-12797.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1746014400">- Security fix: [bsc#1240366, CVE-2025-27587]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
  <changelog author="mls@suse.de" date="1751371200">- Backport mdless cms signing support [jsc#PED-12895]
  * Add openssl-3-support-mdless-cms.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- FIPS: Fix EMS in crypto-policies FIPS:NO-ENFORCE-EMS
  * [bsc#1230959, bsc#1232326, bsc#1231748, bsc#1246428]
  * Add patch openssl-FIPS-fix-EMS-support.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1753876800">- Increase limit for CRL download [bsc#1247148, bsc#1247144]
  * Add openssl-3-large-CRLs.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1759233600">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl3-CVE-2025-9230.patch</changelog>
</package>
<package pkgid="017fadb264bb6baae7617b813d3124bb8ee95a724f86725bbac8a3030b58c4bd" name="libopenssl3" arch="x86_64">
  <version epoch="0" ver="3.2.3" rel="150700.5.24.1"/>
  <changelog author="pmonreal@suse.com" date="1729512000">- Update to 3.1.7:
  * Major changes between OpenSSL 3.1.6 and OpenSSL 3.1.7 [3 Sep 2024]
  - Fixed possible denial of service in X.509 name checks (CVE-2024-6119)
  - Fixed possible buffer overread in SSL_select_next_proto()
    (CVE-2024-5535)
  * Major changes between OpenSSL 3.1.5 and OpenSSL 3.1.6 [4 Jun 2024]
  - Fixed potential use after free after SSL_free_buffers() is
    called (CVE-2024-4741)
  - Fixed an issue where checking excessively long DSA keys or
    parameters may be very slow (CVE-2024-4603)
  - Fixed unbounded memory growth with session handling in TLSv1.3
    (CVE-2024-2511)
  * Major changes between OpenSSL 3.1.4 and OpenSSL 3.1.5 [30 Jan 2024]
  - Fixed PKCS12 Decoding crashes (CVE-2024-0727)
  - Fixed Excessive time spent checking invalid RSA public keys
    [CVE-2023-6237)
  - Fixed POLY1305 MAC implementation corrupting vector registers
    on PowerPC CPUs which support PowerISA 2.07 (CVE-2023-6129)
  - Fix excessive time spent in DH check / generation with large
    Q parameter value (CVE-2023-5678)
  * Update openssl.keyring with BA5473A2B0587B07FB27CF2D216094DFD0CB81EF
  * Rebase patches:
  - openssl-Force-FIPS.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-CVE-2023-50782.patch
  * Remove patches fixed in the update:
  - openssl-Improve-performance-for-6x-unrolling-with-vpermxor-i.patch
  - openssl-CVE-2024-6119.patch openssl-CVE-2024-5535.patch
  - openssl-CVE-2024-4741.patch openssl-CVE-2024-4603.patch
  - openssl-CVE-2024-2511.patch openssl-CVE-2024-0727.patch
  - openssl-CVE-2023-6237.patch openssl-CVE-2023-6129.patch
  - openssl-CVE-2023-5678.patch openssl-3-CVE-2024-41996.patch
  - openssl-Enable-BTI-feature-for-md5-on-aarch64.patch
  - openssl-Fix-EVP_PKEY_CTX_add1_hkdf_info-behavior.patch
  - openssl-Handle-empty-param-in-EVP_PKEY_CTX_add1_hkdf_info.patch
  - reproducible.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729857600">- Update to 3.2.0:
  * Changes between 3.1.x and 3.2.0:
  - Fix excessive time spent in DH check/ generation with large Q parameter
    value. [CVE-2023-5678]
  - The BLAKE2b hash algorithm supports a configurable output length
    by setting the "size" parameter.
  - Added a function to delete objects from store by URI - OSSL_STORE_delete()
    and the corresponding provider-storemgmt API function OSSL_FUNC_store_delete().
  - Added OSSL_FUNC_store_open_ex() provider-storemgmt API function to pass
    a passphrase callback when opening a store.
  - Changed the default salt length used by PBES2 KDF's (PBKDF2 and scrypt)
    from 8 bytes to 16 bytes.
  - Changed the default value of the 'ess_cert_id_alg' configuration
    option which is used to calculate the TSA's public key certificate
    identifier. The default algorithm is updated to be sha256 instead of sha1.
  - Added optimization for SM2 algorithm on aarch64. A new configure option
    'no-sm2-precomp' has been added to disable the precomputed table.
  - Added client side support for QUIC
  - Added secp384r1 implementation using Solinas' reduction to improve
    speed of the NIST P-384 elliptic curve. To enable the implementation
    the build option 'enable-ec_nistp_64_gcc_128' must be used.
  - Improved RFC7468 compliance of the asn1parse command.
  - Added SHA256/192 algorithm support.
  - Added support for securely getting root CA certificate update in CMP.
  - Improved contention on global write locks by using more read locks where
    appropriate.
  - Improved performance of OSSL_PARAM lookups in performance critical
    provider functions.
  - Added the SSL_get0_group_name() function to provide access to the
    name of the group used for the TLS key exchange.
  - Provide a new configure option 'no-http' that can be used to disable the
    HTTP support. Provide new configure options 'no-apps' and 'no-docs' to
    disable building the openssl command line application and the documentation.
  - Provide a new configure option 'no-ecx' that can be used to disable the
    X25519, X448, and EdDSA support.
  - When multiple OSSL_KDF_PARAM_INFO parameters are passed to
    the EVP_KDF_CTX_set_params() function they are now concatenated not just
    for the HKDF algorithm but also for SSKDF and X9.63 KDF algorithms.
  - Added OSSL_FUNC_keymgmt_im/export_types_ex() provider functions that get
    the provider context as a parameter.
  - TLS round-trip time calculation was added by a Brigham Young University
    Capstone team partnering with Sandia National Laboratories. A new function
    in ssl_lib titled SSL_get_handshake_rtt will calculate and retrieve this
    value.
  - Added the "-quic" option to s_client to enable connectivity to QUIC servers.
    QUIC requires the use of ALPN, so this must be specified via the "-alpn"
    option. Use of the "advanced" s_client command command via the "-adv" option
    is recommended.
  - Added an "advanced" command mode to s_client. Use this with the "-adv" option.
  - Add Raw Public Key (RFC7250) support.
  - Added support for modular exponentiation and CRT offloading for the
    S390x architecture.
  - Added further assembler code for the RISC-V architecture.
  - Added EC_GROUP_to_params() which creates an OSSL_PARAM array
    from a given EC_GROUP.
  - Improved support for non-default library contexts and property queries
    when parsing PKCS#12 files.
  - Implemented support for all five instances of EdDSA from RFC8032:
    Ed25519, Ed25519ctx, Ed25519ph, Ed448, and Ed448ph.
    The streaming is not yet supported for the HashEdDSA variants
    (Ed25519ph and Ed448ph).
  - Added SM4 optimization for ARM processors using ASIMD and AES HW instructions.
  - Implemented SM4-XTS support.
  - Added platform-agnostic OSSL_sleep() function.
  - Implemented deterministic ECDSA signatures (RFC6979) support.
  - Implemented AES-GCM-SIV (RFC8452) support.
  - Added support for pluggable (provider-based) TLS signature algorithms.
    This enables TLS 1.3 authentication operations with algorithms embedded
    in providers not included by default in OpenSSL. In combination with
    the already available pluggable KEM and X.509 support, this enables
    for example suitable providers to deliver post-quantum or quantum-safe
    cryptography to OpenSSL users.
  - Added support for pluggable (provider-based) CMS signature algorithms.
    This enables CMS sign and verify operations with algorithms embedded
    in providers not included by default in OpenSSL.
  - Implemented HPKE DHKEM support in providers used by HPKE (RFC9180) API.
  - Add support for certificate compression (RFC8879), including
    library support for Brotli and Zstandard compression.
  - Add the ability to add custom attributes to PKCS12 files. Add a new API
    PKCS12_create_ex2, identical to the existing PKCS12_create_ex but allows
    for a user specified callback and optional argument.
    Added a new PKCS12_SAFEBAG_set0_attr, which allows for a new attr to be
    added to the existing STACK_OF attrs.
  - Major refactor of the libssl record layer.
  - Add a mac salt length option for the pkcs12 command.
  - Add more SRTP protection profiles from RFC8723 and RFC8269.
  - Extended Kernel TLS (KTLS) to support TLS 1.3 receive offload.
  - Add support for TCP Fast Open (RFC7413) to macOS, Linux, and FreeBSD where
    supported and enabled.
  - Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489)
    to the list of ciphersuites providing Perfect Forward Secrecy as
    required by SECLEVEL &gt;= 3.
  - Add new SSL APIs to aid in efficiently implementing TLS/SSL fingerprinting.
    The SSL_CTRL_GET_IANA_GROUPS control code, exposed as the
    SSL_get0_iana_groups() function-like macro, retrieves the list of
    supported groups sent by the peer.
  - Fixed PEM_write_bio_PKCS8PrivateKey() and PEM_write_bio_PKCS8PrivateKey_nid()
    to make it possible to use empty passphrase strings.
  - The PKCS12_parse() function now supports MAC-less PKCS12 files.
  - Added ASYNC_set_mem_functions() and ASYNC_get_mem_functions() calls to be able
    to change functions used for allocating the memory of asynchronous call stack.
  - Added support for signed BIGNUMs in the OSSL_PARAM APIs.
  - A failure exit code is returned when using the openssl x509 command to check
    certificate attributes and the checks fail.
  - The default SSL/TLS security level has been changed from 1 to 2. RSA,
    DSA and DH keys of 1024 bits and above and less than 2048 bits and ECC keys
    of 160 bits and above and less than 224 bits were previously accepted by
    default but are now no longer allowed. By default TLS compression was
    already disabled in previous OpenSSL versions. At security level 2 it cannot
    be enabled.
  - The SSL_CTX_set_cipher_list family functions now accept ciphers using their
    IANA standard names.
  - The PVK key derivation function has been moved from b2i_PVK_bio_ex() into
    the legacy crypto provider as an EVP_KDF. Applications requiring this KDF
    will need to load the legacy crypto provider.
  - CCM8 cipher suites in TLS have been downgraded to security level zero
    because they use a short authentication tag which lowers their strength.
  - Subject or issuer names in X.509 objects are now displayed as UTF-8 strings
    by default. Also spaces surrounding '=' in DN output are removed.
  - Add X.509 certificate codeSigning purpose and related checks on key usage and
    extended key usage of the leaf certificate according to the CA/Browser Forum.
  - The 'x509', 'ca', and 'req' apps now produce X.509 v3 certificates.
    The '-x509v1' option of 'req' prefers generation of X.509 v1 certificates.
    'X509_sign()' and 'X509_sign_ctx()' make sure that the certificate has
    X.509 version 3 if the certificate information includes X.509 extensions.
  - Fix and extend certificate handling and the apps 'x509', 'verify' etc.
    such as adding a trace facility for debugging certificate chain building.
  - Various fixes and extensions to the CMP+CRMF implementation and the 'cmp' app
    in particular supporting requests for central key generation, generalized
    polling, and various types of genm/genp exchanges defined in CMP Updates.
  - Fixes and extensions to the HTTP client and to the HTTP server in 'apps/'
    like correcting the TLS and proxy support and adding tracing for debugging.
  - Extended the CMS API for handling 'CMS_SignedData' and 'CMS_EnvelopedData'.
  - 'CMS_add0_cert()' and 'CMS_add1_cert()' no longer throw an error if
    a certificate to be added is already present. 'CMS_sign_ex()' and
    'CMS_sign()' now ignore any duplicate certificates in their 'certs' argument
    and no longer throw an error for them.
  - Added BIO_s_dgram_pair() and BIO_s_dgram_mem() that provide memory-based
    BIOs with datagram semantics and support for BIO_sendmmsg() and BIO_recvmmsg()
    calls. They can be used as the transport BIOs for QUIC.
  - Add new BIO_sendmmsg() and BIO_recvmmsg() BIO methods which allow
    sending and receiving multiple messages in a single call. An implementation
    is provided for BIO_dgram. For further details, see BIO_sendmmsg(3).
  - Support for loading root certificates from the Windows certificate store
    has been added.
  - Enable KTLS with the TLS 1.3 CCM mode ciphersuites. Note that some linux
    kernel versions that support KTLS have a known bug in CCM processing. That
    has been fixed in stable releases starting from 5.4.164, 5.10.84, 5.15.7,
    and all releases since 5.16. KTLS with CCM ciphersuites should be only used
    on these releases.
  - Added '-ktls' option to 's_server' and 's_client' commands to enable the
    KTLS support.
  - Zerocopy KTLS sendfile() support on Linux.
  - The OBJ_ calls are now thread safe using a global lock.
  - New parameter '-digest' for openssl cms command allowing signing
    pre-computed digests and new CMS API functions supporting that
    functionality.
  - OPENSSL_malloc() and other allocation functions now raise errors on
    allocation failures. The callers do not need to explicitly raise errors
    unless they want to for tracing purposes.
  - Added support for Brainpool curves in TLS-1.3.
  - Support for Argon2d, Argon2i, Argon2id KDFs has been added along with
    a basic thread pool implementation for select platforms.</changelog>
  <changelog author="pmonreal@suse.com" date="1729857601">- Update to 3.2.1:
  * Changes between 3.2.0 and 3.2.1:
  - A file in PKCS12 format can contain certificates and keys and may come from
    an untrusted source. The PKCS12 specification allows certain fields to be
    NULL, but OpenSSL did not correctly check for this case. [CVE-2024-0727]
  - When function EVP_PKEY_public_check() is called on RSA public keys,
    a computation is done to confirm that the RSA modulus, n, is composite.
    For valid RSA keys, n is a product of two or more large primes and this
    computation completes quickly. However, if n is an overly large prime,
    then this computation would take a long time. [CVE-2023-6237]
  - Restore the encoding of SM2 PrivateKeyInfo and SubjectPublicKeyInfo to
    have the contained AlgorithmIdentifier.algorithm set to id-ecPublicKey
    rather than SM2.
  - The POLY1305 MAC (message authentication code) implementation in OpenSSL
    for PowerPC CPUs saves the contents of vector registers in different
    order than they are restored. [CVE-2023-6129]
  - Disable building QUIC server utility when OpenSSL is configured with 'no-apps'.
  * The openssl-crypto-policies-support.patch has been merged into
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Rename openssl-Disable-default-provider-for-test-suite.patch and rebase to
    openssl-TESTS-Disable-default-provider-crypto-policies.patch
  * Patches removed in the update:
  - openssl-Add_support_for_Windows_CA_certificate_store.patch
  - openssl-ec-56-bit-Limb-Solinas-Strategy-for-secp384r1.patch
  - openssl-ec-Use-static-linkage-on-nistp521-felem_-square-mul-.patch
  - openssl-ec-powerpc64le-Add-asm-implementation-of-felem_-squa.patch
  - openssl-ecc-Remove-extraneous-parentheses-in-secp384r1.patch
  - openssl-powerpc-ecc-Fix-stack-allocation-secp384r1-asm.patch
  - openssl-CVE-2024-41996.patch
  - openssl-CVE-2023-50782.patch
  - openssl-CVE-2024-9143.patch
  * Patches rebased:
  - openssl-3-use-include-directive.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-DEFAULT_SUSE_cipher.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Force-FIPS.patch
  - openssl-load-legacy-provider.patch
  - openssl-no-html-docs.patch
  - openssl-pkgconfig.patch
  - openssl-ppc64-config.patch
  - openssl-truststore.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116800">- Remove the hardcoded DEFAULT_SUSE cipherlist selection.
  * Remove openssl-DEFAULT_SUSE_cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116801">- Update to 3.2.3:
  * Changes between 3.2.2 and 3.2.3:
  - Fixed possible denial of service in X.509 name checks. [CVE-2024-6119]
  - Fixed possible buffer overread in SSL_select_next_proto(). [CVE-2024-5535]
  * Changes between 3.2.1 and 3.2.2:
  - Fixed potential use after free after SSL_free_buffers() is called. [CVE-2024-4741]
  - Fixed an issue where checking excessively long DSA keys or parameters may
    be very slow. [CVE-2024-4603]
  - Improved EC/DSA nonce generation routines to avoid bias and timing
    side channel leaks.
  - Fixed an issue where some non-default TLS server configurations can cause
    unbounded memory growth when processing TLSv1.3 sessions. [CVE-2024-2511]
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded. This can be used on platforms
    where using atexit() from shared libraries causes crashes on exit.
  - Fixed bug where SSL_export_keying_material() could not be used with QUIC
    connections.
  * Add openssl-skip-quic-pairwise.patch to adapt the pairwise tests.
  * Merge openssl-FIPS-release_num_in_version_string.patch into
    openssl-FIPS-services-minimize.patch
  * Rebase patches:
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Remove-EC-curves.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-3-use-include-directive.patch
  * Remove not needed patches:
  - openssl-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  - openssl-3-FIPS-PCT_rsa_keygen.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730462400">- Support MSA 12 SHA3 on s390x [jsc#PED-10280]
  * Add openssl-3-add_EVP_DigestSqueeze_api.patch
  * Add openssl-3-support-multiple-sha3_squeeze_s390x.patch
  * Add openssl-3-add-xof-state-handling-s3_absorb.patch
  * Add openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  * Add openssl-3-fix-state-handling-sha3_final_s390x.patch
  * Add openssl-3-fix-state-handling-shake_final_s390x.patch
  * Add openssl-3-fix-state-handling-keccak_final_s390x.patch
  * Add openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  * Add openssl-3-add-defines-CPACF-funcs.patch
  * Add openssl-3-add-hw-acceleration-hmac.patch
  * Add openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  * Add openssl-3-fix-s390x_sha3_absorb.patch
  * Add openssl-3-fix-s390x_shake_squeeze.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808000">- Support MSA 10 XTS on s390x [jsc#PED-10273]
  * s390x: Add hardware acceleration for full AES-XTS
  * Add openssl-3-hw-acceleration-aes-xts-s390x.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808001">- Support MSA 11 HMAC on s390x [jsc#PED-10274]
  * Add openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  * Add openssl-3-fix-hmac-digest-detection-s390x.patch
  * Add openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730980800">- Add missing fixes for SHA3_squeeze and quic_multistream_test on
  pcc64 arch. [jsc#PED-10280]
  * Added openssl-3-fix-sha3-squeeze-ppc64.patch
  * Added openssl-3-fix-quic_multistream_test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1731412800">- Do not use HASHBANGPERL to avoid introducing a dependency on the
  perl-base package. [bsc#1233235]</changelog>
  <changelog author="pmonreal@suse.com" date="1734436800">- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
  - openssl-3-use-include-directive.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1738238400">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Security fix: [bsc#1236599, CVE-2024-12797]
  * RFC7250 handshakes with unauthenticated servers don't abort as
    expected.
  * Add openssl-CVE-2024-12797.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1746014400">- Security fix: [bsc#1240366, CVE-2025-27587]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
  <changelog author="mls@suse.de" date="1751371200">- Backport mdless cms signing support [jsc#PED-12895]
  * Add openssl-3-support-mdless-cms.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- FIPS: Fix EMS in crypto-policies FIPS:NO-ENFORCE-EMS
  * [bsc#1230959, bsc#1232326, bsc#1231748, bsc#1246428]
  * Add patch openssl-FIPS-fix-EMS-support.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1753876800">- Increase limit for CRL download [bsc#1247148, bsc#1247144]
  * Add openssl-3-large-CRLs.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1759233600">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl3-CVE-2025-9230.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1768824000">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795]
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * Stack buffer overflow in CMS AuthEnvelopedData parsing
  - openssl-CVE-2025-15467.patch [bsc#1256830, CVE-2025-15467]
  - openssl-CVE-2025-15467-comments.patch
  - openssl-CVE-2025-15467-test.patch</changelog>
</package>
<package pkgid="12858deac24a830f17b2357754938291dc7dc6c30a7bba0b7acdc0b989189796" name="libopenssl3" arch="x86_64">
  <version epoch="0" ver="3.2.3" rel="150700.5.31.1"/>
  <changelog author="pmonreal@suse.com" date="1730116800">- Remove the hardcoded DEFAULT_SUSE cipherlist selection.
  * Remove openssl-DEFAULT_SUSE_cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116801">- Update to 3.2.3:
  * Changes between 3.2.2 and 3.2.3:
  - Fixed possible denial of service in X.509 name checks. [CVE-2024-6119]
  - Fixed possible buffer overread in SSL_select_next_proto(). [CVE-2024-5535]
  * Changes between 3.2.1 and 3.2.2:
  - Fixed potential use after free after SSL_free_buffers() is called. [CVE-2024-4741]
  - Fixed an issue where checking excessively long DSA keys or parameters may
    be very slow. [CVE-2024-4603]
  - Improved EC/DSA nonce generation routines to avoid bias and timing
    side channel leaks.
  - Fixed an issue where some non-default TLS server configurations can cause
    unbounded memory growth when processing TLSv1.3 sessions. [CVE-2024-2511]
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded. This can be used on platforms
    where using atexit() from shared libraries causes crashes on exit.
  - Fixed bug where SSL_export_keying_material() could not be used with QUIC
    connections.
  * Add openssl-skip-quic-pairwise.patch to adapt the pairwise tests.
  * Merge openssl-FIPS-release_num_in_version_string.patch into
    openssl-FIPS-services-minimize.patch
  * Rebase patches:
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Remove-EC-curves.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-3-use-include-directive.patch
  * Remove not needed patches:
  - openssl-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  - openssl-3-FIPS-PCT_rsa_keygen.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730462400">- Support MSA 12 SHA3 on s390x [jsc#PED-10280]
  * Add openssl-3-add_EVP_DigestSqueeze_api.patch
  * Add openssl-3-support-multiple-sha3_squeeze_s390x.patch
  * Add openssl-3-add-xof-state-handling-s3_absorb.patch
  * Add openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  * Add openssl-3-fix-state-handling-sha3_final_s390x.patch
  * Add openssl-3-fix-state-handling-shake_final_s390x.patch
  * Add openssl-3-fix-state-handling-keccak_final_s390x.patch
  * Add openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  * Add openssl-3-add-defines-CPACF-funcs.patch
  * Add openssl-3-add-hw-acceleration-hmac.patch
  * Add openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  * Add openssl-3-fix-s390x_sha3_absorb.patch
  * Add openssl-3-fix-s390x_shake_squeeze.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808000">- Support MSA 10 XTS on s390x [jsc#PED-10273]
  * s390x: Add hardware acceleration for full AES-XTS
  * Add openssl-3-hw-acceleration-aes-xts-s390x.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808001">- Support MSA 11 HMAC on s390x [jsc#PED-10274]
  * Add openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  * Add openssl-3-fix-hmac-digest-detection-s390x.patch
  * Add openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730980800">- Add missing fixes for SHA3_squeeze and quic_multistream_test on
  pcc64 arch. [jsc#PED-10280]
  * Added openssl-3-fix-sha3-squeeze-ppc64.patch
  * Added openssl-3-fix-quic_multistream_test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1731412800">- Do not use HASHBANGPERL to avoid introducing a dependency on the
  perl-base package. [bsc#1233235]</changelog>
  <changelog author="pmonreal@suse.com" date="1734436800">- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
  - openssl-3-use-include-directive.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1738238400">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Security fix: [bsc#1236599, CVE-2024-12797]
  * RFC7250 handshakes with unauthenticated servers don't abort as
    expected.
  * Add openssl-CVE-2024-12797.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1746014400">- Security fix: [bsc#1240366, CVE-2025-27587]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
  <changelog author="mls@suse.de" date="1751371200">- Backport mdless cms signing support [jsc#PED-12895]
  * Add openssl-3-support-mdless-cms.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- FIPS: Fix EMS in crypto-policies FIPS:NO-ENFORCE-EMS
  * [bsc#1230959, bsc#1232326, bsc#1231748, bsc#1246428]
  * Add patch openssl-FIPS-fix-EMS-support.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1753876800">- Increase limit for CRL download [bsc#1247148, bsc#1247144]
  * Add openssl-3-large-CRLs.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1759233600">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl3-CVE-2025-9230.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1768824000">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795]
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * Stack buffer overflow in CMS AuthEnvelopedData parsing
  - openssl-CVE-2025-15467.patch [bsc#1256830, CVE-2025-15467]
  - openssl-CVE-2025-15467-comments.patch
  - openssl-CVE-2025-15467-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1774526400">- Security fixes:
  * CVE-2026-28387: Potential use-after-free in DANE client code
    (bsc#1260441)
  * CVE-2026-28388: NULL Pointer Dereference When Processing a
    Delta (bsc#1260442)
  * CVE-2026-28389: Possible NULL dereference when processing CMS
    KeyAgreeRecipientInfo (bsc#1260443)
  * CVE-2026-31789: Heap buffer overflow in hexadecimal conversion
    (bsc#1260444)
  * CVE-2026-31790: Incorrect failure handling in RSA KEM RSASVE
    encapsulation (bsc#1260445)
  * NULL pointer dereference when processing an OCSP response
    (bsc#1260446)
  * Add patches: openssl-CVE-2026-28387.patch
    openssl-CVE-2026-28388.patch openssl-CVE-2026-28388-tests.patch
    openssl-CVE-2026-28389.patch openssl-CVE-2026-31789.patch
    openssl-CVE-2026-31790.patch openssl-CVE-2026-31790-tests.patch
    openssl-NULL-pointer-dereference-in-ocsp_find_signer_sk.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1775649600">- Security fix:
  * CVE-2026-28390: NULL pointer dereference during processing of a crafted
    CMS EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678)
  * Add openssl-CVE-2026-28390.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1775822400">- Enable MD2 in legacy provider (jsc#PED-15724)</changelog>
</package>
<package pkgid="a77133cee4a38429b2a425dd434c0c6ceee8b74fcd139d829c97a03c84c5f117" name="libopenssl3" arch="x86_64">
  <version epoch="0" ver="3.2.3" rel="150700.5.5.1"/>
  <changelog author="pmonreal@suse.com" date="1721649600">- Build with no-afalgeng [bsc#1226463]</changelog>
  <changelog author="abergmann@suse.com" date="1724328000">- Security fix: [bsc#1229465, CVE-2024-6119]
  * possible denial of service in X.509 name checks
  * openssl-CVE-2024-6119.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1727265600">- Security fix: [bsc#1230698, CVE-2024-41996]
  * Validating the order of the public keys in the Diffie-Hellman
    Key Agreement Protocol, when an approved safe prime is used.
  * Added openssl-3-CVE-2024-41996.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1220262, CVE-2023-50782]
  * Implicit rejection in PKCS#1 v1.5
  * Add openssl-CVE-2023-50782.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166401">- Security fix: [bsc#1231741, CVE-2024-9143]
  * Low-level invalid GF(2^m) parameters lead to OOB memory access
  * Add openssl-CVE-2024-9143.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729512000">- Update to 3.1.7:
  * Major changes between OpenSSL 3.1.6 and OpenSSL 3.1.7 [3 Sep 2024]
  - Fixed possible denial of service in X.509 name checks (CVE-2024-6119)
  - Fixed possible buffer overread in SSL_select_next_proto()
    (CVE-2024-5535)
  * Major changes between OpenSSL 3.1.5 and OpenSSL 3.1.6 [4 Jun 2024]
  - Fixed potential use after free after SSL_free_buffers() is
    called (CVE-2024-4741)
  - Fixed an issue where checking excessively long DSA keys or
    parameters may be very slow (CVE-2024-4603)
  - Fixed unbounded memory growth with session handling in TLSv1.3
    (CVE-2024-2511)
  * Major changes between OpenSSL 3.1.4 and OpenSSL 3.1.5 [30 Jan 2024]
  - Fixed PKCS12 Decoding crashes (CVE-2024-0727)
  - Fixed Excessive time spent checking invalid RSA public keys
    [CVE-2023-6237)
  - Fixed POLY1305 MAC implementation corrupting vector registers
    on PowerPC CPUs which support PowerISA 2.07 (CVE-2023-6129)
  - Fix excessive time spent in DH check / generation with large
    Q parameter value (CVE-2023-5678)
  * Update openssl.keyring with BA5473A2B0587B07FB27CF2D216094DFD0CB81EF
  * Rebase patches:
  - openssl-Force-FIPS.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-CVE-2023-50782.patch
  * Remove patches fixed in the update:
  - openssl-Improve-performance-for-6x-unrolling-with-vpermxor-i.patch
  - openssl-CVE-2024-6119.patch openssl-CVE-2024-5535.patch
  - openssl-CVE-2024-4741.patch openssl-CVE-2024-4603.patch
  - openssl-CVE-2024-2511.patch openssl-CVE-2024-0727.patch
  - openssl-CVE-2023-6237.patch openssl-CVE-2023-6129.patch
  - openssl-CVE-2023-5678.patch openssl-3-CVE-2024-41996.patch
  - openssl-Enable-BTI-feature-for-md5-on-aarch64.patch
  - openssl-Fix-EVP_PKEY_CTX_add1_hkdf_info-behavior.patch
  - openssl-Handle-empty-param-in-EVP_PKEY_CTX_add1_hkdf_info.patch
  - reproducible.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729857600">- Update to 3.2.0:
  * Changes between 3.1.x and 3.2.0:
  - Fix excessive time spent in DH check/ generation with large Q parameter
    value. [CVE-2023-5678]
  - The BLAKE2b hash algorithm supports a configurable output length
    by setting the "size" parameter.
  - Added a function to delete objects from store by URI - OSSL_STORE_delete()
    and the corresponding provider-storemgmt API function OSSL_FUNC_store_delete().
  - Added OSSL_FUNC_store_open_ex() provider-storemgmt API function to pass
    a passphrase callback when opening a store.
  - Changed the default salt length used by PBES2 KDF's (PBKDF2 and scrypt)
    from 8 bytes to 16 bytes.
  - Changed the default value of the 'ess_cert_id_alg' configuration
    option which is used to calculate the TSA's public key certificate
    identifier. The default algorithm is updated to be sha256 instead of sha1.
  - Added optimization for SM2 algorithm on aarch64. A new configure option
    'no-sm2-precomp' has been added to disable the precomputed table.
  - Added client side support for QUIC
  - Added secp384r1 implementation using Solinas' reduction to improve
    speed of the NIST P-384 elliptic curve. To enable the implementation
    the build option 'enable-ec_nistp_64_gcc_128' must be used.
  - Improved RFC7468 compliance of the asn1parse command.
  - Added SHA256/192 algorithm support.
  - Added support for securely getting root CA certificate update in CMP.
  - Improved contention on global write locks by using more read locks where
    appropriate.
  - Improved performance of OSSL_PARAM lookups in performance critical
    provider functions.
  - Added the SSL_get0_group_name() function to provide access to the
    name of the group used for the TLS key exchange.
  - Provide a new configure option 'no-http' that can be used to disable the
    HTTP support. Provide new configure options 'no-apps' and 'no-docs' to
    disable building the openssl command line application and the documentation.
  - Provide a new configure option 'no-ecx' that can be used to disable the
    X25519, X448, and EdDSA support.
  - When multiple OSSL_KDF_PARAM_INFO parameters are passed to
    the EVP_KDF_CTX_set_params() function they are now concatenated not just
    for the HKDF algorithm but also for SSKDF and X9.63 KDF algorithms.
  - Added OSSL_FUNC_keymgmt_im/export_types_ex() provider functions that get
    the provider context as a parameter.
  - TLS round-trip time calculation was added by a Brigham Young University
    Capstone team partnering with Sandia National Laboratories. A new function
    in ssl_lib titled SSL_get_handshake_rtt will calculate and retrieve this
    value.
  - Added the "-quic" option to s_client to enable connectivity to QUIC servers.
    QUIC requires the use of ALPN, so this must be specified via the "-alpn"
    option. Use of the "advanced" s_client command command via the "-adv" option
    is recommended.
  - Added an "advanced" command mode to s_client. Use this with the "-adv" option.
  - Add Raw Public Key (RFC7250) support.
  - Added support for modular exponentiation and CRT offloading for the
    S390x architecture.
  - Added further assembler code for the RISC-V architecture.
  - Added EC_GROUP_to_params() which creates an OSSL_PARAM array
    from a given EC_GROUP.
  - Improved support for non-default library contexts and property queries
    when parsing PKCS#12 files.
  - Implemented support for all five instances of EdDSA from RFC8032:
    Ed25519, Ed25519ctx, Ed25519ph, Ed448, and Ed448ph.
    The streaming is not yet supported for the HashEdDSA variants
    (Ed25519ph and Ed448ph).
  - Added SM4 optimization for ARM processors using ASIMD and AES HW instructions.
  - Implemented SM4-XTS support.
  - Added platform-agnostic OSSL_sleep() function.
  - Implemented deterministic ECDSA signatures (RFC6979) support.
  - Implemented AES-GCM-SIV (RFC8452) support.
  - Added support for pluggable (provider-based) TLS signature algorithms.
    This enables TLS 1.3 authentication operations with algorithms embedded
    in providers not included by default in OpenSSL. In combination with
    the already available pluggable KEM and X.509 support, this enables
    for example suitable providers to deliver post-quantum or quantum-safe
    cryptography to OpenSSL users.
  - Added support for pluggable (provider-based) CMS signature algorithms.
    This enables CMS sign and verify operations with algorithms embedded
    in providers not included by default in OpenSSL.
  - Implemented HPKE DHKEM support in providers used by HPKE (RFC9180) API.
  - Add support for certificate compression (RFC8879), including
    library support for Brotli and Zstandard compression.
  - Add the ability to add custom attributes to PKCS12 files. Add a new API
    PKCS12_create_ex2, identical to the existing PKCS12_create_ex but allows
    for a user specified callback and optional argument.
    Added a new PKCS12_SAFEBAG_set0_attr, which allows for a new attr to be
    added to the existing STACK_OF attrs.
  - Major refactor of the libssl record layer.
  - Add a mac salt length option for the pkcs12 command.
  - Add more SRTP protection profiles from RFC8723 and RFC8269.
  - Extended Kernel TLS (KTLS) to support TLS 1.3 receive offload.
  - Add support for TCP Fast Open (RFC7413) to macOS, Linux, and FreeBSD where
    supported and enabled.
  - Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489)
    to the list of ciphersuites providing Perfect Forward Secrecy as
    required by SECLEVEL &gt;= 3.
  - Add new SSL APIs to aid in efficiently implementing TLS/SSL fingerprinting.
    The SSL_CTRL_GET_IANA_GROUPS control code, exposed as the
    SSL_get0_iana_groups() function-like macro, retrieves the list of
    supported groups sent by the peer.
  - Fixed PEM_write_bio_PKCS8PrivateKey() and PEM_write_bio_PKCS8PrivateKey_nid()
    to make it possible to use empty passphrase strings.
  - The PKCS12_parse() function now supports MAC-less PKCS12 files.
  - Added ASYNC_set_mem_functions() and ASYNC_get_mem_functions() calls to be able
    to change functions used for allocating the memory of asynchronous call stack.
  - Added support for signed BIGNUMs in the OSSL_PARAM APIs.
  - A failure exit code is returned when using the openssl x509 command to check
    certificate attributes and the checks fail.
  - The default SSL/TLS security level has been changed from 1 to 2. RSA,
    DSA and DH keys of 1024 bits and above and less than 2048 bits and ECC keys
    of 160 bits and above and less than 224 bits were previously accepted by
    default but are now no longer allowed. By default TLS compression was
    already disabled in previous OpenSSL versions. At security level 2 it cannot
    be enabled.
  - The SSL_CTX_set_cipher_list family functions now accept ciphers using their
    IANA standard names.
  - The PVK key derivation function has been moved from b2i_PVK_bio_ex() into
    the legacy crypto provider as an EVP_KDF. Applications requiring this KDF
    will need to load the legacy crypto provider.
  - CCM8 cipher suites in TLS have been downgraded to security level zero
    because they use a short authentication tag which lowers their strength.
  - Subject or issuer names in X.509 objects are now displayed as UTF-8 strings
    by default. Also spaces surrounding '=' in DN output are removed.
  - Add X.509 certificate codeSigning purpose and related checks on key usage and
    extended key usage of the leaf certificate according to the CA/Browser Forum.
  - The 'x509', 'ca', and 'req' apps now produce X.509 v3 certificates.
    The '-x509v1' option of 'req' prefers generation of X.509 v1 certificates.
    'X509_sign()' and 'X509_sign_ctx()' make sure that the certificate has
    X.509 version 3 if the certificate information includes X.509 extensions.
  - Fix and extend certificate handling and the apps 'x509', 'verify' etc.
    such as adding a trace facility for debugging certificate chain building.
  - Various fixes and extensions to the CMP+CRMF implementation and the 'cmp' app
    in particular supporting requests for central key generation, generalized
    polling, and various types of genm/genp exchanges defined in CMP Updates.
  - Fixes and extensions to the HTTP client and to the HTTP server in 'apps/'
    like correcting the TLS and proxy support and adding tracing for debugging.
  - Extended the CMS API for handling 'CMS_SignedData' and 'CMS_EnvelopedData'.
  - 'CMS_add0_cert()' and 'CMS_add1_cert()' no longer throw an error if
    a certificate to be added is already present. 'CMS_sign_ex()' and
    'CMS_sign()' now ignore any duplicate certificates in their 'certs' argument
    and no longer throw an error for them.
  - Added BIO_s_dgram_pair() and BIO_s_dgram_mem() that provide memory-based
    BIOs with datagram semantics and support for BIO_sendmmsg() and BIO_recvmmsg()
    calls. They can be used as the transport BIOs for QUIC.
  - Add new BIO_sendmmsg() and BIO_recvmmsg() BIO methods which allow
    sending and receiving multiple messages in a single call. An implementation
    is provided for BIO_dgram. For further details, see BIO_sendmmsg(3).
  - Support for loading root certificates from the Windows certificate store
    has been added.
  - Enable KTLS with the TLS 1.3 CCM mode ciphersuites. Note that some linux
    kernel versions that support KTLS have a known bug in CCM processing. That
    has been fixed in stable releases starting from 5.4.164, 5.10.84, 5.15.7,
    and all releases since 5.16. KTLS with CCM ciphersuites should be only used
    on these releases.
  - Added '-ktls' option to 's_server' and 's_client' commands to enable the
    KTLS support.
  - Zerocopy KTLS sendfile() support on Linux.
  - The OBJ_ calls are now thread safe using a global lock.
  - New parameter '-digest' for openssl cms command allowing signing
    pre-computed digests and new CMS API functions supporting that
    functionality.
  - OPENSSL_malloc() and other allocation functions now raise errors on
    allocation failures. The callers do not need to explicitly raise errors
    unless they want to for tracing purposes.
  - Added support for Brainpool curves in TLS-1.3.
  - Support for Argon2d, Argon2i, Argon2id KDFs has been added along with
    a basic thread pool implementation for select platforms.</changelog>
  <changelog author="pmonreal@suse.com" date="1729857601">- Update to 3.2.1:
  * Changes between 3.2.0 and 3.2.1:
  - A file in PKCS12 format can contain certificates and keys and may come from
    an untrusted source. The PKCS12 specification allows certain fields to be
    NULL, but OpenSSL did not correctly check for this case. [CVE-2024-0727]
  - When function EVP_PKEY_public_check() is called on RSA public keys,
    a computation is done to confirm that the RSA modulus, n, is composite.
    For valid RSA keys, n is a product of two or more large primes and this
    computation completes quickly. However, if n is an overly large prime,
    then this computation would take a long time. [CVE-2023-6237]
  - Restore the encoding of SM2 PrivateKeyInfo and SubjectPublicKeyInfo to
    have the contained AlgorithmIdentifier.algorithm set to id-ecPublicKey
    rather than SM2.
  - The POLY1305 MAC (message authentication code) implementation in OpenSSL
    for PowerPC CPUs saves the contents of vector registers in different
    order than they are restored. [CVE-2023-6129]
  - Disable building QUIC server utility when OpenSSL is configured with 'no-apps'.
  * The openssl-crypto-policies-support.patch has been merged into
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Rename openssl-Disable-default-provider-for-test-suite.patch and rebase to
    openssl-TESTS-Disable-default-provider-crypto-policies.patch
  * Patches removed in the update:
  - openssl-Add_support_for_Windows_CA_certificate_store.patch
  - openssl-ec-56-bit-Limb-Solinas-Strategy-for-secp384r1.patch
  - openssl-ec-Use-static-linkage-on-nistp521-felem_-square-mul-.patch
  - openssl-ec-powerpc64le-Add-asm-implementation-of-felem_-squa.patch
  - openssl-ecc-Remove-extraneous-parentheses-in-secp384r1.patch
  - openssl-powerpc-ecc-Fix-stack-allocation-secp384r1-asm.patch
  - openssl-CVE-2024-41996.patch
  - openssl-CVE-2023-50782.patch
  - openssl-CVE-2024-9143.patch
  * Patches rebased:
  - openssl-3-use-include-directive.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-DEFAULT_SUSE_cipher.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Force-FIPS.patch
  - openssl-load-legacy-provider.patch
  - openssl-no-html-docs.patch
  - openssl-pkgconfig.patch
  - openssl-ppc64-config.patch
  - openssl-truststore.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116800">- Remove the hardcoded DEFAULT_SUSE cipherlist selection.
  * Remove openssl-DEFAULT_SUSE_cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116801">- Update to 3.2.3:
  * Changes between 3.2.2 and 3.2.3:
  - Fixed possible denial of service in X.509 name checks. [CVE-2024-6119]
  - Fixed possible buffer overread in SSL_select_next_proto(). [CVE-2024-5535]
  * Changes between 3.2.1 and 3.2.2:
  - Fixed potential use after free after SSL_free_buffers() is called. [CVE-2024-4741]
  - Fixed an issue where checking excessively long DSA keys or parameters may
    be very slow. [CVE-2024-4603]
  - Improved EC/DSA nonce generation routines to avoid bias and timing
    side channel leaks.
  - Fixed an issue where some non-default TLS server configurations can cause
    unbounded memory growth when processing TLSv1.3 sessions. [CVE-2024-2511]
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded. This can be used on platforms
    where using atexit() from shared libraries causes crashes on exit.
  - Fixed bug where SSL_export_keying_material() could not be used with QUIC
    connections.
  * Add openssl-skip-quic-pairwise.patch to adapt the pairwise tests.
  * Merge openssl-FIPS-release_num_in_version_string.patch into
    openssl-FIPS-services-minimize.patch
  * Rebase patches:
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Remove-EC-curves.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-3-use-include-directive.patch
  * Remove not needed patches:
  - openssl-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  - openssl-3-FIPS-PCT_rsa_keygen.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730462400">- Support MSA 12 SHA3 on s390x [jsc#PED-10280]
  * Add openssl-3-add_EVP_DigestSqueeze_api.patch
  * Add openssl-3-support-multiple-sha3_squeeze_s390x.patch
  * Add openssl-3-add-xof-state-handling-s3_absorb.patch
  * Add openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  * Add openssl-3-fix-state-handling-sha3_final_s390x.patch
  * Add openssl-3-fix-state-handling-shake_final_s390x.patch
  * Add openssl-3-fix-state-handling-keccak_final_s390x.patch
  * Add openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  * Add openssl-3-add-defines-CPACF-funcs.patch
  * Add openssl-3-add-hw-acceleration-hmac.patch
  * Add openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  * Add openssl-3-fix-s390x_sha3_absorb.patch
  * Add openssl-3-fix-s390x_shake_squeeze.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808000">- Support MSA 10 XTS on s390x [jsc#PED-10273]
  * s390x: Add hardware acceleration for full AES-XTS
  * Add openssl-3-hw-acceleration-aes-xts-s390x.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808001">- Support MSA 11 HMAC on s390x [jsc#PED-10274]
  * Add openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  * Add openssl-3-fix-hmac-digest-detection-s390x.patch
  * Add openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730980800">- Add missing fixes for SHA3_squeeze and quic_multistream_test on
  pcc64 arch. [jsc#PED-10280]
  * Added openssl-3-fix-sha3-squeeze-ppc64.patch
  * Added openssl-3-fix-quic_multistream_test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1731412800">- Do not use HASHBANGPERL to avoid introducing a dependency on the
  perl-base package. [bsc#1233235]</changelog>
  <changelog author="pmonreal@suse.com" date="1734436800">- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
  - openssl-3-use-include-directive.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1738238400">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Security fix: [bsc#1236599, CVE-2024-12797]
  * RFC7250 handshakes with unauthenticated servers don't abort as
    expected.
  * Add openssl-CVE-2024-12797.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1746014400">- Security fix: [bsc#1240366]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
</package>
<package pkgid="93926f8f7e70b56f78f0f65cfe5e483ea34c6688999e5f4f825868ad4eb6c80e" name="libopenssl3-32bit" arch="x86_64">
  <version epoch="0" ver="3.2.3" rel="150700.5.10.1"/>
  <changelog author="abergmann@suse.com" date="1724328000">- Security fix: [bsc#1229465, CVE-2024-6119]
  * possible denial of service in X.509 name checks
  * openssl-CVE-2024-6119.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1727265600">- Security fix: [bsc#1230698, CVE-2024-41996]
  * Validating the order of the public keys in the Diffie-Hellman
    Key Agreement Protocol, when an approved safe prime is used.
  * Added openssl-3-CVE-2024-41996.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1220262, CVE-2023-50782]
  * Implicit rejection in PKCS#1 v1.5
  * Add openssl-CVE-2023-50782.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166401">- Security fix: [bsc#1231741, CVE-2024-9143]
  * Low-level invalid GF(2^m) parameters lead to OOB memory access
  * Add openssl-CVE-2024-9143.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729512000">- Update to 3.1.7:
  * Major changes between OpenSSL 3.1.6 and OpenSSL 3.1.7 [3 Sep 2024]
  - Fixed possible denial of service in X.509 name checks (CVE-2024-6119)
  - Fixed possible buffer overread in SSL_select_next_proto()
    (CVE-2024-5535)
  * Major changes between OpenSSL 3.1.5 and OpenSSL 3.1.6 [4 Jun 2024]
  - Fixed potential use after free after SSL_free_buffers() is
    called (CVE-2024-4741)
  - Fixed an issue where checking excessively long DSA keys or
    parameters may be very slow (CVE-2024-4603)
  - Fixed unbounded memory growth with session handling in TLSv1.3
    (CVE-2024-2511)
  * Major changes between OpenSSL 3.1.4 and OpenSSL 3.1.5 [30 Jan 2024]
  - Fixed PKCS12 Decoding crashes (CVE-2024-0727)
  - Fixed Excessive time spent checking invalid RSA public keys
    [CVE-2023-6237)
  - Fixed POLY1305 MAC implementation corrupting vector registers
    on PowerPC CPUs which support PowerISA 2.07 (CVE-2023-6129)
  - Fix excessive time spent in DH check / generation with large
    Q parameter value (CVE-2023-5678)
  * Update openssl.keyring with BA5473A2B0587B07FB27CF2D216094DFD0CB81EF
  * Rebase patches:
  - openssl-Force-FIPS.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-CVE-2023-50782.patch
  * Remove patches fixed in the update:
  - openssl-Improve-performance-for-6x-unrolling-with-vpermxor-i.patch
  - openssl-CVE-2024-6119.patch openssl-CVE-2024-5535.patch
  - openssl-CVE-2024-4741.patch openssl-CVE-2024-4603.patch
  - openssl-CVE-2024-2511.patch openssl-CVE-2024-0727.patch
  - openssl-CVE-2023-6237.patch openssl-CVE-2023-6129.patch
  - openssl-CVE-2023-5678.patch openssl-3-CVE-2024-41996.patch
  - openssl-Enable-BTI-feature-for-md5-on-aarch64.patch
  - openssl-Fix-EVP_PKEY_CTX_add1_hkdf_info-behavior.patch
  - openssl-Handle-empty-param-in-EVP_PKEY_CTX_add1_hkdf_info.patch
  - reproducible.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729857600">- Update to 3.2.0:
  * Changes between 3.1.x and 3.2.0:
  - Fix excessive time spent in DH check/ generation with large Q parameter
    value. [CVE-2023-5678]
  - The BLAKE2b hash algorithm supports a configurable output length
    by setting the "size" parameter.
  - Added a function to delete objects from store by URI - OSSL_STORE_delete()
    and the corresponding provider-storemgmt API function OSSL_FUNC_store_delete().
  - Added OSSL_FUNC_store_open_ex() provider-storemgmt API function to pass
    a passphrase callback when opening a store.
  - Changed the default salt length used by PBES2 KDF's (PBKDF2 and scrypt)
    from 8 bytes to 16 bytes.
  - Changed the default value of the 'ess_cert_id_alg' configuration
    option which is used to calculate the TSA's public key certificate
    identifier. The default algorithm is updated to be sha256 instead of sha1.
  - Added optimization for SM2 algorithm on aarch64. A new configure option
    'no-sm2-precomp' has been added to disable the precomputed table.
  - Added client side support for QUIC
  - Added secp384r1 implementation using Solinas' reduction to improve
    speed of the NIST P-384 elliptic curve. To enable the implementation
    the build option 'enable-ec_nistp_64_gcc_128' must be used.
  - Improved RFC7468 compliance of the asn1parse command.
  - Added SHA256/192 algorithm support.
  - Added support for securely getting root CA certificate update in CMP.
  - Improved contention on global write locks by using more read locks where
    appropriate.
  - Improved performance of OSSL_PARAM lookups in performance critical
    provider functions.
  - Added the SSL_get0_group_name() function to provide access to the
    name of the group used for the TLS key exchange.
  - Provide a new configure option 'no-http' that can be used to disable the
    HTTP support. Provide new configure options 'no-apps' and 'no-docs' to
    disable building the openssl command line application and the documentation.
  - Provide a new configure option 'no-ecx' that can be used to disable the
    X25519, X448, and EdDSA support.
  - When multiple OSSL_KDF_PARAM_INFO parameters are passed to
    the EVP_KDF_CTX_set_params() function they are now concatenated not just
    for the HKDF algorithm but also for SSKDF and X9.63 KDF algorithms.
  - Added OSSL_FUNC_keymgmt_im/export_types_ex() provider functions that get
    the provider context as a parameter.
  - TLS round-trip time calculation was added by a Brigham Young University
    Capstone team partnering with Sandia National Laboratories. A new function
    in ssl_lib titled SSL_get_handshake_rtt will calculate and retrieve this
    value.
  - Added the "-quic" option to s_client to enable connectivity to QUIC servers.
    QUIC requires the use of ALPN, so this must be specified via the "-alpn"
    option. Use of the "advanced" s_client command command via the "-adv" option
    is recommended.
  - Added an "advanced" command mode to s_client. Use this with the "-adv" option.
  - Add Raw Public Key (RFC7250) support.
  - Added support for modular exponentiation and CRT offloading for the
    S390x architecture.
  - Added further assembler code for the RISC-V architecture.
  - Added EC_GROUP_to_params() which creates an OSSL_PARAM array
    from a given EC_GROUP.
  - Improved support for non-default library contexts and property queries
    when parsing PKCS#12 files.
  - Implemented support for all five instances of EdDSA from RFC8032:
    Ed25519, Ed25519ctx, Ed25519ph, Ed448, and Ed448ph.
    The streaming is not yet supported for the HashEdDSA variants
    (Ed25519ph and Ed448ph).
  - Added SM4 optimization for ARM processors using ASIMD and AES HW instructions.
  - Implemented SM4-XTS support.
  - Added platform-agnostic OSSL_sleep() function.
  - Implemented deterministic ECDSA signatures (RFC6979) support.
  - Implemented AES-GCM-SIV (RFC8452) support.
  - Added support for pluggable (provider-based) TLS signature algorithms.
    This enables TLS 1.3 authentication operations with algorithms embedded
    in providers not included by default in OpenSSL. In combination with
    the already available pluggable KEM and X.509 support, this enables
    for example suitable providers to deliver post-quantum or quantum-safe
    cryptography to OpenSSL users.
  - Added support for pluggable (provider-based) CMS signature algorithms.
    This enables CMS sign and verify operations with algorithms embedded
    in providers not included by default in OpenSSL.
  - Implemented HPKE DHKEM support in providers used by HPKE (RFC9180) API.
  - Add support for certificate compression (RFC8879), including
    library support for Brotli and Zstandard compression.
  - Add the ability to add custom attributes to PKCS12 files. Add a new API
    PKCS12_create_ex2, identical to the existing PKCS12_create_ex but allows
    for a user specified callback and optional argument.
    Added a new PKCS12_SAFEBAG_set0_attr, which allows for a new attr to be
    added to the existing STACK_OF attrs.
  - Major refactor of the libssl record layer.
  - Add a mac salt length option for the pkcs12 command.
  - Add more SRTP protection profiles from RFC8723 and RFC8269.
  - Extended Kernel TLS (KTLS) to support TLS 1.3 receive offload.
  - Add support for TCP Fast Open (RFC7413) to macOS, Linux, and FreeBSD where
    supported and enabled.
  - Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489)
    to the list of ciphersuites providing Perfect Forward Secrecy as
    required by SECLEVEL &gt;= 3.
  - Add new SSL APIs to aid in efficiently implementing TLS/SSL fingerprinting.
    The SSL_CTRL_GET_IANA_GROUPS control code, exposed as the
    SSL_get0_iana_groups() function-like macro, retrieves the list of
    supported groups sent by the peer.
  - Fixed PEM_write_bio_PKCS8PrivateKey() and PEM_write_bio_PKCS8PrivateKey_nid()
    to make it possible to use empty passphrase strings.
  - The PKCS12_parse() function now supports MAC-less PKCS12 files.
  - Added ASYNC_set_mem_functions() and ASYNC_get_mem_functions() calls to be able
    to change functions used for allocating the memory of asynchronous call stack.
  - Added support for signed BIGNUMs in the OSSL_PARAM APIs.
  - A failure exit code is returned when using the openssl x509 command to check
    certificate attributes and the checks fail.
  - The default SSL/TLS security level has been changed from 1 to 2. RSA,
    DSA and DH keys of 1024 bits and above and less than 2048 bits and ECC keys
    of 160 bits and above and less than 224 bits were previously accepted by
    default but are now no longer allowed. By default TLS compression was
    already disabled in previous OpenSSL versions. At security level 2 it cannot
    be enabled.
  - The SSL_CTX_set_cipher_list family functions now accept ciphers using their
    IANA standard names.
  - The PVK key derivation function has been moved from b2i_PVK_bio_ex() into
    the legacy crypto provider as an EVP_KDF. Applications requiring this KDF
    will need to load the legacy crypto provider.
  - CCM8 cipher suites in TLS have been downgraded to security level zero
    because they use a short authentication tag which lowers their strength.
  - Subject or issuer names in X.509 objects are now displayed as UTF-8 strings
    by default. Also spaces surrounding '=' in DN output are removed.
  - Add X.509 certificate codeSigning purpose and related checks on key usage and
    extended key usage of the leaf certificate according to the CA/Browser Forum.
  - The 'x509', 'ca', and 'req' apps now produce X.509 v3 certificates.
    The '-x509v1' option of 'req' prefers generation of X.509 v1 certificates.
    'X509_sign()' and 'X509_sign_ctx()' make sure that the certificate has
    X.509 version 3 if the certificate information includes X.509 extensions.
  - Fix and extend certificate handling and the apps 'x509', 'verify' etc.
    such as adding a trace facility for debugging certificate chain building.
  - Various fixes and extensions to the CMP+CRMF implementation and the 'cmp' app
    in particular supporting requests for central key generation, generalized
    polling, and various types of genm/genp exchanges defined in CMP Updates.
  - Fixes and extensions to the HTTP client and to the HTTP server in 'apps/'
    like correcting the TLS and proxy support and adding tracing for debugging.
  - Extended the CMS API for handling 'CMS_SignedData' and 'CMS_EnvelopedData'.
  - 'CMS_add0_cert()' and 'CMS_add1_cert()' no longer throw an error if
    a certificate to be added is already present. 'CMS_sign_ex()' and
    'CMS_sign()' now ignore any duplicate certificates in their 'certs' argument
    and no longer throw an error for them.
  - Added BIO_s_dgram_pair() and BIO_s_dgram_mem() that provide memory-based
    BIOs with datagram semantics and support for BIO_sendmmsg() and BIO_recvmmsg()
    calls. They can be used as the transport BIOs for QUIC.
  - Add new BIO_sendmmsg() and BIO_recvmmsg() BIO methods which allow
    sending and receiving multiple messages in a single call. An implementation
    is provided for BIO_dgram. For further details, see BIO_sendmmsg(3).
  - Support for loading root certificates from the Windows certificate store
    has been added.
  - Enable KTLS with the TLS 1.3 CCM mode ciphersuites. Note that some linux
    kernel versions that support KTLS have a known bug in CCM processing. That
    has been fixed in stable releases starting from 5.4.164, 5.10.84, 5.15.7,
    and all releases since 5.16. KTLS with CCM ciphersuites should be only used
    on these releases.
  - Added '-ktls' option to 's_server' and 's_client' commands to enable the
    KTLS support.
  - Zerocopy KTLS sendfile() support on Linux.
  - The OBJ_ calls are now thread safe using a global lock.
  - New parameter '-digest' for openssl cms command allowing signing
    pre-computed digests and new CMS API functions supporting that
    functionality.
  - OPENSSL_malloc() and other allocation functions now raise errors on
    allocation failures. The callers do not need to explicitly raise errors
    unless they want to for tracing purposes.
  - Added support for Brainpool curves in TLS-1.3.
  - Support for Argon2d, Argon2i, Argon2id KDFs has been added along with
    a basic thread pool implementation for select platforms.</changelog>
  <changelog author="pmonreal@suse.com" date="1729857601">- Update to 3.2.1:
  * Changes between 3.2.0 and 3.2.1:
  - A file in PKCS12 format can contain certificates and keys and may come from
    an untrusted source. The PKCS12 specification allows certain fields to be
    NULL, but OpenSSL did not correctly check for this case. [CVE-2024-0727]
  - When function EVP_PKEY_public_check() is called on RSA public keys,
    a computation is done to confirm that the RSA modulus, n, is composite.
    For valid RSA keys, n is a product of two or more large primes and this
    computation completes quickly. However, if n is an overly large prime,
    then this computation would take a long time. [CVE-2023-6237]
  - Restore the encoding of SM2 PrivateKeyInfo and SubjectPublicKeyInfo to
    have the contained AlgorithmIdentifier.algorithm set to id-ecPublicKey
    rather than SM2.
  - The POLY1305 MAC (message authentication code) implementation in OpenSSL
    for PowerPC CPUs saves the contents of vector registers in different
    order than they are restored. [CVE-2023-6129]
  - Disable building QUIC server utility when OpenSSL is configured with 'no-apps'.
  * The openssl-crypto-policies-support.patch has been merged into
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Rename openssl-Disable-default-provider-for-test-suite.patch and rebase to
    openssl-TESTS-Disable-default-provider-crypto-policies.patch
  * Patches removed in the update:
  - openssl-Add_support_for_Windows_CA_certificate_store.patch
  - openssl-ec-56-bit-Limb-Solinas-Strategy-for-secp384r1.patch
  - openssl-ec-Use-static-linkage-on-nistp521-felem_-square-mul-.patch
  - openssl-ec-powerpc64le-Add-asm-implementation-of-felem_-squa.patch
  - openssl-ecc-Remove-extraneous-parentheses-in-secp384r1.patch
  - openssl-powerpc-ecc-Fix-stack-allocation-secp384r1-asm.patch
  - openssl-CVE-2024-41996.patch
  - openssl-CVE-2023-50782.patch
  - openssl-CVE-2024-9143.patch
  * Patches rebased:
  - openssl-3-use-include-directive.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-DEFAULT_SUSE_cipher.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Force-FIPS.patch
  - openssl-load-legacy-provider.patch
  - openssl-no-html-docs.patch
  - openssl-pkgconfig.patch
  - openssl-ppc64-config.patch
  - openssl-truststore.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116800">- Remove the hardcoded DEFAULT_SUSE cipherlist selection.
  * Remove openssl-DEFAULT_SUSE_cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116801">- Update to 3.2.3:
  * Changes between 3.2.2 and 3.2.3:
  - Fixed possible denial of service in X.509 name checks. [CVE-2024-6119]
  - Fixed possible buffer overread in SSL_select_next_proto(). [CVE-2024-5535]
  * Changes between 3.2.1 and 3.2.2:
  - Fixed potential use after free after SSL_free_buffers() is called. [CVE-2024-4741]
  - Fixed an issue where checking excessively long DSA keys or parameters may
    be very slow. [CVE-2024-4603]
  - Improved EC/DSA nonce generation routines to avoid bias and timing
    side channel leaks.
  - Fixed an issue where some non-default TLS server configurations can cause
    unbounded memory growth when processing TLSv1.3 sessions. [CVE-2024-2511]
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded. This can be used on platforms
    where using atexit() from shared libraries causes crashes on exit.
  - Fixed bug where SSL_export_keying_material() could not be used with QUIC
    connections.
  * Add openssl-skip-quic-pairwise.patch to adapt the pairwise tests.
  * Merge openssl-FIPS-release_num_in_version_string.patch into
    openssl-FIPS-services-minimize.patch
  * Rebase patches:
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Remove-EC-curves.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-3-use-include-directive.patch
  * Remove not needed patches:
  - openssl-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  - openssl-3-FIPS-PCT_rsa_keygen.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730462400">- Support MSA 12 SHA3 on s390x [jsc#PED-10280]
  * Add openssl-3-add_EVP_DigestSqueeze_api.patch
  * Add openssl-3-support-multiple-sha3_squeeze_s390x.patch
  * Add openssl-3-add-xof-state-handling-s3_absorb.patch
  * Add openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  * Add openssl-3-fix-state-handling-sha3_final_s390x.patch
  * Add openssl-3-fix-state-handling-shake_final_s390x.patch
  * Add openssl-3-fix-state-handling-keccak_final_s390x.patch
  * Add openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  * Add openssl-3-add-defines-CPACF-funcs.patch
  * Add openssl-3-add-hw-acceleration-hmac.patch
  * Add openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  * Add openssl-3-fix-s390x_sha3_absorb.patch
  * Add openssl-3-fix-s390x_shake_squeeze.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808000">- Support MSA 10 XTS on s390x [jsc#PED-10273]
  * s390x: Add hardware acceleration for full AES-XTS
  * Add openssl-3-hw-acceleration-aes-xts-s390x.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808001">- Support MSA 11 HMAC on s390x [jsc#PED-10274]
  * Add openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  * Add openssl-3-fix-hmac-digest-detection-s390x.patch
  * Add openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730980800">- Add missing fixes for SHA3_squeeze and quic_multistream_test on
  pcc64 arch. [jsc#PED-10280]
  * Added openssl-3-fix-sha3-squeeze-ppc64.patch
  * Added openssl-3-fix-quic_multistream_test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1731412800">- Do not use HASHBANGPERL to avoid introducing a dependency on the
  perl-base package. [bsc#1233235]</changelog>
  <changelog author="pmonreal@suse.com" date="1734436800">- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
  - openssl-3-use-include-directive.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1738238400">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Security fix: [bsc#1236599, CVE-2024-12797]
  * RFC7250 handshakes with unauthenticated servers don't abort as
    expected.
  * Add openssl-CVE-2024-12797.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1746014400">- Security fix: [bsc#1240366, CVE-2025-27587]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
  <changelog author="mls@suse.de" date="1751371200">- Backport mdless cms signing support [jsc#PED-12895]
  * Add openssl-3-support-mdless-cms.patch</changelog>
</package>
<package pkgid="a846fc7637a2cdf605c74dd4eb65eaba2f4523ca8cbf12c9b2cd1be2d24dc9f3" name="libopenssl3-32bit" arch="x86_64">
  <version epoch="0" ver="3.2.3" rel="150700.5.15.1"/>
  <changelog author="angel.yankov@suse.com" date="1727265600">- Security fix: [bsc#1230698, CVE-2024-41996]
  * Validating the order of the public keys in the Diffie-Hellman
    Key Agreement Protocol, when an approved safe prime is used.
  * Added openssl-3-CVE-2024-41996.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1220262, CVE-2023-50782]
  * Implicit rejection in PKCS#1 v1.5
  * Add openssl-CVE-2023-50782.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166401">- Security fix: [bsc#1231741, CVE-2024-9143]
  * Low-level invalid GF(2^m) parameters lead to OOB memory access
  * Add openssl-CVE-2024-9143.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729512000">- Update to 3.1.7:
  * Major changes between OpenSSL 3.1.6 and OpenSSL 3.1.7 [3 Sep 2024]
  - Fixed possible denial of service in X.509 name checks (CVE-2024-6119)
  - Fixed possible buffer overread in SSL_select_next_proto()
    (CVE-2024-5535)
  * Major changes between OpenSSL 3.1.5 and OpenSSL 3.1.6 [4 Jun 2024]
  - Fixed potential use after free after SSL_free_buffers() is
    called (CVE-2024-4741)
  - Fixed an issue where checking excessively long DSA keys or
    parameters may be very slow (CVE-2024-4603)
  - Fixed unbounded memory growth with session handling in TLSv1.3
    (CVE-2024-2511)
  * Major changes between OpenSSL 3.1.4 and OpenSSL 3.1.5 [30 Jan 2024]
  - Fixed PKCS12 Decoding crashes (CVE-2024-0727)
  - Fixed Excessive time spent checking invalid RSA public keys
    [CVE-2023-6237)
  - Fixed POLY1305 MAC implementation corrupting vector registers
    on PowerPC CPUs which support PowerISA 2.07 (CVE-2023-6129)
  - Fix excessive time spent in DH check / generation with large
    Q parameter value (CVE-2023-5678)
  * Update openssl.keyring with BA5473A2B0587B07FB27CF2D216094DFD0CB81EF
  * Rebase patches:
  - openssl-Force-FIPS.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-CVE-2023-50782.patch
  * Remove patches fixed in the update:
  - openssl-Improve-performance-for-6x-unrolling-with-vpermxor-i.patch
  - openssl-CVE-2024-6119.patch openssl-CVE-2024-5535.patch
  - openssl-CVE-2024-4741.patch openssl-CVE-2024-4603.patch
  - openssl-CVE-2024-2511.patch openssl-CVE-2024-0727.patch
  - openssl-CVE-2023-6237.patch openssl-CVE-2023-6129.patch
  - openssl-CVE-2023-5678.patch openssl-3-CVE-2024-41996.patch
  - openssl-Enable-BTI-feature-for-md5-on-aarch64.patch
  - openssl-Fix-EVP_PKEY_CTX_add1_hkdf_info-behavior.patch
  - openssl-Handle-empty-param-in-EVP_PKEY_CTX_add1_hkdf_info.patch
  - reproducible.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729857600">- Update to 3.2.0:
  * Changes between 3.1.x and 3.2.0:
  - Fix excessive time spent in DH check/ generation with large Q parameter
    value. [CVE-2023-5678]
  - The BLAKE2b hash algorithm supports a configurable output length
    by setting the "size" parameter.
  - Added a function to delete objects from store by URI - OSSL_STORE_delete()
    and the corresponding provider-storemgmt API function OSSL_FUNC_store_delete().
  - Added OSSL_FUNC_store_open_ex() provider-storemgmt API function to pass
    a passphrase callback when opening a store.
  - Changed the default salt length used by PBES2 KDF's (PBKDF2 and scrypt)
    from 8 bytes to 16 bytes.
  - Changed the default value of the 'ess_cert_id_alg' configuration
    option which is used to calculate the TSA's public key certificate
    identifier. The default algorithm is updated to be sha256 instead of sha1.
  - Added optimization for SM2 algorithm on aarch64. A new configure option
    'no-sm2-precomp' has been added to disable the precomputed table.
  - Added client side support for QUIC
  - Added secp384r1 implementation using Solinas' reduction to improve
    speed of the NIST P-384 elliptic curve. To enable the implementation
    the build option 'enable-ec_nistp_64_gcc_128' must be used.
  - Improved RFC7468 compliance of the asn1parse command.
  - Added SHA256/192 algorithm support.
  - Added support for securely getting root CA certificate update in CMP.
  - Improved contention on global write locks by using more read locks where
    appropriate.
  - Improved performance of OSSL_PARAM lookups in performance critical
    provider functions.
  - Added the SSL_get0_group_name() function to provide access to the
    name of the group used for the TLS key exchange.
  - Provide a new configure option 'no-http' that can be used to disable the
    HTTP support. Provide new configure options 'no-apps' and 'no-docs' to
    disable building the openssl command line application and the documentation.
  - Provide a new configure option 'no-ecx' that can be used to disable the
    X25519, X448, and EdDSA support.
  - When multiple OSSL_KDF_PARAM_INFO parameters are passed to
    the EVP_KDF_CTX_set_params() function they are now concatenated not just
    for the HKDF algorithm but also for SSKDF and X9.63 KDF algorithms.
  - Added OSSL_FUNC_keymgmt_im/export_types_ex() provider functions that get
    the provider context as a parameter.
  - TLS round-trip time calculation was added by a Brigham Young University
    Capstone team partnering with Sandia National Laboratories. A new function
    in ssl_lib titled SSL_get_handshake_rtt will calculate and retrieve this
    value.
  - Added the "-quic" option to s_client to enable connectivity to QUIC servers.
    QUIC requires the use of ALPN, so this must be specified via the "-alpn"
    option. Use of the "advanced" s_client command command via the "-adv" option
    is recommended.
  - Added an "advanced" command mode to s_client. Use this with the "-adv" option.
  - Add Raw Public Key (RFC7250) support.
  - Added support for modular exponentiation and CRT offloading for the
    S390x architecture.
  - Added further assembler code for the RISC-V architecture.
  - Added EC_GROUP_to_params() which creates an OSSL_PARAM array
    from a given EC_GROUP.
  - Improved support for non-default library contexts and property queries
    when parsing PKCS#12 files.
  - Implemented support for all five instances of EdDSA from RFC8032:
    Ed25519, Ed25519ctx, Ed25519ph, Ed448, and Ed448ph.
    The streaming is not yet supported for the HashEdDSA variants
    (Ed25519ph and Ed448ph).
  - Added SM4 optimization for ARM processors using ASIMD and AES HW instructions.
  - Implemented SM4-XTS support.
  - Added platform-agnostic OSSL_sleep() function.
  - Implemented deterministic ECDSA signatures (RFC6979) support.
  - Implemented AES-GCM-SIV (RFC8452) support.
  - Added support for pluggable (provider-based) TLS signature algorithms.
    This enables TLS 1.3 authentication operations with algorithms embedded
    in providers not included by default in OpenSSL. In combination with
    the already available pluggable KEM and X.509 support, this enables
    for example suitable providers to deliver post-quantum or quantum-safe
    cryptography to OpenSSL users.
  - Added support for pluggable (provider-based) CMS signature algorithms.
    This enables CMS sign and verify operations with algorithms embedded
    in providers not included by default in OpenSSL.
  - Implemented HPKE DHKEM support in providers used by HPKE (RFC9180) API.
  - Add support for certificate compression (RFC8879), including
    library support for Brotli and Zstandard compression.
  - Add the ability to add custom attributes to PKCS12 files. Add a new API
    PKCS12_create_ex2, identical to the existing PKCS12_create_ex but allows
    for a user specified callback and optional argument.
    Added a new PKCS12_SAFEBAG_set0_attr, which allows for a new attr to be
    added to the existing STACK_OF attrs.
  - Major refactor of the libssl record layer.
  - Add a mac salt length option for the pkcs12 command.
  - Add more SRTP protection profiles from RFC8723 and RFC8269.
  - Extended Kernel TLS (KTLS) to support TLS 1.3 receive offload.
  - Add support for TCP Fast Open (RFC7413) to macOS, Linux, and FreeBSD where
    supported and enabled.
  - Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489)
    to the list of ciphersuites providing Perfect Forward Secrecy as
    required by SECLEVEL &gt;= 3.
  - Add new SSL APIs to aid in efficiently implementing TLS/SSL fingerprinting.
    The SSL_CTRL_GET_IANA_GROUPS control code, exposed as the
    SSL_get0_iana_groups() function-like macro, retrieves the list of
    supported groups sent by the peer.
  - Fixed PEM_write_bio_PKCS8PrivateKey() and PEM_write_bio_PKCS8PrivateKey_nid()
    to make it possible to use empty passphrase strings.
  - The PKCS12_parse() function now supports MAC-less PKCS12 files.
  - Added ASYNC_set_mem_functions() and ASYNC_get_mem_functions() calls to be able
    to change functions used for allocating the memory of asynchronous call stack.
  - Added support for signed BIGNUMs in the OSSL_PARAM APIs.
  - A failure exit code is returned when using the openssl x509 command to check
    certificate attributes and the checks fail.
  - The default SSL/TLS security level has been changed from 1 to 2. RSA,
    DSA and DH keys of 1024 bits and above and less than 2048 bits and ECC keys
    of 160 bits and above and less than 224 bits were previously accepted by
    default but are now no longer allowed. By default TLS compression was
    already disabled in previous OpenSSL versions. At security level 2 it cannot
    be enabled.
  - The SSL_CTX_set_cipher_list family functions now accept ciphers using their
    IANA standard names.
  - The PVK key derivation function has been moved from b2i_PVK_bio_ex() into
    the legacy crypto provider as an EVP_KDF. Applications requiring this KDF
    will need to load the legacy crypto provider.
  - CCM8 cipher suites in TLS have been downgraded to security level zero
    because they use a short authentication tag which lowers their strength.
  - Subject or issuer names in X.509 objects are now displayed as UTF-8 strings
    by default. Also spaces surrounding '=' in DN output are removed.
  - Add X.509 certificate codeSigning purpose and related checks on key usage and
    extended key usage of the leaf certificate according to the CA/Browser Forum.
  - The 'x509', 'ca', and 'req' apps now produce X.509 v3 certificates.
    The '-x509v1' option of 'req' prefers generation of X.509 v1 certificates.
    'X509_sign()' and 'X509_sign_ctx()' make sure that the certificate has
    X.509 version 3 if the certificate information includes X.509 extensions.
  - Fix and extend certificate handling and the apps 'x509', 'verify' etc.
    such as adding a trace facility for debugging certificate chain building.
  - Various fixes and extensions to the CMP+CRMF implementation and the 'cmp' app
    in particular supporting requests for central key generation, generalized
    polling, and various types of genm/genp exchanges defined in CMP Updates.
  - Fixes and extensions to the HTTP client and to the HTTP server in 'apps/'
    like correcting the TLS and proxy support and adding tracing for debugging.
  - Extended the CMS API for handling 'CMS_SignedData' and 'CMS_EnvelopedData'.
  - 'CMS_add0_cert()' and 'CMS_add1_cert()' no longer throw an error if
    a certificate to be added is already present. 'CMS_sign_ex()' and
    'CMS_sign()' now ignore any duplicate certificates in their 'certs' argument
    and no longer throw an error for them.
  - Added BIO_s_dgram_pair() and BIO_s_dgram_mem() that provide memory-based
    BIOs with datagram semantics and support for BIO_sendmmsg() and BIO_recvmmsg()
    calls. They can be used as the transport BIOs for QUIC.
  - Add new BIO_sendmmsg() and BIO_recvmmsg() BIO methods which allow
    sending and receiving multiple messages in a single call. An implementation
    is provided for BIO_dgram. For further details, see BIO_sendmmsg(3).
  - Support for loading root certificates from the Windows certificate store
    has been added.
  - Enable KTLS with the TLS 1.3 CCM mode ciphersuites. Note that some linux
    kernel versions that support KTLS have a known bug in CCM processing. That
    has been fixed in stable releases starting from 5.4.164, 5.10.84, 5.15.7,
    and all releases since 5.16. KTLS with CCM ciphersuites should be only used
    on these releases.
  - Added '-ktls' option to 's_server' and 's_client' commands to enable the
    KTLS support.
  - Zerocopy KTLS sendfile() support on Linux.
  - The OBJ_ calls are now thread safe using a global lock.
  - New parameter '-digest' for openssl cms command allowing signing
    pre-computed digests and new CMS API functions supporting that
    functionality.
  - OPENSSL_malloc() and other allocation functions now raise errors on
    allocation failures. The callers do not need to explicitly raise errors
    unless they want to for tracing purposes.
  - Added support for Brainpool curves in TLS-1.3.
  - Support for Argon2d, Argon2i, Argon2id KDFs has been added along with
    a basic thread pool implementation for select platforms.</changelog>
  <changelog author="pmonreal@suse.com" date="1729857601">- Update to 3.2.1:
  * Changes between 3.2.0 and 3.2.1:
  - A file in PKCS12 format can contain certificates and keys and may come from
    an untrusted source. The PKCS12 specification allows certain fields to be
    NULL, but OpenSSL did not correctly check for this case. [CVE-2024-0727]
  - When function EVP_PKEY_public_check() is called on RSA public keys,
    a computation is done to confirm that the RSA modulus, n, is composite.
    For valid RSA keys, n is a product of two or more large primes and this
    computation completes quickly. However, if n is an overly large prime,
    then this computation would take a long time. [CVE-2023-6237]
  - Restore the encoding of SM2 PrivateKeyInfo and SubjectPublicKeyInfo to
    have the contained AlgorithmIdentifier.algorithm set to id-ecPublicKey
    rather than SM2.
  - The POLY1305 MAC (message authentication code) implementation in OpenSSL
    for PowerPC CPUs saves the contents of vector registers in different
    order than they are restored. [CVE-2023-6129]
  - Disable building QUIC server utility when OpenSSL is configured with 'no-apps'.
  * The openssl-crypto-policies-support.patch has been merged into
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Rename openssl-Disable-default-provider-for-test-suite.patch and rebase to
    openssl-TESTS-Disable-default-provider-crypto-policies.patch
  * Patches removed in the update:
  - openssl-Add_support_for_Windows_CA_certificate_store.patch
  - openssl-ec-56-bit-Limb-Solinas-Strategy-for-secp384r1.patch
  - openssl-ec-Use-static-linkage-on-nistp521-felem_-square-mul-.patch
  - openssl-ec-powerpc64le-Add-asm-implementation-of-felem_-squa.patch
  - openssl-ecc-Remove-extraneous-parentheses-in-secp384r1.patch
  - openssl-powerpc-ecc-Fix-stack-allocation-secp384r1-asm.patch
  - openssl-CVE-2024-41996.patch
  - openssl-CVE-2023-50782.patch
  - openssl-CVE-2024-9143.patch
  * Patches rebased:
  - openssl-3-use-include-directive.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-DEFAULT_SUSE_cipher.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Force-FIPS.patch
  - openssl-load-legacy-provider.patch
  - openssl-no-html-docs.patch
  - openssl-pkgconfig.patch
  - openssl-ppc64-config.patch
  - openssl-truststore.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116800">- Remove the hardcoded DEFAULT_SUSE cipherlist selection.
  * Remove openssl-DEFAULT_SUSE_cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116801">- Update to 3.2.3:
  * Changes between 3.2.2 and 3.2.3:
  - Fixed possible denial of service in X.509 name checks. [CVE-2024-6119]
  - Fixed possible buffer overread in SSL_select_next_proto(). [CVE-2024-5535]
  * Changes between 3.2.1 and 3.2.2:
  - Fixed potential use after free after SSL_free_buffers() is called. [CVE-2024-4741]
  - Fixed an issue where checking excessively long DSA keys or parameters may
    be very slow. [CVE-2024-4603]
  - Improved EC/DSA nonce generation routines to avoid bias and timing
    side channel leaks.
  - Fixed an issue where some non-default TLS server configurations can cause
    unbounded memory growth when processing TLSv1.3 sessions. [CVE-2024-2511]
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded. This can be used on platforms
    where using atexit() from shared libraries causes crashes on exit.
  - Fixed bug where SSL_export_keying_material() could not be used with QUIC
    connections.
  * Add openssl-skip-quic-pairwise.patch to adapt the pairwise tests.
  * Merge openssl-FIPS-release_num_in_version_string.patch into
    openssl-FIPS-services-minimize.patch
  * Rebase patches:
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Remove-EC-curves.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-3-use-include-directive.patch
  * Remove not needed patches:
  - openssl-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  - openssl-3-FIPS-PCT_rsa_keygen.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730462400">- Support MSA 12 SHA3 on s390x [jsc#PED-10280]
  * Add openssl-3-add_EVP_DigestSqueeze_api.patch
  * Add openssl-3-support-multiple-sha3_squeeze_s390x.patch
  * Add openssl-3-add-xof-state-handling-s3_absorb.patch
  * Add openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  * Add openssl-3-fix-state-handling-sha3_final_s390x.patch
  * Add openssl-3-fix-state-handling-shake_final_s390x.patch
  * Add openssl-3-fix-state-handling-keccak_final_s390x.patch
  * Add openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  * Add openssl-3-add-defines-CPACF-funcs.patch
  * Add openssl-3-add-hw-acceleration-hmac.patch
  * Add openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  * Add openssl-3-fix-s390x_sha3_absorb.patch
  * Add openssl-3-fix-s390x_shake_squeeze.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808000">- Support MSA 10 XTS on s390x [jsc#PED-10273]
  * s390x: Add hardware acceleration for full AES-XTS
  * Add openssl-3-hw-acceleration-aes-xts-s390x.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808001">- Support MSA 11 HMAC on s390x [jsc#PED-10274]
  * Add openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  * Add openssl-3-fix-hmac-digest-detection-s390x.patch
  * Add openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730980800">- Add missing fixes for SHA3_squeeze and quic_multistream_test on
  pcc64 arch. [jsc#PED-10280]
  * Added openssl-3-fix-sha3-squeeze-ppc64.patch
  * Added openssl-3-fix-quic_multistream_test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1731412800">- Do not use HASHBANGPERL to avoid introducing a dependency on the
  perl-base package. [bsc#1233235]</changelog>
  <changelog author="pmonreal@suse.com" date="1734436800">- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
  - openssl-3-use-include-directive.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1738238400">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Security fix: [bsc#1236599, CVE-2024-12797]
  * RFC7250 handshakes with unauthenticated servers don't abort as
    expected.
  * Add openssl-CVE-2024-12797.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1746014400">- Security fix: [bsc#1240366, CVE-2025-27587]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
  <changelog author="mls@suse.de" date="1751371200">- Backport mdless cms signing support [jsc#PED-12895]
  * Add openssl-3-support-mdless-cms.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- FIPS: Fix EMS in crypto-policies FIPS:NO-ENFORCE-EMS
  * [bsc#1230959, bsc#1232326, bsc#1231748, bsc#1246428]
  * Add patch openssl-FIPS-fix-EMS-support.patch</changelog>
</package>
<package pkgid="56a7ee759427d6b957c61c8e6a7143824cc922bc6d4c561231066b78c91eab54" name="libopenssl3-32bit" arch="x86_64">
  <version epoch="0" ver="3.2.3" rel="150700.5.18.1"/>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1220262, CVE-2023-50782]
  * Implicit rejection in PKCS#1 v1.5
  * Add openssl-CVE-2023-50782.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166401">- Security fix: [bsc#1231741, CVE-2024-9143]
  * Low-level invalid GF(2^m) parameters lead to OOB memory access
  * Add openssl-CVE-2024-9143.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729512000">- Update to 3.1.7:
  * Major changes between OpenSSL 3.1.6 and OpenSSL 3.1.7 [3 Sep 2024]
  - Fixed possible denial of service in X.509 name checks (CVE-2024-6119)
  - Fixed possible buffer overread in SSL_select_next_proto()
    (CVE-2024-5535)
  * Major changes between OpenSSL 3.1.5 and OpenSSL 3.1.6 [4 Jun 2024]
  - Fixed potential use after free after SSL_free_buffers() is
    called (CVE-2024-4741)
  - Fixed an issue where checking excessively long DSA keys or
    parameters may be very slow (CVE-2024-4603)
  - Fixed unbounded memory growth with session handling in TLSv1.3
    (CVE-2024-2511)
  * Major changes between OpenSSL 3.1.4 and OpenSSL 3.1.5 [30 Jan 2024]
  - Fixed PKCS12 Decoding crashes (CVE-2024-0727)
  - Fixed Excessive time spent checking invalid RSA public keys
    [CVE-2023-6237)
  - Fixed POLY1305 MAC implementation corrupting vector registers
    on PowerPC CPUs which support PowerISA 2.07 (CVE-2023-6129)
  - Fix excessive time spent in DH check / generation with large
    Q parameter value (CVE-2023-5678)
  * Update openssl.keyring with BA5473A2B0587B07FB27CF2D216094DFD0CB81EF
  * Rebase patches:
  - openssl-Force-FIPS.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-CVE-2023-50782.patch
  * Remove patches fixed in the update:
  - openssl-Improve-performance-for-6x-unrolling-with-vpermxor-i.patch
  - openssl-CVE-2024-6119.patch openssl-CVE-2024-5535.patch
  - openssl-CVE-2024-4741.patch openssl-CVE-2024-4603.patch
  - openssl-CVE-2024-2511.patch openssl-CVE-2024-0727.patch
  - openssl-CVE-2023-6237.patch openssl-CVE-2023-6129.patch
  - openssl-CVE-2023-5678.patch openssl-3-CVE-2024-41996.patch
  - openssl-Enable-BTI-feature-for-md5-on-aarch64.patch
  - openssl-Fix-EVP_PKEY_CTX_add1_hkdf_info-behavior.patch
  - openssl-Handle-empty-param-in-EVP_PKEY_CTX_add1_hkdf_info.patch
  - reproducible.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729857600">- Update to 3.2.0:
  * Changes between 3.1.x and 3.2.0:
  - Fix excessive time spent in DH check/ generation with large Q parameter
    value. [CVE-2023-5678]
  - The BLAKE2b hash algorithm supports a configurable output length
    by setting the "size" parameter.
  - Added a function to delete objects from store by URI - OSSL_STORE_delete()
    and the corresponding provider-storemgmt API function OSSL_FUNC_store_delete().
  - Added OSSL_FUNC_store_open_ex() provider-storemgmt API function to pass
    a passphrase callback when opening a store.
  - Changed the default salt length used by PBES2 KDF's (PBKDF2 and scrypt)
    from 8 bytes to 16 bytes.
  - Changed the default value of the 'ess_cert_id_alg' configuration
    option which is used to calculate the TSA's public key certificate
    identifier. The default algorithm is updated to be sha256 instead of sha1.
  - Added optimization for SM2 algorithm on aarch64. A new configure option
    'no-sm2-precomp' has been added to disable the precomputed table.
  - Added client side support for QUIC
  - Added secp384r1 implementation using Solinas' reduction to improve
    speed of the NIST P-384 elliptic curve. To enable the implementation
    the build option 'enable-ec_nistp_64_gcc_128' must be used.
  - Improved RFC7468 compliance of the asn1parse command.
  - Added SHA256/192 algorithm support.
  - Added support for securely getting root CA certificate update in CMP.
  - Improved contention on global write locks by using more read locks where
    appropriate.
  - Improved performance of OSSL_PARAM lookups in performance critical
    provider functions.
  - Added the SSL_get0_group_name() function to provide access to the
    name of the group used for the TLS key exchange.
  - Provide a new configure option 'no-http' that can be used to disable the
    HTTP support. Provide new configure options 'no-apps' and 'no-docs' to
    disable building the openssl command line application and the documentation.
  - Provide a new configure option 'no-ecx' that can be used to disable the
    X25519, X448, and EdDSA support.
  - When multiple OSSL_KDF_PARAM_INFO parameters are passed to
    the EVP_KDF_CTX_set_params() function they are now concatenated not just
    for the HKDF algorithm but also for SSKDF and X9.63 KDF algorithms.
  - Added OSSL_FUNC_keymgmt_im/export_types_ex() provider functions that get
    the provider context as a parameter.
  - TLS round-trip time calculation was added by a Brigham Young University
    Capstone team partnering with Sandia National Laboratories. A new function
    in ssl_lib titled SSL_get_handshake_rtt will calculate and retrieve this
    value.
  - Added the "-quic" option to s_client to enable connectivity to QUIC servers.
    QUIC requires the use of ALPN, so this must be specified via the "-alpn"
    option. Use of the "advanced" s_client command command via the "-adv" option
    is recommended.
  - Added an "advanced" command mode to s_client. Use this with the "-adv" option.
  - Add Raw Public Key (RFC7250) support.
  - Added support for modular exponentiation and CRT offloading for the
    S390x architecture.
  - Added further assembler code for the RISC-V architecture.
  - Added EC_GROUP_to_params() which creates an OSSL_PARAM array
    from a given EC_GROUP.
  - Improved support for non-default library contexts and property queries
    when parsing PKCS#12 files.
  - Implemented support for all five instances of EdDSA from RFC8032:
    Ed25519, Ed25519ctx, Ed25519ph, Ed448, and Ed448ph.
    The streaming is not yet supported for the HashEdDSA variants
    (Ed25519ph and Ed448ph).
  - Added SM4 optimization for ARM processors using ASIMD and AES HW instructions.
  - Implemented SM4-XTS support.
  - Added platform-agnostic OSSL_sleep() function.
  - Implemented deterministic ECDSA signatures (RFC6979) support.
  - Implemented AES-GCM-SIV (RFC8452) support.
  - Added support for pluggable (provider-based) TLS signature algorithms.
    This enables TLS 1.3 authentication operations with algorithms embedded
    in providers not included by default in OpenSSL. In combination with
    the already available pluggable KEM and X.509 support, this enables
    for example suitable providers to deliver post-quantum or quantum-safe
    cryptography to OpenSSL users.
  - Added support for pluggable (provider-based) CMS signature algorithms.
    This enables CMS sign and verify operations with algorithms embedded
    in providers not included by default in OpenSSL.
  - Implemented HPKE DHKEM support in providers used by HPKE (RFC9180) API.
  - Add support for certificate compression (RFC8879), including
    library support for Brotli and Zstandard compression.
  - Add the ability to add custom attributes to PKCS12 files. Add a new API
    PKCS12_create_ex2, identical to the existing PKCS12_create_ex but allows
    for a user specified callback and optional argument.
    Added a new PKCS12_SAFEBAG_set0_attr, which allows for a new attr to be
    added to the existing STACK_OF attrs.
  - Major refactor of the libssl record layer.
  - Add a mac salt length option for the pkcs12 command.
  - Add more SRTP protection profiles from RFC8723 and RFC8269.
  - Extended Kernel TLS (KTLS) to support TLS 1.3 receive offload.
  - Add support for TCP Fast Open (RFC7413) to macOS, Linux, and FreeBSD where
    supported and enabled.
  - Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489)
    to the list of ciphersuites providing Perfect Forward Secrecy as
    required by SECLEVEL &gt;= 3.
  - Add new SSL APIs to aid in efficiently implementing TLS/SSL fingerprinting.
    The SSL_CTRL_GET_IANA_GROUPS control code, exposed as the
    SSL_get0_iana_groups() function-like macro, retrieves the list of
    supported groups sent by the peer.
  - Fixed PEM_write_bio_PKCS8PrivateKey() and PEM_write_bio_PKCS8PrivateKey_nid()
    to make it possible to use empty passphrase strings.
  - The PKCS12_parse() function now supports MAC-less PKCS12 files.
  - Added ASYNC_set_mem_functions() and ASYNC_get_mem_functions() calls to be able
    to change functions used for allocating the memory of asynchronous call stack.
  - Added support for signed BIGNUMs in the OSSL_PARAM APIs.
  - A failure exit code is returned when using the openssl x509 command to check
    certificate attributes and the checks fail.
  - The default SSL/TLS security level has been changed from 1 to 2. RSA,
    DSA and DH keys of 1024 bits and above and less than 2048 bits and ECC keys
    of 160 bits and above and less than 224 bits were previously accepted by
    default but are now no longer allowed. By default TLS compression was
    already disabled in previous OpenSSL versions. At security level 2 it cannot
    be enabled.
  - The SSL_CTX_set_cipher_list family functions now accept ciphers using their
    IANA standard names.
  - The PVK key derivation function has been moved from b2i_PVK_bio_ex() into
    the legacy crypto provider as an EVP_KDF. Applications requiring this KDF
    will need to load the legacy crypto provider.
  - CCM8 cipher suites in TLS have been downgraded to security level zero
    because they use a short authentication tag which lowers their strength.
  - Subject or issuer names in X.509 objects are now displayed as UTF-8 strings
    by default. Also spaces surrounding '=' in DN output are removed.
  - Add X.509 certificate codeSigning purpose and related checks on key usage and
    extended key usage of the leaf certificate according to the CA/Browser Forum.
  - The 'x509', 'ca', and 'req' apps now produce X.509 v3 certificates.
    The '-x509v1' option of 'req' prefers generation of X.509 v1 certificates.
    'X509_sign()' and 'X509_sign_ctx()' make sure that the certificate has
    X.509 version 3 if the certificate information includes X.509 extensions.
  - Fix and extend certificate handling and the apps 'x509', 'verify' etc.
    such as adding a trace facility for debugging certificate chain building.
  - Various fixes and extensions to the CMP+CRMF implementation and the 'cmp' app
    in particular supporting requests for central key generation, generalized
    polling, and various types of genm/genp exchanges defined in CMP Updates.
  - Fixes and extensions to the HTTP client and to the HTTP server in 'apps/'
    like correcting the TLS and proxy support and adding tracing for debugging.
  - Extended the CMS API for handling 'CMS_SignedData' and 'CMS_EnvelopedData'.
  - 'CMS_add0_cert()' and 'CMS_add1_cert()' no longer throw an error if
    a certificate to be added is already present. 'CMS_sign_ex()' and
    'CMS_sign()' now ignore any duplicate certificates in their 'certs' argument
    and no longer throw an error for them.
  - Added BIO_s_dgram_pair() and BIO_s_dgram_mem() that provide memory-based
    BIOs with datagram semantics and support for BIO_sendmmsg() and BIO_recvmmsg()
    calls. They can be used as the transport BIOs for QUIC.
  - Add new BIO_sendmmsg() and BIO_recvmmsg() BIO methods which allow
    sending and receiving multiple messages in a single call. An implementation
    is provided for BIO_dgram. For further details, see BIO_sendmmsg(3).
  - Support for loading root certificates from the Windows certificate store
    has been added.
  - Enable KTLS with the TLS 1.3 CCM mode ciphersuites. Note that some linux
    kernel versions that support KTLS have a known bug in CCM processing. That
    has been fixed in stable releases starting from 5.4.164, 5.10.84, 5.15.7,
    and all releases since 5.16. KTLS with CCM ciphersuites should be only used
    on these releases.
  - Added '-ktls' option to 's_server' and 's_client' commands to enable the
    KTLS support.
  - Zerocopy KTLS sendfile() support on Linux.
  - The OBJ_ calls are now thread safe using a global lock.
  - New parameter '-digest' for openssl cms command allowing signing
    pre-computed digests and new CMS API functions supporting that
    functionality.
  - OPENSSL_malloc() and other allocation functions now raise errors on
    allocation failures. The callers do not need to explicitly raise errors
    unless they want to for tracing purposes.
  - Added support for Brainpool curves in TLS-1.3.
  - Support for Argon2d, Argon2i, Argon2id KDFs has been added along with
    a basic thread pool implementation for select platforms.</changelog>
  <changelog author="pmonreal@suse.com" date="1729857601">- Update to 3.2.1:
  * Changes between 3.2.0 and 3.2.1:
  - A file in PKCS12 format can contain certificates and keys and may come from
    an untrusted source. The PKCS12 specification allows certain fields to be
    NULL, but OpenSSL did not correctly check for this case. [CVE-2024-0727]
  - When function EVP_PKEY_public_check() is called on RSA public keys,
    a computation is done to confirm that the RSA modulus, n, is composite.
    For valid RSA keys, n is a product of two or more large primes and this
    computation completes quickly. However, if n is an overly large prime,
    then this computation would take a long time. [CVE-2023-6237]
  - Restore the encoding of SM2 PrivateKeyInfo and SubjectPublicKeyInfo to
    have the contained AlgorithmIdentifier.algorithm set to id-ecPublicKey
    rather than SM2.
  - The POLY1305 MAC (message authentication code) implementation in OpenSSL
    for PowerPC CPUs saves the contents of vector registers in different
    order than they are restored. [CVE-2023-6129]
  - Disable building QUIC server utility when OpenSSL is configured with 'no-apps'.
  * The openssl-crypto-policies-support.patch has been merged into
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Rename openssl-Disable-default-provider-for-test-suite.patch and rebase to
    openssl-TESTS-Disable-default-provider-crypto-policies.patch
  * Patches removed in the update:
  - openssl-Add_support_for_Windows_CA_certificate_store.patch
  - openssl-ec-56-bit-Limb-Solinas-Strategy-for-secp384r1.patch
  - openssl-ec-Use-static-linkage-on-nistp521-felem_-square-mul-.patch
  - openssl-ec-powerpc64le-Add-asm-implementation-of-felem_-squa.patch
  - openssl-ecc-Remove-extraneous-parentheses-in-secp384r1.patch
  - openssl-powerpc-ecc-Fix-stack-allocation-secp384r1-asm.patch
  - openssl-CVE-2024-41996.patch
  - openssl-CVE-2023-50782.patch
  - openssl-CVE-2024-9143.patch
  * Patches rebased:
  - openssl-3-use-include-directive.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-DEFAULT_SUSE_cipher.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Force-FIPS.patch
  - openssl-load-legacy-provider.patch
  - openssl-no-html-docs.patch
  - openssl-pkgconfig.patch
  - openssl-ppc64-config.patch
  - openssl-truststore.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116800">- Remove the hardcoded DEFAULT_SUSE cipherlist selection.
  * Remove openssl-DEFAULT_SUSE_cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116801">- Update to 3.2.3:
  * Changes between 3.2.2 and 3.2.3:
  - Fixed possible denial of service in X.509 name checks. [CVE-2024-6119]
  - Fixed possible buffer overread in SSL_select_next_proto(). [CVE-2024-5535]
  * Changes between 3.2.1 and 3.2.2:
  - Fixed potential use after free after SSL_free_buffers() is called. [CVE-2024-4741]
  - Fixed an issue where checking excessively long DSA keys or parameters may
    be very slow. [CVE-2024-4603]
  - Improved EC/DSA nonce generation routines to avoid bias and timing
    side channel leaks.
  - Fixed an issue where some non-default TLS server configurations can cause
    unbounded memory growth when processing TLSv1.3 sessions. [CVE-2024-2511]
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded. This can be used on platforms
    where using atexit() from shared libraries causes crashes on exit.
  - Fixed bug where SSL_export_keying_material() could not be used with QUIC
    connections.
  * Add openssl-skip-quic-pairwise.patch to adapt the pairwise tests.
  * Merge openssl-FIPS-release_num_in_version_string.patch into
    openssl-FIPS-services-minimize.patch
  * Rebase patches:
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Remove-EC-curves.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-3-use-include-directive.patch
  * Remove not needed patches:
  - openssl-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  - openssl-3-FIPS-PCT_rsa_keygen.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730462400">- Support MSA 12 SHA3 on s390x [jsc#PED-10280]
  * Add openssl-3-add_EVP_DigestSqueeze_api.patch
  * Add openssl-3-support-multiple-sha3_squeeze_s390x.patch
  * Add openssl-3-add-xof-state-handling-s3_absorb.patch
  * Add openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  * Add openssl-3-fix-state-handling-sha3_final_s390x.patch
  * Add openssl-3-fix-state-handling-shake_final_s390x.patch
  * Add openssl-3-fix-state-handling-keccak_final_s390x.patch
  * Add openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  * Add openssl-3-add-defines-CPACF-funcs.patch
  * Add openssl-3-add-hw-acceleration-hmac.patch
  * Add openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  * Add openssl-3-fix-s390x_sha3_absorb.patch
  * Add openssl-3-fix-s390x_shake_squeeze.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808000">- Support MSA 10 XTS on s390x [jsc#PED-10273]
  * s390x: Add hardware acceleration for full AES-XTS
  * Add openssl-3-hw-acceleration-aes-xts-s390x.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808001">- Support MSA 11 HMAC on s390x [jsc#PED-10274]
  * Add openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  * Add openssl-3-fix-hmac-digest-detection-s390x.patch
  * Add openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730980800">- Add missing fixes for SHA3_squeeze and quic_multistream_test on
  pcc64 arch. [jsc#PED-10280]
  * Added openssl-3-fix-sha3-squeeze-ppc64.patch
  * Added openssl-3-fix-quic_multistream_test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1731412800">- Do not use HASHBANGPERL to avoid introducing a dependency on the
  perl-base package. [bsc#1233235]</changelog>
  <changelog author="pmonreal@suse.com" date="1734436800">- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
  - openssl-3-use-include-directive.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1738238400">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Security fix: [bsc#1236599, CVE-2024-12797]
  * RFC7250 handshakes with unauthenticated servers don't abort as
    expected.
  * Add openssl-CVE-2024-12797.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1746014400">- Security fix: [bsc#1240366, CVE-2025-27587]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
  <changelog author="mls@suse.de" date="1751371200">- Backport mdless cms signing support [jsc#PED-12895]
  * Add openssl-3-support-mdless-cms.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- FIPS: Fix EMS in crypto-policies FIPS:NO-ENFORCE-EMS
  * [bsc#1230959, bsc#1232326, bsc#1231748, bsc#1246428]
  * Add patch openssl-FIPS-fix-EMS-support.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1753876800">- Increase limit for CRL download [bsc#1247148, bsc#1247144]
  * Add openssl-3-large-CRLs.patch</changelog>
</package>
<package pkgid="72386acdfa1d967e55f27974b376c2541583c264f2c339110df8673fe55255fd" name="libopenssl3-32bit" arch="x86_64">
  <version epoch="0" ver="3.2.3" rel="150700.5.21.1"/>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1231741, CVE-2024-9143]
  * Low-level invalid GF(2^m) parameters lead to OOB memory access
  * Add openssl-CVE-2024-9143.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729512000">- Update to 3.1.7:
  * Major changes between OpenSSL 3.1.6 and OpenSSL 3.1.7 [3 Sep 2024]
  - Fixed possible denial of service in X.509 name checks (CVE-2024-6119)
  - Fixed possible buffer overread in SSL_select_next_proto()
    (CVE-2024-5535)
  * Major changes between OpenSSL 3.1.5 and OpenSSL 3.1.6 [4 Jun 2024]
  - Fixed potential use after free after SSL_free_buffers() is
    called (CVE-2024-4741)
  - Fixed an issue where checking excessively long DSA keys or
    parameters may be very slow (CVE-2024-4603)
  - Fixed unbounded memory growth with session handling in TLSv1.3
    (CVE-2024-2511)
  * Major changes between OpenSSL 3.1.4 and OpenSSL 3.1.5 [30 Jan 2024]
  - Fixed PKCS12 Decoding crashes (CVE-2024-0727)
  - Fixed Excessive time spent checking invalid RSA public keys
    [CVE-2023-6237)
  - Fixed POLY1305 MAC implementation corrupting vector registers
    on PowerPC CPUs which support PowerISA 2.07 (CVE-2023-6129)
  - Fix excessive time spent in DH check / generation with large
    Q parameter value (CVE-2023-5678)
  * Update openssl.keyring with BA5473A2B0587B07FB27CF2D216094DFD0CB81EF
  * Rebase patches:
  - openssl-Force-FIPS.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-CVE-2023-50782.patch
  * Remove patches fixed in the update:
  - openssl-Improve-performance-for-6x-unrolling-with-vpermxor-i.patch
  - openssl-CVE-2024-6119.patch openssl-CVE-2024-5535.patch
  - openssl-CVE-2024-4741.patch openssl-CVE-2024-4603.patch
  - openssl-CVE-2024-2511.patch openssl-CVE-2024-0727.patch
  - openssl-CVE-2023-6237.patch openssl-CVE-2023-6129.patch
  - openssl-CVE-2023-5678.patch openssl-3-CVE-2024-41996.patch
  - openssl-Enable-BTI-feature-for-md5-on-aarch64.patch
  - openssl-Fix-EVP_PKEY_CTX_add1_hkdf_info-behavior.patch
  - openssl-Handle-empty-param-in-EVP_PKEY_CTX_add1_hkdf_info.patch
  - reproducible.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729857600">- Update to 3.2.0:
  * Changes between 3.1.x and 3.2.0:
  - Fix excessive time spent in DH check/ generation with large Q parameter
    value. [CVE-2023-5678]
  - The BLAKE2b hash algorithm supports a configurable output length
    by setting the "size" parameter.
  - Added a function to delete objects from store by URI - OSSL_STORE_delete()
    and the corresponding provider-storemgmt API function OSSL_FUNC_store_delete().
  - Added OSSL_FUNC_store_open_ex() provider-storemgmt API function to pass
    a passphrase callback when opening a store.
  - Changed the default salt length used by PBES2 KDF's (PBKDF2 and scrypt)
    from 8 bytes to 16 bytes.
  - Changed the default value of the 'ess_cert_id_alg' configuration
    option which is used to calculate the TSA's public key certificate
    identifier. The default algorithm is updated to be sha256 instead of sha1.
  - Added optimization for SM2 algorithm on aarch64. A new configure option
    'no-sm2-precomp' has been added to disable the precomputed table.
  - Added client side support for QUIC
  - Added secp384r1 implementation using Solinas' reduction to improve
    speed of the NIST P-384 elliptic curve. To enable the implementation
    the build option 'enable-ec_nistp_64_gcc_128' must be used.
  - Improved RFC7468 compliance of the asn1parse command.
  - Added SHA256/192 algorithm support.
  - Added support for securely getting root CA certificate update in CMP.
  - Improved contention on global write locks by using more read locks where
    appropriate.
  - Improved performance of OSSL_PARAM lookups in performance critical
    provider functions.
  - Added the SSL_get0_group_name() function to provide access to the
    name of the group used for the TLS key exchange.
  - Provide a new configure option 'no-http' that can be used to disable the
    HTTP support. Provide new configure options 'no-apps' and 'no-docs' to
    disable building the openssl command line application and the documentation.
  - Provide a new configure option 'no-ecx' that can be used to disable the
    X25519, X448, and EdDSA support.
  - When multiple OSSL_KDF_PARAM_INFO parameters are passed to
    the EVP_KDF_CTX_set_params() function they are now concatenated not just
    for the HKDF algorithm but also for SSKDF and X9.63 KDF algorithms.
  - Added OSSL_FUNC_keymgmt_im/export_types_ex() provider functions that get
    the provider context as a parameter.
  - TLS round-trip time calculation was added by a Brigham Young University
    Capstone team partnering with Sandia National Laboratories. A new function
    in ssl_lib titled SSL_get_handshake_rtt will calculate and retrieve this
    value.
  - Added the "-quic" option to s_client to enable connectivity to QUIC servers.
    QUIC requires the use of ALPN, so this must be specified via the "-alpn"
    option. Use of the "advanced" s_client command command via the "-adv" option
    is recommended.
  - Added an "advanced" command mode to s_client. Use this with the "-adv" option.
  - Add Raw Public Key (RFC7250) support.
  - Added support for modular exponentiation and CRT offloading for the
    S390x architecture.
  - Added further assembler code for the RISC-V architecture.
  - Added EC_GROUP_to_params() which creates an OSSL_PARAM array
    from a given EC_GROUP.
  - Improved support for non-default library contexts and property queries
    when parsing PKCS#12 files.
  - Implemented support for all five instances of EdDSA from RFC8032:
    Ed25519, Ed25519ctx, Ed25519ph, Ed448, and Ed448ph.
    The streaming is not yet supported for the HashEdDSA variants
    (Ed25519ph and Ed448ph).
  - Added SM4 optimization for ARM processors using ASIMD and AES HW instructions.
  - Implemented SM4-XTS support.
  - Added platform-agnostic OSSL_sleep() function.
  - Implemented deterministic ECDSA signatures (RFC6979) support.
  - Implemented AES-GCM-SIV (RFC8452) support.
  - Added support for pluggable (provider-based) TLS signature algorithms.
    This enables TLS 1.3 authentication operations with algorithms embedded
    in providers not included by default in OpenSSL. In combination with
    the already available pluggable KEM and X.509 support, this enables
    for example suitable providers to deliver post-quantum or quantum-safe
    cryptography to OpenSSL users.
  - Added support for pluggable (provider-based) CMS signature algorithms.
    This enables CMS sign and verify operations with algorithms embedded
    in providers not included by default in OpenSSL.
  - Implemented HPKE DHKEM support in providers used by HPKE (RFC9180) API.
  - Add support for certificate compression (RFC8879), including
    library support for Brotli and Zstandard compression.
  - Add the ability to add custom attributes to PKCS12 files. Add a new API
    PKCS12_create_ex2, identical to the existing PKCS12_create_ex but allows
    for a user specified callback and optional argument.
    Added a new PKCS12_SAFEBAG_set0_attr, which allows for a new attr to be
    added to the existing STACK_OF attrs.
  - Major refactor of the libssl record layer.
  - Add a mac salt length option for the pkcs12 command.
  - Add more SRTP protection profiles from RFC8723 and RFC8269.
  - Extended Kernel TLS (KTLS) to support TLS 1.3 receive offload.
  - Add support for TCP Fast Open (RFC7413) to macOS, Linux, and FreeBSD where
    supported and enabled.
  - Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489)
    to the list of ciphersuites providing Perfect Forward Secrecy as
    required by SECLEVEL &gt;= 3.
  - Add new SSL APIs to aid in efficiently implementing TLS/SSL fingerprinting.
    The SSL_CTRL_GET_IANA_GROUPS control code, exposed as the
    SSL_get0_iana_groups() function-like macro, retrieves the list of
    supported groups sent by the peer.
  - Fixed PEM_write_bio_PKCS8PrivateKey() and PEM_write_bio_PKCS8PrivateKey_nid()
    to make it possible to use empty passphrase strings.
  - The PKCS12_parse() function now supports MAC-less PKCS12 files.
  - Added ASYNC_set_mem_functions() and ASYNC_get_mem_functions() calls to be able
    to change functions used for allocating the memory of asynchronous call stack.
  - Added support for signed BIGNUMs in the OSSL_PARAM APIs.
  - A failure exit code is returned when using the openssl x509 command to check
    certificate attributes and the checks fail.
  - The default SSL/TLS security level has been changed from 1 to 2. RSA,
    DSA and DH keys of 1024 bits and above and less than 2048 bits and ECC keys
    of 160 bits and above and less than 224 bits were previously accepted by
    default but are now no longer allowed. By default TLS compression was
    already disabled in previous OpenSSL versions. At security level 2 it cannot
    be enabled.
  - The SSL_CTX_set_cipher_list family functions now accept ciphers using their
    IANA standard names.
  - The PVK key derivation function has been moved from b2i_PVK_bio_ex() into
    the legacy crypto provider as an EVP_KDF. Applications requiring this KDF
    will need to load the legacy crypto provider.
  - CCM8 cipher suites in TLS have been downgraded to security level zero
    because they use a short authentication tag which lowers their strength.
  - Subject or issuer names in X.509 objects are now displayed as UTF-8 strings
    by default. Also spaces surrounding '=' in DN output are removed.
  - Add X.509 certificate codeSigning purpose and related checks on key usage and
    extended key usage of the leaf certificate according to the CA/Browser Forum.
  - The 'x509', 'ca', and 'req' apps now produce X.509 v3 certificates.
    The '-x509v1' option of 'req' prefers generation of X.509 v1 certificates.
    'X509_sign()' and 'X509_sign_ctx()' make sure that the certificate has
    X.509 version 3 if the certificate information includes X.509 extensions.
  - Fix and extend certificate handling and the apps 'x509', 'verify' etc.
    such as adding a trace facility for debugging certificate chain building.
  - Various fixes and extensions to the CMP+CRMF implementation and the 'cmp' app
    in particular supporting requests for central key generation, generalized
    polling, and various types of genm/genp exchanges defined in CMP Updates.
  - Fixes and extensions to the HTTP client and to the HTTP server in 'apps/'
    like correcting the TLS and proxy support and adding tracing for debugging.
  - Extended the CMS API for handling 'CMS_SignedData' and 'CMS_EnvelopedData'.
  - 'CMS_add0_cert()' and 'CMS_add1_cert()' no longer throw an error if
    a certificate to be added is already present. 'CMS_sign_ex()' and
    'CMS_sign()' now ignore any duplicate certificates in their 'certs' argument
    and no longer throw an error for them.
  - Added BIO_s_dgram_pair() and BIO_s_dgram_mem() that provide memory-based
    BIOs with datagram semantics and support for BIO_sendmmsg() and BIO_recvmmsg()
    calls. They can be used as the transport BIOs for QUIC.
  - Add new BIO_sendmmsg() and BIO_recvmmsg() BIO methods which allow
    sending and receiving multiple messages in a single call. An implementation
    is provided for BIO_dgram. For further details, see BIO_sendmmsg(3).
  - Support for loading root certificates from the Windows certificate store
    has been added.
  - Enable KTLS with the TLS 1.3 CCM mode ciphersuites. Note that some linux
    kernel versions that support KTLS have a known bug in CCM processing. That
    has been fixed in stable releases starting from 5.4.164, 5.10.84, 5.15.7,
    and all releases since 5.16. KTLS with CCM ciphersuites should be only used
    on these releases.
  - Added '-ktls' option to 's_server' and 's_client' commands to enable the
    KTLS support.
  - Zerocopy KTLS sendfile() support on Linux.
  - The OBJ_ calls are now thread safe using a global lock.
  - New parameter '-digest' for openssl cms command allowing signing
    pre-computed digests and new CMS API functions supporting that
    functionality.
  - OPENSSL_malloc() and other allocation functions now raise errors on
    allocation failures. The callers do not need to explicitly raise errors
    unless they want to for tracing purposes.
  - Added support for Brainpool curves in TLS-1.3.
  - Support for Argon2d, Argon2i, Argon2id KDFs has been added along with
    a basic thread pool implementation for select platforms.</changelog>
  <changelog author="pmonreal@suse.com" date="1729857601">- Update to 3.2.1:
  * Changes between 3.2.0 and 3.2.1:
  - A file in PKCS12 format can contain certificates and keys and may come from
    an untrusted source. The PKCS12 specification allows certain fields to be
    NULL, but OpenSSL did not correctly check for this case. [CVE-2024-0727]
  - When function EVP_PKEY_public_check() is called on RSA public keys,
    a computation is done to confirm that the RSA modulus, n, is composite.
    For valid RSA keys, n is a product of two or more large primes and this
    computation completes quickly. However, if n is an overly large prime,
    then this computation would take a long time. [CVE-2023-6237]
  - Restore the encoding of SM2 PrivateKeyInfo and SubjectPublicKeyInfo to
    have the contained AlgorithmIdentifier.algorithm set to id-ecPublicKey
    rather than SM2.
  - The POLY1305 MAC (message authentication code) implementation in OpenSSL
    for PowerPC CPUs saves the contents of vector registers in different
    order than they are restored. [CVE-2023-6129]
  - Disable building QUIC server utility when OpenSSL is configured with 'no-apps'.
  * The openssl-crypto-policies-support.patch has been merged into
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Rename openssl-Disable-default-provider-for-test-suite.patch and rebase to
    openssl-TESTS-Disable-default-provider-crypto-policies.patch
  * Patches removed in the update:
  - openssl-Add_support_for_Windows_CA_certificate_store.patch
  - openssl-ec-56-bit-Limb-Solinas-Strategy-for-secp384r1.patch
  - openssl-ec-Use-static-linkage-on-nistp521-felem_-square-mul-.patch
  - openssl-ec-powerpc64le-Add-asm-implementation-of-felem_-squa.patch
  - openssl-ecc-Remove-extraneous-parentheses-in-secp384r1.patch
  - openssl-powerpc-ecc-Fix-stack-allocation-secp384r1-asm.patch
  - openssl-CVE-2024-41996.patch
  - openssl-CVE-2023-50782.patch
  - openssl-CVE-2024-9143.patch
  * Patches rebased:
  - openssl-3-use-include-directive.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-DEFAULT_SUSE_cipher.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Force-FIPS.patch
  - openssl-load-legacy-provider.patch
  - openssl-no-html-docs.patch
  - openssl-pkgconfig.patch
  - openssl-ppc64-config.patch
  - openssl-truststore.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116800">- Remove the hardcoded DEFAULT_SUSE cipherlist selection.
  * Remove openssl-DEFAULT_SUSE_cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116801">- Update to 3.2.3:
  * Changes between 3.2.2 and 3.2.3:
  - Fixed possible denial of service in X.509 name checks. [CVE-2024-6119]
  - Fixed possible buffer overread in SSL_select_next_proto(). [CVE-2024-5535]
  * Changes between 3.2.1 and 3.2.2:
  - Fixed potential use after free after SSL_free_buffers() is called. [CVE-2024-4741]
  - Fixed an issue where checking excessively long DSA keys or parameters may
    be very slow. [CVE-2024-4603]
  - Improved EC/DSA nonce generation routines to avoid bias and timing
    side channel leaks.
  - Fixed an issue where some non-default TLS server configurations can cause
    unbounded memory growth when processing TLSv1.3 sessions. [CVE-2024-2511]
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded. This can be used on platforms
    where using atexit() from shared libraries causes crashes on exit.
  - Fixed bug where SSL_export_keying_material() could not be used with QUIC
    connections.
  * Add openssl-skip-quic-pairwise.patch to adapt the pairwise tests.
  * Merge openssl-FIPS-release_num_in_version_string.patch into
    openssl-FIPS-services-minimize.patch
  * Rebase patches:
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Remove-EC-curves.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-3-use-include-directive.patch
  * Remove not needed patches:
  - openssl-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  - openssl-3-FIPS-PCT_rsa_keygen.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730462400">- Support MSA 12 SHA3 on s390x [jsc#PED-10280]
  * Add openssl-3-add_EVP_DigestSqueeze_api.patch
  * Add openssl-3-support-multiple-sha3_squeeze_s390x.patch
  * Add openssl-3-add-xof-state-handling-s3_absorb.patch
  * Add openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  * Add openssl-3-fix-state-handling-sha3_final_s390x.patch
  * Add openssl-3-fix-state-handling-shake_final_s390x.patch
  * Add openssl-3-fix-state-handling-keccak_final_s390x.patch
  * Add openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  * Add openssl-3-add-defines-CPACF-funcs.patch
  * Add openssl-3-add-hw-acceleration-hmac.patch
  * Add openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  * Add openssl-3-fix-s390x_sha3_absorb.patch
  * Add openssl-3-fix-s390x_shake_squeeze.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808000">- Support MSA 10 XTS on s390x [jsc#PED-10273]
  * s390x: Add hardware acceleration for full AES-XTS
  * Add openssl-3-hw-acceleration-aes-xts-s390x.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808001">- Support MSA 11 HMAC on s390x [jsc#PED-10274]
  * Add openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  * Add openssl-3-fix-hmac-digest-detection-s390x.patch
  * Add openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730980800">- Add missing fixes for SHA3_squeeze and quic_multistream_test on
  pcc64 arch. [jsc#PED-10280]
  * Added openssl-3-fix-sha3-squeeze-ppc64.patch
  * Added openssl-3-fix-quic_multistream_test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1731412800">- Do not use HASHBANGPERL to avoid introducing a dependency on the
  perl-base package. [bsc#1233235]</changelog>
  <changelog author="pmonreal@suse.com" date="1734436800">- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
  - openssl-3-use-include-directive.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1738238400">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Security fix: [bsc#1236599, CVE-2024-12797]
  * RFC7250 handshakes with unauthenticated servers don't abort as
    expected.
  * Add openssl-CVE-2024-12797.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1746014400">- Security fix: [bsc#1240366, CVE-2025-27587]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
  <changelog author="mls@suse.de" date="1751371200">- Backport mdless cms signing support [jsc#PED-12895]
  * Add openssl-3-support-mdless-cms.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- FIPS: Fix EMS in crypto-policies FIPS:NO-ENFORCE-EMS
  * [bsc#1230959, bsc#1232326, bsc#1231748, bsc#1246428]
  * Add patch openssl-FIPS-fix-EMS-support.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1753876800">- Increase limit for CRL download [bsc#1247148, bsc#1247144]
  * Add openssl-3-large-CRLs.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1759233600">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl3-CVE-2025-9230.patch</changelog>
</package>
<package pkgid="cb08a196640326ed342c81a9141d3f32b3a3ee2e8b7efed7ec40add7b06c081f" name="libopenssl3-32bit" arch="x86_64">
  <version epoch="0" ver="3.2.3" rel="150700.5.24.1"/>
  <changelog author="pmonreal@suse.com" date="1729512000">- Update to 3.1.7:
  * Major changes between OpenSSL 3.1.6 and OpenSSL 3.1.7 [3 Sep 2024]
  - Fixed possible denial of service in X.509 name checks (CVE-2024-6119)
  - Fixed possible buffer overread in SSL_select_next_proto()
    (CVE-2024-5535)
  * Major changes between OpenSSL 3.1.5 and OpenSSL 3.1.6 [4 Jun 2024]
  - Fixed potential use after free after SSL_free_buffers() is
    called (CVE-2024-4741)
  - Fixed an issue where checking excessively long DSA keys or
    parameters may be very slow (CVE-2024-4603)
  - Fixed unbounded memory growth with session handling in TLSv1.3
    (CVE-2024-2511)
  * Major changes between OpenSSL 3.1.4 and OpenSSL 3.1.5 [30 Jan 2024]
  - Fixed PKCS12 Decoding crashes (CVE-2024-0727)
  - Fixed Excessive time spent checking invalid RSA public keys
    [CVE-2023-6237)
  - Fixed POLY1305 MAC implementation corrupting vector registers
    on PowerPC CPUs which support PowerISA 2.07 (CVE-2023-6129)
  - Fix excessive time spent in DH check / generation with large
    Q parameter value (CVE-2023-5678)
  * Update openssl.keyring with BA5473A2B0587B07FB27CF2D216094DFD0CB81EF
  * Rebase patches:
  - openssl-Force-FIPS.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-CVE-2023-50782.patch
  * Remove patches fixed in the update:
  - openssl-Improve-performance-for-6x-unrolling-with-vpermxor-i.patch
  - openssl-CVE-2024-6119.patch openssl-CVE-2024-5535.patch
  - openssl-CVE-2024-4741.patch openssl-CVE-2024-4603.patch
  - openssl-CVE-2024-2511.patch openssl-CVE-2024-0727.patch
  - openssl-CVE-2023-6237.patch openssl-CVE-2023-6129.patch
  - openssl-CVE-2023-5678.patch openssl-3-CVE-2024-41996.patch
  - openssl-Enable-BTI-feature-for-md5-on-aarch64.patch
  - openssl-Fix-EVP_PKEY_CTX_add1_hkdf_info-behavior.patch
  - openssl-Handle-empty-param-in-EVP_PKEY_CTX_add1_hkdf_info.patch
  - reproducible.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729857600">- Update to 3.2.0:
  * Changes between 3.1.x and 3.2.0:
  - Fix excessive time spent in DH check/ generation with large Q parameter
    value. [CVE-2023-5678]
  - The BLAKE2b hash algorithm supports a configurable output length
    by setting the "size" parameter.
  - Added a function to delete objects from store by URI - OSSL_STORE_delete()
    and the corresponding provider-storemgmt API function OSSL_FUNC_store_delete().
  - Added OSSL_FUNC_store_open_ex() provider-storemgmt API function to pass
    a passphrase callback when opening a store.
  - Changed the default salt length used by PBES2 KDF's (PBKDF2 and scrypt)
    from 8 bytes to 16 bytes.
  - Changed the default value of the 'ess_cert_id_alg' configuration
    option which is used to calculate the TSA's public key certificate
    identifier. The default algorithm is updated to be sha256 instead of sha1.
  - Added optimization for SM2 algorithm on aarch64. A new configure option
    'no-sm2-precomp' has been added to disable the precomputed table.
  - Added client side support for QUIC
  - Added secp384r1 implementation using Solinas' reduction to improve
    speed of the NIST P-384 elliptic curve. To enable the implementation
    the build option 'enable-ec_nistp_64_gcc_128' must be used.
  - Improved RFC7468 compliance of the asn1parse command.
  - Added SHA256/192 algorithm support.
  - Added support for securely getting root CA certificate update in CMP.
  - Improved contention on global write locks by using more read locks where
    appropriate.
  - Improved performance of OSSL_PARAM lookups in performance critical
    provider functions.
  - Added the SSL_get0_group_name() function to provide access to the
    name of the group used for the TLS key exchange.
  - Provide a new configure option 'no-http' that can be used to disable the
    HTTP support. Provide new configure options 'no-apps' and 'no-docs' to
    disable building the openssl command line application and the documentation.
  - Provide a new configure option 'no-ecx' that can be used to disable the
    X25519, X448, and EdDSA support.
  - When multiple OSSL_KDF_PARAM_INFO parameters are passed to
    the EVP_KDF_CTX_set_params() function they are now concatenated not just
    for the HKDF algorithm but also for SSKDF and X9.63 KDF algorithms.
  - Added OSSL_FUNC_keymgmt_im/export_types_ex() provider functions that get
    the provider context as a parameter.
  - TLS round-trip time calculation was added by a Brigham Young University
    Capstone team partnering with Sandia National Laboratories. A new function
    in ssl_lib titled SSL_get_handshake_rtt will calculate and retrieve this
    value.
  - Added the "-quic" option to s_client to enable connectivity to QUIC servers.
    QUIC requires the use of ALPN, so this must be specified via the "-alpn"
    option. Use of the "advanced" s_client command command via the "-adv" option
    is recommended.
  - Added an "advanced" command mode to s_client. Use this with the "-adv" option.
  - Add Raw Public Key (RFC7250) support.
  - Added support for modular exponentiation and CRT offloading for the
    S390x architecture.
  - Added further assembler code for the RISC-V architecture.
  - Added EC_GROUP_to_params() which creates an OSSL_PARAM array
    from a given EC_GROUP.
  - Improved support for non-default library contexts and property queries
    when parsing PKCS#12 files.
  - Implemented support for all five instances of EdDSA from RFC8032:
    Ed25519, Ed25519ctx, Ed25519ph, Ed448, and Ed448ph.
    The streaming is not yet supported for the HashEdDSA variants
    (Ed25519ph and Ed448ph).
  - Added SM4 optimization for ARM processors using ASIMD and AES HW instructions.
  - Implemented SM4-XTS support.
  - Added platform-agnostic OSSL_sleep() function.
  - Implemented deterministic ECDSA signatures (RFC6979) support.
  - Implemented AES-GCM-SIV (RFC8452) support.
  - Added support for pluggable (provider-based) TLS signature algorithms.
    This enables TLS 1.3 authentication operations with algorithms embedded
    in providers not included by default in OpenSSL. In combination with
    the already available pluggable KEM and X.509 support, this enables
    for example suitable providers to deliver post-quantum or quantum-safe
    cryptography to OpenSSL users.
  - Added support for pluggable (provider-based) CMS signature algorithms.
    This enables CMS sign and verify operations with algorithms embedded
    in providers not included by default in OpenSSL.
  - Implemented HPKE DHKEM support in providers used by HPKE (RFC9180) API.
  - Add support for certificate compression (RFC8879), including
    library support for Brotli and Zstandard compression.
  - Add the ability to add custom attributes to PKCS12 files. Add a new API
    PKCS12_create_ex2, identical to the existing PKCS12_create_ex but allows
    for a user specified callback and optional argument.
    Added a new PKCS12_SAFEBAG_set0_attr, which allows for a new attr to be
    added to the existing STACK_OF attrs.
  - Major refactor of the libssl record layer.
  - Add a mac salt length option for the pkcs12 command.
  - Add more SRTP protection profiles from RFC8723 and RFC8269.
  - Extended Kernel TLS (KTLS) to support TLS 1.3 receive offload.
  - Add support for TCP Fast Open (RFC7413) to macOS, Linux, and FreeBSD where
    supported and enabled.
  - Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489)
    to the list of ciphersuites providing Perfect Forward Secrecy as
    required by SECLEVEL &gt;= 3.
  - Add new SSL APIs to aid in efficiently implementing TLS/SSL fingerprinting.
    The SSL_CTRL_GET_IANA_GROUPS control code, exposed as the
    SSL_get0_iana_groups() function-like macro, retrieves the list of
    supported groups sent by the peer.
  - Fixed PEM_write_bio_PKCS8PrivateKey() and PEM_write_bio_PKCS8PrivateKey_nid()
    to make it possible to use empty passphrase strings.
  - The PKCS12_parse() function now supports MAC-less PKCS12 files.
  - Added ASYNC_set_mem_functions() and ASYNC_get_mem_functions() calls to be able
    to change functions used for allocating the memory of asynchronous call stack.
  - Added support for signed BIGNUMs in the OSSL_PARAM APIs.
  - A failure exit code is returned when using the openssl x509 command to check
    certificate attributes and the checks fail.
  - The default SSL/TLS security level has been changed from 1 to 2. RSA,
    DSA and DH keys of 1024 bits and above and less than 2048 bits and ECC keys
    of 160 bits and above and less than 224 bits were previously accepted by
    default but are now no longer allowed. By default TLS compression was
    already disabled in previous OpenSSL versions. At security level 2 it cannot
    be enabled.
  - The SSL_CTX_set_cipher_list family functions now accept ciphers using their
    IANA standard names.
  - The PVK key derivation function has been moved from b2i_PVK_bio_ex() into
    the legacy crypto provider as an EVP_KDF. Applications requiring this KDF
    will need to load the legacy crypto provider.
  - CCM8 cipher suites in TLS have been downgraded to security level zero
    because they use a short authentication tag which lowers their strength.
  - Subject or issuer names in X.509 objects are now displayed as UTF-8 strings
    by default. Also spaces surrounding '=' in DN output are removed.
  - Add X.509 certificate codeSigning purpose and related checks on key usage and
    extended key usage of the leaf certificate according to the CA/Browser Forum.
  - The 'x509', 'ca', and 'req' apps now produce X.509 v3 certificates.
    The '-x509v1' option of 'req' prefers generation of X.509 v1 certificates.
    'X509_sign()' and 'X509_sign_ctx()' make sure that the certificate has
    X.509 version 3 if the certificate information includes X.509 extensions.
  - Fix and extend certificate handling and the apps 'x509', 'verify' etc.
    such as adding a trace facility for debugging certificate chain building.
  - Various fixes and extensions to the CMP+CRMF implementation and the 'cmp' app
    in particular supporting requests for central key generation, generalized
    polling, and various types of genm/genp exchanges defined in CMP Updates.
  - Fixes and extensions to the HTTP client and to the HTTP server in 'apps/'
    like correcting the TLS and proxy support and adding tracing for debugging.
  - Extended the CMS API for handling 'CMS_SignedData' and 'CMS_EnvelopedData'.
  - 'CMS_add0_cert()' and 'CMS_add1_cert()' no longer throw an error if
    a certificate to be added is already present. 'CMS_sign_ex()' and
    'CMS_sign()' now ignore any duplicate certificates in their 'certs' argument
    and no longer throw an error for them.
  - Added BIO_s_dgram_pair() and BIO_s_dgram_mem() that provide memory-based
    BIOs with datagram semantics and support for BIO_sendmmsg() and BIO_recvmmsg()
    calls. They can be used as the transport BIOs for QUIC.
  - Add new BIO_sendmmsg() and BIO_recvmmsg() BIO methods which allow
    sending and receiving multiple messages in a single call. An implementation
    is provided for BIO_dgram. For further details, see BIO_sendmmsg(3).
  - Support for loading root certificates from the Windows certificate store
    has been added.
  - Enable KTLS with the TLS 1.3 CCM mode ciphersuites. Note that some linux
    kernel versions that support KTLS have a known bug in CCM processing. That
    has been fixed in stable releases starting from 5.4.164, 5.10.84, 5.15.7,
    and all releases since 5.16. KTLS with CCM ciphersuites should be only used
    on these releases.
  - Added '-ktls' option to 's_server' and 's_client' commands to enable the
    KTLS support.
  - Zerocopy KTLS sendfile() support on Linux.
  - The OBJ_ calls are now thread safe using a global lock.
  - New parameter '-digest' for openssl cms command allowing signing
    pre-computed digests and new CMS API functions supporting that
    functionality.
  - OPENSSL_malloc() and other allocation functions now raise errors on
    allocation failures. The callers do not need to explicitly raise errors
    unless they want to for tracing purposes.
  - Added support for Brainpool curves in TLS-1.3.
  - Support for Argon2d, Argon2i, Argon2id KDFs has been added along with
    a basic thread pool implementation for select platforms.</changelog>
  <changelog author="pmonreal@suse.com" date="1729857601">- Update to 3.2.1:
  * Changes between 3.2.0 and 3.2.1:
  - A file in PKCS12 format can contain certificates and keys and may come from
    an untrusted source. The PKCS12 specification allows certain fields to be
    NULL, but OpenSSL did not correctly check for this case. [CVE-2024-0727]
  - When function EVP_PKEY_public_check() is called on RSA public keys,
    a computation is done to confirm that the RSA modulus, n, is composite.
    For valid RSA keys, n is a product of two or more large primes and this
    computation completes quickly. However, if n is an overly large prime,
    then this computation would take a long time. [CVE-2023-6237]
  - Restore the encoding of SM2 PrivateKeyInfo and SubjectPublicKeyInfo to
    have the contained AlgorithmIdentifier.algorithm set to id-ecPublicKey
    rather than SM2.
  - The POLY1305 MAC (message authentication code) implementation in OpenSSL
    for PowerPC CPUs saves the contents of vector registers in different
    order than they are restored. [CVE-2023-6129]
  - Disable building QUIC server utility when OpenSSL is configured with 'no-apps'.
  * The openssl-crypto-policies-support.patch has been merged into
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Rename openssl-Disable-default-provider-for-test-suite.patch and rebase to
    openssl-TESTS-Disable-default-provider-crypto-policies.patch
  * Patches removed in the update:
  - openssl-Add_support_for_Windows_CA_certificate_store.patch
  - openssl-ec-56-bit-Limb-Solinas-Strategy-for-secp384r1.patch
  - openssl-ec-Use-static-linkage-on-nistp521-felem_-square-mul-.patch
  - openssl-ec-powerpc64le-Add-asm-implementation-of-felem_-squa.patch
  - openssl-ecc-Remove-extraneous-parentheses-in-secp384r1.patch
  - openssl-powerpc-ecc-Fix-stack-allocation-secp384r1-asm.patch
  - openssl-CVE-2024-41996.patch
  - openssl-CVE-2023-50782.patch
  - openssl-CVE-2024-9143.patch
  * Patches rebased:
  - openssl-3-use-include-directive.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-DEFAULT_SUSE_cipher.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Force-FIPS.patch
  - openssl-load-legacy-provider.patch
  - openssl-no-html-docs.patch
  - openssl-pkgconfig.patch
  - openssl-ppc64-config.patch
  - openssl-truststore.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116800">- Remove the hardcoded DEFAULT_SUSE cipherlist selection.
  * Remove openssl-DEFAULT_SUSE_cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116801">- Update to 3.2.3:
  * Changes between 3.2.2 and 3.2.3:
  - Fixed possible denial of service in X.509 name checks. [CVE-2024-6119]
  - Fixed possible buffer overread in SSL_select_next_proto(). [CVE-2024-5535]
  * Changes between 3.2.1 and 3.2.2:
  - Fixed potential use after free after SSL_free_buffers() is called. [CVE-2024-4741]
  - Fixed an issue where checking excessively long DSA keys or parameters may
    be very slow. [CVE-2024-4603]
  - Improved EC/DSA nonce generation routines to avoid bias and timing
    side channel leaks.
  - Fixed an issue where some non-default TLS server configurations can cause
    unbounded memory growth when processing TLSv1.3 sessions. [CVE-2024-2511]
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded. This can be used on platforms
    where using atexit() from shared libraries causes crashes on exit.
  - Fixed bug where SSL_export_keying_material() could not be used with QUIC
    connections.
  * Add openssl-skip-quic-pairwise.patch to adapt the pairwise tests.
  * Merge openssl-FIPS-release_num_in_version_string.patch into
    openssl-FIPS-services-minimize.patch
  * Rebase patches:
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Remove-EC-curves.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-3-use-include-directive.patch
  * Remove not needed patches:
  - openssl-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  - openssl-3-FIPS-PCT_rsa_keygen.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730462400">- Support MSA 12 SHA3 on s390x [jsc#PED-10280]
  * Add openssl-3-add_EVP_DigestSqueeze_api.patch
  * Add openssl-3-support-multiple-sha3_squeeze_s390x.patch
  * Add openssl-3-add-xof-state-handling-s3_absorb.patch
  * Add openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  * Add openssl-3-fix-state-handling-sha3_final_s390x.patch
  * Add openssl-3-fix-state-handling-shake_final_s390x.patch
  * Add openssl-3-fix-state-handling-keccak_final_s390x.patch
  * Add openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  * Add openssl-3-add-defines-CPACF-funcs.patch
  * Add openssl-3-add-hw-acceleration-hmac.patch
  * Add openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  * Add openssl-3-fix-s390x_sha3_absorb.patch
  * Add openssl-3-fix-s390x_shake_squeeze.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808000">- Support MSA 10 XTS on s390x [jsc#PED-10273]
  * s390x: Add hardware acceleration for full AES-XTS
  * Add openssl-3-hw-acceleration-aes-xts-s390x.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808001">- Support MSA 11 HMAC on s390x [jsc#PED-10274]
  * Add openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  * Add openssl-3-fix-hmac-digest-detection-s390x.patch
  * Add openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730980800">- Add missing fixes for SHA3_squeeze and quic_multistream_test on
  pcc64 arch. [jsc#PED-10280]
  * Added openssl-3-fix-sha3-squeeze-ppc64.patch
  * Added openssl-3-fix-quic_multistream_test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1731412800">- Do not use HASHBANGPERL to avoid introducing a dependency on the
  perl-base package. [bsc#1233235]</changelog>
  <changelog author="pmonreal@suse.com" date="1734436800">- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
  - openssl-3-use-include-directive.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1738238400">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Security fix: [bsc#1236599, CVE-2024-12797]
  * RFC7250 handshakes with unauthenticated servers don't abort as
    expected.
  * Add openssl-CVE-2024-12797.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1746014400">- Security fix: [bsc#1240366, CVE-2025-27587]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
  <changelog author="mls@suse.de" date="1751371200">- Backport mdless cms signing support [jsc#PED-12895]
  * Add openssl-3-support-mdless-cms.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- FIPS: Fix EMS in crypto-policies FIPS:NO-ENFORCE-EMS
  * [bsc#1230959, bsc#1232326, bsc#1231748, bsc#1246428]
  * Add patch openssl-FIPS-fix-EMS-support.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1753876800">- Increase limit for CRL download [bsc#1247148, bsc#1247144]
  * Add openssl-3-large-CRLs.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1759233600">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl3-CVE-2025-9230.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1768824000">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795]
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * Stack buffer overflow in CMS AuthEnvelopedData parsing
  - openssl-CVE-2025-15467.patch [bsc#1256830, CVE-2025-15467]
  - openssl-CVE-2025-15467-comments.patch
  - openssl-CVE-2025-15467-test.patch</changelog>
</package>
<package pkgid="d6f49a2dbdb78068efb2f696358998c815535b8ed6f7643bbf3370c20c2a3562" name="libopenssl3-32bit" arch="x86_64">
  <version epoch="0" ver="3.2.3" rel="150700.5.31.1"/>
  <changelog author="pmonreal@suse.com" date="1730116800">- Remove the hardcoded DEFAULT_SUSE cipherlist selection.
  * Remove openssl-DEFAULT_SUSE_cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116801">- Update to 3.2.3:
  * Changes between 3.2.2 and 3.2.3:
  - Fixed possible denial of service in X.509 name checks. [CVE-2024-6119]
  - Fixed possible buffer overread in SSL_select_next_proto(). [CVE-2024-5535]
  * Changes between 3.2.1 and 3.2.2:
  - Fixed potential use after free after SSL_free_buffers() is called. [CVE-2024-4741]
  - Fixed an issue where checking excessively long DSA keys or parameters may
    be very slow. [CVE-2024-4603]
  - Improved EC/DSA nonce generation routines to avoid bias and timing
    side channel leaks.
  - Fixed an issue where some non-default TLS server configurations can cause
    unbounded memory growth when processing TLSv1.3 sessions. [CVE-2024-2511]
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded. This can be used on platforms
    where using atexit() from shared libraries causes crashes on exit.
  - Fixed bug where SSL_export_keying_material() could not be used with QUIC
    connections.
  * Add openssl-skip-quic-pairwise.patch to adapt the pairwise tests.
  * Merge openssl-FIPS-release_num_in_version_string.patch into
    openssl-FIPS-services-minimize.patch
  * Rebase patches:
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Remove-EC-curves.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-3-use-include-directive.patch
  * Remove not needed patches:
  - openssl-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  - openssl-3-FIPS-PCT_rsa_keygen.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730462400">- Support MSA 12 SHA3 on s390x [jsc#PED-10280]
  * Add openssl-3-add_EVP_DigestSqueeze_api.patch
  * Add openssl-3-support-multiple-sha3_squeeze_s390x.patch
  * Add openssl-3-add-xof-state-handling-s3_absorb.patch
  * Add openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  * Add openssl-3-fix-state-handling-sha3_final_s390x.patch
  * Add openssl-3-fix-state-handling-shake_final_s390x.patch
  * Add openssl-3-fix-state-handling-keccak_final_s390x.patch
  * Add openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  * Add openssl-3-add-defines-CPACF-funcs.patch
  * Add openssl-3-add-hw-acceleration-hmac.patch
  * Add openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  * Add openssl-3-fix-s390x_sha3_absorb.patch
  * Add openssl-3-fix-s390x_shake_squeeze.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808000">- Support MSA 10 XTS on s390x [jsc#PED-10273]
  * s390x: Add hardware acceleration for full AES-XTS
  * Add openssl-3-hw-acceleration-aes-xts-s390x.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808001">- Support MSA 11 HMAC on s390x [jsc#PED-10274]
  * Add openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  * Add openssl-3-fix-hmac-digest-detection-s390x.patch
  * Add openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730980800">- Add missing fixes for SHA3_squeeze and quic_multistream_test on
  pcc64 arch. [jsc#PED-10280]
  * Added openssl-3-fix-sha3-squeeze-ppc64.patch
  * Added openssl-3-fix-quic_multistream_test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1731412800">- Do not use HASHBANGPERL to avoid introducing a dependency on the
  perl-base package. [bsc#1233235]</changelog>
  <changelog author="pmonreal@suse.com" date="1734436800">- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
  - openssl-3-use-include-directive.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1738238400">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Security fix: [bsc#1236599, CVE-2024-12797]
  * RFC7250 handshakes with unauthenticated servers don't abort as
    expected.
  * Add openssl-CVE-2024-12797.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1746014400">- Security fix: [bsc#1240366, CVE-2025-27587]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
  <changelog author="mls@suse.de" date="1751371200">- Backport mdless cms signing support [jsc#PED-12895]
  * Add openssl-3-support-mdless-cms.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- FIPS: Fix EMS in crypto-policies FIPS:NO-ENFORCE-EMS
  * [bsc#1230959, bsc#1232326, bsc#1231748, bsc#1246428]
  * Add patch openssl-FIPS-fix-EMS-support.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1753876800">- Increase limit for CRL download [bsc#1247148, bsc#1247144]
  * Add openssl-3-large-CRLs.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1759233600">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl3-CVE-2025-9230.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1768824000">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795]
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * Stack buffer overflow in CMS AuthEnvelopedData parsing
  - openssl-CVE-2025-15467.patch [bsc#1256830, CVE-2025-15467]
  - openssl-CVE-2025-15467-comments.patch
  - openssl-CVE-2025-15467-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1774526400">- Security fixes:
  * CVE-2026-28387: Potential use-after-free in DANE client code
    (bsc#1260441)
  * CVE-2026-28388: NULL Pointer Dereference When Processing a
    Delta (bsc#1260442)
  * CVE-2026-28389: Possible NULL dereference when processing CMS
    KeyAgreeRecipientInfo (bsc#1260443)
  * CVE-2026-31789: Heap buffer overflow in hexadecimal conversion
    (bsc#1260444)
  * CVE-2026-31790: Incorrect failure handling in RSA KEM RSASVE
    encapsulation (bsc#1260445)
  * NULL pointer dereference when processing an OCSP response
    (bsc#1260446)
  * Add patches: openssl-CVE-2026-28387.patch
    openssl-CVE-2026-28388.patch openssl-CVE-2026-28388-tests.patch
    openssl-CVE-2026-28389.patch openssl-CVE-2026-31789.patch
    openssl-CVE-2026-31790.patch openssl-CVE-2026-31790-tests.patch
    openssl-NULL-pointer-dereference-in-ocsp_find_signer_sk.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1775649600">- Security fix:
  * CVE-2026-28390: NULL pointer dereference during processing of a crafted
    CMS EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678)
  * Add openssl-CVE-2026-28390.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1775822400">- Enable MD2 in legacy provider (jsc#PED-15724)</changelog>
</package>
<package pkgid="b3f541e7e0c5eeb6cc0c39d77e10d7eed352c5b011a5a2cfa3ef3c9bf9421acb" name="libopenssl3-32bit" arch="x86_64">
  <version epoch="0" ver="3.2.3" rel="150700.5.5.1"/>
  <changelog author="pmonreal@suse.com" date="1721649600">- Build with no-afalgeng [bsc#1226463]</changelog>
  <changelog author="abergmann@suse.com" date="1724328000">- Security fix: [bsc#1229465, CVE-2024-6119]
  * possible denial of service in X.509 name checks
  * openssl-CVE-2024-6119.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1727265600">- Security fix: [bsc#1230698, CVE-2024-41996]
  * Validating the order of the public keys in the Diffie-Hellman
    Key Agreement Protocol, when an approved safe prime is used.
  * Added openssl-3-CVE-2024-41996.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1220262, CVE-2023-50782]
  * Implicit rejection in PKCS#1 v1.5
  * Add openssl-CVE-2023-50782.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166401">- Security fix: [bsc#1231741, CVE-2024-9143]
  * Low-level invalid GF(2^m) parameters lead to OOB memory access
  * Add openssl-CVE-2024-9143.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729512000">- Update to 3.1.7:
  * Major changes between OpenSSL 3.1.6 and OpenSSL 3.1.7 [3 Sep 2024]
  - Fixed possible denial of service in X.509 name checks (CVE-2024-6119)
  - Fixed possible buffer overread in SSL_select_next_proto()
    (CVE-2024-5535)
  * Major changes between OpenSSL 3.1.5 and OpenSSL 3.1.6 [4 Jun 2024]
  - Fixed potential use after free after SSL_free_buffers() is
    called (CVE-2024-4741)
  - Fixed an issue where checking excessively long DSA keys or
    parameters may be very slow (CVE-2024-4603)
  - Fixed unbounded memory growth with session handling in TLSv1.3
    (CVE-2024-2511)
  * Major changes between OpenSSL 3.1.4 and OpenSSL 3.1.5 [30 Jan 2024]
  - Fixed PKCS12 Decoding crashes (CVE-2024-0727)
  - Fixed Excessive time spent checking invalid RSA public keys
    [CVE-2023-6237)
  - Fixed POLY1305 MAC implementation corrupting vector registers
    on PowerPC CPUs which support PowerISA 2.07 (CVE-2023-6129)
  - Fix excessive time spent in DH check / generation with large
    Q parameter value (CVE-2023-5678)
  * Update openssl.keyring with BA5473A2B0587B07FB27CF2D216094DFD0CB81EF
  * Rebase patches:
  - openssl-Force-FIPS.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-CVE-2023-50782.patch
  * Remove patches fixed in the update:
  - openssl-Improve-performance-for-6x-unrolling-with-vpermxor-i.patch
  - openssl-CVE-2024-6119.patch openssl-CVE-2024-5535.patch
  - openssl-CVE-2024-4741.patch openssl-CVE-2024-4603.patch
  - openssl-CVE-2024-2511.patch openssl-CVE-2024-0727.patch
  - openssl-CVE-2023-6237.patch openssl-CVE-2023-6129.patch
  - openssl-CVE-2023-5678.patch openssl-3-CVE-2024-41996.patch
  - openssl-Enable-BTI-feature-for-md5-on-aarch64.patch
  - openssl-Fix-EVP_PKEY_CTX_add1_hkdf_info-behavior.patch
  - openssl-Handle-empty-param-in-EVP_PKEY_CTX_add1_hkdf_info.patch
  - reproducible.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729857600">- Update to 3.2.0:
  * Changes between 3.1.x and 3.2.0:
  - Fix excessive time spent in DH check/ generation with large Q parameter
    value. [CVE-2023-5678]
  - The BLAKE2b hash algorithm supports a configurable output length
    by setting the "size" parameter.
  - Added a function to delete objects from store by URI - OSSL_STORE_delete()
    and the corresponding provider-storemgmt API function OSSL_FUNC_store_delete().
  - Added OSSL_FUNC_store_open_ex() provider-storemgmt API function to pass
    a passphrase callback when opening a store.
  - Changed the default salt length used by PBES2 KDF's (PBKDF2 and scrypt)
    from 8 bytes to 16 bytes.
  - Changed the default value of the 'ess_cert_id_alg' configuration
    option which is used to calculate the TSA's public key certificate
    identifier. The default algorithm is updated to be sha256 instead of sha1.
  - Added optimization for SM2 algorithm on aarch64. A new configure option
    'no-sm2-precomp' has been added to disable the precomputed table.
  - Added client side support for QUIC
  - Added secp384r1 implementation using Solinas' reduction to improve
    speed of the NIST P-384 elliptic curve. To enable the implementation
    the build option 'enable-ec_nistp_64_gcc_128' must be used.
  - Improved RFC7468 compliance of the asn1parse command.
  - Added SHA256/192 algorithm support.
  - Added support for securely getting root CA certificate update in CMP.
  - Improved contention on global write locks by using more read locks where
    appropriate.
  - Improved performance of OSSL_PARAM lookups in performance critical
    provider functions.
  - Added the SSL_get0_group_name() function to provide access to the
    name of the group used for the TLS key exchange.
  - Provide a new configure option 'no-http' that can be used to disable the
    HTTP support. Provide new configure options 'no-apps' and 'no-docs' to
    disable building the openssl command line application and the documentation.
  - Provide a new configure option 'no-ecx' that can be used to disable the
    X25519, X448, and EdDSA support.
  - When multiple OSSL_KDF_PARAM_INFO parameters are passed to
    the EVP_KDF_CTX_set_params() function they are now concatenated not just
    for the HKDF algorithm but also for SSKDF and X9.63 KDF algorithms.
  - Added OSSL_FUNC_keymgmt_im/export_types_ex() provider functions that get
    the provider context as a parameter.
  - TLS round-trip time calculation was added by a Brigham Young University
    Capstone team partnering with Sandia National Laboratories. A new function
    in ssl_lib titled SSL_get_handshake_rtt will calculate and retrieve this
    value.
  - Added the "-quic" option to s_client to enable connectivity to QUIC servers.
    QUIC requires the use of ALPN, so this must be specified via the "-alpn"
    option. Use of the "advanced" s_client command command via the "-adv" option
    is recommended.
  - Added an "advanced" command mode to s_client. Use this with the "-adv" option.
  - Add Raw Public Key (RFC7250) support.
  - Added support for modular exponentiation and CRT offloading for the
    S390x architecture.
  - Added further assembler code for the RISC-V architecture.
  - Added EC_GROUP_to_params() which creates an OSSL_PARAM array
    from a given EC_GROUP.
  - Improved support for non-default library contexts and property queries
    when parsing PKCS#12 files.
  - Implemented support for all five instances of EdDSA from RFC8032:
    Ed25519, Ed25519ctx, Ed25519ph, Ed448, and Ed448ph.
    The streaming is not yet supported for the HashEdDSA variants
    (Ed25519ph and Ed448ph).
  - Added SM4 optimization for ARM processors using ASIMD and AES HW instructions.
  - Implemented SM4-XTS support.
  - Added platform-agnostic OSSL_sleep() function.
  - Implemented deterministic ECDSA signatures (RFC6979) support.
  - Implemented AES-GCM-SIV (RFC8452) support.
  - Added support for pluggable (provider-based) TLS signature algorithms.
    This enables TLS 1.3 authentication operations with algorithms embedded
    in providers not included by default in OpenSSL. In combination with
    the already available pluggable KEM and X.509 support, this enables
    for example suitable providers to deliver post-quantum or quantum-safe
    cryptography to OpenSSL users.
  - Added support for pluggable (provider-based) CMS signature algorithms.
    This enables CMS sign and verify operations with algorithms embedded
    in providers not included by default in OpenSSL.
  - Implemented HPKE DHKEM support in providers used by HPKE (RFC9180) API.
  - Add support for certificate compression (RFC8879), including
    library support for Brotli and Zstandard compression.
  - Add the ability to add custom attributes to PKCS12 files. Add a new API
    PKCS12_create_ex2, identical to the existing PKCS12_create_ex but allows
    for a user specified callback and optional argument.
    Added a new PKCS12_SAFEBAG_set0_attr, which allows for a new attr to be
    added to the existing STACK_OF attrs.
  - Major refactor of the libssl record layer.
  - Add a mac salt length option for the pkcs12 command.
  - Add more SRTP protection profiles from RFC8723 and RFC8269.
  - Extended Kernel TLS (KTLS) to support TLS 1.3 receive offload.
  - Add support for TCP Fast Open (RFC7413) to macOS, Linux, and FreeBSD where
    supported and enabled.
  - Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489)
    to the list of ciphersuites providing Perfect Forward Secrecy as
    required by SECLEVEL &gt;= 3.
  - Add new SSL APIs to aid in efficiently implementing TLS/SSL fingerprinting.
    The SSL_CTRL_GET_IANA_GROUPS control code, exposed as the
    SSL_get0_iana_groups() function-like macro, retrieves the list of
    supported groups sent by the peer.
  - Fixed PEM_write_bio_PKCS8PrivateKey() and PEM_write_bio_PKCS8PrivateKey_nid()
    to make it possible to use empty passphrase strings.
  - The PKCS12_parse() function now supports MAC-less PKCS12 files.
  - Added ASYNC_set_mem_functions() and ASYNC_get_mem_functions() calls to be able
    to change functions used for allocating the memory of asynchronous call stack.
  - Added support for signed BIGNUMs in the OSSL_PARAM APIs.
  - A failure exit code is returned when using the openssl x509 command to check
    certificate attributes and the checks fail.
  - The default SSL/TLS security level has been changed from 1 to 2. RSA,
    DSA and DH keys of 1024 bits and above and less than 2048 bits and ECC keys
    of 160 bits and above and less than 224 bits were previously accepted by
    default but are now no longer allowed. By default TLS compression was
    already disabled in previous OpenSSL versions. At security level 2 it cannot
    be enabled.
  - The SSL_CTX_set_cipher_list family functions now accept ciphers using their
    IANA standard names.
  - The PVK key derivation function has been moved from b2i_PVK_bio_ex() into
    the legacy crypto provider as an EVP_KDF. Applications requiring this KDF
    will need to load the legacy crypto provider.
  - CCM8 cipher suites in TLS have been downgraded to security level zero
    because they use a short authentication tag which lowers their strength.
  - Subject or issuer names in X.509 objects are now displayed as UTF-8 strings
    by default. Also spaces surrounding '=' in DN output are removed.
  - Add X.509 certificate codeSigning purpose and related checks on key usage and
    extended key usage of the leaf certificate according to the CA/Browser Forum.
  - The 'x509', 'ca', and 'req' apps now produce X.509 v3 certificates.
    The '-x509v1' option of 'req' prefers generation of X.509 v1 certificates.
    'X509_sign()' and 'X509_sign_ctx()' make sure that the certificate has
    X.509 version 3 if the certificate information includes X.509 extensions.
  - Fix and extend certificate handling and the apps 'x509', 'verify' etc.
    such as adding a trace facility for debugging certificate chain building.
  - Various fixes and extensions to the CMP+CRMF implementation and the 'cmp' app
    in particular supporting requests for central key generation, generalized
    polling, and various types of genm/genp exchanges defined in CMP Updates.
  - Fixes and extensions to the HTTP client and to the HTTP server in 'apps/'
    like correcting the TLS and proxy support and adding tracing for debugging.
  - Extended the CMS API for handling 'CMS_SignedData' and 'CMS_EnvelopedData'.
  - 'CMS_add0_cert()' and 'CMS_add1_cert()' no longer throw an error if
    a certificate to be added is already present. 'CMS_sign_ex()' and
    'CMS_sign()' now ignore any duplicate certificates in their 'certs' argument
    and no longer throw an error for them.
  - Added BIO_s_dgram_pair() and BIO_s_dgram_mem() that provide memory-based
    BIOs with datagram semantics and support for BIO_sendmmsg() and BIO_recvmmsg()
    calls. They can be used as the transport BIOs for QUIC.
  - Add new BIO_sendmmsg() and BIO_recvmmsg() BIO methods which allow
    sending and receiving multiple messages in a single call. An implementation
    is provided for BIO_dgram. For further details, see BIO_sendmmsg(3).
  - Support for loading root certificates from the Windows certificate store
    has been added.
  - Enable KTLS with the TLS 1.3 CCM mode ciphersuites. Note that some linux
    kernel versions that support KTLS have a known bug in CCM processing. That
    has been fixed in stable releases starting from 5.4.164, 5.10.84, 5.15.7,
    and all releases since 5.16. KTLS with CCM ciphersuites should be only used
    on these releases.
  - Added '-ktls' option to 's_server' and 's_client' commands to enable the
    KTLS support.
  - Zerocopy KTLS sendfile() support on Linux.
  - The OBJ_ calls are now thread safe using a global lock.
  - New parameter '-digest' for openssl cms command allowing signing
    pre-computed digests and new CMS API functions supporting that
    functionality.
  - OPENSSL_malloc() and other allocation functions now raise errors on
    allocation failures. The callers do not need to explicitly raise errors
    unless they want to for tracing purposes.
  - Added support for Brainpool curves in TLS-1.3.
  - Support for Argon2d, Argon2i, Argon2id KDFs has been added along with
    a basic thread pool implementation for select platforms.</changelog>
  <changelog author="pmonreal@suse.com" date="1729857601">- Update to 3.2.1:
  * Changes between 3.2.0 and 3.2.1:
  - A file in PKCS12 format can contain certificates and keys and may come from
    an untrusted source. The PKCS12 specification allows certain fields to be
    NULL, but OpenSSL did not correctly check for this case. [CVE-2024-0727]
  - When function EVP_PKEY_public_check() is called on RSA public keys,
    a computation is done to confirm that the RSA modulus, n, is composite.
    For valid RSA keys, n is a product of two or more large primes and this
    computation completes quickly. However, if n is an overly large prime,
    then this computation would take a long time. [CVE-2023-6237]
  - Restore the encoding of SM2 PrivateKeyInfo and SubjectPublicKeyInfo to
    have the contained AlgorithmIdentifier.algorithm set to id-ecPublicKey
    rather than SM2.
  - The POLY1305 MAC (message authentication code) implementation in OpenSSL
    for PowerPC CPUs saves the contents of vector registers in different
    order than they are restored. [CVE-2023-6129]
  - Disable building QUIC server utility when OpenSSL is configured with 'no-apps'.
  * The openssl-crypto-policies-support.patch has been merged into
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Rename openssl-Disable-default-provider-for-test-suite.patch and rebase to
    openssl-TESTS-Disable-default-provider-crypto-policies.patch
  * Patches removed in the update:
  - openssl-Add_support_for_Windows_CA_certificate_store.patch
  - openssl-ec-56-bit-Limb-Solinas-Strategy-for-secp384r1.patch
  - openssl-ec-Use-static-linkage-on-nistp521-felem_-square-mul-.patch
  - openssl-ec-powerpc64le-Add-asm-implementation-of-felem_-squa.patch
  - openssl-ecc-Remove-extraneous-parentheses-in-secp384r1.patch
  - openssl-powerpc-ecc-Fix-stack-allocation-secp384r1-asm.patch
  - openssl-CVE-2024-41996.patch
  - openssl-CVE-2023-50782.patch
  - openssl-CVE-2024-9143.patch
  * Patches rebased:
  - openssl-3-use-include-directive.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-DEFAULT_SUSE_cipher.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Force-FIPS.patch
  - openssl-load-legacy-provider.patch
  - openssl-no-html-docs.patch
  - openssl-pkgconfig.patch
  - openssl-ppc64-config.patch
  - openssl-truststore.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116800">- Remove the hardcoded DEFAULT_SUSE cipherlist selection.
  * Remove openssl-DEFAULT_SUSE_cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116801">- Update to 3.2.3:
  * Changes between 3.2.2 and 3.2.3:
  - Fixed possible denial of service in X.509 name checks. [CVE-2024-6119]
  - Fixed possible buffer overread in SSL_select_next_proto(). [CVE-2024-5535]
  * Changes between 3.2.1 and 3.2.2:
  - Fixed potential use after free after SSL_free_buffers() is called. [CVE-2024-4741]
  - Fixed an issue where checking excessively long DSA keys or parameters may
    be very slow. [CVE-2024-4603]
  - Improved EC/DSA nonce generation routines to avoid bias and timing
    side channel leaks.
  - Fixed an issue where some non-default TLS server configurations can cause
    unbounded memory growth when processing TLSv1.3 sessions. [CVE-2024-2511]
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded. This can be used on platforms
    where using atexit() from shared libraries causes crashes on exit.
  - Fixed bug where SSL_export_keying_material() could not be used with QUIC
    connections.
  * Add openssl-skip-quic-pairwise.patch to adapt the pairwise tests.
  * Merge openssl-FIPS-release_num_in_version_string.patch into
    openssl-FIPS-services-minimize.patch
  * Rebase patches:
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Remove-EC-curves.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-3-use-include-directive.patch
  * Remove not needed patches:
  - openssl-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  - openssl-3-FIPS-PCT_rsa_keygen.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730462400">- Support MSA 12 SHA3 on s390x [jsc#PED-10280]
  * Add openssl-3-add_EVP_DigestSqueeze_api.patch
  * Add openssl-3-support-multiple-sha3_squeeze_s390x.patch
  * Add openssl-3-add-xof-state-handling-s3_absorb.patch
  * Add openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  * Add openssl-3-fix-state-handling-sha3_final_s390x.patch
  * Add openssl-3-fix-state-handling-shake_final_s390x.patch
  * Add openssl-3-fix-state-handling-keccak_final_s390x.patch
  * Add openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  * Add openssl-3-add-defines-CPACF-funcs.patch
  * Add openssl-3-add-hw-acceleration-hmac.patch
  * Add openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  * Add openssl-3-fix-s390x_sha3_absorb.patch
  * Add openssl-3-fix-s390x_shake_squeeze.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808000">- Support MSA 10 XTS on s390x [jsc#PED-10273]
  * s390x: Add hardware acceleration for full AES-XTS
  * Add openssl-3-hw-acceleration-aes-xts-s390x.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808001">- Support MSA 11 HMAC on s390x [jsc#PED-10274]
  * Add openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  * Add openssl-3-fix-hmac-digest-detection-s390x.patch
  * Add openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730980800">- Add missing fixes for SHA3_squeeze and quic_multistream_test on
  pcc64 arch. [jsc#PED-10280]
  * Added openssl-3-fix-sha3-squeeze-ppc64.patch
  * Added openssl-3-fix-quic_multistream_test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1731412800">- Do not use HASHBANGPERL to avoid introducing a dependency on the
  perl-base package. [bsc#1233235]</changelog>
  <changelog author="pmonreal@suse.com" date="1734436800">- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
  - openssl-3-use-include-directive.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1738238400">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Security fix: [bsc#1236599, CVE-2024-12797]
  * RFC7250 handshakes with unauthenticated servers don't abort as
    expected.
  * Add openssl-CVE-2024-12797.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1746014400">- Security fix: [bsc#1240366]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
</package>
<package pkgid="cf00139a6d3f66fe48b53fa9bf7e4df457dcc2e2c6b0ae31ba0006ab3811e7e1" name="libosinfo" arch="src">
  <version epoch="0" ver="1.12.0" rel="150700.3.3.2"/>
  <changelog author="carnold@suse.com" date="1562587200">- bsc#1140749 - VUL-1: CVE-2019-13313: libosinfo: osinfo-install-
  script option leaks password via command line argument
  CVE-2019-13313-add-new-option-so-users-can-set-config-from-file.patch
  CVE-2019-13313-pass-username-password-via-config-file.patch</changelog>
  <changelog author="carnold@suse.com" date="1564142400">- Update to version 1.6.0
  Changes in this release include:
  * Add API to get the kernel URL argument for an OsinfoOs
  * Improve detection of PPC ISOs
  * Add API to create an OsinfoMedia from location using OsinfoMediaDetectFlags
  * Add API to get whether a media is bootable or not
  * Add OsinfoTree treeinfo properties
  * Add API to identify an OsinfoTree
  * Deprecate API to guess an OsinfoOs from OsinfoTree
  * Add --config-file to osinfo-install-script tool
  * Deprecate --config usage for user &amp; admin passwords on osinfo-install-script tool
  * Add API to generate an install-script and its command-line for OsinfoTree
  * Use libsoup for "http://" &amp; "https://" requests for creating both OsinfoMedia &amp; OsinfoTree
  * Drop GVFS dependency
  * Add OsinfoOs property to OsinfoTree
- Drop
  CVE-2019-13313-add-new-option-so-users-can-set-config-from-file.patch
  CVE-2019-13313-pass-username-password-via-config-file.patch</changelog>
  <changelog author="carnold@suse.com" date="1575288000">- Update to version 1.7.0
  Changes in this release include:
  * Add API to expose a device driver "priority"
  * Improve media detection when using "volume-size" to distinguish medias
  * General improvements on OsinfoList APIs to avoid unsafe access
  * Minor POD fixes
  * Switch to meson build system
  * Add API to expose "firmware" support on OsinfoOS
  * Drop "env" type support from osinfo-detect
  * Print the architecture of the detected tree / media on osinfo-detect
  * Add API to create an OsinfoTree from a treeinfo file</changelog>
  <changelog author="carnold@suse.com" date="1575460800">- Update to version 1.7.1
  Changes in this release include:
  * Fix usage of versioned symbols
  * MinGW spec file fixes and improvements
  * Fix pci.ids and usb.ids installation</changelog>
  <changelog author="dimstar@opensuse.org" date="1577448000">- BuildRequire and Require hwdata: usb.ids and pci.ids are shipped
  and maintained by this package. Prior to version 1.7.x, libosinfo
  shipped own, outdated copies (boo#1159838).</changelog>
  <changelog author="carnold@suse.com" date="1578484800">- Drop ids.tar.bz2 in favor of using hwdata. (boo#1159838)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580817600">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="carnold@suse.com" date="1591012800">- Update to version 1.8.0
  Changes in this release include:
  * Several CI improvements
  * Several release scripts improvements
  * Several translations improvements
  * Several syntax-check improvements
  * Code cleanup in order to modernize the GObject usage
  * Add API to get whether a firmware is supported or not
  * Add API to get "cloud-image-username"</changelog>
  <changelog author="dimstar@opensuse.org" date="1597752000">- Explicitly call %meson_build in the %build section: It was never
  needed (but should have been there) before as the %meson_install
  macro would perform a project rebuild. However, most recent
  versions of meson have changed the %meson_install macro to use
  `--no-rebuild`, exposing then this issue on our spec file.</changelog>
  <changelog author="carnold@suse.com" date="1614686400">- Update to version 1.9.0
  Changes in this release include:
  * Improve on the osinfo-tools' and osinfo-detect's help
  * Several CI improvements
  * Several translations improvements
  * Improve on debuggability of the loader code
  * Fix build when using clang</changelog>
  <changelog author="carnold@suse.com" date="1646136000">- Update to version 1.10.0
  Changes in this release include:
  * Add API for resolving multiple tree matches
  * Add API for resolving multiple media matches
  * Add API to match between two OsinfoTree
  * Add API to match between two OsinfoMedia
  * Add API to get a complete list of firmwares
  * Add missing documentation of osinfo_os_add_firmware()
  * Add release status to osinfo-query
  * Add --all flag to all tools to report all matches
  * Fix hiding database entries
  * Adapt to libsoup3 which is now preferred over libsoup2
  * Several CI improvements
  * Several translations improvements</changelog>
  <changelog author="carnold@suse.com" date="1648641600">- bsc#1197769 - FTBFS: libosinfo won't compile on SP4
  libosinfo.spec</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661947200">- Add 3a0fef72.patch: build: Add option to select libsoup ABI.
  Following this, add conditional pkgconfig(libsoup-3.0)
  BuildRequires.
- Modernize spec, use ldconfig_scriptlets macro for post(un)
  handling, package COPYING with license macro.</changelog>
  <changelog author="carnold@suse.com" date="1664884800">- jsc#PED-2113 [Virt Tools] Refresh Virtualization Tools for Xen
  and KVM Management</changelog>
  <changelog author="carnold@suse.com" date="1699876800">- Update to version 1.11.0 (jsc#PED-6305)
  Changes in this release include:
  * Several minor memory leak fixes
  * Several CI improvements
  * Several translations improvements
- Drop 3a0fef72.patch as it is now part of the tarball</changelog>
  <changelog author="dimstar@opensuse.org" date="1705406400">- Own /usr/share/gtk-doc: glib no longer uses gtk-doc and as a
  consequence cannot be held responsible to deliver that basic
  directory structure.</changelog>
  <changelog author="carnold@suse.com" date="1709553600">- bsc#1220228 - virt-manager crashes when its viewer is opened on a
  running guest that uses spice graphics
  virt-manager uses both libosinfo and spice-gtk. spice-gtk is now
  built to use libsoup 3.0 but libosinfo was still using
  libsoup 2.4. Prefer libsoup 3.0 over libsoup 2.4 for Tumbleweed
  and newer SLE versions.</changelog>
  <changelog author="christophe@krop.fr" date="1716724800">- Add upstream change:
  * 0001-osinfo-Make-xmlError-struct-constant-in-propagate_li.patch</changelog>
  <changelog author="carnold@suse.com" date="1733140800">- Update to version 1.12.0 (jsc#PED-8910)
  * Some memory leak fixes
  * Adapt to change in libxml2
  * Several CI improvements
  * Several translations improvements
- Drop 0001-osinfo-Make-xmlError-struct-constant-in-propagate_li.patch</changelog>
  <changelog author="carnold@suse.com" date="1773316800">- jsc#PED-14636 - UEFI as default for new VMs
  Add-osinfo_firmware_is_recommended.patch</changelog>
</package>
<package pkgid="fcd557e22c56450756fe0fc45847bc47ed3fc09fb8da6994d9d67ea1c94737a0" name="libosinfo" arch="x86_64">
  <version epoch="0" ver="1.12.0" rel="150700.3.3.2"/>
  <changelog author="carnold@suse.com" date="1562587200">- bsc#1140749 - VUL-1: CVE-2019-13313: libosinfo: osinfo-install-
  script option leaks password via command line argument
  CVE-2019-13313-add-new-option-so-users-can-set-config-from-file.patch
  CVE-2019-13313-pass-username-password-via-config-file.patch</changelog>
  <changelog author="carnold@suse.com" date="1564142400">- Update to version 1.6.0
  Changes in this release include:
  * Add API to get the kernel URL argument for an OsinfoOs
  * Improve detection of PPC ISOs
  * Add API to create an OsinfoMedia from location using OsinfoMediaDetectFlags
  * Add API to get whether a media is bootable or not
  * Add OsinfoTree treeinfo properties
  * Add API to identify an OsinfoTree
  * Deprecate API to guess an OsinfoOs from OsinfoTree
  * Add --config-file to osinfo-install-script tool
  * Deprecate --config usage for user &amp; admin passwords on osinfo-install-script tool
  * Add API to generate an install-script and its command-line for OsinfoTree
  * Use libsoup for "http://" &amp; "https://" requests for creating both OsinfoMedia &amp; OsinfoTree
  * Drop GVFS dependency
  * Add OsinfoOs property to OsinfoTree
- Drop
  CVE-2019-13313-add-new-option-so-users-can-set-config-from-file.patch
  CVE-2019-13313-pass-username-password-via-config-file.patch</changelog>
  <changelog author="carnold@suse.com" date="1575288000">- Update to version 1.7.0
  Changes in this release include:
  * Add API to expose a device driver "priority"
  * Improve media detection when using "volume-size" to distinguish medias
  * General improvements on OsinfoList APIs to avoid unsafe access
  * Minor POD fixes
  * Switch to meson build system
  * Add API to expose "firmware" support on OsinfoOS
  * Drop "env" type support from osinfo-detect
  * Print the architecture of the detected tree / media on osinfo-detect
  * Add API to create an OsinfoTree from a treeinfo file</changelog>
  <changelog author="carnold@suse.com" date="1575460800">- Update to version 1.7.1
  Changes in this release include:
  * Fix usage of versioned symbols
  * MinGW spec file fixes and improvements
  * Fix pci.ids and usb.ids installation</changelog>
  <changelog author="dimstar@opensuse.org" date="1577448000">- BuildRequire and Require hwdata: usb.ids and pci.ids are shipped
  and maintained by this package. Prior to version 1.7.x, libosinfo
  shipped own, outdated copies (boo#1159838).</changelog>
  <changelog author="carnold@suse.com" date="1578484800">- Drop ids.tar.bz2 in favor of using hwdata. (boo#1159838)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580817600">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="carnold@suse.com" date="1591012800">- Update to version 1.8.0
  Changes in this release include:
  * Several CI improvements
  * Several release scripts improvements
  * Several translations improvements
  * Several syntax-check improvements
  * Code cleanup in order to modernize the GObject usage
  * Add API to get whether a firmware is supported or not
  * Add API to get "cloud-image-username"</changelog>
  <changelog author="dimstar@opensuse.org" date="1597752000">- Explicitly call %meson_build in the %build section: It was never
  needed (but should have been there) before as the %meson_install
  macro would perform a project rebuild. However, most recent
  versions of meson have changed the %meson_install macro to use
  `--no-rebuild`, exposing then this issue on our spec file.</changelog>
  <changelog author="carnold@suse.com" date="1614686400">- Update to version 1.9.0
  Changes in this release include:
  * Improve on the osinfo-tools' and osinfo-detect's help
  * Several CI improvements
  * Several translations improvements
  * Improve on debuggability of the loader code
  * Fix build when using clang</changelog>
  <changelog author="carnold@suse.com" date="1646136000">- Update to version 1.10.0
  Changes in this release include:
  * Add API for resolving multiple tree matches
  * Add API for resolving multiple media matches
  * Add API to match between two OsinfoTree
  * Add API to match between two OsinfoMedia
  * Add API to get a complete list of firmwares
  * Add missing documentation of osinfo_os_add_firmware()
  * Add release status to osinfo-query
  * Add --all flag to all tools to report all matches
  * Fix hiding database entries
  * Adapt to libsoup3 which is now preferred over libsoup2
  * Several CI improvements
  * Several translations improvements</changelog>
  <changelog author="carnold@suse.com" date="1648641600">- bsc#1197769 - FTBFS: libosinfo won't compile on SP4
  libosinfo.spec</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661947200">- Add 3a0fef72.patch: build: Add option to select libsoup ABI.
  Following this, add conditional pkgconfig(libsoup-3.0)
  BuildRequires.
- Modernize spec, use ldconfig_scriptlets macro for post(un)
  handling, package COPYING with license macro.</changelog>
  <changelog author="carnold@suse.com" date="1664884800">- jsc#PED-2113 [Virt Tools] Refresh Virtualization Tools for Xen
  and KVM Management</changelog>
  <changelog author="carnold@suse.com" date="1699876800">- Update to version 1.11.0 (jsc#PED-6305)
  Changes in this release include:
  * Several minor memory leak fixes
  * Several CI improvements
  * Several translations improvements
- Drop 3a0fef72.patch as it is now part of the tarball</changelog>
  <changelog author="dimstar@opensuse.org" date="1705406400">- Own /usr/share/gtk-doc: glib no longer uses gtk-doc and as a
  consequence cannot be held responsible to deliver that basic
  directory structure.</changelog>
  <changelog author="carnold@suse.com" date="1709553600">- bsc#1220228 - virt-manager crashes when its viewer is opened on a
  running guest that uses spice graphics
  virt-manager uses both libosinfo and spice-gtk. spice-gtk is now
  built to use libsoup 3.0 but libosinfo was still using
  libsoup 2.4. Prefer libsoup 3.0 over libsoup 2.4 for Tumbleweed
  and newer SLE versions.</changelog>
  <changelog author="christophe@krop.fr" date="1716724800">- Add upstream change:
  * 0001-osinfo-Make-xmlError-struct-constant-in-propagate_li.patch</changelog>
  <changelog author="carnold@suse.com" date="1733140800">- Update to version 1.12.0 (jsc#PED-8910)
  * Some memory leak fixes
  * Adapt to change in libxml2
  * Several CI improvements
  * Several translations improvements
- Drop 0001-osinfo-Make-xmlError-struct-constant-in-propagate_li.patch</changelog>
  <changelog author="carnold@suse.com" date="1773316800">- jsc#PED-14636 - UEFI as default for new VMs
  Add-osinfo_firmware_is_recommended.patch</changelog>
</package>
<package pkgid="bd68c38c40be1f914c95e048ddbfda5e39e250a4a8956a229680d4733593dfe8" name="libosinfo-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.12.0" rel="150700.3.3.2"/>
  <changelog author="carnold@suse.com" date="1562587200">- bsc#1140749 - VUL-1: CVE-2019-13313: libosinfo: osinfo-install-
  script option leaks password via command line argument
  CVE-2019-13313-add-new-option-so-users-can-set-config-from-file.patch
  CVE-2019-13313-pass-username-password-via-config-file.patch</changelog>
  <changelog author="carnold@suse.com" date="1564142400">- Update to version 1.6.0
  Changes in this release include:
  * Add API to get the kernel URL argument for an OsinfoOs
  * Improve detection of PPC ISOs
  * Add API to create an OsinfoMedia from location using OsinfoMediaDetectFlags
  * Add API to get whether a media is bootable or not
  * Add OsinfoTree treeinfo properties
  * Add API to identify an OsinfoTree
  * Deprecate API to guess an OsinfoOs from OsinfoTree
  * Add --config-file to osinfo-install-script tool
  * Deprecate --config usage for user &amp; admin passwords on osinfo-install-script tool
  * Add API to generate an install-script and its command-line for OsinfoTree
  * Use libsoup for "http://" &amp; "https://" requests for creating both OsinfoMedia &amp; OsinfoTree
  * Drop GVFS dependency
  * Add OsinfoOs property to OsinfoTree
- Drop
  CVE-2019-13313-add-new-option-so-users-can-set-config-from-file.patch
  CVE-2019-13313-pass-username-password-via-config-file.patch</changelog>
  <changelog author="carnold@suse.com" date="1575288000">- Update to version 1.7.0
  Changes in this release include:
  * Add API to expose a device driver "priority"
  * Improve media detection when using "volume-size" to distinguish medias
  * General improvements on OsinfoList APIs to avoid unsafe access
  * Minor POD fixes
  * Switch to meson build system
  * Add API to expose "firmware" support on OsinfoOS
  * Drop "env" type support from osinfo-detect
  * Print the architecture of the detected tree / media on osinfo-detect
  * Add API to create an OsinfoTree from a treeinfo file</changelog>
  <changelog author="carnold@suse.com" date="1575460800">- Update to version 1.7.1
  Changes in this release include:
  * Fix usage of versioned symbols
  * MinGW spec file fixes and improvements
  * Fix pci.ids and usb.ids installation</changelog>
  <changelog author="dimstar@opensuse.org" date="1577448000">- BuildRequire and Require hwdata: usb.ids and pci.ids are shipped
  and maintained by this package. Prior to version 1.7.x, libosinfo
  shipped own, outdated copies (boo#1159838).</changelog>
  <changelog author="carnold@suse.com" date="1578484800">- Drop ids.tar.bz2 in favor of using hwdata. (boo#1159838)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580817600">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="carnold@suse.com" date="1591012800">- Update to version 1.8.0
  Changes in this release include:
  * Several CI improvements
  * Several release scripts improvements
  * Several translations improvements
  * Several syntax-check improvements
  * Code cleanup in order to modernize the GObject usage
  * Add API to get whether a firmware is supported or not
  * Add API to get "cloud-image-username"</changelog>
  <changelog author="dimstar@opensuse.org" date="1597752000">- Explicitly call %meson_build in the %build section: It was never
  needed (but should have been there) before as the %meson_install
  macro would perform a project rebuild. However, most recent
  versions of meson have changed the %meson_install macro to use
  `--no-rebuild`, exposing then this issue on our spec file.</changelog>
  <changelog author="carnold@suse.com" date="1614686400">- Update to version 1.9.0
  Changes in this release include:
  * Improve on the osinfo-tools' and osinfo-detect's help
  * Several CI improvements
  * Several translations improvements
  * Improve on debuggability of the loader code
  * Fix build when using clang</changelog>
  <changelog author="carnold@suse.com" date="1646136000">- Update to version 1.10.0
  Changes in this release include:
  * Add API for resolving multiple tree matches
  * Add API for resolving multiple media matches
  * Add API to match between two OsinfoTree
  * Add API to match between two OsinfoMedia
  * Add API to get a complete list of firmwares
  * Add missing documentation of osinfo_os_add_firmware()
  * Add release status to osinfo-query
  * Add --all flag to all tools to report all matches
  * Fix hiding database entries
  * Adapt to libsoup3 which is now preferred over libsoup2
  * Several CI improvements
  * Several translations improvements</changelog>
  <changelog author="carnold@suse.com" date="1648641600">- bsc#1197769 - FTBFS: libosinfo won't compile on SP4
  libosinfo.spec</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661947200">- Add 3a0fef72.patch: build: Add option to select libsoup ABI.
  Following this, add conditional pkgconfig(libsoup-3.0)
  BuildRequires.
- Modernize spec, use ldconfig_scriptlets macro for post(un)
  handling, package COPYING with license macro.</changelog>
  <changelog author="carnold@suse.com" date="1664884800">- jsc#PED-2113 [Virt Tools] Refresh Virtualization Tools for Xen
  and KVM Management</changelog>
  <changelog author="carnold@suse.com" date="1699876800">- Update to version 1.11.0 (jsc#PED-6305)
  Changes in this release include:
  * Several minor memory leak fixes
  * Several CI improvements
  * Several translations improvements
- Drop 3a0fef72.patch as it is now part of the tarball</changelog>
  <changelog author="dimstar@opensuse.org" date="1705406400">- Own /usr/share/gtk-doc: glib no longer uses gtk-doc and as a
  consequence cannot be held responsible to deliver that basic
  directory structure.</changelog>
  <changelog author="carnold@suse.com" date="1709553600">- bsc#1220228 - virt-manager crashes when its viewer is opened on a
  running guest that uses spice graphics
  virt-manager uses both libosinfo and spice-gtk. spice-gtk is now
  built to use libsoup 3.0 but libosinfo was still using
  libsoup 2.4. Prefer libsoup 3.0 over libsoup 2.4 for Tumbleweed
  and newer SLE versions.</changelog>
  <changelog author="christophe@krop.fr" date="1716724800">- Add upstream change:
  * 0001-osinfo-Make-xmlError-struct-constant-in-propagate_li.patch</changelog>
  <changelog author="carnold@suse.com" date="1733140800">- Update to version 1.12.0 (jsc#PED-8910)
  * Some memory leak fixes
  * Adapt to change in libxml2
  * Several CI improvements
  * Several translations improvements
- Drop 0001-osinfo-Make-xmlError-struct-constant-in-propagate_li.patch</changelog>
  <changelog author="carnold@suse.com" date="1773316800">- jsc#PED-14636 - UEFI as default for new VMs
  Add-osinfo_firmware_is_recommended.patch</changelog>
</package>
<package pkgid="2c28cc910dc8489a04f31190eb5486e602c0a0ff6e34491801e310272a5b7a97" name="libosinfo-lang" arch="noarch">
  <version epoch="0" ver="1.12.0" rel="150700.3.3.2"/>
  <changelog author="carnold@suse.com" date="1562587200">- bsc#1140749 - VUL-1: CVE-2019-13313: libosinfo: osinfo-install-
  script option leaks password via command line argument
  CVE-2019-13313-add-new-option-so-users-can-set-config-from-file.patch
  CVE-2019-13313-pass-username-password-via-config-file.patch</changelog>
  <changelog author="carnold@suse.com" date="1564142400">- Update to version 1.6.0
  Changes in this release include:
  * Add API to get the kernel URL argument for an OsinfoOs
  * Improve detection of PPC ISOs
  * Add API to create an OsinfoMedia from location using OsinfoMediaDetectFlags
  * Add API to get whether a media is bootable or not
  * Add OsinfoTree treeinfo properties
  * Add API to identify an OsinfoTree
  * Deprecate API to guess an OsinfoOs from OsinfoTree
  * Add --config-file to osinfo-install-script tool
  * Deprecate --config usage for user &amp; admin passwords on osinfo-install-script tool
  * Add API to generate an install-script and its command-line for OsinfoTree
  * Use libsoup for "http://" &amp; "https://" requests for creating both OsinfoMedia &amp; OsinfoTree
  * Drop GVFS dependency
  * Add OsinfoOs property to OsinfoTree
- Drop
  CVE-2019-13313-add-new-option-so-users-can-set-config-from-file.patch
  CVE-2019-13313-pass-username-password-via-config-file.patch</changelog>
  <changelog author="carnold@suse.com" date="1575288000">- Update to version 1.7.0
  Changes in this release include:
  * Add API to expose a device driver "priority"
  * Improve media detection when using "volume-size" to distinguish medias
  * General improvements on OsinfoList APIs to avoid unsafe access
  * Minor POD fixes
  * Switch to meson build system
  * Add API to expose "firmware" support on OsinfoOS
  * Drop "env" type support from osinfo-detect
  * Print the architecture of the detected tree / media on osinfo-detect
  * Add API to create an OsinfoTree from a treeinfo file</changelog>
  <changelog author="carnold@suse.com" date="1575460800">- Update to version 1.7.1
  Changes in this release include:
  * Fix usage of versioned symbols
  * MinGW spec file fixes and improvements
  * Fix pci.ids and usb.ids installation</changelog>
  <changelog author="dimstar@opensuse.org" date="1577448000">- BuildRequire and Require hwdata: usb.ids and pci.ids are shipped
  and maintained by this package. Prior to version 1.7.x, libosinfo
  shipped own, outdated copies (boo#1159838).</changelog>
  <changelog author="carnold@suse.com" date="1578484800">- Drop ids.tar.bz2 in favor of using hwdata. (boo#1159838)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580817600">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="carnold@suse.com" date="1591012800">- Update to version 1.8.0
  Changes in this release include:
  * Several CI improvements
  * Several release scripts improvements
  * Several translations improvements
  * Several syntax-check improvements
  * Code cleanup in order to modernize the GObject usage
  * Add API to get whether a firmware is supported or not
  * Add API to get "cloud-image-username"</changelog>
  <changelog author="dimstar@opensuse.org" date="1597752000">- Explicitly call %meson_build in the %build section: It was never
  needed (but should have been there) before as the %meson_install
  macro would perform a project rebuild. However, most recent
  versions of meson have changed the %meson_install macro to use
  `--no-rebuild`, exposing then this issue on our spec file.</changelog>
  <changelog author="carnold@suse.com" date="1614686400">- Update to version 1.9.0
  Changes in this release include:
  * Improve on the osinfo-tools' and osinfo-detect's help
  * Several CI improvements
  * Several translations improvements
  * Improve on debuggability of the loader code
  * Fix build when using clang</changelog>
  <changelog author="carnold@suse.com" date="1646136000">- Update to version 1.10.0
  Changes in this release include:
  * Add API for resolving multiple tree matches
  * Add API for resolving multiple media matches
  * Add API to match between two OsinfoTree
  * Add API to match between two OsinfoMedia
  * Add API to get a complete list of firmwares
  * Add missing documentation of osinfo_os_add_firmware()
  * Add release status to osinfo-query
  * Add --all flag to all tools to report all matches
  * Fix hiding database entries
  * Adapt to libsoup3 which is now preferred over libsoup2
  * Several CI improvements
  * Several translations improvements</changelog>
  <changelog author="carnold@suse.com" date="1648641600">- bsc#1197769 - FTBFS: libosinfo won't compile on SP4
  libosinfo.spec</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1661947200">- Add 3a0fef72.patch: build: Add option to select libsoup ABI.
  Following this, add conditional pkgconfig(libsoup-3.0)
  BuildRequires.
- Modernize spec, use ldconfig_scriptlets macro for post(un)
  handling, package COPYING with license macro.</changelog>
  <changelog author="carnold@suse.com" date="1664884800">- jsc#PED-2113 [Virt Tools] Refresh Virtualization Tools for Xen
  and KVM Management</changelog>
  <changelog author="carnold@suse.com" date="1699876800">- Update to version 1.11.0 (jsc#PED-6305)
  Changes in this release include:
  * Several minor memory leak fixes
  * Several CI improvements
  * Several translations improvements
- Drop 3a0fef72.patch as it is now part of the tarball</changelog>
  <changelog author="dimstar@opensuse.org" date="1705406400">- Own /usr/share/gtk-doc: glib no longer uses gtk-doc and as a
  consequence cannot be held responsible to deliver that basic
  directory structure.</changelog>
  <changelog author="carnold@suse.com" date="1709553600">- bsc#1220228 - virt-manager crashes when its viewer is opened on a
  running guest that uses spice graphics
  virt-manager uses both libosinfo and spice-gtk. spice-gtk is now
  built to use libsoup 3.0 but libosinfo was still using
  libsoup 2.4. Prefer libsoup 3.0 over libsoup 2.4 for Tumbleweed
  and newer SLE versions.</changelog>
  <changelog author="christophe@krop.fr" date="1716724800">- Add upstream change:
  * 0001-osinfo-Make-xmlError-struct-constant-in-propagate_li.patch</changelog>
  <changelog author="carnold@suse.com" date="1733140800">- Update to version 1.12.0 (jsc#PED-8910)
  * Some memory leak fixes
  * Adapt to change in libxml2
  * Several CI improvements
  * Several translations improvements
- Drop 0001-osinfo-Make-xmlError-struct-constant-in-propagate_li.patch</changelog>
  <changelog author="carnold@suse.com" date="1773316800">- jsc#PED-14636 - UEFI as default for new VMs
  Add-osinfo_firmware_is_recommended.patch</changelog>
</package>
<package pkgid="9910b87f8b84b86dcc226930e028a16518e6e84c6f659a4f28a02683fad77552" name="libostree-1-1" arch="x86_64">
  <version epoch="0" ver="2024.10" rel="150500.3.9.4"/>
  <changelog author="andreas.stieger@gmx.de" date="1660132800">- fix build with glibc 2.36 (boo#1202300) ostree-glibc_2.36.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662033600">- Use curl as http backend, stop depending on soup2:
  Drop pkgconfig(libsoup-2.4) and add pkgconfig(libcurl)
  BuildRequires, and pass with-curl=yes and --with-soup=no to
  configure.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1665403200">- Update to version 2022.6:
  + Finalize-staged now better supports automounted partitions and
    skips waiting for termination signal.
  + A file descriptor leak has been fixed in the commit logic.
  + Add basic support for handling overlayfs whiteouts on checkout
    through a new --process-passthrough-whiteouts flag.
  + Ostree rev-parse command gained a new --single flag to better
    support repositories containing exactly one commit.
- Drop ostree-glibc_2.36.patch: Fixed upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1669464000">- Update to version 2022.7:
  + Add API for idempotent delete operations on kernel arguments
  + Add API for and for handling unshare() to manipulate
    (otherwise) read-only sysroot
  + small memory leak fixes.
  + retry HTTP requests after receiving HTTP 500 errors
  + avoid rebuilding SELinux policy when creating a first
    deployment</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1679227200">- Update to version 2023.1:
  + ostree-metadata commit API
  + Various CLI improvements
  + fetcher: Avoid too large queues for metadata processing
  + bindings: Use default for uninitialized fields in checkout opts
  + ostree/prune: Calculate reachability under exclusive lock
  + lib/sysroot-upgrader: add some 'nullable' annotations
  + Documentation fixes
  + Build system updates</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1679832000">- Update to version 2023.2:
  + Fixes for recent GLibs introducing warnings around unset
    standard::size</changelog>
  <changelog author="fcrozat@suse.com" date="1683892800">- Make gjs BuildRequires conditional if tests are built and used.</changelog>
  <changelog author="alarrosa@suse.com" date="1688644800">- Add patch from upstream to fix corrupted files when using a large
  fs with 64-bit inodes (boo#1214708):
  * 0001-commit-fix-ostree-deployment-on-64-bit-inode-fs.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1688731200">- Update to version 2023.5:
  + This is a bugfix release for the recent 2023.4.
  + Key bugs fixed:
  - Revert "fetcher: Always open tmpfiles in repo location".
  - Fix return value of generator on non-ostree systems.
  + Other changes:
  - lib/deploy: Use off_t not __off_t.
  - prepare-root: Adjust to composefs mount struct changes.
- Changes from version 2023.4:
  + Notable bugfixe: fix ostree deployment on 64-bit inode fs
    (boo#1214708).
  + New Feauture: Composefs.
  + HTTP/pull fixes:
  - ostree-fetcher-curl: explicitly use HTTP1.1 when HTTP2 is
    disabled.
  - Increase the metadata size limit to 128MB.
  - fetcher: Always open tmpfiles in repo location.
  + Other changes:
  - lib/deploy: Use fallocate for early prune space check.
  - prepare-root: Move sysroot.tmp creation earlier.
  - lib/deploy: Disambiguate error messages for early prune space
    check.
  - lib/deploy: skip fallocate call when requested size is 0.
  - test-concurrency: Don't lower timeout.
  - pull: Add error prefixing for corrupt checksums.
  - Add more error prefixing when parsing commit objects.
  + Drop upstream merged 0001-commit-fix-ostree-deployment-on-64-bit-inode-fs.patch
- Changes from version 2023.3:
  + Many fixes and improvements.
  + treegen: Require at least one mutation.
  + rust: Bump MSRV to 1.64.
  + fetcher/soup3: Rewrite without threads.
  + fetcher: add libsoup3 backend.
  + lib/sysroot-cleanup: Convert bootdir listing to dfd-relative.
  + lib/sysroot-cleanup: Make some static utility functions global.
  + libotutil: add utility functions for calculating directory
    size.
  + lib/sysroot-deploy: Nuke finalize-failure.stamp on successful
    finalization.
  + lib/sysroot-deploy: Add experimental support for automatic
    early prune.
- Define libversion and soversion and replace hard coded values
  with them to ease package maintenance.
- Add pkgconfig(libsoup-3.0) &gt;= 3.0.0 build requirement and pass
  - -with-soup3 to configure. Libcurl needs it for tests and for the
  trivial-httpd binary, also we've been waiting for upstream to
  port to Soup 3, in order to re-enable it.
- Pass --with-composefs to configure, under the condition of
  building with composefs, while defining %bcond_with composefs
  (not enabled, by default) for now.
- Switch fuse with fuse3 pkgconfig() module BuildRequires, because
  Fuse 3 is preffered over Fuse 2.
- Drop --with-gjs option passed to configure. It's not recognized
  anymore, and configure script looks for gjs binary instead,
  acting accordingly.
- Add %ghost /run/ostree to the main package files directive. This
  directory is created via %{_tmpfilesdir}/ostree-tmpfiles.conf.
- Mark /etc/grub.d/*ostree and /etc/dracut.conf.d/ostree.conf with
  %config to instruct RPM those are config files.
- Make the grub2 sub-package as noarch, since it doesn't have any
  binaries.
- Refresh ostree-grub2-location.patch with Quilt.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1692964800">- Update to version 2023.6:
  + Signing with ed25519 can now be backed by openssl.
  + composefs changes:
  - Now enabled at build time (but disabled at runtime) by
    default.
  - composefs now supports signature verification. Note that
    composefs continues to be classified as experimental.
  - Configuration format has changed. The old ot-composefs kernel
    argument is no longer honored in favor of a configuration
    file that should be present in the initramfs.
  + ostree-prepare-root other changes:
  - A new configuration file in the initramfs is honored:
    /etc/ostree/prepare-root.conf.
  - This configuration file can also specify the readonly-sysroot
    default, which is now recommended.
  - The sysroot.readonly flag can now also be configured from
    here, and this is recommended.
  + ostree admin set-default: A long-overdue CLI verb to change the
    default deployment for the next boot.
  + sysroot other bugfixes and changes:
  - It is now supported to have /usr/etc with an empty /etc. This
    is preparatory for supporting a transient /etc.
  - Finally fix the global sync timeout at shutdown.
  - 'ostree admin deploy' now honors --stateroot as that term is
    prefered over --os.
  + trivial-httpd: The remnants of the deprecated 'ostree
    trivial-httpd' CLI are now completely gone.</changelog>
  <changelog author="alarrosa@suse.com" date="1693310400">- Use OpenSSL for ed25519 signatures which automatically uses
  OpenSSL for SHA256 too (which is faster according to upstream and
  libcurl already links with openssl). Also, openssl is fips
  certified unlike libsodium.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1698408000">- Update to version 2023.7:
  + support for a "transient etc"
  + HTTP layer now retries requests by default
  + a longstanding bug was fixed where ostree would still try to
    fetch "loose" objects even when we were doing a delta pull
  + Fix variety of clang-analyzer fixes (some false positives, some
    real memory leaks, etc)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1709380800">- Update to version 2024.4:
  + Support for a new root.transient flag that makes / an overlayfs
    that is persistent across reboots but not across upgrades
  + Expand ostree admin pin command
  + root.transient switches to tmpfs
  + Composefs recommended to be enabled via
    ostree-prepare-root.conf and not the ex-integrity.composefs
  + Finalize "deployment finalization locking" feature
  + Add ostree admin post-copy
  + Speed-up through reflinks
  + improvements to system root and bootloader
  + Bug fixes, documentation updates, and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1713096000">- update to 2024.5:
  + sepolicy: Fix publicity mismatch for
    ostree_sepolicy_host_enabled
  + main: Ignore SIGPIPE when printing version
  + otcore: Drop config load print
  + bootloader/grub2: Don't do anything if we have static configs
  + sysroot: Turn on bootloader-naming-2 by default
  + kargs: parse spaces in kargs input and keep quotes
  + Ensure boot directory is open before accessing it for early
    pruning
  + checkout: Always replace existing content with overlay mode</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1716033600">- update to 2024.6:
  + prepare-root: Handle non-AB aboot properly
  + various bug fixes and developer visible fixes
  + ostree-prepare-root.service: add OnFailureJobMode=isolate
  + ostree-sysroot-deploy: check if deployments are in the same
    stateroot</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1721563200">- update to 2024.7:
  + bugfix for "transient-etc" users
  + a new ostree.prepare-root.composefs kernel option that allows
    dynamic overrides for the composefs state
  + new API to directly create a composefs from an ostree commit</changelog>
  <changelog author="dimstar@opensuse.org" date="1727438400">- Update to version 2024.8:
  + Adapt to a change in libcurl 8.10.1 that caused ostree to start
    crashing.
  + switchroot: Stop making /sysroot mount private.</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1733140800">- Update to version 2024.9:
  + deploy: Don't recompute verity checksums if not enabled
    (performance improvement)
  + prepare-root: allow sysroot.readonly=true with kernel cmdline
    ro
  + various bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734782400">- Update to version 2024.10:
  + composefs: Ensure buffer is suitably aligned for struct
    fsverity_digest
  + core: Always sort incoming xattrs
  + sign-ed25519: Fix error message of validate_length
  + rofiles-fuse: when fuse execution fails, rofiles-fuse still
    returns exit code 0
  + libostree/deploy: enable composefs by default
  + documentation updates</changelog>
</package>
<package pkgid="079a5ecd0ca90abcccbf3e5e9dd70f69dd5e0362c6dfee0e5165547c3171b7a5" name="libostree" arch="src">
  <version epoch="0" ver="2024.10" rel="150500.3.9.4"/>
  <changelog author="andreas.stieger@gmx.de" date="1660132800">- fix build with glibc 2.36 (boo#1202300) ostree-glibc_2.36.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662033600">- Use curl as http backend, stop depending on soup2:
  Drop pkgconfig(libsoup-2.4) and add pkgconfig(libcurl)
  BuildRequires, and pass with-curl=yes and --with-soup=no to
  configure.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1665403200">- Update to version 2022.6:
  + Finalize-staged now better supports automounted partitions and
    skips waiting for termination signal.
  + A file descriptor leak has been fixed in the commit logic.
  + Add basic support for handling overlayfs whiteouts on checkout
    through a new --process-passthrough-whiteouts flag.
  + Ostree rev-parse command gained a new --single flag to better
    support repositories containing exactly one commit.
- Drop ostree-glibc_2.36.patch: Fixed upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1669464000">- Update to version 2022.7:
  + Add API for idempotent delete operations on kernel arguments
  + Add API for and for handling unshare() to manipulate
    (otherwise) read-only sysroot
  + small memory leak fixes.
  + retry HTTP requests after receiving HTTP 500 errors
  + avoid rebuilding SELinux policy when creating a first
    deployment</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1679227200">- Update to version 2023.1:
  + ostree-metadata commit API
  + Various CLI improvements
  + fetcher: Avoid too large queues for metadata processing
  + bindings: Use default for uninitialized fields in checkout opts
  + ostree/prune: Calculate reachability under exclusive lock
  + lib/sysroot-upgrader: add some 'nullable' annotations
  + Documentation fixes
  + Build system updates</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1679832000">- Update to version 2023.2:
  + Fixes for recent GLibs introducing warnings around unset
    standard::size</changelog>
  <changelog author="fcrozat@suse.com" date="1683892800">- Make gjs BuildRequires conditional if tests are built and used.</changelog>
  <changelog author="alarrosa@suse.com" date="1688644800">- Add patch from upstream to fix corrupted files when using a large
  fs with 64-bit inodes (boo#1214708):
  * 0001-commit-fix-ostree-deployment-on-64-bit-inode-fs.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1688731200">- Update to version 2023.5:
  + This is a bugfix release for the recent 2023.4.
  + Key bugs fixed:
  - Revert "fetcher: Always open tmpfiles in repo location".
  - Fix return value of generator on non-ostree systems.
  + Other changes:
  - lib/deploy: Use off_t not __off_t.
  - prepare-root: Adjust to composefs mount struct changes.
- Changes from version 2023.4:
  + Notable bugfixe: fix ostree deployment on 64-bit inode fs
    (boo#1214708).
  + New Feauture: Composefs.
  + HTTP/pull fixes:
  - ostree-fetcher-curl: explicitly use HTTP1.1 when HTTP2 is
    disabled.
  - Increase the metadata size limit to 128MB.
  - fetcher: Always open tmpfiles in repo location.
  + Other changes:
  - lib/deploy: Use fallocate for early prune space check.
  - prepare-root: Move sysroot.tmp creation earlier.
  - lib/deploy: Disambiguate error messages for early prune space
    check.
  - lib/deploy: skip fallocate call when requested size is 0.
  - test-concurrency: Don't lower timeout.
  - pull: Add error prefixing for corrupt checksums.
  - Add more error prefixing when parsing commit objects.
  + Drop upstream merged 0001-commit-fix-ostree-deployment-on-64-bit-inode-fs.patch
- Changes from version 2023.3:
  + Many fixes and improvements.
  + treegen: Require at least one mutation.
  + rust: Bump MSRV to 1.64.
  + fetcher/soup3: Rewrite without threads.
  + fetcher: add libsoup3 backend.
  + lib/sysroot-cleanup: Convert bootdir listing to dfd-relative.
  + lib/sysroot-cleanup: Make some static utility functions global.
  + libotutil: add utility functions for calculating directory
    size.
  + lib/sysroot-deploy: Nuke finalize-failure.stamp on successful
    finalization.
  + lib/sysroot-deploy: Add experimental support for automatic
    early prune.
- Define libversion and soversion and replace hard coded values
  with them to ease package maintenance.
- Add pkgconfig(libsoup-3.0) &gt;= 3.0.0 build requirement and pass
  - -with-soup3 to configure. Libcurl needs it for tests and for the
  trivial-httpd binary, also we've been waiting for upstream to
  port to Soup 3, in order to re-enable it.
- Pass --with-composefs to configure, under the condition of
  building with composefs, while defining %bcond_with composefs
  (not enabled, by default) for now.
- Switch fuse with fuse3 pkgconfig() module BuildRequires, because
  Fuse 3 is preffered over Fuse 2.
- Drop --with-gjs option passed to configure. It's not recognized
  anymore, and configure script looks for gjs binary instead,
  acting accordingly.
- Add %ghost /run/ostree to the main package files directive. This
  directory is created via %{_tmpfilesdir}/ostree-tmpfiles.conf.
- Mark /etc/grub.d/*ostree and /etc/dracut.conf.d/ostree.conf with
  %config to instruct RPM those are config files.
- Make the grub2 sub-package as noarch, since it doesn't have any
  binaries.
- Refresh ostree-grub2-location.patch with Quilt.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1692964800">- Update to version 2023.6:
  + Signing with ed25519 can now be backed by openssl.
  + composefs changes:
  - Now enabled at build time (but disabled at runtime) by
    default.
  - composefs now supports signature verification. Note that
    composefs continues to be classified as experimental.
  - Configuration format has changed. The old ot-composefs kernel
    argument is no longer honored in favor of a configuration
    file that should be present in the initramfs.
  + ostree-prepare-root other changes:
  - A new configuration file in the initramfs is honored:
    /etc/ostree/prepare-root.conf.
  - This configuration file can also specify the readonly-sysroot
    default, which is now recommended.
  - The sysroot.readonly flag can now also be configured from
    here, and this is recommended.
  + ostree admin set-default: A long-overdue CLI verb to change the
    default deployment for the next boot.
  + sysroot other bugfixes and changes:
  - It is now supported to have /usr/etc with an empty /etc. This
    is preparatory for supporting a transient /etc.
  - Finally fix the global sync timeout at shutdown.
  - 'ostree admin deploy' now honors --stateroot as that term is
    prefered over --os.
  + trivial-httpd: The remnants of the deprecated 'ostree
    trivial-httpd' CLI are now completely gone.</changelog>
  <changelog author="alarrosa@suse.com" date="1693310400">- Use OpenSSL for ed25519 signatures which automatically uses
  OpenSSL for SHA256 too (which is faster according to upstream and
  libcurl already links with openssl). Also, openssl is fips
  certified unlike libsodium.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1698408000">- Update to version 2023.7:
  + support for a "transient etc"
  + HTTP layer now retries requests by default
  + a longstanding bug was fixed where ostree would still try to
    fetch "loose" objects even when we were doing a delta pull
  + Fix variety of clang-analyzer fixes (some false positives, some
    real memory leaks, etc)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1709380800">- Update to version 2024.4:
  + Support for a new root.transient flag that makes / an overlayfs
    that is persistent across reboots but not across upgrades
  + Expand ostree admin pin command
  + root.transient switches to tmpfs
  + Composefs recommended to be enabled via
    ostree-prepare-root.conf and not the ex-integrity.composefs
  + Finalize "deployment finalization locking" feature
  + Add ostree admin post-copy
  + Speed-up through reflinks
  + improvements to system root and bootloader
  + Bug fixes, documentation updates, and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1713096000">- update to 2024.5:
  + sepolicy: Fix publicity mismatch for
    ostree_sepolicy_host_enabled
  + main: Ignore SIGPIPE when printing version
  + otcore: Drop config load print
  + bootloader/grub2: Don't do anything if we have static configs
  + sysroot: Turn on bootloader-naming-2 by default
  + kargs: parse spaces in kargs input and keep quotes
  + Ensure boot directory is open before accessing it for early
    pruning
  + checkout: Always replace existing content with overlay mode</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1716033600">- update to 2024.6:
  + prepare-root: Handle non-AB aboot properly
  + various bug fixes and developer visible fixes
  + ostree-prepare-root.service: add OnFailureJobMode=isolate
  + ostree-sysroot-deploy: check if deployments are in the same
    stateroot</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1721563200">- update to 2024.7:
  + bugfix for "transient-etc" users
  + a new ostree.prepare-root.composefs kernel option that allows
    dynamic overrides for the composefs state
  + new API to directly create a composefs from an ostree commit</changelog>
  <changelog author="dimstar@opensuse.org" date="1727438400">- Update to version 2024.8:
  + Adapt to a change in libcurl 8.10.1 that caused ostree to start
    crashing.
  + switchroot: Stop making /sysroot mount private.</changelog>
  <changelog author="dimstar@opensuse.org" date="1728993600">- Drop rcFOO symlinks (PED-266).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1733140800">- Update to version 2024.9:
  + deploy: Don't recompute verity checksums if not enabled
    (performance improvement)
  + prepare-root: allow sysroot.readonly=true with kernel cmdline
    ro
  + various bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734782400">- Update to version 2024.10:
  + composefs: Ensure buffer is suitably aligned for struct
    fsverity_digest
  + core: Always sort incoming xattrs
  + sign-ed25519: Fix error message of validate_length
  + rofiles-fuse: when fuse execution fails, rofiles-fuse still
    returns exit code 0
  + libostree/deploy: enable composefs by default
  + documentation updates</changelog>
</package>
<package pkgid="e4d4020cb2bd56d36f04a382a6b7611e1cc37707d4f94642f8810801df919a42" name="libpainter0" arch="x86_64">
  <version epoch="0" ver="0.9.13.1" rel="150600.15.6.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1581163200">- Build with --enable-vsock so xrdp can be used with hyper-v
  enhanced session mode.</changelog>
  <changelog author="fzhang.foss@gmail.com" date="1583928000">- Update xrdp-avahi.diff: Fix implicit definitions errors.</changelog>
  <changelog author="fzhang.foss@gmail.com" date="1584014400">- Update to version 0.9.13
  + Bug fixes: some regressions on drive redirection #1469 #1487
    [#1505] #1507
  + Support mousex button 8/9 #1478
- Update to version 0.9.12
  + Bug fixes
  - Fix "The log reference is NULL" error when sesman startup
    [#1425]
  - Fix behavior when shmem_id changes #1439
  - Make vsock config accept -1 for cid and port #1441
  - Cleanup refresh rect and check stream bounds #1437
  - Significant improvements in drive redirection #1449
  + Other changes
  - Proprietary microphone redirection via rdpsnd is now default
    off RDP compatible microphone redirection is on instead #1427
  - Skip connecting to chansrv when no channels enabled #1393
  - Add openSUSE's pam rules (boo#1156094, #1442)
  - Do not terminate xrdp daemon when caught SIGHUP #1319
- Known issues
  + FreeRDP 2.0.0-rc4 or later might not able to connect to xrdp
    due to xrdp's bad-mannered behaviour, add `+glyph-cache` option
    to FreeRDP to connect #1266
  + Audio redirection by MP3 codec doesn't sound with some client,
    use AAC instead #965
- Drop xrdp-mkpamrules-support-usr-etc-distconfdir.patch: Fixed
  upstream</changelog>
  <changelog author="qkzhu@suse.com" date="1585051200">- Update xrdp-bsc965647-allow-admin-choose-desktop.patch:
  Add `export XDG_SESSION_TYPE=x11` in startwm.sh for SLE, since
  lacking this variable in GNOME 3.34 causes GNOME crash (bsc#1159257).</changelog>
  <changelog author="qkzhu@suse.com" date="1585051201">- Update xrdp-bsc965647-allow-admin-choose-desktop.patch:
  + Set the default session to GNOME Session for SLE.
  + Update the variables to launch SLE-Classic Session.
  (bsc#1166746).</changelog>
  <changelog author="yfjiang@suse.com" date="1587729600">- Enable SLE only patches for Leap (jsc#SLE-11850).</changelog>
  <changelog author="dimstar@opensuse.org" date="1592395200">- Use %{_libexecdir} to install the legacy initscript actions to.</changelog>
  <changelog author="yfjiang@suse.com" date="1593691200">- Update to version 0.9.13.1
  + This is a security fix release that includes fixes for the
    following local buffer overflow vulnerability (bsc#1173580):
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-4044
- Rebase xrdp-fate318398-change-expired-password.patch</changelog>
  <changelog author="yfjiang@suse.com" date="1594382400">- Update xrdp.keyring according to:
  https://github.com/neutrinolabs/xrdp/issues/1627</changelog>
  <changelog author="yfjiang@suse.com" date="1597147200">- Update xrdp-bsc965647-allow-admin-choose-desktop.patch:
  + Fallback the session to icewm when a selected desktop
    environment is not found (bsc#1171415)
  + Support plasma session for Leap 15.2
  + Give more informative comments in start_wm.sh</changelog>
  <changelog author="yfjiang@suse.com" date="1604923200">- Introduce more buffer protection fixes (jsc#SLE-11518):
  + Add xrdp-memory-allocation-security-fix.patch
  + Add xrdp-remove-unecessary-gmalloc.patch
  + Add xrdp-safe-data-chunk-reassembly.patch
- Make the serial number of SLE patches on the bottom</changelog>
  <changelog author="yu.daike@suse.com" date="1628596800">- Fix crash in xrdp-fate318398-change-expired-password.patch (bsc#1187258)</changelog>
  <changelog author="yu.daike@suse.com" date="1672228800">- Security fixes:
  + xrdp-add-stub-implementation-for-s_check_rem_and_log.patch
  * add stub implementation for s_check_rem_and_log()
  + xrdp-CVE-2022-23468.patch (bsc#1206300)
  * Buffer overflow in xrdp_login_wnd_create()
  + xrdp-CVE-2022-23478.patch (bsc#1206302)
  * Out of Bound Write in xrdp_mm_trans_process_drdynvc_chan
  + xrdp-CVE-2022-23479.patch (bsc#1206303)
  * Buffer overflow in xrdp_mm_chan_data_in() function
  + xrdp-CVE-2022-23480.patch (bsc#1206306)
  * Buffer overflow in devredir_proc_client_devlist_announce_req
  + xrdp-CVE-2022-23481.patch (bsc#1206307)
  * Out of Bound Read in xrdp_caps_process_confirm_active()
  + xrdp-CVE-2022-23482.patch (bsc#1206310)
    + Out of Bound Read in xrdp_sec_process_mcs_data_CS_CORE()
  + xrdp-CVE-2022-23483.patch (bsc#1206311)
    + Out of Bound REad in libxrdp_send_to_channel()
  + xrdp-CVE-2022-23484.patch (bsc#1206312)
    + Integer Overflow in xrdp_mm_process_rail_update_window_text()
  + xrdp-CVE-2022-23493.patch (bsc#1206313)
    + Out of Bound Read in xrdp_mm_trans_process_drdynvc_channel_close()</changelog>
  <changelog author="yu.daike@suse.com" date="1672747200">- xrdp-CVE-2022-23477.patch (bsc#1206301)
  + Buffer over flow in audin_send_open() function</changelog>
  <changelog author="jcejka@suse.com" date="1688990400">- Convert username exported to env variables to canonical form
  to prevent issues with different username and domain formats (bsc#1211740)
  + xrdp-Add-function-to-get-user-information-by-UID.patch
  + xrdp-Moved-initgroups-call-to-before-auth_start_session.patch
  + xrdp-fix-username-in-env.patch</changelog>
  <changelog author="yu.daike@suse.com" date="1694520000">- xrdp-CVE-2023-40184.patch (bsc#1214805)
  + restriction bypass via improper session handling</changelog>
  <changelog author="yu.daike@suse.com" date="1700568000">- xrdp-CVE-2023-42822.patch (bsc#1215803)
  + unchecked access to font glyph info</changelog>
  <changelog author="yu.daike@suse.com" date="1702036800">- Update xrdp-CVE-2023-42822.patch
  + fix bsc#1217759: xrdp login screen does not show any text</changelog>
  <changelog author="yfjiang@suse.com" date="1737720000">- Enforce no login screen if require_credentials is set
  (bsc#1227769)
  + Add xrdp-CVE-2024-39917.patch
  + Rebase xrdp-fate318398-change-expired-password.patch</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1769774400">- Add xrdp-CVE-2025-68670.patch: Fix a potential overflow
  (bsc#1257362 CVE-2025-68670).</changelog>
</package>
<package pkgid="3e31642aa7687df5f4fbfd869cb33aa15b959158947ef54e04847a5dbc2ca2b2" name="libpcap" arch="src">
  <version epoch="0" ver="1.10.5" rel="150700.3.10.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036800">- Allow bluetooth monitoring support unconditionally.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036801">- Formatted the specs file using spec-cleaner.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1487160000">- Dropped patches not required after review
  * libpcap-1.0.0-pcap-bpf.patch
  * libpcap-1.5.2-filter-fix.patch
- Reference of the pull request for the rest of the patches
  * https://github.com/the-tcpdump-group/libpcap/issues/196
- Changed libpcap-1.0.0-s390.patch to the git formatted one</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Do not put conditions about the provides for &lt; 11.0</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- Restore section setting $pic</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1505217600">- Added a patch (disable-remote.diff) to fix applications to FTBFS
  if they define HAVE_REMOTE (deb#843384). Patch taken from Debian.</changelog>
  <changelog author="jengelh@inai.de" date="1519905600">- Fix SRPM group</changelog>
  <changelog author="mkubecek@suse.cz" date="1537790400">- update to 1.9.0
  * add testing system to libpcap, independent of tcpdump
  * changes to how pcap_t is activated
  * update included copies of BSD 4-clause license to 3-clause
  * additions to TCP header parsing, per RFC3168
  * support setting non-blocking mode before activating
  * fixes so that non-AF_INET addresses, are not ==AF_INET6 addresses
  * pcap_compile() in 1.8.0 and later is newly thread-safe
  * bound snaplen for linux tpacket_v2 to ~64k
  * make VLAN filter handle both metadata and inline tags
    (bsc#874131 bsc#993691 fate#321405)
  * D-Bus captures can now be up to 128MB in size
  * add DLT_LORATAP and DLT_VSOCK
  * allow specifying a specific capture protocol
  * RDMA sniffing support for pcap
  * increase minimum autoconf version requirement to 2.64
  * rpcapd: support for xinetd.conf and systemd units
  * provide pkgconfig file
- add BuildRequires for autoconf &gt;= 2.64
- package (newly added) pkgconfig file
- Check-only-VID-in-VLAN-test-issue-461.patch:
  fix "vlan &lt;id&gt;" test to check only VID, not complete TCI
- drop disable-remote.diff (superseded by upstream changes)</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="pmonreal@suse.com" date="1570017600">- Update to 1.9.1 [bsc#1153332]
  * Five CVE-2019-15161, CVE-2019-15162, CVE-2019-15163, CVE-2019-15164, CVE-2019-15165
  * Fixes for CVE-2018-16301, errors in pcapng reading.
  * Mention pcap_get_required_select_timeout() in the main pcap man page
  * Fix pcap-usb-linux.c build on systems with musl
  * Fix assorted man page and other documentation issues
  * Plug assorted memory leaks
  * Documentation changes to use https:
  * Changes to how time stamp calculations are done
  * Lots of tweaks to make newer compilers happier and warning-free and
    to fix instances of C undefined behavior
  * Warn if AC_PROG_CC_C99 can't enable C99 support
  * Rename pcap_set_protocol() to  pcap_set_protocol_linux().
  * Align pcap_t private data on an 8-byte boundary.
  * Fix various error messages
  * Use 64-bit clean API in dag_findalldevs()
  * Fix cleaning up after some errors
  * Work around some ethtool ioctl bugs in newer Linux kernels
  * Add backwards compatibility sections to some man pages
  * Fix autotool configuration on AIX and macOS
  * Don't export bpf_filter_with_aux_data() or struct bpf_aux_data;
    they're internal-only and subject to change
  * Fix pcapng block size checking
  * Fix reading of capture statistics for Linux USB
  * Fix packet size values for Linux USB packets
  * Check only VID in VLAN test in filterss
  * Fix pcap_list_datalinks on 802.11 devices on macOS
  * Fix overflows with very large snapshot length in pcap file
  * Improve parsing of rpcapd configuration file
  * Handle systems without strlcpy() or strlcat() better
  * Fix crashes and other errors with invalid filter expressions
  * Fix use of uninitialized file descriptor in remote capture
  * Fix some CMake issues
  * Fix some divide-by-zero issues with the filter compiler
  * Work around a GNU libc bug in pcap_nametonetaddr()
  * Add support for DLT_LINUX_SLL2
  * Fix handling of the packet-count argument for Myricom SNF devices
  * Fix --disable-rdma in configure script
  * Fix compilation of TurboCap support
  * Constify first argument to pcap_findalldevs_ex()
  * Fix a number of issues when running rpcapd as an inetd-style daemon
  * Fix CMake issues with D-Bus libraries
  * In rpcapd, clean up termination of a capture session
  * Redo remote capture protocol negotiation
  * In rpcapd, report the same error for "invalid user name" and
    "invalid password", to make brute-forcing harder
  * For remote captures, add an error code for "the server requires TLS"
  * Fix building as part of Npcap
  * Allow rpcapd to rebind more rapidly
  * Fix building shared libpcap library on midipix (midipix.org)
  * Fix hack to detect UTF-16LE adapter names on Windows not to go past
    the end of the string
  * Have pcap_dump_open_append() create the dump file if it doesn't exists
  * Fix the maxmum snapshot length for DLT_USBPCAP
  * Use -fPIC when building for 64-bit SPARC on Linux
  * Fix CMake 64-bit library installation directory on some Linux distributions
  * Boost the TPACKET_V3 timeout to the maximum if a timeout of 0 was specified
  * PCAPNG reader applies some sanity checks before doing malloc().
- Drop patch fixed upstream:
  * Check-only-VID-in-VLAN-test-issue-461.patch
- Rebase patch:
  * libpcap-1.0.0-ppp.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1613304000">- Update to 1.10.0
  * Require, and assume, some level of C99 support in the C compiler
  * Add support for capturing on DPDK devices
  * rpcap: support rpcap-over-TLS
  * Fix some memory leaks, including in pcap_compile()
  * Linux: handle systems without AF_INET or AF_UNIX socket support
  * Catch invalid IPv4 addresses in filters
  * Show special Linux BPF offsets symbolically in bpf_image()
    and bpf_dump()
  * Linux: get rid of Wireless Extensions for turning monitor mode on
  * Linux: proper memory sync for PACKET_MMAP
  * Linux: drop support for libnl 1 and 2.
  * Linux: Require PF_PACKET support, and kernel 2.6.27 or later
  * Add DLT_LINUX_SLL2
  * Add a new filter "ifindex" for DLT_LINUX_SLL2 files and live
    Linux captures
  * optimizer: add a hack to try to catch certain optimizer loops
  * Probe CONFIGURATION descriptor of connected USB devices
  * Linux: return error on interface going away, but not if it just
    went down
  * Linux: set socket protocol only after packet ring configured,
    reducing bogus packet drop reports
  * Linux: get ifdrop stats from sysfs.
  * Fix various security issues reported by Charles Smith at
    Tangible Security
  * Fix various security issues reported by Include Security
  * rpcapd: on UN*X, don't tell the client why authentication failed
  * Linux: when adjusting BPF programs, do not subtract the
    SLL[2]_HDR_LEN if the location is negative (special
    metadata offset)
  * Linux: with a timeout of zero, wait indefinitely
  * Linux: clean up support for some non-GNU libc C libraries
  * Increase the maximum snaplen for LINKTYPE_USBPCAP/DLT_USBPCAP
  * Fix handling of some ioctls that fail with "permission denied"
    even when the ioctl isn't supported at all
  * Added support for ICMPv6 types 1-4 as tokens in filters
  * Report the DLT description in error messages
  * Linux: Add support for DSA data link types
  * Linux USB: use the snapshot length to set the buffer size,
    and set the len field to reflect the length in the URB
  * rpcapd: allow rpcapd to rebind more rapidly
  * Add Haiku pcap implementation
  * rpcap: redo protocol version negotiation to avoid problems
    with old servers (it still works with servers using the old
    negotiation, as well as servers not supporting negotiation)
  * Remove (unused) SITA support here.
  * Correctly handle pcapng captures with more than one IDB with a
    snspshot length greater than the supported maximum
- Remove libpcap-no-old-socket.patch
- Rebase libpcap-1.0.0-s390.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1623412800">- Update to 1.10.1
  * Fix "type XXX subtype YYY" giving a parse error
  * Add PCAP_AVAILABLE_1_11.
  * Rename struct bpf_aux_data to avoid NetBSD compile errors
  * Fix cross-builds with older kernels lacking BPF_MOD and BPF_XOR
  * Fix Bison detection for minor version 0.
  * Fix parallel build with FreeBSD make.
  * Get DLT_MATCHING_MAX right in gencode.c on NetBSD.
  * Define timeradd() and timersub() if necessary.
  * Fix Cygwin/MSYS target directories.
  * Fix symlinking with DESTDIR.
  * Fix generation of libpcap.pc with CMake when not building
    a shared library.
  * Support reading version 1.2, which some writers produce,
    and which is the same as 1.0
  * Drop support for text-mode USB captures, as we require a 2.6.27
    or later kernel
  * Bluetooth: fix non-blocking mode. Don't assume that all compilers
    used to build for Linux support the __atomic builtins</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1672574400">- update to 1.10.2:
  * Build system updates
  * Developer visible fixes
  * Fix some formatting string issues found by cppcheck
  * "Dead" pcap_ts from pcap_open_dead() and ..._with_tstamp_precision():
    Don't crash if pcap_breakloop() is called.
  * Savefiles: multiple bug fixes handling files
  * Capture: Never process more than INT_MAX packets in a
    pcap_dispatch() call, to avoid integer overflow
  * Packet filtering: PFLOG bug fixes and improvements
  * Fix memory leak in capture device open
  * Fix detection of CAN/CAN FD packets in direction check
  * Fix double-free crashes on errors such as running on a kernel
    with CONFIG_PACKET_MMAP not configured
  * Multiple CANbus bug fixes
  * Fix pcap_findalldevs() to find usbmon devices
  * Fix handling of VLAN tagged packets if the link-layer type is
    changed from DLT_LINUX_SLL to DLT_LINUX_SLL2
  * Always turn on PACKET_AUXDATA
  * Correctly compute the "real" length for isochronous USB transfers</changelog>
  <changelog author="dmueller@suse.com" date="1674043200">- update to 1.10.3:
  * Sort the PUBHDR variable in Makefile.in in "ls" order.
  * Fix typo in comment in pflog.h.
  * Remove two no-longer-present files from .gitignore.
  * Update code and comments for handling failure to set promiscuous
    mode based on new information.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1680955200">- update to 1.10.4:
  * rpcap: Fix name of launchd service.
  * documentation updates and build system tweaks</changelog>
  <changelog author="pgajdos@suse.com" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="pmonreal@suse.com" date="1725278400">- Update to 1.10.5:
  * Security fixes:
  - [bsc#1230020, CVE-2023-7256] double free via addrinfo in sock_initaddress()
  - [bsc#1230034, CVE-2024-8006] null pointer derefence in pcap_findalldevs_ex()
  * Thread safety: Make some static variables thread-local
  * Packet filtering:
  - Return an error from pcap_compile() if the scanner fails to initialize.
  - Optimizer fix from Archit Shah to recompute dominators after moving
    code; (although the resulting filter isn't empty).
  - Optimizer fix from Archit Shah to mark value as unknown when store
    of that value is deleted.
  * Linux:
  - Don't use DLT_LINUX_SLL2 for anything other than the "any" device.
  - Avoid 32-bit unsigned integer overflow in USB captures.
  - Fix a file descriptor leak.
  - Fix DLT_CAN_SOCKETCAN handling of CAN FD.
  - Add CAN XL support to DLT_CAN_SOCKETCAN.
  - Clean up the code that sets the "real" ("original") length for
    isochronous USB transfers.
  - Avoid unnecessary blocking on recvmsg() in the Bluetooth monitor and
    Bluetoth modules.
  * Haiku:
  - Report non-existent devices correctly.
  - Fix handling of packet statistics.
  - Fix packet timestamping.
  - Fix packet filtering with low snaplen.
  - Improve connection status reporting.
  - Add support for promiscuous mode.
  - Detect DLTs and loopback capture support at run time.
  - Report IEEE 802.11 as PCAP_IF_WIRELESS.
  * BSD, macOS, AIX, Solaris 11, Linux:
  - Add a new error PCAP_ERROR_CAPTURE_NOTSUP, for use if a capture
    mechanism is not present, in the hopes that, for example,
    attempts to capture on Windows Services for Linux 1, in which
    the NT kernel attempts to simulate Linux system calls but does
    not support packet sockets, can get an error that better
    indicates the underlying problem.
  * AirPcap: Format an error message if we run out of memory.
  * nflog: Make sure we don't overflow when rounding up the TLV length.
  * rpcap:
  - Handle routines removed in at least some OpenSSL libraries.
  - CVE-2023-7256: Clean up sock_initaddress() and its callers to avoid
    double frees in some cases.
  - Don't define SOCKET ourselves; instead, define PCAP_SOCKET as int
    on UN*Xes and as SOCKET on Windows.
  - CVE-2024-8006: Fix pcap_findalldevs_ex() not to crash if passed a
    file:// URL with a path to a directory that cannot be opened.
  * Savefiles:
  - Handle DLT_/LINKTYPE_ mapping better, to handle some
    OpenBSD-specific link types better.
  - Treat if_tsoffset as signed in pcapng files, as the spec says.
  - Don't try to fix the "real" length for isochronous USB
    transfers if the number of USB descriptors is too large.
  - Reject pcap files where one of the reserved fields in the
    "link-layer type plus other stuff" is non-zero.
  * Rebase libpcap-1.0.0-s390.patch</changelog>
  <changelog author="meissner@suse.com" date="1727265600">- enable rdma support (bsc#1230894)</changelog>
  <changelog author="pmonreal@suse.com" date="1767614400">- Security fix: [bsc#1255765, CVE-2025-11961]
  * Fix out-of-bound-write and out-of-bound-read in pcap_ether_aton()
    due to missing validation of provided MAC-48 address string
  * Add libpcap-CVE-2025-11961.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1772107200">- Fix bsc#1258668: Enable RMDA - Fix missing dependency in spec so libcap
  is built with  RMDA support.</changelog>
</package>
<package pkgid="3548e60df02b8713ee509c1d333ea0001309e8ba31098b4e75b8612616fba962" name="libpcap" arch="src">
  <version epoch="0" ver="1.10.5" rel="150700.3.7.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036800">- update to 1.8.1
  * Clean up the name-to-DLT mapping table.
  * Add some newer DLT_ values:
  IPMI_HPM_2,ZWAVE_R1_R2,ZWAVE_R3,WATTSTOPPER_DLM,ISO_14443,RDS
  * Fix handling of packet count in the TPACKET_V3 inner loop: GitHub issue
  [#493].
  * Filter out duplicate looped back CAN frames.
  * Fix the handling of loopback filters for IPv6 packets.
  * Add a link-layer header type for RDS (IEC 62106) groups.
  * On Linux, handle all CAN captures with pcap-linux.c, in cooked mode.
  * Removes the need for the "host-endian" link-layer header type.
  * Compile with '-Wused-but-marked-unused' in devel mode if supported
  * Have separate DLTs for big-endian and host-endian SocketCAN headers.
  * Require that version.h be generated: all build procedures we support generate version.h (autoconf, CMake, MSVC)!
  * Properly check for sock_recv() errors.
  * Re-impose some of Winsock's limitations on sock_recv().
  * Replace sprintf() with pcap_snprintf().
  * Fix signature of pcap_stats_ex_remote().
  * Have rpcap_remoteact_getsock() return a SOCKET and supply an "is active" flag.
  * Clean up {DAG, Septel, Myricom SNF}-only builds.
  * pcap_create_interface() needs the interface name on Linux.
  * Clean up hardware time stamp support: the "any" device does not support any time stamp types.
  * Recognize 802.1ad nested VLAN tag in vlan filter.
- dropped libpcap-ocloexec.patch, never upstreamed.
- refreshed libpcap-1.0.0-ppp.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036801">- Allow bluetooth monitoring support unconditionally.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036802">- Formatted the specs file using spec-cleaner.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1487160000">- Dropped patches not required after review
  * libpcap-1.0.0-pcap-bpf.patch
  * libpcap-1.5.2-filter-fix.patch
- Reference of the pull request for the rest of the patches
  * https://github.com/the-tcpdump-group/libpcap/issues/196
- Changed libpcap-1.0.0-s390.patch to the git formatted one</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Do not put conditions about the provides for &lt; 11.0</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- Restore section setting $pic</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1505217600">- Added a patch (disable-remote.diff) to fix applications to FTBFS
  if they define HAVE_REMOTE (deb#843384). Patch taken from Debian.</changelog>
  <changelog author="jengelh@inai.de" date="1519905600">- Fix SRPM group</changelog>
  <changelog author="mkubecek@suse.cz" date="1537790400">- update to 1.9.0
  * add testing system to libpcap, independent of tcpdump
  * changes to how pcap_t is activated
  * update included copies of BSD 4-clause license to 3-clause
  * additions to TCP header parsing, per RFC3168
  * support setting non-blocking mode before activating
  * fixes so that non-AF_INET addresses, are not ==AF_INET6 addresses
  * pcap_compile() in 1.8.0 and later is newly thread-safe
  * bound snaplen for linux tpacket_v2 to ~64k
  * make VLAN filter handle both metadata and inline tags
    (bsc#874131 bsc#993691 fate#321405)
  * D-Bus captures can now be up to 128MB in size
  * add DLT_LORATAP and DLT_VSOCK
  * allow specifying a specific capture protocol
  * RDMA sniffing support for pcap
  * increase minimum autoconf version requirement to 2.64
  * rpcapd: support for xinetd.conf and systemd units
  * provide pkgconfig file
- add BuildRequires for autoconf &gt;= 2.64
- package (newly added) pkgconfig file
- Check-only-VID-in-VLAN-test-issue-461.patch:
  fix "vlan &lt;id&gt;" test to check only VID, not complete TCI
- drop disable-remote.diff (superseded by upstream changes)</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="pmonreal@suse.com" date="1570017600">- Update to 1.9.1 [bsc#1153332]
  * Five CVE-2019-15161, CVE-2019-15162, CVE-2019-15163, CVE-2019-15164, CVE-2019-15165
  * Fixes for CVE-2018-16301, errors in pcapng reading.
  * Mention pcap_get_required_select_timeout() in the main pcap man page
  * Fix pcap-usb-linux.c build on systems with musl
  * Fix assorted man page and other documentation issues
  * Plug assorted memory leaks
  * Documentation changes to use https:
  * Changes to how time stamp calculations are done
  * Lots of tweaks to make newer compilers happier and warning-free and
    to fix instances of C undefined behavior
  * Warn if AC_PROG_CC_C99 can't enable C99 support
  * Rename pcap_set_protocol() to  pcap_set_protocol_linux().
  * Align pcap_t private data on an 8-byte boundary.
  * Fix various error messages
  * Use 64-bit clean API in dag_findalldevs()
  * Fix cleaning up after some errors
  * Work around some ethtool ioctl bugs in newer Linux kernels
  * Add backwards compatibility sections to some man pages
  * Fix autotool configuration on AIX and macOS
  * Don't export bpf_filter_with_aux_data() or struct bpf_aux_data;
    they're internal-only and subject to change
  * Fix pcapng block size checking
  * Fix reading of capture statistics for Linux USB
  * Fix packet size values for Linux USB packets
  * Check only VID in VLAN test in filterss
  * Fix pcap_list_datalinks on 802.11 devices on macOS
  * Fix overflows with very large snapshot length in pcap file
  * Improve parsing of rpcapd configuration file
  * Handle systems without strlcpy() or strlcat() better
  * Fix crashes and other errors with invalid filter expressions
  * Fix use of uninitialized file descriptor in remote capture
  * Fix some CMake issues
  * Fix some divide-by-zero issues with the filter compiler
  * Work around a GNU libc bug in pcap_nametonetaddr()
  * Add support for DLT_LINUX_SLL2
  * Fix handling of the packet-count argument for Myricom SNF devices
  * Fix --disable-rdma in configure script
  * Fix compilation of TurboCap support
  * Constify first argument to pcap_findalldevs_ex()
  * Fix a number of issues when running rpcapd as an inetd-style daemon
  * Fix CMake issues with D-Bus libraries
  * In rpcapd, clean up termination of a capture session
  * Redo remote capture protocol negotiation
  * In rpcapd, report the same error for "invalid user name" and
    "invalid password", to make brute-forcing harder
  * For remote captures, add an error code for "the server requires TLS"
  * Fix building as part of Npcap
  * Allow rpcapd to rebind more rapidly
  * Fix building shared libpcap library on midipix (midipix.org)
  * Fix hack to detect UTF-16LE adapter names on Windows not to go past
    the end of the string
  * Have pcap_dump_open_append() create the dump file if it doesn't exists
  * Fix the maxmum snapshot length for DLT_USBPCAP
  * Use -fPIC when building for 64-bit SPARC on Linux
  * Fix CMake 64-bit library installation directory on some Linux distributions
  * Boost the TPACKET_V3 timeout to the maximum if a timeout of 0 was specified
  * PCAPNG reader applies some sanity checks before doing malloc().
- Drop patch fixed upstream:
  * Check-only-VID-in-VLAN-test-issue-461.patch
- Rebase patch:
  * libpcap-1.0.0-ppp.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1613304000">- Update to 1.10.0
  * Require, and assume, some level of C99 support in the C compiler
  * Add support for capturing on DPDK devices
  * rpcap: support rpcap-over-TLS
  * Fix some memory leaks, including in pcap_compile()
  * Linux: handle systems without AF_INET or AF_UNIX socket support
  * Catch invalid IPv4 addresses in filters
  * Show special Linux BPF offsets symbolically in bpf_image()
    and bpf_dump()
  * Linux: get rid of Wireless Extensions for turning monitor mode on
  * Linux: proper memory sync for PACKET_MMAP
  * Linux: drop support for libnl 1 and 2.
  * Linux: Require PF_PACKET support, and kernel 2.6.27 or later
  * Add DLT_LINUX_SLL2
  * Add a new filter "ifindex" for DLT_LINUX_SLL2 files and live
    Linux captures
  * optimizer: add a hack to try to catch certain optimizer loops
  * Probe CONFIGURATION descriptor of connected USB devices
  * Linux: return error on interface going away, but not if it just
    went down
  * Linux: set socket protocol only after packet ring configured,
    reducing bogus packet drop reports
  * Linux: get ifdrop stats from sysfs.
  * Fix various security issues reported by Charles Smith at
    Tangible Security
  * Fix various security issues reported by Include Security
  * rpcapd: on UN*X, don't tell the client why authentication failed
  * Linux: when adjusting BPF programs, do not subtract the
    SLL[2]_HDR_LEN if the location is negative (special
    metadata offset)
  * Linux: with a timeout of zero, wait indefinitely
  * Linux: clean up support for some non-GNU libc C libraries
  * Increase the maximum snaplen for LINKTYPE_USBPCAP/DLT_USBPCAP
  * Fix handling of some ioctls that fail with "permission denied"
    even when the ioctl isn't supported at all
  * Added support for ICMPv6 types 1-4 as tokens in filters
  * Report the DLT description in error messages
  * Linux: Add support for DSA data link types
  * Linux USB: use the snapshot length to set the buffer size,
    and set the len field to reflect the length in the URB
  * rpcapd: allow rpcapd to rebind more rapidly
  * Add Haiku pcap implementation
  * rpcap: redo protocol version negotiation to avoid problems
    with old servers (it still works with servers using the old
    negotiation, as well as servers not supporting negotiation)
  * Remove (unused) SITA support here.
  * Correctly handle pcapng captures with more than one IDB with a
    snspshot length greater than the supported maximum
- Remove libpcap-no-old-socket.patch
- Rebase libpcap-1.0.0-s390.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1623412800">- Update to 1.10.1
  * Fix "type XXX subtype YYY" giving a parse error
  * Add PCAP_AVAILABLE_1_11.
  * Rename struct bpf_aux_data to avoid NetBSD compile errors
  * Fix cross-builds with older kernels lacking BPF_MOD and BPF_XOR
  * Fix Bison detection for minor version 0.
  * Fix parallel build with FreeBSD make.
  * Get DLT_MATCHING_MAX right in gencode.c on NetBSD.
  * Define timeradd() and timersub() if necessary.
  * Fix Cygwin/MSYS target directories.
  * Fix symlinking with DESTDIR.
  * Fix generation of libpcap.pc with CMake when not building
    a shared library.
  * Support reading version 1.2, which some writers produce,
    and which is the same as 1.0
  * Drop support for text-mode USB captures, as we require a 2.6.27
    or later kernel
  * Bluetooth: fix non-blocking mode. Don't assume that all compilers
    used to build for Linux support the __atomic builtins</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1672574400">- update to 1.10.2:
  * Build system updates
  * Developer visible fixes
  * Fix some formatting string issues found by cppcheck
  * "Dead" pcap_ts from pcap_open_dead() and ..._with_tstamp_precision():
    Don't crash if pcap_breakloop() is called.
  * Savefiles: multiple bug fixes handling files
  * Capture: Never process more than INT_MAX packets in a
    pcap_dispatch() call, to avoid integer overflow
  * Packet filtering: PFLOG bug fixes and improvements
  * Fix memory leak in capture device open
  * Fix detection of CAN/CAN FD packets in direction check
  * Fix double-free crashes on errors such as running on a kernel
    with CONFIG_PACKET_MMAP not configured
  * Multiple CANbus bug fixes
  * Fix pcap_findalldevs() to find usbmon devices
  * Fix handling of VLAN tagged packets if the link-layer type is
    changed from DLT_LINUX_SLL to DLT_LINUX_SLL2
  * Always turn on PACKET_AUXDATA
  * Correctly compute the "real" length for isochronous USB transfers</changelog>
  <changelog author="dmueller@suse.com" date="1674043200">- update to 1.10.3:
  * Sort the PUBHDR variable in Makefile.in in "ls" order.
  * Fix typo in comment in pflog.h.
  * Remove two no-longer-present files from .gitignore.
  * Update code and comments for handling failure to set promiscuous
    mode based on new information.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1680955200">- update to 1.10.4:
  * rpcap: Fix name of launchd service.
  * documentation updates and build system tweaks</changelog>
  <changelog author="pgajdos@suse.com" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="pmonreal@suse.com" date="1725278400">- Update to 1.10.5:
  * Security fixes:
  - [bsc#1230020, CVE-2023-7256] double free via addrinfo in sock_initaddress()
  - [bsc#1230034, CVE-2024-8006] null pointer derefence in pcap_findalldevs_ex()
  * Thread safety: Make some static variables thread-local
  * Packet filtering:
  - Return an error from pcap_compile() if the scanner fails to initialize.
  - Optimizer fix from Archit Shah to recompute dominators after moving
    code; (although the resulting filter isn't empty).
  - Optimizer fix from Archit Shah to mark value as unknown when store
    of that value is deleted.
  * Linux:
  - Don't use DLT_LINUX_SLL2 for anything other than the "any" device.
  - Avoid 32-bit unsigned integer overflow in USB captures.
  - Fix a file descriptor leak.
  - Fix DLT_CAN_SOCKETCAN handling of CAN FD.
  - Add CAN XL support to DLT_CAN_SOCKETCAN.
  - Clean up the code that sets the "real" ("original") length for
    isochronous USB transfers.
  - Avoid unnecessary blocking on recvmsg() in the Bluetooth monitor and
    Bluetoth modules.
  * Haiku:
  - Report non-existent devices correctly.
  - Fix handling of packet statistics.
  - Fix packet timestamping.
  - Fix packet filtering with low snaplen.
  - Improve connection status reporting.
  - Add support for promiscuous mode.
  - Detect DLTs and loopback capture support at run time.
  - Report IEEE 802.11 as PCAP_IF_WIRELESS.
  * BSD, macOS, AIX, Solaris 11, Linux:
  - Add a new error PCAP_ERROR_CAPTURE_NOTSUP, for use if a capture
    mechanism is not present, in the hopes that, for example,
    attempts to capture on Windows Services for Linux 1, in which
    the NT kernel attempts to simulate Linux system calls but does
    not support packet sockets, can get an error that better
    indicates the underlying problem.
  * AirPcap: Format an error message if we run out of memory.
  * nflog: Make sure we don't overflow when rounding up the TLV length.
  * rpcap:
  - Handle routines removed in at least some OpenSSL libraries.
  - CVE-2023-7256: Clean up sock_initaddress() and its callers to avoid
    double frees in some cases.
  - Don't define SOCKET ourselves; instead, define PCAP_SOCKET as int
    on UN*Xes and as SOCKET on Windows.
  - CVE-2024-8006: Fix pcap_findalldevs_ex() not to crash if passed a
    file:// URL with a path to a directory that cannot be opened.
  * Savefiles:
  - Handle DLT_/LINKTYPE_ mapping better, to handle some
    OpenBSD-specific link types better.
  - Treat if_tsoffset as signed in pcapng files, as the spec says.
  - Don't try to fix the "real" length for isochronous USB
    transfers if the number of USB descriptors is too large.
  - Reject pcap files where one of the reserved fields in the
    "link-layer type plus other stuff" is non-zero.
  * Rebase libpcap-1.0.0-s390.patch</changelog>
  <changelog author="meissner@suse.com" date="1727265600">- enable rdma support (bsc#1230894)</changelog>
  <changelog author="pmonreal@suse.com" date="1767614400">- Security fix: [bsc#1255765, CVE-2025-11961]
  * Fix out-of-bound-write and out-of-bound-read in pcap_ether_aton()
    due to missing validation of provided MAC-48 address string
  * Add libpcap-CVE-2025-11961.patch</changelog>
</package>
<package pkgid="1d8e1cf0ed7634c358383cf25b9f26aadb8a575b7c6cd440412bbaef476a4220" name="libpcap-devel" arch="x86_64">
  <version epoch="0" ver="1.10.5" rel="150700.3.10.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036800">- Allow bluetooth monitoring support unconditionally.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036801">- Formatted the specs file using spec-cleaner.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1487160000">- Dropped patches not required after review
  * libpcap-1.0.0-pcap-bpf.patch
  * libpcap-1.5.2-filter-fix.patch
- Reference of the pull request for the rest of the patches
  * https://github.com/the-tcpdump-group/libpcap/issues/196
- Changed libpcap-1.0.0-s390.patch to the git formatted one</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Do not put conditions about the provides for &lt; 11.0</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- Restore section setting $pic</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1505217600">- Added a patch (disable-remote.diff) to fix applications to FTBFS
  if they define HAVE_REMOTE (deb#843384). Patch taken from Debian.</changelog>
  <changelog author="jengelh@inai.de" date="1519905600">- Fix SRPM group</changelog>
  <changelog author="mkubecek@suse.cz" date="1537790400">- update to 1.9.0
  * add testing system to libpcap, independent of tcpdump
  * changes to how pcap_t is activated
  * update included copies of BSD 4-clause license to 3-clause
  * additions to TCP header parsing, per RFC3168
  * support setting non-blocking mode before activating
  * fixes so that non-AF_INET addresses, are not ==AF_INET6 addresses
  * pcap_compile() in 1.8.0 and later is newly thread-safe
  * bound snaplen for linux tpacket_v2 to ~64k
  * make VLAN filter handle both metadata and inline tags
    (bsc#874131 bsc#993691 fate#321405)
  * D-Bus captures can now be up to 128MB in size
  * add DLT_LORATAP and DLT_VSOCK
  * allow specifying a specific capture protocol
  * RDMA sniffing support for pcap
  * increase minimum autoconf version requirement to 2.64
  * rpcapd: support for xinetd.conf and systemd units
  * provide pkgconfig file
- add BuildRequires for autoconf &gt;= 2.64
- package (newly added) pkgconfig file
- Check-only-VID-in-VLAN-test-issue-461.patch:
  fix "vlan &lt;id&gt;" test to check only VID, not complete TCI
- drop disable-remote.diff (superseded by upstream changes)</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="pmonreal@suse.com" date="1570017600">- Update to 1.9.1 [bsc#1153332]
  * Five CVE-2019-15161, CVE-2019-15162, CVE-2019-15163, CVE-2019-15164, CVE-2019-15165
  * Fixes for CVE-2018-16301, errors in pcapng reading.
  * Mention pcap_get_required_select_timeout() in the main pcap man page
  * Fix pcap-usb-linux.c build on systems with musl
  * Fix assorted man page and other documentation issues
  * Plug assorted memory leaks
  * Documentation changes to use https:
  * Changes to how time stamp calculations are done
  * Lots of tweaks to make newer compilers happier and warning-free and
    to fix instances of C undefined behavior
  * Warn if AC_PROG_CC_C99 can't enable C99 support
  * Rename pcap_set_protocol() to  pcap_set_protocol_linux().
  * Align pcap_t private data on an 8-byte boundary.
  * Fix various error messages
  * Use 64-bit clean API in dag_findalldevs()
  * Fix cleaning up after some errors
  * Work around some ethtool ioctl bugs in newer Linux kernels
  * Add backwards compatibility sections to some man pages
  * Fix autotool configuration on AIX and macOS
  * Don't export bpf_filter_with_aux_data() or struct bpf_aux_data;
    they're internal-only and subject to change
  * Fix pcapng block size checking
  * Fix reading of capture statistics for Linux USB
  * Fix packet size values for Linux USB packets
  * Check only VID in VLAN test in filterss
  * Fix pcap_list_datalinks on 802.11 devices on macOS
  * Fix overflows with very large snapshot length in pcap file
  * Improve parsing of rpcapd configuration file
  * Handle systems without strlcpy() or strlcat() better
  * Fix crashes and other errors with invalid filter expressions
  * Fix use of uninitialized file descriptor in remote capture
  * Fix some CMake issues
  * Fix some divide-by-zero issues with the filter compiler
  * Work around a GNU libc bug in pcap_nametonetaddr()
  * Add support for DLT_LINUX_SLL2
  * Fix handling of the packet-count argument for Myricom SNF devices
  * Fix --disable-rdma in configure script
  * Fix compilation of TurboCap support
  * Constify first argument to pcap_findalldevs_ex()
  * Fix a number of issues when running rpcapd as an inetd-style daemon
  * Fix CMake issues with D-Bus libraries
  * In rpcapd, clean up termination of a capture session
  * Redo remote capture protocol negotiation
  * In rpcapd, report the same error for "invalid user name" and
    "invalid password", to make brute-forcing harder
  * For remote captures, add an error code for "the server requires TLS"
  * Fix building as part of Npcap
  * Allow rpcapd to rebind more rapidly
  * Fix building shared libpcap library on midipix (midipix.org)
  * Fix hack to detect UTF-16LE adapter names on Windows not to go past
    the end of the string
  * Have pcap_dump_open_append() create the dump file if it doesn't exists
  * Fix the maxmum snapshot length for DLT_USBPCAP
  * Use -fPIC when building for 64-bit SPARC on Linux
  * Fix CMake 64-bit library installation directory on some Linux distributions
  * Boost the TPACKET_V3 timeout to the maximum if a timeout of 0 was specified
  * PCAPNG reader applies some sanity checks before doing malloc().
- Drop patch fixed upstream:
  * Check-only-VID-in-VLAN-test-issue-461.patch
- Rebase patch:
  * libpcap-1.0.0-ppp.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1613304000">- Update to 1.10.0
  * Require, and assume, some level of C99 support in the C compiler
  * Add support for capturing on DPDK devices
  * rpcap: support rpcap-over-TLS
  * Fix some memory leaks, including in pcap_compile()
  * Linux: handle systems without AF_INET or AF_UNIX socket support
  * Catch invalid IPv4 addresses in filters
  * Show special Linux BPF offsets symbolically in bpf_image()
    and bpf_dump()
  * Linux: get rid of Wireless Extensions for turning monitor mode on
  * Linux: proper memory sync for PACKET_MMAP
  * Linux: drop support for libnl 1 and 2.
  * Linux: Require PF_PACKET support, and kernel 2.6.27 or later
  * Add DLT_LINUX_SLL2
  * Add a new filter "ifindex" for DLT_LINUX_SLL2 files and live
    Linux captures
  * optimizer: add a hack to try to catch certain optimizer loops
  * Probe CONFIGURATION descriptor of connected USB devices
  * Linux: return error on interface going away, but not if it just
    went down
  * Linux: set socket protocol only after packet ring configured,
    reducing bogus packet drop reports
  * Linux: get ifdrop stats from sysfs.
  * Fix various security issues reported by Charles Smith at
    Tangible Security
  * Fix various security issues reported by Include Security
  * rpcapd: on UN*X, don't tell the client why authentication failed
  * Linux: when adjusting BPF programs, do not subtract the
    SLL[2]_HDR_LEN if the location is negative (special
    metadata offset)
  * Linux: with a timeout of zero, wait indefinitely
  * Linux: clean up support for some non-GNU libc C libraries
  * Increase the maximum snaplen for LINKTYPE_USBPCAP/DLT_USBPCAP
  * Fix handling of some ioctls that fail with "permission denied"
    even when the ioctl isn't supported at all
  * Added support for ICMPv6 types 1-4 as tokens in filters
  * Report the DLT description in error messages
  * Linux: Add support for DSA data link types
  * Linux USB: use the snapshot length to set the buffer size,
    and set the len field to reflect the length in the URB
  * rpcapd: allow rpcapd to rebind more rapidly
  * Add Haiku pcap implementation
  * rpcap: redo protocol version negotiation to avoid problems
    with old servers (it still works with servers using the old
    negotiation, as well as servers not supporting negotiation)
  * Remove (unused) SITA support here.
  * Correctly handle pcapng captures with more than one IDB with a
    snspshot length greater than the supported maximum
- Remove libpcap-no-old-socket.patch
- Rebase libpcap-1.0.0-s390.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1623412800">- Update to 1.10.1
  * Fix "type XXX subtype YYY" giving a parse error
  * Add PCAP_AVAILABLE_1_11.
  * Rename struct bpf_aux_data to avoid NetBSD compile errors
  * Fix cross-builds with older kernels lacking BPF_MOD and BPF_XOR
  * Fix Bison detection for minor version 0.
  * Fix parallel build with FreeBSD make.
  * Get DLT_MATCHING_MAX right in gencode.c on NetBSD.
  * Define timeradd() and timersub() if necessary.
  * Fix Cygwin/MSYS target directories.
  * Fix symlinking with DESTDIR.
  * Fix generation of libpcap.pc with CMake when not building
    a shared library.
  * Support reading version 1.2, which some writers produce,
    and which is the same as 1.0
  * Drop support for text-mode USB captures, as we require a 2.6.27
    or later kernel
  * Bluetooth: fix non-blocking mode. Don't assume that all compilers
    used to build for Linux support the __atomic builtins</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1672574400">- update to 1.10.2:
  * Build system updates
  * Developer visible fixes
  * Fix some formatting string issues found by cppcheck
  * "Dead" pcap_ts from pcap_open_dead() and ..._with_tstamp_precision():
    Don't crash if pcap_breakloop() is called.
  * Savefiles: multiple bug fixes handling files
  * Capture: Never process more than INT_MAX packets in a
    pcap_dispatch() call, to avoid integer overflow
  * Packet filtering: PFLOG bug fixes and improvements
  * Fix memory leak in capture device open
  * Fix detection of CAN/CAN FD packets in direction check
  * Fix double-free crashes on errors such as running on a kernel
    with CONFIG_PACKET_MMAP not configured
  * Multiple CANbus bug fixes
  * Fix pcap_findalldevs() to find usbmon devices
  * Fix handling of VLAN tagged packets if the link-layer type is
    changed from DLT_LINUX_SLL to DLT_LINUX_SLL2
  * Always turn on PACKET_AUXDATA
  * Correctly compute the "real" length for isochronous USB transfers</changelog>
  <changelog author="dmueller@suse.com" date="1674043200">- update to 1.10.3:
  * Sort the PUBHDR variable in Makefile.in in "ls" order.
  * Fix typo in comment in pflog.h.
  * Remove two no-longer-present files from .gitignore.
  * Update code and comments for handling failure to set promiscuous
    mode based on new information.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1680955200">- update to 1.10.4:
  * rpcap: Fix name of launchd service.
  * documentation updates and build system tweaks</changelog>
  <changelog author="pgajdos@suse.com" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="pmonreal@suse.com" date="1725278400">- Update to 1.10.5:
  * Security fixes:
  - [bsc#1230020, CVE-2023-7256] double free via addrinfo in sock_initaddress()
  - [bsc#1230034, CVE-2024-8006] null pointer derefence in pcap_findalldevs_ex()
  * Thread safety: Make some static variables thread-local
  * Packet filtering:
  - Return an error from pcap_compile() if the scanner fails to initialize.
  - Optimizer fix from Archit Shah to recompute dominators after moving
    code; (although the resulting filter isn't empty).
  - Optimizer fix from Archit Shah to mark value as unknown when store
    of that value is deleted.
  * Linux:
  - Don't use DLT_LINUX_SLL2 for anything other than the "any" device.
  - Avoid 32-bit unsigned integer overflow in USB captures.
  - Fix a file descriptor leak.
  - Fix DLT_CAN_SOCKETCAN handling of CAN FD.
  - Add CAN XL support to DLT_CAN_SOCKETCAN.
  - Clean up the code that sets the "real" ("original") length for
    isochronous USB transfers.
  - Avoid unnecessary blocking on recvmsg() in the Bluetooth monitor and
    Bluetoth modules.
  * Haiku:
  - Report non-existent devices correctly.
  - Fix handling of packet statistics.
  - Fix packet timestamping.
  - Fix packet filtering with low snaplen.
  - Improve connection status reporting.
  - Add support for promiscuous mode.
  - Detect DLTs and loopback capture support at run time.
  - Report IEEE 802.11 as PCAP_IF_WIRELESS.
  * BSD, macOS, AIX, Solaris 11, Linux:
  - Add a new error PCAP_ERROR_CAPTURE_NOTSUP, for use if a capture
    mechanism is not present, in the hopes that, for example,
    attempts to capture on Windows Services for Linux 1, in which
    the NT kernel attempts to simulate Linux system calls but does
    not support packet sockets, can get an error that better
    indicates the underlying problem.
  * AirPcap: Format an error message if we run out of memory.
  * nflog: Make sure we don't overflow when rounding up the TLV length.
  * rpcap:
  - Handle routines removed in at least some OpenSSL libraries.
  - CVE-2023-7256: Clean up sock_initaddress() and its callers to avoid
    double frees in some cases.
  - Don't define SOCKET ourselves; instead, define PCAP_SOCKET as int
    on UN*Xes and as SOCKET on Windows.
  - CVE-2024-8006: Fix pcap_findalldevs_ex() not to crash if passed a
    file:// URL with a path to a directory that cannot be opened.
  * Savefiles:
  - Handle DLT_/LINKTYPE_ mapping better, to handle some
    OpenBSD-specific link types better.
  - Treat if_tsoffset as signed in pcapng files, as the spec says.
  - Don't try to fix the "real" length for isochronous USB
    transfers if the number of USB descriptors is too large.
  - Reject pcap files where one of the reserved fields in the
    "link-layer type plus other stuff" is non-zero.
  * Rebase libpcap-1.0.0-s390.patch</changelog>
  <changelog author="meissner@suse.com" date="1727265600">- enable rdma support (bsc#1230894)</changelog>
  <changelog author="pmonreal@suse.com" date="1767614400">- Security fix: [bsc#1255765, CVE-2025-11961]
  * Fix out-of-bound-write and out-of-bound-read in pcap_ether_aton()
    due to missing validation of provided MAC-48 address string
  * Add libpcap-CVE-2025-11961.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1772107200">- Fix bsc#1258668: Enable RMDA - Fix missing dependency in spec so libcap
  is built with  RMDA support.</changelog>
</package>
<package pkgid="232bf6914685cca6a47e897247179279b41c082404225af0b6871460e6cd82f6" name="libpcap-devel" arch="x86_64">
  <version epoch="0" ver="1.10.5" rel="150700.3.7.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036800">- update to 1.8.1
  * Clean up the name-to-DLT mapping table.
  * Add some newer DLT_ values:
  IPMI_HPM_2,ZWAVE_R1_R2,ZWAVE_R3,WATTSTOPPER_DLM,ISO_14443,RDS
  * Fix handling of packet count in the TPACKET_V3 inner loop: GitHub issue
  [#493].
  * Filter out duplicate looped back CAN frames.
  * Fix the handling of loopback filters for IPv6 packets.
  * Add a link-layer header type for RDS (IEC 62106) groups.
  * On Linux, handle all CAN captures with pcap-linux.c, in cooked mode.
  * Removes the need for the "host-endian" link-layer header type.
  * Compile with '-Wused-but-marked-unused' in devel mode if supported
  * Have separate DLTs for big-endian and host-endian SocketCAN headers.
  * Require that version.h be generated: all build procedures we support generate version.h (autoconf, CMake, MSVC)!
  * Properly check for sock_recv() errors.
  * Re-impose some of Winsock's limitations on sock_recv().
  * Replace sprintf() with pcap_snprintf().
  * Fix signature of pcap_stats_ex_remote().
  * Have rpcap_remoteact_getsock() return a SOCKET and supply an "is active" flag.
  * Clean up {DAG, Septel, Myricom SNF}-only builds.
  * pcap_create_interface() needs the interface name on Linux.
  * Clean up hardware time stamp support: the "any" device does not support any time stamp types.
  * Recognize 802.1ad nested VLAN tag in vlan filter.
- dropped libpcap-ocloexec.patch, never upstreamed.
- refreshed libpcap-1.0.0-ppp.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036801">- Allow bluetooth monitoring support unconditionally.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036802">- Formatted the specs file using spec-cleaner.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1487160000">- Dropped patches not required after review
  * libpcap-1.0.0-pcap-bpf.patch
  * libpcap-1.5.2-filter-fix.patch
- Reference of the pull request for the rest of the patches
  * https://github.com/the-tcpdump-group/libpcap/issues/196
- Changed libpcap-1.0.0-s390.patch to the git formatted one</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Do not put conditions about the provides for &lt; 11.0</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- Restore section setting $pic</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1505217600">- Added a patch (disable-remote.diff) to fix applications to FTBFS
  if they define HAVE_REMOTE (deb#843384). Patch taken from Debian.</changelog>
  <changelog author="jengelh@inai.de" date="1519905600">- Fix SRPM group</changelog>
  <changelog author="mkubecek@suse.cz" date="1537790400">- update to 1.9.0
  * add testing system to libpcap, independent of tcpdump
  * changes to how pcap_t is activated
  * update included copies of BSD 4-clause license to 3-clause
  * additions to TCP header parsing, per RFC3168
  * support setting non-blocking mode before activating
  * fixes so that non-AF_INET addresses, are not ==AF_INET6 addresses
  * pcap_compile() in 1.8.0 and later is newly thread-safe
  * bound snaplen for linux tpacket_v2 to ~64k
  * make VLAN filter handle both metadata and inline tags
    (bsc#874131 bsc#993691 fate#321405)
  * D-Bus captures can now be up to 128MB in size
  * add DLT_LORATAP and DLT_VSOCK
  * allow specifying a specific capture protocol
  * RDMA sniffing support for pcap
  * increase minimum autoconf version requirement to 2.64
  * rpcapd: support for xinetd.conf and systemd units
  * provide pkgconfig file
- add BuildRequires for autoconf &gt;= 2.64
- package (newly added) pkgconfig file
- Check-only-VID-in-VLAN-test-issue-461.patch:
  fix "vlan &lt;id&gt;" test to check only VID, not complete TCI
- drop disable-remote.diff (superseded by upstream changes)</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="pmonreal@suse.com" date="1570017600">- Update to 1.9.1 [bsc#1153332]
  * Five CVE-2019-15161, CVE-2019-15162, CVE-2019-15163, CVE-2019-15164, CVE-2019-15165
  * Fixes for CVE-2018-16301, errors in pcapng reading.
  * Mention pcap_get_required_select_timeout() in the main pcap man page
  * Fix pcap-usb-linux.c build on systems with musl
  * Fix assorted man page and other documentation issues
  * Plug assorted memory leaks
  * Documentation changes to use https:
  * Changes to how time stamp calculations are done
  * Lots of tweaks to make newer compilers happier and warning-free and
    to fix instances of C undefined behavior
  * Warn if AC_PROG_CC_C99 can't enable C99 support
  * Rename pcap_set_protocol() to  pcap_set_protocol_linux().
  * Align pcap_t private data on an 8-byte boundary.
  * Fix various error messages
  * Use 64-bit clean API in dag_findalldevs()
  * Fix cleaning up after some errors
  * Work around some ethtool ioctl bugs in newer Linux kernels
  * Add backwards compatibility sections to some man pages
  * Fix autotool configuration on AIX and macOS
  * Don't export bpf_filter_with_aux_data() or struct bpf_aux_data;
    they're internal-only and subject to change
  * Fix pcapng block size checking
  * Fix reading of capture statistics for Linux USB
  * Fix packet size values for Linux USB packets
  * Check only VID in VLAN test in filterss
  * Fix pcap_list_datalinks on 802.11 devices on macOS
  * Fix overflows with very large snapshot length in pcap file
  * Improve parsing of rpcapd configuration file
  * Handle systems without strlcpy() or strlcat() better
  * Fix crashes and other errors with invalid filter expressions
  * Fix use of uninitialized file descriptor in remote capture
  * Fix some CMake issues
  * Fix some divide-by-zero issues with the filter compiler
  * Work around a GNU libc bug in pcap_nametonetaddr()
  * Add support for DLT_LINUX_SLL2
  * Fix handling of the packet-count argument for Myricom SNF devices
  * Fix --disable-rdma in configure script
  * Fix compilation of TurboCap support
  * Constify first argument to pcap_findalldevs_ex()
  * Fix a number of issues when running rpcapd as an inetd-style daemon
  * Fix CMake issues with D-Bus libraries
  * In rpcapd, clean up termination of a capture session
  * Redo remote capture protocol negotiation
  * In rpcapd, report the same error for "invalid user name" and
    "invalid password", to make brute-forcing harder
  * For remote captures, add an error code for "the server requires TLS"
  * Fix building as part of Npcap
  * Allow rpcapd to rebind more rapidly
  * Fix building shared libpcap library on midipix (midipix.org)
  * Fix hack to detect UTF-16LE adapter names on Windows not to go past
    the end of the string
  * Have pcap_dump_open_append() create the dump file if it doesn't exists
  * Fix the maxmum snapshot length for DLT_USBPCAP
  * Use -fPIC when building for 64-bit SPARC on Linux
  * Fix CMake 64-bit library installation directory on some Linux distributions
  * Boost the TPACKET_V3 timeout to the maximum if a timeout of 0 was specified
  * PCAPNG reader applies some sanity checks before doing malloc().
- Drop patch fixed upstream:
  * Check-only-VID-in-VLAN-test-issue-461.patch
- Rebase patch:
  * libpcap-1.0.0-ppp.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1613304000">- Update to 1.10.0
  * Require, and assume, some level of C99 support in the C compiler
  * Add support for capturing on DPDK devices
  * rpcap: support rpcap-over-TLS
  * Fix some memory leaks, including in pcap_compile()
  * Linux: handle systems without AF_INET or AF_UNIX socket support
  * Catch invalid IPv4 addresses in filters
  * Show special Linux BPF offsets symbolically in bpf_image()
    and bpf_dump()
  * Linux: get rid of Wireless Extensions for turning monitor mode on
  * Linux: proper memory sync for PACKET_MMAP
  * Linux: drop support for libnl 1 and 2.
  * Linux: Require PF_PACKET support, and kernel 2.6.27 or later
  * Add DLT_LINUX_SLL2
  * Add a new filter "ifindex" for DLT_LINUX_SLL2 files and live
    Linux captures
  * optimizer: add a hack to try to catch certain optimizer loops
  * Probe CONFIGURATION descriptor of connected USB devices
  * Linux: return error on interface going away, but not if it just
    went down
  * Linux: set socket protocol only after packet ring configured,
    reducing bogus packet drop reports
  * Linux: get ifdrop stats from sysfs.
  * Fix various security issues reported by Charles Smith at
    Tangible Security
  * Fix various security issues reported by Include Security
  * rpcapd: on UN*X, don't tell the client why authentication failed
  * Linux: when adjusting BPF programs, do not subtract the
    SLL[2]_HDR_LEN if the location is negative (special
    metadata offset)
  * Linux: with a timeout of zero, wait indefinitely
  * Linux: clean up support for some non-GNU libc C libraries
  * Increase the maximum snaplen for LINKTYPE_USBPCAP/DLT_USBPCAP
  * Fix handling of some ioctls that fail with "permission denied"
    even when the ioctl isn't supported at all
  * Added support for ICMPv6 types 1-4 as tokens in filters
  * Report the DLT description in error messages
  * Linux: Add support for DSA data link types
  * Linux USB: use the snapshot length to set the buffer size,
    and set the len field to reflect the length in the URB
  * rpcapd: allow rpcapd to rebind more rapidly
  * Add Haiku pcap implementation
  * rpcap: redo protocol version negotiation to avoid problems
    with old servers (it still works with servers using the old
    negotiation, as well as servers not supporting negotiation)
  * Remove (unused) SITA support here.
  * Correctly handle pcapng captures with more than one IDB with a
    snspshot length greater than the supported maximum
- Remove libpcap-no-old-socket.patch
- Rebase libpcap-1.0.0-s390.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1623412800">- Update to 1.10.1
  * Fix "type XXX subtype YYY" giving a parse error
  * Add PCAP_AVAILABLE_1_11.
  * Rename struct bpf_aux_data to avoid NetBSD compile errors
  * Fix cross-builds with older kernels lacking BPF_MOD and BPF_XOR
  * Fix Bison detection for minor version 0.
  * Fix parallel build with FreeBSD make.
  * Get DLT_MATCHING_MAX right in gencode.c on NetBSD.
  * Define timeradd() and timersub() if necessary.
  * Fix Cygwin/MSYS target directories.
  * Fix symlinking with DESTDIR.
  * Fix generation of libpcap.pc with CMake when not building
    a shared library.
  * Support reading version 1.2, which some writers produce,
    and which is the same as 1.0
  * Drop support for text-mode USB captures, as we require a 2.6.27
    or later kernel
  * Bluetooth: fix non-blocking mode. Don't assume that all compilers
    used to build for Linux support the __atomic builtins</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1672574400">- update to 1.10.2:
  * Build system updates
  * Developer visible fixes
  * Fix some formatting string issues found by cppcheck
  * "Dead" pcap_ts from pcap_open_dead() and ..._with_tstamp_precision():
    Don't crash if pcap_breakloop() is called.
  * Savefiles: multiple bug fixes handling files
  * Capture: Never process more than INT_MAX packets in a
    pcap_dispatch() call, to avoid integer overflow
  * Packet filtering: PFLOG bug fixes and improvements
  * Fix memory leak in capture device open
  * Fix detection of CAN/CAN FD packets in direction check
  * Fix double-free crashes on errors such as running on a kernel
    with CONFIG_PACKET_MMAP not configured
  * Multiple CANbus bug fixes
  * Fix pcap_findalldevs() to find usbmon devices
  * Fix handling of VLAN tagged packets if the link-layer type is
    changed from DLT_LINUX_SLL to DLT_LINUX_SLL2
  * Always turn on PACKET_AUXDATA
  * Correctly compute the "real" length for isochronous USB transfers</changelog>
  <changelog author="dmueller@suse.com" date="1674043200">- update to 1.10.3:
  * Sort the PUBHDR variable in Makefile.in in "ls" order.
  * Fix typo in comment in pflog.h.
  * Remove two no-longer-present files from .gitignore.
  * Update code and comments for handling failure to set promiscuous
    mode based on new information.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1680955200">- update to 1.10.4:
  * rpcap: Fix name of launchd service.
  * documentation updates and build system tweaks</changelog>
  <changelog author="pgajdos@suse.com" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="pmonreal@suse.com" date="1725278400">- Update to 1.10.5:
  * Security fixes:
  - [bsc#1230020, CVE-2023-7256] double free via addrinfo in sock_initaddress()
  - [bsc#1230034, CVE-2024-8006] null pointer derefence in pcap_findalldevs_ex()
  * Thread safety: Make some static variables thread-local
  * Packet filtering:
  - Return an error from pcap_compile() if the scanner fails to initialize.
  - Optimizer fix from Archit Shah to recompute dominators after moving
    code; (although the resulting filter isn't empty).
  - Optimizer fix from Archit Shah to mark value as unknown when store
    of that value is deleted.
  * Linux:
  - Don't use DLT_LINUX_SLL2 for anything other than the "any" device.
  - Avoid 32-bit unsigned integer overflow in USB captures.
  - Fix a file descriptor leak.
  - Fix DLT_CAN_SOCKETCAN handling of CAN FD.
  - Add CAN XL support to DLT_CAN_SOCKETCAN.
  - Clean up the code that sets the "real" ("original") length for
    isochronous USB transfers.
  - Avoid unnecessary blocking on recvmsg() in the Bluetooth monitor and
    Bluetoth modules.
  * Haiku:
  - Report non-existent devices correctly.
  - Fix handling of packet statistics.
  - Fix packet timestamping.
  - Fix packet filtering with low snaplen.
  - Improve connection status reporting.
  - Add support for promiscuous mode.
  - Detect DLTs and loopback capture support at run time.
  - Report IEEE 802.11 as PCAP_IF_WIRELESS.
  * BSD, macOS, AIX, Solaris 11, Linux:
  - Add a new error PCAP_ERROR_CAPTURE_NOTSUP, for use if a capture
    mechanism is not present, in the hopes that, for example,
    attempts to capture on Windows Services for Linux 1, in which
    the NT kernel attempts to simulate Linux system calls but does
    not support packet sockets, can get an error that better
    indicates the underlying problem.
  * AirPcap: Format an error message if we run out of memory.
  * nflog: Make sure we don't overflow when rounding up the TLV length.
  * rpcap:
  - Handle routines removed in at least some OpenSSL libraries.
  - CVE-2023-7256: Clean up sock_initaddress() and its callers to avoid
    double frees in some cases.
  - Don't define SOCKET ourselves; instead, define PCAP_SOCKET as int
    on UN*Xes and as SOCKET on Windows.
  - CVE-2024-8006: Fix pcap_findalldevs_ex() not to crash if passed a
    file:// URL with a path to a directory that cannot be opened.
  * Savefiles:
  - Handle DLT_/LINKTYPE_ mapping better, to handle some
    OpenBSD-specific link types better.
  - Treat if_tsoffset as signed in pcapng files, as the spec says.
  - Don't try to fix the "real" length for isochronous USB
    transfers if the number of USB descriptors is too large.
  - Reject pcap files where one of the reserved fields in the
    "link-layer type plus other stuff" is non-zero.
  * Rebase libpcap-1.0.0-s390.patch</changelog>
  <changelog author="meissner@suse.com" date="1727265600">- enable rdma support (bsc#1230894)</changelog>
  <changelog author="pmonreal@suse.com" date="1767614400">- Security fix: [bsc#1255765, CVE-2025-11961]
  * Fix out-of-bound-write and out-of-bound-read in pcap_ether_aton()
    due to missing validation of provided MAC-48 address string
  * Add libpcap-CVE-2025-11961.patch</changelog>
</package>
<package pkgid="c8651a24c1f6c7dc69adff379091649490acdaf359f78361220ce87656817fdc" name="libpcap1" arch="x86_64">
  <version epoch="0" ver="1.10.5" rel="150700.3.10.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036800">- Allow bluetooth monitoring support unconditionally.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036801">- Formatted the specs file using spec-cleaner.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1487160000">- Dropped patches not required after review
  * libpcap-1.0.0-pcap-bpf.patch
  * libpcap-1.5.2-filter-fix.patch
- Reference of the pull request for the rest of the patches
  * https://github.com/the-tcpdump-group/libpcap/issues/196
- Changed libpcap-1.0.0-s390.patch to the git formatted one</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Do not put conditions about the provides for &lt; 11.0</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- Restore section setting $pic</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1505217600">- Added a patch (disable-remote.diff) to fix applications to FTBFS
  if they define HAVE_REMOTE (deb#843384). Patch taken from Debian.</changelog>
  <changelog author="jengelh@inai.de" date="1519905600">- Fix SRPM group</changelog>
  <changelog author="mkubecek@suse.cz" date="1537790400">- update to 1.9.0
  * add testing system to libpcap, independent of tcpdump
  * changes to how pcap_t is activated
  * update included copies of BSD 4-clause license to 3-clause
  * additions to TCP header parsing, per RFC3168
  * support setting non-blocking mode before activating
  * fixes so that non-AF_INET addresses, are not ==AF_INET6 addresses
  * pcap_compile() in 1.8.0 and later is newly thread-safe
  * bound snaplen for linux tpacket_v2 to ~64k
  * make VLAN filter handle both metadata and inline tags
    (bsc#874131 bsc#993691 fate#321405)
  * D-Bus captures can now be up to 128MB in size
  * add DLT_LORATAP and DLT_VSOCK
  * allow specifying a specific capture protocol
  * RDMA sniffing support for pcap
  * increase minimum autoconf version requirement to 2.64
  * rpcapd: support for xinetd.conf and systemd units
  * provide pkgconfig file
- add BuildRequires for autoconf &gt;= 2.64
- package (newly added) pkgconfig file
- Check-only-VID-in-VLAN-test-issue-461.patch:
  fix "vlan &lt;id&gt;" test to check only VID, not complete TCI
- drop disable-remote.diff (superseded by upstream changes)</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="pmonreal@suse.com" date="1570017600">- Update to 1.9.1 [bsc#1153332]
  * Five CVE-2019-15161, CVE-2019-15162, CVE-2019-15163, CVE-2019-15164, CVE-2019-15165
  * Fixes for CVE-2018-16301, errors in pcapng reading.
  * Mention pcap_get_required_select_timeout() in the main pcap man page
  * Fix pcap-usb-linux.c build on systems with musl
  * Fix assorted man page and other documentation issues
  * Plug assorted memory leaks
  * Documentation changes to use https:
  * Changes to how time stamp calculations are done
  * Lots of tweaks to make newer compilers happier and warning-free and
    to fix instances of C undefined behavior
  * Warn if AC_PROG_CC_C99 can't enable C99 support
  * Rename pcap_set_protocol() to  pcap_set_protocol_linux().
  * Align pcap_t private data on an 8-byte boundary.
  * Fix various error messages
  * Use 64-bit clean API in dag_findalldevs()
  * Fix cleaning up after some errors
  * Work around some ethtool ioctl bugs in newer Linux kernels
  * Add backwards compatibility sections to some man pages
  * Fix autotool configuration on AIX and macOS
  * Don't export bpf_filter_with_aux_data() or struct bpf_aux_data;
    they're internal-only and subject to change
  * Fix pcapng block size checking
  * Fix reading of capture statistics for Linux USB
  * Fix packet size values for Linux USB packets
  * Check only VID in VLAN test in filterss
  * Fix pcap_list_datalinks on 802.11 devices on macOS
  * Fix overflows with very large snapshot length in pcap file
  * Improve parsing of rpcapd configuration file
  * Handle systems without strlcpy() or strlcat() better
  * Fix crashes and other errors with invalid filter expressions
  * Fix use of uninitialized file descriptor in remote capture
  * Fix some CMake issues
  * Fix some divide-by-zero issues with the filter compiler
  * Work around a GNU libc bug in pcap_nametonetaddr()
  * Add support for DLT_LINUX_SLL2
  * Fix handling of the packet-count argument for Myricom SNF devices
  * Fix --disable-rdma in configure script
  * Fix compilation of TurboCap support
  * Constify first argument to pcap_findalldevs_ex()
  * Fix a number of issues when running rpcapd as an inetd-style daemon
  * Fix CMake issues with D-Bus libraries
  * In rpcapd, clean up termination of a capture session
  * Redo remote capture protocol negotiation
  * In rpcapd, report the same error for "invalid user name" and
    "invalid password", to make brute-forcing harder
  * For remote captures, add an error code for "the server requires TLS"
  * Fix building as part of Npcap
  * Allow rpcapd to rebind more rapidly
  * Fix building shared libpcap library on midipix (midipix.org)
  * Fix hack to detect UTF-16LE adapter names on Windows not to go past
    the end of the string
  * Have pcap_dump_open_append() create the dump file if it doesn't exists
  * Fix the maxmum snapshot length for DLT_USBPCAP
  * Use -fPIC when building for 64-bit SPARC on Linux
  * Fix CMake 64-bit library installation directory on some Linux distributions
  * Boost the TPACKET_V3 timeout to the maximum if a timeout of 0 was specified
  * PCAPNG reader applies some sanity checks before doing malloc().
- Drop patch fixed upstream:
  * Check-only-VID-in-VLAN-test-issue-461.patch
- Rebase patch:
  * libpcap-1.0.0-ppp.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1613304000">- Update to 1.10.0
  * Require, and assume, some level of C99 support in the C compiler
  * Add support for capturing on DPDK devices
  * rpcap: support rpcap-over-TLS
  * Fix some memory leaks, including in pcap_compile()
  * Linux: handle systems without AF_INET or AF_UNIX socket support
  * Catch invalid IPv4 addresses in filters
  * Show special Linux BPF offsets symbolically in bpf_image()
    and bpf_dump()
  * Linux: get rid of Wireless Extensions for turning monitor mode on
  * Linux: proper memory sync for PACKET_MMAP
  * Linux: drop support for libnl 1 and 2.
  * Linux: Require PF_PACKET support, and kernel 2.6.27 or later
  * Add DLT_LINUX_SLL2
  * Add a new filter "ifindex" for DLT_LINUX_SLL2 files and live
    Linux captures
  * optimizer: add a hack to try to catch certain optimizer loops
  * Probe CONFIGURATION descriptor of connected USB devices
  * Linux: return error on interface going away, but not if it just
    went down
  * Linux: set socket protocol only after packet ring configured,
    reducing bogus packet drop reports
  * Linux: get ifdrop stats from sysfs.
  * Fix various security issues reported by Charles Smith at
    Tangible Security
  * Fix various security issues reported by Include Security
  * rpcapd: on UN*X, don't tell the client why authentication failed
  * Linux: when adjusting BPF programs, do not subtract the
    SLL[2]_HDR_LEN if the location is negative (special
    metadata offset)
  * Linux: with a timeout of zero, wait indefinitely
  * Linux: clean up support for some non-GNU libc C libraries
  * Increase the maximum snaplen for LINKTYPE_USBPCAP/DLT_USBPCAP
  * Fix handling of some ioctls that fail with "permission denied"
    even when the ioctl isn't supported at all
  * Added support for ICMPv6 types 1-4 as tokens in filters
  * Report the DLT description in error messages
  * Linux: Add support for DSA data link types
  * Linux USB: use the snapshot length to set the buffer size,
    and set the len field to reflect the length in the URB
  * rpcapd: allow rpcapd to rebind more rapidly
  * Add Haiku pcap implementation
  * rpcap: redo protocol version negotiation to avoid problems
    with old servers (it still works with servers using the old
    negotiation, as well as servers not supporting negotiation)
  * Remove (unused) SITA support here.
  * Correctly handle pcapng captures with more than one IDB with a
    snspshot length greater than the supported maximum
- Remove libpcap-no-old-socket.patch
- Rebase libpcap-1.0.0-s390.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1623412800">- Update to 1.10.1
  * Fix "type XXX subtype YYY" giving a parse error
  * Add PCAP_AVAILABLE_1_11.
  * Rename struct bpf_aux_data to avoid NetBSD compile errors
  * Fix cross-builds with older kernels lacking BPF_MOD and BPF_XOR
  * Fix Bison detection for minor version 0.
  * Fix parallel build with FreeBSD make.
  * Get DLT_MATCHING_MAX right in gencode.c on NetBSD.
  * Define timeradd() and timersub() if necessary.
  * Fix Cygwin/MSYS target directories.
  * Fix symlinking with DESTDIR.
  * Fix generation of libpcap.pc with CMake when not building
    a shared library.
  * Support reading version 1.2, which some writers produce,
    and which is the same as 1.0
  * Drop support for text-mode USB captures, as we require a 2.6.27
    or later kernel
  * Bluetooth: fix non-blocking mode. Don't assume that all compilers
    used to build for Linux support the __atomic builtins</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1672574400">- update to 1.10.2:
  * Build system updates
  * Developer visible fixes
  * Fix some formatting string issues found by cppcheck
  * "Dead" pcap_ts from pcap_open_dead() and ..._with_tstamp_precision():
    Don't crash if pcap_breakloop() is called.
  * Savefiles: multiple bug fixes handling files
  * Capture: Never process more than INT_MAX packets in a
    pcap_dispatch() call, to avoid integer overflow
  * Packet filtering: PFLOG bug fixes and improvements
  * Fix memory leak in capture device open
  * Fix detection of CAN/CAN FD packets in direction check
  * Fix double-free crashes on errors such as running on a kernel
    with CONFIG_PACKET_MMAP not configured
  * Multiple CANbus bug fixes
  * Fix pcap_findalldevs() to find usbmon devices
  * Fix handling of VLAN tagged packets if the link-layer type is
    changed from DLT_LINUX_SLL to DLT_LINUX_SLL2
  * Always turn on PACKET_AUXDATA
  * Correctly compute the "real" length for isochronous USB transfers</changelog>
  <changelog author="dmueller@suse.com" date="1674043200">- update to 1.10.3:
  * Sort the PUBHDR variable in Makefile.in in "ls" order.
  * Fix typo in comment in pflog.h.
  * Remove two no-longer-present files from .gitignore.
  * Update code and comments for handling failure to set promiscuous
    mode based on new information.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1680955200">- update to 1.10.4:
  * rpcap: Fix name of launchd service.
  * documentation updates and build system tweaks</changelog>
  <changelog author="pgajdos@suse.com" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="pmonreal@suse.com" date="1725278400">- Update to 1.10.5:
  * Security fixes:
  - [bsc#1230020, CVE-2023-7256] double free via addrinfo in sock_initaddress()
  - [bsc#1230034, CVE-2024-8006] null pointer derefence in pcap_findalldevs_ex()
  * Thread safety: Make some static variables thread-local
  * Packet filtering:
  - Return an error from pcap_compile() if the scanner fails to initialize.
  - Optimizer fix from Archit Shah to recompute dominators after moving
    code; (although the resulting filter isn't empty).
  - Optimizer fix from Archit Shah to mark value as unknown when store
    of that value is deleted.
  * Linux:
  - Don't use DLT_LINUX_SLL2 for anything other than the "any" device.
  - Avoid 32-bit unsigned integer overflow in USB captures.
  - Fix a file descriptor leak.
  - Fix DLT_CAN_SOCKETCAN handling of CAN FD.
  - Add CAN XL support to DLT_CAN_SOCKETCAN.
  - Clean up the code that sets the "real" ("original") length for
    isochronous USB transfers.
  - Avoid unnecessary blocking on recvmsg() in the Bluetooth monitor and
    Bluetoth modules.
  * Haiku:
  - Report non-existent devices correctly.
  - Fix handling of packet statistics.
  - Fix packet timestamping.
  - Fix packet filtering with low snaplen.
  - Improve connection status reporting.
  - Add support for promiscuous mode.
  - Detect DLTs and loopback capture support at run time.
  - Report IEEE 802.11 as PCAP_IF_WIRELESS.
  * BSD, macOS, AIX, Solaris 11, Linux:
  - Add a new error PCAP_ERROR_CAPTURE_NOTSUP, for use if a capture
    mechanism is not present, in the hopes that, for example,
    attempts to capture on Windows Services for Linux 1, in which
    the NT kernel attempts to simulate Linux system calls but does
    not support packet sockets, can get an error that better
    indicates the underlying problem.
  * AirPcap: Format an error message if we run out of memory.
  * nflog: Make sure we don't overflow when rounding up the TLV length.
  * rpcap:
  - Handle routines removed in at least some OpenSSL libraries.
  - CVE-2023-7256: Clean up sock_initaddress() and its callers to avoid
    double frees in some cases.
  - Don't define SOCKET ourselves; instead, define PCAP_SOCKET as int
    on UN*Xes and as SOCKET on Windows.
  - CVE-2024-8006: Fix pcap_findalldevs_ex() not to crash if passed a
    file:// URL with a path to a directory that cannot be opened.
  * Savefiles:
  - Handle DLT_/LINKTYPE_ mapping better, to handle some
    OpenBSD-specific link types better.
  - Treat if_tsoffset as signed in pcapng files, as the spec says.
  - Don't try to fix the "real" length for isochronous USB
    transfers if the number of USB descriptors is too large.
  - Reject pcap files where one of the reserved fields in the
    "link-layer type plus other stuff" is non-zero.
  * Rebase libpcap-1.0.0-s390.patch</changelog>
  <changelog author="meissner@suse.com" date="1727265600">- enable rdma support (bsc#1230894)</changelog>
  <changelog author="pmonreal@suse.com" date="1767614400">- Security fix: [bsc#1255765, CVE-2025-11961]
  * Fix out-of-bound-write and out-of-bound-read in pcap_ether_aton()
    due to missing validation of provided MAC-48 address string
  * Add libpcap-CVE-2025-11961.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1772107200">- Fix bsc#1258668: Enable RMDA - Fix missing dependency in spec so libcap
  is built with  RMDA support.</changelog>
</package>
<package pkgid="a9eb6fda6af4e558da29c5d560b47265bc52b0e970b3e1a934b4a778e43ea482" name="libpcap1" arch="x86_64">
  <version epoch="0" ver="1.10.5" rel="150700.3.7.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036800">- update to 1.8.1
  * Clean up the name-to-DLT mapping table.
  * Add some newer DLT_ values:
  IPMI_HPM_2,ZWAVE_R1_R2,ZWAVE_R3,WATTSTOPPER_DLM,ISO_14443,RDS
  * Fix handling of packet count in the TPACKET_V3 inner loop: GitHub issue
  [#493].
  * Filter out duplicate looped back CAN frames.
  * Fix the handling of loopback filters for IPv6 packets.
  * Add a link-layer header type for RDS (IEC 62106) groups.
  * On Linux, handle all CAN captures with pcap-linux.c, in cooked mode.
  * Removes the need for the "host-endian" link-layer header type.
  * Compile with '-Wused-but-marked-unused' in devel mode if supported
  * Have separate DLTs for big-endian and host-endian SocketCAN headers.
  * Require that version.h be generated: all build procedures we support generate version.h (autoconf, CMake, MSVC)!
  * Properly check for sock_recv() errors.
  * Re-impose some of Winsock's limitations on sock_recv().
  * Replace sprintf() with pcap_snprintf().
  * Fix signature of pcap_stats_ex_remote().
  * Have rpcap_remoteact_getsock() return a SOCKET and supply an "is active" flag.
  * Clean up {DAG, Septel, Myricom SNF}-only builds.
  * pcap_create_interface() needs the interface name on Linux.
  * Clean up hardware time stamp support: the "any" device does not support any time stamp types.
  * Recognize 802.1ad nested VLAN tag in vlan filter.
- dropped libpcap-ocloexec.patch, never upstreamed.
- refreshed libpcap-1.0.0-ppp.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036801">- Allow bluetooth monitoring support unconditionally.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1486036802">- Formatted the specs file using spec-cleaner.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1487160000">- Dropped patches not required after review
  * libpcap-1.0.0-pcap-bpf.patch
  * libpcap-1.5.2-filter-fix.patch
- Reference of the pull request for the rest of the patches
  * https://github.com/the-tcpdump-group/libpcap/issues/196
- Changed libpcap-1.0.0-s390.patch to the git formatted one</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Do not put conditions about the provides for &lt; 11.0</changelog>
  <changelog author="jengelh@inai.de" date="1490270400">- Restore section setting $pic</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1505217600">- Added a patch (disable-remote.diff) to fix applications to FTBFS
  if they define HAVE_REMOTE (deb#843384). Patch taken from Debian.</changelog>
  <changelog author="jengelh@inai.de" date="1519905600">- Fix SRPM group</changelog>
  <changelog author="mkubecek@suse.cz" date="1537790400">- update to 1.9.0
  * add testing system to libpcap, independent of tcpdump
  * changes to how pcap_t is activated
  * update included copies of BSD 4-clause license to 3-clause
  * additions to TCP header parsing, per RFC3168
  * support setting non-blocking mode before activating
  * fixes so that non-AF_INET addresses, are not ==AF_INET6 addresses
  * pcap_compile() in 1.8.0 and later is newly thread-safe
  * bound snaplen for linux tpacket_v2 to ~64k
  * make VLAN filter handle both metadata and inline tags
    (bsc#874131 bsc#993691 fate#321405)
  * D-Bus captures can now be up to 128MB in size
  * add DLT_LORATAP and DLT_VSOCK
  * allow specifying a specific capture protocol
  * RDMA sniffing support for pcap
  * increase minimum autoconf version requirement to 2.64
  * rpcapd: support for xinetd.conf and systemd units
  * provide pkgconfig file
- add BuildRequires for autoconf &gt;= 2.64
- package (newly added) pkgconfig file
- Check-only-VID-in-VLAN-test-issue-461.patch:
  fix "vlan &lt;id&gt;" test to check only VID, not complete TCI
- drop disable-remote.diff (superseded by upstream changes)</changelog>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="pmonreal@suse.com" date="1570017600">- Update to 1.9.1 [bsc#1153332]
  * Five CVE-2019-15161, CVE-2019-15162, CVE-2019-15163, CVE-2019-15164, CVE-2019-15165
  * Fixes for CVE-2018-16301, errors in pcapng reading.
  * Mention pcap_get_required_select_timeout() in the main pcap man page
  * Fix pcap-usb-linux.c build on systems with musl
  * Fix assorted man page and other documentation issues
  * Plug assorted memory leaks
  * Documentation changes to use https:
  * Changes to how time stamp calculations are done
  * Lots of tweaks to make newer compilers happier and warning-free and
    to fix instances of C undefined behavior
  * Warn if AC_PROG_CC_C99 can't enable C99 support
  * Rename pcap_set_protocol() to  pcap_set_protocol_linux().
  * Align pcap_t private data on an 8-byte boundary.
  * Fix various error messages
  * Use 64-bit clean API in dag_findalldevs()
  * Fix cleaning up after some errors
  * Work around some ethtool ioctl bugs in newer Linux kernels
  * Add backwards compatibility sections to some man pages
  * Fix autotool configuration on AIX and macOS
  * Don't export bpf_filter_with_aux_data() or struct bpf_aux_data;
    they're internal-only and subject to change
  * Fix pcapng block size checking
  * Fix reading of capture statistics for Linux USB
  * Fix packet size values for Linux USB packets
  * Check only VID in VLAN test in filterss
  * Fix pcap_list_datalinks on 802.11 devices on macOS
  * Fix overflows with very large snapshot length in pcap file
  * Improve parsing of rpcapd configuration file
  * Handle systems without strlcpy() or strlcat() better
  * Fix crashes and other errors with invalid filter expressions
  * Fix use of uninitialized file descriptor in remote capture
  * Fix some CMake issues
  * Fix some divide-by-zero issues with the filter compiler
  * Work around a GNU libc bug in pcap_nametonetaddr()
  * Add support for DLT_LINUX_SLL2
  * Fix handling of the packet-count argument for Myricom SNF devices
  * Fix --disable-rdma in configure script
  * Fix compilation of TurboCap support
  * Constify first argument to pcap_findalldevs_ex()
  * Fix a number of issues when running rpcapd as an inetd-style daemon
  * Fix CMake issues with D-Bus libraries
  * In rpcapd, clean up termination of a capture session
  * Redo remote capture protocol negotiation
  * In rpcapd, report the same error for "invalid user name" and
    "invalid password", to make brute-forcing harder
  * For remote captures, add an error code for "the server requires TLS"
  * Fix building as part of Npcap
  * Allow rpcapd to rebind more rapidly
  * Fix building shared libpcap library on midipix (midipix.org)
  * Fix hack to detect UTF-16LE adapter names on Windows not to go past
    the end of the string
  * Have pcap_dump_open_append() create the dump file if it doesn't exists
  * Fix the maxmum snapshot length for DLT_USBPCAP
  * Use -fPIC when building for 64-bit SPARC on Linux
  * Fix CMake 64-bit library installation directory on some Linux distributions
  * Boost the TPACKET_V3 timeout to the maximum if a timeout of 0 was specified
  * PCAPNG reader applies some sanity checks before doing malloc().
- Drop patch fixed upstream:
  * Check-only-VID-in-VLAN-test-issue-461.patch
- Rebase patch:
  * libpcap-1.0.0-ppp.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1613304000">- Update to 1.10.0
  * Require, and assume, some level of C99 support in the C compiler
  * Add support for capturing on DPDK devices
  * rpcap: support rpcap-over-TLS
  * Fix some memory leaks, including in pcap_compile()
  * Linux: handle systems without AF_INET or AF_UNIX socket support
  * Catch invalid IPv4 addresses in filters
  * Show special Linux BPF offsets symbolically in bpf_image()
    and bpf_dump()
  * Linux: get rid of Wireless Extensions for turning monitor mode on
  * Linux: proper memory sync for PACKET_MMAP
  * Linux: drop support for libnl 1 and 2.
  * Linux: Require PF_PACKET support, and kernel 2.6.27 or later
  * Add DLT_LINUX_SLL2
  * Add a new filter "ifindex" for DLT_LINUX_SLL2 files and live
    Linux captures
  * optimizer: add a hack to try to catch certain optimizer loops
  * Probe CONFIGURATION descriptor of connected USB devices
  * Linux: return error on interface going away, but not if it just
    went down
  * Linux: set socket protocol only after packet ring configured,
    reducing bogus packet drop reports
  * Linux: get ifdrop stats from sysfs.
  * Fix various security issues reported by Charles Smith at
    Tangible Security
  * Fix various security issues reported by Include Security
  * rpcapd: on UN*X, don't tell the client why authentication failed
  * Linux: when adjusting BPF programs, do not subtract the
    SLL[2]_HDR_LEN if the location is negative (special
    metadata offset)
  * Linux: with a timeout of zero, wait indefinitely
  * Linux: clean up support for some non-GNU libc C libraries
  * Increase the maximum snaplen for LINKTYPE_USBPCAP/DLT_USBPCAP
  * Fix handling of some ioctls that fail with "permission denied"
    even when the ioctl isn't supported at all
  * Added support for ICMPv6 types 1-4 as tokens in filters
  * Report the DLT description in error messages
  * Linux: Add support for DSA data link types
  * Linux USB: use the snapshot length to set the buffer size,
    and set the len field to reflect the length in the URB
  * rpcapd: allow rpcapd to rebind more rapidly
  * Add Haiku pcap implementation
  * rpcap: redo protocol version negotiation to avoid problems
    with old servers (it still works with servers using the old
    negotiation, as well as servers not supporting negotiation)
  * Remove (unused) SITA support here.
  * Correctly handle pcapng captures with more than one IDB with a
    snspshot length greater than the supported maximum
- Remove libpcap-no-old-socket.patch
- Rebase libpcap-1.0.0-s390.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1623412800">- Update to 1.10.1
  * Fix "type XXX subtype YYY" giving a parse error
  * Add PCAP_AVAILABLE_1_11.
  * Rename struct bpf_aux_data to avoid NetBSD compile errors
  * Fix cross-builds with older kernels lacking BPF_MOD and BPF_XOR
  * Fix Bison detection for minor version 0.
  * Fix parallel build with FreeBSD make.
  * Get DLT_MATCHING_MAX right in gencode.c on NetBSD.
  * Define timeradd() and timersub() if necessary.
  * Fix Cygwin/MSYS target directories.
  * Fix symlinking with DESTDIR.
  * Fix generation of libpcap.pc with CMake when not building
    a shared library.
  * Support reading version 1.2, which some writers produce,
    and which is the same as 1.0
  * Drop support for text-mode USB captures, as we require a 2.6.27
    or later kernel
  * Bluetooth: fix non-blocking mode. Don't assume that all compilers
    used to build for Linux support the __atomic builtins</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1672574400">- update to 1.10.2:
  * Build system updates
  * Developer visible fixes
  * Fix some formatting string issues found by cppcheck
  * "Dead" pcap_ts from pcap_open_dead() and ..._with_tstamp_precision():
    Don't crash if pcap_breakloop() is called.
  * Savefiles: multiple bug fixes handling files
  * Capture: Never process more than INT_MAX packets in a
    pcap_dispatch() call, to avoid integer overflow
  * Packet filtering: PFLOG bug fixes and improvements
  * Fix memory leak in capture device open
  * Fix detection of CAN/CAN FD packets in direction check
  * Fix double-free crashes on errors such as running on a kernel
    with CONFIG_PACKET_MMAP not configured
  * Multiple CANbus bug fixes
  * Fix pcap_findalldevs() to find usbmon devices
  * Fix handling of VLAN tagged packets if the link-layer type is
    changed from DLT_LINUX_SLL to DLT_LINUX_SLL2
  * Always turn on PACKET_AUXDATA
  * Correctly compute the "real" length for isochronous USB transfers</changelog>
  <changelog author="dmueller@suse.com" date="1674043200">- update to 1.10.3:
  * Sort the PUBHDR variable in Makefile.in in "ls" order.
  * Fix typo in comment in pflog.h.
  * Remove two no-longer-present files from .gitignore.
  * Update code and comments for handling failure to set promiscuous
    mode based on new information.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1680955200">- update to 1.10.4:
  * rpcap: Fix name of launchd service.
  * documentation updates and build system tweaks</changelog>
  <changelog author="pgajdos@suse.com" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="pmonreal@suse.com" date="1725278400">- Update to 1.10.5:
  * Security fixes:
  - [bsc#1230020, CVE-2023-7256] double free via addrinfo in sock_initaddress()
  - [bsc#1230034, CVE-2024-8006] null pointer derefence in pcap_findalldevs_ex()
  * Thread safety: Make some static variables thread-local
  * Packet filtering:
  - Return an error from pcap_compile() if the scanner fails to initialize.
  - Optimizer fix from Archit Shah to recompute dominators after moving
    code; (although the resulting filter isn't empty).
  - Optimizer fix from Archit Shah to mark value as unknown when store
    of that value is deleted.
  * Linux:
  - Don't use DLT_LINUX_SLL2 for anything other than the "any" device.
  - Avoid 32-bit unsigned integer overflow in USB captures.
  - Fix a file descriptor leak.
  - Fix DLT_CAN_SOCKETCAN handling of CAN FD.
  - Add CAN XL support to DLT_CAN_SOCKETCAN.
  - Clean up the code that sets the "real" ("original") length for
    isochronous USB transfers.
  - Avoid unnecessary blocking on recvmsg() in the Bluetooth monitor and
    Bluetoth modules.
  * Haiku:
  - Report non-existent devices correctly.
  - Fix handling of packet statistics.
  - Fix packet timestamping.
  - Fix packet filtering with low snaplen.
  - Improve connection status reporting.
  - Add support for promiscuous mode.
  - Detect DLTs and loopback capture support at run time.
  - Report IEEE 802.11 as PCAP_IF_WIRELESS.
  * BSD, macOS, AIX, Solaris 11, Linux:
  - Add a new error PCAP_ERROR_CAPTURE_NOTSUP, for use if a capture
    mechanism is not present, in the hopes that, for example,
    attempts to capture on Windows Services for Linux 1, in which
    the NT kernel attempts to simulate Linux system calls but does
    not support packet sockets, can get an error that better
    indicates the underlying problem.
  * AirPcap: Format an error message if we run out of memory.
  * nflog: Make sure we don't overflow when rounding up the TLV length.
  * rpcap:
  - Handle routines removed in at least some OpenSSL libraries.
  - CVE-2023-7256: Clean up sock_initaddress() and its callers to avoid
    double frees in some cases.
  - Don't define SOCKET ourselves; instead, define PCAP_SOCKET as int
    on UN*Xes and as SOCKET on Windows.
  - CVE-2024-8006: Fix pcap_findalldevs_ex() not to crash if passed a
    file:// URL with a path to a directory that cannot be opened.
  * Savefiles:
  - Handle DLT_/LINKTYPE_ mapping better, to handle some
    OpenBSD-specific link types better.
  - Treat if_tsoffset as signed in pcapng files, as the spec says.
  - Don't try to fix the "real" length for isochronous USB
    transfers if the number of USB descriptors is too large.
  - Reject pcap files where one of the reserved fields in the
    "link-layer type plus other stuff" is non-zero.
  * Rebase libpcap-1.0.0-s390.patch</changelog>
  <changelog author="meissner@suse.com" date="1727265600">- enable rdma support (bsc#1230894)</changelog>
  <changelog author="pmonreal@suse.com" date="1767614400">- Security fix: [bsc#1255765, CVE-2025-11961]
  * Fix out-of-bound-write and out-of-bound-read in pcap_ether_aton()
    due to missing validation of provided MAC-48 address string
  * Add libpcap-CVE-2025-11961.patch</changelog>
</package>
<package pkgid="6caf5bda4569be14373dd475bfb8853f58799c73e550238651b205f6bd2f3772" name="libpci3" arch="x86_64">
  <version epoch="0" ver="3.13.0" rel="150300.13.12.1"/>
  <changelog author="avindra@opensuse.org" date="1537099200">- Update to version 3.6.2
  * Added "-P" and "-PP" switches to lspci, which display the path
    through bridges to each device.
  * Fixed a couple of bugs in computation of bus topology. It was
    previously used only for the tree display, but we re-use it
    for computing the paths.
  * As usual, updated pci.ids to the current snapshot of the database.
- changes for version 3.6.0
  * BARs reported by the OS, but not set on the device itself are
    reliably marked with "[virtual]".
  * lib: Introduced a generic mechanism of string properties. This
    avoids lots of special cases and makes ABI compatibility easier.
  * On systems with OpenFirmware, report corresponding device tree
    nodes as device properties.
  * VPD decoder knows several non-standard extensions [bsc#1098228] (bsc#1170554, ltc#185587).
  * When PCIe link speed is less than the maximum supported by the
    device, it is explicitly marked as "downgraded".
  * Several new capabilities are not decoded yet, but at least
    their names are printed.
  * The Null capability is easily decoded.
  * Formatting of several capabilities was cleaned up.
  * The VGA16 bit in the bridge control register is now supported.
  * Added a port to SylixOS.
  * Added a port to DOS/DJGPP
  * The order in which back-ends are probed was decoupled from the
    internal back-end IDs. This helps, because new back-ends must
    have their ID allocated at the end to keep the ABI, but they
    might need to be proved earlier.
  * The fbsd-device back-end should work again.
  * Fixed a couple of bugs. Most notably, DeviceName was not printed.
- cleanup with spec-cleaner
- rebase pciutils-endianh.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1551355200">- Replace dependency on pciutil-ids with hwdata</changelog>
  <changelog author="mpluskal@suse.com" date="1585828800">- Update to version 3.6.4:
  * A new back-end for the GNU Hurd was contributed by Joan Lledó.
  * When printing VPD item identifiers, non-ASCII characters are escaped.
- Changes for version 3.6.3
  * `lspci -t' (tree mode) can be combined with `-s' to show a sub-tree.
    We also fixed potential buffer overflows in the tree dumper.
  * Cleaned messy code for dumping of I/O, memory, and ROM regions.
    This helped fixing a bug, which caused some 64-bit regions to be
    reported as virtual. All flags are now printed after the address
    (previously, "[virtual]" and "[enhanced]" were before it for no good
    reason).
  * Added pci_find_cap_nr() to the library, which handles capabilities
    which occur multiple times in a single device.
  * Minor improvements in printing of PCIe capabilities.
  * We now decode the Multicast and Secondary PCI Express extended
    capabilities.
  * The list of capability names available to setpci was updated.
  * Minor bugs were fixed in FreeBSD and Solaris ports.
  * We now prefer HTTPS URLs in all documentation
  * The pci.ids file has a man page.
  * As usually, updated pci.ids to the current snapshot of the database.
- Drop no longer relevant pciutils-3.2.0_update-dist.patch
- Do not ship update-pciids script - they are provided via hwdata
  package and we dont want to override data by other packages</changelog>
  <changelog author="msuchanek@suse.com" date="1590062400">- Fix lspci outputs few of the VPD data fields are displayed as unknown (bsc#1170554, ltc#185587).
  Added:
  * pciutils-VPD-When-printing-item-IDs-escape-non-ASCII-characte.patch
  * pciutils-VPD-Cleanup.patch
  * pciutils-Add-decoding-of-vendor-specific-VPD-fields.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1591012800">- Update to 3.7.0:
  * Add or improved the following capabilities:
    Designated Vendor-Specific, Compute eXpress Link,
    Resizable BARs, VF Resizable BARs, Link Capabilities 2,
    Link Status 2
  * On Linux, lspci can show IOMMU groups
  * setpci can be asked to skip bus scan and operate on a device
    completely specified by its domain/bus/dev/func address
  * back-ends which do not support domains now correctly fail when
    trying to access devices outside domain 0
- Add upstream keyging to verify source signature</changelog>
  <changelog author="pgajdos@suse.com" date="1603972800">- Add decode support for RCECs [jsc#SLE-13735]
- added patches
  https://github.com/pciutils/pciutils/commit/e12bd01eea67ca8cf539263124843ba281eb6ecc
  + pciutils-add-decode-support-for-RCECs.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1620734400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642939200">- Set sbindir to /usr/bin to fix Steam issues
  (rh#1858437, gh#ValveSoftware/steam-for-linux#3306)
- Add symlinks from /usr/sbin to /usr/bin</changelog>
  <changelog author="vliaskovitis@suse.com" date="1643025600">- Add "pciutils-Add-PCIe-5.0-data-rate-32-GT-s-support.patch" and
  "pciutils-Add-PCIe-6.0-data-rate-64-GT-s-support.patch" to fix
  LnkCap speed recognition in lspci for multi PCIe ports such as
  the ML110 Gen11. [bsc#1192862]</changelog>
  <changelog author="info@paolostivanin.com" date="1650542400">- Update to 3.8.0:
  * Filters can now match devices based on partially specified
  class code and also on the programming interface.
  * Reporting of link speeds, power limits, and virtual function tags
  has been updated to the current PCIe specification.
  * We decode the Data Object Exchange capability.
  * Bus mapping mode works in non-zero domains.
  * pci_fill_info() can fetch more fields: bridge bases, programming
  interface, revision, subsystem vendor and device ID, OS driver,
  and also parent bridge. Internally, the implementation was rewritten,
  significantly reducing the number of corner cases to be handled.
  * If the configuration space is not readable for some reason
  (e.g., the cfgmgr32 back-end, but also badly implemented sleep mode
  of some devices), lspci prints only information provided by the OS.
  * The Hurd back-end was greatly improved thanks to Joan Lledó.
  * Various minor bug fixes and improvements.
  * As usually, updated pci.ids to the current snapshot of the database.
- Rebase pciutils-3.1.9_pkgconfig.patch
- Rebase pciutils-ocloexec.patch
- Rebase pciutils-endianh.patch
- Drop pciutils-add-decode-support-for-RCECs.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1652356800">- Make shared library executable</changelog>
  <changelog author="dmueller@suse.com" date="1669982400">- update to 3.9.0:
  * We decode Compute Express Link (CXL) capabilities.
  * The tree mode of lspci is now compatible with filtering options.
  * When setpci is used with a named register, it checks whether
    the register is present in the particular header type.
  * Linux: The intel-conf[12] back-ends prefer to use ioperm() instead
    of iopl() to gain access to I/O ports.
  * mmio-conf1(-ext): Added a new back-end implementing the intel-conf1
    interface over MMIO. This is useful on some ARM machines, but it
    requires manual configuration of the MMIO addresses.
  * As usually, updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="info@paolostivanin.com" date="1683806400">- Update to 3.10.0:
  - Fixed bug in definition of versioned symbol aliases
    in shared libpci, which made compiling with link-time
    optimization fail.
  - Filters now accept "0x..." syntax for backward compatibility.
  - Windows: The cfgmgr32 back-end which provides the list of devices
    can be combined with another back-end which provides access
    to configuration space.
  - ECAM (Enhanced Configuration Access Mechanism), which is defined
    by the PCIe standard, is now supported. It requires root privileges,
    access to physical memory, and also manual configuration on some
    systems.
  - lspci: Tree view now works on multi-domain systems. It now respects
    filters properly.
  - Last but not least, pci.ids were updated to the current snapshot
    of the database. This includes overall cleanup of entries with
    non-ASCII characters in their names -- such characters are allowed,
    but only if they convey interesting information (e.g., umlauts
    in German company names, but not the "registered trade mark" sign).</changelog>
  <changelog author="psimons@suse.com" date="1696420800">- Apply "lspci-Fixed-buffer-overflows-in-ls-tree.c.patch" to fix a
  buffer overflow error that would cause lspci to crash on systems
  with complex topologies. [bsc#1215265]
- Add "pciutils.keyring" so that the tarball's signature can be
  verified at build time.
- Use "%license" tag instead of "%doc" to install the package's
  license file.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1717934400">- update to 3.12.0:
  * lspci decodes the IDE (Integrity &amp; Data Encryption) and
    TEE-IO extended capabilities.
  * Optimization flags used for compiling individual object files
    should be the same as optimization flags for linking the final
    executable to make link-time optimization possible.
  * no longer look up subsystems in the HWDB
  * Updated pci.ids
- include changes from 3.11:
  * update-pciids now supports XZ compression
  * update-pciids now sends itself as the User-Agent.
  * Added a pcilmr utility for PCIe lane margining
  * ECAM back-end now scans ACPI and BIOS memory faster.
  * Linux systems without pread/pwrite are no longer supported
  * Improved decoding of PCIe control and status registers.
  * Decoding of CXL capabilities now supports up to CXL 3.0.
  * lspci now displays interrupt message numbers consistently across
    different capabilities.
  * Cache of IDs resolved via DNS, which was located in ~/.pci-ids
    by default, is now stored according to the XDG base directory
    specification in $XDG_CACHE_HOME/pci-ids.
  * All source files now have SPDX license identifiers.
  * various minor bug fixes and updated pci.ids.</changelog>
  <changelog author="dmueller@suse.com" date="1719748800">- update to 3.13.0:
  * lspci decodes CXL 1.1 device link status information.
  * Further development of the pcilmr (the link margining
    utility)
  * Dump parsing supports 6-digit domain numbers.
  * Bug fixes in PCIe link state reporting.
  * Decode more fields in PCIe AER capability.
  * Fixed build on Linux systems with musl libc.
  * Updated pci.ids.</changelog>
  <changelog author="psimons@suse.com" date="1721390400">- Synchronize SLE-15 and openSUSE:Factory [jsc#PED-8393, bsc#1224138].
  The following patches are now obsolete in version 3.13.0:
  * lspci-Fixed-buffer-overflows-in-ls-tree.c.patch
  * pciutils-Add-PCIe-5.0-data-rate-32-GT-s-support.patch
  * pciutils-Add-PCIe-6.0-data-rate-64-GT-s-support.patch
  * pciutils-Add-decoding-of-vendor-specific-VPD-fields.patch
  * pciutils-VPD-Cleanup.patch
  * pciutils-VPD-When-printing-item-IDs-escape-non-ASCII-characte.patch</changelog>
  <changelog author="psimons@suse.com" date="1741867200">- Synchronize SLE-12 and openSUSE:Factory [jsc#PED-4587].
  The following patches are now obsolete in version 3.13.0:
  * add-decoding-of-vendor-specific-vpd-fields.patch
  * pciutils-3.1.7-fix-memory-leak-in-get_cache_name.patch
  * pciutils-3.2.0_update-dist.patch
  * pciutils-3.5.1-add-support-for-32-bit-pci-domains.patch
  * pciutils-lspci-Correct-Root-Capabilities-CRS-Software-Visibil.patch
  * show-gen4-speed-properly.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1761220800">- pciutils.spec: Add a strict dependency to libpci. [bsc#1252338]
  Mixing different versions of pciutils and libpci could result in
  a segmentation fault due to incompatible ABI.</changelog>
</package>
<package pkgid="28638fc9b9801dff3adf3a8470f4c576eeace420894e7277d52d75804c431508" name="libpci3" arch="x86_64">
  <version epoch="0" ver="3.13.0" rel="150300.13.9.1"/>
  <changelog author="psimons@suse.com" date="1530100800">- Apply "show-gen4-speed-properly.patch" from upstream to fix the
  display of the gen4 speed for GEN 4 cards like Mellanox CX5.
  [bsc#1098094]
- Apply "add-decoding-of-vendor-specific-vpd-fields.patch" to add
  support for commonly used vendor specific VPD keywords described
  in "Table 160. LoPAPR VPD Fields" of the Linux on Power
  Architecture Platform Reference (LoPAPR). [bsc#1098228]</changelog>
  <changelog author="avindra@opensuse.org" date="1537099200">- Update to version 3.6.2
  * Added "-P" and "-PP" switches to lspci, which display the path
    through bridges to each device.
  * Fixed a couple of bugs in computation of bus topology. It was
    previously used only for the tree display, but we re-use it
    for computing the paths.
  * As usual, updated pci.ids to the current snapshot of the database.
- changes for version 3.6.0
  * BARs reported by the OS, but not set on the device itself are
    reliably marked with "[virtual]".
  * lib: Introduced a generic mechanism of string properties. This
    avoids lots of special cases and makes ABI compatibility easier.
  * On systems with OpenFirmware, report corresponding device tree
    nodes as device properties.
  * VPD decoder knows several non-standard extensions [bsc#1098228] (bsc#1170554, ltc#185587).
  * When PCIe link speed is less than the maximum supported by the
    device, it is explicitly marked as "downgraded".
  * Several new capabilities are not decoded yet, but at least
    their names are printed.
  * The Null capability is easily decoded.
  * Formatting of several capabilities was cleaned up.
  * The VGA16 bit in the bridge control register is now supported.
  * Added a port to SylixOS.
  * Added a port to DOS/DJGPP
  * The order in which back-ends are probed was decoupled from the
    internal back-end IDs. This helps, because new back-ends must
    have their ID allocated at the end to keep the ABI, but they
    might need to be proved earlier.
  * The fbsd-device back-end should work again.
  * Fixed a couple of bugs. Most notably, DeviceName was not printed.
- cleanup with spec-cleaner
- rebase pciutils-endianh.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1551355200">- Replace dependency on pciutil-ids with hwdata</changelog>
  <changelog author="mpluskal@suse.com" date="1585828800">- Update to version 3.6.4:
  * A new back-end for the GNU Hurd was contributed by Joan Lledó.
  * When printing VPD item identifiers, non-ASCII characters are escaped.
- Changes for version 3.6.3
  * `lspci -t' (tree mode) can be combined with `-s' to show a sub-tree.
    We also fixed potential buffer overflows in the tree dumper.
  * Cleaned messy code for dumping of I/O, memory, and ROM regions.
    This helped fixing a bug, which caused some 64-bit regions to be
    reported as virtual. All flags are now printed after the address
    (previously, "[virtual]" and "[enhanced]" were before it for no good
    reason).
  * Added pci_find_cap_nr() to the library, which handles capabilities
    which occur multiple times in a single device.
  * Minor improvements in printing of PCIe capabilities.
  * We now decode the Multicast and Secondary PCI Express extended
    capabilities.
  * The list of capability names available to setpci was updated.
  * Minor bugs were fixed in FreeBSD and Solaris ports.
  * We now prefer HTTPS URLs in all documentation
  * The pci.ids file has a man page.
  * As usually, updated pci.ids to the current snapshot of the database.
- Drop no longer relevant pciutils-3.2.0_update-dist.patch
- Do not ship update-pciids script - they are provided via hwdata
  package and we dont want to override data by other packages</changelog>
  <changelog author="msuchanek@suse.com" date="1590062400">- Fix lspci outputs few of the VPD data fields are displayed as unknown (bsc#1170554, ltc#185587).
  Added:
  * pciutils-VPD-When-printing-item-IDs-escape-non-ASCII-characte.patch
  * pciutils-VPD-Cleanup.patch
  * pciutils-Add-decoding-of-vendor-specific-VPD-fields.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1591012800">- Update to 3.7.0:
  * Add or improved the following capabilities:
    Designated Vendor-Specific, Compute eXpress Link,
    Resizable BARs, VF Resizable BARs, Link Capabilities 2,
    Link Status 2
  * On Linux, lspci can show IOMMU groups
  * setpci can be asked to skip bus scan and operate on a device
    completely specified by its domain/bus/dev/func address
  * back-ends which do not support domains now correctly fail when
    trying to access devices outside domain 0
- Add upstream keyging to verify source signature</changelog>
  <changelog author="pgajdos@suse.com" date="1603972800">- Add decode support for RCECs [jsc#SLE-13735]
- added patches
  https://github.com/pciutils/pciutils/commit/e12bd01eea67ca8cf539263124843ba281eb6ecc
  + pciutils-add-decode-support-for-RCECs.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1620734400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642939200">- Set sbindir to /usr/bin to fix Steam issues
  (rh#1858437, gh#ValveSoftware/steam-for-linux#3306)
- Add symlinks from /usr/sbin to /usr/bin</changelog>
  <changelog author="vliaskovitis@suse.com" date="1643025600">- Add "pciutils-Add-PCIe-5.0-data-rate-32-GT-s-support.patch" and
  "pciutils-Add-PCIe-6.0-data-rate-64-GT-s-support.patch" to fix
  LnkCap speed recognition in lspci for multi PCIe ports such as
  the ML110 Gen11. [bsc#1192862]</changelog>
  <changelog author="info@paolostivanin.com" date="1650542400">- Update to 3.8.0:
  * Filters can now match devices based on partially specified
  class code and also on the programming interface.
  * Reporting of link speeds, power limits, and virtual function tags
  has been updated to the current PCIe specification.
  * We decode the Data Object Exchange capability.
  * Bus mapping mode works in non-zero domains.
  * pci_fill_info() can fetch more fields: bridge bases, programming
  interface, revision, subsystem vendor and device ID, OS driver,
  and also parent bridge. Internally, the implementation was rewritten,
  significantly reducing the number of corner cases to be handled.
  * If the configuration space is not readable for some reason
  (e.g., the cfgmgr32 back-end, but also badly implemented sleep mode
  of some devices), lspci prints only information provided by the OS.
  * The Hurd back-end was greatly improved thanks to Joan Lledó.
  * Various minor bug fixes and improvements.
  * As usually, updated pci.ids to the current snapshot of the database.
- Rebase pciutils-3.1.9_pkgconfig.patch
- Rebase pciutils-ocloexec.patch
- Rebase pciutils-endianh.patch
- Drop pciutils-add-decode-support-for-RCECs.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1652356800">- Make shared library executable</changelog>
  <changelog author="dmueller@suse.com" date="1669982400">- update to 3.9.0:
  * We decode Compute Express Link (CXL) capabilities.
  * The tree mode of lspci is now compatible with filtering options.
  * When setpci is used with a named register, it checks whether
    the register is present in the particular header type.
  * Linux: The intel-conf[12] back-ends prefer to use ioperm() instead
    of iopl() to gain access to I/O ports.
  * mmio-conf1(-ext): Added a new back-end implementing the intel-conf1
    interface over MMIO. This is useful on some ARM machines, but it
    requires manual configuration of the MMIO addresses.
  * As usually, updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="info@paolostivanin.com" date="1683806400">- Update to 3.10.0:
  - Fixed bug in definition of versioned symbol aliases
    in shared libpci, which made compiling with link-time
    optimization fail.
  - Filters now accept "0x..." syntax for backward compatibility.
  - Windows: The cfgmgr32 back-end which provides the list of devices
    can be combined with another back-end which provides access
    to configuration space.
  - ECAM (Enhanced Configuration Access Mechanism), which is defined
    by the PCIe standard, is now supported. It requires root privileges,
    access to physical memory, and also manual configuration on some
    systems.
  - lspci: Tree view now works on multi-domain systems. It now respects
    filters properly.
  - Last but not least, pci.ids were updated to the current snapshot
    of the database. This includes overall cleanup of entries with
    non-ASCII characters in their names -- such characters are allowed,
    but only if they convey interesting information (e.g., umlauts
    in German company names, but not the "registered trade mark" sign).</changelog>
  <changelog author="psimons@suse.com" date="1696420800">- Apply "lspci-Fixed-buffer-overflows-in-ls-tree.c.patch" to fix a
  buffer overflow error that would cause lspci to crash on systems
  with complex topologies. [bsc#1215265]
- Add "pciutils.keyring" so that the tarball's signature can be
  verified at build time.
- Use "%license" tag instead of "%doc" to install the package's
  license file.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1717934400">- update to 3.12.0:
  * lspci decodes the IDE (Integrity &amp; Data Encryption) and
    TEE-IO extended capabilities.
  * Optimization flags used for compiling individual object files
    should be the same as optimization flags for linking the final
    executable to make link-time optimization possible.
  * no longer look up subsystems in the HWDB
  * Updated pci.ids
- include changes from 3.11:
  * update-pciids now supports XZ compression
  * update-pciids now sends itself as the User-Agent.
  * Added a pcilmr utility for PCIe lane margining
  * ECAM back-end now scans ACPI and BIOS memory faster.
  * Linux systems without pread/pwrite are no longer supported
  * Improved decoding of PCIe control and status registers.
  * Decoding of CXL capabilities now supports up to CXL 3.0.
  * lspci now displays interrupt message numbers consistently across
    different capabilities.
  * Cache of IDs resolved via DNS, which was located in ~/.pci-ids
    by default, is now stored according to the XDG base directory
    specification in $XDG_CACHE_HOME/pci-ids.
  * All source files now have SPDX license identifiers.
  * various minor bug fixes and updated pci.ids.</changelog>
  <changelog author="dmueller@suse.com" date="1719748800">- update to 3.13.0:
  * lspci decodes CXL 1.1 device link status information.
  * Further development of the pcilmr (the link margining
    utility)
  * Dump parsing supports 6-digit domain numbers.
  * Bug fixes in PCIe link state reporting.
  * Decode more fields in PCIe AER capability.
  * Fixed build on Linux systems with musl libc.
  * Updated pci.ids.</changelog>
  <changelog author="psimons@suse.com" date="1721390400">- Synchronize SLE-15 and openSUSE:Factory [jsc#PED-8393, bsc#1224138].
  The following patches are now obsolete in version 3.13.0:
  * lspci-Fixed-buffer-overflows-in-ls-tree.c.patch
  * pciutils-Add-PCIe-5.0-data-rate-32-GT-s-support.patch
  * pciutils-Add-PCIe-6.0-data-rate-64-GT-s-support.patch
  * pciutils-Add-decoding-of-vendor-specific-VPD-fields.patch
  * pciutils-VPD-Cleanup.patch
  * pciutils-VPD-When-printing-item-IDs-escape-non-ASCII-characte.patch</changelog>
  <changelog author="psimons@suse.com" date="1741867200">- Synchronize SLE-12 and openSUSE:Factory [jsc#PED-4587].
  The following patches are now obsolete in version 3.13.0:
  * add-decoding-of-vendor-specific-vpd-fields.patch
  * pciutils-3.1.7-fix-memory-leak-in-get_cache_name.patch
  * pciutils-3.2.0_update-dist.patch
  * pciutils-3.5.1-add-support-for-32-bit-pci-domains.patch
  * pciutils-lspci-Correct-Root-Capabilities-CRS-Software-Visibil.patch
  * show-gen4-speed-properly.patch</changelog>
</package>
<package pkgid="b3c0ae8d93f9f54f4bef58400bf0e23677b784bc3a9d5bd102428e4d952ff7d2" name="libpci3-32bit" arch="x86_64">
  <version epoch="0" ver="3.13.0" rel="150300.13.12.1"/>
  <changelog author="avindra@opensuse.org" date="1537099200">- Update to version 3.6.2
  * Added "-P" and "-PP" switches to lspci, which display the path
    through bridges to each device.
  * Fixed a couple of bugs in computation of bus topology. It was
    previously used only for the tree display, but we re-use it
    for computing the paths.
  * As usual, updated pci.ids to the current snapshot of the database.
- changes for version 3.6.0
  * BARs reported by the OS, but not set on the device itself are
    reliably marked with "[virtual]".
  * lib: Introduced a generic mechanism of string properties. This
    avoids lots of special cases and makes ABI compatibility easier.
  * On systems with OpenFirmware, report corresponding device tree
    nodes as device properties.
  * VPD decoder knows several non-standard extensions [bsc#1098228] (bsc#1170554, ltc#185587).
  * When PCIe link speed is less than the maximum supported by the
    device, it is explicitly marked as "downgraded".
  * Several new capabilities are not decoded yet, but at least
    their names are printed.
  * The Null capability is easily decoded.
  * Formatting of several capabilities was cleaned up.
  * The VGA16 bit in the bridge control register is now supported.
  * Added a port to SylixOS.
  * Added a port to DOS/DJGPP
  * The order in which back-ends are probed was decoupled from the
    internal back-end IDs. This helps, because new back-ends must
    have their ID allocated at the end to keep the ABI, but they
    might need to be proved earlier.
  * The fbsd-device back-end should work again.
  * Fixed a couple of bugs. Most notably, DeviceName was not printed.
- cleanup with spec-cleaner
- rebase pciutils-endianh.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1551355200">- Replace dependency on pciutil-ids with hwdata</changelog>
  <changelog author="mpluskal@suse.com" date="1585828800">- Update to version 3.6.4:
  * A new back-end for the GNU Hurd was contributed by Joan Lledó.
  * When printing VPD item identifiers, non-ASCII characters are escaped.
- Changes for version 3.6.3
  * `lspci -t' (tree mode) can be combined with `-s' to show a sub-tree.
    We also fixed potential buffer overflows in the tree dumper.
  * Cleaned messy code for dumping of I/O, memory, and ROM regions.
    This helped fixing a bug, which caused some 64-bit regions to be
    reported as virtual. All flags are now printed after the address
    (previously, "[virtual]" and "[enhanced]" were before it for no good
    reason).
  * Added pci_find_cap_nr() to the library, which handles capabilities
    which occur multiple times in a single device.
  * Minor improvements in printing of PCIe capabilities.
  * We now decode the Multicast and Secondary PCI Express extended
    capabilities.
  * The list of capability names available to setpci was updated.
  * Minor bugs were fixed in FreeBSD and Solaris ports.
  * We now prefer HTTPS URLs in all documentation
  * The pci.ids file has a man page.
  * As usually, updated pci.ids to the current snapshot of the database.
- Drop no longer relevant pciutils-3.2.0_update-dist.patch
- Do not ship update-pciids script - they are provided via hwdata
  package and we dont want to override data by other packages</changelog>
  <changelog author="msuchanek@suse.com" date="1590062400">- Fix lspci outputs few of the VPD data fields are displayed as unknown (bsc#1170554, ltc#185587).
  Added:
  * pciutils-VPD-When-printing-item-IDs-escape-non-ASCII-characte.patch
  * pciutils-VPD-Cleanup.patch
  * pciutils-Add-decoding-of-vendor-specific-VPD-fields.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1591012800">- Update to 3.7.0:
  * Add or improved the following capabilities:
    Designated Vendor-Specific, Compute eXpress Link,
    Resizable BARs, VF Resizable BARs, Link Capabilities 2,
    Link Status 2
  * On Linux, lspci can show IOMMU groups
  * setpci can be asked to skip bus scan and operate on a device
    completely specified by its domain/bus/dev/func address
  * back-ends which do not support domains now correctly fail when
    trying to access devices outside domain 0
- Add upstream keyging to verify source signature</changelog>
  <changelog author="pgajdos@suse.com" date="1603972800">- Add decode support for RCECs [jsc#SLE-13735]
- added patches
  https://github.com/pciutils/pciutils/commit/e12bd01eea67ca8cf539263124843ba281eb6ecc
  + pciutils-add-decode-support-for-RCECs.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1620734400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642939200">- Set sbindir to /usr/bin to fix Steam issues
  (rh#1858437, gh#ValveSoftware/steam-for-linux#3306)
- Add symlinks from /usr/sbin to /usr/bin</changelog>
  <changelog author="vliaskovitis@suse.com" date="1643025600">- Add "pciutils-Add-PCIe-5.0-data-rate-32-GT-s-support.patch" and
  "pciutils-Add-PCIe-6.0-data-rate-64-GT-s-support.patch" to fix
  LnkCap speed recognition in lspci for multi PCIe ports such as
  the ML110 Gen11. [bsc#1192862]</changelog>
  <changelog author="info@paolostivanin.com" date="1650542400">- Update to 3.8.0:
  * Filters can now match devices based on partially specified
  class code and also on the programming interface.
  * Reporting of link speeds, power limits, and virtual function tags
  has been updated to the current PCIe specification.
  * We decode the Data Object Exchange capability.
  * Bus mapping mode works in non-zero domains.
  * pci_fill_info() can fetch more fields: bridge bases, programming
  interface, revision, subsystem vendor and device ID, OS driver,
  and also parent bridge. Internally, the implementation was rewritten,
  significantly reducing the number of corner cases to be handled.
  * If the configuration space is not readable for some reason
  (e.g., the cfgmgr32 back-end, but also badly implemented sleep mode
  of some devices), lspci prints only information provided by the OS.
  * The Hurd back-end was greatly improved thanks to Joan Lledó.
  * Various minor bug fixes and improvements.
  * As usually, updated pci.ids to the current snapshot of the database.
- Rebase pciutils-3.1.9_pkgconfig.patch
- Rebase pciutils-ocloexec.patch
- Rebase pciutils-endianh.patch
- Drop pciutils-add-decode-support-for-RCECs.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1652356800">- Make shared library executable</changelog>
  <changelog author="dmueller@suse.com" date="1669982400">- update to 3.9.0:
  * We decode Compute Express Link (CXL) capabilities.
  * The tree mode of lspci is now compatible with filtering options.
  * When setpci is used with a named register, it checks whether
    the register is present in the particular header type.
  * Linux: The intel-conf[12] back-ends prefer to use ioperm() instead
    of iopl() to gain access to I/O ports.
  * mmio-conf1(-ext): Added a new back-end implementing the intel-conf1
    interface over MMIO. This is useful on some ARM machines, but it
    requires manual configuration of the MMIO addresses.
  * As usually, updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="info@paolostivanin.com" date="1683806400">- Update to 3.10.0:
  - Fixed bug in definition of versioned symbol aliases
    in shared libpci, which made compiling with link-time
    optimization fail.
  - Filters now accept "0x..." syntax for backward compatibility.
  - Windows: The cfgmgr32 back-end which provides the list of devices
    can be combined with another back-end which provides access
    to configuration space.
  - ECAM (Enhanced Configuration Access Mechanism), which is defined
    by the PCIe standard, is now supported. It requires root privileges,
    access to physical memory, and also manual configuration on some
    systems.
  - lspci: Tree view now works on multi-domain systems. It now respects
    filters properly.
  - Last but not least, pci.ids were updated to the current snapshot
    of the database. This includes overall cleanup of entries with
    non-ASCII characters in their names -- such characters are allowed,
    but only if they convey interesting information (e.g., umlauts
    in German company names, but not the "registered trade mark" sign).</changelog>
  <changelog author="psimons@suse.com" date="1696420800">- Apply "lspci-Fixed-buffer-overflows-in-ls-tree.c.patch" to fix a
  buffer overflow error that would cause lspci to crash on systems
  with complex topologies. [bsc#1215265]
- Add "pciutils.keyring" so that the tarball's signature can be
  verified at build time.
- Use "%license" tag instead of "%doc" to install the package's
  license file.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1717934400">- update to 3.12.0:
  * lspci decodes the IDE (Integrity &amp; Data Encryption) and
    TEE-IO extended capabilities.
  * Optimization flags used for compiling individual object files
    should be the same as optimization flags for linking the final
    executable to make link-time optimization possible.
  * no longer look up subsystems in the HWDB
  * Updated pci.ids
- include changes from 3.11:
  * update-pciids now supports XZ compression
  * update-pciids now sends itself as the User-Agent.
  * Added a pcilmr utility for PCIe lane margining
  * ECAM back-end now scans ACPI and BIOS memory faster.
  * Linux systems without pread/pwrite are no longer supported
  * Improved decoding of PCIe control and status registers.
  * Decoding of CXL capabilities now supports up to CXL 3.0.
  * lspci now displays interrupt message numbers consistently across
    different capabilities.
  * Cache of IDs resolved via DNS, which was located in ~/.pci-ids
    by default, is now stored according to the XDG base directory
    specification in $XDG_CACHE_HOME/pci-ids.
  * All source files now have SPDX license identifiers.
  * various minor bug fixes and updated pci.ids.</changelog>
  <changelog author="dmueller@suse.com" date="1719748800">- update to 3.13.0:
  * lspci decodes CXL 1.1 device link status information.
  * Further development of the pcilmr (the link margining
    utility)
  * Dump parsing supports 6-digit domain numbers.
  * Bug fixes in PCIe link state reporting.
  * Decode more fields in PCIe AER capability.
  * Fixed build on Linux systems with musl libc.
  * Updated pci.ids.</changelog>
  <changelog author="psimons@suse.com" date="1721390400">- Synchronize SLE-15 and openSUSE:Factory [jsc#PED-8393, bsc#1224138].
  The following patches are now obsolete in version 3.13.0:
  * lspci-Fixed-buffer-overflows-in-ls-tree.c.patch
  * pciutils-Add-PCIe-5.0-data-rate-32-GT-s-support.patch
  * pciutils-Add-PCIe-6.0-data-rate-64-GT-s-support.patch
  * pciutils-Add-decoding-of-vendor-specific-VPD-fields.patch
  * pciutils-VPD-Cleanup.patch
  * pciutils-VPD-When-printing-item-IDs-escape-non-ASCII-characte.patch</changelog>
  <changelog author="psimons@suse.com" date="1741867200">- Synchronize SLE-12 and openSUSE:Factory [jsc#PED-4587].
  The following patches are now obsolete in version 3.13.0:
  * add-decoding-of-vendor-specific-vpd-fields.patch
  * pciutils-3.1.7-fix-memory-leak-in-get_cache_name.patch
  * pciutils-3.2.0_update-dist.patch
  * pciutils-3.5.1-add-support-for-32-bit-pci-domains.patch
  * pciutils-lspci-Correct-Root-Capabilities-CRS-Software-Visibil.patch
  * show-gen4-speed-properly.patch</changelog>
  <changelog author="jdelvare@suse.com" date="1761220800">- pciutils.spec: Add a strict dependency to libpci. [bsc#1252338]
  Mixing different versions of pciutils and libpci could result in
  a segmentation fault due to incompatible ABI.</changelog>
</package>
<package pkgid="00a44ba4ea39d52b54730ec27bd4b45ae4f65e9a33dbb424975e9462dc4624eb" name="libpci3-32bit" arch="x86_64">
  <version epoch="0" ver="3.13.0" rel="150300.13.9.1"/>
  <changelog author="psimons@suse.com" date="1530100800">- Apply "show-gen4-speed-properly.patch" from upstream to fix the
  display of the gen4 speed for GEN 4 cards like Mellanox CX5.
  [bsc#1098094]
- Apply "add-decoding-of-vendor-specific-vpd-fields.patch" to add
  support for commonly used vendor specific VPD keywords described
  in "Table 160. LoPAPR VPD Fields" of the Linux on Power
  Architecture Platform Reference (LoPAPR). [bsc#1098228]</changelog>
  <changelog author="avindra@opensuse.org" date="1537099200">- Update to version 3.6.2
  * Added "-P" and "-PP" switches to lspci, which display the path
    through bridges to each device.
  * Fixed a couple of bugs in computation of bus topology. It was
    previously used only for the tree display, but we re-use it
    for computing the paths.
  * As usual, updated pci.ids to the current snapshot of the database.
- changes for version 3.6.0
  * BARs reported by the OS, but not set on the device itself are
    reliably marked with "[virtual]".
  * lib: Introduced a generic mechanism of string properties. This
    avoids lots of special cases and makes ABI compatibility easier.
  * On systems with OpenFirmware, report corresponding device tree
    nodes as device properties.
  * VPD decoder knows several non-standard extensions [bsc#1098228] (bsc#1170554, ltc#185587).
  * When PCIe link speed is less than the maximum supported by the
    device, it is explicitly marked as "downgraded".
  * Several new capabilities are not decoded yet, but at least
    their names are printed.
  * The Null capability is easily decoded.
  * Formatting of several capabilities was cleaned up.
  * The VGA16 bit in the bridge control register is now supported.
  * Added a port to SylixOS.
  * Added a port to DOS/DJGPP
  * The order in which back-ends are probed was decoupled from the
    internal back-end IDs. This helps, because new back-ends must
    have their ID allocated at the end to keep the ABI, but they
    might need to be proved earlier.
  * The fbsd-device back-end should work again.
  * Fixed a couple of bugs. Most notably, DeviceName was not printed.
- cleanup with spec-cleaner
- rebase pciutils-endianh.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1551355200">- Replace dependency on pciutil-ids with hwdata</changelog>
  <changelog author="mpluskal@suse.com" date="1585828800">- Update to version 3.6.4:
  * A new back-end for the GNU Hurd was contributed by Joan Lledó.
  * When printing VPD item identifiers, non-ASCII characters are escaped.
- Changes for version 3.6.3
  * `lspci -t' (tree mode) can be combined with `-s' to show a sub-tree.
    We also fixed potential buffer overflows in the tree dumper.
  * Cleaned messy code for dumping of I/O, memory, and ROM regions.
    This helped fixing a bug, which caused some 64-bit regions to be
    reported as virtual. All flags are now printed after the address
    (previously, "[virtual]" and "[enhanced]" were before it for no good
    reason).
  * Added pci_find_cap_nr() to the library, which handles capabilities
    which occur multiple times in a single device.
  * Minor improvements in printing of PCIe capabilities.
  * We now decode the Multicast and Secondary PCI Express extended
    capabilities.
  * The list of capability names available to setpci was updated.
  * Minor bugs were fixed in FreeBSD and Solaris ports.
  * We now prefer HTTPS URLs in all documentation
  * The pci.ids file has a man page.
  * As usually, updated pci.ids to the current snapshot of the database.
- Drop no longer relevant pciutils-3.2.0_update-dist.patch
- Do not ship update-pciids script - they are provided via hwdata
  package and we dont want to override data by other packages</changelog>
  <changelog author="msuchanek@suse.com" date="1590062400">- Fix lspci outputs few of the VPD data fields are displayed as unknown (bsc#1170554, ltc#185587).
  Added:
  * pciutils-VPD-When-printing-item-IDs-escape-non-ASCII-characte.patch
  * pciutils-VPD-Cleanup.patch
  * pciutils-Add-decoding-of-vendor-specific-VPD-fields.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1591012800">- Update to 3.7.0:
  * Add or improved the following capabilities:
    Designated Vendor-Specific, Compute eXpress Link,
    Resizable BARs, VF Resizable BARs, Link Capabilities 2,
    Link Status 2
  * On Linux, lspci can show IOMMU groups
  * setpci can be asked to skip bus scan and operate on a device
    completely specified by its domain/bus/dev/func address
  * back-ends which do not support domains now correctly fail when
    trying to access devices outside domain 0
- Add upstream keyging to verify source signature</changelog>
  <changelog author="pgajdos@suse.com" date="1603972800">- Add decode support for RCECs [jsc#SLE-13735]
- added patches
  https://github.com/pciutils/pciutils/commit/e12bd01eea67ca8cf539263124843ba281eb6ecc
  + pciutils-add-decode-support-for-RCECs.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1620734400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642939200">- Set sbindir to /usr/bin to fix Steam issues
  (rh#1858437, gh#ValveSoftware/steam-for-linux#3306)
- Add symlinks from /usr/sbin to /usr/bin</changelog>
  <changelog author="vliaskovitis@suse.com" date="1643025600">- Add "pciutils-Add-PCIe-5.0-data-rate-32-GT-s-support.patch" and
  "pciutils-Add-PCIe-6.0-data-rate-64-GT-s-support.patch" to fix
  LnkCap speed recognition in lspci for multi PCIe ports such as
  the ML110 Gen11. [bsc#1192862]</changelog>
  <changelog author="info@paolostivanin.com" date="1650542400">- Update to 3.8.0:
  * Filters can now match devices based on partially specified
  class code and also on the programming interface.
  * Reporting of link speeds, power limits, and virtual function tags
  has been updated to the current PCIe specification.
  * We decode the Data Object Exchange capability.
  * Bus mapping mode works in non-zero domains.
  * pci_fill_info() can fetch more fields: bridge bases, programming
  interface, revision, subsystem vendor and device ID, OS driver,
  and also parent bridge. Internally, the implementation was rewritten,
  significantly reducing the number of corner cases to be handled.
  * If the configuration space is not readable for some reason
  (e.g., the cfgmgr32 back-end, but also badly implemented sleep mode
  of some devices), lspci prints only information provided by the OS.
  * The Hurd back-end was greatly improved thanks to Joan Lledó.
  * Various minor bug fixes and improvements.
  * As usually, updated pci.ids to the current snapshot of the database.
- Rebase pciutils-3.1.9_pkgconfig.patch
- Rebase pciutils-ocloexec.patch
- Rebase pciutils-endianh.patch
- Drop pciutils-add-decode-support-for-RCECs.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1652356800">- Make shared library executable</changelog>
  <changelog author="dmueller@suse.com" date="1669982400">- update to 3.9.0:
  * We decode Compute Express Link (CXL) capabilities.
  * The tree mode of lspci is now compatible with filtering options.
  * When setpci is used with a named register, it checks whether
    the register is present in the particular header type.
  * Linux: The intel-conf[12] back-ends prefer to use ioperm() instead
    of iopl() to gain access to I/O ports.
  * mmio-conf1(-ext): Added a new back-end implementing the intel-conf1
    interface over MMIO. This is useful on some ARM machines, but it
    requires manual configuration of the MMIO addresses.
  * As usually, updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="info@paolostivanin.com" date="1683806400">- Update to 3.10.0:
  - Fixed bug in definition of versioned symbol aliases
    in shared libpci, which made compiling with link-time
    optimization fail.
  - Filters now accept "0x..." syntax for backward compatibility.
  - Windows: The cfgmgr32 back-end which provides the list of devices
    can be combined with another back-end which provides access
    to configuration space.
  - ECAM (Enhanced Configuration Access Mechanism), which is defined
    by the PCIe standard, is now supported. It requires root privileges,
    access to physical memory, and also manual configuration on some
    systems.
  - lspci: Tree view now works on multi-domain systems. It now respects
    filters properly.
  - Last but not least, pci.ids were updated to the current snapshot
    of the database. This includes overall cleanup of entries with
    non-ASCII characters in their names -- such characters are allowed,
    but only if they convey interesting information (e.g., umlauts
    in German company names, but not the "registered trade mark" sign).</changelog>
  <changelog author="psimons@suse.com" date="1696420800">- Apply "lspci-Fixed-buffer-overflows-in-ls-tree.c.patch" to fix a
  buffer overflow error that would cause lspci to crash on systems
  with complex topologies. [bsc#1215265]
- Add "pciutils.keyring" so that the tarball's signature can be
  verified at build time.
- Use "%license" tag instead of "%doc" to install the package's
  license file.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1717934400">- update to 3.12.0:
  * lspci decodes the IDE (Integrity &amp; Data Encryption) and
    TEE-IO extended capabilities.
  * Optimization flags used for compiling individual object files
    should be the same as optimization flags for linking the final
    executable to make link-time optimization possible.
  * no longer look up subsystems in the HWDB
  * Updated pci.ids
- include changes from 3.11:
  * update-pciids now supports XZ compression
  * update-pciids now sends itself as the User-Agent.
  * Added a pcilmr utility for PCIe lane margining
  * ECAM back-end now scans ACPI and BIOS memory faster.
  * Linux systems without pread/pwrite are no longer supported
  * Improved decoding of PCIe control and status registers.
  * Decoding of CXL capabilities now supports up to CXL 3.0.
  * lspci now displays interrupt message numbers consistently across
    different capabilities.
  * Cache of IDs resolved via DNS, which was located in ~/.pci-ids
    by default, is now stored according to the XDG base directory
    specification in $XDG_CACHE_HOME/pci-ids.
  * All source files now have SPDX license identifiers.
  * various minor bug fixes and updated pci.ids.</changelog>
  <changelog author="dmueller@suse.com" date="1719748800">- update to 3.13.0:
  * lspci decodes CXL 1.1 device link status information.
  * Further development of the pcilmr (the link margining
    utility)
  * Dump parsing supports 6-digit domain numbers.
  * Bug fixes in PCIe link state reporting.
  * Decode more fields in PCIe AER capability.
  * Fixed build on Linux systems with musl libc.
  * Updated pci.ids.</changelog>
  <changelog author="psimons@suse.com" date="1721390400">- Synchronize SLE-15 and openSUSE:Factory [jsc#PED-8393, bsc#1224138].
  The following patches are now obsolete in version 3.13.0:
  * lspci-Fixed-buffer-overflows-in-ls-tree.c.patch
  * pciutils-Add-PCIe-5.0-data-rate-32-GT-s-support.patch
  * pciutils-Add-PCIe-6.0-data-rate-64-GT-s-support.patch
  * pciutils-Add-decoding-of-vendor-specific-VPD-fields.patch
  * pciutils-VPD-Cleanup.patch
  * pciutils-VPD-When-printing-item-IDs-escape-non-ASCII-characte.patch</changelog>
  <changelog author="psimons@suse.com" date="1741867200">- Synchronize SLE-12 and openSUSE:Factory [jsc#PED-4587].
  The following patches are now obsolete in version 3.13.0:
  * add-decoding-of-vendor-specific-vpd-fields.patch
  * pciutils-3.1.7-fix-memory-leak-in-get_cache_name.patch
  * pciutils-3.2.0_update-dist.patch
  * pciutils-3.5.1-add-support-for-32-bit-pci-domains.patch
  * pciutils-lspci-Correct-Root-Capabilities-CRS-Software-Visibil.patch
  * show-gen4-speed-properly.patch</changelog>
</package>
<package pkgid="ec477aac69393858ff9c6da810352c9a6da5c5fed56184b22259b56ab2f28914" name="libpfm" arch="src">
  <version epoch="0" ver="4.13.0" rel="150600.3.3.1"/>
  <changelog author="adam.majer@suse.de" date="1482840000">- Version bump to 4.8.0:
  * Intel Knights Landing support (core and uncore)
  * Intel Goldmont support
  * Allow . as a delimiter for event string
  * enable Broadwell EP
  * Intel event table updates
  * various bug fixes
- Requires swig 2.0.5 to compile since older versions cannot
  parse long long types in enum value assignments.</changelog>
  <changelog author="mpluskal@suse.com" date="1484395200">- Cleanup spec file</changelog>
  <changelog author="tonyj@suse.com" date="1502884800">- Add Power9 support (FATE#322257)
  New patch: libpfm_enable-ibm-power9-core-pmu-support-beta.patch
  New patch: libpfm_fix-power9-event-file-header.patch
  New patch: libpfm_power9-event-list-update-for-perfmon2.patch
  New patch: libpfm_add-power9-entries-to-validate_power-c.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Update to 4.9.0:
  * Intel Broadwell EP uncore PMUs support (all PMU boxes)
  * AMD Fam17h (Zen) core PMU support
  * IBM Power9 core PMU support
  * AMD Fam16h (Jaguar) support
  * various event table updates
  * various bug fixes
- Drop upstream merged patches:
  * libpfm_add-power9-entries-to-validate_power-c.patch
  * libpfm_enable-ibm-power9-core-pmu-support-beta.patch
  * libpfm_fix-power9-event-file-header.patch
  * libpfm_power9-event-list-update-for-perfmon2.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516190401">- Add patch to build and work with python3:
  * libpfm-python3.patch
- Build the python parts using singlespec macros to allow switching
  as needed</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Remove useless byte-compiling for py2 that breaks py3 only build
- Update libpfm-python3.patch to fix one stray identation issue</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Version update to 4.10.1 fate#326340 fate#326387:
  * Fix build issues on Cavium Tunder X2 from v4.10
  * Update to Intel Skylake event table
  * Intel Skylake X uncore PMUs support (all PMU boxes)
  * Intel Knight Mill (KNM) core PMU support
  * Cavium Thunder X2 core PMU support
  * various event table updates
  * various bug fixes
- Drop patch merged upstream:
  * libpfm-python3.patch</changelog>
  <changelog author="mliska@suse.cz" date="1562241600">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Add more patches for s390 fate#327911 bsc#1145464
  These add support for ZR1 and add support for counter second version
  number 6:
  * 0001-s390-cpumf-add-IBM-z14-ZR1-support.patch
  * 0001-s390-cpumf-add-support-for-counter-second-version-nu.patch
  * 0001-s390-cpumf-add-support-for-machine-type-8561.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1565870400">- Add provides/obsoletes wrt bsc#1145710 to avoid file conflict</changelog>
  <changelog author="tonyj@suse.com" date="1571400000">- Update Cavium ThunderX2 with now public events (jsc#SLE-8440)
  New patch: update-cavium-thunderx2-with-now-public-events.patch</changelog>
  <changelog author="tonyj@suse.com" date="1583236800">- Add Cavium ThunderX2 uncore support (jsc#SLE-8440)
  New patch: thunderx2-uncore-support.patch
  New patch: moved-tx2-uncore-event-to-separate-file.patch
  New patch: add-thunderx2-dmc-events-and-ccpi-events.patch
  New patch: removed-extra-fields-from-tx2_unc_data_t.patch</changelog>
  <changelog author="code@bnavigator.de" date="1605787200">- Support multiple python 3 flavors in the python subpackage
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="code@bnavigator.de" date="1606046400">- Fix the python subpackage generation
  gh#openSUSE/python-rpm-macros#79</changelog>
  <changelog author="tonyj@suse.com" date="1613044800">- Update to version v4.11.0
  * Major updates:
    AMD Zen1 core PMU updates
    AMD Zen2 core PMU support
    Intel Icelake core PMU support
    support to report if events are speculative
    support for Extended PEBS events on Icelake
    Intel Tremont core PMU support
    ARM Neoverse N1 core PMU support
    s390 event table updates
    Marvell TX2 core and uncore updates
    Intel CascadeLakeX uncore PMU support
  * Various other event table updates and bug fixes
  * Drop following patches (upstream):
    0001-s390-cpumf-add-IBM-z14-ZR1-support.patch
    0001-s390-cpumf-add-support-for-counter-second-version-nu.patch
    0001-s390-cpumf-add-support-for-machine-type-8561.patch
    add-thunderx2-dmc-events-and-ccpi-events.patch
    moved-tx2-uncore-event-to-separate-file.patch
    removed-extra-fields-from-tx2_unc_data_t.patch
    thunderx2-uncore-support.patch
    update-cavium-thunderx2-with-now-public-events.patch</changelog>
  <changelog author="tonyj@suse.com" date="1646395200">- Remove python2 support (bsc#1196709, bsc#1197770)</changelog>
  <changelog author="meissner@suse.com" date="1656936000">- use https download url</changelog>
  <changelog author="tonyj@suse.com" date="1670500800">- Update to version v4.12.0 (jira#PED-617)
  * Major updates:
    Add IBM Power10 core PMU support
    Add Intel IcelakeX core PMU support
    Add Intel SapphireRapid core PMU support
    Add Intel SapphireRapid RAPL PMU support
    Update Intel Icelake RAPL PMU support
    Add support HiSilicon Kunpeng uncore PMUs
    Add support HiSilicon Kunpeng core PMU
    Remove arm_fujitsu_a64fx_support for ARM(32 bit)
    Update Intel Skylake event table
    Add Intel PERF_METRICS event support for Icelake
    Add support for ARM Neoverse N2 core PMU
    Add ARM SPE events for Neoverse N1 core PMU
    Add cgroup-switches software event
    Add Intel Tigerlake and Rocketlake core PMU support
    Add AMD64 Fam19h Zen3 L3 PMU support
    Add AMD64 Fam17h Zen2 RAPL support
    Add AMD64 Fam19h Zen3 core PMU support
    Add RAPL for AMD64 Fam19h Zen3 processor
    Update ARM N1 event table
    Update AMD Fam17h Zen2 event table
    s390: Update counter definition for IBM z16</changelog>
  <changelog author="tonyj@suse.com" date="1696593600">- update to 4.13 (jsc#PED-3323)
  * update Intel SKL/SKX/CLX event table
  * add ARM Neoverse V2 core PMU support
  * move ARM Neoverse N2 to ARMv9 support
  * add ARM v9 support basic infrastructure
  * add Arm Neoverse V1 core PMU support
  * Update Intel SapphireRapid event table
  * update Intel Icelake event table
  * update AMD Zen4 event table
  * add AMD Zen4 core PMU support
  * correctly detect all AMD Zen3 processors
  * fix CPU_CLK_UNHALTED.REF_DISTRIBUTED on Intel Icelake</changelog>
  <changelog author="tonyj@suse.com" date="1765195200">- s390: Add counter definition for IBM z17 (jsc#PED-13665)
  New patch: s390-add-counter-definition-for-ibm-z17.patch</changelog>
</package>
<package pkgid="3f07a27fea62207ed408cca86eccd23881ed38f27eccec894e61e8bb4b00cc55" name="libpfm-devel" arch="x86_64">
  <version epoch="0" ver="4.13.0" rel="150600.3.3.1"/>
  <changelog author="adam.majer@suse.de" date="1482840000">- Version bump to 4.8.0:
  * Intel Knights Landing support (core and uncore)
  * Intel Goldmont support
  * Allow . as a delimiter for event string
  * enable Broadwell EP
  * Intel event table updates
  * various bug fixes
- Requires swig 2.0.5 to compile since older versions cannot
  parse long long types in enum value assignments.</changelog>
  <changelog author="mpluskal@suse.com" date="1484395200">- Cleanup spec file</changelog>
  <changelog author="tonyj@suse.com" date="1502884800">- Add Power9 support (FATE#322257)
  New patch: libpfm_enable-ibm-power9-core-pmu-support-beta.patch
  New patch: libpfm_fix-power9-event-file-header.patch
  New patch: libpfm_power9-event-list-update-for-perfmon2.patch
  New patch: libpfm_add-power9-entries-to-validate_power-c.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Update to 4.9.0:
  * Intel Broadwell EP uncore PMUs support (all PMU boxes)
  * AMD Fam17h (Zen) core PMU support
  * IBM Power9 core PMU support
  * AMD Fam16h (Jaguar) support
  * various event table updates
  * various bug fixes
- Drop upstream merged patches:
  * libpfm_add-power9-entries-to-validate_power-c.patch
  * libpfm_enable-ibm-power9-core-pmu-support-beta.patch
  * libpfm_fix-power9-event-file-header.patch
  * libpfm_power9-event-list-update-for-perfmon2.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516190401">- Add patch to build and work with python3:
  * libpfm-python3.patch
- Build the python parts using singlespec macros to allow switching
  as needed</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Remove useless byte-compiling for py2 that breaks py3 only build
- Update libpfm-python3.patch to fix one stray identation issue</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Version update to 4.10.1 fate#326340 fate#326387:
  * Fix build issues on Cavium Tunder X2 from v4.10
  * Update to Intel Skylake event table
  * Intel Skylake X uncore PMUs support (all PMU boxes)
  * Intel Knight Mill (KNM) core PMU support
  * Cavium Thunder X2 core PMU support
  * various event table updates
  * various bug fixes
- Drop patch merged upstream:
  * libpfm-python3.patch</changelog>
  <changelog author="mliska@suse.cz" date="1562241600">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Add more patches for s390 fate#327911 bsc#1145464
  These add support for ZR1 and add support for counter second version
  number 6:
  * 0001-s390-cpumf-add-IBM-z14-ZR1-support.patch
  * 0001-s390-cpumf-add-support-for-counter-second-version-nu.patch
  * 0001-s390-cpumf-add-support-for-machine-type-8561.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1565870400">- Add provides/obsoletes wrt bsc#1145710 to avoid file conflict</changelog>
  <changelog author="tonyj@suse.com" date="1571400000">- Update Cavium ThunderX2 with now public events (jsc#SLE-8440)
  New patch: update-cavium-thunderx2-with-now-public-events.patch</changelog>
  <changelog author="tonyj@suse.com" date="1583236800">- Add Cavium ThunderX2 uncore support (jsc#SLE-8440)
  New patch: thunderx2-uncore-support.patch
  New patch: moved-tx2-uncore-event-to-separate-file.patch
  New patch: add-thunderx2-dmc-events-and-ccpi-events.patch
  New patch: removed-extra-fields-from-tx2_unc_data_t.patch</changelog>
  <changelog author="code@bnavigator.de" date="1605787200">- Support multiple python 3 flavors in the python subpackage
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="code@bnavigator.de" date="1606046400">- Fix the python subpackage generation
  gh#openSUSE/python-rpm-macros#79</changelog>
  <changelog author="tonyj@suse.com" date="1613044800">- Update to version v4.11.0
  * Major updates:
    AMD Zen1 core PMU updates
    AMD Zen2 core PMU support
    Intel Icelake core PMU support
    support to report if events are speculative
    support for Extended PEBS events on Icelake
    Intel Tremont core PMU support
    ARM Neoverse N1 core PMU support
    s390 event table updates
    Marvell TX2 core and uncore updates
    Intel CascadeLakeX uncore PMU support
  * Various other event table updates and bug fixes
  * Drop following patches (upstream):
    0001-s390-cpumf-add-IBM-z14-ZR1-support.patch
    0001-s390-cpumf-add-support-for-counter-second-version-nu.patch
    0001-s390-cpumf-add-support-for-machine-type-8561.patch
    add-thunderx2-dmc-events-and-ccpi-events.patch
    moved-tx2-uncore-event-to-separate-file.patch
    removed-extra-fields-from-tx2_unc_data_t.patch
    thunderx2-uncore-support.patch
    update-cavium-thunderx2-with-now-public-events.patch</changelog>
  <changelog author="tonyj@suse.com" date="1646395200">- Remove python2 support (bsc#1196709, bsc#1197770)</changelog>
  <changelog author="meissner@suse.com" date="1656936000">- use https download url</changelog>
  <changelog author="tonyj@suse.com" date="1670500800">- Update to version v4.12.0 (jira#PED-617)
  * Major updates:
    Add IBM Power10 core PMU support
    Add Intel IcelakeX core PMU support
    Add Intel SapphireRapid core PMU support
    Add Intel SapphireRapid RAPL PMU support
    Update Intel Icelake RAPL PMU support
    Add support HiSilicon Kunpeng uncore PMUs
    Add support HiSilicon Kunpeng core PMU
    Remove arm_fujitsu_a64fx_support for ARM(32 bit)
    Update Intel Skylake event table
    Add Intel PERF_METRICS event support for Icelake
    Add support for ARM Neoverse N2 core PMU
    Add ARM SPE events for Neoverse N1 core PMU
    Add cgroup-switches software event
    Add Intel Tigerlake and Rocketlake core PMU support
    Add AMD64 Fam19h Zen3 L3 PMU support
    Add AMD64 Fam17h Zen2 RAPL support
    Add AMD64 Fam19h Zen3 core PMU support
    Add RAPL for AMD64 Fam19h Zen3 processor
    Update ARM N1 event table
    Update AMD Fam17h Zen2 event table
    s390: Update counter definition for IBM z16</changelog>
  <changelog author="tonyj@suse.com" date="1696593600">- update to 4.13 (jsc#PED-3323)
  * update Intel SKL/SKX/CLX event table
  * add ARM Neoverse V2 core PMU support
  * move ARM Neoverse N2 to ARMv9 support
  * add ARM v9 support basic infrastructure
  * add Arm Neoverse V1 core PMU support
  * Update Intel SapphireRapid event table
  * update Intel Icelake event table
  * update AMD Zen4 event table
  * add AMD Zen4 core PMU support
  * correctly detect all AMD Zen3 processors
  * fix CPU_CLK_UNHALTED.REF_DISTRIBUTED on Intel Icelake</changelog>
  <changelog author="tonyj@suse.com" date="1765195200">- s390: Add counter definition for IBM z17 (jsc#PED-13665)
  New patch: s390-add-counter-definition-for-ibm-z17.patch</changelog>
</package>
<package pkgid="64a85e143f6a82f339acde8d36d03d959ea40da1c277fb95a7d8d2cb84ef5c64" name="libpfm4" arch="x86_64">
  <version epoch="0" ver="4.13.0" rel="150600.3.3.1"/>
  <changelog author="adam.majer@suse.de" date="1482840000">- Version bump to 4.8.0:
  * Intel Knights Landing support (core and uncore)
  * Intel Goldmont support
  * Allow . as a delimiter for event string
  * enable Broadwell EP
  * Intel event table updates
  * various bug fixes
- Requires swig 2.0.5 to compile since older versions cannot
  parse long long types in enum value assignments.</changelog>
  <changelog author="mpluskal@suse.com" date="1484395200">- Cleanup spec file</changelog>
  <changelog author="tonyj@suse.com" date="1502884800">- Add Power9 support (FATE#322257)
  New patch: libpfm_enable-ibm-power9-core-pmu-support-beta.patch
  New patch: libpfm_fix-power9-event-file-header.patch
  New patch: libpfm_power9-event-list-update-for-perfmon2.patch
  New patch: libpfm_add-power9-entries-to-validate_power-c.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Update to 4.9.0:
  * Intel Broadwell EP uncore PMUs support (all PMU boxes)
  * AMD Fam17h (Zen) core PMU support
  * IBM Power9 core PMU support
  * AMD Fam16h (Jaguar) support
  * various event table updates
  * various bug fixes
- Drop upstream merged patches:
  * libpfm_add-power9-entries-to-validate_power-c.patch
  * libpfm_enable-ibm-power9-core-pmu-support-beta.patch
  * libpfm_fix-power9-event-file-header.patch
  * libpfm_power9-event-list-update-for-perfmon2.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516190401">- Add patch to build and work with python3:
  * libpfm-python3.patch
- Build the python parts using singlespec macros to allow switching
  as needed</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Remove useless byte-compiling for py2 that breaks py3 only build
- Update libpfm-python3.patch to fix one stray identation issue</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Version update to 4.10.1 fate#326340 fate#326387:
  * Fix build issues on Cavium Tunder X2 from v4.10
  * Update to Intel Skylake event table
  * Intel Skylake X uncore PMUs support (all PMU boxes)
  * Intel Knight Mill (KNM) core PMU support
  * Cavium Thunder X2 core PMU support
  * various event table updates
  * various bug fixes
- Drop patch merged upstream:
  * libpfm-python3.patch</changelog>
  <changelog author="mliska@suse.cz" date="1562241600">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Add more patches for s390 fate#327911 bsc#1145464
  These add support for ZR1 and add support for counter second version
  number 6:
  * 0001-s390-cpumf-add-IBM-z14-ZR1-support.patch
  * 0001-s390-cpumf-add-support-for-counter-second-version-nu.patch
  * 0001-s390-cpumf-add-support-for-machine-type-8561.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1565870400">- Add provides/obsoletes wrt bsc#1145710 to avoid file conflict</changelog>
  <changelog author="tonyj@suse.com" date="1571400000">- Update Cavium ThunderX2 with now public events (jsc#SLE-8440)
  New patch: update-cavium-thunderx2-with-now-public-events.patch</changelog>
  <changelog author="tonyj@suse.com" date="1583236800">- Add Cavium ThunderX2 uncore support (jsc#SLE-8440)
  New patch: thunderx2-uncore-support.patch
  New patch: moved-tx2-uncore-event-to-separate-file.patch
  New patch: add-thunderx2-dmc-events-and-ccpi-events.patch
  New patch: removed-extra-fields-from-tx2_unc_data_t.patch</changelog>
  <changelog author="code@bnavigator.de" date="1605787200">- Support multiple python 3 flavors in the python subpackage
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="code@bnavigator.de" date="1606046400">- Fix the python subpackage generation
  gh#openSUSE/python-rpm-macros#79</changelog>
  <changelog author="tonyj@suse.com" date="1613044800">- Update to version v4.11.0
  * Major updates:
    AMD Zen1 core PMU updates
    AMD Zen2 core PMU support
    Intel Icelake core PMU support
    support to report if events are speculative
    support for Extended PEBS events on Icelake
    Intel Tremont core PMU support
    ARM Neoverse N1 core PMU support
    s390 event table updates
    Marvell TX2 core and uncore updates
    Intel CascadeLakeX uncore PMU support
  * Various other event table updates and bug fixes
  * Drop following patches (upstream):
    0001-s390-cpumf-add-IBM-z14-ZR1-support.patch
    0001-s390-cpumf-add-support-for-counter-second-version-nu.patch
    0001-s390-cpumf-add-support-for-machine-type-8561.patch
    add-thunderx2-dmc-events-and-ccpi-events.patch
    moved-tx2-uncore-event-to-separate-file.patch
    removed-extra-fields-from-tx2_unc_data_t.patch
    thunderx2-uncore-support.patch
    update-cavium-thunderx2-with-now-public-events.patch</changelog>
  <changelog author="tonyj@suse.com" date="1646395200">- Remove python2 support (bsc#1196709, bsc#1197770)</changelog>
  <changelog author="meissner@suse.com" date="1656936000">- use https download url</changelog>
  <changelog author="tonyj@suse.com" date="1670500800">- Update to version v4.12.0 (jira#PED-617)
  * Major updates:
    Add IBM Power10 core PMU support
    Add Intel IcelakeX core PMU support
    Add Intel SapphireRapid core PMU support
    Add Intel SapphireRapid RAPL PMU support
    Update Intel Icelake RAPL PMU support
    Add support HiSilicon Kunpeng uncore PMUs
    Add support HiSilicon Kunpeng core PMU
    Remove arm_fujitsu_a64fx_support for ARM(32 bit)
    Update Intel Skylake event table
    Add Intel PERF_METRICS event support for Icelake
    Add support for ARM Neoverse N2 core PMU
    Add ARM SPE events for Neoverse N1 core PMU
    Add cgroup-switches software event
    Add Intel Tigerlake and Rocketlake core PMU support
    Add AMD64 Fam19h Zen3 L3 PMU support
    Add AMD64 Fam17h Zen2 RAPL support
    Add AMD64 Fam19h Zen3 core PMU support
    Add RAPL for AMD64 Fam19h Zen3 processor
    Update ARM N1 event table
    Update AMD Fam17h Zen2 event table
    s390: Update counter definition for IBM z16</changelog>
  <changelog author="tonyj@suse.com" date="1696593600">- update to 4.13 (jsc#PED-3323)
  * update Intel SKL/SKX/CLX event table
  * add ARM Neoverse V2 core PMU support
  * move ARM Neoverse N2 to ARMv9 support
  * add ARM v9 support basic infrastructure
  * add Arm Neoverse V1 core PMU support
  * Update Intel SapphireRapid event table
  * update Intel Icelake event table
  * update AMD Zen4 event table
  * add AMD Zen4 core PMU support
  * correctly detect all AMD Zen3 processors
  * fix CPU_CLK_UNHALTED.REF_DISTRIBUTED on Intel Icelake</changelog>
  <changelog author="tonyj@suse.com" date="1765195200">- s390: Add counter definition for IBM z17 (jsc#PED-13665)
  New patch: s390-add-counter-definition-for-ibm-z17.patch</changelog>
</package>
<package pkgid="cb00795a8afa36953913e58679843e1744362f9fc5d5c368b187fdbe78fdb92a" name="libpipewire-0_3-0" arch="x86_64">
  <version epoch="0" ver="1.0.5+git36.60deeb2" rel="150600.3.6.2"/>
  <changelog author="alarrosa@suse.com" date="1698926400">- Update to version 0.3.84 (1.0RC4):
  * Highlights
  - Fix a regression with openal because the queued buffers in
    the stream were not reported correctly.
  - Fix a bug in port busy counters that could cause random
    silent links.
  - Fix a regression in echo-cancel because it was not reporting
    its streams as ASYNC.
  - Fix a JACK regression where not all ports were enumerated in
    all cases.
  - Many more fixes and improvements.
  * PipeWire
  - pw_stream now reports the queued buffers more accurately.
    This fixes a regression when using openal. (#3592)
  - The port busy counters were not updated correctly in some
    cases. This could lead to negotiation errors and silent
    links. (#3547)
  - Ignore latency maximum when forcing rate/quantum. (#3613)
  - Nodes can now be added to multiple groups and link-groups.
    (#3612)
  * Modules
  - The filter-chain now also handles notify port dependencies
    correctly. (#3596)
  - Filter-chain has support for new linear, clamp, recip, exp,
    log, mult, sine builtin plugins.
  - The echo-cancel module now correctly reports its playback and
    capture streams as ASYNC to avoid running out of buffers.
    (#3593)
  - It is now possible to specify an array of remote names to
    connect to with the native protocol.
  - module-rtp-sap and module-rtp-sink now try to bind to the
    specified interface.
  * SPA
  - The alsa plugin now removes the runtime properties such as
    period-num, period-size and max-latency when suspended.
    (#3613)
  * Bluetooth
  - BAP Locations/Context is now set on endpoints as required by
    new bluez.
  - Improve selection of BAP leader.
  * JACK
  - Add a jack_set_sample_rate() extension function.
  - Make sure we get the info of all nodes/ports before
    completing the jack_client_open() operation so that we can
    enumerate the ports correctly in all cases. (#3618)
  * GStreamer
  - Fix types of metadata in pipewiresink.
  - Also copy metadata in buffers in all cases.
  - Fix size allocation in bufferpool for compressed formats.
  - Don't stop streaming thread when unlinked. (#3620)
  * ALSA
  - The ALSA plugin now handles NULL values from mmap_areas.
    (#3600)</changelog>
  <changelog author="alarrosa@suse.com" date="1700136000">- Update to version 0.3.85 (1.0RC5):
  * Highlights
  - Fix an issue where a link could end up paused while not
    negotiated.
  - Fix an infinite recursion issue when finding runnable nodes.
  - Support XDG base directories when loading ACP config.
  - Fix MIDI event recording preview in Ardour.
  - Many more small fixes, cleanups and improvements.
  * PipeWire
  - Fix an issue where a link could end up paused while not
    negotiated. (#3619)
  - Fix an infinite recursion issue when finding runnable nodes
    by stopping the scan on feedback links around the driver.
    (#3621)
  - The system service now has better socket permissions.
  * Modules
  - Add support for uclamp. This allows the scheduler to make
    better informed decisions about where tasks should be placed,
    and what pstate to set for the CPU it is running on.
  - Emit warnings when applications are not doing the right
    locking instead of crashing.
  - Improve media.name for RAOP sinks. (#3801)
  - Support pause/resume in pipe-tunnel. (#3197)
  - Remove time rlimit when probing for realtime to avoid
    SIGXCPU.
  * SPA
  - Fix a bug where the resampler would be activated even when
    there is an ALSA pitch element. (#3628)
  - Improve resume from suspend in ALSA. (#3646)
  - Add option to expose ALSA controls as prop params.
  - Support XDG base directories when loading ACP config. This
    makes it possible to override the ACP config files.
  * Bluetooth
  - Schedule nodes in the same ISO group together.
  - More BAP fixes and cleanups.
  * JACK
  - Fix MIDI events from peer ports. This makes the MIDI event
    recording preview of Ardour work correctly.
  * GStreamer
  - Fix some error handling in the source and sink.
  * ALSA plugin
  - Improve poll descriptor handling. (#3648)
  * Docs
  - Many improvements to the layout and organization.</changelog>
  <changelog author="alarrosa@suse.com" date="1701000000">- Update to version 1.0.0 (El Presidente):
  * Highlights
  - Fix a memfd/dmabuf leak when uploading buffers while shutting
    down.
  - Handle concurrent jack_port_get_buffer() calls because ardour
    seems to be doing this.
  - Improve time reporting (less jitter) in ALSA when using IRQ.
  - Many doc improvements.
  * PipeWire
  - Respect PIPEWIRE_DLCLOSE everywhere, remove pw_in_valgrind().
  - Remove a warning when a client tries to change ignored
    properties.
  * Modules
  - Fix a memfd/dmabuf leak when uploading buffers while shutting
    down.
  - Fix a potential segfault when copying mix structures. (#3658)
  - Avoid races in setrlimit in module-rt.
  - Fix a memory leak in filter-chain.
  - Set rtp.ptime on senders, not receivers.
  - The ROC modules were ported to ROC 0.3
  * SPA
  - Improve time reporting (less jitter) in ALSA when using IRQ.
    (#3657)
  - Add latency param query in libcamera.
  - Fix some compiler warnings.
  - The EVL plugin was updated.
  * Bluetooth
  - LC3 codec and compatibility improvements.
  * Pulse server
  - Fix emission of events when a sink/source state changes.
    (#3660)
  * JACK
  - Improve transport and time handling. Use unique ids to make
    consistent snapshots of the current time and transport.
  - Avoid enumerating port params that we are not going to use.
  - Optimize buffer reuse.
  - Handle concurrent jack_port_get_buffer() calls because ardour
    seems to be doing this. (#3632)
  * Docs
  - Many doc improvements.
  - Add man pages for pw-dump, pw-loopback, modules,
    pipewire-pulse.
  - Manpages are now made with Doxygen.
  - Add docs for pulse-modules</changelog>
  <changelog author="alarrosa@suse.com" date="1704974400">- Update to version 1.0.1:
  * Highlights
  - Work around the buggy ALSA backend in libcanberra by forcing
    the pulse backend in module-x11-bell.
  - Fix a race in the device info updates in pulse-server.
  - Fix timing and rate matching in ALSA sequencer.
  - Improve timing information in JACK and from the ALSA driver.
  - More small fixes and improvements.
  * PipeWire
  - Fix a build issue when examples where disabled.
  - Avoid some compiler warnings.
  - Avoid some bitfield data races. (#3706)
  * Modules
  - Bump the PTP driver priority. (#3217)
  - Support the previous "allowed" permission in the access
    module.
  - Fix filename leak in module-filter-chain.
  - Work around the buggy ALSA backend in libcanberra by forcing
    the pulse backend in module-x11-bell. (#3688)
  - Fix a race in the device info updates in pulse-server.
  - Fix compatibility in RAOP. (#3698)
  * SPA
  - Handle ALSA picth control errors correctly
  - Clamp buffer-frames correctly. (#3000)
  - Fix timing and rate matching in ALSA sequencer. (#3657)
  - Revert a commit that could result in current time in the
    future in the timing updates.
  - Improve adapter state checks.
  - Remove the timer from the ALSA pcm.
  - Fix timeout in freewheel driver.
  * Pulse-server
  - Also handle active ports for monitor sources.
  - Fix zeroconf-publish format properties.
  * JACK
  - Improve timing and transport calculations.
  - Handle -ENOENT from the core and don't error out.
  * GStreamer
  - Handle node port removal in the device provider. (#3708)
  - Improve error handling while connecting.
  - Fix dts_offset.</changelog>
  <changelog author="alarrosa@suse.com" date="1705924800">- Add patches from upstream to fix building the package in Factory
  with libcamera 0.2.0:
  * 0001-spa-libcamera-use-CameraConfigurationorientation.patch
  * 0002-spa-libcamera-bump-minimum-supported-version-to-0.2.0.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1706702400">- Update to version 1.0.2:
  * Highlights
  - Fix v4l2 enumeration with filter. This should fix negotiation
    in some GStreamer pipelines with capsfilter. Also probe for
    EXPBUF support before using it.
  - Fix max-latency property and Buffer param when dealing with
    small ALSA device buffers. This should fix stuttering with
    some AMD based soundcards.
  - More small cleanups an improvements.
  * Modules
  - Improve netjack2 channel positions.
  - Improve RAOP module state after suspend/resume. (#3778)
  - Avoid crash in some LV2 plugins by configuring the Atom
    ports. (#3815)
  * SPA
  - Bump libcamera requirements to 0.2.0.
  - Try to avoid unaligned load exceptions. (#3790)
  - Fix v4l2 enumeration with filter. (#1793)
  - Fix max-latency property and Buffer param when dealing with
    small ALSA device buffers. This should fix stuttering with
    some AMD based soundcards. (#3744,#3622)
  - Add a resync.ms option to node.driver to make it possible to
    resync fast to clock jumps.
  - Probe for EXPBUF support in v4l2 before using it. (#3821)
  * pulse-server
  - Also emit change events when the port list change.
  * Bluetooth
  - Log a more verbose explanation when other soundservers seem
    to be interfering with bluetooth.
  - Add quirks for Rockbox Brick. (#3786)
  - Add quirks for SoundCore mini2. (#2927)
  * JACK
  - Improve check for the running state of clients. (#3794)
- Drop patches already included by upstream:
  * 0001-spa-libcamera-use-CameraConfigurationorientation.patch
  * 0002-spa-libcamera-bump-minimum-supported-version-to-0.2.0.patch</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1706961600">- Update to version 1.0.3:
  * Highlights
  - Fix ALSA version check. This should allow the alsa plugin to
    work again.
  - Some small fixes and improvements.
  * PipeWire
  - Escape @DEFAULT_SINK@ in the conf files.
  * Modules
  - Improve logging in module-pipe-tunnel.
  * SPA
  - Always recheck rate matching in ALSA when moving drivers.
    This fixes a potential issue where the adaptive resampler
    would not be activated in some cases.
  * ALSA
  - Fix ALSA version check. This should allow the alsa plugin to
    work again.</changelog>
  <changelog author="alarrosa@suse.com" date="1708430400">- Add a conflict in -pulseaudio with
  pipewire-modules-%{apiver} &lt; 1.0.0 since the
  libpipewire-module-protocol-pulse.so module was included in
  - modules before 1.0.0 so we should avoid a file conflict.</changelog>
  <changelog author="alarrosa@suse.com" date="1708516800">- Force using doxygen-1_10 in SLE where the default doxygen is too
  old and generates broken docs (boo#1217886)</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="alarrosa@suse.com" date="1709726400">- Add patch from upstream submitted at glfo#pipewire/pipewire#1932
  that fixes selecting the pipewire gstreamer plugins by the
  autoaudiosink/autoaudiosrc plugins:
  * fix-gst-sink.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1710244800">- Require pipewire-pulseaudio from pipewire-alsa so when
  pipewire-alsa is installed, pipewire has audio support (or put
  in other words, so pipewire-alsa isn't installed with the real
  pulseaudio). Fixes boo#1221235.</changelog>
  <changelog author="alarrosa@suse.com" date="1710244801">- Update to version 1.0.3+git51.89d8e8b:
  * module-ffado: make the event buffer per port
  * module-ffado: handle MIDI correctly
  * module-ffado: implement MIDI send and receive
  * module-ffado: various fixes to make things work
  * stream: add pw_stream_get_nsec() to get current time
  * jack: fix multiple midi input ports
  * pw-top: only check terminal size in non-batch mode
  * Specify "Audio" in gstreamer sink/src metadata to fix autodetect
  * Add SOC-style jack names to HDMI audio paths
  * gst: remove timeouts when autoconnect=false
  * audioconvert: handle invalid ports better
  * audioconvert: handle port remove
  * pw_context_parse_conf_section: use the conf argument instead of the context's conf
  * stream: FORCE_RATE should just contain the rate
  * jack: FORCE_RATE should just contain the rate
  * jack: set global_mix safely
  * jack: sync threads by pausing the core
  * alsa: Added handle for controlling htimestamp autodisable
  * And more
- Remove patch already merged upstream:
  * fix-gst-sink.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1710331200">- Update to version 1.0.4:
  * Highlights
  - Track memfd better to avoid inconsistent memory. Also make
    sure the mixer info is removed correctly in all cases on
    destroyed ports.
  - Correctly handle removed objects in the metadata.
  - Add an option to set the server and client priorities instead
    of using a hardcoded value of 88.
  - The FFADO module has been fixed. Audio and MIDI now works
    with the same latency as the JACK driver. This has now also
    been tested with a Focusrite Saffire Pro 14.
  - The JACK library has seen some important fixes. Some ardour
    crackling has been fixed when looping and multiple MIDI ports
    on a client should now work.
  - Small bugfixes and improvements.
  * PipeWire
  - Track memfd better to avoid inconsistent memory. Also make
    sure the mixer info is removed correctly in all cases on
    destroyed ports.
  - Fix Props param emission again in pw_stream. (#3833)
  - Add MAPPABLE flag to buffer data to indicate that the fd can
    be mmapped directly. Use this on DMABUF from v4l2. (#3840)
  - Correctly handle removed object in the metadata.
  - FreeBSD build and compatibility fixes.
  - Add an option to set the server and client priorities instead
    of using a hardcoded value of 88.
  - Read config overrides in the right order.
  - Fix PIPEWIRE_QUANTUM rate handling in pw_stream and
    pw_filter.
  - Fix pw_context_parse_conf_section(), actually use the conf
    argument.
  - A new pw_stream_get_nsec() and pw_filter_get_nsec() function
    was added to get the current time of the stream/filter
    without having to assume a particular clock.
  - A new default.clock.quantum-floor property was added to
    configure the absolute lowest buffer-size. (#3908)
  * docs
  - Many doc updates.
  * tools
  - Make sure we always quit pw-cli when the server stops.(#3837)
  - pw-top now prints all drivers in batch mode. (#3899)
  * modules
  - Don't destroy the client in protocol-simple on EAGAIN.
  - Handle IPv6 better in the RTP modules. Fix IPv6 SAP header
    parsing. (#3851)
  - The FFADO module has been fixed. Audio and MIDI now works
    with the same latency as the JACK driver. This has now also
    been tested with a Focusrite Saffire Pro 14. (#3558)
  * pulse-server
  - Make sure the peer_name is filled to avoid protocol errors.
  * SPA
  - Small resampler tweaks to improve stability of adaptive
    resampler.
  - Add ALSA option to control htimestamp autodisable.
  - Avoid some potential crashes in audioconvert when ports are
    removed.
  - Improve HDMI jack detection on some SOCs.
  - The audioconvert now has a monitor.passthrough option to pass
    the latency information on the monitor ports. (#3888)
  * GStreamer
  - Don't use timeouts when autoconnect=false in pipewiresrc.
    (#3884)
  - pipewiresrc and pipewiresink can now be automatically
    selected as audio source and sink.
  - An invalid memory access was fixed when destroying the device
    provider.
  * JACK
  - Remove properties correctly with the object id, not serial.
  - Improve sync with the data thread by pausing the core. Also
    improve handling of port io to avoid invalid buffer access.
  - Fix PIPEWIRE_QUANTUM rate handling.
  - Support multiple MIDI input ports per client. (#3901)
  - The output buffer size is now always correctly set. (#3892)
  * ALSA
  - Handle errors from eventfd_create correctly.</changelog>
  <changelog author="rguenther@suse.com" date="1710849600">- Avoid %if %{pkg_vcmp gcc &lt; 8}, instead replicate the condition
  from the BuildRequires section.</changelog>
  <changelog author="alarrosa@suse.com" date="1712836800">- Move the jack spa plugin from the pipewire-spa-plugins-0_2
  package to a new pipewire-spa-plugins-0_2-jack package. This
  allows to not Suggest the pipewire-libjack package from
  pipewire-spa-plugins-0_2 since that's only used to connect
  pipewire as a client to a jack server which is not common at all
  (boo#1222253).</changelog>
  <changelog author="alarrosa@suse.com" date="1713355200">- Update to version 1.0.5:
  * Highlights
  - pw_stream can now report timestamps on buffers and the
    expected amount of samples for the resampler.
  - The GStreamer element now has more correct timestamps using
    the new pw_stream timestamps as a fallback.
  - The FFADO module now handles suspend and resume better.
  - A regression in v4l2 was fixed when parsing malformed
    filters.
  - A potential memory/fd leak was fixed in client-node.
  - Many more small bugfixes and improvements.
  * PipeWire
  - pw_stream now reports the expected resampler input or output
    size in the pw_time structure. (#3750)
  - pw_stream now also adds a time field to the buffer, which
    contains the time of the graph when the buffer was received
    in the stream.
  - Fix a compiler error when compiling with -Werror=shadow.
    (#3915)
  - The config parser will warn when invalid config is detected.
  * Modules
  - The FFADO module now opens and closes when suspending. This
    fixes some problems when FFADO properties are changed while
    suspended. (#3558)
  - Filter-chain will now warn when invalid config is detected.
  - Echo-cancel will now handle manage the state of the
    echo-cancel plugin better, making sure run() is not called
    after deactivate().
  - Fix some potential memory/fd leaks in client-node.
  * SPA
  - Improve reading the bound ALSA controls.
  - The resampler can now also report the number of expected
    output samples.
  - The ALSA ACP device objects have some more properties like
    the card.id and alsa.components. (#3912)
  - Fix a potential string corruption when parsing JSON strings.
  - V4l2 now sets the latency on the port. (#3910)
  - alsa-udev now has an option to expose the device even if
    busy. (#3914)
  - Improve null-audio-sink channel handling. (#3931)
  - v4l2 will now drop the first frame because it often contains
    wrong timestamps or garbage. (#3910)
  - A regression in v4l2 was fixed where invalid/empty properties
    in the filter would make it error early. (#3959)
  * GStreamer
  - The source now falls back to the new pw_buffer time for the
    timestamps.
  * Docs
  - Sync with the master branch.</changelog>
  <changelog author="alarrosa@suse.com" date="1714996800">- Update to version 1.0.5+git36.60deeb2 to fix several crashes,
  NULL checks, format strings and other issues:
  * spa: libcamera: fix RGB mappings
  * pw-dump: destroy all objects not just those matching the pattern
  * pw-dump: fix string memory leak on error
  * json: fix high surrogate escapes
  * core: handle import errors better
  * gst/src: fix crash when current_caps is NULL
  * gst/src: Avoid unnecessary renegotiations during streaming
  * gst/src: Cleanups for src_negotiate()
  * pw-mon: fix type confusion in core event handler
  * gst: fix stream params memory leak
  * gst: handle some more errors
  * treewide: fix errno assignments
  * alsa-pcm: don't force quantum for iec958 formats
  * journal: prepend code location to messages at debug log levels
  * module-rt: fix compiler warning
  * filter-chain: fix arguments of calloc
  * combine-stream tag forward
  * Add album to tag metadata
  * impl-node: avoid bitfield races
  * treewide: fix some format string issues
  * conf: warn when match actions are missing
  * module-protocol-simple: handle 'node.name' property
  * module-ffado: only start after ports are configured
  * context: fill basic properties early
  * combine-stream: fix latency-compensate with resample.disabled=true
  * profiler: remove unused data-loop
  * v4l2: fix printf format
  * spa: v4l2: encode device id into a json array
  * spa: libcamera: encode device ids into a json array
  * impl-port: avoid doing work when the port is destroyed
  * impl-port: use 0 size when clearing IO
  * stream: log a warning when media.class and direction mismatch
  * module-loopback: only enable delay with valid rate and channels
  * alsa: fix race when updating the eventfd
  * audioconvert: also clamp monitor volume to min/max
  * combine-stream: actually make use of resample.disable</changelog>
  <changelog author="alarrosa@suse.com" date="1726660800">- Make sure the pipewire-libjack package doesn't completely
  replace the original jack libraries unless the pipewire-jack
  package which installs the ld.so.conf.d file is installed too
  (boo#1222253).
- Move modules jack-tunnel and jackdbus-detect to the
  pipewire-spa-plugins-0_2-jack since those modules should only
  be used when the real jack server is running. This fixes pipewire
  starting jackdbus on start.</changelog>
  <changelog author="alarrosa@suse.com" date="1747051200">- Add patch from upstream to make pipewire not run as root at all.
  This fixes bsc#1222762:
  * 0001-systemd-Disable-pipewire-user-services-for-root.patch</changelog>
</package>
<package pkgid="b2664ca062b8481a21f8a95f8b9f5026cc484bac62d88c0798670d1d56d7aab1" name="libpng12-0" arch="x86_64">
  <version epoch="0" ver="1.2.57" rel="150000.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1416484800">- updated to 1.2.52:
  * Avoid out-of-bounds memory access while checking version string.</changelog>
  <changelog author="olaf@aepfle.de" date="1421668800">- Fix CVE-2013-7354.patch, include limits.h for INT_MAX</changelog>
  <changelog author="pgajdos@suse.com" date="1425038400">- updated to 1.2.53:
  Issue a png_error() instead of a png_warning() when width is
    potentially too large for the architecture, in case the calling
    application has overridden the default 1,000,000-column limit
    (fixes CVE-2014-9495 and CVE-2015-0973).
  Display user limits in the output from pngtest.
  Changed PNG_USER_CHUNK_MALLOC_MAX from unlimited to 8,000,000.
    This can only be changed at library-build time.  It only
    affects the maximum memory that can be allocated to an
    ancillary chunk; it does not limit the size of IDAT
    data, which is instead limited by PNG_USER_WIDTH_MAX.</changelog>
  <changelog author="pgajdos@suse.com" date="1438948800">- build in build section</changelog>
  <changelog author="pgajdos@suse.com" date="1447416000">- updated to 1.2.54</changelog>
  <changelog author="pgajdos@suse.com" date="1449144000">- updated to 1.2.55:
  Avoid potential pointer overflow in png_handle_iTXt(), png_handle_zTXt(),
    png_handle_sPLT(), and png_handle_pCAL() (Bug report by John Regehr).
  Fixed incorrect implementation of png_set_PLTE() that uses png_ptr
    not info_ptr, that left png_set_PLTE() open to the CVE-2015-8126
    vulnerability.</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- updated to 1.2.56:
  Fixed an out-of-range read in png_check_keyword() (Bug report from
    Qixue Xiao, CVE-2015-8540).
  Added keyword checks to pngset.c</changelog>
  <changelog author="pgajdos@suse.com" date="1483358400">- updated to 1.2.57: fixes CVE-2016-10087</changelog>
  <changelog author="jengelh@inai.de" date="1517313600">- Fix SRPM group and grammar issues.</changelog>
  <changelog author="pgajdos@suse.com" date="1517400000">- check with -j1, be explicit</changelog>
  <changelog author="pgajdos@suse.com" date="1764763200">- security update
- modified patches
  * libpng-1.2.51-CVE-2013-7353.patch (-p1)
  * libpng-1.2.51-CVE-2013-7354.patch (-p1)
- added patches
  CVE-2025-64505 [bsc#1254157], heap buffer over-read in `png_do_quantize` via malformed palette index
  * libpng12-CVE-2025-64505.patch</changelog>
</package>
<package pkgid="fd4bc3882c3c5a03e679f9f0ff99c2269be41ebd0facfde3b0bf253670fb9869" name="libpng12-0" arch="x86_64">
  <version epoch="0" ver="1.2.57" rel="150000.4.6.1"/>
  <changelog author="pgajdos@suse.com" date="1416484800">- updated to 1.2.52:
  * Avoid out-of-bounds memory access while checking version string.</changelog>
  <changelog author="olaf@aepfle.de" date="1421668800">- Fix CVE-2013-7354.patch, include limits.h for INT_MAX</changelog>
  <changelog author="pgajdos@suse.com" date="1425038400">- updated to 1.2.53:
  Issue a png_error() instead of a png_warning() when width is
    potentially too large for the architecture, in case the calling
    application has overridden the default 1,000,000-column limit
    (fixes CVE-2014-9495 and CVE-2015-0973).
  Display user limits in the output from pngtest.
  Changed PNG_USER_CHUNK_MALLOC_MAX from unlimited to 8,000,000.
    This can only be changed at library-build time.  It only
    affects the maximum memory that can be allocated to an
    ancillary chunk; it does not limit the size of IDAT
    data, which is instead limited by PNG_USER_WIDTH_MAX.</changelog>
  <changelog author="pgajdos@suse.com" date="1438948800">- build in build section</changelog>
  <changelog author="pgajdos@suse.com" date="1447416000">- updated to 1.2.54</changelog>
  <changelog author="pgajdos@suse.com" date="1449144000">- updated to 1.2.55:
  Avoid potential pointer overflow in png_handle_iTXt(), png_handle_zTXt(),
    png_handle_sPLT(), and png_handle_pCAL() (Bug report by John Regehr).
  Fixed incorrect implementation of png_set_PLTE() that uses png_ptr
    not info_ptr, that left png_set_PLTE() open to the CVE-2015-8126
    vulnerability.</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- updated to 1.2.56:
  Fixed an out-of-range read in png_check_keyword() (Bug report from
    Qixue Xiao, CVE-2015-8540).
  Added keyword checks to pngset.c</changelog>
  <changelog author="pgajdos@suse.com" date="1483358400">- updated to 1.2.57: fixes CVE-2016-10087</changelog>
  <changelog author="jengelh@inai.de" date="1517313600">- Fix SRPM group and grammar issues.</changelog>
  <changelog author="pgajdos@suse.com" date="1517400000">- check with -j1, be explicit</changelog>
  <changelog author="pgajdos@suse.com" date="1764763200">- security update
- modified patches
  * libpng-1.2.51-CVE-2013-7353.patch (-p1)
  * libpng-1.2.51-CVE-2013-7354.patch (-p1)
- added patches
  CVE-2025-64505 [bsc#1254157], heap buffer over-read in `png_do_quantize` via malformed palette index
  * libpng12-CVE-2025-64505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770897600">- added patches
  CVE-2026-25646: Heap buffer overflow vulnerability in png_set_dither/png_set_quantize (bsc#1258020)
  * libpng12-CVE-2026-25646.patch</changelog>
</package>
<package pkgid="fa1d9be67e74f2cb182437970591e68eb644d7c95a67026886b05a2633d52586" name="libpng12-0" arch="x86_64">
  <version epoch="0" ver="1.2.59" rel="150000.4.11.1"/>
  <changelog author="pgajdos@suse.com" date="1416484800">- updated to 1.2.52:
  * Avoid out-of-bounds memory access while checking version string.</changelog>
  <changelog author="olaf@aepfle.de" date="1421668800">- Fix CVE-2013-7354.patch, include limits.h for INT_MAX</changelog>
  <changelog author="pgajdos@suse.com" date="1425038400">- updated to 1.2.53:
  Issue a png_error() instead of a png_warning() when width is
    potentially too large for the architecture, in case the calling
    application has overridden the default 1,000,000-column limit
    (fixes CVE-2014-9495 and CVE-2015-0973).
  Display user limits in the output from pngtest.
  Changed PNG_USER_CHUNK_MALLOC_MAX from unlimited to 8,000,000.
    This can only be changed at library-build time.  It only
    affects the maximum memory that can be allocated to an
    ancillary chunk; it does not limit the size of IDAT
    data, which is instead limited by PNG_USER_WIDTH_MAX.</changelog>
  <changelog author="pgajdos@suse.com" date="1438948800">- build in build section</changelog>
  <changelog author="pgajdos@suse.com" date="1447416000">- updated to 1.2.54</changelog>
  <changelog author="pgajdos@suse.com" date="1449144000">- updated to 1.2.55:
  Avoid potential pointer overflow in png_handle_iTXt(), png_handle_zTXt(),
    png_handle_sPLT(), and png_handle_pCAL() (Bug report by John Regehr).
  Fixed incorrect implementation of png_set_PLTE() that uses png_ptr
    not info_ptr, that left png_set_PLTE() open to the CVE-2015-8126
    vulnerability.</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- updated to 1.2.56:
  Fixed an out-of-range read in png_check_keyword() (Bug report from
    Qixue Xiao, CVE-2015-8540).
  Added keyword checks to pngset.c</changelog>
  <changelog author="pgajdos@suse.com" date="1483358400">- updated to 1.2.57: fixes CVE-2016-10087</changelog>
  <changelog author="jengelh@inai.de" date="1517313600">- Fix SRPM group and grammar issues.</changelog>
  <changelog author="pgajdos@suse.com" date="1517400000">- check with -j1, be explicit</changelog>
  <changelog author="pgajdos@suse.com" date="1764763200">- security update
- modified patches
  * libpng-1.2.51-CVE-2013-7353.patch (-p1)
  * libpng-1.2.51-CVE-2013-7354.patch (-p1)
- added patches
  CVE-2025-64505 [bsc#1254157], heap buffer over-read in `png_do_quantize` via malformed palette index
  * libpng12-CVE-2025-64505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770897600">- added patches
  CVE-2026-25646: Heap buffer overflow vulnerability in png_set_dither/png_set_quantize (bsc#1258020)
  * libpng12-CVE-2026-25646.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1777377600">- added patches
  CVE-2026-33416: use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE` can lead to arbitrary code execution [bsc#1260754]
  * libpng12-CVE-2026-33416.patch
  CVE-2026-34757: Information disclosure and data corruption via use-after-free vulnerability [bsc#1261957]
  * libpng12-CVE-2026-34757.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1777377601">- version update to 1.2.59 [jsc#PED-16191]
  Added png_check_chunk_length() function, and check all chunks except
    IDAT against the default 8MB limit; check IDAT against the maximum
    size computed from IHDR parameters (Fixes CVE-2017-12652).
  Initialize memory allocated by png_inflate to zero, using memset, to
    stop an oss-fuzz "use of uninitialized value" detection in png_set_text_2()
    due to truncated iTXt or zTXt chunk.
  Added png_check_chunk_length() function, and check all chunks except
    IDAT against the default 8MB limit; check IDAT against the maximum
    size computed from IHDR parameters (Fixes CVE-2017-12652).
- deleted patches
  * libpng12-CVE-2026-25646.patch  (upstreamed)
- fixes CVE-2017-12652 [bsc#1141493]</changelog>
</package>
<package pkgid="e9e194c50c6ea7560bb729aa871b32506b72f8dd5dcc4f496888fd57a5f5cebf" name="libpng12" arch="src">
  <version epoch="0" ver="1.2.57" rel="150000.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1329739200">- updated to 1.2.47:
  * fixed CVE-2011-3026 [bnc#747311]</changelog>
  <changelog author="pgajdos@suse.com" date="1331726400">- updated to 1.2.48:
  * fixed CVE-2011-3045 [bnc#752008]</changelog>
  <changelog author="pgajdos@suse.com" date="1333022400">- updated to 1.2.49: [bnc#754745]
  Revised png_set_text_2() to avoid potential memory corruption (fixes
    CVE-2011-3048).
  Prevent PNG_EXPAND+PNG_SHIFT doing the shift twice.</changelog>
  <changelog author="pgajdos@suse.com" date="1342008000">- updated to 1.2.50:
  Changed "a+w" to "u+w" in Makefile.in to fix CVE-2012-3386.</changelog>
  <changelog author="jengelh@inai.de" date="1351080000">- Add missing baselib requires for compat-devel-32bit</changelog>
  <changelog author="mmeister@suse.com" date="1366027200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="coolo@suse.com" date="1366200000">- add conflicts in -32bit package</changelog>
  <changelog author="pgajdos@suse.com" date="1391774400">- updated to 1.2.51:
  Ignore, with a warning, out-of-range value of num_trans in png_set_tRNS().
  Replaced AM_CONFIG_HEADER(config.h) with
    AC_CONFIG_HEADERS([config.h]) in configure.ac
  Changed default value of PNG_USER_CACHE_MAX from 0 to 32767 in pngconf.h.
  Avoid a possible memory leak in contrib/gregbook/readpng.c
  Revised libpng.3 so that "doclifter" can process it.
  Changed '"%s"m' to '"%s" m' in png_debug macros to improve portability
    among compilers.
  Rebuilt the configure scripts with autoconf-2.69 and automake-1.14.1
  Removed potentially misleading warning from png_check_IHDR().
  Quiet set-but-not-used warnings in pngset.c
  Quiet an uninitialized memory warning from VC2013 in png_get_png().
  Quiet unused variable warnings from clang by porting PNG_UNUSED() from
    libpng-1.4.6.
  Added -DZ_SOLO to CFLAGS in contrib/pngminim/*/makefile
  Added an #ifdef PNG_FIXED_POINT_SUPPORTED/#endif in pngset.c</changelog>
  <changelog author="pgajdos@suse.com" date="1398168000">- security update:
  * CVE-2013-7353.patch [bnc#873124]
  * CVE-2013-7354.patch [bnc#873123]</changelog>
  <changelog author="pgajdos@suse.com" date="1416484800">- updated to 1.2.52:
  * Avoid out-of-bounds memory access while checking version string.</changelog>
  <changelog author="olaf@aepfle.de" date="1421668800">- Fix CVE-2013-7354.patch, include limits.h for INT_MAX</changelog>
  <changelog author="pgajdos@suse.com" date="1425038400">- updated to 1.2.53:
  Issue a png_error() instead of a png_warning() when width is
    potentially too large for the architecture, in case the calling
    application has overridden the default 1,000,000-column limit
    (fixes CVE-2014-9495 and CVE-2015-0973).
  Display user limits in the output from pngtest.
  Changed PNG_USER_CHUNK_MALLOC_MAX from unlimited to 8,000,000.
    This can only be changed at library-build time.  It only
    affects the maximum memory that can be allocated to an
    ancillary chunk; it does not limit the size of IDAT
    data, which is instead limited by PNG_USER_WIDTH_MAX.</changelog>
  <changelog author="pgajdos@suse.com" date="1438948800">- build in build section</changelog>
  <changelog author="pgajdos@suse.com" date="1447416000">- updated to 1.2.54</changelog>
  <changelog author="pgajdos@suse.com" date="1449144000">- updated to 1.2.55:
  Avoid potential pointer overflow in png_handle_iTXt(), png_handle_zTXt(),
    png_handle_sPLT(), and png_handle_pCAL() (Bug report by John Regehr).
  Fixed incorrect implementation of png_set_PLTE() that uses png_ptr
    not info_ptr, that left png_set_PLTE() open to the CVE-2015-8126
    vulnerability.</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- updated to 1.2.56:
  Fixed an out-of-range read in png_check_keyword() (Bug report from
    Qixue Xiao, CVE-2015-8540).
  Added keyword checks to pngset.c</changelog>
  <changelog author="pgajdos@suse.com" date="1483358400">- updated to 1.2.57: fixes CVE-2016-10087</changelog>
  <changelog author="jengelh@inai.de" date="1517313600">- Fix SRPM group and grammar issues.</changelog>
  <changelog author="pgajdos@suse.com" date="1517400000">- check with -j1, be explicit</changelog>
  <changelog author="pgajdos@suse.com" date="1764763200">- security update
- modified patches
  * libpng-1.2.51-CVE-2013-7353.patch (-p1)
  * libpng-1.2.51-CVE-2013-7354.patch (-p1)
- added patches
  CVE-2025-64505 [bsc#1254157], heap buffer over-read in `png_do_quantize` via malformed palette index
  * libpng12-CVE-2025-64505.patch</changelog>
</package>
<package pkgid="58a793b1ae077374b504853db711f9262cc996c36d83b7f03b21538ee1637446" name="libpng12" arch="src">
  <version epoch="0" ver="1.2.57" rel="150000.4.6.1"/>
  <changelog author="pgajdos@suse.com" date="1331726400">- updated to 1.2.48:
  * fixed CVE-2011-3045 [bnc#752008]</changelog>
  <changelog author="pgajdos@suse.com" date="1333022400">- updated to 1.2.49: [bnc#754745]
  Revised png_set_text_2() to avoid potential memory corruption (fixes
    CVE-2011-3048).
  Prevent PNG_EXPAND+PNG_SHIFT doing the shift twice.</changelog>
  <changelog author="pgajdos@suse.com" date="1342008000">- updated to 1.2.50:
  Changed "a+w" to "u+w" in Makefile.in to fix CVE-2012-3386.</changelog>
  <changelog author="jengelh@inai.de" date="1351080000">- Add missing baselib requires for compat-devel-32bit</changelog>
  <changelog author="mmeister@suse.com" date="1366027200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="coolo@suse.com" date="1366200000">- add conflicts in -32bit package</changelog>
  <changelog author="pgajdos@suse.com" date="1391774400">- updated to 1.2.51:
  Ignore, with a warning, out-of-range value of num_trans in png_set_tRNS().
  Replaced AM_CONFIG_HEADER(config.h) with
    AC_CONFIG_HEADERS([config.h]) in configure.ac
  Changed default value of PNG_USER_CACHE_MAX from 0 to 32767 in pngconf.h.
  Avoid a possible memory leak in contrib/gregbook/readpng.c
  Revised libpng.3 so that "doclifter" can process it.
  Changed '"%s"m' to '"%s" m' in png_debug macros to improve portability
    among compilers.
  Rebuilt the configure scripts with autoconf-2.69 and automake-1.14.1
  Removed potentially misleading warning from png_check_IHDR().
  Quiet set-but-not-used warnings in pngset.c
  Quiet an uninitialized memory warning from VC2013 in png_get_png().
  Quiet unused variable warnings from clang by porting PNG_UNUSED() from
    libpng-1.4.6.
  Added -DZ_SOLO to CFLAGS in contrib/pngminim/*/makefile
  Added an #ifdef PNG_FIXED_POINT_SUPPORTED/#endif in pngset.c</changelog>
  <changelog author="pgajdos@suse.com" date="1398168000">- security update:
  * CVE-2013-7353.patch [bnc#873124]
  * CVE-2013-7354.patch [bnc#873123]</changelog>
  <changelog author="pgajdos@suse.com" date="1416484800">- updated to 1.2.52:
  * Avoid out-of-bounds memory access while checking version string.</changelog>
  <changelog author="olaf@aepfle.de" date="1421668800">- Fix CVE-2013-7354.patch, include limits.h for INT_MAX</changelog>
  <changelog author="pgajdos@suse.com" date="1425038400">- updated to 1.2.53:
  Issue a png_error() instead of a png_warning() when width is
    potentially too large for the architecture, in case the calling
    application has overridden the default 1,000,000-column limit
    (fixes CVE-2014-9495 and CVE-2015-0973).
  Display user limits in the output from pngtest.
  Changed PNG_USER_CHUNK_MALLOC_MAX from unlimited to 8,000,000.
    This can only be changed at library-build time.  It only
    affects the maximum memory that can be allocated to an
    ancillary chunk; it does not limit the size of IDAT
    data, which is instead limited by PNG_USER_WIDTH_MAX.</changelog>
  <changelog author="pgajdos@suse.com" date="1438948800">- build in build section</changelog>
  <changelog author="pgajdos@suse.com" date="1447416000">- updated to 1.2.54</changelog>
  <changelog author="pgajdos@suse.com" date="1449144000">- updated to 1.2.55:
  Avoid potential pointer overflow in png_handle_iTXt(), png_handle_zTXt(),
    png_handle_sPLT(), and png_handle_pCAL() (Bug report by John Regehr).
  Fixed incorrect implementation of png_set_PLTE() that uses png_ptr
    not info_ptr, that left png_set_PLTE() open to the CVE-2015-8126
    vulnerability.</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- updated to 1.2.56:
  Fixed an out-of-range read in png_check_keyword() (Bug report from
    Qixue Xiao, CVE-2015-8540).
  Added keyword checks to pngset.c</changelog>
  <changelog author="pgajdos@suse.com" date="1483358400">- updated to 1.2.57: fixes CVE-2016-10087</changelog>
  <changelog author="jengelh@inai.de" date="1517313600">- Fix SRPM group and grammar issues.</changelog>
  <changelog author="pgajdos@suse.com" date="1517400000">- check with -j1, be explicit</changelog>
  <changelog author="pgajdos@suse.com" date="1764763200">- security update
- modified patches
  * libpng-1.2.51-CVE-2013-7353.patch (-p1)
  * libpng-1.2.51-CVE-2013-7354.patch (-p1)
- added patches
  CVE-2025-64505 [bsc#1254157], heap buffer over-read in `png_do_quantize` via malformed palette index
  * libpng12-CVE-2025-64505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770897600">- added patches
  CVE-2026-25646: Heap buffer overflow vulnerability in png_set_dither/png_set_quantize (bsc#1258020)
  * libpng12-CVE-2026-25646.patch</changelog>
</package>
<package pkgid="de25e0c8e66d9863bdeec306c440bee93b8ce12df014a6c27e6bad945e92f2c3" name="libpng12" arch="src">
  <version epoch="0" ver="1.2.59" rel="150000.4.11.1"/>
  <changelog author="pgajdos@suse.com" date="1342008000">- updated to 1.2.50:
  Changed "a+w" to "u+w" in Makefile.in to fix CVE-2012-3386.</changelog>
  <changelog author="jengelh@inai.de" date="1351080000">- Add missing baselib requires for compat-devel-32bit</changelog>
  <changelog author="mmeister@suse.com" date="1366027200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="coolo@suse.com" date="1366200000">- add conflicts in -32bit package</changelog>
  <changelog author="pgajdos@suse.com" date="1391774400">- updated to 1.2.51:
  Ignore, with a warning, out-of-range value of num_trans in png_set_tRNS().
  Replaced AM_CONFIG_HEADER(config.h) with
    AC_CONFIG_HEADERS([config.h]) in configure.ac
  Changed default value of PNG_USER_CACHE_MAX from 0 to 32767 in pngconf.h.
  Avoid a possible memory leak in contrib/gregbook/readpng.c
  Revised libpng.3 so that "doclifter" can process it.
  Changed '"%s"m' to '"%s" m' in png_debug macros to improve portability
    among compilers.
  Rebuilt the configure scripts with autoconf-2.69 and automake-1.14.1
  Removed potentially misleading warning from png_check_IHDR().
  Quiet set-but-not-used warnings in pngset.c
  Quiet an uninitialized memory warning from VC2013 in png_get_png().
  Quiet unused variable warnings from clang by porting PNG_UNUSED() from
    libpng-1.4.6.
  Added -DZ_SOLO to CFLAGS in contrib/pngminim/*/makefile
  Added an #ifdef PNG_FIXED_POINT_SUPPORTED/#endif in pngset.c</changelog>
  <changelog author="pgajdos@suse.com" date="1398168000">- security update:
  * CVE-2013-7353.patch [bnc#873124]
  * CVE-2013-7354.patch [bnc#873123]</changelog>
  <changelog author="pgajdos@suse.com" date="1416484800">- updated to 1.2.52:
  * Avoid out-of-bounds memory access while checking version string.</changelog>
  <changelog author="olaf@aepfle.de" date="1421668800">- Fix CVE-2013-7354.patch, include limits.h for INT_MAX</changelog>
  <changelog author="pgajdos@suse.com" date="1425038400">- updated to 1.2.53:
  Issue a png_error() instead of a png_warning() when width is
    potentially too large for the architecture, in case the calling
    application has overridden the default 1,000,000-column limit
    (fixes CVE-2014-9495 and CVE-2015-0973).
  Display user limits in the output from pngtest.
  Changed PNG_USER_CHUNK_MALLOC_MAX from unlimited to 8,000,000.
    This can only be changed at library-build time.  It only
    affects the maximum memory that can be allocated to an
    ancillary chunk; it does not limit the size of IDAT
    data, which is instead limited by PNG_USER_WIDTH_MAX.</changelog>
  <changelog author="pgajdos@suse.com" date="1438948800">- build in build section</changelog>
  <changelog author="pgajdos@suse.com" date="1447416000">- updated to 1.2.54</changelog>
  <changelog author="pgajdos@suse.com" date="1449144000">- updated to 1.2.55:
  Avoid potential pointer overflow in png_handle_iTXt(), png_handle_zTXt(),
    png_handle_sPLT(), and png_handle_pCAL() (Bug report by John Regehr).
  Fixed incorrect implementation of png_set_PLTE() that uses png_ptr
    not info_ptr, that left png_set_PLTE() open to the CVE-2015-8126
    vulnerability.</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- updated to 1.2.56:
  Fixed an out-of-range read in png_check_keyword() (Bug report from
    Qixue Xiao, CVE-2015-8540).
  Added keyword checks to pngset.c</changelog>
  <changelog author="pgajdos@suse.com" date="1483358400">- updated to 1.2.57: fixes CVE-2016-10087</changelog>
  <changelog author="jengelh@inai.de" date="1517313600">- Fix SRPM group and grammar issues.</changelog>
  <changelog author="pgajdos@suse.com" date="1517400000">- check with -j1, be explicit</changelog>
  <changelog author="pgajdos@suse.com" date="1764763200">- security update
- modified patches
  * libpng-1.2.51-CVE-2013-7353.patch (-p1)
  * libpng-1.2.51-CVE-2013-7354.patch (-p1)
- added patches
  CVE-2025-64505 [bsc#1254157], heap buffer over-read in `png_do_quantize` via malformed palette index
  * libpng12-CVE-2025-64505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770897600">- added patches
  CVE-2026-25646: Heap buffer overflow vulnerability in png_set_dither/png_set_quantize (bsc#1258020)
  * libpng12-CVE-2026-25646.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1777377600">- added patches
  CVE-2026-33416: use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE` can lead to arbitrary code execution [bsc#1260754]
  * libpng12-CVE-2026-33416.patch
  CVE-2026-34757: Information disclosure and data corruption via use-after-free vulnerability [bsc#1261957]
  * libpng12-CVE-2026-34757.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1777377601">- version update to 1.2.59 [jsc#PED-16191]
  Added png_check_chunk_length() function, and check all chunks except
    IDAT against the default 8MB limit; check IDAT against the maximum
    size computed from IHDR parameters (Fixes CVE-2017-12652).
  Initialize memory allocated by png_inflate to zero, using memset, to
    stop an oss-fuzz "use of uninitialized value" detection in png_set_text_2()
    due to truncated iTXt or zTXt chunk.
  Added png_check_chunk_length() function, and check all chunks except
    IDAT against the default 8MB limit; check IDAT against the maximum
    size computed from IHDR parameters (Fixes CVE-2017-12652).
- deleted patches
  * libpng12-CVE-2026-25646.patch  (upstreamed)
- fixes CVE-2017-12652 [bsc#1141493]</changelog>
</package>
<package pkgid="9cce6028fd435244c6f1682c66dd5e7d409703a59149f3b45ea286cbed823fe6" name="libpng12-devel" arch="x86_64">
  <version epoch="0" ver="1.2.57" rel="150000.4.3.1"/>
  <changelog author="pgajdos@suse.com" date="1416484800">- updated to 1.2.52:
  * Avoid out-of-bounds memory access while checking version string.</changelog>
  <changelog author="olaf@aepfle.de" date="1421668800">- Fix CVE-2013-7354.patch, include limits.h for INT_MAX</changelog>
  <changelog author="pgajdos@suse.com" date="1425038400">- updated to 1.2.53:
  Issue a png_error() instead of a png_warning() when width is
    potentially too large for the architecture, in case the calling
    application has overridden the default 1,000,000-column limit
    (fixes CVE-2014-9495 and CVE-2015-0973).
  Display user limits in the output from pngtest.
  Changed PNG_USER_CHUNK_MALLOC_MAX from unlimited to 8,000,000.
    This can only be changed at library-build time.  It only
    affects the maximum memory that can be allocated to an
    ancillary chunk; it does not limit the size of IDAT
    data, which is instead limited by PNG_USER_WIDTH_MAX.</changelog>
  <changelog author="pgajdos@suse.com" date="1438948800">- build in build section</changelog>
  <changelog author="pgajdos@suse.com" date="1447416000">- updated to 1.2.54</changelog>
  <changelog author="pgajdos@suse.com" date="1449144000">- updated to 1.2.55:
  Avoid potential pointer overflow in png_handle_iTXt(), png_handle_zTXt(),
    png_handle_sPLT(), and png_handle_pCAL() (Bug report by John Regehr).
  Fixed incorrect implementation of png_set_PLTE() that uses png_ptr
    not info_ptr, that left png_set_PLTE() open to the CVE-2015-8126
    vulnerability.</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- updated to 1.2.56:
  Fixed an out-of-range read in png_check_keyword() (Bug report from
    Qixue Xiao, CVE-2015-8540).
  Added keyword checks to pngset.c</changelog>
  <changelog author="pgajdos@suse.com" date="1483358400">- updated to 1.2.57: fixes CVE-2016-10087</changelog>
  <changelog author="jengelh@inai.de" date="1517313600">- Fix SRPM group and grammar issues.</changelog>
  <changelog author="pgajdos@suse.com" date="1517400000">- check with -j1, be explicit</changelog>
  <changelog author="pgajdos@suse.com" date="1764763200">- security update
- modified patches
  * libpng-1.2.51-CVE-2013-7353.patch (-p1)
  * libpng-1.2.51-CVE-2013-7354.patch (-p1)
- added patches
  CVE-2025-64505 [bsc#1254157], heap buffer over-read in `png_do_quantize` via malformed palette index
  * libpng12-CVE-2025-64505.patch</changelog>
</package>
<package pkgid="0a182084b4fbc6c5ecdd51a961199fb014c718c429730502cd16ae409b86c7fc" name="libpng12-devel" arch="x86_64">
  <version epoch="0" ver="1.2.57" rel="150000.4.6.1"/>
  <changelog author="pgajdos@suse.com" date="1416484800">- updated to 1.2.52:
  * Avoid out-of-bounds memory access while checking version string.</changelog>
  <changelog author="olaf@aepfle.de" date="1421668800">- Fix CVE-2013-7354.patch, include limits.h for INT_MAX</changelog>
  <changelog author="pgajdos@suse.com" date="1425038400">- updated to 1.2.53:
  Issue a png_error() instead of a png_warning() when width is
    potentially too large for the architecture, in case the calling
    application has overridden the default 1,000,000-column limit
    (fixes CVE-2014-9495 and CVE-2015-0973).
  Display user limits in the output from pngtest.
  Changed PNG_USER_CHUNK_MALLOC_MAX from unlimited to 8,000,000.
    This can only be changed at library-build time.  It only
    affects the maximum memory that can be allocated to an
    ancillary chunk; it does not limit the size of IDAT
    data, which is instead limited by PNG_USER_WIDTH_MAX.</changelog>
  <changelog author="pgajdos@suse.com" date="1438948800">- build in build section</changelog>
  <changelog author="pgajdos@suse.com" date="1447416000">- updated to 1.2.54</changelog>
  <changelog author="pgajdos@suse.com" date="1449144000">- updated to 1.2.55:
  Avoid potential pointer overflow in png_handle_iTXt(), png_handle_zTXt(),
    png_handle_sPLT(), and png_handle_pCAL() (Bug report by John Regehr).
  Fixed incorrect implementation of png_set_PLTE() that uses png_ptr
    not info_ptr, that left png_set_PLTE() open to the CVE-2015-8126
    vulnerability.</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- updated to 1.2.56:
  Fixed an out-of-range read in png_check_keyword() (Bug report from
    Qixue Xiao, CVE-2015-8540).
  Added keyword checks to pngset.c</changelog>
  <changelog author="pgajdos@suse.com" date="1483358400">- updated to 1.2.57: fixes CVE-2016-10087</changelog>
  <changelog author="jengelh@inai.de" date="1517313600">- Fix SRPM group and grammar issues.</changelog>
  <changelog author="pgajdos@suse.com" date="1517400000">- check with -j1, be explicit</changelog>
  <changelog author="pgajdos@suse.com" date="1764763200">- security update
- modified patches
  * libpng-1.2.51-CVE-2013-7353.patch (-p1)
  * libpng-1.2.51-CVE-2013-7354.patch (-p1)
- added patches
  CVE-2025-64505 [bsc#1254157], heap buffer over-read in `png_do_quantize` via malformed palette index
  * libpng12-CVE-2025-64505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770897600">- added patches
  CVE-2026-25646: Heap buffer overflow vulnerability in png_set_dither/png_set_quantize (bsc#1258020)
  * libpng12-CVE-2026-25646.patch</changelog>
</package>
<package pkgid="e83218cb8a546f41b6e3d7f969e725a7355098aaa51c3adb8f3cfd8d601bc4d1" name="libpng12-devel" arch="x86_64">
  <version epoch="0" ver="1.2.59" rel="150000.4.11.1"/>
  <changelog author="pgajdos@suse.com" date="1416484800">- updated to 1.2.52:
  * Avoid out-of-bounds memory access while checking version string.</changelog>
  <changelog author="olaf@aepfle.de" date="1421668800">- Fix CVE-2013-7354.patch, include limits.h for INT_MAX</changelog>
  <changelog author="pgajdos@suse.com" date="1425038400">- updated to 1.2.53:
  Issue a png_error() instead of a png_warning() when width is
    potentially too large for the architecture, in case the calling
    application has overridden the default 1,000,000-column limit
    (fixes CVE-2014-9495 and CVE-2015-0973).
  Display user limits in the output from pngtest.
  Changed PNG_USER_CHUNK_MALLOC_MAX from unlimited to 8,000,000.
    This can only be changed at library-build time.  It only
    affects the maximum memory that can be allocated to an
    ancillary chunk; it does not limit the size of IDAT
    data, which is instead limited by PNG_USER_WIDTH_MAX.</changelog>
  <changelog author="pgajdos@suse.com" date="1438948800">- build in build section</changelog>
  <changelog author="pgajdos@suse.com" date="1447416000">- updated to 1.2.54</changelog>
  <changelog author="pgajdos@suse.com" date="1449144000">- updated to 1.2.55:
  Avoid potential pointer overflow in png_handle_iTXt(), png_handle_zTXt(),
    png_handle_sPLT(), and png_handle_pCAL() (Bug report by John Regehr).
  Fixed incorrect implementation of png_set_PLTE() that uses png_ptr
    not info_ptr, that left png_set_PLTE() open to the CVE-2015-8126
    vulnerability.</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- updated to 1.2.56:
  Fixed an out-of-range read in png_check_keyword() (Bug report from
    Qixue Xiao, CVE-2015-8540).
  Added keyword checks to pngset.c</changelog>
  <changelog author="pgajdos@suse.com" date="1483358400">- updated to 1.2.57: fixes CVE-2016-10087</changelog>
  <changelog author="jengelh@inai.de" date="1517313600">- Fix SRPM group and grammar issues.</changelog>
  <changelog author="pgajdos@suse.com" date="1517400000">- check with -j1, be explicit</changelog>
  <changelog author="pgajdos@suse.com" date="1764763200">- security update
- modified patches
  * libpng-1.2.51-CVE-2013-7353.patch (-p1)
  * libpng-1.2.51-CVE-2013-7354.patch (-p1)
- added patches
  CVE-2025-64505 [bsc#1254157], heap buffer over-read in `png_do_quantize` via malformed palette index
  * libpng12-CVE-2025-64505.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770897600">- added patches
  CVE-2026-25646: Heap buffer overflow vulnerability in png_set_dither/png_set_quantize (bsc#1258020)
  * libpng12-CVE-2026-25646.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1777377600">- added patches
  CVE-2026-33416: use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE` can lead to arbitrary code execution [bsc#1260754]
  * libpng12-CVE-2026-33416.patch
  CVE-2026-34757: Information disclosure and data corruption via use-after-free vulnerability [bsc#1261957]
  * libpng12-CVE-2026-34757.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1777377601">- version update to 1.2.59 [jsc#PED-16191]
  Added png_check_chunk_length() function, and check all chunks except
    IDAT against the default 8MB limit; check IDAT against the maximum
    size computed from IHDR parameters (Fixes CVE-2017-12652).
  Initialize memory allocated by png_inflate to zero, using memset, to
    stop an oss-fuzz "use of uninitialized value" detection in png_set_text_2()
    due to truncated iTXt or zTXt chunk.
  Added png_check_chunk_length() function, and check all chunks except
    IDAT against the default 8MB limit; check IDAT against the maximum
    size computed from IHDR parameters (Fixes CVE-2017-12652).
- deleted patches
  * libpng12-CVE-2026-25646.patch  (upstreamed)
- fixes CVE-2017-12652 [bsc#1141493]</changelog>
</package>
<package pkgid="1067c1f6beefd5e41e2be6c1572b88ae30307953476a42dd120877ef1704a7bc" name="libpng16" arch="src">
  <version epoch="0" ver="1.6.40" rel="150600.3.12.1"/>
  <changelog author="pgajdos@suse.com" date="1546257600">- update to 1.6.36:
  Replaced the remaining uses of png_size_t with size_t (Cosmin)
    Fixed the calculation of row_factor in png_check_chunk_length
    (reported by Thuan Pham in SourceForge issue #278)
    Added missing parentheses to a macro definition
    (suggested by "irwir" in GitHub issue #216)
    Optimized png_do_expand_palette for ARM processors.
    Improved performance by around 10-22% on a recent ARM Chromebook.
    (Contributed by Richard Townsend, ARM Holdings)
    Fixed manipulation of machine-specific optimization options.
    (Contributed by Vicki Pfau)
    Used memcpy instead of manual pointer arithmetic on Intel SSE2.
    (Contributed by Samuel Williams)
    Fixed build errors with MSVC on ARM64.
    (Contributed by Zhijie Liang)
    Fixed detection of libm in CMakeLists.
    (Contributed by Cameron Cawley)
    Fixed incorrect creation of pkg-config file in CMakeLists.
    (Contributed by Kyle Bentley)
    Fixed the CMake build on Windows MSYS by avoiding symlinks.
    Fixed a build warning on OpenBSD.
    (Contributed by Theo Buehler)
    Fixed various typos in comments.
    (Contributed by "luz.paz")
    Raised the minimum required CMake version from 3.0.2 to 3.1.
    Removed yet more of the vestigial support for pre-ANSI C compilers.
    Removed ancient makefiles for ancient systems that have been broken
    across all previous libpng-1.6.x versions.
    Removed the Y2K compliance statement and the export control
    information.
    Applied various code style and documentation fixes.
- removed patches
  * libpng16-CVE-2018-13785.patch (upstreamed)
- cannot find upstream tarball signature, asked upstream for
  clarification</changelog>
  <changelog author="pgajdos@suse.com" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp</changelog>
  <changelog author="pgajdos@suse.com" date="1548676800">- fix arm build [bsc#1121829]
  + libpng-arm-free.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- version update to 1.6.37
  Fixed a use-after-free vulnerability (CVE-2019-7317) in png_image_free.
  Fixed a memory leak in the ARM NEON implementation of png_do_expand_palette.
  Fixed a memory leak in pngtest.c.
  Fixed two vulnerabilities (CVE-2018-14048, CVE-2018-14550) in
    contrib/pngminus; refactor.
  Changed the license of contrib/pngminus to MIT; refresh makefile and docs.
    (Contributed by Willem van Schaik)
  Added makefiles for AddressSanitizer-enabled builds.
- deleted patches
  - libpng-arm-free.patch (upstreamed)
- fixes [bsc#1121624] CVE-2019-6129 and [bsc#1124211] CVE-2019-7317</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- make check actually works under asan</changelog>
  <changelog author="l.lunak@centrum.cz" date="1615464000">- enable hardware optimizations (such as SSE)</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- install rpm macros in %{_rpmmacrodir} [bsc#1185661]
- call spec-cleaner</changelog>
  <changelog author="meissner@suse.com" date="1651665600">- switch source url to https</changelog>
  <changelog author="dmueller@suse.com" date="1663329600">- update to 1.6.38:
  * Added configurations and scripts for continuous integration.
  * Fixed various errors in the handling of tRNS, hIST and eXIf.
  * Implemented many stability improvements across all platforms.
  * Updated the internal documentation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1669377600">- Update to version 1.6.39:
  * cmake: Default to PNG_ARM_NEON=off for arm targets.
  + Turn large PNG chunks into benign errors.
  + Update, rename and clean up various scripts.
  + tools: Fix a buffer overflow involving a file name in pngfix.
  + tools: Fix a memory leak in pngcp.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- switch to pkgconfig(zlib) to allow alternative providers as well
- build with glibc hwcaps optimized libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252801">- Fix build: some*.la files are symlinks. Adjust spec to use
  find -type f,l</changelog>
  <changelog author="fcrozat@suse.com" date="1681992000">- Fix license tag to libpng-2.0.</changelog>
  <changelog author="pgajdos@suse.com" date="1684152000">- do not use NEON instructions [bsc#1211176]</changelog>
  <changelog author="mpluskal@suse.com" date="1687435200">- Update to version 1.6.40:
  * Fixed the eXIf chunk multiplicity checks.
  * Fixed a memory leak in pCAL processing.
  * Corrected the validity report about tRNS inside png_get_valid().
  * Fixed various build issues on *BSD, Mac and Windows.
  * Updated the configurations and the scripts for continuous integration.
  * Cleaned up the code, the build scripts, and the documentation.</changelog>
  <changelog author="pgajdos@suse.com" date="1764676800">- security update
- added patches
  CVE-2025-64505 [bsc#1254157], heap buffer over-read in `png_do_quantize` via malformed palette index
  * libpng16-CVE-2025-64505.patch
  CVE-2025-64506 [bsc#1254158], heap buffer over-read in `png_write_image_8bit` with 8-bit input and `convert_to_8bit` enabled
  * libpng16-CVE-2025-64506.patch
  CVE-2025-64720 [bsc#1254159], buffer overflow in `png_image_read_composite` via incorrect palette premultiplication
  * libpng16-CVE-2025-64720.patch
  CVE-2025-65018 [bsc#1254160], heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`
  * libpng16-CVE-2025-65018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1764936000">- security update
- added patches
  CVE-2025-66293 [bsc#1254480], LIBPNG out-of-bounds read in png_image_read_composite
  * libpng16-CVE-2025-66293-1.patch
  * libpng16-CVE-2025-66293-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1768478400">- security update
- added patches
  CVE-2026-22695 [bsc#1256525], Heap buffer over-read in png_image_finish_read
  * libpng16-CVE-2026-22695.patch
  CVE-2026-22801 [bsc#1256526], Integer truncation causing heap buffer over-read in png_image_write_*
  * libpng16-CVE-2026-22801.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1769601600">- security update
- added patches
  CVE-2025-28162 [bsc#1257364], memory leaks when running `pngimage`
  CVE-2025-28164 [bsc#1257365], memory leaks when running `pngimage`
  * libpng16-CVE-2025-28162,28164.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770897600">- added patches
  CVE-2026-25646: Heap buffer overflow vulnerability in png_set_dither/png_set_quantize (bsc#1258020)
  * libpng16-CVE-2026-25646.patch</changelog>
</package>
<package pkgid="979564377dc70dfbcfecfb9f6e74d7b64d79a13a73dec3bc2ddb594c0da4cad7" name="libpng16" arch="src">
  <version epoch="0" ver="1.6.40" rel="150600.3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp</changelog>
  <changelog author="pgajdos@suse.com" date="1548676800">- fix arm build [bsc#1121829]
  + libpng-arm-free.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- version update to 1.6.37
  Fixed a use-after-free vulnerability (CVE-2019-7317) in png_image_free.
  Fixed a memory leak in the ARM NEON implementation of png_do_expand_palette.
  Fixed a memory leak in pngtest.c.
  Fixed two vulnerabilities (CVE-2018-14048, CVE-2018-14550) in
    contrib/pngminus; refactor.
  Changed the license of contrib/pngminus to MIT; refresh makefile and docs.
    (Contributed by Willem van Schaik)
  Added makefiles for AddressSanitizer-enabled builds.
- deleted patches
  - libpng-arm-free.patch (upstreamed)
- fixes [bsc#1121624] CVE-2019-6129 and [bsc#1124211] CVE-2019-7317</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- make check actually works under asan</changelog>
  <changelog author="l.lunak@centrum.cz" date="1615464000">- enable hardware optimizations (such as SSE)</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- install rpm macros in %{_rpmmacrodir} [bsc#1185661]
- call spec-cleaner</changelog>
  <changelog author="meissner@suse.com" date="1651665600">- switch source url to https</changelog>
  <changelog author="dmueller@suse.com" date="1663329600">- update to 1.6.38:
  * Added configurations and scripts for continuous integration.
  * Fixed various errors in the handling of tRNS, hIST and eXIf.
  * Implemented many stability improvements across all platforms.
  * Updated the internal documentation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1669377600">- Update to version 1.6.39:
  * cmake: Default to PNG_ARM_NEON=off for arm targets.
  + Turn large PNG chunks into benign errors.
  + Update, rename and clean up various scripts.
  + tools: Fix a buffer overflow involving a file name in pngfix.
  + tools: Fix a memory leak in pngcp.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- switch to pkgconfig(zlib) to allow alternative providers as well
- build with glibc hwcaps optimized libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252801">- Fix build: some*.la files are symlinks. Adjust spec to use
  find -type f,l</changelog>
  <changelog author="fcrozat@suse.com" date="1681992000">- Fix license tag to libpng-2.0.</changelog>
  <changelog author="pgajdos@suse.com" date="1684152000">- do not use NEON instructions [bsc#1211176]</changelog>
  <changelog author="mpluskal@suse.com" date="1687435200">- Update to version 1.6.40:
  * Fixed the eXIf chunk multiplicity checks.
  * Fixed a memory leak in pCAL processing.
  * Corrected the validity report about tRNS inside png_get_valid().
  * Fixed various build issues on *BSD, Mac and Windows.
  * Updated the configurations and the scripts for continuous integration.
  * Cleaned up the code, the build scripts, and the documentation.</changelog>
  <changelog author="pgajdos@suse.com" date="1764676800">- security update
- added patches
  CVE-2025-64505 [bsc#1254157], heap buffer over-read in `png_do_quantize` via malformed palette index
  * libpng16-CVE-2025-64505.patch
  CVE-2025-64506 [bsc#1254158], heap buffer over-read in `png_write_image_8bit` with 8-bit input and `convert_to_8bit` enabled
  * libpng16-CVE-2025-64506.patch
  CVE-2025-64720 [bsc#1254159], buffer overflow in `png_image_read_composite` via incorrect palette premultiplication
  * libpng16-CVE-2025-64720.patch
  CVE-2025-65018 [bsc#1254160], heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`
  * libpng16-CVE-2025-65018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1764936000">- security update
- added patches
  CVE-2025-66293 [bsc#1254480], LIBPNG out-of-bounds read in png_image_read_composite
  * libpng16-CVE-2025-66293-1.patch
  * libpng16-CVE-2025-66293-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1768478400">- security update
- added patches
  CVE-2026-22695 [bsc#1256525], Heap buffer over-read in png_image_finish_read
  * libpng16-CVE-2026-22695.patch
  CVE-2026-22801 [bsc#1256526], Integer truncation causing heap buffer over-read in png_image_write_*
  * libpng16-CVE-2026-22801.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1769601600">- security update
- added patches
  CVE-2025-28162 [bsc#1257364], memory leaks when running `pngimage`
  CVE-2025-28164 [bsc#1257365], memory leaks when running `pngimage`
  * libpng16-CVE-2025-28162,28164.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770897600">- added patches
  CVE-2026-25646: Heap buffer overflow vulnerability in png_set_dither/png_set_quantize (bsc#1258020)
  * libpng16-CVE-2026-25646.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1774958400">- added patches
  CVE-2026-33416: use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE` can lead to arbitrary code execution (bsc#1260754)
  * libpng16-CVE-2026-33416-1.patch
  * libpng16-CVE-2026-33416-2.patch
  * libpng16-CVE-2026-33416-3.patch
  * libpng16-CVE-2026-33416-4.patch
  CVE-2026-33636: out-of-bounds read/write in the palette expansion on ARM Neon can lead to information leak and crashes (bsc#1260755)
  * libpng16-CVE-2026-33636.patch</changelog>
</package>
<package pkgid="72d3757239757706a23ffda30551a9337e46f7f53cb9a2a7e357be69f456a136" name="libpng16" arch="src">
  <version epoch="0" ver="1.6.40" rel="150600.3.20.1"/>
  <changelog author="pgajdos@suse.com" date="1548676800">- fix arm build [bsc#1121829]
  + libpng-arm-free.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- version update to 1.6.37
  Fixed a use-after-free vulnerability (CVE-2019-7317) in png_image_free.
  Fixed a memory leak in the ARM NEON implementation of png_do_expand_palette.
  Fixed a memory leak in pngtest.c.
  Fixed two vulnerabilities (CVE-2018-14048, CVE-2018-14550) in
    contrib/pngminus; refactor.
  Changed the license of contrib/pngminus to MIT; refresh makefile and docs.
    (Contributed by Willem van Schaik)
  Added makefiles for AddressSanitizer-enabled builds.
- deleted patches
  - libpng-arm-free.patch (upstreamed)
- fixes [bsc#1121624] CVE-2019-6129 and [bsc#1124211] CVE-2019-7317</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- make check actually works under asan</changelog>
  <changelog author="l.lunak@centrum.cz" date="1615464000">- enable hardware optimizations (such as SSE)</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- install rpm macros in %{_rpmmacrodir} [bsc#1185661]
- call spec-cleaner</changelog>
  <changelog author="meissner@suse.com" date="1651665600">- switch source url to https</changelog>
  <changelog author="dmueller@suse.com" date="1663329600">- update to 1.6.38:
  * Added configurations and scripts for continuous integration.
  * Fixed various errors in the handling of tRNS, hIST and eXIf.
  * Implemented many stability improvements across all platforms.
  * Updated the internal documentation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1669377600">- Update to version 1.6.39:
  * cmake: Default to PNG_ARM_NEON=off for arm targets.
  + Turn large PNG chunks into benign errors.
  + Update, rename and clean up various scripts.
  + tools: Fix a buffer overflow involving a file name in pngfix.
  + tools: Fix a memory leak in pngcp.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- switch to pkgconfig(zlib) to allow alternative providers as well
- build with glibc hwcaps optimized libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252801">- Fix build: some*.la files are symlinks. Adjust spec to use
  find -type f,l</changelog>
  <changelog author="fcrozat@suse.com" date="1681992000">- Fix license tag to libpng-2.0.</changelog>
  <changelog author="pgajdos@suse.com" date="1684152000">- do not use NEON instructions [bsc#1211176]</changelog>
  <changelog author="mpluskal@suse.com" date="1687435200">- Update to version 1.6.40:
  * Fixed the eXIf chunk multiplicity checks.
  * Fixed a memory leak in pCAL processing.
  * Corrected the validity report about tRNS inside png_get_valid().
  * Fixed various build issues on *BSD, Mac and Windows.
  * Updated the configurations and the scripts for continuous integration.
  * Cleaned up the code, the build scripts, and the documentation.</changelog>
  <changelog author="pgajdos@suse.com" date="1764676800">- security update
- added patches
  CVE-2025-64505 [bsc#1254157], heap buffer over-read in `png_do_quantize` via malformed palette index
  * libpng16-CVE-2025-64505.patch
  CVE-2025-64506 [bsc#1254158], heap buffer over-read in `png_write_image_8bit` with 8-bit input and `convert_to_8bit` enabled
  * libpng16-CVE-2025-64506.patch
  CVE-2025-64720 [bsc#1254159], buffer overflow in `png_image_read_composite` via incorrect palette premultiplication
  * libpng16-CVE-2025-64720.patch
  CVE-2025-65018 [bsc#1254160], heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`
  * libpng16-CVE-2025-65018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1764936000">- security update
- added patches
  CVE-2025-66293 [bsc#1254480], LIBPNG out-of-bounds read in png_image_read_composite
  * libpng16-CVE-2025-66293-1.patch
  * libpng16-CVE-2025-66293-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1768478400">- security update
- added patches
  CVE-2026-22695 [bsc#1256525], Heap buffer over-read in png_image_finish_read
  * libpng16-CVE-2026-22695.patch
  CVE-2026-22801 [bsc#1256526], Integer truncation causing heap buffer over-read in png_image_write_*
  * libpng16-CVE-2026-22801.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1769601600">- security update
- added patches
  CVE-2025-28162 [bsc#1257364], memory leaks when running `pngimage`
  CVE-2025-28164 [bsc#1257365], memory leaks when running `pngimage`
  * libpng16-CVE-2025-28162,28164.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770897600">- added patches
  CVE-2026-25646: Heap buffer overflow vulnerability in png_set_dither/png_set_quantize (bsc#1258020)
  * libpng16-CVE-2026-25646.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1774958400">- added patches
  CVE-2026-33416: use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE` can lead to arbitrary code execution (bsc#1260754)
  * libpng16-CVE-2026-33416-1.patch
  * libpng16-CVE-2026-33416-2.patch
  * libpng16-CVE-2026-33416-3.patch
  * libpng16-CVE-2026-33416-4.patch
  CVE-2026-33636: out-of-bounds read/write in the palette expansion on ARM Neon can lead to information leak and crashes (bsc#1260755)
  * libpng16-CVE-2026-33636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776340800">- added patches
  CVE-2026-34757: Information disclosure and data corruption via use-after-free vulnerability [bsc#1261957]
  * libpng16-CVE-2026-34757.patch</changelog>
</package>
<package pkgid="785554f9078c0fcd04814ea9bdac795a7c75b0a6eaf35ecb3da5a34852ac88cc" name="libpng16" arch="src">
  <version epoch="0" ver="1.6.40" rel="150600.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1517400000">- check with -j1</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- %{libname} package provides libpng = %{version} again
  [bsc#1079342]</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update:
  * CVE-2018-13785 [bsc#1100687]
    + libpng16-CVE-2018-13785.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546257600">- update to 1.6.36:
  Replaced the remaining uses of png_size_t with size_t (Cosmin)
    Fixed the calculation of row_factor in png_check_chunk_length
    (reported by Thuan Pham in SourceForge issue #278)
    Added missing parentheses to a macro definition
    (suggested by "irwir" in GitHub issue #216)
    Optimized png_do_expand_palette for ARM processors.
    Improved performance by around 10-22% on a recent ARM Chromebook.
    (Contributed by Richard Townsend, ARM Holdings)
    Fixed manipulation of machine-specific optimization options.
    (Contributed by Vicki Pfau)
    Used memcpy instead of manual pointer arithmetic on Intel SSE2.
    (Contributed by Samuel Williams)
    Fixed build errors with MSVC on ARM64.
    (Contributed by Zhijie Liang)
    Fixed detection of libm in CMakeLists.
    (Contributed by Cameron Cawley)
    Fixed incorrect creation of pkg-config file in CMakeLists.
    (Contributed by Kyle Bentley)
    Fixed the CMake build on Windows MSYS by avoiding symlinks.
    Fixed a build warning on OpenBSD.
    (Contributed by Theo Buehler)
    Fixed various typos in comments.
    (Contributed by "luz.paz")
    Raised the minimum required CMake version from 3.0.2 to 3.1.
    Removed yet more of the vestigial support for pre-ANSI C compilers.
    Removed ancient makefiles for ancient systems that have been broken
    across all previous libpng-1.6.x versions.
    Removed the Y2K compliance statement and the export control
    information.
    Applied various code style and documentation fixes.
- removed patches
  * libpng16-CVE-2018-13785.patch (upstreamed)
- cannot find upstream tarball signature, asked upstream for
  clarification</changelog>
  <changelog author="pgajdos@suse.com" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp</changelog>
  <changelog author="pgajdos@suse.com" date="1548676800">- fix arm build [bsc#1121829]
  + libpng-arm-free.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- version update to 1.6.37
  Fixed a use-after-free vulnerability (CVE-2019-7317) in png_image_free.
  Fixed a memory leak in the ARM NEON implementation of png_do_expand_palette.
  Fixed a memory leak in pngtest.c.
  Fixed two vulnerabilities (CVE-2018-14048, CVE-2018-14550) in
    contrib/pngminus; refactor.
  Changed the license of contrib/pngminus to MIT; refresh makefile and docs.
    (Contributed by Willem van Schaik)
  Added makefiles for AddressSanitizer-enabled builds.
- deleted patches
  - libpng-arm-free.patch (upstreamed)
- fixes [bsc#1121624] CVE-2019-6129 and [bsc#1124211] CVE-2019-7317</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- make check actually works under asan</changelog>
  <changelog author="l.lunak@centrum.cz" date="1615464000">- enable hardware optimizations (such as SSE)</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- install rpm macros in %{_rpmmacrodir} [bsc#1185661]
- call spec-cleaner</changelog>
  <changelog author="meissner@suse.com" date="1651665600">- switch source url to https</changelog>
  <changelog author="dmueller@suse.com" date="1663329600">- update to 1.6.38:
  * Added configurations and scripts for continuous integration.
  * Fixed various errors in the handling of tRNS, hIST and eXIf.
  * Implemented many stability improvements across all platforms.
  * Updated the internal documentation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1669377600">- Update to version 1.6.39:
  * cmake: Default to PNG_ARM_NEON=off for arm targets.
  + Turn large PNG chunks into benign errors.
  + Update, rename and clean up various scripts.
  + tools: Fix a buffer overflow involving a file name in pngfix.
  + tools: Fix a memory leak in pngcp.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- switch to pkgconfig(zlib) to allow alternative providers as well
- build with glibc hwcaps optimized libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252801">- Fix build: some*.la files are symlinks. Adjust spec to use
  find -type f,l</changelog>
  <changelog author="fcrozat@suse.com" date="1681992000">- Fix license tag to libpng-2.0.</changelog>
  <changelog author="pgajdos@suse.com" date="1684152000">- do not use NEON instructions [bsc#1211176]</changelog>
  <changelog author="mpluskal@suse.com" date="1687435200">- Update to version 1.6.40:
  * Fixed the eXIf chunk multiplicity checks.
  * Fixed a memory leak in pCAL processing.
  * Corrected the validity report about tRNS inside png_get_valid().
  * Fixed various build issues on *BSD, Mac and Windows.
  * Updated the configurations and the scripts for continuous integration.
  * Cleaned up the code, the build scripts, and the documentation.</changelog>
  <changelog author="pgajdos@suse.com" date="1764676800">- security update
- added patches
  CVE-2025-64505 [bsc#1254157], heap buffer over-read in `png_do_quantize` via malformed palette index
  * libpng16-CVE-2025-64505.patch
  CVE-2025-64506 [bsc#1254158], heap buffer over-read in `png_write_image_8bit` with 8-bit input and `convert_to_8bit` enabled
  * libpng16-CVE-2025-64506.patch
  CVE-2025-64720 [bsc#1254159], buffer overflow in `png_image_read_composite` via incorrect palette premultiplication
  * libpng16-CVE-2025-64720.patch
  CVE-2025-65018 [bsc#1254160], heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`
  * libpng16-CVE-2025-65018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1764936000">- security update
- added patches
  CVE-2025-66293 [bsc#1254480], LIBPNG out-of-bounds read in png_image_read_composite
  * libpng16-CVE-2025-66293-1.patch
  * libpng16-CVE-2025-66293-2.patch</changelog>
</package>
<package pkgid="021348e04185771c4323ba32316c7f76e549efa1111b73900be776f543368d02" name="libpng16" arch="src">
  <version epoch="0" ver="1.6.40" rel="150600.3.6.1"/>
  <changelog author="pgajdos@suse.com" date="1517832000">- %{libname} package provides libpng = %{version} again
  [bsc#1079342]</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update:
  * CVE-2018-13785 [bsc#1100687]
    + libpng16-CVE-2018-13785.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546257600">- update to 1.6.36:
  Replaced the remaining uses of png_size_t with size_t (Cosmin)
    Fixed the calculation of row_factor in png_check_chunk_length
    (reported by Thuan Pham in SourceForge issue #278)
    Added missing parentheses to a macro definition
    (suggested by "irwir" in GitHub issue #216)
    Optimized png_do_expand_palette for ARM processors.
    Improved performance by around 10-22% on a recent ARM Chromebook.
    (Contributed by Richard Townsend, ARM Holdings)
    Fixed manipulation of machine-specific optimization options.
    (Contributed by Vicki Pfau)
    Used memcpy instead of manual pointer arithmetic on Intel SSE2.
    (Contributed by Samuel Williams)
    Fixed build errors with MSVC on ARM64.
    (Contributed by Zhijie Liang)
    Fixed detection of libm in CMakeLists.
    (Contributed by Cameron Cawley)
    Fixed incorrect creation of pkg-config file in CMakeLists.
    (Contributed by Kyle Bentley)
    Fixed the CMake build on Windows MSYS by avoiding symlinks.
    Fixed a build warning on OpenBSD.
    (Contributed by Theo Buehler)
    Fixed various typos in comments.
    (Contributed by "luz.paz")
    Raised the minimum required CMake version from 3.0.2 to 3.1.
    Removed yet more of the vestigial support for pre-ANSI C compilers.
    Removed ancient makefiles for ancient systems that have been broken
    across all previous libpng-1.6.x versions.
    Removed the Y2K compliance statement and the export control
    information.
    Applied various code style and documentation fixes.
- removed patches
  * libpng16-CVE-2018-13785.patch (upstreamed)
- cannot find upstream tarball signature, asked upstream for
  clarification</changelog>
  <changelog author="pgajdos@suse.com" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp</changelog>
  <changelog author="pgajdos@suse.com" date="1548676800">- fix arm build [bsc#1121829]
  + libpng-arm-free.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- version update to 1.6.37
  Fixed a use-after-free vulnerability (CVE-2019-7317) in png_image_free.
  Fixed a memory leak in the ARM NEON implementation of png_do_expand_palette.
  Fixed a memory leak in pngtest.c.
  Fixed two vulnerabilities (CVE-2018-14048, CVE-2018-14550) in
    contrib/pngminus; refactor.
  Changed the license of contrib/pngminus to MIT; refresh makefile and docs.
    (Contributed by Willem van Schaik)
  Added makefiles for AddressSanitizer-enabled builds.
- deleted patches
  - libpng-arm-free.patch (upstreamed)
- fixes [bsc#1121624] CVE-2019-6129 and [bsc#1124211] CVE-2019-7317</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- make check actually works under asan</changelog>
  <changelog author="l.lunak@centrum.cz" date="1615464000">- enable hardware optimizations (such as SSE)</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- install rpm macros in %{_rpmmacrodir} [bsc#1185661]
- call spec-cleaner</changelog>
  <changelog author="meissner@suse.com" date="1651665600">- switch source url to https</changelog>
  <changelog author="dmueller@suse.com" date="1663329600">- update to 1.6.38:
  * Added configurations and scripts for continuous integration.
  * Fixed various errors in the handling of tRNS, hIST and eXIf.
  * Implemented many stability improvements across all platforms.
  * Updated the internal documentation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1669377600">- Update to version 1.6.39:
  * cmake: Default to PNG_ARM_NEON=off for arm targets.
  + Turn large PNG chunks into benign errors.
  + Update, rename and clean up various scripts.
  + tools: Fix a buffer overflow involving a file name in pngfix.
  + tools: Fix a memory leak in pngcp.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- switch to pkgconfig(zlib) to allow alternative providers as well
- build with glibc hwcaps optimized libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252801">- Fix build: some*.la files are symlinks. Adjust spec to use
  find -type f,l</changelog>
  <changelog author="fcrozat@suse.com" date="1681992000">- Fix license tag to libpng-2.0.</changelog>
  <changelog author="pgajdos@suse.com" date="1684152000">- do not use NEON instructions [bsc#1211176]</changelog>
  <changelog author="mpluskal@suse.com" date="1687435200">- Update to version 1.6.40:
  * Fixed the eXIf chunk multiplicity checks.
  * Fixed a memory leak in pCAL processing.
  * Corrected the validity report about tRNS inside png_get_valid().
  * Fixed various build issues on *BSD, Mac and Windows.
  * Updated the configurations and the scripts for continuous integration.
  * Cleaned up the code, the build scripts, and the documentation.</changelog>
  <changelog author="pgajdos@suse.com" date="1764676800">- security update
- added patches
  CVE-2025-64505 [bsc#1254157], heap buffer over-read in `png_do_quantize` via malformed palette index
  * libpng16-CVE-2025-64505.patch
  CVE-2025-64506 [bsc#1254158], heap buffer over-read in `png_write_image_8bit` with 8-bit input and `convert_to_8bit` enabled
  * libpng16-CVE-2025-64506.patch
  CVE-2025-64720 [bsc#1254159], buffer overflow in `png_image_read_composite` via incorrect palette premultiplication
  * libpng16-CVE-2025-64720.patch
  CVE-2025-65018 [bsc#1254160], heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`
  * libpng16-CVE-2025-65018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1764936000">- security update
- added patches
  CVE-2025-66293 [bsc#1254480], LIBPNG out-of-bounds read in png_image_read_composite
  * libpng16-CVE-2025-66293-1.patch
  * libpng16-CVE-2025-66293-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1768478400">- security update
- added patches
  CVE-2026-22695 [bsc#1256525], Heap buffer over-read in png_image_finish_read
  * libpng16-CVE-2026-22695.patch
  CVE-2026-22801 [bsc#1256526], Integer truncation causing heap buffer over-read in png_image_write_*
  * libpng16-CVE-2026-22801.patch</changelog>
</package>
<package pkgid="6dee055f0b40c7e23892e3f4c8c81fde190e7ea6c4c3114e7401f56d77cff187" name="libpng16" arch="src">
  <version epoch="0" ver="1.6.40" rel="150600.3.9.1"/>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update:
  * CVE-2018-13785 [bsc#1100687]
    + libpng16-CVE-2018-13785.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546257600">- update to 1.6.36:
  Replaced the remaining uses of png_size_t with size_t (Cosmin)
    Fixed the calculation of row_factor in png_check_chunk_length
    (reported by Thuan Pham in SourceForge issue #278)
    Added missing parentheses to a macro definition
    (suggested by "irwir" in GitHub issue #216)
    Optimized png_do_expand_palette for ARM processors.
    Improved performance by around 10-22% on a recent ARM Chromebook.
    (Contributed by Richard Townsend, ARM Holdings)
    Fixed manipulation of machine-specific optimization options.
    (Contributed by Vicki Pfau)
    Used memcpy instead of manual pointer arithmetic on Intel SSE2.
    (Contributed by Samuel Williams)
    Fixed build errors with MSVC on ARM64.
    (Contributed by Zhijie Liang)
    Fixed detection of libm in CMakeLists.
    (Contributed by Cameron Cawley)
    Fixed incorrect creation of pkg-config file in CMakeLists.
    (Contributed by Kyle Bentley)
    Fixed the CMake build on Windows MSYS by avoiding symlinks.
    Fixed a build warning on OpenBSD.
    (Contributed by Theo Buehler)
    Fixed various typos in comments.
    (Contributed by "luz.paz")
    Raised the minimum required CMake version from 3.0.2 to 3.1.
    Removed yet more of the vestigial support for pre-ANSI C compilers.
    Removed ancient makefiles for ancient systems that have been broken
    across all previous libpng-1.6.x versions.
    Removed the Y2K compliance statement and the export control
    information.
    Applied various code style and documentation fixes.
- removed patches
  * libpng16-CVE-2018-13785.patch (upstreamed)
- cannot find upstream tarball signature, asked upstream for
  clarification</changelog>
  <changelog author="pgajdos@suse.com" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp</changelog>
  <changelog author="pgajdos@suse.com" date="1548676800">- fix arm build [bsc#1121829]
  + libpng-arm-free.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- version update to 1.6.37
  Fixed a use-after-free vulnerability (CVE-2019-7317) in png_image_free.
  Fixed a memory leak in the ARM NEON implementation of png_do_expand_palette.
  Fixed a memory leak in pngtest.c.
  Fixed two vulnerabilities (CVE-2018-14048, CVE-2018-14550) in
    contrib/pngminus; refactor.
  Changed the license of contrib/pngminus to MIT; refresh makefile and docs.
    (Contributed by Willem van Schaik)
  Added makefiles for AddressSanitizer-enabled builds.
- deleted patches
  - libpng-arm-free.patch (upstreamed)
- fixes [bsc#1121624] CVE-2019-6129 and [bsc#1124211] CVE-2019-7317</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- make check actually works under asan</changelog>
  <changelog author="l.lunak@centrum.cz" date="1615464000">- enable hardware optimizations (such as SSE)</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- install rpm macros in %{_rpmmacrodir} [bsc#1185661]
- call spec-cleaner</changelog>
  <changelog author="meissner@suse.com" date="1651665600">- switch source url to https</changelog>
  <changelog author="dmueller@suse.com" date="1663329600">- update to 1.6.38:
  * Added configurations and scripts for continuous integration.
  * Fixed various errors in the handling of tRNS, hIST and eXIf.
  * Implemented many stability improvements across all platforms.
  * Updated the internal documentation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1669377600">- Update to version 1.6.39:
  * cmake: Default to PNG_ARM_NEON=off for arm targets.
  + Turn large PNG chunks into benign errors.
  + Update, rename and clean up various scripts.
  + tools: Fix a buffer overflow involving a file name in pngfix.
  + tools: Fix a memory leak in pngcp.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- switch to pkgconfig(zlib) to allow alternative providers as well
- build with glibc hwcaps optimized libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252801">- Fix build: some*.la files are symlinks. Adjust spec to use
  find -type f,l</changelog>
  <changelog author="fcrozat@suse.com" date="1681992000">- Fix license tag to libpng-2.0.</changelog>
  <changelog author="pgajdos@suse.com" date="1684152000">- do not use NEON instructions [bsc#1211176]</changelog>
  <changelog author="mpluskal@suse.com" date="1687435200">- Update to version 1.6.40:
  * Fixed the eXIf chunk multiplicity checks.
  * Fixed a memory leak in pCAL processing.
  * Corrected the validity report about tRNS inside png_get_valid().
  * Fixed various build issues on *BSD, Mac and Windows.
  * Updated the configurations and the scripts for continuous integration.
  * Cleaned up the code, the build scripts, and the documentation.</changelog>
  <changelog author="pgajdos@suse.com" date="1764676800">- security update
- added patches
  CVE-2025-64505 [bsc#1254157], heap buffer over-read in `png_do_quantize` via malformed palette index
  * libpng16-CVE-2025-64505.patch
  CVE-2025-64506 [bsc#1254158], heap buffer over-read in `png_write_image_8bit` with 8-bit input and `convert_to_8bit` enabled
  * libpng16-CVE-2025-64506.patch
  CVE-2025-64720 [bsc#1254159], buffer overflow in `png_image_read_composite` via incorrect palette premultiplication
  * libpng16-CVE-2025-64720.patch
  CVE-2025-65018 [bsc#1254160], heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`
  * libpng16-CVE-2025-65018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1764936000">- security update
- added patches
  CVE-2025-66293 [bsc#1254480], LIBPNG out-of-bounds read in png_image_read_composite
  * libpng16-CVE-2025-66293-1.patch
  * libpng16-CVE-2025-66293-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1768478400">- security update
- added patches
  CVE-2026-22695 [bsc#1256525], Heap buffer over-read in png_image_finish_read
  * libpng16-CVE-2026-22695.patch
  CVE-2026-22801 [bsc#1256526], Integer truncation causing heap buffer over-read in png_image_write_*
  * libpng16-CVE-2026-22801.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1769601600">- security update
- added patches
  CVE-2025-28162 [bsc#1257364], memory leaks when running `pngimage`
  CVE-2025-28164 [bsc#1257365], memory leaks when running `pngimage`
  * libpng16-CVE-2025-28162,28164.patch</changelog>
</package>
<package pkgid="8b15290b4c58824c99d5c0b0e8e08c4f3431281c217dcb349126ae763a56b670" name="libpng16-16" arch="x86_64">
  <version epoch="0" ver="1.6.40" rel="150600.3.12.1"/>
  <changelog author="pgajdos@suse.com" date="1546257600">- update to 1.6.36:
  Replaced the remaining uses of png_size_t with size_t (Cosmin)
    Fixed the calculation of row_factor in png_check_chunk_length
    (reported by Thuan Pham in SourceForge issue #278)
    Added missing parentheses to a macro definition
    (suggested by "irwir" in GitHub issue #216)
    Optimized png_do_expand_palette for ARM processors.
    Improved performance by around 10-22% on a recent ARM Chromebook.
    (Contributed by Richard Townsend, ARM Holdings)
    Fixed manipulation of machine-specific optimization options.
    (Contributed by Vicki Pfau)
    Used memcpy instead of manual pointer arithmetic on Intel SSE2.
    (Contributed by Samuel Williams)
    Fixed build errors with MSVC on ARM64.
    (Contributed by Zhijie Liang)
    Fixed detection of libm in CMakeLists.
    (Contributed by Cameron Cawley)
    Fixed incorrect creation of pkg-config file in CMakeLists.
    (Contributed by Kyle Bentley)
    Fixed the CMake build on Windows MSYS by avoiding symlinks.
    Fixed a build warning on OpenBSD.
    (Contributed by Theo Buehler)
    Fixed various typos in comments.
    (Contributed by "luz.paz")
    Raised the minimum required CMake version from 3.0.2 to 3.1.
    Removed yet more of the vestigial support for pre-ANSI C compilers.
    Removed ancient makefiles for ancient systems that have been broken
    across all previous libpng-1.6.x versions.
    Removed the Y2K compliance statement and the export control
    information.
    Applied various code style and documentation fixes.
- removed patches
  * libpng16-CVE-2018-13785.patch (upstreamed)
- cannot find upstream tarball signature, asked upstream for
  clarification</changelog>
  <changelog author="pgajdos@suse.com" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp</changelog>
  <changelog author="pgajdos@suse.com" date="1548676800">- fix arm build [bsc#1121829]
  + libpng-arm-free.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- version update to 1.6.37
  Fixed a use-after-free vulnerability (CVE-2019-7317) in png_image_free.
  Fixed a memory leak in the ARM NEON implementation of png_do_expand_palette.
  Fixed a memory leak in pngtest.c.
  Fixed two vulnerabilities (CVE-2018-14048, CVE-2018-14550) in
    contrib/pngminus; refactor.
  Changed the license of contrib/pngminus to MIT; refresh makefile and docs.
    (Contributed by Willem van Schaik)
  Added makefiles for AddressSanitizer-enabled builds.
- deleted patches
  - libpng-arm-free.patch (upstreamed)
- fixes [bsc#1121624] CVE-2019-6129 and [bsc#1124211] CVE-2019-7317</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- make check actually works under asan</changelog>
  <changelog author="l.lunak@centrum.cz" date="1615464000">- enable hardware optimizations (such as SSE)</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- install rpm macros in %{_rpmmacrodir} [bsc#1185661]
- call spec-cleaner</changelog>
  <changelog author="meissner@suse.com" date="1651665600">- switch source url to https</changelog>
  <changelog author="dmueller@suse.com" date="1663329600">- update to 1.6.38:
  * Added configurations and scripts for continuous integration.
  * Fixed various errors in the handling of tRNS, hIST and eXIf.
  * Implemented many stability improvements across all platforms.
  * Updated the internal documentation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1669377600">- Update to version 1.6.39:
  * cmake: Default to PNG_ARM_NEON=off for arm targets.
  + Turn large PNG chunks into benign errors.
  + Update, rename and clean up various scripts.
  + tools: Fix a buffer overflow involving a file name in pngfix.
  + tools: Fix a memory leak in pngcp.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- switch to pkgconfig(zlib) to allow alternative providers as well
- build with glibc hwcaps optimized libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252801">- Fix build: some*.la files are symlinks. Adjust spec to use
  find -type f,l</changelog>
  <changelog author="fcrozat@suse.com" date="1681992000">- Fix license tag to libpng-2.0.</changelog>
  <changelog author="pgajdos@suse.com" date="1684152000">- do not use NEON instructions [bsc#1211176]</changelog>
  <changelog author="mpluskal@suse.com" date="1687435200">- Update to version 1.6.40:
  * Fixed the eXIf chunk multiplicity checks.
  * Fixed a memory leak in pCAL processing.
  * Corrected the validity report about tRNS inside png_get_valid().
  * Fixed various build issues on *BSD, Mac and Windows.
  * Updated the configurations and the scripts for continuous integration.
  * Cleaned up the code, the build scripts, and the documentation.</changelog>
  <changelog author="pgajdos@suse.com" date="1764676800">- security update
- added patches
  CVE-2025-64505 [bsc#1254157], heap buffer over-read in `png_do_quantize` via malformed palette index
  * libpng16-CVE-2025-64505.patch
  CVE-2025-64506 [bsc#1254158], heap buffer over-read in `png_write_image_8bit` with 8-bit input and `convert_to_8bit` enabled
  * libpng16-CVE-2025-64506.patch
  CVE-2025-64720 [bsc#1254159], buffer overflow in `png_image_read_composite` via incorrect palette premultiplication
  * libpng16-CVE-2025-64720.patch
  CVE-2025-65018 [bsc#1254160], heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`
  * libpng16-CVE-2025-65018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1764936000">- security update
- added patches
  CVE-2025-66293 [bsc#1254480], LIBPNG out-of-bounds read in png_image_read_composite
  * libpng16-CVE-2025-66293-1.patch
  * libpng16-CVE-2025-66293-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1768478400">- security update
- added patches
  CVE-2026-22695 [bsc#1256525], Heap buffer over-read in png_image_finish_read
  * libpng16-CVE-2026-22695.patch
  CVE-2026-22801 [bsc#1256526], Integer truncation causing heap buffer over-read in png_image_write_*
  * libpng16-CVE-2026-22801.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1769601600">- security update
- added patches
  CVE-2025-28162 [bsc#1257364], memory leaks when running `pngimage`
  CVE-2025-28164 [bsc#1257365], memory leaks when running `pngimage`
  * libpng16-CVE-2025-28162,28164.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770897600">- added patches
  CVE-2026-25646: Heap buffer overflow vulnerability in png_set_dither/png_set_quantize (bsc#1258020)
  * libpng16-CVE-2026-25646.patch</changelog>
</package>
<package pkgid="c977f1611ea943b64fa711c7b3d35a2b278f289a65c7786bad17fd32f4831d27" name="libpng16-16" arch="x86_64">
  <version epoch="0" ver="1.6.40" rel="150600.3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp</changelog>
  <changelog author="pgajdos@suse.com" date="1548676800">- fix arm build [bsc#1121829]
  + libpng-arm-free.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- version update to 1.6.37
  Fixed a use-after-free vulnerability (CVE-2019-7317) in png_image_free.
  Fixed a memory leak in the ARM NEON implementation of png_do_expand_palette.
  Fixed a memory leak in pngtest.c.
  Fixed two vulnerabilities (CVE-2018-14048, CVE-2018-14550) in
    contrib/pngminus; refactor.
  Changed the license of contrib/pngminus to MIT; refresh makefile and docs.
    (Contributed by Willem van Schaik)
  Added makefiles for AddressSanitizer-enabled builds.
- deleted patches
  - libpng-arm-free.patch (upstreamed)
- fixes [bsc#1121624] CVE-2019-6129 and [bsc#1124211] CVE-2019-7317</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- make check actually works under asan</changelog>
  <changelog author="l.lunak@centrum.cz" date="1615464000">- enable hardware optimizations (such as SSE)</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- install rpm macros in %{_rpmmacrodir} [bsc#1185661]
- call spec-cleaner</changelog>
  <changelog author="meissner@suse.com" date="1651665600">- switch source url to https</changelog>
  <changelog author="dmueller@suse.com" date="1663329600">- update to 1.6.38:
  * Added configurations and scripts for continuous integration.
  * Fixed various errors in the handling of tRNS, hIST and eXIf.
  * Implemented many stability improvements across all platforms.
  * Updated the internal documentation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1669377600">- Update to version 1.6.39:
  * cmake: Default to PNG_ARM_NEON=off for arm targets.
  + Turn large PNG chunks into benign errors.
  + Update, rename and clean up various scripts.
  + tools: Fix a buffer overflow involving a file name in pngfix.
  + tools: Fix a memory leak in pngcp.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- switch to pkgconfig(zlib) to allow alternative providers as well
- build with glibc hwcaps optimized libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252801">- Fix build: some*.la files are symlinks. Adjust spec to use
  find -type f,l</changelog>
  <changelog author="fcrozat@suse.com" date="1681992000">- Fix license tag to libpng-2.0.</changelog>
  <changelog author="pgajdos@suse.com" date="1684152000">- do not use NEON instructions [bsc#1211176]</changelog>
  <changelog author="mpluskal@suse.com" date="1687435200">- Update to version 1.6.40:
  * Fixed the eXIf chunk multiplicity checks.
  * Fixed a memory leak in pCAL processing.
  * Corrected the validity report about tRNS inside png_get_valid().
  * Fixed various build issues on *BSD, Mac and Windows.
  * Updated the configurations and the scripts for continuous integration.
  * Cleaned up the code, the build scripts, and the documentation.</changelog>
  <changelog author="pgajdos@suse.com" date="1764676800">- security update
- added patches
  CVE-2025-64505 [bsc#1254157], heap buffer over-read in `png_do_quantize` via malformed palette index
  * libpng16-CVE-2025-64505.patch
  CVE-2025-64506 [bsc#1254158], heap buffer over-read in `png_write_image_8bit` with 8-bit input and `convert_to_8bit` enabled
  * libpng16-CVE-2025-64506.patch
  CVE-2025-64720 [bsc#1254159], buffer overflow in `png_image_read_composite` via incorrect palette premultiplication
  * libpng16-CVE-2025-64720.patch
  CVE-2025-65018 [bsc#1254160], heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`
  * libpng16-CVE-2025-65018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1764936000">- security update
- added patches
  CVE-2025-66293 [bsc#1254480], LIBPNG out-of-bounds read in png_image_read_composite
  * libpng16-CVE-2025-66293-1.patch
  * libpng16-CVE-2025-66293-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1768478400">- security update
- added patches
  CVE-2026-22695 [bsc#1256525], Heap buffer over-read in png_image_finish_read
  * libpng16-CVE-2026-22695.patch
  CVE-2026-22801 [bsc#1256526], Integer truncation causing heap buffer over-read in png_image_write_*
  * libpng16-CVE-2026-22801.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1769601600">- security update
- added patches
  CVE-2025-28162 [bsc#1257364], memory leaks when running `pngimage`
  CVE-2025-28164 [bsc#1257365], memory leaks when running `pngimage`
  * libpng16-CVE-2025-28162,28164.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770897600">- added patches
  CVE-2026-25646: Heap buffer overflow vulnerability in png_set_dither/png_set_quantize (bsc#1258020)
  * libpng16-CVE-2026-25646.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1774958400">- added patches
  CVE-2026-33416: use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE` can lead to arbitrary code execution (bsc#1260754)
  * libpng16-CVE-2026-33416-1.patch
  * libpng16-CVE-2026-33416-2.patch
  * libpng16-CVE-2026-33416-3.patch
  * libpng16-CVE-2026-33416-4.patch
  CVE-2026-33636: out-of-bounds read/write in the palette expansion on ARM Neon can lead to information leak and crashes (bsc#1260755)
  * libpng16-CVE-2026-33636.patch</changelog>
</package>
<package pkgid="f6b3ca81d65211a11fbcca24d0e239a1de6b61c31fb6bf5d2132b687de441ab0" name="libpng16-16" arch="x86_64">
  <version epoch="0" ver="1.6.40" rel="150600.3.20.1"/>
  <changelog author="pgajdos@suse.com" date="1548676800">- fix arm build [bsc#1121829]
  + libpng-arm-free.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- version update to 1.6.37
  Fixed a use-after-free vulnerability (CVE-2019-7317) in png_image_free.
  Fixed a memory leak in the ARM NEON implementation of png_do_expand_palette.
  Fixed a memory leak in pngtest.c.
  Fixed two vulnerabilities (CVE-2018-14048, CVE-2018-14550) in
    contrib/pngminus; refactor.
  Changed the license of contrib/pngminus to MIT; refresh makefile and docs.
    (Contributed by Willem van Schaik)
  Added makefiles for AddressSanitizer-enabled builds.
- deleted patches
  - libpng-arm-free.patch (upstreamed)
- fixes [bsc#1121624] CVE-2019-6129 and [bsc#1124211] CVE-2019-7317</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- make check actually works under asan</changelog>
  <changelog author="l.lunak@centrum.cz" date="1615464000">- enable hardware optimizations (such as SSE)</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- install rpm macros in %{_rpmmacrodir} [bsc#1185661]
- call spec-cleaner</changelog>
  <changelog author="meissner@suse.com" date="1651665600">- switch source url to https</changelog>
  <changelog author="dmueller@suse.com" date="1663329600">- update to 1.6.38:
  * Added configurations and scripts for continuous integration.
  * Fixed various errors in the handling of tRNS, hIST and eXIf.
  * Implemented many stability improvements across all platforms.
  * Updated the internal documentation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1669377600">- Update to version 1.6.39:
  * cmake: Default to PNG_ARM_NEON=off for arm targets.
  + Turn large PNG chunks into benign errors.
  + Update, rename and clean up various scripts.
  + tools: Fix a buffer overflow involving a file name in pngfix.
  + tools: Fix a memory leak in pngcp.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- switch to pkgconfig(zlib) to allow alternative providers as well
- build with glibc hwcaps optimized libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252801">- Fix build: some*.la files are symlinks. Adjust spec to use
  find -type f,l</changelog>
  <changelog author="fcrozat@suse.com" date="1681992000">- Fix license tag to libpng-2.0.</changelog>
  <changelog author="pgajdos@suse.com" date="1684152000">- do not use NEON instructions [bsc#1211176]</changelog>
  <changelog author="mpluskal@suse.com" date="1687435200">- Update to version 1.6.40:
  * Fixed the eXIf chunk multiplicity checks.
  * Fixed a memory leak in pCAL processing.
  * Corrected the validity report about tRNS inside png_get_valid().
  * Fixed various build issues on *BSD, Mac and Windows.
  * Updated the configurations and the scripts for continuous integration.
  * Cleaned up the code, the build scripts, and the documentation.</changelog>
  <changelog author="pgajdos@suse.com" date="1764676800">- security update
- added patches
  CVE-2025-64505 [bsc#1254157], heap buffer over-read in `png_do_quantize` via malformed palette index
  * libpng16-CVE-2025-64505.patch
  CVE-2025-64506 [bsc#1254158], heap buffer over-read in `png_write_image_8bit` with 8-bit input and `convert_to_8bit` enabled
  * libpng16-CVE-2025-64506.patch
  CVE-2025-64720 [bsc#1254159], buffer overflow in `png_image_read_composite` via incorrect palette premultiplication
  * libpng16-CVE-2025-64720.patch
  CVE-2025-65018 [bsc#1254160], heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`
  * libpng16-CVE-2025-65018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1764936000">- security update
- added patches
  CVE-2025-66293 [bsc#1254480], LIBPNG out-of-bounds read in png_image_read_composite
  * libpng16-CVE-2025-66293-1.patch
  * libpng16-CVE-2025-66293-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1768478400">- security update
- added patches
  CVE-2026-22695 [bsc#1256525], Heap buffer over-read in png_image_finish_read
  * libpng16-CVE-2026-22695.patch
  CVE-2026-22801 [bsc#1256526], Integer truncation causing heap buffer over-read in png_image_write_*
  * libpng16-CVE-2026-22801.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1769601600">- security update
- added patches
  CVE-2025-28162 [bsc#1257364], memory leaks when running `pngimage`
  CVE-2025-28164 [bsc#1257365], memory leaks when running `pngimage`
  * libpng16-CVE-2025-28162,28164.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770897600">- added patches
  CVE-2026-25646: Heap buffer overflow vulnerability in png_set_dither/png_set_quantize (bsc#1258020)
  * libpng16-CVE-2026-25646.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1774958400">- added patches
  CVE-2026-33416: use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE` can lead to arbitrary code execution (bsc#1260754)
  * libpng16-CVE-2026-33416-1.patch
  * libpng16-CVE-2026-33416-2.patch
  * libpng16-CVE-2026-33416-3.patch
  * libpng16-CVE-2026-33416-4.patch
  CVE-2026-33636: out-of-bounds read/write in the palette expansion on ARM Neon can lead to information leak and crashes (bsc#1260755)
  * libpng16-CVE-2026-33636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776340800">- added patches
  CVE-2026-34757: Information disclosure and data corruption via use-after-free vulnerability [bsc#1261957]
  * libpng16-CVE-2026-34757.patch</changelog>
</package>
<package pkgid="723c42841be468b256a45ba21f96879214750b2f8c4ea198071c224e555f3933" name="libpng16-16" arch="x86_64">
  <version epoch="0" ver="1.6.40" rel="150600.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1517400000">- check with -j1</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- %{libname} package provides libpng = %{version} again
  [bsc#1079342]</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update:
  * CVE-2018-13785 [bsc#1100687]
    + libpng16-CVE-2018-13785.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546257600">- update to 1.6.36:
  Replaced the remaining uses of png_size_t with size_t (Cosmin)
    Fixed the calculation of row_factor in png_check_chunk_length
    (reported by Thuan Pham in SourceForge issue #278)
    Added missing parentheses to a macro definition
    (suggested by "irwir" in GitHub issue #216)
    Optimized png_do_expand_palette for ARM processors.
    Improved performance by around 10-22% on a recent ARM Chromebook.
    (Contributed by Richard Townsend, ARM Holdings)
    Fixed manipulation of machine-specific optimization options.
    (Contributed by Vicki Pfau)
    Used memcpy instead of manual pointer arithmetic on Intel SSE2.
    (Contributed by Samuel Williams)
    Fixed build errors with MSVC on ARM64.
    (Contributed by Zhijie Liang)
    Fixed detection of libm in CMakeLists.
    (Contributed by Cameron Cawley)
    Fixed incorrect creation of pkg-config file in CMakeLists.
    (Contributed by Kyle Bentley)
    Fixed the CMake build on Windows MSYS by avoiding symlinks.
    Fixed a build warning on OpenBSD.
    (Contributed by Theo Buehler)
    Fixed various typos in comments.
    (Contributed by "luz.paz")
    Raised the minimum required CMake version from 3.0.2 to 3.1.
    Removed yet more of the vestigial support for pre-ANSI C compilers.
    Removed ancient makefiles for ancient systems that have been broken
    across all previous libpng-1.6.x versions.
    Removed the Y2K compliance statement and the export control
    information.
    Applied various code style and documentation fixes.
- removed patches
  * libpng16-CVE-2018-13785.patch (upstreamed)
- cannot find upstream tarball signature, asked upstream for
  clarification</changelog>
  <changelog author="pgajdos@suse.com" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp</changelog>
  <changelog author="pgajdos@suse.com" date="1548676800">- fix arm build [bsc#1121829]
  + libpng-arm-free.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- version update to 1.6.37
  Fixed a use-after-free vulnerability (CVE-2019-7317) in png_image_free.
  Fixed a memory leak in the ARM NEON implementation of png_do_expand_palette.
  Fixed a memory leak in pngtest.c.
  Fixed two vulnerabilities (CVE-2018-14048, CVE-2018-14550) in
    contrib/pngminus; refactor.
  Changed the license of contrib/pngminus to MIT; refresh makefile and docs.
    (Contributed by Willem van Schaik)
  Added makefiles for AddressSanitizer-enabled builds.
- deleted patches
  - libpng-arm-free.patch (upstreamed)
- fixes [bsc#1121624] CVE-2019-6129 and [bsc#1124211] CVE-2019-7317</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- make check actually works under asan</changelog>
  <changelog author="l.lunak@centrum.cz" date="1615464000">- enable hardware optimizations (such as SSE)</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- install rpm macros in %{_rpmmacrodir} [bsc#1185661]
- call spec-cleaner</changelog>
  <changelog author="meissner@suse.com" date="1651665600">- switch source url to https</changelog>
  <changelog author="dmueller@suse.com" date="1663329600">- update to 1.6.38:
  * Added configurations and scripts for continuous integration.
  * Fixed various errors in the handling of tRNS, hIST and eXIf.
  * Implemented many stability improvements across all platforms.
  * Updated the internal documentation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1669377600">- Update to version 1.6.39:
  * cmake: Default to PNG_ARM_NEON=off for arm targets.
  + Turn large PNG chunks into benign errors.
  + Update, rename and clean up various scripts.
  + tools: Fix a buffer overflow involving a file name in pngfix.
  + tools: Fix a memory leak in pngcp.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- switch to pkgconfig(zlib) to allow alternative providers as well
- build with glibc hwcaps optimized libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252801">- Fix build: some*.la files are symlinks. Adjust spec to use
  find -type f,l</changelog>
  <changelog author="fcrozat@suse.com" date="1681992000">- Fix license tag to libpng-2.0.</changelog>
  <changelog author="pgajdos@suse.com" date="1684152000">- do not use NEON instructions [bsc#1211176]</changelog>
  <changelog author="mpluskal@suse.com" date="1687435200">- Update to version 1.6.40:
  * Fixed the eXIf chunk multiplicity checks.
  * Fixed a memory leak in pCAL processing.
  * Corrected the validity report about tRNS inside png_get_valid().
  * Fixed various build issues on *BSD, Mac and Windows.
  * Updated the configurations and the scripts for continuous integration.
  * Cleaned up the code, the build scripts, and the documentation.</changelog>
  <changelog author="pgajdos@suse.com" date="1764676800">- security update
- added patches
  CVE-2025-64505 [bsc#1254157], heap buffer over-read in `png_do_quantize` via malformed palette index
  * libpng16-CVE-2025-64505.patch
  CVE-2025-64506 [bsc#1254158], heap buffer over-read in `png_write_image_8bit` with 8-bit input and `convert_to_8bit` enabled
  * libpng16-CVE-2025-64506.patch
  CVE-2025-64720 [bsc#1254159], buffer overflow in `png_image_read_composite` via incorrect palette premultiplication
  * libpng16-CVE-2025-64720.patch
  CVE-2025-65018 [bsc#1254160], heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`
  * libpng16-CVE-2025-65018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1764936000">- security update
- added patches
  CVE-2025-66293 [bsc#1254480], LIBPNG out-of-bounds read in png_image_read_composite
  * libpng16-CVE-2025-66293-1.patch
  * libpng16-CVE-2025-66293-2.patch</changelog>
</package>
<package pkgid="614672b92ba76f56376505a9370e228e5d69c165d058a88bf817768c194d6024" name="libpng16-16" arch="x86_64">
  <version epoch="0" ver="1.6.40" rel="150600.3.6.1"/>
  <changelog author="pgajdos@suse.com" date="1517832000">- %{libname} package provides libpng = %{version} again
  [bsc#1079342]</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update:
  * CVE-2018-13785 [bsc#1100687]
    + libpng16-CVE-2018-13785.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546257600">- update to 1.6.36:
  Replaced the remaining uses of png_size_t with size_t (Cosmin)
    Fixed the calculation of row_factor in png_check_chunk_length
    (reported by Thuan Pham in SourceForge issue #278)
    Added missing parentheses to a macro definition
    (suggested by "irwir" in GitHub issue #216)
    Optimized png_do_expand_palette for ARM processors.
    Improved performance by around 10-22% on a recent ARM Chromebook.
    (Contributed by Richard Townsend, ARM Holdings)
    Fixed manipulation of machine-specific optimization options.
    (Contributed by Vicki Pfau)
    Used memcpy instead of manual pointer arithmetic on Intel SSE2.
    (Contributed by Samuel Williams)
    Fixed build errors with MSVC on ARM64.
    (Contributed by Zhijie Liang)
    Fixed detection of libm in CMakeLists.
    (Contributed by Cameron Cawley)
    Fixed incorrect creation of pkg-config file in CMakeLists.
    (Contributed by Kyle Bentley)
    Fixed the CMake build on Windows MSYS by avoiding symlinks.
    Fixed a build warning on OpenBSD.
    (Contributed by Theo Buehler)
    Fixed various typos in comments.
    (Contributed by "luz.paz")
    Raised the minimum required CMake version from 3.0.2 to 3.1.
    Removed yet more of the vestigial support for pre-ANSI C compilers.
    Removed ancient makefiles for ancient systems that have been broken
    across all previous libpng-1.6.x versions.
    Removed the Y2K compliance statement and the export control
    information.
    Applied various code style and documentation fixes.
- removed patches
  * libpng16-CVE-2018-13785.patch (upstreamed)
- cannot find upstream tarball signature, asked upstream for
  clarification</changelog>
  <changelog author="pgajdos@suse.com" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp</changelog>
  <changelog author="pgajdos@suse.com" date="1548676800">- fix arm build [bsc#1121829]
  + libpng-arm-free.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- version update to 1.6.37
  Fixed a use-after-free vulnerability (CVE-2019-7317) in png_image_free.
  Fixed a memory leak in the ARM NEON implementation of png_do_expand_palette.
  Fixed a memory leak in pngtest.c.
  Fixed two vulnerabilities (CVE-2018-14048, CVE-2018-14550) in
    contrib/pngminus; refactor.
  Changed the license of contrib/pngminus to MIT; refresh makefile and docs.
    (Contributed by Willem van Schaik)
  Added makefiles for AddressSanitizer-enabled builds.
- deleted patches
  - libpng-arm-free.patch (upstreamed)
- fixes [bsc#1121624] CVE-2019-6129 and [bsc#1124211] CVE-2019-7317</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- make check actually works under asan</changelog>
  <changelog author="l.lunak@centrum.cz" date="1615464000">- enable hardware optimizations (such as SSE)</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- install rpm macros in %{_rpmmacrodir} [bsc#1185661]
- call spec-cleaner</changelog>
  <changelog author="meissner@suse.com" date="1651665600">- switch source url to https</changelog>
  <changelog author="dmueller@suse.com" date="1663329600">- update to 1.6.38:
  * Added configurations and scripts for continuous integration.
  * Fixed various errors in the handling of tRNS, hIST and eXIf.
  * Implemented many stability improvements across all platforms.
  * Updated the internal documentation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1669377600">- Update to version 1.6.39:
  * cmake: Default to PNG_ARM_NEON=off for arm targets.
  + Turn large PNG chunks into benign errors.
  + Update, rename and clean up various scripts.
  + tools: Fix a buffer overflow involving a file name in pngfix.
  + tools: Fix a memory leak in pngcp.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- switch to pkgconfig(zlib) to allow alternative providers as well
- build with glibc hwcaps optimized libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252801">- Fix build: some*.la files are symlinks. Adjust spec to use
  find -type f,l</changelog>
  <changelog author="fcrozat@suse.com" date="1681992000">- Fix license tag to libpng-2.0.</changelog>
  <changelog author="pgajdos@suse.com" date="1684152000">- do not use NEON instructions [bsc#1211176]</changelog>
  <changelog author="mpluskal@suse.com" date="1687435200">- Update to version 1.6.40:
  * Fixed the eXIf chunk multiplicity checks.
  * Fixed a memory leak in pCAL processing.
  * Corrected the validity report about tRNS inside png_get_valid().
  * Fixed various build issues on *BSD, Mac and Windows.
  * Updated the configurations and the scripts for continuous integration.
  * Cleaned up the code, the build scripts, and the documentation.</changelog>
  <changelog author="pgajdos@suse.com" date="1764676800">- security update
- added patches
  CVE-2025-64505 [bsc#1254157], heap buffer over-read in `png_do_quantize` via malformed palette index
  * libpng16-CVE-2025-64505.patch
  CVE-2025-64506 [bsc#1254158], heap buffer over-read in `png_write_image_8bit` with 8-bit input and `convert_to_8bit` enabled
  * libpng16-CVE-2025-64506.patch
  CVE-2025-64720 [bsc#1254159], buffer overflow in `png_image_read_composite` via incorrect palette premultiplication
  * libpng16-CVE-2025-64720.patch
  CVE-2025-65018 [bsc#1254160], heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`
  * libpng16-CVE-2025-65018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1764936000">- security update
- added patches
  CVE-2025-66293 [bsc#1254480], LIBPNG out-of-bounds read in png_image_read_composite
  * libpng16-CVE-2025-66293-1.patch
  * libpng16-CVE-2025-66293-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1768478400">- security update
- added patches
  CVE-2026-22695 [bsc#1256525], Heap buffer over-read in png_image_finish_read
  * libpng16-CVE-2026-22695.patch
  CVE-2026-22801 [bsc#1256526], Integer truncation causing heap buffer over-read in png_image_write_*
  * libpng16-CVE-2026-22801.patch</changelog>
</package>
<package pkgid="b672f511e0d400a3853a9fc5be216c79017b8fc760a1cf0f771aa5b7ddf416e3" name="libpng16-16" arch="x86_64">
  <version epoch="0" ver="1.6.40" rel="150600.3.9.1"/>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update:
  * CVE-2018-13785 [bsc#1100687]
    + libpng16-CVE-2018-13785.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546257600">- update to 1.6.36:
  Replaced the remaining uses of png_size_t with size_t (Cosmin)
    Fixed the calculation of row_factor in png_check_chunk_length
    (reported by Thuan Pham in SourceForge issue #278)
    Added missing parentheses to a macro definition
    (suggested by "irwir" in GitHub issue #216)
    Optimized png_do_expand_palette for ARM processors.
    Improved performance by around 10-22% on a recent ARM Chromebook.
    (Contributed by Richard Townsend, ARM Holdings)
    Fixed manipulation of machine-specific optimization options.
    (Contributed by Vicki Pfau)
    Used memcpy instead of manual pointer arithmetic on Intel SSE2.
    (Contributed by Samuel Williams)
    Fixed build errors with MSVC on ARM64.
    (Contributed by Zhijie Liang)
    Fixed detection of libm in CMakeLists.
    (Contributed by Cameron Cawley)
    Fixed incorrect creation of pkg-config file in CMakeLists.
    (Contributed by Kyle Bentley)
    Fixed the CMake build on Windows MSYS by avoiding symlinks.
    Fixed a build warning on OpenBSD.
    (Contributed by Theo Buehler)
    Fixed various typos in comments.
    (Contributed by "luz.paz")
    Raised the minimum required CMake version from 3.0.2 to 3.1.
    Removed yet more of the vestigial support for pre-ANSI C compilers.
    Removed ancient makefiles for ancient systems that have been broken
    across all previous libpng-1.6.x versions.
    Removed the Y2K compliance statement and the export control
    information.
    Applied various code style and documentation fixes.
- removed patches
  * libpng16-CVE-2018-13785.patch (upstreamed)
- cannot find upstream tarball signature, asked upstream for
  clarification</changelog>
  <changelog author="pgajdos@suse.com" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp</changelog>
  <changelog author="pgajdos@suse.com" date="1548676800">- fix arm build [bsc#1121829]
  + libpng-arm-free.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- version update to 1.6.37
  Fixed a use-after-free vulnerability (CVE-2019-7317) in png_image_free.
  Fixed a memory leak in the ARM NEON implementation of png_do_expand_palette.
  Fixed a memory leak in pngtest.c.
  Fixed two vulnerabilities (CVE-2018-14048, CVE-2018-14550) in
    contrib/pngminus; refactor.
  Changed the license of contrib/pngminus to MIT; refresh makefile and docs.
    (Contributed by Willem van Schaik)
  Added makefiles for AddressSanitizer-enabled builds.
- deleted patches
  - libpng-arm-free.patch (upstreamed)
- fixes [bsc#1121624] CVE-2019-6129 and [bsc#1124211] CVE-2019-7317</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- make check actually works under asan</changelog>
  <changelog author="l.lunak@centrum.cz" date="1615464000">- enable hardware optimizations (such as SSE)</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- install rpm macros in %{_rpmmacrodir} [bsc#1185661]
- call spec-cleaner</changelog>
  <changelog author="meissner@suse.com" date="1651665600">- switch source url to https</changelog>
  <changelog author="dmueller@suse.com" date="1663329600">- update to 1.6.38:
  * Added configurations and scripts for continuous integration.
  * Fixed various errors in the handling of tRNS, hIST and eXIf.
  * Implemented many stability improvements across all platforms.
  * Updated the internal documentation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1669377600">- Update to version 1.6.39:
  * cmake: Default to PNG_ARM_NEON=off for arm targets.
  + Turn large PNG chunks into benign errors.
  + Update, rename and clean up various scripts.
  + tools: Fix a buffer overflow involving a file name in pngfix.
  + tools: Fix a memory leak in pngcp.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- switch to pkgconfig(zlib) to allow alternative providers as well
- build with glibc hwcaps optimized libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252801">- Fix build: some*.la files are symlinks. Adjust spec to use
  find -type f,l</changelog>
  <changelog author="fcrozat@suse.com" date="1681992000">- Fix license tag to libpng-2.0.</changelog>
  <changelog author="pgajdos@suse.com" date="1684152000">- do not use NEON instructions [bsc#1211176]</changelog>
  <changelog author="mpluskal@suse.com" date="1687435200">- Update to version 1.6.40:
  * Fixed the eXIf chunk multiplicity checks.
  * Fixed a memory leak in pCAL processing.
  * Corrected the validity report about tRNS inside png_get_valid().
  * Fixed various build issues on *BSD, Mac and Windows.
  * Updated the configurations and the scripts for continuous integration.
  * Cleaned up the code, the build scripts, and the documentation.</changelog>
  <changelog author="pgajdos@suse.com" date="1764676800">- security update
- added patches
  CVE-2025-64505 [bsc#1254157], heap buffer over-read in `png_do_quantize` via malformed palette index
  * libpng16-CVE-2025-64505.patch
  CVE-2025-64506 [bsc#1254158], heap buffer over-read in `png_write_image_8bit` with 8-bit input and `convert_to_8bit` enabled
  * libpng16-CVE-2025-64506.patch
  CVE-2025-64720 [bsc#1254159], buffer overflow in `png_image_read_composite` via incorrect palette premultiplication
  * libpng16-CVE-2025-64720.patch
  CVE-2025-65018 [bsc#1254160], heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`
  * libpng16-CVE-2025-65018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1764936000">- security update
- added patches
  CVE-2025-66293 [bsc#1254480], LIBPNG out-of-bounds read in png_image_read_composite
  * libpng16-CVE-2025-66293-1.patch
  * libpng16-CVE-2025-66293-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1768478400">- security update
- added patches
  CVE-2026-22695 [bsc#1256525], Heap buffer over-read in png_image_finish_read
  * libpng16-CVE-2026-22695.patch
  CVE-2026-22801 [bsc#1256526], Integer truncation causing heap buffer over-read in png_image_write_*
  * libpng16-CVE-2026-22801.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1769601600">- security update
- added patches
  CVE-2025-28162 [bsc#1257364], memory leaks when running `pngimage`
  CVE-2025-28164 [bsc#1257365], memory leaks when running `pngimage`
  * libpng16-CVE-2025-28162,28164.patch</changelog>
</package>
<package pkgid="e1a35dcbf7ec77c88585d0952a07a9001fcb2325ab3f71b697cfc8d6a65f4640" name="libpng16-16-32bit" arch="x86_64">
  <version epoch="0" ver="1.6.40" rel="150600.3.12.1"/>
  <changelog author="pgajdos@suse.com" date="1546257600">- update to 1.6.36:
  Replaced the remaining uses of png_size_t with size_t (Cosmin)
    Fixed the calculation of row_factor in png_check_chunk_length
    (reported by Thuan Pham in SourceForge issue #278)
    Added missing parentheses to a macro definition
    (suggested by "irwir" in GitHub issue #216)
    Optimized png_do_expand_palette for ARM processors.
    Improved performance by around 10-22% on a recent ARM Chromebook.
    (Contributed by Richard Townsend, ARM Holdings)
    Fixed manipulation of machine-specific optimization options.
    (Contributed by Vicki Pfau)
    Used memcpy instead of manual pointer arithmetic on Intel SSE2.
    (Contributed by Samuel Williams)
    Fixed build errors with MSVC on ARM64.
    (Contributed by Zhijie Liang)
    Fixed detection of libm in CMakeLists.
    (Contributed by Cameron Cawley)
    Fixed incorrect creation of pkg-config file in CMakeLists.
    (Contributed by Kyle Bentley)
    Fixed the CMake build on Windows MSYS by avoiding symlinks.
    Fixed a build warning on OpenBSD.
    (Contributed by Theo Buehler)
    Fixed various typos in comments.
    (Contributed by "luz.paz")
    Raised the minimum required CMake version from 3.0.2 to 3.1.
    Removed yet more of the vestigial support for pre-ANSI C compilers.
    Removed ancient makefiles for ancient systems that have been broken
    across all previous libpng-1.6.x versions.
    Removed the Y2K compliance statement and the export control
    information.
    Applied various code style and documentation fixes.
- removed patches
  * libpng16-CVE-2018-13785.patch (upstreamed)
- cannot find upstream tarball signature, asked upstream for
  clarification</changelog>
  <changelog author="pgajdos@suse.com" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp</changelog>
  <changelog author="pgajdos@suse.com" date="1548676800">- fix arm build [bsc#1121829]
  + libpng-arm-free.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- version update to 1.6.37
  Fixed a use-after-free vulnerability (CVE-2019-7317) in png_image_free.
  Fixed a memory leak in the ARM NEON implementation of png_do_expand_palette.
  Fixed a memory leak in pngtest.c.
  Fixed two vulnerabilities (CVE-2018-14048, CVE-2018-14550) in
    contrib/pngminus; refactor.
  Changed the license of contrib/pngminus to MIT; refresh makefile and docs.
    (Contributed by Willem van Schaik)
  Added makefiles for AddressSanitizer-enabled builds.
- deleted patches
  - libpng-arm-free.patch (upstreamed)
- fixes [bsc#1121624] CVE-2019-6129 and [bsc#1124211] CVE-2019-7317</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- make check actually works under asan</changelog>
  <changelog author="l.lunak@centrum.cz" date="1615464000">- enable hardware optimizations (such as SSE)</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- install rpm macros in %{_rpmmacrodir} [bsc#1185661]
- call spec-cleaner</changelog>
  <changelog author="meissner@suse.com" date="1651665600">- switch source url to https</changelog>
  <changelog author="dmueller@suse.com" date="1663329600">- update to 1.6.38:
  * Added configurations and scripts for continuous integration.
  * Fixed various errors in the handling of tRNS, hIST and eXIf.
  * Implemented many stability improvements across all platforms.
  * Updated the internal documentation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1669377600">- Update to version 1.6.39:
  * cmake: Default to PNG_ARM_NEON=off for arm targets.
  + Turn large PNG chunks into benign errors.
  + Update, rename and clean up various scripts.
  + tools: Fix a buffer overflow involving a file name in pngfix.
  + tools: Fix a memory leak in pngcp.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- switch to pkgconfig(zlib) to allow alternative providers as well
- build with glibc hwcaps optimized libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252801">- Fix build: some*.la files are symlinks. Adjust spec to use
  find -type f,l</changelog>
  <changelog author="fcrozat@suse.com" date="1681992000">- Fix license tag to libpng-2.0.</changelog>
  <changelog author="pgajdos@suse.com" date="1684152000">- do not use NEON instructions [bsc#1211176]</changelog>
  <changelog author="mpluskal@suse.com" date="1687435200">- Update to version 1.6.40:
  * Fixed the eXIf chunk multiplicity checks.
  * Fixed a memory leak in pCAL processing.
  * Corrected the validity report about tRNS inside png_get_valid().
  * Fixed various build issues on *BSD, Mac and Windows.
  * Updated the configurations and the scripts for continuous integration.
  * Cleaned up the code, the build scripts, and the documentation.</changelog>
  <changelog author="pgajdos@suse.com" date="1764676800">- security update
- added patches
  CVE-2025-64505 [bsc#1254157], heap buffer over-read in `png_do_quantize` via malformed palette index
  * libpng16-CVE-2025-64505.patch
  CVE-2025-64506 [bsc#1254158], heap buffer over-read in `png_write_image_8bit` with 8-bit input and `convert_to_8bit` enabled
  * libpng16-CVE-2025-64506.patch
  CVE-2025-64720 [bsc#1254159], buffer overflow in `png_image_read_composite` via incorrect palette premultiplication
  * libpng16-CVE-2025-64720.patch
  CVE-2025-65018 [bsc#1254160], heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`
  * libpng16-CVE-2025-65018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1764936000">- security update
- added patches
  CVE-2025-66293 [bsc#1254480], LIBPNG out-of-bounds read in png_image_read_composite
  * libpng16-CVE-2025-66293-1.patch
  * libpng16-CVE-2025-66293-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1768478400">- security update
- added patches
  CVE-2026-22695 [bsc#1256525], Heap buffer over-read in png_image_finish_read
  * libpng16-CVE-2026-22695.patch
  CVE-2026-22801 [bsc#1256526], Integer truncation causing heap buffer over-read in png_image_write_*
  * libpng16-CVE-2026-22801.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1769601600">- security update
- added patches
  CVE-2025-28162 [bsc#1257364], memory leaks when running `pngimage`
  CVE-2025-28164 [bsc#1257365], memory leaks when running `pngimage`
  * libpng16-CVE-2025-28162,28164.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770897600">- added patches
  CVE-2026-25646: Heap buffer overflow vulnerability in png_set_dither/png_set_quantize (bsc#1258020)
  * libpng16-CVE-2026-25646.patch</changelog>
</package>
<package pkgid="db42759ab55697a88db6097f2d377342ed1d05722c2fbac880936747781604ab" name="libpng16-16-32bit" arch="x86_64">
  <version epoch="0" ver="1.6.40" rel="150600.3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp</changelog>
  <changelog author="pgajdos@suse.com" date="1548676800">- fix arm build [bsc#1121829]
  + libpng-arm-free.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- version update to 1.6.37
  Fixed a use-after-free vulnerability (CVE-2019-7317) in png_image_free.
  Fixed a memory leak in the ARM NEON implementation of png_do_expand_palette.
  Fixed a memory leak in pngtest.c.
  Fixed two vulnerabilities (CVE-2018-14048, CVE-2018-14550) in
    contrib/pngminus; refactor.
  Changed the license of contrib/pngminus to MIT; refresh makefile and docs.
    (Contributed by Willem van Schaik)
  Added makefiles for AddressSanitizer-enabled builds.
- deleted patches
  - libpng-arm-free.patch (upstreamed)
- fixes [bsc#1121624] CVE-2019-6129 and [bsc#1124211] CVE-2019-7317</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- make check actually works under asan</changelog>
  <changelog author="l.lunak@centrum.cz" date="1615464000">- enable hardware optimizations (such as SSE)</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- install rpm macros in %{_rpmmacrodir} [bsc#1185661]
- call spec-cleaner</changelog>
  <changelog author="meissner@suse.com" date="1651665600">- switch source url to https</changelog>
  <changelog author="dmueller@suse.com" date="1663329600">- update to 1.6.38:
  * Added configurations and scripts for continuous integration.
  * Fixed various errors in the handling of tRNS, hIST and eXIf.
  * Implemented many stability improvements across all platforms.
  * Updated the internal documentation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1669377600">- Update to version 1.6.39:
  * cmake: Default to PNG_ARM_NEON=off for arm targets.
  + Turn large PNG chunks into benign errors.
  + Update, rename and clean up various scripts.
  + tools: Fix a buffer overflow involving a file name in pngfix.
  + tools: Fix a memory leak in pngcp.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- switch to pkgconfig(zlib) to allow alternative providers as well
- build with glibc hwcaps optimized libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252801">- Fix build: some*.la files are symlinks. Adjust spec to use
  find -type f,l</changelog>
  <changelog author="fcrozat@suse.com" date="1681992000">- Fix license tag to libpng-2.0.</changelog>
  <changelog author="pgajdos@suse.com" date="1684152000">- do not use NEON instructions [bsc#1211176]</changelog>
  <changelog author="mpluskal@suse.com" date="1687435200">- Update to version 1.6.40:
  * Fixed the eXIf chunk multiplicity checks.
  * Fixed a memory leak in pCAL processing.
  * Corrected the validity report about tRNS inside png_get_valid().
  * Fixed various build issues on *BSD, Mac and Windows.
  * Updated the configurations and the scripts for continuous integration.
  * Cleaned up the code, the build scripts, and the documentation.</changelog>
  <changelog author="pgajdos@suse.com" date="1764676800">- security update
- added patches
  CVE-2025-64505 [bsc#1254157], heap buffer over-read in `png_do_quantize` via malformed palette index
  * libpng16-CVE-2025-64505.patch
  CVE-2025-64506 [bsc#1254158], heap buffer over-read in `png_write_image_8bit` with 8-bit input and `convert_to_8bit` enabled
  * libpng16-CVE-2025-64506.patch
  CVE-2025-64720 [bsc#1254159], buffer overflow in `png_image_read_composite` via incorrect palette premultiplication
  * libpng16-CVE-2025-64720.patch
  CVE-2025-65018 [bsc#1254160], heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`
  * libpng16-CVE-2025-65018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1764936000">- security update
- added patches
  CVE-2025-66293 [bsc#1254480], LIBPNG out-of-bounds read in png_image_read_composite
  * libpng16-CVE-2025-66293-1.patch
  * libpng16-CVE-2025-66293-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1768478400">- security update
- added patches
  CVE-2026-22695 [bsc#1256525], Heap buffer over-read in png_image_finish_read
  * libpng16-CVE-2026-22695.patch
  CVE-2026-22801 [bsc#1256526], Integer truncation causing heap buffer over-read in png_image_write_*
  * libpng16-CVE-2026-22801.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1769601600">- security update
- added patches
  CVE-2025-28162 [bsc#1257364], memory leaks when running `pngimage`
  CVE-2025-28164 [bsc#1257365], memory leaks when running `pngimage`
  * libpng16-CVE-2025-28162,28164.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770897600">- added patches
  CVE-2026-25646: Heap buffer overflow vulnerability in png_set_dither/png_set_quantize (bsc#1258020)
  * libpng16-CVE-2026-25646.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1774958400">- added patches
  CVE-2026-33416: use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE` can lead to arbitrary code execution (bsc#1260754)
  * libpng16-CVE-2026-33416-1.patch
  * libpng16-CVE-2026-33416-2.patch
  * libpng16-CVE-2026-33416-3.patch
  * libpng16-CVE-2026-33416-4.patch
  CVE-2026-33636: out-of-bounds read/write in the palette expansion on ARM Neon can lead to information leak and crashes (bsc#1260755)
  * libpng16-CVE-2026-33636.patch</changelog>
</package>
<package pkgid="b2a778da004a44492bafab568be44a229eadd2573de71a107e1b8600be31c762" name="libpng16-16-32bit" arch="x86_64">
  <version epoch="0" ver="1.6.40" rel="150600.3.20.1"/>
  <changelog author="pgajdos@suse.com" date="1548676800">- fix arm build [bsc#1121829]
  + libpng-arm-free.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- version update to 1.6.37
  Fixed a use-after-free vulnerability (CVE-2019-7317) in png_image_free.
  Fixed a memory leak in the ARM NEON implementation of png_do_expand_palette.
  Fixed a memory leak in pngtest.c.
  Fixed two vulnerabilities (CVE-2018-14048, CVE-2018-14550) in
    contrib/pngminus; refactor.
  Changed the license of contrib/pngminus to MIT; refresh makefile and docs.
    (Contributed by Willem van Schaik)
  Added makefiles for AddressSanitizer-enabled builds.
- deleted patches
  - libpng-arm-free.patch (upstreamed)
- fixes [bsc#1121624] CVE-2019-6129 and [bsc#1124211] CVE-2019-7317</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- make check actually works under asan</changelog>
  <changelog author="l.lunak@centrum.cz" date="1615464000">- enable hardware optimizations (such as SSE)</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- install rpm macros in %{_rpmmacrodir} [bsc#1185661]
- call spec-cleaner</changelog>
  <changelog author="meissner@suse.com" date="1651665600">- switch source url to https</changelog>
  <changelog author="dmueller@suse.com" date="1663329600">- update to 1.6.38:
  * Added configurations and scripts for continuous integration.
  * Fixed various errors in the handling of tRNS, hIST and eXIf.
  * Implemented many stability improvements across all platforms.
  * Updated the internal documentation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1669377600">- Update to version 1.6.39:
  * cmake: Default to PNG_ARM_NEON=off for arm targets.
  + Turn large PNG chunks into benign errors.
  + Update, rename and clean up various scripts.
  + tools: Fix a buffer overflow involving a file name in pngfix.
  + tools: Fix a memory leak in pngcp.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- switch to pkgconfig(zlib) to allow alternative providers as well
- build with glibc hwcaps optimized libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252801">- Fix build: some*.la files are symlinks. Adjust spec to use
  find -type f,l</changelog>
  <changelog author="fcrozat@suse.com" date="1681992000">- Fix license tag to libpng-2.0.</changelog>
  <changelog author="pgajdos@suse.com" date="1684152000">- do not use NEON instructions [bsc#1211176]</changelog>
  <changelog author="mpluskal@suse.com" date="1687435200">- Update to version 1.6.40:
  * Fixed the eXIf chunk multiplicity checks.
  * Fixed a memory leak in pCAL processing.
  * Corrected the validity report about tRNS inside png_get_valid().
  * Fixed various build issues on *BSD, Mac and Windows.
  * Updated the configurations and the scripts for continuous integration.
  * Cleaned up the code, the build scripts, and the documentation.</changelog>
  <changelog author="pgajdos@suse.com" date="1764676800">- security update
- added patches
  CVE-2025-64505 [bsc#1254157], heap buffer over-read in `png_do_quantize` via malformed palette index
  * libpng16-CVE-2025-64505.patch
  CVE-2025-64506 [bsc#1254158], heap buffer over-read in `png_write_image_8bit` with 8-bit input and `convert_to_8bit` enabled
  * libpng16-CVE-2025-64506.patch
  CVE-2025-64720 [bsc#1254159], buffer overflow in `png_image_read_composite` via incorrect palette premultiplication
  * libpng16-CVE-2025-64720.patch
  CVE-2025-65018 [bsc#1254160], heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`
  * libpng16-CVE-2025-65018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1764936000">- security update
- added patches
  CVE-2025-66293 [bsc#1254480], LIBPNG out-of-bounds read in png_image_read_composite
  * libpng16-CVE-2025-66293-1.patch
  * libpng16-CVE-2025-66293-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1768478400">- security update
- added patches
  CVE-2026-22695 [bsc#1256525], Heap buffer over-read in png_image_finish_read
  * libpng16-CVE-2026-22695.patch
  CVE-2026-22801 [bsc#1256526], Integer truncation causing heap buffer over-read in png_image_write_*
  * libpng16-CVE-2026-22801.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1769601600">- security update
- added patches
  CVE-2025-28162 [bsc#1257364], memory leaks when running `pngimage`
  CVE-2025-28164 [bsc#1257365], memory leaks when running `pngimage`
  * libpng16-CVE-2025-28162,28164.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770897600">- added patches
  CVE-2026-25646: Heap buffer overflow vulnerability in png_set_dither/png_set_quantize (bsc#1258020)
  * libpng16-CVE-2026-25646.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1774958400">- added patches
  CVE-2026-33416: use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE` can lead to arbitrary code execution (bsc#1260754)
  * libpng16-CVE-2026-33416-1.patch
  * libpng16-CVE-2026-33416-2.patch
  * libpng16-CVE-2026-33416-3.patch
  * libpng16-CVE-2026-33416-4.patch
  CVE-2026-33636: out-of-bounds read/write in the palette expansion on ARM Neon can lead to information leak and crashes (bsc#1260755)
  * libpng16-CVE-2026-33636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776340800">- added patches
  CVE-2026-34757: Information disclosure and data corruption via use-after-free vulnerability [bsc#1261957]
  * libpng16-CVE-2026-34757.patch</changelog>
</package>
<package pkgid="23c342070943378c9f0d0794bc84d56d17815965b2e0f2910c32c80047bfd27c" name="libpng16-16-32bit" arch="x86_64">
  <version epoch="0" ver="1.6.40" rel="150600.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1517400000">- check with -j1</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- %{libname} package provides libpng = %{version} again
  [bsc#1079342]</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update:
  * CVE-2018-13785 [bsc#1100687]
    + libpng16-CVE-2018-13785.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546257600">- update to 1.6.36:
  Replaced the remaining uses of png_size_t with size_t (Cosmin)
    Fixed the calculation of row_factor in png_check_chunk_length
    (reported by Thuan Pham in SourceForge issue #278)
    Added missing parentheses to a macro definition
    (suggested by "irwir" in GitHub issue #216)
    Optimized png_do_expand_palette for ARM processors.
    Improved performance by around 10-22% on a recent ARM Chromebook.
    (Contributed by Richard Townsend, ARM Holdings)
    Fixed manipulation of machine-specific optimization options.
    (Contributed by Vicki Pfau)
    Used memcpy instead of manual pointer arithmetic on Intel SSE2.
    (Contributed by Samuel Williams)
    Fixed build errors with MSVC on ARM64.
    (Contributed by Zhijie Liang)
    Fixed detection of libm in CMakeLists.
    (Contributed by Cameron Cawley)
    Fixed incorrect creation of pkg-config file in CMakeLists.
    (Contributed by Kyle Bentley)
    Fixed the CMake build on Windows MSYS by avoiding symlinks.
    Fixed a build warning on OpenBSD.
    (Contributed by Theo Buehler)
    Fixed various typos in comments.
    (Contributed by "luz.paz")
    Raised the minimum required CMake version from 3.0.2 to 3.1.
    Removed yet more of the vestigial support for pre-ANSI C compilers.
    Removed ancient makefiles for ancient systems that have been broken
    across all previous libpng-1.6.x versions.
    Removed the Y2K compliance statement and the export control
    information.
    Applied various code style and documentation fixes.
- removed patches
  * libpng16-CVE-2018-13785.patch (upstreamed)
- cannot find upstream tarball signature, asked upstream for
  clarification</changelog>
  <changelog author="pgajdos@suse.com" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp</changelog>
  <changelog author="pgajdos@suse.com" date="1548676800">- fix arm build [bsc#1121829]
  + libpng-arm-free.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- version update to 1.6.37
  Fixed a use-after-free vulnerability (CVE-2019-7317) in png_image_free.
  Fixed a memory leak in the ARM NEON implementation of png_do_expand_palette.
  Fixed a memory leak in pngtest.c.
  Fixed two vulnerabilities (CVE-2018-14048, CVE-2018-14550) in
    contrib/pngminus; refactor.
  Changed the license of contrib/pngminus to MIT; refresh makefile and docs.
    (Contributed by Willem van Schaik)
  Added makefiles for AddressSanitizer-enabled builds.
- deleted patches
  - libpng-arm-free.patch (upstreamed)
- fixes [bsc#1121624] CVE-2019-6129 and [bsc#1124211] CVE-2019-7317</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- make check actually works under asan</changelog>
  <changelog author="l.lunak@centrum.cz" date="1615464000">- enable hardware optimizations (such as SSE)</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- install rpm macros in %{_rpmmacrodir} [bsc#1185661]
- call spec-cleaner</changelog>
  <changelog author="meissner@suse.com" date="1651665600">- switch source url to https</changelog>
  <changelog author="dmueller@suse.com" date="1663329600">- update to 1.6.38:
  * Added configurations and scripts for continuous integration.
  * Fixed various errors in the handling of tRNS, hIST and eXIf.
  * Implemented many stability improvements across all platforms.
  * Updated the internal documentation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1669377600">- Update to version 1.6.39:
  * cmake: Default to PNG_ARM_NEON=off for arm targets.
  + Turn large PNG chunks into benign errors.
  + Update, rename and clean up various scripts.
  + tools: Fix a buffer overflow involving a file name in pngfix.
  + tools: Fix a memory leak in pngcp.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- switch to pkgconfig(zlib) to allow alternative providers as well
- build with glibc hwcaps optimized libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252801">- Fix build: some*.la files are symlinks. Adjust spec to use
  find -type f,l</changelog>
  <changelog author="fcrozat@suse.com" date="1681992000">- Fix license tag to libpng-2.0.</changelog>
  <changelog author="pgajdos@suse.com" date="1684152000">- do not use NEON instructions [bsc#1211176]</changelog>
  <changelog author="mpluskal@suse.com" date="1687435200">- Update to version 1.6.40:
  * Fixed the eXIf chunk multiplicity checks.
  * Fixed a memory leak in pCAL processing.
  * Corrected the validity report about tRNS inside png_get_valid().
  * Fixed various build issues on *BSD, Mac and Windows.
  * Updated the configurations and the scripts for continuous integration.
  * Cleaned up the code, the build scripts, and the documentation.</changelog>
  <changelog author="pgajdos@suse.com" date="1764676800">- security update
- added patches
  CVE-2025-64505 [bsc#1254157], heap buffer over-read in `png_do_quantize` via malformed palette index
  * libpng16-CVE-2025-64505.patch
  CVE-2025-64506 [bsc#1254158], heap buffer over-read in `png_write_image_8bit` with 8-bit input and `convert_to_8bit` enabled
  * libpng16-CVE-2025-64506.patch
  CVE-2025-64720 [bsc#1254159], buffer overflow in `png_image_read_composite` via incorrect palette premultiplication
  * libpng16-CVE-2025-64720.patch
  CVE-2025-65018 [bsc#1254160], heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`
  * libpng16-CVE-2025-65018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1764936000">- security update
- added patches
  CVE-2025-66293 [bsc#1254480], LIBPNG out-of-bounds read in png_image_read_composite
  * libpng16-CVE-2025-66293-1.patch
  * libpng16-CVE-2025-66293-2.patch</changelog>
</package>
<package pkgid="f9c0f13e410f4e31595eb625fe5098c52a7ebcdcc9b410052ebd31058764c12f" name="libpng16-16-32bit" arch="x86_64">
  <version epoch="0" ver="1.6.40" rel="150600.3.6.1"/>
  <changelog author="pgajdos@suse.com" date="1517832000">- %{libname} package provides libpng = %{version} again
  [bsc#1079342]</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update:
  * CVE-2018-13785 [bsc#1100687]
    + libpng16-CVE-2018-13785.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546257600">- update to 1.6.36:
  Replaced the remaining uses of png_size_t with size_t (Cosmin)
    Fixed the calculation of row_factor in png_check_chunk_length
    (reported by Thuan Pham in SourceForge issue #278)
    Added missing parentheses to a macro definition
    (suggested by "irwir" in GitHub issue #216)
    Optimized png_do_expand_palette for ARM processors.
    Improved performance by around 10-22% on a recent ARM Chromebook.
    (Contributed by Richard Townsend, ARM Holdings)
    Fixed manipulation of machine-specific optimization options.
    (Contributed by Vicki Pfau)
    Used memcpy instead of manual pointer arithmetic on Intel SSE2.
    (Contributed by Samuel Williams)
    Fixed build errors with MSVC on ARM64.
    (Contributed by Zhijie Liang)
    Fixed detection of libm in CMakeLists.
    (Contributed by Cameron Cawley)
    Fixed incorrect creation of pkg-config file in CMakeLists.
    (Contributed by Kyle Bentley)
    Fixed the CMake build on Windows MSYS by avoiding symlinks.
    Fixed a build warning on OpenBSD.
    (Contributed by Theo Buehler)
    Fixed various typos in comments.
    (Contributed by "luz.paz")
    Raised the minimum required CMake version from 3.0.2 to 3.1.
    Removed yet more of the vestigial support for pre-ANSI C compilers.
    Removed ancient makefiles for ancient systems that have been broken
    across all previous libpng-1.6.x versions.
    Removed the Y2K compliance statement and the export control
    information.
    Applied various code style and documentation fixes.
- removed patches
  * libpng16-CVE-2018-13785.patch (upstreamed)
- cannot find upstream tarball signature, asked upstream for
  clarification</changelog>
  <changelog author="pgajdos@suse.com" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp</changelog>
  <changelog author="pgajdos@suse.com" date="1548676800">- fix arm build [bsc#1121829]
  + libpng-arm-free.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- version update to 1.6.37
  Fixed a use-after-free vulnerability (CVE-2019-7317) in png_image_free.
  Fixed a memory leak in the ARM NEON implementation of png_do_expand_palette.
  Fixed a memory leak in pngtest.c.
  Fixed two vulnerabilities (CVE-2018-14048, CVE-2018-14550) in
    contrib/pngminus; refactor.
  Changed the license of contrib/pngminus to MIT; refresh makefile and docs.
    (Contributed by Willem van Schaik)
  Added makefiles for AddressSanitizer-enabled builds.
- deleted patches
  - libpng-arm-free.patch (upstreamed)
- fixes [bsc#1121624] CVE-2019-6129 and [bsc#1124211] CVE-2019-7317</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- make check actually works under asan</changelog>
  <changelog author="l.lunak@centrum.cz" date="1615464000">- enable hardware optimizations (such as SSE)</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- install rpm macros in %{_rpmmacrodir} [bsc#1185661]
- call spec-cleaner</changelog>
  <changelog author="meissner@suse.com" date="1651665600">- switch source url to https</changelog>
  <changelog author="dmueller@suse.com" date="1663329600">- update to 1.6.38:
  * Added configurations and scripts for continuous integration.
  * Fixed various errors in the handling of tRNS, hIST and eXIf.
  * Implemented many stability improvements across all platforms.
  * Updated the internal documentation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1669377600">- Update to version 1.6.39:
  * cmake: Default to PNG_ARM_NEON=off for arm targets.
  + Turn large PNG chunks into benign errors.
  + Update, rename and clean up various scripts.
  + tools: Fix a buffer overflow involving a file name in pngfix.
  + tools: Fix a memory leak in pngcp.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- switch to pkgconfig(zlib) to allow alternative providers as well
- build with glibc hwcaps optimized libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252801">- Fix build: some*.la files are symlinks. Adjust spec to use
  find -type f,l</changelog>
  <changelog author="fcrozat@suse.com" date="1681992000">- Fix license tag to libpng-2.0.</changelog>
  <changelog author="pgajdos@suse.com" date="1684152000">- do not use NEON instructions [bsc#1211176]</changelog>
  <changelog author="mpluskal@suse.com" date="1687435200">- Update to version 1.6.40:
  * Fixed the eXIf chunk multiplicity checks.
  * Fixed a memory leak in pCAL processing.
  * Corrected the validity report about tRNS inside png_get_valid().
  * Fixed various build issues on *BSD, Mac and Windows.
  * Updated the configurations and the scripts for continuous integration.
  * Cleaned up the code, the build scripts, and the documentation.</changelog>
  <changelog author="pgajdos@suse.com" date="1764676800">- security update
- added patches
  CVE-2025-64505 [bsc#1254157], heap buffer over-read in `png_do_quantize` via malformed palette index
  * libpng16-CVE-2025-64505.patch
  CVE-2025-64506 [bsc#1254158], heap buffer over-read in `png_write_image_8bit` with 8-bit input and `convert_to_8bit` enabled
  * libpng16-CVE-2025-64506.patch
  CVE-2025-64720 [bsc#1254159], buffer overflow in `png_image_read_composite` via incorrect palette premultiplication
  * libpng16-CVE-2025-64720.patch
  CVE-2025-65018 [bsc#1254160], heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`
  * libpng16-CVE-2025-65018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1764936000">- security update
- added patches
  CVE-2025-66293 [bsc#1254480], LIBPNG out-of-bounds read in png_image_read_composite
  * libpng16-CVE-2025-66293-1.patch
  * libpng16-CVE-2025-66293-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1768478400">- security update
- added patches
  CVE-2026-22695 [bsc#1256525], Heap buffer over-read in png_image_finish_read
  * libpng16-CVE-2026-22695.patch
  CVE-2026-22801 [bsc#1256526], Integer truncation causing heap buffer over-read in png_image_write_*
  * libpng16-CVE-2026-22801.patch</changelog>
</package>
<package pkgid="f8de859f8a5eb63da3aa1b15d392cfda68726762ba1890afc7d09af0784d5665" name="libpng16-16-32bit" arch="x86_64">
  <version epoch="0" ver="1.6.40" rel="150600.3.9.1"/>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update:
  * CVE-2018-13785 [bsc#1100687]
    + libpng16-CVE-2018-13785.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546257600">- update to 1.6.36:
  Replaced the remaining uses of png_size_t with size_t (Cosmin)
    Fixed the calculation of row_factor in png_check_chunk_length
    (reported by Thuan Pham in SourceForge issue #278)
    Added missing parentheses to a macro definition
    (suggested by "irwir" in GitHub issue #216)
    Optimized png_do_expand_palette for ARM processors.
    Improved performance by around 10-22% on a recent ARM Chromebook.
    (Contributed by Richard Townsend, ARM Holdings)
    Fixed manipulation of machine-specific optimization options.
    (Contributed by Vicki Pfau)
    Used memcpy instead of manual pointer arithmetic on Intel SSE2.
    (Contributed by Samuel Williams)
    Fixed build errors with MSVC on ARM64.
    (Contributed by Zhijie Liang)
    Fixed detection of libm in CMakeLists.
    (Contributed by Cameron Cawley)
    Fixed incorrect creation of pkg-config file in CMakeLists.
    (Contributed by Kyle Bentley)
    Fixed the CMake build on Windows MSYS by avoiding symlinks.
    Fixed a build warning on OpenBSD.
    (Contributed by Theo Buehler)
    Fixed various typos in comments.
    (Contributed by "luz.paz")
    Raised the minimum required CMake version from 3.0.2 to 3.1.
    Removed yet more of the vestigial support for pre-ANSI C compilers.
    Removed ancient makefiles for ancient systems that have been broken
    across all previous libpng-1.6.x versions.
    Removed the Y2K compliance statement and the export control
    information.
    Applied various code style and documentation fixes.
- removed patches
  * libpng16-CVE-2018-13785.patch (upstreamed)
- cannot find upstream tarball signature, asked upstream for
  clarification</changelog>
  <changelog author="pgajdos@suse.com" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp</changelog>
  <changelog author="pgajdos@suse.com" date="1548676800">- fix arm build [bsc#1121829]
  + libpng-arm-free.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- version update to 1.6.37
  Fixed a use-after-free vulnerability (CVE-2019-7317) in png_image_free.
  Fixed a memory leak in the ARM NEON implementation of png_do_expand_palette.
  Fixed a memory leak in pngtest.c.
  Fixed two vulnerabilities (CVE-2018-14048, CVE-2018-14550) in
    contrib/pngminus; refactor.
  Changed the license of contrib/pngminus to MIT; refresh makefile and docs.
    (Contributed by Willem van Schaik)
  Added makefiles for AddressSanitizer-enabled builds.
- deleted patches
  - libpng-arm-free.patch (upstreamed)
- fixes [bsc#1121624] CVE-2019-6129 and [bsc#1124211] CVE-2019-7317</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- make check actually works under asan</changelog>
  <changelog author="l.lunak@centrum.cz" date="1615464000">- enable hardware optimizations (such as SSE)</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- install rpm macros in %{_rpmmacrodir} [bsc#1185661]
- call spec-cleaner</changelog>
  <changelog author="meissner@suse.com" date="1651665600">- switch source url to https</changelog>
  <changelog author="dmueller@suse.com" date="1663329600">- update to 1.6.38:
  * Added configurations and scripts for continuous integration.
  * Fixed various errors in the handling of tRNS, hIST and eXIf.
  * Implemented many stability improvements across all platforms.
  * Updated the internal documentation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1669377600">- Update to version 1.6.39:
  * cmake: Default to PNG_ARM_NEON=off for arm targets.
  + Turn large PNG chunks into benign errors.
  + Update, rename and clean up various scripts.
  + tools: Fix a buffer overflow involving a file name in pngfix.
  + tools: Fix a memory leak in pngcp.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- switch to pkgconfig(zlib) to allow alternative providers as well
- build with glibc hwcaps optimized libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252801">- Fix build: some*.la files are symlinks. Adjust spec to use
  find -type f,l</changelog>
  <changelog author="fcrozat@suse.com" date="1681992000">- Fix license tag to libpng-2.0.</changelog>
  <changelog author="pgajdos@suse.com" date="1684152000">- do not use NEON instructions [bsc#1211176]</changelog>
  <changelog author="mpluskal@suse.com" date="1687435200">- Update to version 1.6.40:
  * Fixed the eXIf chunk multiplicity checks.
  * Fixed a memory leak in pCAL processing.
  * Corrected the validity report about tRNS inside png_get_valid().
  * Fixed various build issues on *BSD, Mac and Windows.
  * Updated the configurations and the scripts for continuous integration.
  * Cleaned up the code, the build scripts, and the documentation.</changelog>
  <changelog author="pgajdos@suse.com" date="1764676800">- security update
- added patches
  CVE-2025-64505 [bsc#1254157], heap buffer over-read in `png_do_quantize` via malformed palette index
  * libpng16-CVE-2025-64505.patch
  CVE-2025-64506 [bsc#1254158], heap buffer over-read in `png_write_image_8bit` with 8-bit input and `convert_to_8bit` enabled
  * libpng16-CVE-2025-64506.patch
  CVE-2025-64720 [bsc#1254159], buffer overflow in `png_image_read_composite` via incorrect palette premultiplication
  * libpng16-CVE-2025-64720.patch
  CVE-2025-65018 [bsc#1254160], heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`
  * libpng16-CVE-2025-65018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1764936000">- security update
- added patches
  CVE-2025-66293 [bsc#1254480], LIBPNG out-of-bounds read in png_image_read_composite
  * libpng16-CVE-2025-66293-1.patch
  * libpng16-CVE-2025-66293-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1768478400">- security update
- added patches
  CVE-2026-22695 [bsc#1256525], Heap buffer over-read in png_image_finish_read
  * libpng16-CVE-2026-22695.patch
  CVE-2026-22801 [bsc#1256526], Integer truncation causing heap buffer over-read in png_image_write_*
  * libpng16-CVE-2026-22801.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1769601600">- security update
- added patches
  CVE-2025-28162 [bsc#1257364], memory leaks when running `pngimage`
  CVE-2025-28164 [bsc#1257365], memory leaks when running `pngimage`
  * libpng16-CVE-2025-28162,28164.patch</changelog>
</package>
<package pkgid="77ebe7a9c8e276768c6d77ab70baea6b42042b2e6ee2bbaf1867dc85df4994fa" name="libpng16-compat-devel" arch="x86_64">
  <version epoch="0" ver="1.6.40" rel="150600.3.12.1"/>
  <changelog author="pgajdos@suse.com" date="1546257600">- update to 1.6.36:
  Replaced the remaining uses of png_size_t with size_t (Cosmin)
    Fixed the calculation of row_factor in png_check_chunk_length
    (reported by Thuan Pham in SourceForge issue #278)
    Added missing parentheses to a macro definition
    (suggested by "irwir" in GitHub issue #216)
    Optimized png_do_expand_palette for ARM processors.
    Improved performance by around 10-22% on a recent ARM Chromebook.
    (Contributed by Richard Townsend, ARM Holdings)
    Fixed manipulation of machine-specific optimization options.
    (Contributed by Vicki Pfau)
    Used memcpy instead of manual pointer arithmetic on Intel SSE2.
    (Contributed by Samuel Williams)
    Fixed build errors with MSVC on ARM64.
    (Contributed by Zhijie Liang)
    Fixed detection of libm in CMakeLists.
    (Contributed by Cameron Cawley)
    Fixed incorrect creation of pkg-config file in CMakeLists.
    (Contributed by Kyle Bentley)
    Fixed the CMake build on Windows MSYS by avoiding symlinks.
    Fixed a build warning on OpenBSD.
    (Contributed by Theo Buehler)
    Fixed various typos in comments.
    (Contributed by "luz.paz")
    Raised the minimum required CMake version from 3.0.2 to 3.1.
    Removed yet more of the vestigial support for pre-ANSI C compilers.
    Removed ancient makefiles for ancient systems that have been broken
    across all previous libpng-1.6.x versions.
    Removed the Y2K compliance statement and the export control
    information.
    Applied various code style and documentation fixes.
- removed patches
  * libpng16-CVE-2018-13785.patch (upstreamed)
- cannot find upstream tarball signature, asked upstream for
  clarification</changelog>
  <changelog author="pgajdos@suse.com" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp</changelog>
  <changelog author="pgajdos@suse.com" date="1548676800">- fix arm build [bsc#1121829]
  + libpng-arm-free.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- version update to 1.6.37
  Fixed a use-after-free vulnerability (CVE-2019-7317) in png_image_free.
  Fixed a memory leak in the ARM NEON implementation of png_do_expand_palette.
  Fixed a memory leak in pngtest.c.
  Fixed two vulnerabilities (CVE-2018-14048, CVE-2018-14550) in
    contrib/pngminus; refactor.
  Changed the license of contrib/pngminus to MIT; refresh makefile and docs.
    (Contributed by Willem van Schaik)
  Added makefiles for AddressSanitizer-enabled builds.
- deleted patches
  - libpng-arm-free.patch (upstreamed)
- fixes [bsc#1121624] CVE-2019-6129 and [bsc#1124211] CVE-2019-7317</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- make check actually works under asan</changelog>
  <changelog author="l.lunak@centrum.cz" date="1615464000">- enable hardware optimizations (such as SSE)</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- install rpm macros in %{_rpmmacrodir} [bsc#1185661]
- call spec-cleaner</changelog>
  <changelog author="meissner@suse.com" date="1651665600">- switch source url to https</changelog>
  <changelog author="dmueller@suse.com" date="1663329600">- update to 1.6.38:
  * Added configurations and scripts for continuous integration.
  * Fixed various errors in the handling of tRNS, hIST and eXIf.
  * Implemented many stability improvements across all platforms.
  * Updated the internal documentation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1669377600">- Update to version 1.6.39:
  * cmake: Default to PNG_ARM_NEON=off for arm targets.
  + Turn large PNG chunks into benign errors.
  + Update, rename and clean up various scripts.
  + tools: Fix a buffer overflow involving a file name in pngfix.
  + tools: Fix a memory leak in pngcp.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- switch to pkgconfig(zlib) to allow alternative providers as well
- build with glibc hwcaps optimized libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252801">- Fix build: some*.la files are symlinks. Adjust spec to use
  find -type f,l</changelog>
  <changelog author="fcrozat@suse.com" date="1681992000">- Fix license tag to libpng-2.0.</changelog>
  <changelog author="pgajdos@suse.com" date="1684152000">- do not use NEON instructions [bsc#1211176]</changelog>
  <changelog author="mpluskal@suse.com" date="1687435200">- Update to version 1.6.40:
  * Fixed the eXIf chunk multiplicity checks.
  * Fixed a memory leak in pCAL processing.
  * Corrected the validity report about tRNS inside png_get_valid().
  * Fixed various build issues on *BSD, Mac and Windows.
  * Updated the configurations and the scripts for continuous integration.
  * Cleaned up the code, the build scripts, and the documentation.</changelog>
  <changelog author="pgajdos@suse.com" date="1764676800">- security update
- added patches
  CVE-2025-64505 [bsc#1254157], heap buffer over-read in `png_do_quantize` via malformed palette index
  * libpng16-CVE-2025-64505.patch
  CVE-2025-64506 [bsc#1254158], heap buffer over-read in `png_write_image_8bit` with 8-bit input and `convert_to_8bit` enabled
  * libpng16-CVE-2025-64506.patch
  CVE-2025-64720 [bsc#1254159], buffer overflow in `png_image_read_composite` via incorrect palette premultiplication
  * libpng16-CVE-2025-64720.patch
  CVE-2025-65018 [bsc#1254160], heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`
  * libpng16-CVE-2025-65018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1764936000">- security update
- added patches
  CVE-2025-66293 [bsc#1254480], LIBPNG out-of-bounds read in png_image_read_composite
  * libpng16-CVE-2025-66293-1.patch
  * libpng16-CVE-2025-66293-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1768478400">- security update
- added patches
  CVE-2026-22695 [bsc#1256525], Heap buffer over-read in png_image_finish_read
  * libpng16-CVE-2026-22695.patch
  CVE-2026-22801 [bsc#1256526], Integer truncation causing heap buffer over-read in png_image_write_*
  * libpng16-CVE-2026-22801.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1769601600">- security update
- added patches
  CVE-2025-28162 [bsc#1257364], memory leaks when running `pngimage`
  CVE-2025-28164 [bsc#1257365], memory leaks when running `pngimage`
  * libpng16-CVE-2025-28162,28164.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770897600">- added patches
  CVE-2026-25646: Heap buffer overflow vulnerability in png_set_dither/png_set_quantize (bsc#1258020)
  * libpng16-CVE-2026-25646.patch</changelog>
</package>
<package pkgid="5a5004b63b9b1d1b50c857fbad9338b6008a10cc37fa689fff21b98137a7e982" name="libpng16-compat-devel" arch="x86_64">
  <version epoch="0" ver="1.6.40" rel="150600.3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp</changelog>
  <changelog author="pgajdos@suse.com" date="1548676800">- fix arm build [bsc#1121829]
  + libpng-arm-free.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- version update to 1.6.37
  Fixed a use-after-free vulnerability (CVE-2019-7317) in png_image_free.
  Fixed a memory leak in the ARM NEON implementation of png_do_expand_palette.
  Fixed a memory leak in pngtest.c.
  Fixed two vulnerabilities (CVE-2018-14048, CVE-2018-14550) in
    contrib/pngminus; refactor.
  Changed the license of contrib/pngminus to MIT; refresh makefile and docs.
    (Contributed by Willem van Schaik)
  Added makefiles for AddressSanitizer-enabled builds.
- deleted patches
  - libpng-arm-free.patch (upstreamed)
- fixes [bsc#1121624] CVE-2019-6129 and [bsc#1124211] CVE-2019-7317</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- make check actually works under asan</changelog>
  <changelog author="l.lunak@centrum.cz" date="1615464000">- enable hardware optimizations (such as SSE)</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- install rpm macros in %{_rpmmacrodir} [bsc#1185661]
- call spec-cleaner</changelog>
  <changelog author="meissner@suse.com" date="1651665600">- switch source url to https</changelog>
  <changelog author="dmueller@suse.com" date="1663329600">- update to 1.6.38:
  * Added configurations and scripts for continuous integration.
  * Fixed various errors in the handling of tRNS, hIST and eXIf.
  * Implemented many stability improvements across all platforms.
  * Updated the internal documentation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1669377600">- Update to version 1.6.39:
  * cmake: Default to PNG_ARM_NEON=off for arm targets.
  + Turn large PNG chunks into benign errors.
  + Update, rename and clean up various scripts.
  + tools: Fix a buffer overflow involving a file name in pngfix.
  + tools: Fix a memory leak in pngcp.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- switch to pkgconfig(zlib) to allow alternative providers as well
- build with glibc hwcaps optimized libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252801">- Fix build: some*.la files are symlinks. Adjust spec to use
  find -type f,l</changelog>
  <changelog author="fcrozat@suse.com" date="1681992000">- Fix license tag to libpng-2.0.</changelog>
  <changelog author="pgajdos@suse.com" date="1684152000">- do not use NEON instructions [bsc#1211176]</changelog>
  <changelog author="mpluskal@suse.com" date="1687435200">- Update to version 1.6.40:
  * Fixed the eXIf chunk multiplicity checks.
  * Fixed a memory leak in pCAL processing.
  * Corrected the validity report about tRNS inside png_get_valid().
  * Fixed various build issues on *BSD, Mac and Windows.
  * Updated the configurations and the scripts for continuous integration.
  * Cleaned up the code, the build scripts, and the documentation.</changelog>
  <changelog author="pgajdos@suse.com" date="1764676800">- security update
- added patches
  CVE-2025-64505 [bsc#1254157], heap buffer over-read in `png_do_quantize` via malformed palette index
  * libpng16-CVE-2025-64505.patch
  CVE-2025-64506 [bsc#1254158], heap buffer over-read in `png_write_image_8bit` with 8-bit input and `convert_to_8bit` enabled
  * libpng16-CVE-2025-64506.patch
  CVE-2025-64720 [bsc#1254159], buffer overflow in `png_image_read_composite` via incorrect palette premultiplication
  * libpng16-CVE-2025-64720.patch
  CVE-2025-65018 [bsc#1254160], heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`
  * libpng16-CVE-2025-65018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1764936000">- security update
- added patches
  CVE-2025-66293 [bsc#1254480], LIBPNG out-of-bounds read in png_image_read_composite
  * libpng16-CVE-2025-66293-1.patch
  * libpng16-CVE-2025-66293-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1768478400">- security update
- added patches
  CVE-2026-22695 [bsc#1256525], Heap buffer over-read in png_image_finish_read
  * libpng16-CVE-2026-22695.patch
  CVE-2026-22801 [bsc#1256526], Integer truncation causing heap buffer over-read in png_image_write_*
  * libpng16-CVE-2026-22801.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1769601600">- security update
- added patches
  CVE-2025-28162 [bsc#1257364], memory leaks when running `pngimage`
  CVE-2025-28164 [bsc#1257365], memory leaks when running `pngimage`
  * libpng16-CVE-2025-28162,28164.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770897600">- added patches
  CVE-2026-25646: Heap buffer overflow vulnerability in png_set_dither/png_set_quantize (bsc#1258020)
  * libpng16-CVE-2026-25646.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1774958400">- added patches
  CVE-2026-33416: use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE` can lead to arbitrary code execution (bsc#1260754)
  * libpng16-CVE-2026-33416-1.patch
  * libpng16-CVE-2026-33416-2.patch
  * libpng16-CVE-2026-33416-3.patch
  * libpng16-CVE-2026-33416-4.patch
  CVE-2026-33636: out-of-bounds read/write in the palette expansion on ARM Neon can lead to information leak and crashes (bsc#1260755)
  * libpng16-CVE-2026-33636.patch</changelog>
</package>
<package pkgid="ef910f7ef255c2f3595d3ebece4ef666719bf79e6150ca4346aab5eb85c13419" name="libpng16-compat-devel" arch="x86_64">
  <version epoch="0" ver="1.6.40" rel="150600.3.20.1"/>
  <changelog author="pgajdos@suse.com" date="1548676800">- fix arm build [bsc#1121829]
  + libpng-arm-free.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- version update to 1.6.37
  Fixed a use-after-free vulnerability (CVE-2019-7317) in png_image_free.
  Fixed a memory leak in the ARM NEON implementation of png_do_expand_palette.
  Fixed a memory leak in pngtest.c.
  Fixed two vulnerabilities (CVE-2018-14048, CVE-2018-14550) in
    contrib/pngminus; refactor.
  Changed the license of contrib/pngminus to MIT; refresh makefile and docs.
    (Contributed by Willem van Schaik)
  Added makefiles for AddressSanitizer-enabled builds.
- deleted patches
  - libpng-arm-free.patch (upstreamed)
- fixes [bsc#1121624] CVE-2019-6129 and [bsc#1124211] CVE-2019-7317</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- make check actually works under asan</changelog>
  <changelog author="l.lunak@centrum.cz" date="1615464000">- enable hardware optimizations (such as SSE)</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- install rpm macros in %{_rpmmacrodir} [bsc#1185661]
- call spec-cleaner</changelog>
  <changelog author="meissner@suse.com" date="1651665600">- switch source url to https</changelog>
  <changelog author="dmueller@suse.com" date="1663329600">- update to 1.6.38:
  * Added configurations and scripts for continuous integration.
  * Fixed various errors in the handling of tRNS, hIST and eXIf.
  * Implemented many stability improvements across all platforms.
  * Updated the internal documentation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1669377600">- Update to version 1.6.39:
  * cmake: Default to PNG_ARM_NEON=off for arm targets.
  + Turn large PNG chunks into benign errors.
  + Update, rename and clean up various scripts.
  + tools: Fix a buffer overflow involving a file name in pngfix.
  + tools: Fix a memory leak in pngcp.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- switch to pkgconfig(zlib) to allow alternative providers as well
- build with glibc hwcaps optimized libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252801">- Fix build: some*.la files are symlinks. Adjust spec to use
  find -type f,l</changelog>
  <changelog author="fcrozat@suse.com" date="1681992000">- Fix license tag to libpng-2.0.</changelog>
  <changelog author="pgajdos@suse.com" date="1684152000">- do not use NEON instructions [bsc#1211176]</changelog>
  <changelog author="mpluskal@suse.com" date="1687435200">- Update to version 1.6.40:
  * Fixed the eXIf chunk multiplicity checks.
  * Fixed a memory leak in pCAL processing.
  * Corrected the validity report about tRNS inside png_get_valid().
  * Fixed various build issues on *BSD, Mac and Windows.
  * Updated the configurations and the scripts for continuous integration.
  * Cleaned up the code, the build scripts, and the documentation.</changelog>
  <changelog author="pgajdos@suse.com" date="1764676800">- security update
- added patches
  CVE-2025-64505 [bsc#1254157], heap buffer over-read in `png_do_quantize` via malformed palette index
  * libpng16-CVE-2025-64505.patch
  CVE-2025-64506 [bsc#1254158], heap buffer over-read in `png_write_image_8bit` with 8-bit input and `convert_to_8bit` enabled
  * libpng16-CVE-2025-64506.patch
  CVE-2025-64720 [bsc#1254159], buffer overflow in `png_image_read_composite` via incorrect palette premultiplication
  * libpng16-CVE-2025-64720.patch
  CVE-2025-65018 [bsc#1254160], heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`
  * libpng16-CVE-2025-65018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1764936000">- security update
- added patches
  CVE-2025-66293 [bsc#1254480], LIBPNG out-of-bounds read in png_image_read_composite
  * libpng16-CVE-2025-66293-1.patch
  * libpng16-CVE-2025-66293-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1768478400">- security update
- added patches
  CVE-2026-22695 [bsc#1256525], Heap buffer over-read in png_image_finish_read
  * libpng16-CVE-2026-22695.patch
  CVE-2026-22801 [bsc#1256526], Integer truncation causing heap buffer over-read in png_image_write_*
  * libpng16-CVE-2026-22801.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1769601600">- security update
- added patches
  CVE-2025-28162 [bsc#1257364], memory leaks when running `pngimage`
  CVE-2025-28164 [bsc#1257365], memory leaks when running `pngimage`
  * libpng16-CVE-2025-28162,28164.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770897600">- added patches
  CVE-2026-25646: Heap buffer overflow vulnerability in png_set_dither/png_set_quantize (bsc#1258020)
  * libpng16-CVE-2026-25646.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1774958400">- added patches
  CVE-2026-33416: use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE` can lead to arbitrary code execution (bsc#1260754)
  * libpng16-CVE-2026-33416-1.patch
  * libpng16-CVE-2026-33416-2.patch
  * libpng16-CVE-2026-33416-3.patch
  * libpng16-CVE-2026-33416-4.patch
  CVE-2026-33636: out-of-bounds read/write in the palette expansion on ARM Neon can lead to information leak and crashes (bsc#1260755)
  * libpng16-CVE-2026-33636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776340800">- added patches
  CVE-2026-34757: Information disclosure and data corruption via use-after-free vulnerability [bsc#1261957]
  * libpng16-CVE-2026-34757.patch</changelog>
</package>
<package pkgid="6a83f3904f830519ea5839db5a63adc37e705b3490589a4b4373424b2cea24e3" name="libpng16-compat-devel" arch="x86_64">
  <version epoch="0" ver="1.6.40" rel="150600.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1517400000">- check with -j1</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- %{libname} package provides libpng = %{version} again
  [bsc#1079342]</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update:
  * CVE-2018-13785 [bsc#1100687]
    + libpng16-CVE-2018-13785.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546257600">- update to 1.6.36:
  Replaced the remaining uses of png_size_t with size_t (Cosmin)
    Fixed the calculation of row_factor in png_check_chunk_length
    (reported by Thuan Pham in SourceForge issue #278)
    Added missing parentheses to a macro definition
    (suggested by "irwir" in GitHub issue #216)
    Optimized png_do_expand_palette for ARM processors.
    Improved performance by around 10-22% on a recent ARM Chromebook.
    (Contributed by Richard Townsend, ARM Holdings)
    Fixed manipulation of machine-specific optimization options.
    (Contributed by Vicki Pfau)
    Used memcpy instead of manual pointer arithmetic on Intel SSE2.
    (Contributed by Samuel Williams)
    Fixed build errors with MSVC on ARM64.
    (Contributed by Zhijie Liang)
    Fixed detection of libm in CMakeLists.
    (Contributed by Cameron Cawley)
    Fixed incorrect creation of pkg-config file in CMakeLists.
    (Contributed by Kyle Bentley)
    Fixed the CMake build on Windows MSYS by avoiding symlinks.
    Fixed a build warning on OpenBSD.
    (Contributed by Theo Buehler)
    Fixed various typos in comments.
    (Contributed by "luz.paz")
    Raised the minimum required CMake version from 3.0.2 to 3.1.
    Removed yet more of the vestigial support for pre-ANSI C compilers.
    Removed ancient makefiles for ancient systems that have been broken
    across all previous libpng-1.6.x versions.
    Removed the Y2K compliance statement and the export control
    information.
    Applied various code style and documentation fixes.
- removed patches
  * libpng16-CVE-2018-13785.patch (upstreamed)
- cannot find upstream tarball signature, asked upstream for
  clarification</changelog>
  <changelog author="pgajdos@suse.com" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp</changelog>
  <changelog author="pgajdos@suse.com" date="1548676800">- fix arm build [bsc#1121829]
  + libpng-arm-free.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- version update to 1.6.37
  Fixed a use-after-free vulnerability (CVE-2019-7317) in png_image_free.
  Fixed a memory leak in the ARM NEON implementation of png_do_expand_palette.
  Fixed a memory leak in pngtest.c.
  Fixed two vulnerabilities (CVE-2018-14048, CVE-2018-14550) in
    contrib/pngminus; refactor.
  Changed the license of contrib/pngminus to MIT; refresh makefile and docs.
    (Contributed by Willem van Schaik)
  Added makefiles for AddressSanitizer-enabled builds.
- deleted patches
  - libpng-arm-free.patch (upstreamed)
- fixes [bsc#1121624] CVE-2019-6129 and [bsc#1124211] CVE-2019-7317</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- make check actually works under asan</changelog>
  <changelog author="l.lunak@centrum.cz" date="1615464000">- enable hardware optimizations (such as SSE)</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- install rpm macros in %{_rpmmacrodir} [bsc#1185661]
- call spec-cleaner</changelog>
  <changelog author="meissner@suse.com" date="1651665600">- switch source url to https</changelog>
  <changelog author="dmueller@suse.com" date="1663329600">- update to 1.6.38:
  * Added configurations and scripts for continuous integration.
  * Fixed various errors in the handling of tRNS, hIST and eXIf.
  * Implemented many stability improvements across all platforms.
  * Updated the internal documentation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1669377600">- Update to version 1.6.39:
  * cmake: Default to PNG_ARM_NEON=off for arm targets.
  + Turn large PNG chunks into benign errors.
  + Update, rename and clean up various scripts.
  + tools: Fix a buffer overflow involving a file name in pngfix.
  + tools: Fix a memory leak in pngcp.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- switch to pkgconfig(zlib) to allow alternative providers as well
- build with glibc hwcaps optimized libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252801">- Fix build: some*.la files are symlinks. Adjust spec to use
  find -type f,l</changelog>
  <changelog author="fcrozat@suse.com" date="1681992000">- Fix license tag to libpng-2.0.</changelog>
  <changelog author="pgajdos@suse.com" date="1684152000">- do not use NEON instructions [bsc#1211176]</changelog>
  <changelog author="mpluskal@suse.com" date="1687435200">- Update to version 1.6.40:
  * Fixed the eXIf chunk multiplicity checks.
  * Fixed a memory leak in pCAL processing.
  * Corrected the validity report about tRNS inside png_get_valid().
  * Fixed various build issues on *BSD, Mac and Windows.
  * Updated the configurations and the scripts for continuous integration.
  * Cleaned up the code, the build scripts, and the documentation.</changelog>
  <changelog author="pgajdos@suse.com" date="1764676800">- security update
- added patches
  CVE-2025-64505 [bsc#1254157], heap buffer over-read in `png_do_quantize` via malformed palette index
  * libpng16-CVE-2025-64505.patch
  CVE-2025-64506 [bsc#1254158], heap buffer over-read in `png_write_image_8bit` with 8-bit input and `convert_to_8bit` enabled
  * libpng16-CVE-2025-64506.patch
  CVE-2025-64720 [bsc#1254159], buffer overflow in `png_image_read_composite` via incorrect palette premultiplication
  * libpng16-CVE-2025-64720.patch
  CVE-2025-65018 [bsc#1254160], heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`
  * libpng16-CVE-2025-65018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1764936000">- security update
- added patches
  CVE-2025-66293 [bsc#1254480], LIBPNG out-of-bounds read in png_image_read_composite
  * libpng16-CVE-2025-66293-1.patch
  * libpng16-CVE-2025-66293-2.patch</changelog>
</package>
<package pkgid="dc11bf7dc4aa1f7dea5b8f9f70b19c6a0b6eb75d1b7852a748fdad554dd69c40" name="libpng16-compat-devel" arch="x86_64">
  <version epoch="0" ver="1.6.40" rel="150600.3.6.1"/>
  <changelog author="pgajdos@suse.com" date="1517832000">- %{libname} package provides libpng = %{version} again
  [bsc#1079342]</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update:
  * CVE-2018-13785 [bsc#1100687]
    + libpng16-CVE-2018-13785.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546257600">- update to 1.6.36:
  Replaced the remaining uses of png_size_t with size_t (Cosmin)
    Fixed the calculation of row_factor in png_check_chunk_length
    (reported by Thuan Pham in SourceForge issue #278)
    Added missing parentheses to a macro definition
    (suggested by "irwir" in GitHub issue #216)
    Optimized png_do_expand_palette for ARM processors.
    Improved performance by around 10-22% on a recent ARM Chromebook.
    (Contributed by Richard Townsend, ARM Holdings)
    Fixed manipulation of machine-specific optimization options.
    (Contributed by Vicki Pfau)
    Used memcpy instead of manual pointer arithmetic on Intel SSE2.
    (Contributed by Samuel Williams)
    Fixed build errors with MSVC on ARM64.
    (Contributed by Zhijie Liang)
    Fixed detection of libm in CMakeLists.
    (Contributed by Cameron Cawley)
    Fixed incorrect creation of pkg-config file in CMakeLists.
    (Contributed by Kyle Bentley)
    Fixed the CMake build on Windows MSYS by avoiding symlinks.
    Fixed a build warning on OpenBSD.
    (Contributed by Theo Buehler)
    Fixed various typos in comments.
    (Contributed by "luz.paz")
    Raised the minimum required CMake version from 3.0.2 to 3.1.
    Removed yet more of the vestigial support for pre-ANSI C compilers.
    Removed ancient makefiles for ancient systems that have been broken
    across all previous libpng-1.6.x versions.
    Removed the Y2K compliance statement and the export control
    information.
    Applied various code style and documentation fixes.
- removed patches
  * libpng16-CVE-2018-13785.patch (upstreamed)
- cannot find upstream tarball signature, asked upstream for
  clarification</changelog>
  <changelog author="pgajdos@suse.com" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp</changelog>
  <changelog author="pgajdos@suse.com" date="1548676800">- fix arm build [bsc#1121829]
  + libpng-arm-free.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- version update to 1.6.37
  Fixed a use-after-free vulnerability (CVE-2019-7317) in png_image_free.
  Fixed a memory leak in the ARM NEON implementation of png_do_expand_palette.
  Fixed a memory leak in pngtest.c.
  Fixed two vulnerabilities (CVE-2018-14048, CVE-2018-14550) in
    contrib/pngminus; refactor.
  Changed the license of contrib/pngminus to MIT; refresh makefile and docs.
    (Contributed by Willem van Schaik)
  Added makefiles for AddressSanitizer-enabled builds.
- deleted patches
  - libpng-arm-free.patch (upstreamed)
- fixes [bsc#1121624] CVE-2019-6129 and [bsc#1124211] CVE-2019-7317</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- make check actually works under asan</changelog>
  <changelog author="l.lunak@centrum.cz" date="1615464000">- enable hardware optimizations (such as SSE)</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- install rpm macros in %{_rpmmacrodir} [bsc#1185661]
- call spec-cleaner</changelog>
  <changelog author="meissner@suse.com" date="1651665600">- switch source url to https</changelog>
  <changelog author="dmueller@suse.com" date="1663329600">- update to 1.6.38:
  * Added configurations and scripts for continuous integration.
  * Fixed various errors in the handling of tRNS, hIST and eXIf.
  * Implemented many stability improvements across all platforms.
  * Updated the internal documentation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1669377600">- Update to version 1.6.39:
  * cmake: Default to PNG_ARM_NEON=off for arm targets.
  + Turn large PNG chunks into benign errors.
  + Update, rename and clean up various scripts.
  + tools: Fix a buffer overflow involving a file name in pngfix.
  + tools: Fix a memory leak in pngcp.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- switch to pkgconfig(zlib) to allow alternative providers as well
- build with glibc hwcaps optimized libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252801">- Fix build: some*.la files are symlinks. Adjust spec to use
  find -type f,l</changelog>
  <changelog author="fcrozat@suse.com" date="1681992000">- Fix license tag to libpng-2.0.</changelog>
  <changelog author="pgajdos@suse.com" date="1684152000">- do not use NEON instructions [bsc#1211176]</changelog>
  <changelog author="mpluskal@suse.com" date="1687435200">- Update to version 1.6.40:
  * Fixed the eXIf chunk multiplicity checks.
  * Fixed a memory leak in pCAL processing.
  * Corrected the validity report about tRNS inside png_get_valid().
  * Fixed various build issues on *BSD, Mac and Windows.
  * Updated the configurations and the scripts for continuous integration.
  * Cleaned up the code, the build scripts, and the documentation.</changelog>
  <changelog author="pgajdos@suse.com" date="1764676800">- security update
- added patches
  CVE-2025-64505 [bsc#1254157], heap buffer over-read in `png_do_quantize` via malformed palette index
  * libpng16-CVE-2025-64505.patch
  CVE-2025-64506 [bsc#1254158], heap buffer over-read in `png_write_image_8bit` with 8-bit input and `convert_to_8bit` enabled
  * libpng16-CVE-2025-64506.patch
  CVE-2025-64720 [bsc#1254159], buffer overflow in `png_image_read_composite` via incorrect palette premultiplication
  * libpng16-CVE-2025-64720.patch
  CVE-2025-65018 [bsc#1254160], heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`
  * libpng16-CVE-2025-65018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1764936000">- security update
- added patches
  CVE-2025-66293 [bsc#1254480], LIBPNG out-of-bounds read in png_image_read_composite
  * libpng16-CVE-2025-66293-1.patch
  * libpng16-CVE-2025-66293-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1768478400">- security update
- added patches
  CVE-2026-22695 [bsc#1256525], Heap buffer over-read in png_image_finish_read
  * libpng16-CVE-2026-22695.patch
  CVE-2026-22801 [bsc#1256526], Integer truncation causing heap buffer over-read in png_image_write_*
  * libpng16-CVE-2026-22801.patch</changelog>
</package>
<package pkgid="37f35b6805d467933f5222bd06d741c492fa24494150aca64292e383a85a958e" name="libpng16-compat-devel" arch="x86_64">
  <version epoch="0" ver="1.6.40" rel="150600.3.9.1"/>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update:
  * CVE-2018-13785 [bsc#1100687]
    + libpng16-CVE-2018-13785.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546257600">- update to 1.6.36:
  Replaced the remaining uses of png_size_t with size_t (Cosmin)
    Fixed the calculation of row_factor in png_check_chunk_length
    (reported by Thuan Pham in SourceForge issue #278)
    Added missing parentheses to a macro definition
    (suggested by "irwir" in GitHub issue #216)
    Optimized png_do_expand_palette for ARM processors.
    Improved performance by around 10-22% on a recent ARM Chromebook.
    (Contributed by Richard Townsend, ARM Holdings)
    Fixed manipulation of machine-specific optimization options.
    (Contributed by Vicki Pfau)
    Used memcpy instead of manual pointer arithmetic on Intel SSE2.
    (Contributed by Samuel Williams)
    Fixed build errors with MSVC on ARM64.
    (Contributed by Zhijie Liang)
    Fixed detection of libm in CMakeLists.
    (Contributed by Cameron Cawley)
    Fixed incorrect creation of pkg-config file in CMakeLists.
    (Contributed by Kyle Bentley)
    Fixed the CMake build on Windows MSYS by avoiding symlinks.
    Fixed a build warning on OpenBSD.
    (Contributed by Theo Buehler)
    Fixed various typos in comments.
    (Contributed by "luz.paz")
    Raised the minimum required CMake version from 3.0.2 to 3.1.
    Removed yet more of the vestigial support for pre-ANSI C compilers.
    Removed ancient makefiles for ancient systems that have been broken
    across all previous libpng-1.6.x versions.
    Removed the Y2K compliance statement and the export control
    information.
    Applied various code style and documentation fixes.
- removed patches
  * libpng16-CVE-2018-13785.patch (upstreamed)
- cannot find upstream tarball signature, asked upstream for
  clarification</changelog>
  <changelog author="pgajdos@suse.com" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp</changelog>
  <changelog author="pgajdos@suse.com" date="1548676800">- fix arm build [bsc#1121829]
  + libpng-arm-free.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- version update to 1.6.37
  Fixed a use-after-free vulnerability (CVE-2019-7317) in png_image_free.
  Fixed a memory leak in the ARM NEON implementation of png_do_expand_palette.
  Fixed a memory leak in pngtest.c.
  Fixed two vulnerabilities (CVE-2018-14048, CVE-2018-14550) in
    contrib/pngminus; refactor.
  Changed the license of contrib/pngminus to MIT; refresh makefile and docs.
    (Contributed by Willem van Schaik)
  Added makefiles for AddressSanitizer-enabled builds.
- deleted patches
  - libpng-arm-free.patch (upstreamed)
- fixes [bsc#1121624] CVE-2019-6129 and [bsc#1124211] CVE-2019-7317</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- make check actually works under asan</changelog>
  <changelog author="l.lunak@centrum.cz" date="1615464000">- enable hardware optimizations (such as SSE)</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- install rpm macros in %{_rpmmacrodir} [bsc#1185661]
- call spec-cleaner</changelog>
  <changelog author="meissner@suse.com" date="1651665600">- switch source url to https</changelog>
  <changelog author="dmueller@suse.com" date="1663329600">- update to 1.6.38:
  * Added configurations and scripts for continuous integration.
  * Fixed various errors in the handling of tRNS, hIST and eXIf.
  * Implemented many stability improvements across all platforms.
  * Updated the internal documentation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1669377600">- Update to version 1.6.39:
  * cmake: Default to PNG_ARM_NEON=off for arm targets.
  + Turn large PNG chunks into benign errors.
  + Update, rename and clean up various scripts.
  + tools: Fix a buffer overflow involving a file name in pngfix.
  + tools: Fix a memory leak in pngcp.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- switch to pkgconfig(zlib) to allow alternative providers as well
- build with glibc hwcaps optimized libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252801">- Fix build: some*.la files are symlinks. Adjust spec to use
  find -type f,l</changelog>
  <changelog author="fcrozat@suse.com" date="1681992000">- Fix license tag to libpng-2.0.</changelog>
  <changelog author="pgajdos@suse.com" date="1684152000">- do not use NEON instructions [bsc#1211176]</changelog>
  <changelog author="mpluskal@suse.com" date="1687435200">- Update to version 1.6.40:
  * Fixed the eXIf chunk multiplicity checks.
  * Fixed a memory leak in pCAL processing.
  * Corrected the validity report about tRNS inside png_get_valid().
  * Fixed various build issues on *BSD, Mac and Windows.
  * Updated the configurations and the scripts for continuous integration.
  * Cleaned up the code, the build scripts, and the documentation.</changelog>
  <changelog author="pgajdos@suse.com" date="1764676800">- security update
- added patches
  CVE-2025-64505 [bsc#1254157], heap buffer over-read in `png_do_quantize` via malformed palette index
  * libpng16-CVE-2025-64505.patch
  CVE-2025-64506 [bsc#1254158], heap buffer over-read in `png_write_image_8bit` with 8-bit input and `convert_to_8bit` enabled
  * libpng16-CVE-2025-64506.patch
  CVE-2025-64720 [bsc#1254159], buffer overflow in `png_image_read_composite` via incorrect palette premultiplication
  * libpng16-CVE-2025-64720.patch
  CVE-2025-65018 [bsc#1254160], heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`
  * libpng16-CVE-2025-65018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1764936000">- security update
- added patches
  CVE-2025-66293 [bsc#1254480], LIBPNG out-of-bounds read in png_image_read_composite
  * libpng16-CVE-2025-66293-1.patch
  * libpng16-CVE-2025-66293-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1768478400">- security update
- added patches
  CVE-2026-22695 [bsc#1256525], Heap buffer over-read in png_image_finish_read
  * libpng16-CVE-2026-22695.patch
  CVE-2026-22801 [bsc#1256526], Integer truncation causing heap buffer over-read in png_image_write_*
  * libpng16-CVE-2026-22801.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1769601600">- security update
- added patches
  CVE-2025-28162 [bsc#1257364], memory leaks when running `pngimage`
  CVE-2025-28164 [bsc#1257365], memory leaks when running `pngimage`
  * libpng16-CVE-2025-28162,28164.patch</changelog>
</package>
<package pkgid="50362b071162dfe036811185417b99050279b8f23b604c9c488b5a9e8e43a813" name="libpng16-devel" arch="x86_64">
  <version epoch="0" ver="1.6.40" rel="150600.3.12.1"/>
  <changelog author="pgajdos@suse.com" date="1546257600">- update to 1.6.36:
  Replaced the remaining uses of png_size_t with size_t (Cosmin)
    Fixed the calculation of row_factor in png_check_chunk_length
    (reported by Thuan Pham in SourceForge issue #278)
    Added missing parentheses to a macro definition
    (suggested by "irwir" in GitHub issue #216)
    Optimized png_do_expand_palette for ARM processors.
    Improved performance by around 10-22% on a recent ARM Chromebook.
    (Contributed by Richard Townsend, ARM Holdings)
    Fixed manipulation of machine-specific optimization options.
    (Contributed by Vicki Pfau)
    Used memcpy instead of manual pointer arithmetic on Intel SSE2.
    (Contributed by Samuel Williams)
    Fixed build errors with MSVC on ARM64.
    (Contributed by Zhijie Liang)
    Fixed detection of libm in CMakeLists.
    (Contributed by Cameron Cawley)
    Fixed incorrect creation of pkg-config file in CMakeLists.
    (Contributed by Kyle Bentley)
    Fixed the CMake build on Windows MSYS by avoiding symlinks.
    Fixed a build warning on OpenBSD.
    (Contributed by Theo Buehler)
    Fixed various typos in comments.
    (Contributed by "luz.paz")
    Raised the minimum required CMake version from 3.0.2 to 3.1.
    Removed yet more of the vestigial support for pre-ANSI C compilers.
    Removed ancient makefiles for ancient systems that have been broken
    across all previous libpng-1.6.x versions.
    Removed the Y2K compliance statement and the export control
    information.
    Applied various code style and documentation fixes.
- removed patches
  * libpng16-CVE-2018-13785.patch (upstreamed)
- cannot find upstream tarball signature, asked upstream for
  clarification</changelog>
  <changelog author="pgajdos@suse.com" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp</changelog>
  <changelog author="pgajdos@suse.com" date="1548676800">- fix arm build [bsc#1121829]
  + libpng-arm-free.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- version update to 1.6.37
  Fixed a use-after-free vulnerability (CVE-2019-7317) in png_image_free.
  Fixed a memory leak in the ARM NEON implementation of png_do_expand_palette.
  Fixed a memory leak in pngtest.c.
  Fixed two vulnerabilities (CVE-2018-14048, CVE-2018-14550) in
    contrib/pngminus; refactor.
  Changed the license of contrib/pngminus to MIT; refresh makefile and docs.
    (Contributed by Willem van Schaik)
  Added makefiles for AddressSanitizer-enabled builds.
- deleted patches
  - libpng-arm-free.patch (upstreamed)
- fixes [bsc#1121624] CVE-2019-6129 and [bsc#1124211] CVE-2019-7317</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- make check actually works under asan</changelog>
  <changelog author="l.lunak@centrum.cz" date="1615464000">- enable hardware optimizations (such as SSE)</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- install rpm macros in %{_rpmmacrodir} [bsc#1185661]
- call spec-cleaner</changelog>
  <changelog author="meissner@suse.com" date="1651665600">- switch source url to https</changelog>
  <changelog author="dmueller@suse.com" date="1663329600">- update to 1.6.38:
  * Added configurations and scripts for continuous integration.
  * Fixed various errors in the handling of tRNS, hIST and eXIf.
  * Implemented many stability improvements across all platforms.
  * Updated the internal documentation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1669377600">- Update to version 1.6.39:
  * cmake: Default to PNG_ARM_NEON=off for arm targets.
  + Turn large PNG chunks into benign errors.
  + Update, rename and clean up various scripts.
  + tools: Fix a buffer overflow involving a file name in pngfix.
  + tools: Fix a memory leak in pngcp.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- switch to pkgconfig(zlib) to allow alternative providers as well
- build with glibc hwcaps optimized libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252801">- Fix build: some*.la files are symlinks. Adjust spec to use
  find -type f,l</changelog>
  <changelog author="fcrozat@suse.com" date="1681992000">- Fix license tag to libpng-2.0.</changelog>
  <changelog author="pgajdos@suse.com" date="1684152000">- do not use NEON instructions [bsc#1211176]</changelog>
  <changelog author="mpluskal@suse.com" date="1687435200">- Update to version 1.6.40:
  * Fixed the eXIf chunk multiplicity checks.
  * Fixed a memory leak in pCAL processing.
  * Corrected the validity report about tRNS inside png_get_valid().
  * Fixed various build issues on *BSD, Mac and Windows.
  * Updated the configurations and the scripts for continuous integration.
  * Cleaned up the code, the build scripts, and the documentation.</changelog>
  <changelog author="pgajdos@suse.com" date="1764676800">- security update
- added patches
  CVE-2025-64505 [bsc#1254157], heap buffer over-read in `png_do_quantize` via malformed palette index
  * libpng16-CVE-2025-64505.patch
  CVE-2025-64506 [bsc#1254158], heap buffer over-read in `png_write_image_8bit` with 8-bit input and `convert_to_8bit` enabled
  * libpng16-CVE-2025-64506.patch
  CVE-2025-64720 [bsc#1254159], buffer overflow in `png_image_read_composite` via incorrect palette premultiplication
  * libpng16-CVE-2025-64720.patch
  CVE-2025-65018 [bsc#1254160], heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`
  * libpng16-CVE-2025-65018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1764936000">- security update
- added patches
  CVE-2025-66293 [bsc#1254480], LIBPNG out-of-bounds read in png_image_read_composite
  * libpng16-CVE-2025-66293-1.patch
  * libpng16-CVE-2025-66293-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1768478400">- security update
- added patches
  CVE-2026-22695 [bsc#1256525], Heap buffer over-read in png_image_finish_read
  * libpng16-CVE-2026-22695.patch
  CVE-2026-22801 [bsc#1256526], Integer truncation causing heap buffer over-read in png_image_write_*
  * libpng16-CVE-2026-22801.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1769601600">- security update
- added patches
  CVE-2025-28162 [bsc#1257364], memory leaks when running `pngimage`
  CVE-2025-28164 [bsc#1257365], memory leaks when running `pngimage`
  * libpng16-CVE-2025-28162,28164.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770897600">- added patches
  CVE-2026-25646: Heap buffer overflow vulnerability in png_set_dither/png_set_quantize (bsc#1258020)
  * libpng16-CVE-2026-25646.patch</changelog>
</package>
<package pkgid="50e2d5d5b0318b16887554387b98e9adff0dd41d9a23851c8bde0603bd58b6ab" name="libpng16-devel" arch="x86_64">
  <version epoch="0" ver="1.6.40" rel="150600.3.17.1"/>
  <changelog author="pgajdos@suse.com" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp</changelog>
  <changelog author="pgajdos@suse.com" date="1548676800">- fix arm build [bsc#1121829]
  + libpng-arm-free.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- version update to 1.6.37
  Fixed a use-after-free vulnerability (CVE-2019-7317) in png_image_free.
  Fixed a memory leak in the ARM NEON implementation of png_do_expand_palette.
  Fixed a memory leak in pngtest.c.
  Fixed two vulnerabilities (CVE-2018-14048, CVE-2018-14550) in
    contrib/pngminus; refactor.
  Changed the license of contrib/pngminus to MIT; refresh makefile and docs.
    (Contributed by Willem van Schaik)
  Added makefiles for AddressSanitizer-enabled builds.
- deleted patches
  - libpng-arm-free.patch (upstreamed)
- fixes [bsc#1121624] CVE-2019-6129 and [bsc#1124211] CVE-2019-7317</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- make check actually works under asan</changelog>
  <changelog author="l.lunak@centrum.cz" date="1615464000">- enable hardware optimizations (such as SSE)</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- install rpm macros in %{_rpmmacrodir} [bsc#1185661]
- call spec-cleaner</changelog>
  <changelog author="meissner@suse.com" date="1651665600">- switch source url to https</changelog>
  <changelog author="dmueller@suse.com" date="1663329600">- update to 1.6.38:
  * Added configurations and scripts for continuous integration.
  * Fixed various errors in the handling of tRNS, hIST and eXIf.
  * Implemented many stability improvements across all platforms.
  * Updated the internal documentation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1669377600">- Update to version 1.6.39:
  * cmake: Default to PNG_ARM_NEON=off for arm targets.
  + Turn large PNG chunks into benign errors.
  + Update, rename and clean up various scripts.
  + tools: Fix a buffer overflow involving a file name in pngfix.
  + tools: Fix a memory leak in pngcp.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- switch to pkgconfig(zlib) to allow alternative providers as well
- build with glibc hwcaps optimized libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252801">- Fix build: some*.la files are symlinks. Adjust spec to use
  find -type f,l</changelog>
  <changelog author="fcrozat@suse.com" date="1681992000">- Fix license tag to libpng-2.0.</changelog>
  <changelog author="pgajdos@suse.com" date="1684152000">- do not use NEON instructions [bsc#1211176]</changelog>
  <changelog author="mpluskal@suse.com" date="1687435200">- Update to version 1.6.40:
  * Fixed the eXIf chunk multiplicity checks.
  * Fixed a memory leak in pCAL processing.
  * Corrected the validity report about tRNS inside png_get_valid().
  * Fixed various build issues on *BSD, Mac and Windows.
  * Updated the configurations and the scripts for continuous integration.
  * Cleaned up the code, the build scripts, and the documentation.</changelog>
  <changelog author="pgajdos@suse.com" date="1764676800">- security update
- added patches
  CVE-2025-64505 [bsc#1254157], heap buffer over-read in `png_do_quantize` via malformed palette index
  * libpng16-CVE-2025-64505.patch
  CVE-2025-64506 [bsc#1254158], heap buffer over-read in `png_write_image_8bit` with 8-bit input and `convert_to_8bit` enabled
  * libpng16-CVE-2025-64506.patch
  CVE-2025-64720 [bsc#1254159], buffer overflow in `png_image_read_composite` via incorrect palette premultiplication
  * libpng16-CVE-2025-64720.patch
  CVE-2025-65018 [bsc#1254160], heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`
  * libpng16-CVE-2025-65018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1764936000">- security update
- added patches
  CVE-2025-66293 [bsc#1254480], LIBPNG out-of-bounds read in png_image_read_composite
  * libpng16-CVE-2025-66293-1.patch
  * libpng16-CVE-2025-66293-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1768478400">- security update
- added patches
  CVE-2026-22695 [bsc#1256525], Heap buffer over-read in png_image_finish_read
  * libpng16-CVE-2026-22695.patch
  CVE-2026-22801 [bsc#1256526], Integer truncation causing heap buffer over-read in png_image_write_*
  * libpng16-CVE-2026-22801.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1769601600">- security update
- added patches
  CVE-2025-28162 [bsc#1257364], memory leaks when running `pngimage`
  CVE-2025-28164 [bsc#1257365], memory leaks when running `pngimage`
  * libpng16-CVE-2025-28162,28164.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770897600">- added patches
  CVE-2026-25646: Heap buffer overflow vulnerability in png_set_dither/png_set_quantize (bsc#1258020)
  * libpng16-CVE-2026-25646.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1774958400">- added patches
  CVE-2026-33416: use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE` can lead to arbitrary code execution (bsc#1260754)
  * libpng16-CVE-2026-33416-1.patch
  * libpng16-CVE-2026-33416-2.patch
  * libpng16-CVE-2026-33416-3.patch
  * libpng16-CVE-2026-33416-4.patch
  CVE-2026-33636: out-of-bounds read/write in the palette expansion on ARM Neon can lead to information leak and crashes (bsc#1260755)
  * libpng16-CVE-2026-33636.patch</changelog>
</package>
<package pkgid="2dc6cc552b8ff346a7085c66de63e907829bdf18601b2d9d46969e827166c71d" name="libpng16-devel" arch="x86_64">
  <version epoch="0" ver="1.6.40" rel="150600.3.20.1"/>
  <changelog author="pgajdos@suse.com" date="1548676800">- fix arm build [bsc#1121829]
  + libpng-arm-free.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- version update to 1.6.37
  Fixed a use-after-free vulnerability (CVE-2019-7317) in png_image_free.
  Fixed a memory leak in the ARM NEON implementation of png_do_expand_palette.
  Fixed a memory leak in pngtest.c.
  Fixed two vulnerabilities (CVE-2018-14048, CVE-2018-14550) in
    contrib/pngminus; refactor.
  Changed the license of contrib/pngminus to MIT; refresh makefile and docs.
    (Contributed by Willem van Schaik)
  Added makefiles for AddressSanitizer-enabled builds.
- deleted patches
  - libpng-arm-free.patch (upstreamed)
- fixes [bsc#1121624] CVE-2019-6129 and [bsc#1124211] CVE-2019-7317</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- make check actually works under asan</changelog>
  <changelog author="l.lunak@centrum.cz" date="1615464000">- enable hardware optimizations (such as SSE)</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- install rpm macros in %{_rpmmacrodir} [bsc#1185661]
- call spec-cleaner</changelog>
  <changelog author="meissner@suse.com" date="1651665600">- switch source url to https</changelog>
  <changelog author="dmueller@suse.com" date="1663329600">- update to 1.6.38:
  * Added configurations and scripts for continuous integration.
  * Fixed various errors in the handling of tRNS, hIST and eXIf.
  * Implemented many stability improvements across all platforms.
  * Updated the internal documentation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1669377600">- Update to version 1.6.39:
  * cmake: Default to PNG_ARM_NEON=off for arm targets.
  + Turn large PNG chunks into benign errors.
  + Update, rename and clean up various scripts.
  + tools: Fix a buffer overflow involving a file name in pngfix.
  + tools: Fix a memory leak in pngcp.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- switch to pkgconfig(zlib) to allow alternative providers as well
- build with glibc hwcaps optimized libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252801">- Fix build: some*.la files are symlinks. Adjust spec to use
  find -type f,l</changelog>
  <changelog author="fcrozat@suse.com" date="1681992000">- Fix license tag to libpng-2.0.</changelog>
  <changelog author="pgajdos@suse.com" date="1684152000">- do not use NEON instructions [bsc#1211176]</changelog>
  <changelog author="mpluskal@suse.com" date="1687435200">- Update to version 1.6.40:
  * Fixed the eXIf chunk multiplicity checks.
  * Fixed a memory leak in pCAL processing.
  * Corrected the validity report about tRNS inside png_get_valid().
  * Fixed various build issues on *BSD, Mac and Windows.
  * Updated the configurations and the scripts for continuous integration.
  * Cleaned up the code, the build scripts, and the documentation.</changelog>
  <changelog author="pgajdos@suse.com" date="1764676800">- security update
- added patches
  CVE-2025-64505 [bsc#1254157], heap buffer over-read in `png_do_quantize` via malformed palette index
  * libpng16-CVE-2025-64505.patch
  CVE-2025-64506 [bsc#1254158], heap buffer over-read in `png_write_image_8bit` with 8-bit input and `convert_to_8bit` enabled
  * libpng16-CVE-2025-64506.patch
  CVE-2025-64720 [bsc#1254159], buffer overflow in `png_image_read_composite` via incorrect palette premultiplication
  * libpng16-CVE-2025-64720.patch
  CVE-2025-65018 [bsc#1254160], heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`
  * libpng16-CVE-2025-65018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1764936000">- security update
- added patches
  CVE-2025-66293 [bsc#1254480], LIBPNG out-of-bounds read in png_image_read_composite
  * libpng16-CVE-2025-66293-1.patch
  * libpng16-CVE-2025-66293-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1768478400">- security update
- added patches
  CVE-2026-22695 [bsc#1256525], Heap buffer over-read in png_image_finish_read
  * libpng16-CVE-2026-22695.patch
  CVE-2026-22801 [bsc#1256526], Integer truncation causing heap buffer over-read in png_image_write_*
  * libpng16-CVE-2026-22801.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1769601600">- security update
- added patches
  CVE-2025-28162 [bsc#1257364], memory leaks when running `pngimage`
  CVE-2025-28164 [bsc#1257365], memory leaks when running `pngimage`
  * libpng16-CVE-2025-28162,28164.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770897600">- added patches
  CVE-2026-25646: Heap buffer overflow vulnerability in png_set_dither/png_set_quantize (bsc#1258020)
  * libpng16-CVE-2026-25646.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1774958400">- added patches
  CVE-2026-33416: use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE` can lead to arbitrary code execution (bsc#1260754)
  * libpng16-CVE-2026-33416-1.patch
  * libpng16-CVE-2026-33416-2.patch
  * libpng16-CVE-2026-33416-3.patch
  * libpng16-CVE-2026-33416-4.patch
  CVE-2026-33636: out-of-bounds read/write in the palette expansion on ARM Neon can lead to information leak and crashes (bsc#1260755)
  * libpng16-CVE-2026-33636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1776340800">- added patches
  CVE-2026-34757: Information disclosure and data corruption via use-after-free vulnerability [bsc#1261957]
  * libpng16-CVE-2026-34757.patch</changelog>
</package>
<package pkgid="c5f3f31c40bc85594d157e371720471af1500aee6d062c7505d0aadf14852c05" name="libpng16-devel" arch="x86_64">
  <version epoch="0" ver="1.6.40" rel="150600.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1517400000">- check with -j1</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- %{libname} package provides libpng = %{version} again
  [bsc#1079342]</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update:
  * CVE-2018-13785 [bsc#1100687]
    + libpng16-CVE-2018-13785.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546257600">- update to 1.6.36:
  Replaced the remaining uses of png_size_t with size_t (Cosmin)
    Fixed the calculation of row_factor in png_check_chunk_length
    (reported by Thuan Pham in SourceForge issue #278)
    Added missing parentheses to a macro definition
    (suggested by "irwir" in GitHub issue #216)
    Optimized png_do_expand_palette for ARM processors.
    Improved performance by around 10-22% on a recent ARM Chromebook.
    (Contributed by Richard Townsend, ARM Holdings)
    Fixed manipulation of machine-specific optimization options.
    (Contributed by Vicki Pfau)
    Used memcpy instead of manual pointer arithmetic on Intel SSE2.
    (Contributed by Samuel Williams)
    Fixed build errors with MSVC on ARM64.
    (Contributed by Zhijie Liang)
    Fixed detection of libm in CMakeLists.
    (Contributed by Cameron Cawley)
    Fixed incorrect creation of pkg-config file in CMakeLists.
    (Contributed by Kyle Bentley)
    Fixed the CMake build on Windows MSYS by avoiding symlinks.
    Fixed a build warning on OpenBSD.
    (Contributed by Theo Buehler)
    Fixed various typos in comments.
    (Contributed by "luz.paz")
    Raised the minimum required CMake version from 3.0.2 to 3.1.
    Removed yet more of the vestigial support for pre-ANSI C compilers.
    Removed ancient makefiles for ancient systems that have been broken
    across all previous libpng-1.6.x versions.
    Removed the Y2K compliance statement and the export control
    information.
    Applied various code style and documentation fixes.
- removed patches
  * libpng16-CVE-2018-13785.patch (upstreamed)
- cannot find upstream tarball signature, asked upstream for
  clarification</changelog>
  <changelog author="pgajdos@suse.com" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp</changelog>
  <changelog author="pgajdos@suse.com" date="1548676800">- fix arm build [bsc#1121829]
  + libpng-arm-free.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- version update to 1.6.37
  Fixed a use-after-free vulnerability (CVE-2019-7317) in png_image_free.
  Fixed a memory leak in the ARM NEON implementation of png_do_expand_palette.
  Fixed a memory leak in pngtest.c.
  Fixed two vulnerabilities (CVE-2018-14048, CVE-2018-14550) in
    contrib/pngminus; refactor.
  Changed the license of contrib/pngminus to MIT; refresh makefile and docs.
    (Contributed by Willem van Schaik)
  Added makefiles for AddressSanitizer-enabled builds.
- deleted patches
  - libpng-arm-free.patch (upstreamed)
- fixes [bsc#1121624] CVE-2019-6129 and [bsc#1124211] CVE-2019-7317</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- make check actually works under asan</changelog>
  <changelog author="l.lunak@centrum.cz" date="1615464000">- enable hardware optimizations (such as SSE)</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- install rpm macros in %{_rpmmacrodir} [bsc#1185661]
- call spec-cleaner</changelog>
  <changelog author="meissner@suse.com" date="1651665600">- switch source url to https</changelog>
  <changelog author="dmueller@suse.com" date="1663329600">- update to 1.6.38:
  * Added configurations and scripts for continuous integration.
  * Fixed various errors in the handling of tRNS, hIST and eXIf.
  * Implemented many stability improvements across all platforms.
  * Updated the internal documentation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1669377600">- Update to version 1.6.39:
  * cmake: Default to PNG_ARM_NEON=off for arm targets.
  + Turn large PNG chunks into benign errors.
  + Update, rename and clean up various scripts.
  + tools: Fix a buffer overflow involving a file name in pngfix.
  + tools: Fix a memory leak in pngcp.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- switch to pkgconfig(zlib) to allow alternative providers as well
- build with glibc hwcaps optimized libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252801">- Fix build: some*.la files are symlinks. Adjust spec to use
  find -type f,l</changelog>
  <changelog author="fcrozat@suse.com" date="1681992000">- Fix license tag to libpng-2.0.</changelog>
  <changelog author="pgajdos@suse.com" date="1684152000">- do not use NEON instructions [bsc#1211176]</changelog>
  <changelog author="mpluskal@suse.com" date="1687435200">- Update to version 1.6.40:
  * Fixed the eXIf chunk multiplicity checks.
  * Fixed a memory leak in pCAL processing.
  * Corrected the validity report about tRNS inside png_get_valid().
  * Fixed various build issues on *BSD, Mac and Windows.
  * Updated the configurations and the scripts for continuous integration.
  * Cleaned up the code, the build scripts, and the documentation.</changelog>
  <changelog author="pgajdos@suse.com" date="1764676800">- security update
- added patches
  CVE-2025-64505 [bsc#1254157], heap buffer over-read in `png_do_quantize` via malformed palette index
  * libpng16-CVE-2025-64505.patch
  CVE-2025-64506 [bsc#1254158], heap buffer over-read in `png_write_image_8bit` with 8-bit input and `convert_to_8bit` enabled
  * libpng16-CVE-2025-64506.patch
  CVE-2025-64720 [bsc#1254159], buffer overflow in `png_image_read_composite` via incorrect palette premultiplication
  * libpng16-CVE-2025-64720.patch
  CVE-2025-65018 [bsc#1254160], heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`
  * libpng16-CVE-2025-65018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1764936000">- security update
- added patches
  CVE-2025-66293 [bsc#1254480], LIBPNG out-of-bounds read in png_image_read_composite
  * libpng16-CVE-2025-66293-1.patch
  * libpng16-CVE-2025-66293-2.patch</changelog>
</package>
<package pkgid="dfc86a1cdb3d527636abe0d7a69a3bae7db236b6cefdef0952d475a867dda79f" name="libpng16-devel" arch="x86_64">
  <version epoch="0" ver="1.6.40" rel="150600.3.6.1"/>
  <changelog author="pgajdos@suse.com" date="1517832000">- %{libname} package provides libpng = %{version} again
  [bsc#1079342]</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update:
  * CVE-2018-13785 [bsc#1100687]
    + libpng16-CVE-2018-13785.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546257600">- update to 1.6.36:
  Replaced the remaining uses of png_size_t with size_t (Cosmin)
    Fixed the calculation of row_factor in png_check_chunk_length
    (reported by Thuan Pham in SourceForge issue #278)
    Added missing parentheses to a macro definition
    (suggested by "irwir" in GitHub issue #216)
    Optimized png_do_expand_palette for ARM processors.
    Improved performance by around 10-22% on a recent ARM Chromebook.
    (Contributed by Richard Townsend, ARM Holdings)
    Fixed manipulation of machine-specific optimization options.
    (Contributed by Vicki Pfau)
    Used memcpy instead of manual pointer arithmetic on Intel SSE2.
    (Contributed by Samuel Williams)
    Fixed build errors with MSVC on ARM64.
    (Contributed by Zhijie Liang)
    Fixed detection of libm in CMakeLists.
    (Contributed by Cameron Cawley)
    Fixed incorrect creation of pkg-config file in CMakeLists.
    (Contributed by Kyle Bentley)
    Fixed the CMake build on Windows MSYS by avoiding symlinks.
    Fixed a build warning on OpenBSD.
    (Contributed by Theo Buehler)
    Fixed various typos in comments.
    (Contributed by "luz.paz")
    Raised the minimum required CMake version from 3.0.2 to 3.1.
    Removed yet more of the vestigial support for pre-ANSI C compilers.
    Removed ancient makefiles for ancient systems that have been broken
    across all previous libpng-1.6.x versions.
    Removed the Y2K compliance statement and the export control
    information.
    Applied various code style and documentation fixes.
- removed patches
  * libpng16-CVE-2018-13785.patch (upstreamed)
- cannot find upstream tarball signature, asked upstream for
  clarification</changelog>
  <changelog author="pgajdos@suse.com" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp</changelog>
  <changelog author="pgajdos@suse.com" date="1548676800">- fix arm build [bsc#1121829]
  + libpng-arm-free.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- version update to 1.6.37
  Fixed a use-after-free vulnerability (CVE-2019-7317) in png_image_free.
  Fixed a memory leak in the ARM NEON implementation of png_do_expand_palette.
  Fixed a memory leak in pngtest.c.
  Fixed two vulnerabilities (CVE-2018-14048, CVE-2018-14550) in
    contrib/pngminus; refactor.
  Changed the license of contrib/pngminus to MIT; refresh makefile and docs.
    (Contributed by Willem van Schaik)
  Added makefiles for AddressSanitizer-enabled builds.
- deleted patches
  - libpng-arm-free.patch (upstreamed)
- fixes [bsc#1121624] CVE-2019-6129 and [bsc#1124211] CVE-2019-7317</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- make check actually works under asan</changelog>
  <changelog author="l.lunak@centrum.cz" date="1615464000">- enable hardware optimizations (such as SSE)</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- install rpm macros in %{_rpmmacrodir} [bsc#1185661]
- call spec-cleaner</changelog>
  <changelog author="meissner@suse.com" date="1651665600">- switch source url to https</changelog>
  <changelog author="dmueller@suse.com" date="1663329600">- update to 1.6.38:
  * Added configurations and scripts for continuous integration.
  * Fixed various errors in the handling of tRNS, hIST and eXIf.
  * Implemented many stability improvements across all platforms.
  * Updated the internal documentation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1669377600">- Update to version 1.6.39:
  * cmake: Default to PNG_ARM_NEON=off for arm targets.
  + Turn large PNG chunks into benign errors.
  + Update, rename and clean up various scripts.
  + tools: Fix a buffer overflow involving a file name in pngfix.
  + tools: Fix a memory leak in pngcp.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- switch to pkgconfig(zlib) to allow alternative providers as well
- build with glibc hwcaps optimized libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252801">- Fix build: some*.la files are symlinks. Adjust spec to use
  find -type f,l</changelog>
  <changelog author="fcrozat@suse.com" date="1681992000">- Fix license tag to libpng-2.0.</changelog>
  <changelog author="pgajdos@suse.com" date="1684152000">- do not use NEON instructions [bsc#1211176]</changelog>
  <changelog author="mpluskal@suse.com" date="1687435200">- Update to version 1.6.40:
  * Fixed the eXIf chunk multiplicity checks.
  * Fixed a memory leak in pCAL processing.
  * Corrected the validity report about tRNS inside png_get_valid().
  * Fixed various build issues on *BSD, Mac and Windows.
  * Updated the configurations and the scripts for continuous integration.
  * Cleaned up the code, the build scripts, and the documentation.</changelog>
  <changelog author="pgajdos@suse.com" date="1764676800">- security update
- added patches
  CVE-2025-64505 [bsc#1254157], heap buffer over-read in `png_do_quantize` via malformed palette index
  * libpng16-CVE-2025-64505.patch
  CVE-2025-64506 [bsc#1254158], heap buffer over-read in `png_write_image_8bit` with 8-bit input and `convert_to_8bit` enabled
  * libpng16-CVE-2025-64506.patch
  CVE-2025-64720 [bsc#1254159], buffer overflow in `png_image_read_composite` via incorrect palette premultiplication
  * libpng16-CVE-2025-64720.patch
  CVE-2025-65018 [bsc#1254160], heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`
  * libpng16-CVE-2025-65018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1764936000">- security update
- added patches
  CVE-2025-66293 [bsc#1254480], LIBPNG out-of-bounds read in png_image_read_composite
  * libpng16-CVE-2025-66293-1.patch
  * libpng16-CVE-2025-66293-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1768478400">- security update
- added patches
  CVE-2026-22695 [bsc#1256525], Heap buffer over-read in png_image_finish_read
  * libpng16-CVE-2026-22695.patch
  CVE-2026-22801 [bsc#1256526], Integer truncation causing heap buffer over-read in png_image_write_*
  * libpng16-CVE-2026-22801.patch</changelog>
</package>
<package pkgid="b9b9864d4542eb73f3f8a47d61a831d5a46387e9e6baf85f871f2fc932c1042e" name="libpng16-devel" arch="x86_64">
  <version epoch="0" ver="1.6.40" rel="150600.3.9.1"/>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update:
  * CVE-2018-13785 [bsc#1100687]
    + libpng16-CVE-2018-13785.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546257600">- update to 1.6.36:
  Replaced the remaining uses of png_size_t with size_t (Cosmin)
    Fixed the calculation of row_factor in png_check_chunk_length
    (reported by Thuan Pham in SourceForge issue #278)
    Added missing parentheses to a macro definition
    (suggested by "irwir" in GitHub issue #216)
    Optimized png_do_expand_palette for ARM processors.
    Improved performance by around 10-22% on a recent ARM Chromebook.
    (Contributed by Richard Townsend, ARM Holdings)
    Fixed manipulation of machine-specific optimization options.
    (Contributed by Vicki Pfau)
    Used memcpy instead of manual pointer arithmetic on Intel SSE2.
    (Contributed by Samuel Williams)
    Fixed build errors with MSVC on ARM64.
    (Contributed by Zhijie Liang)
    Fixed detection of libm in CMakeLists.
    (Contributed by Cameron Cawley)
    Fixed incorrect creation of pkg-config file in CMakeLists.
    (Contributed by Kyle Bentley)
    Fixed the CMake build on Windows MSYS by avoiding symlinks.
    Fixed a build warning on OpenBSD.
    (Contributed by Theo Buehler)
    Fixed various typos in comments.
    (Contributed by "luz.paz")
    Raised the minimum required CMake version from 3.0.2 to 3.1.
    Removed yet more of the vestigial support for pre-ANSI C compilers.
    Removed ancient makefiles for ancient systems that have been broken
    across all previous libpng-1.6.x versions.
    Removed the Y2K compliance statement and the export control
    information.
    Applied various code style and documentation fixes.
- removed patches
  * libpng16-CVE-2018-13785.patch (upstreamed)
- cannot find upstream tarball signature, asked upstream for
  clarification</changelog>
  <changelog author="pgajdos@suse.com" date="1547467200">- asan_build: build ASAN included
- debug_build: build more suitable for debugging, install pngcp</changelog>
  <changelog author="pgajdos@suse.com" date="1548676800">- fix arm build [bsc#1121829]
  + libpng-arm-free.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1555329600">- version update to 1.6.37
  Fixed a use-after-free vulnerability (CVE-2019-7317) in png_image_free.
  Fixed a memory leak in the ARM NEON implementation of png_do_expand_palette.
  Fixed a memory leak in pngtest.c.
  Fixed two vulnerabilities (CVE-2018-14048, CVE-2018-14550) in
    contrib/pngminus; refactor.
  Changed the license of contrib/pngminus to MIT; refresh makefile and docs.
    (Contributed by Willem van Schaik)
  Added makefiles for AddressSanitizer-enabled builds.
- deleted patches
  - libpng-arm-free.patch (upstreamed)
- fixes [bsc#1121624] CVE-2019-6129 and [bsc#1124211] CVE-2019-7317</changelog>
  <changelog author="pgajdos@suse.com" date="1555502400">- make check actually works under asan</changelog>
  <changelog author="l.lunak@centrum.cz" date="1615464000">- enable hardware optimizations (such as SSE)</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- install rpm macros in %{_rpmmacrodir} [bsc#1185661]
- call spec-cleaner</changelog>
  <changelog author="meissner@suse.com" date="1651665600">- switch source url to https</changelog>
  <changelog author="dmueller@suse.com" date="1663329600">- update to 1.6.38:
  * Added configurations and scripts for continuous integration.
  * Fixed various errors in the handling of tRNS, hIST and eXIf.
  * Implemented many stability improvements across all platforms.
  * Updated the internal documentation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1669377600">- Update to version 1.6.39:
  * cmake: Default to PNG_ARM_NEON=off for arm targets.
  + Turn large PNG chunks into benign errors.
  + Update, rename and clean up various scripts.
  + tools: Fix a buffer overflow involving a file name in pngfix.
  + tools: Fix a memory leak in pngcp.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- switch to pkgconfig(zlib) to allow alternative providers as well
- build with glibc hwcaps optimized libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252801">- Fix build: some*.la files are symlinks. Adjust spec to use
  find -type f,l</changelog>
  <changelog author="fcrozat@suse.com" date="1681992000">- Fix license tag to libpng-2.0.</changelog>
  <changelog author="pgajdos@suse.com" date="1684152000">- do not use NEON instructions [bsc#1211176]</changelog>
  <changelog author="mpluskal@suse.com" date="1687435200">- Update to version 1.6.40:
  * Fixed the eXIf chunk multiplicity checks.
  * Fixed a memory leak in pCAL processing.
  * Corrected the validity report about tRNS inside png_get_valid().
  * Fixed various build issues on *BSD, Mac and Windows.
  * Updated the configurations and the scripts for continuous integration.
  * Cleaned up the code, the build scripts, and the documentation.</changelog>
  <changelog author="pgajdos@suse.com" date="1764676800">- security update
- added patches
  CVE-2025-64505 [bsc#1254157], heap buffer over-read in `png_do_quantize` via malformed palette index
  * libpng16-CVE-2025-64505.patch
  CVE-2025-64506 [bsc#1254158], heap buffer over-read in `png_write_image_8bit` with 8-bit input and `convert_to_8bit` enabled
  * libpng16-CVE-2025-64506.patch
  CVE-2025-64720 [bsc#1254159], buffer overflow in `png_image_read_composite` via incorrect palette premultiplication
  * libpng16-CVE-2025-64720.patch
  CVE-2025-65018 [bsc#1254160], heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`
  * libpng16-CVE-2025-65018.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1764936000">- security update
- added patches
  CVE-2025-66293 [bsc#1254480], LIBPNG out-of-bounds read in png_image_read_composite
  * libpng16-CVE-2025-66293-1.patch
  * libpng16-CVE-2025-66293-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1768478400">- security update
- added patches
  CVE-2026-22695 [bsc#1256525], Heap buffer over-read in png_image_finish_read
  * libpng16-CVE-2026-22695.patch
  CVE-2026-22801 [bsc#1256526], Integer truncation causing heap buffer over-read in png_image_write_*
  * libpng16-CVE-2026-22801.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1769601600">- security update
- added patches
  CVE-2025-28162 [bsc#1257364], memory leaks when running `pngimage`
  CVE-2025-28164 [bsc#1257365], memory leaks when running `pngimage`
  * libpng16-CVE-2025-28162,28164.patch</changelog>
</package>
<package pkgid="6499c54c026f2163389465a03b41735a0c550b6cde8481f40f93e9fd01d5d662" name="libpolkit-agent-1-0" arch="x86_64">
  <version epoch="0" ver="121" rel="150500.3.11.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1596196800">- Update to version 0.117:
  + Activated Gitlab CI.
  + Updated dependency to mozjs68.
  + Memory management fixes.
  + Updated translations.
- Replace pkgconfig(mozjs-60) for pkgconfig(mozjs-68)
  BuildRequires following upstreams port.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1603454400">- Update to version 0.118:
  + Updated dependency to mozjs78.
  + Tarball fixes.
- Replace pkgconfig(mozjs-68) for pkgconfig(mozjs-78)
  BuildRequires following upstreams port.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1609243200">- also set libprivdir during build, otherwhise systemd and D-Bus service files
  contain the wrong path and we'll get runtime errors.</changelog>
  <changelog author="kukuk@suse.com" date="1615464000">- Move /etc/dbus-1/system.d to /usr/share/dbus-1/system.d, the
  first location is only for admin changes
- Move pam configuration to /usr/etc/pam.d</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com" date="1625659200">- Move /etc/polkit-1/rules.d/50-default.rules to
  /usr/share/polkit-1/rules.d/50-default.rules. The first location
  is only for admin changes.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626609600">- Change to using systemd-sysusers
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Fix 50-default.rules file-parent-ownership-mismatch warning
- Remove --with-pic, no effect with --disable-static</changelog>
  <changelog author="meissner@suse.com" date="1634731200">- fork libpolkit0 package into libpolkit-agent-1-0 and libpolkit-gobject-1-0
  as mandated. bsc#1191781</changelog>
  <changelog author="dmueller@suse.com" date="1638792000">- update to 0.120:
  * transition from Intltool to gettext
  * several tarball, meson and pipeline fixups
  * Portuguese translation
  * Romanian translation
  * meson build system added
  * CVE-2021-3560 mitigation
  * properties in text listener
  * typos fixups
  * Update Hungarian translation
- drop CVE-2021-3560.patch  (upstream)</changelog>
  <changelog author="meissner@suse.com" date="1643112000">- Fixed pkexec Local Privilege Escalation aka pwnkit (CVE-2021-4034 bsc#1194568)
  CVE-2021-4034-pkexec-fix.patch</changelog>
  <changelog author="fvogt@suse.com" date="1643198400">- Switch from mozjs to duktape:
  * Add duktape-support.patch</changelog>
  <changelog author="meissner@suse.com" date="1645531200">- Fixed denial of service via file descriptor leak (bsc#1195542 CVE-2021-4115)
  0001-CVE-2021-4115-GHSL-2021-077-fix.patch</changelog>
  <changelog author="meissner@suse.com" date="1658145600">- split out pkexec into seperate package to make system hardening
  easier (to avoid installing it jsc#PED-132 jsc#PED-148).</changelog>
  <changelog author="meissner@suse.com" date="1659528000">- add split-provides for polkit:/usr/bin/pkexec. (bsc#1202070)</changelog>
  <changelog author="kukuk@suse.com" date="1659960000">- Use %_pam_vendordir</changelog>
  <changelog author="luc14n0@opensuse.org" date="1660046400">- Update to version 121:
  + Addition of duktape as a JS engine backend.
  + Other small fixes and improvements. For more details, visit:
    gitlab.freedesktop.org/polkit/polkit/-/blob/121/NEWS.md
  + Updated translations.
- Drop merged-upstream patches:
  + CVE-2021-4034-pkexec-fix.patch;
  + 0001-CVE-2021-4115-GHSL-2021-077-fix.patch;
  + duktape-support.patch;
  + pkexec.patch.
- Replace Intltool with Gettext as a build requirement following
  the migration from last release (0.120).
- Add Meson as a build requirement while dropping Libtool and
  replace all Autotools macros with Meson ones. And pass the
  following options to Meson: session_tracking=libsystemd-login;
  systemdsystemunitdir=%{_unitdir}; os_type=suse;
  pam_module_dir=%{_pam_moduledir}; pam_prefix=%{_pam_vendordir};
  examples=true; tests=true; gtk_doc=true; man=true and
  js_engine=duktape.
- Drop no longer needed Libtool as a build requirement, following
  Autotools replacement.
- Add explicit pkgconfig module build requirements for glib-2.0 and
  gobject-2.0 that are searched by the build scripts. They were
  already being pulled by their siblings [pkgconfig(gio-2.0) and
  pkgconfig(gio-unix-2.0)].
- Drop conditional macro, which was wrapping "BuildArch: noarch"
  for the doc subpackage, based on long gone EOLed (open)SUSE
  release (11.2).
- Add missing 'Requires(post): permissions' for the pkexec
  subpackage.
- Add python3-dbus-python and python3-python-dbusmock as build
  requirements in order to run test in the check section.
- Add polkit-fix-pam-prefix.patch to use the value of pam_prefix
  Meson option, like it was designed to, rather than hard-coded
  path for pam configuration files.
- Remove unneeded executable bit from 50-default.rules file.</changelog>
  <changelog author="meissner@suse.com" date="1663243200">- obsolete libpolkit0 also from baselibs.</changelog>
  <changelog author="jsegitz@suse.com" date="1680091200">- Change permissions for rules folders (bsc#1209282)</changelog>
  <changelog author="meissner@suse.com" date="1752580800">- CVE-2025-7519: Fixed that a XML policy file with a large number of
  nested elements may lead to out-of-bounds write (bsc#1246472)
  added 0001-Nested-.policy-files-cause-xml-parsing-overflow-lead.patch</changelog>
  <changelog author="meissner@suse.com" date="1774612800">- avoid reading endless amounts of memory (CVE-2026-4897 bsc#1260859)
  0001-CVE-2026-4897-getline-string-overflow.patch</changelog>
</package>
<package pkgid="f3292fc3812468bb5b5c2af04fb5a05b786fd6508fbda240da0e78032fe31b25" name="libpolkit-agent-1-0" arch="x86_64">
  <version epoch="0" ver="121" rel="150500.3.6.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1596196800">- Update to version 0.117:
  + Activated Gitlab CI.
  + Updated dependency to mozjs68.
  + Memory management fixes.
  + Updated translations.
- Replace pkgconfig(mozjs-60) for pkgconfig(mozjs-68)
  BuildRequires following upstreams port.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1603454400">- Update to version 0.118:
  + Updated dependency to mozjs78.
  + Tarball fixes.
- Replace pkgconfig(mozjs-68) for pkgconfig(mozjs-78)
  BuildRequires following upstreams port.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1609243200">- also set libprivdir during build, otherwhise systemd and D-Bus service files
  contain the wrong path and we'll get runtime errors.</changelog>
  <changelog author="kukuk@suse.com" date="1615464000">- Move /etc/dbus-1/system.d to /usr/share/dbus-1/system.d, the
  first location is only for admin changes
- Move pam configuration to /usr/etc/pam.d</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com" date="1625659200">- Move /etc/polkit-1/rules.d/50-default.rules to
  /usr/share/polkit-1/rules.d/50-default.rules. The first location
  is only for admin changes.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626609600">- Change to using systemd-sysusers
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Fix 50-default.rules file-parent-ownership-mismatch warning
- Remove --with-pic, no effect with --disable-static</changelog>
  <changelog author="meissner@suse.com" date="1634731200">- fork libpolkit0 package into libpolkit-agent-1-0 and libpolkit-gobject-1-0
  as mandated. bsc#1191781</changelog>
  <changelog author="dmueller@suse.com" date="1638792000">- update to 0.120:
  * transition from Intltool to gettext
  * several tarball, meson and pipeline fixups
  * Portuguese translation
  * Romanian translation
  * meson build system added
  * CVE-2021-3560 mitigation
  * properties in text listener
  * typos fixups
  * Update Hungarian translation
- drop CVE-2021-3560.patch  (upstream)</changelog>
  <changelog author="meissner@suse.com" date="1643112000">- Fixed pkexec Local Privilege Escalation aka pwnkit (CVE-2021-4034 bsc#1194568)
  CVE-2021-4034-pkexec-fix.patch</changelog>
  <changelog author="fvogt@suse.com" date="1643198400">- Switch from mozjs to duktape:
  * Add duktape-support.patch</changelog>
  <changelog author="meissner@suse.com" date="1645531200">- Fixed denial of service via file descriptor leak (bsc#1195542 CVE-2021-4115)
  0001-CVE-2021-4115-GHSL-2021-077-fix.patch</changelog>
  <changelog author="meissner@suse.com" date="1658145600">- split out pkexec into seperate package to make system hardening
  easier (to avoid installing it jsc#PED-132 jsc#PED-148).</changelog>
  <changelog author="meissner@suse.com" date="1659528000">- add split-provides for polkit:/usr/bin/pkexec. (bsc#1202070)</changelog>
  <changelog author="kukuk@suse.com" date="1659960000">- Use %_pam_vendordir</changelog>
  <changelog author="luc14n0@opensuse.org" date="1660046400">- Update to version 121:
  + Addition of duktape as a JS engine backend.
  + Other small fixes and improvements. For more details, visit:
    gitlab.freedesktop.org/polkit/polkit/-/blob/121/NEWS.md
  + Updated translations.
- Drop merged-upstream patches:
  + CVE-2021-4034-pkexec-fix.patch;
  + 0001-CVE-2021-4115-GHSL-2021-077-fix.patch;
  + duktape-support.patch;
  + pkexec.patch.
- Replace Intltool with Gettext as a build requirement following
  the migration from last release (0.120).
- Add Meson as a build requirement while dropping Libtool and
  replace all Autotools macros with Meson ones. And pass the
  following options to Meson: session_tracking=libsystemd-login;
  systemdsystemunitdir=%{_unitdir}; os_type=suse;
  pam_module_dir=%{_pam_moduledir}; pam_prefix=%{_pam_vendordir};
  examples=true; tests=true; gtk_doc=true; man=true and
  js_engine=duktape.
- Drop no longer needed Libtool as a build requirement, following
  Autotools replacement.
- Add explicit pkgconfig module build requirements for glib-2.0 and
  gobject-2.0 that are searched by the build scripts. They were
  already being pulled by their siblings [pkgconfig(gio-2.0) and
  pkgconfig(gio-unix-2.0)].
- Drop conditional macro, which was wrapping "BuildArch: noarch"
  for the doc subpackage, based on long gone EOLed (open)SUSE
  release (11.2).
- Add missing 'Requires(post): permissions' for the pkexec
  subpackage.
- Add python3-dbus-python and python3-python-dbusmock as build
  requirements in order to run test in the check section.
- Add polkit-fix-pam-prefix.patch to use the value of pam_prefix
  Meson option, like it was designed to, rather than hard-coded
  path for pam configuration files.
- Remove unneeded executable bit from 50-default.rules file.</changelog>
  <changelog author="meissner@suse.com" date="1663243200">- obsolete libpolkit0 also from baselibs.</changelog>
  <changelog author="jsegitz@suse.com" date="1680091200">- Change permissions for rules folders (bsc#1209282)</changelog>
  <changelog author="meissner@suse.com" date="1752580800">- CVE-2025-7519: Fixed that a XML policy file with a large number of
  nested elements may lead to out-of-bounds write (bsc#1246472)
  added 0001-Nested-.policy-files-cause-xml-parsing-overflow-lead.patch</changelog>
</package>
<package pkgid="477b5a79883e1676c40c51aae052733388b133b5d6aef0a013ed696e6cabeb82" name="libpolkit-gobject-1-0" arch="x86_64">
  <version epoch="0" ver="121" rel="150500.3.11.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1596196800">- Update to version 0.117:
  + Activated Gitlab CI.
  + Updated dependency to mozjs68.
  + Memory management fixes.
  + Updated translations.
- Replace pkgconfig(mozjs-60) for pkgconfig(mozjs-68)
  BuildRequires following upstreams port.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1603454400">- Update to version 0.118:
  + Updated dependency to mozjs78.
  + Tarball fixes.
- Replace pkgconfig(mozjs-68) for pkgconfig(mozjs-78)
  BuildRequires following upstreams port.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1609243200">- also set libprivdir during build, otherwhise systemd and D-Bus service files
  contain the wrong path and we'll get runtime errors.</changelog>
  <changelog author="kukuk@suse.com" date="1615464000">- Move /etc/dbus-1/system.d to /usr/share/dbus-1/system.d, the
  first location is only for admin changes
- Move pam configuration to /usr/etc/pam.d</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com" date="1625659200">- Move /etc/polkit-1/rules.d/50-default.rules to
  /usr/share/polkit-1/rules.d/50-default.rules. The first location
  is only for admin changes.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626609600">- Change to using systemd-sysusers
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Fix 50-default.rules file-parent-ownership-mismatch warning
- Remove --with-pic, no effect with --disable-static</changelog>
  <changelog author="meissner@suse.com" date="1634731200">- fork libpolkit0 package into libpolkit-agent-1-0 and libpolkit-gobject-1-0
  as mandated. bsc#1191781</changelog>
  <changelog author="dmueller@suse.com" date="1638792000">- update to 0.120:
  * transition from Intltool to gettext
  * several tarball, meson and pipeline fixups
  * Portuguese translation
  * Romanian translation
  * meson build system added
  * CVE-2021-3560 mitigation
  * properties in text listener
  * typos fixups
  * Update Hungarian translation
- drop CVE-2021-3560.patch  (upstream)</changelog>
  <changelog author="meissner@suse.com" date="1643112000">- Fixed pkexec Local Privilege Escalation aka pwnkit (CVE-2021-4034 bsc#1194568)
  CVE-2021-4034-pkexec-fix.patch</changelog>
  <changelog author="fvogt@suse.com" date="1643198400">- Switch from mozjs to duktape:
  * Add duktape-support.patch</changelog>
  <changelog author="meissner@suse.com" date="1645531200">- Fixed denial of service via file descriptor leak (bsc#1195542 CVE-2021-4115)
  0001-CVE-2021-4115-GHSL-2021-077-fix.patch</changelog>
  <changelog author="meissner@suse.com" date="1658145600">- split out pkexec into seperate package to make system hardening
  easier (to avoid installing it jsc#PED-132 jsc#PED-148).</changelog>
  <changelog author="meissner@suse.com" date="1659528000">- add split-provides for polkit:/usr/bin/pkexec. (bsc#1202070)</changelog>
  <changelog author="kukuk@suse.com" date="1659960000">- Use %_pam_vendordir</changelog>
  <changelog author="luc14n0@opensuse.org" date="1660046400">- Update to version 121:
  + Addition of duktape as a JS engine backend.
  + Other small fixes and improvements. For more details, visit:
    gitlab.freedesktop.org/polkit/polkit/-/blob/121/NEWS.md
  + Updated translations.
- Drop merged-upstream patches:
  + CVE-2021-4034-pkexec-fix.patch;
  + 0001-CVE-2021-4115-GHSL-2021-077-fix.patch;
  + duktape-support.patch;
  + pkexec.patch.
- Replace Intltool with Gettext as a build requirement following
  the migration from last release (0.120).
- Add Meson as a build requirement while dropping Libtool and
  replace all Autotools macros with Meson ones. And pass the
  following options to Meson: session_tracking=libsystemd-login;
  systemdsystemunitdir=%{_unitdir}; os_type=suse;
  pam_module_dir=%{_pam_moduledir}; pam_prefix=%{_pam_vendordir};
  examples=true; tests=true; gtk_doc=true; man=true and
  js_engine=duktape.
- Drop no longer needed Libtool as a build requirement, following
  Autotools replacement.
- Add explicit pkgconfig module build requirements for glib-2.0 and
  gobject-2.0 that are searched by the build scripts. They were
  already being pulled by their siblings [pkgconfig(gio-2.0) and
  pkgconfig(gio-unix-2.0)].
- Drop conditional macro, which was wrapping "BuildArch: noarch"
  for the doc subpackage, based on long gone EOLed (open)SUSE
  release (11.2).
- Add missing 'Requires(post): permissions' for the pkexec
  subpackage.
- Add python3-dbus-python and python3-python-dbusmock as build
  requirements in order to run test in the check section.
- Add polkit-fix-pam-prefix.patch to use the value of pam_prefix
  Meson option, like it was designed to, rather than hard-coded
  path for pam configuration files.
- Remove unneeded executable bit from 50-default.rules file.</changelog>
  <changelog author="meissner@suse.com" date="1663243200">- obsolete libpolkit0 also from baselibs.</changelog>
  <changelog author="jsegitz@suse.com" date="1680091200">- Change permissions for rules folders (bsc#1209282)</changelog>
  <changelog author="meissner@suse.com" date="1752580800">- CVE-2025-7519: Fixed that a XML policy file with a large number of
  nested elements may lead to out-of-bounds write (bsc#1246472)
  added 0001-Nested-.policy-files-cause-xml-parsing-overflow-lead.patch</changelog>
  <changelog author="meissner@suse.com" date="1774612800">- avoid reading endless amounts of memory (CVE-2026-4897 bsc#1260859)
  0001-CVE-2026-4897-getline-string-overflow.patch</changelog>
</package>
<package pkgid="323a8c3e87d55cec03f8d95a8ada79c425060f4a27427d48319b0803715b8836" name="libpolkit-gobject-1-0" arch="x86_64">
  <version epoch="0" ver="121" rel="150500.3.6.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1596196800">- Update to version 0.117:
  + Activated Gitlab CI.
  + Updated dependency to mozjs68.
  + Memory management fixes.
  + Updated translations.
- Replace pkgconfig(mozjs-60) for pkgconfig(mozjs-68)
  BuildRequires following upstreams port.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1603454400">- Update to version 0.118:
  + Updated dependency to mozjs78.
  + Tarball fixes.
- Replace pkgconfig(mozjs-68) for pkgconfig(mozjs-78)
  BuildRequires following upstreams port.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1609243200">- also set libprivdir during build, otherwhise systemd and D-Bus service files
  contain the wrong path and we'll get runtime errors.</changelog>
  <changelog author="kukuk@suse.com" date="1615464000">- Move /etc/dbus-1/system.d to /usr/share/dbus-1/system.d, the
  first location is only for admin changes
- Move pam configuration to /usr/etc/pam.d</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
  <changelog author="Stefan Schubert &lt;schubi@suse.com" date="1625659200">- Move /etc/polkit-1/rules.d/50-default.rules to
  /usr/share/polkit-1/rules.d/50-default.rules. The first location
  is only for admin changes.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626609600">- Change to using systemd-sysusers
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Fix 50-default.rules file-parent-ownership-mismatch warning
- Remove --with-pic, no effect with --disable-static</changelog>
  <changelog author="meissner@suse.com" date="1634731200">- fork libpolkit0 package into libpolkit-agent-1-0 and libpolkit-gobject-1-0
  as mandated. bsc#1191781</changelog>
  <changelog author="dmueller@suse.com" date="1638792000">- update to 0.120:
  * transition from Intltool to gettext
  * several tarball, meson and pipeline fixups
  * Portuguese translation
  * Romanian translation
  * meson build system added
  * CVE-2021-3560 mitigation
  * properties in text listener
  * typos fixups
  * Update Hungarian translation
- drop CVE-2021-3560.patch  (upstream)</changelog>
  <changelog author="meissner@suse.com" date="1643112000">- Fixed pkexec Local Privilege Escalation aka pwnkit (CVE-2021-4034 bsc#1194568)
  CVE-2021-4034-pkexec-fix.patch</changelog>
  <changelog author="fvogt@suse.com" date="1643198400">- Switch from mozjs to duktape:
  * Add duktape-support.patch</changelog>
  <changelog author="meissner@suse.com" date="1645531200">- Fixed denial of service via file descriptor leak (bsc#1195542 CVE-2021-4115)
  0001-CVE-2021-4115-GHSL-2021-077-fix.patch</changelog>
  <changelog author="meissner@suse.com" date="1658145600">- split out pkexec into seperate package to make system hardening
  easier (to avoid installing it jsc#PED-132 jsc#PED-148).</changelog>
  <changelog author="meissner@suse.com" date="1659528000">- add split-provides for polkit:/usr/bin/pkexec. (bsc#1202070)</changelog>
  <changelog author="kukuk@suse.com" date="1659960000">- Use %_pam_vendordir</changelog>
  <changelog author="luc14n0@opensuse.org" date="1660046400">- Update to version 121:
  + Addition of duktape as a JS engine backend.
  + Other small fixes and improvements. For more details, visit:
    gitlab.freedesktop.org/polkit/polkit/-/blob/121/NEWS.md
  + Updated translations.
- Drop merged-upstream patches:
  + CVE-2021-4034-pkexec-fix.patch;
  + 0001-CVE-2021-4115-GHSL-2021-077-fix.patch;
  + duktape-support.patch;
  + pkexec.patch.
- Replace Intltool with Gettext as a build requirement following
  the migration from last release (0.120).
- Add Meson as a build requirement while dropping Libtool and
  replace all Autotools macros with Meson ones. And pass the
  following options to Meson: session_tracking=libsystemd-login;
  systemdsystemunitdir=%{_unitdir}; os_type=suse;
  pam_module_dir=%{_pam_moduledir}; pam_prefix=%{_pam_vendordir};
  examples=true; tests=true; gtk_doc=true; man=true and
  js_engine=duktape.
- Drop no longer needed Libtool as a build requirement, following
  Autotools replacement.
- Add explicit pkgconfig module build requirements for glib-2.0 and
  gobject-2.0 that are searched by the build scripts. They were
  already being pulled by their siblings [pkgconfig(gio-2.0) and
  pkgconfig(gio-unix-2.0)].
- Drop conditional macro, which was wrapping "BuildArch: noarch"
  for the doc subpackage, based on long gone EOLed (open)SUSE
  release (11.2).
- Add missing 'Requires(post): permissions' for the pkexec
  subpackage.
- Add python3-dbus-python and python3-python-dbusmock as build
  requirements in order to run test in the check section.
- Add polkit-fix-pam-prefix.patch to use the value of pam_prefix
  Meson option, like it was designed to, rather than hard-coded
  path for pam configuration files.
- Remove unneeded executable bit from 50-default.rules file.</changelog>
  <changelog author="meissner@suse.com" date="1663243200">- obsolete libpolkit0 also from baselibs.</changelog>
  <changelog author="jsegitz@suse.com" date="1680091200">- Change permissions for rules folders (bsc#1209282)</changelog>
  <changelog author="meissner@suse.com" date="1752580800">- CVE-2025-7519: Fixed that a XML policy file with a large number of
  nested elements may lead to out-of-bounds write (bsc#1246472)
  added 0001-Nested-.policy-files-cause-xml-parsing-overflow-lead.patch</changelog>
</package>
<package pkgid="4a876adbb472d5de00583b458228c7327af574001693d218d839d42d1a9f6a58" name="libpoppler-cpp0" arch="x86_64">
  <version epoch="0" ver="24.03.0" rel="150600.3.16.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1676462400">- Update to version 23.02.0:
  + core:
  * CairoOutputDev:
    . Fix rendering of color type 3 fonts
    . Add handling matte entry
  * Fix segfault on wrong nssdir
  * Fix "NSS could not shutdown"
  + utils: pdfsig: Point out supports PKCS#11 URIs as nickname</changelog>
  <changelog author="dmueller@suse.com" date="1678190400">- update to 23.03.0:
  core:
  * PngWriter: Fix potential uninitialized memory use</changelog>
  <changelog author="dmueller@suse.com" date="1680523200">- update to 23.04.0:
  * Fix memory issue when signing fails. Issue #1372
  * Internal improvements of signature related code
  * CairoOutputDev: improve type3 font rendering
  * Fix memory leak in
    GlobalParams::findSystemFontFileForFamilyAndStyle
  * pdftocairo: Fix crash in some special situations
  * pdfsig: allow holes in -dump signature list
  * pdfsig: Support --help</changelog>
  <changelog author="dmueller@suse.com" date="1684411200">- update to 23.05.0:
  * Fix crash when filling some forms
  * Set SigFlags when signing unsigned signature
  * Add some infrastructure code to support multiple signing
    backends
  * Fix potential stack overflow in PostScriptFunction::parseCode
  * Fix some minor uninitialised memory reads</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 23.06.0 (bsc#1212255):
  * CairoOutputDev: Fix crash when doing type3 rendering
  * Fix crash with unknown signature hashing algorithms
  * Add gpgme backend for signature handling
  * FontInfo: Make it return proper information about font
    substitution
  * FontInfo: Try harder to get Type 3 font name
  * Store embedded fonts widths table in a more effective manner
  * Skip font lookup for nonprintable characters
  * Fix crash on malformed files
  * Add API to allow selecting signature backend (nss or gpgme)
  * Convert embedded files to bytearray a bit smarter</changelog>
  <changelog author="dmueller@suse.com" date="1689422400">- update to 23.07.0:
  core:
  * Fix reading of utf8-with-bom files
  * Fix crash if CERT_ExtractPublicKey doesn't return a public
    key
  * Fix rendering of some malformed documents. Issue #1395
  * Allow for stream compression and compress font streams in
    forms Remove method Hints::getPageRanges
  qt5:
  * Fix crash when overprint preview is enabled
  * Don't fail signature basics tests if backend is not
    configured
  qt6:
  * Fix crash when overprint preview is enabled
  * Don't fail signature basics tests if backend is not
    configured
  utils:
  * pdfsig: Allow showung and selecting signature backend
  * pdfsig: Describe signature dump format in manual page</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695124800">- Update to version 23.09.0:
  * core:
  - Add Android-specific font matching functionality
  - Fix digital signatures for NeedAppearance=true
  - Forms: Don't look up same glyph multiple times
  - Provide the key location for certificates you can sign with
  - Add ToUnicode support for similarequal
  - Fix crash on malformed files
  * qt5:
  - Provide the key location for certificates you can sign with
  - Allow to force a rasterized overprint preview during PS
    conversion
  * qt6:
  - Provide the key location for certificates you can sign with
  - Allow to force a rasterized overprint preview during PS
    conversion
  * pdfsig:
  - Provide the key location for certificates you can sign with
- Changes from version 23.08.0:
  * core:
  - Fix GWG 19.2 - DeviceN Overprint (White)
  - Splash: avoid bogus memory allocation size in
    doTilingPatternFill
  - Fix use-of-uninitialized-value in XRef
  - Fix float-cast-overflow error in Catalog
  - Cleanup gpgme backend code
  - Version symbols in poppler core
  * glib:
  - Improve poppler_get_available_signing_certificates
  - Add new members to PopplerCertificateInfo
  * utils:
  - pdftotext: small improvement to man page
- Bump poppler_sover to 131 following upstream changes.</changelog>
  <changelog author="dmueller@suse.com" date="1695988800">- build with gpgmepp for signing documents (bsc#1215632)</changelog>
  <changelog author="pgajdos@suse.com" date="1698408000">- version update to 23.10.0
    core:
  * cairo: update type 3 fonts for cairo 1.18 api
  * Fix crash on malformed files
    build system:
  * Make a few more dependencies soft-mandatory
  * Add more supported gnupg releases
  * Check if linker supports version scripts
- modified patches
  % reduce-boost-required-version.patch (refreshed)</changelog>
  <changelog author="alarrosa@suse.com" date="1698667200">- Add patch to let it build with the heavily patched tiff 4.0.9
  we have in SLE 15:
  * reduce-libtiff-required-version.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1700136000">- version update to 23.11.0
    core:
  * CairoOutputDev: Use internal downscaling algorithm if image exceeds Cairo's maximum dimensions.
  * Internal code improvements
  * Fix crash on malformed files
    utils:
  * pdftocairo: Add option to document logical structure if output is pdf
  * pdftocairo: EPS output should not contain %%PageOrientation</changelog>
  <changelog author="alarrosa@suse.com" date="1703592000">- version update to 23.12.0
    core:
  * Rewrite FoFiType1::parse to be more flexible
  * Small internal code refactoring</changelog>
  <changelog author="pgajdos@suse.com" date="1707912000">- version update to 24.02.0
  Release 24.02.0:
  core:
  * Fix reading some JBIG2 streams. Issue #1319
  * Fix saving some annotation interior color when it's empty
  * Make searching for fonts when adding annotations a bit faster
  * Make sure images are compressed when adding them
  * Small internal code cleanup
  utils:
  * pdfimages: return exit code 2 when error opening output files
  Release 24.01.0:
  core:
  * Don't crash on certain documents on the NSS signature backend
  * Fix infinite loop in some annotation code if there's not space for even one character
  * Fix build on Android with generic font configuration
  * Small internal code cleanup</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="alarrosa@suse.com" date="1709553600">- version update to 24.03.0
  Release 24.03.0:
  core:
  * Fix opening some malformed files. Issue #1447
  * Skip drawing image when it has singular matrix. Issue #1114
  * Fix crash on malformed files
  * Small internal code cleanup
  utils:
  * pdfdetach: Fix potential directory traversal
  * pdfimages: Enable to print filenames to stdout.
  * pdfsig: Add visible name/date when signing an existing form
    signature field
- Bump poppler_sover to 135 following upstream changes.</changelog>
  <changelog author="pgajdos@suse.com" date="1734955200">- security update
- added patches
  fix CVE-2024-56378 [bsc#1234795], out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc
  + poppler-CVE-2024-56378.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1742904000">- build with PIE [bsc#1239939]</changelog>
  <changelog author="pgajdos@suse.com" date="1744027200">- security update
- added patches
  fix CVE-2025-32364 [bsc#1240880], Floating-Point Exception
  + poppler-CVE-2025-32364.patch
  fix CVE-2025-32365 [bsc#1240881], misplaced isOk check in JBIG2Bitmap::combine function in JBIG2Stream.cc
  + poppler-CVE-2025-32365.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1745582400">- security update
- added patches
  CVE-2025-43903 [bsc#1241620], not verify the adbe.pkcs7.sha1 signatures on documents
  + poppler-CVE-2025-43903.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751630400">- security update
- added patches
  CVE-2025-52886 [bsc#1245625], use of 32-bit `std::atomic_int` for reference counting can lead to an integer overflow and trigger a use-after-free
  + poppler-CVE-2025-52886.patch</changelog>
</package>
<package pkgid="971e2773722678ac88aab616084ba5709c2a81fefe494f401bb68a59ed361992" name="libpoppler-cpp0" arch="x86_64">
  <version epoch="0" ver="24.03.0" rel="150600.3.19.1"/>
  <changelog author="dmueller@suse.com" date="1678190400">- update to 23.03.0:
  core:
  * PngWriter: Fix potential uninitialized memory use</changelog>
  <changelog author="dmueller@suse.com" date="1680523200">- update to 23.04.0:
  * Fix memory issue when signing fails. Issue #1372
  * Internal improvements of signature related code
  * CairoOutputDev: improve type3 font rendering
  * Fix memory leak in
    GlobalParams::findSystemFontFileForFamilyAndStyle
  * pdftocairo: Fix crash in some special situations
  * pdfsig: allow holes in -dump signature list
  * pdfsig: Support --help</changelog>
  <changelog author="dmueller@suse.com" date="1684411200">- update to 23.05.0:
  * Fix crash when filling some forms
  * Set SigFlags when signing unsigned signature
  * Add some infrastructure code to support multiple signing
    backends
  * Fix potential stack overflow in PostScriptFunction::parseCode
  * Fix some minor uninitialised memory reads</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 23.06.0 (bsc#1212255):
  * CairoOutputDev: Fix crash when doing type3 rendering
  * Fix crash with unknown signature hashing algorithms
  * Add gpgme backend for signature handling
  * FontInfo: Make it return proper information about font
    substitution
  * FontInfo: Try harder to get Type 3 font name
  * Store embedded fonts widths table in a more effective manner
  * Skip font lookup for nonprintable characters
  * Fix crash on malformed files
  * Add API to allow selecting signature backend (nss or gpgme)
  * Convert embedded files to bytearray a bit smarter</changelog>
  <changelog author="dmueller@suse.com" date="1689422400">- update to 23.07.0:
  core:
  * Fix reading of utf8-with-bom files
  * Fix crash if CERT_ExtractPublicKey doesn't return a public
    key
  * Fix rendering of some malformed documents. Issue #1395
  * Allow for stream compression and compress font streams in
    forms Remove method Hints::getPageRanges
  qt5:
  * Fix crash when overprint preview is enabled
  * Don't fail signature basics tests if backend is not
    configured
  qt6:
  * Fix crash when overprint preview is enabled
  * Don't fail signature basics tests if backend is not
    configured
  utils:
  * pdfsig: Allow showung and selecting signature backend
  * pdfsig: Describe signature dump format in manual page</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695124800">- Update to version 23.09.0:
  * core:
  - Add Android-specific font matching functionality
  - Fix digital signatures for NeedAppearance=true
  - Forms: Don't look up same glyph multiple times
  - Provide the key location for certificates you can sign with
  - Add ToUnicode support for similarequal
  - Fix crash on malformed files
  * qt5:
  - Provide the key location for certificates you can sign with
  - Allow to force a rasterized overprint preview during PS
    conversion
  * qt6:
  - Provide the key location for certificates you can sign with
  - Allow to force a rasterized overprint preview during PS
    conversion
  * pdfsig:
  - Provide the key location for certificates you can sign with
- Changes from version 23.08.0:
  * core:
  - Fix GWG 19.2 - DeviceN Overprint (White)
  - Splash: avoid bogus memory allocation size in
    doTilingPatternFill
  - Fix use-of-uninitialized-value in XRef
  - Fix float-cast-overflow error in Catalog
  - Cleanup gpgme backend code
  - Version symbols in poppler core
  * glib:
  - Improve poppler_get_available_signing_certificates
  - Add new members to PopplerCertificateInfo
  * utils:
  - pdftotext: small improvement to man page
- Bump poppler_sover to 131 following upstream changes.</changelog>
  <changelog author="dmueller@suse.com" date="1695988800">- build with gpgmepp for signing documents (bsc#1215632)</changelog>
  <changelog author="pgajdos@suse.com" date="1698408000">- version update to 23.10.0
    core:
  * cairo: update type 3 fonts for cairo 1.18 api
  * Fix crash on malformed files
    build system:
  * Make a few more dependencies soft-mandatory
  * Add more supported gnupg releases
  * Check if linker supports version scripts
- modified patches
  % reduce-boost-required-version.patch (refreshed)</changelog>
  <changelog author="alarrosa@suse.com" date="1698667200">- Add patch to let it build with the heavily patched tiff 4.0.9
  we have in SLE 15:
  * reduce-libtiff-required-version.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1700136000">- version update to 23.11.0
    core:
  * CairoOutputDev: Use internal downscaling algorithm if image exceeds Cairo's maximum dimensions.
  * Internal code improvements
  * Fix crash on malformed files
    utils:
  * pdftocairo: Add option to document logical structure if output is pdf
  * pdftocairo: EPS output should not contain %%PageOrientation</changelog>
  <changelog author="alarrosa@suse.com" date="1703592000">- version update to 23.12.0
    core:
  * Rewrite FoFiType1::parse to be more flexible
  * Small internal code refactoring</changelog>
  <changelog author="pgajdos@suse.com" date="1707912000">- version update to 24.02.0
  Release 24.02.0:
  core:
  * Fix reading some JBIG2 streams. Issue #1319
  * Fix saving some annotation interior color when it's empty
  * Make searching for fonts when adding annotations a bit faster
  * Make sure images are compressed when adding them
  * Small internal code cleanup
  utils:
  * pdfimages: return exit code 2 when error opening output files
  Release 24.01.0:
  core:
  * Don't crash on certain documents on the NSS signature backend
  * Fix infinite loop in some annotation code if there's not space for even one character
  * Fix build on Android with generic font configuration
  * Small internal code cleanup</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="alarrosa@suse.com" date="1709553600">- version update to 24.03.0
  Release 24.03.0:
  core:
  * Fix opening some malformed files. Issue #1447
  * Skip drawing image when it has singular matrix. Issue #1114
  * Fix crash on malformed files
  * Small internal code cleanup
  utils:
  * pdfdetach: Fix potential directory traversal
  * pdfimages: Enable to print filenames to stdout.
  * pdfsig: Add visible name/date when signing an existing form
    signature field
- Bump poppler_sover to 135 following upstream changes.</changelog>
  <changelog author="pgajdos@suse.com" date="1734955200">- security update
- added patches
  fix CVE-2024-56378 [bsc#1234795], out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc
  + poppler-CVE-2024-56378.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1742904000">- build with PIE [bsc#1239939]</changelog>
  <changelog author="pgajdos@suse.com" date="1744027200">- security update
- added patches
  fix CVE-2025-32364 [bsc#1240880], Floating-Point Exception
  + poppler-CVE-2025-32364.patch
  fix CVE-2025-32365 [bsc#1240881], misplaced isOk check in JBIG2Bitmap::combine function in JBIG2Stream.cc
  + poppler-CVE-2025-32365.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1745582400">- security update
- added patches
  CVE-2025-43903 [bsc#1241620], not verify the adbe.pkcs7.sha1 signatures on documents
  + poppler-CVE-2025-43903.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751630400">- security update
- added patches
  CVE-2025-52886 [bsc#1245625], use of 32-bit `std::atomic_int` for reference counting can lead to an integer overflow and trigger a use-after-free
  + poppler-CVE-2025-52886.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1754395200">- security update
- added patches
  CVE-2025-50420 [bsc#1247590], An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).
  + poppler-CVE-2025-50420.patch</changelog>
</package>
<package pkgid="fc82bed598bb76d6689529e828a76863dd70d15fd60272d18fd65025c9e7edcf" name="libpoppler-cpp0" arch="x86_64">
  <version epoch="0" ver="24.03.0" rel="150600.3.24.1"/>
  <changelog author="dmueller@suse.com" date="1684411200">- update to 23.05.0:
  * Fix crash when filling some forms
  * Set SigFlags when signing unsigned signature
  * Add some infrastructure code to support multiple signing
    backends
  * Fix potential stack overflow in PostScriptFunction::parseCode
  * Fix some minor uninitialised memory reads</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 23.06.0 (bsc#1212255):
  * CairoOutputDev: Fix crash when doing type3 rendering
  * Fix crash with unknown signature hashing algorithms
  * Add gpgme backend for signature handling
  * FontInfo: Make it return proper information about font
    substitution
  * FontInfo: Try harder to get Type 3 font name
  * Store embedded fonts widths table in a more effective manner
  * Skip font lookup for nonprintable characters
  * Fix crash on malformed files
  * Add API to allow selecting signature backend (nss or gpgme)
  * Convert embedded files to bytearray a bit smarter</changelog>
  <changelog author="dmueller@suse.com" date="1689422400">- update to 23.07.0:
  core:
  * Fix reading of utf8-with-bom files
  * Fix crash if CERT_ExtractPublicKey doesn't return a public
    key
  * Fix rendering of some malformed documents. Issue #1395
  * Allow for stream compression and compress font streams in
    forms Remove method Hints::getPageRanges
  qt5:
  * Fix crash when overprint preview is enabled
  * Don't fail signature basics tests if backend is not
    configured
  qt6:
  * Fix crash when overprint preview is enabled
  * Don't fail signature basics tests if backend is not
    configured
  utils:
  * pdfsig: Allow showung and selecting signature backend
  * pdfsig: Describe signature dump format in manual page</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695124800">- Update to version 23.09.0:
  * core:
  - Add Android-specific font matching functionality
  - Fix digital signatures for NeedAppearance=true
  - Forms: Don't look up same glyph multiple times
  - Provide the key location for certificates you can sign with
  - Add ToUnicode support for similarequal
  - Fix crash on malformed files
  * qt5:
  - Provide the key location for certificates you can sign with
  - Allow to force a rasterized overprint preview during PS
    conversion
  * qt6:
  - Provide the key location for certificates you can sign with
  - Allow to force a rasterized overprint preview during PS
    conversion
  * pdfsig:
  - Provide the key location for certificates you can sign with
- Changes from version 23.08.0:
  * core:
  - Fix GWG 19.2 - DeviceN Overprint (White)
  - Splash: avoid bogus memory allocation size in
    doTilingPatternFill
  - Fix use-of-uninitialized-value in XRef
  - Fix float-cast-overflow error in Catalog
  - Cleanup gpgme backend code
  - Version symbols in poppler core
  * glib:
  - Improve poppler_get_available_signing_certificates
  - Add new members to PopplerCertificateInfo
  * utils:
  - pdftotext: small improvement to man page
- Bump poppler_sover to 131 following upstream changes.</changelog>
  <changelog author="dmueller@suse.com" date="1695988800">- build with gpgmepp for signing documents (bsc#1215632)</changelog>
  <changelog author="pgajdos@suse.com" date="1698408000">- version update to 23.10.0
    core:
  * cairo: update type 3 fonts for cairo 1.18 api
  * Fix crash on malformed files
    build system:
  * Make a few more dependencies soft-mandatory
  * Add more supported gnupg releases
  * Check if linker supports version scripts
- modified patches
  % reduce-boost-required-version.patch (refreshed)</changelog>
  <changelog author="alarrosa@suse.com" date="1698667200">- Add patch to let it build with the heavily patched tiff 4.0.9
  we have in SLE 15:
  * reduce-libtiff-required-version.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1700136000">- version update to 23.11.0
    core:
  * CairoOutputDev: Use internal downscaling algorithm if image exceeds Cairo's maximum dimensions.
  * Internal code improvements
  * Fix crash on malformed files
    utils:
  * pdftocairo: Add option to document logical structure if output is pdf
  * pdftocairo: EPS output should not contain %%PageOrientation</changelog>
  <changelog author="alarrosa@suse.com" date="1703592000">- version update to 23.12.0
    core:
  * Rewrite FoFiType1::parse to be more flexible
  * Small internal code refactoring</changelog>
  <changelog author="pgajdos@suse.com" date="1707912000">- version update to 24.02.0
  Release 24.02.0:
  core:
  * Fix reading some JBIG2 streams. Issue #1319
  * Fix saving some annotation interior color when it's empty
  * Make searching for fonts when adding annotations a bit faster
  * Make sure images are compressed when adding them
  * Small internal code cleanup
  utils:
  * pdfimages: return exit code 2 when error opening output files
  Release 24.01.0:
  core:
  * Don't crash on certain documents on the NSS signature backend
  * Fix infinite loop in some annotation code if there's not space for even one character
  * Fix build on Android with generic font configuration
  * Small internal code cleanup</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="alarrosa@suse.com" date="1709553600">- version update to 24.03.0
  Release 24.03.0:
  core:
  * Fix opening some malformed files. Issue #1447
  * Skip drawing image when it has singular matrix. Issue #1114
  * Fix crash on malformed files
  * Small internal code cleanup
  utils:
  * pdfdetach: Fix potential directory traversal
  * pdfimages: Enable to print filenames to stdout.
  * pdfsig: Add visible name/date when signing an existing form
    signature field
- Bump poppler_sover to 135 following upstream changes.</changelog>
  <changelog author="pgajdos@suse.com" date="1734955200">- security update
- added patches
  fix CVE-2024-56378 [bsc#1234795], out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc
  + poppler-CVE-2024-56378.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1742904000">- build with PIE [bsc#1239939]</changelog>
  <changelog author="pgajdos@suse.com" date="1744027200">- security update
- added patches
  fix CVE-2025-32364 [bsc#1240880], Floating-Point Exception
  + poppler-CVE-2025-32364.patch
  fix CVE-2025-32365 [bsc#1240881], misplaced isOk check in JBIG2Bitmap::combine function in JBIG2Stream.cc
  + poppler-CVE-2025-32365.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1745582400">- security update
- added patches
  CVE-2025-43903 [bsc#1241620], not verify the adbe.pkcs7.sha1 signatures on documents
  + poppler-CVE-2025-43903.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751630400">- security update
- added patches
  CVE-2025-52886 [bsc#1245625], use of 32-bit `std::atomic_int` for reference counting can lead to an integer overflow and trigger a use-after-free
  + poppler-CVE-2025-52886.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1754395200">- security update
- added patches
  CVE-2025-50420 [bsc#1247590], An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).
  + poppler-CVE-2025-50420.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1759752000">- security update
- added patches
  CVE-2025-43718 [bsc#1250908], uncontrolled recursion in the regex-based metadata parser when processing specially crafted PDF files allows for stack exhaustion and denial of service
  * poppler-CVE-2025-43718.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1760443200">- security update
- added patches
  CVE-2025-52885 [bsc#1251940], raw pointers can lead to dangling pointers when the vector is resized
  * poppler-CVE-2025-52885.patch</changelog>
</package>
<package pkgid="18c045dbf93e6a8dd607f22633f7a87c17a5f7138eb1059de913641d768cdd8f" name="libpoppler-cpp0" arch="x86_64">
  <version epoch="0" ver="24.03.0" rel="150600.3.27.1"/>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 23.06.0 (bsc#1212255):
  * CairoOutputDev: Fix crash when doing type3 rendering
  * Fix crash with unknown signature hashing algorithms
  * Add gpgme backend for signature handling
  * FontInfo: Make it return proper information about font
    substitution
  * FontInfo: Try harder to get Type 3 font name
  * Store embedded fonts widths table in a more effective manner
  * Skip font lookup for nonprintable characters
  * Fix crash on malformed files
  * Add API to allow selecting signature backend (nss or gpgme)
  * Convert embedded files to bytearray a bit smarter</changelog>
  <changelog author="dmueller@suse.com" date="1689422400">- update to 23.07.0:
  core:
  * Fix reading of utf8-with-bom files
  * Fix crash if CERT_ExtractPublicKey doesn't return a public
    key
  * Fix rendering of some malformed documents. Issue #1395
  * Allow for stream compression and compress font streams in
    forms Remove method Hints::getPageRanges
  qt5:
  * Fix crash when overprint preview is enabled
  * Don't fail signature basics tests if backend is not
    configured
  qt6:
  * Fix crash when overprint preview is enabled
  * Don't fail signature basics tests if backend is not
    configured
  utils:
  * pdfsig: Allow showung and selecting signature backend
  * pdfsig: Describe signature dump format in manual page</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695124800">- Update to version 23.09.0:
  * core:
  - Add Android-specific font matching functionality
  - Fix digital signatures for NeedAppearance=true
  - Forms: Don't look up same glyph multiple times
  - Provide the key location for certificates you can sign with
  - Add ToUnicode support for similarequal
  - Fix crash on malformed files
  * qt5:
  - Provide the key location for certificates you can sign with
  - Allow to force a rasterized overprint preview during PS
    conversion
  * qt6:
  - Provide the key location for certificates you can sign with
  - Allow to force a rasterized overprint preview during PS
    conversion
  * pdfsig:
  - Provide the key location for certificates you can sign with
- Changes from version 23.08.0:
  * core:
  - Fix GWG 19.2 - DeviceN Overprint (White)
  - Splash: avoid bogus memory allocation size in
    doTilingPatternFill
  - Fix use-of-uninitialized-value in XRef
  - Fix float-cast-overflow error in Catalog
  - Cleanup gpgme backend code
  - Version symbols in poppler core
  * glib:
  - Improve poppler_get_available_signing_certificates
  - Add new members to PopplerCertificateInfo
  * utils:
  - pdftotext: small improvement to man page
- Bump poppler_sover to 131 following upstream changes.</changelog>
  <changelog author="dmueller@suse.com" date="1695988800">- build with gpgmepp for signing documents (bsc#1215632)</changelog>
  <changelog author="pgajdos@suse.com" date="1698408000">- version update to 23.10.0
    core:
  * cairo: update type 3 fonts for cairo 1.18 api
  * Fix crash on malformed files
    build system:
  * Make a few more dependencies soft-mandatory
  * Add more supported gnupg releases
  * Check if linker supports version scripts
- modified patches
  % reduce-boost-required-version.patch (refreshed)</changelog>
  <changelog author="alarrosa@suse.com" date="1698667200">- Add patch to let it build with the heavily patched tiff 4.0.9
  we have in SLE 15:
  * reduce-libtiff-required-version.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1700136000">- version update to 23.11.0
    core:
  * CairoOutputDev: Use internal downscaling algorithm if image exceeds Cairo's maximum dimensions.
  * Internal code improvements
  * Fix crash on malformed files
    utils:
  * pdftocairo: Add option to document logical structure if output is pdf
  * pdftocairo: EPS output should not contain %%PageOrientation</changelog>
  <changelog author="alarrosa@suse.com" date="1703592000">- version update to 23.12.0
    core:
  * Rewrite FoFiType1::parse to be more flexible
  * Small internal code refactoring</changelog>
  <changelog author="pgajdos@suse.com" date="1707912000">- version update to 24.02.0
  Release 24.02.0:
  core:
  * Fix reading some JBIG2 streams. Issue #1319
  * Fix saving some annotation interior color when it's empty
  * Make searching for fonts when adding annotations a bit faster
  * Make sure images are compressed when adding them
  * Small internal code cleanup
  utils:
  * pdfimages: return exit code 2 when error opening output files
  Release 24.01.0:
  core:
  * Don't crash on certain documents on the NSS signature backend
  * Fix infinite loop in some annotation code if there's not space for even one character
  * Fix build on Android with generic font configuration
  * Small internal code cleanup</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="alarrosa@suse.com" date="1709553600">- version update to 24.03.0
  Release 24.03.0:
  core:
  * Fix opening some malformed files. Issue #1447
  * Skip drawing image when it has singular matrix. Issue #1114
  * Fix crash on malformed files
  * Small internal code cleanup
  utils:
  * pdfdetach: Fix potential directory traversal
  * pdfimages: Enable to print filenames to stdout.
  * pdfsig: Add visible name/date when signing an existing form
    signature field
- Bump poppler_sover to 135 following upstream changes.</changelog>
  <changelog author="pgajdos@suse.com" date="1734955200">- security update
- added patches
  fix CVE-2024-56378 [bsc#1234795], out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc
  + poppler-CVE-2024-56378.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1742904000">- build with PIE [bsc#1239939]</changelog>
  <changelog author="pgajdos@suse.com" date="1744027200">- security update
- added patches
  fix CVE-2025-32364 [bsc#1240880], Floating-Point Exception
  + poppler-CVE-2025-32364.patch
  fix CVE-2025-32365 [bsc#1240881], misplaced isOk check in JBIG2Bitmap::combine function in JBIG2Stream.cc
  + poppler-CVE-2025-32365.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1745582400">- security update
- added patches
  CVE-2025-43903 [bsc#1241620], not verify the adbe.pkcs7.sha1 signatures on documents
  + poppler-CVE-2025-43903.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751630400">- security update
- added patches
  CVE-2025-52886 [bsc#1245625], use of 32-bit `std::atomic_int` for reference counting can lead to an integer overflow and trigger a use-after-free
  + poppler-CVE-2025-52886.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1754395200">- security update
- added patches
  CVE-2025-50420 [bsc#1247590], An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).
  + poppler-CVE-2025-50420.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1759752000">- security update
- added patches
  CVE-2025-43718 [bsc#1250908], uncontrolled recursion in the regex-based metadata parser when processing specially crafted PDF files allows for stack exhaustion and denial of service
  * poppler-CVE-2025-43718.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1760443200">- security update
- added patches
  CVE-2025-52885 [bsc#1251940], raw pointers can lead to dangling pointers when the vector is resized
  * poppler-CVE-2025-52885.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1765195200">- security update
- added patches
  CVE-2025-11896 [bsc#1252337], infinite recursion leading to stack overflow due to object loop in PDF CMap
  * poppler-CVE-2025-11896.patch</changelog>
</package>
<package pkgid="cc638b7b0f5366d1b08bc71c960982574b804b13effc948533e6cbd445f6c0f1" name="libpoppler-devel" arch="x86_64">
  <version epoch="0" ver="24.03.0" rel="150600.3.16.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1676462400">- Update to version 23.02.0:
  + core:
  * CairoOutputDev:
    . Fix rendering of color type 3 fonts
    . Add handling matte entry
  * Fix segfault on wrong nssdir
  * Fix "NSS could not shutdown"
  + utils: pdfsig: Point out supports PKCS#11 URIs as nickname</changelog>
  <changelog author="dmueller@suse.com" date="1678190400">- update to 23.03.0:
  core:
  * PngWriter: Fix potential uninitialized memory use</changelog>
  <changelog author="dmueller@suse.com" date="1680523200">- update to 23.04.0:
  * Fix memory issue when signing fails. Issue #1372
  * Internal improvements of signature related code
  * CairoOutputDev: improve type3 font rendering
  * Fix memory leak in
    GlobalParams::findSystemFontFileForFamilyAndStyle
  * pdftocairo: Fix crash in some special situations
  * pdfsig: allow holes in -dump signature list
  * pdfsig: Support --help</changelog>
  <changelog author="dmueller@suse.com" date="1684411200">- update to 23.05.0:
  * Fix crash when filling some forms
  * Set SigFlags when signing unsigned signature
  * Add some infrastructure code to support multiple signing
    backends
  * Fix potential stack overflow in PostScriptFunction::parseCode
  * Fix some minor uninitialised memory reads</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 23.06.0 (bsc#1212255):
  * CairoOutputDev: Fix crash when doing type3 rendering
  * Fix crash with unknown signature hashing algorithms
  * Add gpgme backend for signature handling
  * FontInfo: Make it return proper information about font
    substitution
  * FontInfo: Try harder to get Type 3 font name
  * Store embedded fonts widths table in a more effective manner
  * Skip font lookup for nonprintable characters
  * Fix crash on malformed files
  * Add API to allow selecting signature backend (nss or gpgme)
  * Convert embedded files to bytearray a bit smarter</changelog>
  <changelog author="dmueller@suse.com" date="1689422400">- update to 23.07.0:
  core:
  * Fix reading of utf8-with-bom files
  * Fix crash if CERT_ExtractPublicKey doesn't return a public
    key
  * Fix rendering of some malformed documents. Issue #1395
  * Allow for stream compression and compress font streams in
    forms Remove method Hints::getPageRanges
  qt5:
  * Fix crash when overprint preview is enabled
  * Don't fail signature basics tests if backend is not
    configured
  qt6:
  * Fix crash when overprint preview is enabled
  * Don't fail signature basics tests if backend is not
    configured
  utils:
  * pdfsig: Allow showung and selecting signature backend
  * pdfsig: Describe signature dump format in manual page</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695124800">- Update to version 23.09.0:
  * core:
  - Add Android-specific font matching functionality
  - Fix digital signatures for NeedAppearance=true
  - Forms: Don't look up same glyph multiple times
  - Provide the key location for certificates you can sign with
  - Add ToUnicode support for similarequal
  - Fix crash on malformed files
  * qt5:
  - Provide the key location for certificates you can sign with
  - Allow to force a rasterized overprint preview during PS
    conversion
  * qt6:
  - Provide the key location for certificates you can sign with
  - Allow to force a rasterized overprint preview during PS
    conversion
  * pdfsig:
  - Provide the key location for certificates you can sign with
- Changes from version 23.08.0:
  * core:
  - Fix GWG 19.2 - DeviceN Overprint (White)
  - Splash: avoid bogus memory allocation size in
    doTilingPatternFill
  - Fix use-of-uninitialized-value in XRef
  - Fix float-cast-overflow error in Catalog
  - Cleanup gpgme backend code
  - Version symbols in poppler core
  * glib:
  - Improve poppler_get_available_signing_certificates
  - Add new members to PopplerCertificateInfo
  * utils:
  - pdftotext: small improvement to man page
- Bump poppler_sover to 131 following upstream changes.</changelog>
  <changelog author="dmueller@suse.com" date="1695988800">- build with gpgmepp for signing documents (bsc#1215632)</changelog>
  <changelog author="pgajdos@suse.com" date="1698408000">- version update to 23.10.0
    core:
  * cairo: update type 3 fonts for cairo 1.18 api
  * Fix crash on malformed files
    build system:
  * Make a few more dependencies soft-mandatory
  * Add more supported gnupg releases
  * Check if linker supports version scripts
- modified patches
  % reduce-boost-required-version.patch (refreshed)</changelog>
  <changelog author="alarrosa@suse.com" date="1698667200">- Add patch to let it build with the heavily patched tiff 4.0.9
  we have in SLE 15:
  * reduce-libtiff-required-version.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1700136000">- version update to 23.11.0
    core:
  * CairoOutputDev: Use internal downscaling algorithm if image exceeds Cairo's maximum dimensions.
  * Internal code improvements
  * Fix crash on malformed files
    utils:
  * pdftocairo: Add option to document logical structure if output is pdf
  * pdftocairo: EPS output should not contain %%PageOrientation</changelog>
  <changelog author="alarrosa@suse.com" date="1703592000">- version update to 23.12.0
    core:
  * Rewrite FoFiType1::parse to be more flexible
  * Small internal code refactoring</changelog>
  <changelog author="pgajdos@suse.com" date="1707912000">- version update to 24.02.0
  Release 24.02.0:
  core:
  * Fix reading some JBIG2 streams. Issue #1319
  * Fix saving some annotation interior color when it's empty
  * Make searching for fonts when adding annotations a bit faster
  * Make sure images are compressed when adding them
  * Small internal code cleanup
  utils:
  * pdfimages: return exit code 2 when error opening output files
  Release 24.01.0:
  core:
  * Don't crash on certain documents on the NSS signature backend
  * Fix infinite loop in some annotation code if there's not space for even one character
  * Fix build on Android with generic font configuration
  * Small internal code cleanup</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="alarrosa@suse.com" date="1709553600">- version update to 24.03.0
  Release 24.03.0:
  core:
  * Fix opening some malformed files. Issue #1447
  * Skip drawing image when it has singular matrix. Issue #1114
  * Fix crash on malformed files
  * Small internal code cleanup
  utils:
  * pdfdetach: Fix potential directory traversal
  * pdfimages: Enable to print filenames to stdout.
  * pdfsig: Add visible name/date when signing an existing form
    signature field
- Bump poppler_sover to 135 following upstream changes.</changelog>
  <changelog author="pgajdos@suse.com" date="1734955200">- security update
- added patches
  fix CVE-2024-56378 [bsc#1234795], out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc
  + poppler-CVE-2024-56378.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1742904000">- build with PIE [bsc#1239939]</changelog>
  <changelog author="pgajdos@suse.com" date="1744027200">- security update
- added patches
  fix CVE-2025-32364 [bsc#1240880], Floating-Point Exception
  + poppler-CVE-2025-32364.patch
  fix CVE-2025-32365 [bsc#1240881], misplaced isOk check in JBIG2Bitmap::combine function in JBIG2Stream.cc
  + poppler-CVE-2025-32365.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1745582400">- security update
- added patches
  CVE-2025-43903 [bsc#1241620], not verify the adbe.pkcs7.sha1 signatures on documents
  + poppler-CVE-2025-43903.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751630400">- security update
- added patches
  CVE-2025-52886 [bsc#1245625], use of 32-bit `std::atomic_int` for reference counting can lead to an integer overflow and trigger a use-after-free
  + poppler-CVE-2025-52886.patch</changelog>
</package>
<package pkgid="d2d46944e71d535e4dffb6b922e786326fa47d71ceee4c7d7246f42a854fdbe9" name="libpoppler-devel" arch="x86_64">
  <version epoch="0" ver="24.03.0" rel="150600.3.19.1"/>
  <changelog author="dmueller@suse.com" date="1678190400">- update to 23.03.0:
  core:
  * PngWriter: Fix potential uninitialized memory use</changelog>
  <changelog author="dmueller@suse.com" date="1680523200">- update to 23.04.0:
  * Fix memory issue when signing fails. Issue #1372
  * Internal improvements of signature related code
  * CairoOutputDev: improve type3 font rendering
  * Fix memory leak in
    GlobalParams::findSystemFontFileForFamilyAndStyle
  * pdftocairo: Fix crash in some special situations
  * pdfsig: allow holes in -dump signature list
  * pdfsig: Support --help</changelog>
  <changelog author="dmueller@suse.com" date="1684411200">- update to 23.05.0:
  * Fix crash when filling some forms
  * Set SigFlags when signing unsigned signature
  * Add some infrastructure code to support multiple signing
    backends
  * Fix potential stack overflow in PostScriptFunction::parseCode
  * Fix some minor uninitialised memory reads</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 23.06.0 (bsc#1212255):
  * CairoOutputDev: Fix crash when doing type3 rendering
  * Fix crash with unknown signature hashing algorithms
  * Add gpgme backend for signature handling
  * FontInfo: Make it return proper information about font
    substitution
  * FontInfo: Try harder to get Type 3 font name
  * Store embedded fonts widths table in a more effective manner
  * Skip font lookup for nonprintable characters
  * Fix crash on malformed files
  * Add API to allow selecting signature backend (nss or gpgme)
  * Convert embedded files to bytearray a bit smarter</changelog>
  <changelog author="dmueller@suse.com" date="1689422400">- update to 23.07.0:
  core:
  * Fix reading of utf8-with-bom files
  * Fix crash if CERT_ExtractPublicKey doesn't return a public
    key
  * Fix rendering of some malformed documents. Issue #1395
  * Allow for stream compression and compress font streams in
    forms Remove method Hints::getPageRanges
  qt5:
  * Fix crash when overprint preview is enabled
  * Don't fail signature basics tests if backend is not
    configured
  qt6:
  * Fix crash when overprint preview is enabled
  * Don't fail signature basics tests if backend is not
    configured
  utils:
  * pdfsig: Allow showung and selecting signature backend
  * pdfsig: Describe signature dump format in manual page</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695124800">- Update to version 23.09.0:
  * core:
  - Add Android-specific font matching functionality
  - Fix digital signatures for NeedAppearance=true
  - Forms: Don't look up same glyph multiple times
  - Provide the key location for certificates you can sign with
  - Add ToUnicode support for similarequal
  - Fix crash on malformed files
  * qt5:
  - Provide the key location for certificates you can sign with
  - Allow to force a rasterized overprint preview during PS
    conversion
  * qt6:
  - Provide the key location for certificates you can sign with
  - Allow to force a rasterized overprint preview during PS
    conversion
  * pdfsig:
  - Provide the key location for certificates you can sign with
- Changes from version 23.08.0:
  * core:
  - Fix GWG 19.2 - DeviceN Overprint (White)
  - Splash: avoid bogus memory allocation size in
    doTilingPatternFill
  - Fix use-of-uninitialized-value in XRef
  - Fix float-cast-overflow error in Catalog
  - Cleanup gpgme backend code
  - Version symbols in poppler core
  * glib:
  - Improve poppler_get_available_signing_certificates
  - Add new members to PopplerCertificateInfo
  * utils:
  - pdftotext: small improvement to man page
- Bump poppler_sover to 131 following upstream changes.</changelog>
  <changelog author="dmueller@suse.com" date="1695988800">- build with gpgmepp for signing documents (bsc#1215632)</changelog>
  <changelog author="pgajdos@suse.com" date="1698408000">- version update to 23.10.0
    core:
  * cairo: update type 3 fonts for cairo 1.18 api
  * Fix crash on malformed files
    build system:
  * Make a few more dependencies soft-mandatory
  * Add more supported gnupg releases
  * Check if linker supports version scripts
- modified patches
  % reduce-boost-required-version.patch (refreshed)</changelog>
  <changelog author="alarrosa@suse.com" date="1698667200">- Add patch to let it build with the heavily patched tiff 4.0.9
  we have in SLE 15:
  * reduce-libtiff-required-version.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1700136000">- version update to 23.11.0
    core:
  * CairoOutputDev: Use internal downscaling algorithm if image exceeds Cairo's maximum dimensions.
  * Internal code improvements
  * Fix crash on malformed files
    utils:
  * pdftocairo: Add option to document logical structure if output is pdf
  * pdftocairo: EPS output should not contain %%PageOrientation</changelog>
  <changelog author="alarrosa@suse.com" date="1703592000">- version update to 23.12.0
    core:
  * Rewrite FoFiType1::parse to be more flexible
  * Small internal code refactoring</changelog>
  <changelog author="pgajdos@suse.com" date="1707912000">- version update to 24.02.0
  Release 24.02.0:
  core:
  * Fix reading some JBIG2 streams. Issue #1319
  * Fix saving some annotation interior color when it's empty
  * Make searching for fonts when adding annotations a bit faster
  * Make sure images are compressed when adding them
  * Small internal code cleanup
  utils:
  * pdfimages: return exit code 2 when error opening output files
  Release 24.01.0:
  core:
  * Don't crash on certain documents on the NSS signature backend
  * Fix infinite loop in some annotation code if there's not space for even one character
  * Fix build on Android with generic font configuration
  * Small internal code cleanup</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="alarrosa@suse.com" date="1709553600">- version update to 24.03.0
  Release 24.03.0:
  core:
  * Fix opening some malformed files. Issue #1447
  * Skip drawing image when it has singular matrix. Issue #1114
  * Fix crash on malformed files
  * Small internal code cleanup
  utils:
  * pdfdetach: Fix potential directory traversal
  * pdfimages: Enable to print filenames to stdout.
  * pdfsig: Add visible name/date when signing an existing form
    signature field
- Bump poppler_sover to 135 following upstream changes.</changelog>
  <changelog author="pgajdos@suse.com" date="1734955200">- security update
- added patches
  fix CVE-2024-56378 [bsc#1234795], out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc
  + poppler-CVE-2024-56378.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1742904000">- build with PIE [bsc#1239939]</changelog>
  <changelog author="pgajdos@suse.com" date="1744027200">- security update
- added patches
  fix CVE-2025-32364 [bsc#1240880], Floating-Point Exception
  + poppler-CVE-2025-32364.patch
  fix CVE-2025-32365 [bsc#1240881], misplaced isOk check in JBIG2Bitmap::combine function in JBIG2Stream.cc
  + poppler-CVE-2025-32365.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1745582400">- security update
- added patches
  CVE-2025-43903 [bsc#1241620], not verify the adbe.pkcs7.sha1 signatures on documents
  + poppler-CVE-2025-43903.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751630400">- security update
- added patches
  CVE-2025-52886 [bsc#1245625], use of 32-bit `std::atomic_int` for reference counting can lead to an integer overflow and trigger a use-after-free
  + poppler-CVE-2025-52886.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1754395200">- security update
- added patches
  CVE-2025-50420 [bsc#1247590], An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).
  + poppler-CVE-2025-50420.patch</changelog>
</package>
<package pkgid="1ce74e9e51440f21f036d0e93033044bafe5a194e53880cdacc69b3b91d2fbab" name="libpoppler-devel" arch="x86_64">
  <version epoch="0" ver="24.03.0" rel="150600.3.24.1"/>
  <changelog author="dmueller@suse.com" date="1684411200">- update to 23.05.0:
  * Fix crash when filling some forms
  * Set SigFlags when signing unsigned signature
  * Add some infrastructure code to support multiple signing
    backends
  * Fix potential stack overflow in PostScriptFunction::parseCode
  * Fix some minor uninitialised memory reads</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 23.06.0 (bsc#1212255):
  * CairoOutputDev: Fix crash when doing type3 rendering
  * Fix crash with unknown signature hashing algorithms
  * Add gpgme backend for signature handling
  * FontInfo: Make it return proper information about font
    substitution
  * FontInfo: Try harder to get Type 3 font name
  * Store embedded fonts widths table in a more effective manner
  * Skip font lookup for nonprintable characters
  * Fix crash on malformed files
  * Add API to allow selecting signature backend (nss or gpgme)
  * Convert embedded files to bytearray a bit smarter</changelog>
  <changelog author="dmueller@suse.com" date="1689422400">- update to 23.07.0:
  core:
  * Fix reading of utf8-with-bom files
  * Fix crash if CERT_ExtractPublicKey doesn't return a public
    key
  * Fix rendering of some malformed documents. Issue #1395
  * Allow for stream compression and compress font streams in
    forms Remove method Hints::getPageRanges
  qt5:
  * Fix crash when overprint preview is enabled
  * Don't fail signature basics tests if backend is not
    configured
  qt6:
  * Fix crash when overprint preview is enabled
  * Don't fail signature basics tests if backend is not
    configured
  utils:
  * pdfsig: Allow showung and selecting signature backend
  * pdfsig: Describe signature dump format in manual page</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695124800">- Update to version 23.09.0:
  * core:
  - Add Android-specific font matching functionality
  - Fix digital signatures for NeedAppearance=true
  - Forms: Don't look up same glyph multiple times
  - Provide the key location for certificates you can sign with
  - Add ToUnicode support for similarequal
  - Fix crash on malformed files
  * qt5:
  - Provide the key location for certificates you can sign with
  - Allow to force a rasterized overprint preview during PS
    conversion
  * qt6:
  - Provide the key location for certificates you can sign with
  - Allow to force a rasterized overprint preview during PS
    conversion
  * pdfsig:
  - Provide the key location for certificates you can sign with
- Changes from version 23.08.0:
  * core:
  - Fix GWG 19.2 - DeviceN Overprint (White)
  - Splash: avoid bogus memory allocation size in
    doTilingPatternFill
  - Fix use-of-uninitialized-value in XRef
  - Fix float-cast-overflow error in Catalog
  - Cleanup gpgme backend code
  - Version symbols in poppler core
  * glib:
  - Improve poppler_get_available_signing_certificates
  - Add new members to PopplerCertificateInfo
  * utils:
  - pdftotext: small improvement to man page
- Bump poppler_sover to 131 following upstream changes.</changelog>
  <changelog author="dmueller@suse.com" date="1695988800">- build with gpgmepp for signing documents (bsc#1215632)</changelog>
  <changelog author="pgajdos@suse.com" date="1698408000">- version update to 23.10.0
    core:
  * cairo: update type 3 fonts for cairo 1.18 api
  * Fix crash on malformed files
    build system:
  * Make a few more dependencies soft-mandatory
  * Add more supported gnupg releases
  * Check if linker supports version scripts
- modified patches
  % reduce-boost-required-version.patch (refreshed)</changelog>
  <changelog author="alarrosa@suse.com" date="1698667200">- Add patch to let it build with the heavily patched tiff 4.0.9
  we have in SLE 15:
  * reduce-libtiff-required-version.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1700136000">- version update to 23.11.0
    core:
  * CairoOutputDev: Use internal downscaling algorithm if image exceeds Cairo's maximum dimensions.
  * Internal code improvements
  * Fix crash on malformed files
    utils:
  * pdftocairo: Add option to document logical structure if output is pdf
  * pdftocairo: EPS output should not contain %%PageOrientation</changelog>
  <changelog author="alarrosa@suse.com" date="1703592000">- version update to 23.12.0
    core:
  * Rewrite FoFiType1::parse to be more flexible
  * Small internal code refactoring</changelog>
  <changelog author="pgajdos@suse.com" date="1707912000">- version update to 24.02.0
  Release 24.02.0:
  core:
  * Fix reading some JBIG2 streams. Issue #1319
  * Fix saving some annotation interior color when it's empty
  * Make searching for fonts when adding annotations a bit faster
  * Make sure images are compressed when adding them
  * Small internal code cleanup
  utils:
  * pdfimages: return exit code 2 when error opening output files
  Release 24.01.0:
  core:
  * Don't crash on certain documents on the NSS signature backend
  * Fix infinite loop in some annotation code if there's not space for even one character
  * Fix build on Android with generic font configuration
  * Small internal code cleanup</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="alarrosa@suse.com" date="1709553600">- version update to 24.03.0
  Release 24.03.0:
  core:
  * Fix opening some malformed files. Issue #1447
  * Skip drawing image when it has singular matrix. Issue #1114
  * Fix crash on malformed files
  * Small internal code cleanup
  utils:
  * pdfdetach: Fix potential directory traversal
  * pdfimages: Enable to print filenames to stdout.
  * pdfsig: Add visible name/date when signing an existing form
    signature field
- Bump poppler_sover to 135 following upstream changes.</changelog>
  <changelog author="pgajdos@suse.com" date="1734955200">- security update
- added patches
  fix CVE-2024-56378 [bsc#1234795], out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc
  + poppler-CVE-2024-56378.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1742904000">- build with PIE [bsc#1239939]</changelog>
  <changelog author="pgajdos@suse.com" date="1744027200">- security update
- added patches
  fix CVE-2025-32364 [bsc#1240880], Floating-Point Exception
  + poppler-CVE-2025-32364.patch
  fix CVE-2025-32365 [bsc#1240881], misplaced isOk check in JBIG2Bitmap::combine function in JBIG2Stream.cc
  + poppler-CVE-2025-32365.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1745582400">- security update
- added patches
  CVE-2025-43903 [bsc#1241620], not verify the adbe.pkcs7.sha1 signatures on documents
  + poppler-CVE-2025-43903.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751630400">- security update
- added patches
  CVE-2025-52886 [bsc#1245625], use of 32-bit `std::atomic_int` for reference counting can lead to an integer overflow and trigger a use-after-free
  + poppler-CVE-2025-52886.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1754395200">- security update
- added patches
  CVE-2025-50420 [bsc#1247590], An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).
  + poppler-CVE-2025-50420.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1759752000">- security update
- added patches
  CVE-2025-43718 [bsc#1250908], uncontrolled recursion in the regex-based metadata parser when processing specially crafted PDF files allows for stack exhaustion and denial of service
  * poppler-CVE-2025-43718.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1760443200">- security update
- added patches
  CVE-2025-52885 [bsc#1251940], raw pointers can lead to dangling pointers when the vector is resized
  * poppler-CVE-2025-52885.patch</changelog>
</package>
<package pkgid="64eae2398a6a2cf0fe4570be7051551d404393235e0e96f1c8643181126e73b0" name="libpoppler-devel" arch="x86_64">
  <version epoch="0" ver="24.03.0" rel="150600.3.27.1"/>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 23.06.0 (bsc#1212255):
  * CairoOutputDev: Fix crash when doing type3 rendering
  * Fix crash with unknown signature hashing algorithms
  * Add gpgme backend for signature handling
  * FontInfo: Make it return proper information about font
    substitution
  * FontInfo: Try harder to get Type 3 font name
  * Store embedded fonts widths table in a more effective manner
  * Skip font lookup for nonprintable characters
  * Fix crash on malformed files
  * Add API to allow selecting signature backend (nss or gpgme)
  * Convert embedded files to bytearray a bit smarter</changelog>
  <changelog author="dmueller@suse.com" date="1689422400">- update to 23.07.0:
  core:
  * Fix reading of utf8-with-bom files
  * Fix crash if CERT_ExtractPublicKey doesn't return a public
    key
  * Fix rendering of some malformed documents. Issue #1395
  * Allow for stream compression and compress font streams in
    forms Remove method Hints::getPageRanges
  qt5:
  * Fix crash when overprint preview is enabled
  * Don't fail signature basics tests if backend is not
    configured
  qt6:
  * Fix crash when overprint preview is enabled
  * Don't fail signature basics tests if backend is not
    configured
  utils:
  * pdfsig: Allow showung and selecting signature backend
  * pdfsig: Describe signature dump format in manual page</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695124800">- Update to version 23.09.0:
  * core:
  - Add Android-specific font matching functionality
  - Fix digital signatures for NeedAppearance=true
  - Forms: Don't look up same glyph multiple times
  - Provide the key location for certificates you can sign with
  - Add ToUnicode support for similarequal
  - Fix crash on malformed files
  * qt5:
  - Provide the key location for certificates you can sign with
  - Allow to force a rasterized overprint preview during PS
    conversion
  * qt6:
  - Provide the key location for certificates you can sign with
  - Allow to force a rasterized overprint preview during PS
    conversion
  * pdfsig:
  - Provide the key location for certificates you can sign with
- Changes from version 23.08.0:
  * core:
  - Fix GWG 19.2 - DeviceN Overprint (White)
  - Splash: avoid bogus memory allocation size in
    doTilingPatternFill
  - Fix use-of-uninitialized-value in XRef
  - Fix float-cast-overflow error in Catalog
  - Cleanup gpgme backend code
  - Version symbols in poppler core
  * glib:
  - Improve poppler_get_available_signing_certificates
  - Add new members to PopplerCertificateInfo
  * utils:
  - pdftotext: small improvement to man page
- Bump poppler_sover to 131 following upstream changes.</changelog>
  <changelog author="dmueller@suse.com" date="1695988800">- build with gpgmepp for signing documents (bsc#1215632)</changelog>
  <changelog author="pgajdos@suse.com" date="1698408000">- version update to 23.10.0
    core:
  * cairo: update type 3 fonts for cairo 1.18 api
  * Fix crash on malformed files
    build system:
  * Make a few more dependencies soft-mandatory
  * Add more supported gnupg releases
  * Check if linker supports version scripts
- modified patches
  % reduce-boost-required-version.patch (refreshed)</changelog>
  <changelog author="alarrosa@suse.com" date="1698667200">- Add patch to let it build with the heavily patched tiff 4.0.9
  we have in SLE 15:
  * reduce-libtiff-required-version.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1700136000">- version update to 23.11.0
    core:
  * CairoOutputDev: Use internal downscaling algorithm if image exceeds Cairo's maximum dimensions.
  * Internal code improvements
  * Fix crash on malformed files
    utils:
  * pdftocairo: Add option to document logical structure if output is pdf
  * pdftocairo: EPS output should not contain %%PageOrientation</changelog>
  <changelog author="alarrosa@suse.com" date="1703592000">- version update to 23.12.0
    core:
  * Rewrite FoFiType1::parse to be more flexible
  * Small internal code refactoring</changelog>
  <changelog author="pgajdos@suse.com" date="1707912000">- version update to 24.02.0
  Release 24.02.0:
  core:
  * Fix reading some JBIG2 streams. Issue #1319
  * Fix saving some annotation interior color when it's empty
  * Make searching for fonts when adding annotations a bit faster
  * Make sure images are compressed when adding them
  * Small internal code cleanup
  utils:
  * pdfimages: return exit code 2 when error opening output files
  Release 24.01.0:
  core:
  * Don't crash on certain documents on the NSS signature backend
  * Fix infinite loop in some annotation code if there's not space for even one character
  * Fix build on Android with generic font configuration
  * Small internal code cleanup</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="alarrosa@suse.com" date="1709553600">- version update to 24.03.0
  Release 24.03.0:
  core:
  * Fix opening some malformed files. Issue #1447
  * Skip drawing image when it has singular matrix. Issue #1114
  * Fix crash on malformed files
  * Small internal code cleanup
  utils:
  * pdfdetach: Fix potential directory traversal
  * pdfimages: Enable to print filenames to stdout.
  * pdfsig: Add visible name/date when signing an existing form
    signature field
- Bump poppler_sover to 135 following upstream changes.</changelog>
  <changelog author="pgajdos@suse.com" date="1734955200">- security update
- added patches
  fix CVE-2024-56378 [bsc#1234795], out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc
  + poppler-CVE-2024-56378.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1742904000">- build with PIE [bsc#1239939]</changelog>
  <changelog author="pgajdos@suse.com" date="1744027200">- security update
- added patches
  fix CVE-2025-32364 [bsc#1240880], Floating-Point Exception
  + poppler-CVE-2025-32364.patch
  fix CVE-2025-32365 [bsc#1240881], misplaced isOk check in JBIG2Bitmap::combine function in JBIG2Stream.cc
  + poppler-CVE-2025-32365.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1745582400">- security update
- added patches
  CVE-2025-43903 [bsc#1241620], not verify the adbe.pkcs7.sha1 signatures on documents
  + poppler-CVE-2025-43903.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751630400">- security update
- added patches
  CVE-2025-52886 [bsc#1245625], use of 32-bit `std::atomic_int` for reference counting can lead to an integer overflow and trigger a use-after-free
  + poppler-CVE-2025-52886.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1754395200">- security update
- added patches
  CVE-2025-50420 [bsc#1247590], An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).
  + poppler-CVE-2025-50420.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1759752000">- security update
- added patches
  CVE-2025-43718 [bsc#1250908], uncontrolled recursion in the regex-based metadata parser when processing specially crafted PDF files allows for stack exhaustion and denial of service
  * poppler-CVE-2025-43718.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1760443200">- security update
- added patches
  CVE-2025-52885 [bsc#1251940], raw pointers can lead to dangling pointers when the vector is resized
  * poppler-CVE-2025-52885.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1765195200">- security update
- added patches
  CVE-2025-11896 [bsc#1252337], infinite recursion leading to stack overflow due to object loop in PDF CMap
  * poppler-CVE-2025-11896.patch</changelog>
</package>
<package pkgid="fe94aa4e2b1233ae916460d87e04e8ded42cabc187b8b62a2afb39e0238e1e6a" name="libpoppler-glib-devel" arch="x86_64">
  <version epoch="0" ver="24.03.0" rel="150600.3.16.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1676462400">- Update to version 23.02.0:
  + core:
  * CairoOutputDev:
    . Fix rendering of color type 3 fonts
    . Add handling matte entry
  * Fix segfault on wrong nssdir
  * Fix "NSS could not shutdown"
  + utils: pdfsig: Point out supports PKCS#11 URIs as nickname</changelog>
  <changelog author="dmueller@suse.com" date="1678190400">- update to 23.03.0:
  core:
  * PngWriter: Fix potential uninitialized memory use</changelog>
  <changelog author="dmueller@suse.com" date="1680523200">- update to 23.04.0:
  * Fix memory issue when signing fails. Issue #1372
  * Internal improvements of signature related code
  * CairoOutputDev: improve type3 font rendering
  * Fix memory leak in
    GlobalParams::findSystemFontFileForFamilyAndStyle
  * pdftocairo: Fix crash in some special situations
  * pdfsig: allow holes in -dump signature list
  * pdfsig: Support --help</changelog>
  <changelog author="dmueller@suse.com" date="1684411200">- update to 23.05.0:
  * Fix crash when filling some forms
  * Set SigFlags when signing unsigned signature
  * Add some infrastructure code to support multiple signing
    backends
  * Fix potential stack overflow in PostScriptFunction::parseCode
  * Fix some minor uninitialised memory reads</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 23.06.0 (bsc#1212255):
  * CairoOutputDev: Fix crash when doing type3 rendering
  * Fix crash with unknown signature hashing algorithms
  * Add gpgme backend for signature handling
  * FontInfo: Make it return proper information about font
    substitution
  * FontInfo: Try harder to get Type 3 font name
  * Store embedded fonts widths table in a more effective manner
  * Skip font lookup for nonprintable characters
  * Fix crash on malformed files
  * Add API to allow selecting signature backend (nss or gpgme)
  * Convert embedded files to bytearray a bit smarter</changelog>
  <changelog author="dmueller@suse.com" date="1689422400">- update to 23.07.0:
  core:
  * Fix reading of utf8-with-bom files
  * Fix crash if CERT_ExtractPublicKey doesn't return a public
    key
  * Fix rendering of some malformed documents. Issue #1395
  * Allow for stream compression and compress font streams in
    forms Remove method Hints::getPageRanges
  qt5:
  * Fix crash when overprint preview is enabled
  * Don't fail signature basics tests if backend is not
    configured
  qt6:
  * Fix crash when overprint preview is enabled
  * Don't fail signature basics tests if backend is not
    configured
  utils:
  * pdfsig: Allow showung and selecting signature backend
  * pdfsig: Describe signature dump format in manual page</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695124800">- Update to version 23.09.0:
  * core:
  - Add Android-specific font matching functionality
  - Fix digital signatures for NeedAppearance=true
  - Forms: Don't look up same glyph multiple times
  - Provide the key location for certificates you can sign with
  - Add ToUnicode support for similarequal
  - Fix crash on malformed files
  * qt5:
  - Provide the key location for certificates you can sign with
  - Allow to force a rasterized overprint preview during PS
    conversion
  * qt6:
  - Provide the key location for certificates you can sign with
  - Allow to force a rasterized overprint preview during PS
    conversion
  * pdfsig:
  - Provide the key location for certificates you can sign with
- Changes from version 23.08.0:
  * core:
  - Fix GWG 19.2 - DeviceN Overprint (White)
  - Splash: avoid bogus memory allocation size in
    doTilingPatternFill
  - Fix use-of-uninitialized-value in XRef
  - Fix float-cast-overflow error in Catalog
  - Cleanup gpgme backend code
  - Version symbols in poppler core
  * glib:
  - Improve poppler_get_available_signing_certificates
  - Add new members to PopplerCertificateInfo
  * utils:
  - pdftotext: small improvement to man page
- Bump poppler_sover to 131 following upstream changes.</changelog>
  <changelog author="dmueller@suse.com" date="1695988800">- build with gpgmepp for signing documents (bsc#1215632)</changelog>
  <changelog author="pgajdos@suse.com" date="1698408000">- version update to 23.10.0
    core:
  * cairo: update type 3 fonts for cairo 1.18 api
  * Fix crash on malformed files
    build system:
  * Make a few more dependencies soft-mandatory
  * Add more supported gnupg releases
  * Check if linker supports version scripts
- modified patches
  % reduce-boost-required-version.patch (refreshed)</changelog>
  <changelog author="alarrosa@suse.com" date="1698667200">- Add patch to let it build with the heavily patched tiff 4.0.9
  we have in SLE 15:
  * reduce-libtiff-required-version.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1700136000">- version update to 23.11.0
    core:
  * CairoOutputDev: Use internal downscaling algorithm if image exceeds Cairo's maximum dimensions.
  * Internal code improvements
  * Fix crash on malformed files
    utils:
  * pdftocairo: Add option to document logical structure if output is pdf
  * pdftocairo: EPS output should not contain %%PageOrientation</changelog>
  <changelog author="alarrosa@suse.com" date="1703592000">- version update to 23.12.0
    core:
  * Rewrite FoFiType1::parse to be more flexible
  * Small internal code refactoring</changelog>
  <changelog author="pgajdos@suse.com" date="1707912000">- version update to 24.02.0
  Release 24.02.0:
  core:
  * Fix reading some JBIG2 streams. Issue #1319
  * Fix saving some annotation interior color when it's empty
  * Make searching for fonts when adding annotations a bit faster
  * Make sure images are compressed when adding them
  * Small internal code cleanup
  utils:
  * pdfimages: return exit code 2 when error opening output files
  Release 24.01.0:
  core:
  * Don't crash on certain documents on the NSS signature backend
  * Fix infinite loop in some annotation code if there's not space for even one character
  * Fix build on Android with generic font configuration
  * Small internal code cleanup</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="alarrosa@suse.com" date="1709553600">- version update to 24.03.0
  Release 24.03.0:
  core:
  * Fix opening some malformed files. Issue #1447
  * Skip drawing image when it has singular matrix. Issue #1114
  * Fix crash on malformed files
  * Small internal code cleanup
  utils:
  * pdfdetach: Fix potential directory traversal
  * pdfimages: Enable to print filenames to stdout.
  * pdfsig: Add visible name/date when signing an existing form
    signature field
- Bump poppler_sover to 135 following upstream changes.</changelog>
  <changelog author="pgajdos@suse.com" date="1734955200">- security update
- added patches
  fix CVE-2024-56378 [bsc#1234795], out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc
  + poppler-CVE-2024-56378.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1742904000">- build with PIE [bsc#1239939]</changelog>
  <changelog author="pgajdos@suse.com" date="1744027200">- security update
- added patches
  fix CVE-2025-32364 [bsc#1240880], Floating-Point Exception
  + poppler-CVE-2025-32364.patch
  fix CVE-2025-32365 [bsc#1240881], misplaced isOk check in JBIG2Bitmap::combine function in JBIG2Stream.cc
  + poppler-CVE-2025-32365.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1745582400">- security update
- added patches
  CVE-2025-43903 [bsc#1241620], not verify the adbe.pkcs7.sha1 signatures on documents
  + poppler-CVE-2025-43903.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751630400">- security update
- added patches
  CVE-2025-52886 [bsc#1245625], use of 32-bit `std::atomic_int` for reference counting can lead to an integer overflow and trigger a use-after-free
  + poppler-CVE-2025-52886.patch</changelog>
</package>
<package pkgid="b2180aedda6edd24ab51c091d60ec1f50b1bf89a7c371be28bce860952342c6f" name="libpoppler-glib-devel" arch="x86_64">
  <version epoch="0" ver="24.03.0" rel="150600.3.19.1"/>
  <changelog author="dmueller@suse.com" date="1678190400">- update to 23.03.0:
  core:
  * PngWriter: Fix potential uninitialized memory use</changelog>
  <changelog author="dmueller@suse.com" date="1680523200">- update to 23.04.0:
  * Fix memory issue when signing fails. Issue #1372
  * Internal improvements of signature related code
  * CairoOutputDev: improve type3 font rendering
  * Fix memory leak in
    GlobalParams::findSystemFontFileForFamilyAndStyle
  * pdftocairo: Fix crash in some special situations
  * pdfsig: allow holes in -dump signature list
  * pdfsig: Support --help</changelog>
  <changelog author="dmueller@suse.com" date="1684411200">- update to 23.05.0:
  * Fix crash when filling some forms
  * Set SigFlags when signing unsigned signature
  * Add some infrastructure code to support multiple signing
    backends
  * Fix potential stack overflow in PostScriptFunction::parseCode
  * Fix some minor uninitialised memory reads</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 23.06.0 (bsc#1212255):
  * CairoOutputDev: Fix crash when doing type3 rendering
  * Fix crash with unknown signature hashing algorithms
  * Add gpgme backend for signature handling
  * FontInfo: Make it return proper information about font
    substitution
  * FontInfo: Try harder to get Type 3 font name
  * Store embedded fonts widths table in a more effective manner
  * Skip font lookup for nonprintable characters
  * Fix crash on malformed files
  * Add API to allow selecting signature backend (nss or gpgme)
  * Convert embedded files to bytearray a bit smarter</changelog>
  <changelog author="dmueller@suse.com" date="1689422400">- update to 23.07.0:
  core:
  * Fix reading of utf8-with-bom files
  * Fix crash if CERT_ExtractPublicKey doesn't return a public
    key
  * Fix rendering of some malformed documents. Issue #1395
  * Allow for stream compression and compress font streams in
    forms Remove method Hints::getPageRanges
  qt5:
  * Fix crash when overprint preview is enabled
  * Don't fail signature basics tests if backend is not
    configured
  qt6:
  * Fix crash when overprint preview is enabled
  * Don't fail signature basics tests if backend is not
    configured
  utils:
  * pdfsig: Allow showung and selecting signature backend
  * pdfsig: Describe signature dump format in manual page</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695124800">- Update to version 23.09.0:
  * core:
  - Add Android-specific font matching functionality
  - Fix digital signatures for NeedAppearance=true
  - Forms: Don't look up same glyph multiple times
  - Provide the key location for certificates you can sign with
  - Add ToUnicode support for similarequal
  - Fix crash on malformed files
  * qt5:
  - Provide the key location for certificates you can sign with
  - Allow to force a rasterized overprint preview during PS
    conversion
  * qt6:
  - Provide the key location for certificates you can sign with
  - Allow to force a rasterized overprint preview during PS
    conversion
  * pdfsig:
  - Provide the key location for certificates you can sign with
- Changes from version 23.08.0:
  * core:
  - Fix GWG 19.2 - DeviceN Overprint (White)
  - Splash: avoid bogus memory allocation size in
    doTilingPatternFill
  - Fix use-of-uninitialized-value in XRef
  - Fix float-cast-overflow error in Catalog
  - Cleanup gpgme backend code
  - Version symbols in poppler core
  * glib:
  - Improve poppler_get_available_signing_certificates
  - Add new members to PopplerCertificateInfo
  * utils:
  - pdftotext: small improvement to man page
- Bump poppler_sover to 131 following upstream changes.</changelog>
  <changelog author="dmueller@suse.com" date="1695988800">- build with gpgmepp for signing documents (bsc#1215632)</changelog>
  <changelog author="pgajdos@suse.com" date="1698408000">- version update to 23.10.0
    core:
  * cairo: update type 3 fonts for cairo 1.18 api
  * Fix crash on malformed files
    build system:
  * Make a few more dependencies soft-mandatory
  * Add more supported gnupg releases
  * Check if linker supports version scripts
- modified patches
  % reduce-boost-required-version.patch (refreshed)</changelog>
  <changelog author="alarrosa@suse.com" date="1698667200">- Add patch to let it build with the heavily patched tiff 4.0.9
  we have in SLE 15:
  * reduce-libtiff-required-version.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1700136000">- version update to 23.11.0
    core:
  * CairoOutputDev: Use internal downscaling algorithm if image exceeds Cairo's maximum dimensions.
  * Internal code improvements
  * Fix crash on malformed files
    utils:
  * pdftocairo: Add option to document logical structure if output is pdf
  * pdftocairo: EPS output should not contain %%PageOrientation</changelog>
  <changelog author="alarrosa@suse.com" date="1703592000">- version update to 23.12.0
    core:
  * Rewrite FoFiType1::parse to be more flexible
  * Small internal code refactoring</changelog>
  <changelog author="pgajdos@suse.com" date="1707912000">- version update to 24.02.0
  Release 24.02.0:
  core:
  * Fix reading some JBIG2 streams. Issue #1319
  * Fix saving some annotation interior color when it's empty
  * Make searching for fonts when adding annotations a bit faster
  * Make sure images are compressed when adding them
  * Small internal code cleanup
  utils:
  * pdfimages: return exit code 2 when error opening output files
  Release 24.01.0:
  core:
  * Don't crash on certain documents on the NSS signature backend
  * Fix infinite loop in some annotation code if there's not space for even one character
  * Fix build on Android with generic font configuration
  * Small internal code cleanup</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="alarrosa@suse.com" date="1709553600">- version update to 24.03.0
  Release 24.03.0:
  core:
  * Fix opening some malformed files. Issue #1447
  * Skip drawing image when it has singular matrix. Issue #1114
  * Fix crash on malformed files
  * Small internal code cleanup
  utils:
  * pdfdetach: Fix potential directory traversal
  * pdfimages: Enable to print filenames to stdout.
  * pdfsig: Add visible name/date when signing an existing form
    signature field
- Bump poppler_sover to 135 following upstream changes.</changelog>
  <changelog author="pgajdos@suse.com" date="1734955200">- security update
- added patches
  fix CVE-2024-56378 [bsc#1234795], out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc
  + poppler-CVE-2024-56378.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1742904000">- build with PIE [bsc#1239939]</changelog>
  <changelog author="pgajdos@suse.com" date="1744027200">- security update
- added patches
  fix CVE-2025-32364 [bsc#1240880], Floating-Point Exception
  + poppler-CVE-2025-32364.patch
  fix CVE-2025-32365 [bsc#1240881], misplaced isOk check in JBIG2Bitmap::combine function in JBIG2Stream.cc
  + poppler-CVE-2025-32365.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1745582400">- security update
- added patches
  CVE-2025-43903 [bsc#1241620], not verify the adbe.pkcs7.sha1 signatures on documents
  + poppler-CVE-2025-43903.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751630400">- security update
- added patches
  CVE-2025-52886 [bsc#1245625], use of 32-bit `std::atomic_int` for reference counting can lead to an integer overflow and trigger a use-after-free
  + poppler-CVE-2025-52886.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1754395200">- security update
- added patches
  CVE-2025-50420 [bsc#1247590], An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).
  + poppler-CVE-2025-50420.patch</changelog>
</package>
<package pkgid="f715d89cdf3dd5e13179e05c0059174592c1b2d6a4c39ca5baefa8ea1d191fc7" name="libpoppler-glib-devel" arch="x86_64">
  <version epoch="0" ver="24.03.0" rel="150600.3.24.1"/>
  <changelog author="dmueller@suse.com" date="1684411200">- update to 23.05.0:
  * Fix crash when filling some forms
  * Set SigFlags when signing unsigned signature
  * Add some infrastructure code to support multiple signing
    backends
  * Fix potential stack overflow in PostScriptFunction::parseCode
  * Fix some minor uninitialised memory reads</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 23.06.0 (bsc#1212255):
  * CairoOutputDev: Fix crash when doing type3 rendering
  * Fix crash with unknown signature hashing algorithms
  * Add gpgme backend for signature handling
  * FontInfo: Make it return proper information about font
    substitution
  * FontInfo: Try harder to get Type 3 font name
  * Store embedded fonts widths table in a more effective manner
  * Skip font lookup for nonprintable characters
  * Fix crash on malformed files
  * Add API to allow selecting signature backend (nss or gpgme)
  * Convert embedded files to bytearray a bit smarter</changelog>
  <changelog author="dmueller@suse.com" date="1689422400">- update to 23.07.0:
  core:
  * Fix reading of utf8-with-bom files
  * Fix crash if CERT_ExtractPublicKey doesn't return a public
    key
  * Fix rendering of some malformed documents. Issue #1395
  * Allow for stream compression and compress font streams in
    forms Remove method Hints::getPageRanges
  qt5:
  * Fix crash when overprint preview is enabled
  * Don't fail signature basics tests if backend is not
    configured
  qt6:
  * Fix crash when overprint preview is enabled
  * Don't fail signature basics tests if backend is not
    configured
  utils:
  * pdfsig: Allow showung and selecting signature backend
  * pdfsig: Describe signature dump format in manual page</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695124800">- Update to version 23.09.0:
  * core:
  - Add Android-specific font matching functionality
  - Fix digital signatures for NeedAppearance=true
  - Forms: Don't look up same glyph multiple times
  - Provide the key location for certificates you can sign with
  - Add ToUnicode support for similarequal
  - Fix crash on malformed files
  * qt5:
  - Provide the key location for certificates you can sign with
  - Allow to force a rasterized overprint preview during PS
    conversion
  * qt6:
  - Provide the key location for certificates you can sign with
  - Allow to force a rasterized overprint preview during PS
    conversion
  * pdfsig:
  - Provide the key location for certificates you can sign with
- Changes from version 23.08.0:
  * core:
  - Fix GWG 19.2 - DeviceN Overprint (White)
  - Splash: avoid bogus memory allocation size in
    doTilingPatternFill
  - Fix use-of-uninitialized-value in XRef
  - Fix float-cast-overflow error in Catalog
  - Cleanup gpgme backend code
  - Version symbols in poppler core
  * glib:
  - Improve poppler_get_available_signing_certificates
  - Add new members to PopplerCertificateInfo
  * utils:
  - pdftotext: small improvement to man page
- Bump poppler_sover to 131 following upstream changes.</changelog>
  <changelog author="dmueller@suse.com" date="1695988800">- build with gpgmepp for signing documents (bsc#1215632)</changelog>
  <changelog author="pgajdos@suse.com" date="1698408000">- version update to 23.10.0
    core:
  * cairo: update type 3 fonts for cairo 1.18 api
  * Fix crash on malformed files
    build system:
  * Make a few more dependencies soft-mandatory
  * Add more supported gnupg releases
  * Check if linker supports version scripts
- modified patches
  % reduce-boost-required-version.patch (refreshed)</changelog>
  <changelog author="alarrosa@suse.com" date="1698667200">- Add patch to let it build with the heavily patched tiff 4.0.9
  we have in SLE 15:
  * reduce-libtiff-required-version.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1700136000">- version update to 23.11.0
    core:
  * CairoOutputDev: Use internal downscaling algorithm if image exceeds Cairo's maximum dimensions.
  * Internal code improvements
  * Fix crash on malformed files
    utils:
  * pdftocairo: Add option to document logical structure if output is pdf
  * pdftocairo: EPS output should not contain %%PageOrientation</changelog>
  <changelog author="alarrosa@suse.com" date="1703592000">- version update to 23.12.0
    core:
  * Rewrite FoFiType1::parse to be more flexible
  * Small internal code refactoring</changelog>
  <changelog author="pgajdos@suse.com" date="1707912000">- version update to 24.02.0
  Release 24.02.0:
  core:
  * Fix reading some JBIG2 streams. Issue #1319
  * Fix saving some annotation interior color when it's empty
  * Make searching for fonts when adding annotations a bit faster
  * Make sure images are compressed when adding them
  * Small internal code cleanup
  utils:
  * pdfimages: return exit code 2 when error opening output files
  Release 24.01.0:
  core:
  * Don't crash on certain documents on the NSS signature backend
  * Fix infinite loop in some annotation code if there's not space for even one character
  * Fix build on Android with generic font configuration
  * Small internal code cleanup</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="alarrosa@suse.com" date="1709553600">- version update to 24.03.0
  Release 24.03.0:
  core:
  * Fix opening some malformed files. Issue #1447
  * Skip drawing image when it has singular matrix. Issue #1114
  * Fix crash on malformed files
  * Small internal code cleanup
  utils:
  * pdfdetach: Fix potential directory traversal
  * pdfimages: Enable to print filenames to stdout.
  * pdfsig: Add visible name/date when signing an existing form
    signature field
- Bump poppler_sover to 135 following upstream changes.</changelog>
  <changelog author="pgajdos@suse.com" date="1734955200">- security update
- added patches
  fix CVE-2024-56378 [bsc#1234795], out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc
  + poppler-CVE-2024-56378.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1742904000">- build with PIE [bsc#1239939]</changelog>
  <changelog author="pgajdos@suse.com" date="1744027200">- security update
- added patches
  fix CVE-2025-32364 [bsc#1240880], Floating-Point Exception
  + poppler-CVE-2025-32364.patch
  fix CVE-2025-32365 [bsc#1240881], misplaced isOk check in JBIG2Bitmap::combine function in JBIG2Stream.cc
  + poppler-CVE-2025-32365.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1745582400">- security update
- added patches
  CVE-2025-43903 [bsc#1241620], not verify the adbe.pkcs7.sha1 signatures on documents
  + poppler-CVE-2025-43903.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751630400">- security update
- added patches
  CVE-2025-52886 [bsc#1245625], use of 32-bit `std::atomic_int` for reference counting can lead to an integer overflow and trigger a use-after-free
  + poppler-CVE-2025-52886.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1754395200">- security update
- added patches
  CVE-2025-50420 [bsc#1247590], An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).
  + poppler-CVE-2025-50420.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1759752000">- security update
- added patches
  CVE-2025-43718 [bsc#1250908], uncontrolled recursion in the regex-based metadata parser when processing specially crafted PDF files allows for stack exhaustion and denial of service
  * poppler-CVE-2025-43718.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1760443200">- security update
- added patches
  CVE-2025-52885 [bsc#1251940], raw pointers can lead to dangling pointers when the vector is resized
  * poppler-CVE-2025-52885.patch</changelog>
</package>
<package pkgid="ea4755927b7007e70a2a9b37704d8ebd82a0fa44e04512659cf7922ea35f4d5b" name="libpoppler-glib-devel" arch="x86_64">
  <version epoch="0" ver="24.03.0" rel="150600.3.27.1"/>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 23.06.0 (bsc#1212255):
  * CairoOutputDev: Fix crash when doing type3 rendering
  * Fix crash with unknown signature hashing algorithms
  * Add gpgme backend for signature handling
  * FontInfo: Make it return proper information about font
    substitution
  * FontInfo: Try harder to get Type 3 font name
  * Store embedded fonts widths table in a more effective manner
  * Skip font lookup for nonprintable characters
  * Fix crash on malformed files
  * Add API to allow selecting signature backend (nss or gpgme)
  * Convert embedded files to bytearray a bit smarter</changelog>
  <changelog author="dmueller@suse.com" date="1689422400">- update to 23.07.0:
  core:
  * Fix reading of utf8-with-bom files
  * Fix crash if CERT_ExtractPublicKey doesn't return a public
    key
  * Fix rendering of some malformed documents. Issue #1395
  * Allow for stream compression and compress font streams in
    forms Remove method Hints::getPageRanges
  qt5:
  * Fix crash when overprint preview is enabled
  * Don't fail signature basics tests if backend is not
    configured
  qt6:
  * Fix crash when overprint preview is enabled
  * Don't fail signature basics tests if backend is not
    configured
  utils:
  * pdfsig: Allow showung and selecting signature backend
  * pdfsig: Describe signature dump format in manual page</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695124800">- Update to version 23.09.0:
  * core:
  - Add Android-specific font matching functionality
  - Fix digital signatures for NeedAppearance=true
  - Forms: Don't look up same glyph multiple times
  - Provide the key location for certificates you can sign with
  - Add ToUnicode support for similarequal
  - Fix crash on malformed files
  * qt5:
  - Provide the key location for certificates you can sign with
  - Allow to force a rasterized overprint preview during PS
    conversion
  * qt6:
  - Provide the key location for certificates you can sign with
  - Allow to force a rasterized overprint preview during PS
    conversion
  * pdfsig:
  - Provide the key location for certificates you can sign with
- Changes from version 23.08.0:
  * core:
  - Fix GWG 19.2 - DeviceN Overprint (White)
  - Splash: avoid bogus memory allocation size in
    doTilingPatternFill
  - Fix use-of-uninitialized-value in XRef
  - Fix float-cast-overflow error in Catalog
  - Cleanup gpgme backend code
  - Version symbols in poppler core
  * glib:
  - Improve poppler_get_available_signing_certificates
  - Add new members to PopplerCertificateInfo
  * utils:
  - pdftotext: small improvement to man page
- Bump poppler_sover to 131 following upstream changes.</changelog>
  <changelog author="dmueller@suse.com" date="1695988800">- build with gpgmepp for signing documents (bsc#1215632)</changelog>
  <changelog author="pgajdos@suse.com" date="1698408000">- version update to 23.10.0
    core:
  * cairo: update type 3 fonts for cairo 1.18 api
  * Fix crash on malformed files
    build system:
  * Make a few more dependencies soft-mandatory
  * Add more supported gnupg releases
  * Check if linker supports version scripts
- modified patches
  % reduce-boost-required-version.patch (refreshed)</changelog>
  <changelog author="alarrosa@suse.com" date="1698667200">- Add patch to let it build with the heavily patched tiff 4.0.9
  we have in SLE 15:
  * reduce-libtiff-required-version.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1700136000">- version update to 23.11.0
    core:
  * CairoOutputDev: Use internal downscaling algorithm if image exceeds Cairo's maximum dimensions.
  * Internal code improvements
  * Fix crash on malformed files
    utils:
  * pdftocairo: Add option to document logical structure if output is pdf
  * pdftocairo: EPS output should not contain %%PageOrientation</changelog>
  <changelog author="alarrosa@suse.com" date="1703592000">- version update to 23.12.0
    core:
  * Rewrite FoFiType1::parse to be more flexible
  * Small internal code refactoring</changelog>
  <changelog author="pgajdos@suse.com" date="1707912000">- version update to 24.02.0
  Release 24.02.0:
  core:
  * Fix reading some JBIG2 streams. Issue #1319
  * Fix saving some annotation interior color when it's empty
  * Make searching for fonts when adding annotations a bit faster
  * Make sure images are compressed when adding them
  * Small internal code cleanup
  utils:
  * pdfimages: return exit code 2 when error opening output files
  Release 24.01.0:
  core:
  * Don't crash on certain documents on the NSS signature backend
  * Fix infinite loop in some annotation code if there's not space for even one character
  * Fix build on Android with generic font configuration
  * Small internal code cleanup</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="alarrosa@suse.com" date="1709553600">- version update to 24.03.0
  Release 24.03.0:
  core:
  * Fix opening some malformed files. Issue #1447
  * Skip drawing image when it has singular matrix. Issue #1114
  * Fix crash on malformed files
  * Small internal code cleanup
  utils:
  * pdfdetach: Fix potential directory traversal
  * pdfimages: Enable to print filenames to stdout.
  * pdfsig: Add visible name/date when signing an existing form
    signature field
- Bump poppler_sover to 135 following upstream changes.</changelog>
  <changelog author="pgajdos@suse.com" date="1734955200">- security update
- added patches
  fix CVE-2024-56378 [bsc#1234795], out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc
  + poppler-CVE-2024-56378.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1742904000">- build with PIE [bsc#1239939]</changelog>
  <changelog author="pgajdos@suse.com" date="1744027200">- security update
- added patches
  fix CVE-2025-32364 [bsc#1240880], Floating-Point Exception
  + poppler-CVE-2025-32364.patch
  fix CVE-2025-32365 [bsc#1240881], misplaced isOk check in JBIG2Bitmap::combine function in JBIG2Stream.cc
  + poppler-CVE-2025-32365.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1745582400">- security update
- added patches
  CVE-2025-43903 [bsc#1241620], not verify the adbe.pkcs7.sha1 signatures on documents
  + poppler-CVE-2025-43903.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751630400">- security update
- added patches
  CVE-2025-52886 [bsc#1245625], use of 32-bit `std::atomic_int` for reference counting can lead to an integer overflow and trigger a use-after-free
  + poppler-CVE-2025-52886.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1754395200">- security update
- added patches
  CVE-2025-50420 [bsc#1247590], An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).
  + poppler-CVE-2025-50420.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1759752000">- security update
- added patches
  CVE-2025-43718 [bsc#1250908], uncontrolled recursion in the regex-based metadata parser when processing specially crafted PDF files allows for stack exhaustion and denial of service
  * poppler-CVE-2025-43718.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1760443200">- security update
- added patches
  CVE-2025-52885 [bsc#1251940], raw pointers can lead to dangling pointers when the vector is resized
  * poppler-CVE-2025-52885.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1765195200">- security update
- added patches
  CVE-2025-11896 [bsc#1252337], infinite recursion leading to stack overflow due to object loop in PDF CMap
  * poppler-CVE-2025-11896.patch</changelog>
</package>
<package pkgid="6b9a144aecc3fcc03940c4bd63f13b7f9e9c78010955ed749ef38aefe307f40f" name="libpoppler-glib8" arch="x86_64">
  <version epoch="0" ver="24.03.0" rel="150600.3.16.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1676462400">- Update to version 23.02.0:
  + core:
  * CairoOutputDev:
    . Fix rendering of color type 3 fonts
    . Add handling matte entry
  * Fix segfault on wrong nssdir
  * Fix "NSS could not shutdown"
  + utils: pdfsig: Point out supports PKCS#11 URIs as nickname</changelog>
  <changelog author="dmueller@suse.com" date="1678190400">- update to 23.03.0:
  core:
  * PngWriter: Fix potential uninitialized memory use</changelog>
  <changelog author="dmueller@suse.com" date="1680523200">- update to 23.04.0:
  * Fix memory issue when signing fails. Issue #1372
  * Internal improvements of signature related code
  * CairoOutputDev: improve type3 font rendering
  * Fix memory leak in
    GlobalParams::findSystemFontFileForFamilyAndStyle
  * pdftocairo: Fix crash in some special situations
  * pdfsig: allow holes in -dump signature list
  * pdfsig: Support --help</changelog>
  <changelog author="dmueller@suse.com" date="1684411200">- update to 23.05.0:
  * Fix crash when filling some forms
  * Set SigFlags when signing unsigned signature
  * Add some infrastructure code to support multiple signing
    backends
  * Fix potential stack overflow in PostScriptFunction::parseCode
  * Fix some minor uninitialised memory reads</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 23.06.0 (bsc#1212255):
  * CairoOutputDev: Fix crash when doing type3 rendering
  * Fix crash with unknown signature hashing algorithms
  * Add gpgme backend for signature handling
  * FontInfo: Make it return proper information about font
    substitution
  * FontInfo: Try harder to get Type 3 font name
  * Store embedded fonts widths table in a more effective manner
  * Skip font lookup for nonprintable characters
  * Fix crash on malformed files
  * Add API to allow selecting signature backend (nss or gpgme)
  * Convert embedded files to bytearray a bit smarter</changelog>
  <changelog author="dmueller@suse.com" date="1689422400">- update to 23.07.0:
  core:
  * Fix reading of utf8-with-bom files
  * Fix crash if CERT_ExtractPublicKey doesn't return a public
    key
  * Fix rendering of some malformed documents. Issue #1395
  * Allow for stream compression and compress font streams in
    forms Remove method Hints::getPageRanges
  qt5:
  * Fix crash when overprint preview is enabled
  * Don't fail signature basics tests if backend is not
    configured
  qt6:
  * Fix crash when overprint preview is enabled
  * Don't fail signature basics tests if backend is not
    configured
  utils:
  * pdfsig: Allow showung and selecting signature backend
  * pdfsig: Describe signature dump format in manual page</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695124800">- Update to version 23.09.0:
  * core:
  - Add Android-specific font matching functionality
  - Fix digital signatures for NeedAppearance=true
  - Forms: Don't look up same glyph multiple times
  - Provide the key location for certificates you can sign with
  - Add ToUnicode support for similarequal
  - Fix crash on malformed files
  * qt5:
  - Provide the key location for certificates you can sign with
  - Allow to force a rasterized overprint preview during PS
    conversion
  * qt6:
  - Provide the key location for certificates you can sign with
  - Allow to force a rasterized overprint preview during PS
    conversion
  * pdfsig:
  - Provide the key location for certificates you can sign with
- Changes from version 23.08.0:
  * core:
  - Fix GWG 19.2 - DeviceN Overprint (White)
  - Splash: avoid bogus memory allocation size in
    doTilingPatternFill
  - Fix use-of-uninitialized-value in XRef
  - Fix float-cast-overflow error in Catalog
  - Cleanup gpgme backend code
  - Version symbols in poppler core
  * glib:
  - Improve poppler_get_available_signing_certificates
  - Add new members to PopplerCertificateInfo
  * utils:
  - pdftotext: small improvement to man page
- Bump poppler_sover to 131 following upstream changes.</changelog>
  <changelog author="dmueller@suse.com" date="1695988800">- build with gpgmepp for signing documents (bsc#1215632)</changelog>
  <changelog author="pgajdos@suse.com" date="1698408000">- version update to 23.10.0
    core:
  * cairo: update type 3 fonts for cairo 1.18 api
  * Fix crash on malformed files
    build system:
  * Make a few more dependencies soft-mandatory
  * Add more supported gnupg releases
  * Check if linker supports version scripts
- modified patches
  % reduce-boost-required-version.patch (refreshed)</changelog>
  <changelog author="alarrosa@suse.com" date="1698667200">- Add patch to let it build with the heavily patched tiff 4.0.9
  we have in SLE 15:
  * reduce-libtiff-required-version.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1700136000">- version update to 23.11.0
    core:
  * CairoOutputDev: Use internal downscaling algorithm if image exceeds Cairo's maximum dimensions.
  * Internal code improvements
  * Fix crash on malformed files
    utils:
  * pdftocairo: Add option to document logical structure if output is pdf
  * pdftocairo: EPS output should not contain %%PageOrientation</changelog>
  <changelog author="alarrosa@suse.com" date="1703592000">- version update to 23.12.0
    core:
  * Rewrite FoFiType1::parse to be more flexible
  * Small internal code refactoring</changelog>
  <changelog author="pgajdos@suse.com" date="1707912000">- version update to 24.02.0
  Release 24.02.0:
  core:
  * Fix reading some JBIG2 streams. Issue #1319
  * Fix saving some annotation interior color when it's empty
  * Make searching for fonts when adding annotations a bit faster
  * Make sure images are compressed when adding them
  * Small internal code cleanup
  utils:
  * pdfimages: return exit code 2 when error opening output files
  Release 24.01.0:
  core:
  * Don't crash on certain documents on the NSS signature backend
  * Fix infinite loop in some annotation code if there's not space for even one character
  * Fix build on Android with generic font configuration
  * Small internal code cleanup</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="alarrosa@suse.com" date="1709553600">- version update to 24.03.0
  Release 24.03.0:
  core:
  * Fix opening some malformed files. Issue #1447
  * Skip drawing image when it has singular matrix. Issue #1114
  * Fix crash on malformed files
  * Small internal code cleanup
  utils:
  * pdfdetach: Fix potential directory traversal
  * pdfimages: Enable to print filenames to stdout.
  * pdfsig: Add visible name/date when signing an existing form
    signature field
- Bump poppler_sover to 135 following upstream changes.</changelog>
  <changelog author="pgajdos@suse.com" date="1734955200">- security update
- added patches
  fix CVE-2024-56378 [bsc#1234795], out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc
  + poppler-CVE-2024-56378.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1742904000">- build with PIE [bsc#1239939]</changelog>
  <changelog author="pgajdos@suse.com" date="1744027200">- security update
- added patches
  fix CVE-2025-32364 [bsc#1240880], Floating-Point Exception
  + poppler-CVE-2025-32364.patch
  fix CVE-2025-32365 [bsc#1240881], misplaced isOk check in JBIG2Bitmap::combine function in JBIG2Stream.cc
  + poppler-CVE-2025-32365.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1745582400">- security update
- added patches
  CVE-2025-43903 [bsc#1241620], not verify the adbe.pkcs7.sha1 signatures on documents
  + poppler-CVE-2025-43903.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751630400">- security update
- added patches
  CVE-2025-52886 [bsc#1245625], use of 32-bit `std::atomic_int` for reference counting can lead to an integer overflow and trigger a use-after-free
  + poppler-CVE-2025-52886.patch</changelog>
</package>
<package pkgid="e2e74ca6a5e0e00115cf5a0d88fd3f702575dd13b0a98991525ebc05b74f5e70" name="libpoppler-glib8" arch="x86_64">
  <version epoch="0" ver="24.03.0" rel="150600.3.19.1"/>
  <changelog author="dmueller@suse.com" date="1678190400">- update to 23.03.0:
  core:
  * PngWriter: Fix potential uninitialized memory use</changelog>
  <changelog author="dmueller@suse.com" date="1680523200">- update to 23.04.0:
  * Fix memory issue when signing fails. Issue #1372
  * Internal improvements of signature related code
  * CairoOutputDev: improve type3 font rendering
  * Fix memory leak in
    GlobalParams::findSystemFontFileForFamilyAndStyle
  * pdftocairo: Fix crash in some special situations
  * pdfsig: allow holes in -dump signature list
  * pdfsig: Support --help</changelog>
  <changelog author="dmueller@suse.com" date="1684411200">- update to 23.05.0:
  * Fix crash when filling some forms
  * Set SigFlags when signing unsigned signature
  * Add some infrastructure code to support multiple signing
    backends
  * Fix potential stack overflow in PostScriptFunction::parseCode
  * Fix some minor uninitialised memory reads</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 23.06.0 (bsc#1212255):
  * CairoOutputDev: Fix crash when doing type3 rendering
  * Fix crash with unknown signature hashing algorithms
  * Add gpgme backend for signature handling
  * FontInfo: Make it return proper information about font
    substitution
  * FontInfo: Try harder to get Type 3 font name
  * Store embedded fonts widths table in a more effective manner
  * Skip font lookup for nonprintable characters
  * Fix crash on malformed files
  * Add API to allow selecting signature backend (nss or gpgme)
  * Convert embedded files to bytearray a bit smarter</changelog>
  <changelog author="dmueller@suse.com" date="1689422400">- update to 23.07.0:
  core:
  * Fix reading of utf8-with-bom files
  * Fix crash if CERT_ExtractPublicKey doesn't return a public
    key
  * Fix rendering of some malformed documents. Issue #1395
  * Allow for stream compression and compress font streams in
    forms Remove method Hints::getPageRanges
  qt5:
  * Fix crash when overprint preview is enabled
  * Don't fail signature basics tests if backend is not
    configured
  qt6:
  * Fix crash when overprint preview is enabled
  * Don't fail signature basics tests if backend is not
    configured
  utils:
  * pdfsig: Allow showung and selecting signature backend
  * pdfsig: Describe signature dump format in manual page</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695124800">- Update to version 23.09.0:
  * core:
  - Add Android-specific font matching functionality
  - Fix digital signatures for NeedAppearance=true
  - Forms: Don't look up same glyph multiple times
  - Provide the key location for certificates you can sign with
  - Add ToUnicode support for similarequal
  - Fix crash on malformed files
  * qt5:
  - Provide the key location for certificates you can sign with
  - Allow to force a rasterized overprint preview during PS
    conversion
  * qt6:
  - Provide the key location for certificates you can sign with
  - Allow to force a rasterized overprint preview during PS
    conversion
  * pdfsig:
  - Provide the key location for certificates you can sign with
- Changes from version 23.08.0:
  * core:
  - Fix GWG 19.2 - DeviceN Overprint (White)
  - Splash: avoid bogus memory allocation size in
    doTilingPatternFill
  - Fix use-of-uninitialized-value in XRef
  - Fix float-cast-overflow error in Catalog
  - Cleanup gpgme backend code
  - Version symbols in poppler core
  * glib:
  - Improve poppler_get_available_signing_certificates
  - Add new members to PopplerCertificateInfo
  * utils:
  - pdftotext: small improvement to man page
- Bump poppler_sover to 131 following upstream changes.</changelog>
  <changelog author="dmueller@suse.com" date="1695988800">- build with gpgmepp for signing documents (bsc#1215632)</changelog>
  <changelog author="pgajdos@suse.com" date="1698408000">- version update to 23.10.0
    core:
  * cairo: update type 3 fonts for cairo 1.18 api
  * Fix crash on malformed files
    build system:
  * Make a few more dependencies soft-mandatory
  * Add more supported gnupg releases
  * Check if linker supports version scripts
- modified patches
  % reduce-boost-required-version.patch (refreshed)</changelog>
  <changelog author="alarrosa@suse.com" date="1698667200">- Add patch to let it build with the heavily patched tiff 4.0.9
  we have in SLE 15:
  * reduce-libtiff-required-version.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1700136000">- version update to 23.11.0
    core:
  * CairoOutputDev: Use internal downscaling algorithm if image exceeds Cairo's maximum dimensions.
  * Internal code improvements
  * Fix crash on malformed files
    utils:
  * pdftocairo: Add option to document logical structure if output is pdf
  * pdftocairo: EPS output should not contain %%PageOrientation</changelog>
  <changelog author="alarrosa@suse.com" date="1703592000">- version update to 23.12.0
    core:
  * Rewrite FoFiType1::parse to be more flexible
  * Small internal code refactoring</changelog>
  <changelog author="pgajdos@suse.com" date="1707912000">- version update to 24.02.0
  Release 24.02.0:
  core:
  * Fix reading some JBIG2 streams. Issue #1319
  * Fix saving some annotation interior color when it's empty
  * Make searching for fonts when adding annotations a bit faster
  * Make sure images are compressed when adding them
  * Small internal code cleanup
  utils:
  * pdfimages: return exit code 2 when error opening output files
  Release 24.01.0:
  core:
  * Don't crash on certain documents on the NSS signature backend
  * Fix infinite loop in some annotation code if there's not space for even one character
  * Fix build on Android with generic font configuration
  * Small internal code cleanup</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="alarrosa@suse.com" date="1709553600">- version update to 24.03.0
  Release 24.03.0:
  core:
  * Fix opening some malformed files. Issue #1447
  * Skip drawing image when it has singular matrix. Issue #1114
  * Fix crash on malformed files
  * Small internal code cleanup
  utils:
  * pdfdetach: Fix potential directory traversal
  * pdfimages: Enable to print filenames to stdout.
  * pdfsig: Add visible name/date when signing an existing form
    signature field
- Bump poppler_sover to 135 following upstream changes.</changelog>
  <changelog author="pgajdos@suse.com" date="1734955200">- security update
- added patches
  fix CVE-2024-56378 [bsc#1234795], out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc
  + poppler-CVE-2024-56378.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1742904000">- build with PIE [bsc#1239939]</changelog>
  <changelog author="pgajdos@suse.com" date="1744027200">- security update
- added patches
  fix CVE-2025-32364 [bsc#1240880], Floating-Point Exception
  + poppler-CVE-2025-32364.patch
  fix CVE-2025-32365 [bsc#1240881], misplaced isOk check in JBIG2Bitmap::combine function in JBIG2Stream.cc
  + poppler-CVE-2025-32365.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1745582400">- security update
- added patches
  CVE-2025-43903 [bsc#1241620], not verify the adbe.pkcs7.sha1 signatures on documents
  + poppler-CVE-2025-43903.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751630400">- security update
- added patches
  CVE-2025-52886 [bsc#1245625], use of 32-bit `std::atomic_int` for reference counting can lead to an integer overflow and trigger a use-after-free
  + poppler-CVE-2025-52886.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1754395200">- security update
- added patches
  CVE-2025-50420 [bsc#1247590], An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).
  + poppler-CVE-2025-50420.patch</changelog>
</package>
<package pkgid="aa44a733609cc6b243e3018e0522a7b9d21d21dbb82afb4481bc2aa7e580412c" name="libpoppler-glib8" arch="x86_64">
  <version epoch="0" ver="24.03.0" rel="150600.3.24.1"/>
  <changelog author="dmueller@suse.com" date="1684411200">- update to 23.05.0:
  * Fix crash when filling some forms
  * Set SigFlags when signing unsigned signature
  * Add some infrastructure code to support multiple signing
    backends
  * Fix potential stack overflow in PostScriptFunction::parseCode
  * Fix some minor uninitialised memory reads</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 23.06.0 (bsc#1212255):
  * CairoOutputDev: Fix crash when doing type3 rendering
  * Fix crash with unknown signature hashing algorithms
  * Add gpgme backend for signature handling
  * FontInfo: Make it return proper information about font
    substitution
  * FontInfo: Try harder to get Type 3 font name
  * Store embedded fonts widths table in a more effective manner
  * Skip font lookup for nonprintable characters
  * Fix crash on malformed files
  * Add API to allow selecting signature backend (nss or gpgme)
  * Convert embedded files to bytearray a bit smarter</changelog>
  <changelog author="dmueller@suse.com" date="1689422400">- update to 23.07.0:
  core:
  * Fix reading of utf8-with-bom files
  * Fix crash if CERT_ExtractPublicKey doesn't return a public
    key
  * Fix rendering of some malformed documents. Issue #1395
  * Allow for stream compression and compress font streams in
    forms Remove method Hints::getPageRanges
  qt5:
  * Fix crash when overprint preview is enabled
  * Don't fail signature basics tests if backend is not
    configured
  qt6:
  * Fix crash when overprint preview is enabled
  * Don't fail signature basics tests if backend is not
    configured
  utils:
  * pdfsig: Allow showung and selecting signature backend
  * pdfsig: Describe signature dump format in manual page</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695124800">- Update to version 23.09.0:
  * core:
  - Add Android-specific font matching functionality
  - Fix digital signatures for NeedAppearance=true
  - Forms: Don't look up same glyph multiple times
  - Provide the key location for certificates you can sign with
  - Add ToUnicode support for similarequal
  - Fix crash on malformed files
  * qt5:
  - Provide the key location for certificates you can sign with
  - Allow to force a rasterized overprint preview during PS
    conversion
  * qt6:
  - Provide the key location for certificates you can sign with
  - Allow to force a rasterized overprint preview during PS
    conversion
  * pdfsig:
  - Provide the key location for certificates you can sign with
- Changes from version 23.08.0:
  * core:
  - Fix GWG 19.2 - DeviceN Overprint (White)
  - Splash: avoid bogus memory allocation size in
    doTilingPatternFill
  - Fix use-of-uninitialized-value in XRef
  - Fix float-cast-overflow error in Catalog
  - Cleanup gpgme backend code
  - Version symbols in poppler core
  * glib:
  - Improve poppler_get_available_signing_certificates
  - Add new members to PopplerCertificateInfo
  * utils:
  - pdftotext: small improvement to man page
- Bump poppler_sover to 131 following upstream changes.</changelog>
  <changelog author="dmueller@suse.com" date="1695988800">- build with gpgmepp for signing documents (bsc#1215632)</changelog>
  <changelog author="pgajdos@suse.com" date="1698408000">- version update to 23.10.0
    core:
  * cairo: update type 3 fonts for cairo 1.18 api
  * Fix crash on malformed files
    build system:
  * Make a few more dependencies soft-mandatory
  * Add more supported gnupg releases
  * Check if linker supports version scripts
- modified patches
  % reduce-boost-required-version.patch (refreshed)</changelog>
  <changelog author="alarrosa@suse.com" date="1698667200">- Add patch to let it build with the heavily patched tiff 4.0.9
  we have in SLE 15:
  * reduce-libtiff-required-version.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1700136000">- version update to 23.11.0
    core:
  * CairoOutputDev: Use internal downscaling algorithm if image exceeds Cairo's maximum dimensions.
  * Internal code improvements
  * Fix crash on malformed files
    utils:
  * pdftocairo: Add option to document logical structure if output is pdf
  * pdftocairo: EPS output should not contain %%PageOrientation</changelog>
  <changelog author="alarrosa@suse.com" date="1703592000">- version update to 23.12.0
    core:
  * Rewrite FoFiType1::parse to be more flexible
  * Small internal code refactoring</changelog>
  <changelog author="pgajdos@suse.com" date="1707912000">- version update to 24.02.0
  Release 24.02.0:
  core:
  * Fix reading some JBIG2 streams. Issue #1319
  * Fix saving some annotation interior color when it's empty
  * Make searching for fonts when adding annotations a bit faster
  * Make sure images are compressed when adding them
  * Small internal code cleanup
  utils:
  * pdfimages: return exit code 2 when error opening output files
  Release 24.01.0:
  core:
  * Don't crash on certain documents on the NSS signature backend
  * Fix infinite loop in some annotation code if there's not space for even one character
  * Fix build on Android with generic font configuration
  * Small internal code cleanup</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="alarrosa@suse.com" date="1709553600">- version update to 24.03.0
  Release 24.03.0:
  core:
  * Fix opening some malformed files. Issue #1447
  * Skip drawing image when it has singular matrix. Issue #1114
  * Fix crash on malformed files
  * Small internal code cleanup
  utils:
  * pdfdetach: Fix potential directory traversal
  * pdfimages: Enable to print filenames to stdout.
  * pdfsig: Add visible name/date when signing an existing form
    signature field
- Bump poppler_sover to 135 following upstream changes.</changelog>
  <changelog author="pgajdos@suse.com" date="1734955200">- security update
- added patches
  fix CVE-2024-56378 [bsc#1234795], out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc
  + poppler-CVE-2024-56378.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1742904000">- build with PIE [bsc#1239939]</changelog>
  <changelog author="pgajdos@suse.com" date="1744027200">- security update
- added patches
  fix CVE-2025-32364 [bsc#1240880], Floating-Point Exception
  + poppler-CVE-2025-32364.patch
  fix CVE-2025-32365 [bsc#1240881], misplaced isOk check in JBIG2Bitmap::combine function in JBIG2Stream.cc
  + poppler-CVE-2025-32365.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1745582400">- security update
- added patches
  CVE-2025-43903 [bsc#1241620], not verify the adbe.pkcs7.sha1 signatures on documents
  + poppler-CVE-2025-43903.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751630400">- security update
- added patches
  CVE-2025-52886 [bsc#1245625], use of 32-bit `std::atomic_int` for reference counting can lead to an integer overflow and trigger a use-after-free
  + poppler-CVE-2025-52886.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1754395200">- security update
- added patches
  CVE-2025-50420 [bsc#1247590], An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).
  + poppler-CVE-2025-50420.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1759752000">- security update
- added patches
  CVE-2025-43718 [bsc#1250908], uncontrolled recursion in the regex-based metadata parser when processing specially crafted PDF files allows for stack exhaustion and denial of service
  * poppler-CVE-2025-43718.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1760443200">- security update
- added patches
  CVE-2025-52885 [bsc#1251940], raw pointers can lead to dangling pointers when the vector is resized
  * poppler-CVE-2025-52885.patch</changelog>
</package>
<package pkgid="af222467e19fb4d0a9fe55844d85f88099061fe3e1055e14fa2552835fe3c4a6" name="libpoppler-glib8" arch="x86_64">
  <version epoch="0" ver="24.03.0" rel="150600.3.27.1"/>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 23.06.0 (bsc#1212255):
  * CairoOutputDev: Fix crash when doing type3 rendering
  * Fix crash with unknown signature hashing algorithms
  * Add gpgme backend for signature handling
  * FontInfo: Make it return proper information about font
    substitution
  * FontInfo: Try harder to get Type 3 font name
  * Store embedded fonts widths table in a more effective manner
  * Skip font lookup for nonprintable characters
  * Fix crash on malformed files
  * Add API to allow selecting signature backend (nss or gpgme)
  * Convert embedded files to bytearray a bit smarter</changelog>
  <changelog author="dmueller@suse.com" date="1689422400">- update to 23.07.0:
  core:
  * Fix reading of utf8-with-bom files
  * Fix crash if CERT_ExtractPublicKey doesn't return a public
    key
  * Fix rendering of some malformed documents. Issue #1395
  * Allow for stream compression and compress font streams in
    forms Remove method Hints::getPageRanges
  qt5:
  * Fix crash when overprint preview is enabled
  * Don't fail signature basics tests if backend is not
    configured
  qt6:
  * Fix crash when overprint preview is enabled
  * Don't fail signature basics tests if backend is not
    configured
  utils:
  * pdfsig: Allow showung and selecting signature backend
  * pdfsig: Describe signature dump format in manual page</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695124800">- Update to version 23.09.0:
  * core:
  - Add Android-specific font matching functionality
  - Fix digital signatures for NeedAppearance=true
  - Forms: Don't look up same glyph multiple times
  - Provide the key location for certificates you can sign with
  - Add ToUnicode support for similarequal
  - Fix crash on malformed files
  * qt5:
  - Provide the key location for certificates you can sign with
  - Allow to force a rasterized overprint preview during PS
    conversion
  * qt6:
  - Provide the key location for certificates you can sign with
  - Allow to force a rasterized overprint preview during PS
    conversion
  * pdfsig:
  - Provide the key location for certificates you can sign with
- Changes from version 23.08.0:
  * core:
  - Fix GWG 19.2 - DeviceN Overprint (White)
  - Splash: avoid bogus memory allocation size in
    doTilingPatternFill
  - Fix use-of-uninitialized-value in XRef
  - Fix float-cast-overflow error in Catalog
  - Cleanup gpgme backend code
  - Version symbols in poppler core
  * glib:
  - Improve poppler_get_available_signing_certificates
  - Add new members to PopplerCertificateInfo
  * utils:
  - pdftotext: small improvement to man page
- Bump poppler_sover to 131 following upstream changes.</changelog>
  <changelog author="dmueller@suse.com" date="1695988800">- build with gpgmepp for signing documents (bsc#1215632)</changelog>
  <changelog author="pgajdos@suse.com" date="1698408000">- version update to 23.10.0
    core:
  * cairo: update type 3 fonts for cairo 1.18 api
  * Fix crash on malformed files
    build system:
  * Make a few more dependencies soft-mandatory
  * Add more supported gnupg releases
  * Check if linker supports version scripts
- modified patches
  % reduce-boost-required-version.patch (refreshed)</changelog>
  <changelog author="alarrosa@suse.com" date="1698667200">- Add patch to let it build with the heavily patched tiff 4.0.9
  we have in SLE 15:
  * reduce-libtiff-required-version.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1700136000">- version update to 23.11.0
    core:
  * CairoOutputDev: Use internal downscaling algorithm if image exceeds Cairo's maximum dimensions.
  * Internal code improvements
  * Fix crash on malformed files
    utils:
  * pdftocairo: Add option to document logical structure if output is pdf
  * pdftocairo: EPS output should not contain %%PageOrientation</changelog>
  <changelog author="alarrosa@suse.com" date="1703592000">- version update to 23.12.0
    core:
  * Rewrite FoFiType1::parse to be more flexible
  * Small internal code refactoring</changelog>
  <changelog author="pgajdos@suse.com" date="1707912000">- version update to 24.02.0
  Release 24.02.0:
  core:
  * Fix reading some JBIG2 streams. Issue #1319
  * Fix saving some annotation interior color when it's empty
  * Make searching for fonts when adding annotations a bit faster
  * Make sure images are compressed when adding them
  * Small internal code cleanup
  utils:
  * pdfimages: return exit code 2 when error opening output files
  Release 24.01.0:
  core:
  * Don't crash on certain documents on the NSS signature backend
  * Fix infinite loop in some annotation code if there's not space for even one character
  * Fix build on Android with generic font configuration
  * Small internal code cleanup</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="alarrosa@suse.com" date="1709553600">- version update to 24.03.0
  Release 24.03.0:
  core:
  * Fix opening some malformed files. Issue #1447
  * Skip drawing image when it has singular matrix. Issue #1114
  * Fix crash on malformed files
  * Small internal code cleanup
  utils:
  * pdfdetach: Fix potential directory traversal
  * pdfimages: Enable to print filenames to stdout.
  * pdfsig: Add visible name/date when signing an existing form
    signature field
- Bump poppler_sover to 135 following upstream changes.</changelog>
  <changelog author="pgajdos@suse.com" date="1734955200">- security update
- added patches
  fix CVE-2024-56378 [bsc#1234795], out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc
  + poppler-CVE-2024-56378.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1742904000">- build with PIE [bsc#1239939]</changelog>
  <changelog author="pgajdos@suse.com" date="1744027200">- security update
- added patches
  fix CVE-2025-32364 [bsc#1240880], Floating-Point Exception
  + poppler-CVE-2025-32364.patch
  fix CVE-2025-32365 [bsc#1240881], misplaced isOk check in JBIG2Bitmap::combine function in JBIG2Stream.cc
  + poppler-CVE-2025-32365.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1745582400">- security update
- added patches
  CVE-2025-43903 [bsc#1241620], not verify the adbe.pkcs7.sha1 signatures on documents
  + poppler-CVE-2025-43903.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751630400">- security update
- added patches
  CVE-2025-52886 [bsc#1245625], use of 32-bit `std::atomic_int` for reference counting can lead to an integer overflow and trigger a use-after-free
  + poppler-CVE-2025-52886.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1754395200">- security update
- added patches
  CVE-2025-50420 [bsc#1247590], An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).
  + poppler-CVE-2025-50420.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1759752000">- security update
- added patches
  CVE-2025-43718 [bsc#1250908], uncontrolled recursion in the regex-based metadata parser when processing specially crafted PDF files allows for stack exhaustion and denial of service
  * poppler-CVE-2025-43718.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1760443200">- security update
- added patches
  CVE-2025-52885 [bsc#1251940], raw pointers can lead to dangling pointers when the vector is resized
  * poppler-CVE-2025-52885.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1765195200">- security update
- added patches
  CVE-2025-11896 [bsc#1252337], infinite recursion leading to stack overflow due to object loop in PDF CMap
  * poppler-CVE-2025-11896.patch</changelog>
</package>
<package pkgid="3cf8b9a68df65c942cb3f271458591def0d907d6644c72f3573e9a040455488b" name="libpoppler135" arch="x86_64">
  <version epoch="0" ver="24.03.0" rel="150600.3.16.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1676462400">- Update to version 23.02.0:
  + core:
  * CairoOutputDev:
    . Fix rendering of color type 3 fonts
    . Add handling matte entry
  * Fix segfault on wrong nssdir
  * Fix "NSS could not shutdown"
  + utils: pdfsig: Point out supports PKCS#11 URIs as nickname</changelog>
  <changelog author="dmueller@suse.com" date="1678190400">- update to 23.03.0:
  core:
  * PngWriter: Fix potential uninitialized memory use</changelog>
  <changelog author="dmueller@suse.com" date="1680523200">- update to 23.04.0:
  * Fix memory issue when signing fails. Issue #1372
  * Internal improvements of signature related code
  * CairoOutputDev: improve type3 font rendering
  * Fix memory leak in
    GlobalParams::findSystemFontFileForFamilyAndStyle
  * pdftocairo: Fix crash in some special situations
  * pdfsig: allow holes in -dump signature list
  * pdfsig: Support --help</changelog>
  <changelog author="dmueller@suse.com" date="1684411200">- update to 23.05.0:
  * Fix crash when filling some forms
  * Set SigFlags when signing unsigned signature
  * Add some infrastructure code to support multiple signing
    backends
  * Fix potential stack overflow in PostScriptFunction::parseCode
  * Fix some minor uninitialised memory reads</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 23.06.0 (bsc#1212255):
  * CairoOutputDev: Fix crash when doing type3 rendering
  * Fix crash with unknown signature hashing algorithms
  * Add gpgme backend for signature handling
  * FontInfo: Make it return proper information about font
    substitution
  * FontInfo: Try harder to get Type 3 font name
  * Store embedded fonts widths table in a more effective manner
  * Skip font lookup for nonprintable characters
  * Fix crash on malformed files
  * Add API to allow selecting signature backend (nss or gpgme)
  * Convert embedded files to bytearray a bit smarter</changelog>
  <changelog author="dmueller@suse.com" date="1689422400">- update to 23.07.0:
  core:
  * Fix reading of utf8-with-bom files
  * Fix crash if CERT_ExtractPublicKey doesn't return a public
    key
  * Fix rendering of some malformed documents. Issue #1395
  * Allow for stream compression and compress font streams in
    forms Remove method Hints::getPageRanges
  qt5:
  * Fix crash when overprint preview is enabled
  * Don't fail signature basics tests if backend is not
    configured
  qt6:
  * Fix crash when overprint preview is enabled
  * Don't fail signature basics tests if backend is not
    configured
  utils:
  * pdfsig: Allow showung and selecting signature backend
  * pdfsig: Describe signature dump format in manual page</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695124800">- Update to version 23.09.0:
  * core:
  - Add Android-specific font matching functionality
  - Fix digital signatures for NeedAppearance=true
  - Forms: Don't look up same glyph multiple times
  - Provide the key location for certificates you can sign with
  - Add ToUnicode support for similarequal
  - Fix crash on malformed files
  * qt5:
  - Provide the key location for certificates you can sign with
  - Allow to force a rasterized overprint preview during PS
    conversion
  * qt6:
  - Provide the key location for certificates you can sign with
  - Allow to force a rasterized overprint preview during PS
    conversion
  * pdfsig:
  - Provide the key location for certificates you can sign with
- Changes from version 23.08.0:
  * core:
  - Fix GWG 19.2 - DeviceN Overprint (White)
  - Splash: avoid bogus memory allocation size in
    doTilingPatternFill
  - Fix use-of-uninitialized-value in XRef
  - Fix float-cast-overflow error in Catalog
  - Cleanup gpgme backend code
  - Version symbols in poppler core
  * glib:
  - Improve poppler_get_available_signing_certificates
  - Add new members to PopplerCertificateInfo
  * utils:
  - pdftotext: small improvement to man page
- Bump poppler_sover to 131 following upstream changes.</changelog>
  <changelog author="dmueller@suse.com" date="1695988800">- build with gpgmepp for signing documents (bsc#1215632)</changelog>
  <changelog author="pgajdos@suse.com" date="1698408000">- version update to 23.10.0
    core:
  * cairo: update type 3 fonts for cairo 1.18 api
  * Fix crash on malformed files
    build system:
  * Make a few more dependencies soft-mandatory
  * Add more supported gnupg releases
  * Check if linker supports version scripts
- modified patches
  % reduce-boost-required-version.patch (refreshed)</changelog>
  <changelog author="alarrosa@suse.com" date="1698667200">- Add patch to let it build with the heavily patched tiff 4.0.9
  we have in SLE 15:
  * reduce-libtiff-required-version.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1700136000">- version update to 23.11.0
    core:
  * CairoOutputDev: Use internal downscaling algorithm if image exceeds Cairo's maximum dimensions.
  * Internal code improvements
  * Fix crash on malformed files
    utils:
  * pdftocairo: Add option to document logical structure if output is pdf
  * pdftocairo: EPS output should not contain %%PageOrientation</changelog>
  <changelog author="alarrosa@suse.com" date="1703592000">- version update to 23.12.0
    core:
  * Rewrite FoFiType1::parse to be more flexible
  * Small internal code refactoring</changelog>
  <changelog author="pgajdos@suse.com" date="1707912000">- version update to 24.02.0
  Release 24.02.0:
  core:
  * Fix reading some JBIG2 streams. Issue #1319
  * Fix saving some annotation interior color when it's empty
  * Make searching for fonts when adding annotations a bit faster
  * Make sure images are compressed when adding them
  * Small internal code cleanup
  utils:
  * pdfimages: return exit code 2 when error opening output files
  Release 24.01.0:
  core:
  * Don't crash on certain documents on the NSS signature backend
  * Fix infinite loop in some annotation code if there's not space for even one character
  * Fix build on Android with generic font configuration
  * Small internal code cleanup</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="alarrosa@suse.com" date="1709553600">- version update to 24.03.0
  Release 24.03.0:
  core:
  * Fix opening some malformed files. Issue #1447
  * Skip drawing image when it has singular matrix. Issue #1114
  * Fix crash on malformed files
  * Small internal code cleanup
  utils:
  * pdfdetach: Fix potential directory traversal
  * pdfimages: Enable to print filenames to stdout.
  * pdfsig: Add visible name/date when signing an existing form
    signature field
- Bump poppler_sover to 135 following upstream changes.</changelog>
  <changelog author="pgajdos@suse.com" date="1734955200">- security update
- added patches
  fix CVE-2024-56378 [bsc#1234795], out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc
  + poppler-CVE-2024-56378.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1742904000">- build with PIE [bsc#1239939]</changelog>
  <changelog author="pgajdos@suse.com" date="1744027200">- security update
- added patches
  fix CVE-2025-32364 [bsc#1240880], Floating-Point Exception
  + poppler-CVE-2025-32364.patch
  fix CVE-2025-32365 [bsc#1240881], misplaced isOk check in JBIG2Bitmap::combine function in JBIG2Stream.cc
  + poppler-CVE-2025-32365.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1745582400">- security update
- added patches
  CVE-2025-43903 [bsc#1241620], not verify the adbe.pkcs7.sha1 signatures on documents
  + poppler-CVE-2025-43903.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751630400">- security update
- added patches
  CVE-2025-52886 [bsc#1245625], use of 32-bit `std::atomic_int` for reference counting can lead to an integer overflow and trigger a use-after-free
  + poppler-CVE-2025-52886.patch</changelog>
</package>
<package pkgid="e33e42336308630fddfc39dd55ddcc124565eee39cafca6d5ab08a6546041c1e" name="libpoppler135" arch="x86_64">
  <version epoch="0" ver="24.03.0" rel="150600.3.19.1"/>
  <changelog author="dmueller@suse.com" date="1678190400">- update to 23.03.0:
  core:
  * PngWriter: Fix potential uninitialized memory use</changelog>
  <changelog author="dmueller@suse.com" date="1680523200">- update to 23.04.0:
  * Fix memory issue when signing fails. Issue #1372
  * Internal improvements of signature related code
  * CairoOutputDev: improve type3 font rendering
  * Fix memory leak in
    GlobalParams::findSystemFontFileForFamilyAndStyle
  * pdftocairo: Fix crash in some special situations
  * pdfsig: allow holes in -dump signature list
  * pdfsig: Support --help</changelog>
  <changelog author="dmueller@suse.com" date="1684411200">- update to 23.05.0:
  * Fix crash when filling some forms
  * Set SigFlags when signing unsigned signature
  * Add some infrastructure code to support multiple signing
    backends
  * Fix potential stack overflow in PostScriptFunction::parseCode
  * Fix some minor uninitialised memory reads</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 23.06.0 (bsc#1212255):
  * CairoOutputDev: Fix crash when doing type3 rendering
  * Fix crash with unknown signature hashing algorithms
  * Add gpgme backend for signature handling
  * FontInfo: Make it return proper information about font
    substitution
  * FontInfo: Try harder to get Type 3 font name
  * Store embedded fonts widths table in a more effective manner
  * Skip font lookup for nonprintable characters
  * Fix crash on malformed files
  * Add API to allow selecting signature backend (nss or gpgme)
  * Convert embedded files to bytearray a bit smarter</changelog>
  <changelog author="dmueller@suse.com" date="1689422400">- update to 23.07.0:
  core:
  * Fix reading of utf8-with-bom files
  * Fix crash if CERT_ExtractPublicKey doesn't return a public
    key
  * Fix rendering of some malformed documents. Issue #1395
  * Allow for stream compression and compress font streams in
    forms Remove method Hints::getPageRanges
  qt5:
  * Fix crash when overprint preview is enabled
  * Don't fail signature basics tests if backend is not
    configured
  qt6:
  * Fix crash when overprint preview is enabled
  * Don't fail signature basics tests if backend is not
    configured
  utils:
  * pdfsig: Allow showung and selecting signature backend
  * pdfsig: Describe signature dump format in manual page</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695124800">- Update to version 23.09.0:
  * core:
  - Add Android-specific font matching functionality
  - Fix digital signatures for NeedAppearance=true
  - Forms: Don't look up same glyph multiple times
  - Provide the key location for certificates you can sign with
  - Add ToUnicode support for similarequal
  - Fix crash on malformed files
  * qt5:
  - Provide the key location for certificates you can sign with
  - Allow to force a rasterized overprint preview during PS
    conversion
  * qt6:
  - Provide the key location for certificates you can sign with
  - Allow to force a rasterized overprint preview during PS
    conversion
  * pdfsig:
  - Provide the key location for certificates you can sign with
- Changes from version 23.08.0:
  * core:
  - Fix GWG 19.2 - DeviceN Overprint (White)
  - Splash: avoid bogus memory allocation size in
    doTilingPatternFill
  - Fix use-of-uninitialized-value in XRef
  - Fix float-cast-overflow error in Catalog
  - Cleanup gpgme backend code
  - Version symbols in poppler core
  * glib:
  - Improve poppler_get_available_signing_certificates
  - Add new members to PopplerCertificateInfo
  * utils:
  - pdftotext: small improvement to man page
- Bump poppler_sover to 131 following upstream changes.</changelog>
  <changelog author="dmueller@suse.com" date="1695988800">- build with gpgmepp for signing documents (bsc#1215632)</changelog>
  <changelog author="pgajdos@suse.com" date="1698408000">- version update to 23.10.0
    core:
  * cairo: update type 3 fonts for cairo 1.18 api
  * Fix crash on malformed files
    build system:
  * Make a few more dependencies soft-mandatory
  * Add more supported gnupg releases
  * Check if linker supports version scripts
- modified patches
  % reduce-boost-required-version.patch (refreshed)</changelog>
  <changelog author="alarrosa@suse.com" date="1698667200">- Add patch to let it build with the heavily patched tiff 4.0.9
  we have in SLE 15:
  * reduce-libtiff-required-version.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1700136000">- version update to 23.11.0
    core:
  * CairoOutputDev: Use internal downscaling algorithm if image exceeds Cairo's maximum dimensions.
  * Internal code improvements
  * Fix crash on malformed files
    utils:
  * pdftocairo: Add option to document logical structure if output is pdf
  * pdftocairo: EPS output should not contain %%PageOrientation</changelog>
  <changelog author="alarrosa@suse.com" date="1703592000">- version update to 23.12.0
    core:
  * Rewrite FoFiType1::parse to be more flexible
  * Small internal code refactoring</changelog>
  <changelog author="pgajdos@suse.com" date="1707912000">- version update to 24.02.0
  Release 24.02.0:
  core:
  * Fix reading some JBIG2 streams. Issue #1319
  * Fix saving some annotation interior color when it's empty
  * Make searching for fonts when adding annotations a bit faster
  * Make sure images are compressed when adding them
  * Small internal code cleanup
  utils:
  * pdfimages: return exit code 2 when error opening output files
  Release 24.01.0:
  core:
  * Don't crash on certain documents on the NSS signature backend
  * Fix infinite loop in some annotation code if there's not space for even one character
  * Fix build on Android with generic font configuration
  * Small internal code cleanup</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="alarrosa@suse.com" date="1709553600">- version update to 24.03.0
  Release 24.03.0:
  core:
  * Fix opening some malformed files. Issue #1447
  * Skip drawing image when it has singular matrix. Issue #1114
  * Fix crash on malformed files
  * Small internal code cleanup
  utils:
  * pdfdetach: Fix potential directory traversal
  * pdfimages: Enable to print filenames to stdout.
  * pdfsig: Add visible name/date when signing an existing form
    signature field
- Bump poppler_sover to 135 following upstream changes.</changelog>
  <changelog author="pgajdos@suse.com" date="1734955200">- security update
- added patches
  fix CVE-2024-56378 [bsc#1234795], out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc
  + poppler-CVE-2024-56378.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1742904000">- build with PIE [bsc#1239939]</changelog>
  <changelog author="pgajdos@suse.com" date="1744027200">- security update
- added patches
  fix CVE-2025-32364 [bsc#1240880], Floating-Point Exception
  + poppler-CVE-2025-32364.patch
  fix CVE-2025-32365 [bsc#1240881], misplaced isOk check in JBIG2Bitmap::combine function in JBIG2Stream.cc
  + poppler-CVE-2025-32365.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1745582400">- security update
- added patches
  CVE-2025-43903 [bsc#1241620], not verify the adbe.pkcs7.sha1 signatures on documents
  + poppler-CVE-2025-43903.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751630400">- security update
- added patches
  CVE-2025-52886 [bsc#1245625], use of 32-bit `std::atomic_int` for reference counting can lead to an integer overflow and trigger a use-after-free
  + poppler-CVE-2025-52886.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1754395200">- security update
- added patches
  CVE-2025-50420 [bsc#1247590], An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).
  + poppler-CVE-2025-50420.patch</changelog>
</package>
<package pkgid="1a9a40dc7b60cc8eca39b61514780121868ed6911fd6b8da7a8d63ebeefbb8bc" name="libpoppler135" arch="x86_64">
  <version epoch="0" ver="24.03.0" rel="150600.3.24.1"/>
  <changelog author="dmueller@suse.com" date="1684411200">- update to 23.05.0:
  * Fix crash when filling some forms
  * Set SigFlags when signing unsigned signature
  * Add some infrastructure code to support multiple signing
    backends
  * Fix potential stack overflow in PostScriptFunction::parseCode
  * Fix some minor uninitialised memory reads</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 23.06.0 (bsc#1212255):
  * CairoOutputDev: Fix crash when doing type3 rendering
  * Fix crash with unknown signature hashing algorithms
  * Add gpgme backend for signature handling
  * FontInfo: Make it return proper information about font
    substitution
  * FontInfo: Try harder to get Type 3 font name
  * Store embedded fonts widths table in a more effective manner
  * Skip font lookup for nonprintable characters
  * Fix crash on malformed files
  * Add API to allow selecting signature backend (nss or gpgme)
  * Convert embedded files to bytearray a bit smarter</changelog>
  <changelog author="dmueller@suse.com" date="1689422400">- update to 23.07.0:
  core:
  * Fix reading of utf8-with-bom files
  * Fix crash if CERT_ExtractPublicKey doesn't return a public
    key
  * Fix rendering of some malformed documents. Issue #1395
  * Allow for stream compression and compress font streams in
    forms Remove method Hints::getPageRanges
  qt5:
  * Fix crash when overprint preview is enabled
  * Don't fail signature basics tests if backend is not
    configured
  qt6:
  * Fix crash when overprint preview is enabled
  * Don't fail signature basics tests if backend is not
    configured
  utils:
  * pdfsig: Allow showung and selecting signature backend
  * pdfsig: Describe signature dump format in manual page</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695124800">- Update to version 23.09.0:
  * core:
  - Add Android-specific font matching functionality
  - Fix digital signatures for NeedAppearance=true
  - Forms: Don't look up same glyph multiple times
  - Provide the key location for certificates you can sign with
  - Add ToUnicode support for similarequal
  - Fix crash on malformed files
  * qt5:
  - Provide the key location for certificates you can sign with
  - Allow to force a rasterized overprint preview during PS
    conversion
  * qt6:
  - Provide the key location for certificates you can sign with
  - Allow to force a rasterized overprint preview during PS
    conversion
  * pdfsig:
  - Provide the key location for certificates you can sign with
- Changes from version 23.08.0:
  * core:
  - Fix GWG 19.2 - DeviceN Overprint (White)
  - Splash: avoid bogus memory allocation size in
    doTilingPatternFill
  - Fix use-of-uninitialized-value in XRef
  - Fix float-cast-overflow error in Catalog
  - Cleanup gpgme backend code
  - Version symbols in poppler core
  * glib:
  - Improve poppler_get_available_signing_certificates
  - Add new members to PopplerCertificateInfo
  * utils:
  - pdftotext: small improvement to man page
- Bump poppler_sover to 131 following upstream changes.</changelog>
  <changelog author="dmueller@suse.com" date="1695988800">- build with gpgmepp for signing documents (bsc#1215632)</changelog>
  <changelog author="pgajdos@suse.com" date="1698408000">- version update to 23.10.0
    core:
  * cairo: update type 3 fonts for cairo 1.18 api
  * Fix crash on malformed files
    build system:
  * Make a few more dependencies soft-mandatory
  * Add more supported gnupg releases
  * Check if linker supports version scripts
- modified patches
  % reduce-boost-required-version.patch (refreshed)</changelog>
  <changelog author="alarrosa@suse.com" date="1698667200">- Add patch to let it build with the heavily patched tiff 4.0.9
  we have in SLE 15:
  * reduce-libtiff-required-version.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1700136000">- version update to 23.11.0
    core:
  * CairoOutputDev: Use internal downscaling algorithm if image exceeds Cairo's maximum dimensions.
  * Internal code improvements
  * Fix crash on malformed files
    utils:
  * pdftocairo: Add option to document logical structure if output is pdf
  * pdftocairo: EPS output should not contain %%PageOrientation</changelog>
  <changelog author="alarrosa@suse.com" date="1703592000">- version update to 23.12.0
    core:
  * Rewrite FoFiType1::parse to be more flexible
  * Small internal code refactoring</changelog>
  <changelog author="pgajdos@suse.com" date="1707912000">- version update to 24.02.0
  Release 24.02.0:
  core:
  * Fix reading some JBIG2 streams. Issue #1319
  * Fix saving some annotation interior color when it's empty
  * Make searching for fonts when adding annotations a bit faster
  * Make sure images are compressed when adding them
  * Small internal code cleanup
  utils:
  * pdfimages: return exit code 2 when error opening output files
  Release 24.01.0:
  core:
  * Don't crash on certain documents on the NSS signature backend
  * Fix infinite loop in some annotation code if there's not space for even one character
  * Fix build on Android with generic font configuration
  * Small internal code cleanup</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="alarrosa@suse.com" date="1709553600">- version update to 24.03.0
  Release 24.03.0:
  core:
  * Fix opening some malformed files. Issue #1447
  * Skip drawing image when it has singular matrix. Issue #1114
  * Fix crash on malformed files
  * Small internal code cleanup
  utils:
  * pdfdetach: Fix potential directory traversal
  * pdfimages: Enable to print filenames to stdout.
  * pdfsig: Add visible name/date when signing an existing form
    signature field
- Bump poppler_sover to 135 following upstream changes.</changelog>
  <changelog author="pgajdos@suse.com" date="1734955200">- security update
- added patches
  fix CVE-2024-56378 [bsc#1234795], out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc
  + poppler-CVE-2024-56378.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1742904000">- build with PIE [bsc#1239939]</changelog>
  <changelog author="pgajdos@suse.com" date="1744027200">- security update
- added patches
  fix CVE-2025-32364 [bsc#1240880], Floating-Point Exception
  + poppler-CVE-2025-32364.patch
  fix CVE-2025-32365 [bsc#1240881], misplaced isOk check in JBIG2Bitmap::combine function in JBIG2Stream.cc
  + poppler-CVE-2025-32365.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1745582400">- security update
- added patches
  CVE-2025-43903 [bsc#1241620], not verify the adbe.pkcs7.sha1 signatures on documents
  + poppler-CVE-2025-43903.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751630400">- security update
- added patches
  CVE-2025-52886 [bsc#1245625], use of 32-bit `std::atomic_int` for reference counting can lead to an integer overflow and trigger a use-after-free
  + poppler-CVE-2025-52886.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1754395200">- security update
- added patches
  CVE-2025-50420 [bsc#1247590], An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).
  + poppler-CVE-2025-50420.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1759752000">- security update
- added patches
  CVE-2025-43718 [bsc#1250908], uncontrolled recursion in the regex-based metadata parser when processing specially crafted PDF files allows for stack exhaustion and denial of service
  * poppler-CVE-2025-43718.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1760443200">- security update
- added patches
  CVE-2025-52885 [bsc#1251940], raw pointers can lead to dangling pointers when the vector is resized
  * poppler-CVE-2025-52885.patch</changelog>
</package>
<package pkgid="2a81e635a2e953bbd1c65d7782efd154d4ae30e73cc33dd8706423d8e1ab810a" name="libpoppler135" arch="x86_64">
  <version epoch="0" ver="24.03.0" rel="150600.3.27.1"/>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 23.06.0 (bsc#1212255):
  * CairoOutputDev: Fix crash when doing type3 rendering
  * Fix crash with unknown signature hashing algorithms
  * Add gpgme backend for signature handling
  * FontInfo: Make it return proper information about font
    substitution
  * FontInfo: Try harder to get Type 3 font name
  * Store embedded fonts widths table in a more effective manner
  * Skip font lookup for nonprintable characters
  * Fix crash on malformed files
  * Add API to allow selecting signature backend (nss or gpgme)
  * Convert embedded files to bytearray a bit smarter</changelog>
  <changelog author="dmueller@suse.com" date="1689422400">- update to 23.07.0:
  core:
  * Fix reading of utf8-with-bom files
  * Fix crash if CERT_ExtractPublicKey doesn't return a public
    key
  * Fix rendering of some malformed documents. Issue #1395
  * Allow for stream compression and compress font streams in
    forms Remove method Hints::getPageRanges
  qt5:
  * Fix crash when overprint preview is enabled
  * Don't fail signature basics tests if backend is not
    configured
  qt6:
  * Fix crash when overprint preview is enabled
  * Don't fail signature basics tests if backend is not
    configured
  utils:
  * pdfsig: Allow showung and selecting signature backend
  * pdfsig: Describe signature dump format in manual page</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1695124800">- Update to version 23.09.0:
  * core:
  - Add Android-specific font matching functionality
  - Fix digital signatures for NeedAppearance=true
  - Forms: Don't look up same glyph multiple times
  - Provide the key location for certificates you can sign with
  - Add ToUnicode support for similarequal
  - Fix crash on malformed files
  * qt5:
  - Provide the key location for certificates you can sign with
  - Allow to force a rasterized overprint preview during PS
    conversion
  * qt6:
  - Provide the key location for certificates you can sign with
  - Allow to force a rasterized overprint preview during PS
    conversion
  * pdfsig:
  - Provide the key location for certificates you can sign with
- Changes from version 23.08.0:
  * core:
  - Fix GWG 19.2 - DeviceN Overprint (White)
  - Splash: avoid bogus memory allocation size in
    doTilingPatternFill
  - Fix use-of-uninitialized-value in XRef
  - Fix float-cast-overflow error in Catalog
  - Cleanup gpgme backend code
  - Version symbols in poppler core
  * glib:
  - Improve poppler_get_available_signing_certificates
  - Add new members to PopplerCertificateInfo
  * utils:
  - pdftotext: small improvement to man page
- Bump poppler_sover to 131 following upstream changes.</changelog>
  <changelog author="dmueller@suse.com" date="1695988800">- build with gpgmepp for signing documents (bsc#1215632)</changelog>
  <changelog author="pgajdos@suse.com" date="1698408000">- version update to 23.10.0
    core:
  * cairo: update type 3 fonts for cairo 1.18 api
  * Fix crash on malformed files
    build system:
  * Make a few more dependencies soft-mandatory
  * Add more supported gnupg releases
  * Check if linker supports version scripts
- modified patches
  % reduce-boost-required-version.patch (refreshed)</changelog>
  <changelog author="alarrosa@suse.com" date="1698667200">- Add patch to let it build with the heavily patched tiff 4.0.9
  we have in SLE 15:
  * reduce-libtiff-required-version.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1700136000">- version update to 23.11.0
    core:
  * CairoOutputDev: Use internal downscaling algorithm if image exceeds Cairo's maximum dimensions.
  * Internal code improvements
  * Fix crash on malformed files
    utils:
  * pdftocairo: Add option to document logical structure if output is pdf
  * pdftocairo: EPS output should not contain %%PageOrientation</changelog>
  <changelog author="alarrosa@suse.com" date="1703592000">- version update to 23.12.0
    core:
  * Rewrite FoFiType1::parse to be more flexible
  * Small internal code refactoring</changelog>
  <changelog author="pgajdos@suse.com" date="1707912000">- version update to 24.02.0
  Release 24.02.0:
  core:
  * Fix reading some JBIG2 streams. Issue #1319
  * Fix saving some annotation interior color when it's empty
  * Make searching for fonts when adding annotations a bit faster
  * Make sure images are compressed when adding them
  * Small internal code cleanup
  utils:
  * pdfimages: return exit code 2 when error opening output files
  Release 24.01.0:
  core:
  * Don't crash on certain documents on the NSS signature backend
  * Fix infinite loop in some annotation code if there's not space for even one character
  * Fix build on Android with generic font configuration
  * Small internal code cleanup</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN.</changelog>
  <changelog author="alarrosa@suse.com" date="1709553600">- version update to 24.03.0
  Release 24.03.0:
  core:
  * Fix opening some malformed files. Issue #1447
  * Skip drawing image when it has singular matrix. Issue #1114
  * Fix crash on malformed files
  * Small internal code cleanup
  utils:
  * pdfdetach: Fix potential directory traversal
  * pdfimages: Enable to print filenames to stdout.
  * pdfsig: Add visible name/date when signing an existing form
    signature field
- Bump poppler_sover to 135 following upstream changes.</changelog>
  <changelog author="pgajdos@suse.com" date="1734955200">- security update
- added patches
  fix CVE-2024-56378 [bsc#1234795], out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc
  + poppler-CVE-2024-56378.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1742904000">- build with PIE [bsc#1239939]</changelog>
  <changelog author="pgajdos@suse.com" date="1744027200">- security update
- added patches
  fix CVE-2025-32364 [bsc#1240880], Floating-Point Exception
  + poppler-CVE-2025-32364.patch
  fix CVE-2025-32365 [bsc#1240881], misplaced isOk check in JBIG2Bitmap::combine function in JBIG2Stream.cc
  + poppler-CVE-2025-32365.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1745582400">- security update
- added patches
  CVE-2025-43903 [bsc#1241620], not verify the adbe.pkcs7.sha1 signatures on documents
  + poppler-CVE-2025-43903.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751630400">- security update
- added patches
  CVE-2025-52886 [bsc#1245625], use of 32-bit `std::atomic_int` for reference counting can lead to an integer overflow and trigger a use-after-free
  + poppler-CVE-2025-52886.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1754395200">- security update
- added patches
  CVE-2025-50420 [bsc#1247590], An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS).
  + poppler-CVE-2025-50420.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1759752000">- security update
- added patches
  CVE-2025-43718 [bsc#1250908], uncontrolled recursion in the regex-based metadata parser when processing specially crafted PDF files allows for stack exhaustion and denial of service
  * poppler-CVE-2025-43718.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1760443200">- security update
- added patches
  CVE-2025-52885 [bsc#1251940], raw pointers can lead to dangling pointers when the vector is resized
  * poppler-CVE-2025-52885.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1765195200">- security update
- added patches
  CVE-2025-11896 [bsc#1252337], infinite recursion leading to stack overflow due to object loop in PDF CMap
  * poppler-CVE-2025-11896.patch</changelog>
</package>
<package pkgid="6bc35d0cd90e305d358ff38ed323c85d5163dc7a64f291b3e6f4cc83200c9dc2" name="libpoppler89" arch="x86_64">
  <version epoch="0" ver="0.79.0" rel="150200.3.41.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1558785600">- Update to version 0.77.0:
  + core:
  - Fix crash on signature handling. Issue #766
  - Fix small memory leak in SignatureHandler::getCertificateInfo
  - Splash: Restrict filling of overlapping boxes. Issue #750
  - Fix crash on malformed files
  + qt5: Fix optional content handling with exclusive layers
  + cpp: Make render_page thread-safe
  + utils:
  - pdfsig: Fix small memory leak
  - pdftotext: Fix typo in manpage
- Changes from version 0.76.1:
  + core:
  - Make the mul tables be calculated at compile time with constexpr.
  - splash: Fix compile with SPLASH_CMYK enabled
  - Some typo fixing in error messages
  + qt5: Fix regression in annotation handling
  + build system: Fix some typos in build system output and comments
- Changes from version 0.76.0:
  + core:
  - Fix regression on case-insensitive search. Issue #743
  - Remove GooList, use std::vector instead
  - Fix radiobutton reporting wrong state. Issue #159
  - Handle UTF16-LE strings
  - Don't error out if there's no DA in FreeText annotation
  - cairo:
    . Compute correct coverage values for box filter.
    . Constrain number of cycles in rescale filter.
  - Read more fields from ViewerPreferences
    . Introduce and use Ref::INVALID
    . Fix crashes in broken files
    . Fix mismatched free/delete
    . Add missing include guards
  + utils: pdftohtml: Properly initialize HtmlOutputDev::page to
    avoid SIGSEGV upon error exit.
- Changes from version 0.75.0:
  + core:
  - Fix rendering of some annotations
  - Fix crashes in broken files
  - Small internal code improvements
  + cpp:
  - Improve documentation
  - tests: Add showing version information to poppler-dump
  + utils:
  - pdfattach: new util
  - pdftohtml: add -dataurls parameter
  - pdftoppm: add -sep and -forcenum parameters
  - pdftohtml: make singleHtml and stout not mutually exclusive
  - pdfsig: fix use after free
- Bump poppler_sover following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1561723200">- Update to version 0.78.0:
  + core:
  - Fix line annotation arrows for usage in dimensioning.
  - Handle Ink annots without an InkList but with an AP.
  - Fix typos preventing parsing of Movie start and duration.
  - Fix crash on malformed files.
  + glib:
  - Add poppler_document_create_dests_tree().
  - Don't use the deprecated g_type_class_add_private().
  - Document the differences between render() and
    render_for_printing().
  - Fix introspection for poppler_document_new_from_data.
  - Don't create PopplerInputStream with length 0.
  - Document G_IO_ERROR as a possible error condition.
  - Docs: Add index for API new in 0.78.
  + build system:
  - Fixes cross compilation of gir in Void Linux.
  - Add -Wshadow to the default warning flags.
  - Install pkg-config pc files if pkg-config is found.
- Bump poppler_sover following upstream changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1564747200">- Update to version 0.79.0:
  + core:
  - Fix regression on TextSelectionPainter.
  - Fix parsing of DefaultAppearance.
  - Fix memory leak in PostScriptFunction.
  - Fix crashes in fuzzed files.
  + qt5:
  - Implemented support for setIcon by changing appearance.
  - Added option to set the form available to print.
  - QString::null is deprecated, use QString().
  - Replace deprecated qStableSort with std::stable_sort.
  + build system: Turn README into README.md and expand it.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1612785600">- Add 0001-Fix-opening-files-by-some-generators-that-are-a-bit-.patch:
  Some PDF generators generate PDF with some wrong numbers in entry
  table, but the content is still valid, this patch ignores those
  problems. (bsc#1181551)</changelog>
  <changelog author="psimons@suse.com" date="1669982400">- Apply "CVE-2022-38784.patch" to fix an integer overflow in the
  JBIG2 decoder. Processing a specially crafted PDF file or JBIG2
  image could lead to a crash or the execution of arbitrary code.
  This is similar to the vulnerability described by CVE-2021-30860
  (Apple CoreGraphics). [CVE-2022-38784, bsc#1202692]</changelog>
  <changelog author="pgajdos@suse.com" date="1687348800">- security update
- added patches
  fix CVE-2022-27337 [bsc#1199272], A logic error in the Hints::Hints function can cause denial of service
  + poppler-CVE-2022-27337.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1690891200">- Security fix: [bsc#1150039, CVE-2019-16115]
  * Fix an uninitialized memory error in GfxUnivariateShading::setupCache
    Fixed with memset()
  * Add: poppler-CVE-2019-16115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1695038400">- security update
- added patches
  fix CVE-2020-23804 [bsc#1215422], uncontrolled recursion in pdfinfo and pdftops
  + poppler-CVE-2020-23804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1695297600">- security update
- added patches
  fix CVE-2022-37051 [bsc#1214621], abort in main() in pdfunite.cc
  + poppler-CVE-2022-37051.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1695384000">- security update
- added patches
  fix CVE-2022-37050 [bsc#1214622], denial-of-service via savePageAs in PDFDoc.c
  + poppler-CVE-2022-37050.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1695643200">- security update
- added patches
  fix CVE-2022-38349 [bsc#1214618], reachable assertion in Object.h, will lead to denial of service because PDFDoc:replacePageDict in PDFDoc.cc lacks a stream
  + poppler-CVE-2022-38349.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1695816000">- security update
- added patches
  fix CVE-2020-36024 [bsc#1214257], NULL Pointer Deference in `FoFiType1C:convertToType1`
  + poppler-CVE-2020-36024.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1696939200">- security update
- added patches
  fix CVE-2020-36023 [bsc#1214256], Stack-Overflow in `FoFiType1C:cvtGlyph`
  + poppler-CVE-2020-36023.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1698062400">- security update
- added patches
  fix CVE-2022-37052 [bsc#1214726], reachable assertion due to a failure in markObject()
  + poppler-CVE-2022-37052.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1698148800">- security update
- added patches
  fix CVE-2019-9545 [bsc#1128114], denial of service via recursive function call, in JBIG2Stream:readTextRegion() located in JBIG2Stream.cc
  + poppler-CVE-2019-9545.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716984000">- security update
- added patches
  fix CVE-2024-4141 [bsc#1223375], Out-of-bounds array write
  + poppler-CVE-2024-4141.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1719403200">- security update
- added patches
  fix CVE-2024-6239 [bsc#1226916], crash when using pdfinfo with -dests parameter on malformed input files
  + poppler-CVE-2024-6239.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1734955200">- security update
- added patches
  fix CVE-2024-56378 [bsc#1234795], out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc
  + poppler-CVE-2024-56378.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1744027200">- security update
- added patches
  fix CVE-2025-32364 [bsc#1240880], Floating-Point Exception
  + poppler-CVE-2025-32364.patch
  fix CVE-2025-32365 [bsc#1240881], misplaced isOk check in JBIG2Bitmap::combine function in JBIG2Stream.cc
  + poppler-CVE-2025-32365.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751630400">- security update
- added patches
  CVE-2025-52886 [bsc#1245625], use of 32-bit `std::atomic_int` for reference counting can lead to an integer overflow and trigger a use-after-free
  + poppler-CVE-2025-52886.patch</changelog>
</package>
<package pkgid="ce292863c890771a3032732081e2676214f20592148d1316a271e42b8aaa9e80" name="libpoppler89" arch="x86_64">
  <version epoch="0" ver="0.79.0" rel="150200.3.46.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1564747200">- Update to version 0.79.0:
  + core:
  - Fix regression on TextSelectionPainter.
  - Fix parsing of DefaultAppearance.
  - Fix memory leak in PostScriptFunction.
  - Fix crashes in fuzzed files.
  + qt5:
  - Implemented support for setIcon by changing appearance.
  - Added option to set the form available to print.
  - QString::null is deprecated, use QString().
  - Replace deprecated qStableSort with std::stable_sort.
  + build system: Turn README into README.md and expand it.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1612785600">- Add 0001-Fix-opening-files-by-some-generators-that-are-a-bit-.patch:
  Some PDF generators generate PDF with some wrong numbers in entry
  table, but the content is still valid, this patch ignores those
  problems. (bsc#1181551)</changelog>
  <changelog author="psimons@suse.com" date="1669982400">- Apply "CVE-2022-38784.patch" to fix an integer overflow in the
  JBIG2 decoder. Processing a specially crafted PDF file or JBIG2
  image could lead to a crash or the execution of arbitrary code.
  This is similar to the vulnerability described by CVE-2021-30860
  (Apple CoreGraphics). [CVE-2022-38784, bsc#1202692]</changelog>
  <changelog author="pgajdos@suse.com" date="1687348800">- security update
- added patches
  fix CVE-2022-27337 [bsc#1199272], A logic error in the Hints::Hints function can cause denial of service
  + poppler-CVE-2022-27337.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1690891200">- Security fix: [bsc#1150039, CVE-2019-16115]
  * Fix an uninitialized memory error in GfxUnivariateShading::setupCache
    Fixed with memset()
  * Add: poppler-CVE-2019-16115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1695038400">- security update
- added patches
  fix CVE-2020-23804 [bsc#1215422], uncontrolled recursion in pdfinfo and pdftops
  + poppler-CVE-2020-23804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1695297600">- security update
- added patches
  fix CVE-2022-37051 [bsc#1214621], abort in main() in pdfunite.cc
  + poppler-CVE-2022-37051.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1695384000">- security update
- added patches
  fix CVE-2022-37050 [bsc#1214622], denial-of-service via savePageAs in PDFDoc.c
  + poppler-CVE-2022-37050.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1695643200">- security update
- added patches
  fix CVE-2022-38349 [bsc#1214618], reachable assertion in Object.h, will lead to denial of service because PDFDoc:replacePageDict in PDFDoc.cc lacks a stream
  + poppler-CVE-2022-38349.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1695816000">- security update
- added patches
  fix CVE-2020-36024 [bsc#1214257], NULL Pointer Deference in `FoFiType1C:convertToType1`
  + poppler-CVE-2020-36024.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1696939200">- security update
- added patches
  fix CVE-2020-36023 [bsc#1214256], Stack-Overflow in `FoFiType1C:cvtGlyph`
  + poppler-CVE-2020-36023.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1698062400">- security update
- added patches
  fix CVE-2022-37052 [bsc#1214726], reachable assertion due to a failure in markObject()
  + poppler-CVE-2022-37052.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1698148800">- security update
- added patches
  fix CVE-2019-9545 [bsc#1128114], denial of service via recursive function call, in JBIG2Stream:readTextRegion() located in JBIG2Stream.cc
  + poppler-CVE-2019-9545.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716984000">- security update
- added patches
  fix CVE-2024-4141 [bsc#1223375], Out-of-bounds array write
  + poppler-CVE-2024-4141.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1719403200">- security update
- added patches
  fix CVE-2024-6239 [bsc#1226916], crash when using pdfinfo with -dests parameter on malformed input files
  + poppler-CVE-2024-6239.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1734955200">- security update
- added patches
  fix CVE-2024-56378 [bsc#1234795], out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc
  + poppler-CVE-2024-56378.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1744027200">- security update
- added patches
  fix CVE-2025-32364 [bsc#1240880], Floating-Point Exception
  + poppler-CVE-2025-32364.patch
  fix CVE-2025-32365 [bsc#1240881], misplaced isOk check in JBIG2Bitmap::combine function in JBIG2Stream.cc
  + poppler-CVE-2025-32365.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751630400">- security update
- added patches
  CVE-2025-52886 [bsc#1245625], use of 32-bit `std::atomic_int` for reference counting can lead to an integer overflow and trigger a use-after-free
  + poppler-CVE-2025-52886.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1759752000">- security update
- added patches
  CVE-2025-43718 [bsc#1250908], uncontrolled recursion in the regex-based metadata parser when processing specially crafted PDF files allows for stack exhaustion and denial of service
  * poppler-CVE-2025-43718.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1760443200">- security update
- added patches
  CVE-2025-52885 [bsc#1251940], raw pointers can lead to dangling pointers when the vector is resized
  * poppler-CVE-2025-52885.patch</changelog>
</package>
<package pkgid="90dc372ff6bb350a2603b49ad07061eed6a203f41c5cc9c95114e2d6d30c07d6" name="libpoppler89" arch="x86_64">
  <version epoch="0" ver="0.79.0" rel="150200.3.49.1"/>
  <changelog author="alynx.zhou@suse.com" date="1612785600">- Add 0001-Fix-opening-files-by-some-generators-that-are-a-bit-.patch:
  Some PDF generators generate PDF with some wrong numbers in entry
  table, but the content is still valid, this patch ignores those
  problems. (bsc#1181551)</changelog>
  <changelog author="psimons@suse.com" date="1669982400">- Apply "CVE-2022-38784.patch" to fix an integer overflow in the
  JBIG2 decoder. Processing a specially crafted PDF file or JBIG2
  image could lead to a crash or the execution of arbitrary code.
  This is similar to the vulnerability described by CVE-2021-30860
  (Apple CoreGraphics). [CVE-2022-38784, bsc#1202692]</changelog>
  <changelog author="pgajdos@suse.com" date="1687348800">- security update
- added patches
  fix CVE-2022-27337 [bsc#1199272], A logic error in the Hints::Hints function can cause denial of service
  + poppler-CVE-2022-27337.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1690891200">- Security fix: [bsc#1150039, CVE-2019-16115]
  * Fix an uninitialized memory error in GfxUnivariateShading::setupCache
    Fixed with memset()
  * Add: poppler-CVE-2019-16115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1695038400">- security update
- added patches
  fix CVE-2020-23804 [bsc#1215422], uncontrolled recursion in pdfinfo and pdftops
  + poppler-CVE-2020-23804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1695297600">- security update
- added patches
  fix CVE-2022-37051 [bsc#1214621], abort in main() in pdfunite.cc
  + poppler-CVE-2022-37051.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1695384000">- security update
- added patches
  fix CVE-2022-37050 [bsc#1214622], denial-of-service via savePageAs in PDFDoc.c
  + poppler-CVE-2022-37050.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1695643200">- security update
- added patches
  fix CVE-2022-38349 [bsc#1214618], reachable assertion in Object.h, will lead to denial of service because PDFDoc:replacePageDict in PDFDoc.cc lacks a stream
  + poppler-CVE-2022-38349.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1695816000">- security update
- added patches
  fix CVE-2020-36024 [bsc#1214257], NULL Pointer Deference in `FoFiType1C:convertToType1`
  + poppler-CVE-2020-36024.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1696939200">- security update
- added patches
  fix CVE-2020-36023 [bsc#1214256], Stack-Overflow in `FoFiType1C:cvtGlyph`
  + poppler-CVE-2020-36023.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1698062400">- security update
- added patches
  fix CVE-2022-37052 [bsc#1214726], reachable assertion due to a failure in markObject()
  + poppler-CVE-2022-37052.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1698148800">- security update
- added patches
  fix CVE-2019-9545 [bsc#1128114], denial of service via recursive function call, in JBIG2Stream:readTextRegion() located in JBIG2Stream.cc
  + poppler-CVE-2019-9545.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1716984000">- security update
- added patches
  fix CVE-2024-4141 [bsc#1223375], Out-of-bounds array write
  + poppler-CVE-2024-4141.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1719403200">- security update
- added patches
  fix CVE-2024-6239 [bsc#1226916], crash when using pdfinfo with -dests parameter on malformed input files
  + poppler-CVE-2024-6239.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1734955200">- security update
- added patches
  fix CVE-2024-56378 [bsc#1234795], out-of-bounds read vulnerability within the JBIG2Bitmap::combine function in JBIG2Stream.cc
  + poppler-CVE-2024-56378.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1744027200">- security update
- added patches
  fix CVE-2025-32364 [bsc#1240880], Floating-Point Exception
  + poppler-CVE-2025-32364.patch
  fix CVE-2025-32365 [bsc#1240881], misplaced isOk check in JBIG2Bitmap::combine function in JBIG2Stream.cc
  + poppler-CVE-2025-32365.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751630400">- security update
- added patches
  CVE-2025-52886 [bsc#1245625], use of 32-bit `std::atomic_int` for reference counting can lead to an integer overflow and trigger a use-after-free
  + poppler-CVE-2025-52886.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1759752000">- security update
- added patches
  CVE-2025-43718 [bsc#1250908], uncontrolled recursion in the regex-based metadata parser when processing specially crafted PDF files allows for stack exhaustion and denial of service
  * poppler-CVE-2025-43718.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1760443200">- security update
- added patches
  CVE-2025-52885 [bsc#1251940], raw pointers can lead to dangling pointers when the vector is resized
  * poppler-CVE-2025-52885.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1765281600">- security update
- added patches
  CVE-2025-11896 [bsc#1252337], infinite recursion leading to stack overflow due to object loop in PDF CMap
  * poppler-CVE-2025-11896.patch</changelog>
</package>
<package pkgid="2a9c0b151f927d2bd9a7a41785677b79890c4f017b432de5c50cea8476c07101" name="libpq5" arch="x86_64">
  <version epoch="0" ver="17.5" rel="150600.13.13.1"/>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 16.2:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/16.2/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1710244800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1714996800">- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
  <changelog author="max@suse.com" date="1716811200">- Upgrade to 17beta1.
- Allow LLVM &lt;= 18</changelog>
  <changelog author="max@suse.com" date="1719403200">- Upgrade to 17beta2.</changelog>
  <changelog author="mrueckert@suse.de" date="1723291200">- Upgrade to 17beta3 (bsc#1229013):
  * bsc#1229013, CVE-2024-7348 PostgreSQL relation replacement
    during pg_dump executes arbitrary SQL
  * https://www.postgresql.org/about/news/p-2910/</changelog>
  <changelog author="mrueckert@suse.de" date="1725710400">- Upgrade to 17rc1
  https://www.postgresql.org/about/news/postgresql-17-rc1-released-2926/</changelog>
  <changelog author="max@suse.com" date="1727352000">- Upgrade to 17.0:
  * New memory management system for VACUUM, which reduces memory
    consumption and can improve overall vacuuming performance.
  * New SQL/JSON capabilities, including constructors, identity
    functions, and the JSON_TABLE() function, which converts JSON
    data into a table representation.
  * Various query performance improvements, including for
    sequential reads using streaming I/O, write throughput under
    high concurrency, and searches over multiple values in a btree
    index.
  * Logical replication enhancements, including:
    + Failover control
    + pg_createsubscriber, a utility that creates logical replicas
    from physical standbys
    + pg_upgrade now preserves replication slots on both publishers
    and subscribers
  * New client-side connection option, sslnegotiation=direct, that
    performs a direct TLS handshake to avoid a round-trip
    negotiation.
  * pg_basebackup now supports incremental backup.
  * COPY adds a new option, ON_ERROR ignore, that allows a copy
    operation to continue in the event of an error.
  * https://www.postgresql.org/about/news/p-2936/
  * https://www.postgresql.org/docs/17/release-17.html</changelog>
  <changelog author="fvogt@suse.com" date="1728302400">- Use cmake(LLVM) &lt; instead of &lt;= to also allow building against
  LLVM 18.1 and newer 18.x versions</changelog>
  <changelog author="max@suse.com" date="1730721600">- Add postgresql17-jsonb_jsonpath.patch as a temporary build fix.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Upgrade to 17.1:
  * CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * obsoletes postgresql17-jsonb_jsonpath.patch
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/17.1/</changelog>
  <changelog author="max@suse.com" date="1732017600">- Upgrade to 17.2:
  * Repair ABI break for extensions that work with struct
    ResultRelInfo.
  * Restore functionality of ALTER {ROLE|DATABASE} SET role.
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Avoid deleting still-needed WAL files during pg_rewind.
  * Fix race conditions associated with dropping shared statistics
    entries.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/17.2/</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1735214400">- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1738152000">- Apply postgresql-tzdata2025a.patch regardless of
  whether LLVM JIT is enabled</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 17.3:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/17.3/
  * https://www.postgresql.org/about/news/-3015/</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 17.4:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/17.4/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 17.5:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/17.5/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to Fix a race condition
  while generating pg_config_paths.h.</changelog>
</package>
<package pkgid="fe8730fa164449c9d12e4d91dca54bff4ca84d3e85c2232d1868f20b5ecbd9e7" name="libpq5" arch="x86_64">
  <version epoch="0" ver="17.6" rel="150600.13.16.1"/>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1710244800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1714996800">- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
  <changelog author="max@suse.com" date="1716811200">- Upgrade to 17beta1.
- Allow LLVM &lt;= 18</changelog>
  <changelog author="max@suse.com" date="1719403200">- Upgrade to 17beta2.</changelog>
  <changelog author="mrueckert@suse.de" date="1723291200">- Upgrade to 17beta3 (bsc#1229013):
  * bsc#1229013, CVE-2024-7348 PostgreSQL relation replacement
    during pg_dump executes arbitrary SQL
  * https://www.postgresql.org/about/news/p-2910/</changelog>
  <changelog author="mrueckert@suse.de" date="1725710400">- Upgrade to 17rc1
  https://www.postgresql.org/about/news/postgresql-17-rc1-released-2926/</changelog>
  <changelog author="max@suse.com" date="1727352000">- Upgrade to 17.0:
  * New memory management system for VACUUM, which reduces memory
    consumption and can improve overall vacuuming performance.
  * New SQL/JSON capabilities, including constructors, identity
    functions, and the JSON_TABLE() function, which converts JSON
    data into a table representation.
  * Various query performance improvements, including for
    sequential reads using streaming I/O, write throughput under
    high concurrency, and searches over multiple values in a btree
    index.
  * Logical replication enhancements, including:
    + Failover control
    + pg_createsubscriber, a utility that creates logical replicas
    from physical standbys
    + pg_upgrade now preserves replication slots on both publishers
    and subscribers
  * New client-side connection option, sslnegotiation=direct, that
    performs a direct TLS handshake to avoid a round-trip
    negotiation.
  * pg_basebackup now supports incremental backup.
  * COPY adds a new option, ON_ERROR ignore, that allows a copy
    operation to continue in the event of an error.
  * https://www.postgresql.org/about/news/p-2936/
  * https://www.postgresql.org/docs/17/release-17.html</changelog>
  <changelog author="fvogt@suse.com" date="1728302400">- Use cmake(LLVM) &lt; instead of &lt;= to also allow building against
  LLVM 18.1 and newer 18.x versions</changelog>
  <changelog author="max@suse.com" date="1730721600">- Add postgresql17-jsonb_jsonpath.patch as a temporary build fix.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Upgrade to 17.1:
  * CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * obsoletes postgresql17-jsonb_jsonpath.patch
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/17.1/</changelog>
  <changelog author="max@suse.com" date="1732017600">- Upgrade to 17.2:
  * Repair ABI break for extensions that work with struct
    ResultRelInfo.
  * Restore functionality of ALTER {ROLE|DATABASE} SET role.
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Avoid deleting still-needed WAL files during pg_rewind.
  * Fix race conditions associated with dropping shared statistics
    entries.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/17.2/</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1735214400">- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1738152000">- Apply postgresql-tzdata2025a.patch regardless of
  whether LLVM JIT is enabled</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 17.3:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/17.3/
  * https://www.postgresql.org/about/news/-3015/</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 17.4:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/17.4/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 17.5:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/17.5/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to Fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 17.6
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/17.6/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
</package>
<package pkgid="9774e6234f1bdf17ec239db513fb94243e204dd3cd338d682ac527ec77e781f5" name="libpq5" arch="x86_64">
  <version epoch="0" ver="18.1" rel="150600.13.3.1"/>
  <changelog author="max@suse.com" date="1731499200">- Upgrade to 17.1:
  * CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * obsoletes postgresql17-jsonb_jsonpath.patch
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/17.1/</changelog>
  <changelog author="max@suse.com" date="1732017600">- Upgrade to 17.2:
  * Repair ABI break for extensions that work with struct
    ResultRelInfo.
  * Restore functionality of ALTER {ROLE|DATABASE} SET role.
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Avoid deleting still-needed WAL files during pg_rewind.
  * Fix race conditions associated with dropping shared statistics
    entries.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/17.2/</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1735214400">- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1738152000">- Apply postgresql-tzdata2025a.patch regardless of
  whether LLVM JIT is enabled</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 17.3:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/17.3/
  * https://www.postgresql.org/about/news/-3015/</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 17.4:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/17.4/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 17.5:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/17.5/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to Fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1746792001">- Fork package for postgresql 18
  https://www.postgresql.org/about/news/p-3070/</changelog>
  <changelog author="mrueckert@suse.de" date="1753272000">- Update to 18~beta2
  https://www.postgresql.org/about/news/p-3103/</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 18~beta3
  * https://www.postgresql.org/about/news/p-3118/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="mrueckert@suse.de" date="1755518400">- enable liburing and libnuma support
- prepare oauth support. but it creates broken symlinks at the
  moment</changelog>
  <changelog author="mrueckert@suse.de" date="1755518401">- In the symlinking loop for *.so files only handle symlinks and
  not also files.
  This allows us to enable oauth support</changelog>
  <changelog author="mrueckert@suse.de" date="1755604800">- move libpq-oauth into the libpq5  package. it is a plugin that
  will be loaded via dlopen() if libpq encounters an oauth workflow
  during a connection.</changelog>
  <changelog author="max@suse.com" date="1756987200">- Update to 18 RC1.
  * https://www.postgresql.org/about/news/p-3130/</changelog>
  <changelog author="max@suse.com" date="1758628800">- Update to 18.0.
  * https://www.postgresql.org/about/news/p-3142/
  * https://www.postgresql.org/docs/18/release-18.html</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- pg_config --libs returns -lnuma so we need to require it.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Update to 18.1:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/18.1/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
</package>
<package pkgid="57f962c1930b548cafe427a0e51faf0dafc235d8b86c1e02415096cabae5e880" name="libpq5" arch="x86_64">
  <version epoch="0" ver="18.3" rel="150600.13.8.1"/>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1738152000">- Apply postgresql-tzdata2025a.patch regardless of
  whether LLVM JIT is enabled</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 17.3:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/17.3/
  * https://www.postgresql.org/about/news/-3015/</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 17.4:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/17.4/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 17.5:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/17.5/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to Fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1746792001">- Fork package for postgresql 18
  https://www.postgresql.org/about/news/p-3070/</changelog>
  <changelog author="mrueckert@suse.de" date="1753272000">- Update to 18~beta2
  https://www.postgresql.org/about/news/p-3103/</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 18~beta3
  * https://www.postgresql.org/about/news/p-3118/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="mrueckert@suse.de" date="1755518400">- enable liburing and libnuma support
- prepare oauth support. but it creates broken symlinks at the
  moment</changelog>
  <changelog author="mrueckert@suse.de" date="1755518401">- In the symlinking loop for *.so files only handle symlinks and
  not also files.
  This allows us to enable oauth support</changelog>
  <changelog author="mrueckert@suse.de" date="1755604800">- move libpq-oauth into the libpq5  package. it is a plugin that
  will be loaded via dlopen() if libpq encounters an oauth workflow
  during a connection.</changelog>
  <changelog author="max@suse.com" date="1756987200">- Update to 18 RC1.
  * https://www.postgresql.org/about/news/p-3130/</changelog>
  <changelog author="max@suse.com" date="1758628800">- Update to 18.0.
  * https://www.postgresql.org/about/news/p-3142/
  * https://www.postgresql.org/docs/18/release-18.html</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- pg_config --libs returns -lnuma so we need to require it.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Update to 18.1:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/18.1/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 18.2:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/18.2/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * bsc#1258012, CVE-2026-2007: Harden contrib/pg_trgm against
    changes in string lowercasing behavior.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 18.3 to fix two regressions in 18.2:
  * https://www.postgresql.org/docs/release/18.3/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
</package>
<package pkgid="b3c54def232e6fda247df3f9cf508d0d6ec6e310798772e2ab154a9d3499e19c" name="libpq5" arch="x86_64">
  <version epoch="0" ver="18.4" rel="150600.13.11.1"/>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 17.4:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/17.4/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 17.5:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/17.5/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to Fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1746792001">- Fork package for postgresql 18
  https://www.postgresql.org/about/news/p-3070/</changelog>
  <changelog author="mrueckert@suse.de" date="1753272000">- Update to 18~beta2
  https://www.postgresql.org/about/news/p-3103/</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 18~beta3
  * https://www.postgresql.org/about/news/p-3118/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="mrueckert@suse.de" date="1755518400">- enable liburing and libnuma support
- prepare oauth support. but it creates broken symlinks at the
  moment</changelog>
  <changelog author="mrueckert@suse.de" date="1755518401">- In the symlinking loop for *.so files only handle symlinks and
  not also files.
  This allows us to enable oauth support</changelog>
  <changelog author="mrueckert@suse.de" date="1755604800">- move libpq-oauth into the libpq5  package. it is a plugin that
  will be loaded via dlopen() if libpq encounters an oauth workflow
  during a connection.</changelog>
  <changelog author="max@suse.com" date="1756987200">- Update to 18 RC1.
  * https://www.postgresql.org/about/news/p-3130/</changelog>
  <changelog author="max@suse.com" date="1758628800">- Update to 18.0.
  * https://www.postgresql.org/about/news/p-3142/
  * https://www.postgresql.org/docs/18/release-18.html</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- pg_config --libs returns -lnuma so we need to require it.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Update to 18.1:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/18.1/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 18.2:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/18.2/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * bsc#1258012, CVE-2026-2007: Harden contrib/pg_trgm against
    changes in string lowercasing behavior.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 18.3 to fix two regressions in 18.2:
  * https://www.postgresql.org/docs/release/18.3/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774526400">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14820)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 18.4:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265176, CVE-2026-6476: Properly quote subscription names
    in pg_createsubscriber
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265180, CVE-2026-6575: Detect faulty input when restoring
    attribute MCV statistics
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/18.4/</changelog>
</package>
<package pkgid="c9d2077099d45ed97bb85b0c0043c5c27dae12529d5168d45fcf2a4ff4f31f47" name="libpq5-32bit" arch="x86_64">
  <version epoch="0" ver="17.5" rel="150600.13.13.1"/>
  <changelog author="max@suse.com" date="1707393600">- Upgrade to 16.2:
  * bsc#1219679, CVE-2024-0985: Tighten security restrictions
    within REFRESH MATERIALIZED VIEW CONCURRENTLY.
    One step of a concurrent refresh command was run under weak
    security restrictions. If a materialized view's owner could
    persuade a superuser or other high-privileged user to perform a
    concurrent refresh on that view, the view's owner could control
    code executed with the privileges of the user running REFRESH.
    Fix things so that all user-determined code is run as the
    view's owner, as expected
  * If you use GIN indexes, you may need to reindex after updating
    to this release.
  * LLVM 18 is now supported.
  * https://www.postgresql.org/docs/release/16.2/</changelog>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1710244800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1714996800">- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
  <changelog author="max@suse.com" date="1716811200">- Upgrade to 17beta1.
- Allow LLVM &lt;= 18</changelog>
  <changelog author="max@suse.com" date="1719403200">- Upgrade to 17beta2.</changelog>
  <changelog author="mrueckert@suse.de" date="1723291200">- Upgrade to 17beta3 (bsc#1229013):
  * bsc#1229013, CVE-2024-7348 PostgreSQL relation replacement
    during pg_dump executes arbitrary SQL
  * https://www.postgresql.org/about/news/p-2910/</changelog>
  <changelog author="mrueckert@suse.de" date="1725710400">- Upgrade to 17rc1
  https://www.postgresql.org/about/news/postgresql-17-rc1-released-2926/</changelog>
  <changelog author="max@suse.com" date="1727352000">- Upgrade to 17.0:
  * New memory management system for VACUUM, which reduces memory
    consumption and can improve overall vacuuming performance.
  * New SQL/JSON capabilities, including constructors, identity
    functions, and the JSON_TABLE() function, which converts JSON
    data into a table representation.
  * Various query performance improvements, including for
    sequential reads using streaming I/O, write throughput under
    high concurrency, and searches over multiple values in a btree
    index.
  * Logical replication enhancements, including:
    + Failover control
    + pg_createsubscriber, a utility that creates logical replicas
    from physical standbys
    + pg_upgrade now preserves replication slots on both publishers
    and subscribers
  * New client-side connection option, sslnegotiation=direct, that
    performs a direct TLS handshake to avoid a round-trip
    negotiation.
  * pg_basebackup now supports incremental backup.
  * COPY adds a new option, ON_ERROR ignore, that allows a copy
    operation to continue in the event of an error.
  * https://www.postgresql.org/about/news/p-2936/
  * https://www.postgresql.org/docs/17/release-17.html</changelog>
  <changelog author="fvogt@suse.com" date="1728302400">- Use cmake(LLVM) &lt; instead of &lt;= to also allow building against
  LLVM 18.1 and newer 18.x versions</changelog>
  <changelog author="max@suse.com" date="1730721600">- Add postgresql17-jsonb_jsonpath.patch as a temporary build fix.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Upgrade to 17.1:
  * CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * obsoletes postgresql17-jsonb_jsonpath.patch
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/17.1/</changelog>
  <changelog author="max@suse.com" date="1732017600">- Upgrade to 17.2:
  * Repair ABI break for extensions that work with struct
    ResultRelInfo.
  * Restore functionality of ALTER {ROLE|DATABASE} SET role.
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Avoid deleting still-needed WAL files during pg_rewind.
  * Fix race conditions associated with dropping shared statistics
    entries.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/17.2/</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1735214400">- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1738152000">- Apply postgresql-tzdata2025a.patch regardless of
  whether LLVM JIT is enabled</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 17.3:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/17.3/
  * https://www.postgresql.org/about/news/-3015/</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 17.4:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/17.4/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 17.5:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/17.5/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to Fix a race condition
  while generating pg_config_paths.h.</changelog>
</package>
<package pkgid="a929c271b78017e5d03759d1aae4599aa0d3a130bd5fcec3c4fbb1b184b908f9" name="libpq5-32bit" arch="x86_64">
  <version epoch="0" ver="17.6" rel="150600.13.16.1"/>
  <changelog author="dimstar@opensuse.org" date="1709208000">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1709812800">- Remove constraints file because improved memory usage for s390x</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1710244800">- Require LLVM &lt;= 17 for now, because LLVM 18 doesn't seem to work.</changelog>
  <changelog author="max@suse.com" date="1714996800">- Prepare for PostgreSQL 17.
- Make sure all compilation and doc generation happens in %build.</changelog>
  <changelog author="max@suse.com" date="1716811200">- Upgrade to 17beta1.
- Allow LLVM &lt;= 18</changelog>
  <changelog author="max@suse.com" date="1719403200">- Upgrade to 17beta2.</changelog>
  <changelog author="mrueckert@suse.de" date="1723291200">- Upgrade to 17beta3 (bsc#1229013):
  * bsc#1229013, CVE-2024-7348 PostgreSQL relation replacement
    during pg_dump executes arbitrary SQL
  * https://www.postgresql.org/about/news/p-2910/</changelog>
  <changelog author="mrueckert@suse.de" date="1725710400">- Upgrade to 17rc1
  https://www.postgresql.org/about/news/postgresql-17-rc1-released-2926/</changelog>
  <changelog author="max@suse.com" date="1727352000">- Upgrade to 17.0:
  * New memory management system for VACUUM, which reduces memory
    consumption and can improve overall vacuuming performance.
  * New SQL/JSON capabilities, including constructors, identity
    functions, and the JSON_TABLE() function, which converts JSON
    data into a table representation.
  * Various query performance improvements, including for
    sequential reads using streaming I/O, write throughput under
    high concurrency, and searches over multiple values in a btree
    index.
  * Logical replication enhancements, including:
    + Failover control
    + pg_createsubscriber, a utility that creates logical replicas
    from physical standbys
    + pg_upgrade now preserves replication slots on both publishers
    and subscribers
  * New client-side connection option, sslnegotiation=direct, that
    performs a direct TLS handshake to avoid a round-trip
    negotiation.
  * pg_basebackup now supports incremental backup.
  * COPY adds a new option, ON_ERROR ignore, that allows a copy
    operation to continue in the event of an error.
  * https://www.postgresql.org/about/news/p-2936/
  * https://www.postgresql.org/docs/17/release-17.html</changelog>
  <changelog author="fvogt@suse.com" date="1728302400">- Use cmake(LLVM) &lt; instead of &lt;= to also allow building against
  LLVM 18.1 and newer 18.x versions</changelog>
  <changelog author="max@suse.com" date="1730721600">- Add postgresql17-jsonb_jsonpath.patch as a temporary build fix.</changelog>
  <changelog author="max@suse.com" date="1731499200">- Upgrade to 17.1:
  * CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * obsoletes postgresql17-jsonb_jsonpath.patch
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/17.1/</changelog>
  <changelog author="max@suse.com" date="1732017600">- Upgrade to 17.2:
  * Repair ABI break for extensions that work with struct
    ResultRelInfo.
  * Restore functionality of ALTER {ROLE|DATABASE} SET role.
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Avoid deleting still-needed WAL files during pg_rewind.
  * Fix race conditions associated with dropping shared statistics
    entries.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/17.2/</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1735214400">- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1738152000">- Apply postgresql-tzdata2025a.patch regardless of
  whether LLVM JIT is enabled</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 17.3:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/17.3/
  * https://www.postgresql.org/about/news/-3015/</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 17.4:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/17.4/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 17.5:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/17.5/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to Fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 17.6
  * https://www.postgresql.org/about/news/postgresql-176-1610-1514-1419-1322-and-18-beta-3-released-3118/
  * https://www.postgresql.org/docs/release/17.6/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
</package>
<package pkgid="8cedb0f7da401e0a1e021ea844b07d5e820d409bc9f81b07a8b76c6617e51e2b" name="libpq5-32bit" arch="x86_64">
  <version epoch="0" ver="18.1" rel="150600.13.3.1"/>
  <changelog author="max@suse.com" date="1731499200">- Upgrade to 17.1:
  * CVE-2024-10976, bsc#1233323: Ensure cached plans are marked as
    dependent on the calling role when RLS applies to a
    non-top-level table reference.
  * CVE-2024-10977, bsc#1233325: Make libpq discard error messages
    received during SSL or GSS protocol negotiation.
  * CVE-2024-10978, bsc#1233326: Fix unintended interactions
    between SET SESSION AUTHORIZATION and SET ROLE
  * CVE-2024-10979, bsc#1233327: Prevent trusted PL/Perl code from
    changing environment variables.
  * obsoletes postgresql17-jsonb_jsonpath.patch
  * https://www.postgresql.org/about/news/p-2955/
  * https://www.postgresql.org/docs/release/17.1/</changelog>
  <changelog author="max@suse.com" date="1732017600">- Upgrade to 17.2:
  * Repair ABI break for extensions that work with struct
    ResultRelInfo.
  * Restore functionality of ALTER {ROLE|DATABASE} SET role.
  * Fix cases where a logical replication slot's restart_lsn could
    go backwards.
  * Avoid deleting still-needed WAL files during pg_rewind.
  * Fix race conditions associated with dropping shared statistics
    entries.
  * Count index scans in contrib/bloom indexes in the statistics
    views, such as the pg_stat_user_indexes.idx_scan counter.
  * Fix crash when checking to see if an index's opclass options
    have changed.
  * Avoid assertion failure caused by disconnected NFA sub-graphs
    in regular expression parsing.
  * https://www.postgresql.org/about/news/p-2965/
  * https://www.postgresql.org/docs/release/17.2/</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1735214400">- Disable LLVM JIT on loongarch64</changelog>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1738152000">- Apply postgresql-tzdata2025a.patch regardless of
  whether LLVM JIT is enabled</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 17.3:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/17.3/
  * https://www.postgresql.org/about/news/-3015/</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 17.4:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/17.4/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 17.5:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/17.5/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to Fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1746792001">- Fork package for postgresql 18
  https://www.postgresql.org/about/news/p-3070/</changelog>
  <changelog author="mrueckert@suse.de" date="1753272000">- Update to 18~beta2
  https://www.postgresql.org/about/news/p-3103/</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 18~beta3
  * https://www.postgresql.org/about/news/p-3118/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="mrueckert@suse.de" date="1755518400">- enable liburing and libnuma support
- prepare oauth support. but it creates broken symlinks at the
  moment</changelog>
  <changelog author="mrueckert@suse.de" date="1755518401">- In the symlinking loop for *.so files only handle symlinks and
  not also files.
  This allows us to enable oauth support</changelog>
  <changelog author="mrueckert@suse.de" date="1755604800">- move libpq-oauth into the libpq5  package. it is a plugin that
  will be loaded via dlopen() if libpq encounters an oauth workflow
  during a connection.</changelog>
  <changelog author="max@suse.com" date="1756987200">- Update to 18 RC1.
  * https://www.postgresql.org/about/news/p-3130/</changelog>
  <changelog author="max@suse.com" date="1758628800">- Update to 18.0.
  * https://www.postgresql.org/about/news/p-3142/
  * https://www.postgresql.org/docs/18/release-18.html</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- pg_config --libs returns -lnuma so we need to require it.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Update to 18.1:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/18.1/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
</package>
<package pkgid="efce73998c7261b1e1303473636eb320772daa3fb8a652bef491f44587c5b2f5" name="libpq5-32bit" arch="x86_64">
  <version epoch="0" ver="18.3" rel="150600.13.8.1"/>
  <changelog author="max@suse.com" date="1738065600">- Fix build, add postgresql-tzdata2025a.patch</changelog>
  <changelog author="obs.coke518@passinbox.com" date="1738152000">- Apply postgresql-tzdata2025a.patch regardless of
  whether LLVM JIT is enabled</changelog>
  <changelog author="max@suse.com" date="1739275200">- Upgrade to 17.3:
  * bsc#1237093, CVE-2025-1094: Harden PQescapeString and allied
    functions against invalidly-encoded input strings.
  * obsoletes postgresql-tzdata2025a.patch
  * https://www.postgresql.org/docs/release/17.3/
  * https://www.postgresql.org/about/news/-3015/</changelog>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 17.4:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/17.4/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 17.5:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/17.5/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to Fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1746792001">- Fork package for postgresql 18
  https://www.postgresql.org/about/news/p-3070/</changelog>
  <changelog author="mrueckert@suse.de" date="1753272000">- Update to 18~beta2
  https://www.postgresql.org/about/news/p-3103/</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 18~beta3
  * https://www.postgresql.org/about/news/p-3118/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="mrueckert@suse.de" date="1755518400">- enable liburing and libnuma support
- prepare oauth support. but it creates broken symlinks at the
  moment</changelog>
  <changelog author="mrueckert@suse.de" date="1755518401">- In the symlinking loop for *.so files only handle symlinks and
  not also files.
  This allows us to enable oauth support</changelog>
  <changelog author="mrueckert@suse.de" date="1755604800">- move libpq-oauth into the libpq5  package. it is a plugin that
  will be loaded via dlopen() if libpq encounters an oauth workflow
  during a connection.</changelog>
  <changelog author="max@suse.com" date="1756987200">- Update to 18 RC1.
  * https://www.postgresql.org/about/news/p-3130/</changelog>
  <changelog author="max@suse.com" date="1758628800">- Update to 18.0.
  * https://www.postgresql.org/about/news/p-3142/
  * https://www.postgresql.org/docs/18/release-18.html</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- pg_config --libs returns -lnuma so we need to require it.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Update to 18.1:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/18.1/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 18.2:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/18.2/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * bsc#1258012, CVE-2026-2007: Harden contrib/pg_trgm against
    changes in string lowercasing behavior.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 18.3 to fix two regressions in 18.2:
  * https://www.postgresql.org/docs/release/18.3/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
</package>
<package pkgid="56a307af174b82565565989ddf9288871cc385199fe07acf66eac9ce77b471ea" name="libpq5-32bit" arch="x86_64">
  <version epoch="0" ver="18.4" rel="150600.13.11.1"/>
  <changelog author="max@suse.com" date="1739880000">- Upgrade to 17.4:
  * Improve behavior of libpq's quoting functions:
    The changes made for CVE-2025-1094 had one serious oversight:
    PQescapeLiteral() and PQescapeIdentifier() failed to honor
    their string length parameter, instead always reading to the
    input string's trailing null. This resulted in including
    unwanted text in the output, if the caller intended to
    truncate the string via the length parameter. With very bad
    luck it could cause a crash due to reading off the end of
    memory.
    In addition, modify all these quoting functions so that when
    invalid encoding is detected, an invalid sequence is
    substituted for just the first byte of the presumed
    character, not all of it. This reduces the risk of problems
    if a calling application performs additional processing on
    the quoted string.
  * Fix small memory leak in pg_createsubscriber.
  * https://www.postgresql.org/docs/release/17.4/
  * https://www.postgresql.org/about/news/p-3018/</changelog>
  <changelog author="max@suse.com" date="1746792000">- Upgrade to 17.5:
  * bsc#1242931, CVE-2025-4207: postgresql: PostgreSQL GB18030
    encoding validation can read one byte past end of allocation
    for text that fails validation.
  * https://www.postgresql.org/docs/release/17.5/
  * https://www.postgresql.org/about/news/p-3072/
- Add postresql-pg_config_paths.patch to Fix a race condition
  while generating pg_config_paths.h.</changelog>
  <changelog author="mrueckert@suse.de" date="1746792001">- Fork package for postgresql 18
  https://www.postgresql.org/about/news/p-3070/</changelog>
  <changelog author="mrueckert@suse.de" date="1753272000">- Update to 18~beta2
  https://www.postgresql.org/about/news/p-3103/</changelog>
  <changelog author="mrueckert@suse.de" date="1755172800">- Update to 18~beta3
  * https://www.postgresql.org/about/news/p-3118/
  Security Issues
  * CVE-2025-8713: PostgreSQL optimizer statistics can expose
    sampled data within a view, partition, or child table
    (boo#1248120)
  * CVE-2025-8714: PostgreSQL pg_dump lets superuser of origin
    server execute arbitrary code in psql client (boo#1248122)
  * CVE-2025-8715: PostgreSQL pg_dump newline in object name
    executes arbitrary code in psql client and in restore target
    server (boo#1248119)</changelog>
  <changelog author="mrueckert@suse.de" date="1755518400">- enable liburing and libnuma support
- prepare oauth support. but it creates broken symlinks at the
  moment</changelog>
  <changelog author="mrueckert@suse.de" date="1755518401">- In the symlinking loop for *.so files only handle symlinks and
  not also files.
  This allows us to enable oauth support</changelog>
  <changelog author="mrueckert@suse.de" date="1755604800">- move libpq-oauth into the libpq5  package. it is a plugin that
  will be loaded via dlopen() if libpq encounters an oauth workflow
  during a connection.</changelog>
  <changelog author="max@suse.com" date="1756987200">- Update to 18 RC1.
  * https://www.postgresql.org/about/news/p-3130/</changelog>
  <changelog author="max@suse.com" date="1758628800">- Update to 18.0.
  * https://www.postgresql.org/about/news/p-3142/
  * https://www.postgresql.org/docs/18/release-18.html</changelog>
  <changelog author="mrueckert@suse.de" date="1758801600">- pg_config --libs returns -lnuma so we need to require it.</changelog>
  <changelog author="max@suse.com" date="1762948800">- Update to 18.1:
  * https://www.postgresql.org/about/news/p-3171/
  * https://www.postgresql.org/docs/release/18.1/
  * bsc#1253332, CVE-2025-12817: Missing check for CREATE
    privileges on the schema in CREATE STATISTICS allowed table
    owners to create statistics in any schema, potentially leading
    to unexpected naming conflicts.
  * bsc#1253333, CVE-2025-12818: Several places in libpq were not
    sufficiently careful about computing the required size of a
    memory allocation. Sufficiently large inputs could cause
    integer overflow, resulting in an undersized buffer, which
    would then lead to writing past the end of the buffer.</changelog>
  <changelog author="max@suse.com" date="1763121600">- Use %product_libs_llvm_ver to determine the LLVM version.
- Remove conditionals for obsolete PostgreSQL releases.</changelog>
  <changelog author="max@suse.com" date="1763985600">- Fix build with uring for post SLE15 code streams.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1765281600">- Fix build on aarch64 with upstream commit 0dceba2:
  * llvm-21-aarch64.patch</changelog>
  <changelog author="max@suse.com" date="1770811200">- Update to 18.2:
  * https://www.postgresql.org/about/news/p-3235/
  * https://www.postgresql.org/docs/release/18.2/
  * bsc#1258008, CVE-2026-2003: Guard against unexpected
    dimensions of oidvector/int2vector
  * bsc#1258009, CVE-2026-2004: Harden selectivity estimators
    against being attached to operators that accept unexpected
    data types.
  * bsc#1258010, CVE-2026-2005: Fix buffer overrun in
    contrib/pgcrypto's PGP decryption functions.
  * bsc#1258011, CVE-2026-2006: Fix inadequate validation of
    multibyte character lengths.
  * bsc#1258012, CVE-2026-2007: Harden contrib/pg_trgm against
    changes in string lowercasing behavior.
  * obsoletes llvm-21-aarch64.patch
- Disown /var/lib/pgsql to support transactional updates.</changelog>
  <changelog author="max@suse.com" date="1771934400">- bsc#1258754: Update to 18.3 to fix two regressions in 18.2:
  * https://www.postgresql.org/docs/release/18.3/
  * The substring() function raises an error "invalid byte sequence
    for encoding" on non-ASCII text values if the source of
    that value is a database column.
  * A standby may halt and return an error "could not access status
    of transaction".</changelog>
  <changelog author="max@suse.com" date="1774526400">- Get rid of update-alternatives for openSUSE/SLE 16.0 and newer
  to support immutable systems and transactional updates.
  (jsc#PED-14820)</changelog>
  <changelog author="max@suse.com" date="1777550400">- bsc#1263804: After dropping update-alternatives we have to
  package /usr/bin/pg_config as an actual symlink, not %ghost.
- Fix spelling of build conditionals.</changelog>
  <changelog author="max@suse.com" date="1778673600">- Update to version 18.4:
  * bsc#1265172, CVE-2026-6472: ensure the user has CREATE
    privilege on the schema specified
  * bsc#1265173, CVE-2026-6473: integer overflows in
    memory-allocation calculations
  * bsc#1265174, CVE-2026-6474: Guard against malicious time zone
    names
  * bsc#1265175, CVE-2026-6475: Prevent path traversal in
    pg_basebackup and pg_rewind
  * bsc#1265176, CVE-2026-6476: Properly quote subscription names
    in pg_createsubscriber
  * bsc#1265177, CVE-2026-6477: Mark PQfn() as unsafe, and avoid
    using it within libpq
  * bsc#1265178, CVE-2026-6478: Use timing-safe string comparisons
    in authentication code
  * bsc#1265179, CVE-2026-6479: Prevent unbounded recursion while
    processing startup packets
  * bsc#1265180, CVE-2026-6575: Detect faulty input when restoring
    attribute MCV statistics
  * bsc#1265181, CVE-2026-6637: Prevent SQL injection and buffer
    overruns in contrib/spi
  * bsc#1265182, CVE-2026-6638: Properly quote object names in
    logical replication origin checks
  * https://www.postgresql.org/docs/release/18.4/</changelog>
</package>
<package pkgid="6544b3ea64466675a65fb113eeb6f4c77b4a428e4d34c8bf1c0b6e60f6ffe1c8" name="libprotobuf-lite25_1_0" arch="x86_64">
  <version epoch="0" ver="25.1" rel="150600.16.13.1"/>
  <changelog author="dmueller@suse.com" date="1667044800">- update to 21.9:
  * Ruby
  * Replace libc strdup usage with internal impl to restore musl compat (#10818)
  * Auto capitalize enums name in Ruby (#10454) (#10763)
  * Other
  * Fix for grpc.tools #17995 &amp; protobuf #7474 (handle UTF-8 paths in argumentfile) (#10721)
  * C++
  * 21.x No longer define no_threadlocal on OpenBSD (#10743)
  * Java
  * Mark default instance as immutable first to avoid race during static initialization of default instances (#10771)
  * Refactoring java full runtime to reuse sub-message builders and prepare to
    migrate parsing logic from parse constructor to builder.
  * Move proto wireformat parsing functionality from the private "parsing
    constructor" to the Builder class.
  * Change the Lite runtime to prefer merging from the wireformat into mutable
    messages rather than building up a new immutable object before merging. This
    way results in fewer allocations and copy operations.
  * Make message-type extensions merge from wire-format instead of building up
    instances and merging afterwards. This has much better performance.
  * Fix TextFormat parser to build up recurring (but supposedly not repeated)
    sub-messages directly from text rather than building a new sub-message and
    merging the fully formed message into the existing field.</changelog>
  <changelog author="dmueller@suse.com" date="1670241600">- update to 21.10:
  * Java
  * Use bit-field int values in buildPartial to skip work on unset groups of
    fields. (#10960)
  * Mark nested builder as clean after clear is called (#10984)</changelog>
  <changelog author="dmueller@suse.com" date="1670500800">- update to 21.11:
  * Python
  * Add license file to pypi wheels (#10936)
  * Fix round-trip bug (#10158)</changelog>
  <changelog author="dmueller@suse.com" date="1671105600">- update to v21.12:
  * Python
  * Fix broken enum ranges (#11171)
  * Stop requiring extension fields to have a sythetic oneof (#11091)
  * Python runtime 4.21.10 not works generated code can not load valid
    proto.</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO (boo#1133277).</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to v22.3
  UPB (Python/PHP/Ruby C-Extension)
  * Remove src prefix from proto import
  * Fix .gitmodules to use the correct absl branch
  * Remove erroneous dependency on googletest
- update to 22.2:
  Java
  * Add version to intra proto dependencies and add kotlin stdlib
    dependency
  * Add $ back for osgi header
  * Remove $ in pom files
- update to 22.1:
  * Add visibility of plugin.proto to python directory
  * Strip "src" from file name of plugin.proto
  * Add OSGi headers to pom files.
  * Remove errorprone dependency from kotlin protos.
  * Version protoc according to the compiler version number.
- update to 22.0:
  * This version includes breaking changes to: Cpp.
    Please refer to the migration guide for information:
    https://protobuf.dev/support/migration/#compiler-22
  * [Cpp] Migrate to Abseil's logging library.
  * [Cpp] `proto2::Map::value_type` changes to `std::pair`.
  * [Cpp] Mark final ZeroCopyInputStream, ZeroCopyOutputStream,
    and DefaultFieldComparator classes.
  * [Cpp] Add a dependency on Abseil (#10416)
  * [Cpp] Remove all autotools usage (#10132)
  * [Cpp] Add C++20 reserved keywords
  * [Cpp] Dropped C++11 Support
  * [Cpp] Delete Arena::Init
  * [Cpp] Replace JSON parser with new implementation
  * [Cpp] Make RepeatedField::GetArena non-const in order to
    support split RepeatedFields.
  * long list of bindings specific fixes see
    https://github.com/protocolbuffers/protobuf/releases/tag/v22.0
- python sub packages version is set 4.22.3 as defined in
  python/google/protobuf/__init__.py to stay compatible
- skip python2 builds by default
- drop patches:
  * 10355.patch,
  * gcc12-disable-__constinit-with-c++-11.patch (merged upstream)
- added patches:
  * add-missing-stdint-header.patch   added for compile fixes</changelog>
  <changelog author="fstrba@suse.com" date="1682596800">- Make possible to build on older systems, like SLE12 that miss
  some of the used macros.</changelog>
  <changelog author="fstrba@suse.com" date="1682683200">- Mention the rpmlintrc file in the spec.</changelog>
  <changelog author="mpluskal@suse.com" date="1683633600">- Fix confusion in versions</changelog>
  <changelog author="dmueller@suse.com" date="1686484800">- drop python2 handling
- fix version handling and package the private libs again</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 22.5:
  C++
  * Add missing cstdint header
  * Fix: missing -DPROTOBUF_USE_DLLS in pkg-config (#12700)
  * Avoid using string(JOIN..., which requires cmake 3.12
  * Explicitly include GTest package in examples
  * Bump Abseil submodule to 20230125.3 (#12660)
- update to 22.4:
  C++
  * Fix libprotoc: export useful symbols from .so
  * Fix btree issue in map tests.
  Python
  * Fix bug in _internal_copy_files where the rule would fail in
    downstream repositories.
  Other
  * Bump utf8_range to version with working pkg-config (#12584)
  * Fix declared dependencies for pkg-config
  * Update abseil dependency and reorder dependencies to ensure
    we use the version specified in protobuf_deps.
  * Turn off clang::musttail on i386</changelog>
  <changelog author="fvogt@suse.com" date="1686744000">- Add patch to fix linking ThreadSafeArena:
  * 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch
- Drop the protobuf-source package, no longer used</changelog>
  <changelog author="dmueller@suse.com" date="1688385600">- update to 23.3:
  C++
  * Regenerate stale files
  * Use the same ABI for static and shared libraries on non-
    Windows platforms
  * Add a workaround for GCC constexpr bug
  Objective-C
  * Regenerate stale files
  UPB (Python/PHP/Ruby C-Extension)
  * Fixed a bug in `upb_Map_Delete()` that caused crashes in
    map.delete(k) for Ruby when string-keyed maps were in use.
  Compiler
  * Add missing header to Objective-c generator
  * Add a workaround for GCC constexpr bug
  Java
  * Rollback of: Simplify protobuf Java message builder by
    removing methods that calls the super class only.
  Csharp
  * [C#] Replace regex that validates descriptor names
- drop 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1688731200">- update to 23.4:
  * Add dllexport_decl for generated default instance.
  * Deps: Update Guava to 32.0.1</changelog>
  <changelog author="fstrba@suse.com" date="1698667200">- Build with source and target levels 8
  * fixes build with JDK21
- Install the pom file with the new %%mvn_install_pom macro
- Do not install the pom-only artifacts, since the %%mvn_install_pom
  macro resolves the variables at the install time</changelog>
  <changelog author="dmueller@suse.com" date="1703160000">- build against modern python on sle15</changelog>
  <changelog author="dmueller@suse.com" date="1704196800">- update to 25.1:
  * Raise warnings for deprecated python syntax usages
  * Add support for extensions in CRuby, JRuby, and FFI Ruby
  * Add support for options in CRuby, JRuby and FFI (#14594)
- update to 25.0:
  * Implement proto2/proto3 with editions
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Editions: Introduce functionality to protoc for generating
    edition feature set defaults.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Publish extension declarations with declaration
    verifications.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Protoc: parser rejects explicit use of map_entry option
  * Protoc: validate that reserved range start is before end
  * Protoc: support identifiers as reserved names in addition to
    string literals (only in editions)
  * Drop support for Bazel 5.
  * Allow code generators to specify whether or not they support
    editions.
  [#] C++
  * Set `PROTOBUF_EXPORT` on
    `InternalOutOfLineDeleteMessageLite()`
  * Update stale checked-in files
  * Apply PROTOBUF_NOINLINE to declarations of some functions
    that want it.
  * Implement proto2/proto3 with editions
  * Make JSON UTF-8 boundary check inclusive of the largest
    possible UTF-8 character.
  * Reduce `Map::size_type` to 32-bits. Protobuf containers can't
    have more than that
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Fix bug in reflection based Swap of map fields.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Add prefetching to arena allocations.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    repeated and map field accessors.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    string field accessors.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Fixes for 32-bit MSVC.
  * Publish extension declarations with declaration
    verifications.
  * Export the constants in protobuf's any.h to support DLL
    builds.
  * Implement AbslStringify for the Descriptor family of types.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    message field accessors.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Introduce C++ feature for UTF8 validation.
  * Protoc: validate that reserved range start is before end
  * Remove option to disable the table-driven parser in protoc.
  * Lock down ctype=CORD in proto file.
  * Support split repeated fields.
  * In OSS mode omit some extern template specializations.
  * Allow code generators to specify whether or not they support
    editions.
  [#] Java
  * Implement proto2/proto3 with editions
  * Remove synthetic oneofs from Java gencode field accessor
    tables.
  * Timestamps.parse: Add error handling for invalid
    hours/minutes in the timezone offset.
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Add missing debugging version info to Protobuf Java gencode
    when multiple files are generated.
  * Fix a bad cast in putBuilderIfAbsent when already present due
    to using the result of put() directly (which is null if it
    currently has no value)
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Fix a NPE in putBuilderIfAbsent due to using the result of
    put() directly (which is null if it currently has no value)
  * Update Kotlin compiler to escape package names
  * Add MapFieldBuilder and change codegen to generate it and the
    put{field}BuilderIfAbsent method.
  * Introduce recursion limit in Java text format parsing
  * Consider the protobuf.Any invalid if typeUrl.split("/")
    returns an empty array.
  * Mark `FieldDescriptor.hasOptionalKeyword()` as deprecated.
  * Fixed Python memory leak in map lookup.
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Ensure Timestamp.ToDatetime(tz) has correct offset
  * Do not check required field for upb python MergeFrom
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Emit __slots__ in pyi output as a tuple rather than a list
    for --pyi_out.
  * Fix a bug that strips options from descriptor.proto in
    Python.
  * Raise warings for message.UnknownFields() usages and navigate
    to the new add
  * Add protobuf python keyword support in path for stub
    generator.
  * Add tuple support to set Struct
  * ### Python C-Extension (Default)
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Check that ffi-compiler loads before using it to define
    tasks.
  [#] UPB (Python/PHP/Ruby C-Extension)
  * Include .inc files directly instead of through a filegroup
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Add utf8_validation feature back to the global feature set.
  * Do not check required field for upb python MergeFrom
  * Merge the protobuf and upb Bazel repos
  * Added malloc_trim() calls to Python allocator so RSS will
    decrease when memory is freed
  * Upb: fix a Python memory leak in ByteSize()
  * Support ASAN detection on clang
  * Upb: bugfix for importing a proto3 enum from within a proto2
    file
  * Expose methods needed by Ruby FFI using UPB_API
  * Fix `PyUpb_Message_MergeInternal` segfault</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1728993600">- Add patch to fix StackOverflow vulnerability in Protocol Buffers
  * CVE-2024-7254.patch (bsc#1230778, CVE-2024-7254)</changelog>
  <changelog author="fstrba@suse.com" date="1730030400">- Build the java part with maven, so that we create artifacts
  that correspond to upstream distributed ones.
- Add maven artifact metadata to the protoc binary
- Package also the bom and pom artifacts</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1750161600">- Add CVE-2025-4565.patch to fix parsing of untrusted Protocol Buffers
  data containing an arbitrary number of recursive groups or messages
  can lead to crash due to RecursionError (bsc#1244663, CVE-2025-4565)</changelog>
</package>
<package pkgid="fc3ec596529dcec65ee650a248dfc65ca3458d3b9756990710966070d9f4d1a2" name="libprotobuf-lite25_1_0" arch="x86_64">
  <version epoch="0" ver="25.1" rel="150600.16.16.1"/>
  <changelog author="dmueller@suse.com" date="1670241600">- update to 21.10:
  * Java
  * Use bit-field int values in buildPartial to skip work on unset groups of
    fields. (#10960)
  * Mark nested builder as clean after clear is called (#10984)</changelog>
  <changelog author="dmueller@suse.com" date="1670500800">- update to 21.11:
  * Python
  * Add license file to pypi wheels (#10936)
  * Fix round-trip bug (#10158)</changelog>
  <changelog author="dmueller@suse.com" date="1671105600">- update to v21.12:
  * Python
  * Fix broken enum ranges (#11171)
  * Stop requiring extension fields to have a sythetic oneof (#11091)
  * Python runtime 4.21.10 not works generated code can not load valid
    proto.</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO (boo#1133277).</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to v22.3
  UPB (Python/PHP/Ruby C-Extension)
  * Remove src prefix from proto import
  * Fix .gitmodules to use the correct absl branch
  * Remove erroneous dependency on googletest
- update to 22.2:
  Java
  * Add version to intra proto dependencies and add kotlin stdlib
    dependency
  * Add $ back for osgi header
  * Remove $ in pom files
- update to 22.1:
  * Add visibility of plugin.proto to python directory
  * Strip "src" from file name of plugin.proto
  * Add OSGi headers to pom files.
  * Remove errorprone dependency from kotlin protos.
  * Version protoc according to the compiler version number.
- update to 22.0:
  * This version includes breaking changes to: Cpp.
    Please refer to the migration guide for information:
    https://protobuf.dev/support/migration/#compiler-22
  * [Cpp] Migrate to Abseil's logging library.
  * [Cpp] `proto2::Map::value_type` changes to `std::pair`.
  * [Cpp] Mark final ZeroCopyInputStream, ZeroCopyOutputStream,
    and DefaultFieldComparator classes.
  * [Cpp] Add a dependency on Abseil (#10416)
  * [Cpp] Remove all autotools usage (#10132)
  * [Cpp] Add C++20 reserved keywords
  * [Cpp] Dropped C++11 Support
  * [Cpp] Delete Arena::Init
  * [Cpp] Replace JSON parser with new implementation
  * [Cpp] Make RepeatedField::GetArena non-const in order to
    support split RepeatedFields.
  * long list of bindings specific fixes see
    https://github.com/protocolbuffers/protobuf/releases/tag/v22.0
- python sub packages version is set 4.22.3 as defined in
  python/google/protobuf/__init__.py to stay compatible
- skip python2 builds by default
- drop patches:
  * 10355.patch,
  * gcc12-disable-__constinit-with-c++-11.patch (merged upstream)
- added patches:
  * add-missing-stdint-header.patch   added for compile fixes</changelog>
  <changelog author="fstrba@suse.com" date="1682596800">- Make possible to build on older systems, like SLE12 that miss
  some of the used macros.</changelog>
  <changelog author="fstrba@suse.com" date="1682683200">- Mention the rpmlintrc file in the spec.</changelog>
  <changelog author="mpluskal@suse.com" date="1683633600">- Fix confusion in versions</changelog>
  <changelog author="dmueller@suse.com" date="1686484800">- drop python2 handling
- fix version handling and package the private libs again</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 22.5:
  C++
  * Add missing cstdint header
  * Fix: missing -DPROTOBUF_USE_DLLS in pkg-config (#12700)
  * Avoid using string(JOIN..., which requires cmake 3.12
  * Explicitly include GTest package in examples
  * Bump Abseil submodule to 20230125.3 (#12660)
- update to 22.4:
  C++
  * Fix libprotoc: export useful symbols from .so
  * Fix btree issue in map tests.
  Python
  * Fix bug in _internal_copy_files where the rule would fail in
    downstream repositories.
  Other
  * Bump utf8_range to version with working pkg-config (#12584)
  * Fix declared dependencies for pkg-config
  * Update abseil dependency and reorder dependencies to ensure
    we use the version specified in protobuf_deps.
  * Turn off clang::musttail on i386</changelog>
  <changelog author="fvogt@suse.com" date="1686744000">- Add patch to fix linking ThreadSafeArena:
  * 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch
- Drop the protobuf-source package, no longer used</changelog>
  <changelog author="dmueller@suse.com" date="1688385600">- update to 23.3:
  C++
  * Regenerate stale files
  * Use the same ABI for static and shared libraries on non-
    Windows platforms
  * Add a workaround for GCC constexpr bug
  Objective-C
  * Regenerate stale files
  UPB (Python/PHP/Ruby C-Extension)
  * Fixed a bug in `upb_Map_Delete()` that caused crashes in
    map.delete(k) for Ruby when string-keyed maps were in use.
  Compiler
  * Add missing header to Objective-c generator
  * Add a workaround for GCC constexpr bug
  Java
  * Rollback of: Simplify protobuf Java message builder by
    removing methods that calls the super class only.
  Csharp
  * [C#] Replace regex that validates descriptor names
- drop 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1688731200">- update to 23.4:
  * Add dllexport_decl for generated default instance.
  * Deps: Update Guava to 32.0.1</changelog>
  <changelog author="fstrba@suse.com" date="1698667200">- Build with source and target levels 8
  * fixes build with JDK21
- Install the pom file with the new %%mvn_install_pom macro
- Do not install the pom-only artifacts, since the %%mvn_install_pom
  macro resolves the variables at the install time</changelog>
  <changelog author="dmueller@suse.com" date="1703160000">- build against modern python on sle15</changelog>
  <changelog author="dmueller@suse.com" date="1704196800">- update to 25.1:
  * Raise warnings for deprecated python syntax usages
  * Add support for extensions in CRuby, JRuby, and FFI Ruby
  * Add support for options in CRuby, JRuby and FFI (#14594)
- update to 25.0:
  * Implement proto2/proto3 with editions
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Editions: Introduce functionality to protoc for generating
    edition feature set defaults.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Publish extension declarations with declaration
    verifications.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Protoc: parser rejects explicit use of map_entry option
  * Protoc: validate that reserved range start is before end
  * Protoc: support identifiers as reserved names in addition to
    string literals (only in editions)
  * Drop support for Bazel 5.
  * Allow code generators to specify whether or not they support
    editions.
  [#] C++
  * Set `PROTOBUF_EXPORT` on
    `InternalOutOfLineDeleteMessageLite()`
  * Update stale checked-in files
  * Apply PROTOBUF_NOINLINE to declarations of some functions
    that want it.
  * Implement proto2/proto3 with editions
  * Make JSON UTF-8 boundary check inclusive of the largest
    possible UTF-8 character.
  * Reduce `Map::size_type` to 32-bits. Protobuf containers can't
    have more than that
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Fix bug in reflection based Swap of map fields.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Add prefetching to arena allocations.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    repeated and map field accessors.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    string field accessors.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Fixes for 32-bit MSVC.
  * Publish extension declarations with declaration
    verifications.
  * Export the constants in protobuf's any.h to support DLL
    builds.
  * Implement AbslStringify for the Descriptor family of types.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    message field accessors.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Introduce C++ feature for UTF8 validation.
  * Protoc: validate that reserved range start is before end
  * Remove option to disable the table-driven parser in protoc.
  * Lock down ctype=CORD in proto file.
  * Support split repeated fields.
  * In OSS mode omit some extern template specializations.
  * Allow code generators to specify whether or not they support
    editions.
  [#] Java
  * Implement proto2/proto3 with editions
  * Remove synthetic oneofs from Java gencode field accessor
    tables.
  * Timestamps.parse: Add error handling for invalid
    hours/minutes in the timezone offset.
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Add missing debugging version info to Protobuf Java gencode
    when multiple files are generated.
  * Fix a bad cast in putBuilderIfAbsent when already present due
    to using the result of put() directly (which is null if it
    currently has no value)
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Fix a NPE in putBuilderIfAbsent due to using the result of
    put() directly (which is null if it currently has no value)
  * Update Kotlin compiler to escape package names
  * Add MapFieldBuilder and change codegen to generate it and the
    put{field}BuilderIfAbsent method.
  * Introduce recursion limit in Java text format parsing
  * Consider the protobuf.Any invalid if typeUrl.split("/")
    returns an empty array.
  * Mark `FieldDescriptor.hasOptionalKeyword()` as deprecated.
  * Fixed Python memory leak in map lookup.
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Ensure Timestamp.ToDatetime(tz) has correct offset
  * Do not check required field for upb python MergeFrom
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Emit __slots__ in pyi output as a tuple rather than a list
    for --pyi_out.
  * Fix a bug that strips options from descriptor.proto in
    Python.
  * Raise warings for message.UnknownFields() usages and navigate
    to the new add
  * Add protobuf python keyword support in path for stub
    generator.
  * Add tuple support to set Struct
  * ### Python C-Extension (Default)
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Check that ffi-compiler loads before using it to define
    tasks.
  [#] UPB (Python/PHP/Ruby C-Extension)
  * Include .inc files directly instead of through a filegroup
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Add utf8_validation feature back to the global feature set.
  * Do not check required field for upb python MergeFrom
  * Merge the protobuf and upb Bazel repos
  * Added malloc_trim() calls to Python allocator so RSS will
    decrease when memory is freed
  * Upb: fix a Python memory leak in ByteSize()
  * Support ASAN detection on clang
  * Upb: bugfix for importing a proto3 enum from within a proto2
    file
  * Expose methods needed by Ruby FFI using UPB_API
  * Fix `PyUpb_Message_MergeInternal` segfault</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1728993600">- Add patch to fix StackOverflow vulnerability in Protocol Buffers
  * CVE-2024-7254.patch (bsc#1230778, CVE-2024-7254)</changelog>
  <changelog author="fstrba@suse.com" date="1730030400">- Build the java part with maven, so that we create artifacts
  that correspond to upstream distributed ones.
- Add maven artifact metadata to the protoc binary
- Package also the bom and pom artifacts</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1750161600">- Add CVE-2025-4565.patch to fix parsing of untrusted Protocol Buffers
  data containing an arbitrary number of recursive groups or messages
  can lead to crash due to RecursionError (bsc#1244663, CVE-2025-4565)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1769428800">- Add CVE-2026-0994.patch to fix google.protobuf.Any recursion depth
  bypass in Python json_format.ParseDict (bsc#1257173, CVE-2026-0994)</changelog>
</package>
<package pkgid="11de9f6c33d484cc3cf1bc8bc4faf6be16bd3fe7be6c0cfac1bfa8a53b1ff8d5" name="libprotobuf20" arch="x86_64">
  <version epoch="0" ver="3.9.2" rel="150200.4.27.1"/>
  <changelog author="mlin@suse.com" date="1519387200">- Add adding-Release_CompareAndSwap-64-bit-variant.patch
  * Fix compile error undefined reference to
    `google::protobuf::internal::Release_CompareAndSwap(long volatile*, long, long)'
    on s390x https://github.com/google/protobuf/issues/3937</changelog>
  <changelog author="tbechtold@suse.com" date="1526299200">update to version v3.5.2:
  * Update release date
  * Disable pip cache when testing uploaded packages
  * Replace private timelib_update_ts with public date_timestamp_get
  * Remove py2.6 support.
  * Cherrypick for csharp, including:
  * Update changelog
  * Update changelog for 3.5.1
  * Fix uploading binary wheel.
  * Fix memory leak when creating map field via array.
  * Update rake file to build of 2.1.6.
  * Avoid using php_date_get_date_ce() in case date extension is not
  * Update protoc-artfacts
  * Fix string::back() usage in googletest.cc
  * Fix memory leak in php7
  * Support ruby2.5
  * io_win32: support non-ASCII paths
  * Explicitly propagate the status of Flush().
  * Add discard unknown API in ruby. (#3990)
  * Update version for 3.5.0.post1
  * remove nullptr
  * Fix more memory leak for php c extension (#4211)
  * Bumping number to fix ruby 2.1 on mac
  * io_win32_unittest: remove incorrect error check
  * Fix memory leak when creating repeated field via array.
  * Update version number for php c extension (#3896)
  * Fix file permission for python package.
  * Create containing directory before generating well_known_types_embed.cc
  * Replace C++11 only method std::map::at
  * Recursively clear unknown fields in submessages. (#3982)
  * Update version number to 3.5.1
  * io_win32_unittest: fix condition in GetCwdAsUtf8
  * Add release log
  * io_win32_unittest: use CWD as last tempdir
  * Add PROTOBUF_ENABLE_TIMESTAMP to let user decide whether timestamp util
  * Add support for Windows ARM64 build
  * Add protobuf-all in post release
  * Use fully qualifed name for DescriptorPool in Any.php to avoid name (#3886)
  * Add _file_desc_by_toplevel_extension back
  * Fix setup.py for windows build.
  * io_win32_unittest: make //:win32_test run again
  * Provide discardUnknonwnFields API in php (#3976)
  * Update php c extension version number to 3.5.0.1
  * Fix ruby gc_test in ruby 2.4 (#4011)
  * Remove duplicate typedef. (#3975)
  * Accept DatetimeInterface in fromDatetime
  * io_win32: add more encoding-related tests
  * Bump version number to 3.5.2
  * Bump protoc-artifact version for a patch rebuild
  * Call php method via function name instead of calling directly.
  * Well known types are not initialized properly. (#4139)
  * Use matching enum type for IsPOD.
  * Fix several more memory leak
  * Fix for php5.5
  * Add backslach to make class explict in global namespace</changelog>
  <changelog author="tbechtold@suse.com" date="1536753600">- update to version v3.6.1:
  * PHP namespaces for nested messages and enums (#4536)
  * Allows the json marshaller to be passed json marshal options (#4252)
  * Make sure to delete temporary maps used by FileDescriptorTables
  * fix python cpp kokoro build
  * Change C# reflection to avoid using expression trees
  * Updated checked-in generated code
  * Removed unused variables in repeated_scalar_container.cc
  * Removed unused code pertaining to shared_ptr
  * Include no_package.proto in Python test
  * Only check filenames when end with .py in _CalledFromGeneratedFile() (#4262)
  * Convert descriptortype to type for upb_msgval_sizeof (#4357)
  * Removed duplicate using statement from ReflectionUtil.cs
  * Add support for power ppc64le
  * Cat the test-suite.log on errors for presubits
  * Address review comments
  * Add third-party RPC implementation: raster - a network framework supports pbrpc by 'service' keyword.
  * Delete javanano kokoro build configs.
  * Updated Ruby conformance test failure list
  * Removed use of some type traits
  * Adopt php_metadata_namespace in php code generator (#4622)
  * Move to Xcode 9.3 which also means a High Sierra image.
  * Add protoc release script for Linux build.
  * protoc-artifacts: Avoid storing temporary files and use fewer layers
  * Rewrite go_benchmark
  * Add files to build ruby artifact for mac on kokoro (#4814)
  * Remove javanano.
  * Comment out unused command from release script.
  * Avoid direct check of class name (#4601)
  * The JsonParseOptions::ignore_unknown_fields option behavior treats
  * Fix php memory leak test (#4692)
  * Fix benchmark build
  * Add VS2017 optional component dependency details to the C# readme (#4128)
  * Fix initialization with Visual Studio
  * For windows, all python version should use /MT (#4468)
  * use brew install instead of easy_install in OSX (#4537)
  * Sync upb change (#4373)
  * Always add -std=c++11 for mac (#4684)
  * Add kokoro build status badges.
  * Removed unrecognized option from no_package.proto
  * Fixed up proto3_lite_unittest.cc
  * Update Xcode settings
  * Cleanup LICENSE file.
  * Remove js_embed binary. (#4709)
  * Fixed JS parsing of unspecified map keys
  * Update version number to 3.6.0
  * Deliberately call simple code to avoid Unity linker pruning
  * Revert "Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources."
  * protoc-artifacts: Use ENTRYPOINT to enable devtoolset-1.1
  * MinGW build failed
  * Support using MSVC intrinsics in Log2FloorNonZero
  * Fix array constructor in c extension for compatibility (#4667)
  * Add space between class name and concat message (#4577)
  * fix python
  * Add performance.md and add instruction for linking tcmalloc
  * Add script for run and upload the benchmark result to bq
  * Add test for failing write of raw pointer to output stream
  * [objectivec] Fix memory leak of exceptions raised by RaiseException() (#4556)
  * Remove stray indent on normal imports.
  * Fix python ext build on kokoro (#4527)
  * Add compile test sources for to test include order.
  * Fixed a Visual Studio 2017 build error. (#4488)
  * fix linux kokoro build in docker
  * Fixes MSVC compiler warning C4800 "Forcing value to bool 'true' or 'false'" (#4350)
  * Updated Docker setup to use GCC 4.8
  * Remove broken build status icons.
  * Run autogen.sh in release script.
  * Output *_pb2_grpc.py when use_grpc_plugin=True
  * Adopt ruby_package in ruby generated code. (#4627)
  * Cygwin build failed
  * Work around an "old runtime" issue with reflection
  * Added Kokoro protoc release build for OS X (#4770)
  * Updated change log for 3.6.1 release
  * Move methods out of class (#4697)
  * Fix to allow AOT compilers to play nicely with reflection
  * Update Makefile.am for Java lite files.
  * Added map_lite_test.proto to fix LiteTest
  * Introduce a compatiblity shim to support .NET 3.5 delegate creation
  * Revert "Removed mention of Buffer in byteSourceToUint8Array"
  * Add gogo benchmark
  * Set ext.no_native = true for non mac platform
  * Removed atomicops.h since it is no longer used
  * Rename a shadowed variable.
  * Add kokoro bazel configs for 3.6.x branch.
  * Deleted scoped_ptr.h
  * Check the message to be encoded is the wrong type. (#4885) (#4949)
  * protoc-artifacts: Avoid checking out protobuf code
  * Add conformance test for null value in list JSON
  * Build ruby gem on kokoro (#4819)
  * Try using a new version of Visual Studio on AppVeyor
  * Make ruby release configs consistent with protoc.
  * fix for API change in PHP 7.3 (#4898)
  * Add .proto files to extract_includes.bat
  * Update protoc build scripts.
  * Blacklist all WELL_KNOWN_PROTOS from Bazel C++ code generation.
  * Additional support for building and deploying ppcle_64 artifacts
  * Fix php tests
  * Cleanup + documentation for Java Lite runtime.
  * Added Kokoro Windows release build config for protoc (#4766)
  * typo
  * fix golang kokoro linux build
  * Fix spelling error of __GNUC_MINOR__
  * Update code to work for Xcode 10b1 (#4729)
  * Added pyext/thread_unsafe_shared_ptr.h
  * Added missing .inc files to BUILD
  * js message support for jstype string on integers (#4332)
  * Improve error message when googletest is missing.
  * Make assertEquals pass for message (#4947)
  * Sync internal benchmark changes
  * Removed some unused C++ source files
  * Fix missing LIBPROTOC_EXPORT.
  * Added new test source files to Makefile.am
  * Update php version to 3.6.0 (#4736)
  * Fix RepeatedField#delete_if (#4292)
  * Merge branch (#4466)
  * Implement array constructor in php c extension.
  * protoc-artifacts: Update centos base from 6.6 to 6.9
  * PHP array constructors for protobuf messages (#4530)
  * Fix problem: cmake build failed in c++11  by clang
  * Don't assume Windows builds use MSVC.
  * Use legacy name in php runtime (#4741)
  * Add file option php_metadata_namespace and ruby_package (#4609)
  * Fix cpp benchmark dependency on mac
  * Use the first enum value instead of 0 in DefaultValueObjectWriter::FindEnumDefault
  * Check return value on write of raw pointer
  * Delete unused directories.
  * Replace //:protoc and similar default macro arguments with
  * Add extra C# file to Makefile.am
  * includes the expected class in the exception, otherwise the error is harder to track down (#3371)
  * Update instructions about getting protobuf source.
  * Add cpp tests under release docker image.
  * fix java benchmark, fix dashboard build
  * `update_file_lists.sh` depends on Bash features, thus needs Bash sebang.
  * Rename build_artifacts.cfg to release.cfg (#4818)
  * Fix bug: whether always_print_enums_as_ints is true or false, it always print the default value of enums as strings
  * source code info for interpreted options; fix source code info for extension range options (#4342)
  * Updated version numbers to 3.6.1
  * Trim imports for bundled generated protos.
  * Require C++11 and pass -std=c++11
  * Remove the iOS Test App.
  * fix duplicate mkdir in update_file_lists.sh
  * Updated csharp/README.md to reflect testing changes
  * Fix bazel build of examples.
  * Add missing ruby/tests/test_ruby_package.proto
  * Fix cpp_distcheck
  * Updated the change log with changes for 3.6.0
  * some fix
  * CMake: Update CXX Standard management
  * Add the files added in #4485.
  * Change to deal all messages in one loop
  * Fix php conformance test.
  * Add __init__.py files to compiler and util subpackages (#4117)
  * Updated .gitignore to exclude downloaded gmock/ directory
  * Fix error in Clang UndefinedBehaviorSanitizer
  * Work around MSVC issue with std::atomic initialization (#4777)
  * Updated conformance failure lists
  * Add back GeneratedClassName to public (#4686)
  * Add continuous test for ruby 2.3, 2.4 and 2.5 (#4829)
  * Throw error if user want to access message properties (#4603)
  * fix json_decode call parameters (#4381)
  * Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources.
  * PHP: fixed typo in message.c
  * Add go benchmark
  * Allow list values to be null when parsing
  * Added instruction for existing ZLIB configuration
  * Fix 32bit php tests
  * Removed javanano from post_process_dist.sh
  * Don't generate imports for the WKTs unless generating the WKTs.
  * For encoding upb needs descriptor type instead of type. (#4354)
  * Include googletest as a submodule (#3993)
  * Write messages to backing field in generated C# cloning code (#4440)
  * Integrated internal changes from Google
- Drop adding-Release_CompareAndSwap-64-bit-variant.patch . Applied
  upstream.
- bump soname version</changelog>
  <changelog author="fstrba@suse.com" date="1545048000">- Add maven pom files to the protobuf-java package</changelog>
  <changelog author="mrostecki@suse.de" date="1546948800">- Add protobuf-source package - some programs using gRPC and
  protobuf need protobuf definitions which are included inside the
  source code, but are not included in the devel package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1550664000">- Add upstream patch which fixes build with Bazel 0.22.0.
  * 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133277).</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 3.8.0
  * Introduced new MOMI (maybe-outside-memory-interval) parser.
  * Added use of C++ override keyword where appropriate.
  * Always declare enums to be int-sized.
  * Append '_' to C++ reserved keywords for message, enum, extension.
- Remove 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch
  (upstreamed)</changelog>
  <changelog author="fstrba@suse.com" date="1559995200">- Specify java source and target levels in order to build
  compatible protobuf-java binaries</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Update to new upstream release 3.9.1
  * Optimized the implementation of RepeatedPtrFieldBase.
  * Added delimited parse and serialize util.
  * Added FieldDescriptor::PrintableNameForExtension() and
    DescriptorPool::FindExtensionByPrintableName(). The latter
    will replace Reflection::FindKnownExtensionByName().
  * Created a new Add method in repeated field that allows adding
    a range of elements all at once.
  * Drop building wheel for Python 3.4.</changelog>
  <changelog author="fstrba@suse.com" date="1569585600">- Package also the protobuf-bom pom file</changelog>
  <changelog author="mmnelemane@suse.com" date="1576756800">- Updated to version 3.9.2 (bsc#1162343)
  (Objective-C)
  * Remove OSReadLittle* due to alignment requirements. (#6678)
  * Don't use unions and instead use memcpy for the type swaps. (#6672)</changelog>
  <changelog author="mpluskal@suse.com" date="1576843200">- Use tarball provided by upstream
- Small package cleanup</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Add missing dependency of python subpackages on python-six
  (bsc#1177127).</changelog>
  <changelog author="mcepl@suse.com" date="1612958400">- Fix Requires for python3 to python3-six.</changelog>
  <changelog author="mlin@suse.com" date="1647000000">- Fix incorrect parsing of nullchar in the proto symbol, CVE-2021-22570,
  bsc#1195258
  * Add protobuf-CVE-2021-22570.patch</changelog>
  <changelog author="mlin@suse.com" date="1664884800">- Fix potential Denial of Service in protobuf-java in the parsing procedure
  for binary data, CVE-2021-22569, bsc#1194530
  * Add protobuf-improve-performance-of-parsing-unknown-fields-in-Java.patch</changelog>
  <changelog author="mlin@suse.com" date="1666267200">- Fix a potential DoS issue in protobuf-cpp and protobuf-python,
  CVE-2022-1941, bsc#1203681
  * Add protobuf-CVE-2022-1941.patch
- Fix a potential DoS issue when parsing with binary data in
  protobuf-java, CVE-2022-3171, bsc#1204256
  * Add protobuf-CVE-2022-3171.patch
- Refresh protobuf-CVE-2021-22570.patch
- Backport changes from 3.16.x tree for apply recent CVE patches
  * Add protobuf-51026d922970e06475f005b39287963594134b96.patch
  * Add protobuf-6ee16a9c60e734104aeb738503fe3f411c97bd88.patch
  * Add protobuf-73e0d748b9acdc40b693f2879ce82ecb1a849b81.patch
  * Add protobuf-7bff8393cab939bfbb9b5c69b3fe76b4d83c41ee.patch
  * Add protobuf-4f02f056b5cea99052bfdfb6698afe47a3cf2964.patch
  * Add protobuf-763c3588740b97e8e80b1b1a1a2dc4f417647133.patch
  * Add protobuf-6c92f9dff1807c142edf6780d775b58a3b078591.patch
  * Add protobuf-4e93585e8bb234efeacb7737b8d080968c5ab91e.patch
  * Add protobuf-58d4420e2dd8a3cd354fff9db0052881c25369ce.patch
- Reorganize patch set ordering</changelog>
  <changelog author="fstrba@suse.com" date="1730030400">- Build the java part with maven, so that we create artifacts
  that correspond to upstream distributed ones.
- Add maven artifact metadata to the protoc binary
- Package also the bom and pom artifacts</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1757937600">- Add CVE-2025-4565.patch to fix parsing of untrusted Protocol Buffers
  data containing an arbitrary number of recursive groups or messages
  can lead to crash due to RecursionError (bsc#1244663, CVE-2025-4565)</changelog>
</package>
<package pkgid="4e731bf5f8b4eaf32415b305fe28f23aa27af5717878f9ccc972c2a6df61a6e3" name="libprotobuf20" arch="x86_64">
  <version epoch="0" ver="3.9.2" rel="150200.4.30.1"/>
  <changelog author="tbechtold@suse.com" date="1526299200">update to version v3.5.2:
  * Update release date
  * Disable pip cache when testing uploaded packages
  * Replace private timelib_update_ts with public date_timestamp_get
  * Remove py2.6 support.
  * Cherrypick for csharp, including:
  * Update changelog
  * Update changelog for 3.5.1
  * Fix uploading binary wheel.
  * Fix memory leak when creating map field via array.
  * Update rake file to build of 2.1.6.
  * Avoid using php_date_get_date_ce() in case date extension is not
  * Update protoc-artfacts
  * Fix string::back() usage in googletest.cc
  * Fix memory leak in php7
  * Support ruby2.5
  * io_win32: support non-ASCII paths
  * Explicitly propagate the status of Flush().
  * Add discard unknown API in ruby. (#3990)
  * Update version for 3.5.0.post1
  * remove nullptr
  * Fix more memory leak for php c extension (#4211)
  * Bumping number to fix ruby 2.1 on mac
  * io_win32_unittest: remove incorrect error check
  * Fix memory leak when creating repeated field via array.
  * Update version number for php c extension (#3896)
  * Fix file permission for python package.
  * Create containing directory before generating well_known_types_embed.cc
  * Replace C++11 only method std::map::at
  * Recursively clear unknown fields in submessages. (#3982)
  * Update version number to 3.5.1
  * io_win32_unittest: fix condition in GetCwdAsUtf8
  * Add release log
  * io_win32_unittest: use CWD as last tempdir
  * Add PROTOBUF_ENABLE_TIMESTAMP to let user decide whether timestamp util
  * Add support for Windows ARM64 build
  * Add protobuf-all in post release
  * Use fully qualifed name for DescriptorPool in Any.php to avoid name (#3886)
  * Add _file_desc_by_toplevel_extension back
  * Fix setup.py for windows build.
  * io_win32_unittest: make //:win32_test run again
  * Provide discardUnknonwnFields API in php (#3976)
  * Update php c extension version number to 3.5.0.1
  * Fix ruby gc_test in ruby 2.4 (#4011)
  * Remove duplicate typedef. (#3975)
  * Accept DatetimeInterface in fromDatetime
  * io_win32: add more encoding-related tests
  * Bump version number to 3.5.2
  * Bump protoc-artifact version for a patch rebuild
  * Call php method via function name instead of calling directly.
  * Well known types are not initialized properly. (#4139)
  * Use matching enum type for IsPOD.
  * Fix several more memory leak
  * Fix for php5.5
  * Add backslach to make class explict in global namespace</changelog>
  <changelog author="tbechtold@suse.com" date="1536753600">- update to version v3.6.1:
  * PHP namespaces for nested messages and enums (#4536)
  * Allows the json marshaller to be passed json marshal options (#4252)
  * Make sure to delete temporary maps used by FileDescriptorTables
  * fix python cpp kokoro build
  * Change C# reflection to avoid using expression trees
  * Updated checked-in generated code
  * Removed unused variables in repeated_scalar_container.cc
  * Removed unused code pertaining to shared_ptr
  * Include no_package.proto in Python test
  * Only check filenames when end with .py in _CalledFromGeneratedFile() (#4262)
  * Convert descriptortype to type for upb_msgval_sizeof (#4357)
  * Removed duplicate using statement from ReflectionUtil.cs
  * Add support for power ppc64le
  * Cat the test-suite.log on errors for presubits
  * Address review comments
  * Add third-party RPC implementation: raster - a network framework supports pbrpc by 'service' keyword.
  * Delete javanano kokoro build configs.
  * Updated Ruby conformance test failure list
  * Removed use of some type traits
  * Adopt php_metadata_namespace in php code generator (#4622)
  * Move to Xcode 9.3 which also means a High Sierra image.
  * Add protoc release script for Linux build.
  * protoc-artifacts: Avoid storing temporary files and use fewer layers
  * Rewrite go_benchmark
  * Add files to build ruby artifact for mac on kokoro (#4814)
  * Remove javanano.
  * Comment out unused command from release script.
  * Avoid direct check of class name (#4601)
  * The JsonParseOptions::ignore_unknown_fields option behavior treats
  * Fix php memory leak test (#4692)
  * Fix benchmark build
  * Add VS2017 optional component dependency details to the C# readme (#4128)
  * Fix initialization with Visual Studio
  * For windows, all python version should use /MT (#4468)
  * use brew install instead of easy_install in OSX (#4537)
  * Sync upb change (#4373)
  * Always add -std=c++11 for mac (#4684)
  * Add kokoro build status badges.
  * Removed unrecognized option from no_package.proto
  * Fixed up proto3_lite_unittest.cc
  * Update Xcode settings
  * Cleanup LICENSE file.
  * Remove js_embed binary. (#4709)
  * Fixed JS parsing of unspecified map keys
  * Update version number to 3.6.0
  * Deliberately call simple code to avoid Unity linker pruning
  * Revert "Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources."
  * protoc-artifacts: Use ENTRYPOINT to enable devtoolset-1.1
  * MinGW build failed
  * Support using MSVC intrinsics in Log2FloorNonZero
  * Fix array constructor in c extension for compatibility (#4667)
  * Add space between class name and concat message (#4577)
  * fix python
  * Add performance.md and add instruction for linking tcmalloc
  * Add script for run and upload the benchmark result to bq
  * Add test for failing write of raw pointer to output stream
  * [objectivec] Fix memory leak of exceptions raised by RaiseException() (#4556)
  * Remove stray indent on normal imports.
  * Fix python ext build on kokoro (#4527)
  * Add compile test sources for to test include order.
  * Fixed a Visual Studio 2017 build error. (#4488)
  * fix linux kokoro build in docker
  * Fixes MSVC compiler warning C4800 "Forcing value to bool 'true' or 'false'" (#4350)
  * Updated Docker setup to use GCC 4.8
  * Remove broken build status icons.
  * Run autogen.sh in release script.
  * Output *_pb2_grpc.py when use_grpc_plugin=True
  * Adopt ruby_package in ruby generated code. (#4627)
  * Cygwin build failed
  * Work around an "old runtime" issue with reflection
  * Added Kokoro protoc release build for OS X (#4770)
  * Updated change log for 3.6.1 release
  * Move methods out of class (#4697)
  * Fix to allow AOT compilers to play nicely with reflection
  * Update Makefile.am for Java lite files.
  * Added map_lite_test.proto to fix LiteTest
  * Introduce a compatiblity shim to support .NET 3.5 delegate creation
  * Revert "Removed mention of Buffer in byteSourceToUint8Array"
  * Add gogo benchmark
  * Set ext.no_native = true for non mac platform
  * Removed atomicops.h since it is no longer used
  * Rename a shadowed variable.
  * Add kokoro bazel configs for 3.6.x branch.
  * Deleted scoped_ptr.h
  * Check the message to be encoded is the wrong type. (#4885) (#4949)
  * protoc-artifacts: Avoid checking out protobuf code
  * Add conformance test for null value in list JSON
  * Build ruby gem on kokoro (#4819)
  * Try using a new version of Visual Studio on AppVeyor
  * Make ruby release configs consistent with protoc.
  * fix for API change in PHP 7.3 (#4898)
  * Add .proto files to extract_includes.bat
  * Update protoc build scripts.
  * Blacklist all WELL_KNOWN_PROTOS from Bazel C++ code generation.
  * Additional support for building and deploying ppcle_64 artifacts
  * Fix php tests
  * Cleanup + documentation for Java Lite runtime.
  * Added Kokoro Windows release build config for protoc (#4766)
  * typo
  * fix golang kokoro linux build
  * Fix spelling error of __GNUC_MINOR__
  * Update code to work for Xcode 10b1 (#4729)
  * Added pyext/thread_unsafe_shared_ptr.h
  * Added missing .inc files to BUILD
  * js message support for jstype string on integers (#4332)
  * Improve error message when googletest is missing.
  * Make assertEquals pass for message (#4947)
  * Sync internal benchmark changes
  * Removed some unused C++ source files
  * Fix missing LIBPROTOC_EXPORT.
  * Added new test source files to Makefile.am
  * Update php version to 3.6.0 (#4736)
  * Fix RepeatedField#delete_if (#4292)
  * Merge branch (#4466)
  * Implement array constructor in php c extension.
  * protoc-artifacts: Update centos base from 6.6 to 6.9
  * PHP array constructors for protobuf messages (#4530)
  * Fix problem: cmake build failed in c++11  by clang
  * Don't assume Windows builds use MSVC.
  * Use legacy name in php runtime (#4741)
  * Add file option php_metadata_namespace and ruby_package (#4609)
  * Fix cpp benchmark dependency on mac
  * Use the first enum value instead of 0 in DefaultValueObjectWriter::FindEnumDefault
  * Check return value on write of raw pointer
  * Delete unused directories.
  * Replace //:protoc and similar default macro arguments with
  * Add extra C# file to Makefile.am
  * includes the expected class in the exception, otherwise the error is harder to track down (#3371)
  * Update instructions about getting protobuf source.
  * Add cpp tests under release docker image.
  * fix java benchmark, fix dashboard build
  * `update_file_lists.sh` depends on Bash features, thus needs Bash sebang.
  * Rename build_artifacts.cfg to release.cfg (#4818)
  * Fix bug: whether always_print_enums_as_ints is true or false, it always print the default value of enums as strings
  * source code info for interpreted options; fix source code info for extension range options (#4342)
  * Updated version numbers to 3.6.1
  * Trim imports for bundled generated protos.
  * Require C++11 and pass -std=c++11
  * Remove the iOS Test App.
  * fix duplicate mkdir in update_file_lists.sh
  * Updated csharp/README.md to reflect testing changes
  * Fix bazel build of examples.
  * Add missing ruby/tests/test_ruby_package.proto
  * Fix cpp_distcheck
  * Updated the change log with changes for 3.6.0
  * some fix
  * CMake: Update CXX Standard management
  * Add the files added in #4485.
  * Change to deal all messages in one loop
  * Fix php conformance test.
  * Add __init__.py files to compiler and util subpackages (#4117)
  * Updated .gitignore to exclude downloaded gmock/ directory
  * Fix error in Clang UndefinedBehaviorSanitizer
  * Work around MSVC issue with std::atomic initialization (#4777)
  * Updated conformance failure lists
  * Add back GeneratedClassName to public (#4686)
  * Add continuous test for ruby 2.3, 2.4 and 2.5 (#4829)
  * Throw error if user want to access message properties (#4603)
  * fix json_decode call parameters (#4381)
  * Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources.
  * PHP: fixed typo in message.c
  * Add go benchmark
  * Allow list values to be null when parsing
  * Added instruction for existing ZLIB configuration
  * Fix 32bit php tests
  * Removed javanano from post_process_dist.sh
  * Don't generate imports for the WKTs unless generating the WKTs.
  * For encoding upb needs descriptor type instead of type. (#4354)
  * Include googletest as a submodule (#3993)
  * Write messages to backing field in generated C# cloning code (#4440)
  * Integrated internal changes from Google
- Drop adding-Release_CompareAndSwap-64-bit-variant.patch . Applied
  upstream.
- bump soname version</changelog>
  <changelog author="fstrba@suse.com" date="1545048000">- Add maven pom files to the protobuf-java package</changelog>
  <changelog author="mrostecki@suse.de" date="1546948800">- Add protobuf-source package - some programs using gRPC and
  protobuf need protobuf definitions which are included inside the
  source code, but are not included in the devel package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1550664000">- Add upstream patch which fixes build with Bazel 0.22.0.
  * 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133277).</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 3.8.0
  * Introduced new MOMI (maybe-outside-memory-interval) parser.
  * Added use of C++ override keyword where appropriate.
  * Always declare enums to be int-sized.
  * Append '_' to C++ reserved keywords for message, enum, extension.
- Remove 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch
  (upstreamed)</changelog>
  <changelog author="fstrba@suse.com" date="1559995200">- Specify java source and target levels in order to build
  compatible protobuf-java binaries</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Update to new upstream release 3.9.1
  * Optimized the implementation of RepeatedPtrFieldBase.
  * Added delimited parse and serialize util.
  * Added FieldDescriptor::PrintableNameForExtension() and
    DescriptorPool::FindExtensionByPrintableName(). The latter
    will replace Reflection::FindKnownExtensionByName().
  * Created a new Add method in repeated field that allows adding
    a range of elements all at once.
  * Drop building wheel for Python 3.4.</changelog>
  <changelog author="fstrba@suse.com" date="1569585600">- Package also the protobuf-bom pom file</changelog>
  <changelog author="mmnelemane@suse.com" date="1576756800">- Updated to version 3.9.2 (bsc#1162343)
  (Objective-C)
  * Remove OSReadLittle* due to alignment requirements. (#6678)
  * Don't use unions and instead use memcpy for the type swaps. (#6672)</changelog>
  <changelog author="mpluskal@suse.com" date="1576843200">- Use tarball provided by upstream
- Small package cleanup</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Add missing dependency of python subpackages on python-six
  (bsc#1177127).</changelog>
  <changelog author="mcepl@suse.com" date="1612958400">- Fix Requires for python3 to python3-six.</changelog>
  <changelog author="mlin@suse.com" date="1647000000">- Fix incorrect parsing of nullchar in the proto symbol, CVE-2021-22570,
  bsc#1195258
  * Add protobuf-CVE-2021-22570.patch</changelog>
  <changelog author="mlin@suse.com" date="1664884800">- Fix potential Denial of Service in protobuf-java in the parsing procedure
  for binary data, CVE-2021-22569, bsc#1194530
  * Add protobuf-improve-performance-of-parsing-unknown-fields-in-Java.patch</changelog>
  <changelog author="mlin@suse.com" date="1666267200">- Fix a potential DoS issue in protobuf-cpp and protobuf-python,
  CVE-2022-1941, bsc#1203681
  * Add protobuf-CVE-2022-1941.patch
- Fix a potential DoS issue when parsing with binary data in
  protobuf-java, CVE-2022-3171, bsc#1204256
  * Add protobuf-CVE-2022-3171.patch
- Refresh protobuf-CVE-2021-22570.patch
- Backport changes from 3.16.x tree for apply recent CVE patches
  * Add protobuf-51026d922970e06475f005b39287963594134b96.patch
  * Add protobuf-6ee16a9c60e734104aeb738503fe3f411c97bd88.patch
  * Add protobuf-73e0d748b9acdc40b693f2879ce82ecb1a849b81.patch
  * Add protobuf-7bff8393cab939bfbb9b5c69b3fe76b4d83c41ee.patch
  * Add protobuf-4f02f056b5cea99052bfdfb6698afe47a3cf2964.patch
  * Add protobuf-763c3588740b97e8e80b1b1a1a2dc4f417647133.patch
  * Add protobuf-6c92f9dff1807c142edf6780d775b58a3b078591.patch
  * Add protobuf-4e93585e8bb234efeacb7737b8d080968c5ab91e.patch
  * Add protobuf-58d4420e2dd8a3cd354fff9db0052881c25369ce.patch
- Reorganize patch set ordering</changelog>
  <changelog author="fstrba@suse.com" date="1730030400">- Build the java part with maven, so that we create artifacts
  that correspond to upstream distributed ones.
- Add maven artifact metadata to the protoc binary
- Package also the bom and pom artifacts</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1757937600">- Add CVE-2025-4565.patch to fix parsing of untrusted Protocol Buffers
  data containing an arbitrary number of recursive groups or messages
  can lead to crash due to RecursionError (bsc#1244663, CVE-2025-4565)</changelog>
  <changelog author="mlin@suse.com" date="1769601600">- Add protobuf-CVE-2026-0994.patch to fix Any recursion depth bypass
  in Python json_format.ParseDict (bsc#1257173, CVE-2026-0994)</changelog>
</package>
<package pkgid="b6963604c84c2b09de0eae0476dfd47127d850c7631d9daf50f04f699107ea24" name="libprotobuf20" arch="x86_64">
  <version epoch="0" ver="3.9.2" rel="150200.4.33.1"/>
  <changelog author="tbechtold@suse.com" date="1536753600">- update to version v3.6.1:
  * PHP namespaces for nested messages and enums (#4536)
  * Allows the json marshaller to be passed json marshal options (#4252)
  * Make sure to delete temporary maps used by FileDescriptorTables
  * fix python cpp kokoro build
  * Change C# reflection to avoid using expression trees
  * Updated checked-in generated code
  * Removed unused variables in repeated_scalar_container.cc
  * Removed unused code pertaining to shared_ptr
  * Include no_package.proto in Python test
  * Only check filenames when end with .py in _CalledFromGeneratedFile() (#4262)
  * Convert descriptortype to type for upb_msgval_sizeof (#4357)
  * Removed duplicate using statement from ReflectionUtil.cs
  * Add support for power ppc64le
  * Cat the test-suite.log on errors for presubits
  * Address review comments
  * Add third-party RPC implementation: raster - a network framework supports pbrpc by 'service' keyword.
  * Delete javanano kokoro build configs.
  * Updated Ruby conformance test failure list
  * Removed use of some type traits
  * Adopt php_metadata_namespace in php code generator (#4622)
  * Move to Xcode 9.3 which also means a High Sierra image.
  * Add protoc release script for Linux build.
  * protoc-artifacts: Avoid storing temporary files and use fewer layers
  * Rewrite go_benchmark
  * Add files to build ruby artifact for mac on kokoro (#4814)
  * Remove javanano.
  * Comment out unused command from release script.
  * Avoid direct check of class name (#4601)
  * The JsonParseOptions::ignore_unknown_fields option behavior treats
  * Fix php memory leak test (#4692)
  * Fix benchmark build
  * Add VS2017 optional component dependency details to the C# readme (#4128)
  * Fix initialization with Visual Studio
  * For windows, all python version should use /MT (#4468)
  * use brew install instead of easy_install in OSX (#4537)
  * Sync upb change (#4373)
  * Always add -std=c++11 for mac (#4684)
  * Add kokoro build status badges.
  * Removed unrecognized option from no_package.proto
  * Fixed up proto3_lite_unittest.cc
  * Update Xcode settings
  * Cleanup LICENSE file.
  * Remove js_embed binary. (#4709)
  * Fixed JS parsing of unspecified map keys
  * Update version number to 3.6.0
  * Deliberately call simple code to avoid Unity linker pruning
  * Revert "Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources."
  * protoc-artifacts: Use ENTRYPOINT to enable devtoolset-1.1
  * MinGW build failed
  * Support using MSVC intrinsics in Log2FloorNonZero
  * Fix array constructor in c extension for compatibility (#4667)
  * Add space between class name and concat message (#4577)
  * fix python
  * Add performance.md and add instruction for linking tcmalloc
  * Add script for run and upload the benchmark result to bq
  * Add test for failing write of raw pointer to output stream
  * [objectivec] Fix memory leak of exceptions raised by RaiseException() (#4556)
  * Remove stray indent on normal imports.
  * Fix python ext build on kokoro (#4527)
  * Add compile test sources for to test include order.
  * Fixed a Visual Studio 2017 build error. (#4488)
  * fix linux kokoro build in docker
  * Fixes MSVC compiler warning C4800 "Forcing value to bool 'true' or 'false'" (#4350)
  * Updated Docker setup to use GCC 4.8
  * Remove broken build status icons.
  * Run autogen.sh in release script.
  * Output *_pb2_grpc.py when use_grpc_plugin=True
  * Adopt ruby_package in ruby generated code. (#4627)
  * Cygwin build failed
  * Work around an "old runtime" issue with reflection
  * Added Kokoro protoc release build for OS X (#4770)
  * Updated change log for 3.6.1 release
  * Move methods out of class (#4697)
  * Fix to allow AOT compilers to play nicely with reflection
  * Update Makefile.am for Java lite files.
  * Added map_lite_test.proto to fix LiteTest
  * Introduce a compatiblity shim to support .NET 3.5 delegate creation
  * Revert "Removed mention of Buffer in byteSourceToUint8Array"
  * Add gogo benchmark
  * Set ext.no_native = true for non mac platform
  * Removed atomicops.h since it is no longer used
  * Rename a shadowed variable.
  * Add kokoro bazel configs for 3.6.x branch.
  * Deleted scoped_ptr.h
  * Check the message to be encoded is the wrong type. (#4885) (#4949)
  * protoc-artifacts: Avoid checking out protobuf code
  * Add conformance test for null value in list JSON
  * Build ruby gem on kokoro (#4819)
  * Try using a new version of Visual Studio on AppVeyor
  * Make ruby release configs consistent with protoc.
  * fix for API change in PHP 7.3 (#4898)
  * Add .proto files to extract_includes.bat
  * Update protoc build scripts.
  * Blacklist all WELL_KNOWN_PROTOS from Bazel C++ code generation.
  * Additional support for building and deploying ppcle_64 artifacts
  * Fix php tests
  * Cleanup + documentation for Java Lite runtime.
  * Added Kokoro Windows release build config for protoc (#4766)
  * typo
  * fix golang kokoro linux build
  * Fix spelling error of __GNUC_MINOR__
  * Update code to work for Xcode 10b1 (#4729)
  * Added pyext/thread_unsafe_shared_ptr.h
  * Added missing .inc files to BUILD
  * js message support for jstype string on integers (#4332)
  * Improve error message when googletest is missing.
  * Make assertEquals pass for message (#4947)
  * Sync internal benchmark changes
  * Removed some unused C++ source files
  * Fix missing LIBPROTOC_EXPORT.
  * Added new test source files to Makefile.am
  * Update php version to 3.6.0 (#4736)
  * Fix RepeatedField#delete_if (#4292)
  * Merge branch (#4466)
  * Implement array constructor in php c extension.
  * protoc-artifacts: Update centos base from 6.6 to 6.9
  * PHP array constructors for protobuf messages (#4530)
  * Fix problem: cmake build failed in c++11  by clang
  * Don't assume Windows builds use MSVC.
  * Use legacy name in php runtime (#4741)
  * Add file option php_metadata_namespace and ruby_package (#4609)
  * Fix cpp benchmark dependency on mac
  * Use the first enum value instead of 0 in DefaultValueObjectWriter::FindEnumDefault
  * Check return value on write of raw pointer
  * Delete unused directories.
  * Replace //:protoc and similar default macro arguments with
  * Add extra C# file to Makefile.am
  * includes the expected class in the exception, otherwise the error is harder to track down (#3371)
  * Update instructions about getting protobuf source.
  * Add cpp tests under release docker image.
  * fix java benchmark, fix dashboard build
  * `update_file_lists.sh` depends on Bash features, thus needs Bash sebang.
  * Rename build_artifacts.cfg to release.cfg (#4818)
  * Fix bug: whether always_print_enums_as_ints is true or false, it always print the default value of enums as strings
  * source code info for interpreted options; fix source code info for extension range options (#4342)
  * Updated version numbers to 3.6.1
  * Trim imports for bundled generated protos.
  * Require C++11 and pass -std=c++11
  * Remove the iOS Test App.
  * fix duplicate mkdir in update_file_lists.sh
  * Updated csharp/README.md to reflect testing changes
  * Fix bazel build of examples.
  * Add missing ruby/tests/test_ruby_package.proto
  * Fix cpp_distcheck
  * Updated the change log with changes for 3.6.0
  * some fix
  * CMake: Update CXX Standard management
  * Add the files added in #4485.
  * Change to deal all messages in one loop
  * Fix php conformance test.
  * Add __init__.py files to compiler and util subpackages (#4117)
  * Updated .gitignore to exclude downloaded gmock/ directory
  * Fix error in Clang UndefinedBehaviorSanitizer
  * Work around MSVC issue with std::atomic initialization (#4777)
  * Updated conformance failure lists
  * Add back GeneratedClassName to public (#4686)
  * Add continuous test for ruby 2.3, 2.4 and 2.5 (#4829)
  * Throw error if user want to access message properties (#4603)
  * fix json_decode call parameters (#4381)
  * Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources.
  * PHP: fixed typo in message.c
  * Add go benchmark
  * Allow list values to be null when parsing
  * Added instruction for existing ZLIB configuration
  * Fix 32bit php tests
  * Removed javanano from post_process_dist.sh
  * Don't generate imports for the WKTs unless generating the WKTs.
  * For encoding upb needs descriptor type instead of type. (#4354)
  * Include googletest as a submodule (#3993)
  * Write messages to backing field in generated C# cloning code (#4440)
  * Integrated internal changes from Google
- Drop adding-Release_CompareAndSwap-64-bit-variant.patch . Applied
  upstream.
- bump soname version</changelog>
  <changelog author="fstrba@suse.com" date="1545048000">- Add maven pom files to the protobuf-java package</changelog>
  <changelog author="mrostecki@suse.de" date="1546948800">- Add protobuf-source package - some programs using gRPC and
  protobuf need protobuf definitions which are included inside the
  source code, but are not included in the devel package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1550664000">- Add upstream patch which fixes build with Bazel 0.22.0.
  * 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133277).</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 3.8.0
  * Introduced new MOMI (maybe-outside-memory-interval) parser.
  * Added use of C++ override keyword where appropriate.
  * Always declare enums to be int-sized.
  * Append '_' to C++ reserved keywords for message, enum, extension.
- Remove 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch
  (upstreamed)</changelog>
  <changelog author="fstrba@suse.com" date="1559995200">- Specify java source and target levels in order to build
  compatible protobuf-java binaries</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Update to new upstream release 3.9.1
  * Optimized the implementation of RepeatedPtrFieldBase.
  * Added delimited parse and serialize util.
  * Added FieldDescriptor::PrintableNameForExtension() and
    DescriptorPool::FindExtensionByPrintableName(). The latter
    will replace Reflection::FindKnownExtensionByName().
  * Created a new Add method in repeated field that allows adding
    a range of elements all at once.
  * Drop building wheel for Python 3.4.</changelog>
  <changelog author="fstrba@suse.com" date="1569585600">- Package also the protobuf-bom pom file</changelog>
  <changelog author="mmnelemane@suse.com" date="1576756800">- Updated to version 3.9.2 (bsc#1162343)
  (Objective-C)
  * Remove OSReadLittle* due to alignment requirements. (#6678)
  * Don't use unions and instead use memcpy for the type swaps. (#6672)</changelog>
  <changelog author="mpluskal@suse.com" date="1576843200">- Use tarball provided by upstream
- Small package cleanup</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Add missing dependency of python subpackages on python-six
  (bsc#1177127).</changelog>
  <changelog author="mcepl@suse.com" date="1612958400">- Fix Requires for python3 to python3-six.</changelog>
  <changelog author="mlin@suse.com" date="1647000000">- Fix incorrect parsing of nullchar in the proto symbol, CVE-2021-22570,
  bsc#1195258
  * Add protobuf-CVE-2021-22570.patch</changelog>
  <changelog author="mlin@suse.com" date="1664884800">- Fix potential Denial of Service in protobuf-java in the parsing procedure
  for binary data, CVE-2021-22569, bsc#1194530
  * Add protobuf-improve-performance-of-parsing-unknown-fields-in-Java.patch</changelog>
  <changelog author="mlin@suse.com" date="1666267200">- Fix a potential DoS issue in protobuf-cpp and protobuf-python,
  CVE-2022-1941, bsc#1203681
  * Add protobuf-CVE-2022-1941.patch
- Fix a potential DoS issue when parsing with binary data in
  protobuf-java, CVE-2022-3171, bsc#1204256
  * Add protobuf-CVE-2022-3171.patch
- Refresh protobuf-CVE-2021-22570.patch
- Backport changes from 3.16.x tree for apply recent CVE patches
  * Add protobuf-51026d922970e06475f005b39287963594134b96.patch
  * Add protobuf-6ee16a9c60e734104aeb738503fe3f411c97bd88.patch
  * Add protobuf-73e0d748b9acdc40b693f2879ce82ecb1a849b81.patch
  * Add protobuf-7bff8393cab939bfbb9b5c69b3fe76b4d83c41ee.patch
  * Add protobuf-4f02f056b5cea99052bfdfb6698afe47a3cf2964.patch
  * Add protobuf-763c3588740b97e8e80b1b1a1a2dc4f417647133.patch
  * Add protobuf-6c92f9dff1807c142edf6780d775b58a3b078591.patch
  * Add protobuf-4e93585e8bb234efeacb7737b8d080968c5ab91e.patch
  * Add protobuf-58d4420e2dd8a3cd354fff9db0052881c25369ce.patch
- Reorganize patch set ordering</changelog>
  <changelog author="fstrba@suse.com" date="1730030400">- Build the java part with maven, so that we create artifacts
  that correspond to upstream distributed ones.
- Add maven artifact metadata to the protoc binary
- Package also the bom and pom artifacts</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1757937600">- Add CVE-2025-4565.patch to fix parsing of untrusted Protocol Buffers
  data containing an arbitrary number of recursive groups or messages
  can lead to crash due to RecursionError (bsc#1244663, CVE-2025-4565)</changelog>
  <changelog author="mlin@suse.com" date="1769601600">- Add protobuf-CVE-2026-0994.patch to fix Any recursion depth bypass
  in Python json_format.ParseDict (bsc#1257173, CVE-2026-0994)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1774526400">- Add protobuf-internal-pure-python-fixes.patch to backport
  changes required for recursion CVE fixes (bsc#1260019)
- Refresh protobuf-CVE-2026-0994.patch based on new backport
- Refresh CVE-2025-4565.patch based on new backport
- Rename CVE-2025-4565.patch to protobuf-CVE-2025-4565.patch
- Renumber patches</changelog>
</package>
<package pkgid="ef89757a2eff969a56ef65a8212d74c3a388b379b720368f2b6cbb7b457435de" name="libprotobuf25_1_0" arch="x86_64">
  <version epoch="0" ver="25.1" rel="150600.16.13.1"/>
  <changelog author="dmueller@suse.com" date="1667044800">- update to 21.9:
  * Ruby
  * Replace libc strdup usage with internal impl to restore musl compat (#10818)
  * Auto capitalize enums name in Ruby (#10454) (#10763)
  * Other
  * Fix for grpc.tools #17995 &amp; protobuf #7474 (handle UTF-8 paths in argumentfile) (#10721)
  * C++
  * 21.x No longer define no_threadlocal on OpenBSD (#10743)
  * Java
  * Mark default instance as immutable first to avoid race during static initialization of default instances (#10771)
  * Refactoring java full runtime to reuse sub-message builders and prepare to
    migrate parsing logic from parse constructor to builder.
  * Move proto wireformat parsing functionality from the private "parsing
    constructor" to the Builder class.
  * Change the Lite runtime to prefer merging from the wireformat into mutable
    messages rather than building up a new immutable object before merging. This
    way results in fewer allocations and copy operations.
  * Make message-type extensions merge from wire-format instead of building up
    instances and merging afterwards. This has much better performance.
  * Fix TextFormat parser to build up recurring (but supposedly not repeated)
    sub-messages directly from text rather than building a new sub-message and
    merging the fully formed message into the existing field.</changelog>
  <changelog author="dmueller@suse.com" date="1670241600">- update to 21.10:
  * Java
  * Use bit-field int values in buildPartial to skip work on unset groups of
    fields. (#10960)
  * Mark nested builder as clean after clear is called (#10984)</changelog>
  <changelog author="dmueller@suse.com" date="1670500800">- update to 21.11:
  * Python
  * Add license file to pypi wheels (#10936)
  * Fix round-trip bug (#10158)</changelog>
  <changelog author="dmueller@suse.com" date="1671105600">- update to v21.12:
  * Python
  * Fix broken enum ranges (#11171)
  * Stop requiring extension fields to have a sythetic oneof (#11091)
  * Python runtime 4.21.10 not works generated code can not load valid
    proto.</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO (boo#1133277).</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to v22.3
  UPB (Python/PHP/Ruby C-Extension)
  * Remove src prefix from proto import
  * Fix .gitmodules to use the correct absl branch
  * Remove erroneous dependency on googletest
- update to 22.2:
  Java
  * Add version to intra proto dependencies and add kotlin stdlib
    dependency
  * Add $ back for osgi header
  * Remove $ in pom files
- update to 22.1:
  * Add visibility of plugin.proto to python directory
  * Strip "src" from file name of plugin.proto
  * Add OSGi headers to pom files.
  * Remove errorprone dependency from kotlin protos.
  * Version protoc according to the compiler version number.
- update to 22.0:
  * This version includes breaking changes to: Cpp.
    Please refer to the migration guide for information:
    https://protobuf.dev/support/migration/#compiler-22
  * [Cpp] Migrate to Abseil's logging library.
  * [Cpp] `proto2::Map::value_type` changes to `std::pair`.
  * [Cpp] Mark final ZeroCopyInputStream, ZeroCopyOutputStream,
    and DefaultFieldComparator classes.
  * [Cpp] Add a dependency on Abseil (#10416)
  * [Cpp] Remove all autotools usage (#10132)
  * [Cpp] Add C++20 reserved keywords
  * [Cpp] Dropped C++11 Support
  * [Cpp] Delete Arena::Init
  * [Cpp] Replace JSON parser with new implementation
  * [Cpp] Make RepeatedField::GetArena non-const in order to
    support split RepeatedFields.
  * long list of bindings specific fixes see
    https://github.com/protocolbuffers/protobuf/releases/tag/v22.0
- python sub packages version is set 4.22.3 as defined in
  python/google/protobuf/__init__.py to stay compatible
- skip python2 builds by default
- drop patches:
  * 10355.patch,
  * gcc12-disable-__constinit-with-c++-11.patch (merged upstream)
- added patches:
  * add-missing-stdint-header.patch   added for compile fixes</changelog>
  <changelog author="fstrba@suse.com" date="1682596800">- Make possible to build on older systems, like SLE12 that miss
  some of the used macros.</changelog>
  <changelog author="fstrba@suse.com" date="1682683200">- Mention the rpmlintrc file in the spec.</changelog>
  <changelog author="mpluskal@suse.com" date="1683633600">- Fix confusion in versions</changelog>
  <changelog author="dmueller@suse.com" date="1686484800">- drop python2 handling
- fix version handling and package the private libs again</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 22.5:
  C++
  * Add missing cstdint header
  * Fix: missing -DPROTOBUF_USE_DLLS in pkg-config (#12700)
  * Avoid using string(JOIN..., which requires cmake 3.12
  * Explicitly include GTest package in examples
  * Bump Abseil submodule to 20230125.3 (#12660)
- update to 22.4:
  C++
  * Fix libprotoc: export useful symbols from .so
  * Fix btree issue in map tests.
  Python
  * Fix bug in _internal_copy_files where the rule would fail in
    downstream repositories.
  Other
  * Bump utf8_range to version with working pkg-config (#12584)
  * Fix declared dependencies for pkg-config
  * Update abseil dependency and reorder dependencies to ensure
    we use the version specified in protobuf_deps.
  * Turn off clang::musttail on i386</changelog>
  <changelog author="fvogt@suse.com" date="1686744000">- Add patch to fix linking ThreadSafeArena:
  * 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch
- Drop the protobuf-source package, no longer used</changelog>
  <changelog author="dmueller@suse.com" date="1688385600">- update to 23.3:
  C++
  * Regenerate stale files
  * Use the same ABI for static and shared libraries on non-
    Windows platforms
  * Add a workaround for GCC constexpr bug
  Objective-C
  * Regenerate stale files
  UPB (Python/PHP/Ruby C-Extension)
  * Fixed a bug in `upb_Map_Delete()` that caused crashes in
    map.delete(k) for Ruby when string-keyed maps were in use.
  Compiler
  * Add missing header to Objective-c generator
  * Add a workaround for GCC constexpr bug
  Java
  * Rollback of: Simplify protobuf Java message builder by
    removing methods that calls the super class only.
  Csharp
  * [C#] Replace regex that validates descriptor names
- drop 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1688731200">- update to 23.4:
  * Add dllexport_decl for generated default instance.
  * Deps: Update Guava to 32.0.1</changelog>
  <changelog author="fstrba@suse.com" date="1698667200">- Build with source and target levels 8
  * fixes build with JDK21
- Install the pom file with the new %%mvn_install_pom macro
- Do not install the pom-only artifacts, since the %%mvn_install_pom
  macro resolves the variables at the install time</changelog>
  <changelog author="dmueller@suse.com" date="1703160000">- build against modern python on sle15</changelog>
  <changelog author="dmueller@suse.com" date="1704196800">- update to 25.1:
  * Raise warnings for deprecated python syntax usages
  * Add support for extensions in CRuby, JRuby, and FFI Ruby
  * Add support for options in CRuby, JRuby and FFI (#14594)
- update to 25.0:
  * Implement proto2/proto3 with editions
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Editions: Introduce functionality to protoc for generating
    edition feature set defaults.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Publish extension declarations with declaration
    verifications.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Protoc: parser rejects explicit use of map_entry option
  * Protoc: validate that reserved range start is before end
  * Protoc: support identifiers as reserved names in addition to
    string literals (only in editions)
  * Drop support for Bazel 5.
  * Allow code generators to specify whether or not they support
    editions.
  [#] C++
  * Set `PROTOBUF_EXPORT` on
    `InternalOutOfLineDeleteMessageLite()`
  * Update stale checked-in files
  * Apply PROTOBUF_NOINLINE to declarations of some functions
    that want it.
  * Implement proto2/proto3 with editions
  * Make JSON UTF-8 boundary check inclusive of the largest
    possible UTF-8 character.
  * Reduce `Map::size_type` to 32-bits. Protobuf containers can't
    have more than that
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Fix bug in reflection based Swap of map fields.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Add prefetching to arena allocations.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    repeated and map field accessors.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    string field accessors.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Fixes for 32-bit MSVC.
  * Publish extension declarations with declaration
    verifications.
  * Export the constants in protobuf's any.h to support DLL
    builds.
  * Implement AbslStringify for the Descriptor family of types.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    message field accessors.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Introduce C++ feature for UTF8 validation.
  * Protoc: validate that reserved range start is before end
  * Remove option to disable the table-driven parser in protoc.
  * Lock down ctype=CORD in proto file.
  * Support split repeated fields.
  * In OSS mode omit some extern template specializations.
  * Allow code generators to specify whether or not they support
    editions.
  [#] Java
  * Implement proto2/proto3 with editions
  * Remove synthetic oneofs from Java gencode field accessor
    tables.
  * Timestamps.parse: Add error handling for invalid
    hours/minutes in the timezone offset.
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Add missing debugging version info to Protobuf Java gencode
    when multiple files are generated.
  * Fix a bad cast in putBuilderIfAbsent when already present due
    to using the result of put() directly (which is null if it
    currently has no value)
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Fix a NPE in putBuilderIfAbsent due to using the result of
    put() directly (which is null if it currently has no value)
  * Update Kotlin compiler to escape package names
  * Add MapFieldBuilder and change codegen to generate it and the
    put{field}BuilderIfAbsent method.
  * Introduce recursion limit in Java text format parsing
  * Consider the protobuf.Any invalid if typeUrl.split("/")
    returns an empty array.
  * Mark `FieldDescriptor.hasOptionalKeyword()` as deprecated.
  * Fixed Python memory leak in map lookup.
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Ensure Timestamp.ToDatetime(tz) has correct offset
  * Do not check required field for upb python MergeFrom
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Emit __slots__ in pyi output as a tuple rather than a list
    for --pyi_out.
  * Fix a bug that strips options from descriptor.proto in
    Python.
  * Raise warings for message.UnknownFields() usages and navigate
    to the new add
  * Add protobuf python keyword support in path for stub
    generator.
  * Add tuple support to set Struct
  * ### Python C-Extension (Default)
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Check that ffi-compiler loads before using it to define
    tasks.
  [#] UPB (Python/PHP/Ruby C-Extension)
  * Include .inc files directly instead of through a filegroup
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Add utf8_validation feature back to the global feature set.
  * Do not check required field for upb python MergeFrom
  * Merge the protobuf and upb Bazel repos
  * Added malloc_trim() calls to Python allocator so RSS will
    decrease when memory is freed
  * Upb: fix a Python memory leak in ByteSize()
  * Support ASAN detection on clang
  * Upb: bugfix for importing a proto3 enum from within a proto2
    file
  * Expose methods needed by Ruby FFI using UPB_API
  * Fix `PyUpb_Message_MergeInternal` segfault</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1728993600">- Add patch to fix StackOverflow vulnerability in Protocol Buffers
  * CVE-2024-7254.patch (bsc#1230778, CVE-2024-7254)</changelog>
  <changelog author="fstrba@suse.com" date="1730030400">- Build the java part with maven, so that we create artifacts
  that correspond to upstream distributed ones.
- Add maven artifact metadata to the protoc binary
- Package also the bom and pom artifacts</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1750161600">- Add CVE-2025-4565.patch to fix parsing of untrusted Protocol Buffers
  data containing an arbitrary number of recursive groups or messages
  can lead to crash due to RecursionError (bsc#1244663, CVE-2025-4565)</changelog>
</package>
<package pkgid="a4dc34f6c1d81b8b230d514b0563e4d1f26255007b9fd036ca5967b16ff66ef2" name="libprotobuf25_1_0" arch="x86_64">
  <version epoch="0" ver="25.1" rel="150600.16.16.1"/>
  <changelog author="dmueller@suse.com" date="1670241600">- update to 21.10:
  * Java
  * Use bit-field int values in buildPartial to skip work on unset groups of
    fields. (#10960)
  * Mark nested builder as clean after clear is called (#10984)</changelog>
  <changelog author="dmueller@suse.com" date="1670500800">- update to 21.11:
  * Python
  * Add license file to pypi wheels (#10936)
  * Fix round-trip bug (#10158)</changelog>
  <changelog author="dmueller@suse.com" date="1671105600">- update to v21.12:
  * Python
  * Fix broken enum ranges (#11171)
  * Stop requiring extension fields to have a sythetic oneof (#11091)
  * Python runtime 4.21.10 not works generated code can not load valid
    proto.</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO (boo#1133277).</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to v22.3
  UPB (Python/PHP/Ruby C-Extension)
  * Remove src prefix from proto import
  * Fix .gitmodules to use the correct absl branch
  * Remove erroneous dependency on googletest
- update to 22.2:
  Java
  * Add version to intra proto dependencies and add kotlin stdlib
    dependency
  * Add $ back for osgi header
  * Remove $ in pom files
- update to 22.1:
  * Add visibility of plugin.proto to python directory
  * Strip "src" from file name of plugin.proto
  * Add OSGi headers to pom files.
  * Remove errorprone dependency from kotlin protos.
  * Version protoc according to the compiler version number.
- update to 22.0:
  * This version includes breaking changes to: Cpp.
    Please refer to the migration guide for information:
    https://protobuf.dev/support/migration/#compiler-22
  * [Cpp] Migrate to Abseil's logging library.
  * [Cpp] `proto2::Map::value_type` changes to `std::pair`.
  * [Cpp] Mark final ZeroCopyInputStream, ZeroCopyOutputStream,
    and DefaultFieldComparator classes.
  * [Cpp] Add a dependency on Abseil (#10416)
  * [Cpp] Remove all autotools usage (#10132)
  * [Cpp] Add C++20 reserved keywords
  * [Cpp] Dropped C++11 Support
  * [Cpp] Delete Arena::Init
  * [Cpp] Replace JSON parser with new implementation
  * [Cpp] Make RepeatedField::GetArena non-const in order to
    support split RepeatedFields.
  * long list of bindings specific fixes see
    https://github.com/protocolbuffers/protobuf/releases/tag/v22.0
- python sub packages version is set 4.22.3 as defined in
  python/google/protobuf/__init__.py to stay compatible
- skip python2 builds by default
- drop patches:
  * 10355.patch,
  * gcc12-disable-__constinit-with-c++-11.patch (merged upstream)
- added patches:
  * add-missing-stdint-header.patch   added for compile fixes</changelog>
  <changelog author="fstrba@suse.com" date="1682596800">- Make possible to build on older systems, like SLE12 that miss
  some of the used macros.</changelog>
  <changelog author="fstrba@suse.com" date="1682683200">- Mention the rpmlintrc file in the spec.</changelog>
  <changelog author="mpluskal@suse.com" date="1683633600">- Fix confusion in versions</changelog>
  <changelog author="dmueller@suse.com" date="1686484800">- drop python2 handling
- fix version handling and package the private libs again</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 22.5:
  C++
  * Add missing cstdint header
  * Fix: missing -DPROTOBUF_USE_DLLS in pkg-config (#12700)
  * Avoid using string(JOIN..., which requires cmake 3.12
  * Explicitly include GTest package in examples
  * Bump Abseil submodule to 20230125.3 (#12660)
- update to 22.4:
  C++
  * Fix libprotoc: export useful symbols from .so
  * Fix btree issue in map tests.
  Python
  * Fix bug in _internal_copy_files where the rule would fail in
    downstream repositories.
  Other
  * Bump utf8_range to version with working pkg-config (#12584)
  * Fix declared dependencies for pkg-config
  * Update abseil dependency and reorder dependencies to ensure
    we use the version specified in protobuf_deps.
  * Turn off clang::musttail on i386</changelog>
  <changelog author="fvogt@suse.com" date="1686744000">- Add patch to fix linking ThreadSafeArena:
  * 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch
- Drop the protobuf-source package, no longer used</changelog>
  <changelog author="dmueller@suse.com" date="1688385600">- update to 23.3:
  C++
  * Regenerate stale files
  * Use the same ABI for static and shared libraries on non-
    Windows platforms
  * Add a workaround for GCC constexpr bug
  Objective-C
  * Regenerate stale files
  UPB (Python/PHP/Ruby C-Extension)
  * Fixed a bug in `upb_Map_Delete()` that caused crashes in
    map.delete(k) for Ruby when string-keyed maps were in use.
  Compiler
  * Add missing header to Objective-c generator
  * Add a workaround for GCC constexpr bug
  Java
  * Rollback of: Simplify protobuf Java message builder by
    removing methods that calls the super class only.
  Csharp
  * [C#] Replace regex that validates descriptor names
- drop 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1688731200">- update to 23.4:
  * Add dllexport_decl for generated default instance.
  * Deps: Update Guava to 32.0.1</changelog>
  <changelog author="fstrba@suse.com" date="1698667200">- Build with source and target levels 8
  * fixes build with JDK21
- Install the pom file with the new %%mvn_install_pom macro
- Do not install the pom-only artifacts, since the %%mvn_install_pom
  macro resolves the variables at the install time</changelog>
  <changelog author="dmueller@suse.com" date="1703160000">- build against modern python on sle15</changelog>
  <changelog author="dmueller@suse.com" date="1704196800">- update to 25.1:
  * Raise warnings for deprecated python syntax usages
  * Add support for extensions in CRuby, JRuby, and FFI Ruby
  * Add support for options in CRuby, JRuby and FFI (#14594)
- update to 25.0:
  * Implement proto2/proto3 with editions
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Editions: Introduce functionality to protoc for generating
    edition feature set defaults.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Publish extension declarations with declaration
    verifications.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Protoc: parser rejects explicit use of map_entry option
  * Protoc: validate that reserved range start is before end
  * Protoc: support identifiers as reserved names in addition to
    string literals (only in editions)
  * Drop support for Bazel 5.
  * Allow code generators to specify whether or not they support
    editions.
  [#] C++
  * Set `PROTOBUF_EXPORT` on
    `InternalOutOfLineDeleteMessageLite()`
  * Update stale checked-in files
  * Apply PROTOBUF_NOINLINE to declarations of some functions
    that want it.
  * Implement proto2/proto3 with editions
  * Make JSON UTF-8 boundary check inclusive of the largest
    possible UTF-8 character.
  * Reduce `Map::size_type` to 32-bits. Protobuf containers can't
    have more than that
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Fix bug in reflection based Swap of map fields.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Add prefetching to arena allocations.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    repeated and map field accessors.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    string field accessors.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Fixes for 32-bit MSVC.
  * Publish extension declarations with declaration
    verifications.
  * Export the constants in protobuf's any.h to support DLL
    builds.
  * Implement AbslStringify for the Descriptor family of types.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    message field accessors.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Introduce C++ feature for UTF8 validation.
  * Protoc: validate that reserved range start is before end
  * Remove option to disable the table-driven parser in protoc.
  * Lock down ctype=CORD in proto file.
  * Support split repeated fields.
  * In OSS mode omit some extern template specializations.
  * Allow code generators to specify whether or not they support
    editions.
  [#] Java
  * Implement proto2/proto3 with editions
  * Remove synthetic oneofs from Java gencode field accessor
    tables.
  * Timestamps.parse: Add error handling for invalid
    hours/minutes in the timezone offset.
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Add missing debugging version info to Protobuf Java gencode
    when multiple files are generated.
  * Fix a bad cast in putBuilderIfAbsent when already present due
    to using the result of put() directly (which is null if it
    currently has no value)
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Fix a NPE in putBuilderIfAbsent due to using the result of
    put() directly (which is null if it currently has no value)
  * Update Kotlin compiler to escape package names
  * Add MapFieldBuilder and change codegen to generate it and the
    put{field}BuilderIfAbsent method.
  * Introduce recursion limit in Java text format parsing
  * Consider the protobuf.Any invalid if typeUrl.split("/")
    returns an empty array.
  * Mark `FieldDescriptor.hasOptionalKeyword()` as deprecated.
  * Fixed Python memory leak in map lookup.
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Ensure Timestamp.ToDatetime(tz) has correct offset
  * Do not check required field for upb python MergeFrom
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Emit __slots__ in pyi output as a tuple rather than a list
    for --pyi_out.
  * Fix a bug that strips options from descriptor.proto in
    Python.
  * Raise warings for message.UnknownFields() usages and navigate
    to the new add
  * Add protobuf python keyword support in path for stub
    generator.
  * Add tuple support to set Struct
  * ### Python C-Extension (Default)
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Check that ffi-compiler loads before using it to define
    tasks.
  [#] UPB (Python/PHP/Ruby C-Extension)
  * Include .inc files directly instead of through a filegroup
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Add utf8_validation feature back to the global feature set.
  * Do not check required field for upb python MergeFrom
  * Merge the protobuf and upb Bazel repos
  * Added malloc_trim() calls to Python allocator so RSS will
    decrease when memory is freed
  * Upb: fix a Python memory leak in ByteSize()
  * Support ASAN detection on clang
  * Upb: bugfix for importing a proto3 enum from within a proto2
    file
  * Expose methods needed by Ruby FFI using UPB_API
  * Fix `PyUpb_Message_MergeInternal` segfault</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1728993600">- Add patch to fix StackOverflow vulnerability in Protocol Buffers
  * CVE-2024-7254.patch (bsc#1230778, CVE-2024-7254)</changelog>
  <changelog author="fstrba@suse.com" date="1730030400">- Build the java part with maven, so that we create artifacts
  that correspond to upstream distributed ones.
- Add maven artifact metadata to the protoc binary
- Package also the bom and pom artifacts</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1750161600">- Add CVE-2025-4565.patch to fix parsing of untrusted Protocol Buffers
  data containing an arbitrary number of recursive groups or messages
  can lead to crash due to RecursionError (bsc#1244663, CVE-2025-4565)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1769428800">- Add CVE-2026-0994.patch to fix google.protobuf.Any recursion depth
  bypass in Python json_format.ParseDict (bsc#1257173, CVE-2026-0994)</changelog>
</package>
<package pkgid="97020437611052b1032a0fb71359bd6288edf22af33421a067f4d04606861939" name="libprotoc25_1_0" arch="x86_64">
  <version epoch="0" ver="25.1" rel="150600.16.13.1"/>
  <changelog author="dmueller@suse.com" date="1667044800">- update to 21.9:
  * Ruby
  * Replace libc strdup usage with internal impl to restore musl compat (#10818)
  * Auto capitalize enums name in Ruby (#10454) (#10763)
  * Other
  * Fix for grpc.tools #17995 &amp; protobuf #7474 (handle UTF-8 paths in argumentfile) (#10721)
  * C++
  * 21.x No longer define no_threadlocal on OpenBSD (#10743)
  * Java
  * Mark default instance as immutable first to avoid race during static initialization of default instances (#10771)
  * Refactoring java full runtime to reuse sub-message builders and prepare to
    migrate parsing logic from parse constructor to builder.
  * Move proto wireformat parsing functionality from the private "parsing
    constructor" to the Builder class.
  * Change the Lite runtime to prefer merging from the wireformat into mutable
    messages rather than building up a new immutable object before merging. This
    way results in fewer allocations and copy operations.
  * Make message-type extensions merge from wire-format instead of building up
    instances and merging afterwards. This has much better performance.
  * Fix TextFormat parser to build up recurring (but supposedly not repeated)
    sub-messages directly from text rather than building a new sub-message and
    merging the fully formed message into the existing field.</changelog>
  <changelog author="dmueller@suse.com" date="1670241600">- update to 21.10:
  * Java
  * Use bit-field int values in buildPartial to skip work on unset groups of
    fields. (#10960)
  * Mark nested builder as clean after clear is called (#10984)</changelog>
  <changelog author="dmueller@suse.com" date="1670500800">- update to 21.11:
  * Python
  * Add license file to pypi wheels (#10936)
  * Fix round-trip bug (#10158)</changelog>
  <changelog author="dmueller@suse.com" date="1671105600">- update to v21.12:
  * Python
  * Fix broken enum ranges (#11171)
  * Stop requiring extension fields to have a sythetic oneof (#11091)
  * Python runtime 4.21.10 not works generated code can not load valid
    proto.</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO (boo#1133277).</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to v22.3
  UPB (Python/PHP/Ruby C-Extension)
  * Remove src prefix from proto import
  * Fix .gitmodules to use the correct absl branch
  * Remove erroneous dependency on googletest
- update to 22.2:
  Java
  * Add version to intra proto dependencies and add kotlin stdlib
    dependency
  * Add $ back for osgi header
  * Remove $ in pom files
- update to 22.1:
  * Add visibility of plugin.proto to python directory
  * Strip "src" from file name of plugin.proto
  * Add OSGi headers to pom files.
  * Remove errorprone dependency from kotlin protos.
  * Version protoc according to the compiler version number.
- update to 22.0:
  * This version includes breaking changes to: Cpp.
    Please refer to the migration guide for information:
    https://protobuf.dev/support/migration/#compiler-22
  * [Cpp] Migrate to Abseil's logging library.
  * [Cpp] `proto2::Map::value_type` changes to `std::pair`.
  * [Cpp] Mark final ZeroCopyInputStream, ZeroCopyOutputStream,
    and DefaultFieldComparator classes.
  * [Cpp] Add a dependency on Abseil (#10416)
  * [Cpp] Remove all autotools usage (#10132)
  * [Cpp] Add C++20 reserved keywords
  * [Cpp] Dropped C++11 Support
  * [Cpp] Delete Arena::Init
  * [Cpp] Replace JSON parser with new implementation
  * [Cpp] Make RepeatedField::GetArena non-const in order to
    support split RepeatedFields.
  * long list of bindings specific fixes see
    https://github.com/protocolbuffers/protobuf/releases/tag/v22.0
- python sub packages version is set 4.22.3 as defined in
  python/google/protobuf/__init__.py to stay compatible
- skip python2 builds by default
- drop patches:
  * 10355.patch,
  * gcc12-disable-__constinit-with-c++-11.patch (merged upstream)
- added patches:
  * add-missing-stdint-header.patch   added for compile fixes</changelog>
  <changelog author="fstrba@suse.com" date="1682596800">- Make possible to build on older systems, like SLE12 that miss
  some of the used macros.</changelog>
  <changelog author="fstrba@suse.com" date="1682683200">- Mention the rpmlintrc file in the spec.</changelog>
  <changelog author="mpluskal@suse.com" date="1683633600">- Fix confusion in versions</changelog>
  <changelog author="dmueller@suse.com" date="1686484800">- drop python2 handling
- fix version handling and package the private libs again</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 22.5:
  C++
  * Add missing cstdint header
  * Fix: missing -DPROTOBUF_USE_DLLS in pkg-config (#12700)
  * Avoid using string(JOIN..., which requires cmake 3.12
  * Explicitly include GTest package in examples
  * Bump Abseil submodule to 20230125.3 (#12660)
- update to 22.4:
  C++
  * Fix libprotoc: export useful symbols from .so
  * Fix btree issue in map tests.
  Python
  * Fix bug in _internal_copy_files where the rule would fail in
    downstream repositories.
  Other
  * Bump utf8_range to version with working pkg-config (#12584)
  * Fix declared dependencies for pkg-config
  * Update abseil dependency and reorder dependencies to ensure
    we use the version specified in protobuf_deps.
  * Turn off clang::musttail on i386</changelog>
  <changelog author="fvogt@suse.com" date="1686744000">- Add patch to fix linking ThreadSafeArena:
  * 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch
- Drop the protobuf-source package, no longer used</changelog>
  <changelog author="dmueller@suse.com" date="1688385600">- update to 23.3:
  C++
  * Regenerate stale files
  * Use the same ABI for static and shared libraries on non-
    Windows platforms
  * Add a workaround for GCC constexpr bug
  Objective-C
  * Regenerate stale files
  UPB (Python/PHP/Ruby C-Extension)
  * Fixed a bug in `upb_Map_Delete()` that caused crashes in
    map.delete(k) for Ruby when string-keyed maps were in use.
  Compiler
  * Add missing header to Objective-c generator
  * Add a workaround for GCC constexpr bug
  Java
  * Rollback of: Simplify protobuf Java message builder by
    removing methods that calls the super class only.
  Csharp
  * [C#] Replace regex that validates descriptor names
- drop 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1688731200">- update to 23.4:
  * Add dllexport_decl for generated default instance.
  * Deps: Update Guava to 32.0.1</changelog>
  <changelog author="fstrba@suse.com" date="1698667200">- Build with source and target levels 8
  * fixes build with JDK21
- Install the pom file with the new %%mvn_install_pom macro
- Do not install the pom-only artifacts, since the %%mvn_install_pom
  macro resolves the variables at the install time</changelog>
  <changelog author="dmueller@suse.com" date="1703160000">- build against modern python on sle15</changelog>
  <changelog author="dmueller@suse.com" date="1704196800">- update to 25.1:
  * Raise warnings for deprecated python syntax usages
  * Add support for extensions in CRuby, JRuby, and FFI Ruby
  * Add support for options in CRuby, JRuby and FFI (#14594)
- update to 25.0:
  * Implement proto2/proto3 with editions
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Editions: Introduce functionality to protoc for generating
    edition feature set defaults.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Publish extension declarations with declaration
    verifications.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Protoc: parser rejects explicit use of map_entry option
  * Protoc: validate that reserved range start is before end
  * Protoc: support identifiers as reserved names in addition to
    string literals (only in editions)
  * Drop support for Bazel 5.
  * Allow code generators to specify whether or not they support
    editions.
  [#] C++
  * Set `PROTOBUF_EXPORT` on
    `InternalOutOfLineDeleteMessageLite()`
  * Update stale checked-in files
  * Apply PROTOBUF_NOINLINE to declarations of some functions
    that want it.
  * Implement proto2/proto3 with editions
  * Make JSON UTF-8 boundary check inclusive of the largest
    possible UTF-8 character.
  * Reduce `Map::size_type` to 32-bits. Protobuf containers can't
    have more than that
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Fix bug in reflection based Swap of map fields.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Add prefetching to arena allocations.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    repeated and map field accessors.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    string field accessors.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Fixes for 32-bit MSVC.
  * Publish extension declarations with declaration
    verifications.
  * Export the constants in protobuf's any.h to support DLL
    builds.
  * Implement AbslStringify for the Descriptor family of types.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    message field accessors.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Introduce C++ feature for UTF8 validation.
  * Protoc: validate that reserved range start is before end
  * Remove option to disable the table-driven parser in protoc.
  * Lock down ctype=CORD in proto file.
  * Support split repeated fields.
  * In OSS mode omit some extern template specializations.
  * Allow code generators to specify whether or not they support
    editions.
  [#] Java
  * Implement proto2/proto3 with editions
  * Remove synthetic oneofs from Java gencode field accessor
    tables.
  * Timestamps.parse: Add error handling for invalid
    hours/minutes in the timezone offset.
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Add missing debugging version info to Protobuf Java gencode
    when multiple files are generated.
  * Fix a bad cast in putBuilderIfAbsent when already present due
    to using the result of put() directly (which is null if it
    currently has no value)
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Fix a NPE in putBuilderIfAbsent due to using the result of
    put() directly (which is null if it currently has no value)
  * Update Kotlin compiler to escape package names
  * Add MapFieldBuilder and change codegen to generate it and the
    put{field}BuilderIfAbsent method.
  * Introduce recursion limit in Java text format parsing
  * Consider the protobuf.Any invalid if typeUrl.split("/")
    returns an empty array.
  * Mark `FieldDescriptor.hasOptionalKeyword()` as deprecated.
  * Fixed Python memory leak in map lookup.
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Ensure Timestamp.ToDatetime(tz) has correct offset
  * Do not check required field for upb python MergeFrom
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Emit __slots__ in pyi output as a tuple rather than a list
    for --pyi_out.
  * Fix a bug that strips options from descriptor.proto in
    Python.
  * Raise warings for message.UnknownFields() usages and navigate
    to the new add
  * Add protobuf python keyword support in path for stub
    generator.
  * Add tuple support to set Struct
  * ### Python C-Extension (Default)
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Check that ffi-compiler loads before using it to define
    tasks.
  [#] UPB (Python/PHP/Ruby C-Extension)
  * Include .inc files directly instead of through a filegroup
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Add utf8_validation feature back to the global feature set.
  * Do not check required field for upb python MergeFrom
  * Merge the protobuf and upb Bazel repos
  * Added malloc_trim() calls to Python allocator so RSS will
    decrease when memory is freed
  * Upb: fix a Python memory leak in ByteSize()
  * Support ASAN detection on clang
  * Upb: bugfix for importing a proto3 enum from within a proto2
    file
  * Expose methods needed by Ruby FFI using UPB_API
  * Fix `PyUpb_Message_MergeInternal` segfault</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1728993600">- Add patch to fix StackOverflow vulnerability in Protocol Buffers
  * CVE-2024-7254.patch (bsc#1230778, CVE-2024-7254)</changelog>
  <changelog author="fstrba@suse.com" date="1730030400">- Build the java part with maven, so that we create artifacts
  that correspond to upstream distributed ones.
- Add maven artifact metadata to the protoc binary
- Package also the bom and pom artifacts</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1750161600">- Add CVE-2025-4565.patch to fix parsing of untrusted Protocol Buffers
  data containing an arbitrary number of recursive groups or messages
  can lead to crash due to RecursionError (bsc#1244663, CVE-2025-4565)</changelog>
</package>
<package pkgid="a76713b5b4e97a0e765f5056fbf180b5aa5fbe894e5c60e05120793a5f9c0ed5" name="libprotoc25_1_0" arch="x86_64">
  <version epoch="0" ver="25.1" rel="150600.16.16.1"/>
  <changelog author="dmueller@suse.com" date="1670241600">- update to 21.10:
  * Java
  * Use bit-field int values in buildPartial to skip work on unset groups of
    fields. (#10960)
  * Mark nested builder as clean after clear is called (#10984)</changelog>
  <changelog author="dmueller@suse.com" date="1670500800">- update to 21.11:
  * Python
  * Add license file to pypi wheels (#10936)
  * Fix round-trip bug (#10158)</changelog>
  <changelog author="dmueller@suse.com" date="1671105600">- update to v21.12:
  * Python
  * Fix broken enum ranges (#11171)
  * Stop requiring extension fields to have a sythetic oneof (#11091)
  * Python runtime 4.21.10 not works generated code can not load valid
    proto.</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO (boo#1133277).</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to v22.3
  UPB (Python/PHP/Ruby C-Extension)
  * Remove src prefix from proto import
  * Fix .gitmodules to use the correct absl branch
  * Remove erroneous dependency on googletest
- update to 22.2:
  Java
  * Add version to intra proto dependencies and add kotlin stdlib
    dependency
  * Add $ back for osgi header
  * Remove $ in pom files
- update to 22.1:
  * Add visibility of plugin.proto to python directory
  * Strip "src" from file name of plugin.proto
  * Add OSGi headers to pom files.
  * Remove errorprone dependency from kotlin protos.
  * Version protoc according to the compiler version number.
- update to 22.0:
  * This version includes breaking changes to: Cpp.
    Please refer to the migration guide for information:
    https://protobuf.dev/support/migration/#compiler-22
  * [Cpp] Migrate to Abseil's logging library.
  * [Cpp] `proto2::Map::value_type` changes to `std::pair`.
  * [Cpp] Mark final ZeroCopyInputStream, ZeroCopyOutputStream,
    and DefaultFieldComparator classes.
  * [Cpp] Add a dependency on Abseil (#10416)
  * [Cpp] Remove all autotools usage (#10132)
  * [Cpp] Add C++20 reserved keywords
  * [Cpp] Dropped C++11 Support
  * [Cpp] Delete Arena::Init
  * [Cpp] Replace JSON parser with new implementation
  * [Cpp] Make RepeatedField::GetArena non-const in order to
    support split RepeatedFields.
  * long list of bindings specific fixes see
    https://github.com/protocolbuffers/protobuf/releases/tag/v22.0
- python sub packages version is set 4.22.3 as defined in
  python/google/protobuf/__init__.py to stay compatible
- skip python2 builds by default
- drop patches:
  * 10355.patch,
  * gcc12-disable-__constinit-with-c++-11.patch (merged upstream)
- added patches:
  * add-missing-stdint-header.patch   added for compile fixes</changelog>
  <changelog author="fstrba@suse.com" date="1682596800">- Make possible to build on older systems, like SLE12 that miss
  some of the used macros.</changelog>
  <changelog author="fstrba@suse.com" date="1682683200">- Mention the rpmlintrc file in the spec.</changelog>
  <changelog author="mpluskal@suse.com" date="1683633600">- Fix confusion in versions</changelog>
  <changelog author="dmueller@suse.com" date="1686484800">- drop python2 handling
- fix version handling and package the private libs again</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 22.5:
  C++
  * Add missing cstdint header
  * Fix: missing -DPROTOBUF_USE_DLLS in pkg-config (#12700)
  * Avoid using string(JOIN..., which requires cmake 3.12
  * Explicitly include GTest package in examples
  * Bump Abseil submodule to 20230125.3 (#12660)
- update to 22.4:
  C++
  * Fix libprotoc: export useful symbols from .so
  * Fix btree issue in map tests.
  Python
  * Fix bug in _internal_copy_files where the rule would fail in
    downstream repositories.
  Other
  * Bump utf8_range to version with working pkg-config (#12584)
  * Fix declared dependencies for pkg-config
  * Update abseil dependency and reorder dependencies to ensure
    we use the version specified in protobuf_deps.
  * Turn off clang::musttail on i386</changelog>
  <changelog author="fvogt@suse.com" date="1686744000">- Add patch to fix linking ThreadSafeArena:
  * 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch
- Drop the protobuf-source package, no longer used</changelog>
  <changelog author="dmueller@suse.com" date="1688385600">- update to 23.3:
  C++
  * Regenerate stale files
  * Use the same ABI for static and shared libraries on non-
    Windows platforms
  * Add a workaround for GCC constexpr bug
  Objective-C
  * Regenerate stale files
  UPB (Python/PHP/Ruby C-Extension)
  * Fixed a bug in `upb_Map_Delete()` that caused crashes in
    map.delete(k) for Ruby when string-keyed maps were in use.
  Compiler
  * Add missing header to Objective-c generator
  * Add a workaround for GCC constexpr bug
  Java
  * Rollback of: Simplify protobuf Java message builder by
    removing methods that calls the super class only.
  Csharp
  * [C#] Replace regex that validates descriptor names
- drop 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1688731200">- update to 23.4:
  * Add dllexport_decl for generated default instance.
  * Deps: Update Guava to 32.0.1</changelog>
  <changelog author="fstrba@suse.com" date="1698667200">- Build with source and target levels 8
  * fixes build with JDK21
- Install the pom file with the new %%mvn_install_pom macro
- Do not install the pom-only artifacts, since the %%mvn_install_pom
  macro resolves the variables at the install time</changelog>
  <changelog author="dmueller@suse.com" date="1703160000">- build against modern python on sle15</changelog>
  <changelog author="dmueller@suse.com" date="1704196800">- update to 25.1:
  * Raise warnings for deprecated python syntax usages
  * Add support for extensions in CRuby, JRuby, and FFI Ruby
  * Add support for options in CRuby, JRuby and FFI (#14594)
- update to 25.0:
  * Implement proto2/proto3 with editions
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Editions: Introduce functionality to protoc for generating
    edition feature set defaults.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Publish extension declarations with declaration
    verifications.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Protoc: parser rejects explicit use of map_entry option
  * Protoc: validate that reserved range start is before end
  * Protoc: support identifiers as reserved names in addition to
    string literals (only in editions)
  * Drop support for Bazel 5.
  * Allow code generators to specify whether or not they support
    editions.
  [#] C++
  * Set `PROTOBUF_EXPORT` on
    `InternalOutOfLineDeleteMessageLite()`
  * Update stale checked-in files
  * Apply PROTOBUF_NOINLINE to declarations of some functions
    that want it.
  * Implement proto2/proto3 with editions
  * Make JSON UTF-8 boundary check inclusive of the largest
    possible UTF-8 character.
  * Reduce `Map::size_type` to 32-bits. Protobuf containers can't
    have more than that
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Fix bug in reflection based Swap of map fields.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Add prefetching to arena allocations.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    repeated and map field accessors.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    string field accessors.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Fixes for 32-bit MSVC.
  * Publish extension declarations with declaration
    verifications.
  * Export the constants in protobuf's any.h to support DLL
    builds.
  * Implement AbslStringify for the Descriptor family of types.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    message field accessors.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Introduce C++ feature for UTF8 validation.
  * Protoc: validate that reserved range start is before end
  * Remove option to disable the table-driven parser in protoc.
  * Lock down ctype=CORD in proto file.
  * Support split repeated fields.
  * In OSS mode omit some extern template specializations.
  * Allow code generators to specify whether or not they support
    editions.
  [#] Java
  * Implement proto2/proto3 with editions
  * Remove synthetic oneofs from Java gencode field accessor
    tables.
  * Timestamps.parse: Add error handling for invalid
    hours/minutes in the timezone offset.
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Add missing debugging version info to Protobuf Java gencode
    when multiple files are generated.
  * Fix a bad cast in putBuilderIfAbsent when already present due
    to using the result of put() directly (which is null if it
    currently has no value)
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Fix a NPE in putBuilderIfAbsent due to using the result of
    put() directly (which is null if it currently has no value)
  * Update Kotlin compiler to escape package names
  * Add MapFieldBuilder and change codegen to generate it and the
    put{field}BuilderIfAbsent method.
  * Introduce recursion limit in Java text format parsing
  * Consider the protobuf.Any invalid if typeUrl.split("/")
    returns an empty array.
  * Mark `FieldDescriptor.hasOptionalKeyword()` as deprecated.
  * Fixed Python memory leak in map lookup.
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Ensure Timestamp.ToDatetime(tz) has correct offset
  * Do not check required field for upb python MergeFrom
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Emit __slots__ in pyi output as a tuple rather than a list
    for --pyi_out.
  * Fix a bug that strips options from descriptor.proto in
    Python.
  * Raise warings for message.UnknownFields() usages and navigate
    to the new add
  * Add protobuf python keyword support in path for stub
    generator.
  * Add tuple support to set Struct
  * ### Python C-Extension (Default)
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Check that ffi-compiler loads before using it to define
    tasks.
  [#] UPB (Python/PHP/Ruby C-Extension)
  * Include .inc files directly instead of through a filegroup
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Add utf8_validation feature back to the global feature set.
  * Do not check required field for upb python MergeFrom
  * Merge the protobuf and upb Bazel repos
  * Added malloc_trim() calls to Python allocator so RSS will
    decrease when memory is freed
  * Upb: fix a Python memory leak in ByteSize()
  * Support ASAN detection on clang
  * Upb: bugfix for importing a proto3 enum from within a proto2
    file
  * Expose methods needed by Ruby FFI using UPB_API
  * Fix `PyUpb_Message_MergeInternal` segfault</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1728993600">- Add patch to fix StackOverflow vulnerability in Protocol Buffers
  * CVE-2024-7254.patch (bsc#1230778, CVE-2024-7254)</changelog>
  <changelog author="fstrba@suse.com" date="1730030400">- Build the java part with maven, so that we create artifacts
  that correspond to upstream distributed ones.
- Add maven artifact metadata to the protoc binary
- Package also the bom and pom artifacts</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1750161600">- Add CVE-2025-4565.patch to fix parsing of untrusted Protocol Buffers
  data containing an arbitrary number of recursive groups or messages
  can lead to crash due to RecursionError (bsc#1244663, CVE-2025-4565)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1769428800">- Add CVE-2026-0994.patch to fix google.protobuf.Any recursion depth
  bypass in Python json_format.ParseDict (bsc#1257173, CVE-2026-0994)</changelog>
</package>
<package pkgid="3fd42482e68e5e6a2d3dae294118c32f4badc14d1ba213eb01e81df1264510f7" name="libpsm2" arch="src">
  <version epoch="0" ver="12.0.1" rel="150600.3.5.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1504699200">- Update to version 10.2.260:
  - Fixed support for SLE12-SP2
  - V2 EPID
  - Initialize CUDA support only if env variable is switched on
  - Add PSM_PERF functionality (for measuring number of instructions
    retired between two points in code)
  - Bug Fixes
  - Include commits from GitHub PR's #13, #14, #16
  - Fix SLES build issue
  - Allow psm2_ep_connect to be called multiple times with 'self' epid
  - Fix issue with psm2_mq_ipeek2 and psm2_mq_test2 when used with
    multi-threaded OMPI
  - Fix performance related bugs for PSM2_CUDA builds
- Remove libpsm2-fix-compilation-for-hfi1-v5.patch  and
  libpsm2-compat-dependency-to-libpsm2.patch as they were merged
  upstream.
- Update _service to allow auto updates from github</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1511179200">- Updated to version 10.3.17:
  - Small bug fixes and some enhanced debugging.
  - Assigned context is not freed on close() which could lead to
    context starvation. Therefore release hfi1 mappings when closing a
    context.
  - Close receive thread only while closing last endpoint
- Rebase libpsm2-include-ioctl_h.patch, libpsm2-use_RPM_OPT_FLAGS.patch and
  libpsm2-use-exported-variable-for-version-and-release.patch to the
  latest sources.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512734400">- Update to version 10.3.37 (bsc#1068108):
  - Allow PSM_PERF to work with multiple threads
  - AM Handler with Caller Context for OFI PSM2
  - Add new API functions psm2_mq_ipeek_dequeue and psm2_mq_req_free (for OFI
    usage)
  - Reserve additional space in "psm2_mq_req" for user use (for OFI usage)
  - Bug Fixes
  - Fix SLES 12.3 libpsm2-2 Provides line
  - Add additional libpsm2-2 noarch Provides line
  - Clean up CUDA symbol loading
  - Avoid typecasting unknown addresses to aligned data types
  - Handle EFAULT and ENOTSUPP returned from driver
  - Release hfi1 memory mappings when closing a context</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521115200">- Update to version 10.3.46
  - Enabled IPS_PROTO_FLAG_RCVTHREAD flag
  - Fix GPU Direct Recv threshold default
  - Resolve PSM2_CUDA runtime issues
  - Fix bug in code to remove octal base for env vars
  - Change direct use of HFI_CLASS_PATH and guard possible buffer overruns
- Add libpsm2-fix-gcc8-compilation-error.patch to fix compilation
  with gcc8 (bsc#1084634)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to 11.2.23 (fate#325853)
  - compiler flag optimizations for KNL
  - optimizations for OFI
  - Bug fixes for CUDA runtime
  - Add psm2_info_query API
  - Modify PSM send side protocol selection logic to select correct flow at
    start of send function
  - Update LMC disable thresholds
  - Fix for Issue #30: Compilation error due to snprintf truncation warning
  - Convert CUDA runtime API calls to CUDA Driver API calls
  - Prevent SHM and IPS from closing other protocol connections
  - Change CUDA_THRESH_RNDV and move CUDA init to separate function
  - Fix selection logic for multi-HFI within NUMA node
  - Refresh JKey to support SELinux
  - Fix Issue #24: Uninitialized AM message
  - Fix data data corruption on GPU buffers when when using am ptl
  - Force EPID remap in shm if remote PID changed
  - PSM2 GDR Copy feature and tuning of thresholds to fully utilize the feature
  - Fix uniformity of process mapping to HFIs
  - PSM2 specific perf benchmarks
  - Fix for issue 27: Null termination of string
- Drop libpsm2-fix-gcc8-compilation-error.patch
  which was fixed upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1550491200">- Update to 11.2.78 (bsc#1125605, bsc#1125717)
  - Revert of commit to check free BAR space and release TIDs
  - Remove unnecessary long waiting timeout for HFI driver
- Drop libpsm2-include-ioctl_h.patch which was fixed upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570190400">- Update to 11.2.86
  - No release notes
- Refresh libpsm2-use_RPM_OPT_FLAGS.patch against latest version
- Use %license for COPYING</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1585915200">- Add Add-missing-extern-keywords.patch to fix compilation with GCC10 (bsc#1160279)</changelog>
  <changelog author="mliska@suse.cz" date="1587988800">- Add -fcommon in order to fix boo#1160279.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1591358400">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1593777600">- Update to 11.2.166
  - No release notes available
- Drop Add-missing-extern-keywords.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595419200">- Update to 11.2.185
  - No release notes available
- Refresh libpsm2-use_RPM_OPT_FLAGS.patch against latest sources</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1629806400">- Update to 11.2.203 (jsc#SLE-20580)
  - No release notes available</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- move modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mwilck@suse.com" date="1649678400">- Run modprobe.conf handling scriptlets in -compat subpackage (bsc#1198322)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1655121600">- Update to 11.2.229
  - Fix GCC compilation issues
  - Allow PSM2 to work with "self,shm" devices without omnipath hardware
  - Various fixes
- Spec file cleanups submitted by Dirk Müller &lt;dmueller@suse.com&gt;</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1663243200">- Update to 11.2.230
  - Fix silent data error on FECN-marked TID packet for
    unaligned receive</changelog>
  <changelog author="nicolas.morey@suse.com" date="1690286400">- Update to 12.0.1
  - Fix memory leak in psmi_shm_create</changelog>
  <changelog author="pgajdos@suse.com" date="1709294400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="nicolas.morey@suse.com" date="1751630400">- Add libpsm2-disable-AVX.patch to completely disable AVX support
  and use only up to SSE4.2. (bsc#1245739)</changelog>
</package>
<package pkgid="3196634ffe73c72d8b17f1777a8858ed61dbc0c2d07ecb46701d3693c1e6ce3d" name="libpsm2-2" arch="x86_64">
  <version epoch="0" ver="12.0.1" rel="150600.3.5.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1504699200">- Update to version 10.2.260:
  - Fixed support for SLE12-SP2
  - V2 EPID
  - Initialize CUDA support only if env variable is switched on
  - Add PSM_PERF functionality (for measuring number of instructions
    retired between two points in code)
  - Bug Fixes
  - Include commits from GitHub PR's #13, #14, #16
  - Fix SLES build issue
  - Allow psm2_ep_connect to be called multiple times with 'self' epid
  - Fix issue with psm2_mq_ipeek2 and psm2_mq_test2 when used with
    multi-threaded OMPI
  - Fix performance related bugs for PSM2_CUDA builds
- Remove libpsm2-fix-compilation-for-hfi1-v5.patch  and
  libpsm2-compat-dependency-to-libpsm2.patch as they were merged
  upstream.
- Update _service to allow auto updates from github</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1511179200">- Updated to version 10.3.17:
  - Small bug fixes and some enhanced debugging.
  - Assigned context is not freed on close() which could lead to
    context starvation. Therefore release hfi1 mappings when closing a
    context.
  - Close receive thread only while closing last endpoint
- Rebase libpsm2-include-ioctl_h.patch, libpsm2-use_RPM_OPT_FLAGS.patch and
  libpsm2-use-exported-variable-for-version-and-release.patch to the
  latest sources.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512734400">- Update to version 10.3.37 (bsc#1068108):
  - Allow PSM_PERF to work with multiple threads
  - AM Handler with Caller Context for OFI PSM2
  - Add new API functions psm2_mq_ipeek_dequeue and psm2_mq_req_free (for OFI
    usage)
  - Reserve additional space in "psm2_mq_req" for user use (for OFI usage)
  - Bug Fixes
  - Fix SLES 12.3 libpsm2-2 Provides line
  - Add additional libpsm2-2 noarch Provides line
  - Clean up CUDA symbol loading
  - Avoid typecasting unknown addresses to aligned data types
  - Handle EFAULT and ENOTSUPP returned from driver
  - Release hfi1 memory mappings when closing a context</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521115200">- Update to version 10.3.46
  - Enabled IPS_PROTO_FLAG_RCVTHREAD flag
  - Fix GPU Direct Recv threshold default
  - Resolve PSM2_CUDA runtime issues
  - Fix bug in code to remove octal base for env vars
  - Change direct use of HFI_CLASS_PATH and guard possible buffer overruns
- Add libpsm2-fix-gcc8-compilation-error.patch to fix compilation
  with gcc8 (bsc#1084634)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to 11.2.23 (fate#325853)
  - compiler flag optimizations for KNL
  - optimizations for OFI
  - Bug fixes for CUDA runtime
  - Add psm2_info_query API
  - Modify PSM send side protocol selection logic to select correct flow at
    start of send function
  - Update LMC disable thresholds
  - Fix for Issue #30: Compilation error due to snprintf truncation warning
  - Convert CUDA runtime API calls to CUDA Driver API calls
  - Prevent SHM and IPS from closing other protocol connections
  - Change CUDA_THRESH_RNDV and move CUDA init to separate function
  - Fix selection logic for multi-HFI within NUMA node
  - Refresh JKey to support SELinux
  - Fix Issue #24: Uninitialized AM message
  - Fix data data corruption on GPU buffers when when using am ptl
  - Force EPID remap in shm if remote PID changed
  - PSM2 GDR Copy feature and tuning of thresholds to fully utilize the feature
  - Fix uniformity of process mapping to HFIs
  - PSM2 specific perf benchmarks
  - Fix for issue 27: Null termination of string
- Drop libpsm2-fix-gcc8-compilation-error.patch
  which was fixed upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1550491200">- Update to 11.2.78 (bsc#1125605, bsc#1125717)
  - Revert of commit to check free BAR space and release TIDs
  - Remove unnecessary long waiting timeout for HFI driver
- Drop libpsm2-include-ioctl_h.patch which was fixed upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570190400">- Update to 11.2.86
  - No release notes
- Refresh libpsm2-use_RPM_OPT_FLAGS.patch against latest version
- Use %license for COPYING</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1585915200">- Add Add-missing-extern-keywords.patch to fix compilation with GCC10 (bsc#1160279)</changelog>
  <changelog author="mliska@suse.cz" date="1587988800">- Add -fcommon in order to fix boo#1160279.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1591358400">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1593777600">- Update to 11.2.166
  - No release notes available
- Drop Add-missing-extern-keywords.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595419200">- Update to 11.2.185
  - No release notes available
- Refresh libpsm2-use_RPM_OPT_FLAGS.patch against latest sources</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1629806400">- Update to 11.2.203 (jsc#SLE-20580)
  - No release notes available</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- move modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mwilck@suse.com" date="1649678400">- Run modprobe.conf handling scriptlets in -compat subpackage (bsc#1198322)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1655121600">- Update to 11.2.229
  - Fix GCC compilation issues
  - Allow PSM2 to work with "self,shm" devices without omnipath hardware
  - Various fixes
- Spec file cleanups submitted by Dirk Müller &lt;dmueller@suse.com&gt;</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1663243200">- Update to 11.2.230
  - Fix silent data error on FECN-marked TID packet for
    unaligned receive</changelog>
  <changelog author="nicolas.morey@suse.com" date="1690286400">- Update to 12.0.1
  - Fix memory leak in psmi_shm_create</changelog>
  <changelog author="pgajdos@suse.com" date="1709294400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="nicolas.morey@suse.com" date="1751630400">- Add libpsm2-disable-AVX.patch to completely disable AVX support
  and use only up to SSE4.2. (bsc#1245739)</changelog>
</package>
<package pkgid="f667a6de60f3483a44e813c66cb7ffe9c94b9fb82c58a55d73f499dfc89ebd39" name="libpsm2-devel" arch="x86_64">
  <version epoch="0" ver="12.0.1" rel="150600.3.5.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1504699200">- Update to version 10.2.260:
  - Fixed support for SLE12-SP2
  - V2 EPID
  - Initialize CUDA support only if env variable is switched on
  - Add PSM_PERF functionality (for measuring number of instructions
    retired between two points in code)
  - Bug Fixes
  - Include commits from GitHub PR's #13, #14, #16
  - Fix SLES build issue
  - Allow psm2_ep_connect to be called multiple times with 'self' epid
  - Fix issue with psm2_mq_ipeek2 and psm2_mq_test2 when used with
    multi-threaded OMPI
  - Fix performance related bugs for PSM2_CUDA builds
- Remove libpsm2-fix-compilation-for-hfi1-v5.patch  and
  libpsm2-compat-dependency-to-libpsm2.patch as they were merged
  upstream.
- Update _service to allow auto updates from github</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1511179200">- Updated to version 10.3.17:
  - Small bug fixes and some enhanced debugging.
  - Assigned context is not freed on close() which could lead to
    context starvation. Therefore release hfi1 mappings when closing a
    context.
  - Close receive thread only while closing last endpoint
- Rebase libpsm2-include-ioctl_h.patch, libpsm2-use_RPM_OPT_FLAGS.patch and
  libpsm2-use-exported-variable-for-version-and-release.patch to the
  latest sources.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512734400">- Update to version 10.3.37 (bsc#1068108):
  - Allow PSM_PERF to work with multiple threads
  - AM Handler with Caller Context for OFI PSM2
  - Add new API functions psm2_mq_ipeek_dequeue and psm2_mq_req_free (for OFI
    usage)
  - Reserve additional space in "psm2_mq_req" for user use (for OFI usage)
  - Bug Fixes
  - Fix SLES 12.3 libpsm2-2 Provides line
  - Add additional libpsm2-2 noarch Provides line
  - Clean up CUDA symbol loading
  - Avoid typecasting unknown addresses to aligned data types
  - Handle EFAULT and ENOTSUPP returned from driver
  - Release hfi1 memory mappings when closing a context</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1521115200">- Update to version 10.3.46
  - Enabled IPS_PROTO_FLAG_RCVTHREAD flag
  - Fix GPU Direct Recv threshold default
  - Resolve PSM2_CUDA runtime issues
  - Fix bug in code to remove octal base for env vars
  - Change direct use of HFI_CLASS_PATH and guard possible buffer overruns
- Add libpsm2-fix-gcc8-compilation-error.patch to fix compilation
  with gcc8 (bsc#1084634)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1539604800">- Update to 11.2.23 (fate#325853)
  - compiler flag optimizations for KNL
  - optimizations for OFI
  - Bug fixes for CUDA runtime
  - Add psm2_info_query API
  - Modify PSM send side protocol selection logic to select correct flow at
    start of send function
  - Update LMC disable thresholds
  - Fix for Issue #30: Compilation error due to snprintf truncation warning
  - Convert CUDA runtime API calls to CUDA Driver API calls
  - Prevent SHM and IPS from closing other protocol connections
  - Change CUDA_THRESH_RNDV and move CUDA init to separate function
  - Fix selection logic for multi-HFI within NUMA node
  - Refresh JKey to support SELinux
  - Fix Issue #24: Uninitialized AM message
  - Fix data data corruption on GPU buffers when when using am ptl
  - Force EPID remap in shm if remote PID changed
  - PSM2 GDR Copy feature and tuning of thresholds to fully utilize the feature
  - Fix uniformity of process mapping to HFIs
  - PSM2 specific perf benchmarks
  - Fix for issue 27: Null termination of string
- Drop libpsm2-fix-gcc8-compilation-error.patch
  which was fixed upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1550491200">- Update to 11.2.78 (bsc#1125605, bsc#1125717)
  - Revert of commit to check free BAR space and release TIDs
  - Remove unnecessary long waiting timeout for HFI driver
- Drop libpsm2-include-ioctl_h.patch which was fixed upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570190400">- Update to 11.2.86
  - No release notes
- Refresh libpsm2-use_RPM_OPT_FLAGS.patch against latest version
- Use %license for COPYING</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1585915200">- Add Add-missing-extern-keywords.patch to fix compilation with GCC10 (bsc#1160279)</changelog>
  <changelog author="mliska@suse.cz" date="1587988800">- Add -fcommon in order to fix boo#1160279.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1591358400">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1593777600">- Update to 11.2.166
  - No release notes available
- Drop Add-missing-extern-keywords.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595419200">- Update to 11.2.185
  - No release notes available
- Refresh libpsm2-use_RPM_OPT_FLAGS.patch against latest sources</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1629806400">- Update to 11.2.203 (jsc#SLE-20580)
  - No release notes available</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- move modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mwilck@suse.com" date="1649678400">- Run modprobe.conf handling scriptlets in -compat subpackage (bsc#1198322)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1655121600">- Update to 11.2.229
  - Fix GCC compilation issues
  - Allow PSM2 to work with "self,shm" devices without omnipath hardware
  - Various fixes
- Spec file cleanups submitted by Dirk Müller &lt;dmueller@suse.com&gt;</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1663243200">- Update to 11.2.230
  - Fix silent data error on FECN-marked TID packet for
    unaligned receive</changelog>
  <changelog author="nicolas.morey@suse.com" date="1690286400">- Update to 12.0.1
  - Fix memory leak in psmi_shm_create</changelog>
  <changelog author="pgajdos@suse.com" date="1709294400">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="nicolas.morey@suse.com" date="1751630400">- Add libpsm2-disable-AVX.patch to completely disable AVX support
  and use only up to SSE4.2. (bsc#1245739)</changelog>
</package>
<package pkgid="df1ec725abe00f6247825e855eb8ea53082fc02099766adf853b0ea960f47546" name="libpsx2" arch="x86_64">
  <version epoch="0" ver="2.63" rel="150400.3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1578916800">- Build using -ffat-lto-objects for static library</changelog>
  <changelog author="tiwai@suse.de" date="1580212800">- Update to version 2.31:
  * primarily a documentation update
  * fix libpam.pc to not require libpsx.pc
  * changed the text format of the default output of getpcap</changelog>
  <changelog author="tiwai@suse.de" date="1581768000">- Update to version 2.32:
  * Bug fix for fakeroot incompatibility (boo#1162014)
  * Slight perf improvement for cap_get_bound().
  * C++ support for psx header inclusion.
  * Some new testing features for capsh</changelog>
  <changelog author="info@paolostivanin.com" date="1596715200">- Update to version 2.42:
  * Closed a potential issue with "libcap/psx" Go package and errno
  * Documentation updates
  * Minor optimization for cap_to_text() and (*cap.Set).String()
  * Discovered and added a missing function (*cap.Set).SetNSOwner() to achieve parity with libcap
  * Multiple fixes
  * Support Go module abstraction
  * A new kernel capability: CAP_BPF
  * Better support for cross-compilation
  * pam_cap now honors PAM_REINITIALIZE_CRED
  * implements cap_launch functionality</changelog>
  <changelog author="dmueller@suse.com" date="1599048000">- update to 2.43
  * Linus' kernel tree defines CAP_CHECKPOINT_RESTORE (40) so support it.
  * Fix the creation of the $(FAKEROOT)$(LIBDIR) for split install targets
  * Clean up a binary from the distribution
  * Added some more release time checks for non-git tracked files.
  * Fix a deadlock in libpsx that surfaced with a set of compiler optimizations by removing the psx wrapping harder.</changelog>
  <changelog author="dmueller@suse.com" date="1605355200">- update to 2.44:
  Generally, this is a release to help package builders: no functional change
  to any of the generated code just documentation and make related fixes.</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 2.46:
  * The bulk of this release concerns fixes and improvements to libpsx
  * Fix the capsh == argument handling and add a test case
  * Added build support for systems that do not support libpthread
  * Added build support for not building shared libraries</changelog>
  <changelog author="dmueller@suse.com" date="1611748800">- update to 2.47:
  * Restructured gowns to default to uid base of getuid().
  * Augment NOPRIV libcap mode with the sticky NO_NEW_PRIVS prctl bit.
  * Improve the usage and diagnostic message for setcap
  * Documentation fixes, license declarations, example updates</changelog>
  <changelog author="dmueller@suse.com" date="1612872000">- update to 2.48:
  * More uniform use of $(MAKE) in Makefiles
  * No longer include symlinks in the git tree
  * Provide support for make GOLANG=no ...
  * Provide support for pointing at a specific build of the go binary
  * camelCase the contrib/seccomp/explore.go program
  * A number of documentation fixes to man pages and source code comments
  * Last use of GO major version 0</changelog>
  <changelog author="dmueller@suse.com" date="1616414400">- update to 2.49:
  * Implement cap_func_launcher() and cap.FuncLauncher().
  * More robust "psx" redirection for nocgo compilation - the documentation for
    the cgo implementation is now included in the nocgo one because the go.dev
    automated documentation builds the docs from the nocgo version.
  * Lots of documentation cleanups and added a few man pages: for IAB and
    Launching.
  * Some general no-op License changes that might cause folk to notice but only
    for formatting reasons. These were initially inspired by some lawyerly
    interactions, but I ended up rolling back half of them because they
    confused automated software infrastructure.</changelog>
  <changelog author="tiwai@suse.de" date="1618574400">- Add explicit dependency on libcap2 with version to libcap-progs
  (bsc#1184690)</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix a broken symlink. libcap-devel installs libpsx.so but
  didn't install the library it's pointing to.</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 2.51:
  * Fix capsh installation
  * Add an autoauth module flag to pam_cap.so
  * Unified libcap/cap (Go) and libcap (C) default generation of external format binary data
  * API enhancement cap_fill() and (*cap.Set).Fill() - to permit copying one
    capability flag to another.
  * --explain=cap_foo: describe what cap_foo does
  * --suggest=phrase: search all the cap descriptions and describe those that match the phrase
  * Add "keepcaps" module argument support to pam_cap.so (reported by Zoltan Fridrich. Bug 212945)
  * extend libcap to include cap_prctl() and cap_prctlw() functions to regain
    feature parity with Go "cap" package. These are only needed when linking
    against -lpsx for keepcaps POSIX semantics.
  * this likely requires substantial application changes to make Ambient
    capability support usable in general, but doing our part for the admin.
  * Add a test case for recent kernel fix
  * Go pragma fix for convenience functions in "cap" module</changelog>
  <changelog author="info@paolostivanin.com" date="1632830400">- update to 2.59:
  * Fixed a potential libcap memory leak by adding a destructor
  * Major improvement is that there is a path for Linux-PAM compliant
    applications to support setting Ambient vector Capabilities via pam_cap.so now
  * Added libcap cap_proc_root() API function
  * Added color support to captree
  * Fixed contrib/sucap/su to correctly handle the Inheritable flag
  * capsh enhancements
  * getcap -r / now generates readable output
  * The shared library objects: pam_cap.so, libcap.so and libpsx.so, are all now
    runnable as standalone binaries
  * The module pam_cap.so now contains support for a default=&lt;IAB&gt; module argument
  * Enhanced capsh --suggest to also compare against the capability value names
    and not just their descriptions
  * Added capsh --current support
  * Added a contrib/sucap/su.c pure-capabilities PAM implementation of su
  * Fix for a corner case infinite loop handling long strings
  * Added libcap cap_iab_compare() and cap_iab_get_pid() APIs
  * Added a Go utility, captree, to display the process (and thread) graph along with
    the POSIX.1e and IAB capabilities of each PID{TID} tree.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1637496000">- libcap 2.61:
  * Better error handling of the numerical arguments for capsh and
    setcap
  * Fix executable mode for all of the .so files. There were two
    situations where this was failing (with a hard to debug SIGSEGV
    inside libc)
  * Added an example of a shared library object with its own file
    capability
  * Fix the top-level include for Make.Rules in the contrib/sucap
    example application
  * Add support for running constructors at libcap.so start up time
    when running as stand alone binary.
- includes changes from 2.60:
  * Some build, code linting fixes, the addition of the
    cap_fill_flag() API and a memory latency optimization
  * General improvement in thread safety for libcap and cap package
  * Minor API change replacing libcap:cap_launch_*() void returning
    functions with int + errno status returns.
  * Added a cap_iab_dup(), and (*cap.IAB).Dup() to API
  * New features for capsh: --quiet, -+ and =+ arguments
- add upstream signing key and verify source signature</changelog>
  <changelog author="dmueller@suse.com" date="1640865600">- update to 2.62:
  * Bug fix for Go package "cap" and launching
  * Build cleanups
  * Documentation updates: cap_max_bits has a man page entry
  * Recognize default securebits as a libcap mode: HYBRID</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- update to 2.63:
  * restore errno to zero by the time main() is executed
  * Consistent psx handling (a panic) for syscalls that return thread dependent
    status Inconsistend behavior noticed by Lorenz Bauer
  * Add a test case for a deadlock under investigation in golang
  * Trim some of the #include file use to make the tree compile more
    efficiently</changelog>
  <changelog author="meissner@suse.com" date="1645790400">- Use "or" in the license tag to avoid confusion (bsc#1180073)</changelog>
  <changelog author="abergmann@suse.com" date="1684238400">- Fixed improper memory release in libcap/psx/psx.c:__wrap_pthread_create()
  (bsc#1211418 / CVE-2023-2602) CVE-2023-2602.patch
- Fixed integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup()
  (bsc#1211419 / CVE-2023-2603) CVE-2023-2603.patch</changelog>
  <changelog author="meissner@suse.com" date="1775822400">- CVE-2026-4878: Fixed a a potential TOCTOU race condition in cap_set_file() (bsc#1261809)
  0001-Address-a-potential-TOCTOU-race-condition-in-cap_set.patch:</changelog>
</package>
<package pkgid="6029f1a11f7408a8fd323a7762302781dd4f50fa1a9b5c26c9660830ef5c64e1" name="libpython3_11-1_0" arch="x86_64">
  <version epoch="0" ver="3.11.13" rel="150600.3.30.1"/>
  <changelog author="mcepl@cepl.eu" date="1721649600">- Remove %suse_update_desktop_file macro as it is not useful any
  more.</changelog>
  <changelog author="mcepl@suse.com" date="1723032000">- Add CVE-2024-6923-email-hdr-inject.patch to prevent email
  header injection due to unquoted newlines (bsc#1228780,
  CVE-2024-6923).
- %{profileopt} variable is set according to the variable
  %{do_profiling} (bsc#1227999)</changelog>
  <changelog author="mcepl@cepl.eu" date="1724846400">- Add CVE-2024-8088-inf-loop-zipfile_Path.patch to prevent
  malformed payload to cause infinite loops in zipfile.Path
  (bsc#1229704, CVE-2024-8088).</changelog>
  <changelog author="mcepl@cepl.eu" date="1725278400">- Add gh120226-fix-sendfile-test-kernel-610.patch to avoid
  failing test_sendfile_close_peer_in_the_middle_of_receiving
  tests on Linux &gt;= 6.10 (GH-120227).</changelog>
  <changelog author="mcepl@cepl.eu" date="1725883200">- Update to 3.11.10:
  - Security
  - gh-123678: Upgrade libexpat to 2.6.3
  - gh-121957: Fixed missing audit events around interactive
    use of Python, now also properly firing for ``python -i``,
    as well as for ``python -m asyncio``. The event in question
    is ``cpython.run_stdin``.
  - gh-122133: Authenticate the socket connection for the
    ``socket.socketpair()`` fallback on platforms where
    ``AF_UNIX`` is not available like Windows. Patch by
    Gregory P. Smith &lt;greg@krypto.org&gt; and Seth Larson
    &lt;seth@python.org&gt;. Reported by Ellie &lt;el@horse64.org&gt;
  - gh-121285: Remove backtracking from tarfile header parsing
    for ``hdrcharset``, PAX, and GNU sparse headers
    (bsc#1230227, CVE-2024-6232).
  - gh-118486: :func:`os.mkdir` on Windows now accepts
  * mode* of ``0o700`` to restrict the new directory to
    the current user. This fixes CVE-2024-4030 affecting
    :func:`tempfile.mkdtemp` in scenarios where the base
    temporary directory is more permissive than the default.
  - gh-116741: Update bundled libexpat to 2.6.2
  - Library
  - gh-123270: Applied a more surgical fix for malformed
    payloads in :class:`zipfile.Path` causing infinite loops
    (gh-122905) without breaking contents using legitimate
    characters (bsc#1229704, CVE-2024-8088).
  - gh-123067: Fix quadratic complexity in parsing ``"``-quoted
    cookie values with backslashes by :mod:`http.cookies`
    (bsc#1229596, CVE-2024-7592).
  - gh-122905: :class:`zipfile.Path` objects now sanitize names
    from the zipfile.
  - gh-121650: :mod:`email` headers with embedded newlines are
    now quoted on output. The :mod:`~email.generator` will now
    refuse to serialize (write) headers that are unsafely folded
    or delimited; see :attr:`~email.policy.Policy.verify_generated_headers`.
    (Contributed by Bas Bloemsaat and Petr Viktorin in
    :gh:`121650`; CVE-2024-6923, bsc#1228780).
  - gh-119506: Fix :meth:`!io.TextIOWrapper.write` method
    breaks internal buffer when the method is called again
    during flushing internal buffer.
  - gh-118643: Fix an AttributeError in the :mod:`email` module
    when re-fold a long address list. Also fix more cases of
    incorrect encoding of the address separator in the address
    list.
  - gh-113171: Fixed various false positives and false
    negatives in * :attr:`ipaddress.IPv4Address.is_private`
    (see these docs for details) *
    :attr:`ipaddress.IPv4Address.is_global` *
    :attr:`ipaddress.IPv6Address.is_private` *
    :attr:`ipaddress.IPv6Address.is_global` Also in the
    corresponding :class:`ipaddress.IPv4Network` and
    :class:`ipaddress.IPv6Network` attributes.
    Fixes bsc#1226448 (CVE-2024-4032).
  - gh-102988: :func:`email.utils.getaddresses` and
    :func:`email.utils.parseaddr` now return ``('', '')``
    2-tuples in more situations where invalid email addresses
    are encountered instead of potentially inaccurate
    values. Add optional *strict* parameter to these two
    functions: use ``strict=False`` to get the old behavior,
    accept malformed inputs. ``getattr(email.utils,
    'supports_strict_parsing', False)`` can be use to check if
    the *strict* paramater is available. Patch by Thomas Dwyer
    and Victor Stinner to improve the CVE-2023-27043 fix
    (bsc#1210638).
  - gh-67693: Fix :func:`urllib.parse.urlunparse` and
    :func:`urllib.parse.urlunsplit` for URIs with path starting
    with multiple slashes and no authority. Based on patch by
    Ashwin Ramaswami.
  - Core and Builtins
  - gh-112275: A deadlock involving ``pystate.c``'s
    ``HEAD_LOCK`` in ``posixmodule.c`` at fork is now
    fixed. Patch by ChuBoning based on previous Python 3.12 fix
    by Victor Stinner.
  - gh-109120: Added handle of incorrect star expressions, e.g
    ``f(3, *)``. Patch by Grigoryev Semyon
- Removed upstreamed patches:
  - CVE-2023-27043-email-parsing-errors.patch
  - CVE-2024-4032-private-IP-addrs.patch
  - CVE-2024-6923-email-hdr-inject.patch
  - CVE-2024-8088-inf-loop-zipfile_Path.patch
    (renamed from CVE-2024-8088-zipfile-Path-sanitization.patch)
  - CVE-2024-6232-ReDOS-backtrack-tarfile.patch
  - CVE-2024-7592-quad-complex-cookies.patch</changelog>
  <changelog author="mcepl@cepl.eu" date="1727870400">- Drop .pyc files from docdir for reproducible builds
  (bsc#1230906).</changelog>
  <changelog author="mcepl@cepl.eu" date="1730462400">- Add CVE-2024-9287-venv_path_unquoted.patch to properly quote
  path names provided when creating a virtual environment
  (bsc#1232241, CVE-2024-9287)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1731326400">- Remove -IVendor/ from python-config boo#1231795</changelog>
  <changelog author="mcepl@suse.com" date="1733140800">- Fix changelog</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1733227200">- Add add-loongarch64-support.patch to support loongarch64</changelog>
  <changelog author="mcepl@cepl.eu" date="1733313600">- Update to 3.11.11:
  - Tools/Demos
  - gh-123418: Update GitHub CI workflows to use OpenSSL 3.0.15
    and multissltests to use 3.0.15, 3.1.7, and 3.2.3.
  - Tests
  - gh-125041: Re-enable skipped tests for zlib on the
    s390x architecture: only skip checks of the compressed
    bytes, which can be different between zlib’s software
    implementation and the hardware-accelerated implementation.
  - Security
  - gh-126623: Upgrade libexpat to 2.6.4
  - gh-122792: Changed IPv4-mapped ipaddress.IPv6Address to
    consistently use the mapped IPv4 address value for deciding
    properties. Properties which have their behavior fixed are
    is_multicast, is_reserved, is_link_local, is_global, and
    is_unspecified.
  - Library
  - gh-124651: Properly quote template strings in venv
    activation scripts (bsc#1232241, CVE-2024-9287).
- Removed upstreamed patches:
  - CVE-2024-9287-venv_path_unquoted.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1737979200">- Configure externally_managed with a bcond
  https://en.opensuse.org/openSUSE:Python:Externally_managed
  bsc#1228165</changelog>
  <changelog author="mcepl@cepl.eu" date="1738670400">- Add CVE-2025-0938-sq-brackets-domain-names.patch which
  disallows square brackets ([ and ]) in domain names for parsed
  URLs (bsc#1236705, CVE-2025-0938, gh#python/cpython#105704)</changelog>
  <changelog author="bwiedemann@suse.com" date="1741608000">- Skip PGO with %want_reproducible_builds (bsc#1239210)</changelog>
  <changelog author="bwiedemann@suse.com" date="1741780800">- Allow to disable PGO</changelog>
  <changelog author="mcepl@cepl.eu" date="1744977600">- Update to 3.11.12:
  - gh-131809: Update bundled libexpat to 2.7.1
  - gh-131261: Upgrade to libexpat 2.7.0
  - gh-105704: When using urllib.parse.urlsplit() and
    urllib.parse.urlparse() host parsing would not reject domain
    names containing square brackets ([ and ]). Square brackets
    are only valid for IPv6 and IPvFuture hosts according to RFC
    3986 Section 3.2.2 (bsc#1236705, CVE-2025-0938,
    gh#python/cpython#105704).
  - gh-121284: Fix bug in the folding of rfc2047 encoded-words
    when flattening an email message using a modern email
    policy. Previously when an encoded-word was too long for
    a line, it would be decoded, split across lines, and
    re-encoded. But commas and other special characters in the
    original text could be left unencoded and unquoted. This
    could theoretically be used to spoof header lines using a
    carefully constructed encoded-word if the resulting rendered
    email was transmitted or re-parsed.
  - gh-80222: Fix bug in the folding of quoted strings
    when flattening an email message using a modern email
    policy. Previously when a quoted string was folded so that
    it spanned more than one line, the surrounding quotes and
    internal escapes would be omitted. This could theoretically
    be used to spoof header lines using a carefully constructed
    quoted string if the resulting rendered email was transmitted
    or re-parsed.
  - gh-119511: Fix a potential denial of service in the imaplib
    module. When connecting to a malicious server, it could
    cause an arbitrary amount of memory to be allocated. On many
    systems this is harmless as unused virtual memory is only
    a mapping, but if this hit a virtual address size limit
    it could lead to a MemoryError or other process crash. On
    unusual systems or builds where all allocated memory is
    touched and backed by actual ram or storage it could’ve
    consumed resources doing so until similarly crashing.
  - gh-127257: In ssl, system call failures that OpenSSL reports
    using ERR_LIB_SYS are now raised as OSError.
  - gh-121277: Writers of CPython’s documentation can now use
    next as the version for the versionchanged, versionadded,
    deprecated directives.
  - gh-106883: Disable GC during the _PyThread_CurrentFrames()
    and _PyThread_CurrentExceptions() calls to avoid the
    interpreter to deadlock.
- Remove upstreamed patch:
  - CVE-2025-0938-sq-brackets-domain-names.patch
- Add gh-126572-test_ssl-no-stop-ThreadedEchoServer-OSError.patch
  which makes test_ssl not to stop ThreadedEchoServer on OSError,
  which makes test_ssl pass with OpenSSL 3.5 (bsc#1241067,
  gh#python/cpython!126572)</changelog>
  <changelog author="mcepl@cepl.eu" date="1746878400">- Remove python-3.3.0b1-test-posix_fadvise.patch (not needed
  since kernel 3.6-rc1)</changelog>
  <changelog author="mcepl@cepl.eu" date="1747483200">- Use extended %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1747915200">- Add CVE-2025-4516-DecodeError-handler.patch fixing
  CVE-2025-4516 (bsc#1243273) blocking DecodeError handling
  vulnerability, which could lead to DoS.</changelog>
  <changelog author="mcepl@cepl.eu" date="1749470400">- Update to 3.11.13:
  - Security
  - gh-135034: Fixes multiple issues that allowed tarfile
    extraction filters (filter="data" and filter="tar") to be
    bypassed using crafted symlinks and hard links.
    Addresses CVE-2024-12718 (bsc#1244056), CVE-2025-4138
    (bsc#1244059), CVE-2025-4330 (bsc#1244060), and
    CVE-2025-4517 (bsc#1244032).
  - gh-133767: Fix use-after-free in the “unicode-escape”
    decoder with a non-“strict” error handler (CVE-2025-4516,
    bsc#1243273).
  - gh-128840: Short-circuit the processing of long IPv6
    addresses early in ipaddress to prevent excessive memory
    consumption and a minor denial-of-service.
  - Library
  - gh-128840: Fix parsing long IPv6 addresses with embedded
    IPv4 address.
  - gh-134062: ipaddress: fix collisions in __hash__() for
    IPv4Network and IPv6Network objects.
  - gh-123409: Fix ipaddress.IPv6Address.reverse_pointer output
    according to RFC 3596, §2.5. Patch by Bénédikt Tran.
  - bpo-43633: Improve the textual representation of
    IPv4-mapped IPv6 addresses (RFC 4291 Sections 2.2, 2.5.5.2)
    in ipaddress. Patch by Oleksandr Pavliuk.
- Remove upstreamed patches:
  - gh-126572-test_ssl-no-stop-ThreadedEchoServer-OSError.patch
  - CVE-2025-4516-DecodeError-handler.patch</changelog>
</package>
<package pkgid="7cce50d079b3ca4e2400262f04f5f40e7dd2ad0aaf5f8d280e12ef48da4141fe" name="libpython3_11-1_0" arch="x86_64">
  <version epoch="0" ver="3.11.13" rel="150600.3.35.1"/>
  <changelog author="mcepl@cepl.eu" date="1725278400">- Add gh120226-fix-sendfile-test-kernel-610.patch to avoid
  failing test_sendfile_close_peer_in_the_middle_of_receiving
  tests on Linux &gt;= 6.10 (GH-120227).</changelog>
  <changelog author="mcepl@cepl.eu" date="1725883200">- Update to 3.11.10:
  - Security
  - gh-123678: Upgrade libexpat to 2.6.3
  - gh-121957: Fixed missing audit events around interactive
    use of Python, now also properly firing for ``python -i``,
    as well as for ``python -m asyncio``. The event in question
    is ``cpython.run_stdin``.
  - gh-122133: Authenticate the socket connection for the
    ``socket.socketpair()`` fallback on platforms where
    ``AF_UNIX`` is not available like Windows. Patch by
    Gregory P. Smith &lt;greg@krypto.org&gt; and Seth Larson
    &lt;seth@python.org&gt;. Reported by Ellie &lt;el@horse64.org&gt;
  - gh-121285: Remove backtracking from tarfile header parsing
    for ``hdrcharset``, PAX, and GNU sparse headers
    (bsc#1230227, CVE-2024-6232).
  - gh-118486: :func:`os.mkdir` on Windows now accepts
  * mode* of ``0o700`` to restrict the new directory to
    the current user. This fixes CVE-2024-4030 affecting
    :func:`tempfile.mkdtemp` in scenarios where the base
    temporary directory is more permissive than the default.
  - gh-116741: Update bundled libexpat to 2.6.2
  - Library
  - gh-123270: Applied a more surgical fix for malformed
    payloads in :class:`zipfile.Path` causing infinite loops
    (gh-122905) without breaking contents using legitimate
    characters (bsc#1229704, CVE-2024-8088).
  - gh-123067: Fix quadratic complexity in parsing ``"``-quoted
    cookie values with backslashes by :mod:`http.cookies`
    (bsc#1229596, CVE-2024-7592).
  - gh-122905: :class:`zipfile.Path` objects now sanitize names
    from the zipfile.
  - gh-121650: :mod:`email` headers with embedded newlines are
    now quoted on output. The :mod:`~email.generator` will now
    refuse to serialize (write) headers that are unsafely folded
    or delimited; see :attr:`~email.policy.Policy.verify_generated_headers`.
    (Contributed by Bas Bloemsaat and Petr Viktorin in
    :gh:`121650`; CVE-2024-6923, bsc#1228780).
  - gh-119506: Fix :meth:`!io.TextIOWrapper.write` method
    breaks internal buffer when the method is called again
    during flushing internal buffer.
  - gh-118643: Fix an AttributeError in the :mod:`email` module
    when re-fold a long address list. Also fix more cases of
    incorrect encoding of the address separator in the address
    list.
  - gh-113171: Fixed various false positives and false
    negatives in * :attr:`ipaddress.IPv4Address.is_private`
    (see these docs for details) *
    :attr:`ipaddress.IPv4Address.is_global` *
    :attr:`ipaddress.IPv6Address.is_private` *
    :attr:`ipaddress.IPv6Address.is_global` Also in the
    corresponding :class:`ipaddress.IPv4Network` and
    :class:`ipaddress.IPv6Network` attributes.
    Fixes bsc#1226448 (CVE-2024-4032).
  - gh-102988: :func:`email.utils.getaddresses` and
    :func:`email.utils.parseaddr` now return ``('', '')``
    2-tuples in more situations where invalid email addresses
    are encountered instead of potentially inaccurate
    values. Add optional *strict* parameter to these two
    functions: use ``strict=False`` to get the old behavior,
    accept malformed inputs. ``getattr(email.utils,
    'supports_strict_parsing', False)`` can be use to check if
    the *strict* paramater is available. Patch by Thomas Dwyer
    and Victor Stinner to improve the CVE-2023-27043 fix
    (bsc#1210638).
  - gh-67693: Fix :func:`urllib.parse.urlunparse` and
    :func:`urllib.parse.urlunsplit` for URIs with path starting
    with multiple slashes and no authority. Based on patch by
    Ashwin Ramaswami.
  - Core and Builtins
  - gh-112275: A deadlock involving ``pystate.c``'s
    ``HEAD_LOCK`` in ``posixmodule.c`` at fork is now
    fixed. Patch by ChuBoning based on previous Python 3.12 fix
    by Victor Stinner.
  - gh-109120: Added handle of incorrect star expressions, e.g
    ``f(3, *)``. Patch by Grigoryev Semyon
- Removed upstreamed patches:
  - CVE-2023-27043-email-parsing-errors.patch
  - CVE-2024-4032-private-IP-addrs.patch
  - CVE-2024-6923-email-hdr-inject.patch
  - CVE-2024-8088-inf-loop-zipfile_Path.patch
    (renamed from CVE-2024-8088-zipfile-Path-sanitization.patch)
  - CVE-2024-6232-ReDOS-backtrack-tarfile.patch
  - CVE-2024-7592-quad-complex-cookies.patch</changelog>
  <changelog author="mcepl@cepl.eu" date="1727870400">- Drop .pyc files from docdir for reproducible builds
  (bsc#1230906).</changelog>
  <changelog author="mcepl@cepl.eu" date="1730462400">- Add CVE-2024-9287-venv_path_unquoted.patch to properly quote
  path names provided when creating a virtual environment
  (bsc#1232241, CVE-2024-9287)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1731326400">- Remove -IVendor/ from python-config boo#1231795</changelog>
  <changelog author="mcepl@suse.com" date="1733140800">- Fix changelog</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1733227200">- Add add-loongarch64-support.patch to support loongarch64</changelog>
  <changelog author="mcepl@cepl.eu" date="1733313600">- Update to 3.11.11:
  - Tools/Demos
  - gh-123418: Update GitHub CI workflows to use OpenSSL 3.0.15
    and multissltests to use 3.0.15, 3.1.7, and 3.2.3.
  - Tests
  - gh-125041: Re-enable skipped tests for zlib on the
    s390x architecture: only skip checks of the compressed
    bytes, which can be different between zlib’s software
    implementation and the hardware-accelerated implementation.
  - Security
  - gh-126623: Upgrade libexpat to 2.6.4
  - gh-122792: Changed IPv4-mapped ipaddress.IPv6Address to
    consistently use the mapped IPv4 address value for deciding
    properties. Properties which have their behavior fixed are
    is_multicast, is_reserved, is_link_local, is_global, and
    is_unspecified.
  - Library
  - gh-124651: Properly quote template strings in venv
    activation scripts (bsc#1232241, CVE-2024-9287).
- Removed upstreamed patches:
  - CVE-2024-9287-venv_path_unquoted.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1737979200">- Configure externally_managed with a bcond
  https://en.opensuse.org/openSUSE:Python:Externally_managed
  bsc#1228165</changelog>
  <changelog author="mcepl@cepl.eu" date="1738670400">- Add CVE-2025-0938-sq-brackets-domain-names.patch which
  disallows square brackets ([ and ]) in domain names for parsed
  URLs (bsc#1236705, CVE-2025-0938, gh#python/cpython#105704)</changelog>
  <changelog author="bwiedemann@suse.com" date="1741608000">- Skip PGO with %want_reproducible_builds (bsc#1239210)</changelog>
  <changelog author="bwiedemann@suse.com" date="1741780800">- Allow to disable PGO</changelog>
  <changelog author="mcepl@cepl.eu" date="1744977600">- Update to 3.11.12:
  - gh-131809: Update bundled libexpat to 2.7.1
  - gh-131261: Upgrade to libexpat 2.7.0
  - gh-105704: When using urllib.parse.urlsplit() and
    urllib.parse.urlparse() host parsing would not reject domain
    names containing square brackets ([ and ]). Square brackets
    are only valid for IPv6 and IPvFuture hosts according to RFC
    3986 Section 3.2.2 (bsc#1236705, CVE-2025-0938,
    gh#python/cpython#105704).
  - gh-121284: Fix bug in the folding of rfc2047 encoded-words
    when flattening an email message using a modern email
    policy. Previously when an encoded-word was too long for
    a line, it would be decoded, split across lines, and
    re-encoded. But commas and other special characters in the
    original text could be left unencoded and unquoted. This
    could theoretically be used to spoof header lines using a
    carefully constructed encoded-word if the resulting rendered
    email was transmitted or re-parsed.
  - gh-80222: Fix bug in the folding of quoted strings
    when flattening an email message using a modern email
    policy. Previously when a quoted string was folded so that
    it spanned more than one line, the surrounding quotes and
    internal escapes would be omitted. This could theoretically
    be used to spoof header lines using a carefully constructed
    quoted string if the resulting rendered email was transmitted
    or re-parsed.
  - gh-119511: Fix a potential denial of service in the imaplib
    module. When connecting to a malicious server, it could
    cause an arbitrary amount of memory to be allocated. On many
    systems this is harmless as unused virtual memory is only
    a mapping, but if this hit a virtual address size limit
    it could lead to a MemoryError or other process crash. On
    unusual systems or builds where all allocated memory is
    touched and backed by actual ram or storage it could’ve
    consumed resources doing so until similarly crashing.
  - gh-127257: In ssl, system call failures that OpenSSL reports
    using ERR_LIB_SYS are now raised as OSError.
  - gh-121277: Writers of CPython’s documentation can now use
    next as the version for the versionchanged, versionadded,
    deprecated directives.
  - gh-106883: Disable GC during the _PyThread_CurrentFrames()
    and _PyThread_CurrentExceptions() calls to avoid the
    interpreter to deadlock.
- Remove upstreamed patch:
  - CVE-2025-0938-sq-brackets-domain-names.patch
- Add gh-126572-test_ssl-no-stop-ThreadedEchoServer-OSError.patch
  which makes test_ssl not to stop ThreadedEchoServer on OSError,
  which makes test_ssl pass with OpenSSL 3.5 (bsc#1241067,
  gh#python/cpython!126572)</changelog>
  <changelog author="mcepl@cepl.eu" date="1746878400">- Remove python-3.3.0b1-test-posix_fadvise.patch (not needed
  since kernel 3.6-rc1)</changelog>
  <changelog author="mcepl@cepl.eu" date="1747483200">- Use extended %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1747915200">- Add CVE-2025-4516-DecodeError-handler.patch fixing
  CVE-2025-4516 (bsc#1243273) blocking DecodeError handling
  vulnerability, which could lead to DoS.</changelog>
  <changelog author="mcepl@cepl.eu" date="1749470400">- Update to 3.11.13:
  - Security
  - gh-135034: Fixes multiple issues that allowed tarfile
    extraction filters (filter="data" and filter="tar")
    to be bypassed using crafted symlinks and hard links.
    Addresses CVE-2024-12718 (bsc#1244056), CVE-2025-4138
    (bsc#1244059), CVE-2025-4330 (bsc#1244060), and
    CVE-2025-4517 (bsc#1244032). Also addresses CVE-2025-4435
    (gh#135034, bsc#1244061).
  - gh-133767: Fix use-after-free in the “unicode-escape”
    decoder with a non-“strict” error handler (CVE-2025-4516,
    bsc#1243273).
  - gh-128840: Short-circuit the processing of long IPv6
    addresses early in ipaddress to prevent excessive memory
    consumption and a minor denial-of-service.
  - Library
  - gh-128840: Fix parsing long IPv6 addresses with embedded
    IPv4 address.
  - gh-134062: ipaddress: fix collisions in __hash__() for
    IPv4Network and IPv6Network objects.
  - gh-123409: Fix ipaddress.IPv6Address.reverse_pointer output
    according to RFC 3596, §2.5. Patch by Bénédikt Tran.
  - bpo-43633: Improve the textual representation of
    IPv4-mapped IPv6 addresses (RFC 4291 Sections 2.2, 2.5.5.2)
    in ipaddress. Patch by Oleksandr Pavliuk.
- Remove upstreamed patches:
  - gh-126572-test_ssl-no-stop-ThreadedEchoServer-OSError.patch
  - CVE-2025-4516-DecodeError-handler.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1751371200">- Use one core to build doc. This will make sphinx doc build
  reproducible.
  bsc#1243155</changelog>
  <changelog author="mcepl@cepl.eu" date="1751457600">- Add CVE-2025-6069-quad-complex-HTMLParser.patch to avoid worst
  case quadratic complexity when processing certain crafted
  malformed inputs with HTMLParser (CVE-2025-6069, bsc#1244705).</changelog>
  <changelog author="mcepl@cepl.eu" date="1754049600">- Add CVE-2025-8194-tarfile-no-neg-offsets.patch which now
  validates archives to ensure member offsets are non-negative
  (gh#python/cpython#130577, CVE-2025-8194, bsc#1247249).</changelog>
</package>
<package pkgid="1db7c7b91381a240366e4193c58ad9c638783b9d0a3d577658319d62bb301e4d" name="libpython3_11-1_0" arch="x86_64">
  <version epoch="0" ver="3.11.14" rel="150600.3.38.1"/>
  <changelog author="mcepl@suse.com" date="1733140800">- Fix changelog</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1733227200">- Add add-loongarch64-support.patch to support loongarch64</changelog>
  <changelog author="mcepl@cepl.eu" date="1733313600">- Update to 3.11.11:
  - Tools/Demos
  - gh-123418: Update GitHub CI workflows to use OpenSSL 3.0.15
    and multissltests to use 3.0.15, 3.1.7, and 3.2.3.
  - Tests
  - gh-125041: Re-enable skipped tests for zlib on the
    s390x architecture: only skip checks of the compressed
    bytes, which can be different between zlib’s software
    implementation and the hardware-accelerated implementation.
  - Security
  - gh-126623: Upgrade libexpat to 2.6.4
  - gh-122792: Changed IPv4-mapped ipaddress.IPv6Address to
    consistently use the mapped IPv4 address value for deciding
    properties. Properties which have their behavior fixed are
    is_multicast, is_reserved, is_link_local, is_global, and
    is_unspecified.
  - Library
  - gh-124651: Properly quote template strings in venv
    activation scripts (bsc#1232241, CVE-2024-9287).
- Removed upstreamed patches:
  - CVE-2024-9287-venv_path_unquoted.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1737979200">- Configure externally_managed with a bcond
  https://en.opensuse.org/openSUSE:Python:Externally_managed
  bsc#1228165</changelog>
  <changelog author="mcepl@cepl.eu" date="1738670400">- Add CVE-2025-0938-sq-brackets-domain-names.patch which
  disallows square brackets ([ and ]) in domain names for parsed
  URLs (bsc#1236705, CVE-2025-0938, gh#python/cpython#105704)</changelog>
  <changelog author="bwiedemann@suse.com" date="1741608000">- Skip PGO with %want_reproducible_builds (bsc#1239210)</changelog>
  <changelog author="bwiedemann@suse.com" date="1741780800">- Allow to disable PGO</changelog>
  <changelog author="mcepl@cepl.eu" date="1744977600">- Update to 3.11.12:
  - gh-131809: Update bundled libexpat to 2.7.1
  - gh-131261: Upgrade to libexpat 2.7.0
  - gh-105704: When using urllib.parse.urlsplit() and
    urllib.parse.urlparse() host parsing would not reject domain
    names containing square brackets ([ and ]). Square brackets
    are only valid for IPv6 and IPvFuture hosts according to RFC
    3986 Section 3.2.2 (bsc#1236705, CVE-2025-0938,
    gh#python/cpython#105704).
  - gh-121284: Fix bug in the folding of rfc2047 encoded-words
    when flattening an email message using a modern email
    policy. Previously when an encoded-word was too long for
    a line, it would be decoded, split across lines, and
    re-encoded. But commas and other special characters in the
    original text could be left unencoded and unquoted. This
    could theoretically be used to spoof header lines using a
    carefully constructed encoded-word if the resulting rendered
    email was transmitted or re-parsed.
  - gh-80222: Fix bug in the folding of quoted strings
    when flattening an email message using a modern email
    policy. Previously when a quoted string was folded so that
    it spanned more than one line, the surrounding quotes and
    internal escapes would be omitted. This could theoretically
    be used to spoof header lines using a carefully constructed
    quoted string if the resulting rendered email was transmitted
    or re-parsed.
  - gh-119511: Fix a potential denial of service in the imaplib
    module. When connecting to a malicious server, it could
    cause an arbitrary amount of memory to be allocated. On many
    systems this is harmless as unused virtual memory is only
    a mapping, but if this hit a virtual address size limit
    it could lead to a MemoryError or other process crash. On
    unusual systems or builds where all allocated memory is
    touched and backed by actual ram or storage it could’ve
    consumed resources doing so until similarly crashing.
  - gh-127257: In ssl, system call failures that OpenSSL reports
    using ERR_LIB_SYS are now raised as OSError.
  - gh-121277: Writers of CPython’s documentation can now use
    next as the version for the versionchanged, versionadded,
    deprecated directives.
  - gh-106883: Disable GC during the _PyThread_CurrentFrames()
    and _PyThread_CurrentExceptions() calls to avoid the
    interpreter to deadlock.
- Remove upstreamed patch:
  - CVE-2025-0938-sq-brackets-domain-names.patch
- Add gh-126572-test_ssl-no-stop-ThreadedEchoServer-OSError.patch
  which makes test_ssl not to stop ThreadedEchoServer on OSError,
  which makes test_ssl pass with OpenSSL 3.5 (bsc#1241067,
  gh#python/cpython!126572)</changelog>
  <changelog author="mcepl@cepl.eu" date="1746878400">- Remove python-3.3.0b1-test-posix_fadvise.patch (not needed
  since kernel 3.6-rc1)</changelog>
  <changelog author="mcepl@cepl.eu" date="1747483200">- Use extended %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1747915200">- Add CVE-2025-4516-DecodeError-handler.patch fixing
  CVE-2025-4516 (bsc#1243273) blocking DecodeError handling
  vulnerability, which could lead to DoS.</changelog>
  <changelog author="mcepl@cepl.eu" date="1749470400">- Update to 3.11.13:
  - Security
  - gh-135034: Fixes multiple issues that allowed tarfile
    extraction filters (filter="data" and filter="tar")
    to be bypassed using crafted symlinks and hard links.
    Addresses CVE-2024-12718 (bsc#1244056), CVE-2025-4138
    (bsc#1244059), CVE-2025-4330 (bsc#1244060), and
    CVE-2025-4517 (bsc#1244032). Also addresses CVE-2025-4435
    (gh#135034, bsc#1244061).
  - gh-133767: Fix use-after-free in the “unicode-escape”
    decoder with a non-“strict” error handler (CVE-2025-4516,
    bsc#1243273).
  - gh-128840: Short-circuit the processing of long IPv6
    addresses early in ipaddress to prevent excessive memory
    consumption and a minor denial-of-service.
  - Library
  - gh-128840: Fix parsing long IPv6 addresses with embedded
    IPv4 address.
  - gh-134062: ipaddress: fix collisions in __hash__() for
    IPv4Network and IPv6Network objects.
  - gh-123409: Fix ipaddress.IPv6Address.reverse_pointer output
    according to RFC 3596, §2.5. Patch by Bénédikt Tran.
  - bpo-43633: Improve the textual representation of
    IPv4-mapped IPv6 addresses (RFC 4291 Sections 2.2, 2.5.5.2)
    in ipaddress. Patch by Oleksandr Pavliuk.
- Remove upstreamed patches:
  - gh-126572-test_ssl-no-stop-ThreadedEchoServer-OSError.patch
  - CVE-2025-4516-DecodeError-handler.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1751371200">- Use one core to build doc. This will make sphinx doc build
  reproducible.
  bsc#1243155</changelog>
  <changelog author="mcepl@cepl.eu" date="1751457600">- Add CVE-2025-6069-quad-complex-HTMLParser.patch to avoid worst
  case quadratic complexity when processing certain crafted
  malformed inputs with HTMLParser (CVE-2025-6069, bsc#1244705).</changelog>
  <changelog author="mcepl@cepl.eu" date="1754049600">- Add CVE-2025-8194-tarfile-no-neg-offsets.patch which now
  validates archives to ensure member offsets are non-negative
  (gh#python/cpython#130577, CVE-2025-8194, bsc#1247249).</changelog>
  <changelog author="dimstar@opensuse.org" date="1758196800">- Require AppStream to validate appdata file instead of deprecated
  appstream-glib.
- Update idle3.appdata.xml to pass the more pedantic appstreamcli.</changelog>
  <changelog author="dimstar@opensuse.org" date="1758283200">- Drop AppStream buildrequires and don't run appstreamcli validate
  as part of the build process: the appdata.xml is not updated by
  source directly, so we have more contol. Having Appstream or the
  deprecated appstream-glib result in a build cycle.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1759147200">- Add gh139257-Support-docutils-0.22.patch to fix build with latest
  docutils (&gt;=0.22) gh#python/cpython#139257</changelog>
  <changelog author="daniel.garcia@suse.com" date="1760529600">- Update to 3.11.14:
  - Security
  - gh-139700: Check consistency of the zip64 end of central
    directory record. Support records with “zip64 extensible data”
    if there are no bytes prepended to the ZIP file
    (CVE-2025-8291, bsc#1251305).
  - gh-139400: xml.parsers.expat: Make sure that parent Expat
    parsers are only garbage-collected once they are no longer
    referenced by subparsers created by
    ExternalEntityParserCreate(). Patch by Sebastian Pipping.
  - gh-135661: Fix parsing start and end tags in
    html.parser.HTMLParser according to the HTML5 standard.
  * Whitespaces no longer accepted between &lt;/ and the tag name. E.g.
    &lt;/ script&gt; does not end the script section.
  * Vertical tabulation (\v) and non-ASCII whitespaces no longer
    recognized as whitespaces. The only whitespaces are \t\n\r\f and
    space.
  * Null character (U+0000) no longer ends the tag name.
  * Attributes and slashes after the tag name in end tags are now
    ignored, instead of terminating after the first &gt; in quoted
    attribute value. E.g. &lt;/script/foo="&gt;"/&gt;.
  * Multiple slashes and whitespaces between the last attribute and
    closing &gt; are now ignored in both start and end tags. E.g. &lt;a
    foo=bar/ //&gt;.
  * Multiple = between attribute name and value are no longer
    collapsed. E.g. &lt;a foo==bar&gt; produces attribute “foo” with value
    “=bar”.
  - gh-135661: Fix CDATA section parsing in html.parser.HTMLParser
    according to the HTML5 standard: ] ]&gt; and ]] &gt; no longer end the
    CDATA section. Add private method _set_support_cdata() which can
    be used to specify how to parse &lt;[CDATA[ — as a CDATA section in
    foreign content (SVG or MathML) or as a bogus comment in the
    HTML namespace.
  - gh-102555: Fix comment parsing in html.parser.HTMLParser
    according to the HTML5 standard. --!&gt; now ends the comment. -- &gt;
    no longer ends the comment. Support abnormally ended empty
    comments &lt;--&gt; and &lt;---&gt;.
  - gh-135462: Fix quadratic complexity in processing specially
    crafted input in html.parser.HTMLParser. End-of-file errors are
    now handled according to the HTML5 specs – comments and
    declarations are automatically closed, tags are ignored.
  - gh-118350: Fix support of escapable raw text mode (elements
    “textarea” and “title”) in html.parser.HTMLParser.
  - gh-86155: html.parser.HTMLParser.close() no longer loses data
    when the &lt;script&gt; tag is not closed. Patch by Waylan Limberg.
  - Library
  - gh-139312: Upgrade bundled libexpat to 2.7.3
  - gh-138998: Update bundled libexpat to 2.7.2
  - gh-130577: tarfile now validates archives to ensure member
    offsets are non-negative. (Contributed by Alexander Enrique
    Urieles Nieto in gh-130577.)
  - gh-135374: Update the bundled copy of setuptools to 79.0.1.
- Drop upstreamed patches:
  - CVE-2025-8194-tarfile-no-neg-offsets.patch
  - CVE-2025-6069-quad-complex-HTMLParser.patch</changelog>
  <changelog author="mcepl@cepl.eu" date="1763035200">- Add CVE-2025-6075-expandvars-perf-degrad.patch avoid simple
  quadratic complexity vulnerabilities of os.path.expandvars()
  (CVE-2025-6075, bsc#1252974).
- Readjusted patches:
  - CVE-2023-52425-libexpat-2.6.0-backport.patch
  - CVE-2023-52425-remove-reparse_deferral-tests.patch
  - fix_configure_rst.patch
  - skip_if_buildbot-extend.patch</changelog>
</package>
<package pkgid="d129dedc9b9d68c126cdc8a41651912f3629af04683694d544bdcf8040a9ae0f" name="libpython3_11-1_0" arch="x86_64">
  <version epoch="0" ver="3.11.14" rel="150600.3.41.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1733227200">- Add add-loongarch64-support.patch to support loongarch64</changelog>
  <changelog author="mcepl@cepl.eu" date="1733313600">- Update to 3.11.11:
  - Tools/Demos
  - gh-123418: Update GitHub CI workflows to use OpenSSL 3.0.15
    and multissltests to use 3.0.15, 3.1.7, and 3.2.3.
  - Tests
  - gh-125041: Re-enable skipped tests for zlib on the
    s390x architecture: only skip checks of the compressed
    bytes, which can be different between zlib’s software
    implementation and the hardware-accelerated implementation.
  - Security
  - gh-126623: Upgrade libexpat to 2.6.4
  - gh-122792: Changed IPv4-mapped ipaddress.IPv6Address to
    consistently use the mapped IPv4 address value for deciding
    properties. Properties which have their behavior fixed are
    is_multicast, is_reserved, is_link_local, is_global, and
    is_unspecified.
  - Library
  - gh-124651: Properly quote template strings in venv
    activation scripts (bsc#1232241, CVE-2024-9287).
- Removed upstreamed patches:
  - CVE-2024-9287-venv_path_unquoted.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1737979200">- Configure externally_managed with a bcond
  https://en.opensuse.org/openSUSE:Python:Externally_managed
  bsc#1228165</changelog>
  <changelog author="mcepl@cepl.eu" date="1738670400">- Add CVE-2025-0938-sq-brackets-domain-names.patch which
  disallows square brackets ([ and ]) in domain names for parsed
  URLs (bsc#1236705, CVE-2025-0938, gh#python/cpython#105704)</changelog>
  <changelog author="bwiedemann@suse.com" date="1741608000">- Skip PGO with %want_reproducible_builds (bsc#1239210)</changelog>
  <changelog author="bwiedemann@suse.com" date="1741780800">- Allow to disable PGO</changelog>
  <changelog author="mcepl@cepl.eu" date="1744977600">- Update to 3.11.12:
  - gh-131809: Update bundled libexpat to 2.7.1
  - gh-131261: Upgrade to libexpat 2.7.0
  - gh-105704: When using urllib.parse.urlsplit() and
    urllib.parse.urlparse() host parsing would not reject domain
    names containing square brackets ([ and ]). Square brackets
    are only valid for IPv6 and IPvFuture hosts according to RFC
    3986 Section 3.2.2 (bsc#1236705, CVE-2025-0938,
    gh#python/cpython#105704).
  - gh-121284: Fix bug in the folding of rfc2047 encoded-words
    when flattening an email message using a modern email
    policy. Previously when an encoded-word was too long for
    a line, it would be decoded, split across lines, and
    re-encoded. But commas and other special characters in the
    original text could be left unencoded and unquoted. This
    could theoretically be used to spoof header lines using a
    carefully constructed encoded-word if the resulting rendered
    email was transmitted or re-parsed.
  - gh-80222: Fix bug in the folding of quoted strings
    when flattening an email message using a modern email
    policy. Previously when a quoted string was folded so that
    it spanned more than one line, the surrounding quotes and
    internal escapes would be omitted. This could theoretically
    be used to spoof header lines using a carefully constructed
    quoted string if the resulting rendered email was transmitted
    or re-parsed.
  - gh-119511: Fix a potential denial of service in the imaplib
    module. When connecting to a malicious server, it could
    cause an arbitrary amount of memory to be allocated. On many
    systems this is harmless as unused virtual memory is only
    a mapping, but if this hit a virtual address size limit
    it could lead to a MemoryError or other process crash. On
    unusual systems or builds where all allocated memory is
    touched and backed by actual ram or storage it could’ve
    consumed resources doing so until similarly crashing.
  - gh-127257: In ssl, system call failures that OpenSSL reports
    using ERR_LIB_SYS are now raised as OSError.
  - gh-121277: Writers of CPython’s documentation can now use
    next as the version for the versionchanged, versionadded,
    deprecated directives.
  - gh-106883: Disable GC during the _PyThread_CurrentFrames()
    and _PyThread_CurrentExceptions() calls to avoid the
    interpreter to deadlock.
- Remove upstreamed patch:
  - CVE-2025-0938-sq-brackets-domain-names.patch
- Add gh-126572-test_ssl-no-stop-ThreadedEchoServer-OSError.patch
  which makes test_ssl not to stop ThreadedEchoServer on OSError,
  which makes test_ssl pass with OpenSSL 3.5 (bsc#1241067,
  gh#python/cpython!126572)</changelog>
  <changelog author="mcepl@cepl.eu" date="1746878400">- Remove python-3.3.0b1-test-posix_fadvise.patch (not needed
  since kernel 3.6-rc1)</changelog>
  <changelog author="mcepl@cepl.eu" date="1747483200">- Use extended %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1747915200">- Add CVE-2025-4516-DecodeError-handler.patch fixing
  CVE-2025-4516 (bsc#1243273) blocking DecodeError handling
  vulnerability, which could lead to DoS.</changelog>
  <changelog author="mcepl@cepl.eu" date="1749470400">- Update to 3.11.13:
  - Security
  - gh-135034: Fixes multiple issues that allowed tarfile
    extraction filters (filter="data" and filter="tar")
    to be bypassed using crafted symlinks and hard links.
    Addresses CVE-2024-12718 (bsc#1244056), CVE-2025-4138
    (bsc#1244059), CVE-2025-4330 (bsc#1244060), and
    CVE-2025-4517 (bsc#1244032). Also addresses CVE-2025-4435
    (gh#135034, bsc#1244061).
  - gh-133767: Fix use-after-free in the “unicode-escape”
    decoder with a non-“strict” error handler (CVE-2025-4516,
    bsc#1243273).
  - gh-128840: Short-circuit the processing of long IPv6
    addresses early in ipaddress to prevent excessive memory
    consumption and a minor denial-of-service.
  - Library
  - gh-128840: Fix parsing long IPv6 addresses with embedded
    IPv4 address.
  - gh-134062: ipaddress: fix collisions in __hash__() for
    IPv4Network and IPv6Network objects.
  - gh-123409: Fix ipaddress.IPv6Address.reverse_pointer output
    according to RFC 3596, §2.5. Patch by Bénédikt Tran.
  - bpo-43633: Improve the textual representation of
    IPv4-mapped IPv6 addresses (RFC 4291 Sections 2.2, 2.5.5.2)
    in ipaddress. Patch by Oleksandr Pavliuk.
- Remove upstreamed patches:
  - gh-126572-test_ssl-no-stop-ThreadedEchoServer-OSError.patch
  - CVE-2025-4516-DecodeError-handler.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1751371200">- Use one core to build doc. This will make sphinx doc build
  reproducible.
  bsc#1243155</changelog>
  <changelog author="mcepl@cepl.eu" date="1751457600">- Add CVE-2025-6069-quad-complex-HTMLParser.patch to avoid worst
  case quadratic complexity when processing certain crafted
  malformed inputs with HTMLParser (CVE-2025-6069, bsc#1244705).</changelog>
  <changelog author="mcepl@cepl.eu" date="1754049600">- Add CVE-2025-8194-tarfile-no-neg-offsets.patch which now
  validates archives to ensure member offsets are non-negative
  (gh#python/cpython#130577, CVE-2025-8194, bsc#1247249).</changelog>
  <changelog author="dimstar@opensuse.org" date="1758196800">- Require AppStream to validate appdata file instead of deprecated
  appstream-glib.
- Update idle3.appdata.xml to pass the more pedantic appstreamcli.</changelog>
  <changelog author="dimstar@opensuse.org" date="1758283200">- Drop AppStream buildrequires and don't run appstreamcli validate
  as part of the build process: the appdata.xml is not updated by
  source directly, so we have more contol. Having Appstream or the
  deprecated appstream-glib result in a build cycle.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1759147200">- Add gh139257-Support-docutils-0.22.patch to fix build with latest
  docutils (&gt;=0.22) gh#python/cpython#139257</changelog>
  <changelog author="daniel.garcia@suse.com" date="1760529600">- Update to 3.11.14:
  - Security
  - gh-139700: Check consistency of the zip64 end of central
    directory record. Support records with “zip64 extensible data”
    if there are no bytes prepended to the ZIP file
    (CVE-2025-8291, bsc#1251305).
  - gh-139400: xml.parsers.expat: Make sure that parent Expat
    parsers are only garbage-collected once they are no longer
    referenced by subparsers created by
    ExternalEntityParserCreate(). Patch by Sebastian Pipping.
  - gh-135661: Fix parsing start and end tags in
    html.parser.HTMLParser according to the HTML5 standard.
  * Whitespaces no longer accepted between &lt;/ and the tag name. E.g.
    &lt;/ script&gt; does not end the script section.
  * Vertical tabulation (\v) and non-ASCII whitespaces no longer
    recognized as whitespaces. The only whitespaces are \t\n\r\f and
    space.
  * Null character (U+0000) no longer ends the tag name.
  * Attributes and slashes after the tag name in end tags are now
    ignored, instead of terminating after the first &gt; in quoted
    attribute value. E.g. &lt;/script/foo="&gt;"/&gt;.
  * Multiple slashes and whitespaces between the last attribute and
    closing &gt; are now ignored in both start and end tags. E.g. &lt;a
    foo=bar/ //&gt;.
  * Multiple = between attribute name and value are no longer
    collapsed. E.g. &lt;a foo==bar&gt; produces attribute “foo” with value
    “=bar”.
  - gh-135661: Fix CDATA section parsing in html.parser.HTMLParser
    according to the HTML5 standard: ] ]&gt; and ]] &gt; no longer end the
    CDATA section. Add private method _set_support_cdata() which can
    be used to specify how to parse &lt;[CDATA[ — as a CDATA section in
    foreign content (SVG or MathML) or as a bogus comment in the
    HTML namespace.
  - gh-102555: Fix comment parsing in html.parser.HTMLParser
    according to the HTML5 standard. --!&gt; now ends the comment. -- &gt;
    no longer ends the comment. Support abnormally ended empty
    comments &lt;--&gt; and &lt;---&gt;.
  - gh-135462: Fix quadratic complexity in processing specially
    crafted input in html.parser.HTMLParser. End-of-file errors are
    now handled according to the HTML5 specs – comments and
    declarations are automatically closed, tags are ignored.
  - gh-118350: Fix support of escapable raw text mode (elements
    “textarea” and “title”) in html.parser.HTMLParser.
  - gh-86155: html.parser.HTMLParser.close() no longer loses data
    when the &lt;script&gt; tag is not closed. Patch by Waylan Limberg.
  - Library
  - gh-139312: Upgrade bundled libexpat to 2.7.3
  - gh-138998: Update bundled libexpat to 2.7.2
  - gh-130577: tarfile now validates archives to ensure member
    offsets are non-negative. (Contributed by Alexander Enrique
    Urieles Nieto in gh-130577.)
  - gh-135374: Update the bundled copy of setuptools to 79.0.1.
- Drop upstreamed patches:
  - CVE-2025-8194-tarfile-no-neg-offsets.patch
  - CVE-2025-6069-quad-complex-HTMLParser.patch</changelog>
  <changelog author="mcepl@cepl.eu" date="1763035200">- Add CVE-2025-6075-expandvars-perf-degrad.patch avoid simple
  quadratic complexity vulnerabilities of os.path.expandvars()
  (CVE-2025-6075, bsc#1252974).
- Readjusted patches:
  - CVE-2023-52425-libexpat-2.6.0-backport.patch
  - CVE-2023-52425-remove-reparse_deferral-tests.patch
  - fix_configure_rst.patch
  - skip_if_buildbot-extend.patch</changelog>
  <changelog author="mcepl@cepl.eu" date="1766059200">- Add CVE-2025-13836-http-resp-cont-len.patch (bsc#1254400,
  CVE-2025-13836) to prevent reading an HTTP response from
  a server, if no read amount is specified, with using
  Content-Length per default as the length.
- Add CVE-2025-12084-minidom-quad-search.patch prevent quadratic
  behavior in node ID cache clearing (CVE-2025-12084,
  bsc#1254997).
- Add CVE-2025-13837-plistlib-mailicious-length.patch protect
  against OOM when loading malicious content (CVE-2025-13837,
  bsc#1254401).</changelog>
</package>
<package pkgid="2720371d62d941404401e87f4d8f617540732d47d54530fd6d5bc93041ce285d" name="libpython3_11-1_0" arch="x86_64">
  <version epoch="0" ver="3.11.14" rel="150600.3.44.1"/>
  <changelog author="mcepl@cepl.eu" date="1733313600">- Update to 3.11.11:
  - Tools/Demos
  - gh-123418: Update GitHub CI workflows to use OpenSSL 3.0.15
    and multissltests to use 3.0.15, 3.1.7, and 3.2.3.
  - Tests
  - gh-125041: Re-enable skipped tests for zlib on the
    s390x architecture: only skip checks of the compressed
    bytes, which can be different between zlib’s software
    implementation and the hardware-accelerated implementation.
  - Security
  - gh-126623: Upgrade libexpat to 2.6.4
  - gh-122792: Changed IPv4-mapped ipaddress.IPv6Address to
    consistently use the mapped IPv4 address value for deciding
    properties. Properties which have their behavior fixed are
    is_multicast, is_reserved, is_link_local, is_global, and
    is_unspecified.
  - Library
  - gh-124651: Properly quote template strings in venv
    activation scripts (bsc#1232241, CVE-2024-9287).
- Removed upstreamed patches:
  - CVE-2024-9287-venv_path_unquoted.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1737979200">- Configure externally_managed with a bcond
  https://en.opensuse.org/openSUSE:Python:Externally_managed
  bsc#1228165</changelog>
  <changelog author="mcepl@cepl.eu" date="1738670400">- Add CVE-2025-0938-sq-brackets-domain-names.patch which
  disallows square brackets ([ and ]) in domain names for parsed
  URLs (bsc#1236705, CVE-2025-0938, gh#python/cpython#105704)</changelog>
  <changelog author="bwiedemann@suse.com" date="1741608000">- Skip PGO with %want_reproducible_builds (bsc#1239210)</changelog>
  <changelog author="bwiedemann@suse.com" date="1741780800">- Allow to disable PGO</changelog>
  <changelog author="mcepl@cepl.eu" date="1744977600">- Update to 3.11.12:
  - gh-131809: Update bundled libexpat to 2.7.1
  - gh-131261: Upgrade to libexpat 2.7.0
  - gh-105704: When using urllib.parse.urlsplit() and
    urllib.parse.urlparse() host parsing would not reject domain
    names containing square brackets ([ and ]). Square brackets
    are only valid for IPv6 and IPvFuture hosts according to RFC
    3986 Section 3.2.2 (bsc#1236705, CVE-2025-0938,
    gh#python/cpython#105704).
  - gh-121284: Fix bug in the folding of rfc2047 encoded-words
    when flattening an email message using a modern email
    policy. Previously when an encoded-word was too long for
    a line, it would be decoded, split across lines, and
    re-encoded. But commas and other special characters in the
    original text could be left unencoded and unquoted. This
    could theoretically be used to spoof header lines using a
    carefully constructed encoded-word if the resulting rendered
    email was transmitted or re-parsed.
  - gh-80222: Fix bug in the folding of quoted strings
    when flattening an email message using a modern email
    policy. Previously when a quoted string was folded so that
    it spanned more than one line, the surrounding quotes and
    internal escapes would be omitted. This could theoretically
    be used to spoof header lines using a carefully constructed
    quoted string if the resulting rendered email was transmitted
    or re-parsed.
  - gh-119511: Fix a potential denial of service in the imaplib
    module. When connecting to a malicious server, it could
    cause an arbitrary amount of memory to be allocated. On many
    systems this is harmless as unused virtual memory is only
    a mapping, but if this hit a virtual address size limit
    it could lead to a MemoryError or other process crash. On
    unusual systems or builds where all allocated memory is
    touched and backed by actual ram or storage it could’ve
    consumed resources doing so until similarly crashing.
  - gh-127257: In ssl, system call failures that OpenSSL reports
    using ERR_LIB_SYS are now raised as OSError.
  - gh-121277: Writers of CPython’s documentation can now use
    next as the version for the versionchanged, versionadded,
    deprecated directives.
  - gh-106883: Disable GC during the _PyThread_CurrentFrames()
    and _PyThread_CurrentExceptions() calls to avoid the
    interpreter to deadlock.
- Remove upstreamed patch:
  - CVE-2025-0938-sq-brackets-domain-names.patch
- Add gh-126572-test_ssl-no-stop-ThreadedEchoServer-OSError.patch
  which makes test_ssl not to stop ThreadedEchoServer on OSError,
  which makes test_ssl pass with OpenSSL 3.5 (bsc#1241067,
  gh#python/cpython!126572)</changelog>
  <changelog author="mcepl@cepl.eu" date="1746878400">- Remove python-3.3.0b1-test-posix_fadvise.patch (not needed
  since kernel 3.6-rc1)</changelog>
  <changelog author="mcepl@cepl.eu" date="1747483200">- Use extended %autopatch.</changelog>
  <changelog author="mcepl@cepl.eu" date="1747915200">- Add CVE-2025-4516-DecodeError-handler.patch fixing
  CVE-2025-4516 (bsc#1243273) blocking DecodeError handling
  vulnerability, which could lead to DoS.</changelog>
  <changelog author="mcepl@cepl.eu" date="1749470400">- Update to 3.11.13:
  - Security
  - gh-135034: Fixes multiple issues that allowed tarfile
    extraction filters (filter="data" and filter="tar")
    to be bypassed using crafted symlinks and hard links.
    Addresses CVE-2024-12718 (bsc#1244056), CVE-2025-4138
    (bsc#1244059), CVE-2025-4330 (bsc#1244060), and
    CVE-2025-4517 (bsc#1244032). Also addresses CVE-2025-4435
    (gh#135034, bsc#1244061).
  - gh-133767: Fix use-after-free in the “unicode-escape”
    decoder with a non-“strict” error handler (CVE-2025-4516,
    bsc#1243273).
  - gh-128840: Short-circuit the processing of long IPv6
    addresses early in ipaddress to prevent excessive memory
    consumption and a minor denial-of-service.
  - Library
  - gh-128840: Fix parsing long IPv6 addresses with embedded
    IPv4 address.
  - gh-134062: ipaddress: fix collisions in __hash__() for
    IPv4Network and IPv6Network objects.
  - gh-123409: Fix ipaddress.IPv6Address.reverse_pointer output
    according to RFC 3596, §2.5. Patch by Bénédikt Tran.
  - bpo-43633: Improve the textual representation of
    IPv4-mapped IPv6 addresses (RFC 4291 Sections 2.2, 2.5.5.2)
    in ipaddress. Patch by Oleksandr Pavliuk.
- Remove upstreamed patches:
  - gh-126572-test_ssl-no-stop-ThreadedEchoServer-OSError.patch
  - CVE-2025-4516-DecodeError-handler.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1751371200">- Use one core to build doc. This will make sphinx doc build
  reproducible.
  bsc#1243155</changelog>
  <changelog author="mcepl@cepl.eu" date="1751457600">- Add CVE-2025-6069-quad-complex-HTMLParser.patch to avoid worst
  case quadratic complexity when processing certain crafted
  malformed inputs with HTMLParser (CVE-2025-6069, bsc#1244705).</changelog>
  <changelog author="mcepl@cepl.eu" date="1754049600">- Add CVE-2025-8194-tarfile-no-neg-offsets.patch which now
  validates archives to ensure member offsets are non-negative
  (gh#python/cpython#130577, CVE-2025-8194, bsc#1247249).</changelog>
  <changelog author="dimstar@opensuse.org" date="1758196800">- Require AppStream to validate appdata file instead of deprecated
  appstream-glib.
- Update idle3.appdata.xml to pass the more pedantic appstreamcli.</changelog>
  <changelog author="dimstar@opensuse.org" date="1758283200">- Drop AppStream buildrequires and don't run appstreamcli validate
  as part of the build process: the appdata.xml is not updated by
  source directly, so we have more contol. Having Appstream or the
  deprecated appstream-glib result in a build cycle.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1759147200">- Add gh139257-Support-docutils-0.22.patch to fix build with latest
  docutils (&gt;=0.22) gh#python/cpython#139257</changelog>
  <changelog author="daniel.garcia@suse.com" date="1760529600">- Update to 3.11.14:
  - Security
  - gh-139700: Check consistency of the zip64 end of central
    directory record. Support records with “zip64 extensible data”
    if there are no bytes prepended to the ZIP file
    (CVE-2025-8291, bsc#1251305).
  - gh-139400: xml.parsers.expat: Make sure that parent Expat
    parsers are only garbage-collected once they are no longer
    referenced by subparsers created by
    ExternalEntityParserCreate(). Patch by Sebastian Pipping.
  - gh-135661: Fix parsing start and end tags in
    html.parser.HTMLParser according to the HTML5 standard.
  * Whitespaces no longer accepted between &lt;/ and the tag name. E.g.
    &lt;/ script&gt; does not end the script section.
  * Vertical tabulation (\v) and non-ASCII whitespaces no longer
    recognized as whitespaces. The only whitespaces are \t\n\r\f and
    space.
  * Null character (U+0000) no longer ends the tag name.
  * Attributes and slashes after the tag name in end tags are now
    ignored, instead of terminating after the first &gt; in quoted
    attribute value. E.g. &lt;/script/foo="&gt;"/&gt;.
  * Multiple slashes and whitespaces between the last attribute and
    closing &gt; are now ignored in both start and end tags. E.g. &lt;a
    foo=bar/ //&gt;.
  * Multiple = between attribute name and value are no longer
    collapsed. E.g. &lt;a foo==bar&gt; produces attribute “foo” with value
    “=bar”.
  - gh-135661: Fix CDATA section parsing in html.parser.HTMLParser
    according to the HTML5 standard: ] ]&gt; and ]] &gt; no longer end the
    CDATA section. Add private method _set_support_cdata() which can
    be used to specify how to parse &lt;[CDATA[ — as a CDATA section in
    foreign content (SVG or MathML) or as a bogus comment in the
    HTML namespace.
  - gh-102555: Fix comment parsing in html.parser.HTMLParser
    according to the HTML5 standard. --!&gt; now ends the comment. -- &gt;
    no longer ends the comment. Support abnormally ended empty
    comments &lt;--&gt; and &lt;---&gt;.
  - gh-135462: Fix quadratic complexity in processing specially
    crafted input in html.parser.HTMLParser. End-of-file errors are
    now handled according to the HTML5 specs – comments and
    declarations are automatically closed, tags are ignored.
  - gh-118350: Fix support of escapable raw text mode (elements
    “textarea” and “title”) in html.parser.HTMLParser.
  - gh-86155: html.parser.HTMLParser.close() no longer loses data
    when the &lt;script&gt; tag is not closed. Patch by Waylan Limberg.
  - Library
  - gh-139312: Upgrade bundled libexpat to 2.7.3
  - gh-138998: Update bundled libexpat to 2.7.2
  - gh-130577: tarfile now validates archives to ensure member
    offsets are non-negative. (Contributed by Alexander Enrique
    Urieles Nieto in gh-130577.)
  - gh-135374: Update the bundled copy of setuptools to 79.0.1.
- Drop upstreamed patches:
  - CVE-2025-8194-tarfile-no-neg-offsets.patch
  - CVE-2025-6069-quad-complex-HTMLParser.patch</changelog>
  <changelog author="mcepl@cepl.eu" date="1763035200">- Add CVE-2025-6075-expandvars-perf-degrad.patch avoid simple
  quadratic complexity vulnerabilities of os.path.expandvars()
  (CVE-2025-6075, bsc#1252974).
- Readjusted patches:
  - CVE-2023-52425-libexpat-2.6.0-backport.patch
  - CVE-2023-52425-remove-reparse_deferral-tests.patch
  - fix_configure_rst.patch
  - skip_if_buildbot-extend.patch</changelog>
  <changelog author="mcepl@cepl.eu" date="1766059200">- Add CVE-2025-13836-http-resp-cont-len.patch (bsc#1254400,
  CVE-2025-13836) to prevent reading an HTTP response from
  a server, if no read amount is specified, with using
  Content-Length per default as the length.
- Add CVE-2025-12084-minidom-quad-search.patch prevent quadratic
  behavior in node ID cache clearing (CVE-2025-12084,
  bsc#1254997).
- Add CVE-2025-13837-plistlib-mailicious-length.patch protect
  against OOM when loading malicious content (CVE-2025-13837,
  bsc#1254401).</changelog>
  <changelog author="mcepl@suse.com" date="1770811200">- CVE-2025-11468: preserving parens when folding comments in
  email headers (bsc#1257029, gh#python/cpython#143935).
  CVE-2025-11468-email-hdr-fold-comment.patch
- CVE-2026-0672: rejects control characters in http cookies.
  (bsc#1257031, gh#python/cpython#143919)
  CVE-2026-0672-http-hdr-inject-cookie-Morsel.patch
- CVE-2026-0865: rejecting control characters in
  wsgiref.headers.Headers, which could be abused for injecting
  false HTTP headers. (bsc#1257042, gh#python/cpython#143916)
  CVE-2026-0865-wsgiref-ctrl-chars.patch
- CVE-2025-15366: basically the same as the previous patch for
  IMAP protocol. (bsc#1257044, gh#python/cpython#143921)
  CVE-2025-15366-imap-ctrl-chars.patch
- CVE-2025-15282: basically the same as the previous patch for
  urllib library. (bsc#1257046, gh#python/cpython#143925)
  CVE-2025-15282-urllib-ctrl-chars.patch
- CVE-2025-15367: basically the same as the previous patch for
  poplib library. (bsc#1257041, gh#python/cpython#143923)
  CVE-2025-15367-poplib-ctrl-chars.patch
- CVE-2025-12781: fix decoding with non-standard Base64 alphabet
  (bsc#1257108, gh#python/cpython#125346)
  CVE-2025-12781-b64decode-alt-chars.patch</changelog>
</package>
<package pkgid="54c776658005914e8f4c66be22867e42d66b74fc3a93e5deb65d9d2fbadfaacd" name="libpython3_11-1_0" arch="x86_64">
  <version epoch="0" ver="3.11.15" rel="150600.3.53.1"/>
  <changelog author="mcepl@cepl.eu" date="1747915200">- Add CVE-2025-4516-DecodeError-handler.patch fixing
  CVE-2025-4516 (bsc#1243273) blocking DecodeError handling
  vulnerability, which could lead to DoS.</changelog>
  <changelog author="mcepl@cepl.eu" date="1749470400">- Update to 3.11.13:
  - Security
  - gh-135034: Fixes multiple issues that allowed tarfile
    extraction filters (filter="data" and filter="tar")
    to be bypassed using crafted symlinks and hard links.
    Addresses CVE-2024-12718 (bsc#1244056), CVE-2025-4138
    (bsc#1244059), CVE-2025-4330 (bsc#1244060), and
    CVE-2025-4517 (bsc#1244032). Also addresses CVE-2025-4435
    (gh#135034, bsc#1244061).
  - gh-133767: Fix use-after-free in the “unicode-escape”
    decoder with a non-“strict” error handler (CVE-2025-4516,
    bsc#1243273).
  - gh-128840: Short-circuit the processing of long IPv6
    addresses early in ipaddress to prevent excessive memory
    consumption and a minor denial-of-service.
  - Library
  - gh-128840: Fix parsing long IPv6 addresses with embedded
    IPv4 address.
  - gh-134062: ipaddress: fix collisions in __hash__() for
    IPv4Network and IPv6Network objects.
  - gh-123409: Fix ipaddress.IPv6Address.reverse_pointer output
    according to RFC 3596, §2.5. Patch by Bénédikt Tran.
  - bpo-43633: Improve the textual representation of
    IPv4-mapped IPv6 addresses (RFC 4291 Sections 2.2, 2.5.5.2)
    in ipaddress. Patch by Oleksandr Pavliuk.
- Remove upstreamed patches:
  - gh-126572-test_ssl-no-stop-ThreadedEchoServer-OSError.patch
  - CVE-2025-4516-DecodeError-handler.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1751371200">- Use one core to build doc. This will make sphinx doc build
  reproducible.
  bsc#1243155</changelog>
  <changelog author="mcepl@cepl.eu" date="1751457600">- Add CVE-2025-6069-quad-complex-HTMLParser.patch to avoid worst
  case quadratic complexity when processing certain crafted
  malformed inputs with HTMLParser (CVE-2025-6069, bsc#1244705).</changelog>
  <changelog author="mcepl@cepl.eu" date="1754049600">- Add CVE-2025-8194-tarfile-no-neg-offsets.patch which now
  validates archives to ensure member offsets are non-negative
  (gh#python/cpython#130577, CVE-2025-8194, bsc#1247249).</changelog>
  <changelog author="dimstar@opensuse.org" date="1758196800">- Require AppStream to validate appdata file instead of deprecated
  appstream-glib.
- Update idle3.appdata.xml to pass the more pedantic appstreamcli.</changelog>
  <changelog author="dimstar@opensuse.org" date="1758283200">- Drop AppStream buildrequires and don't run appstreamcli validate
  as part of the build process: the appdata.xml is not updated by
  source directly, so we have more contol. Having Appstream or the
  deprecated appstream-glib result in a build cycle.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1759147200">- Add gh139257-Support-docutils-0.22.patch to fix build with latest
  docutils (&gt;=0.22) gh#python/cpython#139257</changelog>
  <changelog author="daniel.garcia@suse.com" date="1760529600">- Update to 3.11.14:
  - Security
  - gh-139700: Check consistency of the zip64 end of central
    directory record. Support records with “zip64 extensible data”
    if there are no bytes prepended to the ZIP file
    (CVE-2025-8291, bsc#1251305).
  - gh-139400: xml.parsers.expat: Make sure that parent Expat
    parsers are only garbage-collected once they are no longer
    referenced by subparsers created by
    ExternalEntityParserCreate(). Patch by Sebastian Pipping.
  - gh-135661: Fix parsing start and end tags in
    html.parser.HTMLParser according to the HTML5 standard.
  * Whitespaces no longer accepted between &lt;/ and the tag name. E.g.
    &lt;/ script&gt; does not end the script section.
  * Vertical tabulation (\v) and non-ASCII whitespaces no longer
    recognized as whitespaces. The only whitespaces are \t\n\r\f and
    space.
  * Null character (U+0000) no longer ends the tag name.
  * Attributes and slashes after the tag name in end tags are now
    ignored, instead of terminating after the first &gt; in quoted
    attribute value. E.g. &lt;/script/foo="&gt;"/&gt;.
  * Multiple slashes and whitespaces between the last attribute and
    closing &gt; are now ignored in both start and end tags. E.g. &lt;a
    foo=bar/ //&gt;.
  * Multiple = between attribute name and value are no longer
    collapsed. E.g. &lt;a foo==bar&gt; produces attribute “foo” with value
    “=bar”.
  - gh-135661: Fix CDATA section parsing in html.parser.HTMLParser
    according to the HTML5 standard: ] ]&gt; and ]] &gt; no longer end the
    CDATA section. Add private method _set_support_cdata() which can
    be used to specify how to parse &lt;[CDATA[ — as a CDATA section in
    foreign content (SVG or MathML) or as a bogus comment in the
    HTML namespace.
  - gh-102555: Fix comment parsing in html.parser.HTMLParser
    according to the HTML5 standard. --!&gt; now ends the comment. -- &gt;
    no longer ends the comment. Support abnormally ended empty
    comments &lt;--&gt; and &lt;---&gt;.
  - gh-135462: Fix quadratic complexity in processing specially
    crafted input in html.parser.HTMLParser. End-of-file errors are
    now handled according to the HTML5 specs – comments and
    declarations are automatically closed, tags are ignored.
  - gh-118350: Fix support of escapable raw text mode (elements
    “textarea” and “title”) in html.parser.HTMLParser.
  - gh-86155: html.parser.HTMLParser.close() no longer loses data
    when the &lt;script&gt; tag is not closed. Patch by Waylan Limberg.
  - Library
  - gh-139312: Upgrade bundled libexpat to 2.7.3
  - gh-138998: Update bundled libexpat to 2.7.2
  - gh-130577: tarfile now validates archives to ensure member
    offsets are non-negative. (Contributed by Alexander Enrique
    Urieles Nieto in gh-130577.)
  - gh-135374: Update the bundled copy of setuptools to 79.0.1.
- Drop upstreamed patches:
  - CVE-2025-8194-tarfile-no-neg-offsets.patch
  - CVE-2025-6069-quad-complex-HTMLParser.patch</changelog>
  <changelog author="mcepl@cepl.eu" date="1763035200">- Add CVE-2025-6075-expandvars-perf-degrad.patch avoid simple
  quadratic complexity vulnerabilities of os.path.expandvars()
  (CVE-2025-6075, bsc#1252974).
- Readjusted patches:
  - CVE-2023-52425-libexpat-2.6.0-backport.patch
  - CVE-2023-52425-remove-reparse_deferral-tests.patch
  - fix_configure_rst.patch
  - skip_if_buildbot-extend.patch</changelog>
  <changelog author="mcepl@cepl.eu" date="1766059200">- Add CVE-2025-13836-http-resp-cont-len.patch (bsc#1254400,
  CVE-2025-13836) to prevent reading an HTTP response from
  a server, if no read amount is specified, with using
  Content-Length per default as the length.
- Add CVE-2025-12084-minidom-quad-search.patch prevent quadratic
  behavior in node ID cache clearing (CVE-2025-12084,
  bsc#1254997).
- Add CVE-2025-13837-plistlib-mailicious-length.patch protect
  against OOM when loading malicious content (CVE-2025-13837,
  bsc#1254401).</changelog>
  <changelog author="mcepl@suse.com" date="1770811200">- CVE-2025-11468: preserving parens when folding comments in
  email headers (bsc#1257029, gh#python/cpython#143935).
  CVE-2025-11468-email-hdr-fold-comment.patch
- CVE-2026-0672: rejects control characters in http cookies.
  (bsc#1257031, gh#python/cpython#143919)
  CVE-2026-0672-http-hdr-inject-cookie-Morsel.patch
- CVE-2026-0865: rejecting control characters in
  wsgiref.headers.Headers, which could be abused for injecting
  false HTTP headers. (bsc#1257042, gh#python/cpython#143916)
  CVE-2026-0865-wsgiref-ctrl-chars.patch
- CVE-2025-15366: basically the same as the previous patch for
  IMAP protocol. (bsc#1257044, gh#python/cpython#143921)
  CVE-2025-15366-imap-ctrl-chars.patch
- CVE-2025-15282: basically the same as the previous patch for
  urllib library. (bsc#1257046, gh#python/cpython#143925)
  CVE-2025-15282-urllib-ctrl-chars.patch
- CVE-2025-15367: basically the same as the previous patch for
  poplib library. (bsc#1257041, gh#python/cpython#143923)
  CVE-2025-15367-poplib-ctrl-chars.patch
- CVE-2025-12781: fix decoding with non-standard Base64 alphabet
  (bsc#1257108, gh#python/cpython#125346)
  CVE-2025-12781-b64decode-alt-chars.patch</changelog>
  <changelog author="mcepl@cepl.eu" date="1772798400">- Update to 3.11.15:
  - Security
  - gh-144125: BytesGenerator will now refuse to serialize
    (write) headers that are unsafely folded or delimited; see
    verify_generated_headers. (Contributed by Bas Bloemsaat and
    Petr Viktorin in gh-121650) (bsc#1257181, CVE-2026-1299).
  - gh-143935: Fixed a bug in the folding of comments when
    flattening an email message using a modern email policy.
    Comments consisting of a very long sequence of non-foldable
    characters could trigger a forced line wrap that omitted
    the required leading space on the continuation line,
    causing the remainder of the comment to be interpreted as
    a new header field. This enabled header injection with
    carefully crafted inputs (bsc#1257029 CVE-2025-11468).
  - gh-143925: Reject control characters in data: URL media
    types (bsc#1257046, CVE-2025-15282).
  - gh-143919: Reject control characters in http.cookies.Morsel
    fields and values (bsc#1257031, CVE-2026-0672).
  - gh-143916: Reject C0 control characters within
    wsgiref.headers.Headers fields, values, and parameters
    (bsc#1257042, CVE-2026-0865).
  - gh-142145: Remove quadratic behavior in xml.minidom node ID
    cache clearing. In order to do this without breaking
    existing users, we also add the ownerDocument attribute to
    xml.dom.minidom elements and attributes created by directly
    instantiating the Element or Attr class. Note that this way
    of creating nodes is not supported; creator functions like
    xml.dom.Document.documentElement() should be used instead
    (bsc#1254997, CVE-2025-12084).
  - gh-137836: Add support of the “plaintext” element, RAWTEXT
    elements “xmp”, “iframe”, “noembed” and “noframes”, and
    optionally RAWTEXT element “noscript” in
    html.parser.HTMLParser.
  - gh-136063: email.message: ensure linear complexity for
    legacy HTTP parameters parsing. Patch by Bénédikt Tran.
  - gh-136065: Fix quadratic complexity in
    os.path.expandvars() (bsc#1252974, CVE-2025-6075).
  - gh-119451: Fix a potential memory denial of service in the
    http.client module. When connecting to a malicious server,
    it could cause an arbitrary amount of memory to be
    allocated. This could have led to symptoms including
    a MemoryError, swapping, out of memory (OOM) killed
    processes or containers, or even system crashes
    (CVE-2025-13836, bsc#1254400).
  - gh-119452: Fix a potential memory denial of service in the
    http.server module. When a malicious user is connected to
    the CGI server on Windows, it could cause an arbitrary
    amount of memory to be allocated. This could have led to
    symptoms including a MemoryError, swapping, out of memory
    (OOM) killed processes or containers, or even system
    crashes.
  - gh-119342: Fix a potential memory denial of service in the
    plistlib module. When reading a Plist file received from
    untrusted source, it could cause an arbitrary amount of
    memory to be allocated. This could have led to symptoms
    including a MemoryError, swapping, out of memory (OOM)
    killed processes or containers, or even system crashes
    (bsc#1254401, CVE-2025-13837).
  - Library
  - gh-144833: Fixed a use-after-free in ssl when SSL_new()
    returns NULL in newPySSLSocket(). The error was reported
    via a dangling pointer after the object had already been
    freed.
  - gh-144363: Update bundled libexpat to 2.7.4
  - gh-90949: Add SetAllocTrackerActivationThreshold() and
    SetAllocTrackerMaximumAmplification() to xmlparser objects
    to prevent use of disproportional amounts of dynamic memory
    from within an Expat parser. Patch by Bénédikt Tran.
  - Core and Builtins
  - gh-120384: Fix an array out of bounds crash in
    list_ass_subscript, which could be invoked via some
    specificly tailored input: including concurrent
    modification of a list object, where one thread assigns
    a slice and another clears it.
  - gh-120298: Fix use-after free in list_richcompare_impl
    which can be invoked via some specificly tailored evil
    input.
  Remove upstreamed patches:
  - CVE-2025-11468-email-hdr-fold-comment.patch
  - CVE-2025-12084-minidom-quad-search.patch
  - CVE-2025-13836-http-resp-cont-len.patch
  - CVE-2025-13837-plistlib-mailicious-length.patch
  - CVE-2025-6075-expandvars-perf-degrad.patch
  - CVE-2026-0672-http-hdr-inject-cookie-Morsel.patch
  - CVE-2026-0865-wsgiref-ctrl-chars.patch
  - CVE-2025-15282-urllib-ctrl-chars.patch</changelog>
  <changelog author="mcepl@cepl.eu" date="1773403200">- Add CVE-2026-2297-SourcelessFileLoader-io_open_code.patch
  ensuring that `SourcelessFileLoader` uses `io.open_code` when
  opening `.pyc` files (bsc#1259240, CVE-2026-2297).</changelog>
  <changelog author="mcepl@cepl.eu" date="1773835200">- Fix changelog</changelog>
  <changelog author="mcepl@cepl.eu" date="1774267200">- Add CVE-2026-3644-cookies-Morsel-update-II.patch to reject
  control characters in http.cookies.Morsel.update() and
  http.cookies.BaseCookie.js_output (bsc#1259734, CVE-2026-3644).</changelog>
  <changelog author="mcepl@cepl.eu" date="1774267201">- Add CVE-2026-4224-expat-unbound-C-recursion.patch avoiding
  unbound C recursion in conv_content_model in pyexpat.c
  (bsc#1259735, CVE-2026-4224).</changelog>
  <changelog author="mcepl@cepl.eu" date="1774440000">- Add CVE-2025-13462-tarinfo-header-parse.patch which skips
  TarInfo DIRTYPE normalization during GNU long name handling
  (bsc#1259611, CVE-2025-13462).</changelog>
  <changelog author="mcepl@cepl.eu" date="1774612800">- Add CVE-2026-4519-webbrowser-open-dashes.patch to reject
  leading dashes in webbrowser URLs (bsc#1260026, CVE-2026-4519,
  gh#python/cpython#143930).</changelog>
  <changelog author="mcepl@cepl.eu" date="1775131200">- Add CVE-2026-3479-pkgutil_get_data.patch pkgutil.get_data() has
  the same security model as open(). The documented limitations
  ensure compatibility with non-filesystem loaders; Python
  doesn't check that. (bsc#1259989, CVE-2026-3479,
  gh#python/cpython#146121).</changelog>
</package>
<package pkgid="fdff1ed68e628b5c68a7c9e8544b75f3a4b9ef345889133ad20d65700ede32f2" name="libpython3_6m1_0" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.100.1"/>
  <changelog author="mcepl@cepl.eu" date="1718971200">- Add CVE-2024-0397-memrace_ssl.SSLContext_cert_store.patch
  fixing bsc#1226447 (CVE-2024-0397) by removing memory race
  condition in ssl.SSLContext certificate store methods.</changelog>
  <changelog author="mcepl@cepl.eu" date="1719316800">- Add CVE-2024-4032-private-IP-addrs.patch to fix bsc#1226448
  (CVE-2024-4032) rearranging definition of private v global IP
  addresses.</changelog>
  <changelog author="mcepl@cepl.eu" date="1721044800">- Stop using %%defattr, it seems to be breaking proper executable
  attributes on /usr/bin/ scripts (bsc#1227378).</changelog>
  <changelog author="mcepl@cepl.eu" date="1721649600">- Remove %suse_update_desktop_file macro as it is not useful any
  more.</changelog>
  <changelog author="mcepl@cepl.eu" date="1723464000">- Add CVE-2024-6923-email-hdr-inject.patch to prevent email
  header injection due to unquoted newlines (bsc#1228780,
  CVE-2024-6923).
- Add CVE-2024-7592-quad-complex-cookies.patch fixing quadratic
  complexity in parsing cookies with backslashes (bsc#1229596,
  CVE-2024-7592)
- %{profileopt} variable is set according to the variable
  %{do_profiling} (bsc#1227999)</changelog>
  <changelog author="mcepl@cepl.eu" date="1726660800">- Add CVE-2024-5642-switch-off-NPN.patch switching off the NPN
  support eliminating bsc#1227233 (CVE-2024-5642).</changelog>
  <changelog author="mcepl@cepl.eu" date="1726660801">- Add CVE-2024-6232-ReDOS-backtrack-tarfile.patch prevent
  ReDos via excessive backtracking while parsing header values
  (bsc#1230227, CVE-2024-6232).</changelog>
  <changelog author="mcepl@cepl.eu" date="1727870400">- Drop .pyc files from docdir for reproducible builds
  (bsc#1230906).</changelog>
  <changelog author="mcepl@cepl.eu" date="1729771200">- Add CVE-2024-9287-venv_path_unquoted.patch to properly quote
  path names provided when creating a virtual environment
  (bsc#1232241, CVE-2024-9287)</changelog>
  <changelog author="mcepl@cepl.eu" date="1731499200">- Add CVE-2024-11168-validation-IPv6-addrs.patch
  fixing bsc#1233307 (CVE-2024-11168,
  gh#python/cpython#103848): Improper validation of IPv6 and
  IPvFuture addresses.</changelog>
  <changelog author="mcepl@cepl.eu" date="1731585600">- Remove -IVendor/ from python-config boo#1231795
- Fix CVE-2024-11168-validation-IPv6-addrs.patch
- PGO run of build freezes with parallel processing, switch to -j1</changelog>
  <changelog author="mcepl@cepl.eu" date="1738670400">- Add CVE-2025-0938-sq-brackets-domain-names.patch which
  disallows square brackets ([ and ]) in domain names for parsed
  URLs (bsc#1236705, CVE-2025-0938, gh#python/cpython#105704)</changelog>
  <changelog author="mcepl@suse.com" date="1741780800">- Update CVE-2024-11168-validation-IPv6-addrs.patch
  according to the Debian version
  (gh#python/cpython#103848#issuecomment-2708135083).</changelog>
  <changelog author="mcepl@cepl.eu" date="1747915200">- Add CVE-2025-4516-DecodeError-handler.patch fixing
  CVE-2025-4516 (bsc#1243273) blocking DecodeError handling
  vulnerability, which could lead to DoS.</changelog>
  <changelog author="mcepl@suse.com" date="1749556800">- Add ipaddress-update-pr60.patch from gh#phihag/ipaddress!60 to
  update vendored ipaddress module to 3.8 equivalent
- Add gh-128840_parse-IPv6-with-emb-IPv4.patch to limit buffer
  size for IPv6 address parsing (gh#python/cpython#128840,
  bsc#1244401).
- Update CVE-2025-4516-DecodeError-handler.patch not to break
  _PyBytes_DecodeEscape signature.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1749729600">- Add python36-* provides/obsoletes to enable SLE-12 -&gt; SLE-15
  migration, bsc#1233012</changelog>
  <changelog author="mcepl@cepl.eu" date="1751457600">- Add CVE-2025-4435-normalize-lnk-trgts-tarfile.patch
  Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138,
  CVE-2024-12718, CVE-2025-4435 on tarfile (bsc#1244032,
  bsc#1244061, bsc#1244059, bsc#1244060, bsc#1244056).
  The backported fixes do not contain changes for ntpath.py and
  related tests, because the support for symlinks and junctions
  were added later in Python 3.9, and it does not make sense to
  backport them to 3.6 here.
  The patch is contains the following changes:
  - python@42deeab fixes symlink handling for tarfile.data_filter
  - python@9d2c2a8 fixes handling of existing files/symlinks in tarfile
  - python@00af979 adds a new "strict" argument to realpath()
  - python@dd8f187 fixes mulriple CVE fixes in the tarfile module
  - downstream only fixes that makes the changes work and
    compatible with Python 3.6
- Add CVE-2025-6069-quad-complex-HTMLParser.patch to avoid worst
  case quadratic complexity when processing certain crafted
  malformed inputs with HTMLParser (CVE-2025-6069, bsc#1244705).</changelog>
  <changelog author="mcepl@cepl.eu" date="1754049600">- Add CVE-2025-8194-tarfile-no-neg-offsets.patch which now
  validates archives to ensure member offsets are non-negative
  (gh#python/cpython#130577, CVE-2025-8194, bsc#1247249).</changelog>
  <changelog author="mcepl@cepl.eu" date="1762257600">- Add CVE-2025-8291-consistency-zip64.patch which checks
  consistency of the zip64 end of central directory record, and
  preventing obfuscation of the payload, i.e., you scanning for
  malicious content in a ZIP file with one ZIP parser (let's say
  a Rust one) then unpack it in production with another (e.g.,
  the Python one) and get malicious content that the other parser
  did not see (CVE-2025-8291, bsc#1251305)
- Readjust patches while synchronizing between openSUSE and SLE trees:
  - 99366-patch.dict-can-decorate-async.patch
  - CVE-2007-4559-filter-tarfile_extractall.patch
  - CVE-2020-10735-DoS-no-limit-int-size.patch
  - CVE-2024-6232-ReDOS-backtrack-tarfile.patch
  - CVE-2025-4435-normalize-lnk-trgts-tarfile.patch
  - CVE-2025-8194-tarfile-no-neg-offsets.patch
  - python-3.6.0-multilib-new.patch
  - python3-sorted_tar.patch</changelog>
  <changelog author="mcepl@suse.com" date="1763035200">- Add CVE-2025-6075-expandvars-perf-degrad.patch avoid simple
  quadratic complexity vulnerabilities of os.path.expandvars()
  (CVE-2025-6075, bsc#1252974).
- Rename
  0001-allow-for-reproducible-builds-of-python-packages.patch to
  allow-for-reproducible-builds-of-python-packages.patch because
  with switch to git such names are dangerous.</changelog>
</package>
<package pkgid="e2f9c18521f11a1ae075c587c376dd62f6e4ad8af9af32d53515cc820e2b4fc7" name="libpython3_6m1_0" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.103.1"/>
  <changelog author="mcepl@cepl.eu" date="1719316800">- Add CVE-2024-4032-private-IP-addrs.patch to fix bsc#1226448
  (CVE-2024-4032) rearranging definition of private v global IP
  addresses.</changelog>
  <changelog author="mcepl@cepl.eu" date="1721044800">- Stop using %%defattr, it seems to be breaking proper executable
  attributes on /usr/bin/ scripts (bsc#1227378).</changelog>
  <changelog author="mcepl@cepl.eu" date="1721649600">- Remove %suse_update_desktop_file macro as it is not useful any
  more.</changelog>
  <changelog author="mcepl@cepl.eu" date="1723464000">- Add CVE-2024-6923-email-hdr-inject.patch to prevent email
  header injection due to unquoted newlines (bsc#1228780,
  CVE-2024-6923).
- Add CVE-2024-7592-quad-complex-cookies.patch fixing quadratic
  complexity in parsing cookies with backslashes (bsc#1229596,
  CVE-2024-7592)
- %{profileopt} variable is set according to the variable
  %{do_profiling} (bsc#1227999)</changelog>
  <changelog author="mcepl@cepl.eu" date="1726660800">- Add CVE-2024-5642-switch-off-NPN.patch switching off the NPN
  support eliminating bsc#1227233 (CVE-2024-5642).</changelog>
  <changelog author="mcepl@cepl.eu" date="1726660801">- Add CVE-2024-6232-ReDOS-backtrack-tarfile.patch prevent
  ReDos via excessive backtracking while parsing header values
  (bsc#1230227, CVE-2024-6232).</changelog>
  <changelog author="mcepl@cepl.eu" date="1727870400">- Drop .pyc files from docdir for reproducible builds
  (bsc#1230906).</changelog>
  <changelog author="mcepl@cepl.eu" date="1729771200">- Add CVE-2024-9287-venv_path_unquoted.patch to properly quote
  path names provided when creating a virtual environment
  (bsc#1232241, CVE-2024-9287)</changelog>
  <changelog author="mcepl@cepl.eu" date="1731499200">- Add CVE-2024-11168-validation-IPv6-addrs.patch
  fixing bsc#1233307 (CVE-2024-11168,
  gh#python/cpython#103848): Improper validation of IPv6 and
  IPvFuture addresses.</changelog>
  <changelog author="mcepl@cepl.eu" date="1731585600">- Remove -IVendor/ from python-config boo#1231795
- Fix CVE-2024-11168-validation-IPv6-addrs.patch
- PGO run of build freezes with parallel processing, switch to -j1</changelog>
  <changelog author="mcepl@cepl.eu" date="1738670400">- Add CVE-2025-0938-sq-brackets-domain-names.patch which
  disallows square brackets ([ and ]) in domain names for parsed
  URLs (bsc#1236705, CVE-2025-0938, gh#python/cpython#105704)</changelog>
  <changelog author="mcepl@suse.com" date="1741780800">- Update CVE-2024-11168-validation-IPv6-addrs.patch
  according to the Debian version
  (gh#python/cpython#103848#issuecomment-2708135083).</changelog>
  <changelog author="mcepl@cepl.eu" date="1747915200">- Add CVE-2025-4516-DecodeError-handler.patch fixing
  CVE-2025-4516 (bsc#1243273) blocking DecodeError handling
  vulnerability, which could lead to DoS.</changelog>
  <changelog author="mcepl@suse.com" date="1749556800">- Add ipaddress-update-pr60.patch from gh#phihag/ipaddress!60 to
  update vendored ipaddress module to 3.8 equivalent
- Add gh-128840_parse-IPv6-with-emb-IPv4.patch to limit buffer
  size for IPv6 address parsing (gh#python/cpython#128840,
  bsc#1244401).
- Update CVE-2025-4516-DecodeError-handler.patch not to break
  _PyBytes_DecodeEscape signature.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1749729600">- Add python36-* provides/obsoletes to enable SLE-12 -&gt; SLE-15
  migration, bsc#1233012</changelog>
  <changelog author="mcepl@cepl.eu" date="1751457600">- Add CVE-2025-4435-normalize-lnk-trgts-tarfile.patch
  Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138,
  CVE-2024-12718, CVE-2025-4435 on tarfile (bsc#1244032,
  bsc#1244061, bsc#1244059, bsc#1244060, bsc#1244056).
  The backported fixes do not contain changes for ntpath.py and
  related tests, because the support for symlinks and junctions
  were added later in Python 3.9, and it does not make sense to
  backport them to 3.6 here.
  The patch is contains the following changes:
  - python@42deeab fixes symlink handling for tarfile.data_filter
  - python@9d2c2a8 fixes handling of existing files/symlinks in tarfile
  - python@00af979 adds a new "strict" argument to realpath()
  - python@dd8f187 fixes mulriple CVE fixes in the tarfile module
  - downstream only fixes that makes the changes work and
    compatible with Python 3.6
- Add CVE-2025-6069-quad-complex-HTMLParser.patch to avoid worst
  case quadratic complexity when processing certain crafted
  malformed inputs with HTMLParser (CVE-2025-6069, bsc#1244705).</changelog>
  <changelog author="mcepl@cepl.eu" date="1754049600">- Add CVE-2025-8194-tarfile-no-neg-offsets.patch which now
  validates archives to ensure member offsets are non-negative
  (gh#python/cpython#130577, CVE-2025-8194, bsc#1247249).</changelog>
  <changelog author="mcepl@cepl.eu" date="1762257600">- Add CVE-2025-8291-consistency-zip64.patch which checks
  consistency of the zip64 end of central directory record, and
  preventing obfuscation of the payload, i.e., you scanning for
  malicious content in a ZIP file with one ZIP parser (let's say
  a Rust one) then unpack it in production with another (e.g.,
  the Python one) and get malicious content that the other parser
  did not see (CVE-2025-8291, bsc#1251305)
- Readjust patches while synchronizing between openSUSE and SLE trees:
  - F00251-change-user-install-location.patch
  - doc-py38-to-py36.patch
  - gh126985-mv-pyvenv.cfg2getpath.patch</changelog>
  <changelog author="mcepl@suse.com" date="1763035200">- Add CVE-2025-6075-expandvars-perf-degrad.patch avoid simple
  quadratic complexity vulnerabilities of os.path.expandvars()
  (CVE-2025-6075, bsc#1252974).
- Skip test_curses on ppc64le (gh#python/cpython#141534)</changelog>
  <changelog author="mcepl@cepl.eu" date="1766059200">- Add CVE-2025-13836-http-resp-cont-len.patch (bsc#1254400,
  CVE-2025-13836) to prevent reading an HTTP response from
  a server, if no read amount is specified, with using
  Content-Length per default as the length.
- Add CVE-2025-12084-minidom-quad-search.patch prevent quadratic
  behavior in node ID cache clearing (CVE-2025-12084,
  bsc#1254997).
- Add CVE-2025-13837-plistlib-mailicious-length.patch protect
  against OOM when loading malicious content (CVE-2025-13837,
  bsc#1254401).</changelog>
</package>
<package pkgid="bfcf6cb85a1e0da1cde8f2e8facd1836a3b9fcd2891f614d8b8d651cbf7eb0cf" name="libpython3_6m1_0" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.106.1"/>
  <changelog author="mcepl@cepl.eu" date="1721044800">- Stop using %%defattr, it seems to be breaking proper executable
  attributes on /usr/bin/ scripts (bsc#1227378).</changelog>
  <changelog author="mcepl@cepl.eu" date="1721649600">- Remove %suse_update_desktop_file macro as it is not useful any
  more.</changelog>
  <changelog author="mcepl@cepl.eu" date="1723464000">- Add CVE-2024-6923-email-hdr-inject.patch to prevent email
  header injection due to unquoted newlines (bsc#1228780,
  CVE-2024-6923).
- Add CVE-2024-7592-quad-complex-cookies.patch fixing quadratic
  complexity in parsing cookies with backslashes (bsc#1229596,
  CVE-2024-7592)
- %{profileopt} variable is set according to the variable
  %{do_profiling} (bsc#1227999)</changelog>
  <changelog author="mcepl@cepl.eu" date="1726660800">- Add CVE-2024-5642-switch-off-NPN.patch switching off the NPN
  support eliminating bsc#1227233 (CVE-2024-5642).</changelog>
  <changelog author="mcepl@cepl.eu" date="1726660801">- Add CVE-2024-6232-ReDOS-backtrack-tarfile.patch prevent
  ReDos via excessive backtracking while parsing header values
  (bsc#1230227, CVE-2024-6232).</changelog>
  <changelog author="mcepl@cepl.eu" date="1727870400">- Drop .pyc files from docdir for reproducible builds
  (bsc#1230906).</changelog>
  <changelog author="mcepl@cepl.eu" date="1729771200">- Add CVE-2024-9287-venv_path_unquoted.patch to properly quote
  path names provided when creating a virtual environment
  (bsc#1232241, CVE-2024-9287)</changelog>
  <changelog author="mcepl@cepl.eu" date="1731499200">- Add CVE-2024-11168-validation-IPv6-addrs.patch
  fixing bsc#1233307 (CVE-2024-11168,
  gh#python/cpython#103848): Improper validation of IPv6 and
  IPvFuture addresses.</changelog>
  <changelog author="mcepl@cepl.eu" date="1731585600">- Remove -IVendor/ from python-config boo#1231795
- Fix CVE-2024-11168-validation-IPv6-addrs.patch
- PGO run of build freezes with parallel processing, switch to -j1</changelog>
  <changelog author="mcepl@cepl.eu" date="1738670400">- Add CVE-2025-0938-sq-brackets-domain-names.patch which
  disallows square brackets ([ and ]) in domain names for parsed
  URLs (bsc#1236705, CVE-2025-0938, gh#python/cpython#105704)</changelog>
  <changelog author="mcepl@suse.com" date="1741780800">- Update CVE-2024-11168-validation-IPv6-addrs.patch
  according to the Debian version
  (gh#python/cpython#103848#issuecomment-2708135083).</changelog>
  <changelog author="mcepl@cepl.eu" date="1747915200">- Add CVE-2025-4516-DecodeError-handler.patch fixing
  CVE-2025-4516 (bsc#1243273) blocking DecodeError handling
  vulnerability, which could lead to DoS.</changelog>
  <changelog author="mcepl@suse.com" date="1749556800">- Add ipaddress-update-pr60.patch from gh#phihag/ipaddress!60 to
  update vendored ipaddress module to 3.8 equivalent
- Add gh-128840_parse-IPv6-with-emb-IPv4.patch to limit buffer
  size for IPv6 address parsing (gh#python/cpython#128840,
  bsc#1244401).
- Update CVE-2025-4516-DecodeError-handler.patch not to break
  _PyBytes_DecodeEscape signature.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1749729600">- Add python36-* provides/obsoletes to enable SLE-12 -&gt; SLE-15
  migration, bsc#1233012</changelog>
  <changelog author="mcepl@cepl.eu" date="1751457600">- Add CVE-2025-4435-normalize-lnk-trgts-tarfile.patch
  Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138,
  CVE-2024-12718, CVE-2025-4435 on tarfile (bsc#1244032,
  bsc#1244061, bsc#1244059, bsc#1244060, bsc#1244056).
  The backported fixes do not contain changes for ntpath.py and
  related tests, because the support for symlinks and junctions
  were added later in Python 3.9, and it does not make sense to
  backport them to 3.6 here.
  The patch is contains the following changes:
  - python@42deeab fixes symlink handling for tarfile.data_filter
  - python@9d2c2a8 fixes handling of existing files/symlinks in tarfile
  - python@00af979 adds a new "strict" argument to realpath()
  - python@dd8f187 fixes mulriple CVE fixes in the tarfile module
  - downstream only fixes that makes the changes work and
    compatible with Python 3.6
- Add CVE-2025-6069-quad-complex-HTMLParser.patch to avoid worst
  case quadratic complexity when processing certain crafted
  malformed inputs with HTMLParser (CVE-2025-6069, bsc#1244705).</changelog>
  <changelog author="mcepl@cepl.eu" date="1754049600">- Add CVE-2025-8194-tarfile-no-neg-offsets.patch which now
  validates archives to ensure member offsets are non-negative
  (gh#python/cpython#130577, CVE-2025-8194, bsc#1247249).</changelog>
  <changelog author="mcepl@cepl.eu" date="1762257600">- Add CVE-2025-8291-consistency-zip64.patch which checks
  consistency of the zip64 end of central directory record, and
  preventing obfuscation of the payload, i.e., you scanning for
  malicious content in a ZIP file with one ZIP parser (let's say
  a Rust one) then unpack it in production with another (e.g.,
  the Python one) and get malicious content that the other parser
  did not see (CVE-2025-8291, bsc#1251305)
- Readjust patches while synchronizing between openSUSE and SLE trees:
  - F00251-change-user-install-location.patch
  - doc-py38-to-py36.patch
  - gh126985-mv-pyvenv.cfg2getpath.patch</changelog>
  <changelog author="mcepl@suse.com" date="1763121600">- Add CVE-2025-6075-expandvars-perf-degrad.patch avoid simple
  quadratic complexity vulnerabilities of os.path.expandvars()
  (CVE-2025-6075, bsc#1252974).
- Skip test_curses on ppc64le (gh#python/cpython#141534)</changelog>
  <changelog author="mcepl@cepl.eu" date="1766059200">- Add CVE-2025-13836-http-resp-cont-len.patch (bsc#1254400,
  CVE-2025-13836) to prevent reading an HTTP response from
  a server, if no read amount is specified, with using
  Content-Length per default as the length.
- Add CVE-2025-12084-minidom-quad-search.patch prevent quadratic
  behavior in node ID cache clearing (CVE-2025-12084,
  bsc#1254997).
- Add CVE-2025-13837-plistlib-mailicious-length.patch protect
  against OOM when loading malicious content (CVE-2025-13837,
  bsc#1254401).</changelog>
  <changelog author="mcepl@suse.com" date="1770811200">- CVE-2025-11468: preserving parens when folding comments in
  email headers (bsc#1257029, gh#python/cpython#143935).
  CVE-2025-11468-email-hdr-fold-comment.patch
- CVE-2026-0672: rejects control characters in http cookies.
  (bsc#1257031, gh#python/cpython#143919)
  CVE-2026-0672-http-hdr-inject-cookie-Morsel.patch
- CVE-2026-0865: rejecting control characters in
  wsgiref.headers.Headers, which could be abused for injecting
  false HTTP headers. (bsc#1257042, gh#python/cpython#143916)
  CVE-2026-0865-wsgiref-ctrl-chars.patch
- CVE-2025-15366: basically the same as the previous patch for
  IMAP protocol. (bsc#1257044, gh#python/cpython#143921)
  CVE-2025-15366-imap-ctrl-chars.patch
- CVE-2025-15282: basically the same as the previous patch for
  urllib library. (bsc#1257046, gh#python/cpython#143925)
  CVE-2025-15282-urllib-ctrl-chars.patch
- CVE-2025-15367: basically the same as the previous patch for
  poplib library. (bsc#1257041, gh#python/cpython#143923)
  CVE-2025-15367-poplib-ctrl-chars.patch</changelog>
</package>
<package pkgid="1286fc64c9d9f2c04852d660a305027d9f647138861898a09fa169929809b74d" name="libpython3_6m1_0" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.109.1"/>
  <changelog author="mcepl@cepl.eu" date="1721044800">- Stop using %%defattr, it seems to be breaking proper executable
  attributes on /usr/bin/ scripts (bsc#1227378).</changelog>
  <changelog author="mcepl@cepl.eu" date="1721649600">- Remove %suse_update_desktop_file macro as it is not useful any
  more.</changelog>
  <changelog author="mcepl@cepl.eu" date="1723464000">- Add CVE-2024-6923-email-hdr-inject.patch to prevent email
  header injection due to unquoted newlines (bsc#1228780,
  CVE-2024-6923).
- Add CVE-2024-7592-quad-complex-cookies.patch fixing quadratic
  complexity in parsing cookies with backslashes (bsc#1229596,
  CVE-2024-7592)
- %{profileopt} variable is set according to the variable
  %{do_profiling} (bsc#1227999)</changelog>
  <changelog author="mcepl@cepl.eu" date="1726660800">- Add CVE-2024-5642-switch-off-NPN.patch switching off the NPN
  support eliminating bsc#1227233 (CVE-2024-5642).</changelog>
  <changelog author="mcepl@cepl.eu" date="1726660801">- Add CVE-2024-6232-ReDOS-backtrack-tarfile.patch prevent
  ReDos via excessive backtracking while parsing header values
  (bsc#1230227, CVE-2024-6232).</changelog>
  <changelog author="mcepl@cepl.eu" date="1727870400">- Drop .pyc files from docdir for reproducible builds
  (bsc#1230906).</changelog>
  <changelog author="mcepl@cepl.eu" date="1729771200">- Add CVE-2024-9287-venv_path_unquoted.patch to properly quote
  path names provided when creating a virtual environment
  (bsc#1232241, CVE-2024-9287)</changelog>
  <changelog author="mcepl@cepl.eu" date="1731499200">- Add CVE-2024-11168-validation-IPv6-addrs.patch
  fixing bsc#1233307 (CVE-2024-11168,
  gh#python/cpython#103848): Improper validation of IPv6 and
  IPvFuture addresses.</changelog>
  <changelog author="mcepl@cepl.eu" date="1731585600">- Remove -IVendor/ from python-config boo#1231795
- Fix CVE-2024-11168-validation-IPv6-addrs.patch
- PGO run of build freezes with parallel processing, switch to -j1</changelog>
  <changelog author="mcepl@cepl.eu" date="1738670400">- Add CVE-2025-0938-sq-brackets-domain-names.patch which
  disallows square brackets ([ and ]) in domain names for parsed
  URLs (bsc#1236705, CVE-2025-0938, gh#python/cpython#105704)</changelog>
  <changelog author="mcepl@suse.com" date="1741780800">- Update CVE-2024-11168-validation-IPv6-addrs.patch
  according to the Debian version
  (gh#python/cpython#103848#issuecomment-2708135083).</changelog>
  <changelog author="mcepl@cepl.eu" date="1747915200">- Add CVE-2025-4516-DecodeError-handler.patch fixing
  CVE-2025-4516 (bsc#1243273) blocking DecodeError handling
  vulnerability, which could lead to DoS.</changelog>
  <changelog author="mcepl@suse.com" date="1749556800">- Add ipaddress-update-pr60.patch from gh#phihag/ipaddress!60 to
  update vendored ipaddress module to 3.8 equivalent
- Add gh-128840_parse-IPv6-with-emb-IPv4.patch to limit buffer
  size for IPv6 address parsing (gh#python/cpython#128840,
  bsc#1244401).
- Update CVE-2025-4516-DecodeError-handler.patch not to break
  _PyBytes_DecodeEscape signature.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1749729600">- Add python36-* provides/obsoletes to enable SLE-12 -&gt; SLE-15
  migration, bsc#1233012</changelog>
  <changelog author="mcepl@cepl.eu" date="1751457600">- Add CVE-2025-4435-normalize-lnk-trgts-tarfile.patch
  Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138,
  CVE-2024-12718, CVE-2025-4435 on tarfile (bsc#1244032,
  bsc#1244061, bsc#1244059, bsc#1244060, bsc#1244056).
  The backported fixes do not contain changes for ntpath.py and
  related tests, because the support for symlinks and junctions
  were added later in Python 3.9, and it does not make sense to
  backport them to 3.6 here.
  The patch is contains the following changes:
  - python@42deeab fixes symlink handling for tarfile.data_filter
  - python@9d2c2a8 fixes handling of existing files/symlinks in tarfile
  - python@00af979 adds a new "strict" argument to realpath()
  - python@dd8f187 fixes mulriple CVE fixes in the tarfile module
  - downstream only fixes that makes the changes work and
    compatible with Python 3.6
- Add CVE-2025-6069-quad-complex-HTMLParser.patch to avoid worst
  case quadratic complexity when processing certain crafted
  malformed inputs with HTMLParser (CVE-2025-6069, bsc#1244705).</changelog>
  <changelog author="mcepl@cepl.eu" date="1754049600">- Add CVE-2025-8194-tarfile-no-neg-offsets.patch which now
  validates archives to ensure member offsets are non-negative
  (gh#python/cpython#130577, CVE-2025-8194, bsc#1247249).</changelog>
  <changelog author="mcepl@cepl.eu" date="1762257600">- Add CVE-2025-8291-consistency-zip64.patch which checks
  consistency of the zip64 end of central directory record, and
  preventing obfuscation of the payload, i.e., you scanning for
  malicious content in a ZIP file with one ZIP parser (let's say
  a Rust one) then unpack it in production with another (e.g.,
  the Python one) and get malicious content that the other parser
  did not see (CVE-2025-8291, bsc#1251305)
- Readjust patches while synchronizing between openSUSE and SLE trees:
  - F00251-change-user-install-location.patch
  - doc-py38-to-py36.patch
  - gh126985-mv-pyvenv.cfg2getpath.patch</changelog>
  <changelog author="mcepl@suse.com" date="1763121600">- Add CVE-2025-6075-expandvars-perf-degrad.patch avoid simple
  quadratic complexity vulnerabilities of os.path.expandvars()
  (CVE-2025-6075, bsc#1252974).
- Skip test_curses on ppc64le (gh#python/cpython#141534)</changelog>
  <changelog author="mcepl@cepl.eu" date="1766059200">- Add CVE-2025-13836-http-resp-cont-len.patch (bsc#1254400,
  CVE-2025-13836) to prevent reading an HTTP response from
  a server, if no read amount is specified, with using
  Content-Length per default as the length.
- Add CVE-2025-12084-minidom-quad-search.patch prevent quadratic
  behavior in node ID cache clearing (CVE-2025-12084,
  bsc#1254997).
- Add CVE-2025-13837-plistlib-mailicious-length.patch protect
  against OOM when loading malicious content (CVE-2025-13837,
  bsc#1254401).</changelog>
  <changelog author="mcepl@suse.com" date="1770811200">- CVE-2025-11468: preserving parens when folding comments in
  email headers (bsc#1257029, gh#python/cpython#143935).
  CVE-2025-11468-email-hdr-fold-comment.patch
- CVE-2026-0672: rejects control characters in http cookies.
  (bsc#1257031, gh#python/cpython#143919)
  CVE-2026-0672-http-hdr-inject-cookie-Morsel.patch
- CVE-2026-0865: rejecting control characters in
  wsgiref.headers.Headers, which could be abused for injecting
  false HTTP headers. (bsc#1257042, gh#python/cpython#143916)
  CVE-2026-0865-wsgiref-ctrl-chars.patch
- CVE-2025-15366: basically the same as the previous patch for
  IMAP protocol. (bsc#1257044, gh#python/cpython#143921)
  CVE-2025-15366-imap-ctrl-chars.patch
- CVE-2025-15282: basically the same as the previous patch for
  urllib library. (bsc#1257046, gh#python/cpython#143925)
  CVE-2025-15282-urllib-ctrl-chars.patch
- CVE-2025-15367: basically the same as the previous patch for
  poplib library. (bsc#1257041, gh#python/cpython#143923)
  CVE-2025-15367-poplib-ctrl-chars.patch
- Modify CVE-2024-6923-email-hdr-inject.patch to also include
  patch for bsc#1257181 (CVE-2026-1299).</changelog>
</package>
<package pkgid="5f40b6ad38a9d34727a54f927605a2633daa285f1c5bb3ecdc1db8964cecfb5a" name="libpython3_6m1_0" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.118.1"/>
  <changelog author="mcepl@cepl.eu" date="1747915200">- Add CVE-2025-4516-DecodeError-handler.patch fixing
  CVE-2025-4516 (bsc#1243273) blocking DecodeError handling
  vulnerability, which could lead to DoS.</changelog>
  <changelog author="mcepl@suse.com" date="1749556800">- Add ipaddress-update-pr60.patch from gh#phihag/ipaddress!60 to
  update vendored ipaddress module to 3.8 equivalent
- Add gh-128840_parse-IPv6-with-emb-IPv4.patch to limit buffer
  size for IPv6 address parsing (gh#python/cpython#128840,
  bsc#1244401).
- Update CVE-2025-4516-DecodeError-handler.patch not to break
  _PyBytes_DecodeEscape signature.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1749729600">- Add python36-* provides/obsoletes to enable SLE-12 -&gt; SLE-15
  migration, bsc#1233012</changelog>
  <changelog author="mcepl@cepl.eu" date="1751457600">- Add CVE-2025-4435-normalize-lnk-trgts-tarfile.patch
  Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138,
  CVE-2024-12718, CVE-2025-4435 on tarfile (bsc#1244032,
  bsc#1244061, bsc#1244059, bsc#1244060, bsc#1244056).
  The backported fixes do not contain changes for ntpath.py and
  related tests, because the support for symlinks and junctions
  were added later in Python 3.9, and it does not make sense to
  backport them to 3.6 here.
  The patch is contains the following changes:
  - python@42deeab fixes symlink handling for tarfile.data_filter
  - python@9d2c2a8 fixes handling of existing files/symlinks in tarfile
  - python@00af979 adds a new "strict" argument to realpath()
  - python@dd8f187 fixes mulriple CVE fixes in the tarfile module
  - downstream only fixes that makes the changes work and
    compatible with Python 3.6
- Add CVE-2025-6069-quad-complex-HTMLParser.patch to avoid worst
  case quadratic complexity when processing certain crafted
  malformed inputs with HTMLParser (CVE-2025-6069, bsc#1244705).</changelog>
  <changelog author="mcepl@cepl.eu" date="1754049600">- Add CVE-2025-8194-tarfile-no-neg-offsets.patch which now
  validates archives to ensure member offsets are non-negative
  (gh#python/cpython#130577, CVE-2025-8194, bsc#1247249).</changelog>
  <changelog author="mcepl@cepl.eu" date="1762257600">- Add CVE-2025-8291-consistency-zip64.patch which checks
  consistency of the zip64 end of central directory record, and
  preventing obfuscation of the payload, i.e., you scanning for
  malicious content in a ZIP file with one ZIP parser (let's say
  a Rust one) then unpack it in production with another (e.g.,
  the Python one) and get malicious content that the other parser
  did not see (CVE-2025-8291, bsc#1251305)
- Readjust patches while synchronizing between openSUSE and SLE trees:
  - F00251-change-user-install-location.patch
  - doc-py38-to-py36.patch
  - gh126985-mv-pyvenv.cfg2getpath.patch</changelog>
  <changelog author="mcepl@suse.com" date="1763035200">- Add CVE-2025-6075-expandvars-perf-degrad.patch avoid simple
  quadratic complexity vulnerabilities of os.path.expandvars()
  (CVE-2025-6075, bsc#1252974).
- Skip test_curses on ppc64le (gh#python/cpython#141534)</changelog>
  <changelog author="mcepl@cepl.eu" date="1766059200">- Add CVE-2025-13836-http-resp-cont-len.patch (bsc#1254400,
  CVE-2025-13836) to prevent reading an HTTP response from
  a server, if no read amount is specified, with using
  Content-Length per default as the length.
- Add CVE-2025-12084-minidom-quad-search.patch prevent quadratic
  behavior in node ID cache clearing (CVE-2025-12084,
  bsc#1254997).
- Add CVE-2025-13837-plistlib-mailicious-length.patch protect
  against OOM when loading malicious content (CVE-2025-13837,
  bsc#1254401).</changelog>
  <changelog author="mcepl@suse.com" date="1770811200">- CVE-2025-11468: preserving parens when folding comments in
  email headers (bsc#1257029, gh#python/cpython#143935).
  CVE-2025-11468-email-hdr-fold-comment.patch
- CVE-2026-0672: rejects control characters in http cookies.
  (bsc#1257031, gh#python/cpython#143919)
  CVE-2026-0672-http-hdr-inject-cookie-Morsel.patch
- CVE-2026-0865: rejecting control characters in
  wsgiref.headers.Headers, which could be abused for injecting
  false HTTP headers. (bsc#1257042, gh#python/cpython#143916)
  CVE-2026-0865-wsgiref-ctrl-chars.patch
- CVE-2025-15366: basically the same as the previous patch for
  IMAP protocol. (bsc#1257044, gh#python/cpython#143921)
  CVE-2025-15366-imap-ctrl-chars.patch
- CVE-2025-15282: basically the same as the previous patch for
  urllib library. (bsc#1257046, gh#python/cpython#143925)
  CVE-2025-15282-urllib-ctrl-chars.patch
- CVE-2025-15367: basically the same as the previous patch for
  poplib library. (bsc#1257041, gh#python/cpython#143923)
  CVE-2025-15367-poplib-ctrl-chars.patch
- Modify CVE-2024-6923-email-hdr-inject.patch to also include
  patch for bsc#1257181 (CVE-2026-1299).</changelog>
  <changelog author="mcepl@cepl.eu" date="1774267200">- Add CVE-2026-3644-cookies-Morsel-update-II.patch to reject
  control characters in http.cookies.Morsel.update() and
  http.cookies.BaseCookie.js_output (bsc#1259734, CVE-2026-3644).</changelog>
  <changelog author="mcepl@cepl.eu" date="1774267201">- Add CVE-2026-4224-expat-unbound-C-recursion.patch avoiding
  unbound C recursion in conv_content_model in pyexpat.c
  (bsc#1259735, CVE-2026-4224).</changelog>
  <changelog author="mcepl@cepl.eu" date="1774440000">- Add CVE-2025-13462-tarinfo-header-parse.patch which skips
  TarInfo DIRTYPE normalization during GNU long name handling
  (bsc#1259611, CVE-2025-13462).</changelog>
  <changelog author="mcepl@cepl.eu" date="1774612800">- Add CVE-2026-4519-webbrowser-open-dashes.patch to reject
  leading dashes in webbrowser URLs (bsc#1260026, CVE-2026-4519,
  gh#python/cpython#143930).</changelog>
  <changelog author="mcepl@cepl.eu" date="1775131200">- Add CVE-2026-3479-pkgutil_get_data.patch pkgutil.get_data() has
  the same security model as open(). The documented limitations
  ensure compatibility with non-filesystem loaders; Python
  doesn't check that. (bsc#1259989, CVE-2026-3479,
  gh#python/cpython#146121).</changelog>
  <changelog author="mcepl@cepl.eu" date="1776254400">- Add CVE-2026-3446-base64-padding.patch preventing ignoring
  excess Base64 data after the first padded quad (bsc#1261970,
  CVE-2026-3446, gh#python/cpython#145264).</changelog>
  <changelog author="mcepl@suse.com" date="1776859200">- Fix calling of sphinx build with non-standard Python
  interpreter (including new patch sphinx-set-PYTHON.patch).</changelog>
  <changelog author="mcepl@cepl.eu" date="1777032000">- Add CVE-2026-6100-use-after-free-decompression.patch preventing
  dangling pointer which can end in the use-after-free error
  (CVE-2026-6100, bsc#1262098, gh#python/cpython#148395).</changelog>
  <changelog author="mcepl@cepl.eu" date="1777118400">- Add CVE-2026-4786-webbrowser-open-action.patch, which fixes
  webbrowser %action substitution bypass of dash-prefix check
  (bsc#1262319, CVE-2026-4786, gh#python/cpython#148169).</changelog>
  <changelog author="mcepl@cepl.eu" date="1777118401">- Add CVE-2026-1502-reject-CRLF-HTTP-tunnel.patch which rejects
  CR/LF in HTTP tunnel request headers (bsc#1261969,
  CVE-2026-1502, gh#python/cpython#146211).</changelog>
  <changelog author="mcepl@cepl.eu" date="1777291200">- Add CVE-2026-6019-Morsel-js_output.patch protects against HTML
  injection by Base64-encoding cookie values embedded in JS
  (bsc#1262654, CVE-2026-6019, gh#python/cpython#90309).</changelog>
</package>
<package pkgid="93e0eaa923715f165f101ac06247c4e7885e0f0f6c0d4423dc41bb6de570c77a" name="libpython3_6m1_0" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.97.1"/>
  <changelog author="mcepl@cepl.eu" date="1714046400">- bsc#1221854 (CVE-2024-0450) Add
  CVE-2024-0450-zipfile-avoid-quoted-overlap-zipbomb.patch
  detecting the vulnerability of the "quoted-overlap" zipbomb
  (from gh#python/cpython!110016).
- Add bh42369-thread-safety-zipfile-SharedFile.patch (from
  gh#python/cpython!26974) required by the previous patch.
- Add expat-260-test_xml_etree-reparse-deferral.patch to make the
  interpreter work with patched libexpat in our distros.
- Move all patches from locally sourced to the branch
  opensuse-3.6 branch at GitHub repo, and move all metadata to
  commits themselves (readable in the headers of each patch).
- Add bpo-41675-modernize-siginterrupt.patch to make Python build
  cleanly even on more recent SPs of SLE-15
  (gh#python/cpython#85841).
- Remove patches:
  - bpo36263-Fix_hashlib_scrypt.patch - fix against bug in
    OpenSSL fixed in 1.1.1c (gh#openssl/openssl!8483), so this
    patch is redundant on all SUSE-supported distros
  - python-3.3.0b1-test-posix_fadvise.patch - protection
    against the kernel issues which has been fixed in
    gh#torvalds/linux@3d3727cdb07f, which has been included in
    all our kernels more recent than SLE-11.
  - python-3.3.3-skip-distutils-test_sysconfig_module.patch -
    skips a test, which should be relevant only for testing on
    Mac OS X systems with universal builds. I have no valid
    record, that this test would be ever problematic on Linux.
  - bpo-36576-skip_tests_for_OpenSSL-111.patch, which was
    included already in Python 3.5.</changelog>
  <changelog author="mcepl@cepl.eu" date="1715083200">- Add bpo38361-syslog-no-slash-ident.patch (bsc#1222109,
  gh#python/cpython!16557) fixes syslog making default "ident"
  from sys.argv[0].
- Update CVE-2023-52425-libexpat-2.6.0-backport.patch so that
  it uses features sniffing, not just comparing version number
  (bsc#1220664, bsc#1219559, bsc#1221563, bsc#1222075).
- Remove support-expat-CVE-2022-25236-patched.patch, which was
  the previous name of this patch.
- Add CVE-2023-52425-remove-reparse_deferral-tests.patch skipping
  failing tests.
- Refresh patches:
  - CVE-2023-27043-email-parsing-errors.patch
  - fix_configure_rst.patch
  - skip_if_buildbot-extend.patch</changelog>
  <changelog author="mcepl@cepl.eu" date="1718971200">- Add CVE-2024-0397-memrace_ssl.SSLContext_cert_store.patch
  fixing bsc#1226447 (CVE-2024-0397) by removing memory race
  condition in ssl.SSLContext certificate store methods.</changelog>
  <changelog author="mcepl@cepl.eu" date="1719316800">- Add CVE-2024-4032-private-IP-addrs.patch to fix bsc#1226448
  (CVE-2024-4032) rearranging definition of private v global IP
  addresses.</changelog>
  <changelog author="mcepl@cepl.eu" date="1721044800">- Stop using %%defattr, it seems to be breaking proper executable
  attributes on /usr/bin/ scripts (bsc#1227378).</changelog>
  <changelog author="mcepl@cepl.eu" date="1721649600">- Remove %suse_update_desktop_file macro as it is not useful any
  more.</changelog>
  <changelog author="mcepl@cepl.eu" date="1723464000">- Add CVE-2024-6923-email-hdr-inject.patch to prevent email
  header injection due to unquoted newlines (bsc#1228780,
  CVE-2024-6923).
- Add CVE-2024-7592-quad-complex-cookies.patch fixing quadratic
  complexity in parsing cookies with backslashes (bsc#1229596,
  CVE-2024-7592)
- %{profileopt} variable is set according to the variable
  %{do_profiling} (bsc#1227999)</changelog>
  <changelog author="mcepl@cepl.eu" date="1726660800">- Add CVE-2024-5642-switch-off-NPN.patch switching off the NPN
  support eliminating bsc#1227233 (CVE-2024-5642).</changelog>
  <changelog author="mcepl@cepl.eu" date="1726660801">- Add CVE-2024-6232-ReDOS-backtrack-tarfile.patch prevent
  ReDos via excessive backtracking while parsing header values
  (bsc#1230227, CVE-2024-6232).</changelog>
  <changelog author="mcepl@cepl.eu" date="1727870400">- Drop .pyc files from docdir for reproducible builds
  (bsc#1230906).</changelog>
  <changelog author="mcepl@cepl.eu" date="1729771200">- Add CVE-2024-9287-venv_path_unquoted.patch to properly quote
  path names provided when creating a virtual environment
  (bsc#1232241, CVE-2024-9287)</changelog>
  <changelog author="mcepl@cepl.eu" date="1731499200">- Add CVE-2024-11168-validation-IPv6-addrs.patch
  fixing bsc#1233307 (CVE-2024-11168,
  gh#python/cpython#103848): Improper validation of IPv6 and
  IPvFuture addresses.</changelog>
  <changelog author="mcepl@cepl.eu" date="1731585600">- Remove -IVendor/ from python-config boo#1231795
- Fix CVE-2024-11168-validation-IPv6-addrs.patch
- PGO run of build freezes with parallel processing, switch to -j1</changelog>
  <changelog author="mcepl@cepl.eu" date="1738670400">- Add CVE-2025-0938-sq-brackets-domain-names.patch which
  disallows square brackets ([ and ]) in domain names for parsed
  URLs (bsc#1236705, CVE-2025-0938, gh#python/cpython#105704)</changelog>
  <changelog author="mcepl@suse.com" date="1741780800">- Update CVE-2024-11168-validation-IPv6-addrs.patch
  according to the Debian version
  (gh#python/cpython#103848#issuecomment-2708135083).</changelog>
  <changelog author="mcepl@cepl.eu" date="1747915200">- Add CVE-2025-4516-DecodeError-handler.patch fixing
  CVE-2025-4516 (bsc#1243273) blocking DecodeError handling
  vulnerability, which could lead to DoS.</changelog>
  <changelog author="mcepl@suse.com" date="1749556800">- Add ipaddress-update-pr60.patch from gh#phihag/ipaddress!60 to
  update vendored ipaddress module to 3.8 equivalent
- Add gh-128840_parse-IPv6-with-emb-IPv4.patch to limit buffer
  size for IPv6 address parsing (gh#python/cpython#128840,
  bsc#1244401).
- Update CVE-2025-4516-DecodeError-handler.patch not to break
  _PyBytes_DecodeEscape signature.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1749729600">- Add python36-* provides/obsoletes to enable SLE-12 -&gt; SLE-15
  migration, bsc#1233012</changelog>
  <changelog author="mcepl@cepl.eu" date="1751457600">- Add CVE-2025-4435-normalize-lnk-trgts-tarfile.patch
  Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138,
  CVE-2024-12718, CVE-2025-4435 on tarfile (bsc#1244032,
  bsc#1244061, bsc#1244059, bsc#1244060, bsc#1244056).
  The backported fixes do not contain changes for ntpath.py and
  related tests, because the support for symlinks and junctions
  were added later in Python 3.9, and it does not make sense to
  backport them to 3.6 here.
  The patch is contains the following changes:
  - python@42deeab fixes symlink handling for tarfile.data_filter
  - python@9d2c2a8 fixes handling of existing files/symlinks in tarfile
  - python@00af979 adds a new "strict" argument to realpath()
  - python@dd8f187 fixes mulriple CVE fixes in the tarfile module
  - downstream only fixes that makes the changes work and
    compatible with Python 3.6
- Add CVE-2025-6069-quad-complex-HTMLParser.patch to avoid worst
  case quadratic complexity when processing certain crafted
  malformed inputs with HTMLParser (CVE-2025-6069, bsc#1244705).</changelog>
  <changelog author="mcepl@cepl.eu" date="1754049600">- Add CVE-2025-8194-tarfile-no-neg-offsets.patch which now
  validates archives to ensure member offsets are non-negative
  (gh#python/cpython#130577, CVE-2025-8194, bsc#1247249).</changelog>
</package>
<package pkgid="3f6595757d2a23d0dbe09d138f3de9cf3d6fa43ce448a7cd96ed5d9b773042ea" name="libqgpgme-devel" arch="x86_64">
  <version epoch="0" ver="1.23.0" rel="150600.3.5.1"/>
  <changelog author="code@bnavigator.de" date="1616673600">- Can't assume non-existence of python38 macros in Leap.
  gh#openSUSE/python-rpm-macros#107
  Test for suse_version instead. Only Tumbleweed has and needs the
  python_subpackage_only support.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1625659200">- gpgme 1.16.0:
  * New context flag "cert-expire"
  * New data flags "io-buffer-size" and "sensitive"
  * cpp,qt: Add support for trust signatures
  * qt: Add support for flags in LDAP server options
  * qt: Fix too high memory consumption due to QProcess
  * qt: Do not set empty base DN as query of keyserver URL
  * qt: Extend SignKeyJob to create signatures with expiration date
  * python: New optional parameter filter_signatures for decrypt
- run all tests again
- add patches to fix tests:
  * gpgme-1.16.0-Use-after-free-in-t-edit-sign-test.patch
  * gpgme-1.16.0-t-various-testSignKeyWithExpiration-32-bit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1628164800">- Fix build with glibc 2.34: [bsc#1189089]
  * Use glibc's closefrom.
  * Add gpgme-use-glibc-closefrom.patch</changelog>
  <changelog author="code@bnavigator.de" date="1640347200">- Add patches to support building bindings packages for
  Python 3.10
  * gpgme-D545-python310.patch -- https://dev.gnupg.org/D545
  * gpgme-D546-python310.patch -- https://dev.gnupg.org/D546</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1660824000">- gpgme 1.18.0
  * New keylist mode to force refresh via external methods
  * The keylist operations now create an import result to report the
    result of the locate keylist modes
  * core: Return BAD_PASSPHRASE error code on symmetric decryption
    failure
  * cpp, qt: Do not export internal symbols anymore
  * cpp, qt: Support revocation of own OpenPGP keys
  * qt: The file name of (signed and) encrypted data can now be set
  * cpp, qt: Support setting the primary user ID
  * python: Fix segv(NULL) when inspecting contect after exeception
- includes changes from version 1.17.1:
  * qt: Fix a bug in the ABI compatibility of 1.17.0
- includes changes from 1.17.0:
  * New context flag "key-origin"
  * New context flag "import-filter"
  * New export mode to export secret subkeys
  * Detect errors during the export of secret keys
  * New function gpgme_op_receive_keys to import keys from a keyserver
    without first running a key listing
  * Detect bad passphrase error in certificate import
  * Allow setting --key-origin when importing keys
  * Support components "keyboxd", "gpg-agent", "scdaemon", "dirmngr",
    "pinentry", and "socketdir" in gpgme_get_dirinfo
  * Under Unix use poll(2) instead of select(2), when available.
  * Fix results returned by gpgme_data_* functions
  * Support closefrom also for glibc
    (drop upstream gpgme-use-glibc-closefrom.patch
  * cpp,qt: Add support for export of secret keys and secret subkeys.
  * cpp,qt: Support for adding existing subkeys to other keys
  * qt: Extend ChangeExpiryJob to change expiration of primary key
    and of subkeys at the same time
  * qt: Support WKD lookup without implicit import
  * qt: Allow specifying an import filter when importing keys
  * qt: Allow retrieving the default value of a config entry
- drop patches included upstream
  * gpgme-1.16.0-Use-after-free-in-t-edit-sign-test.patch
  * gpgme-1.16.0-t-various-testSignKeyWithExpiration-32-bit.patch
- add patches to fix tests:
  * gpgme-1.18.0-T6137-qt_test.patch</changelog>
  <changelog author="code@bnavigator.de" date="1667908800">- Add gpgme-suse-nobetasuffix.patch
  * remove "-unknown" suffix from version string
  * boo#1205197</changelog>
  <changelog author="dmueller@suse.com" date="1674302400">- add python311.patch to build language bindings for python 3.11</changelog>
  <changelog author="pmonreal@suse.com" date="1674475200">- Update upstream keyring: https://gnupg.org/signature_key.asc</changelog>
  <changelog author="dmueller@suse.com" date="1678449600">- drop python2 subpackage handling. we do not support python 2.x
  anymore, and if we would it would happen via singlespec</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 1.19.0:
  * New context flag "no-auto-check-trustdb". [T6261]
  * Optionally, build QGpgME for Qt 6
  * Support component "gpgtar-name" in gpgme_get_dirinfo. [T6342]
  * Extended gpgme_op_encrypt*, gpgme_op_encrypt_sign*, and
    gpgme_op_sign* to allow creating an encrypted and/or signed
    archive. [T6342]
  * Extended gpgme_op_decrypt*, gpgme_op_decrypt_verify*,
    and gpgme_op_verify* to allow extracting an encrypted and/or
    signed archive. [T6342]
  * cpp: Handle error when trying to sign expired keys. [T6155]
  * cpp: Support encryption flags ThrowKeyIds, EncryptWrap, and
    WantAddress. [T6359]
  * cpp, qt: Fix building with C++11.  [T6141]
  * qt: Fix problem with expiration dates after 2038-01-19 on 32-bit
    systems  when adding an existing subkey to another key. [T6137]
  * cpp: Allow setting the curve to use when generating ECC keys
    for smart cards. [T4429]
  * qt: Extend ListAllKeysJob to allow disabling the automatic
    trust database check when listing all keys. [T6261]
  * qt: Allow deferred start of import jobs. [T6323]
  * qt: Support creating and extracting signed and encrypted
    archives. [T6342]
  * Rebase gpgme-suse-nobetasuffix.patch
  * Remove patches upstream:
  - gpgme-D546-python310.patch
  - gpgme-1.18.0-T6137-qt_test.patch
  - python311.patch</changelog>
  <changelog author="christophe@krop.fr" date="1681214400">- Add a Qt6 flavor to build Qt6 bindings
- Use %ldconfig_scriptlets</changelog>
  <changelog author="pmonreal@suse.com" date="1682078400">- Update to 1.20.0:
  * On Windows, the gettext functions provided by gpgrt are switched
    into utf8 mode, so that all localized texts returned by GpgME or
    gpgrt, e.g. the texts for error codes are now UTF-8 encoded. [T5960]
  * Key::canSign now returns false for OpenPGP keys without signing
    (sub)key. [T6456]
  * The new macOS Homebrew location is now by default supported. [T6440]
  * Fix regression in 1.19.0.
  * Fix invocation of gpgtar on Windows.
  * Interface changes relative to the 1.19.0 release:
  - gpgme_subkey_t              EXTENDED: New field 'can_renc'.
  - gpgme_subkey_t              EXTENDED: New field 'can_timestamp'.
  - gpgme_subkey_t              EXTENDED: New field 'is_group_owned'.
  - cpp: Subkey::canRenc        NEW.
  - cpp: Subkey::canTimestamp   NEW.
  - cpp: Subkey::isGroupOwned   NEW.
  - cpp: Key::canReallySign     DEPRECATED.
  * Release-info: https://dev.gnupg.org/T6463</changelog>
  <changelog author="pmonreal@suse.com" date="1688990400">- Update to 1.21.0
  * Extended gpgme_op_encrypt, gpgme_op_encrypt_sign, and gpgme_op_sign
    to allow writing the output directly to a file. [T6530]
  * Extended gpgme_op_decrypt and gpgme_op_verify to allow reading the
    input data directly from files. [T6530]
  * For key signing and uid revoking allow an empty user id. [rMfbc3963d62]
  * Pass an input-size-hint also to the gpgsm engine. [T6534]
  * qt: Allow writing the created archives directly to a file. [T6530]
  * qt: Allow reading the signed/encrypted archive to decrypt
    or verify directly from a file. [T6530]
  * qt: Qt Jobs working with QIODeviceDataProvider now properly
    handle input-size hints and progress for files larger.
    2^32 bytes in 32 bit builds. [T6534]
  * cpp: Error::isCanceled now also returns true for error code
    GPG_ERR_FULLY_CANCELED. [T6510]
  * python: Fix wrong use of write. [T6501]
  * Interface changes relative to the 1.20.0 release:
  - cpp: Data::setFlag                            NEW.
  - cpp: Data::setSizeHint                        NEW.
  - qt: Job::startIt                              NEW.
  - qt: DecryptVerifyArchiveJob::setInputFile     NEW.
  - qt: DecryptVerifyArchiveJob::inputFile        NEW.
  - qt: EncryptArchiveJob::setRecipients          NEW.
  - qt: EncryptArchiveJob::recipients             NEW.
  - qt: EncryptArchiveJob::setInputPaths          NEW.
  - qt: EncryptArchiveJob::inputPaths             NEW.
  - qt: EncryptArchiveJob::setOutputFile          NEW.
  - qt: EncryptArchiveJob::outputFile             NEW.
  - qt: EncryptArchiveJob::setEncryptionFlags     NEW.
  - qt: EncryptArchiveJob::encryptionFlags        NEW.
  - qt: SignArchiveJob::setSigners                NEW.
  - qt: SignArchiveJob::signers                   NEW.
  - qt: SignArchiveJob::setInputPaths             NEW.
  - qt: SignArchiveJob::inputPaths                NEW.
  - qt: SignArchiveJob::setOutputFile             NEW.
  - qt: SignArchiveJob::outputFile                NEW.
  - qt: SignEncryptArchiveJob::setSigners         NEW.
  - qt: SignEncryptArchiveJob::signers            NEW.
  - qt: SignEncryptArchiveJob::setRecipients      NEW.
  - qt: SignEncryptArchiveJob::recipients         NEW.
  - qt: SignEncryptArchiveJob::setInputPaths      NEW.
  - qt: SignEncryptArchiveJob::inputPaths         NEW.
  - qt: SignEncryptArchiveJob::setOutputFile      NEW.
  - qt: SignEncryptArchiveJob::outputFile         NEW.
  - qt: SignEncryptArchiveJob::setEncryptionFlags NEW.
  - qt: SignEncryptArchiveJob::encryptionFlags    NEW.</changelog>
  <changelog author="schwab@suse.de" date="1691064000">- Run testsuite in qemu build</changelog>
  <changelog author="pmonreal@suse.com" date="1692705600">- Update to 1.22.0:
  * Prevent wrong plaintext when verifying clearsigned signature.
  * Return bad data error instead of general error on unexpected data.
  * Take care of offline mode for all operations of gpgsm engine.
  * Prepare the use of the forthcoming libassuan version 3.
  * New configure option --with-libtool-modification.
  * cpp: Expose gpgme_decrypt_result_t.is_mime.
  * qt: Clean up after failure or cancel of sign/encrypt archive operation.
  * qt: Add setInputEncoding to QGpgMe::EncryptJob.
  * qt: Make toLogString helper public.
  * Interface changes relative to the 1.21.0 release:
  - qt: EncryptJob::setInputEncoding           NEW.
  - qt: DecryptionResult::isMime               NEW.
  - qt: toLogString                            NEW.</changelog>
  <changelog author="pmonreal@suse.com" date="1692705601">- Fix builds with qt and qt6 [T6673]:
  * qt,tests: Fix build in source directory. Include Qt binding
    sources before C++ binding sources and C sources. This fixes
    the problem that the debug.h in the C sources was found before
    the one in the Qt bindings.
  * build: Suggest out-of-source build. Suggest to run configure
    from a build subdirectory.
  * Add patches:
  - gpgme-qt-tests-Fix-build-in-source-directory.patch
  - gpgme-build-Suggest-out-of-source-build.patch</changelog>
  <changelog author="christophe@krop.fr" date="1695470400">- Use GCC 12 for building the Qt6 library. The default compiler
  is too old.
- Use '%{without xxx}' rather than '!%{with xxx}' in spec file</changelog>
  <changelog author="christophe@krop.fr" date="1695470401">- Use GCC 12 for building the Qt6 library on Leap 15. The
  default compiler is too old.
- Use '%{without xxx}' rather than '!%{with xxx}' in spec file</changelog>
  <changelog author="pmonreal@suse.com" date="1698235200">- Update to 1.23.0:
  * Support GPGME_ENCRYPT_ALWAYS_TRUST also for S/MIME. [T6559]
  * New keylist mode GPGME_KEYLIST_MODE_WITH_V5FPR. [T6705]
  * New key capability flags has_*. [T6748]
  * gpgme-tool: Support use of Windows HANDLE. [T6634]
  * qt: Support refreshing keys via WKD. [T6672]
  * qt: Handle cancel in changeexpiryjob. [T6754]
  * Remove patches fixed upstream:
  - gpgme-qt-tests-Fix-build-in-source-directory.patch
  - gpgme-build-Suggest-out-of-source-build.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1761134400">- Treat empty DISPLAY variable as unset. [bsc#1252425, bsc#1231055]
  * To avoid gpgme constructing an invalid gpg command line when
    the DISPLAY variable is empty it can be treated as unset.
  * Add gpgme-Treat-empty-DISPLAY-variable-as-unset.patch
  * Reported upstream: dev.gnupg.org/T7919</changelog>
</package>
<package pkgid="05538a2c6197e19317f816cefcab52053bd0c90132146b18b41b25bf78e63326" name="libqgpgme15" arch="x86_64">
  <version epoch="0" ver="1.23.0" rel="150600.3.5.1"/>
  <changelog author="code@bnavigator.de" date="1616673600">- Can't assume non-existence of python38 macros in Leap.
  gh#openSUSE/python-rpm-macros#107
  Test for suse_version instead. Only Tumbleweed has and needs the
  python_subpackage_only support.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1625659200">- gpgme 1.16.0:
  * New context flag "cert-expire"
  * New data flags "io-buffer-size" and "sensitive"
  * cpp,qt: Add support for trust signatures
  * qt: Add support for flags in LDAP server options
  * qt: Fix too high memory consumption due to QProcess
  * qt: Do not set empty base DN as query of keyserver URL
  * qt: Extend SignKeyJob to create signatures with expiration date
  * python: New optional parameter filter_signatures for decrypt
- run all tests again
- add patches to fix tests:
  * gpgme-1.16.0-Use-after-free-in-t-edit-sign-test.patch
  * gpgme-1.16.0-t-various-testSignKeyWithExpiration-32-bit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1628164800">- Fix build with glibc 2.34: [bsc#1189089]
  * Use glibc's closefrom.
  * Add gpgme-use-glibc-closefrom.patch</changelog>
  <changelog author="code@bnavigator.de" date="1640347200">- Add patches to support building bindings packages for
  Python 3.10
  * gpgme-D545-python310.patch -- https://dev.gnupg.org/D545
  * gpgme-D546-python310.patch -- https://dev.gnupg.org/D546</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1660824000">- gpgme 1.18.0
  * New keylist mode to force refresh via external methods
  * The keylist operations now create an import result to report the
    result of the locate keylist modes
  * core: Return BAD_PASSPHRASE error code on symmetric decryption
    failure
  * cpp, qt: Do not export internal symbols anymore
  * cpp, qt: Support revocation of own OpenPGP keys
  * qt: The file name of (signed and) encrypted data can now be set
  * cpp, qt: Support setting the primary user ID
  * python: Fix segv(NULL) when inspecting contect after exeception
- includes changes from version 1.17.1:
  * qt: Fix a bug in the ABI compatibility of 1.17.0
- includes changes from 1.17.0:
  * New context flag "key-origin"
  * New context flag "import-filter"
  * New export mode to export secret subkeys
  * Detect errors during the export of secret keys
  * New function gpgme_op_receive_keys to import keys from a keyserver
    without first running a key listing
  * Detect bad passphrase error in certificate import
  * Allow setting --key-origin when importing keys
  * Support components "keyboxd", "gpg-agent", "scdaemon", "dirmngr",
    "pinentry", and "socketdir" in gpgme_get_dirinfo
  * Under Unix use poll(2) instead of select(2), when available.
  * Fix results returned by gpgme_data_* functions
  * Support closefrom also for glibc
    (drop upstream gpgme-use-glibc-closefrom.patch
  * cpp,qt: Add support for export of secret keys and secret subkeys.
  * cpp,qt: Support for adding existing subkeys to other keys
  * qt: Extend ChangeExpiryJob to change expiration of primary key
    and of subkeys at the same time
  * qt: Support WKD lookup without implicit import
  * qt: Allow specifying an import filter when importing keys
  * qt: Allow retrieving the default value of a config entry
- drop patches included upstream
  * gpgme-1.16.0-Use-after-free-in-t-edit-sign-test.patch
  * gpgme-1.16.0-t-various-testSignKeyWithExpiration-32-bit.patch
- add patches to fix tests:
  * gpgme-1.18.0-T6137-qt_test.patch</changelog>
  <changelog author="code@bnavigator.de" date="1667908800">- Add gpgme-suse-nobetasuffix.patch
  * remove "-unknown" suffix from version string
  * boo#1205197</changelog>
  <changelog author="dmueller@suse.com" date="1674302400">- add python311.patch to build language bindings for python 3.11</changelog>
  <changelog author="pmonreal@suse.com" date="1674475200">- Update upstream keyring: https://gnupg.org/signature_key.asc</changelog>
  <changelog author="dmueller@suse.com" date="1678449600">- drop python2 subpackage handling. we do not support python 2.x
  anymore, and if we would it would happen via singlespec</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 1.19.0:
  * New context flag "no-auto-check-trustdb". [T6261]
  * Optionally, build QGpgME for Qt 6
  * Support component "gpgtar-name" in gpgme_get_dirinfo. [T6342]
  * Extended gpgme_op_encrypt*, gpgme_op_encrypt_sign*, and
    gpgme_op_sign* to allow creating an encrypted and/or signed
    archive. [T6342]
  * Extended gpgme_op_decrypt*, gpgme_op_decrypt_verify*,
    and gpgme_op_verify* to allow extracting an encrypted and/or
    signed archive. [T6342]
  * cpp: Handle error when trying to sign expired keys. [T6155]
  * cpp: Support encryption flags ThrowKeyIds, EncryptWrap, and
    WantAddress. [T6359]
  * cpp, qt: Fix building with C++11.  [T6141]
  * qt: Fix problem with expiration dates after 2038-01-19 on 32-bit
    systems  when adding an existing subkey to another key. [T6137]
  * cpp: Allow setting the curve to use when generating ECC keys
    for smart cards. [T4429]
  * qt: Extend ListAllKeysJob to allow disabling the automatic
    trust database check when listing all keys. [T6261]
  * qt: Allow deferred start of import jobs. [T6323]
  * qt: Support creating and extracting signed and encrypted
    archives. [T6342]
  * Rebase gpgme-suse-nobetasuffix.patch
  * Remove patches upstream:
  - gpgme-D546-python310.patch
  - gpgme-1.18.0-T6137-qt_test.patch
  - python311.patch</changelog>
  <changelog author="christophe@krop.fr" date="1681214400">- Add a Qt6 flavor to build Qt6 bindings
- Use %ldconfig_scriptlets</changelog>
  <changelog author="pmonreal@suse.com" date="1682078400">- Update to 1.20.0:
  * On Windows, the gettext functions provided by gpgrt are switched
    into utf8 mode, so that all localized texts returned by GpgME or
    gpgrt, e.g. the texts for error codes are now UTF-8 encoded. [T5960]
  * Key::canSign now returns false for OpenPGP keys without signing
    (sub)key. [T6456]
  * The new macOS Homebrew location is now by default supported. [T6440]
  * Fix regression in 1.19.0.
  * Fix invocation of gpgtar on Windows.
  * Interface changes relative to the 1.19.0 release:
  - gpgme_subkey_t              EXTENDED: New field 'can_renc'.
  - gpgme_subkey_t              EXTENDED: New field 'can_timestamp'.
  - gpgme_subkey_t              EXTENDED: New field 'is_group_owned'.
  - cpp: Subkey::canRenc        NEW.
  - cpp: Subkey::canTimestamp   NEW.
  - cpp: Subkey::isGroupOwned   NEW.
  - cpp: Key::canReallySign     DEPRECATED.
  * Release-info: https://dev.gnupg.org/T6463</changelog>
  <changelog author="pmonreal@suse.com" date="1688990400">- Update to 1.21.0
  * Extended gpgme_op_encrypt, gpgme_op_encrypt_sign, and gpgme_op_sign
    to allow writing the output directly to a file. [T6530]
  * Extended gpgme_op_decrypt and gpgme_op_verify to allow reading the
    input data directly from files. [T6530]
  * For key signing and uid revoking allow an empty user id. [rMfbc3963d62]
  * Pass an input-size-hint also to the gpgsm engine. [T6534]
  * qt: Allow writing the created archives directly to a file. [T6530]
  * qt: Allow reading the signed/encrypted archive to decrypt
    or verify directly from a file. [T6530]
  * qt: Qt Jobs working with QIODeviceDataProvider now properly
    handle input-size hints and progress for files larger.
    2^32 bytes in 32 bit builds. [T6534]
  * cpp: Error::isCanceled now also returns true for error code
    GPG_ERR_FULLY_CANCELED. [T6510]
  * python: Fix wrong use of write. [T6501]
  * Interface changes relative to the 1.20.0 release:
  - cpp: Data::setFlag                            NEW.
  - cpp: Data::setSizeHint                        NEW.
  - qt: Job::startIt                              NEW.
  - qt: DecryptVerifyArchiveJob::setInputFile     NEW.
  - qt: DecryptVerifyArchiveJob::inputFile        NEW.
  - qt: EncryptArchiveJob::setRecipients          NEW.
  - qt: EncryptArchiveJob::recipients             NEW.
  - qt: EncryptArchiveJob::setInputPaths          NEW.
  - qt: EncryptArchiveJob::inputPaths             NEW.
  - qt: EncryptArchiveJob::setOutputFile          NEW.
  - qt: EncryptArchiveJob::outputFile             NEW.
  - qt: EncryptArchiveJob::setEncryptionFlags     NEW.
  - qt: EncryptArchiveJob::encryptionFlags        NEW.
  - qt: SignArchiveJob::setSigners                NEW.
  - qt: SignArchiveJob::signers                   NEW.
  - qt: SignArchiveJob::setInputPaths             NEW.
  - qt: SignArchiveJob::inputPaths                NEW.
  - qt: SignArchiveJob::setOutputFile             NEW.
  - qt: SignArchiveJob::outputFile                NEW.
  - qt: SignEncryptArchiveJob::setSigners         NEW.
  - qt: SignEncryptArchiveJob::signers            NEW.
  - qt: SignEncryptArchiveJob::setRecipients      NEW.
  - qt: SignEncryptArchiveJob::recipients         NEW.
  - qt: SignEncryptArchiveJob::setInputPaths      NEW.
  - qt: SignEncryptArchiveJob::inputPaths         NEW.
  - qt: SignEncryptArchiveJob::setOutputFile      NEW.
  - qt: SignEncryptArchiveJob::outputFile         NEW.
  - qt: SignEncryptArchiveJob::setEncryptionFlags NEW.
  - qt: SignEncryptArchiveJob::encryptionFlags    NEW.</changelog>
  <changelog author="schwab@suse.de" date="1691064000">- Run testsuite in qemu build</changelog>
  <changelog author="pmonreal@suse.com" date="1692705600">- Update to 1.22.0:
  * Prevent wrong plaintext when verifying clearsigned signature.
  * Return bad data error instead of general error on unexpected data.
  * Take care of offline mode for all operations of gpgsm engine.
  * Prepare the use of the forthcoming libassuan version 3.
  * New configure option --with-libtool-modification.
  * cpp: Expose gpgme_decrypt_result_t.is_mime.
  * qt: Clean up after failure or cancel of sign/encrypt archive operation.
  * qt: Add setInputEncoding to QGpgMe::EncryptJob.
  * qt: Make toLogString helper public.
  * Interface changes relative to the 1.21.0 release:
  - qt: EncryptJob::setInputEncoding           NEW.
  - qt: DecryptionResult::isMime               NEW.
  - qt: toLogString                            NEW.</changelog>
  <changelog author="pmonreal@suse.com" date="1692705601">- Fix builds with qt and qt6 [T6673]:
  * qt,tests: Fix build in source directory. Include Qt binding
    sources before C++ binding sources and C sources. This fixes
    the problem that the debug.h in the C sources was found before
    the one in the Qt bindings.
  * build: Suggest out-of-source build. Suggest to run configure
    from a build subdirectory.
  * Add patches:
  - gpgme-qt-tests-Fix-build-in-source-directory.patch
  - gpgme-build-Suggest-out-of-source-build.patch</changelog>
  <changelog author="christophe@krop.fr" date="1695470400">- Use GCC 12 for building the Qt6 library. The default compiler
  is too old.
- Use '%{without xxx}' rather than '!%{with xxx}' in spec file</changelog>
  <changelog author="christophe@krop.fr" date="1695470401">- Use GCC 12 for building the Qt6 library on Leap 15. The
  default compiler is too old.
- Use '%{without xxx}' rather than '!%{with xxx}' in spec file</changelog>
  <changelog author="pmonreal@suse.com" date="1698235200">- Update to 1.23.0:
  * Support GPGME_ENCRYPT_ALWAYS_TRUST also for S/MIME. [T6559]
  * New keylist mode GPGME_KEYLIST_MODE_WITH_V5FPR. [T6705]
  * New key capability flags has_*. [T6748]
  * gpgme-tool: Support use of Windows HANDLE. [T6634]
  * qt: Support refreshing keys via WKD. [T6672]
  * qt: Handle cancel in changeexpiryjob. [T6754]
  * Remove patches fixed upstream:
  - gpgme-qt-tests-Fix-build-in-source-directory.patch
  - gpgme-build-Suggest-out-of-source-build.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1761134400">- Treat empty DISPLAY variable as unset. [bsc#1252425, bsc#1231055]
  * To avoid gpgme constructing an invalid gpg command line when
    the DISPLAY variable is empty it can be treated as unset.
  * Add gpgme-Treat-empty-DISPLAY-variable-as-unset.patch
  * Reported upstream: dev.gnupg.org/T7919</changelog>
</package>
<package pkgid="1400310dbe4d5e0ad4cfcb36a2421cda64b806ee6ff2185a0152c59bcaf66490" name="libqt5-qtbase" arch="src">
  <version epoch="0" ver="5.15.12+kde151" rel="150600.3.9.1"/>
  <changelog author="fvogt@suse.com" date="1678968000">- Update to version 5.15.8+kde183:
  * Add nullptr guard in QStyleSheetStyle::drawPrimitive(PE_PanelLineEdit)
  * QAbstractItemView: don't access invalid indexes on copy-key
  * Apply CVE-2023-24607-qtbase-5.15.diff (CVE-2023-24607,
    bsc#1209616)
  * QXcbConnection::getTimestamp: do not return stale timestamp
  * QToolButton: Elide text when constraints prevent from showing whole text
  * correctly set up ref counting in QThreadPool::tryStart(std::function)
  * Do not set Qt::ToolTip flag for QShapedPixmapWindow
  * Fix deletion order also for QImageReader/Writer::setDevice()
  * Fix deletion order in QImageReader/Writer destructors
  * QNetworkReply: Fix typos in the documentation
  * Doc: Fix typo in the online documentation template
  * Doc: Link to page documenting Qt trademarks in the copyright footer
  * [doc] Fix typo in QBuffer::setBuffer() description
  * qwindowsdrag: Fix typo in documentation
  * openglblacklists: Fix typo in description
  * qxcbscreen: Fix typo in documentation
  * Fix typos in SQL driver documentation
  * qxcbwindow.cpp: Fix sign-compare and another warnings
  * QToolButton: reimplement the fix for QTBUG-95255
  * QSysInfo::prettyProductName(): Add macOS Ventura product name
  * QSysInfo::prettyProductName(): add missing macOS product names
  * xcb: correctly disconnect xsettings callbacks
  * ibus: add SetCursorLocationRelative in InputContext.xml</changelog>
  <changelog author="fvogt@suse.com" date="1680523200">- Update to version 5.15.8+kde185:
  * QFSFileEngine: fix overflow bug when using lseek64
  * Add QImage null check when QOpenGLTexture converts
- Add patch to fix return key handling in QGroupBox on GNOME (bsc#1209364):
  * 0001-Revert-QGnomeTheme-Allow-Space-Return-Enter-and-Sele.patch
- Add patch to fix XInput2 events in big-endian X11 clients (bsc#1204883, QTBUG-105157):
  * big-endian-scroll.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1682078400">- Update to version 5.15.9+kde151, rebased upstream:
  * QCborValue: fix incorrect to{Array,Map} when the value is empty
  * QMargins: fix a missing "full stop" in the docs
  * QLibrary: restore translated string
  * QLibrary: fix possible arg() format clobbering
  * iOS: Use python3 for enumerating test target devices
  * Android: Treat ACTION_CANCEL as TouchCancelEvent
  * Doc: Fix broken formatting
  * QFileSystemEngine: fix potential formatting error
  * QString::asprintf: check that passing field widths as arguments works
  * Backport recent QFlags tests
  * network: Fix typos in documentation
  * Fix accuracy with screen composition
  * Doc: Update documentation for QElapsedTimer's in Windows
  * Document that QStandardPath::findExecutable works with absolute paths
  * macOS: Use native resize cursors for diagonal resize
  * Fix clipped glyphs in text rendering of QGraphicsTextItem
  * Change comparison data type to fix int overflow
  * Add missing Q_WEAK_OVERLOAD definition
  * Update QFileInfo docs to mention macOS aliases
  * Distinguish macOS aliases from normal symbolic links
  * Windows QPA: Fix frameless maximize on secondary screens
  * Rewrite tst_qdataurl as a data-driven test
  * Fix compilation for wasm
  * QIOSFileDialog/QIOSDocumentPickerController - handle dismissed view controller
  * Fix QDockWidget's dock area permissions after hovering
  * Fix C++20 ambiguous relational operators between QJsonValue{,Ref}
  * Android: make sure that orientationChange is reported after resize
  * Android: set all QScreen's geometry-related parameters together
  * Blacklist: test cases blacklisted in tst_QDBusConnection:
  * wasm:  fix issue with passing username/password to network request
  * macOS: Pass multi arch flags when linking qmake
  * QCocoaFileDialogHelper: Always enable symlinks and aliases to directories
  * Android: terminate argv passed to main() with nullptr
  * Update bundled libjpeg-turbo to version 2.1.3
  * ANGLE: Load the DirectX libraries from the system path directly
  * SQLite: Update SQLite to v3.37.2
  * Fix compiler warnings about unused parameters
  * Fix getsockopt option_value initial initialization
  * Http2: Fix redirect-handling
  * Android A11Y: Fix value rounding
  * Android A11Y: Announce value together with element name when focused
  * Android A11Y: handle valueChanged events
  * tst_QSystemSemaphore: give proper path to test-helper
  * QNX: Silence compiler warning by initializing variable
  * Update LICENSE.QT-LICENSE-AGREEMENT
  * winrt appxmanifest: Properly replace VCLibs version for newer MSVC versions
  * QAbstractSocket: Don't pretend pause and resume is a stack
  * Gui: test also depends for clipboard feature
  * QDesktopServices: deprecate destroying URL handlers w/o explicit unsetUrlHandler()
  * macOS: Respect QMAKE_APPLE_DEVICE_ARCHS when building qmake
  * HTTP: Make redirect response parsing more generic
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 20.04
  * Android A11Y: populate child elements when constructing node info
  * Fix issue where readyRead() could happen after disconnected()
  * QStringView: add missing constexpr so we can use is_constant_evaluated
  * Use Android's View.generateViewId() for generating ids for views/surfaces
  * Remove documentation of non-existing QAccessible state
  * Doc: Fix snippet to match actual QFileInfo behavior
  * Android: Re-focus focused accessibility node after orientation change
  * Android A11Y: execute C++ code on main Qt thread
  * Android: extract parentId for hidden object in advance
  * xcb: Show valuator atom names properly in categorized logging
  * Android: replace stacktrace with debug message in search for setService
  * Better document attaching a QFutureWatcher to a started QFuture
  * doc: Update GenericDataLocation location on iOS
  * BLACKLIST test_Gestures tests for RHEL-8.4
  * QPlainTestLogger: do not print "failure location" if there's no failure
  * QAbstractItemView: do not access invalid model indices (3/N)
  * Win32: always allow the event loop to be woken up by posted events
  * rhi: d3d11: Use __uuidof where we can
  * Don't QEXPECT_FAIL tst_QLineEdit::testQuickSelectionWithMouse on macOS ARM
  * Network: Emit authenticationRequired when using Ntlm
  * testlib: Disable window restoration on macOS in a non-persistent way
  * QAbstractItemView: do not access invalid model indices (2/N)
  * QAbstractItemView: do not access invalid model indices (1/N)
  * QAbstractItemView: code tidies
  * Update float16 part of TestLib selftest
  * QGuiApplication: constant-initialize lastCursorPosition
  * Blacklist tst_QFileSystemWatcher::signalsEmittedAfterFileMoved on all Windows versions
  * [Android]: Handle the screen name, modes and refreshRate properly
  * QVersionNumber: remove the "pure" attribute from commonPrefix()
  * QEvent: initialize the static userEventTypeRegistry constexprly
  * Let QXcbGlxWindow::createVisual fallback to QXcbWindow::createVisual
  * Android A11Y: fix content update notification when object is hidden
  * Android: explicitly remove accessibility focus when element is hidden
  * BLACKLIST tst_qfont for Red Hat 8.4 and Ubuntu 20.04
  * QtCore: includemocs
  * Fix memory leak in QtConcurrent::run when called with a NULL QThreadPool
  * INTEGRITY: Prevent deletion of virtual functions
  * QMake: replace a Q_ASSERT() with a Q_UNREACHABLE()
  * QTransform benchmark: measure what was promised
  * QStaticByteArrayMatcher: add a useful comment
  * QMacStyle: use the 'momentary push in' type for push buttons
  * qopengl.h: Move C header #include(s) out of the QT_NAMESPACE
  * Enable all supported 1.0 device features in QVulkanWindow
  * Fix queue passed to vkQueuePresent
  * QFusionStyle: don't draw an invalid outline for up/down buttons
  * Doc: Make QListIterator snippets more robust
  * QVersionNumber: don't detach() in rvalue QList/QVector ctor
  * QNetworkRequest: Document how Qt handles 301 and 302 status codes
  * Convert date-time to UTC before claiming it's in GMT
  * Remove execute permission from XML files
  * Add test case for style sheet selectors for enum properties
  * FreeType: allow falling back to synthesized bold if desired
  * Fix an assertion failure in massageAdjustedDateTime()
  * Relax tst_qvulkan::vulkanVersionRequest to make it compatible with 1.1
  * Doc: Replace "C:Documents and Settings" paths
  * QOrderedMutexLocker: fix compilation with C++11
  * QHttpNetworkConnection: Always set proxy settings to all channels
  * Add a markdown writer test for a checklist item ending with `code`
  * Use QTextCharFormat::fontFixedPitch to remember Markdown backtick spans
  * QWizardLayoutInfo: make == and != operators const
  * Revert "Android: Fix screen flicker issues"
  * macOS: Handle momentum scroll NSEventPhaseBegan when scroll had ended
  * SQLite: Update SQLite to v3.37.0
  * Update copyright year to 2022
  * QTzTimeZonePrivate: use ctor delegation instead of init()
  * QTzTimeZonePrivate: fix permanently-detaching m_icu
  * tst_QGraphicsView: fix memleak
  * Doc: Update external links to Qt Creator Manual
  * macOS: assume an unidentified tablet device is a stylus
  * tst_QItemModel: fix memleaks
  * tst_qanimationgroup: fix memleaks
  * QAbstractAnimation: add missing forward-declaration
  * [doc] QCoreApplication::installTranslator() doesn't take ownership
  * tst_qtranslator: fix memleak
  * QTestData: fix streaming of u8 string literals in C++20 mode
  * QThread/Unix: extract duplicate code
  * QWindowPrivate: fix inconsistent inline on some methods
  * tst_QStringList: check that join(u'0') embeds NULs
  * macOS: Sanitize scroll deltas for NSEventPhaseCancelled
  * tst_qsharedmemory: skip readOnly() test under asan
  * QXmlStreamReader: update test distribution
  * QZipReader: update to unzip partly broken archives
  * Deliver context menu event with correct coordinates to widgets in popups
  * QTextHtmlParser: fix prefix lookahead and html comments
  * QtConcurrent::run crashes on program exit
  * tst_QPropertyAnimation: fix leaks occurring under normal operation
  * tst_QPropertyAnimation: fix wrong comment
  * QLogging: fix potential missing NUL-terminator when calling OutputDebugString
  * Fix qt_scrollRectInImage when scrolling outside of the image
- Commits dropped by the rebase:
  * Fix compile with Qt5: Use QString::mid instead of QString::sliced
  * Restore C++11 compatibility after e8b9f4c28d3ab5e960dc54f2dc0c4b749b0b50e0
  * QDateTime: Don't require c++17</changelog>
  <changelog author="fvogt@suse.com" date="1683633600">- Amend patch to fix mouse grabbing as well (bsc#1211024):
  * big-endian-scroll.patch</changelog>
  <changelog author="fvogt@suse.com" date="1684929600">- Update to version 5.15.9+kde154:
  * Hsts: match header names case insensitively (CVE-2023-32762,
    QTBUG-113392, bsc#1211797)
  * Fix specific overflow in qtextlayout (CVE-2023-32763,
    QTBUG-113337, bsc#1211798)
  * QDnsLookup/Unix: make sure we don't overflow the buffer
    (CVE-2023-33285, boo#1211642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1686657600">- Update to version 5.15.10+kde129, rebased upstream:
  * Ssl: Copy the on-demand cert loading bool from default config
  * Schannel: Reject certificate not signed by a configured CA certificate (boo#1211994, CVE-2023-34410)
  * qnetworkreplyfileimpl_p.h: fix header guard name
  * Revert "Draw the cursor considering the descent is 0"
  * Use pkgconfig in order to find libproxy configuration
  * Upgrade PCRE2 to 10.40
  * Android A11Y: handle LocationChanged event only for focused element
  * Port binary JSON to new special integer bitfields
  * INTEGRITY: enable C99 globally
  * QObject: mark two error reporting functions COLD
  * Endian: Provide special integer bitfield unions
  * Android: set useLegacyPackaging to true in build.gradle
  * QWidgetTextControl: port to new-style connects (faster)
  * Sync qxmlstream.g with qxmlstreamparser_p.h [1/2]: switched lines
  * tst_QNetworkReply try stabilize autoDeleteReplies tests
  * Remove duplicated include for &lt;limits&gt;
  * Fix recursion crash when calling setStyleSheet with `qproperty-styleSheet`
  * qwindowsxpstyle: Fix typos in documentation
  * Correct prefix reported for end element in QXmlStreamReader
  * Android A11Y: Add supported role infos to A11yNodeInfo
  * Fix handling of DateTime values in QSettings
  * Fix off-by-one for "typically" lowest value INT_MIN
  * xml: Fix typos in documentation
  * QWindowsWindow: Fix typo in documentation
  * includemocs (updated script)
  * widgets: Fix typos in documentation
  * cocoa: Fix typo in debug messages
  * Only scroll QMenu when there is a valid active action
  * QTimer: Add note in documentation
  * Fix QListView assert when the last row is moved in IconMode
  * QFileDialog: Fix adding default suffix when file path contains dot
  * QLineEdit: account for the placeholderText when computing lineRect
  * QFileDialog::saveFileContent crashes on accept
  * QCompleter: QCompleter unexpectedly changes QLineEdit text
  * Fix build error on iOS with the configure option -qtnamespace
  * Draw the cursor considering the descent is 0
  * Remove pure-virtual-signals.h include from tst_moc.cpp
  * plugins: image formats - fix odr violation
  * dbus: Fix typos
  * qwindowsdialoghelpers: Fix typo in documentation
  * QTableView: Document the customizations applied to QHeaderView
  * Unicodetools: compile
  * eglfs_x11: Fix running flag linkage
  * qcompilerdetection.h: add Q_CC_{GNU,MSVC,CLANG}_ONLY macros
  * Fix CMake warning about "missing closing ' quote"
  * Fix alignment of next/prev links in offline style
  * QtDBus: includemocs
  * Image Plugins: includemocs(-ish)
  * QtGui: includemocs
  * QXcbNativeInterface: remove unused field m_sysTraySelectionAtom
  * Windows QPA: Fix slowdown with large table/tree views with accessibility
  * Macstyle: fix the text color on the disabled button
  * QMacStyle: fix tool buttons (in checked mode)
  * QTeamCityLogger: fix .arg() placeholder injection
  * QAbstractTestLogger: disable copying
  * Fix errorMessageFromComError()
  * QtNetwork: includemocs
  * AppleUnifiedLogger: Remove manually managed os_log_t cache
  * examples: add WindowStaysOnBottomHint into preview text
  * QSharedPointer: Use matching new/delete
  * QIbusPlatformInputContextPlugin: includemocs
  * QGtk3ThemePlugin: includemocs
  * QTuioTouchPlugin: includemocs
  * QtWidgets: includemocs v2022
  * QMYSQLDriverPlugin: includemocs
  * QtDeviceDiscoverySupportPrivate: includemocs
  * QLinuxFbIntegrationPlugin: includemocs
  * QtPrintSupport: includemocs
  * QSQLiteDriverPlugin: includemocs
  * QtFbSupportPrivate: includemocs
  * QXdgDesktopPortalThemePlugin: includemocs
  * QtTest: includemocs
  * QComposePlatformInputContextPlugin: includemocs
  * QtSql: includemocs
  * QVncIntegrationPlugin: includemocs
  * Fix backingstore fractional DPR glitches for widgets in child windows
  * Include &lt;limits&gt; where std::numeric_limits is used
  * QtInputSupportPrivate: includemocs
  * Document the default value of QSFPM::sortOrder()
  * Better document how to enable sorting in QSPFM
  * Correct documentation of INI format's loss of type information
  * Android: add missing properties in AndroidManifest.xml
  * Fix assertion failure when parsing a doubly-invalid date-time text
  * Windows QPA: Correct mistake when calculating minmaxinfo
  * Android: replace ndk.dir with android.ndkVersion in build.gradle
  * Android: remove the old copy of gradle.properties after reading it
  * CMake Android Support: Fix signing of APKs
  * Android: fix A11Y object description
  * macOS: Fix warning about comparing different types in QCocoaScreen::isOnline
  * Fix qmake build on FreeBSD
  * Update documentation of enum Qt::DockWidgetArea
  * xcb: recreate xcb window under some conditions
  * objc_namespace: Add support for universal binaries
  * objc_namespace: Fix misspelled argument for silencing output
  * objc_namespace: Update parsing logic to account for otool changes
  * Blacklist passwordAuth for Ubuntu 20.04
  * Android: wrap QAndroidInputContext's m_focusObject in a QPointer
  * Fix compilation with GCC 12 (and on Fedora 35 and newer)
  * Chip example: fix an accidental bool-&gt;int conversion when using PMF connections
  * qmake: Add support for C++23
  * Android: use BCP 47 tag to create a correct Locale for QTimeZone::displayName()
  * QDateTime: fix adjusted datetime handling
  * Fix crash in tst_qmltc_examples on Android
  * macOS: Remove dead code for focus ring handling in Mac style
  * Detach for colortransforms of indexed formats
  * tst_QTcpSocket::connectToHostError - handle possible timeouts
  * CoreText: Avoid populating font family aliases if family was populated
  * Graphicsview: Avoid background clearing glitches under fractional DPR
  * Windows QPA: Avoid slowdown with UI Automation name change notification
  * Windows QPA: Avoid sending accessibility notifications before activation
  * Windows: Fix potential crash when retrieving default printer
  * Make Ubuntu with its non-standard security level happy
  * Android: Blacklist failing tests on tst_QGraphicsProxyWidget
  * Update LA 4.4.1
  * iOS A11Y: Set more accessibilityTraits
  * QNX: Fix compiler warning by when FEATURE_clipboard is not enabled
  * Document that native file dialogs might not show a title
  * Doc: Remove mentionings of overflows from QElapsedTimer
  * QTextMarkdownImporter: don't apply text char format to list item block
- Commits dropped by the rebase:
  * QBuffer: add missing &lt;limits&gt; include
  * Fix developer build</changelog>
  <changelog author="gmbr3@opensuse.org" date="1687953600">- Change %_libqt5_libexecdir to %_libexecdir/qt5 (bsc#1174075)</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch icu-devel requires to pkgconfig to allow switching libicu
  versions</changelog>
  <changelog author="fvogt@suse.com" date="1695902401">- Update to version 5.15.10+kde159 (bsc#1214327, CVE-2023-37369):
  * Fix CVE-2023-43114
  * QMimeDatabase: fix detection of pattern conflict in different prefixes
  * Fix highdpi conversion of QTabletEvent coordinates on xcb
  * widget: set WA_X11NetWmWindowType* after xcb window was created
  * Fix crash when setting override cursor on multiple clients
  * QAccessibleWidget: Remove pointless ZWSP in warning message
  * Android A11Y: Fix deadlock in QtAndroidAccessibility::runInObjectContext()
  * Correctly parse non BMP char refs in the sax parser
  * Clear the _X version of alongside the enum deprecator
  * Fix UB (signed char passed to &lt;cctype&gt; function)
  * Qt3DRender: includemocs
  * Fix capitalization error in auto-generated qdbusmacros.h include
  * QColorDialog: Ignore mouse move events when no mouse button is pressed
  * QHostInfo: fix remaining slotObj leaks
  * QXmlStreamReader: Raise error on unexpected tokens (CVE-2023-38197,
    QTBUG-92113, QTBUG-95188, bsc#1213326)
  * QTextLayout: Reconsider cursor drawing on TextObject
  * Ensure consistent cursor width under fractional scaling
  * Fix QTextEdit cursor rectangle vertical positioning
  * Return 0 in QWindow::winId in case of failed platform window creation
  * Doc: note QWindow::winId() will cause platform window creation
  * QSslDiffieHellmanParameters: fix mem-leak
  * QHostInfo: fix leaking slot object
  * Make sure we don't count down past 0 QT_FATAL_CRITICALS
  * QLogging: DRY isFatal(QtMsgType)
  * tst_QXmlStream: remove unneeded _ba UDLs
  * Fix typo in QXmlStreamReader error message
  * QXmlStreamReader: make fastScanName() indicate parsing status to callers
  * QXmlStreamReader: change fastScanName() to take a Value*
  * Fix Croatia's currency
  * SSL: upgrade the default DH parameters</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1696593600">- Update to version 5.15.11+kde134, rebased upstream:
  * Revert "Windows QPA: Add support to UiaRaiseNotificationEvent()"
  * FileChooser portal: Make sure filter.name is not empty
  * QPersistentModelIndex: fix UB (op&lt; on unrelated pointers)
  * Avoid crash when keysymToQtKey(keysym, Qt::ControlModifier) is called
  * a11y atspi: translate coords for GetOffsetAtPoint the right way
  * a11y atspi: Take dialog into account as top-level window
  * a11y atspi: Fix incorrect use of x instead of y position
  * macOS: Handle asynchronous deminiaturizing of windows
  * QTranslator: generalize a UNIX-only path
  * iOS, input panel: be more careful before enabling QIOSKeyboardListener
  * Android: Fix flickering on window resize and show keyboard
  * Android A11Y: Check for active surface before calling into native code
  * xcb: Delete touch points without target windows
  * Blacklist 1 tests in tst_QDBusConnection on ubuntu-20.04
  * Fix CMake builds without ANDROID_SDK
  * Blacklist 2 tests in tst_Http2 on ubuntu-20.04
  * Blacklist 1 tests in tst_QSqlQuery on macos
  * Defer creating the special shaders in the texture blitter
  * tst_QSslSocket::serverCipherPreferencies - fix for OpenSSL v3
  * QTemporaryFile: document rename() differences from QFile
  * Doc: 3rd party: Fix reference to FreeType LICENSE.txt
  * Update bundled libjpeg-turbo to version 2.1.4
  * tst_QSsSocket: fix verifyClientCertificate with OpenSSL 3
  * tst_QSslSocket: regenerate certificate used for setLocalCertificateChain
  * tst_QSslSocket::protocolServerSide - make it work with OpenSSL v3
  * tst_QSslSocket::oldErrorsOnSocketReuse - make it work with OpenSSL v3
  * Update zconf.h prefixes to match zlib v1.2.12 update
  * xcb: fix D&amp;D in same xembed client
  * xcb: use global coordinates for position of D&amp;D for xembed client
  * Doc: Update QMetaType::metaObject() descriptions
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 22.04
  * BLACKLIST tst_qfont for Ubuntu 22.04
  * BLACKLIST tst_QMenuBar::check_menuPosition for Ubuntu 22.04
  * tst_QDtls::verifyClientCertficiate - update certs for OpenSSL v3
  * QSslCertificate::toText(): add a file to compare against
  * Fix the spelling of the word "combination"
  * tst_QSslCertificate::pkcs12 - skip the test if OpenSSL version &gt;= 3
  * Android A11Y: Fix TalkBack scrolling behavior
  * Android A11Y: Notify android about scroll events
  * QCocoaDrag: don't add pasteboard items with non-absolute URLs
  * QDirPrivate: pass input QList by cref
  * tst_qbytearray: remove qCompress_data for QT_NO_COMPRESS
  * QDeviceDiscoveryUDev: use NSDMI
  * QAuthenticator: Fix crash when using NTLM / Negotiate
  * Provide a native interface instance in minimal platform plugin
  * Android: document the supported clipboard mimetypes
  * Windows: Account for not finding child windows when calling ChildWindowFromPointEx
  * iOS: Send touch events asynchronously to avoid deadlocking UIKit event loop
  * Disable bitcode for iOS
  * macOS: Ignore deprecation for ReleaseIconRef
  * BLACKLIST tst_QApplication::sendEventsOnProcessEvents for Ubuntu 22.04
  * Convert Latin1 to UTF-16 before passing to ICU API
  * Doc: Remove repetition of word in text
  * eglfs: Fix screen cloning when atomic is enabled
  * Fix printing of dpr&gt;1 images on Windows
  * QHttp: Fix handling of redirect loaded from cache
  * Doc: Fix return type of QLEInteger/QBEInteger post-in/decrement ops
  * qmake: Fix installation of separate debug info for plugins
  * iOS: ensure we close inputpanel after clearing focusobject
  * Convert Latin1 to UTF-16 before passing to ICU API
  * qputenv: defend against non-NUL-terminated QByteArray values
  * QFontSubset: remove unused glyphName() overload
  * Statically assert that the __mips_dsp code is only active on 32-bit
  * QGtk3Theme: Ensure gtk uses the same windowing system as Qt
  * tst_QFocusFrame: fix -Wparantheses
  * Sync Vulkan device features between QVulkanWindow and QRhi
  * SQLite: Update SQLite to v3.39.2
  * Update freetype to 2.12.1
  * corelib: Fix typos in documentation
  * QAtomicInteger docs: mention bool and char8_t as 8-bit types
  * qgraphicsitem_cast: replace 0 with nullptr
  * Doc: Hide weak overload template magic from documentation
  * Revert "QDateTime: fix adjusted datetime handling"
  * Fix select handles disappears issues
  * tst_QSslKey: prepare for the migration to OpenSSL v3
  * tst_qnetworkreply: replace server.pem/key pair
  * Disable unit testing setting up QTcpServer on special Apple interfaces
  * qmake/msbuild: Turn off "use full paths in diagnostics" by default
  * qmake/msbuild: Support all /DEBUG:xxx linker options
  * qmake/msbuild: Support all /LTCG:xxx options
  * Android A11Y: Add content change type to content change event
  * Enabler for fractional scaling of text in Qt Quick
  * macOS: Override logical DPI to 72
  * Add QDom internalSubset implementation
  * Fix tst_AndroidAssets, broken by recent changes on assets load speed
  * Android: Improve loading speed of individual assets
  * Darwin: Replace deprecated symbol kIOMasterPortDefault with equivalent
  * macOS: Remove code for handling logical DPI changes
  * Fix an incorrect invocation of llvm-readobj
  * macOS: Ignore deprecation for kOnSystemDisk icon domain
  * Copy only files that belongs to QML module
  * Android: fix wrong position of cursor handle and editpopup menu in split screen
  * Doc: Document QML_IMPORTS_PATH and QMLPATHS
  * Add the missing RCC_DIR to '.qrc' paths when generating deployment settings
  * Android: Fix the offset of the EditPopupMenu
  * xcb: update xkb_state mask as much as possible
  * QDom: Stop treating non-BMP characters as invalid
  * Android 13: Fix warnings on starting an application
  * qxkbcommon: Map Super/Hyper to Meta early enough to have an effect
  * macOS: Ignore update requests for offline displays
  * macOS: Avoid recursively updating screens when window moves screen
  * qmake/MinGW: Install separate debug info of DLLs next to the DLL
  * QMainWindow: fix restoreState() for toolbars
  * Make two QDT benchmarks data-driven and add more rows
  * Fix doc and example of QLoggingCategory::installCategory()
  * qmake: Document Xcode behavior when bundling translation files
  * Android: Fix missing import
  * QByteArray: more GCC 12 -Werror=array-bound whack-a-mole
  * CMake: Fix android sdk version propagation
  * Restore C++20-deprecated mixed-enum bitwise operators
  * Android: Fix ANR when QtService and QtActivity load in same process
  * Fix restart QtActivity
  * QArrayData::data(): do type-punning via quintptr, not char *
  * QIOSTextResponder: recreate responder upon reset
  * QSslSocket: make it work with OpenSSL v3
  * QFileSystemModelPrivate: de-inline ctor and dtor
  * Network: update Public Suffix List
  * macOS: Ensure proper quoting when calling otool in objc_namespace script
  * QKeySequence: Fix the one-off error in the mac glyph array size
- Commits dropped by the rebase:
  * Apply CVE-2022-27404-27405-27406-qtbase-5.15.diff
  * QArrayData: fix UB via reinterpret_cast (crash with FORTIFY_SOURCE=3)
  * Adapt for q_EVP_PKEY_base_id → q_EVP_PKEY_get_base_id rename in OpenSSL 3
  * Don't use a deprecated function if built/linked with OpenSSL v3</changelog>
  <changelog author="christophe@krop.fr" date="1696593601">- Enable the experimental native painting feature to improve
  remote desktop performances (boo#1214915)
  exporting QT_XCB_NATIVE_PAINTING is required to use the feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1697716800">- Update to version 5.15.11+kde138:
  * QLibraryPrivate: Actually merge load hints
  * QPluginLoader: report the right load hints
  * xkb: fix build with libxkbcommon 1.6.0 and later
  * a11y atspi: Map ButtonMenu role to AT-SPI equivalent</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1703851200">- Update to version 5.15.12+kde144, rebased upstream:
  * QMimeDatabase: handle buggy type definitions with circular inheritance
  * xcb: only set base size when it's valid
  * QPixmapCache: fix leaking of QStrings and Keys on clear()
  * OpenFile portal: do not use O_PATH fds
  * QSystemTrayIcon: properly disconnect old menu in setContextMenu()
  * Guard QTabBar against nested event processing during moving tabs
  * QDial: don't crash when min==max and setting a value != min &amp; max
  * QStandardItemModel: don't leak in mimeData()
  * SQL/MySQL: properly initialize variable
  * QWidgetTextControl: ignore invalid input method event
  * Update the LGPL license header
  * SQL/MySQL: fix handling of json column
  * Remove QMAKE_RANLIB and QMAKE_LINK_SHLIB from android/default_pre.prf
  * macOS: Fix less common writing systems on Catalina and later
  * Blacklist 1 tests in tst_QFtp on ubuntu-20.04
  * Update bundled libpng to version 1.6.39
  * Android: Fix signing of APKs that are generated when an AAB is also built
  * Update bundled zlib to version 1.2.13
  * doc: update the limitation of QSystemTrayIcon on X11
  * Blacklist 1 tests in tst_QTimer on ubuntu-20.04
  * Add benchmarks for QLocale number parsing
  * Add benchmarks for QString number parsing
  * Android: Fix incorrect fullscreen dimensions
  * Gtk3Theme: set XCURSOR_SIZE and XCURSOR_THEME for wayland sessions
  * xcb: Flush Display when processing xcb events
  * xcb: Add xlib wrapper for XFlush()
  * QHostAddress: Fix incorrect comparison against 'Any'
  * QSsl[OpenSSL/Android]: Fix hardcoded 1_1 suffix
  * BLACKLIST: tst_QApplication::sendEventsOnProcessEvents for RHEL 9.0
  * QMacStyle: do not set white color for grayed out button
  * Work round macOS's omission of en_DE from its own uiLanguages()
  * Suppress a deprecation warning in tst_QDateTime::toString_enumformat()
  * QJsonValue: fix incorrect to{Array,Object} when the value is empty
  * QGtk3Dialog: remove the #include for empty moc
  * Remove unneeded QWindow from QGtk3Dialog
  * tst_QSslSocket: Delete sslOptions
  * tst_QSslServer: Make the in-process server use TLS1.2
  * Android: fix Gradle warning about using enableUncompressedNativeLibs
  * Mention  limitation of QDir::drives() on Windows
  * QFileSystemEngine/Win: fix incorrect buffer size in currentPath()
  * Android: properly retrieve mime type of uri to for openUrl()
  * Android: Fix clipboard issue with urls
  * Android: Add a way to disable accessibility via an environment var
  * Update bundled libpng to version 1.6.38
  * QIOSMessageDialog::exec - work around 'windowsless' exec
  * QIosScreen: retain the right window
  * tst_Q{BitArray,ContiguousCache}: check not only count(), but size(), too
  * QIosTextResponder: stop using deprecated constants and type
  * qcompilerdetection.h: detect Coverity
  * Android: Fix Display.getRealMetrics deprecation
  * Fix broken Text rendering when noantialiased NativeRendering is used
  * forkfd: fix Clang 15 ATOMIC_VAR_INIT deprecation warning
  * eglfs: Add env.var. to disable the dedicated drmHandleEvent thread
  * doc: Don't put strings into QVector&lt;double&gt;
  * Remove focusProxyAndInputMethods from tst_QWidget
  * Bump version to 5.15.12
  * Update documentation of qWaitForWindowActive / qWaitForWindowExposed
  * QtHttp: Lower the severity of some log output
  * StyleSheetStyle: Fix color of placeholder texts in text edits
  * Android: Fix flickering on split screen mode
  * Update url to IAccessible2 Specification</changelog>
  <changelog author="alarrosa@suse.com" date="1704283200">- Update to version 5.15.12+kde147:
  * Http2: fix potential overflow in assemble_hpack_block()
    (bsc#1218413, CVE-2023-51714)
  * HPack: fix incorrect integer overflow check
  * HPack: fix a Yoda Condition</changelog>
  <changelog author="fvogt@suse.com" date="1708084800">- Update to version 5.15.12+kde151:
  * Improve KTX file reading memory safety (CVE-2024-25580, boo#1219996)
  * Revert "xcb: only set base size when it's valid"
  * Fix potential leak of QPropertyAnimation in QLineEditIconButton
  * QBitArray: correct inline keyword</changelog>
  <changelog author="alarrosa@suse.com" date="1720785600">- Add patch from upstream to fix a regression in the ODBC driver
  (bsc#1227513, QTBUG-112375):
  * 0001-QSQL-ODBC-fix-regression-trailing-NUL.patch
  * 0002-SQL-ODBC-Pass-correct-length-to-SQLColAttribute.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1722945600">- Add rebased upstream patch to delay any HTTP2 communication until
  encrypted() can be responded to (bsc#1227426, CVE-2024-39936):
  * 0001-HTTP2-Delay-any-communication-until-encrypted-can-be.patch
- Add upstream patch to fix a NULL pointer dereference via the
  function QXcbConnection::initializeAllAtoms() when there is
  anomalous behavior from the X server (bsc#1222120,
  CVE-2023-45935):
  * 0001-xcb-guard-a-pointer-before-usage.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756728000">- Add patch from upstream to fix a precondition violation in call
  to QByteArrayView::at() which can cause crashes (bsc#1243958,
  CVE-2025-5455):
  * 0001-qDecodeDataUrl-fix-precondition-violation-in-call-to.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756814400">- Add patch from upstream to initialize a member variable that was
  uninitialized under some circumstances:
  * 0001-QObjectPrivateSignal-initialize-all-members.patch
- Add patch from upstream to fix a crash when parsing a particular
  glyph in a particular font (QTBUG-124310):
  * 0001-Avoid-crash-in-font-distancefield-computation.patch
  * 0002-Fix-crash-in-font-distancefield-computation.patch
- Add patch from upstream to fix avoid repeatedly registering
  xsettings callbacks when switching cursor themes:
  * 0001-xcb-Avoid-repeatedly-registering-xsettings-callbacks-When.patch
- Add patch from upstream to check validity of RandR output info
  before using it (QTBUG-128906):
  * 0001-xcb-check-validity-of-RandR-output-info-before-using-it.patch
- Add patch from upstream to fix reparenting a window so it takes
  effect even if there are no other state changes to the window:
  * 0001-xcb-Sync-XCB-connection-after-reparenting-window.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756900800">- Add patch from upstream to fix a low performance when processing
  XML data in encodeText (bsc#1239896, CVE-2025-30348):
  * 0001-XML_QDom-speedup-encodeText.patch</changelog>
</package>
<package pkgid="a3805d64362d547d85582f269546aae62e0e79b75a4e4e43ef7e4ebf4be99274" name="libqt5-qtbase-common-devel" arch="x86_64">
  <version epoch="0" ver="5.15.12+kde151" rel="150600.3.9.1"/>
  <changelog author="fvogt@suse.com" date="1678968000">- Update to version 5.15.8+kde183:
  * Add nullptr guard in QStyleSheetStyle::drawPrimitive(PE_PanelLineEdit)
  * QAbstractItemView: don't access invalid indexes on copy-key
  * Apply CVE-2023-24607-qtbase-5.15.diff (CVE-2023-24607,
    bsc#1209616)
  * QXcbConnection::getTimestamp: do not return stale timestamp
  * QToolButton: Elide text when constraints prevent from showing whole text
  * correctly set up ref counting in QThreadPool::tryStart(std::function)
  * Do not set Qt::ToolTip flag for QShapedPixmapWindow
  * Fix deletion order also for QImageReader/Writer::setDevice()
  * Fix deletion order in QImageReader/Writer destructors
  * QNetworkReply: Fix typos in the documentation
  * Doc: Fix typo in the online documentation template
  * Doc: Link to page documenting Qt trademarks in the copyright footer
  * [doc] Fix typo in QBuffer::setBuffer() description
  * qwindowsdrag: Fix typo in documentation
  * openglblacklists: Fix typo in description
  * qxcbscreen: Fix typo in documentation
  * Fix typos in SQL driver documentation
  * qxcbwindow.cpp: Fix sign-compare and another warnings
  * QToolButton: reimplement the fix for QTBUG-95255
  * QSysInfo::prettyProductName(): Add macOS Ventura product name
  * QSysInfo::prettyProductName(): add missing macOS product names
  * xcb: correctly disconnect xsettings callbacks
  * ibus: add SetCursorLocationRelative in InputContext.xml</changelog>
  <changelog author="fvogt@suse.com" date="1680523200">- Update to version 5.15.8+kde185:
  * QFSFileEngine: fix overflow bug when using lseek64
  * Add QImage null check when QOpenGLTexture converts
- Add patch to fix return key handling in QGroupBox on GNOME (bsc#1209364):
  * 0001-Revert-QGnomeTheme-Allow-Space-Return-Enter-and-Sele.patch
- Add patch to fix XInput2 events in big-endian X11 clients (bsc#1204883, QTBUG-105157):
  * big-endian-scroll.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1682078400">- Update to version 5.15.9+kde151, rebased upstream:
  * QCborValue: fix incorrect to{Array,Map} when the value is empty
  * QMargins: fix a missing "full stop" in the docs
  * QLibrary: restore translated string
  * QLibrary: fix possible arg() format clobbering
  * iOS: Use python3 for enumerating test target devices
  * Android: Treat ACTION_CANCEL as TouchCancelEvent
  * Doc: Fix broken formatting
  * QFileSystemEngine: fix potential formatting error
  * QString::asprintf: check that passing field widths as arguments works
  * Backport recent QFlags tests
  * network: Fix typos in documentation
  * Fix accuracy with screen composition
  * Doc: Update documentation for QElapsedTimer's in Windows
  * Document that QStandardPath::findExecutable works with absolute paths
  * macOS: Use native resize cursors for diagonal resize
  * Fix clipped glyphs in text rendering of QGraphicsTextItem
  * Change comparison data type to fix int overflow
  * Add missing Q_WEAK_OVERLOAD definition
  * Update QFileInfo docs to mention macOS aliases
  * Distinguish macOS aliases from normal symbolic links
  * Windows QPA: Fix frameless maximize on secondary screens
  * Rewrite tst_qdataurl as a data-driven test
  * Fix compilation for wasm
  * QIOSFileDialog/QIOSDocumentPickerController - handle dismissed view controller
  * Fix QDockWidget's dock area permissions after hovering
  * Fix C++20 ambiguous relational operators between QJsonValue{,Ref}
  * Android: make sure that orientationChange is reported after resize
  * Android: set all QScreen's geometry-related parameters together
  * Blacklist: test cases blacklisted in tst_QDBusConnection:
  * wasm:  fix issue with passing username/password to network request
  * macOS: Pass multi arch flags when linking qmake
  * QCocoaFileDialogHelper: Always enable symlinks and aliases to directories
  * Android: terminate argv passed to main() with nullptr
  * Update bundled libjpeg-turbo to version 2.1.3
  * ANGLE: Load the DirectX libraries from the system path directly
  * SQLite: Update SQLite to v3.37.2
  * Fix compiler warnings about unused parameters
  * Fix getsockopt option_value initial initialization
  * Http2: Fix redirect-handling
  * Android A11Y: Fix value rounding
  * Android A11Y: Announce value together with element name when focused
  * Android A11Y: handle valueChanged events
  * tst_QSystemSemaphore: give proper path to test-helper
  * QNX: Silence compiler warning by initializing variable
  * Update LICENSE.QT-LICENSE-AGREEMENT
  * winrt appxmanifest: Properly replace VCLibs version for newer MSVC versions
  * QAbstractSocket: Don't pretend pause and resume is a stack
  * Gui: test also depends for clipboard feature
  * QDesktopServices: deprecate destroying URL handlers w/o explicit unsetUrlHandler()
  * macOS: Respect QMAKE_APPLE_DEVICE_ARCHS when building qmake
  * HTTP: Make redirect response parsing more generic
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 20.04
  * Android A11Y: populate child elements when constructing node info
  * Fix issue where readyRead() could happen after disconnected()
  * QStringView: add missing constexpr so we can use is_constant_evaluated
  * Use Android's View.generateViewId() for generating ids for views/surfaces
  * Remove documentation of non-existing QAccessible state
  * Doc: Fix snippet to match actual QFileInfo behavior
  * Android: Re-focus focused accessibility node after orientation change
  * Android A11Y: execute C++ code on main Qt thread
  * Android: extract parentId for hidden object in advance
  * xcb: Show valuator atom names properly in categorized logging
  * Android: replace stacktrace with debug message in search for setService
  * Better document attaching a QFutureWatcher to a started QFuture
  * doc: Update GenericDataLocation location on iOS
  * BLACKLIST test_Gestures tests for RHEL-8.4
  * QPlainTestLogger: do not print "failure location" if there's no failure
  * QAbstractItemView: do not access invalid model indices (3/N)
  * Win32: always allow the event loop to be woken up by posted events
  * rhi: d3d11: Use __uuidof where we can
  * Don't QEXPECT_FAIL tst_QLineEdit::testQuickSelectionWithMouse on macOS ARM
  * Network: Emit authenticationRequired when using Ntlm
  * testlib: Disable window restoration on macOS in a non-persistent way
  * QAbstractItemView: do not access invalid model indices (2/N)
  * QAbstractItemView: do not access invalid model indices (1/N)
  * QAbstractItemView: code tidies
  * Update float16 part of TestLib selftest
  * QGuiApplication: constant-initialize lastCursorPosition
  * Blacklist tst_QFileSystemWatcher::signalsEmittedAfterFileMoved on all Windows versions
  * [Android]: Handle the screen name, modes and refreshRate properly
  * QVersionNumber: remove the "pure" attribute from commonPrefix()
  * QEvent: initialize the static userEventTypeRegistry constexprly
  * Let QXcbGlxWindow::createVisual fallback to QXcbWindow::createVisual
  * Android A11Y: fix content update notification when object is hidden
  * Android: explicitly remove accessibility focus when element is hidden
  * BLACKLIST tst_qfont for Red Hat 8.4 and Ubuntu 20.04
  * QtCore: includemocs
  * Fix memory leak in QtConcurrent::run when called with a NULL QThreadPool
  * INTEGRITY: Prevent deletion of virtual functions
  * QMake: replace a Q_ASSERT() with a Q_UNREACHABLE()
  * QTransform benchmark: measure what was promised
  * QStaticByteArrayMatcher: add a useful comment
  * QMacStyle: use the 'momentary push in' type for push buttons
  * qopengl.h: Move C header #include(s) out of the QT_NAMESPACE
  * Enable all supported 1.0 device features in QVulkanWindow
  * Fix queue passed to vkQueuePresent
  * QFusionStyle: don't draw an invalid outline for up/down buttons
  * Doc: Make QListIterator snippets more robust
  * QVersionNumber: don't detach() in rvalue QList/QVector ctor
  * QNetworkRequest: Document how Qt handles 301 and 302 status codes
  * Convert date-time to UTC before claiming it's in GMT
  * Remove execute permission from XML files
  * Add test case for style sheet selectors for enum properties
  * FreeType: allow falling back to synthesized bold if desired
  * Fix an assertion failure in massageAdjustedDateTime()
  * Relax tst_qvulkan::vulkanVersionRequest to make it compatible with 1.1
  * Doc: Replace "C:Documents and Settings" paths
  * QOrderedMutexLocker: fix compilation with C++11
  * QHttpNetworkConnection: Always set proxy settings to all channels
  * Add a markdown writer test for a checklist item ending with `code`
  * Use QTextCharFormat::fontFixedPitch to remember Markdown backtick spans
  * QWizardLayoutInfo: make == and != operators const
  * Revert "Android: Fix screen flicker issues"
  * macOS: Handle momentum scroll NSEventPhaseBegan when scroll had ended
  * SQLite: Update SQLite to v3.37.0
  * Update copyright year to 2022
  * QTzTimeZonePrivate: use ctor delegation instead of init()
  * QTzTimeZonePrivate: fix permanently-detaching m_icu
  * tst_QGraphicsView: fix memleak
  * Doc: Update external links to Qt Creator Manual
  * macOS: assume an unidentified tablet device is a stylus
  * tst_QItemModel: fix memleaks
  * tst_qanimationgroup: fix memleaks
  * QAbstractAnimation: add missing forward-declaration
  * [doc] QCoreApplication::installTranslator() doesn't take ownership
  * tst_qtranslator: fix memleak
  * QTestData: fix streaming of u8 string literals in C++20 mode
  * QThread/Unix: extract duplicate code
  * QWindowPrivate: fix inconsistent inline on some methods
  * tst_QStringList: check that join(u'0') embeds NULs
  * macOS: Sanitize scroll deltas for NSEventPhaseCancelled
  * tst_qsharedmemory: skip readOnly() test under asan
  * QXmlStreamReader: update test distribution
  * QZipReader: update to unzip partly broken archives
  * Deliver context menu event with correct coordinates to widgets in popups
  * QTextHtmlParser: fix prefix lookahead and html comments
  * QtConcurrent::run crashes on program exit
  * tst_QPropertyAnimation: fix leaks occurring under normal operation
  * tst_QPropertyAnimation: fix wrong comment
  * QLogging: fix potential missing NUL-terminator when calling OutputDebugString
  * Fix qt_scrollRectInImage when scrolling outside of the image
- Commits dropped by the rebase:
  * Fix compile with Qt5: Use QString::mid instead of QString::sliced
  * Restore C++11 compatibility after e8b9f4c28d3ab5e960dc54f2dc0c4b749b0b50e0
  * QDateTime: Don't require c++17</changelog>
  <changelog author="fvogt@suse.com" date="1683633600">- Amend patch to fix mouse grabbing as well (bsc#1211024):
  * big-endian-scroll.patch</changelog>
  <changelog author="fvogt@suse.com" date="1684929600">- Update to version 5.15.9+kde154:
  * Hsts: match header names case insensitively (CVE-2023-32762,
    QTBUG-113392, bsc#1211797)
  * Fix specific overflow in qtextlayout (CVE-2023-32763,
    QTBUG-113337, bsc#1211798)
  * QDnsLookup/Unix: make sure we don't overflow the buffer
    (CVE-2023-33285, boo#1211642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1686657600">- Update to version 5.15.10+kde129, rebased upstream:
  * Ssl: Copy the on-demand cert loading bool from default config
  * Schannel: Reject certificate not signed by a configured CA certificate (boo#1211994, CVE-2023-34410)
  * qnetworkreplyfileimpl_p.h: fix header guard name
  * Revert "Draw the cursor considering the descent is 0"
  * Use pkgconfig in order to find libproxy configuration
  * Upgrade PCRE2 to 10.40
  * Android A11Y: handle LocationChanged event only for focused element
  * Port binary JSON to new special integer bitfields
  * INTEGRITY: enable C99 globally
  * QObject: mark two error reporting functions COLD
  * Endian: Provide special integer bitfield unions
  * Android: set useLegacyPackaging to true in build.gradle
  * QWidgetTextControl: port to new-style connects (faster)
  * Sync qxmlstream.g with qxmlstreamparser_p.h [1/2]: switched lines
  * tst_QNetworkReply try stabilize autoDeleteReplies tests
  * Remove duplicated include for &lt;limits&gt;
  * Fix recursion crash when calling setStyleSheet with `qproperty-styleSheet`
  * qwindowsxpstyle: Fix typos in documentation
  * Correct prefix reported for end element in QXmlStreamReader
  * Android A11Y: Add supported role infos to A11yNodeInfo
  * Fix handling of DateTime values in QSettings
  * Fix off-by-one for "typically" lowest value INT_MIN
  * xml: Fix typos in documentation
  * QWindowsWindow: Fix typo in documentation
  * includemocs (updated script)
  * widgets: Fix typos in documentation
  * cocoa: Fix typo in debug messages
  * Only scroll QMenu when there is a valid active action
  * QTimer: Add note in documentation
  * Fix QListView assert when the last row is moved in IconMode
  * QFileDialog: Fix adding default suffix when file path contains dot
  * QLineEdit: account for the placeholderText when computing lineRect
  * QFileDialog::saveFileContent crashes on accept
  * QCompleter: QCompleter unexpectedly changes QLineEdit text
  * Fix build error on iOS with the configure option -qtnamespace
  * Draw the cursor considering the descent is 0
  * Remove pure-virtual-signals.h include from tst_moc.cpp
  * plugins: image formats - fix odr violation
  * dbus: Fix typos
  * qwindowsdialoghelpers: Fix typo in documentation
  * QTableView: Document the customizations applied to QHeaderView
  * Unicodetools: compile
  * eglfs_x11: Fix running flag linkage
  * qcompilerdetection.h: add Q_CC_{GNU,MSVC,CLANG}_ONLY macros
  * Fix CMake warning about "missing closing ' quote"
  * Fix alignment of next/prev links in offline style
  * QtDBus: includemocs
  * Image Plugins: includemocs(-ish)
  * QtGui: includemocs
  * QXcbNativeInterface: remove unused field m_sysTraySelectionAtom
  * Windows QPA: Fix slowdown with large table/tree views with accessibility
  * Macstyle: fix the text color on the disabled button
  * QMacStyle: fix tool buttons (in checked mode)
  * QTeamCityLogger: fix .arg() placeholder injection
  * QAbstractTestLogger: disable copying
  * Fix errorMessageFromComError()
  * QtNetwork: includemocs
  * AppleUnifiedLogger: Remove manually managed os_log_t cache
  * examples: add WindowStaysOnBottomHint into preview text
  * QSharedPointer: Use matching new/delete
  * QIbusPlatformInputContextPlugin: includemocs
  * QGtk3ThemePlugin: includemocs
  * QTuioTouchPlugin: includemocs
  * QtWidgets: includemocs v2022
  * QMYSQLDriverPlugin: includemocs
  * QtDeviceDiscoverySupportPrivate: includemocs
  * QLinuxFbIntegrationPlugin: includemocs
  * QtPrintSupport: includemocs
  * QSQLiteDriverPlugin: includemocs
  * QtFbSupportPrivate: includemocs
  * QXdgDesktopPortalThemePlugin: includemocs
  * QtTest: includemocs
  * QComposePlatformInputContextPlugin: includemocs
  * QtSql: includemocs
  * QVncIntegrationPlugin: includemocs
  * Fix backingstore fractional DPR glitches for widgets in child windows
  * Include &lt;limits&gt; where std::numeric_limits is used
  * QtInputSupportPrivate: includemocs
  * Document the default value of QSFPM::sortOrder()
  * Better document how to enable sorting in QSPFM
  * Correct documentation of INI format's loss of type information
  * Android: add missing properties in AndroidManifest.xml
  * Fix assertion failure when parsing a doubly-invalid date-time text
  * Windows QPA: Correct mistake when calculating minmaxinfo
  * Android: replace ndk.dir with android.ndkVersion in build.gradle
  * Android: remove the old copy of gradle.properties after reading it
  * CMake Android Support: Fix signing of APKs
  * Android: fix A11Y object description
  * macOS: Fix warning about comparing different types in QCocoaScreen::isOnline
  * Fix qmake build on FreeBSD
  * Update documentation of enum Qt::DockWidgetArea
  * xcb: recreate xcb window under some conditions
  * objc_namespace: Add support for universal binaries
  * objc_namespace: Fix misspelled argument for silencing output
  * objc_namespace: Update parsing logic to account for otool changes
  * Blacklist passwordAuth for Ubuntu 20.04
  * Android: wrap QAndroidInputContext's m_focusObject in a QPointer
  * Fix compilation with GCC 12 (and on Fedora 35 and newer)
  * Chip example: fix an accidental bool-&gt;int conversion when using PMF connections
  * qmake: Add support for C++23
  * Android: use BCP 47 tag to create a correct Locale for QTimeZone::displayName()
  * QDateTime: fix adjusted datetime handling
  * Fix crash in tst_qmltc_examples on Android
  * macOS: Remove dead code for focus ring handling in Mac style
  * Detach for colortransforms of indexed formats
  * tst_QTcpSocket::connectToHostError - handle possible timeouts
  * CoreText: Avoid populating font family aliases if family was populated
  * Graphicsview: Avoid background clearing glitches under fractional DPR
  * Windows QPA: Avoid slowdown with UI Automation name change notification
  * Windows QPA: Avoid sending accessibility notifications before activation
  * Windows: Fix potential crash when retrieving default printer
  * Make Ubuntu with its non-standard security level happy
  * Android: Blacklist failing tests on tst_QGraphicsProxyWidget
  * Update LA 4.4.1
  * iOS A11Y: Set more accessibilityTraits
  * QNX: Fix compiler warning by when FEATURE_clipboard is not enabled
  * Document that native file dialogs might not show a title
  * Doc: Remove mentionings of overflows from QElapsedTimer
  * QTextMarkdownImporter: don't apply text char format to list item block
- Commits dropped by the rebase:
  * QBuffer: add missing &lt;limits&gt; include
  * Fix developer build</changelog>
  <changelog author="gmbr3@opensuse.org" date="1687953600">- Change %_libqt5_libexecdir to %_libexecdir/qt5 (bsc#1174075)</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch icu-devel requires to pkgconfig to allow switching libicu
  versions</changelog>
  <changelog author="fvogt@suse.com" date="1695902401">- Update to version 5.15.10+kde159 (bsc#1214327, CVE-2023-37369):
  * Fix CVE-2023-43114
  * QMimeDatabase: fix detection of pattern conflict in different prefixes
  * Fix highdpi conversion of QTabletEvent coordinates on xcb
  * widget: set WA_X11NetWmWindowType* after xcb window was created
  * Fix crash when setting override cursor on multiple clients
  * QAccessibleWidget: Remove pointless ZWSP in warning message
  * Android A11Y: Fix deadlock in QtAndroidAccessibility::runInObjectContext()
  * Correctly parse non BMP char refs in the sax parser
  * Clear the _X version of alongside the enum deprecator
  * Fix UB (signed char passed to &lt;cctype&gt; function)
  * Qt3DRender: includemocs
  * Fix capitalization error in auto-generated qdbusmacros.h include
  * QColorDialog: Ignore mouse move events when no mouse button is pressed
  * QHostInfo: fix remaining slotObj leaks
  * QXmlStreamReader: Raise error on unexpected tokens (CVE-2023-38197,
    QTBUG-92113, QTBUG-95188, bsc#1213326)
  * QTextLayout: Reconsider cursor drawing on TextObject
  * Ensure consistent cursor width under fractional scaling
  * Fix QTextEdit cursor rectangle vertical positioning
  * Return 0 in QWindow::winId in case of failed platform window creation
  * Doc: note QWindow::winId() will cause platform window creation
  * QSslDiffieHellmanParameters: fix mem-leak
  * QHostInfo: fix leaking slot object
  * Make sure we don't count down past 0 QT_FATAL_CRITICALS
  * QLogging: DRY isFatal(QtMsgType)
  * tst_QXmlStream: remove unneeded _ba UDLs
  * Fix typo in QXmlStreamReader error message
  * QXmlStreamReader: make fastScanName() indicate parsing status to callers
  * QXmlStreamReader: change fastScanName() to take a Value*
  * Fix Croatia's currency
  * SSL: upgrade the default DH parameters</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1696593600">- Update to version 5.15.11+kde134, rebased upstream:
  * Revert "Windows QPA: Add support to UiaRaiseNotificationEvent()"
  * FileChooser portal: Make sure filter.name is not empty
  * QPersistentModelIndex: fix UB (op&lt; on unrelated pointers)
  * Avoid crash when keysymToQtKey(keysym, Qt::ControlModifier) is called
  * a11y atspi: translate coords for GetOffsetAtPoint the right way
  * a11y atspi: Take dialog into account as top-level window
  * a11y atspi: Fix incorrect use of x instead of y position
  * macOS: Handle asynchronous deminiaturizing of windows
  * QTranslator: generalize a UNIX-only path
  * iOS, input panel: be more careful before enabling QIOSKeyboardListener
  * Android: Fix flickering on window resize and show keyboard
  * Android A11Y: Check for active surface before calling into native code
  * xcb: Delete touch points without target windows
  * Blacklist 1 tests in tst_QDBusConnection on ubuntu-20.04
  * Fix CMake builds without ANDROID_SDK
  * Blacklist 2 tests in tst_Http2 on ubuntu-20.04
  * Blacklist 1 tests in tst_QSqlQuery on macos
  * Defer creating the special shaders in the texture blitter
  * tst_QSslSocket::serverCipherPreferencies - fix for OpenSSL v3
  * QTemporaryFile: document rename() differences from QFile
  * Doc: 3rd party: Fix reference to FreeType LICENSE.txt
  * Update bundled libjpeg-turbo to version 2.1.4
  * tst_QSsSocket: fix verifyClientCertificate with OpenSSL 3
  * tst_QSslSocket: regenerate certificate used for setLocalCertificateChain
  * tst_QSslSocket::protocolServerSide - make it work with OpenSSL v3
  * tst_QSslSocket::oldErrorsOnSocketReuse - make it work with OpenSSL v3
  * Update zconf.h prefixes to match zlib v1.2.12 update
  * xcb: fix D&amp;D in same xembed client
  * xcb: use global coordinates for position of D&amp;D for xembed client
  * Doc: Update QMetaType::metaObject() descriptions
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 22.04
  * BLACKLIST tst_qfont for Ubuntu 22.04
  * BLACKLIST tst_QMenuBar::check_menuPosition for Ubuntu 22.04
  * tst_QDtls::verifyClientCertficiate - update certs for OpenSSL v3
  * QSslCertificate::toText(): add a file to compare against
  * Fix the spelling of the word "combination"
  * tst_QSslCertificate::pkcs12 - skip the test if OpenSSL version &gt;= 3
  * Android A11Y: Fix TalkBack scrolling behavior
  * Android A11Y: Notify android about scroll events
  * QCocoaDrag: don't add pasteboard items with non-absolute URLs
  * QDirPrivate: pass input QList by cref
  * tst_qbytearray: remove qCompress_data for QT_NO_COMPRESS
  * QDeviceDiscoveryUDev: use NSDMI
  * QAuthenticator: Fix crash when using NTLM / Negotiate
  * Provide a native interface instance in minimal platform plugin
  * Android: document the supported clipboard mimetypes
  * Windows: Account for not finding child windows when calling ChildWindowFromPointEx
  * iOS: Send touch events asynchronously to avoid deadlocking UIKit event loop
  * Disable bitcode for iOS
  * macOS: Ignore deprecation for ReleaseIconRef
  * BLACKLIST tst_QApplication::sendEventsOnProcessEvents for Ubuntu 22.04
  * Convert Latin1 to UTF-16 before passing to ICU API
  * Doc: Remove repetition of word in text
  * eglfs: Fix screen cloning when atomic is enabled
  * Fix printing of dpr&gt;1 images on Windows
  * QHttp: Fix handling of redirect loaded from cache
  * Doc: Fix return type of QLEInteger/QBEInteger post-in/decrement ops
  * qmake: Fix installation of separate debug info for plugins
  * iOS: ensure we close inputpanel after clearing focusobject
  * Convert Latin1 to UTF-16 before passing to ICU API
  * qputenv: defend against non-NUL-terminated QByteArray values
  * QFontSubset: remove unused glyphName() overload
  * Statically assert that the __mips_dsp code is only active on 32-bit
  * QGtk3Theme: Ensure gtk uses the same windowing system as Qt
  * tst_QFocusFrame: fix -Wparantheses
  * Sync Vulkan device features between QVulkanWindow and QRhi
  * SQLite: Update SQLite to v3.39.2
  * Update freetype to 2.12.1
  * corelib: Fix typos in documentation
  * QAtomicInteger docs: mention bool and char8_t as 8-bit types
  * qgraphicsitem_cast: replace 0 with nullptr
  * Doc: Hide weak overload template magic from documentation
  * Revert "QDateTime: fix adjusted datetime handling"
  * Fix select handles disappears issues
  * tst_QSslKey: prepare for the migration to OpenSSL v3
  * tst_qnetworkreply: replace server.pem/key pair
  * Disable unit testing setting up QTcpServer on special Apple interfaces
  * qmake/msbuild: Turn off "use full paths in diagnostics" by default
  * qmake/msbuild: Support all /DEBUG:xxx linker options
  * qmake/msbuild: Support all /LTCG:xxx options
  * Android A11Y: Add content change type to content change event
  * Enabler for fractional scaling of text in Qt Quick
  * macOS: Override logical DPI to 72
  * Add QDom internalSubset implementation
  * Fix tst_AndroidAssets, broken by recent changes on assets load speed
  * Android: Improve loading speed of individual assets
  * Darwin: Replace deprecated symbol kIOMasterPortDefault with equivalent
  * macOS: Remove code for handling logical DPI changes
  * Fix an incorrect invocation of llvm-readobj
  * macOS: Ignore deprecation for kOnSystemDisk icon domain
  * Copy only files that belongs to QML module
  * Android: fix wrong position of cursor handle and editpopup menu in split screen
  * Doc: Document QML_IMPORTS_PATH and QMLPATHS
  * Add the missing RCC_DIR to '.qrc' paths when generating deployment settings
  * Android: Fix the offset of the EditPopupMenu
  * xcb: update xkb_state mask as much as possible
  * QDom: Stop treating non-BMP characters as invalid
  * Android 13: Fix warnings on starting an application
  * qxkbcommon: Map Super/Hyper to Meta early enough to have an effect
  * macOS: Ignore update requests for offline displays
  * macOS: Avoid recursively updating screens when window moves screen
  * qmake/MinGW: Install separate debug info of DLLs next to the DLL
  * QMainWindow: fix restoreState() for toolbars
  * Make two QDT benchmarks data-driven and add more rows
  * Fix doc and example of QLoggingCategory::installCategory()
  * qmake: Document Xcode behavior when bundling translation files
  * Android: Fix missing import
  * QByteArray: more GCC 12 -Werror=array-bound whack-a-mole
  * CMake: Fix android sdk version propagation
  * Restore C++20-deprecated mixed-enum bitwise operators
  * Android: Fix ANR when QtService and QtActivity load in same process
  * Fix restart QtActivity
  * QArrayData::data(): do type-punning via quintptr, not char *
  * QIOSTextResponder: recreate responder upon reset
  * QSslSocket: make it work with OpenSSL v3
  * QFileSystemModelPrivate: de-inline ctor and dtor
  * Network: update Public Suffix List
  * macOS: Ensure proper quoting when calling otool in objc_namespace script
  * QKeySequence: Fix the one-off error in the mac glyph array size
- Commits dropped by the rebase:
  * Apply CVE-2022-27404-27405-27406-qtbase-5.15.diff
  * QArrayData: fix UB via reinterpret_cast (crash with FORTIFY_SOURCE=3)
  * Adapt for q_EVP_PKEY_base_id → q_EVP_PKEY_get_base_id rename in OpenSSL 3
  * Don't use a deprecated function if built/linked with OpenSSL v3</changelog>
  <changelog author="christophe@krop.fr" date="1696593601">- Enable the experimental native painting feature to improve
  remote desktop performances (boo#1214915)
  exporting QT_XCB_NATIVE_PAINTING is required to use the feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1697716800">- Update to version 5.15.11+kde138:
  * QLibraryPrivate: Actually merge load hints
  * QPluginLoader: report the right load hints
  * xkb: fix build with libxkbcommon 1.6.0 and later
  * a11y atspi: Map ButtonMenu role to AT-SPI equivalent</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1703851200">- Update to version 5.15.12+kde144, rebased upstream:
  * QMimeDatabase: handle buggy type definitions with circular inheritance
  * xcb: only set base size when it's valid
  * QPixmapCache: fix leaking of QStrings and Keys on clear()
  * OpenFile portal: do not use O_PATH fds
  * QSystemTrayIcon: properly disconnect old menu in setContextMenu()
  * Guard QTabBar against nested event processing during moving tabs
  * QDial: don't crash when min==max and setting a value != min &amp; max
  * QStandardItemModel: don't leak in mimeData()
  * SQL/MySQL: properly initialize variable
  * QWidgetTextControl: ignore invalid input method event
  * Update the LGPL license header
  * SQL/MySQL: fix handling of json column
  * Remove QMAKE_RANLIB and QMAKE_LINK_SHLIB from android/default_pre.prf
  * macOS: Fix less common writing systems on Catalina and later
  * Blacklist 1 tests in tst_QFtp on ubuntu-20.04
  * Update bundled libpng to version 1.6.39
  * Android: Fix signing of APKs that are generated when an AAB is also built
  * Update bundled zlib to version 1.2.13
  * doc: update the limitation of QSystemTrayIcon on X11
  * Blacklist 1 tests in tst_QTimer on ubuntu-20.04
  * Add benchmarks for QLocale number parsing
  * Add benchmarks for QString number parsing
  * Android: Fix incorrect fullscreen dimensions
  * Gtk3Theme: set XCURSOR_SIZE and XCURSOR_THEME for wayland sessions
  * xcb: Flush Display when processing xcb events
  * xcb: Add xlib wrapper for XFlush()
  * QHostAddress: Fix incorrect comparison against 'Any'
  * QSsl[OpenSSL/Android]: Fix hardcoded 1_1 suffix
  * BLACKLIST: tst_QApplication::sendEventsOnProcessEvents for RHEL 9.0
  * QMacStyle: do not set white color for grayed out button
  * Work round macOS's omission of en_DE from its own uiLanguages()
  * Suppress a deprecation warning in tst_QDateTime::toString_enumformat()
  * QJsonValue: fix incorrect to{Array,Object} when the value is empty
  * QGtk3Dialog: remove the #include for empty moc
  * Remove unneeded QWindow from QGtk3Dialog
  * tst_QSslSocket: Delete sslOptions
  * tst_QSslServer: Make the in-process server use TLS1.2
  * Android: fix Gradle warning about using enableUncompressedNativeLibs
  * Mention  limitation of QDir::drives() on Windows
  * QFileSystemEngine/Win: fix incorrect buffer size in currentPath()
  * Android: properly retrieve mime type of uri to for openUrl()
  * Android: Fix clipboard issue with urls
  * Android: Add a way to disable accessibility via an environment var
  * Update bundled libpng to version 1.6.38
  * QIOSMessageDialog::exec - work around 'windowsless' exec
  * QIosScreen: retain the right window
  * tst_Q{BitArray,ContiguousCache}: check not only count(), but size(), too
  * QIosTextResponder: stop using deprecated constants and type
  * qcompilerdetection.h: detect Coverity
  * Android: Fix Display.getRealMetrics deprecation
  * Fix broken Text rendering when noantialiased NativeRendering is used
  * forkfd: fix Clang 15 ATOMIC_VAR_INIT deprecation warning
  * eglfs: Add env.var. to disable the dedicated drmHandleEvent thread
  * doc: Don't put strings into QVector&lt;double&gt;
  * Remove focusProxyAndInputMethods from tst_QWidget
  * Bump version to 5.15.12
  * Update documentation of qWaitForWindowActive / qWaitForWindowExposed
  * QtHttp: Lower the severity of some log output
  * StyleSheetStyle: Fix color of placeholder texts in text edits
  * Android: Fix flickering on split screen mode
  * Update url to IAccessible2 Specification</changelog>
  <changelog author="alarrosa@suse.com" date="1704283200">- Update to version 5.15.12+kde147:
  * Http2: fix potential overflow in assemble_hpack_block()
    (bsc#1218413, CVE-2023-51714)
  * HPack: fix incorrect integer overflow check
  * HPack: fix a Yoda Condition</changelog>
  <changelog author="fvogt@suse.com" date="1708084800">- Update to version 5.15.12+kde151:
  * Improve KTX file reading memory safety (CVE-2024-25580, boo#1219996)
  * Revert "xcb: only set base size when it's valid"
  * Fix potential leak of QPropertyAnimation in QLineEditIconButton
  * QBitArray: correct inline keyword</changelog>
  <changelog author="alarrosa@suse.com" date="1720785600">- Add patch from upstream to fix a regression in the ODBC driver
  (bsc#1227513, QTBUG-112375):
  * 0001-QSQL-ODBC-fix-regression-trailing-NUL.patch
  * 0002-SQL-ODBC-Pass-correct-length-to-SQLColAttribute.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1722945600">- Add rebased upstream patch to delay any HTTP2 communication until
  encrypted() can be responded to (bsc#1227426, CVE-2024-39936):
  * 0001-HTTP2-Delay-any-communication-until-encrypted-can-be.patch
- Add upstream patch to fix a NULL pointer dereference via the
  function QXcbConnection::initializeAllAtoms() when there is
  anomalous behavior from the X server (bsc#1222120,
  CVE-2023-45935):
  * 0001-xcb-guard-a-pointer-before-usage.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756728000">- Add patch from upstream to fix a precondition violation in call
  to QByteArrayView::at() which can cause crashes (bsc#1243958,
  CVE-2025-5455):
  * 0001-qDecodeDataUrl-fix-precondition-violation-in-call-to.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756814400">- Add patch from upstream to initialize a member variable that was
  uninitialized under some circumstances:
  * 0001-QObjectPrivateSignal-initialize-all-members.patch
- Add patch from upstream to fix a crash when parsing a particular
  glyph in a particular font (QTBUG-124310):
  * 0001-Avoid-crash-in-font-distancefield-computation.patch
  * 0002-Fix-crash-in-font-distancefield-computation.patch
- Add patch from upstream to fix avoid repeatedly registering
  xsettings callbacks when switching cursor themes:
  * 0001-xcb-Avoid-repeatedly-registering-xsettings-callbacks-When.patch
- Add patch from upstream to check validity of RandR output info
  before using it (QTBUG-128906):
  * 0001-xcb-check-validity-of-RandR-output-info-before-using-it.patch
- Add patch from upstream to fix reparenting a window so it takes
  effect even if there are no other state changes to the window:
  * 0001-xcb-Sync-XCB-connection-after-reparenting-window.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756900800">- Add patch from upstream to fix a low performance when processing
  XML data in encodeText (bsc#1239896, CVE-2025-30348):
  * 0001-XML_QDom-speedup-encodeText.patch</changelog>
</package>
<package pkgid="64006ec35842a84b5dd61cbef12db48c6da4fb41219f4af444866edd678f3730" name="libqt5-qtbase-devel" arch="x86_64">
  <version epoch="0" ver="5.15.12+kde151" rel="150600.3.9.1"/>
  <changelog author="fvogt@suse.com" date="1678968000">- Update to version 5.15.8+kde183:
  * Add nullptr guard in QStyleSheetStyle::drawPrimitive(PE_PanelLineEdit)
  * QAbstractItemView: don't access invalid indexes on copy-key
  * Apply CVE-2023-24607-qtbase-5.15.diff (CVE-2023-24607,
    bsc#1209616)
  * QXcbConnection::getTimestamp: do not return stale timestamp
  * QToolButton: Elide text when constraints prevent from showing whole text
  * correctly set up ref counting in QThreadPool::tryStart(std::function)
  * Do not set Qt::ToolTip flag for QShapedPixmapWindow
  * Fix deletion order also for QImageReader/Writer::setDevice()
  * Fix deletion order in QImageReader/Writer destructors
  * QNetworkReply: Fix typos in the documentation
  * Doc: Fix typo in the online documentation template
  * Doc: Link to page documenting Qt trademarks in the copyright footer
  * [doc] Fix typo in QBuffer::setBuffer() description
  * qwindowsdrag: Fix typo in documentation
  * openglblacklists: Fix typo in description
  * qxcbscreen: Fix typo in documentation
  * Fix typos in SQL driver documentation
  * qxcbwindow.cpp: Fix sign-compare and another warnings
  * QToolButton: reimplement the fix for QTBUG-95255
  * QSysInfo::prettyProductName(): Add macOS Ventura product name
  * QSysInfo::prettyProductName(): add missing macOS product names
  * xcb: correctly disconnect xsettings callbacks
  * ibus: add SetCursorLocationRelative in InputContext.xml</changelog>
  <changelog author="fvogt@suse.com" date="1680523200">- Update to version 5.15.8+kde185:
  * QFSFileEngine: fix overflow bug when using lseek64
  * Add QImage null check when QOpenGLTexture converts
- Add patch to fix return key handling in QGroupBox on GNOME (bsc#1209364):
  * 0001-Revert-QGnomeTheme-Allow-Space-Return-Enter-and-Sele.patch
- Add patch to fix XInput2 events in big-endian X11 clients (bsc#1204883, QTBUG-105157):
  * big-endian-scroll.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1682078400">- Update to version 5.15.9+kde151, rebased upstream:
  * QCborValue: fix incorrect to{Array,Map} when the value is empty
  * QMargins: fix a missing "full stop" in the docs
  * QLibrary: restore translated string
  * QLibrary: fix possible arg() format clobbering
  * iOS: Use python3 for enumerating test target devices
  * Android: Treat ACTION_CANCEL as TouchCancelEvent
  * Doc: Fix broken formatting
  * QFileSystemEngine: fix potential formatting error
  * QString::asprintf: check that passing field widths as arguments works
  * Backport recent QFlags tests
  * network: Fix typos in documentation
  * Fix accuracy with screen composition
  * Doc: Update documentation for QElapsedTimer's in Windows
  * Document that QStandardPath::findExecutable works with absolute paths
  * macOS: Use native resize cursors for diagonal resize
  * Fix clipped glyphs in text rendering of QGraphicsTextItem
  * Change comparison data type to fix int overflow
  * Add missing Q_WEAK_OVERLOAD definition
  * Update QFileInfo docs to mention macOS aliases
  * Distinguish macOS aliases from normal symbolic links
  * Windows QPA: Fix frameless maximize on secondary screens
  * Rewrite tst_qdataurl as a data-driven test
  * Fix compilation for wasm
  * QIOSFileDialog/QIOSDocumentPickerController - handle dismissed view controller
  * Fix QDockWidget's dock area permissions after hovering
  * Fix C++20 ambiguous relational operators between QJsonValue{,Ref}
  * Android: make sure that orientationChange is reported after resize
  * Android: set all QScreen's geometry-related parameters together
  * Blacklist: test cases blacklisted in tst_QDBusConnection:
  * wasm:  fix issue with passing username/password to network request
  * macOS: Pass multi arch flags when linking qmake
  * QCocoaFileDialogHelper: Always enable symlinks and aliases to directories
  * Android: terminate argv passed to main() with nullptr
  * Update bundled libjpeg-turbo to version 2.1.3
  * ANGLE: Load the DirectX libraries from the system path directly
  * SQLite: Update SQLite to v3.37.2
  * Fix compiler warnings about unused parameters
  * Fix getsockopt option_value initial initialization
  * Http2: Fix redirect-handling
  * Android A11Y: Fix value rounding
  * Android A11Y: Announce value together with element name when focused
  * Android A11Y: handle valueChanged events
  * tst_QSystemSemaphore: give proper path to test-helper
  * QNX: Silence compiler warning by initializing variable
  * Update LICENSE.QT-LICENSE-AGREEMENT
  * winrt appxmanifest: Properly replace VCLibs version for newer MSVC versions
  * QAbstractSocket: Don't pretend pause and resume is a stack
  * Gui: test also depends for clipboard feature
  * QDesktopServices: deprecate destroying URL handlers w/o explicit unsetUrlHandler()
  * macOS: Respect QMAKE_APPLE_DEVICE_ARCHS when building qmake
  * HTTP: Make redirect response parsing more generic
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 20.04
  * Android A11Y: populate child elements when constructing node info
  * Fix issue where readyRead() could happen after disconnected()
  * QStringView: add missing constexpr so we can use is_constant_evaluated
  * Use Android's View.generateViewId() for generating ids for views/surfaces
  * Remove documentation of non-existing QAccessible state
  * Doc: Fix snippet to match actual QFileInfo behavior
  * Android: Re-focus focused accessibility node after orientation change
  * Android A11Y: execute C++ code on main Qt thread
  * Android: extract parentId for hidden object in advance
  * xcb: Show valuator atom names properly in categorized logging
  * Android: replace stacktrace with debug message in search for setService
  * Better document attaching a QFutureWatcher to a started QFuture
  * doc: Update GenericDataLocation location on iOS
  * BLACKLIST test_Gestures tests for RHEL-8.4
  * QPlainTestLogger: do not print "failure location" if there's no failure
  * QAbstractItemView: do not access invalid model indices (3/N)
  * Win32: always allow the event loop to be woken up by posted events
  * rhi: d3d11: Use __uuidof where we can
  * Don't QEXPECT_FAIL tst_QLineEdit::testQuickSelectionWithMouse on macOS ARM
  * Network: Emit authenticationRequired when using Ntlm
  * testlib: Disable window restoration on macOS in a non-persistent way
  * QAbstractItemView: do not access invalid model indices (2/N)
  * QAbstractItemView: do not access invalid model indices (1/N)
  * QAbstractItemView: code tidies
  * Update float16 part of TestLib selftest
  * QGuiApplication: constant-initialize lastCursorPosition
  * Blacklist tst_QFileSystemWatcher::signalsEmittedAfterFileMoved on all Windows versions
  * [Android]: Handle the screen name, modes and refreshRate properly
  * QVersionNumber: remove the "pure" attribute from commonPrefix()
  * QEvent: initialize the static userEventTypeRegistry constexprly
  * Let QXcbGlxWindow::createVisual fallback to QXcbWindow::createVisual
  * Android A11Y: fix content update notification when object is hidden
  * Android: explicitly remove accessibility focus when element is hidden
  * BLACKLIST tst_qfont for Red Hat 8.4 and Ubuntu 20.04
  * QtCore: includemocs
  * Fix memory leak in QtConcurrent::run when called with a NULL QThreadPool
  * INTEGRITY: Prevent deletion of virtual functions
  * QMake: replace a Q_ASSERT() with a Q_UNREACHABLE()
  * QTransform benchmark: measure what was promised
  * QStaticByteArrayMatcher: add a useful comment
  * QMacStyle: use the 'momentary push in' type for push buttons
  * qopengl.h: Move C header #include(s) out of the QT_NAMESPACE
  * Enable all supported 1.0 device features in QVulkanWindow
  * Fix queue passed to vkQueuePresent
  * QFusionStyle: don't draw an invalid outline for up/down buttons
  * Doc: Make QListIterator snippets more robust
  * QVersionNumber: don't detach() in rvalue QList/QVector ctor
  * QNetworkRequest: Document how Qt handles 301 and 302 status codes
  * Convert date-time to UTC before claiming it's in GMT
  * Remove execute permission from XML files
  * Add test case for style sheet selectors for enum properties
  * FreeType: allow falling back to synthesized bold if desired
  * Fix an assertion failure in massageAdjustedDateTime()
  * Relax tst_qvulkan::vulkanVersionRequest to make it compatible with 1.1
  * Doc: Replace "C:Documents and Settings" paths
  * QOrderedMutexLocker: fix compilation with C++11
  * QHttpNetworkConnection: Always set proxy settings to all channels
  * Add a markdown writer test for a checklist item ending with `code`
  * Use QTextCharFormat::fontFixedPitch to remember Markdown backtick spans
  * QWizardLayoutInfo: make == and != operators const
  * Revert "Android: Fix screen flicker issues"
  * macOS: Handle momentum scroll NSEventPhaseBegan when scroll had ended
  * SQLite: Update SQLite to v3.37.0
  * Update copyright year to 2022
  * QTzTimeZonePrivate: use ctor delegation instead of init()
  * QTzTimeZonePrivate: fix permanently-detaching m_icu
  * tst_QGraphicsView: fix memleak
  * Doc: Update external links to Qt Creator Manual
  * macOS: assume an unidentified tablet device is a stylus
  * tst_QItemModel: fix memleaks
  * tst_qanimationgroup: fix memleaks
  * QAbstractAnimation: add missing forward-declaration
  * [doc] QCoreApplication::installTranslator() doesn't take ownership
  * tst_qtranslator: fix memleak
  * QTestData: fix streaming of u8 string literals in C++20 mode
  * QThread/Unix: extract duplicate code
  * QWindowPrivate: fix inconsistent inline on some methods
  * tst_QStringList: check that join(u'0') embeds NULs
  * macOS: Sanitize scroll deltas for NSEventPhaseCancelled
  * tst_qsharedmemory: skip readOnly() test under asan
  * QXmlStreamReader: update test distribution
  * QZipReader: update to unzip partly broken archives
  * Deliver context menu event with correct coordinates to widgets in popups
  * QTextHtmlParser: fix prefix lookahead and html comments
  * QtConcurrent::run crashes on program exit
  * tst_QPropertyAnimation: fix leaks occurring under normal operation
  * tst_QPropertyAnimation: fix wrong comment
  * QLogging: fix potential missing NUL-terminator when calling OutputDebugString
  * Fix qt_scrollRectInImage when scrolling outside of the image
- Commits dropped by the rebase:
  * Fix compile with Qt5: Use QString::mid instead of QString::sliced
  * Restore C++11 compatibility after e8b9f4c28d3ab5e960dc54f2dc0c4b749b0b50e0
  * QDateTime: Don't require c++17</changelog>
  <changelog author="fvogt@suse.com" date="1683633600">- Amend patch to fix mouse grabbing as well (bsc#1211024):
  * big-endian-scroll.patch</changelog>
  <changelog author="fvogt@suse.com" date="1684929600">- Update to version 5.15.9+kde154:
  * Hsts: match header names case insensitively (CVE-2023-32762,
    QTBUG-113392, bsc#1211797)
  * Fix specific overflow in qtextlayout (CVE-2023-32763,
    QTBUG-113337, bsc#1211798)
  * QDnsLookup/Unix: make sure we don't overflow the buffer
    (CVE-2023-33285, boo#1211642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1686657600">- Update to version 5.15.10+kde129, rebased upstream:
  * Ssl: Copy the on-demand cert loading bool from default config
  * Schannel: Reject certificate not signed by a configured CA certificate (boo#1211994, CVE-2023-34410)
  * qnetworkreplyfileimpl_p.h: fix header guard name
  * Revert "Draw the cursor considering the descent is 0"
  * Use pkgconfig in order to find libproxy configuration
  * Upgrade PCRE2 to 10.40
  * Android A11Y: handle LocationChanged event only for focused element
  * Port binary JSON to new special integer bitfields
  * INTEGRITY: enable C99 globally
  * QObject: mark two error reporting functions COLD
  * Endian: Provide special integer bitfield unions
  * Android: set useLegacyPackaging to true in build.gradle
  * QWidgetTextControl: port to new-style connects (faster)
  * Sync qxmlstream.g with qxmlstreamparser_p.h [1/2]: switched lines
  * tst_QNetworkReply try stabilize autoDeleteReplies tests
  * Remove duplicated include for &lt;limits&gt;
  * Fix recursion crash when calling setStyleSheet with `qproperty-styleSheet`
  * qwindowsxpstyle: Fix typos in documentation
  * Correct prefix reported for end element in QXmlStreamReader
  * Android A11Y: Add supported role infos to A11yNodeInfo
  * Fix handling of DateTime values in QSettings
  * Fix off-by-one for "typically" lowest value INT_MIN
  * xml: Fix typos in documentation
  * QWindowsWindow: Fix typo in documentation
  * includemocs (updated script)
  * widgets: Fix typos in documentation
  * cocoa: Fix typo in debug messages
  * Only scroll QMenu when there is a valid active action
  * QTimer: Add note in documentation
  * Fix QListView assert when the last row is moved in IconMode
  * QFileDialog: Fix adding default suffix when file path contains dot
  * QLineEdit: account for the placeholderText when computing lineRect
  * QFileDialog::saveFileContent crashes on accept
  * QCompleter: QCompleter unexpectedly changes QLineEdit text
  * Fix build error on iOS with the configure option -qtnamespace
  * Draw the cursor considering the descent is 0
  * Remove pure-virtual-signals.h include from tst_moc.cpp
  * plugins: image formats - fix odr violation
  * dbus: Fix typos
  * qwindowsdialoghelpers: Fix typo in documentation
  * QTableView: Document the customizations applied to QHeaderView
  * Unicodetools: compile
  * eglfs_x11: Fix running flag linkage
  * qcompilerdetection.h: add Q_CC_{GNU,MSVC,CLANG}_ONLY macros
  * Fix CMake warning about "missing closing ' quote"
  * Fix alignment of next/prev links in offline style
  * QtDBus: includemocs
  * Image Plugins: includemocs(-ish)
  * QtGui: includemocs
  * QXcbNativeInterface: remove unused field m_sysTraySelectionAtom
  * Windows QPA: Fix slowdown with large table/tree views with accessibility
  * Macstyle: fix the text color on the disabled button
  * QMacStyle: fix tool buttons (in checked mode)
  * QTeamCityLogger: fix .arg() placeholder injection
  * QAbstractTestLogger: disable copying
  * Fix errorMessageFromComError()
  * QtNetwork: includemocs
  * AppleUnifiedLogger: Remove manually managed os_log_t cache
  * examples: add WindowStaysOnBottomHint into preview text
  * QSharedPointer: Use matching new/delete
  * QIbusPlatformInputContextPlugin: includemocs
  * QGtk3ThemePlugin: includemocs
  * QTuioTouchPlugin: includemocs
  * QtWidgets: includemocs v2022
  * QMYSQLDriverPlugin: includemocs
  * QtDeviceDiscoverySupportPrivate: includemocs
  * QLinuxFbIntegrationPlugin: includemocs
  * QtPrintSupport: includemocs
  * QSQLiteDriverPlugin: includemocs
  * QtFbSupportPrivate: includemocs
  * QXdgDesktopPortalThemePlugin: includemocs
  * QtTest: includemocs
  * QComposePlatformInputContextPlugin: includemocs
  * QtSql: includemocs
  * QVncIntegrationPlugin: includemocs
  * Fix backingstore fractional DPR glitches for widgets in child windows
  * Include &lt;limits&gt; where std::numeric_limits is used
  * QtInputSupportPrivate: includemocs
  * Document the default value of QSFPM::sortOrder()
  * Better document how to enable sorting in QSPFM
  * Correct documentation of INI format's loss of type information
  * Android: add missing properties in AndroidManifest.xml
  * Fix assertion failure when parsing a doubly-invalid date-time text
  * Windows QPA: Correct mistake when calculating minmaxinfo
  * Android: replace ndk.dir with android.ndkVersion in build.gradle
  * Android: remove the old copy of gradle.properties after reading it
  * CMake Android Support: Fix signing of APKs
  * Android: fix A11Y object description
  * macOS: Fix warning about comparing different types in QCocoaScreen::isOnline
  * Fix qmake build on FreeBSD
  * Update documentation of enum Qt::DockWidgetArea
  * xcb: recreate xcb window under some conditions
  * objc_namespace: Add support for universal binaries
  * objc_namespace: Fix misspelled argument for silencing output
  * objc_namespace: Update parsing logic to account for otool changes
  * Blacklist passwordAuth for Ubuntu 20.04
  * Android: wrap QAndroidInputContext's m_focusObject in a QPointer
  * Fix compilation with GCC 12 (and on Fedora 35 and newer)
  * Chip example: fix an accidental bool-&gt;int conversion when using PMF connections
  * qmake: Add support for C++23
  * Android: use BCP 47 tag to create a correct Locale for QTimeZone::displayName()
  * QDateTime: fix adjusted datetime handling
  * Fix crash in tst_qmltc_examples on Android
  * macOS: Remove dead code for focus ring handling in Mac style
  * Detach for colortransforms of indexed formats
  * tst_QTcpSocket::connectToHostError - handle possible timeouts
  * CoreText: Avoid populating font family aliases if family was populated
  * Graphicsview: Avoid background clearing glitches under fractional DPR
  * Windows QPA: Avoid slowdown with UI Automation name change notification
  * Windows QPA: Avoid sending accessibility notifications before activation
  * Windows: Fix potential crash when retrieving default printer
  * Make Ubuntu with its non-standard security level happy
  * Android: Blacklist failing tests on tst_QGraphicsProxyWidget
  * Update LA 4.4.1
  * iOS A11Y: Set more accessibilityTraits
  * QNX: Fix compiler warning by when FEATURE_clipboard is not enabled
  * Document that native file dialogs might not show a title
  * Doc: Remove mentionings of overflows from QElapsedTimer
  * QTextMarkdownImporter: don't apply text char format to list item block
- Commits dropped by the rebase:
  * QBuffer: add missing &lt;limits&gt; include
  * Fix developer build</changelog>
  <changelog author="gmbr3@opensuse.org" date="1687953600">- Change %_libqt5_libexecdir to %_libexecdir/qt5 (bsc#1174075)</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch icu-devel requires to pkgconfig to allow switching libicu
  versions</changelog>
  <changelog author="fvogt@suse.com" date="1695902401">- Update to version 5.15.10+kde159 (bsc#1214327, CVE-2023-37369):
  * Fix CVE-2023-43114
  * QMimeDatabase: fix detection of pattern conflict in different prefixes
  * Fix highdpi conversion of QTabletEvent coordinates on xcb
  * widget: set WA_X11NetWmWindowType* after xcb window was created
  * Fix crash when setting override cursor on multiple clients
  * QAccessibleWidget: Remove pointless ZWSP in warning message
  * Android A11Y: Fix deadlock in QtAndroidAccessibility::runInObjectContext()
  * Correctly parse non BMP char refs in the sax parser
  * Clear the _X version of alongside the enum deprecator
  * Fix UB (signed char passed to &lt;cctype&gt; function)
  * Qt3DRender: includemocs
  * Fix capitalization error in auto-generated qdbusmacros.h include
  * QColorDialog: Ignore mouse move events when no mouse button is pressed
  * QHostInfo: fix remaining slotObj leaks
  * QXmlStreamReader: Raise error on unexpected tokens (CVE-2023-38197,
    QTBUG-92113, QTBUG-95188, bsc#1213326)
  * QTextLayout: Reconsider cursor drawing on TextObject
  * Ensure consistent cursor width under fractional scaling
  * Fix QTextEdit cursor rectangle vertical positioning
  * Return 0 in QWindow::winId in case of failed platform window creation
  * Doc: note QWindow::winId() will cause platform window creation
  * QSslDiffieHellmanParameters: fix mem-leak
  * QHostInfo: fix leaking slot object
  * Make sure we don't count down past 0 QT_FATAL_CRITICALS
  * QLogging: DRY isFatal(QtMsgType)
  * tst_QXmlStream: remove unneeded _ba UDLs
  * Fix typo in QXmlStreamReader error message
  * QXmlStreamReader: make fastScanName() indicate parsing status to callers
  * QXmlStreamReader: change fastScanName() to take a Value*
  * Fix Croatia's currency
  * SSL: upgrade the default DH parameters</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1696593600">- Update to version 5.15.11+kde134, rebased upstream:
  * Revert "Windows QPA: Add support to UiaRaiseNotificationEvent()"
  * FileChooser portal: Make sure filter.name is not empty
  * QPersistentModelIndex: fix UB (op&lt; on unrelated pointers)
  * Avoid crash when keysymToQtKey(keysym, Qt::ControlModifier) is called
  * a11y atspi: translate coords for GetOffsetAtPoint the right way
  * a11y atspi: Take dialog into account as top-level window
  * a11y atspi: Fix incorrect use of x instead of y position
  * macOS: Handle asynchronous deminiaturizing of windows
  * QTranslator: generalize a UNIX-only path
  * iOS, input panel: be more careful before enabling QIOSKeyboardListener
  * Android: Fix flickering on window resize and show keyboard
  * Android A11Y: Check for active surface before calling into native code
  * xcb: Delete touch points without target windows
  * Blacklist 1 tests in tst_QDBusConnection on ubuntu-20.04
  * Fix CMake builds without ANDROID_SDK
  * Blacklist 2 tests in tst_Http2 on ubuntu-20.04
  * Blacklist 1 tests in tst_QSqlQuery on macos
  * Defer creating the special shaders in the texture blitter
  * tst_QSslSocket::serverCipherPreferencies - fix for OpenSSL v3
  * QTemporaryFile: document rename() differences from QFile
  * Doc: 3rd party: Fix reference to FreeType LICENSE.txt
  * Update bundled libjpeg-turbo to version 2.1.4
  * tst_QSsSocket: fix verifyClientCertificate with OpenSSL 3
  * tst_QSslSocket: regenerate certificate used for setLocalCertificateChain
  * tst_QSslSocket::protocolServerSide - make it work with OpenSSL v3
  * tst_QSslSocket::oldErrorsOnSocketReuse - make it work with OpenSSL v3
  * Update zconf.h prefixes to match zlib v1.2.12 update
  * xcb: fix D&amp;D in same xembed client
  * xcb: use global coordinates for position of D&amp;D for xembed client
  * Doc: Update QMetaType::metaObject() descriptions
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 22.04
  * BLACKLIST tst_qfont for Ubuntu 22.04
  * BLACKLIST tst_QMenuBar::check_menuPosition for Ubuntu 22.04
  * tst_QDtls::verifyClientCertficiate - update certs for OpenSSL v3
  * QSslCertificate::toText(): add a file to compare against
  * Fix the spelling of the word "combination"
  * tst_QSslCertificate::pkcs12 - skip the test if OpenSSL version &gt;= 3
  * Android A11Y: Fix TalkBack scrolling behavior
  * Android A11Y: Notify android about scroll events
  * QCocoaDrag: don't add pasteboard items with non-absolute URLs
  * QDirPrivate: pass input QList by cref
  * tst_qbytearray: remove qCompress_data for QT_NO_COMPRESS
  * QDeviceDiscoveryUDev: use NSDMI
  * QAuthenticator: Fix crash when using NTLM / Negotiate
  * Provide a native interface instance in minimal platform plugin
  * Android: document the supported clipboard mimetypes
  * Windows: Account for not finding child windows when calling ChildWindowFromPointEx
  * iOS: Send touch events asynchronously to avoid deadlocking UIKit event loop
  * Disable bitcode for iOS
  * macOS: Ignore deprecation for ReleaseIconRef
  * BLACKLIST tst_QApplication::sendEventsOnProcessEvents for Ubuntu 22.04
  * Convert Latin1 to UTF-16 before passing to ICU API
  * Doc: Remove repetition of word in text
  * eglfs: Fix screen cloning when atomic is enabled
  * Fix printing of dpr&gt;1 images on Windows
  * QHttp: Fix handling of redirect loaded from cache
  * Doc: Fix return type of QLEInteger/QBEInteger post-in/decrement ops
  * qmake: Fix installation of separate debug info for plugins
  * iOS: ensure we close inputpanel after clearing focusobject
  * Convert Latin1 to UTF-16 before passing to ICU API
  * qputenv: defend against non-NUL-terminated QByteArray values
  * QFontSubset: remove unused glyphName() overload
  * Statically assert that the __mips_dsp code is only active on 32-bit
  * QGtk3Theme: Ensure gtk uses the same windowing system as Qt
  * tst_QFocusFrame: fix -Wparantheses
  * Sync Vulkan device features between QVulkanWindow and QRhi
  * SQLite: Update SQLite to v3.39.2
  * Update freetype to 2.12.1
  * corelib: Fix typos in documentation
  * QAtomicInteger docs: mention bool and char8_t as 8-bit types
  * qgraphicsitem_cast: replace 0 with nullptr
  * Doc: Hide weak overload template magic from documentation
  * Revert "QDateTime: fix adjusted datetime handling"
  * Fix select handles disappears issues
  * tst_QSslKey: prepare for the migration to OpenSSL v3
  * tst_qnetworkreply: replace server.pem/key pair
  * Disable unit testing setting up QTcpServer on special Apple interfaces
  * qmake/msbuild: Turn off "use full paths in diagnostics" by default
  * qmake/msbuild: Support all /DEBUG:xxx linker options
  * qmake/msbuild: Support all /LTCG:xxx options
  * Android A11Y: Add content change type to content change event
  * Enabler for fractional scaling of text in Qt Quick
  * macOS: Override logical DPI to 72
  * Add QDom internalSubset implementation
  * Fix tst_AndroidAssets, broken by recent changes on assets load speed
  * Android: Improve loading speed of individual assets
  * Darwin: Replace deprecated symbol kIOMasterPortDefault with equivalent
  * macOS: Remove code for handling logical DPI changes
  * Fix an incorrect invocation of llvm-readobj
  * macOS: Ignore deprecation for kOnSystemDisk icon domain
  * Copy only files that belongs to QML module
  * Android: fix wrong position of cursor handle and editpopup menu in split screen
  * Doc: Document QML_IMPORTS_PATH and QMLPATHS
  * Add the missing RCC_DIR to '.qrc' paths when generating deployment settings
  * Android: Fix the offset of the EditPopupMenu
  * xcb: update xkb_state mask as much as possible
  * QDom: Stop treating non-BMP characters as invalid
  * Android 13: Fix warnings on starting an application
  * qxkbcommon: Map Super/Hyper to Meta early enough to have an effect
  * macOS: Ignore update requests for offline displays
  * macOS: Avoid recursively updating screens when window moves screen
  * qmake/MinGW: Install separate debug info of DLLs next to the DLL
  * QMainWindow: fix restoreState() for toolbars
  * Make two QDT benchmarks data-driven and add more rows
  * Fix doc and example of QLoggingCategory::installCategory()
  * qmake: Document Xcode behavior when bundling translation files
  * Android: Fix missing import
  * QByteArray: more GCC 12 -Werror=array-bound whack-a-mole
  * CMake: Fix android sdk version propagation
  * Restore C++20-deprecated mixed-enum bitwise operators
  * Android: Fix ANR when QtService and QtActivity load in same process
  * Fix restart QtActivity
  * QArrayData::data(): do type-punning via quintptr, not char *
  * QIOSTextResponder: recreate responder upon reset
  * QSslSocket: make it work with OpenSSL v3
  * QFileSystemModelPrivate: de-inline ctor and dtor
  * Network: update Public Suffix List
  * macOS: Ensure proper quoting when calling otool in objc_namespace script
  * QKeySequence: Fix the one-off error in the mac glyph array size
- Commits dropped by the rebase:
  * Apply CVE-2022-27404-27405-27406-qtbase-5.15.diff
  * QArrayData: fix UB via reinterpret_cast (crash with FORTIFY_SOURCE=3)
  * Adapt for q_EVP_PKEY_base_id → q_EVP_PKEY_get_base_id rename in OpenSSL 3
  * Don't use a deprecated function if built/linked with OpenSSL v3</changelog>
  <changelog author="christophe@krop.fr" date="1696593601">- Enable the experimental native painting feature to improve
  remote desktop performances (boo#1214915)
  exporting QT_XCB_NATIVE_PAINTING is required to use the feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1697716800">- Update to version 5.15.11+kde138:
  * QLibraryPrivate: Actually merge load hints
  * QPluginLoader: report the right load hints
  * xkb: fix build with libxkbcommon 1.6.0 and later
  * a11y atspi: Map ButtonMenu role to AT-SPI equivalent</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1703851200">- Update to version 5.15.12+kde144, rebased upstream:
  * QMimeDatabase: handle buggy type definitions with circular inheritance
  * xcb: only set base size when it's valid
  * QPixmapCache: fix leaking of QStrings and Keys on clear()
  * OpenFile portal: do not use O_PATH fds
  * QSystemTrayIcon: properly disconnect old menu in setContextMenu()
  * Guard QTabBar against nested event processing during moving tabs
  * QDial: don't crash when min==max and setting a value != min &amp; max
  * QStandardItemModel: don't leak in mimeData()
  * SQL/MySQL: properly initialize variable
  * QWidgetTextControl: ignore invalid input method event
  * Update the LGPL license header
  * SQL/MySQL: fix handling of json column
  * Remove QMAKE_RANLIB and QMAKE_LINK_SHLIB from android/default_pre.prf
  * macOS: Fix less common writing systems on Catalina and later
  * Blacklist 1 tests in tst_QFtp on ubuntu-20.04
  * Update bundled libpng to version 1.6.39
  * Android: Fix signing of APKs that are generated when an AAB is also built
  * Update bundled zlib to version 1.2.13
  * doc: update the limitation of QSystemTrayIcon on X11
  * Blacklist 1 tests in tst_QTimer on ubuntu-20.04
  * Add benchmarks for QLocale number parsing
  * Add benchmarks for QString number parsing
  * Android: Fix incorrect fullscreen dimensions
  * Gtk3Theme: set XCURSOR_SIZE and XCURSOR_THEME for wayland sessions
  * xcb: Flush Display when processing xcb events
  * xcb: Add xlib wrapper for XFlush()
  * QHostAddress: Fix incorrect comparison against 'Any'
  * QSsl[OpenSSL/Android]: Fix hardcoded 1_1 suffix
  * BLACKLIST: tst_QApplication::sendEventsOnProcessEvents for RHEL 9.0
  * QMacStyle: do not set white color for grayed out button
  * Work round macOS's omission of en_DE from its own uiLanguages()
  * Suppress a deprecation warning in tst_QDateTime::toString_enumformat()
  * QJsonValue: fix incorrect to{Array,Object} when the value is empty
  * QGtk3Dialog: remove the #include for empty moc
  * Remove unneeded QWindow from QGtk3Dialog
  * tst_QSslSocket: Delete sslOptions
  * tst_QSslServer: Make the in-process server use TLS1.2
  * Android: fix Gradle warning about using enableUncompressedNativeLibs
  * Mention  limitation of QDir::drives() on Windows
  * QFileSystemEngine/Win: fix incorrect buffer size in currentPath()
  * Android: properly retrieve mime type of uri to for openUrl()
  * Android: Fix clipboard issue with urls
  * Android: Add a way to disable accessibility via an environment var
  * Update bundled libpng to version 1.6.38
  * QIOSMessageDialog::exec - work around 'windowsless' exec
  * QIosScreen: retain the right window
  * tst_Q{BitArray,ContiguousCache}: check not only count(), but size(), too
  * QIosTextResponder: stop using deprecated constants and type
  * qcompilerdetection.h: detect Coverity
  * Android: Fix Display.getRealMetrics deprecation
  * Fix broken Text rendering when noantialiased NativeRendering is used
  * forkfd: fix Clang 15 ATOMIC_VAR_INIT deprecation warning
  * eglfs: Add env.var. to disable the dedicated drmHandleEvent thread
  * doc: Don't put strings into QVector&lt;double&gt;
  * Remove focusProxyAndInputMethods from tst_QWidget
  * Bump version to 5.15.12
  * Update documentation of qWaitForWindowActive / qWaitForWindowExposed
  * QtHttp: Lower the severity of some log output
  * StyleSheetStyle: Fix color of placeholder texts in text edits
  * Android: Fix flickering on split screen mode
  * Update url to IAccessible2 Specification</changelog>
  <changelog author="alarrosa@suse.com" date="1704283200">- Update to version 5.15.12+kde147:
  * Http2: fix potential overflow in assemble_hpack_block()
    (bsc#1218413, CVE-2023-51714)
  * HPack: fix incorrect integer overflow check
  * HPack: fix a Yoda Condition</changelog>
  <changelog author="fvogt@suse.com" date="1708084800">- Update to version 5.15.12+kde151:
  * Improve KTX file reading memory safety (CVE-2024-25580, boo#1219996)
  * Revert "xcb: only set base size when it's valid"
  * Fix potential leak of QPropertyAnimation in QLineEditIconButton
  * QBitArray: correct inline keyword</changelog>
  <changelog author="alarrosa@suse.com" date="1720785600">- Add patch from upstream to fix a regression in the ODBC driver
  (bsc#1227513, QTBUG-112375):
  * 0001-QSQL-ODBC-fix-regression-trailing-NUL.patch
  * 0002-SQL-ODBC-Pass-correct-length-to-SQLColAttribute.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1722945600">- Add rebased upstream patch to delay any HTTP2 communication until
  encrypted() can be responded to (bsc#1227426, CVE-2024-39936):
  * 0001-HTTP2-Delay-any-communication-until-encrypted-can-be.patch
- Add upstream patch to fix a NULL pointer dereference via the
  function QXcbConnection::initializeAllAtoms() when there is
  anomalous behavior from the X server (bsc#1222120,
  CVE-2023-45935):
  * 0001-xcb-guard-a-pointer-before-usage.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756728000">- Add patch from upstream to fix a precondition violation in call
  to QByteArrayView::at() which can cause crashes (bsc#1243958,
  CVE-2025-5455):
  * 0001-qDecodeDataUrl-fix-precondition-violation-in-call-to.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756814400">- Add patch from upstream to initialize a member variable that was
  uninitialized under some circumstances:
  * 0001-QObjectPrivateSignal-initialize-all-members.patch
- Add patch from upstream to fix a crash when parsing a particular
  glyph in a particular font (QTBUG-124310):
  * 0001-Avoid-crash-in-font-distancefield-computation.patch
  * 0002-Fix-crash-in-font-distancefield-computation.patch
- Add patch from upstream to fix avoid repeatedly registering
  xsettings callbacks when switching cursor themes:
  * 0001-xcb-Avoid-repeatedly-registering-xsettings-callbacks-When.patch
- Add patch from upstream to check validity of RandR output info
  before using it (QTBUG-128906):
  * 0001-xcb-check-validity-of-RandR-output-info-before-using-it.patch
- Add patch from upstream to fix reparenting a window so it takes
  effect even if there are no other state changes to the window:
  * 0001-xcb-Sync-XCB-connection-after-reparenting-window.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756900800">- Add patch from upstream to fix a low performance when processing
  XML data in encodeText (bsc#1239896, CVE-2025-30348):
  * 0001-XML_QDom-speedup-encodeText.patch</changelog>
</package>
<package pkgid="1853c28066ee225e2950f2d19116c2f34bde4dd650e7e290caa4a84b2f5bbad5" name="libqt5-qtbase-private-headers-devel" arch="noarch">
  <version epoch="0" ver="5.15.12+kde151" rel="150600.3.9.1"/>
  <changelog author="fvogt@suse.com" date="1678968000">- Update to version 5.15.8+kde183:
  * Add nullptr guard in QStyleSheetStyle::drawPrimitive(PE_PanelLineEdit)
  * QAbstractItemView: don't access invalid indexes on copy-key
  * Apply CVE-2023-24607-qtbase-5.15.diff (CVE-2023-24607,
    bsc#1209616)
  * QXcbConnection::getTimestamp: do not return stale timestamp
  * QToolButton: Elide text when constraints prevent from showing whole text
  * correctly set up ref counting in QThreadPool::tryStart(std::function)
  * Do not set Qt::ToolTip flag for QShapedPixmapWindow
  * Fix deletion order also for QImageReader/Writer::setDevice()
  * Fix deletion order in QImageReader/Writer destructors
  * QNetworkReply: Fix typos in the documentation
  * Doc: Fix typo in the online documentation template
  * Doc: Link to page documenting Qt trademarks in the copyright footer
  * [doc] Fix typo in QBuffer::setBuffer() description
  * qwindowsdrag: Fix typo in documentation
  * openglblacklists: Fix typo in description
  * qxcbscreen: Fix typo in documentation
  * Fix typos in SQL driver documentation
  * qxcbwindow.cpp: Fix sign-compare and another warnings
  * QToolButton: reimplement the fix for QTBUG-95255
  * QSysInfo::prettyProductName(): Add macOS Ventura product name
  * QSysInfo::prettyProductName(): add missing macOS product names
  * xcb: correctly disconnect xsettings callbacks
  * ibus: add SetCursorLocationRelative in InputContext.xml</changelog>
  <changelog author="fvogt@suse.com" date="1680523200">- Update to version 5.15.8+kde185:
  * QFSFileEngine: fix overflow bug when using lseek64
  * Add QImage null check when QOpenGLTexture converts
- Add patch to fix return key handling in QGroupBox on GNOME (bsc#1209364):
  * 0001-Revert-QGnomeTheme-Allow-Space-Return-Enter-and-Sele.patch
- Add patch to fix XInput2 events in big-endian X11 clients (bsc#1204883, QTBUG-105157):
  * big-endian-scroll.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1682078400">- Update to version 5.15.9+kde151, rebased upstream:
  * QCborValue: fix incorrect to{Array,Map} when the value is empty
  * QMargins: fix a missing "full stop" in the docs
  * QLibrary: restore translated string
  * QLibrary: fix possible arg() format clobbering
  * iOS: Use python3 for enumerating test target devices
  * Android: Treat ACTION_CANCEL as TouchCancelEvent
  * Doc: Fix broken formatting
  * QFileSystemEngine: fix potential formatting error
  * QString::asprintf: check that passing field widths as arguments works
  * Backport recent QFlags tests
  * network: Fix typos in documentation
  * Fix accuracy with screen composition
  * Doc: Update documentation for QElapsedTimer's in Windows
  * Document that QStandardPath::findExecutable works with absolute paths
  * macOS: Use native resize cursors for diagonal resize
  * Fix clipped glyphs in text rendering of QGraphicsTextItem
  * Change comparison data type to fix int overflow
  * Add missing Q_WEAK_OVERLOAD definition
  * Update QFileInfo docs to mention macOS aliases
  * Distinguish macOS aliases from normal symbolic links
  * Windows QPA: Fix frameless maximize on secondary screens
  * Rewrite tst_qdataurl as a data-driven test
  * Fix compilation for wasm
  * QIOSFileDialog/QIOSDocumentPickerController - handle dismissed view controller
  * Fix QDockWidget's dock area permissions after hovering
  * Fix C++20 ambiguous relational operators between QJsonValue{,Ref}
  * Android: make sure that orientationChange is reported after resize
  * Android: set all QScreen's geometry-related parameters together
  * Blacklist: test cases blacklisted in tst_QDBusConnection:
  * wasm:  fix issue with passing username/password to network request
  * macOS: Pass multi arch flags when linking qmake
  * QCocoaFileDialogHelper: Always enable symlinks and aliases to directories
  * Android: terminate argv passed to main() with nullptr
  * Update bundled libjpeg-turbo to version 2.1.3
  * ANGLE: Load the DirectX libraries from the system path directly
  * SQLite: Update SQLite to v3.37.2
  * Fix compiler warnings about unused parameters
  * Fix getsockopt option_value initial initialization
  * Http2: Fix redirect-handling
  * Android A11Y: Fix value rounding
  * Android A11Y: Announce value together with element name when focused
  * Android A11Y: handle valueChanged events
  * tst_QSystemSemaphore: give proper path to test-helper
  * QNX: Silence compiler warning by initializing variable
  * Update LICENSE.QT-LICENSE-AGREEMENT
  * winrt appxmanifest: Properly replace VCLibs version for newer MSVC versions
  * QAbstractSocket: Don't pretend pause and resume is a stack
  * Gui: test also depends for clipboard feature
  * QDesktopServices: deprecate destroying URL handlers w/o explicit unsetUrlHandler()
  * macOS: Respect QMAKE_APPLE_DEVICE_ARCHS when building qmake
  * HTTP: Make redirect response parsing more generic
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 20.04
  * Android A11Y: populate child elements when constructing node info
  * Fix issue where readyRead() could happen after disconnected()
  * QStringView: add missing constexpr so we can use is_constant_evaluated
  * Use Android's View.generateViewId() for generating ids for views/surfaces
  * Remove documentation of non-existing QAccessible state
  * Doc: Fix snippet to match actual QFileInfo behavior
  * Android: Re-focus focused accessibility node after orientation change
  * Android A11Y: execute C++ code on main Qt thread
  * Android: extract parentId for hidden object in advance
  * xcb: Show valuator atom names properly in categorized logging
  * Android: replace stacktrace with debug message in search for setService
  * Better document attaching a QFutureWatcher to a started QFuture
  * doc: Update GenericDataLocation location on iOS
  * BLACKLIST test_Gestures tests for RHEL-8.4
  * QPlainTestLogger: do not print "failure location" if there's no failure
  * QAbstractItemView: do not access invalid model indices (3/N)
  * Win32: always allow the event loop to be woken up by posted events
  * rhi: d3d11: Use __uuidof where we can
  * Don't QEXPECT_FAIL tst_QLineEdit::testQuickSelectionWithMouse on macOS ARM
  * Network: Emit authenticationRequired when using Ntlm
  * testlib: Disable window restoration on macOS in a non-persistent way
  * QAbstractItemView: do not access invalid model indices (2/N)
  * QAbstractItemView: do not access invalid model indices (1/N)
  * QAbstractItemView: code tidies
  * Update float16 part of TestLib selftest
  * QGuiApplication: constant-initialize lastCursorPosition
  * Blacklist tst_QFileSystemWatcher::signalsEmittedAfterFileMoved on all Windows versions
  * [Android]: Handle the screen name, modes and refreshRate properly
  * QVersionNumber: remove the "pure" attribute from commonPrefix()
  * QEvent: initialize the static userEventTypeRegistry constexprly
  * Let QXcbGlxWindow::createVisual fallback to QXcbWindow::createVisual
  * Android A11Y: fix content update notification when object is hidden
  * Android: explicitly remove accessibility focus when element is hidden
  * BLACKLIST tst_qfont for Red Hat 8.4 and Ubuntu 20.04
  * QtCore: includemocs
  * Fix memory leak in QtConcurrent::run when called with a NULL QThreadPool
  * INTEGRITY: Prevent deletion of virtual functions
  * QMake: replace a Q_ASSERT() with a Q_UNREACHABLE()
  * QTransform benchmark: measure what was promised
  * QStaticByteArrayMatcher: add a useful comment
  * QMacStyle: use the 'momentary push in' type for push buttons
  * qopengl.h: Move C header #include(s) out of the QT_NAMESPACE
  * Enable all supported 1.0 device features in QVulkanWindow
  * Fix queue passed to vkQueuePresent
  * QFusionStyle: don't draw an invalid outline for up/down buttons
  * Doc: Make QListIterator snippets more robust
  * QVersionNumber: don't detach() in rvalue QList/QVector ctor
  * QNetworkRequest: Document how Qt handles 301 and 302 status codes
  * Convert date-time to UTC before claiming it's in GMT
  * Remove execute permission from XML files
  * Add test case for style sheet selectors for enum properties
  * FreeType: allow falling back to synthesized bold if desired
  * Fix an assertion failure in massageAdjustedDateTime()
  * Relax tst_qvulkan::vulkanVersionRequest to make it compatible with 1.1
  * Doc: Replace "C:Documents and Settings" paths
  * QOrderedMutexLocker: fix compilation with C++11
  * QHttpNetworkConnection: Always set proxy settings to all channels
  * Add a markdown writer test for a checklist item ending with `code`
  * Use QTextCharFormat::fontFixedPitch to remember Markdown backtick spans
  * QWizardLayoutInfo: make == and != operators const
  * Revert "Android: Fix screen flicker issues"
  * macOS: Handle momentum scroll NSEventPhaseBegan when scroll had ended
  * SQLite: Update SQLite to v3.37.0
  * Update copyright year to 2022
  * QTzTimeZonePrivate: use ctor delegation instead of init()
  * QTzTimeZonePrivate: fix permanently-detaching m_icu
  * tst_QGraphicsView: fix memleak
  * Doc: Update external links to Qt Creator Manual
  * macOS: assume an unidentified tablet device is a stylus
  * tst_QItemModel: fix memleaks
  * tst_qanimationgroup: fix memleaks
  * QAbstractAnimation: add missing forward-declaration
  * [doc] QCoreApplication::installTranslator() doesn't take ownership
  * tst_qtranslator: fix memleak
  * QTestData: fix streaming of u8 string literals in C++20 mode
  * QThread/Unix: extract duplicate code
  * QWindowPrivate: fix inconsistent inline on some methods
  * tst_QStringList: check that join(u'0') embeds NULs
  * macOS: Sanitize scroll deltas for NSEventPhaseCancelled
  * tst_qsharedmemory: skip readOnly() test under asan
  * QXmlStreamReader: update test distribution
  * QZipReader: update to unzip partly broken archives
  * Deliver context menu event with correct coordinates to widgets in popups
  * QTextHtmlParser: fix prefix lookahead and html comments
  * QtConcurrent::run crashes on program exit
  * tst_QPropertyAnimation: fix leaks occurring under normal operation
  * tst_QPropertyAnimation: fix wrong comment
  * QLogging: fix potential missing NUL-terminator when calling OutputDebugString
  * Fix qt_scrollRectInImage when scrolling outside of the image
- Commits dropped by the rebase:
  * Fix compile with Qt5: Use QString::mid instead of QString::sliced
  * Restore C++11 compatibility after e8b9f4c28d3ab5e960dc54f2dc0c4b749b0b50e0
  * QDateTime: Don't require c++17</changelog>
  <changelog author="fvogt@suse.com" date="1683633600">- Amend patch to fix mouse grabbing as well (bsc#1211024):
  * big-endian-scroll.patch</changelog>
  <changelog author="fvogt@suse.com" date="1684929600">- Update to version 5.15.9+kde154:
  * Hsts: match header names case insensitively (CVE-2023-32762,
    QTBUG-113392, bsc#1211797)
  * Fix specific overflow in qtextlayout (CVE-2023-32763,
    QTBUG-113337, bsc#1211798)
  * QDnsLookup/Unix: make sure we don't overflow the buffer
    (CVE-2023-33285, boo#1211642)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1686657600">- Update to version 5.15.10+kde129, rebased upstream:
  * Ssl: Copy the on-demand cert loading bool from default config
  * Schannel: Reject certificate not signed by a configured CA certificate (boo#1211994, CVE-2023-34410)
  * qnetworkreplyfileimpl_p.h: fix header guard name
  * Revert "Draw the cursor considering the descent is 0"
  * Use pkgconfig in order to find libproxy configuration
  * Upgrade PCRE2 to 10.40
  * Android A11Y: handle LocationChanged event only for focused element
  * Port binary JSON to new special integer bitfields
  * INTEGRITY: enable C99 globally
  * QObject: mark two error reporting functions COLD
  * Endian: Provide special integer bitfield unions
  * Android: set useLegacyPackaging to true in build.gradle
  * QWidgetTextControl: port to new-style connects (faster)
  * Sync qxmlstream.g with qxmlstreamparser_p.h [1/2]: switched lines
  * tst_QNetworkReply try stabilize autoDeleteReplies tests
  * Remove duplicated include for &lt;limits&gt;
  * Fix recursion crash when calling setStyleSheet with `qproperty-styleSheet`
  * qwindowsxpstyle: Fix typos in documentation
  * Correct prefix reported for end element in QXmlStreamReader
  * Android A11Y: Add supported role infos to A11yNodeInfo
  * Fix handling of DateTime values in QSettings
  * Fix off-by-one for "typically" lowest value INT_MIN
  * xml: Fix typos in documentation
  * QWindowsWindow: Fix typo in documentation
  * includemocs (updated script)
  * widgets: Fix typos in documentation
  * cocoa: Fix typo in debug messages
  * Only scroll QMenu when there is a valid active action
  * QTimer: Add note in documentation
  * Fix QListView assert when the last row is moved in IconMode
  * QFileDialog: Fix adding default suffix when file path contains dot
  * QLineEdit: account for the placeholderText when computing lineRect
  * QFileDialog::saveFileContent crashes on accept
  * QCompleter: QCompleter unexpectedly changes QLineEdit text
  * Fix build error on iOS with the configure option -qtnamespace
  * Draw the cursor considering the descent is 0
  * Remove pure-virtual-signals.h include from tst_moc.cpp
  * plugins: image formats - fix odr violation
  * dbus: Fix typos
  * qwindowsdialoghelpers: Fix typo in documentation
  * QTableView: Document the customizations applied to QHeaderView
  * Unicodetools: compile
  * eglfs_x11: Fix running flag linkage
  * qcompilerdetection.h: add Q_CC_{GNU,MSVC,CLANG}_ONLY macros
  * Fix CMake warning about "missing closing ' quote"
  * Fix alignment of next/prev links in offline style
  * QtDBus: includemocs
  * Image Plugins: includemocs(-ish)
  * QtGui: includemocs
  * QXcbNativeInterface: remove unused field m_sysTraySelectionAtom
  * Windows QPA: Fix slowdown with large table/tree views with accessibility
  * Macstyle: fix the text color on the disabled button
  * QMacStyle: fix tool buttons (in checked mode)
  * QTeamCityLogger: fix .arg() placeholder injection
  * QAbstractTestLogger: disable copying
  * Fix errorMessageFromComError()
  * QtNetwork: includemocs
  * AppleUnifiedLogger: Remove manually managed os_log_t cache
  * examples: add WindowStaysOnBottomHint into preview text
  * QSharedPointer: Use matching new/delete
  * QIbusPlatformInputContextPlugin: includemocs
  * QGtk3ThemePlugin: includemocs
  * QTuioTouchPlugin: includemocs
  * QtWidgets: includemocs v2022
  * QMYSQLDriverPlugin: includemocs
  * QtDeviceDiscoverySupportPrivate: includemocs
  * QLinuxFbIntegrationPlugin: includemocs
  * QtPrintSupport: includemocs
  * QSQLiteDriverPlugin: includemocs
  * QtFbSupportPrivate: includemocs
  * QXdgDesktopPortalThemePlugin: includemocs
  * QtTest: includemocs
  * QComposePlatformInputContextPlugin: includemocs
  * QtSql: includemocs
  * QVncIntegrationPlugin: includemocs
  * Fix backingstore fractional DPR glitches for widgets in child windows
  * Include &lt;limits&gt; where std::numeric_limits is used
  * QtInputSupportPrivate: includemocs
  * Document the default value of QSFPM::sortOrder()
  * Better document how to enable sorting in QSPFM
  * Correct documentation of INI format's loss of type information
  * Android: add missing properties in AndroidManifest.xml
  * Fix assertion failure when parsing a doubly-invalid date-time text
  * Windows QPA: Correct mistake when calculating minmaxinfo
  * Android: replace ndk.dir with android.ndkVersion in build.gradle
  * Android: remove the old copy of gradle.properties after reading it
  * CMake Android Support: Fix signing of APKs
  * Android: fix A11Y object description
  * macOS: Fix warning about comparing different types in QCocoaScreen::isOnline
  * Fix qmake build on FreeBSD
  * Update documentation of enum Qt::DockWidgetArea
  * xcb: recreate xcb window under some conditions
  * objc_namespace: Add support for universal binaries
  * objc_namespace: Fix misspelled argument for silencing output
  * objc_namespace: Update parsing logic to account for otool changes
  * Blacklist passwordAuth for Ubuntu 20.04
  * Android: wrap QAndroidInputContext's m_focusObject in a QPointer
  * Fix compilation with GCC 12 (and on Fedora 35 and newer)
  * Chip example: fix an accidental bool-&gt;int conversion when using PMF connections
  * qmake: Add support for C++23
  * Android: use BCP 47 tag to create a correct Locale for QTimeZone::displayName()
  * QDateTime: fix adjusted datetime handling
  * Fix crash in tst_qmltc_examples on Android
  * macOS: Remove dead code for focus ring handling in Mac style
  * Detach for colortransforms of indexed formats
  * tst_QTcpSocket::connectToHostError - handle possible timeouts
  * CoreText: Avoid populating font family aliases if family was populated
  * Graphicsview: Avoid background clearing glitches under fractional DPR
  * Windows QPA: Avoid slowdown with UI Automation name change notification
  * Windows QPA: Avoid sending accessibility notifications before activation
  * Windows: Fix potential crash when retrieving default printer
  * Make Ubuntu with its non-standard security level happy
  * Android: Blacklist failing tests on tst_QGraphicsProxyWidget
  * Update LA 4.4.1
  * iOS A11Y: Set more accessibilityTraits
  * QNX: Fix compiler warning by when FEATURE_clipboard is not enabled
  * Document that native file dialogs might not show a title
  * Doc: Remove mentionings of overflows from QElapsedTimer
  * QTextMarkdownImporter: don't apply text char format to list item block
- Commits dropped by the rebase:
  * QBuffer: add missing &lt;limits&gt; include
  * Fix developer build</changelog>
  <changelog author="gmbr3@opensuse.org" date="1687953600">- Change %_libqt5_libexecdir to %_libexecdir/qt5 (bsc#1174075)</changelog>
  <changelog author="meissner@suse.com" date="1695902400">- switch icu-devel requires to pkgconfig to allow switching libicu
  versions</changelog>
  <changelog author="fvogt@suse.com" date="1695902401">- Update to version 5.15.10+kde159 (bsc#1214327, CVE-2023-37369):
  * Fix CVE-2023-43114
  * QMimeDatabase: fix detection of pattern conflict in different prefixes
  * Fix highdpi conversion of QTabletEvent coordinates on xcb
  * widget: set WA_X11NetWmWindowType* after xcb window was created
  * Fix crash when setting override cursor on multiple clients
  * QAccessibleWidget: Remove pointless ZWSP in warning message
  * Android A11Y: Fix deadlock in QtAndroidAccessibility::runInObjectContext()
  * Correctly parse non BMP char refs in the sax parser
  * Clear the _X version of alongside the enum deprecator
  * Fix UB (signed char passed to &lt;cctype&gt; function)
  * Qt3DRender: includemocs
  * Fix capitalization error in auto-generated qdbusmacros.h include
  * QColorDialog: Ignore mouse move events when no mouse button is pressed
  * QHostInfo: fix remaining slotObj leaks
  * QXmlStreamReader: Raise error on unexpected tokens (CVE-2023-38197,
    QTBUG-92113, QTBUG-95188, bsc#1213326)
  * QTextLayout: Reconsider cursor drawing on TextObject
  * Ensure consistent cursor width under fractional scaling
  * Fix QTextEdit cursor rectangle vertical positioning
  * Return 0 in QWindow::winId in case of failed platform window creation
  * Doc: note QWindow::winId() will cause platform window creation
  * QSslDiffieHellmanParameters: fix mem-leak
  * QHostInfo: fix leaking slot object
  * Make sure we don't count down past 0 QT_FATAL_CRITICALS
  * QLogging: DRY isFatal(QtMsgType)
  * tst_QXmlStream: remove unneeded _ba UDLs
  * Fix typo in QXmlStreamReader error message
  * QXmlStreamReader: make fastScanName() indicate parsing status to callers
  * QXmlStreamReader: change fastScanName() to take a Value*
  * Fix Croatia's currency
  * SSL: upgrade the default DH parameters</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1696593600">- Update to version 5.15.11+kde134, rebased upstream:
  * Revert "Windows QPA: Add support to UiaRaiseNotificationEvent()"
  * FileChooser portal: Make sure filter.name is not empty
  * QPersistentModelIndex: fix UB (op&lt; on unrelated pointers)
  * Avoid crash when keysymToQtKey(keysym, Qt::ControlModifier) is called
  * a11y atspi: translate coords for GetOffsetAtPoint the right way
  * a11y atspi: Take dialog into account as top-level window
  * a11y atspi: Fix incorrect use of x instead of y position
  * macOS: Handle asynchronous deminiaturizing of windows
  * QTranslator: generalize a UNIX-only path
  * iOS, input panel: be more careful before enabling QIOSKeyboardListener
  * Android: Fix flickering on window resize and show keyboard
  * Android A11Y: Check for active surface before calling into native code
  * xcb: Delete touch points without target windows
  * Blacklist 1 tests in tst_QDBusConnection on ubuntu-20.04
  * Fix CMake builds without ANDROID_SDK
  * Blacklist 2 tests in tst_Http2 on ubuntu-20.04
  * Blacklist 1 tests in tst_QSqlQuery on macos
  * Defer creating the special shaders in the texture blitter
  * tst_QSslSocket::serverCipherPreferencies - fix for OpenSSL v3
  * QTemporaryFile: document rename() differences from QFile
  * Doc: 3rd party: Fix reference to FreeType LICENSE.txt
  * Update bundled libjpeg-turbo to version 2.1.4
  * tst_QSsSocket: fix verifyClientCertificate with OpenSSL 3
  * tst_QSslSocket: regenerate certificate used for setLocalCertificateChain
  * tst_QSslSocket::protocolServerSide - make it work with OpenSSL v3
  * tst_QSslSocket::oldErrorsOnSocketReuse - make it work with OpenSSL v3
  * Update zconf.h prefixes to match zlib v1.2.12 update
  * xcb: fix D&amp;D in same xembed client
  * xcb: use global coordinates for position of D&amp;D for xembed client
  * Doc: Update QMetaType::metaObject() descriptions
  * BLACKLIST: tst_QGlyphRun::mixedScripts for Ubuntu 22.04
  * BLACKLIST tst_qfont for Ubuntu 22.04
  * BLACKLIST tst_QMenuBar::check_menuPosition for Ubuntu 22.04
  * tst_QDtls::verifyClientCertficiate - update certs for OpenSSL v3
  * QSslCertificate::toText(): add a file to compare against
  * Fix the spelling of the word "combination"
  * tst_QSslCertificate::pkcs12 - skip the test if OpenSSL version &gt;= 3
  * Android A11Y: Fix TalkBack scrolling behavior
  * Android A11Y: Notify android about scroll events
  * QCocoaDrag: don't add pasteboard items with non-absolute URLs
  * QDirPrivate: pass input QList by cref
  * tst_qbytearray: remove qCompress_data for QT_NO_COMPRESS
  * QDeviceDiscoveryUDev: use NSDMI
  * QAuthenticator: Fix crash when using NTLM / Negotiate
  * Provide a native interface instance in minimal platform plugin
  * Android: document the supported clipboard mimetypes
  * Windows: Account for not finding child windows when calling ChildWindowFromPointEx
  * iOS: Send touch events asynchronously to avoid deadlocking UIKit event loop
  * Disable bitcode for iOS
  * macOS: Ignore deprecation for ReleaseIconRef
  * BLACKLIST tst_QApplication::sendEventsOnProcessEvents for Ubuntu 22.04
  * Convert Latin1 to UTF-16 before passing to ICU API
  * Doc: Remove repetition of word in text
  * eglfs: Fix screen cloning when atomic is enabled
  * Fix printing of dpr&gt;1 images on Windows
  * QHttp: Fix handling of redirect loaded from cache
  * Doc: Fix return type of QLEInteger/QBEInteger post-in/decrement ops
  * qmake: Fix installation of separate debug info for plugins
  * iOS: ensure we close inputpanel after clearing focusobject
  * Convert Latin1 to UTF-16 before passing to ICU API
  * qputenv: defend against non-NUL-terminated QByteArray values
  * QFontSubset: remove unused glyphName() overload
  * Statically assert that the __mips_dsp code is only active on 32-bit
  * QGtk3Theme: Ensure gtk uses the same windowing system as Qt
  * tst_QFocusFrame: fix -Wparantheses
  * Sync Vulkan device features between QVulkanWindow and QRhi
  * SQLite: Update SQLite to v3.39.2
  * Update freetype to 2.12.1
  * corelib: Fix typos in documentation
  * QAtomicInteger docs: mention bool and char8_t as 8-bit types
  * qgraphicsitem_cast: replace 0 with nullptr
  * Doc: Hide weak overload template magic from documentation
  * Revert "QDateTime: fix adjusted datetime handling"
  * Fix select handles disappears issues
  * tst_QSslKey: prepare for the migration to OpenSSL v3
  * tst_qnetworkreply: replace server.pem/key pair
  * Disable unit testing setting up QTcpServer on special Apple interfaces
  * qmake/msbuild: Turn off "use full paths in diagnostics" by default
  * qmake/msbuild: Support all /DEBUG:xxx linker options
  * qmake/msbuild: Support all /LTCG:xxx options
  * Android A11Y: Add content change type to content change event
  * Enabler for fractional scaling of text in Qt Quick
  * macOS: Override logical DPI to 72
  * Add QDom internalSubset implementation
  * Fix tst_AndroidAssets, broken by recent changes on assets load speed
  * Android: Improve loading speed of individual assets
  * Darwin: Replace deprecated symbol kIOMasterPortDefault with equivalent
  * macOS: Remove code for handling logical DPI changes
  * Fix an incorrect invocation of llvm-readobj
  * macOS: Ignore deprecation for kOnSystemDisk icon domain
  * Copy only files that belongs to QML module
  * Android: fix wrong position of cursor handle and editpopup menu in split screen
  * Doc: Document QML_IMPORTS_PATH and QMLPATHS
  * Add the missing RCC_DIR to '.qrc' paths when generating deployment settings
  * Android: Fix the offset of the EditPopupMenu
  * xcb: update xkb_state mask as much as possible
  * QDom: Stop treating non-BMP characters as invalid
  * Android 13: Fix warnings on starting an application
  * qxkbcommon: Map Super/Hyper to Meta early enough to have an effect
  * macOS: Ignore update requests for offline displays
  * macOS: Avoid recursively updating screens when window moves screen
  * qmake/MinGW: Install separate debug info of DLLs next to the DLL
  * QMainWindow: fix restoreState() for toolbars
  * Make two QDT benchmarks data-driven and add more rows
  * Fix doc and example of QLoggingCategory::installCategory()
  * qmake: Document Xcode behavior when bundling translation files
  * Android: Fix missing import
  * QByteArray: more GCC 12 -Werror=array-bound whack-a-mole
  * CMake: Fix android sdk version propagation
  * Restore C++20-deprecated mixed-enum bitwise operators
  * Android: Fix ANR when QtService and QtActivity load in same process
  * Fix restart QtActivity
  * QArrayData::data(): do type-punning via quintptr, not char *
  * QIOSTextResponder: recreate responder upon reset
  * QSslSocket: make it work with OpenSSL v3
  * QFileSystemModelPrivate: de-inline ctor and dtor
  * Network: update Public Suffix List
  * macOS: Ensure proper quoting when calling otool in objc_namespace script
  * QKeySequence: Fix the one-off error in the mac glyph array size
- Commits dropped by the rebase:
  * Apply CVE-2022-27404-27405-27406-qtbase-5.15.diff
  * QArrayData: fix UB via reinterpret_cast (crash with FORTIFY_SOURCE=3)
  * Adapt for q_EVP_PKEY_base_id → q_EVP_PKEY_get_base_id rename in OpenSSL 3
  * Don't use a deprecated function if built/linked with OpenSSL v3</changelog>
  <changelog author="christophe@krop.fr" date="1696593601">- Enable the experimental native painting feature to improve
  remote desktop performances (boo#1214915)
  exporting QT_XCB_NATIVE_PAINTING is required to use the feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1697716800">- Update to version 5.15.11+kde138:
  * QLibraryPrivate: Actually merge load hints
  * QPluginLoader: report the right load hints
  * xkb: fix build with libxkbcommon 1.6.0 and later
  * a11y atspi: Map ButtonMenu role to AT-SPI equivalent</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1703851200">- Update to version 5.15.12+kde144, rebased upstream:
  * QMimeDatabase: handle buggy type definitions with circular inheritance
  * xcb: only set base size when it's valid
  * QPixmapCache: fix leaking of QStrings and Keys on clear()
  * OpenFile portal: do not use O_PATH fds
  * QSystemTrayIcon: properly disconnect old menu in setContextMenu()
  * Guard QTabBar against nested event processing during moving tabs
  * QDial: don't crash when min==max and setting a value != min &amp; max
  * QStandardItemModel: don't leak in mimeData()
  * SQL/MySQL: properly initialize variable
  * QWidgetTextControl: ignore invalid input method event
  * Update the LGPL license header
  * SQL/MySQL: fix handling of json column
  * Remove QMAKE_RANLIB and QMAKE_LINK_SHLIB from android/default_pre.prf
  * macOS: Fix less common writing systems on Catalina and later
  * Blacklist 1 tests in tst_QFtp on ubuntu-20.04
  * Update bundled libpng to version 1.6.39
  * Android: Fix signing of APKs that are generated when an AAB is also built
  * Update bundled zlib to version 1.2.13
  * doc: update the limitation of QSystemTrayIcon on X11
  * Blacklist 1 tests in tst_QTimer on ubuntu-20.04
  * Add benchmarks for QLocale number parsing
  * Add benchmarks for QString number parsing
  * Android: Fix incorrect fullscreen dimensions
  * Gtk3Theme: set XCURSOR_SIZE and XCURSOR_THEME for wayland sessions
  * xcb: Flush Display when processing xcb events
  * xcb: Add xlib wrapper for XFlush()
  * QHostAddress: Fix incorrect comparison against 'Any'
  * QSsl[OpenSSL/Android]: Fix hardcoded 1_1 suffix
  * BLACKLIST: tst_QApplication::sendEventsOnProcessEvents for RHEL 9.0
  * QMacStyle: do not set white color for grayed out button
  * Work round macOS's omission of en_DE from its own uiLanguages()
  * Suppress a deprecation warning in tst_QDateTime::toString_enumformat()
  * QJsonValue: fix incorrect to{Array,Object} when the value is empty
  * QGtk3Dialog: remove the #include for empty moc
  * Remove unneeded QWindow from QGtk3Dialog
  * tst_QSslSocket: Delete sslOptions
  * tst_QSslServer: Make the in-process server use TLS1.2
  * Android: fix Gradle warning about using enableUncompressedNativeLibs
  * Mention  limitation of QDir::drives() on Windows
  * QFileSystemEngine/Win: fix incorrect buffer size in currentPath()
  * Android: properly retrieve mime type of uri to for openUrl()
  * Android: Fix clipboard issue with urls
  * Android: Add a way to disable accessibility via an environment var
  * Update bundled libpng to version 1.6.38
  * QIOSMessageDialog::exec - work around 'windowsless' exec
  * QIosScreen: retain the right window
  * tst_Q{BitArray,ContiguousCache}: check not only count(), but size(), too
  * QIosTextResponder: stop using deprecated constants and type
  * qcompilerdetection.h: detect Coverity
  * Android: Fix Display.getRealMetrics deprecation
  * Fix broken Text rendering when noantialiased NativeRendering is used
  * forkfd: fix Clang 15 ATOMIC_VAR_INIT deprecation warning
  * eglfs: Add env.var. to disable the dedicated drmHandleEvent thread
  * doc: Don't put strings into QVector&lt;double&gt;
  * Remove focusProxyAndInputMethods from tst_QWidget
  * Bump version to 5.15.12
  * Update documentation of qWaitForWindowActive / qWaitForWindowExposed
  * QtHttp: Lower the severity of some log output
  * StyleSheetStyle: Fix color of placeholder texts in text edits
  * Android: Fix flickering on split screen mode
  * Update url to IAccessible2 Specification</changelog>
  <changelog author="alarrosa@suse.com" date="1704283200">- Update to version 5.15.12+kde147:
  * Http2: fix potential overflow in assemble_hpack_block()
    (bsc#1218413, CVE-2023-51714)
  * HPack: fix incorrect integer overflow check
  * HPack: fix a Yoda Condition</changelog>
  <changelog author="fvogt@suse.com" date="1708084800">- Update to version 5.15.12+kde151:
  * Improve KTX file reading memory safety (CVE-2024-25580, boo#1219996)
  * Revert "xcb: only set base size when it's valid"
  * Fix potential leak of QPropertyAnimation in QLineEditIconButton
  * QBitArray: correct inline keyword</changelog>
  <changelog author="alarrosa@suse.com" date="1720785600">- Add patch from upstream to fix a regression in the ODBC driver
  (bsc#1227513, QTBUG-112375):
  * 0001-QSQL-ODBC-fix-regression-trailing-NUL.patch
  * 0002-SQL-ODBC-Pass-correct-length-to-SQLColAttribute.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1722945600">- Add rebased upstream patch to delay any HTTP2 communication until
  encrypted() can be responded to (bsc#1227426, CVE-2024-39936):
  * 0001-HTTP2-Delay-any-communication-until-encrypted-can-be.patch
- Add upstream patch to fix a NULL pointer dereference via the
  function QXcbConnection::initializeAllAtoms() when there is
  anomalous behavior from the X server (bsc#1222120,
  CVE-2023-45935):
  * 0001-xcb-guard-a-pointer-before-usage.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756728000">- Add patch from upstream to fix a precondition violation in call
  to QByteArrayView::at() which can cause crashes (bsc#1243958,
  CVE-2025-5455):
  * 0001-qDecodeDataUrl-fix-precondition-violation-in-call-to.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756814400">- Add patch from upstream to initialize a member variable that was
  uninitialized under some circumstances:
  * 0001-QObjectPrivateSignal-initialize-all-members.patch
- Add patch from upstream to fix a crash when parsing a particular
  glyph in a particular font (QTBUG-124310):
  * 0001-Avoid-crash-in-font-distancefield-computation.patch
  * 0002-Fix-crash-in-font-distancefield-computation.patch
- Add patch from upstream to fix avoid repeatedly registering
  xsettings callbacks when switching cursor themes:
  * 0001-xcb-Avoid-repeatedly-registering-xsettings-callbacks-When.patch
- Add patch from upstream to check validity of RandR output info
  before using it (QTBUG-128906):
  * 0001-xcb-check-validity-of-RandR-output-info-before-using-it.patch
- Add patch from upstream to fix reparenting a window so it takes
  effect even if there are no other state changes to the window:
  * 0001-xcb-Sync-XCB-connection-after-reparenting-window.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1756900800">- Add patch from upstream to fix a low performance when processing
  XML data in encodeText (bsc#1239896, CVE-2025-30348):
  * 0001-XML_QDom-speedup-encodeText.patch</changelog>
</package>
<package pkgid="5c5e603b47d4a6a60982b3a3bcc6378e1580ab5e8649ee7e984af1313ae48097" name="libquadmath0" arch="x86_64">
  <version epoch="0" ver="14.3.0+git11799" rel="150000.1.11.1"/>
  <changelog author="rguenther@suse.com" date="1728475200">- Update to gcc-14 branch head, 4af44f2cf7d281f3e4f3957ef, git10750
  * includes libstdc++6 fix for parsing tzdata 2024b [gcc#116657]
- Add gcc14-pr116629.patch to fix ICE with LTO building openvino
  on aarch64 [boo#1230262]</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1732968000">- Add loongarch64 to asan_arch, atomic_arch,
  itm_arch, lsan_arch, tsan_arch and ubsan_arch
- Add larchintrin.h, lasxintrin.h and lsxintrin.h
  headers to gccXY main package in %files section
- Set build_primary_64bit to 1 for loongarch64</changelog>
  <changelog author="adrian@suse.de" date="1733140800">- disable go on loongarch64 for now</changelog>
  <changelog author="mardnh@gmx.de" date="1736078400">- Switch to glibc based cross-compiler for target hppa</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Define ALT_CC_UNDER_TEST and ALT_CXX_UNDER_TEST for compat tests</changelog>
  <changelog author="rguenther@suse.com" date="1738152000">- For cross compilers require the same or newer binutils, newlib
  or cross-glibc that was used at build time.  [bsc#1232526]</changelog>
  <changelog author="rguenther@suse.com" date="1738843200">- Adjust cross compiler requirements to use %requires_ge
- Fix condition on whether to enable plugins or JIT support to
  not check sle_version which is not defined in SLFO but to check
  is_opensuse and suse_version instead.
- Add gcc14-pr118780.patch to make the SLFO config work.</changelog>
  <changelog author="rguenther@suse.com" date="1740052800">- Update to gcc-14 branch head, 9ffecde121af883b60bbe60d0, git11321
  * fixes reported ICE in [bsc#1237442]
- Drop gcc14-pr116629.patch now backported to the branch.</changelog>
  <changelog author="rguenther@suse.com" date="1741608000">- Disable profiling during build when %want_reproducible_builds is set
  [bsc#1238491]</changelog>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
</package>
<package pkgid="5296f4409fdd963dd4b04d95eef3e50d93b9be2fbe54d573ff1949def07102c3" name="libquadmath0" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.3.3"/>
  <changelog author="rguenther@suse.com" date="1743163200">- Update to GCC trunk head, 15.0.1+git9001
  * includes -msplit-patch-nops required for user-space livepatching
    on powerpc
  * includes fix for Ada build with --enable-host-pie
- Adjust for removed avx10_2roundingintrin.h intrinsic header.
- Build GCC executables PIE on SLE.  [bsc#1239938]</changelog>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="bfa36377208add13c10e373e8a6e1b05917fb5e12557bc4b219e39f6e5df42bc" name="libquadmath0" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.6.1"/>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
</package>
<package pkgid="28a878c397a8e10e5a4c72ed07d9c737a7dbc39b204f250785c98b8f53c7773e" name="libquadmath0" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.9.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc14-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="1b19641838740a6d2f3b932580c5f888141098af9cb5642ccbd58be8494a7c48" name="libquadmath0-32bit" arch="x86_64">
  <version epoch="0" ver="14.3.0+git11799" rel="150000.1.11.1"/>
  <changelog author="rguenther@suse.com" date="1728475200">- Update to gcc-14 branch head, 4af44f2cf7d281f3e4f3957ef, git10750
  * includes libstdc++6 fix for parsing tzdata 2024b [gcc#116657]
- Add gcc14-pr116629.patch to fix ICE with LTO building openvino
  on aarch64 [boo#1230262]</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1732968000">- Add loongarch64 to asan_arch, atomic_arch,
  itm_arch, lsan_arch, tsan_arch and ubsan_arch
- Add larchintrin.h, lasxintrin.h and lsxintrin.h
  headers to gccXY main package in %files section
- Set build_primary_64bit to 1 for loongarch64</changelog>
  <changelog author="adrian@suse.de" date="1733140800">- disable go on loongarch64 for now</changelog>
  <changelog author="mardnh@gmx.de" date="1736078400">- Switch to glibc based cross-compiler for target hppa</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Define ALT_CC_UNDER_TEST and ALT_CXX_UNDER_TEST for compat tests</changelog>
  <changelog author="rguenther@suse.com" date="1738152000">- For cross compilers require the same or newer binutils, newlib
  or cross-glibc that was used at build time.  [bsc#1232526]</changelog>
  <changelog author="rguenther@suse.com" date="1738843200">- Adjust cross compiler requirements to use %requires_ge
- Fix condition on whether to enable plugins or JIT support to
  not check sle_version which is not defined in SLFO but to check
  is_opensuse and suse_version instead.
- Add gcc14-pr118780.patch to make the SLFO config work.</changelog>
  <changelog author="rguenther@suse.com" date="1740052800">- Update to gcc-14 branch head, 9ffecde121af883b60bbe60d0, git11321
  * fixes reported ICE in [bsc#1237442]
- Drop gcc14-pr116629.patch now backported to the branch.</changelog>
  <changelog author="rguenther@suse.com" date="1741608000">- Disable profiling during build when %want_reproducible_builds is set
  [bsc#1238491]</changelog>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
</package>
<package pkgid="7328b947bc3c2c35b9c6ac2f7a92328515a32ecdb8052fa920da063b494ec49a" name="libquadmath0-32bit" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.3.3"/>
  <changelog author="rguenther@suse.com" date="1743163200">- Update to GCC trunk head, 15.0.1+git9001
  * includes -msplit-patch-nops required for user-space livepatching
    on powerpc
  * includes fix for Ada build with --enable-host-pie
- Adjust for removed avx10_2roundingintrin.h intrinsic header.
- Build GCC executables PIE on SLE.  [bsc#1239938]</changelog>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="364d3966c5243d019dd45a77c749c727112c0a213a378348ebbe67b8e5377712" name="libquadmath0-32bit" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.6.1"/>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
</package>
<package pkgid="c59be829df44d67d66b5be48b30cfaecc6b1f2abd618a6872f6eb8294ffe93a3" name="libquadmath0-32bit" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.9.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc14-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="4d4afb2eb14908ca1ed89f8d36789474a3953c074922924ac023f0ae985381e0" name="libquadmath0-devel-gcc15" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.3.3"/>
  <changelog author="rguenther@suse.com" date="1743163200">- Update to GCC trunk head, 15.0.1+git9001
  * includes -msplit-patch-nops required for user-space livepatching
    on powerpc
  * includes fix for Ada build with --enable-host-pie
- Adjust for removed avx10_2roundingintrin.h intrinsic header.
- Build GCC executables PIE on SLE.  [bsc#1239938]</changelog>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="7370eb083123f1366d7f74d46d18f99c59bcae3fadc7f5a00be5cd2dafc66646" name="libquadmath0-devel-gcc15" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.6.1"/>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
</package>
<package pkgid="ee446af0d730a8bfa794b97be0ec230d5ac19003c252b5689adb91e8f19b06a3" name="libquadmath0-devel-gcc15" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.9.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc14-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="229b075cf4bb942c0e124c601469a0981261ef1f58fd26c5d11a792102389958" name="librav1e0_6" arch="x86_64">
  <version epoch="0" ver="0.6.6" rel="150600.3.3.1"/>
  <changelog author="asn@cryptomilk.org" date="1591531200">- Update to version 0.3.3
  * https://github.com/xiph/rav1e/releases/tag/v0.3.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1595246400">- Add baselibs.conf: produce librav1e0-32bit, as needed by
  ffmpeg-4, as this newly builds against rav1e.</changelog>
  <changelog author="asn@cryptomilk.org" date="1599652800">- Update to version 0.3.4
  * https://github.com/xiph/rav1e/releases/tag/v0.3.4</changelog>
  <changelog author="asn@cryptomilk.org" date="1610539200">- Update to version 0.4.0
  * https://github.com/xiph/rav1e/releases/tag/v0.4.0</changelog>
  <changelog author="alarrosa@suse.com" date="1617796800">- Update to version 0.4.1
  * https://github.com/xiph/rav1e/releases/tag/v0.4.1</changelog>
  <changelog author="dmueller@suse.com" date="1617796801">- avoid packaging the pkgconfig dir - it comes from filesystem
- spec-cleaner run</changelog>
  <changelog author="asn@cryptomilk.org" date="1622635200">- Fix service for cargo vendor creation</changelog>
  <changelog author="asn@cryptomilk.org" date="1625832000">- Fixed squared artefacts on image when converting to AVIF
  * Added f553646d70fba8e265d436103a73520eb7adec8c.patch</changelog>
  <changelog author="william.brown@suse.com" date="1632830400">- Replace rust-packaging with cargo-packaging</changelog>
  <changelog author="asn@cryptomilk.org" date="1635681600">- Update to version 0.5.0
  * https://github.com/xiph/rav1e/releases/tag/v0.5.0
- Removed f553646d70fba8e265d436103a73520eb7adec8c.patch</changelog>
  <changelog author="william.brown@suse.com" date="1636113600">- Integrate obs_scm, cargo_vendor and cargo_audit to assist automation
  of updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1636459200">- Do not hardcode an author in the changes generator service:
  Attribution happens by the user that actually runs the service.</changelog>
  <changelog author="asn@cryptomilk.org" date="1639483200">- Update to version 0.5.1+0:
  * Fix the dispatcher calling `avx2` code when the sub-architecture does not
    support it.</changelog>
  <changelog author="william.brown@suse.com" date="1641556800">- resolve bsc#1194113 (CVE-2018-25023)
- resolve bsc#1194119 (CVE-2021-45710)</changelog>
  <changelog author="asn@cryptomilk.org" date="1669896000">- Update to version 0.6.1+0:
  * Fix the capi deps
  * Revert "x86: Disable 8x16 16bpc inverse transforms for SSE4.1"
  * inverse_transform_add: Align to dav1d EOB convention
  * x86: Disable 8x16 16bpc inverse transforms for SSE4.1
  * CI: Fix up deploy workflow
  * Add C API for level.
  * Add level to API and CLI.
  * CI: Correct format of target_cpu for x86_64 in deploy workflow
  * Produced optimized binary versions from CI
  * Write level stored in sequence struct.
  * Bump actions/download-artifact from 2 to 3
  * Bump actions/upload-artifact from 2 to 3
  * Bump actions/cache from 2 to 3
  * Update deps
  * Update cargo-c binaries url
  * Add Dependabot configuration for GitHub Actions updates
  * tests: Add three-pass encode with target bitrate
  * Add SIMD helpers to speed up Rust get_sad (#3050)
  * Replace last 16x4 and 4x16 avx2 hbd satd intrinsics with asm (#3051)
  * x86: Add AVX2 HBD SATD asm for 8x8-transformed blocks (#3048)
  * Bump minimum rustc to 1.60, required by clap 4
  * Update clap to 4.0
  * Remove unused regex dependency
  * Cleanup log level parsing
  * Replace actions-rs/toolchain with dtolnay/rust-toolchain
  * Remove action-rs/cargo
  * rate: Retire and separate TwoPassOutParams
  * rate: Estimate target quantizer on first pass
  * segmentation: Reset min_segment on data update
  * Replace AVX2 HBD SATD intrinsics with ASM, for some block sizes (#3039)
  * Remove arrayref dependency
  * Fix new clippy lints
  * Move v_frame to its own repository
  * Add scales and segment thresholds to dump_lookahead_data
  * Fix UB in pred_max test
  * Delete build.sh
  * bin: Admit more than 2 encoder passes
  * Create new speed level 8, drop level 7
  * Keep the version line compatible with 0.5
  * Add back shorthand for `--verbose` and `--quiet` (#3022)
  * Mention cargo-criterion
  * Bump criterion version
  * Update to criterion non-deprecated api
  * Prepare for 0.6.0 release
  * bin: Bring --photon-noise out from under unstable feature
  * Update guide on how to produce target-specific builds
  * CI: Deploy rav1e-ch binary tuned for modern x86_64
  * build: Handle absent CARGO_CFG_TARGET_FEATURE
  * Calculate geometric mean for DistortionScale::inv_mean()
  * Convert plane-level distortion scales to fixed-point
  * Expand precision of DistortionScale to Q14
  * Preserve intermediate precision in get_weighted_sse
  * Add DistortionScale::blog64()
  * Bump several dependencies
  * Remove duplicated constants
  * Remove aq_strength configuration
  * logexp: Correct integer part in blog32_q11
  * logexp: Correct rounding bias in blog32_q11
  * Fix new clippy lints from Rust nightly (#3006)
  * Use approximate binary log in Q11 for segmentation_optimize
  * Add polynomial approximations of a binary exponential and logarithm.
  * segmentation: Avoid reallocation in collect::&lt;Box&lt;[_]&gt;&gt;()
  * logexp: Add a fixed-point binary log in Q24 for u32 to i32
  * logexp: Rewrite blog64 so that it is const
  * rate: Pivot to util::logexp functions
  * logexp: Add assertion for q57 input range
  * logexp: Add binary exponential in Q24 format, saturated to 47 bits.
  * logexp: Add conversions between 64-bit Q57 and 32-bit Q24.
  * logexp: Add tests for bexp64 and blog64
  * logexp: Add 64-bit binary exponentiation and logarithm in Q57.
  * kmeans: Split k-independent inner loop into its own function
  * kmeans: Tidy up all but the inner loop
  * segmentation: Change precision of log(scale) to Q23
  * Add missing code for segmentation with --tune Psnr
  * Derive segments by k-means of spatiotemporal scales
  * Add an implementation for k-means
  * Remove vergen and use built to provide the same information
  * Updating QUALITY_&amp;_SPEED_FEATURES document in regards to libaom
  * Adjust chroma offsets for frame-mean spatiotemporal scale
  * Compute segmentation map thresholds from the offsets
  * Implement From&lt;f64&gt; for DistortionScale
  * Use fixed-sized array in luma/chroma pred mode counts (#2989)
  * Add T.35 metadata C API.
  * Bump console + dav1d-sys + system-deps
  * CI: Pull in dev packages from Ubuntu Kinetic
  * Implement SegmentationLevel::Full again
  * segmentation: Limit minimum segment to avoid lossless mode
  * Use spatiotemporal scales relative to frame mean
  * Clean up encode_partition_topdown() (#2984)
  * CI: Fix clippy:borrow_deref_ref warnings
  * CI: Fix clippy::manual_range_contains warnings
  * CI: Fix clippy::derive_partial_eq_without_eq warnings
  * Fix aarch64 satd compilation on gcc
  * Remove always-true if statement in encode_partition_topdown() (#2980)
  * Add aarch64 NEON 8-bit SATD assembly for 4x4-transformed block sizes (#2972)
  * Retune constants for ssim_boost
  * Add enhanced version info
  * Add T.35 metadata support.
  * Simplify badges in README
  * Remove travis badge
  * CI: Switch to codecov
  * CI: Do not consider crates directory for code coverage
  * Stabilize the --film-grain-table parameter
  * Compute segmentation offsets dynamically
  * CI: macos-11 is the latest version
  * CI: Update checkout action to v3
  * CI: Remove if construct to skip CI
  * Remove unused .travis CI
  * Remove unmaintained gitlab CI
  * CI: Remove default linker paths on Windows
  * CI: Deploy rav1e-ch in a new job
  * CI: Improve Windows toolchains
  * Optimize `BlockSize::from_width_and_height_opt`
  * Use external crate for grain table generation and parsing
  * Optimize write_uleb128 function
  * ci: Use release-no-lto profile for gnu deploy on Windows
  * Add a release-no-lto profile
  * Avoid taking ownership of Arc&lt;Frame&lt;T&gt;&gt; in scenechange API (#2958)
  * Disable undocumented_unsafe_blocks lint due to false positive regression
  * Rewrite argument parsing to use Clap's derives
  * Reuse plane allocations in estimate_intra_costs (#2957)
  * Use a RwLock in frame_me_stats
  * Replace as_tile_state_mut with a an apply function
  * Simplify full_pixel_me
  * Simplify the tile iterator
  * Simplify the lifetime
  * Move TileStateMut::enc_stats where is used
  * Do not double collect the stats
  * Simplify the tiler lifetimes
  * Reuse me stats for lookahead
  * Merge estimate_motion and motion_estimation into one function
  * x86: Fix relocations in `sad_plane`
  * Bump versions of aom and dav1d in CI (#2953)
  * x86: Reduce code size in 8-bit film grain AVX-512 asm
  * x86: Add high bit-depth film grain AVX-512 (Ice Lake) asm
  * arm: Only produce the PAC/BTI .note section when targeting ELF
  * arm: Add comments to #endif and #else in nonobvious cases
  * arm: itx: Do clipping in all narrowing downshifts
  * x86: Add 8-bit film grain AVX-512 (Ice Lake) asm
  * build: Make "film_grain" vs "filmgrain" DSP file names consistent
  * x86: Fix data being stored below the stack pointer in SSSE3 itx asm
  * x86: Remove redundant labels and undefs in SSSE3 itx asm
  * x86: Update x86inc.asm
  * arm64: Add Armv8.3-A PAC support to assembly files
  * x86: Add high bit-depth ipred filter AVX-512 (Ice Lake) asm
  * x86: Add high bit-depth pal_pred AVX-512 (Ice Lake) asm
  * x86: Add high bit-depth ipred smooth AVX-512 (Ice Lake) asm
  * x86: Add high bit-depth ipred paeth AVX-512 (Ice Lake) asm
  * x86/itx: Add 16x16 12bpc AVX2 transforms
  * x86: Add mc.resize AVX-512 (Ice Lake) asm
  * x86: Improve high bit-depth film grain AVX2 asm
  * x86: Improve 8-bit film grain AVX2 asm
  * x86: Fix overflow in 10-bit IDCT4
  * arm32: mc16: Fix out of bounds reads/writes in 8tap/bilin w2/w4 for vertical OBMC
  * arm32: mc: Fix out of bounds reads/writes in 8tap/bilin w2/w4 for vertical OBMC
  * arm64: mc16: Fix out of bounds reads/writes in 8tap/bilin w2/w4 for vertical OBMC
  * arm64: mc: Fix out of bounds reads/writes in 8tap/bilin w2/w4 for vertical OBMC
  * x86: Add high bitdepth mc(t)_scaled SSSE3 asm
  * x86: Fix branch condition in high bit-depth put_bilin.h SSSE3 asm
  * x86: Improve AVX2 generate_grain asm
  * x86: Add 10-bit sgr AVX-512 (Ice Lake) asm
  * x86: Add 8-bit mc(t)_scaled SSSE3 32-bit asm
  * x86/itx: Add 16x8 12bpc AVX2 transforms
  * x86/itx: Add 8x16 12bpc AVX2 transforms
  * AArch64 Neon: Replace XTN, XTN2 pairs with single UZP1
  * AArch64 Neon: Use CMLT instead of SSHR to compute sign
  * x86: Fix AVX/SSE state transitions in AVX-512 4x4 inverse transforms
  * x86: Add high bitdepth wiener AVX-512 (Ice Lake) asm
  * x86/itx: Add 16x4 12bpc AVX2 transforms
  * x86/itx: Add 4x16 12bpc AVX2 transforms
  * x86/itx: Convert 8bpc WHT to SSE2
  * x86: Fix edge padding in wiener_filter7_16bpc_ssse3
  * x86: Add high bitdepth mc blend AVX-512 (Ice Lake) asm
  * x86: Add high bitdepth mc warp_affine_8x8 AVX-512 (Ice Lake) asm
  * x86: Add high bitdepth mc bidir AVX-512 (Ice Lake) asm
  * x86: Add high bitdepth mc bilin/8-tap AVX-512 (Ice Lake) asm
  * x86/itx: Add 8x8 12bpc AVX2 transforms
  * x86/itx: Add 8x4 12bpc AVX2 transforms
  * x86/itx: Add 4x8 12bpc AVX2 transforms
  * x86: Fix invalid memory access in cdef_filter_8x8_8bpc_avx512icl
  * x86/itx: Add clipping to iadst 4x16
  * Remove lpf_stride parameter from LR filters
  * Allow CDEF and LR to run sbrows in parallel
  * arm64: Add Armv8.5-A BTI support to assembly files
  * arm64: Change br instructions to ret for function returns
  * x86/itx: Add 12-bit 4x4 transforms in AVX2
  * x86/itx: Rename rax to r6
  * x86/itx: Name constants more explicit
  * x86: Add deblock loop filters AVX-512 (Ice Lake) asm
  * x86: Add sgr AVX-512 (Ice Lake) asm
  * x86: Add wiener_filter AVX-512 (Ice Lake) asm
  * x86: Add ipred_filter AVX-512 (Ice Lake) asm
  * x86: Add ipred dc/h/v/paeth/smooth/pal_pred AVX-512 (Ice Lake) asm
  * x86: Add inverse transforms AVX-512 (Ice Lake) asm
  * x86: Add blend AVX-512 (Ice Lake) asm
  * x86: Add warp_affine_8x8 AVX-512 (Ice Lake) asm
  * x86: Add mc 8-tap AVX-512 (Ice Lake) asm
  * x86: Add mc put_bilin AVX-512 (Ice Lake) asm
  * x86: Remove the option to disable AVX-512
  * x86: Add high bitdepth mc(t)_scaled AVX2 asm
  * Simplify sgr_x_by_x calculations
  * x86: Optimize shifts in 8-bit wiener_filter asm
  * Support distinct 10 and 12 bit inverse transform implementations
  * fix-up: x86: Add put/prep_bilin_scaled AVX2 asm
  * fix-up: x86: Add bpc suffix to mc functions
  * x86: Add high bitdepth cfl_ac_444 AVX2 asm
  * x86: Improve high bitdepth cfl_ac AVX2 asm
  * x86: Automatically convert SSE asm to AVX when compiling for AVX targets
  * x86: Add 8-bit w_mask_422 and w_mask_444 SSSE3 asm
  * x86: Improve high bitdepth cdef_filter AVX2 asm
  * x86: Prefer tzcnt over bsr in cdef sec_shift calculations
  * x86/itx: 64x64 inverse dct transforms hbd/sse4
  * x86/itx: 64x32 inverse dct transforms hbd/sse4
  * x86/itx: 64x16 inverse dct transforms hbd/sse4
  * x86/itx: 32x64 inverse dct transforms hbd/sse4
  * x86/itx: 16x64 inverse dct transforms hbd/sse4
  * x86: Add high bitdepth cdef_filter SSSE3 asm
  * cdef: Remove redundant clipping
  * itx/x86: rewrite .transpose4x8packed so it uses only m0-3,4&amp;6
  * itx/x86: replace idct8x8.transpose with idct8x4.transpose4x8packed
  * x86/itx: add 1/sqrt(2) (rect2) multiply macro
  * x86/itx: share pass2 loop between {16,32}x32 dct^2 functions
  * x86/itx: combine .write_8x8 and .round{1,2,3,4} into a single function
  * x86/itx: combine .write_8x4 and .round{1,2} into a single function
  * x86/itx: split dct/adst/identity pass=2 implementations for 16x8
  * x86/itx: 32x32 inverse dct transforms hbd/sse4
  * x86/itx: 32x16 inverse dct transforms hbd/sse4
  * x86/itx: 32x8 inverse dct transforms hbd/sse4
  * x86/itx: 16x32 inverse dct transforms hbd/sse4
  * x86/itx: 8x32 inverse dct transforms hbd/sse4
  * x86: Add high bitdepth mc.resize SSSE3 asm
  * x86: Fix minor things in mc.resize_8bpc_ssse3
  * x86: Add high bitdepth mc.resize AVX2 asm
  * x86: Add minor improvement to mc.resize_8bpc_avx2
  * x86: Add bpc suffix to mc functions
  * x86/itx: merge pass=2 rounding and writing operations
  * x86/itx: 32x{8,16,32} &amp; {8,16}x32 idtx transforms hbd/sse4
  * x86/itx: replace .transpose8x8 with 2 calls to .transpose4x8packed
  * x86/itx: document third argument in INV_TXFM_WxH_FN macros
  * x86: Rewrite sgr8 SSSE3 asm
  * x86: Add minor improvements to sgr16 SSSE3 asm
  * x86/itx: 16x16 inverse transforms hbd/sse4
  * x86/itx: 16x8 inverse transforms hbd/sse4
  * x86/itx: 16x4 inverse transforms hbd/sse4
  * x86inc: Support memory operands in src1 in 3-operand instructions
  * x86inc: Add stack probing on Windows
  * Properly fix LOAD_MM_PERMUTATION for AVX-512
  * Replace abs() as unsigned with dedicated alternative.
  * v_frame: Disable missing const fn clippy lint
  * ci: Ignore tools for code coverage analysis
  * ci: Ignore asm for code coverage analysis
  * Reimplement sad_row as sad_plane (#2943)
  * Remove explicit VEX coding from sad ASM (#2941)
  * Rewrite x86 SAD row intrinsics in ASM
  * Split `write_coeffs_lv_map` into smaller functions
  * ci: Do not consider some directories for coverage
  * Remove unused lifetime.
  * ci: Enable source-based code coverage
  * Silence unused variable warning.
  * Use to_le_bytes in copy_to_raw_u8 (#2932)
  * Improve codegen of copy_from_raw_u8 (#2930)
  * Use const generics for downscale factor (#2927)
  * Implement grain synthesis via photon noise tables
  * Treat paths as OsString.
  * Change muxer to use AsRef&lt;Path&gt; arguments.
  * Remove a broken hawktracer annotation
  * Break the scenechange module into smaller parts
  * Add a mock around rayon for disabling threading
  * Disable missing const fn clippy lint
  * Use 64-bits for calculating 8x8 variance
  * Avoid temporary allocation of block importance costs
  * Remove unnecessary clones from metrics calculation
  * rate: add assertion for q57 input range (#2911)
  * Change non-square partition to search below the threshold
  * Move complex pred modes for keyframes to s2
  * Fix memory leak when temporal RDO not in use
  * Enable suboptimal_flops clippy lint (#2908)
  * Also apply custom clippy lints to ivf and v_frame
  * Fixes to existing clippy lints
  * Enable linting functions that could be const
  * Enable extra documentation lints
  * Organize existing clippy lints
  * Avoid multiple inlining of residual loop in SAD intrinsics (#2903)
  * Improve storage of invalid and SEF frame invariants
  * Fix pyramid and frame type tests
  * Fix unnecessary auto-vectorization in residual loop of SAD intrinsics (#2897)
  * Use a debian mirror with https support
  * Update aom version and shasums for CI
  * New clippy fixes from Rust 1.59
  * Fix new deprecation warnings from Clap 3.1.0
  * Cache and reuse intra costs from scenechange (#2895)
  * Init Motion Est: Refine mvs when subsampling reduced
  * Fix confusing scale factor (#2891)
  * Speed up estimate_inter_costs again (#2890)
  * Speed up estimate_inter_costs (#2889)
  * Handle edges by cropping in initial motion estimation
  * Simplify importance block sum in `estimate_importance_block_difference` (#2885)
  * Add safety asserts for mc assembly callers
  * Update to Edition 2021
  * Bump minimum Rustc to 1.56
  * Omit loop restoration on fully skipped areas
  * Fix new clippy lints
  * Improve codegen of `Plane::downsampled`
  * Fix scale of motion estimation threshold
  * Use const generics for stride_sse
  * Make the doctests compile only
  * Put doctests code in a separate test
  * Bump minimum rust version to 1.54.0
  * Update to clap3
  * Refactor TxfmType to not have an invalid variant
  * Improve codegen of av1_round_shift_array
  * Use const generics for hadamard transforms (#2877)
  * Add x86 assembly for cdef distortion
  * Fix underflow that can occur in cdef distortion
  * Use cdef_dist on smaller block and edges
  * Display info for all y4m error types
  * Allow passing cropped blocks sad and satd
  * Fix overflow in cdef distortion
  * Refactor `BlockSize` to not have an invalid variant (#2866)
  * Skip transform mode search based on transform cost estimate
  * Improve autovectorization of `downscale_in_place`
  * Fix doc comments in speedsettings.rs
  * Change non_square_partition feature to a threshold
  * Silence repetitive warning on Rust nightly
  * Do not call put/prep avx2 functions for ssse3
  * Organize speed settings into sub-structs
  * Mark SpeedSettings struct as non-exhaustive
  * Refactor the SpeedSettings impl
  * Merge `no_scene_detection` and `fast_scene_detection` into one field
  * Move rdo_lookahead_frames to SpeedSettings
  * CI: Update to libaom to 3.2.0-2
  * Update a help message to be more relevant (#2853)
  * Fix stable clippy lints for Rust 1.57
  * Use nasm-rs for nasm version check
  * Better autovectorization of `spatiotemporal_scale`
  * CI: Run cargo-c in offline mode
  * Replace float sqrt+divide with fixed point rsqrt
  * Perform UMH before resorting to full search
  * CI: Always use latest grcov version
  * CI: Always use latest cargo-c version
  * Extend the rayon API mock to include scope()
  * CI: Move to Debian Unstable for aom and dav1d</changelog>
  <changelog author="asn@cryptomilk.org" date="1672660800">- Update to version 0.6.2+0:
  * Prepare for release
  * Fix new clippy lints for Rust 1.66
  * Drop BUILT_TIME_UTC
  * Shorten progress text
  * Bump built to 0.5.2
  * Make git2 optional
  * Simplify the version string
  * Specify default threads behavior
  * Fix the capi deps
- Removed dependency on libgit2
  * Added rav1e-cargo-no-git-default.patch</changelog>
  <changelog author="asn@cryptomilk.org" date="1681214400">- Update to version 0.6.4+0:
  * Safety critical bounds checking is off-by-one in sgrproj_box_ab_internal
  * Initialize `low` array in a more rust-like way in `kmeans`
  * Rework mutable borrows for symbol_with_update
  * Drop explicit size for macro symbol_with_update
  * Use const generics for CDFContextLog
  * Fix undefined behavior in CDFContextLogOps
  * ec: Simplify lr_compute function
  * Use a bit counter instead of a byte counter in WriterRecorder
  * Minimize bounds checks in pred functions
  * Use generics for BD-8 on sgrproj functions
  * Use saturating_sub in sgrproj_sum_finish
  * Move bounds checks out of hot loop in sgrproj
  * Ensure quantizer values are non-zero with a const fn
  * Optimize base quants using NonZero integers (#3115)
  * Move quant tables to separate file to improve organization (#3113)
  * Use is_power_of_two method in divu_gen
  * Fix rounding issue in HBD CDEF code
  * Hint that creating a region from an empty plane is unlikely
  * Minor optimization to take_slice
  * Clean up cdef_dist
  * Minor optimizations
  * Optimizations for weighted_sse
  * Add HBD AVX2 assembly for SAD (#3099)
  * ec: Manually inline `msb()` and `ilog()` for clarity (#3104)
  * Comment regarding cnt being unused
  * Improve naming
  * Use a bit counter instead of a byte counter in EC
  * Add 10-bit cdef_dist ASM
  * Optimise sad_plane_internal
  * Save some bounds checks on me_stats
  * Minor optimization to av1_get_mv_joint
  * Use chunks_exact for performance in diff method
  * Integrate CfL AC x86 assembly functions
  * benches: Fix alignment issue for cfl_rdo
  * Move luma_ac to predict module
  * Extract luma_ac_internal with const generics
  * Optimise plane::as_region
  * Optimise BlockSize::from_width_and_height_opt
  * Improve vectorization in get_sad
  * Template entropy coding functions to help optimiser
  * Enable SSE2/AVX512ICL put/prep/avg x86 assembly
  * Enable AVX2 12-bit Inverse Transform x86 assembly
  * Enable new SSE4.1 HBD Inverse Transform x86 assembly
  * Pin assert_cmd, predicates and clap in Cargo.toml for rust 1.60.0
  * Prepare for release
  * Fix header coding for level_idx &lt; 7.</changelog>
  <changelog author="fcrozat@suse.com" date="1681992000">- Fix license tag to BSD-2-Clause and AOMPL-1.0.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697716800">- Update to version 0.6.6:
  * Sync the assembly with dav1d
  * Additional improvements and cleanups
  * Overall speed-up typically 5.2%
- Change soname to 0_6, and at the same time set min version for
  cargo-c BuildRequires to &gt; 0.9.26, as this is needed for the new
  soname to be built correctly.
- Modernize _service and spec to more current way of doing rust
  packaging.
- Use ldconfig_scriptlets macro for post(un) handling.
- Fix license tag to BSD-2-Clause AND ISC</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1751544000">- Update vendor.tar.zst: upgrade idna to 1.0.3
  (bsc#1243855 CVE-2024-12224).</changelog>
</package>
<package pkgid="d9d24f80819f026b05b3314a58d2e9a41423eca8e437121c50e0bf5fffd34223" name="librav1e0_6" arch="x86_64">
  <version epoch="0" ver="0.6.6" rel="150600.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1595246400">- Add baselibs.conf: produce librav1e0-32bit, as needed by
  ffmpeg-4, as this newly builds against rav1e.</changelog>
  <changelog author="asn@cryptomilk.org" date="1599652800">- Update to version 0.3.4
  * https://github.com/xiph/rav1e/releases/tag/v0.3.4</changelog>
  <changelog author="asn@cryptomilk.org" date="1610539200">- Update to version 0.4.0
  * https://github.com/xiph/rav1e/releases/tag/v0.4.0</changelog>
  <changelog author="alarrosa@suse.com" date="1617796800">- Update to version 0.4.1
  * https://github.com/xiph/rav1e/releases/tag/v0.4.1</changelog>
  <changelog author="dmueller@suse.com" date="1617796801">- avoid packaging the pkgconfig dir - it comes from filesystem
- spec-cleaner run</changelog>
  <changelog author="asn@cryptomilk.org" date="1622635200">- Fix service for cargo vendor creation</changelog>
  <changelog author="asn@cryptomilk.org" date="1625832000">- Fixed squared artefacts on image when converting to AVIF
  * Added f553646d70fba8e265d436103a73520eb7adec8c.patch</changelog>
  <changelog author="william.brown@suse.com" date="1632830400">- Replace rust-packaging with cargo-packaging</changelog>
  <changelog author="asn@cryptomilk.org" date="1635681600">- Update to version 0.5.0
  * https://github.com/xiph/rav1e/releases/tag/v0.5.0
- Removed f553646d70fba8e265d436103a73520eb7adec8c.patch</changelog>
  <changelog author="william.brown@suse.com" date="1636113600">- Integrate obs_scm, cargo_vendor and cargo_audit to assist automation
  of updates</changelog>
  <changelog author="dimstar@opensuse.org" date="1636459200">- Do not hardcode an author in the changes generator service:
  Attribution happens by the user that actually runs the service.</changelog>
  <changelog author="asn@cryptomilk.org" date="1639483200">- Update to version 0.5.1+0:
  * Fix the dispatcher calling `avx2` code when the sub-architecture does not
    support it.</changelog>
  <changelog author="william.brown@suse.com" date="1641556800">- resolve bsc#1194113 (CVE-2018-25023)
- resolve bsc#1194119 (CVE-2021-45710)</changelog>
  <changelog author="asn@cryptomilk.org" date="1669896000">- Update to version 0.6.1+0:
  * Fix the capi deps
  * Revert "x86: Disable 8x16 16bpc inverse transforms for SSE4.1"
  * inverse_transform_add: Align to dav1d EOB convention
  * x86: Disable 8x16 16bpc inverse transforms for SSE4.1
  * CI: Fix up deploy workflow
  * Add C API for level.
  * Add level to API and CLI.
  * CI: Correct format of target_cpu for x86_64 in deploy workflow
  * Produced optimized binary versions from CI
  * Write level stored in sequence struct.
  * Bump actions/download-artifact from 2 to 3
  * Bump actions/upload-artifact from 2 to 3
  * Bump actions/cache from 2 to 3
  * Update deps
  * Update cargo-c binaries url
  * Add Dependabot configuration for GitHub Actions updates
  * tests: Add three-pass encode with target bitrate
  * Add SIMD helpers to speed up Rust get_sad (#3050)
  * Replace last 16x4 and 4x16 avx2 hbd satd intrinsics with asm (#3051)
  * x86: Add AVX2 HBD SATD asm for 8x8-transformed blocks (#3048)
  * Bump minimum rustc to 1.60, required by clap 4
  * Update clap to 4.0
  * Remove unused regex dependency
  * Cleanup log level parsing
  * Replace actions-rs/toolchain with dtolnay/rust-toolchain
  * Remove action-rs/cargo
  * rate: Retire and separate TwoPassOutParams
  * rate: Estimate target quantizer on first pass
  * segmentation: Reset min_segment on data update
  * Replace AVX2 HBD SATD intrinsics with ASM, for some block sizes (#3039)
  * Remove arrayref dependency
  * Fix new clippy lints
  * Move v_frame to its own repository
  * Add scales and segment thresholds to dump_lookahead_data
  * Fix UB in pred_max test
  * Delete build.sh
  * bin: Admit more than 2 encoder passes
  * Create new speed level 8, drop level 7
  * Keep the version line compatible with 0.5
  * Add back shorthand for `--verbose` and `--quiet` (#3022)
  * Mention cargo-criterion
  * Bump criterion version
  * Update to criterion non-deprecated api
  * Prepare for 0.6.0 release
  * bin: Bring --photon-noise out from under unstable feature
  * Update guide on how to produce target-specific builds
  * CI: Deploy rav1e-ch binary tuned for modern x86_64
  * build: Handle absent CARGO_CFG_TARGET_FEATURE
  * Calculate geometric mean for DistortionScale::inv_mean()
  * Convert plane-level distortion scales to fixed-point
  * Expand precision of DistortionScale to Q14
  * Preserve intermediate precision in get_weighted_sse
  * Add DistortionScale::blog64()
  * Bump several dependencies
  * Remove duplicated constants
  * Remove aq_strength configuration
  * logexp: Correct integer part in blog32_q11
  * logexp: Correct rounding bias in blog32_q11
  * Fix new clippy lints from Rust nightly (#3006)
  * Use approximate binary log in Q11 for segmentation_optimize
  * Add polynomial approximations of a binary exponential and logarithm.
  * segmentation: Avoid reallocation in collect::&lt;Box&lt;[_]&gt;&gt;()
  * logexp: Add a fixed-point binary log in Q24 for u32 to i32
  * logexp: Rewrite blog64 so that it is const
  * rate: Pivot to util::logexp functions
  * logexp: Add assertion for q57 input range
  * logexp: Add binary exponential in Q24 format, saturated to 47 bits.
  * logexp: Add conversions between 64-bit Q57 and 32-bit Q24.
  * logexp: Add tests for bexp64 and blog64
  * logexp: Add 64-bit binary exponentiation and logarithm in Q57.
  * kmeans: Split k-independent inner loop into its own function
  * kmeans: Tidy up all but the inner loop
  * segmentation: Change precision of log(scale) to Q23
  * Add missing code for segmentation with --tune Psnr
  * Derive segments by k-means of spatiotemporal scales
  * Add an implementation for k-means
  * Remove vergen and use built to provide the same information
  * Updating QUALITY_&amp;_SPEED_FEATURES document in regards to libaom
  * Adjust chroma offsets for frame-mean spatiotemporal scale
  * Compute segmentation map thresholds from the offsets
  * Implement From&lt;f64&gt; for DistortionScale
  * Use fixed-sized array in luma/chroma pred mode counts (#2989)
  * Add T.35 metadata C API.
  * Bump console + dav1d-sys + system-deps
  * CI: Pull in dev packages from Ubuntu Kinetic
  * Implement SegmentationLevel::Full again
  * segmentation: Limit minimum segment to avoid lossless mode
  * Use spatiotemporal scales relative to frame mean
  * Clean up encode_partition_topdown() (#2984)
  * CI: Fix clippy:borrow_deref_ref warnings
  * CI: Fix clippy::manual_range_contains warnings
  * CI: Fix clippy::derive_partial_eq_without_eq warnings
  * Fix aarch64 satd compilation on gcc
  * Remove always-true if statement in encode_partition_topdown() (#2980)
  * Add aarch64 NEON 8-bit SATD assembly for 4x4-transformed block sizes (#2972)
  * Retune constants for ssim_boost
  * Add enhanced version info
  * Add T.35 metadata support.
  * Simplify badges in README
  * Remove travis badge
  * CI: Switch to codecov
  * CI: Do not consider crates directory for code coverage
  * Stabilize the --film-grain-table parameter
  * Compute segmentation offsets dynamically
  * CI: macos-11 is the latest version
  * CI: Update checkout action to v3
  * CI: Remove if construct to skip CI
  * Remove unused .travis CI
  * Remove unmaintained gitlab CI
  * CI: Remove default linker paths on Windows
  * CI: Deploy rav1e-ch in a new job
  * CI: Improve Windows toolchains
  * Optimize `BlockSize::from_width_and_height_opt`
  * Use external crate for grain table generation and parsing
  * Optimize write_uleb128 function
  * ci: Use release-no-lto profile for gnu deploy on Windows
  * Add a release-no-lto profile
  * Avoid taking ownership of Arc&lt;Frame&lt;T&gt;&gt; in scenechange API (#2958)
  * Disable undocumented_unsafe_blocks lint due to false positive regression
  * Rewrite argument parsing to use Clap's derives
  * Reuse plane allocations in estimate_intra_costs (#2957)
  * Use a RwLock in frame_me_stats
  * Replace as_tile_state_mut with a an apply function
  * Simplify full_pixel_me
  * Simplify the tile iterator
  * Simplify the lifetime
  * Move TileStateMut::enc_stats where is used
  * Do not double collect the stats
  * Simplify the tiler lifetimes
  * Reuse me stats for lookahead
  * Merge estimate_motion and motion_estimation into one function
  * x86: Fix relocations in `sad_plane`
  * Bump versions of aom and dav1d in CI (#2953)
  * x86: Reduce code size in 8-bit film grain AVX-512 asm
  * x86: Add high bit-depth film grain AVX-512 (Ice Lake) asm
  * arm: Only produce the PAC/BTI .note section when targeting ELF
  * arm: Add comments to #endif and #else in nonobvious cases
  * arm: itx: Do clipping in all narrowing downshifts
  * x86: Add 8-bit film grain AVX-512 (Ice Lake) asm
  * build: Make "film_grain" vs "filmgrain" DSP file names consistent
  * x86: Fix data being stored below the stack pointer in SSSE3 itx asm
  * x86: Remove redundant labels and undefs in SSSE3 itx asm
  * x86: Update x86inc.asm
  * arm64: Add Armv8.3-A PAC support to assembly files
  * x86: Add high bit-depth ipred filter AVX-512 (Ice Lake) asm
  * x86: Add high bit-depth pal_pred AVX-512 (Ice Lake) asm
  * x86: Add high bit-depth ipred smooth AVX-512 (Ice Lake) asm
  * x86: Add high bit-depth ipred paeth AVX-512 (Ice Lake) asm
  * x86/itx: Add 16x16 12bpc AVX2 transforms
  * x86: Add mc.resize AVX-512 (Ice Lake) asm
  * x86: Improve high bit-depth film grain AVX2 asm
  * x86: Improve 8-bit film grain AVX2 asm
  * x86: Fix overflow in 10-bit IDCT4
  * arm32: mc16: Fix out of bounds reads/writes in 8tap/bilin w2/w4 for vertical OBMC
  * arm32: mc: Fix out of bounds reads/writes in 8tap/bilin w2/w4 for vertical OBMC
  * arm64: mc16: Fix out of bounds reads/writes in 8tap/bilin w2/w4 for vertical OBMC
  * arm64: mc: Fix out of bounds reads/writes in 8tap/bilin w2/w4 for vertical OBMC
  * x86: Add high bitdepth mc(t)_scaled SSSE3 asm
  * x86: Fix branch condition in high bit-depth put_bilin.h SSSE3 asm
  * x86: Improve AVX2 generate_grain asm
  * x86: Add 10-bit sgr AVX-512 (Ice Lake) asm
  * x86: Add 8-bit mc(t)_scaled SSSE3 32-bit asm
  * x86/itx: Add 16x8 12bpc AVX2 transforms
  * x86/itx: Add 8x16 12bpc AVX2 transforms
  * AArch64 Neon: Replace XTN, XTN2 pairs with single UZP1
  * AArch64 Neon: Use CMLT instead of SSHR to compute sign
  * x86: Fix AVX/SSE state transitions in AVX-512 4x4 inverse transforms
  * x86: Add high bitdepth wiener AVX-512 (Ice Lake) asm
  * x86/itx: Add 16x4 12bpc AVX2 transforms
  * x86/itx: Add 4x16 12bpc AVX2 transforms
  * x86/itx: Convert 8bpc WHT to SSE2
  * x86: Fix edge padding in wiener_filter7_16bpc_ssse3
  * x86: Add high bitdepth mc blend AVX-512 (Ice Lake) asm
  * x86: Add high bitdepth mc warp_affine_8x8 AVX-512 (Ice Lake) asm
  * x86: Add high bitdepth mc bidir AVX-512 (Ice Lake) asm
  * x86: Add high bitdepth mc bilin/8-tap AVX-512 (Ice Lake) asm
  * x86/itx: Add 8x8 12bpc AVX2 transforms
  * x86/itx: Add 8x4 12bpc AVX2 transforms
  * x86/itx: Add 4x8 12bpc AVX2 transforms
  * x86: Fix invalid memory access in cdef_filter_8x8_8bpc_avx512icl
  * x86/itx: Add clipping to iadst 4x16
  * Remove lpf_stride parameter from LR filters
  * Allow CDEF and LR to run sbrows in parallel
  * arm64: Add Armv8.5-A BTI support to assembly files
  * arm64: Change br instructions to ret for function returns
  * x86/itx: Add 12-bit 4x4 transforms in AVX2
  * x86/itx: Rename rax to r6
  * x86/itx: Name constants more explicit
  * x86: Add deblock loop filters AVX-512 (Ice Lake) asm
  * x86: Add sgr AVX-512 (Ice Lake) asm
  * x86: Add wiener_filter AVX-512 (Ice Lake) asm
  * x86: Add ipred_filter AVX-512 (Ice Lake) asm
  * x86: Add ipred dc/h/v/paeth/smooth/pal_pred AVX-512 (Ice Lake) asm
  * x86: Add inverse transforms AVX-512 (Ice Lake) asm
  * x86: Add blend AVX-512 (Ice Lake) asm
  * x86: Add warp_affine_8x8 AVX-512 (Ice Lake) asm
  * x86: Add mc 8-tap AVX-512 (Ice Lake) asm
  * x86: Add mc put_bilin AVX-512 (Ice Lake) asm
  * x86: Remove the option to disable AVX-512
  * x86: Add high bitdepth mc(t)_scaled AVX2 asm
  * Simplify sgr_x_by_x calculations
  * x86: Optimize shifts in 8-bit wiener_filter asm
  * Support distinct 10 and 12 bit inverse transform implementations
  * fix-up: x86: Add put/prep_bilin_scaled AVX2 asm
  * fix-up: x86: Add bpc suffix to mc functions
  * x86: Add high bitdepth cfl_ac_444 AVX2 asm
  * x86: Improve high bitdepth cfl_ac AVX2 asm
  * x86: Automatically convert SSE asm to AVX when compiling for AVX targets
  * x86: Add 8-bit w_mask_422 and w_mask_444 SSSE3 asm
  * x86: Improve high bitdepth cdef_filter AVX2 asm
  * x86: Prefer tzcnt over bsr in cdef sec_shift calculations
  * x86/itx: 64x64 inverse dct transforms hbd/sse4
  * x86/itx: 64x32 inverse dct transforms hbd/sse4
  * x86/itx: 64x16 inverse dct transforms hbd/sse4
  * x86/itx: 32x64 inverse dct transforms hbd/sse4
  * x86/itx: 16x64 inverse dct transforms hbd/sse4
  * x86: Add high bitdepth cdef_filter SSSE3 asm
  * cdef: Remove redundant clipping
  * itx/x86: rewrite .transpose4x8packed so it uses only m0-3,4&amp;6
  * itx/x86: replace idct8x8.transpose with idct8x4.transpose4x8packed
  * x86/itx: add 1/sqrt(2) (rect2) multiply macro
  * x86/itx: share pass2 loop between {16,32}x32 dct^2 functions
  * x86/itx: combine .write_8x8 and .round{1,2,3,4} into a single function
  * x86/itx: combine .write_8x4 and .round{1,2} into a single function
  * x86/itx: split dct/adst/identity pass=2 implementations for 16x8
  * x86/itx: 32x32 inverse dct transforms hbd/sse4
  * x86/itx: 32x16 inverse dct transforms hbd/sse4
  * x86/itx: 32x8 inverse dct transforms hbd/sse4
  * x86/itx: 16x32 inverse dct transforms hbd/sse4
  * x86/itx: 8x32 inverse dct transforms hbd/sse4
  * x86: Add high bitdepth mc.resize SSSE3 asm
  * x86: Fix minor things in mc.resize_8bpc_ssse3
  * x86: Add high bitdepth mc.resize AVX2 asm
  * x86: Add minor improvement to mc.resize_8bpc_avx2
  * x86: Add bpc suffix to mc functions
  * x86/itx: merge pass=2 rounding and writing operations
  * x86/itx: 32x{8,16,32} &amp; {8,16}x32 idtx transforms hbd/sse4
  * x86/itx: replace .transpose8x8 with 2 calls to .transpose4x8packed
  * x86/itx: document third argument in INV_TXFM_WxH_FN macros
  * x86: Rewrite sgr8 SSSE3 asm
  * x86: Add minor improvements to sgr16 SSSE3 asm
  * x86/itx: 16x16 inverse transforms hbd/sse4
  * x86/itx: 16x8 inverse transforms hbd/sse4
  * x86/itx: 16x4 inverse transforms hbd/sse4
  * x86inc: Support memory operands in src1 in 3-operand instructions
  * x86inc: Add stack probing on Windows
  * Properly fix LOAD_MM_PERMUTATION for AVX-512
  * Replace abs() as unsigned with dedicated alternative.
  * v_frame: Disable missing const fn clippy lint
  * ci: Ignore tools for code coverage analysis
  * ci: Ignore asm for code coverage analysis
  * Reimplement sad_row as sad_plane (#2943)
  * Remove explicit VEX coding from sad ASM (#2941)
  * Rewrite x86 SAD row intrinsics in ASM
  * Split `write_coeffs_lv_map` into smaller functions
  * ci: Do not consider some directories for coverage
  * Remove unused lifetime.
  * ci: Enable source-based code coverage
  * Silence unused variable warning.
  * Use to_le_bytes in copy_to_raw_u8 (#2932)
  * Improve codegen of copy_from_raw_u8 (#2930)
  * Use const generics for downscale factor (#2927)
  * Implement grain synthesis via photon noise tables
  * Treat paths as OsString.
  * Change muxer to use AsRef&lt;Path&gt; arguments.
  * Remove a broken hawktracer annotation
  * Break the scenechange module into smaller parts
  * Add a mock around rayon for disabling threading
  * Disable missing const fn clippy lint
  * Use 64-bits for calculating 8x8 variance
  * Avoid temporary allocation of block importance costs
  * Remove unnecessary clones from metrics calculation
  * rate: add assertion for q57 input range (#2911)
  * Change non-square partition to search below the threshold
  * Move complex pred modes for keyframes to s2
  * Fix memory leak when temporal RDO not in use
  * Enable suboptimal_flops clippy lint (#2908)
  * Also apply custom clippy lints to ivf and v_frame
  * Fixes to existing clippy lints
  * Enable linting functions that could be const
  * Enable extra documentation lints
  * Organize existing clippy lints
  * Avoid multiple inlining of residual loop in SAD intrinsics (#2903)
  * Improve storage of invalid and SEF frame invariants
  * Fix pyramid and frame type tests
  * Fix unnecessary auto-vectorization in residual loop of SAD intrinsics (#2897)
  * Use a debian mirror with https support
  * Update aom version and shasums for CI
  * New clippy fixes from Rust 1.59
  * Fix new deprecation warnings from Clap 3.1.0
  * Cache and reuse intra costs from scenechange (#2895)
  * Init Motion Est: Refine mvs when subsampling reduced
  * Fix confusing scale factor (#2891)
  * Speed up estimate_inter_costs again (#2890)
  * Speed up estimate_inter_costs (#2889)
  * Handle edges by cropping in initial motion estimation
  * Simplify importance block sum in `estimate_importance_block_difference` (#2885)
  * Add safety asserts for mc assembly callers
  * Update to Edition 2021
  * Bump minimum Rustc to 1.56
  * Omit loop restoration on fully skipped areas
  * Fix new clippy lints
  * Improve codegen of `Plane::downsampled`
  * Fix scale of motion estimation threshold
  * Use const generics for stride_sse
  * Make the doctests compile only
  * Put doctests code in a separate test
  * Bump minimum rust version to 1.54.0
  * Update to clap3
  * Refactor TxfmType to not have an invalid variant
  * Improve codegen of av1_round_shift_array
  * Use const generics for hadamard transforms (#2877)
  * Add x86 assembly for cdef distortion
  * Fix underflow that can occur in cdef distortion
  * Use cdef_dist on smaller block and edges
  * Display info for all y4m error types
  * Allow passing cropped blocks sad and satd
  * Fix overflow in cdef distortion
  * Refactor `BlockSize` to not have an invalid variant (#2866)
  * Skip transform mode search based on transform cost estimate
  * Improve autovectorization of `downscale_in_place`
  * Fix doc comments in speedsettings.rs
  * Change non_square_partition feature to a threshold
  * Silence repetitive warning on Rust nightly
  * Do not call put/prep avx2 functions for ssse3
  * Organize speed settings into sub-structs
  * Mark SpeedSettings struct as non-exhaustive
  * Refactor the SpeedSettings impl
  * Merge `no_scene_detection` and `fast_scene_detection` into one field
  * Move rdo_lookahead_frames to SpeedSettings
  * CI: Update to libaom to 3.2.0-2
  * Update a help message to be more relevant (#2853)
  * Fix stable clippy lints for Rust 1.57
  * Use nasm-rs for nasm version check
  * Better autovectorization of `spatiotemporal_scale`
  * CI: Run cargo-c in offline mode
  * Replace float sqrt+divide with fixed point rsqrt
  * Perform UMH before resorting to full search
  * CI: Always use latest grcov version
  * CI: Always use latest cargo-c version
  * Extend the rayon API mock to include scope()
  * CI: Move to Debian Unstable for aom and dav1d</changelog>
  <changelog author="asn@cryptomilk.org" date="1672660800">- Update to version 0.6.2+0:
  * Prepare for release
  * Fix new clippy lints for Rust 1.66
  * Drop BUILT_TIME_UTC
  * Shorten progress text
  * Bump built to 0.5.2
  * Make git2 optional
  * Simplify the version string
  * Specify default threads behavior
  * Fix the capi deps
- Removed dependency on libgit2
  * Added rav1e-cargo-no-git-default.patch</changelog>
  <changelog author="asn@cryptomilk.org" date="1681214400">- Update to version 0.6.4+0:
  * Safety critical bounds checking is off-by-one in sgrproj_box_ab_internal
  * Initialize `low` array in a more rust-like way in `kmeans`
  * Rework mutable borrows for symbol_with_update
  * Drop explicit size for macro symbol_with_update
  * Use const generics for CDFContextLog
  * Fix undefined behavior in CDFContextLogOps
  * ec: Simplify lr_compute function
  * Use a bit counter instead of a byte counter in WriterRecorder
  * Minimize bounds checks in pred functions
  * Use generics for BD-8 on sgrproj functions
  * Use saturating_sub in sgrproj_sum_finish
  * Move bounds checks out of hot loop in sgrproj
  * Ensure quantizer values are non-zero with a const fn
  * Optimize base quants using NonZero integers (#3115)
  * Move quant tables to separate file to improve organization (#3113)
  * Use is_power_of_two method in divu_gen
  * Fix rounding issue in HBD CDEF code
  * Hint that creating a region from an empty plane is unlikely
  * Minor optimization to take_slice
  * Clean up cdef_dist
  * Minor optimizations
  * Optimizations for weighted_sse
  * Add HBD AVX2 assembly for SAD (#3099)
  * ec: Manually inline `msb()` and `ilog()` for clarity (#3104)
  * Comment regarding cnt being unused
  * Improve naming
  * Use a bit counter instead of a byte counter in EC
  * Add 10-bit cdef_dist ASM
  * Optimise sad_plane_internal
  * Save some bounds checks on me_stats
  * Minor optimization to av1_get_mv_joint
  * Use chunks_exact for performance in diff method
  * Integrate CfL AC x86 assembly functions
  * benches: Fix alignment issue for cfl_rdo
  * Move luma_ac to predict module
  * Extract luma_ac_internal with const generics
  * Optimise plane::as_region
  * Optimise BlockSize::from_width_and_height_opt
  * Improve vectorization in get_sad
  * Template entropy coding functions to help optimiser
  * Enable SSE2/AVX512ICL put/prep/avg x86 assembly
  * Enable AVX2 12-bit Inverse Transform x86 assembly
  * Enable new SSE4.1 HBD Inverse Transform x86 assembly
  * Pin assert_cmd, predicates and clap in Cargo.toml for rust 1.60.0
  * Prepare for release
  * Fix header coding for level_idx &lt; 7.</changelog>
  <changelog author="fcrozat@suse.com" date="1681992000">- Fix license tag to BSD-2-Clause and AOMPL-1.0.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697716800">- Update to version 0.6.6:
  * Sync the assembly with dav1d
  * Additional improvements and cleanups
  * Overall speed-up typically 5.2%
- Change soname to 0_6, and at the same time set min version for
  cargo-c BuildRequires to &gt; 0.9.26, as this is needed for the new
  soname to be built correctly.
- Modernize _service and spec to more current way of doing rust
  packaging.
- Use ldconfig_scriptlets macro for post(un) handling.
- Fix license tag to BSD-2-Clause AND ISC</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1751544000">- Update vendor.tar.zst: upgrade idna to 1.0.3
  (bsc#1243855 CVE-2024-12224).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1754481600">- Update vendor.tar.zst: Update crate shlex to 1.3.0
  (bsc#1230028 RUSTSEC-2024-0006, GHSA-r7qv-8r2h-pg27)
  (bsc#1247207 CVE-2024-58266)</changelog>
</package>
<package pkgid="6aaec15d1448bd014d543e497930f0f52fa27a88f3a658de51da2cbb7ac789d8" name="librdkafka" arch="src">
  <version epoch="0" ver="0.11.6" rel="150600.16.3.1"/>
  <changelog author="tbechtold@suse.com" date="1543492800">- Initial packaging (version 0.11.6)</changelog>
  <changelog author="tbechtold@suse.com" date="1543492801">- Fix Requires for -devel package</changelog>
  <changelog author="jengelh@inai.de" date="1543492802">- Update summaries. Remove performance results that do not
  mention their reference.
- Remove duplicate Group/Summary fields.
- Fix rpmlint's "librdkafka.x86_64: W: no-binary"
- Fix shlib package requiring itself. Remove excess Provides.</changelog>
  <changelog author="tbechtold@suse.com" date="1544097600">- Add missing Requires to -devel package</changelog>
  <changelog author="tbechtold@suse.com" date="1544443200">- Don't BuildRequire lz4 on SLE12
- Do not use %make_build which is not available on SLE12</changelog>
  <changelog author="astieger@suse.com" date="1544788800">- fix pkg-config provides warning</changelog>
  <changelog author="meissner@suse.com" date="1629979200">- 0001-Align-bundled-c11-threads-tinycthreads-constants-to-.patch:
  fixed thread creation on SLES 15 SP3 (bsc#1189792)</changelog>
  <changelog author="meissner@suse.com" date="1746705600">- 0001-Fix-timespec-conversion-to-avoid-infinite-loop-2108-.patch:
  avoid endless loops (bsc#1242842)</changelog>
</package>
<package pkgid="8764845e739e4bd91aa4811c88d06e6add9f7ec5140b072823911c752d5cc07a" name="librdkafka1" arch="x86_64">
  <version epoch="0" ver="0.11.6" rel="150600.16.3.1"/>
  <changelog author="tbechtold@suse.com" date="1543492800">- Initial packaging (version 0.11.6)</changelog>
  <changelog author="tbechtold@suse.com" date="1543492801">- Fix Requires for -devel package</changelog>
  <changelog author="jengelh@inai.de" date="1543492802">- Update summaries. Remove performance results that do not
  mention their reference.
- Remove duplicate Group/Summary fields.
- Fix rpmlint's "librdkafka.x86_64: W: no-binary"
- Fix shlib package requiring itself. Remove excess Provides.</changelog>
  <changelog author="tbechtold@suse.com" date="1544097600">- Add missing Requires to -devel package</changelog>
  <changelog author="tbechtold@suse.com" date="1544443200">- Don't BuildRequire lz4 on SLE12
- Do not use %make_build which is not available on SLE12</changelog>
  <changelog author="astieger@suse.com" date="1544788800">- fix pkg-config provides warning</changelog>
  <changelog author="meissner@suse.com" date="1629979200">- 0001-Align-bundled-c11-threads-tinycthreads-constants-to-.patch:
  fixed thread creation on SLES 15 SP3 (bsc#1189792)</changelog>
  <changelog author="meissner@suse.com" date="1746705600">- 0001-Fix-timespec-conversion-to-avoid-infinite-loop-2108-.patch:
  avoid endless loops (bsc#1242842)</changelog>
</package>
<package pkgid="ac404d0326844b5875c616f4ee5019002e3bd85be6f5c0d18dff1ad4d1e269a1" name="librdmacm1" arch="x86_64">
  <version epoch="0" ver="54.0" rel="150700.3.2.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="schwab@suse.de" date="1647518400">- util-Add-barriers-support-for-RISC-V.patch: Backport from upstream: Add
  barriers support for RISC-V</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1648555200">- Update to v39.1
  - Major fixes for hns provider
  - Bug fixes for all providers
  - systemd hardening
  - NDR rate support
- Dropped srp_daemon-Detect-proper-path-to-systemctl.patch
  as it was fixed upstream</changelog>
  <changelog author="dmueller@suse.com" date="1659960000">- skip valgrind on riscv64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1663070400">- Update to v42.0
  - Fixes for all providers
- Dropped patches merged upstream:
  - util-Add-barriers-support-for-RISC-V.patch
  - cmake-Make-modprobe.d-path-configurable.patch
- Update gen-pandoc.sh to support python3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1665662400">- Add rdma-ndd-disable-systemd-ProtectHostName-feature.patch to fix issue
  where rdma-ndd would not be aware of dynamic hostnames retrived through DHCP</changelog>
  <changelog author="nicolas.morey@suse.com" date="1681905600">- Update to v45.0
  - Fixes for all providers
  - Support for Microsoft Azure Network Adapter
- Drop rdma-ndd-disable-systemd-ProtectHostName-feature.patch
  as it was fixed upstream.
- Refresh against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-Update-kernel-headers.patch</changelog>
  <changelog author="nicolas.morey@suse.com" date="1690200000">- Update to v47.0
  - Fixes for all providers</changelog>
  <changelog author="nicolas.morey@suse.com" date="1691064000">- Drop patches adding support for cxgb3 (EOL, removed from kernel 5.5)
  - cxgb3-fix-declaration-of-free_context.patch
  - cxgb3-fix-support-for-new-uquery-API.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-Update-kernel-headers.patch
- Update baselibs=.conf accordingly</changelog>
  <changelog author="jengelh@inai.de" date="1692792000">- Add missing-quoting.patch
- Use normal GNU tar option syntax
- Remove old RPM spec logic (%defattr)</changelog>
  <changelog author="nicolas.morey@suse.com" date="1695384000">- Update to v48.0
  - No release notes available.
- Drop missing-quoting.patch which was fixed upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1700913600">- Update to v49.0 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1705924800">- Update to v49.1 (jsc#PED-6891, jsc#PED-6864, jsc#PED-6839, jsc#PED-6836,
    jsc#PED-6828, jsc#PED-6824, jsc#PED-6958, jsc#PED-6943, jsc#PED-6933, jsc#PED-6916)
  - No release notes available.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1707912000">- Add kernel-boot-do-not-load-module-unsupported-on-s390.patch
  to prevent autoload of module not supported on s390. (bsc#1219805)</changelog>
  <changelog author="nicolas.morey@suse.com" date="1719316800">- Update to rdma-core v52.0
  - No release notes available
- Add upstream patch Added-suffix-libdrm-to-CMakeLists.txt-for-drm.patch
  to fix libdrm detection.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1723464000">- Update to rdma-core v53.0
  - No release notes available
- Remove Added-suffix-libdrm-to-CMakeLists.txt-for-drm.patch
  as it was merged upstream.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1728561600">- Update to rdma-core v54.0
  - No release notes available</changelog>
</package>
<package pkgid="fd23db0e69446b11ca411be3eb0cc804f74680f304c7309147739278eaebb274" name="libreadline7-32bit" arch="x86_64">
  <version epoch="0" ver="7.0" rel="150400.27.6.1"/>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
  <changelog author="werner@suse.de" date="1628078400">- Add patch bash-4.4-jobctrl.patch to allow process group asignment
  even for modern kernels (bsc#1057452, bsc#1188287)</changelog>
  <changelog author="werner@suse.de" date="1629201600">- Post update-alternatives approach back from factory for /bin/sh
  (SLE-19670)</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Using package bash-sh instead of the update-alternative
  mechanism.</changelog>
  <changelog author="werner@suse.de" date="1644580800">- Port bash-sh package approach back to SLE-15-SP4 (jsc#SLE-18234)</changelog>
  <changelog author="werner@suse.de" date="1648123200">- Do use old legacy PreReq to get bash installed before bash-sh
  but do not require bash-sh by bash (bsc#1197448)</changelog>
  <changelog author="werner@suse.de" date="1724241600">- Add patch boo1227807.patch
  * Load completion file eveh if a brace expansion is in the
    command line included (boo#1227807)</changelog>
  <changelog author="werner@suse.de" date="1760356800">- Add patch bsc1245199.patch
  * Fix histfile missing timestamp for the oldest record (bsc#1245199)</changelog>
</package>
<package pkgid="5779273b3c2a63442a916c461682d16e51f51e30217747f71991314ab8b38471" name="libreadline7" arch="x86_64">
  <version epoch="0" ver="7.0" rel="150400.27.6.1"/>
  <changelog author="avindra@opensuse.org" date="1517918400">- Add patch 19 to bash-4.4-patches.tar.bz2
  * With certain values for PS1, especially those that wrap onto
    three or more lines, readline will miscalculate the number of
    invisible characters, leading to crashes and core dumps.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1519732800">- Create readline-devel-static package to re-enable static libraries
  again (boo#1082913)</changelog>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
  <changelog author="werner@suse.de" date="1628078400">- Add patch bash-4.4-jobctrl.patch to allow process group asignment
  even for modern kernels (bsc#1057452, bsc#1188287)</changelog>
  <changelog author="werner@suse.de" date="1629201600">- Post update-alternatives approach back from factory for /bin/sh
  (SLE-19670)</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Using package bash-sh instead of the update-alternative
  mechanism.</changelog>
  <changelog author="werner@suse.de" date="1644580800">- Port bash-sh package approach back to SLE-15-SP4 (jsc#SLE-18234)</changelog>
  <changelog author="werner@suse.de" date="1648123200">- Do use old legacy PreReq to get bash installed before bash-sh
  but do not require bash-sh by bash (bsc#1197448)</changelog>
  <changelog author="werner@suse.de" date="1724241600">- Add patch boo1227807.patch
  * Load completion file eveh if a brace expansion is in the
    command line included (boo#1227807)</changelog>
  <changelog author="werner@suse.de" date="1760356800">- Add patch bsc1245199.patch
  * Fix histfile missing timestamp for the oldest record (bsc#1245199)</changelog>
</package>
<package pkgid="bb8ceabc935a389d45ce80d858edd29e39e741e181ea24d220a0c8d35a400ae6" name="librfxencode0" arch="x86_64">
  <version epoch="0" ver="0.9.13.1" rel="150600.15.6.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1581163200">- Build with --enable-vsock so xrdp can be used with hyper-v
  enhanced session mode.</changelog>
  <changelog author="fzhang.foss@gmail.com" date="1583928000">- Update xrdp-avahi.diff: Fix implicit definitions errors.</changelog>
  <changelog author="fzhang.foss@gmail.com" date="1584014400">- Update to version 0.9.13
  + Bug fixes: some regressions on drive redirection #1469 #1487
    [#1505] #1507
  + Support mousex button 8/9 #1478
- Update to version 0.9.12
  + Bug fixes
  - Fix "The log reference is NULL" error when sesman startup
    [#1425]
  - Fix behavior when shmem_id changes #1439
  - Make vsock config accept -1 for cid and port #1441
  - Cleanup refresh rect and check stream bounds #1437
  - Significant improvements in drive redirection #1449
  + Other changes
  - Proprietary microphone redirection via rdpsnd is now default
    off RDP compatible microphone redirection is on instead #1427
  - Skip connecting to chansrv when no channels enabled #1393
  - Add openSUSE's pam rules (boo#1156094, #1442)
  - Do not terminate xrdp daemon when caught SIGHUP #1319
- Known issues
  + FreeRDP 2.0.0-rc4 or later might not able to connect to xrdp
    due to xrdp's bad-mannered behaviour, add `+glyph-cache` option
    to FreeRDP to connect #1266
  + Audio redirection by MP3 codec doesn't sound with some client,
    use AAC instead #965
- Drop xrdp-mkpamrules-support-usr-etc-distconfdir.patch: Fixed
  upstream</changelog>
  <changelog author="qkzhu@suse.com" date="1585051200">- Update xrdp-bsc965647-allow-admin-choose-desktop.patch:
  Add `export XDG_SESSION_TYPE=x11` in startwm.sh for SLE, since
  lacking this variable in GNOME 3.34 causes GNOME crash (bsc#1159257).</changelog>
  <changelog author="qkzhu@suse.com" date="1585051201">- Update xrdp-bsc965647-allow-admin-choose-desktop.patch:
  + Set the default session to GNOME Session for SLE.
  + Update the variables to launch SLE-Classic Session.
  (bsc#1166746).</changelog>
  <changelog author="yfjiang@suse.com" date="1587729600">- Enable SLE only patches for Leap (jsc#SLE-11850).</changelog>
  <changelog author="dimstar@opensuse.org" date="1592395200">- Use %{_libexecdir} to install the legacy initscript actions to.</changelog>
  <changelog author="yfjiang@suse.com" date="1593691200">- Update to version 0.9.13.1
  + This is a security fix release that includes fixes for the
    following local buffer overflow vulnerability (bsc#1173580):
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-4044
- Rebase xrdp-fate318398-change-expired-password.patch</changelog>
  <changelog author="yfjiang@suse.com" date="1594382400">- Update xrdp.keyring according to:
  https://github.com/neutrinolabs/xrdp/issues/1627</changelog>
  <changelog author="yfjiang@suse.com" date="1597147200">- Update xrdp-bsc965647-allow-admin-choose-desktop.patch:
  + Fallback the session to icewm when a selected desktop
    environment is not found (bsc#1171415)
  + Support plasma session for Leap 15.2
  + Give more informative comments in start_wm.sh</changelog>
  <changelog author="yfjiang@suse.com" date="1604923200">- Introduce more buffer protection fixes (jsc#SLE-11518):
  + Add xrdp-memory-allocation-security-fix.patch
  + Add xrdp-remove-unecessary-gmalloc.patch
  + Add xrdp-safe-data-chunk-reassembly.patch
- Make the serial number of SLE patches on the bottom</changelog>
  <changelog author="yu.daike@suse.com" date="1628596800">- Fix crash in xrdp-fate318398-change-expired-password.patch (bsc#1187258)</changelog>
  <changelog author="yu.daike@suse.com" date="1672228800">- Security fixes:
  + xrdp-add-stub-implementation-for-s_check_rem_and_log.patch
  * add stub implementation for s_check_rem_and_log()
  + xrdp-CVE-2022-23468.patch (bsc#1206300)
  * Buffer overflow in xrdp_login_wnd_create()
  + xrdp-CVE-2022-23478.patch (bsc#1206302)
  * Out of Bound Write in xrdp_mm_trans_process_drdynvc_chan
  + xrdp-CVE-2022-23479.patch (bsc#1206303)
  * Buffer overflow in xrdp_mm_chan_data_in() function
  + xrdp-CVE-2022-23480.patch (bsc#1206306)
  * Buffer overflow in devredir_proc_client_devlist_announce_req
  + xrdp-CVE-2022-23481.patch (bsc#1206307)
  * Out of Bound Read in xrdp_caps_process_confirm_active()
  + xrdp-CVE-2022-23482.patch (bsc#1206310)
    + Out of Bound Read in xrdp_sec_process_mcs_data_CS_CORE()
  + xrdp-CVE-2022-23483.patch (bsc#1206311)
    + Out of Bound REad in libxrdp_send_to_channel()
  + xrdp-CVE-2022-23484.patch (bsc#1206312)
    + Integer Overflow in xrdp_mm_process_rail_update_window_text()
  + xrdp-CVE-2022-23493.patch (bsc#1206313)
    + Out of Bound Read in xrdp_mm_trans_process_drdynvc_channel_close()</changelog>
  <changelog author="yu.daike@suse.com" date="1672747200">- xrdp-CVE-2022-23477.patch (bsc#1206301)
  + Buffer over flow in audin_send_open() function</changelog>
  <changelog author="jcejka@suse.com" date="1688990400">- Convert username exported to env variables to canonical form
  to prevent issues with different username and domain formats (bsc#1211740)
  + xrdp-Add-function-to-get-user-information-by-UID.patch
  + xrdp-Moved-initgroups-call-to-before-auth_start_session.patch
  + xrdp-fix-username-in-env.patch</changelog>
  <changelog author="yu.daike@suse.com" date="1694520000">- xrdp-CVE-2023-40184.patch (bsc#1214805)
  + restriction bypass via improper session handling</changelog>
  <changelog author="yu.daike@suse.com" date="1700568000">- xrdp-CVE-2023-42822.patch (bsc#1215803)
  + unchecked access to font glyph info</changelog>
  <changelog author="yu.daike@suse.com" date="1702036800">- Update xrdp-CVE-2023-42822.patch
  + fix bsc#1217759: xrdp login screen does not show any text</changelog>
  <changelog author="yfjiang@suse.com" date="1737720000">- Enforce no login screen if require_credentials is set
  (bsc#1227769)
  + Add xrdp-CVE-2024-39917.patch
  + Rebase xrdp-fate318398-change-expired-password.patch</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1769774400">- Add xrdp-CVE-2025-68670.patch: Fix a potential overflow
  (bsc#1257362 CVE-2025-68670).</changelog>
</package>
<package pkgid="07354af5ff8fa20866f47f38195cd0e363231f6e574cdc3b46f86596b565b089" name="librrd8" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="150600.3.6.1"/>
  <changelog author="aj@ajaissle.de" date="1443009600">- Update to 1.5.4
  Bug Fixes
  * parse floating point numbers according to C locale in rrdtool create
    arguments, regardless of the systems locale setting.
  * include missing rrd_rados.h into distribution archive
  * make rrdtool work on ARM again
  * make rrdtool test suit pass on 32bit OSs
  * fix --grid-dash option regression in graph
  * fix systemd support
  * fix link dependency for libpng since we are using functions directly
  * fix python module name
  * fix rrdtool tune to accept U in minimum and maximum options
  * fi
  * rrd_parsetime now uses a mutex lock to become thread safe
  * rrd_xport is now thread safe
  * stop using MAX_PATH and make everything dynamic and make rrdtool work on
    Gnu HURD ... thanks nirgal!
  Features
  * new RPN operators: STEPWIDTH, NEWDAY, NEWWEEK, NEWMONTH and NEWWEEK
    together they allow to draw graphs where a rate is converted back to
    absolute numbers and accumulated over a period..
- Changelog 1.5.3
  Bug Fixes
  * Brought commmand-line options and documentation back into sync.
  * Make LINE dashes option work again
- Changelog 1.5.2
  Bug Fixes
  * paramters in VDEF are vnames and not data source names, hence
    they can be 255 chars long and not only 20
- Changelog 1.5.1
  Bug Fixes
  * parse numbers up to 40 characters long ..
  * fix install rules for Python and Lua
  * include missing VERSION and LICENSE file
  * unlink before rename in rrd_create when running on WIN32
- Changelog 1.5.0
  New Features
  * automatic x-axis labels that work from 1s to 30y on a single chart
  * librados integration
  * new datasource types: DCOUNTER and DDERIVE (they work the same as the
    original DS, except that they can deal with floatingpoint numbers).
  * compile without graphics libraries: ./configure --disable-rrd_graph
  * updated windows port (see WIN32-BUILD-TIPS.txt)
  * single step RRAs for MIN,MAX,LAST are generated virtually from
    an AVERAGE RRA
  * ignore updates in the past with rrdtool update --skip-past-updates
  * ignore a LINE when scaling a chart using the skipscale option
  * detect 32bit timeoverflows
  * massive performance boost for charts with more than 100 DEF line by
    switching form a linear search to a HASH when searching for data
  * improved cross compilation support
  * .Net bindings
  * allow rrdtool graph to silently skip non-existing source files using the
  - -use-nan-for-all-missing-data option
  * restore from a pipe (rrdtool restore - y.rrd)
  * in rrdtool create, row count and step can be defined in absolute time
  * all new "create on steroids" can pull both data and configuration from
    existing rrd files
  * use rrdtool graph to chart arbitrary data via a callback function for data fetching
    support is integrated in the perl bindings.
  * re-written parser for rrdtool graph commands. It now follows a simple key
    value pattern, compatible with the previous syntax.
  * MEDIAN op for CDEF expressions
  * DEPTH,INDEX,COPY,ROL ops for CDEF (as seen in PostScript)
  * gradient AREA backgrounds
  * no more locale magic while reading numeric data.
  Bugfixes
  * all the bugs fixed in 1.4.x during 1.5 development
- Changelog 1.4.9
  New Features
  * allows rrdrestore to read input from stdin
  * add documentation for RRDs::xport
  * RPN operators MINNAN and MAXNAN
  * --left-axis-format option to rrd_graph
  Bugfixes
  * properly verify validity of user suplied format strings
  * remove graph functions from python module when compiled without graphing
    support
  * verify that only short integers are used in COMPUTE rpn expressions
  * eliminate duplicate setlocale calls
  * fixed endless loop and double frees in rrd_restore
  * fixed missing variable initializations in rrd_graph
  * fixed JSON output format to actually be valid JSON
  * detect failing fallocate and fall back to seeking
  * fixed format string in ruby bindings
- Changelog 1.4.8
  Highlights
  * rrd_graph now uses a map to lookup variable names causing graphs with many
    items to be drawn magnitudes faster as the linear search of the variable
    tables is gone now.
  * the optional argument :skipscale allows for a LINE or AREA instruction to be
    excluded from having an effect on the scaling of the graph
  * TRENDNAN is now working properly and als not crashing anymore
  * Added a no-op string positioning combo "\." this allows to write
    COMMENT:OS\2\. which would otherwise not be possible.
  * JSON output of xport is now actually json compilant by its keys
    being properly quoted now.
  * The label positioner in rrd_graph is now properly ignoring the current
    state of DST.
  * fixes and enhancements for Python, Ruby, TCL and Perl bindings
  * improved error reporting in rrd_graph
  * portability and cross compilation
  * code and bugtracker moved to https://github.com/oetiker/rrdtool-1.x
- Dropped patches (included upstream):
  - rrdtool-1.4.7-CVE-2013-2131-imginfo_format_check.patch
- Dropped patches (resolved otherwise):
  - rrdtool-lua-ruby_lib64.patch
  - rrdtool-tclversion.patch
- Dropped cgilib-0.7.tar.gz + cgilib-fix_automake.patch (no
  references to cgilib or cgi.h found, so benefit unclear)
- Spec cleanup
  + Added new perl-rrdtool subpackage containing the perl bindings
  + Added new -doc subpackge
  * bcond_without for lua, python, ruby and tcl
  * bcond_without for libdbi, libwrap (tcpd)
  * bcond_with for rados (ceph)
  - Dropped BuildRequires: autoconf + automake (was needed for cgilib)
  - Dropped BuildRequires: libart_lgpl-devel (replaced by cairo/pango
    in earlier releases)</changelog>
  <changelog author="aj@ajaissle.de" date="1448452800">- Update to 1.5.5
  Bugfixes
  * fix JSON output in xport with legend and gprint blocks
  * fix parse_time mutex unlocking in the error case
  * don't crash on invalid variable names in CDEF
  * add mutex locking in rrdc_fetch
  * fix buffer overflow in rrd_restore
  * shorten test precision to 7 digits ...
  * never exit from a library function
  * buffer overflow in rrd_restore.c fixed #669
- Added rrdtool-1.5.4-lua-5.2.patch: lua &gt;= 5.2 uses lua_callk</changelog>
  <changelog author="luizluca@tre-sc.jus.br" date="1480593600">- Update to 1.6.0
  Features
  * librrd is now fully thread-safe. librrd_th is gone
  * make lua bindings work with lua 5.1
  * configure option to disable doc building --enable-docs=no
  * new CDEF function SMIN: a,b,c,3,SMIN -&gt; min(a,b,c)
  * new CDEF function SMAX: a,b,c,3,SMAX -&gt; max(a,b,c)
  * new CDEF function STDEV: a,b,c,3,STDEV -&gt; stdev(a,b,c)
  * new CDEF function POW: a,b,POW -&gt; a**b
  * new CDEF function PERCENT: a,b,c,95,3,PERCENT -&gt; find 95percentile of a,b,c
  * re-introducted --showtime option on rrdxport
  * be more careful in determining the locales idea of first day of the week
  * lots of spelling fixes all around
- Removed rrdtool-1.5.4-lua-5.2.patch as upstream already supports lua 5.2 since
  https://github.com/oetiker/rrdtool-1.x/commit/7af5f76227330504d4d16234488c1118d4409621
  However, spec still requires explicitily lua51-devel (but lua52-devel also works)
- librrd_th* references are gone
- Patches refreshed</changelog>
  <changelog author="jengelh@inai.de" date="1481025600">- Implement shared library packaging guideline
- Reduce %serivce_* calls, speed up find by using {}+ instead,
  rectify RPM groups, trim descriptions.
- Abort package installation when user/group cannot be created.</changelog>
  <changelog author="tchvatal@suse.com" date="1499083200">- Version update to 1.7.0:
  * Many coverity scan bugfixes
  * For full detailed log see CHANGES file
- Add dependency on python-setuptools for python building</changelog>
  <changelog author="tchvatal@suse.com" date="1499083201">- Cleanup bit with spec-cleaner
- Move all BR to the top so it is obvious what is needed for which
  part
- Build with latest lua not 5.1</changelog>
  <changelog author="dimstar@opensuse.org" date="1500897600">- Only move the lua bindings from /usr/local when needed: this was
  generally only a hack as our lua.pc 'forgot' to expose the
  variables INSTALL_CMOD. As lua is now being fixed, this hack is
  no longer needed (for compatibility with older/broken lua
  packages we keep it in place, but don't abort if the move
  failed).</changelog>
  <changelog author="jmatejek@suse.com" date="1510315200">- build bindings for Python 3 instead of Python 2
  * python3.patch</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="obs@botter.cc" date="1517745600">- fix building bindings for Python 2 for suse_version &lt; 1500</changelog>
  <changelog author="kstreitova@suse.com" date="1550059200">- Version update to 1.7.1:
  * fix many compile time warnings
  * Re-enable 0-width lines
  * Include rrd_pdpcalc.pod in Makefile.am also
  * Lots of spelling fixes for rrdtool source and documentation
  * fix off by one issue in rrdtool xport output
  * fix lua extension build
  * fix python bindings
  * fix multiple static variable issues in conflict with MT
  * make translations actually work
  * Fixed configure --enable / --disable options
  * rrd_daemon stability fixes
  * fix tcl bindings
  * do not call umask ever (not MT safe)
  * Multiline Titles
  * French translation
  * Added support for --allow-shrink with --rigid flag (#843)
  * Added SUSPEND/RESUME/SUSPENDALL/RESUMEALL commands for rrd_cached
  * include the daemon name in the error message
- add rrdtool-1.7.1-compile_fix.patch to fix build with the new
  version</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1569153600">- rrdtool 1.7.2:
  * fix segfault on non-existent RRD file when using rrdcached
  * fix bounds handling, documentation and checking on rrdtool xport
  * Fix %s/%S unit autoscaling in gprint for json/xml
  * Optimized PDP Calculation
- drop rrdtool-1.7.1-compile_fix.patch, upstream</changelog>
  <changelog author="jsegitz@suse.com" date="1637064000">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_rrdcached.service.patch
  Modified:
  * rrdcached.service</changelog>
  <changelog author="dmueller@suse.com" date="1641902400">- add python-rpm-macros</changelog>
  <changelog author="dmueller@suse.com" date="1642334400">- remove conditionals around patch declaration, found by Stefan Liehmann</changelog>
  <changelog author="danilo.spinella@suse.com" date="1648555200">- Update to 1.8.0:
  For the list of changes, please have a look here:
  https://github.com/oetiker/rrdtool-1.x/blob/master/CHANGES
- Remove unneeded python3.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1649851200">- Add patch to fix segfault (seen in %check on aarch64):
  * e59f703bbcc0af949ee365206426b6394c340c6f.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679400000">- Follow upstream, disable the following, failing tests: rpn1
  https://github.com/oetiker/rrdtool-1.x/blob/master/.travis.yml#L30</changelog>
  <changelog author="adam.majer@suse.de" date="1679486400">- Decouple e59f703bbcc0af949ee365206426b6394c340c6f.patch from
  github url</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1778673600">- Add allow-select-locking-mechanism.patch
  * Allows selecting locking mechanism (bsc#1259746)
- Add fix-graph-overlapping-legends.patch
  * Fix overlapping graph labels (bsc#1262407)</changelog>
</package>
<package pkgid="8d8f94fbc095e28b3dc0f2ec3be9e3b1701382f28a467c5a8be84087f2917d52" name="librsvg-2-2" arch="x86_64">
  <version epoch="0" ver="2.57.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1661774400">- Update of vendored dependencies.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662465600">- Update to version 2.55.1:
  + As an experiment, I'll move librsvg from even-odd versioning
    (odd minor version is unstable, even minor version is stable),
    to the versioning scheme that GNOME uses these days. So, 2.55.x
    is the new stable series.
  + There is a new development guide for librsvg, for people who
    want to help in its development. I hope this will be especially
    useful to Outreachy and Summer of Code interns:
    https://gnome.pages.gitlab.gnome.org/librsvg/devel-docs/index.html
  + Define missing crate metadata for Cargo.toml.
  + Add some tests that were missing for the C API.
  + Fix the basic test suite in Windows.
  + Miscellaneous fixes for the build and CI.</changelog>
  <changelog author="dmueller@suse.com" date="1673524800">- update vendor tarball
- actually run the testsuite for x86_64 (bsc#1207167)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1677585600">- Update to version 2.55.91:
  + Support "turn" unit for CSS &lt;angle&gt; values.
  + Support the feDropShadow element.
  + Fix panic when a feTile filter gets an empty source region.
  + Update to gtk-rs 0.17.0.
  + Simplify the NMake Makefiles for Windows; see
    win32/MSVC-Builds.md for details.
  + Documentation and infrastructure updates.
  + Consolidate the scattered .md documents into the Development
    Guide. Updated links throughout.
    https://gnome.pages.gitlab.gnome.org/librsvg/devel-docs/index.html
  + Internal refactoring of the test suite.
  + Updated dependencies to avoid duplicated crates.
- Changes from version 2.55.90:
  + rsvg-convert now supports Tab completion for bash, elvish,
    fish, powershell, and zsh.  Please run rsvg-convert
  - -completion bash to generate the completion file.  You can use
    the other shells' names as an argument to the --completion
    option.
  + Support vector-effect="non-scaling-stroke" for paths.
  + Apply width, height when &lt;use&gt;ing an &lt;svg&gt;.
  + There is a new development guide for librsvg, for people who
    want to help in its development. I hope this will be especially
    useful to Outreachy and Summer of Code interns:
    https://gnome.pages.gitlab.gnome.org/librsvg/devel-docs/index.html
  + In the use element, honor the overflow:hidden property of a
    referenced symbol.
  + Treat property and attribute parse errors / invalid values as
    if they were not present, per the specs.  Previously this would
    cause the offending element's subtree to not be rendered.
  + Make feGaussianBlur work as a pass-through filter if the
    stdDeviation is invalid.
  + Define missing crate metadata for Cargo.toml.
  + Add some tests that were missing for the C API.
  + Fix the basic test suite in Windows.
  + Miscellaneous fixes for the build and CI.
  + Plenty of internal refactoring to enable more consistent
    logging.
  + Slight reductions in memory consumption for elements with
    context-stroke and context-fill.
  + Experimental gdk-pixbuf loader in Rust. This is not installed
    yet.
  + Update the gtk-rs crates to 0.16.0.
  + Port rsvg-convert's argument parsing to the clap4 crate.
  + Updates to the dependencies.
  + The CI now has a cargo-deny step, which should help us notice
    when there are security advisories for dependencies</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update to version 2.55.92:
  + Update to cssparser 0.29.6; this adds support for hwb() color
    syntax, from the CSS Color Module Level 4 spec
    (https://drafts.csswg.org/css-color-4/#changes). Note that
    values inside hwb() are *not* comma-separated, just whitespace.
  + Fix panic when a requested font-size is too big.
  + Validate all clipPath and mask transforms.
  + Add a performance tracking framework. This is part of an
    Outreachy internship.
  + Slight improvements in the size of generated code and memory
    consumption.
  + The Rust crate is now called "rsvg", for consistency with other
    crates that don't usually have a "lib" prefix.
  + The Rust API documentation is now available at
    https://gnome.pages.gitlab.gnome.org/librsvg/doc/rsvg/index.html
- Add minimum harddisk size of 9G for x86_64 to constraints. The
  cargo test uses a lot of disk space.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Pass --skip filter_morphology_from_reference_page_svg to
  cargo_test, filter out new test that fails when building against
  cairo-1.17.8.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054401">- Update to version 2.56.0:
  + Fix crash when XML files get recursively included through
    XInclude.
  + When running the suite of reference tests, you can now use the
    TESTS_OUTPUT_DIR environment variable to specify where results
    for failures get written. See tests/README.md for details.
  + The minimum supported Rust version (MSRV) is 1.64.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681560000">- Use __rustflags macro and drop no longer needed rustflags global.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Update licence tag, there is no longer any Apache licensed code.</changelog>
  <changelog author="fcrozat@suse.com" date="1683288000">- Tune _constraints for the various architectures.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685534400">- Update to version 2.56.1:
  + The minimum supported Rust version (MSRV) is 1.65.
    Unfortunately the assert_cmd crate, used in the test suite,
    bumped its MSRV and is forcing us to do the same.
  + Shrink the shared library by telling the linker to omit unused
    code.
  + Updates to dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1686744000">- Use %__default_rustflags instead of the deprecated %__rustflags
  macro. Requires at least cargo-packaging 1.2.0+2 (boo#1212333).</changelog>
  <changelog author="dimstar@opensuse.org" date="1687348800">- Use %build_rustflags instead of the deprecated
  %__default_rustflags macro. Requires at least cargo-packaging
  1.2.0+3 (boo#1212333).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1689940800">- Update to version 2.56.3:
  + This is a security release for bug glgo#GNOME/librsvg#996.
  - glgo#GNOME/librsvg#996: Fix arbitrary file read when href has
    special characters.
  - glgo#GNOME/librsvg#998: Fix cascade for symbol elements being
    referenced from use elements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692100800">- Update to version 2.56.92:
  + Fix the build for aarch64.
  + More extensive logging for filter primitives.
  + Update gtk-rs-core to 0.18.
  + Update dependencies.
  + Include license text in packaged crates.
  + The minimum supported Rust version (MSRV) is 1.70.0, due to the
    gtk-rs-core update.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694520000">- Skip bugs_bug668_small_caps_svg test, started failing with
  harfbuzz-8.2.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694692800">- Update to version 2.57.0:
  + rsvg-convert can now output PDF versions 1.4, 1.5, 1.6, in
    addition to the default 1.7, especially for LaTeX users. See
    the rsvg-convert(1) man page for options like --format=pdf1.4
  + Support the image-rendering property.
  + For consistency with other command-line tools, rsvg-convert now
    supports an argument "-" to specify the standard input. This is
    in addition to the already-supported syntax of not specifying
    an input file at all.
  + Partial support for the edgeMode attribute in feGaussianBlur,
    only for small blurs right now.
  + The minimum supported Rust version (MSRV) is 1.70.0.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701345600">- Run service with new obs-service-cargo, drop cargo_config as
  source and clean up spec and service, and switch to zst as
  buildtime compression.</changelog>
  <changelog author="dimstar@opensuse.org" date="1704369600">- Update to version 2.57.1:
  + Fix small-caps and bump the version of Pango required to 1.50.0.
  + Fix panic when using negative scaling transforms on the
    toplevel.
  + Support "var(--foo, #aabbcc)" just for colors.  This is the
    minimum required to render color SVG emoji fonts that provide
    color fallbacks, but it is not yet full support for CSS var().
  + Fix the VS2017 build.
  + Update cairo-rs.
  + Update the project metadata files.</changelog>
  <changelog author="federico@suse.com" date="1763121600">- Update to version 2.57.4 - bsc#1243867:
  + RUSTSEC-2024-0421 - idna accepts Punycode labels that do
    not produce any non-ASCII when decoded.
  + RUSTSEC-2024-0404 - Unsoundness in anstream.</changelog>
</package>
<package pkgid="99f134b14e4c7bf26a739c3ed7c9696eb3cb237d58d4af37978c71530ff688ec" name="librsvg-2-2" arch="x86_64">
  <version epoch="0" ver="2.57.4" rel="150600.3.8.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1662465600">- Update to version 2.55.1:
  + As an experiment, I'll move librsvg from even-odd versioning
    (odd minor version is unstable, even minor version is stable),
    to the versioning scheme that GNOME uses these days. So, 2.55.x
    is the new stable series.
  + There is a new development guide for librsvg, for people who
    want to help in its development. I hope this will be especially
    useful to Outreachy and Summer of Code interns:
    https://gnome.pages.gitlab.gnome.org/librsvg/devel-docs/index.html
  + Define missing crate metadata for Cargo.toml.
  + Add some tests that were missing for the C API.
  + Fix the basic test suite in Windows.
  + Miscellaneous fixes for the build and CI.</changelog>
  <changelog author="dmueller@suse.com" date="1673524800">- update vendor tarball
- actually run the testsuite for x86_64 (bsc#1207167)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1677585600">- Update to version 2.55.91:
  + Support "turn" unit for CSS &lt;angle&gt; values.
  + Support the feDropShadow element.
  + Fix panic when a feTile filter gets an empty source region.
  + Update to gtk-rs 0.17.0.
  + Simplify the NMake Makefiles for Windows; see
    win32/MSVC-Builds.md for details.
  + Documentation and infrastructure updates.
  + Consolidate the scattered .md documents into the Development
    Guide. Updated links throughout.
    https://gnome.pages.gitlab.gnome.org/librsvg/devel-docs/index.html
  + Internal refactoring of the test suite.
  + Updated dependencies to avoid duplicated crates.
- Changes from version 2.55.90:
  + rsvg-convert now supports Tab completion for bash, elvish,
    fish, powershell, and zsh.  Please run rsvg-convert
  - -completion bash to generate the completion file.  You can use
    the other shells' names as an argument to the --completion
    option.
  + Support vector-effect="non-scaling-stroke" for paths.
  + Apply width, height when &lt;use&gt;ing an &lt;svg&gt;.
  + There is a new development guide for librsvg, for people who
    want to help in its development. I hope this will be especially
    useful to Outreachy and Summer of Code interns:
    https://gnome.pages.gitlab.gnome.org/librsvg/devel-docs/index.html
  + In the use element, honor the overflow:hidden property of a
    referenced symbol.
  + Treat property and attribute parse errors / invalid values as
    if they were not present, per the specs.  Previously this would
    cause the offending element's subtree to not be rendered.
  + Make feGaussianBlur work as a pass-through filter if the
    stdDeviation is invalid.
  + Define missing crate metadata for Cargo.toml.
  + Add some tests that were missing for the C API.
  + Fix the basic test suite in Windows.
  + Miscellaneous fixes for the build and CI.
  + Plenty of internal refactoring to enable more consistent
    logging.
  + Slight reductions in memory consumption for elements with
    context-stroke and context-fill.
  + Experimental gdk-pixbuf loader in Rust. This is not installed
    yet.
  + Update the gtk-rs crates to 0.16.0.
  + Port rsvg-convert's argument parsing to the clap4 crate.
  + Updates to the dependencies.
  + The CI now has a cargo-deny step, which should help us notice
    when there are security advisories for dependencies</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update to version 2.55.92:
  + Update to cssparser 0.29.6; this adds support for hwb() color
    syntax, from the CSS Color Module Level 4 spec
    (https://drafts.csswg.org/css-color-4/#changes). Note that
    values inside hwb() are *not* comma-separated, just whitespace.
  + Fix panic when a requested font-size is too big.
  + Validate all clipPath and mask transforms.
  + Add a performance tracking framework. This is part of an
    Outreachy internship.
  + Slight improvements in the size of generated code and memory
    consumption.
  + The Rust crate is now called "rsvg", for consistency with other
    crates that don't usually have a "lib" prefix.
  + The Rust API documentation is now available at
    https://gnome.pages.gitlab.gnome.org/librsvg/doc/rsvg/index.html
- Add minimum harddisk size of 9G for x86_64 to constraints. The
  cargo test uses a lot of disk space.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Pass --skip filter_morphology_from_reference_page_svg to
  cargo_test, filter out new test that fails when building against
  cairo-1.17.8.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054401">- Update to version 2.56.0:
  + Fix crash when XML files get recursively included through
    XInclude.
  + When running the suite of reference tests, you can now use the
    TESTS_OUTPUT_DIR environment variable to specify where results
    for failures get written. See tests/README.md for details.
  + The minimum supported Rust version (MSRV) is 1.64.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681560000">- Use __rustflags macro and drop no longer needed rustflags global.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Update licence tag, there is no longer any Apache licensed code.</changelog>
  <changelog author="fcrozat@suse.com" date="1683288000">- Tune _constraints for the various architectures.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685534400">- Update to version 2.56.1:
  + The minimum supported Rust version (MSRV) is 1.65.
    Unfortunately the assert_cmd crate, used in the test suite,
    bumped its MSRV and is forcing us to do the same.
  + Shrink the shared library by telling the linker to omit unused
    code.
  + Updates to dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1686744000">- Use %__default_rustflags instead of the deprecated %__rustflags
  macro. Requires at least cargo-packaging 1.2.0+2 (boo#1212333).</changelog>
  <changelog author="dimstar@opensuse.org" date="1687348800">- Use %build_rustflags instead of the deprecated
  %__default_rustflags macro. Requires at least cargo-packaging
  1.2.0+3 (boo#1212333).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1689940800">- Update to version 2.56.3:
  + This is a security release for bug glgo#GNOME/librsvg#996.
  - glgo#GNOME/librsvg#996: Fix arbitrary file read when href has
    special characters.
  - glgo#GNOME/librsvg#998: Fix cascade for symbol elements being
    referenced from use elements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692100800">- Update to version 2.56.92:
  + Fix the build for aarch64.
  + More extensive logging for filter primitives.
  + Update gtk-rs-core to 0.18.
  + Update dependencies.
  + Include license text in packaged crates.
  + The minimum supported Rust version (MSRV) is 1.70.0, due to the
    gtk-rs-core update.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694520000">- Skip bugs_bug668_small_caps_svg test, started failing with
  harfbuzz-8.2.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694692800">- Update to version 2.57.0:
  + rsvg-convert can now output PDF versions 1.4, 1.5, 1.6, in
    addition to the default 1.7, especially for LaTeX users. See
    the rsvg-convert(1) man page for options like --format=pdf1.4
  + Support the image-rendering property.
  + For consistency with other command-line tools, rsvg-convert now
    supports an argument "-" to specify the standard input. This is
    in addition to the already-supported syntax of not specifying
    an input file at all.
  + Partial support for the edgeMode attribute in feGaussianBlur,
    only for small blurs right now.
  + The minimum supported Rust version (MSRV) is 1.70.0.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701345600">- Run service with new obs-service-cargo, drop cargo_config as
  source and clean up spec and service, and switch to zst as
  buildtime compression.</changelog>
  <changelog author="dimstar@opensuse.org" date="1704369600">- Update to version 2.57.1:
  + Fix small-caps and bump the version of Pango required to 1.50.0.
  + Fix panic when using negative scaling transforms on the
    toplevel.
  + Support "var(--foo, #aabbcc)" just for colors.  This is the
    minimum required to render color SVG emoji fonts that provide
    color fallbacks, but it is not yet full support for CSS var().
  + Fix the VS2017 build.
  + Update cairo-rs.
  + Update the project metadata files.</changelog>
  <changelog author="federico@suse.com" date="1763121600">- Update to version 2.57.4 - bsc#1243867:
  + RUSTSEC-2024-0421 - idna accepts Punycode labels that do
    not produce any non-ASCII when decoded.
  + RUSTSEC-2024-0404 - Unsoundness in anstream.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1776340800">- Add librsvg-CVE-2026-25727.patch: Fix denial of service when
  parsing rfc2822. (bsc#1257922, CVE-2026-25727)</changelog>
</package>
<package pkgid="4aed19650c23b3ba5c3efaedc840ef2500414b40b325f63bd3b9cf7616edc8f3" name="librsvg" arch="src">
  <version epoch="0" ver="2.57.4" rel="150600.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1661774400">- Update of vendored dependencies.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662465600">- Update to version 2.55.1:
  + As an experiment, I'll move librsvg from even-odd versioning
    (odd minor version is unstable, even minor version is stable),
    to the versioning scheme that GNOME uses these days. So, 2.55.x
    is the new stable series.
  + There is a new development guide for librsvg, for people who
    want to help in its development. I hope this will be especially
    useful to Outreachy and Summer of Code interns:
    https://gnome.pages.gitlab.gnome.org/librsvg/devel-docs/index.html
  + Define missing crate metadata for Cargo.toml.
  + Add some tests that were missing for the C API.
  + Fix the basic test suite in Windows.
  + Miscellaneous fixes for the build and CI.</changelog>
  <changelog author="dmueller@suse.com" date="1673524800">- update vendor tarball
- actually run the testsuite for x86_64 (bsc#1207167)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1677585600">- Update to version 2.55.91:
  + Support "turn" unit for CSS &lt;angle&gt; values.
  + Support the feDropShadow element.
  + Fix panic when a feTile filter gets an empty source region.
  + Update to gtk-rs 0.17.0.
  + Simplify the NMake Makefiles for Windows; see
    win32/MSVC-Builds.md for details.
  + Documentation and infrastructure updates.
  + Consolidate the scattered .md documents into the Development
    Guide. Updated links throughout.
    https://gnome.pages.gitlab.gnome.org/librsvg/devel-docs/index.html
  + Internal refactoring of the test suite.
  + Updated dependencies to avoid duplicated crates.
- Changes from version 2.55.90:
  + rsvg-convert now supports Tab completion for bash, elvish,
    fish, powershell, and zsh.  Please run rsvg-convert
  - -completion bash to generate the completion file.  You can use
    the other shells' names as an argument to the --completion
    option.
  + Support vector-effect="non-scaling-stroke" for paths.
  + Apply width, height when &lt;use&gt;ing an &lt;svg&gt;.
  + There is a new development guide for librsvg, for people who
    want to help in its development. I hope this will be especially
    useful to Outreachy and Summer of Code interns:
    https://gnome.pages.gitlab.gnome.org/librsvg/devel-docs/index.html
  + In the use element, honor the overflow:hidden property of a
    referenced symbol.
  + Treat property and attribute parse errors / invalid values as
    if they were not present, per the specs.  Previously this would
    cause the offending element's subtree to not be rendered.
  + Make feGaussianBlur work as a pass-through filter if the
    stdDeviation is invalid.
  + Define missing crate metadata for Cargo.toml.
  + Add some tests that were missing for the C API.
  + Fix the basic test suite in Windows.
  + Miscellaneous fixes for the build and CI.
  + Plenty of internal refactoring to enable more consistent
    logging.
  + Slight reductions in memory consumption for elements with
    context-stroke and context-fill.
  + Experimental gdk-pixbuf loader in Rust. This is not installed
    yet.
  + Update the gtk-rs crates to 0.16.0.
  + Port rsvg-convert's argument parsing to the clap4 crate.
  + Updates to the dependencies.
  + The CI now has a cargo-deny step, which should help us notice
    when there are security advisories for dependencies</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update to version 2.55.92:
  + Update to cssparser 0.29.6; this adds support for hwb() color
    syntax, from the CSS Color Module Level 4 spec
    (https://drafts.csswg.org/css-color-4/#changes). Note that
    values inside hwb() are *not* comma-separated, just whitespace.
  + Fix panic when a requested font-size is too big.
  + Validate all clipPath and mask transforms.
  + Add a performance tracking framework. This is part of an
    Outreachy internship.
  + Slight improvements in the size of generated code and memory
    consumption.
  + The Rust crate is now called "rsvg", for consistency with other
    crates that don't usually have a "lib" prefix.
  + The Rust API documentation is now available at
    https://gnome.pages.gitlab.gnome.org/librsvg/doc/rsvg/index.html
- Add minimum harddisk size of 9G for x86_64 to constraints. The
  cargo test uses a lot of disk space.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Pass --skip filter_morphology_from_reference_page_svg to
  cargo_test, filter out new test that fails when building against
  cairo-1.17.8.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054401">- Update to version 2.56.0:
  + Fix crash when XML files get recursively included through
    XInclude.
  + When running the suite of reference tests, you can now use the
    TESTS_OUTPUT_DIR environment variable to specify where results
    for failures get written. See tests/README.md for details.
  + The minimum supported Rust version (MSRV) is 1.64.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681560000">- Use __rustflags macro and drop no longer needed rustflags global.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Update licence tag, there is no longer any Apache licensed code.</changelog>
  <changelog author="fcrozat@suse.com" date="1683288000">- Tune _constraints for the various architectures.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685534400">- Update to version 2.56.1:
  + The minimum supported Rust version (MSRV) is 1.65.
    Unfortunately the assert_cmd crate, used in the test suite,
    bumped its MSRV and is forcing us to do the same.
  + Shrink the shared library by telling the linker to omit unused
    code.
  + Updates to dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1686744000">- Use %__default_rustflags instead of the deprecated %__rustflags
  macro. Requires at least cargo-packaging 1.2.0+2 (boo#1212333).</changelog>
  <changelog author="dimstar@opensuse.org" date="1687348800">- Use %build_rustflags instead of the deprecated
  %__default_rustflags macro. Requires at least cargo-packaging
  1.2.0+3 (boo#1212333).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1689940800">- Update to version 2.56.3:
  + This is a security release for bug glgo#GNOME/librsvg#996.
  - glgo#GNOME/librsvg#996: Fix arbitrary file read when href has
    special characters.
  - glgo#GNOME/librsvg#998: Fix cascade for symbol elements being
    referenced from use elements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692100800">- Update to version 2.56.92:
  + Fix the build for aarch64.
  + More extensive logging for filter primitives.
  + Update gtk-rs-core to 0.18.
  + Update dependencies.
  + Include license text in packaged crates.
  + The minimum supported Rust version (MSRV) is 1.70.0, due to the
    gtk-rs-core update.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694520000">- Skip bugs_bug668_small_caps_svg test, started failing with
  harfbuzz-8.2.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694692800">- Update to version 2.57.0:
  + rsvg-convert can now output PDF versions 1.4, 1.5, 1.6, in
    addition to the default 1.7, especially for LaTeX users. See
    the rsvg-convert(1) man page for options like --format=pdf1.4
  + Support the image-rendering property.
  + For consistency with other command-line tools, rsvg-convert now
    supports an argument "-" to specify the standard input. This is
    in addition to the already-supported syntax of not specifying
    an input file at all.
  + Partial support for the edgeMode attribute in feGaussianBlur,
    only for small blurs right now.
  + The minimum supported Rust version (MSRV) is 1.70.0.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701345600">- Run service with new obs-service-cargo, drop cargo_config as
  source and clean up spec and service, and switch to zst as
  buildtime compression.</changelog>
  <changelog author="dimstar@opensuse.org" date="1704369600">- Update to version 2.57.1:
  + Fix small-caps and bump the version of Pango required to 1.50.0.
  + Fix panic when using negative scaling transforms on the
    toplevel.
  + Support "var(--foo, #aabbcc)" just for colors.  This is the
    minimum required to render color SVG emoji fonts that provide
    color fallbacks, but it is not yet full support for CSS var().
  + Fix the VS2017 build.
  + Update cairo-rs.
  + Update the project metadata files.</changelog>
  <changelog author="federico@suse.com" date="1763121600">- Update to version 2.57.4 - bsc#1243867:
  + RUSTSEC-2024-0421 - idna accepts Punycode labels that do
    not produce any non-ASCII when decoded.
  + RUSTSEC-2024-0404 - Unsoundness in anstream.</changelog>
</package>
<package pkgid="52e309dea73c4f9e5d869cb29c28a30d7eb454d000301e203c4ba618d3ab7e42" name="librsvg" arch="src">
  <version epoch="0" ver="2.57.4" rel="150600.3.8.2"/>
  <changelog author="bjorn.lie@gmail.com" date="1662465600">- Update to version 2.55.1:
  + As an experiment, I'll move librsvg from even-odd versioning
    (odd minor version is unstable, even minor version is stable),
    to the versioning scheme that GNOME uses these days. So, 2.55.x
    is the new stable series.
  + There is a new development guide for librsvg, for people who
    want to help in its development. I hope this will be especially
    useful to Outreachy and Summer of Code interns:
    https://gnome.pages.gitlab.gnome.org/librsvg/devel-docs/index.html
  + Define missing crate metadata for Cargo.toml.
  + Add some tests that were missing for the C API.
  + Fix the basic test suite in Windows.
  + Miscellaneous fixes for the build and CI.</changelog>
  <changelog author="dmueller@suse.com" date="1673524800">- update vendor tarball
- actually run the testsuite for x86_64 (bsc#1207167)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1677585600">- Update to version 2.55.91:
  + Support "turn" unit for CSS &lt;angle&gt; values.
  + Support the feDropShadow element.
  + Fix panic when a feTile filter gets an empty source region.
  + Update to gtk-rs 0.17.0.
  + Simplify the NMake Makefiles for Windows; see
    win32/MSVC-Builds.md for details.
  + Documentation and infrastructure updates.
  + Consolidate the scattered .md documents into the Development
    Guide. Updated links throughout.
    https://gnome.pages.gitlab.gnome.org/librsvg/devel-docs/index.html
  + Internal refactoring of the test suite.
  + Updated dependencies to avoid duplicated crates.
- Changes from version 2.55.90:
  + rsvg-convert now supports Tab completion for bash, elvish,
    fish, powershell, and zsh.  Please run rsvg-convert
  - -completion bash to generate the completion file.  You can use
    the other shells' names as an argument to the --completion
    option.
  + Support vector-effect="non-scaling-stroke" for paths.
  + Apply width, height when &lt;use&gt;ing an &lt;svg&gt;.
  + There is a new development guide for librsvg, for people who
    want to help in its development. I hope this will be especially
    useful to Outreachy and Summer of Code interns:
    https://gnome.pages.gitlab.gnome.org/librsvg/devel-docs/index.html
  + In the use element, honor the overflow:hidden property of a
    referenced symbol.
  + Treat property and attribute parse errors / invalid values as
    if they were not present, per the specs.  Previously this would
    cause the offending element's subtree to not be rendered.
  + Make feGaussianBlur work as a pass-through filter if the
    stdDeviation is invalid.
  + Define missing crate metadata for Cargo.toml.
  + Add some tests that were missing for the C API.
  + Fix the basic test suite in Windows.
  + Miscellaneous fixes for the build and CI.
  + Plenty of internal refactoring to enable more consistent
    logging.
  + Slight reductions in memory consumption for elements with
    context-stroke and context-fill.
  + Experimental gdk-pixbuf loader in Rust. This is not installed
    yet.
  + Update the gtk-rs crates to 0.16.0.
  + Port rsvg-convert's argument parsing to the clap4 crate.
  + Updates to the dependencies.
  + The CI now has a cargo-deny step, which should help us notice
    when there are security advisories for dependencies</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1678363200">- Update to version 2.55.92:
  + Update to cssparser 0.29.6; this adds support for hwb() color
    syntax, from the CSS Color Module Level 4 spec
    (https://drafts.csswg.org/css-color-4/#changes). Note that
    values inside hwb() are *not* comma-separated, just whitespace.
  + Fix panic when a requested font-size is too big.
  + Validate all clipPath and mask transforms.
  + Add a performance tracking framework. This is part of an
    Outreachy internship.
  + Slight improvements in the size of generated code and memory
    consumption.
  + The Rust crate is now called "rsvg", for consistency with other
    crates that don't usually have a "lib" prefix.
  + The Rust API documentation is now available at
    https://gnome.pages.gitlab.gnome.org/librsvg/doc/rsvg/index.html
- Add minimum harddisk size of 9G for x86_64 to constraints. The
  cargo test uses a lot of disk space.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Pass --skip filter_morphology_from_reference_page_svg to
  cargo_test, filter out new test that fails when building against
  cairo-1.17.8.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054401">- Update to version 2.56.0:
  + Fix crash when XML files get recursively included through
    XInclude.
  + When running the suite of reference tests, you can now use the
    TESTS_OUTPUT_DIR environment variable to specify where results
    for failures get written. See tests/README.md for details.
  + The minimum supported Rust version (MSRV) is 1.64.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1681560000">- Use __rustflags macro and drop no longer needed rustflags global.</changelog>
  <changelog author="fcrozat@suse.com" date="1682596800">- Update licence tag, there is no longer any Apache licensed code.</changelog>
  <changelog author="fcrozat@suse.com" date="1683288000">- Tune _constraints for the various architectures.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1685534400">- Update to version 2.56.1:
  + The minimum supported Rust version (MSRV) is 1.65.
    Unfortunately the assert_cmd crate, used in the test suite,
    bumped its MSRV and is forcing us to do the same.
  + Shrink the shared library by telling the linker to omit unused
    code.
  + Updates to dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1686744000">- Use %__default_rustflags instead of the deprecated %__rustflags
  macro. Requires at least cargo-packaging 1.2.0+2 (boo#1212333).</changelog>
  <changelog author="dimstar@opensuse.org" date="1687348800">- Use %build_rustflags instead of the deprecated
  %__default_rustflags macro. Requires at least cargo-packaging
  1.2.0+3 (boo#1212333).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1689940800">- Update to version 2.56.3:
  + This is a security release for bug glgo#GNOME/librsvg#996.
  - glgo#GNOME/librsvg#996: Fix arbitrary file read when href has
    special characters.
  - glgo#GNOME/librsvg#998: Fix cascade for symbol elements being
    referenced from use elements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1692100800">- Update to version 2.56.92:
  + Fix the build for aarch64.
  + More extensive logging for filter primitives.
  + Update gtk-rs-core to 0.18.
  + Update dependencies.
  + Include license text in packaged crates.
  + The minimum supported Rust version (MSRV) is 1.70.0, due to the
    gtk-rs-core update.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694520000">- Skip bugs_bug668_small_caps_svg test, started failing with
  harfbuzz-8.2.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694692800">- Update to version 2.57.0:
  + rsvg-convert can now output PDF versions 1.4, 1.5, 1.6, in
    addition to the default 1.7, especially for LaTeX users. See
    the rsvg-convert(1) man page for options like --format=pdf1.4
  + Support the image-rendering property.
  + For consistency with other command-line tools, rsvg-convert now
    supports an argument "-" to specify the standard input. This is
    in addition to the already-supported syntax of not specifying
    an input file at all.
  + Partial support for the edgeMode attribute in feGaussianBlur,
    only for small blurs right now.
  + The minimum supported Rust version (MSRV) is 1.70.0.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701345600">- Run service with new obs-service-cargo, drop cargo_config as
  source and clean up spec and service, and switch to zst as
  buildtime compression.</changelog>
  <changelog author="dimstar@opensuse.org" date="1704369600">- Update to version 2.57.1:
  + Fix small-caps and bump the version of Pango required to 1.50.0.
  + Fix panic when using negative scaling transforms on the
    toplevel.
  + Support "var(--foo, #aabbcc)" just for colors.  This is the
    minimum required to render color SVG emoji fonts that provide
    color fallbacks, but it is not yet full support for CSS var().
  + Fix the VS2017 build.
  + Update cairo-rs.
  + Update the project metadata files.</changelog>
  <changelog author="federico@suse.com" date="1763121600">- Update to version 2.57.4 - bsc#1243867:
  + RUSTSEC-2024-0421 - idna accepts Punycode labels that do
    not produce any non-ASCII when decoded.
  + RUSTSEC-2024-0404 - Unsoundness in anstream.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1776340800">- Add librsvg-CVE-2026-25727.patch: Fix denial of service when
  parsing rfc2822. (bsc#1257922, CVE-2026-25727)</changelog>
</package>
<package pkgid="223d38017ee92ebc24462a290936e1406c21996396b6d457ea0a59b332c1764a" name="libruby2_5-2_5" arch="x86_64">
  <version epoch="0" ver="2.5.9" rel="150700.24.3.1"/>
  <changelog author="mrueckert@suse.de" date="1618315200">- Update to 2.5.9 (boo#1184644)
  https://www.ruby-lang.org/en/news/2021/04/05/ruby-2-5-9-released/
  - CVE-2020-25613: Potential HTTP Request Smuggling Vulnerability
    in WEBrick
  - CVE-2021-28965: XML round-trip vulnerability in REXML
  Complete list of changes at
  https://github.com/ruby/ruby/compare/v2_5_8...v2_5_9
- Update suse.patch:
  Remove fix for CVE-2020-25613 as it is included in the update</changelog>
  <changelog author="ali.abdallah@suse.com" date="1636632000">Add patches to fix the following CVE's:
  - CVE-2021-32066.patch (CVE-2021-32066): Fix StartTLS stripping
    vulnerability in Net:IMAP (bsc#1188160)
  - CVE-2021-31810.patch (CVE-2021-31810): Fix trusting FTP PASV
    responses vulnerability in  Net:FTP (bsc#1188161)
  - CVE-2021-31799.patch (CVE-2021-31799): Fix Command injection
    vulnerability in RDoc (bsc#1190375)</changelog>
  <changelog author="mrueckert@suse.de" date="1650456000">- Add Requires to make and gcc to ruby-devel to make the default
  extconf.rb work</changelog>
  <changelog author="mrueckert@suse.de" date="1650456001">- Update suse.patch:
  - backport fix for CVE-2022-28739: ruby: Buffer overrun in
    String-to-Float conversion (boo#1198441)
  - back port date 2.0.3 CVE-2021-41817 (boo#1193035)
  - merge the previous bug fixes into suse.patch
  - CVE-2021-32066.patch
  - CVE-2021-31810.patch
  - CVE-2021-31799.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1662379200">- Update suse.patch to 41adc98ad1:
  - Cookie Prefix Spoofing in CGI::Cookie.parse (boo#1193081 CVE-2021-41819)
- add back some lost chunks to the suse.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1697803200">- update suse.patch to 531fb8b2cc
  - fix quadratic behavior in the uri parser (boo#1209891
    CVE-2023-28755)
  - fix expensive regexp in the RFC2822 time parser (boo#1209967
    CVE-2023-28756)
  - backport date 2.0.3 (boo#1193035 CVE-2021-41817)
  - merge CGI 0.1.0.2: (boo#1205726 CVE-2021-33621)
  - When parsing cookies, only decode the values
  - HTTP response splitting in CGI</changelog>
  <changelog author="steven.baker@suse.com" date="1729252800">- backport REXML from 3.3
  - fix denial of service when parsing a XML that has many deep
    elements with the same local name attributes
    (boo#1229673 CVE-2024-43398)
  - fix denial of service when parsing an XML that contains many
    specific characters such as whitespaces, &gt;] and ]&gt;
    (boo#1228794 CVE-2024-41123)
  - fix denial of service when parsing an XML that has many entity
    expansions with SAX2 or pull parser API
    (boo#1228799 CVE-2024-41946)
  - fix denial of service when parsing an XML that has many left
    angled brackets in an attribute value
    (boo#1224390 CVE-2024-35176)
  - fix ReDoS when parsing an XML that has many specific characters
    (boo#1228072 CVE-2024-39908)</changelog>
  <changelog author="steven.baker@suse.com" date="1738238400">- backport openssl 3.3 (openssl-update.patch)
  - this was extracted to a rubygem, but is included inline</changelog>
  <changelog author="steven.baker@suse.com" date="1739188800">- backport digest 3.2 (digest-update.patch)
  - this was also extracted to a rubygem, and is included inline</changelog>
  <changelog author="steven.baker@suse.com" date="1739188801">- add update-test-certificates.patch:
  - need updated certificates for the test suite</changelog>
  <changelog author="steven.baker@suse.com" date="1739448000">- disable the tests the SSL tests are fixed</changelog>
  <changelog author="steven.baker@suse.com" date="1740139200">- remove rexml-test.patch as it is included in suse.patch now
- update suse.patch to f0660edeba
  - fix HTTP request smuggling in WEBrick
    bsc#1230930 CVE-2024-47220
  - update REXML to 3.3.9 to fix ReDOS vulnerability
    bsc#1232440 CVE-2024-49761
  - [ruby/uri] Fix quadratic backtracking on invalid relative URI
  - [ruby/time] Make RFC2822 regexp linear
  - [ruby/time] Fix quadratic backtracking on invalid time
  - merge some parts of CGI 0.1.1</changelog>
  <changelog author="steven.baker@suse.com" date="1744286400">- update suse.patch to 6bf78da1fc4048a11a8612741216ebc47d9ebb41
  - move the request smuggling patch to the correct place
    actually fixes bsc#1230930 CVE-2024-47220 and now boo#1235773</changelog>
  <changelog author="steven.baker@suse.com" date="1744718400">- update suse.patch to 736ea75f25d52fdebb88ed6583468bd7c21190f6
  - fix ReDoS in CGI::Util#escapeElement
    bsc#1237806 CVE-2025-27220
  - fix denial of service in CGI::Cookie.parse
    bsc#1237804 CVE-2025-27219</changelog>
  <changelog author="steven.baker@suse.com" date="1751889600">- update suse.patch to 5d79fc609c5761864aec47e1ae4796b93db99104
  - fix ruby: userinfo leakage in URI#join, URI#merge and URI#+
    bsc#1237805 CVE-2025-27221</changelog>
  <changelog author="steven.baker@suse.com" date="1751976000">- update suse.patch to c76fb820676cfded16c697a62281a3bfeb8e4bb1
  - fix webrick: Ruby WEBrick read_header HTTP Request Smuggling Vulnerability
    bsc#1245254 CVE-2025-6442</changelog>
  <changelog author="steven.baker@suse.com" date="1754654400">- update suse.patch to 3f3682bf07fcd4f2fa875958853d3843ee7dcdb9
  - fix remote DoS via YAML manifest
    bsc#1225905 CVE-2024-35221</changelog>
  <changelog author="steven.baker@suse.com" date="1757678400">- add limit-decompressed-name-length.patch
  - fix ruby: denial of service (DoS) due to an insufficient check
    on the length of a decompressed domain name within a DNS packet
    in resolv gem
    bsc#1246430 CVE-2025-24294</changelog>
  <changelog author="steven.baker@suse.com" date="1762776000">- disable the SSL tests that are timing out due to the old certs</changelog>
  <changelog author="steven.baker@suse.com" date="1762776001">- disable the SSL tests because the fixtures need to be regenerated</changelog>
</package>
<package pkgid="d4859b2a53b34a45a915ef245d98eab7bc09fbd3306e11aa3407dc1be3382c84" name="libruby2_5-2_5" arch="x86_64">
  <version epoch="0" ver="2.5.9" rel="150700.24.6.1"/>
  <changelog author="ali.abdallah@suse.com" date="1636632000">Add patches to fix the following CVE's:
  - CVE-2021-32066.patch (CVE-2021-32066): Fix StartTLS stripping
    vulnerability in Net:IMAP (bsc#1188160)
  - CVE-2021-31810.patch (CVE-2021-31810): Fix trusting FTP PASV
    responses vulnerability in  Net:FTP (bsc#1188161)
  - CVE-2021-31799.patch (CVE-2021-31799): Fix Command injection
    vulnerability in RDoc (bsc#1190375)</changelog>
  <changelog author="mrueckert@suse.de" date="1650456000">- Add Requires to make and gcc to ruby-devel to make the default
  extconf.rb work</changelog>
  <changelog author="mrueckert@suse.de" date="1650456001">- Update suse.patch:
  - backport fix for CVE-2022-28739: ruby: Buffer overrun in
    String-to-Float conversion (boo#1198441)
  - back port date 2.0.3 CVE-2021-41817 (boo#1193035)
  - merge the previous bug fixes into suse.patch
  - CVE-2021-32066.patch
  - CVE-2021-31810.patch
  - CVE-2021-31799.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1662379200">- Update suse.patch to 41adc98ad1:
  - Cookie Prefix Spoofing in CGI::Cookie.parse (boo#1193081 CVE-2021-41819)
- add back some lost chunks to the suse.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1697803200">- update suse.patch to 531fb8b2cc
  - fix quadratic behavior in the uri parser (boo#1209891
    CVE-2023-28755)
  - fix expensive regexp in the RFC2822 time parser (boo#1209967
    CVE-2023-28756)
  - backport date 2.0.3 (boo#1193035 CVE-2021-41817)
  - merge CGI 0.1.0.2: (boo#1205726 CVE-2021-33621)
  - When parsing cookies, only decode the values
  - HTTP response splitting in CGI</changelog>
  <changelog author="steven.baker@suse.com" date="1729252800">- backport REXML from 3.3
  - fix denial of service when parsing a XML that has many deep
    elements with the same local name attributes
    (boo#1229673 CVE-2024-43398)
  - fix denial of service when parsing an XML that contains many
    specific characters such as whitespaces, &gt;] and ]&gt;
    (boo#1228794 CVE-2024-41123)
  - fix denial of service when parsing an XML that has many entity
    expansions with SAX2 or pull parser API
    (boo#1228799 CVE-2024-41946)
  - fix denial of service when parsing an XML that has many left
    angled brackets in an attribute value
    (boo#1224390 CVE-2024-35176)
  - fix ReDoS when parsing an XML that has many specific characters
    (boo#1228072 CVE-2024-39908)</changelog>
  <changelog author="steven.baker@suse.com" date="1738238400">- backport openssl 3.3 (openssl-update.patch)
  - this was extracted to a rubygem, but is included inline</changelog>
  <changelog author="steven.baker@suse.com" date="1739188800">- backport digest 3.2 (digest-update.patch)
  - this was also extracted to a rubygem, and is included inline</changelog>
  <changelog author="steven.baker@suse.com" date="1739188801">- add update-test-certificates.patch:
  - need updated certificates for the test suite</changelog>
  <changelog author="steven.baker@suse.com" date="1739448000">- disable the tests the SSL tests are fixed</changelog>
  <changelog author="steven.baker@suse.com" date="1740139200">- remove rexml-test.patch as it is included in suse.patch now
- update suse.patch to f0660edeba
  - fix HTTP request smuggling in WEBrick
    bsc#1230930 CVE-2024-47220
  - update REXML to 3.3.9 to fix ReDOS vulnerability
    bsc#1232440 CVE-2024-49761
  - [ruby/uri] Fix quadratic backtracking on invalid relative URI
  - [ruby/time] Make RFC2822 regexp linear
  - [ruby/time] Fix quadratic backtracking on invalid time
  - merge some parts of CGI 0.1.1</changelog>
  <changelog author="steven.baker@suse.com" date="1744286400">- update suse.patch to 6bf78da1fc4048a11a8612741216ebc47d9ebb41
  - move the request smuggling patch to the correct place
    actually fixes bsc#1230930 CVE-2024-47220 and now boo#1235773</changelog>
  <changelog author="steven.baker@suse.com" date="1744718400">- update suse.patch to 736ea75f25d52fdebb88ed6583468bd7c21190f6
  - fix ReDoS in CGI::Util#escapeElement
    bsc#1237806 CVE-2025-27220
  - fix denial of service in CGI::Cookie.parse
    bsc#1237804 CVE-2025-27219</changelog>
  <changelog author="steven.baker@suse.com" date="1751889600">- update suse.patch to 5d79fc609c5761864aec47e1ae4796b93db99104
  - fix ruby: userinfo leakage in URI#join, URI#merge and URI#+
    bsc#1237805 CVE-2025-27221</changelog>
  <changelog author="steven.baker@suse.com" date="1751976000">- update suse.patch to c76fb820676cfded16c697a62281a3bfeb8e4bb1
  - fix webrick: Ruby WEBrick read_header HTTP Request Smuggling Vulnerability
    bsc#1245254 CVE-2025-6442</changelog>
  <changelog author="steven.baker@suse.com" date="1754654400">- update suse.patch to 3f3682bf07fcd4f2fa875958853d3843ee7dcdb9
  - fix remote DoS via YAML manifest
    bsc#1225905 CVE-2024-35221</changelog>
  <changelog author="steven.baker@suse.com" date="1757678400">- add limit-decompressed-name-length.patch
  - fix ruby: denial of service (DoS) due to an insufficient check
    on the length of a decompressed domain name within a DNS packet
    in resolv gem
    bsc#1246430 CVE-2025-24294</changelog>
  <changelog author="steven.baker@suse.com" date="1762776000">- disable the SSL tests that are timing out due to the old certs</changelog>
  <changelog author="steven.baker@suse.com" date="1762776001">- disable the SSL tests because the fixtures need to be regenerated</changelog>
  <changelog author="steven.baker@suse.com" date="1773835200">- update suse.patch to fdff0ae9b7
  - backport REXML 3.4.4
  - fix denial of service when parsing XML containing multiple XML declarations
    bsc#1250016 CVE-2025-58767
  - fix ReDoS in REXML hex numeric character reference parsing
    bsc#1232440 bsc#1232441 CVE-2024-49761
  - fix buffer overflow in zstream_buffer_ungets (Zlib::GzipReader)
    bsc#1259239 CVE-2026-27820
  - adjust rexml test suite for ruby 2.5 test-unit compatibility</changelog>
</package>
<package pkgid="90fda3d01fa41105a05d171f1b770007ede3e0c96c7ec7849574fd7af49f0fec" name="libsasl2-3" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="150600.7.14.1"/>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Make DIGEST-MD5 work with openssl3 ( bsc#1230111 )
  RC4 is legacy provided since openSSL3 and requires explicit loading, disable openssl3 depricated API warnings.
  * Add cyrus-sasl-make-digestmd5-work-ssl3.patch</changelog>
  <changelog author="scabrero@suse.de" date="1747828800">- Add Channel Binding support for GSSAPI/GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0009-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch
- Add support for setting max ssf 0 to GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0010-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch</changelog>
  <changelog author="varkoly@suse.com" date="1762776000">- Python3 error log upon importing pycurl (bsc#1233529)
  Remove senceless log message.
  * add remove-senceless-log.patch</changelog>
</package>
<package pkgid="c4f3f70e9f08ae2ddf8f1737ac3b7dd4d277dfdab05ce3e7e5587c333b5273f9" name="libsasl2-3" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="150600.7.6.2"/>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Make DIGEST-MD5 work with openssl3 ( bsc#1230111 )
  RC4 is legacy provided since openSSL3 and requires explicit loading, disable openssl3 depricated API warnings.
  * Add cyrus-sasl-make-digestmd5-work-ssl3.patch</changelog>
  <changelog author="scabrero@suse.de" date="1747828800">- Add Channel Binding support for GSSAPI/GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0009-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch
- Add support for setting max ssf 0 to GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0010-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch</changelog>
</package>
<package pkgid="fc7f899380f4af64addfa1369dbdffc1b527765fafea020c1c0f58951c7ee49c" name="libsasl2-3" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="150600.7.9.2"/>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Make DIGEST-MD5 work with openssl3 ( bsc#1230111 )
  RC4 is legacy provided since openSSL3 and requires explicit loading, disable openssl3 depricated API warnings.
  * Add cyrus-sasl-make-digestmd5-work-ssl3.patch</changelog>
  <changelog author="scabrero@suse.de" date="1747828800">- Add Channel Binding support for GSSAPI/GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0009-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch
- Add support for setting max ssf 0 to GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0010-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch</changelog>
</package>
<package pkgid="e2b0059333852698004d22f6c07c228e8bb41892fce9635918dd667bdcd02827" name="libsasl2-3-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="150600.7.14.1"/>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Make DIGEST-MD5 work with openssl3 ( bsc#1230111 )
  RC4 is legacy provided since openSSL3 and requires explicit loading, disable openssl3 depricated API warnings.
  * Add cyrus-sasl-make-digestmd5-work-ssl3.patch</changelog>
  <changelog author="scabrero@suse.de" date="1747828800">- Add Channel Binding support for GSSAPI/GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0009-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch
- Add support for setting max ssf 0 to GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0010-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch</changelog>
  <changelog author="varkoly@suse.com" date="1762776000">- Python3 error log upon importing pycurl (bsc#1233529)
  Remove senceless log message.
  * add remove-senceless-log.patch</changelog>
</package>
<package pkgid="dcc89b06f0b08f24a9e3b518e64a290535833213239e40fdb3371015d279d8f1" name="libsasl2-3-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="150600.7.6.2"/>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Make DIGEST-MD5 work with openssl3 ( bsc#1230111 )
  RC4 is legacy provided since openSSL3 and requires explicit loading, disable openssl3 depricated API warnings.
  * Add cyrus-sasl-make-digestmd5-work-ssl3.patch</changelog>
  <changelog author="scabrero@suse.de" date="1747828800">- Add Channel Binding support for GSSAPI/GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0009-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch
- Add support for setting max ssf 0 to GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0010-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch</changelog>
</package>
<package pkgid="bb02e087a0ea9fa09a5428e1dd36d7b017be48869479fe4188f2d0515fd196bb" name="libsasl2-3-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.28" rel="150600.7.9.2"/>
  <changelog author="jengelh@inai.de" date="1417089600">- Make sure /usr/sbin/rcsaslauthd exists</changelog>
  <changelog author="varkoly@suse.com" date="1420545600">- bnc#908883 cyrus-sasl-scram refers to wrong RFC</changelog>
  <changelog author="bwiedemann@suse.com" date="1449662400">- really use SASLAUTHD_PARAMS variable (bnc#938657)</changelog>
  <changelog author="varkoly@suse.com" date="1488888000">- bnc#1026825 saslauthd: :set_auth_mech : unknown authentication mechanism: kerberos5</changelog>
  <changelog author="michael@stroeder.com" date="1490184000">- added cyrus-sasl-issue-402.patch to fix
  SASL GSSAPI mechanism acceptor wrongly returns zero maxbufsize #402
  (see https://github.com/cyrusimap/cyrus-sasl/issues/402)</changelog>
  <changelog author="vcizek@suse.com" date="1504526400">- OpenSSL 1.1 support (bsc#1055463)
  * add cyrus-sasl-2.1.27-openssl-1.1.0.patch from Fedora</changelog>
  <changelog author="varkoly@suse.com" date="1549281600">- bnc#1044840 syslog is polluted with messages "GSSAPI client step 1"
  By server context the connection will be sent to the log function.
  Client content does not have log level information. I.e. there is no
  way to stop DEBUG level logs nece I've removed it.
  * add cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="michael@stroeder.com" date="1574942400">- added backport-patch cyrus-sasl-bug587.patch which fixes
  off-by-one error in _sasl_add_string function
  (see CVE-2019-19906 bsc#1159635)</changelog>
  <changelog author="scabrero@suse.de" date="1580990400">- Added support for retrieving negotiated SSF in gssapi plugin (bsc#1162518)
  * Add 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * Add 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * Add 0004-Add-support-for-retrieving-the-mech_ssf.patch
- Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF (bsc#1162518)
  * Add 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch</changelog>
  <changelog author="varkoly@suse.com" date="1607428800">- Remove Berkeley DB dependency (JIRA#SLE-12190)
  The packages cyrus-sasl and cyrus-sasl-saslauthd are built
  without Berkely DB support. gdbm will be used instead of BDB.
  The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built
  with Berkely DB support.
- Update to 2.1.27
  * Added support for OpenSSL 1.1
  * Added support for lmdb
  * Lots of build fixes
  * Treat SCRAM and DIGEST-MD5 as more secure than PLAIN when selecting client mech
  * DIGEST-MD5 plugin:
    Fixed memory leaks
    Fixed a segfault when looking for non-existent reauth cache
    Prevent client from going from step 3 back to step 2
    Allow cmusaslsecretDIGEST-MD5 property to be disabled
  * GSSAPI plugin:
    Added support for retrieving negotiated SSF
    Fixed GSS-SPNEGO to use flags negotiated by GSSAPI for SSF
    Properly compute maxbufsize AFTER security layers have been set
  * SCRAM plugin:
    Added support for SCRAM-SHA-256
  * LOGIN plugin:
    Don’t prompt client for password until requested by server
  * NTLM plugin:
    Fixed crash due to uninitialized HMAC context
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)
- bsc#983938 `After=syslog.target` left-overs in several unit files
- added patches:
  fix_libpq-fe_include.diff  for fixing including libpq-fe.h
- removed patches obsoleted by upstream changes:
  * shared_link_on_ppc.patch
  * cyrus-sasl-2.1.27-openssl-1.1.0.patch
  * 0002-Drop-unused-parameter-from-gssapi_spnego_ssf.patch
  * 0003-Check-return-error-from-gss_wrap_size_limit.patch
  * 0004-Add-support-for-retrieving-the-mech_ssf.patch
  * 0001-Fix-GSS-SPNEGO-mechanism-s-incompatible-behavior.patch
  * cyrus-sasl-fix-logging-in-gssapi.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610107200">- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root
  due to insecure tmp file usage. (bsc#1180669)
  Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary
  files.</changelog>
  <changelog author="varkoly@suse.com" date="1614254400">- Fix build: Do not build libsasl2-3 in the bdb package. This will
  not be linked to berkely db. libsasl2-3 is now defined as
  %BuildRequires and %Requires</changelog>
  <changelog author="varkoly@suse.com" date="1642075200">- postfix: sasl authentication with password fails (bsc#1194265)
  Add config parameter --with-dblib=gdbm
- Avoid converting of /etc/sasldb2 by every update. Convert
  /etc/sasldb2 only if it is a Berkeley DB</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- cyrus-sasl: prevent fail of %pre when berkely db utils are
  not installed (seems like we want to use this only for upgrade
  so no Prereq added)
- move license to licensedir
- remove use of RPM_BUILD_ROOT
- minimal spec cleanups
- avoid bashisms</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- update to 2.1.28 (bsc#1196036, CVE-2022-24407):
  * https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html#new-in-2-1-28
- drop cyrus-sasl-bug587.patch (upstream)</changelog>
  <changelog author="dimstar@opensuse.org" date="1670414400">- Do not set directories inside doc/ mode 644; otherwise the
  directories are set 644 as well, which means no files inside are
  accessible. This resulted in the past in doc/ actually not being
  added to the devel package.</changelog>
  <changelog author="dmueller@suse.com" date="1674475200">- drop optional opie dependency</changelog>
  <changelog author="angel.yankov@suse.com" date="1726747200">- Make DIGEST-MD5 work with openssl3 ( bsc#1230111 )
  RC4 is legacy provided since openSSL3 and requires explicit loading, disable openssl3 depricated API warnings.
  * Add cyrus-sasl-make-digestmd5-work-ssl3.patch</changelog>
  <changelog author="scabrero@suse.de" date="1747828800">- Add Channel Binding support for GSSAPI/GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0009-Add-Channel-Binding-support-for-GSSAPI-GSS-SPNEGO.patch
- Add support for setting max ssf 0 to GSS-SPNEGO; (bsc#1229655);
  (jsc#PED-12097); Add patch
  0010-Add-support-for-setting-max-ssf-0-to-GSS-SPNEGO.patch</changelog>
</package>
<package pkgid="063c8e63b9328d675f4ac0c8d531511e0cb423001810ec5b6ab9c0fa3b4cc80a" name="libselinux" arch="src">
  <version epoch="0" ver="3.5" rel="150600.3.3.1"/>
  <changelog author="jsegitz@suse.com" date="1619438400">- Remove Recommends for selinux-autorelabel. It's better to have this
  in the policy package itself (bsc#1181837)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626609600">- Add missing libselinux-utils Provides to selinux-tools so that
  %selinux_requires works</changelog>
  <changelog author="jsegitz@suse.com" date="1636632000">- Update to version 3.3:
  * Lots of smaller issues fixed found by fuzzing</changelog>
  <changelog author="jsegitz@suse.com" date="1644926400">- Add Requires for exact libselinux1 version for selinux-tools
- Simplyfied check for correct boot paramaters in selinux-ready
  (bsc#1195361)</changelog>
  <changelog author="jsegitz@suse.com" date="1652097600">- Update to version 3.4:
  * Use PCRE2 by default
  * Make selinux_log() and is_context_customizable() thread-safe
  * Prevent leakeing file descriptors
  * Correctly hash specfiles larger than 4G
- Refreshed skip_cycles.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1653998400">- Added restorecon_pin_file.patch. Fixes issus when running
  fixfiles/restorecon</changelog>
  <changelog author="jsegitz@suse.com" date="1657195200">- Fixed initrd check in selinux-ready (bnc#1186127)</changelog>
  <changelog author="jsegitz@suse.com" date="1677240000">- Update to version 3.5:
  * check for truncations
  * avoid newline in avc message
  * bail out on path truncations
  * add getpidprevcon to gather the previous context before the last
    exec of a given process
  * Workaround for heap overhead of pcre
  * fix memory leaks on the audit2why module init
  * ignore invalid class name lookup
- Drop restorecon_pin_file.patch, is upstream
- Refreshed python3.8-compat.patch
- Added additional developer key (Jason Zaman)</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO as it works fine now.</changelog>
  <changelog author="jsegitz@suse.com" date="1679659200">- Add -ffat-lto-objects to CFLAGS to prevent rpmlint errors because
  of LTO</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1683288000">- Add python-wheel build dependency to build correctly with latest
  python-pip version.</changelog>
  <changelog author="kastl@b1-systems.de" date="1685620800">- allow building this with different python versions, to make this
  usable for the new sle15 macro (using python3.11)</changelog>
  <changelog author="jsegitz@suse.com" date="1687262400">- Add explicit BuildRequires for python3-pip and python3-wheel on
  15.5, currently the macros don't do the right thing</changelog>
  <changelog author="mcepl@suse.com" date="1687521600">- Remove separate libselinux-bindings SPEC file (bsc#1212618).</changelog>
  <changelog author="jsegitz@suse.com" date="1688472000">- Fix python packaging by setting the name to a fixed value</changelog>
  <changelog author="mcepl@suse.com" date="1691150400">- (bsc#1212618) Divide libselinux and libselinux-bindings again.
  libselinux itself is in Ring0 so it has to have absolutely
  minimal dependencies, so it is better to separate
  libselinux-bindings into a separate pacakge.</changelog>
  <changelog author="dimstar@opensuse.org" date="1691496000">- Do not BuildRequire swig and ruby-devel in the main build phase:
  those are only needed for the bindings.</changelog>
  <changelog author="georg.pfuetzenreuter@suse.com" date="1696161600">- Repair initrd libselinux check in selinux-ready</changelog>
  <changelog author="jsegitz@suse.com" date="1760616000">- Ship license file (bsc#1252160)</changelog>
</package>
<package pkgid="3c72a2458525777282b535a7fceb2752edddd14ab57c959a1bbace6cf5c2595e" name="libselinux-bindings" arch="src">
  <version epoch="0" ver="3.5" rel="150600.3.3.1"/>
  <changelog author="jsegitz@suse.com" date="1553083200">- Update to version 2.9
  * Add security_reject_unknown(3) man page
  * Change matchpathcon usage to match with matchpathcon manpage
  * Do not define gettid() if glibc &gt;= 2.30 is used
  * Fix RESOURCE_LEAK defects reported by coverity scan
  * Fix line wrapping in selabel_file.5
  * Do not dereference symlink with statfs in selinux_restorecon
  * Fix overly strict validation of file_contexts.bin
  * Fix selinux_restorecon() on non-SELinux hosts
  * Fix the whatis line for the selinux_boolean_sub.3 manpage
  * Fix printf format string specifier for uint64_t
  * Fix handling of unknown classes/perms
  * Set an appropriate errno in booleans.c
- Dropped python3.patch, is now upstream</changelog>
  <changelog author="jsegitz@suse.com" date="1558699200">- Set License: to correct value (bsc#1135710)</changelog>
  <changelog author="mliska@suse.cz" date="1559044800">- Disable LTO (boo#1133244).</changelog>
  <changelog author="mcepl@suse.com" date="1572436800">- Add python3.8-compat.patch which makes build possible even with
  Python 3.8, which doesn’t automatically adds -lpython&lt;ver&gt;</changelog>
  <changelog author="jsegitz@suse.de" date="1576497600">- Added swig4_moduleimport.patch to prevent import errors due to
  SWIG 4</changelog>
  <changelog author="jsegitz@suse.de" date="1583236800">- Update to version 3.0
  * Ignore the stem when looking up all matches in file context
  * Save digest of all partial matches for directory
  * Use Python distutils to install SELinux python bindings
  * ensure that digest_len is not zero
  * fix string conversion of unknown perms
  * mark all exported function "extern"</changelog>
  <changelog author="jsegitz@suse.com" date="1594728000">- Update to version 3.1:
  * selinux/flask.h, selinux/av_permissions.h and sepol/policydb/flask.h were
    removed. All userspace object managers should have been updated to use the
    dynamic class/perm mapping support.
    Use string_to_security_class(3) and string_to_av_perm(3) to map the class
    and permission names to their policy values, or selinux_set_mapping(3) to
    create a mapping from class and permission index values used by the
    application to the policy values.
  * Removed restrictions in libsepol and checkpolicy that required all declared
    initial SIDs to be assigned a context.
  * Support for new policy capability genfs_seclabel_symlinks
  * selinuxfs is mounted with noexec and nosuid
  * `security_compute_user()` was deprecated
  * Refreshed python3.8-compat.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1615291200">- Update to version 3.2:
  * Use mmap()'ed kernel status page instead of netlink by default.
    See "KERNEL STATUS PAGE" section in avc_init(3) for more details.
  * New log callback levels for enforcing and policy load notices -
    SELINUX_POLICYLOAD, SELINUX_SETENFORCE
  * Changed userspace AVC setenforce and policy load messages to audit
    format.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Switch to pcre2:
  + Replace pcre-devel BuildRequires with pkgconfig(libpcre2-8)
  + Pass USE_PCRE2=y to make.</changelog>
  <changelog author="jsegitz@suse.com" date="1636632000">- Update to version 3.3:
  * Lots of smaller issues fixed found by fuzzing</changelog>
  <changelog author="jsegitz@suse.com" date="1652097600">- Update to version 3.4:
  * Use PCRE2 by default
  * Make selinux_log() and is_context_customizable() thread-safe
  * Prevent leakeing file descriptors
  * Correctly hash specfiles larger than 4G
- Refreshed skip_cycles.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1677240000">- Update to version 3.5:
  * check for truncations
  * avoid newline in avc message
  * bail out on path truncations
  * add getpidprevcon to gather the previous context before the last
    exec of a given process
  * Workaround for heap overhead of pcre
  * fix memory leaks on the audit2why module init
  * ignore invalid class name lookup
- Drop restorecon_pin_file.patch, is upstream
- Refreshed python3.8-compat.patch
- Added additional developer key (Jason Zaman)</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO as it works fine now.</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1683288000">- Add python-wheel build dependency to build correctly with latest
  python-pip version.</changelog>
  <changelog author="kastl@b1-systems.de" date="1685620800">- allow building this with different python versions, to make this
  usable for the new sle15 macro (using python3.11)</changelog>
  <changelog author="jsegitz@suse.com" date="1687262400">- Add explicit BuildRequires for python3-pip and python3-wheel on
  15.5, currently the macros don't do the right thing</changelog>
  <changelog author="mcepl@suse.com" date="1691150400">- (bsc#1212618) Divide libselinux and libselinux-bindings again.
  libselinux itself is in Ring0 so it has to have absolutely
  minimal dependencies, so it is better to separate
  libselinux-bindings into a separate pacakge.</changelog>
  <changelog author="cathy.hu@suse.com" date="1701345600">- Also build python3-selinux for toolchain compability on SLE</changelog>
  <changelog author="jsegitz@suse.com" date="1760616000">- Ship license file (bsc#1252160)</changelog>
</package>
<package pkgid="f2105e2bb960462883b0f70117e8da3dc2a7278f98431f4ad273d3259e9e3fb5" name="libselinux-devel" arch="x86_64">
  <version epoch="0" ver="3.5" rel="150600.3.3.1"/>
  <changelog author="jsegitz@suse.com" date="1619438400">- Remove Recommends for selinux-autorelabel. It's better to have this
  in the policy package itself (bsc#1181837)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626609600">- Add missing libselinux-utils Provides to selinux-tools so that
  %selinux_requires works</changelog>
  <changelog author="jsegitz@suse.com" date="1636632000">- Update to version 3.3:
  * Lots of smaller issues fixed found by fuzzing</changelog>
  <changelog author="jsegitz@suse.com" date="1644926400">- Add Requires for exact libselinux1 version for selinux-tools
- Simplyfied check for correct boot paramaters in selinux-ready
  (bsc#1195361)</changelog>
  <changelog author="jsegitz@suse.com" date="1652097600">- Update to version 3.4:
  * Use PCRE2 by default
  * Make selinux_log() and is_context_customizable() thread-safe
  * Prevent leakeing file descriptors
  * Correctly hash specfiles larger than 4G
- Refreshed skip_cycles.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1653998400">- Added restorecon_pin_file.patch. Fixes issus when running
  fixfiles/restorecon</changelog>
  <changelog author="jsegitz@suse.com" date="1657195200">- Fixed initrd check in selinux-ready (bnc#1186127)</changelog>
  <changelog author="jsegitz@suse.com" date="1677240000">- Update to version 3.5:
  * check for truncations
  * avoid newline in avc message
  * bail out on path truncations
  * add getpidprevcon to gather the previous context before the last
    exec of a given process
  * Workaround for heap overhead of pcre
  * fix memory leaks on the audit2why module init
  * ignore invalid class name lookup
- Drop restorecon_pin_file.patch, is upstream
- Refreshed python3.8-compat.patch
- Added additional developer key (Jason Zaman)</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO as it works fine now.</changelog>
  <changelog author="jsegitz@suse.com" date="1679659200">- Add -ffat-lto-objects to CFLAGS to prevent rpmlint errors because
  of LTO</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1683288000">- Add python-wheel build dependency to build correctly with latest
  python-pip version.</changelog>
  <changelog author="kastl@b1-systems.de" date="1685620800">- allow building this with different python versions, to make this
  usable for the new sle15 macro (using python3.11)</changelog>
  <changelog author="jsegitz@suse.com" date="1687262400">- Add explicit BuildRequires for python3-pip and python3-wheel on
  15.5, currently the macros don't do the right thing</changelog>
  <changelog author="mcepl@suse.com" date="1687521600">- Remove separate libselinux-bindings SPEC file (bsc#1212618).</changelog>
  <changelog author="jsegitz@suse.com" date="1688472000">- Fix python packaging by setting the name to a fixed value</changelog>
  <changelog author="mcepl@suse.com" date="1691150400">- (bsc#1212618) Divide libselinux and libselinux-bindings again.
  libselinux itself is in Ring0 so it has to have absolutely
  minimal dependencies, so it is better to separate
  libselinux-bindings into a separate pacakge.</changelog>
  <changelog author="dimstar@opensuse.org" date="1691496000">- Do not BuildRequire swig and ruby-devel in the main build phase:
  those are only needed for the bindings.</changelog>
  <changelog author="georg.pfuetzenreuter@suse.com" date="1696161600">- Repair initrd libselinux check in selinux-ready</changelog>
  <changelog author="jsegitz@suse.com" date="1760616000">- Ship license file (bsc#1252160)</changelog>
</package>
<package pkgid="c8f5a62ee9a7c815f3101503892f6a09a2d3a6e9bb326f4a1a80d470f16e674f" name="libselinux1" arch="x86_64">
  <version epoch="0" ver="3.5" rel="150600.3.3.1"/>
  <changelog author="jsegitz@suse.com" date="1619438400">- Remove Recommends for selinux-autorelabel. It's better to have this
  in the policy package itself (bsc#1181837)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626609600">- Add missing libselinux-utils Provides to selinux-tools so that
  %selinux_requires works</changelog>
  <changelog author="jsegitz@suse.com" date="1636632000">- Update to version 3.3:
  * Lots of smaller issues fixed found by fuzzing</changelog>
  <changelog author="jsegitz@suse.com" date="1644926400">- Add Requires for exact libselinux1 version for selinux-tools
- Simplyfied check for correct boot paramaters in selinux-ready
  (bsc#1195361)</changelog>
  <changelog author="jsegitz@suse.com" date="1652097600">- Update to version 3.4:
  * Use PCRE2 by default
  * Make selinux_log() and is_context_customizable() thread-safe
  * Prevent leakeing file descriptors
  * Correctly hash specfiles larger than 4G
- Refreshed skip_cycles.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1653998400">- Added restorecon_pin_file.patch. Fixes issus when running
  fixfiles/restorecon</changelog>
  <changelog author="jsegitz@suse.com" date="1657195200">- Fixed initrd check in selinux-ready (bnc#1186127)</changelog>
  <changelog author="jsegitz@suse.com" date="1677240000">- Update to version 3.5:
  * check for truncations
  * avoid newline in avc message
  * bail out on path truncations
  * add getpidprevcon to gather the previous context before the last
    exec of a given process
  * Workaround for heap overhead of pcre
  * fix memory leaks on the audit2why module init
  * ignore invalid class name lookup
- Drop restorecon_pin_file.patch, is upstream
- Refreshed python3.8-compat.patch
- Added additional developer key (Jason Zaman)</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO as it works fine now.</changelog>
  <changelog author="jsegitz@suse.com" date="1679659200">- Add -ffat-lto-objects to CFLAGS to prevent rpmlint errors because
  of LTO</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1683288000">- Add python-wheel build dependency to build correctly with latest
  python-pip version.</changelog>
  <changelog author="kastl@b1-systems.de" date="1685620800">- allow building this with different python versions, to make this
  usable for the new sle15 macro (using python3.11)</changelog>
  <changelog author="jsegitz@suse.com" date="1687262400">- Add explicit BuildRequires for python3-pip and python3-wheel on
  15.5, currently the macros don't do the right thing</changelog>
  <changelog author="mcepl@suse.com" date="1687521600">- Remove separate libselinux-bindings SPEC file (bsc#1212618).</changelog>
  <changelog author="jsegitz@suse.com" date="1688472000">- Fix python packaging by setting the name to a fixed value</changelog>
  <changelog author="mcepl@suse.com" date="1691150400">- (bsc#1212618) Divide libselinux and libselinux-bindings again.
  libselinux itself is in Ring0 so it has to have absolutely
  minimal dependencies, so it is better to separate
  libselinux-bindings into a separate pacakge.</changelog>
  <changelog author="dimstar@opensuse.org" date="1691496000">- Do not BuildRequire swig and ruby-devel in the main build phase:
  those are only needed for the bindings.</changelog>
  <changelog author="georg.pfuetzenreuter@suse.com" date="1696161600">- Repair initrd libselinux check in selinux-ready</changelog>
  <changelog author="jsegitz@suse.com" date="1760616000">- Ship license file (bsc#1252160)</changelog>
</package>
<package pkgid="7a0c5877280059c75a67bfc7b7f37e77ddfa834207ba521f08928bef5723ec30" name="libselinux1-32bit" arch="x86_64">
  <version epoch="0" ver="3.5" rel="150600.3.3.1"/>
  <changelog author="jsegitz@suse.com" date="1619438400">- Remove Recommends for selinux-autorelabel. It's better to have this
  in the policy package itself (bsc#1181837)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626609600">- Add missing libselinux-utils Provides to selinux-tools so that
  %selinux_requires works</changelog>
  <changelog author="jsegitz@suse.com" date="1636632000">- Update to version 3.3:
  * Lots of smaller issues fixed found by fuzzing</changelog>
  <changelog author="jsegitz@suse.com" date="1644926400">- Add Requires for exact libselinux1 version for selinux-tools
- Simplyfied check for correct boot paramaters in selinux-ready
  (bsc#1195361)</changelog>
  <changelog author="jsegitz@suse.com" date="1652097600">- Update to version 3.4:
  * Use PCRE2 by default
  * Make selinux_log() and is_context_customizable() thread-safe
  * Prevent leakeing file descriptors
  * Correctly hash specfiles larger than 4G
- Refreshed skip_cycles.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1653998400">- Added restorecon_pin_file.patch. Fixes issus when running
  fixfiles/restorecon</changelog>
  <changelog author="jsegitz@suse.com" date="1657195200">- Fixed initrd check in selinux-ready (bnc#1186127)</changelog>
  <changelog author="jsegitz@suse.com" date="1677240000">- Update to version 3.5:
  * check for truncations
  * avoid newline in avc message
  * bail out on path truncations
  * add getpidprevcon to gather the previous context before the last
    exec of a given process
  * Workaround for heap overhead of pcre
  * fix memory leaks on the audit2why module init
  * ignore invalid class name lookup
- Drop restorecon_pin_file.patch, is upstream
- Refreshed python3.8-compat.patch
- Added additional developer key (Jason Zaman)</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO as it works fine now.</changelog>
  <changelog author="jsegitz@suse.com" date="1679659200">- Add -ffat-lto-objects to CFLAGS to prevent rpmlint errors because
  of LTO</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1683288000">- Add python-wheel build dependency to build correctly with latest
  python-pip version.</changelog>
  <changelog author="kastl@b1-systems.de" date="1685620800">- allow building this with different python versions, to make this
  usable for the new sle15 macro (using python3.11)</changelog>
  <changelog author="jsegitz@suse.com" date="1687262400">- Add explicit BuildRequires for python3-pip and python3-wheel on
  15.5, currently the macros don't do the right thing</changelog>
  <changelog author="mcepl@suse.com" date="1687521600">- Remove separate libselinux-bindings SPEC file (bsc#1212618).</changelog>
  <changelog author="jsegitz@suse.com" date="1688472000">- Fix python packaging by setting the name to a fixed value</changelog>
  <changelog author="mcepl@suse.com" date="1691150400">- (bsc#1212618) Divide libselinux and libselinux-bindings again.
  libselinux itself is in Ring0 so it has to have absolutely
  minimal dependencies, so it is better to separate
  libselinux-bindings into a separate pacakge.</changelog>
  <changelog author="dimstar@opensuse.org" date="1691496000">- Do not BuildRequire swig and ruby-devel in the main build phase:
  those are only needed for the bindings.</changelog>
  <changelog author="georg.pfuetzenreuter@suse.com" date="1696161600">- Repair initrd libselinux check in selinux-ready</changelog>
  <changelog author="jsegitz@suse.com" date="1760616000">- Ship license file (bsc#1252160)</changelog>
</package>
<package pkgid="cfe4a0d849f6fd13bef2d71006ad80d58a83576f7304dcc83a2a06e46ae67e3a" name="libsmartcols-devel" arch="x86_64">
  <version epoch="0" ver="2.40.4" rel="150700.4.10.1"/>
  <changelog author="sbrabec@suse.com" date="1706011200">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1717934400">- Fix hang of lscpu -e (bsc#1225598,
  util-linux-libsmartcols-fix-reduction-stages-use.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1725364800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1733054400">- Update to version 2.40.2 (jsc#PED-9751):
  * Add lastlog2 (disabled for this build, SLE15/Leap15
    infrastructure is not ready for it)
  * agetty: Load autologin user from agetty.autologin credential
  * agetty: use get_terminal_default_type()
  * agetty: use sd_get_sessions() for number of users (#2088)
  * agetty: don't overwrite TERM passed by the user
  * blockdev: add support for BLKGETZONESZ
  * cfdisk: ask y/n before wipe
  * cfdisk: properly handle out-of-order partitions during resize
  * cfdisk: fix possible integer overflow
  * chcpu: document limitations of -g (bsc#1218609)
  * chsh: use libeconf to read /etc/shells
  * column: fix -l
  * column: fix memory leak
  * dmesg: fix FD leak
  * dmesg: fix delta calculation
  * dmesg: fix wrong size calculation
  * dmesg: support reading kmsg format from file
  * enosys: a new small command to make syscalls fail with ENOSYS
  * exch: new command to atomically exchanges paths between two files
  * fdisk: add support for partition resizing
  * fdisk: remove usage of VLA
  * fincore: add --output-all
  * findmnt: add --list-columns
  * findmnt: add -I, --dfi options for imitating the output of df -i
  * findmnt: add inode-related columns for implementing "df -i" like output
  * fsck.minix: fix possible overrun
  * hexdump: add '--one-byte-hex' format option
  * hwclock: add support for RTC_VL_READ/RTC_VL_CLR ioctls
  * libblkid: fix segfault when blkid.conf doesn't exist
  * libfdisk: add initializer to geometry
  * libmount: improving robustness in reading kernel messages,
    add pidfs to pseudo fs list
  * libmount: fix access check for utab in context
  * libmount: fix umount --read-only
  * login: initialize noauth from login.noauth credential
  * lsblk: add --filter
  * lsblk: add --highlight
  * lsblk: add --list-columns
  * lsclocks: new command to show clocks
  * lscpu: even more Arm part numbers (bsc#1223605)
  * lscpu: New Arm Cortex part numbers
    fix hang of lscpu -e (bsc#1225598)
  * lsfd: Refactor the pidfd logic, support pidfs
  * lsns: fix netns use
  * mkfs.minix: handle 64bit time on 32bit system
  * mkswap: implement --file
  * mkswap: implement --offset
  * mkswap.8.adoc: update note regarding swapfile creation
  * more: clean processes not cleaned up after failed SSH session
    using up 100% CPU (bsc#1220117)
  * mount: add --map-users and --map-groups convenience options
  * nsenter: add option `-c` to join the cgroup of target process
  * setarch: add riscv64/riscv32 support
  * setpgid: new command to run a program in a new process group
  * setpgid: make -f work
  * uuidd: add cont_clock persistence
  * uuidgen: add option --count
  * wall: query logind for list of users with tty (#2088)
    properly neutralize escape sequences (bsc#1221831,
    CVE-2024-28085)
  * write: query logind for list of users with tty (#2088)
  * libuuid: improved support for 64-bit time
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.2-ReleaseNotes
- Drop upstreamed patches:
    Revert-libblkid-try-LUKS2-first-when-probing.patch,
    util-linux-libsmartcols-fix-reduction-stages-use.patch,
    util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch,
    util-linux-chcpu-document-zVM-limitations.patch,
    util-linux-lscpu-add-ARM-cores-neoverse3.patch,
    util-linux-chcpu-document-zVM-limitations-generated.patch and
    util-linux-wall-CVE-2024-28085.patch.
- Add file conflict of util-linux-tty-tools and busybox-util-linux.
- Update util-linux-bash-completion-su-chsh-l.patch,
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch and
  make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.
- Move autoreconf back to %build.
- Add devel dependencies.
- Remove util-linux-rpmlintrc. It is no more needed with multibuild.
- uncomment "autoreconf --install" to use the new version of automake
- disable libmagic in more(1) for binary detection (bsc#1225197)
- Skip tests marked as ts_skip_qemu_user when running under qemu
- Mark racy lslocks test as known fail
- Re-enable lsfd tests using mkfds, as it is fixed now.</changelog>
  <changelog author="sbrabec@suse.com" date="1736856000">- Update to version 2.40.4 (jsc#PED-9751):
  * agetty: Prevent cursor escape (bsc#1194818, drop
    util-linux-agetty-prevent-cursor-escape.patch)
    add "systemd" to --version output\
  * chcpu(8): Document CPU deconfiguring behavior
  * fdisk: SGI fixes
  * hardlink: fix memory corruption
  * hardlink.1 directory|file is mandatory
  * lib/env: fix env_list_setenv() for strings without '='
  * libblkid:
    (exfat) validate fields used by prober
    (gpt) use blkid_probe_verify_csum() for partition array
    checksum
    add FSLASTBLOCK for swaparea
    bitlocker fix version on big-endian systems
  * libfdisk: make sure libblkid uses the same sector size
  * libmount:
    extract common error handling function
    propagate first error of multiple filesystem types
  * logger: correctly format tv_usec
  * lscpu: Skip aarch64 decode path for rest of the architectures
    (bsc#1229476, drop util-linux-lscpu-skip-aarch64-decode.patch)
  * lsns: ignore ESRCH errors reported when accessing files under
    /proc
  * mkswap: set selinux label also when creating file
  * more: make sure we have data on stderr
  * nsenter: support empty environ
  * umount, losetup: Document loop destroy behavior
    (bsc#1159034, drop
    util-linux-umount-losetup-lazy-destruction.patch,
    util-linux-umount-losetup-lazy-destruction-generated.patch).
  * uuidd: fix /var/lib/libuuid mode uuidd-tmpfiles.conf
    fix /var/lib/libuuid mode uuidd-tmpfiles.conf
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.3-ReleaseNotes
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.4-ReleaseNotes
  - Refresh util-linux.keyring. Key validity was extended.</changelog>
  <changelog author="sbrabec@suse.com" date="1743595200">- Use utmp as fallback for wall (bsc#1239671,
  util-linux-wall-use-utmp-fallback.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1774267200">- fdisk: Fix possible partition overlay and data corruption if EBR
  gap is missing (boo#1222465,
  util-linux-libfdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-2.patch,
  util-linux-libfdisk-ebr-missing-gap-2.patch,
  util-linux-tests-fdisk-ebr-missing-gap-3.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1774267201">- Recognize fuse "portal" as a virtual file system (boo#1234736,
  util-linux-libmount-fuse-portal.patch).</changelog>
</package>
<package pkgid="2325a3675e70bc14d456a8c133f8e090350ed4abb79ef071d669270f3d542adc" name="libsmartcols-devel" arch="x86_64">
  <version epoch="0" ver="2.40.4" rel="150700.4.3.1"/>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1717934400">- Fix hang of lscpu -e (bsc#1225598,
  util-linux-libsmartcols-fix-reduction-stages-use.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1725364800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1733054400">- Update to version 2.40.2 (jsc#PED-9751):
  * Add lastlog2 (disabled for this build, SLE15/Leap15
    infrastructure is not ready for it)
  * agetty: Load autologin user from agetty.autologin credential
  * agetty: use get_terminal_default_type()
  * agetty: use sd_get_sessions() for number of users (#2088)
  * agetty: don't overwrite TERM passed by the user
  * blockdev: add support for BLKGETZONESZ
  * cfdisk: ask y/n before wipe
  * cfdisk: properly handle out-of-order partitions during resize
  * cfdisk: fix possible integer overflow
  * chcpu: document limitations of -g (bsc#1218609)
  * chsh: use libeconf to read /etc/shells
  * column: fix -l
  * column: fix memory leak
  * dmesg: fix FD leak
  * dmesg: fix delta calculation
  * dmesg: fix wrong size calculation
  * dmesg: support reading kmsg format from file
  * enosys: a new small command to make syscalls fail with ENOSYS
  * exch: new command to atomically exchanges paths between two files
  * fdisk: add support for partition resizing
  * fdisk: remove usage of VLA
  * fincore: add --output-all
  * findmnt: add --list-columns
  * findmnt: add -I, --dfi options for imitating the output of df -i
  * findmnt: add inode-related columns for implementing "df -i" like output
  * fsck.minix: fix possible overrun
  * hexdump: add '--one-byte-hex' format option
  * hwclock: add support for RTC_VL_READ/RTC_VL_CLR ioctls
  * libblkid: fix segfault when blkid.conf doesn't exist
  * libfdisk: add initializer to geometry
  * libmount: improving robustness in reading kernel messages,
    add pidfs to pseudo fs list
  * libmount: fix access check for utab in context
  * libmount: fix umount --read-only
  * login: initialize noauth from login.noauth credential
  * lsblk: add --filter
  * lsblk: add --highlight
  * lsblk: add --list-columns
  * lsclocks: new command to show clocks
  * lscpu: even more Arm part numbers (bsc#1223605)
  * lscpu: New Arm Cortex part numbers
    fix hang of lscpu -e (bsc#1225598)
  * lsfd: Refactor the pidfd logic, support pidfs
  * lsns: fix netns use
  * mkfs.minix: handle 64bit time on 32bit system
  * mkswap: implement --file
  * mkswap: implement --offset
  * mkswap.8.adoc: update note regarding swapfile creation
  * more: clean processes not cleaned up after failed SSH session
    using up 100% CPU (bsc#1220117)
  * mount: add --map-users and --map-groups convenience options
  * nsenter: add option `-c` to join the cgroup of target process
  * setarch: add riscv64/riscv32 support
  * setpgid: new command to run a program in a new process group
  * setpgid: make -f work
  * uuidd: add cont_clock persistence
  * uuidgen: add option --count
  * wall: query logind for list of users with tty (#2088)
    properly neutralize escape sequences (bsc#1221831,
    CVE-2024-28085)
  * write: query logind for list of users with tty (#2088)
  * libuuid: improved support for 64-bit time
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.2-ReleaseNotes
- Drop upstreamed patches:
    Revert-libblkid-try-LUKS2-first-when-probing.patch,
    util-linux-libsmartcols-fix-reduction-stages-use.patch,
    util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch,
    util-linux-chcpu-document-zVM-limitations.patch,
    util-linux-lscpu-add-ARM-cores-neoverse3.patch,
    util-linux-chcpu-document-zVM-limitations-generated.patch and
    util-linux-wall-CVE-2024-28085.patch.
- Add file conflict of util-linux-tty-tools and busybox-util-linux.
- Update util-linux-bash-completion-su-chsh-l.patch,
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch and
  make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.
- Move autoreconf back to %build.
- Add devel dependencies.
- Remove util-linux-rpmlintrc. It is no more needed with multibuild.
- uncomment "autoreconf --install" to use the new version of automake
- disable libmagic in more(1) for binary detection (bsc#1225197)
- Skip tests marked as ts_skip_qemu_user when running under qemu
- Mark racy lslocks test as known fail
- Re-enable lsfd tests using mkfds, as it is fixed now.</changelog>
  <changelog author="sbrabec@suse.com" date="1736856000">- Update to version 2.40.4 (jsc#PED-9751):
  * agetty: Prevent cursor escape (bsc#1194818, drop
    util-linux-agetty-prevent-cursor-escape.patch)
    add "systemd" to --version output\
  * chcpu(8): Document CPU deconfiguring behavior
  * fdisk: SGI fixes
  * hardlink: fix memory corruption
  * hardlink.1 directory|file is mandatory
  * lib/env: fix env_list_setenv() for strings without '='
  * libblkid:
    (exfat) validate fields used by prober
    (gpt) use blkid_probe_verify_csum() for partition array
    checksum
    add FSLASTBLOCK for swaparea
    bitlocker fix version on big-endian systems
  * libfdisk: make sure libblkid uses the same sector size
  * libmount:
    extract common error handling function
    propagate first error of multiple filesystem types
  * logger: correctly format tv_usec
  * lscpu: Skip aarch64 decode path for rest of the architectures
    (bsc#1229476, drop util-linux-lscpu-skip-aarch64-decode.patch)
  * lsns: ignore ESRCH errors reported when accessing files under
    /proc
  * mkswap: set selinux label also when creating file
  * more: make sure we have data on stderr
  * nsenter: support empty environ
  * umount, losetup: Document loop destroy behavior
    (bsc#1159034, drop
    util-linux-umount-losetup-lazy-destruction.patch,
    util-linux-umount-losetup-lazy-destruction-generated.patch).
  * uuidd: fix /var/lib/libuuid mode uuidd-tmpfiles.conf
    fix /var/lib/libuuid mode uuidd-tmpfiles.conf
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.3-ReleaseNotes
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.4-ReleaseNotes
  - Refresh util-linux.keyring. Key validity was extended.</changelog>
  <changelog author="sbrabec@suse.com" date="1743595200">- Use utmp as fallback for wall (bsc#1239671,
  util-linux-wall-use-utmp-fallback.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
</package>
<package pkgid="b16d69c95488e27909d7b50fa1d0272deb956b4ae2f0b402f5a857c5870efe15" name="libsmartcols1" arch="x86_64">
  <version epoch="0" ver="2.40.4" rel="150700.4.10.1"/>
  <changelog author="sbrabec@suse.com" date="1706011200">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1717934400">- Fix hang of lscpu -e (bsc#1225598,
  util-linux-libsmartcols-fix-reduction-stages-use.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1725364800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1733054400">- Update to version 2.40.2 (jsc#PED-9751):
  * Add lastlog2 (disabled for this build, SLE15/Leap15
    infrastructure is not ready for it)
  * agetty: Load autologin user from agetty.autologin credential
  * agetty: use get_terminal_default_type()
  * agetty: use sd_get_sessions() for number of users (#2088)
  * agetty: don't overwrite TERM passed by the user
  * blockdev: add support for BLKGETZONESZ
  * cfdisk: ask y/n before wipe
  * cfdisk: properly handle out-of-order partitions during resize
  * cfdisk: fix possible integer overflow
  * chcpu: document limitations of -g (bsc#1218609)
  * chsh: use libeconf to read /etc/shells
  * column: fix -l
  * column: fix memory leak
  * dmesg: fix FD leak
  * dmesg: fix delta calculation
  * dmesg: fix wrong size calculation
  * dmesg: support reading kmsg format from file
  * enosys: a new small command to make syscalls fail with ENOSYS
  * exch: new command to atomically exchanges paths between two files
  * fdisk: add support for partition resizing
  * fdisk: remove usage of VLA
  * fincore: add --output-all
  * findmnt: add --list-columns
  * findmnt: add -I, --dfi options for imitating the output of df -i
  * findmnt: add inode-related columns for implementing "df -i" like output
  * fsck.minix: fix possible overrun
  * hexdump: add '--one-byte-hex' format option
  * hwclock: add support for RTC_VL_READ/RTC_VL_CLR ioctls
  * libblkid: fix segfault when blkid.conf doesn't exist
  * libfdisk: add initializer to geometry
  * libmount: improving robustness in reading kernel messages,
    add pidfs to pseudo fs list
  * libmount: fix access check for utab in context
  * libmount: fix umount --read-only
  * login: initialize noauth from login.noauth credential
  * lsblk: add --filter
  * lsblk: add --highlight
  * lsblk: add --list-columns
  * lsclocks: new command to show clocks
  * lscpu: even more Arm part numbers (bsc#1223605)
  * lscpu: New Arm Cortex part numbers
    fix hang of lscpu -e (bsc#1225598)
  * lsfd: Refactor the pidfd logic, support pidfs
  * lsns: fix netns use
  * mkfs.minix: handle 64bit time on 32bit system
  * mkswap: implement --file
  * mkswap: implement --offset
  * mkswap.8.adoc: update note regarding swapfile creation
  * more: clean processes not cleaned up after failed SSH session
    using up 100% CPU (bsc#1220117)
  * mount: add --map-users and --map-groups convenience options
  * nsenter: add option `-c` to join the cgroup of target process
  * setarch: add riscv64/riscv32 support
  * setpgid: new command to run a program in a new process group
  * setpgid: make -f work
  * uuidd: add cont_clock persistence
  * uuidgen: add option --count
  * wall: query logind for list of users with tty (#2088)
    properly neutralize escape sequences (bsc#1221831,
    CVE-2024-28085)
  * write: query logind for list of users with tty (#2088)
  * libuuid: improved support for 64-bit time
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.2-ReleaseNotes
- Drop upstreamed patches:
    Revert-libblkid-try-LUKS2-first-when-probing.patch,
    util-linux-libsmartcols-fix-reduction-stages-use.patch,
    util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch,
    util-linux-chcpu-document-zVM-limitations.patch,
    util-linux-lscpu-add-ARM-cores-neoverse3.patch,
    util-linux-chcpu-document-zVM-limitations-generated.patch and
    util-linux-wall-CVE-2024-28085.patch.
- Add file conflict of util-linux-tty-tools and busybox-util-linux.
- Update util-linux-bash-completion-su-chsh-l.patch,
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch and
  make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.
- Move autoreconf back to %build.
- Add devel dependencies.
- Remove util-linux-rpmlintrc. It is no more needed with multibuild.
- uncomment "autoreconf --install" to use the new version of automake
- disable libmagic in more(1) for binary detection (bsc#1225197)
- Skip tests marked as ts_skip_qemu_user when running under qemu
- Mark racy lslocks test as known fail
- Re-enable lsfd tests using mkfds, as it is fixed now.</changelog>
  <changelog author="sbrabec@suse.com" date="1736856000">- Update to version 2.40.4 (jsc#PED-9751):
  * agetty: Prevent cursor escape (bsc#1194818, drop
    util-linux-agetty-prevent-cursor-escape.patch)
    add "systemd" to --version output\
  * chcpu(8): Document CPU deconfiguring behavior
  * fdisk: SGI fixes
  * hardlink: fix memory corruption
  * hardlink.1 directory|file is mandatory
  * lib/env: fix env_list_setenv() for strings without '='
  * libblkid:
    (exfat) validate fields used by prober
    (gpt) use blkid_probe_verify_csum() for partition array
    checksum
    add FSLASTBLOCK for swaparea
    bitlocker fix version on big-endian systems
  * libfdisk: make sure libblkid uses the same sector size
  * libmount:
    extract common error handling function
    propagate first error of multiple filesystem types
  * logger: correctly format tv_usec
  * lscpu: Skip aarch64 decode path for rest of the architectures
    (bsc#1229476, drop util-linux-lscpu-skip-aarch64-decode.patch)
  * lsns: ignore ESRCH errors reported when accessing files under
    /proc
  * mkswap: set selinux label also when creating file
  * more: make sure we have data on stderr
  * nsenter: support empty environ
  * umount, losetup: Document loop destroy behavior
    (bsc#1159034, drop
    util-linux-umount-losetup-lazy-destruction.patch,
    util-linux-umount-losetup-lazy-destruction-generated.patch).
  * uuidd: fix /var/lib/libuuid mode uuidd-tmpfiles.conf
    fix /var/lib/libuuid mode uuidd-tmpfiles.conf
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.3-ReleaseNotes
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.4-ReleaseNotes
  - Refresh util-linux.keyring. Key validity was extended.</changelog>
  <changelog author="sbrabec@suse.com" date="1743595200">- Use utmp as fallback for wall (bsc#1239671,
  util-linux-wall-use-utmp-fallback.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1774267200">- fdisk: Fix possible partition overlay and data corruption if EBR
  gap is missing (boo#1222465,
  util-linux-libfdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-2.patch,
  util-linux-libfdisk-ebr-missing-gap-2.patch,
  util-linux-tests-fdisk-ebr-missing-gap-3.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1774267201">- Recognize fuse "portal" as a virtual file system (boo#1234736,
  util-linux-libmount-fuse-portal.patch).</changelog>
</package>
<package pkgid="daa13210ea25bd6e1f34fbfaae7ec5244ecd90d10d559ab35ffc9f971939dab3" name="libsmartcols1" arch="x86_64">
  <version epoch="0" ver="2.40.4" rel="150700.4.3.1"/>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1717934400">- Fix hang of lscpu -e (bsc#1225598,
  util-linux-libsmartcols-fix-reduction-stages-use.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1725364800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1733054400">- Update to version 2.40.2 (jsc#PED-9751):
  * Add lastlog2 (disabled for this build, SLE15/Leap15
    infrastructure is not ready for it)
  * agetty: Load autologin user from agetty.autologin credential
  * agetty: use get_terminal_default_type()
  * agetty: use sd_get_sessions() for number of users (#2088)
  * agetty: don't overwrite TERM passed by the user
  * blockdev: add support for BLKGETZONESZ
  * cfdisk: ask y/n before wipe
  * cfdisk: properly handle out-of-order partitions during resize
  * cfdisk: fix possible integer overflow
  * chcpu: document limitations of -g (bsc#1218609)
  * chsh: use libeconf to read /etc/shells
  * column: fix -l
  * column: fix memory leak
  * dmesg: fix FD leak
  * dmesg: fix delta calculation
  * dmesg: fix wrong size calculation
  * dmesg: support reading kmsg format from file
  * enosys: a new small command to make syscalls fail with ENOSYS
  * exch: new command to atomically exchanges paths between two files
  * fdisk: add support for partition resizing
  * fdisk: remove usage of VLA
  * fincore: add --output-all
  * findmnt: add --list-columns
  * findmnt: add -I, --dfi options for imitating the output of df -i
  * findmnt: add inode-related columns for implementing "df -i" like output
  * fsck.minix: fix possible overrun
  * hexdump: add '--one-byte-hex' format option
  * hwclock: add support for RTC_VL_READ/RTC_VL_CLR ioctls
  * libblkid: fix segfault when blkid.conf doesn't exist
  * libfdisk: add initializer to geometry
  * libmount: improving robustness in reading kernel messages,
    add pidfs to pseudo fs list
  * libmount: fix access check for utab in context
  * libmount: fix umount --read-only
  * login: initialize noauth from login.noauth credential
  * lsblk: add --filter
  * lsblk: add --highlight
  * lsblk: add --list-columns
  * lsclocks: new command to show clocks
  * lscpu: even more Arm part numbers (bsc#1223605)
  * lscpu: New Arm Cortex part numbers
    fix hang of lscpu -e (bsc#1225598)
  * lsfd: Refactor the pidfd logic, support pidfs
  * lsns: fix netns use
  * mkfs.minix: handle 64bit time on 32bit system
  * mkswap: implement --file
  * mkswap: implement --offset
  * mkswap.8.adoc: update note regarding swapfile creation
  * more: clean processes not cleaned up after failed SSH session
    using up 100% CPU (bsc#1220117)
  * mount: add --map-users and --map-groups convenience options
  * nsenter: add option `-c` to join the cgroup of target process
  * setarch: add riscv64/riscv32 support
  * setpgid: new command to run a program in a new process group
  * setpgid: make -f work
  * uuidd: add cont_clock persistence
  * uuidgen: add option --count
  * wall: query logind for list of users with tty (#2088)
    properly neutralize escape sequences (bsc#1221831,
    CVE-2024-28085)
  * write: query logind for list of users with tty (#2088)
  * libuuid: improved support for 64-bit time
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.2-ReleaseNotes
- Drop upstreamed patches:
    Revert-libblkid-try-LUKS2-first-when-probing.patch,
    util-linux-libsmartcols-fix-reduction-stages-use.patch,
    util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch,
    util-linux-chcpu-document-zVM-limitations.patch,
    util-linux-lscpu-add-ARM-cores-neoverse3.patch,
    util-linux-chcpu-document-zVM-limitations-generated.patch and
    util-linux-wall-CVE-2024-28085.patch.
- Add file conflict of util-linux-tty-tools and busybox-util-linux.
- Update util-linux-bash-completion-su-chsh-l.patch,
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch and
  make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.
- Move autoreconf back to %build.
- Add devel dependencies.
- Remove util-linux-rpmlintrc. It is no more needed with multibuild.
- uncomment "autoreconf --install" to use the new version of automake
- disable libmagic in more(1) for binary detection (bsc#1225197)
- Skip tests marked as ts_skip_qemu_user when running under qemu
- Mark racy lslocks test as known fail
- Re-enable lsfd tests using mkfds, as it is fixed now.</changelog>
  <changelog author="sbrabec@suse.com" date="1736856000">- Update to version 2.40.4 (jsc#PED-9751):
  * agetty: Prevent cursor escape (bsc#1194818, drop
    util-linux-agetty-prevent-cursor-escape.patch)
    add "systemd" to --version output\
  * chcpu(8): Document CPU deconfiguring behavior
  * fdisk: SGI fixes
  * hardlink: fix memory corruption
  * hardlink.1 directory|file is mandatory
  * lib/env: fix env_list_setenv() for strings without '='
  * libblkid:
    (exfat) validate fields used by prober
    (gpt) use blkid_probe_verify_csum() for partition array
    checksum
    add FSLASTBLOCK for swaparea
    bitlocker fix version on big-endian systems
  * libfdisk: make sure libblkid uses the same sector size
  * libmount:
    extract common error handling function
    propagate first error of multiple filesystem types
  * logger: correctly format tv_usec
  * lscpu: Skip aarch64 decode path for rest of the architectures
    (bsc#1229476, drop util-linux-lscpu-skip-aarch64-decode.patch)
  * lsns: ignore ESRCH errors reported when accessing files under
    /proc
  * mkswap: set selinux label also when creating file
  * more: make sure we have data on stderr
  * nsenter: support empty environ
  * umount, losetup: Document loop destroy behavior
    (bsc#1159034, drop
    util-linux-umount-losetup-lazy-destruction.patch,
    util-linux-umount-losetup-lazy-destruction-generated.patch).
  * uuidd: fix /var/lib/libuuid mode uuidd-tmpfiles.conf
    fix /var/lib/libuuid mode uuidd-tmpfiles.conf
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.3-ReleaseNotes
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.4-ReleaseNotes
  - Refresh util-linux.keyring. Key validity was extended.</changelog>
  <changelog author="sbrabec@suse.com" date="1743595200">- Use utmp as fallback for wall (bsc#1239671,
  util-linux-wall-use-utmp-fallback.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
</package>
<package pkgid="0c3a1f4a4785686eaaef3089e4a6abf8b1302f169920ffa6163e68691ce7dccf" name="libsndfile" arch="src">
  <version epoch="0" ver="1.0.28" rel="150000.5.23.1"/>
  <changelog author="tiwai@suse.de" date="1420632000">- VUL-0: two buffer read overflows in sd2_parse_rsrc_fork()
  (CVE-2014-9496, bnc#911796): backported upstream fix patches
  sndfile-src-sd2.c-Fix-segfault-in-SD2-RSRC-parser.patch
  sndfile-src-sd2.c-Fix-two-potential-buffer-read-overflows.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1426939200">- Cleanup spec file with spec-cleaner
- Add gpg signature
- Remove old ppc provides/obsoletes</changelog>
  <changelog author="tiwai@suse.de" date="1446638400">- VUL-1: libsndfile DoS/divide-by-zero (CVE-2014-9756, bsc#953521):
  libsndfile-src-file_io.c-Prevent-potential-divide-by-zero.patch</changelog>
  <changelog author="tiwai@suse.de" date="1446638401">- VUL-0: libsndfile 1.0.25 heap overflow (CVE-2015-7805, bsc#953516)
  libsndfile-src-common.c-Fix-a-header-parsing-bug.patch
  libsndfile-fix-header-read-CVE-2015-7805.patch
- VUL-0: libsndfile 1.0.25 heap overflow (CVE-2015-8075, bsc#953519)
  libsndfile-psf_strlcpy_crlf-fix-CVE-2015-8075.patch
- Fix the build with SLE11-SP3 due to AM_SILENT_RULE macro</changelog>
  <changelog author="tiwai@suse.de" date="1448280000">- Update to version 1.0.26:
  * Fix for CVE-2014-9496, CVE-2014-9756 and CVE-2015-7805.
  * Add ALAC/CAF support. Minor bug fixes and improvements.
- Refreshed patches:
  sndfile-ocloexec.patch
  libsndfile-psf_strlcpy_crlf-fix-CVE-2015-8075.patch
- Removed obsoleted patches:
  libsndfile-example-fix.diff
  libsndfile-fix-header-read-CVE-2015-7805.patch
  libsndfile-paf-zero-division-fix.diff
  libsndfile-src-common.c-Fix-a-header-parsing-bug.patch
  libsndfile-src-file_io.c-Prevent-potential-divide-by-zero.patch
  sndfile-src-sd2.c-Fix-segfault-in-SD2-RSRC-parser.patch
  sndfile-src-sd2.c-Fix-two-potential-buffer-read-overflows.patch</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1462881600">- Fix spec file to enable builds on non opensuse OS</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Update to version 1.0.27:
  * Fix a seek regression in 1.0.26
  * Add metadata read/write for CAF and RF64
  * FIx PAF endian-ness issue
- Update to version 1.0.28
  * Fix buffer overruns in FLAC and ID3 handling code
  (CVE-2017-7585, CVE-2017-7586, bsc#1033054, bsc#1033053)
  * Reduce default header memory requirements
  * Fix detection of Large File Support for 32 bit systems.
- Obsoleted patch:
  libsndfile-psf_strlcpy_crlf-fix-CVE-2015-8075.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493726400">- Fix FLAC buffer overflows (CVE-2017-8361 CVE-2017-8363
  CVE-2017-8365 CVE-2017-8362 bsc#1036944 bsc#1036945 bsc#1036946
  bsc#1036943):
  0001-FLAC-Fix-a-buffer-read-overrun.patch
  0002-src-flac.c-Fix-a-buffer-read-overflow.patch</changelog>
  <changelog author="tiwai@suse.de" date="1497355200">- Fix out-of-bounds read memory access in the aiff_read_chanmap()
  (CVE-2017-6892, bsc#1043978):
  0010-src-aiff.c-Fix-a-buffer-read-overflow.patch</changelog>
  <changelog author="tiwai@suse.de" date="1502193600">- Fix Heap-based Buffer Overflow in the psf_binheader_writef
  (CVE-2017-12562, bsc#1052476):
  0020-src-common.c-Fix-heap-buffer-overflows-when-writing-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Fix VUL-0: divide-by-zero error exists in the function
  double64_init() in double64.c (CVE-2017-14634, bsc#1059911):
  0030-double64_init-Check-psf-sf.channels-against-upper-bo.patch
- Tentative fix for VUL-0: out of bounds read in the function
  d2alaw_array() in alaw.c (CVE-2017-14245, bsc#1059912) and
  VUL-0: out of bounds read in the function d2ulaw_array() in
  ulaw.c (CVE-2017-14246, bsc#1059913):
  0031-sfe_copy_data_fp-check-value-of-max-variable.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix potential overflow in d2alaw_array() (CVE-2017-17456,
  bsc#1071777):
  libsndfile-CVE-2017-17456-alaw-range-check.patch
- Fix potential overflow in d2ulaw_array() (CVE-2017-17457,
  bsc#1071767):
  libsndfile-CVE-2017-17457-ulaw-range-check.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459201">- Use license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1530878400">- Fix buffer overflow in sndfile-deinterleave, which isn't really a
  security issue (bsc#1100167, CVE-2018-13139, bsc#1116993,
  CVE-2018-19432):
  sndfile-deinterlace-channels-check.patch</changelog>
  <changelog author="tiwai@suse.de" date="1543924800">- Fix segfault in wav conversion due to the invalid loop count
  (CVE-2018-19758, bsc#1117954):
  libsndfile-wav-loop-count-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1627041600">- Fix heap buffer overflow vulnerability in msadpcm_decode_block
  (CVE-2021-3246, bsc#1188540):
  ms_adpcm-Fix-and-extend-size-checks.patch</changelog>
  <changelog author="tiwai@suse.de" date="1641211200">- Fix heap buffer overflow in flac_buffer_copy (CVE-2021-4156,
  bsc#1194006):
  libsndfile-CVE-2021-4156.patch</changelog>
  <changelog author="tiwai@suse.com" date="1697803200">- Fix signed integers overflows in au_read_header()
  (bsc#1213451, CVE-2022-33065):
  libsndfile-CVE-2022-33065.patch</changelog>
  <changelog author="tiwai@suse.com" date="1778155200">- Fix buffer overflow in the ircam_read_header function (bsc#1248458,
  CVE-2025-52194):
  libsndfile-CVE-2025-52194.patch</changelog>
  <changelog author="tiwai@suse.com" date="1778155201">- Fix IMA-ADPCM integer overflow (bsc#1263695, CVE-2026-37555):
  libsndfile-CVE-2026-37555.patch</changelog>
</package>
<package pkgid="a298661d9bd9c00b75ba7cf78a83c3ae5f371f62bb121c96143e51aaf559e957" name="libsndfile-devel" arch="x86_64">
  <version epoch="0" ver="1.0.28" rel="150000.5.23.1"/>
  <changelog author="tiwai@suse.de" date="1420632000">- VUL-0: two buffer read overflows in sd2_parse_rsrc_fork()
  (CVE-2014-9496, bnc#911796): backported upstream fix patches
  sndfile-src-sd2.c-Fix-segfault-in-SD2-RSRC-parser.patch
  sndfile-src-sd2.c-Fix-two-potential-buffer-read-overflows.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1426939200">- Cleanup spec file with spec-cleaner
- Add gpg signature
- Remove old ppc provides/obsoletes</changelog>
  <changelog author="tiwai@suse.de" date="1446638400">- VUL-1: libsndfile DoS/divide-by-zero (CVE-2014-9756, bsc#953521):
  libsndfile-src-file_io.c-Prevent-potential-divide-by-zero.patch</changelog>
  <changelog author="tiwai@suse.de" date="1446638401">- VUL-0: libsndfile 1.0.25 heap overflow (CVE-2015-7805, bsc#953516)
  libsndfile-src-common.c-Fix-a-header-parsing-bug.patch
  libsndfile-fix-header-read-CVE-2015-7805.patch
- VUL-0: libsndfile 1.0.25 heap overflow (CVE-2015-8075, bsc#953519)
  libsndfile-psf_strlcpy_crlf-fix-CVE-2015-8075.patch
- Fix the build with SLE11-SP3 due to AM_SILENT_RULE macro</changelog>
  <changelog author="tiwai@suse.de" date="1448280000">- Update to version 1.0.26:
  * Fix for CVE-2014-9496, CVE-2014-9756 and CVE-2015-7805.
  * Add ALAC/CAF support. Minor bug fixes and improvements.
- Refreshed patches:
  sndfile-ocloexec.patch
  libsndfile-psf_strlcpy_crlf-fix-CVE-2015-8075.patch
- Removed obsoleted patches:
  libsndfile-example-fix.diff
  libsndfile-fix-header-read-CVE-2015-7805.patch
  libsndfile-paf-zero-division-fix.diff
  libsndfile-src-common.c-Fix-a-header-parsing-bug.patch
  libsndfile-src-file_io.c-Prevent-potential-divide-by-zero.patch
  sndfile-src-sd2.c-Fix-segfault-in-SD2-RSRC-parser.patch
  sndfile-src-sd2.c-Fix-two-potential-buffer-read-overflows.patch</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1462881600">- Fix spec file to enable builds on non opensuse OS</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Update to version 1.0.27:
  * Fix a seek regression in 1.0.26
  * Add metadata read/write for CAF and RF64
  * FIx PAF endian-ness issue
- Update to version 1.0.28
  * Fix buffer overruns in FLAC and ID3 handling code
  (CVE-2017-7585, CVE-2017-7586, bsc#1033054, bsc#1033053)
  * Reduce default header memory requirements
  * Fix detection of Large File Support for 32 bit systems.
- Obsoleted patch:
  libsndfile-psf_strlcpy_crlf-fix-CVE-2015-8075.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493726400">- Fix FLAC buffer overflows (CVE-2017-8361 CVE-2017-8363
  CVE-2017-8365 CVE-2017-8362 bsc#1036944 bsc#1036945 bsc#1036946
  bsc#1036943):
  0001-FLAC-Fix-a-buffer-read-overrun.patch
  0002-src-flac.c-Fix-a-buffer-read-overflow.patch</changelog>
  <changelog author="tiwai@suse.de" date="1497355200">- Fix out-of-bounds read memory access in the aiff_read_chanmap()
  (CVE-2017-6892, bsc#1043978):
  0010-src-aiff.c-Fix-a-buffer-read-overflow.patch</changelog>
  <changelog author="tiwai@suse.de" date="1502193600">- Fix Heap-based Buffer Overflow in the psf_binheader_writef
  (CVE-2017-12562, bsc#1052476):
  0020-src-common.c-Fix-heap-buffer-overflows-when-writing-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Fix VUL-0: divide-by-zero error exists in the function
  double64_init() in double64.c (CVE-2017-14634, bsc#1059911):
  0030-double64_init-Check-psf-sf.channels-against-upper-bo.patch
- Tentative fix for VUL-0: out of bounds read in the function
  d2alaw_array() in alaw.c (CVE-2017-14245, bsc#1059912) and
  VUL-0: out of bounds read in the function d2ulaw_array() in
  ulaw.c (CVE-2017-14246, bsc#1059913):
  0031-sfe_copy_data_fp-check-value-of-max-variable.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix potential overflow in d2alaw_array() (CVE-2017-17456,
  bsc#1071777):
  libsndfile-CVE-2017-17456-alaw-range-check.patch
- Fix potential overflow in d2ulaw_array() (CVE-2017-17457,
  bsc#1071767):
  libsndfile-CVE-2017-17457-ulaw-range-check.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459201">- Use license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1530878400">- Fix buffer overflow in sndfile-deinterleave, which isn't really a
  security issue (bsc#1100167, CVE-2018-13139, bsc#1116993,
  CVE-2018-19432):
  sndfile-deinterlace-channels-check.patch</changelog>
  <changelog author="tiwai@suse.de" date="1543924800">- Fix segfault in wav conversion due to the invalid loop count
  (CVE-2018-19758, bsc#1117954):
  libsndfile-wav-loop-count-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1627041600">- Fix heap buffer overflow vulnerability in msadpcm_decode_block
  (CVE-2021-3246, bsc#1188540):
  ms_adpcm-Fix-and-extend-size-checks.patch</changelog>
  <changelog author="tiwai@suse.de" date="1641211200">- Fix heap buffer overflow in flac_buffer_copy (CVE-2021-4156,
  bsc#1194006):
  libsndfile-CVE-2021-4156.patch</changelog>
  <changelog author="tiwai@suse.com" date="1697803200">- Fix signed integers overflows in au_read_header()
  (bsc#1213451, CVE-2022-33065):
  libsndfile-CVE-2022-33065.patch</changelog>
  <changelog author="tiwai@suse.com" date="1778155200">- Fix buffer overflow in the ircam_read_header function (bsc#1248458,
  CVE-2025-52194):
  libsndfile-CVE-2025-52194.patch</changelog>
  <changelog author="tiwai@suse.com" date="1778155201">- Fix IMA-ADPCM integer overflow (bsc#1263695, CVE-2026-37555):
  libsndfile-CVE-2026-37555.patch</changelog>
</package>
<package pkgid="11caeeee340d1aa66b923ef6fa6f92e439ddf5a38684e154048bb80c517e911c" name="libsndfile1" arch="x86_64">
  <version epoch="0" ver="1.0.28" rel="150000.5.23.1"/>
  <changelog author="tiwai@suse.de" date="1420632000">- VUL-0: two buffer read overflows in sd2_parse_rsrc_fork()
  (CVE-2014-9496, bnc#911796): backported upstream fix patches
  sndfile-src-sd2.c-Fix-segfault-in-SD2-RSRC-parser.patch
  sndfile-src-sd2.c-Fix-two-potential-buffer-read-overflows.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1426939200">- Cleanup spec file with spec-cleaner
- Add gpg signature
- Remove old ppc provides/obsoletes</changelog>
  <changelog author="tiwai@suse.de" date="1446638400">- VUL-1: libsndfile DoS/divide-by-zero (CVE-2014-9756, bsc#953521):
  libsndfile-src-file_io.c-Prevent-potential-divide-by-zero.patch</changelog>
  <changelog author="tiwai@suse.de" date="1446638401">- VUL-0: libsndfile 1.0.25 heap overflow (CVE-2015-7805, bsc#953516)
  libsndfile-src-common.c-Fix-a-header-parsing-bug.patch
  libsndfile-fix-header-read-CVE-2015-7805.patch
- VUL-0: libsndfile 1.0.25 heap overflow (CVE-2015-8075, bsc#953519)
  libsndfile-psf_strlcpy_crlf-fix-CVE-2015-8075.patch
- Fix the build with SLE11-SP3 due to AM_SILENT_RULE macro</changelog>
  <changelog author="tiwai@suse.de" date="1448280000">- Update to version 1.0.26:
  * Fix for CVE-2014-9496, CVE-2014-9756 and CVE-2015-7805.
  * Add ALAC/CAF support. Minor bug fixes and improvements.
- Refreshed patches:
  sndfile-ocloexec.patch
  libsndfile-psf_strlcpy_crlf-fix-CVE-2015-8075.patch
- Removed obsoleted patches:
  libsndfile-example-fix.diff
  libsndfile-fix-header-read-CVE-2015-7805.patch
  libsndfile-paf-zero-division-fix.diff
  libsndfile-src-common.c-Fix-a-header-parsing-bug.patch
  libsndfile-src-file_io.c-Prevent-potential-divide-by-zero.patch
  sndfile-src-sd2.c-Fix-segfault-in-SD2-RSRC-parser.patch
  sndfile-src-sd2.c-Fix-two-potential-buffer-read-overflows.patch</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1462881600">- Fix spec file to enable builds on non opensuse OS</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Update to version 1.0.27:
  * Fix a seek regression in 1.0.26
  * Add metadata read/write for CAF and RF64
  * FIx PAF endian-ness issue
- Update to version 1.0.28
  * Fix buffer overruns in FLAC and ID3 handling code
  (CVE-2017-7585, CVE-2017-7586, bsc#1033054, bsc#1033053)
  * Reduce default header memory requirements
  * Fix detection of Large File Support for 32 bit systems.
- Obsoleted patch:
  libsndfile-psf_strlcpy_crlf-fix-CVE-2015-8075.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493726400">- Fix FLAC buffer overflows (CVE-2017-8361 CVE-2017-8363
  CVE-2017-8365 CVE-2017-8362 bsc#1036944 bsc#1036945 bsc#1036946
  bsc#1036943):
  0001-FLAC-Fix-a-buffer-read-overrun.patch
  0002-src-flac.c-Fix-a-buffer-read-overflow.patch</changelog>
  <changelog author="tiwai@suse.de" date="1497355200">- Fix out-of-bounds read memory access in the aiff_read_chanmap()
  (CVE-2017-6892, bsc#1043978):
  0010-src-aiff.c-Fix-a-buffer-read-overflow.patch</changelog>
  <changelog author="tiwai@suse.de" date="1502193600">- Fix Heap-based Buffer Overflow in the psf_binheader_writef
  (CVE-2017-12562, bsc#1052476):
  0020-src-common.c-Fix-heap-buffer-overflows-when-writing-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Fix VUL-0: divide-by-zero error exists in the function
  double64_init() in double64.c (CVE-2017-14634, bsc#1059911):
  0030-double64_init-Check-psf-sf.channels-against-upper-bo.patch
- Tentative fix for VUL-0: out of bounds read in the function
  d2alaw_array() in alaw.c (CVE-2017-14245, bsc#1059912) and
  VUL-0: out of bounds read in the function d2ulaw_array() in
  ulaw.c (CVE-2017-14246, bsc#1059913):
  0031-sfe_copy_data_fp-check-value-of-max-variable.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix potential overflow in d2alaw_array() (CVE-2017-17456,
  bsc#1071777):
  libsndfile-CVE-2017-17456-alaw-range-check.patch
- Fix potential overflow in d2ulaw_array() (CVE-2017-17457,
  bsc#1071767):
  libsndfile-CVE-2017-17457-ulaw-range-check.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459201">- Use license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1530878400">- Fix buffer overflow in sndfile-deinterleave, which isn't really a
  security issue (bsc#1100167, CVE-2018-13139, bsc#1116993,
  CVE-2018-19432):
  sndfile-deinterlace-channels-check.patch</changelog>
  <changelog author="tiwai@suse.de" date="1543924800">- Fix segfault in wav conversion due to the invalid loop count
  (CVE-2018-19758, bsc#1117954):
  libsndfile-wav-loop-count-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1627041600">- Fix heap buffer overflow vulnerability in msadpcm_decode_block
  (CVE-2021-3246, bsc#1188540):
  ms_adpcm-Fix-and-extend-size-checks.patch</changelog>
  <changelog author="tiwai@suse.de" date="1641211200">- Fix heap buffer overflow in flac_buffer_copy (CVE-2021-4156,
  bsc#1194006):
  libsndfile-CVE-2021-4156.patch</changelog>
  <changelog author="tiwai@suse.com" date="1697803200">- Fix signed integers overflows in au_read_header()
  (bsc#1213451, CVE-2022-33065):
  libsndfile-CVE-2022-33065.patch</changelog>
  <changelog author="tiwai@suse.com" date="1778155200">- Fix buffer overflow in the ircam_read_header function (bsc#1248458,
  CVE-2025-52194):
  libsndfile-CVE-2025-52194.patch</changelog>
  <changelog author="tiwai@suse.com" date="1778155201">- Fix IMA-ADPCM integer overflow (bsc#1263695, CVE-2026-37555):
  libsndfile-CVE-2026-37555.patch</changelog>
</package>
<package pkgid="12331c12b88f174b7e517722e13362883053f559c5b2ba0a74b3f4060b824032" name="libsnmp30" arch="x86_64">
  <version epoch="0" ver="5.7.3" rel="150100.10.15.1"/>
  <changelog author="dimstar@opensuse.org" date="1463832000">- Fix build with perl 5.24.0:
  + Add net-snmp-5.7.3-Fix-Makefile.PL.patch: Fix build system
    recursiely loading Makefile.Pl and destroying its internas.
    See https://rt.perl.org/Public/Bug/Display.html?id=125907
  + net-snmp-5.7.3-Remove-U64-typedef.patch: The U64 typedef
    conflicts with a typedef in a Perl header file. Hence remove
    the U64 typedef from the Net-SNMP header files. Backported from
    upstream commit 477b4307ef1.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497355200">- Fix build with OpenSSL 1.1 (bsc#1042664):
  + Add net-snmp-5.7.3-build-with-openssl-1.1.patch, cumulated
    squash-patch from the following upstream commits:
    bbed6b86e70b5a3c54f14992696f2308a8d79511
    14bb72fd12bf5b68662893f7d8afbc4a8d52a6c8
    9641b472ef01208f92631016e91b0a4a518163f0
    e4c6937483d4a680570cec05388d2e4b291868a6
    b906c60c8a436d7360267a6d242526b33a9aaac8</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Add net-snmp-5.7.3-modern-rpm-api.patch: Supprt modern RPM (&gt;=
  4.6) API. In RPM 4.14, the RPM 4.4 compatibility APIs are being
  removed.</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Format with spec-cleaner
- Drop sle11 support as it fails to build anyway for ages
- Rename python packages to be python-%{name} with obsoletes
  * Use new singlespec macros
  * Add patch converting the py files to python3/2 compat mode
    net-snmp-python3.patch
- Run full autoreconf instead of partial
- Build with threads by building few targets first</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Take systemd service files from fedora to replace sysV scripts
- Also convert the sysconfig files to match fedora ones, they
  get bit more terse but it works seamlessly with systemd</changelog>
  <changelog author="tchvatal@suse.com" date="1516795200">- Add patch from Fedora to support natively systemd:
  * net-snmp-5.7.2-systemd.patch
- Drop the check phase as whole 90% of the tests fail it makes
  more sense to run them somewhere localy</changelog>
  <changelog author="tchvatal@suse.com" date="1516795201">- Properly conditionalize the py2 build</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Fix RPM group for shlib subpackage.</changelog>
  <changelog author="abergmann@suse.com" date="1523880000">- Remove executable flags from systemd service files (bsc#1089295).</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Fix permissions on unit files wrt bsc#1087977
- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1529323200">- Create /var/agentx via systemd tmpfiles in case of rollback,
  snapshots and transactional updates [bsc#1098032]</changelog>
  <changelog author="abergmann@suse.com" date="1539086400">- Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065)
  Add net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
- swintst_rpm: Protect against unspecified Group name (bsc#1102775)
  Add net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
- Add tsm and tlstm MIBs and the USM security module. (bsc#1081164)
- Fix agentx freezing on timeout (bsc#1027353)
  Add net-snmp-fix-agentx-freezing-on-timeout.patch</changelog>
  <changelog author="abergmann@suse.com" date="1562328000">- Add Lustre filesystem support (bsc#1140341, jsc#SLE-6120).
  Add net-snmp-5.7.3-add-lustre-fs-support.patch
- Add info about the original agent which triggered the trap.
  When the trap is forwarded there was no info about the original
  agent (bsc#1116807).
  Add net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
- Fix missing sysconfig files creation (bsc#1108471).</changelog>
  <changelog author="abergmann@suse.com" date="1639742400">- Make extended MIB read-only (bsc#1174961, CVE-2020-15862).
  Add net-snmp-5.7.3-make-extended-mib-read-only.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640001600">- Fix output for high memTotalReal RAM values (bsc#1152968).
  Add net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640174400">- Fix hrStorage autofs objects timeout problems (bsc#1179699, bsc#1145864).
  Add net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  Add net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
- Fix NSS mounted volumes in hrStorageDescr (bsc#1100146).
  Add net-snmp-5.7.3-recognize-nss-pools-and-nss-volumes-oes.patch
- Fix subagent crash at save_set_var() (bsc#1178021).
  Add net-snmp-5.7.3-subagent-set-response.patch
- Fix subagent data corruption (bsc#1178351, bsc#1179009).
  Add net-snmp-5.7.3-fix-subagent-data-corruption.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640260800">- Fix LFH violation during v3 user creation (bsc#1181591).
  Add net-snmp-5.7.3-fix-create-v3-user-outfile.patch</changelog>
  <changelog author="abergmann@suse.com" date="1646827200">- Decouple snmp-mibs from net-snmp version to allow major version
  upgrade (bsc#1196955).</changelog>
  <changelog author="abergmann@suse.com" date="1767960000">- Fix snmptrapd buffer overflow (bsc#1255491, CVE-2025-68615).
  Add net-snmp-5.7.3-fix-out-of-bounds-trapOid-access.patch</changelog>
</package>
<package pkgid="ff950a06b55b51ad6590a3ab1f503b5506142c89db262b619d41c19c5900d510" name="libsnmp40" arch="x86_64">
  <version epoch="0" ver="5.9.4" rel="150600.24.10.1"/>
  <changelog author="tchvatal@suse.com" date="1516622400">- Take systemd service files from fedora to replace sysV scripts
- Also convert the sysconfig files to match fedora ones, they
  get bit more terse but it works seamlessly with systemd</changelog>
  <changelog author="tchvatal@suse.com" date="1516795200">- Add patch from Fedora to support natively systemd:
  * net-snmp-5.7.2-systemd.patch
- Drop the check phase as whole 90% of the tests fail it makes
  more sense to run them somewhere localy</changelog>
  <changelog author="tchvatal@suse.com" date="1516795201">- Properly conditionalize the py2 build</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Fix RPM group for shlib subpackage.</changelog>
  <changelog author="abergmann@suse.com" date="1523880000">- Remove executable flags from systemd service files (bsc#1089295).</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Fix permissions on unit files wrt bsc#1087977
- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1529323200">- Create /var/agentx via systemd tmpfiles in case of rollback,
  snapshots and transactional updates [bsc#1098032]</changelog>
  <changelog author="abergmann@suse.com" date="1539086400">- Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065)
  Add net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
- swintst_rpm: Protect against unspecified Group name (bsc#1102775)
  Add net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
- Add tsm and tlstm MIBs and the USM security module. (bsc#1081164)
- Fix agentx freezing on timeout (bsc#1027353)
  Add net-snmp-fix-agentx-freezing-on-timeout.patch</changelog>
  <changelog author="abergmann@suse.com" date="1562328000">- Add Lustre filesystem support (bsc#1140341, jsc#SLE-6120).
  Add net-snmp-5.7.3-add-lustre-fs-support.patch
- Add info about the original agent which triggered the trap.
  When the trap is forwarded there was no info about the original
  agent (bsc#1116807).
  Add net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
- Fix missing sysconfig files creation (bsc#1108471).</changelog>
  <changelog author="abergmann@suse.com" date="1639742400">- Make extended MIB read-only (bsc#1174961, CVE-2020-15862).
  Add net-snmp-5.7.3-make-extended-mib-read-only.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640001600">- Fix output for high memTotalReal RAM values (bsc#1152968).
  Add net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640174400">- Fix hrStorage autofs objects timeout problems (bsc#1179699, bsc#1145864).
  Add net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  Add net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
- Fix NSS mounted volumes in hrStorageDescr (bsc#1100146).
  Add net-snmp-5.7.3-recognize-nss-pools-and-nss-volumes-oes.patch
- Fix subagent crash at save_set_var() (bsc#1178021).
  Add net-snmp-5.7.3-subagent-set-response.patch
- Fix subagent data corruption (bsc#1178351, bsc#1179009).
  Add net-snmp-5.7.3-fix-subagent-data-corruption.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640260800">- Fix LFH violation during v3 user creation (bsc#1181591).
  Add net-snmp-5.7.3-fix-create-v3-user-outfile.patch</changelog>
  <changelog author="abergmann@suse.com" date="1646827200">- Decouple snmp-mibs from net-snmp version to allow major version
  upgrade (bsc#1196955).</changelog>
  <changelog author="abergmann@suse.com" date="1665057600">- update to 5.9.3 (bsc#1201103, jsc#SLE-11203):
  - security:
  - These two CVEs can be exploited by a user with read-only credentials:
  - CVE-2022-24805 A buffer overflow in the handling of the INDEX of
    NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
  - CVE-2022-24809 A malformed OID in a GET-NEXT to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - These CVEs can be exploited by a user with read-write credentials:
  - CVE-2022-24806 Improper Input Validation when SETing malformed
    OIDs in master agent and subagent simultaneously
  - CVE-2022-24807 A malformed OID in a SET request to
    SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an
    out-of-bounds memory access.
  - CVE-2022-24808 A malformed OID in a SET request to
    NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
  - CVE-2022-24810 A malformed OID in a SET to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - Fixed library versioning bug found in 5.9.2.
  - Library version change to libsnmp40.
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Fixed python2 backward compability.
  add:
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Change to use systemd service files directly from net-snmp package.
  add:
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch
  remove:
  * snmpd.service
  * snmptrapd.service
  * harden_snmpd.service.patch
  * harden_snmptrapd.service.patch
- Refactor and remove obsolete patches to work with version number 5.9.3:
  add:
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  remove:
  * net-snmp-5.9.1-pie.patch
  * net-snmp-5.9.1-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-add-lustre-fs-support.patch
  * net-snmp-5.7.3-Fix-Makefile.PL.patch
  * net-snmp-5.7.3-modern-rpm-api.patch
  * net-snmp-5.7.3-net-snmp-config-headercheck.patch
  * net-snmp-5.7.3-perl-tk-warning.patch
  * net-snmp-5.7.3-snmpstatus-suppress-output.patch
  * net-snmp-5.7.3-socket-path.patch
  * net-snmp-5.7.3-subagent-set-response.patch
  * net-snmp-5.7.3-testing-empty-arptable.patch
  * net-snmp-5.7.3-velocity-mib.patch
  * net-snmp-5.7.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-pie.patch
  * net-snmp-4.7.2-systemd.patch
  * net-snmp-5.7.3-build-with-openssl-1.1.patch
  * net-snmp-5.7.3-fix-agentx-freezing-on-timeout.patch
  * net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
  * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch
  * net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch
  * net-snmp-5.7.3-fix-subagent-data-corruption.patch
  * net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
  * net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  * net-snmp-5.7.3-make-extended-mib-read-only.patch
  * net-snmp-5.7.3-netgroups.patch
  * net-snmp-5.7.3-Remove-U64-typedef.patch
  * net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
  * net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
  * net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch
  * net-snmp-python3.patch</changelog>
  <changelog author="abergmann@suse.com" date="1672920000">- Fixed NULL pointer exception issue when handling ipDefaultTTL or
  pv6IpForwarding (bsc#1205148, CVE-2022-44793, bsc#1205150, CVE-2022-44792).
  add:
  * net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch
- Enable AES-192 and AES-256 privacy protocol (bsc#1206828).</changelog>
  <changelog author="abergmann@suse.com" date="1673265600">- Hardening systemd services setting "ProtectHome=true" caused home directory
  size and allocation to be listed incorrectly (bsc#1206044).
  add:
  * net-snmp-5.9.3-harden_snmpd.service.patch
  * net-snmp-5.9.3-harden_snmptrapd.service.patch
  delete:
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch</changelog>
  <changelog author="abergmann@suse.com" date="1697544000">- Update to net-snmp-5.9.4 (bsc#1214364).
  add (rename):
  * net-snmp-5.9.4-add-lustre-fs-support.patch
  * net-snmp-5.9.4-add-netgroups-functionality.patch
  * net-snmp-5.9.4-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.4-fixed-python2-bindings.patch
  * net-snmp-5.9.4-fix-Makefile.PL.patch
  * net-snmp-5.9.4-modern-rpm-api.patch
  * net-snmp-5.9.4-net-snmp-config-headercheck.patch
  * net-snmp-5.9.4-perl-tk-warning.patch
  * net-snmp-5.9.4-pie.patch
  * net-snmp-5.9.4-snmpstatus-suppress-output.patch
  * net-snmp-5.9.4-socket-path.patch
  * net-snmp-5.9.4-subagent-set-response.patch
  * net-snmp-5.9.4-suse-systemd-service-files.patch
  * net-snmp-5.9.4-testing-empty-arptable.patch
  delete (now part of v5.9.4):
  * net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch
  delete (rename):
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Removing legacy MIBs used by Velocity Software (jira#PED-6416).
- Re-add support for hostname netgroups that was removed accidentally and
  previously added with FATE#316305 (bsc#1207697).
  '@hostgroup' can be specified for multiple hosts
- Hardening systemd services setting "ProtectHome=true" caused home directory
  size and allocation to be listed incorrectly (bsc#1206044).
  add (rename):
  * net-snmp-5.9.4-harden_snmpd.service.patch
  * net-snmp-5.9.4-harden_snmptrapd.service.patch
  delete (rename):
  * net-snmp-5.9.3-harden_snmpd.service.patch
  * net-snmp-5.9.3-harden_snmptrapd.service.patch</changelog>
  <changelog author="tabraham@suse.com" date="1731326400">- logrotate should use reload instead of restart (bsc#1232030)</changelog>
  <changelog author="abergmann@suse.com" date="1768219200">- Fix snmptrapd buffer overflow (bsc#1255491, CVE-2025-68615).
  Add net-snmp-5.9.4-fix-out-of-bounds-trapOid-access.patch</changelog>
</package>
<package pkgid="69d21d7eb4cc9a38bd2f80fc437510e6ff5c206b9015c1f1e19e5150b4b2d478" name="libsodium" arch="src">
  <version epoch="0" ver="1.0.18" rel="150000.4.11.1"/>
  <changelog author="idonmez@suse.com" date="1446465600">- Update to 1.0.6
  * Optimized implementations of Blake2 have been added for modern
    Intel platforms. crypto_generichash() is now faster than MD5 and
    SHA1 implementations while being far more secure.
  * The crypto_sign_edwards25519sha512batch_*() functions have been
    tagged as deprecated.
  * sodium_compare() now works as documented, and compares numbers
    in little-endian format instead of behaving like memcmp().
  * sodium_runtime_has_ssse3() and sodium_runtime_has_sse41() have
    been added.</changelog>
  <changelog author="idonmez@suse.com" date="1448971200">- Follow upstream's lead and compile with -flto for &gt; 13.2 on x86
  and x86-64.</changelog>
  <changelog author="idonmez@suse.com" date="1449576000">- Update to version 1.0.7
  * Sandy2x, the fastest Curve25519 implementation ever,
    has been merged in, and is automatically used on CPUs
    supporting the AVX instructions set.
  * An SSE2 optimized implementation of Poly1305 was added,
    and is twice as fast as the portable one.
  * An SSSE3 optimized implementation of ChaCha20 was added,
    and is twice as fast as the portable one.
  * Faster sodium_increment() for common nonce sizes.
  * New helper functions have been added: sodium_is_zero()
    and sodium_add().</changelog>
  <changelog author="idonmez@suse.com" date="1451044800">- Update to version 1.0.8
  * Handle the case where the CPU supports AVX, but we are running
    on an hypervisor with AVX disabled/not supported.
  * Faster (2x) scalarmult_base() when using the ref10 implementation.</changelog>
  <changelog author="idonmez@suse.com" date="1459598400">- Update to version 1.0.9
  * A detached API was added to the ChaCha20-Poly1305 and AES256-GCM
    implementations.
  * The Argon2i password hashing function was added, and is accessible
    directly and through a new, high-level crypto_pwhash API.
    The scrypt function remains available as well.
  * A speed-record AVX2 implementation of BLAKE2b was added.
  * Countermeasures for Ed25519 signatures malleability have been
    added to match the irtf-cfrg-eddsa draft.
  * The HChaCha20 core function was implemented (crypto_core_hchacha20()).
  * No-op stubs were added for all AES256-GCM public functions even
    when compiled on non-Intel platforms.
  * crypt_generichash_blake2b_statebytes() was added.
  * New macros were added for the IETF variant of the ChaCha20-Poly1305
    construction.</changelog>
  <changelog author="idonmez@suse.com" date="1459857600">- Update to version 1.0.10
  * Compile fix update for older GCCs</changelog>
  <changelog author="i@marguerite.su" date="1470484800">- update version 1.0.11
  * sodium_init() is now thread-safe, and can be safely called
    multiple times.
  * Better support for old gcc versions.
  * AVX2 detection was fixed, resulting in faster BLAKE2b hashing
    on platforms where it was not properly detected.
  * The Sandy2x Curve25519 implementation was not as fast as
    expected on some platforms. This has been fixed.
  * The NativeClient target was improved. Most notably, it now
    supports optimized implementations, and uses pepper_49 by default.
  * The library can be compiled with recent Emscripten versions.
    Changes have been made to produce smaller code, and the default
    heap size was reduced in the standard version.
  * Decryption functions can now accept a NULL pointer for the output.
    This checks the MAC without writing the decrypted message.
  * crypto_generichash_final() now returns -1 if called twice.</changelog>
  <changelog author="idonmez@suse.com" date="1489406400">- Update to version 1.0.12
  * Ed25519ph was implemented, adding a multi-part signature API
    (crypto_sign_init(), crypto_sign_update(), crypto_sign_final_*()).
  * New constants and related accessors have been added for Scrypt
    and Argon2.
  * XChaCha20 has been implemented. Like XSalsa20, this construction
    extends the ChaCha20 cipher to accept a 192-bit nonce. This
    makes it safe to use ChaCha20 with random nonces.
  * crypto_secretbox, crypto_box and crypto_aead now offer variants
    leveraging XChaCha20.
  * SHA-2 is about 20% faster, which also gives a speed boost to
    signature and signature verification.
  * AVX2 implementations of Salsa20 and ChaCha20 have been added.
    They are twice as fast as the SSE2 implementations. The speed
    gain is even more significant on Windows, that previously
    didn't use vectorized implementations.
  * New high-level API: crypto_kdf, to easily derive one or more
    subkeys from a master key.
  * Siphash with a 128-bit output has been implemented, and is
    available as crypto_shorthash_siphashx_*.
  * New *_keygen() helpers functions have been added to create
    secret keys for all constructions. This improves code clarity
    and can prevent keys from being partially initialized.
  * A new randombytes_buf_deterministic() function was added to
    deterministically fill a memory region with pseudorandom data.
    This function can especially be useful to write reproducible tests.
  * A preliminary crypto_kx_*() API was added to compute shared
    session keys.
  * AVX2 detection is more reliable.</changelog>
  <changelog author="idonmez@suse.com" date="1506600000">- Update to version 1.0.14
  * Internal consistency checks failing and primitives used with
    dangerous/out-of-bounds/invalid parameters used to call abort(3).
    Now, a custom handler that doesn't return can be set with the
    set_sodium_misuse() function. It still aborts by default or if
    the handler ever returns. This is not a replacement for non-fatal,
    expected runtime errors. This handler will be only called in
    unexpected situations due to potential bugs in the library or in
    language bindings.
  * *_MESSAGEBYTES_MAX macros (and the corresponding _messagebytes_max()
    symbols) have been added to represent the maximum message size that
    can be safely handled by a primitive. Language bindings are
    encouraged to check user inputs against these maximum lengths.
  * The test suite has been extended to cover more edge cases.
  * crypto_sign_ed25519_pk_to_curve25519() now rejects points that
    are not on the curve, or not in the main subgroup.
  * Further changes have been made to ensure that smart compilers
    will not optimize out code that we don't want to be optimized.
  * The sodium_runtime_has_* symbols for CPU features detection are
    now defined as weak symbols, i.e. they can be replaced with an
    application-defined implementation. This can be useful to
    disable AVX* when temperature/power consumption is a concern.
  * crypto_kx_*() now aborts if called with no non-NULL pointers
    to store keys to.
  * SSE2 implementations of crypto_verify_*() have been added.
  * Passwords can be hashed using a specific algorithm with the new
    crypto_pwhash_str_alg() function.
  * Due to popular demand, base64 encoding (sodium_bin2base64())
    and decoding (sodium_base642bin()) have been implemented.
  * A new crypto_secretstream_*() API was added to safely encrypt
    files and multi-part messages.
  * The sodium_pad() and sodium_unpad() helper functions have been
    added in order to add &amp; remove padding.
  * An AVX512 optimized implementation of Argon2 has been added.
  * The crypto_pwhash_str_needs_rehash() function was added to check
    if a password hash string matches the given parameters, or if it
    needs an update.
  Updates from 1.0.13
  * An AVX2 optimized implementation of the Argon2 round function was added.
  * The Argon2id variant of Argon2 has been implemented. The high-level
    crypto_pwhash_str_verify() function automatically detects the
    algorithm and can verify both Argon2i and Argon2id hashed passwords.
    The default algorithm for newly hashed passwords remains Argon2i
    in this version to avoid breaking compatibility with verifiers
    running libsodium &lt;= 1.0.12.
  * A crypto_box_curve25519xchacha20poly1305_seal*() function set was implemented.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1507464000">- Refresh spec-file.
- Update to 1.0.15.
  * Release notes: https://github.com/jedisct1/libsodium/releases/tag/1.0.15
  * The default password hashing algorithm is now Argon2id.
  * The pwhash_str_verify() function can still verify Argon2i hashes without any changes,
    and pwhash() can still compute Argon2i hashes as well.
  * The aes128ctr primitive was removed. It was slow, non-standard, not authenticated,
    and didn't seem to be used by any opensource project.
  * Argon2id required at least 3 passes like Argon2i, despite a minimum of 1
    as defined by the OPSLIMIT_MIN constant. This has been fixed.
  * The secretstream construction was slightly changed to be consistent with forthcoming variants.
  * The Javascript and Webassembly versions have been merged, and the module now returns
    a .ready promise that will resolve after the Webassembly code is loaded and compiled.
  * Note that due to these incompatible changes, the library version major was bumped up.</changelog>
  <changelog author="idonmez@suse.com" date="1513166400">- Update to 1.0.16
  * Signatures computations and verifications are now way faster
    on 64-bit platforms with compilers supporting 128-bit
    arithmetic (gcc, clang, icc). This includes the WebAssembly
    target.
  * New low-level APIs for computations over edwards25519:
    crypto_scalarmult_ed25519(), crypto_scalarmult_ed25519_base(),
    crypto_core_ed25519_is_valid_point(), crypto_core_ed25519_add(),
    crypto_core_ed25519_sub() and crypto_core_ed25519_from_uniform()
    (elligator representative to point).
  * crypto_sign_open(), crypto_sign_verify_detached() and
    crypto_sign_edwards25519sha512batch_open` now reject public
    keys in non-canonical form in addition to low-order points.
  * The library can be built with ED25519_NONDETERMINISTIC defined
    in order to use synthetic nonces for EdDSA. This is disabled
    by default.
  * sodium_stackzero() was added to wipe content off the stack.
  * The Salsa20-based PRNG example is now thread-safe on platforms
    with support for thread-local storage, optionally mixes bits
    from RDRAND.
  * Argon2 and scrypt are slightly faster on Linux.</changelog>
  <changelog author="adam.majer@suse.de" date="1514548800">- Enable verbose make output when building tests</changelog>
  <changelog author="mpluskal@suse.com" date="1531396800">- Add gpg signature
- Modernise spec file with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1531483200">- Add baselibs.conf: build libsodium23-32bit, which is required by
  zeromq's -32bit packages.</changelog>
  <changelog author="ecsos@opensuse.org" date="1549108800">- Update to 1.0.17
  - Bug fix: sodium_pad() didn't properly support block sizes
    &gt;= 256 bytes.
  - JS/WebAssembly: some old iOS versions can't instantiate the
    WebAssembly module; fall back to Javascript on these.
  - JS/WebAssembly: compatibility with newer Emscripten versions.
  - Bug fix: crypto_pwhash_scryptsalsa208sha256_str_verify() and
    crypto_pwhash_scryptsalsa208sha256_str_needs_rehash()didn't
    returnEINVAL` on input strings with a short length, unlike
    their high-level counterpart.
  - Added a workaround for Visual Studio 2010 bug causing CPU
    features not to be detected.
  - Portability improvements.
  - Test vectors from Project Wycheproof have been added.
  - New low-level APIs for arithmetic mod the order of the prime
    order group:
  - crypto_core_ed25519_scalar_random(),
    crypto_core_ed25519_scalar_reduce(),
  - crypto_core_ed25519_scalar_invert(),
    crypto_core_ed25519_scalar_negate(),
  - crypto_core_ed25519_scalar_complement(),
    crypto_core_ed25519_scalar_add() and
    crypto_core_ed25519_scalar_sub().
  - New low-level APIs for scalar multiplication without clamping:
    crypto_scalarmult_ed25519_base_noclamp() and
    crypto_scalarmult_ed25519_noclamp().
    These new APIs are especially useful for blinding.
  - sodium_sub() has been implemented.
  - Support for WatchOS has been added.
  - getrandom(2) is now used on FreeBSD 12+.
  - The nonnull attribute has been added to all relevant
    prototypes.
  - More reliable AVX512 detection.
  - Javascript/Webassembly builds now use dynamic memory growth.</changelog>
  <changelog author="ecsos@opensuse.org" date="1560686400">- Update to 1.0.18
  - Enterprise versions of Visual Studio are now supported.
  - Visual Studio 2019 is now supported.
  - 32-bit binaries for Visual Studio 2010 are now provided.
  - A test designed to trigger an OOM condition didn't work on
    Linux systems with memory overcommit turned on. It has been
    removed in order to fix Ansible builds.
  - Emscripten: print and printErr functions are overridden to send
    errors to the console, if there is one.
  - Emscripten: UTF8ToString() is now exported since
    Pointer_stringify() has been deprecated.
  - Libsodium version detection has been fixed in the CMake recipe.
  - Generic hashing got a 10% speedup on AVX2.
  - New target: WebAssembly/WASI
    (compile with dist-builds/wasm32-wasi.sh).
  - New functions to map a hash to an edwards25519 point
    or get a random point:
    core_ed25519_from_hash() and core_ed25519_random().
  - crypto_core_ed25519_scalar_mul() has been implemented for
    scalar*scalar (mod L) multiplication.
  - Support for the Ristretto group has been implemented for
    interoperability with wasm-crypto.
  - Improvements have been made to the test suite.
  - Portability improvements have been made.
  - getentropy() is now used on systems providing this system call.
  - randombytes_salsa20 has been renamed to randombytes_internal.
  - Support for NativeClient has been removed.
  - Most ((nonnull)) attributes have been relaxed to allow 0-length
    inputs to be NULL.
  - The -ftree-vectorize and -ftree-slp-vectorize compiler switches
    are now used, if available, for optimized builds.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1565956800">-  Add libsodium_configure_cpuid_chg.patch and call autoconf
  to regenerate configure script with proper CPUID checking.
  Required at least for PowerPC and ARM now that LTO enabled.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1566820800">-  Revert previous change about cpuid as previous change rejected
  in https://build.opensuse.org/request/show/724809
-  Disable LTO as bypass boo#1148184</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1658404800">- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767873600">- Security fix: [bsc#1256070, CVE-2025-15444]
  * check Y==Z in addition to X==0
  * Add patch libsodium-CVE-2025-15444.patch</changelog>
</package>
<package pkgid="349c5f27307ab21779564c51343ca1d97bc90f74d70a2bcefa6157142427d242" name="libsodium" arch="src">
  <version epoch="0" ver="1.0.18" rel="150000.4.14.1"/>
  <changelog author="idonmez@suse.com" date="1446465600">- Update to 1.0.6
  * Optimized implementations of Blake2 have been added for modern
    Intel platforms. crypto_generichash() is now faster than MD5 and
    SHA1 implementations while being far more secure.
  * The crypto_sign_edwards25519sha512batch_*() functions have been
    tagged as deprecated.
  * sodium_compare() now works as documented, and compares numbers
    in little-endian format instead of behaving like memcmp().
  * sodium_runtime_has_ssse3() and sodium_runtime_has_sse41() have
    been added.</changelog>
  <changelog author="idonmez@suse.com" date="1448971200">- Follow upstream's lead and compile with -flto for &gt; 13.2 on x86
  and x86-64.</changelog>
  <changelog author="idonmez@suse.com" date="1449576000">- Update to version 1.0.7
  * Sandy2x, the fastest Curve25519 implementation ever,
    has been merged in, and is automatically used on CPUs
    supporting the AVX instructions set.
  * An SSE2 optimized implementation of Poly1305 was added,
    and is twice as fast as the portable one.
  * An SSSE3 optimized implementation of ChaCha20 was added,
    and is twice as fast as the portable one.
  * Faster sodium_increment() for common nonce sizes.
  * New helper functions have been added: sodium_is_zero()
    and sodium_add().</changelog>
  <changelog author="idonmez@suse.com" date="1451044800">- Update to version 1.0.8
  * Handle the case where the CPU supports AVX, but we are running
    on an hypervisor with AVX disabled/not supported.
  * Faster (2x) scalarmult_base() when using the ref10 implementation.</changelog>
  <changelog author="idonmez@suse.com" date="1459598400">- Update to version 1.0.9
  * A detached API was added to the ChaCha20-Poly1305 and AES256-GCM
    implementations.
  * The Argon2i password hashing function was added, and is accessible
    directly and through a new, high-level crypto_pwhash API.
    The scrypt function remains available as well.
  * A speed-record AVX2 implementation of BLAKE2b was added.
  * Countermeasures for Ed25519 signatures malleability have been
    added to match the irtf-cfrg-eddsa draft.
  * The HChaCha20 core function was implemented (crypto_core_hchacha20()).
  * No-op stubs were added for all AES256-GCM public functions even
    when compiled on non-Intel platforms.
  * crypt_generichash_blake2b_statebytes() was added.
  * New macros were added for the IETF variant of the ChaCha20-Poly1305
    construction.</changelog>
  <changelog author="idonmez@suse.com" date="1459857600">- Update to version 1.0.10
  * Compile fix update for older GCCs</changelog>
  <changelog author="i@marguerite.su" date="1470484800">- update version 1.0.11
  * sodium_init() is now thread-safe, and can be safely called
    multiple times.
  * Better support for old gcc versions.
  * AVX2 detection was fixed, resulting in faster BLAKE2b hashing
    on platforms where it was not properly detected.
  * The Sandy2x Curve25519 implementation was not as fast as
    expected on some platforms. This has been fixed.
  * The NativeClient target was improved. Most notably, it now
    supports optimized implementations, and uses pepper_49 by default.
  * The library can be compiled with recent Emscripten versions.
    Changes have been made to produce smaller code, and the default
    heap size was reduced in the standard version.
  * Decryption functions can now accept a NULL pointer for the output.
    This checks the MAC without writing the decrypted message.
  * crypto_generichash_final() now returns -1 if called twice.</changelog>
  <changelog author="idonmez@suse.com" date="1489406400">- Update to version 1.0.12
  * Ed25519ph was implemented, adding a multi-part signature API
    (crypto_sign_init(), crypto_sign_update(), crypto_sign_final_*()).
  * New constants and related accessors have been added for Scrypt
    and Argon2.
  * XChaCha20 has been implemented. Like XSalsa20, this construction
    extends the ChaCha20 cipher to accept a 192-bit nonce. This
    makes it safe to use ChaCha20 with random nonces.
  * crypto_secretbox, crypto_box and crypto_aead now offer variants
    leveraging XChaCha20.
  * SHA-2 is about 20% faster, which also gives a speed boost to
    signature and signature verification.
  * AVX2 implementations of Salsa20 and ChaCha20 have been added.
    They are twice as fast as the SSE2 implementations. The speed
    gain is even more significant on Windows, that previously
    didn't use vectorized implementations.
  * New high-level API: crypto_kdf, to easily derive one or more
    subkeys from a master key.
  * Siphash with a 128-bit output has been implemented, and is
    available as crypto_shorthash_siphashx_*.
  * New *_keygen() helpers functions have been added to create
    secret keys for all constructions. This improves code clarity
    and can prevent keys from being partially initialized.
  * A new randombytes_buf_deterministic() function was added to
    deterministically fill a memory region with pseudorandom data.
    This function can especially be useful to write reproducible tests.
  * A preliminary crypto_kx_*() API was added to compute shared
    session keys.
  * AVX2 detection is more reliable.</changelog>
  <changelog author="idonmez@suse.com" date="1506600000">- Update to version 1.0.14
  * Internal consistency checks failing and primitives used with
    dangerous/out-of-bounds/invalid parameters used to call abort(3).
    Now, a custom handler that doesn't return can be set with the
    set_sodium_misuse() function. It still aborts by default or if
    the handler ever returns. This is not a replacement for non-fatal,
    expected runtime errors. This handler will be only called in
    unexpected situations due to potential bugs in the library or in
    language bindings.
  * *_MESSAGEBYTES_MAX macros (and the corresponding _messagebytes_max()
    symbols) have been added to represent the maximum message size that
    can be safely handled by a primitive. Language bindings are
    encouraged to check user inputs against these maximum lengths.
  * The test suite has been extended to cover more edge cases.
  * crypto_sign_ed25519_pk_to_curve25519() now rejects points that
    are not on the curve, or not in the main subgroup.
  * Further changes have been made to ensure that smart compilers
    will not optimize out code that we don't want to be optimized.
  * The sodium_runtime_has_* symbols for CPU features detection are
    now defined as weak symbols, i.e. they can be replaced with an
    application-defined implementation. This can be useful to
    disable AVX* when temperature/power consumption is a concern.
  * crypto_kx_*() now aborts if called with no non-NULL pointers
    to store keys to.
  * SSE2 implementations of crypto_verify_*() have been added.
  * Passwords can be hashed using a specific algorithm with the new
    crypto_pwhash_str_alg() function.
  * Due to popular demand, base64 encoding (sodium_bin2base64())
    and decoding (sodium_base642bin()) have been implemented.
  * A new crypto_secretstream_*() API was added to safely encrypt
    files and multi-part messages.
  * The sodium_pad() and sodium_unpad() helper functions have been
    added in order to add &amp; remove padding.
  * An AVX512 optimized implementation of Argon2 has been added.
  * The crypto_pwhash_str_needs_rehash() function was added to check
    if a password hash string matches the given parameters, or if it
    needs an update.
  Updates from 1.0.13
  * An AVX2 optimized implementation of the Argon2 round function was added.
  * The Argon2id variant of Argon2 has been implemented. The high-level
    crypto_pwhash_str_verify() function automatically detects the
    algorithm and can verify both Argon2i and Argon2id hashed passwords.
    The default algorithm for newly hashed passwords remains Argon2i
    in this version to avoid breaking compatibility with verifiers
    running libsodium &lt;= 1.0.12.
  * A crypto_box_curve25519xchacha20poly1305_seal*() function set was implemented.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1507464000">- Refresh spec-file.
- Update to 1.0.15.
  * Release notes: https://github.com/jedisct1/libsodium/releases/tag/1.0.15
  * The default password hashing algorithm is now Argon2id.
  * The pwhash_str_verify() function can still verify Argon2i hashes without any changes,
    and pwhash() can still compute Argon2i hashes as well.
  * The aes128ctr primitive was removed. It was slow, non-standard, not authenticated,
    and didn't seem to be used by any opensource project.
  * Argon2id required at least 3 passes like Argon2i, despite a minimum of 1
    as defined by the OPSLIMIT_MIN constant. This has been fixed.
  * The secretstream construction was slightly changed to be consistent with forthcoming variants.
  * The Javascript and Webassembly versions have been merged, and the module now returns
    a .ready promise that will resolve after the Webassembly code is loaded and compiled.
  * Note that due to these incompatible changes, the library version major was bumped up.</changelog>
  <changelog author="idonmez@suse.com" date="1513166400">- Update to 1.0.16
  * Signatures computations and verifications are now way faster
    on 64-bit platforms with compilers supporting 128-bit
    arithmetic (gcc, clang, icc). This includes the WebAssembly
    target.
  * New low-level APIs for computations over edwards25519:
    crypto_scalarmult_ed25519(), crypto_scalarmult_ed25519_base(),
    crypto_core_ed25519_is_valid_point(), crypto_core_ed25519_add(),
    crypto_core_ed25519_sub() and crypto_core_ed25519_from_uniform()
    (elligator representative to point).
  * crypto_sign_open(), crypto_sign_verify_detached() and
    crypto_sign_edwards25519sha512batch_open` now reject public
    keys in non-canonical form in addition to low-order points.
  * The library can be built with ED25519_NONDETERMINISTIC defined
    in order to use synthetic nonces for EdDSA. This is disabled
    by default.
  * sodium_stackzero() was added to wipe content off the stack.
  * The Salsa20-based PRNG example is now thread-safe on platforms
    with support for thread-local storage, optionally mixes bits
    from RDRAND.
  * Argon2 and scrypt are slightly faster on Linux.</changelog>
  <changelog author="adam.majer@suse.de" date="1514548800">- Enable verbose make output when building tests</changelog>
  <changelog author="mpluskal@suse.com" date="1531396800">- Add gpg signature
- Modernise spec file with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1531483200">- Add baselibs.conf: build libsodium23-32bit, which is required by
  zeromq's -32bit packages.</changelog>
  <changelog author="ecsos@opensuse.org" date="1549108800">- Update to 1.0.17
  - Bug fix: sodium_pad() didn't properly support block sizes
    &gt;= 256 bytes.
  - JS/WebAssembly: some old iOS versions can't instantiate the
    WebAssembly module; fall back to Javascript on these.
  - JS/WebAssembly: compatibility with newer Emscripten versions.
  - Bug fix: crypto_pwhash_scryptsalsa208sha256_str_verify() and
    crypto_pwhash_scryptsalsa208sha256_str_needs_rehash()didn't
    returnEINVAL` on input strings with a short length, unlike
    their high-level counterpart.
  - Added a workaround for Visual Studio 2010 bug causing CPU
    features not to be detected.
  - Portability improvements.
  - Test vectors from Project Wycheproof have been added.
  - New low-level APIs for arithmetic mod the order of the prime
    order group:
  - crypto_core_ed25519_scalar_random(),
    crypto_core_ed25519_scalar_reduce(),
  - crypto_core_ed25519_scalar_invert(),
    crypto_core_ed25519_scalar_negate(),
  - crypto_core_ed25519_scalar_complement(),
    crypto_core_ed25519_scalar_add() and
    crypto_core_ed25519_scalar_sub().
  - New low-level APIs for scalar multiplication without clamping:
    crypto_scalarmult_ed25519_base_noclamp() and
    crypto_scalarmult_ed25519_noclamp().
    These new APIs are especially useful for blinding.
  - sodium_sub() has been implemented.
  - Support for WatchOS has been added.
  - getrandom(2) is now used on FreeBSD 12+.
  - The nonnull attribute has been added to all relevant
    prototypes.
  - More reliable AVX512 detection.
  - Javascript/Webassembly builds now use dynamic memory growth.</changelog>
  <changelog author="ecsos@opensuse.org" date="1560686400">- Update to 1.0.18
  - Enterprise versions of Visual Studio are now supported.
  - Visual Studio 2019 is now supported.
  - 32-bit binaries for Visual Studio 2010 are now provided.
  - A test designed to trigger an OOM condition didn't work on
    Linux systems with memory overcommit turned on. It has been
    removed in order to fix Ansible builds.
  - Emscripten: print and printErr functions are overridden to send
    errors to the console, if there is one.
  - Emscripten: UTF8ToString() is now exported since
    Pointer_stringify() has been deprecated.
  - Libsodium version detection has been fixed in the CMake recipe.
  - Generic hashing got a 10% speedup on AVX2.
  - New target: WebAssembly/WASI
    (compile with dist-builds/wasm32-wasi.sh).
  - New functions to map a hash to an edwards25519 point
    or get a random point:
    core_ed25519_from_hash() and core_ed25519_random().
  - crypto_core_ed25519_scalar_mul() has been implemented for
    scalar*scalar (mod L) multiplication.
  - Support for the Ristretto group has been implemented for
    interoperability with wasm-crypto.
  - Improvements have been made to the test suite.
  - Portability improvements have been made.
  - getentropy() is now used on systems providing this system call.
  - randombytes_salsa20 has been renamed to randombytes_internal.
  - Support for NativeClient has been removed.
  - Most ((nonnull)) attributes have been relaxed to allow 0-length
    inputs to be NULL.
  - The -ftree-vectorize and -ftree-slp-vectorize compiler switches
    are now used, if available, for optimized builds.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1565956800">-  Add libsodium_configure_cpuid_chg.patch and call autoconf
  to regenerate configure script with proper CPUID checking.
  Required at least for PowerPC and ARM now that LTO enabled.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1566820800">-  Revert previous change about cpuid as previous change rejected
  in https://build.opensuse.org/request/show/724809
-  Disable LTO as bypass boo#1148184</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1658404800">- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767873600">- Security fix: [bsc#1256070, CVE-2025-15444, bsc#1255764, CVE-2025-69277]
  * check Y==Z in addition to X==0
  * Add patch libsodium-CVE-2025-15444.patch</changelog>
</package>
<package pkgid="97382fbec1e5769adf5dbdb5ba3a25e233a43c1aa20dcd8e6b05d62f4c0be874" name="libsodium-devel" arch="x86_64">
  <version epoch="0" ver="1.0.18" rel="150000.4.11.1"/>
  <changelog author="idonmez@suse.com" date="1446465600">- Update to 1.0.6
  * Optimized implementations of Blake2 have been added for modern
    Intel platforms. crypto_generichash() is now faster than MD5 and
    SHA1 implementations while being far more secure.
  * The crypto_sign_edwards25519sha512batch_*() functions have been
    tagged as deprecated.
  * sodium_compare() now works as documented, and compares numbers
    in little-endian format instead of behaving like memcmp().
  * sodium_runtime_has_ssse3() and sodium_runtime_has_sse41() have
    been added.</changelog>
  <changelog author="idonmez@suse.com" date="1448971200">- Follow upstream's lead and compile with -flto for &gt; 13.2 on x86
  and x86-64.</changelog>
  <changelog author="idonmez@suse.com" date="1449576000">- Update to version 1.0.7
  * Sandy2x, the fastest Curve25519 implementation ever,
    has been merged in, and is automatically used on CPUs
    supporting the AVX instructions set.
  * An SSE2 optimized implementation of Poly1305 was added,
    and is twice as fast as the portable one.
  * An SSSE3 optimized implementation of ChaCha20 was added,
    and is twice as fast as the portable one.
  * Faster sodium_increment() for common nonce sizes.
  * New helper functions have been added: sodium_is_zero()
    and sodium_add().</changelog>
  <changelog author="idonmez@suse.com" date="1451044800">- Update to version 1.0.8
  * Handle the case where the CPU supports AVX, but we are running
    on an hypervisor with AVX disabled/not supported.
  * Faster (2x) scalarmult_base() when using the ref10 implementation.</changelog>
  <changelog author="idonmez@suse.com" date="1459598400">- Update to version 1.0.9
  * A detached API was added to the ChaCha20-Poly1305 and AES256-GCM
    implementations.
  * The Argon2i password hashing function was added, and is accessible
    directly and through a new, high-level crypto_pwhash API.
    The scrypt function remains available as well.
  * A speed-record AVX2 implementation of BLAKE2b was added.
  * Countermeasures for Ed25519 signatures malleability have been
    added to match the irtf-cfrg-eddsa draft.
  * The HChaCha20 core function was implemented (crypto_core_hchacha20()).
  * No-op stubs were added for all AES256-GCM public functions even
    when compiled on non-Intel platforms.
  * crypt_generichash_blake2b_statebytes() was added.
  * New macros were added for the IETF variant of the ChaCha20-Poly1305
    construction.</changelog>
  <changelog author="idonmez@suse.com" date="1459857600">- Update to version 1.0.10
  * Compile fix update for older GCCs</changelog>
  <changelog author="i@marguerite.su" date="1470484800">- update version 1.0.11
  * sodium_init() is now thread-safe, and can be safely called
    multiple times.
  * Better support for old gcc versions.
  * AVX2 detection was fixed, resulting in faster BLAKE2b hashing
    on platforms where it was not properly detected.
  * The Sandy2x Curve25519 implementation was not as fast as
    expected on some platforms. This has been fixed.
  * The NativeClient target was improved. Most notably, it now
    supports optimized implementations, and uses pepper_49 by default.
  * The library can be compiled with recent Emscripten versions.
    Changes have been made to produce smaller code, and the default
    heap size was reduced in the standard version.
  * Decryption functions can now accept a NULL pointer for the output.
    This checks the MAC without writing the decrypted message.
  * crypto_generichash_final() now returns -1 if called twice.</changelog>
  <changelog author="idonmez@suse.com" date="1489406400">- Update to version 1.0.12
  * Ed25519ph was implemented, adding a multi-part signature API
    (crypto_sign_init(), crypto_sign_update(), crypto_sign_final_*()).
  * New constants and related accessors have been added for Scrypt
    and Argon2.
  * XChaCha20 has been implemented. Like XSalsa20, this construction
    extends the ChaCha20 cipher to accept a 192-bit nonce. This
    makes it safe to use ChaCha20 with random nonces.
  * crypto_secretbox, crypto_box and crypto_aead now offer variants
    leveraging XChaCha20.
  * SHA-2 is about 20% faster, which also gives a speed boost to
    signature and signature verification.
  * AVX2 implementations of Salsa20 and ChaCha20 have been added.
    They are twice as fast as the SSE2 implementations. The speed
    gain is even more significant on Windows, that previously
    didn't use vectorized implementations.
  * New high-level API: crypto_kdf, to easily derive one or more
    subkeys from a master key.
  * Siphash with a 128-bit output has been implemented, and is
    available as crypto_shorthash_siphashx_*.
  * New *_keygen() helpers functions have been added to create
    secret keys for all constructions. This improves code clarity
    and can prevent keys from being partially initialized.
  * A new randombytes_buf_deterministic() function was added to
    deterministically fill a memory region with pseudorandom data.
    This function can especially be useful to write reproducible tests.
  * A preliminary crypto_kx_*() API was added to compute shared
    session keys.
  * AVX2 detection is more reliable.</changelog>
  <changelog author="idonmez@suse.com" date="1506600000">- Update to version 1.0.14
  * Internal consistency checks failing and primitives used with
    dangerous/out-of-bounds/invalid parameters used to call abort(3).
    Now, a custom handler that doesn't return can be set with the
    set_sodium_misuse() function. It still aborts by default or if
    the handler ever returns. This is not a replacement for non-fatal,
    expected runtime errors. This handler will be only called in
    unexpected situations due to potential bugs in the library or in
    language bindings.
  * *_MESSAGEBYTES_MAX macros (and the corresponding _messagebytes_max()
    symbols) have been added to represent the maximum message size that
    can be safely handled by a primitive. Language bindings are
    encouraged to check user inputs against these maximum lengths.
  * The test suite has been extended to cover more edge cases.
  * crypto_sign_ed25519_pk_to_curve25519() now rejects points that
    are not on the curve, or not in the main subgroup.
  * Further changes have been made to ensure that smart compilers
    will not optimize out code that we don't want to be optimized.
  * The sodium_runtime_has_* symbols for CPU features detection are
    now defined as weak symbols, i.e. they can be replaced with an
    application-defined implementation. This can be useful to
    disable AVX* when temperature/power consumption is a concern.
  * crypto_kx_*() now aborts if called with no non-NULL pointers
    to store keys to.
  * SSE2 implementations of crypto_verify_*() have been added.
  * Passwords can be hashed using a specific algorithm with the new
    crypto_pwhash_str_alg() function.
  * Due to popular demand, base64 encoding (sodium_bin2base64())
    and decoding (sodium_base642bin()) have been implemented.
  * A new crypto_secretstream_*() API was added to safely encrypt
    files and multi-part messages.
  * The sodium_pad() and sodium_unpad() helper functions have been
    added in order to add &amp; remove padding.
  * An AVX512 optimized implementation of Argon2 has been added.
  * The crypto_pwhash_str_needs_rehash() function was added to check
    if a password hash string matches the given parameters, or if it
    needs an update.
  Updates from 1.0.13
  * An AVX2 optimized implementation of the Argon2 round function was added.
  * The Argon2id variant of Argon2 has been implemented. The high-level
    crypto_pwhash_str_verify() function automatically detects the
    algorithm and can verify both Argon2i and Argon2id hashed passwords.
    The default algorithm for newly hashed passwords remains Argon2i
    in this version to avoid breaking compatibility with verifiers
    running libsodium &lt;= 1.0.12.
  * A crypto_box_curve25519xchacha20poly1305_seal*() function set was implemented.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1507464000">- Refresh spec-file.
- Update to 1.0.15.
  * Release notes: https://github.com/jedisct1/libsodium/releases/tag/1.0.15
  * The default password hashing algorithm is now Argon2id.
  * The pwhash_str_verify() function can still verify Argon2i hashes without any changes,
    and pwhash() can still compute Argon2i hashes as well.
  * The aes128ctr primitive was removed. It was slow, non-standard, not authenticated,
    and didn't seem to be used by any opensource project.
  * Argon2id required at least 3 passes like Argon2i, despite a minimum of 1
    as defined by the OPSLIMIT_MIN constant. This has been fixed.
  * The secretstream construction was slightly changed to be consistent with forthcoming variants.
  * The Javascript and Webassembly versions have been merged, and the module now returns
    a .ready promise that will resolve after the Webassembly code is loaded and compiled.
  * Note that due to these incompatible changes, the library version major was bumped up.</changelog>
  <changelog author="idonmez@suse.com" date="1513166400">- Update to 1.0.16
  * Signatures computations and verifications are now way faster
    on 64-bit platforms with compilers supporting 128-bit
    arithmetic (gcc, clang, icc). This includes the WebAssembly
    target.
  * New low-level APIs for computations over edwards25519:
    crypto_scalarmult_ed25519(), crypto_scalarmult_ed25519_base(),
    crypto_core_ed25519_is_valid_point(), crypto_core_ed25519_add(),
    crypto_core_ed25519_sub() and crypto_core_ed25519_from_uniform()
    (elligator representative to point).
  * crypto_sign_open(), crypto_sign_verify_detached() and
    crypto_sign_edwards25519sha512batch_open` now reject public
    keys in non-canonical form in addition to low-order points.
  * The library can be built with ED25519_NONDETERMINISTIC defined
    in order to use synthetic nonces for EdDSA. This is disabled
    by default.
  * sodium_stackzero() was added to wipe content off the stack.
  * The Salsa20-based PRNG example is now thread-safe on platforms
    with support for thread-local storage, optionally mixes bits
    from RDRAND.
  * Argon2 and scrypt are slightly faster on Linux.</changelog>
  <changelog author="adam.majer@suse.de" date="1514548800">- Enable verbose make output when building tests</changelog>
  <changelog author="mpluskal@suse.com" date="1531396800">- Add gpg signature
- Modernise spec file with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1531483200">- Add baselibs.conf: build libsodium23-32bit, which is required by
  zeromq's -32bit packages.</changelog>
  <changelog author="ecsos@opensuse.org" date="1549108800">- Update to 1.0.17
  - Bug fix: sodium_pad() didn't properly support block sizes
    &gt;= 256 bytes.
  - JS/WebAssembly: some old iOS versions can't instantiate the
    WebAssembly module; fall back to Javascript on these.
  - JS/WebAssembly: compatibility with newer Emscripten versions.
  - Bug fix: crypto_pwhash_scryptsalsa208sha256_str_verify() and
    crypto_pwhash_scryptsalsa208sha256_str_needs_rehash()didn't
    returnEINVAL` on input strings with a short length, unlike
    their high-level counterpart.
  - Added a workaround for Visual Studio 2010 bug causing CPU
    features not to be detected.
  - Portability improvements.
  - Test vectors from Project Wycheproof have been added.
  - New low-level APIs for arithmetic mod the order of the prime
    order group:
  - crypto_core_ed25519_scalar_random(),
    crypto_core_ed25519_scalar_reduce(),
  - crypto_core_ed25519_scalar_invert(),
    crypto_core_ed25519_scalar_negate(),
  - crypto_core_ed25519_scalar_complement(),
    crypto_core_ed25519_scalar_add() and
    crypto_core_ed25519_scalar_sub().
  - New low-level APIs for scalar multiplication without clamping:
    crypto_scalarmult_ed25519_base_noclamp() and
    crypto_scalarmult_ed25519_noclamp().
    These new APIs are especially useful for blinding.
  - sodium_sub() has been implemented.
  - Support for WatchOS has been added.
  - getrandom(2) is now used on FreeBSD 12+.
  - The nonnull attribute has been added to all relevant
    prototypes.
  - More reliable AVX512 detection.
  - Javascript/Webassembly builds now use dynamic memory growth.</changelog>
  <changelog author="ecsos@opensuse.org" date="1560686400">- Update to 1.0.18
  - Enterprise versions of Visual Studio are now supported.
  - Visual Studio 2019 is now supported.
  - 32-bit binaries for Visual Studio 2010 are now provided.
  - A test designed to trigger an OOM condition didn't work on
    Linux systems with memory overcommit turned on. It has been
    removed in order to fix Ansible builds.
  - Emscripten: print and printErr functions are overridden to send
    errors to the console, if there is one.
  - Emscripten: UTF8ToString() is now exported since
    Pointer_stringify() has been deprecated.
  - Libsodium version detection has been fixed in the CMake recipe.
  - Generic hashing got a 10% speedup on AVX2.
  - New target: WebAssembly/WASI
    (compile with dist-builds/wasm32-wasi.sh).
  - New functions to map a hash to an edwards25519 point
    or get a random point:
    core_ed25519_from_hash() and core_ed25519_random().
  - crypto_core_ed25519_scalar_mul() has been implemented for
    scalar*scalar (mod L) multiplication.
  - Support for the Ristretto group has been implemented for
    interoperability with wasm-crypto.
  - Improvements have been made to the test suite.
  - Portability improvements have been made.
  - getentropy() is now used on systems providing this system call.
  - randombytes_salsa20 has been renamed to randombytes_internal.
  - Support for NativeClient has been removed.
  - Most ((nonnull)) attributes have been relaxed to allow 0-length
    inputs to be NULL.
  - The -ftree-vectorize and -ftree-slp-vectorize compiler switches
    are now used, if available, for optimized builds.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1565956800">-  Add libsodium_configure_cpuid_chg.patch and call autoconf
  to regenerate configure script with proper CPUID checking.
  Required at least for PowerPC and ARM now that LTO enabled.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1566820800">-  Revert previous change about cpuid as previous change rejected
  in https://build.opensuse.org/request/show/724809
-  Disable LTO as bypass boo#1148184</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1658404800">- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767873600">- Security fix: [bsc#1256070, CVE-2025-15444]
  * check Y==Z in addition to X==0
  * Add patch libsodium-CVE-2025-15444.patch</changelog>
</package>
<package pkgid="6455a8362d83316bcb84e944a35f5a5a131d6e0d85038cb4daa4e9eac373783c" name="libsodium-devel" arch="x86_64">
  <version epoch="0" ver="1.0.18" rel="150000.4.14.1"/>
  <changelog author="idonmez@suse.com" date="1446465600">- Update to 1.0.6
  * Optimized implementations of Blake2 have been added for modern
    Intel platforms. crypto_generichash() is now faster than MD5 and
    SHA1 implementations while being far more secure.
  * The crypto_sign_edwards25519sha512batch_*() functions have been
    tagged as deprecated.
  * sodium_compare() now works as documented, and compares numbers
    in little-endian format instead of behaving like memcmp().
  * sodium_runtime_has_ssse3() and sodium_runtime_has_sse41() have
    been added.</changelog>
  <changelog author="idonmez@suse.com" date="1448971200">- Follow upstream's lead and compile with -flto for &gt; 13.2 on x86
  and x86-64.</changelog>
  <changelog author="idonmez@suse.com" date="1449576000">- Update to version 1.0.7
  * Sandy2x, the fastest Curve25519 implementation ever,
    has been merged in, and is automatically used on CPUs
    supporting the AVX instructions set.
  * An SSE2 optimized implementation of Poly1305 was added,
    and is twice as fast as the portable one.
  * An SSSE3 optimized implementation of ChaCha20 was added,
    and is twice as fast as the portable one.
  * Faster sodium_increment() for common nonce sizes.
  * New helper functions have been added: sodium_is_zero()
    and sodium_add().</changelog>
  <changelog author="idonmez@suse.com" date="1451044800">- Update to version 1.0.8
  * Handle the case where the CPU supports AVX, but we are running
    on an hypervisor with AVX disabled/not supported.
  * Faster (2x) scalarmult_base() when using the ref10 implementation.</changelog>
  <changelog author="idonmez@suse.com" date="1459598400">- Update to version 1.0.9
  * A detached API was added to the ChaCha20-Poly1305 and AES256-GCM
    implementations.
  * The Argon2i password hashing function was added, and is accessible
    directly and through a new, high-level crypto_pwhash API.
    The scrypt function remains available as well.
  * A speed-record AVX2 implementation of BLAKE2b was added.
  * Countermeasures for Ed25519 signatures malleability have been
    added to match the irtf-cfrg-eddsa draft.
  * The HChaCha20 core function was implemented (crypto_core_hchacha20()).
  * No-op stubs were added for all AES256-GCM public functions even
    when compiled on non-Intel platforms.
  * crypt_generichash_blake2b_statebytes() was added.
  * New macros were added for the IETF variant of the ChaCha20-Poly1305
    construction.</changelog>
  <changelog author="idonmez@suse.com" date="1459857600">- Update to version 1.0.10
  * Compile fix update for older GCCs</changelog>
  <changelog author="i@marguerite.su" date="1470484800">- update version 1.0.11
  * sodium_init() is now thread-safe, and can be safely called
    multiple times.
  * Better support for old gcc versions.
  * AVX2 detection was fixed, resulting in faster BLAKE2b hashing
    on platforms where it was not properly detected.
  * The Sandy2x Curve25519 implementation was not as fast as
    expected on some platforms. This has been fixed.
  * The NativeClient target was improved. Most notably, it now
    supports optimized implementations, and uses pepper_49 by default.
  * The library can be compiled with recent Emscripten versions.
    Changes have been made to produce smaller code, and the default
    heap size was reduced in the standard version.
  * Decryption functions can now accept a NULL pointer for the output.
    This checks the MAC without writing the decrypted message.
  * crypto_generichash_final() now returns -1 if called twice.</changelog>
  <changelog author="idonmez@suse.com" date="1489406400">- Update to version 1.0.12
  * Ed25519ph was implemented, adding a multi-part signature API
    (crypto_sign_init(), crypto_sign_update(), crypto_sign_final_*()).
  * New constants and related accessors have been added for Scrypt
    and Argon2.
  * XChaCha20 has been implemented. Like XSalsa20, this construction
    extends the ChaCha20 cipher to accept a 192-bit nonce. This
    makes it safe to use ChaCha20 with random nonces.
  * crypto_secretbox, crypto_box and crypto_aead now offer variants
    leveraging XChaCha20.
  * SHA-2 is about 20% faster, which also gives a speed boost to
    signature and signature verification.
  * AVX2 implementations of Salsa20 and ChaCha20 have been added.
    They are twice as fast as the SSE2 implementations. The speed
    gain is even more significant on Windows, that previously
    didn't use vectorized implementations.
  * New high-level API: crypto_kdf, to easily derive one or more
    subkeys from a master key.
  * Siphash with a 128-bit output has been implemented, and is
    available as crypto_shorthash_siphashx_*.
  * New *_keygen() helpers functions have been added to create
    secret keys for all constructions. This improves code clarity
    and can prevent keys from being partially initialized.
  * A new randombytes_buf_deterministic() function was added to
    deterministically fill a memory region with pseudorandom data.
    This function can especially be useful to write reproducible tests.
  * A preliminary crypto_kx_*() API was added to compute shared
    session keys.
  * AVX2 detection is more reliable.</changelog>
  <changelog author="idonmez@suse.com" date="1506600000">- Update to version 1.0.14
  * Internal consistency checks failing and primitives used with
    dangerous/out-of-bounds/invalid parameters used to call abort(3).
    Now, a custom handler that doesn't return can be set with the
    set_sodium_misuse() function. It still aborts by default or if
    the handler ever returns. This is not a replacement for non-fatal,
    expected runtime errors. This handler will be only called in
    unexpected situations due to potential bugs in the library or in
    language bindings.
  * *_MESSAGEBYTES_MAX macros (and the corresponding _messagebytes_max()
    symbols) have been added to represent the maximum message size that
    can be safely handled by a primitive. Language bindings are
    encouraged to check user inputs against these maximum lengths.
  * The test suite has been extended to cover more edge cases.
  * crypto_sign_ed25519_pk_to_curve25519() now rejects points that
    are not on the curve, or not in the main subgroup.
  * Further changes have been made to ensure that smart compilers
    will not optimize out code that we don't want to be optimized.
  * The sodium_runtime_has_* symbols for CPU features detection are
    now defined as weak symbols, i.e. they can be replaced with an
    application-defined implementation. This can be useful to
    disable AVX* when temperature/power consumption is a concern.
  * crypto_kx_*() now aborts if called with no non-NULL pointers
    to store keys to.
  * SSE2 implementations of crypto_verify_*() have been added.
  * Passwords can be hashed using a specific algorithm with the new
    crypto_pwhash_str_alg() function.
  * Due to popular demand, base64 encoding (sodium_bin2base64())
    and decoding (sodium_base642bin()) have been implemented.
  * A new crypto_secretstream_*() API was added to safely encrypt
    files and multi-part messages.
  * The sodium_pad() and sodium_unpad() helper functions have been
    added in order to add &amp; remove padding.
  * An AVX512 optimized implementation of Argon2 has been added.
  * The crypto_pwhash_str_needs_rehash() function was added to check
    if a password hash string matches the given parameters, or if it
    needs an update.
  Updates from 1.0.13
  * An AVX2 optimized implementation of the Argon2 round function was added.
  * The Argon2id variant of Argon2 has been implemented. The high-level
    crypto_pwhash_str_verify() function automatically detects the
    algorithm and can verify both Argon2i and Argon2id hashed passwords.
    The default algorithm for newly hashed passwords remains Argon2i
    in this version to avoid breaking compatibility with verifiers
    running libsodium &lt;= 1.0.12.
  * A crypto_box_curve25519xchacha20poly1305_seal*() function set was implemented.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1507464000">- Refresh spec-file.
- Update to 1.0.15.
  * Release notes: https://github.com/jedisct1/libsodium/releases/tag/1.0.15
  * The default password hashing algorithm is now Argon2id.
  * The pwhash_str_verify() function can still verify Argon2i hashes without any changes,
    and pwhash() can still compute Argon2i hashes as well.
  * The aes128ctr primitive was removed. It was slow, non-standard, not authenticated,
    and didn't seem to be used by any opensource project.
  * Argon2id required at least 3 passes like Argon2i, despite a minimum of 1
    as defined by the OPSLIMIT_MIN constant. This has been fixed.
  * The secretstream construction was slightly changed to be consistent with forthcoming variants.
  * The Javascript and Webassembly versions have been merged, and the module now returns
    a .ready promise that will resolve after the Webassembly code is loaded and compiled.
  * Note that due to these incompatible changes, the library version major was bumped up.</changelog>
  <changelog author="idonmez@suse.com" date="1513166400">- Update to 1.0.16
  * Signatures computations and verifications are now way faster
    on 64-bit platforms with compilers supporting 128-bit
    arithmetic (gcc, clang, icc). This includes the WebAssembly
    target.
  * New low-level APIs for computations over edwards25519:
    crypto_scalarmult_ed25519(), crypto_scalarmult_ed25519_base(),
    crypto_core_ed25519_is_valid_point(), crypto_core_ed25519_add(),
    crypto_core_ed25519_sub() and crypto_core_ed25519_from_uniform()
    (elligator representative to point).
  * crypto_sign_open(), crypto_sign_verify_detached() and
    crypto_sign_edwards25519sha512batch_open` now reject public
    keys in non-canonical form in addition to low-order points.
  * The library can be built with ED25519_NONDETERMINISTIC defined
    in order to use synthetic nonces for EdDSA. This is disabled
    by default.
  * sodium_stackzero() was added to wipe content off the stack.
  * The Salsa20-based PRNG example is now thread-safe on platforms
    with support for thread-local storage, optionally mixes bits
    from RDRAND.
  * Argon2 and scrypt are slightly faster on Linux.</changelog>
  <changelog author="adam.majer@suse.de" date="1514548800">- Enable verbose make output when building tests</changelog>
  <changelog author="mpluskal@suse.com" date="1531396800">- Add gpg signature
- Modernise spec file with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1531483200">- Add baselibs.conf: build libsodium23-32bit, which is required by
  zeromq's -32bit packages.</changelog>
  <changelog author="ecsos@opensuse.org" date="1549108800">- Update to 1.0.17
  - Bug fix: sodium_pad() didn't properly support block sizes
    &gt;= 256 bytes.
  - JS/WebAssembly: some old iOS versions can't instantiate the
    WebAssembly module; fall back to Javascript on these.
  - JS/WebAssembly: compatibility with newer Emscripten versions.
  - Bug fix: crypto_pwhash_scryptsalsa208sha256_str_verify() and
    crypto_pwhash_scryptsalsa208sha256_str_needs_rehash()didn't
    returnEINVAL` on input strings with a short length, unlike
    their high-level counterpart.
  - Added a workaround for Visual Studio 2010 bug causing CPU
    features not to be detected.
  - Portability improvements.
  - Test vectors from Project Wycheproof have been added.
  - New low-level APIs for arithmetic mod the order of the prime
    order group:
  - crypto_core_ed25519_scalar_random(),
    crypto_core_ed25519_scalar_reduce(),
  - crypto_core_ed25519_scalar_invert(),
    crypto_core_ed25519_scalar_negate(),
  - crypto_core_ed25519_scalar_complement(),
    crypto_core_ed25519_scalar_add() and
    crypto_core_ed25519_scalar_sub().
  - New low-level APIs for scalar multiplication without clamping:
    crypto_scalarmult_ed25519_base_noclamp() and
    crypto_scalarmult_ed25519_noclamp().
    These new APIs are especially useful for blinding.
  - sodium_sub() has been implemented.
  - Support for WatchOS has been added.
  - getrandom(2) is now used on FreeBSD 12+.
  - The nonnull attribute has been added to all relevant
    prototypes.
  - More reliable AVX512 detection.
  - Javascript/Webassembly builds now use dynamic memory growth.</changelog>
  <changelog author="ecsos@opensuse.org" date="1560686400">- Update to 1.0.18
  - Enterprise versions of Visual Studio are now supported.
  - Visual Studio 2019 is now supported.
  - 32-bit binaries for Visual Studio 2010 are now provided.
  - A test designed to trigger an OOM condition didn't work on
    Linux systems with memory overcommit turned on. It has been
    removed in order to fix Ansible builds.
  - Emscripten: print and printErr functions are overridden to send
    errors to the console, if there is one.
  - Emscripten: UTF8ToString() is now exported since
    Pointer_stringify() has been deprecated.
  - Libsodium version detection has been fixed in the CMake recipe.
  - Generic hashing got a 10% speedup on AVX2.
  - New target: WebAssembly/WASI
    (compile with dist-builds/wasm32-wasi.sh).
  - New functions to map a hash to an edwards25519 point
    or get a random point:
    core_ed25519_from_hash() and core_ed25519_random().
  - crypto_core_ed25519_scalar_mul() has been implemented for
    scalar*scalar (mod L) multiplication.
  - Support for the Ristretto group has been implemented for
    interoperability with wasm-crypto.
  - Improvements have been made to the test suite.
  - Portability improvements have been made.
  - getentropy() is now used on systems providing this system call.
  - randombytes_salsa20 has been renamed to randombytes_internal.
  - Support for NativeClient has been removed.
  - Most ((nonnull)) attributes have been relaxed to allow 0-length
    inputs to be NULL.
  - The -ftree-vectorize and -ftree-slp-vectorize compiler switches
    are now used, if available, for optimized builds.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1565956800">-  Add libsodium_configure_cpuid_chg.patch and call autoconf
  to regenerate configure script with proper CPUID checking.
  Required at least for PowerPC and ARM now that LTO enabled.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1566820800">-  Revert previous change about cpuid as previous change rejected
  in https://build.opensuse.org/request/show/724809
-  Disable LTO as bypass boo#1148184</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1658404800">- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767873600">- Security fix: [bsc#1256070, CVE-2025-15444, bsc#1255764, CVE-2025-69277]
  * check Y==Z in addition to X==0
  * Add patch libsodium-CVE-2025-15444.patch</changelog>
</package>
<package pkgid="289168b6604e8c7ef85723a82687b5d2a4a22a81591430ea4e6a90ac2f976909" name="libsodium23" arch="x86_64">
  <version epoch="0" ver="1.0.18" rel="150000.4.11.1"/>
  <changelog author="idonmez@suse.com" date="1446465600">- Update to 1.0.6
  * Optimized implementations of Blake2 have been added for modern
    Intel platforms. crypto_generichash() is now faster than MD5 and
    SHA1 implementations while being far more secure.
  * The crypto_sign_edwards25519sha512batch_*() functions have been
    tagged as deprecated.
  * sodium_compare() now works as documented, and compares numbers
    in little-endian format instead of behaving like memcmp().
  * sodium_runtime_has_ssse3() and sodium_runtime_has_sse41() have
    been added.</changelog>
  <changelog author="idonmez@suse.com" date="1448971200">- Follow upstream's lead and compile with -flto for &gt; 13.2 on x86
  and x86-64.</changelog>
  <changelog author="idonmez@suse.com" date="1449576000">- Update to version 1.0.7
  * Sandy2x, the fastest Curve25519 implementation ever,
    has been merged in, and is automatically used on CPUs
    supporting the AVX instructions set.
  * An SSE2 optimized implementation of Poly1305 was added,
    and is twice as fast as the portable one.
  * An SSSE3 optimized implementation of ChaCha20 was added,
    and is twice as fast as the portable one.
  * Faster sodium_increment() for common nonce sizes.
  * New helper functions have been added: sodium_is_zero()
    and sodium_add().</changelog>
  <changelog author="idonmez@suse.com" date="1451044800">- Update to version 1.0.8
  * Handle the case where the CPU supports AVX, but we are running
    on an hypervisor with AVX disabled/not supported.
  * Faster (2x) scalarmult_base() when using the ref10 implementation.</changelog>
  <changelog author="idonmez@suse.com" date="1459598400">- Update to version 1.0.9
  * A detached API was added to the ChaCha20-Poly1305 and AES256-GCM
    implementations.
  * The Argon2i password hashing function was added, and is accessible
    directly and through a new, high-level crypto_pwhash API.
    The scrypt function remains available as well.
  * A speed-record AVX2 implementation of BLAKE2b was added.
  * Countermeasures for Ed25519 signatures malleability have been
    added to match the irtf-cfrg-eddsa draft.
  * The HChaCha20 core function was implemented (crypto_core_hchacha20()).
  * No-op stubs were added for all AES256-GCM public functions even
    when compiled on non-Intel platforms.
  * crypt_generichash_blake2b_statebytes() was added.
  * New macros were added for the IETF variant of the ChaCha20-Poly1305
    construction.</changelog>
  <changelog author="idonmez@suse.com" date="1459857600">- Update to version 1.0.10
  * Compile fix update for older GCCs</changelog>
  <changelog author="i@marguerite.su" date="1470484800">- update version 1.0.11
  * sodium_init() is now thread-safe, and can be safely called
    multiple times.
  * Better support for old gcc versions.
  * AVX2 detection was fixed, resulting in faster BLAKE2b hashing
    on platforms where it was not properly detected.
  * The Sandy2x Curve25519 implementation was not as fast as
    expected on some platforms. This has been fixed.
  * The NativeClient target was improved. Most notably, it now
    supports optimized implementations, and uses pepper_49 by default.
  * The library can be compiled with recent Emscripten versions.
    Changes have been made to produce smaller code, and the default
    heap size was reduced in the standard version.
  * Decryption functions can now accept a NULL pointer for the output.
    This checks the MAC without writing the decrypted message.
  * crypto_generichash_final() now returns -1 if called twice.</changelog>
  <changelog author="idonmez@suse.com" date="1489406400">- Update to version 1.0.12
  * Ed25519ph was implemented, adding a multi-part signature API
    (crypto_sign_init(), crypto_sign_update(), crypto_sign_final_*()).
  * New constants and related accessors have been added for Scrypt
    and Argon2.
  * XChaCha20 has been implemented. Like XSalsa20, this construction
    extends the ChaCha20 cipher to accept a 192-bit nonce. This
    makes it safe to use ChaCha20 with random nonces.
  * crypto_secretbox, crypto_box and crypto_aead now offer variants
    leveraging XChaCha20.
  * SHA-2 is about 20% faster, which also gives a speed boost to
    signature and signature verification.
  * AVX2 implementations of Salsa20 and ChaCha20 have been added.
    They are twice as fast as the SSE2 implementations. The speed
    gain is even more significant on Windows, that previously
    didn't use vectorized implementations.
  * New high-level API: crypto_kdf, to easily derive one or more
    subkeys from a master key.
  * Siphash with a 128-bit output has been implemented, and is
    available as crypto_shorthash_siphashx_*.
  * New *_keygen() helpers functions have been added to create
    secret keys for all constructions. This improves code clarity
    and can prevent keys from being partially initialized.
  * A new randombytes_buf_deterministic() function was added to
    deterministically fill a memory region with pseudorandom data.
    This function can especially be useful to write reproducible tests.
  * A preliminary crypto_kx_*() API was added to compute shared
    session keys.
  * AVX2 detection is more reliable.</changelog>
  <changelog author="idonmez@suse.com" date="1506600000">- Update to version 1.0.14
  * Internal consistency checks failing and primitives used with
    dangerous/out-of-bounds/invalid parameters used to call abort(3).
    Now, a custom handler that doesn't return can be set with the
    set_sodium_misuse() function. It still aborts by default or if
    the handler ever returns. This is not a replacement for non-fatal,
    expected runtime errors. This handler will be only called in
    unexpected situations due to potential bugs in the library or in
    language bindings.
  * *_MESSAGEBYTES_MAX macros (and the corresponding _messagebytes_max()
    symbols) have been added to represent the maximum message size that
    can be safely handled by a primitive. Language bindings are
    encouraged to check user inputs against these maximum lengths.
  * The test suite has been extended to cover more edge cases.
  * crypto_sign_ed25519_pk_to_curve25519() now rejects points that
    are not on the curve, or not in the main subgroup.
  * Further changes have been made to ensure that smart compilers
    will not optimize out code that we don't want to be optimized.
  * The sodium_runtime_has_* symbols for CPU features detection are
    now defined as weak symbols, i.e. they can be replaced with an
    application-defined implementation. This can be useful to
    disable AVX* when temperature/power consumption is a concern.
  * crypto_kx_*() now aborts if called with no non-NULL pointers
    to store keys to.
  * SSE2 implementations of crypto_verify_*() have been added.
  * Passwords can be hashed using a specific algorithm with the new
    crypto_pwhash_str_alg() function.
  * Due to popular demand, base64 encoding (sodium_bin2base64())
    and decoding (sodium_base642bin()) have been implemented.
  * A new crypto_secretstream_*() API was added to safely encrypt
    files and multi-part messages.
  * The sodium_pad() and sodium_unpad() helper functions have been
    added in order to add &amp; remove padding.
  * An AVX512 optimized implementation of Argon2 has been added.
  * The crypto_pwhash_str_needs_rehash() function was added to check
    if a password hash string matches the given parameters, or if it
    needs an update.
  Updates from 1.0.13
  * An AVX2 optimized implementation of the Argon2 round function was added.
  * The Argon2id variant of Argon2 has been implemented. The high-level
    crypto_pwhash_str_verify() function automatically detects the
    algorithm and can verify both Argon2i and Argon2id hashed passwords.
    The default algorithm for newly hashed passwords remains Argon2i
    in this version to avoid breaking compatibility with verifiers
    running libsodium &lt;= 1.0.12.
  * A crypto_box_curve25519xchacha20poly1305_seal*() function set was implemented.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1507464000">- Refresh spec-file.
- Update to 1.0.15.
  * Release notes: https://github.com/jedisct1/libsodium/releases/tag/1.0.15
  * The default password hashing algorithm is now Argon2id.
  * The pwhash_str_verify() function can still verify Argon2i hashes without any changes,
    and pwhash() can still compute Argon2i hashes as well.
  * The aes128ctr primitive was removed. It was slow, non-standard, not authenticated,
    and didn't seem to be used by any opensource project.
  * Argon2id required at least 3 passes like Argon2i, despite a minimum of 1
    as defined by the OPSLIMIT_MIN constant. This has been fixed.
  * The secretstream construction was slightly changed to be consistent with forthcoming variants.
  * The Javascript and Webassembly versions have been merged, and the module now returns
    a .ready promise that will resolve after the Webassembly code is loaded and compiled.
  * Note that due to these incompatible changes, the library version major was bumped up.</changelog>
  <changelog author="idonmez@suse.com" date="1513166400">- Update to 1.0.16
  * Signatures computations and verifications are now way faster
    on 64-bit platforms with compilers supporting 128-bit
    arithmetic (gcc, clang, icc). This includes the WebAssembly
    target.
  * New low-level APIs for computations over edwards25519:
    crypto_scalarmult_ed25519(), crypto_scalarmult_ed25519_base(),
    crypto_core_ed25519_is_valid_point(), crypto_core_ed25519_add(),
    crypto_core_ed25519_sub() and crypto_core_ed25519_from_uniform()
    (elligator representative to point).
  * crypto_sign_open(), crypto_sign_verify_detached() and
    crypto_sign_edwards25519sha512batch_open` now reject public
    keys in non-canonical form in addition to low-order points.
  * The library can be built with ED25519_NONDETERMINISTIC defined
    in order to use synthetic nonces for EdDSA. This is disabled
    by default.
  * sodium_stackzero() was added to wipe content off the stack.
  * The Salsa20-based PRNG example is now thread-safe on platforms
    with support for thread-local storage, optionally mixes bits
    from RDRAND.
  * Argon2 and scrypt are slightly faster on Linux.</changelog>
  <changelog author="adam.majer@suse.de" date="1514548800">- Enable verbose make output when building tests</changelog>
  <changelog author="mpluskal@suse.com" date="1531396800">- Add gpg signature
- Modernise spec file with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1531483200">- Add baselibs.conf: build libsodium23-32bit, which is required by
  zeromq's -32bit packages.</changelog>
  <changelog author="ecsos@opensuse.org" date="1549108800">- Update to 1.0.17
  - Bug fix: sodium_pad() didn't properly support block sizes
    &gt;= 256 bytes.
  - JS/WebAssembly: some old iOS versions can't instantiate the
    WebAssembly module; fall back to Javascript on these.
  - JS/WebAssembly: compatibility with newer Emscripten versions.
  - Bug fix: crypto_pwhash_scryptsalsa208sha256_str_verify() and
    crypto_pwhash_scryptsalsa208sha256_str_needs_rehash()didn't
    returnEINVAL` on input strings with a short length, unlike
    their high-level counterpart.
  - Added a workaround for Visual Studio 2010 bug causing CPU
    features not to be detected.
  - Portability improvements.
  - Test vectors from Project Wycheproof have been added.
  - New low-level APIs for arithmetic mod the order of the prime
    order group:
  - crypto_core_ed25519_scalar_random(),
    crypto_core_ed25519_scalar_reduce(),
  - crypto_core_ed25519_scalar_invert(),
    crypto_core_ed25519_scalar_negate(),
  - crypto_core_ed25519_scalar_complement(),
    crypto_core_ed25519_scalar_add() and
    crypto_core_ed25519_scalar_sub().
  - New low-level APIs for scalar multiplication without clamping:
    crypto_scalarmult_ed25519_base_noclamp() and
    crypto_scalarmult_ed25519_noclamp().
    These new APIs are especially useful for blinding.
  - sodium_sub() has been implemented.
  - Support for WatchOS has been added.
  - getrandom(2) is now used on FreeBSD 12+.
  - The nonnull attribute has been added to all relevant
    prototypes.
  - More reliable AVX512 detection.
  - Javascript/Webassembly builds now use dynamic memory growth.</changelog>
  <changelog author="ecsos@opensuse.org" date="1560686400">- Update to 1.0.18
  - Enterprise versions of Visual Studio are now supported.
  - Visual Studio 2019 is now supported.
  - 32-bit binaries for Visual Studio 2010 are now provided.
  - A test designed to trigger an OOM condition didn't work on
    Linux systems with memory overcommit turned on. It has been
    removed in order to fix Ansible builds.
  - Emscripten: print and printErr functions are overridden to send
    errors to the console, if there is one.
  - Emscripten: UTF8ToString() is now exported since
    Pointer_stringify() has been deprecated.
  - Libsodium version detection has been fixed in the CMake recipe.
  - Generic hashing got a 10% speedup on AVX2.
  - New target: WebAssembly/WASI
    (compile with dist-builds/wasm32-wasi.sh).
  - New functions to map a hash to an edwards25519 point
    or get a random point:
    core_ed25519_from_hash() and core_ed25519_random().
  - crypto_core_ed25519_scalar_mul() has been implemented for
    scalar*scalar (mod L) multiplication.
  - Support for the Ristretto group has been implemented for
    interoperability with wasm-crypto.
  - Improvements have been made to the test suite.
  - Portability improvements have been made.
  - getentropy() is now used on systems providing this system call.
  - randombytes_salsa20 has been renamed to randombytes_internal.
  - Support for NativeClient has been removed.
  - Most ((nonnull)) attributes have been relaxed to allow 0-length
    inputs to be NULL.
  - The -ftree-vectorize and -ftree-slp-vectorize compiler switches
    are now used, if available, for optimized builds.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1565956800">-  Add libsodium_configure_cpuid_chg.patch and call autoconf
  to regenerate configure script with proper CPUID checking.
  Required at least for PowerPC and ARM now that LTO enabled.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1566820800">-  Revert previous change about cpuid as previous change rejected
  in https://build.opensuse.org/request/show/724809
-  Disable LTO as bypass boo#1148184</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1658404800">- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767873600">- Security fix: [bsc#1256070, CVE-2025-15444]
  * check Y==Z in addition to X==0
  * Add patch libsodium-CVE-2025-15444.patch</changelog>
</package>
<package pkgid="86b3caf3d23bbd3090aa46cd14465bc11e3ce72e4973af5b45f82d48d63d5463" name="libsodium23" arch="x86_64">
  <version epoch="0" ver="1.0.18" rel="150000.4.14.1"/>
  <changelog author="idonmez@suse.com" date="1446465600">- Update to 1.0.6
  * Optimized implementations of Blake2 have been added for modern
    Intel platforms. crypto_generichash() is now faster than MD5 and
    SHA1 implementations while being far more secure.
  * The crypto_sign_edwards25519sha512batch_*() functions have been
    tagged as deprecated.
  * sodium_compare() now works as documented, and compares numbers
    in little-endian format instead of behaving like memcmp().
  * sodium_runtime_has_ssse3() and sodium_runtime_has_sse41() have
    been added.</changelog>
  <changelog author="idonmez@suse.com" date="1448971200">- Follow upstream's lead and compile with -flto for &gt; 13.2 on x86
  and x86-64.</changelog>
  <changelog author="idonmez@suse.com" date="1449576000">- Update to version 1.0.7
  * Sandy2x, the fastest Curve25519 implementation ever,
    has been merged in, and is automatically used on CPUs
    supporting the AVX instructions set.
  * An SSE2 optimized implementation of Poly1305 was added,
    and is twice as fast as the portable one.
  * An SSSE3 optimized implementation of ChaCha20 was added,
    and is twice as fast as the portable one.
  * Faster sodium_increment() for common nonce sizes.
  * New helper functions have been added: sodium_is_zero()
    and sodium_add().</changelog>
  <changelog author="idonmez@suse.com" date="1451044800">- Update to version 1.0.8
  * Handle the case where the CPU supports AVX, but we are running
    on an hypervisor with AVX disabled/not supported.
  * Faster (2x) scalarmult_base() when using the ref10 implementation.</changelog>
  <changelog author="idonmez@suse.com" date="1459598400">- Update to version 1.0.9
  * A detached API was added to the ChaCha20-Poly1305 and AES256-GCM
    implementations.
  * The Argon2i password hashing function was added, and is accessible
    directly and through a new, high-level crypto_pwhash API.
    The scrypt function remains available as well.
  * A speed-record AVX2 implementation of BLAKE2b was added.
  * Countermeasures for Ed25519 signatures malleability have been
    added to match the irtf-cfrg-eddsa draft.
  * The HChaCha20 core function was implemented (crypto_core_hchacha20()).
  * No-op stubs were added for all AES256-GCM public functions even
    when compiled on non-Intel platforms.
  * crypt_generichash_blake2b_statebytes() was added.
  * New macros were added for the IETF variant of the ChaCha20-Poly1305
    construction.</changelog>
  <changelog author="idonmez@suse.com" date="1459857600">- Update to version 1.0.10
  * Compile fix update for older GCCs</changelog>
  <changelog author="i@marguerite.su" date="1470484800">- update version 1.0.11
  * sodium_init() is now thread-safe, and can be safely called
    multiple times.
  * Better support for old gcc versions.
  * AVX2 detection was fixed, resulting in faster BLAKE2b hashing
    on platforms where it was not properly detected.
  * The Sandy2x Curve25519 implementation was not as fast as
    expected on some platforms. This has been fixed.
  * The NativeClient target was improved. Most notably, it now
    supports optimized implementations, and uses pepper_49 by default.
  * The library can be compiled with recent Emscripten versions.
    Changes have been made to produce smaller code, and the default
    heap size was reduced in the standard version.
  * Decryption functions can now accept a NULL pointer for the output.
    This checks the MAC without writing the decrypted message.
  * crypto_generichash_final() now returns -1 if called twice.</changelog>
  <changelog author="idonmez@suse.com" date="1489406400">- Update to version 1.0.12
  * Ed25519ph was implemented, adding a multi-part signature API
    (crypto_sign_init(), crypto_sign_update(), crypto_sign_final_*()).
  * New constants and related accessors have been added for Scrypt
    and Argon2.
  * XChaCha20 has been implemented. Like XSalsa20, this construction
    extends the ChaCha20 cipher to accept a 192-bit nonce. This
    makes it safe to use ChaCha20 with random nonces.
  * crypto_secretbox, crypto_box and crypto_aead now offer variants
    leveraging XChaCha20.
  * SHA-2 is about 20% faster, which also gives a speed boost to
    signature and signature verification.
  * AVX2 implementations of Salsa20 and ChaCha20 have been added.
    They are twice as fast as the SSE2 implementations. The speed
    gain is even more significant on Windows, that previously
    didn't use vectorized implementations.
  * New high-level API: crypto_kdf, to easily derive one or more
    subkeys from a master key.
  * Siphash with a 128-bit output has been implemented, and is
    available as crypto_shorthash_siphashx_*.
  * New *_keygen() helpers functions have been added to create
    secret keys for all constructions. This improves code clarity
    and can prevent keys from being partially initialized.
  * A new randombytes_buf_deterministic() function was added to
    deterministically fill a memory region with pseudorandom data.
    This function can especially be useful to write reproducible tests.
  * A preliminary crypto_kx_*() API was added to compute shared
    session keys.
  * AVX2 detection is more reliable.</changelog>
  <changelog author="idonmez@suse.com" date="1506600000">- Update to version 1.0.14
  * Internal consistency checks failing and primitives used with
    dangerous/out-of-bounds/invalid parameters used to call abort(3).
    Now, a custom handler that doesn't return can be set with the
    set_sodium_misuse() function. It still aborts by default or if
    the handler ever returns. This is not a replacement for non-fatal,
    expected runtime errors. This handler will be only called in
    unexpected situations due to potential bugs in the library or in
    language bindings.
  * *_MESSAGEBYTES_MAX macros (and the corresponding _messagebytes_max()
    symbols) have been added to represent the maximum message size that
    can be safely handled by a primitive. Language bindings are
    encouraged to check user inputs against these maximum lengths.
  * The test suite has been extended to cover more edge cases.
  * crypto_sign_ed25519_pk_to_curve25519() now rejects points that
    are not on the curve, or not in the main subgroup.
  * Further changes have been made to ensure that smart compilers
    will not optimize out code that we don't want to be optimized.
  * The sodium_runtime_has_* symbols for CPU features detection are
    now defined as weak symbols, i.e. they can be replaced with an
    application-defined implementation. This can be useful to
    disable AVX* when temperature/power consumption is a concern.
  * crypto_kx_*() now aborts if called with no non-NULL pointers
    to store keys to.
  * SSE2 implementations of crypto_verify_*() have been added.
  * Passwords can be hashed using a specific algorithm with the new
    crypto_pwhash_str_alg() function.
  * Due to popular demand, base64 encoding (sodium_bin2base64())
    and decoding (sodium_base642bin()) have been implemented.
  * A new crypto_secretstream_*() API was added to safely encrypt
    files and multi-part messages.
  * The sodium_pad() and sodium_unpad() helper functions have been
    added in order to add &amp; remove padding.
  * An AVX512 optimized implementation of Argon2 has been added.
  * The crypto_pwhash_str_needs_rehash() function was added to check
    if a password hash string matches the given parameters, or if it
    needs an update.
  Updates from 1.0.13
  * An AVX2 optimized implementation of the Argon2 round function was added.
  * The Argon2id variant of Argon2 has been implemented. The high-level
    crypto_pwhash_str_verify() function automatically detects the
    algorithm and can verify both Argon2i and Argon2id hashed passwords.
    The default algorithm for newly hashed passwords remains Argon2i
    in this version to avoid breaking compatibility with verifiers
    running libsodium &lt;= 1.0.12.
  * A crypto_box_curve25519xchacha20poly1305_seal*() function set was implemented.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1507464000">- Refresh spec-file.
- Update to 1.0.15.
  * Release notes: https://github.com/jedisct1/libsodium/releases/tag/1.0.15
  * The default password hashing algorithm is now Argon2id.
  * The pwhash_str_verify() function can still verify Argon2i hashes without any changes,
    and pwhash() can still compute Argon2i hashes as well.
  * The aes128ctr primitive was removed. It was slow, non-standard, not authenticated,
    and didn't seem to be used by any opensource project.
  * Argon2id required at least 3 passes like Argon2i, despite a minimum of 1
    as defined by the OPSLIMIT_MIN constant. This has been fixed.
  * The secretstream construction was slightly changed to be consistent with forthcoming variants.
  * The Javascript and Webassembly versions have been merged, and the module now returns
    a .ready promise that will resolve after the Webassembly code is loaded and compiled.
  * Note that due to these incompatible changes, the library version major was bumped up.</changelog>
  <changelog author="idonmez@suse.com" date="1513166400">- Update to 1.0.16
  * Signatures computations and verifications are now way faster
    on 64-bit platforms with compilers supporting 128-bit
    arithmetic (gcc, clang, icc). This includes the WebAssembly
    target.
  * New low-level APIs for computations over edwards25519:
    crypto_scalarmult_ed25519(), crypto_scalarmult_ed25519_base(),
    crypto_core_ed25519_is_valid_point(), crypto_core_ed25519_add(),
    crypto_core_ed25519_sub() and crypto_core_ed25519_from_uniform()
    (elligator representative to point).
  * crypto_sign_open(), crypto_sign_verify_detached() and
    crypto_sign_edwards25519sha512batch_open` now reject public
    keys in non-canonical form in addition to low-order points.
  * The library can be built with ED25519_NONDETERMINISTIC defined
    in order to use synthetic nonces for EdDSA. This is disabled
    by default.
  * sodium_stackzero() was added to wipe content off the stack.
  * The Salsa20-based PRNG example is now thread-safe on platforms
    with support for thread-local storage, optionally mixes bits
    from RDRAND.
  * Argon2 and scrypt are slightly faster on Linux.</changelog>
  <changelog author="adam.majer@suse.de" date="1514548800">- Enable verbose make output when building tests</changelog>
  <changelog author="mpluskal@suse.com" date="1531396800">- Add gpg signature
- Modernise spec file with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1531483200">- Add baselibs.conf: build libsodium23-32bit, which is required by
  zeromq's -32bit packages.</changelog>
  <changelog author="ecsos@opensuse.org" date="1549108800">- Update to 1.0.17
  - Bug fix: sodium_pad() didn't properly support block sizes
    &gt;= 256 bytes.
  - JS/WebAssembly: some old iOS versions can't instantiate the
    WebAssembly module; fall back to Javascript on these.
  - JS/WebAssembly: compatibility with newer Emscripten versions.
  - Bug fix: crypto_pwhash_scryptsalsa208sha256_str_verify() and
    crypto_pwhash_scryptsalsa208sha256_str_needs_rehash()didn't
    returnEINVAL` on input strings with a short length, unlike
    their high-level counterpart.
  - Added a workaround for Visual Studio 2010 bug causing CPU
    features not to be detected.
  - Portability improvements.
  - Test vectors from Project Wycheproof have been added.
  - New low-level APIs for arithmetic mod the order of the prime
    order group:
  - crypto_core_ed25519_scalar_random(),
    crypto_core_ed25519_scalar_reduce(),
  - crypto_core_ed25519_scalar_invert(),
    crypto_core_ed25519_scalar_negate(),
  - crypto_core_ed25519_scalar_complement(),
    crypto_core_ed25519_scalar_add() and
    crypto_core_ed25519_scalar_sub().
  - New low-level APIs for scalar multiplication without clamping:
    crypto_scalarmult_ed25519_base_noclamp() and
    crypto_scalarmult_ed25519_noclamp().
    These new APIs are especially useful for blinding.
  - sodium_sub() has been implemented.
  - Support for WatchOS has been added.
  - getrandom(2) is now used on FreeBSD 12+.
  - The nonnull attribute has been added to all relevant
    prototypes.
  - More reliable AVX512 detection.
  - Javascript/Webassembly builds now use dynamic memory growth.</changelog>
  <changelog author="ecsos@opensuse.org" date="1560686400">- Update to 1.0.18
  - Enterprise versions of Visual Studio are now supported.
  - Visual Studio 2019 is now supported.
  - 32-bit binaries for Visual Studio 2010 are now provided.
  - A test designed to trigger an OOM condition didn't work on
    Linux systems with memory overcommit turned on. It has been
    removed in order to fix Ansible builds.
  - Emscripten: print and printErr functions are overridden to send
    errors to the console, if there is one.
  - Emscripten: UTF8ToString() is now exported since
    Pointer_stringify() has been deprecated.
  - Libsodium version detection has been fixed in the CMake recipe.
  - Generic hashing got a 10% speedup on AVX2.
  - New target: WebAssembly/WASI
    (compile with dist-builds/wasm32-wasi.sh).
  - New functions to map a hash to an edwards25519 point
    or get a random point:
    core_ed25519_from_hash() and core_ed25519_random().
  - crypto_core_ed25519_scalar_mul() has been implemented for
    scalar*scalar (mod L) multiplication.
  - Support for the Ristretto group has been implemented for
    interoperability with wasm-crypto.
  - Improvements have been made to the test suite.
  - Portability improvements have been made.
  - getentropy() is now used on systems providing this system call.
  - randombytes_salsa20 has been renamed to randombytes_internal.
  - Support for NativeClient has been removed.
  - Most ((nonnull)) attributes have been relaxed to allow 0-length
    inputs to be NULL.
  - The -ftree-vectorize and -ftree-slp-vectorize compiler switches
    are now used, if available, for optimized builds.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1565956800">-  Add libsodium_configure_cpuid_chg.patch and call autoconf
  to regenerate configure script with proper CPUID checking.
  Required at least for PowerPC and ARM now that LTO enabled.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1566820800">-  Revert previous change about cpuid as previous change rejected
  in https://build.opensuse.org/request/show/724809
-  Disable LTO as bypass boo#1148184</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1658404800">- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767873600">- Security fix: [bsc#1256070, CVE-2025-15444, bsc#1255764, CVE-2025-69277]
  * check Y==Z in addition to X==0
  * Add patch libsodium-CVE-2025-15444.patch</changelog>
</package>
<package pkgid="8a767e82b477af5cccaf6e117bf97628231faecbd002fd52749c0c7536f105d5" name="libsodium23-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.18" rel="150000.4.11.1"/>
  <changelog author="idonmez@suse.com" date="1446465600">- Update to 1.0.6
  * Optimized implementations of Blake2 have been added for modern
    Intel platforms. crypto_generichash() is now faster than MD5 and
    SHA1 implementations while being far more secure.
  * The crypto_sign_edwards25519sha512batch_*() functions have been
    tagged as deprecated.
  * sodium_compare() now works as documented, and compares numbers
    in little-endian format instead of behaving like memcmp().
  * sodium_runtime_has_ssse3() and sodium_runtime_has_sse41() have
    been added.</changelog>
  <changelog author="idonmez@suse.com" date="1448971200">- Follow upstream's lead and compile with -flto for &gt; 13.2 on x86
  and x86-64.</changelog>
  <changelog author="idonmez@suse.com" date="1449576000">- Update to version 1.0.7
  * Sandy2x, the fastest Curve25519 implementation ever,
    has been merged in, and is automatically used on CPUs
    supporting the AVX instructions set.
  * An SSE2 optimized implementation of Poly1305 was added,
    and is twice as fast as the portable one.
  * An SSSE3 optimized implementation of ChaCha20 was added,
    and is twice as fast as the portable one.
  * Faster sodium_increment() for common nonce sizes.
  * New helper functions have been added: sodium_is_zero()
    and sodium_add().</changelog>
  <changelog author="idonmez@suse.com" date="1451044800">- Update to version 1.0.8
  * Handle the case where the CPU supports AVX, but we are running
    on an hypervisor with AVX disabled/not supported.
  * Faster (2x) scalarmult_base() when using the ref10 implementation.</changelog>
  <changelog author="idonmez@suse.com" date="1459598400">- Update to version 1.0.9
  * A detached API was added to the ChaCha20-Poly1305 and AES256-GCM
    implementations.
  * The Argon2i password hashing function was added, and is accessible
    directly and through a new, high-level crypto_pwhash API.
    The scrypt function remains available as well.
  * A speed-record AVX2 implementation of BLAKE2b was added.
  * Countermeasures for Ed25519 signatures malleability have been
    added to match the irtf-cfrg-eddsa draft.
  * The HChaCha20 core function was implemented (crypto_core_hchacha20()).
  * No-op stubs were added for all AES256-GCM public functions even
    when compiled on non-Intel platforms.
  * crypt_generichash_blake2b_statebytes() was added.
  * New macros were added for the IETF variant of the ChaCha20-Poly1305
    construction.</changelog>
  <changelog author="idonmez@suse.com" date="1459857600">- Update to version 1.0.10
  * Compile fix update for older GCCs</changelog>
  <changelog author="i@marguerite.su" date="1470484800">- update version 1.0.11
  * sodium_init() is now thread-safe, and can be safely called
    multiple times.
  * Better support for old gcc versions.
  * AVX2 detection was fixed, resulting in faster BLAKE2b hashing
    on platforms where it was not properly detected.
  * The Sandy2x Curve25519 implementation was not as fast as
    expected on some platforms. This has been fixed.
  * The NativeClient target was improved. Most notably, it now
    supports optimized implementations, and uses pepper_49 by default.
  * The library can be compiled with recent Emscripten versions.
    Changes have been made to produce smaller code, and the default
    heap size was reduced in the standard version.
  * Decryption functions can now accept a NULL pointer for the output.
    This checks the MAC without writing the decrypted message.
  * crypto_generichash_final() now returns -1 if called twice.</changelog>
  <changelog author="idonmez@suse.com" date="1489406400">- Update to version 1.0.12
  * Ed25519ph was implemented, adding a multi-part signature API
    (crypto_sign_init(), crypto_sign_update(), crypto_sign_final_*()).
  * New constants and related accessors have been added for Scrypt
    and Argon2.
  * XChaCha20 has been implemented. Like XSalsa20, this construction
    extends the ChaCha20 cipher to accept a 192-bit nonce. This
    makes it safe to use ChaCha20 with random nonces.
  * crypto_secretbox, crypto_box and crypto_aead now offer variants
    leveraging XChaCha20.
  * SHA-2 is about 20% faster, which also gives a speed boost to
    signature and signature verification.
  * AVX2 implementations of Salsa20 and ChaCha20 have been added.
    They are twice as fast as the SSE2 implementations. The speed
    gain is even more significant on Windows, that previously
    didn't use vectorized implementations.
  * New high-level API: crypto_kdf, to easily derive one or more
    subkeys from a master key.
  * Siphash with a 128-bit output has been implemented, and is
    available as crypto_shorthash_siphashx_*.
  * New *_keygen() helpers functions have been added to create
    secret keys for all constructions. This improves code clarity
    and can prevent keys from being partially initialized.
  * A new randombytes_buf_deterministic() function was added to
    deterministically fill a memory region with pseudorandom data.
    This function can especially be useful to write reproducible tests.
  * A preliminary crypto_kx_*() API was added to compute shared
    session keys.
  * AVX2 detection is more reliable.</changelog>
  <changelog author="idonmez@suse.com" date="1506600000">- Update to version 1.0.14
  * Internal consistency checks failing and primitives used with
    dangerous/out-of-bounds/invalid parameters used to call abort(3).
    Now, a custom handler that doesn't return can be set with the
    set_sodium_misuse() function. It still aborts by default or if
    the handler ever returns. This is not a replacement for non-fatal,
    expected runtime errors. This handler will be only called in
    unexpected situations due to potential bugs in the library or in
    language bindings.
  * *_MESSAGEBYTES_MAX macros (and the corresponding _messagebytes_max()
    symbols) have been added to represent the maximum message size that
    can be safely handled by a primitive. Language bindings are
    encouraged to check user inputs against these maximum lengths.
  * The test suite has been extended to cover more edge cases.
  * crypto_sign_ed25519_pk_to_curve25519() now rejects points that
    are not on the curve, or not in the main subgroup.
  * Further changes have been made to ensure that smart compilers
    will not optimize out code that we don't want to be optimized.
  * The sodium_runtime_has_* symbols for CPU features detection are
    now defined as weak symbols, i.e. they can be replaced with an
    application-defined implementation. This can be useful to
    disable AVX* when temperature/power consumption is a concern.
  * crypto_kx_*() now aborts if called with no non-NULL pointers
    to store keys to.
  * SSE2 implementations of crypto_verify_*() have been added.
  * Passwords can be hashed using a specific algorithm with the new
    crypto_pwhash_str_alg() function.
  * Due to popular demand, base64 encoding (sodium_bin2base64())
    and decoding (sodium_base642bin()) have been implemented.
  * A new crypto_secretstream_*() API was added to safely encrypt
    files and multi-part messages.
  * The sodium_pad() and sodium_unpad() helper functions have been
    added in order to add &amp; remove padding.
  * An AVX512 optimized implementation of Argon2 has been added.
  * The crypto_pwhash_str_needs_rehash() function was added to check
    if a password hash string matches the given parameters, or if it
    needs an update.
  Updates from 1.0.13
  * An AVX2 optimized implementation of the Argon2 round function was added.
  * The Argon2id variant of Argon2 has been implemented. The high-level
    crypto_pwhash_str_verify() function automatically detects the
    algorithm and can verify both Argon2i and Argon2id hashed passwords.
    The default algorithm for newly hashed passwords remains Argon2i
    in this version to avoid breaking compatibility with verifiers
    running libsodium &lt;= 1.0.12.
  * A crypto_box_curve25519xchacha20poly1305_seal*() function set was implemented.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1507464000">- Refresh spec-file.
- Update to 1.0.15.
  * Release notes: https://github.com/jedisct1/libsodium/releases/tag/1.0.15
  * The default password hashing algorithm is now Argon2id.
  * The pwhash_str_verify() function can still verify Argon2i hashes without any changes,
    and pwhash() can still compute Argon2i hashes as well.
  * The aes128ctr primitive was removed. It was slow, non-standard, not authenticated,
    and didn't seem to be used by any opensource project.
  * Argon2id required at least 3 passes like Argon2i, despite a minimum of 1
    as defined by the OPSLIMIT_MIN constant. This has been fixed.
  * The secretstream construction was slightly changed to be consistent with forthcoming variants.
  * The Javascript and Webassembly versions have been merged, and the module now returns
    a .ready promise that will resolve after the Webassembly code is loaded and compiled.
  * Note that due to these incompatible changes, the library version major was bumped up.</changelog>
  <changelog author="idonmez@suse.com" date="1513166400">- Update to 1.0.16
  * Signatures computations and verifications are now way faster
    on 64-bit platforms with compilers supporting 128-bit
    arithmetic (gcc, clang, icc). This includes the WebAssembly
    target.
  * New low-level APIs for computations over edwards25519:
    crypto_scalarmult_ed25519(), crypto_scalarmult_ed25519_base(),
    crypto_core_ed25519_is_valid_point(), crypto_core_ed25519_add(),
    crypto_core_ed25519_sub() and crypto_core_ed25519_from_uniform()
    (elligator representative to point).
  * crypto_sign_open(), crypto_sign_verify_detached() and
    crypto_sign_edwards25519sha512batch_open` now reject public
    keys in non-canonical form in addition to low-order points.
  * The library can be built with ED25519_NONDETERMINISTIC defined
    in order to use synthetic nonces for EdDSA. This is disabled
    by default.
  * sodium_stackzero() was added to wipe content off the stack.
  * The Salsa20-based PRNG example is now thread-safe on platforms
    with support for thread-local storage, optionally mixes bits
    from RDRAND.
  * Argon2 and scrypt are slightly faster on Linux.</changelog>
  <changelog author="adam.majer@suse.de" date="1514548800">- Enable verbose make output when building tests</changelog>
  <changelog author="mpluskal@suse.com" date="1531396800">- Add gpg signature
- Modernise spec file with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1531483200">- Add baselibs.conf: build libsodium23-32bit, which is required by
  zeromq's -32bit packages.</changelog>
  <changelog author="ecsos@opensuse.org" date="1549108800">- Update to 1.0.17
  - Bug fix: sodium_pad() didn't properly support block sizes
    &gt;= 256 bytes.
  - JS/WebAssembly: some old iOS versions can't instantiate the
    WebAssembly module; fall back to Javascript on these.
  - JS/WebAssembly: compatibility with newer Emscripten versions.
  - Bug fix: crypto_pwhash_scryptsalsa208sha256_str_verify() and
    crypto_pwhash_scryptsalsa208sha256_str_needs_rehash()didn't
    returnEINVAL` on input strings with a short length, unlike
    their high-level counterpart.
  - Added a workaround for Visual Studio 2010 bug causing CPU
    features not to be detected.
  - Portability improvements.
  - Test vectors from Project Wycheproof have been added.
  - New low-level APIs for arithmetic mod the order of the prime
    order group:
  - crypto_core_ed25519_scalar_random(),
    crypto_core_ed25519_scalar_reduce(),
  - crypto_core_ed25519_scalar_invert(),
    crypto_core_ed25519_scalar_negate(),
  - crypto_core_ed25519_scalar_complement(),
    crypto_core_ed25519_scalar_add() and
    crypto_core_ed25519_scalar_sub().
  - New low-level APIs for scalar multiplication without clamping:
    crypto_scalarmult_ed25519_base_noclamp() and
    crypto_scalarmult_ed25519_noclamp().
    These new APIs are especially useful for blinding.
  - sodium_sub() has been implemented.
  - Support for WatchOS has been added.
  - getrandom(2) is now used on FreeBSD 12+.
  - The nonnull attribute has been added to all relevant
    prototypes.
  - More reliable AVX512 detection.
  - Javascript/Webassembly builds now use dynamic memory growth.</changelog>
  <changelog author="ecsos@opensuse.org" date="1560686400">- Update to 1.0.18
  - Enterprise versions of Visual Studio are now supported.
  - Visual Studio 2019 is now supported.
  - 32-bit binaries for Visual Studio 2010 are now provided.
  - A test designed to trigger an OOM condition didn't work on
    Linux systems with memory overcommit turned on. It has been
    removed in order to fix Ansible builds.
  - Emscripten: print and printErr functions are overridden to send
    errors to the console, if there is one.
  - Emscripten: UTF8ToString() is now exported since
    Pointer_stringify() has been deprecated.
  - Libsodium version detection has been fixed in the CMake recipe.
  - Generic hashing got a 10% speedup on AVX2.
  - New target: WebAssembly/WASI
    (compile with dist-builds/wasm32-wasi.sh).
  - New functions to map a hash to an edwards25519 point
    or get a random point:
    core_ed25519_from_hash() and core_ed25519_random().
  - crypto_core_ed25519_scalar_mul() has been implemented for
    scalar*scalar (mod L) multiplication.
  - Support for the Ristretto group has been implemented for
    interoperability with wasm-crypto.
  - Improvements have been made to the test suite.
  - Portability improvements have been made.
  - getentropy() is now used on systems providing this system call.
  - randombytes_salsa20 has been renamed to randombytes_internal.
  - Support for NativeClient has been removed.
  - Most ((nonnull)) attributes have been relaxed to allow 0-length
    inputs to be NULL.
  - The -ftree-vectorize and -ftree-slp-vectorize compiler switches
    are now used, if available, for optimized builds.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1565956800">-  Add libsodium_configure_cpuid_chg.patch and call autoconf
  to regenerate configure script with proper CPUID checking.
  Required at least for PowerPC and ARM now that LTO enabled.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1566820800">-  Revert previous change about cpuid as previous change rejected
  in https://build.opensuse.org/request/show/724809
-  Disable LTO as bypass boo#1148184</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1658404800">- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767873600">- Security fix: [bsc#1256070, CVE-2025-15444]
  * check Y==Z in addition to X==0
  * Add patch libsodium-CVE-2025-15444.patch</changelog>
</package>
<package pkgid="a1d622b339189060efc5599ea252f8d75a0d79f738af40858397c5d435fb6300" name="libsodium23-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.18" rel="150000.4.14.1"/>
  <changelog author="idonmez@suse.com" date="1446465600">- Update to 1.0.6
  * Optimized implementations of Blake2 have been added for modern
    Intel platforms. crypto_generichash() is now faster than MD5 and
    SHA1 implementations while being far more secure.
  * The crypto_sign_edwards25519sha512batch_*() functions have been
    tagged as deprecated.
  * sodium_compare() now works as documented, and compares numbers
    in little-endian format instead of behaving like memcmp().
  * sodium_runtime_has_ssse3() and sodium_runtime_has_sse41() have
    been added.</changelog>
  <changelog author="idonmez@suse.com" date="1448971200">- Follow upstream's lead and compile with -flto for &gt; 13.2 on x86
  and x86-64.</changelog>
  <changelog author="idonmez@suse.com" date="1449576000">- Update to version 1.0.7
  * Sandy2x, the fastest Curve25519 implementation ever,
    has been merged in, and is automatically used on CPUs
    supporting the AVX instructions set.
  * An SSE2 optimized implementation of Poly1305 was added,
    and is twice as fast as the portable one.
  * An SSSE3 optimized implementation of ChaCha20 was added,
    and is twice as fast as the portable one.
  * Faster sodium_increment() for common nonce sizes.
  * New helper functions have been added: sodium_is_zero()
    and sodium_add().</changelog>
  <changelog author="idonmez@suse.com" date="1451044800">- Update to version 1.0.8
  * Handle the case where the CPU supports AVX, but we are running
    on an hypervisor with AVX disabled/not supported.
  * Faster (2x) scalarmult_base() when using the ref10 implementation.</changelog>
  <changelog author="idonmez@suse.com" date="1459598400">- Update to version 1.0.9
  * A detached API was added to the ChaCha20-Poly1305 and AES256-GCM
    implementations.
  * The Argon2i password hashing function was added, and is accessible
    directly and through a new, high-level crypto_pwhash API.
    The scrypt function remains available as well.
  * A speed-record AVX2 implementation of BLAKE2b was added.
  * Countermeasures for Ed25519 signatures malleability have been
    added to match the irtf-cfrg-eddsa draft.
  * The HChaCha20 core function was implemented (crypto_core_hchacha20()).
  * No-op stubs were added for all AES256-GCM public functions even
    when compiled on non-Intel platforms.
  * crypt_generichash_blake2b_statebytes() was added.
  * New macros were added for the IETF variant of the ChaCha20-Poly1305
    construction.</changelog>
  <changelog author="idonmez@suse.com" date="1459857600">- Update to version 1.0.10
  * Compile fix update for older GCCs</changelog>
  <changelog author="i@marguerite.su" date="1470484800">- update version 1.0.11
  * sodium_init() is now thread-safe, and can be safely called
    multiple times.
  * Better support for old gcc versions.
  * AVX2 detection was fixed, resulting in faster BLAKE2b hashing
    on platforms where it was not properly detected.
  * The Sandy2x Curve25519 implementation was not as fast as
    expected on some platforms. This has been fixed.
  * The NativeClient target was improved. Most notably, it now
    supports optimized implementations, and uses pepper_49 by default.
  * The library can be compiled with recent Emscripten versions.
    Changes have been made to produce smaller code, and the default
    heap size was reduced in the standard version.
  * Decryption functions can now accept a NULL pointer for the output.
    This checks the MAC without writing the decrypted message.
  * crypto_generichash_final() now returns -1 if called twice.</changelog>
  <changelog author="idonmez@suse.com" date="1489406400">- Update to version 1.0.12
  * Ed25519ph was implemented, adding a multi-part signature API
    (crypto_sign_init(), crypto_sign_update(), crypto_sign_final_*()).
  * New constants and related accessors have been added for Scrypt
    and Argon2.
  * XChaCha20 has been implemented. Like XSalsa20, this construction
    extends the ChaCha20 cipher to accept a 192-bit nonce. This
    makes it safe to use ChaCha20 with random nonces.
  * crypto_secretbox, crypto_box and crypto_aead now offer variants
    leveraging XChaCha20.
  * SHA-2 is about 20% faster, which also gives a speed boost to
    signature and signature verification.
  * AVX2 implementations of Salsa20 and ChaCha20 have been added.
    They are twice as fast as the SSE2 implementations. The speed
    gain is even more significant on Windows, that previously
    didn't use vectorized implementations.
  * New high-level API: crypto_kdf, to easily derive one or more
    subkeys from a master key.
  * Siphash with a 128-bit output has been implemented, and is
    available as crypto_shorthash_siphashx_*.
  * New *_keygen() helpers functions have been added to create
    secret keys for all constructions. This improves code clarity
    and can prevent keys from being partially initialized.
  * A new randombytes_buf_deterministic() function was added to
    deterministically fill a memory region with pseudorandom data.
    This function can especially be useful to write reproducible tests.
  * A preliminary crypto_kx_*() API was added to compute shared
    session keys.
  * AVX2 detection is more reliable.</changelog>
  <changelog author="idonmez@suse.com" date="1506600000">- Update to version 1.0.14
  * Internal consistency checks failing and primitives used with
    dangerous/out-of-bounds/invalid parameters used to call abort(3).
    Now, a custom handler that doesn't return can be set with the
    set_sodium_misuse() function. It still aborts by default or if
    the handler ever returns. This is not a replacement for non-fatal,
    expected runtime errors. This handler will be only called in
    unexpected situations due to potential bugs in the library or in
    language bindings.
  * *_MESSAGEBYTES_MAX macros (and the corresponding _messagebytes_max()
    symbols) have been added to represent the maximum message size that
    can be safely handled by a primitive. Language bindings are
    encouraged to check user inputs against these maximum lengths.
  * The test suite has been extended to cover more edge cases.
  * crypto_sign_ed25519_pk_to_curve25519() now rejects points that
    are not on the curve, or not in the main subgroup.
  * Further changes have been made to ensure that smart compilers
    will not optimize out code that we don't want to be optimized.
  * The sodium_runtime_has_* symbols for CPU features detection are
    now defined as weak symbols, i.e. they can be replaced with an
    application-defined implementation. This can be useful to
    disable AVX* when temperature/power consumption is a concern.
  * crypto_kx_*() now aborts if called with no non-NULL pointers
    to store keys to.
  * SSE2 implementations of crypto_verify_*() have been added.
  * Passwords can be hashed using a specific algorithm with the new
    crypto_pwhash_str_alg() function.
  * Due to popular demand, base64 encoding (sodium_bin2base64())
    and decoding (sodium_base642bin()) have been implemented.
  * A new crypto_secretstream_*() API was added to safely encrypt
    files and multi-part messages.
  * The sodium_pad() and sodium_unpad() helper functions have been
    added in order to add &amp; remove padding.
  * An AVX512 optimized implementation of Argon2 has been added.
  * The crypto_pwhash_str_needs_rehash() function was added to check
    if a password hash string matches the given parameters, or if it
    needs an update.
  Updates from 1.0.13
  * An AVX2 optimized implementation of the Argon2 round function was added.
  * The Argon2id variant of Argon2 has been implemented. The high-level
    crypto_pwhash_str_verify() function automatically detects the
    algorithm and can verify both Argon2i and Argon2id hashed passwords.
    The default algorithm for newly hashed passwords remains Argon2i
    in this version to avoid breaking compatibility with verifiers
    running libsodium &lt;= 1.0.12.
  * A crypto_box_curve25519xchacha20poly1305_seal*() function set was implemented.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1507464000">- Refresh spec-file.
- Update to 1.0.15.
  * Release notes: https://github.com/jedisct1/libsodium/releases/tag/1.0.15
  * The default password hashing algorithm is now Argon2id.
  * The pwhash_str_verify() function can still verify Argon2i hashes without any changes,
    and pwhash() can still compute Argon2i hashes as well.
  * The aes128ctr primitive was removed. It was slow, non-standard, not authenticated,
    and didn't seem to be used by any opensource project.
  * Argon2id required at least 3 passes like Argon2i, despite a minimum of 1
    as defined by the OPSLIMIT_MIN constant. This has been fixed.
  * The secretstream construction was slightly changed to be consistent with forthcoming variants.
  * The Javascript and Webassembly versions have been merged, and the module now returns
    a .ready promise that will resolve after the Webassembly code is loaded and compiled.
  * Note that due to these incompatible changes, the library version major was bumped up.</changelog>
  <changelog author="idonmez@suse.com" date="1513166400">- Update to 1.0.16
  * Signatures computations and verifications are now way faster
    on 64-bit platforms with compilers supporting 128-bit
    arithmetic (gcc, clang, icc). This includes the WebAssembly
    target.
  * New low-level APIs for computations over edwards25519:
    crypto_scalarmult_ed25519(), crypto_scalarmult_ed25519_base(),
    crypto_core_ed25519_is_valid_point(), crypto_core_ed25519_add(),
    crypto_core_ed25519_sub() and crypto_core_ed25519_from_uniform()
    (elligator representative to point).
  * crypto_sign_open(), crypto_sign_verify_detached() and
    crypto_sign_edwards25519sha512batch_open` now reject public
    keys in non-canonical form in addition to low-order points.
  * The library can be built with ED25519_NONDETERMINISTIC defined
    in order to use synthetic nonces for EdDSA. This is disabled
    by default.
  * sodium_stackzero() was added to wipe content off the stack.
  * The Salsa20-based PRNG example is now thread-safe on platforms
    with support for thread-local storage, optionally mixes bits
    from RDRAND.
  * Argon2 and scrypt are slightly faster on Linux.</changelog>
  <changelog author="adam.majer@suse.de" date="1514548800">- Enable verbose make output when building tests</changelog>
  <changelog author="mpluskal@suse.com" date="1531396800">- Add gpg signature
- Modernise spec file with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1531483200">- Add baselibs.conf: build libsodium23-32bit, which is required by
  zeromq's -32bit packages.</changelog>
  <changelog author="ecsos@opensuse.org" date="1549108800">- Update to 1.0.17
  - Bug fix: sodium_pad() didn't properly support block sizes
    &gt;= 256 bytes.
  - JS/WebAssembly: some old iOS versions can't instantiate the
    WebAssembly module; fall back to Javascript on these.
  - JS/WebAssembly: compatibility with newer Emscripten versions.
  - Bug fix: crypto_pwhash_scryptsalsa208sha256_str_verify() and
    crypto_pwhash_scryptsalsa208sha256_str_needs_rehash()didn't
    returnEINVAL` on input strings with a short length, unlike
    their high-level counterpart.
  - Added a workaround for Visual Studio 2010 bug causing CPU
    features not to be detected.
  - Portability improvements.
  - Test vectors from Project Wycheproof have been added.
  - New low-level APIs for arithmetic mod the order of the prime
    order group:
  - crypto_core_ed25519_scalar_random(),
    crypto_core_ed25519_scalar_reduce(),
  - crypto_core_ed25519_scalar_invert(),
    crypto_core_ed25519_scalar_negate(),
  - crypto_core_ed25519_scalar_complement(),
    crypto_core_ed25519_scalar_add() and
    crypto_core_ed25519_scalar_sub().
  - New low-level APIs for scalar multiplication without clamping:
    crypto_scalarmult_ed25519_base_noclamp() and
    crypto_scalarmult_ed25519_noclamp().
    These new APIs are especially useful for blinding.
  - sodium_sub() has been implemented.
  - Support for WatchOS has been added.
  - getrandom(2) is now used on FreeBSD 12+.
  - The nonnull attribute has been added to all relevant
    prototypes.
  - More reliable AVX512 detection.
  - Javascript/Webassembly builds now use dynamic memory growth.</changelog>
  <changelog author="ecsos@opensuse.org" date="1560686400">- Update to 1.0.18
  - Enterprise versions of Visual Studio are now supported.
  - Visual Studio 2019 is now supported.
  - 32-bit binaries for Visual Studio 2010 are now provided.
  - A test designed to trigger an OOM condition didn't work on
    Linux systems with memory overcommit turned on. It has been
    removed in order to fix Ansible builds.
  - Emscripten: print and printErr functions are overridden to send
    errors to the console, if there is one.
  - Emscripten: UTF8ToString() is now exported since
    Pointer_stringify() has been deprecated.
  - Libsodium version detection has been fixed in the CMake recipe.
  - Generic hashing got a 10% speedup on AVX2.
  - New target: WebAssembly/WASI
    (compile with dist-builds/wasm32-wasi.sh).
  - New functions to map a hash to an edwards25519 point
    or get a random point:
    core_ed25519_from_hash() and core_ed25519_random().
  - crypto_core_ed25519_scalar_mul() has been implemented for
    scalar*scalar (mod L) multiplication.
  - Support for the Ristretto group has been implemented for
    interoperability with wasm-crypto.
  - Improvements have been made to the test suite.
  - Portability improvements have been made.
  - getentropy() is now used on systems providing this system call.
  - randombytes_salsa20 has been renamed to randombytes_internal.
  - Support for NativeClient has been removed.
  - Most ((nonnull)) attributes have been relaxed to allow 0-length
    inputs to be NULL.
  - The -ftree-vectorize and -ftree-slp-vectorize compiler switches
    are now used, if available, for optimized builds.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1565956800">-  Add libsodium_configure_cpuid_chg.patch and call autoconf
  to regenerate configure script with proper CPUID checking.
  Required at least for PowerPC and ARM now that LTO enabled.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1566820800">-  Revert previous change about cpuid as previous change rejected
  in https://build.opensuse.org/request/show/724809
-  Disable LTO as bypass boo#1148184</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1658404800">- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)</changelog>
  <changelog author="lucas.mulling@suse.com" date="1767873600">- Security fix: [bsc#1256070, CVE-2025-15444, bsc#1255764, CVE-2025-69277]
  * check Y==Z in addition to X==0
  * Add patch libsodium-CVE-2025-15444.patch</changelog>
</package>
<package pkgid="c8512aad2f925a7a0e87af2e01ca66519a79fb19b0693cae1b39d3d33ea7f3d9" name="libsoftokn3" arch="x86_64">
  <version epoch="0" ver="3.112" rel="150400.3.57.1"/>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
</package>
<package pkgid="8d01a476d927ab1a155d34a04811f4856e354cf399d9022c8f963758df2f672b" name="libsoftokn3" arch="x86_64">
  <version epoch="0" ver="3.112.2" rel="150400.3.60.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Removed upstreamed nss-reproducible-chksums.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755864000">- update to NSS 3.112.1
  * bmo#1982742 - restore support for finding certificates by decoded serial number.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759752000">- update to NSS 3.112.2
  * bmo#1970079 - Prevent leaks during pkcs12 decoding.
  * bmo#1988046 - SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates
- Adding patch bmo1980465.patch to fix bug on s390x (bmo#1980465)
- Adding patch bmo1956754.patch to fix possible undefined behaviour (bmo#1956754)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759838400">- Add bmo1990242.patch to move NSS DB password hash away from SHA-1</changelog>
</package>
<package pkgid="14fe195c76cc25b7249b574d23e8921fc82639b02439bc21e3b37275d6b0997f" name="libsoftokn3" arch="x86_64">
  <version epoch="0" ver="3.112.3" rel="150400.3.63.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Removed upstreamed nss-reproducible-chksums.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755864000">- update to NSS 3.112.1
  * bmo#1982742 - restore support for finding certificates by decoded serial number.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759752000">- update to NSS 3.112.2
  * bmo#1970079 - Prevent leaks during pkcs12 decoding.
  * bmo#1988046 - SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates
- Adding patch bmo1980465.patch to fix bug on s390x (bmo#1980465)
- Adding patch bmo1956754.patch to fix possible undefined behaviour (bmo#1956754)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759838400">- Add bmo1990242.patch to move NSS DB password hash away from SHA-1</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- update to NSS 3.112.3
  * bmo#2009552 - avoid integer overflow in platform-independent ghash</changelog>
</package>
<package pkgid="8ea0c6995bad1101eaa57dfec2dc045e246abb28b446175b5ae9ab92ed632787" name="libsoftokn3" arch="x86_64">
  <version epoch="0" ver="3.112.4" rel="150400.3.66.1"/>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Removed upstreamed nss-reproducible-chksums.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755864000">- update to NSS 3.112.1
  * bmo#1982742 - restore support for finding certificates by decoded serial number.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759752000">- update to NSS 3.112.2
  * bmo#1970079 - Prevent leaks during pkcs12 decoding.
  * bmo#1988046 - SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates
- Adding patch bmo1980465.patch to fix bug on s390x (bmo#1980465)
- Adding patch bmo1956754.patch to fix possible undefined behaviour (bmo#1956754)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759838400">- Add bmo1990242.patch to move NSS DB password hash away from SHA-1</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- update to NSS 3.112.3
  * bmo#2009552 - avoid integer overflow in platform-independent ghash</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1776168000">- update to NSS 3.112.4
  * bmo#2030135 - improve error handling in PK11_ImportPrivateKeyInfoAndReturnKey.
  * bmo#2029752 - Improving the allocation of S/MIME DecryptSymKey.
  * bmo#2029462 - store email on subject cache_entry in NSS trust domain.
  * bmo#2029425 - Heap use-after-free in cert_VerifyCertChainOld via dangling certsList[] entry on NameConstraints violation.
  * bmo#2029323 - Improve size calculations in CMS content buffering.
  * bmo#2028001 - avoid integer overflow while escaping RFC822 Names.
  * bmo#2027378 - Reject excessively large ASN.1 SEQUENCE OF in quickder.
  * bmo#2027365 - Deep copy profile data in CERT_FindSMimeProfile.
  * bmo#2027345 - Improve input validation in DSAU signature decoding.
  * bmo#2026311 - avoid integer overflow in RSA_EMSAEncodePSS.
  * bmo#2019357 - RSA_EMSAEncodePSS should validate the length of mHash.
  * bmo#2026156 - Add a maximum cert uncompressed len and tests.
  * bmo#2026089 - Clarify extension negotiation mechanism for TLS Handshakes.
  * bmo#2023209 - ensure permittedSubtrees don't match wildcards that could be outside the permitted tree.
  * bmo#2023207 - Fix integer underflow in tls13_AEAD when ciphertext is shorter than tag.
  * bmo#2019224 - Remove invalid PORT_Free().
  * bmo#1964722 - free digest objects in SEC_PKCS7DecoderFinish if they haven't already been freed.
  * bmo#1935995 - make ss-&gt;ssl3.hs.cookie an owned-copy of the cookie.</changelog>
</package>
<package pkgid="c35beeb3a322afb30662428dd401d3e64cb9dc81174995ce4c13eae463426b85" name="libsoftokn3-32bit" arch="x86_64">
  <version epoch="0" ver="3.112" rel="150400.3.57.1"/>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
</package>
<package pkgid="3364d4b750b28c0bcb7c69e79211f16c9adf1d76a2d299b9457c47a92b043ce0" name="libsoftokn3-32bit" arch="x86_64">
  <version epoch="0" ver="3.112.2" rel="150400.3.60.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Removed upstreamed nss-reproducible-chksums.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755864000">- update to NSS 3.112.1
  * bmo#1982742 - restore support for finding certificates by decoded serial number.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759752000">- update to NSS 3.112.2
  * bmo#1970079 - Prevent leaks during pkcs12 decoding.
  * bmo#1988046 - SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates
- Adding patch bmo1980465.patch to fix bug on s390x (bmo#1980465)
- Adding patch bmo1956754.patch to fix possible undefined behaviour (bmo#1956754)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759838400">- Add bmo1990242.patch to move NSS DB password hash away from SHA-1</changelog>
</package>
<package pkgid="20fcf155d361c1326d295e17c1762298c34e999842859e80fd73508cc139bee7" name="libsoftokn3-32bit" arch="x86_64">
  <version epoch="0" ver="3.112.3" rel="150400.3.63.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Removed upstreamed nss-reproducible-chksums.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755864000">- update to NSS 3.112.1
  * bmo#1982742 - restore support for finding certificates by decoded serial number.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759752000">- update to NSS 3.112.2
  * bmo#1970079 - Prevent leaks during pkcs12 decoding.
  * bmo#1988046 - SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates
- Adding patch bmo1980465.patch to fix bug on s390x (bmo#1980465)
- Adding patch bmo1956754.patch to fix possible undefined behaviour (bmo#1956754)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759838400">- Add bmo1990242.patch to move NSS DB password hash away from SHA-1</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- update to NSS 3.112.3
  * bmo#2009552 - avoid integer overflow in platform-independent ghash</changelog>
</package>
<package pkgid="f61a179f3351d8ae2f3326fee3cc8ec1c3255926b168c928e2f17ce340b95e09" name="libsoftokn3-32bit" arch="x86_64">
  <version epoch="0" ver="3.112.4" rel="150400.3.66.1"/>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Removed upstreamed nss-reproducible-chksums.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755864000">- update to NSS 3.112.1
  * bmo#1982742 - restore support for finding certificates by decoded serial number.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759752000">- update to NSS 3.112.2
  * bmo#1970079 - Prevent leaks during pkcs12 decoding.
  * bmo#1988046 - SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates
- Adding patch bmo1980465.patch to fix bug on s390x (bmo#1980465)
- Adding patch bmo1956754.patch to fix possible undefined behaviour (bmo#1956754)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759838400">- Add bmo1990242.patch to move NSS DB password hash away from SHA-1</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- update to NSS 3.112.3
  * bmo#2009552 - avoid integer overflow in platform-independent ghash</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1776168000">- update to NSS 3.112.4
  * bmo#2030135 - improve error handling in PK11_ImportPrivateKeyInfoAndReturnKey.
  * bmo#2029752 - Improving the allocation of S/MIME DecryptSymKey.
  * bmo#2029462 - store email on subject cache_entry in NSS trust domain.
  * bmo#2029425 - Heap use-after-free in cert_VerifyCertChainOld via dangling certsList[] entry on NameConstraints violation.
  * bmo#2029323 - Improve size calculations in CMS content buffering.
  * bmo#2028001 - avoid integer overflow while escaping RFC822 Names.
  * bmo#2027378 - Reject excessively large ASN.1 SEQUENCE OF in quickder.
  * bmo#2027365 - Deep copy profile data in CERT_FindSMimeProfile.
  * bmo#2027345 - Improve input validation in DSAU signature decoding.
  * bmo#2026311 - avoid integer overflow in RSA_EMSAEncodePSS.
  * bmo#2019357 - RSA_EMSAEncodePSS should validate the length of mHash.
  * bmo#2026156 - Add a maximum cert uncompressed len and tests.
  * bmo#2026089 - Clarify extension negotiation mechanism for TLS Handshakes.
  * bmo#2023209 - ensure permittedSubtrees don't match wildcards that could be outside the permitted tree.
  * bmo#2023207 - Fix integer underflow in tls13_AEAD when ciphertext is shorter than tag.
  * bmo#2019224 - Remove invalid PORT_Free().
  * bmo#1964722 - free digest objects in SEC_PKCS7DecoderFinish if they haven't already been freed.
  * bmo#1935995 - make ss-&gt;ssl3.hs.cookie an owned-copy of the cookie.</changelog>
</package>
<package pkgid="ea0258149d58e2abe3c200d5c4abfa4c3b5ee98aa5c66563c4176e6e17aa3d5f" name="libsolv" arch="src">
  <version epoch="0" ver="0.7.32" rel="150600.8.10.1"/>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
  <changelog author="mls@suse.de" date="1706270400">- build for multiple python versions [jsc#PED-6218]
- bump version to 0.7.28</changelog>
  <changelog author="dmueller@suse.com" date="1713787200">- split libsolv-tools into libsolv-tools-base [jsc#PED-8153]</changelog>
  <changelog author="mls@suse.de" date="1714478400">- improve updating of installed multiversion packages
- fix decision introspection going into an endless loop in some
  cases
- added experimental lua bindings
- bump version to 0.7.29</changelog>
  <changelog author="mls@suse.de" date="1717761600">- add a conflict to older libsolv-tools to libsolv-tools-base
- report unsupported compression in solv_xfopen() with errno
- fix return value of repodata.add_solv() in the bindings
- fix SHA-224 oid in solv_pgpvrfy</changelog>
  <changelog author="mls@suse.de" date="1720699200">- removed dependency on external find program in the repo2solv tool
- bindings: fix return value of repodata.add_solv()
- new SOLVER_FLAG_FOCUS_NEW flag
- bump version to 0.7.30</changelog>
  <changelog author="mls@suse.de" date="1731412800">- fix replaces_installed_package using the wrong solvable id
  when checking the noupdate map
- make POOL_FLAG_ADDFILEPROVIDESFILTERED behaviour more standard
- add rpm_query_idarray query function
- support rpm's "orderwithrequires" dependency
- bump version to 0.7.31</changelog>
  <changelog author="bwiedemann@suse.com" date="1736942400">- Provide a symbol specific for the ruby-version
  so yast does not break across updates (boo#1235598)</changelog>
  <changelog author="mls@suse.de" date="1743681600">- build both static and dynamic libraries on new suse distros
- support the apk package and repository format (both v2 and v3)
- new dataiterator_final_{repo,solvable} functions
- bump version to 0.7.32</changelog>
</package>
<package pkgid="4fb113ab9ea96ab424695e70e22a2b31b52c139e232fa674e9f8432a7c81a68e" name="libsolv" arch="src">
  <version epoch="0" ver="0.7.34" rel="150600.8.17.2"/>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
  <changelog author="mls@suse.de" date="1706270400">- build for multiple python versions [jsc#PED-6218]
- bump version to 0.7.28</changelog>
  <changelog author="dmueller@suse.com" date="1713787200">- split libsolv-tools into libsolv-tools-base [jsc#PED-8153]</changelog>
  <changelog author="mls@suse.de" date="1714478400">- improve updating of installed multiversion packages
- fix decision introspection going into an endless loop in some
  cases
- added experimental lua bindings
- bump version to 0.7.29</changelog>
  <changelog author="mls@suse.de" date="1717761600">- add a conflict to older libsolv-tools to libsolv-tools-base
- report unsupported compression in solv_xfopen() with errno
- fix return value of repodata.add_solv() in the bindings
- fix SHA-224 oid in solv_pgpvrfy</changelog>
  <changelog author="mls@suse.de" date="1720699200">- removed dependency on external find program in the repo2solv tool
- bindings: fix return value of repodata.add_solv()
- new SOLVER_FLAG_FOCUS_NEW flag
- bump version to 0.7.30</changelog>
  <changelog author="mls@suse.de" date="1731412800">- fix replaces_installed_package using the wrong solvable id
  when checking the noupdate map
- make POOL_FLAG_ADDFILEPROVIDESFILTERED behaviour more standard
- add rpm_query_idarray query function
- support rpm's "orderwithrequires" dependency
- bump version to 0.7.31</changelog>
  <changelog author="bwiedemann@suse.com" date="1736942400">- Provide a symbol specific for the ruby-version
  so yast does not break across updates (boo#1235598)</changelog>
  <changelog author="mls@suse.de" date="1743681600">- build both static and dynamic libraries on new suse distros
- support the apk package and repository format (both v2 and v3)
- new dataiterator_final_{repo,solvable} functions
- bump version to 0.7.32</changelog>
  <changelog author="mls@suse.de" date="1748952000">- improve transaction ordering by allowing more uninst-&gt;uninst
  edges [bsc#1243457]
- implement color filtering when adding update targets
- support orderwithrequires dependencies in susedata.xml
- bump version to 0.7.33</changelog>
  <changelog author="mls@suse.de" date="1751889600">- add support for product-obsoletes() provides in the product
  autopackage generation code
- bump version to 0.7.34</changelog>
</package>
<package pkgid="2c067a47a042a458529dbd32ea8984a1a9acb8ba15c1cd0d9687c9ac5b79ce83" name="libsolv" arch="src">
  <version epoch="0" ver="0.7.35" rel="150700.11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
  <changelog author="mls@suse.de" date="1706270400">- build for multiple python versions [jsc#PED-6218]
- bump version to 0.7.28</changelog>
  <changelog author="dmueller@suse.com" date="1713787200">- split libsolv-tools into libsolv-tools-base [jsc#PED-8153]</changelog>
  <changelog author="mls@suse.de" date="1714478400">- improve updating of installed multiversion packages
- fix decision introspection going into an endless loop in some
  cases
- added experimental lua bindings
- bump version to 0.7.29</changelog>
  <changelog author="mls@suse.de" date="1717761600">- add a conflict to older libsolv-tools to libsolv-tools-base
- report unsupported compression in solv_xfopen() with errno
- fix return value of repodata.add_solv() in the bindings
- fix SHA-224 oid in solv_pgpvrfy</changelog>
  <changelog author="mls@suse.de" date="1720699200">- removed dependency on external find program in the repo2solv tool
- bindings: fix return value of repodata.add_solv()
- new SOLVER_FLAG_FOCUS_NEW flag
- bump version to 0.7.30</changelog>
  <changelog author="mls@suse.de" date="1731412800">- fix replaces_installed_package using the wrong solvable id
  when checking the noupdate map
- make POOL_FLAG_ADDFILEPROVIDESFILTERED behaviour more standard
- add rpm_query_idarray query function
- support rpm's "orderwithrequires" dependency
- bump version to 0.7.31</changelog>
  <changelog author="bwiedemann@suse.com" date="1736942400">- Provide a symbol specific for the ruby-version
  so yast does not break across updates (boo#1235598)</changelog>
  <changelog author="mls@suse.de" date="1743681600">- build both static and dynamic libraries on new suse distros
- support the apk package and repository format (both v2 and v3)
- new dataiterator_final_{repo,solvable} functions
- bump version to 0.7.32</changelog>
  <changelog author="mls@suse.de" date="1748952000">- improve transaction ordering by allowing more uninst-&gt;uninst
  edges [bsc#1243457]
- implement color filtering when adding update targets
- support orderwithrequires dependencies in susedata.xml
- bump version to 0.7.33</changelog>
  <changelog author="mls@suse.de" date="1751889600">- add support for product-obsoletes() provides in the product
  autopackage generation code
- bump version to 0.7.34</changelog>
  <changelog author="mls@suse.de" date="1754308800">- fixed rare crash in the handling of allowuninstall in combination
  with forcebest updates
- new pool_satisfieddep_map feature to test if a set of packages
  satisfies a dependency
- bump version to 0.7.35</changelog>
</package>
<package pkgid="73a7f726df6905d283f6fff7c9386e3c189bae38652a06c730ff8f5b212320c5" name="libsolv" arch="src">
  <version epoch="0" ver="0.7.35" rel="150700.11.5.2"/>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
  <changelog author="mls@suse.de" date="1706270400">- build for multiple python versions [jsc#PED-6218]
- bump version to 0.7.28</changelog>
  <changelog author="dmueller@suse.com" date="1713787200">- split libsolv-tools into libsolv-tools-base [jsc#PED-8153]</changelog>
  <changelog author="mls@suse.de" date="1714478400">- improve updating of installed multiversion packages
- fix decision introspection going into an endless loop in some
  cases
- added experimental lua bindings
- bump version to 0.7.29</changelog>
  <changelog author="mls@suse.de" date="1717761600">- add a conflict to older libsolv-tools to libsolv-tools-base
- report unsupported compression in solv_xfopen() with errno
- fix return value of repodata.add_solv() in the bindings
- fix SHA-224 oid in solv_pgpvrfy</changelog>
  <changelog author="mls@suse.de" date="1720699200">- removed dependency on external find program in the repo2solv tool
- bindings: fix return value of repodata.add_solv()
- new SOLVER_FLAG_FOCUS_NEW flag
- bump version to 0.7.30</changelog>
  <changelog author="mls@suse.de" date="1731412800">- fix replaces_installed_package using the wrong solvable id
  when checking the noupdate map
- make POOL_FLAG_ADDFILEPROVIDESFILTERED behaviour more standard
- add rpm_query_idarray query function
- support rpm's "orderwithrequires" dependency
- bump version to 0.7.31</changelog>
  <changelog author="bwiedemann@suse.com" date="1736942400">- Provide a symbol specific for the ruby-version
  so yast does not break across updates (boo#1235598)</changelog>
  <changelog author="mls@suse.de" date="1743681600">- build both static and dynamic libraries on new suse distros
- support the apk package and repository format (both v2 and v3)
- new dataiterator_final_{repo,solvable} functions
- bump version to 0.7.32</changelog>
  <changelog author="mls@suse.de" date="1748952000">- improve transaction ordering by allowing more uninst-&gt;uninst
  edges [bsc#1243457]
- implement color filtering when adding update targets
- support orderwithrequires dependencies in susedata.xml
- bump version to 0.7.33</changelog>
  <changelog author="mls@suse.de" date="1751889600">- add support for product-obsoletes() provides in the product
  autopackage generation code
- bump version to 0.7.34</changelog>
  <changelog author="mls@suse.de" date="1754308800">- fixed rare crash in the handling of allowuninstall in combination
  with forcebest updates
- new pool_satisfieddep_map feature to test if a set of packages
  satisfies a dependency
- bump version to 0.7.35</changelog>
</package>
<package pkgid="9f5e6471810d1b973fce7f8171dc4fb8b325601a63a85f7604c2138c808c5665" name="libsolv-devel" arch="x86_64">
  <version epoch="0" ver="0.7.32" rel="150600.8.10.1"/>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
  <changelog author="mls@suse.de" date="1706270400">- build for multiple python versions [jsc#PED-6218]
- bump version to 0.7.28</changelog>
  <changelog author="dmueller@suse.com" date="1713787200">- split libsolv-tools into libsolv-tools-base [jsc#PED-8153]</changelog>
  <changelog author="mls@suse.de" date="1714478400">- improve updating of installed multiversion packages
- fix decision introspection going into an endless loop in some
  cases
- added experimental lua bindings
- bump version to 0.7.29</changelog>
  <changelog author="mls@suse.de" date="1717761600">- add a conflict to older libsolv-tools to libsolv-tools-base
- report unsupported compression in solv_xfopen() with errno
- fix return value of repodata.add_solv() in the bindings
- fix SHA-224 oid in solv_pgpvrfy</changelog>
  <changelog author="mls@suse.de" date="1720699200">- removed dependency on external find program in the repo2solv tool
- bindings: fix return value of repodata.add_solv()
- new SOLVER_FLAG_FOCUS_NEW flag
- bump version to 0.7.30</changelog>
  <changelog author="mls@suse.de" date="1731412800">- fix replaces_installed_package using the wrong solvable id
  when checking the noupdate map
- make POOL_FLAG_ADDFILEPROVIDESFILTERED behaviour more standard
- add rpm_query_idarray query function
- support rpm's "orderwithrequires" dependency
- bump version to 0.7.31</changelog>
  <changelog author="bwiedemann@suse.com" date="1736942400">- Provide a symbol specific for the ruby-version
  so yast does not break across updates (boo#1235598)</changelog>
  <changelog author="mls@suse.de" date="1743681600">- build both static and dynamic libraries on new suse distros
- support the apk package and repository format (both v2 and v3)
- new dataiterator_final_{repo,solvable} functions
- bump version to 0.7.32</changelog>
</package>
<package pkgid="de74804ec6caa8c1e3f0bc9045598137e6fc03f878d45f83056469f7fa02d037" name="libsolv-devel" arch="x86_64">
  <version epoch="0" ver="0.7.34" rel="150600.8.17.2"/>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
  <changelog author="mls@suse.de" date="1706270400">- build for multiple python versions [jsc#PED-6218]
- bump version to 0.7.28</changelog>
  <changelog author="dmueller@suse.com" date="1713787200">- split libsolv-tools into libsolv-tools-base [jsc#PED-8153]</changelog>
  <changelog author="mls@suse.de" date="1714478400">- improve updating of installed multiversion packages
- fix decision introspection going into an endless loop in some
  cases
- added experimental lua bindings
- bump version to 0.7.29</changelog>
  <changelog author="mls@suse.de" date="1717761600">- add a conflict to older libsolv-tools to libsolv-tools-base
- report unsupported compression in solv_xfopen() with errno
- fix return value of repodata.add_solv() in the bindings
- fix SHA-224 oid in solv_pgpvrfy</changelog>
  <changelog author="mls@suse.de" date="1720699200">- removed dependency on external find program in the repo2solv tool
- bindings: fix return value of repodata.add_solv()
- new SOLVER_FLAG_FOCUS_NEW flag
- bump version to 0.7.30</changelog>
  <changelog author="mls@suse.de" date="1731412800">- fix replaces_installed_package using the wrong solvable id
  when checking the noupdate map
- make POOL_FLAG_ADDFILEPROVIDESFILTERED behaviour more standard
- add rpm_query_idarray query function
- support rpm's "orderwithrequires" dependency
- bump version to 0.7.31</changelog>
  <changelog author="bwiedemann@suse.com" date="1736942400">- Provide a symbol specific for the ruby-version
  so yast does not break across updates (boo#1235598)</changelog>
  <changelog author="mls@suse.de" date="1743681600">- build both static and dynamic libraries on new suse distros
- support the apk package and repository format (both v2 and v3)
- new dataiterator_final_{repo,solvable} functions
- bump version to 0.7.32</changelog>
  <changelog author="mls@suse.de" date="1748952000">- improve transaction ordering by allowing more uninst-&gt;uninst
  edges [bsc#1243457]
- implement color filtering when adding update targets
- support orderwithrequires dependencies in susedata.xml
- bump version to 0.7.33</changelog>
  <changelog author="mls@suse.de" date="1751889600">- add support for product-obsoletes() provides in the product
  autopackage generation code
- bump version to 0.7.34</changelog>
</package>
<package pkgid="60dec4d2a27a241ae10605aa9e6e9f11548e99bf86aad2271344377c68037e92" name="libsolv-devel" arch="x86_64">
  <version epoch="0" ver="0.7.35" rel="150700.11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
  <changelog author="mls@suse.de" date="1706270400">- build for multiple python versions [jsc#PED-6218]
- bump version to 0.7.28</changelog>
  <changelog author="dmueller@suse.com" date="1713787200">- split libsolv-tools into libsolv-tools-base [jsc#PED-8153]</changelog>
  <changelog author="mls@suse.de" date="1714478400">- improve updating of installed multiversion packages
- fix decision introspection going into an endless loop in some
  cases
- added experimental lua bindings
- bump version to 0.7.29</changelog>
  <changelog author="mls@suse.de" date="1717761600">- add a conflict to older libsolv-tools to libsolv-tools-base
- report unsupported compression in solv_xfopen() with errno
- fix return value of repodata.add_solv() in the bindings
- fix SHA-224 oid in solv_pgpvrfy</changelog>
  <changelog author="mls@suse.de" date="1720699200">- removed dependency on external find program in the repo2solv tool
- bindings: fix return value of repodata.add_solv()
- new SOLVER_FLAG_FOCUS_NEW flag
- bump version to 0.7.30</changelog>
  <changelog author="mls@suse.de" date="1731412800">- fix replaces_installed_package using the wrong solvable id
  when checking the noupdate map
- make POOL_FLAG_ADDFILEPROVIDESFILTERED behaviour more standard
- add rpm_query_idarray query function
- support rpm's "orderwithrequires" dependency
- bump version to 0.7.31</changelog>
  <changelog author="bwiedemann@suse.com" date="1736942400">- Provide a symbol specific for the ruby-version
  so yast does not break across updates (boo#1235598)</changelog>
  <changelog author="mls@suse.de" date="1743681600">- build both static and dynamic libraries on new suse distros
- support the apk package and repository format (both v2 and v3)
- new dataiterator_final_{repo,solvable} functions
- bump version to 0.7.32</changelog>
  <changelog author="mls@suse.de" date="1748952000">- improve transaction ordering by allowing more uninst-&gt;uninst
  edges [bsc#1243457]
- implement color filtering when adding update targets
- support orderwithrequires dependencies in susedata.xml
- bump version to 0.7.33</changelog>
  <changelog author="mls@suse.de" date="1751889600">- add support for product-obsoletes() provides in the product
  autopackage generation code
- bump version to 0.7.34</changelog>
  <changelog author="mls@suse.de" date="1754308800">- fixed rare crash in the handling of allowuninstall in combination
  with forcebest updates
- new pool_satisfieddep_map feature to test if a set of packages
  satisfies a dependency
- bump version to 0.7.35</changelog>
</package>
<package pkgid="c45ffc4d7f1cf4fbb40d4520e96ba02548fe44b85e9a719f65eecf8d68c4a089" name="libsolv-devel" arch="x86_64">
  <version epoch="0" ver="0.7.35" rel="150700.11.5.2"/>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
  <changelog author="mls@suse.de" date="1706270400">- build for multiple python versions [jsc#PED-6218]
- bump version to 0.7.28</changelog>
  <changelog author="dmueller@suse.com" date="1713787200">- split libsolv-tools into libsolv-tools-base [jsc#PED-8153]</changelog>
  <changelog author="mls@suse.de" date="1714478400">- improve updating of installed multiversion packages
- fix decision introspection going into an endless loop in some
  cases
- added experimental lua bindings
- bump version to 0.7.29</changelog>
  <changelog author="mls@suse.de" date="1717761600">- add a conflict to older libsolv-tools to libsolv-tools-base
- report unsupported compression in solv_xfopen() with errno
- fix return value of repodata.add_solv() in the bindings
- fix SHA-224 oid in solv_pgpvrfy</changelog>
  <changelog author="mls@suse.de" date="1720699200">- removed dependency on external find program in the repo2solv tool
- bindings: fix return value of repodata.add_solv()
- new SOLVER_FLAG_FOCUS_NEW flag
- bump version to 0.7.30</changelog>
  <changelog author="mls@suse.de" date="1731412800">- fix replaces_installed_package using the wrong solvable id
  when checking the noupdate map
- make POOL_FLAG_ADDFILEPROVIDESFILTERED behaviour more standard
- add rpm_query_idarray query function
- support rpm's "orderwithrequires" dependency
- bump version to 0.7.31</changelog>
  <changelog author="bwiedemann@suse.com" date="1736942400">- Provide a symbol specific for the ruby-version
  so yast does not break across updates (boo#1235598)</changelog>
  <changelog author="mls@suse.de" date="1743681600">- build both static and dynamic libraries on new suse distros
- support the apk package and repository format (both v2 and v3)
- new dataiterator_final_{repo,solvable} functions
- bump version to 0.7.32</changelog>
  <changelog author="mls@suse.de" date="1748952000">- improve transaction ordering by allowing more uninst-&gt;uninst
  edges [bsc#1243457]
- implement color filtering when adding update targets
- support orderwithrequires dependencies in susedata.xml
- bump version to 0.7.33</changelog>
  <changelog author="mls@suse.de" date="1751889600">- add support for product-obsoletes() provides in the product
  autopackage generation code
- bump version to 0.7.34</changelog>
  <changelog author="mls@suse.de" date="1754308800">- fixed rare crash in the handling of allowuninstall in combination
  with forcebest updates
- new pool_satisfieddep_map feature to test if a set of packages
  satisfies a dependency
- bump version to 0.7.35</changelog>
</package>
<package pkgid="e2e6e593043cb03f836dd69ca8efa4e58559365be313c841c420e0997b1b2bfd" name="libsolv-tools" arch="x86_64">
  <version epoch="0" ver="0.7.32" rel="150600.8.10.1"/>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
  <changelog author="mls@suse.de" date="1706270400">- build for multiple python versions [jsc#PED-6218]
- bump version to 0.7.28</changelog>
  <changelog author="dmueller@suse.com" date="1713787200">- split libsolv-tools into libsolv-tools-base [jsc#PED-8153]</changelog>
  <changelog author="mls@suse.de" date="1714478400">- improve updating of installed multiversion packages
- fix decision introspection going into an endless loop in some
  cases
- added experimental lua bindings
- bump version to 0.7.29</changelog>
  <changelog author="mls@suse.de" date="1717761600">- add a conflict to older libsolv-tools to libsolv-tools-base
- report unsupported compression in solv_xfopen() with errno
- fix return value of repodata.add_solv() in the bindings
- fix SHA-224 oid in solv_pgpvrfy</changelog>
  <changelog author="mls@suse.de" date="1720699200">- removed dependency on external find program in the repo2solv tool
- bindings: fix return value of repodata.add_solv()
- new SOLVER_FLAG_FOCUS_NEW flag
- bump version to 0.7.30</changelog>
  <changelog author="mls@suse.de" date="1731412800">- fix replaces_installed_package using the wrong solvable id
  when checking the noupdate map
- make POOL_FLAG_ADDFILEPROVIDESFILTERED behaviour more standard
- add rpm_query_idarray query function
- support rpm's "orderwithrequires" dependency
- bump version to 0.7.31</changelog>
  <changelog author="bwiedemann@suse.com" date="1736942400">- Provide a symbol specific for the ruby-version
  so yast does not break across updates (boo#1235598)</changelog>
  <changelog author="mls@suse.de" date="1743681600">- build both static and dynamic libraries on new suse distros
- support the apk package and repository format (both v2 and v3)
- new dataiterator_final_{repo,solvable} functions
- bump version to 0.7.32</changelog>
</package>
<package pkgid="d63eb51931ef782be222f4ade2e47eb615b5591eb2c54908c25d773150847424" name="libsolv-tools" arch="x86_64">
  <version epoch="0" ver="0.7.34" rel="150600.8.17.2"/>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
  <changelog author="mls@suse.de" date="1706270400">- build for multiple python versions [jsc#PED-6218]
- bump version to 0.7.28</changelog>
  <changelog author="dmueller@suse.com" date="1713787200">- split libsolv-tools into libsolv-tools-base [jsc#PED-8153]</changelog>
  <changelog author="mls@suse.de" date="1714478400">- improve updating of installed multiversion packages
- fix decision introspection going into an endless loop in some
  cases
- added experimental lua bindings
- bump version to 0.7.29</changelog>
  <changelog author="mls@suse.de" date="1717761600">- add a conflict to older libsolv-tools to libsolv-tools-base
- report unsupported compression in solv_xfopen() with errno
- fix return value of repodata.add_solv() in the bindings
- fix SHA-224 oid in solv_pgpvrfy</changelog>
  <changelog author="mls@suse.de" date="1720699200">- removed dependency on external find program in the repo2solv tool
- bindings: fix return value of repodata.add_solv()
- new SOLVER_FLAG_FOCUS_NEW flag
- bump version to 0.7.30</changelog>
  <changelog author="mls@suse.de" date="1731412800">- fix replaces_installed_package using the wrong solvable id
  when checking the noupdate map
- make POOL_FLAG_ADDFILEPROVIDESFILTERED behaviour more standard
- add rpm_query_idarray query function
- support rpm's "orderwithrequires" dependency
- bump version to 0.7.31</changelog>
  <changelog author="bwiedemann@suse.com" date="1736942400">- Provide a symbol specific for the ruby-version
  so yast does not break across updates (boo#1235598)</changelog>
  <changelog author="mls@suse.de" date="1743681600">- build both static and dynamic libraries on new suse distros
- support the apk package and repository format (both v2 and v3)
- new dataiterator_final_{repo,solvable} functions
- bump version to 0.7.32</changelog>
  <changelog author="mls@suse.de" date="1748952000">- improve transaction ordering by allowing more uninst-&gt;uninst
  edges [bsc#1243457]
- implement color filtering when adding update targets
- support orderwithrequires dependencies in susedata.xml
- bump version to 0.7.33</changelog>
  <changelog author="mls@suse.de" date="1751889600">- add support for product-obsoletes() provides in the product
  autopackage generation code
- bump version to 0.7.34</changelog>
</package>
<package pkgid="1267a3e3c5db6fad5a3a8129721c3b008a210ffaff3485d3e5168c9c45cf3823" name="libsolv-tools" arch="x86_64">
  <version epoch="0" ver="0.7.35" rel="150700.11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
  <changelog author="mls@suse.de" date="1706270400">- build for multiple python versions [jsc#PED-6218]
- bump version to 0.7.28</changelog>
  <changelog author="dmueller@suse.com" date="1713787200">- split libsolv-tools into libsolv-tools-base [jsc#PED-8153]</changelog>
  <changelog author="mls@suse.de" date="1714478400">- improve updating of installed multiversion packages
- fix decision introspection going into an endless loop in some
  cases
- added experimental lua bindings
- bump version to 0.7.29</changelog>
  <changelog author="mls@suse.de" date="1717761600">- add a conflict to older libsolv-tools to libsolv-tools-base
- report unsupported compression in solv_xfopen() with errno
- fix return value of repodata.add_solv() in the bindings
- fix SHA-224 oid in solv_pgpvrfy</changelog>
  <changelog author="mls@suse.de" date="1720699200">- removed dependency on external find program in the repo2solv tool
- bindings: fix return value of repodata.add_solv()
- new SOLVER_FLAG_FOCUS_NEW flag
- bump version to 0.7.30</changelog>
  <changelog author="mls@suse.de" date="1731412800">- fix replaces_installed_package using the wrong solvable id
  when checking the noupdate map
- make POOL_FLAG_ADDFILEPROVIDESFILTERED behaviour more standard
- add rpm_query_idarray query function
- support rpm's "orderwithrequires" dependency
- bump version to 0.7.31</changelog>
  <changelog author="bwiedemann@suse.com" date="1736942400">- Provide a symbol specific for the ruby-version
  so yast does not break across updates (boo#1235598)</changelog>
  <changelog author="mls@suse.de" date="1743681600">- build both static and dynamic libraries on new suse distros
- support the apk package and repository format (both v2 and v3)
- new dataiterator_final_{repo,solvable} functions
- bump version to 0.7.32</changelog>
  <changelog author="mls@suse.de" date="1748952000">- improve transaction ordering by allowing more uninst-&gt;uninst
  edges [bsc#1243457]
- implement color filtering when adding update targets
- support orderwithrequires dependencies in susedata.xml
- bump version to 0.7.33</changelog>
  <changelog author="mls@suse.de" date="1751889600">- add support for product-obsoletes() provides in the product
  autopackage generation code
- bump version to 0.7.34</changelog>
  <changelog author="mls@suse.de" date="1754308800">- fixed rare crash in the handling of allowuninstall in combination
  with forcebest updates
- new pool_satisfieddep_map feature to test if a set of packages
  satisfies a dependency
- bump version to 0.7.35</changelog>
</package>
<package pkgid="49bf5b8f496e2d2360b6137933215d0d84e34ba60b84fe9969c19ba2cdfe4e61" name="libsolv-tools" arch="x86_64">
  <version epoch="0" ver="0.7.35" rel="150700.11.5.2"/>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
  <changelog author="mls@suse.de" date="1706270400">- build for multiple python versions [jsc#PED-6218]
- bump version to 0.7.28</changelog>
  <changelog author="dmueller@suse.com" date="1713787200">- split libsolv-tools into libsolv-tools-base [jsc#PED-8153]</changelog>
  <changelog author="mls@suse.de" date="1714478400">- improve updating of installed multiversion packages
- fix decision introspection going into an endless loop in some
  cases
- added experimental lua bindings
- bump version to 0.7.29</changelog>
  <changelog author="mls@suse.de" date="1717761600">- add a conflict to older libsolv-tools to libsolv-tools-base
- report unsupported compression in solv_xfopen() with errno
- fix return value of repodata.add_solv() in the bindings
- fix SHA-224 oid in solv_pgpvrfy</changelog>
  <changelog author="mls@suse.de" date="1720699200">- removed dependency on external find program in the repo2solv tool
- bindings: fix return value of repodata.add_solv()
- new SOLVER_FLAG_FOCUS_NEW flag
- bump version to 0.7.30</changelog>
  <changelog author="mls@suse.de" date="1731412800">- fix replaces_installed_package using the wrong solvable id
  when checking the noupdate map
- make POOL_FLAG_ADDFILEPROVIDESFILTERED behaviour more standard
- add rpm_query_idarray query function
- support rpm's "orderwithrequires" dependency
- bump version to 0.7.31</changelog>
  <changelog author="bwiedemann@suse.com" date="1736942400">- Provide a symbol specific for the ruby-version
  so yast does not break across updates (boo#1235598)</changelog>
  <changelog author="mls@suse.de" date="1743681600">- build both static and dynamic libraries on new suse distros
- support the apk package and repository format (both v2 and v3)
- new dataiterator_final_{repo,solvable} functions
- bump version to 0.7.32</changelog>
  <changelog author="mls@suse.de" date="1748952000">- improve transaction ordering by allowing more uninst-&gt;uninst
  edges [bsc#1243457]
- implement color filtering when adding update targets
- support orderwithrequires dependencies in susedata.xml
- bump version to 0.7.33</changelog>
  <changelog author="mls@suse.de" date="1751889600">- add support for product-obsoletes() provides in the product
  autopackage generation code
- bump version to 0.7.34</changelog>
  <changelog author="mls@suse.de" date="1754308800">- fixed rare crash in the handling of allowuninstall in combination
  with forcebest updates
- new pool_satisfieddep_map feature to test if a set of packages
  satisfies a dependency
- bump version to 0.7.35</changelog>
</package>
<package pkgid="b61873eb8f486ecd639643e8756c9080846b71cef0f2716aa9fb924a2a75dd48" name="libsolv-tools-base" arch="x86_64">
  <version epoch="0" ver="0.7.32" rel="150600.8.10.1"/>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
  <changelog author="mls@suse.de" date="1706270400">- build for multiple python versions [jsc#PED-6218]
- bump version to 0.7.28</changelog>
  <changelog author="dmueller@suse.com" date="1713787200">- split libsolv-tools into libsolv-tools-base [jsc#PED-8153]</changelog>
  <changelog author="mls@suse.de" date="1714478400">- improve updating of installed multiversion packages
- fix decision introspection going into an endless loop in some
  cases
- added experimental lua bindings
- bump version to 0.7.29</changelog>
  <changelog author="mls@suse.de" date="1717761600">- add a conflict to older libsolv-tools to libsolv-tools-base
- report unsupported compression in solv_xfopen() with errno
- fix return value of repodata.add_solv() in the bindings
- fix SHA-224 oid in solv_pgpvrfy</changelog>
  <changelog author="mls@suse.de" date="1720699200">- removed dependency on external find program in the repo2solv tool
- bindings: fix return value of repodata.add_solv()
- new SOLVER_FLAG_FOCUS_NEW flag
- bump version to 0.7.30</changelog>
  <changelog author="mls@suse.de" date="1731412800">- fix replaces_installed_package using the wrong solvable id
  when checking the noupdate map
- make POOL_FLAG_ADDFILEPROVIDESFILTERED behaviour more standard
- add rpm_query_idarray query function
- support rpm's "orderwithrequires" dependency
- bump version to 0.7.31</changelog>
  <changelog author="bwiedemann@suse.com" date="1736942400">- Provide a symbol specific for the ruby-version
  so yast does not break across updates (boo#1235598)</changelog>
  <changelog author="mls@suse.de" date="1743681600">- build both static and dynamic libraries on new suse distros
- support the apk package and repository format (both v2 and v3)
- new dataiterator_final_{repo,solvable} functions
- bump version to 0.7.32</changelog>
</package>
<package pkgid="23a178cce866bab23fdff36377bf4b6b09615cde3e863f114546377d45fac03d" name="libsolv-tools-base" arch="x86_64">
  <version epoch="0" ver="0.7.34" rel="150600.8.17.2"/>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
  <changelog author="mls@suse.de" date="1706270400">- build for multiple python versions [jsc#PED-6218]
- bump version to 0.7.28</changelog>
  <changelog author="dmueller@suse.com" date="1713787200">- split libsolv-tools into libsolv-tools-base [jsc#PED-8153]</changelog>
  <changelog author="mls@suse.de" date="1714478400">- improve updating of installed multiversion packages
- fix decision introspection going into an endless loop in some
  cases
- added experimental lua bindings
- bump version to 0.7.29</changelog>
  <changelog author="mls@suse.de" date="1717761600">- add a conflict to older libsolv-tools to libsolv-tools-base
- report unsupported compression in solv_xfopen() with errno
- fix return value of repodata.add_solv() in the bindings
- fix SHA-224 oid in solv_pgpvrfy</changelog>
  <changelog author="mls@suse.de" date="1720699200">- removed dependency on external find program in the repo2solv tool
- bindings: fix return value of repodata.add_solv()
- new SOLVER_FLAG_FOCUS_NEW flag
- bump version to 0.7.30</changelog>
  <changelog author="mls@suse.de" date="1731412800">- fix replaces_installed_package using the wrong solvable id
  when checking the noupdate map
- make POOL_FLAG_ADDFILEPROVIDESFILTERED behaviour more standard
- add rpm_query_idarray query function
- support rpm's "orderwithrequires" dependency
- bump version to 0.7.31</changelog>
  <changelog author="bwiedemann@suse.com" date="1736942400">- Provide a symbol specific for the ruby-version
  so yast does not break across updates (boo#1235598)</changelog>
  <changelog author="mls@suse.de" date="1743681600">- build both static and dynamic libraries on new suse distros
- support the apk package and repository format (both v2 and v3)
- new dataiterator_final_{repo,solvable} functions
- bump version to 0.7.32</changelog>
  <changelog author="mls@suse.de" date="1748952000">- improve transaction ordering by allowing more uninst-&gt;uninst
  edges [bsc#1243457]
- implement color filtering when adding update targets
- support orderwithrequires dependencies in susedata.xml
- bump version to 0.7.33</changelog>
  <changelog author="mls@suse.de" date="1751889600">- add support for product-obsoletes() provides in the product
  autopackage generation code
- bump version to 0.7.34</changelog>
</package>
<package pkgid="c7a19d5571f4011c8a236e9694b65378cd6fd148f7d6ca713435e1e3c0c68315" name="libsolv-tools-base" arch="x86_64">
  <version epoch="0" ver="0.7.35" rel="150700.11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
  <changelog author="mls@suse.de" date="1706270400">- build for multiple python versions [jsc#PED-6218]
- bump version to 0.7.28</changelog>
  <changelog author="dmueller@suse.com" date="1713787200">- split libsolv-tools into libsolv-tools-base [jsc#PED-8153]</changelog>
  <changelog author="mls@suse.de" date="1714478400">- improve updating of installed multiversion packages
- fix decision introspection going into an endless loop in some
  cases
- added experimental lua bindings
- bump version to 0.7.29</changelog>
  <changelog author="mls@suse.de" date="1717761600">- add a conflict to older libsolv-tools to libsolv-tools-base
- report unsupported compression in solv_xfopen() with errno
- fix return value of repodata.add_solv() in the bindings
- fix SHA-224 oid in solv_pgpvrfy</changelog>
  <changelog author="mls@suse.de" date="1720699200">- removed dependency on external find program in the repo2solv tool
- bindings: fix return value of repodata.add_solv()
- new SOLVER_FLAG_FOCUS_NEW flag
- bump version to 0.7.30</changelog>
  <changelog author="mls@suse.de" date="1731412800">- fix replaces_installed_package using the wrong solvable id
  when checking the noupdate map
- make POOL_FLAG_ADDFILEPROVIDESFILTERED behaviour more standard
- add rpm_query_idarray query function
- support rpm's "orderwithrequires" dependency
- bump version to 0.7.31</changelog>
  <changelog author="bwiedemann@suse.com" date="1736942400">- Provide a symbol specific for the ruby-version
  so yast does not break across updates (boo#1235598)</changelog>
  <changelog author="mls@suse.de" date="1743681600">- build both static and dynamic libraries on new suse distros
- support the apk package and repository format (both v2 and v3)
- new dataiterator_final_{repo,solvable} functions
- bump version to 0.7.32</changelog>
  <changelog author="mls@suse.de" date="1748952000">- improve transaction ordering by allowing more uninst-&gt;uninst
  edges [bsc#1243457]
- implement color filtering when adding update targets
- support orderwithrequires dependencies in susedata.xml
- bump version to 0.7.33</changelog>
  <changelog author="mls@suse.de" date="1751889600">- add support for product-obsoletes() provides in the product
  autopackage generation code
- bump version to 0.7.34</changelog>
  <changelog author="mls@suse.de" date="1754308800">- fixed rare crash in the handling of allowuninstall in combination
  with forcebest updates
- new pool_satisfieddep_map feature to test if a set of packages
  satisfies a dependency
- bump version to 0.7.35</changelog>
</package>
<package pkgid="d8fc1df8d2d07d59a4f430017f3547f48d5836247291a08fe1bff3190197d9ad" name="libsolv-tools-base" arch="x86_64">
  <version epoch="0" ver="0.7.35" rel="150700.11.5.2"/>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
  <changelog author="mls@suse.de" date="1706270400">- build for multiple python versions [jsc#PED-6218]
- bump version to 0.7.28</changelog>
  <changelog author="dmueller@suse.com" date="1713787200">- split libsolv-tools into libsolv-tools-base [jsc#PED-8153]</changelog>
  <changelog author="mls@suse.de" date="1714478400">- improve updating of installed multiversion packages
- fix decision introspection going into an endless loop in some
  cases
- added experimental lua bindings
- bump version to 0.7.29</changelog>
  <changelog author="mls@suse.de" date="1717761600">- add a conflict to older libsolv-tools to libsolv-tools-base
- report unsupported compression in solv_xfopen() with errno
- fix return value of repodata.add_solv() in the bindings
- fix SHA-224 oid in solv_pgpvrfy</changelog>
  <changelog author="mls@suse.de" date="1720699200">- removed dependency on external find program in the repo2solv tool
- bindings: fix return value of repodata.add_solv()
- new SOLVER_FLAG_FOCUS_NEW flag
- bump version to 0.7.30</changelog>
  <changelog author="mls@suse.de" date="1731412800">- fix replaces_installed_package using the wrong solvable id
  when checking the noupdate map
- make POOL_FLAG_ADDFILEPROVIDESFILTERED behaviour more standard
- add rpm_query_idarray query function
- support rpm's "orderwithrequires" dependency
- bump version to 0.7.31</changelog>
  <changelog author="bwiedemann@suse.com" date="1736942400">- Provide a symbol specific for the ruby-version
  so yast does not break across updates (boo#1235598)</changelog>
  <changelog author="mls@suse.de" date="1743681600">- build both static and dynamic libraries on new suse distros
- support the apk package and repository format (both v2 and v3)
- new dataiterator_final_{repo,solvable} functions
- bump version to 0.7.32</changelog>
  <changelog author="mls@suse.de" date="1748952000">- improve transaction ordering by allowing more uninst-&gt;uninst
  edges [bsc#1243457]
- implement color filtering when adding update targets
- support orderwithrequires dependencies in susedata.xml
- bump version to 0.7.33</changelog>
  <changelog author="mls@suse.de" date="1751889600">- add support for product-obsoletes() provides in the product
  autopackage generation code
- bump version to 0.7.34</changelog>
  <changelog author="mls@suse.de" date="1754308800">- fixed rare crash in the handling of allowuninstall in combination
  with forcebest updates
- new pool_satisfieddep_map feature to test if a set of packages
  satisfies a dependency
- bump version to 0.7.35</changelog>
</package>
<package pkgid="893921ec8cc4f643e5e1ace084bedec6b617dfcb8aca0cb390839f0dcb49abc5" name="libsoup-2_4-1" arch="x86_64">
  <version epoch="0" ver="2.74.3" rel="150600.4.12.1"/>
  <changelog author="dimstar@opensuse.org" date="1599220800">- Update to version 2.71.0:
  + Redesign directory list returned for `file://` requests.
  + Add `SOUP_COOKIE_JAR_ACCEPT_GRANDFATHERED_THIRD_PARTY` policy.
  + Add soup_message_is_feature_disabled() API.
  + Fix potential leak when setting SoupSession:tls-interaction.
  + Fix building with Visual Studio.
  + Updated translations.
- Drop libsoup-test-utils-fix.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1599307200">- Update to version 2.71.1:
  + Add support for 308 Premanent Redirect.
  + Add basic sysprof profiling for HTTP messages.
  + Various build fixes.
  + Updated translations.
- Add pkgconfig(sysprof-4) and pkgconfig(sysprof-capture-4)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1600084800">- Update to version 2.72.0:
  + Fix critical after cancelling a message that failed auth.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Disable sysprof integration: this causes a nasty build cycle.
  + Pass -Dsysprof=disabled to meson.
  + Remove pkgconfig(sysprof-4) and pkgconfig(sysprof-capture-4),
    as well as pkgconfig(sysprof-4) in the devel project.</changelog>
  <changelog author="pmonreal@suse.com" date="1612785600">- Fix tests: fix SSL test with glib-networking &gt;= 2.65.90
  * See https://gitlab.gnome.org/GNOME/libsoup/issues/201
- Add libsoup-fix-SSL-test.patch
- Remove patches:
  * libsoup-disable-ssl-tests.patch
  * libsoup-disable-hsts-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1612785601">- Disable tls_interaction-test until resolved upstream
  * See https://gitlab.gnome.org/GNOME/libsoup/issues/120
- Add libsoup-skip-tls_interaction-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614340800">- Run the regression tests using GnuTLS NORMAL priority</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.74.0:
  + IMPORTANT: Enable ssl-use-system-ca-file by default on
    deprecated Sync and Async sessions.
  + Fix including headers in C++ projects.
  + Fix attempting to resolve relative paths with data URIs.
  + Support Content-Disposition headers without a disposition-type.
  + Fix building VAPI bindings with latest Vala.
  + Fix sending a Content-Length header in a response with status
    code of 1xx or 204.
  + Updated translations.
- Drop libsoup-fix-SSL-test.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629892800">- Rename source package to libsoup2, as a compatibility package
  while the world moves to libsoup3 (with HTTP/2 support).</changelog>
  <changelog author="dimstar@opensuse.org" date="1632916800">- Add Provides: libsoup2 to the library, so that the lang package
  is installable.
- Remove the left-over provides/obsoltes for libsoup (which is now
  libsoup 3).</changelog>
  <changelog author="bwiedemann@suse.com" date="1633176000">- Add libsoup2-extend-test-cert.patch to fix tests after 2027 (boo#1102840)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635076800">- Update to version 2.74.1:
  + Fix support for older versions of Vala.
  + Fix trying to build sysprof as a subproject on Windows.
  + Fix missing `extern "C"` in an installed header.
  + Improve `gssapi` dependency handling.
  + Fix `libsoup-doc` build target.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637755200">- Update to version 2.74.2:
  + Error when libsoup3 is already loaded before libsoup2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 2.74.3:
  + Add missing g-i annotations to `soup_address_get_sockaddr()`
    and `soup_socket_read_until()`.
  + Add missing `extern` when building on Windows.
  + Update libxml2 fallback for meson wrap.
  + Improvements when using libsoup with meson wraps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690804800">- Add upstream bug fixes:
  + 4d12c3e5.patch: lib: Add g_task_set_source_tag() everywhere
  + 48b3b611.patch: lib: Add names to various GSources
- Drop no longer valid translation-update-upstream BuildRequires
  and macro.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1702555200">- Add ced3c5d8.patch: Fix build with libxml2-2.12.0 and clang-17.</changelog>
  <changelog author="mgorse@suse.com" date="1731499200">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add libsoup-CVE-2024-52532.patch: websocket: Process the frame as
  soon as we read data (boo#1233287 CVE-2024-52532).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).</changelog>
  <changelog author="mgorse@suse.com" date="1746014400">- Add more CVE fixes:
  + ef6c4bf6.patch (boo#1240750 CVE-2025-2784)
  + 96c22b67.patch (boo#1240750 CVE-2025-2784)
  + 19124679.patch (boo#1240752 CVE-2025-32050)
  + a5b86bfc.patch (boo#1240756 CVE-2025-32052)
  + 5739a090.patch (boo#1240757 CVE-2025-32053)
  + c9083869.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
</package>
<package pkgid="8920a1cb9f104350358e1a902a5826f91954188548bf06ed0c05ab212d138134" name="libsoup-2_4-1" arch="x86_64">
  <version epoch="0" ver="2.74.3" rel="150600.4.19.1"/>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Disable sysprof integration: this causes a nasty build cycle.
  + Pass -Dsysprof=disabled to meson.
  + Remove pkgconfig(sysprof-4) and pkgconfig(sysprof-capture-4),
    as well as pkgconfig(sysprof-4) in the devel project.</changelog>
  <changelog author="pmonreal@suse.com" date="1612785600">- Fix tests: fix SSL test with glib-networking &gt;= 2.65.90
  * See https://gitlab.gnome.org/GNOME/libsoup/issues/201
- Add libsoup-fix-SSL-test.patch
- Remove patches:
  * libsoup-disable-ssl-tests.patch
  * libsoup-disable-hsts-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1612785601">- Disable tls_interaction-test until resolved upstream
  * See https://gitlab.gnome.org/GNOME/libsoup/issues/120
- Add libsoup-skip-tls_interaction-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614340800">- Run the regression tests using GnuTLS NORMAL priority</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.74.0:
  + IMPORTANT: Enable ssl-use-system-ca-file by default on
    deprecated Sync and Async sessions.
  + Fix including headers in C++ projects.
  + Fix attempting to resolve relative paths with data URIs.
  + Support Content-Disposition headers without a disposition-type.
  + Fix building VAPI bindings with latest Vala.
  + Fix sending a Content-Length header in a response with status
    code of 1xx or 204.
  + Updated translations.
- Drop libsoup-fix-SSL-test.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629892800">- Rename source package to libsoup2, as a compatibility package
  while the world moves to libsoup3 (with HTTP/2 support).</changelog>
  <changelog author="dimstar@opensuse.org" date="1632916800">- Add Provides: libsoup2 to the library, so that the lang package
  is installable.
- Remove the left-over provides/obsoltes for libsoup (which is now
  libsoup 3).</changelog>
  <changelog author="bwiedemann@suse.com" date="1633176000">- Add libsoup2-extend-test-cert.patch to fix tests after 2027 (boo#1102840)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635076800">- Update to version 2.74.1:
  + Fix support for older versions of Vala.
  + Fix trying to build sysprof as a subproject on Windows.
  + Fix missing `extern "C"` in an installed header.
  + Improve `gssapi` dependency handling.
  + Fix `libsoup-doc` build target.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637755200">- Update to version 2.74.2:
  + Error when libsoup3 is already loaded before libsoup2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 2.74.3:
  + Add missing g-i annotations to `soup_address_get_sockaddr()`
    and `soup_socket_read_until()`.
  + Add missing `extern` when building on Windows.
  + Update libxml2 fallback for meson wrap.
  + Improvements when using libsoup with meson wraps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690804800">- Add upstream bug fixes:
  + 4d12c3e5.patch: lib: Add g_task_set_source_tag() everywhere
  + 48b3b611.patch: lib: Add names to various GSources
- Drop no longer valid translation-update-upstream BuildRequires
  and macro.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1702555200">- Add ced3c5d8.patch: Fix build with libxml2-2.12.0 and clang-17.</changelog>
  <changelog author="mgorse@suse.com" date="1731499200">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add libsoup-CVE-2024-52532.patch: websocket: Process the frame as
  soon as we read data (boo#1233287 CVE-2024-52532).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).</changelog>
  <changelog author="mgorse@suse.com" date="1746014400">- Add more CVE fixes:
  + ef6c4bf6.patch (boo#1240750 CVE-2025-2784)
  + 96c22b67.patch (boo#1240750 CVE-2025-2784)
  + 19124679.patch (boo#1240752 CVE-2025-32050)
  + a5b86bfc.patch (boo#1240756 CVE-2025-32052)
  + 5739a090.patch (boo#1240757 CVE-2025-32053)
  + c9083869.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767700800">- Add libsoup2-CVE-2025-14523.patch: Reject duplicated Host in
  headers (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!489).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767873600">- Refresh libsoup2-CVE-2025-14523.patch: Follow the update of
  upstream (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!491).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1768305600">- Add libsoup2-CVE-2026-0719.patch: Fix overflow for password
  md4sum (bsc#1256399, CVE-2026-0719, glgo#GNOME/libsoup!493).</changelog>
</package>
<package pkgid="91acab81ad8390c0125742bdbd9218882c4e3c63d53942023a45029c9ea2c017" name="libsoup-2_4-1" arch="x86_64">
  <version epoch="0" ver="2.74.3" rel="150600.4.24.1"/>
  <changelog author="pmonreal@suse.com" date="1614340800">- Run the regression tests using GnuTLS NORMAL priority</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.74.0:
  + IMPORTANT: Enable ssl-use-system-ca-file by default on
    deprecated Sync and Async sessions.
  + Fix including headers in C++ projects.
  + Fix attempting to resolve relative paths with data URIs.
  + Support Content-Disposition headers without a disposition-type.
  + Fix building VAPI bindings with latest Vala.
  + Fix sending a Content-Length header in a response with status
    code of 1xx or 204.
  + Updated translations.
- Drop libsoup-fix-SSL-test.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629892800">- Rename source package to libsoup2, as a compatibility package
  while the world moves to libsoup3 (with HTTP/2 support).</changelog>
  <changelog author="dimstar@opensuse.org" date="1632916800">- Add Provides: libsoup2 to the library, so that the lang package
  is installable.
- Remove the left-over provides/obsoltes for libsoup (which is now
  libsoup 3).</changelog>
  <changelog author="bwiedemann@suse.com" date="1633176000">- Add libsoup2-extend-test-cert.patch to fix tests after 2027 (boo#1102840)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635076800">- Update to version 2.74.1:
  + Fix support for older versions of Vala.
  + Fix trying to build sysprof as a subproject on Windows.
  + Fix missing `extern "C"` in an installed header.
  + Improve `gssapi` dependency handling.
  + Fix `libsoup-doc` build target.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637755200">- Update to version 2.74.2:
  + Error when libsoup3 is already loaded before libsoup2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 2.74.3:
  + Add missing g-i annotations to `soup_address_get_sockaddr()`
    and `soup_socket_read_until()`.
  + Add missing `extern` when building on Windows.
  + Update libxml2 fallback for meson wrap.
  + Improvements when using libsoup with meson wraps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690804800">- Add upstream bug fixes:
  + 4d12c3e5.patch: lib: Add g_task_set_source_tag() everywhere
  + 48b3b611.patch: lib: Add names to various GSources
- Drop no longer valid translation-update-upstream BuildRequires
  and macro.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1702555200">- Add ced3c5d8.patch: Fix build with libxml2-2.12.0 and clang-17.</changelog>
  <changelog author="mgorse@suse.com" date="1731499200">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add libsoup-CVE-2024-52532.patch: websocket: Process the frame as
  soon as we read data (boo#1233287 CVE-2024-52532).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).</changelog>
  <changelog author="mgorse@suse.com" date="1746014400">- Add more CVE fixes:
  + ef6c4bf6.patch (boo#1240750 CVE-2025-2784)
  + 96c22b67.patch (boo#1240750 CVE-2025-2784)
  + 19124679.patch (boo#1240752 CVE-2025-32050)
  + a5b86bfc.patch (boo#1240756 CVE-2025-32052)
  + 5739a090.patch (boo#1240757 CVE-2025-32053)
  + c9083869.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767700800">- Add libsoup2-CVE-2025-14523.patch: Reject duplicated Host in
  headers (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!489).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767873600">- Refresh libsoup2-CVE-2025-14523.patch: Follow the update of
  upstream (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!491).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1768305600">- Add libsoup2-CVE-2026-0719.patch: Fix overflow for password
  md4sum (bsc#1256399, CVE-2026-0719, glgo#GNOME/libsoup!493).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1770120000">- Add libsoup2-CVE-2026-1761.patch: multipart: check length of bytes
  read soup_filter_input_stream_read_until()
  (bsc#1257598, CVE-2026-1761, glgo#GNOME/libsoup!496).</changelog>
  <changelog author="mgorse@suse.com" date="1770379200">- Add libsoup2-CVE-2026-0716.patch: Fix out-of-bounds read for
  websocket (bsc#1256418, CVE-2026-0716, glgo#GNOME/libsoup!494).</changelog>
  <changelog author="mgorse@suse.com" date="1770638400">- Add libsoup2-CVE-2025-4476.patch: fix crash in
  soup_auth_digest_get_protection_space (bsc#1243422
  CVE-2025-4476 glgo#GNOME/libsoup#440).
- Increase test timeout for all arches except x86_64 and run tests
  again should they fail the first time, the testsuite is flaky.</changelog>
</package>
<package pkgid="d2165ee1d22646f9346b35771eb8393bd66db2a92cdc2a9f62667d86d1e0b969" name="libsoup-2_4-1" arch="x86_64">
  <version epoch="0" ver="2.74.3" rel="150600.4.27.1"/>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.74.0:
  + IMPORTANT: Enable ssl-use-system-ca-file by default on
    deprecated Sync and Async sessions.
  + Fix including headers in C++ projects.
  + Fix attempting to resolve relative paths with data URIs.
  + Support Content-Disposition headers without a disposition-type.
  + Fix building VAPI bindings with latest Vala.
  + Fix sending a Content-Length header in a response with status
    code of 1xx or 204.
  + Updated translations.
- Drop libsoup-fix-SSL-test.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629892800">- Rename source package to libsoup2, as a compatibility package
  while the world moves to libsoup3 (with HTTP/2 support).</changelog>
  <changelog author="dimstar@opensuse.org" date="1632916800">- Add Provides: libsoup2 to the library, so that the lang package
  is installable.
- Remove the left-over provides/obsoltes for libsoup (which is now
  libsoup 3).</changelog>
  <changelog author="bwiedemann@suse.com" date="1633176000">- Add libsoup2-extend-test-cert.patch to fix tests after 2027 (boo#1102840)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635076800">- Update to version 2.74.1:
  + Fix support for older versions of Vala.
  + Fix trying to build sysprof as a subproject on Windows.
  + Fix missing `extern "C"` in an installed header.
  + Improve `gssapi` dependency handling.
  + Fix `libsoup-doc` build target.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637755200">- Update to version 2.74.2:
  + Error when libsoup3 is already loaded before libsoup2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 2.74.3:
  + Add missing g-i annotations to `soup_address_get_sockaddr()`
    and `soup_socket_read_until()`.
  + Add missing `extern` when building on Windows.
  + Update libxml2 fallback for meson wrap.
  + Improvements when using libsoup with meson wraps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690804800">- Add upstream bug fixes:
  + 4d12c3e5.patch: lib: Add g_task_set_source_tag() everywhere
  + 48b3b611.patch: lib: Add names to various GSources
- Drop no longer valid translation-update-upstream BuildRequires
  and macro.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1702555200">- Add ced3c5d8.patch: Fix build with libxml2-2.12.0 and clang-17.</changelog>
  <changelog author="mgorse@suse.com" date="1731499200">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add libsoup-CVE-2024-52532.patch: websocket: Process the frame as
  soon as we read data (boo#1233287 CVE-2024-52532).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).</changelog>
  <changelog author="mgorse@suse.com" date="1746014400">- Add more CVE fixes:
  + ef6c4bf6.patch (boo#1240750 CVE-2025-2784)
  + 96c22b67.patch (boo#1240750 CVE-2025-2784)
  + 19124679.patch (boo#1240752 CVE-2025-32050)
  + a5b86bfc.patch (boo#1240756 CVE-2025-32052)
  + 5739a090.patch (boo#1240757 CVE-2025-32053)
  + c9083869.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767700800">- Add libsoup2-CVE-2025-14523.patch: Reject duplicated Host in
  headers (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!489).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767873600">- Refresh libsoup2-CVE-2025-14523.patch: Follow the update of
  upstream (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!491).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1768305600">- Add libsoup2-CVE-2026-0719.patch: Fix overflow for password
  md4sum (bsc#1256399, CVE-2026-0719, glgo#GNOME/libsoup!493).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1770120000">- Add libsoup2-CVE-2026-1761.patch: multipart: check length of bytes
  read soup_filter_input_stream_read_until()
  (bsc#1257598, CVE-2026-1761, glgo#GNOME/libsoup!496).</changelog>
  <changelog author="mgorse@suse.com" date="1770379200">- Add libsoup2-CVE-2026-0716.patch: Fix out-of-bounds read for
  websocket (bsc#1256418, CVE-2026-0716, glgo#GNOME/libsoup!494).</changelog>
  <changelog author="mgorse@suse.com" date="1770638400">- Add libsoup2-CVE-2025-4476.patch: fix crash in
  soup_auth_digest_get_protection_space (bsc#1243422
  CVE-2025-4476 glgo#GNOME/libsoup#440).
- Increase test timeout for all arches except x86_64 and run tests
  again should they fail the first time, the testsuite is flaky.</changelog>
  <changelog author="mgorse@suse.com" date="1771588800">- Add more CVE fixes:
  + libsoup2-CVE-2025-32049.patch (bsc#1240751 CVE-2025-32049
    glgo#GNOME/libsoup#390)
  + libsoup2-CVE-2026-2443.patch (bsc#1258170 CVE-2026-2443
    glgo#GNOME/libsoup#487)
  + libsoup2-CVE-2026-2369.patch (bsc#1258120 CVE-2026-2369
    glgo#GNOME/libsoup!508)
  + libsoup2-CVE-2026-2708.patch (bsc#1258508 CVE-2026-2708
    glgo#GNOME/libsoup#500)</changelog>
</package>
<package pkgid="d8c0aa57848af4b89842f70b9329ac8c1fbeda2b354e6e9013e7ea3e47c51369" name="libsoup-2_4-1" arch="x86_64">
  <version epoch="0" ver="2.74.3" rel="150600.4.30.1"/>
  <changelog author="dimstar@opensuse.org" date="1629892800">- Rename source package to libsoup2, as a compatibility package
  while the world moves to libsoup3 (with HTTP/2 support).</changelog>
  <changelog author="dimstar@opensuse.org" date="1632916800">- Add Provides: libsoup2 to the library, so that the lang package
  is installable.
- Remove the left-over provides/obsoltes for libsoup (which is now
  libsoup 3).</changelog>
  <changelog author="bwiedemann@suse.com" date="1633176000">- Add libsoup2-extend-test-cert.patch to fix tests after 2027 (boo#1102840)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635076800">- Update to version 2.74.1:
  + Fix support for older versions of Vala.
  + Fix trying to build sysprof as a subproject on Windows.
  + Fix missing `extern "C"` in an installed header.
  + Improve `gssapi` dependency handling.
  + Fix `libsoup-doc` build target.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637755200">- Update to version 2.74.2:
  + Error when libsoup3 is already loaded before libsoup2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 2.74.3:
  + Add missing g-i annotations to `soup_address_get_sockaddr()`
    and `soup_socket_read_until()`.
  + Add missing `extern` when building on Windows.
  + Update libxml2 fallback for meson wrap.
  + Improvements when using libsoup with meson wraps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690804800">- Add upstream bug fixes:
  + 4d12c3e5.patch: lib: Add g_task_set_source_tag() everywhere
  + 48b3b611.patch: lib: Add names to various GSources
- Drop no longer valid translation-update-upstream BuildRequires
  and macro.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1702555200">- Add ced3c5d8.patch: Fix build with libxml2-2.12.0 and clang-17.</changelog>
  <changelog author="mgorse@suse.com" date="1731499200">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add libsoup-CVE-2024-52532.patch: websocket: Process the frame as
  soon as we read data (boo#1233287 CVE-2024-52532).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).</changelog>
  <changelog author="mgorse@suse.com" date="1746014400">- Add more CVE fixes:
  + ef6c4bf6.patch (boo#1240750 CVE-2025-2784)
  + 96c22b67.patch (boo#1240750 CVE-2025-2784)
  + 19124679.patch (boo#1240752 CVE-2025-32050)
  + a5b86bfc.patch (boo#1240756 CVE-2025-32052)
  + 5739a090.patch (boo#1240757 CVE-2025-32053)
  + c9083869.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767700800">- Add libsoup2-CVE-2025-14523.patch: Reject duplicated Host in
  headers (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!489).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767873600">- Refresh libsoup2-CVE-2025-14523.patch: Follow the update of
  upstream (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!491).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1768305600">- Add libsoup2-CVE-2026-0719.patch: Fix overflow for password
  md4sum (bsc#1256399, CVE-2026-0719, glgo#GNOME/libsoup!493).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1770120000">- Add libsoup2-CVE-2026-1761.patch: multipart: check length of bytes
  read soup_filter_input_stream_read_until()
  (bsc#1257598, CVE-2026-1761, glgo#GNOME/libsoup!496).</changelog>
  <changelog author="mgorse@suse.com" date="1770379200">- Add libsoup2-CVE-2026-0716.patch: Fix out-of-bounds read for
  websocket (bsc#1256418, CVE-2026-0716, glgo#GNOME/libsoup!494).</changelog>
  <changelog author="mgorse@suse.com" date="1770638400">- Add libsoup2-CVE-2025-4476.patch: fix crash in
  soup_auth_digest_get_protection_space (bsc#1243422
  CVE-2025-4476 glgo#GNOME/libsoup#440).
- Increase test timeout for all arches except x86_64 and run tests
  again should they fail the first time, the testsuite is flaky.</changelog>
  <changelog author="mgorse@suse.com" date="1771588800">- Add more CVE fixes:
  + libsoup2-CVE-2025-32049.patch (bsc#1240751 CVE-2025-32049
    glgo#GNOME/libsoup#390)
  + libsoup2-CVE-2026-2443.patch (bsc#1258170 CVE-2026-2443
    glgo#GNOME/libsoup#487)
  + libsoup2-CVE-2026-2369.patch (bsc#1258120 CVE-2026-2369
    glgo#GNOME/libsoup!508)
  + libsoup2-CVE-2026-2708.patch (bsc#1258508 CVE-2026-2708
    glgo#GNOME/libsoup#500)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1772020800">- Add libsoup-CVE-2026-1760.patch: server: close the connection
  after responsing a request containing...
  (bsc#1257597, CVE-2026-1760, glgo#GNOME/libsoup#475).
- Add libsoup-CVE-2026-1467.patch: uri-utils: do host validation
  when checking if a GUri is valid
  (bsc#1257398, CVE-2026-1467, glgo#GNOME/libsoup#488).
- Add libsoup-CVE-2026-1539.patch: Also remove Proxy-Authorization
  header on cross origin redirect
  (bsc#1257441, CVE-2026-1539, glgo#GNOME/libsoup#489).</changelog>
</package>
<package pkgid="7c7fa02880fe897f45f4a8796f9889f06fc5fdd85774aa21f172b83ae6e543a8" name="libsoup-2_4-1" arch="x86_64">
  <version epoch="0" ver="2.74.3" rel="150600.4.33.1"/>
  <changelog author="dimstar@opensuse.org" date="1632916800">- Add Provides: libsoup2 to the library, so that the lang package
  is installable.
- Remove the left-over provides/obsoltes for libsoup (which is now
  libsoup 3).</changelog>
  <changelog author="bwiedemann@suse.com" date="1633176000">- Add libsoup2-extend-test-cert.patch to fix tests after 2027 (boo#1102840)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635076800">- Update to version 2.74.1:
  + Fix support for older versions of Vala.
  + Fix trying to build sysprof as a subproject on Windows.
  + Fix missing `extern "C"` in an installed header.
  + Improve `gssapi` dependency handling.
  + Fix `libsoup-doc` build target.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637755200">- Update to version 2.74.2:
  + Error when libsoup3 is already loaded before libsoup2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 2.74.3:
  + Add missing g-i annotations to `soup_address_get_sockaddr()`
    and `soup_socket_read_until()`.
  + Add missing `extern` when building on Windows.
  + Update libxml2 fallback for meson wrap.
  + Improvements when using libsoup with meson wraps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690804800">- Add upstream bug fixes:
  + 4d12c3e5.patch: lib: Add g_task_set_source_tag() everywhere
  + 48b3b611.patch: lib: Add names to various GSources
- Drop no longer valid translation-update-upstream BuildRequires
  and macro.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1702555200">- Add ced3c5d8.patch: Fix build with libxml2-2.12.0 and clang-17.</changelog>
  <changelog author="mgorse@suse.com" date="1731499200">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add libsoup-CVE-2024-52532.patch: websocket: Process the frame as
  soon as we read data (boo#1233287 CVE-2024-52532).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).</changelog>
  <changelog author="mgorse@suse.com" date="1746014400">- Add more CVE fixes:
  + ef6c4bf6.patch (boo#1240750 CVE-2025-2784)
  + 96c22b67.patch (boo#1240750 CVE-2025-2784)
  + 19124679.patch (boo#1240752 CVE-2025-32050)
  + a5b86bfc.patch (boo#1240756 CVE-2025-32052)
  + 5739a090.patch (boo#1240757 CVE-2025-32053)
  + c9083869.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767700800">- Add libsoup2-CVE-2025-14523.patch: Reject duplicated Host in
  headers (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!489).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767873600">- Refresh libsoup2-CVE-2025-14523.patch: Follow the update of
  upstream (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!491).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1768305600">- Add libsoup2-CVE-2026-0719.patch: Fix overflow for password
  md4sum (bsc#1256399, CVE-2026-0719, glgo#GNOME/libsoup!493).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1770120000">- Add libsoup2-CVE-2026-1761.patch: multipart: check length of bytes
  read soup_filter_input_stream_read_until()
  (bsc#1257598, CVE-2026-1761, glgo#GNOME/libsoup!496).</changelog>
  <changelog author="mgorse@suse.com" date="1770379200">- Add libsoup2-CVE-2026-0716.patch: Fix out-of-bounds read for
  websocket (bsc#1256418, CVE-2026-0716, glgo#GNOME/libsoup!494).</changelog>
  <changelog author="mgorse@suse.com" date="1770638400">- Add libsoup2-CVE-2025-4476.patch: fix crash in
  soup_auth_digest_get_protection_space (bsc#1243422
  CVE-2025-4476 glgo#GNOME/libsoup#440).
- Increase test timeout for all arches except x86_64 and run tests
  again should they fail the first time, the testsuite is flaky.</changelog>
  <changelog author="mgorse@suse.com" date="1771588800">- Add more CVE fixes:
  + libsoup2-CVE-2025-32049.patch (bsc#1240751 CVE-2025-32049
    glgo#GNOME/libsoup#390)
  + libsoup2-CVE-2026-2443.patch (bsc#1258170 CVE-2026-2443
    glgo#GNOME/libsoup#487)
  + libsoup2-CVE-2026-2369.patch (bsc#1258120 CVE-2026-2369
    glgo#GNOME/libsoup!508)
  + libsoup2-CVE-2026-2708.patch (bsc#1258508 CVE-2026-2708
    glgo#GNOME/libsoup#500)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1772020800">- Add libsoup-CVE-2026-1760.patch: server: close the connection
  after responsing a request containing...
  (bsc#1257597, CVE-2026-1760, glgo#GNOME/libsoup#475).
- Add libsoup-CVE-2026-1467.patch: uri-utils: do host validation
  when checking if a GUri is valid
  (bsc#1257398, CVE-2026-1467, glgo#GNOME/libsoup#488).
- Add libsoup-CVE-2026-1539.patch: Also remove Proxy-Authorization
  header on cross origin redirect
  (bsc#1257441, CVE-2026-1539, glgo#GNOME/libsoup#489).</changelog>
  <changelog author="mgorse@suse.com" date="1772712000">- Update libsoup2-CVE-2026-0716.patch to incorporate
  glgo#GNOME/libsoup!518. The original fix was incomplete
  (bsc#1256418 CVE-2026-0716 glgo#GNOME/libsoup#476).</changelog>
</package>
<package pkgid="e933c1744ad8dfe4ebda76aa93036adbe4d894c749f4d461da35682619c8aba7" name="libsoup-2_4-1" arch="x86_64">
  <version epoch="0" ver="2.74.3" rel="150600.4.6.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1587038400">- Add libsoup-disable-ssl-tests.patch: Disable ssl tests, as they
  randomly fail for all arches (glgo#GNOME/libsoup#188).
- Rebase/refresh patches.</changelog>
  <changelog author="dimstar@opensuse.org" date="1589198400">- Autodetect the location of krb5-config: krb5 adds itself to
  $PATH.</changelog>
  <changelog author="dimstar@opensuse.org" date="1599220800">- Update to version 2.71.0:
  + Redesign directory list returned for `file://` requests.
  + Add `SOUP_COOKIE_JAR_ACCEPT_GRANDFATHERED_THIRD_PARTY` policy.
  + Add soup_message_is_feature_disabled() API.
  + Fix potential leak when setting SoupSession:tls-interaction.
  + Fix building with Visual Studio.
  + Updated translations.
- Drop libsoup-test-utils-fix.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1599307200">- Update to version 2.71.1:
  + Add support for 308 Premanent Redirect.
  + Add basic sysprof profiling for HTTP messages.
  + Various build fixes.
  + Updated translations.
- Add pkgconfig(sysprof-4) and pkgconfig(sysprof-capture-4)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1600084800">- Update to version 2.72.0:
  + Fix critical after cancelling a message that failed auth.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Disable sysprof integration: this causes a nasty build cycle.
  + Pass -Dsysprof=disabled to meson.
  + Remove pkgconfig(sysprof-4) and pkgconfig(sysprof-capture-4),
    as well as pkgconfig(sysprof-4) in the devel project.</changelog>
  <changelog author="pmonreal@suse.com" date="1612785600">- Fix tests: fix SSL test with glib-networking &gt;= 2.65.90
  * See https://gitlab.gnome.org/GNOME/libsoup/issues/201
- Add libsoup-fix-SSL-test.patch
- Remove patches:
  * libsoup-disable-ssl-tests.patch
  * libsoup-disable-hsts-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1612785601">- Disable tls_interaction-test until resolved upstream
  * See https://gitlab.gnome.org/GNOME/libsoup/issues/120
- Add libsoup-skip-tls_interaction-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614340800">- Run the regression tests using GnuTLS NORMAL priority</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.74.0:
  + IMPORTANT: Enable ssl-use-system-ca-file by default on
    deprecated Sync and Async sessions.
  + Fix including headers in C++ projects.
  + Fix attempting to resolve relative paths with data URIs.
  + Support Content-Disposition headers without a disposition-type.
  + Fix building VAPI bindings with latest Vala.
  + Fix sending a Content-Length header in a response with status
    code of 1xx or 204.
  + Updated translations.
- Drop libsoup-fix-SSL-test.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629892800">- Rename source package to libsoup2, as a compatibility package
  while the world moves to libsoup3 (with HTTP/2 support).</changelog>
  <changelog author="dimstar@opensuse.org" date="1632916800">- Add Provides: libsoup2 to the library, so that the lang package
  is installable.
- Remove the left-over provides/obsoltes for libsoup (which is now
  libsoup 3).</changelog>
  <changelog author="bwiedemann@suse.com" date="1633176000">- Add libsoup2-extend-test-cert.patch to fix tests after 2027 (boo#1102840)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635076800">- Update to version 2.74.1:
  + Fix support for older versions of Vala.
  + Fix trying to build sysprof as a subproject on Windows.
  + Fix missing `extern "C"` in an installed header.
  + Improve `gssapi` dependency handling.
  + Fix `libsoup-doc` build target.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637755200">- Update to version 2.74.2:
  + Error when libsoup3 is already loaded before libsoup2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 2.74.3:
  + Add missing g-i annotations to `soup_address_get_sockaddr()`
    and `soup_socket_read_until()`.
  + Add missing `extern` when building on Windows.
  + Update libxml2 fallback for meson wrap.
  + Improvements when using libsoup with meson wraps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690804800">- Add upstream bug fixes:
  + 4d12c3e5.patch: lib: Add g_task_set_source_tag() everywhere
  + 48b3b611.patch: lib: Add names to various GSources
- Drop no longer valid translation-update-upstream BuildRequires
  and macro.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1702555200">- Add ced3c5d8.patch: Fix build with libxml2-2.12.0 and clang-17.</changelog>
  <changelog author="mgorse@suse.com" date="1731499200">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add libsoup-CVE-2024-52532.patch: websocket: Process the frame as
  soon as we read data (boo#1233287 CVE-2024-52532).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).</changelog>
  <changelog author="mgorse@suse.com" date="1746014400">- Add more CVE fixes:
  + ef6c4bf6.patch (boo#1240750 CVE-2025-2784)
  + 96c22b67.patch (boo#1240750 CVE-2025-2784)
  + 19124679.patch (boo#1240752 CVE-2025-32050)
  + a5b86bfc.patch (boo#1240756 CVE-2025-32052)
  + 5739a090.patch (boo#1240757 CVE-2025-32053)
  + c9083869.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)</changelog>
</package>
<package pkgid="c8006aad58ea353b0e0df222afc223aacbfbd035c15473a89fa17125ee06919a" name="libsoup-2_4-1" arch="x86_64">
  <version epoch="0" ver="2.74.3" rel="150600.4.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1589198400">- Autodetect the location of krb5-config: krb5 adds itself to
  $PATH.</changelog>
  <changelog author="dimstar@opensuse.org" date="1599220800">- Update to version 2.71.0:
  + Redesign directory list returned for `file://` requests.
  + Add `SOUP_COOKIE_JAR_ACCEPT_GRANDFATHERED_THIRD_PARTY` policy.
  + Add soup_message_is_feature_disabled() API.
  + Fix potential leak when setting SoupSession:tls-interaction.
  + Fix building with Visual Studio.
  + Updated translations.
- Drop libsoup-test-utils-fix.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1599307200">- Update to version 2.71.1:
  + Add support for 308 Premanent Redirect.
  + Add basic sysprof profiling for HTTP messages.
  + Various build fixes.
  + Updated translations.
- Add pkgconfig(sysprof-4) and pkgconfig(sysprof-capture-4)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1600084800">- Update to version 2.72.0:
  + Fix critical after cancelling a message that failed auth.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Disable sysprof integration: this causes a nasty build cycle.
  + Pass -Dsysprof=disabled to meson.
  + Remove pkgconfig(sysprof-4) and pkgconfig(sysprof-capture-4),
    as well as pkgconfig(sysprof-4) in the devel project.</changelog>
  <changelog author="pmonreal@suse.com" date="1612785600">- Fix tests: fix SSL test with glib-networking &gt;= 2.65.90
  * See https://gitlab.gnome.org/GNOME/libsoup/issues/201
- Add libsoup-fix-SSL-test.patch
- Remove patches:
  * libsoup-disable-ssl-tests.patch
  * libsoup-disable-hsts-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1612785601">- Disable tls_interaction-test until resolved upstream
  * See https://gitlab.gnome.org/GNOME/libsoup/issues/120
- Add libsoup-skip-tls_interaction-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614340800">- Run the regression tests using GnuTLS NORMAL priority</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.74.0:
  + IMPORTANT: Enable ssl-use-system-ca-file by default on
    deprecated Sync and Async sessions.
  + Fix including headers in C++ projects.
  + Fix attempting to resolve relative paths with data URIs.
  + Support Content-Disposition headers without a disposition-type.
  + Fix building VAPI bindings with latest Vala.
  + Fix sending a Content-Length header in a response with status
    code of 1xx or 204.
  + Updated translations.
- Drop libsoup-fix-SSL-test.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629892800">- Rename source package to libsoup2, as a compatibility package
  while the world moves to libsoup3 (with HTTP/2 support).</changelog>
  <changelog author="dimstar@opensuse.org" date="1632916800">- Add Provides: libsoup2 to the library, so that the lang package
  is installable.
- Remove the left-over provides/obsoltes for libsoup (which is now
  libsoup 3).</changelog>
  <changelog author="bwiedemann@suse.com" date="1633176000">- Add libsoup2-extend-test-cert.patch to fix tests after 2027 (boo#1102840)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635076800">- Update to version 2.74.1:
  + Fix support for older versions of Vala.
  + Fix trying to build sysprof as a subproject on Windows.
  + Fix missing `extern "C"` in an installed header.
  + Improve `gssapi` dependency handling.
  + Fix `libsoup-doc` build target.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637755200">- Update to version 2.74.2:
  + Error when libsoup3 is already loaded before libsoup2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 2.74.3:
  + Add missing g-i annotations to `soup_address_get_sockaddr()`
    and `soup_socket_read_until()`.
  + Add missing `extern` when building on Windows.
  + Update libxml2 fallback for meson wrap.
  + Improvements when using libsoup with meson wraps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690804800">- Add upstream bug fixes:
  + 4d12c3e5.patch: lib: Add g_task_set_source_tag() everywhere
  + 48b3b611.patch: lib: Add names to various GSources
- Drop no longer valid translation-update-upstream BuildRequires
  and macro.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1702555200">- Add ced3c5d8.patch: Fix build with libxml2-2.12.0 and clang-17.</changelog>
  <changelog author="mgorse@suse.com" date="1731499200">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add libsoup-CVE-2024-52532.patch: websocket: Process the frame as
  soon as we read data (boo#1233287 CVE-2024-52532).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).</changelog>
  <changelog author="mgorse@suse.com" date="1746014400">- Add more CVE fixes:
  + ef6c4bf6.patch (boo#1240750 CVE-2025-2784)
  + 96c22b67.patch (boo#1240750 CVE-2025-2784)
  + 19124679.patch (boo#1240752 CVE-2025-32050)
  + a5b86bfc.patch (boo#1240756 CVE-2025-32052)
  + 5739a090.patch (boo#1240757 CVE-2025-32053)
  + c9083869.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
</package>
<package pkgid="34d6d9d3b7d1046e9615892bb8fbd365daca512c2fa89c80456c3c552d44a411" name="libsoup" arch="src">
  <version epoch="0" ver="3.4.4" rel="150600.3.10.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 3.0.5:
  + Misc HTTP/2 fixes.
  + Fix missing files for installed-tests.
  + Fix SoupServer not properly handling invalid percent encoded
    paths.
  + Fix other areas not properly handling invalid percent encoded
    paths.
  + Fix SoupLogger:max-body-size of 0 meaning log nothing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648814400">- Update to version 3.0.6:
  + Misc HTTP/2 fixes.
  + Add PUT/POST support to examples/get.
  + Add `--user-agent` option to examples/get.
  + Misc meson improvements.
  + Fix build with Visual Studio.</changelog>
  <changelog author="dimstar@opensuse.org" date="1657108800">- Update to version 3.0.7:
  + Fix leak in SoupAuthNTLM.
  + Fix constructing SoupAuthNTLM objects.
  + Disable mutual negotiation in SoupAuthNegotiate.
  + http2:
  - Do not advertise the `h2` protocool for proxy connections.
  - Remove left-over headers when HTTP/1 redirects to HTTP/2.
  - Handle HTTP_1_1_REQUIRED error.
  - Read request bodies synchronously for sync requests.
  - Properly handle server sending shut down GOAWAY.
  + tests:
  - Remove dependency on Apache's PHP module.
  - Depend upon Apache's http2 module.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662120000">- Update to version 3.0.8:
  + Fix `http` proxy authentication with default proxy resolver.
  + Numerous improvments to HTTP/2 reliability.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662206400">- Update to version 3.1.1:
  + Reintroduce some thread-safety to SoupSession (see
    https://libsoup.org/libsoup-3.0/client-thread-safety.html)
  + Add SoupServerMessage:tls-peer-certificate and
    SoupServerMessage:tls-peer-certificate-errors
  + Port docs to gi-docgen
  + Update documentation.
- Replace pkgconfig(gtk-doc) with pkgconfig(gi-docgen)
  BuildRequires (and update options passed to meson) following
  upstreams port.
- Add 299.patch: multithread-test: show error information in case
  of request failure. multithread-test: skip proxy tests if apache
  is not available.
- Use ldconfig_scriptlets for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1662292800">- Update to version 3.1.3:
  + Fix compile error when `SOUP_VERSION_MAX_ALLOWED` is defined.
- Changes from version 3.1.2:
  + Replace HTTP/2 tests using Quart with internal HTTP/2 server
    tests.
  + Improve version macros including adding ability to define
    `SOUP_DISABLE_DEPRECATION_WARNINGS`.
- Drop -D http2_tests=disabled meson paramter: no longer supported.
- Drop 299.patch: merged upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662379200">- Update to version 3.1.4:
  + Numerous improvements to HTTP/2 reliablity.
  + Fix `http` proxy authentication with default proxy resolver.
  + Fix undefined ``ssize_t`` with MSVC.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1663243200">- Update to version 3.2.0:
  + No changes, stable bump only.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 3.2.1:
  + When built against nghttp2 1.50.0+ be relaxed about header
    whitespace.
  + Fix possible crash when cancelling an HTTP/2 message.
  + Fix regresion where soup_server_message_get_socket() could
    return NULL.
  + Fix minor memory leak.
- Disable tests on 32-bit while waiting for
  https://gitlab.gnome.org/GNOME/libsoup/-/issues/309</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1667476800">- Update to version 3.2.2:
  + Various HTTP/2 Fixes:
  - Fix `content-sniffed` not being emitted for resources without
    content.
  - Fix leak of SoupServerConnection when stolen.
- Enable tests on 32-bit again, fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674388800">- Update to version 3.3.0:
  + Add `SoupMessage::got-body-data` signal to monitor progress of
    reads
  + Add `soup_session_send_and_splice()` and
    `soup_session_send_and_splice_async()` convenience APIs
  + Add `soup_message_set_force_http1()` and
    `soup_message_get_force_http1()` APIs
  + Change `soup_cookie_copy()` to not retain default ports
  + Ensure `SoupServerMessage` socket is available in websocket
    handler
  + Fix `soup_message_new()` not erroring when URI has an empty
    host
  + Fix thread-saftey issues in `SoupConnectionAuth`
  + Fix various connection leaks
  + Fix the possibility of sending invalid empty
    `Sec-WebSocket-Protocol` header
  + Fix IO errors not being handled on `CONNECT` messages
  + Numerous improvements to cookies:
  - Add support for cookie prefixes (`__Secure-` and `__Host-`)
  - Reject cookies with control characters in name or value
  - Reject `SameSite=None` cookies without `Secure`
  - Change `soup_cookie_parse()` to be more strict about what is
    considered whitespace
  - Change default SameSite value to `Lax`
  - Fix `soup_cookie_equal()` with `NULL` path</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676289600">- Update to version 3.3.1:
  + Fix regression in `SoupCookieJar` not handling valid Secure
    cookies.
  + Fix crash when skipping HTTP/1 response stream with chunked
    enconding.
  + Change Session to unqueue finished items earlier without an
    extra MainContext iteration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 3.4.0:
  + Fix possible crash in SoupContentSniffer.
  + Fix socket leak.
  + Add missing annotation to
    soup_header_g_string_append_param_quoted().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 3.4.1:
  + Fix HTTP/2 on platforms with unsigned char.
  + Change request cancellation to be handled earlier.
  + Add names to GSources and source tags to GTasks to aid
    debugging.
- Run meson_test macro for all arches.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682769600">- Update to version 3.4.2:
  + Revert changes to request cancellation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 3.4.3:
  + Fix incorrect UTF-8 encoding for params in headers
  + Numerous HTTP/2 fixes and improvements
  + Fix possible crashes in connection management
  + Fix small leak in SoupServer
  + Fix the possibility of empty HTTP/2 frames being sent</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 3.4.4:
  + Improve HTTP/2 performance when a lot of buffering happens
  + Support building libnghttp2 as a subproject</changelog>
  <changelog author="mgorse@suse.com" date="1733313600">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add 6adc0e3e.patch: websocket: Process the frame as soon as we
  read data (boo#1233287 CVE-2024-52532 glgo#GNOME/libsoup#391).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).
- Increase test timeout on s390x. The http2-body-stream test can be
  slow and sometimes times out in our builds.</changelog>
  <changelog author="mgorse@suse.com" date="1745928000">- Add more CVE fixes:
  + libsoup-CVE-2025-32050.patch (boo#1240752 CVE-2025-32050)
  + libsoup-CVE-2025-32051.patch (boo#1240754 CVE-2025-32051)
  + libsoup-CVE-2025-32052.patch (boo#1240756 CVE-2025-32052)
  + libsoup-CVE-2025-32053.patch (boo#1240757 CVE-2025-32053)
  + libsoup-CVE-2025-46420.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-2784.patch (boo#1240750 CVE-2025-2784)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32908.patch (boo#1241223 CVE-2025-32908)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-4476.patch (boo#1243422 CVE-2025-4476)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
</package>
<package pkgid="8bece6ec66c69e2fa6353567991f57d9465ad67522aadbcecbf51438103f5b3a" name="libsoup" arch="src">
  <version epoch="0" ver="3.4.4" rel="150600.3.13.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648814400">- Update to version 3.0.6:
  + Misc HTTP/2 fixes.
  + Add PUT/POST support to examples/get.
  + Add `--user-agent` option to examples/get.
  + Misc meson improvements.
  + Fix build with Visual Studio.</changelog>
  <changelog author="dimstar@opensuse.org" date="1657108800">- Update to version 3.0.7:
  + Fix leak in SoupAuthNTLM.
  + Fix constructing SoupAuthNTLM objects.
  + Disable mutual negotiation in SoupAuthNegotiate.
  + http2:
  - Do not advertise the `h2` protocool for proxy connections.
  - Remove left-over headers when HTTP/1 redirects to HTTP/2.
  - Handle HTTP_1_1_REQUIRED error.
  - Read request bodies synchronously for sync requests.
  - Properly handle server sending shut down GOAWAY.
  + tests:
  - Remove dependency on Apache's PHP module.
  - Depend upon Apache's http2 module.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662120000">- Update to version 3.0.8:
  + Fix `http` proxy authentication with default proxy resolver.
  + Numerous improvments to HTTP/2 reliability.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662206400">- Update to version 3.1.1:
  + Reintroduce some thread-safety to SoupSession (see
    https://libsoup.org/libsoup-3.0/client-thread-safety.html)
  + Add SoupServerMessage:tls-peer-certificate and
    SoupServerMessage:tls-peer-certificate-errors
  + Port docs to gi-docgen
  + Update documentation.
- Replace pkgconfig(gtk-doc) with pkgconfig(gi-docgen)
  BuildRequires (and update options passed to meson) following
  upstreams port.
- Add 299.patch: multithread-test: show error information in case
  of request failure. multithread-test: skip proxy tests if apache
  is not available.
- Use ldconfig_scriptlets for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1662292800">- Update to version 3.1.3:
  + Fix compile error when `SOUP_VERSION_MAX_ALLOWED` is defined.
- Changes from version 3.1.2:
  + Replace HTTP/2 tests using Quart with internal HTTP/2 server
    tests.
  + Improve version macros including adding ability to define
    `SOUP_DISABLE_DEPRECATION_WARNINGS`.
- Drop -D http2_tests=disabled meson paramter: no longer supported.
- Drop 299.patch: merged upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662379200">- Update to version 3.1.4:
  + Numerous improvements to HTTP/2 reliablity.
  + Fix `http` proxy authentication with default proxy resolver.
  + Fix undefined ``ssize_t`` with MSVC.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1663243200">- Update to version 3.2.0:
  + No changes, stable bump only.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 3.2.1:
  + When built against nghttp2 1.50.0+ be relaxed about header
    whitespace.
  + Fix possible crash when cancelling an HTTP/2 message.
  + Fix regresion where soup_server_message_get_socket() could
    return NULL.
  + Fix minor memory leak.
- Disable tests on 32-bit while waiting for
  https://gitlab.gnome.org/GNOME/libsoup/-/issues/309</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1667476800">- Update to version 3.2.2:
  + Various HTTP/2 Fixes:
  - Fix `content-sniffed` not being emitted for resources without
    content.
  - Fix leak of SoupServerConnection when stolen.
- Enable tests on 32-bit again, fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674388800">- Update to version 3.3.0:
  + Add `SoupMessage::got-body-data` signal to monitor progress of
    reads
  + Add `soup_session_send_and_splice()` and
    `soup_session_send_and_splice_async()` convenience APIs
  + Add `soup_message_set_force_http1()` and
    `soup_message_get_force_http1()` APIs
  + Change `soup_cookie_copy()` to not retain default ports
  + Ensure `SoupServerMessage` socket is available in websocket
    handler
  + Fix `soup_message_new()` not erroring when URI has an empty
    host
  + Fix thread-saftey issues in `SoupConnectionAuth`
  + Fix various connection leaks
  + Fix the possibility of sending invalid empty
    `Sec-WebSocket-Protocol` header
  + Fix IO errors not being handled on `CONNECT` messages
  + Numerous improvements to cookies:
  - Add support for cookie prefixes (`__Secure-` and `__Host-`)
  - Reject cookies with control characters in name or value
  - Reject `SameSite=None` cookies without `Secure`
  - Change `soup_cookie_parse()` to be more strict about what is
    considered whitespace
  - Change default SameSite value to `Lax`
  - Fix `soup_cookie_equal()` with `NULL` path</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676289600">- Update to version 3.3.1:
  + Fix regression in `SoupCookieJar` not handling valid Secure
    cookies.
  + Fix crash when skipping HTTP/1 response stream with chunked
    enconding.
  + Change Session to unqueue finished items earlier without an
    extra MainContext iteration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 3.4.0:
  + Fix possible crash in SoupContentSniffer.
  + Fix socket leak.
  + Add missing annotation to
    soup_header_g_string_append_param_quoted().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 3.4.1:
  + Fix HTTP/2 on platforms with unsigned char.
  + Change request cancellation to be handled earlier.
  + Add names to GSources and source tags to GTasks to aid
    debugging.
- Run meson_test macro for all arches.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682769600">- Update to version 3.4.2:
  + Revert changes to request cancellation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 3.4.3:
  + Fix incorrect UTF-8 encoding for params in headers
  + Numerous HTTP/2 fixes and improvements
  + Fix possible crashes in connection management
  + Fix small leak in SoupServer
  + Fix the possibility of empty HTTP/2 frames being sent</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 3.4.4:
  + Improve HTTP/2 performance when a lot of buffering happens
  + Support building libnghttp2 as a subproject</changelog>
  <changelog author="mgorse@suse.com" date="1733313600">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add 6adc0e3e.patch: websocket: Process the frame as soon as we
  read data (boo#1233287 CVE-2024-52532 glgo#GNOME/libsoup#391).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).
- Increase test timeout on s390x. The http2-body-stream test can be
  slow and sometimes times out in our builds.</changelog>
  <changelog author="mgorse@suse.com" date="1745928000">- Add more CVE fixes:
  + libsoup-CVE-2025-32050.patch (boo#1240752 CVE-2025-32050)
  + libsoup-CVE-2025-32051.patch (boo#1240754 CVE-2025-32051)
  + libsoup-CVE-2025-32052.patch (boo#1240756 CVE-2025-32052)
  + libsoup-CVE-2025-32053.patch (boo#1240757 CVE-2025-32053)
  + libsoup-CVE-2025-46420.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-2784.patch (boo#1240750 CVE-2025-2784)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32908.patch (boo#1241223 CVE-2025-32908)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-4476.patch (boo#1243422 CVE-2025-4476)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
</package>
<package pkgid="499cd3624050ab9a5cbc6acdaabe44b6ba892c30373fa4da58ffbcf9ae9e48f9" name="libsoup" arch="src">
  <version epoch="0" ver="3.4.4" rel="150600.3.18.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1662120000">- Update to version 3.0.8:
  + Fix `http` proxy authentication with default proxy resolver.
  + Numerous improvments to HTTP/2 reliability.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662206400">- Update to version 3.1.1:
  + Reintroduce some thread-safety to SoupSession (see
    https://libsoup.org/libsoup-3.0/client-thread-safety.html)
  + Add SoupServerMessage:tls-peer-certificate and
    SoupServerMessage:tls-peer-certificate-errors
  + Port docs to gi-docgen
  + Update documentation.
- Replace pkgconfig(gtk-doc) with pkgconfig(gi-docgen)
  BuildRequires (and update options passed to meson) following
  upstreams port.
- Add 299.patch: multithread-test: show error information in case
  of request failure. multithread-test: skip proxy tests if apache
  is not available.
- Use ldconfig_scriptlets for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1662292800">- Update to version 3.1.3:
  + Fix compile error when `SOUP_VERSION_MAX_ALLOWED` is defined.
- Changes from version 3.1.2:
  + Replace HTTP/2 tests using Quart with internal HTTP/2 server
    tests.
  + Improve version macros including adding ability to define
    `SOUP_DISABLE_DEPRECATION_WARNINGS`.
- Drop -D http2_tests=disabled meson paramter: no longer supported.
- Drop 299.patch: merged upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662379200">- Update to version 3.1.4:
  + Numerous improvements to HTTP/2 reliablity.
  + Fix `http` proxy authentication with default proxy resolver.
  + Fix undefined ``ssize_t`` with MSVC.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1663243200">- Update to version 3.2.0:
  + No changes, stable bump only.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 3.2.1:
  + When built against nghttp2 1.50.0+ be relaxed about header
    whitespace.
  + Fix possible crash when cancelling an HTTP/2 message.
  + Fix regresion where soup_server_message_get_socket() could
    return NULL.
  + Fix minor memory leak.
- Disable tests on 32-bit while waiting for
  https://gitlab.gnome.org/GNOME/libsoup/-/issues/309</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1667476800">- Update to version 3.2.2:
  + Various HTTP/2 Fixes:
  - Fix `content-sniffed` not being emitted for resources without
    content.
  - Fix leak of SoupServerConnection when stolen.
- Enable tests on 32-bit again, fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674388800">- Update to version 3.3.0:
  + Add `SoupMessage::got-body-data` signal to monitor progress of
    reads
  + Add `soup_session_send_and_splice()` and
    `soup_session_send_and_splice_async()` convenience APIs
  + Add `soup_message_set_force_http1()` and
    `soup_message_get_force_http1()` APIs
  + Change `soup_cookie_copy()` to not retain default ports
  + Ensure `SoupServerMessage` socket is available in websocket
    handler
  + Fix `soup_message_new()` not erroring when URI has an empty
    host
  + Fix thread-saftey issues in `SoupConnectionAuth`
  + Fix various connection leaks
  + Fix the possibility of sending invalid empty
    `Sec-WebSocket-Protocol` header
  + Fix IO errors not being handled on `CONNECT` messages
  + Numerous improvements to cookies:
  - Add support for cookie prefixes (`__Secure-` and `__Host-`)
  - Reject cookies with control characters in name or value
  - Reject `SameSite=None` cookies without `Secure`
  - Change `soup_cookie_parse()` to be more strict about what is
    considered whitespace
  - Change default SameSite value to `Lax`
  - Fix `soup_cookie_equal()` with `NULL` path</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676289600">- Update to version 3.3.1:
  + Fix regression in `SoupCookieJar` not handling valid Secure
    cookies.
  + Fix crash when skipping HTTP/1 response stream with chunked
    enconding.
  + Change Session to unqueue finished items earlier without an
    extra MainContext iteration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 3.4.0:
  + Fix possible crash in SoupContentSniffer.
  + Fix socket leak.
  + Add missing annotation to
    soup_header_g_string_append_param_quoted().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 3.4.1:
  + Fix HTTP/2 on platforms with unsigned char.
  + Change request cancellation to be handled earlier.
  + Add names to GSources and source tags to GTasks to aid
    debugging.
- Run meson_test macro for all arches.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682769600">- Update to version 3.4.2:
  + Revert changes to request cancellation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 3.4.3:
  + Fix incorrect UTF-8 encoding for params in headers
  + Numerous HTTP/2 fixes and improvements
  + Fix possible crashes in connection management
  + Fix small leak in SoupServer
  + Fix the possibility of empty HTTP/2 frames being sent</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 3.4.4:
  + Improve HTTP/2 performance when a lot of buffering happens
  + Support building libnghttp2 as a subproject</changelog>
  <changelog author="mgorse@suse.com" date="1733313600">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add 6adc0e3e.patch: websocket: Process the frame as soon as we
  read data (boo#1233287 CVE-2024-52532 glgo#GNOME/libsoup#391).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).
- Increase test timeout on s390x. The http2-body-stream test can be
  slow and sometimes times out in our builds.</changelog>
  <changelog author="mgorse@suse.com" date="1745928000">- Add more CVE fixes:
  + libsoup-CVE-2025-32050.patch (boo#1240752 CVE-2025-32050)
  + libsoup-CVE-2025-32051.patch (boo#1240754 CVE-2025-32051)
  + libsoup-CVE-2025-32052.patch (boo#1240756 CVE-2025-32052)
  + libsoup-CVE-2025-32053.patch (boo#1240757 CVE-2025-32053)
  + libsoup-CVE-2025-46420.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-2784.patch (boo#1240750 CVE-2025-2784)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32908.patch (boo#1241223 CVE-2025-32908)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-4476.patch (boo#1243422 CVE-2025-4476)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760184000">- Add libsoup-CVE-2025-11021.patch: Ignore invalid date when
  processing cookies to prevent out-of-bounds read (bsc#1250562,
  CVE-2025-11021, glgo#GNOME/libsoup!482).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760616000">- Update libsoup-CVE-2025-11021.patch: Add NULL check for
  soup_date_time_to_string() (bsc#1250562, CVE-2025-11021,
  glgo#GNOME/libsoup!483).</changelog>
</package>
<package pkgid="60c5a55d34d5e8940d16e29ed12c5fea8ec7028d03988fad2845d50e081cda42" name="libsoup" arch="src">
  <version epoch="0" ver="3.4.4" rel="150600.3.21.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1662206400">- Update to version 3.1.1:
  + Reintroduce some thread-safety to SoupSession (see
    https://libsoup.org/libsoup-3.0/client-thread-safety.html)
  + Add SoupServerMessage:tls-peer-certificate and
    SoupServerMessage:tls-peer-certificate-errors
  + Port docs to gi-docgen
  + Update documentation.
- Replace pkgconfig(gtk-doc) with pkgconfig(gi-docgen)
  BuildRequires (and update options passed to meson) following
  upstreams port.
- Add 299.patch: multithread-test: show error information in case
  of request failure. multithread-test: skip proxy tests if apache
  is not available.
- Use ldconfig_scriptlets for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1662292800">- Update to version 3.1.3:
  + Fix compile error when `SOUP_VERSION_MAX_ALLOWED` is defined.
- Changes from version 3.1.2:
  + Replace HTTP/2 tests using Quart with internal HTTP/2 server
    tests.
  + Improve version macros including adding ability to define
    `SOUP_DISABLE_DEPRECATION_WARNINGS`.
- Drop -D http2_tests=disabled meson paramter: no longer supported.
- Drop 299.patch: merged upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662379200">- Update to version 3.1.4:
  + Numerous improvements to HTTP/2 reliablity.
  + Fix `http` proxy authentication with default proxy resolver.
  + Fix undefined ``ssize_t`` with MSVC.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1663243200">- Update to version 3.2.0:
  + No changes, stable bump only.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 3.2.1:
  + When built against nghttp2 1.50.0+ be relaxed about header
    whitespace.
  + Fix possible crash when cancelling an HTTP/2 message.
  + Fix regresion where soup_server_message_get_socket() could
    return NULL.
  + Fix minor memory leak.
- Disable tests on 32-bit while waiting for
  https://gitlab.gnome.org/GNOME/libsoup/-/issues/309</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1667476800">- Update to version 3.2.2:
  + Various HTTP/2 Fixes:
  - Fix `content-sniffed` not being emitted for resources without
    content.
  - Fix leak of SoupServerConnection when stolen.
- Enable tests on 32-bit again, fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674388800">- Update to version 3.3.0:
  + Add `SoupMessage::got-body-data` signal to monitor progress of
    reads
  + Add `soup_session_send_and_splice()` and
    `soup_session_send_and_splice_async()` convenience APIs
  + Add `soup_message_set_force_http1()` and
    `soup_message_get_force_http1()` APIs
  + Change `soup_cookie_copy()` to not retain default ports
  + Ensure `SoupServerMessage` socket is available in websocket
    handler
  + Fix `soup_message_new()` not erroring when URI has an empty
    host
  + Fix thread-saftey issues in `SoupConnectionAuth`
  + Fix various connection leaks
  + Fix the possibility of sending invalid empty
    `Sec-WebSocket-Protocol` header
  + Fix IO errors not being handled on `CONNECT` messages
  + Numerous improvements to cookies:
  - Add support for cookie prefixes (`__Secure-` and `__Host-`)
  - Reject cookies with control characters in name or value
  - Reject `SameSite=None` cookies without `Secure`
  - Change `soup_cookie_parse()` to be more strict about what is
    considered whitespace
  - Change default SameSite value to `Lax`
  - Fix `soup_cookie_equal()` with `NULL` path</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676289600">- Update to version 3.3.1:
  + Fix regression in `SoupCookieJar` not handling valid Secure
    cookies.
  + Fix crash when skipping HTTP/1 response stream with chunked
    enconding.
  + Change Session to unqueue finished items earlier without an
    extra MainContext iteration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 3.4.0:
  + Fix possible crash in SoupContentSniffer.
  + Fix socket leak.
  + Add missing annotation to
    soup_header_g_string_append_param_quoted().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 3.4.1:
  + Fix HTTP/2 on platforms with unsigned char.
  + Change request cancellation to be handled earlier.
  + Add names to GSources and source tags to GTasks to aid
    debugging.
- Run meson_test macro for all arches.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682769600">- Update to version 3.4.2:
  + Revert changes to request cancellation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 3.4.3:
  + Fix incorrect UTF-8 encoding for params in headers
  + Numerous HTTP/2 fixes and improvements
  + Fix possible crashes in connection management
  + Fix small leak in SoupServer
  + Fix the possibility of empty HTTP/2 frames being sent</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 3.4.4:
  + Improve HTTP/2 performance when a lot of buffering happens
  + Support building libnghttp2 as a subproject</changelog>
  <changelog author="mgorse@suse.com" date="1733313600">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add 6adc0e3e.patch: websocket: Process the frame as soon as we
  read data (boo#1233287 CVE-2024-52532 glgo#GNOME/libsoup#391).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).
- Increase test timeout on s390x. The http2-body-stream test can be
  slow and sometimes times out in our builds.</changelog>
  <changelog author="mgorse@suse.com" date="1745928000">- Add more CVE fixes:
  + libsoup-CVE-2025-32050.patch (boo#1240752 CVE-2025-32050)
  + libsoup-CVE-2025-32051.patch (boo#1240754 CVE-2025-32051)
  + libsoup-CVE-2025-32052.patch (boo#1240756 CVE-2025-32052)
  + libsoup-CVE-2025-32053.patch (boo#1240757 CVE-2025-32053)
  + libsoup-CVE-2025-46420.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-2784.patch (boo#1240750 CVE-2025-2784)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32908.patch (boo#1241223 CVE-2025-32908)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-4476.patch (boo#1243422 CVE-2025-4476)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760184000">- Add libsoup-CVE-2025-11021.patch: Ignore invalid date when
  processing cookies to prevent out-of-bounds read (bsc#1250562,
  CVE-2025-11021, glgo#GNOME/libsoup!482).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760616000">- Update libsoup-CVE-2025-11021.patch: Add NULL check for
  soup_date_time_to_string() (bsc#1250562, CVE-2025-11021,
  glgo#GNOME/libsoup!483).</changelog>
  <changelog author="mgorse@suse.com" date="1763467200">- Add libsoup-CVE-2025-12105.patch: fix use after free caused by
  'finishing' queue item twice (bsc#1252555 CVE-2025-12105
  glgo#GNOME/libsoup!481).</changelog>
</package>
<package pkgid="c4cfee20c19b904a610619fa8e8f05434221f8bba876fcd4541305e736ce8ae4" name="libsoup" arch="src">
  <version epoch="0" ver="3.4.4" rel="150600.3.28.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1663243200">- Update to version 3.2.0:
  + No changes, stable bump only.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 3.2.1:
  + When built against nghttp2 1.50.0+ be relaxed about header
    whitespace.
  + Fix possible crash when cancelling an HTTP/2 message.
  + Fix regresion where soup_server_message_get_socket() could
    return NULL.
  + Fix minor memory leak.
- Disable tests on 32-bit while waiting for
  https://gitlab.gnome.org/GNOME/libsoup/-/issues/309</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1667476800">- Update to version 3.2.2:
  + Various HTTP/2 Fixes:
  - Fix `content-sniffed` not being emitted for resources without
    content.
  - Fix leak of SoupServerConnection when stolen.
- Enable tests on 32-bit again, fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674388800">- Update to version 3.3.0:
  + Add `SoupMessage::got-body-data` signal to monitor progress of
    reads
  + Add `soup_session_send_and_splice()` and
    `soup_session_send_and_splice_async()` convenience APIs
  + Add `soup_message_set_force_http1()` and
    `soup_message_get_force_http1()` APIs
  + Change `soup_cookie_copy()` to not retain default ports
  + Ensure `SoupServerMessage` socket is available in websocket
    handler
  + Fix `soup_message_new()` not erroring when URI has an empty
    host
  + Fix thread-saftey issues in `SoupConnectionAuth`
  + Fix various connection leaks
  + Fix the possibility of sending invalid empty
    `Sec-WebSocket-Protocol` header
  + Fix IO errors not being handled on `CONNECT` messages
  + Numerous improvements to cookies:
  - Add support for cookie prefixes (`__Secure-` and `__Host-`)
  - Reject cookies with control characters in name or value
  - Reject `SameSite=None` cookies without `Secure`
  - Change `soup_cookie_parse()` to be more strict about what is
    considered whitespace
  - Change default SameSite value to `Lax`
  - Fix `soup_cookie_equal()` with `NULL` path</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676289600">- Update to version 3.3.1:
  + Fix regression in `SoupCookieJar` not handling valid Secure
    cookies.
  + Fix crash when skipping HTTP/1 response stream with chunked
    enconding.
  + Change Session to unqueue finished items earlier without an
    extra MainContext iteration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 3.4.0:
  + Fix possible crash in SoupContentSniffer.
  + Fix socket leak.
  + Add missing annotation to
    soup_header_g_string_append_param_quoted().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 3.4.1:
  + Fix HTTP/2 on platforms with unsigned char.
  + Change request cancellation to be handled earlier.
  + Add names to GSources and source tags to GTasks to aid
    debugging.
- Run meson_test macro for all arches.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682769600">- Update to version 3.4.2:
  + Revert changes to request cancellation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 3.4.3:
  + Fix incorrect UTF-8 encoding for params in headers
  + Numerous HTTP/2 fixes and improvements
  + Fix possible crashes in connection management
  + Fix small leak in SoupServer
  + Fix the possibility of empty HTTP/2 frames being sent</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 3.4.4:
  + Improve HTTP/2 performance when a lot of buffering happens
  + Support building libnghttp2 as a subproject</changelog>
  <changelog author="mgorse@suse.com" date="1733313600">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add 6adc0e3e.patch: websocket: Process the frame as soon as we
  read data (boo#1233287 CVE-2024-52532 glgo#GNOME/libsoup#391).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).
- Increase test timeout on s390x. The http2-body-stream test can be
  slow and sometimes times out in our builds.</changelog>
  <changelog author="mgorse@suse.com" date="1745928000">- Add more CVE fixes:
  + libsoup-CVE-2025-32050.patch (boo#1240752 CVE-2025-32050)
  + libsoup-CVE-2025-32051.patch (boo#1240754 CVE-2025-32051)
  + libsoup-CVE-2025-32052.patch (boo#1240756 CVE-2025-32052)
  + libsoup-CVE-2025-32053.patch (boo#1240757 CVE-2025-32053)
  + libsoup-CVE-2025-46420.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-2784.patch (boo#1240750 CVE-2025-2784)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32908.patch (boo#1241223 CVE-2025-32908)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-4476.patch (boo#1243422 CVE-2025-4476)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760184000">- Add libsoup-CVE-2025-11021.patch: Ignore invalid date when
  processing cookies to prevent out-of-bounds read (bsc#1250562,
  CVE-2025-11021, glgo#GNOME/libsoup!482).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760616000">- Update libsoup-CVE-2025-11021.patch: Add NULL check for
  soup_date_time_to_string() (bsc#1250562, CVE-2025-11021,
  glgo#GNOME/libsoup!483).</changelog>
  <changelog author="mgorse@suse.com" date="1763467200">- Add libsoup-CVE-2025-12105.patch: fix use after free caused by
  'finishing' queue item twice (bsc#1252555 CVE-2025-12105
  glgo#GNOME/libsoup!481).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767700800">- Add libsoup-CVE-2025-14523.patch: Reject duplicated Host in
  headers (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!490).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767873600">- Refresh libsoup-CVE-2025-14523.patch: Follow the update of
  upstream (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!491).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1768305600">- Add libsoup-CVE-2026-0716.patch: Fix out-of-bounds read for
  websocket (bsc#1256418, CVE-2026-0716, glgo#GNOME/libsoup!494).
- Add libsoup-CVE-2026-0719.patch: Fix overflow for password md4sum
  (bsc#1256399, CVE-2026-0719, glgo#GNOME/libsoup!493).</changelog>
</package>
<package pkgid="90936ce1a5f7631c0f3d1c94e86ce715bc650f4ced04857fb2fbe44b784988c4" name="libsoup" arch="src">
  <version epoch="0" ver="3.4.4" rel="150600.3.31.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 3.2.1:
  + When built against nghttp2 1.50.0+ be relaxed about header
    whitespace.
  + Fix possible crash when cancelling an HTTP/2 message.
  + Fix regresion where soup_server_message_get_socket() could
    return NULL.
  + Fix minor memory leak.
- Disable tests on 32-bit while waiting for
  https://gitlab.gnome.org/GNOME/libsoup/-/issues/309</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1667476800">- Update to version 3.2.2:
  + Various HTTP/2 Fixes:
  - Fix `content-sniffed` not being emitted for resources without
    content.
  - Fix leak of SoupServerConnection when stolen.
- Enable tests on 32-bit again, fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674388800">- Update to version 3.3.0:
  + Add `SoupMessage::got-body-data` signal to monitor progress of
    reads
  + Add `soup_session_send_and_splice()` and
    `soup_session_send_and_splice_async()` convenience APIs
  + Add `soup_message_set_force_http1()` and
    `soup_message_get_force_http1()` APIs
  + Change `soup_cookie_copy()` to not retain default ports
  + Ensure `SoupServerMessage` socket is available in websocket
    handler
  + Fix `soup_message_new()` not erroring when URI has an empty
    host
  + Fix thread-saftey issues in `SoupConnectionAuth`
  + Fix various connection leaks
  + Fix the possibility of sending invalid empty
    `Sec-WebSocket-Protocol` header
  + Fix IO errors not being handled on `CONNECT` messages
  + Numerous improvements to cookies:
  - Add support for cookie prefixes (`__Secure-` and `__Host-`)
  - Reject cookies with control characters in name or value
  - Reject `SameSite=None` cookies without `Secure`
  - Change `soup_cookie_parse()` to be more strict about what is
    considered whitespace
  - Change default SameSite value to `Lax`
  - Fix `soup_cookie_equal()` with `NULL` path</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676289600">- Update to version 3.3.1:
  + Fix regression in `SoupCookieJar` not handling valid Secure
    cookies.
  + Fix crash when skipping HTTP/1 response stream with chunked
    enconding.
  + Change Session to unqueue finished items earlier without an
    extra MainContext iteration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 3.4.0:
  + Fix possible crash in SoupContentSniffer.
  + Fix socket leak.
  + Add missing annotation to
    soup_header_g_string_append_param_quoted().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 3.4.1:
  + Fix HTTP/2 on platforms with unsigned char.
  + Change request cancellation to be handled earlier.
  + Add names to GSources and source tags to GTasks to aid
    debugging.
- Run meson_test macro for all arches.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682769600">- Update to version 3.4.2:
  + Revert changes to request cancellation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 3.4.3:
  + Fix incorrect UTF-8 encoding for params in headers
  + Numerous HTTP/2 fixes and improvements
  + Fix possible crashes in connection management
  + Fix small leak in SoupServer
  + Fix the possibility of empty HTTP/2 frames being sent</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 3.4.4:
  + Improve HTTP/2 performance when a lot of buffering happens
  + Support building libnghttp2 as a subproject</changelog>
  <changelog author="mgorse@suse.com" date="1733313600">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add 6adc0e3e.patch: websocket: Process the frame as soon as we
  read data (boo#1233287 CVE-2024-52532 glgo#GNOME/libsoup#391).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).
- Increase test timeout on s390x. The http2-body-stream test can be
  slow and sometimes times out in our builds.</changelog>
  <changelog author="mgorse@suse.com" date="1745928000">- Add more CVE fixes:
  + libsoup-CVE-2025-32050.patch (boo#1240752 CVE-2025-32050)
  + libsoup-CVE-2025-32051.patch (boo#1240754 CVE-2025-32051)
  + libsoup-CVE-2025-32052.patch (boo#1240756 CVE-2025-32052)
  + libsoup-CVE-2025-32053.patch (boo#1240757 CVE-2025-32053)
  + libsoup-CVE-2025-46420.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-2784.patch (boo#1240750 CVE-2025-2784)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32908.patch (boo#1241223 CVE-2025-32908)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-4476.patch (boo#1243422 CVE-2025-4476)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760184000">- Add libsoup-CVE-2025-11021.patch: Ignore invalid date when
  processing cookies to prevent out-of-bounds read (bsc#1250562,
  CVE-2025-11021, glgo#GNOME/libsoup!482).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760616000">- Update libsoup-CVE-2025-11021.patch: Add NULL check for
  soup_date_time_to_string() (bsc#1250562, CVE-2025-11021,
  glgo#GNOME/libsoup!483).</changelog>
  <changelog author="mgorse@suse.com" date="1763467200">- Add libsoup-CVE-2025-12105.patch: fix use after free caused by
  'finishing' queue item twice (bsc#1252555 CVE-2025-12105
  glgo#GNOME/libsoup!481).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767700800">- Add libsoup-CVE-2025-14523.patch: Reject duplicated Host in
  headers (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!490).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767873600">- Refresh libsoup-CVE-2025-14523.patch: Follow the update of
  upstream (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!491).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1768305600">- Add libsoup-CVE-2026-0716.patch: Fix out-of-bounds read for
  websocket (bsc#1256418, CVE-2026-0716, glgo#GNOME/libsoup!494).
- Add libsoup-CVE-2026-0719.patch: Fix overflow for password md4sum
  (bsc#1256399, CVE-2026-0719, glgo#GNOME/libsoup!493).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1770120000">- Add libsoup-CVE-2026-1536.patch: Always validate the headers
  value when coming from untrusted source
  (bsc#1257440, CVE-2026-1536, glgo#GNOME/libsoup/commit/5c1a2e9c).
- Add libsoup-CVE-2026-1761.patch: multipart: check length of bytes
  read soup_filter_input_stream_read_until()
  (bsc#1257598, CVE-2026-1761, glgo#GNOME/libsoup!496).</changelog>
</package>
<package pkgid="af422af852559c29309dff4864b1417c21b892397a392e58c22be0f6c8bee8e3" name="libsoup" arch="src">
  <version epoch="0" ver="3.4.4" rel="150600.3.34.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1667476800">- Update to version 3.2.2:
  + Various HTTP/2 Fixes:
  - Fix `content-sniffed` not being emitted for resources without
    content.
  - Fix leak of SoupServerConnection when stolen.
- Enable tests on 32-bit again, fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674388800">- Update to version 3.3.0:
  + Add `SoupMessage::got-body-data` signal to monitor progress of
    reads
  + Add `soup_session_send_and_splice()` and
    `soup_session_send_and_splice_async()` convenience APIs
  + Add `soup_message_set_force_http1()` and
    `soup_message_get_force_http1()` APIs
  + Change `soup_cookie_copy()` to not retain default ports
  + Ensure `SoupServerMessage` socket is available in websocket
    handler
  + Fix `soup_message_new()` not erroring when URI has an empty
    host
  + Fix thread-saftey issues in `SoupConnectionAuth`
  + Fix various connection leaks
  + Fix the possibility of sending invalid empty
    `Sec-WebSocket-Protocol` header
  + Fix IO errors not being handled on `CONNECT` messages
  + Numerous improvements to cookies:
  - Add support for cookie prefixes (`__Secure-` and `__Host-`)
  - Reject cookies with control characters in name or value
  - Reject `SameSite=None` cookies without `Secure`
  - Change `soup_cookie_parse()` to be more strict about what is
    considered whitespace
  - Change default SameSite value to `Lax`
  - Fix `soup_cookie_equal()` with `NULL` path</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676289600">- Update to version 3.3.1:
  + Fix regression in `SoupCookieJar` not handling valid Secure
    cookies.
  + Fix crash when skipping HTTP/1 response stream with chunked
    enconding.
  + Change Session to unqueue finished items earlier without an
    extra MainContext iteration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 3.4.0:
  + Fix possible crash in SoupContentSniffer.
  + Fix socket leak.
  + Add missing annotation to
    soup_header_g_string_append_param_quoted().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 3.4.1:
  + Fix HTTP/2 on platforms with unsigned char.
  + Change request cancellation to be handled earlier.
  + Add names to GSources and source tags to GTasks to aid
    debugging.
- Run meson_test macro for all arches.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682769600">- Update to version 3.4.2:
  + Revert changes to request cancellation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 3.4.3:
  + Fix incorrect UTF-8 encoding for params in headers
  + Numerous HTTP/2 fixes and improvements
  + Fix possible crashes in connection management
  + Fix small leak in SoupServer
  + Fix the possibility of empty HTTP/2 frames being sent</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 3.4.4:
  + Improve HTTP/2 performance when a lot of buffering happens
  + Support building libnghttp2 as a subproject</changelog>
  <changelog author="mgorse@suse.com" date="1733313600">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add 6adc0e3e.patch: websocket: Process the frame as soon as we
  read data (boo#1233287 CVE-2024-52532 glgo#GNOME/libsoup#391).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).
- Increase test timeout on s390x. The http2-body-stream test can be
  slow and sometimes times out in our builds.</changelog>
  <changelog author="mgorse@suse.com" date="1745928000">- Add more CVE fixes:
  + libsoup-CVE-2025-32050.patch (boo#1240752 CVE-2025-32050)
  + libsoup-CVE-2025-32051.patch (boo#1240754 CVE-2025-32051)
  + libsoup-CVE-2025-32052.patch (boo#1240756 CVE-2025-32052)
  + libsoup-CVE-2025-32053.patch (boo#1240757 CVE-2025-32053)
  + libsoup-CVE-2025-46420.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-2784.patch (boo#1240750 CVE-2025-2784)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32908.patch (boo#1241223 CVE-2025-32908)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-4476.patch (boo#1243422 CVE-2025-4476)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760184000">- Add libsoup-CVE-2025-11021.patch: Ignore invalid date when
  processing cookies to prevent out-of-bounds read (bsc#1250562,
  CVE-2025-11021, glgo#GNOME/libsoup!482).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760616000">- Update libsoup-CVE-2025-11021.patch: Add NULL check for
  soup_date_time_to_string() (bsc#1250562, CVE-2025-11021,
  glgo#GNOME/libsoup!483).</changelog>
  <changelog author="mgorse@suse.com" date="1763467200">- Add libsoup-CVE-2025-12105.patch: fix use after free caused by
  'finishing' queue item twice (bsc#1252555 CVE-2025-12105
  glgo#GNOME/libsoup!481).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767700800">- Add libsoup-CVE-2025-14523.patch: Reject duplicated Host in
  headers (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!490).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767873600">- Refresh libsoup-CVE-2025-14523.patch: Follow the update of
  upstream (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!491).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1768305600">- Add libsoup-CVE-2026-0716.patch: Fix out-of-bounds read for
  websocket (bsc#1256418, CVE-2026-0716, glgo#GNOME/libsoup!494).
- Add libsoup-CVE-2026-0719.patch: Fix overflow for password md4sum
  (bsc#1256399, CVE-2026-0719, glgo#GNOME/libsoup!493).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1770120000">- Add libsoup-CVE-2026-1536.patch: Always validate the headers
  value when coming from untrusted source
  (bsc#1257440, CVE-2026-1536, glgo#GNOME/libsoup/commit/5c1a2e9c).
- Add libsoup-CVE-2026-1761.patch: multipart: check length of bytes
  read soup_filter_input_stream_read_until()
  (bsc#1257598, CVE-2026-1761, glgo#GNOME/libsoup!496).</changelog>
  <changelog author="mgorse@suse.com" date="1771502400">- Add more CVE fixes:
  + libsoup-CVE-2025-32049.patch (bsc#1240751 CVE-2025-32049
    glgo#GNOME/libsoup#390)
  + libsoup-CVE-2026-2443.patch (bsc#1258170 CVE-2026-2443
    glgo#GNOME/libsoup#487)
  + libsoup-CVE-2026-2369.patch (bsc#1258120 CVE-2026-2369
    glgo#GNOME/libsoup!508)
  + libsoup-CVE-2026-2708.patch (bsc#1258508 CVE-2026-2708
    glgo#GNOME/libsoup#500)</changelog>
</package>
<package pkgid="ee612805a056ce309ad6177afbfa8ac08705ccd2150c9a7ad6c50df283aed889" name="libsoup" arch="src">
  <version epoch="0" ver="3.4.4" rel="150600.3.37.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1674388800">- Update to version 3.3.0:
  + Add `SoupMessage::got-body-data` signal to monitor progress of
    reads
  + Add `soup_session_send_and_splice()` and
    `soup_session_send_and_splice_async()` convenience APIs
  + Add `soup_message_set_force_http1()` and
    `soup_message_get_force_http1()` APIs
  + Change `soup_cookie_copy()` to not retain default ports
  + Ensure `SoupServerMessage` socket is available in websocket
    handler
  + Fix `soup_message_new()` not erroring when URI has an empty
    host
  + Fix thread-saftey issues in `SoupConnectionAuth`
  + Fix various connection leaks
  + Fix the possibility of sending invalid empty
    `Sec-WebSocket-Protocol` header
  + Fix IO errors not being handled on `CONNECT` messages
  + Numerous improvements to cookies:
  - Add support for cookie prefixes (`__Secure-` and `__Host-`)
  - Reject cookies with control characters in name or value
  - Reject `SameSite=None` cookies without `Secure`
  - Change `soup_cookie_parse()` to be more strict about what is
    considered whitespace
  - Change default SameSite value to `Lax`
  - Fix `soup_cookie_equal()` with `NULL` path</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676289600">- Update to version 3.3.1:
  + Fix regression in `SoupCookieJar` not handling valid Secure
    cookies.
  + Fix crash when skipping HTTP/1 response stream with chunked
    enconding.
  + Change Session to unqueue finished items earlier without an
    extra MainContext iteration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 3.4.0:
  + Fix possible crash in SoupContentSniffer.
  + Fix socket leak.
  + Add missing annotation to
    soup_header_g_string_append_param_quoted().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 3.4.1:
  + Fix HTTP/2 on platforms with unsigned char.
  + Change request cancellation to be handled earlier.
  + Add names to GSources and source tags to GTasks to aid
    debugging.
- Run meson_test macro for all arches.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682769600">- Update to version 3.4.2:
  + Revert changes to request cancellation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 3.4.3:
  + Fix incorrect UTF-8 encoding for params in headers
  + Numerous HTTP/2 fixes and improvements
  + Fix possible crashes in connection management
  + Fix small leak in SoupServer
  + Fix the possibility of empty HTTP/2 frames being sent</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 3.4.4:
  + Improve HTTP/2 performance when a lot of buffering happens
  + Support building libnghttp2 as a subproject</changelog>
  <changelog author="mgorse@suse.com" date="1733313600">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add 6adc0e3e.patch: websocket: Process the frame as soon as we
  read data (boo#1233287 CVE-2024-52532 glgo#GNOME/libsoup#391).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).
- Increase test timeout on s390x. The http2-body-stream test can be
  slow and sometimes times out in our builds.</changelog>
  <changelog author="mgorse@suse.com" date="1745928000">- Add more CVE fixes:
  + libsoup-CVE-2025-32050.patch (boo#1240752 CVE-2025-32050)
  + libsoup-CVE-2025-32051.patch (boo#1240754 CVE-2025-32051)
  + libsoup-CVE-2025-32052.patch (boo#1240756 CVE-2025-32052)
  + libsoup-CVE-2025-32053.patch (boo#1240757 CVE-2025-32053)
  + libsoup-CVE-2025-46420.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-2784.patch (boo#1240750 CVE-2025-2784)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32908.patch (boo#1241223 CVE-2025-32908)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-4476.patch (boo#1243422 CVE-2025-4476)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760184000">- Add libsoup-CVE-2025-11021.patch: Ignore invalid date when
  processing cookies to prevent out-of-bounds read (bsc#1250562,
  CVE-2025-11021, glgo#GNOME/libsoup!482).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760616000">- Update libsoup-CVE-2025-11021.patch: Add NULL check for
  soup_date_time_to_string() (bsc#1250562, CVE-2025-11021,
  glgo#GNOME/libsoup!483).</changelog>
  <changelog author="mgorse@suse.com" date="1763467200">- Add libsoup-CVE-2025-12105.patch: fix use after free caused by
  'finishing' queue item twice (bsc#1252555 CVE-2025-12105
  glgo#GNOME/libsoup!481).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767700800">- Add libsoup-CVE-2025-14523.patch: Reject duplicated Host in
  headers (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!490).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767873600">- Refresh libsoup-CVE-2025-14523.patch: Follow the update of
  upstream (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!491).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1768305600">- Add libsoup-CVE-2026-0716.patch: Fix out-of-bounds read for
  websocket (bsc#1256418, CVE-2026-0716, glgo#GNOME/libsoup!494).
- Add libsoup-CVE-2026-0719.patch: Fix overflow for password md4sum
  (bsc#1256399, CVE-2026-0719, glgo#GNOME/libsoup!493).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1770120000">- Add libsoup-CVE-2026-1536.patch: Always validate the headers
  value when coming from untrusted source
  (bsc#1257440, CVE-2026-1536, glgo#GNOME/libsoup/commit/5c1a2e9c).
- Add libsoup-CVE-2026-1761.patch: multipart: check length of bytes
  read soup_filter_input_stream_read_until()
  (bsc#1257598, CVE-2026-1761, glgo#GNOME/libsoup!496).</changelog>
  <changelog author="mgorse@suse.com" date="1771502400">- Add more CVE fixes:
  + libsoup-CVE-2025-32049.patch (bsc#1240751 CVE-2025-32049
    glgo#GNOME/libsoup#390)
  + libsoup-CVE-2026-2443.patch (bsc#1258170 CVE-2026-2443
    glgo#GNOME/libsoup#487)
  + libsoup-CVE-2026-2369.patch (bsc#1258120 CVE-2026-2369
    glgo#GNOME/libsoup!508)
  + libsoup-CVE-2026-2708.patch (bsc#1258508 CVE-2026-2708
    glgo#GNOME/libsoup#500)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1772020800">- Add libsoup-CVE-2026-1760.patch: server: close the connection
  after responsing a request containing...
  (bsc#1257597, CVE-2026-1760, glgo#GNOME/libsoup#475).
- Add libsoup-CVE-2026-1467.patch: uri-utils: do host validation
  when checking if a GUri is valid
  (bsc#1257398, CVE-2026-1467, glgo#GNOME/libsoup#488).
- Add libsoup-CVE-2026-1539.patch: Also remove Proxy-Authorization
  header on cross origin redirect
  (bsc#1257441, CVE-2026-1539, glgo#GNOME/libsoup#489).</changelog>
</package>
<package pkgid="22e08e9a6bc4445871f78b58beeb4bd6a1276d2a8591c772ff353817f354e421" name="libsoup" arch="src">
  <version epoch="0" ver="3.4.4" rel="150600.3.42.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 3.4.0:
  + Fix possible crash in SoupContentSniffer.
  + Fix socket leak.
  + Add missing annotation to
    soup_header_g_string_append_param_quoted().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 3.4.1:
  + Fix HTTP/2 on platforms with unsigned char.
  + Change request cancellation to be handled earlier.
  + Add names to GSources and source tags to GTasks to aid
    debugging.
- Run meson_test macro for all arches.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682769600">- Update to version 3.4.2:
  + Revert changes to request cancellation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 3.4.3:
  + Fix incorrect UTF-8 encoding for params in headers
  + Numerous HTTP/2 fixes and improvements
  + Fix possible crashes in connection management
  + Fix small leak in SoupServer
  + Fix the possibility of empty HTTP/2 frames being sent</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 3.4.4:
  + Improve HTTP/2 performance when a lot of buffering happens
  + Support building libnghttp2 as a subproject</changelog>
  <changelog author="mgorse@suse.com" date="1733313600">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add 6adc0e3e.patch: websocket: Process the frame as soon as we
  read data (boo#1233287 CVE-2024-52532 glgo#GNOME/libsoup#391).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).
- Increase test timeout on s390x. The http2-body-stream test can be
  slow and sometimes times out in our builds.</changelog>
  <changelog author="mgorse@suse.com" date="1745928000">- Add more CVE fixes:
  + libsoup-CVE-2025-32050.patch (boo#1240752 CVE-2025-32050)
  + libsoup-CVE-2025-32051.patch (boo#1240754 CVE-2025-32051)
  + libsoup-CVE-2025-32052.patch (boo#1240756 CVE-2025-32052)
  + libsoup-CVE-2025-32053.patch (boo#1240757 CVE-2025-32053)
  + libsoup-CVE-2025-46420.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-2784.patch (boo#1240750 CVE-2025-2784)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32908.patch (boo#1241223 CVE-2025-32908)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-4476.patch (boo#1243422 CVE-2025-4476)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760184000">- Add libsoup-CVE-2025-11021.patch: Ignore invalid date when
  processing cookies to prevent out-of-bounds read (bsc#1250562,
  CVE-2025-11021, glgo#GNOME/libsoup!482).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760616000">- Update libsoup-CVE-2025-11021.patch: Add NULL check for
  soup_date_time_to_string() (bsc#1250562, CVE-2025-11021,
  glgo#GNOME/libsoup!483).</changelog>
  <changelog author="mgorse@suse.com" date="1763467200">- Add libsoup-CVE-2025-12105.patch: fix use after free caused by
  'finishing' queue item twice (bsc#1252555 CVE-2025-12105
  glgo#GNOME/libsoup!481).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767700800">- Add libsoup-CVE-2025-14523.patch: Reject duplicated Host in
  headers (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!490).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767873600">- Refresh libsoup-CVE-2025-14523.patch: Follow the update of
  upstream (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!491).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1768305600">- Add libsoup-CVE-2026-0716.patch: Fix out-of-bounds read for
  websocket (bsc#1256418, CVE-2026-0716, glgo#GNOME/libsoup!494).
- Add libsoup-CVE-2026-0719.patch: Fix overflow for password md4sum
  (bsc#1256399, CVE-2026-0719, glgo#GNOME/libsoup!493).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1770120000">- Add libsoup-CVE-2026-1536.patch: Always validate the headers
  value when coming from untrusted source
  (bsc#1257440, CVE-2026-1536, glgo#GNOME/libsoup/commit/5c1a2e9c).
- Add libsoup-CVE-2026-1761.patch: multipart: check length of bytes
  read soup_filter_input_stream_read_until()
  (bsc#1257598, CVE-2026-1761, glgo#GNOME/libsoup!496).</changelog>
  <changelog author="mgorse@suse.com" date="1771502400">- Add more CVE fixes:
  + libsoup-CVE-2025-32049.patch (bsc#1240751 CVE-2025-32049
    glgo#GNOME/libsoup#390)
  + libsoup-CVE-2026-2443.patch (bsc#1258170 CVE-2026-2443
    glgo#GNOME/libsoup#487)
  + libsoup-CVE-2026-2369.patch (bsc#1258120 CVE-2026-2369
    glgo#GNOME/libsoup!508)
  + libsoup-CVE-2026-2708.patch (bsc#1258508 CVE-2026-2708
    glgo#GNOME/libsoup#500)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1772020800">- Add libsoup-CVE-2026-1760.patch: server: close the connection
  after responsing a request containing...
  (bsc#1257597, CVE-2026-1760, glgo#GNOME/libsoup#475).
- Add libsoup-CVE-2026-1467.patch: uri-utils: do host validation
  when checking if a GUri is valid
  (bsc#1257398, CVE-2026-1467, glgo#GNOME/libsoup#488).
- Add libsoup-CVE-2026-1539.patch: Also remove Proxy-Authorization
  header on cross origin redirect
  (bsc#1257441, CVE-2026-1539, glgo#GNOME/libsoup#489).</changelog>
  <changelog author="mgorse@suse.com" date="1772712000">- Update libsoup-CVE-2026-0716.patch to incorporate
  glgo#GNOME/libsoup!518. The original fix was incomplete
  (bsc#1256418 CVE-2026-0716 glgo#GNOME/libsoup#476).</changelog>
  <changelog author="mgorse@suse.com" date="1773230400">- Refresh some patches to match the output from gitlab.gnome.org.</changelog>
</package>
<package pkgid="4407e1395acd7734f03f7b0b31ea6ecb1afdc949196d39a755fb5b31607dbe91" name="libsoup" arch="src">
  <version epoch="0" ver="3.4.4" rel="150600.3.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1641556800">- Update to version 3.0.4:
  + Fix HTTP/2 not properly handling socket timeouts.
  + Improvements to test reliablity.
  + Fix cross-compiling to Windows.
  + Fix tests with development glib-networking.
  + Expose soup_uri_copy() to Vala.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 3.0.5:
  + Misc HTTP/2 fixes.
  + Fix missing files for installed-tests.
  + Fix SoupServer not properly handling invalid percent encoded
    paths.
  + Fix other areas not properly handling invalid percent encoded
    paths.
  + Fix SoupLogger:max-body-size of 0 meaning log nothing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648814400">- Update to version 3.0.6:
  + Misc HTTP/2 fixes.
  + Add PUT/POST support to examples/get.
  + Add `--user-agent` option to examples/get.
  + Misc meson improvements.
  + Fix build with Visual Studio.</changelog>
  <changelog author="dimstar@opensuse.org" date="1657108800">- Update to version 3.0.7:
  + Fix leak in SoupAuthNTLM.
  + Fix constructing SoupAuthNTLM objects.
  + Disable mutual negotiation in SoupAuthNegotiate.
  + http2:
  - Do not advertise the `h2` protocool for proxy connections.
  - Remove left-over headers when HTTP/1 redirects to HTTP/2.
  - Handle HTTP_1_1_REQUIRED error.
  - Read request bodies synchronously for sync requests.
  - Properly handle server sending shut down GOAWAY.
  + tests:
  - Remove dependency on Apache's PHP module.
  - Depend upon Apache's http2 module.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662120000">- Update to version 3.0.8:
  + Fix `http` proxy authentication with default proxy resolver.
  + Numerous improvments to HTTP/2 reliability.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662206400">- Update to version 3.1.1:
  + Reintroduce some thread-safety to SoupSession (see
    https://libsoup.org/libsoup-3.0/client-thread-safety.html)
  + Add SoupServerMessage:tls-peer-certificate and
    SoupServerMessage:tls-peer-certificate-errors
  + Port docs to gi-docgen
  + Update documentation.
- Replace pkgconfig(gtk-doc) with pkgconfig(gi-docgen)
  BuildRequires (and update options passed to meson) following
  upstreams port.
- Add 299.patch: multithread-test: show error information in case
  of request failure. multithread-test: skip proxy tests if apache
  is not available.
- Use ldconfig_scriptlets for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1662292800">- Update to version 3.1.3:
  + Fix compile error when `SOUP_VERSION_MAX_ALLOWED` is defined.
- Changes from version 3.1.2:
  + Replace HTTP/2 tests using Quart with internal HTTP/2 server
    tests.
  + Improve version macros including adding ability to define
    `SOUP_DISABLE_DEPRECATION_WARNINGS`.
- Drop -D http2_tests=disabled meson paramter: no longer supported.
- Drop 299.patch: merged upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662379200">- Update to version 3.1.4:
  + Numerous improvements to HTTP/2 reliablity.
  + Fix `http` proxy authentication with default proxy resolver.
  + Fix undefined ``ssize_t`` with MSVC.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1663243200">- Update to version 3.2.0:
  + No changes, stable bump only.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 3.2.1:
  + When built against nghttp2 1.50.0+ be relaxed about header
    whitespace.
  + Fix possible crash when cancelling an HTTP/2 message.
  + Fix regresion where soup_server_message_get_socket() could
    return NULL.
  + Fix minor memory leak.
- Disable tests on 32-bit while waiting for
  https://gitlab.gnome.org/GNOME/libsoup/-/issues/309</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1667476800">- Update to version 3.2.2:
  + Various HTTP/2 Fixes:
  - Fix `content-sniffed` not being emitted for resources without
    content.
  - Fix leak of SoupServerConnection when stolen.
- Enable tests on 32-bit again, fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674388800">- Update to version 3.3.0:
  + Add `SoupMessage::got-body-data` signal to monitor progress of
    reads
  + Add `soup_session_send_and_splice()` and
    `soup_session_send_and_splice_async()` convenience APIs
  + Add `soup_message_set_force_http1()` and
    `soup_message_get_force_http1()` APIs
  + Change `soup_cookie_copy()` to not retain default ports
  + Ensure `SoupServerMessage` socket is available in websocket
    handler
  + Fix `soup_message_new()` not erroring when URI has an empty
    host
  + Fix thread-saftey issues in `SoupConnectionAuth`
  + Fix various connection leaks
  + Fix the possibility of sending invalid empty
    `Sec-WebSocket-Protocol` header
  + Fix IO errors not being handled on `CONNECT` messages
  + Numerous improvements to cookies:
  - Add support for cookie prefixes (`__Secure-` and `__Host-`)
  - Reject cookies with control characters in name or value
  - Reject `SameSite=None` cookies without `Secure`
  - Change `soup_cookie_parse()` to be more strict about what is
    considered whitespace
  - Change default SameSite value to `Lax`
  - Fix `soup_cookie_equal()` with `NULL` path</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676289600">- Update to version 3.3.1:
  + Fix regression in `SoupCookieJar` not handling valid Secure
    cookies.
  + Fix crash when skipping HTTP/1 response stream with chunked
    enconding.
  + Change Session to unqueue finished items earlier without an
    extra MainContext iteration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 3.4.0:
  + Fix possible crash in SoupContentSniffer.
  + Fix socket leak.
  + Add missing annotation to
    soup_header_g_string_append_param_quoted().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 3.4.1:
  + Fix HTTP/2 on platforms with unsigned char.
  + Change request cancellation to be handled earlier.
  + Add names to GSources and source tags to GTasks to aid
    debugging.
- Run meson_test macro for all arches.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682769600">- Update to version 3.4.2:
  + Revert changes to request cancellation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 3.4.3:
  + Fix incorrect UTF-8 encoding for params in headers
  + Numerous HTTP/2 fixes and improvements
  + Fix possible crashes in connection management
  + Fix small leak in SoupServer
  + Fix the possibility of empty HTTP/2 frames being sent</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 3.4.4:
  + Improve HTTP/2 performance when a lot of buffering happens
  + Support building libnghttp2 as a subproject</changelog>
  <changelog author="mgorse@suse.com" date="1733313600">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add 6adc0e3e.patch: websocket: Process the frame as soon as we
  read data (boo#1233287 CVE-2024-52532 glgo#GNOME/libsoup#391).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).
- Increase test timeout on s390x. The http2-body-stream test can be
  slow and sometimes times out in our builds.</changelog>
  <changelog author="mgorse@suse.com" date="1745928000">- Add more CVE fixes:
  + libsoup-CVE-2025-32050.patch (boo#1240752 CVE-2025-32050)
  + libsoup-CVE-2025-32051.patch (boo#1240754 CVE-2025-32051)
  + libsoup-CVE-2025-32052.patch (boo#1240756 CVE-2025-32052)
  + libsoup-CVE-2025-32053.patch (boo#1240757 CVE-2025-32053)
  + libsoup-CVE-2025-46420.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-2784.patch (boo#1240750 CVE-2025-2784)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32908.patch (boo#1241223 CVE-2025-32908)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)</changelog>
</package>
<package pkgid="3ad8682c51ffc853dfea87beca23d9176fd8827096a1e6d1005a5fd76186b62e" name="libsoup-3_0-0" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="150600.3.10.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 3.0.5:
  + Misc HTTP/2 fixes.
  + Fix missing files for installed-tests.
  + Fix SoupServer not properly handling invalid percent encoded
    paths.
  + Fix other areas not properly handling invalid percent encoded
    paths.
  + Fix SoupLogger:max-body-size of 0 meaning log nothing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648814400">- Update to version 3.0.6:
  + Misc HTTP/2 fixes.
  + Add PUT/POST support to examples/get.
  + Add `--user-agent` option to examples/get.
  + Misc meson improvements.
  + Fix build with Visual Studio.</changelog>
  <changelog author="dimstar@opensuse.org" date="1657108800">- Update to version 3.0.7:
  + Fix leak in SoupAuthNTLM.
  + Fix constructing SoupAuthNTLM objects.
  + Disable mutual negotiation in SoupAuthNegotiate.
  + http2:
  - Do not advertise the `h2` protocool for proxy connections.
  - Remove left-over headers when HTTP/1 redirects to HTTP/2.
  - Handle HTTP_1_1_REQUIRED error.
  - Read request bodies synchronously for sync requests.
  - Properly handle server sending shut down GOAWAY.
  + tests:
  - Remove dependency on Apache's PHP module.
  - Depend upon Apache's http2 module.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662120000">- Update to version 3.0.8:
  + Fix `http` proxy authentication with default proxy resolver.
  + Numerous improvments to HTTP/2 reliability.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662206400">- Update to version 3.1.1:
  + Reintroduce some thread-safety to SoupSession (see
    https://libsoup.org/libsoup-3.0/client-thread-safety.html)
  + Add SoupServerMessage:tls-peer-certificate and
    SoupServerMessage:tls-peer-certificate-errors
  + Port docs to gi-docgen
  + Update documentation.
- Replace pkgconfig(gtk-doc) with pkgconfig(gi-docgen)
  BuildRequires (and update options passed to meson) following
  upstreams port.
- Add 299.patch: multithread-test: show error information in case
  of request failure. multithread-test: skip proxy tests if apache
  is not available.
- Use ldconfig_scriptlets for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1662292800">- Update to version 3.1.3:
  + Fix compile error when `SOUP_VERSION_MAX_ALLOWED` is defined.
- Changes from version 3.1.2:
  + Replace HTTP/2 tests using Quart with internal HTTP/2 server
    tests.
  + Improve version macros including adding ability to define
    `SOUP_DISABLE_DEPRECATION_WARNINGS`.
- Drop -D http2_tests=disabled meson paramter: no longer supported.
- Drop 299.patch: merged upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662379200">- Update to version 3.1.4:
  + Numerous improvements to HTTP/2 reliablity.
  + Fix `http` proxy authentication with default proxy resolver.
  + Fix undefined ``ssize_t`` with MSVC.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1663243200">- Update to version 3.2.0:
  + No changes, stable bump only.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 3.2.1:
  + When built against nghttp2 1.50.0+ be relaxed about header
    whitespace.
  + Fix possible crash when cancelling an HTTP/2 message.
  + Fix regresion where soup_server_message_get_socket() could
    return NULL.
  + Fix minor memory leak.
- Disable tests on 32-bit while waiting for
  https://gitlab.gnome.org/GNOME/libsoup/-/issues/309</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1667476800">- Update to version 3.2.2:
  + Various HTTP/2 Fixes:
  - Fix `content-sniffed` not being emitted for resources without
    content.
  - Fix leak of SoupServerConnection when stolen.
- Enable tests on 32-bit again, fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674388800">- Update to version 3.3.0:
  + Add `SoupMessage::got-body-data` signal to monitor progress of
    reads
  + Add `soup_session_send_and_splice()` and
    `soup_session_send_and_splice_async()` convenience APIs
  + Add `soup_message_set_force_http1()` and
    `soup_message_get_force_http1()` APIs
  + Change `soup_cookie_copy()` to not retain default ports
  + Ensure `SoupServerMessage` socket is available in websocket
    handler
  + Fix `soup_message_new()` not erroring when URI has an empty
    host
  + Fix thread-saftey issues in `SoupConnectionAuth`
  + Fix various connection leaks
  + Fix the possibility of sending invalid empty
    `Sec-WebSocket-Protocol` header
  + Fix IO errors not being handled on `CONNECT` messages
  + Numerous improvements to cookies:
  - Add support for cookie prefixes (`__Secure-` and `__Host-`)
  - Reject cookies with control characters in name or value
  - Reject `SameSite=None` cookies without `Secure`
  - Change `soup_cookie_parse()` to be more strict about what is
    considered whitespace
  - Change default SameSite value to `Lax`
  - Fix `soup_cookie_equal()` with `NULL` path</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676289600">- Update to version 3.3.1:
  + Fix regression in `SoupCookieJar` not handling valid Secure
    cookies.
  + Fix crash when skipping HTTP/1 response stream with chunked
    enconding.
  + Change Session to unqueue finished items earlier without an
    extra MainContext iteration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 3.4.0:
  + Fix possible crash in SoupContentSniffer.
  + Fix socket leak.
  + Add missing annotation to
    soup_header_g_string_append_param_quoted().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 3.4.1:
  + Fix HTTP/2 on platforms with unsigned char.
  + Change request cancellation to be handled earlier.
  + Add names to GSources and source tags to GTasks to aid
    debugging.
- Run meson_test macro for all arches.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682769600">- Update to version 3.4.2:
  + Revert changes to request cancellation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 3.4.3:
  + Fix incorrect UTF-8 encoding for params in headers
  + Numerous HTTP/2 fixes and improvements
  + Fix possible crashes in connection management
  + Fix small leak in SoupServer
  + Fix the possibility of empty HTTP/2 frames being sent</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 3.4.4:
  + Improve HTTP/2 performance when a lot of buffering happens
  + Support building libnghttp2 as a subproject</changelog>
  <changelog author="mgorse@suse.com" date="1733313600">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add 6adc0e3e.patch: websocket: Process the frame as soon as we
  read data (boo#1233287 CVE-2024-52532 glgo#GNOME/libsoup#391).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).
- Increase test timeout on s390x. The http2-body-stream test can be
  slow and sometimes times out in our builds.</changelog>
  <changelog author="mgorse@suse.com" date="1745928000">- Add more CVE fixes:
  + libsoup-CVE-2025-32050.patch (boo#1240752 CVE-2025-32050)
  + libsoup-CVE-2025-32051.patch (boo#1240754 CVE-2025-32051)
  + libsoup-CVE-2025-32052.patch (boo#1240756 CVE-2025-32052)
  + libsoup-CVE-2025-32053.patch (boo#1240757 CVE-2025-32053)
  + libsoup-CVE-2025-46420.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-2784.patch (boo#1240750 CVE-2025-2784)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32908.patch (boo#1241223 CVE-2025-32908)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-4476.patch (boo#1243422 CVE-2025-4476)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
</package>
<package pkgid="39430979292d324c2021eb0e043f43913264d5539be71f0a37ee4db15c994ca1" name="libsoup-3_0-0" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="150600.3.13.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648814400">- Update to version 3.0.6:
  + Misc HTTP/2 fixes.
  + Add PUT/POST support to examples/get.
  + Add `--user-agent` option to examples/get.
  + Misc meson improvements.
  + Fix build with Visual Studio.</changelog>
  <changelog author="dimstar@opensuse.org" date="1657108800">- Update to version 3.0.7:
  + Fix leak in SoupAuthNTLM.
  + Fix constructing SoupAuthNTLM objects.
  + Disable mutual negotiation in SoupAuthNegotiate.
  + http2:
  - Do not advertise the `h2` protocool for proxy connections.
  - Remove left-over headers when HTTP/1 redirects to HTTP/2.
  - Handle HTTP_1_1_REQUIRED error.
  - Read request bodies synchronously for sync requests.
  - Properly handle server sending shut down GOAWAY.
  + tests:
  - Remove dependency on Apache's PHP module.
  - Depend upon Apache's http2 module.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662120000">- Update to version 3.0.8:
  + Fix `http` proxy authentication with default proxy resolver.
  + Numerous improvments to HTTP/2 reliability.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662206400">- Update to version 3.1.1:
  + Reintroduce some thread-safety to SoupSession (see
    https://libsoup.org/libsoup-3.0/client-thread-safety.html)
  + Add SoupServerMessage:tls-peer-certificate and
    SoupServerMessage:tls-peer-certificate-errors
  + Port docs to gi-docgen
  + Update documentation.
- Replace pkgconfig(gtk-doc) with pkgconfig(gi-docgen)
  BuildRequires (and update options passed to meson) following
  upstreams port.
- Add 299.patch: multithread-test: show error information in case
  of request failure. multithread-test: skip proxy tests if apache
  is not available.
- Use ldconfig_scriptlets for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1662292800">- Update to version 3.1.3:
  + Fix compile error when `SOUP_VERSION_MAX_ALLOWED` is defined.
- Changes from version 3.1.2:
  + Replace HTTP/2 tests using Quart with internal HTTP/2 server
    tests.
  + Improve version macros including adding ability to define
    `SOUP_DISABLE_DEPRECATION_WARNINGS`.
- Drop -D http2_tests=disabled meson paramter: no longer supported.
- Drop 299.patch: merged upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662379200">- Update to version 3.1.4:
  + Numerous improvements to HTTP/2 reliablity.
  + Fix `http` proxy authentication with default proxy resolver.
  + Fix undefined ``ssize_t`` with MSVC.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1663243200">- Update to version 3.2.0:
  + No changes, stable bump only.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 3.2.1:
  + When built against nghttp2 1.50.0+ be relaxed about header
    whitespace.
  + Fix possible crash when cancelling an HTTP/2 message.
  + Fix regresion where soup_server_message_get_socket() could
    return NULL.
  + Fix minor memory leak.
- Disable tests on 32-bit while waiting for
  https://gitlab.gnome.org/GNOME/libsoup/-/issues/309</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1667476800">- Update to version 3.2.2:
  + Various HTTP/2 Fixes:
  - Fix `content-sniffed` not being emitted for resources without
    content.
  - Fix leak of SoupServerConnection when stolen.
- Enable tests on 32-bit again, fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674388800">- Update to version 3.3.0:
  + Add `SoupMessage::got-body-data` signal to monitor progress of
    reads
  + Add `soup_session_send_and_splice()` and
    `soup_session_send_and_splice_async()` convenience APIs
  + Add `soup_message_set_force_http1()` and
    `soup_message_get_force_http1()` APIs
  + Change `soup_cookie_copy()` to not retain default ports
  + Ensure `SoupServerMessage` socket is available in websocket
    handler
  + Fix `soup_message_new()` not erroring when URI has an empty
    host
  + Fix thread-saftey issues in `SoupConnectionAuth`
  + Fix various connection leaks
  + Fix the possibility of sending invalid empty
    `Sec-WebSocket-Protocol` header
  + Fix IO errors not being handled on `CONNECT` messages
  + Numerous improvements to cookies:
  - Add support for cookie prefixes (`__Secure-` and `__Host-`)
  - Reject cookies with control characters in name or value
  - Reject `SameSite=None` cookies without `Secure`
  - Change `soup_cookie_parse()` to be more strict about what is
    considered whitespace
  - Change default SameSite value to `Lax`
  - Fix `soup_cookie_equal()` with `NULL` path</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676289600">- Update to version 3.3.1:
  + Fix regression in `SoupCookieJar` not handling valid Secure
    cookies.
  + Fix crash when skipping HTTP/1 response stream with chunked
    enconding.
  + Change Session to unqueue finished items earlier without an
    extra MainContext iteration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 3.4.0:
  + Fix possible crash in SoupContentSniffer.
  + Fix socket leak.
  + Add missing annotation to
    soup_header_g_string_append_param_quoted().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 3.4.1:
  + Fix HTTP/2 on platforms with unsigned char.
  + Change request cancellation to be handled earlier.
  + Add names to GSources and source tags to GTasks to aid
    debugging.
- Run meson_test macro for all arches.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682769600">- Update to version 3.4.2:
  + Revert changes to request cancellation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 3.4.3:
  + Fix incorrect UTF-8 encoding for params in headers
  + Numerous HTTP/2 fixes and improvements
  + Fix possible crashes in connection management
  + Fix small leak in SoupServer
  + Fix the possibility of empty HTTP/2 frames being sent</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 3.4.4:
  + Improve HTTP/2 performance when a lot of buffering happens
  + Support building libnghttp2 as a subproject</changelog>
  <changelog author="mgorse@suse.com" date="1733313600">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add 6adc0e3e.patch: websocket: Process the frame as soon as we
  read data (boo#1233287 CVE-2024-52532 glgo#GNOME/libsoup#391).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).
- Increase test timeout on s390x. The http2-body-stream test can be
  slow and sometimes times out in our builds.</changelog>
  <changelog author="mgorse@suse.com" date="1745928000">- Add more CVE fixes:
  + libsoup-CVE-2025-32050.patch (boo#1240752 CVE-2025-32050)
  + libsoup-CVE-2025-32051.patch (boo#1240754 CVE-2025-32051)
  + libsoup-CVE-2025-32052.patch (boo#1240756 CVE-2025-32052)
  + libsoup-CVE-2025-32053.patch (boo#1240757 CVE-2025-32053)
  + libsoup-CVE-2025-46420.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-2784.patch (boo#1240750 CVE-2025-2784)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32908.patch (boo#1241223 CVE-2025-32908)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-4476.patch (boo#1243422 CVE-2025-4476)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
</package>
<package pkgid="b2010e1c31e1e469eb26b560c4ec49d6a214a01aefe690d414f2d0fb3adcb0c2" name="libsoup-3_0-0" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="150600.3.18.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1662120000">- Update to version 3.0.8:
  + Fix `http` proxy authentication with default proxy resolver.
  + Numerous improvments to HTTP/2 reliability.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662206400">- Update to version 3.1.1:
  + Reintroduce some thread-safety to SoupSession (see
    https://libsoup.org/libsoup-3.0/client-thread-safety.html)
  + Add SoupServerMessage:tls-peer-certificate and
    SoupServerMessage:tls-peer-certificate-errors
  + Port docs to gi-docgen
  + Update documentation.
- Replace pkgconfig(gtk-doc) with pkgconfig(gi-docgen)
  BuildRequires (and update options passed to meson) following
  upstreams port.
- Add 299.patch: multithread-test: show error information in case
  of request failure. multithread-test: skip proxy tests if apache
  is not available.
- Use ldconfig_scriptlets for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1662292800">- Update to version 3.1.3:
  + Fix compile error when `SOUP_VERSION_MAX_ALLOWED` is defined.
- Changes from version 3.1.2:
  + Replace HTTP/2 tests using Quart with internal HTTP/2 server
    tests.
  + Improve version macros including adding ability to define
    `SOUP_DISABLE_DEPRECATION_WARNINGS`.
- Drop -D http2_tests=disabled meson paramter: no longer supported.
- Drop 299.patch: merged upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662379200">- Update to version 3.1.4:
  + Numerous improvements to HTTP/2 reliablity.
  + Fix `http` proxy authentication with default proxy resolver.
  + Fix undefined ``ssize_t`` with MSVC.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1663243200">- Update to version 3.2.0:
  + No changes, stable bump only.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 3.2.1:
  + When built against nghttp2 1.50.0+ be relaxed about header
    whitespace.
  + Fix possible crash when cancelling an HTTP/2 message.
  + Fix regresion where soup_server_message_get_socket() could
    return NULL.
  + Fix minor memory leak.
- Disable tests on 32-bit while waiting for
  https://gitlab.gnome.org/GNOME/libsoup/-/issues/309</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1667476800">- Update to version 3.2.2:
  + Various HTTP/2 Fixes:
  - Fix `content-sniffed` not being emitted for resources without
    content.
  - Fix leak of SoupServerConnection when stolen.
- Enable tests on 32-bit again, fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674388800">- Update to version 3.3.0:
  + Add `SoupMessage::got-body-data` signal to monitor progress of
    reads
  + Add `soup_session_send_and_splice()` and
    `soup_session_send_and_splice_async()` convenience APIs
  + Add `soup_message_set_force_http1()` and
    `soup_message_get_force_http1()` APIs
  + Change `soup_cookie_copy()` to not retain default ports
  + Ensure `SoupServerMessage` socket is available in websocket
    handler
  + Fix `soup_message_new()` not erroring when URI has an empty
    host
  + Fix thread-saftey issues in `SoupConnectionAuth`
  + Fix various connection leaks
  + Fix the possibility of sending invalid empty
    `Sec-WebSocket-Protocol` header
  + Fix IO errors not being handled on `CONNECT` messages
  + Numerous improvements to cookies:
  - Add support for cookie prefixes (`__Secure-` and `__Host-`)
  - Reject cookies with control characters in name or value
  - Reject `SameSite=None` cookies without `Secure`
  - Change `soup_cookie_parse()` to be more strict about what is
    considered whitespace
  - Change default SameSite value to `Lax`
  - Fix `soup_cookie_equal()` with `NULL` path</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676289600">- Update to version 3.3.1:
  + Fix regression in `SoupCookieJar` not handling valid Secure
    cookies.
  + Fix crash when skipping HTTP/1 response stream with chunked
    enconding.
  + Change Session to unqueue finished items earlier without an
    extra MainContext iteration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 3.4.0:
  + Fix possible crash in SoupContentSniffer.
  + Fix socket leak.
  + Add missing annotation to
    soup_header_g_string_append_param_quoted().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 3.4.1:
  + Fix HTTP/2 on platforms with unsigned char.
  + Change request cancellation to be handled earlier.
  + Add names to GSources and source tags to GTasks to aid
    debugging.
- Run meson_test macro for all arches.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682769600">- Update to version 3.4.2:
  + Revert changes to request cancellation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 3.4.3:
  + Fix incorrect UTF-8 encoding for params in headers
  + Numerous HTTP/2 fixes and improvements
  + Fix possible crashes in connection management
  + Fix small leak in SoupServer
  + Fix the possibility of empty HTTP/2 frames being sent</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 3.4.4:
  + Improve HTTP/2 performance when a lot of buffering happens
  + Support building libnghttp2 as a subproject</changelog>
  <changelog author="mgorse@suse.com" date="1733313600">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add 6adc0e3e.patch: websocket: Process the frame as soon as we
  read data (boo#1233287 CVE-2024-52532 glgo#GNOME/libsoup#391).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).
- Increase test timeout on s390x. The http2-body-stream test can be
  slow and sometimes times out in our builds.</changelog>
  <changelog author="mgorse@suse.com" date="1745928000">- Add more CVE fixes:
  + libsoup-CVE-2025-32050.patch (boo#1240752 CVE-2025-32050)
  + libsoup-CVE-2025-32051.patch (boo#1240754 CVE-2025-32051)
  + libsoup-CVE-2025-32052.patch (boo#1240756 CVE-2025-32052)
  + libsoup-CVE-2025-32053.patch (boo#1240757 CVE-2025-32053)
  + libsoup-CVE-2025-46420.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-2784.patch (boo#1240750 CVE-2025-2784)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32908.patch (boo#1241223 CVE-2025-32908)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-4476.patch (boo#1243422 CVE-2025-4476)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760184000">- Add libsoup-CVE-2025-11021.patch: Ignore invalid date when
  processing cookies to prevent out-of-bounds read (bsc#1250562,
  CVE-2025-11021, glgo#GNOME/libsoup!482).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760616000">- Update libsoup-CVE-2025-11021.patch: Add NULL check for
  soup_date_time_to_string() (bsc#1250562, CVE-2025-11021,
  glgo#GNOME/libsoup!483).</changelog>
</package>
<package pkgid="63367bd87598d1c04fd7a8c0528906fab7ae9b2dfc47a5bb9927462caa87308c" name="libsoup-3_0-0" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="150600.3.21.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1662206400">- Update to version 3.1.1:
  + Reintroduce some thread-safety to SoupSession (see
    https://libsoup.org/libsoup-3.0/client-thread-safety.html)
  + Add SoupServerMessage:tls-peer-certificate and
    SoupServerMessage:tls-peer-certificate-errors
  + Port docs to gi-docgen
  + Update documentation.
- Replace pkgconfig(gtk-doc) with pkgconfig(gi-docgen)
  BuildRequires (and update options passed to meson) following
  upstreams port.
- Add 299.patch: multithread-test: show error information in case
  of request failure. multithread-test: skip proxy tests if apache
  is not available.
- Use ldconfig_scriptlets for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1662292800">- Update to version 3.1.3:
  + Fix compile error when `SOUP_VERSION_MAX_ALLOWED` is defined.
- Changes from version 3.1.2:
  + Replace HTTP/2 tests using Quart with internal HTTP/2 server
    tests.
  + Improve version macros including adding ability to define
    `SOUP_DISABLE_DEPRECATION_WARNINGS`.
- Drop -D http2_tests=disabled meson paramter: no longer supported.
- Drop 299.patch: merged upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662379200">- Update to version 3.1.4:
  + Numerous improvements to HTTP/2 reliablity.
  + Fix `http` proxy authentication with default proxy resolver.
  + Fix undefined ``ssize_t`` with MSVC.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1663243200">- Update to version 3.2.0:
  + No changes, stable bump only.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 3.2.1:
  + When built against nghttp2 1.50.0+ be relaxed about header
    whitespace.
  + Fix possible crash when cancelling an HTTP/2 message.
  + Fix regresion where soup_server_message_get_socket() could
    return NULL.
  + Fix minor memory leak.
- Disable tests on 32-bit while waiting for
  https://gitlab.gnome.org/GNOME/libsoup/-/issues/309</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1667476800">- Update to version 3.2.2:
  + Various HTTP/2 Fixes:
  - Fix `content-sniffed` not being emitted for resources without
    content.
  - Fix leak of SoupServerConnection when stolen.
- Enable tests on 32-bit again, fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674388800">- Update to version 3.3.0:
  + Add `SoupMessage::got-body-data` signal to monitor progress of
    reads
  + Add `soup_session_send_and_splice()` and
    `soup_session_send_and_splice_async()` convenience APIs
  + Add `soup_message_set_force_http1()` and
    `soup_message_get_force_http1()` APIs
  + Change `soup_cookie_copy()` to not retain default ports
  + Ensure `SoupServerMessage` socket is available in websocket
    handler
  + Fix `soup_message_new()` not erroring when URI has an empty
    host
  + Fix thread-saftey issues in `SoupConnectionAuth`
  + Fix various connection leaks
  + Fix the possibility of sending invalid empty
    `Sec-WebSocket-Protocol` header
  + Fix IO errors not being handled on `CONNECT` messages
  + Numerous improvements to cookies:
  - Add support for cookie prefixes (`__Secure-` and `__Host-`)
  - Reject cookies with control characters in name or value
  - Reject `SameSite=None` cookies without `Secure`
  - Change `soup_cookie_parse()` to be more strict about what is
    considered whitespace
  - Change default SameSite value to `Lax`
  - Fix `soup_cookie_equal()` with `NULL` path</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676289600">- Update to version 3.3.1:
  + Fix regression in `SoupCookieJar` not handling valid Secure
    cookies.
  + Fix crash when skipping HTTP/1 response stream with chunked
    enconding.
  + Change Session to unqueue finished items earlier without an
    extra MainContext iteration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 3.4.0:
  + Fix possible crash in SoupContentSniffer.
  + Fix socket leak.
  + Add missing annotation to
    soup_header_g_string_append_param_quoted().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 3.4.1:
  + Fix HTTP/2 on platforms with unsigned char.
  + Change request cancellation to be handled earlier.
  + Add names to GSources and source tags to GTasks to aid
    debugging.
- Run meson_test macro for all arches.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682769600">- Update to version 3.4.2:
  + Revert changes to request cancellation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 3.4.3:
  + Fix incorrect UTF-8 encoding for params in headers
  + Numerous HTTP/2 fixes and improvements
  + Fix possible crashes in connection management
  + Fix small leak in SoupServer
  + Fix the possibility of empty HTTP/2 frames being sent</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 3.4.4:
  + Improve HTTP/2 performance when a lot of buffering happens
  + Support building libnghttp2 as a subproject</changelog>
  <changelog author="mgorse@suse.com" date="1733313600">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add 6adc0e3e.patch: websocket: Process the frame as soon as we
  read data (boo#1233287 CVE-2024-52532 glgo#GNOME/libsoup#391).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).
- Increase test timeout on s390x. The http2-body-stream test can be
  slow and sometimes times out in our builds.</changelog>
  <changelog author="mgorse@suse.com" date="1745928000">- Add more CVE fixes:
  + libsoup-CVE-2025-32050.patch (boo#1240752 CVE-2025-32050)
  + libsoup-CVE-2025-32051.patch (boo#1240754 CVE-2025-32051)
  + libsoup-CVE-2025-32052.patch (boo#1240756 CVE-2025-32052)
  + libsoup-CVE-2025-32053.patch (boo#1240757 CVE-2025-32053)
  + libsoup-CVE-2025-46420.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-2784.patch (boo#1240750 CVE-2025-2784)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32908.patch (boo#1241223 CVE-2025-32908)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-4476.patch (boo#1243422 CVE-2025-4476)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760184000">- Add libsoup-CVE-2025-11021.patch: Ignore invalid date when
  processing cookies to prevent out-of-bounds read (bsc#1250562,
  CVE-2025-11021, glgo#GNOME/libsoup!482).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760616000">- Update libsoup-CVE-2025-11021.patch: Add NULL check for
  soup_date_time_to_string() (bsc#1250562, CVE-2025-11021,
  glgo#GNOME/libsoup!483).</changelog>
  <changelog author="mgorse@suse.com" date="1763467200">- Add libsoup-CVE-2025-12105.patch: fix use after free caused by
  'finishing' queue item twice (bsc#1252555 CVE-2025-12105
  glgo#GNOME/libsoup!481).</changelog>
</package>
<package pkgid="4b6afab704ef0684dad587dd3c7e0c872677ef065f64bc31fc600cb2fa48c47c" name="libsoup-3_0-0" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="150600.3.28.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1663243200">- Update to version 3.2.0:
  + No changes, stable bump only.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 3.2.1:
  + When built against nghttp2 1.50.0+ be relaxed about header
    whitespace.
  + Fix possible crash when cancelling an HTTP/2 message.
  + Fix regresion where soup_server_message_get_socket() could
    return NULL.
  + Fix minor memory leak.
- Disable tests on 32-bit while waiting for
  https://gitlab.gnome.org/GNOME/libsoup/-/issues/309</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1667476800">- Update to version 3.2.2:
  + Various HTTP/2 Fixes:
  - Fix `content-sniffed` not being emitted for resources without
    content.
  - Fix leak of SoupServerConnection when stolen.
- Enable tests on 32-bit again, fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674388800">- Update to version 3.3.0:
  + Add `SoupMessage::got-body-data` signal to monitor progress of
    reads
  + Add `soup_session_send_and_splice()` and
    `soup_session_send_and_splice_async()` convenience APIs
  + Add `soup_message_set_force_http1()` and
    `soup_message_get_force_http1()` APIs
  + Change `soup_cookie_copy()` to not retain default ports
  + Ensure `SoupServerMessage` socket is available in websocket
    handler
  + Fix `soup_message_new()` not erroring when URI has an empty
    host
  + Fix thread-saftey issues in `SoupConnectionAuth`
  + Fix various connection leaks
  + Fix the possibility of sending invalid empty
    `Sec-WebSocket-Protocol` header
  + Fix IO errors not being handled on `CONNECT` messages
  + Numerous improvements to cookies:
  - Add support for cookie prefixes (`__Secure-` and `__Host-`)
  - Reject cookies with control characters in name or value
  - Reject `SameSite=None` cookies without `Secure`
  - Change `soup_cookie_parse()` to be more strict about what is
    considered whitespace
  - Change default SameSite value to `Lax`
  - Fix `soup_cookie_equal()` with `NULL` path</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676289600">- Update to version 3.3.1:
  + Fix regression in `SoupCookieJar` not handling valid Secure
    cookies.
  + Fix crash when skipping HTTP/1 response stream with chunked
    enconding.
  + Change Session to unqueue finished items earlier without an
    extra MainContext iteration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 3.4.0:
  + Fix possible crash in SoupContentSniffer.
  + Fix socket leak.
  + Add missing annotation to
    soup_header_g_string_append_param_quoted().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 3.4.1:
  + Fix HTTP/2 on platforms with unsigned char.
  + Change request cancellation to be handled earlier.
  + Add names to GSources and source tags to GTasks to aid
    debugging.
- Run meson_test macro for all arches.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682769600">- Update to version 3.4.2:
  + Revert changes to request cancellation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 3.4.3:
  + Fix incorrect UTF-8 encoding for params in headers
  + Numerous HTTP/2 fixes and improvements
  + Fix possible crashes in connection management
  + Fix small leak in SoupServer
  + Fix the possibility of empty HTTP/2 frames being sent</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 3.4.4:
  + Improve HTTP/2 performance when a lot of buffering happens
  + Support building libnghttp2 as a subproject</changelog>
  <changelog author="mgorse@suse.com" date="1733313600">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add 6adc0e3e.patch: websocket: Process the frame as soon as we
  read data (boo#1233287 CVE-2024-52532 glgo#GNOME/libsoup#391).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).
- Increase test timeout on s390x. The http2-body-stream test can be
  slow and sometimes times out in our builds.</changelog>
  <changelog author="mgorse@suse.com" date="1745928000">- Add more CVE fixes:
  + libsoup-CVE-2025-32050.patch (boo#1240752 CVE-2025-32050)
  + libsoup-CVE-2025-32051.patch (boo#1240754 CVE-2025-32051)
  + libsoup-CVE-2025-32052.patch (boo#1240756 CVE-2025-32052)
  + libsoup-CVE-2025-32053.patch (boo#1240757 CVE-2025-32053)
  + libsoup-CVE-2025-46420.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-2784.patch (boo#1240750 CVE-2025-2784)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32908.patch (boo#1241223 CVE-2025-32908)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-4476.patch (boo#1243422 CVE-2025-4476)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760184000">- Add libsoup-CVE-2025-11021.patch: Ignore invalid date when
  processing cookies to prevent out-of-bounds read (bsc#1250562,
  CVE-2025-11021, glgo#GNOME/libsoup!482).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760616000">- Update libsoup-CVE-2025-11021.patch: Add NULL check for
  soup_date_time_to_string() (bsc#1250562, CVE-2025-11021,
  glgo#GNOME/libsoup!483).</changelog>
  <changelog author="mgorse@suse.com" date="1763467200">- Add libsoup-CVE-2025-12105.patch: fix use after free caused by
  'finishing' queue item twice (bsc#1252555 CVE-2025-12105
  glgo#GNOME/libsoup!481).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767700800">- Add libsoup-CVE-2025-14523.patch: Reject duplicated Host in
  headers (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!490).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767873600">- Refresh libsoup-CVE-2025-14523.patch: Follow the update of
  upstream (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!491).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1768305600">- Add libsoup-CVE-2026-0716.patch: Fix out-of-bounds read for
  websocket (bsc#1256418, CVE-2026-0716, glgo#GNOME/libsoup!494).
- Add libsoup-CVE-2026-0719.patch: Fix overflow for password md4sum
  (bsc#1256399, CVE-2026-0719, glgo#GNOME/libsoup!493).</changelog>
</package>
<package pkgid="df394ea2636defc87207e6a26546be98bf455856c0d33813c3de9f98d6688550" name="libsoup-3_0-0" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="150600.3.31.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 3.2.1:
  + When built against nghttp2 1.50.0+ be relaxed about header
    whitespace.
  + Fix possible crash when cancelling an HTTP/2 message.
  + Fix regresion where soup_server_message_get_socket() could
    return NULL.
  + Fix minor memory leak.
- Disable tests on 32-bit while waiting for
  https://gitlab.gnome.org/GNOME/libsoup/-/issues/309</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1667476800">- Update to version 3.2.2:
  + Various HTTP/2 Fixes:
  - Fix `content-sniffed` not being emitted for resources without
    content.
  - Fix leak of SoupServerConnection when stolen.
- Enable tests on 32-bit again, fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674388800">- Update to version 3.3.0:
  + Add `SoupMessage::got-body-data` signal to monitor progress of
    reads
  + Add `soup_session_send_and_splice()` and
    `soup_session_send_and_splice_async()` convenience APIs
  + Add `soup_message_set_force_http1()` and
    `soup_message_get_force_http1()` APIs
  + Change `soup_cookie_copy()` to not retain default ports
  + Ensure `SoupServerMessage` socket is available in websocket
    handler
  + Fix `soup_message_new()` not erroring when URI has an empty
    host
  + Fix thread-saftey issues in `SoupConnectionAuth`
  + Fix various connection leaks
  + Fix the possibility of sending invalid empty
    `Sec-WebSocket-Protocol` header
  + Fix IO errors not being handled on `CONNECT` messages
  + Numerous improvements to cookies:
  - Add support for cookie prefixes (`__Secure-` and `__Host-`)
  - Reject cookies with control characters in name or value
  - Reject `SameSite=None` cookies without `Secure`
  - Change `soup_cookie_parse()` to be more strict about what is
    considered whitespace
  - Change default SameSite value to `Lax`
  - Fix `soup_cookie_equal()` with `NULL` path</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676289600">- Update to version 3.3.1:
  + Fix regression in `SoupCookieJar` not handling valid Secure
    cookies.
  + Fix crash when skipping HTTP/1 response stream with chunked
    enconding.
  + Change Session to unqueue finished items earlier without an
    extra MainContext iteration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 3.4.0:
  + Fix possible crash in SoupContentSniffer.
  + Fix socket leak.
  + Add missing annotation to
    soup_header_g_string_append_param_quoted().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 3.4.1:
  + Fix HTTP/2 on platforms with unsigned char.
  + Change request cancellation to be handled earlier.
  + Add names to GSources and source tags to GTasks to aid
    debugging.
- Run meson_test macro for all arches.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682769600">- Update to version 3.4.2:
  + Revert changes to request cancellation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 3.4.3:
  + Fix incorrect UTF-8 encoding for params in headers
  + Numerous HTTP/2 fixes and improvements
  + Fix possible crashes in connection management
  + Fix small leak in SoupServer
  + Fix the possibility of empty HTTP/2 frames being sent</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 3.4.4:
  + Improve HTTP/2 performance when a lot of buffering happens
  + Support building libnghttp2 as a subproject</changelog>
  <changelog author="mgorse@suse.com" date="1733313600">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add 6adc0e3e.patch: websocket: Process the frame as soon as we
  read data (boo#1233287 CVE-2024-52532 glgo#GNOME/libsoup#391).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).
- Increase test timeout on s390x. The http2-body-stream test can be
  slow and sometimes times out in our builds.</changelog>
  <changelog author="mgorse@suse.com" date="1745928000">- Add more CVE fixes:
  + libsoup-CVE-2025-32050.patch (boo#1240752 CVE-2025-32050)
  + libsoup-CVE-2025-32051.patch (boo#1240754 CVE-2025-32051)
  + libsoup-CVE-2025-32052.patch (boo#1240756 CVE-2025-32052)
  + libsoup-CVE-2025-32053.patch (boo#1240757 CVE-2025-32053)
  + libsoup-CVE-2025-46420.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-2784.patch (boo#1240750 CVE-2025-2784)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32908.patch (boo#1241223 CVE-2025-32908)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-4476.patch (boo#1243422 CVE-2025-4476)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760184000">- Add libsoup-CVE-2025-11021.patch: Ignore invalid date when
  processing cookies to prevent out-of-bounds read (bsc#1250562,
  CVE-2025-11021, glgo#GNOME/libsoup!482).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760616000">- Update libsoup-CVE-2025-11021.patch: Add NULL check for
  soup_date_time_to_string() (bsc#1250562, CVE-2025-11021,
  glgo#GNOME/libsoup!483).</changelog>
  <changelog author="mgorse@suse.com" date="1763467200">- Add libsoup-CVE-2025-12105.patch: fix use after free caused by
  'finishing' queue item twice (bsc#1252555 CVE-2025-12105
  glgo#GNOME/libsoup!481).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767700800">- Add libsoup-CVE-2025-14523.patch: Reject duplicated Host in
  headers (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!490).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767873600">- Refresh libsoup-CVE-2025-14523.patch: Follow the update of
  upstream (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!491).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1768305600">- Add libsoup-CVE-2026-0716.patch: Fix out-of-bounds read for
  websocket (bsc#1256418, CVE-2026-0716, glgo#GNOME/libsoup!494).
- Add libsoup-CVE-2026-0719.patch: Fix overflow for password md4sum
  (bsc#1256399, CVE-2026-0719, glgo#GNOME/libsoup!493).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1770120000">- Add libsoup-CVE-2026-1536.patch: Always validate the headers
  value when coming from untrusted source
  (bsc#1257440, CVE-2026-1536, glgo#GNOME/libsoup/commit/5c1a2e9c).
- Add libsoup-CVE-2026-1761.patch: multipart: check length of bytes
  read soup_filter_input_stream_read_until()
  (bsc#1257598, CVE-2026-1761, glgo#GNOME/libsoup!496).</changelog>
</package>
<package pkgid="401d349d3f03485b0c2b808af85010a6a8c9da689431132f0fa7bc26e173817b" name="libsoup-3_0-0" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="150600.3.34.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1667476800">- Update to version 3.2.2:
  + Various HTTP/2 Fixes:
  - Fix `content-sniffed` not being emitted for resources without
    content.
  - Fix leak of SoupServerConnection when stolen.
- Enable tests on 32-bit again, fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674388800">- Update to version 3.3.0:
  + Add `SoupMessage::got-body-data` signal to monitor progress of
    reads
  + Add `soup_session_send_and_splice()` and
    `soup_session_send_and_splice_async()` convenience APIs
  + Add `soup_message_set_force_http1()` and
    `soup_message_get_force_http1()` APIs
  + Change `soup_cookie_copy()` to not retain default ports
  + Ensure `SoupServerMessage` socket is available in websocket
    handler
  + Fix `soup_message_new()` not erroring when URI has an empty
    host
  + Fix thread-saftey issues in `SoupConnectionAuth`
  + Fix various connection leaks
  + Fix the possibility of sending invalid empty
    `Sec-WebSocket-Protocol` header
  + Fix IO errors not being handled on `CONNECT` messages
  + Numerous improvements to cookies:
  - Add support for cookie prefixes (`__Secure-` and `__Host-`)
  - Reject cookies with control characters in name or value
  - Reject `SameSite=None` cookies without `Secure`
  - Change `soup_cookie_parse()` to be more strict about what is
    considered whitespace
  - Change default SameSite value to `Lax`
  - Fix `soup_cookie_equal()` with `NULL` path</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676289600">- Update to version 3.3.1:
  + Fix regression in `SoupCookieJar` not handling valid Secure
    cookies.
  + Fix crash when skipping HTTP/1 response stream with chunked
    enconding.
  + Change Session to unqueue finished items earlier without an
    extra MainContext iteration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 3.4.0:
  + Fix possible crash in SoupContentSniffer.
  + Fix socket leak.
  + Add missing annotation to
    soup_header_g_string_append_param_quoted().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 3.4.1:
  + Fix HTTP/2 on platforms with unsigned char.
  + Change request cancellation to be handled earlier.
  + Add names to GSources and source tags to GTasks to aid
    debugging.
- Run meson_test macro for all arches.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682769600">- Update to version 3.4.2:
  + Revert changes to request cancellation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 3.4.3:
  + Fix incorrect UTF-8 encoding for params in headers
  + Numerous HTTP/2 fixes and improvements
  + Fix possible crashes in connection management
  + Fix small leak in SoupServer
  + Fix the possibility of empty HTTP/2 frames being sent</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 3.4.4:
  + Improve HTTP/2 performance when a lot of buffering happens
  + Support building libnghttp2 as a subproject</changelog>
  <changelog author="mgorse@suse.com" date="1733313600">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add 6adc0e3e.patch: websocket: Process the frame as soon as we
  read data (boo#1233287 CVE-2024-52532 glgo#GNOME/libsoup#391).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).
- Increase test timeout on s390x. The http2-body-stream test can be
  slow and sometimes times out in our builds.</changelog>
  <changelog author="mgorse@suse.com" date="1745928000">- Add more CVE fixes:
  + libsoup-CVE-2025-32050.patch (boo#1240752 CVE-2025-32050)
  + libsoup-CVE-2025-32051.patch (boo#1240754 CVE-2025-32051)
  + libsoup-CVE-2025-32052.patch (boo#1240756 CVE-2025-32052)
  + libsoup-CVE-2025-32053.patch (boo#1240757 CVE-2025-32053)
  + libsoup-CVE-2025-46420.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-2784.patch (boo#1240750 CVE-2025-2784)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32908.patch (boo#1241223 CVE-2025-32908)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-4476.patch (boo#1243422 CVE-2025-4476)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760184000">- Add libsoup-CVE-2025-11021.patch: Ignore invalid date when
  processing cookies to prevent out-of-bounds read (bsc#1250562,
  CVE-2025-11021, glgo#GNOME/libsoup!482).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760616000">- Update libsoup-CVE-2025-11021.patch: Add NULL check for
  soup_date_time_to_string() (bsc#1250562, CVE-2025-11021,
  glgo#GNOME/libsoup!483).</changelog>
  <changelog author="mgorse@suse.com" date="1763467200">- Add libsoup-CVE-2025-12105.patch: fix use after free caused by
  'finishing' queue item twice (bsc#1252555 CVE-2025-12105
  glgo#GNOME/libsoup!481).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767700800">- Add libsoup-CVE-2025-14523.patch: Reject duplicated Host in
  headers (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!490).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767873600">- Refresh libsoup-CVE-2025-14523.patch: Follow the update of
  upstream (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!491).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1768305600">- Add libsoup-CVE-2026-0716.patch: Fix out-of-bounds read for
  websocket (bsc#1256418, CVE-2026-0716, glgo#GNOME/libsoup!494).
- Add libsoup-CVE-2026-0719.patch: Fix overflow for password md4sum
  (bsc#1256399, CVE-2026-0719, glgo#GNOME/libsoup!493).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1770120000">- Add libsoup-CVE-2026-1536.patch: Always validate the headers
  value when coming from untrusted source
  (bsc#1257440, CVE-2026-1536, glgo#GNOME/libsoup/commit/5c1a2e9c).
- Add libsoup-CVE-2026-1761.patch: multipart: check length of bytes
  read soup_filter_input_stream_read_until()
  (bsc#1257598, CVE-2026-1761, glgo#GNOME/libsoup!496).</changelog>
  <changelog author="mgorse@suse.com" date="1771502400">- Add more CVE fixes:
  + libsoup-CVE-2025-32049.patch (bsc#1240751 CVE-2025-32049
    glgo#GNOME/libsoup#390)
  + libsoup-CVE-2026-2443.patch (bsc#1258170 CVE-2026-2443
    glgo#GNOME/libsoup#487)
  + libsoup-CVE-2026-2369.patch (bsc#1258120 CVE-2026-2369
    glgo#GNOME/libsoup!508)
  + libsoup-CVE-2026-2708.patch (bsc#1258508 CVE-2026-2708
    glgo#GNOME/libsoup#500)</changelog>
</package>
<package pkgid="b422f2a1fd4494966aa187d480dc5f4891f01f5017c096c35da7df8b6b5e9773" name="libsoup-3_0-0" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="150600.3.37.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1674388800">- Update to version 3.3.0:
  + Add `SoupMessage::got-body-data` signal to monitor progress of
    reads
  + Add `soup_session_send_and_splice()` and
    `soup_session_send_and_splice_async()` convenience APIs
  + Add `soup_message_set_force_http1()` and
    `soup_message_get_force_http1()` APIs
  + Change `soup_cookie_copy()` to not retain default ports
  + Ensure `SoupServerMessage` socket is available in websocket
    handler
  + Fix `soup_message_new()` not erroring when URI has an empty
    host
  + Fix thread-saftey issues in `SoupConnectionAuth`
  + Fix various connection leaks
  + Fix the possibility of sending invalid empty
    `Sec-WebSocket-Protocol` header
  + Fix IO errors not being handled on `CONNECT` messages
  + Numerous improvements to cookies:
  - Add support for cookie prefixes (`__Secure-` and `__Host-`)
  - Reject cookies with control characters in name or value
  - Reject `SameSite=None` cookies without `Secure`
  - Change `soup_cookie_parse()` to be more strict about what is
    considered whitespace
  - Change default SameSite value to `Lax`
  - Fix `soup_cookie_equal()` with `NULL` path</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676289600">- Update to version 3.3.1:
  + Fix regression in `SoupCookieJar` not handling valid Secure
    cookies.
  + Fix crash when skipping HTTP/1 response stream with chunked
    enconding.
  + Change Session to unqueue finished items earlier without an
    extra MainContext iteration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 3.4.0:
  + Fix possible crash in SoupContentSniffer.
  + Fix socket leak.
  + Add missing annotation to
    soup_header_g_string_append_param_quoted().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 3.4.1:
  + Fix HTTP/2 on platforms with unsigned char.
  + Change request cancellation to be handled earlier.
  + Add names to GSources and source tags to GTasks to aid
    debugging.
- Run meson_test macro for all arches.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682769600">- Update to version 3.4.2:
  + Revert changes to request cancellation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 3.4.3:
  + Fix incorrect UTF-8 encoding for params in headers
  + Numerous HTTP/2 fixes and improvements
  + Fix possible crashes in connection management
  + Fix small leak in SoupServer
  + Fix the possibility of empty HTTP/2 frames being sent</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 3.4.4:
  + Improve HTTP/2 performance when a lot of buffering happens
  + Support building libnghttp2 as a subproject</changelog>
  <changelog author="mgorse@suse.com" date="1733313600">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add 6adc0e3e.patch: websocket: Process the frame as soon as we
  read data (boo#1233287 CVE-2024-52532 glgo#GNOME/libsoup#391).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).
- Increase test timeout on s390x. The http2-body-stream test can be
  slow and sometimes times out in our builds.</changelog>
  <changelog author="mgorse@suse.com" date="1745928000">- Add more CVE fixes:
  + libsoup-CVE-2025-32050.patch (boo#1240752 CVE-2025-32050)
  + libsoup-CVE-2025-32051.patch (boo#1240754 CVE-2025-32051)
  + libsoup-CVE-2025-32052.patch (boo#1240756 CVE-2025-32052)
  + libsoup-CVE-2025-32053.patch (boo#1240757 CVE-2025-32053)
  + libsoup-CVE-2025-46420.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-2784.patch (boo#1240750 CVE-2025-2784)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32908.patch (boo#1241223 CVE-2025-32908)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-4476.patch (boo#1243422 CVE-2025-4476)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760184000">- Add libsoup-CVE-2025-11021.patch: Ignore invalid date when
  processing cookies to prevent out-of-bounds read (bsc#1250562,
  CVE-2025-11021, glgo#GNOME/libsoup!482).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760616000">- Update libsoup-CVE-2025-11021.patch: Add NULL check for
  soup_date_time_to_string() (bsc#1250562, CVE-2025-11021,
  glgo#GNOME/libsoup!483).</changelog>
  <changelog author="mgorse@suse.com" date="1763467200">- Add libsoup-CVE-2025-12105.patch: fix use after free caused by
  'finishing' queue item twice (bsc#1252555 CVE-2025-12105
  glgo#GNOME/libsoup!481).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767700800">- Add libsoup-CVE-2025-14523.patch: Reject duplicated Host in
  headers (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!490).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767873600">- Refresh libsoup-CVE-2025-14523.patch: Follow the update of
  upstream (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!491).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1768305600">- Add libsoup-CVE-2026-0716.patch: Fix out-of-bounds read for
  websocket (bsc#1256418, CVE-2026-0716, glgo#GNOME/libsoup!494).
- Add libsoup-CVE-2026-0719.patch: Fix overflow for password md4sum
  (bsc#1256399, CVE-2026-0719, glgo#GNOME/libsoup!493).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1770120000">- Add libsoup-CVE-2026-1536.patch: Always validate the headers
  value when coming from untrusted source
  (bsc#1257440, CVE-2026-1536, glgo#GNOME/libsoup/commit/5c1a2e9c).
- Add libsoup-CVE-2026-1761.patch: multipart: check length of bytes
  read soup_filter_input_stream_read_until()
  (bsc#1257598, CVE-2026-1761, glgo#GNOME/libsoup!496).</changelog>
  <changelog author="mgorse@suse.com" date="1771502400">- Add more CVE fixes:
  + libsoup-CVE-2025-32049.patch (bsc#1240751 CVE-2025-32049
    glgo#GNOME/libsoup#390)
  + libsoup-CVE-2026-2443.patch (bsc#1258170 CVE-2026-2443
    glgo#GNOME/libsoup#487)
  + libsoup-CVE-2026-2369.patch (bsc#1258120 CVE-2026-2369
    glgo#GNOME/libsoup!508)
  + libsoup-CVE-2026-2708.patch (bsc#1258508 CVE-2026-2708
    glgo#GNOME/libsoup#500)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1772020800">- Add libsoup-CVE-2026-1760.patch: server: close the connection
  after responsing a request containing...
  (bsc#1257597, CVE-2026-1760, glgo#GNOME/libsoup#475).
- Add libsoup-CVE-2026-1467.patch: uri-utils: do host validation
  when checking if a GUri is valid
  (bsc#1257398, CVE-2026-1467, glgo#GNOME/libsoup#488).
- Add libsoup-CVE-2026-1539.patch: Also remove Proxy-Authorization
  header on cross origin redirect
  (bsc#1257441, CVE-2026-1539, glgo#GNOME/libsoup#489).</changelog>
</package>
<package pkgid="cc9c06473fa8fd8b37b1d852ee8fea9ad329b281e9d044131908bf92e8044898" name="libsoup-3_0-0" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="150600.3.42.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 3.4.0:
  + Fix possible crash in SoupContentSniffer.
  + Fix socket leak.
  + Add missing annotation to
    soup_header_g_string_append_param_quoted().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 3.4.1:
  + Fix HTTP/2 on platforms with unsigned char.
  + Change request cancellation to be handled earlier.
  + Add names to GSources and source tags to GTasks to aid
    debugging.
- Run meson_test macro for all arches.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682769600">- Update to version 3.4.2:
  + Revert changes to request cancellation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 3.4.3:
  + Fix incorrect UTF-8 encoding for params in headers
  + Numerous HTTP/2 fixes and improvements
  + Fix possible crashes in connection management
  + Fix small leak in SoupServer
  + Fix the possibility of empty HTTP/2 frames being sent</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 3.4.4:
  + Improve HTTP/2 performance when a lot of buffering happens
  + Support building libnghttp2 as a subproject</changelog>
  <changelog author="mgorse@suse.com" date="1733313600">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add 6adc0e3e.patch: websocket: Process the frame as soon as we
  read data (boo#1233287 CVE-2024-52532 glgo#GNOME/libsoup#391).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).
- Increase test timeout on s390x. The http2-body-stream test can be
  slow and sometimes times out in our builds.</changelog>
  <changelog author="mgorse@suse.com" date="1745928000">- Add more CVE fixes:
  + libsoup-CVE-2025-32050.patch (boo#1240752 CVE-2025-32050)
  + libsoup-CVE-2025-32051.patch (boo#1240754 CVE-2025-32051)
  + libsoup-CVE-2025-32052.patch (boo#1240756 CVE-2025-32052)
  + libsoup-CVE-2025-32053.patch (boo#1240757 CVE-2025-32053)
  + libsoup-CVE-2025-46420.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-2784.patch (boo#1240750 CVE-2025-2784)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32908.patch (boo#1241223 CVE-2025-32908)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-4476.patch (boo#1243422 CVE-2025-4476)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760184000">- Add libsoup-CVE-2025-11021.patch: Ignore invalid date when
  processing cookies to prevent out-of-bounds read (bsc#1250562,
  CVE-2025-11021, glgo#GNOME/libsoup!482).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760616000">- Update libsoup-CVE-2025-11021.patch: Add NULL check for
  soup_date_time_to_string() (bsc#1250562, CVE-2025-11021,
  glgo#GNOME/libsoup!483).</changelog>
  <changelog author="mgorse@suse.com" date="1763467200">- Add libsoup-CVE-2025-12105.patch: fix use after free caused by
  'finishing' queue item twice (bsc#1252555 CVE-2025-12105
  glgo#GNOME/libsoup!481).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767700800">- Add libsoup-CVE-2025-14523.patch: Reject duplicated Host in
  headers (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!490).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767873600">- Refresh libsoup-CVE-2025-14523.patch: Follow the update of
  upstream (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!491).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1768305600">- Add libsoup-CVE-2026-0716.patch: Fix out-of-bounds read for
  websocket (bsc#1256418, CVE-2026-0716, glgo#GNOME/libsoup!494).
- Add libsoup-CVE-2026-0719.patch: Fix overflow for password md4sum
  (bsc#1256399, CVE-2026-0719, glgo#GNOME/libsoup!493).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1770120000">- Add libsoup-CVE-2026-1536.patch: Always validate the headers
  value when coming from untrusted source
  (bsc#1257440, CVE-2026-1536, glgo#GNOME/libsoup/commit/5c1a2e9c).
- Add libsoup-CVE-2026-1761.patch: multipart: check length of bytes
  read soup_filter_input_stream_read_until()
  (bsc#1257598, CVE-2026-1761, glgo#GNOME/libsoup!496).</changelog>
  <changelog author="mgorse@suse.com" date="1771502400">- Add more CVE fixes:
  + libsoup-CVE-2025-32049.patch (bsc#1240751 CVE-2025-32049
    glgo#GNOME/libsoup#390)
  + libsoup-CVE-2026-2443.patch (bsc#1258170 CVE-2026-2443
    glgo#GNOME/libsoup#487)
  + libsoup-CVE-2026-2369.patch (bsc#1258120 CVE-2026-2369
    glgo#GNOME/libsoup!508)
  + libsoup-CVE-2026-2708.patch (bsc#1258508 CVE-2026-2708
    glgo#GNOME/libsoup#500)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1772020800">- Add libsoup-CVE-2026-1760.patch: server: close the connection
  after responsing a request containing...
  (bsc#1257597, CVE-2026-1760, glgo#GNOME/libsoup#475).
- Add libsoup-CVE-2026-1467.patch: uri-utils: do host validation
  when checking if a GUri is valid
  (bsc#1257398, CVE-2026-1467, glgo#GNOME/libsoup#488).
- Add libsoup-CVE-2026-1539.patch: Also remove Proxy-Authorization
  header on cross origin redirect
  (bsc#1257441, CVE-2026-1539, glgo#GNOME/libsoup#489).</changelog>
  <changelog author="mgorse@suse.com" date="1772712000">- Update libsoup-CVE-2026-0716.patch to incorporate
  glgo#GNOME/libsoup!518. The original fix was incomplete
  (bsc#1256418 CVE-2026-0716 glgo#GNOME/libsoup#476).</changelog>
  <changelog author="mgorse@suse.com" date="1773230400">- Refresh some patches to match the output from gitlab.gnome.org.</changelog>
</package>
<package pkgid="3295827d7c736813fe52915b46dbec87082d0bba8669c0661d7110ce31175f74" name="libsoup-3_0-0" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="150600.3.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1641556800">- Update to version 3.0.4:
  + Fix HTTP/2 not properly handling socket timeouts.
  + Improvements to test reliablity.
  + Fix cross-compiling to Windows.
  + Fix tests with development glib-networking.
  + Expose soup_uri_copy() to Vala.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 3.0.5:
  + Misc HTTP/2 fixes.
  + Fix missing files for installed-tests.
  + Fix SoupServer not properly handling invalid percent encoded
    paths.
  + Fix other areas not properly handling invalid percent encoded
    paths.
  + Fix SoupLogger:max-body-size of 0 meaning log nothing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648814400">- Update to version 3.0.6:
  + Misc HTTP/2 fixes.
  + Add PUT/POST support to examples/get.
  + Add `--user-agent` option to examples/get.
  + Misc meson improvements.
  + Fix build with Visual Studio.</changelog>
  <changelog author="dimstar@opensuse.org" date="1657108800">- Update to version 3.0.7:
  + Fix leak in SoupAuthNTLM.
  + Fix constructing SoupAuthNTLM objects.
  + Disable mutual negotiation in SoupAuthNegotiate.
  + http2:
  - Do not advertise the `h2` protocool for proxy connections.
  - Remove left-over headers when HTTP/1 redirects to HTTP/2.
  - Handle HTTP_1_1_REQUIRED error.
  - Read request bodies synchronously for sync requests.
  - Properly handle server sending shut down GOAWAY.
  + tests:
  - Remove dependency on Apache's PHP module.
  - Depend upon Apache's http2 module.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662120000">- Update to version 3.0.8:
  + Fix `http` proxy authentication with default proxy resolver.
  + Numerous improvments to HTTP/2 reliability.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662206400">- Update to version 3.1.1:
  + Reintroduce some thread-safety to SoupSession (see
    https://libsoup.org/libsoup-3.0/client-thread-safety.html)
  + Add SoupServerMessage:tls-peer-certificate and
    SoupServerMessage:tls-peer-certificate-errors
  + Port docs to gi-docgen
  + Update documentation.
- Replace pkgconfig(gtk-doc) with pkgconfig(gi-docgen)
  BuildRequires (and update options passed to meson) following
  upstreams port.
- Add 299.patch: multithread-test: show error information in case
  of request failure. multithread-test: skip proxy tests if apache
  is not available.
- Use ldconfig_scriptlets for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1662292800">- Update to version 3.1.3:
  + Fix compile error when `SOUP_VERSION_MAX_ALLOWED` is defined.
- Changes from version 3.1.2:
  + Replace HTTP/2 tests using Quart with internal HTTP/2 server
    tests.
  + Improve version macros including adding ability to define
    `SOUP_DISABLE_DEPRECATION_WARNINGS`.
- Drop -D http2_tests=disabled meson paramter: no longer supported.
- Drop 299.patch: merged upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662379200">- Update to version 3.1.4:
  + Numerous improvements to HTTP/2 reliablity.
  + Fix `http` proxy authentication with default proxy resolver.
  + Fix undefined ``ssize_t`` with MSVC.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1663243200">- Update to version 3.2.0:
  + No changes, stable bump only.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 3.2.1:
  + When built against nghttp2 1.50.0+ be relaxed about header
    whitespace.
  + Fix possible crash when cancelling an HTTP/2 message.
  + Fix regresion where soup_server_message_get_socket() could
    return NULL.
  + Fix minor memory leak.
- Disable tests on 32-bit while waiting for
  https://gitlab.gnome.org/GNOME/libsoup/-/issues/309</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1667476800">- Update to version 3.2.2:
  + Various HTTP/2 Fixes:
  - Fix `content-sniffed` not being emitted for resources without
    content.
  - Fix leak of SoupServerConnection when stolen.
- Enable tests on 32-bit again, fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674388800">- Update to version 3.3.0:
  + Add `SoupMessage::got-body-data` signal to monitor progress of
    reads
  + Add `soup_session_send_and_splice()` and
    `soup_session_send_and_splice_async()` convenience APIs
  + Add `soup_message_set_force_http1()` and
    `soup_message_get_force_http1()` APIs
  + Change `soup_cookie_copy()` to not retain default ports
  + Ensure `SoupServerMessage` socket is available in websocket
    handler
  + Fix `soup_message_new()` not erroring when URI has an empty
    host
  + Fix thread-saftey issues in `SoupConnectionAuth`
  + Fix various connection leaks
  + Fix the possibility of sending invalid empty
    `Sec-WebSocket-Protocol` header
  + Fix IO errors not being handled on `CONNECT` messages
  + Numerous improvements to cookies:
  - Add support for cookie prefixes (`__Secure-` and `__Host-`)
  - Reject cookies with control characters in name or value
  - Reject `SameSite=None` cookies without `Secure`
  - Change `soup_cookie_parse()` to be more strict about what is
    considered whitespace
  - Change default SameSite value to `Lax`
  - Fix `soup_cookie_equal()` with `NULL` path</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676289600">- Update to version 3.3.1:
  + Fix regression in `SoupCookieJar` not handling valid Secure
    cookies.
  + Fix crash when skipping HTTP/1 response stream with chunked
    enconding.
  + Change Session to unqueue finished items earlier without an
    extra MainContext iteration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 3.4.0:
  + Fix possible crash in SoupContentSniffer.
  + Fix socket leak.
  + Add missing annotation to
    soup_header_g_string_append_param_quoted().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 3.4.1:
  + Fix HTTP/2 on platforms with unsigned char.
  + Change request cancellation to be handled earlier.
  + Add names to GSources and source tags to GTasks to aid
    debugging.
- Run meson_test macro for all arches.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682769600">- Update to version 3.4.2:
  + Revert changes to request cancellation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 3.4.3:
  + Fix incorrect UTF-8 encoding for params in headers
  + Numerous HTTP/2 fixes and improvements
  + Fix possible crashes in connection management
  + Fix small leak in SoupServer
  + Fix the possibility of empty HTTP/2 frames being sent</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 3.4.4:
  + Improve HTTP/2 performance when a lot of buffering happens
  + Support building libnghttp2 as a subproject</changelog>
  <changelog author="mgorse@suse.com" date="1733313600">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add 6adc0e3e.patch: websocket: Process the frame as soon as we
  read data (boo#1233287 CVE-2024-52532 glgo#GNOME/libsoup#391).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).
- Increase test timeout on s390x. The http2-body-stream test can be
  slow and sometimes times out in our builds.</changelog>
  <changelog author="mgorse@suse.com" date="1745928000">- Add more CVE fixes:
  + libsoup-CVE-2025-32050.patch (boo#1240752 CVE-2025-32050)
  + libsoup-CVE-2025-32051.patch (boo#1240754 CVE-2025-32051)
  + libsoup-CVE-2025-32052.patch (boo#1240756 CVE-2025-32052)
  + libsoup-CVE-2025-32053.patch (boo#1240757 CVE-2025-32053)
  + libsoup-CVE-2025-46420.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-2784.patch (boo#1240750 CVE-2025-2784)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32908.patch (boo#1241223 CVE-2025-32908)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)</changelog>
</package>
<package pkgid="2bb4fa3091ba92d6045e507ae1e16ff0042afa00ca0ad33390aeacc9f215289b" name="libsoup-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="150600.3.10.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 3.0.5:
  + Misc HTTP/2 fixes.
  + Fix missing files for installed-tests.
  + Fix SoupServer not properly handling invalid percent encoded
    paths.
  + Fix other areas not properly handling invalid percent encoded
    paths.
  + Fix SoupLogger:max-body-size of 0 meaning log nothing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648814400">- Update to version 3.0.6:
  + Misc HTTP/2 fixes.
  + Add PUT/POST support to examples/get.
  + Add `--user-agent` option to examples/get.
  + Misc meson improvements.
  + Fix build with Visual Studio.</changelog>
  <changelog author="dimstar@opensuse.org" date="1657108800">- Update to version 3.0.7:
  + Fix leak in SoupAuthNTLM.
  + Fix constructing SoupAuthNTLM objects.
  + Disable mutual negotiation in SoupAuthNegotiate.
  + http2:
  - Do not advertise the `h2` protocool for proxy connections.
  - Remove left-over headers when HTTP/1 redirects to HTTP/2.
  - Handle HTTP_1_1_REQUIRED error.
  - Read request bodies synchronously for sync requests.
  - Properly handle server sending shut down GOAWAY.
  + tests:
  - Remove dependency on Apache's PHP module.
  - Depend upon Apache's http2 module.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662120000">- Update to version 3.0.8:
  + Fix `http` proxy authentication with default proxy resolver.
  + Numerous improvments to HTTP/2 reliability.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662206400">- Update to version 3.1.1:
  + Reintroduce some thread-safety to SoupSession (see
    https://libsoup.org/libsoup-3.0/client-thread-safety.html)
  + Add SoupServerMessage:tls-peer-certificate and
    SoupServerMessage:tls-peer-certificate-errors
  + Port docs to gi-docgen
  + Update documentation.
- Replace pkgconfig(gtk-doc) with pkgconfig(gi-docgen)
  BuildRequires (and update options passed to meson) following
  upstreams port.
- Add 299.patch: multithread-test: show error information in case
  of request failure. multithread-test: skip proxy tests if apache
  is not available.
- Use ldconfig_scriptlets for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1662292800">- Update to version 3.1.3:
  + Fix compile error when `SOUP_VERSION_MAX_ALLOWED` is defined.
- Changes from version 3.1.2:
  + Replace HTTP/2 tests using Quart with internal HTTP/2 server
    tests.
  + Improve version macros including adding ability to define
    `SOUP_DISABLE_DEPRECATION_WARNINGS`.
- Drop -D http2_tests=disabled meson paramter: no longer supported.
- Drop 299.patch: merged upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662379200">- Update to version 3.1.4:
  + Numerous improvements to HTTP/2 reliablity.
  + Fix `http` proxy authentication with default proxy resolver.
  + Fix undefined ``ssize_t`` with MSVC.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1663243200">- Update to version 3.2.0:
  + No changes, stable bump only.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 3.2.1:
  + When built against nghttp2 1.50.0+ be relaxed about header
    whitespace.
  + Fix possible crash when cancelling an HTTP/2 message.
  + Fix regresion where soup_server_message_get_socket() could
    return NULL.
  + Fix minor memory leak.
- Disable tests on 32-bit while waiting for
  https://gitlab.gnome.org/GNOME/libsoup/-/issues/309</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1667476800">- Update to version 3.2.2:
  + Various HTTP/2 Fixes:
  - Fix `content-sniffed` not being emitted for resources without
    content.
  - Fix leak of SoupServerConnection when stolen.
- Enable tests on 32-bit again, fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674388800">- Update to version 3.3.0:
  + Add `SoupMessage::got-body-data` signal to monitor progress of
    reads
  + Add `soup_session_send_and_splice()` and
    `soup_session_send_and_splice_async()` convenience APIs
  + Add `soup_message_set_force_http1()` and
    `soup_message_get_force_http1()` APIs
  + Change `soup_cookie_copy()` to not retain default ports
  + Ensure `SoupServerMessage` socket is available in websocket
    handler
  + Fix `soup_message_new()` not erroring when URI has an empty
    host
  + Fix thread-saftey issues in `SoupConnectionAuth`
  + Fix various connection leaks
  + Fix the possibility of sending invalid empty
    `Sec-WebSocket-Protocol` header
  + Fix IO errors not being handled on `CONNECT` messages
  + Numerous improvements to cookies:
  - Add support for cookie prefixes (`__Secure-` and `__Host-`)
  - Reject cookies with control characters in name or value
  - Reject `SameSite=None` cookies without `Secure`
  - Change `soup_cookie_parse()` to be more strict about what is
    considered whitespace
  - Change default SameSite value to `Lax`
  - Fix `soup_cookie_equal()` with `NULL` path</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676289600">- Update to version 3.3.1:
  + Fix regression in `SoupCookieJar` not handling valid Secure
    cookies.
  + Fix crash when skipping HTTP/1 response stream with chunked
    enconding.
  + Change Session to unqueue finished items earlier without an
    extra MainContext iteration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 3.4.0:
  + Fix possible crash in SoupContentSniffer.
  + Fix socket leak.
  + Add missing annotation to
    soup_header_g_string_append_param_quoted().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 3.4.1:
  + Fix HTTP/2 on platforms with unsigned char.
  + Change request cancellation to be handled earlier.
  + Add names to GSources and source tags to GTasks to aid
    debugging.
- Run meson_test macro for all arches.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682769600">- Update to version 3.4.2:
  + Revert changes to request cancellation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 3.4.3:
  + Fix incorrect UTF-8 encoding for params in headers
  + Numerous HTTP/2 fixes and improvements
  + Fix possible crashes in connection management
  + Fix small leak in SoupServer
  + Fix the possibility of empty HTTP/2 frames being sent</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 3.4.4:
  + Improve HTTP/2 performance when a lot of buffering happens
  + Support building libnghttp2 as a subproject</changelog>
  <changelog author="mgorse@suse.com" date="1733313600">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add 6adc0e3e.patch: websocket: Process the frame as soon as we
  read data (boo#1233287 CVE-2024-52532 glgo#GNOME/libsoup#391).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).
- Increase test timeout on s390x. The http2-body-stream test can be
  slow and sometimes times out in our builds.</changelog>
  <changelog author="mgorse@suse.com" date="1745928000">- Add more CVE fixes:
  + libsoup-CVE-2025-32050.patch (boo#1240752 CVE-2025-32050)
  + libsoup-CVE-2025-32051.patch (boo#1240754 CVE-2025-32051)
  + libsoup-CVE-2025-32052.patch (boo#1240756 CVE-2025-32052)
  + libsoup-CVE-2025-32053.patch (boo#1240757 CVE-2025-32053)
  + libsoup-CVE-2025-46420.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-2784.patch (boo#1240750 CVE-2025-2784)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32908.patch (boo#1241223 CVE-2025-32908)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-4476.patch (boo#1243422 CVE-2025-4476)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
</package>
<package pkgid="0c0e7d56d96963821435ed51b7ddd676ed1454ba87b2365464f80a79611d7840" name="libsoup-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="150600.3.13.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648814400">- Update to version 3.0.6:
  + Misc HTTP/2 fixes.
  + Add PUT/POST support to examples/get.
  + Add `--user-agent` option to examples/get.
  + Misc meson improvements.
  + Fix build with Visual Studio.</changelog>
  <changelog author="dimstar@opensuse.org" date="1657108800">- Update to version 3.0.7:
  + Fix leak in SoupAuthNTLM.
  + Fix constructing SoupAuthNTLM objects.
  + Disable mutual negotiation in SoupAuthNegotiate.
  + http2:
  - Do not advertise the `h2` protocool for proxy connections.
  - Remove left-over headers when HTTP/1 redirects to HTTP/2.
  - Handle HTTP_1_1_REQUIRED error.
  - Read request bodies synchronously for sync requests.
  - Properly handle server sending shut down GOAWAY.
  + tests:
  - Remove dependency on Apache's PHP module.
  - Depend upon Apache's http2 module.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662120000">- Update to version 3.0.8:
  + Fix `http` proxy authentication with default proxy resolver.
  + Numerous improvments to HTTP/2 reliability.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662206400">- Update to version 3.1.1:
  + Reintroduce some thread-safety to SoupSession (see
    https://libsoup.org/libsoup-3.0/client-thread-safety.html)
  + Add SoupServerMessage:tls-peer-certificate and
    SoupServerMessage:tls-peer-certificate-errors
  + Port docs to gi-docgen
  + Update documentation.
- Replace pkgconfig(gtk-doc) with pkgconfig(gi-docgen)
  BuildRequires (and update options passed to meson) following
  upstreams port.
- Add 299.patch: multithread-test: show error information in case
  of request failure. multithread-test: skip proxy tests if apache
  is not available.
- Use ldconfig_scriptlets for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1662292800">- Update to version 3.1.3:
  + Fix compile error when `SOUP_VERSION_MAX_ALLOWED` is defined.
- Changes from version 3.1.2:
  + Replace HTTP/2 tests using Quart with internal HTTP/2 server
    tests.
  + Improve version macros including adding ability to define
    `SOUP_DISABLE_DEPRECATION_WARNINGS`.
- Drop -D http2_tests=disabled meson paramter: no longer supported.
- Drop 299.patch: merged upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662379200">- Update to version 3.1.4:
  + Numerous improvements to HTTP/2 reliablity.
  + Fix `http` proxy authentication with default proxy resolver.
  + Fix undefined ``ssize_t`` with MSVC.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1663243200">- Update to version 3.2.0:
  + No changes, stable bump only.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 3.2.1:
  + When built against nghttp2 1.50.0+ be relaxed about header
    whitespace.
  + Fix possible crash when cancelling an HTTP/2 message.
  + Fix regresion where soup_server_message_get_socket() could
    return NULL.
  + Fix minor memory leak.
- Disable tests on 32-bit while waiting for
  https://gitlab.gnome.org/GNOME/libsoup/-/issues/309</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1667476800">- Update to version 3.2.2:
  + Various HTTP/2 Fixes:
  - Fix `content-sniffed` not being emitted for resources without
    content.
  - Fix leak of SoupServerConnection when stolen.
- Enable tests on 32-bit again, fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674388800">- Update to version 3.3.0:
  + Add `SoupMessage::got-body-data` signal to monitor progress of
    reads
  + Add `soup_session_send_and_splice()` and
    `soup_session_send_and_splice_async()` convenience APIs
  + Add `soup_message_set_force_http1()` and
    `soup_message_get_force_http1()` APIs
  + Change `soup_cookie_copy()` to not retain default ports
  + Ensure `SoupServerMessage` socket is available in websocket
    handler
  + Fix `soup_message_new()` not erroring when URI has an empty
    host
  + Fix thread-saftey issues in `SoupConnectionAuth`
  + Fix various connection leaks
  + Fix the possibility of sending invalid empty
    `Sec-WebSocket-Protocol` header
  + Fix IO errors not being handled on `CONNECT` messages
  + Numerous improvements to cookies:
  - Add support for cookie prefixes (`__Secure-` and `__Host-`)
  - Reject cookies with control characters in name or value
  - Reject `SameSite=None` cookies without `Secure`
  - Change `soup_cookie_parse()` to be more strict about what is
    considered whitespace
  - Change default SameSite value to `Lax`
  - Fix `soup_cookie_equal()` with `NULL` path</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676289600">- Update to version 3.3.1:
  + Fix regression in `SoupCookieJar` not handling valid Secure
    cookies.
  + Fix crash when skipping HTTP/1 response stream with chunked
    enconding.
  + Change Session to unqueue finished items earlier without an
    extra MainContext iteration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 3.4.0:
  + Fix possible crash in SoupContentSniffer.
  + Fix socket leak.
  + Add missing annotation to
    soup_header_g_string_append_param_quoted().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 3.4.1:
  + Fix HTTP/2 on platforms with unsigned char.
  + Change request cancellation to be handled earlier.
  + Add names to GSources and source tags to GTasks to aid
    debugging.
- Run meson_test macro for all arches.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682769600">- Update to version 3.4.2:
  + Revert changes to request cancellation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 3.4.3:
  + Fix incorrect UTF-8 encoding for params in headers
  + Numerous HTTP/2 fixes and improvements
  + Fix possible crashes in connection management
  + Fix small leak in SoupServer
  + Fix the possibility of empty HTTP/2 frames being sent</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 3.4.4:
  + Improve HTTP/2 performance when a lot of buffering happens
  + Support building libnghttp2 as a subproject</changelog>
  <changelog author="mgorse@suse.com" date="1733313600">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add 6adc0e3e.patch: websocket: Process the frame as soon as we
  read data (boo#1233287 CVE-2024-52532 glgo#GNOME/libsoup#391).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).
- Increase test timeout on s390x. The http2-body-stream test can be
  slow and sometimes times out in our builds.</changelog>
  <changelog author="mgorse@suse.com" date="1745928000">- Add more CVE fixes:
  + libsoup-CVE-2025-32050.patch (boo#1240752 CVE-2025-32050)
  + libsoup-CVE-2025-32051.patch (boo#1240754 CVE-2025-32051)
  + libsoup-CVE-2025-32052.patch (boo#1240756 CVE-2025-32052)
  + libsoup-CVE-2025-32053.patch (boo#1240757 CVE-2025-32053)
  + libsoup-CVE-2025-46420.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-2784.patch (boo#1240750 CVE-2025-2784)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32908.patch (boo#1241223 CVE-2025-32908)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-4476.patch (boo#1243422 CVE-2025-4476)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
</package>
<package pkgid="0ed35a5737f859e244dc55d241980d6f1c8b8779854e315acdeec0e039c3e2e6" name="libsoup-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="150600.3.18.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1662120000">- Update to version 3.0.8:
  + Fix `http` proxy authentication with default proxy resolver.
  + Numerous improvments to HTTP/2 reliability.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662206400">- Update to version 3.1.1:
  + Reintroduce some thread-safety to SoupSession (see
    https://libsoup.org/libsoup-3.0/client-thread-safety.html)
  + Add SoupServerMessage:tls-peer-certificate and
    SoupServerMessage:tls-peer-certificate-errors
  + Port docs to gi-docgen
  + Update documentation.
- Replace pkgconfig(gtk-doc) with pkgconfig(gi-docgen)
  BuildRequires (and update options passed to meson) following
  upstreams port.
- Add 299.patch: multithread-test: show error information in case
  of request failure. multithread-test: skip proxy tests if apache
  is not available.
- Use ldconfig_scriptlets for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1662292800">- Update to version 3.1.3:
  + Fix compile error when `SOUP_VERSION_MAX_ALLOWED` is defined.
- Changes from version 3.1.2:
  + Replace HTTP/2 tests using Quart with internal HTTP/2 server
    tests.
  + Improve version macros including adding ability to define
    `SOUP_DISABLE_DEPRECATION_WARNINGS`.
- Drop -D http2_tests=disabled meson paramter: no longer supported.
- Drop 299.patch: merged upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662379200">- Update to version 3.1.4:
  + Numerous improvements to HTTP/2 reliablity.
  + Fix `http` proxy authentication with default proxy resolver.
  + Fix undefined ``ssize_t`` with MSVC.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1663243200">- Update to version 3.2.0:
  + No changes, stable bump only.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 3.2.1:
  + When built against nghttp2 1.50.0+ be relaxed about header
    whitespace.
  + Fix possible crash when cancelling an HTTP/2 message.
  + Fix regresion where soup_server_message_get_socket() could
    return NULL.
  + Fix minor memory leak.
- Disable tests on 32-bit while waiting for
  https://gitlab.gnome.org/GNOME/libsoup/-/issues/309</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1667476800">- Update to version 3.2.2:
  + Various HTTP/2 Fixes:
  - Fix `content-sniffed` not being emitted for resources without
    content.
  - Fix leak of SoupServerConnection when stolen.
- Enable tests on 32-bit again, fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674388800">- Update to version 3.3.0:
  + Add `SoupMessage::got-body-data` signal to monitor progress of
    reads
  + Add `soup_session_send_and_splice()` and
    `soup_session_send_and_splice_async()` convenience APIs
  + Add `soup_message_set_force_http1()` and
    `soup_message_get_force_http1()` APIs
  + Change `soup_cookie_copy()` to not retain default ports
  + Ensure `SoupServerMessage` socket is available in websocket
    handler
  + Fix `soup_message_new()` not erroring when URI has an empty
    host
  + Fix thread-saftey issues in `SoupConnectionAuth`
  + Fix various connection leaks
  + Fix the possibility of sending invalid empty
    `Sec-WebSocket-Protocol` header
  + Fix IO errors not being handled on `CONNECT` messages
  + Numerous improvements to cookies:
  - Add support for cookie prefixes (`__Secure-` and `__Host-`)
  - Reject cookies with control characters in name or value
  - Reject `SameSite=None` cookies without `Secure`
  - Change `soup_cookie_parse()` to be more strict about what is
    considered whitespace
  - Change default SameSite value to `Lax`
  - Fix `soup_cookie_equal()` with `NULL` path</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676289600">- Update to version 3.3.1:
  + Fix regression in `SoupCookieJar` not handling valid Secure
    cookies.
  + Fix crash when skipping HTTP/1 response stream with chunked
    enconding.
  + Change Session to unqueue finished items earlier without an
    extra MainContext iteration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 3.4.0:
  + Fix possible crash in SoupContentSniffer.
  + Fix socket leak.
  + Add missing annotation to
    soup_header_g_string_append_param_quoted().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 3.4.1:
  + Fix HTTP/2 on platforms with unsigned char.
  + Change request cancellation to be handled earlier.
  + Add names to GSources and source tags to GTasks to aid
    debugging.
- Run meson_test macro for all arches.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682769600">- Update to version 3.4.2:
  + Revert changes to request cancellation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 3.4.3:
  + Fix incorrect UTF-8 encoding for params in headers
  + Numerous HTTP/2 fixes and improvements
  + Fix possible crashes in connection management
  + Fix small leak in SoupServer
  + Fix the possibility of empty HTTP/2 frames being sent</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 3.4.4:
  + Improve HTTP/2 performance when a lot of buffering happens
  + Support building libnghttp2 as a subproject</changelog>
  <changelog author="mgorse@suse.com" date="1733313600">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add 6adc0e3e.patch: websocket: Process the frame as soon as we
  read data (boo#1233287 CVE-2024-52532 glgo#GNOME/libsoup#391).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).
- Increase test timeout on s390x. The http2-body-stream test can be
  slow and sometimes times out in our builds.</changelog>
  <changelog author="mgorse@suse.com" date="1745928000">- Add more CVE fixes:
  + libsoup-CVE-2025-32050.patch (boo#1240752 CVE-2025-32050)
  + libsoup-CVE-2025-32051.patch (boo#1240754 CVE-2025-32051)
  + libsoup-CVE-2025-32052.patch (boo#1240756 CVE-2025-32052)
  + libsoup-CVE-2025-32053.patch (boo#1240757 CVE-2025-32053)
  + libsoup-CVE-2025-46420.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-2784.patch (boo#1240750 CVE-2025-2784)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32908.patch (boo#1241223 CVE-2025-32908)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-4476.patch (boo#1243422 CVE-2025-4476)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760184000">- Add libsoup-CVE-2025-11021.patch: Ignore invalid date when
  processing cookies to prevent out-of-bounds read (bsc#1250562,
  CVE-2025-11021, glgo#GNOME/libsoup!482).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760616000">- Update libsoup-CVE-2025-11021.patch: Add NULL check for
  soup_date_time_to_string() (bsc#1250562, CVE-2025-11021,
  glgo#GNOME/libsoup!483).</changelog>
</package>
<package pkgid="9da2c599b1b1b71fb2041b2c63d04cc8e38a08b2cff3e9263067dbc9cfc160a3" name="libsoup-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="150600.3.21.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1662206400">- Update to version 3.1.1:
  + Reintroduce some thread-safety to SoupSession (see
    https://libsoup.org/libsoup-3.0/client-thread-safety.html)
  + Add SoupServerMessage:tls-peer-certificate and
    SoupServerMessage:tls-peer-certificate-errors
  + Port docs to gi-docgen
  + Update documentation.
- Replace pkgconfig(gtk-doc) with pkgconfig(gi-docgen)
  BuildRequires (and update options passed to meson) following
  upstreams port.
- Add 299.patch: multithread-test: show error information in case
  of request failure. multithread-test: skip proxy tests if apache
  is not available.
- Use ldconfig_scriptlets for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1662292800">- Update to version 3.1.3:
  + Fix compile error when `SOUP_VERSION_MAX_ALLOWED` is defined.
- Changes from version 3.1.2:
  + Replace HTTP/2 tests using Quart with internal HTTP/2 server
    tests.
  + Improve version macros including adding ability to define
    `SOUP_DISABLE_DEPRECATION_WARNINGS`.
- Drop -D http2_tests=disabled meson paramter: no longer supported.
- Drop 299.patch: merged upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662379200">- Update to version 3.1.4:
  + Numerous improvements to HTTP/2 reliablity.
  + Fix `http` proxy authentication with default proxy resolver.
  + Fix undefined ``ssize_t`` with MSVC.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1663243200">- Update to version 3.2.0:
  + No changes, stable bump only.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 3.2.1:
  + When built against nghttp2 1.50.0+ be relaxed about header
    whitespace.
  + Fix possible crash when cancelling an HTTP/2 message.
  + Fix regresion where soup_server_message_get_socket() could
    return NULL.
  + Fix minor memory leak.
- Disable tests on 32-bit while waiting for
  https://gitlab.gnome.org/GNOME/libsoup/-/issues/309</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1667476800">- Update to version 3.2.2:
  + Various HTTP/2 Fixes:
  - Fix `content-sniffed` not being emitted for resources without
    content.
  - Fix leak of SoupServerConnection when stolen.
- Enable tests on 32-bit again, fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674388800">- Update to version 3.3.0:
  + Add `SoupMessage::got-body-data` signal to monitor progress of
    reads
  + Add `soup_session_send_and_splice()` and
    `soup_session_send_and_splice_async()` convenience APIs
  + Add `soup_message_set_force_http1()` and
    `soup_message_get_force_http1()` APIs
  + Change `soup_cookie_copy()` to not retain default ports
  + Ensure `SoupServerMessage` socket is available in websocket
    handler
  + Fix `soup_message_new()` not erroring when URI has an empty
    host
  + Fix thread-saftey issues in `SoupConnectionAuth`
  + Fix various connection leaks
  + Fix the possibility of sending invalid empty
    `Sec-WebSocket-Protocol` header
  + Fix IO errors not being handled on `CONNECT` messages
  + Numerous improvements to cookies:
  - Add support for cookie prefixes (`__Secure-` and `__Host-`)
  - Reject cookies with control characters in name or value
  - Reject `SameSite=None` cookies without `Secure`
  - Change `soup_cookie_parse()` to be more strict about what is
    considered whitespace
  - Change default SameSite value to `Lax`
  - Fix `soup_cookie_equal()` with `NULL` path</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676289600">- Update to version 3.3.1:
  + Fix regression in `SoupCookieJar` not handling valid Secure
    cookies.
  + Fix crash when skipping HTTP/1 response stream with chunked
    enconding.
  + Change Session to unqueue finished items earlier without an
    extra MainContext iteration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 3.4.0:
  + Fix possible crash in SoupContentSniffer.
  + Fix socket leak.
  + Add missing annotation to
    soup_header_g_string_append_param_quoted().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 3.4.1:
  + Fix HTTP/2 on platforms with unsigned char.
  + Change request cancellation to be handled earlier.
  + Add names to GSources and source tags to GTasks to aid
    debugging.
- Run meson_test macro for all arches.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682769600">- Update to version 3.4.2:
  + Revert changes to request cancellation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 3.4.3:
  + Fix incorrect UTF-8 encoding for params in headers
  + Numerous HTTP/2 fixes and improvements
  + Fix possible crashes in connection management
  + Fix small leak in SoupServer
  + Fix the possibility of empty HTTP/2 frames being sent</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 3.4.4:
  + Improve HTTP/2 performance when a lot of buffering happens
  + Support building libnghttp2 as a subproject</changelog>
  <changelog author="mgorse@suse.com" date="1733313600">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add 6adc0e3e.patch: websocket: Process the frame as soon as we
  read data (boo#1233287 CVE-2024-52532 glgo#GNOME/libsoup#391).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).
- Increase test timeout on s390x. The http2-body-stream test can be
  slow and sometimes times out in our builds.</changelog>
  <changelog author="mgorse@suse.com" date="1745928000">- Add more CVE fixes:
  + libsoup-CVE-2025-32050.patch (boo#1240752 CVE-2025-32050)
  + libsoup-CVE-2025-32051.patch (boo#1240754 CVE-2025-32051)
  + libsoup-CVE-2025-32052.patch (boo#1240756 CVE-2025-32052)
  + libsoup-CVE-2025-32053.patch (boo#1240757 CVE-2025-32053)
  + libsoup-CVE-2025-46420.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-2784.patch (boo#1240750 CVE-2025-2784)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32908.patch (boo#1241223 CVE-2025-32908)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-4476.patch (boo#1243422 CVE-2025-4476)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760184000">- Add libsoup-CVE-2025-11021.patch: Ignore invalid date when
  processing cookies to prevent out-of-bounds read (bsc#1250562,
  CVE-2025-11021, glgo#GNOME/libsoup!482).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760616000">- Update libsoup-CVE-2025-11021.patch: Add NULL check for
  soup_date_time_to_string() (bsc#1250562, CVE-2025-11021,
  glgo#GNOME/libsoup!483).</changelog>
  <changelog author="mgorse@suse.com" date="1763467200">- Add libsoup-CVE-2025-12105.patch: fix use after free caused by
  'finishing' queue item twice (bsc#1252555 CVE-2025-12105
  glgo#GNOME/libsoup!481).</changelog>
</package>
<package pkgid="c2bacb854dbf9d52518aaba7c88c5955c1dfd6ca4e8d716da99e686054d95478" name="libsoup-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="150600.3.28.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1663243200">- Update to version 3.2.0:
  + No changes, stable bump only.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 3.2.1:
  + When built against nghttp2 1.50.0+ be relaxed about header
    whitespace.
  + Fix possible crash when cancelling an HTTP/2 message.
  + Fix regresion where soup_server_message_get_socket() could
    return NULL.
  + Fix minor memory leak.
- Disable tests on 32-bit while waiting for
  https://gitlab.gnome.org/GNOME/libsoup/-/issues/309</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1667476800">- Update to version 3.2.2:
  + Various HTTP/2 Fixes:
  - Fix `content-sniffed` not being emitted for resources without
    content.
  - Fix leak of SoupServerConnection when stolen.
- Enable tests on 32-bit again, fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674388800">- Update to version 3.3.0:
  + Add `SoupMessage::got-body-data` signal to monitor progress of
    reads
  + Add `soup_session_send_and_splice()` and
    `soup_session_send_and_splice_async()` convenience APIs
  + Add `soup_message_set_force_http1()` and
    `soup_message_get_force_http1()` APIs
  + Change `soup_cookie_copy()` to not retain default ports
  + Ensure `SoupServerMessage` socket is available in websocket
    handler
  + Fix `soup_message_new()` not erroring when URI has an empty
    host
  + Fix thread-saftey issues in `SoupConnectionAuth`
  + Fix various connection leaks
  + Fix the possibility of sending invalid empty
    `Sec-WebSocket-Protocol` header
  + Fix IO errors not being handled on `CONNECT` messages
  + Numerous improvements to cookies:
  - Add support for cookie prefixes (`__Secure-` and `__Host-`)
  - Reject cookies with control characters in name or value
  - Reject `SameSite=None` cookies without `Secure`
  - Change `soup_cookie_parse()` to be more strict about what is
    considered whitespace
  - Change default SameSite value to `Lax`
  - Fix `soup_cookie_equal()` with `NULL` path</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676289600">- Update to version 3.3.1:
  + Fix regression in `SoupCookieJar` not handling valid Secure
    cookies.
  + Fix crash when skipping HTTP/1 response stream with chunked
    enconding.
  + Change Session to unqueue finished items earlier without an
    extra MainContext iteration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 3.4.0:
  + Fix possible crash in SoupContentSniffer.
  + Fix socket leak.
  + Add missing annotation to
    soup_header_g_string_append_param_quoted().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 3.4.1:
  + Fix HTTP/2 on platforms with unsigned char.
  + Change request cancellation to be handled earlier.
  + Add names to GSources and source tags to GTasks to aid
    debugging.
- Run meson_test macro for all arches.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682769600">- Update to version 3.4.2:
  + Revert changes to request cancellation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 3.4.3:
  + Fix incorrect UTF-8 encoding for params in headers
  + Numerous HTTP/2 fixes and improvements
  + Fix possible crashes in connection management
  + Fix small leak in SoupServer
  + Fix the possibility of empty HTTP/2 frames being sent</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 3.4.4:
  + Improve HTTP/2 performance when a lot of buffering happens
  + Support building libnghttp2 as a subproject</changelog>
  <changelog author="mgorse@suse.com" date="1733313600">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add 6adc0e3e.patch: websocket: Process the frame as soon as we
  read data (boo#1233287 CVE-2024-52532 glgo#GNOME/libsoup#391).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).
- Increase test timeout on s390x. The http2-body-stream test can be
  slow and sometimes times out in our builds.</changelog>
  <changelog author="mgorse@suse.com" date="1745928000">- Add more CVE fixes:
  + libsoup-CVE-2025-32050.patch (boo#1240752 CVE-2025-32050)
  + libsoup-CVE-2025-32051.patch (boo#1240754 CVE-2025-32051)
  + libsoup-CVE-2025-32052.patch (boo#1240756 CVE-2025-32052)
  + libsoup-CVE-2025-32053.patch (boo#1240757 CVE-2025-32053)
  + libsoup-CVE-2025-46420.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-2784.patch (boo#1240750 CVE-2025-2784)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32908.patch (boo#1241223 CVE-2025-32908)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-4476.patch (boo#1243422 CVE-2025-4476)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760184000">- Add libsoup-CVE-2025-11021.patch: Ignore invalid date when
  processing cookies to prevent out-of-bounds read (bsc#1250562,
  CVE-2025-11021, glgo#GNOME/libsoup!482).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760616000">- Update libsoup-CVE-2025-11021.patch: Add NULL check for
  soup_date_time_to_string() (bsc#1250562, CVE-2025-11021,
  glgo#GNOME/libsoup!483).</changelog>
  <changelog author="mgorse@suse.com" date="1763467200">- Add libsoup-CVE-2025-12105.patch: fix use after free caused by
  'finishing' queue item twice (bsc#1252555 CVE-2025-12105
  glgo#GNOME/libsoup!481).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767700800">- Add libsoup-CVE-2025-14523.patch: Reject duplicated Host in
  headers (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!490).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767873600">- Refresh libsoup-CVE-2025-14523.patch: Follow the update of
  upstream (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!491).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1768305600">- Add libsoup-CVE-2026-0716.patch: Fix out-of-bounds read for
  websocket (bsc#1256418, CVE-2026-0716, glgo#GNOME/libsoup!494).
- Add libsoup-CVE-2026-0719.patch: Fix overflow for password md4sum
  (bsc#1256399, CVE-2026-0719, glgo#GNOME/libsoup!493).</changelog>
</package>
<package pkgid="4da136f1d4790ed30295067d0c9add96348854c9f711bc3974935f1902356a0e" name="libsoup-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="150600.3.31.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 3.2.1:
  + When built against nghttp2 1.50.0+ be relaxed about header
    whitespace.
  + Fix possible crash when cancelling an HTTP/2 message.
  + Fix regresion where soup_server_message_get_socket() could
    return NULL.
  + Fix minor memory leak.
- Disable tests on 32-bit while waiting for
  https://gitlab.gnome.org/GNOME/libsoup/-/issues/309</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1667476800">- Update to version 3.2.2:
  + Various HTTP/2 Fixes:
  - Fix `content-sniffed` not being emitted for resources without
    content.
  - Fix leak of SoupServerConnection when stolen.
- Enable tests on 32-bit again, fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674388800">- Update to version 3.3.0:
  + Add `SoupMessage::got-body-data` signal to monitor progress of
    reads
  + Add `soup_session_send_and_splice()` and
    `soup_session_send_and_splice_async()` convenience APIs
  + Add `soup_message_set_force_http1()` and
    `soup_message_get_force_http1()` APIs
  + Change `soup_cookie_copy()` to not retain default ports
  + Ensure `SoupServerMessage` socket is available in websocket
    handler
  + Fix `soup_message_new()` not erroring when URI has an empty
    host
  + Fix thread-saftey issues in `SoupConnectionAuth`
  + Fix various connection leaks
  + Fix the possibility of sending invalid empty
    `Sec-WebSocket-Protocol` header
  + Fix IO errors not being handled on `CONNECT` messages
  + Numerous improvements to cookies:
  - Add support for cookie prefixes (`__Secure-` and `__Host-`)
  - Reject cookies with control characters in name or value
  - Reject `SameSite=None` cookies without `Secure`
  - Change `soup_cookie_parse()` to be more strict about what is
    considered whitespace
  - Change default SameSite value to `Lax`
  - Fix `soup_cookie_equal()` with `NULL` path</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676289600">- Update to version 3.3.1:
  + Fix regression in `SoupCookieJar` not handling valid Secure
    cookies.
  + Fix crash when skipping HTTP/1 response stream with chunked
    enconding.
  + Change Session to unqueue finished items earlier without an
    extra MainContext iteration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 3.4.0:
  + Fix possible crash in SoupContentSniffer.
  + Fix socket leak.
  + Add missing annotation to
    soup_header_g_string_append_param_quoted().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 3.4.1:
  + Fix HTTP/2 on platforms with unsigned char.
  + Change request cancellation to be handled earlier.
  + Add names to GSources and source tags to GTasks to aid
    debugging.
- Run meson_test macro for all arches.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682769600">- Update to version 3.4.2:
  + Revert changes to request cancellation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 3.4.3:
  + Fix incorrect UTF-8 encoding for params in headers
  + Numerous HTTP/2 fixes and improvements
  + Fix possible crashes in connection management
  + Fix small leak in SoupServer
  + Fix the possibility of empty HTTP/2 frames being sent</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 3.4.4:
  + Improve HTTP/2 performance when a lot of buffering happens
  + Support building libnghttp2 as a subproject</changelog>
  <changelog author="mgorse@suse.com" date="1733313600">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add 6adc0e3e.patch: websocket: Process the frame as soon as we
  read data (boo#1233287 CVE-2024-52532 glgo#GNOME/libsoup#391).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).
- Increase test timeout on s390x. The http2-body-stream test can be
  slow and sometimes times out in our builds.</changelog>
  <changelog author="mgorse@suse.com" date="1745928000">- Add more CVE fixes:
  + libsoup-CVE-2025-32050.patch (boo#1240752 CVE-2025-32050)
  + libsoup-CVE-2025-32051.patch (boo#1240754 CVE-2025-32051)
  + libsoup-CVE-2025-32052.patch (boo#1240756 CVE-2025-32052)
  + libsoup-CVE-2025-32053.patch (boo#1240757 CVE-2025-32053)
  + libsoup-CVE-2025-46420.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-2784.patch (boo#1240750 CVE-2025-2784)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32908.patch (boo#1241223 CVE-2025-32908)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-4476.patch (boo#1243422 CVE-2025-4476)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760184000">- Add libsoup-CVE-2025-11021.patch: Ignore invalid date when
  processing cookies to prevent out-of-bounds read (bsc#1250562,
  CVE-2025-11021, glgo#GNOME/libsoup!482).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760616000">- Update libsoup-CVE-2025-11021.patch: Add NULL check for
  soup_date_time_to_string() (bsc#1250562, CVE-2025-11021,
  glgo#GNOME/libsoup!483).</changelog>
  <changelog author="mgorse@suse.com" date="1763467200">- Add libsoup-CVE-2025-12105.patch: fix use after free caused by
  'finishing' queue item twice (bsc#1252555 CVE-2025-12105
  glgo#GNOME/libsoup!481).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767700800">- Add libsoup-CVE-2025-14523.patch: Reject duplicated Host in
  headers (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!490).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767873600">- Refresh libsoup-CVE-2025-14523.patch: Follow the update of
  upstream (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!491).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1768305600">- Add libsoup-CVE-2026-0716.patch: Fix out-of-bounds read for
  websocket (bsc#1256418, CVE-2026-0716, glgo#GNOME/libsoup!494).
- Add libsoup-CVE-2026-0719.patch: Fix overflow for password md4sum
  (bsc#1256399, CVE-2026-0719, glgo#GNOME/libsoup!493).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1770120000">- Add libsoup-CVE-2026-1536.patch: Always validate the headers
  value when coming from untrusted source
  (bsc#1257440, CVE-2026-1536, glgo#GNOME/libsoup/commit/5c1a2e9c).
- Add libsoup-CVE-2026-1761.patch: multipart: check length of bytes
  read soup_filter_input_stream_read_until()
  (bsc#1257598, CVE-2026-1761, glgo#GNOME/libsoup!496).</changelog>
</package>
<package pkgid="ce47b53e3cd5f4a73f733bae6188a3d29431918a6f324581d3378e353cfbc6c3" name="libsoup-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="150600.3.34.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1667476800">- Update to version 3.2.2:
  + Various HTTP/2 Fixes:
  - Fix `content-sniffed` not being emitted for resources without
    content.
  - Fix leak of SoupServerConnection when stolen.
- Enable tests on 32-bit again, fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674388800">- Update to version 3.3.0:
  + Add `SoupMessage::got-body-data` signal to monitor progress of
    reads
  + Add `soup_session_send_and_splice()` and
    `soup_session_send_and_splice_async()` convenience APIs
  + Add `soup_message_set_force_http1()` and
    `soup_message_get_force_http1()` APIs
  + Change `soup_cookie_copy()` to not retain default ports
  + Ensure `SoupServerMessage` socket is available in websocket
    handler
  + Fix `soup_message_new()` not erroring when URI has an empty
    host
  + Fix thread-saftey issues in `SoupConnectionAuth`
  + Fix various connection leaks
  + Fix the possibility of sending invalid empty
    `Sec-WebSocket-Protocol` header
  + Fix IO errors not being handled on `CONNECT` messages
  + Numerous improvements to cookies:
  - Add support for cookie prefixes (`__Secure-` and `__Host-`)
  - Reject cookies with control characters in name or value
  - Reject `SameSite=None` cookies without `Secure`
  - Change `soup_cookie_parse()` to be more strict about what is
    considered whitespace
  - Change default SameSite value to `Lax`
  - Fix `soup_cookie_equal()` with `NULL` path</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676289600">- Update to version 3.3.1:
  + Fix regression in `SoupCookieJar` not handling valid Secure
    cookies.
  + Fix crash when skipping HTTP/1 response stream with chunked
    enconding.
  + Change Session to unqueue finished items earlier without an
    extra MainContext iteration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 3.4.0:
  + Fix possible crash in SoupContentSniffer.
  + Fix socket leak.
  + Add missing annotation to
    soup_header_g_string_append_param_quoted().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 3.4.1:
  + Fix HTTP/2 on platforms with unsigned char.
  + Change request cancellation to be handled earlier.
  + Add names to GSources and source tags to GTasks to aid
    debugging.
- Run meson_test macro for all arches.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682769600">- Update to version 3.4.2:
  + Revert changes to request cancellation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 3.4.3:
  + Fix incorrect UTF-8 encoding for params in headers
  + Numerous HTTP/2 fixes and improvements
  + Fix possible crashes in connection management
  + Fix small leak in SoupServer
  + Fix the possibility of empty HTTP/2 frames being sent</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 3.4.4:
  + Improve HTTP/2 performance when a lot of buffering happens
  + Support building libnghttp2 as a subproject</changelog>
  <changelog author="mgorse@suse.com" date="1733313600">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add 6adc0e3e.patch: websocket: Process the frame as soon as we
  read data (boo#1233287 CVE-2024-52532 glgo#GNOME/libsoup#391).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).
- Increase test timeout on s390x. The http2-body-stream test can be
  slow and sometimes times out in our builds.</changelog>
  <changelog author="mgorse@suse.com" date="1745928000">- Add more CVE fixes:
  + libsoup-CVE-2025-32050.patch (boo#1240752 CVE-2025-32050)
  + libsoup-CVE-2025-32051.patch (boo#1240754 CVE-2025-32051)
  + libsoup-CVE-2025-32052.patch (boo#1240756 CVE-2025-32052)
  + libsoup-CVE-2025-32053.patch (boo#1240757 CVE-2025-32053)
  + libsoup-CVE-2025-46420.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-2784.patch (boo#1240750 CVE-2025-2784)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32908.patch (boo#1241223 CVE-2025-32908)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-4476.patch (boo#1243422 CVE-2025-4476)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760184000">- Add libsoup-CVE-2025-11021.patch: Ignore invalid date when
  processing cookies to prevent out-of-bounds read (bsc#1250562,
  CVE-2025-11021, glgo#GNOME/libsoup!482).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760616000">- Update libsoup-CVE-2025-11021.patch: Add NULL check for
  soup_date_time_to_string() (bsc#1250562, CVE-2025-11021,
  glgo#GNOME/libsoup!483).</changelog>
  <changelog author="mgorse@suse.com" date="1763467200">- Add libsoup-CVE-2025-12105.patch: fix use after free caused by
  'finishing' queue item twice (bsc#1252555 CVE-2025-12105
  glgo#GNOME/libsoup!481).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767700800">- Add libsoup-CVE-2025-14523.patch: Reject duplicated Host in
  headers (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!490).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767873600">- Refresh libsoup-CVE-2025-14523.patch: Follow the update of
  upstream (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!491).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1768305600">- Add libsoup-CVE-2026-0716.patch: Fix out-of-bounds read for
  websocket (bsc#1256418, CVE-2026-0716, glgo#GNOME/libsoup!494).
- Add libsoup-CVE-2026-0719.patch: Fix overflow for password md4sum
  (bsc#1256399, CVE-2026-0719, glgo#GNOME/libsoup!493).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1770120000">- Add libsoup-CVE-2026-1536.patch: Always validate the headers
  value when coming from untrusted source
  (bsc#1257440, CVE-2026-1536, glgo#GNOME/libsoup/commit/5c1a2e9c).
- Add libsoup-CVE-2026-1761.patch: multipart: check length of bytes
  read soup_filter_input_stream_read_until()
  (bsc#1257598, CVE-2026-1761, glgo#GNOME/libsoup!496).</changelog>
  <changelog author="mgorse@suse.com" date="1771502400">- Add more CVE fixes:
  + libsoup-CVE-2025-32049.patch (bsc#1240751 CVE-2025-32049
    glgo#GNOME/libsoup#390)
  + libsoup-CVE-2026-2443.patch (bsc#1258170 CVE-2026-2443
    glgo#GNOME/libsoup#487)
  + libsoup-CVE-2026-2369.patch (bsc#1258120 CVE-2026-2369
    glgo#GNOME/libsoup!508)
  + libsoup-CVE-2026-2708.patch (bsc#1258508 CVE-2026-2708
    glgo#GNOME/libsoup#500)</changelog>
</package>
<package pkgid="77f07a7e0e7390357edffa87cc958f8fbd75eeeb9a398bb117c6585a49698e3a" name="libsoup-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="150600.3.37.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1674388800">- Update to version 3.3.0:
  + Add `SoupMessage::got-body-data` signal to monitor progress of
    reads
  + Add `soup_session_send_and_splice()` and
    `soup_session_send_and_splice_async()` convenience APIs
  + Add `soup_message_set_force_http1()` and
    `soup_message_get_force_http1()` APIs
  + Change `soup_cookie_copy()` to not retain default ports
  + Ensure `SoupServerMessage` socket is available in websocket
    handler
  + Fix `soup_message_new()` not erroring when URI has an empty
    host
  + Fix thread-saftey issues in `SoupConnectionAuth`
  + Fix various connection leaks
  + Fix the possibility of sending invalid empty
    `Sec-WebSocket-Protocol` header
  + Fix IO errors not being handled on `CONNECT` messages
  + Numerous improvements to cookies:
  - Add support for cookie prefixes (`__Secure-` and `__Host-`)
  - Reject cookies with control characters in name or value
  - Reject `SameSite=None` cookies without `Secure`
  - Change `soup_cookie_parse()` to be more strict about what is
    considered whitespace
  - Change default SameSite value to `Lax`
  - Fix `soup_cookie_equal()` with `NULL` path</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676289600">- Update to version 3.3.1:
  + Fix regression in `SoupCookieJar` not handling valid Secure
    cookies.
  + Fix crash when skipping HTTP/1 response stream with chunked
    enconding.
  + Change Session to unqueue finished items earlier without an
    extra MainContext iteration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 3.4.0:
  + Fix possible crash in SoupContentSniffer.
  + Fix socket leak.
  + Add missing annotation to
    soup_header_g_string_append_param_quoted().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 3.4.1:
  + Fix HTTP/2 on platforms with unsigned char.
  + Change request cancellation to be handled earlier.
  + Add names to GSources and source tags to GTasks to aid
    debugging.
- Run meson_test macro for all arches.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682769600">- Update to version 3.4.2:
  + Revert changes to request cancellation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 3.4.3:
  + Fix incorrect UTF-8 encoding for params in headers
  + Numerous HTTP/2 fixes and improvements
  + Fix possible crashes in connection management
  + Fix small leak in SoupServer
  + Fix the possibility of empty HTTP/2 frames being sent</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 3.4.4:
  + Improve HTTP/2 performance when a lot of buffering happens
  + Support building libnghttp2 as a subproject</changelog>
  <changelog author="mgorse@suse.com" date="1733313600">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add 6adc0e3e.patch: websocket: Process the frame as soon as we
  read data (boo#1233287 CVE-2024-52532 glgo#GNOME/libsoup#391).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).
- Increase test timeout on s390x. The http2-body-stream test can be
  slow and sometimes times out in our builds.</changelog>
  <changelog author="mgorse@suse.com" date="1745928000">- Add more CVE fixes:
  + libsoup-CVE-2025-32050.patch (boo#1240752 CVE-2025-32050)
  + libsoup-CVE-2025-32051.patch (boo#1240754 CVE-2025-32051)
  + libsoup-CVE-2025-32052.patch (boo#1240756 CVE-2025-32052)
  + libsoup-CVE-2025-32053.patch (boo#1240757 CVE-2025-32053)
  + libsoup-CVE-2025-46420.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-2784.patch (boo#1240750 CVE-2025-2784)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32908.patch (boo#1241223 CVE-2025-32908)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-4476.patch (boo#1243422 CVE-2025-4476)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760184000">- Add libsoup-CVE-2025-11021.patch: Ignore invalid date when
  processing cookies to prevent out-of-bounds read (bsc#1250562,
  CVE-2025-11021, glgo#GNOME/libsoup!482).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760616000">- Update libsoup-CVE-2025-11021.patch: Add NULL check for
  soup_date_time_to_string() (bsc#1250562, CVE-2025-11021,
  glgo#GNOME/libsoup!483).</changelog>
  <changelog author="mgorse@suse.com" date="1763467200">- Add libsoup-CVE-2025-12105.patch: fix use after free caused by
  'finishing' queue item twice (bsc#1252555 CVE-2025-12105
  glgo#GNOME/libsoup!481).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767700800">- Add libsoup-CVE-2025-14523.patch: Reject duplicated Host in
  headers (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!490).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767873600">- Refresh libsoup-CVE-2025-14523.patch: Follow the update of
  upstream (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!491).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1768305600">- Add libsoup-CVE-2026-0716.patch: Fix out-of-bounds read for
  websocket (bsc#1256418, CVE-2026-0716, glgo#GNOME/libsoup!494).
- Add libsoup-CVE-2026-0719.patch: Fix overflow for password md4sum
  (bsc#1256399, CVE-2026-0719, glgo#GNOME/libsoup!493).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1770120000">- Add libsoup-CVE-2026-1536.patch: Always validate the headers
  value when coming from untrusted source
  (bsc#1257440, CVE-2026-1536, glgo#GNOME/libsoup/commit/5c1a2e9c).
- Add libsoup-CVE-2026-1761.patch: multipart: check length of bytes
  read soup_filter_input_stream_read_until()
  (bsc#1257598, CVE-2026-1761, glgo#GNOME/libsoup!496).</changelog>
  <changelog author="mgorse@suse.com" date="1771502400">- Add more CVE fixes:
  + libsoup-CVE-2025-32049.patch (bsc#1240751 CVE-2025-32049
    glgo#GNOME/libsoup#390)
  + libsoup-CVE-2026-2443.patch (bsc#1258170 CVE-2026-2443
    glgo#GNOME/libsoup#487)
  + libsoup-CVE-2026-2369.patch (bsc#1258120 CVE-2026-2369
    glgo#GNOME/libsoup!508)
  + libsoup-CVE-2026-2708.patch (bsc#1258508 CVE-2026-2708
    glgo#GNOME/libsoup#500)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1772020800">- Add libsoup-CVE-2026-1760.patch: server: close the connection
  after responsing a request containing...
  (bsc#1257597, CVE-2026-1760, glgo#GNOME/libsoup#475).
- Add libsoup-CVE-2026-1467.patch: uri-utils: do host validation
  when checking if a GUri is valid
  (bsc#1257398, CVE-2026-1467, glgo#GNOME/libsoup#488).
- Add libsoup-CVE-2026-1539.patch: Also remove Proxy-Authorization
  header on cross origin redirect
  (bsc#1257441, CVE-2026-1539, glgo#GNOME/libsoup#489).</changelog>
</package>
<package pkgid="c7c6b455dac9f9acb787e347c29e434766b803c1471c0c8424a13f2ca076b8f5" name="libsoup-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="150600.3.42.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 3.4.0:
  + Fix possible crash in SoupContentSniffer.
  + Fix socket leak.
  + Add missing annotation to
    soup_header_g_string_append_param_quoted().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 3.4.1:
  + Fix HTTP/2 on platforms with unsigned char.
  + Change request cancellation to be handled earlier.
  + Add names to GSources and source tags to GTasks to aid
    debugging.
- Run meson_test macro for all arches.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682769600">- Update to version 3.4.2:
  + Revert changes to request cancellation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 3.4.3:
  + Fix incorrect UTF-8 encoding for params in headers
  + Numerous HTTP/2 fixes and improvements
  + Fix possible crashes in connection management
  + Fix small leak in SoupServer
  + Fix the possibility of empty HTTP/2 frames being sent</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 3.4.4:
  + Improve HTTP/2 performance when a lot of buffering happens
  + Support building libnghttp2 as a subproject</changelog>
  <changelog author="mgorse@suse.com" date="1733313600">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add 6adc0e3e.patch: websocket: Process the frame as soon as we
  read data (boo#1233287 CVE-2024-52532 glgo#GNOME/libsoup#391).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).
- Increase test timeout on s390x. The http2-body-stream test can be
  slow and sometimes times out in our builds.</changelog>
  <changelog author="mgorse@suse.com" date="1745928000">- Add more CVE fixes:
  + libsoup-CVE-2025-32050.patch (boo#1240752 CVE-2025-32050)
  + libsoup-CVE-2025-32051.patch (boo#1240754 CVE-2025-32051)
  + libsoup-CVE-2025-32052.patch (boo#1240756 CVE-2025-32052)
  + libsoup-CVE-2025-32053.patch (boo#1240757 CVE-2025-32053)
  + libsoup-CVE-2025-46420.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-2784.patch (boo#1240750 CVE-2025-2784)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32908.patch (boo#1241223 CVE-2025-32908)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-4476.patch (boo#1243422 CVE-2025-4476)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760184000">- Add libsoup-CVE-2025-11021.patch: Ignore invalid date when
  processing cookies to prevent out-of-bounds read (bsc#1250562,
  CVE-2025-11021, glgo#GNOME/libsoup!482).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760616000">- Update libsoup-CVE-2025-11021.patch: Add NULL check for
  soup_date_time_to_string() (bsc#1250562, CVE-2025-11021,
  glgo#GNOME/libsoup!483).</changelog>
  <changelog author="mgorse@suse.com" date="1763467200">- Add libsoup-CVE-2025-12105.patch: fix use after free caused by
  'finishing' queue item twice (bsc#1252555 CVE-2025-12105
  glgo#GNOME/libsoup!481).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767700800">- Add libsoup-CVE-2025-14523.patch: Reject duplicated Host in
  headers (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!490).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767873600">- Refresh libsoup-CVE-2025-14523.patch: Follow the update of
  upstream (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!491).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1768305600">- Add libsoup-CVE-2026-0716.patch: Fix out-of-bounds read for
  websocket (bsc#1256418, CVE-2026-0716, glgo#GNOME/libsoup!494).
- Add libsoup-CVE-2026-0719.patch: Fix overflow for password md4sum
  (bsc#1256399, CVE-2026-0719, glgo#GNOME/libsoup!493).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1770120000">- Add libsoup-CVE-2026-1536.patch: Always validate the headers
  value when coming from untrusted source
  (bsc#1257440, CVE-2026-1536, glgo#GNOME/libsoup/commit/5c1a2e9c).
- Add libsoup-CVE-2026-1761.patch: multipart: check length of bytes
  read soup_filter_input_stream_read_until()
  (bsc#1257598, CVE-2026-1761, glgo#GNOME/libsoup!496).</changelog>
  <changelog author="mgorse@suse.com" date="1771502400">- Add more CVE fixes:
  + libsoup-CVE-2025-32049.patch (bsc#1240751 CVE-2025-32049
    glgo#GNOME/libsoup#390)
  + libsoup-CVE-2026-2443.patch (bsc#1258170 CVE-2026-2443
    glgo#GNOME/libsoup#487)
  + libsoup-CVE-2026-2369.patch (bsc#1258120 CVE-2026-2369
    glgo#GNOME/libsoup!508)
  + libsoup-CVE-2026-2708.patch (bsc#1258508 CVE-2026-2708
    glgo#GNOME/libsoup#500)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1772020800">- Add libsoup-CVE-2026-1760.patch: server: close the connection
  after responsing a request containing...
  (bsc#1257597, CVE-2026-1760, glgo#GNOME/libsoup#475).
- Add libsoup-CVE-2026-1467.patch: uri-utils: do host validation
  when checking if a GUri is valid
  (bsc#1257398, CVE-2026-1467, glgo#GNOME/libsoup#488).
- Add libsoup-CVE-2026-1539.patch: Also remove Proxy-Authorization
  header on cross origin redirect
  (bsc#1257441, CVE-2026-1539, glgo#GNOME/libsoup#489).</changelog>
  <changelog author="mgorse@suse.com" date="1772712000">- Update libsoup-CVE-2026-0716.patch to incorporate
  glgo#GNOME/libsoup!518. The original fix was incomplete
  (bsc#1256418 CVE-2026-0716 glgo#GNOME/libsoup#476).</changelog>
  <changelog author="mgorse@suse.com" date="1773230400">- Refresh some patches to match the output from gitlab.gnome.org.</changelog>
</package>
<package pkgid="9e4ef6a773ea2a0cc95f6563e961733d44b1621ac1e1d3bed2092fe57a336a50" name="libsoup-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="150600.3.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1641556800">- Update to version 3.0.4:
  + Fix HTTP/2 not properly handling socket timeouts.
  + Improvements to test reliablity.
  + Fix cross-compiling to Windows.
  + Fix tests with development glib-networking.
  + Expose soup_uri_copy() to Vala.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 3.0.5:
  + Misc HTTP/2 fixes.
  + Fix missing files for installed-tests.
  + Fix SoupServer not properly handling invalid percent encoded
    paths.
  + Fix other areas not properly handling invalid percent encoded
    paths.
  + Fix SoupLogger:max-body-size of 0 meaning log nothing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648814400">- Update to version 3.0.6:
  + Misc HTTP/2 fixes.
  + Add PUT/POST support to examples/get.
  + Add `--user-agent` option to examples/get.
  + Misc meson improvements.
  + Fix build with Visual Studio.</changelog>
  <changelog author="dimstar@opensuse.org" date="1657108800">- Update to version 3.0.7:
  + Fix leak in SoupAuthNTLM.
  + Fix constructing SoupAuthNTLM objects.
  + Disable mutual negotiation in SoupAuthNegotiate.
  + http2:
  - Do not advertise the `h2` protocool for proxy connections.
  - Remove left-over headers when HTTP/1 redirects to HTTP/2.
  - Handle HTTP_1_1_REQUIRED error.
  - Read request bodies synchronously for sync requests.
  - Properly handle server sending shut down GOAWAY.
  + tests:
  - Remove dependency on Apache's PHP module.
  - Depend upon Apache's http2 module.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662120000">- Update to version 3.0.8:
  + Fix `http` proxy authentication with default proxy resolver.
  + Numerous improvments to HTTP/2 reliability.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662206400">- Update to version 3.1.1:
  + Reintroduce some thread-safety to SoupSession (see
    https://libsoup.org/libsoup-3.0/client-thread-safety.html)
  + Add SoupServerMessage:tls-peer-certificate and
    SoupServerMessage:tls-peer-certificate-errors
  + Port docs to gi-docgen
  + Update documentation.
- Replace pkgconfig(gtk-doc) with pkgconfig(gi-docgen)
  BuildRequires (and update options passed to meson) following
  upstreams port.
- Add 299.patch: multithread-test: show error information in case
  of request failure. multithread-test: skip proxy tests if apache
  is not available.
- Use ldconfig_scriptlets for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1662292800">- Update to version 3.1.3:
  + Fix compile error when `SOUP_VERSION_MAX_ALLOWED` is defined.
- Changes from version 3.1.2:
  + Replace HTTP/2 tests using Quart with internal HTTP/2 server
    tests.
  + Improve version macros including adding ability to define
    `SOUP_DISABLE_DEPRECATION_WARNINGS`.
- Drop -D http2_tests=disabled meson paramter: no longer supported.
- Drop 299.patch: merged upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662379200">- Update to version 3.1.4:
  + Numerous improvements to HTTP/2 reliablity.
  + Fix `http` proxy authentication with default proxy resolver.
  + Fix undefined ``ssize_t`` with MSVC.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1663243200">- Update to version 3.2.0:
  + No changes, stable bump only.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 3.2.1:
  + When built against nghttp2 1.50.0+ be relaxed about header
    whitespace.
  + Fix possible crash when cancelling an HTTP/2 message.
  + Fix regresion where soup_server_message_get_socket() could
    return NULL.
  + Fix minor memory leak.
- Disable tests on 32-bit while waiting for
  https://gitlab.gnome.org/GNOME/libsoup/-/issues/309</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1667476800">- Update to version 3.2.2:
  + Various HTTP/2 Fixes:
  - Fix `content-sniffed` not being emitted for resources without
    content.
  - Fix leak of SoupServerConnection when stolen.
- Enable tests on 32-bit again, fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674388800">- Update to version 3.3.0:
  + Add `SoupMessage::got-body-data` signal to monitor progress of
    reads
  + Add `soup_session_send_and_splice()` and
    `soup_session_send_and_splice_async()` convenience APIs
  + Add `soup_message_set_force_http1()` and
    `soup_message_get_force_http1()` APIs
  + Change `soup_cookie_copy()` to not retain default ports
  + Ensure `SoupServerMessage` socket is available in websocket
    handler
  + Fix `soup_message_new()` not erroring when URI has an empty
    host
  + Fix thread-saftey issues in `SoupConnectionAuth`
  + Fix various connection leaks
  + Fix the possibility of sending invalid empty
    `Sec-WebSocket-Protocol` header
  + Fix IO errors not being handled on `CONNECT` messages
  + Numerous improvements to cookies:
  - Add support for cookie prefixes (`__Secure-` and `__Host-`)
  - Reject cookies with control characters in name or value
  - Reject `SameSite=None` cookies without `Secure`
  - Change `soup_cookie_parse()` to be more strict about what is
    considered whitespace
  - Change default SameSite value to `Lax`
  - Fix `soup_cookie_equal()` with `NULL` path</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676289600">- Update to version 3.3.1:
  + Fix regression in `SoupCookieJar` not handling valid Secure
    cookies.
  + Fix crash when skipping HTTP/1 response stream with chunked
    enconding.
  + Change Session to unqueue finished items earlier without an
    extra MainContext iteration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 3.4.0:
  + Fix possible crash in SoupContentSniffer.
  + Fix socket leak.
  + Add missing annotation to
    soup_header_g_string_append_param_quoted().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 3.4.1:
  + Fix HTTP/2 on platforms with unsigned char.
  + Change request cancellation to be handled earlier.
  + Add names to GSources and source tags to GTasks to aid
    debugging.
- Run meson_test macro for all arches.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682769600">- Update to version 3.4.2:
  + Revert changes to request cancellation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 3.4.3:
  + Fix incorrect UTF-8 encoding for params in headers
  + Numerous HTTP/2 fixes and improvements
  + Fix possible crashes in connection management
  + Fix small leak in SoupServer
  + Fix the possibility of empty HTTP/2 frames being sent</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 3.4.4:
  + Improve HTTP/2 performance when a lot of buffering happens
  + Support building libnghttp2 as a subproject</changelog>
  <changelog author="mgorse@suse.com" date="1733313600">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add 6adc0e3e.patch: websocket: Process the frame as soon as we
  read data (boo#1233287 CVE-2024-52532 glgo#GNOME/libsoup#391).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).
- Increase test timeout on s390x. The http2-body-stream test can be
  slow and sometimes times out in our builds.</changelog>
  <changelog author="mgorse@suse.com" date="1745928000">- Add more CVE fixes:
  + libsoup-CVE-2025-32050.patch (boo#1240752 CVE-2025-32050)
  + libsoup-CVE-2025-32051.patch (boo#1240754 CVE-2025-32051)
  + libsoup-CVE-2025-32052.patch (boo#1240756 CVE-2025-32052)
  + libsoup-CVE-2025-32053.patch (boo#1240757 CVE-2025-32053)
  + libsoup-CVE-2025-46420.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-2784.patch (boo#1240750 CVE-2025-2784)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32908.patch (boo#1241223 CVE-2025-32908)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)</changelog>
</package>
<package pkgid="544acbc01e4237e17c5a7206d3568b5c413e37ef647e5be4af44d8a7d19256ab" name="libsoup-lang" arch="noarch">
  <version epoch="0" ver="3.4.4" rel="150600.3.10.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 3.0.5:
  + Misc HTTP/2 fixes.
  + Fix missing files for installed-tests.
  + Fix SoupServer not properly handling invalid percent encoded
    paths.
  + Fix other areas not properly handling invalid percent encoded
    paths.
  + Fix SoupLogger:max-body-size of 0 meaning log nothing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648814400">- Update to version 3.0.6:
  + Misc HTTP/2 fixes.
  + Add PUT/POST support to examples/get.
  + Add `--user-agent` option to examples/get.
  + Misc meson improvements.
  + Fix build with Visual Studio.</changelog>
  <changelog author="dimstar@opensuse.org" date="1657108800">- Update to version 3.0.7:
  + Fix leak in SoupAuthNTLM.
  + Fix constructing SoupAuthNTLM objects.
  + Disable mutual negotiation in SoupAuthNegotiate.
  + http2:
  - Do not advertise the `h2` protocool for proxy connections.
  - Remove left-over headers when HTTP/1 redirects to HTTP/2.
  - Handle HTTP_1_1_REQUIRED error.
  - Read request bodies synchronously for sync requests.
  - Properly handle server sending shut down GOAWAY.
  + tests:
  - Remove dependency on Apache's PHP module.
  - Depend upon Apache's http2 module.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662120000">- Update to version 3.0.8:
  + Fix `http` proxy authentication with default proxy resolver.
  + Numerous improvments to HTTP/2 reliability.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662206400">- Update to version 3.1.1:
  + Reintroduce some thread-safety to SoupSession (see
    https://libsoup.org/libsoup-3.0/client-thread-safety.html)
  + Add SoupServerMessage:tls-peer-certificate and
    SoupServerMessage:tls-peer-certificate-errors
  + Port docs to gi-docgen
  + Update documentation.
- Replace pkgconfig(gtk-doc) with pkgconfig(gi-docgen)
  BuildRequires (and update options passed to meson) following
  upstreams port.
- Add 299.patch: multithread-test: show error information in case
  of request failure. multithread-test: skip proxy tests if apache
  is not available.
- Use ldconfig_scriptlets for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1662292800">- Update to version 3.1.3:
  + Fix compile error when `SOUP_VERSION_MAX_ALLOWED` is defined.
- Changes from version 3.1.2:
  + Replace HTTP/2 tests using Quart with internal HTTP/2 server
    tests.
  + Improve version macros including adding ability to define
    `SOUP_DISABLE_DEPRECATION_WARNINGS`.
- Drop -D http2_tests=disabled meson paramter: no longer supported.
- Drop 299.patch: merged upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662379200">- Update to version 3.1.4:
  + Numerous improvements to HTTP/2 reliablity.
  + Fix `http` proxy authentication with default proxy resolver.
  + Fix undefined ``ssize_t`` with MSVC.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1663243200">- Update to version 3.2.0:
  + No changes, stable bump only.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 3.2.1:
  + When built against nghttp2 1.50.0+ be relaxed about header
    whitespace.
  + Fix possible crash when cancelling an HTTP/2 message.
  + Fix regresion where soup_server_message_get_socket() could
    return NULL.
  + Fix minor memory leak.
- Disable tests on 32-bit while waiting for
  https://gitlab.gnome.org/GNOME/libsoup/-/issues/309</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1667476800">- Update to version 3.2.2:
  + Various HTTP/2 Fixes:
  - Fix `content-sniffed` not being emitted for resources without
    content.
  - Fix leak of SoupServerConnection when stolen.
- Enable tests on 32-bit again, fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674388800">- Update to version 3.3.0:
  + Add `SoupMessage::got-body-data` signal to monitor progress of
    reads
  + Add `soup_session_send_and_splice()` and
    `soup_session_send_and_splice_async()` convenience APIs
  + Add `soup_message_set_force_http1()` and
    `soup_message_get_force_http1()` APIs
  + Change `soup_cookie_copy()` to not retain default ports
  + Ensure `SoupServerMessage` socket is available in websocket
    handler
  + Fix `soup_message_new()` not erroring when URI has an empty
    host
  + Fix thread-saftey issues in `SoupConnectionAuth`
  + Fix various connection leaks
  + Fix the possibility of sending invalid empty
    `Sec-WebSocket-Protocol` header
  + Fix IO errors not being handled on `CONNECT` messages
  + Numerous improvements to cookies:
  - Add support for cookie prefixes (`__Secure-` and `__Host-`)
  - Reject cookies with control characters in name or value
  - Reject `SameSite=None` cookies without `Secure`
  - Change `soup_cookie_parse()` to be more strict about what is
    considered whitespace
  - Change default SameSite value to `Lax`
  - Fix `soup_cookie_equal()` with `NULL` path</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676289600">- Update to version 3.3.1:
  + Fix regression in `SoupCookieJar` not handling valid Secure
    cookies.
  + Fix crash when skipping HTTP/1 response stream with chunked
    enconding.
  + Change Session to unqueue finished items earlier without an
    extra MainContext iteration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 3.4.0:
  + Fix possible crash in SoupContentSniffer.
  + Fix socket leak.
  + Add missing annotation to
    soup_header_g_string_append_param_quoted().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 3.4.1:
  + Fix HTTP/2 on platforms with unsigned char.
  + Change request cancellation to be handled earlier.
  + Add names to GSources and source tags to GTasks to aid
    debugging.
- Run meson_test macro for all arches.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682769600">- Update to version 3.4.2:
  + Revert changes to request cancellation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 3.4.3:
  + Fix incorrect UTF-8 encoding for params in headers
  + Numerous HTTP/2 fixes and improvements
  + Fix possible crashes in connection management
  + Fix small leak in SoupServer
  + Fix the possibility of empty HTTP/2 frames being sent</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 3.4.4:
  + Improve HTTP/2 performance when a lot of buffering happens
  + Support building libnghttp2 as a subproject</changelog>
  <changelog author="mgorse@suse.com" date="1733313600">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add 6adc0e3e.patch: websocket: Process the frame as soon as we
  read data (boo#1233287 CVE-2024-52532 glgo#GNOME/libsoup#391).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).
- Increase test timeout on s390x. The http2-body-stream test can be
  slow and sometimes times out in our builds.</changelog>
  <changelog author="mgorse@suse.com" date="1745928000">- Add more CVE fixes:
  + libsoup-CVE-2025-32050.patch (boo#1240752 CVE-2025-32050)
  + libsoup-CVE-2025-32051.patch (boo#1240754 CVE-2025-32051)
  + libsoup-CVE-2025-32052.patch (boo#1240756 CVE-2025-32052)
  + libsoup-CVE-2025-32053.patch (boo#1240757 CVE-2025-32053)
  + libsoup-CVE-2025-46420.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-2784.patch (boo#1240750 CVE-2025-2784)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32908.patch (boo#1241223 CVE-2025-32908)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-4476.patch (boo#1243422 CVE-2025-4476)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
</package>
<package pkgid="725005499371379acfb429fff67bf4f1644dd1e4fb583f404eecd9687c2835d1" name="libsoup-lang" arch="noarch">
  <version epoch="0" ver="3.4.4" rel="150600.3.13.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1648814400">- Update to version 3.0.6:
  + Misc HTTP/2 fixes.
  + Add PUT/POST support to examples/get.
  + Add `--user-agent` option to examples/get.
  + Misc meson improvements.
  + Fix build with Visual Studio.</changelog>
  <changelog author="dimstar@opensuse.org" date="1657108800">- Update to version 3.0.7:
  + Fix leak in SoupAuthNTLM.
  + Fix constructing SoupAuthNTLM objects.
  + Disable mutual negotiation in SoupAuthNegotiate.
  + http2:
  - Do not advertise the `h2` protocool for proxy connections.
  - Remove left-over headers when HTTP/1 redirects to HTTP/2.
  - Handle HTTP_1_1_REQUIRED error.
  - Read request bodies synchronously for sync requests.
  - Properly handle server sending shut down GOAWAY.
  + tests:
  - Remove dependency on Apache's PHP module.
  - Depend upon Apache's http2 module.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662120000">- Update to version 3.0.8:
  + Fix `http` proxy authentication with default proxy resolver.
  + Numerous improvments to HTTP/2 reliability.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662206400">- Update to version 3.1.1:
  + Reintroduce some thread-safety to SoupSession (see
    https://libsoup.org/libsoup-3.0/client-thread-safety.html)
  + Add SoupServerMessage:tls-peer-certificate and
    SoupServerMessage:tls-peer-certificate-errors
  + Port docs to gi-docgen
  + Update documentation.
- Replace pkgconfig(gtk-doc) with pkgconfig(gi-docgen)
  BuildRequires (and update options passed to meson) following
  upstreams port.
- Add 299.patch: multithread-test: show error information in case
  of request failure. multithread-test: skip proxy tests if apache
  is not available.
- Use ldconfig_scriptlets for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1662292800">- Update to version 3.1.3:
  + Fix compile error when `SOUP_VERSION_MAX_ALLOWED` is defined.
- Changes from version 3.1.2:
  + Replace HTTP/2 tests using Quart with internal HTTP/2 server
    tests.
  + Improve version macros including adding ability to define
    `SOUP_DISABLE_DEPRECATION_WARNINGS`.
- Drop -D http2_tests=disabled meson paramter: no longer supported.
- Drop 299.patch: merged upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662379200">- Update to version 3.1.4:
  + Numerous improvements to HTTP/2 reliablity.
  + Fix `http` proxy authentication with default proxy resolver.
  + Fix undefined ``ssize_t`` with MSVC.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1663243200">- Update to version 3.2.0:
  + No changes, stable bump only.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 3.2.1:
  + When built against nghttp2 1.50.0+ be relaxed about header
    whitespace.
  + Fix possible crash when cancelling an HTTP/2 message.
  + Fix regresion where soup_server_message_get_socket() could
    return NULL.
  + Fix minor memory leak.
- Disable tests on 32-bit while waiting for
  https://gitlab.gnome.org/GNOME/libsoup/-/issues/309</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1667476800">- Update to version 3.2.2:
  + Various HTTP/2 Fixes:
  - Fix `content-sniffed` not being emitted for resources without
    content.
  - Fix leak of SoupServerConnection when stolen.
- Enable tests on 32-bit again, fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674388800">- Update to version 3.3.0:
  + Add `SoupMessage::got-body-data` signal to monitor progress of
    reads
  + Add `soup_session_send_and_splice()` and
    `soup_session_send_and_splice_async()` convenience APIs
  + Add `soup_message_set_force_http1()` and
    `soup_message_get_force_http1()` APIs
  + Change `soup_cookie_copy()` to not retain default ports
  + Ensure `SoupServerMessage` socket is available in websocket
    handler
  + Fix `soup_message_new()` not erroring when URI has an empty
    host
  + Fix thread-saftey issues in `SoupConnectionAuth`
  + Fix various connection leaks
  + Fix the possibility of sending invalid empty
    `Sec-WebSocket-Protocol` header
  + Fix IO errors not being handled on `CONNECT` messages
  + Numerous improvements to cookies:
  - Add support for cookie prefixes (`__Secure-` and `__Host-`)
  - Reject cookies with control characters in name or value
  - Reject `SameSite=None` cookies without `Secure`
  - Change `soup_cookie_parse()` to be more strict about what is
    considered whitespace
  - Change default SameSite value to `Lax`
  - Fix `soup_cookie_equal()` with `NULL` path</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676289600">- Update to version 3.3.1:
  + Fix regression in `SoupCookieJar` not handling valid Secure
    cookies.
  + Fix crash when skipping HTTP/1 response stream with chunked
    enconding.
  + Change Session to unqueue finished items earlier without an
    extra MainContext iteration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 3.4.0:
  + Fix possible crash in SoupContentSniffer.
  + Fix socket leak.
  + Add missing annotation to
    soup_header_g_string_append_param_quoted().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 3.4.1:
  + Fix HTTP/2 on platforms with unsigned char.
  + Change request cancellation to be handled earlier.
  + Add names to GSources and source tags to GTasks to aid
    debugging.
- Run meson_test macro for all arches.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682769600">- Update to version 3.4.2:
  + Revert changes to request cancellation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 3.4.3:
  + Fix incorrect UTF-8 encoding for params in headers
  + Numerous HTTP/2 fixes and improvements
  + Fix possible crashes in connection management
  + Fix small leak in SoupServer
  + Fix the possibility of empty HTTP/2 frames being sent</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 3.4.4:
  + Improve HTTP/2 performance when a lot of buffering happens
  + Support building libnghttp2 as a subproject</changelog>
  <changelog author="mgorse@suse.com" date="1733313600">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add 6adc0e3e.patch: websocket: Process the frame as soon as we
  read data (boo#1233287 CVE-2024-52532 glgo#GNOME/libsoup#391).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).
- Increase test timeout on s390x. The http2-body-stream test can be
  slow and sometimes times out in our builds.</changelog>
  <changelog author="mgorse@suse.com" date="1745928000">- Add more CVE fixes:
  + libsoup-CVE-2025-32050.patch (boo#1240752 CVE-2025-32050)
  + libsoup-CVE-2025-32051.patch (boo#1240754 CVE-2025-32051)
  + libsoup-CVE-2025-32052.patch (boo#1240756 CVE-2025-32052)
  + libsoup-CVE-2025-32053.patch (boo#1240757 CVE-2025-32053)
  + libsoup-CVE-2025-46420.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-2784.patch (boo#1240750 CVE-2025-2784)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32908.patch (boo#1241223 CVE-2025-32908)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-4476.patch (boo#1243422 CVE-2025-4476)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
</package>
<package pkgid="02f53b97830ec744f82221e22fc3e3d345b8dab875b42d8d2029be471d5a5481" name="libsoup-lang" arch="noarch">
  <version epoch="0" ver="3.4.4" rel="150600.3.18.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1662120000">- Update to version 3.0.8:
  + Fix `http` proxy authentication with default proxy resolver.
  + Numerous improvments to HTTP/2 reliability.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662206400">- Update to version 3.1.1:
  + Reintroduce some thread-safety to SoupSession (see
    https://libsoup.org/libsoup-3.0/client-thread-safety.html)
  + Add SoupServerMessage:tls-peer-certificate and
    SoupServerMessage:tls-peer-certificate-errors
  + Port docs to gi-docgen
  + Update documentation.
- Replace pkgconfig(gtk-doc) with pkgconfig(gi-docgen)
  BuildRequires (and update options passed to meson) following
  upstreams port.
- Add 299.patch: multithread-test: show error information in case
  of request failure. multithread-test: skip proxy tests if apache
  is not available.
- Use ldconfig_scriptlets for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1662292800">- Update to version 3.1.3:
  + Fix compile error when `SOUP_VERSION_MAX_ALLOWED` is defined.
- Changes from version 3.1.2:
  + Replace HTTP/2 tests using Quart with internal HTTP/2 server
    tests.
  + Improve version macros including adding ability to define
    `SOUP_DISABLE_DEPRECATION_WARNINGS`.
- Drop -D http2_tests=disabled meson paramter: no longer supported.
- Drop 299.patch: merged upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662379200">- Update to version 3.1.4:
  + Numerous improvements to HTTP/2 reliablity.
  + Fix `http` proxy authentication with default proxy resolver.
  + Fix undefined ``ssize_t`` with MSVC.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1663243200">- Update to version 3.2.0:
  + No changes, stable bump only.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 3.2.1:
  + When built against nghttp2 1.50.0+ be relaxed about header
    whitespace.
  + Fix possible crash when cancelling an HTTP/2 message.
  + Fix regresion where soup_server_message_get_socket() could
    return NULL.
  + Fix minor memory leak.
- Disable tests on 32-bit while waiting for
  https://gitlab.gnome.org/GNOME/libsoup/-/issues/309</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1667476800">- Update to version 3.2.2:
  + Various HTTP/2 Fixes:
  - Fix `content-sniffed` not being emitted for resources without
    content.
  - Fix leak of SoupServerConnection when stolen.
- Enable tests on 32-bit again, fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674388800">- Update to version 3.3.0:
  + Add `SoupMessage::got-body-data` signal to monitor progress of
    reads
  + Add `soup_session_send_and_splice()` and
    `soup_session_send_and_splice_async()` convenience APIs
  + Add `soup_message_set_force_http1()` and
    `soup_message_get_force_http1()` APIs
  + Change `soup_cookie_copy()` to not retain default ports
  + Ensure `SoupServerMessage` socket is available in websocket
    handler
  + Fix `soup_message_new()` not erroring when URI has an empty
    host
  + Fix thread-saftey issues in `SoupConnectionAuth`
  + Fix various connection leaks
  + Fix the possibility of sending invalid empty
    `Sec-WebSocket-Protocol` header
  + Fix IO errors not being handled on `CONNECT` messages
  + Numerous improvements to cookies:
  - Add support for cookie prefixes (`__Secure-` and `__Host-`)
  - Reject cookies with control characters in name or value
  - Reject `SameSite=None` cookies without `Secure`
  - Change `soup_cookie_parse()` to be more strict about what is
    considered whitespace
  - Change default SameSite value to `Lax`
  - Fix `soup_cookie_equal()` with `NULL` path</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676289600">- Update to version 3.3.1:
  + Fix regression in `SoupCookieJar` not handling valid Secure
    cookies.
  + Fix crash when skipping HTTP/1 response stream with chunked
    enconding.
  + Change Session to unqueue finished items earlier without an
    extra MainContext iteration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 3.4.0:
  + Fix possible crash in SoupContentSniffer.
  + Fix socket leak.
  + Add missing annotation to
    soup_header_g_string_append_param_quoted().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 3.4.1:
  + Fix HTTP/2 on platforms with unsigned char.
  + Change request cancellation to be handled earlier.
  + Add names to GSources and source tags to GTasks to aid
    debugging.
- Run meson_test macro for all arches.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682769600">- Update to version 3.4.2:
  + Revert changes to request cancellation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 3.4.3:
  + Fix incorrect UTF-8 encoding for params in headers
  + Numerous HTTP/2 fixes and improvements
  + Fix possible crashes in connection management
  + Fix small leak in SoupServer
  + Fix the possibility of empty HTTP/2 frames being sent</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 3.4.4:
  + Improve HTTP/2 performance when a lot of buffering happens
  + Support building libnghttp2 as a subproject</changelog>
  <changelog author="mgorse@suse.com" date="1733313600">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add 6adc0e3e.patch: websocket: Process the frame as soon as we
  read data (boo#1233287 CVE-2024-52532 glgo#GNOME/libsoup#391).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).
- Increase test timeout on s390x. The http2-body-stream test can be
  slow and sometimes times out in our builds.</changelog>
  <changelog author="mgorse@suse.com" date="1745928000">- Add more CVE fixes:
  + libsoup-CVE-2025-32050.patch (boo#1240752 CVE-2025-32050)
  + libsoup-CVE-2025-32051.patch (boo#1240754 CVE-2025-32051)
  + libsoup-CVE-2025-32052.patch (boo#1240756 CVE-2025-32052)
  + libsoup-CVE-2025-32053.patch (boo#1240757 CVE-2025-32053)
  + libsoup-CVE-2025-46420.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-2784.patch (boo#1240750 CVE-2025-2784)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32908.patch (boo#1241223 CVE-2025-32908)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-4476.patch (boo#1243422 CVE-2025-4476)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760184000">- Add libsoup-CVE-2025-11021.patch: Ignore invalid date when
  processing cookies to prevent out-of-bounds read (bsc#1250562,
  CVE-2025-11021, glgo#GNOME/libsoup!482).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760616000">- Update libsoup-CVE-2025-11021.patch: Add NULL check for
  soup_date_time_to_string() (bsc#1250562, CVE-2025-11021,
  glgo#GNOME/libsoup!483).</changelog>
</package>
<package pkgid="95622a8384b3518e9c994bb707af73c43dfca0606c2dae625dd55a6fd9ad1e6a" name="libsoup-lang" arch="noarch">
  <version epoch="0" ver="3.4.4" rel="150600.3.21.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1662206400">- Update to version 3.1.1:
  + Reintroduce some thread-safety to SoupSession (see
    https://libsoup.org/libsoup-3.0/client-thread-safety.html)
  + Add SoupServerMessage:tls-peer-certificate and
    SoupServerMessage:tls-peer-certificate-errors
  + Port docs to gi-docgen
  + Update documentation.
- Replace pkgconfig(gtk-doc) with pkgconfig(gi-docgen)
  BuildRequires (and update options passed to meson) following
  upstreams port.
- Add 299.patch: multithread-test: show error information in case
  of request failure. multithread-test: skip proxy tests if apache
  is not available.
- Use ldconfig_scriptlets for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1662292800">- Update to version 3.1.3:
  + Fix compile error when `SOUP_VERSION_MAX_ALLOWED` is defined.
- Changes from version 3.1.2:
  + Replace HTTP/2 tests using Quart with internal HTTP/2 server
    tests.
  + Improve version macros including adding ability to define
    `SOUP_DISABLE_DEPRECATION_WARNINGS`.
- Drop -D http2_tests=disabled meson paramter: no longer supported.
- Drop 299.patch: merged upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662379200">- Update to version 3.1.4:
  + Numerous improvements to HTTP/2 reliablity.
  + Fix `http` proxy authentication with default proxy resolver.
  + Fix undefined ``ssize_t`` with MSVC.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1663243200">- Update to version 3.2.0:
  + No changes, stable bump only.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 3.2.1:
  + When built against nghttp2 1.50.0+ be relaxed about header
    whitespace.
  + Fix possible crash when cancelling an HTTP/2 message.
  + Fix regresion where soup_server_message_get_socket() could
    return NULL.
  + Fix minor memory leak.
- Disable tests on 32-bit while waiting for
  https://gitlab.gnome.org/GNOME/libsoup/-/issues/309</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1667476800">- Update to version 3.2.2:
  + Various HTTP/2 Fixes:
  - Fix `content-sniffed` not being emitted for resources without
    content.
  - Fix leak of SoupServerConnection when stolen.
- Enable tests on 32-bit again, fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674388800">- Update to version 3.3.0:
  + Add `SoupMessage::got-body-data` signal to monitor progress of
    reads
  + Add `soup_session_send_and_splice()` and
    `soup_session_send_and_splice_async()` convenience APIs
  + Add `soup_message_set_force_http1()` and
    `soup_message_get_force_http1()` APIs
  + Change `soup_cookie_copy()` to not retain default ports
  + Ensure `SoupServerMessage` socket is available in websocket
    handler
  + Fix `soup_message_new()` not erroring when URI has an empty
    host
  + Fix thread-saftey issues in `SoupConnectionAuth`
  + Fix various connection leaks
  + Fix the possibility of sending invalid empty
    `Sec-WebSocket-Protocol` header
  + Fix IO errors not being handled on `CONNECT` messages
  + Numerous improvements to cookies:
  - Add support for cookie prefixes (`__Secure-` and `__Host-`)
  - Reject cookies with control characters in name or value
  - Reject `SameSite=None` cookies without `Secure`
  - Change `soup_cookie_parse()` to be more strict about what is
    considered whitespace
  - Change default SameSite value to `Lax`
  - Fix `soup_cookie_equal()` with `NULL` path</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676289600">- Update to version 3.3.1:
  + Fix regression in `SoupCookieJar` not handling valid Secure
    cookies.
  + Fix crash when skipping HTTP/1 response stream with chunked
    enconding.
  + Change Session to unqueue finished items earlier without an
    extra MainContext iteration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 3.4.0:
  + Fix possible crash in SoupContentSniffer.
  + Fix socket leak.
  + Add missing annotation to
    soup_header_g_string_append_param_quoted().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 3.4.1:
  + Fix HTTP/2 on platforms with unsigned char.
  + Change request cancellation to be handled earlier.
  + Add names to GSources and source tags to GTasks to aid
    debugging.
- Run meson_test macro for all arches.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682769600">- Update to version 3.4.2:
  + Revert changes to request cancellation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 3.4.3:
  + Fix incorrect UTF-8 encoding for params in headers
  + Numerous HTTP/2 fixes and improvements
  + Fix possible crashes in connection management
  + Fix small leak in SoupServer
  + Fix the possibility of empty HTTP/2 frames being sent</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 3.4.4:
  + Improve HTTP/2 performance when a lot of buffering happens
  + Support building libnghttp2 as a subproject</changelog>
  <changelog author="mgorse@suse.com" date="1733313600">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add 6adc0e3e.patch: websocket: Process the frame as soon as we
  read data (boo#1233287 CVE-2024-52532 glgo#GNOME/libsoup#391).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).
- Increase test timeout on s390x. The http2-body-stream test can be
  slow and sometimes times out in our builds.</changelog>
  <changelog author="mgorse@suse.com" date="1745928000">- Add more CVE fixes:
  + libsoup-CVE-2025-32050.patch (boo#1240752 CVE-2025-32050)
  + libsoup-CVE-2025-32051.patch (boo#1240754 CVE-2025-32051)
  + libsoup-CVE-2025-32052.patch (boo#1240756 CVE-2025-32052)
  + libsoup-CVE-2025-32053.patch (boo#1240757 CVE-2025-32053)
  + libsoup-CVE-2025-46420.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-2784.patch (boo#1240750 CVE-2025-2784)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32908.patch (boo#1241223 CVE-2025-32908)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-4476.patch (boo#1243422 CVE-2025-4476)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760184000">- Add libsoup-CVE-2025-11021.patch: Ignore invalid date when
  processing cookies to prevent out-of-bounds read (bsc#1250562,
  CVE-2025-11021, glgo#GNOME/libsoup!482).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760616000">- Update libsoup-CVE-2025-11021.patch: Add NULL check for
  soup_date_time_to_string() (bsc#1250562, CVE-2025-11021,
  glgo#GNOME/libsoup!483).</changelog>
  <changelog author="mgorse@suse.com" date="1763467200">- Add libsoup-CVE-2025-12105.patch: fix use after free caused by
  'finishing' queue item twice (bsc#1252555 CVE-2025-12105
  glgo#GNOME/libsoup!481).</changelog>
</package>
<package pkgid="1fe1634071dcd7dd9fdfc30b59b50e2af78c52713b2344eb7d267195bf37305f" name="libsoup-lang" arch="noarch">
  <version epoch="0" ver="3.4.4" rel="150600.3.28.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1663243200">- Update to version 3.2.0:
  + No changes, stable bump only.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 3.2.1:
  + When built against nghttp2 1.50.0+ be relaxed about header
    whitespace.
  + Fix possible crash when cancelling an HTTP/2 message.
  + Fix regresion where soup_server_message_get_socket() could
    return NULL.
  + Fix minor memory leak.
- Disable tests on 32-bit while waiting for
  https://gitlab.gnome.org/GNOME/libsoup/-/issues/309</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1667476800">- Update to version 3.2.2:
  + Various HTTP/2 Fixes:
  - Fix `content-sniffed` not being emitted for resources without
    content.
  - Fix leak of SoupServerConnection when stolen.
- Enable tests on 32-bit again, fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674388800">- Update to version 3.3.0:
  + Add `SoupMessage::got-body-data` signal to monitor progress of
    reads
  + Add `soup_session_send_and_splice()` and
    `soup_session_send_and_splice_async()` convenience APIs
  + Add `soup_message_set_force_http1()` and
    `soup_message_get_force_http1()` APIs
  + Change `soup_cookie_copy()` to not retain default ports
  + Ensure `SoupServerMessage` socket is available in websocket
    handler
  + Fix `soup_message_new()` not erroring when URI has an empty
    host
  + Fix thread-saftey issues in `SoupConnectionAuth`
  + Fix various connection leaks
  + Fix the possibility of sending invalid empty
    `Sec-WebSocket-Protocol` header
  + Fix IO errors not being handled on `CONNECT` messages
  + Numerous improvements to cookies:
  - Add support for cookie prefixes (`__Secure-` and `__Host-`)
  - Reject cookies with control characters in name or value
  - Reject `SameSite=None` cookies without `Secure`
  - Change `soup_cookie_parse()` to be more strict about what is
    considered whitespace
  - Change default SameSite value to `Lax`
  - Fix `soup_cookie_equal()` with `NULL` path</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676289600">- Update to version 3.3.1:
  + Fix regression in `SoupCookieJar` not handling valid Secure
    cookies.
  + Fix crash when skipping HTTP/1 response stream with chunked
    enconding.
  + Change Session to unqueue finished items earlier without an
    extra MainContext iteration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 3.4.0:
  + Fix possible crash in SoupContentSniffer.
  + Fix socket leak.
  + Add missing annotation to
    soup_header_g_string_append_param_quoted().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 3.4.1:
  + Fix HTTP/2 on platforms with unsigned char.
  + Change request cancellation to be handled earlier.
  + Add names to GSources and source tags to GTasks to aid
    debugging.
- Run meson_test macro for all arches.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682769600">- Update to version 3.4.2:
  + Revert changes to request cancellation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 3.4.3:
  + Fix incorrect UTF-8 encoding for params in headers
  + Numerous HTTP/2 fixes and improvements
  + Fix possible crashes in connection management
  + Fix small leak in SoupServer
  + Fix the possibility of empty HTTP/2 frames being sent</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 3.4.4:
  + Improve HTTP/2 performance when a lot of buffering happens
  + Support building libnghttp2 as a subproject</changelog>
  <changelog author="mgorse@suse.com" date="1733313600">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add 6adc0e3e.patch: websocket: Process the frame as soon as we
  read data (boo#1233287 CVE-2024-52532 glgo#GNOME/libsoup#391).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).
- Increase test timeout on s390x. The http2-body-stream test can be
  slow and sometimes times out in our builds.</changelog>
  <changelog author="mgorse@suse.com" date="1745928000">- Add more CVE fixes:
  + libsoup-CVE-2025-32050.patch (boo#1240752 CVE-2025-32050)
  + libsoup-CVE-2025-32051.patch (boo#1240754 CVE-2025-32051)
  + libsoup-CVE-2025-32052.patch (boo#1240756 CVE-2025-32052)
  + libsoup-CVE-2025-32053.patch (boo#1240757 CVE-2025-32053)
  + libsoup-CVE-2025-46420.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-2784.patch (boo#1240750 CVE-2025-2784)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32908.patch (boo#1241223 CVE-2025-32908)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-4476.patch (boo#1243422 CVE-2025-4476)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760184000">- Add libsoup-CVE-2025-11021.patch: Ignore invalid date when
  processing cookies to prevent out-of-bounds read (bsc#1250562,
  CVE-2025-11021, glgo#GNOME/libsoup!482).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760616000">- Update libsoup-CVE-2025-11021.patch: Add NULL check for
  soup_date_time_to_string() (bsc#1250562, CVE-2025-11021,
  glgo#GNOME/libsoup!483).</changelog>
  <changelog author="mgorse@suse.com" date="1763467200">- Add libsoup-CVE-2025-12105.patch: fix use after free caused by
  'finishing' queue item twice (bsc#1252555 CVE-2025-12105
  glgo#GNOME/libsoup!481).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767700800">- Add libsoup-CVE-2025-14523.patch: Reject duplicated Host in
  headers (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!490).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767873600">- Refresh libsoup-CVE-2025-14523.patch: Follow the update of
  upstream (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!491).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1768305600">- Add libsoup-CVE-2026-0716.patch: Fix out-of-bounds read for
  websocket (bsc#1256418, CVE-2026-0716, glgo#GNOME/libsoup!494).
- Add libsoup-CVE-2026-0719.patch: Fix overflow for password md4sum
  (bsc#1256399, CVE-2026-0719, glgo#GNOME/libsoup!493).</changelog>
</package>
<package pkgid="a1184cee9586233577c4d7fc04aaca67fd0fdf3ca67b2b20f121a13d04e7eb34" name="libsoup-lang" arch="noarch">
  <version epoch="0" ver="3.4.4" rel="150600.3.31.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 3.2.1:
  + When built against nghttp2 1.50.0+ be relaxed about header
    whitespace.
  + Fix possible crash when cancelling an HTTP/2 message.
  + Fix regresion where soup_server_message_get_socket() could
    return NULL.
  + Fix minor memory leak.
- Disable tests on 32-bit while waiting for
  https://gitlab.gnome.org/GNOME/libsoup/-/issues/309</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1667476800">- Update to version 3.2.2:
  + Various HTTP/2 Fixes:
  - Fix `content-sniffed` not being emitted for resources without
    content.
  - Fix leak of SoupServerConnection when stolen.
- Enable tests on 32-bit again, fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674388800">- Update to version 3.3.0:
  + Add `SoupMessage::got-body-data` signal to monitor progress of
    reads
  + Add `soup_session_send_and_splice()` and
    `soup_session_send_and_splice_async()` convenience APIs
  + Add `soup_message_set_force_http1()` and
    `soup_message_get_force_http1()` APIs
  + Change `soup_cookie_copy()` to not retain default ports
  + Ensure `SoupServerMessage` socket is available in websocket
    handler
  + Fix `soup_message_new()` not erroring when URI has an empty
    host
  + Fix thread-saftey issues in `SoupConnectionAuth`
  + Fix various connection leaks
  + Fix the possibility of sending invalid empty
    `Sec-WebSocket-Protocol` header
  + Fix IO errors not being handled on `CONNECT` messages
  + Numerous improvements to cookies:
  - Add support for cookie prefixes (`__Secure-` and `__Host-`)
  - Reject cookies with control characters in name or value
  - Reject `SameSite=None` cookies without `Secure`
  - Change `soup_cookie_parse()` to be more strict about what is
    considered whitespace
  - Change default SameSite value to `Lax`
  - Fix `soup_cookie_equal()` with `NULL` path</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676289600">- Update to version 3.3.1:
  + Fix regression in `SoupCookieJar` not handling valid Secure
    cookies.
  + Fix crash when skipping HTTP/1 response stream with chunked
    enconding.
  + Change Session to unqueue finished items earlier without an
    extra MainContext iteration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 3.4.0:
  + Fix possible crash in SoupContentSniffer.
  + Fix socket leak.
  + Add missing annotation to
    soup_header_g_string_append_param_quoted().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 3.4.1:
  + Fix HTTP/2 on platforms with unsigned char.
  + Change request cancellation to be handled earlier.
  + Add names to GSources and source tags to GTasks to aid
    debugging.
- Run meson_test macro for all arches.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682769600">- Update to version 3.4.2:
  + Revert changes to request cancellation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 3.4.3:
  + Fix incorrect UTF-8 encoding for params in headers
  + Numerous HTTP/2 fixes and improvements
  + Fix possible crashes in connection management
  + Fix small leak in SoupServer
  + Fix the possibility of empty HTTP/2 frames being sent</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 3.4.4:
  + Improve HTTP/2 performance when a lot of buffering happens
  + Support building libnghttp2 as a subproject</changelog>
  <changelog author="mgorse@suse.com" date="1733313600">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add 6adc0e3e.patch: websocket: Process the frame as soon as we
  read data (boo#1233287 CVE-2024-52532 glgo#GNOME/libsoup#391).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).
- Increase test timeout on s390x. The http2-body-stream test can be
  slow and sometimes times out in our builds.</changelog>
  <changelog author="mgorse@suse.com" date="1745928000">- Add more CVE fixes:
  + libsoup-CVE-2025-32050.patch (boo#1240752 CVE-2025-32050)
  + libsoup-CVE-2025-32051.patch (boo#1240754 CVE-2025-32051)
  + libsoup-CVE-2025-32052.patch (boo#1240756 CVE-2025-32052)
  + libsoup-CVE-2025-32053.patch (boo#1240757 CVE-2025-32053)
  + libsoup-CVE-2025-46420.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-2784.patch (boo#1240750 CVE-2025-2784)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32908.patch (boo#1241223 CVE-2025-32908)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-4476.patch (boo#1243422 CVE-2025-4476)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760184000">- Add libsoup-CVE-2025-11021.patch: Ignore invalid date when
  processing cookies to prevent out-of-bounds read (bsc#1250562,
  CVE-2025-11021, glgo#GNOME/libsoup!482).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760616000">- Update libsoup-CVE-2025-11021.patch: Add NULL check for
  soup_date_time_to_string() (bsc#1250562, CVE-2025-11021,
  glgo#GNOME/libsoup!483).</changelog>
  <changelog author="mgorse@suse.com" date="1763467200">- Add libsoup-CVE-2025-12105.patch: fix use after free caused by
  'finishing' queue item twice (bsc#1252555 CVE-2025-12105
  glgo#GNOME/libsoup!481).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767700800">- Add libsoup-CVE-2025-14523.patch: Reject duplicated Host in
  headers (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!490).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767873600">- Refresh libsoup-CVE-2025-14523.patch: Follow the update of
  upstream (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!491).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1768305600">- Add libsoup-CVE-2026-0716.patch: Fix out-of-bounds read for
  websocket (bsc#1256418, CVE-2026-0716, glgo#GNOME/libsoup!494).
- Add libsoup-CVE-2026-0719.patch: Fix overflow for password md4sum
  (bsc#1256399, CVE-2026-0719, glgo#GNOME/libsoup!493).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1770120000">- Add libsoup-CVE-2026-1536.patch: Always validate the headers
  value when coming from untrusted source
  (bsc#1257440, CVE-2026-1536, glgo#GNOME/libsoup/commit/5c1a2e9c).
- Add libsoup-CVE-2026-1761.patch: multipart: check length of bytes
  read soup_filter_input_stream_read_until()
  (bsc#1257598, CVE-2026-1761, glgo#GNOME/libsoup!496).</changelog>
</package>
<package pkgid="916cf2dab68cecb36c43280c8811b24ae43fe60318277c500d42859c20c2faad" name="libsoup-lang" arch="noarch">
  <version epoch="0" ver="3.4.4" rel="150600.3.34.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1667476800">- Update to version 3.2.2:
  + Various HTTP/2 Fixes:
  - Fix `content-sniffed` not being emitted for resources without
    content.
  - Fix leak of SoupServerConnection when stolen.
- Enable tests on 32-bit again, fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674388800">- Update to version 3.3.0:
  + Add `SoupMessage::got-body-data` signal to monitor progress of
    reads
  + Add `soup_session_send_and_splice()` and
    `soup_session_send_and_splice_async()` convenience APIs
  + Add `soup_message_set_force_http1()` and
    `soup_message_get_force_http1()` APIs
  + Change `soup_cookie_copy()` to not retain default ports
  + Ensure `SoupServerMessage` socket is available in websocket
    handler
  + Fix `soup_message_new()` not erroring when URI has an empty
    host
  + Fix thread-saftey issues in `SoupConnectionAuth`
  + Fix various connection leaks
  + Fix the possibility of sending invalid empty
    `Sec-WebSocket-Protocol` header
  + Fix IO errors not being handled on `CONNECT` messages
  + Numerous improvements to cookies:
  - Add support for cookie prefixes (`__Secure-` and `__Host-`)
  - Reject cookies with control characters in name or value
  - Reject `SameSite=None` cookies without `Secure`
  - Change `soup_cookie_parse()` to be more strict about what is
    considered whitespace
  - Change default SameSite value to `Lax`
  - Fix `soup_cookie_equal()` with `NULL` path</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676289600">- Update to version 3.3.1:
  + Fix regression in `SoupCookieJar` not handling valid Secure
    cookies.
  + Fix crash when skipping HTTP/1 response stream with chunked
    enconding.
  + Change Session to unqueue finished items earlier without an
    extra MainContext iteration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 3.4.0:
  + Fix possible crash in SoupContentSniffer.
  + Fix socket leak.
  + Add missing annotation to
    soup_header_g_string_append_param_quoted().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 3.4.1:
  + Fix HTTP/2 on platforms with unsigned char.
  + Change request cancellation to be handled earlier.
  + Add names to GSources and source tags to GTasks to aid
    debugging.
- Run meson_test macro for all arches.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682769600">- Update to version 3.4.2:
  + Revert changes to request cancellation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 3.4.3:
  + Fix incorrect UTF-8 encoding for params in headers
  + Numerous HTTP/2 fixes and improvements
  + Fix possible crashes in connection management
  + Fix small leak in SoupServer
  + Fix the possibility of empty HTTP/2 frames being sent</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 3.4.4:
  + Improve HTTP/2 performance when a lot of buffering happens
  + Support building libnghttp2 as a subproject</changelog>
  <changelog author="mgorse@suse.com" date="1733313600">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add 6adc0e3e.patch: websocket: Process the frame as soon as we
  read data (boo#1233287 CVE-2024-52532 glgo#GNOME/libsoup#391).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).
- Increase test timeout on s390x. The http2-body-stream test can be
  slow and sometimes times out in our builds.</changelog>
  <changelog author="mgorse@suse.com" date="1745928000">- Add more CVE fixes:
  + libsoup-CVE-2025-32050.patch (boo#1240752 CVE-2025-32050)
  + libsoup-CVE-2025-32051.patch (boo#1240754 CVE-2025-32051)
  + libsoup-CVE-2025-32052.patch (boo#1240756 CVE-2025-32052)
  + libsoup-CVE-2025-32053.patch (boo#1240757 CVE-2025-32053)
  + libsoup-CVE-2025-46420.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-2784.patch (boo#1240750 CVE-2025-2784)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32908.patch (boo#1241223 CVE-2025-32908)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-4476.patch (boo#1243422 CVE-2025-4476)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760184000">- Add libsoup-CVE-2025-11021.patch: Ignore invalid date when
  processing cookies to prevent out-of-bounds read (bsc#1250562,
  CVE-2025-11021, glgo#GNOME/libsoup!482).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760616000">- Update libsoup-CVE-2025-11021.patch: Add NULL check for
  soup_date_time_to_string() (bsc#1250562, CVE-2025-11021,
  glgo#GNOME/libsoup!483).</changelog>
  <changelog author="mgorse@suse.com" date="1763467200">- Add libsoup-CVE-2025-12105.patch: fix use after free caused by
  'finishing' queue item twice (bsc#1252555 CVE-2025-12105
  glgo#GNOME/libsoup!481).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767700800">- Add libsoup-CVE-2025-14523.patch: Reject duplicated Host in
  headers (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!490).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767873600">- Refresh libsoup-CVE-2025-14523.patch: Follow the update of
  upstream (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!491).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1768305600">- Add libsoup-CVE-2026-0716.patch: Fix out-of-bounds read for
  websocket (bsc#1256418, CVE-2026-0716, glgo#GNOME/libsoup!494).
- Add libsoup-CVE-2026-0719.patch: Fix overflow for password md4sum
  (bsc#1256399, CVE-2026-0719, glgo#GNOME/libsoup!493).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1770120000">- Add libsoup-CVE-2026-1536.patch: Always validate the headers
  value when coming from untrusted source
  (bsc#1257440, CVE-2026-1536, glgo#GNOME/libsoup/commit/5c1a2e9c).
- Add libsoup-CVE-2026-1761.patch: multipart: check length of bytes
  read soup_filter_input_stream_read_until()
  (bsc#1257598, CVE-2026-1761, glgo#GNOME/libsoup!496).</changelog>
  <changelog author="mgorse@suse.com" date="1771502400">- Add more CVE fixes:
  + libsoup-CVE-2025-32049.patch (bsc#1240751 CVE-2025-32049
    glgo#GNOME/libsoup#390)
  + libsoup-CVE-2026-2443.patch (bsc#1258170 CVE-2026-2443
    glgo#GNOME/libsoup#487)
  + libsoup-CVE-2026-2369.patch (bsc#1258120 CVE-2026-2369
    glgo#GNOME/libsoup!508)
  + libsoup-CVE-2026-2708.patch (bsc#1258508 CVE-2026-2708
    glgo#GNOME/libsoup#500)</changelog>
</package>
<package pkgid="282f7ea38097851196978fa9c971edf7742b0b649f247fbb5d775f43b202579f" name="libsoup-lang" arch="noarch">
  <version epoch="0" ver="3.4.4" rel="150600.3.37.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1674388800">- Update to version 3.3.0:
  + Add `SoupMessage::got-body-data` signal to monitor progress of
    reads
  + Add `soup_session_send_and_splice()` and
    `soup_session_send_and_splice_async()` convenience APIs
  + Add `soup_message_set_force_http1()` and
    `soup_message_get_force_http1()` APIs
  + Change `soup_cookie_copy()` to not retain default ports
  + Ensure `SoupServerMessage` socket is available in websocket
    handler
  + Fix `soup_message_new()` not erroring when URI has an empty
    host
  + Fix thread-saftey issues in `SoupConnectionAuth`
  + Fix various connection leaks
  + Fix the possibility of sending invalid empty
    `Sec-WebSocket-Protocol` header
  + Fix IO errors not being handled on `CONNECT` messages
  + Numerous improvements to cookies:
  - Add support for cookie prefixes (`__Secure-` and `__Host-`)
  - Reject cookies with control characters in name or value
  - Reject `SameSite=None` cookies without `Secure`
  - Change `soup_cookie_parse()` to be more strict about what is
    considered whitespace
  - Change default SameSite value to `Lax`
  - Fix `soup_cookie_equal()` with `NULL` path</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676289600">- Update to version 3.3.1:
  + Fix regression in `SoupCookieJar` not handling valid Secure
    cookies.
  + Fix crash when skipping HTTP/1 response stream with chunked
    enconding.
  + Change Session to unqueue finished items earlier without an
    extra MainContext iteration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 3.4.0:
  + Fix possible crash in SoupContentSniffer.
  + Fix socket leak.
  + Add missing annotation to
    soup_header_g_string_append_param_quoted().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 3.4.1:
  + Fix HTTP/2 on platforms with unsigned char.
  + Change request cancellation to be handled earlier.
  + Add names to GSources and source tags to GTasks to aid
    debugging.
- Run meson_test macro for all arches.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682769600">- Update to version 3.4.2:
  + Revert changes to request cancellation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 3.4.3:
  + Fix incorrect UTF-8 encoding for params in headers
  + Numerous HTTP/2 fixes and improvements
  + Fix possible crashes in connection management
  + Fix small leak in SoupServer
  + Fix the possibility of empty HTTP/2 frames being sent</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 3.4.4:
  + Improve HTTP/2 performance when a lot of buffering happens
  + Support building libnghttp2 as a subproject</changelog>
  <changelog author="mgorse@suse.com" date="1733313600">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add 6adc0e3e.patch: websocket: Process the frame as soon as we
  read data (boo#1233287 CVE-2024-52532 glgo#GNOME/libsoup#391).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).
- Increase test timeout on s390x. The http2-body-stream test can be
  slow and sometimes times out in our builds.</changelog>
  <changelog author="mgorse@suse.com" date="1745928000">- Add more CVE fixes:
  + libsoup-CVE-2025-32050.patch (boo#1240752 CVE-2025-32050)
  + libsoup-CVE-2025-32051.patch (boo#1240754 CVE-2025-32051)
  + libsoup-CVE-2025-32052.patch (boo#1240756 CVE-2025-32052)
  + libsoup-CVE-2025-32053.patch (boo#1240757 CVE-2025-32053)
  + libsoup-CVE-2025-46420.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-2784.patch (boo#1240750 CVE-2025-2784)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32908.patch (boo#1241223 CVE-2025-32908)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-4476.patch (boo#1243422 CVE-2025-4476)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760184000">- Add libsoup-CVE-2025-11021.patch: Ignore invalid date when
  processing cookies to prevent out-of-bounds read (bsc#1250562,
  CVE-2025-11021, glgo#GNOME/libsoup!482).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760616000">- Update libsoup-CVE-2025-11021.patch: Add NULL check for
  soup_date_time_to_string() (bsc#1250562, CVE-2025-11021,
  glgo#GNOME/libsoup!483).</changelog>
  <changelog author="mgorse@suse.com" date="1763467200">- Add libsoup-CVE-2025-12105.patch: fix use after free caused by
  'finishing' queue item twice (bsc#1252555 CVE-2025-12105
  glgo#GNOME/libsoup!481).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767700800">- Add libsoup-CVE-2025-14523.patch: Reject duplicated Host in
  headers (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!490).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767873600">- Refresh libsoup-CVE-2025-14523.patch: Follow the update of
  upstream (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!491).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1768305600">- Add libsoup-CVE-2026-0716.patch: Fix out-of-bounds read for
  websocket (bsc#1256418, CVE-2026-0716, glgo#GNOME/libsoup!494).
- Add libsoup-CVE-2026-0719.patch: Fix overflow for password md4sum
  (bsc#1256399, CVE-2026-0719, glgo#GNOME/libsoup!493).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1770120000">- Add libsoup-CVE-2026-1536.patch: Always validate the headers
  value when coming from untrusted source
  (bsc#1257440, CVE-2026-1536, glgo#GNOME/libsoup/commit/5c1a2e9c).
- Add libsoup-CVE-2026-1761.patch: multipart: check length of bytes
  read soup_filter_input_stream_read_until()
  (bsc#1257598, CVE-2026-1761, glgo#GNOME/libsoup!496).</changelog>
  <changelog author="mgorse@suse.com" date="1771502400">- Add more CVE fixes:
  + libsoup-CVE-2025-32049.patch (bsc#1240751 CVE-2025-32049
    glgo#GNOME/libsoup#390)
  + libsoup-CVE-2026-2443.patch (bsc#1258170 CVE-2026-2443
    glgo#GNOME/libsoup#487)
  + libsoup-CVE-2026-2369.patch (bsc#1258120 CVE-2026-2369
    glgo#GNOME/libsoup!508)
  + libsoup-CVE-2026-2708.patch (bsc#1258508 CVE-2026-2708
    glgo#GNOME/libsoup#500)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1772020800">- Add libsoup-CVE-2026-1760.patch: server: close the connection
  after responsing a request containing...
  (bsc#1257597, CVE-2026-1760, glgo#GNOME/libsoup#475).
- Add libsoup-CVE-2026-1467.patch: uri-utils: do host validation
  when checking if a GUri is valid
  (bsc#1257398, CVE-2026-1467, glgo#GNOME/libsoup#488).
- Add libsoup-CVE-2026-1539.patch: Also remove Proxy-Authorization
  header on cross origin redirect
  (bsc#1257441, CVE-2026-1539, glgo#GNOME/libsoup#489).</changelog>
</package>
<package pkgid="f8e30741cf8d312d0a555c7cfd8b26243b06aa9590e7f1814a0cd0e64a591913" name="libsoup-lang" arch="noarch">
  <version epoch="0" ver="3.4.4" rel="150600.3.42.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 3.4.0:
  + Fix possible crash in SoupContentSniffer.
  + Fix socket leak.
  + Add missing annotation to
    soup_header_g_string_append_param_quoted().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 3.4.1:
  + Fix HTTP/2 on platforms with unsigned char.
  + Change request cancellation to be handled earlier.
  + Add names to GSources and source tags to GTasks to aid
    debugging.
- Run meson_test macro for all arches.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682769600">- Update to version 3.4.2:
  + Revert changes to request cancellation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 3.4.3:
  + Fix incorrect UTF-8 encoding for params in headers
  + Numerous HTTP/2 fixes and improvements
  + Fix possible crashes in connection management
  + Fix small leak in SoupServer
  + Fix the possibility of empty HTTP/2 frames being sent</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 3.4.4:
  + Improve HTTP/2 performance when a lot of buffering happens
  + Support building libnghttp2 as a subproject</changelog>
  <changelog author="mgorse@suse.com" date="1733313600">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add 6adc0e3e.patch: websocket: Process the frame as soon as we
  read data (boo#1233287 CVE-2024-52532 glgo#GNOME/libsoup#391).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).
- Increase test timeout on s390x. The http2-body-stream test can be
  slow and sometimes times out in our builds.</changelog>
  <changelog author="mgorse@suse.com" date="1745928000">- Add more CVE fixes:
  + libsoup-CVE-2025-32050.patch (boo#1240752 CVE-2025-32050)
  + libsoup-CVE-2025-32051.patch (boo#1240754 CVE-2025-32051)
  + libsoup-CVE-2025-32052.patch (boo#1240756 CVE-2025-32052)
  + libsoup-CVE-2025-32053.patch (boo#1240757 CVE-2025-32053)
  + libsoup-CVE-2025-46420.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-2784.patch (boo#1240750 CVE-2025-2784)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32908.patch (boo#1241223 CVE-2025-32908)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-4476.patch (boo#1243422 CVE-2025-4476)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760184000">- Add libsoup-CVE-2025-11021.patch: Ignore invalid date when
  processing cookies to prevent out-of-bounds read (bsc#1250562,
  CVE-2025-11021, glgo#GNOME/libsoup!482).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1760616000">- Update libsoup-CVE-2025-11021.patch: Add NULL check for
  soup_date_time_to_string() (bsc#1250562, CVE-2025-11021,
  glgo#GNOME/libsoup!483).</changelog>
  <changelog author="mgorse@suse.com" date="1763467200">- Add libsoup-CVE-2025-12105.patch: fix use after free caused by
  'finishing' queue item twice (bsc#1252555 CVE-2025-12105
  glgo#GNOME/libsoup!481).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767700800">- Add libsoup-CVE-2025-14523.patch: Reject duplicated Host in
  headers (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!490).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767873600">- Refresh libsoup-CVE-2025-14523.patch: Follow the update of
  upstream (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!491).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1768305600">- Add libsoup-CVE-2026-0716.patch: Fix out-of-bounds read for
  websocket (bsc#1256418, CVE-2026-0716, glgo#GNOME/libsoup!494).
- Add libsoup-CVE-2026-0719.patch: Fix overflow for password md4sum
  (bsc#1256399, CVE-2026-0719, glgo#GNOME/libsoup!493).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1770120000">- Add libsoup-CVE-2026-1536.patch: Always validate the headers
  value when coming from untrusted source
  (bsc#1257440, CVE-2026-1536, glgo#GNOME/libsoup/commit/5c1a2e9c).
- Add libsoup-CVE-2026-1761.patch: multipart: check length of bytes
  read soup_filter_input_stream_read_until()
  (bsc#1257598, CVE-2026-1761, glgo#GNOME/libsoup!496).</changelog>
  <changelog author="mgorse@suse.com" date="1771502400">- Add more CVE fixes:
  + libsoup-CVE-2025-32049.patch (bsc#1240751 CVE-2025-32049
    glgo#GNOME/libsoup#390)
  + libsoup-CVE-2026-2443.patch (bsc#1258170 CVE-2026-2443
    glgo#GNOME/libsoup#487)
  + libsoup-CVE-2026-2369.patch (bsc#1258120 CVE-2026-2369
    glgo#GNOME/libsoup!508)
  + libsoup-CVE-2026-2708.patch (bsc#1258508 CVE-2026-2708
    glgo#GNOME/libsoup#500)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1772020800">- Add libsoup-CVE-2026-1760.patch: server: close the connection
  after responsing a request containing...
  (bsc#1257597, CVE-2026-1760, glgo#GNOME/libsoup#475).
- Add libsoup-CVE-2026-1467.patch: uri-utils: do host validation
  when checking if a GUri is valid
  (bsc#1257398, CVE-2026-1467, glgo#GNOME/libsoup#488).
- Add libsoup-CVE-2026-1539.patch: Also remove Proxy-Authorization
  header on cross origin redirect
  (bsc#1257441, CVE-2026-1539, glgo#GNOME/libsoup#489).</changelog>
  <changelog author="mgorse@suse.com" date="1772712000">- Update libsoup-CVE-2026-0716.patch to incorporate
  glgo#GNOME/libsoup!518. The original fix was incomplete
  (bsc#1256418 CVE-2026-0716 glgo#GNOME/libsoup#476).</changelog>
  <changelog author="mgorse@suse.com" date="1773230400">- Refresh some patches to match the output from gitlab.gnome.org.</changelog>
</package>
<package pkgid="3f796b663928415c0733c3a60507b69f95078df671db052c20d5ed1b918601f0" name="libsoup-lang" arch="noarch">
  <version epoch="0" ver="3.4.4" rel="150600.3.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1641556800">- Update to version 3.0.4:
  + Fix HTTP/2 not properly handling socket timeouts.
  + Improvements to test reliablity.
  + Fix cross-compiling to Windows.
  + Fix tests with development glib-networking.
  + Expose soup_uri_copy() to Vala.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647604800">- Update to version 3.0.5:
  + Misc HTTP/2 fixes.
  + Fix missing files for installed-tests.
  + Fix SoupServer not properly handling invalid percent encoded
    paths.
  + Fix other areas not properly handling invalid percent encoded
    paths.
  + Fix SoupLogger:max-body-size of 0 meaning log nothing.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648814400">- Update to version 3.0.6:
  + Misc HTTP/2 fixes.
  + Add PUT/POST support to examples/get.
  + Add `--user-agent` option to examples/get.
  + Misc meson improvements.
  + Fix build with Visual Studio.</changelog>
  <changelog author="dimstar@opensuse.org" date="1657108800">- Update to version 3.0.7:
  + Fix leak in SoupAuthNTLM.
  + Fix constructing SoupAuthNTLM objects.
  + Disable mutual negotiation in SoupAuthNegotiate.
  + http2:
  - Do not advertise the `h2` protocool for proxy connections.
  - Remove left-over headers when HTTP/1 redirects to HTTP/2.
  - Handle HTTP_1_1_REQUIRED error.
  - Read request bodies synchronously for sync requests.
  - Properly handle server sending shut down GOAWAY.
  + tests:
  - Remove dependency on Apache's PHP module.
  - Depend upon Apache's http2 module.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662120000">- Update to version 3.0.8:
  + Fix `http` proxy authentication with default proxy resolver.
  + Numerous improvments to HTTP/2 reliability.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662206400">- Update to version 3.1.1:
  + Reintroduce some thread-safety to SoupSession (see
    https://libsoup.org/libsoup-3.0/client-thread-safety.html)
  + Add SoupServerMessage:tls-peer-certificate and
    SoupServerMessage:tls-peer-certificate-errors
  + Port docs to gi-docgen
  + Update documentation.
- Replace pkgconfig(gtk-doc) with pkgconfig(gi-docgen)
  BuildRequires (and update options passed to meson) following
  upstreams port.
- Add 299.patch: multithread-test: show error information in case
  of request failure. multithread-test: skip proxy tests if apache
  is not available.
- Use ldconfig_scriptlets for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1662292800">- Update to version 3.1.3:
  + Fix compile error when `SOUP_VERSION_MAX_ALLOWED` is defined.
- Changes from version 3.1.2:
  + Replace HTTP/2 tests using Quart with internal HTTP/2 server
    tests.
  + Improve version macros including adding ability to define
    `SOUP_DISABLE_DEPRECATION_WARNINGS`.
- Drop -D http2_tests=disabled meson paramter: no longer supported.
- Drop 299.patch: merged upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662379200">- Update to version 3.1.4:
  + Numerous improvements to HTTP/2 reliablity.
  + Fix `http` proxy authentication with default proxy resolver.
  + Fix undefined ``ssize_t`` with MSVC.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1663243200">- Update to version 3.2.0:
  + No changes, stable bump only.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 3.2.1:
  + When built against nghttp2 1.50.0+ be relaxed about header
    whitespace.
  + Fix possible crash when cancelling an HTTP/2 message.
  + Fix regresion where soup_server_message_get_socket() could
    return NULL.
  + Fix minor memory leak.
- Disable tests on 32-bit while waiting for
  https://gitlab.gnome.org/GNOME/libsoup/-/issues/309</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1667476800">- Update to version 3.2.2:
  + Various HTTP/2 Fixes:
  - Fix `content-sniffed` not being emitted for resources without
    content.
  - Fix leak of SoupServerConnection when stolen.
- Enable tests on 32-bit again, fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1674388800">- Update to version 3.3.0:
  + Add `SoupMessage::got-body-data` signal to monitor progress of
    reads
  + Add `soup_session_send_and_splice()` and
    `soup_session_send_and_splice_async()` convenience APIs
  + Add `soup_message_set_force_http1()` and
    `soup_message_get_force_http1()` APIs
  + Change `soup_cookie_copy()` to not retain default ports
  + Ensure `SoupServerMessage` socket is available in websocket
    handler
  + Fix `soup_message_new()` not erroring when URI has an empty
    host
  + Fix thread-saftey issues in `SoupConnectionAuth`
  + Fix various connection leaks
  + Fix the possibility of sending invalid empty
    `Sec-WebSocket-Protocol` header
  + Fix IO errors not being handled on `CONNECT` messages
  + Numerous improvements to cookies:
  - Add support for cookie prefixes (`__Secure-` and `__Host-`)
  - Reject cookies with control characters in name or value
  - Reject `SameSite=None` cookies without `Secure`
  - Change `soup_cookie_parse()` to be more strict about what is
    considered whitespace
  - Change default SameSite value to `Lax`
  - Fix `soup_cookie_equal()` with `NULL` path</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1676289600">- Update to version 3.3.1:
  + Fix regression in `SoupCookieJar` not handling valid Secure
    cookies.
  + Fix crash when skipping HTTP/1 response stream with chunked
    enconding.
  + Change Session to unqueue finished items earlier without an
    extra MainContext iteration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1679054400">- Update to version 3.4.0:
  + Fix possible crash in SoupContentSniffer.
  + Fix socket leak.
  + Add missing annotation to
    soup_header_g_string_append_param_quoted().</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682078400">- Update to version 3.4.1:
  + Fix HTTP/2 on platforms with unsigned char.
  + Change request cancellation to be handled earlier.
  + Add names to GSources and source tags to GTasks to aid
    debugging.
- Run meson_test macro for all arches.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1682769600">- Update to version 3.4.2:
  + Revert changes to request cancellation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1694779200">- Update to version 3.4.3:
  + Fix incorrect UTF-8 encoding for params in headers
  + Numerous HTTP/2 fixes and improvements
  + Fix possible crashes in connection management
  + Fix small leak in SoupServer
  + Fix the possibility of empty HTTP/2 frames being sent</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1698321600">- Update to version 3.4.4:
  + Improve HTTP/2 performance when a lot of buffering happens
  + Support building libnghttp2 as a subproject</changelog>
  <changelog author="mgorse@suse.com" date="1733313600">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add 6adc0e3e.patch: websocket: Process the frame as soon as we
  read data (boo#1233287 CVE-2024-52532 glgo#GNOME/libsoup#391).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).
- Increase test timeout on s390x. The http2-body-stream test can be
  slow and sometimes times out in our builds.</changelog>
  <changelog author="mgorse@suse.com" date="1745928000">- Add more CVE fixes:
  + libsoup-CVE-2025-32050.patch (boo#1240752 CVE-2025-32050)
  + libsoup-CVE-2025-32051.patch (boo#1240754 CVE-2025-32051)
  + libsoup-CVE-2025-32052.patch (boo#1240756 CVE-2025-32052)
  + libsoup-CVE-2025-32053.patch (boo#1240757 CVE-2025-32053)
  + libsoup-CVE-2025-46420.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-2784.patch (boo#1240750 CVE-2025-2784)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32908.patch (boo#1241223 CVE-2025-32908)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)</changelog>
</package>
<package pkgid="82751a39b09853bb985604664af65326e4234140f1b4f0265ab250b8b3969e47" name="libsoup2" arch="src">
  <version epoch="0" ver="2.74.3" rel="150600.4.12.1"/>
  <changelog author="dimstar@opensuse.org" date="1599220800">- Update to version 2.71.0:
  + Redesign directory list returned for `file://` requests.
  + Add `SOUP_COOKIE_JAR_ACCEPT_GRANDFATHERED_THIRD_PARTY` policy.
  + Add soup_message_is_feature_disabled() API.
  + Fix potential leak when setting SoupSession:tls-interaction.
  + Fix building with Visual Studio.
  + Updated translations.
- Drop libsoup-test-utils-fix.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1599307200">- Update to version 2.71.1:
  + Add support for 308 Premanent Redirect.
  + Add basic sysprof profiling for HTTP messages.
  + Various build fixes.
  + Updated translations.
- Add pkgconfig(sysprof-4) and pkgconfig(sysprof-capture-4)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1600084800">- Update to version 2.72.0:
  + Fix critical after cancelling a message that failed auth.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Disable sysprof integration: this causes a nasty build cycle.
  + Pass -Dsysprof=disabled to meson.
  + Remove pkgconfig(sysprof-4) and pkgconfig(sysprof-capture-4),
    as well as pkgconfig(sysprof-4) in the devel project.</changelog>
  <changelog author="pmonreal@suse.com" date="1612785600">- Fix tests: fix SSL test with glib-networking &gt;= 2.65.90
  * See https://gitlab.gnome.org/GNOME/libsoup/issues/201
- Add libsoup-fix-SSL-test.patch
- Remove patches:
  * libsoup-disable-ssl-tests.patch
  * libsoup-disable-hsts-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1612785601">- Disable tls_interaction-test until resolved upstream
  * See https://gitlab.gnome.org/GNOME/libsoup/issues/120
- Add libsoup-skip-tls_interaction-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614340800">- Run the regression tests using GnuTLS NORMAL priority</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.74.0:
  + IMPORTANT: Enable ssl-use-system-ca-file by default on
    deprecated Sync and Async sessions.
  + Fix including headers in C++ projects.
  + Fix attempting to resolve relative paths with data URIs.
  + Support Content-Disposition headers without a disposition-type.
  + Fix building VAPI bindings with latest Vala.
  + Fix sending a Content-Length header in a response with status
    code of 1xx or 204.
  + Updated translations.
- Drop libsoup-fix-SSL-test.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629892800">- Rename source package to libsoup2, as a compatibility package
  while the world moves to libsoup3 (with HTTP/2 support).</changelog>
  <changelog author="dimstar@opensuse.org" date="1632916800">- Add Provides: libsoup2 to the library, so that the lang package
  is installable.
- Remove the left-over provides/obsoltes for libsoup (which is now
  libsoup 3).</changelog>
  <changelog author="bwiedemann@suse.com" date="1633176000">- Add libsoup2-extend-test-cert.patch to fix tests after 2027 (boo#1102840)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635076800">- Update to version 2.74.1:
  + Fix support for older versions of Vala.
  + Fix trying to build sysprof as a subproject on Windows.
  + Fix missing `extern "C"` in an installed header.
  + Improve `gssapi` dependency handling.
  + Fix `libsoup-doc` build target.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637755200">- Update to version 2.74.2:
  + Error when libsoup3 is already loaded before libsoup2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 2.74.3:
  + Add missing g-i annotations to `soup_address_get_sockaddr()`
    and `soup_socket_read_until()`.
  + Add missing `extern` when building on Windows.
  + Update libxml2 fallback for meson wrap.
  + Improvements when using libsoup with meson wraps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690804800">- Add upstream bug fixes:
  + 4d12c3e5.patch: lib: Add g_task_set_source_tag() everywhere
  + 48b3b611.patch: lib: Add names to various GSources
- Drop no longer valid translation-update-upstream BuildRequires
  and macro.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1702555200">- Add ced3c5d8.patch: Fix build with libxml2-2.12.0 and clang-17.</changelog>
  <changelog author="mgorse@suse.com" date="1731499200">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add libsoup-CVE-2024-52532.patch: websocket: Process the frame as
  soon as we read data (boo#1233287 CVE-2024-52532).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).</changelog>
  <changelog author="mgorse@suse.com" date="1746014400">- Add more CVE fixes:
  + ef6c4bf6.patch (boo#1240750 CVE-2025-2784)
  + 96c22b67.patch (boo#1240750 CVE-2025-2784)
  + 19124679.patch (boo#1240752 CVE-2025-32050)
  + a5b86bfc.patch (boo#1240756 CVE-2025-32052)
  + 5739a090.patch (boo#1240757 CVE-2025-32053)
  + c9083869.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
</package>
<package pkgid="42afb0d59bbb3a29c4e9fb5260dca012517e7cb555caf25923869778b5bce6b1" name="libsoup2" arch="src">
  <version epoch="0" ver="2.74.3" rel="150600.4.19.1"/>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Disable sysprof integration: this causes a nasty build cycle.
  + Pass -Dsysprof=disabled to meson.
  + Remove pkgconfig(sysprof-4) and pkgconfig(sysprof-capture-4),
    as well as pkgconfig(sysprof-4) in the devel project.</changelog>
  <changelog author="pmonreal@suse.com" date="1612785600">- Fix tests: fix SSL test with glib-networking &gt;= 2.65.90
  * See https://gitlab.gnome.org/GNOME/libsoup/issues/201
- Add libsoup-fix-SSL-test.patch
- Remove patches:
  * libsoup-disable-ssl-tests.patch
  * libsoup-disable-hsts-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1612785601">- Disable tls_interaction-test until resolved upstream
  * See https://gitlab.gnome.org/GNOME/libsoup/issues/120
- Add libsoup-skip-tls_interaction-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614340800">- Run the regression tests using GnuTLS NORMAL priority</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.74.0:
  + IMPORTANT: Enable ssl-use-system-ca-file by default on
    deprecated Sync and Async sessions.
  + Fix including headers in C++ projects.
  + Fix attempting to resolve relative paths with data URIs.
  + Support Content-Disposition headers without a disposition-type.
  + Fix building VAPI bindings with latest Vala.
  + Fix sending a Content-Length header in a response with status
    code of 1xx or 204.
  + Updated translations.
- Drop libsoup-fix-SSL-test.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629892800">- Rename source package to libsoup2, as a compatibility package
  while the world moves to libsoup3 (with HTTP/2 support).</changelog>
  <changelog author="dimstar@opensuse.org" date="1632916800">- Add Provides: libsoup2 to the library, so that the lang package
  is installable.
- Remove the left-over provides/obsoltes for libsoup (which is now
  libsoup 3).</changelog>
  <changelog author="bwiedemann@suse.com" date="1633176000">- Add libsoup2-extend-test-cert.patch to fix tests after 2027 (boo#1102840)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635076800">- Update to version 2.74.1:
  + Fix support for older versions of Vala.
  + Fix trying to build sysprof as a subproject on Windows.
  + Fix missing `extern "C"` in an installed header.
  + Improve `gssapi` dependency handling.
  + Fix `libsoup-doc` build target.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637755200">- Update to version 2.74.2:
  + Error when libsoup3 is already loaded before libsoup2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 2.74.3:
  + Add missing g-i annotations to `soup_address_get_sockaddr()`
    and `soup_socket_read_until()`.
  + Add missing `extern` when building on Windows.
  + Update libxml2 fallback for meson wrap.
  + Improvements when using libsoup with meson wraps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690804800">- Add upstream bug fixes:
  + 4d12c3e5.patch: lib: Add g_task_set_source_tag() everywhere
  + 48b3b611.patch: lib: Add names to various GSources
- Drop no longer valid translation-update-upstream BuildRequires
  and macro.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1702555200">- Add ced3c5d8.patch: Fix build with libxml2-2.12.0 and clang-17.</changelog>
  <changelog author="mgorse@suse.com" date="1731499200">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add libsoup-CVE-2024-52532.patch: websocket: Process the frame as
  soon as we read data (boo#1233287 CVE-2024-52532).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).</changelog>
  <changelog author="mgorse@suse.com" date="1746014400">- Add more CVE fixes:
  + ef6c4bf6.patch (boo#1240750 CVE-2025-2784)
  + 96c22b67.patch (boo#1240750 CVE-2025-2784)
  + 19124679.patch (boo#1240752 CVE-2025-32050)
  + a5b86bfc.patch (boo#1240756 CVE-2025-32052)
  + 5739a090.patch (boo#1240757 CVE-2025-32053)
  + c9083869.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767700800">- Add libsoup2-CVE-2025-14523.patch: Reject duplicated Host in
  headers (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!489).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767873600">- Refresh libsoup2-CVE-2025-14523.patch: Follow the update of
  upstream (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!491).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1768305600">- Add libsoup2-CVE-2026-0719.patch: Fix overflow for password
  md4sum (bsc#1256399, CVE-2026-0719, glgo#GNOME/libsoup!493).</changelog>
</package>
<package pkgid="b043da5b1dc5d1ba9c08aba124ee80001fbb8d197c36c55dc570bac740606254" name="libsoup2" arch="src">
  <version epoch="0" ver="2.74.3" rel="150600.4.24.1"/>
  <changelog author="pmonreal@suse.com" date="1614340800">- Run the regression tests using GnuTLS NORMAL priority</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.74.0:
  + IMPORTANT: Enable ssl-use-system-ca-file by default on
    deprecated Sync and Async sessions.
  + Fix including headers in C++ projects.
  + Fix attempting to resolve relative paths with data URIs.
  + Support Content-Disposition headers without a disposition-type.
  + Fix building VAPI bindings with latest Vala.
  + Fix sending a Content-Length header in a response with status
    code of 1xx or 204.
  + Updated translations.
- Drop libsoup-fix-SSL-test.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629892800">- Rename source package to libsoup2, as a compatibility package
  while the world moves to libsoup3 (with HTTP/2 support).</changelog>
  <changelog author="dimstar@opensuse.org" date="1632916800">- Add Provides: libsoup2 to the library, so that the lang package
  is installable.
- Remove the left-over provides/obsoltes for libsoup (which is now
  libsoup 3).</changelog>
  <changelog author="bwiedemann@suse.com" date="1633176000">- Add libsoup2-extend-test-cert.patch to fix tests after 2027 (boo#1102840)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635076800">- Update to version 2.74.1:
  + Fix support for older versions of Vala.
  + Fix trying to build sysprof as a subproject on Windows.
  + Fix missing `extern "C"` in an installed header.
  + Improve `gssapi` dependency handling.
  + Fix `libsoup-doc` build target.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637755200">- Update to version 2.74.2:
  + Error when libsoup3 is already loaded before libsoup2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 2.74.3:
  + Add missing g-i annotations to `soup_address_get_sockaddr()`
    and `soup_socket_read_until()`.
  + Add missing `extern` when building on Windows.
  + Update libxml2 fallback for meson wrap.
  + Improvements when using libsoup with meson wraps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690804800">- Add upstream bug fixes:
  + 4d12c3e5.patch: lib: Add g_task_set_source_tag() everywhere
  + 48b3b611.patch: lib: Add names to various GSources
- Drop no longer valid translation-update-upstream BuildRequires
  and macro.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1702555200">- Add ced3c5d8.patch: Fix build with libxml2-2.12.0 and clang-17.</changelog>
  <changelog author="mgorse@suse.com" date="1731499200">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add libsoup-CVE-2024-52532.patch: websocket: Process the frame as
  soon as we read data (boo#1233287 CVE-2024-52532).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).</changelog>
  <changelog author="mgorse@suse.com" date="1746014400">- Add more CVE fixes:
  + ef6c4bf6.patch (boo#1240750 CVE-2025-2784)
  + 96c22b67.patch (boo#1240750 CVE-2025-2784)
  + 19124679.patch (boo#1240752 CVE-2025-32050)
  + a5b86bfc.patch (boo#1240756 CVE-2025-32052)
  + 5739a090.patch (boo#1240757 CVE-2025-32053)
  + c9083869.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767700800">- Add libsoup2-CVE-2025-14523.patch: Reject duplicated Host in
  headers (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!489).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767873600">- Refresh libsoup2-CVE-2025-14523.patch: Follow the update of
  upstream (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!491).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1768305600">- Add libsoup2-CVE-2026-0719.patch: Fix overflow for password
  md4sum (bsc#1256399, CVE-2026-0719, glgo#GNOME/libsoup!493).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1770120000">- Add libsoup2-CVE-2026-1761.patch: multipart: check length of bytes
  read soup_filter_input_stream_read_until()
  (bsc#1257598, CVE-2026-1761, glgo#GNOME/libsoup!496).</changelog>
  <changelog author="mgorse@suse.com" date="1770379200">- Add libsoup2-CVE-2026-0716.patch: Fix out-of-bounds read for
  websocket (bsc#1256418, CVE-2026-0716, glgo#GNOME/libsoup!494).</changelog>
  <changelog author="mgorse@suse.com" date="1770638400">- Add libsoup2-CVE-2025-4476.patch: fix crash in
  soup_auth_digest_get_protection_space (bsc#1243422
  CVE-2025-4476 glgo#GNOME/libsoup#440).
- Increase test timeout for all arches except x86_64 and run tests
  again should they fail the first time, the testsuite is flaky.</changelog>
</package>
<package pkgid="3f3045cc81ca99c17de71c7f1f882617eab9215508d256bd7522f4d4013fc732" name="libsoup2" arch="src">
  <version epoch="0" ver="2.74.3" rel="150600.4.27.1"/>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.74.0:
  + IMPORTANT: Enable ssl-use-system-ca-file by default on
    deprecated Sync and Async sessions.
  + Fix including headers in C++ projects.
  + Fix attempting to resolve relative paths with data URIs.
  + Support Content-Disposition headers without a disposition-type.
  + Fix building VAPI bindings with latest Vala.
  + Fix sending a Content-Length header in a response with status
    code of 1xx or 204.
  + Updated translations.
- Drop libsoup-fix-SSL-test.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629892800">- Rename source package to libsoup2, as a compatibility package
  while the world moves to libsoup3 (with HTTP/2 support).</changelog>
  <changelog author="dimstar@opensuse.org" date="1632916800">- Add Provides: libsoup2 to the library, so that the lang package
  is installable.
- Remove the left-over provides/obsoltes for libsoup (which is now
  libsoup 3).</changelog>
  <changelog author="bwiedemann@suse.com" date="1633176000">- Add libsoup2-extend-test-cert.patch to fix tests after 2027 (boo#1102840)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635076800">- Update to version 2.74.1:
  + Fix support for older versions of Vala.
  + Fix trying to build sysprof as a subproject on Windows.
  + Fix missing `extern "C"` in an installed header.
  + Improve `gssapi` dependency handling.
  + Fix `libsoup-doc` build target.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637755200">- Update to version 2.74.2:
  + Error when libsoup3 is already loaded before libsoup2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 2.74.3:
  + Add missing g-i annotations to `soup_address_get_sockaddr()`
    and `soup_socket_read_until()`.
  + Add missing `extern` when building on Windows.
  + Update libxml2 fallback for meson wrap.
  + Improvements when using libsoup with meson wraps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690804800">- Add upstream bug fixes:
  + 4d12c3e5.patch: lib: Add g_task_set_source_tag() everywhere
  + 48b3b611.patch: lib: Add names to various GSources
- Drop no longer valid translation-update-upstream BuildRequires
  and macro.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1702555200">- Add ced3c5d8.patch: Fix build with libxml2-2.12.0 and clang-17.</changelog>
  <changelog author="mgorse@suse.com" date="1731499200">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add libsoup-CVE-2024-52532.patch: websocket: Process the frame as
  soon as we read data (boo#1233287 CVE-2024-52532).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).</changelog>
  <changelog author="mgorse@suse.com" date="1746014400">- Add more CVE fixes:
  + ef6c4bf6.patch (boo#1240750 CVE-2025-2784)
  + 96c22b67.patch (boo#1240750 CVE-2025-2784)
  + 19124679.patch (boo#1240752 CVE-2025-32050)
  + a5b86bfc.patch (boo#1240756 CVE-2025-32052)
  + 5739a090.patch (boo#1240757 CVE-2025-32053)
  + c9083869.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767700800">- Add libsoup2-CVE-2025-14523.patch: Reject duplicated Host in
  headers (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!489).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767873600">- Refresh libsoup2-CVE-2025-14523.patch: Follow the update of
  upstream (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!491).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1768305600">- Add libsoup2-CVE-2026-0719.patch: Fix overflow for password
  md4sum (bsc#1256399, CVE-2026-0719, glgo#GNOME/libsoup!493).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1770120000">- Add libsoup2-CVE-2026-1761.patch: multipart: check length of bytes
  read soup_filter_input_stream_read_until()
  (bsc#1257598, CVE-2026-1761, glgo#GNOME/libsoup!496).</changelog>
  <changelog author="mgorse@suse.com" date="1770379200">- Add libsoup2-CVE-2026-0716.patch: Fix out-of-bounds read for
  websocket (bsc#1256418, CVE-2026-0716, glgo#GNOME/libsoup!494).</changelog>
  <changelog author="mgorse@suse.com" date="1770638400">- Add libsoup2-CVE-2025-4476.patch: fix crash in
  soup_auth_digest_get_protection_space (bsc#1243422
  CVE-2025-4476 glgo#GNOME/libsoup#440).
- Increase test timeout for all arches except x86_64 and run tests
  again should they fail the first time, the testsuite is flaky.</changelog>
  <changelog author="mgorse@suse.com" date="1771588800">- Add more CVE fixes:
  + libsoup2-CVE-2025-32049.patch (bsc#1240751 CVE-2025-32049
    glgo#GNOME/libsoup#390)
  + libsoup2-CVE-2026-2443.patch (bsc#1258170 CVE-2026-2443
    glgo#GNOME/libsoup#487)
  + libsoup2-CVE-2026-2369.patch (bsc#1258120 CVE-2026-2369
    glgo#GNOME/libsoup!508)
  + libsoup2-CVE-2026-2708.patch (bsc#1258508 CVE-2026-2708
    glgo#GNOME/libsoup#500)</changelog>
</package>
<package pkgid="690ac3ac3fe934682888c895f5659ad0ed8656c15b36afce46448d526ac1f903" name="libsoup2" arch="src">
  <version epoch="0" ver="2.74.3" rel="150600.4.30.1"/>
  <changelog author="dimstar@opensuse.org" date="1629892800">- Rename source package to libsoup2, as a compatibility package
  while the world moves to libsoup3 (with HTTP/2 support).</changelog>
  <changelog author="dimstar@opensuse.org" date="1632916800">- Add Provides: libsoup2 to the library, so that the lang package
  is installable.
- Remove the left-over provides/obsoltes for libsoup (which is now
  libsoup 3).</changelog>
  <changelog author="bwiedemann@suse.com" date="1633176000">- Add libsoup2-extend-test-cert.patch to fix tests after 2027 (boo#1102840)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635076800">- Update to version 2.74.1:
  + Fix support for older versions of Vala.
  + Fix trying to build sysprof as a subproject on Windows.
  + Fix missing `extern "C"` in an installed header.
  + Improve `gssapi` dependency handling.
  + Fix `libsoup-doc` build target.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637755200">- Update to version 2.74.2:
  + Error when libsoup3 is already loaded before libsoup2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 2.74.3:
  + Add missing g-i annotations to `soup_address_get_sockaddr()`
    and `soup_socket_read_until()`.
  + Add missing `extern` when building on Windows.
  + Update libxml2 fallback for meson wrap.
  + Improvements when using libsoup with meson wraps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690804800">- Add upstream bug fixes:
  + 4d12c3e5.patch: lib: Add g_task_set_source_tag() everywhere
  + 48b3b611.patch: lib: Add names to various GSources
- Drop no longer valid translation-update-upstream BuildRequires
  and macro.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1702555200">- Add ced3c5d8.patch: Fix build with libxml2-2.12.0 and clang-17.</changelog>
  <changelog author="mgorse@suse.com" date="1731499200">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add libsoup-CVE-2024-52532.patch: websocket: Process the frame as
  soon as we read data (boo#1233287 CVE-2024-52532).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).</changelog>
  <changelog author="mgorse@suse.com" date="1746014400">- Add more CVE fixes:
  + ef6c4bf6.patch (boo#1240750 CVE-2025-2784)
  + 96c22b67.patch (boo#1240750 CVE-2025-2784)
  + 19124679.patch (boo#1240752 CVE-2025-32050)
  + a5b86bfc.patch (boo#1240756 CVE-2025-32052)
  + 5739a090.patch (boo#1240757 CVE-2025-32053)
  + c9083869.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767700800">- Add libsoup2-CVE-2025-14523.patch: Reject duplicated Host in
  headers (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!489).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767873600">- Refresh libsoup2-CVE-2025-14523.patch: Follow the update of
  upstream (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!491).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1768305600">- Add libsoup2-CVE-2026-0719.patch: Fix overflow for password
  md4sum (bsc#1256399, CVE-2026-0719, glgo#GNOME/libsoup!493).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1770120000">- Add libsoup2-CVE-2026-1761.patch: multipart: check length of bytes
  read soup_filter_input_stream_read_until()
  (bsc#1257598, CVE-2026-1761, glgo#GNOME/libsoup!496).</changelog>
  <changelog author="mgorse@suse.com" date="1770379200">- Add libsoup2-CVE-2026-0716.patch: Fix out-of-bounds read for
  websocket (bsc#1256418, CVE-2026-0716, glgo#GNOME/libsoup!494).</changelog>
  <changelog author="mgorse@suse.com" date="1770638400">- Add libsoup2-CVE-2025-4476.patch: fix crash in
  soup_auth_digest_get_protection_space (bsc#1243422
  CVE-2025-4476 glgo#GNOME/libsoup#440).
- Increase test timeout for all arches except x86_64 and run tests
  again should they fail the first time, the testsuite is flaky.</changelog>
  <changelog author="mgorse@suse.com" date="1771588800">- Add more CVE fixes:
  + libsoup2-CVE-2025-32049.patch (bsc#1240751 CVE-2025-32049
    glgo#GNOME/libsoup#390)
  + libsoup2-CVE-2026-2443.patch (bsc#1258170 CVE-2026-2443
    glgo#GNOME/libsoup#487)
  + libsoup2-CVE-2026-2369.patch (bsc#1258120 CVE-2026-2369
    glgo#GNOME/libsoup!508)
  + libsoup2-CVE-2026-2708.patch (bsc#1258508 CVE-2026-2708
    glgo#GNOME/libsoup#500)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1772020800">- Add libsoup-CVE-2026-1760.patch: server: close the connection
  after responsing a request containing...
  (bsc#1257597, CVE-2026-1760, glgo#GNOME/libsoup#475).
- Add libsoup-CVE-2026-1467.patch: uri-utils: do host validation
  when checking if a GUri is valid
  (bsc#1257398, CVE-2026-1467, glgo#GNOME/libsoup#488).
- Add libsoup-CVE-2026-1539.patch: Also remove Proxy-Authorization
  header on cross origin redirect
  (bsc#1257441, CVE-2026-1539, glgo#GNOME/libsoup#489).</changelog>
</package>
<package pkgid="288fa3765917df9c9c76d45e15215b516baa985a7d3d221928de31dbf6483b66" name="libsoup2" arch="src">
  <version epoch="0" ver="2.74.3" rel="150600.4.33.1"/>
  <changelog author="dimstar@opensuse.org" date="1632916800">- Add Provides: libsoup2 to the library, so that the lang package
  is installable.
- Remove the left-over provides/obsoltes for libsoup (which is now
  libsoup 3).</changelog>
  <changelog author="bwiedemann@suse.com" date="1633176000">- Add libsoup2-extend-test-cert.patch to fix tests after 2027 (boo#1102840)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635076800">- Update to version 2.74.1:
  + Fix support for older versions of Vala.
  + Fix trying to build sysprof as a subproject on Windows.
  + Fix missing `extern "C"` in an installed header.
  + Improve `gssapi` dependency handling.
  + Fix `libsoup-doc` build target.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637755200">- Update to version 2.74.2:
  + Error when libsoup3 is already loaded before libsoup2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 2.74.3:
  + Add missing g-i annotations to `soup_address_get_sockaddr()`
    and `soup_socket_read_until()`.
  + Add missing `extern` when building on Windows.
  + Update libxml2 fallback for meson wrap.
  + Improvements when using libsoup with meson wraps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690804800">- Add upstream bug fixes:
  + 4d12c3e5.patch: lib: Add g_task_set_source_tag() everywhere
  + 48b3b611.patch: lib: Add names to various GSources
- Drop no longer valid translation-update-upstream BuildRequires
  and macro.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1702555200">- Add ced3c5d8.patch: Fix build with libxml2-2.12.0 and clang-17.</changelog>
  <changelog author="mgorse@suse.com" date="1731499200">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add libsoup-CVE-2024-52532.patch: websocket: Process the frame as
  soon as we read data (boo#1233287 CVE-2024-52532).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).</changelog>
  <changelog author="mgorse@suse.com" date="1746014400">- Add more CVE fixes:
  + ef6c4bf6.patch (boo#1240750 CVE-2025-2784)
  + 96c22b67.patch (boo#1240750 CVE-2025-2784)
  + 19124679.patch (boo#1240752 CVE-2025-32050)
  + a5b86bfc.patch (boo#1240756 CVE-2025-32052)
  + 5739a090.patch (boo#1240757 CVE-2025-32053)
  + c9083869.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767700800">- Add libsoup2-CVE-2025-14523.patch: Reject duplicated Host in
  headers (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!489).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767873600">- Refresh libsoup2-CVE-2025-14523.patch: Follow the update of
  upstream (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!491).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1768305600">- Add libsoup2-CVE-2026-0719.patch: Fix overflow for password
  md4sum (bsc#1256399, CVE-2026-0719, glgo#GNOME/libsoup!493).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1770120000">- Add libsoup2-CVE-2026-1761.patch: multipart: check length of bytes
  read soup_filter_input_stream_read_until()
  (bsc#1257598, CVE-2026-1761, glgo#GNOME/libsoup!496).</changelog>
  <changelog author="mgorse@suse.com" date="1770379200">- Add libsoup2-CVE-2026-0716.patch: Fix out-of-bounds read for
  websocket (bsc#1256418, CVE-2026-0716, glgo#GNOME/libsoup!494).</changelog>
  <changelog author="mgorse@suse.com" date="1770638400">- Add libsoup2-CVE-2025-4476.patch: fix crash in
  soup_auth_digest_get_protection_space (bsc#1243422
  CVE-2025-4476 glgo#GNOME/libsoup#440).
- Increase test timeout for all arches except x86_64 and run tests
  again should they fail the first time, the testsuite is flaky.</changelog>
  <changelog author="mgorse@suse.com" date="1771588800">- Add more CVE fixes:
  + libsoup2-CVE-2025-32049.patch (bsc#1240751 CVE-2025-32049
    glgo#GNOME/libsoup#390)
  + libsoup2-CVE-2026-2443.patch (bsc#1258170 CVE-2026-2443
    glgo#GNOME/libsoup#487)
  + libsoup2-CVE-2026-2369.patch (bsc#1258120 CVE-2026-2369
    glgo#GNOME/libsoup!508)
  + libsoup2-CVE-2026-2708.patch (bsc#1258508 CVE-2026-2708
    glgo#GNOME/libsoup#500)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1772020800">- Add libsoup-CVE-2026-1760.patch: server: close the connection
  after responsing a request containing...
  (bsc#1257597, CVE-2026-1760, glgo#GNOME/libsoup#475).
- Add libsoup-CVE-2026-1467.patch: uri-utils: do host validation
  when checking if a GUri is valid
  (bsc#1257398, CVE-2026-1467, glgo#GNOME/libsoup#488).
- Add libsoup-CVE-2026-1539.patch: Also remove Proxy-Authorization
  header on cross origin redirect
  (bsc#1257441, CVE-2026-1539, glgo#GNOME/libsoup#489).</changelog>
  <changelog author="mgorse@suse.com" date="1772712000">- Update libsoup2-CVE-2026-0716.patch to incorporate
  glgo#GNOME/libsoup!518. The original fix was incomplete
  (bsc#1256418 CVE-2026-0716 glgo#GNOME/libsoup#476).</changelog>
</package>
<package pkgid="05862794d7e486a8bf52cefaeb7e9337332386c9d1f1de2b388637fd9886d268" name="libsoup2" arch="src">
  <version epoch="0" ver="2.74.3" rel="150600.4.6.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1587038400">- Add libsoup-disable-ssl-tests.patch: Disable ssl tests, as they
  randomly fail for all arches (glgo#GNOME/libsoup#188).
- Rebase/refresh patches.</changelog>
  <changelog author="dimstar@opensuse.org" date="1589198400">- Autodetect the location of krb5-config: krb5 adds itself to
  $PATH.</changelog>
  <changelog author="dimstar@opensuse.org" date="1599220800">- Update to version 2.71.0:
  + Redesign directory list returned for `file://` requests.
  + Add `SOUP_COOKIE_JAR_ACCEPT_GRANDFATHERED_THIRD_PARTY` policy.
  + Add soup_message_is_feature_disabled() API.
  + Fix potential leak when setting SoupSession:tls-interaction.
  + Fix building with Visual Studio.
  + Updated translations.
- Drop libsoup-test-utils-fix.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1599307200">- Update to version 2.71.1:
  + Add support for 308 Premanent Redirect.
  + Add basic sysprof profiling for HTTP messages.
  + Various build fixes.
  + Updated translations.
- Add pkgconfig(sysprof-4) and pkgconfig(sysprof-capture-4)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1600084800">- Update to version 2.72.0:
  + Fix critical after cancelling a message that failed auth.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Disable sysprof integration: this causes a nasty build cycle.
  + Pass -Dsysprof=disabled to meson.
  + Remove pkgconfig(sysprof-4) and pkgconfig(sysprof-capture-4),
    as well as pkgconfig(sysprof-4) in the devel project.</changelog>
  <changelog author="pmonreal@suse.com" date="1612785600">- Fix tests: fix SSL test with glib-networking &gt;= 2.65.90
  * See https://gitlab.gnome.org/GNOME/libsoup/issues/201
- Add libsoup-fix-SSL-test.patch
- Remove patches:
  * libsoup-disable-ssl-tests.patch
  * libsoup-disable-hsts-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1612785601">- Disable tls_interaction-test until resolved upstream
  * See https://gitlab.gnome.org/GNOME/libsoup/issues/120
- Add libsoup-skip-tls_interaction-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614340800">- Run the regression tests using GnuTLS NORMAL priority</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.74.0:
  + IMPORTANT: Enable ssl-use-system-ca-file by default on
    deprecated Sync and Async sessions.
  + Fix including headers in C++ projects.
  + Fix attempting to resolve relative paths with data URIs.
  + Support Content-Disposition headers without a disposition-type.
  + Fix building VAPI bindings with latest Vala.
  + Fix sending a Content-Length header in a response with status
    code of 1xx or 204.
  + Updated translations.
- Drop libsoup-fix-SSL-test.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629892800">- Rename source package to libsoup2, as a compatibility package
  while the world moves to libsoup3 (with HTTP/2 support).</changelog>
  <changelog author="dimstar@opensuse.org" date="1632916800">- Add Provides: libsoup2 to the library, so that the lang package
  is installable.
- Remove the left-over provides/obsoltes for libsoup (which is now
  libsoup 3).</changelog>
  <changelog author="bwiedemann@suse.com" date="1633176000">- Add libsoup2-extend-test-cert.patch to fix tests after 2027 (boo#1102840)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635076800">- Update to version 2.74.1:
  + Fix support for older versions of Vala.
  + Fix trying to build sysprof as a subproject on Windows.
  + Fix missing `extern "C"` in an installed header.
  + Improve `gssapi` dependency handling.
  + Fix `libsoup-doc` build target.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637755200">- Update to version 2.74.2:
  + Error when libsoup3 is already loaded before libsoup2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 2.74.3:
  + Add missing g-i annotations to `soup_address_get_sockaddr()`
    and `soup_socket_read_until()`.
  + Add missing `extern` when building on Windows.
  + Update libxml2 fallback for meson wrap.
  + Improvements when using libsoup with meson wraps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690804800">- Add upstream bug fixes:
  + 4d12c3e5.patch: lib: Add g_task_set_source_tag() everywhere
  + 48b3b611.patch: lib: Add names to various GSources
- Drop no longer valid translation-update-upstream BuildRequires
  and macro.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1702555200">- Add ced3c5d8.patch: Fix build with libxml2-2.12.0 and clang-17.</changelog>
  <changelog author="mgorse@suse.com" date="1731499200">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add libsoup-CVE-2024-52532.patch: websocket: Process the frame as
  soon as we read data (boo#1233287 CVE-2024-52532).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).</changelog>
  <changelog author="mgorse@suse.com" date="1746014400">- Add more CVE fixes:
  + ef6c4bf6.patch (boo#1240750 CVE-2025-2784)
  + 96c22b67.patch (boo#1240750 CVE-2025-2784)
  + 19124679.patch (boo#1240752 CVE-2025-32050)
  + a5b86bfc.patch (boo#1240756 CVE-2025-32052)
  + 5739a090.patch (boo#1240757 CVE-2025-32053)
  + c9083869.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)</changelog>
</package>
<package pkgid="23c6860a29192f7b7c5866aeb0acdfbded49e7582f07e614c363beb084e01083" name="libsoup2" arch="src">
  <version epoch="0" ver="2.74.3" rel="150600.4.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1589198400">- Autodetect the location of krb5-config: krb5 adds itself to
  $PATH.</changelog>
  <changelog author="dimstar@opensuse.org" date="1599220800">- Update to version 2.71.0:
  + Redesign directory list returned for `file://` requests.
  + Add `SOUP_COOKIE_JAR_ACCEPT_GRANDFATHERED_THIRD_PARTY` policy.
  + Add soup_message_is_feature_disabled() API.
  + Fix potential leak when setting SoupSession:tls-interaction.
  + Fix building with Visual Studio.
  + Updated translations.
- Drop libsoup-test-utils-fix.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1599307200">- Update to version 2.71.1:
  + Add support for 308 Premanent Redirect.
  + Add basic sysprof profiling for HTTP messages.
  + Various build fixes.
  + Updated translations.
- Add pkgconfig(sysprof-4) and pkgconfig(sysprof-capture-4)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1600084800">- Update to version 2.72.0:
  + Fix critical after cancelling a message that failed auth.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Disable sysprof integration: this causes a nasty build cycle.
  + Pass -Dsysprof=disabled to meson.
  + Remove pkgconfig(sysprof-4) and pkgconfig(sysprof-capture-4),
    as well as pkgconfig(sysprof-4) in the devel project.</changelog>
  <changelog author="pmonreal@suse.com" date="1612785600">- Fix tests: fix SSL test with glib-networking &gt;= 2.65.90
  * See https://gitlab.gnome.org/GNOME/libsoup/issues/201
- Add libsoup-fix-SSL-test.patch
- Remove patches:
  * libsoup-disable-ssl-tests.patch
  * libsoup-disable-hsts-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1612785601">- Disable tls_interaction-test until resolved upstream
  * See https://gitlab.gnome.org/GNOME/libsoup/issues/120
- Add libsoup-skip-tls_interaction-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614340800">- Run the regression tests using GnuTLS NORMAL priority</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.74.0:
  + IMPORTANT: Enable ssl-use-system-ca-file by default on
    deprecated Sync and Async sessions.
  + Fix including headers in C++ projects.
  + Fix attempting to resolve relative paths with data URIs.
  + Support Content-Disposition headers without a disposition-type.
  + Fix building VAPI bindings with latest Vala.
  + Fix sending a Content-Length header in a response with status
    code of 1xx or 204.
  + Updated translations.
- Drop libsoup-fix-SSL-test.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629892800">- Rename source package to libsoup2, as a compatibility package
  while the world moves to libsoup3 (with HTTP/2 support).</changelog>
  <changelog author="dimstar@opensuse.org" date="1632916800">- Add Provides: libsoup2 to the library, so that the lang package
  is installable.
- Remove the left-over provides/obsoltes for libsoup (which is now
  libsoup 3).</changelog>
  <changelog author="bwiedemann@suse.com" date="1633176000">- Add libsoup2-extend-test-cert.patch to fix tests after 2027 (boo#1102840)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635076800">- Update to version 2.74.1:
  + Fix support for older versions of Vala.
  + Fix trying to build sysprof as a subproject on Windows.
  + Fix missing `extern "C"` in an installed header.
  + Improve `gssapi` dependency handling.
  + Fix `libsoup-doc` build target.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637755200">- Update to version 2.74.2:
  + Error when libsoup3 is already loaded before libsoup2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 2.74.3:
  + Add missing g-i annotations to `soup_address_get_sockaddr()`
    and `soup_socket_read_until()`.
  + Add missing `extern` when building on Windows.
  + Update libxml2 fallback for meson wrap.
  + Improvements when using libsoup with meson wraps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690804800">- Add upstream bug fixes:
  + 4d12c3e5.patch: lib: Add g_task_set_source_tag() everywhere
  + 48b3b611.patch: lib: Add names to various GSources
- Drop no longer valid translation-update-upstream BuildRequires
  and macro.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1702555200">- Add ced3c5d8.patch: Fix build with libxml2-2.12.0 and clang-17.</changelog>
  <changelog author="mgorse@suse.com" date="1731499200">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add libsoup-CVE-2024-52532.patch: websocket: Process the frame as
  soon as we read data (boo#1233287 CVE-2024-52532).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).</changelog>
  <changelog author="mgorse@suse.com" date="1746014400">- Add more CVE fixes:
  + ef6c4bf6.patch (boo#1240750 CVE-2025-2784)
  + 96c22b67.patch (boo#1240750 CVE-2025-2784)
  + 19124679.patch (boo#1240752 CVE-2025-32050)
  + a5b86bfc.patch (boo#1240756 CVE-2025-32052)
  + 5739a090.patch (boo#1240757 CVE-2025-32053)
  + c9083869.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
</package>
<package pkgid="8001d519736d428188bd93415583f2ff82af6bd66a867b366e69b9bd1b8c153f" name="libsoup2-devel" arch="x86_64">
  <version epoch="0" ver="2.74.3" rel="150600.4.12.1"/>
  <changelog author="dimstar@opensuse.org" date="1599220800">- Update to version 2.71.0:
  + Redesign directory list returned for `file://` requests.
  + Add `SOUP_COOKIE_JAR_ACCEPT_GRANDFATHERED_THIRD_PARTY` policy.
  + Add soup_message_is_feature_disabled() API.
  + Fix potential leak when setting SoupSession:tls-interaction.
  + Fix building with Visual Studio.
  + Updated translations.
- Drop libsoup-test-utils-fix.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1599307200">- Update to version 2.71.1:
  + Add support for 308 Premanent Redirect.
  + Add basic sysprof profiling for HTTP messages.
  + Various build fixes.
  + Updated translations.
- Add pkgconfig(sysprof-4) and pkgconfig(sysprof-capture-4)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1600084800">- Update to version 2.72.0:
  + Fix critical after cancelling a message that failed auth.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Disable sysprof integration: this causes a nasty build cycle.
  + Pass -Dsysprof=disabled to meson.
  + Remove pkgconfig(sysprof-4) and pkgconfig(sysprof-capture-4),
    as well as pkgconfig(sysprof-4) in the devel project.</changelog>
  <changelog author="pmonreal@suse.com" date="1612785600">- Fix tests: fix SSL test with glib-networking &gt;= 2.65.90
  * See https://gitlab.gnome.org/GNOME/libsoup/issues/201
- Add libsoup-fix-SSL-test.patch
- Remove patches:
  * libsoup-disable-ssl-tests.patch
  * libsoup-disable-hsts-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1612785601">- Disable tls_interaction-test until resolved upstream
  * See https://gitlab.gnome.org/GNOME/libsoup/issues/120
- Add libsoup-skip-tls_interaction-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614340800">- Run the regression tests using GnuTLS NORMAL priority</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.74.0:
  + IMPORTANT: Enable ssl-use-system-ca-file by default on
    deprecated Sync and Async sessions.
  + Fix including headers in C++ projects.
  + Fix attempting to resolve relative paths with data URIs.
  + Support Content-Disposition headers without a disposition-type.
  + Fix building VAPI bindings with latest Vala.
  + Fix sending a Content-Length header in a response with status
    code of 1xx or 204.
  + Updated translations.
- Drop libsoup-fix-SSL-test.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629892800">- Rename source package to libsoup2, as a compatibility package
  while the world moves to libsoup3 (with HTTP/2 support).</changelog>
  <changelog author="dimstar@opensuse.org" date="1632916800">- Add Provides: libsoup2 to the library, so that the lang package
  is installable.
- Remove the left-over provides/obsoltes for libsoup (which is now
  libsoup 3).</changelog>
  <changelog author="bwiedemann@suse.com" date="1633176000">- Add libsoup2-extend-test-cert.patch to fix tests after 2027 (boo#1102840)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635076800">- Update to version 2.74.1:
  + Fix support for older versions of Vala.
  + Fix trying to build sysprof as a subproject on Windows.
  + Fix missing `extern "C"` in an installed header.
  + Improve `gssapi` dependency handling.
  + Fix `libsoup-doc` build target.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637755200">- Update to version 2.74.2:
  + Error when libsoup3 is already loaded before libsoup2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 2.74.3:
  + Add missing g-i annotations to `soup_address_get_sockaddr()`
    and `soup_socket_read_until()`.
  + Add missing `extern` when building on Windows.
  + Update libxml2 fallback for meson wrap.
  + Improvements when using libsoup with meson wraps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690804800">- Add upstream bug fixes:
  + 4d12c3e5.patch: lib: Add g_task_set_source_tag() everywhere
  + 48b3b611.patch: lib: Add names to various GSources
- Drop no longer valid translation-update-upstream BuildRequires
  and macro.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1702555200">- Add ced3c5d8.patch: Fix build with libxml2-2.12.0 and clang-17.</changelog>
  <changelog author="mgorse@suse.com" date="1731499200">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add libsoup-CVE-2024-52532.patch: websocket: Process the frame as
  soon as we read data (boo#1233287 CVE-2024-52532).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).</changelog>
  <changelog author="mgorse@suse.com" date="1746014400">- Add more CVE fixes:
  + ef6c4bf6.patch (boo#1240750 CVE-2025-2784)
  + 96c22b67.patch (boo#1240750 CVE-2025-2784)
  + 19124679.patch (boo#1240752 CVE-2025-32050)
  + a5b86bfc.patch (boo#1240756 CVE-2025-32052)
  + 5739a090.patch (boo#1240757 CVE-2025-32053)
  + c9083869.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
</package>
<package pkgid="b142aeb802618519fdb7fb726d51983b51b3ff80135aecbab798b2a0c62bad8c" name="libsoup2-devel" arch="x86_64">
  <version epoch="0" ver="2.74.3" rel="150600.4.19.1"/>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Disable sysprof integration: this causes a nasty build cycle.
  + Pass -Dsysprof=disabled to meson.
  + Remove pkgconfig(sysprof-4) and pkgconfig(sysprof-capture-4),
    as well as pkgconfig(sysprof-4) in the devel project.</changelog>
  <changelog author="pmonreal@suse.com" date="1612785600">- Fix tests: fix SSL test with glib-networking &gt;= 2.65.90
  * See https://gitlab.gnome.org/GNOME/libsoup/issues/201
- Add libsoup-fix-SSL-test.patch
- Remove patches:
  * libsoup-disable-ssl-tests.patch
  * libsoup-disable-hsts-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1612785601">- Disable tls_interaction-test until resolved upstream
  * See https://gitlab.gnome.org/GNOME/libsoup/issues/120
- Add libsoup-skip-tls_interaction-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614340800">- Run the regression tests using GnuTLS NORMAL priority</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.74.0:
  + IMPORTANT: Enable ssl-use-system-ca-file by default on
    deprecated Sync and Async sessions.
  + Fix including headers in C++ projects.
  + Fix attempting to resolve relative paths with data URIs.
  + Support Content-Disposition headers without a disposition-type.
  + Fix building VAPI bindings with latest Vala.
  + Fix sending a Content-Length header in a response with status
    code of 1xx or 204.
  + Updated translations.
- Drop libsoup-fix-SSL-test.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629892800">- Rename source package to libsoup2, as a compatibility package
  while the world moves to libsoup3 (with HTTP/2 support).</changelog>
  <changelog author="dimstar@opensuse.org" date="1632916800">- Add Provides: libsoup2 to the library, so that the lang package
  is installable.
- Remove the left-over provides/obsoltes for libsoup (which is now
  libsoup 3).</changelog>
  <changelog author="bwiedemann@suse.com" date="1633176000">- Add libsoup2-extend-test-cert.patch to fix tests after 2027 (boo#1102840)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635076800">- Update to version 2.74.1:
  + Fix support for older versions of Vala.
  + Fix trying to build sysprof as a subproject on Windows.
  + Fix missing `extern "C"` in an installed header.
  + Improve `gssapi` dependency handling.
  + Fix `libsoup-doc` build target.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637755200">- Update to version 2.74.2:
  + Error when libsoup3 is already loaded before libsoup2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 2.74.3:
  + Add missing g-i annotations to `soup_address_get_sockaddr()`
    and `soup_socket_read_until()`.
  + Add missing `extern` when building on Windows.
  + Update libxml2 fallback for meson wrap.
  + Improvements when using libsoup with meson wraps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690804800">- Add upstream bug fixes:
  + 4d12c3e5.patch: lib: Add g_task_set_source_tag() everywhere
  + 48b3b611.patch: lib: Add names to various GSources
- Drop no longer valid translation-update-upstream BuildRequires
  and macro.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1702555200">- Add ced3c5d8.patch: Fix build with libxml2-2.12.0 and clang-17.</changelog>
  <changelog author="mgorse@suse.com" date="1731499200">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add libsoup-CVE-2024-52532.patch: websocket: Process the frame as
  soon as we read data (boo#1233287 CVE-2024-52532).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).</changelog>
  <changelog author="mgorse@suse.com" date="1746014400">- Add more CVE fixes:
  + ef6c4bf6.patch (boo#1240750 CVE-2025-2784)
  + 96c22b67.patch (boo#1240750 CVE-2025-2784)
  + 19124679.patch (boo#1240752 CVE-2025-32050)
  + a5b86bfc.patch (boo#1240756 CVE-2025-32052)
  + 5739a090.patch (boo#1240757 CVE-2025-32053)
  + c9083869.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767700800">- Add libsoup2-CVE-2025-14523.patch: Reject duplicated Host in
  headers (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!489).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767873600">- Refresh libsoup2-CVE-2025-14523.patch: Follow the update of
  upstream (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!491).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1768305600">- Add libsoup2-CVE-2026-0719.patch: Fix overflow for password
  md4sum (bsc#1256399, CVE-2026-0719, glgo#GNOME/libsoup!493).</changelog>
</package>
<package pkgid="fb36062f02362f558d3d5620b29fabc04a8411b6f25c13aa45c125bc435dbaf2" name="libsoup2-devel" arch="x86_64">
  <version epoch="0" ver="2.74.3" rel="150600.4.24.1"/>
  <changelog author="pmonreal@suse.com" date="1614340800">- Run the regression tests using GnuTLS NORMAL priority</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.74.0:
  + IMPORTANT: Enable ssl-use-system-ca-file by default on
    deprecated Sync and Async sessions.
  + Fix including headers in C++ projects.
  + Fix attempting to resolve relative paths with data URIs.
  + Support Content-Disposition headers without a disposition-type.
  + Fix building VAPI bindings with latest Vala.
  + Fix sending a Content-Length header in a response with status
    code of 1xx or 204.
  + Updated translations.
- Drop libsoup-fix-SSL-test.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629892800">- Rename source package to libsoup2, as a compatibility package
  while the world moves to libsoup3 (with HTTP/2 support).</changelog>
  <changelog author="dimstar@opensuse.org" date="1632916800">- Add Provides: libsoup2 to the library, so that the lang package
  is installable.
- Remove the left-over provides/obsoltes for libsoup (which is now
  libsoup 3).</changelog>
  <changelog author="bwiedemann@suse.com" date="1633176000">- Add libsoup2-extend-test-cert.patch to fix tests after 2027 (boo#1102840)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635076800">- Update to version 2.74.1:
  + Fix support for older versions of Vala.
  + Fix trying to build sysprof as a subproject on Windows.
  + Fix missing `extern "C"` in an installed header.
  + Improve `gssapi` dependency handling.
  + Fix `libsoup-doc` build target.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637755200">- Update to version 2.74.2:
  + Error when libsoup3 is already loaded before libsoup2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 2.74.3:
  + Add missing g-i annotations to `soup_address_get_sockaddr()`
    and `soup_socket_read_until()`.
  + Add missing `extern` when building on Windows.
  + Update libxml2 fallback for meson wrap.
  + Improvements when using libsoup with meson wraps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690804800">- Add upstream bug fixes:
  + 4d12c3e5.patch: lib: Add g_task_set_source_tag() everywhere
  + 48b3b611.patch: lib: Add names to various GSources
- Drop no longer valid translation-update-upstream BuildRequires
  and macro.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1702555200">- Add ced3c5d8.patch: Fix build with libxml2-2.12.0 and clang-17.</changelog>
  <changelog author="mgorse@suse.com" date="1731499200">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add libsoup-CVE-2024-52532.patch: websocket: Process the frame as
  soon as we read data (boo#1233287 CVE-2024-52532).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).</changelog>
  <changelog author="mgorse@suse.com" date="1746014400">- Add more CVE fixes:
  + ef6c4bf6.patch (boo#1240750 CVE-2025-2784)
  + 96c22b67.patch (boo#1240750 CVE-2025-2784)
  + 19124679.patch (boo#1240752 CVE-2025-32050)
  + a5b86bfc.patch (boo#1240756 CVE-2025-32052)
  + 5739a090.patch (boo#1240757 CVE-2025-32053)
  + c9083869.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767700800">- Add libsoup2-CVE-2025-14523.patch: Reject duplicated Host in
  headers (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!489).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767873600">- Refresh libsoup2-CVE-2025-14523.patch: Follow the update of
  upstream (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!491).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1768305600">- Add libsoup2-CVE-2026-0719.patch: Fix overflow for password
  md4sum (bsc#1256399, CVE-2026-0719, glgo#GNOME/libsoup!493).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1770120000">- Add libsoup2-CVE-2026-1761.patch: multipart: check length of bytes
  read soup_filter_input_stream_read_until()
  (bsc#1257598, CVE-2026-1761, glgo#GNOME/libsoup!496).</changelog>
  <changelog author="mgorse@suse.com" date="1770379200">- Add libsoup2-CVE-2026-0716.patch: Fix out-of-bounds read for
  websocket (bsc#1256418, CVE-2026-0716, glgo#GNOME/libsoup!494).</changelog>
  <changelog author="mgorse@suse.com" date="1770638400">- Add libsoup2-CVE-2025-4476.patch: fix crash in
  soup_auth_digest_get_protection_space (bsc#1243422
  CVE-2025-4476 glgo#GNOME/libsoup#440).
- Increase test timeout for all arches except x86_64 and run tests
  again should they fail the first time, the testsuite is flaky.</changelog>
</package>
<package pkgid="a55cf094c40c0ba59eaae4a72bf36712f9b510e826b08c83d290451b570bd57e" name="libsoup2-devel" arch="x86_64">
  <version epoch="0" ver="2.74.3" rel="150600.4.27.1"/>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.74.0:
  + IMPORTANT: Enable ssl-use-system-ca-file by default on
    deprecated Sync and Async sessions.
  + Fix including headers in C++ projects.
  + Fix attempting to resolve relative paths with data URIs.
  + Support Content-Disposition headers without a disposition-type.
  + Fix building VAPI bindings with latest Vala.
  + Fix sending a Content-Length header in a response with status
    code of 1xx or 204.
  + Updated translations.
- Drop libsoup-fix-SSL-test.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629892800">- Rename source package to libsoup2, as a compatibility package
  while the world moves to libsoup3 (with HTTP/2 support).</changelog>
  <changelog author="dimstar@opensuse.org" date="1632916800">- Add Provides: libsoup2 to the library, so that the lang package
  is installable.
- Remove the left-over provides/obsoltes for libsoup (which is now
  libsoup 3).</changelog>
  <changelog author="bwiedemann@suse.com" date="1633176000">- Add libsoup2-extend-test-cert.patch to fix tests after 2027 (boo#1102840)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635076800">- Update to version 2.74.1:
  + Fix support for older versions of Vala.
  + Fix trying to build sysprof as a subproject on Windows.
  + Fix missing `extern "C"` in an installed header.
  + Improve `gssapi` dependency handling.
  + Fix `libsoup-doc` build target.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637755200">- Update to version 2.74.2:
  + Error when libsoup3 is already loaded before libsoup2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 2.74.3:
  + Add missing g-i annotations to `soup_address_get_sockaddr()`
    and `soup_socket_read_until()`.
  + Add missing `extern` when building on Windows.
  + Update libxml2 fallback for meson wrap.
  + Improvements when using libsoup with meson wraps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690804800">- Add upstream bug fixes:
  + 4d12c3e5.patch: lib: Add g_task_set_source_tag() everywhere
  + 48b3b611.patch: lib: Add names to various GSources
- Drop no longer valid translation-update-upstream BuildRequires
  and macro.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1702555200">- Add ced3c5d8.patch: Fix build with libxml2-2.12.0 and clang-17.</changelog>
  <changelog author="mgorse@suse.com" date="1731499200">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add libsoup-CVE-2024-52532.patch: websocket: Process the frame as
  soon as we read data (boo#1233287 CVE-2024-52532).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).</changelog>
  <changelog author="mgorse@suse.com" date="1746014400">- Add more CVE fixes:
  + ef6c4bf6.patch (boo#1240750 CVE-2025-2784)
  + 96c22b67.patch (boo#1240750 CVE-2025-2784)
  + 19124679.patch (boo#1240752 CVE-2025-32050)
  + a5b86bfc.patch (boo#1240756 CVE-2025-32052)
  + 5739a090.patch (boo#1240757 CVE-2025-32053)
  + c9083869.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767700800">- Add libsoup2-CVE-2025-14523.patch: Reject duplicated Host in
  headers (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!489).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767873600">- Refresh libsoup2-CVE-2025-14523.patch: Follow the update of
  upstream (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!491).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1768305600">- Add libsoup2-CVE-2026-0719.patch: Fix overflow for password
  md4sum (bsc#1256399, CVE-2026-0719, glgo#GNOME/libsoup!493).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1770120000">- Add libsoup2-CVE-2026-1761.patch: multipart: check length of bytes
  read soup_filter_input_stream_read_until()
  (bsc#1257598, CVE-2026-1761, glgo#GNOME/libsoup!496).</changelog>
  <changelog author="mgorse@suse.com" date="1770379200">- Add libsoup2-CVE-2026-0716.patch: Fix out-of-bounds read for
  websocket (bsc#1256418, CVE-2026-0716, glgo#GNOME/libsoup!494).</changelog>
  <changelog author="mgorse@suse.com" date="1770638400">- Add libsoup2-CVE-2025-4476.patch: fix crash in
  soup_auth_digest_get_protection_space (bsc#1243422
  CVE-2025-4476 glgo#GNOME/libsoup#440).
- Increase test timeout for all arches except x86_64 and run tests
  again should they fail the first time, the testsuite is flaky.</changelog>
  <changelog author="mgorse@suse.com" date="1771588800">- Add more CVE fixes:
  + libsoup2-CVE-2025-32049.patch (bsc#1240751 CVE-2025-32049
    glgo#GNOME/libsoup#390)
  + libsoup2-CVE-2026-2443.patch (bsc#1258170 CVE-2026-2443
    glgo#GNOME/libsoup#487)
  + libsoup2-CVE-2026-2369.patch (bsc#1258120 CVE-2026-2369
    glgo#GNOME/libsoup!508)
  + libsoup2-CVE-2026-2708.patch (bsc#1258508 CVE-2026-2708
    glgo#GNOME/libsoup#500)</changelog>
</package>
<package pkgid="60eea7adde6cbf83039a01ef206cd4ae1c5433db91d14a33fff00e14555cfb53" name="libsoup2-devel" arch="x86_64">
  <version epoch="0" ver="2.74.3" rel="150600.4.30.1"/>
  <changelog author="dimstar@opensuse.org" date="1629892800">- Rename source package to libsoup2, as a compatibility package
  while the world moves to libsoup3 (with HTTP/2 support).</changelog>
  <changelog author="dimstar@opensuse.org" date="1632916800">- Add Provides: libsoup2 to the library, so that the lang package
  is installable.
- Remove the left-over provides/obsoltes for libsoup (which is now
  libsoup 3).</changelog>
  <changelog author="bwiedemann@suse.com" date="1633176000">- Add libsoup2-extend-test-cert.patch to fix tests after 2027 (boo#1102840)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635076800">- Update to version 2.74.1:
  + Fix support for older versions of Vala.
  + Fix trying to build sysprof as a subproject on Windows.
  + Fix missing `extern "C"` in an installed header.
  + Improve `gssapi` dependency handling.
  + Fix `libsoup-doc` build target.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637755200">- Update to version 2.74.2:
  + Error when libsoup3 is already loaded before libsoup2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 2.74.3:
  + Add missing g-i annotations to `soup_address_get_sockaddr()`
    and `soup_socket_read_until()`.
  + Add missing `extern` when building on Windows.
  + Update libxml2 fallback for meson wrap.
  + Improvements when using libsoup with meson wraps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690804800">- Add upstream bug fixes:
  + 4d12c3e5.patch: lib: Add g_task_set_source_tag() everywhere
  + 48b3b611.patch: lib: Add names to various GSources
- Drop no longer valid translation-update-upstream BuildRequires
  and macro.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1702555200">- Add ced3c5d8.patch: Fix build with libxml2-2.12.0 and clang-17.</changelog>
  <changelog author="mgorse@suse.com" date="1731499200">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add libsoup-CVE-2024-52532.patch: websocket: Process the frame as
  soon as we read data (boo#1233287 CVE-2024-52532).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).</changelog>
  <changelog author="mgorse@suse.com" date="1746014400">- Add more CVE fixes:
  + ef6c4bf6.patch (boo#1240750 CVE-2025-2784)
  + 96c22b67.patch (boo#1240750 CVE-2025-2784)
  + 19124679.patch (boo#1240752 CVE-2025-32050)
  + a5b86bfc.patch (boo#1240756 CVE-2025-32052)
  + 5739a090.patch (boo#1240757 CVE-2025-32053)
  + c9083869.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767700800">- Add libsoup2-CVE-2025-14523.patch: Reject duplicated Host in
  headers (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!489).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767873600">- Refresh libsoup2-CVE-2025-14523.patch: Follow the update of
  upstream (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!491).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1768305600">- Add libsoup2-CVE-2026-0719.patch: Fix overflow for password
  md4sum (bsc#1256399, CVE-2026-0719, glgo#GNOME/libsoup!493).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1770120000">- Add libsoup2-CVE-2026-1761.patch: multipart: check length of bytes
  read soup_filter_input_stream_read_until()
  (bsc#1257598, CVE-2026-1761, glgo#GNOME/libsoup!496).</changelog>
  <changelog author="mgorse@suse.com" date="1770379200">- Add libsoup2-CVE-2026-0716.patch: Fix out-of-bounds read for
  websocket (bsc#1256418, CVE-2026-0716, glgo#GNOME/libsoup!494).</changelog>
  <changelog author="mgorse@suse.com" date="1770638400">- Add libsoup2-CVE-2025-4476.patch: fix crash in
  soup_auth_digest_get_protection_space (bsc#1243422
  CVE-2025-4476 glgo#GNOME/libsoup#440).
- Increase test timeout for all arches except x86_64 and run tests
  again should they fail the first time, the testsuite is flaky.</changelog>
  <changelog author="mgorse@suse.com" date="1771588800">- Add more CVE fixes:
  + libsoup2-CVE-2025-32049.patch (bsc#1240751 CVE-2025-32049
    glgo#GNOME/libsoup#390)
  + libsoup2-CVE-2026-2443.patch (bsc#1258170 CVE-2026-2443
    glgo#GNOME/libsoup#487)
  + libsoup2-CVE-2026-2369.patch (bsc#1258120 CVE-2026-2369
    glgo#GNOME/libsoup!508)
  + libsoup2-CVE-2026-2708.patch (bsc#1258508 CVE-2026-2708
    glgo#GNOME/libsoup#500)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1772020800">- Add libsoup-CVE-2026-1760.patch: server: close the connection
  after responsing a request containing...
  (bsc#1257597, CVE-2026-1760, glgo#GNOME/libsoup#475).
- Add libsoup-CVE-2026-1467.patch: uri-utils: do host validation
  when checking if a GUri is valid
  (bsc#1257398, CVE-2026-1467, glgo#GNOME/libsoup#488).
- Add libsoup-CVE-2026-1539.patch: Also remove Proxy-Authorization
  header on cross origin redirect
  (bsc#1257441, CVE-2026-1539, glgo#GNOME/libsoup#489).</changelog>
</package>
<package pkgid="16759bb549b379fb12d0226e3f581e884b16530d1accd2eaa4f9b39c45bb46fb" name="libsoup2-devel" arch="x86_64">
  <version epoch="0" ver="2.74.3" rel="150600.4.33.1"/>
  <changelog author="dimstar@opensuse.org" date="1632916800">- Add Provides: libsoup2 to the library, so that the lang package
  is installable.
- Remove the left-over provides/obsoltes for libsoup (which is now
  libsoup 3).</changelog>
  <changelog author="bwiedemann@suse.com" date="1633176000">- Add libsoup2-extend-test-cert.patch to fix tests after 2027 (boo#1102840)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635076800">- Update to version 2.74.1:
  + Fix support for older versions of Vala.
  + Fix trying to build sysprof as a subproject on Windows.
  + Fix missing `extern "C"` in an installed header.
  + Improve `gssapi` dependency handling.
  + Fix `libsoup-doc` build target.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637755200">- Update to version 2.74.2:
  + Error when libsoup3 is already loaded before libsoup2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 2.74.3:
  + Add missing g-i annotations to `soup_address_get_sockaddr()`
    and `soup_socket_read_until()`.
  + Add missing `extern` when building on Windows.
  + Update libxml2 fallback for meson wrap.
  + Improvements when using libsoup with meson wraps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690804800">- Add upstream bug fixes:
  + 4d12c3e5.patch: lib: Add g_task_set_source_tag() everywhere
  + 48b3b611.patch: lib: Add names to various GSources
- Drop no longer valid translation-update-upstream BuildRequires
  and macro.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1702555200">- Add ced3c5d8.patch: Fix build with libxml2-2.12.0 and clang-17.</changelog>
  <changelog author="mgorse@suse.com" date="1731499200">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add libsoup-CVE-2024-52532.patch: websocket: Process the frame as
  soon as we read data (boo#1233287 CVE-2024-52532).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).</changelog>
  <changelog author="mgorse@suse.com" date="1746014400">- Add more CVE fixes:
  + ef6c4bf6.patch (boo#1240750 CVE-2025-2784)
  + 96c22b67.patch (boo#1240750 CVE-2025-2784)
  + 19124679.patch (boo#1240752 CVE-2025-32050)
  + a5b86bfc.patch (boo#1240756 CVE-2025-32052)
  + 5739a090.patch (boo#1240757 CVE-2025-32053)
  + c9083869.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767700800">- Add libsoup2-CVE-2025-14523.patch: Reject duplicated Host in
  headers (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!489).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767873600">- Refresh libsoup2-CVE-2025-14523.patch: Follow the update of
  upstream (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!491).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1768305600">- Add libsoup2-CVE-2026-0719.patch: Fix overflow for password
  md4sum (bsc#1256399, CVE-2026-0719, glgo#GNOME/libsoup!493).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1770120000">- Add libsoup2-CVE-2026-1761.patch: multipart: check length of bytes
  read soup_filter_input_stream_read_until()
  (bsc#1257598, CVE-2026-1761, glgo#GNOME/libsoup!496).</changelog>
  <changelog author="mgorse@suse.com" date="1770379200">- Add libsoup2-CVE-2026-0716.patch: Fix out-of-bounds read for
  websocket (bsc#1256418, CVE-2026-0716, glgo#GNOME/libsoup!494).</changelog>
  <changelog author="mgorse@suse.com" date="1770638400">- Add libsoup2-CVE-2025-4476.patch: fix crash in
  soup_auth_digest_get_protection_space (bsc#1243422
  CVE-2025-4476 glgo#GNOME/libsoup#440).
- Increase test timeout for all arches except x86_64 and run tests
  again should they fail the first time, the testsuite is flaky.</changelog>
  <changelog author="mgorse@suse.com" date="1771588800">- Add more CVE fixes:
  + libsoup2-CVE-2025-32049.patch (bsc#1240751 CVE-2025-32049
    glgo#GNOME/libsoup#390)
  + libsoup2-CVE-2026-2443.patch (bsc#1258170 CVE-2026-2443
    glgo#GNOME/libsoup#487)
  + libsoup2-CVE-2026-2369.patch (bsc#1258120 CVE-2026-2369
    glgo#GNOME/libsoup!508)
  + libsoup2-CVE-2026-2708.patch (bsc#1258508 CVE-2026-2708
    glgo#GNOME/libsoup#500)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1772020800">- Add libsoup-CVE-2026-1760.patch: server: close the connection
  after responsing a request containing...
  (bsc#1257597, CVE-2026-1760, glgo#GNOME/libsoup#475).
- Add libsoup-CVE-2026-1467.patch: uri-utils: do host validation
  when checking if a GUri is valid
  (bsc#1257398, CVE-2026-1467, glgo#GNOME/libsoup#488).
- Add libsoup-CVE-2026-1539.patch: Also remove Proxy-Authorization
  header on cross origin redirect
  (bsc#1257441, CVE-2026-1539, glgo#GNOME/libsoup#489).</changelog>
  <changelog author="mgorse@suse.com" date="1772712000">- Update libsoup2-CVE-2026-0716.patch to incorporate
  glgo#GNOME/libsoup!518. The original fix was incomplete
  (bsc#1256418 CVE-2026-0716 glgo#GNOME/libsoup#476).</changelog>
</package>
<package pkgid="c6f67047631cb1caff9f5bbd4eafcb8c3648aedd230be1470ba833d5e3f82437" name="libsoup2-devel" arch="x86_64">
  <version epoch="0" ver="2.74.3" rel="150600.4.6.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1587038400">- Add libsoup-disable-ssl-tests.patch: Disable ssl tests, as they
  randomly fail for all arches (glgo#GNOME/libsoup#188).
- Rebase/refresh patches.</changelog>
  <changelog author="dimstar@opensuse.org" date="1589198400">- Autodetect the location of krb5-config: krb5 adds itself to
  $PATH.</changelog>
  <changelog author="dimstar@opensuse.org" date="1599220800">- Update to version 2.71.0:
  + Redesign directory list returned for `file://` requests.
  + Add `SOUP_COOKIE_JAR_ACCEPT_GRANDFATHERED_THIRD_PARTY` policy.
  + Add soup_message_is_feature_disabled() API.
  + Fix potential leak when setting SoupSession:tls-interaction.
  + Fix building with Visual Studio.
  + Updated translations.
- Drop libsoup-test-utils-fix.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1599307200">- Update to version 2.71.1:
  + Add support for 308 Premanent Redirect.
  + Add basic sysprof profiling for HTTP messages.
  + Various build fixes.
  + Updated translations.
- Add pkgconfig(sysprof-4) and pkgconfig(sysprof-capture-4)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1600084800">- Update to version 2.72.0:
  + Fix critical after cancelling a message that failed auth.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Disable sysprof integration: this causes a nasty build cycle.
  + Pass -Dsysprof=disabled to meson.
  + Remove pkgconfig(sysprof-4) and pkgconfig(sysprof-capture-4),
    as well as pkgconfig(sysprof-4) in the devel project.</changelog>
  <changelog author="pmonreal@suse.com" date="1612785600">- Fix tests: fix SSL test with glib-networking &gt;= 2.65.90
  * See https://gitlab.gnome.org/GNOME/libsoup/issues/201
- Add libsoup-fix-SSL-test.patch
- Remove patches:
  * libsoup-disable-ssl-tests.patch
  * libsoup-disable-hsts-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1612785601">- Disable tls_interaction-test until resolved upstream
  * See https://gitlab.gnome.org/GNOME/libsoup/issues/120
- Add libsoup-skip-tls_interaction-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614340800">- Run the regression tests using GnuTLS NORMAL priority</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.74.0:
  + IMPORTANT: Enable ssl-use-system-ca-file by default on
    deprecated Sync and Async sessions.
  + Fix including headers in C++ projects.
  + Fix attempting to resolve relative paths with data URIs.
  + Support Content-Disposition headers without a disposition-type.
  + Fix building VAPI bindings with latest Vala.
  + Fix sending a Content-Length header in a response with status
    code of 1xx or 204.
  + Updated translations.
- Drop libsoup-fix-SSL-test.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629892800">- Rename source package to libsoup2, as a compatibility package
  while the world moves to libsoup3 (with HTTP/2 support).</changelog>
  <changelog author="dimstar@opensuse.org" date="1632916800">- Add Provides: libsoup2 to the library, so that the lang package
  is installable.
- Remove the left-over provides/obsoltes for libsoup (which is now
  libsoup 3).</changelog>
  <changelog author="bwiedemann@suse.com" date="1633176000">- Add libsoup2-extend-test-cert.patch to fix tests after 2027 (boo#1102840)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635076800">- Update to version 2.74.1:
  + Fix support for older versions of Vala.
  + Fix trying to build sysprof as a subproject on Windows.
  + Fix missing `extern "C"` in an installed header.
  + Improve `gssapi` dependency handling.
  + Fix `libsoup-doc` build target.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637755200">- Update to version 2.74.2:
  + Error when libsoup3 is already loaded before libsoup2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 2.74.3:
  + Add missing g-i annotations to `soup_address_get_sockaddr()`
    and `soup_socket_read_until()`.
  + Add missing `extern` when building on Windows.
  + Update libxml2 fallback for meson wrap.
  + Improvements when using libsoup with meson wraps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690804800">- Add upstream bug fixes:
  + 4d12c3e5.patch: lib: Add g_task_set_source_tag() everywhere
  + 48b3b611.patch: lib: Add names to various GSources
- Drop no longer valid translation-update-upstream BuildRequires
  and macro.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1702555200">- Add ced3c5d8.patch: Fix build with libxml2-2.12.0 and clang-17.</changelog>
  <changelog author="mgorse@suse.com" date="1731499200">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add libsoup-CVE-2024-52532.patch: websocket: Process the frame as
  soon as we read data (boo#1233287 CVE-2024-52532).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).</changelog>
  <changelog author="mgorse@suse.com" date="1746014400">- Add more CVE fixes:
  + ef6c4bf6.patch (boo#1240750 CVE-2025-2784)
  + 96c22b67.patch (boo#1240750 CVE-2025-2784)
  + 19124679.patch (boo#1240752 CVE-2025-32050)
  + a5b86bfc.patch (boo#1240756 CVE-2025-32052)
  + 5739a090.patch (boo#1240757 CVE-2025-32053)
  + c9083869.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)</changelog>
</package>
<package pkgid="e773d8d2b3adb120d2d0e3e598e8eaab104a0dcd5241c13225edf50addb6f9a4" name="libsoup2-devel" arch="x86_64">
  <version epoch="0" ver="2.74.3" rel="150600.4.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1589198400">- Autodetect the location of krb5-config: krb5 adds itself to
  $PATH.</changelog>
  <changelog author="dimstar@opensuse.org" date="1599220800">- Update to version 2.71.0:
  + Redesign directory list returned for `file://` requests.
  + Add `SOUP_COOKIE_JAR_ACCEPT_GRANDFATHERED_THIRD_PARTY` policy.
  + Add soup_message_is_feature_disabled() API.
  + Fix potential leak when setting SoupSession:tls-interaction.
  + Fix building with Visual Studio.
  + Updated translations.
- Drop libsoup-test-utils-fix.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1599307200">- Update to version 2.71.1:
  + Add support for 308 Premanent Redirect.
  + Add basic sysprof profiling for HTTP messages.
  + Various build fixes.
  + Updated translations.
- Add pkgconfig(sysprof-4) and pkgconfig(sysprof-capture-4)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1600084800">- Update to version 2.72.0:
  + Fix critical after cancelling a message that failed auth.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Disable sysprof integration: this causes a nasty build cycle.
  + Pass -Dsysprof=disabled to meson.
  + Remove pkgconfig(sysprof-4) and pkgconfig(sysprof-capture-4),
    as well as pkgconfig(sysprof-4) in the devel project.</changelog>
  <changelog author="pmonreal@suse.com" date="1612785600">- Fix tests: fix SSL test with glib-networking &gt;= 2.65.90
  * See https://gitlab.gnome.org/GNOME/libsoup/issues/201
- Add libsoup-fix-SSL-test.patch
- Remove patches:
  * libsoup-disable-ssl-tests.patch
  * libsoup-disable-hsts-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1612785601">- Disable tls_interaction-test until resolved upstream
  * See https://gitlab.gnome.org/GNOME/libsoup/issues/120
- Add libsoup-skip-tls_interaction-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614340800">- Run the regression tests using GnuTLS NORMAL priority</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.74.0:
  + IMPORTANT: Enable ssl-use-system-ca-file by default on
    deprecated Sync and Async sessions.
  + Fix including headers in C++ projects.
  + Fix attempting to resolve relative paths with data URIs.
  + Support Content-Disposition headers without a disposition-type.
  + Fix building VAPI bindings with latest Vala.
  + Fix sending a Content-Length header in a response with status
    code of 1xx or 204.
  + Updated translations.
- Drop libsoup-fix-SSL-test.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629892800">- Rename source package to libsoup2, as a compatibility package
  while the world moves to libsoup3 (with HTTP/2 support).</changelog>
  <changelog author="dimstar@opensuse.org" date="1632916800">- Add Provides: libsoup2 to the library, so that the lang package
  is installable.
- Remove the left-over provides/obsoltes for libsoup (which is now
  libsoup 3).</changelog>
  <changelog author="bwiedemann@suse.com" date="1633176000">- Add libsoup2-extend-test-cert.patch to fix tests after 2027 (boo#1102840)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635076800">- Update to version 2.74.1:
  + Fix support for older versions of Vala.
  + Fix trying to build sysprof as a subproject on Windows.
  + Fix missing `extern "C"` in an installed header.
  + Improve `gssapi` dependency handling.
  + Fix `libsoup-doc` build target.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637755200">- Update to version 2.74.2:
  + Error when libsoup3 is already loaded before libsoup2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 2.74.3:
  + Add missing g-i annotations to `soup_address_get_sockaddr()`
    and `soup_socket_read_until()`.
  + Add missing `extern` when building on Windows.
  + Update libxml2 fallback for meson wrap.
  + Improvements when using libsoup with meson wraps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690804800">- Add upstream bug fixes:
  + 4d12c3e5.patch: lib: Add g_task_set_source_tag() everywhere
  + 48b3b611.patch: lib: Add names to various GSources
- Drop no longer valid translation-update-upstream BuildRequires
  and macro.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1702555200">- Add ced3c5d8.patch: Fix build with libxml2-2.12.0 and clang-17.</changelog>
  <changelog author="mgorse@suse.com" date="1731499200">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add libsoup-CVE-2024-52532.patch: websocket: Process the frame as
  soon as we read data (boo#1233287 CVE-2024-52532).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).</changelog>
  <changelog author="mgorse@suse.com" date="1746014400">- Add more CVE fixes:
  + ef6c4bf6.patch (boo#1240750 CVE-2025-2784)
  + 96c22b67.patch (boo#1240750 CVE-2025-2784)
  + 19124679.patch (boo#1240752 CVE-2025-32050)
  + a5b86bfc.patch (boo#1240756 CVE-2025-32052)
  + 5739a090.patch (boo#1240757 CVE-2025-32053)
  + c9083869.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
</package>
<package pkgid="d5d25bfff24225fabde07e2fa7ad7f887624a37c886bc56af783223eaffd7e38" name="libsoup2-lang" arch="noarch">
  <version epoch="0" ver="2.74.3" rel="150600.4.12.1"/>
  <changelog author="dimstar@opensuse.org" date="1599220800">- Update to version 2.71.0:
  + Redesign directory list returned for `file://` requests.
  + Add `SOUP_COOKIE_JAR_ACCEPT_GRANDFATHERED_THIRD_PARTY` policy.
  + Add soup_message_is_feature_disabled() API.
  + Fix potential leak when setting SoupSession:tls-interaction.
  + Fix building with Visual Studio.
  + Updated translations.
- Drop libsoup-test-utils-fix.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1599307200">- Update to version 2.71.1:
  + Add support for 308 Premanent Redirect.
  + Add basic sysprof profiling for HTTP messages.
  + Various build fixes.
  + Updated translations.
- Add pkgconfig(sysprof-4) and pkgconfig(sysprof-capture-4)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1600084800">- Update to version 2.72.0:
  + Fix critical after cancelling a message that failed auth.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Disable sysprof integration: this causes a nasty build cycle.
  + Pass -Dsysprof=disabled to meson.
  + Remove pkgconfig(sysprof-4) and pkgconfig(sysprof-capture-4),
    as well as pkgconfig(sysprof-4) in the devel project.</changelog>
  <changelog author="pmonreal@suse.com" date="1612785600">- Fix tests: fix SSL test with glib-networking &gt;= 2.65.90
  * See https://gitlab.gnome.org/GNOME/libsoup/issues/201
- Add libsoup-fix-SSL-test.patch
- Remove patches:
  * libsoup-disable-ssl-tests.patch
  * libsoup-disable-hsts-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1612785601">- Disable tls_interaction-test until resolved upstream
  * See https://gitlab.gnome.org/GNOME/libsoup/issues/120
- Add libsoup-skip-tls_interaction-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614340800">- Run the regression tests using GnuTLS NORMAL priority</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.74.0:
  + IMPORTANT: Enable ssl-use-system-ca-file by default on
    deprecated Sync and Async sessions.
  + Fix including headers in C++ projects.
  + Fix attempting to resolve relative paths with data URIs.
  + Support Content-Disposition headers without a disposition-type.
  + Fix building VAPI bindings with latest Vala.
  + Fix sending a Content-Length header in a response with status
    code of 1xx or 204.
  + Updated translations.
- Drop libsoup-fix-SSL-test.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629892800">- Rename source package to libsoup2, as a compatibility package
  while the world moves to libsoup3 (with HTTP/2 support).</changelog>
  <changelog author="dimstar@opensuse.org" date="1632916800">- Add Provides: libsoup2 to the library, so that the lang package
  is installable.
- Remove the left-over provides/obsoltes for libsoup (which is now
  libsoup 3).</changelog>
  <changelog author="bwiedemann@suse.com" date="1633176000">- Add libsoup2-extend-test-cert.patch to fix tests after 2027 (boo#1102840)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635076800">- Update to version 2.74.1:
  + Fix support for older versions of Vala.
  + Fix trying to build sysprof as a subproject on Windows.
  + Fix missing `extern "C"` in an installed header.
  + Improve `gssapi` dependency handling.
  + Fix `libsoup-doc` build target.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637755200">- Update to version 2.74.2:
  + Error when libsoup3 is already loaded before libsoup2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 2.74.3:
  + Add missing g-i annotations to `soup_address_get_sockaddr()`
    and `soup_socket_read_until()`.
  + Add missing `extern` when building on Windows.
  + Update libxml2 fallback for meson wrap.
  + Improvements when using libsoup with meson wraps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690804800">- Add upstream bug fixes:
  + 4d12c3e5.patch: lib: Add g_task_set_source_tag() everywhere
  + 48b3b611.patch: lib: Add names to various GSources
- Drop no longer valid translation-update-upstream BuildRequires
  and macro.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1702555200">- Add ced3c5d8.patch: Fix build with libxml2-2.12.0 and clang-17.</changelog>
  <changelog author="mgorse@suse.com" date="1731499200">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add libsoup-CVE-2024-52532.patch: websocket: Process the frame as
  soon as we read data (boo#1233287 CVE-2024-52532).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).</changelog>
  <changelog author="mgorse@suse.com" date="1746014400">- Add more CVE fixes:
  + ef6c4bf6.patch (boo#1240750 CVE-2025-2784)
  + 96c22b67.patch (boo#1240750 CVE-2025-2784)
  + 19124679.patch (boo#1240752 CVE-2025-32050)
  + a5b86bfc.patch (boo#1240756 CVE-2025-32052)
  + 5739a090.patch (boo#1240757 CVE-2025-32053)
  + c9083869.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
</package>
<package pkgid="6d1d7138b4da4ccc6eba7a83ff711289cbd2948014c5bf8538bc70801b01f600" name="libsoup2-lang" arch="noarch">
  <version epoch="0" ver="2.74.3" rel="150600.4.19.1"/>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Disable sysprof integration: this causes a nasty build cycle.
  + Pass -Dsysprof=disabled to meson.
  + Remove pkgconfig(sysprof-4) and pkgconfig(sysprof-capture-4),
    as well as pkgconfig(sysprof-4) in the devel project.</changelog>
  <changelog author="pmonreal@suse.com" date="1612785600">- Fix tests: fix SSL test with glib-networking &gt;= 2.65.90
  * See https://gitlab.gnome.org/GNOME/libsoup/issues/201
- Add libsoup-fix-SSL-test.patch
- Remove patches:
  * libsoup-disable-ssl-tests.patch
  * libsoup-disable-hsts-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1612785601">- Disable tls_interaction-test until resolved upstream
  * See https://gitlab.gnome.org/GNOME/libsoup/issues/120
- Add libsoup-skip-tls_interaction-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614340800">- Run the regression tests using GnuTLS NORMAL priority</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.74.0:
  + IMPORTANT: Enable ssl-use-system-ca-file by default on
    deprecated Sync and Async sessions.
  + Fix including headers in C++ projects.
  + Fix attempting to resolve relative paths with data URIs.
  + Support Content-Disposition headers without a disposition-type.
  + Fix building VAPI bindings with latest Vala.
  + Fix sending a Content-Length header in a response with status
    code of 1xx or 204.
  + Updated translations.
- Drop libsoup-fix-SSL-test.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629892800">- Rename source package to libsoup2, as a compatibility package
  while the world moves to libsoup3 (with HTTP/2 support).</changelog>
  <changelog author="dimstar@opensuse.org" date="1632916800">- Add Provides: libsoup2 to the library, so that the lang package
  is installable.
- Remove the left-over provides/obsoltes for libsoup (which is now
  libsoup 3).</changelog>
  <changelog author="bwiedemann@suse.com" date="1633176000">- Add libsoup2-extend-test-cert.patch to fix tests after 2027 (boo#1102840)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635076800">- Update to version 2.74.1:
  + Fix support for older versions of Vala.
  + Fix trying to build sysprof as a subproject on Windows.
  + Fix missing `extern "C"` in an installed header.
  + Improve `gssapi` dependency handling.
  + Fix `libsoup-doc` build target.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637755200">- Update to version 2.74.2:
  + Error when libsoup3 is already loaded before libsoup2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 2.74.3:
  + Add missing g-i annotations to `soup_address_get_sockaddr()`
    and `soup_socket_read_until()`.
  + Add missing `extern` when building on Windows.
  + Update libxml2 fallback for meson wrap.
  + Improvements when using libsoup with meson wraps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690804800">- Add upstream bug fixes:
  + 4d12c3e5.patch: lib: Add g_task_set_source_tag() everywhere
  + 48b3b611.patch: lib: Add names to various GSources
- Drop no longer valid translation-update-upstream BuildRequires
  and macro.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1702555200">- Add ced3c5d8.patch: Fix build with libxml2-2.12.0 and clang-17.</changelog>
  <changelog author="mgorse@suse.com" date="1731499200">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add libsoup-CVE-2024-52532.patch: websocket: Process the frame as
  soon as we read data (boo#1233287 CVE-2024-52532).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).</changelog>
  <changelog author="mgorse@suse.com" date="1746014400">- Add more CVE fixes:
  + ef6c4bf6.patch (boo#1240750 CVE-2025-2784)
  + 96c22b67.patch (boo#1240750 CVE-2025-2784)
  + 19124679.patch (boo#1240752 CVE-2025-32050)
  + a5b86bfc.patch (boo#1240756 CVE-2025-32052)
  + 5739a090.patch (boo#1240757 CVE-2025-32053)
  + c9083869.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767700800">- Add libsoup2-CVE-2025-14523.patch: Reject duplicated Host in
  headers (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!489).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767873600">- Refresh libsoup2-CVE-2025-14523.patch: Follow the update of
  upstream (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!491).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1768305600">- Add libsoup2-CVE-2026-0719.patch: Fix overflow for password
  md4sum (bsc#1256399, CVE-2026-0719, glgo#GNOME/libsoup!493).</changelog>
</package>
<package pkgid="d0a0ee228edc2713fd8843f0d59a8086568e7b76d9357b3453651d46f0ca0392" name="libsoup2-lang" arch="noarch">
  <version epoch="0" ver="2.74.3" rel="150600.4.24.1"/>
  <changelog author="pmonreal@suse.com" date="1614340800">- Run the regression tests using GnuTLS NORMAL priority</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.74.0:
  + IMPORTANT: Enable ssl-use-system-ca-file by default on
    deprecated Sync and Async sessions.
  + Fix including headers in C++ projects.
  + Fix attempting to resolve relative paths with data URIs.
  + Support Content-Disposition headers without a disposition-type.
  + Fix building VAPI bindings with latest Vala.
  + Fix sending a Content-Length header in a response with status
    code of 1xx or 204.
  + Updated translations.
- Drop libsoup-fix-SSL-test.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629892800">- Rename source package to libsoup2, as a compatibility package
  while the world moves to libsoup3 (with HTTP/2 support).</changelog>
  <changelog author="dimstar@opensuse.org" date="1632916800">- Add Provides: libsoup2 to the library, so that the lang package
  is installable.
- Remove the left-over provides/obsoltes for libsoup (which is now
  libsoup 3).</changelog>
  <changelog author="bwiedemann@suse.com" date="1633176000">- Add libsoup2-extend-test-cert.patch to fix tests after 2027 (boo#1102840)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635076800">- Update to version 2.74.1:
  + Fix support for older versions of Vala.
  + Fix trying to build sysprof as a subproject on Windows.
  + Fix missing `extern "C"` in an installed header.
  + Improve `gssapi` dependency handling.
  + Fix `libsoup-doc` build target.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637755200">- Update to version 2.74.2:
  + Error when libsoup3 is already loaded before libsoup2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 2.74.3:
  + Add missing g-i annotations to `soup_address_get_sockaddr()`
    and `soup_socket_read_until()`.
  + Add missing `extern` when building on Windows.
  + Update libxml2 fallback for meson wrap.
  + Improvements when using libsoup with meson wraps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690804800">- Add upstream bug fixes:
  + 4d12c3e5.patch: lib: Add g_task_set_source_tag() everywhere
  + 48b3b611.patch: lib: Add names to various GSources
- Drop no longer valid translation-update-upstream BuildRequires
  and macro.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1702555200">- Add ced3c5d8.patch: Fix build with libxml2-2.12.0 and clang-17.</changelog>
  <changelog author="mgorse@suse.com" date="1731499200">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add libsoup-CVE-2024-52532.patch: websocket: Process the frame as
  soon as we read data (boo#1233287 CVE-2024-52532).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).</changelog>
  <changelog author="mgorse@suse.com" date="1746014400">- Add more CVE fixes:
  + ef6c4bf6.patch (boo#1240750 CVE-2025-2784)
  + 96c22b67.patch (boo#1240750 CVE-2025-2784)
  + 19124679.patch (boo#1240752 CVE-2025-32050)
  + a5b86bfc.patch (boo#1240756 CVE-2025-32052)
  + 5739a090.patch (boo#1240757 CVE-2025-32053)
  + c9083869.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767700800">- Add libsoup2-CVE-2025-14523.patch: Reject duplicated Host in
  headers (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!489).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767873600">- Refresh libsoup2-CVE-2025-14523.patch: Follow the update of
  upstream (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!491).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1768305600">- Add libsoup2-CVE-2026-0719.patch: Fix overflow for password
  md4sum (bsc#1256399, CVE-2026-0719, glgo#GNOME/libsoup!493).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1770120000">- Add libsoup2-CVE-2026-1761.patch: multipart: check length of bytes
  read soup_filter_input_stream_read_until()
  (bsc#1257598, CVE-2026-1761, glgo#GNOME/libsoup!496).</changelog>
  <changelog author="mgorse@suse.com" date="1770379200">- Add libsoup2-CVE-2026-0716.patch: Fix out-of-bounds read for
  websocket (bsc#1256418, CVE-2026-0716, glgo#GNOME/libsoup!494).</changelog>
  <changelog author="mgorse@suse.com" date="1770638400">- Add libsoup2-CVE-2025-4476.patch: fix crash in
  soup_auth_digest_get_protection_space (bsc#1243422
  CVE-2025-4476 glgo#GNOME/libsoup#440).
- Increase test timeout for all arches except x86_64 and run tests
  again should they fail the first time, the testsuite is flaky.</changelog>
</package>
<package pkgid="d565dfc133922e24b6ae93c26dcc859e6465f0183f7b8a4696977d94358969e9" name="libsoup2-lang" arch="noarch">
  <version epoch="0" ver="2.74.3" rel="150600.4.27.1"/>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.74.0:
  + IMPORTANT: Enable ssl-use-system-ca-file by default on
    deprecated Sync and Async sessions.
  + Fix including headers in C++ projects.
  + Fix attempting to resolve relative paths with data URIs.
  + Support Content-Disposition headers without a disposition-type.
  + Fix building VAPI bindings with latest Vala.
  + Fix sending a Content-Length header in a response with status
    code of 1xx or 204.
  + Updated translations.
- Drop libsoup-fix-SSL-test.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629892800">- Rename source package to libsoup2, as a compatibility package
  while the world moves to libsoup3 (with HTTP/2 support).</changelog>
  <changelog author="dimstar@opensuse.org" date="1632916800">- Add Provides: libsoup2 to the library, so that the lang package
  is installable.
- Remove the left-over provides/obsoltes for libsoup (which is now
  libsoup 3).</changelog>
  <changelog author="bwiedemann@suse.com" date="1633176000">- Add libsoup2-extend-test-cert.patch to fix tests after 2027 (boo#1102840)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635076800">- Update to version 2.74.1:
  + Fix support for older versions of Vala.
  + Fix trying to build sysprof as a subproject on Windows.
  + Fix missing `extern "C"` in an installed header.
  + Improve `gssapi` dependency handling.
  + Fix `libsoup-doc` build target.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637755200">- Update to version 2.74.2:
  + Error when libsoup3 is already loaded before libsoup2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 2.74.3:
  + Add missing g-i annotations to `soup_address_get_sockaddr()`
    and `soup_socket_read_until()`.
  + Add missing `extern` when building on Windows.
  + Update libxml2 fallback for meson wrap.
  + Improvements when using libsoup with meson wraps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690804800">- Add upstream bug fixes:
  + 4d12c3e5.patch: lib: Add g_task_set_source_tag() everywhere
  + 48b3b611.patch: lib: Add names to various GSources
- Drop no longer valid translation-update-upstream BuildRequires
  and macro.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1702555200">- Add ced3c5d8.patch: Fix build with libxml2-2.12.0 and clang-17.</changelog>
  <changelog author="mgorse@suse.com" date="1731499200">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add libsoup-CVE-2024-52532.patch: websocket: Process the frame as
  soon as we read data (boo#1233287 CVE-2024-52532).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).</changelog>
  <changelog author="mgorse@suse.com" date="1746014400">- Add more CVE fixes:
  + ef6c4bf6.patch (boo#1240750 CVE-2025-2784)
  + 96c22b67.patch (boo#1240750 CVE-2025-2784)
  + 19124679.patch (boo#1240752 CVE-2025-32050)
  + a5b86bfc.patch (boo#1240756 CVE-2025-32052)
  + 5739a090.patch (boo#1240757 CVE-2025-32053)
  + c9083869.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767700800">- Add libsoup2-CVE-2025-14523.patch: Reject duplicated Host in
  headers (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!489).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767873600">- Refresh libsoup2-CVE-2025-14523.patch: Follow the update of
  upstream (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!491).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1768305600">- Add libsoup2-CVE-2026-0719.patch: Fix overflow for password
  md4sum (bsc#1256399, CVE-2026-0719, glgo#GNOME/libsoup!493).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1770120000">- Add libsoup2-CVE-2026-1761.patch: multipart: check length of bytes
  read soup_filter_input_stream_read_until()
  (bsc#1257598, CVE-2026-1761, glgo#GNOME/libsoup!496).</changelog>
  <changelog author="mgorse@suse.com" date="1770379200">- Add libsoup2-CVE-2026-0716.patch: Fix out-of-bounds read for
  websocket (bsc#1256418, CVE-2026-0716, glgo#GNOME/libsoup!494).</changelog>
  <changelog author="mgorse@suse.com" date="1770638400">- Add libsoup2-CVE-2025-4476.patch: fix crash in
  soup_auth_digest_get_protection_space (bsc#1243422
  CVE-2025-4476 glgo#GNOME/libsoup#440).
- Increase test timeout for all arches except x86_64 and run tests
  again should they fail the first time, the testsuite is flaky.</changelog>
  <changelog author="mgorse@suse.com" date="1771588800">- Add more CVE fixes:
  + libsoup2-CVE-2025-32049.patch (bsc#1240751 CVE-2025-32049
    glgo#GNOME/libsoup#390)
  + libsoup2-CVE-2026-2443.patch (bsc#1258170 CVE-2026-2443
    glgo#GNOME/libsoup#487)
  + libsoup2-CVE-2026-2369.patch (bsc#1258120 CVE-2026-2369
    glgo#GNOME/libsoup!508)
  + libsoup2-CVE-2026-2708.patch (bsc#1258508 CVE-2026-2708
    glgo#GNOME/libsoup#500)</changelog>
</package>
<package pkgid="6002ec3e986f641d29109f869dbe425a7905994964c0679b290b0e017dde2802" name="libsoup2-lang" arch="noarch">
  <version epoch="0" ver="2.74.3" rel="150600.4.30.1"/>
  <changelog author="dimstar@opensuse.org" date="1629892800">- Rename source package to libsoup2, as a compatibility package
  while the world moves to libsoup3 (with HTTP/2 support).</changelog>
  <changelog author="dimstar@opensuse.org" date="1632916800">- Add Provides: libsoup2 to the library, so that the lang package
  is installable.
- Remove the left-over provides/obsoltes for libsoup (which is now
  libsoup 3).</changelog>
  <changelog author="bwiedemann@suse.com" date="1633176000">- Add libsoup2-extend-test-cert.patch to fix tests after 2027 (boo#1102840)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635076800">- Update to version 2.74.1:
  + Fix support for older versions of Vala.
  + Fix trying to build sysprof as a subproject on Windows.
  + Fix missing `extern "C"` in an installed header.
  + Improve `gssapi` dependency handling.
  + Fix `libsoup-doc` build target.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637755200">- Update to version 2.74.2:
  + Error when libsoup3 is already loaded before libsoup2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 2.74.3:
  + Add missing g-i annotations to `soup_address_get_sockaddr()`
    and `soup_socket_read_until()`.
  + Add missing `extern` when building on Windows.
  + Update libxml2 fallback for meson wrap.
  + Improvements when using libsoup with meson wraps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690804800">- Add upstream bug fixes:
  + 4d12c3e5.patch: lib: Add g_task_set_source_tag() everywhere
  + 48b3b611.patch: lib: Add names to various GSources
- Drop no longer valid translation-update-upstream BuildRequires
  and macro.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1702555200">- Add ced3c5d8.patch: Fix build with libxml2-2.12.0 and clang-17.</changelog>
  <changelog author="mgorse@suse.com" date="1731499200">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add libsoup-CVE-2024-52532.patch: websocket: Process the frame as
  soon as we read data (boo#1233287 CVE-2024-52532).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).</changelog>
  <changelog author="mgorse@suse.com" date="1746014400">- Add more CVE fixes:
  + ef6c4bf6.patch (boo#1240750 CVE-2025-2784)
  + 96c22b67.patch (boo#1240750 CVE-2025-2784)
  + 19124679.patch (boo#1240752 CVE-2025-32050)
  + a5b86bfc.patch (boo#1240756 CVE-2025-32052)
  + 5739a090.patch (boo#1240757 CVE-2025-32053)
  + c9083869.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767700800">- Add libsoup2-CVE-2025-14523.patch: Reject duplicated Host in
  headers (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!489).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767873600">- Refresh libsoup2-CVE-2025-14523.patch: Follow the update of
  upstream (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!491).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1768305600">- Add libsoup2-CVE-2026-0719.patch: Fix overflow for password
  md4sum (bsc#1256399, CVE-2026-0719, glgo#GNOME/libsoup!493).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1770120000">- Add libsoup2-CVE-2026-1761.patch: multipart: check length of bytes
  read soup_filter_input_stream_read_until()
  (bsc#1257598, CVE-2026-1761, glgo#GNOME/libsoup!496).</changelog>
  <changelog author="mgorse@suse.com" date="1770379200">- Add libsoup2-CVE-2026-0716.patch: Fix out-of-bounds read for
  websocket (bsc#1256418, CVE-2026-0716, glgo#GNOME/libsoup!494).</changelog>
  <changelog author="mgorse@suse.com" date="1770638400">- Add libsoup2-CVE-2025-4476.patch: fix crash in
  soup_auth_digest_get_protection_space (bsc#1243422
  CVE-2025-4476 glgo#GNOME/libsoup#440).
- Increase test timeout for all arches except x86_64 and run tests
  again should they fail the first time, the testsuite is flaky.</changelog>
  <changelog author="mgorse@suse.com" date="1771588800">- Add more CVE fixes:
  + libsoup2-CVE-2025-32049.patch (bsc#1240751 CVE-2025-32049
    glgo#GNOME/libsoup#390)
  + libsoup2-CVE-2026-2443.patch (bsc#1258170 CVE-2026-2443
    glgo#GNOME/libsoup#487)
  + libsoup2-CVE-2026-2369.patch (bsc#1258120 CVE-2026-2369
    glgo#GNOME/libsoup!508)
  + libsoup2-CVE-2026-2708.patch (bsc#1258508 CVE-2026-2708
    glgo#GNOME/libsoup#500)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1772020800">- Add libsoup-CVE-2026-1760.patch: server: close the connection
  after responsing a request containing...
  (bsc#1257597, CVE-2026-1760, glgo#GNOME/libsoup#475).
- Add libsoup-CVE-2026-1467.patch: uri-utils: do host validation
  when checking if a GUri is valid
  (bsc#1257398, CVE-2026-1467, glgo#GNOME/libsoup#488).
- Add libsoup-CVE-2026-1539.patch: Also remove Proxy-Authorization
  header on cross origin redirect
  (bsc#1257441, CVE-2026-1539, glgo#GNOME/libsoup#489).</changelog>
</package>
<package pkgid="8694f7869dff89bad5f0209c4eacb44e14de4f4d85197c362f626ed03b91f6cb" name="libsoup2-lang" arch="noarch">
  <version epoch="0" ver="2.74.3" rel="150600.4.33.1"/>
  <changelog author="dimstar@opensuse.org" date="1632916800">- Add Provides: libsoup2 to the library, so that the lang package
  is installable.
- Remove the left-over provides/obsoltes for libsoup (which is now
  libsoup 3).</changelog>
  <changelog author="bwiedemann@suse.com" date="1633176000">- Add libsoup2-extend-test-cert.patch to fix tests after 2027 (boo#1102840)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635076800">- Update to version 2.74.1:
  + Fix support for older versions of Vala.
  + Fix trying to build sysprof as a subproject on Windows.
  + Fix missing `extern "C"` in an installed header.
  + Improve `gssapi` dependency handling.
  + Fix `libsoup-doc` build target.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637755200">- Update to version 2.74.2:
  + Error when libsoup3 is already loaded before libsoup2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 2.74.3:
  + Add missing g-i annotations to `soup_address_get_sockaddr()`
    and `soup_socket_read_until()`.
  + Add missing `extern` when building on Windows.
  + Update libxml2 fallback for meson wrap.
  + Improvements when using libsoup with meson wraps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690804800">- Add upstream bug fixes:
  + 4d12c3e5.patch: lib: Add g_task_set_source_tag() everywhere
  + 48b3b611.patch: lib: Add names to various GSources
- Drop no longer valid translation-update-upstream BuildRequires
  and macro.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1702555200">- Add ced3c5d8.patch: Fix build with libxml2-2.12.0 and clang-17.</changelog>
  <changelog author="mgorse@suse.com" date="1731499200">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add libsoup-CVE-2024-52532.patch: websocket: Process the frame as
  soon as we read data (boo#1233287 CVE-2024-52532).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).</changelog>
  <changelog author="mgorse@suse.com" date="1746014400">- Add more CVE fixes:
  + ef6c4bf6.patch (boo#1240750 CVE-2025-2784)
  + 96c22b67.patch (boo#1240750 CVE-2025-2784)
  + 19124679.patch (boo#1240752 CVE-2025-32050)
  + a5b86bfc.patch (boo#1240756 CVE-2025-32052)
  + 5739a090.patch (boo#1240757 CVE-2025-32053)
  + c9083869.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
  <changelog author="mgorse@suse.com" date="1750248000">- Add libsoup-CVE-2025-4945.patch: add value checks for date/time
  parsing (boo#1243314 CVE-2025-4945).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767700800">- Add libsoup2-CVE-2025-14523.patch: Reject duplicated Host in
  headers (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!489).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1767873600">- Refresh libsoup2-CVE-2025-14523.patch: Follow the update of
  upstream (bsc#1254876, CVE-2025-14523, glgo#GNOME/libsoup!491).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1768305600">- Add libsoup2-CVE-2026-0719.patch: Fix overflow for password
  md4sum (bsc#1256399, CVE-2026-0719, glgo#GNOME/libsoup!493).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1770120000">- Add libsoup2-CVE-2026-1761.patch: multipart: check length of bytes
  read soup_filter_input_stream_read_until()
  (bsc#1257598, CVE-2026-1761, glgo#GNOME/libsoup!496).</changelog>
  <changelog author="mgorse@suse.com" date="1770379200">- Add libsoup2-CVE-2026-0716.patch: Fix out-of-bounds read for
  websocket (bsc#1256418, CVE-2026-0716, glgo#GNOME/libsoup!494).</changelog>
  <changelog author="mgorse@suse.com" date="1770638400">- Add libsoup2-CVE-2025-4476.patch: fix crash in
  soup_auth_digest_get_protection_space (bsc#1243422
  CVE-2025-4476 glgo#GNOME/libsoup#440).
- Increase test timeout for all arches except x86_64 and run tests
  again should they fail the first time, the testsuite is flaky.</changelog>
  <changelog author="mgorse@suse.com" date="1771588800">- Add more CVE fixes:
  + libsoup2-CVE-2025-32049.patch (bsc#1240751 CVE-2025-32049
    glgo#GNOME/libsoup#390)
  + libsoup2-CVE-2026-2443.patch (bsc#1258170 CVE-2026-2443
    glgo#GNOME/libsoup#487)
  + libsoup2-CVE-2026-2369.patch (bsc#1258120 CVE-2026-2369
    glgo#GNOME/libsoup!508)
  + libsoup2-CVE-2026-2708.patch (bsc#1258508 CVE-2026-2708
    glgo#GNOME/libsoup#500)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1772020800">- Add libsoup-CVE-2026-1760.patch: server: close the connection
  after responsing a request containing...
  (bsc#1257597, CVE-2026-1760, glgo#GNOME/libsoup#475).
- Add libsoup-CVE-2026-1467.patch: uri-utils: do host validation
  when checking if a GUri is valid
  (bsc#1257398, CVE-2026-1467, glgo#GNOME/libsoup#488).
- Add libsoup-CVE-2026-1539.patch: Also remove Proxy-Authorization
  header on cross origin redirect
  (bsc#1257441, CVE-2026-1539, glgo#GNOME/libsoup#489).</changelog>
  <changelog author="mgorse@suse.com" date="1772712000">- Update libsoup2-CVE-2026-0716.patch to incorporate
  glgo#GNOME/libsoup!518. The original fix was incomplete
  (bsc#1256418 CVE-2026-0716 glgo#GNOME/libsoup#476).</changelog>
</package>
<package pkgid="cbfe49726f9c34b6c0e4595095aca2bc707533ba47e6a58848301bce071f8e50" name="libsoup2-lang" arch="noarch">
  <version epoch="0" ver="2.74.3" rel="150600.4.6.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1587038400">- Add libsoup-disable-ssl-tests.patch: Disable ssl tests, as they
  randomly fail for all arches (glgo#GNOME/libsoup#188).
- Rebase/refresh patches.</changelog>
  <changelog author="dimstar@opensuse.org" date="1589198400">- Autodetect the location of krb5-config: krb5 adds itself to
  $PATH.</changelog>
  <changelog author="dimstar@opensuse.org" date="1599220800">- Update to version 2.71.0:
  + Redesign directory list returned for `file://` requests.
  + Add `SOUP_COOKIE_JAR_ACCEPT_GRANDFATHERED_THIRD_PARTY` policy.
  + Add soup_message_is_feature_disabled() API.
  + Fix potential leak when setting SoupSession:tls-interaction.
  + Fix building with Visual Studio.
  + Updated translations.
- Drop libsoup-test-utils-fix.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1599307200">- Update to version 2.71.1:
  + Add support for 308 Premanent Redirect.
  + Add basic sysprof profiling for HTTP messages.
  + Various build fixes.
  + Updated translations.
- Add pkgconfig(sysprof-4) and pkgconfig(sysprof-capture-4)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1600084800">- Update to version 2.72.0:
  + Fix critical after cancelling a message that failed auth.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Disable sysprof integration: this causes a nasty build cycle.
  + Pass -Dsysprof=disabled to meson.
  + Remove pkgconfig(sysprof-4) and pkgconfig(sysprof-capture-4),
    as well as pkgconfig(sysprof-4) in the devel project.</changelog>
  <changelog author="pmonreal@suse.com" date="1612785600">- Fix tests: fix SSL test with glib-networking &gt;= 2.65.90
  * See https://gitlab.gnome.org/GNOME/libsoup/issues/201
- Add libsoup-fix-SSL-test.patch
- Remove patches:
  * libsoup-disable-ssl-tests.patch
  * libsoup-disable-hsts-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1612785601">- Disable tls_interaction-test until resolved upstream
  * See https://gitlab.gnome.org/GNOME/libsoup/issues/120
- Add libsoup-skip-tls_interaction-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614340800">- Run the regression tests using GnuTLS NORMAL priority</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.74.0:
  + IMPORTANT: Enable ssl-use-system-ca-file by default on
    deprecated Sync and Async sessions.
  + Fix including headers in C++ projects.
  + Fix attempting to resolve relative paths with data URIs.
  + Support Content-Disposition headers without a disposition-type.
  + Fix building VAPI bindings with latest Vala.
  + Fix sending a Content-Length header in a response with status
    code of 1xx or 204.
  + Updated translations.
- Drop libsoup-fix-SSL-test.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629892800">- Rename source package to libsoup2, as a compatibility package
  while the world moves to libsoup3 (with HTTP/2 support).</changelog>
  <changelog author="dimstar@opensuse.org" date="1632916800">- Add Provides: libsoup2 to the library, so that the lang package
  is installable.
- Remove the left-over provides/obsoltes for libsoup (which is now
  libsoup 3).</changelog>
  <changelog author="bwiedemann@suse.com" date="1633176000">- Add libsoup2-extend-test-cert.patch to fix tests after 2027 (boo#1102840)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635076800">- Update to version 2.74.1:
  + Fix support for older versions of Vala.
  + Fix trying to build sysprof as a subproject on Windows.
  + Fix missing `extern "C"` in an installed header.
  + Improve `gssapi` dependency handling.
  + Fix `libsoup-doc` build target.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637755200">- Update to version 2.74.2:
  + Error when libsoup3 is already loaded before libsoup2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 2.74.3:
  + Add missing g-i annotations to `soup_address_get_sockaddr()`
    and `soup_socket_read_until()`.
  + Add missing `extern` when building on Windows.
  + Update libxml2 fallback for meson wrap.
  + Improvements when using libsoup with meson wraps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690804800">- Add upstream bug fixes:
  + 4d12c3e5.patch: lib: Add g_task_set_source_tag() everywhere
  + 48b3b611.patch: lib: Add names to various GSources
- Drop no longer valid translation-update-upstream BuildRequires
  and macro.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1702555200">- Add ced3c5d8.patch: Fix build with libxml2-2.12.0 and clang-17.</changelog>
  <changelog author="mgorse@suse.com" date="1731499200">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add libsoup-CVE-2024-52532.patch: websocket: Process the frame as
  soon as we read data (boo#1233287 CVE-2024-52532).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).</changelog>
  <changelog author="mgorse@suse.com" date="1746014400">- Add more CVE fixes:
  + ef6c4bf6.patch (boo#1240750 CVE-2025-2784)
  + 96c22b67.patch (boo#1240750 CVE-2025-2784)
  + 19124679.patch (boo#1240752 CVE-2025-32050)
  + a5b86bfc.patch (boo#1240756 CVE-2025-32052)
  + 5739a090.patch (boo#1240757 CVE-2025-32053)
  + c9083869.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)</changelog>
</package>
<package pkgid="10c7a38de596a99352ffcdab7c6ce8db4a28535ad25411df03ecc16d975a434e" name="libsoup2-lang" arch="noarch">
  <version epoch="0" ver="2.74.3" rel="150600.4.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1589198400">- Autodetect the location of krb5-config: krb5 adds itself to
  $PATH.</changelog>
  <changelog author="dimstar@opensuse.org" date="1599220800">- Update to version 2.71.0:
  + Redesign directory list returned for `file://` requests.
  + Add `SOUP_COOKIE_JAR_ACCEPT_GRANDFATHERED_THIRD_PARTY` policy.
  + Add soup_message_is_feature_disabled() API.
  + Fix potential leak when setting SoupSession:tls-interaction.
  + Fix building with Visual Studio.
  + Updated translations.
- Drop libsoup-test-utils-fix.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1599307200">- Update to version 2.71.1:
  + Add support for 308 Premanent Redirect.
  + Add basic sysprof profiling for HTTP messages.
  + Various build fixes.
  + Updated translations.
- Add pkgconfig(sysprof-4) and pkgconfig(sysprof-capture-4)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1600084800">- Update to version 2.72.0:
  + Fix critical after cancelling a message that failed auth.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Disable sysprof integration: this causes a nasty build cycle.
  + Pass -Dsysprof=disabled to meson.
  + Remove pkgconfig(sysprof-4) and pkgconfig(sysprof-capture-4),
    as well as pkgconfig(sysprof-4) in the devel project.</changelog>
  <changelog author="pmonreal@suse.com" date="1612785600">- Fix tests: fix SSL test with glib-networking &gt;= 2.65.90
  * See https://gitlab.gnome.org/GNOME/libsoup/issues/201
- Add libsoup-fix-SSL-test.patch
- Remove patches:
  * libsoup-disable-ssl-tests.patch
  * libsoup-disable-hsts-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1612785601">- Disable tls_interaction-test until resolved upstream
  * See https://gitlab.gnome.org/GNOME/libsoup/issues/120
- Add libsoup-skip-tls_interaction-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614340800">- Run the regression tests using GnuTLS NORMAL priority</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.74.0:
  + IMPORTANT: Enable ssl-use-system-ca-file by default on
    deprecated Sync and Async sessions.
  + Fix including headers in C++ projects.
  + Fix attempting to resolve relative paths with data URIs.
  + Support Content-Disposition headers without a disposition-type.
  + Fix building VAPI bindings with latest Vala.
  + Fix sending a Content-Length header in a response with status
    code of 1xx or 204.
  + Updated translations.
- Drop libsoup-fix-SSL-test.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629892800">- Rename source package to libsoup2, as a compatibility package
  while the world moves to libsoup3 (with HTTP/2 support).</changelog>
  <changelog author="dimstar@opensuse.org" date="1632916800">- Add Provides: libsoup2 to the library, so that the lang package
  is installable.
- Remove the left-over provides/obsoltes for libsoup (which is now
  libsoup 3).</changelog>
  <changelog author="bwiedemann@suse.com" date="1633176000">- Add libsoup2-extend-test-cert.patch to fix tests after 2027 (boo#1102840)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635076800">- Update to version 2.74.1:
  + Fix support for older versions of Vala.
  + Fix trying to build sysprof as a subproject on Windows.
  + Fix missing `extern "C"` in an installed header.
  + Improve `gssapi` dependency handling.
  + Fix `libsoup-doc` build target.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637755200">- Update to version 2.74.2:
  + Error when libsoup3 is already loaded before libsoup2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665576000">- Update to version 2.74.3:
  + Add missing g-i annotations to `soup_address_get_sockaddr()`
    and `soup_socket_read_until()`.
  + Add missing `extern` when building on Windows.
  + Update libxml2 fallback for meson wrap.
  + Improvements when using libsoup with meson wraps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1690804800">- Add upstream bug fixes:
  + 4d12c3e5.patch: lib: Add g_task_set_source_tag() everywhere
  + 48b3b611.patch: lib: Add names to various GSources
- Drop no longer valid translation-update-upstream BuildRequires
  and macro.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1702555200">- Add ced3c5d8.patch: Fix build with libxml2-2.12.0 and clang-17.</changelog>
  <changelog author="mgorse@suse.com" date="1731499200">- Add 04df03bc.patch: strictly don't allow NUL bytes in headers
  (boo#1233285 CVE-2024-52530 glgo#GNOME/libsoup#377).
- Add libsoup-CVE-2024-52532.patch: websocket: Process the frame as
  soon as we read data (boo#1233287 CVE-2024-52532).
- Add 29b96fab.patch: websocket-test: disconnect error copy after
  the test ends (glgo#GNOME/libsoup#391).
- Add a35222dd.patch: be more robust against invalid input when
  parsing params (boo#1233292 CVE-2024-52531
  glgo#GNOME/libsoup!407).
- Add 4c9e75c6.patch: fix an intermittent test failure
  (glgo#GNOME/soup#399).</changelog>
  <changelog author="mgorse@suse.com" date="1746014400">- Add more CVE fixes:
  + ef6c4bf6.patch (boo#1240750 CVE-2025-2784)
  + 96c22b67.patch (boo#1240750 CVE-2025-2784)
  + 19124679.patch (boo#1240752 CVE-2025-32050)
  + a5b86bfc.patch (boo#1240756 CVE-2025-32052)
  + 5739a090.patch (boo#1240757 CVE-2025-32053)
  + c9083869.patch (boo#1241686 CVE-2025-46420)
  + libsoup-CVE-2025-32914.patch (boo#1241164 CVE-2025-32914)
  + libsoup-CVE-2025-32907.patch (boo#1241222 CVE-2025-32907)
  + libsoup-CVE-2025-46421.patch (boo#1241688 CVE-2025-46421)</changelog>
  <changelog author="mgorse@suse.com" date="1748520000">- Add more CVE fixes:
  + libsoup-CVE-2025-32913.patch (boo#1241162 boo#1241238
    CVE-2025-32913 CVE-2025-32911)
  + libsoup-CVE-2025-32910.patch (boo#1241252 CVE-2025-32910)
  + libsoup-CVE-2025-32906.patch (boo#1241263 CVE-2025-32906)
  + libsoup-CVE-2025-32912.patch (boo#1241214 CVE-2025-32912)
  + libsoup-CVE-2025-32909.patch (boo#1241226 CVE-2025-32909)
  + libsoup-CVE-2025-4948.patch (boo#1243332 CVE-2025-4948)
  + libsoup-CVE-2025-4969.patch (boo#1243423 CVE-2025-4969)</changelog>
</package>
<package pkgid="58116e2e415ea06e320cf4c4c15a6b3f1195e66df72e8b531c02d467005aea64" name="libsqlite3-0" arch="x86_64">
  <version epoch="0" ver="3.49.1" rel="150000.3.27.1"/>
  <changelog author="max@suse.com" date="1552996800">- CVE-2018-20346, bsc#1119687: Upgrade to the most recent version
  to fix a remote code execution vulnerability in FTS3 (Magellan).
- Drop sqlite-fts5-link.patch and do it in the spec file instead.
- Version 3.27.2:
  * Add the VACUUM INTO command
  * Issue an SQLITE_WARNING message on the error log if a
    double-quoted string literal is used
  * Add the remove_diacritics=2 option to FTS3 and FTS5.
  * Add  the SQLITE_PREPARE_NO_VTAB option to sqlite3_prepare_v3().
    Use that option to prevent circular references to shadow tables
    from causing resource leaks.
  * Enhancements to the sqlite3_deserialize() interface
  * Enhancements to the CLI, mostly to support testing and debugging
    of the SQLite library itself
  * Increased robustness against malicious SQL that is run against
    a maliciously corrupted database
- Version 3.26.0:
  * Optimization: When doing an UPDATE on a table with indexes on
    expressions, do not update the expression indexes if they do
    not refer to any of the columns of the table being updated.
  * Allow the xBestIndex() method of virtual table implementations
    to return SQLITE_CONSTRAINT to indicate that the proposed query
    plan is unusable and should not be given further consideration.
  * Added the SQLITE_DBCONFIG_DEFENSIVE option which disables the
    ability to create corrupt database files using ordinary SQL.
  * Added support for read-only shadow tables when the
    SQLITE_DBCONFIG_DEFENSIVE option is enabled.
  * Added the PRAGMA legacy_alter_table command, which if enabled
    causes the ALTER TABLE command to behave like older version of
    SQLite (prior to version 3.25.0) for compatibility.
  * Added PRAGMA table_xinfo that works just like PRAGMA table_info
    except that it also shows hidden columns in virtual tables.
  * Added the explain virtual table as a run-time loadable
    extension.
  * Add a limit counter to the query planner to prevent excessive
    sqlite3_prepare() times for certain pathological SQL inputs.
  * Added support for the sqlite3_normalized_sql() interface, when
    compiling with SQLITE_ENABLE_NORMALIZE.
  * Enhanced triggers so that they can use table-valued functions
    that exist in schemas other than the schema where the trigger
    is defined.
  * Improvements to the ".help" command in the CLI.
  * The SQLITE_HISTORY environment variable, if it exists,
    specifies the name of the command-line editing history file.
  * The --deserialize option associated with opening a new database
    in the CLI cause the database file to be read into memory and
    accessed using the sqlite3_deserialize() API. This simplifies
    running tests on a database without modifying the file on disk.
- Version 3.25.2:
  * Add the PRAGMA legacy_alter_table=ON command that causes the
    "ALTER TABLE RENAME" command to behave as in 3.24.0 and earlier
  * Fix issue with some expressions with windows functions in views
- Version 3.25.1:
  * Avoid false-positive error checks on ALTER TABLE
  * Further ORDER BY LIMIT optimization fixes for window functions
- Version 3.25.0:
  * Add support for window functions
  * Add support for renaming columns within a table
  * Query optimizer improvements
  * slightly better concurrency in multi-threaded environments
  * The ORDER BY LIMIT optimization might have caused an infinite
    loop in the byte code of the prepared statement under very
    obscure circumstances, due to a confluence of minor defects in
    the query optimizer
- Version 3.24.0:
  * Add support for PostgreSQL-style UPSERT
  * Add support for auxiliary columns in r-tree tables
  * Add C-language APIs for discovering SQL keywords used by SQLite
  * Add C-language APIs for dynamic strings based on sqlite3_str
  * Enhance ALTER TABLE so that it recognizes "true" and "false" as
    valid arguments to DEFAULT
  * Add the sorter-reference optimization as a compile-time option
  * Improve the format of the EXPLAIN QUERY PLAN raw output, so that
  it gives better information about the query plan and about the
    relationships between the various components of the plan
  * Added the SQLITE_DBCONFIG_RESET_DATABASE option to the
    sqlite3_db_config() API.
  * Automatically intercept the raw EXPLAIN QUERY PLAN output an
    reformat it into an ASCII-art graph.
  * Lines that begin with "#" and that are not in the middle of an
    SQL statement are interpreted as comments
  * Add the --append option to the ".backup" command
  * Add the ".dbconfig" command
  * various performance improvements
  * various bug fixes</changelog>
  <changelog author="max@suse.com" date="1555502400">- Upgrade to 3.28.0:
  * CVE-2019-9936, bsc#1130326: running fts5 prefix queries inside
    a transaction could trigger a heap-based buffer over-read.
  * CVE-2019-9937, bsc#1130325: interleaving reads and writes in a
    single transaction with an fts5 virtual table will lead to a
    NULL Pointer Dereference.
  * Enhanced window functions
  * Enhanced VACUUM INTO so that it works for read-only databases.
  * New query optimizations.
  * Added the sqlite3_value_frombind() API for determining if the
    argument to an SQL function is from a bound parameter.
  * Security and compatibilities enhancements to fts3_tokenizer().
  * Improved robustness against corrupt database files.</changelog>
  <changelog author="max@suse.com" date="1568116800">- bsc#1150137, CVE-2019-16168, sqlite3-CVE-2019-16168.patch:
  Improper validation of qlite_stat1 sz field leads to division by
  zero.</changelog>
  <changelog author="max@suse.com" date="1625054400">- Sync version 3.36.0 from Factory to implement jsc#SLE-16032.
- Obsoletes sqlite3-CVE-2019-16168.patch.
- The following CVEs have been fixed in upstream releases up to
  this point, but were not mentioned in the change log so far:
  * bsc#1173641, CVE-2020-15358: heap-based buffer overflow in
    multiSelectOrderBy due to mishandling of query-flattener
    optimization
  * bsc#1164719, CVE-2020-9327: NULL pointer dereference and
    segmentation fault because of generated column optimizations in
    isAuxiliaryVtabOperator
  * bsc#1160439, CVE-2019-20218: selectExpander in select.c proceeds
    with WITH stack unwinding even after a parsing error
  * bsc#1160438, CVE-2019-19959: memory-management error via
    ext/misc/zipfile.c involving embedded '\0' input
  * bsc#1160309, CVE-2019-19923: improper handling  of  certain uses
    of SELECT DISTINCT in flattenSubquery may lead to null pointer
    dereference
  * bsc#1159850, CVE-2019-19924: improper error handling in
    sqlite3WindowRewrite()
  * bsc#1159847, CVE-2019-19925: improper handling of NULL pathname
    during an update of a ZIP archive
  * bsc#1159715, CVE-2019-19926: improper handling  of certain
    errors during parsing  multiSelect in select.c
  * bsc#1159491, CVE-2019-19880: exprListAppendList in window.c
    allows attackers to trigger an invalid pointer dereference
  * bsc#1158960, CVE-2019-19603: during handling of CREATE TABLE
    and CREATE VIEW statements, does not consider confusion with
    a shadow table name
  * bsc#1158959, CVE-2019-19646: pragma.c mishandles NOT NULL in an
    integrity_check PRAGMA command in certain cases of generated
    columns
  * bsc#1158958, CVE-2019-19645: alter.c allows attackers to trigger
    infinite recursion via certain types of self-referential views
    in conjunction with ALTER TABLE statements
  * bsc#1158812, CVE-2019-19317: lookupName in resolve.c omits bits
    from the colUsed bitmask in the case of a generated column,
    which allows attackers to cause a denial of service
  * bsc#1157818, CVE-2019-19244: sqlite3,sqlite2,sqlite: The
    function sqlite3Select in select.c allows a crash if a
    sub-select uses both DISTINCT and window functions, and also
    has certain ORDER BY usage
  * bsc#928701, CVE-2015-3415: sqlite3VdbeExec comparison operator
    vulnerability
  * bsc#928700, CVE-2015-3414: sqlite3,sqlite2: dequoting of
    collation-sequence names
  * CVE-2020-13434 boo#1172115: integer overflow in
    sqlite3_str_vappendf
  * CVE-2020-13630 boo#1172234: use-after-free in fts3EvalNextRow
  * CVE-2020-13631 boo#1172236: virtual table allowed to be renamed
    to one of its shadow tables
  * CVE-2020-13632 boo#1172240: NULL pointer dereference via
    crafted matchinfo() query
  * CVE-2020-13435: Malicious SQL statements could have crashed the
    process that is running SQLite (boo#1172091)</changelog>
  <changelog author="max@suse.com" date="1638273600">- SQLite3 3.37.0:
  * STRICT tables provide a prescriptive style of data type
    management, for developers who prefer that kind of thing.
  * When adding columns that contain a CHECK constraint or a
    generated column containing a NOT NULL constraint, the
    ALTER TABLE ADD COLUMN now checks new constraints against
    preexisting rows in the database and will only proceed if no
    constraints are violated.
  * Added the PRAGMA table_list statement.
  * Add the .connection command, allowing the CLI to keep multiple
    database connections open at the same time.
  * Add the --safe command-line option that disables dot-commands
    and SQL statements that might cause side-effects that extend
    beyond the single database file named on the command-line.
  * CLI: Performance improvements when reading SQL statements that
    span many lines.
  * Added the sqlite3_autovacuum_pages() interface.
  * The sqlite3_deserialize() does not and has never worked
    for the TEMP database. That limitation is now noted in the
    documentation.
  * The query planner now omits ORDER BY clauses on subqueries and
    views if removing those clauses does not change the semantics
    of the query.
  * The generate_series table-valued function extension is modified
    so that the first parameter ("START") is now required. This is
    done as a way to demonstrate how to write table-valued
    functions with required parameters. The legacy behavior is
    available using the -DZERO_ARGUMENT_GENERATE_SERIES
    compile-time option.
  * Added new sqlite3_changes64() and sqlite3_total_changes64()
    interfaces.
  * Added the SQLITE_OPEN_EXRESCODE flag option to sqlite3_open_v2().
  * Use less memory to hold the database schema.
  * bsc#1189802, CVE-2021-36690: Fix an issue with the SQLite Expert
    extension when a column has no collating sequence.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1641124800">- update to 3.37.1:
  * Fix a bug introduced by the UPSERT enhancements of version
    3.35.0 that can cause incorrect byte-code to be generated for
    some obscure but valid SQL, possibly resulting in a NULL-
    pointer dereference.
  * Fix an OOB read that can occur in FTS5 when reading corrupt
    database files.
  * Improved robustness of the --safe option in the CLI.
  * Other minor fixes to assert() statements and test cases.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1641988800">- update to 3.37.2:
  * Fix a bug introduced in version 3.35.0 (2021-03-12) that can
    cause database corruption if a SAVEPOINT is rolled back while
    in PRAGMA temp_store=MEMORY mode, and other changes are made,
    and then the outer transaction commits
  * Fix a long-standing problem with ON DELETE CASCADE and ON
    UPDATE CASCADE in which a cache of the bytecode used to
    implement the cascading change was not being reset following a
    local DDL change</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1645876800">- update to 3.38.0
  * Add the -&gt; and -&gt;&gt; operators for easier processing of JSON
  * The JSON functions are now built-ins
  * Enhancements to date and time functions
  * Rename the printf() SQL function to format() for better
    compatibility, with alias for backwards compatibility.
  * Add the sqlite3_error_offset() interface for helping localize
    an SQL error to a specific character in the input SQL text
  * Enhance the interface to virtual tables
  * CLI columnar output modes are enhanced to correctly handle tabs
    and newlines embedded in text, and add options like "--wrap N",
    "--wordwrap on", and "--quote" to the columnar output modes.
  * Query planner enhancements using a Bloom filter to speed up
    large analytic queries, and a balanced merge tree to evaluate
    UNION or UNION ALL compound SELECT statements that have an
    ORDER BY clause.
  * The ALTER TABLE statement is changed to silently ignores
    entries in the sqlite_schema table that do not parse when
    PRAGMA writable_schema=ON</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1647172800">- update to 3.38.1:
  * Fix problems with the new Bloom filter optimization that might
    cause some obscure queries to get an incorrect answer.
  * Fix the localtime modifier of the date and time functions so
    that it preserves fractional seconds.
  * Fix the sqlite_offset SQL function so that it works correctly
    even in corner cases such as when the argument is a virtual
    column or the column of a view.
  * Fix row value IN operator constraints on virtual tables so that
    they work correctly even if the virtual table implementation
    relies on bytecode to filter rows that do not satisfy the
    constraint.
  * Other minor fixes to assert() statements, test cases, and
    documentation. See the source code timeline for details.
- add upstream patch to run atof1 tests only on x86_64
  sqlite-src-3380100-atof1.patch</changelog>
  <changelog author="max@suse.com" date="1647432000">- Remove obsolete configure flags
- Package the Tcl bindings here again so that we only ship one copy
  of SQLite (bsc#1195773).</changelog>
  <changelog author="max@suse.com" date="1648555200">- update to 3.38.2:
  * Fix a problem with the Bloom filter optimization that might
    cause an incorrect answer when doing a LEFT JOIN with a WHERE
    clause constraint that says that one of the columns on the
    right table of the LEFT JOIN is NULL.
  * Other minor patches.</changelog>
  <changelog author="info@paolostivanin.com" date="1651147200">- update to 3.38.3:
  * Fix a case of the query planner be overly aggressive with
    optimizing automatic-index and Bloom-filter construction,
    using inappropriate ON clause terms to restrict the size of the
    automatic-index or Bloom filter, and resulting in missing rows
    in the output.
  * Other minor patches. See the timeline for details.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1652011200">- update to 3.38.5:
  * Fix a blunder in the CLI of the 3.38.4 release
- includes changes from 3.38.4:
  * fix a byte-code problem in the Bloom filter pull-down
    optimization added by release 3.38.0 in which an error in the
    byte code causes the byte code engine to enter an infinite loop
    when the pull-down optimization encounters a NULL key</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1656676800">- update to 3.39.0:
  * Add (long overdue) support for RIGHT and FULL OUTER JOIN
  * Add new binary comparison operators IS NOT DISTINCT FROM and
    IS DISTINCT FROM that are equivalent to IS and IS NOT,
    respective, for compatibility with PostgreSQL and SQL standards
  * Add a new return code (value "3") from the sqlite3_vtab_distinct()
    interface that indicates a query that has both DISTINCT and
    ORDER BY clauses
  * Added the sqlite3_db_name() interface
  * The unix os interface resolves all symbolic links in database
    filenames to create a canonical name for the database before
    the file is opened
  * Defer materializing views until the materialization is actually
    needed, thus avoiding unnecessary work if the materialization
    turns out to never be used
  * The HAVING clause of a SELECT statement is now allowed on any
    aggregate query, even queries that do not have a GROUP BY
    clause
  * Many microoptimizations collectively reduce CPU cycles by about
    2.3%.
- drop sqlite-src-3380100-atof1.patch, included upstream
- add sqlite-src-3390000-func7-pg-181.patch to skip float precision
  related test failures on 32 bit</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1657886400">- update to 3.39.1:
  * Fix an incorrect result from a query that uses a view that
    contains a compound SELECT in which only one arm contains a
    RIGHT JOIN and where the view is not the first FROM clause term
    of the query that contains the view
  * Fix a long-standing problem with ALTER TABLE RENAME that can
    only arise if the sqlite3_limit(SQLITE_LIMIT_SQL_LENGTH) is set
    to a very small value.
  * Fix a long-standing problem in FTS3 that can only arise when
    compiled with the SQLITE_ENABLE_FTS3_PARENTHESIS compile-time
    option.
  * Fix the initial-prefix optimization for the REGEXP extension so
    that it works correctly even if the prefix contains characters
    that require a 3-byte UTF8 encoding.
  * Enhance the sqlite_stmt virtual table so that it buffers all of
    its output.</changelog>
  <changelog author="max@suse.com" date="1658404800">- update to 3.39.2:
  * Fix a performance regression in the query planner associated
    with rearranging the order of FROM clause terms in the
    presences of a LEFT JOIN.
  * Apply fixes for CVE-2022-35737, Chromium bugs 1343348 and
    1345947, forum post 3607259d3c, and other minor problems
    discovered by internal testing. [boo#1201783]</changelog>
  <changelog author="max@suse.com" date="1662379200">- update to 3.39.3:
  * Use a statement journal on DML statement affecting two or more
    database rows if the statement makes use of a SQL functions
    that might abort.
  * Use a mutex to protect the PRAGMA temp_store_directory and
    PRAGMA data_store_directory statements, even though they are
    decremented and documented as not being threadsafe.</changelog>
  <changelog author="max@suse.com" date="1670932800">- bsc#1206337, CVE-2022-46908, sqlite-CVE-2022-46908.patch:
  relying on --safe for execution of an untrusted CLI script</changelog>
  <changelog author="max@suse.com" date="1700481600">- Sync version 3.44.0 from Factory
  * Fixes bsc#1210660, CVE-2023-2137: Heap buffer overflow
  * sqlite3-rtree-i686.patch: temporary build fix for 32-bit x86.
  * Obsoletes sqlite-CVE-2022-46908.patch
  * Obsoletes sqlite-src-3390000-func7-pg-181.patch</changelog>
  <changelog author="max@suse.com" date="1744632000">- Sync version 3.49.1 from Factory (jsc#SLE-16032):
  * CVE-2025-29087, bsc#1241020: Fix a bug in the concat_ws()
    function, introduced in version 3.44.0, that could lead to a
    memory error if the separator string is very large (hundreds
    of megabytes).
  * CVE-2025-29088, bsc#1241078: Enhanced the
    SQLITE_DBCONFIG_LOOKASIDE interface to make it  more robust
    against misuse.
  * Obsoletes sqlite3-rtree-i686.patch</changelog>
</package>
<package pkgid="42fd21bd429a1e4f41b52bc5712ba1f2c6ed9bb67a50992672ee98f3ea53dbbc" name="libsqlite3-0" arch="x86_64">
  <version epoch="0" ver="3.50.2" rel="150000.3.33.1"/>
  <changelog author="max@suse.com" date="1568116800">- bsc#1150137, CVE-2019-16168, sqlite3-CVE-2019-16168.patch:
  Improper validation of qlite_stat1 sz field leads to division by
  zero.</changelog>
  <changelog author="max@suse.com" date="1625054400">- Sync version 3.36.0 from Factory to implement jsc#SLE-16032.
- Obsoletes sqlite3-CVE-2019-16168.patch.
- The following CVEs have been fixed in upstream releases up to
  this point, but were not mentioned in the change log so far:
  * bsc#1173641, CVE-2020-15358: heap-based buffer overflow in
    multiSelectOrderBy due to mishandling of query-flattener
    optimization
  * bsc#1164719, CVE-2020-9327: NULL pointer dereference and
    segmentation fault because of generated column optimizations in
    isAuxiliaryVtabOperator
  * bsc#1160439, CVE-2019-20218: selectExpander in select.c proceeds
    with WITH stack unwinding even after a parsing error
  * bsc#1160438, CVE-2019-19959: memory-management error via
    ext/misc/zipfile.c involving embedded '\0' input
  * bsc#1160309, CVE-2019-19923: improper handling  of  certain uses
    of SELECT DISTINCT in flattenSubquery may lead to null pointer
    dereference
  * bsc#1159850, CVE-2019-19924: improper error handling in
    sqlite3WindowRewrite()
  * bsc#1159847, CVE-2019-19925: improper handling of NULL pathname
    during an update of a ZIP archive
  * bsc#1159715, CVE-2019-19926: improper handling  of certain
    errors during parsing  multiSelect in select.c
  * bsc#1159491, CVE-2019-19880: exprListAppendList in window.c
    allows attackers to trigger an invalid pointer dereference
  * bsc#1158960, CVE-2019-19603: during handling of CREATE TABLE
    and CREATE VIEW statements, does not consider confusion with
    a shadow table name
  * bsc#1158959, CVE-2019-19646: pragma.c mishandles NOT NULL in an
    integrity_check PRAGMA command in certain cases of generated
    columns
  * bsc#1158958, CVE-2019-19645: alter.c allows attackers to trigger
    infinite recursion via certain types of self-referential views
    in conjunction with ALTER TABLE statements
  * bsc#1158812, CVE-2019-19317: lookupName in resolve.c omits bits
    from the colUsed bitmask in the case of a generated column,
    which allows attackers to cause a denial of service
  * bsc#1157818, CVE-2019-19244: sqlite3,sqlite2,sqlite: The
    function sqlite3Select in select.c allows a crash if a
    sub-select uses both DISTINCT and window functions, and also
    has certain ORDER BY usage
  * bsc#928701, CVE-2015-3415: sqlite3VdbeExec comparison operator
    vulnerability
  * bsc#928700, CVE-2015-3414: sqlite3,sqlite2: dequoting of
    collation-sequence names
  * CVE-2020-13434 boo#1172115: integer overflow in
    sqlite3_str_vappendf
  * CVE-2020-13630 boo#1172234: use-after-free in fts3EvalNextRow
  * CVE-2020-13631 boo#1172236: virtual table allowed to be renamed
    to one of its shadow tables
  * CVE-2020-13632 boo#1172240: NULL pointer dereference via
    crafted matchinfo() query
  * CVE-2020-13435: Malicious SQL statements could have crashed the
    process that is running SQLite (boo#1172091)</changelog>
  <changelog author="max@suse.com" date="1638273600">- SQLite3 3.37.0:
  * STRICT tables provide a prescriptive style of data type
    management, for developers who prefer that kind of thing.
  * When adding columns that contain a CHECK constraint or a
    generated column containing a NOT NULL constraint, the
    ALTER TABLE ADD COLUMN now checks new constraints against
    preexisting rows in the database and will only proceed if no
    constraints are violated.
  * Added the PRAGMA table_list statement.
  * Add the .connection command, allowing the CLI to keep multiple
    database connections open at the same time.
  * Add the --safe command-line option that disables dot-commands
    and SQL statements that might cause side-effects that extend
    beyond the single database file named on the command-line.
  * CLI: Performance improvements when reading SQL statements that
    span many lines.
  * Added the sqlite3_autovacuum_pages() interface.
  * The sqlite3_deserialize() does not and has never worked
    for the TEMP database. That limitation is now noted in the
    documentation.
  * The query planner now omits ORDER BY clauses on subqueries and
    views if removing those clauses does not change the semantics
    of the query.
  * The generate_series table-valued function extension is modified
    so that the first parameter ("START") is now required. This is
    done as a way to demonstrate how to write table-valued
    functions with required parameters. The legacy behavior is
    available using the -DZERO_ARGUMENT_GENERATE_SERIES
    compile-time option.
  * Added new sqlite3_changes64() and sqlite3_total_changes64()
    interfaces.
  * Added the SQLITE_OPEN_EXRESCODE flag option to sqlite3_open_v2().
  * Use less memory to hold the database schema.
  * bsc#1189802, CVE-2021-36690: Fix an issue with the SQLite Expert
    extension when a column has no collating sequence.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1641124800">- update to 3.37.1:
  * Fix a bug introduced by the UPSERT enhancements of version
    3.35.0 that can cause incorrect byte-code to be generated for
    some obscure but valid SQL, possibly resulting in a NULL-
    pointer dereference.
  * Fix an OOB read that can occur in FTS5 when reading corrupt
    database files.
  * Improved robustness of the --safe option in the CLI.
  * Other minor fixes to assert() statements and test cases.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1641988800">- update to 3.37.2:
  * Fix a bug introduced in version 3.35.0 (2021-03-12) that can
    cause database corruption if a SAVEPOINT is rolled back while
    in PRAGMA temp_store=MEMORY mode, and other changes are made,
    and then the outer transaction commits
  * Fix a long-standing problem with ON DELETE CASCADE and ON
    UPDATE CASCADE in which a cache of the bytecode used to
    implement the cascading change was not being reset following a
    local DDL change</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1645876800">- update to 3.38.0
  * Add the -&gt; and -&gt;&gt; operators for easier processing of JSON
  * The JSON functions are now built-ins
  * Enhancements to date and time functions
  * Rename the printf() SQL function to format() for better
    compatibility, with alias for backwards compatibility.
  * Add the sqlite3_error_offset() interface for helping localize
    an SQL error to a specific character in the input SQL text
  * Enhance the interface to virtual tables
  * CLI columnar output modes are enhanced to correctly handle tabs
    and newlines embedded in text, and add options like "--wrap N",
    "--wordwrap on", and "--quote" to the columnar output modes.
  * Query planner enhancements using a Bloom filter to speed up
    large analytic queries, and a balanced merge tree to evaluate
    UNION or UNION ALL compound SELECT statements that have an
    ORDER BY clause.
  * The ALTER TABLE statement is changed to silently ignores
    entries in the sqlite_schema table that do not parse when
    PRAGMA writable_schema=ON</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1647172800">- update to 3.38.1:
  * Fix problems with the new Bloom filter optimization that might
    cause some obscure queries to get an incorrect answer.
  * Fix the localtime modifier of the date and time functions so
    that it preserves fractional seconds.
  * Fix the sqlite_offset SQL function so that it works correctly
    even in corner cases such as when the argument is a virtual
    column or the column of a view.
  * Fix row value IN operator constraints on virtual tables so that
    they work correctly even if the virtual table implementation
    relies on bytecode to filter rows that do not satisfy the
    constraint.
  * Other minor fixes to assert() statements, test cases, and
    documentation. See the source code timeline for details.
- add upstream patch to run atof1 tests only on x86_64
  sqlite-src-3380100-atof1.patch</changelog>
  <changelog author="max@suse.com" date="1647432000">- Remove obsolete configure flags
- Package the Tcl bindings here again so that we only ship one copy
  of SQLite (bsc#1195773).</changelog>
  <changelog author="max@suse.com" date="1648555200">- update to 3.38.2:
  * Fix a problem with the Bloom filter optimization that might
    cause an incorrect answer when doing a LEFT JOIN with a WHERE
    clause constraint that says that one of the columns on the
    right table of the LEFT JOIN is NULL.
  * Other minor patches.</changelog>
  <changelog author="info@paolostivanin.com" date="1651147200">- update to 3.38.3:
  * Fix a case of the query planner be overly aggressive with
    optimizing automatic-index and Bloom-filter construction,
    using inappropriate ON clause terms to restrict the size of the
    automatic-index or Bloom filter, and resulting in missing rows
    in the output.
  * Other minor patches. See the timeline for details.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1652011200">- update to 3.38.5:
  * Fix a blunder in the CLI of the 3.38.4 release
- includes changes from 3.38.4:
  * fix a byte-code problem in the Bloom filter pull-down
    optimization added by release 3.38.0 in which an error in the
    byte code causes the byte code engine to enter an infinite loop
    when the pull-down optimization encounters a NULL key</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1656676800">- update to 3.39.0:
  * Add (long overdue) support for RIGHT and FULL OUTER JOIN
  * Add new binary comparison operators IS NOT DISTINCT FROM and
    IS DISTINCT FROM that are equivalent to IS and IS NOT,
    respective, for compatibility with PostgreSQL and SQL standards
  * Add a new return code (value "3") from the sqlite3_vtab_distinct()
    interface that indicates a query that has both DISTINCT and
    ORDER BY clauses
  * Added the sqlite3_db_name() interface
  * The unix os interface resolves all symbolic links in database
    filenames to create a canonical name for the database before
    the file is opened
  * Defer materializing views until the materialization is actually
    needed, thus avoiding unnecessary work if the materialization
    turns out to never be used
  * The HAVING clause of a SELECT statement is now allowed on any
    aggregate query, even queries that do not have a GROUP BY
    clause
  * Many microoptimizations collectively reduce CPU cycles by about
    2.3%.
- drop sqlite-src-3380100-atof1.patch, included upstream
- add sqlite-src-3390000-func7-pg-181.patch to skip float precision
  related test failures on 32 bit</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1657886400">- update to 3.39.1:
  * Fix an incorrect result from a query that uses a view that
    contains a compound SELECT in which only one arm contains a
    RIGHT JOIN and where the view is not the first FROM clause term
    of the query that contains the view
  * Fix a long-standing problem with ALTER TABLE RENAME that can
    only arise if the sqlite3_limit(SQLITE_LIMIT_SQL_LENGTH) is set
    to a very small value.
  * Fix a long-standing problem in FTS3 that can only arise when
    compiled with the SQLITE_ENABLE_FTS3_PARENTHESIS compile-time
    option.
  * Fix the initial-prefix optimization for the REGEXP extension so
    that it works correctly even if the prefix contains characters
    that require a 3-byte UTF8 encoding.
  * Enhance the sqlite_stmt virtual table so that it buffers all of
    its output.</changelog>
  <changelog author="max@suse.com" date="1658404800">- update to 3.39.2:
  * Fix a performance regression in the query planner associated
    with rearranging the order of FROM clause terms in the
    presences of a LEFT JOIN.
  * Apply fixes for CVE-2022-35737, Chromium bugs 1343348 and
    1345947, forum post 3607259d3c, and other minor problems
    discovered by internal testing. [boo#1201783]</changelog>
  <changelog author="max@suse.com" date="1662379200">- update to 3.39.3:
  * Use a statement journal on DML statement affecting two or more
    database rows if the statement makes use of a SQL functions
    that might abort.
  * Use a mutex to protect the PRAGMA temp_store_directory and
    PRAGMA data_store_directory statements, even though they are
    decremented and documented as not being threadsafe.</changelog>
  <changelog author="max@suse.com" date="1670932800">- bsc#1206337, CVE-2022-46908, sqlite-CVE-2022-46908.patch:
  relying on --safe for execution of an untrusted CLI script</changelog>
  <changelog author="max@suse.com" date="1700481600">- Sync version 3.44.0 from Factory
  * Fixes bsc#1210660, CVE-2023-2137: Heap buffer overflow
  * sqlite3-rtree-i686.patch: temporary build fix for 32-bit x86.
  * Obsoletes sqlite-CVE-2022-46908.patch
  * Obsoletes sqlite-src-3390000-func7-pg-181.patch</changelog>
  <changelog author="max@suse.com" date="1744632000">- Sync version 3.49.1 from Factory (jsc#SLE-16032):
  * CVE-2025-29087, CVE-2025-3277, bsc#1241020:
    Fix a bug in the concat_ws() function, introduced in version
    3.44.0, that could lead to a memory error if the separator
    string is very large (hundreds of megabytes).
  * CVE-2025-29088, bsc#1241078: Enhanced the
    SQLITE_DBCONFIG_LOOKASIDE interface to make it  more robust
    against misuse.
  * Obsoletes sqlite3-rtree-i686.patch</changelog>
  <changelog author="max@suse.com" date="1752667200">- Sync version 3.50.2 from Factory:
  * CVE-2025-6965, bsc#1246597:
    Raise an error early if the number of aggregate terms in a
    query exceeds the maximum number of columns, to avoid
    downstream assertion faults.
  * Add subpackage for the lemon parser generator.
    + sqlite-3.49.0-fix-lemon-missing-cflags.patch
    + sqlite-3.6.23-lemon-system-template.patch</changelog>
  <changelog author="max@suse.com" date="1753444800">- Backpatch the URLs in sqlite3.n from https to http to avoid a
  file conflict with the tcl package on SLE-15-GA up to SP2. In
  SP3 and onwards the Tcl package does not contain the sqlite
  extension anymore.</changelog>
</package>
<package pkgid="b83301460d3a3d9784885562258d057be97b5f160dc646ace7ce020c6fbbf448" name="libsqlite3-0" arch="x86_64">
  <version epoch="0" ver="3.51.2" rel="150000.3.36.1"/>
  <changelog author="max@suse.com" date="1625054400">- Sync version 3.36.0 from Factory to implement jsc#SLE-16032.
- Obsoletes sqlite3-CVE-2019-16168.patch.
- The following CVEs have been fixed in upstream releases up to
  this point, but were not mentioned in the change log so far:
  * bsc#1173641, CVE-2020-15358: heap-based buffer overflow in
    multiSelectOrderBy due to mishandling of query-flattener
    optimization
  * bsc#1164719, CVE-2020-9327: NULL pointer dereference and
    segmentation fault because of generated column optimizations in
    isAuxiliaryVtabOperator
  * bsc#1160439, CVE-2019-20218: selectExpander in select.c proceeds
    with WITH stack unwinding even after a parsing error
  * bsc#1160438, CVE-2019-19959: memory-management error via
    ext/misc/zipfile.c involving embedded '\0' input
  * bsc#1160309, CVE-2019-19923: improper handling  of  certain uses
    of SELECT DISTINCT in flattenSubquery may lead to null pointer
    dereference
  * bsc#1159850, CVE-2019-19924: improper error handling in
    sqlite3WindowRewrite()
  * bsc#1159847, CVE-2019-19925: improper handling of NULL pathname
    during an update of a ZIP archive
  * bsc#1159715, CVE-2019-19926: improper handling  of certain
    errors during parsing  multiSelect in select.c
  * bsc#1159491, CVE-2019-19880: exprListAppendList in window.c
    allows attackers to trigger an invalid pointer dereference
  * bsc#1158960, CVE-2019-19603: during handling of CREATE TABLE
    and CREATE VIEW statements, does not consider confusion with
    a shadow table name
  * bsc#1158959, CVE-2019-19646: pragma.c mishandles NOT NULL in an
    integrity_check PRAGMA command in certain cases of generated
    columns
  * bsc#1158958, CVE-2019-19645: alter.c allows attackers to trigger
    infinite recursion via certain types of self-referential views
    in conjunction with ALTER TABLE statements
  * bsc#1158812, CVE-2019-19317: lookupName in resolve.c omits bits
    from the colUsed bitmask in the case of a generated column,
    which allows attackers to cause a denial of service
  * bsc#1157818, CVE-2019-19244: sqlite3,sqlite2,sqlite: The
    function sqlite3Select in select.c allows a crash if a
    sub-select uses both DISTINCT and window functions, and also
    has certain ORDER BY usage
  * bsc#928701, CVE-2015-3415: sqlite3VdbeExec comparison operator
    vulnerability
  * bsc#928700, CVE-2015-3414: sqlite3,sqlite2: dequoting of
    collation-sequence names
  * CVE-2020-13434 boo#1172115: integer overflow in
    sqlite3_str_vappendf
  * CVE-2020-13630 boo#1172234: use-after-free in fts3EvalNextRow
  * CVE-2020-13631 boo#1172236: virtual table allowed to be renamed
    to one of its shadow tables
  * CVE-2020-13632 boo#1172240: NULL pointer dereference via
    crafted matchinfo() query
  * CVE-2020-13435: Malicious SQL statements could have crashed the
    process that is running SQLite (boo#1172091)</changelog>
  <changelog author="max@suse.com" date="1638273600">- SQLite3 3.37.0:
  * STRICT tables provide a prescriptive style of data type
    management, for developers who prefer that kind of thing.
  * When adding columns that contain a CHECK constraint or a
    generated column containing a NOT NULL constraint, the
    ALTER TABLE ADD COLUMN now checks new constraints against
    preexisting rows in the database and will only proceed if no
    constraints are violated.
  * Added the PRAGMA table_list statement.
  * Add the .connection command, allowing the CLI to keep multiple
    database connections open at the same time.
  * Add the --safe command-line option that disables dot-commands
    and SQL statements that might cause side-effects that extend
    beyond the single database file named on the command-line.
  * CLI: Performance improvements when reading SQL statements that
    span many lines.
  * Added the sqlite3_autovacuum_pages() interface.
  * The sqlite3_deserialize() does not and has never worked
    for the TEMP database. That limitation is now noted in the
    documentation.
  * The query planner now omits ORDER BY clauses on subqueries and
    views if removing those clauses does not change the semantics
    of the query.
  * The generate_series table-valued function extension is modified
    so that the first parameter ("START") is now required. This is
    done as a way to demonstrate how to write table-valued
    functions with required parameters. The legacy behavior is
    available using the -DZERO_ARGUMENT_GENERATE_SERIES
    compile-time option.
  * Added new sqlite3_changes64() and sqlite3_total_changes64()
    interfaces.
  * Added the SQLITE_OPEN_EXRESCODE flag option to sqlite3_open_v2().
  * Use less memory to hold the database schema.
  * bsc#1189802, CVE-2021-36690: Fix an issue with the SQLite Expert
    extension when a column has no collating sequence.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1641124800">- update to 3.37.1:
  * Fix a bug introduced by the UPSERT enhancements of version
    3.35.0 that can cause incorrect byte-code to be generated for
    some obscure but valid SQL, possibly resulting in a NULL-
    pointer dereference.
  * Fix an OOB read that can occur in FTS5 when reading corrupt
    database files.
  * Improved robustness of the --safe option in the CLI.
  * Other minor fixes to assert() statements and test cases.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1641988800">- update to 3.37.2:
  * Fix a bug introduced in version 3.35.0 (2021-03-12) that can
    cause database corruption if a SAVEPOINT is rolled back while
    in PRAGMA temp_store=MEMORY mode, and other changes are made,
    and then the outer transaction commits
  * Fix a long-standing problem with ON DELETE CASCADE and ON
    UPDATE CASCADE in which a cache of the bytecode used to
    implement the cascading change was not being reset following a
    local DDL change</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1645876800">- update to 3.38.0
  * Add the -&gt; and -&gt;&gt; operators for easier processing of JSON
  * The JSON functions are now built-ins
  * Enhancements to date and time functions
  * Rename the printf() SQL function to format() for better
    compatibility, with alias for backwards compatibility.
  * Add the sqlite3_error_offset() interface for helping localize
    an SQL error to a specific character in the input SQL text
  * Enhance the interface to virtual tables
  * CLI columnar output modes are enhanced to correctly handle tabs
    and newlines embedded in text, and add options like "--wrap N",
    "--wordwrap on", and "--quote" to the columnar output modes.
  * Query planner enhancements using a Bloom filter to speed up
    large analytic queries, and a balanced merge tree to evaluate
    UNION or UNION ALL compound SELECT statements that have an
    ORDER BY clause.
  * The ALTER TABLE statement is changed to silently ignores
    entries in the sqlite_schema table that do not parse when
    PRAGMA writable_schema=ON</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1647172800">- update to 3.38.1:
  * Fix problems with the new Bloom filter optimization that might
    cause some obscure queries to get an incorrect answer.
  * Fix the localtime modifier of the date and time functions so
    that it preserves fractional seconds.
  * Fix the sqlite_offset SQL function so that it works correctly
    even in corner cases such as when the argument is a virtual
    column or the column of a view.
  * Fix row value IN operator constraints on virtual tables so that
    they work correctly even if the virtual table implementation
    relies on bytecode to filter rows that do not satisfy the
    constraint.
  * Other minor fixes to assert() statements, test cases, and
    documentation. See the source code timeline for details.
- add upstream patch to run atof1 tests only on x86_64
  sqlite-src-3380100-atof1.patch</changelog>
  <changelog author="max@suse.com" date="1647432000">- Remove obsolete configure flags
- Package the Tcl bindings here again so that we only ship one copy
  of SQLite (bsc#1195773).</changelog>
  <changelog author="max@suse.com" date="1648555200">- update to 3.38.2:
  * Fix a problem with the Bloom filter optimization that might
    cause an incorrect answer when doing a LEFT JOIN with a WHERE
    clause constraint that says that one of the columns on the
    right table of the LEFT JOIN is NULL.
  * Other minor patches.</changelog>
  <changelog author="info@paolostivanin.com" date="1651147200">- update to 3.38.3:
  * Fix a case of the query planner be overly aggressive with
    optimizing automatic-index and Bloom-filter construction,
    using inappropriate ON clause terms to restrict the size of the
    automatic-index or Bloom filter, and resulting in missing rows
    in the output.
  * Other minor patches. See the timeline for details.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1652011200">- update to 3.38.5:
  * Fix a blunder in the CLI of the 3.38.4 release
- includes changes from 3.38.4:
  * fix a byte-code problem in the Bloom filter pull-down
    optimization added by release 3.38.0 in which an error in the
    byte code causes the byte code engine to enter an infinite loop
    when the pull-down optimization encounters a NULL key</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1656676800">- update to 3.39.0:
  * Add (long overdue) support for RIGHT and FULL OUTER JOIN
  * Add new binary comparison operators IS NOT DISTINCT FROM and
    IS DISTINCT FROM that are equivalent to IS and IS NOT,
    respective, for compatibility with PostgreSQL and SQL standards
  * Add a new return code (value "3") from the sqlite3_vtab_distinct()
    interface that indicates a query that has both DISTINCT and
    ORDER BY clauses
  * Added the sqlite3_db_name() interface
  * The unix os interface resolves all symbolic links in database
    filenames to create a canonical name for the database before
    the file is opened
  * Defer materializing views until the materialization is actually
    needed, thus avoiding unnecessary work if the materialization
    turns out to never be used
  * The HAVING clause of a SELECT statement is now allowed on any
    aggregate query, even queries that do not have a GROUP BY
    clause
  * Many microoptimizations collectively reduce CPU cycles by about
    2.3%.
- drop sqlite-src-3380100-atof1.patch, included upstream
- add sqlite-src-3390000-func7-pg-181.patch to skip float precision
  related test failures on 32 bit</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1657886400">- update to 3.39.1:
  * Fix an incorrect result from a query that uses a view that
    contains a compound SELECT in which only one arm contains a
    RIGHT JOIN and where the view is not the first FROM clause term
    of the query that contains the view
  * Fix a long-standing problem with ALTER TABLE RENAME that can
    only arise if the sqlite3_limit(SQLITE_LIMIT_SQL_LENGTH) is set
    to a very small value.
  * Fix a long-standing problem in FTS3 that can only arise when
    compiled with the SQLITE_ENABLE_FTS3_PARENTHESIS compile-time
    option.
  * Fix the initial-prefix optimization for the REGEXP extension so
    that it works correctly even if the prefix contains characters
    that require a 3-byte UTF8 encoding.
  * Enhance the sqlite_stmt virtual table so that it buffers all of
    its output.</changelog>
  <changelog author="max@suse.com" date="1658404800">- update to 3.39.2:
  * Fix a performance regression in the query planner associated
    with rearranging the order of FROM clause terms in the
    presences of a LEFT JOIN.
  * Apply fixes for CVE-2022-35737, Chromium bugs 1343348 and
    1345947, forum post 3607259d3c, and other minor problems
    discovered by internal testing. [boo#1201783]</changelog>
  <changelog author="max@suse.com" date="1662379200">- update to 3.39.3:
  * Use a statement journal on DML statement affecting two or more
    database rows if the statement makes use of a SQL functions
    that might abort.
  * Use a mutex to protect the PRAGMA temp_store_directory and
    PRAGMA data_store_directory statements, even though they are
    decremented and documented as not being threadsafe.</changelog>
  <changelog author="max@suse.com" date="1670932800">- bsc#1206337, CVE-2022-46908, sqlite-CVE-2022-46908.patch:
  relying on --safe for execution of an untrusted CLI script</changelog>
  <changelog author="max@suse.com" date="1700481600">- Sync version 3.44.0 from Factory
  * Fixes bsc#1210660, CVE-2023-2137: Heap buffer overflow
  * sqlite3-rtree-i686.patch: temporary build fix for 32-bit x86.
  * Obsoletes sqlite-CVE-2022-46908.patch
  * Obsoletes sqlite-src-3390000-func7-pg-181.patch</changelog>
  <changelog author="max@suse.com" date="1744632000">- Sync version 3.49.1 from Factory (jsc#SLE-16032):
  * CVE-2025-29087, CVE-2025-3277, bsc#1241020:
    Fix a bug in the concat_ws() function, introduced in version
    3.44.0, that could lead to a memory error if the separator
    string is very large (hundreds of megabytes).
  * CVE-2025-29088, bsc#1241078: Enhanced the
    SQLITE_DBCONFIG_LOOKASIDE interface to make it  more robust
    against misuse.
  * Obsoletes sqlite3-rtree-i686.patch</changelog>
  <changelog author="max@suse.com" date="1752667200">- Sync version 3.50.2 from Factory:
  * CVE-2025-6965, bsc#1246597:
    Raise an error early if the number of aggregate terms in a
    query exceeds the maximum number of columns, to avoid
    downstream assertion faults.
  * Add subpackage for the lemon parser generator.
    + sqlite-3.49.0-fix-lemon-missing-cflags.patch
    + sqlite-3.6.23-lemon-system-template.patch</changelog>
  <changelog author="max@suse.com" date="1753444800">- Backpatch the URLs in sqlite3.n from https to http to avoid a
  file conflict with the tcl package on SLE-15-GA up to SP2. In
  SP3 and onwards the Tcl package does not contain the sqlite
  extension anymore.</changelog>
  <changelog author="max@suse.com" date="1770033600">- Sync version 3.51.2 from Factory:
  * CVE-2025-7709, bsc#1254670: Integer Overflow in FTS5 Extension
  * bsc#1248586: Fix icu-enabled build.</changelog>
</package>
<package pkgid="a7e1ffdb57153d4bfa96c80a7821474e181d3ea30e870fa4235f75c095a8a49c" name="libsqlite3-0" arch="x86_64">
  <version epoch="0" ver="3.51.3" rel="150000.3.39.1"/>
  <changelog author="max@suse.com" date="1638273600">- SQLite3 3.37.0:
  * STRICT tables provide a prescriptive style of data type
    management, for developers who prefer that kind of thing.
  * When adding columns that contain a CHECK constraint or a
    generated column containing a NOT NULL constraint, the
    ALTER TABLE ADD COLUMN now checks new constraints against
    preexisting rows in the database and will only proceed if no
    constraints are violated.
  * Added the PRAGMA table_list statement.
  * Add the .connection command, allowing the CLI to keep multiple
    database connections open at the same time.
  * Add the --safe command-line option that disables dot-commands
    and SQL statements that might cause side-effects that extend
    beyond the single database file named on the command-line.
  * CLI: Performance improvements when reading SQL statements that
    span many lines.
  * Added the sqlite3_autovacuum_pages() interface.
  * The sqlite3_deserialize() does not and has never worked
    for the TEMP database. That limitation is now noted in the
    documentation.
  * The query planner now omits ORDER BY clauses on subqueries and
    views if removing those clauses does not change the semantics
    of the query.
  * The generate_series table-valued function extension is modified
    so that the first parameter ("START") is now required. This is
    done as a way to demonstrate how to write table-valued
    functions with required parameters. The legacy behavior is
    available using the -DZERO_ARGUMENT_GENERATE_SERIES
    compile-time option.
  * Added new sqlite3_changes64() and sqlite3_total_changes64()
    interfaces.
  * Added the SQLITE_OPEN_EXRESCODE flag option to sqlite3_open_v2().
  * Use less memory to hold the database schema.
  * bsc#1189802, CVE-2021-36690: Fix an issue with the SQLite Expert
    extension when a column has no collating sequence.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1641124800">- update to 3.37.1:
  * Fix a bug introduced by the UPSERT enhancements of version
    3.35.0 that can cause incorrect byte-code to be generated for
    some obscure but valid SQL, possibly resulting in a NULL-
    pointer dereference.
  * Fix an OOB read that can occur in FTS5 when reading corrupt
    database files.
  * Improved robustness of the --safe option in the CLI.
  * Other minor fixes to assert() statements and test cases.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1641988800">- update to 3.37.2:
  * Fix a bug introduced in version 3.35.0 (2021-03-12) that can
    cause database corruption if a SAVEPOINT is rolled back while
    in PRAGMA temp_store=MEMORY mode, and other changes are made,
    and then the outer transaction commits
  * Fix a long-standing problem with ON DELETE CASCADE and ON
    UPDATE CASCADE in which a cache of the bytecode used to
    implement the cascading change was not being reset following a
    local DDL change</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1645876800">- update to 3.38.0
  * Add the -&gt; and -&gt;&gt; operators for easier processing of JSON
  * The JSON functions are now built-ins
  * Enhancements to date and time functions
  * Rename the printf() SQL function to format() for better
    compatibility, with alias for backwards compatibility.
  * Add the sqlite3_error_offset() interface for helping localize
    an SQL error to a specific character in the input SQL text
  * Enhance the interface to virtual tables
  * CLI columnar output modes are enhanced to correctly handle tabs
    and newlines embedded in text, and add options like "--wrap N",
    "--wordwrap on", and "--quote" to the columnar output modes.
  * Query planner enhancements using a Bloom filter to speed up
    large analytic queries, and a balanced merge tree to evaluate
    UNION or UNION ALL compound SELECT statements that have an
    ORDER BY clause.
  * The ALTER TABLE statement is changed to silently ignores
    entries in the sqlite_schema table that do not parse when
    PRAGMA writable_schema=ON</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1647172800">- update to 3.38.1:
  * Fix problems with the new Bloom filter optimization that might
    cause some obscure queries to get an incorrect answer.
  * Fix the localtime modifier of the date and time functions so
    that it preserves fractional seconds.
  * Fix the sqlite_offset SQL function so that it works correctly
    even in corner cases such as when the argument is a virtual
    column or the column of a view.
  * Fix row value IN operator constraints on virtual tables so that
    they work correctly even if the virtual table implementation
    relies on bytecode to filter rows that do not satisfy the
    constraint.
  * Other minor fixes to assert() statements, test cases, and
    documentation. See the source code timeline for details.
- add upstream patch to run atof1 tests only on x86_64
  sqlite-src-3380100-atof1.patch</changelog>
  <changelog author="max@suse.com" date="1647432000">- Remove obsolete configure flags
- Package the Tcl bindings here again so that we only ship one copy
  of SQLite (bsc#1195773).</changelog>
  <changelog author="max@suse.com" date="1648555200">- update to 3.38.2:
  * Fix a problem with the Bloom filter optimization that might
    cause an incorrect answer when doing a LEFT JOIN with a WHERE
    clause constraint that says that one of the columns on the
    right table of the LEFT JOIN is NULL.
  * Other minor patches.</changelog>
  <changelog author="info@paolostivanin.com" date="1651147200">- update to 3.38.3:
  * Fix a case of the query planner be overly aggressive with
    optimizing automatic-index and Bloom-filter construction,
    using inappropriate ON clause terms to restrict the size of the
    automatic-index or Bloom filter, and resulting in missing rows
    in the output.
  * Other minor patches. See the timeline for details.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1652011200">- update to 3.38.5:
  * Fix a blunder in the CLI of the 3.38.4 release
- includes changes from 3.38.4:
  * fix a byte-code problem in the Bloom filter pull-down
    optimization added by release 3.38.0 in which an error in the
    byte code causes the byte code engine to enter an infinite loop
    when the pull-down optimization encounters a NULL key</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1656676800">- update to 3.39.0:
  * Add (long overdue) support for RIGHT and FULL OUTER JOIN
  * Add new binary comparison operators IS NOT DISTINCT FROM and
    IS DISTINCT FROM that are equivalent to IS and IS NOT,
    respective, for compatibility with PostgreSQL and SQL standards
  * Add a new return code (value "3") from the sqlite3_vtab_distinct()
    interface that indicates a query that has both DISTINCT and
    ORDER BY clauses
  * Added the sqlite3_db_name() interface
  * The unix os interface resolves all symbolic links in database
    filenames to create a canonical name for the database before
    the file is opened
  * Defer materializing views until the materialization is actually
    needed, thus avoiding unnecessary work if the materialization
    turns out to never be used
  * The HAVING clause of a SELECT statement is now allowed on any
    aggregate query, even queries that do not have a GROUP BY
    clause
  * Many microoptimizations collectively reduce CPU cycles by about
    2.3%.
- drop sqlite-src-3380100-atof1.patch, included upstream
- add sqlite-src-3390000-func7-pg-181.patch to skip float precision
  related test failures on 32 bit</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1657886400">- update to 3.39.1:
  * Fix an incorrect result from a query that uses a view that
    contains a compound SELECT in which only one arm contains a
    RIGHT JOIN and where the view is not the first FROM clause term
    of the query that contains the view
  * Fix a long-standing problem with ALTER TABLE RENAME that can
    only arise if the sqlite3_limit(SQLITE_LIMIT_SQL_LENGTH) is set
    to a very small value.
  * Fix a long-standing problem in FTS3 that can only arise when
    compiled with the SQLITE_ENABLE_FTS3_PARENTHESIS compile-time
    option.
  * Fix the initial-prefix optimization for the REGEXP extension so
    that it works correctly even if the prefix contains characters
    that require a 3-byte UTF8 encoding.
  * Enhance the sqlite_stmt virtual table so that it buffers all of
    its output.</changelog>
  <changelog author="max@suse.com" date="1658404800">- update to 3.39.2:
  * Fix a performance regression in the query planner associated
    with rearranging the order of FROM clause terms in the
    presences of a LEFT JOIN.
  * Apply fixes for CVE-2022-35737, Chromium bugs 1343348 and
    1345947, forum post 3607259d3c, and other minor problems
    discovered by internal testing. [boo#1201783]</changelog>
  <changelog author="max@suse.com" date="1662379200">- update to 3.39.3:
  * Use a statement journal on DML statement affecting two or more
    database rows if the statement makes use of a SQL functions
    that might abort.
  * Use a mutex to protect the PRAGMA temp_store_directory and
    PRAGMA data_store_directory statements, even though they are
    decremented and documented as not being threadsafe.</changelog>
  <changelog author="max@suse.com" date="1670932800">- bsc#1206337, CVE-2022-46908, sqlite-CVE-2022-46908.patch:
  relying on --safe for execution of an untrusted CLI script</changelog>
  <changelog author="max@suse.com" date="1700481600">- Sync version 3.44.0 from Factory
  * Fixes bsc#1210660, CVE-2023-2137: Heap buffer overflow
  * sqlite3-rtree-i686.patch: temporary build fix for 32-bit x86.
  * Obsoletes sqlite-CVE-2022-46908.patch
  * Obsoletes sqlite-src-3390000-func7-pg-181.patch</changelog>
  <changelog author="max@suse.com" date="1744632000">- Sync version 3.49.1 from Factory (jsc#SLE-16032):
  * CVE-2025-29087, CVE-2025-3277, bsc#1241020:
    Fix a bug in the concat_ws() function, introduced in version
    3.44.0, that could lead to a memory error if the separator
    string is very large (hundreds of megabytes).
  * CVE-2025-29088, bsc#1241078: Enhanced the
    SQLITE_DBCONFIG_LOOKASIDE interface to make it  more robust
    against misuse.
  * Obsoletes sqlite3-rtree-i686.patch</changelog>
  <changelog author="max@suse.com" date="1752667200">- Sync version 3.50.2 from Factory:
  * CVE-2025-6965, bsc#1246597:
    Raise an error early if the number of aggregate terms in a
    query exceeds the maximum number of columns, to avoid
    downstream assertion faults.
  * Add subpackage for the lemon parser generator.
    + sqlite-3.49.0-fix-lemon-missing-cflags.patch
    + sqlite-3.6.23-lemon-system-template.patch</changelog>
  <changelog author="max@suse.com" date="1753444800">- Backpatch the URLs in sqlite3.n from https to http to avoid a
  file conflict with the tcl package on SLE-15-GA up to SP2. In
  SP3 and onwards the Tcl package does not contain the sqlite
  extension anymore.</changelog>
  <changelog author="max@suse.com" date="1770033600">- Sync version 3.51.2 from Factory:
  * bsc#1259619, CVE-2025-70873: zipfile extension may disclose
    uninitialized heap memory during inflation.
  * bsc#1254670, CVE-2025-7709: Integer Overflow in FTS5 Extension
  * bsc#1248586: Fix icu-enabled build.</changelog>
  <changelog author="max@suse.com" date="1773748800">- Sync version 3.51.3 from Factory:
  * Fix the WAL-reset database corruption bug:
    https://sqlite.org/wal.html#walresetbug</changelog>
</package>
<package pkgid="19d125838b7b740839212fe5cdc5463874e2e72af783c8384036a6520c955bc9" name="libsqlite3-0-32bit" arch="x86_64">
  <version epoch="0" ver="3.49.1" rel="150000.3.27.1"/>
  <changelog author="max@suse.com" date="1552996800">- CVE-2018-20346, bsc#1119687: Upgrade to the most recent version
  to fix a remote code execution vulnerability in FTS3 (Magellan).
- Drop sqlite-fts5-link.patch and do it in the spec file instead.
- Version 3.27.2:
  * Add the VACUUM INTO command
  * Issue an SQLITE_WARNING message on the error log if a
    double-quoted string literal is used
  * Add the remove_diacritics=2 option to FTS3 and FTS5.
  * Add  the SQLITE_PREPARE_NO_VTAB option to sqlite3_prepare_v3().
    Use that option to prevent circular references to shadow tables
    from causing resource leaks.
  * Enhancements to the sqlite3_deserialize() interface
  * Enhancements to the CLI, mostly to support testing and debugging
    of the SQLite library itself
  * Increased robustness against malicious SQL that is run against
    a maliciously corrupted database
- Version 3.26.0:
  * Optimization: When doing an UPDATE on a table with indexes on
    expressions, do not update the expression indexes if they do
    not refer to any of the columns of the table being updated.
  * Allow the xBestIndex() method of virtual table implementations
    to return SQLITE_CONSTRAINT to indicate that the proposed query
    plan is unusable and should not be given further consideration.
  * Added the SQLITE_DBCONFIG_DEFENSIVE option which disables the
    ability to create corrupt database files using ordinary SQL.
  * Added support for read-only shadow tables when the
    SQLITE_DBCONFIG_DEFENSIVE option is enabled.
  * Added the PRAGMA legacy_alter_table command, which if enabled
    causes the ALTER TABLE command to behave like older version of
    SQLite (prior to version 3.25.0) for compatibility.
  * Added PRAGMA table_xinfo that works just like PRAGMA table_info
    except that it also shows hidden columns in virtual tables.
  * Added the explain virtual table as a run-time loadable
    extension.
  * Add a limit counter to the query planner to prevent excessive
    sqlite3_prepare() times for certain pathological SQL inputs.
  * Added support for the sqlite3_normalized_sql() interface, when
    compiling with SQLITE_ENABLE_NORMALIZE.
  * Enhanced triggers so that they can use table-valued functions
    that exist in schemas other than the schema where the trigger
    is defined.
  * Improvements to the ".help" command in the CLI.
  * The SQLITE_HISTORY environment variable, if it exists,
    specifies the name of the command-line editing history file.
  * The --deserialize option associated with opening a new database
    in the CLI cause the database file to be read into memory and
    accessed using the sqlite3_deserialize() API. This simplifies
    running tests on a database without modifying the file on disk.
- Version 3.25.2:
  * Add the PRAGMA legacy_alter_table=ON command that causes the
    "ALTER TABLE RENAME" command to behave as in 3.24.0 and earlier
  * Fix issue with some expressions with windows functions in views
- Version 3.25.1:
  * Avoid false-positive error checks on ALTER TABLE
  * Further ORDER BY LIMIT optimization fixes for window functions
- Version 3.25.0:
  * Add support for window functions
  * Add support for renaming columns within a table
  * Query optimizer improvements
  * slightly better concurrency in multi-threaded environments
  * The ORDER BY LIMIT optimization might have caused an infinite
    loop in the byte code of the prepared statement under very
    obscure circumstances, due to a confluence of minor defects in
    the query optimizer
- Version 3.24.0:
  * Add support for PostgreSQL-style UPSERT
  * Add support for auxiliary columns in r-tree tables
  * Add C-language APIs for discovering SQL keywords used by SQLite
  * Add C-language APIs for dynamic strings based on sqlite3_str
  * Enhance ALTER TABLE so that it recognizes "true" and "false" as
    valid arguments to DEFAULT
  * Add the sorter-reference optimization as a compile-time option
  * Improve the format of the EXPLAIN QUERY PLAN raw output, so that
  it gives better information about the query plan and about the
    relationships between the various components of the plan
  * Added the SQLITE_DBCONFIG_RESET_DATABASE option to the
    sqlite3_db_config() API.
  * Automatically intercept the raw EXPLAIN QUERY PLAN output an
    reformat it into an ASCII-art graph.
  * Lines that begin with "#" and that are not in the middle of an
    SQL statement are interpreted as comments
  * Add the --append option to the ".backup" command
  * Add the ".dbconfig" command
  * various performance improvements
  * various bug fixes</changelog>
  <changelog author="max@suse.com" date="1555502400">- Upgrade to 3.28.0:
  * CVE-2019-9936, bsc#1130326: running fts5 prefix queries inside
    a transaction could trigger a heap-based buffer over-read.
  * CVE-2019-9937, bsc#1130325: interleaving reads and writes in a
    single transaction with an fts5 virtual table will lead to a
    NULL Pointer Dereference.
  * Enhanced window functions
  * Enhanced VACUUM INTO so that it works for read-only databases.
  * New query optimizations.
  * Added the sqlite3_value_frombind() API for determining if the
    argument to an SQL function is from a bound parameter.
  * Security and compatibilities enhancements to fts3_tokenizer().
  * Improved robustness against corrupt database files.</changelog>
  <changelog author="max@suse.com" date="1568116800">- bsc#1150137, CVE-2019-16168, sqlite3-CVE-2019-16168.patch:
  Improper validation of qlite_stat1 sz field leads to division by
  zero.</changelog>
  <changelog author="max@suse.com" date="1625054400">- Sync version 3.36.0 from Factory to implement jsc#SLE-16032.
- Obsoletes sqlite3-CVE-2019-16168.patch.
- The following CVEs have been fixed in upstream releases up to
  this point, but were not mentioned in the change log so far:
  * bsc#1173641, CVE-2020-15358: heap-based buffer overflow in
    multiSelectOrderBy due to mishandling of query-flattener
    optimization
  * bsc#1164719, CVE-2020-9327: NULL pointer dereference and
    segmentation fault because of generated column optimizations in
    isAuxiliaryVtabOperator
  * bsc#1160439, CVE-2019-20218: selectExpander in select.c proceeds
    with WITH stack unwinding even after a parsing error
  * bsc#1160438, CVE-2019-19959: memory-management error via
    ext/misc/zipfile.c involving embedded '\0' input
  * bsc#1160309, CVE-2019-19923: improper handling  of  certain uses
    of SELECT DISTINCT in flattenSubquery may lead to null pointer
    dereference
  * bsc#1159850, CVE-2019-19924: improper error handling in
    sqlite3WindowRewrite()
  * bsc#1159847, CVE-2019-19925: improper handling of NULL pathname
    during an update of a ZIP archive
  * bsc#1159715, CVE-2019-19926: improper handling  of certain
    errors during parsing  multiSelect in select.c
  * bsc#1159491, CVE-2019-19880: exprListAppendList in window.c
    allows attackers to trigger an invalid pointer dereference
  * bsc#1158960, CVE-2019-19603: during handling of CREATE TABLE
    and CREATE VIEW statements, does not consider confusion with
    a shadow table name
  * bsc#1158959, CVE-2019-19646: pragma.c mishandles NOT NULL in an
    integrity_check PRAGMA command in certain cases of generated
    columns
  * bsc#1158958, CVE-2019-19645: alter.c allows attackers to trigger
    infinite recursion via certain types of self-referential views
    in conjunction with ALTER TABLE statements
  * bsc#1158812, CVE-2019-19317: lookupName in resolve.c omits bits
    from the colUsed bitmask in the case of a generated column,
    which allows attackers to cause a denial of service
  * bsc#1157818, CVE-2019-19244: sqlite3,sqlite2,sqlite: The
    function sqlite3Select in select.c allows a crash if a
    sub-select uses both DISTINCT and window functions, and also
    has certain ORDER BY usage
  * bsc#928701, CVE-2015-3415: sqlite3VdbeExec comparison operator
    vulnerability
  * bsc#928700, CVE-2015-3414: sqlite3,sqlite2: dequoting of
    collation-sequence names
  * CVE-2020-13434 boo#1172115: integer overflow in
    sqlite3_str_vappendf
  * CVE-2020-13630 boo#1172234: use-after-free in fts3EvalNextRow
  * CVE-2020-13631 boo#1172236: virtual table allowed to be renamed
    to one of its shadow tables
  * CVE-2020-13632 boo#1172240: NULL pointer dereference via
    crafted matchinfo() query
  * CVE-2020-13435: Malicious SQL statements could have crashed the
    process that is running SQLite (boo#1172091)</changelog>
  <changelog author="max@suse.com" date="1638273600">- SQLite3 3.37.0:
  * STRICT tables provide a prescriptive style of data type
    management, for developers who prefer that kind of thing.
  * When adding columns that contain a CHECK constraint or a
    generated column containing a NOT NULL constraint, the
    ALTER TABLE ADD COLUMN now checks new constraints against
    preexisting rows in the database and will only proceed if no
    constraints are violated.
  * Added the PRAGMA table_list statement.
  * Add the .connection command, allowing the CLI to keep multiple
    database connections open at the same time.
  * Add the --safe command-line option that disables dot-commands
    and SQL statements that might cause side-effects that extend
    beyond the single database file named on the command-line.
  * CLI: Performance improvements when reading SQL statements that
    span many lines.
  * Added the sqlite3_autovacuum_pages() interface.
  * The sqlite3_deserialize() does not and has never worked
    for the TEMP database. That limitation is now noted in the
    documentation.
  * The query planner now omits ORDER BY clauses on subqueries and
    views if removing those clauses does not change the semantics
    of the query.
  * The generate_series table-valued function extension is modified
    so that the first parameter ("START") is now required. This is
    done as a way to demonstrate how to write table-valued
    functions with required parameters. The legacy behavior is
    available using the -DZERO_ARGUMENT_GENERATE_SERIES
    compile-time option.
  * Added new sqlite3_changes64() and sqlite3_total_changes64()
    interfaces.
  * Added the SQLITE_OPEN_EXRESCODE flag option to sqlite3_open_v2().
  * Use less memory to hold the database schema.
  * bsc#1189802, CVE-2021-36690: Fix an issue with the SQLite Expert
    extension when a column has no collating sequence.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1641124800">- update to 3.37.1:
  * Fix a bug introduced by the UPSERT enhancements of version
    3.35.0 that can cause incorrect byte-code to be generated for
    some obscure but valid SQL, possibly resulting in a NULL-
    pointer dereference.
  * Fix an OOB read that can occur in FTS5 when reading corrupt
    database files.
  * Improved robustness of the --safe option in the CLI.
  * Other minor fixes to assert() statements and test cases.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1641988800">- update to 3.37.2:
  * Fix a bug introduced in version 3.35.0 (2021-03-12) that can
    cause database corruption if a SAVEPOINT is rolled back while
    in PRAGMA temp_store=MEMORY mode, and other changes are made,
    and then the outer transaction commits
  * Fix a long-standing problem with ON DELETE CASCADE and ON
    UPDATE CASCADE in which a cache of the bytecode used to
    implement the cascading change was not being reset following a
    local DDL change</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1645876800">- update to 3.38.0
  * Add the -&gt; and -&gt;&gt; operators for easier processing of JSON
  * The JSON functions are now built-ins
  * Enhancements to date and time functions
  * Rename the printf() SQL function to format() for better
    compatibility, with alias for backwards compatibility.
  * Add the sqlite3_error_offset() interface for helping localize
    an SQL error to a specific character in the input SQL text
  * Enhance the interface to virtual tables
  * CLI columnar output modes are enhanced to correctly handle tabs
    and newlines embedded in text, and add options like "--wrap N",
    "--wordwrap on", and "--quote" to the columnar output modes.
  * Query planner enhancements using a Bloom filter to speed up
    large analytic queries, and a balanced merge tree to evaluate
    UNION or UNION ALL compound SELECT statements that have an
    ORDER BY clause.
  * The ALTER TABLE statement is changed to silently ignores
    entries in the sqlite_schema table that do not parse when
    PRAGMA writable_schema=ON</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1647172800">- update to 3.38.1:
  * Fix problems with the new Bloom filter optimization that might
    cause some obscure queries to get an incorrect answer.
  * Fix the localtime modifier of the date and time functions so
    that it preserves fractional seconds.
  * Fix the sqlite_offset SQL function so that it works correctly
    even in corner cases such as when the argument is a virtual
    column or the column of a view.
  * Fix row value IN operator constraints on virtual tables so that
    they work correctly even if the virtual table implementation
    relies on bytecode to filter rows that do not satisfy the
    constraint.
  * Other minor fixes to assert() statements, test cases, and
    documentation. See the source code timeline for details.
- add upstream patch to run atof1 tests only on x86_64
  sqlite-src-3380100-atof1.patch</changelog>
  <changelog author="max@suse.com" date="1647432000">- Remove obsolete configure flags
- Package the Tcl bindings here again so that we only ship one copy
  of SQLite (bsc#1195773).</changelog>
  <changelog author="max@suse.com" date="1648555200">- update to 3.38.2:
  * Fix a problem with the Bloom filter optimization that might
    cause an incorrect answer when doing a LEFT JOIN with a WHERE
    clause constraint that says that one of the columns on the
    right table of the LEFT JOIN is NULL.
  * Other minor patches.</changelog>
  <changelog author="info@paolostivanin.com" date="1651147200">- update to 3.38.3:
  * Fix a case of the query planner be overly aggressive with
    optimizing automatic-index and Bloom-filter construction,
    using inappropriate ON clause terms to restrict the size of the
    automatic-index or Bloom filter, and resulting in missing rows
    in the output.
  * Other minor patches. See the timeline for details.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1652011200">- update to 3.38.5:
  * Fix a blunder in the CLI of the 3.38.4 release
- includes changes from 3.38.4:
  * fix a byte-code problem in the Bloom filter pull-down
    optimization added by release 3.38.0 in which an error in the
    byte code causes the byte code engine to enter an infinite loop
    when the pull-down optimization encounters a NULL key</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1656676800">- update to 3.39.0:
  * Add (long overdue) support for RIGHT and FULL OUTER JOIN
  * Add new binary comparison operators IS NOT DISTINCT FROM and
    IS DISTINCT FROM that are equivalent to IS and IS NOT,
    respective, for compatibility with PostgreSQL and SQL standards
  * Add a new return code (value "3") from the sqlite3_vtab_distinct()
    interface that indicates a query that has both DISTINCT and
    ORDER BY clauses
  * Added the sqlite3_db_name() interface
  * The unix os interface resolves all symbolic links in database
    filenames to create a canonical name for the database before
    the file is opened
  * Defer materializing views until the materialization is actually
    needed, thus avoiding unnecessary work if the materialization
    turns out to never be used
  * The HAVING clause of a SELECT statement is now allowed on any
    aggregate query, even queries that do not have a GROUP BY
    clause
  * Many microoptimizations collectively reduce CPU cycles by about
    2.3%.
- drop sqlite-src-3380100-atof1.patch, included upstream
- add sqlite-src-3390000-func7-pg-181.patch to skip float precision
  related test failures on 32 bit</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1657886400">- update to 3.39.1:
  * Fix an incorrect result from a query that uses a view that
    contains a compound SELECT in which only one arm contains a
    RIGHT JOIN and where the view is not the first FROM clause term
    of the query that contains the view
  * Fix a long-standing problem with ALTER TABLE RENAME that can
    only arise if the sqlite3_limit(SQLITE_LIMIT_SQL_LENGTH) is set
    to a very small value.
  * Fix a long-standing problem in FTS3 that can only arise when
    compiled with the SQLITE_ENABLE_FTS3_PARENTHESIS compile-time
    option.
  * Fix the initial-prefix optimization for the REGEXP extension so
    that it works correctly even if the prefix contains characters
    that require a 3-byte UTF8 encoding.
  * Enhance the sqlite_stmt virtual table so that it buffers all of
    its output.</changelog>
  <changelog author="max@suse.com" date="1658404800">- update to 3.39.2:
  * Fix a performance regression in the query planner associated
    with rearranging the order of FROM clause terms in the
    presences of a LEFT JOIN.
  * Apply fixes for CVE-2022-35737, Chromium bugs 1343348 and
    1345947, forum post 3607259d3c, and other minor problems
    discovered by internal testing. [boo#1201783]</changelog>
  <changelog author="max@suse.com" date="1662379200">- update to 3.39.3:
  * Use a statement journal on DML statement affecting two or more
    database rows if the statement makes use of a SQL functions
    that might abort.
  * Use a mutex to protect the PRAGMA temp_store_directory and
    PRAGMA data_store_directory statements, even though they are
    decremented and documented as not being threadsafe.</changelog>
  <changelog author="max@suse.com" date="1670932800">- bsc#1206337, CVE-2022-46908, sqlite-CVE-2022-46908.patch:
  relying on --safe for execution of an untrusted CLI script</changelog>
  <changelog author="max@suse.com" date="1700481600">- Sync version 3.44.0 from Factory
  * Fixes bsc#1210660, CVE-2023-2137: Heap buffer overflow
  * sqlite3-rtree-i686.patch: temporary build fix for 32-bit x86.
  * Obsoletes sqlite-CVE-2022-46908.patch
  * Obsoletes sqlite-src-3390000-func7-pg-181.patch</changelog>
  <changelog author="max@suse.com" date="1744632000">- Sync version 3.49.1 from Factory (jsc#SLE-16032):
  * CVE-2025-29087, bsc#1241020: Fix a bug in the concat_ws()
    function, introduced in version 3.44.0, that could lead to a
    memory error if the separator string is very large (hundreds
    of megabytes).
  * CVE-2025-29088, bsc#1241078: Enhanced the
    SQLITE_DBCONFIG_LOOKASIDE interface to make it  more robust
    against misuse.
  * Obsoletes sqlite3-rtree-i686.patch</changelog>
</package>
<package pkgid="884f10ff8f87d5f1236c0fb6ae49a6aada147bafb28b781f001ab51917b3ba2a" name="libsqlite3-0-32bit" arch="x86_64">
  <version epoch="0" ver="3.50.2" rel="150000.3.33.1"/>
  <changelog author="max@suse.com" date="1568116800">- bsc#1150137, CVE-2019-16168, sqlite3-CVE-2019-16168.patch:
  Improper validation of qlite_stat1 sz field leads to division by
  zero.</changelog>
  <changelog author="max@suse.com" date="1625054400">- Sync version 3.36.0 from Factory to implement jsc#SLE-16032.
- Obsoletes sqlite3-CVE-2019-16168.patch.
- The following CVEs have been fixed in upstream releases up to
  this point, but were not mentioned in the change log so far:
  * bsc#1173641, CVE-2020-15358: heap-based buffer overflow in
    multiSelectOrderBy due to mishandling of query-flattener
    optimization
  * bsc#1164719, CVE-2020-9327: NULL pointer dereference and
    segmentation fault because of generated column optimizations in
    isAuxiliaryVtabOperator
  * bsc#1160439, CVE-2019-20218: selectExpander in select.c proceeds
    with WITH stack unwinding even after a parsing error
  * bsc#1160438, CVE-2019-19959: memory-management error via
    ext/misc/zipfile.c involving embedded '\0' input
  * bsc#1160309, CVE-2019-19923: improper handling  of  certain uses
    of SELECT DISTINCT in flattenSubquery may lead to null pointer
    dereference
  * bsc#1159850, CVE-2019-19924: improper error handling in
    sqlite3WindowRewrite()
  * bsc#1159847, CVE-2019-19925: improper handling of NULL pathname
    during an update of a ZIP archive
  * bsc#1159715, CVE-2019-19926: improper handling  of certain
    errors during parsing  multiSelect in select.c
  * bsc#1159491, CVE-2019-19880: exprListAppendList in window.c
    allows attackers to trigger an invalid pointer dereference
  * bsc#1158960, CVE-2019-19603: during handling of CREATE TABLE
    and CREATE VIEW statements, does not consider confusion with
    a shadow table name
  * bsc#1158959, CVE-2019-19646: pragma.c mishandles NOT NULL in an
    integrity_check PRAGMA command in certain cases of generated
    columns
  * bsc#1158958, CVE-2019-19645: alter.c allows attackers to trigger
    infinite recursion via certain types of self-referential views
    in conjunction with ALTER TABLE statements
  * bsc#1158812, CVE-2019-19317: lookupName in resolve.c omits bits
    from the colUsed bitmask in the case of a generated column,
    which allows attackers to cause a denial of service
  * bsc#1157818, CVE-2019-19244: sqlite3,sqlite2,sqlite: The
    function sqlite3Select in select.c allows a crash if a
    sub-select uses both DISTINCT and window functions, and also
    has certain ORDER BY usage
  * bsc#928701, CVE-2015-3415: sqlite3VdbeExec comparison operator
    vulnerability
  * bsc#928700, CVE-2015-3414: sqlite3,sqlite2: dequoting of
    collation-sequence names
  * CVE-2020-13434 boo#1172115: integer overflow in
    sqlite3_str_vappendf
  * CVE-2020-13630 boo#1172234: use-after-free in fts3EvalNextRow
  * CVE-2020-13631 boo#1172236: virtual table allowed to be renamed
    to one of its shadow tables
  * CVE-2020-13632 boo#1172240: NULL pointer dereference via
    crafted matchinfo() query
  * CVE-2020-13435: Malicious SQL statements could have crashed the
    process that is running SQLite (boo#1172091)</changelog>
  <changelog author="max@suse.com" date="1638273600">- SQLite3 3.37.0:
  * STRICT tables provide a prescriptive style of data type
    management, for developers who prefer that kind of thing.
  * When adding columns that contain a CHECK constraint or a
    generated column containing a NOT NULL constraint, the
    ALTER TABLE ADD COLUMN now checks new constraints against
    preexisting rows in the database and will only proceed if no
    constraints are violated.
  * Added the PRAGMA table_list statement.
  * Add the .connection command, allowing the CLI to keep multiple
    database connections open at the same time.
  * Add the --safe command-line option that disables dot-commands
    and SQL statements that might cause side-effects that extend
    beyond the single database file named on the command-line.
  * CLI: Performance improvements when reading SQL statements that
    span many lines.
  * Added the sqlite3_autovacuum_pages() interface.
  * The sqlite3_deserialize() does not and has never worked
    for the TEMP database. That limitation is now noted in the
    documentation.
  * The query planner now omits ORDER BY clauses on subqueries and
    views if removing those clauses does not change the semantics
    of the query.
  * The generate_series table-valued function extension is modified
    so that the first parameter ("START") is now required. This is
    done as a way to demonstrate how to write table-valued
    functions with required parameters. The legacy behavior is
    available using the -DZERO_ARGUMENT_GENERATE_SERIES
    compile-time option.
  * Added new sqlite3_changes64() and sqlite3_total_changes64()
    interfaces.
  * Added the SQLITE_OPEN_EXRESCODE flag option to sqlite3_open_v2().
  * Use less memory to hold the database schema.
  * bsc#1189802, CVE-2021-36690: Fix an issue with the SQLite Expert
    extension when a column has no collating sequence.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1641124800">- update to 3.37.1:
  * Fix a bug introduced by the UPSERT enhancements of version
    3.35.0 that can cause incorrect byte-code to be generated for
    some obscure but valid SQL, possibly resulting in a NULL-
    pointer dereference.
  * Fix an OOB read that can occur in FTS5 when reading corrupt
    database files.
  * Improved robustness of the --safe option in the CLI.
  * Other minor fixes to assert() statements and test cases.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1641988800">- update to 3.37.2:
  * Fix a bug introduced in version 3.35.0 (2021-03-12) that can
    cause database corruption if a SAVEPOINT is rolled back while
    in PRAGMA temp_store=MEMORY mode, and other changes are made,
    and then the outer transaction commits
  * Fix a long-standing problem with ON DELETE CASCADE and ON
    UPDATE CASCADE in which a cache of the bytecode used to
    implement the cascading change was not being reset following a
    local DDL change</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1645876800">- update to 3.38.0
  * Add the -&gt; and -&gt;&gt; operators for easier processing of JSON
  * The JSON functions are now built-ins
  * Enhancements to date and time functions
  * Rename the printf() SQL function to format() for better
    compatibility, with alias for backwards compatibility.
  * Add the sqlite3_error_offset() interface for helping localize
    an SQL error to a specific character in the input SQL text
  * Enhance the interface to virtual tables
  * CLI columnar output modes are enhanced to correctly handle tabs
    and newlines embedded in text, and add options like "--wrap N",
    "--wordwrap on", and "--quote" to the columnar output modes.
  * Query planner enhancements using a Bloom filter to speed up
    large analytic queries, and a balanced merge tree to evaluate
    UNION or UNION ALL compound SELECT statements that have an
    ORDER BY clause.
  * The ALTER TABLE statement is changed to silently ignores
    entries in the sqlite_schema table that do not parse when
    PRAGMA writable_schema=ON</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1647172800">- update to 3.38.1:
  * Fix problems with the new Bloom filter optimization that might
    cause some obscure queries to get an incorrect answer.
  * Fix the localtime modifier of the date and time functions so
    that it preserves fractional seconds.
  * Fix the sqlite_offset SQL function so that it works correctly
    even in corner cases such as when the argument is a virtual
    column or the column of a view.
  * Fix row value IN operator constraints on virtual tables so that
    they work correctly even if the virtual table implementation
    relies on bytecode to filter rows that do not satisfy the
    constraint.
  * Other minor fixes to assert() statements, test cases, and
    documentation. See the source code timeline for details.
- add upstream patch to run atof1 tests only on x86_64
  sqlite-src-3380100-atof1.patch</changelog>
  <changelog author="max@suse.com" date="1647432000">- Remove obsolete configure flags
- Package the Tcl bindings here again so that we only ship one copy
  of SQLite (bsc#1195773).</changelog>
  <changelog author="max@suse.com" date="1648555200">- update to 3.38.2:
  * Fix a problem with the Bloom filter optimization that might
    cause an incorrect answer when doing a LEFT JOIN with a WHERE
    clause constraint that says that one of the columns on the
    right table of the LEFT JOIN is NULL.
  * Other minor patches.</changelog>
  <changelog author="info@paolostivanin.com" date="1651147200">- update to 3.38.3:
  * Fix a case of the query planner be overly aggressive with
    optimizing automatic-index and Bloom-filter construction,
    using inappropriate ON clause terms to restrict the size of the
    automatic-index or Bloom filter, and resulting in missing rows
    in the output.
  * Other minor patches. See the timeline for details.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1652011200">- update to 3.38.5:
  * Fix a blunder in the CLI of the 3.38.4 release
- includes changes from 3.38.4:
  * fix a byte-code problem in the Bloom filter pull-down
    optimization added by release 3.38.0 in which an error in the
    byte code causes the byte code engine to enter an infinite loop
    when the pull-down optimization encounters a NULL key</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1656676800">- update to 3.39.0:
  * Add (long overdue) support for RIGHT and FULL OUTER JOIN
  * Add new binary comparison operators IS NOT DISTINCT FROM and
    IS DISTINCT FROM that are equivalent to IS and IS NOT,
    respective, for compatibility with PostgreSQL and SQL standards
  * Add a new return code (value "3") from the sqlite3_vtab_distinct()
    interface that indicates a query that has both DISTINCT and
    ORDER BY clauses
  * Added the sqlite3_db_name() interface
  * The unix os interface resolves all symbolic links in database
    filenames to create a canonical name for the database before
    the file is opened
  * Defer materializing views until the materialization is actually
    needed, thus avoiding unnecessary work if the materialization
    turns out to never be used
  * The HAVING clause of a SELECT statement is now allowed on any
    aggregate query, even queries that do not have a GROUP BY
    clause
  * Many microoptimizations collectively reduce CPU cycles by about
    2.3%.
- drop sqlite-src-3380100-atof1.patch, included upstream
- add sqlite-src-3390000-func7-pg-181.patch to skip float precision
  related test failures on 32 bit</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1657886400">- update to 3.39.1:
  * Fix an incorrect result from a query that uses a view that
    contains a compound SELECT in which only one arm contains a
    RIGHT JOIN and where the view is not the first FROM clause term
    of the query that contains the view
  * Fix a long-standing problem with ALTER TABLE RENAME that can
    only arise if the sqlite3_limit(SQLITE_LIMIT_SQL_LENGTH) is set
    to a very small value.
  * Fix a long-standing problem in FTS3 that can only arise when
    compiled with the SQLITE_ENABLE_FTS3_PARENTHESIS compile-time
    option.
  * Fix the initial-prefix optimization for the REGEXP extension so
    that it works correctly even if the prefix contains characters
    that require a 3-byte UTF8 encoding.
  * Enhance the sqlite_stmt virtual table so that it buffers all of
    its output.</changelog>
  <changelog author="max@suse.com" date="1658404800">- update to 3.39.2:
  * Fix a performance regression in the query planner associated
    with rearranging the order of FROM clause terms in the
    presences of a LEFT JOIN.
  * Apply fixes for CVE-2022-35737, Chromium bugs 1343348 and
    1345947, forum post 3607259d3c, and other minor problems
    discovered by internal testing. [boo#1201783]</changelog>
  <changelog author="max@suse.com" date="1662379200">- update to 3.39.3:
  * Use a statement journal on DML statement affecting two or more
    database rows if the statement makes use of a SQL functions
    that might abort.
  * Use a mutex to protect the PRAGMA temp_store_directory and
    PRAGMA data_store_directory statements, even though they are
    decremented and documented as not being threadsafe.</changelog>
  <changelog author="max@suse.com" date="1670932800">- bsc#1206337, CVE-2022-46908, sqlite-CVE-2022-46908.patch:
  relying on --safe for execution of an untrusted CLI script</changelog>
  <changelog author="max@suse.com" date="1700481600">- Sync version 3.44.0 from Factory
  * Fixes bsc#1210660, CVE-2023-2137: Heap buffer overflow
  * sqlite3-rtree-i686.patch: temporary build fix for 32-bit x86.
  * Obsoletes sqlite-CVE-2022-46908.patch
  * Obsoletes sqlite-src-3390000-func7-pg-181.patch</changelog>
  <changelog author="max@suse.com" date="1744632000">- Sync version 3.49.1 from Factory (jsc#SLE-16032):
  * CVE-2025-29087, CVE-2025-3277, bsc#1241020:
    Fix a bug in the concat_ws() function, introduced in version
    3.44.0, that could lead to a memory error if the separator
    string is very large (hundreds of megabytes).
  * CVE-2025-29088, bsc#1241078: Enhanced the
    SQLITE_DBCONFIG_LOOKASIDE interface to make it  more robust
    against misuse.
  * Obsoletes sqlite3-rtree-i686.patch</changelog>
  <changelog author="max@suse.com" date="1752667200">- Sync version 3.50.2 from Factory:
  * CVE-2025-6965, bsc#1246597:
    Raise an error early if the number of aggregate terms in a
    query exceeds the maximum number of columns, to avoid
    downstream assertion faults.
  * Add subpackage for the lemon parser generator.
    + sqlite-3.49.0-fix-lemon-missing-cflags.patch
    + sqlite-3.6.23-lemon-system-template.patch</changelog>
  <changelog author="max@suse.com" date="1753444800">- Backpatch the URLs in sqlite3.n from https to http to avoid a
  file conflict with the tcl package on SLE-15-GA up to SP2. In
  SP3 and onwards the Tcl package does not contain the sqlite
  extension anymore.</changelog>
</package>
<package pkgid="da85aabe8b231205cec081ecd6001bb09498d1ec511d03207419b15c9993e654" name="libsqlite3-0-32bit" arch="x86_64">
  <version epoch="0" ver="3.51.2" rel="150000.3.36.1"/>
  <changelog author="max@suse.com" date="1625054400">- Sync version 3.36.0 from Factory to implement jsc#SLE-16032.
- Obsoletes sqlite3-CVE-2019-16168.patch.
- The following CVEs have been fixed in upstream releases up to
  this point, but were not mentioned in the change log so far:
  * bsc#1173641, CVE-2020-15358: heap-based buffer overflow in
    multiSelectOrderBy due to mishandling of query-flattener
    optimization
  * bsc#1164719, CVE-2020-9327: NULL pointer dereference and
    segmentation fault because of generated column optimizations in
    isAuxiliaryVtabOperator
  * bsc#1160439, CVE-2019-20218: selectExpander in select.c proceeds
    with WITH stack unwinding even after a parsing error
  * bsc#1160438, CVE-2019-19959: memory-management error via
    ext/misc/zipfile.c involving embedded '\0' input
  * bsc#1160309, CVE-2019-19923: improper handling  of  certain uses
    of SELECT DISTINCT in flattenSubquery may lead to null pointer
    dereference
  * bsc#1159850, CVE-2019-19924: improper error handling in
    sqlite3WindowRewrite()
  * bsc#1159847, CVE-2019-19925: improper handling of NULL pathname
    during an update of a ZIP archive
  * bsc#1159715, CVE-2019-19926: improper handling  of certain
    errors during parsing  multiSelect in select.c
  * bsc#1159491, CVE-2019-19880: exprListAppendList in window.c
    allows attackers to trigger an invalid pointer dereference
  * bsc#1158960, CVE-2019-19603: during handling of CREATE TABLE
    and CREATE VIEW statements, does not consider confusion with
    a shadow table name
  * bsc#1158959, CVE-2019-19646: pragma.c mishandles NOT NULL in an
    integrity_check PRAGMA command in certain cases of generated
    columns
  * bsc#1158958, CVE-2019-19645: alter.c allows attackers to trigger
    infinite recursion via certain types of self-referential views
    in conjunction with ALTER TABLE statements
  * bsc#1158812, CVE-2019-19317: lookupName in resolve.c omits bits
    from the colUsed bitmask in the case of a generated column,
    which allows attackers to cause a denial of service
  * bsc#1157818, CVE-2019-19244: sqlite3,sqlite2,sqlite: The
    function sqlite3Select in select.c allows a crash if a
    sub-select uses both DISTINCT and window functions, and also
    has certain ORDER BY usage
  * bsc#928701, CVE-2015-3415: sqlite3VdbeExec comparison operator
    vulnerability
  * bsc#928700, CVE-2015-3414: sqlite3,sqlite2: dequoting of
    collation-sequence names
  * CVE-2020-13434 boo#1172115: integer overflow in
    sqlite3_str_vappendf
  * CVE-2020-13630 boo#1172234: use-after-free in fts3EvalNextRow
  * CVE-2020-13631 boo#1172236: virtual table allowed to be renamed
    to one of its shadow tables
  * CVE-2020-13632 boo#1172240: NULL pointer dereference via
    crafted matchinfo() query
  * CVE-2020-13435: Malicious SQL statements could have crashed the
    process that is running SQLite (boo#1172091)</changelog>
  <changelog author="max@suse.com" date="1638273600">- SQLite3 3.37.0:
  * STRICT tables provide a prescriptive style of data type
    management, for developers who prefer that kind of thing.
  * When adding columns that contain a CHECK constraint or a
    generated column containing a NOT NULL constraint, the
    ALTER TABLE ADD COLUMN now checks new constraints against
    preexisting rows in the database and will only proceed if no
    constraints are violated.
  * Added the PRAGMA table_list statement.
  * Add the .connection command, allowing the CLI to keep multiple
    database connections open at the same time.
  * Add the --safe command-line option that disables dot-commands
    and SQL statements that might cause side-effects that extend
    beyond the single database file named on the command-line.
  * CLI: Performance improvements when reading SQL statements that
    span many lines.
  * Added the sqlite3_autovacuum_pages() interface.
  * The sqlite3_deserialize() does not and has never worked
    for the TEMP database. That limitation is now noted in the
    documentation.
  * The query planner now omits ORDER BY clauses on subqueries and
    views if removing those clauses does not change the semantics
    of the query.
  * The generate_series table-valued function extension is modified
    so that the first parameter ("START") is now required. This is
    done as a way to demonstrate how to write table-valued
    functions with required parameters. The legacy behavior is
    available using the -DZERO_ARGUMENT_GENERATE_SERIES
    compile-time option.
  * Added new sqlite3_changes64() and sqlite3_total_changes64()
    interfaces.
  * Added the SQLITE_OPEN_EXRESCODE flag option to sqlite3_open_v2().
  * Use less memory to hold the database schema.
  * bsc#1189802, CVE-2021-36690: Fix an issue with the SQLite Expert
    extension when a column has no collating sequence.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1641124800">- update to 3.37.1:
  * Fix a bug introduced by the UPSERT enhancements of version
    3.35.0 that can cause incorrect byte-code to be generated for
    some obscure but valid SQL, possibly resulting in a NULL-
    pointer dereference.
  * Fix an OOB read that can occur in FTS5 when reading corrupt
    database files.
  * Improved robustness of the --safe option in the CLI.
  * Other minor fixes to assert() statements and test cases.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1641988800">- update to 3.37.2:
  * Fix a bug introduced in version 3.35.0 (2021-03-12) that can
    cause database corruption if a SAVEPOINT is rolled back while
    in PRAGMA temp_store=MEMORY mode, and other changes are made,
    and then the outer transaction commits
  * Fix a long-standing problem with ON DELETE CASCADE and ON
    UPDATE CASCADE in which a cache of the bytecode used to
    implement the cascading change was not being reset following a
    local DDL change</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1645876800">- update to 3.38.0
  * Add the -&gt; and -&gt;&gt; operators for easier processing of JSON
  * The JSON functions are now built-ins
  * Enhancements to date and time functions
  * Rename the printf() SQL function to format() for better
    compatibility, with alias for backwards compatibility.
  * Add the sqlite3_error_offset() interface for helping localize
    an SQL error to a specific character in the input SQL text
  * Enhance the interface to virtual tables
  * CLI columnar output modes are enhanced to correctly handle tabs
    and newlines embedded in text, and add options like "--wrap N",
    "--wordwrap on", and "--quote" to the columnar output modes.
  * Query planner enhancements using a Bloom filter to speed up
    large analytic queries, and a balanced merge tree to evaluate
    UNION or UNION ALL compound SELECT statements that have an
    ORDER BY clause.
  * The ALTER TABLE statement is changed to silently ignores
    entries in the sqlite_schema table that do not parse when
    PRAGMA writable_schema=ON</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1647172800">- update to 3.38.1:
  * Fix problems with the new Bloom filter optimization that might
    cause some obscure queries to get an incorrect answer.
  * Fix the localtime modifier of the date and time functions so
    that it preserves fractional seconds.
  * Fix the sqlite_offset SQL function so that it works correctly
    even in corner cases such as when the argument is a virtual
    column or the column of a view.
  * Fix row value IN operator constraints on virtual tables so that
    they work correctly even if the virtual table implementation
    relies on bytecode to filter rows that do not satisfy the
    constraint.
  * Other minor fixes to assert() statements, test cases, and
    documentation. See the source code timeline for details.
- add upstream patch to run atof1 tests only on x86_64
  sqlite-src-3380100-atof1.patch</changelog>
  <changelog author="max@suse.com" date="1647432000">- Remove obsolete configure flags
- Package the Tcl bindings here again so that we only ship one copy
  of SQLite (bsc#1195773).</changelog>
  <changelog author="max@suse.com" date="1648555200">- update to 3.38.2:
  * Fix a problem with the Bloom filter optimization that might
    cause an incorrect answer when doing a LEFT JOIN with a WHERE
    clause constraint that says that one of the columns on the
    right table of the LEFT JOIN is NULL.
  * Other minor patches.</changelog>
  <changelog author="info@paolostivanin.com" date="1651147200">- update to 3.38.3:
  * Fix a case of the query planner be overly aggressive with
    optimizing automatic-index and Bloom-filter construction,
    using inappropriate ON clause terms to restrict the size of the
    automatic-index or Bloom filter, and resulting in missing rows
    in the output.
  * Other minor patches. See the timeline for details.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1652011200">- update to 3.38.5:
  * Fix a blunder in the CLI of the 3.38.4 release
- includes changes from 3.38.4:
  * fix a byte-code problem in the Bloom filter pull-down
    optimization added by release 3.38.0 in which an error in the
    byte code causes the byte code engine to enter an infinite loop
    when the pull-down optimization encounters a NULL key</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1656676800">- update to 3.39.0:
  * Add (long overdue) support for RIGHT and FULL OUTER JOIN
  * Add new binary comparison operators IS NOT DISTINCT FROM and
    IS DISTINCT FROM that are equivalent to IS and IS NOT,
    respective, for compatibility with PostgreSQL and SQL standards
  * Add a new return code (value "3") from the sqlite3_vtab_distinct()
    interface that indicates a query that has both DISTINCT and
    ORDER BY clauses
  * Added the sqlite3_db_name() interface
  * The unix os interface resolves all symbolic links in database
    filenames to create a canonical name for the database before
    the file is opened
  * Defer materializing views until the materialization is actually
    needed, thus avoiding unnecessary work if the materialization
    turns out to never be used
  * The HAVING clause of a SELECT statement is now allowed on any
    aggregate query, even queries that do not have a GROUP BY
    clause
  * Many microoptimizations collectively reduce CPU cycles by about
    2.3%.
- drop sqlite-src-3380100-atof1.patch, included upstream
- add sqlite-src-3390000-func7-pg-181.patch to skip float precision
  related test failures on 32 bit</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1657886400">- update to 3.39.1:
  * Fix an incorrect result from a query that uses a view that
    contains a compound SELECT in which only one arm contains a
    RIGHT JOIN and where the view is not the first FROM clause term
    of the query that contains the view
  * Fix a long-standing problem with ALTER TABLE RENAME that can
    only arise if the sqlite3_limit(SQLITE_LIMIT_SQL_LENGTH) is set
    to a very small value.
  * Fix a long-standing problem in FTS3 that can only arise when
    compiled with the SQLITE_ENABLE_FTS3_PARENTHESIS compile-time
    option.
  * Fix the initial-prefix optimization for the REGEXP extension so
    that it works correctly even if the prefix contains characters
    that require a 3-byte UTF8 encoding.
  * Enhance the sqlite_stmt virtual table so that it buffers all of
    its output.</changelog>
  <changelog author="max@suse.com" date="1658404800">- update to 3.39.2:
  * Fix a performance regression in the query planner associated
    with rearranging the order of FROM clause terms in the
    presences of a LEFT JOIN.
  * Apply fixes for CVE-2022-35737, Chromium bugs 1343348 and
    1345947, forum post 3607259d3c, and other minor problems
    discovered by internal testing. [boo#1201783]</changelog>
  <changelog author="max@suse.com" date="1662379200">- update to 3.39.3:
  * Use a statement journal on DML statement affecting two or more
    database rows if the statement makes use of a SQL functions
    that might abort.
  * Use a mutex to protect the PRAGMA temp_store_directory and
    PRAGMA data_store_directory statements, even though they are
    decremented and documented as not being threadsafe.</changelog>
  <changelog author="max@suse.com" date="1670932800">- bsc#1206337, CVE-2022-46908, sqlite-CVE-2022-46908.patch:
  relying on --safe for execution of an untrusted CLI script</changelog>
  <changelog author="max@suse.com" date="1700481600">- Sync version 3.44.0 from Factory
  * Fixes bsc#1210660, CVE-2023-2137: Heap buffer overflow
  * sqlite3-rtree-i686.patch: temporary build fix for 32-bit x86.
  * Obsoletes sqlite-CVE-2022-46908.patch
  * Obsoletes sqlite-src-3390000-func7-pg-181.patch</changelog>
  <changelog author="max@suse.com" date="1744632000">- Sync version 3.49.1 from Factory (jsc#SLE-16032):
  * CVE-2025-29087, CVE-2025-3277, bsc#1241020:
    Fix a bug in the concat_ws() function, introduced in version
    3.44.0, that could lead to a memory error if the separator
    string is very large (hundreds of megabytes).
  * CVE-2025-29088, bsc#1241078: Enhanced the
    SQLITE_DBCONFIG_LOOKASIDE interface to make it  more robust
    against misuse.
  * Obsoletes sqlite3-rtree-i686.patch</changelog>
  <changelog author="max@suse.com" date="1752667200">- Sync version 3.50.2 from Factory:
  * CVE-2025-6965, bsc#1246597:
    Raise an error early if the number of aggregate terms in a
    query exceeds the maximum number of columns, to avoid
    downstream assertion faults.
  * Add subpackage for the lemon parser generator.
    + sqlite-3.49.0-fix-lemon-missing-cflags.patch
    + sqlite-3.6.23-lemon-system-template.patch</changelog>
  <changelog author="max@suse.com" date="1753444800">- Backpatch the URLs in sqlite3.n from https to http to avoid a
  file conflict with the tcl package on SLE-15-GA up to SP2. In
  SP3 and onwards the Tcl package does not contain the sqlite
  extension anymore.</changelog>
  <changelog author="max@suse.com" date="1770033600">- Sync version 3.51.2 from Factory:
  * CVE-2025-7709, bsc#1254670: Integer Overflow in FTS5 Extension
  * bsc#1248586: Fix icu-enabled build.</changelog>
</package>
<package pkgid="fed09d79243d27bb716b3d2f7676db4ec5c30833da8c18a5a4191c069ae2b0c4" name="libsqlite3-0-32bit" arch="x86_64">
  <version epoch="0" ver="3.51.3" rel="150000.3.39.1"/>
  <changelog author="max@suse.com" date="1638273600">- SQLite3 3.37.0:
  * STRICT tables provide a prescriptive style of data type
    management, for developers who prefer that kind of thing.
  * When adding columns that contain a CHECK constraint or a
    generated column containing a NOT NULL constraint, the
    ALTER TABLE ADD COLUMN now checks new constraints against
    preexisting rows in the database and will only proceed if no
    constraints are violated.
  * Added the PRAGMA table_list statement.
  * Add the .connection command, allowing the CLI to keep multiple
    database connections open at the same time.
  * Add the --safe command-line option that disables dot-commands
    and SQL statements that might cause side-effects that extend
    beyond the single database file named on the command-line.
  * CLI: Performance improvements when reading SQL statements that
    span many lines.
  * Added the sqlite3_autovacuum_pages() interface.
  * The sqlite3_deserialize() does not and has never worked
    for the TEMP database. That limitation is now noted in the
    documentation.
  * The query planner now omits ORDER BY clauses on subqueries and
    views if removing those clauses does not change the semantics
    of the query.
  * The generate_series table-valued function extension is modified
    so that the first parameter ("START") is now required. This is
    done as a way to demonstrate how to write table-valued
    functions with required parameters. The legacy behavior is
    available using the -DZERO_ARGUMENT_GENERATE_SERIES
    compile-time option.
  * Added new sqlite3_changes64() and sqlite3_total_changes64()
    interfaces.
  * Added the SQLITE_OPEN_EXRESCODE flag option to sqlite3_open_v2().
  * Use less memory to hold the database schema.
  * bsc#1189802, CVE-2021-36690: Fix an issue with the SQLite Expert
    extension when a column has no collating sequence.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1641124800">- update to 3.37.1:
  * Fix a bug introduced by the UPSERT enhancements of version
    3.35.0 that can cause incorrect byte-code to be generated for
    some obscure but valid SQL, possibly resulting in a NULL-
    pointer dereference.
  * Fix an OOB read that can occur in FTS5 when reading corrupt
    database files.
  * Improved robustness of the --safe option in the CLI.
  * Other minor fixes to assert() statements and test cases.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1641988800">- update to 3.37.2:
  * Fix a bug introduced in version 3.35.0 (2021-03-12) that can
    cause database corruption if a SAVEPOINT is rolled back while
    in PRAGMA temp_store=MEMORY mode, and other changes are made,
    and then the outer transaction commits
  * Fix a long-standing problem with ON DELETE CASCADE and ON
    UPDATE CASCADE in which a cache of the bytecode used to
    implement the cascading change was not being reset following a
    local DDL change</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1645876800">- update to 3.38.0
  * Add the -&gt; and -&gt;&gt; operators for easier processing of JSON
  * The JSON functions are now built-ins
  * Enhancements to date and time functions
  * Rename the printf() SQL function to format() for better
    compatibility, with alias for backwards compatibility.
  * Add the sqlite3_error_offset() interface for helping localize
    an SQL error to a specific character in the input SQL text
  * Enhance the interface to virtual tables
  * CLI columnar output modes are enhanced to correctly handle tabs
    and newlines embedded in text, and add options like "--wrap N",
    "--wordwrap on", and "--quote" to the columnar output modes.
  * Query planner enhancements using a Bloom filter to speed up
    large analytic queries, and a balanced merge tree to evaluate
    UNION or UNION ALL compound SELECT statements that have an
    ORDER BY clause.
  * The ALTER TABLE statement is changed to silently ignores
    entries in the sqlite_schema table that do not parse when
    PRAGMA writable_schema=ON</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1647172800">- update to 3.38.1:
  * Fix problems with the new Bloom filter optimization that might
    cause some obscure queries to get an incorrect answer.
  * Fix the localtime modifier of the date and time functions so
    that it preserves fractional seconds.
  * Fix the sqlite_offset SQL function so that it works correctly
    even in corner cases such as when the argument is a virtual
    column or the column of a view.
  * Fix row value IN operator constraints on virtual tables so that
    they work correctly even if the virtual table implementation
    relies on bytecode to filter rows that do not satisfy the
    constraint.
  * Other minor fixes to assert() statements, test cases, and
    documentation. See the source code timeline for details.
- add upstream patch to run atof1 tests only on x86_64
  sqlite-src-3380100-atof1.patch</changelog>
  <changelog author="max@suse.com" date="1647432000">- Remove obsolete configure flags
- Package the Tcl bindings here again so that we only ship one copy
  of SQLite (bsc#1195773).</changelog>
  <changelog author="max@suse.com" date="1648555200">- update to 3.38.2:
  * Fix a problem with the Bloom filter optimization that might
    cause an incorrect answer when doing a LEFT JOIN with a WHERE
    clause constraint that says that one of the columns on the
    right table of the LEFT JOIN is NULL.
  * Other minor patches.</changelog>
  <changelog author="info@paolostivanin.com" date="1651147200">- update to 3.38.3:
  * Fix a case of the query planner be overly aggressive with
    optimizing automatic-index and Bloom-filter construction,
    using inappropriate ON clause terms to restrict the size of the
    automatic-index or Bloom filter, and resulting in missing rows
    in the output.
  * Other minor patches. See the timeline for details.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1652011200">- update to 3.38.5:
  * Fix a blunder in the CLI of the 3.38.4 release
- includes changes from 3.38.4:
  * fix a byte-code problem in the Bloom filter pull-down
    optimization added by release 3.38.0 in which an error in the
    byte code causes the byte code engine to enter an infinite loop
    when the pull-down optimization encounters a NULL key</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1656676800">- update to 3.39.0:
  * Add (long overdue) support for RIGHT and FULL OUTER JOIN
  * Add new binary comparison operators IS NOT DISTINCT FROM and
    IS DISTINCT FROM that are equivalent to IS and IS NOT,
    respective, for compatibility with PostgreSQL and SQL standards
  * Add a new return code (value "3") from the sqlite3_vtab_distinct()
    interface that indicates a query that has both DISTINCT and
    ORDER BY clauses
  * Added the sqlite3_db_name() interface
  * The unix os interface resolves all symbolic links in database
    filenames to create a canonical name for the database before
    the file is opened
  * Defer materializing views until the materialization is actually
    needed, thus avoiding unnecessary work if the materialization
    turns out to never be used
  * The HAVING clause of a SELECT statement is now allowed on any
    aggregate query, even queries that do not have a GROUP BY
    clause
  * Many microoptimizations collectively reduce CPU cycles by about
    2.3%.
- drop sqlite-src-3380100-atof1.patch, included upstream
- add sqlite-src-3390000-func7-pg-181.patch to skip float precision
  related test failures on 32 bit</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1657886400">- update to 3.39.1:
  * Fix an incorrect result from a query that uses a view that
    contains a compound SELECT in which only one arm contains a
    RIGHT JOIN and where the view is not the first FROM clause term
    of the query that contains the view
  * Fix a long-standing problem with ALTER TABLE RENAME that can
    only arise if the sqlite3_limit(SQLITE_LIMIT_SQL_LENGTH) is set
    to a very small value.
  * Fix a long-standing problem in FTS3 that can only arise when
    compiled with the SQLITE_ENABLE_FTS3_PARENTHESIS compile-time
    option.
  * Fix the initial-prefix optimization for the REGEXP extension so
    that it works correctly even if the prefix contains characters
    that require a 3-byte UTF8 encoding.
  * Enhance the sqlite_stmt virtual table so that it buffers all of
    its output.</changelog>
  <changelog author="max@suse.com" date="1658404800">- update to 3.39.2:
  * Fix a performance regression in the query planner associated
    with rearranging the order of FROM clause terms in the
    presences of a LEFT JOIN.
  * Apply fixes for CVE-2022-35737, Chromium bugs 1343348 and
    1345947, forum post 3607259d3c, and other minor problems
    discovered by internal testing. [boo#1201783]</changelog>
  <changelog author="max@suse.com" date="1662379200">- update to 3.39.3:
  * Use a statement journal on DML statement affecting two or more
    database rows if the statement makes use of a SQL functions
    that might abort.
  * Use a mutex to protect the PRAGMA temp_store_directory and
    PRAGMA data_store_directory statements, even though they are
    decremented and documented as not being threadsafe.</changelog>
  <changelog author="max@suse.com" date="1670932800">- bsc#1206337, CVE-2022-46908, sqlite-CVE-2022-46908.patch:
  relying on --safe for execution of an untrusted CLI script</changelog>
  <changelog author="max@suse.com" date="1700481600">- Sync version 3.44.0 from Factory
  * Fixes bsc#1210660, CVE-2023-2137: Heap buffer overflow
  * sqlite3-rtree-i686.patch: temporary build fix for 32-bit x86.
  * Obsoletes sqlite-CVE-2022-46908.patch
  * Obsoletes sqlite-src-3390000-func7-pg-181.patch</changelog>
  <changelog author="max@suse.com" date="1744632000">- Sync version 3.49.1 from Factory (jsc#SLE-16032):
  * CVE-2025-29087, CVE-2025-3277, bsc#1241020:
    Fix a bug in the concat_ws() function, introduced in version
    3.44.0, that could lead to a memory error if the separator
    string is very large (hundreds of megabytes).
  * CVE-2025-29088, bsc#1241078: Enhanced the
    SQLITE_DBCONFIG_LOOKASIDE interface to make it  more robust
    against misuse.
  * Obsoletes sqlite3-rtree-i686.patch</changelog>
  <changelog author="max@suse.com" date="1752667200">- Sync version 3.50.2 from Factory:
  * CVE-2025-6965, bsc#1246597:
    Raise an error early if the number of aggregate terms in a
    query exceeds the maximum number of columns, to avoid
    downstream assertion faults.
  * Add subpackage for the lemon parser generator.
    + sqlite-3.49.0-fix-lemon-missing-cflags.patch
    + sqlite-3.6.23-lemon-system-template.patch</changelog>
  <changelog author="max@suse.com" date="1753444800">- Backpatch the URLs in sqlite3.n from https to http to avoid a
  file conflict with the tcl package on SLE-15-GA up to SP2. In
  SP3 and onwards the Tcl package does not contain the sqlite
  extension anymore.</changelog>
  <changelog author="max@suse.com" date="1770033600">- Sync version 3.51.2 from Factory:
  * bsc#1259619, CVE-2025-70873: zipfile extension may disclose
    uninitialized heap memory during inflation.
  * bsc#1254670, CVE-2025-7709: Integer Overflow in FTS5 Extension
  * bsc#1248586: Fix icu-enabled build.</changelog>
  <changelog author="max@suse.com" date="1773748800">- Sync version 3.51.3 from Factory:
  * Fix the WAL-reset database corruption bug:
    https://sqlite.org/wal.html#walresetbug</changelog>
</package>
<package pkgid="0380511e57d202207acf9531ecc4edfaf6165af28b59e0de7da3aa22d9e40468" name="libssh" arch="src">
  <version epoch="0" ver="0.9.8" rel="150600.11.12.1"/>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
  <changelog author="adam.majer@suse.de" date="1709208000">- Fix regression parsing IPv6 addresses provided as hostname (bsc#1220385)
  * Added libssh-fix-ipv6-hostname-regression.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1750852800">- Fix CVE-2025-5318: Likely read beyond bounds in sftp server handle management (bsc#1245311)
  * Add patch libssh-CVE-2025-5318.patch
- Fix CVE-2025-4877: Write beyond bounds in binary to base64 conversion functions (bsc#1245309)
  * Add patch libssh-CVE-2025-4877.patch
- Fix CVE-2025-4878: Use of uninitialized variable in privatekey_from_file() (bsc#1245310)
  * Add patches:
  - libssh-CVE-2025-4878-1.patch
  - libssh-CVE-2025-4878-2.patch
- Fix CVE-2025-5372: ssh_kdf() returns a success code on certain failures (bsc#1245314)
  * Add patch libssh-CVE-2025-5372.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1758196800">- Security fix: [CVE-2025-8114, bsc#1246974]
  * NULL pointer dereference when calculating session ID during KEX
  * Add libssh-CVE-2025-8114.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1758283200">- Security fix: [CVE-2025-8277, bsc#1249375]
  * Memory Exhaustion via Repeated Key Exchange
  * Add patches:
  - libssh-CVE-2025-8277-packet-Adjust-packet-filter-to-work-wh.patch
  - libssh-CVE-2025-8277-Fix-memory-leak-of-unused-ephemeral-ke.patch
  - libssh-CVE-2025-8277-ecdh-Free-previously-allocated-pubkeys.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1770811200">- Security fixes:
  * CVE-2026-0964: SCP Protocol Path Traversal in ssh_scp_pull_request() (bsc#1258049)
  * CVE-2026-0965: Possible Denial of Service when parsing unexpected
    configuration files (bsc#1258045)
  * CVE-2026-0966: Buffer underflow in ssh_get_hexa() on invalid input (bsc#1258054)
  * CVE-2026-0967: Specially crafted patterns could cause DoS (bsc#1258081)
  * CVE-2026-0968: OOB Read in sftp_parse_longname() (bsc#1258080)
  * Add patches:
  - libssh-CVE-2026-0964-scp-Reject-invalid-paths-received-thro.patch
  - libssh-CVE-2026-0965-config-Do-not-attempt-to-read-non-regu.patch
  - libssh-CVE-2026-0966-misc-Avoid-heap-buffer-underflow-in-ss.patch
  - libssh-CVE-2026-0966-tests-Test-coverage-for-ssh_get_hexa.patch
  - libssh-CVE-2026-0966-doc-Update-guided-tour-to-use-SHA256-f.patch
  - libssh-CVE-2026-0967-match-Avoid-recursive-matching-ReDoS.patch
  - libssh-CVE-2026-0968-sftp-Sanitize-input-handling-in-sftp_p.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1773403200">- CVE-2026-3731: Denial of Service via out-of-bounds read in SFTP extension name handler  (bsc#1259377)
  Added libssh-CVE-2026-3731.patch</changelog>
</package>
<package pkgid="14609f026cd6861058f391ab69bcbd8266561ad88986d734ece5a184bd2598c3" name="libssh" arch="src">
  <version epoch="0" ver="0.9.8" rel="150600.11.3.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1546948800">- Added the tests in a multiple build description file *test* to
  break the cycle for cmocka, curl, doxygen and libssh.</changelog>
  <changelog author="tchvatal@suse.com" date="1549886400">- Drop doxygen from dependencies to avoid buildcycle
  * the documentation is available online anyway for anyone to
    consume and consult http://api.libssh.org</changelog>
  <changelog author="asn@cryptomilk.org" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
  <changelog author="adam.majer@suse.de" date="1709208000">- Fix regression parsing IPv6 addresses provided as hostname (bsc#1220385)
  * Added libssh-fix-ipv6-hostname-regression.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1750852800">- Fix CVE-2025-5318: Likely read beyond bounds in sftp server handle management (bsc#1245311)
  * Add patch libssh-CVE-2025-5318.patch
- Fix CVE-2025-4877: Write beyond bounds in binary to base64 conversion functions (bsc#1245309)
  * Add patch libssh-CVE-2025-4877.patch
- Fix CVE-2025-4878: Use of uninitialized variable in privatekey_from_file() (bsc#1245310)
  * Add patches:
  - libssh-CVE-2025-4878-1.patch
  - libssh-CVE-2025-4878-2.patch
- Fix CVE-2025-5372: ssh_kdf() returns a success code on certain failures (bsc#1245314)
  * Add patch libssh-CVE-2025-5372.patch</changelog>
</package>
<package pkgid="2aeea50a6a2e52a1ecb28ac004a21ad13648327611cdb149a98b6598109abe67" name="libssh" arch="src">
  <version epoch="0" ver="0.9.8" rel="150600.11.6.1"/>
  <changelog author="asn@cryptomilk.org" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
  <changelog author="adam.majer@suse.de" date="1709208000">- Fix regression parsing IPv6 addresses provided as hostname (bsc#1220385)
  * Added libssh-fix-ipv6-hostname-regression.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1750852800">- Fix CVE-2025-5318: Likely read beyond bounds in sftp server handle management (bsc#1245311)
  * Add patch libssh-CVE-2025-5318.patch
- Fix CVE-2025-4877: Write beyond bounds in binary to base64 conversion functions (bsc#1245309)
  * Add patch libssh-CVE-2025-4877.patch
- Fix CVE-2025-4878: Use of uninitialized variable in privatekey_from_file() (bsc#1245310)
  * Add patches:
  - libssh-CVE-2025-4878-1.patch
  - libssh-CVE-2025-4878-2.patch
- Fix CVE-2025-5372: ssh_kdf() returns a success code on certain failures (bsc#1245314)
  * Add patch libssh-CVE-2025-5372.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1758196800">- Security fix: [CVE-2025-8114, bsc#1246974]
  * NULL pointer dereference when calculating session ID during KEX
  * Add libssh-CVE-2025-8114.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1758283200">- Security fix: [CVE-2025-8277, bsc#1249375]
  * Memory Exhaustion via Repeated Key Exchange
  * Add patches:
  - libssh-CVE-2025-8277-packet-Adjust-packet-filter-to-work-wh.patch
  - libssh-CVE-2025-8277-Fix-memory-leak-of-unused-ephemeral-ke.patch
  - libssh-CVE-2025-8277-ecdh-Free-previously-allocated-pubkeys.patch</changelog>
</package>
<package pkgid="10e5dd5b173ddc5b99eaa8e6e83d26eb601c7fc77f27da7beed60ac531855564" name="libssh" arch="src">
  <version epoch="0" ver="0.9.8" rel="150600.11.9.1"/>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
  <changelog author="adam.majer@suse.de" date="1709208000">- Fix regression parsing IPv6 addresses provided as hostname (bsc#1220385)
  * Added libssh-fix-ipv6-hostname-regression.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1750852800">- Fix CVE-2025-5318: Likely read beyond bounds in sftp server handle management (bsc#1245311)
  * Add patch libssh-CVE-2025-5318.patch
- Fix CVE-2025-4877: Write beyond bounds in binary to base64 conversion functions (bsc#1245309)
  * Add patch libssh-CVE-2025-4877.patch
- Fix CVE-2025-4878: Use of uninitialized variable in privatekey_from_file() (bsc#1245310)
  * Add patches:
  - libssh-CVE-2025-4878-1.patch
  - libssh-CVE-2025-4878-2.patch
- Fix CVE-2025-5372: ssh_kdf() returns a success code on certain failures (bsc#1245314)
  * Add patch libssh-CVE-2025-5372.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1758196800">- Security fix: [CVE-2025-8114, bsc#1246974]
  * NULL pointer dereference when calculating session ID during KEX
  * Add libssh-CVE-2025-8114.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1758283200">- Security fix: [CVE-2025-8277, bsc#1249375]
  * Memory Exhaustion via Repeated Key Exchange
  * Add patches:
  - libssh-CVE-2025-8277-packet-Adjust-packet-filter-to-work-wh.patch
  - libssh-CVE-2025-8277-Fix-memory-leak-of-unused-ephemeral-ke.patch
  - libssh-CVE-2025-8277-ecdh-Free-previously-allocated-pubkeys.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1770811200">- Security fixes:
  * CVE-2026-0964: SCP Protocol Path Traversal in ssh_scp_pull_request() (bsc#1258049)
  * CVE-2026-0965: Possible Denial of Service when parsing unexpected
    configuration files (bsc#1258045)
  * CVE-2026-0966: Buffer underflow in ssh_get_hexa() on invalid input (bsc#1258054)
  * CVE-2026-0967: Specially crafted patterns could cause DoS (bsc#1258081)
  * CVE-2026-0968: OOB Read in sftp_parse_longname() (bsc#1258080)
  * Add patches:
  - libssh-CVE-2026-0964-scp-Reject-invalid-paths-received-thro.patch
  - libssh-CVE-2026-0965-config-Do-not-attempt-to-read-non-regu.patch
  - libssh-CVE-2026-0966-misc-Avoid-heap-buffer-underflow-in-ss.patch
  - libssh-CVE-2026-0966-tests-Test-coverage-for-ssh_get_hexa.patch
  - libssh-CVE-2026-0966-doc-Update-guided-tour-to-use-SHA256-f.patch
  - libssh-CVE-2026-0967-match-Avoid-recursive-matching-ReDoS.patch
  - libssh-CVE-2026-0968-sftp-Sanitize-input-handling-in-sftp_p.patch</changelog>
</package>
<package pkgid="4fbd43a99a67a903c2ccd719a157e861fc08759b97c70f55b9d2781fbe9391ef" name="libssh-config" arch="x86_64">
  <version epoch="0" ver="0.9.8" rel="150600.11.12.1"/>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
  <changelog author="adam.majer@suse.de" date="1709208000">- Fix regression parsing IPv6 addresses provided as hostname (bsc#1220385)
  * Added libssh-fix-ipv6-hostname-regression.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1750852800">- Fix CVE-2025-5318: Likely read beyond bounds in sftp server handle management (bsc#1245311)
  * Add patch libssh-CVE-2025-5318.patch
- Fix CVE-2025-4877: Write beyond bounds in binary to base64 conversion functions (bsc#1245309)
  * Add patch libssh-CVE-2025-4877.patch
- Fix CVE-2025-4878: Use of uninitialized variable in privatekey_from_file() (bsc#1245310)
  * Add patches:
  - libssh-CVE-2025-4878-1.patch
  - libssh-CVE-2025-4878-2.patch
- Fix CVE-2025-5372: ssh_kdf() returns a success code on certain failures (bsc#1245314)
  * Add patch libssh-CVE-2025-5372.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1758196800">- Security fix: [CVE-2025-8114, bsc#1246974]
  * NULL pointer dereference when calculating session ID during KEX
  * Add libssh-CVE-2025-8114.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1758283200">- Security fix: [CVE-2025-8277, bsc#1249375]
  * Memory Exhaustion via Repeated Key Exchange
  * Add patches:
  - libssh-CVE-2025-8277-packet-Adjust-packet-filter-to-work-wh.patch
  - libssh-CVE-2025-8277-Fix-memory-leak-of-unused-ephemeral-ke.patch
  - libssh-CVE-2025-8277-ecdh-Free-previously-allocated-pubkeys.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1770811200">- Security fixes:
  * CVE-2026-0964: SCP Protocol Path Traversal in ssh_scp_pull_request() (bsc#1258049)
  * CVE-2026-0965: Possible Denial of Service when parsing unexpected
    configuration files (bsc#1258045)
  * CVE-2026-0966: Buffer underflow in ssh_get_hexa() on invalid input (bsc#1258054)
  * CVE-2026-0967: Specially crafted patterns could cause DoS (bsc#1258081)
  * CVE-2026-0968: OOB Read in sftp_parse_longname() (bsc#1258080)
  * Add patches:
  - libssh-CVE-2026-0964-scp-Reject-invalid-paths-received-thro.patch
  - libssh-CVE-2026-0965-config-Do-not-attempt-to-read-non-regu.patch
  - libssh-CVE-2026-0966-misc-Avoid-heap-buffer-underflow-in-ss.patch
  - libssh-CVE-2026-0966-tests-Test-coverage-for-ssh_get_hexa.patch
  - libssh-CVE-2026-0966-doc-Update-guided-tour-to-use-SHA256-f.patch
  - libssh-CVE-2026-0967-match-Avoid-recursive-matching-ReDoS.patch
  - libssh-CVE-2026-0968-sftp-Sanitize-input-handling-in-sftp_p.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1773403200">- CVE-2026-3731: Denial of Service via out-of-bounds read in SFTP extension name handler  (bsc#1259377)
  Added libssh-CVE-2026-3731.patch</changelog>
</package>
<package pkgid="cbf4cb856ddc410109fa76f3629ce79ef25ea64a18ae08d6af68bb29654d96ed" name="libssh-config" arch="x86_64">
  <version epoch="0" ver="0.9.8" rel="150600.11.3.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1546948800">- Added the tests in a multiple build description file *test* to
  break the cycle for cmocka, curl, doxygen and libssh.</changelog>
  <changelog author="tchvatal@suse.com" date="1549886400">- Drop doxygen from dependencies to avoid buildcycle
  * the documentation is available online anyway for anyone to
    consume and consult http://api.libssh.org</changelog>
  <changelog author="asn@cryptomilk.org" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
  <changelog author="adam.majer@suse.de" date="1709208000">- Fix regression parsing IPv6 addresses provided as hostname (bsc#1220385)
  * Added libssh-fix-ipv6-hostname-regression.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1750852800">- Fix CVE-2025-5318: Likely read beyond bounds in sftp server handle management (bsc#1245311)
  * Add patch libssh-CVE-2025-5318.patch
- Fix CVE-2025-4877: Write beyond bounds in binary to base64 conversion functions (bsc#1245309)
  * Add patch libssh-CVE-2025-4877.patch
- Fix CVE-2025-4878: Use of uninitialized variable in privatekey_from_file() (bsc#1245310)
  * Add patches:
  - libssh-CVE-2025-4878-1.patch
  - libssh-CVE-2025-4878-2.patch
- Fix CVE-2025-5372: ssh_kdf() returns a success code on certain failures (bsc#1245314)
  * Add patch libssh-CVE-2025-5372.patch</changelog>
</package>
<package pkgid="a215925346b2fcc4af2fe7bdc875e78fe67cf53c71efe2dd9d4bf95005df2111" name="libssh-config" arch="x86_64">
  <version epoch="0" ver="0.9.8" rel="150600.11.6.1"/>
  <changelog author="asn@cryptomilk.org" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
  <changelog author="adam.majer@suse.de" date="1709208000">- Fix regression parsing IPv6 addresses provided as hostname (bsc#1220385)
  * Added libssh-fix-ipv6-hostname-regression.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1750852800">- Fix CVE-2025-5318: Likely read beyond bounds in sftp server handle management (bsc#1245311)
  * Add patch libssh-CVE-2025-5318.patch
- Fix CVE-2025-4877: Write beyond bounds in binary to base64 conversion functions (bsc#1245309)
  * Add patch libssh-CVE-2025-4877.patch
- Fix CVE-2025-4878: Use of uninitialized variable in privatekey_from_file() (bsc#1245310)
  * Add patches:
  - libssh-CVE-2025-4878-1.patch
  - libssh-CVE-2025-4878-2.patch
- Fix CVE-2025-5372: ssh_kdf() returns a success code on certain failures (bsc#1245314)
  * Add patch libssh-CVE-2025-5372.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1758196800">- Security fix: [CVE-2025-8114, bsc#1246974]
  * NULL pointer dereference when calculating session ID during KEX
  * Add libssh-CVE-2025-8114.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1758283200">- Security fix: [CVE-2025-8277, bsc#1249375]
  * Memory Exhaustion via Repeated Key Exchange
  * Add patches:
  - libssh-CVE-2025-8277-packet-Adjust-packet-filter-to-work-wh.patch
  - libssh-CVE-2025-8277-Fix-memory-leak-of-unused-ephemeral-ke.patch
  - libssh-CVE-2025-8277-ecdh-Free-previously-allocated-pubkeys.patch</changelog>
</package>
<package pkgid="a0c94535b37325bc0f14624fbe404ba3f134030070a397a4d3d46bb27aba548f" name="libssh-config" arch="x86_64">
  <version epoch="0" ver="0.9.8" rel="150600.11.9.1"/>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
  <changelog author="adam.majer@suse.de" date="1709208000">- Fix regression parsing IPv6 addresses provided as hostname (bsc#1220385)
  * Added libssh-fix-ipv6-hostname-regression.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1750852800">- Fix CVE-2025-5318: Likely read beyond bounds in sftp server handle management (bsc#1245311)
  * Add patch libssh-CVE-2025-5318.patch
- Fix CVE-2025-4877: Write beyond bounds in binary to base64 conversion functions (bsc#1245309)
  * Add patch libssh-CVE-2025-4877.patch
- Fix CVE-2025-4878: Use of uninitialized variable in privatekey_from_file() (bsc#1245310)
  * Add patches:
  - libssh-CVE-2025-4878-1.patch
  - libssh-CVE-2025-4878-2.patch
- Fix CVE-2025-5372: ssh_kdf() returns a success code on certain failures (bsc#1245314)
  * Add patch libssh-CVE-2025-5372.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1758196800">- Security fix: [CVE-2025-8114, bsc#1246974]
  * NULL pointer dereference when calculating session ID during KEX
  * Add libssh-CVE-2025-8114.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1758283200">- Security fix: [CVE-2025-8277, bsc#1249375]
  * Memory Exhaustion via Repeated Key Exchange
  * Add patches:
  - libssh-CVE-2025-8277-packet-Adjust-packet-filter-to-work-wh.patch
  - libssh-CVE-2025-8277-Fix-memory-leak-of-unused-ephemeral-ke.patch
  - libssh-CVE-2025-8277-ecdh-Free-previously-allocated-pubkeys.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1770811200">- Security fixes:
  * CVE-2026-0964: SCP Protocol Path Traversal in ssh_scp_pull_request() (bsc#1258049)
  * CVE-2026-0965: Possible Denial of Service when parsing unexpected
    configuration files (bsc#1258045)
  * CVE-2026-0966: Buffer underflow in ssh_get_hexa() on invalid input (bsc#1258054)
  * CVE-2026-0967: Specially crafted patterns could cause DoS (bsc#1258081)
  * CVE-2026-0968: OOB Read in sftp_parse_longname() (bsc#1258080)
  * Add patches:
  - libssh-CVE-2026-0964-scp-Reject-invalid-paths-received-thro.patch
  - libssh-CVE-2026-0965-config-Do-not-attempt-to-read-non-regu.patch
  - libssh-CVE-2026-0966-misc-Avoid-heap-buffer-underflow-in-ss.patch
  - libssh-CVE-2026-0966-tests-Test-coverage-for-ssh_get_hexa.patch
  - libssh-CVE-2026-0966-doc-Update-guided-tour-to-use-SHA256-f.patch
  - libssh-CVE-2026-0967-match-Avoid-recursive-matching-ReDoS.patch
  - libssh-CVE-2026-0968-sftp-Sanitize-input-handling-in-sftp_p.patch</changelog>
</package>
<package pkgid="be42a2c44bfa6f8334481ed6579560f62ddf0f16eba3ec20b6e13c5e7215f275" name="libssh-devel" arch="x86_64">
  <version epoch="0" ver="0.9.8" rel="150600.11.12.1"/>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
  <changelog author="adam.majer@suse.de" date="1709208000">- Fix regression parsing IPv6 addresses provided as hostname (bsc#1220385)
  * Added libssh-fix-ipv6-hostname-regression.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1750852800">- Fix CVE-2025-5318: Likely read beyond bounds in sftp server handle management (bsc#1245311)
  * Add patch libssh-CVE-2025-5318.patch
- Fix CVE-2025-4877: Write beyond bounds in binary to base64 conversion functions (bsc#1245309)
  * Add patch libssh-CVE-2025-4877.patch
- Fix CVE-2025-4878: Use of uninitialized variable in privatekey_from_file() (bsc#1245310)
  * Add patches:
  - libssh-CVE-2025-4878-1.patch
  - libssh-CVE-2025-4878-2.patch
- Fix CVE-2025-5372: ssh_kdf() returns a success code on certain failures (bsc#1245314)
  * Add patch libssh-CVE-2025-5372.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1758196800">- Security fix: [CVE-2025-8114, bsc#1246974]
  * NULL pointer dereference when calculating session ID during KEX
  * Add libssh-CVE-2025-8114.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1758283200">- Security fix: [CVE-2025-8277, bsc#1249375]
  * Memory Exhaustion via Repeated Key Exchange
  * Add patches:
  - libssh-CVE-2025-8277-packet-Adjust-packet-filter-to-work-wh.patch
  - libssh-CVE-2025-8277-Fix-memory-leak-of-unused-ephemeral-ke.patch
  - libssh-CVE-2025-8277-ecdh-Free-previously-allocated-pubkeys.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1770811200">- Security fixes:
  * CVE-2026-0964: SCP Protocol Path Traversal in ssh_scp_pull_request() (bsc#1258049)
  * CVE-2026-0965: Possible Denial of Service when parsing unexpected
    configuration files (bsc#1258045)
  * CVE-2026-0966: Buffer underflow in ssh_get_hexa() on invalid input (bsc#1258054)
  * CVE-2026-0967: Specially crafted patterns could cause DoS (bsc#1258081)
  * CVE-2026-0968: OOB Read in sftp_parse_longname() (bsc#1258080)
  * Add patches:
  - libssh-CVE-2026-0964-scp-Reject-invalid-paths-received-thro.patch
  - libssh-CVE-2026-0965-config-Do-not-attempt-to-read-non-regu.patch
  - libssh-CVE-2026-0966-misc-Avoid-heap-buffer-underflow-in-ss.patch
  - libssh-CVE-2026-0966-tests-Test-coverage-for-ssh_get_hexa.patch
  - libssh-CVE-2026-0966-doc-Update-guided-tour-to-use-SHA256-f.patch
  - libssh-CVE-2026-0967-match-Avoid-recursive-matching-ReDoS.patch
  - libssh-CVE-2026-0968-sftp-Sanitize-input-handling-in-sftp_p.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1773403200">- CVE-2026-3731: Denial of Service via out-of-bounds read in SFTP extension name handler  (bsc#1259377)
  Added libssh-CVE-2026-3731.patch</changelog>
</package>
<package pkgid="64c4ef3e78466ba984259da9145b7a848c3721ebe0a279e3b716faa7bc60a599" name="libssh-devel" arch="x86_64">
  <version epoch="0" ver="0.9.8" rel="150600.11.3.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1546948800">- Added the tests in a multiple build description file *test* to
  break the cycle for cmocka, curl, doxygen and libssh.</changelog>
  <changelog author="tchvatal@suse.com" date="1549886400">- Drop doxygen from dependencies to avoid buildcycle
  * the documentation is available online anyway for anyone to
    consume and consult http://api.libssh.org</changelog>
  <changelog author="asn@cryptomilk.org" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
  <changelog author="adam.majer@suse.de" date="1709208000">- Fix regression parsing IPv6 addresses provided as hostname (bsc#1220385)
  * Added libssh-fix-ipv6-hostname-regression.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1750852800">- Fix CVE-2025-5318: Likely read beyond bounds in sftp server handle management (bsc#1245311)
  * Add patch libssh-CVE-2025-5318.patch
- Fix CVE-2025-4877: Write beyond bounds in binary to base64 conversion functions (bsc#1245309)
  * Add patch libssh-CVE-2025-4877.patch
- Fix CVE-2025-4878: Use of uninitialized variable in privatekey_from_file() (bsc#1245310)
  * Add patches:
  - libssh-CVE-2025-4878-1.patch
  - libssh-CVE-2025-4878-2.patch
- Fix CVE-2025-5372: ssh_kdf() returns a success code on certain failures (bsc#1245314)
  * Add patch libssh-CVE-2025-5372.patch</changelog>
</package>
<package pkgid="dd843842b03e6d6ade79cb658715f81b3d7c08179602be5d1abd4a89fc70c71f" name="libssh-devel" arch="x86_64">
  <version epoch="0" ver="0.9.8" rel="150600.11.6.1"/>
  <changelog author="asn@cryptomilk.org" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
  <changelog author="adam.majer@suse.de" date="1709208000">- Fix regression parsing IPv6 addresses provided as hostname (bsc#1220385)
  * Added libssh-fix-ipv6-hostname-regression.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1750852800">- Fix CVE-2025-5318: Likely read beyond bounds in sftp server handle management (bsc#1245311)
  * Add patch libssh-CVE-2025-5318.patch
- Fix CVE-2025-4877: Write beyond bounds in binary to base64 conversion functions (bsc#1245309)
  * Add patch libssh-CVE-2025-4877.patch
- Fix CVE-2025-4878: Use of uninitialized variable in privatekey_from_file() (bsc#1245310)
  * Add patches:
  - libssh-CVE-2025-4878-1.patch
  - libssh-CVE-2025-4878-2.patch
- Fix CVE-2025-5372: ssh_kdf() returns a success code on certain failures (bsc#1245314)
  * Add patch libssh-CVE-2025-5372.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1758196800">- Security fix: [CVE-2025-8114, bsc#1246974]
  * NULL pointer dereference when calculating session ID during KEX
  * Add libssh-CVE-2025-8114.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1758283200">- Security fix: [CVE-2025-8277, bsc#1249375]
  * Memory Exhaustion via Repeated Key Exchange
  * Add patches:
  - libssh-CVE-2025-8277-packet-Adjust-packet-filter-to-work-wh.patch
  - libssh-CVE-2025-8277-Fix-memory-leak-of-unused-ephemeral-ke.patch
  - libssh-CVE-2025-8277-ecdh-Free-previously-allocated-pubkeys.patch</changelog>
</package>
<package pkgid="122db5d59480232a6aabfc51e190636df2c79c4bb54ad7ca3777fe2545c0523c" name="libssh-devel" arch="x86_64">
  <version epoch="0" ver="0.9.8" rel="150600.11.9.1"/>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
  <changelog author="adam.majer@suse.de" date="1709208000">- Fix regression parsing IPv6 addresses provided as hostname (bsc#1220385)
  * Added libssh-fix-ipv6-hostname-regression.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1750852800">- Fix CVE-2025-5318: Likely read beyond bounds in sftp server handle management (bsc#1245311)
  * Add patch libssh-CVE-2025-5318.patch
- Fix CVE-2025-4877: Write beyond bounds in binary to base64 conversion functions (bsc#1245309)
  * Add patch libssh-CVE-2025-4877.patch
- Fix CVE-2025-4878: Use of uninitialized variable in privatekey_from_file() (bsc#1245310)
  * Add patches:
  - libssh-CVE-2025-4878-1.patch
  - libssh-CVE-2025-4878-2.patch
- Fix CVE-2025-5372: ssh_kdf() returns a success code on certain failures (bsc#1245314)
  * Add patch libssh-CVE-2025-5372.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1758196800">- Security fix: [CVE-2025-8114, bsc#1246974]
  * NULL pointer dereference when calculating session ID during KEX
  * Add libssh-CVE-2025-8114.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1758283200">- Security fix: [CVE-2025-8277, bsc#1249375]
  * Memory Exhaustion via Repeated Key Exchange
  * Add patches:
  - libssh-CVE-2025-8277-packet-Adjust-packet-filter-to-work-wh.patch
  - libssh-CVE-2025-8277-Fix-memory-leak-of-unused-ephemeral-ke.patch
  - libssh-CVE-2025-8277-ecdh-Free-previously-allocated-pubkeys.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1770811200">- Security fixes:
  * CVE-2026-0964: SCP Protocol Path Traversal in ssh_scp_pull_request() (bsc#1258049)
  * CVE-2026-0965: Possible Denial of Service when parsing unexpected
    configuration files (bsc#1258045)
  * CVE-2026-0966: Buffer underflow in ssh_get_hexa() on invalid input (bsc#1258054)
  * CVE-2026-0967: Specially crafted patterns could cause DoS (bsc#1258081)
  * CVE-2026-0968: OOB Read in sftp_parse_longname() (bsc#1258080)
  * Add patches:
  - libssh-CVE-2026-0964-scp-Reject-invalid-paths-received-thro.patch
  - libssh-CVE-2026-0965-config-Do-not-attempt-to-read-non-regu.patch
  - libssh-CVE-2026-0966-misc-Avoid-heap-buffer-underflow-in-ss.patch
  - libssh-CVE-2026-0966-tests-Test-coverage-for-ssh_get_hexa.patch
  - libssh-CVE-2026-0966-doc-Update-guided-tour-to-use-SHA256-f.patch
  - libssh-CVE-2026-0967-match-Avoid-recursive-matching-ReDoS.patch
  - libssh-CVE-2026-0968-sftp-Sanitize-input-handling-in-sftp_p.patch</changelog>
</package>
<package pkgid="72eadbbf6edd288a8b2f58435cd1e4b5c7007404fca69ca551301fde5bff4646" name="libssh4" arch="x86_64">
  <version epoch="0" ver="0.9.8" rel="150600.11.12.1"/>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
  <changelog author="adam.majer@suse.de" date="1709208000">- Fix regression parsing IPv6 addresses provided as hostname (bsc#1220385)
  * Added libssh-fix-ipv6-hostname-regression.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1750852800">- Fix CVE-2025-5318: Likely read beyond bounds in sftp server handle management (bsc#1245311)
  * Add patch libssh-CVE-2025-5318.patch
- Fix CVE-2025-4877: Write beyond bounds in binary to base64 conversion functions (bsc#1245309)
  * Add patch libssh-CVE-2025-4877.patch
- Fix CVE-2025-4878: Use of uninitialized variable in privatekey_from_file() (bsc#1245310)
  * Add patches:
  - libssh-CVE-2025-4878-1.patch
  - libssh-CVE-2025-4878-2.patch
- Fix CVE-2025-5372: ssh_kdf() returns a success code on certain failures (bsc#1245314)
  * Add patch libssh-CVE-2025-5372.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1758196800">- Security fix: [CVE-2025-8114, bsc#1246974]
  * NULL pointer dereference when calculating session ID during KEX
  * Add libssh-CVE-2025-8114.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1758283200">- Security fix: [CVE-2025-8277, bsc#1249375]
  * Memory Exhaustion via Repeated Key Exchange
  * Add patches:
  - libssh-CVE-2025-8277-packet-Adjust-packet-filter-to-work-wh.patch
  - libssh-CVE-2025-8277-Fix-memory-leak-of-unused-ephemeral-ke.patch
  - libssh-CVE-2025-8277-ecdh-Free-previously-allocated-pubkeys.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1770811200">- Security fixes:
  * CVE-2026-0964: SCP Protocol Path Traversal in ssh_scp_pull_request() (bsc#1258049)
  * CVE-2026-0965: Possible Denial of Service when parsing unexpected
    configuration files (bsc#1258045)
  * CVE-2026-0966: Buffer underflow in ssh_get_hexa() on invalid input (bsc#1258054)
  * CVE-2026-0967: Specially crafted patterns could cause DoS (bsc#1258081)
  * CVE-2026-0968: OOB Read in sftp_parse_longname() (bsc#1258080)
  * Add patches:
  - libssh-CVE-2026-0964-scp-Reject-invalid-paths-received-thro.patch
  - libssh-CVE-2026-0965-config-Do-not-attempt-to-read-non-regu.patch
  - libssh-CVE-2026-0966-misc-Avoid-heap-buffer-underflow-in-ss.patch
  - libssh-CVE-2026-0966-tests-Test-coverage-for-ssh_get_hexa.patch
  - libssh-CVE-2026-0966-doc-Update-guided-tour-to-use-SHA256-f.patch
  - libssh-CVE-2026-0967-match-Avoid-recursive-matching-ReDoS.patch
  - libssh-CVE-2026-0968-sftp-Sanitize-input-handling-in-sftp_p.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1773403200">- CVE-2026-3731: Denial of Service via out-of-bounds read in SFTP extension name handler  (bsc#1259377)
  Added libssh-CVE-2026-3731.patch</changelog>
</package>
<package pkgid="9cabaad2f869e386924f785b87bcdc18c9dddd0eee453b0d729ef48718405d5b" name="libssh4" arch="x86_64">
  <version epoch="0" ver="0.9.8" rel="150600.11.3.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1546948800">- Added the tests in a multiple build description file *test* to
  break the cycle for cmocka, curl, doxygen and libssh.</changelog>
  <changelog author="tchvatal@suse.com" date="1549886400">- Drop doxygen from dependencies to avoid buildcycle
  * the documentation is available online anyway for anyone to
    consume and consult http://api.libssh.org</changelog>
  <changelog author="asn@cryptomilk.org" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
  <changelog author="adam.majer@suse.de" date="1709208000">- Fix regression parsing IPv6 addresses provided as hostname (bsc#1220385)
  * Added libssh-fix-ipv6-hostname-regression.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1750852800">- Fix CVE-2025-5318: Likely read beyond bounds in sftp server handle management (bsc#1245311)
  * Add patch libssh-CVE-2025-5318.patch
- Fix CVE-2025-4877: Write beyond bounds in binary to base64 conversion functions (bsc#1245309)
  * Add patch libssh-CVE-2025-4877.patch
- Fix CVE-2025-4878: Use of uninitialized variable in privatekey_from_file() (bsc#1245310)
  * Add patches:
  - libssh-CVE-2025-4878-1.patch
  - libssh-CVE-2025-4878-2.patch
- Fix CVE-2025-5372: ssh_kdf() returns a success code on certain failures (bsc#1245314)
  * Add patch libssh-CVE-2025-5372.patch</changelog>
</package>
<package pkgid="75a2df4870b357706fcb0a5ba9eca6fc786ae41db6eaaf0bb94cc7d0fd947587" name="libssh4" arch="x86_64">
  <version epoch="0" ver="0.9.8" rel="150600.11.6.1"/>
  <changelog author="asn@cryptomilk.org" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
  <changelog author="adam.majer@suse.de" date="1709208000">- Fix regression parsing IPv6 addresses provided as hostname (bsc#1220385)
  * Added libssh-fix-ipv6-hostname-regression.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1750852800">- Fix CVE-2025-5318: Likely read beyond bounds in sftp server handle management (bsc#1245311)
  * Add patch libssh-CVE-2025-5318.patch
- Fix CVE-2025-4877: Write beyond bounds in binary to base64 conversion functions (bsc#1245309)
  * Add patch libssh-CVE-2025-4877.patch
- Fix CVE-2025-4878: Use of uninitialized variable in privatekey_from_file() (bsc#1245310)
  * Add patches:
  - libssh-CVE-2025-4878-1.patch
  - libssh-CVE-2025-4878-2.patch
- Fix CVE-2025-5372: ssh_kdf() returns a success code on certain failures (bsc#1245314)
  * Add patch libssh-CVE-2025-5372.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1758196800">- Security fix: [CVE-2025-8114, bsc#1246974]
  * NULL pointer dereference when calculating session ID during KEX
  * Add libssh-CVE-2025-8114.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1758283200">- Security fix: [CVE-2025-8277, bsc#1249375]
  * Memory Exhaustion via Repeated Key Exchange
  * Add patches:
  - libssh-CVE-2025-8277-packet-Adjust-packet-filter-to-work-wh.patch
  - libssh-CVE-2025-8277-Fix-memory-leak-of-unused-ephemeral-ke.patch
  - libssh-CVE-2025-8277-ecdh-Free-previously-allocated-pubkeys.patch</changelog>
</package>
<package pkgid="a8d1ad686d09d1916546a9da5d0022e293509091be8ef285dd49594243c40bc6" name="libssh4" arch="x86_64">
  <version epoch="0" ver="0.9.8" rel="150600.11.9.1"/>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
  <changelog author="adam.majer@suse.de" date="1709208000">- Fix regression parsing IPv6 addresses provided as hostname (bsc#1220385)
  * Added libssh-fix-ipv6-hostname-regression.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1750852800">- Fix CVE-2025-5318: Likely read beyond bounds in sftp server handle management (bsc#1245311)
  * Add patch libssh-CVE-2025-5318.patch
- Fix CVE-2025-4877: Write beyond bounds in binary to base64 conversion functions (bsc#1245309)
  * Add patch libssh-CVE-2025-4877.patch
- Fix CVE-2025-4878: Use of uninitialized variable in privatekey_from_file() (bsc#1245310)
  * Add patches:
  - libssh-CVE-2025-4878-1.patch
  - libssh-CVE-2025-4878-2.patch
- Fix CVE-2025-5372: ssh_kdf() returns a success code on certain failures (bsc#1245314)
  * Add patch libssh-CVE-2025-5372.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1758196800">- Security fix: [CVE-2025-8114, bsc#1246974]
  * NULL pointer dereference when calculating session ID during KEX
  * Add libssh-CVE-2025-8114.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1758283200">- Security fix: [CVE-2025-8277, bsc#1249375]
  * Memory Exhaustion via Repeated Key Exchange
  * Add patches:
  - libssh-CVE-2025-8277-packet-Adjust-packet-filter-to-work-wh.patch
  - libssh-CVE-2025-8277-Fix-memory-leak-of-unused-ephemeral-ke.patch
  - libssh-CVE-2025-8277-ecdh-Free-previously-allocated-pubkeys.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1770811200">- Security fixes:
  * CVE-2026-0964: SCP Protocol Path Traversal in ssh_scp_pull_request() (bsc#1258049)
  * CVE-2026-0965: Possible Denial of Service when parsing unexpected
    configuration files (bsc#1258045)
  * CVE-2026-0966: Buffer underflow in ssh_get_hexa() on invalid input (bsc#1258054)
  * CVE-2026-0967: Specially crafted patterns could cause DoS (bsc#1258081)
  * CVE-2026-0968: OOB Read in sftp_parse_longname() (bsc#1258080)
  * Add patches:
  - libssh-CVE-2026-0964-scp-Reject-invalid-paths-received-thro.patch
  - libssh-CVE-2026-0965-config-Do-not-attempt-to-read-non-regu.patch
  - libssh-CVE-2026-0966-misc-Avoid-heap-buffer-underflow-in-ss.patch
  - libssh-CVE-2026-0966-tests-Test-coverage-for-ssh_get_hexa.patch
  - libssh-CVE-2026-0966-doc-Update-guided-tour-to-use-SHA256-f.patch
  - libssh-CVE-2026-0967-match-Avoid-recursive-matching-ReDoS.patch
  - libssh-CVE-2026-0968-sftp-Sanitize-input-handling-in-sftp_p.patch</changelog>
</package>
<package pkgid="2dd70d02fa169c68e9a04a4b5d88dc534bd4d0b4548904e90c1a9d498052f95f" name="libssh4-32bit" arch="x86_64">
  <version epoch="0" ver="0.9.8" rel="150600.11.12.1"/>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
  <changelog author="adam.majer@suse.de" date="1709208000">- Fix regression parsing IPv6 addresses provided as hostname (bsc#1220385)
  * Added libssh-fix-ipv6-hostname-regression.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1750852800">- Fix CVE-2025-5318: Likely read beyond bounds in sftp server handle management (bsc#1245311)
  * Add patch libssh-CVE-2025-5318.patch
- Fix CVE-2025-4877: Write beyond bounds in binary to base64 conversion functions (bsc#1245309)
  * Add patch libssh-CVE-2025-4877.patch
- Fix CVE-2025-4878: Use of uninitialized variable in privatekey_from_file() (bsc#1245310)
  * Add patches:
  - libssh-CVE-2025-4878-1.patch
  - libssh-CVE-2025-4878-2.patch
- Fix CVE-2025-5372: ssh_kdf() returns a success code on certain failures (bsc#1245314)
  * Add patch libssh-CVE-2025-5372.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1758196800">- Security fix: [CVE-2025-8114, bsc#1246974]
  * NULL pointer dereference when calculating session ID during KEX
  * Add libssh-CVE-2025-8114.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1758283200">- Security fix: [CVE-2025-8277, bsc#1249375]
  * Memory Exhaustion via Repeated Key Exchange
  * Add patches:
  - libssh-CVE-2025-8277-packet-Adjust-packet-filter-to-work-wh.patch
  - libssh-CVE-2025-8277-Fix-memory-leak-of-unused-ephemeral-ke.patch
  - libssh-CVE-2025-8277-ecdh-Free-previously-allocated-pubkeys.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1770811200">- Security fixes:
  * CVE-2026-0964: SCP Protocol Path Traversal in ssh_scp_pull_request() (bsc#1258049)
  * CVE-2026-0965: Possible Denial of Service when parsing unexpected
    configuration files (bsc#1258045)
  * CVE-2026-0966: Buffer underflow in ssh_get_hexa() on invalid input (bsc#1258054)
  * CVE-2026-0967: Specially crafted patterns could cause DoS (bsc#1258081)
  * CVE-2026-0968: OOB Read in sftp_parse_longname() (bsc#1258080)
  * Add patches:
  - libssh-CVE-2026-0964-scp-Reject-invalid-paths-received-thro.patch
  - libssh-CVE-2026-0965-config-Do-not-attempt-to-read-non-regu.patch
  - libssh-CVE-2026-0966-misc-Avoid-heap-buffer-underflow-in-ss.patch
  - libssh-CVE-2026-0966-tests-Test-coverage-for-ssh_get_hexa.patch
  - libssh-CVE-2026-0966-doc-Update-guided-tour-to-use-SHA256-f.patch
  - libssh-CVE-2026-0967-match-Avoid-recursive-matching-ReDoS.patch
  - libssh-CVE-2026-0968-sftp-Sanitize-input-handling-in-sftp_p.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1773403200">- CVE-2026-3731: Denial of Service via out-of-bounds read in SFTP extension name handler  (bsc#1259377)
  Added libssh-CVE-2026-3731.patch</changelog>
</package>
<package pkgid="47ad6d8ecd4fa4d5e606da2b3c35f6c81ad5a02711664aa2115c2b4024678aea" name="libssh4-32bit" arch="x86_64">
  <version epoch="0" ver="0.9.8" rel="150600.11.3.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1546948800">- Added the tests in a multiple build description file *test* to
  break the cycle for cmocka, curl, doxygen and libssh.</changelog>
  <changelog author="tchvatal@suse.com" date="1549886400">- Drop doxygen from dependencies to avoid buildcycle
  * the documentation is available online anyway for anyone to
    consume and consult http://api.libssh.org</changelog>
  <changelog author="asn@cryptomilk.org" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
  <changelog author="adam.majer@suse.de" date="1709208000">- Fix regression parsing IPv6 addresses provided as hostname (bsc#1220385)
  * Added libssh-fix-ipv6-hostname-regression.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1750852800">- Fix CVE-2025-5318: Likely read beyond bounds in sftp server handle management (bsc#1245311)
  * Add patch libssh-CVE-2025-5318.patch
- Fix CVE-2025-4877: Write beyond bounds in binary to base64 conversion functions (bsc#1245309)
  * Add patch libssh-CVE-2025-4877.patch
- Fix CVE-2025-4878: Use of uninitialized variable in privatekey_from_file() (bsc#1245310)
  * Add patches:
  - libssh-CVE-2025-4878-1.patch
  - libssh-CVE-2025-4878-2.patch
- Fix CVE-2025-5372: ssh_kdf() returns a success code on certain failures (bsc#1245314)
  * Add patch libssh-CVE-2025-5372.patch</changelog>
</package>
<package pkgid="5166d395137f7af016655a3924e4bb00a461da9c8e179d97483f451bef3f9f2a" name="libssh4-32bit" arch="x86_64">
  <version epoch="0" ver="0.9.8" rel="150600.11.6.1"/>
  <changelog author="asn@cryptomilk.org" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
  <changelog author="adam.majer@suse.de" date="1709208000">- Fix regression parsing IPv6 addresses provided as hostname (bsc#1220385)
  * Added libssh-fix-ipv6-hostname-regression.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1750852800">- Fix CVE-2025-5318: Likely read beyond bounds in sftp server handle management (bsc#1245311)
  * Add patch libssh-CVE-2025-5318.patch
- Fix CVE-2025-4877: Write beyond bounds in binary to base64 conversion functions (bsc#1245309)
  * Add patch libssh-CVE-2025-4877.patch
- Fix CVE-2025-4878: Use of uninitialized variable in privatekey_from_file() (bsc#1245310)
  * Add patches:
  - libssh-CVE-2025-4878-1.patch
  - libssh-CVE-2025-4878-2.patch
- Fix CVE-2025-5372: ssh_kdf() returns a success code on certain failures (bsc#1245314)
  * Add patch libssh-CVE-2025-5372.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1758196800">- Security fix: [CVE-2025-8114, bsc#1246974]
  * NULL pointer dereference when calculating session ID during KEX
  * Add libssh-CVE-2025-8114.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1758283200">- Security fix: [CVE-2025-8277, bsc#1249375]
  * Memory Exhaustion via Repeated Key Exchange
  * Add patches:
  - libssh-CVE-2025-8277-packet-Adjust-packet-filter-to-work-wh.patch
  - libssh-CVE-2025-8277-Fix-memory-leak-of-unused-ephemeral-ke.patch
  - libssh-CVE-2025-8277-ecdh-Free-previously-allocated-pubkeys.patch</changelog>
</package>
<package pkgid="b6456a0ba8906e256a8e9258c7bcce6c0d3c36c5c1df24299077c395c888aa9e" name="libssh4-32bit" arch="x86_64">
  <version epoch="0" ver="0.9.8" rel="150600.11.9.1"/>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
  <changelog author="adam.majer@suse.de" date="1709208000">- Fix regression parsing IPv6 addresses provided as hostname (bsc#1220385)
  * Added libssh-fix-ipv6-hostname-regression.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1750852800">- Fix CVE-2025-5318: Likely read beyond bounds in sftp server handle management (bsc#1245311)
  * Add patch libssh-CVE-2025-5318.patch
- Fix CVE-2025-4877: Write beyond bounds in binary to base64 conversion functions (bsc#1245309)
  * Add patch libssh-CVE-2025-4877.patch
- Fix CVE-2025-4878: Use of uninitialized variable in privatekey_from_file() (bsc#1245310)
  * Add patches:
  - libssh-CVE-2025-4878-1.patch
  - libssh-CVE-2025-4878-2.patch
- Fix CVE-2025-5372: ssh_kdf() returns a success code on certain failures (bsc#1245314)
  * Add patch libssh-CVE-2025-5372.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1758196800">- Security fix: [CVE-2025-8114, bsc#1246974]
  * NULL pointer dereference when calculating session ID during KEX
  * Add libssh-CVE-2025-8114.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1758283200">- Security fix: [CVE-2025-8277, bsc#1249375]
  * Memory Exhaustion via Repeated Key Exchange
  * Add patches:
  - libssh-CVE-2025-8277-packet-Adjust-packet-filter-to-work-wh.patch
  - libssh-CVE-2025-8277-Fix-memory-leak-of-unused-ephemeral-ke.patch
  - libssh-CVE-2025-8277-ecdh-Free-previously-allocated-pubkeys.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1770811200">- Security fixes:
  * CVE-2026-0964: SCP Protocol Path Traversal in ssh_scp_pull_request() (bsc#1258049)
  * CVE-2026-0965: Possible Denial of Service when parsing unexpected
    configuration files (bsc#1258045)
  * CVE-2026-0966: Buffer underflow in ssh_get_hexa() on invalid input (bsc#1258054)
  * CVE-2026-0967: Specially crafted patterns could cause DoS (bsc#1258081)
  * CVE-2026-0968: OOB Read in sftp_parse_longname() (bsc#1258080)
  * Add patches:
  - libssh-CVE-2026-0964-scp-Reject-invalid-paths-received-thro.patch
  - libssh-CVE-2026-0965-config-Do-not-attempt-to-read-non-regu.patch
  - libssh-CVE-2026-0966-misc-Avoid-heap-buffer-underflow-in-ss.patch
  - libssh-CVE-2026-0966-tests-Test-coverage-for-ssh_get_hexa.patch
  - libssh-CVE-2026-0966-doc-Update-guided-tour-to-use-SHA256-f.patch
  - libssh-CVE-2026-0967-match-Avoid-recursive-matching-ReDoS.patch
  - libssh-CVE-2026-0968-sftp-Sanitize-input-handling-in-sftp_p.patch</changelog>
</package>
<package pkgid="192b4e5ac7edf8a57c67fc763a89ba6c89171f293b0b886589ddd0ed8705817d" name="libsss_certmap-devel" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.17.1"/>
  <changelog author="pgajdos@suse.com" date="1709899200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
</package>
<package pkgid="b63c6538135c8a97e705e63a742244f316e0126dd3feca0be0e5ceee53719a90" name="libsss_certmap-devel" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.22.1"/>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
  <changelog author="scabrero@suse.de" date="1773144000">- Fix sss_obfuscate crash with python 3.6; (bsc#1259381); Add patch
  0008-subprocess.run-python36.patch</changelog>
  <changelog author="scabrero@suse.de" date="1773230400">- Restore default config file installation; (bsc#1259250);
- Make sure previously rotated logs are chown-ed as well;
  (bsc#1259475); Add patch
  0009-Make-sure-previously-rotated-logs-are-chown-ed-as-we.patch</changelog>
</package>
<package pkgid="7b19dd46a97cc3ce211ba31182006ffed708a41b40b0dc5271db588fe6747be8" name="libsss_certmap-devel" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.25.1"/>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
  <changelog author="scabrero@suse.de" date="1773144000">- Fix sss_obfuscate crash with python 3.6; (bsc#1259381); Add patch
  0008-subprocess.run-python36.patch</changelog>
  <changelog author="scabrero@suse.de" date="1773230400">- Restore default config file installation; (bsc#1259250);
- Make sure previously rotated logs are chown-ed as well;
  (bsc#1259475); Add patch
  0009-Make-sure-previously-rotated-logs-are-chown-ed-as-we.patch</changelog>
  <changelog author="scabrero@suse.de" date="1775476800">- Do not package capabilities, will be applied by %set_permissions
  rpm macro; (bsc#1259436);
- Silence noisy warning from sss_cache if run prior starting the
  daemon and config.ldb does not exist; (bsc#1259545); Add patch
  0010-TOOLS-noisy-debug-messages-when-config.ldb-does-not-.patch
- Fix ldap_child process started by the backend process ending in
  defunc state. Add patch
  0011-sdap_select_principal_from_keytab_sync-waitpid-synch.patch
- Create the secrets directory for the KCM service; (bsc#1259253);
- Fix missing nss library in 32bit package; (bsc#1260409);
- Fix packaging wrong permissions for /usr/share/polkit-1/rules.d;
  (bsc#1260413);</changelog>
</package>
<package pkgid="b2e4783cefcaab9e2f5f5e3b4fb2138b999e8cd872fc5671c9b7c16d46576449" name="libsss_certmap-devel" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.28.1"/>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
  <changelog author="scabrero@suse.de" date="1773144000">- Fix sss_obfuscate crash with python 3.6; (bsc#1259381); Add patch
  0008-subprocess.run-python36.patch</changelog>
  <changelog author="scabrero@suse.de" date="1773230400">- Restore default config file installation; (bsc#1259250);
- Make sure previously rotated logs are chown-ed as well;
  (bsc#1259475); Add patch
  0009-Make-sure-previously-rotated-logs-are-chown-ed-as-we.patch</changelog>
  <changelog author="scabrero@suse.de" date="1775476800">- Do not package capabilities, will be applied by %set_permissions
  rpm macro; (bsc#1259436);
- Silence noisy warning from sss_cache if run prior starting the
  daemon and config.ldb does not exist; (bsc#1259545); Add patch
  0010-TOOLS-noisy-debug-messages-when-config.ldb-does-not-.patch
- Fix ldap_child process started by the backend process ending in
  defunc state. Add patch
  0011-sdap_select_principal_from_keytab_sync-waitpid-synch.patch
- Create the secrets directory for the KCM service; (bsc#1259253);
- Fix missing nss library in 32bit package; (bsc#1260409);
- Fix packaging wrong permissions for /usr/share/polkit-1/rules.d;
  (bsc#1260413);</changelog>
  <changelog author="scabrero@suse.de" date="1777464000">- With the 2.10 update sssd runs under unprivileged user which is
  not possible in certain scenarios. This update reverts to run as
  root with minimum privileges; (bsc#1259436); Add patch
  0012-run-as-root.patch
- Let krb5 child tolerate missing capabilities; Add patch
  0013-KRB5-let-krb5_child-tolerate-missing-cap-set-id.patch
- Fix systemd try-restart warning when updating</changelog>
</package>
<package pkgid="cff1c2f1c5b7db26817af5b1a7f0cdac4e06bf72b0a6277591d0913c3d5e2af2" name="libsss_certmap-devel" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.31.1"/>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
  <changelog author="scabrero@suse.de" date="1773144000">- Fix sss_obfuscate crash with python 3.6; (bsc#1259381); Add patch
  0008-subprocess.run-python36.patch</changelog>
  <changelog author="scabrero@suse.de" date="1773230400">- Restore default config file installation; (bsc#1259250);
- Make sure previously rotated logs are chown-ed as well;
  (bsc#1259475); Add patch
  0009-Make-sure-previously-rotated-logs-are-chown-ed-as-we.patch</changelog>
  <changelog author="scabrero@suse.de" date="1775476800">- Do not package capabilities, will be applied by %set_permissions
  rpm macro; (bsc#1259436);
- Silence noisy warning from sss_cache if run prior starting the
  daemon and config.ldb does not exist; (bsc#1259545); Add patch
  0010-TOOLS-noisy-debug-messages-when-config.ldb-does-not-.patch
- Fix ldap_child process started by the backend process ending in
  defunc state. Add patch
  0011-sdap_select_principal_from_keytab_sync-waitpid-synch.patch
- Create the secrets directory for the KCM service; (bsc#1259253);
- Fix missing nss library in 32bit package; (bsc#1260409);
- Fix packaging wrong permissions for /usr/share/polkit-1/rules.d;
  (bsc#1260413);</changelog>
  <changelog author="scabrero@suse.de" date="1777464000">- With the 2.10 update sssd runs under unprivileged user which is
  not possible in certain scenarios. This update reverts to run as
  root with minimum privileges; (bsc#1259436); Add patch
  0012-run-as-root.patch
- Let krb5 child tolerate missing capabilities; Add patch
  0013-KRB5-let-krb5_child-tolerate-missing-cap-set-id.patch
- Fix systemd try-restart warning when updating</changelog>
  <changelog author="scabrero@suse.de" date="1777896000">- Reduce the message severity logged when the LDAP server hosts
  multiple naming contexts without defining a default one in the
  rootdse; (bsc#1264185); Add patch
  0015-sdap-Reduce-log-level-when-get_naming_context-fails.patch
- Do not ignore tests result at build time; (bsc#1246196);
- Skip tests depending on soft-hsm; Add patch
  0014-TESTS-Disable-pam-srv-and-certmap-cmocka-tests.patch</changelog>
</package>
<package pkgid="388cdfd44519485bb36e813b4ca47b190b093a8e5c386230647852cb13a64d5a" name="libsss_certmap-devel" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150700.9.12.1"/>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
</package>
<package pkgid="eabb0cf2ff12523c7028bdb40b56ee2420f914453cce5cc2d7a19ea68fd73aa4" name="libsss_certmap-devel" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150700.9.3.1"/>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
</package>
<package pkgid="cbcf114ab8fc39e09133e580f350e1e7f84f2d9caa3dba19638676246dff7521" name="libsss_certmap-devel" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150700.9.6.2"/>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
</package>
<package pkgid="e9e84633f17cddcd64bccfc0a304622b5fd71a0613f939a21680031a87b5fb33" name="libsss_certmap-devel" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150700.9.9.1"/>
  <changelog author="scabrero@suse.de" date="1698753600">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
</package>
<package pkgid="6c932cd2120993fe088f5a90579475f41b8bdc247457f83fd8b0c05415730138" name="libsss_certmap0" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.17.1"/>
  <changelog author="pgajdos@suse.com" date="1709899200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
</package>
<package pkgid="38e102daded72ee9e926bf1559292a83f18bd135834bd7ba481d91050d345de9" name="libsss_certmap0" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.22.1"/>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
  <changelog author="scabrero@suse.de" date="1773144000">- Fix sss_obfuscate crash with python 3.6; (bsc#1259381); Add patch
  0008-subprocess.run-python36.patch</changelog>
  <changelog author="scabrero@suse.de" date="1773230400">- Restore default config file installation; (bsc#1259250);
- Make sure previously rotated logs are chown-ed as well;
  (bsc#1259475); Add patch
  0009-Make-sure-previously-rotated-logs-are-chown-ed-as-we.patch</changelog>
</package>
<package pkgid="92e2212191ff249932ea217bdcf56bdfb99f25e8eaf81c4adc79080ac232a277" name="libsss_certmap0" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.25.1"/>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
  <changelog author="scabrero@suse.de" date="1773144000">- Fix sss_obfuscate crash with python 3.6; (bsc#1259381); Add patch
  0008-subprocess.run-python36.patch</changelog>
  <changelog author="scabrero@suse.de" date="1773230400">- Restore default config file installation; (bsc#1259250);
- Make sure previously rotated logs are chown-ed as well;
  (bsc#1259475); Add patch
  0009-Make-sure-previously-rotated-logs-are-chown-ed-as-we.patch</changelog>
  <changelog author="scabrero@suse.de" date="1775476800">- Do not package capabilities, will be applied by %set_permissions
  rpm macro; (bsc#1259436);
- Silence noisy warning from sss_cache if run prior starting the
  daemon and config.ldb does not exist; (bsc#1259545); Add patch
  0010-TOOLS-noisy-debug-messages-when-config.ldb-does-not-.patch
- Fix ldap_child process started by the backend process ending in
  defunc state. Add patch
  0011-sdap_select_principal_from_keytab_sync-waitpid-synch.patch
- Create the secrets directory for the KCM service; (bsc#1259253);
- Fix missing nss library in 32bit package; (bsc#1260409);
- Fix packaging wrong permissions for /usr/share/polkit-1/rules.d;
  (bsc#1260413);</changelog>
</package>
<package pkgid="a2db5fe229be4b261537d88565f24f2b76b78b34f786548eef467294cd40fc78" name="libsss_certmap0" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.28.1"/>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
  <changelog author="scabrero@suse.de" date="1773144000">- Fix sss_obfuscate crash with python 3.6; (bsc#1259381); Add patch
  0008-subprocess.run-python36.patch</changelog>
  <changelog author="scabrero@suse.de" date="1773230400">- Restore default config file installation; (bsc#1259250);
- Make sure previously rotated logs are chown-ed as well;
  (bsc#1259475); Add patch
  0009-Make-sure-previously-rotated-logs-are-chown-ed-as-we.patch</changelog>
  <changelog author="scabrero@suse.de" date="1775476800">- Do not package capabilities, will be applied by %set_permissions
  rpm macro; (bsc#1259436);
- Silence noisy warning from sss_cache if run prior starting the
  daemon and config.ldb does not exist; (bsc#1259545); Add patch
  0010-TOOLS-noisy-debug-messages-when-config.ldb-does-not-.patch
- Fix ldap_child process started by the backend process ending in
  defunc state. Add patch
  0011-sdap_select_principal_from_keytab_sync-waitpid-synch.patch
- Create the secrets directory for the KCM service; (bsc#1259253);
- Fix missing nss library in 32bit package; (bsc#1260409);
- Fix packaging wrong permissions for /usr/share/polkit-1/rules.d;
  (bsc#1260413);</changelog>
  <changelog author="scabrero@suse.de" date="1777464000">- With the 2.10 update sssd runs under unprivileged user which is
  not possible in certain scenarios. This update reverts to run as
  root with minimum privileges; (bsc#1259436); Add patch
  0012-run-as-root.patch
- Let krb5 child tolerate missing capabilities; Add patch
  0013-KRB5-let-krb5_child-tolerate-missing-cap-set-id.patch
- Fix systemd try-restart warning when updating</changelog>
</package>
<package pkgid="b9af95ca479dcaebb5b34b5a80f52adfad1c787e4bd4a78167b9928784365b2a" name="libsss_certmap0" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.31.1"/>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
  <changelog author="scabrero@suse.de" date="1773144000">- Fix sss_obfuscate crash with python 3.6; (bsc#1259381); Add patch
  0008-subprocess.run-python36.patch</changelog>
  <changelog author="scabrero@suse.de" date="1773230400">- Restore default config file installation; (bsc#1259250);
- Make sure previously rotated logs are chown-ed as well;
  (bsc#1259475); Add patch
  0009-Make-sure-previously-rotated-logs-are-chown-ed-as-we.patch</changelog>
  <changelog author="scabrero@suse.de" date="1775476800">- Do not package capabilities, will be applied by %set_permissions
  rpm macro; (bsc#1259436);
- Silence noisy warning from sss_cache if run prior starting the
  daemon and config.ldb does not exist; (bsc#1259545); Add patch
  0010-TOOLS-noisy-debug-messages-when-config.ldb-does-not-.patch
- Fix ldap_child process started by the backend process ending in
  defunc state. Add patch
  0011-sdap_select_principal_from_keytab_sync-waitpid-synch.patch
- Create the secrets directory for the KCM service; (bsc#1259253);
- Fix missing nss library in 32bit package; (bsc#1260409);
- Fix packaging wrong permissions for /usr/share/polkit-1/rules.d;
  (bsc#1260413);</changelog>
  <changelog author="scabrero@suse.de" date="1777464000">- With the 2.10 update sssd runs under unprivileged user which is
  not possible in certain scenarios. This update reverts to run as
  root with minimum privileges; (bsc#1259436); Add patch
  0012-run-as-root.patch
- Let krb5 child tolerate missing capabilities; Add patch
  0013-KRB5-let-krb5_child-tolerate-missing-cap-set-id.patch
- Fix systemd try-restart warning when updating</changelog>
  <changelog author="scabrero@suse.de" date="1777896000">- Reduce the message severity logged when the LDAP server hosts
  multiple naming contexts without defining a default one in the
  rootdse; (bsc#1264185); Add patch
  0015-sdap-Reduce-log-level-when-get_naming_context-fails.patch
- Do not ignore tests result at build time; (bsc#1246196);
- Skip tests depending on soft-hsm; Add patch
  0014-TESTS-Disable-pam-srv-and-certmap-cmocka-tests.patch</changelog>
</package>
<package pkgid="9c54c4e9d1cef5e801fcec8a20764bfacf64a2169d210b02a665a6964fed43b7" name="libsss_certmap0" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150700.9.12.1"/>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
</package>
<package pkgid="f7843869721b7de8ec942ea51e1abbcc025d5cf5ef5e69379905540ce2ff7fb5" name="libsss_certmap0" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150700.9.3.1"/>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
</package>
<package pkgid="c659570418bff9fa76a1f34f9ab9e6ea1c0904c89e96acc43b375295621c0b41" name="libsss_certmap0" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150700.9.6.2"/>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
</package>
<package pkgid="b6f60a587d084159aadae0640481e998eea84470a9fc58bd3e2116c85c0e8b4a" name="libsss_certmap0" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150700.9.9.1"/>
  <changelog author="scabrero@suse.de" date="1698753600">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
</package>
<package pkgid="8d9aec5709e900cc70346340b66cddd8fb76f3fb1d0b089d99cb329aab778ebf" name="libsss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.17.1"/>
  <changelog author="pgajdos@suse.com" date="1709899200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
</package>
<package pkgid="32b0417601d521c545579d804777b57bb4febbabf826e636a9b86b7d8fdeafbb" name="libsss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.22.1"/>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
  <changelog author="scabrero@suse.de" date="1773144000">- Fix sss_obfuscate crash with python 3.6; (bsc#1259381); Add patch
  0008-subprocess.run-python36.patch</changelog>
  <changelog author="scabrero@suse.de" date="1773230400">- Restore default config file installation; (bsc#1259250);
- Make sure previously rotated logs are chown-ed as well;
  (bsc#1259475); Add patch
  0009-Make-sure-previously-rotated-logs-are-chown-ed-as-we.patch</changelog>
</package>
<package pkgid="becf4003fba7d799e0a840384189eb8e017d27c97839e63cd7adf7e4a87136ff" name="libsss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.25.1"/>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
  <changelog author="scabrero@suse.de" date="1773144000">- Fix sss_obfuscate crash with python 3.6; (bsc#1259381); Add patch
  0008-subprocess.run-python36.patch</changelog>
  <changelog author="scabrero@suse.de" date="1773230400">- Restore default config file installation; (bsc#1259250);
- Make sure previously rotated logs are chown-ed as well;
  (bsc#1259475); Add patch
  0009-Make-sure-previously-rotated-logs-are-chown-ed-as-we.patch</changelog>
  <changelog author="scabrero@suse.de" date="1775476800">- Do not package capabilities, will be applied by %set_permissions
  rpm macro; (bsc#1259436);
- Silence noisy warning from sss_cache if run prior starting the
  daemon and config.ldb does not exist; (bsc#1259545); Add patch
  0010-TOOLS-noisy-debug-messages-when-config.ldb-does-not-.patch
- Fix ldap_child process started by the backend process ending in
  defunc state. Add patch
  0011-sdap_select_principal_from_keytab_sync-waitpid-synch.patch
- Create the secrets directory for the KCM service; (bsc#1259253);
- Fix missing nss library in 32bit package; (bsc#1260409);
- Fix packaging wrong permissions for /usr/share/polkit-1/rules.d;
  (bsc#1260413);</changelog>
</package>
<package pkgid="c9a0b0010a8279e9a400f59a22380a10668017836f64efd812ca20459ee85a82" name="libsss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.28.1"/>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
  <changelog author="scabrero@suse.de" date="1773144000">- Fix sss_obfuscate crash with python 3.6; (bsc#1259381); Add patch
  0008-subprocess.run-python36.patch</changelog>
  <changelog author="scabrero@suse.de" date="1773230400">- Restore default config file installation; (bsc#1259250);
- Make sure previously rotated logs are chown-ed as well;
  (bsc#1259475); Add patch
  0009-Make-sure-previously-rotated-logs-are-chown-ed-as-we.patch</changelog>
  <changelog author="scabrero@suse.de" date="1775476800">- Do not package capabilities, will be applied by %set_permissions
  rpm macro; (bsc#1259436);
- Silence noisy warning from sss_cache if run prior starting the
  daemon and config.ldb does not exist; (bsc#1259545); Add patch
  0010-TOOLS-noisy-debug-messages-when-config.ldb-does-not-.patch
- Fix ldap_child process started by the backend process ending in
  defunc state. Add patch
  0011-sdap_select_principal_from_keytab_sync-waitpid-synch.patch
- Create the secrets directory for the KCM service; (bsc#1259253);
- Fix missing nss library in 32bit package; (bsc#1260409);
- Fix packaging wrong permissions for /usr/share/polkit-1/rules.d;
  (bsc#1260413);</changelog>
  <changelog author="scabrero@suse.de" date="1777464000">- With the 2.10 update sssd runs under unprivileged user which is
  not possible in certain scenarios. This update reverts to run as
  root with minimum privileges; (bsc#1259436); Add patch
  0012-run-as-root.patch
- Let krb5 child tolerate missing capabilities; Add patch
  0013-KRB5-let-krb5_child-tolerate-missing-cap-set-id.patch
- Fix systemd try-restart warning when updating</changelog>
</package>
<package pkgid="94be04380f16c7722c7a200b04ca812c320b03f692faa8d0421a9ea49642590f" name="libsss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.31.1"/>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
  <changelog author="scabrero@suse.de" date="1773144000">- Fix sss_obfuscate crash with python 3.6; (bsc#1259381); Add patch
  0008-subprocess.run-python36.patch</changelog>
  <changelog author="scabrero@suse.de" date="1773230400">- Restore default config file installation; (bsc#1259250);
- Make sure previously rotated logs are chown-ed as well;
  (bsc#1259475); Add patch
  0009-Make-sure-previously-rotated-logs-are-chown-ed-as-we.patch</changelog>
  <changelog author="scabrero@suse.de" date="1775476800">- Do not package capabilities, will be applied by %set_permissions
  rpm macro; (bsc#1259436);
- Silence noisy warning from sss_cache if run prior starting the
  daemon and config.ldb does not exist; (bsc#1259545); Add patch
  0010-TOOLS-noisy-debug-messages-when-config.ldb-does-not-.patch
- Fix ldap_child process started by the backend process ending in
  defunc state. Add patch
  0011-sdap_select_principal_from_keytab_sync-waitpid-synch.patch
- Create the secrets directory for the KCM service; (bsc#1259253);
- Fix missing nss library in 32bit package; (bsc#1260409);
- Fix packaging wrong permissions for /usr/share/polkit-1/rules.d;
  (bsc#1260413);</changelog>
  <changelog author="scabrero@suse.de" date="1777464000">- With the 2.10 update sssd runs under unprivileged user which is
  not possible in certain scenarios. This update reverts to run as
  root with minimum privileges; (bsc#1259436); Add patch
  0012-run-as-root.patch
- Let krb5 child tolerate missing capabilities; Add patch
  0013-KRB5-let-krb5_child-tolerate-missing-cap-set-id.patch
- Fix systemd try-restart warning when updating</changelog>
  <changelog author="scabrero@suse.de" date="1777896000">- Reduce the message severity logged when the LDAP server hosts
  multiple naming contexts without defining a default one in the
  rootdse; (bsc#1264185); Add patch
  0015-sdap-Reduce-log-level-when-get_naming_context-fails.patch
- Do not ignore tests result at build time; (bsc#1246196);
- Skip tests depending on soft-hsm; Add patch
  0014-TESTS-Disable-pam-srv-and-certmap-cmocka-tests.patch</changelog>
</package>
<package pkgid="944d1174cacbe2b22a0cb7b136a963396c02715a85aa59305f0c85280dc2c633" name="libsss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150700.9.12.1"/>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
</package>
<package pkgid="0a2ee6422a436863a8bb13c253a6a94b4369b4ad3a6a16e289e7c73e72b076c8" name="libsss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150700.9.3.1"/>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
</package>
<package pkgid="2233fa267c246c62b3fd949801c55b080431a2551dceace0bc5caaac8c606429" name="libsss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150700.9.6.2"/>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
</package>
<package pkgid="6dfd2291205986d476728dee7eb5f1f8ceecfe4b2a417247ac885c835f711dca" name="libsss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150700.9.9.1"/>
  <changelog author="scabrero@suse.de" date="1698753600">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
</package>
<package pkgid="999007db610f837f57a1a0925c8aed4f88884084c2316c5b7bfa8ab4fdaf39ba" name="libsss_idmap0" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.17.1"/>
  <changelog author="pgajdos@suse.com" date="1709899200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
</package>
<package pkgid="eec709f8db28d86f8e31acd698a42dfcb16579c1aec6039c67f39013911cbb17" name="libsss_idmap0" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.22.1"/>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
  <changelog author="scabrero@suse.de" date="1773144000">- Fix sss_obfuscate crash with python 3.6; (bsc#1259381); Add patch
  0008-subprocess.run-python36.patch</changelog>
  <changelog author="scabrero@suse.de" date="1773230400">- Restore default config file installation; (bsc#1259250);
- Make sure previously rotated logs are chown-ed as well;
  (bsc#1259475); Add patch
  0009-Make-sure-previously-rotated-logs-are-chown-ed-as-we.patch</changelog>
</package>
<package pkgid="b4ee29fe7d444d17cc60d0ec5496c66adc369bc4007a09cdbddbd4fbd75a027c" name="libsss_idmap0" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.25.1"/>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
  <changelog author="scabrero@suse.de" date="1773144000">- Fix sss_obfuscate crash with python 3.6; (bsc#1259381); Add patch
  0008-subprocess.run-python36.patch</changelog>
  <changelog author="scabrero@suse.de" date="1773230400">- Restore default config file installation; (bsc#1259250);
- Make sure previously rotated logs are chown-ed as well;
  (bsc#1259475); Add patch
  0009-Make-sure-previously-rotated-logs-are-chown-ed-as-we.patch</changelog>
  <changelog author="scabrero@suse.de" date="1775476800">- Do not package capabilities, will be applied by %set_permissions
  rpm macro; (bsc#1259436);
- Silence noisy warning from sss_cache if run prior starting the
  daemon and config.ldb does not exist; (bsc#1259545); Add patch
  0010-TOOLS-noisy-debug-messages-when-config.ldb-does-not-.patch
- Fix ldap_child process started by the backend process ending in
  defunc state. Add patch
  0011-sdap_select_principal_from_keytab_sync-waitpid-synch.patch
- Create the secrets directory for the KCM service; (bsc#1259253);
- Fix missing nss library in 32bit package; (bsc#1260409);
- Fix packaging wrong permissions for /usr/share/polkit-1/rules.d;
  (bsc#1260413);</changelog>
</package>
<package pkgid="ea0aa9ceff4c97e8136bbed7b20ba1faf4faf30a024bdda8cd79a2093ee72f9a" name="libsss_idmap0" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.28.1"/>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
  <changelog author="scabrero@suse.de" date="1773144000">- Fix sss_obfuscate crash with python 3.6; (bsc#1259381); Add patch
  0008-subprocess.run-python36.patch</changelog>
  <changelog author="scabrero@suse.de" date="1773230400">- Restore default config file installation; (bsc#1259250);
- Make sure previously rotated logs are chown-ed as well;
  (bsc#1259475); Add patch
  0009-Make-sure-previously-rotated-logs-are-chown-ed-as-we.patch</changelog>
  <changelog author="scabrero@suse.de" date="1775476800">- Do not package capabilities, will be applied by %set_permissions
  rpm macro; (bsc#1259436);
- Silence noisy warning from sss_cache if run prior starting the
  daemon and config.ldb does not exist; (bsc#1259545); Add patch
  0010-TOOLS-noisy-debug-messages-when-config.ldb-does-not-.patch
- Fix ldap_child process started by the backend process ending in
  defunc state. Add patch
  0011-sdap_select_principal_from_keytab_sync-waitpid-synch.patch
- Create the secrets directory for the KCM service; (bsc#1259253);
- Fix missing nss library in 32bit package; (bsc#1260409);
- Fix packaging wrong permissions for /usr/share/polkit-1/rules.d;
  (bsc#1260413);</changelog>
  <changelog author="scabrero@suse.de" date="1777464000">- With the 2.10 update sssd runs under unprivileged user which is
  not possible in certain scenarios. This update reverts to run as
  root with minimum privileges; (bsc#1259436); Add patch
  0012-run-as-root.patch
- Let krb5 child tolerate missing capabilities; Add patch
  0013-KRB5-let-krb5_child-tolerate-missing-cap-set-id.patch
- Fix systemd try-restart warning when updating</changelog>
</package>
<package pkgid="c75b2ffae1eb0f778cdc3aa6fd1c2b2adeeeb329806dc9c08a7eab1f5b8670f5" name="libsss_idmap0" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.31.1"/>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
  <changelog author="scabrero@suse.de" date="1773144000">- Fix sss_obfuscate crash with python 3.6; (bsc#1259381); Add patch
  0008-subprocess.run-python36.patch</changelog>
  <changelog author="scabrero@suse.de" date="1773230400">- Restore default config file installation; (bsc#1259250);
- Make sure previously rotated logs are chown-ed as well;
  (bsc#1259475); Add patch
  0009-Make-sure-previously-rotated-logs-are-chown-ed-as-we.patch</changelog>
  <changelog author="scabrero@suse.de" date="1775476800">- Do not package capabilities, will be applied by %set_permissions
  rpm macro; (bsc#1259436);
- Silence noisy warning from sss_cache if run prior starting the
  daemon and config.ldb does not exist; (bsc#1259545); Add patch
  0010-TOOLS-noisy-debug-messages-when-config.ldb-does-not-.patch
- Fix ldap_child process started by the backend process ending in
  defunc state. Add patch
  0011-sdap_select_principal_from_keytab_sync-waitpid-synch.patch
- Create the secrets directory for the KCM service; (bsc#1259253);
- Fix missing nss library in 32bit package; (bsc#1260409);
- Fix packaging wrong permissions for /usr/share/polkit-1/rules.d;
  (bsc#1260413);</changelog>
  <changelog author="scabrero@suse.de" date="1777464000">- With the 2.10 update sssd runs under unprivileged user which is
  not possible in certain scenarios. This update reverts to run as
  root with minimum privileges; (bsc#1259436); Add patch
  0012-run-as-root.patch
- Let krb5 child tolerate missing capabilities; Add patch
  0013-KRB5-let-krb5_child-tolerate-missing-cap-set-id.patch
- Fix systemd try-restart warning when updating</changelog>
  <changelog author="scabrero@suse.de" date="1777896000">- Reduce the message severity logged when the LDAP server hosts
  multiple naming contexts without defining a default one in the
  rootdse; (bsc#1264185); Add patch
  0015-sdap-Reduce-log-level-when-get_naming_context-fails.patch
- Do not ignore tests result at build time; (bsc#1246196);
- Skip tests depending on soft-hsm; Add patch
  0014-TESTS-Disable-pam-srv-and-certmap-cmocka-tests.patch</changelog>
</package>
<package pkgid="a5016d3ad68fb698cd9cde42560bce385f25ea8860c3d56e37efcf81c9707120" name="libsss_idmap0" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150700.9.12.1"/>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
</package>
<package pkgid="7d0f127874b737369fcd190dc40dc4b902800bae4f96766129792786e350a929" name="libsss_idmap0" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150700.9.3.1"/>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
</package>
<package pkgid="890f16fd62e1c9c6483aad502225525b0b4d28166f14dff193451b73008ef146" name="libsss_idmap0" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150700.9.6.2"/>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
</package>
<package pkgid="d308da36972b54d97db222decb8b86049513c020056ed2b6e7c64aef33034a1e" name="libsss_idmap0" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150700.9.9.1"/>
  <changelog author="scabrero@suse.de" date="1698753600">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
</package>
<package pkgid="838045d19ce6bfaf858c3125f5631d467df7fc53ff02d82829554e9aaa986a81" name="libsss_nss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.17.1"/>
  <changelog author="pgajdos@suse.com" date="1709899200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
</package>
<package pkgid="4fbbc962b407985235c08856e4b4d7a8c76a900fbd87b9f4714f499fe612249b" name="libsss_nss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.22.1"/>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
  <changelog author="scabrero@suse.de" date="1773144000">- Fix sss_obfuscate crash with python 3.6; (bsc#1259381); Add patch
  0008-subprocess.run-python36.patch</changelog>
  <changelog author="scabrero@suse.de" date="1773230400">- Restore default config file installation; (bsc#1259250);
- Make sure previously rotated logs are chown-ed as well;
  (bsc#1259475); Add patch
  0009-Make-sure-previously-rotated-logs-are-chown-ed-as-we.patch</changelog>
</package>
<package pkgid="c7f53a81af65ced3245e1215b9ea52cecfa8e95074b6a8ca7ddb6fb40de3677a" name="libsss_nss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.25.1"/>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
  <changelog author="scabrero@suse.de" date="1773144000">- Fix sss_obfuscate crash with python 3.6; (bsc#1259381); Add patch
  0008-subprocess.run-python36.patch</changelog>
  <changelog author="scabrero@suse.de" date="1773230400">- Restore default config file installation; (bsc#1259250);
- Make sure previously rotated logs are chown-ed as well;
  (bsc#1259475); Add patch
  0009-Make-sure-previously-rotated-logs-are-chown-ed-as-we.patch</changelog>
  <changelog author="scabrero@suse.de" date="1775476800">- Do not package capabilities, will be applied by %set_permissions
  rpm macro; (bsc#1259436);
- Silence noisy warning from sss_cache if run prior starting the
  daemon and config.ldb does not exist; (bsc#1259545); Add patch
  0010-TOOLS-noisy-debug-messages-when-config.ldb-does-not-.patch
- Fix ldap_child process started by the backend process ending in
  defunc state. Add patch
  0011-sdap_select_principal_from_keytab_sync-waitpid-synch.patch
- Create the secrets directory for the KCM service; (bsc#1259253);
- Fix missing nss library in 32bit package; (bsc#1260409);
- Fix packaging wrong permissions for /usr/share/polkit-1/rules.d;
  (bsc#1260413);</changelog>
</package>
<package pkgid="b458ed74c889d9a09ccd4e12730b8101e74dd1c500101f3e6c5a3040689a0314" name="libsss_nss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.28.1"/>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
  <changelog author="scabrero@suse.de" date="1773144000">- Fix sss_obfuscate crash with python 3.6; (bsc#1259381); Add patch
  0008-subprocess.run-python36.patch</changelog>
  <changelog author="scabrero@suse.de" date="1773230400">- Restore default config file installation; (bsc#1259250);
- Make sure previously rotated logs are chown-ed as well;
  (bsc#1259475); Add patch
  0009-Make-sure-previously-rotated-logs-are-chown-ed-as-we.patch</changelog>
  <changelog author="scabrero@suse.de" date="1775476800">- Do not package capabilities, will be applied by %set_permissions
  rpm macro; (bsc#1259436);
- Silence noisy warning from sss_cache if run prior starting the
  daemon and config.ldb does not exist; (bsc#1259545); Add patch
  0010-TOOLS-noisy-debug-messages-when-config.ldb-does-not-.patch
- Fix ldap_child process started by the backend process ending in
  defunc state. Add patch
  0011-sdap_select_principal_from_keytab_sync-waitpid-synch.patch
- Create the secrets directory for the KCM service; (bsc#1259253);
- Fix missing nss library in 32bit package; (bsc#1260409);
- Fix packaging wrong permissions for /usr/share/polkit-1/rules.d;
  (bsc#1260413);</changelog>
  <changelog author="scabrero@suse.de" date="1777464000">- With the 2.10 update sssd runs under unprivileged user which is
  not possible in certain scenarios. This update reverts to run as
  root with minimum privileges; (bsc#1259436); Add patch
  0012-run-as-root.patch
- Let krb5 child tolerate missing capabilities; Add patch
  0013-KRB5-let-krb5_child-tolerate-missing-cap-set-id.patch
- Fix systemd try-restart warning when updating</changelog>
</package>
<package pkgid="bec7e3848dfe8b6e4f2928e7002fd37578477bfec2094f4782d28d0d1ad24542" name="libsss_nss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.31.1"/>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
  <changelog author="scabrero@suse.de" date="1773144000">- Fix sss_obfuscate crash with python 3.6; (bsc#1259381); Add patch
  0008-subprocess.run-python36.patch</changelog>
  <changelog author="scabrero@suse.de" date="1773230400">- Restore default config file installation; (bsc#1259250);
- Make sure previously rotated logs are chown-ed as well;
  (bsc#1259475); Add patch
  0009-Make-sure-previously-rotated-logs-are-chown-ed-as-we.patch</changelog>
  <changelog author="scabrero@suse.de" date="1775476800">- Do not package capabilities, will be applied by %set_permissions
  rpm macro; (bsc#1259436);
- Silence noisy warning from sss_cache if run prior starting the
  daemon and config.ldb does not exist; (bsc#1259545); Add patch
  0010-TOOLS-noisy-debug-messages-when-config.ldb-does-not-.patch
- Fix ldap_child process started by the backend process ending in
  defunc state. Add patch
  0011-sdap_select_principal_from_keytab_sync-waitpid-synch.patch
- Create the secrets directory for the KCM service; (bsc#1259253);
- Fix missing nss library in 32bit package; (bsc#1260409);
- Fix packaging wrong permissions for /usr/share/polkit-1/rules.d;
  (bsc#1260413);</changelog>
  <changelog author="scabrero@suse.de" date="1777464000">- With the 2.10 update sssd runs under unprivileged user which is
  not possible in certain scenarios. This update reverts to run as
  root with minimum privileges; (bsc#1259436); Add patch
  0012-run-as-root.patch
- Let krb5 child tolerate missing capabilities; Add patch
  0013-KRB5-let-krb5_child-tolerate-missing-cap-set-id.patch
- Fix systemd try-restart warning when updating</changelog>
  <changelog author="scabrero@suse.de" date="1777896000">- Reduce the message severity logged when the LDAP server hosts
  multiple naming contexts without defining a default one in the
  rootdse; (bsc#1264185); Add patch
  0015-sdap-Reduce-log-level-when-get_naming_context-fails.patch
- Do not ignore tests result at build time; (bsc#1246196);
- Skip tests depending on soft-hsm; Add patch
  0014-TESTS-Disable-pam-srv-and-certmap-cmocka-tests.patch</changelog>
</package>
<package pkgid="cc7e95df9d7742b03a44ef5c309a27a0852c325c624414382c6c810cd21527ed" name="libsss_nss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150700.9.12.1"/>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
</package>
<package pkgid="c9c691e8a7abdb223f818ddd9dbe348fd7c8e4996871b523979a1492cad4ad3b" name="libsss_nss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150700.9.3.1"/>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
</package>
<package pkgid="1bdfa260bfb04afcef7562fe13d1ad59def3dc904383f4c7c5501100498162a2" name="libsss_nss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150700.9.6.2"/>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
</package>
<package pkgid="1fa561fe4e44380ba409eb040d6f3b6b317b4f01645a077e04a58e0c848c4881" name="libsss_nss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150700.9.9.1"/>
  <changelog author="scabrero@suse.de" date="1698753600">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
</package>
<package pkgid="f20cb7dc7e102843d79a269736a4cf806c99ecad3fe8d4f4e8a0b1c4c440dde4" name="libsss_nss_idmap0" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.17.1"/>
  <changelog author="pgajdos@suse.com" date="1709899200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
</package>
<package pkgid="9747b8fd93e62e86412900a18497de432f84f80df398644bf48975c5e0282785" name="libsss_nss_idmap0" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.22.1"/>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
  <changelog author="scabrero@suse.de" date="1773144000">- Fix sss_obfuscate crash with python 3.6; (bsc#1259381); Add patch
  0008-subprocess.run-python36.patch</changelog>
  <changelog author="scabrero@suse.de" date="1773230400">- Restore default config file installation; (bsc#1259250);
- Make sure previously rotated logs are chown-ed as well;
  (bsc#1259475); Add patch
  0009-Make-sure-previously-rotated-logs-are-chown-ed-as-we.patch</changelog>
</package>
<package pkgid="c13efaec4d01c6f764dec24cb356eeec05fdc321e17f9bfc2619a5d7c64181a9" name="libsss_nss_idmap0" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.25.1"/>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
  <changelog author="scabrero@suse.de" date="1773144000">- Fix sss_obfuscate crash with python 3.6; (bsc#1259381); Add patch
  0008-subprocess.run-python36.patch</changelog>
  <changelog author="scabrero@suse.de" date="1773230400">- Restore default config file installation; (bsc#1259250);
- Make sure previously rotated logs are chown-ed as well;
  (bsc#1259475); Add patch
  0009-Make-sure-previously-rotated-logs-are-chown-ed-as-we.patch</changelog>
  <changelog author="scabrero@suse.de" date="1775476800">- Do not package capabilities, will be applied by %set_permissions
  rpm macro; (bsc#1259436);
- Silence noisy warning from sss_cache if run prior starting the
  daemon and config.ldb does not exist; (bsc#1259545); Add patch
  0010-TOOLS-noisy-debug-messages-when-config.ldb-does-not-.patch
- Fix ldap_child process started by the backend process ending in
  defunc state. Add patch
  0011-sdap_select_principal_from_keytab_sync-waitpid-synch.patch
- Create the secrets directory for the KCM service; (bsc#1259253);
- Fix missing nss library in 32bit package; (bsc#1260409);
- Fix packaging wrong permissions for /usr/share/polkit-1/rules.d;
  (bsc#1260413);</changelog>
</package>
<package pkgid="30254b46cad7740ed13edcc76d879d95712a5dd824b53e7c6938155ac3627d11" name="libsss_nss_idmap0" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.28.1"/>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
  <changelog author="scabrero@suse.de" date="1773144000">- Fix sss_obfuscate crash with python 3.6; (bsc#1259381); Add patch
  0008-subprocess.run-python36.patch</changelog>
  <changelog author="scabrero@suse.de" date="1773230400">- Restore default config file installation; (bsc#1259250);
- Make sure previously rotated logs are chown-ed as well;
  (bsc#1259475); Add patch
  0009-Make-sure-previously-rotated-logs-are-chown-ed-as-we.patch</changelog>
  <changelog author="scabrero@suse.de" date="1775476800">- Do not package capabilities, will be applied by %set_permissions
  rpm macro; (bsc#1259436);
- Silence noisy warning from sss_cache if run prior starting the
  daemon and config.ldb does not exist; (bsc#1259545); Add patch
  0010-TOOLS-noisy-debug-messages-when-config.ldb-does-not-.patch
- Fix ldap_child process started by the backend process ending in
  defunc state. Add patch
  0011-sdap_select_principal_from_keytab_sync-waitpid-synch.patch
- Create the secrets directory for the KCM service; (bsc#1259253);
- Fix missing nss library in 32bit package; (bsc#1260409);
- Fix packaging wrong permissions for /usr/share/polkit-1/rules.d;
  (bsc#1260413);</changelog>
  <changelog author="scabrero@suse.de" date="1777464000">- With the 2.10 update sssd runs under unprivileged user which is
  not possible in certain scenarios. This update reverts to run as
  root with minimum privileges; (bsc#1259436); Add patch
  0012-run-as-root.patch
- Let krb5 child tolerate missing capabilities; Add patch
  0013-KRB5-let-krb5_child-tolerate-missing-cap-set-id.patch
- Fix systemd try-restart warning when updating</changelog>
</package>
<package pkgid="4fc8981a3a5b5123c19eaf8c0effdf5f412efcb5c7f67abe65d32174d4efdbce" name="libsss_nss_idmap0" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.31.1"/>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
  <changelog author="scabrero@suse.de" date="1773144000">- Fix sss_obfuscate crash with python 3.6; (bsc#1259381); Add patch
  0008-subprocess.run-python36.patch</changelog>
  <changelog author="scabrero@suse.de" date="1773230400">- Restore default config file installation; (bsc#1259250);
- Make sure previously rotated logs are chown-ed as well;
  (bsc#1259475); Add patch
  0009-Make-sure-previously-rotated-logs-are-chown-ed-as-we.patch</changelog>
  <changelog author="scabrero@suse.de" date="1775476800">- Do not package capabilities, will be applied by %set_permissions
  rpm macro; (bsc#1259436);
- Silence noisy warning from sss_cache if run prior starting the
  daemon and config.ldb does not exist; (bsc#1259545); Add patch
  0010-TOOLS-noisy-debug-messages-when-config.ldb-does-not-.patch
- Fix ldap_child process started by the backend process ending in
  defunc state. Add patch
  0011-sdap_select_principal_from_keytab_sync-waitpid-synch.patch
- Create the secrets directory for the KCM service; (bsc#1259253);
- Fix missing nss library in 32bit package; (bsc#1260409);
- Fix packaging wrong permissions for /usr/share/polkit-1/rules.d;
  (bsc#1260413);</changelog>
  <changelog author="scabrero@suse.de" date="1777464000">- With the 2.10 update sssd runs under unprivileged user which is
  not possible in certain scenarios. This update reverts to run as
  root with minimum privileges; (bsc#1259436); Add patch
  0012-run-as-root.patch
- Let krb5 child tolerate missing capabilities; Add patch
  0013-KRB5-let-krb5_child-tolerate-missing-cap-set-id.patch
- Fix systemd try-restart warning when updating</changelog>
  <changelog author="scabrero@suse.de" date="1777896000">- Reduce the message severity logged when the LDAP server hosts
  multiple naming contexts without defining a default one in the
  rootdse; (bsc#1264185); Add patch
  0015-sdap-Reduce-log-level-when-get_naming_context-fails.patch
- Do not ignore tests result at build time; (bsc#1246196);
- Skip tests depending on soft-hsm; Add patch
  0014-TESTS-Disable-pam-srv-and-certmap-cmocka-tests.patch</changelog>
</package>
<package pkgid="9081b2852bfeb7894c1d17ac2b4ec995e19c5275b6e444ad9a5066a971034d9c" name="libsss_nss_idmap0" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150700.9.12.1"/>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
</package>
<package pkgid="1760d0f57300c43b8406d6f598d10d2fb211c0f302640c2211691cd6339ca721" name="libsss_nss_idmap0" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150700.9.3.1"/>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
</package>
<package pkgid="f172ee94020c3c19ec9eb705fc2d93c0c69d5d892d367397ae39a97fb6516414" name="libsss_nss_idmap0" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150700.9.6.2"/>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
</package>
<package pkgid="dab22ae928bd041e6c5402388eb21b16224e7141deb064bd89aaff54047b8873" name="libsss_nss_idmap0" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150700.9.9.1"/>
  <changelog author="scabrero@suse.de" date="1698753600">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
</package>
<package pkgid="09d91f01b48d221eab91be43725d3a25ae8cd68969ee90cd8f64efaef2c22d9c" name="libsss_simpleifp-devel" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.17.1"/>
  <changelog author="pgajdos@suse.com" date="1709899200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
</package>
<package pkgid="79b7bdf0e5b532ef098362593d2b3559f49d5fb8973ef4f4dc22cc41a0a13acb" name="libsss_simpleifp-devel" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.22.1"/>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
  <changelog author="scabrero@suse.de" date="1773144000">- Fix sss_obfuscate crash with python 3.6; (bsc#1259381); Add patch
  0008-subprocess.run-python36.patch</changelog>
  <changelog author="scabrero@suse.de" date="1773230400">- Restore default config file installation; (bsc#1259250);
- Make sure previously rotated logs are chown-ed as well;
  (bsc#1259475); Add patch
  0009-Make-sure-previously-rotated-logs-are-chown-ed-as-we.patch</changelog>
</package>
<package pkgid="505ef12cea95511ba23dc1c0a3fce15063174d8c023b98aab537aacdd8752855" name="libsss_simpleifp-devel" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.25.1"/>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
  <changelog author="scabrero@suse.de" date="1773144000">- Fix sss_obfuscate crash with python 3.6; (bsc#1259381); Add patch
  0008-subprocess.run-python36.patch</changelog>
  <changelog author="scabrero@suse.de" date="1773230400">- Restore default config file installation; (bsc#1259250);
- Make sure previously rotated logs are chown-ed as well;
  (bsc#1259475); Add patch
  0009-Make-sure-previously-rotated-logs-are-chown-ed-as-we.patch</changelog>
  <changelog author="scabrero@suse.de" date="1775476800">- Do not package capabilities, will be applied by %set_permissions
  rpm macro; (bsc#1259436);
- Silence noisy warning from sss_cache if run prior starting the
  daemon and config.ldb does not exist; (bsc#1259545); Add patch
  0010-TOOLS-noisy-debug-messages-when-config.ldb-does-not-.patch
- Fix ldap_child process started by the backend process ending in
  defunc state. Add patch
  0011-sdap_select_principal_from_keytab_sync-waitpid-synch.patch
- Create the secrets directory for the KCM service; (bsc#1259253);
- Fix missing nss library in 32bit package; (bsc#1260409);
- Fix packaging wrong permissions for /usr/share/polkit-1/rules.d;
  (bsc#1260413);</changelog>
</package>
<package pkgid="b0f702a36a390ccc08d007bcbe1698f0923bcafca1363b8e28af41b8073ddc93" name="libsss_simpleifp-devel" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.28.1"/>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
  <changelog author="scabrero@suse.de" date="1773144000">- Fix sss_obfuscate crash with python 3.6; (bsc#1259381); Add patch
  0008-subprocess.run-python36.patch</changelog>
  <changelog author="scabrero@suse.de" date="1773230400">- Restore default config file installation; (bsc#1259250);
- Make sure previously rotated logs are chown-ed as well;
  (bsc#1259475); Add patch
  0009-Make-sure-previously-rotated-logs-are-chown-ed-as-we.patch</changelog>
  <changelog author="scabrero@suse.de" date="1775476800">- Do not package capabilities, will be applied by %set_permissions
  rpm macro; (bsc#1259436);
- Silence noisy warning from sss_cache if run prior starting the
  daemon and config.ldb does not exist; (bsc#1259545); Add patch
  0010-TOOLS-noisy-debug-messages-when-config.ldb-does-not-.patch
- Fix ldap_child process started by the backend process ending in
  defunc state. Add patch
  0011-sdap_select_principal_from_keytab_sync-waitpid-synch.patch
- Create the secrets directory for the KCM service; (bsc#1259253);
- Fix missing nss library in 32bit package; (bsc#1260409);
- Fix packaging wrong permissions for /usr/share/polkit-1/rules.d;
  (bsc#1260413);</changelog>
  <changelog author="scabrero@suse.de" date="1777464000">- With the 2.10 update sssd runs under unprivileged user which is
  not possible in certain scenarios. This update reverts to run as
  root with minimum privileges; (bsc#1259436); Add patch
  0012-run-as-root.patch
- Let krb5 child tolerate missing capabilities; Add patch
  0013-KRB5-let-krb5_child-tolerate-missing-cap-set-id.patch
- Fix systemd try-restart warning when updating</changelog>
</package>
<package pkgid="ba92acf044fcaa92f2ec4cfc7599df090363751b985bf0a40296085abef4b96c" name="libsss_simpleifp-devel" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.31.1"/>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
  <changelog author="scabrero@suse.de" date="1773144000">- Fix sss_obfuscate crash with python 3.6; (bsc#1259381); Add patch
  0008-subprocess.run-python36.patch</changelog>
  <changelog author="scabrero@suse.de" date="1773230400">- Restore default config file installation; (bsc#1259250);
- Make sure previously rotated logs are chown-ed as well;
  (bsc#1259475); Add patch
  0009-Make-sure-previously-rotated-logs-are-chown-ed-as-we.patch</changelog>
  <changelog author="scabrero@suse.de" date="1775476800">- Do not package capabilities, will be applied by %set_permissions
  rpm macro; (bsc#1259436);
- Silence noisy warning from sss_cache if run prior starting the
  daemon and config.ldb does not exist; (bsc#1259545); Add patch
  0010-TOOLS-noisy-debug-messages-when-config.ldb-does-not-.patch
- Fix ldap_child process started by the backend process ending in
  defunc state. Add patch
  0011-sdap_select_principal_from_keytab_sync-waitpid-synch.patch
- Create the secrets directory for the KCM service; (bsc#1259253);
- Fix missing nss library in 32bit package; (bsc#1260409);
- Fix packaging wrong permissions for /usr/share/polkit-1/rules.d;
  (bsc#1260413);</changelog>
  <changelog author="scabrero@suse.de" date="1777464000">- With the 2.10 update sssd runs under unprivileged user which is
  not possible in certain scenarios. This update reverts to run as
  root with minimum privileges; (bsc#1259436); Add patch
  0012-run-as-root.patch
- Let krb5 child tolerate missing capabilities; Add patch
  0013-KRB5-let-krb5_child-tolerate-missing-cap-set-id.patch
- Fix systemd try-restart warning when updating</changelog>
  <changelog author="scabrero@suse.de" date="1777896000">- Reduce the message severity logged when the LDAP server hosts
  multiple naming contexts without defining a default one in the
  rootdse; (bsc#1264185); Add patch
  0015-sdap-Reduce-log-level-when-get_naming_context-fails.patch
- Do not ignore tests result at build time; (bsc#1246196);
- Skip tests depending on soft-hsm; Add patch
  0014-TESTS-Disable-pam-srv-and-certmap-cmocka-tests.patch</changelog>
</package>
<package pkgid="540b668b10c58dbc767310d7fbf231a06e2d5610e44d585cf72084fc2ecc3ad4" name="libsss_simpleifp-devel" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150700.9.12.1"/>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
</package>
<package pkgid="01b54ef69af24759bd91065286a652b327b1d332ed0606b4ed065bf55e9c26dc" name="libsss_simpleifp-devel" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150700.9.3.1"/>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
</package>
<package pkgid="584a57744436e383152cc5c272cf86fd9a12d30393fbc01263b867771064142b" name="libsss_simpleifp-devel" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150700.9.6.2"/>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
</package>
<package pkgid="961ad0491ce9554b51d1169f34821f50c1c76c71bc58a13b090a5d14357da2ba" name="libsss_simpleifp-devel" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150700.9.9.1"/>
  <changelog author="scabrero@suse.de" date="1698753600">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
</package>
<package pkgid="c2248a1310fe8e6f6d78a78a2aef46c1c218683b2c8e34cbb127fc43c7481cf4" name="libsss_simpleifp0" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.17.1"/>
  <changelog author="pgajdos@suse.com" date="1709899200">- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
</package>
<package pkgid="38170ed731e78c078dc193f80515157c36d4f8a5cbc18d47ac6f5af5789e8fc9" name="libsss_simpleifp0" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.22.1"/>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
  <changelog author="scabrero@suse.de" date="1773144000">- Fix sss_obfuscate crash with python 3.6; (bsc#1259381); Add patch
  0008-subprocess.run-python36.patch</changelog>
  <changelog author="scabrero@suse.de" date="1773230400">- Restore default config file installation; (bsc#1259250);
- Make sure previously rotated logs are chown-ed as well;
  (bsc#1259475); Add patch
  0009-Make-sure-previously-rotated-logs-are-chown-ed-as-we.patch</changelog>
</package>
<package pkgid="6151ebc8a265fc01b2ec6bc4a262283577c1a28a94120a9070d56ecc674e6189" name="libsss_simpleifp0" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.25.1"/>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
  <changelog author="scabrero@suse.de" date="1773144000">- Fix sss_obfuscate crash with python 3.6; (bsc#1259381); Add patch
  0008-subprocess.run-python36.patch</changelog>
  <changelog author="scabrero@suse.de" date="1773230400">- Restore default config file installation; (bsc#1259250);
- Make sure previously rotated logs are chown-ed as well;
  (bsc#1259475); Add patch
  0009-Make-sure-previously-rotated-logs-are-chown-ed-as-we.patch</changelog>
  <changelog author="scabrero@suse.de" date="1775476800">- Do not package capabilities, will be applied by %set_permissions
  rpm macro; (bsc#1259436);
- Silence noisy warning from sss_cache if run prior starting the
  daemon and config.ldb does not exist; (bsc#1259545); Add patch
  0010-TOOLS-noisy-debug-messages-when-config.ldb-does-not-.patch
- Fix ldap_child process started by the backend process ending in
  defunc state. Add patch
  0011-sdap_select_principal_from_keytab_sync-waitpid-synch.patch
- Create the secrets directory for the KCM service; (bsc#1259253);
- Fix missing nss library in 32bit package; (bsc#1260409);
- Fix packaging wrong permissions for /usr/share/polkit-1/rules.d;
  (bsc#1260413);</changelog>
</package>
<package pkgid="c59d759d79b4a331ce39f68dc4033b9bba5e12425d3642de1424a14b37d6ca5f" name="libsss_simpleifp0" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.28.1"/>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
  <changelog author="scabrero@suse.de" date="1773144000">- Fix sss_obfuscate crash with python 3.6; (bsc#1259381); Add patch
  0008-subprocess.run-python36.patch</changelog>
  <changelog author="scabrero@suse.de" date="1773230400">- Restore default config file installation; (bsc#1259250);
- Make sure previously rotated logs are chown-ed as well;
  (bsc#1259475); Add patch
  0009-Make-sure-previously-rotated-logs-are-chown-ed-as-we.patch</changelog>
  <changelog author="scabrero@suse.de" date="1775476800">- Do not package capabilities, will be applied by %set_permissions
  rpm macro; (bsc#1259436);
- Silence noisy warning from sss_cache if run prior starting the
  daemon and config.ldb does not exist; (bsc#1259545); Add patch
  0010-TOOLS-noisy-debug-messages-when-config.ldb-does-not-.patch
- Fix ldap_child process started by the backend process ending in
  defunc state. Add patch
  0011-sdap_select_principal_from_keytab_sync-waitpid-synch.patch
- Create the secrets directory for the KCM service; (bsc#1259253);
- Fix missing nss library in 32bit package; (bsc#1260409);
- Fix packaging wrong permissions for /usr/share/polkit-1/rules.d;
  (bsc#1260413);</changelog>
  <changelog author="scabrero@suse.de" date="1777464000">- With the 2.10 update sssd runs under unprivileged user which is
  not possible in certain scenarios. This update reverts to run as
  root with minimum privileges; (bsc#1259436); Add patch
  0012-run-as-root.patch
- Let krb5 child tolerate missing capabilities; Add patch
  0013-KRB5-let-krb5_child-tolerate-missing-cap-set-id.patch
- Fix systemd try-restart warning when updating</changelog>
</package>
<package pkgid="6023d3364bc12ed8e8f0f2764c30760084f36fb05d08b4d85a206b1c235dd2be" name="libsss_simpleifp0" arch="x86_64">
  <version epoch="0" ver="2.10.2" rel="150700.9.31.1"/>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1721217600">- Fix spec file for openSUSE ALP and SUSE SLFO, where the
  python3_fix_shebang_path RPM macro is not available</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="jengelh@inai.de" date="1727784000">- Update filelists involving memberof.so and idmap/sss.so to
  avoid gobbling up one file into multiple sssd subpackages.
  (Between samba-4.20 and 4.21, %ldbdir changes from
  /usr/lib64/ldb2/modules/ldb to /usr/lib64/samba/ldb, so now
  `%_libdir/samba` is a bit too broad.)</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
  <changelog author="scabrero@suse.de" date="1768478400">- Update to release 2.10.2; (jsc#PED-12449);
  * If the ssh responder is not running, sss_ssh_knownhosts will
    not fail (but it will not return the keys).
  * SSSD is now capable of handling multiple services associated
    with the same port.
  * sssd_pam, being a privileged binary, now clears the
    environment and does not allow configuration of the
    PR_SET_DUMPABLE flag as a precaution.
- Changes from sssd 2.10.1
  * SSSD does not create anymore missing path components of
    DIR:/FILE: ccache types while acquiring user's TGT. The
    parent directory of requested ccache directory must exist and
    the user trying to log in must have rwx access to this
    directory. This matches behavior of /usr/bin/kinit.
  * The option default_domain_suffix is deprecated.
- Changes from sssd 2.10.0
  * The ``sssctl cache-upgrade`` command was removed. SSSD
    performs automatic upgrades at startup when needed.
  * Support of ``enumeration`` feature (i.e. ability to list all
    users/groups using ``getent passwd/group`` without argument)
    for AD/IPA providers is deprecated and might be removed in
    further releases.
  * The new tool ``sss_ssh_knownhosts`` can be used with ssh's
    ``KnownHostsCommand`` configuration option to retrieve the
    host's public keys from a remote server (FreeIPA, LDAP,
    etc.). It replaces ```sss_ssh_knownhostsproxy``.
  * The default value for ``ldap_id_use_start_tls`` changed from
    false to true for improved security.
  * https://github.com/SSSD/sssd/releases/tag/2.10.0
- Fix socket activation of responders
- Daemon runs now as unprivileged user 'sssd'
- Add patch:
  * 0005-TOOL-Fix-build-parameter-name-omitted.patch
- Rename patches:
  * 0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch to
    0006-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch
  * 0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch to
    0007-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch
- Drop patches now in upstream:
  * 0005-ad-gpo-use-hash-to-store-intermediate-results.patch
  * 0006-sssctl-manage-gpo-cache.patch
  * 0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch
  * 0008-reschedule-ptasks-on-clock-shift.patch
  * 0009-Fix-the-build-with-Samba-4.20.patch
  * 0010-sss-client-handle-key-value-in-destructor.patch
  * 0011-SYSDB-Allow-multiple-services-per-port.patch
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1770033600">- Use %pre scriptlet instead of %pretrans to migrate from
  sssd-common; (bsc#1257509);</changelog>
  <changelog author="scabrero@suse.de" date="1773144000">- Fix sss_obfuscate crash with python 3.6; (bsc#1259381); Add patch
  0008-subprocess.run-python36.patch</changelog>
  <changelog author="scabrero@suse.de" date="1773230400">- Restore default config file installation; (bsc#1259250);
- Make sure previously rotated logs are chown-ed as well;
  (bsc#1259475); Add patch
  0009-Make-sure-previously-rotated-logs-are-chown-ed-as-we.patch</changelog>
  <changelog author="scabrero@suse.de" date="1775476800">- Do not package capabilities, will be applied by %set_permissions
  rpm macro; (bsc#1259436);
- Silence noisy warning from sss_cache if run prior starting the
  daemon and config.ldb does not exist; (bsc#1259545); Add patch
  0010-TOOLS-noisy-debug-messages-when-config.ldb-does-not-.patch
- Fix ldap_child process started by the backend process ending in
  defunc state. Add patch
  0011-sdap_select_principal_from_keytab_sync-waitpid-synch.patch
- Create the secrets directory for the KCM service; (bsc#1259253);
- Fix missing nss library in 32bit package; (bsc#1260409);
- Fix packaging wrong permissions for /usr/share/polkit-1/rules.d;
  (bsc#1260413);</changelog>
  <changelog author="scabrero@suse.de" date="1777464000">- With the 2.10 update sssd runs under unprivileged user which is
  not possible in certain scenarios. This update reverts to run as
  root with minimum privileges; (bsc#1259436); Add patch
  0012-run-as-root.patch
- Let krb5 child tolerate missing capabilities; Add patch
  0013-KRB5-let-krb5_child-tolerate-missing-cap-set-id.patch
- Fix systemd try-restart warning when updating</changelog>
  <changelog author="scabrero@suse.de" date="1777896000">- Reduce the message severity logged when the LDAP server hosts
  multiple naming contexts without defining a default one in the
  rootdse; (bsc#1264185); Add patch
  0015-sdap-Reduce-log-level-when-get_naming_context-fails.patch
- Do not ignore tests result at build time; (bsc#1246196);
- Skip tests depending on soft-hsm; Add patch
  0014-TESTS-Disable-pam-srv-and-certmap-cmocka-tests.patch</changelog>
</package>
<package pkgid="3182467f458e0e2f748543a46f1d39fbc040f9f86c70870f4e1fcf0220ee8df3" name="libsss_simpleifp0" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150700.9.12.1"/>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1766404800">- Fix sssctl config-check exit code when the conf.d snippets
  directory does not exist; (bsc#1230348); Add patch
  0016-SSSCTL-config-check-do-not-return-an-error-if-snippe.patch</changelog>
</package>
<package pkgid="fec0c703faec773d3c1bb1b0c4df5c6db1979897ae6ce50f8a397da63db92aa6" name="libsss_simpleifp0" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150700.9.3.1"/>
  <changelog author="jengelh@inai.de" date="1687521600">- Update to relese 2.9.1
  * A regression was fixed that prevented autofs lookups to
    function correctly when cache_first is set to True.
  * A regression where SSSD failed to properly watch for changes
    in ``/etc/resolv.conf`` when it was a symbolic link or was a
    relative path, was fixed.
  * ldap password policy: return failure if there are no grace logins
    left; (bsc#1214434); Drop SLE patch
    0006-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="jengelh@inai.de" date="1694088000">- Update to release 2.9.2
  * sssctl cert-show and cert-show cert-eval-rule can now be run as
    non-root user.
  * New option local_auth_policy is added to control which offline
    authentication methods will be enabled by SSSD.
  * Fix sssd entering failed state under heavy load by adding
    watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
    Drop SLE patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
</package>
<package pkgid="bfd758d671a364383805002015031883007d89dc76462f7a41848b949ef386cf" name="libsss_simpleifp0" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150700.9.6.2"/>
  <changelog author="jengelh@inai.de" date="1698753600">- Default config is unworkable, just stop installing it altogether
  [boo#1216739]</changelog>
  <changelog author="scabrero@suse.de" date="1698753601">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
</package>
<package pkgid="e7c602eb120ce43d92e514c16743edb3585d9f732d8bdb09901060958d19233b" name="libsss_simpleifp0" arch="x86_64">
  <version epoch="0" ver="2.9.3" rel="150700.9.9.1"/>
  <changelog author="scabrero@suse.de" date="1698753600">- Update dependencies to require the same subpackages version and
  release
- Fix /usr/etc migration fragment in wrong "%pre kcm" instead of
  "%pre"
- Move sss_analyze to sssd-tools package</changelog>
  <changelog author="jengelh@inai.de" date="1698926400">- Offer the sssd.conf template as %doc (for examples, do actually
  see the "Examples" section of the sssd.conf(5) manpage)</changelog>
  <changelog author="jengelh@inai.de" date="1699876800">- Update to release 2.9.3
  * The proxy provider is now able to handle certificate mapping
    and matching rules and users handled by the proxy provider can
    be configured for local Smartcard authentication. Besides the
    mapping rule local Smartcard authentication should be enabled
    with the `local_auth_policy` option in the backend and with
    `pam_cert_auth` in the PAM responder.</changelog>
  <changelog author="scabrero@suse.de" date="1700222400">- /usr/etc migration, restore /etc/sssd/sssd.conf.rpmsave after
  update (bsc#1216865)
- Do not install the KRB5 IDP plugin, it is useless without the
  OIDC child
- Drop no longer valid --without-secrets configure switch</changelog>
  <changelog author="scabrero@suse.de" date="1700222401">- Fix spec file for Leap</changelog>
  <changelog author="scabrero@suse.de" date="1700568000">- Adapt spec file for SLE 15 SP6/Leap 15.6; (jsc#PED-6714);
  * Remove package sssd-common, merged into sssd
  * Continue building deprecated files provider and infopipe
    responder
  * Disable selinux and semanage
  * Provide rcsssd shortcut</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0005-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
  <changelog author="scabrero@suse.de" date="1714392000">- Extend sssctl command line tool to manage the cached GPOs;
  (jsc#PED-7677); Add patch 0006-sssctl-manage-gpo-cache.patch</changelog>
  <changelog author="scabrero@suse.de" date="1717502400">- Use the name from the cached entries when updating them to avoid
  capitalization problems; (bsc#1223050); Add patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1718712000">- Reenable pam_sss after upgrade, was removed by sssd-common postun;
  (bsc#1226407);</changelog>
  <changelog author="scabrero@suse.de" date="1720699200">- Revert the change dropping the default configuration file. If
  /usr/etc exists will be installed there, otherwise in /etc.
  (bsc#1226157);</changelog>
  <changelog author="scabrero@suse.de" date="1726833600">- Reschedule periodic tasks if clock shift is detected; (bsc#1229128);
  Add 0008-reschedule-ptasks-on-clock-shift.patch
- Amend spec file to apply patch
  0007-SYSDB-Use-SYSDB_NAME-from-cached-entry-when-updating.patch</changelog>
  <changelog author="scabrero@suse.de" date="1727092800">- Fix sss_analyze python shebang; (bsc#1230798);</changelog>
  <changelog author="nopower@suse.com" date="1734004800">- Prepare sssd for samba update to &gt;= 4.20 and avoid build
  breakage; (bsc#1234458).
- Add 0009-Fix-the-build-with-Samba-4.20.patch</changelog>
  <changelog author="nopower@suse.com" date="1734091200">- Fix filedescriptor leak related to getpwnam()/getpwuid() to
  /var/lib/sss/pipes/nss socket; (bsc#1234384). Add patch
  0010-sss-client-handle-key-value-in-destructor.patch
- Revert the change dropping /etc/sssd/conf.d dir; (bsc#1234420).</changelog>
  <changelog author="scabrero@suse.de" date="1737720000">- Allow multiple services per port; (bsc#1234368);
  (gh#SSSD/sssd#7790); Add patch
  0011-SYSDB-Allow-multiple-services-per-port.patch</changelog>
  <changelog author="scabrero@suse.de" date="1739793600">- Build with openldap 2.5 which supports TLS channel binding;
  (bsc#1229655); (jsc#PED-12097);</changelog>
  <changelog author="scabrero@suse.de" date="1749643200">- Install file in krb5.conf.d to include sssd krb5 config snippets;
  (bsc#1244325);</changelog>
  <changelog author="scabrero@suse.de" date="1751889600">- Check if the memory cache fd was closed or hijacked;
  (bsc#1243385); Add patches:
  * 0012-SSS_CLIENT-MC-in-case-mem-cache-file-validation-fail.patch
  * 0013-SSS_CLIENT-check-if-mem-cache-fd-was-hijacked.patch
  * 0014-SSS_CLIENT-check-if-reponder-socket-was-hijacked.patch</changelog>
  <changelog author="scabrero@suse.de" date="1763467200">- Disable Kerberos localauth an2ln plugin for AD; (CVE-2025-11561);
  (bsc#1251827); Add patch
  0015-krb5-disable-Kerberos-localauth-an2ln-plugin-for-AD-.patch</changelog>
</package>
<package pkgid="b00028a9bf417b690d28ab267aa826af163ff8134fce0f0c30670a9cae1b8282" name="libstdc++6" arch="x86_64">
  <version epoch="0" ver="14.3.0+git11799" rel="150000.1.11.1"/>
  <changelog author="rguenther@suse.com" date="1728475200">- Update to gcc-14 branch head, 4af44f2cf7d281f3e4f3957ef, git10750
  * includes libstdc++6 fix for parsing tzdata 2024b [gcc#116657]
- Add gcc14-pr116629.patch to fix ICE with LTO building openvino
  on aarch64 [boo#1230262]</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1732968000">- Add loongarch64 to asan_arch, atomic_arch,
  itm_arch, lsan_arch, tsan_arch and ubsan_arch
- Add larchintrin.h, lasxintrin.h and lsxintrin.h
  headers to gccXY main package in %files section
- Set build_primary_64bit to 1 for loongarch64</changelog>
  <changelog author="adrian@suse.de" date="1733140800">- disable go on loongarch64 for now</changelog>
  <changelog author="mardnh@gmx.de" date="1736078400">- Switch to glibc based cross-compiler for target hppa</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Define ALT_CC_UNDER_TEST and ALT_CXX_UNDER_TEST for compat tests</changelog>
  <changelog author="rguenther@suse.com" date="1738152000">- For cross compilers require the same or newer binutils, newlib
  or cross-glibc that was used at build time.  [bsc#1232526]</changelog>
  <changelog author="rguenther@suse.com" date="1738843200">- Adjust cross compiler requirements to use %requires_ge
- Fix condition on whether to enable plugins or JIT support to
  not check sle_version which is not defined in SLFO but to check
  is_opensuse and suse_version instead.
- Add gcc14-pr118780.patch to make the SLFO config work.</changelog>
  <changelog author="rguenther@suse.com" date="1740052800">- Update to gcc-14 branch head, 9ffecde121af883b60bbe60d0, git11321
  * fixes reported ICE in [bsc#1237442]
- Drop gcc14-pr116629.patch now backported to the branch.</changelog>
  <changelog author="rguenther@suse.com" date="1741608000">- Disable profiling during build when %want_reproducible_builds is set
  [bsc#1238491]</changelog>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
</package>
<package pkgid="7f43a386fc56afb265f685c347bc98cd2cbf4be0d6c0b8d9e93eead8b40cd98f" name="libstdc++6" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.3.3"/>
  <changelog author="rguenther@suse.com" date="1743163200">- Update to GCC trunk head, 15.0.1+git9001
  * includes -msplit-patch-nops required for user-space livepatching
    on powerpc
  * includes fix for Ada build with --enable-host-pie
- Adjust for removed avx10_2roundingintrin.h intrinsic header.
- Build GCC executables PIE on SLE.  [bsc#1239938]</changelog>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="7911fbf9291ca733649c5e215b28007b73bce0453c17ede0c9523cdf540ae9d4" name="libstdc++6" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.6.1"/>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
</package>
<package pkgid="25ede2542c94087f2bb57edd5913cdd3b4d31f37be046043436ba0fde98c2ff4" name="libstdc++6" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.9.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc14-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="18c80496b967362ed0ac7983ad2d3b7db608f265c6567d32f705b5de7a74e5d2" name="libstdc++6-32bit" arch="x86_64">
  <version epoch="0" ver="14.3.0+git11799" rel="150000.1.11.1"/>
  <changelog author="rguenther@suse.com" date="1728475200">- Update to gcc-14 branch head, 4af44f2cf7d281f3e4f3957ef, git10750
  * includes libstdc++6 fix for parsing tzdata 2024b [gcc#116657]
- Add gcc14-pr116629.patch to fix ICE with LTO building openvino
  on aarch64 [boo#1230262]</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1732968000">- Add loongarch64 to asan_arch, atomic_arch,
  itm_arch, lsan_arch, tsan_arch and ubsan_arch
- Add larchintrin.h, lasxintrin.h and lsxintrin.h
  headers to gccXY main package in %files section
- Set build_primary_64bit to 1 for loongarch64</changelog>
  <changelog author="adrian@suse.de" date="1733140800">- disable go on loongarch64 for now</changelog>
  <changelog author="mardnh@gmx.de" date="1736078400">- Switch to glibc based cross-compiler for target hppa</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Define ALT_CC_UNDER_TEST and ALT_CXX_UNDER_TEST for compat tests</changelog>
  <changelog author="rguenther@suse.com" date="1738152000">- For cross compilers require the same or newer binutils, newlib
  or cross-glibc that was used at build time.  [bsc#1232526]</changelog>
  <changelog author="rguenther@suse.com" date="1738843200">- Adjust cross compiler requirements to use %requires_ge
- Fix condition on whether to enable plugins or JIT support to
  not check sle_version which is not defined in SLFO but to check
  is_opensuse and suse_version instead.
- Add gcc14-pr118780.patch to make the SLFO config work.</changelog>
  <changelog author="rguenther@suse.com" date="1740052800">- Update to gcc-14 branch head, 9ffecde121af883b60bbe60d0, git11321
  * fixes reported ICE in [bsc#1237442]
- Drop gcc14-pr116629.patch now backported to the branch.</changelog>
  <changelog author="rguenther@suse.com" date="1741608000">- Disable profiling during build when %want_reproducible_builds is set
  [bsc#1238491]</changelog>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
</package>
<package pkgid="ba10e4635489ecd03d2d3ed0afa467e6e55d0f93802048782ea266c7e4daabe6" name="libstdc++6-32bit" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.3.3"/>
  <changelog author="rguenther@suse.com" date="1743163200">- Update to GCC trunk head, 15.0.1+git9001
  * includes -msplit-patch-nops required for user-space livepatching
    on powerpc
  * includes fix for Ada build with --enable-host-pie
- Adjust for removed avx10_2roundingintrin.h intrinsic header.
- Build GCC executables PIE on SLE.  [bsc#1239938]</changelog>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="cb5a629f73ab6a23399155b624bd73aecd66092c16daf5cd9bec0f3ca1637304" name="libstdc++6-32bit" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.6.1"/>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
</package>
<package pkgid="8b36cae09752d415f1ea7fb82bb6f1f8cae0992fdaf5bae65cd0a8172a38fc9e" name="libstdc++6-32bit" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.9.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc14-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="7378a1441efba393aed909c84cd23847e0b87c0d7bcc59c5091d7a4f426b6d23" name="libstdc++6-devel-gcc15" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.3.3"/>
  <changelog author="rguenther@suse.com" date="1743163200">- Update to GCC trunk head, 15.0.1+git9001
  * includes -msplit-patch-nops required for user-space livepatching
    on powerpc
  * includes fix for Ada build with --enable-host-pie
- Adjust for removed avx10_2roundingintrin.h intrinsic header.
- Build GCC executables PIE on SLE.  [bsc#1239938]</changelog>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="69d11c762ea7b6938cda87062ecd17fed500a793f8ece2f41b18d5fb80c43095" name="libstdc++6-devel-gcc15" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.6.1"/>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
</package>
<package pkgid="8d63ce7cd105be1c277c25f56b3f732d08ab267e0e3529765cd642fa7298f5e7" name="libstdc++6-devel-gcc15" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.9.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc14-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="a71e4ed1674017176c4d9cbaa6a8b0a73919f2dfef0ed79ef0edc6e27779a9c0" name="libstdc++6-locale" arch="x86_64">
  <version epoch="0" ver="14.3.0+git11799" rel="150000.1.11.1"/>
  <changelog author="rguenther@suse.com" date="1728475200">- Update to gcc-14 branch head, 4af44f2cf7d281f3e4f3957ef, git10750
  * includes libstdc++6 fix for parsing tzdata 2024b [gcc#116657]
- Add gcc14-pr116629.patch to fix ICE with LTO building openvino
  on aarch64 [boo#1230262]</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1732968000">- Add loongarch64 to asan_arch, atomic_arch,
  itm_arch, lsan_arch, tsan_arch and ubsan_arch
- Add larchintrin.h, lasxintrin.h and lsxintrin.h
  headers to gccXY main package in %files section
- Set build_primary_64bit to 1 for loongarch64</changelog>
  <changelog author="adrian@suse.de" date="1733140800">- disable go on loongarch64 for now</changelog>
  <changelog author="mardnh@gmx.de" date="1736078400">- Switch to glibc based cross-compiler for target hppa</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Define ALT_CC_UNDER_TEST and ALT_CXX_UNDER_TEST for compat tests</changelog>
  <changelog author="rguenther@suse.com" date="1738152000">- For cross compilers require the same or newer binutils, newlib
  or cross-glibc that was used at build time.  [bsc#1232526]</changelog>
  <changelog author="rguenther@suse.com" date="1738843200">- Adjust cross compiler requirements to use %requires_ge
- Fix condition on whether to enable plugins or JIT support to
  not check sle_version which is not defined in SLFO but to check
  is_opensuse and suse_version instead.
- Add gcc14-pr118780.patch to make the SLFO config work.</changelog>
  <changelog author="rguenther@suse.com" date="1740052800">- Update to gcc-14 branch head, 9ffecde121af883b60bbe60d0, git11321
  * fixes reported ICE in [bsc#1237442]
- Drop gcc14-pr116629.patch now backported to the branch.</changelog>
  <changelog author="rguenther@suse.com" date="1741608000">- Disable profiling during build when %want_reproducible_builds is set
  [bsc#1238491]</changelog>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
</package>
<package pkgid="1328d2c5059252f8b73905a9bbb84733f0daae95266d5e7fc66069c56c16c5a3" name="libstdc++6-locale" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.3.3"/>
  <changelog author="rguenther@suse.com" date="1743163200">- Update to GCC trunk head, 15.0.1+git9001
  * includes -msplit-patch-nops required for user-space livepatching
    on powerpc
  * includes fix for Ada build with --enable-host-pie
- Adjust for removed avx10_2roundingintrin.h intrinsic header.
- Build GCC executables PIE on SLE.  [bsc#1239938]</changelog>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="3748b253c9e43791c554aeafdf758c1d014d4f2fb79f5eb85787fcf3bc76fbfa" name="libstdc++6-locale" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.6.1"/>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
</package>
<package pkgid="816c23e9a17b0519a91b43bd89dd2969215aa83b7cf35956ce037c63c3b28c41" name="libstdc++6-locale" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.9.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc14-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="e385a7264e80415d7db10bbdeeb67a32f429d0134195b5e3c91fd780c35af9ba" name="libstdc++6-pp" arch="x86_64">
  <version epoch="0" ver="14.3.0+git11799" rel="150000.1.11.1"/>
  <changelog author="rguenther@suse.com" date="1728475200">- Update to gcc-14 branch head, 4af44f2cf7d281f3e4f3957ef, git10750
  * includes libstdc++6 fix for parsing tzdata 2024b [gcc#116657]
- Add gcc14-pr116629.patch to fix ICE with LTO building openvino
  on aarch64 [boo#1230262]</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1732968000">- Add loongarch64 to asan_arch, atomic_arch,
  itm_arch, lsan_arch, tsan_arch and ubsan_arch
- Add larchintrin.h, lasxintrin.h and lsxintrin.h
  headers to gccXY main package in %files section
- Set build_primary_64bit to 1 for loongarch64</changelog>
  <changelog author="adrian@suse.de" date="1733140800">- disable go on loongarch64 for now</changelog>
  <changelog author="mardnh@gmx.de" date="1736078400">- Switch to glibc based cross-compiler for target hppa</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Define ALT_CC_UNDER_TEST and ALT_CXX_UNDER_TEST for compat tests</changelog>
  <changelog author="rguenther@suse.com" date="1738152000">- For cross compilers require the same or newer binutils, newlib
  or cross-glibc that was used at build time.  [bsc#1232526]</changelog>
  <changelog author="rguenther@suse.com" date="1738843200">- Adjust cross compiler requirements to use %requires_ge
- Fix condition on whether to enable plugins or JIT support to
  not check sle_version which is not defined in SLFO but to check
  is_opensuse and suse_version instead.
- Add gcc14-pr118780.patch to make the SLFO config work.</changelog>
  <changelog author="rguenther@suse.com" date="1740052800">- Update to gcc-14 branch head, 9ffecde121af883b60bbe60d0, git11321
  * fixes reported ICE in [bsc#1237442]
- Drop gcc14-pr116629.patch now backported to the branch.</changelog>
  <changelog author="rguenther@suse.com" date="1741608000">- Disable profiling during build when %want_reproducible_builds is set
  [bsc#1238491]</changelog>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
</package>
<package pkgid="01e6cdac59b9165b2d3c6c43c09c3203bb535bbfa0f67998d29f48f9e537887d" name="libstdc++6-pp" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.3.3"/>
  <changelog author="rguenther@suse.com" date="1743163200">- Update to GCC trunk head, 15.0.1+git9001
  * includes -msplit-patch-nops required for user-space livepatching
    on powerpc
  * includes fix for Ada build with --enable-host-pie
- Adjust for removed avx10_2roundingintrin.h intrinsic header.
- Build GCC executables PIE on SLE.  [bsc#1239938]</changelog>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="883dd14b2cccd56ad7ab22b3f7f731e8493fa3c0ba828732a074ba4b7ed012ce" name="libstdc++6-pp" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.6.1"/>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
</package>
<package pkgid="52e304fe4034ab3c63f378a04b67482c916085eec2035ac7b887854f96718662" name="libstdc++6-pp" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.9.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc14-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="da2954bd2714f51c1f4f39c9aecc5cbc54be2d8564a33b3cdc65108e2800629b" name="libstdc++6-pp-32bit" arch="x86_64">
  <version epoch="0" ver="14.3.0+git11799" rel="150000.1.11.1"/>
  <changelog author="rguenther@suse.com" date="1728475200">- Update to gcc-14 branch head, 4af44f2cf7d281f3e4f3957ef, git10750
  * includes libstdc++6 fix for parsing tzdata 2024b [gcc#116657]
- Add gcc14-pr116629.patch to fix ICE with LTO building openvino
  on aarch64 [boo#1230262]</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1732968000">- Add loongarch64 to asan_arch, atomic_arch,
  itm_arch, lsan_arch, tsan_arch and ubsan_arch
- Add larchintrin.h, lasxintrin.h and lsxintrin.h
  headers to gccXY main package in %files section
- Set build_primary_64bit to 1 for loongarch64</changelog>
  <changelog author="adrian@suse.de" date="1733140800">- disable go on loongarch64 for now</changelog>
  <changelog author="mardnh@gmx.de" date="1736078400">- Switch to glibc based cross-compiler for target hppa</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Define ALT_CC_UNDER_TEST and ALT_CXX_UNDER_TEST for compat tests</changelog>
  <changelog author="rguenther@suse.com" date="1738152000">- For cross compilers require the same or newer binutils, newlib
  or cross-glibc that was used at build time.  [bsc#1232526]</changelog>
  <changelog author="rguenther@suse.com" date="1738843200">- Adjust cross compiler requirements to use %requires_ge
- Fix condition on whether to enable plugins or JIT support to
  not check sle_version which is not defined in SLFO but to check
  is_opensuse and suse_version instead.
- Add gcc14-pr118780.patch to make the SLFO config work.</changelog>
  <changelog author="rguenther@suse.com" date="1740052800">- Update to gcc-14 branch head, 9ffecde121af883b60bbe60d0, git11321
  * fixes reported ICE in [bsc#1237442]
- Drop gcc14-pr116629.patch now backported to the branch.</changelog>
  <changelog author="rguenther@suse.com" date="1741608000">- Disable profiling during build when %want_reproducible_builds is set
  [bsc#1238491]</changelog>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
</package>
<package pkgid="1742bd1d9d0380e2362cec95e406c54090655a8552b19ac8e1492ec132079c93" name="libstdc++6-pp-32bit" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.3.3"/>
  <changelog author="rguenther@suse.com" date="1743163200">- Update to GCC trunk head, 15.0.1+git9001
  * includes -msplit-patch-nops required for user-space livepatching
    on powerpc
  * includes fix for Ada build with --enable-host-pie
- Adjust for removed avx10_2roundingintrin.h intrinsic header.
- Build GCC executables PIE on SLE.  [bsc#1239938]</changelog>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="60ea09a0deab96818c421c676e70ecdad391fc98b527b1e3d344b0640a521f28" name="libstdc++6-pp-32bit" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.6.1"/>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
</package>
<package pkgid="6dbc4a36011bf4ee2fbaffeec30884c00ca08b56d549b9754b4e548f2d37b6fd" name="libstdc++6-pp-32bit" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.9.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc14-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="d2b1f8a137b2d51150db98a3c2a21aaebf7a0d59865369157e5268b5cf40bff4" name="libsubid-devel" arch="x86_64">
  <version epoch="0" ver="4.17.2" rel="150600.17.18.1"/>
  <changelog author="mvetter@suse.com" date="1704801600">- bsc#1199026 bsc#1203823:
  Remove pam_keyinit from PAM configuration.
  This was introduced for bsc#1144060.</changelog>
  <changelog author="mvetter@suse.com" date="1705406400">- Update to 4.14.3:
  * libshadow:
    + Avoid null pointer dereference (#904)</changelog>
  <changelog author="mvetter@suse.com" date="1707739200">- Update to 4.14.4:
  * Build system:
    + Link correctly with libdl.
    + Install pam configs for chpasswd(8) and newusers(8) when using
    ./configure --with-libpam --disable-account-tools-setuid.
  * libshadow:
    + Fix build error (parameter name omitted).
    + Fix off-by-one bug.
    + Remove warning.
- Add shadow-4.14.4-chgpasswd-typo.patch: to fix build. See #926
- Update patch macro `patchN` -&gt; `patch -P N`</changelog>
  <changelog author="mvetter@suse.com" date="1707825600">- Update to 4.14.5:
  * Build system:
    + Fix regression introduced in 4.14.4, due to a typo. chgpasswd had
    been deleted from a Makefile variable, but it should have been
    chpasswd.
- Remove shadow-4.14.4-chgpasswd-typo.patch</changelog>
  <changelog author="mvetter@suse.com" date="1709467200">- Update to 4.14.6:
  * login(1):
    + Fix off-by-one bugs.
  * passwd(1):
    + Don't silently truncate passwords of length &gt;= 200 characters.
    Instead, accept a length of PASS_MAX, and reject longer ones.
  * libshadow:
    + Fix calculation in strtoday(), which caused a wrong half-day
    offset in some cases (bsc#1176006)
    + Fix parsing of dates in get_date() (bsc#1176006)
    + Use utmpx instead of utmp. This fixes a regression introduced in
    4.14.0.</changelog>
  <changelog author="mvetter@suse.com" date="1710072000">- Update to 4.15.0
  * libshadow:
    + Use utmpx instead of utmp. This fixes a regression introduced
    in 4.14.0.
    + Fix build error (parameter name omitted).
  * Build system:
    + Link correctly with libdl.
    + Install pam configs for chpasswd(8) and newusers(8) when using
    ./configure --with-libpam --disable-account-tools-setuid.
    + Merge libshadow and libmisc into a single libshadow. This fixes
    problems in the linker, which were reported at least in Gentoo.
    + Fix build with musl libc.
    + Support out of tree builds
  * useradd(8):
    + Set proper SELinux labels for def_usrtemplate
- Update Serge Hallyns GPG key
- Update shadow-login_defs-unused-by-pam.patch</changelog>
  <changelog author="mvetter@suse.com" date="1711022400">- Add shadow-4.15.0-fix-definition.patch:
  Fix error messages about config options.
  See gh/shadow-maint/shadow#967</changelog>
  <changelog author="mvetter@suse.com" date="1711281600">- Update to 4.15.1:
  * Fix a bug that caused spurious error messages about unknown
    login.defs configuration options #967
  * Adding checks for fd omission #964
  * Use temporary stat buffer #974
  * Fix wrong french translation #975
- Drop shadow-4.15.0-fix-definition.patch</changelog>
  <changelog author="mvetter@suse.com" date="1718798400">- Update to 4.16.0:
  * The shadow implementations of id(1) and groups(1) are deprecated
    in favor of the GNU coreutils and binutils versions.
    They will be removed in 4.17.0.
  * The rlogind implementation has been removed.
  * The libsubid major version has been bumped, since it now requires
    specification of the module's free() implementation.
- Update shadow-login_defs-suse.patch
- Add shadow-4.16.0-econf.patch:
  Replace deprecated econf_readDirs with econf_readConfig</changelog>
  <changelog author="mvetter@suse.com" date="1719230400">- bsc#1226850: Drop incorrect econf patch (until time to fix it)
  Drop shadow-4.16.0-econf.patch</changelog>
  <changelog author="scabrero@suse.de" date="1720440000">- Disable flushing sssd caches. The sssd's files provider is no
  longer available.</changelog>
  <changelog author="mvetter@suse.com" date="1733486400">- Update to 4.17.0 RC1:
  Pre-release without changelog</changelog>
  <changelog author="mvetter@suse.com" date="1735300800">- Update to 4.17.0:
  * Fix the lower part of the domain of csrand_uniform()
  * Fix use of volatile pointer
  * Use 'dist-hook' to clean up &lt;tests/unit/Makefile&gt;
  * Use str2[u]l() instead of atoi(3)
  * Use a2i() in various places
  * Fix const correctness
  * Use uid_t for holding UIDs (and GIDs)
  * Move all sprintf(3)-like APIs to a subdirectory
  * Move all copying APIs to a subdirectory
  * Fix forever loop on ENOMEM
  * Fix REALLOC() nmemb calculation
  * Remove id(1)
  * Remove groups(1)
  * Use local time for human-readable dates
  * Use %F instead of %Y-%m-%d with strftime(3)
  * is_valid{user,group}_name(): Set errno to distinguish the reasons
  * Recommend --badname only if it is useful
  * Add fmkomstemp() to fix mode of &lt;/etc/default/useradd&gt;
  * Fix use-after-free bug in sgetgrent()
  * Update Catalan translation
  * Remove references to cppw, cpgr
  * groupadd, groupmod: Update gshadow file with -U
  * Added option -a for listing active users only, optimized using if aflg,return
  * Added information in lastlog man page for new option '-a'
  * Plenty of code cleanup and clarifications</changelog>
  <changelog author="mvetter@suse.com" date="1735646400">- Update to 4.17.1:
  * Fix `su -` regression #1163</changelog>
  <changelog author="mvetter@suse.com" date="1736596800">- Update to 4.17.2:
  * src/login_nopam.c: Fix compiler warnings #1170
  * lib/chkname.c: Put limits for LOGIN_NAME_MAX and sysconf(_SC_LOGIN_NAME_MAX) #1169
  * Use HTTPS in link to Wikipedia article on password strength #1164
  * lib/attr.h: use C23 attributes only with gcc &gt;= 10 #1172
  * login: Fix no-pam authorization regression #1174
  * man: Add Portuguese translation #1178
  * Update French translation #1177
  * Add cheap defense mechanisms #1171
  * Add Romanian translation #1176</changelog>
  <changelog author="mvetter@suse.com" date="1737374400">- bsc#1235453: Set SYS_{UID,GID}_MIN to 201:
  After repeated similar requests to change the ID ranges we set the
  above mentioned value to 201. The max value will stay at 499.
  This range should be sufficient and will give us leeway for the
  future.
  It's not straightforward to find out which static UIDs/GIDs are
  used in all packages.
  Update shadow-login_defs-suse.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1744200000">- shadow-util-linux.patch: util-linux-2.41 introduced new variable:
  LOGIN_ENV_SAFELIST. Recognize it and update dependencies. The
  patch includes gh/shadow-maint/shadow/pull#1248.
- shadow-login_defs-check-login_defs.lst: Make the util-linux.spec
  multibuild file compatible with quilt. Make it working with new
  quilt.</changelog>
  <changelog author="fstrba@suse.com" date="1767787200">- Because of the need of __VA_OPT__ macro, build using gcc11 on
  systemw where the default gcc is lower.</changelog>
  <changelog author="mvetter@suse.com" date="1772712000">- jira#PED-14520: Build with --enable-lastlog
  shadow disabled building lastlog by default in 4.14.0.
  At that point we switched to lastlog2. For SLE 15 we need to
  enable building lastlog again to stay compatible.</changelog>
  <changelog author="mvetter@suse.com" date="1773748800">- bsc#1259542:
  * Install /etc/default/useradd, which shadow doesn't ship anymore
    in the current upstream version, in case users depend on the file.</changelog>
</package>
<package pkgid="5df716a18c52c7229a1374a94fd9eba0f1c20327c0747b4ae8508b8e8efb6584" name="libsubid5" arch="x86_64">
  <version epoch="0" ver="4.17.2" rel="150600.17.18.1"/>
  <changelog author="mvetter@suse.com" date="1704801600">- bsc#1199026 bsc#1203823:
  Remove pam_keyinit from PAM configuration.
  This was introduced for bsc#1144060.</changelog>
  <changelog author="mvetter@suse.com" date="1705406400">- Update to 4.14.3:
  * libshadow:
    + Avoid null pointer dereference (#904)</changelog>
  <changelog author="mvetter@suse.com" date="1707739200">- Update to 4.14.4:
  * Build system:
    + Link correctly with libdl.
    + Install pam configs for chpasswd(8) and newusers(8) when using
    ./configure --with-libpam --disable-account-tools-setuid.
  * libshadow:
    + Fix build error (parameter name omitted).
    + Fix off-by-one bug.
    + Remove warning.
- Add shadow-4.14.4-chgpasswd-typo.patch: to fix build. See #926
- Update patch macro `patchN` -&gt; `patch -P N`</changelog>
  <changelog author="mvetter@suse.com" date="1707825600">- Update to 4.14.5:
  * Build system:
    + Fix regression introduced in 4.14.4, due to a typo. chgpasswd had
    been deleted from a Makefile variable, but it should have been
    chpasswd.
- Remove shadow-4.14.4-chgpasswd-typo.patch</changelog>
  <changelog author="mvetter@suse.com" date="1709467200">- Update to 4.14.6:
  * login(1):
    + Fix off-by-one bugs.
  * passwd(1):
    + Don't silently truncate passwords of length &gt;= 200 characters.
    Instead, accept a length of PASS_MAX, and reject longer ones.
  * libshadow:
    + Fix calculation in strtoday(), which caused a wrong half-day
    offset in some cases (bsc#1176006)
    + Fix parsing of dates in get_date() (bsc#1176006)
    + Use utmpx instead of utmp. This fixes a regression introduced in
    4.14.0.</changelog>
  <changelog author="mvetter@suse.com" date="1710072000">- Update to 4.15.0
  * libshadow:
    + Use utmpx instead of utmp. This fixes a regression introduced
    in 4.14.0.
    + Fix build error (parameter name omitted).
  * Build system:
    + Link correctly with libdl.
    + Install pam configs for chpasswd(8) and newusers(8) when using
    ./configure --with-libpam --disable-account-tools-setuid.
    + Merge libshadow and libmisc into a single libshadow. This fixes
    problems in the linker, which were reported at least in Gentoo.
    + Fix build with musl libc.
    + Support out of tree builds
  * useradd(8):
    + Set proper SELinux labels for def_usrtemplate
- Update Serge Hallyns GPG key
- Update shadow-login_defs-unused-by-pam.patch</changelog>
  <changelog author="mvetter@suse.com" date="1711022400">- Add shadow-4.15.0-fix-definition.patch:
  Fix error messages about config options.
  See gh/shadow-maint/shadow#967</changelog>
  <changelog author="mvetter@suse.com" date="1711281600">- Update to 4.15.1:
  * Fix a bug that caused spurious error messages about unknown
    login.defs configuration options #967
  * Adding checks for fd omission #964
  * Use temporary stat buffer #974
  * Fix wrong french translation #975
- Drop shadow-4.15.0-fix-definition.patch</changelog>
  <changelog author="mvetter@suse.com" date="1718798400">- Update to 4.16.0:
  * The shadow implementations of id(1) and groups(1) are deprecated
    in favor of the GNU coreutils and binutils versions.
    They will be removed in 4.17.0.
  * The rlogind implementation has been removed.
  * The libsubid major version has been bumped, since it now requires
    specification of the module's free() implementation.
- Update shadow-login_defs-suse.patch
- Add shadow-4.16.0-econf.patch:
  Replace deprecated econf_readDirs with econf_readConfig</changelog>
  <changelog author="mvetter@suse.com" date="1719230400">- bsc#1226850: Drop incorrect econf patch (until time to fix it)
  Drop shadow-4.16.0-econf.patch</changelog>
  <changelog author="scabrero@suse.de" date="1720440000">- Disable flushing sssd caches. The sssd's files provider is no
  longer available.</changelog>
  <changelog author="mvetter@suse.com" date="1733486400">- Update to 4.17.0 RC1:
  Pre-release without changelog</changelog>
  <changelog author="mvetter@suse.com" date="1735300800">- Update to 4.17.0:
  * Fix the lower part of the domain of csrand_uniform()
  * Fix use of volatile pointer
  * Use 'dist-hook' to clean up &lt;tests/unit/Makefile&gt;
  * Use str2[u]l() instead of atoi(3)
  * Use a2i() in various places
  * Fix const correctness
  * Use uid_t for holding UIDs (and GIDs)
  * Move all sprintf(3)-like APIs to a subdirectory
  * Move all copying APIs to a subdirectory
  * Fix forever loop on ENOMEM
  * Fix REALLOC() nmemb calculation
  * Remove id(1)
  * Remove groups(1)
  * Use local time for human-readable dates
  * Use %F instead of %Y-%m-%d with strftime(3)
  * is_valid{user,group}_name(): Set errno to distinguish the reasons
  * Recommend --badname only if it is useful
  * Add fmkomstemp() to fix mode of &lt;/etc/default/useradd&gt;
  * Fix use-after-free bug in sgetgrent()
  * Update Catalan translation
  * Remove references to cppw, cpgr
  * groupadd, groupmod: Update gshadow file with -U
  * Added option -a for listing active users only, optimized using if aflg,return
  * Added information in lastlog man page for new option '-a'
  * Plenty of code cleanup and clarifications</changelog>
  <changelog author="mvetter@suse.com" date="1735646400">- Update to 4.17.1:
  * Fix `su -` regression #1163</changelog>
  <changelog author="mvetter@suse.com" date="1736596800">- Update to 4.17.2:
  * src/login_nopam.c: Fix compiler warnings #1170
  * lib/chkname.c: Put limits for LOGIN_NAME_MAX and sysconf(_SC_LOGIN_NAME_MAX) #1169
  * Use HTTPS in link to Wikipedia article on password strength #1164
  * lib/attr.h: use C23 attributes only with gcc &gt;= 10 #1172
  * login: Fix no-pam authorization regression #1174
  * man: Add Portuguese translation #1178
  * Update French translation #1177
  * Add cheap defense mechanisms #1171
  * Add Romanian translation #1176</changelog>
  <changelog author="mvetter@suse.com" date="1737374400">- bsc#1235453: Set SYS_{UID,GID}_MIN to 201:
  After repeated similar requests to change the ID ranges we set the
  above mentioned value to 201. The max value will stay at 499.
  This range should be sufficient and will give us leeway for the
  future.
  It's not straightforward to find out which static UIDs/GIDs are
  used in all packages.
  Update shadow-login_defs-suse.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1744200000">- shadow-util-linux.patch: util-linux-2.41 introduced new variable:
  LOGIN_ENV_SAFELIST. Recognize it and update dependencies. The
  patch includes gh/shadow-maint/shadow/pull#1248.
- shadow-login_defs-check-login_defs.lst: Make the util-linux.spec
  multibuild file compatible with quilt. Make it working with new
  quilt.</changelog>
  <changelog author="fstrba@suse.com" date="1767787200">- Because of the need of __VA_OPT__ macro, build using gcc11 on
  systemw where the default gcc is lower.</changelog>
  <changelog author="mvetter@suse.com" date="1772712000">- jira#PED-14520: Build with --enable-lastlog
  shadow disabled building lastlog by default in 4.14.0.
  At that point we switched to lastlog2. For SLE 15 we need to
  enable building lastlog again to stay compatible.</changelog>
  <changelog author="mvetter@suse.com" date="1773748800">- bsc#1259542:
  * Install /etc/default/useradd, which shadow doesn't ship anymore
    in the current upstream version, in case users depend on the file.</changelog>
</package>
<package pkgid="491e3fc1fb983553fbe65bc0be2b6a2f65957e9fbd0ae1807189585f1797b2b8" name="libsuseconnect" arch="x86_64">
  <version epoch="0" ver="1.21.1" rel="150600.3.18.1"/>
  <changelog author="msabate@suse.com" date="1678795200">- Update to version 1.0.0~git23.406b219ccc9e:
  * Added MemTotal detection for HwInfo
  * move 'ExcludeArch' out of the if block</changelog>
  <changelog author="msabate@suse.com" date="1679054400">- Update to version 1.1.0~git0.e3c41e60892e:
  * Bump to v1.1.0</changelog>
  <changelog author="msabate@suse.com" date="1686139200">- Update to version 1.1.0~git2.f42b4b2a060e:
  * Keep keepalive timer states when replacing SUSEConnect (bsc#1211588)</changelog>
  <changelog author="tschmidt@suse.com" date="1688990400">- Update to version 1.2.0~git0.abd0fec:
  * enhance docs for package testing
  * Fixed `provides` to work with yast2-registration on SLE15 &lt; SP4 (bsc#1212799)
  * Improve error message if product set more than once</changelog>
  <changelog author="tschmidt@suse.com" date="1691064000">- Update to version 1.3.0
  * Track .changes file in git</changelog>
  <changelog author="msabate@suse.com" date="1695729600">- Update to version 1.4.0
  * Added EULA display for addons (bsc#1170267)
  * Fix zypper argument for auto-agreeing licenses (bsc#1214781)
  * Enable building on SLE12 SP5 (jsc#PED-3179)</changelog>
  <changelog author="msabate@suse.com" date="1703246400">- Update to version 1.5.0
  * Configure docker credentials for registry authentication
  * Feature: Support usage from Agama + Cockpit for ALP Micro system registration (bsc#1218364)
  * Add --json output option</changelog>
  <changelog author="tschmidt@suse.com" date="1705579200">- Update to version 1.6.0
  * Disable EULA display for addons (bsc#1218649 and bsc#1217961)</changelog>
  <changelog author="fschnizlein@suse.com" date="1707912000">- Update to version 1.7.0
  * Allow SUSEConnect on read write transactional systems (bsc#1219425)</changelog>
  <changelog author="1josegomezr@gmail.com" date="1710331200">- Update to version 1.8.0
  * Allow "--rollback" flag to run on readonly filesystem (bsc#1220679)</changelog>
  <changelog author="tschmidt@suse.com" date="1715083200">- Update to version 1.9.0
  * Fix certificate import for Yast when using a registration proxy with
    self-signed SSL certificate (bsc#1223107)</changelog>
  <changelog author="fschnizlein@suse.com" date="1716465600">- Update version to 1.10.0
  * Build zypper-migration and zypper-packages-search as standalone
    binaries rather then one single binary
  * Add --gpg-auto-import-keys flag before action in zypper command (bsc#1219004)
  * Include /etc/products.d in directories whose content are backed
    up and restored if a zypper-migration rollback happens. (bsc#1219004)
  * Add the ability to upload the system uptime logs, produced by the
    suse-uptime-tracker daemon, to SCC/RMT as part of keepalive report.
    (jsc#PED-7982) (jsc#PED-8018)
  * Add support for third party packages in SUSEConnect
  * Refactor existing system information collection implementation</changelog>
  <changelog author="msabate@suse.com" date="1720612800">- Update version to 1.11
  - Added uname as collector
  - Added SAP workload detection
  - Added detection of container runtimes
  - Multiple fixes on ARM64 detection
  - Use `read_values` for the CPU collector on Z
  - Fixed data collection for ppc64le
  - Grab the home directory from /etc/passwd if needed (bsc#1226128)</changelog>
  <changelog author="msabate@suse.com" date="1726228800">- Update version to 1.12:
  - Set the filesystem root on zypper when given (bsc#1230229,bsc#1229014)</changelog>
  <changelog author="msabate@suse.com" date="1731585600">- Update version to 1.13:
  - Integrating uptime-tracker
  - Honor auto-import-gpg-keys flag on migration (bsc#1231328)
  - Only send labels if targetting SCC
  - Skip the docker auth generation on RMT (bsc#1231185)
  - Add --set-labels to register command to set labels at registration time on SCC
  - Add a new function to display suse-uptime-tracker version
  - Integrate with uptime-tracker ( https://github.com/SUSE/uptime-tracker/ )
  - Add a command to show the info being gathered</changelog>
  <changelog author="fschnizlein@suse.com" date="1749211200">- Version 1.14 public library release
  This version is only available on Github as a tag to release the
  new golang public library which can be consumed without the need
  to interface with SUSEConnect directly.</changelog>
  <changelog author="fschnizlein@suse.com" date="1769083200">- Update version to 1.20:
  - Update error message for Public Cloud instances with registercloudguest
    installed. SUSEConnect -d is disabled on PYAG and BYOS when the
    registercloudguest command is available. (bsc#1230861)
  - Enhanced SAP detected. Take TREX into account and remove empty values when
    only /usr/sap but no installation exists (bsc#1241002)
  - Fixed modules and extension link to point to version less documentation. (bsc#1239439)
  - Fixed SAP instance detection (bsc#1244550)
  - Remove link to extensions documentation (bsc#1239439)
  - Migrate to the public library</changelog>
  <changelog author="fschnizlein@suse.com" date="1772625600">- Regressions found during QA test runs:
  - Ignore product in announce call (bsc#1257490)
  - Registration to SMT server with failed (bsc#1257625)
  - Backported by PATCH: fix-libsuseconnect-and-pci.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1773316800">- Update version to 1.21:
  - Add expanded metric collection for kernel modules and hardware
    detection (jsc#TEL-226).
  - Support new profile based metric collection
  - Fix ignored --root parameter hanbling when reading and
    writing configuration (bsc#1257667)
  - Add expanded metric collection for system vendor/manfacturer
    (jsc#TEL-260).
  - Removed backport patch: fix-libsuseconnect-and-pci.patch
  - Add missing product id to allow yast2-registration to not break (bsc#1257825)
  - Fix libsuseconnect APIError detection logic (bsc#1257825)</changelog>
  <changelog author="fmccarthy@suse.com" date="1775044800">- Update version to 1.21.1:
  - Fix nil token handling (bsc#1261155)
  - Switch to using go1.24-openssl as the default Go version to
    install to support building the package (jsc#SCC-585).</changelog>
</package>
<package pkgid="28e3f298c0746c5e1f9cb9c77f898de03d9f4d98c75efd16ce2af2c1afe05d6a" name="libsystemd0" arch="x86_64">
  <version epoch="0" ver="254.24" rel="150600.4.33.1"/>
  <changelog author="fbui@suse.com" date="1727870400">- Clean up some remnants from when homed was in the experimental sub-package (bsc#1231048)</changelog>
  <changelog author="fbui@suse.com" date="1729512000">- Import commit 0cbb02c0273374b14188f30e89874c9e8ae425c9 (merge of v254.19)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/44943af96be1422c2d7bdf271e4a77b42f4b41ec...0cbb02c0273374b14188f30e89874c9e8ae425c9</changelog>
  <changelog author="fbui@suse.com" date="1732708800">- Import commit f7f6a3454e3321f92cbdf8e30aeb8b17bc1ff8e8 (merge of v254.20)
  This merge includes the following fix:
    8b6ae951d3 udev: skipping empty udev rules file while collecting the stats (bsc#1232844)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/0cbb02c0273374b14188f30e89874c9e8ae425c9...f7f6a3454e3321f92cbdf8e30aeb8b17bc1ff8e8</changelog>
  <changelog author="fbui@suse.com" date="1733227200">- Import commit 600986ba4d9c562390d99513416f49a5be5559f3 (merge of v254.21)
  This merge includes the following fix:
    a467a411f pid1: make clear that $WATCHDOG_USEC is set for the shutdown binary, noone else (bsc#1232227)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/f7f6a3454e3321f92cbdf8e30aeb8b17bc1ff8e8...600986ba4d9c562390d99513416f49a5be5559f3</changelog>
  <changelog author="fbui@suse.com" date="1733227201">- Add 0003-Drop-support-for-efivar-SystemdOptions.patch (bsc#1220338)
  Upstream deprecated it and plan to drop it in the future.
  Let's get ahead and drop it now as this feature is unlikely to be used on SUSE
  distros and it might be used to gain access to encrypted SLEM systems with
  unattended disk unlock and with secure boot disabled.</changelog>
  <changelog author="fbui@suse.com" date="1734350400">- Import commit eddf52fb14391c30ee2f45fd0c3cab1be116c951
  807fe76411 udev: add new builtin net_driver
  3a48b5f21d udev-builtin-net_id: split-out pci_get_onboard_index() from dev_pci_onboard()
  5359c1d6d4 udev-builtin-net_id: split-out get_pci_slot_specifiers()
  1cd915ac7b udev-builtin-net_id: introduce get_port_specifier() helper function
  72a4218155 udev-builtin-net_id: split out get_dev_port() and make its failure critical
  f6c721b4da udev-builtin-net_id: split-out pci_get_hotplug_slot() and pci_get_hotplug_slot_from_address()
  9e16c3cf27 udev-builtin-net_id: return earlier when hotplug slot is not found
  4851355767 udev-builtin-net_id: skip non-directory entry earlier
  a571e5f1dd udev-builtin-net_id: make names_xen() self-contained
  9acc241d5f udev-builtin-net_id: use sd_device_get_sysnum() to get index of netdevsim
  ca8a431b55 udev-builtin-net_id: make names_netdevsim() self-contained
  a66251d666 udev-builtin-net_id: make names_platform() self-contained
  1e834d7157 udev-builtin-net_id: make names_vio() self-contained
  8b236dcd7a udev-builtin-net_id: make names_ccw() self-contained
  7d70e2fa7d udev-builtin-net_id: make dev_devicetree_onboard() self-contained
  46158a6e91 udev-builtin-net_id: make names_mac() self-contained
  7789e7f886 udev-builtin-net_id: split out get_ifname_prefix()
  9b0062a667 udev-builtin-net_id: swap arguments for streq() and friends
  181a775b40 udev-builtin-net_id: drop unused value from NetNameType
  Refactoring to prepare for backporting the filtering mechanism of specific
  sysfs attributes during predictable NIC name generation.</changelog>
  <changelog author="fbui@suse.com" date="1734350401">- Add 5004-udev-allow-denylist-for-reading-sysfs-attributes-whe.patch (bsc#1234015)
  Temporarily add this patch. It will be integrated in the git repository if
  no issues are reported in the coming months.</changelog>
  <changelog author="fbui@suse.com" date="1734955200">- Import commit eb5a78f50e64a39a2a509fd5141e68ff216a4273 (merge of v254.22)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/600986ba4d9c562390d99513416f49a5be5559f3...eb5a78f50e64a39a2a509fd5141e68ff216a4273</changelog>
  <changelog author="fbui@suse.com" date="1734955201">- Import commit 127e162c9cc0beb5058a718b3a9a1fec6942a927
  679c57667d tpm2-util: Also retry unsealing after policy_pcr returns PCR_CHANGED (boo#1233752 bsc#1234313)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734955202">- Fix systemd-network recommending libidn2-devel (boo#1234765)</changelog>
  <changelog author="fbui@suse.com" date="1736942400">- Import commit 34b1c72fa9aeea9c2c20e6802530e4b915c9dabf (merge of v254.23)
  eab1d9753b stdio-bridge: fix polled fds
  f028f2298e hwdb: comment out the entry for Logitech MX Keys for Mac
  e808cbdd6d test: answer 2nd mdadm --create question for compat with new version
  bf01f3d692 core/unit-serialize: fix serialization of markers
  f043ab6f34 locale-setup: do not load locale from environemnt when /etc/locale.conf is unchanged
  71efbe69b6 core: fix assert when AddDependencyUnitFiles is called with invalid parameter</changelog>
  <changelog author="fbui@suse.com" date="1736942401">- Add 1020-core-create-the-credential-directory-even-if-it-s-em.patch (bsc#1229228)
- Rename 5012-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch into
  1021-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch
  Commit dc571cccd75db7be49b2aada64baf92e3a498c39 was backported and included in
  v254.9 bumping the version requirement on gcc from 4.7 to 8. Unfortunately
  this breakage won't be fixed by upstream therefore there's no longer a need to
  keep the patch that reverts the offending commit in quarantine.</changelog>
  <changelog author="fbui@suse.com" date="1738670400">- Move systemd-userwork from the experimental sub-package to the main package (bsc#1236643)
  It is likely an oversight from when systemd-userdb was migrated from the
  experimental package to the main one.</changelog>
  <changelog author="fbui@suse.com" date="1741089600">- Import commit b25faa18ee7ef3c2d0b16416dfa331d0013dd112
  b4693652f3 journald: close runtime journals before their parent directory removed
  044d051f0c journald: reset runtime seqnum data when flushing to system journal (bsc#1236886)</changelog>
  <changelog author="fbui@suse.com" date="1742385600">- Import commit 2b599c7501253b0e6b7987fdb2676af21bc72ab3 (merge of v254.24)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/b25faa18ee7ef3c2d0b16416dfa331d0013dd112...2b599c7501253b0e6b7987fdb2676af21bc72ab3</changelog>
  <changelog author="fbui@suse.com" date="1742385601">- Import commit 83b9060b6e4c9cdffbbed0e27467cbd2f806dc0d
  09b7477895 udev: allow/denylist for reading sysfs attributes when composing a NIC name (bsc#1234015)
- Drop 5004-udev-allow-denylist-for-reading-sysfs-attributes-whe.patch
  The path has been merged into the SUSE/v254 branch.</changelog>
  <changelog author="fbui@suse.com" date="1743595200">- Import commit 2f79a45369489b656be509a1517afcae4fe3ee20
  ebdfa3e44e man/pstore.conf: pstore.conf template is not always installed in /etc
  304ed20aab man: coredump.conf template is not always installed in /etc (bsc#1237496)</changelog>
  <changelog author="fbui@suse.com" date="1746792000">- Add 1003-journal-again-create-user-journals-for-users-with-hi.patch (bsc#1242938)
  Don't write messages sent from users with UID falling into the container UID
  range to the system journal. Daemons in the container don't talk to the
  outside journald as they talk to the inner one directly, which does its
  journal splitting based on shifted uids.</changelog>
  <changelog author="fbui@suse.com" date="1747051200">- Apply coredump sysctl settings on systemd-coredump updates/removals.</changelog>
  <changelog author="fbui@suse.com" date="1747396800">- Import commit a4100e9c74b0eafae18a13e9d1d988ebc8376c6a
  806c21e22b umount: do not move busy network mounts (bsc#1236177)</changelog>
</package>
<package pkgid="4618a1cf3b10e26124fa1920fd38885ded70a10ca424a5f319c0a0850d1c3418" name="libsystemd0" arch="x86_64">
  <version epoch="0" ver="254.25" rel="150600.4.40.1"/>
  <changelog author="fbui@suse.com" date="1733227200">- Add 0003-Drop-support-for-efivar-SystemdOptions.patch (bsc#1220338)
  Upstream deprecated it and plan to drop it in the future.
  Let's get ahead and drop it now as this feature is unlikely to be used on SUSE
  distros and it might be used to gain access to encrypted SLEM systems with
  unattended disk unlock and with secure boot disabled.</changelog>
  <changelog author="fbui@suse.com" date="1734350400">- Import commit eddf52fb14391c30ee2f45fd0c3cab1be116c951
  807fe76411 udev: add new builtin net_driver
  3a48b5f21d udev-builtin-net_id: split-out pci_get_onboard_index() from dev_pci_onboard()
  5359c1d6d4 udev-builtin-net_id: split-out get_pci_slot_specifiers()
  1cd915ac7b udev-builtin-net_id: introduce get_port_specifier() helper function
  72a4218155 udev-builtin-net_id: split out get_dev_port() and make its failure critical
  f6c721b4da udev-builtin-net_id: split-out pci_get_hotplug_slot() and pci_get_hotplug_slot_from_address()
  9e16c3cf27 udev-builtin-net_id: return earlier when hotplug slot is not found
  4851355767 udev-builtin-net_id: skip non-directory entry earlier
  a571e5f1dd udev-builtin-net_id: make names_xen() self-contained
  9acc241d5f udev-builtin-net_id: use sd_device_get_sysnum() to get index of netdevsim
  ca8a431b55 udev-builtin-net_id: make names_netdevsim() self-contained
  a66251d666 udev-builtin-net_id: make names_platform() self-contained
  1e834d7157 udev-builtin-net_id: make names_vio() self-contained
  8b236dcd7a udev-builtin-net_id: make names_ccw() self-contained
  7d70e2fa7d udev-builtin-net_id: make dev_devicetree_onboard() self-contained
  46158a6e91 udev-builtin-net_id: make names_mac() self-contained
  7789e7f886 udev-builtin-net_id: split out get_ifname_prefix()
  9b0062a667 udev-builtin-net_id: swap arguments for streq() and friends
  181a775b40 udev-builtin-net_id: drop unused value from NetNameType
  Refactoring to prepare for backporting the filtering mechanism of specific
  sysfs attributes during predictable NIC name generation.</changelog>
  <changelog author="fbui@suse.com" date="1734350401">- Add 5004-udev-allow-denylist-for-reading-sysfs-attributes-whe.patch (bsc#1234015)
  Temporarily add this patch. It will be integrated in the git repository if
  no issues are reported in the coming months.</changelog>
  <changelog author="fbui@suse.com" date="1734955200">- Import commit eb5a78f50e64a39a2a509fd5141e68ff216a4273 (merge of v254.22)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/600986ba4d9c562390d99513416f49a5be5559f3...eb5a78f50e64a39a2a509fd5141e68ff216a4273</changelog>
  <changelog author="fbui@suse.com" date="1734955201">- Import commit 127e162c9cc0beb5058a718b3a9a1fec6942a927
  679c57667d tpm2-util: Also retry unsealing after policy_pcr returns PCR_CHANGED (boo#1233752 bsc#1234313)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734955202">- Fix systemd-network recommending libidn2-devel (boo#1234765)</changelog>
  <changelog author="fbui@suse.com" date="1736942400">- Import commit 34b1c72fa9aeea9c2c20e6802530e4b915c9dabf (merge of v254.23)
  eab1d9753b stdio-bridge: fix polled fds
  f028f2298e hwdb: comment out the entry for Logitech MX Keys for Mac
  e808cbdd6d test: answer 2nd mdadm --create question for compat with new version
  bf01f3d692 core/unit-serialize: fix serialization of markers
  f043ab6f34 locale-setup: do not load locale from environemnt when /etc/locale.conf is unchanged
  71efbe69b6 core: fix assert when AddDependencyUnitFiles is called with invalid parameter</changelog>
  <changelog author="fbui@suse.com" date="1736942401">- Add 1020-core-create-the-credential-directory-even-if-it-s-em.patch (bsc#1229228)
- Rename 5012-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch into
  1021-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch
  Commit dc571cccd75db7be49b2aada64baf92e3a498c39 was backported and included in
  v254.9 bumping the version requirement on gcc from 4.7 to 8. Unfortunately
  this breakage won't be fixed by upstream therefore there's no longer a need to
  keep the patch that reverts the offending commit in quarantine.</changelog>
  <changelog author="fbui@suse.com" date="1738670400">- Move systemd-userwork from the experimental sub-package to the main package (bsc#1236643)
  It is likely an oversight from when systemd-userdb was migrated from the
  experimental package to the main one.</changelog>
  <changelog author="fbui@suse.com" date="1741089600">- Import commit b25faa18ee7ef3c2d0b16416dfa331d0013dd112
  b4693652f3 journald: close runtime journals before their parent directory removed
  044d051f0c journald: reset runtime seqnum data when flushing to system journal (bsc#1236886)</changelog>
  <changelog author="fbui@suse.com" date="1742385600">- Import commit 2b599c7501253b0e6b7987fdb2676af21bc72ab3 (merge of v254.24)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/b25faa18ee7ef3c2d0b16416dfa331d0013dd112...2b599c7501253b0e6b7987fdb2676af21bc72ab3</changelog>
  <changelog author="fbui@suse.com" date="1742385601">- Import commit 83b9060b6e4c9cdffbbed0e27467cbd2f806dc0d
  09b7477895 udev: allow/denylist for reading sysfs attributes when composing a NIC name (bsc#1234015)
- Drop 5004-udev-allow-denylist-for-reading-sysfs-attributes-whe.patch
  The path has been merged into the SUSE/v254 branch.</changelog>
  <changelog author="fbui@suse.com" date="1743595200">- Import commit 2f79a45369489b656be509a1517afcae4fe3ee20
  ebdfa3e44e man/pstore.conf: pstore.conf template is not always installed in /etc
  304ed20aab man: coredump.conf template is not always installed in /etc (bsc#1237496)</changelog>
  <changelog author="fbui@suse.com" date="1746792000">- Add 1003-journal-again-create-user-journals-for-users-with-hi.patch (bsc#1242938)
  Don't write messages sent from users with UID falling into the container UID
  range to the system journal. Daemons in the container don't talk to the
  outside journald as they talk to the inner one directly, which does its
  journal splitting based on shifted uids.</changelog>
  <changelog author="fbui@suse.com" date="1747051200">- Apply coredump sysctl settings on systemd-coredump updates/removals.</changelog>
  <changelog author="fbui@suse.com" date="1747396800">- Import commit a4100e9c74b0eafae18a13e9d1d988ebc8376c6a
  806c21e22b umount: do not move busy network mounts (bsc#1236177)</changelog>
  <changelog author="fbui@suse.com" date="1748865600">- Import commit b0ae3b6e85b6a4030cf2adb88519a6ca0ffc1343
  41d2be2fb5 Revert "macro: terminate the temporary VA_ARGS_FOREACH() array with a sentinel" (SUSE specific)</changelog>
  <changelog author="fbui@suse.com" date="1748865601">- Import commit e08f49f2432509787abfb7f3fc0b2f2c459def04 (merge of v254.25)
  This merge includes the following fix:
    7fc7aa5a4d coredump: use %d in kernel core pattern (bsc#1243935 CVE-2025-4598)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/b0ae3b6e85b6a4030cf2adb88519a6ca0ffc1343...e08f49f2432509787abfb7f3fc0b2f2c459def04
- Drop 1021-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch
  The SUSE specific patch has been integrated into the SUSE/v254 git
  branch. Some of the imported commits from the stable tree rely on the macro
  now.</changelog>
  <changelog author="fbui@suse.com" date="1749038400">- Start the systemd-coredump.socket unit on systemd-coredump package
  installation.
- Restore the kernel default values of the coredump sysctl settings on
  systemd-coredump package removal.</changelog>
  <changelog author="fbui@suse.com" date="1749211200">- Import commit 278fb676146e35a7b4057f52f34a7bbaf1b82369
  aa12f501ae logs-show: get timestamp and boot ID only when necessary (bsc#1242827)
  e8b17d11bc sd-journal: drop to use Hashmap to manage journal files per boot ID
  ea80273738 tree-wide: set SD_JOURNAL_ASSUME_IMMUTABLE where appropriate
  a5b3b5344f sd-journal: introduce SD_JOURNAL_ASSUME_IMMUTABLE flag
  5fa0600b34 sd-journal: make journal_file_read_tail_timestamp() notify to the caller that some new journal entries added
  737e8193e7 sd-journal: cache last entry offset and journal file state
  057dca426f sd-journal: fix typo in function name</changelog>
</package>
<package pkgid="c95566b16ebc099cb1cd3e176542c52205b06f132cfb699a2621cdcf69e49b16" name="libsystemd0" arch="x86_64">
  <version epoch="0" ver="254.27" rel="150600.4.43.3"/>
  <changelog author="fbui@suse.com" date="1734955200">- Import commit eb5a78f50e64a39a2a509fd5141e68ff216a4273 (merge of v254.22)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/600986ba4d9c562390d99513416f49a5be5559f3...eb5a78f50e64a39a2a509fd5141e68ff216a4273</changelog>
  <changelog author="fbui@suse.com" date="1734955201">- Import commit 127e162c9cc0beb5058a718b3a9a1fec6942a927
  679c57667d tpm2-util: Also retry unsealing after policy_pcr returns PCR_CHANGED (boo#1233752 bsc#1234313)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734955202">- Fix systemd-network recommending libidn2-devel (boo#1234765)</changelog>
  <changelog author="fbui@suse.com" date="1736942400">- Import commit 34b1c72fa9aeea9c2c20e6802530e4b915c9dabf (merge of v254.23)
  eab1d9753b stdio-bridge: fix polled fds
  f028f2298e hwdb: comment out the entry for Logitech MX Keys for Mac
  e808cbdd6d test: answer 2nd mdadm --create question for compat with new version
  bf01f3d692 core/unit-serialize: fix serialization of markers
  f043ab6f34 locale-setup: do not load locale from environemnt when /etc/locale.conf is unchanged
  71efbe69b6 core: fix assert when AddDependencyUnitFiles is called with invalid parameter</changelog>
  <changelog author="fbui@suse.com" date="1736942401">- Add 1020-core-create-the-credential-directory-even-if-it-s-em.patch (bsc#1229228)
- Rename 5012-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch into
  1021-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch
  Commit dc571cccd75db7be49b2aada64baf92e3a498c39 was backported and included in
  v254.9 bumping the version requirement on gcc from 4.7 to 8. Unfortunately
  this breakage won't be fixed by upstream therefore there's no longer a need to
  keep the patch that reverts the offending commit in quarantine.</changelog>
  <changelog author="fbui@suse.com" date="1738670400">- Move systemd-userwork from the experimental sub-package to the main package (bsc#1236643)
  It is likely an oversight from when systemd-userdb was migrated from the
  experimental package to the main one.</changelog>
  <changelog author="fbui@suse.com" date="1741089600">- Import commit b25faa18ee7ef3c2d0b16416dfa331d0013dd112
  b4693652f3 journald: close runtime journals before their parent directory removed
  044d051f0c journald: reset runtime seqnum data when flushing to system journal (bsc#1236886)</changelog>
  <changelog author="fbui@suse.com" date="1742385600">- Import commit 2b599c7501253b0e6b7987fdb2676af21bc72ab3 (merge of v254.24)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/b25faa18ee7ef3c2d0b16416dfa331d0013dd112...2b599c7501253b0e6b7987fdb2676af21bc72ab3</changelog>
  <changelog author="fbui@suse.com" date="1742385601">- Import commit 83b9060b6e4c9cdffbbed0e27467cbd2f806dc0d
  09b7477895 udev: allow/denylist for reading sysfs attributes when composing a NIC name (bsc#1234015)
- Drop 5004-udev-allow-denylist-for-reading-sysfs-attributes-whe.patch
  The path has been merged into the SUSE/v254 branch.</changelog>
  <changelog author="fbui@suse.com" date="1743595200">- Import commit 2f79a45369489b656be509a1517afcae4fe3ee20
  ebdfa3e44e man/pstore.conf: pstore.conf template is not always installed in /etc
  304ed20aab man: coredump.conf template is not always installed in /etc (bsc#1237496)</changelog>
  <changelog author="fbui@suse.com" date="1746792000">- Add 1003-journal-again-create-user-journals-for-users-with-hi.patch (bsc#1242938)
  Don't write messages sent from users with UID falling into the container UID
  range to the system journal. Daemons in the container don't talk to the
  outside journald as they talk to the inner one directly, which does its
  journal splitting based on shifted uids.</changelog>
  <changelog author="fbui@suse.com" date="1747051200">- Apply coredump sysctl settings on systemd-coredump updates/removals.</changelog>
  <changelog author="fbui@suse.com" date="1747396800">- Import commit a4100e9c74b0eafae18a13e9d1d988ebc8376c6a
  806c21e22b umount: do not move busy network mounts (bsc#1236177)</changelog>
  <changelog author="fbui@suse.com" date="1748865600">- Import commit b0ae3b6e85b6a4030cf2adb88519a6ca0ffc1343
  41d2be2fb5 Revert "macro: terminate the temporary VA_ARGS_FOREACH() array with a sentinel" (SUSE specific)</changelog>
  <changelog author="fbui@suse.com" date="1748865601">- Import commit e08f49f2432509787abfb7f3fc0b2f2c459def04 (merge of v254.25)
  This merge includes the following fix:
    7fc7aa5a4d coredump: use %d in kernel core pattern (bsc#1243935 CVE-2025-4598)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/b0ae3b6e85b6a4030cf2adb88519a6ca0ffc1343...e08f49f2432509787abfb7f3fc0b2f2c459def04
- Drop 1021-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch
  The SUSE specific patch has been integrated into the SUSE/v254 git
  branch. Some of the imported commits from the stable tree rely on the macro
  now.</changelog>
  <changelog author="fbui@suse.com" date="1749038400">- Start the systemd-coredump.socket unit on systemd-coredump package
  installation.
- Restore the kernel default values of the coredump sysctl settings on
  systemd-coredump package removal.</changelog>
  <changelog author="fbui@suse.com" date="1749211200">- Import commit 278fb676146e35a7b4057f52f34a7bbaf1b82369
  aa12f501ae logs-show: get timestamp and boot ID only when necessary (bsc#1242827)
  e8b17d11bc sd-journal: drop to use Hashmap to manage journal files per boot ID
  ea80273738 tree-wide: set SD_JOURNAL_ASSUME_IMMUTABLE where appropriate
  a5b3b5344f sd-journal: introduce SD_JOURNAL_ASSUME_IMMUTABLE flag
  5fa0600b34 sd-journal: make journal_file_read_tail_timestamp() notify to the caller that some new journal entries added
  737e8193e7 sd-journal: cache last entry offset and journal file state
  057dca426f sd-journal: fix typo in function name</changelog>
  <changelog author="fbui@suse.com" date="1751544000">- Import commit 130293e510ceb4d121d11823e6ebd4b1e8332ea0 (merge of v254.27)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/278fb676146e35a7b4057f52f34a7bbaf1b82369...130293e510ceb4d121d11823e6ebd4b1e8332ea0</changelog>
  <changelog author="fbui@suse.com" date="1751544001">- systemd-repart is no more considered as experimental (jsc#PED-13213)</changelog>
  <changelog author="fbui@suse.com" date="1751889600">- triggers.systemd: skip update of hwdb, journal-catalog if executed during
  an offline update.</changelog>
</package>
<package pkgid="519d6f68d005929e672d3715a85b9ab4021febdd5ac1cdd163c6d23a54bdfd99" name="libsystemd0" arch="x86_64">
  <version epoch="0" ver="254.27" rel="150600.4.46.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1734955200">- Fix systemd-network recommending libidn2-devel (boo#1234765)</changelog>
  <changelog author="fbui@suse.com" date="1736942400">- Import commit 34b1c72fa9aeea9c2c20e6802530e4b915c9dabf (merge of v254.23)
  eab1d9753b stdio-bridge: fix polled fds
  f028f2298e hwdb: comment out the entry for Logitech MX Keys for Mac
  e808cbdd6d test: answer 2nd mdadm --create question for compat with new version
  bf01f3d692 core/unit-serialize: fix serialization of markers
  f043ab6f34 locale-setup: do not load locale from environemnt when /etc/locale.conf is unchanged
  71efbe69b6 core: fix assert when AddDependencyUnitFiles is called with invalid parameter</changelog>
  <changelog author="fbui@suse.com" date="1736942401">- Add 1020-core-create-the-credential-directory-even-if-it-s-em.patch (bsc#1229228)
- Rename 5012-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch into
  1021-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch
  Commit dc571cccd75db7be49b2aada64baf92e3a498c39 was backported and included in
  v254.9 bumping the version requirement on gcc from 4.7 to 8. Unfortunately
  this breakage won't be fixed by upstream therefore there's no longer a need to
  keep the patch that reverts the offending commit in quarantine.</changelog>
  <changelog author="fbui@suse.com" date="1738670400">- Move systemd-userwork from the experimental sub-package to the main package (bsc#1236643)
  It is likely an oversight from when systemd-userdb was migrated from the
  experimental package to the main one.</changelog>
  <changelog author="fbui@suse.com" date="1741089600">- Import commit b25faa18ee7ef3c2d0b16416dfa331d0013dd112
  b4693652f3 journald: close runtime journals before their parent directory removed
  044d051f0c journald: reset runtime seqnum data when flushing to system journal (bsc#1236886)</changelog>
  <changelog author="fbui@suse.com" date="1742385600">- Import commit 2b599c7501253b0e6b7987fdb2676af21bc72ab3 (merge of v254.24)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/b25faa18ee7ef3c2d0b16416dfa331d0013dd112...2b599c7501253b0e6b7987fdb2676af21bc72ab3</changelog>
  <changelog author="fbui@suse.com" date="1742385601">- Import commit 83b9060b6e4c9cdffbbed0e27467cbd2f806dc0d
  09b7477895 udev: allow/denylist for reading sysfs attributes when composing a NIC name (bsc#1234015)
- Drop 5004-udev-allow-denylist-for-reading-sysfs-attributes-whe.patch
  The path has been merged into the SUSE/v254 branch.</changelog>
  <changelog author="fbui@suse.com" date="1743595200">- Import commit 2f79a45369489b656be509a1517afcae4fe3ee20
  ebdfa3e44e man/pstore.conf: pstore.conf template is not always installed in /etc
  304ed20aab man: coredump.conf template is not always installed in /etc (bsc#1237496)</changelog>
  <changelog author="fbui@suse.com" date="1746792000">- Add 1003-journal-again-create-user-journals-for-users-with-hi.patch (bsc#1242938)
  Don't write messages sent from users with UID falling into the container UID
  range to the system journal. Daemons in the container don't talk to the
  outside journald as they talk to the inner one directly, which does its
  journal splitting based on shifted uids.</changelog>
  <changelog author="fbui@suse.com" date="1747051200">- Apply coredump sysctl settings on systemd-coredump updates/removals.</changelog>
  <changelog author="fbui@suse.com" date="1747396800">- Import commit a4100e9c74b0eafae18a13e9d1d988ebc8376c6a
  806c21e22b umount: do not move busy network mounts (bsc#1236177)</changelog>
  <changelog author="fbui@suse.com" date="1748865600">- Import commit b0ae3b6e85b6a4030cf2adb88519a6ca0ffc1343
  41d2be2fb5 Revert "macro: terminate the temporary VA_ARGS_FOREACH() array with a sentinel" (SUSE specific)</changelog>
  <changelog author="fbui@suse.com" date="1748865601">- Import commit e08f49f2432509787abfb7f3fc0b2f2c459def04 (merge of v254.25)
  This merge includes the following fix:
    7fc7aa5a4d coredump: use %d in kernel core pattern (bsc#1243935 CVE-2025-4598)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/b0ae3b6e85b6a4030cf2adb88519a6ca0ffc1343...e08f49f2432509787abfb7f3fc0b2f2c459def04
- Drop 1021-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch
  The SUSE specific patch has been integrated into the SUSE/v254 git
  branch. Some of the imported commits from the stable tree rely on the macro
  now.</changelog>
  <changelog author="fbui@suse.com" date="1749038400">- Start the systemd-coredump.socket unit on systemd-coredump package
  installation.
- Restore the kernel default values of the coredump sysctl settings on
  systemd-coredump package removal.</changelog>
  <changelog author="fbui@suse.com" date="1749211200">- Import commit 278fb676146e35a7b4057f52f34a7bbaf1b82369
  aa12f501ae logs-show: get timestamp and boot ID only when necessary (bsc#1242827)
  e8b17d11bc sd-journal: drop to use Hashmap to manage journal files per boot ID
  ea80273738 tree-wide: set SD_JOURNAL_ASSUME_IMMUTABLE where appropriate
  a5b3b5344f sd-journal: introduce SD_JOURNAL_ASSUME_IMMUTABLE flag
  5fa0600b34 sd-journal: make journal_file_read_tail_timestamp() notify to the caller that some new journal entries added
  737e8193e7 sd-journal: cache last entry offset and journal file state
  057dca426f sd-journal: fix typo in function name</changelog>
  <changelog author="fbui@suse.com" date="1751544000">- Import commit 130293e510ceb4d121d11823e6ebd4b1e8332ea0 (merge of v254.27)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/278fb676146e35a7b4057f52f34a7bbaf1b82369...130293e510ceb4d121d11823e6ebd4b1e8332ea0</changelog>
  <changelog author="fbui@suse.com" date="1751544001">- systemd-repart is no more considered as experimental (jsc#PED-13213)</changelog>
  <changelog author="fbui@suse.com" date="1751889600">- triggers.systemd: skip update of hwdb, journal-catalog if executed during
  an offline update.</changelog>
  <changelog author="fbui@suse.com" date="1758196800">- Split systemd-network into two new sub-packages: systemd-networkd and
  systemd-resolved (bsc#1224386 jsc#PED-12669)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1758196801">- systemd.spec: use %sysusers_generate_pre so that some systemd users are
  already available in %pre. This is important because D-Bus automatically
  reloads its configuration whenever new configuration files are installed,
  i.e. between %pre and %post. (bsc#1248501)
  No needs for systemd and udev packages as they are always installed during
  the initial installation.</changelog>
</package>
<package pkgid="b3e75b40b7e77a99aa49e84fd979ce05d9e17cee0baa282910f63226383e6376" name="libsystemd0" arch="x86_64">
  <version epoch="0" ver="254.27" rel="150600.4.55.1"/>
  <changelog author="fbui@suse.com" date="1742385600">- Import commit 2b599c7501253b0e6b7987fdb2676af21bc72ab3 (merge of v254.24)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/b25faa18ee7ef3c2d0b16416dfa331d0013dd112...2b599c7501253b0e6b7987fdb2676af21bc72ab3</changelog>
  <changelog author="fbui@suse.com" date="1742385601">- Import commit 83b9060b6e4c9cdffbbed0e27467cbd2f806dc0d
  09b7477895 udev: allow/denylist for reading sysfs attributes when composing a NIC name (bsc#1234015)
- Drop 5004-udev-allow-denylist-for-reading-sysfs-attributes-whe.patch
  The path has been merged into the SUSE/v254 branch.</changelog>
  <changelog author="fbui@suse.com" date="1743595200">- Import commit 2f79a45369489b656be509a1517afcae4fe3ee20
  ebdfa3e44e man/pstore.conf: pstore.conf template is not always installed in /etc
  304ed20aab man: coredump.conf template is not always installed in /etc (bsc#1237496)</changelog>
  <changelog author="fbui@suse.com" date="1746792000">- Add 1003-journal-again-create-user-journals-for-users-with-hi.patch (bsc#1242938)
  Don't write messages sent from users with UID falling into the container UID
  range to the system journal. Daemons in the container don't talk to the
  outside journald as they talk to the inner one directly, which does its
  journal splitting based on shifted uids.</changelog>
  <changelog author="fbui@suse.com" date="1747051200">- Apply coredump sysctl settings on systemd-coredump updates/removals.</changelog>
  <changelog author="fbui@suse.com" date="1747396800">- Import commit a4100e9c74b0eafae18a13e9d1d988ebc8376c6a
  806c21e22b umount: do not move busy network mounts (bsc#1236177)</changelog>
  <changelog author="fbui@suse.com" date="1748865600">- Import commit b0ae3b6e85b6a4030cf2adb88519a6ca0ffc1343
  41d2be2fb5 Revert "macro: terminate the temporary VA_ARGS_FOREACH() array with a sentinel" (SUSE specific)</changelog>
  <changelog author="fbui@suse.com" date="1748865601">- Import commit e08f49f2432509787abfb7f3fc0b2f2c459def04 (merge of v254.25)
  This merge includes the following fix:
    7fc7aa5a4d coredump: use %d in kernel core pattern (bsc#1243935 CVE-2025-4598)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/b0ae3b6e85b6a4030cf2adb88519a6ca0ffc1343...e08f49f2432509787abfb7f3fc0b2f2c459def04
- Drop 1021-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch
  The SUSE specific patch has been integrated into the SUSE/v254 git
  branch. Some of the imported commits from the stable tree rely on the macro
  now.</changelog>
  <changelog author="fbui@suse.com" date="1749038400">- Start the systemd-coredump.socket unit on systemd-coredump package
  installation.
- Restore the kernel default values of the coredump sysctl settings on
  systemd-coredump package removal.</changelog>
  <changelog author="fbui@suse.com" date="1749211200">- Import commit 278fb676146e35a7b4057f52f34a7bbaf1b82369
  aa12f501ae logs-show: get timestamp and boot ID only when necessary (bsc#1242827)
  e8b17d11bc sd-journal: drop to use Hashmap to manage journal files per boot ID
  ea80273738 tree-wide: set SD_JOURNAL_ASSUME_IMMUTABLE where appropriate
  a5b3b5344f sd-journal: introduce SD_JOURNAL_ASSUME_IMMUTABLE flag
  5fa0600b34 sd-journal: make journal_file_read_tail_timestamp() notify to the caller that some new journal entries added
  737e8193e7 sd-journal: cache last entry offset and journal file state
  057dca426f sd-journal: fix typo in function name</changelog>
  <changelog author="fbui@suse.com" date="1751544000">- Import commit 130293e510ceb4d121d11823e6ebd4b1e8332ea0 (merge of v254.27)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/278fb676146e35a7b4057f52f34a7bbaf1b82369...130293e510ceb4d121d11823e6ebd4b1e8332ea0</changelog>
  <changelog author="fbui@suse.com" date="1751544001">- systemd-repart is no more considered as experimental (jsc#PED-13213)</changelog>
  <changelog author="fbui@suse.com" date="1751889600">- triggers.systemd: skip update of hwdb, journal-catalog if executed during
  an offline update.</changelog>
  <changelog author="fbui@suse.com" date="1758196800">- Split systemd-network into two new sub-packages: systemd-networkd and
  systemd-resolved (bsc#1224386 jsc#PED-12669)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1758196801">- systemd.spec: use %sysusers_generate_pre so that some systemd users are
  already available in %pre. This is important because D-Bus automatically
  reloads its configuration whenever new configuration files are installed,
  i.e. between %pre and %post. (bsc#1248501)
  No needs for systemd and udev packages as they are always installed during
  the initial installation.</changelog>
  <changelog author="fbui@suse.com" date="1761652800">- Import commit 00ba3646e6cb3ce40bb3de3e92f93ebec0adce6d
  e4dd315b6c units: don't force the loading of the loop and dm_mod modules in systemd-repart.service (bsc#1248356)
  b58e72215a units: add dep on systemd-logind.service by user@.service
  97ceca445c detect-virt: add bare-metal support for GCE (bsc#1244449)</changelog>
  <changelog author="fbui@suse.com" date="1765281600">- Reintroduce systemd-network as a transitional dummy package containing no
  files (bsc#1254202)
  The contents of this package were split into two independent packages:
  systemd-networkd and systemd-resolved. However, the initial replacement caused
  both network services to be disabled. Consequently, the original package has
  been restored as an empty transitional package to prevent the disabling of the
  services. It can be safely removed once the update is complete.</changelog>
  <changelog author="fbui@suse.com" date="1765800000">- Import commit 5caaa71f4a7b00e6a6ceb396d08486af73687d45
  9ecd162284 timer: rebase last_trigger timestamp if needed
  cd4a9103ef timer: rebase the next elapse timestamp only if timer didn't already run
  c3f4407e97 timer: don't run service immediately after restart of a timer (bsc#1254563)
  05bcfe3295 test: check the next elapse timer timestamp after deserialization
  fe8f656975 test: restarting elapsed timer shouldn't trigger the corresponding service</changelog>
  <changelog author="fbui@suse.com" date="1766145600">- Import commit 75eab961ea843dc161707d4af0789b018d499676
  - 8bbac1d508 detect-virt: bare-metal GCE only for x86 and i386 (bsc#1254293)</changelog>
  <changelog author="fbui@suse.com" date="1768305600">- Name libsystemd-{shared,core} based on the major version of systemd and the
  package release number (bsc#1228081 bsc#1256427)
  This way, both the old and new versions of the shared libraries will be
  present during the update. This should prevent issues during package updates
  when incompatible changes are introduced in the new versions of the shared
  libraries.</changelog>
</package>
<package pkgid="b1c83d7e4b9da5dc28a56db29187cb955fc5ba31ca162607091062ba6c18e803" name="libsystemd0" arch="x86_64">
  <version epoch="0" ver="254.27" rel="150600.4.62.1"/>
  <changelog author="fbui@suse.com" date="1743595200">- Import commit 2f79a45369489b656be509a1517afcae4fe3ee20
  ebdfa3e44e man/pstore.conf: pstore.conf template is not always installed in /etc
  304ed20aab man: coredump.conf template is not always installed in /etc (bsc#1237496)</changelog>
  <changelog author="fbui@suse.com" date="1746792000">- Add 1003-journal-again-create-user-journals-for-users-with-hi.patch (bsc#1242938)
  Don't write messages sent from users with UID falling into the container UID
  range to the system journal. Daemons in the container don't talk to the
  outside journald as they talk to the inner one directly, which does its
  journal splitting based on shifted uids.</changelog>
  <changelog author="fbui@suse.com" date="1747051200">- Apply coredump sysctl settings on systemd-coredump updates/removals.</changelog>
  <changelog author="fbui@suse.com" date="1747396800">- Import commit a4100e9c74b0eafae18a13e9d1d988ebc8376c6a
  806c21e22b umount: do not move busy network mounts (bsc#1236177)</changelog>
  <changelog author="fbui@suse.com" date="1748865600">- Import commit b0ae3b6e85b6a4030cf2adb88519a6ca0ffc1343
  41d2be2fb5 Revert "macro: terminate the temporary VA_ARGS_FOREACH() array with a sentinel" (SUSE specific)</changelog>
  <changelog author="fbui@suse.com" date="1748865601">- Import commit e08f49f2432509787abfb7f3fc0b2f2c459def04 (merge of v254.25)
  This merge includes the following fix:
    7fc7aa5a4d coredump: use %d in kernel core pattern (bsc#1243935 CVE-2025-4598)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/b0ae3b6e85b6a4030cf2adb88519a6ca0ffc1343...e08f49f2432509787abfb7f3fc0b2f2c459def04
- Drop 1021-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch
  The SUSE specific patch has been integrated into the SUSE/v254 git
  branch. Some of the imported commits from the stable tree rely on the macro
  now.</changelog>
  <changelog author="fbui@suse.com" date="1749038400">- Start the systemd-coredump.socket unit on systemd-coredump package
  installation.
- Restore the kernel default values of the coredump sysctl settings on
  systemd-coredump package removal.</changelog>
  <changelog author="fbui@suse.com" date="1749211200">- Import commit 278fb676146e35a7b4057f52f34a7bbaf1b82369
  aa12f501ae logs-show: get timestamp and boot ID only when necessary (bsc#1242827)
  e8b17d11bc sd-journal: drop to use Hashmap to manage journal files per boot ID
  ea80273738 tree-wide: set SD_JOURNAL_ASSUME_IMMUTABLE where appropriate
  a5b3b5344f sd-journal: introduce SD_JOURNAL_ASSUME_IMMUTABLE flag
  5fa0600b34 sd-journal: make journal_file_read_tail_timestamp() notify to the caller that some new journal entries added
  737e8193e7 sd-journal: cache last entry offset and journal file state
  057dca426f sd-journal: fix typo in function name</changelog>
  <changelog author="fbui@suse.com" date="1751544000">- Import commit 130293e510ceb4d121d11823e6ebd4b1e8332ea0 (merge of v254.27)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/278fb676146e35a7b4057f52f34a7bbaf1b82369...130293e510ceb4d121d11823e6ebd4b1e8332ea0</changelog>
  <changelog author="fbui@suse.com" date="1751544001">- systemd-repart is no more considered as experimental (jsc#PED-13213)</changelog>
  <changelog author="fbui@suse.com" date="1751889600">- triggers.systemd: skip update of hwdb, journal-catalog if executed during
  an offline update.</changelog>
  <changelog author="fbui@suse.com" date="1758196800">- Split systemd-network into two new sub-packages: systemd-networkd and
  systemd-resolved (bsc#1224386 jsc#PED-12669)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1758196801">- systemd.spec: use %sysusers_generate_pre so that some systemd users are
  already available in %pre. This is important because D-Bus automatically
  reloads its configuration whenever new configuration files are installed,
  i.e. between %pre and %post. (bsc#1248501)
  No needs for systemd and udev packages as they are always installed during
  the initial installation.</changelog>
  <changelog author="fbui@suse.com" date="1761652800">- Import commit 00ba3646e6cb3ce40bb3de3e92f93ebec0adce6d
  e4dd315b6c units: don't force the loading of the loop and dm_mod modules in systemd-repart.service (bsc#1248356)
  b58e72215a units: add dep on systemd-logind.service by user@.service
  97ceca445c detect-virt: add bare-metal support for GCE (bsc#1244449)</changelog>
  <changelog author="fbui@suse.com" date="1765281600">- Reintroduce systemd-network as a transitional dummy package containing no
  files (bsc#1254202)
  The contents of this package were split into two independent packages:
  systemd-networkd and systemd-resolved. However, the initial replacement caused
  both network services to be disabled. Consequently, the original package has
  been restored as an empty transitional package to prevent the disabling of the
  services. It can be safely removed once the update is complete.</changelog>
  <changelog author="fbui@suse.com" date="1765800000">- Import commit 5caaa71f4a7b00e6a6ceb396d08486af73687d45
  9ecd162284 timer: rebase last_trigger timestamp if needed
  cd4a9103ef timer: rebase the next elapse timestamp only if timer didn't already run
  c3f4407e97 timer: don't run service immediately after restart of a timer (bsc#1254563)
  05bcfe3295 test: check the next elapse timer timestamp after deserialization
  fe8f656975 test: restarting elapsed timer shouldn't trigger the corresponding service</changelog>
  <changelog author="fbui@suse.com" date="1766145600">- Import commit 75eab961ea843dc161707d4af0789b018d499676
  - 8bbac1d508 detect-virt: bare-metal GCE only for x86 and i386 (bsc#1254293)</changelog>
  <changelog author="fbui@suse.com" date="1768305600">- Name libsystemd-{shared,core} based on the major version of systemd and the
  package release number (bsc#1228081 bsc#1256427)
  This way, both the old and new versions of the shared libraries will be
  present during the update. This should prevent issues during package updates
  when incompatible changes are introduced in the new versions of the shared
  libraries.</changelog>
  <changelog author="fbui@suse.com" date="1772193600">- Import commit 626ffc7844795870235d15c6daab695f2d53a11e
  aef6e11921 core/cgroup: avoid one unnecessary strjoina()
  cc7426f38a sd-json: fix off-by-one issue when updating parent for array elements
  26a748f727 core: validate input cgroup path more prudently (CVE-2026-29111 bsc#1259418)
  99d8308fde core/dbus-manager: propagate meaningful dbus errors from EnqueueMarkedJobs</changelog>
  <changelog author="fbui@suse.com" date="1773921600">- Import commit c89ea566d98c8e3fb29a5b8edd4576b135b4bc92
  a943e3ce2f machined: reject invalid class types when registering machines (bsc#1259650 CVE-2026-4105)
  71593f77db udev: fix review mixup
  73a89810b4 udev-builtin-net-id: print cescaped bad attributes
  0f360bfdc0 udev-builtin-net_id: do not assume the current interface name is ethX
  40905232e2 udev: ensure tag parsing stays within bounds
  7bce9026e3 udev: ensure there is space for trailing NUL before calling sprintf
  d018ac1ea3 udev: check for invalid chars in various fields received from the kernel (bsc#1259697)</changelog>
</package>
<package pkgid="aa5e5a70c91fe0a28b676c1b9e75b975bc0d8672e55d27b8a4dc5be2ded59dee" name="libsystemd0-32bit" arch="x86_64">
  <version epoch="0" ver="254.24" rel="150600.4.33.1"/>
  <changelog author="fbui@suse.com" date="1727870400">- Clean up some remnants from when homed was in the experimental sub-package (bsc#1231048)</changelog>
  <changelog author="fbui@suse.com" date="1729512000">- Import commit 0cbb02c0273374b14188f30e89874c9e8ae425c9 (merge of v254.19)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/44943af96be1422c2d7bdf271e4a77b42f4b41ec...0cbb02c0273374b14188f30e89874c9e8ae425c9</changelog>
  <changelog author="fbui@suse.com" date="1732708800">- Import commit f7f6a3454e3321f92cbdf8e30aeb8b17bc1ff8e8 (merge of v254.20)
  This merge includes the following fix:
    8b6ae951d3 udev: skipping empty udev rules file while collecting the stats (bsc#1232844)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/0cbb02c0273374b14188f30e89874c9e8ae425c9...f7f6a3454e3321f92cbdf8e30aeb8b17bc1ff8e8</changelog>
  <changelog author="fbui@suse.com" date="1733227200">- Import commit 600986ba4d9c562390d99513416f49a5be5559f3 (merge of v254.21)
  This merge includes the following fix:
    a467a411f pid1: make clear that $WATCHDOG_USEC is set for the shutdown binary, noone else (bsc#1232227)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/f7f6a3454e3321f92cbdf8e30aeb8b17bc1ff8e8...600986ba4d9c562390d99513416f49a5be5559f3</changelog>
  <changelog author="fbui@suse.com" date="1733227201">- Add 0003-Drop-support-for-efivar-SystemdOptions.patch (bsc#1220338)
  Upstream deprecated it and plan to drop it in the future.
  Let's get ahead and drop it now as this feature is unlikely to be used on SUSE
  distros and it might be used to gain access to encrypted SLEM systems with
  unattended disk unlock and with secure boot disabled.</changelog>
  <changelog author="fbui@suse.com" date="1734350400">- Import commit eddf52fb14391c30ee2f45fd0c3cab1be116c951
  807fe76411 udev: add new builtin net_driver
  3a48b5f21d udev-builtin-net_id: split-out pci_get_onboard_index() from dev_pci_onboard()
  5359c1d6d4 udev-builtin-net_id: split-out get_pci_slot_specifiers()
  1cd915ac7b udev-builtin-net_id: introduce get_port_specifier() helper function
  72a4218155 udev-builtin-net_id: split out get_dev_port() and make its failure critical
  f6c721b4da udev-builtin-net_id: split-out pci_get_hotplug_slot() and pci_get_hotplug_slot_from_address()
  9e16c3cf27 udev-builtin-net_id: return earlier when hotplug slot is not found
  4851355767 udev-builtin-net_id: skip non-directory entry earlier
  a571e5f1dd udev-builtin-net_id: make names_xen() self-contained
  9acc241d5f udev-builtin-net_id: use sd_device_get_sysnum() to get index of netdevsim
  ca8a431b55 udev-builtin-net_id: make names_netdevsim() self-contained
  a66251d666 udev-builtin-net_id: make names_platform() self-contained
  1e834d7157 udev-builtin-net_id: make names_vio() self-contained
  8b236dcd7a udev-builtin-net_id: make names_ccw() self-contained
  7d70e2fa7d udev-builtin-net_id: make dev_devicetree_onboard() self-contained
  46158a6e91 udev-builtin-net_id: make names_mac() self-contained
  7789e7f886 udev-builtin-net_id: split out get_ifname_prefix()
  9b0062a667 udev-builtin-net_id: swap arguments for streq() and friends
  181a775b40 udev-builtin-net_id: drop unused value from NetNameType
  Refactoring to prepare for backporting the filtering mechanism of specific
  sysfs attributes during predictable NIC name generation.</changelog>
  <changelog author="fbui@suse.com" date="1734350401">- Add 5004-udev-allow-denylist-for-reading-sysfs-attributes-whe.patch (bsc#1234015)
  Temporarily add this patch. It will be integrated in the git repository if
  no issues are reported in the coming months.</changelog>
  <changelog author="fbui@suse.com" date="1734955200">- Import commit eb5a78f50e64a39a2a509fd5141e68ff216a4273 (merge of v254.22)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/600986ba4d9c562390d99513416f49a5be5559f3...eb5a78f50e64a39a2a509fd5141e68ff216a4273</changelog>
  <changelog author="fbui@suse.com" date="1734955201">- Import commit 127e162c9cc0beb5058a718b3a9a1fec6942a927
  679c57667d tpm2-util: Also retry unsealing after policy_pcr returns PCR_CHANGED (boo#1233752 bsc#1234313)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734955202">- Fix systemd-network recommending libidn2-devel (boo#1234765)</changelog>
  <changelog author="fbui@suse.com" date="1736942400">- Import commit 34b1c72fa9aeea9c2c20e6802530e4b915c9dabf (merge of v254.23)
  eab1d9753b stdio-bridge: fix polled fds
  f028f2298e hwdb: comment out the entry for Logitech MX Keys for Mac
  e808cbdd6d test: answer 2nd mdadm --create question for compat with new version
  bf01f3d692 core/unit-serialize: fix serialization of markers
  f043ab6f34 locale-setup: do not load locale from environemnt when /etc/locale.conf is unchanged
  71efbe69b6 core: fix assert when AddDependencyUnitFiles is called with invalid parameter</changelog>
  <changelog author="fbui@suse.com" date="1736942401">- Add 1020-core-create-the-credential-directory-even-if-it-s-em.patch (bsc#1229228)
- Rename 5012-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch into
  1021-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch
  Commit dc571cccd75db7be49b2aada64baf92e3a498c39 was backported and included in
  v254.9 bumping the version requirement on gcc from 4.7 to 8. Unfortunately
  this breakage won't be fixed by upstream therefore there's no longer a need to
  keep the patch that reverts the offending commit in quarantine.</changelog>
  <changelog author="fbui@suse.com" date="1738670400">- Move systemd-userwork from the experimental sub-package to the main package (bsc#1236643)
  It is likely an oversight from when systemd-userdb was migrated from the
  experimental package to the main one.</changelog>
  <changelog author="fbui@suse.com" date="1741089600">- Import commit b25faa18ee7ef3c2d0b16416dfa331d0013dd112
  b4693652f3 journald: close runtime journals before their parent directory removed
  044d051f0c journald: reset runtime seqnum data when flushing to system journal (bsc#1236886)</changelog>
  <changelog author="fbui@suse.com" date="1742385600">- Import commit 2b599c7501253b0e6b7987fdb2676af21bc72ab3 (merge of v254.24)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/b25faa18ee7ef3c2d0b16416dfa331d0013dd112...2b599c7501253b0e6b7987fdb2676af21bc72ab3</changelog>
  <changelog author="fbui@suse.com" date="1742385601">- Import commit 83b9060b6e4c9cdffbbed0e27467cbd2f806dc0d
  09b7477895 udev: allow/denylist for reading sysfs attributes when composing a NIC name (bsc#1234015)
- Drop 5004-udev-allow-denylist-for-reading-sysfs-attributes-whe.patch
  The path has been merged into the SUSE/v254 branch.</changelog>
  <changelog author="fbui@suse.com" date="1743595200">- Import commit 2f79a45369489b656be509a1517afcae4fe3ee20
  ebdfa3e44e man/pstore.conf: pstore.conf template is not always installed in /etc
  304ed20aab man: coredump.conf template is not always installed in /etc (bsc#1237496)</changelog>
  <changelog author="fbui@suse.com" date="1746792000">- Add 1003-journal-again-create-user-journals-for-users-with-hi.patch (bsc#1242938)
  Don't write messages sent from users with UID falling into the container UID
  range to the system journal. Daemons in the container don't talk to the
  outside journald as they talk to the inner one directly, which does its
  journal splitting based on shifted uids.</changelog>
  <changelog author="fbui@suse.com" date="1747051200">- Apply coredump sysctl settings on systemd-coredump updates/removals.</changelog>
  <changelog author="fbui@suse.com" date="1747396800">- Import commit a4100e9c74b0eafae18a13e9d1d988ebc8376c6a
  806c21e22b umount: do not move busy network mounts (bsc#1236177)</changelog>
</package>
<package pkgid="000158d4f79ea1e23f6d21635fc587ba362d35acc13c9e28b944a3277d5c3ae9" name="libsystemd0-32bit" arch="x86_64">
  <version epoch="0" ver="254.25" rel="150600.4.40.1"/>
  <changelog author="fbui@suse.com" date="1733227200">- Add 0003-Drop-support-for-efivar-SystemdOptions.patch (bsc#1220338)
  Upstream deprecated it and plan to drop it in the future.
  Let's get ahead and drop it now as this feature is unlikely to be used on SUSE
  distros and it might be used to gain access to encrypted SLEM systems with
  unattended disk unlock and with secure boot disabled.</changelog>
  <changelog author="fbui@suse.com" date="1734350400">- Import commit eddf52fb14391c30ee2f45fd0c3cab1be116c951
  807fe76411 udev: add new builtin net_driver
  3a48b5f21d udev-builtin-net_id: split-out pci_get_onboard_index() from dev_pci_onboard()
  5359c1d6d4 udev-builtin-net_id: split-out get_pci_slot_specifiers()
  1cd915ac7b udev-builtin-net_id: introduce get_port_specifier() helper function
  72a4218155 udev-builtin-net_id: split out get_dev_port() and make its failure critical
  f6c721b4da udev-builtin-net_id: split-out pci_get_hotplug_slot() and pci_get_hotplug_slot_from_address()
  9e16c3cf27 udev-builtin-net_id: return earlier when hotplug slot is not found
  4851355767 udev-builtin-net_id: skip non-directory entry earlier
  a571e5f1dd udev-builtin-net_id: make names_xen() self-contained
  9acc241d5f udev-builtin-net_id: use sd_device_get_sysnum() to get index of netdevsim
  ca8a431b55 udev-builtin-net_id: make names_netdevsim() self-contained
  a66251d666 udev-builtin-net_id: make names_platform() self-contained
  1e834d7157 udev-builtin-net_id: make names_vio() self-contained
  8b236dcd7a udev-builtin-net_id: make names_ccw() self-contained
  7d70e2fa7d udev-builtin-net_id: make dev_devicetree_onboard() self-contained
  46158a6e91 udev-builtin-net_id: make names_mac() self-contained
  7789e7f886 udev-builtin-net_id: split out get_ifname_prefix()
  9b0062a667 udev-builtin-net_id: swap arguments for streq() and friends
  181a775b40 udev-builtin-net_id: drop unused value from NetNameType
  Refactoring to prepare for backporting the filtering mechanism of specific
  sysfs attributes during predictable NIC name generation.</changelog>
  <changelog author="fbui@suse.com" date="1734350401">- Add 5004-udev-allow-denylist-for-reading-sysfs-attributes-whe.patch (bsc#1234015)
  Temporarily add this patch. It will be integrated in the git repository if
  no issues are reported in the coming months.</changelog>
  <changelog author="fbui@suse.com" date="1734955200">- Import commit eb5a78f50e64a39a2a509fd5141e68ff216a4273 (merge of v254.22)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/600986ba4d9c562390d99513416f49a5be5559f3...eb5a78f50e64a39a2a509fd5141e68ff216a4273</changelog>
  <changelog author="fbui@suse.com" date="1734955201">- Import commit 127e162c9cc0beb5058a718b3a9a1fec6942a927
  679c57667d tpm2-util: Also retry unsealing after policy_pcr returns PCR_CHANGED (boo#1233752 bsc#1234313)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734955202">- Fix systemd-network recommending libidn2-devel (boo#1234765)</changelog>
  <changelog author="fbui@suse.com" date="1736942400">- Import commit 34b1c72fa9aeea9c2c20e6802530e4b915c9dabf (merge of v254.23)
  eab1d9753b stdio-bridge: fix polled fds
  f028f2298e hwdb: comment out the entry for Logitech MX Keys for Mac
  e808cbdd6d test: answer 2nd mdadm --create question for compat with new version
  bf01f3d692 core/unit-serialize: fix serialization of markers
  f043ab6f34 locale-setup: do not load locale from environemnt when /etc/locale.conf is unchanged
  71efbe69b6 core: fix assert when AddDependencyUnitFiles is called with invalid parameter</changelog>
  <changelog author="fbui@suse.com" date="1736942401">- Add 1020-core-create-the-credential-directory-even-if-it-s-em.patch (bsc#1229228)
- Rename 5012-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch into
  1021-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch
  Commit dc571cccd75db7be49b2aada64baf92e3a498c39 was backported and included in
  v254.9 bumping the version requirement on gcc from 4.7 to 8. Unfortunately
  this breakage won't be fixed by upstream therefore there's no longer a need to
  keep the patch that reverts the offending commit in quarantine.</changelog>
  <changelog author="fbui@suse.com" date="1738670400">- Move systemd-userwork from the experimental sub-package to the main package (bsc#1236643)
  It is likely an oversight from when systemd-userdb was migrated from the
  experimental package to the main one.</changelog>
  <changelog author="fbui@suse.com" date="1741089600">- Import commit b25faa18ee7ef3c2d0b16416dfa331d0013dd112
  b4693652f3 journald: close runtime journals before their parent directory removed
  044d051f0c journald: reset runtime seqnum data when flushing to system journal (bsc#1236886)</changelog>
  <changelog author="fbui@suse.com" date="1742385600">- Import commit 2b599c7501253b0e6b7987fdb2676af21bc72ab3 (merge of v254.24)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/b25faa18ee7ef3c2d0b16416dfa331d0013dd112...2b599c7501253b0e6b7987fdb2676af21bc72ab3</changelog>
  <changelog author="fbui@suse.com" date="1742385601">- Import commit 83b9060b6e4c9cdffbbed0e27467cbd2f806dc0d
  09b7477895 udev: allow/denylist for reading sysfs attributes when composing a NIC name (bsc#1234015)
- Drop 5004-udev-allow-denylist-for-reading-sysfs-attributes-whe.patch
  The path has been merged into the SUSE/v254 branch.</changelog>
  <changelog author="fbui@suse.com" date="1743595200">- Import commit 2f79a45369489b656be509a1517afcae4fe3ee20
  ebdfa3e44e man/pstore.conf: pstore.conf template is not always installed in /etc
  304ed20aab man: coredump.conf template is not always installed in /etc (bsc#1237496)</changelog>
  <changelog author="fbui@suse.com" date="1746792000">- Add 1003-journal-again-create-user-journals-for-users-with-hi.patch (bsc#1242938)
  Don't write messages sent from users with UID falling into the container UID
  range to the system journal. Daemons in the container don't talk to the
  outside journald as they talk to the inner one directly, which does its
  journal splitting based on shifted uids.</changelog>
  <changelog author="fbui@suse.com" date="1747051200">- Apply coredump sysctl settings on systemd-coredump updates/removals.</changelog>
  <changelog author="fbui@suse.com" date="1747396800">- Import commit a4100e9c74b0eafae18a13e9d1d988ebc8376c6a
  806c21e22b umount: do not move busy network mounts (bsc#1236177)</changelog>
  <changelog author="fbui@suse.com" date="1748865600">- Import commit b0ae3b6e85b6a4030cf2adb88519a6ca0ffc1343
  41d2be2fb5 Revert "macro: terminate the temporary VA_ARGS_FOREACH() array with a sentinel" (SUSE specific)</changelog>
  <changelog author="fbui@suse.com" date="1748865601">- Import commit e08f49f2432509787abfb7f3fc0b2f2c459def04 (merge of v254.25)
  This merge includes the following fix:
    7fc7aa5a4d coredump: use %d in kernel core pattern (bsc#1243935 CVE-2025-4598)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/b0ae3b6e85b6a4030cf2adb88519a6ca0ffc1343...e08f49f2432509787abfb7f3fc0b2f2c459def04
- Drop 1021-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch
  The SUSE specific patch has been integrated into the SUSE/v254 git
  branch. Some of the imported commits from the stable tree rely on the macro
  now.</changelog>
  <changelog author="fbui@suse.com" date="1749038400">- Start the systemd-coredump.socket unit on systemd-coredump package
  installation.
- Restore the kernel default values of the coredump sysctl settings on
  systemd-coredump package removal.</changelog>
  <changelog author="fbui@suse.com" date="1749211200">- Import commit 278fb676146e35a7b4057f52f34a7bbaf1b82369
  aa12f501ae logs-show: get timestamp and boot ID only when necessary (bsc#1242827)
  e8b17d11bc sd-journal: drop to use Hashmap to manage journal files per boot ID
  ea80273738 tree-wide: set SD_JOURNAL_ASSUME_IMMUTABLE where appropriate
  a5b3b5344f sd-journal: introduce SD_JOURNAL_ASSUME_IMMUTABLE flag
  5fa0600b34 sd-journal: make journal_file_read_tail_timestamp() notify to the caller that some new journal entries added
  737e8193e7 sd-journal: cache last entry offset and journal file state
  057dca426f sd-journal: fix typo in function name</changelog>
</package>
<package pkgid="649cda73ba2fd703ec3584cd636eba66c5d94da3e5f21274c46b3016f4bfef96" name="libsystemd0-32bit" arch="x86_64">
  <version epoch="0" ver="254.27" rel="150600.4.43.3"/>
  <changelog author="fbui@suse.com" date="1734955200">- Import commit eb5a78f50e64a39a2a509fd5141e68ff216a4273 (merge of v254.22)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/600986ba4d9c562390d99513416f49a5be5559f3...eb5a78f50e64a39a2a509fd5141e68ff216a4273</changelog>
  <changelog author="fbui@suse.com" date="1734955201">- Import commit 127e162c9cc0beb5058a718b3a9a1fec6942a927
  679c57667d tpm2-util: Also retry unsealing after policy_pcr returns PCR_CHANGED (boo#1233752 bsc#1234313)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734955202">- Fix systemd-network recommending libidn2-devel (boo#1234765)</changelog>
  <changelog author="fbui@suse.com" date="1736942400">- Import commit 34b1c72fa9aeea9c2c20e6802530e4b915c9dabf (merge of v254.23)
  eab1d9753b stdio-bridge: fix polled fds
  f028f2298e hwdb: comment out the entry for Logitech MX Keys for Mac
  e808cbdd6d test: answer 2nd mdadm --create question for compat with new version
  bf01f3d692 core/unit-serialize: fix serialization of markers
  f043ab6f34 locale-setup: do not load locale from environemnt when /etc/locale.conf is unchanged
  71efbe69b6 core: fix assert when AddDependencyUnitFiles is called with invalid parameter</changelog>
  <changelog author="fbui@suse.com" date="1736942401">- Add 1020-core-create-the-credential-directory-even-if-it-s-em.patch (bsc#1229228)
- Rename 5012-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch into
  1021-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch
  Commit dc571cccd75db7be49b2aada64baf92e3a498c39 was backported and included in
  v254.9 bumping the version requirement on gcc from 4.7 to 8. Unfortunately
  this breakage won't be fixed by upstream therefore there's no longer a need to
  keep the patch that reverts the offending commit in quarantine.</changelog>
  <changelog author="fbui@suse.com" date="1738670400">- Move systemd-userwork from the experimental sub-package to the main package (bsc#1236643)
  It is likely an oversight from when systemd-userdb was migrated from the
  experimental package to the main one.</changelog>
  <changelog author="fbui@suse.com" date="1741089600">- Import commit b25faa18ee7ef3c2d0b16416dfa331d0013dd112
  b4693652f3 journald: close runtime journals before their parent directory removed
  044d051f0c journald: reset runtime seqnum data when flushing to system journal (bsc#1236886)</changelog>
  <changelog author="fbui@suse.com" date="1742385600">- Import commit 2b599c7501253b0e6b7987fdb2676af21bc72ab3 (merge of v254.24)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/b25faa18ee7ef3c2d0b16416dfa331d0013dd112...2b599c7501253b0e6b7987fdb2676af21bc72ab3</changelog>
  <changelog author="fbui@suse.com" date="1742385601">- Import commit 83b9060b6e4c9cdffbbed0e27467cbd2f806dc0d
  09b7477895 udev: allow/denylist for reading sysfs attributes when composing a NIC name (bsc#1234015)
- Drop 5004-udev-allow-denylist-for-reading-sysfs-attributes-whe.patch
  The path has been merged into the SUSE/v254 branch.</changelog>
  <changelog author="fbui@suse.com" date="1743595200">- Import commit 2f79a45369489b656be509a1517afcae4fe3ee20
  ebdfa3e44e man/pstore.conf: pstore.conf template is not always installed in /etc
  304ed20aab man: coredump.conf template is not always installed in /etc (bsc#1237496)</changelog>
  <changelog author="fbui@suse.com" date="1746792000">- Add 1003-journal-again-create-user-journals-for-users-with-hi.patch (bsc#1242938)
  Don't write messages sent from users with UID falling into the container UID
  range to the system journal. Daemons in the container don't talk to the
  outside journald as they talk to the inner one directly, which does its
  journal splitting based on shifted uids.</changelog>
  <changelog author="fbui@suse.com" date="1747051200">- Apply coredump sysctl settings on systemd-coredump updates/removals.</changelog>
  <changelog author="fbui@suse.com" date="1747396800">- Import commit a4100e9c74b0eafae18a13e9d1d988ebc8376c6a
  806c21e22b umount: do not move busy network mounts (bsc#1236177)</changelog>
  <changelog author="fbui@suse.com" date="1748865600">- Import commit b0ae3b6e85b6a4030cf2adb88519a6ca0ffc1343
  41d2be2fb5 Revert "macro: terminate the temporary VA_ARGS_FOREACH() array with a sentinel" (SUSE specific)</changelog>
  <changelog author="fbui@suse.com" date="1748865601">- Import commit e08f49f2432509787abfb7f3fc0b2f2c459def04 (merge of v254.25)
  This merge includes the following fix:
    7fc7aa5a4d coredump: use %d in kernel core pattern (bsc#1243935 CVE-2025-4598)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/b0ae3b6e85b6a4030cf2adb88519a6ca0ffc1343...e08f49f2432509787abfb7f3fc0b2f2c459def04
- Drop 1021-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch
  The SUSE specific patch has been integrated into the SUSE/v254 git
  branch. Some of the imported commits from the stable tree rely on the macro
  now.</changelog>
  <changelog author="fbui@suse.com" date="1749038400">- Start the systemd-coredump.socket unit on systemd-coredump package
  installation.
- Restore the kernel default values of the coredump sysctl settings on
  systemd-coredump package removal.</changelog>
  <changelog author="fbui@suse.com" date="1749211200">- Import commit 278fb676146e35a7b4057f52f34a7bbaf1b82369
  aa12f501ae logs-show: get timestamp and boot ID only when necessary (bsc#1242827)
  e8b17d11bc sd-journal: drop to use Hashmap to manage journal files per boot ID
  ea80273738 tree-wide: set SD_JOURNAL_ASSUME_IMMUTABLE where appropriate
  a5b3b5344f sd-journal: introduce SD_JOURNAL_ASSUME_IMMUTABLE flag
  5fa0600b34 sd-journal: make journal_file_read_tail_timestamp() notify to the caller that some new journal entries added
  737e8193e7 sd-journal: cache last entry offset and journal file state
  057dca426f sd-journal: fix typo in function name</changelog>
  <changelog author="fbui@suse.com" date="1751544000">- Import commit 130293e510ceb4d121d11823e6ebd4b1e8332ea0 (merge of v254.27)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/278fb676146e35a7b4057f52f34a7bbaf1b82369...130293e510ceb4d121d11823e6ebd4b1e8332ea0</changelog>
  <changelog author="fbui@suse.com" date="1751544001">- systemd-repart is no more considered as experimental (jsc#PED-13213)</changelog>
  <changelog author="fbui@suse.com" date="1751889600">- triggers.systemd: skip update of hwdb, journal-catalog if executed during
  an offline update.</changelog>
</package>
<package pkgid="4eee187208874ca049f939030fec985045e37561e7ce293968c68ac416205e8b" name="libsystemd0-32bit" arch="x86_64">
  <version epoch="0" ver="254.27" rel="150600.4.46.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1734955200">- Fix systemd-network recommending libidn2-devel (boo#1234765)</changelog>
  <changelog author="fbui@suse.com" date="1736942400">- Import commit 34b1c72fa9aeea9c2c20e6802530e4b915c9dabf (merge of v254.23)
  eab1d9753b stdio-bridge: fix polled fds
  f028f2298e hwdb: comment out the entry for Logitech MX Keys for Mac
  e808cbdd6d test: answer 2nd mdadm --create question for compat with new version
  bf01f3d692 core/unit-serialize: fix serialization of markers
  f043ab6f34 locale-setup: do not load locale from environemnt when /etc/locale.conf is unchanged
  71efbe69b6 core: fix assert when AddDependencyUnitFiles is called with invalid parameter</changelog>
  <changelog author="fbui@suse.com" date="1736942401">- Add 1020-core-create-the-credential-directory-even-if-it-s-em.patch (bsc#1229228)
- Rename 5012-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch into
  1021-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch
  Commit dc571cccd75db7be49b2aada64baf92e3a498c39 was backported and included in
  v254.9 bumping the version requirement on gcc from 4.7 to 8. Unfortunately
  this breakage won't be fixed by upstream therefore there's no longer a need to
  keep the patch that reverts the offending commit in quarantine.</changelog>
  <changelog author="fbui@suse.com" date="1738670400">- Move systemd-userwork from the experimental sub-package to the main package (bsc#1236643)
  It is likely an oversight from when systemd-userdb was migrated from the
  experimental package to the main one.</changelog>
  <changelog author="fbui@suse.com" date="1741089600">- Import commit b25faa18ee7ef3c2d0b16416dfa331d0013dd112
  b4693652f3 journald: close runtime journals before their parent directory removed
  044d051f0c journald: reset runtime seqnum data when flushing to system journal (bsc#1236886)</changelog>
  <changelog author="fbui@suse.com" date="1742385600">- Import commit 2b599c7501253b0e6b7987fdb2676af21bc72ab3 (merge of v254.24)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/b25faa18ee7ef3c2d0b16416dfa331d0013dd112...2b599c7501253b0e6b7987fdb2676af21bc72ab3</changelog>
  <changelog author="fbui@suse.com" date="1742385601">- Import commit 83b9060b6e4c9cdffbbed0e27467cbd2f806dc0d
  09b7477895 udev: allow/denylist for reading sysfs attributes when composing a NIC name (bsc#1234015)
- Drop 5004-udev-allow-denylist-for-reading-sysfs-attributes-whe.patch
  The path has been merged into the SUSE/v254 branch.</changelog>
  <changelog author="fbui@suse.com" date="1743595200">- Import commit 2f79a45369489b656be509a1517afcae4fe3ee20
  ebdfa3e44e man/pstore.conf: pstore.conf template is not always installed in /etc
  304ed20aab man: coredump.conf template is not always installed in /etc (bsc#1237496)</changelog>
  <changelog author="fbui@suse.com" date="1746792000">- Add 1003-journal-again-create-user-journals-for-users-with-hi.patch (bsc#1242938)
  Don't write messages sent from users with UID falling into the container UID
  range to the system journal. Daemons in the container don't talk to the
  outside journald as they talk to the inner one directly, which does its
  journal splitting based on shifted uids.</changelog>
  <changelog author="fbui@suse.com" date="1747051200">- Apply coredump sysctl settings on systemd-coredump updates/removals.</changelog>
  <changelog author="fbui@suse.com" date="1747396800">- Import commit a4100e9c74b0eafae18a13e9d1d988ebc8376c6a
  806c21e22b umount: do not move busy network mounts (bsc#1236177)</changelog>
  <changelog author="fbui@suse.com" date="1748865600">- Import commit b0ae3b6e85b6a4030cf2adb88519a6ca0ffc1343
  41d2be2fb5 Revert "macro: terminate the temporary VA_ARGS_FOREACH() array with a sentinel" (SUSE specific)</changelog>
  <changelog author="fbui@suse.com" date="1748865601">- Import commit e08f49f2432509787abfb7f3fc0b2f2c459def04 (merge of v254.25)
  This merge includes the following fix:
    7fc7aa5a4d coredump: use %d in kernel core pattern (bsc#1243935 CVE-2025-4598)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/b0ae3b6e85b6a4030cf2adb88519a6ca0ffc1343...e08f49f2432509787abfb7f3fc0b2f2c459def04
- Drop 1021-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch
  The SUSE specific patch has been integrated into the SUSE/v254 git
  branch. Some of the imported commits from the stable tree rely on the macro
  now.</changelog>
  <changelog author="fbui@suse.com" date="1749038400">- Start the systemd-coredump.socket unit on systemd-coredump package
  installation.
- Restore the kernel default values of the coredump sysctl settings on
  systemd-coredump package removal.</changelog>
  <changelog author="fbui@suse.com" date="1749211200">- Import commit 278fb676146e35a7b4057f52f34a7bbaf1b82369
  aa12f501ae logs-show: get timestamp and boot ID only when necessary (bsc#1242827)
  e8b17d11bc sd-journal: drop to use Hashmap to manage journal files per boot ID
  ea80273738 tree-wide: set SD_JOURNAL_ASSUME_IMMUTABLE where appropriate
  a5b3b5344f sd-journal: introduce SD_JOURNAL_ASSUME_IMMUTABLE flag
  5fa0600b34 sd-journal: make journal_file_read_tail_timestamp() notify to the caller that some new journal entries added
  737e8193e7 sd-journal: cache last entry offset and journal file state
  057dca426f sd-journal: fix typo in function name</changelog>
  <changelog author="fbui@suse.com" date="1751544000">- Import commit 130293e510ceb4d121d11823e6ebd4b1e8332ea0 (merge of v254.27)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/278fb676146e35a7b4057f52f34a7bbaf1b82369...130293e510ceb4d121d11823e6ebd4b1e8332ea0</changelog>
  <changelog author="fbui@suse.com" date="1751544001">- systemd-repart is no more considered as experimental (jsc#PED-13213)</changelog>
  <changelog author="fbui@suse.com" date="1751889600">- triggers.systemd: skip update of hwdb, journal-catalog if executed during
  an offline update.</changelog>
  <changelog author="fbui@suse.com" date="1758196800">- Split systemd-network into two new sub-packages: systemd-networkd and
  systemd-resolved (bsc#1224386 jsc#PED-12669)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1758196801">- systemd.spec: use %sysusers_generate_pre so that some systemd users are
  already available in %pre. This is important because D-Bus automatically
  reloads its configuration whenever new configuration files are installed,
  i.e. between %pre and %post. (bsc#1248501)
  No needs for systemd and udev packages as they are always installed during
  the initial installation.</changelog>
</package>
<package pkgid="c21f5ae5eeab5f6c5e49b32748723a4fc87a689d44c8359e1b9f95b2a33457f7" name="libsystemd0-32bit" arch="x86_64">
  <version epoch="0" ver="254.27" rel="150600.4.55.1"/>
  <changelog author="fbui@suse.com" date="1742385600">- Import commit 2b599c7501253b0e6b7987fdb2676af21bc72ab3 (merge of v254.24)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/b25faa18ee7ef3c2d0b16416dfa331d0013dd112...2b599c7501253b0e6b7987fdb2676af21bc72ab3</changelog>
  <changelog author="fbui@suse.com" date="1742385601">- Import commit 83b9060b6e4c9cdffbbed0e27467cbd2f806dc0d
  09b7477895 udev: allow/denylist for reading sysfs attributes when composing a NIC name (bsc#1234015)
- Drop 5004-udev-allow-denylist-for-reading-sysfs-attributes-whe.patch
  The path has been merged into the SUSE/v254 branch.</changelog>
  <changelog author="fbui@suse.com" date="1743595200">- Import commit 2f79a45369489b656be509a1517afcae4fe3ee20
  ebdfa3e44e man/pstore.conf: pstore.conf template is not always installed in /etc
  304ed20aab man: coredump.conf template is not always installed in /etc (bsc#1237496)</changelog>
  <changelog author="fbui@suse.com" date="1746792000">- Add 1003-journal-again-create-user-journals-for-users-with-hi.patch (bsc#1242938)
  Don't write messages sent from users with UID falling into the container UID
  range to the system journal. Daemons in the container don't talk to the
  outside journald as they talk to the inner one directly, which does its
  journal splitting based on shifted uids.</changelog>
  <changelog author="fbui@suse.com" date="1747051200">- Apply coredump sysctl settings on systemd-coredump updates/removals.</changelog>
  <changelog author="fbui@suse.com" date="1747396800">- Import commit a4100e9c74b0eafae18a13e9d1d988ebc8376c6a
  806c21e22b umount: do not move busy network mounts (bsc#1236177)</changelog>
  <changelog author="fbui@suse.com" date="1748865600">- Import commit b0ae3b6e85b6a4030cf2adb88519a6ca0ffc1343
  41d2be2fb5 Revert "macro: terminate the temporary VA_ARGS_FOREACH() array with a sentinel" (SUSE specific)</changelog>
  <changelog author="fbui@suse.com" date="1748865601">- Import commit e08f49f2432509787abfb7f3fc0b2f2c459def04 (merge of v254.25)
  This merge includes the following fix:
    7fc7aa5a4d coredump: use %d in kernel core pattern (bsc#1243935 CVE-2025-4598)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/b0ae3b6e85b6a4030cf2adb88519a6ca0ffc1343...e08f49f2432509787abfb7f3fc0b2f2c459def04
- Drop 1021-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch
  The SUSE specific patch has been integrated into the SUSE/v254 git
  branch. Some of the imported commits from the stable tree rely on the macro
  now.</changelog>
  <changelog author="fbui@suse.com" date="1749038400">- Start the systemd-coredump.socket unit on systemd-coredump package
  installation.
- Restore the kernel default values of the coredump sysctl settings on
  systemd-coredump package removal.</changelog>
  <changelog author="fbui@suse.com" date="1749211200">- Import commit 278fb676146e35a7b4057f52f34a7bbaf1b82369
  aa12f501ae logs-show: get timestamp and boot ID only when necessary (bsc#1242827)
  e8b17d11bc sd-journal: drop to use Hashmap to manage journal files per boot ID
  ea80273738 tree-wide: set SD_JOURNAL_ASSUME_IMMUTABLE where appropriate
  a5b3b5344f sd-journal: introduce SD_JOURNAL_ASSUME_IMMUTABLE flag
  5fa0600b34 sd-journal: make journal_file_read_tail_timestamp() notify to the caller that some new journal entries added
  737e8193e7 sd-journal: cache last entry offset and journal file state
  057dca426f sd-journal: fix typo in function name</changelog>
  <changelog author="fbui@suse.com" date="1751544000">- Import commit 130293e510ceb4d121d11823e6ebd4b1e8332ea0 (merge of v254.27)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/278fb676146e35a7b4057f52f34a7bbaf1b82369...130293e510ceb4d121d11823e6ebd4b1e8332ea0</changelog>
  <changelog author="fbui@suse.com" date="1751544001">- systemd-repart is no more considered as experimental (jsc#PED-13213)</changelog>
  <changelog author="fbui@suse.com" date="1751889600">- triggers.systemd: skip update of hwdb, journal-catalog if executed during
  an offline update.</changelog>
  <changelog author="fbui@suse.com" date="1758196800">- Split systemd-network into two new sub-packages: systemd-networkd and
  systemd-resolved (bsc#1224386 jsc#PED-12669)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1758196801">- systemd.spec: use %sysusers_generate_pre so that some systemd users are
  already available in %pre. This is important because D-Bus automatically
  reloads its configuration whenever new configuration files are installed,
  i.e. between %pre and %post. (bsc#1248501)
  No needs for systemd and udev packages as they are always installed during
  the initial installation.</changelog>
  <changelog author="fbui@suse.com" date="1761652800">- Import commit 00ba3646e6cb3ce40bb3de3e92f93ebec0adce6d
  e4dd315b6c units: don't force the loading of the loop and dm_mod modules in systemd-repart.service (bsc#1248356)
  b58e72215a units: add dep on systemd-logind.service by user@.service
  97ceca445c detect-virt: add bare-metal support for GCE (bsc#1244449)</changelog>
  <changelog author="fbui@suse.com" date="1765281600">- Reintroduce systemd-network as a transitional dummy package containing no
  files (bsc#1254202)
  The contents of this package were split into two independent packages:
  systemd-networkd and systemd-resolved. However, the initial replacement caused
  both network services to be disabled. Consequently, the original package has
  been restored as an empty transitional package to prevent the disabling of the
  services. It can be safely removed once the update is complete.</changelog>
  <changelog author="fbui@suse.com" date="1765800000">- Import commit 5caaa71f4a7b00e6a6ceb396d08486af73687d45
  9ecd162284 timer: rebase last_trigger timestamp if needed
  cd4a9103ef timer: rebase the next elapse timestamp only if timer didn't already run
  c3f4407e97 timer: don't run service immediately after restart of a timer (bsc#1254563)
  05bcfe3295 test: check the next elapse timer timestamp after deserialization
  fe8f656975 test: restarting elapsed timer shouldn't trigger the corresponding service</changelog>
  <changelog author="fbui@suse.com" date="1766145600">- Import commit 75eab961ea843dc161707d4af0789b018d499676
  - 8bbac1d508 detect-virt: bare-metal GCE only for x86 and i386 (bsc#1254293)</changelog>
  <changelog author="fbui@suse.com" date="1768305600">- Name libsystemd-{shared,core} based on the major version of systemd and the
  package release number (bsc#1228081 bsc#1256427)
  This way, both the old and new versions of the shared libraries will be
  present during the update. This should prevent issues during package updates
  when incompatible changes are introduced in the new versions of the shared
  libraries.</changelog>
</package>
<package pkgid="27d2ddb52eb9b33630bea0a0c22e583e3d0aec33f264d0033724009eaf3fb05c" name="libsystemd0-32bit" arch="x86_64">
  <version epoch="0" ver="254.27" rel="150600.4.62.1"/>
  <changelog author="fbui@suse.com" date="1743595200">- Import commit 2f79a45369489b656be509a1517afcae4fe3ee20
  ebdfa3e44e man/pstore.conf: pstore.conf template is not always installed in /etc
  304ed20aab man: coredump.conf template is not always installed in /etc (bsc#1237496)</changelog>
  <changelog author="fbui@suse.com" date="1746792000">- Add 1003-journal-again-create-user-journals-for-users-with-hi.patch (bsc#1242938)
  Don't write messages sent from users with UID falling into the container UID
  range to the system journal. Daemons in the container don't talk to the
  outside journald as they talk to the inner one directly, which does its
  journal splitting based on shifted uids.</changelog>
  <changelog author="fbui@suse.com" date="1747051200">- Apply coredump sysctl settings on systemd-coredump updates/removals.</changelog>
  <changelog author="fbui@suse.com" date="1747396800">- Import commit a4100e9c74b0eafae18a13e9d1d988ebc8376c6a
  806c21e22b umount: do not move busy network mounts (bsc#1236177)</changelog>
  <changelog author="fbui@suse.com" date="1748865600">- Import commit b0ae3b6e85b6a4030cf2adb88519a6ca0ffc1343
  41d2be2fb5 Revert "macro: terminate the temporary VA_ARGS_FOREACH() array with a sentinel" (SUSE specific)</changelog>
  <changelog author="fbui@suse.com" date="1748865601">- Import commit e08f49f2432509787abfb7f3fc0b2f2c459def04 (merge of v254.25)
  This merge includes the following fix:
    7fc7aa5a4d coredump: use %d in kernel core pattern (bsc#1243935 CVE-2025-4598)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/b0ae3b6e85b6a4030cf2adb88519a6ca0ffc1343...e08f49f2432509787abfb7f3fc0b2f2c459def04
- Drop 1021-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch
  The SUSE specific patch has been integrated into the SUSE/v254 git
  branch. Some of the imported commits from the stable tree rely on the macro
  now.</changelog>
  <changelog author="fbui@suse.com" date="1749038400">- Start the systemd-coredump.socket unit on systemd-coredump package
  installation.
- Restore the kernel default values of the coredump sysctl settings on
  systemd-coredump package removal.</changelog>
  <changelog author="fbui@suse.com" date="1749211200">- Import commit 278fb676146e35a7b4057f52f34a7bbaf1b82369
  aa12f501ae logs-show: get timestamp and boot ID only when necessary (bsc#1242827)
  e8b17d11bc sd-journal: drop to use Hashmap to manage journal files per boot ID
  ea80273738 tree-wide: set SD_JOURNAL_ASSUME_IMMUTABLE where appropriate
  a5b3b5344f sd-journal: introduce SD_JOURNAL_ASSUME_IMMUTABLE flag
  5fa0600b34 sd-journal: make journal_file_read_tail_timestamp() notify to the caller that some new journal entries added
  737e8193e7 sd-journal: cache last entry offset and journal file state
  057dca426f sd-journal: fix typo in function name</changelog>
  <changelog author="fbui@suse.com" date="1751544000">- Import commit 130293e510ceb4d121d11823e6ebd4b1e8332ea0 (merge of v254.27)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/278fb676146e35a7b4057f52f34a7bbaf1b82369...130293e510ceb4d121d11823e6ebd4b1e8332ea0</changelog>
  <changelog author="fbui@suse.com" date="1751544001">- systemd-repart is no more considered as experimental (jsc#PED-13213)</changelog>
  <changelog author="fbui@suse.com" date="1751889600">- triggers.systemd: skip update of hwdb, journal-catalog if executed during
  an offline update.</changelog>
  <changelog author="fbui@suse.com" date="1758196800">- Split systemd-network into two new sub-packages: systemd-networkd and
  systemd-resolved (bsc#1224386 jsc#PED-12669)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1758196801">- systemd.spec: use %sysusers_generate_pre so that some systemd users are
  already available in %pre. This is important because D-Bus automatically
  reloads its configuration whenever new configuration files are installed,
  i.e. between %pre and %post. (bsc#1248501)
  No needs for systemd and udev packages as they are always installed during
  the initial installation.</changelog>
  <changelog author="fbui@suse.com" date="1761652800">- Import commit 00ba3646e6cb3ce40bb3de3e92f93ebec0adce6d
  e4dd315b6c units: don't force the loading of the loop and dm_mod modules in systemd-repart.service (bsc#1248356)
  b58e72215a units: add dep on systemd-logind.service by user@.service
  97ceca445c detect-virt: add bare-metal support for GCE (bsc#1244449)</changelog>
  <changelog author="fbui@suse.com" date="1765281600">- Reintroduce systemd-network as a transitional dummy package containing no
  files (bsc#1254202)
  The contents of this package were split into two independent packages:
  systemd-networkd and systemd-resolved. However, the initial replacement caused
  both network services to be disabled. Consequently, the original package has
  been restored as an empty transitional package to prevent the disabling of the
  services. It can be safely removed once the update is complete.</changelog>
  <changelog author="fbui@suse.com" date="1765800000">- Import commit 5caaa71f4a7b00e6a6ceb396d08486af73687d45
  9ecd162284 timer: rebase last_trigger timestamp if needed
  cd4a9103ef timer: rebase the next elapse timestamp only if timer didn't already run
  c3f4407e97 timer: don't run service immediately after restart of a timer (bsc#1254563)
  05bcfe3295 test: check the next elapse timer timestamp after deserialization
  fe8f656975 test: restarting elapsed timer shouldn't trigger the corresponding service</changelog>
  <changelog author="fbui@suse.com" date="1766145600">- Import commit 75eab961ea843dc161707d4af0789b018d499676
  - 8bbac1d508 detect-virt: bare-metal GCE only for x86 and i386 (bsc#1254293)</changelog>
  <changelog author="fbui@suse.com" date="1768305600">- Name libsystemd-{shared,core} based on the major version of systemd and the
  package release number (bsc#1228081 bsc#1256427)
  This way, both the old and new versions of the shared libraries will be
  present during the update. This should prevent issues during package updates
  when incompatible changes are introduced in the new versions of the shared
  libraries.</changelog>
  <changelog author="fbui@suse.com" date="1772193600">- Import commit 626ffc7844795870235d15c6daab695f2d53a11e
  aef6e11921 core/cgroup: avoid one unnecessary strjoina()
  cc7426f38a sd-json: fix off-by-one issue when updating parent for array elements
  26a748f727 core: validate input cgroup path more prudently (CVE-2026-29111 bsc#1259418)
  99d8308fde core/dbus-manager: propagate meaningful dbus errors from EnqueueMarkedJobs</changelog>
  <changelog author="fbui@suse.com" date="1773921600">- Import commit c89ea566d98c8e3fb29a5b8edd4576b135b4bc92
  a943e3ce2f machined: reject invalid class types when registering machines (bsc#1259650 CVE-2026-4105)
  71593f77db udev: fix review mixup
  73a89810b4 udev-builtin-net-id: print cescaped bad attributes
  0f360bfdc0 udev-builtin-net_id: do not assume the current interface name is ethX
  40905232e2 udev: ensure tag parsing stays within bounds
  7bce9026e3 udev: ensure there is space for trailing NUL before calling sprintf
  d018ac1ea3 udev: check for invalid chars in various fields received from the kernel (bsc#1259697)</changelog>
</package>
<package pkgid="1d725927546feeda2e3870833d0ea728c48842492e864e0d9a84f42334ca318b" name="libtag1" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="150600.3.3.1"/>
  <changelog author="olaf@aepfle.de" date="1451908800">- Fix build in SLE_11 by disabling post-install</changelog>
  <changelog author="aloisio@gmx.com" date="1462190400">- Update to 1.11
  * Fixed reading APE items with long keys.
  * Fixed reading ID3v2 SYLT frames when description is empty.
  1.11 BETA 2:
  * Better handling of PCM WAV files with a 'fact' chunk.
  * Better handling of corrupted APE tags.
  * Efficient decoding of unsynchronized ID3v2 frames.
  * Fixed text encoding when saving certain frames in ID3v2.3
    tags.
  * Fixed updating the size of RIFF files when removing chunks.
  * Several smaller bug fixes and performance improvements.
  1.11 BETA:
  * New API for creating FileRef from IOStream.
  * Added support for ID3v2 PCST and WFED frames.
  * Added support for pictures in XiphComment.
  * Added String::clear().
  * Added FLAC::File::strip() for removing non-standard tags.
  * Added alternative functions to XiphComment::removeField().
  * Added BUILD_BINDINGS build option.
  * Added ENABLE_CCACHE build option.
  * Replaced ENABLE_STATIC build option with BUILD_SHARED_LIBS.
  * Better handling of duplicate ID3v2 tags in all kinds of
    files.
  * Better handling of duplicate tag chunks in WAV files.
  * Better handling of duplicate tag chunks in AIFF files.
  * Better handling of duplicate Vorbis comment blocks in FLAC
    files.
  * Better handling of broken MPEG audio frames.
  * Fixed crash when calling File::properties() after strip().
  * Fixed crash when parsing certain MPEG files.
  * Fixed crash when saving Ogg files.
  * Fixed possible file corruptions when saving ASF files.
  * Fixed possible file corruptions when saving FLAC files.
  * Fixed possible file corruptions when saving MP4 files.
  * Fixed possible file corruptions when saving MPEG files.
  * Fixed possible file corruptions when saving APE files.
  * Fixed possible file corruptions when saving Musepack files.
  * Fixed possible file corruptions when saving WavPack files.
  * Fixed updating the comment field of Vorbis comments.
  * Fixed reading date and time in ID3v2.3 tags.
  * Marked ByteVector::null and ByteVector::isNull()
    deprecated.
  * Marked String::null and String::isNull() deprecated.
  * Marked XiphComment::removeField() deprecated.
  * Marked Ogg::Page::getCopyWithNewPageSequenceNumber()
    deprecated. It returns null.
  * Marked custom integer types deprecated.
  * Many smaller bug fixes and performance improvements.</changelog>
  <changelog author="sbrabec@suse.com" date="1502193600">- Update to versio 1.11.1:
  * Fixed binary incompatible change in TagLib::String.
  * Fixed reading ID3v2 CTOC frames with a lot of entries.
  * Fixed seeking ByteVectorStream from the end.
- Prevent denial of service (bsc#1052699, CVE-2017-12678,
  taglib-CVE-2017-12678.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Cleanup bit with spec-cleaner
- Drop librcc dependency as there is no actual code dependency in taglib</changelog>
  <changelog author="kbabioch@suse.com" date="1528286400">- Added taglib-CVE-2018-11439.patch: Fix an out-of-bounds read when loading
  invalid ogg flac files (CVE-2018-11439, bsc#1096180).
- Applied spec-cleaner to specfile</changelog>
  <changelog author="jonas@jkvinge.net" date="1542110400">- Add patch to fix Ogg corruption (boo#1179817,
  gh#taglib/taglib#864):
  * taglib-fix-ogg.patch</changelog>
  <changelog author="davejplater@gmail.com" date="1544011200">- Update to 1.11.1+git20181028 and add taglib-versionbump.patch to
  enable qt5 clementine to build with system taglib.
- Removed incorporated taglib-CVE-2017-12678.patch,
  taglib-CVE-2018-11439.patch and taglib-fix-ogg.patch.
- Upstream changes:
  * Added support for DSF and DSDIFF files.
  * Added support for WinRT.
  * Added support for classical music tags of iTunes 12.5.
  * Added support for file descriptor to FileStream.
  * Added support for 'cmID', 'purl', 'egid' MP4 atoms.
  * Enabled FileRef to detect file types based on the stream content.
  * Check for mandatory header objects in ASF files.
  * Fixed OOB read on invalid Ogg FLAC files (CVE-2018-11439).
  * Fixed handling of empty MPEG files.
  * Fixed reading MP4 atoms with zero length.
  * Fixed reading FLAC files with zero-sized seektables.
  * Fixed handling of lowercase field names in Vorbis Comments.
  * Fixed handling of 'rate' atoms in MP4 files.
  * Fixed handling of invalid UTF-8 sequences.
  * Fixed possible file corruptions when saving Ogg files.
  * TableOfContentsFrame::toString() improved.
  * UserTextIdentificationFrame::toString() improved.
  * Marked FileRef::create() deprecated.
  * Several smaller bug fixes and performance improvements.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1559476800">- Update to 1.11.2~git20190601, which fixes a regression when reading/
  writing MP4 "rate" tags.
- Use proper package version, matching the header file version macros
- Upstream changes:
  * Respect atom type when converting rate tag (#896)
  * Support ID3v2 GRP1 frame introduced with iTunes 12.5.4.42, #903. (#904)
  * Update mp4properties.cpp (#893)
  * Minor fix for mp4 media header v0 minimum size check (#895)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1562241600">- Split API documentation from devel package, and convert it to multibuild
  - API documentation is significantly larger than library and headers
  - API documentation is noarch
  - Significantly reduced dependency chain for the library package
- Use graphviz-gd instead of graphviz-gnome for API docs
- Cleanup specfile</changelog>
  <changelog author="tchvatal@suse.com" date="1562587200">- Switch to service file for generating the package
- Use conditions to enable the multibuild tests in other loop while
  also generating the docs
- Make sure the tests are actually executed</changelog>
  <changelog author="tchvatal@suse.com" date="1563364800">- Use version 1.11.2~git20190531.ba7adc2b to match up the
  update-version.patch
- Install examples</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to version 1.11.2~git20190725.79bc9ccf:
  * Call fflush() before ftruncate() to drop all buffered data (#914)</changelog>
  <changelog author="christophe@krop.fr" date="1579521600">- Add patch to get the right directories when running taglib-config:
  * 0001-Changed-libdir-includedir-variables-to-change-based-.patch</changelog>
  <changelog author="jonaski@opensuse.org" date="1613476800">- Update to version 1.12:
  * Added support for WinRT.
  * Added support for Linux on POWER.
  * Added support for classical music tags of iTunes 12.5.
  * Added support for file descriptor to FileStream.
  * Added support for 'cmID', 'purl', 'egid' MP4 atoms.
  * Added support for 'GRP1' ID3v2 frame.
  * Added support for extensible WAV subformat.
  * Enabled FileRef to detect file types based on the stream content.
  * Dropped support for Windows 9x and NT 4.0 or older.
  * Check for mandatory header objects in ASF files.
  * More tolerant handling of RIFF padding, WAV files, broken MPEG streams.
  * Improved calculation of Ogg, Opus, Speex, WAV, MP4 bitrates.
  * Improved Windows compatibility by storing FLAC picture after comments.
  * Fixed numerical genres in ID3v2.3.0 'TCON' frames.
  * Fixed consistency of API removing MP4 items when empty values are set.
  * Fixed consistency of API preferring COMM frames with no description.
  * Fixed OOB read on invalid Ogg FLAC files (CVE-2018-11439).
  * Fixed handling of empty MPEG files.
  * Fixed parsing MP4 mdhd timescale.
  * Fixed reading MP4 atoms with zero length.
  * Fixed reading FLAC files with zero-sized seektables.
  * Fixed handling of lowercase field names in Vorbis Comments.
  * Fixed handling of 'rate' atoms in MP4 files.
  * Fixed handling of invalid UTF-8 sequences.
  * Fixed possible file corruptions when saving Ogg files.
  * Fixed handling of non-audio blocks, sampling rates, DSD audio in WavPack files.
  * TableOfContentsFrame::toString() improved.
  * UserTextIdentificationFrame::toString() improved.
  * Marked FileRef::create() deprecated.
  * Marked MPEG::File::save() with boolean parameters deprecated,
  provide overloads with enum parameters.
  * Several smaller bug fixes and performance improvements.
- Remove obsolete patches:
  * taglib-versionbump.patch
  * 0001-Changed-libdir-includedir-variables-to-change-based-.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- reference download url of tarball</changelog>
  <changelog author="tiwai@suse.de" date="1616068800">- Add missing zlib dependency in devel package</changelog>
  <changelog author="christophe@krop.fr" date="1652097600">- Remove build rpath from executables (boo#1199058, similar to
  bsc#1166467 which was fixed in SLE using -DCMAKE_SKIP_RPATH=ON
  instead of -DCMAKE_SKIP_BUILD_RPATH=ON)</changelog>
  <changelog author="jonaski@opensuse.org" date="1668686400">- Update to version 1.13:
  * Added interface StreamTypeResolver to support streams which cannot be fopen()'ed, e.g. network files.
  * Added MP4::File::strip() to remove meta atom from MP4 file.
  * Added Map::value() to look up without creating entry.
  * Use property "WORK" instead of "CONTENTGROUP" for ID3v2 "TIT1" frame,
  * use property "WORK" for ASF "WM/ContentGroupDescription",
  * use property "COMPILATION" for ID3v2 "TCMP" frame.
  * Build system improvements: option WITH_ZLIB, BUILD_TESTING instead of
  * BUILD_TESTS, GNUInstallDirs, FeatureSummary, tests with BUILD_SHARED_LIBS,
  * cross compilation with Buildroot, systems without HAVE_GCC_ATOMIC, Clang.
  * Fixed heap-buffer-overflows when handling ASF, APE, FLAC, ID3v2, MP4, MPC tags.
  * Fixed detection of invalid file by extension when correct type can be detected by contents.
  * Fixed unnecessary creation of map entries in APE and FLAC tags if looked up tag does not exist.
  * Fixed parsing of MP4 non-full meta atoms.
  * Fixed potential ID3v1 false positive in the presence of an APE tag.
  * Fixed ID3v2 version handling for frames embedded in CHAP or CTOC frames.
  * Fixed parsing of multiple strings with a single BOM in ID3v2.4.0.
  * Fixed several smaller issues reported by clang-tidy.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1689163200">- Update to version 1.13.1:
  * Fixed parsing of TXXX frames without description.
  * Detect MP4 atoms with invalid length or type.
  * Do not miss ID3v2 frames when an extended header is present.
  * Use property "DISCSUBTITLE" for ID3v2 "TSST" frame.
  * Build system improvements: Use absolute path for macOS dylib install name,
    support --define-prefix when using pkg-config, fixed minimum required
    CppUnit version.
  * Code clean up using clang-tidy.</changelog>
  <changelog author="marius.grossu@suse.com" date="1764244800">- Fix CVE-2023-47466, segmentation violation and application crash during tag writing via a crafted WAV file in which an id3 chunk is the only valid chunk
  (CVE-2023-47466, bsc#1243499)
  * CVE-2023-47466.patch</changelog>
</package>
<package pkgid="25880c9b0f3fc13bb50caefc295db812d4796f3113ea2ded4d66babea42dad0a" name="libtasn1" arch="src">
  <version epoch="0" ver="4.13" rel="150000.4.14.1"/>
  <changelog author="meissner@suse.com" date="1371729600">- updated to libtasn1 3.3
  * Noteworthy changes in release 3.3 (released 2013-03-23) [stable]
  - More precise overflow checks using gnulib's intprops module.
  - Updates to compile in Android systems.
  * Noteworthy changes in release 3.2 (released 2012-11-30) [stable]
  - Corrected buffer overflow in the error reporting of the parser (reported
    by Andreas Metzler).
  * Noteworthy changes in release 3.1 (released 2012-11-24) [stable]
  - Completed rename of types:
    ASN1_ARRAY_TYPE -&gt; asn1_static_node (was asn1_static_node_t)
  - Added new types: VisibleString, NumericString, IA5String, TeletexString,
    PrintableString, UniversalString, BMPString, UTF8String. When re-defined
    a warning is being print instead of failing.
  - Parser outputs more detailed syntax error messages.
  - Added asn1_decode_simple_der() and asn1_encode_simple_der().
  - Added asn1_read_value_type() to return value and type.
  - Introduced ASN1_ETYPE_UTC_TIME and ASN1_ETYPE_GENERALIZED_TIME
- added gpg source checking</changelog>
  <changelog author="coolo@suse.com" date="1372161600">- remove gpg source checking again to avoid this cycle:
  libtasn1 -&gt; libssh2_org -&gt; openssh -&gt; krb5 -&gt; python-Jinja2 -&gt; vim -&gt; libtasn1</changelog>
  <changelog author="meissner@suse.com" date="1401796800">- libtasn1.keyring: added Nikos Mavrogiannopoulos &lt;nmav@gnutls.org&gt;
  key, who did this release (and shares responsibility with Simon).
- updated to libtasn1 3.6
  * Noteworthy changes in release 3.6 (released 2014-05-25) [stable]
  - Corrected an off-by-one error in ASN.1 DER tag decoding. (CVE-2014-3468/bnc#880735)
  - Several improvements and new safety checks on DER decoding;
    issues found using Codenomicon TLS test suite. (CVE-2014-3469/bnc#880738,
    CVE-2014-3467/bnc#880737)
  - Marked asn1_der_decoding_element() as deprecated. Use
    asn1_der_decoding() instead.
  * Noteworthy changes in release 3.5 (released 2014-05-01) [stable]
  - Correctly handle decoding of recursive CHOICE options.
  - Allow deleting elements of SET OF. Patch by Jean-Louis Thekekara.
  - Several small bug fixes found by coverity.
  - Code improvements contributed by Kurt Roeckx.
  * Noteworthy changes in release 3.4 (released 2013-11-25) [stable]
  - Added asn1_delete_structure2() which allows zeroizing the contents
    of all values in the structure prior to deinitialization.
  - The parser accepts negative numbers in an INTEGER range (but
    still does no enforce them).</changelog>
  <changelog author="mgorse@suse.com" date="1406289600">- updated to libtasn1 3.7:
  * Noteworthy changes in release 3.7 (released 2014-06-26) [stable]
  - Fixes in length calculation in _asn1_extract_der_octet().
  - Fixes in DER decoding.
  - Fixes: CVE-2014-3468 CVE-2014-3467 CVE-2014-3469 bnc#880738
    bnc#880737 bnc#880735</changelog>
  <changelog author="tabraham@suse.com" date="1412769600">- updated to libtasn1 4.2:
  * Noteworthy changes in release 4.2 (released 2014-09-15) [stable]
  - Added sanity checks in the decoding of time when
    ASN1_DECODE_FLAG_STRICT_DER is used.
  - Fixes in the decoding of OCTET STRING when close to the end
    of the structure.
  * Noteworthy changes in release 4.1 (released 2014-08-23) [stable]
  - Corrected indefinite tag check in ANY constructions. That allows
    the decoding of BER-encoded structures that contain indefinite
    encoding within an ANY element.
  - Added DER decoding flag ASN1_DECODE_FLAG_STRICT_DER. Over the
    years BER functionality was added to the decoder and this flag
    provides the way to disable it.
  - API and ABI changes since last version:
    ASN1_DECODE_FLAG_STRICT_DER: New definition
  * Noteworthy changes in release 4.0 (released 2014-06-26) [stable]
  - Optimized asn1_der_decoding_startEnd(). It no longer requires the
    additional decoding step.
  - asn1_read_value() understands the ?CURRENT keyword, which can be used
    to indicate the current element of a sequence, when the provided node
    is a sequence element.
  - Several optimizations in DER decoding of structures with sequences
    containing many elements.
  - asn1_der_decoding2() is introduced and allows flags to be passed on
    the decoding process. Currently only ASN1_DECODE_FLAG_ALLOW_PADDING is
    defined and that allows decoding DER structures that contain arbitrary
    data past their end. Contributed by Karel Slany.
  - API and ABI changes since last version:
    ASN1_DECODE_FLAG_ALLOW_PADDING: New definition
    asn1_dup_node: New function
    asn1_der_decoding2: New function
    asn1_der_decoding_element: It is now an alias to asn1_der_decoding</changelog>
  <changelog author="jengelh@inai.de" date="1423915200">- Put C API documentation into -devel package.
  Use modern %make_install. Description fix.</changelog>
  <changelog author="mpluskal@suse.com" date="1427025600">- Update project url
- Cleanup spec-file with spec-cleaner
- Add info preun and post dependencies
- Update to 4.3
  * Added asn1_decode_simple_ber()
  * Only assign a value if the previous node has one (bsc#961491).</changelog>
  <changelog author="astieger@suse.com" date="1427630400">- update to libtasn1 4.4 [bsc#924828]:
  * Corrected a two-byte stack overflow in asn1_der_decoding.
    CVE-2015-2806</changelog>
  <changelog author="astieger@suse.com" date="1430481600">- update libtasn1 4.5:
  * Corrected an invalid memory access in octet string decoding.
    CVE-2015-3622 [boo#929414]</changelog>
  <changelog author="astieger@suse.com" date="1441627200">- libtasn1 4.6:
  * Allow decoding OCTET STRINGs with multi-byte tags.
  * Add asn1_get_object_id_der</changelog>
  <changelog author="zaitor@opensuse.org" date="1442404800">- Update to version 4.7:
  * Fixed regression introduced in the decoding of multi-byte tags
    fix.</changelog>
  <changelog author="mpluskal@suse.com" date="1460376000">- Update to 4.8
  * Fixes to avoid reliance on C undefined behavior.
  * Fixes to avoid an infinite recursion when decoding without the
    ASN1_DECODE_FLAG_STRICT_DER flag. Reported by Pascal Cuoq.
    (CVE-2016-4008 / bsc#982779)
  * Combined all the BER octet string decoding functions to a
    single one based on asn1_decode_simple_ber().</changelog>
  <changelog author="astieger@suse.com" date="1470830400">- update to 4.9:
  * Fix OID encoding of OIDs which have elements which exceed 2^32
- Do not treat i586 warning as error, adding upstream
  0001-configure-don-t-add-Werror-to-build-flags.patch
- fate#322523</changelog>
  <changelog author="astieger@suse.com" date="1496577600">- libtasn1 4.12:
  * Corrected so-name version
- includes changes in 4.11:
  * Introduce the ASN1_TIME_ENCODING_ERROR error code to indicate
    an invalid encoding in the DER time fields.
  * Introduced flag ASN1_DECODE_FLAG_ALLOW_INCORRECT_TIME. This flag
    allows decoding errors in time fields even when in strict DER mode.
    That is introduced in order to allow toleration of invalid times in
    X.509 certificates (which are common) even though strict DER adherence
    is enforced in other fields.
  * Added safety check in asn1_find_node(). That prevents a crash
    when a very long variable name is provided by the developer.
    Note that this to be exploited requires controlling the ASN.1
    definitions used by the developer, i.e., the 'name' parameter of
    asn1_write_value() or asn1_read_value(). The library is
    not designed to protect against malicious manipulation of the
    developer assigned variable names
- includes changes from 4.10:
  * Updated gnulib
  * Removed -Werror from default compiler flags
    (drop patch 0001-configure-don-t-add-Werror-to-build-flags.patch)
  * Fixed undefined behavior when negating integers in _asn1_ltostr().
  * Pass the correct length to _asn1_get_indefinite_length_string in
    asn1_get_length_ber. This addresses reading 1-byte past the end
    of data.</changelog>
  <changelog author="kbabioch@suse.com" date="1516363200">- update to 4.13
  * On indefinite string decoding, set a maximum level of allowed
    recursions (3) to protect the BER decoder from a stack exhaustion.
    (CVE-2018-6003 boo#1076832)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1556539200">- Add libtasn1-object-id-recursion.patch: limit recursion in
  _asn1_expand_object_id (boo#1105435 CVE-2018-1000654
  (https://gitlab.com/gnutls/libtasn1/merge_requests/8)</changelog>
  <changelog author="abergmann@suse.com" date="1666699200">- Add libtasn1-CVE-2021-46848.patch: Fixed off-by-one array size check
  that affects asn1_encode_simple_der (CVE-2021-46848, bsc#1204690).</changelog>
  <changelog author="pmonreal@suse.com" date="1739188800">- Security fix: [bsc#1236878, CVE-2024-12133]
  * Potential DoS in handling of numerous SEQUENCE OF or SET OF elements
  * Add libtasn1-CVE-2024-12133.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767960000">- Security fix: [bsc#1256341, CVE-2025-13151]
  * Stack-based buffer overflow. The function asn1_expend_octet_string()
    fails to validate the size of input data resulting in a buffer overflow.
  * Add libtasn1-CVE-2025-13151.patch</changelog>
</package>
<package pkgid="4e0cd88e476a1a8dffee307ce64ddefbb96865fc913e1862d5faf03f420103a3" name="libtasn1" arch="x86_64">
  <version epoch="0" ver="4.13" rel="150000.4.14.1"/>
  <changelog author="jengelh@inai.de" date="1423915200">- Put C API documentation into -devel package.
  Use modern %make_install. Description fix.</changelog>
  <changelog author="mpluskal@suse.com" date="1427025600">- Update project url
- Cleanup spec-file with spec-cleaner
- Add info preun and post dependencies
- Update to 4.3
  * Added asn1_decode_simple_ber()
  * Only assign a value if the previous node has one (bsc#961491).</changelog>
  <changelog author="astieger@suse.com" date="1427630400">- update to libtasn1 4.4 [bsc#924828]:
  * Corrected a two-byte stack overflow in asn1_der_decoding.
    CVE-2015-2806</changelog>
  <changelog author="astieger@suse.com" date="1430481600">- update libtasn1 4.5:
  * Corrected an invalid memory access in octet string decoding.
    CVE-2015-3622 [boo#929414]</changelog>
  <changelog author="astieger@suse.com" date="1441627200">- libtasn1 4.6:
  * Allow decoding OCTET STRINGs with multi-byte tags.
  * Add asn1_get_object_id_der</changelog>
  <changelog author="zaitor@opensuse.org" date="1442404800">- Update to version 4.7:
  * Fixed regression introduced in the decoding of multi-byte tags
    fix.</changelog>
  <changelog author="mpluskal@suse.com" date="1460376000">- Update to 4.8
  * Fixes to avoid reliance on C undefined behavior.
  * Fixes to avoid an infinite recursion when decoding without the
    ASN1_DECODE_FLAG_STRICT_DER flag. Reported by Pascal Cuoq.
    (CVE-2016-4008 / bsc#982779)
  * Combined all the BER octet string decoding functions to a
    single one based on asn1_decode_simple_ber().</changelog>
  <changelog author="astieger@suse.com" date="1470830400">- update to 4.9:
  * Fix OID encoding of OIDs which have elements which exceed 2^32
- Do not treat i586 warning as error, adding upstream
  0001-configure-don-t-add-Werror-to-build-flags.patch
- fate#322523</changelog>
  <changelog author="astieger@suse.com" date="1496577600">- libtasn1 4.12:
  * Corrected so-name version
- includes changes in 4.11:
  * Introduce the ASN1_TIME_ENCODING_ERROR error code to indicate
    an invalid encoding in the DER time fields.
  * Introduced flag ASN1_DECODE_FLAG_ALLOW_INCORRECT_TIME. This flag
    allows decoding errors in time fields even when in strict DER mode.
    That is introduced in order to allow toleration of invalid times in
    X.509 certificates (which are common) even though strict DER adherence
    is enforced in other fields.
  * Added safety check in asn1_find_node(). That prevents a crash
    when a very long variable name is provided by the developer.
    Note that this to be exploited requires controlling the ASN.1
    definitions used by the developer, i.e., the 'name' parameter of
    asn1_write_value() or asn1_read_value(). The library is
    not designed to protect against malicious manipulation of the
    developer assigned variable names
- includes changes from 4.10:
  * Updated gnulib
  * Removed -Werror from default compiler flags
    (drop patch 0001-configure-don-t-add-Werror-to-build-flags.patch)
  * Fixed undefined behavior when negating integers in _asn1_ltostr().
  * Pass the correct length to _asn1_get_indefinite_length_string in
    asn1_get_length_ber. This addresses reading 1-byte past the end
    of data.</changelog>
  <changelog author="kbabioch@suse.com" date="1516363200">- update to 4.13
  * On indefinite string decoding, set a maximum level of allowed
    recursions (3) to protect the BER decoder from a stack exhaustion.
    (CVE-2018-6003 boo#1076832)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1556539200">- Add libtasn1-object-id-recursion.patch: limit recursion in
  _asn1_expand_object_id (boo#1105435 CVE-2018-1000654
  (https://gitlab.com/gnutls/libtasn1/merge_requests/8)</changelog>
  <changelog author="abergmann@suse.com" date="1666699200">- Add libtasn1-CVE-2021-46848.patch: Fixed off-by-one array size check
  that affects asn1_encode_simple_der (CVE-2021-46848, bsc#1204690).</changelog>
  <changelog author="pmonreal@suse.com" date="1739188800">- Security fix: [bsc#1236878, CVE-2024-12133]
  * Potential DoS in handling of numerous SEQUENCE OF or SET OF elements
  * Add libtasn1-CVE-2024-12133.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767960000">- Security fix: [bsc#1256341, CVE-2025-13151]
  * Stack-based buffer overflow. The function asn1_expend_octet_string()
    fails to validate the size of input data resulting in a buffer overflow.
  * Add libtasn1-CVE-2025-13151.patch</changelog>
</package>
<package pkgid="53ecc5aae8091adfcc70b87715a7128c0e4506dfbc3d11c3520a000f17c7bc2f" name="libtasn1-6-32bit" arch="x86_64">
  <version epoch="0" ver="4.13" rel="150000.4.14.1"/>
  <changelog author="jengelh@inai.de" date="1423915200">- Put C API documentation into -devel package.
  Use modern %make_install. Description fix.</changelog>
  <changelog author="mpluskal@suse.com" date="1427025600">- Update project url
- Cleanup spec-file with spec-cleaner
- Add info preun and post dependencies
- Update to 4.3
  * Added asn1_decode_simple_ber()
  * Only assign a value if the previous node has one (bsc#961491).</changelog>
  <changelog author="astieger@suse.com" date="1427630400">- update to libtasn1 4.4 [bsc#924828]:
  * Corrected a two-byte stack overflow in asn1_der_decoding.
    CVE-2015-2806</changelog>
  <changelog author="astieger@suse.com" date="1430481600">- update libtasn1 4.5:
  * Corrected an invalid memory access in octet string decoding.
    CVE-2015-3622 [boo#929414]</changelog>
  <changelog author="astieger@suse.com" date="1441627200">- libtasn1 4.6:
  * Allow decoding OCTET STRINGs with multi-byte tags.
  * Add asn1_get_object_id_der</changelog>
  <changelog author="zaitor@opensuse.org" date="1442404800">- Update to version 4.7:
  * Fixed regression introduced in the decoding of multi-byte tags
    fix.</changelog>
  <changelog author="mpluskal@suse.com" date="1460376000">- Update to 4.8
  * Fixes to avoid reliance on C undefined behavior.
  * Fixes to avoid an infinite recursion when decoding without the
    ASN1_DECODE_FLAG_STRICT_DER flag. Reported by Pascal Cuoq.
    (CVE-2016-4008 / bsc#982779)
  * Combined all the BER octet string decoding functions to a
    single one based on asn1_decode_simple_ber().</changelog>
  <changelog author="astieger@suse.com" date="1470830400">- update to 4.9:
  * Fix OID encoding of OIDs which have elements which exceed 2^32
- Do not treat i586 warning as error, adding upstream
  0001-configure-don-t-add-Werror-to-build-flags.patch
- fate#322523</changelog>
  <changelog author="astieger@suse.com" date="1496577600">- libtasn1 4.12:
  * Corrected so-name version
- includes changes in 4.11:
  * Introduce the ASN1_TIME_ENCODING_ERROR error code to indicate
    an invalid encoding in the DER time fields.
  * Introduced flag ASN1_DECODE_FLAG_ALLOW_INCORRECT_TIME. This flag
    allows decoding errors in time fields even when in strict DER mode.
    That is introduced in order to allow toleration of invalid times in
    X.509 certificates (which are common) even though strict DER adherence
    is enforced in other fields.
  * Added safety check in asn1_find_node(). That prevents a crash
    when a very long variable name is provided by the developer.
    Note that this to be exploited requires controlling the ASN.1
    definitions used by the developer, i.e., the 'name' parameter of
    asn1_write_value() or asn1_read_value(). The library is
    not designed to protect against malicious manipulation of the
    developer assigned variable names
- includes changes from 4.10:
  * Updated gnulib
  * Removed -Werror from default compiler flags
    (drop patch 0001-configure-don-t-add-Werror-to-build-flags.patch)
  * Fixed undefined behavior when negating integers in _asn1_ltostr().
  * Pass the correct length to _asn1_get_indefinite_length_string in
    asn1_get_length_ber. This addresses reading 1-byte past the end
    of data.</changelog>
  <changelog author="kbabioch@suse.com" date="1516363200">- update to 4.13
  * On indefinite string decoding, set a maximum level of allowed
    recursions (3) to protect the BER decoder from a stack exhaustion.
    (CVE-2018-6003 boo#1076832)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1556539200">- Add libtasn1-object-id-recursion.patch: limit recursion in
  _asn1_expand_object_id (boo#1105435 CVE-2018-1000654
  (https://gitlab.com/gnutls/libtasn1/merge_requests/8)</changelog>
  <changelog author="abergmann@suse.com" date="1666699200">- Add libtasn1-CVE-2021-46848.patch: Fixed off-by-one array size check
  that affects asn1_encode_simple_der (CVE-2021-46848, bsc#1204690).</changelog>
  <changelog author="pmonreal@suse.com" date="1739188800">- Security fix: [bsc#1236878, CVE-2024-12133]
  * Potential DoS in handling of numerous SEQUENCE OF or SET OF elements
  * Add libtasn1-CVE-2024-12133.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767960000">- Security fix: [bsc#1256341, CVE-2025-13151]
  * Stack-based buffer overflow. The function asn1_expend_octet_string()
    fails to validate the size of input data resulting in a buffer overflow.
  * Add libtasn1-CVE-2025-13151.patch</changelog>
</package>
<package pkgid="3f6f4dadfd8e67e381114008903927ca6dccde91b35345324318e04af651922f" name="libtasn1-6" arch="x86_64">
  <version epoch="0" ver="4.13" rel="150000.4.14.1"/>
  <changelog author="jengelh@inai.de" date="1423915200">- Put C API documentation into -devel package.
  Use modern %make_install. Description fix.</changelog>
  <changelog author="mpluskal@suse.com" date="1427025600">- Update project url
- Cleanup spec-file with spec-cleaner
- Add info preun and post dependencies
- Update to 4.3
  * Added asn1_decode_simple_ber()
  * Only assign a value if the previous node has one (bsc#961491).</changelog>
  <changelog author="astieger@suse.com" date="1427630400">- update to libtasn1 4.4 [bsc#924828]:
  * Corrected a two-byte stack overflow in asn1_der_decoding.
    CVE-2015-2806</changelog>
  <changelog author="astieger@suse.com" date="1430481600">- update libtasn1 4.5:
  * Corrected an invalid memory access in octet string decoding.
    CVE-2015-3622 [boo#929414]</changelog>
  <changelog author="astieger@suse.com" date="1441627200">- libtasn1 4.6:
  * Allow decoding OCTET STRINGs with multi-byte tags.
  * Add asn1_get_object_id_der</changelog>
  <changelog author="zaitor@opensuse.org" date="1442404800">- Update to version 4.7:
  * Fixed regression introduced in the decoding of multi-byte tags
    fix.</changelog>
  <changelog author="mpluskal@suse.com" date="1460376000">- Update to 4.8
  * Fixes to avoid reliance on C undefined behavior.
  * Fixes to avoid an infinite recursion when decoding without the
    ASN1_DECODE_FLAG_STRICT_DER flag. Reported by Pascal Cuoq.
    (CVE-2016-4008 / bsc#982779)
  * Combined all the BER octet string decoding functions to a
    single one based on asn1_decode_simple_ber().</changelog>
  <changelog author="astieger@suse.com" date="1470830400">- update to 4.9:
  * Fix OID encoding of OIDs which have elements which exceed 2^32
- Do not treat i586 warning as error, adding upstream
  0001-configure-don-t-add-Werror-to-build-flags.patch
- fate#322523</changelog>
  <changelog author="astieger@suse.com" date="1496577600">- libtasn1 4.12:
  * Corrected so-name version
- includes changes in 4.11:
  * Introduce the ASN1_TIME_ENCODING_ERROR error code to indicate
    an invalid encoding in the DER time fields.
  * Introduced flag ASN1_DECODE_FLAG_ALLOW_INCORRECT_TIME. This flag
    allows decoding errors in time fields even when in strict DER mode.
    That is introduced in order to allow toleration of invalid times in
    X.509 certificates (which are common) even though strict DER adherence
    is enforced in other fields.
  * Added safety check in asn1_find_node(). That prevents a crash
    when a very long variable name is provided by the developer.
    Note that this to be exploited requires controlling the ASN.1
    definitions used by the developer, i.e., the 'name' parameter of
    asn1_write_value() or asn1_read_value(). The library is
    not designed to protect against malicious manipulation of the
    developer assigned variable names
- includes changes from 4.10:
  * Updated gnulib
  * Removed -Werror from default compiler flags
    (drop patch 0001-configure-don-t-add-Werror-to-build-flags.patch)
  * Fixed undefined behavior when negating integers in _asn1_ltostr().
  * Pass the correct length to _asn1_get_indefinite_length_string in
    asn1_get_length_ber. This addresses reading 1-byte past the end
    of data.</changelog>
  <changelog author="kbabioch@suse.com" date="1516363200">- update to 4.13
  * On indefinite string decoding, set a maximum level of allowed
    recursions (3) to protect the BER decoder from a stack exhaustion.
    (CVE-2018-6003 boo#1076832)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1556539200">- Add libtasn1-object-id-recursion.patch: limit recursion in
  _asn1_expand_object_id (boo#1105435 CVE-2018-1000654
  (https://gitlab.com/gnutls/libtasn1/merge_requests/8)</changelog>
  <changelog author="abergmann@suse.com" date="1666699200">- Add libtasn1-CVE-2021-46848.patch: Fixed off-by-one array size check
  that affects asn1_encode_simple_der (CVE-2021-46848, bsc#1204690).</changelog>
  <changelog author="pmonreal@suse.com" date="1739188800">- Security fix: [bsc#1236878, CVE-2024-12133]
  * Potential DoS in handling of numerous SEQUENCE OF or SET OF elements
  * Add libtasn1-CVE-2024-12133.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767960000">- Security fix: [bsc#1256341, CVE-2025-13151]
  * Stack-based buffer overflow. The function asn1_expend_octet_string()
    fails to validate the size of input data resulting in a buffer overflow.
  * Add libtasn1-CVE-2025-13151.patch</changelog>
</package>
<package pkgid="73ec154c1555f308f2a1b09f80fd90874a3381555480381ce121596c5fe3727b" name="libtasn1-devel" arch="x86_64">
  <version epoch="0" ver="4.13" rel="150000.4.14.1"/>
  <changelog author="jengelh@inai.de" date="1423915200">- Put C API documentation into -devel package.
  Use modern %make_install. Description fix.</changelog>
  <changelog author="mpluskal@suse.com" date="1427025600">- Update project url
- Cleanup spec-file with spec-cleaner
- Add info preun and post dependencies
- Update to 4.3
  * Added asn1_decode_simple_ber()
  * Only assign a value if the previous node has one (bsc#961491).</changelog>
  <changelog author="astieger@suse.com" date="1427630400">- update to libtasn1 4.4 [bsc#924828]:
  * Corrected a two-byte stack overflow in asn1_der_decoding.
    CVE-2015-2806</changelog>
  <changelog author="astieger@suse.com" date="1430481600">- update libtasn1 4.5:
  * Corrected an invalid memory access in octet string decoding.
    CVE-2015-3622 [boo#929414]</changelog>
  <changelog author="astieger@suse.com" date="1441627200">- libtasn1 4.6:
  * Allow decoding OCTET STRINGs with multi-byte tags.
  * Add asn1_get_object_id_der</changelog>
  <changelog author="zaitor@opensuse.org" date="1442404800">- Update to version 4.7:
  * Fixed regression introduced in the decoding of multi-byte tags
    fix.</changelog>
  <changelog author="mpluskal@suse.com" date="1460376000">- Update to 4.8
  * Fixes to avoid reliance on C undefined behavior.
  * Fixes to avoid an infinite recursion when decoding without the
    ASN1_DECODE_FLAG_STRICT_DER flag. Reported by Pascal Cuoq.
    (CVE-2016-4008 / bsc#982779)
  * Combined all the BER octet string decoding functions to a
    single one based on asn1_decode_simple_ber().</changelog>
  <changelog author="astieger@suse.com" date="1470830400">- update to 4.9:
  * Fix OID encoding of OIDs which have elements which exceed 2^32
- Do not treat i586 warning as error, adding upstream
  0001-configure-don-t-add-Werror-to-build-flags.patch
- fate#322523</changelog>
  <changelog author="astieger@suse.com" date="1496577600">- libtasn1 4.12:
  * Corrected so-name version
- includes changes in 4.11:
  * Introduce the ASN1_TIME_ENCODING_ERROR error code to indicate
    an invalid encoding in the DER time fields.
  * Introduced flag ASN1_DECODE_FLAG_ALLOW_INCORRECT_TIME. This flag
    allows decoding errors in time fields even when in strict DER mode.
    That is introduced in order to allow toleration of invalid times in
    X.509 certificates (which are common) even though strict DER adherence
    is enforced in other fields.
  * Added safety check in asn1_find_node(). That prevents a crash
    when a very long variable name is provided by the developer.
    Note that this to be exploited requires controlling the ASN.1
    definitions used by the developer, i.e., the 'name' parameter of
    asn1_write_value() or asn1_read_value(). The library is
    not designed to protect against malicious manipulation of the
    developer assigned variable names
- includes changes from 4.10:
  * Updated gnulib
  * Removed -Werror from default compiler flags
    (drop patch 0001-configure-don-t-add-Werror-to-build-flags.patch)
  * Fixed undefined behavior when negating integers in _asn1_ltostr().
  * Pass the correct length to _asn1_get_indefinite_length_string in
    asn1_get_length_ber. This addresses reading 1-byte past the end
    of data.</changelog>
  <changelog author="kbabioch@suse.com" date="1516363200">- update to 4.13
  * On indefinite string decoding, set a maximum level of allowed
    recursions (3) to protect the BER decoder from a stack exhaustion.
    (CVE-2018-6003 boo#1076832)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mgorse@suse.com" date="1556539200">- Add libtasn1-object-id-recursion.patch: limit recursion in
  _asn1_expand_object_id (boo#1105435 CVE-2018-1000654
  (https://gitlab.com/gnutls/libtasn1/merge_requests/8)</changelog>
  <changelog author="abergmann@suse.com" date="1666699200">- Add libtasn1-CVE-2021-46848.patch: Fixed off-by-one array size check
  that affects asn1_encode_simple_der (CVE-2021-46848, bsc#1204690).</changelog>
  <changelog author="pmonreal@suse.com" date="1739188800">- Security fix: [bsc#1236878, CVE-2024-12133]
  * Potential DoS in handling of numerous SEQUENCE OF or SET OF elements
  * Add libtasn1-CVE-2024-12133.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1767960000">- Security fix: [bsc#1256341, CVE-2025-13151]
  * Stack-based buffer overflow. The function asn1_expend_octet_string()
    fails to validate the size of input data resulting in a buffer overflow.
  * Add libtasn1-CVE-2025-13151.patch</changelog>
</package>
<package pkgid="5a0876b5ad887c9bcd7a6bfca08fe472c0c0b3a316f12b9050f5d7c71d3e8667" name="libtcnative-1-0" arch="src">
  <version epoch="0" ver="1.3.7" rel="150600.16.3.1"/>
  <changelog author="mvyskocil@suse.cz" date="1244030400">- Tomcat update to 6.0.20
- APR update to 1.3.3 - the bugfix release</changelog>
  <changelog author="ro@suse.de" date="1268740800">- build from tomcat-native-1.1.20-src.tar.gz
- package needs work, does not have to live in tomcat src any more</changelog>
  <changelog author="mvyskocil@suse.cz" date="1281009600">- fixes bnc#622430 - move .so file to main package</changelog>
  <changelog author="mvyskocil@suse.cz" date="1331812800">- update to 1.1.23 - latest upstream version
  * autodetect java7
  * better support for ipv6
  * OCSP verification support
  * explicit use in FIPS mode allowed
  * and fixes many bugs, leaks and crashes
- split the spec from tomcat6 sources as it was never needed</changelog>
  <changelog author="kruber@zib.de" date="1354795200">- update to 1.1.24
  * add support for per-socket timeouts inside poller</changelog>
  <changelog author="schwab@suse.de" date="1364731200">- config-guess-sub-update.patch: update config.guess/sub for aarch64</changelog>
  <changelog author="mvyskocil@suse.com" date="1379073600">- Update to 1.1.27 (bugfix release)
  * fix high CUP usage on client's IP address change
  * add CPU information to OS info for Linux
  * fix FIPS mode for listeners; resolves 'Low level API
    call to digest MD5 forbidden in FIPS mode!' errors.
  * update add clearOptions function to allow access to
    OpenSSL's SSL_CTX_clear_options function.
  * fix regression in pollset return value.
- add gpg verification
- add javapackages-tools
- drop config-guess-sub-update.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1398600000">- version 1.1.30
  * Fixed double-free in ssl_ocsp_request. Patch provided by
  Aristotelis.
  * Other minor bugfixes.
- openSUSE: Fix build when openssl does not have SSLv2 support.
  (tomcat-native-nosslv2.patch)</changelog>
  <changelog author="p.drouand@gmail.com" date="1424347200">- Update to version 1.1.32
  * Fix: 53952: Add support for TLSv1.2 and TLSv1.1.
  * Fix: 56844: Use OpenSSL 1.0.1j with Windows binaries.
  * Update: Use APR 1.5.1 with Windows binaries
- Remove tomcat-native-nosslv2.patch; merged on upstream release
- Remove %gpg_verify tag and gpg-offline require; let OBS handles
  gpg verification</changelog>
  <changelog author="tchvatal@suse.com" date="1424865600">- Remove keyring file as there is new keyring and I didn't find it
  on the web</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Version update to version 1.2.4:
  * See changelog.html for in-depth upstream changes
  * This connector to properly work requires openssl 1.0.2 or newer
    so do not backport to other codestreams.</changelog>
  <changelog author="fstrba@suse.com" date="1511784000">- Version update to version 1.2.16:
  * See changelog.html for in-depth upstream changes
  * Fixes build breakage with newer version of openssl</changelog>
  <changelog author="malbu@suse.com" date="1559822400">- Version update to version 1.2.21:
  * See changelog.html for in-depth upstream changes
  * Fix incompatibility with Tomcat (bsc#1130843)</changelog>
  <changelog author="malbu@suse.com" date="1565611200">- Version update to version 1.2.23:
  * See changelog.html for in-depth upstream changes</changelog>
  <changelog author="malbu@suse.com" date="1573128000">- Add GPG keyring.</changelog>
  <changelog author="pgajdos@suse.com" date="1659096000">- Fix for SG#63251, bsc#1199170 (thanks to ohollmann@suse.com)
- added patches
  fix https://github.com/apache/tomcat-native/commit/5ac1175a0cf24aae2a285b3f3fb877ff83aef0c0
  + libtcnative-1-0-bsc1199170.patch</changelog>
  <changelog author="michele.bussolotto@suse.com" date="1699963200">- Version update to version 1.2.38:
  * Align default pass phrase prompt with HTTPd.
  * #66669: Fix memory leak in SNI processing.
  * Update the recommended minimum version of OpenSSL to 1.1.1v.
  * Update the recommended minimum version of APR to 1.7.4.
  * Document the TLS rengotiation behaviour.
  * Add HOWTO-RELEASE.txt that describes the release process.
  * Refactor library initialization so it is compatible with Tomcat
    10.1.x onwards where a number of Java classes have been removed.
  * Map the OpenSSL 3.x FIPS behaviour to the OpenSSL 1.x API to
    allow clients to determine if the FIPS provider is being used
    when Tomcat Native is compiled against OpenSSL 3.x.
  * #66035: Fix crash when attempting to read TLS session ID after
    a handshake failure.
  * Enable download_deps.sh to be called from any directory.
  * Fix release script so it works with the current git layout.
  * #65441: Correct previous fix that enabled building to continue
    with OpenSSL 3.x.
  * #65659: Remove remaining reference to pkg-config which is no
    longer included in the Tomcat Native distribution.
  * #65181: Additional changes required to provided support for
    using OpenSSL Engines that use proprietary key formats.
  * #65329: Correct handling of WINVER in make file to use correct
    constant for Windows 7. Add constants for Windows 8, Windows 8.1
    and Windows 10. Rename WINNT to WIN2k as it is used for Windows
    2000 upwards, not Windows NT upwards.
  * Add a patch for APR that fixes an issue where some Windows
    systems in some configurations would only listen on IPv6
    addresses on dual stack systems even though configured to listen
    on both IPv6 and IPv4 addresses.
  * Correct a regression in the fix for 65181 that prevented an
    error message from being displayed if an invalid key file was
    provided and no OpenSSL Engine was configured.
  * #65181: Improve support for using OpenSSL Engines that use
    proprietary key formats.
  * Enable building to continue against OpenSSL 3.x and 1.1.1.
  * Incomplete name mangling fix for C++ compilers in tcn_api.h.
  * Improve OS-specific header include for native thread id.
  * Disable keylog callback support for LibreSSL.
  * Add support for SSLContext.addChainCertificateRaw() with
    LibreSSL 2.9.1 and up.
  * Add support for HP-UX's _lwp_self() in our ssl_thread_id(void).
  * Remove default option passed for rpath to linker on HP-UX.
  * Add an option to allow the OCSP responder check to be bypassed.
    Note that if OCSP is enabled, a missing responder is now treated
    as an error.
  * #64429: Fix compilation with LibreSSL.
  * #63671: libtcnative does not compile with OpenSSL &lt; 1.1.0 and
    APR w/o threading support.
  * Correct configure message for OpenSSL libdir.
  * #64260: Clean up install target.
  * #64315: configure output for OpenSSL wrong/incomplete sometimes.
  * Drop obsolete build time workarounds for HP-UX.
  * Add support for FreeBSD's pthread_getthreadid_np() in our
    ssl_thread_id(void).
  * #64316: Introduce tcn_get_thread_id(void) to reduce code
    duplication.
  * Fix linking against OpenSSL in non-standard locations on FreeBSD.
- Removed patch:
  * libtcnative-1-0-bsc1199170.patch
    + fix integrated</changelog>
  <changelog author="pmonreal@suse.com" date="1707825600">- Update to 1.2.39:
  * Fix: 67061: If the insecure optionalNoCA certificate verification
    mode is used, disable OCSP if enabled else client certificates
    from unknown certificate authorities will be rejected.
  * Update: Update the recommended minimum version of OpenSSL to
    3.0.11.
  * Change the hardcoded libopenssl-1_1-devel to libopenssl-devel
    for distributions that have the right version</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="pgajdos@suse.com" date="1774440000">- Update to 1.3.7: [bsc#1260322]
  1.3.7
  * Code: Refactor access to ASN1_OCTET_STRING to use setters to fix
    errors when building against the latest OpenSSL 4.0.x code. (markt)
  * Fix: Fix the handling of OCSP requests with multiple responder URIs.
    (jfclere)
  * Fix: Fix the handling of TRY_AGAIN responses to OCSP requests when
    soft fail is disabled. (jfclere)
  1.3.6
  * Code: Refactor the SSL_CONF_CTX clean-up to align it with SSL and
    SSL_CTX clean-up. (markt)
  * Fix: Fix unnecessarily large buffer allocation when filtering out NULL
    and export ciphers. Pull requests #35 and #37 provided by chenjp.
    (markt)
  * Fix: Fix a potential memory leak if an invalid OpenSSLConf is
    provided. Pull request #36 provided by chenjp. (markt)
  * Fix: Refactor setting of OCSP configuration defaults as they were only
    applied if the SSL_CONF_CTX was used. While one was always used with
    Tomcat versions aware of the OCSP configuration options, one was not
    always used with Tomcat versions unaware of the OCSP configuration
    options leading to OCSP verification being enabled by default when the
    expected behaviour was disabled by default. (markt)
  * Code: Improve performance for the rare case of handling large OCSP
    responses. (markt)
  1.3.5
  * Fix: Remove group write permissions from the files in the tar.gz
    source archive. (markt)
  * Fix: Clear an additional error in OCSP processing that was preventing
    OCSP soft fail working with Tomcat's APR/native connector. (markt)
  1.3.4
  * Fix: Correct logic error that prevented the configuration of TLS 1.3
    cipher suites. (markt)
  1.3.3
  * Fix: Refactor the addition of TLS 1.3 cipher suite configuration to
    avoid a regression when running a version of Tomcat that pre-dates
    this change. (markt)
  1.3.2
  * Update: Rename configure.in to modern autotools style configure.ac.
    (rjung)
  * Update: Fix incomplete updates for autotools generated files during
    "buildconf" execution. (rjung)
  * Update: Improve quoting in tcnative.m4. (rjung)
  * Update: Update the minimum version of autoconf for releasing to 2.68.
    (rjung)
  * Fix: Fix the autoconf warnings when creating a release. (markt)
  * Update: The Windows binaries are now built with OCSP support enabled
    by default. (markt)
  * Add: Include a nonce with OCSP requests and check the nonce, if any,
    in the OCSP response. (markt)
  * Add: Expand verification of OCSP responses. (markt)
  * Add: Add the ability to configure the OCSP checks to soft-fail - i.e.
    if the responder cannot be contacted or fails to respond in a timely
    manner the OCSP check will not fail. (markt)
  * Add: Add a configurable timeout to the writing of OCSP requests and
    reading of OCSP responses. (markt)
  * Add: Add the ability to control the OCSP verification flags. (markt)
  * Add: Configure TLS 1.3 connections from the provided ciphers list as
    well as connections using TLS 1.2 and earlier. Pull request provided
    by gastush. (markt)
  * Update: Update the Windows build environment to use Visual Studio
    2022. (markt)
  1.3.1
  * Fix: Fix a crash on Windows when SSLContext.setCACertificate() is
    invoked with a null value for caCertificateFile and a non-null value
    for caCertificatePath until properly addressed with
    https://github.com/openssl/openssl/issues/24416. (michaelo)
  * Add: Use ERR_error_string_n with a definite buffer length as a named
    constant. (schultz)
  * Add: Ensure local reference capacity is available when creating new
    arrays and Strings. (schultz)
  * Update: Update the recommended minimum version of OpenSSL to 3.0.14.
    (markt)
  1.3.0
  * Update: Drop useless compile.optimize option. (michaelo)
  * Update: Align Java source compile configuration with Tomcat.
    (michaelo)
  * Fix: Fix version set in DLL header on Windows. (michaelo)
  * Update: Remove an unreachable if condition around CRLs in
    sslcontext.c. (michaelo)
  * Fix: 67818: When calling SSL.setVerify() or SSLContext.setVerify(),
    the default verify paths are no longer set. Only the explicitly
    configured trust store, if any, will be used. (michaelo)
  * Update: Update the minimum supported version of LibreSSL to 3.5.2.
    (markt)
  * Design: Remove NPN support as NPN was never standardised and browser
    support was removed in 2019. (markt)
  * Update: Update the recommended minimum version of OpenSSL to 3.0.13.
    (markt)</changelog>
</package>
<package pkgid="cb548547c8ff9367e1a62515ac89088a7c371f76cf113dd8759e3b1ffd9f3bac" name="libtcnative-1-0" arch="x86_64">
  <version epoch="0" ver="1.3.7" rel="150600.16.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1424347200">- Update to version 1.1.32
  * Fix: 53952: Add support for TLSv1.2 and TLSv1.1.
  * Fix: 56844: Use OpenSSL 1.0.1j with Windows binaries.
  * Update: Use APR 1.5.1 with Windows binaries
- Remove tomcat-native-nosslv2.patch; merged on upstream release
- Remove %gpg_verify tag and gpg-offline require; let OBS handles
  gpg verification</changelog>
  <changelog author="tchvatal@suse.com" date="1424865600">- Remove keyring file as there is new keyring and I didn't find it
  on the web</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Version update to version 1.2.4:
  * See changelog.html for in-depth upstream changes
  * This connector to properly work requires openssl 1.0.2 or newer
    so do not backport to other codestreams.</changelog>
  <changelog author="fstrba@suse.com" date="1511784000">- Version update to version 1.2.16:
  * See changelog.html for in-depth upstream changes
  * Fixes build breakage with newer version of openssl</changelog>
  <changelog author="malbu@suse.com" date="1559822400">- Version update to version 1.2.21:
  * See changelog.html for in-depth upstream changes
  * Fix incompatibility with Tomcat (bsc#1130843)</changelog>
  <changelog author="malbu@suse.com" date="1565611200">- Version update to version 1.2.23:
  * See changelog.html for in-depth upstream changes</changelog>
  <changelog author="malbu@suse.com" date="1573128000">- Add GPG keyring.</changelog>
  <changelog author="pgajdos@suse.com" date="1659096000">- Fix for SG#63251, bsc#1199170 (thanks to ohollmann@suse.com)
- added patches
  fix https://github.com/apache/tomcat-native/commit/5ac1175a0cf24aae2a285b3f3fb877ff83aef0c0
  + libtcnative-1-0-bsc1199170.patch</changelog>
  <changelog author="michele.bussolotto@suse.com" date="1699963200">- Version update to version 1.2.38:
  * Align default pass phrase prompt with HTTPd.
  * #66669: Fix memory leak in SNI processing.
  * Update the recommended minimum version of OpenSSL to 1.1.1v.
  * Update the recommended minimum version of APR to 1.7.4.
  * Document the TLS rengotiation behaviour.
  * Add HOWTO-RELEASE.txt that describes the release process.
  * Refactor library initialization so it is compatible with Tomcat
    10.1.x onwards where a number of Java classes have been removed.
  * Map the OpenSSL 3.x FIPS behaviour to the OpenSSL 1.x API to
    allow clients to determine if the FIPS provider is being used
    when Tomcat Native is compiled against OpenSSL 3.x.
  * #66035: Fix crash when attempting to read TLS session ID after
    a handshake failure.
  * Enable download_deps.sh to be called from any directory.
  * Fix release script so it works with the current git layout.
  * #65441: Correct previous fix that enabled building to continue
    with OpenSSL 3.x.
  * #65659: Remove remaining reference to pkg-config which is no
    longer included in the Tomcat Native distribution.
  * #65181: Additional changes required to provided support for
    using OpenSSL Engines that use proprietary key formats.
  * #65329: Correct handling of WINVER in make file to use correct
    constant for Windows 7. Add constants for Windows 8, Windows 8.1
    and Windows 10. Rename WINNT to WIN2k as it is used for Windows
    2000 upwards, not Windows NT upwards.
  * Add a patch for APR that fixes an issue where some Windows
    systems in some configurations would only listen on IPv6
    addresses on dual stack systems even though configured to listen
    on both IPv6 and IPv4 addresses.
  * Correct a regression in the fix for 65181 that prevented an
    error message from being displayed if an invalid key file was
    provided and no OpenSSL Engine was configured.
  * #65181: Improve support for using OpenSSL Engines that use
    proprietary key formats.
  * Enable building to continue against OpenSSL 3.x and 1.1.1.
  * Incomplete name mangling fix for C++ compilers in tcn_api.h.
  * Improve OS-specific header include for native thread id.
  * Disable keylog callback support for LibreSSL.
  * Add support for SSLContext.addChainCertificateRaw() with
    LibreSSL 2.9.1 and up.
  * Add support for HP-UX's _lwp_self() in our ssl_thread_id(void).
  * Remove default option passed for rpath to linker on HP-UX.
  * Add an option to allow the OCSP responder check to be bypassed.
    Note that if OCSP is enabled, a missing responder is now treated
    as an error.
  * #64429: Fix compilation with LibreSSL.
  * #63671: libtcnative does not compile with OpenSSL &lt; 1.1.0 and
    APR w/o threading support.
  * Correct configure message for OpenSSL libdir.
  * #64260: Clean up install target.
  * #64315: configure output for OpenSSL wrong/incomplete sometimes.
  * Drop obsolete build time workarounds for HP-UX.
  * Add support for FreeBSD's pthread_getthreadid_np() in our
    ssl_thread_id(void).
  * #64316: Introduce tcn_get_thread_id(void) to reduce code
    duplication.
  * Fix linking against OpenSSL in non-standard locations on FreeBSD.
- Removed patch:
  * libtcnative-1-0-bsc1199170.patch
    + fix integrated</changelog>
  <changelog author="pmonreal@suse.com" date="1707825600">- Update to 1.2.39:
  * Fix: 67061: If the insecure optionalNoCA certificate verification
    mode is used, disable OCSP if enabled else client certificates
    from unknown certificate authorities will be rejected.
  * Update: Update the recommended minimum version of OpenSSL to
    3.0.11.
  * Change the hardcoded libopenssl-1_1-devel to libopenssl-devel
    for distributions that have the right version</changelog>
  <changelog author="fstrba@suse.com" date="1727611200">- Fix build after removal of the default %%{java_home} define</changelog>
  <changelog author="pgajdos@suse.com" date="1774440000">- Update to 1.3.7: [bsc#1260322]
  1.3.7
  * Code: Refactor access to ASN1_OCTET_STRING to use setters to fix
    errors when building against the latest OpenSSL 4.0.x code. (markt)
  * Fix: Fix the handling of OCSP requests with multiple responder URIs.
    (jfclere)
  * Fix: Fix the handling of TRY_AGAIN responses to OCSP requests when
    soft fail is disabled. (jfclere)
  1.3.6
  * Code: Refactor the SSL_CONF_CTX clean-up to align it with SSL and
    SSL_CTX clean-up. (markt)
  * Fix: Fix unnecessarily large buffer allocation when filtering out NULL
    and export ciphers. Pull requests #35 and #37 provided by chenjp.
    (markt)
  * Fix: Fix a potential memory leak if an invalid OpenSSLConf is
    provided. Pull request #36 provided by chenjp. (markt)
  * Fix: Refactor setting of OCSP configuration defaults as they were only
    applied if the SSL_CONF_CTX was used. While one was always used with
    Tomcat versions aware of the OCSP configuration options, one was not
    always used with Tomcat versions unaware of the OCSP configuration
    options leading to OCSP verification being enabled by default when the
    expected behaviour was disabled by default. (markt)
  * Code: Improve performance for the rare case of handling large OCSP
    responses. (markt)
  1.3.5
  * Fix: Remove group write permissions from the files in the tar.gz
    source archive. (markt)
  * Fix: Clear an additional error in OCSP processing that was preventing
    OCSP soft fail working with Tomcat's APR/native connector. (markt)
  1.3.4
  * Fix: Correct logic error that prevented the configuration of TLS 1.3
    cipher suites. (markt)
  1.3.3
  * Fix: Refactor the addition of TLS 1.3 cipher suite configuration to
    avoid a regression when running a version of Tomcat that pre-dates
    this change. (markt)
  1.3.2
  * Update: Rename configure.in to modern autotools style configure.ac.
    (rjung)
  * Update: Fix incomplete updates for autotools generated files during
    "buildconf" execution. (rjung)
  * Update: Improve quoting in tcnative.m4. (rjung)
  * Update: Update the minimum version of autoconf for releasing to 2.68.
    (rjung)
  * Fix: Fix the autoconf warnings when creating a release. (markt)
  * Update: The Windows binaries are now built with OCSP support enabled
    by default. (markt)
  * Add: Include a nonce with OCSP requests and check the nonce, if any,
    in the OCSP response. (markt)
  * Add: Expand verification of OCSP responses. (markt)
  * Add: Add the ability to configure the OCSP checks to soft-fail - i.e.
    if the responder cannot be contacted or fails to respond in a timely
    manner the OCSP check will not fail. (markt)
  * Add: Add a configurable timeout to the writing of OCSP requests and
    reading of OCSP responses. (markt)
  * Add: Add the ability to control the OCSP verification flags. (markt)
  * Add: Configure TLS 1.3 connections from the provided ciphers list as
    well as connections using TLS 1.2 and earlier. Pull request provided
    by gastush. (markt)
  * Update: Update the Windows build environment to use Visual Studio
    2022. (markt)
  1.3.1
  * Fix: Fix a crash on Windows when SSLContext.setCACertificate() is
    invoked with a null value for caCertificateFile and a non-null value
    for caCertificatePath until properly addressed with
    https://github.com/openssl/openssl/issues/24416. (michaelo)
  * Add: Use ERR_error_string_n with a definite buffer length as a named
    constant. (schultz)
  * Add: Ensure local reference capacity is available when creating new
    arrays and Strings. (schultz)
  * Update: Update the recommended minimum version of OpenSSL to 3.0.14.
    (markt)
  1.3.0
  * Update: Drop useless compile.optimize option. (michaelo)
  * Update: Align Java source compile configuration with Tomcat.
    (michaelo)
  * Fix: Fix version set in DLL header on Windows. (michaelo)
  * Update: Remove an unreachable if condition around CRLs in
    sslcontext.c. (michaelo)
  * Fix: 67818: When calling SSL.setVerify() or SSLContext.setVerify(),
    the default verify paths are no longer set. Only the explicitly
    configured trust store, if any, will be used. (michaelo)
  * Update: Update the minimum supported version of LibreSSL to 3.5.2.
    (markt)
  * Design: Remove NPN support as NPN was never standardised and browser
    support was removed in 2019. (markt)
  * Update: Update the recommended minimum version of OpenSSL to 3.0.13.
    (markt)</changelog>
</package>
<package pkgid="569541691999944c3b21c5cf7de743d2b74e5b6391bf289a30396bebae8e97f9" name="libteam" arch="src">
  <version epoch="0" ver="1.27" rel="150000.4.18.1"/>
  <changelog author="jengelh@inai.de" date="1375963200">- Update to new upstream release 1.5
  * lacp: introduce multiple aggregator selection policies
  * lacp: allow to have multiple functions to find out which port
  is better
  * lacp: introduce agg select policy based on per-port config
  options
  * teamd: introduce simple SR-IOV support
  * lacp: do not set state disable if driver does not report speed
  and duplex
  * teamd: add support for multicast group rejoin sending
  * utils: add bond2team conversion tool</changelog>
  <changelog author="jengelh@inai.de" date="1405944000">- Update to new upstream release 1.11
  * add support for TIPC link watcher
  * teamd quits when the device is removed
  * teamd: add support for checking multiple ports IFLA_PHYS_PORT_ID</changelog>
  <changelog author="jengelh@inai.de" date="1420718400">- Update to new upstream release 1.15
  * Topology-aware failover with TIPC</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 1.16
  * teamdctl: show port link down count in state output
  * teamd: lw: count how many times has been the port down</changelog>
  <changelog author="jengelh@inai.de" date="1438344000">- Update to new upstream release 1.17
  * teamd: lw: nsna_ping: fix NA RX and ARP RX handling
  * libteam: ifinfo: fix rtnl dellink handling</changelog>
  <changelog author="jengelh@inai.de" date="1441800000">- Update to new upstream release 1.18
  * teamd: lacp: change actor system value on team MAC change
  * Fix sending duplicate LACP frames at the start of establishing
  a logical channel.
  * Fix teamd memory corruption issues seen by missing port unlink
  in ifinfo_destroy()
  * libteam: Add check to disallow creating device names longer than
  15 characters.</changelog>
  <changelog author="jengelh@inai.de" date="1455192000">- Update to new upstream release 1.22
  * teamd: Fix member port state change on master team admin UP.
  * teamd: add CAP_NET_RAW capability for LACP packet sockets
  * teamd: lacp: update actor state before sending LACP frames</changelog>
  <changelog author="jengelh@inai.de" date="1479729600">- Update to new upstream release 1.26
  * dbus: don't do &lt;deny send_interface="..." /&gt; in template
    dbus s. f.
  * teamd: do correct l3/l4 tx hashing with vlans
  * teamd: lacp: use original hwaddr as source address in lacpdus
  * libteam: fix TEAM_OPTION_TYPE_BOOL type for big-endian
    architectures
  * teamd: handle vlan 0 packets
  * misc: fix an out-of-bound write with zero-length
    hardware address
  * teamd: fix the issue that network blocks when issuing
    `systemctl stop teamd`
  * teamd: lacp: Do not unselect port if it changes state
    to "expired"</changelog>
  <changelog author="ndas@suse.de" date="1511352000">- sync with SLES changes(bsc#1055708)
  * Add check_if_psr_ops_were_initialized.patch:
  * * Fix teamd segfault when link_watch initialization callbacks fail
  (e.g. lw_psr_port_added() in case of activebackup runner) due to
  an attempt to change hwaddr on an enslaved, link up port device.
  Note: enslavement triggers initialization callbacks.
  * Add ignore_ebusy_for_team_hwaddr_set.patch:
  * * Make PortAdd and PortRemove dbus methods work for all runners.
  Ignore attempts to change hwaddr of an already enslaved devices.
  (fate#318389,fate#317728,fate#316923)
- Add start_teamd_from_usr_sbin.patch:
  * Modify service file to start teamd instance from /usr/sbin.</changelog>
  <changelog author="jengelh@inai.de" date="1511352001">- Do not suppress errors from useradd</changelog>
  <changelog author="jengelh@inai.de" date="1511352002">- Update to new upstream release 1.27
  * teamd: escape some sensitive characters in ifname with
    double quotation marks
  * libteam: resynchronize ifinfo after lost RTNLGRP_LINK
    notifications
  * teamd: check port link_up when a port is added with
    loadbalance runner</changelog>
  <changelog author="ndas@suse.de" date="1511352003">- allow send_interface in dbus conf file for wicked.
  [+ 0001-allow-send_interface-dbus.patch]</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Remove defattr that is not really needed
- Add condition around python bindings, they are really based on
  swig code that would need to be rewritten to support python3</changelog>
  <changelog author="jengelh@inai.de" date="1515153600">- Drop /pkg/ subpart from includedir</changelog>
  <changelog author="otto.hollmann@suse.com" date="1636718400">- teamd: better handle failures to chown(TEAMD_RUN_DIR) during
  teamd_drop_privileges() (bsc#1185424)
  [+ better_handle_failures_to_chown.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1662724800">- Add teamd-config-update-local-prio-to-kernel.patch (bsc#1200505)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1687780800">- Add option to change evaluation logic of multiple link-watchers (jsc#PED-2209)
  Add 0001-teamd-Add-option-to-change-evaluation-logic-of-multi.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1695211200">- man teamd.conf: Document ARP Ping link_watch.vlanid option (bsc#1215527)
  * Add 0001-man-teamd.conf-Document-ARP-Ping-link_watch.vlanid-o.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1716465600">- teamd: lw: arp_ping: bitmask VID in VLAN BPF filter [bsc#1224798]
  * Add 0001-teamd-lw-arp_ping-bitmask-VID-in-VLAN-BPF-filter.patch</changelog>
  <changelog author="ali.abdallah@suse.com" date="1771243200">- Fix for SG#71622, bsc#1258224:
  * 0001-teamd-add-port_hwaddr_changed-for-ab-runner.patch:
    [PATCH] teamd: add port_hwaddr_changed for ab runner
  * 0001-teamd-add-port_hwaddr_changed-for-lacp-runner.patch:
    [PATCH] teamd: add port_hwaddr_changed for lacp runner
  * 0001-teamd-add-port_hwaddr_changed-for-lb-runner.patch:
    [PATCH] teamd: add port_hwaddr_changed for lb runner</changelog>
</package>
<package pkgid="214cc97162527683a2284100c378d604631d4d972894395410595a4acbcf5868" name="libteam" arch="src">
  <version epoch="0" ver="1.27" rel="150000.4.21.1"/>
  <changelog author="jengelh@inai.de" date="1405944000">- Update to new upstream release 1.11
  * add support for TIPC link watcher
  * teamd quits when the device is removed
  * teamd: add support for checking multiple ports IFLA_PHYS_PORT_ID</changelog>
  <changelog author="jengelh@inai.de" date="1420718400">- Update to new upstream release 1.15
  * Topology-aware failover with TIPC</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 1.16
  * teamdctl: show port link down count in state output
  * teamd: lw: count how many times has been the port down</changelog>
  <changelog author="jengelh@inai.de" date="1438344000">- Update to new upstream release 1.17
  * teamd: lw: nsna_ping: fix NA RX and ARP RX handling
  * libteam: ifinfo: fix rtnl dellink handling</changelog>
  <changelog author="jengelh@inai.de" date="1441800000">- Update to new upstream release 1.18
  * teamd: lacp: change actor system value on team MAC change
  * Fix sending duplicate LACP frames at the start of establishing
  a logical channel.
  * Fix teamd memory corruption issues seen by missing port unlink
  in ifinfo_destroy()
  * libteam: Add check to disallow creating device names longer than
  15 characters.</changelog>
  <changelog author="jengelh@inai.de" date="1455192000">- Update to new upstream release 1.22
  * teamd: Fix member port state change on master team admin UP.
  * teamd: add CAP_NET_RAW capability for LACP packet sockets
  * teamd: lacp: update actor state before sending LACP frames</changelog>
  <changelog author="jengelh@inai.de" date="1479729600">- Update to new upstream release 1.26
  * dbus: don't do &lt;deny send_interface="..." /&gt; in template
    dbus s. f.
  * teamd: do correct l3/l4 tx hashing with vlans
  * teamd: lacp: use original hwaddr as source address in lacpdus
  * libteam: fix TEAM_OPTION_TYPE_BOOL type for big-endian
    architectures
  * teamd: handle vlan 0 packets
  * misc: fix an out-of-bound write with zero-length
    hardware address
  * teamd: fix the issue that network blocks when issuing
    `systemctl stop teamd`
  * teamd: lacp: Do not unselect port if it changes state
    to "expired"</changelog>
  <changelog author="ndas@suse.de" date="1511352000">- sync with SLES changes(bsc#1055708)
  * Add check_if_psr_ops_were_initialized.patch:
  * * Fix teamd segfault when link_watch initialization callbacks fail
  (e.g. lw_psr_port_added() in case of activebackup runner) due to
  an attempt to change hwaddr on an enslaved, link up port device.
  Note: enslavement triggers initialization callbacks.
  * Add ignore_ebusy_for_team_hwaddr_set.patch:
  * * Make PortAdd and PortRemove dbus methods work for all runners.
  Ignore attempts to change hwaddr of an already enslaved devices.
  (fate#318389,fate#317728,fate#316923)
- Add start_teamd_from_usr_sbin.patch:
  * Modify service file to start teamd instance from /usr/sbin.</changelog>
  <changelog author="jengelh@inai.de" date="1511352001">- Do not suppress errors from useradd</changelog>
  <changelog author="jengelh@inai.de" date="1511352002">- Update to new upstream release 1.27
  * teamd: escape some sensitive characters in ifname with
    double quotation marks
  * libteam: resynchronize ifinfo after lost RTNLGRP_LINK
    notifications
  * teamd: check port link_up when a port is added with
    loadbalance runner</changelog>
  <changelog author="ndas@suse.de" date="1511352003">- allow send_interface in dbus conf file for wicked.
  [+ 0001-allow-send_interface-dbus.patch]</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Remove defattr that is not really needed
- Add condition around python bindings, they are really based on
  swig code that would need to be rewritten to support python3</changelog>
  <changelog author="jengelh@inai.de" date="1515153600">- Drop /pkg/ subpart from includedir</changelog>
  <changelog author="otto.hollmann@suse.com" date="1636718400">- teamd: better handle failures to chown(TEAMD_RUN_DIR) during
  teamd_drop_privileges() (bsc#1185424)
  [+ better_handle_failures_to_chown.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1662724800">- Add teamd-config-update-local-prio-to-kernel.patch (bsc#1200505)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1687780800">- Add option to change evaluation logic of multiple link-watchers (jsc#PED-2209)
  Add 0001-teamd-Add-option-to-change-evaluation-logic-of-multi.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1695211200">- man teamd.conf: Document ARP Ping link_watch.vlanid option (bsc#1215527)
  * Add 0001-man-teamd.conf-Document-ARP-Ping-link_watch.vlanid-o.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1716465600">- teamd: lw: arp_ping: bitmask VID in VLAN BPF filter [bsc#1224798]
  * Add 0001-teamd-lw-arp_ping-bitmask-VID-in-VLAN-BPF-filter.patch</changelog>
  <changelog author="ali.abdallah@suse.com" date="1771243200">- Fix for SG#71622, bsc#1258224:
  * 0001-teamd-add-port_hwaddr_changed-for-ab-runner.patch:
    [PATCH] teamd: add port_hwaddr_changed for ab runner
  * 0001-teamd-add-port_hwaddr_changed-for-lacp-runner.patch:
    [PATCH] teamd: add port_hwaddr_changed for lacp runner
  * 0001-teamd-add-port_hwaddr_changed-for-lb-runner.patch:
    [PATCH] teamd: add port_hwaddr_changed for lb runner</changelog>
  <changelog author="firo.yang@suse.com" date="1775563200">- Fix for SG#71836, bsc#1260370.
- Add new patch:
  * 0001-libteam-double-NETLINK_RCVBUF-to-fix-ENOMEM-error.patch:
    [PATCH 1/1] libteam: double NETLINK_RCVBUF to fix -ENOMEM error</changelog>
</package>
<package pkgid="48de689335434fc47ede7725e61e83c02d89573e0a30f19b4a3e8515f708429f" name="libteam-devel" arch="x86_64">
  <version epoch="0" ver="1.27" rel="150000.4.18.1"/>
  <changelog author="jengelh@inai.de" date="1420718400">- Update to new upstream release 1.15
  * Topology-aware failover with TIPC</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 1.16
  * teamdctl: show port link down count in state output
  * teamd: lw: count how many times has been the port down</changelog>
  <changelog author="jengelh@inai.de" date="1438344000">- Update to new upstream release 1.17
  * teamd: lw: nsna_ping: fix NA RX and ARP RX handling
  * libteam: ifinfo: fix rtnl dellink handling</changelog>
  <changelog author="jengelh@inai.de" date="1441800000">- Update to new upstream release 1.18
  * teamd: lacp: change actor system value on team MAC change
  * Fix sending duplicate LACP frames at the start of establishing
  a logical channel.
  * Fix teamd memory corruption issues seen by missing port unlink
  in ifinfo_destroy()
  * libteam: Add check to disallow creating device names longer than
  15 characters.</changelog>
  <changelog author="jengelh@inai.de" date="1455192000">- Update to new upstream release 1.22
  * teamd: Fix member port state change on master team admin UP.
  * teamd: add CAP_NET_RAW capability for LACP packet sockets
  * teamd: lacp: update actor state before sending LACP frames</changelog>
  <changelog author="jengelh@inai.de" date="1479729600">- Update to new upstream release 1.26
  * dbus: don't do &lt;deny send_interface="..." /&gt; in template
    dbus s. f.
  * teamd: do correct l3/l4 tx hashing with vlans
  * teamd: lacp: use original hwaddr as source address in lacpdus
  * libteam: fix TEAM_OPTION_TYPE_BOOL type for big-endian
    architectures
  * teamd: handle vlan 0 packets
  * misc: fix an out-of-bound write with zero-length
    hardware address
  * teamd: fix the issue that network blocks when issuing
    `systemctl stop teamd`
  * teamd: lacp: Do not unselect port if it changes state
    to "expired"</changelog>
  <changelog author="ndas@suse.de" date="1511352000">- sync with SLES changes(bsc#1055708)
  * Add check_if_psr_ops_were_initialized.patch:
  * * Fix teamd segfault when link_watch initialization callbacks fail
  (e.g. lw_psr_port_added() in case of activebackup runner) due to
  an attempt to change hwaddr on an enslaved, link up port device.
  Note: enslavement triggers initialization callbacks.
  * Add ignore_ebusy_for_team_hwaddr_set.patch:
  * * Make PortAdd and PortRemove dbus methods work for all runners.
  Ignore attempts to change hwaddr of an already enslaved devices.
  (fate#318389,fate#317728,fate#316923)
- Add start_teamd_from_usr_sbin.patch:
  * Modify service file to start teamd instance from /usr/sbin.</changelog>
  <changelog author="jengelh@inai.de" date="1511352001">- Do not suppress errors from useradd</changelog>
  <changelog author="jengelh@inai.de" date="1511352002">- Update to new upstream release 1.27
  * teamd: escape some sensitive characters in ifname with
    double quotation marks
  * libteam: resynchronize ifinfo after lost RTNLGRP_LINK
    notifications
  * teamd: check port link_up when a port is added with
    loadbalance runner</changelog>
  <changelog author="ndas@suse.de" date="1511352003">- allow send_interface in dbus conf file for wicked.
  [+ 0001-allow-send_interface-dbus.patch]</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Remove defattr that is not really needed
- Add condition around python bindings, they are really based on
  swig code that would need to be rewritten to support python3</changelog>
  <changelog author="jengelh@inai.de" date="1515153600">- Drop /pkg/ subpart from includedir</changelog>
  <changelog author="otto.hollmann@suse.com" date="1636718400">- teamd: better handle failures to chown(TEAMD_RUN_DIR) during
  teamd_drop_privileges() (bsc#1185424)
  [+ better_handle_failures_to_chown.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1662724800">- Add teamd-config-update-local-prio-to-kernel.patch (bsc#1200505)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1687780800">- Add option to change evaluation logic of multiple link-watchers (jsc#PED-2209)
  Add 0001-teamd-Add-option-to-change-evaluation-logic-of-multi.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1695211200">- man teamd.conf: Document ARP Ping link_watch.vlanid option (bsc#1215527)
  * Add 0001-man-teamd.conf-Document-ARP-Ping-link_watch.vlanid-o.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1716465600">- teamd: lw: arp_ping: bitmask VID in VLAN BPF filter [bsc#1224798]
  * Add 0001-teamd-lw-arp_ping-bitmask-VID-in-VLAN-BPF-filter.patch</changelog>
  <changelog author="ali.abdallah@suse.com" date="1771243200">- Fix for SG#71622, bsc#1258224:
  * 0001-teamd-add-port_hwaddr_changed-for-ab-runner.patch:
    [PATCH] teamd: add port_hwaddr_changed for ab runner
  * 0001-teamd-add-port_hwaddr_changed-for-lacp-runner.patch:
    [PATCH] teamd: add port_hwaddr_changed for lacp runner
  * 0001-teamd-add-port_hwaddr_changed-for-lb-runner.patch:
    [PATCH] teamd: add port_hwaddr_changed for lb runner</changelog>
</package>
<package pkgid="6a4f13fe0c99f2f7ea0c8931da4ca5a183c42dcda177ed0aacd7735a42753239" name="libteam-devel" arch="x86_64">
  <version epoch="0" ver="1.27" rel="150000.4.21.1"/>
  <changelog author="jengelh@inai.de" date="1420718400">- Update to new upstream release 1.15
  * Topology-aware failover with TIPC</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 1.16
  * teamdctl: show port link down count in state output
  * teamd: lw: count how many times has been the port down</changelog>
  <changelog author="jengelh@inai.de" date="1438344000">- Update to new upstream release 1.17
  * teamd: lw: nsna_ping: fix NA RX and ARP RX handling
  * libteam: ifinfo: fix rtnl dellink handling</changelog>
  <changelog author="jengelh@inai.de" date="1441800000">- Update to new upstream release 1.18
  * teamd: lacp: change actor system value on team MAC change
  * Fix sending duplicate LACP frames at the start of establishing
  a logical channel.
  * Fix teamd memory corruption issues seen by missing port unlink
  in ifinfo_destroy()
  * libteam: Add check to disallow creating device names longer than
  15 characters.</changelog>
  <changelog author="jengelh@inai.de" date="1455192000">- Update to new upstream release 1.22
  * teamd: Fix member port state change on master team admin UP.
  * teamd: add CAP_NET_RAW capability for LACP packet sockets
  * teamd: lacp: update actor state before sending LACP frames</changelog>
  <changelog author="jengelh@inai.de" date="1479729600">- Update to new upstream release 1.26
  * dbus: don't do &lt;deny send_interface="..." /&gt; in template
    dbus s. f.
  * teamd: do correct l3/l4 tx hashing with vlans
  * teamd: lacp: use original hwaddr as source address in lacpdus
  * libteam: fix TEAM_OPTION_TYPE_BOOL type for big-endian
    architectures
  * teamd: handle vlan 0 packets
  * misc: fix an out-of-bound write with zero-length
    hardware address
  * teamd: fix the issue that network blocks when issuing
    `systemctl stop teamd`
  * teamd: lacp: Do not unselect port if it changes state
    to "expired"</changelog>
  <changelog author="ndas@suse.de" date="1511352000">- sync with SLES changes(bsc#1055708)
  * Add check_if_psr_ops_were_initialized.patch:
  * * Fix teamd segfault when link_watch initialization callbacks fail
  (e.g. lw_psr_port_added() in case of activebackup runner) due to
  an attempt to change hwaddr on an enslaved, link up port device.
  Note: enslavement triggers initialization callbacks.
  * Add ignore_ebusy_for_team_hwaddr_set.patch:
  * * Make PortAdd and PortRemove dbus methods work for all runners.
  Ignore attempts to change hwaddr of an already enslaved devices.
  (fate#318389,fate#317728,fate#316923)
- Add start_teamd_from_usr_sbin.patch:
  * Modify service file to start teamd instance from /usr/sbin.</changelog>
  <changelog author="jengelh@inai.de" date="1511352001">- Do not suppress errors from useradd</changelog>
  <changelog author="jengelh@inai.de" date="1511352002">- Update to new upstream release 1.27
  * teamd: escape some sensitive characters in ifname with
    double quotation marks
  * libteam: resynchronize ifinfo after lost RTNLGRP_LINK
    notifications
  * teamd: check port link_up when a port is added with
    loadbalance runner</changelog>
  <changelog author="ndas@suse.de" date="1511352003">- allow send_interface in dbus conf file for wicked.
  [+ 0001-allow-send_interface-dbus.patch]</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Remove defattr that is not really needed
- Add condition around python bindings, they are really based on
  swig code that would need to be rewritten to support python3</changelog>
  <changelog author="jengelh@inai.de" date="1515153600">- Drop /pkg/ subpart from includedir</changelog>
  <changelog author="otto.hollmann@suse.com" date="1636718400">- teamd: better handle failures to chown(TEAMD_RUN_DIR) during
  teamd_drop_privileges() (bsc#1185424)
  [+ better_handle_failures_to_chown.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1662724800">- Add teamd-config-update-local-prio-to-kernel.patch (bsc#1200505)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1687780800">- Add option to change evaluation logic of multiple link-watchers (jsc#PED-2209)
  Add 0001-teamd-Add-option-to-change-evaluation-logic-of-multi.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1695211200">- man teamd.conf: Document ARP Ping link_watch.vlanid option (bsc#1215527)
  * Add 0001-man-teamd.conf-Document-ARP-Ping-link_watch.vlanid-o.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1716465600">- teamd: lw: arp_ping: bitmask VID in VLAN BPF filter [bsc#1224798]
  * Add 0001-teamd-lw-arp_ping-bitmask-VID-in-VLAN-BPF-filter.patch</changelog>
  <changelog author="ali.abdallah@suse.com" date="1771243200">- Fix for SG#71622, bsc#1258224:
  * 0001-teamd-add-port_hwaddr_changed-for-ab-runner.patch:
    [PATCH] teamd: add port_hwaddr_changed for ab runner
  * 0001-teamd-add-port_hwaddr_changed-for-lacp-runner.patch:
    [PATCH] teamd: add port_hwaddr_changed for lacp runner
  * 0001-teamd-add-port_hwaddr_changed-for-lb-runner.patch:
    [PATCH] teamd: add port_hwaddr_changed for lb runner</changelog>
  <changelog author="firo.yang@suse.com" date="1775563200">- Fix for SG#71836, bsc#1260370.
- Add new patch:
  * 0001-libteam-double-NETLINK_RCVBUF-to-fix-ENOMEM-error.patch:
    [PATCH 1/1] libteam: double NETLINK_RCVBUF to fix -ENOMEM error</changelog>
</package>
<package pkgid="b870f84c558379f1ce7f943936d3a3cc267b7adc4e25acca7a82c8dad550138a" name="libteam5" arch="x86_64">
  <version epoch="0" ver="1.27" rel="150000.4.18.1"/>
  <changelog author="jengelh@inai.de" date="1420718400">- Update to new upstream release 1.15
  * Topology-aware failover with TIPC</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 1.16
  * teamdctl: show port link down count in state output
  * teamd: lw: count how many times has been the port down</changelog>
  <changelog author="jengelh@inai.de" date="1438344000">- Update to new upstream release 1.17
  * teamd: lw: nsna_ping: fix NA RX and ARP RX handling
  * libteam: ifinfo: fix rtnl dellink handling</changelog>
  <changelog author="jengelh@inai.de" date="1441800000">- Update to new upstream release 1.18
  * teamd: lacp: change actor system value on team MAC change
  * Fix sending duplicate LACP frames at the start of establishing
  a logical channel.
  * Fix teamd memory corruption issues seen by missing port unlink
  in ifinfo_destroy()
  * libteam: Add check to disallow creating device names longer than
  15 characters.</changelog>
  <changelog author="jengelh@inai.de" date="1455192000">- Update to new upstream release 1.22
  * teamd: Fix member port state change on master team admin UP.
  * teamd: add CAP_NET_RAW capability for LACP packet sockets
  * teamd: lacp: update actor state before sending LACP frames</changelog>
  <changelog author="jengelh@inai.de" date="1479729600">- Update to new upstream release 1.26
  * dbus: don't do &lt;deny send_interface="..." /&gt; in template
    dbus s. f.
  * teamd: do correct l3/l4 tx hashing with vlans
  * teamd: lacp: use original hwaddr as source address in lacpdus
  * libteam: fix TEAM_OPTION_TYPE_BOOL type for big-endian
    architectures
  * teamd: handle vlan 0 packets
  * misc: fix an out-of-bound write with zero-length
    hardware address
  * teamd: fix the issue that network blocks when issuing
    `systemctl stop teamd`
  * teamd: lacp: Do not unselect port if it changes state
    to "expired"</changelog>
  <changelog author="ndas@suse.de" date="1511352000">- sync with SLES changes(bsc#1055708)
  * Add check_if_psr_ops_were_initialized.patch:
  * * Fix teamd segfault when link_watch initialization callbacks fail
  (e.g. lw_psr_port_added() in case of activebackup runner) due to
  an attempt to change hwaddr on an enslaved, link up port device.
  Note: enslavement triggers initialization callbacks.
  * Add ignore_ebusy_for_team_hwaddr_set.patch:
  * * Make PortAdd and PortRemove dbus methods work for all runners.
  Ignore attempts to change hwaddr of an already enslaved devices.
  (fate#318389,fate#317728,fate#316923)
- Add start_teamd_from_usr_sbin.patch:
  * Modify service file to start teamd instance from /usr/sbin.</changelog>
  <changelog author="jengelh@inai.de" date="1511352001">- Do not suppress errors from useradd</changelog>
  <changelog author="jengelh@inai.de" date="1511352002">- Update to new upstream release 1.27
  * teamd: escape some sensitive characters in ifname with
    double quotation marks
  * libteam: resynchronize ifinfo after lost RTNLGRP_LINK
    notifications
  * teamd: check port link_up when a port is added with
    loadbalance runner</changelog>
  <changelog author="ndas@suse.de" date="1511352003">- allow send_interface in dbus conf file for wicked.
  [+ 0001-allow-send_interface-dbus.patch]</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Remove defattr that is not really needed
- Add condition around python bindings, they are really based on
  swig code that would need to be rewritten to support python3</changelog>
  <changelog author="jengelh@inai.de" date="1515153600">- Drop /pkg/ subpart from includedir</changelog>
  <changelog author="otto.hollmann@suse.com" date="1636718400">- teamd: better handle failures to chown(TEAMD_RUN_DIR) during
  teamd_drop_privileges() (bsc#1185424)
  [+ better_handle_failures_to_chown.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1662724800">- Add teamd-config-update-local-prio-to-kernel.patch (bsc#1200505)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1687780800">- Add option to change evaluation logic of multiple link-watchers (jsc#PED-2209)
  Add 0001-teamd-Add-option-to-change-evaluation-logic-of-multi.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1695211200">- man teamd.conf: Document ARP Ping link_watch.vlanid option (bsc#1215527)
  * Add 0001-man-teamd.conf-Document-ARP-Ping-link_watch.vlanid-o.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1716465600">- teamd: lw: arp_ping: bitmask VID in VLAN BPF filter [bsc#1224798]
  * Add 0001-teamd-lw-arp_ping-bitmask-VID-in-VLAN-BPF-filter.patch</changelog>
  <changelog author="ali.abdallah@suse.com" date="1771243200">- Fix for SG#71622, bsc#1258224:
  * 0001-teamd-add-port_hwaddr_changed-for-ab-runner.patch:
    [PATCH] teamd: add port_hwaddr_changed for ab runner
  * 0001-teamd-add-port_hwaddr_changed-for-lacp-runner.patch:
    [PATCH] teamd: add port_hwaddr_changed for lacp runner
  * 0001-teamd-add-port_hwaddr_changed-for-lb-runner.patch:
    [PATCH] teamd: add port_hwaddr_changed for lb runner</changelog>
</package>
<package pkgid="e8319bcf8abda087c7941d461fbaf632439a6521466a74b5cc01647a1c37b19b" name="libteam5" arch="x86_64">
  <version epoch="0" ver="1.27" rel="150000.4.21.1"/>
  <changelog author="jengelh@inai.de" date="1420718400">- Update to new upstream release 1.15
  * Topology-aware failover with TIPC</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 1.16
  * teamdctl: show port link down count in state output
  * teamd: lw: count how many times has been the port down</changelog>
  <changelog author="jengelh@inai.de" date="1438344000">- Update to new upstream release 1.17
  * teamd: lw: nsna_ping: fix NA RX and ARP RX handling
  * libteam: ifinfo: fix rtnl dellink handling</changelog>
  <changelog author="jengelh@inai.de" date="1441800000">- Update to new upstream release 1.18
  * teamd: lacp: change actor system value on team MAC change
  * Fix sending duplicate LACP frames at the start of establishing
  a logical channel.
  * Fix teamd memory corruption issues seen by missing port unlink
  in ifinfo_destroy()
  * libteam: Add check to disallow creating device names longer than
  15 characters.</changelog>
  <changelog author="jengelh@inai.de" date="1455192000">- Update to new upstream release 1.22
  * teamd: Fix member port state change on master team admin UP.
  * teamd: add CAP_NET_RAW capability for LACP packet sockets
  * teamd: lacp: update actor state before sending LACP frames</changelog>
  <changelog author="jengelh@inai.de" date="1479729600">- Update to new upstream release 1.26
  * dbus: don't do &lt;deny send_interface="..." /&gt; in template
    dbus s. f.
  * teamd: do correct l3/l4 tx hashing with vlans
  * teamd: lacp: use original hwaddr as source address in lacpdus
  * libteam: fix TEAM_OPTION_TYPE_BOOL type for big-endian
    architectures
  * teamd: handle vlan 0 packets
  * misc: fix an out-of-bound write with zero-length
    hardware address
  * teamd: fix the issue that network blocks when issuing
    `systemctl stop teamd`
  * teamd: lacp: Do not unselect port if it changes state
    to "expired"</changelog>
  <changelog author="ndas@suse.de" date="1511352000">- sync with SLES changes(bsc#1055708)
  * Add check_if_psr_ops_were_initialized.patch:
  * * Fix teamd segfault when link_watch initialization callbacks fail
  (e.g. lw_psr_port_added() in case of activebackup runner) due to
  an attempt to change hwaddr on an enslaved, link up port device.
  Note: enslavement triggers initialization callbacks.
  * Add ignore_ebusy_for_team_hwaddr_set.patch:
  * * Make PortAdd and PortRemove dbus methods work for all runners.
  Ignore attempts to change hwaddr of an already enslaved devices.
  (fate#318389,fate#317728,fate#316923)
- Add start_teamd_from_usr_sbin.patch:
  * Modify service file to start teamd instance from /usr/sbin.</changelog>
  <changelog author="jengelh@inai.de" date="1511352001">- Do not suppress errors from useradd</changelog>
  <changelog author="jengelh@inai.de" date="1511352002">- Update to new upstream release 1.27
  * teamd: escape some sensitive characters in ifname with
    double quotation marks
  * libteam: resynchronize ifinfo after lost RTNLGRP_LINK
    notifications
  * teamd: check port link_up when a port is added with
    loadbalance runner</changelog>
  <changelog author="ndas@suse.de" date="1511352003">- allow send_interface in dbus conf file for wicked.
  [+ 0001-allow-send_interface-dbus.patch]</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Remove defattr that is not really needed
- Add condition around python bindings, they are really based on
  swig code that would need to be rewritten to support python3</changelog>
  <changelog author="jengelh@inai.de" date="1515153600">- Drop /pkg/ subpart from includedir</changelog>
  <changelog author="otto.hollmann@suse.com" date="1636718400">- teamd: better handle failures to chown(TEAMD_RUN_DIR) during
  teamd_drop_privileges() (bsc#1185424)
  [+ better_handle_failures_to_chown.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1662724800">- Add teamd-config-update-local-prio-to-kernel.patch (bsc#1200505)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1687780800">- Add option to change evaluation logic of multiple link-watchers (jsc#PED-2209)
  Add 0001-teamd-Add-option-to-change-evaluation-logic-of-multi.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1695211200">- man teamd.conf: Document ARP Ping link_watch.vlanid option (bsc#1215527)
  * Add 0001-man-teamd.conf-Document-ARP-Ping-link_watch.vlanid-o.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1716465600">- teamd: lw: arp_ping: bitmask VID in VLAN BPF filter [bsc#1224798]
  * Add 0001-teamd-lw-arp_ping-bitmask-VID-in-VLAN-BPF-filter.patch</changelog>
  <changelog author="ali.abdallah@suse.com" date="1771243200">- Fix for SG#71622, bsc#1258224:
  * 0001-teamd-add-port_hwaddr_changed-for-ab-runner.patch:
    [PATCH] teamd: add port_hwaddr_changed for ab runner
  * 0001-teamd-add-port_hwaddr_changed-for-lacp-runner.patch:
    [PATCH] teamd: add port_hwaddr_changed for lacp runner
  * 0001-teamd-add-port_hwaddr_changed-for-lb-runner.patch:
    [PATCH] teamd: add port_hwaddr_changed for lb runner</changelog>
  <changelog author="firo.yang@suse.com" date="1775563200">- Fix for SG#71836, bsc#1260370.
- Add new patch:
  * 0001-libteam-double-NETLINK_RCVBUF-to-fix-ENOMEM-error.patch:
    [PATCH 1/1] libteam: double NETLINK_RCVBUF to fix -ENOMEM error</changelog>
</package>
<package pkgid="72155368159cdab499edd1a487a20163afa8a49b57255a5cf5fedc3a8b6b0c5f" name="libteamdctl0" arch="x86_64">
  <version epoch="0" ver="1.27" rel="150000.4.18.1"/>
  <changelog author="jengelh@inai.de" date="1420718400">- Update to new upstream release 1.15
  * Topology-aware failover with TIPC</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 1.16
  * teamdctl: show port link down count in state output
  * teamd: lw: count how many times has been the port down</changelog>
  <changelog author="jengelh@inai.de" date="1438344000">- Update to new upstream release 1.17
  * teamd: lw: nsna_ping: fix NA RX and ARP RX handling
  * libteam: ifinfo: fix rtnl dellink handling</changelog>
  <changelog author="jengelh@inai.de" date="1441800000">- Update to new upstream release 1.18
  * teamd: lacp: change actor system value on team MAC change
  * Fix sending duplicate LACP frames at the start of establishing
  a logical channel.
  * Fix teamd memory corruption issues seen by missing port unlink
  in ifinfo_destroy()
  * libteam: Add check to disallow creating device names longer than
  15 characters.</changelog>
  <changelog author="jengelh@inai.de" date="1455192000">- Update to new upstream release 1.22
  * teamd: Fix member port state change on master team admin UP.
  * teamd: add CAP_NET_RAW capability for LACP packet sockets
  * teamd: lacp: update actor state before sending LACP frames</changelog>
  <changelog author="jengelh@inai.de" date="1479729600">- Update to new upstream release 1.26
  * dbus: don't do &lt;deny send_interface="..." /&gt; in template
    dbus s. f.
  * teamd: do correct l3/l4 tx hashing with vlans
  * teamd: lacp: use original hwaddr as source address in lacpdus
  * libteam: fix TEAM_OPTION_TYPE_BOOL type for big-endian
    architectures
  * teamd: handle vlan 0 packets
  * misc: fix an out-of-bound write with zero-length
    hardware address
  * teamd: fix the issue that network blocks when issuing
    `systemctl stop teamd`
  * teamd: lacp: Do not unselect port if it changes state
    to "expired"</changelog>
  <changelog author="ndas@suse.de" date="1511352000">- sync with SLES changes(bsc#1055708)
  * Add check_if_psr_ops_were_initialized.patch:
  * * Fix teamd segfault when link_watch initialization callbacks fail
  (e.g. lw_psr_port_added() in case of activebackup runner) due to
  an attempt to change hwaddr on an enslaved, link up port device.
  Note: enslavement triggers initialization callbacks.
  * Add ignore_ebusy_for_team_hwaddr_set.patch:
  * * Make PortAdd and PortRemove dbus methods work for all runners.
  Ignore attempts to change hwaddr of an already enslaved devices.
  (fate#318389,fate#317728,fate#316923)
- Add start_teamd_from_usr_sbin.patch:
  * Modify service file to start teamd instance from /usr/sbin.</changelog>
  <changelog author="jengelh@inai.de" date="1511352001">- Do not suppress errors from useradd</changelog>
  <changelog author="jengelh@inai.de" date="1511352002">- Update to new upstream release 1.27
  * teamd: escape some sensitive characters in ifname with
    double quotation marks
  * libteam: resynchronize ifinfo after lost RTNLGRP_LINK
    notifications
  * teamd: check port link_up when a port is added with
    loadbalance runner</changelog>
  <changelog author="ndas@suse.de" date="1511352003">- allow send_interface in dbus conf file for wicked.
  [+ 0001-allow-send_interface-dbus.patch]</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Remove defattr that is not really needed
- Add condition around python bindings, they are really based on
  swig code that would need to be rewritten to support python3</changelog>
  <changelog author="jengelh@inai.de" date="1515153600">- Drop /pkg/ subpart from includedir</changelog>
  <changelog author="otto.hollmann@suse.com" date="1636718400">- teamd: better handle failures to chown(TEAMD_RUN_DIR) during
  teamd_drop_privileges() (bsc#1185424)
  [+ better_handle_failures_to_chown.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1662724800">- Add teamd-config-update-local-prio-to-kernel.patch (bsc#1200505)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1687780800">- Add option to change evaluation logic of multiple link-watchers (jsc#PED-2209)
  Add 0001-teamd-Add-option-to-change-evaluation-logic-of-multi.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1695211200">- man teamd.conf: Document ARP Ping link_watch.vlanid option (bsc#1215527)
  * Add 0001-man-teamd.conf-Document-ARP-Ping-link_watch.vlanid-o.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1716465600">- teamd: lw: arp_ping: bitmask VID in VLAN BPF filter [bsc#1224798]
  * Add 0001-teamd-lw-arp_ping-bitmask-VID-in-VLAN-BPF-filter.patch</changelog>
  <changelog author="ali.abdallah@suse.com" date="1771243200">- Fix for SG#71622, bsc#1258224:
  * 0001-teamd-add-port_hwaddr_changed-for-ab-runner.patch:
    [PATCH] teamd: add port_hwaddr_changed for ab runner
  * 0001-teamd-add-port_hwaddr_changed-for-lacp-runner.patch:
    [PATCH] teamd: add port_hwaddr_changed for lacp runner
  * 0001-teamd-add-port_hwaddr_changed-for-lb-runner.patch:
    [PATCH] teamd: add port_hwaddr_changed for lb runner</changelog>
</package>
<package pkgid="9bc4fdd2661bb5a474c326bc468688e4615fa62b5a0106c65031e0ae81bb6482" name="libteamdctl0" arch="x86_64">
  <version epoch="0" ver="1.27" rel="150000.4.21.1"/>
  <changelog author="jengelh@inai.de" date="1420718400">- Update to new upstream release 1.15
  * Topology-aware failover with TIPC</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 1.16
  * teamdctl: show port link down count in state output
  * teamd: lw: count how many times has been the port down</changelog>
  <changelog author="jengelh@inai.de" date="1438344000">- Update to new upstream release 1.17
  * teamd: lw: nsna_ping: fix NA RX and ARP RX handling
  * libteam: ifinfo: fix rtnl dellink handling</changelog>
  <changelog author="jengelh@inai.de" date="1441800000">- Update to new upstream release 1.18
  * teamd: lacp: change actor system value on team MAC change
  * Fix sending duplicate LACP frames at the start of establishing
  a logical channel.
  * Fix teamd memory corruption issues seen by missing port unlink
  in ifinfo_destroy()
  * libteam: Add check to disallow creating device names longer than
  15 characters.</changelog>
  <changelog author="jengelh@inai.de" date="1455192000">- Update to new upstream release 1.22
  * teamd: Fix member port state change on master team admin UP.
  * teamd: add CAP_NET_RAW capability for LACP packet sockets
  * teamd: lacp: update actor state before sending LACP frames</changelog>
  <changelog author="jengelh@inai.de" date="1479729600">- Update to new upstream release 1.26
  * dbus: don't do &lt;deny send_interface="..." /&gt; in template
    dbus s. f.
  * teamd: do correct l3/l4 tx hashing with vlans
  * teamd: lacp: use original hwaddr as source address in lacpdus
  * libteam: fix TEAM_OPTION_TYPE_BOOL type for big-endian
    architectures
  * teamd: handle vlan 0 packets
  * misc: fix an out-of-bound write with zero-length
    hardware address
  * teamd: fix the issue that network blocks when issuing
    `systemctl stop teamd`
  * teamd: lacp: Do not unselect port if it changes state
    to "expired"</changelog>
  <changelog author="ndas@suse.de" date="1511352000">- sync with SLES changes(bsc#1055708)
  * Add check_if_psr_ops_were_initialized.patch:
  * * Fix teamd segfault when link_watch initialization callbacks fail
  (e.g. lw_psr_port_added() in case of activebackup runner) due to
  an attempt to change hwaddr on an enslaved, link up port device.
  Note: enslavement triggers initialization callbacks.
  * Add ignore_ebusy_for_team_hwaddr_set.patch:
  * * Make PortAdd and PortRemove dbus methods work for all runners.
  Ignore attempts to change hwaddr of an already enslaved devices.
  (fate#318389,fate#317728,fate#316923)
- Add start_teamd_from_usr_sbin.patch:
  * Modify service file to start teamd instance from /usr/sbin.</changelog>
  <changelog author="jengelh@inai.de" date="1511352001">- Do not suppress errors from useradd</changelog>
  <changelog author="jengelh@inai.de" date="1511352002">- Update to new upstream release 1.27
  * teamd: escape some sensitive characters in ifname with
    double quotation marks
  * libteam: resynchronize ifinfo after lost RTNLGRP_LINK
    notifications
  * teamd: check port link_up when a port is added with
    loadbalance runner</changelog>
  <changelog author="ndas@suse.de" date="1511352003">- allow send_interface in dbus conf file for wicked.
  [+ 0001-allow-send_interface-dbus.patch]</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Remove defattr that is not really needed
- Add condition around python bindings, they are really based on
  swig code that would need to be rewritten to support python3</changelog>
  <changelog author="jengelh@inai.de" date="1515153600">- Drop /pkg/ subpart from includedir</changelog>
  <changelog author="otto.hollmann@suse.com" date="1636718400">- teamd: better handle failures to chown(TEAMD_RUN_DIR) during
  teamd_drop_privileges() (bsc#1185424)
  [+ better_handle_failures_to_chown.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1662724800">- Add teamd-config-update-local-prio-to-kernel.patch (bsc#1200505)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1687780800">- Add option to change evaluation logic of multiple link-watchers (jsc#PED-2209)
  Add 0001-teamd-Add-option-to-change-evaluation-logic-of-multi.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1695211200">- man teamd.conf: Document ARP Ping link_watch.vlanid option (bsc#1215527)
  * Add 0001-man-teamd.conf-Document-ARP-Ping-link_watch.vlanid-o.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1716465600">- teamd: lw: arp_ping: bitmask VID in VLAN BPF filter [bsc#1224798]
  * Add 0001-teamd-lw-arp_ping-bitmask-VID-in-VLAN-BPF-filter.patch</changelog>
  <changelog author="ali.abdallah@suse.com" date="1771243200">- Fix for SG#71622, bsc#1258224:
  * 0001-teamd-add-port_hwaddr_changed-for-ab-runner.patch:
    [PATCH] teamd: add port_hwaddr_changed for ab runner
  * 0001-teamd-add-port_hwaddr_changed-for-lacp-runner.patch:
    [PATCH] teamd: add port_hwaddr_changed for lacp runner
  * 0001-teamd-add-port_hwaddr_changed-for-lb-runner.patch:
    [PATCH] teamd: add port_hwaddr_changed for lb runner</changelog>
  <changelog author="firo.yang@suse.com" date="1775563200">- Fix for SG#71836, bsc#1260370.
- Add new patch:
  * 0001-libteam-double-NETLINK_RCVBUF-to-fix-ENOMEM-error.patch:
    [PATCH 1/1] libteam: double NETLINK_RCVBUF to fix -ENOMEM error</changelog>
</package>
<package pkgid="c266b132381f3e46b1535e7bfcd69b7c7bfe0f1aa43c103f693c23fecda7ca89" name="libtiff-devel" arch="x86_64">
  <version epoch="0" ver="4.7.0" rel="150600.3.13.1"/>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668427200">- security update:
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1672833600">- Update to 4.5.0:
  * tdir_t type updated to uint32_t. This type is now used for the return
    value of TIFFCurrentDirectory() and TIFFNumberOfDirectories(), and as
    the argument of TIFFSetDirectory() and TIFFUnlinkDirectory()
  * Addition of an open option concept with the new functions TIFFOpenExt(),
    TIFFOpenWExt(), TIFFFdOpenExt(), TIFFClientOpenExt(), TIFFOpenOptionsAlloc(),
    TIFFOpenOptionsFree()
  * Leveraging above mentioned open option concept, addition of a new capability
    to limit the size of a single dynamic memory allocation done by the library
    with TIFFOpenOptionsSetMaxSingleMemAlloc()
  * Related to IFD-Loop detection refactoring, the number of IFDs that libtiff
    can browse through has been extended from 65535 to 1048576. This value is
    a build-time setting that can be configured with CMake's TIFF_MAX_DIR_COUNT
    variable or autoconf's --with-max-dir-count option.
  * Whole code base reformatting of .c/.h files using new .clang-format format
  * Documentation changed from static HTML and man pages to
    Restructured Text (rst). HTML and man pages are now build artifacts.
  * SONAME version bumped to 6 due to changes in symbol versioning.
  * autoconf/cmake: detect (not yet released) libjpeg-turbo 2.2 to take into
    its capability of handling both 8-bit JPEG and 12-bit JPEG in a single build.
  * autoconf/cmake: detect sphinx-build to build HTML and man pages
  * CMakeLists.txt: fix warning with -Wdev
  * CMake: correctly set default value of 'lzma' option when liblzma is detected
  * CMake: Moved linking of CMath::CMath into CMath_LIBRARY check.
  * Fix CMake build to be compatible with FetchContent.
  * cmake: Correct duplicate definition of _CRT_SECURE_NO_WARNINGS
  * cmake: Fixes for Visual Studio 2022.
  * Adds Requires.private generation so that pkg-config can correctly find
    the dependencies of libtiff.
  * Fix dependency on libm on Android
  * Fix build in tif_lzw.c
  * CMake: Add options for disabling tools, tests, contrib and docs.
  * tiffcrop: Fix memory allocation to require a larger buffer (CVE-2022-3570, CVE-2022-3598)
    [bsc#1205422]
  * tiffcrop: disable incompatibility of -Z, -X, -Y, -z options with any PAGE_MODE_x option
    (CVE-2022-3627, CVE-2022-3597, CVE-2022-3626)
  * tiffcrop: fix floating-point exception (CVE-2022-2056, CVE-2022-2057, CVE-2022-2058)
  * _TIFFCheckFieldIsValidForCodec(): return FALSE when passed a codec-specific tag
    and the codec is not configured (CVE-2022-34526)
  * Revised handling of TIFFTAG_INKNAMES and related TIFFTAG_NUMBEROFINKS value (CVE-2022-3599)
  * tiffcrop: -S option mutually exclusive (CVE-2022-2519, CVE-2022-2520, CVE-2022-2521)
- Drop tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
- Drop tiff-CVE-2022-34526.patch
- Drop tiff-CVE-2022-3599.patch
- Drop tiff-CVE-2022-3598.patch
- Drop tiff-CVE-2022-3970.patch
- Drop tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
- Drop tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1677067200">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1687262400">- Update to version 4.5.1:
  * Definition of tags reformatted (clang-format off) for better readability of tag comments in tiff.h and tif_dirinfo.c
  * Do not install libtiff-4.pc when tiff-install is reset.
  * Add versioninfo resource files for DLL and tools compiled with Windows MSVC and MINGW.
  * Disable clang-formatting for tif_config.h.cmake.in and tiffconf.h.cmake.in because sensitive for CMake scripts.
  * CMake: make WebP component name compatible with upstream ConfigWebP.cmake
  * CMake: make Findliblzma with upstream CMake config file
  * CMake: FindDeflate.cmake: fix several errors (issue #526).
  * CMake: FindLERC.cmake: version string return added.
  * CMake: export TiffConfig.cmake and TiffConfigVersion.cmake files
  * CMake: fix export of INTERFACE_INCLUDE_DIRECTORIES
  * Hardcode HOST_FILLORDER to FILLORDER_LSB2MSB and make 'H' flag of TIFFOpen() to warn and an alias of FILLORDER_MSB2LSB. tif_lerc.c: use WORDS_BIGENDIAN instead of HOST_BIGENDIAN.
  * Optimize relative seeking within TIFFSetDirectory() by using the learned list of IFD offsets.
  * Improve internal IFD offset and directory number map handling.
  * Behavior of TIFFOpen() mode "r+" in the Windows implementation adjusted to that of Linux.
  * TIFFDirectory td_fieldsset type changed from unsigned long, which can be 32 or 64 bits, to uint32_t (fixes issue #484).
  * tif_ojpeg.c: checking for division by zero (fixes issue #554).
  * LZWDecode(): avoid crash when trying to read again from a strip whith a missing end-of-information marker (fixes issue #548).
  * Fixed runtime error: applying zero offset to null pointer in countInkNamesString().
  * Fixing crash in TIFFUnlinkDirectory() when called with directory number zero ("TIFFUnlinkDirectory(0)") as well as fixing incorrect behaviour when unlinking the first directory.
  * tif_luv: check and correct for NaN data in uv_encode() (issue #530).
  * TIFFClose() avoid NULL pointer dereferencing (issue #515).
  * tif_hash_set.c: include tif_hash_set.h after tif_config.h to let a chance for GDAL symbol renaming trick.
  * Fax3: fix failure to decode some fax3 number_of_images and add test for Fax3 decoding issues (issue #513).
  * TIFFSetDirectory() and TIFFWriteDirectorySec() avoid harmless unsigned-integer-overflow (due to gdal oss-fuzz #54311 and #54343).
  * tif_ojpeg.c: fix issue #554 by checking for division by zero in OJPEGWriteHeaderInfo().
  * LZWDecode(): avoid crash when trying to read again from a strip whith a missing end-of-information marker (issue #548).
- Drop no longer needed patches:
  * tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * tiff-CVE-2022-48281.patch
  * tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1694779200">- Update to version 4.6.0:
  * API/ABI breaks: none
  * WebP decoder: validate WebP blob width, height, band count against
    TIFF parameters to avoid use of uninitialized variable, or decoding
    corrupted content without explicit error (fixes issue #581, issue #582).
  * WebP codec: turn exact mode when creating lossless files to avoid
    altering R,G,B values in areas where alpha=0
  * Fix TransferFunction writing of only two transfer functions.
  * TIFFReadDirectoryCheckOrder: avoid integer overflow. When it occurs,
    it should be harmless in practice though
  * tiffcp: remove -i option (ignore errors)
  * This version removes a big number of utilities that have suffered from
    lack of maintenance over the years and were the source of various
    reported security issues:
    + fax2ps
    + fax2tiff
    + pal2rgb
    + ppm2tiff
    + raw2tiff
    + rgb2ycbcr
    + thumbnail
    + tiff2bw
    + tiff2rgba
    + tiffcmp
    + tiffcrop
    + tiffdither
    + tiffgt
    + tiffmedian
    + tiff2ps
    + tiff2pdf
- Remove no longer needed tiff-4.0.3-compress-warning.patch.
- CVE-2023-25435 [bsc#1212607] tiffcrop is removed</changelog>
  <changelog author="mvetter@suse.com" date="1706270400">- security update:
  * CVE-2023-52356 [bsc#1219213]
    Fix segfault in TIFFReadRGBATileExt()
    + tiff-CVE-2023-52356.patch</changelog>
  <changelog author="mvetter@suse.com" date="1724068800">- security update:
  * CVE-2024-7006 [bsc#1228924]
    Fix pointer deref in tif_dirinfo.c
    + tiff-CVE-2024-7006.patch</changelog>
  <changelog author="mvetter@suse.com" date="1726660800">- Update to 4.7.0:
  * This version restores in the default build the availability of
    the tools that had been dropped in v4.6.0
    See https://libtiff.gitlab.io/libtiff/rfcs/rfc2_restoring_needed_tools.html#rfc2-restoring-needed-tools
  * Software configuration changes:
    + autoconf build: configure.ac: avoid -Werror passed to CFLAGS to interfere with feature detection
    + autoconf build: fix error when running make clean (fixes issue #630)
    + autoconf build: back off the minimum required automake version to 1.11
    + autoconf.ac: fix detection of windows.h for mingw (fixes issue #605)
    + libtiff-4.pc: Fix Requires.private missing Lerc. It provides a .pc file
    starting from version 4 (in autoconf builds, we assume that liblerc is at least version 4)
    + CMake: Fix TIFF_INCLUDE_DIRS
    + CMake: MinGW compilers don't need a .def file for shared library
    + CMake: move libdeflate and Lerc to Requires.private
    + CMake: enable resource compilation on all Windows.
  * Library changes:
    + Add TIFFOpenOptionsSetMaxCumulatedMemAlloc(). This function complements
    TIFFOpenOptionsSetMaxSingleMemAlloc() to define the maximum cumulated memory
    allocations in byte, for a given TIFF handle, that libtiff internal memory
    allocation functions are allowed.
    + TIFFWriteDirectory(): Avoid overwriting following data if an IFD is enlarged.
    + TIFFXYZToRGB: avoid integer overflow (fixes issue #644)
    + uv_decode() and uv_encode(): avoid potential out-of-bounds array index (fixes issue #645)
    + Fix cases where tif_curdir is set incorrectly. Fix cases where the current directory number (tif_curdir)
    is set inconsistently or incorrectly, depending on the previous history.
    + TIFFRead[Scanline/EncodedStrip/EncodeTile]: 0-initialize output buffer if setupdecode fails ;
    most codecs: zero-initialize (not-yet-written parts of) output buffer if failure (fixes issue #375)
    + OJPEG: reset subsampling_convert_state=0 in OJPEGPreDecode (fixes issue #183)
    + ThunderRLE: fix failure when decoding last run. Bug seen with GhostPDL
    + LERC codec: deal with issues with multi-band PlanarConfig=Contig and NaN values
    + tif_fax3.c: error out after a number of times end-of-file has been reached (fixes issue #583)
    + LZW: avoid warning about misaligned address with UBSAN (fixes issue #616)
    + TIFFReadRGBAStrip/TIFFReadRGBATile: add more validation of col/row (fixes issue #622, CVE-2023-52356)
    + tif_dirread.c: only issue TIFFGetFileSize() for large enough RAM requests
    + Avoid FPEs (division by zero) in tif_getimage.c.
    + Avoiding FPE (division by zero) for TIFFhowmany_32() and TIFFhowmany_64() macros by checking for
    denominator not zero before macros are executed. (fixes issue #628)
    + Add non-zero check before division in TIFFComputeStrip()
    + Fix wrong return of TIFFIsBigTIFF() in case byte-swapping is active
    + Setting the TIFFFieldInfo field set_field_type should consider field_writecount not field_readcount
    + Avoid memory leaks when using TIFFCreateDirectory() by releasing the allocated memory in the tif-structure.
    + For non-terminated ASCII arrays, the buffer is first enlarged before a NULL is set at the end to
    avoid deleting the last character. (fixes issue #579)
    + Check return value of _TIFFCreateAnonField(). (fixes issue #624, CVE-2024-7006)
    + Prevent some out-of-memory attacks (https://gitlab.com/libtiff/libtiff/-/issues/614#note_1602683857)
    + Ensure absolute seeking is forced independent of TIFFReadDirectory success. (fixes issue #618)
    + tif_dirinfo.c: re-enable TIFFTAG_EP_CFAREPEATPATTERNDIM and TIFFTAG_EP_CFAPATTERN tags (fixes issue #608)
    + Fix warnings with GCC 14
    + tif_dir.c: Log source file, line number, and input tif for directory count error (fixes issue #627)
    + Last usage of get_field_type of TIFFField structure at TIFFWriteDirectorySec() changed to using set_field_type.
    + tif_jpeg.c/tif_ojpeg.c: remove likely ifdef tricks related to old compilers or unusual setups
    + Remove _TIFFUInt64ToFloat() and _TIFFUInt64ToDouble()
    + Remove support for _MSC_VER &lt; 1500.
    + Use #ifdef _WIN32 to test for Windows, and tiffio.h: remove definition of __WIN32__
  * Documentation:
    + Amend manpages for changes in current directory index behaviour
    + Note on using TIFFFlush() before TIFFClose() to check that the data has been successfully written to the file. (fixes issue #506)
    + Update TIFF documentation about TIFFOpenOptions.rst and TIFFOpenOptionsSetMaxSingleMemAlloc() usage and some other small fixes (relates to CVE-2024-7006)
  * Re-added tools:
    + fax2ps
    + fax2tiff
    + pal2rgb
    + ppm2tiff
    + raw2tiff
    + rgb2ycbcr (not installed)
    + thumbnail (not installed)
    + tiff2bw
    + tiff2rgba
    + tiffcmp
    + tiffcrop
    + tiffdither
    + tiffgt
    + tiffmedian
    + tiff2ps
    + tiff2pdf
  * New/improved functionality:
    + tiff2rgba: Add background gradient option for alpha compositing
    + tiffcp: -i flag restored
  * Bug fixes for tools:
    + tiffcrop: address Coverity scan issues 1605444, 1605445, and 16054
    + tiffcrop: Apply "Fix heap-buffer-overflow in function extractImageSection"
    + tiffcrop: fix buffer overflows, use after free (fixes issue #542, issue #550, issue #552)
    + tiff2pdf: address Coverity scan issues
    + tiff2pdf: fix inconsistent PLANARCONFIG value for the input and output TIFF
    + tiff2pdf: fix issue with JPEG restart-interval marker when converting from JPEG-compressed files (fixes issue #539)
    + tiff2pdf: red and blue were being swapped for RGBA decoding (fixes issue #253)
    + tiff2pdf: fixes issue #596
    + thumbnail: address Coverity scan issues
    + tiffcp: Add check for limitMalloc return to fix Coverity 1603334
    + tiffcp: preserve TIFFTAG_REFERENCEBLACKWHITE when doing YCbCr JPEG -&gt; YCbCr JPEG
    + tiffcp: replace PHOTOMETRIC_YCBCR with PHOTOMETRIC_RGB when outputing to compression != JPEG (refs issue #571)
    + tiffcp: do not copy tags YCBCRCOEFFICIENTS, YCBCRSUBSAMPLING, YCBCRPOSITIONING, REFERENCEBLACKWHITE. Only set YCBCRSUBSAMPLING when generating YCbCr JPEG
    + tiffcp: Check also codec of input image, not only from output image (fixes issue #606)
    + Add some basic sanity checks for tiffcp and tiffcrop RGB-&gt;YCbCr JPEG conversions.
    + fax2ps and fax2tiff: memory leak fixes (fixes issue #476)
    + tiffmedian: memory leak fixes (fixes issue #599)
    + fax2tiff: fix EOFB interpretation (fixes issue #191)
    + fax2tiff: fix issue with unreasonable width input (fixes issue #249)
    + tiffcp and tiffcrop: fixes issue #228
    + tiff2rgba: fixes issue #469
    + tiffdither: fixes issue #473
    + tiffdump: fix wrong printf formatter in error message (Coverity 1472932)
    + tiffset: avoid false positive Coverity Scan warning on 64-bit builds (Coverity 1518997)
    + tifcp/tiffset: use correct format specifiers
  * Changes to contributed and unsupported tools
    + contrib/addtiffo: validate return of TIFFWriteEncodedXXXX() calls (Coverity 1024680)
- Remove patches contained in upstream:
  * tiff-CVE-2023-52356.patch
  * tiff-CVE-2024-7006.patch
- Tools are not built for now due to test failure: `FAIL: tiffcp-32bpp-None-jpeg.sh`</changelog>
  <changelog author="mrueckert@suse.de" date="1731153600">- switch build to cmake for the webp build - we need the cmake
  finder code</changelog>
  <changelog author="mrueckert@suse.de" date="1731326400">- In the previous change to enable the cmake based build
  we also needed python3-Sphinx to build the man pages, as unlike
  the autotools based build, the cmake based build does not fall
  back to the pre-built man pages.
  This causes build cycle. Split out the documentation building to
  break the cycle. The Tumbleweed release managers preferred this
  solution over a mini package.</changelog>
  <changelog author="mrueckert@suse.de" date="1731412800">- make doc packages noarch. no need to have those per arch
- ensure that the src rpms are named per build flavor:
  You might now ask why. Good question:
  1. the spec file during the build get patched. `@BUILD_FLAVOR@`
    gets replaced with the value. which means the src rpm between
    build flavor builds is not identical. Also the last built
    src.rpm will be published. with different content and runtime
    requires (aka our BuildRequires).
  2. for historical reasons the internal dependency tracking goes
    via the src.rpm package. So without having differently named
    src.rpms the build cycle we were trying to solve was not
    actually solved. So we append a suffix to the Name attribute
    in the preamble now.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1736769600">- Fix versioning of tiff-docs under Recommends</changelog>
  <changelog author="lubos.kocman@suse.com" date="1738756800">- Update test/test_directory.c not to fail on big-endian machines.
  * Add tiff-4.7.0-test_directory.patch
    Fix memory leaks (fixes issue #652)
  * Resolves bsc#1236834
    fix build fail on s390x</changelog>
  <changelog author="lubos.kocman@suse.com" date="1740398400">- Use python3-Sphinx instead of  %{primary_python}-Sphinx
  based on recommendation from python maintainers.
  * Fixes build issue of man flavor on 15.6</changelog>
  <changelog author="sfalken@opensuse.org" date="1742644800">- Add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to fix FTBFS with cmake4
- Add %check section
- Remove Group: declarations, no longer used</changelog>
  <changelog author="mvetter@suse.com" date="1754308800">- security update:
  * CVE-2025-8176 [bsc#1247108]
    Fix heap use-after-free in tools/tiffmedian.c
    + tiff-CVE-2025-8176.patch
  * CVE-2025-8177 [bsc#1247106]
    Fix possible buffer overflow in tools/thumbnail.c:setrow()
    + tiff-CVE-2025-8177.patch</changelog>
  <changelog author="mvetter@suse.com" date="1754308801">- bsc#1243503:
  Fix TIFFMergeFieldInfo() read_count=write_count=0
  + tiff-4.7.0-bsc1243503.patch</changelog>
</package>
<package pkgid="1fa01649c882afda69cce3a1e4afab3559a6ea16bec180aa4368a37c1acbb58b" name="libtiff-devel" arch="x86_64">
  <version epoch="0" ver="4.7.0" rel="150600.3.18.1"/>
  <changelog author="mvetter@suse.com" date="1668427200">- security update:
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1672833600">- Update to 4.5.0:
  * tdir_t type updated to uint32_t. This type is now used for the return
    value of TIFFCurrentDirectory() and TIFFNumberOfDirectories(), and as
    the argument of TIFFSetDirectory() and TIFFUnlinkDirectory()
  * Addition of an open option concept with the new functions TIFFOpenExt(),
    TIFFOpenWExt(), TIFFFdOpenExt(), TIFFClientOpenExt(), TIFFOpenOptionsAlloc(),
    TIFFOpenOptionsFree()
  * Leveraging above mentioned open option concept, addition of a new capability
    to limit the size of a single dynamic memory allocation done by the library
    with TIFFOpenOptionsSetMaxSingleMemAlloc()
  * Related to IFD-Loop detection refactoring, the number of IFDs that libtiff
    can browse through has been extended from 65535 to 1048576. This value is
    a build-time setting that can be configured with CMake's TIFF_MAX_DIR_COUNT
    variable or autoconf's --with-max-dir-count option.
  * Whole code base reformatting of .c/.h files using new .clang-format format
  * Documentation changed from static HTML and man pages to
    Restructured Text (rst). HTML and man pages are now build artifacts.
  * SONAME version bumped to 6 due to changes in symbol versioning.
  * autoconf/cmake: detect (not yet released) libjpeg-turbo 2.2 to take into
    its capability of handling both 8-bit JPEG and 12-bit JPEG in a single build.
  * autoconf/cmake: detect sphinx-build to build HTML and man pages
  * CMakeLists.txt: fix warning with -Wdev
  * CMake: correctly set default value of 'lzma' option when liblzma is detected
  * CMake: Moved linking of CMath::CMath into CMath_LIBRARY check.
  * Fix CMake build to be compatible with FetchContent.
  * cmake: Correct duplicate definition of _CRT_SECURE_NO_WARNINGS
  * cmake: Fixes for Visual Studio 2022.
  * Adds Requires.private generation so that pkg-config can correctly find
    the dependencies of libtiff.
  * Fix dependency on libm on Android
  * Fix build in tif_lzw.c
  * CMake: Add options for disabling tools, tests, contrib and docs.
  * tiffcrop: Fix memory allocation to require a larger buffer (CVE-2022-3570, CVE-2022-3598)
    [bsc#1205422]
  * tiffcrop: disable incompatibility of -Z, -X, -Y, -z options with any PAGE_MODE_x option
    (CVE-2022-3627, CVE-2022-3597, CVE-2022-3626)
  * tiffcrop: fix floating-point exception (CVE-2022-2056, CVE-2022-2057, CVE-2022-2058)
  * _TIFFCheckFieldIsValidForCodec(): return FALSE when passed a codec-specific tag
    and the codec is not configured (CVE-2022-34526)
  * Revised handling of TIFFTAG_INKNAMES and related TIFFTAG_NUMBEROFINKS value (CVE-2022-3599)
  * tiffcrop: -S option mutually exclusive (CVE-2022-2519, CVE-2022-2520, CVE-2022-2521)
- Drop tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
- Drop tiff-CVE-2022-34526.patch
- Drop tiff-CVE-2022-3599.patch
- Drop tiff-CVE-2022-3598.patch
- Drop tiff-CVE-2022-3970.patch
- Drop tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
- Drop tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1677067200">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1687262400">- Update to version 4.5.1:
  * Definition of tags reformatted (clang-format off) for better readability of tag comments in tiff.h and tif_dirinfo.c
  * Do not install libtiff-4.pc when tiff-install is reset.
  * Add versioninfo resource files for DLL and tools compiled with Windows MSVC and MINGW.
  * Disable clang-formatting for tif_config.h.cmake.in and tiffconf.h.cmake.in because sensitive for CMake scripts.
  * CMake: make WebP component name compatible with upstream ConfigWebP.cmake
  * CMake: make Findliblzma with upstream CMake config file
  * CMake: FindDeflate.cmake: fix several errors (issue #526).
  * CMake: FindLERC.cmake: version string return added.
  * CMake: export TiffConfig.cmake and TiffConfigVersion.cmake files
  * CMake: fix export of INTERFACE_INCLUDE_DIRECTORIES
  * Hardcode HOST_FILLORDER to FILLORDER_LSB2MSB and make 'H' flag of TIFFOpen() to warn and an alias of FILLORDER_MSB2LSB. tif_lerc.c: use WORDS_BIGENDIAN instead of HOST_BIGENDIAN.
  * Optimize relative seeking within TIFFSetDirectory() by using the learned list of IFD offsets.
  * Improve internal IFD offset and directory number map handling.
  * Behavior of TIFFOpen() mode "r+" in the Windows implementation adjusted to that of Linux.
  * TIFFDirectory td_fieldsset type changed from unsigned long, which can be 32 or 64 bits, to uint32_t (fixes issue #484).
  * tif_ojpeg.c: checking for division by zero (fixes issue #554).
  * LZWDecode(): avoid crash when trying to read again from a strip whith a missing end-of-information marker (fixes issue #548).
  * Fixed runtime error: applying zero offset to null pointer in countInkNamesString().
  * Fixing crash in TIFFUnlinkDirectory() when called with directory number zero ("TIFFUnlinkDirectory(0)") as well as fixing incorrect behaviour when unlinking the first directory.
  * tif_luv: check and correct for NaN data in uv_encode() (issue #530).
  * TIFFClose() avoid NULL pointer dereferencing (issue #515).
  * tif_hash_set.c: include tif_hash_set.h after tif_config.h to let a chance for GDAL symbol renaming trick.
  * Fax3: fix failure to decode some fax3 number_of_images and add test for Fax3 decoding issues (issue #513).
  * TIFFSetDirectory() and TIFFWriteDirectorySec() avoid harmless unsigned-integer-overflow (due to gdal oss-fuzz #54311 and #54343).
  * tif_ojpeg.c: fix issue #554 by checking for division by zero in OJPEGWriteHeaderInfo().
  * LZWDecode(): avoid crash when trying to read again from a strip whith a missing end-of-information marker (issue #548).
- Drop no longer needed patches:
  * tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * tiff-CVE-2022-48281.patch
  * tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1694779200">- Update to version 4.6.0:
  * API/ABI breaks: none
  * WebP decoder: validate WebP blob width, height, band count against
    TIFF parameters to avoid use of uninitialized variable, or decoding
    corrupted content without explicit error (fixes issue #581, issue #582).
  * WebP codec: turn exact mode when creating lossless files to avoid
    altering R,G,B values in areas where alpha=0
  * Fix TransferFunction writing of only two transfer functions.
  * TIFFReadDirectoryCheckOrder: avoid integer overflow. When it occurs,
    it should be harmless in practice though
  * tiffcp: remove -i option (ignore errors)
  * This version removes a big number of utilities that have suffered from
    lack of maintenance over the years and were the source of various
    reported security issues:
    + fax2ps
    + fax2tiff
    + pal2rgb
    + ppm2tiff
    + raw2tiff
    + rgb2ycbcr
    + thumbnail
    + tiff2bw
    + tiff2rgba
    + tiffcmp
    + tiffcrop
    + tiffdither
    + tiffgt
    + tiffmedian
    + tiff2ps
    + tiff2pdf
- Remove no longer needed tiff-4.0.3-compress-warning.patch.
- CVE-2023-25435 [bsc#1212607] tiffcrop is removed</changelog>
  <changelog author="mvetter@suse.com" date="1706270400">- security update:
  * CVE-2023-52356 [bsc#1219213]
    Fix segfault in TIFFReadRGBATileExt()
    + tiff-CVE-2023-52356.patch</changelog>
  <changelog author="mvetter@suse.com" date="1724068800">- security update:
  * CVE-2024-7006 [bsc#1228924]
    Fix pointer deref in tif_dirinfo.c
    + tiff-CVE-2024-7006.patch</changelog>
  <changelog author="mvetter@suse.com" date="1726660800">- Update to 4.7.0:
  * This version restores in the default build the availability of
    the tools that had been dropped in v4.6.0
    See https://libtiff.gitlab.io/libtiff/rfcs/rfc2_restoring_needed_tools.html#rfc2-restoring-needed-tools
  * Software configuration changes:
    + autoconf build: configure.ac: avoid -Werror passed to CFLAGS to interfere with feature detection
    + autoconf build: fix error when running make clean (fixes issue #630)
    + autoconf build: back off the minimum required automake version to 1.11
    + autoconf.ac: fix detection of windows.h for mingw (fixes issue #605)
    + libtiff-4.pc: Fix Requires.private missing Lerc. It provides a .pc file
    starting from version 4 (in autoconf builds, we assume that liblerc is at least version 4)
    + CMake: Fix TIFF_INCLUDE_DIRS
    + CMake: MinGW compilers don't need a .def file for shared library
    + CMake: move libdeflate and Lerc to Requires.private
    + CMake: enable resource compilation on all Windows.
  * Library changes:
    + Add TIFFOpenOptionsSetMaxCumulatedMemAlloc(). This function complements
    TIFFOpenOptionsSetMaxSingleMemAlloc() to define the maximum cumulated memory
    allocations in byte, for a given TIFF handle, that libtiff internal memory
    allocation functions are allowed.
    + TIFFWriteDirectory(): Avoid overwriting following data if an IFD is enlarged.
    + TIFFXYZToRGB: avoid integer overflow (fixes issue #644)
    + uv_decode() and uv_encode(): avoid potential out-of-bounds array index (fixes issue #645)
    + Fix cases where tif_curdir is set incorrectly. Fix cases where the current directory number (tif_curdir)
    is set inconsistently or incorrectly, depending on the previous history.
    + TIFFRead[Scanline/EncodedStrip/EncodeTile]: 0-initialize output buffer if setupdecode fails ;
    most codecs: zero-initialize (not-yet-written parts of) output buffer if failure (fixes issue #375)
    + OJPEG: reset subsampling_convert_state=0 in OJPEGPreDecode (fixes issue #183)
    + ThunderRLE: fix failure when decoding last run. Bug seen with GhostPDL
    + LERC codec: deal with issues with multi-band PlanarConfig=Contig and NaN values
    + tif_fax3.c: error out after a number of times end-of-file has been reached (fixes issue #583)
    + LZW: avoid warning about misaligned address with UBSAN (fixes issue #616)
    + TIFFReadRGBAStrip/TIFFReadRGBATile: add more validation of col/row (fixes issue #622, CVE-2023-52356)
    + tif_dirread.c: only issue TIFFGetFileSize() for large enough RAM requests
    + Avoid FPEs (division by zero) in tif_getimage.c.
    + Avoiding FPE (division by zero) for TIFFhowmany_32() and TIFFhowmany_64() macros by checking for
    denominator not zero before macros are executed. (fixes issue #628)
    + Add non-zero check before division in TIFFComputeStrip()
    + Fix wrong return of TIFFIsBigTIFF() in case byte-swapping is active
    + Setting the TIFFFieldInfo field set_field_type should consider field_writecount not field_readcount
    + Avoid memory leaks when using TIFFCreateDirectory() by releasing the allocated memory in the tif-structure.
    + For non-terminated ASCII arrays, the buffer is first enlarged before a NULL is set at the end to
    avoid deleting the last character. (fixes issue #579)
    + Check return value of _TIFFCreateAnonField(). (fixes issue #624, CVE-2024-7006)
    + Prevent some out-of-memory attacks (https://gitlab.com/libtiff/libtiff/-/issues/614#note_1602683857)
    + Ensure absolute seeking is forced independent of TIFFReadDirectory success. (fixes issue #618)
    + tif_dirinfo.c: re-enable TIFFTAG_EP_CFAREPEATPATTERNDIM and TIFFTAG_EP_CFAPATTERN tags (fixes issue #608)
    + Fix warnings with GCC 14
    + tif_dir.c: Log source file, line number, and input tif for directory count error (fixes issue #627)
    + Last usage of get_field_type of TIFFField structure at TIFFWriteDirectorySec() changed to using set_field_type.
    + tif_jpeg.c/tif_ojpeg.c: remove likely ifdef tricks related to old compilers or unusual setups
    + Remove _TIFFUInt64ToFloat() and _TIFFUInt64ToDouble()
    + Remove support for _MSC_VER &lt; 1500.
    + Use #ifdef _WIN32 to test for Windows, and tiffio.h: remove definition of __WIN32__
  * Documentation:
    + Amend manpages for changes in current directory index behaviour
    + Note on using TIFFFlush() before TIFFClose() to check that the data has been successfully written to the file. (fixes issue #506)
    + Update TIFF documentation about TIFFOpenOptions.rst and TIFFOpenOptionsSetMaxSingleMemAlloc() usage and some other small fixes (relates to CVE-2024-7006)
  * Re-added tools:
    + fax2ps
    + fax2tiff
    + pal2rgb
    + ppm2tiff
    + raw2tiff
    + rgb2ycbcr (not installed)
    + thumbnail (not installed)
    + tiff2bw
    + tiff2rgba
    + tiffcmp
    + tiffcrop
    + tiffdither
    + tiffgt
    + tiffmedian
    + tiff2ps
    + tiff2pdf
  * New/improved functionality:
    + tiff2rgba: Add background gradient option for alpha compositing
    + tiffcp: -i flag restored
  * Bug fixes for tools:
    + tiffcrop: address Coverity scan issues 1605444, 1605445, and 16054
    + tiffcrop: Apply "Fix heap-buffer-overflow in function extractImageSection"
    + tiffcrop: fix buffer overflows, use after free (fixes issue #542, issue #550, issue #552)
    + tiff2pdf: address Coverity scan issues
    + tiff2pdf: fix inconsistent PLANARCONFIG value for the input and output TIFF
    + tiff2pdf: fix issue with JPEG restart-interval marker when converting from JPEG-compressed files (fixes issue #539)
    + tiff2pdf: red and blue were being swapped for RGBA decoding (fixes issue #253)
    + tiff2pdf: fixes issue #596
    + thumbnail: address Coverity scan issues
    + tiffcp: Add check for limitMalloc return to fix Coverity 1603334
    + tiffcp: preserve TIFFTAG_REFERENCEBLACKWHITE when doing YCbCr JPEG -&gt; YCbCr JPEG
    + tiffcp: replace PHOTOMETRIC_YCBCR with PHOTOMETRIC_RGB when outputing to compression != JPEG (refs issue #571)
    + tiffcp: do not copy tags YCBCRCOEFFICIENTS, YCBCRSUBSAMPLING, YCBCRPOSITIONING, REFERENCEBLACKWHITE. Only set YCBCRSUBSAMPLING when generating YCbCr JPEG
    + tiffcp: Check also codec of input image, not only from output image (fixes issue #606)
    + Add some basic sanity checks for tiffcp and tiffcrop RGB-&gt;YCbCr JPEG conversions.
    + fax2ps and fax2tiff: memory leak fixes (fixes issue #476)
    + tiffmedian: memory leak fixes (fixes issue #599)
    + fax2tiff: fix EOFB interpretation (fixes issue #191)
    + fax2tiff: fix issue with unreasonable width input (fixes issue #249)
    + tiffcp and tiffcrop: fixes issue #228
    + tiff2rgba: fixes issue #469
    + tiffdither: fixes issue #473
    + tiffdump: fix wrong printf formatter in error message (Coverity 1472932)
    + tiffset: avoid false positive Coverity Scan warning on 64-bit builds (Coverity 1518997)
    + tifcp/tiffset: use correct format specifiers
  * Changes to contributed and unsupported tools
    + contrib/addtiffo: validate return of TIFFWriteEncodedXXXX() calls (Coverity 1024680)
- Remove patches contained in upstream:
  * tiff-CVE-2023-52356.patch
  * tiff-CVE-2024-7006.patch
- Tools are not built for now due to test failure: `FAIL: tiffcp-32bpp-None-jpeg.sh`</changelog>
  <changelog author="mrueckert@suse.de" date="1731153600">- switch build to cmake for the webp build - we need the cmake
  finder code</changelog>
  <changelog author="mrueckert@suse.de" date="1731326400">- In the previous change to enable the cmake based build
  we also needed python3-Sphinx to build the man pages, as unlike
  the autotools based build, the cmake based build does not fall
  back to the pre-built man pages.
  This causes build cycle. Split out the documentation building to
  break the cycle. The Tumbleweed release managers preferred this
  solution over a mini package.</changelog>
  <changelog author="mrueckert@suse.de" date="1731412800">- make doc packages noarch. no need to have those per arch
- ensure that the src rpms are named per build flavor:
  You might now ask why. Good question:
  1. the spec file during the build get patched. `@BUILD_FLAVOR@`
    gets replaced with the value. which means the src rpm between
    build flavor builds is not identical. Also the last built
    src.rpm will be published. with different content and runtime
    requires (aka our BuildRequires).
  2. for historical reasons the internal dependency tracking goes
    via the src.rpm package. So without having differently named
    src.rpms the build cycle we were trying to solve was not
    actually solved. So we append a suffix to the Name attribute
    in the preamble now.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1736769600">- Fix versioning of tiff-docs under Recommends</changelog>
  <changelog author="lubos.kocman@suse.com" date="1738756800">- Update test/test_directory.c not to fail on big-endian machines.
  * Add tiff-4.7.0-test_directory.patch
    Fix memory leaks (fixes issue #652)
  * Resolves bsc#1236834
    fix build fail on s390x</changelog>
  <changelog author="lubos.kocman@suse.com" date="1740398400">- Use python3-Sphinx instead of  %{primary_python}-Sphinx
  based on recommendation from python maintainers.
  * Fixes build issue of man flavor on 15.6</changelog>
  <changelog author="sfalken@opensuse.org" date="1742644800">- Add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to fix FTBFS with cmake4
- Add %check section
- Remove Group: declarations, no longer used</changelog>
  <changelog author="mvetter@suse.com" date="1754308800">- security update:
  * CVE-2025-8176 [bsc#1247108]
    Fix heap use-after-free in tools/tiffmedian.c
    + tiff-CVE-2025-8176.patch
  * CVE-2025-8177 [bsc#1247106]
    Fix possible buffer overflow in tools/thumbnail.c:setrow()
    + tiff-CVE-2025-8177.patch</changelog>
  <changelog author="mvetter@suse.com" date="1754308801">- bsc#1243503:
  Fix TIFFMergeFieldInfo() read_count=write_count=0
  + tiff-4.7.0-bsc1243503.patch</changelog>
  <changelog author="mvetter@suse.com" date="1755777600">- security update:
  * CVE-2025-8534 [bsc#1247582]
    Fix null pointer dereference in function PS_Lvl2page
    + tiff-CVE-2025-8534.patch
  * CVE-2025-9165 [bsc#1248330]
    Fix local execution manipulation can lead to memory leak
    + tiff-CVE-2025-9165.patch
  * CVE-2024-13978 [bsc#1247581]
    Fix null pointer dereference in tiff2pdf
    + tiff-CVE-2024-13978.patch</changelog>
  <changelog author="mvetter@suse.com" date="1757332800">- security update:
  * CVE-2025-8961 [bsc#1248117]
    Fix segmentation fault via main function of tiffcrop utility
    + tiff-CVE-2025-8961.patch</changelog>
</package>
<package pkgid="b5cf252bfbda32586cf3cf79bb98218b0436589c751e82195abd451c1beea2e9" name="libtiff-devel" arch="x86_64">
  <version epoch="0" ver="4.7.1" rel="150600.3.23.1"/>
  <changelog author="info@paolostivanin.com" date="1672833600">- Update to 4.5.0:
  * tdir_t type updated to uint32_t. This type is now used for the return
    value of TIFFCurrentDirectory() and TIFFNumberOfDirectories(), and as
    the argument of TIFFSetDirectory() and TIFFUnlinkDirectory()
  * Addition of an open option concept with the new functions TIFFOpenExt(),
    TIFFOpenWExt(), TIFFFdOpenExt(), TIFFClientOpenExt(), TIFFOpenOptionsAlloc(),
    TIFFOpenOptionsFree()
  * Leveraging above mentioned open option concept, addition of a new capability
    to limit the size of a single dynamic memory allocation done by the library
    with TIFFOpenOptionsSetMaxSingleMemAlloc()
  * Related to IFD-Loop detection refactoring, the number of IFDs that libtiff
    can browse through has been extended from 65535 to 1048576. This value is
    a build-time setting that can be configured with CMake's TIFF_MAX_DIR_COUNT
    variable or autoconf's --with-max-dir-count option.
  * Whole code base reformatting of .c/.h files using new .clang-format format
  * Documentation changed from static HTML and man pages to
    Restructured Text (rst). HTML and man pages are now build artifacts.
  * SONAME version bumped to 6 due to changes in symbol versioning.
  * autoconf/cmake: detect (not yet released) libjpeg-turbo 2.2 to take into
    its capability of handling both 8-bit JPEG and 12-bit JPEG in a single build.
  * autoconf/cmake: detect sphinx-build to build HTML and man pages
  * CMakeLists.txt: fix warning with -Wdev
  * CMake: correctly set default value of 'lzma' option when liblzma is detected
  * CMake: Moved linking of CMath::CMath into CMath_LIBRARY check.
  * Fix CMake build to be compatible with FetchContent.
  * cmake: Correct duplicate definition of _CRT_SECURE_NO_WARNINGS
  * cmake: Fixes for Visual Studio 2022.
  * Adds Requires.private generation so that pkg-config can correctly find
    the dependencies of libtiff.
  * Fix dependency on libm on Android
  * Fix build in tif_lzw.c
  * CMake: Add options for disabling tools, tests, contrib and docs.
  * tiffcrop: Fix memory allocation to require a larger buffer (CVE-2022-3570, CVE-2022-3598)
    [bsc#1205422]
  * tiffcrop: disable incompatibility of -Z, -X, -Y, -z options with any PAGE_MODE_x option
    (CVE-2022-3627, CVE-2022-3597, CVE-2022-3626)
  * tiffcrop: fix floating-point exception (CVE-2022-2056, CVE-2022-2057, CVE-2022-2058)
  * _TIFFCheckFieldIsValidForCodec(): return FALSE when passed a codec-specific tag
    and the codec is not configured (CVE-2022-34526)
  * Revised handling of TIFFTAG_INKNAMES and related TIFFTAG_NUMBEROFINKS value (CVE-2022-3599)
  * tiffcrop: -S option mutually exclusive (CVE-2022-2519, CVE-2022-2520, CVE-2022-2521)
- Drop tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
- Drop tiff-CVE-2022-34526.patch
- Drop tiff-CVE-2022-3599.patch
- Drop tiff-CVE-2022-3598.patch
- Drop tiff-CVE-2022-3970.patch
- Drop tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
- Drop tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1677067200">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1687262400">- Update to version 4.5.1:
  * Definition of tags reformatted (clang-format off) for better readability of tag comments in tiff.h and tif_dirinfo.c
  * Do not install libtiff-4.pc when tiff-install is reset.
  * Add versioninfo resource files for DLL and tools compiled with Windows MSVC and MINGW.
  * Disable clang-formatting for tif_config.h.cmake.in and tiffconf.h.cmake.in because sensitive for CMake scripts.
  * CMake: make WebP component name compatible with upstream ConfigWebP.cmake
  * CMake: make Findliblzma with upstream CMake config file
  * CMake: FindDeflate.cmake: fix several errors (issue #526).
  * CMake: FindLERC.cmake: version string return added.
  * CMake: export TiffConfig.cmake and TiffConfigVersion.cmake files
  * CMake: fix export of INTERFACE_INCLUDE_DIRECTORIES
  * Hardcode HOST_FILLORDER to FILLORDER_LSB2MSB and make 'H' flag of TIFFOpen() to warn and an alias of FILLORDER_MSB2LSB. tif_lerc.c: use WORDS_BIGENDIAN instead of HOST_BIGENDIAN.
  * Optimize relative seeking within TIFFSetDirectory() by using the learned list of IFD offsets.
  * Improve internal IFD offset and directory number map handling.
  * Behavior of TIFFOpen() mode "r+" in the Windows implementation adjusted to that of Linux.
  * TIFFDirectory td_fieldsset type changed from unsigned long, which can be 32 or 64 bits, to uint32_t (fixes issue #484).
  * tif_ojpeg.c: checking for division by zero (fixes issue #554).
  * LZWDecode(): avoid crash when trying to read again from a strip whith a missing end-of-information marker (fixes issue #548).
  * Fixed runtime error: applying zero offset to null pointer in countInkNamesString().
  * Fixing crash in TIFFUnlinkDirectory() when called with directory number zero ("TIFFUnlinkDirectory(0)") as well as fixing incorrect behaviour when unlinking the first directory.
  * tif_luv: check and correct for NaN data in uv_encode() (issue #530).
  * TIFFClose() avoid NULL pointer dereferencing (issue #515).
  * tif_hash_set.c: include tif_hash_set.h after tif_config.h to let a chance for GDAL symbol renaming trick.
  * Fax3: fix failure to decode some fax3 number_of_images and add test for Fax3 decoding issues (issue #513).
  * TIFFSetDirectory() and TIFFWriteDirectorySec() avoid harmless unsigned-integer-overflow (due to gdal oss-fuzz #54311 and #54343).
  * tif_ojpeg.c: fix issue #554 by checking for division by zero in OJPEGWriteHeaderInfo().
  * LZWDecode(): avoid crash when trying to read again from a strip whith a missing end-of-information marker (issue #548).
- Drop no longer needed patches:
  * tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * tiff-CVE-2022-48281.patch
  * tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1694779200">- Update to version 4.6.0:
  * API/ABI breaks: none
  * WebP decoder: validate WebP blob width, height, band count against
    TIFF parameters to avoid use of uninitialized variable, or decoding
    corrupted content without explicit error (fixes issue #581, issue #582).
  * WebP codec: turn exact mode when creating lossless files to avoid
    altering R,G,B values in areas where alpha=0
  * Fix TransferFunction writing of only two transfer functions.
  * TIFFReadDirectoryCheckOrder: avoid integer overflow. When it occurs,
    it should be harmless in practice though
  * tiffcp: remove -i option (ignore errors)
  * This version removes a big number of utilities that have suffered from
    lack of maintenance over the years and were the source of various
    reported security issues:
    + fax2ps
    + fax2tiff
    + pal2rgb
    + ppm2tiff
    + raw2tiff
    + rgb2ycbcr
    + thumbnail
    + tiff2bw
    + tiff2rgba
    + tiffcmp
    + tiffcrop
    + tiffdither
    + tiffgt
    + tiffmedian
    + tiff2ps
    + tiff2pdf
- Remove no longer needed tiff-4.0.3-compress-warning.patch.
- CVE-2023-25435 [bsc#1212607] tiffcrop is removed</changelog>
  <changelog author="mvetter@suse.com" date="1706270400">- security update:
  * CVE-2023-52356 [bsc#1219213]
    Fix segfault in TIFFReadRGBATileExt()
    + tiff-CVE-2023-52356.patch</changelog>
  <changelog author="mvetter@suse.com" date="1724068800">- security update:
  * CVE-2024-7006 [bsc#1228924]
    Fix pointer deref in tif_dirinfo.c
    + tiff-CVE-2024-7006.patch</changelog>
  <changelog author="mvetter@suse.com" date="1726660800">- Update to 4.7.0:
  * This version restores in the default build the availability of
    the tools that had been dropped in v4.6.0
    See https://libtiff.gitlab.io/libtiff/rfcs/rfc2_restoring_needed_tools.html#rfc2-restoring-needed-tools
  * Software configuration changes:
    + autoconf build: configure.ac: avoid -Werror passed to CFLAGS to interfere with feature detection
    + autoconf build: fix error when running make clean (fixes issue #630)
    + autoconf build: back off the minimum required automake version to 1.11
    + autoconf.ac: fix detection of windows.h for mingw (fixes issue #605)
    + libtiff-4.pc: Fix Requires.private missing Lerc. It provides a .pc file
    starting from version 4 (in autoconf builds, we assume that liblerc is at least version 4)
    + CMake: Fix TIFF_INCLUDE_DIRS
    + CMake: MinGW compilers don't need a .def file for shared library
    + CMake: move libdeflate and Lerc to Requires.private
    + CMake: enable resource compilation on all Windows.
  * Library changes:
    + Add TIFFOpenOptionsSetMaxCumulatedMemAlloc(). This function complements
    TIFFOpenOptionsSetMaxSingleMemAlloc() to define the maximum cumulated memory
    allocations in byte, for a given TIFF handle, that libtiff internal memory
    allocation functions are allowed.
    + TIFFWriteDirectory(): Avoid overwriting following data if an IFD is enlarged.
    + TIFFXYZToRGB: avoid integer overflow (fixes issue #644)
    + uv_decode() and uv_encode(): avoid potential out-of-bounds array index (fixes issue #645)
    + Fix cases where tif_curdir is set incorrectly. Fix cases where the current directory number (tif_curdir)
    is set inconsistently or incorrectly, depending on the previous history.
    + TIFFRead[Scanline/EncodedStrip/EncodeTile]: 0-initialize output buffer if setupdecode fails ;
    most codecs: zero-initialize (not-yet-written parts of) output buffer if failure (fixes issue #375)
    + OJPEG: reset subsampling_convert_state=0 in OJPEGPreDecode (fixes issue #183)
    + ThunderRLE: fix failure when decoding last run. Bug seen with GhostPDL
    + LERC codec: deal with issues with multi-band PlanarConfig=Contig and NaN values
    + tif_fax3.c: error out after a number of times end-of-file has been reached (fixes issue #583)
    + LZW: avoid warning about misaligned address with UBSAN (fixes issue #616)
    + TIFFReadRGBAStrip/TIFFReadRGBATile: add more validation of col/row (fixes issue #622, CVE-2023-52356)
    + tif_dirread.c: only issue TIFFGetFileSize() for large enough RAM requests
    + Avoid FPEs (division by zero) in tif_getimage.c.
    + Avoiding FPE (division by zero) for TIFFhowmany_32() and TIFFhowmany_64() macros by checking for
    denominator not zero before macros are executed. (fixes issue #628)
    + Add non-zero check before division in TIFFComputeStrip()
    + Fix wrong return of TIFFIsBigTIFF() in case byte-swapping is active
    + Setting the TIFFFieldInfo field set_field_type should consider field_writecount not field_readcount
    + Avoid memory leaks when using TIFFCreateDirectory() by releasing the allocated memory in the tif-structure.
    + For non-terminated ASCII arrays, the buffer is first enlarged before a NULL is set at the end to
    avoid deleting the last character. (fixes issue #579)
    + Check return value of _TIFFCreateAnonField(). (fixes issue #624, CVE-2024-7006)
    + Prevent some out-of-memory attacks (https://gitlab.com/libtiff/libtiff/-/issues/614#note_1602683857)
    + Ensure absolute seeking is forced independent of TIFFReadDirectory success. (fixes issue #618)
    + tif_dirinfo.c: re-enable TIFFTAG_EP_CFAREPEATPATTERNDIM and TIFFTAG_EP_CFAPATTERN tags (fixes issue #608)
    + Fix warnings with GCC 14
    + tif_dir.c: Log source file, line number, and input tif for directory count error (fixes issue #627)
    + Last usage of get_field_type of TIFFField structure at TIFFWriteDirectorySec() changed to using set_field_type.
    + tif_jpeg.c/tif_ojpeg.c: remove likely ifdef tricks related to old compilers or unusual setups
    + Remove _TIFFUInt64ToFloat() and _TIFFUInt64ToDouble()
    + Remove support for _MSC_VER &lt; 1500.
    + Use #ifdef _WIN32 to test for Windows, and tiffio.h: remove definition of __WIN32__
  * Documentation:
    + Amend manpages for changes in current directory index behaviour
    + Note on using TIFFFlush() before TIFFClose() to check that the data has been successfully written to the file. (fixes issue #506)
    + Update TIFF documentation about TIFFOpenOptions.rst and TIFFOpenOptionsSetMaxSingleMemAlloc() usage and some other small fixes (relates to CVE-2024-7006)
  * Re-added tools:
    + fax2ps
    + fax2tiff
    + pal2rgb
    + ppm2tiff
    + raw2tiff
    + rgb2ycbcr (not installed)
    + thumbnail (not installed)
    + tiff2bw
    + tiff2rgba
    + tiffcmp
    + tiffcrop
    + tiffdither
    + tiffgt
    + tiffmedian
    + tiff2ps
    + tiff2pdf
  * New/improved functionality:
    + tiff2rgba: Add background gradient option for alpha compositing
    + tiffcp: -i flag restored
  * Bug fixes for tools:
    + tiffcrop: address Coverity scan issues 1605444, 1605445, and 16054
    + tiffcrop: Apply "Fix heap-buffer-overflow in function extractImageSection"
    + tiffcrop: fix buffer overflows, use after free (fixes issue #542, issue #550, issue #552)
    + tiff2pdf: address Coverity scan issues
    + tiff2pdf: fix inconsistent PLANARCONFIG value for the input and output TIFF
    + tiff2pdf: fix issue with JPEG restart-interval marker when converting from JPEG-compressed files (fixes issue #539)
    + tiff2pdf: red and blue were being swapped for RGBA decoding (fixes issue #253)
    + tiff2pdf: fixes issue #596
    + thumbnail: address Coverity scan issues
    + tiffcp: Add check for limitMalloc return to fix Coverity 1603334
    + tiffcp: preserve TIFFTAG_REFERENCEBLACKWHITE when doing YCbCr JPEG -&gt; YCbCr JPEG
    + tiffcp: replace PHOTOMETRIC_YCBCR with PHOTOMETRIC_RGB when outputing to compression != JPEG (refs issue #571)
    + tiffcp: do not copy tags YCBCRCOEFFICIENTS, YCBCRSUBSAMPLING, YCBCRPOSITIONING, REFERENCEBLACKWHITE. Only set YCBCRSUBSAMPLING when generating YCbCr JPEG
    + tiffcp: Check also codec of input image, not only from output image (fixes issue #606)
    + Add some basic sanity checks for tiffcp and tiffcrop RGB-&gt;YCbCr JPEG conversions.
    + fax2ps and fax2tiff: memory leak fixes (fixes issue #476)
    + tiffmedian: memory leak fixes (fixes issue #599)
    + fax2tiff: fix EOFB interpretation (fixes issue #191)
    + fax2tiff: fix issue with unreasonable width input (fixes issue #249)
    + tiffcp and tiffcrop: fixes issue #228
    + tiff2rgba: fixes issue #469
    + tiffdither: fixes issue #473
    + tiffdump: fix wrong printf formatter in error message (Coverity 1472932)
    + tiffset: avoid false positive Coverity Scan warning on 64-bit builds (Coverity 1518997)
    + tifcp/tiffset: use correct format specifiers
  * Changes to contributed and unsupported tools
    + contrib/addtiffo: validate return of TIFFWriteEncodedXXXX() calls (Coverity 1024680)
- Remove patches contained in upstream:
  * tiff-CVE-2023-52356.patch
  * tiff-CVE-2024-7006.patch
- Tools are not built for now due to test failure: `FAIL: tiffcp-32bpp-None-jpeg.sh`</changelog>
  <changelog author="mrueckert@suse.de" date="1731153600">- switch build to cmake for the webp build - we need the cmake
  finder code</changelog>
  <changelog author="mrueckert@suse.de" date="1731326400">- In the previous change to enable the cmake based build
  we also needed python3-Sphinx to build the man pages, as unlike
  the autotools based build, the cmake based build does not fall
  back to the pre-built man pages.
  This causes build cycle. Split out the documentation building to
  break the cycle. The Tumbleweed release managers preferred this
  solution over a mini package.</changelog>
  <changelog author="mrueckert@suse.de" date="1731412800">- make doc packages noarch. no need to have those per arch
- ensure that the src rpms are named per build flavor:
  You might now ask why. Good question:
  1. the spec file during the build get patched. `@BUILD_FLAVOR@`
    gets replaced with the value. which means the src rpm between
    build flavor builds is not identical. Also the last built
    src.rpm will be published. with different content and runtime
    requires (aka our BuildRequires).
  2. for historical reasons the internal dependency tracking goes
    via the src.rpm package. So without having differently named
    src.rpms the build cycle we were trying to solve was not
    actually solved. So we append a suffix to the Name attribute
    in the preamble now.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1736769600">- Fix versioning of tiff-docs under Recommends</changelog>
  <changelog author="lubos.kocman@suse.com" date="1738756800">- Update test/test_directory.c not to fail on big-endian machines.
  * Add tiff-4.7.0-test_directory.patch
    Fix memory leaks (fixes issue #652)
  * Resolves bsc#1236834
    fix build fail on s390x</changelog>
  <changelog author="lubos.kocman@suse.com" date="1740398400">- Use python3-Sphinx instead of  %{primary_python}-Sphinx
  based on recommendation from python maintainers.
  * Fixes build issue of man flavor on 15.6</changelog>
  <changelog author="sfalken@opensuse.org" date="1742644800">- Add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to fix FTBFS with cmake4
- Add %check section
- Remove Group: declarations, no longer used</changelog>
  <changelog author="mvetter@suse.com" date="1754308800">- security update:
  * CVE-2025-8176 [bsc#1247108]
    Fix heap use-after-free in tools/tiffmedian.c
    + tiff-CVE-2025-8176.patch
  * CVE-2025-8177 [bsc#1247106]
    Fix possible buffer overflow in tools/thumbnail.c:setrow()
    + tiff-CVE-2025-8177.patch</changelog>
  <changelog author="mvetter@suse.com" date="1754308801">- bsc#1243503:
  Fix TIFFMergeFieldInfo() read_count=write_count=0
  + tiff-4.7.0-bsc1243503.patch</changelog>
  <changelog author="mvetter@suse.com" date="1755777600">- security update:
  * CVE-2025-8534 [bsc#1247582]
    Fix null pointer dereference in function PS_Lvl2page
    + tiff-CVE-2025-8534.patch
  * CVE-2025-9165 [bsc#1248330]
    Fix local execution manipulation can lead to memory leak
    + tiff-CVE-2025-9165.patch
  * CVE-2024-13978 [bsc#1247581]
    Fix null pointer dereference in tiff2pdf
    + tiff-CVE-2024-13978.patch</changelog>
  <changelog author="mvetter@suse.com" date="1757332800">- security update:
  * CVE-2025-8961 [bsc#1248117]
    Fix segmentation fault via main function of tiffcrop utility
    + tiff-CVE-2025-8961.patch</changelog>
  <changelog author="mvetter@suse.com" date="1758196800">- Update to 4.7.1:
  Software configuration changes:
  * Define HAVE_JPEGTURBO_DUAL_MODE_8_12 and LERC_STATIC in tif_config.h.
  * CMake: define WORDS_BIGENDIAN via tif_config.h
  * doc/CMakeLists.txt: remove useless cmake_minimum_required()
  * CMake: fix build with LLVM/Clang 17 (fixes issue #651)
  * CMake: set CMP0074 new policy
  * Set LINKER_LANGUAGE for C targets with C deps
  * Export tiffxx cmake target (fixes issue #674)
  * autogen.sh: Enable verbose wget.
  * configure.ac: Syntax updates for Autoconf 2.71
  * autogen.sh: Re-implement based on autoreconf. Failure to update
    config.guess/config.sub does not return error (fixes issue #672)
  * CMake: fix CMake 4.0 warning when minimum required version is &lt; 3.10.
  * CMake: Add build option tiff-static (fixes issue #709)
  Library changes:
  * Add TIFFOpenOptionsSetWarnAboutUnknownTags() for explicit control
    about emitting warnings for unknown tags. No longer emit warnings
    about unknown tags by default
  * tif_predict.c: speed-up decompression in some cases.
  Bug fixes:
  * tif_fax3: For fax group 3 data if no EOL is detected, reading is
    retried without synchronisation for EOLs. (fixes issue #54)
  * Updating TIFFMergeFieldInfo() with read_count=write_count=0 for
    FIELD_IGNORE. Updating TIFFMergeFieldInfo() with read_count=write_count=0 for
    FIELD_IGNORE. Improving handling when field_name = NULL. (fixes issue #532)
  * tiff.h: add COMPRESSION_JXL_DNG_1_7=52546 as used for JPEGXL compression in
    the DNG 1.7 specification
  * TIFFWriteDirectorySec: Increment string length for ASCII tags for codec tags
    defined with FIELD_xxx bits, as it is done for FIELD_CUSTOM tags. (fixes issue #648)
  * Do not error out on a tag whose tag count value is zero, just issue a warning.
    Fix parsing a private tag 0x80a6 (fixes issue #647)
  * TIFFDefaultTransferFunction(): give up beyond td_bitspersample = 24
    Fixes https://github.com/OSGeo/gdal/issues/10875)
  * tif_getimage.c: Remove unnecessary calls to TIFFRGBAImageOK() (fixes issue #175)
  * Fix writing a Predictor=3 file with non-native endianness
  * _TIFFVSetField(): fix potential use of unallocated memory (out-of-bounds
  * read / nullptr dereference) in case of out-of-memory situation when dealing with
    custom tags (fixes issue #663)
  * tif_fax3.c: Error out for CCITT fax encoding if SamplesPerPixel is not equal 1 and
    PlanarConfiguration = Contiguous (fixes issue #26)
  * tif_fax3.c: error out after a number of times end-of-line or unexpected bad code
    words have been reached. (fixes issue #670)
  * Fix memory leak in TIFFSetupStrips() (fixes issue #665)
  * tif_zip.c: Provide zlib allocation functions. Otherwise for zlib built with
  - DZ_SOLO inflating will fail.
  * Fix memory leak in _TIFFSetDefaultCompressionState. (fixes issue #676)
  * tif_predict.c: Don’t overwrite input buffer of TIFFWriteScanline() if "prediction"
    is enabled. Use extra working buffer in PredictorEncodeRow(). (fixes issue #5)
  * tif_getimage.c: update some integer overflow checks (fixes issue #79)
  * tif_getimage.c: Fix buffer underflow crash for less raster rows at
    TIFFReadRGBAImageOriented() (fixes issue #704, bsc#1250413, CVE-2025-9900)
  * TIFFReadRGBAImage(): several fixes to avoid buffer overflows.
  * Correct passing arguments to TIFFCvtIEEEFloatToNative() and TIFFCvtIEEEDoubleToNative()
    if HAVE_IEEEFP is not defined. (fixes issue #699)
  * LZWDecode(): avoid nullptr dereference when trying to read again after EOI marker
    has been found with remaining output bytes (fixes issue #698)
  * TIFFSetSubDirectory(): check _TIFFCheckDirNumberAndOffset() return.
  * TIFFUnlinkDirectory() and TIFFWriteDirectorySec(): clear tif_rawcp when clearing
    tif_rawdata (fixes issue #711)
  * JPEGEncodeRaw(): error out if a previous scanline failed to be written, to avoid
    out-of-bounds access (fixes issue #714)
  * tif_jpeg: Fix bug in JPEGDecodeRaw() if JPEG_LIB_MK1_OR_12BIT is defined for 8/12bit
    dual mode, introduced in libjpeg-turbo 2.2, which was actually released as 3.0.
    Fixes issue #717
  * add assert for TIFFReadCustomDirectory infoarray check.
  * ppm2tiff: Fix bug in pack_words trailing bytes, where last two bytes of each line
    were written wrongly. (fixes issue #467)
  * fax2ps: fix regression of commit 28c38d648b64a66c3218778c4745225fe3e3a06d where
    TIFFTAG_FAXFILLFUNC is being used rather than an output buffer (fixes issue #649)
  * tiff2pdf: Check TIFFTAG_TILELENGTH and TIFFTAGTILEWIDTH (fixes issue #650)
  * tiff2pdf: check h_samp and v_samp for range 1 to 4 to avoid division by zero.
    Fixes issue #654
  * tiff2pdf: avoid null pointer dereference. (fixes issue #741)
  * Improve non-secure integer overflow check (comparison of division result with
    multiplicant) at compiler optimisation in tiffcp, rgb2ycbcr and tiff2rgba.
    Fixes issue #546
  * tiff2rgba: fix some "a partial expression can generate an overflow before it is
    assigned to a broader type" warnings. (fixes issue #682)
  * tiffdither/tiffmedian: Don't skip the first line of the input image. (fixes issue #703)
  * tiffdither: avoid out-of-bounds read identified in issue #733
  * tiffmedian: error out if TIFFReadScanline() fails (fixes issue #707)
  * tiffmedian: close input file. (fixes issue #735)
  * thumbail: avoid potential out of bounds access (fixes issue #715)
  * tiffcrop: close open TIFF files and release allocated buffers before exiting in case
    of error to avoid memory leaks. (fixes issue #716)
  * tiffcrop: fix double-free and memory leak exposed by issue #721
  * tiffcrop: avoid buffer overflow. (fixes issue #740)
  * tiffcrop: avoid nullptr dereference. (fixes issue #734)
  * tiffdump: Fix coverity scan issue CID 1373365: Passing tainted expression *datamem
    to PrintData, which uses it as a divisor or modulus.
  * tiff2ps: check return of TIFFGetFiled() for TIFFTAG_STRIPBYTECOUNTS and
    TIFFTAG_TILEBYTECOUNTS to avoid NULL pointer dereference. (fixes issue #718)
  * tiffcmp: fix memory leak when second file cannot be opened. (fixes issue #718 and issue #729)
  * tiffcp: fix setting compression level for lossless codecs. (fixes issue #730)
  * raw2tiff: close input file before exit (fixes issue #742)
  Tools changes:
  * tiffinfo: add a -W switch to warn about unknown tags.
  * tiffdither: process all pages in input TIFF file.
  Documentation:
  * TIFFRGBAImage.rst note added for incorrect saving of images with TIFF orientation
    from 5 (LeftTop) to 8 (LeftBottom) in the raster.
  * TIFFRGBAImage.rst note added about un-associated alpha handling (fixes issue #67)
  * Update "Defining New TIFF Tags" description. (fixes issue #642, bsc#1248278, CVE-2025-8851)
  * Fix return type of TIFFReadEncodedTile()
  * Update the documentation to reflect deprecated typedefs.
  * TIFFWriteDirectory.rst: Clarify TIFFSetWriteOffset() only sets offset for image
    data and not for IFD data.
  * Update documentation on re-entrancy and thread safety.
  * Remove dead links to no more existing Awaresystems web-site.
  * Updating BigTIFF specification and some miscelaneous editions.
  * Replace some last links and remove last todos.
  * Added hints for correct allocation of TIFFYCbCrtoRGB structure and its
    associated buffers. (fixes issue #681)
  * Added chapter to "Using the TIFF Library" with links to handling multi-page TIFF
    and custom directories. (fixes issue #43)
  * update TIFFOpen.rst with the return values of mapproc and unmapproc. (fixes issue #12)
- Drop upstreamed patches:
  * tiff-4.7.0-test_directory.patch
  * tiff-CVE-2025-8176.patch
  * tiff-CVE-2025-8177.patch
  * tiff-4.7.0-bsc1243503.patch
  * tiff-CVE-2025-8534.patch
  * tiff-CVE-2025-9165.patch
  * tiff-CVE-2024-13978.patch
  * tiff-CVE-2025-8961.patch</changelog>
</package>
<package pkgid="fa9517451e8723c13edcb085572f342a7d9c37abf8e5d8e84a7d84736e92cda7" name="libtiff-devel" arch="x86_64">
  <version epoch="0" ver="4.7.1" rel="150600.3.26.1"/>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1677067200">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1687262400">- Update to version 4.5.1:
  * Definition of tags reformatted (clang-format off) for better readability of tag comments in tiff.h and tif_dirinfo.c
  * Do not install libtiff-4.pc when tiff-install is reset.
  * Add versioninfo resource files for DLL and tools compiled with Windows MSVC and MINGW.
  * Disable clang-formatting for tif_config.h.cmake.in and tiffconf.h.cmake.in because sensitive for CMake scripts.
  * CMake: make WebP component name compatible with upstream ConfigWebP.cmake
  * CMake: make Findliblzma with upstream CMake config file
  * CMake: FindDeflate.cmake: fix several errors (issue #526).
  * CMake: FindLERC.cmake: version string return added.
  * CMake: export TiffConfig.cmake and TiffConfigVersion.cmake files
  * CMake: fix export of INTERFACE_INCLUDE_DIRECTORIES
  * Hardcode HOST_FILLORDER to FILLORDER_LSB2MSB and make 'H' flag of TIFFOpen() to warn and an alias of FILLORDER_MSB2LSB. tif_lerc.c: use WORDS_BIGENDIAN instead of HOST_BIGENDIAN.
  * Optimize relative seeking within TIFFSetDirectory() by using the learned list of IFD offsets.
  * Improve internal IFD offset and directory number map handling.
  * Behavior of TIFFOpen() mode "r+" in the Windows implementation adjusted to that of Linux.
  * TIFFDirectory td_fieldsset type changed from unsigned long, which can be 32 or 64 bits, to uint32_t (fixes issue #484).
  * tif_ojpeg.c: checking for division by zero (fixes issue #554).
  * LZWDecode(): avoid crash when trying to read again from a strip whith a missing end-of-information marker (fixes issue #548).
  * Fixed runtime error: applying zero offset to null pointer in countInkNamesString().
  * Fixing crash in TIFFUnlinkDirectory() when called with directory number zero ("TIFFUnlinkDirectory(0)") as well as fixing incorrect behaviour when unlinking the first directory.
  * tif_luv: check and correct for NaN data in uv_encode() (issue #530).
  * TIFFClose() avoid NULL pointer dereferencing (issue #515).
  * tif_hash_set.c: include tif_hash_set.h after tif_config.h to let a chance for GDAL symbol renaming trick.
  * Fax3: fix failure to decode some fax3 number_of_images and add test for Fax3 decoding issues (issue #513).
  * TIFFSetDirectory() and TIFFWriteDirectorySec() avoid harmless unsigned-integer-overflow (due to gdal oss-fuzz #54311 and #54343).
  * tif_ojpeg.c: fix issue #554 by checking for division by zero in OJPEGWriteHeaderInfo().
  * LZWDecode(): avoid crash when trying to read again from a strip whith a missing end-of-information marker (issue #548).
- Drop no longer needed patches:
  * tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * tiff-CVE-2022-48281.patch
  * tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1694779200">- Update to version 4.6.0:
  * API/ABI breaks: none
  * WebP decoder: validate WebP blob width, height, band count against
    TIFF parameters to avoid use of uninitialized variable, or decoding
    corrupted content without explicit error (fixes issue #581, issue #582).
  * WebP codec: turn exact mode when creating lossless files to avoid
    altering R,G,B values in areas where alpha=0
  * Fix TransferFunction writing of only two transfer functions.
  * TIFFReadDirectoryCheckOrder: avoid integer overflow. When it occurs,
    it should be harmless in practice though
  * tiffcp: remove -i option (ignore errors)
  * This version removes a big number of utilities that have suffered from
    lack of maintenance over the years and were the source of various
    reported security issues:
    + fax2ps
    + fax2tiff
    + pal2rgb
    + ppm2tiff
    + raw2tiff
    + rgb2ycbcr
    + thumbnail
    + tiff2bw
    + tiff2rgba
    + tiffcmp
    + tiffcrop
    + tiffdither
    + tiffgt
    + tiffmedian
    + tiff2ps
    + tiff2pdf
- Remove no longer needed tiff-4.0.3-compress-warning.patch.
- CVE-2023-25435 [bsc#1212607] tiffcrop is removed</changelog>
  <changelog author="mvetter@suse.com" date="1706270400">- security update:
  * CVE-2023-52356 [bsc#1219213]
    Fix segfault in TIFFReadRGBATileExt()
    + tiff-CVE-2023-52356.patch</changelog>
  <changelog author="mvetter@suse.com" date="1724068800">- security update:
  * CVE-2024-7006 [bsc#1228924]
    Fix pointer deref in tif_dirinfo.c
    + tiff-CVE-2024-7006.patch</changelog>
  <changelog author="mvetter@suse.com" date="1726660800">- Update to 4.7.0:
  * This version restores in the default build the availability of
    the tools that had been dropped in v4.6.0
    See https://libtiff.gitlab.io/libtiff/rfcs/rfc2_restoring_needed_tools.html#rfc2-restoring-needed-tools
  * Software configuration changes:
    + autoconf build: configure.ac: avoid -Werror passed to CFLAGS to interfere with feature detection
    + autoconf build: fix error when running make clean (fixes issue #630)
    + autoconf build: back off the minimum required automake version to 1.11
    + autoconf.ac: fix detection of windows.h for mingw (fixes issue #605)
    + libtiff-4.pc: Fix Requires.private missing Lerc. It provides a .pc file
    starting from version 4 (in autoconf builds, we assume that liblerc is at least version 4)
    + CMake: Fix TIFF_INCLUDE_DIRS
    + CMake: MinGW compilers don't need a .def file for shared library
    + CMake: move libdeflate and Lerc to Requires.private
    + CMake: enable resource compilation on all Windows.
  * Library changes:
    + Add TIFFOpenOptionsSetMaxCumulatedMemAlloc(). This function complements
    TIFFOpenOptionsSetMaxSingleMemAlloc() to define the maximum cumulated memory
    allocations in byte, for a given TIFF handle, that libtiff internal memory
    allocation functions are allowed.
    + TIFFWriteDirectory(): Avoid overwriting following data if an IFD is enlarged.
    + TIFFXYZToRGB: avoid integer overflow (fixes issue #644)
    + uv_decode() and uv_encode(): avoid potential out-of-bounds array index (fixes issue #645)
    + Fix cases where tif_curdir is set incorrectly. Fix cases where the current directory number (tif_curdir)
    is set inconsistently or incorrectly, depending on the previous history.
    + TIFFRead[Scanline/EncodedStrip/EncodeTile]: 0-initialize output buffer if setupdecode fails ;
    most codecs: zero-initialize (not-yet-written parts of) output buffer if failure (fixes issue #375)
    + OJPEG: reset subsampling_convert_state=0 in OJPEGPreDecode (fixes issue #183)
    + ThunderRLE: fix failure when decoding last run. Bug seen with GhostPDL
    + LERC codec: deal with issues with multi-band PlanarConfig=Contig and NaN values
    + tif_fax3.c: error out after a number of times end-of-file has been reached (fixes issue #583)
    + LZW: avoid warning about misaligned address with UBSAN (fixes issue #616)
    + TIFFReadRGBAStrip/TIFFReadRGBATile: add more validation of col/row (fixes issue #622, CVE-2023-52356)
    + tif_dirread.c: only issue TIFFGetFileSize() for large enough RAM requests
    + Avoid FPEs (division by zero) in tif_getimage.c.
    + Avoiding FPE (division by zero) for TIFFhowmany_32() and TIFFhowmany_64() macros by checking for
    denominator not zero before macros are executed. (fixes issue #628)
    + Add non-zero check before division in TIFFComputeStrip()
    + Fix wrong return of TIFFIsBigTIFF() in case byte-swapping is active
    + Setting the TIFFFieldInfo field set_field_type should consider field_writecount not field_readcount
    + Avoid memory leaks when using TIFFCreateDirectory() by releasing the allocated memory in the tif-structure.
    + For non-terminated ASCII arrays, the buffer is first enlarged before a NULL is set at the end to
    avoid deleting the last character. (fixes issue #579)
    + Check return value of _TIFFCreateAnonField(). (fixes issue #624, CVE-2024-7006)
    + Prevent some out-of-memory attacks (https://gitlab.com/libtiff/libtiff/-/issues/614#note_1602683857)
    + Ensure absolute seeking is forced independent of TIFFReadDirectory success. (fixes issue #618)
    + tif_dirinfo.c: re-enable TIFFTAG_EP_CFAREPEATPATTERNDIM and TIFFTAG_EP_CFAPATTERN tags (fixes issue #608)
    + Fix warnings with GCC 14
    + tif_dir.c: Log source file, line number, and input tif for directory count error (fixes issue #627)
    + Last usage of get_field_type of TIFFField structure at TIFFWriteDirectorySec() changed to using set_field_type.
    + tif_jpeg.c/tif_ojpeg.c: remove likely ifdef tricks related to old compilers or unusual setups
    + Remove _TIFFUInt64ToFloat() and _TIFFUInt64ToDouble()
    + Remove support for _MSC_VER &lt; 1500.
    + Use #ifdef _WIN32 to test for Windows, and tiffio.h: remove definition of __WIN32__
  * Documentation:
    + Amend manpages for changes in current directory index behaviour
    + Note on using TIFFFlush() before TIFFClose() to check that the data has been successfully written to the file. (fixes issue #506)
    + Update TIFF documentation about TIFFOpenOptions.rst and TIFFOpenOptionsSetMaxSingleMemAlloc() usage and some other small fixes (relates to CVE-2024-7006)
  * Re-added tools:
    + fax2ps
    + fax2tiff
    + pal2rgb
    + ppm2tiff
    + raw2tiff
    + rgb2ycbcr (not installed)
    + thumbnail (not installed)
    + tiff2bw
    + tiff2rgba
    + tiffcmp
    + tiffcrop
    + tiffdither
    + tiffgt
    + tiffmedian
    + tiff2ps
    + tiff2pdf
  * New/improved functionality:
    + tiff2rgba: Add background gradient option for alpha compositing
    + tiffcp: -i flag restored
  * Bug fixes for tools:
    + tiffcrop: address Coverity scan issues 1605444, 1605445, and 16054
    + tiffcrop: Apply "Fix heap-buffer-overflow in function extractImageSection"
    + tiffcrop: fix buffer overflows, use after free (fixes issue #542, issue #550, issue #552)
    + tiff2pdf: address Coverity scan issues
    + tiff2pdf: fix inconsistent PLANARCONFIG value for the input and output TIFF
    + tiff2pdf: fix issue with JPEG restart-interval marker when converting from JPEG-compressed files (fixes issue #539)
    + tiff2pdf: red and blue were being swapped for RGBA decoding (fixes issue #253)
    + tiff2pdf: fixes issue #596
    + thumbnail: address Coverity scan issues
    + tiffcp: Add check for limitMalloc return to fix Coverity 1603334
    + tiffcp: preserve TIFFTAG_REFERENCEBLACKWHITE when doing YCbCr JPEG -&gt; YCbCr JPEG
    + tiffcp: replace PHOTOMETRIC_YCBCR with PHOTOMETRIC_RGB when outputing to compression != JPEG (refs issue #571)
    + tiffcp: do not copy tags YCBCRCOEFFICIENTS, YCBCRSUBSAMPLING, YCBCRPOSITIONING, REFERENCEBLACKWHITE. Only set YCBCRSUBSAMPLING when generating YCbCr JPEG
    + tiffcp: Check also codec of input image, not only from output image (fixes issue #606)
    + Add some basic sanity checks for tiffcp and tiffcrop RGB-&gt;YCbCr JPEG conversions.
    + fax2ps and fax2tiff: memory leak fixes (fixes issue #476)
    + tiffmedian: memory leak fixes (fixes issue #599)
    + fax2tiff: fix EOFB interpretation (fixes issue #191)
    + fax2tiff: fix issue with unreasonable width input (fixes issue #249)
    + tiffcp and tiffcrop: fixes issue #228
    + tiff2rgba: fixes issue #469
    + tiffdither: fixes issue #473
    + tiffdump: fix wrong printf formatter in error message (Coverity 1472932)
    + tiffset: avoid false positive Coverity Scan warning on 64-bit builds (Coverity 1518997)
    + tifcp/tiffset: use correct format specifiers
  * Changes to contributed and unsupported tools
    + contrib/addtiffo: validate return of TIFFWriteEncodedXXXX() calls (Coverity 1024680)
- Remove patches contained in upstream:
  * tiff-CVE-2023-52356.patch
  * tiff-CVE-2024-7006.patch
- Tools are not built for now due to test failure: `FAIL: tiffcp-32bpp-None-jpeg.sh`</changelog>
  <changelog author="mrueckert@suse.de" date="1731153600">- switch build to cmake for the webp build - we need the cmake
  finder code</changelog>
  <changelog author="mrueckert@suse.de" date="1731326400">- In the previous change to enable the cmake based build
  we also needed python3-Sphinx to build the man pages, as unlike
  the autotools based build, the cmake based build does not fall
  back to the pre-built man pages.
  This causes build cycle. Split out the documentation building to
  break the cycle. The Tumbleweed release managers preferred this
  solution over a mini package.</changelog>
  <changelog author="mrueckert@suse.de" date="1731412800">- make doc packages noarch. no need to have those per arch
- ensure that the src rpms are named per build flavor:
  You might now ask why. Good question:
  1. the spec file during the build get patched. `@BUILD_FLAVOR@`
    gets replaced with the value. which means the src rpm between
    build flavor builds is not identical. Also the last built
    src.rpm will be published. with different content and runtime
    requires (aka our BuildRequires).
  2. for historical reasons the internal dependency tracking goes
    via the src.rpm package. So without having differently named
    src.rpms the build cycle we were trying to solve was not
    actually solved. So we append a suffix to the Name attribute
    in the preamble now.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1736769600">- Fix versioning of tiff-docs under Recommends</changelog>
  <changelog author="lubos.kocman@suse.com" date="1738756800">- Update test/test_directory.c not to fail on big-endian machines.
  * Add tiff-4.7.0-test_directory.patch
    Fix memory leaks (fixes issue #652)
  * Resolves bsc#1236834
    fix build fail on s390x</changelog>
  <changelog author="lubos.kocman@suse.com" date="1740398400">- Use python3-Sphinx instead of  %{primary_python}-Sphinx
  based on recommendation from python maintainers.
  * Fixes build issue of man flavor on 15.6</changelog>
  <changelog author="sfalken@opensuse.org" date="1742644800">- Add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to fix FTBFS with cmake4
- Add %check section
- Remove Group: declarations, no longer used</changelog>
  <changelog author="mvetter@suse.com" date="1754308800">- security update:
  * CVE-2025-8176 [bsc#1247108]
    Fix heap use-after-free in tools/tiffmedian.c
    + tiff-CVE-2025-8176.patch
  * CVE-2025-8177 [bsc#1247106]
    Fix possible buffer overflow in tools/thumbnail.c:setrow()
    + tiff-CVE-2025-8177.patch</changelog>
  <changelog author="mvetter@suse.com" date="1754308801">- bsc#1243503:
  Fix TIFFMergeFieldInfo() read_count=write_count=0
  + tiff-4.7.0-bsc1243503.patch</changelog>
  <changelog author="mvetter@suse.com" date="1755777600">- security update:
  * CVE-2025-8534 [bsc#1247582]
    Fix null pointer dereference in function PS_Lvl2page
    + tiff-CVE-2025-8534.patch
  * CVE-2025-9165 [bsc#1248330]
    Fix local execution manipulation can lead to memory leak
    + tiff-CVE-2025-9165.patch
  * CVE-2024-13978 [bsc#1247581]
    Fix null pointer dereference in tiff2pdf
    + tiff-CVE-2024-13978.patch</changelog>
  <changelog author="mvetter@suse.com" date="1757332800">- security update:
  * CVE-2025-8961 [bsc#1248117]
    Fix segmentation fault via main function of tiffcrop utility
    + tiff-CVE-2025-8961.patch</changelog>
  <changelog author="mvetter@suse.com" date="1758196800">- Update to 4.7.1:
  Software configuration changes:
  * Define HAVE_JPEGTURBO_DUAL_MODE_8_12 and LERC_STATIC in tif_config.h.
  * CMake: define WORDS_BIGENDIAN via tif_config.h
  * doc/CMakeLists.txt: remove useless cmake_minimum_required()
  * CMake: fix build with LLVM/Clang 17 (fixes issue #651)
  * CMake: set CMP0074 new policy
  * Set LINKER_LANGUAGE for C targets with C deps
  * Export tiffxx cmake target (fixes issue #674)
  * autogen.sh: Enable verbose wget.
  * configure.ac: Syntax updates for Autoconf 2.71
  * autogen.sh: Re-implement based on autoreconf. Failure to update
    config.guess/config.sub does not return error (fixes issue #672)
  * CMake: fix CMake 4.0 warning when minimum required version is &lt; 3.10.
  * CMake: Add build option tiff-static (fixes issue #709)
  Library changes:
  * Add TIFFOpenOptionsSetWarnAboutUnknownTags() for explicit control
    about emitting warnings for unknown tags. No longer emit warnings
    about unknown tags by default
  * tif_predict.c: speed-up decompression in some cases.
  Bug fixes:
  * tif_fax3: For fax group 3 data if no EOL is detected, reading is
    retried without synchronisation for EOLs. (fixes issue #54)
  * Updating TIFFMergeFieldInfo() with read_count=write_count=0 for
    FIELD_IGNORE. Updating TIFFMergeFieldInfo() with read_count=write_count=0 for
    FIELD_IGNORE. Improving handling when field_name = NULL. (fixes issue #532)
  * tiff.h: add COMPRESSION_JXL_DNG_1_7=52546 as used for JPEGXL compression in
    the DNG 1.7 specification
  * TIFFWriteDirectorySec: Increment string length for ASCII tags for codec tags
    defined with FIELD_xxx bits, as it is done for FIELD_CUSTOM tags. (fixes issue #648)
  * Do not error out on a tag whose tag count value is zero, just issue a warning.
    Fix parsing a private tag 0x80a6 (fixes issue #647)
  * TIFFDefaultTransferFunction(): give up beyond td_bitspersample = 24
    Fixes https://github.com/OSGeo/gdal/issues/10875)
  * tif_getimage.c: Remove unnecessary calls to TIFFRGBAImageOK() (fixes issue #175)
  * Fix writing a Predictor=3 file with non-native endianness
  * _TIFFVSetField(): fix potential use of unallocated memory (out-of-bounds
  * read / nullptr dereference) in case of out-of-memory situation when dealing with
    custom tags (fixes issue #663)
  * tif_fax3.c: Error out for CCITT fax encoding if SamplesPerPixel is not equal 1 and
    PlanarConfiguration = Contiguous (fixes issue #26)
  * tif_fax3.c: error out after a number of times end-of-line or unexpected bad code
    words have been reached. (fixes issue #670)
  * Fix memory leak in TIFFSetupStrips() (fixes issue #665)
  * tif_zip.c: Provide zlib allocation functions. Otherwise for zlib built with
  - DZ_SOLO inflating will fail.
  * Fix memory leak in _TIFFSetDefaultCompressionState. (fixes issue #676)
  * tif_predict.c: Don’t overwrite input buffer of TIFFWriteScanline() if "prediction"
    is enabled. Use extra working buffer in PredictorEncodeRow(). (fixes issue #5)
  * tif_getimage.c: update some integer overflow checks (fixes issue #79)
  * tif_getimage.c: Fix buffer underflow crash for less raster rows at
    TIFFReadRGBAImageOriented() (fixes issue #704, bsc#1250413, CVE-2025-9900)
  * TIFFReadRGBAImage(): several fixes to avoid buffer overflows.
  * Correct passing arguments to TIFFCvtIEEEFloatToNative() and TIFFCvtIEEEDoubleToNative()
    if HAVE_IEEEFP is not defined. (fixes issue #699)
  * LZWDecode(): avoid nullptr dereference when trying to read again after EOI marker
    has been found with remaining output bytes (fixes issue #698)
  * TIFFSetSubDirectory(): check _TIFFCheckDirNumberAndOffset() return.
  * TIFFUnlinkDirectory() and TIFFWriteDirectorySec(): clear tif_rawcp when clearing
    tif_rawdata (fixes issue #711)
  * JPEGEncodeRaw(): error out if a previous scanline failed to be written, to avoid
    out-of-bounds access (fixes issue #714)
  * tif_jpeg: Fix bug in JPEGDecodeRaw() if JPEG_LIB_MK1_OR_12BIT is defined for 8/12bit
    dual mode, introduced in libjpeg-turbo 2.2, which was actually released as 3.0.
    Fixes issue #717
  * add assert for TIFFReadCustomDirectory infoarray check.
  * ppm2tiff: Fix bug in pack_words trailing bytes, where last two bytes of each line
    were written wrongly. (fixes issue #467)
  * fax2ps: fix regression of commit 28c38d648b64a66c3218778c4745225fe3e3a06d where
    TIFFTAG_FAXFILLFUNC is being used rather than an output buffer (fixes issue #649)
  * tiff2pdf: Check TIFFTAG_TILELENGTH and TIFFTAGTILEWIDTH (fixes issue #650)
  * tiff2pdf: check h_samp and v_samp for range 1 to 4 to avoid division by zero.
    Fixes issue #654
  * tiff2pdf: avoid null pointer dereference. (fixes issue #741)
  * Improve non-secure integer overflow check (comparison of division result with
    multiplicant) at compiler optimisation in tiffcp, rgb2ycbcr and tiff2rgba.
    Fixes issue #546
  * tiff2rgba: fix some "a partial expression can generate an overflow before it is
    assigned to a broader type" warnings. (fixes issue #682)
  * tiffdither/tiffmedian: Don't skip the first line of the input image. (fixes issue #703)
  * tiffdither: avoid out-of-bounds read identified in issue #733
  * tiffmedian: error out if TIFFReadScanline() fails (fixes issue #707)
  * tiffmedian: close input file. (fixes issue #735)
  * thumbail: avoid potential out of bounds access (fixes issue #715)
  * tiffcrop: close open TIFF files and release allocated buffers before exiting in case
    of error to avoid memory leaks. (fixes issue #716)
  * tiffcrop: fix double-free and memory leak exposed by issue #721
  * tiffcrop: avoid buffer overflow. (fixes issue #740)
  * tiffcrop: avoid nullptr dereference. (fixes issue #734)
  * tiffdump: Fix coverity scan issue CID 1373365: Passing tainted expression *datamem
    to PrintData, which uses it as a divisor or modulus.
  * tiff2ps: check return of TIFFGetFiled() for TIFFTAG_STRIPBYTECOUNTS and
    TIFFTAG_TILEBYTECOUNTS to avoid NULL pointer dereference. (fixes issue #718)
  * tiffcmp: fix memory leak when second file cannot be opened. (fixes issue #718 and issue #729)
  * tiffcp: fix setting compression level for lossless codecs. (fixes issue #730)
  * raw2tiff: close input file before exit (fixes issue #742)
  Tools changes:
  * tiffinfo: add a -W switch to warn about unknown tags.
  * tiffdither: process all pages in input TIFF file.
  Documentation:
  * TIFFRGBAImage.rst note added for incorrect saving of images with TIFF orientation
    from 5 (LeftTop) to 8 (LeftBottom) in the raster.
  * TIFFRGBAImage.rst note added about un-associated alpha handling (fixes issue #67)
  * Update "Defining New TIFF Tags" description. (fixes issue #642, bsc#1248278, CVE-2025-8851)
  * Fix return type of TIFFReadEncodedTile()
  * Update the documentation to reflect deprecated typedefs.
  * TIFFWriteDirectory.rst: Clarify TIFFSetWriteOffset() only sets offset for image
    data and not for IFD data.
  * Update documentation on re-entrancy and thread safety.
  * Remove dead links to no more existing Awaresystems web-site.
  * Updating BigTIFF specification and some miscelaneous editions.
  * Replace some last links and remove last todos.
  * Added hints for correct allocation of TIFFYCbCrtoRGB structure and its
    associated buffers. (fixes issue #681)
  * Added chapter to "Using the TIFF Library" with links to handling multi-page TIFF
    and custom directories. (fixes issue #43)
  * update TIFFOpen.rst with the return values of mapproc and unmapproc. (fixes issue #12)
- Drop upstreamed patches:
  * tiff-4.7.0-test_directory.patch
  * tiff-CVE-2025-8176.patch
  * tiff-CVE-2025-8177.patch
  * tiff-4.7.0-bsc1243503.patch
  * tiff-CVE-2025-8534.patch
  * tiff-CVE-2025-9165.patch
  * tiff-CVE-2024-13978.patch
  * tiff-CVE-2025-8961.patch</changelog>
  <changelog author="mvetter@suse.com" date="1777291200">- * CVE-2026-4775: Signed integer overflow in putcontig8bitYCbCr44tile (bsc#1260411)
    Add tiff-CVE-2026-4775.patch</changelog>
</package>
<package pkgid="23a0c23bfe7e11c312e30b8e2df9e18cabfbc3055367452f0bbc37c8e3e2bca6" name="libtiff5-32bit" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="150000.45.50.1"/>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
  <changelog author="mvetter@suse.com" date="1701864000">- security update:
  * CVE-2023-2731 [bsc#1211478]
    Fix null pointer deference in LZWDecode()
    This patch also contains a required commit which is marked
    to fix CVE-2022-1622 [bsc#1199483] but we are not vulnerable
    to that CVE because relevant code is not present.
    + tiff-CVE-2023-2731.patch
  * CVE-2023-26965 [bsc#1212398]
    Fix heap-based use after free in loadImage()
    + tiff-CVE-2023-26965.patch
  * CVE-2022-40090 [bsc#1214680]
    Fix infinite loop in TIFFReadDirectory()
    + tiff-CVE-2022-40090.patch
  * CVE-2023-1916 [bsc#1210231]
    Fix out-of-bounds read in extractImageSection()
    + tiff-CVE-2023-1916.patch</changelog>
  <changelog author="mvetter@suse.com" date="1706270400">- security update:
  * CVE-2023-52356 [bsc#1219213]
    Fix segfault in TIFFReadRGBATileExt()
    + tiff-CVE-2023-52356.patch</changelog>
  <changelog author="mvetter@suse.com" date="1710331200">- security update:
  * CVE-2023-40745[bsc#1214687] CVE-2023-41175[bsc#1214686] [bsc#1221187]
    CVE-2023-38288[bsc#1213590]
    Fix potential int overflow in raw2tiff.c and tiffcp.c
    Rename tiff-CVE-2023-38288.patch into
    tiff-CVE-2023-38288,CVE-2023-40745,CVE-2023-41175.patch</changelog>
  <changelog author="mvetter@suse.com" date="1716984000">- security update:
  * CVE-2023-3164 [bsc#1212233]
    Fix heap buffer overflow in tiffcrop
    + tiff-CVE-2023-3164.patch</changelog>
  <changelog author="mvetter@suse.com" date="1724068800">- security update:
  * CVE-2024-7006 [bsc#1228924]
    Fix pointer deref in tif_dirinfo.c
    + tiff-CVE-2024-7006.patch</changelog>
  <changelog author="mvetter@suse.com" date="1754308800">- security update:
  * CVE-2025-8176 [bsc#1247108]
    Fix heap use-after-free in tools/tiffmedian.c
    + tiff-CVE-2025-8176.patch
  * CVE-2025-8177 [bsc#1247106]
    Fix possible buffer overflow in tools/thumbnail.c:setrow()
    + tiff-CVE-2025-8177.patch</changelog>
</package>
<package pkgid="7183c3bec39bb31ba7117ca243f02a37f7e8d3b18aeeb0f3d7b3c27c9a6a045c" name="libtiff5-32bit" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="150000.45.55.1"/>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
  <changelog author="mvetter@suse.com" date="1701864000">- security update:
  * CVE-2023-2731 [bsc#1211478]
    Fix null pointer deference in LZWDecode()
    This patch also contains a required commit which is marked
    to fix CVE-2022-1622 [bsc#1199483] but we are not vulnerable
    to that CVE because relevant code is not present.
    + tiff-CVE-2023-2731.patch
  * CVE-2023-26965 [bsc#1212398]
    Fix heap-based use after free in loadImage()
    + tiff-CVE-2023-26965.patch
  * CVE-2022-40090 [bsc#1214680]
    Fix infinite loop in TIFFReadDirectory()
    + tiff-CVE-2022-40090.patch
  * CVE-2023-1916 [bsc#1210231]
    Fix out-of-bounds read in extractImageSection()
    + tiff-CVE-2023-1916.patch</changelog>
  <changelog author="mvetter@suse.com" date="1706270400">- security update:
  * CVE-2023-52356 [bsc#1219213]
    Fix segfault in TIFFReadRGBATileExt()
    + tiff-CVE-2023-52356.patch</changelog>
  <changelog author="mvetter@suse.com" date="1710331200">- security update:
  * CVE-2023-40745[bsc#1214687] CVE-2023-41175[bsc#1214686] [bsc#1221187]
    CVE-2023-38288[bsc#1213590]
    Fix potential int overflow in raw2tiff.c and tiffcp.c
    Rename tiff-CVE-2023-38288.patch into
    tiff-CVE-2023-38288,CVE-2023-40745,CVE-2023-41175.patch</changelog>
  <changelog author="mvetter@suse.com" date="1716984000">- security update:
  * CVE-2023-3164 [bsc#1212233]
    Fix heap buffer overflow in tiffcrop
    + tiff-CVE-2023-3164.patch</changelog>
  <changelog author="mvetter@suse.com" date="1724068800">- security update:
  * CVE-2024-7006 [bsc#1228924]
    Fix pointer deref in tif_dirinfo.c
    + tiff-CVE-2024-7006.patch</changelog>
  <changelog author="mvetter@suse.com" date="1754308800">- security update:
  * CVE-2025-8176 [bsc#1247108]
    Fix heap use-after-free in tools/tiffmedian.c
    + tiff-CVE-2025-8176.patch
  * CVE-2025-8177 [bsc#1247106]
    Fix possible buffer overflow in tools/thumbnail.c:setrow()
    + tiff-CVE-2025-8177.patch</changelog>
  <changelog author="mvetter@suse.com" date="1755777600">- security update:
  * CVE-2025-8534 [bsc#1247582]
    Fix null pointer dereference in function PS_Lvl2page
    + tiff-CVE-2025-8534.patch
  * CVE-2025-9165 [bsc#1248330]
    Fix local execution manipulation can lead to memory leak
    + tiff-CVE-2025-9165.patch</changelog>
  <changelog author="mvetter@suse.com" date="1757332800">- security update:
  * CVE-2025-8961 [bsc#1248117]
    Fix segmentation fault via main function of tiffcrop utility
    + tiff-CVE-2025-8961.patch</changelog>
</package>
<package pkgid="390f37784da247391fb1ebd5722205572099d0ebddcd74072edf8f6d4cde0781" name="libtiff5-32bit" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="150000.45.60.1"/>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
  <changelog author="mvetter@suse.com" date="1701864000">- security update:
  * CVE-2023-2731 [bsc#1211478]
    Fix null pointer deference in LZWDecode()
    This patch also contains a required commit which is marked
    to fix CVE-2022-1622 [bsc#1199483] but we are not vulnerable
    to that CVE because relevant code is not present.
    + tiff-CVE-2023-2731.patch
  * CVE-2023-26965 [bsc#1212398]
    Fix heap-based use after free in loadImage()
    + tiff-CVE-2023-26965.patch
  * CVE-2022-40090 [bsc#1214680]
    Fix infinite loop in TIFFReadDirectory()
    + tiff-CVE-2022-40090.patch
  * CVE-2023-1916 [bsc#1210231]
    Fix out-of-bounds read in extractImageSection()
    + tiff-CVE-2023-1916.patch</changelog>
  <changelog author="mvetter@suse.com" date="1706270400">- security update:
  * CVE-2023-52356 [bsc#1219213]
    Fix segfault in TIFFReadRGBATileExt()
    + tiff-CVE-2023-52356.patch</changelog>
  <changelog author="mvetter@suse.com" date="1710331200">- security update:
  * CVE-2023-40745[bsc#1214687] CVE-2023-41175[bsc#1214686] [bsc#1221187]
    CVE-2023-38288[bsc#1213590]
    Fix potential int overflow in raw2tiff.c and tiffcp.c
    Rename tiff-CVE-2023-38288.patch into
    tiff-CVE-2023-38288,CVE-2023-40745,CVE-2023-41175.patch</changelog>
  <changelog author="mvetter@suse.com" date="1716984000">- security update:
  * CVE-2023-3164 [bsc#1212233]
    Fix heap buffer overflow in tiffcrop
    + tiff-CVE-2023-3164.patch</changelog>
  <changelog author="mvetter@suse.com" date="1724068800">- security update:
  * CVE-2024-7006 [bsc#1228924]
    Fix pointer deref in tif_dirinfo.c
    + tiff-CVE-2024-7006.patch</changelog>
  <changelog author="mvetter@suse.com" date="1754308800">- security update:
  * CVE-2025-8176 [bsc#1247108]
    Fix heap use-after-free in tools/tiffmedian.c
    + tiff-CVE-2025-8176.patch
  * CVE-2025-8177 [bsc#1247106]
    Fix possible buffer overflow in tools/thumbnail.c:setrow()
    + tiff-CVE-2025-8177.patch</changelog>
  <changelog author="mvetter@suse.com" date="1755777600">- security update:
  * CVE-2025-8534 [bsc#1247582]
    Fix null pointer dereference in function PS_Lvl2page
    + tiff-CVE-2025-8534.patch
  * CVE-2025-9165 [bsc#1248330]
    Fix local execution manipulation can lead to memory leak
    + tiff-CVE-2025-9165.patch</changelog>
  <changelog author="mvetter@suse.com" date="1757332800">- security update:
  * CVE-2025-8961 [bsc#1248117]
    Fix segmentation fault via main function of tiffcrop utility
    + tiff-CVE-2025-8961.patch</changelog>
  <changelog author="fstrba@suse.com" date="1760356800">- security update:
  * CVE-2025-9900 [bsc#1250413]
    Fix Write-What-Where in libtiff via TIFFReadRGBAImageOriented
    + tiff-CVE-2025-9900.patch</changelog>
</package>
<package pkgid="1497025fc04698f090ee3fa3369b0d6c1eb0f66ebd5d9a413986d445206d48fb" name="libtiff5-32bit" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="150000.45.63.1"/>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
  <changelog author="mvetter@suse.com" date="1701864000">- security update:
  * CVE-2023-2731 [bsc#1211478]
    Fix null pointer deference in LZWDecode()
    This patch also contains a required commit which is marked
    to fix CVE-2022-1622 [bsc#1199483] but we are not vulnerable
    to that CVE because relevant code is not present.
    + tiff-CVE-2023-2731.patch
  * CVE-2023-26965 [bsc#1212398]
    Fix heap-based use after free in loadImage()
    + tiff-CVE-2023-26965.patch
  * CVE-2022-40090 [bsc#1214680]
    Fix infinite loop in TIFFReadDirectory()
    + tiff-CVE-2022-40090.patch
  * CVE-2023-1916 [bsc#1210231]
    Fix out-of-bounds read in extractImageSection()
    + tiff-CVE-2023-1916.patch</changelog>
  <changelog author="mvetter@suse.com" date="1706270400">- security update:
  * CVE-2023-52356 [bsc#1219213]
    Fix segfault in TIFFReadRGBATileExt()
    + tiff-CVE-2023-52356.patch</changelog>
  <changelog author="mvetter@suse.com" date="1710331200">- security update:
  * CVE-2023-40745[bsc#1214687] CVE-2023-41175[bsc#1214686] [bsc#1221187]
    CVE-2023-38288[bsc#1213590]
    Fix potential int overflow in raw2tiff.c and tiffcp.c
    Rename tiff-CVE-2023-38288.patch into
    tiff-CVE-2023-38288,CVE-2023-40745,CVE-2023-41175.patch</changelog>
  <changelog author="mvetter@suse.com" date="1716984000">- security update:
  * CVE-2023-3164 [bsc#1212233]
    Fix heap buffer overflow in tiffcrop
    + tiff-CVE-2023-3164.patch</changelog>
  <changelog author="mvetter@suse.com" date="1724068800">- security update:
  * CVE-2024-7006 [bsc#1228924]
    Fix pointer deref in tif_dirinfo.c
    + tiff-CVE-2024-7006.patch</changelog>
  <changelog author="mvetter@suse.com" date="1754308800">- security update:
  * CVE-2025-8176 [bsc#1247108]
    Fix heap use-after-free in tools/tiffmedian.c
    + tiff-CVE-2025-8176.patch
  * CVE-2025-8177 [bsc#1247106]
    Fix possible buffer overflow in tools/thumbnail.c:setrow()
    + tiff-CVE-2025-8177.patch</changelog>
  <changelog author="mvetter@suse.com" date="1755777600">- security update:
  * CVE-2025-8534 [bsc#1247582]
    Fix null pointer dereference in function PS_Lvl2page
    + tiff-CVE-2025-8534.patch
  * CVE-2025-9165 [bsc#1248330]
    Fix local execution manipulation can lead to memory leak
    + tiff-CVE-2025-9165.patch</changelog>
  <changelog author="mvetter@suse.com" date="1757332800">- security update:
  * CVE-2025-8961 [bsc#1248117]
    Fix segmentation fault via main function of tiffcrop utility
    + tiff-CVE-2025-8961.patch</changelog>
  <changelog author="fstrba@suse.com" date="1760356800">- security update:
  * CVE-2025-9900 [bsc#1250413]
    Fix Write-What-Where in libtiff via TIFFReadRGBAImageOriented
    + tiff-CVE-2025-9900.patch</changelog>
  <changelog author="mvetter@suse.com" date="1774353600">- CVE-2025-61143: Fix NULL pointer dereference (bsc#1258798)
  Add tiff-CVE-2025-61143.patch
- CVE-2025-61144: Fix stack overflow in readSeparateStripsIntoBuffer (bsc#1258801)
  Add tiff-CVE-2025-61144.patch</changelog>
</package>
<package pkgid="03d0b42c97c0a4158cab5724b134bd465648657f15eb186350254159ab1a0eab" name="libtiff5-32bit" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="150000.45.66.1"/>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
  <changelog author="mvetter@suse.com" date="1701864000">- security update:
  * CVE-2023-2731 [bsc#1211478]
    Fix null pointer deference in LZWDecode()
    This patch also contains a required commit which is marked
    to fix CVE-2022-1622 [bsc#1199483] but we are not vulnerable
    to that CVE because relevant code is not present.
    + tiff-CVE-2023-2731.patch
  * CVE-2023-26965 [bsc#1212398]
    Fix heap-based use after free in loadImage()
    + tiff-CVE-2023-26965.patch
  * CVE-2022-40090 [bsc#1214680]
    Fix infinite loop in TIFFReadDirectory()
    + tiff-CVE-2022-40090.patch
  * CVE-2023-1916 [bsc#1210231]
    Fix out-of-bounds read in extractImageSection()
    + tiff-CVE-2023-1916.patch</changelog>
  <changelog author="mvetter@suse.com" date="1706270400">- security update:
  * CVE-2023-52356 [bsc#1219213]
    Fix segfault in TIFFReadRGBATileExt()
    + tiff-CVE-2023-52356.patch</changelog>
  <changelog author="mvetter@suse.com" date="1710331200">- security update:
  * CVE-2023-40745[bsc#1214687] CVE-2023-41175[bsc#1214686] [bsc#1221187]
    CVE-2023-38288[bsc#1213590]
    Fix potential int overflow in raw2tiff.c and tiffcp.c
    Rename tiff-CVE-2023-38288.patch into
    tiff-CVE-2023-38288,CVE-2023-40745,CVE-2023-41175.patch</changelog>
  <changelog author="mvetter@suse.com" date="1716984000">- security update:
  * CVE-2023-3164 [bsc#1212233]
    Fix heap buffer overflow in tiffcrop
    + tiff-CVE-2023-3164.patch</changelog>
  <changelog author="mvetter@suse.com" date="1724068800">- security update:
  * CVE-2024-7006 [bsc#1228924]
    Fix pointer deref in tif_dirinfo.c
    + tiff-CVE-2024-7006.patch</changelog>
  <changelog author="mvetter@suse.com" date="1754308800">- security update:
  * CVE-2025-8176 [bsc#1247108]
    Fix heap use-after-free in tools/tiffmedian.c
    + tiff-CVE-2025-8176.patch
  * CVE-2025-8177 [bsc#1247106]
    Fix possible buffer overflow in tools/thumbnail.c:setrow()
    + tiff-CVE-2025-8177.patch</changelog>
  <changelog author="mvetter@suse.com" date="1755777600">- security update:
  * CVE-2025-8534 [bsc#1247582]
    Fix null pointer dereference in function PS_Lvl2page
    + tiff-CVE-2025-8534.patch
  * CVE-2025-9165 [bsc#1248330]
    Fix local execution manipulation can lead to memory leak
    + tiff-CVE-2025-9165.patch</changelog>
  <changelog author="mvetter@suse.com" date="1757332800">- security update:
  * CVE-2025-8961 [bsc#1248117]
    Fix segmentation fault via main function of tiffcrop utility
    + tiff-CVE-2025-8961.patch</changelog>
  <changelog author="fstrba@suse.com" date="1760356800">- security update:
  * CVE-2025-9900 [bsc#1250413]
    Fix Write-What-Where in libtiff via TIFFReadRGBAImageOriented
    + tiff-CVE-2025-9900.patch</changelog>
  <changelog author="mvetter@suse.com" date="1774353600">- CVE-2025-61143: Fix NULL pointer dereference (bsc#1258798)
  Add tiff-CVE-2025-61143.patch
- CVE-2025-61144: Fix stack overflow in readSeparateStripsIntoBuffer (bsc#1258801)
  Add tiff-CVE-2025-61144.patch</changelog>
  <changelog author="mvetter@suse.com" date="1777291200">- * CVE-2026-4775: Signed integer overflow in putcontig8bitYCbCr44tile (bsc#1260411)
    Add tiff-CVE-2026-4775.patch</changelog>
</package>
<package pkgid="492cd92afd0bf5ef7dd905ecacd067b65c8536ce09383c5ab4e6e204f79832a4" name="libtiff5" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="150000.45.50.1"/>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
  <changelog author="mvetter@suse.com" date="1701864000">- security update:
  * CVE-2023-2731 [bsc#1211478]
    Fix null pointer deference in LZWDecode()
    This patch also contains a required commit which is marked
    to fix CVE-2022-1622 [bsc#1199483] but we are not vulnerable
    to that CVE because relevant code is not present.
    + tiff-CVE-2023-2731.patch
  * CVE-2023-26965 [bsc#1212398]
    Fix heap-based use after free in loadImage()
    + tiff-CVE-2023-26965.patch
  * CVE-2022-40090 [bsc#1214680]
    Fix infinite loop in TIFFReadDirectory()
    + tiff-CVE-2022-40090.patch
  * CVE-2023-1916 [bsc#1210231]
    Fix out-of-bounds read in extractImageSection()
    + tiff-CVE-2023-1916.patch</changelog>
  <changelog author="mvetter@suse.com" date="1706270400">- security update:
  * CVE-2023-52356 [bsc#1219213]
    Fix segfault in TIFFReadRGBATileExt()
    + tiff-CVE-2023-52356.patch</changelog>
  <changelog author="mvetter@suse.com" date="1710331200">- security update:
  * CVE-2023-40745[bsc#1214687] CVE-2023-41175[bsc#1214686] [bsc#1221187]
    CVE-2023-38288[bsc#1213590]
    Fix potential int overflow in raw2tiff.c and tiffcp.c
    Rename tiff-CVE-2023-38288.patch into
    tiff-CVE-2023-38288,CVE-2023-40745,CVE-2023-41175.patch</changelog>
  <changelog author="mvetter@suse.com" date="1716984000">- security update:
  * CVE-2023-3164 [bsc#1212233]
    Fix heap buffer overflow in tiffcrop
    + tiff-CVE-2023-3164.patch</changelog>
  <changelog author="mvetter@suse.com" date="1724068800">- security update:
  * CVE-2024-7006 [bsc#1228924]
    Fix pointer deref in tif_dirinfo.c
    + tiff-CVE-2024-7006.patch</changelog>
  <changelog author="mvetter@suse.com" date="1754308800">- security update:
  * CVE-2025-8176 [bsc#1247108]
    Fix heap use-after-free in tools/tiffmedian.c
    + tiff-CVE-2025-8176.patch
  * CVE-2025-8177 [bsc#1247106]
    Fix possible buffer overflow in tools/thumbnail.c:setrow()
    + tiff-CVE-2025-8177.patch</changelog>
</package>
<package pkgid="2a35404620d516f15fe0058b54be465bffc5ca422a094ad7705b3d6fdc33a04e" name="libtiff5" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="150000.45.55.1"/>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
  <changelog author="mvetter@suse.com" date="1701864000">- security update:
  * CVE-2023-2731 [bsc#1211478]
    Fix null pointer deference in LZWDecode()
    This patch also contains a required commit which is marked
    to fix CVE-2022-1622 [bsc#1199483] but we are not vulnerable
    to that CVE because relevant code is not present.
    + tiff-CVE-2023-2731.patch
  * CVE-2023-26965 [bsc#1212398]
    Fix heap-based use after free in loadImage()
    + tiff-CVE-2023-26965.patch
  * CVE-2022-40090 [bsc#1214680]
    Fix infinite loop in TIFFReadDirectory()
    + tiff-CVE-2022-40090.patch
  * CVE-2023-1916 [bsc#1210231]
    Fix out-of-bounds read in extractImageSection()
    + tiff-CVE-2023-1916.patch</changelog>
  <changelog author="mvetter@suse.com" date="1706270400">- security update:
  * CVE-2023-52356 [bsc#1219213]
    Fix segfault in TIFFReadRGBATileExt()
    + tiff-CVE-2023-52356.patch</changelog>
  <changelog author="mvetter@suse.com" date="1710331200">- security update:
  * CVE-2023-40745[bsc#1214687] CVE-2023-41175[bsc#1214686] [bsc#1221187]
    CVE-2023-38288[bsc#1213590]
    Fix potential int overflow in raw2tiff.c and tiffcp.c
    Rename tiff-CVE-2023-38288.patch into
    tiff-CVE-2023-38288,CVE-2023-40745,CVE-2023-41175.patch</changelog>
  <changelog author="mvetter@suse.com" date="1716984000">- security update:
  * CVE-2023-3164 [bsc#1212233]
    Fix heap buffer overflow in tiffcrop
    + tiff-CVE-2023-3164.patch</changelog>
  <changelog author="mvetter@suse.com" date="1724068800">- security update:
  * CVE-2024-7006 [bsc#1228924]
    Fix pointer deref in tif_dirinfo.c
    + tiff-CVE-2024-7006.patch</changelog>
  <changelog author="mvetter@suse.com" date="1754308800">- security update:
  * CVE-2025-8176 [bsc#1247108]
    Fix heap use-after-free in tools/tiffmedian.c
    + tiff-CVE-2025-8176.patch
  * CVE-2025-8177 [bsc#1247106]
    Fix possible buffer overflow in tools/thumbnail.c:setrow()
    + tiff-CVE-2025-8177.patch</changelog>
  <changelog author="mvetter@suse.com" date="1755777600">- security update:
  * CVE-2025-8534 [bsc#1247582]
    Fix null pointer dereference in function PS_Lvl2page
    + tiff-CVE-2025-8534.patch
  * CVE-2025-9165 [bsc#1248330]
    Fix local execution manipulation can lead to memory leak
    + tiff-CVE-2025-9165.patch</changelog>
  <changelog author="mvetter@suse.com" date="1757332800">- security update:
  * CVE-2025-8961 [bsc#1248117]
    Fix segmentation fault via main function of tiffcrop utility
    + tiff-CVE-2025-8961.patch</changelog>
</package>
<package pkgid="7121218c3f196b074bcf45b32c6b5e289421e8557aee4570cb026c77b7a13b49" name="libtiff5" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="150000.45.60.1"/>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
  <changelog author="mvetter@suse.com" date="1701864000">- security update:
  * CVE-2023-2731 [bsc#1211478]
    Fix null pointer deference in LZWDecode()
    This patch also contains a required commit which is marked
    to fix CVE-2022-1622 [bsc#1199483] but we are not vulnerable
    to that CVE because relevant code is not present.
    + tiff-CVE-2023-2731.patch
  * CVE-2023-26965 [bsc#1212398]
    Fix heap-based use after free in loadImage()
    + tiff-CVE-2023-26965.patch
  * CVE-2022-40090 [bsc#1214680]
    Fix infinite loop in TIFFReadDirectory()
    + tiff-CVE-2022-40090.patch
  * CVE-2023-1916 [bsc#1210231]
    Fix out-of-bounds read in extractImageSection()
    + tiff-CVE-2023-1916.patch</changelog>
  <changelog author="mvetter@suse.com" date="1706270400">- security update:
  * CVE-2023-52356 [bsc#1219213]
    Fix segfault in TIFFReadRGBATileExt()
    + tiff-CVE-2023-52356.patch</changelog>
  <changelog author="mvetter@suse.com" date="1710331200">- security update:
  * CVE-2023-40745[bsc#1214687] CVE-2023-41175[bsc#1214686] [bsc#1221187]
    CVE-2023-38288[bsc#1213590]
    Fix potential int overflow in raw2tiff.c and tiffcp.c
    Rename tiff-CVE-2023-38288.patch into
    tiff-CVE-2023-38288,CVE-2023-40745,CVE-2023-41175.patch</changelog>
  <changelog author="mvetter@suse.com" date="1716984000">- security update:
  * CVE-2023-3164 [bsc#1212233]
    Fix heap buffer overflow in tiffcrop
    + tiff-CVE-2023-3164.patch</changelog>
  <changelog author="mvetter@suse.com" date="1724068800">- security update:
  * CVE-2024-7006 [bsc#1228924]
    Fix pointer deref in tif_dirinfo.c
    + tiff-CVE-2024-7006.patch</changelog>
  <changelog author="mvetter@suse.com" date="1754308800">- security update:
  * CVE-2025-8176 [bsc#1247108]
    Fix heap use-after-free in tools/tiffmedian.c
    + tiff-CVE-2025-8176.patch
  * CVE-2025-8177 [bsc#1247106]
    Fix possible buffer overflow in tools/thumbnail.c:setrow()
    + tiff-CVE-2025-8177.patch</changelog>
  <changelog author="mvetter@suse.com" date="1755777600">- security update:
  * CVE-2025-8534 [bsc#1247582]
    Fix null pointer dereference in function PS_Lvl2page
    + tiff-CVE-2025-8534.patch
  * CVE-2025-9165 [bsc#1248330]
    Fix local execution manipulation can lead to memory leak
    + tiff-CVE-2025-9165.patch</changelog>
  <changelog author="mvetter@suse.com" date="1757332800">- security update:
  * CVE-2025-8961 [bsc#1248117]
    Fix segmentation fault via main function of tiffcrop utility
    + tiff-CVE-2025-8961.patch</changelog>
  <changelog author="fstrba@suse.com" date="1760356800">- security update:
  * CVE-2025-9900 [bsc#1250413]
    Fix Write-What-Where in libtiff via TIFFReadRGBAImageOriented
    + tiff-CVE-2025-9900.patch</changelog>
</package>
<package pkgid="cece11e6cc55930c21059c0f1d897e15e1c2a3a2ed237e6d51cdc5ade9dd5503" name="libtiff5" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="150000.45.63.1"/>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
  <changelog author="mvetter@suse.com" date="1701864000">- security update:
  * CVE-2023-2731 [bsc#1211478]
    Fix null pointer deference in LZWDecode()
    This patch also contains a required commit which is marked
    to fix CVE-2022-1622 [bsc#1199483] but we are not vulnerable
    to that CVE because relevant code is not present.
    + tiff-CVE-2023-2731.patch
  * CVE-2023-26965 [bsc#1212398]
    Fix heap-based use after free in loadImage()
    + tiff-CVE-2023-26965.patch
  * CVE-2022-40090 [bsc#1214680]
    Fix infinite loop in TIFFReadDirectory()
    + tiff-CVE-2022-40090.patch
  * CVE-2023-1916 [bsc#1210231]
    Fix out-of-bounds read in extractImageSection()
    + tiff-CVE-2023-1916.patch</changelog>
  <changelog author="mvetter@suse.com" date="1706270400">- security update:
  * CVE-2023-52356 [bsc#1219213]
    Fix segfault in TIFFReadRGBATileExt()
    + tiff-CVE-2023-52356.patch</changelog>
  <changelog author="mvetter@suse.com" date="1710331200">- security update:
  * CVE-2023-40745[bsc#1214687] CVE-2023-41175[bsc#1214686] [bsc#1221187]
    CVE-2023-38288[bsc#1213590]
    Fix potential int overflow in raw2tiff.c and tiffcp.c
    Rename tiff-CVE-2023-38288.patch into
    tiff-CVE-2023-38288,CVE-2023-40745,CVE-2023-41175.patch</changelog>
  <changelog author="mvetter@suse.com" date="1716984000">- security update:
  * CVE-2023-3164 [bsc#1212233]
    Fix heap buffer overflow in tiffcrop
    + tiff-CVE-2023-3164.patch</changelog>
  <changelog author="mvetter@suse.com" date="1724068800">- security update:
  * CVE-2024-7006 [bsc#1228924]
    Fix pointer deref in tif_dirinfo.c
    + tiff-CVE-2024-7006.patch</changelog>
  <changelog author="mvetter@suse.com" date="1754308800">- security update:
  * CVE-2025-8176 [bsc#1247108]
    Fix heap use-after-free in tools/tiffmedian.c
    + tiff-CVE-2025-8176.patch
  * CVE-2025-8177 [bsc#1247106]
    Fix possible buffer overflow in tools/thumbnail.c:setrow()
    + tiff-CVE-2025-8177.patch</changelog>
  <changelog author="mvetter@suse.com" date="1755777600">- security update:
  * CVE-2025-8534 [bsc#1247582]
    Fix null pointer dereference in function PS_Lvl2page
    + tiff-CVE-2025-8534.patch
  * CVE-2025-9165 [bsc#1248330]
    Fix local execution manipulation can lead to memory leak
    + tiff-CVE-2025-9165.patch</changelog>
  <changelog author="mvetter@suse.com" date="1757332800">- security update:
  * CVE-2025-8961 [bsc#1248117]
    Fix segmentation fault via main function of tiffcrop utility
    + tiff-CVE-2025-8961.patch</changelog>
  <changelog author="fstrba@suse.com" date="1760356800">- security update:
  * CVE-2025-9900 [bsc#1250413]
    Fix Write-What-Where in libtiff via TIFFReadRGBAImageOriented
    + tiff-CVE-2025-9900.patch</changelog>
  <changelog author="mvetter@suse.com" date="1774353600">- CVE-2025-61143: Fix NULL pointer dereference (bsc#1258798)
  Add tiff-CVE-2025-61143.patch
- CVE-2025-61144: Fix stack overflow in readSeparateStripsIntoBuffer (bsc#1258801)
  Add tiff-CVE-2025-61144.patch</changelog>
</package>
<package pkgid="fc2f14511cb6405e7d288df60b4f8c136bc00be69b900604a5cc81732a13e4aa" name="libtiff5" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="150000.45.66.1"/>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
  <changelog author="mvetter@suse.com" date="1701864000">- security update:
  * CVE-2023-2731 [bsc#1211478]
    Fix null pointer deference in LZWDecode()
    This patch also contains a required commit which is marked
    to fix CVE-2022-1622 [bsc#1199483] but we are not vulnerable
    to that CVE because relevant code is not present.
    + tiff-CVE-2023-2731.patch
  * CVE-2023-26965 [bsc#1212398]
    Fix heap-based use after free in loadImage()
    + tiff-CVE-2023-26965.patch
  * CVE-2022-40090 [bsc#1214680]
    Fix infinite loop in TIFFReadDirectory()
    + tiff-CVE-2022-40090.patch
  * CVE-2023-1916 [bsc#1210231]
    Fix out-of-bounds read in extractImageSection()
    + tiff-CVE-2023-1916.patch</changelog>
  <changelog author="mvetter@suse.com" date="1706270400">- security update:
  * CVE-2023-52356 [bsc#1219213]
    Fix segfault in TIFFReadRGBATileExt()
    + tiff-CVE-2023-52356.patch</changelog>
  <changelog author="mvetter@suse.com" date="1710331200">- security update:
  * CVE-2023-40745[bsc#1214687] CVE-2023-41175[bsc#1214686] [bsc#1221187]
    CVE-2023-38288[bsc#1213590]
    Fix potential int overflow in raw2tiff.c and tiffcp.c
    Rename tiff-CVE-2023-38288.patch into
    tiff-CVE-2023-38288,CVE-2023-40745,CVE-2023-41175.patch</changelog>
  <changelog author="mvetter@suse.com" date="1716984000">- security update:
  * CVE-2023-3164 [bsc#1212233]
    Fix heap buffer overflow in tiffcrop
    + tiff-CVE-2023-3164.patch</changelog>
  <changelog author="mvetter@suse.com" date="1724068800">- security update:
  * CVE-2024-7006 [bsc#1228924]
    Fix pointer deref in tif_dirinfo.c
    + tiff-CVE-2024-7006.patch</changelog>
  <changelog author="mvetter@suse.com" date="1754308800">- security update:
  * CVE-2025-8176 [bsc#1247108]
    Fix heap use-after-free in tools/tiffmedian.c
    + tiff-CVE-2025-8176.patch
  * CVE-2025-8177 [bsc#1247106]
    Fix possible buffer overflow in tools/thumbnail.c:setrow()
    + tiff-CVE-2025-8177.patch</changelog>
  <changelog author="mvetter@suse.com" date="1755777600">- security update:
  * CVE-2025-8534 [bsc#1247582]
    Fix null pointer dereference in function PS_Lvl2page
    + tiff-CVE-2025-8534.patch
  * CVE-2025-9165 [bsc#1248330]
    Fix local execution manipulation can lead to memory leak
    + tiff-CVE-2025-9165.patch</changelog>
  <changelog author="mvetter@suse.com" date="1757332800">- security update:
  * CVE-2025-8961 [bsc#1248117]
    Fix segmentation fault via main function of tiffcrop utility
    + tiff-CVE-2025-8961.patch</changelog>
  <changelog author="fstrba@suse.com" date="1760356800">- security update:
  * CVE-2025-9900 [bsc#1250413]
    Fix Write-What-Where in libtiff via TIFFReadRGBAImageOriented
    + tiff-CVE-2025-9900.patch</changelog>
  <changelog author="mvetter@suse.com" date="1774353600">- CVE-2025-61143: Fix NULL pointer dereference (bsc#1258798)
  Add tiff-CVE-2025-61143.patch
- CVE-2025-61144: Fix stack overflow in readSeparateStripsIntoBuffer (bsc#1258801)
  Add tiff-CVE-2025-61144.patch</changelog>
  <changelog author="mvetter@suse.com" date="1777291200">- * CVE-2026-4775: Signed integer overflow in putcontig8bitYCbCr44tile (bsc#1260411)
    Add tiff-CVE-2026-4775.patch</changelog>
</package>
<package pkgid="a716a857d08a6cb84128be1a23bd315df14562fb51721b9b520e3e371b97ad17" name="libtiff6-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.0" rel="150600.3.13.1"/>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668427200">- security update:
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1672833600">- Update to 4.5.0:
  * tdir_t type updated to uint32_t. This type is now used for the return
    value of TIFFCurrentDirectory() and TIFFNumberOfDirectories(), and as
    the argument of TIFFSetDirectory() and TIFFUnlinkDirectory()
  * Addition of an open option concept with the new functions TIFFOpenExt(),
    TIFFOpenWExt(), TIFFFdOpenExt(), TIFFClientOpenExt(), TIFFOpenOptionsAlloc(),
    TIFFOpenOptionsFree()
  * Leveraging above mentioned open option concept, addition of a new capability
    to limit the size of a single dynamic memory allocation done by the library
    with TIFFOpenOptionsSetMaxSingleMemAlloc()
  * Related to IFD-Loop detection refactoring, the number of IFDs that libtiff
    can browse through has been extended from 65535 to 1048576. This value is
    a build-time setting that can be configured with CMake's TIFF_MAX_DIR_COUNT
    variable or autoconf's --with-max-dir-count option.
  * Whole code base reformatting of .c/.h files using new .clang-format format
  * Documentation changed from static HTML and man pages to
    Restructured Text (rst). HTML and man pages are now build artifacts.
  * SONAME version bumped to 6 due to changes in symbol versioning.
  * autoconf/cmake: detect (not yet released) libjpeg-turbo 2.2 to take into
    its capability of handling both 8-bit JPEG and 12-bit JPEG in a single build.
  * autoconf/cmake: detect sphinx-build to build HTML and man pages
  * CMakeLists.txt: fix warning with -Wdev
  * CMake: correctly set default value of 'lzma' option when liblzma is detected
  * CMake: Moved linking of CMath::CMath into CMath_LIBRARY check.
  * Fix CMake build to be compatible with FetchContent.
  * cmake: Correct duplicate definition of _CRT_SECURE_NO_WARNINGS
  * cmake: Fixes for Visual Studio 2022.
  * Adds Requires.private generation so that pkg-config can correctly find
    the dependencies of libtiff.
  * Fix dependency on libm on Android
  * Fix build in tif_lzw.c
  * CMake: Add options for disabling tools, tests, contrib and docs.
  * tiffcrop: Fix memory allocation to require a larger buffer (CVE-2022-3570, CVE-2022-3598)
    [bsc#1205422]
  * tiffcrop: disable incompatibility of -Z, -X, -Y, -z options with any PAGE_MODE_x option
    (CVE-2022-3627, CVE-2022-3597, CVE-2022-3626)
  * tiffcrop: fix floating-point exception (CVE-2022-2056, CVE-2022-2057, CVE-2022-2058)
  * _TIFFCheckFieldIsValidForCodec(): return FALSE when passed a codec-specific tag
    and the codec is not configured (CVE-2022-34526)
  * Revised handling of TIFFTAG_INKNAMES and related TIFFTAG_NUMBEROFINKS value (CVE-2022-3599)
  * tiffcrop: -S option mutually exclusive (CVE-2022-2519, CVE-2022-2520, CVE-2022-2521)
- Drop tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
- Drop tiff-CVE-2022-34526.patch
- Drop tiff-CVE-2022-3599.patch
- Drop tiff-CVE-2022-3598.patch
- Drop tiff-CVE-2022-3970.patch
- Drop tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
- Drop tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1677067200">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1687262400">- Update to version 4.5.1:
  * Definition of tags reformatted (clang-format off) for better readability of tag comments in tiff.h and tif_dirinfo.c
  * Do not install libtiff-4.pc when tiff-install is reset.
  * Add versioninfo resource files for DLL and tools compiled with Windows MSVC and MINGW.
  * Disable clang-formatting for tif_config.h.cmake.in and tiffconf.h.cmake.in because sensitive for CMake scripts.
  * CMake: make WebP component name compatible with upstream ConfigWebP.cmake
  * CMake: make Findliblzma with upstream CMake config file
  * CMake: FindDeflate.cmake: fix several errors (issue #526).
  * CMake: FindLERC.cmake: version string return added.
  * CMake: export TiffConfig.cmake and TiffConfigVersion.cmake files
  * CMake: fix export of INTERFACE_INCLUDE_DIRECTORIES
  * Hardcode HOST_FILLORDER to FILLORDER_LSB2MSB and make 'H' flag of TIFFOpen() to warn and an alias of FILLORDER_MSB2LSB. tif_lerc.c: use WORDS_BIGENDIAN instead of HOST_BIGENDIAN.
  * Optimize relative seeking within TIFFSetDirectory() by using the learned list of IFD offsets.
  * Improve internal IFD offset and directory number map handling.
  * Behavior of TIFFOpen() mode "r+" in the Windows implementation adjusted to that of Linux.
  * TIFFDirectory td_fieldsset type changed from unsigned long, which can be 32 or 64 bits, to uint32_t (fixes issue #484).
  * tif_ojpeg.c: checking for division by zero (fixes issue #554).
  * LZWDecode(): avoid crash when trying to read again from a strip whith a missing end-of-information marker (fixes issue #548).
  * Fixed runtime error: applying zero offset to null pointer in countInkNamesString().
  * Fixing crash in TIFFUnlinkDirectory() when called with directory number zero ("TIFFUnlinkDirectory(0)") as well as fixing incorrect behaviour when unlinking the first directory.
  * tif_luv: check and correct for NaN data in uv_encode() (issue #530).
  * TIFFClose() avoid NULL pointer dereferencing (issue #515).
  * tif_hash_set.c: include tif_hash_set.h after tif_config.h to let a chance for GDAL symbol renaming trick.
  * Fax3: fix failure to decode some fax3 number_of_images and add test for Fax3 decoding issues (issue #513).
  * TIFFSetDirectory() and TIFFWriteDirectorySec() avoid harmless unsigned-integer-overflow (due to gdal oss-fuzz #54311 and #54343).
  * tif_ojpeg.c: fix issue #554 by checking for division by zero in OJPEGWriteHeaderInfo().
  * LZWDecode(): avoid crash when trying to read again from a strip whith a missing end-of-information marker (issue #548).
- Drop no longer needed patches:
  * tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * tiff-CVE-2022-48281.patch
  * tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1694779200">- Update to version 4.6.0:
  * API/ABI breaks: none
  * WebP decoder: validate WebP blob width, height, band count against
    TIFF parameters to avoid use of uninitialized variable, or decoding
    corrupted content without explicit error (fixes issue #581, issue #582).
  * WebP codec: turn exact mode when creating lossless files to avoid
    altering R,G,B values in areas where alpha=0
  * Fix TransferFunction writing of only two transfer functions.
  * TIFFReadDirectoryCheckOrder: avoid integer overflow. When it occurs,
    it should be harmless in practice though
  * tiffcp: remove -i option (ignore errors)
  * This version removes a big number of utilities that have suffered from
    lack of maintenance over the years and were the source of various
    reported security issues:
    + fax2ps
    + fax2tiff
    + pal2rgb
    + ppm2tiff
    + raw2tiff
    + rgb2ycbcr
    + thumbnail
    + tiff2bw
    + tiff2rgba
    + tiffcmp
    + tiffcrop
    + tiffdither
    + tiffgt
    + tiffmedian
    + tiff2ps
    + tiff2pdf
- Remove no longer needed tiff-4.0.3-compress-warning.patch.
- CVE-2023-25435 [bsc#1212607] tiffcrop is removed</changelog>
  <changelog author="mvetter@suse.com" date="1706270400">- security update:
  * CVE-2023-52356 [bsc#1219213]
    Fix segfault in TIFFReadRGBATileExt()
    + tiff-CVE-2023-52356.patch</changelog>
  <changelog author="mvetter@suse.com" date="1724068800">- security update:
  * CVE-2024-7006 [bsc#1228924]
    Fix pointer deref in tif_dirinfo.c
    + tiff-CVE-2024-7006.patch</changelog>
  <changelog author="mvetter@suse.com" date="1726660800">- Update to 4.7.0:
  * This version restores in the default build the availability of
    the tools that had been dropped in v4.6.0
    See https://libtiff.gitlab.io/libtiff/rfcs/rfc2_restoring_needed_tools.html#rfc2-restoring-needed-tools
  * Software configuration changes:
    + autoconf build: configure.ac: avoid -Werror passed to CFLAGS to interfere with feature detection
    + autoconf build: fix error when running make clean (fixes issue #630)
    + autoconf build: back off the minimum required automake version to 1.11
    + autoconf.ac: fix detection of windows.h for mingw (fixes issue #605)
    + libtiff-4.pc: Fix Requires.private missing Lerc. It provides a .pc file
    starting from version 4 (in autoconf builds, we assume that liblerc is at least version 4)
    + CMake: Fix TIFF_INCLUDE_DIRS
    + CMake: MinGW compilers don't need a .def file for shared library
    + CMake: move libdeflate and Lerc to Requires.private
    + CMake: enable resource compilation on all Windows.
  * Library changes:
    + Add TIFFOpenOptionsSetMaxCumulatedMemAlloc(). This function complements
    TIFFOpenOptionsSetMaxSingleMemAlloc() to define the maximum cumulated memory
    allocations in byte, for a given TIFF handle, that libtiff internal memory
    allocation functions are allowed.
    + TIFFWriteDirectory(): Avoid overwriting following data if an IFD is enlarged.
    + TIFFXYZToRGB: avoid integer overflow (fixes issue #644)
    + uv_decode() and uv_encode(): avoid potential out-of-bounds array index (fixes issue #645)
    + Fix cases where tif_curdir is set incorrectly. Fix cases where the current directory number (tif_curdir)
    is set inconsistently or incorrectly, depending on the previous history.
    + TIFFRead[Scanline/EncodedStrip/EncodeTile]: 0-initialize output buffer if setupdecode fails ;
    most codecs: zero-initialize (not-yet-written parts of) output buffer if failure (fixes issue #375)
    + OJPEG: reset subsampling_convert_state=0 in OJPEGPreDecode (fixes issue #183)
    + ThunderRLE: fix failure when decoding last run. Bug seen with GhostPDL
    + LERC codec: deal with issues with multi-band PlanarConfig=Contig and NaN values
    + tif_fax3.c: error out after a number of times end-of-file has been reached (fixes issue #583)
    + LZW: avoid warning about misaligned address with UBSAN (fixes issue #616)
    + TIFFReadRGBAStrip/TIFFReadRGBATile: add more validation of col/row (fixes issue #622, CVE-2023-52356)
    + tif_dirread.c: only issue TIFFGetFileSize() for large enough RAM requests
    + Avoid FPEs (division by zero) in tif_getimage.c.
    + Avoiding FPE (division by zero) for TIFFhowmany_32() and TIFFhowmany_64() macros by checking for
    denominator not zero before macros are executed. (fixes issue #628)
    + Add non-zero check before division in TIFFComputeStrip()
    + Fix wrong return of TIFFIsBigTIFF() in case byte-swapping is active
    + Setting the TIFFFieldInfo field set_field_type should consider field_writecount not field_readcount
    + Avoid memory leaks when using TIFFCreateDirectory() by releasing the allocated memory in the tif-structure.
    + For non-terminated ASCII arrays, the buffer is first enlarged before a NULL is set at the end to
    avoid deleting the last character. (fixes issue #579)
    + Check return value of _TIFFCreateAnonField(). (fixes issue #624, CVE-2024-7006)
    + Prevent some out-of-memory attacks (https://gitlab.com/libtiff/libtiff/-/issues/614#note_1602683857)
    + Ensure absolute seeking is forced independent of TIFFReadDirectory success. (fixes issue #618)
    + tif_dirinfo.c: re-enable TIFFTAG_EP_CFAREPEATPATTERNDIM and TIFFTAG_EP_CFAPATTERN tags (fixes issue #608)
    + Fix warnings with GCC 14
    + tif_dir.c: Log source file, line number, and input tif for directory count error (fixes issue #627)
    + Last usage of get_field_type of TIFFField structure at TIFFWriteDirectorySec() changed to using set_field_type.
    + tif_jpeg.c/tif_ojpeg.c: remove likely ifdef tricks related to old compilers or unusual setups
    + Remove _TIFFUInt64ToFloat() and _TIFFUInt64ToDouble()
    + Remove support for _MSC_VER &lt; 1500.
    + Use #ifdef _WIN32 to test for Windows, and tiffio.h: remove definition of __WIN32__
  * Documentation:
    + Amend manpages for changes in current directory index behaviour
    + Note on using TIFFFlush() before TIFFClose() to check that the data has been successfully written to the file. (fixes issue #506)
    + Update TIFF documentation about TIFFOpenOptions.rst and TIFFOpenOptionsSetMaxSingleMemAlloc() usage and some other small fixes (relates to CVE-2024-7006)
  * Re-added tools:
    + fax2ps
    + fax2tiff
    + pal2rgb
    + ppm2tiff
    + raw2tiff
    + rgb2ycbcr (not installed)
    + thumbnail (not installed)
    + tiff2bw
    + tiff2rgba
    + tiffcmp
    + tiffcrop
    + tiffdither
    + tiffgt
    + tiffmedian
    + tiff2ps
    + tiff2pdf
  * New/improved functionality:
    + tiff2rgba: Add background gradient option for alpha compositing
    + tiffcp: -i flag restored
  * Bug fixes for tools:
    + tiffcrop: address Coverity scan issues 1605444, 1605445, and 16054
    + tiffcrop: Apply "Fix heap-buffer-overflow in function extractImageSection"
    + tiffcrop: fix buffer overflows, use after free (fixes issue #542, issue #550, issue #552)
    + tiff2pdf: address Coverity scan issues
    + tiff2pdf: fix inconsistent PLANARCONFIG value for the input and output TIFF
    + tiff2pdf: fix issue with JPEG restart-interval marker when converting from JPEG-compressed files (fixes issue #539)
    + tiff2pdf: red and blue were being swapped for RGBA decoding (fixes issue #253)
    + tiff2pdf: fixes issue #596
    + thumbnail: address Coverity scan issues
    + tiffcp: Add check for limitMalloc return to fix Coverity 1603334
    + tiffcp: preserve TIFFTAG_REFERENCEBLACKWHITE when doing YCbCr JPEG -&gt; YCbCr JPEG
    + tiffcp: replace PHOTOMETRIC_YCBCR with PHOTOMETRIC_RGB when outputing to compression != JPEG (refs issue #571)
    + tiffcp: do not copy tags YCBCRCOEFFICIENTS, YCBCRSUBSAMPLING, YCBCRPOSITIONING, REFERENCEBLACKWHITE. Only set YCBCRSUBSAMPLING when generating YCbCr JPEG
    + tiffcp: Check also codec of input image, not only from output image (fixes issue #606)
    + Add some basic sanity checks for tiffcp and tiffcrop RGB-&gt;YCbCr JPEG conversions.
    + fax2ps and fax2tiff: memory leak fixes (fixes issue #476)
    + tiffmedian: memory leak fixes (fixes issue #599)
    + fax2tiff: fix EOFB interpretation (fixes issue #191)
    + fax2tiff: fix issue with unreasonable width input (fixes issue #249)
    + tiffcp and tiffcrop: fixes issue #228
    + tiff2rgba: fixes issue #469
    + tiffdither: fixes issue #473
    + tiffdump: fix wrong printf formatter in error message (Coverity 1472932)
    + tiffset: avoid false positive Coverity Scan warning on 64-bit builds (Coverity 1518997)
    + tifcp/tiffset: use correct format specifiers
  * Changes to contributed and unsupported tools
    + contrib/addtiffo: validate return of TIFFWriteEncodedXXXX() calls (Coverity 1024680)
- Remove patches contained in upstream:
  * tiff-CVE-2023-52356.patch
  * tiff-CVE-2024-7006.patch
- Tools are not built for now due to test failure: `FAIL: tiffcp-32bpp-None-jpeg.sh`</changelog>
  <changelog author="mrueckert@suse.de" date="1731153600">- switch build to cmake for the webp build - we need the cmake
  finder code</changelog>
  <changelog author="mrueckert@suse.de" date="1731326400">- In the previous change to enable the cmake based build
  we also needed python3-Sphinx to build the man pages, as unlike
  the autotools based build, the cmake based build does not fall
  back to the pre-built man pages.
  This causes build cycle. Split out the documentation building to
  break the cycle. The Tumbleweed release managers preferred this
  solution over a mini package.</changelog>
  <changelog author="mrueckert@suse.de" date="1731412800">- make doc packages noarch. no need to have those per arch
- ensure that the src rpms are named per build flavor:
  You might now ask why. Good question:
  1. the spec file during the build get patched. `@BUILD_FLAVOR@`
    gets replaced with the value. which means the src rpm between
    build flavor builds is not identical. Also the last built
    src.rpm will be published. with different content and runtime
    requires (aka our BuildRequires).
  2. for historical reasons the internal dependency tracking goes
    via the src.rpm package. So without having differently named
    src.rpms the build cycle we were trying to solve was not
    actually solved. So we append a suffix to the Name attribute
    in the preamble now.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1736769600">- Fix versioning of tiff-docs under Recommends</changelog>
  <changelog author="lubos.kocman@suse.com" date="1738756800">- Update test/test_directory.c not to fail on big-endian machines.
  * Add tiff-4.7.0-test_directory.patch
    Fix memory leaks (fixes issue #652)
  * Resolves bsc#1236834
    fix build fail on s390x</changelog>
  <changelog author="lubos.kocman@suse.com" date="1740398400">- Use python3-Sphinx instead of  %{primary_python}-Sphinx
  based on recommendation from python maintainers.
  * Fixes build issue of man flavor on 15.6</changelog>
  <changelog author="sfalken@opensuse.org" date="1742644800">- Add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to fix FTBFS with cmake4
- Add %check section
- Remove Group: declarations, no longer used</changelog>
  <changelog author="mvetter@suse.com" date="1754308800">- security update:
  * CVE-2025-8176 [bsc#1247108]
    Fix heap use-after-free in tools/tiffmedian.c
    + tiff-CVE-2025-8176.patch
  * CVE-2025-8177 [bsc#1247106]
    Fix possible buffer overflow in tools/thumbnail.c:setrow()
    + tiff-CVE-2025-8177.patch</changelog>
  <changelog author="mvetter@suse.com" date="1754308801">- bsc#1243503:
  Fix TIFFMergeFieldInfo() read_count=write_count=0
  + tiff-4.7.0-bsc1243503.patch</changelog>
</package>
<package pkgid="46ebc441a522289aeb2b21c738edc6f92821a1476a5dc909ea697b686a8ddf79" name="libtiff6-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.0" rel="150600.3.18.1"/>
  <changelog author="mvetter@suse.com" date="1668427200">- security update:
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1672833600">- Update to 4.5.0:
  * tdir_t type updated to uint32_t. This type is now used for the return
    value of TIFFCurrentDirectory() and TIFFNumberOfDirectories(), and as
    the argument of TIFFSetDirectory() and TIFFUnlinkDirectory()
  * Addition of an open option concept with the new functions TIFFOpenExt(),
    TIFFOpenWExt(), TIFFFdOpenExt(), TIFFClientOpenExt(), TIFFOpenOptionsAlloc(),
    TIFFOpenOptionsFree()
  * Leveraging above mentioned open option concept, addition of a new capability
    to limit the size of a single dynamic memory allocation done by the library
    with TIFFOpenOptionsSetMaxSingleMemAlloc()
  * Related to IFD-Loop detection refactoring, the number of IFDs that libtiff
    can browse through has been extended from 65535 to 1048576. This value is
    a build-time setting that can be configured with CMake's TIFF_MAX_DIR_COUNT
    variable or autoconf's --with-max-dir-count option.
  * Whole code base reformatting of .c/.h files using new .clang-format format
  * Documentation changed from static HTML and man pages to
    Restructured Text (rst). HTML and man pages are now build artifacts.
  * SONAME version bumped to 6 due to changes in symbol versioning.
  * autoconf/cmake: detect (not yet released) libjpeg-turbo 2.2 to take into
    its capability of handling both 8-bit JPEG and 12-bit JPEG in a single build.
  * autoconf/cmake: detect sphinx-build to build HTML and man pages
  * CMakeLists.txt: fix warning with -Wdev
  * CMake: correctly set default value of 'lzma' option when liblzma is detected
  * CMake: Moved linking of CMath::CMath into CMath_LIBRARY check.
  * Fix CMake build to be compatible with FetchContent.
  * cmake: Correct duplicate definition of _CRT_SECURE_NO_WARNINGS
  * cmake: Fixes for Visual Studio 2022.
  * Adds Requires.private generation so that pkg-config can correctly find
    the dependencies of libtiff.
  * Fix dependency on libm on Android
  * Fix build in tif_lzw.c
  * CMake: Add options for disabling tools, tests, contrib and docs.
  * tiffcrop: Fix memory allocation to require a larger buffer (CVE-2022-3570, CVE-2022-3598)
    [bsc#1205422]
  * tiffcrop: disable incompatibility of -Z, -X, -Y, -z options with any PAGE_MODE_x option
    (CVE-2022-3627, CVE-2022-3597, CVE-2022-3626)
  * tiffcrop: fix floating-point exception (CVE-2022-2056, CVE-2022-2057, CVE-2022-2058)
  * _TIFFCheckFieldIsValidForCodec(): return FALSE when passed a codec-specific tag
    and the codec is not configured (CVE-2022-34526)
  * Revised handling of TIFFTAG_INKNAMES and related TIFFTAG_NUMBEROFINKS value (CVE-2022-3599)
  * tiffcrop: -S option mutually exclusive (CVE-2022-2519, CVE-2022-2520, CVE-2022-2521)
- Drop tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
- Drop tiff-CVE-2022-34526.patch
- Drop tiff-CVE-2022-3599.patch
- Drop tiff-CVE-2022-3598.patch
- Drop tiff-CVE-2022-3970.patch
- Drop tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
- Drop tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1677067200">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1687262400">- Update to version 4.5.1:
  * Definition of tags reformatted (clang-format off) for better readability of tag comments in tiff.h and tif_dirinfo.c
  * Do not install libtiff-4.pc when tiff-install is reset.
  * Add versioninfo resource files for DLL and tools compiled with Windows MSVC and MINGW.
  * Disable clang-formatting for tif_config.h.cmake.in and tiffconf.h.cmake.in because sensitive for CMake scripts.
  * CMake: make WebP component name compatible with upstream ConfigWebP.cmake
  * CMake: make Findliblzma with upstream CMake config file
  * CMake: FindDeflate.cmake: fix several errors (issue #526).
  * CMake: FindLERC.cmake: version string return added.
  * CMake: export TiffConfig.cmake and TiffConfigVersion.cmake files
  * CMake: fix export of INTERFACE_INCLUDE_DIRECTORIES
  * Hardcode HOST_FILLORDER to FILLORDER_LSB2MSB and make 'H' flag of TIFFOpen() to warn and an alias of FILLORDER_MSB2LSB. tif_lerc.c: use WORDS_BIGENDIAN instead of HOST_BIGENDIAN.
  * Optimize relative seeking within TIFFSetDirectory() by using the learned list of IFD offsets.
  * Improve internal IFD offset and directory number map handling.
  * Behavior of TIFFOpen() mode "r+" in the Windows implementation adjusted to that of Linux.
  * TIFFDirectory td_fieldsset type changed from unsigned long, which can be 32 or 64 bits, to uint32_t (fixes issue #484).
  * tif_ojpeg.c: checking for division by zero (fixes issue #554).
  * LZWDecode(): avoid crash when trying to read again from a strip whith a missing end-of-information marker (fixes issue #548).
  * Fixed runtime error: applying zero offset to null pointer in countInkNamesString().
  * Fixing crash in TIFFUnlinkDirectory() when called with directory number zero ("TIFFUnlinkDirectory(0)") as well as fixing incorrect behaviour when unlinking the first directory.
  * tif_luv: check and correct for NaN data in uv_encode() (issue #530).
  * TIFFClose() avoid NULL pointer dereferencing (issue #515).
  * tif_hash_set.c: include tif_hash_set.h after tif_config.h to let a chance for GDAL symbol renaming trick.
  * Fax3: fix failure to decode some fax3 number_of_images and add test for Fax3 decoding issues (issue #513).
  * TIFFSetDirectory() and TIFFWriteDirectorySec() avoid harmless unsigned-integer-overflow (due to gdal oss-fuzz #54311 and #54343).
  * tif_ojpeg.c: fix issue #554 by checking for division by zero in OJPEGWriteHeaderInfo().
  * LZWDecode(): avoid crash when trying to read again from a strip whith a missing end-of-information marker (issue #548).
- Drop no longer needed patches:
  * tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * tiff-CVE-2022-48281.patch
  * tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1694779200">- Update to version 4.6.0:
  * API/ABI breaks: none
  * WebP decoder: validate WebP blob width, height, band count against
    TIFF parameters to avoid use of uninitialized variable, or decoding
    corrupted content without explicit error (fixes issue #581, issue #582).
  * WebP codec: turn exact mode when creating lossless files to avoid
    altering R,G,B values in areas where alpha=0
  * Fix TransferFunction writing of only two transfer functions.
  * TIFFReadDirectoryCheckOrder: avoid integer overflow. When it occurs,
    it should be harmless in practice though
  * tiffcp: remove -i option (ignore errors)
  * This version removes a big number of utilities that have suffered from
    lack of maintenance over the years and were the source of various
    reported security issues:
    + fax2ps
    + fax2tiff
    + pal2rgb
    + ppm2tiff
    + raw2tiff
    + rgb2ycbcr
    + thumbnail
    + tiff2bw
    + tiff2rgba
    + tiffcmp
    + tiffcrop
    + tiffdither
    + tiffgt
    + tiffmedian
    + tiff2ps
    + tiff2pdf
- Remove no longer needed tiff-4.0.3-compress-warning.patch.
- CVE-2023-25435 [bsc#1212607] tiffcrop is removed</changelog>
  <changelog author="mvetter@suse.com" date="1706270400">- security update:
  * CVE-2023-52356 [bsc#1219213]
    Fix segfault in TIFFReadRGBATileExt()
    + tiff-CVE-2023-52356.patch</changelog>
  <changelog author="mvetter@suse.com" date="1724068800">- security update:
  * CVE-2024-7006 [bsc#1228924]
    Fix pointer deref in tif_dirinfo.c
    + tiff-CVE-2024-7006.patch</changelog>
  <changelog author="mvetter@suse.com" date="1726660800">- Update to 4.7.0:
  * This version restores in the default build the availability of
    the tools that had been dropped in v4.6.0
    See https://libtiff.gitlab.io/libtiff/rfcs/rfc2_restoring_needed_tools.html#rfc2-restoring-needed-tools
  * Software configuration changes:
    + autoconf build: configure.ac: avoid -Werror passed to CFLAGS to interfere with feature detection
    + autoconf build: fix error when running make clean (fixes issue #630)
    + autoconf build: back off the minimum required automake version to 1.11
    + autoconf.ac: fix detection of windows.h for mingw (fixes issue #605)
    + libtiff-4.pc: Fix Requires.private missing Lerc. It provides a .pc file
    starting from version 4 (in autoconf builds, we assume that liblerc is at least version 4)
    + CMake: Fix TIFF_INCLUDE_DIRS
    + CMake: MinGW compilers don't need a .def file for shared library
    + CMake: move libdeflate and Lerc to Requires.private
    + CMake: enable resource compilation on all Windows.
  * Library changes:
    + Add TIFFOpenOptionsSetMaxCumulatedMemAlloc(). This function complements
    TIFFOpenOptionsSetMaxSingleMemAlloc() to define the maximum cumulated memory
    allocations in byte, for a given TIFF handle, that libtiff internal memory
    allocation functions are allowed.
    + TIFFWriteDirectory(): Avoid overwriting following data if an IFD is enlarged.
    + TIFFXYZToRGB: avoid integer overflow (fixes issue #644)
    + uv_decode() and uv_encode(): avoid potential out-of-bounds array index (fixes issue #645)
    + Fix cases where tif_curdir is set incorrectly. Fix cases where the current directory number (tif_curdir)
    is set inconsistently or incorrectly, depending on the previous history.
    + TIFFRead[Scanline/EncodedStrip/EncodeTile]: 0-initialize output buffer if setupdecode fails ;
    most codecs: zero-initialize (not-yet-written parts of) output buffer if failure (fixes issue #375)
    + OJPEG: reset subsampling_convert_state=0 in OJPEGPreDecode (fixes issue #183)
    + ThunderRLE: fix failure when decoding last run. Bug seen with GhostPDL
    + LERC codec: deal with issues with multi-band PlanarConfig=Contig and NaN values
    + tif_fax3.c: error out after a number of times end-of-file has been reached (fixes issue #583)
    + LZW: avoid warning about misaligned address with UBSAN (fixes issue #616)
    + TIFFReadRGBAStrip/TIFFReadRGBATile: add more validation of col/row (fixes issue #622, CVE-2023-52356)
    + tif_dirread.c: only issue TIFFGetFileSize() for large enough RAM requests
    + Avoid FPEs (division by zero) in tif_getimage.c.
    + Avoiding FPE (division by zero) for TIFFhowmany_32() and TIFFhowmany_64() macros by checking for
    denominator not zero before macros are executed. (fixes issue #628)
    + Add non-zero check before division in TIFFComputeStrip()
    + Fix wrong return of TIFFIsBigTIFF() in case byte-swapping is active
    + Setting the TIFFFieldInfo field set_field_type should consider field_writecount not field_readcount
    + Avoid memory leaks when using TIFFCreateDirectory() by releasing the allocated memory in the tif-structure.
    + For non-terminated ASCII arrays, the buffer is first enlarged before a NULL is set at the end to
    avoid deleting the last character. (fixes issue #579)
    + Check return value of _TIFFCreateAnonField(). (fixes issue #624, CVE-2024-7006)
    + Prevent some out-of-memory attacks (https://gitlab.com/libtiff/libtiff/-/issues/614#note_1602683857)
    + Ensure absolute seeking is forced independent of TIFFReadDirectory success. (fixes issue #618)
    + tif_dirinfo.c: re-enable TIFFTAG_EP_CFAREPEATPATTERNDIM and TIFFTAG_EP_CFAPATTERN tags (fixes issue #608)
    + Fix warnings with GCC 14
    + tif_dir.c: Log source file, line number, and input tif for directory count error (fixes issue #627)
    + Last usage of get_field_type of TIFFField structure at TIFFWriteDirectorySec() changed to using set_field_type.
    + tif_jpeg.c/tif_ojpeg.c: remove likely ifdef tricks related to old compilers or unusual setups
    + Remove _TIFFUInt64ToFloat() and _TIFFUInt64ToDouble()
    + Remove support for _MSC_VER &lt; 1500.
    + Use #ifdef _WIN32 to test for Windows, and tiffio.h: remove definition of __WIN32__
  * Documentation:
    + Amend manpages for changes in current directory index behaviour
    + Note on using TIFFFlush() before TIFFClose() to check that the data has been successfully written to the file. (fixes issue #506)
    + Update TIFF documentation about TIFFOpenOptions.rst and TIFFOpenOptionsSetMaxSingleMemAlloc() usage and some other small fixes (relates to CVE-2024-7006)
  * Re-added tools:
    + fax2ps
    + fax2tiff
    + pal2rgb
    + ppm2tiff
    + raw2tiff
    + rgb2ycbcr (not installed)
    + thumbnail (not installed)
    + tiff2bw
    + tiff2rgba
    + tiffcmp
    + tiffcrop
    + tiffdither
    + tiffgt
    + tiffmedian
    + tiff2ps
    + tiff2pdf
  * New/improved functionality:
    + tiff2rgba: Add background gradient option for alpha compositing
    + tiffcp: -i flag restored
  * Bug fixes for tools:
    + tiffcrop: address Coverity scan issues 1605444, 1605445, and 16054
    + tiffcrop: Apply "Fix heap-buffer-overflow in function extractImageSection"
    + tiffcrop: fix buffer overflows, use after free (fixes issue #542, issue #550, issue #552)
    + tiff2pdf: address Coverity scan issues
    + tiff2pdf: fix inconsistent PLANARCONFIG value for the input and output TIFF
    + tiff2pdf: fix issue with JPEG restart-interval marker when converting from JPEG-compressed files (fixes issue #539)
    + tiff2pdf: red and blue were being swapped for RGBA decoding (fixes issue #253)
    + tiff2pdf: fixes issue #596
    + thumbnail: address Coverity scan issues
    + tiffcp: Add check for limitMalloc return to fix Coverity 1603334
    + tiffcp: preserve TIFFTAG_REFERENCEBLACKWHITE when doing YCbCr JPEG -&gt; YCbCr JPEG
    + tiffcp: replace PHOTOMETRIC_YCBCR with PHOTOMETRIC_RGB when outputing to compression != JPEG (refs issue #571)
    + tiffcp: do not copy tags YCBCRCOEFFICIENTS, YCBCRSUBSAMPLING, YCBCRPOSITIONING, REFERENCEBLACKWHITE. Only set YCBCRSUBSAMPLING when generating YCbCr JPEG
    + tiffcp: Check also codec of input image, not only from output image (fixes issue #606)
    + Add some basic sanity checks for tiffcp and tiffcrop RGB-&gt;YCbCr JPEG conversions.
    + fax2ps and fax2tiff: memory leak fixes (fixes issue #476)
    + tiffmedian: memory leak fixes (fixes issue #599)
    + fax2tiff: fix EOFB interpretation (fixes issue #191)
    + fax2tiff: fix issue with unreasonable width input (fixes issue #249)
    + tiffcp and tiffcrop: fixes issue #228
    + tiff2rgba: fixes issue #469
    + tiffdither: fixes issue #473
    + tiffdump: fix wrong printf formatter in error message (Coverity 1472932)
    + tiffset: avoid false positive Coverity Scan warning on 64-bit builds (Coverity 1518997)
    + tifcp/tiffset: use correct format specifiers
  * Changes to contributed and unsupported tools
    + contrib/addtiffo: validate return of TIFFWriteEncodedXXXX() calls (Coverity 1024680)
- Remove patches contained in upstream:
  * tiff-CVE-2023-52356.patch
  * tiff-CVE-2024-7006.patch
- Tools are not built for now due to test failure: `FAIL: tiffcp-32bpp-None-jpeg.sh`</changelog>
  <changelog author="mrueckert@suse.de" date="1731153600">- switch build to cmake for the webp build - we need the cmake
  finder code</changelog>
  <changelog author="mrueckert@suse.de" date="1731326400">- In the previous change to enable the cmake based build
  we also needed python3-Sphinx to build the man pages, as unlike
  the autotools based build, the cmake based build does not fall
  back to the pre-built man pages.
  This causes build cycle. Split out the documentation building to
  break the cycle. The Tumbleweed release managers preferred this
  solution over a mini package.</changelog>
  <changelog author="mrueckert@suse.de" date="1731412800">- make doc packages noarch. no need to have those per arch
- ensure that the src rpms are named per build flavor:
  You might now ask why. Good question:
  1. the spec file during the build get patched. `@BUILD_FLAVOR@`
    gets replaced with the value. which means the src rpm between
    build flavor builds is not identical. Also the last built
    src.rpm will be published. with different content and runtime
    requires (aka our BuildRequires).
  2. for historical reasons the internal dependency tracking goes
    via the src.rpm package. So without having differently named
    src.rpms the build cycle we were trying to solve was not
    actually solved. So we append a suffix to the Name attribute
    in the preamble now.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1736769600">- Fix versioning of tiff-docs under Recommends</changelog>
  <changelog author="lubos.kocman@suse.com" date="1738756800">- Update test/test_directory.c not to fail on big-endian machines.
  * Add tiff-4.7.0-test_directory.patch
    Fix memory leaks (fixes issue #652)
  * Resolves bsc#1236834
    fix build fail on s390x</changelog>
  <changelog author="lubos.kocman@suse.com" date="1740398400">- Use python3-Sphinx instead of  %{primary_python}-Sphinx
  based on recommendation from python maintainers.
  * Fixes build issue of man flavor on 15.6</changelog>
  <changelog author="sfalken@opensuse.org" date="1742644800">- Add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to fix FTBFS with cmake4
- Add %check section
- Remove Group: declarations, no longer used</changelog>
  <changelog author="mvetter@suse.com" date="1754308800">- security update:
  * CVE-2025-8176 [bsc#1247108]
    Fix heap use-after-free in tools/tiffmedian.c
    + tiff-CVE-2025-8176.patch
  * CVE-2025-8177 [bsc#1247106]
    Fix possible buffer overflow in tools/thumbnail.c:setrow()
    + tiff-CVE-2025-8177.patch</changelog>
  <changelog author="mvetter@suse.com" date="1754308801">- bsc#1243503:
  Fix TIFFMergeFieldInfo() read_count=write_count=0
  + tiff-4.7.0-bsc1243503.patch</changelog>
  <changelog author="mvetter@suse.com" date="1755777600">- security update:
  * CVE-2025-8534 [bsc#1247582]
    Fix null pointer dereference in function PS_Lvl2page
    + tiff-CVE-2025-8534.patch
  * CVE-2025-9165 [bsc#1248330]
    Fix local execution manipulation can lead to memory leak
    + tiff-CVE-2025-9165.patch
  * CVE-2024-13978 [bsc#1247581]
    Fix null pointer dereference in tiff2pdf
    + tiff-CVE-2024-13978.patch</changelog>
  <changelog author="mvetter@suse.com" date="1757332800">- security update:
  * CVE-2025-8961 [bsc#1248117]
    Fix segmentation fault via main function of tiffcrop utility
    + tiff-CVE-2025-8961.patch</changelog>
</package>
<package pkgid="b6536ba5ea3a80240ec2d606cd6a08e405a83d1e6610b1a5373c1dbec1c7a904" name="libtiff6-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.1" rel="150600.3.23.1"/>
  <changelog author="info@paolostivanin.com" date="1672833600">- Update to 4.5.0:
  * tdir_t type updated to uint32_t. This type is now used for the return
    value of TIFFCurrentDirectory() and TIFFNumberOfDirectories(), and as
    the argument of TIFFSetDirectory() and TIFFUnlinkDirectory()
  * Addition of an open option concept with the new functions TIFFOpenExt(),
    TIFFOpenWExt(), TIFFFdOpenExt(), TIFFClientOpenExt(), TIFFOpenOptionsAlloc(),
    TIFFOpenOptionsFree()
  * Leveraging above mentioned open option concept, addition of a new capability
    to limit the size of a single dynamic memory allocation done by the library
    with TIFFOpenOptionsSetMaxSingleMemAlloc()
  * Related to IFD-Loop detection refactoring, the number of IFDs that libtiff
    can browse through has been extended from 65535 to 1048576. This value is
    a build-time setting that can be configured with CMake's TIFF_MAX_DIR_COUNT
    variable or autoconf's --with-max-dir-count option.
  * Whole code base reformatting of .c/.h files using new .clang-format format
  * Documentation changed from static HTML and man pages to
    Restructured Text (rst). HTML and man pages are now build artifacts.
  * SONAME version bumped to 6 due to changes in symbol versioning.
  * autoconf/cmake: detect (not yet released) libjpeg-turbo 2.2 to take into
    its capability of handling both 8-bit JPEG and 12-bit JPEG in a single build.
  * autoconf/cmake: detect sphinx-build to build HTML and man pages
  * CMakeLists.txt: fix warning with -Wdev
  * CMake: correctly set default value of 'lzma' option when liblzma is detected
  * CMake: Moved linking of CMath::CMath into CMath_LIBRARY check.
  * Fix CMake build to be compatible with FetchContent.
  * cmake: Correct duplicate definition of _CRT_SECURE_NO_WARNINGS
  * cmake: Fixes for Visual Studio 2022.
  * Adds Requires.private generation so that pkg-config can correctly find
    the dependencies of libtiff.
  * Fix dependency on libm on Android
  * Fix build in tif_lzw.c
  * CMake: Add options for disabling tools, tests, contrib and docs.
  * tiffcrop: Fix memory allocation to require a larger buffer (CVE-2022-3570, CVE-2022-3598)
    [bsc#1205422]
  * tiffcrop: disable incompatibility of -Z, -X, -Y, -z options with any PAGE_MODE_x option
    (CVE-2022-3627, CVE-2022-3597, CVE-2022-3626)
  * tiffcrop: fix floating-point exception (CVE-2022-2056, CVE-2022-2057, CVE-2022-2058)
  * _TIFFCheckFieldIsValidForCodec(): return FALSE when passed a codec-specific tag
    and the codec is not configured (CVE-2022-34526)
  * Revised handling of TIFFTAG_INKNAMES and related TIFFTAG_NUMBEROFINKS value (CVE-2022-3599)
  * tiffcrop: -S option mutually exclusive (CVE-2022-2519, CVE-2022-2520, CVE-2022-2521)
- Drop tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
- Drop tiff-CVE-2022-34526.patch
- Drop tiff-CVE-2022-3599.patch
- Drop tiff-CVE-2022-3598.patch
- Drop tiff-CVE-2022-3970.patch
- Drop tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
- Drop tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1677067200">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1687262400">- Update to version 4.5.1:
  * Definition of tags reformatted (clang-format off) for better readability of tag comments in tiff.h and tif_dirinfo.c
  * Do not install libtiff-4.pc when tiff-install is reset.
  * Add versioninfo resource files for DLL and tools compiled with Windows MSVC and MINGW.
  * Disable clang-formatting for tif_config.h.cmake.in and tiffconf.h.cmake.in because sensitive for CMake scripts.
  * CMake: make WebP component name compatible with upstream ConfigWebP.cmake
  * CMake: make Findliblzma with upstream CMake config file
  * CMake: FindDeflate.cmake: fix several errors (issue #526).
  * CMake: FindLERC.cmake: version string return added.
  * CMake: export TiffConfig.cmake and TiffConfigVersion.cmake files
  * CMake: fix export of INTERFACE_INCLUDE_DIRECTORIES
  * Hardcode HOST_FILLORDER to FILLORDER_LSB2MSB and make 'H' flag of TIFFOpen() to warn and an alias of FILLORDER_MSB2LSB. tif_lerc.c: use WORDS_BIGENDIAN instead of HOST_BIGENDIAN.
  * Optimize relative seeking within TIFFSetDirectory() by using the learned list of IFD offsets.
  * Improve internal IFD offset and directory number map handling.
  * Behavior of TIFFOpen() mode "r+" in the Windows implementation adjusted to that of Linux.
  * TIFFDirectory td_fieldsset type changed from unsigned long, which can be 32 or 64 bits, to uint32_t (fixes issue #484).
  * tif_ojpeg.c: checking for division by zero (fixes issue #554).
  * LZWDecode(): avoid crash when trying to read again from a strip whith a missing end-of-information marker (fixes issue #548).
  * Fixed runtime error: applying zero offset to null pointer in countInkNamesString().
  * Fixing crash in TIFFUnlinkDirectory() when called with directory number zero ("TIFFUnlinkDirectory(0)") as well as fixing incorrect behaviour when unlinking the first directory.
  * tif_luv: check and correct for NaN data in uv_encode() (issue #530).
  * TIFFClose() avoid NULL pointer dereferencing (issue #515).
  * tif_hash_set.c: include tif_hash_set.h after tif_config.h to let a chance for GDAL symbol renaming trick.
  * Fax3: fix failure to decode some fax3 number_of_images and add test for Fax3 decoding issues (issue #513).
  * TIFFSetDirectory() and TIFFWriteDirectorySec() avoid harmless unsigned-integer-overflow (due to gdal oss-fuzz #54311 and #54343).
  * tif_ojpeg.c: fix issue #554 by checking for division by zero in OJPEGWriteHeaderInfo().
  * LZWDecode(): avoid crash when trying to read again from a strip whith a missing end-of-information marker (issue #548).
- Drop no longer needed patches:
  * tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * tiff-CVE-2022-48281.patch
  * tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1694779200">- Update to version 4.6.0:
  * API/ABI breaks: none
  * WebP decoder: validate WebP blob width, height, band count against
    TIFF parameters to avoid use of uninitialized variable, or decoding
    corrupted content without explicit error (fixes issue #581, issue #582).
  * WebP codec: turn exact mode when creating lossless files to avoid
    altering R,G,B values in areas where alpha=0
  * Fix TransferFunction writing of only two transfer functions.
  * TIFFReadDirectoryCheckOrder: avoid integer overflow. When it occurs,
    it should be harmless in practice though
  * tiffcp: remove -i option (ignore errors)
  * This version removes a big number of utilities that have suffered from
    lack of maintenance over the years and were the source of various
    reported security issues:
    + fax2ps
    + fax2tiff
    + pal2rgb
    + ppm2tiff
    + raw2tiff
    + rgb2ycbcr
    + thumbnail
    + tiff2bw
    + tiff2rgba
    + tiffcmp
    + tiffcrop
    + tiffdither
    + tiffgt
    + tiffmedian
    + tiff2ps
    + tiff2pdf
- Remove no longer needed tiff-4.0.3-compress-warning.patch.
- CVE-2023-25435 [bsc#1212607] tiffcrop is removed</changelog>
  <changelog author="mvetter@suse.com" date="1706270400">- security update:
  * CVE-2023-52356 [bsc#1219213]
    Fix segfault in TIFFReadRGBATileExt()
    + tiff-CVE-2023-52356.patch</changelog>
  <changelog author="mvetter@suse.com" date="1724068800">- security update:
  * CVE-2024-7006 [bsc#1228924]
    Fix pointer deref in tif_dirinfo.c
    + tiff-CVE-2024-7006.patch</changelog>
  <changelog author="mvetter@suse.com" date="1726660800">- Update to 4.7.0:
  * This version restores in the default build the availability of
    the tools that had been dropped in v4.6.0
    See https://libtiff.gitlab.io/libtiff/rfcs/rfc2_restoring_needed_tools.html#rfc2-restoring-needed-tools
  * Software configuration changes:
    + autoconf build: configure.ac: avoid -Werror passed to CFLAGS to interfere with feature detection
    + autoconf build: fix error when running make clean (fixes issue #630)
    + autoconf build: back off the minimum required automake version to 1.11
    + autoconf.ac: fix detection of windows.h for mingw (fixes issue #605)
    + libtiff-4.pc: Fix Requires.private missing Lerc. It provides a .pc file
    starting from version 4 (in autoconf builds, we assume that liblerc is at least version 4)
    + CMake: Fix TIFF_INCLUDE_DIRS
    + CMake: MinGW compilers don't need a .def file for shared library
    + CMake: move libdeflate and Lerc to Requires.private
    + CMake: enable resource compilation on all Windows.
  * Library changes:
    + Add TIFFOpenOptionsSetMaxCumulatedMemAlloc(). This function complements
    TIFFOpenOptionsSetMaxSingleMemAlloc() to define the maximum cumulated memory
    allocations in byte, for a given TIFF handle, that libtiff internal memory
    allocation functions are allowed.
    + TIFFWriteDirectory(): Avoid overwriting following data if an IFD is enlarged.
    + TIFFXYZToRGB: avoid integer overflow (fixes issue #644)
    + uv_decode() and uv_encode(): avoid potential out-of-bounds array index (fixes issue #645)
    + Fix cases where tif_curdir is set incorrectly. Fix cases where the current directory number (tif_curdir)
    is set inconsistently or incorrectly, depending on the previous history.
    + TIFFRead[Scanline/EncodedStrip/EncodeTile]: 0-initialize output buffer if setupdecode fails ;
    most codecs: zero-initialize (not-yet-written parts of) output buffer if failure (fixes issue #375)
    + OJPEG: reset subsampling_convert_state=0 in OJPEGPreDecode (fixes issue #183)
    + ThunderRLE: fix failure when decoding last run. Bug seen with GhostPDL
    + LERC codec: deal with issues with multi-band PlanarConfig=Contig and NaN values
    + tif_fax3.c: error out after a number of times end-of-file has been reached (fixes issue #583)
    + LZW: avoid warning about misaligned address with UBSAN (fixes issue #616)
    + TIFFReadRGBAStrip/TIFFReadRGBATile: add more validation of col/row (fixes issue #622, CVE-2023-52356)
    + tif_dirread.c: only issue TIFFGetFileSize() for large enough RAM requests
    + Avoid FPEs (division by zero) in tif_getimage.c.
    + Avoiding FPE (division by zero) for TIFFhowmany_32() and TIFFhowmany_64() macros by checking for
    denominator not zero before macros are executed. (fixes issue #628)
    + Add non-zero check before division in TIFFComputeStrip()
    + Fix wrong return of TIFFIsBigTIFF() in case byte-swapping is active
    + Setting the TIFFFieldInfo field set_field_type should consider field_writecount not field_readcount
    + Avoid memory leaks when using TIFFCreateDirectory() by releasing the allocated memory in the tif-structure.
    + For non-terminated ASCII arrays, the buffer is first enlarged before a NULL is set at the end to
    avoid deleting the last character. (fixes issue #579)
    + Check return value of _TIFFCreateAnonField(). (fixes issue #624, CVE-2024-7006)
    + Prevent some out-of-memory attacks (https://gitlab.com/libtiff/libtiff/-/issues/614#note_1602683857)
    + Ensure absolute seeking is forced independent of TIFFReadDirectory success. (fixes issue #618)
    + tif_dirinfo.c: re-enable TIFFTAG_EP_CFAREPEATPATTERNDIM and TIFFTAG_EP_CFAPATTERN tags (fixes issue #608)
    + Fix warnings with GCC 14
    + tif_dir.c: Log source file, line number, and input tif for directory count error (fixes issue #627)
    + Last usage of get_field_type of TIFFField structure at TIFFWriteDirectorySec() changed to using set_field_type.
    + tif_jpeg.c/tif_ojpeg.c: remove likely ifdef tricks related to old compilers or unusual setups
    + Remove _TIFFUInt64ToFloat() and _TIFFUInt64ToDouble()
    + Remove support for _MSC_VER &lt; 1500.
    + Use #ifdef _WIN32 to test for Windows, and tiffio.h: remove definition of __WIN32__
  * Documentation:
    + Amend manpages for changes in current directory index behaviour
    + Note on using TIFFFlush() before TIFFClose() to check that the data has been successfully written to the file. (fixes issue #506)
    + Update TIFF documentation about TIFFOpenOptions.rst and TIFFOpenOptionsSetMaxSingleMemAlloc() usage and some other small fixes (relates to CVE-2024-7006)
  * Re-added tools:
    + fax2ps
    + fax2tiff
    + pal2rgb
    + ppm2tiff
    + raw2tiff
    + rgb2ycbcr (not installed)
    + thumbnail (not installed)
    + tiff2bw
    + tiff2rgba
    + tiffcmp
    + tiffcrop
    + tiffdither
    + tiffgt
    + tiffmedian
    + tiff2ps
    + tiff2pdf
  * New/improved functionality:
    + tiff2rgba: Add background gradient option for alpha compositing
    + tiffcp: -i flag restored
  * Bug fixes for tools:
    + tiffcrop: address Coverity scan issues 1605444, 1605445, and 16054
    + tiffcrop: Apply "Fix heap-buffer-overflow in function extractImageSection"
    + tiffcrop: fix buffer overflows, use after free (fixes issue #542, issue #550, issue #552)
    + tiff2pdf: address Coverity scan issues
    + tiff2pdf: fix inconsistent PLANARCONFIG value for the input and output TIFF
    + tiff2pdf: fix issue with JPEG restart-interval marker when converting from JPEG-compressed files (fixes issue #539)
    + tiff2pdf: red and blue were being swapped for RGBA decoding (fixes issue #253)
    + tiff2pdf: fixes issue #596
    + thumbnail: address Coverity scan issues
    + tiffcp: Add check for limitMalloc return to fix Coverity 1603334
    + tiffcp: preserve TIFFTAG_REFERENCEBLACKWHITE when doing YCbCr JPEG -&gt; YCbCr JPEG
    + tiffcp: replace PHOTOMETRIC_YCBCR with PHOTOMETRIC_RGB when outputing to compression != JPEG (refs issue #571)
    + tiffcp: do not copy tags YCBCRCOEFFICIENTS, YCBCRSUBSAMPLING, YCBCRPOSITIONING, REFERENCEBLACKWHITE. Only set YCBCRSUBSAMPLING when generating YCbCr JPEG
    + tiffcp: Check also codec of input image, not only from output image (fixes issue #606)
    + Add some basic sanity checks for tiffcp and tiffcrop RGB-&gt;YCbCr JPEG conversions.
    + fax2ps and fax2tiff: memory leak fixes (fixes issue #476)
    + tiffmedian: memory leak fixes (fixes issue #599)
    + fax2tiff: fix EOFB interpretation (fixes issue #191)
    + fax2tiff: fix issue with unreasonable width input (fixes issue #249)
    + tiffcp and tiffcrop: fixes issue #228
    + tiff2rgba: fixes issue #469
    + tiffdither: fixes issue #473
    + tiffdump: fix wrong printf formatter in error message (Coverity 1472932)
    + tiffset: avoid false positive Coverity Scan warning on 64-bit builds (Coverity 1518997)
    + tifcp/tiffset: use correct format specifiers
  * Changes to contributed and unsupported tools
    + contrib/addtiffo: validate return of TIFFWriteEncodedXXXX() calls (Coverity 1024680)
- Remove patches contained in upstream:
  * tiff-CVE-2023-52356.patch
  * tiff-CVE-2024-7006.patch
- Tools are not built for now due to test failure: `FAIL: tiffcp-32bpp-None-jpeg.sh`</changelog>
  <changelog author="mrueckert@suse.de" date="1731153600">- switch build to cmake for the webp build - we need the cmake
  finder code</changelog>
  <changelog author="mrueckert@suse.de" date="1731326400">- In the previous change to enable the cmake based build
  we also needed python3-Sphinx to build the man pages, as unlike
  the autotools based build, the cmake based build does not fall
  back to the pre-built man pages.
  This causes build cycle. Split out the documentation building to
  break the cycle. The Tumbleweed release managers preferred this
  solution over a mini package.</changelog>
  <changelog author="mrueckert@suse.de" date="1731412800">- make doc packages noarch. no need to have those per arch
- ensure that the src rpms are named per build flavor:
  You might now ask why. Good question:
  1. the spec file during the build get patched. `@BUILD_FLAVOR@`
    gets replaced with the value. which means the src rpm between
    build flavor builds is not identical. Also the last built
    src.rpm will be published. with different content and runtime
    requires (aka our BuildRequires).
  2. for historical reasons the internal dependency tracking goes
    via the src.rpm package. So without having differently named
    src.rpms the build cycle we were trying to solve was not
    actually solved. So we append a suffix to the Name attribute
    in the preamble now.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1736769600">- Fix versioning of tiff-docs under Recommends</changelog>
  <changelog author="lubos.kocman@suse.com" date="1738756800">- Update test/test_directory.c not to fail on big-endian machines.
  * Add tiff-4.7.0-test_directory.patch
    Fix memory leaks (fixes issue #652)
  * Resolves bsc#1236834
    fix build fail on s390x</changelog>
  <changelog author="lubos.kocman@suse.com" date="1740398400">- Use python3-Sphinx instead of  %{primary_python}-Sphinx
  based on recommendation from python maintainers.
  * Fixes build issue of man flavor on 15.6</changelog>
  <changelog author="sfalken@opensuse.org" date="1742644800">- Add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to fix FTBFS with cmake4
- Add %check section
- Remove Group: declarations, no longer used</changelog>
  <changelog author="mvetter@suse.com" date="1754308800">- security update:
  * CVE-2025-8176 [bsc#1247108]
    Fix heap use-after-free in tools/tiffmedian.c
    + tiff-CVE-2025-8176.patch
  * CVE-2025-8177 [bsc#1247106]
    Fix possible buffer overflow in tools/thumbnail.c:setrow()
    + tiff-CVE-2025-8177.patch</changelog>
  <changelog author="mvetter@suse.com" date="1754308801">- bsc#1243503:
  Fix TIFFMergeFieldInfo() read_count=write_count=0
  + tiff-4.7.0-bsc1243503.patch</changelog>
  <changelog author="mvetter@suse.com" date="1755777600">- security update:
  * CVE-2025-8534 [bsc#1247582]
    Fix null pointer dereference in function PS_Lvl2page
    + tiff-CVE-2025-8534.patch
  * CVE-2025-9165 [bsc#1248330]
    Fix local execution manipulation can lead to memory leak
    + tiff-CVE-2025-9165.patch
  * CVE-2024-13978 [bsc#1247581]
    Fix null pointer dereference in tiff2pdf
    + tiff-CVE-2024-13978.patch</changelog>
  <changelog author="mvetter@suse.com" date="1757332800">- security update:
  * CVE-2025-8961 [bsc#1248117]
    Fix segmentation fault via main function of tiffcrop utility
    + tiff-CVE-2025-8961.patch</changelog>
  <changelog author="mvetter@suse.com" date="1758196800">- Update to 4.7.1:
  Software configuration changes:
  * Define HAVE_JPEGTURBO_DUAL_MODE_8_12 and LERC_STATIC in tif_config.h.
  * CMake: define WORDS_BIGENDIAN via tif_config.h
  * doc/CMakeLists.txt: remove useless cmake_minimum_required()
  * CMake: fix build with LLVM/Clang 17 (fixes issue #651)
  * CMake: set CMP0074 new policy
  * Set LINKER_LANGUAGE for C targets with C deps
  * Export tiffxx cmake target (fixes issue #674)
  * autogen.sh: Enable verbose wget.
  * configure.ac: Syntax updates for Autoconf 2.71
  * autogen.sh: Re-implement based on autoreconf. Failure to update
    config.guess/config.sub does not return error (fixes issue #672)
  * CMake: fix CMake 4.0 warning when minimum required version is &lt; 3.10.
  * CMake: Add build option tiff-static (fixes issue #709)
  Library changes:
  * Add TIFFOpenOptionsSetWarnAboutUnknownTags() for explicit control
    about emitting warnings for unknown tags. No longer emit warnings
    about unknown tags by default
  * tif_predict.c: speed-up decompression in some cases.
  Bug fixes:
  * tif_fax3: For fax group 3 data if no EOL is detected, reading is
    retried without synchronisation for EOLs. (fixes issue #54)
  * Updating TIFFMergeFieldInfo() with read_count=write_count=0 for
    FIELD_IGNORE. Updating TIFFMergeFieldInfo() with read_count=write_count=0 for
    FIELD_IGNORE. Improving handling when field_name = NULL. (fixes issue #532)
  * tiff.h: add COMPRESSION_JXL_DNG_1_7=52546 as used for JPEGXL compression in
    the DNG 1.7 specification
  * TIFFWriteDirectorySec: Increment string length for ASCII tags for codec tags
    defined with FIELD_xxx bits, as it is done for FIELD_CUSTOM tags. (fixes issue #648)
  * Do not error out on a tag whose tag count value is zero, just issue a warning.
    Fix parsing a private tag 0x80a6 (fixes issue #647)
  * TIFFDefaultTransferFunction(): give up beyond td_bitspersample = 24
    Fixes https://github.com/OSGeo/gdal/issues/10875)
  * tif_getimage.c: Remove unnecessary calls to TIFFRGBAImageOK() (fixes issue #175)
  * Fix writing a Predictor=3 file with non-native endianness
  * _TIFFVSetField(): fix potential use of unallocated memory (out-of-bounds
  * read / nullptr dereference) in case of out-of-memory situation when dealing with
    custom tags (fixes issue #663)
  * tif_fax3.c: Error out for CCITT fax encoding if SamplesPerPixel is not equal 1 and
    PlanarConfiguration = Contiguous (fixes issue #26)
  * tif_fax3.c: error out after a number of times end-of-line or unexpected bad code
    words have been reached. (fixes issue #670)
  * Fix memory leak in TIFFSetupStrips() (fixes issue #665)
  * tif_zip.c: Provide zlib allocation functions. Otherwise for zlib built with
  - DZ_SOLO inflating will fail.
  * Fix memory leak in _TIFFSetDefaultCompressionState. (fixes issue #676)
  * tif_predict.c: Don’t overwrite input buffer of TIFFWriteScanline() if "prediction"
    is enabled. Use extra working buffer in PredictorEncodeRow(). (fixes issue #5)
  * tif_getimage.c: update some integer overflow checks (fixes issue #79)
  * tif_getimage.c: Fix buffer underflow crash for less raster rows at
    TIFFReadRGBAImageOriented() (fixes issue #704, bsc#1250413, CVE-2025-9900)
  * TIFFReadRGBAImage(): several fixes to avoid buffer overflows.
  * Correct passing arguments to TIFFCvtIEEEFloatToNative() and TIFFCvtIEEEDoubleToNative()
    if HAVE_IEEEFP is not defined. (fixes issue #699)
  * LZWDecode(): avoid nullptr dereference when trying to read again after EOI marker
    has been found with remaining output bytes (fixes issue #698)
  * TIFFSetSubDirectory(): check _TIFFCheckDirNumberAndOffset() return.
  * TIFFUnlinkDirectory() and TIFFWriteDirectorySec(): clear tif_rawcp when clearing
    tif_rawdata (fixes issue #711)
  * JPEGEncodeRaw(): error out if a previous scanline failed to be written, to avoid
    out-of-bounds access (fixes issue #714)
  * tif_jpeg: Fix bug in JPEGDecodeRaw() if JPEG_LIB_MK1_OR_12BIT is defined for 8/12bit
    dual mode, introduced in libjpeg-turbo 2.2, which was actually released as 3.0.
    Fixes issue #717
  * add assert for TIFFReadCustomDirectory infoarray check.
  * ppm2tiff: Fix bug in pack_words trailing bytes, where last two bytes of each line
    were written wrongly. (fixes issue #467)
  * fax2ps: fix regression of commit 28c38d648b64a66c3218778c4745225fe3e3a06d where
    TIFFTAG_FAXFILLFUNC is being used rather than an output buffer (fixes issue #649)
  * tiff2pdf: Check TIFFTAG_TILELENGTH and TIFFTAGTILEWIDTH (fixes issue #650)
  * tiff2pdf: check h_samp and v_samp for range 1 to 4 to avoid division by zero.
    Fixes issue #654
  * tiff2pdf: avoid null pointer dereference. (fixes issue #741)
  * Improve non-secure integer overflow check (comparison of division result with
    multiplicant) at compiler optimisation in tiffcp, rgb2ycbcr and tiff2rgba.
    Fixes issue #546
  * tiff2rgba: fix some "a partial expression can generate an overflow before it is
    assigned to a broader type" warnings. (fixes issue #682)
  * tiffdither/tiffmedian: Don't skip the first line of the input image. (fixes issue #703)
  * tiffdither: avoid out-of-bounds read identified in issue #733
  * tiffmedian: error out if TIFFReadScanline() fails (fixes issue #707)
  * tiffmedian: close input file. (fixes issue #735)
  * thumbail: avoid potential out of bounds access (fixes issue #715)
  * tiffcrop: close open TIFF files and release allocated buffers before exiting in case
    of error to avoid memory leaks. (fixes issue #716)
  * tiffcrop: fix double-free and memory leak exposed by issue #721
  * tiffcrop: avoid buffer overflow. (fixes issue #740)
  * tiffcrop: avoid nullptr dereference. (fixes issue #734)
  * tiffdump: Fix coverity scan issue CID 1373365: Passing tainted expression *datamem
    to PrintData, which uses it as a divisor or modulus.
  * tiff2ps: check return of TIFFGetFiled() for TIFFTAG_STRIPBYTECOUNTS and
    TIFFTAG_TILEBYTECOUNTS to avoid NULL pointer dereference. (fixes issue #718)
  * tiffcmp: fix memory leak when second file cannot be opened. (fixes issue #718 and issue #729)
  * tiffcp: fix setting compression level for lossless codecs. (fixes issue #730)
  * raw2tiff: close input file before exit (fixes issue #742)
  Tools changes:
  * tiffinfo: add a -W switch to warn about unknown tags.
  * tiffdither: process all pages in input TIFF file.
  Documentation:
  * TIFFRGBAImage.rst note added for incorrect saving of images with TIFF orientation
    from 5 (LeftTop) to 8 (LeftBottom) in the raster.
  * TIFFRGBAImage.rst note added about un-associated alpha handling (fixes issue #67)
  * Update "Defining New TIFF Tags" description. (fixes issue #642, bsc#1248278, CVE-2025-8851)
  * Fix return type of TIFFReadEncodedTile()
  * Update the documentation to reflect deprecated typedefs.
  * TIFFWriteDirectory.rst: Clarify TIFFSetWriteOffset() only sets offset for image
    data and not for IFD data.
  * Update documentation on re-entrancy and thread safety.
  * Remove dead links to no more existing Awaresystems web-site.
  * Updating BigTIFF specification and some miscelaneous editions.
  * Replace some last links and remove last todos.
  * Added hints for correct allocation of TIFFYCbCrtoRGB structure and its
    associated buffers. (fixes issue #681)
  * Added chapter to "Using the TIFF Library" with links to handling multi-page TIFF
    and custom directories. (fixes issue #43)
  * update TIFFOpen.rst with the return values of mapproc and unmapproc. (fixes issue #12)
- Drop upstreamed patches:
  * tiff-4.7.0-test_directory.patch
  * tiff-CVE-2025-8176.patch
  * tiff-CVE-2025-8177.patch
  * tiff-4.7.0-bsc1243503.patch
  * tiff-CVE-2025-8534.patch
  * tiff-CVE-2025-9165.patch
  * tiff-CVE-2024-13978.patch
  * tiff-CVE-2025-8961.patch</changelog>
</package>
<package pkgid="e1bdf483c0c09089f672d8e80be80e98158280efc96c8295f8428784dc4b3319" name="libtiff6-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.1" rel="150600.3.26.1"/>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1677067200">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1687262400">- Update to version 4.5.1:
  * Definition of tags reformatted (clang-format off) for better readability of tag comments in tiff.h and tif_dirinfo.c
  * Do not install libtiff-4.pc when tiff-install is reset.
  * Add versioninfo resource files for DLL and tools compiled with Windows MSVC and MINGW.
  * Disable clang-formatting for tif_config.h.cmake.in and tiffconf.h.cmake.in because sensitive for CMake scripts.
  * CMake: make WebP component name compatible with upstream ConfigWebP.cmake
  * CMake: make Findliblzma with upstream CMake config file
  * CMake: FindDeflate.cmake: fix several errors (issue #526).
  * CMake: FindLERC.cmake: version string return added.
  * CMake: export TiffConfig.cmake and TiffConfigVersion.cmake files
  * CMake: fix export of INTERFACE_INCLUDE_DIRECTORIES
  * Hardcode HOST_FILLORDER to FILLORDER_LSB2MSB and make 'H' flag of TIFFOpen() to warn and an alias of FILLORDER_MSB2LSB. tif_lerc.c: use WORDS_BIGENDIAN instead of HOST_BIGENDIAN.
  * Optimize relative seeking within TIFFSetDirectory() by using the learned list of IFD offsets.
  * Improve internal IFD offset and directory number map handling.
  * Behavior of TIFFOpen() mode "r+" in the Windows implementation adjusted to that of Linux.
  * TIFFDirectory td_fieldsset type changed from unsigned long, which can be 32 or 64 bits, to uint32_t (fixes issue #484).
  * tif_ojpeg.c: checking for division by zero (fixes issue #554).
  * LZWDecode(): avoid crash when trying to read again from a strip whith a missing end-of-information marker (fixes issue #548).
  * Fixed runtime error: applying zero offset to null pointer in countInkNamesString().
  * Fixing crash in TIFFUnlinkDirectory() when called with directory number zero ("TIFFUnlinkDirectory(0)") as well as fixing incorrect behaviour when unlinking the first directory.
  * tif_luv: check and correct for NaN data in uv_encode() (issue #530).
  * TIFFClose() avoid NULL pointer dereferencing (issue #515).
  * tif_hash_set.c: include tif_hash_set.h after tif_config.h to let a chance for GDAL symbol renaming trick.
  * Fax3: fix failure to decode some fax3 number_of_images and add test for Fax3 decoding issues (issue #513).
  * TIFFSetDirectory() and TIFFWriteDirectorySec() avoid harmless unsigned-integer-overflow (due to gdal oss-fuzz #54311 and #54343).
  * tif_ojpeg.c: fix issue #554 by checking for division by zero in OJPEGWriteHeaderInfo().
  * LZWDecode(): avoid crash when trying to read again from a strip whith a missing end-of-information marker (issue #548).
- Drop no longer needed patches:
  * tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * tiff-CVE-2022-48281.patch
  * tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1694779200">- Update to version 4.6.0:
  * API/ABI breaks: none
  * WebP decoder: validate WebP blob width, height, band count against
    TIFF parameters to avoid use of uninitialized variable, or decoding
    corrupted content without explicit error (fixes issue #581, issue #582).
  * WebP codec: turn exact mode when creating lossless files to avoid
    altering R,G,B values in areas where alpha=0
  * Fix TransferFunction writing of only two transfer functions.
  * TIFFReadDirectoryCheckOrder: avoid integer overflow. When it occurs,
    it should be harmless in practice though
  * tiffcp: remove -i option (ignore errors)
  * This version removes a big number of utilities that have suffered from
    lack of maintenance over the years and were the source of various
    reported security issues:
    + fax2ps
    + fax2tiff
    + pal2rgb
    + ppm2tiff
    + raw2tiff
    + rgb2ycbcr
    + thumbnail
    + tiff2bw
    + tiff2rgba
    + tiffcmp
    + tiffcrop
    + tiffdither
    + tiffgt
    + tiffmedian
    + tiff2ps
    + tiff2pdf
- Remove no longer needed tiff-4.0.3-compress-warning.patch.
- CVE-2023-25435 [bsc#1212607] tiffcrop is removed</changelog>
  <changelog author="mvetter@suse.com" date="1706270400">- security update:
  * CVE-2023-52356 [bsc#1219213]
    Fix segfault in TIFFReadRGBATileExt()
    + tiff-CVE-2023-52356.patch</changelog>
  <changelog author="mvetter@suse.com" date="1724068800">- security update:
  * CVE-2024-7006 [bsc#1228924]
    Fix pointer deref in tif_dirinfo.c
    + tiff-CVE-2024-7006.patch</changelog>
  <changelog author="mvetter@suse.com" date="1726660800">- Update to 4.7.0:
  * This version restores in the default build the availability of
    the tools that had been dropped in v4.6.0
    See https://libtiff.gitlab.io/libtiff/rfcs/rfc2_restoring_needed_tools.html#rfc2-restoring-needed-tools
  * Software configuration changes:
    + autoconf build: configure.ac: avoid -Werror passed to CFLAGS to interfere with feature detection
    + autoconf build: fix error when running make clean (fixes issue #630)
    + autoconf build: back off the minimum required automake version to 1.11
    + autoconf.ac: fix detection of windows.h for mingw (fixes issue #605)
    + libtiff-4.pc: Fix Requires.private missing Lerc. It provides a .pc file
    starting from version 4 (in autoconf builds, we assume that liblerc is at least version 4)
    + CMake: Fix TIFF_INCLUDE_DIRS
    + CMake: MinGW compilers don't need a .def file for shared library
    + CMake: move libdeflate and Lerc to Requires.private
    + CMake: enable resource compilation on all Windows.
  * Library changes:
    + Add TIFFOpenOptionsSetMaxCumulatedMemAlloc(). This function complements
    TIFFOpenOptionsSetMaxSingleMemAlloc() to define the maximum cumulated memory
    allocations in byte, for a given TIFF handle, that libtiff internal memory
    allocation functions are allowed.
    + TIFFWriteDirectory(): Avoid overwriting following data if an IFD is enlarged.
    + TIFFXYZToRGB: avoid integer overflow (fixes issue #644)
    + uv_decode() and uv_encode(): avoid potential out-of-bounds array index (fixes issue #645)
    + Fix cases where tif_curdir is set incorrectly. Fix cases where the current directory number (tif_curdir)
    is set inconsistently or incorrectly, depending on the previous history.
    + TIFFRead[Scanline/EncodedStrip/EncodeTile]: 0-initialize output buffer if setupdecode fails ;
    most codecs: zero-initialize (not-yet-written parts of) output buffer if failure (fixes issue #375)
    + OJPEG: reset subsampling_convert_state=0 in OJPEGPreDecode (fixes issue #183)
    + ThunderRLE: fix failure when decoding last run. Bug seen with GhostPDL
    + LERC codec: deal with issues with multi-band PlanarConfig=Contig and NaN values
    + tif_fax3.c: error out after a number of times end-of-file has been reached (fixes issue #583)
    + LZW: avoid warning about misaligned address with UBSAN (fixes issue #616)
    + TIFFReadRGBAStrip/TIFFReadRGBATile: add more validation of col/row (fixes issue #622, CVE-2023-52356)
    + tif_dirread.c: only issue TIFFGetFileSize() for large enough RAM requests
    + Avoid FPEs (division by zero) in tif_getimage.c.
    + Avoiding FPE (division by zero) for TIFFhowmany_32() and TIFFhowmany_64() macros by checking for
    denominator not zero before macros are executed. (fixes issue #628)
    + Add non-zero check before division in TIFFComputeStrip()
    + Fix wrong return of TIFFIsBigTIFF() in case byte-swapping is active
    + Setting the TIFFFieldInfo field set_field_type should consider field_writecount not field_readcount
    + Avoid memory leaks when using TIFFCreateDirectory() by releasing the allocated memory in the tif-structure.
    + For non-terminated ASCII arrays, the buffer is first enlarged before a NULL is set at the end to
    avoid deleting the last character. (fixes issue #579)
    + Check return value of _TIFFCreateAnonField(). (fixes issue #624, CVE-2024-7006)
    + Prevent some out-of-memory attacks (https://gitlab.com/libtiff/libtiff/-/issues/614#note_1602683857)
    + Ensure absolute seeking is forced independent of TIFFReadDirectory success. (fixes issue #618)
    + tif_dirinfo.c: re-enable TIFFTAG_EP_CFAREPEATPATTERNDIM and TIFFTAG_EP_CFAPATTERN tags (fixes issue #608)
    + Fix warnings with GCC 14
    + tif_dir.c: Log source file, line number, and input tif for directory count error (fixes issue #627)
    + Last usage of get_field_type of TIFFField structure at TIFFWriteDirectorySec() changed to using set_field_type.
    + tif_jpeg.c/tif_ojpeg.c: remove likely ifdef tricks related to old compilers or unusual setups
    + Remove _TIFFUInt64ToFloat() and _TIFFUInt64ToDouble()
    + Remove support for _MSC_VER &lt; 1500.
    + Use #ifdef _WIN32 to test for Windows, and tiffio.h: remove definition of __WIN32__
  * Documentation:
    + Amend manpages for changes in current directory index behaviour
    + Note on using TIFFFlush() before TIFFClose() to check that the data has been successfully written to the file. (fixes issue #506)
    + Update TIFF documentation about TIFFOpenOptions.rst and TIFFOpenOptionsSetMaxSingleMemAlloc() usage and some other small fixes (relates to CVE-2024-7006)
  * Re-added tools:
    + fax2ps
    + fax2tiff
    + pal2rgb
    + ppm2tiff
    + raw2tiff
    + rgb2ycbcr (not installed)
    + thumbnail (not installed)
    + tiff2bw
    + tiff2rgba
    + tiffcmp
    + tiffcrop
    + tiffdither
    + tiffgt
    + tiffmedian
    + tiff2ps
    + tiff2pdf
  * New/improved functionality:
    + tiff2rgba: Add background gradient option for alpha compositing
    + tiffcp: -i flag restored
  * Bug fixes for tools:
    + tiffcrop: address Coverity scan issues 1605444, 1605445, and 16054
    + tiffcrop: Apply "Fix heap-buffer-overflow in function extractImageSection"
    + tiffcrop: fix buffer overflows, use after free (fixes issue #542, issue #550, issue #552)
    + tiff2pdf: address Coverity scan issues
    + tiff2pdf: fix inconsistent PLANARCONFIG value for the input and output TIFF
    + tiff2pdf: fix issue with JPEG restart-interval marker when converting from JPEG-compressed files (fixes issue #539)
    + tiff2pdf: red and blue were being swapped for RGBA decoding (fixes issue #253)
    + tiff2pdf: fixes issue #596
    + thumbnail: address Coverity scan issues
    + tiffcp: Add check for limitMalloc return to fix Coverity 1603334
    + tiffcp: preserve TIFFTAG_REFERENCEBLACKWHITE when doing YCbCr JPEG -&gt; YCbCr JPEG
    + tiffcp: replace PHOTOMETRIC_YCBCR with PHOTOMETRIC_RGB when outputing to compression != JPEG (refs issue #571)
    + tiffcp: do not copy tags YCBCRCOEFFICIENTS, YCBCRSUBSAMPLING, YCBCRPOSITIONING, REFERENCEBLACKWHITE. Only set YCBCRSUBSAMPLING when generating YCbCr JPEG
    + tiffcp: Check also codec of input image, not only from output image (fixes issue #606)
    + Add some basic sanity checks for tiffcp and tiffcrop RGB-&gt;YCbCr JPEG conversions.
    + fax2ps and fax2tiff: memory leak fixes (fixes issue #476)
    + tiffmedian: memory leak fixes (fixes issue #599)
    + fax2tiff: fix EOFB interpretation (fixes issue #191)
    + fax2tiff: fix issue with unreasonable width input (fixes issue #249)
    + tiffcp and tiffcrop: fixes issue #228
    + tiff2rgba: fixes issue #469
    + tiffdither: fixes issue #473
    + tiffdump: fix wrong printf formatter in error message (Coverity 1472932)
    + tiffset: avoid false positive Coverity Scan warning on 64-bit builds (Coverity 1518997)
    + tifcp/tiffset: use correct format specifiers
  * Changes to contributed and unsupported tools
    + contrib/addtiffo: validate return of TIFFWriteEncodedXXXX() calls (Coverity 1024680)
- Remove patches contained in upstream:
  * tiff-CVE-2023-52356.patch
  * tiff-CVE-2024-7006.patch
- Tools are not built for now due to test failure: `FAIL: tiffcp-32bpp-None-jpeg.sh`</changelog>
  <changelog author="mrueckert@suse.de" date="1731153600">- switch build to cmake for the webp build - we need the cmake
  finder code</changelog>
  <changelog author="mrueckert@suse.de" date="1731326400">- In the previous change to enable the cmake based build
  we also needed python3-Sphinx to build the man pages, as unlike
  the autotools based build, the cmake based build does not fall
  back to the pre-built man pages.
  This causes build cycle. Split out the documentation building to
  break the cycle. The Tumbleweed release managers preferred this
  solution over a mini package.</changelog>
  <changelog author="mrueckert@suse.de" date="1731412800">- make doc packages noarch. no need to have those per arch
- ensure that the src rpms are named per build flavor:
  You might now ask why. Good question:
  1. the spec file during the build get patched. `@BUILD_FLAVOR@`
    gets replaced with the value. which means the src rpm between
    build flavor builds is not identical. Also the last built
    src.rpm will be published. with different content and runtime
    requires (aka our BuildRequires).
  2. for historical reasons the internal dependency tracking goes
    via the src.rpm package. So without having differently named
    src.rpms the build cycle we were trying to solve was not
    actually solved. So we append a suffix to the Name attribute
    in the preamble now.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1736769600">- Fix versioning of tiff-docs under Recommends</changelog>
  <changelog author="lubos.kocman@suse.com" date="1738756800">- Update test/test_directory.c not to fail on big-endian machines.
  * Add tiff-4.7.0-test_directory.patch
    Fix memory leaks (fixes issue #652)
  * Resolves bsc#1236834
    fix build fail on s390x</changelog>
  <changelog author="lubos.kocman@suse.com" date="1740398400">- Use python3-Sphinx instead of  %{primary_python}-Sphinx
  based on recommendation from python maintainers.
  * Fixes build issue of man flavor on 15.6</changelog>
  <changelog author="sfalken@opensuse.org" date="1742644800">- Add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to fix FTBFS with cmake4
- Add %check section
- Remove Group: declarations, no longer used</changelog>
  <changelog author="mvetter@suse.com" date="1754308800">- security update:
  * CVE-2025-8176 [bsc#1247108]
    Fix heap use-after-free in tools/tiffmedian.c
    + tiff-CVE-2025-8176.patch
  * CVE-2025-8177 [bsc#1247106]
    Fix possible buffer overflow in tools/thumbnail.c:setrow()
    + tiff-CVE-2025-8177.patch</changelog>
  <changelog author="mvetter@suse.com" date="1754308801">- bsc#1243503:
  Fix TIFFMergeFieldInfo() read_count=write_count=0
  + tiff-4.7.0-bsc1243503.patch</changelog>
  <changelog author="mvetter@suse.com" date="1755777600">- security update:
  * CVE-2025-8534 [bsc#1247582]
    Fix null pointer dereference in function PS_Lvl2page
    + tiff-CVE-2025-8534.patch
  * CVE-2025-9165 [bsc#1248330]
    Fix local execution manipulation can lead to memory leak
    + tiff-CVE-2025-9165.patch
  * CVE-2024-13978 [bsc#1247581]
    Fix null pointer dereference in tiff2pdf
    + tiff-CVE-2024-13978.patch</changelog>
  <changelog author="mvetter@suse.com" date="1757332800">- security update:
  * CVE-2025-8961 [bsc#1248117]
    Fix segmentation fault via main function of tiffcrop utility
    + tiff-CVE-2025-8961.patch</changelog>
  <changelog author="mvetter@suse.com" date="1758196800">- Update to 4.7.1:
  Software configuration changes:
  * Define HAVE_JPEGTURBO_DUAL_MODE_8_12 and LERC_STATIC in tif_config.h.
  * CMake: define WORDS_BIGENDIAN via tif_config.h
  * doc/CMakeLists.txt: remove useless cmake_minimum_required()
  * CMake: fix build with LLVM/Clang 17 (fixes issue #651)
  * CMake: set CMP0074 new policy
  * Set LINKER_LANGUAGE for C targets with C deps
  * Export tiffxx cmake target (fixes issue #674)
  * autogen.sh: Enable verbose wget.
  * configure.ac: Syntax updates for Autoconf 2.71
  * autogen.sh: Re-implement based on autoreconf. Failure to update
    config.guess/config.sub does not return error (fixes issue #672)
  * CMake: fix CMake 4.0 warning when minimum required version is &lt; 3.10.
  * CMake: Add build option tiff-static (fixes issue #709)
  Library changes:
  * Add TIFFOpenOptionsSetWarnAboutUnknownTags() for explicit control
    about emitting warnings for unknown tags. No longer emit warnings
    about unknown tags by default
  * tif_predict.c: speed-up decompression in some cases.
  Bug fixes:
  * tif_fax3: For fax group 3 data if no EOL is detected, reading is
    retried without synchronisation for EOLs. (fixes issue #54)
  * Updating TIFFMergeFieldInfo() with read_count=write_count=0 for
    FIELD_IGNORE. Updating TIFFMergeFieldInfo() with read_count=write_count=0 for
    FIELD_IGNORE. Improving handling when field_name = NULL. (fixes issue #532)
  * tiff.h: add COMPRESSION_JXL_DNG_1_7=52546 as used for JPEGXL compression in
    the DNG 1.7 specification
  * TIFFWriteDirectorySec: Increment string length for ASCII tags for codec tags
    defined with FIELD_xxx bits, as it is done for FIELD_CUSTOM tags. (fixes issue #648)
  * Do not error out on a tag whose tag count value is zero, just issue a warning.
    Fix parsing a private tag 0x80a6 (fixes issue #647)
  * TIFFDefaultTransferFunction(): give up beyond td_bitspersample = 24
    Fixes https://github.com/OSGeo/gdal/issues/10875)
  * tif_getimage.c: Remove unnecessary calls to TIFFRGBAImageOK() (fixes issue #175)
  * Fix writing a Predictor=3 file with non-native endianness
  * _TIFFVSetField(): fix potential use of unallocated memory (out-of-bounds
  * read / nullptr dereference) in case of out-of-memory situation when dealing with
    custom tags (fixes issue #663)
  * tif_fax3.c: Error out for CCITT fax encoding if SamplesPerPixel is not equal 1 and
    PlanarConfiguration = Contiguous (fixes issue #26)
  * tif_fax3.c: error out after a number of times end-of-line or unexpected bad code
    words have been reached. (fixes issue #670)
  * Fix memory leak in TIFFSetupStrips() (fixes issue #665)
  * tif_zip.c: Provide zlib allocation functions. Otherwise for zlib built with
  - DZ_SOLO inflating will fail.
  * Fix memory leak in _TIFFSetDefaultCompressionState. (fixes issue #676)
  * tif_predict.c: Don’t overwrite input buffer of TIFFWriteScanline() if "prediction"
    is enabled. Use extra working buffer in PredictorEncodeRow(). (fixes issue #5)
  * tif_getimage.c: update some integer overflow checks (fixes issue #79)
  * tif_getimage.c: Fix buffer underflow crash for less raster rows at
    TIFFReadRGBAImageOriented() (fixes issue #704, bsc#1250413, CVE-2025-9900)
  * TIFFReadRGBAImage(): several fixes to avoid buffer overflows.
  * Correct passing arguments to TIFFCvtIEEEFloatToNative() and TIFFCvtIEEEDoubleToNative()
    if HAVE_IEEEFP is not defined. (fixes issue #699)
  * LZWDecode(): avoid nullptr dereference when trying to read again after EOI marker
    has been found with remaining output bytes (fixes issue #698)
  * TIFFSetSubDirectory(): check _TIFFCheckDirNumberAndOffset() return.
  * TIFFUnlinkDirectory() and TIFFWriteDirectorySec(): clear tif_rawcp when clearing
    tif_rawdata (fixes issue #711)
  * JPEGEncodeRaw(): error out if a previous scanline failed to be written, to avoid
    out-of-bounds access (fixes issue #714)
  * tif_jpeg: Fix bug in JPEGDecodeRaw() if JPEG_LIB_MK1_OR_12BIT is defined for 8/12bit
    dual mode, introduced in libjpeg-turbo 2.2, which was actually released as 3.0.
    Fixes issue #717
  * add assert for TIFFReadCustomDirectory infoarray check.
  * ppm2tiff: Fix bug in pack_words trailing bytes, where last two bytes of each line
    were written wrongly. (fixes issue #467)
  * fax2ps: fix regression of commit 28c38d648b64a66c3218778c4745225fe3e3a06d where
    TIFFTAG_FAXFILLFUNC is being used rather than an output buffer (fixes issue #649)
  * tiff2pdf: Check TIFFTAG_TILELENGTH and TIFFTAGTILEWIDTH (fixes issue #650)
  * tiff2pdf: check h_samp and v_samp for range 1 to 4 to avoid division by zero.
    Fixes issue #654
  * tiff2pdf: avoid null pointer dereference. (fixes issue #741)
  * Improve non-secure integer overflow check (comparison of division result with
    multiplicant) at compiler optimisation in tiffcp, rgb2ycbcr and tiff2rgba.
    Fixes issue #546
  * tiff2rgba: fix some "a partial expression can generate an overflow before it is
    assigned to a broader type" warnings. (fixes issue #682)
  * tiffdither/tiffmedian: Don't skip the first line of the input image. (fixes issue #703)
  * tiffdither: avoid out-of-bounds read identified in issue #733
  * tiffmedian: error out if TIFFReadScanline() fails (fixes issue #707)
  * tiffmedian: close input file. (fixes issue #735)
  * thumbail: avoid potential out of bounds access (fixes issue #715)
  * tiffcrop: close open TIFF files and release allocated buffers before exiting in case
    of error to avoid memory leaks. (fixes issue #716)
  * tiffcrop: fix double-free and memory leak exposed by issue #721
  * tiffcrop: avoid buffer overflow. (fixes issue #740)
  * tiffcrop: avoid nullptr dereference. (fixes issue #734)
  * tiffdump: Fix coverity scan issue CID 1373365: Passing tainted expression *datamem
    to PrintData, which uses it as a divisor or modulus.
  * tiff2ps: check return of TIFFGetFiled() for TIFFTAG_STRIPBYTECOUNTS and
    TIFFTAG_TILEBYTECOUNTS to avoid NULL pointer dereference. (fixes issue #718)
  * tiffcmp: fix memory leak when second file cannot be opened. (fixes issue #718 and issue #729)
  * tiffcp: fix setting compression level for lossless codecs. (fixes issue #730)
  * raw2tiff: close input file before exit (fixes issue #742)
  Tools changes:
  * tiffinfo: add a -W switch to warn about unknown tags.
  * tiffdither: process all pages in input TIFF file.
  Documentation:
  * TIFFRGBAImage.rst note added for incorrect saving of images with TIFF orientation
    from 5 (LeftTop) to 8 (LeftBottom) in the raster.
  * TIFFRGBAImage.rst note added about un-associated alpha handling (fixes issue #67)
  * Update "Defining New TIFF Tags" description. (fixes issue #642, bsc#1248278, CVE-2025-8851)
  * Fix return type of TIFFReadEncodedTile()
  * Update the documentation to reflect deprecated typedefs.
  * TIFFWriteDirectory.rst: Clarify TIFFSetWriteOffset() only sets offset for image
    data and not for IFD data.
  * Update documentation on re-entrancy and thread safety.
  * Remove dead links to no more existing Awaresystems web-site.
  * Updating BigTIFF specification and some miscelaneous editions.
  * Replace some last links and remove last todos.
  * Added hints for correct allocation of TIFFYCbCrtoRGB structure and its
    associated buffers. (fixes issue #681)
  * Added chapter to "Using the TIFF Library" with links to handling multi-page TIFF
    and custom directories. (fixes issue #43)
  * update TIFFOpen.rst with the return values of mapproc and unmapproc. (fixes issue #12)
- Drop upstreamed patches:
  * tiff-4.7.0-test_directory.patch
  * tiff-CVE-2025-8176.patch
  * tiff-CVE-2025-8177.patch
  * tiff-4.7.0-bsc1243503.patch
  * tiff-CVE-2025-8534.patch
  * tiff-CVE-2025-9165.patch
  * tiff-CVE-2024-13978.patch
  * tiff-CVE-2025-8961.patch</changelog>
  <changelog author="mvetter@suse.com" date="1777291200">- * CVE-2026-4775: Signed integer overflow in putcontig8bitYCbCr44tile (bsc#1260411)
    Add tiff-CVE-2026-4775.patch</changelog>
</package>
<package pkgid="86dd84f1bc787950ed1cd778a5af1ed7731d5f8ce562ce204ef6b1a4cd03a94a" name="libtiff6" arch="x86_64">
  <version epoch="0" ver="4.7.0" rel="150600.3.13.1"/>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668427200">- security update:
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1672833600">- Update to 4.5.0:
  * tdir_t type updated to uint32_t. This type is now used for the return
    value of TIFFCurrentDirectory() and TIFFNumberOfDirectories(), and as
    the argument of TIFFSetDirectory() and TIFFUnlinkDirectory()
  * Addition of an open option concept with the new functions TIFFOpenExt(),
    TIFFOpenWExt(), TIFFFdOpenExt(), TIFFClientOpenExt(), TIFFOpenOptionsAlloc(),
    TIFFOpenOptionsFree()
  * Leveraging above mentioned open option concept, addition of a new capability
    to limit the size of a single dynamic memory allocation done by the library
    with TIFFOpenOptionsSetMaxSingleMemAlloc()
  * Related to IFD-Loop detection refactoring, the number of IFDs that libtiff
    can browse through has been extended from 65535 to 1048576. This value is
    a build-time setting that can be configured with CMake's TIFF_MAX_DIR_COUNT
    variable or autoconf's --with-max-dir-count option.
  * Whole code base reformatting of .c/.h files using new .clang-format format
  * Documentation changed from static HTML and man pages to
    Restructured Text (rst). HTML and man pages are now build artifacts.
  * SONAME version bumped to 6 due to changes in symbol versioning.
  * autoconf/cmake: detect (not yet released) libjpeg-turbo 2.2 to take into
    its capability of handling both 8-bit JPEG and 12-bit JPEG in a single build.
  * autoconf/cmake: detect sphinx-build to build HTML and man pages
  * CMakeLists.txt: fix warning with -Wdev
  * CMake: correctly set default value of 'lzma' option when liblzma is detected
  * CMake: Moved linking of CMath::CMath into CMath_LIBRARY check.
  * Fix CMake build to be compatible with FetchContent.
  * cmake: Correct duplicate definition of _CRT_SECURE_NO_WARNINGS
  * cmake: Fixes for Visual Studio 2022.
  * Adds Requires.private generation so that pkg-config can correctly find
    the dependencies of libtiff.
  * Fix dependency on libm on Android
  * Fix build in tif_lzw.c
  * CMake: Add options for disabling tools, tests, contrib and docs.
  * tiffcrop: Fix memory allocation to require a larger buffer (CVE-2022-3570, CVE-2022-3598)
    [bsc#1205422]
  * tiffcrop: disable incompatibility of -Z, -X, -Y, -z options with any PAGE_MODE_x option
    (CVE-2022-3627, CVE-2022-3597, CVE-2022-3626)
  * tiffcrop: fix floating-point exception (CVE-2022-2056, CVE-2022-2057, CVE-2022-2058)
  * _TIFFCheckFieldIsValidForCodec(): return FALSE when passed a codec-specific tag
    and the codec is not configured (CVE-2022-34526)
  * Revised handling of TIFFTAG_INKNAMES and related TIFFTAG_NUMBEROFINKS value (CVE-2022-3599)
  * tiffcrop: -S option mutually exclusive (CVE-2022-2519, CVE-2022-2520, CVE-2022-2521)
- Drop tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
- Drop tiff-CVE-2022-34526.patch
- Drop tiff-CVE-2022-3599.patch
- Drop tiff-CVE-2022-3598.patch
- Drop tiff-CVE-2022-3970.patch
- Drop tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
- Drop tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1677067200">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1687262400">- Update to version 4.5.1:
  * Definition of tags reformatted (clang-format off) for better readability of tag comments in tiff.h and tif_dirinfo.c
  * Do not install libtiff-4.pc when tiff-install is reset.
  * Add versioninfo resource files for DLL and tools compiled with Windows MSVC and MINGW.
  * Disable clang-formatting for tif_config.h.cmake.in and tiffconf.h.cmake.in because sensitive for CMake scripts.
  * CMake: make WebP component name compatible with upstream ConfigWebP.cmake
  * CMake: make Findliblzma with upstream CMake config file
  * CMake: FindDeflate.cmake: fix several errors (issue #526).
  * CMake: FindLERC.cmake: version string return added.
  * CMake: export TiffConfig.cmake and TiffConfigVersion.cmake files
  * CMake: fix export of INTERFACE_INCLUDE_DIRECTORIES
  * Hardcode HOST_FILLORDER to FILLORDER_LSB2MSB and make 'H' flag of TIFFOpen() to warn and an alias of FILLORDER_MSB2LSB. tif_lerc.c: use WORDS_BIGENDIAN instead of HOST_BIGENDIAN.
  * Optimize relative seeking within TIFFSetDirectory() by using the learned list of IFD offsets.
  * Improve internal IFD offset and directory number map handling.
  * Behavior of TIFFOpen() mode "r+" in the Windows implementation adjusted to that of Linux.
  * TIFFDirectory td_fieldsset type changed from unsigned long, which can be 32 or 64 bits, to uint32_t (fixes issue #484).
  * tif_ojpeg.c: checking for division by zero (fixes issue #554).
  * LZWDecode(): avoid crash when trying to read again from a strip whith a missing end-of-information marker (fixes issue #548).
  * Fixed runtime error: applying zero offset to null pointer in countInkNamesString().
  * Fixing crash in TIFFUnlinkDirectory() when called with directory number zero ("TIFFUnlinkDirectory(0)") as well as fixing incorrect behaviour when unlinking the first directory.
  * tif_luv: check and correct for NaN data in uv_encode() (issue #530).
  * TIFFClose() avoid NULL pointer dereferencing (issue #515).
  * tif_hash_set.c: include tif_hash_set.h after tif_config.h to let a chance for GDAL symbol renaming trick.
  * Fax3: fix failure to decode some fax3 number_of_images and add test for Fax3 decoding issues (issue #513).
  * TIFFSetDirectory() and TIFFWriteDirectorySec() avoid harmless unsigned-integer-overflow (due to gdal oss-fuzz #54311 and #54343).
  * tif_ojpeg.c: fix issue #554 by checking for division by zero in OJPEGWriteHeaderInfo().
  * LZWDecode(): avoid crash when trying to read again from a strip whith a missing end-of-information marker (issue #548).
- Drop no longer needed patches:
  * tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * tiff-CVE-2022-48281.patch
  * tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1694779200">- Update to version 4.6.0:
  * API/ABI breaks: none
  * WebP decoder: validate WebP blob width, height, band count against
    TIFF parameters to avoid use of uninitialized variable, or decoding
    corrupted content without explicit error (fixes issue #581, issue #582).
  * WebP codec: turn exact mode when creating lossless files to avoid
    altering R,G,B values in areas where alpha=0
  * Fix TransferFunction writing of only two transfer functions.
  * TIFFReadDirectoryCheckOrder: avoid integer overflow. When it occurs,
    it should be harmless in practice though
  * tiffcp: remove -i option (ignore errors)
  * This version removes a big number of utilities that have suffered from
    lack of maintenance over the years and were the source of various
    reported security issues:
    + fax2ps
    + fax2tiff
    + pal2rgb
    + ppm2tiff
    + raw2tiff
    + rgb2ycbcr
    + thumbnail
    + tiff2bw
    + tiff2rgba
    + tiffcmp
    + tiffcrop
    + tiffdither
    + tiffgt
    + tiffmedian
    + tiff2ps
    + tiff2pdf
- Remove no longer needed tiff-4.0.3-compress-warning.patch.
- CVE-2023-25435 [bsc#1212607] tiffcrop is removed</changelog>
  <changelog author="mvetter@suse.com" date="1706270400">- security update:
  * CVE-2023-52356 [bsc#1219213]
    Fix segfault in TIFFReadRGBATileExt()
    + tiff-CVE-2023-52356.patch</changelog>
  <changelog author="mvetter@suse.com" date="1724068800">- security update:
  * CVE-2024-7006 [bsc#1228924]
    Fix pointer deref in tif_dirinfo.c
    + tiff-CVE-2024-7006.patch</changelog>
  <changelog author="mvetter@suse.com" date="1726660800">- Update to 4.7.0:
  * This version restores in the default build the availability of
    the tools that had been dropped in v4.6.0
    See https://libtiff.gitlab.io/libtiff/rfcs/rfc2_restoring_needed_tools.html#rfc2-restoring-needed-tools
  * Software configuration changes:
    + autoconf build: configure.ac: avoid -Werror passed to CFLAGS to interfere with feature detection
    + autoconf build: fix error when running make clean (fixes issue #630)
    + autoconf build: back off the minimum required automake version to 1.11
    + autoconf.ac: fix detection of windows.h for mingw (fixes issue #605)
    + libtiff-4.pc: Fix Requires.private missing Lerc. It provides a .pc file
    starting from version 4 (in autoconf builds, we assume that liblerc is at least version 4)
    + CMake: Fix TIFF_INCLUDE_DIRS
    + CMake: MinGW compilers don't need a .def file for shared library
    + CMake: move libdeflate and Lerc to Requires.private
    + CMake: enable resource compilation on all Windows.
  * Library changes:
    + Add TIFFOpenOptionsSetMaxCumulatedMemAlloc(). This function complements
    TIFFOpenOptionsSetMaxSingleMemAlloc() to define the maximum cumulated memory
    allocations in byte, for a given TIFF handle, that libtiff internal memory
    allocation functions are allowed.
    + TIFFWriteDirectory(): Avoid overwriting following data if an IFD is enlarged.
    + TIFFXYZToRGB: avoid integer overflow (fixes issue #644)
    + uv_decode() and uv_encode(): avoid potential out-of-bounds array index (fixes issue #645)
    + Fix cases where tif_curdir is set incorrectly. Fix cases where the current directory number (tif_curdir)
    is set inconsistently or incorrectly, depending on the previous history.
    + TIFFRead[Scanline/EncodedStrip/EncodeTile]: 0-initialize output buffer if setupdecode fails ;
    most codecs: zero-initialize (not-yet-written parts of) output buffer if failure (fixes issue #375)
    + OJPEG: reset subsampling_convert_state=0 in OJPEGPreDecode (fixes issue #183)
    + ThunderRLE: fix failure when decoding last run. Bug seen with GhostPDL
    + LERC codec: deal with issues with multi-band PlanarConfig=Contig and NaN values
    + tif_fax3.c: error out after a number of times end-of-file has been reached (fixes issue #583)
    + LZW: avoid warning about misaligned address with UBSAN (fixes issue #616)
    + TIFFReadRGBAStrip/TIFFReadRGBATile: add more validation of col/row (fixes issue #622, CVE-2023-52356)
    + tif_dirread.c: only issue TIFFGetFileSize() for large enough RAM requests
    + Avoid FPEs (division by zero) in tif_getimage.c.
    + Avoiding FPE (division by zero) for TIFFhowmany_32() and TIFFhowmany_64() macros by checking for
    denominator not zero before macros are executed. (fixes issue #628)
    + Add non-zero check before division in TIFFComputeStrip()
    + Fix wrong return of TIFFIsBigTIFF() in case byte-swapping is active
    + Setting the TIFFFieldInfo field set_field_type should consider field_writecount not field_readcount
    + Avoid memory leaks when using TIFFCreateDirectory() by releasing the allocated memory in the tif-structure.
    + For non-terminated ASCII arrays, the buffer is first enlarged before a NULL is set at the end to
    avoid deleting the last character. (fixes issue #579)
    + Check return value of _TIFFCreateAnonField(). (fixes issue #624, CVE-2024-7006)
    + Prevent some out-of-memory attacks (https://gitlab.com/libtiff/libtiff/-/issues/614#note_1602683857)
    + Ensure absolute seeking is forced independent of TIFFReadDirectory success. (fixes issue #618)
    + tif_dirinfo.c: re-enable TIFFTAG_EP_CFAREPEATPATTERNDIM and TIFFTAG_EP_CFAPATTERN tags (fixes issue #608)
    + Fix warnings with GCC 14
    + tif_dir.c: Log source file, line number, and input tif for directory count error (fixes issue #627)
    + Last usage of get_field_type of TIFFField structure at TIFFWriteDirectorySec() changed to using set_field_type.
    + tif_jpeg.c/tif_ojpeg.c: remove likely ifdef tricks related to old compilers or unusual setups
    + Remove _TIFFUInt64ToFloat() and _TIFFUInt64ToDouble()
    + Remove support for _MSC_VER &lt; 1500.
    + Use #ifdef _WIN32 to test for Windows, and tiffio.h: remove definition of __WIN32__
  * Documentation:
    + Amend manpages for changes in current directory index behaviour
    + Note on using TIFFFlush() before TIFFClose() to check that the data has been successfully written to the file. (fixes issue #506)
    + Update TIFF documentation about TIFFOpenOptions.rst and TIFFOpenOptionsSetMaxSingleMemAlloc() usage and some other small fixes (relates to CVE-2024-7006)
  * Re-added tools:
    + fax2ps
    + fax2tiff
    + pal2rgb
    + ppm2tiff
    + raw2tiff
    + rgb2ycbcr (not installed)
    + thumbnail (not installed)
    + tiff2bw
    + tiff2rgba
    + tiffcmp
    + tiffcrop
    + tiffdither
    + tiffgt
    + tiffmedian
    + tiff2ps
    + tiff2pdf
  * New/improved functionality:
    + tiff2rgba: Add background gradient option for alpha compositing
    + tiffcp: -i flag restored
  * Bug fixes for tools:
    + tiffcrop: address Coverity scan issues 1605444, 1605445, and 16054
    + tiffcrop: Apply "Fix heap-buffer-overflow in function extractImageSection"
    + tiffcrop: fix buffer overflows, use after free (fixes issue #542, issue #550, issue #552)
    + tiff2pdf: address Coverity scan issues
    + tiff2pdf: fix inconsistent PLANARCONFIG value for the input and output TIFF
    + tiff2pdf: fix issue with JPEG restart-interval marker when converting from JPEG-compressed files (fixes issue #539)
    + tiff2pdf: red and blue were being swapped for RGBA decoding (fixes issue #253)
    + tiff2pdf: fixes issue #596
    + thumbnail: address Coverity scan issues
    + tiffcp: Add check for limitMalloc return to fix Coverity 1603334
    + tiffcp: preserve TIFFTAG_REFERENCEBLACKWHITE when doing YCbCr JPEG -&gt; YCbCr JPEG
    + tiffcp: replace PHOTOMETRIC_YCBCR with PHOTOMETRIC_RGB when outputing to compression != JPEG (refs issue #571)
    + tiffcp: do not copy tags YCBCRCOEFFICIENTS, YCBCRSUBSAMPLING, YCBCRPOSITIONING, REFERENCEBLACKWHITE. Only set YCBCRSUBSAMPLING when generating YCbCr JPEG
    + tiffcp: Check also codec of input image, not only from output image (fixes issue #606)
    + Add some basic sanity checks for tiffcp and tiffcrop RGB-&gt;YCbCr JPEG conversions.
    + fax2ps and fax2tiff: memory leak fixes (fixes issue #476)
    + tiffmedian: memory leak fixes (fixes issue #599)
    + fax2tiff: fix EOFB interpretation (fixes issue #191)
    + fax2tiff: fix issue with unreasonable width input (fixes issue #249)
    + tiffcp and tiffcrop: fixes issue #228
    + tiff2rgba: fixes issue #469
    + tiffdither: fixes issue #473
    + tiffdump: fix wrong printf formatter in error message (Coverity 1472932)
    + tiffset: avoid false positive Coverity Scan warning on 64-bit builds (Coverity 1518997)
    + tifcp/tiffset: use correct format specifiers
  * Changes to contributed and unsupported tools
    + contrib/addtiffo: validate return of TIFFWriteEncodedXXXX() calls (Coverity 1024680)
- Remove patches contained in upstream:
  * tiff-CVE-2023-52356.patch
  * tiff-CVE-2024-7006.patch
- Tools are not built for now due to test failure: `FAIL: tiffcp-32bpp-None-jpeg.sh`</changelog>
  <changelog author="mrueckert@suse.de" date="1731153600">- switch build to cmake for the webp build - we need the cmake
  finder code</changelog>
  <changelog author="mrueckert@suse.de" date="1731326400">- In the previous change to enable the cmake based build
  we also needed python3-Sphinx to build the man pages, as unlike
  the autotools based build, the cmake based build does not fall
  back to the pre-built man pages.
  This causes build cycle. Split out the documentation building to
  break the cycle. The Tumbleweed release managers preferred this
  solution over a mini package.</changelog>
  <changelog author="mrueckert@suse.de" date="1731412800">- make doc packages noarch. no need to have those per arch
- ensure that the src rpms are named per build flavor:
  You might now ask why. Good question:
  1. the spec file during the build get patched. `@BUILD_FLAVOR@`
    gets replaced with the value. which means the src rpm between
    build flavor builds is not identical. Also the last built
    src.rpm will be published. with different content and runtime
    requires (aka our BuildRequires).
  2. for historical reasons the internal dependency tracking goes
    via the src.rpm package. So without having differently named
    src.rpms the build cycle we were trying to solve was not
    actually solved. So we append a suffix to the Name attribute
    in the preamble now.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1736769600">- Fix versioning of tiff-docs under Recommends</changelog>
  <changelog author="lubos.kocman@suse.com" date="1738756800">- Update test/test_directory.c not to fail on big-endian machines.
  * Add tiff-4.7.0-test_directory.patch
    Fix memory leaks (fixes issue #652)
  * Resolves bsc#1236834
    fix build fail on s390x</changelog>
  <changelog author="lubos.kocman@suse.com" date="1740398400">- Use python3-Sphinx instead of  %{primary_python}-Sphinx
  based on recommendation from python maintainers.
  * Fixes build issue of man flavor on 15.6</changelog>
  <changelog author="sfalken@opensuse.org" date="1742644800">- Add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to fix FTBFS with cmake4
- Add %check section
- Remove Group: declarations, no longer used</changelog>
  <changelog author="mvetter@suse.com" date="1754308800">- security update:
  * CVE-2025-8176 [bsc#1247108]
    Fix heap use-after-free in tools/tiffmedian.c
    + tiff-CVE-2025-8176.patch
  * CVE-2025-8177 [bsc#1247106]
    Fix possible buffer overflow in tools/thumbnail.c:setrow()
    + tiff-CVE-2025-8177.patch</changelog>
  <changelog author="mvetter@suse.com" date="1754308801">- bsc#1243503:
  Fix TIFFMergeFieldInfo() read_count=write_count=0
  + tiff-4.7.0-bsc1243503.patch</changelog>
</package>
<package pkgid="d77951e2e67e5eee472658187e5825f651605e52145b63fc558e22be41d6b459" name="libtiff6" arch="x86_64">
  <version epoch="0" ver="4.7.0" rel="150600.3.18.1"/>
  <changelog author="mvetter@suse.com" date="1668427200">- security update:
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1672833600">- Update to 4.5.0:
  * tdir_t type updated to uint32_t. This type is now used for the return
    value of TIFFCurrentDirectory() and TIFFNumberOfDirectories(), and as
    the argument of TIFFSetDirectory() and TIFFUnlinkDirectory()
  * Addition of an open option concept with the new functions TIFFOpenExt(),
    TIFFOpenWExt(), TIFFFdOpenExt(), TIFFClientOpenExt(), TIFFOpenOptionsAlloc(),
    TIFFOpenOptionsFree()
  * Leveraging above mentioned open option concept, addition of a new capability
    to limit the size of a single dynamic memory allocation done by the library
    with TIFFOpenOptionsSetMaxSingleMemAlloc()
  * Related to IFD-Loop detection refactoring, the number of IFDs that libtiff
    can browse through has been extended from 65535 to 1048576. This value is
    a build-time setting that can be configured with CMake's TIFF_MAX_DIR_COUNT
    variable or autoconf's --with-max-dir-count option.
  * Whole code base reformatting of .c/.h files using new .clang-format format
  * Documentation changed from static HTML and man pages to
    Restructured Text (rst). HTML and man pages are now build artifacts.
  * SONAME version bumped to 6 due to changes in symbol versioning.
  * autoconf/cmake: detect (not yet released) libjpeg-turbo 2.2 to take into
    its capability of handling both 8-bit JPEG and 12-bit JPEG in a single build.
  * autoconf/cmake: detect sphinx-build to build HTML and man pages
  * CMakeLists.txt: fix warning with -Wdev
  * CMake: correctly set default value of 'lzma' option when liblzma is detected
  * CMake: Moved linking of CMath::CMath into CMath_LIBRARY check.
  * Fix CMake build to be compatible with FetchContent.
  * cmake: Correct duplicate definition of _CRT_SECURE_NO_WARNINGS
  * cmake: Fixes for Visual Studio 2022.
  * Adds Requires.private generation so that pkg-config can correctly find
    the dependencies of libtiff.
  * Fix dependency on libm on Android
  * Fix build in tif_lzw.c
  * CMake: Add options for disabling tools, tests, contrib and docs.
  * tiffcrop: Fix memory allocation to require a larger buffer (CVE-2022-3570, CVE-2022-3598)
    [bsc#1205422]
  * tiffcrop: disable incompatibility of -Z, -X, -Y, -z options with any PAGE_MODE_x option
    (CVE-2022-3627, CVE-2022-3597, CVE-2022-3626)
  * tiffcrop: fix floating-point exception (CVE-2022-2056, CVE-2022-2057, CVE-2022-2058)
  * _TIFFCheckFieldIsValidForCodec(): return FALSE when passed a codec-specific tag
    and the codec is not configured (CVE-2022-34526)
  * Revised handling of TIFFTAG_INKNAMES and related TIFFTAG_NUMBEROFINKS value (CVE-2022-3599)
  * tiffcrop: -S option mutually exclusive (CVE-2022-2519, CVE-2022-2520, CVE-2022-2521)
- Drop tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
- Drop tiff-CVE-2022-34526.patch
- Drop tiff-CVE-2022-3599.patch
- Drop tiff-CVE-2022-3598.patch
- Drop tiff-CVE-2022-3970.patch
- Drop tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
- Drop tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1677067200">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1687262400">- Update to version 4.5.1:
  * Definition of tags reformatted (clang-format off) for better readability of tag comments in tiff.h and tif_dirinfo.c
  * Do not install libtiff-4.pc when tiff-install is reset.
  * Add versioninfo resource files for DLL and tools compiled with Windows MSVC and MINGW.
  * Disable clang-formatting for tif_config.h.cmake.in and tiffconf.h.cmake.in because sensitive for CMake scripts.
  * CMake: make WebP component name compatible with upstream ConfigWebP.cmake
  * CMake: make Findliblzma with upstream CMake config file
  * CMake: FindDeflate.cmake: fix several errors (issue #526).
  * CMake: FindLERC.cmake: version string return added.
  * CMake: export TiffConfig.cmake and TiffConfigVersion.cmake files
  * CMake: fix export of INTERFACE_INCLUDE_DIRECTORIES
  * Hardcode HOST_FILLORDER to FILLORDER_LSB2MSB and make 'H' flag of TIFFOpen() to warn and an alias of FILLORDER_MSB2LSB. tif_lerc.c: use WORDS_BIGENDIAN instead of HOST_BIGENDIAN.
  * Optimize relative seeking within TIFFSetDirectory() by using the learned list of IFD offsets.
  * Improve internal IFD offset and directory number map handling.
  * Behavior of TIFFOpen() mode "r+" in the Windows implementation adjusted to that of Linux.
  * TIFFDirectory td_fieldsset type changed from unsigned long, which can be 32 or 64 bits, to uint32_t (fixes issue #484).
  * tif_ojpeg.c: checking for division by zero (fixes issue #554).
  * LZWDecode(): avoid crash when trying to read again from a strip whith a missing end-of-information marker (fixes issue #548).
  * Fixed runtime error: applying zero offset to null pointer in countInkNamesString().
  * Fixing crash in TIFFUnlinkDirectory() when called with directory number zero ("TIFFUnlinkDirectory(0)") as well as fixing incorrect behaviour when unlinking the first directory.
  * tif_luv: check and correct for NaN data in uv_encode() (issue #530).
  * TIFFClose() avoid NULL pointer dereferencing (issue #515).
  * tif_hash_set.c: include tif_hash_set.h after tif_config.h to let a chance for GDAL symbol renaming trick.
  * Fax3: fix failure to decode some fax3 number_of_images and add test for Fax3 decoding issues (issue #513).
  * TIFFSetDirectory() and TIFFWriteDirectorySec() avoid harmless unsigned-integer-overflow (due to gdal oss-fuzz #54311 and #54343).
  * tif_ojpeg.c: fix issue #554 by checking for division by zero in OJPEGWriteHeaderInfo().
  * LZWDecode(): avoid crash when trying to read again from a strip whith a missing end-of-information marker (issue #548).
- Drop no longer needed patches:
  * tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * tiff-CVE-2022-48281.patch
  * tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1694779200">- Update to version 4.6.0:
  * API/ABI breaks: none
  * WebP decoder: validate WebP blob width, height, band count against
    TIFF parameters to avoid use of uninitialized variable, or decoding
    corrupted content without explicit error (fixes issue #581, issue #582).
  * WebP codec: turn exact mode when creating lossless files to avoid
    altering R,G,B values in areas where alpha=0
  * Fix TransferFunction writing of only two transfer functions.
  * TIFFReadDirectoryCheckOrder: avoid integer overflow. When it occurs,
    it should be harmless in practice though
  * tiffcp: remove -i option (ignore errors)
  * This version removes a big number of utilities that have suffered from
    lack of maintenance over the years and were the source of various
    reported security issues:
    + fax2ps
    + fax2tiff
    + pal2rgb
    + ppm2tiff
    + raw2tiff
    + rgb2ycbcr
    + thumbnail
    + tiff2bw
    + tiff2rgba
    + tiffcmp
    + tiffcrop
    + tiffdither
    + tiffgt
    + tiffmedian
    + tiff2ps
    + tiff2pdf
- Remove no longer needed tiff-4.0.3-compress-warning.patch.
- CVE-2023-25435 [bsc#1212607] tiffcrop is removed</changelog>
  <changelog author="mvetter@suse.com" date="1706270400">- security update:
  * CVE-2023-52356 [bsc#1219213]
    Fix segfault in TIFFReadRGBATileExt()
    + tiff-CVE-2023-52356.patch</changelog>
  <changelog author="mvetter@suse.com" date="1724068800">- security update:
  * CVE-2024-7006 [bsc#1228924]
    Fix pointer deref in tif_dirinfo.c
    + tiff-CVE-2024-7006.patch</changelog>
  <changelog author="mvetter@suse.com" date="1726660800">- Update to 4.7.0:
  * This version restores in the default build the availability of
    the tools that had been dropped in v4.6.0
    See https://libtiff.gitlab.io/libtiff/rfcs/rfc2_restoring_needed_tools.html#rfc2-restoring-needed-tools
  * Software configuration changes:
    + autoconf build: configure.ac: avoid -Werror passed to CFLAGS to interfere with feature detection
    + autoconf build: fix error when running make clean (fixes issue #630)
    + autoconf build: back off the minimum required automake version to 1.11
    + autoconf.ac: fix detection of windows.h for mingw (fixes issue #605)
    + libtiff-4.pc: Fix Requires.private missing Lerc. It provides a .pc file
    starting from version 4 (in autoconf builds, we assume that liblerc is at least version 4)
    + CMake: Fix TIFF_INCLUDE_DIRS
    + CMake: MinGW compilers don't need a .def file for shared library
    + CMake: move libdeflate and Lerc to Requires.private
    + CMake: enable resource compilation on all Windows.
  * Library changes:
    + Add TIFFOpenOptionsSetMaxCumulatedMemAlloc(). This function complements
    TIFFOpenOptionsSetMaxSingleMemAlloc() to define the maximum cumulated memory
    allocations in byte, for a given TIFF handle, that libtiff internal memory
    allocation functions are allowed.
    + TIFFWriteDirectory(): Avoid overwriting following data if an IFD is enlarged.
    + TIFFXYZToRGB: avoid integer overflow (fixes issue #644)
    + uv_decode() and uv_encode(): avoid potential out-of-bounds array index (fixes issue #645)
    + Fix cases where tif_curdir is set incorrectly. Fix cases where the current directory number (tif_curdir)
    is set inconsistently or incorrectly, depending on the previous history.
    + TIFFRead[Scanline/EncodedStrip/EncodeTile]: 0-initialize output buffer if setupdecode fails ;
    most codecs: zero-initialize (not-yet-written parts of) output buffer if failure (fixes issue #375)
    + OJPEG: reset subsampling_convert_state=0 in OJPEGPreDecode (fixes issue #183)
    + ThunderRLE: fix failure when decoding last run. Bug seen with GhostPDL
    + LERC codec: deal with issues with multi-band PlanarConfig=Contig and NaN values
    + tif_fax3.c: error out after a number of times end-of-file has been reached (fixes issue #583)
    + LZW: avoid warning about misaligned address with UBSAN (fixes issue #616)
    + TIFFReadRGBAStrip/TIFFReadRGBATile: add more validation of col/row (fixes issue #622, CVE-2023-52356)
    + tif_dirread.c: only issue TIFFGetFileSize() for large enough RAM requests
    + Avoid FPEs (division by zero) in tif_getimage.c.
    + Avoiding FPE (division by zero) for TIFFhowmany_32() and TIFFhowmany_64() macros by checking for
    denominator not zero before macros are executed. (fixes issue #628)
    + Add non-zero check before division in TIFFComputeStrip()
    + Fix wrong return of TIFFIsBigTIFF() in case byte-swapping is active
    + Setting the TIFFFieldInfo field set_field_type should consider field_writecount not field_readcount
    + Avoid memory leaks when using TIFFCreateDirectory() by releasing the allocated memory in the tif-structure.
    + For non-terminated ASCII arrays, the buffer is first enlarged before a NULL is set at the end to
    avoid deleting the last character. (fixes issue #579)
    + Check return value of _TIFFCreateAnonField(). (fixes issue #624, CVE-2024-7006)
    + Prevent some out-of-memory attacks (https://gitlab.com/libtiff/libtiff/-/issues/614#note_1602683857)
    + Ensure absolute seeking is forced independent of TIFFReadDirectory success. (fixes issue #618)
    + tif_dirinfo.c: re-enable TIFFTAG_EP_CFAREPEATPATTERNDIM and TIFFTAG_EP_CFAPATTERN tags (fixes issue #608)
    + Fix warnings with GCC 14
    + tif_dir.c: Log source file, line number, and input tif for directory count error (fixes issue #627)
    + Last usage of get_field_type of TIFFField structure at TIFFWriteDirectorySec() changed to using set_field_type.
    + tif_jpeg.c/tif_ojpeg.c: remove likely ifdef tricks related to old compilers or unusual setups
    + Remove _TIFFUInt64ToFloat() and _TIFFUInt64ToDouble()
    + Remove support for _MSC_VER &lt; 1500.
    + Use #ifdef _WIN32 to test for Windows, and tiffio.h: remove definition of __WIN32__
  * Documentation:
    + Amend manpages for changes in current directory index behaviour
    + Note on using TIFFFlush() before TIFFClose() to check that the data has been successfully written to the file. (fixes issue #506)
    + Update TIFF documentation about TIFFOpenOptions.rst and TIFFOpenOptionsSetMaxSingleMemAlloc() usage and some other small fixes (relates to CVE-2024-7006)
  * Re-added tools:
    + fax2ps
    + fax2tiff
    + pal2rgb
    + ppm2tiff
    + raw2tiff
    + rgb2ycbcr (not installed)
    + thumbnail (not installed)
    + tiff2bw
    + tiff2rgba
    + tiffcmp
    + tiffcrop
    + tiffdither
    + tiffgt
    + tiffmedian
    + tiff2ps
    + tiff2pdf
  * New/improved functionality:
    + tiff2rgba: Add background gradient option for alpha compositing
    + tiffcp: -i flag restored
  * Bug fixes for tools:
    + tiffcrop: address Coverity scan issues 1605444, 1605445, and 16054
    + tiffcrop: Apply "Fix heap-buffer-overflow in function extractImageSection"
    + tiffcrop: fix buffer overflows, use after free (fixes issue #542, issue #550, issue #552)
    + tiff2pdf: address Coverity scan issues
    + tiff2pdf: fix inconsistent PLANARCONFIG value for the input and output TIFF
    + tiff2pdf: fix issue with JPEG restart-interval marker when converting from JPEG-compressed files (fixes issue #539)
    + tiff2pdf: red and blue were being swapped for RGBA decoding (fixes issue #253)
    + tiff2pdf: fixes issue #596
    + thumbnail: address Coverity scan issues
    + tiffcp: Add check for limitMalloc return to fix Coverity 1603334
    + tiffcp: preserve TIFFTAG_REFERENCEBLACKWHITE when doing YCbCr JPEG -&gt; YCbCr JPEG
    + tiffcp: replace PHOTOMETRIC_YCBCR with PHOTOMETRIC_RGB when outputing to compression != JPEG (refs issue #571)
    + tiffcp: do not copy tags YCBCRCOEFFICIENTS, YCBCRSUBSAMPLING, YCBCRPOSITIONING, REFERENCEBLACKWHITE. Only set YCBCRSUBSAMPLING when generating YCbCr JPEG
    + tiffcp: Check also codec of input image, not only from output image (fixes issue #606)
    + Add some basic sanity checks for tiffcp and tiffcrop RGB-&gt;YCbCr JPEG conversions.
    + fax2ps and fax2tiff: memory leak fixes (fixes issue #476)
    + tiffmedian: memory leak fixes (fixes issue #599)
    + fax2tiff: fix EOFB interpretation (fixes issue #191)
    + fax2tiff: fix issue with unreasonable width input (fixes issue #249)
    + tiffcp and tiffcrop: fixes issue #228
    + tiff2rgba: fixes issue #469
    + tiffdither: fixes issue #473
    + tiffdump: fix wrong printf formatter in error message (Coverity 1472932)
    + tiffset: avoid false positive Coverity Scan warning on 64-bit builds (Coverity 1518997)
    + tifcp/tiffset: use correct format specifiers
  * Changes to contributed and unsupported tools
    + contrib/addtiffo: validate return of TIFFWriteEncodedXXXX() calls (Coverity 1024680)
- Remove patches contained in upstream:
  * tiff-CVE-2023-52356.patch
  * tiff-CVE-2024-7006.patch
- Tools are not built for now due to test failure: `FAIL: tiffcp-32bpp-None-jpeg.sh`</changelog>
  <changelog author="mrueckert@suse.de" date="1731153600">- switch build to cmake for the webp build - we need the cmake
  finder code</changelog>
  <changelog author="mrueckert@suse.de" date="1731326400">- In the previous change to enable the cmake based build
  we also needed python3-Sphinx to build the man pages, as unlike
  the autotools based build, the cmake based build does not fall
  back to the pre-built man pages.
  This causes build cycle. Split out the documentation building to
  break the cycle. The Tumbleweed release managers preferred this
  solution over a mini package.</changelog>
  <changelog author="mrueckert@suse.de" date="1731412800">- make doc packages noarch. no need to have those per arch
- ensure that the src rpms are named per build flavor:
  You might now ask why. Good question:
  1. the spec file during the build get patched. `@BUILD_FLAVOR@`
    gets replaced with the value. which means the src rpm between
    build flavor builds is not identical. Also the last built
    src.rpm will be published. with different content and runtime
    requires (aka our BuildRequires).
  2. for historical reasons the internal dependency tracking goes
    via the src.rpm package. So without having differently named
    src.rpms the build cycle we were trying to solve was not
    actually solved. So we append a suffix to the Name attribute
    in the preamble now.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1736769600">- Fix versioning of tiff-docs under Recommends</changelog>
  <changelog author="lubos.kocman@suse.com" date="1738756800">- Update test/test_directory.c not to fail on big-endian machines.
  * Add tiff-4.7.0-test_directory.patch
    Fix memory leaks (fixes issue #652)
  * Resolves bsc#1236834
    fix build fail on s390x</changelog>
  <changelog author="lubos.kocman@suse.com" date="1740398400">- Use python3-Sphinx instead of  %{primary_python}-Sphinx
  based on recommendation from python maintainers.
  * Fixes build issue of man flavor on 15.6</changelog>
  <changelog author="sfalken@opensuse.org" date="1742644800">- Add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to fix FTBFS with cmake4
- Add %check section
- Remove Group: declarations, no longer used</changelog>
  <changelog author="mvetter@suse.com" date="1754308800">- security update:
  * CVE-2025-8176 [bsc#1247108]
    Fix heap use-after-free in tools/tiffmedian.c
    + tiff-CVE-2025-8176.patch
  * CVE-2025-8177 [bsc#1247106]
    Fix possible buffer overflow in tools/thumbnail.c:setrow()
    + tiff-CVE-2025-8177.patch</changelog>
  <changelog author="mvetter@suse.com" date="1754308801">- bsc#1243503:
  Fix TIFFMergeFieldInfo() read_count=write_count=0
  + tiff-4.7.0-bsc1243503.patch</changelog>
  <changelog author="mvetter@suse.com" date="1755777600">- security update:
  * CVE-2025-8534 [bsc#1247582]
    Fix null pointer dereference in function PS_Lvl2page
    + tiff-CVE-2025-8534.patch
  * CVE-2025-9165 [bsc#1248330]
    Fix local execution manipulation can lead to memory leak
    + tiff-CVE-2025-9165.patch
  * CVE-2024-13978 [bsc#1247581]
    Fix null pointer dereference in tiff2pdf
    + tiff-CVE-2024-13978.patch</changelog>
  <changelog author="mvetter@suse.com" date="1757332800">- security update:
  * CVE-2025-8961 [bsc#1248117]
    Fix segmentation fault via main function of tiffcrop utility
    + tiff-CVE-2025-8961.patch</changelog>
</package>
<package pkgid="f78db93acd960bcaa3bc8b1ed426d346c12ba9270fa2849140b3e7b2f610e4cd" name="libtiff6" arch="x86_64">
  <version epoch="0" ver="4.7.1" rel="150600.3.23.1"/>
  <changelog author="info@paolostivanin.com" date="1672833600">- Update to 4.5.0:
  * tdir_t type updated to uint32_t. This type is now used for the return
    value of TIFFCurrentDirectory() and TIFFNumberOfDirectories(), and as
    the argument of TIFFSetDirectory() and TIFFUnlinkDirectory()
  * Addition of an open option concept with the new functions TIFFOpenExt(),
    TIFFOpenWExt(), TIFFFdOpenExt(), TIFFClientOpenExt(), TIFFOpenOptionsAlloc(),
    TIFFOpenOptionsFree()
  * Leveraging above mentioned open option concept, addition of a new capability
    to limit the size of a single dynamic memory allocation done by the library
    with TIFFOpenOptionsSetMaxSingleMemAlloc()
  * Related to IFD-Loop detection refactoring, the number of IFDs that libtiff
    can browse through has been extended from 65535 to 1048576. This value is
    a build-time setting that can be configured with CMake's TIFF_MAX_DIR_COUNT
    variable or autoconf's --with-max-dir-count option.
  * Whole code base reformatting of .c/.h files using new .clang-format format
  * Documentation changed from static HTML and man pages to
    Restructured Text (rst). HTML and man pages are now build artifacts.
  * SONAME version bumped to 6 due to changes in symbol versioning.
  * autoconf/cmake: detect (not yet released) libjpeg-turbo 2.2 to take into
    its capability of handling both 8-bit JPEG and 12-bit JPEG in a single build.
  * autoconf/cmake: detect sphinx-build to build HTML and man pages
  * CMakeLists.txt: fix warning with -Wdev
  * CMake: correctly set default value of 'lzma' option when liblzma is detected
  * CMake: Moved linking of CMath::CMath into CMath_LIBRARY check.
  * Fix CMake build to be compatible with FetchContent.
  * cmake: Correct duplicate definition of _CRT_SECURE_NO_WARNINGS
  * cmake: Fixes for Visual Studio 2022.
  * Adds Requires.private generation so that pkg-config can correctly find
    the dependencies of libtiff.
  * Fix dependency on libm on Android
  * Fix build in tif_lzw.c
  * CMake: Add options for disabling tools, tests, contrib and docs.
  * tiffcrop: Fix memory allocation to require a larger buffer (CVE-2022-3570, CVE-2022-3598)
    [bsc#1205422]
  * tiffcrop: disable incompatibility of -Z, -X, -Y, -z options with any PAGE_MODE_x option
    (CVE-2022-3627, CVE-2022-3597, CVE-2022-3626)
  * tiffcrop: fix floating-point exception (CVE-2022-2056, CVE-2022-2057, CVE-2022-2058)
  * _TIFFCheckFieldIsValidForCodec(): return FALSE when passed a codec-specific tag
    and the codec is not configured (CVE-2022-34526)
  * Revised handling of TIFFTAG_INKNAMES and related TIFFTAG_NUMBEROFINKS value (CVE-2022-3599)
  * tiffcrop: -S option mutually exclusive (CVE-2022-2519, CVE-2022-2520, CVE-2022-2521)
- Drop tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
- Drop tiff-CVE-2022-34526.patch
- Drop tiff-CVE-2022-3599.patch
- Drop tiff-CVE-2022-3598.patch
- Drop tiff-CVE-2022-3970.patch
- Drop tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
- Drop tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1677067200">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1687262400">- Update to version 4.5.1:
  * Definition of tags reformatted (clang-format off) for better readability of tag comments in tiff.h and tif_dirinfo.c
  * Do not install libtiff-4.pc when tiff-install is reset.
  * Add versioninfo resource files for DLL and tools compiled with Windows MSVC and MINGW.
  * Disable clang-formatting for tif_config.h.cmake.in and tiffconf.h.cmake.in because sensitive for CMake scripts.
  * CMake: make WebP component name compatible with upstream ConfigWebP.cmake
  * CMake: make Findliblzma with upstream CMake config file
  * CMake: FindDeflate.cmake: fix several errors (issue #526).
  * CMake: FindLERC.cmake: version string return added.
  * CMake: export TiffConfig.cmake and TiffConfigVersion.cmake files
  * CMake: fix export of INTERFACE_INCLUDE_DIRECTORIES
  * Hardcode HOST_FILLORDER to FILLORDER_LSB2MSB and make 'H' flag of TIFFOpen() to warn and an alias of FILLORDER_MSB2LSB. tif_lerc.c: use WORDS_BIGENDIAN instead of HOST_BIGENDIAN.
  * Optimize relative seeking within TIFFSetDirectory() by using the learned list of IFD offsets.
  * Improve internal IFD offset and directory number map handling.
  * Behavior of TIFFOpen() mode "r+" in the Windows implementation adjusted to that of Linux.
  * TIFFDirectory td_fieldsset type changed from unsigned long, which can be 32 or 64 bits, to uint32_t (fixes issue #484).
  * tif_ojpeg.c: checking for division by zero (fixes issue #554).
  * LZWDecode(): avoid crash when trying to read again from a strip whith a missing end-of-information marker (fixes issue #548).
  * Fixed runtime error: applying zero offset to null pointer in countInkNamesString().
  * Fixing crash in TIFFUnlinkDirectory() when called with directory number zero ("TIFFUnlinkDirectory(0)") as well as fixing incorrect behaviour when unlinking the first directory.
  * tif_luv: check and correct for NaN data in uv_encode() (issue #530).
  * TIFFClose() avoid NULL pointer dereferencing (issue #515).
  * tif_hash_set.c: include tif_hash_set.h after tif_config.h to let a chance for GDAL symbol renaming trick.
  * Fax3: fix failure to decode some fax3 number_of_images and add test for Fax3 decoding issues (issue #513).
  * TIFFSetDirectory() and TIFFWriteDirectorySec() avoid harmless unsigned-integer-overflow (due to gdal oss-fuzz #54311 and #54343).
  * tif_ojpeg.c: fix issue #554 by checking for division by zero in OJPEGWriteHeaderInfo().
  * LZWDecode(): avoid crash when trying to read again from a strip whith a missing end-of-information marker (issue #548).
- Drop no longer needed patches:
  * tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * tiff-CVE-2022-48281.patch
  * tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1694779200">- Update to version 4.6.0:
  * API/ABI breaks: none
  * WebP decoder: validate WebP blob width, height, band count against
    TIFF parameters to avoid use of uninitialized variable, or decoding
    corrupted content without explicit error (fixes issue #581, issue #582).
  * WebP codec: turn exact mode when creating lossless files to avoid
    altering R,G,B values in areas where alpha=0
  * Fix TransferFunction writing of only two transfer functions.
  * TIFFReadDirectoryCheckOrder: avoid integer overflow. When it occurs,
    it should be harmless in practice though
  * tiffcp: remove -i option (ignore errors)
  * This version removes a big number of utilities that have suffered from
    lack of maintenance over the years and were the source of various
    reported security issues:
    + fax2ps
    + fax2tiff
    + pal2rgb
    + ppm2tiff
    + raw2tiff
    + rgb2ycbcr
    + thumbnail
    + tiff2bw
    + tiff2rgba
    + tiffcmp
    + tiffcrop
    + tiffdither
    + tiffgt
    + tiffmedian
    + tiff2ps
    + tiff2pdf
- Remove no longer needed tiff-4.0.3-compress-warning.patch.
- CVE-2023-25435 [bsc#1212607] tiffcrop is removed</changelog>
  <changelog author="mvetter@suse.com" date="1706270400">- security update:
  * CVE-2023-52356 [bsc#1219213]
    Fix segfault in TIFFReadRGBATileExt()
    + tiff-CVE-2023-52356.patch</changelog>
  <changelog author="mvetter@suse.com" date="1724068800">- security update:
  * CVE-2024-7006 [bsc#1228924]
    Fix pointer deref in tif_dirinfo.c
    + tiff-CVE-2024-7006.patch</changelog>
  <changelog author="mvetter@suse.com" date="1726660800">- Update to 4.7.0:
  * This version restores in the default build the availability of
    the tools that had been dropped in v4.6.0
    See https://libtiff.gitlab.io/libtiff/rfcs/rfc2_restoring_needed_tools.html#rfc2-restoring-needed-tools
  * Software configuration changes:
    + autoconf build: configure.ac: avoid -Werror passed to CFLAGS to interfere with feature detection
    + autoconf build: fix error when running make clean (fixes issue #630)
    + autoconf build: back off the minimum required automake version to 1.11
    + autoconf.ac: fix detection of windows.h for mingw (fixes issue #605)
    + libtiff-4.pc: Fix Requires.private missing Lerc. It provides a .pc file
    starting from version 4 (in autoconf builds, we assume that liblerc is at least version 4)
    + CMake: Fix TIFF_INCLUDE_DIRS
    + CMake: MinGW compilers don't need a .def file for shared library
    + CMake: move libdeflate and Lerc to Requires.private
    + CMake: enable resource compilation on all Windows.
  * Library changes:
    + Add TIFFOpenOptionsSetMaxCumulatedMemAlloc(). This function complements
    TIFFOpenOptionsSetMaxSingleMemAlloc() to define the maximum cumulated memory
    allocations in byte, for a given TIFF handle, that libtiff internal memory
    allocation functions are allowed.
    + TIFFWriteDirectory(): Avoid overwriting following data if an IFD is enlarged.
    + TIFFXYZToRGB: avoid integer overflow (fixes issue #644)
    + uv_decode() and uv_encode(): avoid potential out-of-bounds array index (fixes issue #645)
    + Fix cases where tif_curdir is set incorrectly. Fix cases where the current directory number (tif_curdir)
    is set inconsistently or incorrectly, depending on the previous history.
    + TIFFRead[Scanline/EncodedStrip/EncodeTile]: 0-initialize output buffer if setupdecode fails ;
    most codecs: zero-initialize (not-yet-written parts of) output buffer if failure (fixes issue #375)
    + OJPEG: reset subsampling_convert_state=0 in OJPEGPreDecode (fixes issue #183)
    + ThunderRLE: fix failure when decoding last run. Bug seen with GhostPDL
    + LERC codec: deal with issues with multi-band PlanarConfig=Contig and NaN values
    + tif_fax3.c: error out after a number of times end-of-file has been reached (fixes issue #583)
    + LZW: avoid warning about misaligned address with UBSAN (fixes issue #616)
    + TIFFReadRGBAStrip/TIFFReadRGBATile: add more validation of col/row (fixes issue #622, CVE-2023-52356)
    + tif_dirread.c: only issue TIFFGetFileSize() for large enough RAM requests
    + Avoid FPEs (division by zero) in tif_getimage.c.
    + Avoiding FPE (division by zero) for TIFFhowmany_32() and TIFFhowmany_64() macros by checking for
    denominator not zero before macros are executed. (fixes issue #628)
    + Add non-zero check before division in TIFFComputeStrip()
    + Fix wrong return of TIFFIsBigTIFF() in case byte-swapping is active
    + Setting the TIFFFieldInfo field set_field_type should consider field_writecount not field_readcount
    + Avoid memory leaks when using TIFFCreateDirectory() by releasing the allocated memory in the tif-structure.
    + For non-terminated ASCII arrays, the buffer is first enlarged before a NULL is set at the end to
    avoid deleting the last character. (fixes issue #579)
    + Check return value of _TIFFCreateAnonField(). (fixes issue #624, CVE-2024-7006)
    + Prevent some out-of-memory attacks (https://gitlab.com/libtiff/libtiff/-/issues/614#note_1602683857)
    + Ensure absolute seeking is forced independent of TIFFReadDirectory success. (fixes issue #618)
    + tif_dirinfo.c: re-enable TIFFTAG_EP_CFAREPEATPATTERNDIM and TIFFTAG_EP_CFAPATTERN tags (fixes issue #608)
    + Fix warnings with GCC 14
    + tif_dir.c: Log source file, line number, and input tif for directory count error (fixes issue #627)
    + Last usage of get_field_type of TIFFField structure at TIFFWriteDirectorySec() changed to using set_field_type.
    + tif_jpeg.c/tif_ojpeg.c: remove likely ifdef tricks related to old compilers or unusual setups
    + Remove _TIFFUInt64ToFloat() and _TIFFUInt64ToDouble()
    + Remove support for _MSC_VER &lt; 1500.
    + Use #ifdef _WIN32 to test for Windows, and tiffio.h: remove definition of __WIN32__
  * Documentation:
    + Amend manpages for changes in current directory index behaviour
    + Note on using TIFFFlush() before TIFFClose() to check that the data has been successfully written to the file. (fixes issue #506)
    + Update TIFF documentation about TIFFOpenOptions.rst and TIFFOpenOptionsSetMaxSingleMemAlloc() usage and some other small fixes (relates to CVE-2024-7006)
  * Re-added tools:
    + fax2ps
    + fax2tiff
    + pal2rgb
    + ppm2tiff
    + raw2tiff
    + rgb2ycbcr (not installed)
    + thumbnail (not installed)
    + tiff2bw
    + tiff2rgba
    + tiffcmp
    + tiffcrop
    + tiffdither
    + tiffgt
    + tiffmedian
    + tiff2ps
    + tiff2pdf
  * New/improved functionality:
    + tiff2rgba: Add background gradient option for alpha compositing
    + tiffcp: -i flag restored
  * Bug fixes for tools:
    + tiffcrop: address Coverity scan issues 1605444, 1605445, and 16054
    + tiffcrop: Apply "Fix heap-buffer-overflow in function extractImageSection"
    + tiffcrop: fix buffer overflows, use after free (fixes issue #542, issue #550, issue #552)
    + tiff2pdf: address Coverity scan issues
    + tiff2pdf: fix inconsistent PLANARCONFIG value for the input and output TIFF
    + tiff2pdf: fix issue with JPEG restart-interval marker when converting from JPEG-compressed files (fixes issue #539)
    + tiff2pdf: red and blue were being swapped for RGBA decoding (fixes issue #253)
    + tiff2pdf: fixes issue #596
    + thumbnail: address Coverity scan issues
    + tiffcp: Add check for limitMalloc return to fix Coverity 1603334
    + tiffcp: preserve TIFFTAG_REFERENCEBLACKWHITE when doing YCbCr JPEG -&gt; YCbCr JPEG
    + tiffcp: replace PHOTOMETRIC_YCBCR with PHOTOMETRIC_RGB when outputing to compression != JPEG (refs issue #571)
    + tiffcp: do not copy tags YCBCRCOEFFICIENTS, YCBCRSUBSAMPLING, YCBCRPOSITIONING, REFERENCEBLACKWHITE. Only set YCBCRSUBSAMPLING when generating YCbCr JPEG
    + tiffcp: Check also codec of input image, not only from output image (fixes issue #606)
    + Add some basic sanity checks for tiffcp and tiffcrop RGB-&gt;YCbCr JPEG conversions.
    + fax2ps and fax2tiff: memory leak fixes (fixes issue #476)
    + tiffmedian: memory leak fixes (fixes issue #599)
    + fax2tiff: fix EOFB interpretation (fixes issue #191)
    + fax2tiff: fix issue with unreasonable width input (fixes issue #249)
    + tiffcp and tiffcrop: fixes issue #228
    + tiff2rgba: fixes issue #469
    + tiffdither: fixes issue #473
    + tiffdump: fix wrong printf formatter in error message (Coverity 1472932)
    + tiffset: avoid false positive Coverity Scan warning on 64-bit builds (Coverity 1518997)
    + tifcp/tiffset: use correct format specifiers
  * Changes to contributed and unsupported tools
    + contrib/addtiffo: validate return of TIFFWriteEncodedXXXX() calls (Coverity 1024680)
- Remove patches contained in upstream:
  * tiff-CVE-2023-52356.patch
  * tiff-CVE-2024-7006.patch
- Tools are not built for now due to test failure: `FAIL: tiffcp-32bpp-None-jpeg.sh`</changelog>
  <changelog author="mrueckert@suse.de" date="1731153600">- switch build to cmake for the webp build - we need the cmake
  finder code</changelog>
  <changelog author="mrueckert@suse.de" date="1731326400">- In the previous change to enable the cmake based build
  we also needed python3-Sphinx to build the man pages, as unlike
  the autotools based build, the cmake based build does not fall
  back to the pre-built man pages.
  This causes build cycle. Split out the documentation building to
  break the cycle. The Tumbleweed release managers preferred this
  solution over a mini package.</changelog>
  <changelog author="mrueckert@suse.de" date="1731412800">- make doc packages noarch. no need to have those per arch
- ensure that the src rpms are named per build flavor:
  You might now ask why. Good question:
  1. the spec file during the build get patched. `@BUILD_FLAVOR@`
    gets replaced with the value. which means the src rpm between
    build flavor builds is not identical. Also the last built
    src.rpm will be published. with different content and runtime
    requires (aka our BuildRequires).
  2. for historical reasons the internal dependency tracking goes
    via the src.rpm package. So without having differently named
    src.rpms the build cycle we were trying to solve was not
    actually solved. So we append a suffix to the Name attribute
    in the preamble now.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1736769600">- Fix versioning of tiff-docs under Recommends</changelog>
  <changelog author="lubos.kocman@suse.com" date="1738756800">- Update test/test_directory.c not to fail on big-endian machines.
  * Add tiff-4.7.0-test_directory.patch
    Fix memory leaks (fixes issue #652)
  * Resolves bsc#1236834
    fix build fail on s390x</changelog>
  <changelog author="lubos.kocman@suse.com" date="1740398400">- Use python3-Sphinx instead of  %{primary_python}-Sphinx
  based on recommendation from python maintainers.
  * Fixes build issue of man flavor on 15.6</changelog>
  <changelog author="sfalken@opensuse.org" date="1742644800">- Add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to fix FTBFS with cmake4
- Add %check section
- Remove Group: declarations, no longer used</changelog>
  <changelog author="mvetter@suse.com" date="1754308800">- security update:
  * CVE-2025-8176 [bsc#1247108]
    Fix heap use-after-free in tools/tiffmedian.c
    + tiff-CVE-2025-8176.patch
  * CVE-2025-8177 [bsc#1247106]
    Fix possible buffer overflow in tools/thumbnail.c:setrow()
    + tiff-CVE-2025-8177.patch</changelog>
  <changelog author="mvetter@suse.com" date="1754308801">- bsc#1243503:
  Fix TIFFMergeFieldInfo() read_count=write_count=0
  + tiff-4.7.0-bsc1243503.patch</changelog>
  <changelog author="mvetter@suse.com" date="1755777600">- security update:
  * CVE-2025-8534 [bsc#1247582]
    Fix null pointer dereference in function PS_Lvl2page
    + tiff-CVE-2025-8534.patch
  * CVE-2025-9165 [bsc#1248330]
    Fix local execution manipulation can lead to memory leak
    + tiff-CVE-2025-9165.patch
  * CVE-2024-13978 [bsc#1247581]
    Fix null pointer dereference in tiff2pdf
    + tiff-CVE-2024-13978.patch</changelog>
  <changelog author="mvetter@suse.com" date="1757332800">- security update:
  * CVE-2025-8961 [bsc#1248117]
    Fix segmentation fault via main function of tiffcrop utility
    + tiff-CVE-2025-8961.patch</changelog>
  <changelog author="mvetter@suse.com" date="1758196800">- Update to 4.7.1:
  Software configuration changes:
  * Define HAVE_JPEGTURBO_DUAL_MODE_8_12 and LERC_STATIC in tif_config.h.
  * CMake: define WORDS_BIGENDIAN via tif_config.h
  * doc/CMakeLists.txt: remove useless cmake_minimum_required()
  * CMake: fix build with LLVM/Clang 17 (fixes issue #651)
  * CMake: set CMP0074 new policy
  * Set LINKER_LANGUAGE for C targets with C deps
  * Export tiffxx cmake target (fixes issue #674)
  * autogen.sh: Enable verbose wget.
  * configure.ac: Syntax updates for Autoconf 2.71
  * autogen.sh: Re-implement based on autoreconf. Failure to update
    config.guess/config.sub does not return error (fixes issue #672)
  * CMake: fix CMake 4.0 warning when minimum required version is &lt; 3.10.
  * CMake: Add build option tiff-static (fixes issue #709)
  Library changes:
  * Add TIFFOpenOptionsSetWarnAboutUnknownTags() for explicit control
    about emitting warnings for unknown tags. No longer emit warnings
    about unknown tags by default
  * tif_predict.c: speed-up decompression in some cases.
  Bug fixes:
  * tif_fax3: For fax group 3 data if no EOL is detected, reading is
    retried without synchronisation for EOLs. (fixes issue #54)
  * Updating TIFFMergeFieldInfo() with read_count=write_count=0 for
    FIELD_IGNORE. Updating TIFFMergeFieldInfo() with read_count=write_count=0 for
    FIELD_IGNORE. Improving handling when field_name = NULL. (fixes issue #532)
  * tiff.h: add COMPRESSION_JXL_DNG_1_7=52546 as used for JPEGXL compression in
    the DNG 1.7 specification
  * TIFFWriteDirectorySec: Increment string length for ASCII tags for codec tags
    defined with FIELD_xxx bits, as it is done for FIELD_CUSTOM tags. (fixes issue #648)
  * Do not error out on a tag whose tag count value is zero, just issue a warning.
    Fix parsing a private tag 0x80a6 (fixes issue #647)
  * TIFFDefaultTransferFunction(): give up beyond td_bitspersample = 24
    Fixes https://github.com/OSGeo/gdal/issues/10875)
  * tif_getimage.c: Remove unnecessary calls to TIFFRGBAImageOK() (fixes issue #175)
  * Fix writing a Predictor=3 file with non-native endianness
  * _TIFFVSetField(): fix potential use of unallocated memory (out-of-bounds
  * read / nullptr dereference) in case of out-of-memory situation when dealing with
    custom tags (fixes issue #663)
  * tif_fax3.c: Error out for CCITT fax encoding if SamplesPerPixel is not equal 1 and
    PlanarConfiguration = Contiguous (fixes issue #26)
  * tif_fax3.c: error out after a number of times end-of-line or unexpected bad code
    words have been reached. (fixes issue #670)
  * Fix memory leak in TIFFSetupStrips() (fixes issue #665)
  * tif_zip.c: Provide zlib allocation functions. Otherwise for zlib built with
  - DZ_SOLO inflating will fail.
  * Fix memory leak in _TIFFSetDefaultCompressionState. (fixes issue #676)
  * tif_predict.c: Don’t overwrite input buffer of TIFFWriteScanline() if "prediction"
    is enabled. Use extra working buffer in PredictorEncodeRow(). (fixes issue #5)
  * tif_getimage.c: update some integer overflow checks (fixes issue #79)
  * tif_getimage.c: Fix buffer underflow crash for less raster rows at
    TIFFReadRGBAImageOriented() (fixes issue #704, bsc#1250413, CVE-2025-9900)
  * TIFFReadRGBAImage(): several fixes to avoid buffer overflows.
  * Correct passing arguments to TIFFCvtIEEEFloatToNative() and TIFFCvtIEEEDoubleToNative()
    if HAVE_IEEEFP is not defined. (fixes issue #699)
  * LZWDecode(): avoid nullptr dereference when trying to read again after EOI marker
    has been found with remaining output bytes (fixes issue #698)
  * TIFFSetSubDirectory(): check _TIFFCheckDirNumberAndOffset() return.
  * TIFFUnlinkDirectory() and TIFFWriteDirectorySec(): clear tif_rawcp when clearing
    tif_rawdata (fixes issue #711)
  * JPEGEncodeRaw(): error out if a previous scanline failed to be written, to avoid
    out-of-bounds access (fixes issue #714)
  * tif_jpeg: Fix bug in JPEGDecodeRaw() if JPEG_LIB_MK1_OR_12BIT is defined for 8/12bit
    dual mode, introduced in libjpeg-turbo 2.2, which was actually released as 3.0.
    Fixes issue #717
  * add assert for TIFFReadCustomDirectory infoarray check.
  * ppm2tiff: Fix bug in pack_words trailing bytes, where last two bytes of each line
    were written wrongly. (fixes issue #467)
  * fax2ps: fix regression of commit 28c38d648b64a66c3218778c4745225fe3e3a06d where
    TIFFTAG_FAXFILLFUNC is being used rather than an output buffer (fixes issue #649)
  * tiff2pdf: Check TIFFTAG_TILELENGTH and TIFFTAGTILEWIDTH (fixes issue #650)
  * tiff2pdf: check h_samp and v_samp for range 1 to 4 to avoid division by zero.
    Fixes issue #654
  * tiff2pdf: avoid null pointer dereference. (fixes issue #741)
  * Improve non-secure integer overflow check (comparison of division result with
    multiplicant) at compiler optimisation in tiffcp, rgb2ycbcr and tiff2rgba.
    Fixes issue #546
  * tiff2rgba: fix some "a partial expression can generate an overflow before it is
    assigned to a broader type" warnings. (fixes issue #682)
  * tiffdither/tiffmedian: Don't skip the first line of the input image. (fixes issue #703)
  * tiffdither: avoid out-of-bounds read identified in issue #733
  * tiffmedian: error out if TIFFReadScanline() fails (fixes issue #707)
  * tiffmedian: close input file. (fixes issue #735)
  * thumbail: avoid potential out of bounds access (fixes issue #715)
  * tiffcrop: close open TIFF files and release allocated buffers before exiting in case
    of error to avoid memory leaks. (fixes issue #716)
  * tiffcrop: fix double-free and memory leak exposed by issue #721
  * tiffcrop: avoid buffer overflow. (fixes issue #740)
  * tiffcrop: avoid nullptr dereference. (fixes issue #734)
  * tiffdump: Fix coverity scan issue CID 1373365: Passing tainted expression *datamem
    to PrintData, which uses it as a divisor or modulus.
  * tiff2ps: check return of TIFFGetFiled() for TIFFTAG_STRIPBYTECOUNTS and
    TIFFTAG_TILEBYTECOUNTS to avoid NULL pointer dereference. (fixes issue #718)
  * tiffcmp: fix memory leak when second file cannot be opened. (fixes issue #718 and issue #729)
  * tiffcp: fix setting compression level for lossless codecs. (fixes issue #730)
  * raw2tiff: close input file before exit (fixes issue #742)
  Tools changes:
  * tiffinfo: add a -W switch to warn about unknown tags.
  * tiffdither: process all pages in input TIFF file.
  Documentation:
  * TIFFRGBAImage.rst note added for incorrect saving of images with TIFF orientation
    from 5 (LeftTop) to 8 (LeftBottom) in the raster.
  * TIFFRGBAImage.rst note added about un-associated alpha handling (fixes issue #67)
  * Update "Defining New TIFF Tags" description. (fixes issue #642, bsc#1248278, CVE-2025-8851)
  * Fix return type of TIFFReadEncodedTile()
  * Update the documentation to reflect deprecated typedefs.
  * TIFFWriteDirectory.rst: Clarify TIFFSetWriteOffset() only sets offset for image
    data and not for IFD data.
  * Update documentation on re-entrancy and thread safety.
  * Remove dead links to no more existing Awaresystems web-site.
  * Updating BigTIFF specification and some miscelaneous editions.
  * Replace some last links and remove last todos.
  * Added hints for correct allocation of TIFFYCbCrtoRGB structure and its
    associated buffers. (fixes issue #681)
  * Added chapter to "Using the TIFF Library" with links to handling multi-page TIFF
    and custom directories. (fixes issue #43)
  * update TIFFOpen.rst with the return values of mapproc and unmapproc. (fixes issue #12)
- Drop upstreamed patches:
  * tiff-4.7.0-test_directory.patch
  * tiff-CVE-2025-8176.patch
  * tiff-CVE-2025-8177.patch
  * tiff-4.7.0-bsc1243503.patch
  * tiff-CVE-2025-8534.patch
  * tiff-CVE-2025-9165.patch
  * tiff-CVE-2024-13978.patch
  * tiff-CVE-2025-8961.patch</changelog>
</package>
<package pkgid="9a722547840c2faa37c548785dbfdd79b108afe1dcab24a38cf9d29fd3b0049c" name="libtiff6" arch="x86_64">
  <version epoch="0" ver="4.7.1" rel="150600.3.26.1"/>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1677067200">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1687262400">- Update to version 4.5.1:
  * Definition of tags reformatted (clang-format off) for better readability of tag comments in tiff.h and tif_dirinfo.c
  * Do not install libtiff-4.pc when tiff-install is reset.
  * Add versioninfo resource files for DLL and tools compiled with Windows MSVC and MINGW.
  * Disable clang-formatting for tif_config.h.cmake.in and tiffconf.h.cmake.in because sensitive for CMake scripts.
  * CMake: make WebP component name compatible with upstream ConfigWebP.cmake
  * CMake: make Findliblzma with upstream CMake config file
  * CMake: FindDeflate.cmake: fix several errors (issue #526).
  * CMake: FindLERC.cmake: version string return added.
  * CMake: export TiffConfig.cmake and TiffConfigVersion.cmake files
  * CMake: fix export of INTERFACE_INCLUDE_DIRECTORIES
  * Hardcode HOST_FILLORDER to FILLORDER_LSB2MSB and make 'H' flag of TIFFOpen() to warn and an alias of FILLORDER_MSB2LSB. tif_lerc.c: use WORDS_BIGENDIAN instead of HOST_BIGENDIAN.
  * Optimize relative seeking within TIFFSetDirectory() by using the learned list of IFD offsets.
  * Improve internal IFD offset and directory number map handling.
  * Behavior of TIFFOpen() mode "r+" in the Windows implementation adjusted to that of Linux.
  * TIFFDirectory td_fieldsset type changed from unsigned long, which can be 32 or 64 bits, to uint32_t (fixes issue #484).
  * tif_ojpeg.c: checking for division by zero (fixes issue #554).
  * LZWDecode(): avoid crash when trying to read again from a strip whith a missing end-of-information marker (fixes issue #548).
  * Fixed runtime error: applying zero offset to null pointer in countInkNamesString().
  * Fixing crash in TIFFUnlinkDirectory() when called with directory number zero ("TIFFUnlinkDirectory(0)") as well as fixing incorrect behaviour when unlinking the first directory.
  * tif_luv: check and correct for NaN data in uv_encode() (issue #530).
  * TIFFClose() avoid NULL pointer dereferencing (issue #515).
  * tif_hash_set.c: include tif_hash_set.h after tif_config.h to let a chance for GDAL symbol renaming trick.
  * Fax3: fix failure to decode some fax3 number_of_images and add test for Fax3 decoding issues (issue #513).
  * TIFFSetDirectory() and TIFFWriteDirectorySec() avoid harmless unsigned-integer-overflow (due to gdal oss-fuzz #54311 and #54343).
  * tif_ojpeg.c: fix issue #554 by checking for division by zero in OJPEGWriteHeaderInfo().
  * LZWDecode(): avoid crash when trying to read again from a strip whith a missing end-of-information marker (issue #548).
- Drop no longer needed patches:
  * tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * tiff-CVE-2022-48281.patch
  * tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1694779200">- Update to version 4.6.0:
  * API/ABI breaks: none
  * WebP decoder: validate WebP blob width, height, band count against
    TIFF parameters to avoid use of uninitialized variable, or decoding
    corrupted content without explicit error (fixes issue #581, issue #582).
  * WebP codec: turn exact mode when creating lossless files to avoid
    altering R,G,B values in areas where alpha=0
  * Fix TransferFunction writing of only two transfer functions.
  * TIFFReadDirectoryCheckOrder: avoid integer overflow. When it occurs,
    it should be harmless in practice though
  * tiffcp: remove -i option (ignore errors)
  * This version removes a big number of utilities that have suffered from
    lack of maintenance over the years and were the source of various
    reported security issues:
    + fax2ps
    + fax2tiff
    + pal2rgb
    + ppm2tiff
    + raw2tiff
    + rgb2ycbcr
    + thumbnail
    + tiff2bw
    + tiff2rgba
    + tiffcmp
    + tiffcrop
    + tiffdither
    + tiffgt
    + tiffmedian
    + tiff2ps
    + tiff2pdf
- Remove no longer needed tiff-4.0.3-compress-warning.patch.
- CVE-2023-25435 [bsc#1212607] tiffcrop is removed</changelog>
  <changelog author="mvetter@suse.com" date="1706270400">- security update:
  * CVE-2023-52356 [bsc#1219213]
    Fix segfault in TIFFReadRGBATileExt()
    + tiff-CVE-2023-52356.patch</changelog>
  <changelog author="mvetter@suse.com" date="1724068800">- security update:
  * CVE-2024-7006 [bsc#1228924]
    Fix pointer deref in tif_dirinfo.c
    + tiff-CVE-2024-7006.patch</changelog>
  <changelog author="mvetter@suse.com" date="1726660800">- Update to 4.7.0:
  * This version restores in the default build the availability of
    the tools that had been dropped in v4.6.0
    See https://libtiff.gitlab.io/libtiff/rfcs/rfc2_restoring_needed_tools.html#rfc2-restoring-needed-tools
  * Software configuration changes:
    + autoconf build: configure.ac: avoid -Werror passed to CFLAGS to interfere with feature detection
    + autoconf build: fix error when running make clean (fixes issue #630)
    + autoconf build: back off the minimum required automake version to 1.11
    + autoconf.ac: fix detection of windows.h for mingw (fixes issue #605)
    + libtiff-4.pc: Fix Requires.private missing Lerc. It provides a .pc file
    starting from version 4 (in autoconf builds, we assume that liblerc is at least version 4)
    + CMake: Fix TIFF_INCLUDE_DIRS
    + CMake: MinGW compilers don't need a .def file for shared library
    + CMake: move libdeflate and Lerc to Requires.private
    + CMake: enable resource compilation on all Windows.
  * Library changes:
    + Add TIFFOpenOptionsSetMaxCumulatedMemAlloc(). This function complements
    TIFFOpenOptionsSetMaxSingleMemAlloc() to define the maximum cumulated memory
    allocations in byte, for a given TIFF handle, that libtiff internal memory
    allocation functions are allowed.
    + TIFFWriteDirectory(): Avoid overwriting following data if an IFD is enlarged.
    + TIFFXYZToRGB: avoid integer overflow (fixes issue #644)
    + uv_decode() and uv_encode(): avoid potential out-of-bounds array index (fixes issue #645)
    + Fix cases where tif_curdir is set incorrectly. Fix cases where the current directory number (tif_curdir)
    is set inconsistently or incorrectly, depending on the previous history.
    + TIFFRead[Scanline/EncodedStrip/EncodeTile]: 0-initialize output buffer if setupdecode fails ;
    most codecs: zero-initialize (not-yet-written parts of) output buffer if failure (fixes issue #375)
    + OJPEG: reset subsampling_convert_state=0 in OJPEGPreDecode (fixes issue #183)
    + ThunderRLE: fix failure when decoding last run. Bug seen with GhostPDL
    + LERC codec: deal with issues with multi-band PlanarConfig=Contig and NaN values
    + tif_fax3.c: error out after a number of times end-of-file has been reached (fixes issue #583)
    + LZW: avoid warning about misaligned address with UBSAN (fixes issue #616)
    + TIFFReadRGBAStrip/TIFFReadRGBATile: add more validation of col/row (fixes issue #622, CVE-2023-52356)
    + tif_dirread.c: only issue TIFFGetFileSize() for large enough RAM requests
    + Avoid FPEs (division by zero) in tif_getimage.c.
    + Avoiding FPE (division by zero) for TIFFhowmany_32() and TIFFhowmany_64() macros by checking for
    denominator not zero before macros are executed. (fixes issue #628)
    + Add non-zero check before division in TIFFComputeStrip()
    + Fix wrong return of TIFFIsBigTIFF() in case byte-swapping is active
    + Setting the TIFFFieldInfo field set_field_type should consider field_writecount not field_readcount
    + Avoid memory leaks when using TIFFCreateDirectory() by releasing the allocated memory in the tif-structure.
    + For non-terminated ASCII arrays, the buffer is first enlarged before a NULL is set at the end to
    avoid deleting the last character. (fixes issue #579)
    + Check return value of _TIFFCreateAnonField(). (fixes issue #624, CVE-2024-7006)
    + Prevent some out-of-memory attacks (https://gitlab.com/libtiff/libtiff/-/issues/614#note_1602683857)
    + Ensure absolute seeking is forced independent of TIFFReadDirectory success. (fixes issue #618)
    + tif_dirinfo.c: re-enable TIFFTAG_EP_CFAREPEATPATTERNDIM and TIFFTAG_EP_CFAPATTERN tags (fixes issue #608)
    + Fix warnings with GCC 14
    + tif_dir.c: Log source file, line number, and input tif for directory count error (fixes issue #627)
    + Last usage of get_field_type of TIFFField structure at TIFFWriteDirectorySec() changed to using set_field_type.
    + tif_jpeg.c/tif_ojpeg.c: remove likely ifdef tricks related to old compilers or unusual setups
    + Remove _TIFFUInt64ToFloat() and _TIFFUInt64ToDouble()
    + Remove support for _MSC_VER &lt; 1500.
    + Use #ifdef _WIN32 to test for Windows, and tiffio.h: remove definition of __WIN32__
  * Documentation:
    + Amend manpages for changes in current directory index behaviour
    + Note on using TIFFFlush() before TIFFClose() to check that the data has been successfully written to the file. (fixes issue #506)
    + Update TIFF documentation about TIFFOpenOptions.rst and TIFFOpenOptionsSetMaxSingleMemAlloc() usage and some other small fixes (relates to CVE-2024-7006)
  * Re-added tools:
    + fax2ps
    + fax2tiff
    + pal2rgb
    + ppm2tiff
    + raw2tiff
    + rgb2ycbcr (not installed)
    + thumbnail (not installed)
    + tiff2bw
    + tiff2rgba
    + tiffcmp
    + tiffcrop
    + tiffdither
    + tiffgt
    + tiffmedian
    + tiff2ps
    + tiff2pdf
  * New/improved functionality:
    + tiff2rgba: Add background gradient option for alpha compositing
    + tiffcp: -i flag restored
  * Bug fixes for tools:
    + tiffcrop: address Coverity scan issues 1605444, 1605445, and 16054
    + tiffcrop: Apply "Fix heap-buffer-overflow in function extractImageSection"
    + tiffcrop: fix buffer overflows, use after free (fixes issue #542, issue #550, issue #552)
    + tiff2pdf: address Coverity scan issues
    + tiff2pdf: fix inconsistent PLANARCONFIG value for the input and output TIFF
    + tiff2pdf: fix issue with JPEG restart-interval marker when converting from JPEG-compressed files (fixes issue #539)
    + tiff2pdf: red and blue were being swapped for RGBA decoding (fixes issue #253)
    + tiff2pdf: fixes issue #596
    + thumbnail: address Coverity scan issues
    + tiffcp: Add check for limitMalloc return to fix Coverity 1603334
    + tiffcp: preserve TIFFTAG_REFERENCEBLACKWHITE when doing YCbCr JPEG -&gt; YCbCr JPEG
    + tiffcp: replace PHOTOMETRIC_YCBCR with PHOTOMETRIC_RGB when outputing to compression != JPEG (refs issue #571)
    + tiffcp: do not copy tags YCBCRCOEFFICIENTS, YCBCRSUBSAMPLING, YCBCRPOSITIONING, REFERENCEBLACKWHITE. Only set YCBCRSUBSAMPLING when generating YCbCr JPEG
    + tiffcp: Check also codec of input image, not only from output image (fixes issue #606)
    + Add some basic sanity checks for tiffcp and tiffcrop RGB-&gt;YCbCr JPEG conversions.
    + fax2ps and fax2tiff: memory leak fixes (fixes issue #476)
    + tiffmedian: memory leak fixes (fixes issue #599)
    + fax2tiff: fix EOFB interpretation (fixes issue #191)
    + fax2tiff: fix issue with unreasonable width input (fixes issue #249)
    + tiffcp and tiffcrop: fixes issue #228
    + tiff2rgba: fixes issue #469
    + tiffdither: fixes issue #473
    + tiffdump: fix wrong printf formatter in error message (Coverity 1472932)
    + tiffset: avoid false positive Coverity Scan warning on 64-bit builds (Coverity 1518997)
    + tifcp/tiffset: use correct format specifiers
  * Changes to contributed and unsupported tools
    + contrib/addtiffo: validate return of TIFFWriteEncodedXXXX() calls (Coverity 1024680)
- Remove patches contained in upstream:
  * tiff-CVE-2023-52356.patch
  * tiff-CVE-2024-7006.patch
- Tools are not built for now due to test failure: `FAIL: tiffcp-32bpp-None-jpeg.sh`</changelog>
  <changelog author="mrueckert@suse.de" date="1731153600">- switch build to cmake for the webp build - we need the cmake
  finder code</changelog>
  <changelog author="mrueckert@suse.de" date="1731326400">- In the previous change to enable the cmake based build
  we also needed python3-Sphinx to build the man pages, as unlike
  the autotools based build, the cmake based build does not fall
  back to the pre-built man pages.
  This causes build cycle. Split out the documentation building to
  break the cycle. The Tumbleweed release managers preferred this
  solution over a mini package.</changelog>
  <changelog author="mrueckert@suse.de" date="1731412800">- make doc packages noarch. no need to have those per arch
- ensure that the src rpms are named per build flavor:
  You might now ask why. Good question:
  1. the spec file during the build get patched. `@BUILD_FLAVOR@`
    gets replaced with the value. which means the src rpm between
    build flavor builds is not identical. Also the last built
    src.rpm will be published. with different content and runtime
    requires (aka our BuildRequires).
  2. for historical reasons the internal dependency tracking goes
    via the src.rpm package. So without having differently named
    src.rpms the build cycle we were trying to solve was not
    actually solved. So we append a suffix to the Name attribute
    in the preamble now.</changelog>
  <changelog author="sarah.kriesch@opensuse.org" date="1736769600">- Fix versioning of tiff-docs under Recommends</changelog>
  <changelog author="lubos.kocman@suse.com" date="1738756800">- Update test/test_directory.c not to fail on big-endian machines.
  * Add tiff-4.7.0-test_directory.patch
    Fix memory leaks (fixes issue #652)
  * Resolves bsc#1236834
    fix build fail on s390x</changelog>
  <changelog author="lubos.kocman@suse.com" date="1740398400">- Use python3-Sphinx instead of  %{primary_python}-Sphinx
  based on recommendation from python maintainers.
  * Fixes build issue of man flavor on 15.6</changelog>
  <changelog author="sfalken@opensuse.org" date="1742644800">- Add -DCMAKE_POLICY_VERSION_MINIMUM=3.5 to fix FTBFS with cmake4
- Add %check section
- Remove Group: declarations, no longer used</changelog>
  <changelog author="mvetter@suse.com" date="1754308800">- security update:
  * CVE-2025-8176 [bsc#1247108]
    Fix heap use-after-free in tools/tiffmedian.c
    + tiff-CVE-2025-8176.patch
  * CVE-2025-8177 [bsc#1247106]
    Fix possible buffer overflow in tools/thumbnail.c:setrow()
    + tiff-CVE-2025-8177.patch</changelog>
  <changelog author="mvetter@suse.com" date="1754308801">- bsc#1243503:
  Fix TIFFMergeFieldInfo() read_count=write_count=0
  + tiff-4.7.0-bsc1243503.patch</changelog>
  <changelog author="mvetter@suse.com" date="1755777600">- security update:
  * CVE-2025-8534 [bsc#1247582]
    Fix null pointer dereference in function PS_Lvl2page
    + tiff-CVE-2025-8534.patch
  * CVE-2025-9165 [bsc#1248330]
    Fix local execution manipulation can lead to memory leak
    + tiff-CVE-2025-9165.patch
  * CVE-2024-13978 [bsc#1247581]
    Fix null pointer dereference in tiff2pdf
    + tiff-CVE-2024-13978.patch</changelog>
  <changelog author="mvetter@suse.com" date="1757332800">- security update:
  * CVE-2025-8961 [bsc#1248117]
    Fix segmentation fault via main function of tiffcrop utility
    + tiff-CVE-2025-8961.patch</changelog>
  <changelog author="mvetter@suse.com" date="1758196800">- Update to 4.7.1:
  Software configuration changes:
  * Define HAVE_JPEGTURBO_DUAL_MODE_8_12 and LERC_STATIC in tif_config.h.
  * CMake: define WORDS_BIGENDIAN via tif_config.h
  * doc/CMakeLists.txt: remove useless cmake_minimum_required()
  * CMake: fix build with LLVM/Clang 17 (fixes issue #651)
  * CMake: set CMP0074 new policy
  * Set LINKER_LANGUAGE for C targets with C deps
  * Export tiffxx cmake target (fixes issue #674)
  * autogen.sh: Enable verbose wget.
  * configure.ac: Syntax updates for Autoconf 2.71
  * autogen.sh: Re-implement based on autoreconf. Failure to update
    config.guess/config.sub does not return error (fixes issue #672)
  * CMake: fix CMake 4.0 warning when minimum required version is &lt; 3.10.
  * CMake: Add build option tiff-static (fixes issue #709)
  Library changes:
  * Add TIFFOpenOptionsSetWarnAboutUnknownTags() for explicit control
    about emitting warnings for unknown tags. No longer emit warnings
    about unknown tags by default
  * tif_predict.c: speed-up decompression in some cases.
  Bug fixes:
  * tif_fax3: For fax group 3 data if no EOL is detected, reading is
    retried without synchronisation for EOLs. (fixes issue #54)
  * Updating TIFFMergeFieldInfo() with read_count=write_count=0 for
    FIELD_IGNORE. Updating TIFFMergeFieldInfo() with read_count=write_count=0 for
    FIELD_IGNORE. Improving handling when field_name = NULL. (fixes issue #532)
  * tiff.h: add COMPRESSION_JXL_DNG_1_7=52546 as used for JPEGXL compression in
    the DNG 1.7 specification
  * TIFFWriteDirectorySec: Increment string length for ASCII tags for codec tags
    defined with FIELD_xxx bits, as it is done for FIELD_CUSTOM tags. (fixes issue #648)
  * Do not error out on a tag whose tag count value is zero, just issue a warning.
    Fix parsing a private tag 0x80a6 (fixes issue #647)
  * TIFFDefaultTransferFunction(): give up beyond td_bitspersample = 24
    Fixes https://github.com/OSGeo/gdal/issues/10875)
  * tif_getimage.c: Remove unnecessary calls to TIFFRGBAImageOK() (fixes issue #175)
  * Fix writing a Predictor=3 file with non-native endianness
  * _TIFFVSetField(): fix potential use of unallocated memory (out-of-bounds
  * read / nullptr dereference) in case of out-of-memory situation when dealing with
    custom tags (fixes issue #663)
  * tif_fax3.c: Error out for CCITT fax encoding if SamplesPerPixel is not equal 1 and
    PlanarConfiguration = Contiguous (fixes issue #26)
  * tif_fax3.c: error out after a number of times end-of-line or unexpected bad code
    words have been reached. (fixes issue #670)
  * Fix memory leak in TIFFSetupStrips() (fixes issue #665)
  * tif_zip.c: Provide zlib allocation functions. Otherwise for zlib built with
  - DZ_SOLO inflating will fail.
  * Fix memory leak in _TIFFSetDefaultCompressionState. (fixes issue #676)
  * tif_predict.c: Don’t overwrite input buffer of TIFFWriteScanline() if "prediction"
    is enabled. Use extra working buffer in PredictorEncodeRow(). (fixes issue #5)
  * tif_getimage.c: update some integer overflow checks (fixes issue #79)
  * tif_getimage.c: Fix buffer underflow crash for less raster rows at
    TIFFReadRGBAImageOriented() (fixes issue #704, bsc#1250413, CVE-2025-9900)
  * TIFFReadRGBAImage(): several fixes to avoid buffer overflows.
  * Correct passing arguments to TIFFCvtIEEEFloatToNative() and TIFFCvtIEEEDoubleToNative()
    if HAVE_IEEEFP is not defined. (fixes issue #699)
  * LZWDecode(): avoid nullptr dereference when trying to read again after EOI marker
    has been found with remaining output bytes (fixes issue #698)
  * TIFFSetSubDirectory(): check _TIFFCheckDirNumberAndOffset() return.
  * TIFFUnlinkDirectory() and TIFFWriteDirectorySec(): clear tif_rawcp when clearing
    tif_rawdata (fixes issue #711)
  * JPEGEncodeRaw(): error out if a previous scanline failed to be written, to avoid
    out-of-bounds access (fixes issue #714)
  * tif_jpeg: Fix bug in JPEGDecodeRaw() if JPEG_LIB_MK1_OR_12BIT is defined for 8/12bit
    dual mode, introduced in libjpeg-turbo 2.2, which was actually released as 3.0.
    Fixes issue #717
  * add assert for TIFFReadCustomDirectory infoarray check.
  * ppm2tiff: Fix bug in pack_words trailing bytes, where last two bytes of each line
    were written wrongly. (fixes issue #467)
  * fax2ps: fix regression of commit 28c38d648b64a66c3218778c4745225fe3e3a06d where
    TIFFTAG_FAXFILLFUNC is being used rather than an output buffer (fixes issue #649)
  * tiff2pdf: Check TIFFTAG_TILELENGTH and TIFFTAGTILEWIDTH (fixes issue #650)
  * tiff2pdf: check h_samp and v_samp for range 1 to 4 to avoid division by zero.
    Fixes issue #654
  * tiff2pdf: avoid null pointer dereference. (fixes issue #741)
  * Improve non-secure integer overflow check (comparison of division result with
    multiplicant) at compiler optimisation in tiffcp, rgb2ycbcr and tiff2rgba.
    Fixes issue #546
  * tiff2rgba: fix some "a partial expression can generate an overflow before it is
    assigned to a broader type" warnings. (fixes issue #682)
  * tiffdither/tiffmedian: Don't skip the first line of the input image. (fixes issue #703)
  * tiffdither: avoid out-of-bounds read identified in issue #733
  * tiffmedian: error out if TIFFReadScanline() fails (fixes issue #707)
  * tiffmedian: close input file. (fixes issue #735)
  * thumbail: avoid potential out of bounds access (fixes issue #715)
  * tiffcrop: close open TIFF files and release allocated buffers before exiting in case
    of error to avoid memory leaks. (fixes issue #716)
  * tiffcrop: fix double-free and memory leak exposed by issue #721
  * tiffcrop: avoid buffer overflow. (fixes issue #740)
  * tiffcrop: avoid nullptr dereference. (fixes issue #734)
  * tiffdump: Fix coverity scan issue CID 1373365: Passing tainted expression *datamem
    to PrintData, which uses it as a divisor or modulus.
  * tiff2ps: check return of TIFFGetFiled() for TIFFTAG_STRIPBYTECOUNTS and
    TIFFTAG_TILEBYTECOUNTS to avoid NULL pointer dereference. (fixes issue #718)
  * tiffcmp: fix memory leak when second file cannot be opened. (fixes issue #718 and issue #729)
  * tiffcp: fix setting compression level for lossless codecs. (fixes issue #730)
  * raw2tiff: close input file before exit (fixes issue #742)
  Tools changes:
  * tiffinfo: add a -W switch to warn about unknown tags.
  * tiffdither: process all pages in input TIFF file.
  Documentation:
  * TIFFRGBAImage.rst note added for incorrect saving of images with TIFF orientation
    from 5 (LeftTop) to 8 (LeftBottom) in the raster.
  * TIFFRGBAImage.rst note added about un-associated alpha handling (fixes issue #67)
  * Update "Defining New TIFF Tags" description. (fixes issue #642, bsc#1248278, CVE-2025-8851)
  * Fix return type of TIFFReadEncodedTile()
  * Update the documentation to reflect deprecated typedefs.
  * TIFFWriteDirectory.rst: Clarify TIFFSetWriteOffset() only sets offset for image
    data and not for IFD data.
  * Update documentation on re-entrancy and thread safety.
  * Remove dead links to no more existing Awaresystems web-site.
  * Updating BigTIFF specification and some miscelaneous editions.
  * Replace some last links and remove last todos.
  * Added hints for correct allocation of TIFFYCbCrtoRGB structure and its
    associated buffers. (fixes issue #681)
  * Added chapter to "Using the TIFF Library" with links to handling multi-page TIFF
    and custom directories. (fixes issue #43)
  * update TIFFOpen.rst with the return values of mapproc and unmapproc. (fixes issue #12)
- Drop upstreamed patches:
  * tiff-4.7.0-test_directory.patch
  * tiff-CVE-2025-8176.patch
  * tiff-CVE-2025-8177.patch
  * tiff-4.7.0-bsc1243503.patch
  * tiff-CVE-2025-8534.patch
  * tiff-CVE-2025-9165.patch
  * tiff-CVE-2024-13978.patch
  * tiff-CVE-2025-8961.patch</changelog>
  <changelog author="mvetter@suse.com" date="1777291200">- * CVE-2026-4775: Signed integer overflow in putcontig8bitYCbCr44tile (bsc#1260411)
    Add tiff-CVE-2026-4775.patch</changelog>
</package>
<package pkgid="36bb6699519f74d18d503dce377e2e4638245e3452d49cbd1dc7cf9739b38fee" name="libtraceevent" arch="src">
  <version epoch="0" ver="1.7.3" rel="150500.11.5.1"/>
  <changelog author="tonyj@suse.com" date="1603195200">- Initial checkin of libtraceevent.</changelog>
  <changelog author="jengelh@inai.de" date="1608638400">- Rectify License: fields to mirror the SPDX lines found in source
  and the object builds.
- Rectify Group: fields.
- Fix duplicate manpages.
- Rename rpmlintrc according to policy.
- Update to release 1.1.1
  * trace-cmd libtraceevent: Fix bprint '#' parsing
  * Man page for tep_add_plugin_path() API
  * Man page for libtraceevent debug APIs</changelog>
  <changelog author="dfaggioli@suse.com" date="1620388800">- Update to latest upstream version (1.2.1)
- Fix one rpmlint warning</changelog>
  <changelog author="tonyj@suse.com" date="1620820800">- Make package compliant with SLPP.
  Package plugins into so-ver specific directory.</changelog>
  <changelog author="dfaggioli@suse.com" date="1620993600">- Update to latest upstream version (1.3.0)</changelog>
  <changelog author="tonyj@suse.com" date="1620993601">- Update rpmlintrc to suppress warnings about plugins</changelog>
  <changelog author="dfaggioli@suse.com" date="1642593600">- Update to latest upstream version (1.5.0)
- Update romlintrc (again) to silence complains about plugins</changelog>
  <changelog author="olaf@aepfle.de" date="1645531200">- Force correct pkgconfig_dir location to fix build</changelog>
  <changelog author="schwab@suse.de" date="1645704000">- Use %{optflags}
- Makefile is not parallel-safe</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649160000">- Update to latest upstream version (1.5.3)
  Most notable changes are all bugfixes, e.g.:
  * Optimize constant logic in print format processing
  * Better parsing of fields with typecasts
  * Fix backward compatibility with tep_print_arg_string
  * Log printing updates
  * Fix man pages
  * Sample program to simplify testing of event format parsing
  * Better message of expected tokens
  * Fix parsing print fmts with new lines
  For details, see:
  * https://git.kernel.org/pub/scm/libs/libtrace/libtraceevent.git/tag/?h=libtraceevent-1.5.3
  * https://git.kernel.org/pub/scm/libs/libtrace/libtraceevent.git/tag/?h=libtraceevent-1.5.2
  * https://git.kernel.org/pub/scm/libs/libtrace/libtraceevent.git/tag/?h=libtraceevent-1.5.1</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 1.6.2
  * Add API tep_get_function_count()
  * Reset right arg when copying TEP_PRINT_OP
  * Reset field properly in event_read_fields()
  * Fix memleak in make_bprint_args()
  * Add processing of __get_sockaddr() and __get_sockaddr_rel()</changelog>
  <changelog author="daniel.wagner@suse.com" date="1671883200">- Update to release 1.7.0
  - New APIs:
    tep_find_function_info() - Returns not only the name of a function from its
    address, but also where the function starts and
  its size.
    tep_kbuffer() - Returns the kbuffer parser for a tep handle.
  - Now handles cpumask() macro parsing.
  - Add SAME_AS_HOST for endian and long size to kbuffer_alloc()
  - Handle dynamic fields that are not arrays.
  - Allow function parameters to have operators.
  - sizeof() parsing for some basic types.
  - Added man pages for the kbuffer API.
  - print_field_raw() terminates with '\0'
  - Fix uninitialized variables
  - Fix a "check after derer" coverity flaw
  - Fix testing the dereference pointer instead of the pointer for NULL.
  - Fix double free
- Build project with Meson
  * add 0001-libtraceevent-Add-initial-support-for-meson.patch</changelog>
  <changelog author="dmueller@suse.com" date="1674043200">- update to 1.7.1:
  * Make sure 32 bit work on 64 bit file systems
  * Fix string parsing
  * Remove tep_find_function{address}() from libtraceevent
  * Fix output of raw prints
  * Show migrate-disabled field</changelog>
  <changelog author="daniel.wagner@suse.com" date="1675771200">- Sync meson build patch with latest upstream version
  * Documentation is build via extra build target</changelog>
  <changelog author="hp@urpla.net" date="1676116800">- Let's build this package in %build, not %prep, as usual
- Link explicitly with -ldl allows building with older toolchains</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- update to 1.7.2:
  * Fix some missing commas in big endian blocks
  * Rename "ok" to "token_has_paren" in process_sizeof()
  * No need for testing ok in else if (!ok) in process_sizeof()
  * Fix double free in parsing sizeof()</changelog>
  <changelog author="tonyj@suse.com" date="1686830400">- Update to version 1.7.3
  * Handle printf '%+d" case
  * Add initial support for meson
  * Handle %c
- Drop patch 0001-libtraceevent-Add-initial-support-for-meson.patch (upstream)</changelog>
</package>
<package pkgid="306606c97b327f1a6bc7def10592bbfe27dbba23a4b7c413d3b426c9d597c54b" name="libtraceevent" arch="src">
  <version epoch="0" ver="1.8.4" rel="150500.11.8.1"/>
  <changelog author="tonyj@suse.com" date="1603195200">- Initial checkin of libtraceevent.</changelog>
  <changelog author="jengelh@inai.de" date="1608638400">- Rectify License: fields to mirror the SPDX lines found in source
  and the object builds.
- Rectify Group: fields.
- Fix duplicate manpages.
- Rename rpmlintrc according to policy.
- Update to release 1.1.1
  * trace-cmd libtraceevent: Fix bprint '#' parsing
  * Man page for tep_add_plugin_path() API
  * Man page for libtraceevent debug APIs</changelog>
  <changelog author="dfaggioli@suse.com" date="1620388800">- Update to latest upstream version (1.2.1)
- Fix one rpmlint warning</changelog>
  <changelog author="tonyj@suse.com" date="1620820800">- Make package compliant with SLPP.
  Package plugins into so-ver specific directory.</changelog>
  <changelog author="dfaggioli@suse.com" date="1620993600">- Update to latest upstream version (1.3.0)</changelog>
  <changelog author="tonyj@suse.com" date="1620993601">- Update rpmlintrc to suppress warnings about plugins</changelog>
  <changelog author="dfaggioli@suse.com" date="1642593600">- Update to latest upstream version (1.5.0)
- Update romlintrc (again) to silence complains about plugins</changelog>
  <changelog author="olaf@aepfle.de" date="1645531200">- Force correct pkgconfig_dir location to fix build</changelog>
  <changelog author="schwab@suse.de" date="1645704000">- Use %{optflags}
- Makefile is not parallel-safe</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649160000">- Update to latest upstream version (1.5.3)
  Most notable changes are all bugfixes, e.g.:
  * Optimize constant logic in print format processing
  * Better parsing of fields with typecasts
  * Fix backward compatibility with tep_print_arg_string
  * Log printing updates
  * Fix man pages
  * Sample program to simplify testing of event format parsing
  * Better message of expected tokens
  * Fix parsing print fmts with new lines
  For details, see:
  * https://git.kernel.org/pub/scm/libs/libtrace/libtraceevent.git/tag/?h=libtraceevent-1.5.3
  * https://git.kernel.org/pub/scm/libs/libtrace/libtraceevent.git/tag/?h=libtraceevent-1.5.2
  * https://git.kernel.org/pub/scm/libs/libtrace/libtraceevent.git/tag/?h=libtraceevent-1.5.1</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 1.6.2
  * Add API tep_get_function_count()
  * Reset right arg when copying TEP_PRINT_OP
  * Reset field properly in event_read_fields()
  * Fix memleak in make_bprint_args()
  * Add processing of __get_sockaddr() and __get_sockaddr_rel()</changelog>
  <changelog author="daniel.wagner@suse.com" date="1671883200">- Update to release 1.7.0
  - New APIs:
    tep_find_function_info() - Returns not only the name of a function from its
    address, but also where the function starts and
  its size.
    tep_kbuffer() - Returns the kbuffer parser for a tep handle.
  - Now handles cpumask() macro parsing.
  - Add SAME_AS_HOST for endian and long size to kbuffer_alloc()
  - Handle dynamic fields that are not arrays.
  - Allow function parameters to have operators.
  - sizeof() parsing for some basic types.
  - Added man pages for the kbuffer API.
  - print_field_raw() terminates with '\0'
  - Fix uninitialized variables
  - Fix a "check after derer" coverity flaw
  - Fix testing the dereference pointer instead of the pointer for NULL.
  - Fix double free
- Build project with Meson
  * add 0001-libtraceevent-Add-initial-support-for-meson.patch</changelog>
  <changelog author="dmueller@suse.com" date="1674043200">- update to 1.7.1:
  * Make sure 32 bit work on 64 bit file systems
  * Fix string parsing
  * Remove tep_find_function{address}() from libtraceevent
  * Fix output of raw prints
  * Show migrate-disabled field</changelog>
  <changelog author="daniel.wagner@suse.com" date="1675771200">- Sync meson build patch with latest upstream version
  * Documentation is build via extra build target</changelog>
  <changelog author="hp@urpla.net" date="1676116800">- Let's build this package in %build, not %prep, as usual
- Link explicitly with -ldl allows building with older toolchains</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- update to 1.7.2:
  * Fix some missing commas in big endian blocks
  * Rename "ok" to "token_has_paren" in process_sizeof()
  * No need for testing ok in else if (!ok) in process_sizeof()
  * Fix double free in parsing sizeof()</changelog>
  <changelog author="tonyj@suse.com" date="1686830400">- Update to version 1.7.3
  * Handle printf '%+d" case
  * Add initial support for meson
  * Handle %c
- Drop patch 0001-libtraceevent-Add-initial-support-for-meson.patch (upstream)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1718625600">- Update to 1.8.2
  * New APIs:
  - tep_record_is_event() - A helper function that basically converts
  int type= tep_data_type(event-&gt;tep, record);
  if (event-&gt;id == type) {
  /* do something */
  }
  into:
  if (tep_record_is_event(record, event)) {
  /* do something */
  }
  - tep_get_sub_buffer_commit_offset() - Add a function to return the
    offset of where the "commit" is located on the subbuffer
  so that the application can do its own direct reading of it.
  - kbuffer_read_buffer() - Add the functionality to the kbuffer to
  act like the read syscall of the ring buffer. That is, it
  will load the passed in buffer with the events where the
  kbuffer left off, and that passed in buffer can be loaded
  into another kbuffer via kbuffer_load_subbuffer().
  - kbuffer_dup() - Create a new kbuffer with the same fields of an
  existing kbuffer. This will allow traversing a subbuffer
  without modifying the contents of another kbuffer that
  points to the subbuffer.
  - kbuffer_subbuffer() - Return the subbuffer that was loaded into
  a kbuffer via kbuffer_load_subbuffer().
  - kbuffer_refresh() - In the case of the subbuffer that was loaded
  into a kbuffer via kbuffer_load_subbuffer() that is still
  active, this function will refresh the meta data to continue
  reading events if more were written to it.
  - Added tep_get_sub_buffer_data_size() helper function
  * Updates:
  - Add option to disable building documents for some environments
    that do not have everything needed to build the documents to
    not fail the build with meson.
  - Bump meson version required to build to 0.58.0 as plugins use
    str.replace that was introduced in that version.
  - Have the sched_switch plugin parse the format field to figure out
    what the correct mapping of the "prev_state" field is to produce
    the proper string output.
  * Fixes:
  - Update the default sched_switch "prev_state" string array to match
    what's been in the kernel for a while now.
  - Fix tep_kbuffer() to fill in the long_size, otherwise it would default
    to 32 bit longs and cause a lot of confusion to application developers
  - Fix tep_kbuffer man page info
  - Fix some meson dependency issues
  - Fix kbuffer_read_buffer() timestamp being off in some cases
  - Fix curr size in kbuffer_refresh()</changelog>
  <changelog author="dmueller@suse.com" date="1725105600">- update to 1.8.3:
  * Fix a double free in process_op()
  * Do not return a local stack pointer in get_field_str()
  * prevent a memory leak in tep_plugin_add_option()
  * Prevent a memory leak in process_fields()
  * Close shared object in the error path of load_plugin()
  * Avoid a simple asprintf case
  * Fix event-parse memory leak in process_cond
  * Have single quotes represent characters
  * Fix tests running on big endian arch</changelog>
  <changelog author="dmueller@suse.com" date="1743336000">- update to 1.8.4:
  * Have sizeof() parsing handle u8/s8 through u64/s64
  * Print arrays like Linux does
  * Print function pointer address when TEP_EVENT_FL_PRINTRAW is specified</changelog>
</package>
<package pkgid="ccc24767acab086fc972954f6641887fbb9b869175ac2c9ed972f3caea55a600" name="libtraceevent-devel" arch="x86_64">
  <version epoch="0" ver="1.7.3" rel="150500.11.5.1"/>
  <changelog author="tonyj@suse.com" date="1603195200">- Initial checkin of libtraceevent.</changelog>
  <changelog author="jengelh@inai.de" date="1608638400">- Rectify License: fields to mirror the SPDX lines found in source
  and the object builds.
- Rectify Group: fields.
- Fix duplicate manpages.
- Rename rpmlintrc according to policy.
- Update to release 1.1.1
  * trace-cmd libtraceevent: Fix bprint '#' parsing
  * Man page for tep_add_plugin_path() API
  * Man page for libtraceevent debug APIs</changelog>
  <changelog author="dfaggioli@suse.com" date="1620388800">- Update to latest upstream version (1.2.1)
- Fix one rpmlint warning</changelog>
  <changelog author="tonyj@suse.com" date="1620820800">- Make package compliant with SLPP.
  Package plugins into so-ver specific directory.</changelog>
  <changelog author="dfaggioli@suse.com" date="1620993600">- Update to latest upstream version (1.3.0)</changelog>
  <changelog author="tonyj@suse.com" date="1620993601">- Update rpmlintrc to suppress warnings about plugins</changelog>
  <changelog author="dfaggioli@suse.com" date="1642593600">- Update to latest upstream version (1.5.0)
- Update romlintrc (again) to silence complains about plugins</changelog>
  <changelog author="olaf@aepfle.de" date="1645531200">- Force correct pkgconfig_dir location to fix build</changelog>
  <changelog author="schwab@suse.de" date="1645704000">- Use %{optflags}
- Makefile is not parallel-safe</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649160000">- Update to latest upstream version (1.5.3)
  Most notable changes are all bugfixes, e.g.:
  * Optimize constant logic in print format processing
  * Better parsing of fields with typecasts
  * Fix backward compatibility with tep_print_arg_string
  * Log printing updates
  * Fix man pages
  * Sample program to simplify testing of event format parsing
  * Better message of expected tokens
  * Fix parsing print fmts with new lines
  For details, see:
  * https://git.kernel.org/pub/scm/libs/libtrace/libtraceevent.git/tag/?h=libtraceevent-1.5.3
  * https://git.kernel.org/pub/scm/libs/libtrace/libtraceevent.git/tag/?h=libtraceevent-1.5.2
  * https://git.kernel.org/pub/scm/libs/libtrace/libtraceevent.git/tag/?h=libtraceevent-1.5.1</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 1.6.2
  * Add API tep_get_function_count()
  * Reset right arg when copying TEP_PRINT_OP
  * Reset field properly in event_read_fields()
  * Fix memleak in make_bprint_args()
  * Add processing of __get_sockaddr() and __get_sockaddr_rel()</changelog>
  <changelog author="daniel.wagner@suse.com" date="1671883200">- Update to release 1.7.0
  - New APIs:
    tep_find_function_info() - Returns not only the name of a function from its
    address, but also where the function starts and
  its size.
    tep_kbuffer() - Returns the kbuffer parser for a tep handle.
  - Now handles cpumask() macro parsing.
  - Add SAME_AS_HOST for endian and long size to kbuffer_alloc()
  - Handle dynamic fields that are not arrays.
  - Allow function parameters to have operators.
  - sizeof() parsing for some basic types.
  - Added man pages for the kbuffer API.
  - print_field_raw() terminates with '\0'
  - Fix uninitialized variables
  - Fix a "check after derer" coverity flaw
  - Fix testing the dereference pointer instead of the pointer for NULL.
  - Fix double free
- Build project with Meson
  * add 0001-libtraceevent-Add-initial-support-for-meson.patch</changelog>
  <changelog author="dmueller@suse.com" date="1674043200">- update to 1.7.1:
  * Make sure 32 bit work on 64 bit file systems
  * Fix string parsing
  * Remove tep_find_function{address}() from libtraceevent
  * Fix output of raw prints
  * Show migrate-disabled field</changelog>
  <changelog author="daniel.wagner@suse.com" date="1675771200">- Sync meson build patch with latest upstream version
  * Documentation is build via extra build target</changelog>
  <changelog author="hp@urpla.net" date="1676116800">- Let's build this package in %build, not %prep, as usual
- Link explicitly with -ldl allows building with older toolchains</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- update to 1.7.2:
  * Fix some missing commas in big endian blocks
  * Rename "ok" to "token_has_paren" in process_sizeof()
  * No need for testing ok in else if (!ok) in process_sizeof()
  * Fix double free in parsing sizeof()</changelog>
  <changelog author="tonyj@suse.com" date="1686830400">- Update to version 1.7.3
  * Handle printf '%+d" case
  * Add initial support for meson
  * Handle %c
- Drop patch 0001-libtraceevent-Add-initial-support-for-meson.patch (upstream)</changelog>
</package>
<package pkgid="2ac1dd832600b1f80197afbfb75999861873d47f04bd35de431e2fe1033de317" name="libtraceevent-devel" arch="x86_64">
  <version epoch="0" ver="1.8.4" rel="150500.11.8.1"/>
  <changelog author="tonyj@suse.com" date="1603195200">- Initial checkin of libtraceevent.</changelog>
  <changelog author="jengelh@inai.de" date="1608638400">- Rectify License: fields to mirror the SPDX lines found in source
  and the object builds.
- Rectify Group: fields.
- Fix duplicate manpages.
- Rename rpmlintrc according to policy.
- Update to release 1.1.1
  * trace-cmd libtraceevent: Fix bprint '#' parsing
  * Man page for tep_add_plugin_path() API
  * Man page for libtraceevent debug APIs</changelog>
  <changelog author="dfaggioli@suse.com" date="1620388800">- Update to latest upstream version (1.2.1)
- Fix one rpmlint warning</changelog>
  <changelog author="tonyj@suse.com" date="1620820800">- Make package compliant with SLPP.
  Package plugins into so-ver specific directory.</changelog>
  <changelog author="dfaggioli@suse.com" date="1620993600">- Update to latest upstream version (1.3.0)</changelog>
  <changelog author="tonyj@suse.com" date="1620993601">- Update rpmlintrc to suppress warnings about plugins</changelog>
  <changelog author="dfaggioli@suse.com" date="1642593600">- Update to latest upstream version (1.5.0)
- Update romlintrc (again) to silence complains about plugins</changelog>
  <changelog author="olaf@aepfle.de" date="1645531200">- Force correct pkgconfig_dir location to fix build</changelog>
  <changelog author="schwab@suse.de" date="1645704000">- Use %{optflags}
- Makefile is not parallel-safe</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649160000">- Update to latest upstream version (1.5.3)
  Most notable changes are all bugfixes, e.g.:
  * Optimize constant logic in print format processing
  * Better parsing of fields with typecasts
  * Fix backward compatibility with tep_print_arg_string
  * Log printing updates
  * Fix man pages
  * Sample program to simplify testing of event format parsing
  * Better message of expected tokens
  * Fix parsing print fmts with new lines
  For details, see:
  * https://git.kernel.org/pub/scm/libs/libtrace/libtraceevent.git/tag/?h=libtraceevent-1.5.3
  * https://git.kernel.org/pub/scm/libs/libtrace/libtraceevent.git/tag/?h=libtraceevent-1.5.2
  * https://git.kernel.org/pub/scm/libs/libtrace/libtraceevent.git/tag/?h=libtraceevent-1.5.1</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 1.6.2
  * Add API tep_get_function_count()
  * Reset right arg when copying TEP_PRINT_OP
  * Reset field properly in event_read_fields()
  * Fix memleak in make_bprint_args()
  * Add processing of __get_sockaddr() and __get_sockaddr_rel()</changelog>
  <changelog author="daniel.wagner@suse.com" date="1671883200">- Update to release 1.7.0
  - New APIs:
    tep_find_function_info() - Returns not only the name of a function from its
    address, but also where the function starts and
  its size.
    tep_kbuffer() - Returns the kbuffer parser for a tep handle.
  - Now handles cpumask() macro parsing.
  - Add SAME_AS_HOST for endian and long size to kbuffer_alloc()
  - Handle dynamic fields that are not arrays.
  - Allow function parameters to have operators.
  - sizeof() parsing for some basic types.
  - Added man pages for the kbuffer API.
  - print_field_raw() terminates with '\0'
  - Fix uninitialized variables
  - Fix a "check after derer" coverity flaw
  - Fix testing the dereference pointer instead of the pointer for NULL.
  - Fix double free
- Build project with Meson
  * add 0001-libtraceevent-Add-initial-support-for-meson.patch</changelog>
  <changelog author="dmueller@suse.com" date="1674043200">- update to 1.7.1:
  * Make sure 32 bit work on 64 bit file systems
  * Fix string parsing
  * Remove tep_find_function{address}() from libtraceevent
  * Fix output of raw prints
  * Show migrate-disabled field</changelog>
  <changelog author="daniel.wagner@suse.com" date="1675771200">- Sync meson build patch with latest upstream version
  * Documentation is build via extra build target</changelog>
  <changelog author="hp@urpla.net" date="1676116800">- Let's build this package in %build, not %prep, as usual
- Link explicitly with -ldl allows building with older toolchains</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- update to 1.7.2:
  * Fix some missing commas in big endian blocks
  * Rename "ok" to "token_has_paren" in process_sizeof()
  * No need for testing ok in else if (!ok) in process_sizeof()
  * Fix double free in parsing sizeof()</changelog>
  <changelog author="tonyj@suse.com" date="1686830400">- Update to version 1.7.3
  * Handle printf '%+d" case
  * Add initial support for meson
  * Handle %c
- Drop patch 0001-libtraceevent-Add-initial-support-for-meson.patch (upstream)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1718625600">- Update to 1.8.2
  * New APIs:
  - tep_record_is_event() - A helper function that basically converts
  int type= tep_data_type(event-&gt;tep, record);
  if (event-&gt;id == type) {
  /* do something */
  }
  into:
  if (tep_record_is_event(record, event)) {
  /* do something */
  }
  - tep_get_sub_buffer_commit_offset() - Add a function to return the
    offset of where the "commit" is located on the subbuffer
  so that the application can do its own direct reading of it.
  - kbuffer_read_buffer() - Add the functionality to the kbuffer to
  act like the read syscall of the ring buffer. That is, it
  will load the passed in buffer with the events where the
  kbuffer left off, and that passed in buffer can be loaded
  into another kbuffer via kbuffer_load_subbuffer().
  - kbuffer_dup() - Create a new kbuffer with the same fields of an
  existing kbuffer. This will allow traversing a subbuffer
  without modifying the contents of another kbuffer that
  points to the subbuffer.
  - kbuffer_subbuffer() - Return the subbuffer that was loaded into
  a kbuffer via kbuffer_load_subbuffer().
  - kbuffer_refresh() - In the case of the subbuffer that was loaded
  into a kbuffer via kbuffer_load_subbuffer() that is still
  active, this function will refresh the meta data to continue
  reading events if more were written to it.
  - Added tep_get_sub_buffer_data_size() helper function
  * Updates:
  - Add option to disable building documents for some environments
    that do not have everything needed to build the documents to
    not fail the build with meson.
  - Bump meson version required to build to 0.58.0 as plugins use
    str.replace that was introduced in that version.
  - Have the sched_switch plugin parse the format field to figure out
    what the correct mapping of the "prev_state" field is to produce
    the proper string output.
  * Fixes:
  - Update the default sched_switch "prev_state" string array to match
    what's been in the kernel for a while now.
  - Fix tep_kbuffer() to fill in the long_size, otherwise it would default
    to 32 bit longs and cause a lot of confusion to application developers
  - Fix tep_kbuffer man page info
  - Fix some meson dependency issues
  - Fix kbuffer_read_buffer() timestamp being off in some cases
  - Fix curr size in kbuffer_refresh()</changelog>
  <changelog author="dmueller@suse.com" date="1725105600">- update to 1.8.3:
  * Fix a double free in process_op()
  * Do not return a local stack pointer in get_field_str()
  * prevent a memory leak in tep_plugin_add_option()
  * Prevent a memory leak in process_fields()
  * Close shared object in the error path of load_plugin()
  * Avoid a simple asprintf case
  * Fix event-parse memory leak in process_cond
  * Have single quotes represent characters
  * Fix tests running on big endian arch</changelog>
  <changelog author="dmueller@suse.com" date="1743336000">- update to 1.8.4:
  * Have sizeof() parsing handle u8/s8 through u64/s64
  * Print arrays like Linux does
  * Print function pointer address when TEP_EVENT_FL_PRINTRAW is specified</changelog>
</package>
<package pkgid="09b5c52cfb3b5de7e57d07bb9aac3ed4b8f751d12167cc28249c0d85e15f6ce8" name="libtraceevent1" arch="x86_64">
  <version epoch="0" ver="1.7.3" rel="150500.11.5.1"/>
  <changelog author="tonyj@suse.com" date="1603195200">- Initial checkin of libtraceevent.</changelog>
  <changelog author="jengelh@inai.de" date="1608638400">- Rectify License: fields to mirror the SPDX lines found in source
  and the object builds.
- Rectify Group: fields.
- Fix duplicate manpages.
- Rename rpmlintrc according to policy.
- Update to release 1.1.1
  * trace-cmd libtraceevent: Fix bprint '#' parsing
  * Man page for tep_add_plugin_path() API
  * Man page for libtraceevent debug APIs</changelog>
  <changelog author="dfaggioli@suse.com" date="1620388800">- Update to latest upstream version (1.2.1)
- Fix one rpmlint warning</changelog>
  <changelog author="tonyj@suse.com" date="1620820800">- Make package compliant with SLPP.
  Package plugins into so-ver specific directory.</changelog>
  <changelog author="dfaggioli@suse.com" date="1620993600">- Update to latest upstream version (1.3.0)</changelog>
  <changelog author="tonyj@suse.com" date="1620993601">- Update rpmlintrc to suppress warnings about plugins</changelog>
  <changelog author="dfaggioli@suse.com" date="1642593600">- Update to latest upstream version (1.5.0)
- Update romlintrc (again) to silence complains about plugins</changelog>
  <changelog author="olaf@aepfle.de" date="1645531200">- Force correct pkgconfig_dir location to fix build</changelog>
  <changelog author="schwab@suse.de" date="1645704000">- Use %{optflags}
- Makefile is not parallel-safe</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649160000">- Update to latest upstream version (1.5.3)
  Most notable changes are all bugfixes, e.g.:
  * Optimize constant logic in print format processing
  * Better parsing of fields with typecasts
  * Fix backward compatibility with tep_print_arg_string
  * Log printing updates
  * Fix man pages
  * Sample program to simplify testing of event format parsing
  * Better message of expected tokens
  * Fix parsing print fmts with new lines
  For details, see:
  * https://git.kernel.org/pub/scm/libs/libtrace/libtraceevent.git/tag/?h=libtraceevent-1.5.3
  * https://git.kernel.org/pub/scm/libs/libtrace/libtraceevent.git/tag/?h=libtraceevent-1.5.2
  * https://git.kernel.org/pub/scm/libs/libtrace/libtraceevent.git/tag/?h=libtraceevent-1.5.1</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 1.6.2
  * Add API tep_get_function_count()
  * Reset right arg when copying TEP_PRINT_OP
  * Reset field properly in event_read_fields()
  * Fix memleak in make_bprint_args()
  * Add processing of __get_sockaddr() and __get_sockaddr_rel()</changelog>
  <changelog author="daniel.wagner@suse.com" date="1671883200">- Update to release 1.7.0
  - New APIs:
    tep_find_function_info() - Returns not only the name of a function from its
    address, but also where the function starts and
  its size.
    tep_kbuffer() - Returns the kbuffer parser for a tep handle.
  - Now handles cpumask() macro parsing.
  - Add SAME_AS_HOST for endian and long size to kbuffer_alloc()
  - Handle dynamic fields that are not arrays.
  - Allow function parameters to have operators.
  - sizeof() parsing for some basic types.
  - Added man pages for the kbuffer API.
  - print_field_raw() terminates with '\0'
  - Fix uninitialized variables
  - Fix a "check after derer" coverity flaw
  - Fix testing the dereference pointer instead of the pointer for NULL.
  - Fix double free
- Build project with Meson
  * add 0001-libtraceevent-Add-initial-support-for-meson.patch</changelog>
  <changelog author="dmueller@suse.com" date="1674043200">- update to 1.7.1:
  * Make sure 32 bit work on 64 bit file systems
  * Fix string parsing
  * Remove tep_find_function{address}() from libtraceevent
  * Fix output of raw prints
  * Show migrate-disabled field</changelog>
  <changelog author="daniel.wagner@suse.com" date="1675771200">- Sync meson build patch with latest upstream version
  * Documentation is build via extra build target</changelog>
  <changelog author="hp@urpla.net" date="1676116800">- Let's build this package in %build, not %prep, as usual
- Link explicitly with -ldl allows building with older toolchains</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- update to 1.7.2:
  * Fix some missing commas in big endian blocks
  * Rename "ok" to "token_has_paren" in process_sizeof()
  * No need for testing ok in else if (!ok) in process_sizeof()
  * Fix double free in parsing sizeof()</changelog>
  <changelog author="tonyj@suse.com" date="1686830400">- Update to version 1.7.3
  * Handle printf '%+d" case
  * Add initial support for meson
  * Handle %c
- Drop patch 0001-libtraceevent-Add-initial-support-for-meson.patch (upstream)</changelog>
</package>
<package pkgid="58cd7e3cae6d86453eddee2e68b1abf4ab82f763ba5d0f72d8bad7e241a78dd3" name="libtraceevent1" arch="x86_64">
  <version epoch="0" ver="1.8.4" rel="150500.11.8.1"/>
  <changelog author="tonyj@suse.com" date="1603195200">- Initial checkin of libtraceevent.</changelog>
  <changelog author="jengelh@inai.de" date="1608638400">- Rectify License: fields to mirror the SPDX lines found in source
  and the object builds.
- Rectify Group: fields.
- Fix duplicate manpages.
- Rename rpmlintrc according to policy.
- Update to release 1.1.1
  * trace-cmd libtraceevent: Fix bprint '#' parsing
  * Man page for tep_add_plugin_path() API
  * Man page for libtraceevent debug APIs</changelog>
  <changelog author="dfaggioli@suse.com" date="1620388800">- Update to latest upstream version (1.2.1)
- Fix one rpmlint warning</changelog>
  <changelog author="tonyj@suse.com" date="1620820800">- Make package compliant with SLPP.
  Package plugins into so-ver specific directory.</changelog>
  <changelog author="dfaggioli@suse.com" date="1620993600">- Update to latest upstream version (1.3.0)</changelog>
  <changelog author="tonyj@suse.com" date="1620993601">- Update rpmlintrc to suppress warnings about plugins</changelog>
  <changelog author="dfaggioli@suse.com" date="1642593600">- Update to latest upstream version (1.5.0)
- Update romlintrc (again) to silence complains about plugins</changelog>
  <changelog author="olaf@aepfle.de" date="1645531200">- Force correct pkgconfig_dir location to fix build</changelog>
  <changelog author="schwab@suse.de" date="1645704000">- Use %{optflags}
- Makefile is not parallel-safe</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649160000">- Update to latest upstream version (1.5.3)
  Most notable changes are all bugfixes, e.g.:
  * Optimize constant logic in print format processing
  * Better parsing of fields with typecasts
  * Fix backward compatibility with tep_print_arg_string
  * Log printing updates
  * Fix man pages
  * Sample program to simplify testing of event format parsing
  * Better message of expected tokens
  * Fix parsing print fmts with new lines
  For details, see:
  * https://git.kernel.org/pub/scm/libs/libtrace/libtraceevent.git/tag/?h=libtraceevent-1.5.3
  * https://git.kernel.org/pub/scm/libs/libtrace/libtraceevent.git/tag/?h=libtraceevent-1.5.2
  * https://git.kernel.org/pub/scm/libs/libtrace/libtraceevent.git/tag/?h=libtraceevent-1.5.1</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 1.6.2
  * Add API tep_get_function_count()
  * Reset right arg when copying TEP_PRINT_OP
  * Reset field properly in event_read_fields()
  * Fix memleak in make_bprint_args()
  * Add processing of __get_sockaddr() and __get_sockaddr_rel()</changelog>
  <changelog author="daniel.wagner@suse.com" date="1671883200">- Update to release 1.7.0
  - New APIs:
    tep_find_function_info() - Returns not only the name of a function from its
    address, but also where the function starts and
  its size.
    tep_kbuffer() - Returns the kbuffer parser for a tep handle.
  - Now handles cpumask() macro parsing.
  - Add SAME_AS_HOST for endian and long size to kbuffer_alloc()
  - Handle dynamic fields that are not arrays.
  - Allow function parameters to have operators.
  - sizeof() parsing for some basic types.
  - Added man pages for the kbuffer API.
  - print_field_raw() terminates with '\0'
  - Fix uninitialized variables
  - Fix a "check after derer" coverity flaw
  - Fix testing the dereference pointer instead of the pointer for NULL.
  - Fix double free
- Build project with Meson
  * add 0001-libtraceevent-Add-initial-support-for-meson.patch</changelog>
  <changelog author="dmueller@suse.com" date="1674043200">- update to 1.7.1:
  * Make sure 32 bit work on 64 bit file systems
  * Fix string parsing
  * Remove tep_find_function{address}() from libtraceevent
  * Fix output of raw prints
  * Show migrate-disabled field</changelog>
  <changelog author="daniel.wagner@suse.com" date="1675771200">- Sync meson build patch with latest upstream version
  * Documentation is build via extra build target</changelog>
  <changelog author="hp@urpla.net" date="1676116800">- Let's build this package in %build, not %prep, as usual
- Link explicitly with -ldl allows building with older toolchains</changelog>
  <changelog author="dmueller@suse.com" date="1682596800">- update to 1.7.2:
  * Fix some missing commas in big endian blocks
  * Rename "ok" to "token_has_paren" in process_sizeof()
  * No need for testing ok in else if (!ok) in process_sizeof()
  * Fix double free in parsing sizeof()</changelog>
  <changelog author="tonyj@suse.com" date="1686830400">- Update to version 1.7.3
  * Handle printf '%+d" case
  * Add initial support for meson
  * Handle %c
- Drop patch 0001-libtraceevent-Add-initial-support-for-meson.patch (upstream)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1718625600">- Update to 1.8.2
  * New APIs:
  - tep_record_is_event() - A helper function that basically converts
  int type= tep_data_type(event-&gt;tep, record);
  if (event-&gt;id == type) {
  /* do something */
  }
  into:
  if (tep_record_is_event(record, event)) {
  /* do something */
  }
  - tep_get_sub_buffer_commit_offset() - Add a function to return the
    offset of where the "commit" is located on the subbuffer
  so that the application can do its own direct reading of it.
  - kbuffer_read_buffer() - Add the functionality to the kbuffer to
  act like the read syscall of the ring buffer. That is, it
  will load the passed in buffer with the events where the
  kbuffer left off, and that passed in buffer can be loaded
  into another kbuffer via kbuffer_load_subbuffer().
  - kbuffer_dup() - Create a new kbuffer with the same fields of an
  existing kbuffer. This will allow traversing a subbuffer
  without modifying the contents of another kbuffer that
  points to the subbuffer.
  - kbuffer_subbuffer() - Return the subbuffer that was loaded into
  a kbuffer via kbuffer_load_subbuffer().
  - kbuffer_refresh() - In the case of the subbuffer that was loaded
  into a kbuffer via kbuffer_load_subbuffer() that is still
  active, this function will refresh the meta data to continue
  reading events if more were written to it.
  - Added tep_get_sub_buffer_data_size() helper function
  * Updates:
  - Add option to disable building documents for some environments
    that do not have everything needed to build the documents to
    not fail the build with meson.
  - Bump meson version required to build to 0.58.0 as plugins use
    str.replace that was introduced in that version.
  - Have the sched_switch plugin parse the format field to figure out
    what the correct mapping of the "prev_state" field is to produce
    the proper string output.
  * Fixes:
  - Update the default sched_switch "prev_state" string array to match
    what's been in the kernel for a while now.
  - Fix tep_kbuffer() to fill in the long_size, otherwise it would default
    to 32 bit longs and cause a lot of confusion to application developers
  - Fix tep_kbuffer man page info
  - Fix some meson dependency issues
  - Fix kbuffer_read_buffer() timestamp being off in some cases
  - Fix curr size in kbuffer_refresh()</changelog>
  <changelog author="dmueller@suse.com" date="1725105600">- update to 1.8.3:
  * Fix a double free in process_op()
  * Do not return a local stack pointer in get_field_str()
  * prevent a memory leak in tep_plugin_add_option()
  * Prevent a memory leak in process_fields()
  * Close shared object in the error path of load_plugin()
  * Avoid a simple asprintf case
  * Fix event-parse memory leak in process_cond
  * Have single quotes represent characters
  * Fix tests running on big endian arch</changelog>
  <changelog author="dmueller@suse.com" date="1743336000">- update to 1.8.4:
  * Have sizeof() parsing handle u8/s8 through u64/s64
  * Print arrays like Linux does
  * Print function pointer address when TEP_EVENT_FL_PRINTRAW is specified</changelog>
</package>
<package pkgid="c3bd7b67855a8585c3f8997975430bd29f6be06178420c2a6a80e6ed2365ce97" name="libtracefs" arch="src">
  <version epoch="0" ver="1.8.2" rel="150500.11.6.1"/>
  <changelog author="jengelh@inai.de" date="1608638400">- Initial package (version 1.0.0) for build.opensuse.org
- Add 294319.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1620648000">- update to new upstream version (1.1.2)
- drop patch 294319.patch (already present upstream)</changelog>
  <changelog author="dfaggioli@suse.com" date="1620993600">- Update to new upstream version (1.2.0)
  * No changelog was provided by upstream.
  * libtracefs: Add tracefs_event_enable/disable() API</changelog>
  <changelog author="dfaggioli@suse.com" date="1642593600">- Update to latest upstream version (1.2.5)
  * No changelog provided again</changelog>
  <changelog author="olaf@aepfle.de" date="1645531200">- Force correct pkgconfig_dir location to fix build</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649160000">- Update to latest upstream version (1.3.1)
  * Optimized string list handling. It was always stated that some string
    lists must be freed with tracefs_list_free(), and now it is mandatory, as
    metadata is used to store the size, and normal freeing of the list will
    cause memory issues.
  * More consistency with errno values
  * sqlhist is now officially built
  * New methods for setting and reading affinity
    tracefs_instance_set_affinity_set()
    tracefs_instance_set_affinity_raw()
    tracefs_instance_set_affinity()
    tracefs_instance_get_affinity()
    tracefs_instance_get_affinity_raw()
    tracefs_instance_get_affinity_set()
  * New method to see the system tracers
    tracefs_instances()
  * New methods to read and clear the error log
    tracefs_error_last()
    tracefs_error_all()
    tracefs_error_clear()
  * New methods to modify the string lists
    tracefs_list_add()
    tracefs_list_size()
  * New method to stop the iterator over raw events
    tracefs_iterate_stop()
  * New methods to make it easier to access event files
    tracefs_event_get_file()
    tracefs_event_file_read()
    tracefs_event_file_write()
    tracefs_event_file_append()
    tracefs_event_file_clear()
    tracefs_event_file_exists()
  * New method to get the available filter functions
    tracefs_filter_functions()
  * New methods to enable or disable tracers
    tracefs_tracer_set()
    tracefs_tracer_clear()
  * New methods for streaming the trace_pipe file
    tracefs_trace_pipe_stream()
    tracefs_trace_pipe_print()
    tracefs_trace_pipe_stop()
  * New methods for creating, modifying and destroying dynamic events
    tracefs_dynevent_create()
    tracefs_dynevent_destroy()
    tracefs_dynevent_destroy_all()
    tracefs_dynevent_free()
    tracefs_dynevent_list_free()
    tracefs_dynevent_get_all()
    tracefs_dynevent_get()
    tracefs_dynevent_info()
    tracefs_dynevent_get_event()
  * New method to create an event probe (then use dynamic methods above)
    tracefs_eprobe_alloc()
  * New methods to create kprobes and kretprobes
    tracefs_kprobe_alloc()
    tracefs_kretprobe_alloc()
    tracefs_kprobe_raw()
    tracefs_kretprobe_raw()
  * New methods for creating, modifying and destroying histograms
    tracefs_hist_free()
    tracefs_hist_alloc()
    tracefs_hist_alloc_2d()
    tracefs_hist_alloc_nd()
    tracefs_hist_get_name()
    tracefs_hist_get_event()
    tracefs_hist_get_system()
    tracefs_hist_add_key()
    tracefs_hist_add_value()
    tracefs_hist_add_sort_key()
    tracefs_hist_set_sort_key()
    tracefs_hist_sort_key_direction()
    tracefs_hist_add_name()
    tracefs_hist_append_filter()
    tracefs_hist_echo_cmd()
    tracefs_hist_command()
    tracefs_hist_start()
    tracefs_hist_pause()
    tracefs_hist_continue()
    tracefs_hist_reset()
    tracefs_hist_destroy()
  * New methods for creating, modifying and destroying synthetic events
    tracefs_synth_get_name()
    tracefs_synth *tracefs_synth_alloc()
    tracefs_synth_add_match_field()
    tracefs_synth_add_compare_field()
    tracefs_synth_add_start_field()
    tracefs_synth_add_end_field()
    tracefs_synth_append_start_filter()
    tracefs_synth_append_end_filter()
    tracefs_synth_trace()
    tracefs_synth_snapshot()
    tracefs_synth_save()
    tracefs_synth_complete()
    tracefs_synth_get_start_hist()
    tracefs_synth_create()
    tracefs_synth_destroy()
    tracefs_synth_free()
    tracefs_synth_echo_cmd()
    tracefs_synth_raw_fmt()
    tracefs_synth_show_event()
    tracefs_synth_show_start_hist()
    tracefs_synth_show_end_hist()
    tracefs_synth_get_event()
  * New methods to modify event filters
    tracefs_filter_string_append()
    tracefs_filter_string_verify()
    tracefs_event_filter_apply()
    tracefs_event_filter_clear()
    tracefs_event_append_filter()
    tracefs_event_verify_filter()
  * New method to create a synthetic event via a SQL string
    tracefs_sql()
    The man page comes with its own program (sqlhist).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1654603200">- Update to latest upstream version (1.4.1)
  * Raw uprobe API: tracefs_uprobe_alloc(), tracefs_uretprobe_alloc
  * Return the debugfs mount point from tracefs_debug_dir()
  * sqlhst: Fix labels being ignored for synthetic event field
  * sqlhst: Allow same event to be both the start and end event
  * sqlhst: Use unique names for labels
  * sqlhst: Report errors when executing commands</changelog>
  <changelog author="jengelh@inai.de" date="1655812800">- Force make -j1 during build because of object file corruption.</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 1.4.2
  * Build fixes only (parallel build, musl support)</changelog>
  <changelog author="jengelh@inai.de" date="1668600000">- Update to release 1.6.0
  * No changelog provided by upstream
  * A set of new API functions</changelog>
  <changelog author="jengelh@inai.de" date="1669377600">- Update to release 1.6.1
  * Fix tracefs_iterate_raw_events() to handle NULL callback</changelog>
  <changelog author="jengelh@inai.de" date="1671192000">- Update to release 1.6.3
  * Fix a regression of where tracefs_tracing_dir() did not mount
    the tracefs file system if it was not already mounted.
    Same for mounting debugfs with tracefs_debug_dir().
  * Have tracefs_tracing_dir() and tracefs_debug_dir() check if the
    cached directory still exists and is mounted.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1672142400">- Use meson to build package
  * add 0001-libtracefs-Add-initial-support-for-meson.patch</changelog>
  <changelog author="dmueller@suse.com" date="1674043200">- update to 1.6.4:
  * Flush pipe data in tracefs_cpu_flush()
  * Add check for duplicate functions in man pages
  * Make sure 32 bit works on 64 bit file systems</changelog>
  <changelog author="daniel.wagner@suse.com" date="1675771200">- Sync meson build patch with latest upstream version
  * Documentation is built via extra build target</changelog>
  <changelog author="tonyj@suse.com" date="1686830400">- Update to version 1.7.0
  * Add initial support for meson
  * Add tracefs_kprobe_destroy() to index man page
  * State that tracefs_dynevent_create() is needed for tracefs_kprobe_alloc()
  * Add missing prototypes in top level man page
  * Add tracefs_kprobe_destory() API
  * Add helper function to destroy dynamic event
  * Add tracefs_time_conversion() API
  * Add tracefs_find_cid_pid() API
  * Fix crashing of synth test when synths exist
  * Do not use synth for test_synth element
  * Clarify the tracefs_synth_create() man page
  * Do not allow tracefs_synth_set_instance() on created synth
  * Documentation for tracefs_synth_set_instance
  * New API to set synthetic event instance
  * Do not segfault in tests if synthetic events are not configured
  * Add tracefs_instance_tracers() API
  * Do not use hwlat tracer and fdb_delete event for test
  * Add stacktrace to tracefs_sql()
  * Unit test for tracefs_instance_reset()
  * Documentation for tracefs_instance_reset()
  * New API to reset ftrace instance
- Drop patch 0001-libtracefs-Add-initial-support-for-meson.patch (upstream)</changelog>
  <changelog author="tonyj@suse.com" date="1686830401">- Add explicit thread dependency for older versions of meson (i.e SLE-15-SP5)
  New patch: add-explicit-meson-thread-dependency.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1718625600">- Update to v1.8.0
  * remove: add-explicit-meson-thread-dependency.patch
  * tracefs_follow_event_clear() and tracefs_follow_missed_events_clear()
    API to clean up followers if the tracefs instance is going to be used
    for other iterations
  * tracefs_instance_file_write_number()
    A simple helper function to make it easier to write numbers into the
    tracefs files. It does the conversion from number to string, as the
    files expect strings and not numbers.
  * Add API to work with kbuffer, which gives more control to the application
    and speeds it up:
    tracefs_cpu_read_buf()
    tracefs_cpu_buffered_read_buf()
    tracefs_cpu_flush_buf()
  * tracefs_instance_get_buffer_percent() and tracefs_instance_set_buffer_percent()
    Modify the buffer_percent file that allows readers to block until the buffer
    is filled to a given percent. This keeps the reader from causing events that
    will add noise to the trace.
  * tracefs_instance_clear()
    Helper to clear the contents of the current trace instance.
  * tep_get_sub_buffer_data_size()
    Helper to retrieve the current sub-buffer data size. The Linux kernel tracing
    ring buffer is broken up into smaller sub-buffers. This returns the size of
    the data portion of those sub-buffers (does not include the sub-buffer meta
    data).
  * tracefs_load_headers()
    API to just load the information about the sub-buffers and nothing more.
  * API to extract tracing ring buffer statistics
    tracefs_instance_get_stat()
    tracefs_instance_put_stat()
    tracefs_buffer_stat_entries()
    tracefs_buffer_stat_overrun()
    tracefs_buffer_stat_commit_overrun()
    tracefs_buffer_stat_bytes()
    tracefs_buffer_stat_event_timestamp()
    tracefs_buffer_stat_timestamp()
    tracefs_buffer_stat_dropped_events
  * tracefs_instance_set_subbuf_size() and tracefs_instance_get_subbuf_size()
    API to modify the sub-buffers size of the tracing ring buffer.
  * Added TIMESTAMP_DELTA and TIMESTAMP_DELTA_USECS to tracefs_sql() as a shortcut
    for (end.TIMESTAMP - start.TIMESTAMP) and (end.TIMESTAMP_USECS - start.TIMESTAMP_USECS)
    respectively
  * Add PID filtering API:
    tracefs_filter_pid_function()
  tracefs_filter_pid_events()
    tracefs_filter_pid_function_clear()
    tracefs_filter_pid_events_clear()
  * Added tracefs_cpu_snapshot_open() to read the raw data of snapshot buffers
  * Added snapshot functions:
    tracefs_snapshot_snap()
    tracefs_snapshot_clear()
    tracefs_snapshot_free()
  * Added ring buffer memory mapping APIs
    tracefs_cpu_open_mapped()
    tracefs_cpu_is_mapped()
    tracefs_mapped_is_supported()
    tracefs_cpu_map()
    tracefs_cpu_unmap()
  * Updates:
  - Increase pipe max size to max value when using splice.
  - Clear "max_graph_depth" on tracefs_instance_reset()
  - Add missing headers to syscall() and SYS_* defines
  - Add dependency fixes to meson build
  - Fix some documentation / man page issues
  - Fix memory leaks
  - Fix cscope rule
  - Fix issues in unit tests
  - Added many more unit tests</changelog>
  <changelog author="jengelh@inai.de" date="1722081600">- Update to release 1.8.1
  * Plug some memory leaks
- Delete 0001-libtracefs-meson-build-tracefs-mmap-by-default.patch
  (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1744891200">- Update to release 1.8.2
  * libtracefs: Have tracefs_instance_tracers() return instance
    tracers
  * libtrace: Fix memory leak in tracefs_cpu
  * libtracefs: Handle synthetic events with dynamic strings as
    fields</changelog>
</package>
<package pkgid="7c24271b4d1269b485f34448854a1d9c367c8c0d39086a9dc09da2a6ca0b10b7" name="libtracefs1" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="150500.11.6.1"/>
  <changelog author="jengelh@inai.de" date="1608638400">- Initial package (version 1.0.0) for build.opensuse.org
- Add 294319.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1620648000">- update to new upstream version (1.1.2)
- drop patch 294319.patch (already present upstream)</changelog>
  <changelog author="dfaggioli@suse.com" date="1620993600">- Update to new upstream version (1.2.0)
  * No changelog was provided by upstream.
  * libtracefs: Add tracefs_event_enable/disable() API</changelog>
  <changelog author="dfaggioli@suse.com" date="1642593600">- Update to latest upstream version (1.2.5)
  * No changelog provided again</changelog>
  <changelog author="olaf@aepfle.de" date="1645531200">- Force correct pkgconfig_dir location to fix build</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649160000">- Update to latest upstream version (1.3.1)
  * Optimized string list handling. It was always stated that some string
    lists must be freed with tracefs_list_free(), and now it is mandatory, as
    metadata is used to store the size, and normal freeing of the list will
    cause memory issues.
  * More consistency with errno values
  * sqlhist is now officially built
  * New methods for setting and reading affinity
    tracefs_instance_set_affinity_set()
    tracefs_instance_set_affinity_raw()
    tracefs_instance_set_affinity()
    tracefs_instance_get_affinity()
    tracefs_instance_get_affinity_raw()
    tracefs_instance_get_affinity_set()
  * New method to see the system tracers
    tracefs_instances()
  * New methods to read and clear the error log
    tracefs_error_last()
    tracefs_error_all()
    tracefs_error_clear()
  * New methods to modify the string lists
    tracefs_list_add()
    tracefs_list_size()
  * New method to stop the iterator over raw events
    tracefs_iterate_stop()
  * New methods to make it easier to access event files
    tracefs_event_get_file()
    tracefs_event_file_read()
    tracefs_event_file_write()
    tracefs_event_file_append()
    tracefs_event_file_clear()
    tracefs_event_file_exists()
  * New method to get the available filter functions
    tracefs_filter_functions()
  * New methods to enable or disable tracers
    tracefs_tracer_set()
    tracefs_tracer_clear()
  * New methods for streaming the trace_pipe file
    tracefs_trace_pipe_stream()
    tracefs_trace_pipe_print()
    tracefs_trace_pipe_stop()
  * New methods for creating, modifying and destroying dynamic events
    tracefs_dynevent_create()
    tracefs_dynevent_destroy()
    tracefs_dynevent_destroy_all()
    tracefs_dynevent_free()
    tracefs_dynevent_list_free()
    tracefs_dynevent_get_all()
    tracefs_dynevent_get()
    tracefs_dynevent_info()
    tracefs_dynevent_get_event()
  * New method to create an event probe (then use dynamic methods above)
    tracefs_eprobe_alloc()
  * New methods to create kprobes and kretprobes
    tracefs_kprobe_alloc()
    tracefs_kretprobe_alloc()
    tracefs_kprobe_raw()
    tracefs_kretprobe_raw()
  * New methods for creating, modifying and destroying histograms
    tracefs_hist_free()
    tracefs_hist_alloc()
    tracefs_hist_alloc_2d()
    tracefs_hist_alloc_nd()
    tracefs_hist_get_name()
    tracefs_hist_get_event()
    tracefs_hist_get_system()
    tracefs_hist_add_key()
    tracefs_hist_add_value()
    tracefs_hist_add_sort_key()
    tracefs_hist_set_sort_key()
    tracefs_hist_sort_key_direction()
    tracefs_hist_add_name()
    tracefs_hist_append_filter()
    tracefs_hist_echo_cmd()
    tracefs_hist_command()
    tracefs_hist_start()
    tracefs_hist_pause()
    tracefs_hist_continue()
    tracefs_hist_reset()
    tracefs_hist_destroy()
  * New methods for creating, modifying and destroying synthetic events
    tracefs_synth_get_name()
    tracefs_synth *tracefs_synth_alloc()
    tracefs_synth_add_match_field()
    tracefs_synth_add_compare_field()
    tracefs_synth_add_start_field()
    tracefs_synth_add_end_field()
    tracefs_synth_append_start_filter()
    tracefs_synth_append_end_filter()
    tracefs_synth_trace()
    tracefs_synth_snapshot()
    tracefs_synth_save()
    tracefs_synth_complete()
    tracefs_synth_get_start_hist()
    tracefs_synth_create()
    tracefs_synth_destroy()
    tracefs_synth_free()
    tracefs_synth_echo_cmd()
    tracefs_synth_raw_fmt()
    tracefs_synth_show_event()
    tracefs_synth_show_start_hist()
    tracefs_synth_show_end_hist()
    tracefs_synth_get_event()
  * New methods to modify event filters
    tracefs_filter_string_append()
    tracefs_filter_string_verify()
    tracefs_event_filter_apply()
    tracefs_event_filter_clear()
    tracefs_event_append_filter()
    tracefs_event_verify_filter()
  * New method to create a synthetic event via a SQL string
    tracefs_sql()
    The man page comes with its own program (sqlhist).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1654603200">- Update to latest upstream version (1.4.1)
  * Raw uprobe API: tracefs_uprobe_alloc(), tracefs_uretprobe_alloc
  * Return the debugfs mount point from tracefs_debug_dir()
  * sqlhst: Fix labels being ignored for synthetic event field
  * sqlhst: Allow same event to be both the start and end event
  * sqlhst: Use unique names for labels
  * sqlhst: Report errors when executing commands</changelog>
  <changelog author="jengelh@inai.de" date="1655812800">- Force make -j1 during build because of object file corruption.</changelog>
  <changelog author="jengelh@inai.de" date="1661774400">- Update to release 1.4.2
  * Build fixes only (parallel build, musl support)</changelog>
  <changelog author="jengelh@inai.de" date="1668600000">- Update to release 1.6.0
  * No changelog provided by upstream
  * A set of new API functions</changelog>
  <changelog author="jengelh@inai.de" date="1669377600">- Update to release 1.6.1
  * Fix tracefs_iterate_raw_events() to handle NULL callback</changelog>
  <changelog author="jengelh@inai.de" date="1671192000">- Update to release 1.6.3
  * Fix a regression of where tracefs_tracing_dir() did not mount
    the tracefs file system if it was not already mounted.
    Same for mounting debugfs with tracefs_debug_dir().
  * Have tracefs_tracing_dir() and tracefs_debug_dir() check if the
    cached directory still exists and is mounted.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1672142400">- Use meson to build package
  * add 0001-libtracefs-Add-initial-support-for-meson.patch</changelog>
  <changelog author="dmueller@suse.com" date="1674043200">- update to 1.6.4:
  * Flush pipe data in tracefs_cpu_flush()
  * Add check for duplicate functions in man pages
  * Make sure 32 bit works on 64 bit file systems</changelog>
  <changelog author="daniel.wagner@suse.com" date="1675771200">- Sync meson build patch with latest upstream version
  * Documentation is built via extra build target</changelog>
  <changelog author="tonyj@suse.com" date="1686830400">- Update to version 1.7.0
  * Add initial support for meson
  * Add tracefs_kprobe_destroy() to index man page
  * State that tracefs_dynevent_create() is needed for tracefs_kprobe_alloc()
  * Add missing prototypes in top level man page
  * Add tracefs_kprobe_destory() API
  * Add helper function to destroy dynamic event
  * Add tracefs_time_conversion() API
  * Add tracefs_find_cid_pid() API
  * Fix crashing of synth test when synths exist
  * Do not use synth for test_synth element
  * Clarify the tracefs_synth_create() man page
  * Do not allow tracefs_synth_set_instance() on created synth
  * Documentation for tracefs_synth_set_instance
  * New API to set synthetic event instance
  * Do not segfault in tests if synthetic events are not configured
  * Add tracefs_instance_tracers() API
  * Do not use hwlat tracer and fdb_delete event for test
  * Add stacktrace to tracefs_sql()
  * Unit test for tracefs_instance_reset()
  * Documentation for tracefs_instance_reset()
  * New API to reset ftrace instance
- Drop patch 0001-libtracefs-Add-initial-support-for-meson.patch (upstream)</changelog>
  <changelog author="tonyj@suse.com" date="1686830401">- Add explicit thread dependency for older versions of meson (i.e SLE-15-SP5)
  New patch: add-explicit-meson-thread-dependency.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1718625600">- Update to v1.8.0
  * remove: add-explicit-meson-thread-dependency.patch
  * tracefs_follow_event_clear() and tracefs_follow_missed_events_clear()
    API to clean up followers if the tracefs instance is going to be used
    for other iterations
  * tracefs_instance_file_write_number()
    A simple helper function to make it easier to write numbers into the
    tracefs files. It does the conversion from number to string, as the
    files expect strings and not numbers.
  * Add API to work with kbuffer, which gives more control to the application
    and speeds it up:
    tracefs_cpu_read_buf()
    tracefs_cpu_buffered_read_buf()
    tracefs_cpu_flush_buf()
  * tracefs_instance_get_buffer_percent() and tracefs_instance_set_buffer_percent()
    Modify the buffer_percent file that allows readers to block until the buffer
    is filled to a given percent. This keeps the reader from causing events that
    will add noise to the trace.
  * tracefs_instance_clear()
    Helper to clear the contents of the current trace instance.
  * tep_get_sub_buffer_data_size()
    Helper to retrieve the current sub-buffer data size. The Linux kernel tracing
    ring buffer is broken up into smaller sub-buffers. This returns the size of
    the data portion of those sub-buffers (does not include the sub-buffer meta
    data).
  * tracefs_load_headers()
    API to just load the information about the sub-buffers and nothing more.
  * API to extract tracing ring buffer statistics
    tracefs_instance_get_stat()
    tracefs_instance_put_stat()
    tracefs_buffer_stat_entries()
    tracefs_buffer_stat_overrun()
    tracefs_buffer_stat_commit_overrun()
    tracefs_buffer_stat_bytes()
    tracefs_buffer_stat_event_timestamp()
    tracefs_buffer_stat_timestamp()
    tracefs_buffer_stat_dropped_events
  * tracefs_instance_set_subbuf_size() and tracefs_instance_get_subbuf_size()
    API to modify the sub-buffers size of the tracing ring buffer.
  * Added TIMESTAMP_DELTA and TIMESTAMP_DELTA_USECS to tracefs_sql() as a shortcut
    for (end.TIMESTAMP - start.TIMESTAMP) and (end.TIMESTAMP_USECS - start.TIMESTAMP_USECS)
    respectively
  * Add PID filtering API:
    tracefs_filter_pid_function()
  tracefs_filter_pid_events()
    tracefs_filter_pid_function_clear()
    tracefs_filter_pid_events_clear()
  * Added tracefs_cpu_snapshot_open() to read the raw data of snapshot buffers
  * Added snapshot functions:
    tracefs_snapshot_snap()
    tracefs_snapshot_clear()
    tracefs_snapshot_free()
  * Added ring buffer memory mapping APIs
    tracefs_cpu_open_mapped()
    tracefs_cpu_is_mapped()
    tracefs_mapped_is_supported()
    tracefs_cpu_map()
    tracefs_cpu_unmap()
  * Updates:
  - Increase pipe max size to max value when using splice.
  - Clear "max_graph_depth" on tracefs_instance_reset()
  - Add missing headers to syscall() and SYS_* defines
  - Add dependency fixes to meson build
  - Fix some documentation / man page issues
  - Fix memory leaks
  - Fix cscope rule
  - Fix issues in unit tests
  - Added many more unit tests</changelog>
  <changelog author="jengelh@inai.de" date="1722081600">- Update to release 1.8.1
  * Plug some memory leaks
- Delete 0001-libtracefs-meson-build-tracefs-mmap-by-default.patch
  (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1744891200">- Update to release 1.8.2
  * libtracefs: Have tracefs_instance_tracers() return instance
    tracers
  * libtrace: Fix memory leak in tracefs_cpu
  * libtracefs: Handle synthetic events with dynamic strings as
    fields</changelog>
</package>
<package pkgid="1aaa190022070ba9bae4a273a243c2b8c6f1d84c3004ee493b2166fb977da256" name="libtsan2" arch="x86_64">
  <version epoch="0" ver="14.3.0+git11799" rel="150000.1.11.1"/>
  <changelog author="rguenther@suse.com" date="1728475200">- Update to gcc-14 branch head, 4af44f2cf7d281f3e4f3957ef, git10750
  * includes libstdc++6 fix for parsing tzdata 2024b [gcc#116657]
- Add gcc14-pr116629.patch to fix ICE with LTO building openvino
  on aarch64 [boo#1230262]</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1732968000">- Add loongarch64 to asan_arch, atomic_arch,
  itm_arch, lsan_arch, tsan_arch and ubsan_arch
- Add larchintrin.h, lasxintrin.h and lsxintrin.h
  headers to gccXY main package in %files section
- Set build_primary_64bit to 1 for loongarch64</changelog>
  <changelog author="adrian@suse.de" date="1733140800">- disable go on loongarch64 for now</changelog>
  <changelog author="mardnh@gmx.de" date="1736078400">- Switch to glibc based cross-compiler for target hppa</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Define ALT_CC_UNDER_TEST and ALT_CXX_UNDER_TEST for compat tests</changelog>
  <changelog author="rguenther@suse.com" date="1738152000">- For cross compilers require the same or newer binutils, newlib
  or cross-glibc that was used at build time.  [bsc#1232526]</changelog>
  <changelog author="rguenther@suse.com" date="1738843200">- Adjust cross compiler requirements to use %requires_ge
- Fix condition on whether to enable plugins or JIT support to
  not check sle_version which is not defined in SLFO but to check
  is_opensuse and suse_version instead.
- Add gcc14-pr118780.patch to make the SLFO config work.</changelog>
  <changelog author="rguenther@suse.com" date="1740052800">- Update to gcc-14 branch head, 9ffecde121af883b60bbe60d0, git11321
  * fixes reported ICE in [bsc#1237442]
- Drop gcc14-pr116629.patch now backported to the branch.</changelog>
  <changelog author="rguenther@suse.com" date="1741608000">- Disable profiling during build when %want_reproducible_builds is set
  [bsc#1238491]</changelog>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
</package>
<package pkgid="bac701317521f969e49167bc56eb3ee7b91ea85c99ac5f0c47d79fa785bfe4d9" name="libtsan2" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.3.3"/>
  <changelog author="rguenther@suse.com" date="1743163200">- Update to GCC trunk head, 15.0.1+git9001
  * includes -msplit-patch-nops required for user-space livepatching
    on powerpc
  * includes fix for Ada build with --enable-host-pie
- Adjust for removed avx10_2roundingintrin.h intrinsic header.
- Build GCC executables PIE on SLE.  [bsc#1239938]</changelog>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="f72a7378481c835705b03069f4c8a32a331bb2fa5fc5926bdd37ed19ade523cf" name="libtsan2" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.6.1"/>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
</package>
<package pkgid="4f487b7e013e75af5953bb7afd582520f5e60a0d880a59e41ae845ce1f3a581e" name="libtsan2" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.9.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc14-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="a81be4f017f324630a9d439517d99fef0763ba30b9ee91a18216631ce1629e37" name="libtss2-esys0" arch="x86_64">
  <version epoch="0" ver="3.1.1" rel="150600.4.3.2"/>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="aplanas@suse.com" date="1710936000">- Update to 3.1.1
  * Fixed file descriptor leak when tcti initialization failed.
  * Primary key creation, in some cases the unique field was not
    cleared before calling create primary.
  * Primary keys was used for signing the object were cleared after
    loading. So access e.g. to the certificate did not work.
  * Primary keys created with Fapi_Create with an auth value, the
    auth_value was not used in inSensitive to recreate the primary
    key. Now the auth value callback is used to initialize
    inSensitive.
  * The not possible usage of policies for primary keys generated with
    Fapi_CreatePrimary has been fixed.
  * An infinite loop when parsing erroneous JSON was fixed in FAPI.
  * A buffer overflow in ESAPI xor parameter obfuscation was fixed.
  * Certificates could be read only once in one application The
    setting the init state of the state automaton for getting
    certificates was fixed.
  * A double free when executing policy action was fixed.
  * A leak in Fapi_Quote was fixed.
  * The wrong file locking in FAPI IO was fixed.
  * One fapi integration test did change the auth value of the storage
    hierarchy.
  * Fix test of FAPI PCR
  * Fix leaks in error cases of integration tests
  * Fix segfault when ESYS_TR_NONE is passed to Esys_TR_GetName
  * Fix the authorization of hierarchy objects used in policy secret.
  * Fix check of qualifying data in Fapi_VerifyQuote.
  * Fix some leaks in FAPI error cases.
  * Fix usage of variable not initialized when fapi keystore is empty.
  * Add additional IFX root CAs
- Add 0001-Implement-EVP_PKEY-export-import-for-OpenSSL-3.0.patch
  (bsc#1221448)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1772020800">- add Requires to libtss2-fapi to pull in the tss user (bsc#1258720).
  Otherwise, when installing libtss2-fapi on its own, errors from
  systemd-tmpfiles can appear.</changelog>
</package>
<package pkgid="cfac2961ebbe91fcb737e831d4fb9bc0f64219fe529e91febf7d6ea6ce5d435f" name="libtss2-fapi1" arch="x86_64">
  <version epoch="0" ver="3.1.1" rel="150600.4.3.2"/>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="aplanas@suse.com" date="1710936000">- Update to 3.1.1
  * Fixed file descriptor leak when tcti initialization failed.
  * Primary key creation, in some cases the unique field was not
    cleared before calling create primary.
  * Primary keys was used for signing the object were cleared after
    loading. So access e.g. to the certificate did not work.
  * Primary keys created with Fapi_Create with an auth value, the
    auth_value was not used in inSensitive to recreate the primary
    key. Now the auth value callback is used to initialize
    inSensitive.
  * The not possible usage of policies for primary keys generated with
    Fapi_CreatePrimary has been fixed.
  * An infinite loop when parsing erroneous JSON was fixed in FAPI.
  * A buffer overflow in ESAPI xor parameter obfuscation was fixed.
  * Certificates could be read only once in one application The
    setting the init state of the state automaton for getting
    certificates was fixed.
  * A double free when executing policy action was fixed.
  * A leak in Fapi_Quote was fixed.
  * The wrong file locking in FAPI IO was fixed.
  * One fapi integration test did change the auth value of the storage
    hierarchy.
  * Fix test of FAPI PCR
  * Fix leaks in error cases of integration tests
  * Fix segfault when ESYS_TR_NONE is passed to Esys_TR_GetName
  * Fix the authorization of hierarchy objects used in policy secret.
  * Fix check of qualifying data in Fapi_VerifyQuote.
  * Fix some leaks in FAPI error cases.
  * Fix usage of variable not initialized when fapi keystore is empty.
  * Add additional IFX root CAs
- Add 0001-Implement-EVP_PKEY-export-import-for-OpenSSL-3.0.patch
  (bsc#1221448)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1772020800">- add Requires to libtss2-fapi to pull in the tss user (bsc#1258720).
  Otherwise, when installing libtss2-fapi on its own, errors from
  systemd-tmpfiles can appear.</changelog>
</package>
<package pkgid="6258e38d6b7cdbf3c5e01f7256f22e3b38baa87fd3136d155d120c4763a74e30" name="libtss2-mu0" arch="x86_64">
  <version epoch="0" ver="3.1.1" rel="150600.4.3.2"/>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="aplanas@suse.com" date="1710936000">- Update to 3.1.1
  * Fixed file descriptor leak when tcti initialization failed.
  * Primary key creation, in some cases the unique field was not
    cleared before calling create primary.
  * Primary keys was used for signing the object were cleared after
    loading. So access e.g. to the certificate did not work.
  * Primary keys created with Fapi_Create with an auth value, the
    auth_value was not used in inSensitive to recreate the primary
    key. Now the auth value callback is used to initialize
    inSensitive.
  * The not possible usage of policies for primary keys generated with
    Fapi_CreatePrimary has been fixed.
  * An infinite loop when parsing erroneous JSON was fixed in FAPI.
  * A buffer overflow in ESAPI xor parameter obfuscation was fixed.
  * Certificates could be read only once in one application The
    setting the init state of the state automaton for getting
    certificates was fixed.
  * A double free when executing policy action was fixed.
  * A leak in Fapi_Quote was fixed.
  * The wrong file locking in FAPI IO was fixed.
  * One fapi integration test did change the auth value of the storage
    hierarchy.
  * Fix test of FAPI PCR
  * Fix leaks in error cases of integration tests
  * Fix segfault when ESYS_TR_NONE is passed to Esys_TR_GetName
  * Fix the authorization of hierarchy objects used in policy secret.
  * Fix check of qualifying data in Fapi_VerifyQuote.
  * Fix some leaks in FAPI error cases.
  * Fix usage of variable not initialized when fapi keystore is empty.
  * Add additional IFX root CAs
- Add 0001-Implement-EVP_PKEY-export-import-for-OpenSSL-3.0.patch
  (bsc#1221448)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1772020800">- add Requires to libtss2-fapi to pull in the tss user (bsc#1258720).
  Otherwise, when installing libtss2-fapi on its own, errors from
  systemd-tmpfiles can appear.</changelog>
</package>
<package pkgid="b9d8b9eef27c426efe5ec658fd17038a4652ca9392772e302f581a524664a5f6" name="libtss2-rc0" arch="x86_64">
  <version epoch="0" ver="3.1.1" rel="150600.4.3.2"/>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="aplanas@suse.com" date="1710936000">- Update to 3.1.1
  * Fixed file descriptor leak when tcti initialization failed.
  * Primary key creation, in some cases the unique field was not
    cleared before calling create primary.
  * Primary keys was used for signing the object were cleared after
    loading. So access e.g. to the certificate did not work.
  * Primary keys created with Fapi_Create with an auth value, the
    auth_value was not used in inSensitive to recreate the primary
    key. Now the auth value callback is used to initialize
    inSensitive.
  * The not possible usage of policies for primary keys generated with
    Fapi_CreatePrimary has been fixed.
  * An infinite loop when parsing erroneous JSON was fixed in FAPI.
  * A buffer overflow in ESAPI xor parameter obfuscation was fixed.
  * Certificates could be read only once in one application The
    setting the init state of the state automaton for getting
    certificates was fixed.
  * A double free when executing policy action was fixed.
  * A leak in Fapi_Quote was fixed.
  * The wrong file locking in FAPI IO was fixed.
  * One fapi integration test did change the auth value of the storage
    hierarchy.
  * Fix test of FAPI PCR
  * Fix leaks in error cases of integration tests
  * Fix segfault when ESYS_TR_NONE is passed to Esys_TR_GetName
  * Fix the authorization of hierarchy objects used in policy secret.
  * Fix check of qualifying data in Fapi_VerifyQuote.
  * Fix some leaks in FAPI error cases.
  * Fix usage of variable not initialized when fapi keystore is empty.
  * Add additional IFX root CAs
- Add 0001-Implement-EVP_PKEY-export-import-for-OpenSSL-3.0.patch
  (bsc#1221448)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1772020800">- add Requires to libtss2-fapi to pull in the tss user (bsc#1258720).
  Otherwise, when installing libtss2-fapi on its own, errors from
  systemd-tmpfiles can appear.</changelog>
</package>
<package pkgid="5ecfdfada2fd922afef72c85d9603ead4b76299e2beffca2008a03206f79830d" name="libtss2-sys1" arch="x86_64">
  <version epoch="0" ver="3.1.1" rel="150600.4.3.2"/>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="aplanas@suse.com" date="1710936000">- Update to 3.1.1
  * Fixed file descriptor leak when tcti initialization failed.
  * Primary key creation, in some cases the unique field was not
    cleared before calling create primary.
  * Primary keys was used for signing the object were cleared after
    loading. So access e.g. to the certificate did not work.
  * Primary keys created with Fapi_Create with an auth value, the
    auth_value was not used in inSensitive to recreate the primary
    key. Now the auth value callback is used to initialize
    inSensitive.
  * The not possible usage of policies for primary keys generated with
    Fapi_CreatePrimary has been fixed.
  * An infinite loop when parsing erroneous JSON was fixed in FAPI.
  * A buffer overflow in ESAPI xor parameter obfuscation was fixed.
  * Certificates could be read only once in one application The
    setting the init state of the state automaton for getting
    certificates was fixed.
  * A double free when executing policy action was fixed.
  * A leak in Fapi_Quote was fixed.
  * The wrong file locking in FAPI IO was fixed.
  * One fapi integration test did change the auth value of the storage
    hierarchy.
  * Fix test of FAPI PCR
  * Fix leaks in error cases of integration tests
  * Fix segfault when ESYS_TR_NONE is passed to Esys_TR_GetName
  * Fix the authorization of hierarchy objects used in policy secret.
  * Fix check of qualifying data in Fapi_VerifyQuote.
  * Fix some leaks in FAPI error cases.
  * Fix usage of variable not initialized when fapi keystore is empty.
  * Add additional IFX root CAs
- Add 0001-Implement-EVP_PKEY-export-import-for-OpenSSL-3.0.patch
  (bsc#1221448)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1772020800">- add Requires to libtss2-fapi to pull in the tss user (bsc#1258720).
  Otherwise, when installing libtss2-fapi on its own, errors from
  systemd-tmpfiles can appear.</changelog>
</package>
<package pkgid="e5a9f12e5cf4e718a6bab0804c323283619142893de2111cd677d953e918f7a6" name="libtss2-tcti-cmd0" arch="x86_64">
  <version epoch="0" ver="3.1.1" rel="150600.4.3.2"/>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="aplanas@suse.com" date="1710936000">- Update to 3.1.1
  * Fixed file descriptor leak when tcti initialization failed.
  * Primary key creation, in some cases the unique field was not
    cleared before calling create primary.
  * Primary keys was used for signing the object were cleared after
    loading. So access e.g. to the certificate did not work.
  * Primary keys created with Fapi_Create with an auth value, the
    auth_value was not used in inSensitive to recreate the primary
    key. Now the auth value callback is used to initialize
    inSensitive.
  * The not possible usage of policies for primary keys generated with
    Fapi_CreatePrimary has been fixed.
  * An infinite loop when parsing erroneous JSON was fixed in FAPI.
  * A buffer overflow in ESAPI xor parameter obfuscation was fixed.
  * Certificates could be read only once in one application The
    setting the init state of the state automaton for getting
    certificates was fixed.
  * A double free when executing policy action was fixed.
  * A leak in Fapi_Quote was fixed.
  * The wrong file locking in FAPI IO was fixed.
  * One fapi integration test did change the auth value of the storage
    hierarchy.
  * Fix test of FAPI PCR
  * Fix leaks in error cases of integration tests
  * Fix segfault when ESYS_TR_NONE is passed to Esys_TR_GetName
  * Fix the authorization of hierarchy objects used in policy secret.
  * Fix check of qualifying data in Fapi_VerifyQuote.
  * Fix some leaks in FAPI error cases.
  * Fix usage of variable not initialized when fapi keystore is empty.
  * Add additional IFX root CAs
- Add 0001-Implement-EVP_PKEY-export-import-for-OpenSSL-3.0.patch
  (bsc#1221448)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1772020800">- add Requires to libtss2-fapi to pull in the tss user (bsc#1258720).
  Otherwise, when installing libtss2-fapi on its own, errors from
  systemd-tmpfiles can appear.</changelog>
</package>
<package pkgid="6614c86fc6bbc85610e2e4a7e385b9b0e81e773ae004b803101cab8d020a33b0" name="libtss2-tcti-device0" arch="x86_64">
  <version epoch="0" ver="3.1.1" rel="150600.4.3.2"/>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="aplanas@suse.com" date="1710936000">- Update to 3.1.1
  * Fixed file descriptor leak when tcti initialization failed.
  * Primary key creation, in some cases the unique field was not
    cleared before calling create primary.
  * Primary keys was used for signing the object were cleared after
    loading. So access e.g. to the certificate did not work.
  * Primary keys created with Fapi_Create with an auth value, the
    auth_value was not used in inSensitive to recreate the primary
    key. Now the auth value callback is used to initialize
    inSensitive.
  * The not possible usage of policies for primary keys generated with
    Fapi_CreatePrimary has been fixed.
  * An infinite loop when parsing erroneous JSON was fixed in FAPI.
  * A buffer overflow in ESAPI xor parameter obfuscation was fixed.
  * Certificates could be read only once in one application The
    setting the init state of the state automaton for getting
    certificates was fixed.
  * A double free when executing policy action was fixed.
  * A leak in Fapi_Quote was fixed.
  * The wrong file locking in FAPI IO was fixed.
  * One fapi integration test did change the auth value of the storage
    hierarchy.
  * Fix test of FAPI PCR
  * Fix leaks in error cases of integration tests
  * Fix segfault when ESYS_TR_NONE is passed to Esys_TR_GetName
  * Fix the authorization of hierarchy objects used in policy secret.
  * Fix check of qualifying data in Fapi_VerifyQuote.
  * Fix some leaks in FAPI error cases.
  * Fix usage of variable not initialized when fapi keystore is empty.
  * Add additional IFX root CAs
- Add 0001-Implement-EVP_PKEY-export-import-for-OpenSSL-3.0.patch
  (bsc#1221448)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1772020800">- add Requires to libtss2-fapi to pull in the tss user (bsc#1258720).
  Otherwise, when installing libtss2-fapi on its own, errors from
  systemd-tmpfiles can appear.</changelog>
</package>
<package pkgid="f6f596836205533cb823f1702ee928d4d39f0578f38a4dc1467199cd18737b70" name="libtss2-tcti-mssim0" arch="x86_64">
  <version epoch="0" ver="3.1.1" rel="150600.4.3.2"/>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="aplanas@suse.com" date="1710936000">- Update to 3.1.1
  * Fixed file descriptor leak when tcti initialization failed.
  * Primary key creation, in some cases the unique field was not
    cleared before calling create primary.
  * Primary keys was used for signing the object were cleared after
    loading. So access e.g. to the certificate did not work.
  * Primary keys created with Fapi_Create with an auth value, the
    auth_value was not used in inSensitive to recreate the primary
    key. Now the auth value callback is used to initialize
    inSensitive.
  * The not possible usage of policies for primary keys generated with
    Fapi_CreatePrimary has been fixed.
  * An infinite loop when parsing erroneous JSON was fixed in FAPI.
  * A buffer overflow in ESAPI xor parameter obfuscation was fixed.
  * Certificates could be read only once in one application The
    setting the init state of the state automaton for getting
    certificates was fixed.
  * A double free when executing policy action was fixed.
  * A leak in Fapi_Quote was fixed.
  * The wrong file locking in FAPI IO was fixed.
  * One fapi integration test did change the auth value of the storage
    hierarchy.
  * Fix test of FAPI PCR
  * Fix leaks in error cases of integration tests
  * Fix segfault when ESYS_TR_NONE is passed to Esys_TR_GetName
  * Fix the authorization of hierarchy objects used in policy secret.
  * Fix check of qualifying data in Fapi_VerifyQuote.
  * Fix some leaks in FAPI error cases.
  * Fix usage of variable not initialized when fapi keystore is empty.
  * Add additional IFX root CAs
- Add 0001-Implement-EVP_PKEY-export-import-for-OpenSSL-3.0.patch
  (bsc#1221448)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1772020800">- add Requires to libtss2-fapi to pull in the tss user (bsc#1258720).
  Otherwise, when installing libtss2-fapi on its own, errors from
  systemd-tmpfiles can appear.</changelog>
</package>
<package pkgid="94d994a3c0faea507a72a201d5880838f576c7fa5dd7ffa06bd030b091927680" name="libtss2-tcti-pcap0" arch="x86_64">
  <version epoch="0" ver="3.1.1" rel="150600.4.3.2"/>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="aplanas@suse.com" date="1710936000">- Update to 3.1.1
  * Fixed file descriptor leak when tcti initialization failed.
  * Primary key creation, in some cases the unique field was not
    cleared before calling create primary.
  * Primary keys was used for signing the object were cleared after
    loading. So access e.g. to the certificate did not work.
  * Primary keys created with Fapi_Create with an auth value, the
    auth_value was not used in inSensitive to recreate the primary
    key. Now the auth value callback is used to initialize
    inSensitive.
  * The not possible usage of policies for primary keys generated with
    Fapi_CreatePrimary has been fixed.
  * An infinite loop when parsing erroneous JSON was fixed in FAPI.
  * A buffer overflow in ESAPI xor parameter obfuscation was fixed.
  * Certificates could be read only once in one application The
    setting the init state of the state automaton for getting
    certificates was fixed.
  * A double free when executing policy action was fixed.
  * A leak in Fapi_Quote was fixed.
  * The wrong file locking in FAPI IO was fixed.
  * One fapi integration test did change the auth value of the storage
    hierarchy.
  * Fix test of FAPI PCR
  * Fix leaks in error cases of integration tests
  * Fix segfault when ESYS_TR_NONE is passed to Esys_TR_GetName
  * Fix the authorization of hierarchy objects used in policy secret.
  * Fix check of qualifying data in Fapi_VerifyQuote.
  * Fix some leaks in FAPI error cases.
  * Fix usage of variable not initialized when fapi keystore is empty.
  * Add additional IFX root CAs
- Add 0001-Implement-EVP_PKEY-export-import-for-OpenSSL-3.0.patch
  (bsc#1221448)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1772020800">- add Requires to libtss2-fapi to pull in the tss user (bsc#1258720).
  Otherwise, when installing libtss2-fapi on its own, errors from
  systemd-tmpfiles can appear.</changelog>
</package>
<package pkgid="0c6c4dec53257a3c3612a787753444975be94ac61740e4d7c9cac3811973602b" name="libtss2-tcti-swtpm0" arch="x86_64">
  <version epoch="0" ver="3.1.1" rel="150600.4.3.2"/>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="aplanas@suse.com" date="1710936000">- Update to 3.1.1
  * Fixed file descriptor leak when tcti initialization failed.
  * Primary key creation, in some cases the unique field was not
    cleared before calling create primary.
  * Primary keys was used for signing the object were cleared after
    loading. So access e.g. to the certificate did not work.
  * Primary keys created with Fapi_Create with an auth value, the
    auth_value was not used in inSensitive to recreate the primary
    key. Now the auth value callback is used to initialize
    inSensitive.
  * The not possible usage of policies for primary keys generated with
    Fapi_CreatePrimary has been fixed.
  * An infinite loop when parsing erroneous JSON was fixed in FAPI.
  * A buffer overflow in ESAPI xor parameter obfuscation was fixed.
  * Certificates could be read only once in one application The
    setting the init state of the state automaton for getting
    certificates was fixed.
  * A double free when executing policy action was fixed.
  * A leak in Fapi_Quote was fixed.
  * The wrong file locking in FAPI IO was fixed.
  * One fapi integration test did change the auth value of the storage
    hierarchy.
  * Fix test of FAPI PCR
  * Fix leaks in error cases of integration tests
  * Fix segfault when ESYS_TR_NONE is passed to Esys_TR_GetName
  * Fix the authorization of hierarchy objects used in policy secret.
  * Fix check of qualifying data in Fapi_VerifyQuote.
  * Fix some leaks in FAPI error cases.
  * Fix usage of variable not initialized when fapi keystore is empty.
  * Add additional IFX root CAs
- Add 0001-Implement-EVP_PKEY-export-import-for-OpenSSL-3.0.patch
  (bsc#1221448)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1772020800">- add Requires to libtss2-fapi to pull in the tss user (bsc#1258720).
  Otherwise, when installing libtss2-fapi on its own, errors from
  systemd-tmpfiles can appear.</changelog>
</package>
<package pkgid="e03e4467b71e693ba5be57d7ac2a2d5b7a57a5efb8474deb975b8a8ba5c4e2af" name="libtss2-tctildr0" arch="x86_64">
  <version epoch="0" ver="3.1.1" rel="150600.4.3.2"/>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="aplanas@suse.com" date="1710936000">- Update to 3.1.1
  * Fixed file descriptor leak when tcti initialization failed.
  * Primary key creation, in some cases the unique field was not
    cleared before calling create primary.
  * Primary keys was used for signing the object were cleared after
    loading. So access e.g. to the certificate did not work.
  * Primary keys created with Fapi_Create with an auth value, the
    auth_value was not used in inSensitive to recreate the primary
    key. Now the auth value callback is used to initialize
    inSensitive.
  * The not possible usage of policies for primary keys generated with
    Fapi_CreatePrimary has been fixed.
  * An infinite loop when parsing erroneous JSON was fixed in FAPI.
  * A buffer overflow in ESAPI xor parameter obfuscation was fixed.
  * Certificates could be read only once in one application The
    setting the init state of the state automaton for getting
    certificates was fixed.
  * A double free when executing policy action was fixed.
  * A leak in Fapi_Quote was fixed.
  * The wrong file locking in FAPI IO was fixed.
  * One fapi integration test did change the auth value of the storage
    hierarchy.
  * Fix test of FAPI PCR
  * Fix leaks in error cases of integration tests
  * Fix segfault when ESYS_TR_NONE is passed to Esys_TR_GetName
  * Fix the authorization of hierarchy objects used in policy secret.
  * Fix check of qualifying data in Fapi_VerifyQuote.
  * Fix some leaks in FAPI error cases.
  * Fix usage of variable not initialized when fapi keystore is empty.
  * Add additional IFX root CAs
- Add 0001-Implement-EVP_PKEY-export-import-for-OpenSSL-3.0.patch
  (bsc#1221448)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1772020800">- add Requires to libtss2-fapi to pull in the tss user (bsc#1258720).
  Otherwise, when installing libtss2-fapi on its own, errors from
  systemd-tmpfiles can appear.</changelog>
</package>
<package pkgid="9ff3645ce0ccc7f52e0a40110dd6373c4caf2179127cb02c3a30ce2a8f2c442a" name="libubsan1" arch="x86_64">
  <version epoch="0" ver="14.3.0+git11799" rel="150000.1.11.1"/>
  <changelog author="rguenther@suse.com" date="1728475200">- Update to gcc-14 branch head, 4af44f2cf7d281f3e4f3957ef, git10750
  * includes libstdc++6 fix for parsing tzdata 2024b [gcc#116657]
- Add gcc14-pr116629.patch to fix ICE with LTO building openvino
  on aarch64 [boo#1230262]</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1732968000">- Add loongarch64 to asan_arch, atomic_arch,
  itm_arch, lsan_arch, tsan_arch and ubsan_arch
- Add larchintrin.h, lasxintrin.h and lsxintrin.h
  headers to gccXY main package in %files section
- Set build_primary_64bit to 1 for loongarch64</changelog>
  <changelog author="adrian@suse.de" date="1733140800">- disable go on loongarch64 for now</changelog>
  <changelog author="mardnh@gmx.de" date="1736078400">- Switch to glibc based cross-compiler for target hppa</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Define ALT_CC_UNDER_TEST and ALT_CXX_UNDER_TEST for compat tests</changelog>
  <changelog author="rguenther@suse.com" date="1738152000">- For cross compilers require the same or newer binutils, newlib
  or cross-glibc that was used at build time.  [bsc#1232526]</changelog>
  <changelog author="rguenther@suse.com" date="1738843200">- Adjust cross compiler requirements to use %requires_ge
- Fix condition on whether to enable plugins or JIT support to
  not check sle_version which is not defined in SLFO but to check
  is_opensuse and suse_version instead.
- Add gcc14-pr118780.patch to make the SLFO config work.</changelog>
  <changelog author="rguenther@suse.com" date="1740052800">- Update to gcc-14 branch head, 9ffecde121af883b60bbe60d0, git11321
  * fixes reported ICE in [bsc#1237442]
- Drop gcc14-pr116629.patch now backported to the branch.</changelog>
  <changelog author="rguenther@suse.com" date="1741608000">- Disable profiling during build when %want_reproducible_builds is set
  [bsc#1238491]</changelog>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
</package>
<package pkgid="c751a9ff7f6ac9370ae343250295be389a50e6977df859c2389f5f714ff2f83b" name="libubsan1" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.3.3"/>
  <changelog author="rguenther@suse.com" date="1743163200">- Update to GCC trunk head, 15.0.1+git9001
  * includes -msplit-patch-nops required for user-space livepatching
    on powerpc
  * includes fix for Ada build with --enable-host-pie
- Adjust for removed avx10_2roundingintrin.h intrinsic header.
- Build GCC executables PIE on SLE.  [bsc#1239938]</changelog>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="9623224ee769d056f5bbbb93194bec0b932e6d2242d4452184979dcead9c7695" name="libubsan1" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.6.1"/>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
</package>
<package pkgid="e4c921fc8acb733f78a9dfca66c5a4d9bba54f739b075bf501f3586602ec4ee5" name="libubsan1" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.9.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc14-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="73e349167e4831e967ac7b6f4beb23de0898d730823334e9ad44f86ec7690497" name="libubsan1-32bit" arch="x86_64">
  <version epoch="0" ver="14.3.0+git11799" rel="150000.1.11.1"/>
  <changelog author="rguenther@suse.com" date="1728475200">- Update to gcc-14 branch head, 4af44f2cf7d281f3e4f3957ef, git10750
  * includes libstdc++6 fix for parsing tzdata 2024b [gcc#116657]
- Add gcc14-pr116629.patch to fix ICE with LTO building openvino
  on aarch64 [boo#1230262]</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1731931200">- Add loongarch64 as new target</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1732968000">- Add loongarch64 to asan_arch, atomic_arch,
  itm_arch, lsan_arch, tsan_arch and ubsan_arch
- Add larchintrin.h, lasxintrin.h and lsxintrin.h
  headers to gccXY main package in %files section
- Set build_primary_64bit to 1 for loongarch64</changelog>
  <changelog author="adrian@suse.de" date="1733140800">- disable go on loongarch64 for now</changelog>
  <changelog author="mardnh@gmx.de" date="1736078400">- Switch to glibc based cross-compiler for target hppa</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Define ALT_CC_UNDER_TEST and ALT_CXX_UNDER_TEST for compat tests</changelog>
  <changelog author="rguenther@suse.com" date="1738152000">- For cross compilers require the same or newer binutils, newlib
  or cross-glibc that was used at build time.  [bsc#1232526]</changelog>
  <changelog author="rguenther@suse.com" date="1738843200">- Adjust cross compiler requirements to use %requires_ge
- Fix condition on whether to enable plugins or JIT support to
  not check sle_version which is not defined in SLFO but to check
  is_opensuse and suse_version instead.
- Add gcc14-pr118780.patch to make the SLFO config work.</changelog>
  <changelog author="rguenther@suse.com" date="1740052800">- Update to gcc-14 branch head, 9ffecde121af883b60bbe60d0, git11321
  * fixes reported ICE in [bsc#1237442]
- Drop gcc14-pr116629.patch now backported to the branch.</changelog>
  <changelog author="rguenther@suse.com" date="1741608000">- Disable profiling during build when %want_reproducible_builds is set
  [bsc#1238491]</changelog>
  <changelog author="rguenther@suse.com" date="1741867200">- Add gcc13-bsc1239566.patch to also record -D_FORTIFY_SOURCE=2
  in the DWARF debug info DW_AT_producer string.  [bsc#1239566]</changelog>
  <changelog author="rguenther@suse.com" date="1743076800">- Add gcc14-bsc1239938.patch to allow GCC executables to be
  built PIE.  [bsc#1239938]
- Add gcc14-rs6000-msplit-patch-nops.patch to backport -msplit-patch-nops
  required for user-space livepatching on powerpc.</changelog>
  <changelog author="rguenther@suse.com" date="1744113600">- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add gcc14-pr119680.patch to fix cross-compiler builds with
  - -enable-host-pie.</changelog>
  <changelog author="rguenther@suse.com" date="1746014400">- Update to gcc-14 branch head, 3418d740b344e0ba38022f3be, git11702
  * Remove gcc14-pr118780.patch now on the upstream branch
- Fix build on s390x [bsc#1241549]</changelog>
  <changelog author="rguenther@suse.com" date="1746187200">- Add gcc14-pr108900.patch to revert it, fixing libqt6webengine build.</changelog>
  <changelog author="rguenther@suse.com" date="1746532800">- Add gcc14-pr120061.patch to fix the PR108900 fix instead of
  reverting it.
- Remove gcc14-pr108900.patch</changelog>
  <changelog author="rguenther@suse.com" date="1748001600">- Update to GCC 14.3 release, bb24b4c804f3d95b0ba95b7496, git11799
- Remove gcc14-pr120061.patch which is now included upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1748347200">- Disable build of glibc cross to loongarch64 and hppa in SLFO
  and SLE15.</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc14-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
</package>
<package pkgid="171c7974fe7a156d47787732035090e3b6272e7d76e1c258f04c36dc94f7d792" name="libubsan1-32bit" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.3.3"/>
  <changelog author="rguenther@suse.com" date="1743163200">- Update to GCC trunk head, 15.0.1+git9001
  * includes -msplit-patch-nops required for user-space livepatching
    on powerpc
  * includes fix for Ada build with --enable-host-pie
- Adjust for removed avx10_2roundingintrin.h intrinsic header.
- Build GCC executables PIE on SLE.  [bsc#1239938]</changelog>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
</package>
<package pkgid="3d791b611df5684fc494ff02143f598d2c8f2efcf17ea964fe1fbd06c8eab960" name="libubsan1-32bit" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.6.1"/>
  <changelog author="rguenther@suse.com" date="1744286400">- Update to GCC trunk head, 15.0.1+git9352
- Make sure link editing is done against our own shared library
  copy rather than the installed system runtime.  [bsc#1240788]
- Add newlib-gcn-libm-fix.patch to fix newlib libm miscompilation
  for GCN offloading.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
</package>
<package pkgid="3beb7fd60712892b1a048f8a54218fec6715dba27a87de125a83ce1f7d1ee714" name="libubsan1-32bit" arch="x86_64">
  <version epoch="0" ver="15.2.0+git10201" rel="150000.1.9.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1744459200">- Add loongarch64 to quadmath_arch</changelog>
  <changelog author="rguenther@suse.com" date="1745841600">- Update to GCC 15 branch head, 15.1.1+git9595
  * includes GCC 15.1 release
- Enable gfx9-generic, gfx10-3-generic and gfx11-generic multilibs
  for the AMD GCN offload compiler when llvm is new enough.
- Build the COBOL frontend also for risc-v</changelog>
  <changelog author="rguenther@suse.com" date="1746705600">- Update to GCC 15 branch head, 15.1.1+git9642
  * includes fix for libgfortran.so.5 ABI regression [gcc#120152]
- Add libgcobol and libquadmath-devel dependence to the cobol frontend
  package.</changelog>
  <changelog author="rguenther@suse.com" date="1747137600">- Prune set of cross-compilers that conflict with different
  versions from the set using update-alternatives.</changelog>
  <changelog author="rguenther@suse.com" date="1748433600">- Update to GCC 15 branch head, 15.1.1+git9739
- Do not build any loongarch64 compiler for distros where we do
  not have cross-binutils.</changelog>
  <changelog author="rguenther@suse.com" date="1748606400">- Enable C++ for offload compilers.  [bsc#1243794]</changelog>
  <changelog author="rguenther@suse.com" date="1748952000">- Make cross-*-gcc15-bootstrap package conflict with the non-bootstrap
  variant conflict with the unversioned cross-*-gcc package.</changelog>
  <changelog author="rguenther@suse.com" date="1749038400">- Exclude shared objects present for link editing in the GCC specific
  subdirectory from provides processing via __provides_exclude_from.
  [bsc#1244050][bsc#1243991]</changelog>
  <changelog author="rguenther@suse.com" date="1749211200">- Revert pruning the set of cross-compilers that conflict with different
  versions from the set using update-alternatives.  This causes
  endless headache with file conflicts with older GCC releases.</changelog>
  <changelog author="rguenther@suse.com" date="1749556800">- Remove all %gcc_icecream mode cross-compilers and the corresponding
  icecream backend subpackages.  Instead use glibc-bootstrap only
  configs for cross-x86_64-gcc (ipxe,ovmf,qemu), cross-ppc64-gcc (qemu)
  and cross-arm-gcc (ovmf).</changelog>
  <changelog author="schwab@suse.de" date="1750939200">- Update to GCC 15 branch head, 15.1.1+git9866
- Fix PR120827, ICE due to splitter emitting constant loads directly</changelog>
  <changelog author="rguenther@suse.com" date="1751457600">- Tune for power10 for SLES 16.  [jsc#PED-12029]
- Tune for z15 for SLES 16.  [jsc#PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1752062400">- Prune the use of update-alternatives from openSUSE Factory and
  SLFO.
- Adjust crosses to conflict consistently where they did not
  already and make them use unsuffixed binaries.</changelog>
  <changelog author="schwab@suse.de" date="1752494400">- Update to GCC 15 branch head, 15.1.1+git9973
- Fixes PR120995, unrecognizable insn UNSPEC_COMPARE_AND_SWAP with
  rv64gc_zabha_zacas</changelog>
  <changelog author="rguenther@suse.com" date="1752753600">- Fixup conflicts again.
- Make sure to retain binary suffixes for accelerator crosses.</changelog>
  <changelog author="schwab@suse.de" date="1753704000">- Update to GCC 15 branch head, 15.1.1+gitt10077
- Fixes PR120714, RISC-V: incorrect frame pointer CFA address for
  stack-clash protection loops</changelog>
  <changelog author="rguenther@suse.com" date="1754049600">- Update to GCC 15 branch head, 15.1.1+git10189, GCC 15.2 RC</changelog>
  <changelog author="rguenther@suse.com" date="1755864000">- Update to GCC 15.2 release
  * the GCC 15.2 release contains regression fixes accumulated since
    the GCC 15.1 release</changelog>
  <changelog author="rguenther@suse.com" date="1762516800">- Add gcc15-bsc1253043.patch to enable the use of _dl_find_object
  even when not available at build time.  [bsc#1253043]</changelog>
  <changelog author="rguenther@suse.com" date="1770292800">- Add gcc14-bsc1257463.patch to fix bogus expression simplification
  [bsc#1257463]</changelog>
</package>
<package pkgid="53734fe22c8edcc9764de3a095dd3875e475de287442573c0619532ffe77b881" name="libucm-devel" arch="x86_64">
  <version epoch="0" ver="1.17.0" rel="150700.4.2.7"/>
  <changelog author="jengelh@inai.de" date="1570190400">- Ensure /usr/lib/ucx is owned at all times.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1591272000">- Update to v1.8.0
  - Features:
  - Improved detection for DEVX support
  - Improved TCP scalability
  - Added support for ROCM to perftest
  - Added support for different source and target memory types to perftest
  - Added optimized memcpy for ROCM devices
  - Added hardware tag-matching for CUDA buffers
  - Added support for CUDA and ROCM managed memories
  - Added support for client/server disconnect protocol over rdma connection manager
  - Added support for striding receive queue for hardware tag-matching
  - Added XPMEM-based rendezvous protocol for shared memory
  - Added support shared memory communication between containers on same machine
  - Added support for multi-threaded RDMA memory registration for large regions
  - Added new test cases to Azure CI
  - Added support for multiple listening transports
  - Added UCT socket-based connection manager transport
  - Updated API for UCT component management
  - Added API to retrieve the listening port
  - Added UCP active message API
  - Removed deprecated API for querying UCT memory domains
  - Refactored server/client examples
  - Added support for dlopen interception in UCM
  - Added support for PCIe atomics
  - Updated Java API: added support for most of UCP layer operations
  - Updated support for Mellanox DevX API
  - Added multiple UCT/TCP transport performance optimizations
  - Optimized memcpy() for Intel platforms
  - Added protection from non-UCX socket based app connections
  - Improved search time for PKEY object
  - Enabled gtest over IPv6 interfaces
  - Updated Mellanox and Bull device IDs
  - Added support for CUDA_VISIBLE_DEVICES
  - Increased limits for CUDA IPC registration
  - Bugfixes:
  - Multiple fixes in JUCX
  - Fixes in UCP thread safety
  - Fixes for most recent versions GCC, PGI, and ICC
  - Fixes for CPU affinity on Azure instances
  - Fixes in XPMEM support on PPC64
  - Performance fixes in CUDA IPC
  - Fixes in RDMA CM flows
  - Multiple fixes in TCP transport
  - Multiple fixes in documentation
  - Fixes in transport lane selection logic
  - Fixes in Java jar build
  - Fixes in socket connection manager for Nvidia DGX-2 platform
  - Multiple fixes in UCP, UCT, UCM libraries
  - Multiple fixes for BSD and Mac OS systems
  - Fixes for Clang compiler
  - Fix CPU optimization configuration options
  - Fix JUCX build on GPU nodes
  - Fix in Azure release pipeline flow
  - Fix in CUDA memory hooks management
  - Fix in GPU memory peer direct gtest
  - Fix in TCP connection establishment flow
  - Fix in GPU IPC check
  - Fix in CUDA Jenkins test flow
  - Multiple fixes in CUDA IPC flow
  - Fix adding missing header files
  - Fix to prevent failures in presence of VPN enabled Ethernet interfaces
- Refresh openucx-s390x-support.patch against new version</changelog>
  <changelog author="jengelh@inai.de" date="1591358400">- Trim bias and filler wording from descriptions.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1594641600">- Update to v1.8.1
  - Features:
  - Added binary release pipeline in Azure CI
  - Bugfixes:
  - Multiple fixes in testing environment
  - Fixes in InfiniBand DEVX transport
  - Fixes in memory management for CUDA IPC transport
  - Fixes for binutils 2.34+
  - Fixes for AMD ROCM build environment</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1601899200">- Update to v1.9.0 (jsc#SLE-15163)
  - Features:
  - Added a new class of communication APIs '*_nbx' that enable API extendability while
  - preserving ABI backward compatibility
  - Added asynchronous event support to UCT/IB/DEVX
  - Added support for latest CUDA library version
  - Added NAK-based reliability protocol for UCT/IB/UD to optimize resends
  - Added new tests for ROCm
  - Added new configuration parameters for protocol selection
  - Added performance optimization for Fujitsu A64FX with InfiniBand
  - Added performance optimization for clear cache code aarch64
  - Added support for relaxed-order PCIe access in IB RDMA transports
  - Added new TCP connection manager
  - Added support for UCT/IB PKey with partial membership in IB transports
  - Added support for RoCE LAG
  - Added support for ROCm 3.7 and above
  - Added flow control for RDMA read operations
  - Improved endpoint flush implementation for UCT/IB
  - Improved UD timer to avoid interrupting the main thread when not in use
  - Improved latency estimation for network path with CUDA
  - Improved error reporting messages
  - Improved performance in active message flow (removed malloc call)
  - Improved performance in ptr_array flow
  - Improved performance in UCT/SM progress engine flow
  - Improved I/O demo code
  - Improved rendezvous protocol for CUDA
  - Updated examples code
  - Bugfixes:
  - Fixes for most resent versions of GCC, CLANG, ARMCLANG, PGI
  - Fixes in UCT/IB for strict order keys
  - Fixes in memory barrier code for aarch64
  - Fixes in UCT/IB/DEVX for fork system call
  - Fixes in UCT/IB for rand() call in rdma-core
  - Fixed in group rescheduling for UCT/IB/DC
  - Fixes in UCT/CUDA bandwidth reporting
  - Fixes in rkey_ptr protocol
  - Fixes in lane selection for rendezvous protocol based on get-zero-copy flow
  - Fixes for ROCm build
  - Fixes for XPMEM transport
  - Fixes in closing endpoint code
  - Fixes in RDMACM code
  - Fixes in memcpy selection for AMD
  - Fixed in UCT/UD endpoint flush functionality
  - Fixes in XPMEM detection
  - Fixes in rendezvous staging protocol
  - Fixes in ROCEv1 mlx5 UDP source port configuration
  - Multiple fixes in RPM spec file
  - Multiple fixes in UCP documentation
  - Multiple fixes in socket connection manager
  - Multiple fixes in gtest
  - Multiple fixes in JAVA API implementation
- Refresh openucx-s390x-support.patch against new version</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1614168000">- Update openucx-s390x-support.patch to fix mmap syscall on s390x (bsc#1182691)
  - Core:
  - Added support for UCX monitoring using virtual file system (VFS)/FUSE
  - Added support for applications with static CUDA runtime linking
  - Added support for a configuration file
  - Updated clang format configuration
  - UCP
  - Added rendezvous API for active messages
  - Added user-defined name to context, worker, and endpoint objects
  - Added flag to silence request leak check
  - Added API for endpoint performance evaluation
  - Added API - ucp_request_query
  - Added API - ucp_lib_query
  - Added bandwidth optimizations for new protocols multi-lane
  - Added support for multi-rail over lanes with BW ratio &gt;= 1/4
  - Added support for tracking outstanding requests and aborting those in case of connection failure
  - Refactored keep-alive protocol
  - Added device id to wireup protocol
  - Added support up to 128 transport layer resources in UCP context
  - Added support CUDA memory allocations with ucp_mem_map
  - Increased UCP_WORKER_MAX_EP_CONFIG to 64
  - Adjusted memory type zcopy threshold when UCX_ZCOPY_THRESH set
  - Refactored wireup protocols, rendezvous, get, zcopy protocols
  - Added put zcopy multi-rail
  - Improved logging for new protocols
  - Added system topology information
  - Added new protocols for eager offload protocols
  - UCT
  - Extended connection establishment API
  - Added active message AM alignment in iface params
  - Added active message short IOV API.
  - Added support for interface query by operation and memory type
  - Added API to get allocation base address and length
  - Added md_dereg_v2 API
  - UCS
  - Added log filter by source file name.
  - Added checking for last element in fraglist queue
  - Added a method to get IP address from sockaddr.
  - Added memory usage limits to registration cache
  - RDMA CORE (IB, ROCE, etc.)
  - Added report of QP info in case of completion with error
  - Refactored of FC send operations
  - Added support for  DevX unique QPN allocation
  - Optimized endpoint lookup for  DCI
  - Added support for RDMA sub-function (SF)
  - Added support for DCI via DEVX
  - Added DCI pool per LAG port
  - Added support  for RoCE IP reachability check using a subnet mask
  - Added active message short IOV for UD/DC/RC mlx, UD/RC verbs
  - Added endpoint keep alive check for UD
  - Suppressed warning if device can't be opened
  - Added support for multiple flush cancel without completion
  - Added ignore for devices with invalid GID
  - Added support for SRQ linked list reordering
  - Added flush by flow control on old devices
  - Added support for configurable rdma_resolve_addr/route timeout
  - Shared memory
  - Added active message short IOV support for posix, sysv, and self transports
  - TCP
  - Added support for peer failure in case of CONNECT_TO_EP
  - Added support for active message short IOV
  - See NEWS for a complete changelog and bug fixes
- Refresh openucx-s390x-support against latest sources</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1632398400">- Update to v1.11.1 (jsc#SLE-19260)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1642075200">- Fix UCM bistro support on non s390x archs
- Add ucm-fix-UCX_MEM_MALLOC_RELOC.patch to disable malloc relocations by default (bsc#1194369)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1664280000">- Update to v1.13.1 (jsc#PED-912)
  - Core
  - Added new objects to VFS: local and remote address of endpoint,
    statistics of ucp_ep_create success/failure, failed/destroyed endpoints
  - Added support for UCX static libraries
  - Added profiling for rkey management routines
  - PCIe relaxed order enabled by default for AMD CPUs
  - Fixed not deallocating memory from ucp_mem_unmap if no rcache
  - Fixed versioning infrastructure
  - Multiple code improvements: refactoring, debug prints and assertions, etc.
  - Multiple improvements in build, test and docs infrastructure
  - Added new objects to VFS (md, component, log_level, etc.)
  - Added configuration variable to specify which loadable modules are allowed
  - Added build-time configuration to disable sigaction overriding
  - UCP
  - Added API to pass pre-registered memory handle to UCP operations
  - Added implementation of AM rendezvous protocol
  - Added 2-stage pipeline rendezvous protocol for GPU
  - Added support for fragment mem_type for v1 pipeline proto, disabled by default
  - Added active message support for proto v2
  - Added UCP memory registration cache
  - Improved adaptive progress - deactivate iface when all p2p lanes are destroyed
  - Added support for user memh in proto_v1
  - Added support for selecting local address when creating a client endpoint
  - Added option to limit GPUDirectRDMA size in rendezvous protocol, UCX_RNDV_MEMTYPE_DIRECT_SIZE
  - Deprecated UCX_SOCKADDR_AUX_TLS configuration parameter
  - Resolving remote EP ID when creating local EP disabled by default
  - Added client_id to ucp_worker_create() and ucp_conn_request_query() APIs
  - Added ucp_worker_address_query() API
  - Updated ucp_ep_query() API for getting local and remote addresses
  - Added address versioning to correctly preserve wire compatibility starting from version 1.11.0
  - Added new client/server connection establishment packet header format
  - Enabled rendezvous and tag sync protocols when error handling is enabled on the endpoint
  - Added iov zcopy support to RMA operations
  - Reduced memory usage of unexpected messages by fitting receive buffer size to packet size
  - Added support for modifying UCT and UCS configs by ucp_config_modify() API
  - Optimized unpacked rkeys memory consumption
  - Added request flag to influence latency vs. bandwidth protocol
  - Reduced memory management overhead with new protocols
  - Improved performance calculations for new protocols
  - Added AMO support with GPU memory target using new protocols
  - Added put_zcopy, get_zcopy and pipeline based rendezvous in new protocols
  - Added support for user-defined alignment in Active Messages
  - Added support for offload tag sync in new protocols
  - Updated ucp_atomic_post() to use NBX flow
  - UCT
  - Introduced API uct_md_mkey_pack_v2
  - Introduced UCT iface features API
  - Introduced max_inflight_eps parameter in perf_attr API
  - Introduced UCT_SEND_FLAG_PEER_CHECK flag that forces checking connectivity to a peer
  - Introduced UCX_RCACHE_PURGE_ON_FORK to enable/disable cleaning regions when application is forking
  - Disabled PEER_FAILURE capability for XPMEM
  - Added API - uct_iface_is_reachable_v2()
  - Added IPv6 address support in TCP
  - Added latency estimation to uct_iface_estimate_perf()
  - Adjusted knem and cma overhead cost
  - Increased built-in TCP keep-alive interval to 2 seconds
  - RDMA CORE (IB, ROCE, etc.)
  - Introduced NDR autorecognition
  - Introduced CQE zipping support
  - Set the default MAX_RD_ATOMIC to maximum value supported by the hardware
  - Disabled mlx5 ifaces on verbs MD
  - Added detection of IB NDR devices
  - Added check for CQ overrun in assert mode
  - Added bitmap usage for releasing detached DCIs
  - Added configuration for requests ack frequency with DevX
  - Added remote QP info to tx error CQE traces
  - ROCM
  - Increased maximum number of HSA agents
  - UCS
  - Added topo module infrastructure
  - Added memtrack and rcache information to VFS
  - Added API for a per-process aggregate-sum statistics report
  - Added memory pool set data structure
  - Added new ptr_array API for bulk allocation
  - Added ucs_string_buffer_append_flags() for string buffer
  - Added ucs_ffs32()
  - Added ucs_vsnprintf_safe() which always adds '\0'
  - Added thread-safe put to ptr_map
  - Improved accuracy of the topology distance estimation
  - Added prints of leaked callbacks from the callback queue
  - Removed a diagnostic message when fuse thread is stopped
  - Added configurable limit for the memory consumed by rcache
  - Added configuration for VFS(FUSE) thread affinity
  - Added memory limit support to memtrack
  - Packaging
  - Added cmake config files for better integration with external cmake based projects
  - Tools
  - Added loop-back transport support in ucx_perftest
  - Split ucx_perftest into separate modules
  - Added process placement option for ucx_info
  - Extended parameters correctness check in ucx_perftest
- Backported UCS-DEBUG-replace-PTR-with-void.patch
  from upstream to fix compilation</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1664884800">- Update openucx-s390x-support.patch to add missing ucs_ffs32 on s390x
- Drop baselibs.conf as openucx only works on 64b systems</changelog>
  <changelog author="schwab@suse.de" date="1673870400">- openucx-s390x-support.patch: fix use of clz builtin for 64-bit value</changelog>
  <changelog author="mliska@suse.cz" date="1678104000">- Add upstream gcc13-fix.patch fix.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1679313600">- Update to v1.14.0
  - UCP
  - Added API for querying transport and device names on endpoint
  - Added API for querying datatype object
  - Added API for exporting and importing memory keys (no implementation yet)
  - Added support for non-persistent active message header
  - Added infrastructure to print protocols v2 performance
  - Multiple performance improvements for protocols v2
  - Added support for non-contiguous datatypes for rendezvous protocols v2
  - Added support for reset and abort request in protocols v2
  - Added support for user memory handles in RMA API
  - Added multi-rail support for RMA API in protocols v2
  - Added support for up to 16 different lanes per endpoint
  - Added support for dmabuf memory registration in protocols v2
  - Added strong fence mode for ucp_worker_fence() API
  - UCT
  - Added new uct_md_mem_attach() API to support exported memory handles
  - Added remote completion mode for endpoint flush (via new flag)
  - Added support for dmabuf registration
  - Added new uct_ep_connect_to_ep_v2() API
  - Added new uct_mem_reg_v2() API
  - Added new uct_md_query_v2() API
  - Added support for IPv6 loopback address in TCP transport
  - RDMA CORE (IB, ROCE, etc.)
  - Added ECE (enhanced connection establishment) support for RC and DC transports
  - Added support for hardware DCS in DC transport
  - Added UD interface and endpoint resource information to VFS
  - Added CQ creation via DEVX API
  - Removed support for accelerated IB transports over legacy experimental verbs
  - UCS
  - Added support for auto-correction of user environment variables
  - UCM
  - Implemented CUDA bistro hooks for aarch64 (to enable memory cache on this platform)
  - Added support for CUDA virtual/stream-ordered memory with cudaMallocAsync
  - Documentation
  - Added FAQ for using pkg-config tool to build applications with UCX
  - Tools
  - Added runtime library version to the 'ucx_info -v' output
  - Added support for memory types in ucx_info
  - Many bugfixes. See NEWS.
- Drop patch merged upstream:
  - UCS-DEBUG-replace-PTR-with-void.patch
  - gcc13-fix.patch
- Refresh openucx-s390x-support.patch</changelog>
  <changelog author="nicolas.morey@suse.com" date="1690286400">- Update to v1.14.1
  - Fixed ROCm to prevent the locking of host pinned memory
  - Added CUDA 12 based UCX builds to the release flow
  - Increased the maximal number of endpoint configurations
  - Fixed filter for a slow-lanes in selection logic
  - Fixed TCP transport bandwidth calculation
  - Fixed device detection for ROCM
  - Fixed compatibility with CUDA 12
  - Fixed rendezvous threshold for multi-path configurations
  - Fixed error message in case of static link
  - Fixed BlueField-3 detection
  - Multiple fixes for Azure CI pipeline</changelog>
  <changelog author="nicolas.morey@suse.com" date="1696248000">- Update to 1.15.0
  - UCP
  - Added 2-stage pipeline protocol in the new protocol infrastructure
  - Added reset and abort functionality of rendezvous protocols in the
    new infrastructure
  - Added zero-copy rendezvous data send protocol in the new infrastructure
  - Added support for user memory handle in the new protocol infrastructure
  - Added option to force ODP registration for certain memory types
  - Enabled lock free memory region deregistration
  - Updated allow/deny transport list feature to control auxiliary transport selection
  - Multiple performance improvements of the new protocol infrastructure
  - Multiple improvements in error and debug messages
  - Fixed assertion when sending from non-contiguous GPU buffer to managed buffer
  - Fixed the race condition on endpoint configurations
  - Fixed endpoint reconfiguration issues due to asymmetrical selection
  - Fixed endpoint reconfiguration error due to wrong locality detection
  - Fixed crash during connection manager cleanup
  - Fixed rkey index calculation for rendezvous protocol
  - Fixed rcache dump function
  - Removed logging from rkey unpack in release mode
  - Fixed dobule free of rkey in rendezvous protocol
  - Fixed rendezvous pipeline protocol error flow
  - Fixed error handling in rendezvous get zcopy protocol
  - Replay pending requests of wireup EP CM during connection establishment
    to prevent potential ordering issues and wrong configuration
  - Pass user-provided memory type to the function that checks whether the buffer
    can be sent inline or not
  - Avoid memory registration during UCP context initialization
  - Fixed CPU/device atomics selection in the new protocol infrastructure
  - Multiple fixes in the new protocol infrastructure information output
  - UCT
  - Split UCT_MD_MKEY_PACK_FLAG_INVALIDATE into two flags for RMA and AMO
  - Added put_zcopy and get_zcopy scheme support for self transport
  - Added base implementation of is_reachable_v2 API using intra/inter flag
  - Introduced MD capability for non-blocking registration memory types
  - Added check for dmabuf kernel support in ROCm memory domain
  - Fixed exported memh packing
  - Fixed an error in checking return status of multi-threaded memory
    registration function
  - RDMA CORE (IB, ROCE, etc.)
  - Added implementation of is_reachable_v2 routine to IB interface
  - Added option to control CQE zipping per CQ RX/TX direction
  - Added option to specify how DCI selects port under RoCE LAG
  - Added hw_dcs to the list of policies to select DCI by an endpoint
  - Removed implicit on-demand paging
  - Added option to set RoCE lag dct port for response under queue affinity mode
  - Improved IB memlock limit logging
  - Fixed dma-buf based memory region registration
  - Fixed memory handle data corruption when PCIe relaxed ordering is enabled
  - Fixed performance degradation when indirect atomic key is not supported
    by the hardware
  - Fixed remote access error to strict-order keys because of wrong offset
  - Added check for UAR support to memory domain opening
  - Fixed updating port counters for devx qp
  - Fixed ibv_create_cq error message on node without Infiniband
  - Fixed performance degradation due to using 2 paths on NDR400 by default
  - Removed unnecessary async lock which otherwise would block UD progress
  - UCS
  - Added ucs_string_buffer_rbrk() to split token
  - Fixed lane selection and added bandwidth estimation for Sapphire Rapids family
  - Fixed displaying wrong environment variable suggestions
  - Fixed VFS warning output
  - Fixed SEGV in ucs_debug_backtrace_next(), upon previous SEGV handling,
    due to ENOMEM situation
  - Fixed memory corruption when using UCX_MPOOL_FIFO=y
  - UCM
  - Fixed conditional jump patching
  - Fixed mremap() override
  - Tests
  - Added a rocm docker container for testing
  - Added option to send client_id in iodemo test
  - Added support for multiple connections to the same server in iodemo test
  - Added synchronization before exit to hello world examples
  - Fixed wrong usage of ep_close in examples
  - Tools
  - Added user-side memcpy option for AM benchmarks in ucx_perftest
  - Added wireshark LUA dissectors for some UCX protocols
  - Fixed memory access flags in perftest
  - Removed support for librte from perf
  - Fixed worker flush deadlock when using multiple workers in ucx_perftest
  - Build
  - Added support for binutils 2.40
  - Added versioned dependency to switch between packages with the same names
  - Added a separate xpmem deb subpackage
  - Added aarch64 support to the binary distribution pipeline
  - Removed dependency on libnuma
  - Documentation
  - Updated ucp_worker_release_address description
- Refresh openucx-s390x-support.patch against latest souces</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1719403200">- Update to 1.17.0
  - See NEWS for the complete CHANGELOG
- Refresh openucx-s390x-support.patch against the latest sources
- Add upstream fix UCS-TIME-Add-math.h-to-provide-INFINITY.patch
  to fix compilation on ppc64</changelog>
  <changelog author="schwab@suse.de" date="1719662400">- Enable build on riscv64</changelog>
  <changelog author="nicolas.morey@suse.com" date="1725710400">- Refresh openucx-s390x-support.patch to fix compilation on s390x</changelog>
  <changelog author="nicolas.morey@suse.com" date="1743508800">- Add UCT-IB-UD-Use-GRH-to-detect-address-family-on-non-Mellanox-hardware.patch
  to fix an UD init issue on non-Mellanox RDMA HW (bsc#1240204)</changelog>
</package>
<package pkgid="0055c36979960d076e30677d0f997a7d016e8ccc0d897c55f962663954b28e55" name="libucm0" arch="x86_64">
  <version epoch="0" ver="1.17.0" rel="150700.4.2.7"/>
  <changelog author="jengelh@inai.de" date="1570190400">- Ensure /usr/lib/ucx is owned at all times.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1591272000">- Update to v1.8.0
  - Features:
  - Improved detection for DEVX support
  - Improved TCP scalability
  - Added support for ROCM to perftest
  - Added support for different source and target memory types to perftest
  - Added optimized memcpy for ROCM devices
  - Added hardware tag-matching for CUDA buffers
  - Added support for CUDA and ROCM managed memories
  - Added support for client/server disconnect protocol over rdma connection manager
  - Added support for striding receive queue for hardware tag-matching
  - Added XPMEM-based rendezvous protocol for shared memory
  - Added support shared memory communication between containers on same machine
  - Added support for multi-threaded RDMA memory registration for large regions
  - Added new test cases to Azure CI
  - Added support for multiple listening transports
  - Added UCT socket-based connection manager transport
  - Updated API for UCT component management
  - Added API to retrieve the listening port
  - Added UCP active message API
  - Removed deprecated API for querying UCT memory domains
  - Refactored server/client examples
  - Added support for dlopen interception in UCM
  - Added support for PCIe atomics
  - Updated Java API: added support for most of UCP layer operations
  - Updated support for Mellanox DevX API
  - Added multiple UCT/TCP transport performance optimizations
  - Optimized memcpy() for Intel platforms
  - Added protection from non-UCX socket based app connections
  - Improved search time for PKEY object
  - Enabled gtest over IPv6 interfaces
  - Updated Mellanox and Bull device IDs
  - Added support for CUDA_VISIBLE_DEVICES
  - Increased limits for CUDA IPC registration
  - Bugfixes:
  - Multiple fixes in JUCX
  - Fixes in UCP thread safety
  - Fixes for most recent versions GCC, PGI, and ICC
  - Fixes for CPU affinity on Azure instances
  - Fixes in XPMEM support on PPC64
  - Performance fixes in CUDA IPC
  - Fixes in RDMA CM flows
  - Multiple fixes in TCP transport
  - Multiple fixes in documentation
  - Fixes in transport lane selection logic
  - Fixes in Java jar build
  - Fixes in socket connection manager for Nvidia DGX-2 platform
  - Multiple fixes in UCP, UCT, UCM libraries
  - Multiple fixes for BSD and Mac OS systems
  - Fixes for Clang compiler
  - Fix CPU optimization configuration options
  - Fix JUCX build on GPU nodes
  - Fix in Azure release pipeline flow
  - Fix in CUDA memory hooks management
  - Fix in GPU memory peer direct gtest
  - Fix in TCP connection establishment flow
  - Fix in GPU IPC check
  - Fix in CUDA Jenkins test flow
  - Multiple fixes in CUDA IPC flow
  - Fix adding missing header files
  - Fix to prevent failures in presence of VPN enabled Ethernet interfaces
- Refresh openucx-s390x-support.patch against new version</changelog>
  <changelog author="jengelh@inai.de" date="1591358400">- Trim bias and filler wording from descriptions.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1594641600">- Update to v1.8.1
  - Features:
  - Added binary release pipeline in Azure CI
  - Bugfixes:
  - Multiple fixes in testing environment
  - Fixes in InfiniBand DEVX transport
  - Fixes in memory management for CUDA IPC transport
  - Fixes for binutils 2.34+
  - Fixes for AMD ROCM build environment</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1601899200">- Update to v1.9.0 (jsc#SLE-15163)
  - Features:
  - Added a new class of communication APIs '*_nbx' that enable API extendability while
  - preserving ABI backward compatibility
  - Added asynchronous event support to UCT/IB/DEVX
  - Added support for latest CUDA library version
  - Added NAK-based reliability protocol for UCT/IB/UD to optimize resends
  - Added new tests for ROCm
  - Added new configuration parameters for protocol selection
  - Added performance optimization for Fujitsu A64FX with InfiniBand
  - Added performance optimization for clear cache code aarch64
  - Added support for relaxed-order PCIe access in IB RDMA transports
  - Added new TCP connection manager
  - Added support for UCT/IB PKey with partial membership in IB transports
  - Added support for RoCE LAG
  - Added support for ROCm 3.7 and above
  - Added flow control for RDMA read operations
  - Improved endpoint flush implementation for UCT/IB
  - Improved UD timer to avoid interrupting the main thread when not in use
  - Improved latency estimation for network path with CUDA
  - Improved error reporting messages
  - Improved performance in active message flow (removed malloc call)
  - Improved performance in ptr_array flow
  - Improved performance in UCT/SM progress engine flow
  - Improved I/O demo code
  - Improved rendezvous protocol for CUDA
  - Updated examples code
  - Bugfixes:
  - Fixes for most resent versions of GCC, CLANG, ARMCLANG, PGI
  - Fixes in UCT/IB for strict order keys
  - Fixes in memory barrier code for aarch64
  - Fixes in UCT/IB/DEVX for fork system call
  - Fixes in UCT/IB for rand() call in rdma-core
  - Fixed in group rescheduling for UCT/IB/DC
  - Fixes in UCT/CUDA bandwidth reporting
  - Fixes in rkey_ptr protocol
  - Fixes in lane selection for rendezvous protocol based on get-zero-copy flow
  - Fixes for ROCm build
  - Fixes for XPMEM transport
  - Fixes in closing endpoint code
  - Fixes in RDMACM code
  - Fixes in memcpy selection for AMD
  - Fixed in UCT/UD endpoint flush functionality
  - Fixes in XPMEM detection
  - Fixes in rendezvous staging protocol
  - Fixes in ROCEv1 mlx5 UDP source port configuration
  - Multiple fixes in RPM spec file
  - Multiple fixes in UCP documentation
  - Multiple fixes in socket connection manager
  - Multiple fixes in gtest
  - Multiple fixes in JAVA API implementation
- Refresh openucx-s390x-support.patch against new version</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1614168000">- Update openucx-s390x-support.patch to fix mmap syscall on s390x (bsc#1182691)
  - Core:
  - Added support for UCX monitoring using virtual file system (VFS)/FUSE
  - Added support for applications with static CUDA runtime linking
  - Added support for a configuration file
  - Updated clang format configuration
  - UCP
  - Added rendezvous API for active messages
  - Added user-defined name to context, worker, and endpoint objects
  - Added flag to silence request leak check
  - Added API for endpoint performance evaluation
  - Added API - ucp_request_query
  - Added API - ucp_lib_query
  - Added bandwidth optimizations for new protocols multi-lane
  - Added support for multi-rail over lanes with BW ratio &gt;= 1/4
  - Added support for tracking outstanding requests and aborting those in case of connection failure
  - Refactored keep-alive protocol
  - Added device id to wireup protocol
  - Added support up to 128 transport layer resources in UCP context
  - Added support CUDA memory allocations with ucp_mem_map
  - Increased UCP_WORKER_MAX_EP_CONFIG to 64
  - Adjusted memory type zcopy threshold when UCX_ZCOPY_THRESH set
  - Refactored wireup protocols, rendezvous, get, zcopy protocols
  - Added put zcopy multi-rail
  - Improved logging for new protocols
  - Added system topology information
  - Added new protocols for eager offload protocols
  - UCT
  - Extended connection establishment API
  - Added active message AM alignment in iface params
  - Added active message short IOV API.
  - Added support for interface query by operation and memory type
  - Added API to get allocation base address and length
  - Added md_dereg_v2 API
  - UCS
  - Added log filter by source file name.
  - Added checking for last element in fraglist queue
  - Added a method to get IP address from sockaddr.
  - Added memory usage limits to registration cache
  - RDMA CORE (IB, ROCE, etc.)
  - Added report of QP info in case of completion with error
  - Refactored of FC send operations
  - Added support for  DevX unique QPN allocation
  - Optimized endpoint lookup for  DCI
  - Added support for RDMA sub-function (SF)
  - Added support for DCI via DEVX
  - Added DCI pool per LAG port
  - Added support  for RoCE IP reachability check using a subnet mask
  - Added active message short IOV for UD/DC/RC mlx, UD/RC verbs
  - Added endpoint keep alive check for UD
  - Suppressed warning if device can't be opened
  - Added support for multiple flush cancel without completion
  - Added ignore for devices with invalid GID
  - Added support for SRQ linked list reordering
  - Added flush by flow control on old devices
  - Added support for configurable rdma_resolve_addr/route timeout
  - Shared memory
  - Added active message short IOV support for posix, sysv, and self transports
  - TCP
  - Added support for peer failure in case of CONNECT_TO_EP
  - Added support for active message short IOV
  - See NEWS for a complete changelog and bug fixes
- Refresh openucx-s390x-support against latest sources</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1632398400">- Update to v1.11.1 (jsc#SLE-19260)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1642075200">- Fix UCM bistro support on non s390x archs
- Add ucm-fix-UCX_MEM_MALLOC_RELOC.patch to disable malloc relocations by default (bsc#1194369)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1664280000">- Update to v1.13.1 (jsc#PED-912)
  - Core
  - Added new objects to VFS: local and remote address of endpoint,
    statistics of ucp_ep_create success/failure, failed/destroyed endpoints
  - Added support for UCX static libraries
  - Added profiling for rkey management routines
  - PCIe relaxed order enabled by default for AMD CPUs
  - Fixed not deallocating memory from ucp_mem_unmap if no rcache
  - Fixed versioning infrastructure
  - Multiple code improvements: refactoring, debug prints and assertions, etc.
  - Multiple improvements in build, test and docs infrastructure
  - Added new objects to VFS (md, component, log_level, etc.)
  - Added configuration variable to specify which loadable modules are allowed
  - Added build-time configuration to disable sigaction overriding
  - UCP
  - Added API to pass pre-registered memory handle to UCP operations
  - Added implementation of AM rendezvous protocol
  - Added 2-stage pipeline rendezvous protocol for GPU
  - Added support for fragment mem_type for v1 pipeline proto, disabled by default
  - Added active message support for proto v2
  - Added UCP memory registration cache
  - Improved adaptive progress - deactivate iface when all p2p lanes are destroyed
  - Added support for user memh in proto_v1
  - Added support for selecting local address when creating a client endpoint
  - Added option to limit GPUDirectRDMA size in rendezvous protocol, UCX_RNDV_MEMTYPE_DIRECT_SIZE
  - Deprecated UCX_SOCKADDR_AUX_TLS configuration parameter
  - Resolving remote EP ID when creating local EP disabled by default
  - Added client_id to ucp_worker_create() and ucp_conn_request_query() APIs
  - Added ucp_worker_address_query() API
  - Updated ucp_ep_query() API for getting local and remote addresses
  - Added address versioning to correctly preserve wire compatibility starting from version 1.11.0
  - Added new client/server connection establishment packet header format
  - Enabled rendezvous and tag sync protocols when error handling is enabled on the endpoint
  - Added iov zcopy support to RMA operations
  - Reduced memory usage of unexpected messages by fitting receive buffer size to packet size
  - Added support for modifying UCT and UCS configs by ucp_config_modify() API
  - Optimized unpacked rkeys memory consumption
  - Added request flag to influence latency vs. bandwidth protocol
  - Reduced memory management overhead with new protocols
  - Improved performance calculations for new protocols
  - Added AMO support with GPU memory target using new protocols
  - Added put_zcopy, get_zcopy and pipeline based rendezvous in new protocols
  - Added support for user-defined alignment in Active Messages
  - Added support for offload tag sync in new protocols
  - Updated ucp_atomic_post() to use NBX flow
  - UCT
  - Introduced API uct_md_mkey_pack_v2
  - Introduced UCT iface features API
  - Introduced max_inflight_eps parameter in perf_attr API
  - Introduced UCT_SEND_FLAG_PEER_CHECK flag that forces checking connectivity to a peer
  - Introduced UCX_RCACHE_PURGE_ON_FORK to enable/disable cleaning regions when application is forking
  - Disabled PEER_FAILURE capability for XPMEM
  - Added API - uct_iface_is_reachable_v2()
  - Added IPv6 address support in TCP
  - Added latency estimation to uct_iface_estimate_perf()
  - Adjusted knem and cma overhead cost
  - Increased built-in TCP keep-alive interval to 2 seconds
  - RDMA CORE (IB, ROCE, etc.)
  - Introduced NDR autorecognition
  - Introduced CQE zipping support
  - Set the default MAX_RD_ATOMIC to maximum value supported by the hardware
  - Disabled mlx5 ifaces on verbs MD
  - Added detection of IB NDR devices
  - Added check for CQ overrun in assert mode
  - Added bitmap usage for releasing detached DCIs
  - Added configuration for requests ack frequency with DevX
  - Added remote QP info to tx error CQE traces
  - ROCM
  - Increased maximum number of HSA agents
  - UCS
  - Added topo module infrastructure
  - Added memtrack and rcache information to VFS
  - Added API for a per-process aggregate-sum statistics report
  - Added memory pool set data structure
  - Added new ptr_array API for bulk allocation
  - Added ucs_string_buffer_append_flags() for string buffer
  - Added ucs_ffs32()
  - Added ucs_vsnprintf_safe() which always adds '\0'
  - Added thread-safe put to ptr_map
  - Improved accuracy of the topology distance estimation
  - Added prints of leaked callbacks from the callback queue
  - Removed a diagnostic message when fuse thread is stopped
  - Added configurable limit for the memory consumed by rcache
  - Added configuration for VFS(FUSE) thread affinity
  - Added memory limit support to memtrack
  - Packaging
  - Added cmake config files for better integration with external cmake based projects
  - Tools
  - Added loop-back transport support in ucx_perftest
  - Split ucx_perftest into separate modules
  - Added process placement option for ucx_info
  - Extended parameters correctness check in ucx_perftest
- Backported UCS-DEBUG-replace-PTR-with-void.patch
  from upstream to fix compilation</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1664884800">- Update openucx-s390x-support.patch to add missing ucs_ffs32 on s390x
- Drop baselibs.conf as openucx only works on 64b systems</changelog>
  <changelog author="schwab@suse.de" date="1673870400">- openucx-s390x-support.patch: fix use of clz builtin for 64-bit value</changelog>
  <changelog author="mliska@suse.cz" date="1678104000">- Add upstream gcc13-fix.patch fix.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1679313600">- Update to v1.14.0
  - UCP
  - Added API for querying transport and device names on endpoint
  - Added API for querying datatype object
  - Added API for exporting and importing memory keys (no implementation yet)
  - Added support for non-persistent active message header
  - Added infrastructure to print protocols v2 performance
  - Multiple performance improvements for protocols v2
  - Added support for non-contiguous datatypes for rendezvous protocols v2
  - Added support for reset and abort request in protocols v2
  - Added support for user memory handles in RMA API
  - Added multi-rail support for RMA API in protocols v2
  - Added support for up to 16 different lanes per endpoint
  - Added support for dmabuf memory registration in protocols v2
  - Added strong fence mode for ucp_worker_fence() API
  - UCT
  - Added new uct_md_mem_attach() API to support exported memory handles
  - Added remote completion mode for endpoint flush (via new flag)
  - Added support for dmabuf registration
  - Added new uct_ep_connect_to_ep_v2() API
  - Added new uct_mem_reg_v2() API
  - Added new uct_md_query_v2() API
  - Added support for IPv6 loopback address in TCP transport
  - RDMA CORE (IB, ROCE, etc.)
  - Added ECE (enhanced connection establishment) support for RC and DC transports
  - Added support for hardware DCS in DC transport
  - Added UD interface and endpoint resource information to VFS
  - Added CQ creation via DEVX API
  - Removed support for accelerated IB transports over legacy experimental verbs
  - UCS
  - Added support for auto-correction of user environment variables
  - UCM
  - Implemented CUDA bistro hooks for aarch64 (to enable memory cache on this platform)
  - Added support for CUDA virtual/stream-ordered memory with cudaMallocAsync
  - Documentation
  - Added FAQ for using pkg-config tool to build applications with UCX
  - Tools
  - Added runtime library version to the 'ucx_info -v' output
  - Added support for memory types in ucx_info
  - Many bugfixes. See NEWS.
- Drop patch merged upstream:
  - UCS-DEBUG-replace-PTR-with-void.patch
  - gcc13-fix.patch
- Refresh openucx-s390x-support.patch</changelog>
  <changelog author="nicolas.morey@suse.com" date="1690286400">- Update to v1.14.1
  - Fixed ROCm to prevent the locking of host pinned memory
  - Added CUDA 12 based UCX builds to the release flow
  - Increased the maximal number of endpoint configurations
  - Fixed filter for a slow-lanes in selection logic
  - Fixed TCP transport bandwidth calculation
  - Fixed device detection for ROCM
  - Fixed compatibility with CUDA 12
  - Fixed rendezvous threshold for multi-path configurations
  - Fixed error message in case of static link
  - Fixed BlueField-3 detection
  - Multiple fixes for Azure CI pipeline</changelog>
  <changelog author="nicolas.morey@suse.com" date="1696248000">- Update to 1.15.0
  - UCP
  - Added 2-stage pipeline protocol in the new protocol infrastructure
  - Added reset and abort functionality of rendezvous protocols in the
    new infrastructure
  - Added zero-copy rendezvous data send protocol in the new infrastructure
  - Added support for user memory handle in the new protocol infrastructure
  - Added option to force ODP registration for certain memory types
  - Enabled lock free memory region deregistration
  - Updated allow/deny transport list feature to control auxiliary transport selection
  - Multiple performance improvements of the new protocol infrastructure
  - Multiple improvements in error and debug messages
  - Fixed assertion when sending from non-contiguous GPU buffer to managed buffer
  - Fixed the race condition on endpoint configurations
  - Fixed endpoint reconfiguration issues due to asymmetrical selection
  - Fixed endpoint reconfiguration error due to wrong locality detection
  - Fixed crash during connection manager cleanup
  - Fixed rkey index calculation for rendezvous protocol
  - Fixed rcache dump function
  - Removed logging from rkey unpack in release mode
  - Fixed dobule free of rkey in rendezvous protocol
  - Fixed rendezvous pipeline protocol error flow
  - Fixed error handling in rendezvous get zcopy protocol
  - Replay pending requests of wireup EP CM during connection establishment
    to prevent potential ordering issues and wrong configuration
  - Pass user-provided memory type to the function that checks whether the buffer
    can be sent inline or not
  - Avoid memory registration during UCP context initialization
  - Fixed CPU/device atomics selection in the new protocol infrastructure
  - Multiple fixes in the new protocol infrastructure information output
  - UCT
  - Split UCT_MD_MKEY_PACK_FLAG_INVALIDATE into two flags for RMA and AMO
  - Added put_zcopy and get_zcopy scheme support for self transport
  - Added base implementation of is_reachable_v2 API using intra/inter flag
  - Introduced MD capability for non-blocking registration memory types
  - Added check for dmabuf kernel support in ROCm memory domain
  - Fixed exported memh packing
  - Fixed an error in checking return status of multi-threaded memory
    registration function
  - RDMA CORE (IB, ROCE, etc.)
  - Added implementation of is_reachable_v2 routine to IB interface
  - Added option to control CQE zipping per CQ RX/TX direction
  - Added option to specify how DCI selects port under RoCE LAG
  - Added hw_dcs to the list of policies to select DCI by an endpoint
  - Removed implicit on-demand paging
  - Added option to set RoCE lag dct port for response under queue affinity mode
  - Improved IB memlock limit logging
  - Fixed dma-buf based memory region registration
  - Fixed memory handle data corruption when PCIe relaxed ordering is enabled
  - Fixed performance degradation when indirect atomic key is not supported
    by the hardware
  - Fixed remote access error to strict-order keys because of wrong offset
  - Added check for UAR support to memory domain opening
  - Fixed updating port counters for devx qp
  - Fixed ibv_create_cq error message on node without Infiniband
  - Fixed performance degradation due to using 2 paths on NDR400 by default
  - Removed unnecessary async lock which otherwise would block UD progress
  - UCS
  - Added ucs_string_buffer_rbrk() to split token
  - Fixed lane selection and added bandwidth estimation for Sapphire Rapids family
  - Fixed displaying wrong environment variable suggestions
  - Fixed VFS warning output
  - Fixed SEGV in ucs_debug_backtrace_next(), upon previous SEGV handling,
    due to ENOMEM situation
  - Fixed memory corruption when using UCX_MPOOL_FIFO=y
  - UCM
  - Fixed conditional jump patching
  - Fixed mremap() override
  - Tests
  - Added a rocm docker container for testing
  - Added option to send client_id in iodemo test
  - Added support for multiple connections to the same server in iodemo test
  - Added synchronization before exit to hello world examples
  - Fixed wrong usage of ep_close in examples
  - Tools
  - Added user-side memcpy option for AM benchmarks in ucx_perftest
  - Added wireshark LUA dissectors for some UCX protocols
  - Fixed memory access flags in perftest
  - Removed support for librte from perf
  - Fixed worker flush deadlock when using multiple workers in ucx_perftest
  - Build
  - Added support for binutils 2.40
  - Added versioned dependency to switch between packages with the same names
  - Added a separate xpmem deb subpackage
  - Added aarch64 support to the binary distribution pipeline
  - Removed dependency on libnuma
  - Documentation
  - Updated ucp_worker_release_address description
- Refresh openucx-s390x-support.patch against latest souces</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1719403200">- Update to 1.17.0
  - See NEWS for the complete CHANGELOG
- Refresh openucx-s390x-support.patch against the latest sources
- Add upstream fix UCS-TIME-Add-math.h-to-provide-INFINITY.patch
  to fix compilation on ppc64</changelog>
  <changelog author="schwab@suse.de" date="1719662400">- Enable build on riscv64</changelog>
  <changelog author="nicolas.morey@suse.com" date="1725710400">- Refresh openucx-s390x-support.patch to fix compilation on s390x</changelog>
  <changelog author="nicolas.morey@suse.com" date="1743508800">- Add UCT-IB-UD-Use-GRH-to-detect-address-family-on-non-Mellanox-hardware.patch
  to fix an UD init issue on non-Mellanox RDMA HW (bsc#1240204)</changelog>
</package>
<package pkgid="28c4de97cbbd347f15457110f3beb862b9fc092d865e86d8148e2f15546ea971" name="libucp-devel" arch="x86_64">
  <version epoch="0" ver="1.17.0" rel="150700.4.2.7"/>
  <changelog author="jengelh@inai.de" date="1570190400">- Ensure /usr/lib/ucx is owned at all times.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1591272000">- Update to v1.8.0
  - Features:
  - Improved detection for DEVX support
  - Improved TCP scalability
  - Added support for ROCM to perftest
  - Added support for different source and target memory types to perftest
  - Added optimized memcpy for ROCM devices
  - Added hardware tag-matching for CUDA buffers
  - Added support for CUDA and ROCM managed memories
  - Added support for client/server disconnect protocol over rdma connection manager
  - Added support for striding receive queue for hardware tag-matching
  - Added XPMEM-based rendezvous protocol for shared memory
  - Added support shared memory communication between containers on same machine
  - Added support for multi-threaded RDMA memory registration for large regions
  - Added new test cases to Azure CI
  - Added support for multiple listening transports
  - Added UCT socket-based connection manager transport
  - Updated API for UCT component management
  - Added API to retrieve the listening port
  - Added UCP active message API
  - Removed deprecated API for querying UCT memory domains
  - Refactored server/client examples
  - Added support for dlopen interception in UCM
  - Added support for PCIe atomics
  - Updated Java API: added support for most of UCP layer operations
  - Updated support for Mellanox DevX API
  - Added multiple UCT/TCP transport performance optimizations
  - Optimized memcpy() for Intel platforms
  - Added protection from non-UCX socket based app connections
  - Improved search time for PKEY object
  - Enabled gtest over IPv6 interfaces
  - Updated Mellanox and Bull device IDs
  - Added support for CUDA_VISIBLE_DEVICES
  - Increased limits for CUDA IPC registration
  - Bugfixes:
  - Multiple fixes in JUCX
  - Fixes in UCP thread safety
  - Fixes for most recent versions GCC, PGI, and ICC
  - Fixes for CPU affinity on Azure instances
  - Fixes in XPMEM support on PPC64
  - Performance fixes in CUDA IPC
  - Fixes in RDMA CM flows
  - Multiple fixes in TCP transport
  - Multiple fixes in documentation
  - Fixes in transport lane selection logic
  - Fixes in Java jar build
  - Fixes in socket connection manager for Nvidia DGX-2 platform
  - Multiple fixes in UCP, UCT, UCM libraries
  - Multiple fixes for BSD and Mac OS systems
  - Fixes for Clang compiler
  - Fix CPU optimization configuration options
  - Fix JUCX build on GPU nodes
  - Fix in Azure release pipeline flow
  - Fix in CUDA memory hooks management
  - Fix in GPU memory peer direct gtest
  - Fix in TCP connection establishment flow
  - Fix in GPU IPC check
  - Fix in CUDA Jenkins test flow
  - Multiple fixes in CUDA IPC flow
  - Fix adding missing header files
  - Fix to prevent failures in presence of VPN enabled Ethernet interfaces
- Refresh openucx-s390x-support.patch against new version</changelog>
  <changelog author="jengelh@inai.de" date="1591358400">- Trim bias and filler wording from descriptions.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1594641600">- Update to v1.8.1
  - Features:
  - Added binary release pipeline in Azure CI
  - Bugfixes:
  - Multiple fixes in testing environment
  - Fixes in InfiniBand DEVX transport
  - Fixes in memory management for CUDA IPC transport
  - Fixes for binutils 2.34+
  - Fixes for AMD ROCM build environment</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1601899200">- Update to v1.9.0 (jsc#SLE-15163)
  - Features:
  - Added a new class of communication APIs '*_nbx' that enable API extendability while
  - preserving ABI backward compatibility
  - Added asynchronous event support to UCT/IB/DEVX
  - Added support for latest CUDA library version
  - Added NAK-based reliability protocol for UCT/IB/UD to optimize resends
  - Added new tests for ROCm
  - Added new configuration parameters for protocol selection
  - Added performance optimization for Fujitsu A64FX with InfiniBand
  - Added performance optimization for clear cache code aarch64
  - Added support for relaxed-order PCIe access in IB RDMA transports
  - Added new TCP connection manager
  - Added support for UCT/IB PKey with partial membership in IB transports
  - Added support for RoCE LAG
  - Added support for ROCm 3.7 and above
  - Added flow control for RDMA read operations
  - Improved endpoint flush implementation for UCT/IB
  - Improved UD timer to avoid interrupting the main thread when not in use
  - Improved latency estimation for network path with CUDA
  - Improved error reporting messages
  - Improved performance in active message flow (removed malloc call)
  - Improved performance in ptr_array flow
  - Improved performance in UCT/SM progress engine flow
  - Improved I/O demo code
  - Improved rendezvous protocol for CUDA
  - Updated examples code
  - Bugfixes:
  - Fixes for most resent versions of GCC, CLANG, ARMCLANG, PGI
  - Fixes in UCT/IB for strict order keys
  - Fixes in memory barrier code for aarch64
  - Fixes in UCT/IB/DEVX for fork system call
  - Fixes in UCT/IB for rand() call in rdma-core
  - Fixed in group rescheduling for UCT/IB/DC
  - Fixes in UCT/CUDA bandwidth reporting
  - Fixes in rkey_ptr protocol
  - Fixes in lane selection for rendezvous protocol based on get-zero-copy flow
  - Fixes for ROCm build
  - Fixes for XPMEM transport
  - Fixes in closing endpoint code
  - Fixes in RDMACM code
  - Fixes in memcpy selection for AMD
  - Fixed in UCT/UD endpoint flush functionality
  - Fixes in XPMEM detection
  - Fixes in rendezvous staging protocol
  - Fixes in ROCEv1 mlx5 UDP source port configuration
  - Multiple fixes in RPM spec file
  - Multiple fixes in UCP documentation
  - Multiple fixes in socket connection manager
  - Multiple fixes in gtest
  - Multiple fixes in JAVA API implementation
- Refresh openucx-s390x-support.patch against new version</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1614168000">- Update openucx-s390x-support.patch to fix mmap syscall on s390x (bsc#1182691)
  - Core:
  - Added support for UCX monitoring using virtual file system (VFS)/FUSE
  - Added support for applications with static CUDA runtime linking
  - Added support for a configuration file
  - Updated clang format configuration
  - UCP
  - Added rendezvous API for active messages
  - Added user-defined name to context, worker, and endpoint objects
  - Added flag to silence request leak check
  - Added API for endpoint performance evaluation
  - Added API - ucp_request_query
  - Added API - ucp_lib_query
  - Added bandwidth optimizations for new protocols multi-lane
  - Added support for multi-rail over lanes with BW ratio &gt;= 1/4
  - Added support for tracking outstanding requests and aborting those in case of connection failure
  - Refactored keep-alive protocol
  - Added device id to wireup protocol
  - Added support up to 128 transport layer resources in UCP context
  - Added support CUDA memory allocations with ucp_mem_map
  - Increased UCP_WORKER_MAX_EP_CONFIG to 64
  - Adjusted memory type zcopy threshold when UCX_ZCOPY_THRESH set
  - Refactored wireup protocols, rendezvous, get, zcopy protocols
  - Added put zcopy multi-rail
  - Improved logging for new protocols
  - Added system topology information
  - Added new protocols for eager offload protocols
  - UCT
  - Extended connection establishment API
  - Added active message AM alignment in iface params
  - Added active message short IOV API.
  - Added support for interface query by operation and memory type
  - Added API to get allocation base address and length
  - Added md_dereg_v2 API
  - UCS
  - Added log filter by source file name.
  - Added checking for last element in fraglist queue
  - Added a method to get IP address from sockaddr.
  - Added memory usage limits to registration cache
  - RDMA CORE (IB, ROCE, etc.)
  - Added report of QP info in case of completion with error
  - Refactored of FC send operations
  - Added support for  DevX unique QPN allocation
  - Optimized endpoint lookup for  DCI
  - Added support for RDMA sub-function (SF)
  - Added support for DCI via DEVX
  - Added DCI pool per LAG port
  - Added support  for RoCE IP reachability check using a subnet mask
  - Added active message short IOV for UD/DC/RC mlx, UD/RC verbs
  - Added endpoint keep alive check for UD
  - Suppressed warning if device can't be opened
  - Added support for multiple flush cancel without completion
  - Added ignore for devices with invalid GID
  - Added support for SRQ linked list reordering
  - Added flush by flow control on old devices
  - Added support for configurable rdma_resolve_addr/route timeout
  - Shared memory
  - Added active message short IOV support for posix, sysv, and self transports
  - TCP
  - Added support for peer failure in case of CONNECT_TO_EP
  - Added support for active message short IOV
  - See NEWS for a complete changelog and bug fixes
- Refresh openucx-s390x-support against latest sources</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1632398400">- Update to v1.11.1 (jsc#SLE-19260)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1642075200">- Fix UCM bistro support on non s390x archs
- Add ucm-fix-UCX_MEM_MALLOC_RELOC.patch to disable malloc relocations by default (bsc#1194369)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1664280000">- Update to v1.13.1 (jsc#PED-912)
  - Core
  - Added new objects to VFS: local and remote address of endpoint,
    statistics of ucp_ep_create success/failure, failed/destroyed endpoints
  - Added support for UCX static libraries
  - Added profiling for rkey management routines
  - PCIe relaxed order enabled by default for AMD CPUs
  - Fixed not deallocating memory from ucp_mem_unmap if no rcache
  - Fixed versioning infrastructure
  - Multiple code improvements: refactoring, debug prints and assertions, etc.
  - Multiple improvements in build, test and docs infrastructure
  - Added new objects to VFS (md, component, log_level, etc.)
  - Added configuration variable to specify which loadable modules are allowed
  - Added build-time configuration to disable sigaction overriding
  - UCP
  - Added API to pass pre-registered memory handle to UCP operations
  - Added implementation of AM rendezvous protocol
  - Added 2-stage pipeline rendezvous protocol for GPU
  - Added support for fragment mem_type for v1 pipeline proto, disabled by default
  - Added active message support for proto v2
  - Added UCP memory registration cache
  - Improved adaptive progress - deactivate iface when all p2p lanes are destroyed
  - Added support for user memh in proto_v1
  - Added support for selecting local address when creating a client endpoint
  - Added option to limit GPUDirectRDMA size in rendezvous protocol, UCX_RNDV_MEMTYPE_DIRECT_SIZE
  - Deprecated UCX_SOCKADDR_AUX_TLS configuration parameter
  - Resolving remote EP ID when creating local EP disabled by default
  - Added client_id to ucp_worker_create() and ucp_conn_request_query() APIs
  - Added ucp_worker_address_query() API
  - Updated ucp_ep_query() API for getting local and remote addresses
  - Added address versioning to correctly preserve wire compatibility starting from version 1.11.0
  - Added new client/server connection establishment packet header format
  - Enabled rendezvous and tag sync protocols when error handling is enabled on the endpoint
  - Added iov zcopy support to RMA operations
  - Reduced memory usage of unexpected messages by fitting receive buffer size to packet size
  - Added support for modifying UCT and UCS configs by ucp_config_modify() API
  - Optimized unpacked rkeys memory consumption
  - Added request flag to influence latency vs. bandwidth protocol
  - Reduced memory management overhead with new protocols
  - Improved performance calculations for new protocols
  - Added AMO support with GPU memory target using new protocols
  - Added put_zcopy, get_zcopy and pipeline based rendezvous in new protocols
  - Added support for user-defined alignment in Active Messages
  - Added support for offload tag sync in new protocols
  - Updated ucp_atomic_post() to use NBX flow
  - UCT
  - Introduced API uct_md_mkey_pack_v2
  - Introduced UCT iface features API
  - Introduced max_inflight_eps parameter in perf_attr API
  - Introduced UCT_SEND_FLAG_PEER_CHECK flag that forces checking connectivity to a peer
  - Introduced UCX_RCACHE_PURGE_ON_FORK to enable/disable cleaning regions when application is forking
  - Disabled PEER_FAILURE capability for XPMEM
  - Added API - uct_iface_is_reachable_v2()
  - Added IPv6 address support in TCP
  - Added latency estimation to uct_iface_estimate_perf()
  - Adjusted knem and cma overhead cost
  - Increased built-in TCP keep-alive interval to 2 seconds
  - RDMA CORE (IB, ROCE, etc.)
  - Introduced NDR autorecognition
  - Introduced CQE zipping support
  - Set the default MAX_RD_ATOMIC to maximum value supported by the hardware
  - Disabled mlx5 ifaces on verbs MD
  - Added detection of IB NDR devices
  - Added check for CQ overrun in assert mode
  - Added bitmap usage for releasing detached DCIs
  - Added configuration for requests ack frequency with DevX
  - Added remote QP info to tx error CQE traces
  - ROCM
  - Increased maximum number of HSA agents
  - UCS
  - Added topo module infrastructure
  - Added memtrack and rcache information to VFS
  - Added API for a per-process aggregate-sum statistics report
  - Added memory pool set data structure
  - Added new ptr_array API for bulk allocation
  - Added ucs_string_buffer_append_flags() for string buffer
  - Added ucs_ffs32()
  - Added ucs_vsnprintf_safe() which always adds '\0'
  - Added thread-safe put to ptr_map
  - Improved accuracy of the topology distance estimation
  - Added prints of leaked callbacks from the callback queue
  - Removed a diagnostic message when fuse thread is stopped
  - Added configurable limit for the memory consumed by rcache
  - Added configuration for VFS(FUSE) thread affinity
  - Added memory limit support to memtrack
  - Packaging
  - Added cmake config files for better integration with external cmake based projects
  - Tools
  - Added loop-back transport support in ucx_perftest
  - Split ucx_perftest into separate modules
  - Added process placement option for ucx_info
  - Extended parameters correctness check in ucx_perftest
- Backported UCS-DEBUG-replace-PTR-with-void.patch
  from upstream to fix compilation</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1664884800">- Update openucx-s390x-support.patch to add missing ucs_ffs32 on s390x
- Drop baselibs.conf as openucx only works on 64b systems</changelog>
  <changelog author="schwab@suse.de" date="1673870400">- openucx-s390x-support.patch: fix use of clz builtin for 64-bit value</changelog>
  <changelog author="mliska@suse.cz" date="1678104000">- Add upstream gcc13-fix.patch fix.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1679313600">- Update to v1.14.0
  - UCP
  - Added API for querying transport and device names on endpoint
  - Added API for querying datatype object
  - Added API for exporting and importing memory keys (no implementation yet)
  - Added support for non-persistent active message header
  - Added infrastructure to print protocols v2 performance
  - Multiple performance improvements for protocols v2
  - Added support for non-contiguous datatypes for rendezvous protocols v2
  - Added support for reset and abort request in protocols v2
  - Added support for user memory handles in RMA API
  - Added multi-rail support for RMA API in protocols v2
  - Added support for up to 16 different lanes per endpoint
  - Added support for dmabuf memory registration in protocols v2
  - Added strong fence mode for ucp_worker_fence() API
  - UCT
  - Added new uct_md_mem_attach() API to support exported memory handles
  - Added remote completion mode for endpoint flush (via new flag)
  - Added support for dmabuf registration
  - Added new uct_ep_connect_to_ep_v2() API
  - Added new uct_mem_reg_v2() API
  - Added new uct_md_query_v2() API
  - Added support for IPv6 loopback address in TCP transport
  - RDMA CORE (IB, ROCE, etc.)
  - Added ECE (enhanced connection establishment) support for RC and DC transports
  - Added support for hardware DCS in DC transport
  - Added UD interface and endpoint resource information to VFS
  - Added CQ creation via DEVX API
  - Removed support for accelerated IB transports over legacy experimental verbs
  - UCS
  - Added support for auto-correction of user environment variables
  - UCM
  - Implemented CUDA bistro hooks for aarch64 (to enable memory cache on this platform)
  - Added support for CUDA virtual/stream-ordered memory with cudaMallocAsync
  - Documentation
  - Added FAQ for using pkg-config tool to build applications with UCX
  - Tools
  - Added runtime library version to the 'ucx_info -v' output
  - Added support for memory types in ucx_info
  - Many bugfixes. See NEWS.
- Drop patch merged upstream:
  - UCS-DEBUG-replace-PTR-with-void.patch
  - gcc13-fix.patch
- Refresh openucx-s390x-support.patch</changelog>
  <changelog author="nicolas.morey@suse.com" date="1690286400">- Update to v1.14.1
  - Fixed ROCm to prevent the locking of host pinned memory
  - Added CUDA 12 based UCX builds to the release flow
  - Increased the maximal number of endpoint configurations
  - Fixed filter for a slow-lanes in selection logic
  - Fixed TCP transport bandwidth calculation
  - Fixed device detection for ROCM
  - Fixed compatibility with CUDA 12
  - Fixed rendezvous threshold for multi-path configurations
  - Fixed error message in case of static link
  - Fixed BlueField-3 detection
  - Multiple fixes for Azure CI pipeline</changelog>
  <changelog author="nicolas.morey@suse.com" date="1696248000">- Update to 1.15.0
  - UCP
  - Added 2-stage pipeline protocol in the new protocol infrastructure
  - Added reset and abort functionality of rendezvous protocols in the
    new infrastructure
  - Added zero-copy rendezvous data send protocol in the new infrastructure
  - Added support for user memory handle in the new protocol infrastructure
  - Added option to force ODP registration for certain memory types
  - Enabled lock free memory region deregistration
  - Updated allow/deny transport list feature to control auxiliary transport selection
  - Multiple performance improvements of the new protocol infrastructure
  - Multiple improvements in error and debug messages
  - Fixed assertion when sending from non-contiguous GPU buffer to managed buffer
  - Fixed the race condition on endpoint configurations
  - Fixed endpoint reconfiguration issues due to asymmetrical selection
  - Fixed endpoint reconfiguration error due to wrong locality detection
  - Fixed crash during connection manager cleanup
  - Fixed rkey index calculation for rendezvous protocol
  - Fixed rcache dump function
  - Removed logging from rkey unpack in release mode
  - Fixed dobule free of rkey in rendezvous protocol
  - Fixed rendezvous pipeline protocol error flow
  - Fixed error handling in rendezvous get zcopy protocol
  - Replay pending requests of wireup EP CM during connection establishment
    to prevent potential ordering issues and wrong configuration
  - Pass user-provided memory type to the function that checks whether the buffer
    can be sent inline or not
  - Avoid memory registration during UCP context initialization
  - Fixed CPU/device atomics selection in the new protocol infrastructure
  - Multiple fixes in the new protocol infrastructure information output
  - UCT
  - Split UCT_MD_MKEY_PACK_FLAG_INVALIDATE into two flags for RMA and AMO
  - Added put_zcopy and get_zcopy scheme support for self transport
  - Added base implementation of is_reachable_v2 API using intra/inter flag
  - Introduced MD capability for non-blocking registration memory types
  - Added check for dmabuf kernel support in ROCm memory domain
  - Fixed exported memh packing
  - Fixed an error in checking return status of multi-threaded memory
    registration function
  - RDMA CORE (IB, ROCE, etc.)
  - Added implementation of is_reachable_v2 routine to IB interface
  - Added option to control CQE zipping per CQ RX/TX direction
  - Added option to specify how DCI selects port under RoCE LAG
  - Added hw_dcs to the list of policies to select DCI by an endpoint
  - Removed implicit on-demand paging
  - Added option to set RoCE lag dct port for response under queue affinity mode
  - Improved IB memlock limit logging
  - Fixed dma-buf based memory region registration
  - Fixed memory handle data corruption when PCIe relaxed ordering is enabled
  - Fixed performance degradation when indirect atomic key is not supported
    by the hardware
  - Fixed remote access error to strict-order keys because of wrong offset
  - Added check for UAR support to memory domain opening
  - Fixed updating port counters for devx qp
  - Fixed ibv_create_cq error message on node without Infiniband
  - Fixed performance degradation due to using 2 paths on NDR400 by default
  - Removed unnecessary async lock which otherwise would block UD progress
  - UCS
  - Added ucs_string_buffer_rbrk() to split token
  - Fixed lane selection and added bandwidth estimation for Sapphire Rapids family
  - Fixed displaying wrong environment variable suggestions
  - Fixed VFS warning output
  - Fixed SEGV in ucs_debug_backtrace_next(), upon previous SEGV handling,
    due to ENOMEM situation
  - Fixed memory corruption when using UCX_MPOOL_FIFO=y
  - UCM
  - Fixed conditional jump patching
  - Fixed mremap() override
  - Tests
  - Added a rocm docker container for testing
  - Added option to send client_id in iodemo test
  - Added support for multiple connections to the same server in iodemo test
  - Added synchronization before exit to hello world examples
  - Fixed wrong usage of ep_close in examples
  - Tools
  - Added user-side memcpy option for AM benchmarks in ucx_perftest
  - Added wireshark LUA dissectors for some UCX protocols
  - Fixed memory access flags in perftest
  - Removed support for librte from perf
  - Fixed worker flush deadlock when using multiple workers in ucx_perftest
  - Build
  - Added support for binutils 2.40
  - Added versioned dependency to switch between packages with the same names
  - Added a separate xpmem deb subpackage
  - Added aarch64 support to the binary distribution pipeline
  - Removed dependency on libnuma
  - Documentation
  - Updated ucp_worker_release_address description
- Refresh openucx-s390x-support.patch against latest souces</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1719403200">- Update to 1.17.0
  - See NEWS for the complete CHANGELOG
- Refresh openucx-s390x-support.patch against the latest sources
- Add upstream fix UCS-TIME-Add-math.h-to-provide-INFINITY.patch
  to fix compilation on ppc64</changelog>
  <changelog author="schwab@suse.de" date="1719662400">- Enable build on riscv64</changelog>
  <changelog author="nicolas.morey@suse.com" date="1725710400">- Refresh openucx-s390x-support.patch to fix compilation on s390x</changelog>
  <changelog author="nicolas.morey@suse.com" date="1743508800">- Add UCT-IB-UD-Use-GRH-to-detect-address-family-on-non-Mellanox-hardware.patch
  to fix an UD init issue on non-Mellanox RDMA HW (bsc#1240204)</changelog>
</package>
<package pkgid="a1b04c564ca58215825b0d5c7f5f9b952be360144b814a4da5eb91f1a918e2c8" name="libucp0" arch="x86_64">
  <version epoch="0" ver="1.17.0" rel="150700.4.2.7"/>
  <changelog author="jengelh@inai.de" date="1570190400">- Ensure /usr/lib/ucx is owned at all times.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1591272000">- Update to v1.8.0
  - Features:
  - Improved detection for DEVX support
  - Improved TCP scalability
  - Added support for ROCM to perftest
  - Added support for different source and target memory types to perftest
  - Added optimized memcpy for ROCM devices
  - Added hardware tag-matching for CUDA buffers
  - Added support for CUDA and ROCM managed memories
  - Added support for client/server disconnect protocol over rdma connection manager
  - Added support for striding receive queue for hardware tag-matching
  - Added XPMEM-based rendezvous protocol for shared memory
  - Added support shared memory communication between containers on same machine
  - Added support for multi-threaded RDMA memory registration for large regions
  - Added new test cases to Azure CI
  - Added support for multiple listening transports
  - Added UCT socket-based connection manager transport
  - Updated API for UCT component management
  - Added API to retrieve the listening port
  - Added UCP active message API
  - Removed deprecated API for querying UCT memory domains
  - Refactored server/client examples
  - Added support for dlopen interception in UCM
  - Added support for PCIe atomics
  - Updated Java API: added support for most of UCP layer operations
  - Updated support for Mellanox DevX API
  - Added multiple UCT/TCP transport performance optimizations
  - Optimized memcpy() for Intel platforms
  - Added protection from non-UCX socket based app connections
  - Improved search time for PKEY object
  - Enabled gtest over IPv6 interfaces
  - Updated Mellanox and Bull device IDs
  - Added support for CUDA_VISIBLE_DEVICES
  - Increased limits for CUDA IPC registration
  - Bugfixes:
  - Multiple fixes in JUCX
  - Fixes in UCP thread safety
  - Fixes for most recent versions GCC, PGI, and ICC
  - Fixes for CPU affinity on Azure instances
  - Fixes in XPMEM support on PPC64
  - Performance fixes in CUDA IPC
  - Fixes in RDMA CM flows
  - Multiple fixes in TCP transport
  - Multiple fixes in documentation
  - Fixes in transport lane selection logic
  - Fixes in Java jar build
  - Fixes in socket connection manager for Nvidia DGX-2 platform
  - Multiple fixes in UCP, UCT, UCM libraries
  - Multiple fixes for BSD and Mac OS systems
  - Fixes for Clang compiler
  - Fix CPU optimization configuration options
  - Fix JUCX build on GPU nodes
  - Fix in Azure release pipeline flow
  - Fix in CUDA memory hooks management
  - Fix in GPU memory peer direct gtest
  - Fix in TCP connection establishment flow
  - Fix in GPU IPC check
  - Fix in CUDA Jenkins test flow
  - Multiple fixes in CUDA IPC flow
  - Fix adding missing header files
  - Fix to prevent failures in presence of VPN enabled Ethernet interfaces
- Refresh openucx-s390x-support.patch against new version</changelog>
  <changelog author="jengelh@inai.de" date="1591358400">- Trim bias and filler wording from descriptions.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1594641600">- Update to v1.8.1
  - Features:
  - Added binary release pipeline in Azure CI
  - Bugfixes:
  - Multiple fixes in testing environment
  - Fixes in InfiniBand DEVX transport
  - Fixes in memory management for CUDA IPC transport
  - Fixes for binutils 2.34+
  - Fixes for AMD ROCM build environment</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1601899200">- Update to v1.9.0 (jsc#SLE-15163)
  - Features:
  - Added a new class of communication APIs '*_nbx' that enable API extendability while
  - preserving ABI backward compatibility
  - Added asynchronous event support to UCT/IB/DEVX
  - Added support for latest CUDA library version
  - Added NAK-based reliability protocol for UCT/IB/UD to optimize resends
  - Added new tests for ROCm
  - Added new configuration parameters for protocol selection
  - Added performance optimization for Fujitsu A64FX with InfiniBand
  - Added performance optimization for clear cache code aarch64
  - Added support for relaxed-order PCIe access in IB RDMA transports
  - Added new TCP connection manager
  - Added support for UCT/IB PKey with partial membership in IB transports
  - Added support for RoCE LAG
  - Added support for ROCm 3.7 and above
  - Added flow control for RDMA read operations
  - Improved endpoint flush implementation for UCT/IB
  - Improved UD timer to avoid interrupting the main thread when not in use
  - Improved latency estimation for network path with CUDA
  - Improved error reporting messages
  - Improved performance in active message flow (removed malloc call)
  - Improved performance in ptr_array flow
  - Improved performance in UCT/SM progress engine flow
  - Improved I/O demo code
  - Improved rendezvous protocol for CUDA
  - Updated examples code
  - Bugfixes:
  - Fixes for most resent versions of GCC, CLANG, ARMCLANG, PGI
  - Fixes in UCT/IB for strict order keys
  - Fixes in memory barrier code for aarch64
  - Fixes in UCT/IB/DEVX for fork system call
  - Fixes in UCT/IB for rand() call in rdma-core
  - Fixed in group rescheduling for UCT/IB/DC
  - Fixes in UCT/CUDA bandwidth reporting
  - Fixes in rkey_ptr protocol
  - Fixes in lane selection for rendezvous protocol based on get-zero-copy flow
  - Fixes for ROCm build
  - Fixes for XPMEM transport
  - Fixes in closing endpoint code
  - Fixes in RDMACM code
  - Fixes in memcpy selection for AMD
  - Fixed in UCT/UD endpoint flush functionality
  - Fixes in XPMEM detection
  - Fixes in rendezvous staging protocol
  - Fixes in ROCEv1 mlx5 UDP source port configuration
  - Multiple fixes in RPM spec file
  - Multiple fixes in UCP documentation
  - Multiple fixes in socket connection manager
  - Multiple fixes in gtest
  - Multiple fixes in JAVA API implementation
- Refresh openucx-s390x-support.patch against new version</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1614168000">- Update openucx-s390x-support.patch to fix mmap syscall on s390x (bsc#1182691)
  - Core:
  - Added support for UCX monitoring using virtual file system (VFS)/FUSE
  - Added support for applications with static CUDA runtime linking
  - Added support for a configuration file
  - Updated clang format configuration
  - UCP
  - Added rendezvous API for active messages
  - Added user-defined name to context, worker, and endpoint objects
  - Added flag to silence request leak check
  - Added API for endpoint performance evaluation
  - Added API - ucp_request_query
  - Added API - ucp_lib_query
  - Added bandwidth optimizations for new protocols multi-lane
  - Added support for multi-rail over lanes with BW ratio &gt;= 1/4
  - Added support for tracking outstanding requests and aborting those in case of connection failure
  - Refactored keep-alive protocol
  - Added device id to wireup protocol
  - Added support up to 128 transport layer resources in UCP context
  - Added support CUDA memory allocations with ucp_mem_map
  - Increased UCP_WORKER_MAX_EP_CONFIG to 64
  - Adjusted memory type zcopy threshold when UCX_ZCOPY_THRESH set
  - Refactored wireup protocols, rendezvous, get, zcopy protocols
  - Added put zcopy multi-rail
  - Improved logging for new protocols
  - Added system topology information
  - Added new protocols for eager offload protocols
  - UCT
  - Extended connection establishment API
  - Added active message AM alignment in iface params
  - Added active message short IOV API.
  - Added support for interface query by operation and memory type
  - Added API to get allocation base address and length
  - Added md_dereg_v2 API
  - UCS
  - Added log filter by source file name.
  - Added checking for last element in fraglist queue
  - Added a method to get IP address from sockaddr.
  - Added memory usage limits to registration cache
  - RDMA CORE (IB, ROCE, etc.)
  - Added report of QP info in case of completion with error
  - Refactored of FC send operations
  - Added support for  DevX unique QPN allocation
  - Optimized endpoint lookup for  DCI
  - Added support for RDMA sub-function (SF)
  - Added support for DCI via DEVX
  - Added DCI pool per LAG port
  - Added support  for RoCE IP reachability check using a subnet mask
  - Added active message short IOV for UD/DC/RC mlx, UD/RC verbs
  - Added endpoint keep alive check for UD
  - Suppressed warning if device can't be opened
  - Added support for multiple flush cancel without completion
  - Added ignore for devices with invalid GID
  - Added support for SRQ linked list reordering
  - Added flush by flow control on old devices
  - Added support for configurable rdma_resolve_addr/route timeout
  - Shared memory
  - Added active message short IOV support for posix, sysv, and self transports
  - TCP
  - Added support for peer failure in case of CONNECT_TO_EP
  - Added support for active message short IOV
  - See NEWS for a complete changelog and bug fixes
- Refresh openucx-s390x-support against latest sources</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1632398400">- Update to v1.11.1 (jsc#SLE-19260)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1642075200">- Fix UCM bistro support on non s390x archs
- Add ucm-fix-UCX_MEM_MALLOC_RELOC.patch to disable malloc relocations by default (bsc#1194369)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1664280000">- Update to v1.13.1 (jsc#PED-912)
  - Core
  - Added new objects to VFS: local and remote address of endpoint,
    statistics of ucp_ep_create success/failure, failed/destroyed endpoints
  - Added support for UCX static libraries
  - Added profiling for rkey management routines
  - PCIe relaxed order enabled by default for AMD CPUs
  - Fixed not deallocating memory from ucp_mem_unmap if no rcache
  - Fixed versioning infrastructure
  - Multiple code improvements: refactoring, debug prints and assertions, etc.
  - Multiple improvements in build, test and docs infrastructure
  - Added new objects to VFS (md, component, log_level, etc.)
  - Added configuration variable to specify which loadable modules are allowed
  - Added build-time configuration to disable sigaction overriding
  - UCP
  - Added API to pass pre-registered memory handle to UCP operations
  - Added implementation of AM rendezvous protocol
  - Added 2-stage pipeline rendezvous protocol for GPU
  - Added support for fragment mem_type for v1 pipeline proto, disabled by default
  - Added active message support for proto v2
  - Added UCP memory registration cache
  - Improved adaptive progress - deactivate iface when all p2p lanes are destroyed
  - Added support for user memh in proto_v1
  - Added support for selecting local address when creating a client endpoint
  - Added option to limit GPUDirectRDMA size in rendezvous protocol, UCX_RNDV_MEMTYPE_DIRECT_SIZE
  - Deprecated UCX_SOCKADDR_AUX_TLS configuration parameter
  - Resolving remote EP ID when creating local EP disabled by default
  - Added client_id to ucp_worker_create() and ucp_conn_request_query() APIs
  - Added ucp_worker_address_query() API
  - Updated ucp_ep_query() API for getting local and remote addresses
  - Added address versioning to correctly preserve wire compatibility starting from version 1.11.0
  - Added new client/server connection establishment packet header format
  - Enabled rendezvous and tag sync protocols when error handling is enabled on the endpoint
  - Added iov zcopy support to RMA operations
  - Reduced memory usage of unexpected messages by fitting receive buffer size to packet size
  - Added support for modifying UCT and UCS configs by ucp_config_modify() API
  - Optimized unpacked rkeys memory consumption
  - Added request flag to influence latency vs. bandwidth protocol
  - Reduced memory management overhead with new protocols
  - Improved performance calculations for new protocols
  - Added AMO support with GPU memory target using new protocols
  - Added put_zcopy, get_zcopy and pipeline based rendezvous in new protocols
  - Added support for user-defined alignment in Active Messages
  - Added support for offload tag sync in new protocols
  - Updated ucp_atomic_post() to use NBX flow
  - UCT
  - Introduced API uct_md_mkey_pack_v2
  - Introduced UCT iface features API
  - Introduced max_inflight_eps parameter in perf_attr API
  - Introduced UCT_SEND_FLAG_PEER_CHECK flag that forces checking connectivity to a peer
  - Introduced UCX_RCACHE_PURGE_ON_FORK to enable/disable cleaning regions when application is forking
  - Disabled PEER_FAILURE capability for XPMEM
  - Added API - uct_iface_is_reachable_v2()
  - Added IPv6 address support in TCP
  - Added latency estimation to uct_iface_estimate_perf()
  - Adjusted knem and cma overhead cost
  - Increased built-in TCP keep-alive interval to 2 seconds
  - RDMA CORE (IB, ROCE, etc.)
  - Introduced NDR autorecognition
  - Introduced CQE zipping support
  - Set the default MAX_RD_ATOMIC to maximum value supported by the hardware
  - Disabled mlx5 ifaces on verbs MD
  - Added detection of IB NDR devices
  - Added check for CQ overrun in assert mode
  - Added bitmap usage for releasing detached DCIs
  - Added configuration for requests ack frequency with DevX
  - Added remote QP info to tx error CQE traces
  - ROCM
  - Increased maximum number of HSA agents
  - UCS
  - Added topo module infrastructure
  - Added memtrack and rcache information to VFS
  - Added API for a per-process aggregate-sum statistics report
  - Added memory pool set data structure
  - Added new ptr_array API for bulk allocation
  - Added ucs_string_buffer_append_flags() for string buffer
  - Added ucs_ffs32()
  - Added ucs_vsnprintf_safe() which always adds '\0'
  - Added thread-safe put to ptr_map
  - Improved accuracy of the topology distance estimation
  - Added prints of leaked callbacks from the callback queue
  - Removed a diagnostic message when fuse thread is stopped
  - Added configurable limit for the memory consumed by rcache
  - Added configuration for VFS(FUSE) thread affinity
  - Added memory limit support to memtrack
  - Packaging
  - Added cmake config files for better integration with external cmake based projects
  - Tools
  - Added loop-back transport support in ucx_perftest
  - Split ucx_perftest into separate modules
  - Added process placement option for ucx_info
  - Extended parameters correctness check in ucx_perftest
- Backported UCS-DEBUG-replace-PTR-with-void.patch
  from upstream to fix compilation</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1664884800">- Update openucx-s390x-support.patch to add missing ucs_ffs32 on s390x
- Drop baselibs.conf as openucx only works on 64b systems</changelog>
  <changelog author="schwab@suse.de" date="1673870400">- openucx-s390x-support.patch: fix use of clz builtin for 64-bit value</changelog>
  <changelog author="mliska@suse.cz" date="1678104000">- Add upstream gcc13-fix.patch fix.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1679313600">- Update to v1.14.0
  - UCP
  - Added API for querying transport and device names on endpoint
  - Added API for querying datatype object
  - Added API for exporting and importing memory keys (no implementation yet)
  - Added support for non-persistent active message header
  - Added infrastructure to print protocols v2 performance
  - Multiple performance improvements for protocols v2
  - Added support for non-contiguous datatypes for rendezvous protocols v2
  - Added support for reset and abort request in protocols v2
  - Added support for user memory handles in RMA API
  - Added multi-rail support for RMA API in protocols v2
  - Added support for up to 16 different lanes per endpoint
  - Added support for dmabuf memory registration in protocols v2
  - Added strong fence mode for ucp_worker_fence() API
  - UCT
  - Added new uct_md_mem_attach() API to support exported memory handles
  - Added remote completion mode for endpoint flush (via new flag)
  - Added support for dmabuf registration
  - Added new uct_ep_connect_to_ep_v2() API
  - Added new uct_mem_reg_v2() API
  - Added new uct_md_query_v2() API
  - Added support for IPv6 loopback address in TCP transport
  - RDMA CORE (IB, ROCE, etc.)
  - Added ECE (enhanced connection establishment) support for RC and DC transports
  - Added support for hardware DCS in DC transport
  - Added UD interface and endpoint resource information to VFS
  - Added CQ creation via DEVX API
  - Removed support for accelerated IB transports over legacy experimental verbs
  - UCS
  - Added support for auto-correction of user environment variables
  - UCM
  - Implemented CUDA bistro hooks for aarch64 (to enable memory cache on this platform)
  - Added support for CUDA virtual/stream-ordered memory with cudaMallocAsync
  - Documentation
  - Added FAQ for using pkg-config tool to build applications with UCX
  - Tools
  - Added runtime library version to the 'ucx_info -v' output
  - Added support for memory types in ucx_info
  - Many bugfixes. See NEWS.
- Drop patch merged upstream:
  - UCS-DEBUG-replace-PTR-with-void.patch
  - gcc13-fix.patch
- Refresh openucx-s390x-support.patch</changelog>
  <changelog author="nicolas.morey@suse.com" date="1690286400">- Update to v1.14.1
  - Fixed ROCm to prevent the locking of host pinned memory
  - Added CUDA 12 based UCX builds to the release flow
  - Increased the maximal number of endpoint configurations
  - Fixed filter for a slow-lanes in selection logic
  - Fixed TCP transport bandwidth calculation
  - Fixed device detection for ROCM
  - Fixed compatibility with CUDA 12
  - Fixed rendezvous threshold for multi-path configurations
  - Fixed error message in case of static link
  - Fixed BlueField-3 detection
  - Multiple fixes for Azure CI pipeline</changelog>
  <changelog author="nicolas.morey@suse.com" date="1696248000">- Update to 1.15.0
  - UCP
  - Added 2-stage pipeline protocol in the new protocol infrastructure
  - Added reset and abort functionality of rendezvous protocols in the
    new infrastructure
  - Added zero-copy rendezvous data send protocol in the new infrastructure
  - Added support for user memory handle in the new protocol infrastructure
  - Added option to force ODP registration for certain memory types
  - Enabled lock free memory region deregistration
  - Updated allow/deny transport list feature to control auxiliary transport selection
  - Multiple performance improvements of the new protocol infrastructure
  - Multiple improvements in error and debug messages
  - Fixed assertion when sending from non-contiguous GPU buffer to managed buffer
  - Fixed the race condition on endpoint configurations
  - Fixed endpoint reconfiguration issues due to asymmetrical selection
  - Fixed endpoint reconfiguration error due to wrong locality detection
  - Fixed crash during connection manager cleanup
  - Fixed rkey index calculation for rendezvous protocol
  - Fixed rcache dump function
  - Removed logging from rkey unpack in release mode
  - Fixed dobule free of rkey in rendezvous protocol
  - Fixed rendezvous pipeline protocol error flow
  - Fixed error handling in rendezvous get zcopy protocol
  - Replay pending requests of wireup EP CM during connection establishment
    to prevent potential ordering issues and wrong configuration
  - Pass user-provided memory type to the function that checks whether the buffer
    can be sent inline or not
  - Avoid memory registration during UCP context initialization
  - Fixed CPU/device atomics selection in the new protocol infrastructure
  - Multiple fixes in the new protocol infrastructure information output
  - UCT
  - Split UCT_MD_MKEY_PACK_FLAG_INVALIDATE into two flags for RMA and AMO
  - Added put_zcopy and get_zcopy scheme support for self transport
  - Added base implementation of is_reachable_v2 API using intra/inter flag
  - Introduced MD capability for non-blocking registration memory types
  - Added check for dmabuf kernel support in ROCm memory domain
  - Fixed exported memh packing
  - Fixed an error in checking return status of multi-threaded memory
    registration function
  - RDMA CORE (IB, ROCE, etc.)
  - Added implementation of is_reachable_v2 routine to IB interface
  - Added option to control CQE zipping per CQ RX/TX direction
  - Added option to specify how DCI selects port under RoCE LAG
  - Added hw_dcs to the list of policies to select DCI by an endpoint
  - Removed implicit on-demand paging
  - Added option to set RoCE lag dct port for response under queue affinity mode
  - Improved IB memlock limit logging
  - Fixed dma-buf based memory region registration
  - Fixed memory handle data corruption when PCIe relaxed ordering is enabled
  - Fixed performance degradation when indirect atomic key is not supported
    by the hardware
  - Fixed remote access error to strict-order keys because of wrong offset
  - Added check for UAR support to memory domain opening
  - Fixed updating port counters for devx qp
  - Fixed ibv_create_cq error message on node without Infiniband
  - Fixed performance degradation due to using 2 paths on NDR400 by default
  - Removed unnecessary async lock which otherwise would block UD progress
  - UCS
  - Added ucs_string_buffer_rbrk() to split token
  - Fixed lane selection and added bandwidth estimation for Sapphire Rapids family
  - Fixed displaying wrong environment variable suggestions
  - Fixed VFS warning output
  - Fixed SEGV in ucs_debug_backtrace_next(), upon previous SEGV handling,
    due to ENOMEM situation
  - Fixed memory corruption when using UCX_MPOOL_FIFO=y
  - UCM
  - Fixed conditional jump patching
  - Fixed mremap() override
  - Tests
  - Added a rocm docker container for testing
  - Added option to send client_id in iodemo test
  - Added support for multiple connections to the same server in iodemo test
  - Added synchronization before exit to hello world examples
  - Fixed wrong usage of ep_close in examples
  - Tools
  - Added user-side memcpy option for AM benchmarks in ucx_perftest
  - Added wireshark LUA dissectors for some UCX protocols
  - Fixed memory access flags in perftest
  - Removed support for librte from perf
  - Fixed worker flush deadlock when using multiple workers in ucx_perftest
  - Build
  - Added support for binutils 2.40
  - Added versioned dependency to switch between packages with the same names
  - Added a separate xpmem deb subpackage
  - Added aarch64 support to the binary distribution pipeline
  - Removed dependency on libnuma
  - Documentation
  - Updated ucp_worker_release_address description
- Refresh openucx-s390x-support.patch against latest souces</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1719403200">- Update to 1.17.0
  - See NEWS for the complete CHANGELOG
- Refresh openucx-s390x-support.patch against the latest sources
- Add upstream fix UCS-TIME-Add-math.h-to-provide-INFINITY.patch
  to fix compilation on ppc64</changelog>
  <changelog author="schwab@suse.de" date="1719662400">- Enable build on riscv64</changelog>
  <changelog author="nicolas.morey@suse.com" date="1725710400">- Refresh openucx-s390x-support.patch to fix compilation on s390x</changelog>
  <changelog author="nicolas.morey@suse.com" date="1743508800">- Add UCT-IB-UD-Use-GRH-to-detect-address-family-on-non-Mellanox-hardware.patch
  to fix an UD init issue on non-Mellanox RDMA HW (bsc#1240204)</changelog>
</package>
<package pkgid="a1855cd6a73e2e7814775f7cf7c00e7d48b1532ab3153debde6155f869778593" name="libucs-devel" arch="x86_64">
  <version epoch="0" ver="1.17.0" rel="150700.4.2.7"/>
  <changelog author="jengelh@inai.de" date="1570190400">- Ensure /usr/lib/ucx is owned at all times.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1591272000">- Update to v1.8.0
  - Features:
  - Improved detection for DEVX support
  - Improved TCP scalability
  - Added support for ROCM to perftest
  - Added support for different source and target memory types to perftest
  - Added optimized memcpy for ROCM devices
  - Added hardware tag-matching for CUDA buffers
  - Added support for CUDA and ROCM managed memories
  - Added support for client/server disconnect protocol over rdma connection manager
  - Added support for striding receive queue for hardware tag-matching
  - Added XPMEM-based rendezvous protocol for shared memory
  - Added support shared memory communication between containers on same machine
  - Added support for multi-threaded RDMA memory registration for large regions
  - Added new test cases to Azure CI
  - Added support for multiple listening transports
  - Added UCT socket-based connection manager transport
  - Updated API for UCT component management
  - Added API to retrieve the listening port
  - Added UCP active message API
  - Removed deprecated API for querying UCT memory domains
  - Refactored server/client examples
  - Added support for dlopen interception in UCM
  - Added support for PCIe atomics
  - Updated Java API: added support for most of UCP layer operations
  - Updated support for Mellanox DevX API
  - Added multiple UCT/TCP transport performance optimizations
  - Optimized memcpy() for Intel platforms
  - Added protection from non-UCX socket based app connections
  - Improved search time for PKEY object
  - Enabled gtest over IPv6 interfaces
  - Updated Mellanox and Bull device IDs
  - Added support for CUDA_VISIBLE_DEVICES
  - Increased limits for CUDA IPC registration
  - Bugfixes:
  - Multiple fixes in JUCX
  - Fixes in UCP thread safety
  - Fixes for most recent versions GCC, PGI, and ICC
  - Fixes for CPU affinity on Azure instances
  - Fixes in XPMEM support on PPC64
  - Performance fixes in CUDA IPC
  - Fixes in RDMA CM flows
  - Multiple fixes in TCP transport
  - Multiple fixes in documentation
  - Fixes in transport lane selection logic
  - Fixes in Java jar build
  - Fixes in socket connection manager for Nvidia DGX-2 platform
  - Multiple fixes in UCP, UCT, UCM libraries
  - Multiple fixes for BSD and Mac OS systems
  - Fixes for Clang compiler
  - Fix CPU optimization configuration options
  - Fix JUCX build on GPU nodes
  - Fix in Azure release pipeline flow
  - Fix in CUDA memory hooks management
  - Fix in GPU memory peer direct gtest
  - Fix in TCP connection establishment flow
  - Fix in GPU IPC check
  - Fix in CUDA Jenkins test flow
  - Multiple fixes in CUDA IPC flow
  - Fix adding missing header files
  - Fix to prevent failures in presence of VPN enabled Ethernet interfaces
- Refresh openucx-s390x-support.patch against new version</changelog>
  <changelog author="jengelh@inai.de" date="1591358400">- Trim bias and filler wording from descriptions.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1594641600">- Update to v1.8.1
  - Features:
  - Added binary release pipeline in Azure CI
  - Bugfixes:
  - Multiple fixes in testing environment
  - Fixes in InfiniBand DEVX transport
  - Fixes in memory management for CUDA IPC transport
  - Fixes for binutils 2.34+
  - Fixes for AMD ROCM build environment</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1601899200">- Update to v1.9.0 (jsc#SLE-15163)
  - Features:
  - Added a new class of communication APIs '*_nbx' that enable API extendability while
  - preserving ABI backward compatibility
  - Added asynchronous event support to UCT/IB/DEVX
  - Added support for latest CUDA library version
  - Added NAK-based reliability protocol for UCT/IB/UD to optimize resends
  - Added new tests for ROCm
  - Added new configuration parameters for protocol selection
  - Added performance optimization for Fujitsu A64FX with InfiniBand
  - Added performance optimization for clear cache code aarch64
  - Added support for relaxed-order PCIe access in IB RDMA transports
  - Added new TCP connection manager
  - Added support for UCT/IB PKey with partial membership in IB transports
  - Added support for RoCE LAG
  - Added support for ROCm 3.7 and above
  - Added flow control for RDMA read operations
  - Improved endpoint flush implementation for UCT/IB
  - Improved UD timer to avoid interrupting the main thread when not in use
  - Improved latency estimation for network path with CUDA
  - Improved error reporting messages
  - Improved performance in active message flow (removed malloc call)
  - Improved performance in ptr_array flow
  - Improved performance in UCT/SM progress engine flow
  - Improved I/O demo code
  - Improved rendezvous protocol for CUDA
  - Updated examples code
  - Bugfixes:
  - Fixes for most resent versions of GCC, CLANG, ARMCLANG, PGI
  - Fixes in UCT/IB for strict order keys
  - Fixes in memory barrier code for aarch64
  - Fixes in UCT/IB/DEVX for fork system call
  - Fixes in UCT/IB for rand() call in rdma-core
  - Fixed in group rescheduling for UCT/IB/DC
  - Fixes in UCT/CUDA bandwidth reporting
  - Fixes in rkey_ptr protocol
  - Fixes in lane selection for rendezvous protocol based on get-zero-copy flow
  - Fixes for ROCm build
  - Fixes for XPMEM transport
  - Fixes in closing endpoint code
  - Fixes in RDMACM code
  - Fixes in memcpy selection for AMD
  - Fixed in UCT/UD endpoint flush functionality
  - Fixes in XPMEM detection
  - Fixes in rendezvous staging protocol
  - Fixes in ROCEv1 mlx5 UDP source port configuration
  - Multiple fixes in RPM spec file
  - Multiple fixes in UCP documentation
  - Multiple fixes in socket connection manager
  - Multiple fixes in gtest
  - Multiple fixes in JAVA API implementation
- Refresh openucx-s390x-support.patch against new version</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1614168000">- Update openucx-s390x-support.patch to fix mmap syscall on s390x (bsc#1182691)
  - Core:
  - Added support for UCX monitoring using virtual file system (VFS)/FUSE
  - Added support for applications with static CUDA runtime linking
  - Added support for a configuration file
  - Updated clang format configuration
  - UCP
  - Added rendezvous API for active messages
  - Added user-defined name to context, worker, and endpoint objects
  - Added flag to silence request leak check
  - Added API for endpoint performance evaluation
  - Added API - ucp_request_query
  - Added API - ucp_lib_query
  - Added bandwidth optimizations for new protocols multi-lane
  - Added support for multi-rail over lanes with BW ratio &gt;= 1/4
  - Added support for tracking outstanding requests and aborting those in case of connection failure
  - Refactored keep-alive protocol
  - Added device id to wireup protocol
  - Added support up to 128 transport layer resources in UCP context
  - Added support CUDA memory allocations with ucp_mem_map
  - Increased UCP_WORKER_MAX_EP_CONFIG to 64
  - Adjusted memory type zcopy threshold when UCX_ZCOPY_THRESH set
  - Refactored wireup protocols, rendezvous, get, zcopy protocols
  - Added put zcopy multi-rail
  - Improved logging for new protocols
  - Added system topology information
  - Added new protocols for eager offload protocols
  - UCT
  - Extended connection establishment API
  - Added active message AM alignment in iface params
  - Added active message short IOV API.
  - Added support for interface query by operation and memory type
  - Added API to get allocation base address and length
  - Added md_dereg_v2 API
  - UCS
  - Added log filter by source file name.
  - Added checking for last element in fraglist queue
  - Added a method to get IP address from sockaddr.
  - Added memory usage limits to registration cache
  - RDMA CORE (IB, ROCE, etc.)
  - Added report of QP info in case of completion with error
  - Refactored of FC send operations
  - Added support for  DevX unique QPN allocation
  - Optimized endpoint lookup for  DCI
  - Added support for RDMA sub-function (SF)
  - Added support for DCI via DEVX
  - Added DCI pool per LAG port
  - Added support  for RoCE IP reachability check using a subnet mask
  - Added active message short IOV for UD/DC/RC mlx, UD/RC verbs
  - Added endpoint keep alive check for UD
  - Suppressed warning if device can't be opened
  - Added support for multiple flush cancel without completion
  - Added ignore for devices with invalid GID
  - Added support for SRQ linked list reordering
  - Added flush by flow control on old devices
  - Added support for configurable rdma_resolve_addr/route timeout
  - Shared memory
  - Added active message short IOV support for posix, sysv, and self transports
  - TCP
  - Added support for peer failure in case of CONNECT_TO_EP
  - Added support for active message short IOV
  - See NEWS for a complete changelog and bug fixes
- Refresh openucx-s390x-support against latest sources</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1632398400">- Update to v1.11.1 (jsc#SLE-19260)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1642075200">- Fix UCM bistro support on non s390x archs
- Add ucm-fix-UCX_MEM_MALLOC_RELOC.patch to disable malloc relocations by default (bsc#1194369)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1664280000">- Update to v1.13.1 (jsc#PED-912)
  - Core
  - Added new objects to VFS: local and remote address of endpoint,
    statistics of ucp_ep_create success/failure, failed/destroyed endpoints
  - Added support for UCX static libraries
  - Added profiling for rkey management routines
  - PCIe relaxed order enabled by default for AMD CPUs
  - Fixed not deallocating memory from ucp_mem_unmap if no rcache
  - Fixed versioning infrastructure
  - Multiple code improvements: refactoring, debug prints and assertions, etc.
  - Multiple improvements in build, test and docs infrastructure
  - Added new objects to VFS (md, component, log_level, etc.)
  - Added configuration variable to specify which loadable modules are allowed
  - Added build-time configuration to disable sigaction overriding
  - UCP
  - Added API to pass pre-registered memory handle to UCP operations
  - Added implementation of AM rendezvous protocol
  - Added 2-stage pipeline rendezvous protocol for GPU
  - Added support for fragment mem_type for v1 pipeline proto, disabled by default
  - Added active message support for proto v2
  - Added UCP memory registration cache
  - Improved adaptive progress - deactivate iface when all p2p lanes are destroyed
  - Added support for user memh in proto_v1
  - Added support for selecting local address when creating a client endpoint
  - Added option to limit GPUDirectRDMA size in rendezvous protocol, UCX_RNDV_MEMTYPE_DIRECT_SIZE
  - Deprecated UCX_SOCKADDR_AUX_TLS configuration parameter
  - Resolving remote EP ID when creating local EP disabled by default
  - Added client_id to ucp_worker_create() and ucp_conn_request_query() APIs
  - Added ucp_worker_address_query() API
  - Updated ucp_ep_query() API for getting local and remote addresses
  - Added address versioning to correctly preserve wire compatibility starting from version 1.11.0
  - Added new client/server connection establishment packet header format
  - Enabled rendezvous and tag sync protocols when error handling is enabled on the endpoint
  - Added iov zcopy support to RMA operations
  - Reduced memory usage of unexpected messages by fitting receive buffer size to packet size
  - Added support for modifying UCT and UCS configs by ucp_config_modify() API
  - Optimized unpacked rkeys memory consumption
  - Added request flag to influence latency vs. bandwidth protocol
  - Reduced memory management overhead with new protocols
  - Improved performance calculations for new protocols
  - Added AMO support with GPU memory target using new protocols
  - Added put_zcopy, get_zcopy and pipeline based rendezvous in new protocols
  - Added support for user-defined alignment in Active Messages
  - Added support for offload tag sync in new protocols
  - Updated ucp_atomic_post() to use NBX flow
  - UCT
  - Introduced API uct_md_mkey_pack_v2
  - Introduced UCT iface features API
  - Introduced max_inflight_eps parameter in perf_attr API
  - Introduced UCT_SEND_FLAG_PEER_CHECK flag that forces checking connectivity to a peer
  - Introduced UCX_RCACHE_PURGE_ON_FORK to enable/disable cleaning regions when application is forking
  - Disabled PEER_FAILURE capability for XPMEM
  - Added API - uct_iface_is_reachable_v2()
  - Added IPv6 address support in TCP
  - Added latency estimation to uct_iface_estimate_perf()
  - Adjusted knem and cma overhead cost
  - Increased built-in TCP keep-alive interval to 2 seconds
  - RDMA CORE (IB, ROCE, etc.)
  - Introduced NDR autorecognition
  - Introduced CQE zipping support
  - Set the default MAX_RD_ATOMIC to maximum value supported by the hardware
  - Disabled mlx5 ifaces on verbs MD
  - Added detection of IB NDR devices
  - Added check for CQ overrun in assert mode
  - Added bitmap usage for releasing detached DCIs
  - Added configuration for requests ack frequency with DevX
  - Added remote QP info to tx error CQE traces
  - ROCM
  - Increased maximum number of HSA agents
  - UCS
  - Added topo module infrastructure
  - Added memtrack and rcache information to VFS
  - Added API for a per-process aggregate-sum statistics report
  - Added memory pool set data structure
  - Added new ptr_array API for bulk allocation
  - Added ucs_string_buffer_append_flags() for string buffer
  - Added ucs_ffs32()
  - Added ucs_vsnprintf_safe() which always adds '\0'
  - Added thread-safe put to ptr_map
  - Improved accuracy of the topology distance estimation
  - Added prints of leaked callbacks from the callback queue
  - Removed a diagnostic message when fuse thread is stopped
  - Added configurable limit for the memory consumed by rcache
  - Added configuration for VFS(FUSE) thread affinity
  - Added memory limit support to memtrack
  - Packaging
  - Added cmake config files for better integration with external cmake based projects
  - Tools
  - Added loop-back transport support in ucx_perftest
  - Split ucx_perftest into separate modules
  - Added process placement option for ucx_info
  - Extended parameters correctness check in ucx_perftest
- Backported UCS-DEBUG-replace-PTR-with-void.patch
  from upstream to fix compilation</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1664884800">- Update openucx-s390x-support.patch to add missing ucs_ffs32 on s390x
- Drop baselibs.conf as openucx only works on 64b systems</changelog>
  <changelog author="schwab@suse.de" date="1673870400">- openucx-s390x-support.patch: fix use of clz builtin for 64-bit value</changelog>
  <changelog author="mliska@suse.cz" date="1678104000">- Add upstream gcc13-fix.patch fix.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1679313600">- Update to v1.14.0
  - UCP
  - Added API for querying transport and device names on endpoint
  - Added API for querying datatype object
  - Added API for exporting and importing memory keys (no implementation yet)
  - Added support for non-persistent active message header
  - Added infrastructure to print protocols v2 performance
  - Multiple performance improvements for protocols v2
  - Added support for non-contiguous datatypes for rendezvous protocols v2
  - Added support for reset and abort request in protocols v2
  - Added support for user memory handles in RMA API
  - Added multi-rail support for RMA API in protocols v2
  - Added support for up to 16 different lanes per endpoint
  - Added support for dmabuf memory registration in protocols v2
  - Added strong fence mode for ucp_worker_fence() API
  - UCT
  - Added new uct_md_mem_attach() API to support exported memory handles
  - Added remote completion mode for endpoint flush (via new flag)
  - Added support for dmabuf registration
  - Added new uct_ep_connect_to_ep_v2() API
  - Added new uct_mem_reg_v2() API
  - Added new uct_md_query_v2() API
  - Added support for IPv6 loopback address in TCP transport
  - RDMA CORE (IB, ROCE, etc.)
  - Added ECE (enhanced connection establishment) support for RC and DC transports
  - Added support for hardware DCS in DC transport
  - Added UD interface and endpoint resource information to VFS
  - Added CQ creation via DEVX API
  - Removed support for accelerated IB transports over legacy experimental verbs
  - UCS
  - Added support for auto-correction of user environment variables
  - UCM
  - Implemented CUDA bistro hooks for aarch64 (to enable memory cache on this platform)
  - Added support for CUDA virtual/stream-ordered memory with cudaMallocAsync
  - Documentation
  - Added FAQ for using pkg-config tool to build applications with UCX
  - Tools
  - Added runtime library version to the 'ucx_info -v' output
  - Added support for memory types in ucx_info
  - Many bugfixes. See NEWS.
- Drop patch merged upstream:
  - UCS-DEBUG-replace-PTR-with-void.patch
  - gcc13-fix.patch
- Refresh openucx-s390x-support.patch</changelog>
  <changelog author="nicolas.morey@suse.com" date="1690286400">- Update to v1.14.1
  - Fixed ROCm to prevent the locking of host pinned memory
  - Added CUDA 12 based UCX builds to the release flow
  - Increased the maximal number of endpoint configurations
  - Fixed filter for a slow-lanes in selection logic
  - Fixed TCP transport bandwidth calculation
  - Fixed device detection for ROCM
  - Fixed compatibility with CUDA 12
  - Fixed rendezvous threshold for multi-path configurations
  - Fixed error message in case of static link
  - Fixed BlueField-3 detection
  - Multiple fixes for Azure CI pipeline</changelog>
  <changelog author="nicolas.morey@suse.com" date="1696248000">- Update to 1.15.0
  - UCP
  - Added 2-stage pipeline protocol in the new protocol infrastructure
  - Added reset and abort functionality of rendezvous protocols in the
    new infrastructure
  - Added zero-copy rendezvous data send protocol in the new infrastructure
  - Added support for user memory handle in the new protocol infrastructure
  - Added option to force ODP registration for certain memory types
  - Enabled lock free memory region deregistration
  - Updated allow/deny transport list feature to control auxiliary transport selection
  - Multiple performance improvements of the new protocol infrastructure
  - Multiple improvements in error and debug messages
  - Fixed assertion when sending from non-contiguous GPU buffer to managed buffer
  - Fixed the race condition on endpoint configurations
  - Fixed endpoint reconfiguration issues due to asymmetrical selection
  - Fixed endpoint reconfiguration error due to wrong locality detection
  - Fixed crash during connection manager cleanup
  - Fixed rkey index calculation for rendezvous protocol
  - Fixed rcache dump function
  - Removed logging from rkey unpack in release mode
  - Fixed dobule free of rkey in rendezvous protocol
  - Fixed rendezvous pipeline protocol error flow
  - Fixed error handling in rendezvous get zcopy protocol
  - Replay pending requests of wireup EP CM during connection establishment
    to prevent potential ordering issues and wrong configuration
  - Pass user-provided memory type to the function that checks whether the buffer
    can be sent inline or not
  - Avoid memory registration during UCP context initialization
  - Fixed CPU/device atomics selection in the new protocol infrastructure
  - Multiple fixes in the new protocol infrastructure information output
  - UCT
  - Split UCT_MD_MKEY_PACK_FLAG_INVALIDATE into two flags for RMA and AMO
  - Added put_zcopy and get_zcopy scheme support for self transport
  - Added base implementation of is_reachable_v2 API using intra/inter flag
  - Introduced MD capability for non-blocking registration memory types
  - Added check for dmabuf kernel support in ROCm memory domain
  - Fixed exported memh packing
  - Fixed an error in checking return status of multi-threaded memory
    registration function
  - RDMA CORE (IB, ROCE, etc.)
  - Added implementation of is_reachable_v2 routine to IB interface
  - Added option to control CQE zipping per CQ RX/TX direction
  - Added option to specify how DCI selects port under RoCE LAG
  - Added hw_dcs to the list of policies to select DCI by an endpoint
  - Removed implicit on-demand paging
  - Added option to set RoCE lag dct port for response under queue affinity mode
  - Improved IB memlock limit logging
  - Fixed dma-buf based memory region registration
  - Fixed memory handle data corruption when PCIe relaxed ordering is enabled
  - Fixed performance degradation when indirect atomic key is not supported
    by the hardware
  - Fixed remote access error to strict-order keys because of wrong offset
  - Added check for UAR support to memory domain opening
  - Fixed updating port counters for devx qp
  - Fixed ibv_create_cq error message on node without Infiniband
  - Fixed performance degradation due to using 2 paths on NDR400 by default
  - Removed unnecessary async lock which otherwise would block UD progress
  - UCS
  - Added ucs_string_buffer_rbrk() to split token
  - Fixed lane selection and added bandwidth estimation for Sapphire Rapids family
  - Fixed displaying wrong environment variable suggestions
  - Fixed VFS warning output
  - Fixed SEGV in ucs_debug_backtrace_next(), upon previous SEGV handling,
    due to ENOMEM situation
  - Fixed memory corruption when using UCX_MPOOL_FIFO=y
  - UCM
  - Fixed conditional jump patching
  - Fixed mremap() override
  - Tests
  - Added a rocm docker container for testing
  - Added option to send client_id in iodemo test
  - Added support for multiple connections to the same server in iodemo test
  - Added synchronization before exit to hello world examples
  - Fixed wrong usage of ep_close in examples
  - Tools
  - Added user-side memcpy option for AM benchmarks in ucx_perftest
  - Added wireshark LUA dissectors for some UCX protocols
  - Fixed memory access flags in perftest
  - Removed support for librte from perf
  - Fixed worker flush deadlock when using multiple workers in ucx_perftest
  - Build
  - Added support for binutils 2.40
  - Added versioned dependency to switch between packages with the same names
  - Added a separate xpmem deb subpackage
  - Added aarch64 support to the binary distribution pipeline
  - Removed dependency on libnuma
  - Documentation
  - Updated ucp_worker_release_address description
- Refresh openucx-s390x-support.patch against latest souces</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1719403200">- Update to 1.17.0
  - See NEWS for the complete CHANGELOG
- Refresh openucx-s390x-support.patch against the latest sources
- Add upstream fix UCS-TIME-Add-math.h-to-provide-INFINITY.patch
  to fix compilation on ppc64</changelog>
  <changelog author="schwab@suse.de" date="1719662400">- Enable build on riscv64</changelog>
  <changelog author="nicolas.morey@suse.com" date="1725710400">- Refresh openucx-s390x-support.patch to fix compilation on s390x</changelog>
  <changelog author="nicolas.morey@suse.com" date="1743508800">- Add UCT-IB-UD-Use-GRH-to-detect-address-family-on-non-Mellanox-hardware.patch
  to fix an UD init issue on non-Mellanox RDMA HW (bsc#1240204)</changelog>
</package>
<package pkgid="c6a0eb0c854598b05733080bbdcbcf41a1d04e60dfd3c130a21733e3de6354d9" name="libucs0" arch="x86_64">
  <version epoch="0" ver="1.17.0" rel="150700.4.2.7"/>
  <changelog author="jengelh@inai.de" date="1570190400">- Ensure /usr/lib/ucx is owned at all times.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1591272000">- Update to v1.8.0
  - Features:
  - Improved detection for DEVX support
  - Improved TCP scalability
  - Added support for ROCM to perftest
  - Added support for different source and target memory types to perftest
  - Added optimized memcpy for ROCM devices
  - Added hardware tag-matching for CUDA buffers
  - Added support for CUDA and ROCM managed memories
  - Added support for client/server disconnect protocol over rdma connection manager
  - Added support for striding receive queue for hardware tag-matching
  - Added XPMEM-based rendezvous protocol for shared memory
  - Added support shared memory communication between containers on same machine
  - Added support for multi-threaded RDMA memory registration for large regions
  - Added new test cases to Azure CI
  - Added support for multiple listening transports
  - Added UCT socket-based connection manager transport
  - Updated API for UCT component management
  - Added API to retrieve the listening port
  - Added UCP active message API
  - Removed deprecated API for querying UCT memory domains
  - Refactored server/client examples
  - Added support for dlopen interception in UCM
  - Added support for PCIe atomics
  - Updated Java API: added support for most of UCP layer operations
  - Updated support for Mellanox DevX API
  - Added multiple UCT/TCP transport performance optimizations
  - Optimized memcpy() for Intel platforms
  - Added protection from non-UCX socket based app connections
  - Improved search time for PKEY object
  - Enabled gtest over IPv6 interfaces
  - Updated Mellanox and Bull device IDs
  - Added support for CUDA_VISIBLE_DEVICES
  - Increased limits for CUDA IPC registration
  - Bugfixes:
  - Multiple fixes in JUCX
  - Fixes in UCP thread safety
  - Fixes for most recent versions GCC, PGI, and ICC
  - Fixes for CPU affinity on Azure instances
  - Fixes in XPMEM support on PPC64
  - Performance fixes in CUDA IPC
  - Fixes in RDMA CM flows
  - Multiple fixes in TCP transport
  - Multiple fixes in documentation
  - Fixes in transport lane selection logic
  - Fixes in Java jar build
  - Fixes in socket connection manager for Nvidia DGX-2 platform
  - Multiple fixes in UCP, UCT, UCM libraries
  - Multiple fixes for BSD and Mac OS systems
  - Fixes for Clang compiler
  - Fix CPU optimization configuration options
  - Fix JUCX build on GPU nodes
  - Fix in Azure release pipeline flow
  - Fix in CUDA memory hooks management
  - Fix in GPU memory peer direct gtest
  - Fix in TCP connection establishment flow
  - Fix in GPU IPC check
  - Fix in CUDA Jenkins test flow
  - Multiple fixes in CUDA IPC flow
  - Fix adding missing header files
  - Fix to prevent failures in presence of VPN enabled Ethernet interfaces
- Refresh openucx-s390x-support.patch against new version</changelog>
  <changelog author="jengelh@inai.de" date="1591358400">- Trim bias and filler wording from descriptions.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1594641600">- Update to v1.8.1
  - Features:
  - Added binary release pipeline in Azure CI
  - Bugfixes:
  - Multiple fixes in testing environment
  - Fixes in InfiniBand DEVX transport
  - Fixes in memory management for CUDA IPC transport
  - Fixes for binutils 2.34+
  - Fixes for AMD ROCM build environment</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1601899200">- Update to v1.9.0 (jsc#SLE-15163)
  - Features:
  - Added a new class of communication APIs '*_nbx' that enable API extendability while
  - preserving ABI backward compatibility
  - Added asynchronous event support to UCT/IB/DEVX
  - Added support for latest CUDA library version
  - Added NAK-based reliability protocol for UCT/IB/UD to optimize resends
  - Added new tests for ROCm
  - Added new configuration parameters for protocol selection
  - Added performance optimization for Fujitsu A64FX with InfiniBand
  - Added performance optimization for clear cache code aarch64
  - Added support for relaxed-order PCIe access in IB RDMA transports
  - Added new TCP connection manager
  - Added support for UCT/IB PKey with partial membership in IB transports
  - Added support for RoCE LAG
  - Added support for ROCm 3.7 and above
  - Added flow control for RDMA read operations
  - Improved endpoint flush implementation for UCT/IB
  - Improved UD timer to avoid interrupting the main thread when not in use
  - Improved latency estimation for network path with CUDA
  - Improved error reporting messages
  - Improved performance in active message flow (removed malloc call)
  - Improved performance in ptr_array flow
  - Improved performance in UCT/SM progress engine flow
  - Improved I/O demo code
  - Improved rendezvous protocol for CUDA
  - Updated examples code
  - Bugfixes:
  - Fixes for most resent versions of GCC, CLANG, ARMCLANG, PGI
  - Fixes in UCT/IB for strict order keys
  - Fixes in memory barrier code for aarch64
  - Fixes in UCT/IB/DEVX for fork system call
  - Fixes in UCT/IB for rand() call in rdma-core
  - Fixed in group rescheduling for UCT/IB/DC
  - Fixes in UCT/CUDA bandwidth reporting
  - Fixes in rkey_ptr protocol
  - Fixes in lane selection for rendezvous protocol based on get-zero-copy flow
  - Fixes for ROCm build
  - Fixes for XPMEM transport
  - Fixes in closing endpoint code
  - Fixes in RDMACM code
  - Fixes in memcpy selection for AMD
  - Fixed in UCT/UD endpoint flush functionality
  - Fixes in XPMEM detection
  - Fixes in rendezvous staging protocol
  - Fixes in ROCEv1 mlx5 UDP source port configuration
  - Multiple fixes in RPM spec file
  - Multiple fixes in UCP documentation
  - Multiple fixes in socket connection manager
  - Multiple fixes in gtest
  - Multiple fixes in JAVA API implementation
- Refresh openucx-s390x-support.patch against new version</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1614168000">- Update openucx-s390x-support.patch to fix mmap syscall on s390x (bsc#1182691)
  - Core:
  - Added support for UCX monitoring using virtual file system (VFS)/FUSE
  - Added support for applications with static CUDA runtime linking
  - Added support for a configuration file
  - Updated clang format configuration
  - UCP
  - Added rendezvous API for active messages
  - Added user-defined name to context, worker, and endpoint objects
  - Added flag to silence request leak check
  - Added API for endpoint performance evaluation
  - Added API - ucp_request_query
  - Added API - ucp_lib_query
  - Added bandwidth optimizations for new protocols multi-lane
  - Added support for multi-rail over lanes with BW ratio &gt;= 1/4
  - Added support for tracking outstanding requests and aborting those in case of connection failure
  - Refactored keep-alive protocol
  - Added device id to wireup protocol
  - Added support up to 128 transport layer resources in UCP context
  - Added support CUDA memory allocations with ucp_mem_map
  - Increased UCP_WORKER_MAX_EP_CONFIG to 64
  - Adjusted memory type zcopy threshold when UCX_ZCOPY_THRESH set
  - Refactored wireup protocols, rendezvous, get, zcopy protocols
  - Added put zcopy multi-rail
  - Improved logging for new protocols
  - Added system topology information
  - Added new protocols for eager offload protocols
  - UCT
  - Extended connection establishment API
  - Added active message AM alignment in iface params
  - Added active message short IOV API.
  - Added support for interface query by operation and memory type
  - Added API to get allocation base address and length
  - Added md_dereg_v2 API
  - UCS
  - Added log filter by source file name.
  - Added checking for last element in fraglist queue
  - Added a method to get IP address from sockaddr.
  - Added memory usage limits to registration cache
  - RDMA CORE (IB, ROCE, etc.)
  - Added report of QP info in case of completion with error
  - Refactored of FC send operations
  - Added support for  DevX unique QPN allocation
  - Optimized endpoint lookup for  DCI
  - Added support for RDMA sub-function (SF)
  - Added support for DCI via DEVX
  - Added DCI pool per LAG port
  - Added support  for RoCE IP reachability check using a subnet mask
  - Added active message short IOV for UD/DC/RC mlx, UD/RC verbs
  - Added endpoint keep alive check for UD
  - Suppressed warning if device can't be opened
  - Added support for multiple flush cancel without completion
  - Added ignore for devices with invalid GID
  - Added support for SRQ linked list reordering
  - Added flush by flow control on old devices
  - Added support for configurable rdma_resolve_addr/route timeout
  - Shared memory
  - Added active message short IOV support for posix, sysv, and self transports
  - TCP
  - Added support for peer failure in case of CONNECT_TO_EP
  - Added support for active message short IOV
  - See NEWS for a complete changelog and bug fixes
- Refresh openucx-s390x-support against latest sources</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1632398400">- Update to v1.11.1 (jsc#SLE-19260)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1642075200">- Fix UCM bistro support on non s390x archs
- Add ucm-fix-UCX_MEM_MALLOC_RELOC.patch to disable malloc relocations by default (bsc#1194369)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1664280000">- Update to v1.13.1 (jsc#PED-912)
  - Core
  - Added new objects to VFS: local and remote address of endpoint,
    statistics of ucp_ep_create success/failure, failed/destroyed endpoints
  - Added support for UCX static libraries
  - Added profiling for rkey management routines
  - PCIe relaxed order enabled by default for AMD CPUs
  - Fixed not deallocating memory from ucp_mem_unmap if no rcache
  - Fixed versioning infrastructure
  - Multiple code improvements: refactoring, debug prints and assertions, etc.
  - Multiple improvements in build, test and docs infrastructure
  - Added new objects to VFS (md, component, log_level, etc.)
  - Added configuration variable to specify which loadable modules are allowed
  - Added build-time configuration to disable sigaction overriding
  - UCP
  - Added API to pass pre-registered memory handle to UCP operations
  - Added implementation of AM rendezvous protocol
  - Added 2-stage pipeline rendezvous protocol for GPU
  - Added support for fragment mem_type for v1 pipeline proto, disabled by default
  - Added active message support for proto v2
  - Added UCP memory registration cache
  - Improved adaptive progress - deactivate iface when all p2p lanes are destroyed
  - Added support for user memh in proto_v1
  - Added support for selecting local address when creating a client endpoint
  - Added option to limit GPUDirectRDMA size in rendezvous protocol, UCX_RNDV_MEMTYPE_DIRECT_SIZE
  - Deprecated UCX_SOCKADDR_AUX_TLS configuration parameter
  - Resolving remote EP ID when creating local EP disabled by default
  - Added client_id to ucp_worker_create() and ucp_conn_request_query() APIs
  - Added ucp_worker_address_query() API
  - Updated ucp_ep_query() API for getting local and remote addresses
  - Added address versioning to correctly preserve wire compatibility starting from version 1.11.0
  - Added new client/server connection establishment packet header format
  - Enabled rendezvous and tag sync protocols when error handling is enabled on the endpoint
  - Added iov zcopy support to RMA operations
  - Reduced memory usage of unexpected messages by fitting receive buffer size to packet size
  - Added support for modifying UCT and UCS configs by ucp_config_modify() API
  - Optimized unpacked rkeys memory consumption
  - Added request flag to influence latency vs. bandwidth protocol
  - Reduced memory management overhead with new protocols
  - Improved performance calculations for new protocols
  - Added AMO support with GPU memory target using new protocols
  - Added put_zcopy, get_zcopy and pipeline based rendezvous in new protocols
  - Added support for user-defined alignment in Active Messages
  - Added support for offload tag sync in new protocols
  - Updated ucp_atomic_post() to use NBX flow
  - UCT
  - Introduced API uct_md_mkey_pack_v2
  - Introduced UCT iface features API
  - Introduced max_inflight_eps parameter in perf_attr API
  - Introduced UCT_SEND_FLAG_PEER_CHECK flag that forces checking connectivity to a peer
  - Introduced UCX_RCACHE_PURGE_ON_FORK to enable/disable cleaning regions when application is forking
  - Disabled PEER_FAILURE capability for XPMEM
  - Added API - uct_iface_is_reachable_v2()
  - Added IPv6 address support in TCP
  - Added latency estimation to uct_iface_estimate_perf()
  - Adjusted knem and cma overhead cost
  - Increased built-in TCP keep-alive interval to 2 seconds
  - RDMA CORE (IB, ROCE, etc.)
  - Introduced NDR autorecognition
  - Introduced CQE zipping support
  - Set the default MAX_RD_ATOMIC to maximum value supported by the hardware
  - Disabled mlx5 ifaces on verbs MD
  - Added detection of IB NDR devices
  - Added check for CQ overrun in assert mode
  - Added bitmap usage for releasing detached DCIs
  - Added configuration for requests ack frequency with DevX
  - Added remote QP info to tx error CQE traces
  - ROCM
  - Increased maximum number of HSA agents
  - UCS
  - Added topo module infrastructure
  - Added memtrack and rcache information to VFS
  - Added API for a per-process aggregate-sum statistics report
  - Added memory pool set data structure
  - Added new ptr_array API for bulk allocation
  - Added ucs_string_buffer_append_flags() for string buffer
  - Added ucs_ffs32()
  - Added ucs_vsnprintf_safe() which always adds '\0'
  - Added thread-safe put to ptr_map
  - Improved accuracy of the topology distance estimation
  - Added prints of leaked callbacks from the callback queue
  - Removed a diagnostic message when fuse thread is stopped
  - Added configurable limit for the memory consumed by rcache
  - Added configuration for VFS(FUSE) thread affinity
  - Added memory limit support to memtrack
  - Packaging
  - Added cmake config files for better integration with external cmake based projects
  - Tools
  - Added loop-back transport support in ucx_perftest
  - Split ucx_perftest into separate modules
  - Added process placement option for ucx_info
  - Extended parameters correctness check in ucx_perftest
- Backported UCS-DEBUG-replace-PTR-with-void.patch
  from upstream to fix compilation</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1664884800">- Update openucx-s390x-support.patch to add missing ucs_ffs32 on s390x
- Drop baselibs.conf as openucx only works on 64b systems</changelog>
  <changelog author="schwab@suse.de" date="1673870400">- openucx-s390x-support.patch: fix use of clz builtin for 64-bit value</changelog>
  <changelog author="mliska@suse.cz" date="1678104000">- Add upstream gcc13-fix.patch fix.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1679313600">- Update to v1.14.0
  - UCP
  - Added API for querying transport and device names on endpoint
  - Added API for querying datatype object
  - Added API for exporting and importing memory keys (no implementation yet)
  - Added support for non-persistent active message header
  - Added infrastructure to print protocols v2 performance
  - Multiple performance improvements for protocols v2
  - Added support for non-contiguous datatypes for rendezvous protocols v2
  - Added support for reset and abort request in protocols v2
  - Added support for user memory handles in RMA API
  - Added multi-rail support for RMA API in protocols v2
  - Added support for up to 16 different lanes per endpoint
  - Added support for dmabuf memory registration in protocols v2
  - Added strong fence mode for ucp_worker_fence() API
  - UCT
  - Added new uct_md_mem_attach() API to support exported memory handles
  - Added remote completion mode for endpoint flush (via new flag)
  - Added support for dmabuf registration
  - Added new uct_ep_connect_to_ep_v2() API
  - Added new uct_mem_reg_v2() API
  - Added new uct_md_query_v2() API
  - Added support for IPv6 loopback address in TCP transport
  - RDMA CORE (IB, ROCE, etc.)
  - Added ECE (enhanced connection establishment) support for RC and DC transports
  - Added support for hardware DCS in DC transport
  - Added UD interface and endpoint resource information to VFS
  - Added CQ creation via DEVX API
  - Removed support for accelerated IB transports over legacy experimental verbs
  - UCS
  - Added support for auto-correction of user environment variables
  - UCM
  - Implemented CUDA bistro hooks for aarch64 (to enable memory cache on this platform)
  - Added support for CUDA virtual/stream-ordered memory with cudaMallocAsync
  - Documentation
  - Added FAQ for using pkg-config tool to build applications with UCX
  - Tools
  - Added runtime library version to the 'ucx_info -v' output
  - Added support for memory types in ucx_info
  - Many bugfixes. See NEWS.
- Drop patch merged upstream:
  - UCS-DEBUG-replace-PTR-with-void.patch
  - gcc13-fix.patch
- Refresh openucx-s390x-support.patch</changelog>
  <changelog author="nicolas.morey@suse.com" date="1690286400">- Update to v1.14.1
  - Fixed ROCm to prevent the locking of host pinned memory
  - Added CUDA 12 based UCX builds to the release flow
  - Increased the maximal number of endpoint configurations
  - Fixed filter for a slow-lanes in selection logic
  - Fixed TCP transport bandwidth calculation
  - Fixed device detection for ROCM
  - Fixed compatibility with CUDA 12
  - Fixed rendezvous threshold for multi-path configurations
  - Fixed error message in case of static link
  - Fixed BlueField-3 detection
  - Multiple fixes for Azure CI pipeline</changelog>
  <changelog author="nicolas.morey@suse.com" date="1696248000">- Update to 1.15.0
  - UCP
  - Added 2-stage pipeline protocol in the new protocol infrastructure
  - Added reset and abort functionality of rendezvous protocols in the
    new infrastructure
  - Added zero-copy rendezvous data send protocol in the new infrastructure
  - Added support for user memory handle in the new protocol infrastructure
  - Added option to force ODP registration for certain memory types
  - Enabled lock free memory region deregistration
  - Updated allow/deny transport list feature to control auxiliary transport selection
  - Multiple performance improvements of the new protocol infrastructure
  - Multiple improvements in error and debug messages
  - Fixed assertion when sending from non-contiguous GPU buffer to managed buffer
  - Fixed the race condition on endpoint configurations
  - Fixed endpoint reconfiguration issues due to asymmetrical selection
  - Fixed endpoint reconfiguration error due to wrong locality detection
  - Fixed crash during connection manager cleanup
  - Fixed rkey index calculation for rendezvous protocol
  - Fixed rcache dump function
  - Removed logging from rkey unpack in release mode
  - Fixed dobule free of rkey in rendezvous protocol
  - Fixed rendezvous pipeline protocol error flow
  - Fixed error handling in rendezvous get zcopy protocol
  - Replay pending requests of wireup EP CM during connection establishment
    to prevent potential ordering issues and wrong configuration
  - Pass user-provided memory type to the function that checks whether the buffer
    can be sent inline or not
  - Avoid memory registration during UCP context initialization
  - Fixed CPU/device atomics selection in the new protocol infrastructure
  - Multiple fixes in the new protocol infrastructure information output
  - UCT
  - Split UCT_MD_MKEY_PACK_FLAG_INVALIDATE into two flags for RMA and AMO
  - Added put_zcopy and get_zcopy scheme support for self transport
  - Added base implementation of is_reachable_v2 API using intra/inter flag
  - Introduced MD capability for non-blocking registration memory types
  - Added check for dmabuf kernel support in ROCm memory domain
  - Fixed exported memh packing
  - Fixed an error in checking return status of multi-threaded memory
    registration function
  - RDMA CORE (IB, ROCE, etc.)
  - Added implementation of is_reachable_v2 routine to IB interface
  - Added option to control CQE zipping per CQ RX/TX direction
  - Added option to specify how DCI selects port under RoCE LAG
  - Added hw_dcs to the list of policies to select DCI by an endpoint
  - Removed implicit on-demand paging
  - Added option to set RoCE lag dct port for response under queue affinity mode
  - Improved IB memlock limit logging
  - Fixed dma-buf based memory region registration
  - Fixed memory handle data corruption when PCIe relaxed ordering is enabled
  - Fixed performance degradation when indirect atomic key is not supported
    by the hardware
  - Fixed remote access error to strict-order keys because of wrong offset
  - Added check for UAR support to memory domain opening
  - Fixed updating port counters for devx qp
  - Fixed ibv_create_cq error message on node without Infiniband
  - Fixed performance degradation due to using 2 paths on NDR400 by default
  - Removed unnecessary async lock which otherwise would block UD progress
  - UCS
  - Added ucs_string_buffer_rbrk() to split token
  - Fixed lane selection and added bandwidth estimation for Sapphire Rapids family
  - Fixed displaying wrong environment variable suggestions
  - Fixed VFS warning output
  - Fixed SEGV in ucs_debug_backtrace_next(), upon previous SEGV handling,
    due to ENOMEM situation
  - Fixed memory corruption when using UCX_MPOOL_FIFO=y
  - UCM
  - Fixed conditional jump patching
  - Fixed mremap() override
  - Tests
  - Added a rocm docker container for testing
  - Added option to send client_id in iodemo test
  - Added support for multiple connections to the same server in iodemo test
  - Added synchronization before exit to hello world examples
  - Fixed wrong usage of ep_close in examples
  - Tools
  - Added user-side memcpy option for AM benchmarks in ucx_perftest
  - Added wireshark LUA dissectors for some UCX protocols
  - Fixed memory access flags in perftest
  - Removed support for librte from perf
  - Fixed worker flush deadlock when using multiple workers in ucx_perftest
  - Build
  - Added support for binutils 2.40
  - Added versioned dependency to switch between packages with the same names
  - Added a separate xpmem deb subpackage
  - Added aarch64 support to the binary distribution pipeline
  - Removed dependency on libnuma
  - Documentation
  - Updated ucp_worker_release_address description
- Refresh openucx-s390x-support.patch against latest souces</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1719403200">- Update to 1.17.0
  - See NEWS for the complete CHANGELOG
- Refresh openucx-s390x-support.patch against the latest sources
- Add upstream fix UCS-TIME-Add-math.h-to-provide-INFINITY.patch
  to fix compilation on ppc64</changelog>
  <changelog author="schwab@suse.de" date="1719662400">- Enable build on riscv64</changelog>
  <changelog author="nicolas.morey@suse.com" date="1725710400">- Refresh openucx-s390x-support.patch to fix compilation on s390x</changelog>
  <changelog author="nicolas.morey@suse.com" date="1743508800">- Add UCT-IB-UD-Use-GRH-to-detect-address-family-on-non-Mellanox-hardware.patch
  to fix an UD init issue on non-Mellanox RDMA HW (bsc#1240204)</changelog>
</package>
<package pkgid="0b86a00aa51eed1672da48361fb130097f071e70b9e646ff5f2315fe88524fb7" name="libuct-devel" arch="x86_64">
  <version epoch="0" ver="1.17.0" rel="150700.4.2.7"/>
  <changelog author="jengelh@inai.de" date="1570190400">- Ensure /usr/lib/ucx is owned at all times.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1591272000">- Update to v1.8.0
  - Features:
  - Improved detection for DEVX support
  - Improved TCP scalability
  - Added support for ROCM to perftest
  - Added support for different source and target memory types to perftest
  - Added optimized memcpy for ROCM devices
  - Added hardware tag-matching for CUDA buffers
  - Added support for CUDA and ROCM managed memories
  - Added support for client/server disconnect protocol over rdma connection manager
  - Added support for striding receive queue for hardware tag-matching
  - Added XPMEM-based rendezvous protocol for shared memory
  - Added support shared memory communication between containers on same machine
  - Added support for multi-threaded RDMA memory registration for large regions
  - Added new test cases to Azure CI
  - Added support for multiple listening transports
  - Added UCT socket-based connection manager transport
  - Updated API for UCT component management
  - Added API to retrieve the listening port
  - Added UCP active message API
  - Removed deprecated API for querying UCT memory domains
  - Refactored server/client examples
  - Added support for dlopen interception in UCM
  - Added support for PCIe atomics
  - Updated Java API: added support for most of UCP layer operations
  - Updated support for Mellanox DevX API
  - Added multiple UCT/TCP transport performance optimizations
  - Optimized memcpy() for Intel platforms
  - Added protection from non-UCX socket based app connections
  - Improved search time for PKEY object
  - Enabled gtest over IPv6 interfaces
  - Updated Mellanox and Bull device IDs
  - Added support for CUDA_VISIBLE_DEVICES
  - Increased limits for CUDA IPC registration
  - Bugfixes:
  - Multiple fixes in JUCX
  - Fixes in UCP thread safety
  - Fixes for most recent versions GCC, PGI, and ICC
  - Fixes for CPU affinity on Azure instances
  - Fixes in XPMEM support on PPC64
  - Performance fixes in CUDA IPC
  - Fixes in RDMA CM flows
  - Multiple fixes in TCP transport
  - Multiple fixes in documentation
  - Fixes in transport lane selection logic
  - Fixes in Java jar build
  - Fixes in socket connection manager for Nvidia DGX-2 platform
  - Multiple fixes in UCP, UCT, UCM libraries
  - Multiple fixes for BSD and Mac OS systems
  - Fixes for Clang compiler
  - Fix CPU optimization configuration options
  - Fix JUCX build on GPU nodes
  - Fix in Azure release pipeline flow
  - Fix in CUDA memory hooks management
  - Fix in GPU memory peer direct gtest
  - Fix in TCP connection establishment flow
  - Fix in GPU IPC check
  - Fix in CUDA Jenkins test flow
  - Multiple fixes in CUDA IPC flow
  - Fix adding missing header files
  - Fix to prevent failures in presence of VPN enabled Ethernet interfaces
- Refresh openucx-s390x-support.patch against new version</changelog>
  <changelog author="jengelh@inai.de" date="1591358400">- Trim bias and filler wording from descriptions.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1594641600">- Update to v1.8.1
  - Features:
  - Added binary release pipeline in Azure CI
  - Bugfixes:
  - Multiple fixes in testing environment
  - Fixes in InfiniBand DEVX transport
  - Fixes in memory management for CUDA IPC transport
  - Fixes for binutils 2.34+
  - Fixes for AMD ROCM build environment</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1601899200">- Update to v1.9.0 (jsc#SLE-15163)
  - Features:
  - Added a new class of communication APIs '*_nbx' that enable API extendability while
  - preserving ABI backward compatibility
  - Added asynchronous event support to UCT/IB/DEVX
  - Added support for latest CUDA library version
  - Added NAK-based reliability protocol for UCT/IB/UD to optimize resends
  - Added new tests for ROCm
  - Added new configuration parameters for protocol selection
  - Added performance optimization for Fujitsu A64FX with InfiniBand
  - Added performance optimization for clear cache code aarch64
  - Added support for relaxed-order PCIe access in IB RDMA transports
  - Added new TCP connection manager
  - Added support for UCT/IB PKey with partial membership in IB transports
  - Added support for RoCE LAG
  - Added support for ROCm 3.7 and above
  - Added flow control for RDMA read operations
  - Improved endpoint flush implementation for UCT/IB
  - Improved UD timer to avoid interrupting the main thread when not in use
  - Improved latency estimation for network path with CUDA
  - Improved error reporting messages
  - Improved performance in active message flow (removed malloc call)
  - Improved performance in ptr_array flow
  - Improved performance in UCT/SM progress engine flow
  - Improved I/O demo code
  - Improved rendezvous protocol for CUDA
  - Updated examples code
  - Bugfixes:
  - Fixes for most resent versions of GCC, CLANG, ARMCLANG, PGI
  - Fixes in UCT/IB for strict order keys
  - Fixes in memory barrier code for aarch64
  - Fixes in UCT/IB/DEVX for fork system call
  - Fixes in UCT/IB for rand() call in rdma-core
  - Fixed in group rescheduling for UCT/IB/DC
  - Fixes in UCT/CUDA bandwidth reporting
  - Fixes in rkey_ptr protocol
  - Fixes in lane selection for rendezvous protocol based on get-zero-copy flow
  - Fixes for ROCm build
  - Fixes for XPMEM transport
  - Fixes in closing endpoint code
  - Fixes in RDMACM code
  - Fixes in memcpy selection for AMD
  - Fixed in UCT/UD endpoint flush functionality
  - Fixes in XPMEM detection
  - Fixes in rendezvous staging protocol
  - Fixes in ROCEv1 mlx5 UDP source port configuration
  - Multiple fixes in RPM spec file
  - Multiple fixes in UCP documentation
  - Multiple fixes in socket connection manager
  - Multiple fixes in gtest
  - Multiple fixes in JAVA API implementation
- Refresh openucx-s390x-support.patch against new version</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1614168000">- Update openucx-s390x-support.patch to fix mmap syscall on s390x (bsc#1182691)
  - Core:
  - Added support for UCX monitoring using virtual file system (VFS)/FUSE
  - Added support for applications with static CUDA runtime linking
  - Added support for a configuration file
  - Updated clang format configuration
  - UCP
  - Added rendezvous API for active messages
  - Added user-defined name to context, worker, and endpoint objects
  - Added flag to silence request leak check
  - Added API for endpoint performance evaluation
  - Added API - ucp_request_query
  - Added API - ucp_lib_query
  - Added bandwidth optimizations for new protocols multi-lane
  - Added support for multi-rail over lanes with BW ratio &gt;= 1/4
  - Added support for tracking outstanding requests and aborting those in case of connection failure
  - Refactored keep-alive protocol
  - Added device id to wireup protocol
  - Added support up to 128 transport layer resources in UCP context
  - Added support CUDA memory allocations with ucp_mem_map
  - Increased UCP_WORKER_MAX_EP_CONFIG to 64
  - Adjusted memory type zcopy threshold when UCX_ZCOPY_THRESH set
  - Refactored wireup protocols, rendezvous, get, zcopy protocols
  - Added put zcopy multi-rail
  - Improved logging for new protocols
  - Added system topology information
  - Added new protocols for eager offload protocols
  - UCT
  - Extended connection establishment API
  - Added active message AM alignment in iface params
  - Added active message short IOV API.
  - Added support for interface query by operation and memory type
  - Added API to get allocation base address and length
  - Added md_dereg_v2 API
  - UCS
  - Added log filter by source file name.
  - Added checking for last element in fraglist queue
  - Added a method to get IP address from sockaddr.
  - Added memory usage limits to registration cache
  - RDMA CORE (IB, ROCE, etc.)
  - Added report of QP info in case of completion with error
  - Refactored of FC send operations
  - Added support for  DevX unique QPN allocation
  - Optimized endpoint lookup for  DCI
  - Added support for RDMA sub-function (SF)
  - Added support for DCI via DEVX
  - Added DCI pool per LAG port
  - Added support  for RoCE IP reachability check using a subnet mask
  - Added active message short IOV for UD/DC/RC mlx, UD/RC verbs
  - Added endpoint keep alive check for UD
  - Suppressed warning if device can't be opened
  - Added support for multiple flush cancel without completion
  - Added ignore for devices with invalid GID
  - Added support for SRQ linked list reordering
  - Added flush by flow control on old devices
  - Added support for configurable rdma_resolve_addr/route timeout
  - Shared memory
  - Added active message short IOV support for posix, sysv, and self transports
  - TCP
  - Added support for peer failure in case of CONNECT_TO_EP
  - Added support for active message short IOV
  - See NEWS for a complete changelog and bug fixes
- Refresh openucx-s390x-support against latest sources</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1632398400">- Update to v1.11.1 (jsc#SLE-19260)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1642075200">- Fix UCM bistro support on non s390x archs
- Add ucm-fix-UCX_MEM_MALLOC_RELOC.patch to disable malloc relocations by default (bsc#1194369)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1664280000">- Update to v1.13.1 (jsc#PED-912)
  - Core
  - Added new objects to VFS: local and remote address of endpoint,
    statistics of ucp_ep_create success/failure, failed/destroyed endpoints
  - Added support for UCX static libraries
  - Added profiling for rkey management routines
  - PCIe relaxed order enabled by default for AMD CPUs
  - Fixed not deallocating memory from ucp_mem_unmap if no rcache
  - Fixed versioning infrastructure
  - Multiple code improvements: refactoring, debug prints and assertions, etc.
  - Multiple improvements in build, test and docs infrastructure
  - Added new objects to VFS (md, component, log_level, etc.)
  - Added configuration variable to specify which loadable modules are allowed
  - Added build-time configuration to disable sigaction overriding
  - UCP
  - Added API to pass pre-registered memory handle to UCP operations
  - Added implementation of AM rendezvous protocol
  - Added 2-stage pipeline rendezvous protocol for GPU
  - Added support for fragment mem_type for v1 pipeline proto, disabled by default
  - Added active message support for proto v2
  - Added UCP memory registration cache
  - Improved adaptive progress - deactivate iface when all p2p lanes are destroyed
  - Added support for user memh in proto_v1
  - Added support for selecting local address when creating a client endpoint
  - Added option to limit GPUDirectRDMA size in rendezvous protocol, UCX_RNDV_MEMTYPE_DIRECT_SIZE
  - Deprecated UCX_SOCKADDR_AUX_TLS configuration parameter
  - Resolving remote EP ID when creating local EP disabled by default
  - Added client_id to ucp_worker_create() and ucp_conn_request_query() APIs
  - Added ucp_worker_address_query() API
  - Updated ucp_ep_query() API for getting local and remote addresses
  - Added address versioning to correctly preserve wire compatibility starting from version 1.11.0
  - Added new client/server connection establishment packet header format
  - Enabled rendezvous and tag sync protocols when error handling is enabled on the endpoint
  - Added iov zcopy support to RMA operations
  - Reduced memory usage of unexpected messages by fitting receive buffer size to packet size
  - Added support for modifying UCT and UCS configs by ucp_config_modify() API
  - Optimized unpacked rkeys memory consumption
  - Added request flag to influence latency vs. bandwidth protocol
  - Reduced memory management overhead with new protocols
  - Improved performance calculations for new protocols
  - Added AMO support with GPU memory target using new protocols
  - Added put_zcopy, get_zcopy and pipeline based rendezvous in new protocols
  - Added support for user-defined alignment in Active Messages
  - Added support for offload tag sync in new protocols
  - Updated ucp_atomic_post() to use NBX flow
  - UCT
  - Introduced API uct_md_mkey_pack_v2
  - Introduced UCT iface features API
  - Introduced max_inflight_eps parameter in perf_attr API
  - Introduced UCT_SEND_FLAG_PEER_CHECK flag that forces checking connectivity to a peer
  - Introduced UCX_RCACHE_PURGE_ON_FORK to enable/disable cleaning regions when application is forking
  - Disabled PEER_FAILURE capability for XPMEM
  - Added API - uct_iface_is_reachable_v2()
  - Added IPv6 address support in TCP
  - Added latency estimation to uct_iface_estimate_perf()
  - Adjusted knem and cma overhead cost
  - Increased built-in TCP keep-alive interval to 2 seconds
  - RDMA CORE (IB, ROCE, etc.)
  - Introduced NDR autorecognition
  - Introduced CQE zipping support
  - Set the default MAX_RD_ATOMIC to maximum value supported by the hardware
  - Disabled mlx5 ifaces on verbs MD
  - Added detection of IB NDR devices
  - Added check for CQ overrun in assert mode
  - Added bitmap usage for releasing detached DCIs
  - Added configuration for requests ack frequency with DevX
  - Added remote QP info to tx error CQE traces
  - ROCM
  - Increased maximum number of HSA agents
  - UCS
  - Added topo module infrastructure
  - Added memtrack and rcache information to VFS
  - Added API for a per-process aggregate-sum statistics report
  - Added memory pool set data structure
  - Added new ptr_array API for bulk allocation
  - Added ucs_string_buffer_append_flags() for string buffer
  - Added ucs_ffs32()
  - Added ucs_vsnprintf_safe() which always adds '\0'
  - Added thread-safe put to ptr_map
  - Improved accuracy of the topology distance estimation
  - Added prints of leaked callbacks from the callback queue
  - Removed a diagnostic message when fuse thread is stopped
  - Added configurable limit for the memory consumed by rcache
  - Added configuration for VFS(FUSE) thread affinity
  - Added memory limit support to memtrack
  - Packaging
  - Added cmake config files for better integration with external cmake based projects
  - Tools
  - Added loop-back transport support in ucx_perftest
  - Split ucx_perftest into separate modules
  - Added process placement option for ucx_info
  - Extended parameters correctness check in ucx_perftest
- Backported UCS-DEBUG-replace-PTR-with-void.patch
  from upstream to fix compilation</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1664884800">- Update openucx-s390x-support.patch to add missing ucs_ffs32 on s390x
- Drop baselibs.conf as openucx only works on 64b systems</changelog>
  <changelog author="schwab@suse.de" date="1673870400">- openucx-s390x-support.patch: fix use of clz builtin for 64-bit value</changelog>
  <changelog author="mliska@suse.cz" date="1678104000">- Add upstream gcc13-fix.patch fix.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1679313600">- Update to v1.14.0
  - UCP
  - Added API for querying transport and device names on endpoint
  - Added API for querying datatype object
  - Added API for exporting and importing memory keys (no implementation yet)
  - Added support for non-persistent active message header
  - Added infrastructure to print protocols v2 performance
  - Multiple performance improvements for protocols v2
  - Added support for non-contiguous datatypes for rendezvous protocols v2
  - Added support for reset and abort request in protocols v2
  - Added support for user memory handles in RMA API
  - Added multi-rail support for RMA API in protocols v2
  - Added support for up to 16 different lanes per endpoint
  - Added support for dmabuf memory registration in protocols v2
  - Added strong fence mode for ucp_worker_fence() API
  - UCT
  - Added new uct_md_mem_attach() API to support exported memory handles
  - Added remote completion mode for endpoint flush (via new flag)
  - Added support for dmabuf registration
  - Added new uct_ep_connect_to_ep_v2() API
  - Added new uct_mem_reg_v2() API
  - Added new uct_md_query_v2() API
  - Added support for IPv6 loopback address in TCP transport
  - RDMA CORE (IB, ROCE, etc.)
  - Added ECE (enhanced connection establishment) support for RC and DC transports
  - Added support for hardware DCS in DC transport
  - Added UD interface and endpoint resource information to VFS
  - Added CQ creation via DEVX API
  - Removed support for accelerated IB transports over legacy experimental verbs
  - UCS
  - Added support for auto-correction of user environment variables
  - UCM
  - Implemented CUDA bistro hooks for aarch64 (to enable memory cache on this platform)
  - Added support for CUDA virtual/stream-ordered memory with cudaMallocAsync
  - Documentation
  - Added FAQ for using pkg-config tool to build applications with UCX
  - Tools
  - Added runtime library version to the 'ucx_info -v' output
  - Added support for memory types in ucx_info
  - Many bugfixes. See NEWS.
- Drop patch merged upstream:
  - UCS-DEBUG-replace-PTR-with-void.patch
  - gcc13-fix.patch
- Refresh openucx-s390x-support.patch</changelog>
  <changelog author="nicolas.morey@suse.com" date="1690286400">- Update to v1.14.1
  - Fixed ROCm to prevent the locking of host pinned memory
  - Added CUDA 12 based UCX builds to the release flow
  - Increased the maximal number of endpoint configurations
  - Fixed filter for a slow-lanes in selection logic
  - Fixed TCP transport bandwidth calculation
  - Fixed device detection for ROCM
  - Fixed compatibility with CUDA 12
  - Fixed rendezvous threshold for multi-path configurations
  - Fixed error message in case of static link
  - Fixed BlueField-3 detection
  - Multiple fixes for Azure CI pipeline</changelog>
  <changelog author="nicolas.morey@suse.com" date="1696248000">- Update to 1.15.0
  - UCP
  - Added 2-stage pipeline protocol in the new protocol infrastructure
  - Added reset and abort functionality of rendezvous protocols in the
    new infrastructure
  - Added zero-copy rendezvous data send protocol in the new infrastructure
  - Added support for user memory handle in the new protocol infrastructure
  - Added option to force ODP registration for certain memory types
  - Enabled lock free memory region deregistration
  - Updated allow/deny transport list feature to control auxiliary transport selection
  - Multiple performance improvements of the new protocol infrastructure
  - Multiple improvements in error and debug messages
  - Fixed assertion when sending from non-contiguous GPU buffer to managed buffer
  - Fixed the race condition on endpoint configurations
  - Fixed endpoint reconfiguration issues due to asymmetrical selection
  - Fixed endpoint reconfiguration error due to wrong locality detection
  - Fixed crash during connection manager cleanup
  - Fixed rkey index calculation for rendezvous protocol
  - Fixed rcache dump function
  - Removed logging from rkey unpack in release mode
  - Fixed dobule free of rkey in rendezvous protocol
  - Fixed rendezvous pipeline protocol error flow
  - Fixed error handling in rendezvous get zcopy protocol
  - Replay pending requests of wireup EP CM during connection establishment
    to prevent potential ordering issues and wrong configuration
  - Pass user-provided memory type to the function that checks whether the buffer
    can be sent inline or not
  - Avoid memory registration during UCP context initialization
  - Fixed CPU/device atomics selection in the new protocol infrastructure
  - Multiple fixes in the new protocol infrastructure information output
  - UCT
  - Split UCT_MD_MKEY_PACK_FLAG_INVALIDATE into two flags for RMA and AMO
  - Added put_zcopy and get_zcopy scheme support for self transport
  - Added base implementation of is_reachable_v2 API using intra/inter flag
  - Introduced MD capability for non-blocking registration memory types
  - Added check for dmabuf kernel support in ROCm memory domain
  - Fixed exported memh packing
  - Fixed an error in checking return status of multi-threaded memory
    registration function
  - RDMA CORE (IB, ROCE, etc.)
  - Added implementation of is_reachable_v2 routine to IB interface
  - Added option to control CQE zipping per CQ RX/TX direction
  - Added option to specify how DCI selects port under RoCE LAG
  - Added hw_dcs to the list of policies to select DCI by an endpoint
  - Removed implicit on-demand paging
  - Added option to set RoCE lag dct port for response under queue affinity mode
  - Improved IB memlock limit logging
  - Fixed dma-buf based memory region registration
  - Fixed memory handle data corruption when PCIe relaxed ordering is enabled
  - Fixed performance degradation when indirect atomic key is not supported
    by the hardware
  - Fixed remote access error to strict-order keys because of wrong offset
  - Added check for UAR support to memory domain opening
  - Fixed updating port counters for devx qp
  - Fixed ibv_create_cq error message on node without Infiniband
  - Fixed performance degradation due to using 2 paths on NDR400 by default
  - Removed unnecessary async lock which otherwise would block UD progress
  - UCS
  - Added ucs_string_buffer_rbrk() to split token
  - Fixed lane selection and added bandwidth estimation for Sapphire Rapids family
  - Fixed displaying wrong environment variable suggestions
  - Fixed VFS warning output
  - Fixed SEGV in ucs_debug_backtrace_next(), upon previous SEGV handling,
    due to ENOMEM situation
  - Fixed memory corruption when using UCX_MPOOL_FIFO=y
  - UCM
  - Fixed conditional jump patching
  - Fixed mremap() override
  - Tests
  - Added a rocm docker container for testing
  - Added option to send client_id in iodemo test
  - Added support for multiple connections to the same server in iodemo test
  - Added synchronization before exit to hello world examples
  - Fixed wrong usage of ep_close in examples
  - Tools
  - Added user-side memcpy option for AM benchmarks in ucx_perftest
  - Added wireshark LUA dissectors for some UCX protocols
  - Fixed memory access flags in perftest
  - Removed support for librte from perf
  - Fixed worker flush deadlock when using multiple workers in ucx_perftest
  - Build
  - Added support for binutils 2.40
  - Added versioned dependency to switch between packages with the same names
  - Added a separate xpmem deb subpackage
  - Added aarch64 support to the binary distribution pipeline
  - Removed dependency on libnuma
  - Documentation
  - Updated ucp_worker_release_address description
- Refresh openucx-s390x-support.patch against latest souces</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1719403200">- Update to 1.17.0
  - See NEWS for the complete CHANGELOG
- Refresh openucx-s390x-support.patch against the latest sources
- Add upstream fix UCS-TIME-Add-math.h-to-provide-INFINITY.patch
  to fix compilation on ppc64</changelog>
  <changelog author="schwab@suse.de" date="1719662400">- Enable build on riscv64</changelog>
  <changelog author="nicolas.morey@suse.com" date="1725710400">- Refresh openucx-s390x-support.patch to fix compilation on s390x</changelog>
  <changelog author="nicolas.morey@suse.com" date="1743508800">- Add UCT-IB-UD-Use-GRH-to-detect-address-family-on-non-Mellanox-hardware.patch
  to fix an UD init issue on non-Mellanox RDMA HW (bsc#1240204)</changelog>
</package>
<package pkgid="73642b490c6c77db49d848080d8d50a149250d9e398c9ed7236004bb52913c92" name="libuct0" arch="x86_64">
  <version epoch="0" ver="1.17.0" rel="150700.4.2.7"/>
  <changelog author="jengelh@inai.de" date="1570190400">- Ensure /usr/lib/ucx is owned at all times.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1591272000">- Update to v1.8.0
  - Features:
  - Improved detection for DEVX support
  - Improved TCP scalability
  - Added support for ROCM to perftest
  - Added support for different source and target memory types to perftest
  - Added optimized memcpy for ROCM devices
  - Added hardware tag-matching for CUDA buffers
  - Added support for CUDA and ROCM managed memories
  - Added support for client/server disconnect protocol over rdma connection manager
  - Added support for striding receive queue for hardware tag-matching
  - Added XPMEM-based rendezvous protocol for shared memory
  - Added support shared memory communication between containers on same machine
  - Added support for multi-threaded RDMA memory registration for large regions
  - Added new test cases to Azure CI
  - Added support for multiple listening transports
  - Added UCT socket-based connection manager transport
  - Updated API for UCT component management
  - Added API to retrieve the listening port
  - Added UCP active message API
  - Removed deprecated API for querying UCT memory domains
  - Refactored server/client examples
  - Added support for dlopen interception in UCM
  - Added support for PCIe atomics
  - Updated Java API: added support for most of UCP layer operations
  - Updated support for Mellanox DevX API
  - Added multiple UCT/TCP transport performance optimizations
  - Optimized memcpy() for Intel platforms
  - Added protection from non-UCX socket based app connections
  - Improved search time for PKEY object
  - Enabled gtest over IPv6 interfaces
  - Updated Mellanox and Bull device IDs
  - Added support for CUDA_VISIBLE_DEVICES
  - Increased limits for CUDA IPC registration
  - Bugfixes:
  - Multiple fixes in JUCX
  - Fixes in UCP thread safety
  - Fixes for most recent versions GCC, PGI, and ICC
  - Fixes for CPU affinity on Azure instances
  - Fixes in XPMEM support on PPC64
  - Performance fixes in CUDA IPC
  - Fixes in RDMA CM flows
  - Multiple fixes in TCP transport
  - Multiple fixes in documentation
  - Fixes in transport lane selection logic
  - Fixes in Java jar build
  - Fixes in socket connection manager for Nvidia DGX-2 platform
  - Multiple fixes in UCP, UCT, UCM libraries
  - Multiple fixes for BSD and Mac OS systems
  - Fixes for Clang compiler
  - Fix CPU optimization configuration options
  - Fix JUCX build on GPU nodes
  - Fix in Azure release pipeline flow
  - Fix in CUDA memory hooks management
  - Fix in GPU memory peer direct gtest
  - Fix in TCP connection establishment flow
  - Fix in GPU IPC check
  - Fix in CUDA Jenkins test flow
  - Multiple fixes in CUDA IPC flow
  - Fix adding missing header files
  - Fix to prevent failures in presence of VPN enabled Ethernet interfaces
- Refresh openucx-s390x-support.patch against new version</changelog>
  <changelog author="jengelh@inai.de" date="1591358400">- Trim bias and filler wording from descriptions.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1594641600">- Update to v1.8.1
  - Features:
  - Added binary release pipeline in Azure CI
  - Bugfixes:
  - Multiple fixes in testing environment
  - Fixes in InfiniBand DEVX transport
  - Fixes in memory management for CUDA IPC transport
  - Fixes for binutils 2.34+
  - Fixes for AMD ROCM build environment</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1601899200">- Update to v1.9.0 (jsc#SLE-15163)
  - Features:
  - Added a new class of communication APIs '*_nbx' that enable API extendability while
  - preserving ABI backward compatibility
  - Added asynchronous event support to UCT/IB/DEVX
  - Added support for latest CUDA library version
  - Added NAK-based reliability protocol for UCT/IB/UD to optimize resends
  - Added new tests for ROCm
  - Added new configuration parameters for protocol selection
  - Added performance optimization for Fujitsu A64FX with InfiniBand
  - Added performance optimization for clear cache code aarch64
  - Added support for relaxed-order PCIe access in IB RDMA transports
  - Added new TCP connection manager
  - Added support for UCT/IB PKey with partial membership in IB transports
  - Added support for RoCE LAG
  - Added support for ROCm 3.7 and above
  - Added flow control for RDMA read operations
  - Improved endpoint flush implementation for UCT/IB
  - Improved UD timer to avoid interrupting the main thread when not in use
  - Improved latency estimation for network path with CUDA
  - Improved error reporting messages
  - Improved performance in active message flow (removed malloc call)
  - Improved performance in ptr_array flow
  - Improved performance in UCT/SM progress engine flow
  - Improved I/O demo code
  - Improved rendezvous protocol for CUDA
  - Updated examples code
  - Bugfixes:
  - Fixes for most resent versions of GCC, CLANG, ARMCLANG, PGI
  - Fixes in UCT/IB for strict order keys
  - Fixes in memory barrier code for aarch64
  - Fixes in UCT/IB/DEVX for fork system call
  - Fixes in UCT/IB for rand() call in rdma-core
  - Fixed in group rescheduling for UCT/IB/DC
  - Fixes in UCT/CUDA bandwidth reporting
  - Fixes in rkey_ptr protocol
  - Fixes in lane selection for rendezvous protocol based on get-zero-copy flow
  - Fixes for ROCm build
  - Fixes for XPMEM transport
  - Fixes in closing endpoint code
  - Fixes in RDMACM code
  - Fixes in memcpy selection for AMD
  - Fixed in UCT/UD endpoint flush functionality
  - Fixes in XPMEM detection
  - Fixes in rendezvous staging protocol
  - Fixes in ROCEv1 mlx5 UDP source port configuration
  - Multiple fixes in RPM spec file
  - Multiple fixes in UCP documentation
  - Multiple fixes in socket connection manager
  - Multiple fixes in gtest
  - Multiple fixes in JAVA API implementation
- Refresh openucx-s390x-support.patch against new version</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1614168000">- Update openucx-s390x-support.patch to fix mmap syscall on s390x (bsc#1182691)
  - Core:
  - Added support for UCX monitoring using virtual file system (VFS)/FUSE
  - Added support for applications with static CUDA runtime linking
  - Added support for a configuration file
  - Updated clang format configuration
  - UCP
  - Added rendezvous API for active messages
  - Added user-defined name to context, worker, and endpoint objects
  - Added flag to silence request leak check
  - Added API for endpoint performance evaluation
  - Added API - ucp_request_query
  - Added API - ucp_lib_query
  - Added bandwidth optimizations for new protocols multi-lane
  - Added support for multi-rail over lanes with BW ratio &gt;= 1/4
  - Added support for tracking outstanding requests and aborting those in case of connection failure
  - Refactored keep-alive protocol
  - Added device id to wireup protocol
  - Added support up to 128 transport layer resources in UCP context
  - Added support CUDA memory allocations with ucp_mem_map
  - Increased UCP_WORKER_MAX_EP_CONFIG to 64
  - Adjusted memory type zcopy threshold when UCX_ZCOPY_THRESH set
  - Refactored wireup protocols, rendezvous, get, zcopy protocols
  - Added put zcopy multi-rail
  - Improved logging for new protocols
  - Added system topology information
  - Added new protocols for eager offload protocols
  - UCT
  - Extended connection establishment API
  - Added active message AM alignment in iface params
  - Added active message short IOV API.
  - Added support for interface query by operation and memory type
  - Added API to get allocation base address and length
  - Added md_dereg_v2 API
  - UCS
  - Added log filter by source file name.
  - Added checking for last element in fraglist queue
  - Added a method to get IP address from sockaddr.
  - Added memory usage limits to registration cache
  - RDMA CORE (IB, ROCE, etc.)
  - Added report of QP info in case of completion with error
  - Refactored of FC send operations
  - Added support for  DevX unique QPN allocation
  - Optimized endpoint lookup for  DCI
  - Added support for RDMA sub-function (SF)
  - Added support for DCI via DEVX
  - Added DCI pool per LAG port
  - Added support  for RoCE IP reachability check using a subnet mask
  - Added active message short IOV for UD/DC/RC mlx, UD/RC verbs
  - Added endpoint keep alive check for UD
  - Suppressed warning if device can't be opened
  - Added support for multiple flush cancel without completion
  - Added ignore for devices with invalid GID
  - Added support for SRQ linked list reordering
  - Added flush by flow control on old devices
  - Added support for configurable rdma_resolve_addr/route timeout
  - Shared memory
  - Added active message short IOV support for posix, sysv, and self transports
  - TCP
  - Added support for peer failure in case of CONNECT_TO_EP
  - Added support for active message short IOV
  - See NEWS for a complete changelog and bug fixes
- Refresh openucx-s390x-support against latest sources</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1632398400">- Update to v1.11.1 (jsc#SLE-19260)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1642075200">- Fix UCM bistro support on non s390x archs
- Add ucm-fix-UCX_MEM_MALLOC_RELOC.patch to disable malloc relocations by default (bsc#1194369)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1664280000">- Update to v1.13.1 (jsc#PED-912)
  - Core
  - Added new objects to VFS: local and remote address of endpoint,
    statistics of ucp_ep_create success/failure, failed/destroyed endpoints
  - Added support for UCX static libraries
  - Added profiling for rkey management routines
  - PCIe relaxed order enabled by default for AMD CPUs
  - Fixed not deallocating memory from ucp_mem_unmap if no rcache
  - Fixed versioning infrastructure
  - Multiple code improvements: refactoring, debug prints and assertions, etc.
  - Multiple improvements in build, test and docs infrastructure
  - Added new objects to VFS (md, component, log_level, etc.)
  - Added configuration variable to specify which loadable modules are allowed
  - Added build-time configuration to disable sigaction overriding
  - UCP
  - Added API to pass pre-registered memory handle to UCP operations
  - Added implementation of AM rendezvous protocol
  - Added 2-stage pipeline rendezvous protocol for GPU
  - Added support for fragment mem_type for v1 pipeline proto, disabled by default
  - Added active message support for proto v2
  - Added UCP memory registration cache
  - Improved adaptive progress - deactivate iface when all p2p lanes are destroyed
  - Added support for user memh in proto_v1
  - Added support for selecting local address when creating a client endpoint
  - Added option to limit GPUDirectRDMA size in rendezvous protocol, UCX_RNDV_MEMTYPE_DIRECT_SIZE
  - Deprecated UCX_SOCKADDR_AUX_TLS configuration parameter
  - Resolving remote EP ID when creating local EP disabled by default
  - Added client_id to ucp_worker_create() and ucp_conn_request_query() APIs
  - Added ucp_worker_address_query() API
  - Updated ucp_ep_query() API for getting local and remote addresses
  - Added address versioning to correctly preserve wire compatibility starting from version 1.11.0
  - Added new client/server connection establishment packet header format
  - Enabled rendezvous and tag sync protocols when error handling is enabled on the endpoint
  - Added iov zcopy support to RMA operations
  - Reduced memory usage of unexpected messages by fitting receive buffer size to packet size
  - Added support for modifying UCT and UCS configs by ucp_config_modify() API
  - Optimized unpacked rkeys memory consumption
  - Added request flag to influence latency vs. bandwidth protocol
  - Reduced memory management overhead with new protocols
  - Improved performance calculations for new protocols
  - Added AMO support with GPU memory target using new protocols
  - Added put_zcopy, get_zcopy and pipeline based rendezvous in new protocols
  - Added support for user-defined alignment in Active Messages
  - Added support for offload tag sync in new protocols
  - Updated ucp_atomic_post() to use NBX flow
  - UCT
  - Introduced API uct_md_mkey_pack_v2
  - Introduced UCT iface features API
  - Introduced max_inflight_eps parameter in perf_attr API
  - Introduced UCT_SEND_FLAG_PEER_CHECK flag that forces checking connectivity to a peer
  - Introduced UCX_RCACHE_PURGE_ON_FORK to enable/disable cleaning regions when application is forking
  - Disabled PEER_FAILURE capability for XPMEM
  - Added API - uct_iface_is_reachable_v2()
  - Added IPv6 address support in TCP
  - Added latency estimation to uct_iface_estimate_perf()
  - Adjusted knem and cma overhead cost
  - Increased built-in TCP keep-alive interval to 2 seconds
  - RDMA CORE (IB, ROCE, etc.)
  - Introduced NDR autorecognition
  - Introduced CQE zipping support
  - Set the default MAX_RD_ATOMIC to maximum value supported by the hardware
  - Disabled mlx5 ifaces on verbs MD
  - Added detection of IB NDR devices
  - Added check for CQ overrun in assert mode
  - Added bitmap usage for releasing detached DCIs
  - Added configuration for requests ack frequency with DevX
  - Added remote QP info to tx error CQE traces
  - ROCM
  - Increased maximum number of HSA agents
  - UCS
  - Added topo module infrastructure
  - Added memtrack and rcache information to VFS
  - Added API for a per-process aggregate-sum statistics report
  - Added memory pool set data structure
  - Added new ptr_array API for bulk allocation
  - Added ucs_string_buffer_append_flags() for string buffer
  - Added ucs_ffs32()
  - Added ucs_vsnprintf_safe() which always adds '\0'
  - Added thread-safe put to ptr_map
  - Improved accuracy of the topology distance estimation
  - Added prints of leaked callbacks from the callback queue
  - Removed a diagnostic message when fuse thread is stopped
  - Added configurable limit for the memory consumed by rcache
  - Added configuration for VFS(FUSE) thread affinity
  - Added memory limit support to memtrack
  - Packaging
  - Added cmake config files for better integration with external cmake based projects
  - Tools
  - Added loop-back transport support in ucx_perftest
  - Split ucx_perftest into separate modules
  - Added process placement option for ucx_info
  - Extended parameters correctness check in ucx_perftest
- Backported UCS-DEBUG-replace-PTR-with-void.patch
  from upstream to fix compilation</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1664884800">- Update openucx-s390x-support.patch to add missing ucs_ffs32 on s390x
- Drop baselibs.conf as openucx only works on 64b systems</changelog>
  <changelog author="schwab@suse.de" date="1673870400">- openucx-s390x-support.patch: fix use of clz builtin for 64-bit value</changelog>
  <changelog author="mliska@suse.cz" date="1678104000">- Add upstream gcc13-fix.patch fix.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1679313600">- Update to v1.14.0
  - UCP
  - Added API for querying transport and device names on endpoint
  - Added API for querying datatype object
  - Added API for exporting and importing memory keys (no implementation yet)
  - Added support for non-persistent active message header
  - Added infrastructure to print protocols v2 performance
  - Multiple performance improvements for protocols v2
  - Added support for non-contiguous datatypes for rendezvous protocols v2
  - Added support for reset and abort request in protocols v2
  - Added support for user memory handles in RMA API
  - Added multi-rail support for RMA API in protocols v2
  - Added support for up to 16 different lanes per endpoint
  - Added support for dmabuf memory registration in protocols v2
  - Added strong fence mode for ucp_worker_fence() API
  - UCT
  - Added new uct_md_mem_attach() API to support exported memory handles
  - Added remote completion mode for endpoint flush (via new flag)
  - Added support for dmabuf registration
  - Added new uct_ep_connect_to_ep_v2() API
  - Added new uct_mem_reg_v2() API
  - Added new uct_md_query_v2() API
  - Added support for IPv6 loopback address in TCP transport
  - RDMA CORE (IB, ROCE, etc.)
  - Added ECE (enhanced connection establishment) support for RC and DC transports
  - Added support for hardware DCS in DC transport
  - Added UD interface and endpoint resource information to VFS
  - Added CQ creation via DEVX API
  - Removed support for accelerated IB transports over legacy experimental verbs
  - UCS
  - Added support for auto-correction of user environment variables
  - UCM
  - Implemented CUDA bistro hooks for aarch64 (to enable memory cache on this platform)
  - Added support for CUDA virtual/stream-ordered memory with cudaMallocAsync
  - Documentation
  - Added FAQ for using pkg-config tool to build applications with UCX
  - Tools
  - Added runtime library version to the 'ucx_info -v' output
  - Added support for memory types in ucx_info
  - Many bugfixes. See NEWS.
- Drop patch merged upstream:
  - UCS-DEBUG-replace-PTR-with-void.patch
  - gcc13-fix.patch
- Refresh openucx-s390x-support.patch</changelog>
  <changelog author="nicolas.morey@suse.com" date="1690286400">- Update to v1.14.1
  - Fixed ROCm to prevent the locking of host pinned memory
  - Added CUDA 12 based UCX builds to the release flow
  - Increased the maximal number of endpoint configurations
  - Fixed filter for a slow-lanes in selection logic
  - Fixed TCP transport bandwidth calculation
  - Fixed device detection for ROCM
  - Fixed compatibility with CUDA 12
  - Fixed rendezvous threshold for multi-path configurations
  - Fixed error message in case of static link
  - Fixed BlueField-3 detection
  - Multiple fixes for Azure CI pipeline</changelog>
  <changelog author="nicolas.morey@suse.com" date="1696248000">- Update to 1.15.0
  - UCP
  - Added 2-stage pipeline protocol in the new protocol infrastructure
  - Added reset and abort functionality of rendezvous protocols in the
    new infrastructure
  - Added zero-copy rendezvous data send protocol in the new infrastructure
  - Added support for user memory handle in the new protocol infrastructure
  - Added option to force ODP registration for certain memory types
  - Enabled lock free memory region deregistration
  - Updated allow/deny transport list feature to control auxiliary transport selection
  - Multiple performance improvements of the new protocol infrastructure
  - Multiple improvements in error and debug messages
  - Fixed assertion when sending from non-contiguous GPU buffer to managed buffer
  - Fixed the race condition on endpoint configurations
  - Fixed endpoint reconfiguration issues due to asymmetrical selection
  - Fixed endpoint reconfiguration error due to wrong locality detection
  - Fixed crash during connection manager cleanup
  - Fixed rkey index calculation for rendezvous protocol
  - Fixed rcache dump function
  - Removed logging from rkey unpack in release mode
  - Fixed dobule free of rkey in rendezvous protocol
  - Fixed rendezvous pipeline protocol error flow
  - Fixed error handling in rendezvous get zcopy protocol
  - Replay pending requests of wireup EP CM during connection establishment
    to prevent potential ordering issues and wrong configuration
  - Pass user-provided memory type to the function that checks whether the buffer
    can be sent inline or not
  - Avoid memory registration during UCP context initialization
  - Fixed CPU/device atomics selection in the new protocol infrastructure
  - Multiple fixes in the new protocol infrastructure information output
  - UCT
  - Split UCT_MD_MKEY_PACK_FLAG_INVALIDATE into two flags for RMA and AMO
  - Added put_zcopy and get_zcopy scheme support for self transport
  - Added base implementation of is_reachable_v2 API using intra/inter flag
  - Introduced MD capability for non-blocking registration memory types
  - Added check for dmabuf kernel support in ROCm memory domain
  - Fixed exported memh packing
  - Fixed an error in checking return status of multi-threaded memory
    registration function
  - RDMA CORE (IB, ROCE, etc.)
  - Added implementation of is_reachable_v2 routine to IB interface
  - Added option to control CQE zipping per CQ RX/TX direction
  - Added option to specify how DCI selects port under RoCE LAG
  - Added hw_dcs to the list of policies to select DCI by an endpoint
  - Removed implicit on-demand paging
  - Added option to set RoCE lag dct port for response under queue affinity mode
  - Improved IB memlock limit logging
  - Fixed dma-buf based memory region registration
  - Fixed memory handle data corruption when PCIe relaxed ordering is enabled
  - Fixed performance degradation when indirect atomic key is not supported
    by the hardware
  - Fixed remote access error to strict-order keys because of wrong offset
  - Added check for UAR support to memory domain opening
  - Fixed updating port counters for devx qp
  - Fixed ibv_create_cq error message on node without Infiniband
  - Fixed performance degradation due to using 2 paths on NDR400 by default
  - Removed unnecessary async lock which otherwise would block UD progress
  - UCS
  - Added ucs_string_buffer_rbrk() to split token
  - Fixed lane selection and added bandwidth estimation for Sapphire Rapids family
  - Fixed displaying wrong environment variable suggestions
  - Fixed VFS warning output
  - Fixed SEGV in ucs_debug_backtrace_next(), upon previous SEGV handling,
    due to ENOMEM situation
  - Fixed memory corruption when using UCX_MPOOL_FIFO=y
  - UCM
  - Fixed conditional jump patching
  - Fixed mremap() override
  - Tests
  - Added a rocm docker container for testing
  - Added option to send client_id in iodemo test
  - Added support for multiple connections to the same server in iodemo test
  - Added synchronization before exit to hello world examples
  - Fixed wrong usage of ep_close in examples
  - Tools
  - Added user-side memcpy option for AM benchmarks in ucx_perftest
  - Added wireshark LUA dissectors for some UCX protocols
  - Fixed memory access flags in perftest
  - Removed support for librte from perf
  - Fixed worker flush deadlock when using multiple workers in ucx_perftest
  - Build
  - Added support for binutils 2.40
  - Added versioned dependency to switch between packages with the same names
  - Added a separate xpmem deb subpackage
  - Added aarch64 support to the binary distribution pipeline
  - Removed dependency on libnuma
  - Documentation
  - Updated ucp_worker_release_address description
- Refresh openucx-s390x-support.patch against latest souces</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1719403200">- Update to 1.17.0
  - See NEWS for the complete CHANGELOG
- Refresh openucx-s390x-support.patch against the latest sources
- Add upstream fix UCS-TIME-Add-math.h-to-provide-INFINITY.patch
  to fix compilation on ppc64</changelog>
  <changelog author="schwab@suse.de" date="1719662400">- Enable build on riscv64</changelog>
  <changelog author="nicolas.morey@suse.com" date="1725710400">- Refresh openucx-s390x-support.patch to fix compilation on s390x</changelog>
  <changelog author="nicolas.morey@suse.com" date="1743508800">- Add UCT-IB-UD-Use-GRH-to-detect-address-family-on-non-Mellanox-hardware.patch
  to fix an UD init issue on non-Mellanox RDMA HW (bsc#1240204)</changelog>
</package>
<package pkgid="5ab493a4084557ae950afad413eeef592ab97397dfadd2a32912603835790453" name="libudev1" arch="x86_64">
  <version epoch="0" ver="254.24" rel="150600.4.33.1"/>
  <changelog author="fbui@suse.com" date="1727870400">- Clean up some remnants from when homed was in the experimental sub-package (bsc#1231048)</changelog>
  <changelog author="fbui@suse.com" date="1729512000">- Import commit 0cbb02c0273374b14188f30e89874c9e8ae425c9 (merge of v254.19)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/44943af96be1422c2d7bdf271e4a77b42f4b41ec...0cbb02c0273374b14188f30e89874c9e8ae425c9</changelog>
  <changelog author="fbui@suse.com" date="1732708800">- Import commit f7f6a3454e3321f92cbdf8e30aeb8b17bc1ff8e8 (merge of v254.20)
  This merge includes the following fix:
    8b6ae951d3 udev: skipping empty udev rules file while collecting the stats (bsc#1232844)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/0cbb02c0273374b14188f30e89874c9e8ae425c9...f7f6a3454e3321f92cbdf8e30aeb8b17bc1ff8e8</changelog>
  <changelog author="fbui@suse.com" date="1733227200">- Import commit 600986ba4d9c562390d99513416f49a5be5559f3 (merge of v254.21)
  This merge includes the following fix:
    a467a411f pid1: make clear that $WATCHDOG_USEC is set for the shutdown binary, noone else (bsc#1232227)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/f7f6a3454e3321f92cbdf8e30aeb8b17bc1ff8e8...600986ba4d9c562390d99513416f49a5be5559f3</changelog>
  <changelog author="fbui@suse.com" date="1733227201">- Add 0003-Drop-support-for-efivar-SystemdOptions.patch (bsc#1220338)
  Upstream deprecated it and plan to drop it in the future.
  Let's get ahead and drop it now as this feature is unlikely to be used on SUSE
  distros and it might be used to gain access to encrypted SLEM systems with
  unattended disk unlock and with secure boot disabled.</changelog>
  <changelog author="fbui@suse.com" date="1734350400">- Import commit eddf52fb14391c30ee2f45fd0c3cab1be116c951
  807fe76411 udev: add new builtin net_driver
  3a48b5f21d udev-builtin-net_id: split-out pci_get_onboard_index() from dev_pci_onboard()
  5359c1d6d4 udev-builtin-net_id: split-out get_pci_slot_specifiers()
  1cd915ac7b udev-builtin-net_id: introduce get_port_specifier() helper function
  72a4218155 udev-builtin-net_id: split out get_dev_port() and make its failure critical
  f6c721b4da udev-builtin-net_id: split-out pci_get_hotplug_slot() and pci_get_hotplug_slot_from_address()
  9e16c3cf27 udev-builtin-net_id: return earlier when hotplug slot is not found
  4851355767 udev-builtin-net_id: skip non-directory entry earlier
  a571e5f1dd udev-builtin-net_id: make names_xen() self-contained
  9acc241d5f udev-builtin-net_id: use sd_device_get_sysnum() to get index of netdevsim
  ca8a431b55 udev-builtin-net_id: make names_netdevsim() self-contained
  a66251d666 udev-builtin-net_id: make names_platform() self-contained
  1e834d7157 udev-builtin-net_id: make names_vio() self-contained
  8b236dcd7a udev-builtin-net_id: make names_ccw() self-contained
  7d70e2fa7d udev-builtin-net_id: make dev_devicetree_onboard() self-contained
  46158a6e91 udev-builtin-net_id: make names_mac() self-contained
  7789e7f886 udev-builtin-net_id: split out get_ifname_prefix()
  9b0062a667 udev-builtin-net_id: swap arguments for streq() and friends
  181a775b40 udev-builtin-net_id: drop unused value from NetNameType
  Refactoring to prepare for backporting the filtering mechanism of specific
  sysfs attributes during predictable NIC name generation.</changelog>
  <changelog author="fbui@suse.com" date="1734350401">- Add 5004-udev-allow-denylist-for-reading-sysfs-attributes-whe.patch (bsc#1234015)
  Temporarily add this patch. It will be integrated in the git repository if
  no issues are reported in the coming months.</changelog>
  <changelog author="fbui@suse.com" date="1734955200">- Import commit eb5a78f50e64a39a2a509fd5141e68ff216a4273 (merge of v254.22)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/600986ba4d9c562390d99513416f49a5be5559f3...eb5a78f50e64a39a2a509fd5141e68ff216a4273</changelog>
  <changelog author="fbui@suse.com" date="1734955201">- Import commit 127e162c9cc0beb5058a718b3a9a1fec6942a927
  679c57667d tpm2-util: Also retry unsealing after policy_pcr returns PCR_CHANGED (boo#1233752 bsc#1234313)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734955202">- Fix systemd-network recommending libidn2-devel (boo#1234765)</changelog>
  <changelog author="fbui@suse.com" date="1736942400">- Import commit 34b1c72fa9aeea9c2c20e6802530e4b915c9dabf (merge of v254.23)
  eab1d9753b stdio-bridge: fix polled fds
  f028f2298e hwdb: comment out the entry for Logitech MX Keys for Mac
  e808cbdd6d test: answer 2nd mdadm --create question for compat with new version
  bf01f3d692 core/unit-serialize: fix serialization of markers
  f043ab6f34 locale-setup: do not load locale from environemnt when /etc/locale.conf is unchanged
  71efbe69b6 core: fix assert when AddDependencyUnitFiles is called with invalid parameter</changelog>
  <changelog author="fbui@suse.com" date="1736942401">- Add 1020-core-create-the-credential-directory-even-if-it-s-em.patch (bsc#1229228)
- Rename 5012-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch into
  1021-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch
  Commit dc571cccd75db7be49b2aada64baf92e3a498c39 was backported and included in
  v254.9 bumping the version requirement on gcc from 4.7 to 8. Unfortunately
  this breakage won't be fixed by upstream therefore there's no longer a need to
  keep the patch that reverts the offending commit in quarantine.</changelog>
  <changelog author="fbui@suse.com" date="1738670400">- Move systemd-userwork from the experimental sub-package to the main package (bsc#1236643)
  It is likely an oversight from when systemd-userdb was migrated from the
  experimental package to the main one.</changelog>
  <changelog author="fbui@suse.com" date="1741089600">- Import commit b25faa18ee7ef3c2d0b16416dfa331d0013dd112
  b4693652f3 journald: close runtime journals before their parent directory removed
  044d051f0c journald: reset runtime seqnum data when flushing to system journal (bsc#1236886)</changelog>
  <changelog author="fbui@suse.com" date="1742385600">- Import commit 2b599c7501253b0e6b7987fdb2676af21bc72ab3 (merge of v254.24)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/b25faa18ee7ef3c2d0b16416dfa331d0013dd112...2b599c7501253b0e6b7987fdb2676af21bc72ab3</changelog>
  <changelog author="fbui@suse.com" date="1742385601">- Import commit 83b9060b6e4c9cdffbbed0e27467cbd2f806dc0d
  09b7477895 udev: allow/denylist for reading sysfs attributes when composing a NIC name (bsc#1234015)
- Drop 5004-udev-allow-denylist-for-reading-sysfs-attributes-whe.patch
  The path has been merged into the SUSE/v254 branch.</changelog>
  <changelog author="fbui@suse.com" date="1743595200">- Import commit 2f79a45369489b656be509a1517afcae4fe3ee20
  ebdfa3e44e man/pstore.conf: pstore.conf template is not always installed in /etc
  304ed20aab man: coredump.conf template is not always installed in /etc (bsc#1237496)</changelog>
  <changelog author="fbui@suse.com" date="1746792000">- Add 1003-journal-again-create-user-journals-for-users-with-hi.patch (bsc#1242938)
  Don't write messages sent from users with UID falling into the container UID
  range to the system journal. Daemons in the container don't talk to the
  outside journald as they talk to the inner one directly, which does its
  journal splitting based on shifted uids.</changelog>
  <changelog author="fbui@suse.com" date="1747051200">- Apply coredump sysctl settings on systemd-coredump updates/removals.</changelog>
  <changelog author="fbui@suse.com" date="1747396800">- Import commit a4100e9c74b0eafae18a13e9d1d988ebc8376c6a
  806c21e22b umount: do not move busy network mounts (bsc#1236177)</changelog>
</package>
<package pkgid="abd951a201fb6acdf8ce05dc331c9483cdd4710beeedcdcfb56f05374057c0e8" name="libudev1" arch="x86_64">
  <version epoch="0" ver="254.25" rel="150600.4.40.1"/>
  <changelog author="fbui@suse.com" date="1733227200">- Add 0003-Drop-support-for-efivar-SystemdOptions.patch (bsc#1220338)
  Upstream deprecated it and plan to drop it in the future.
  Let's get ahead and drop it now as this feature is unlikely to be used on SUSE
  distros and it might be used to gain access to encrypted SLEM systems with
  unattended disk unlock and with secure boot disabled.</changelog>
  <changelog author="fbui@suse.com" date="1734350400">- Import commit eddf52fb14391c30ee2f45fd0c3cab1be116c951
  807fe76411 udev: add new builtin net_driver
  3a48b5f21d udev-builtin-net_id: split-out pci_get_onboard_index() from dev_pci_onboard()
  5359c1d6d4 udev-builtin-net_id: split-out get_pci_slot_specifiers()
  1cd915ac7b udev-builtin-net_id: introduce get_port_specifier() helper function
  72a4218155 udev-builtin-net_id: split out get_dev_port() and make its failure critical
  f6c721b4da udev-builtin-net_id: split-out pci_get_hotplug_slot() and pci_get_hotplug_slot_from_address()
  9e16c3cf27 udev-builtin-net_id: return earlier when hotplug slot is not found
  4851355767 udev-builtin-net_id: skip non-directory entry earlier
  a571e5f1dd udev-builtin-net_id: make names_xen() self-contained
  9acc241d5f udev-builtin-net_id: use sd_device_get_sysnum() to get index of netdevsim
  ca8a431b55 udev-builtin-net_id: make names_netdevsim() self-contained
  a66251d666 udev-builtin-net_id: make names_platform() self-contained
  1e834d7157 udev-builtin-net_id: make names_vio() self-contained
  8b236dcd7a udev-builtin-net_id: make names_ccw() self-contained
  7d70e2fa7d udev-builtin-net_id: make dev_devicetree_onboard() self-contained
  46158a6e91 udev-builtin-net_id: make names_mac() self-contained
  7789e7f886 udev-builtin-net_id: split out get_ifname_prefix()
  9b0062a667 udev-builtin-net_id: swap arguments for streq() and friends
  181a775b40 udev-builtin-net_id: drop unused value from NetNameType
  Refactoring to prepare for backporting the filtering mechanism of specific
  sysfs attributes during predictable NIC name generation.</changelog>
  <changelog author="fbui@suse.com" date="1734350401">- Add 5004-udev-allow-denylist-for-reading-sysfs-attributes-whe.patch (bsc#1234015)
  Temporarily add this patch. It will be integrated in the git repository if
  no issues are reported in the coming months.</changelog>
  <changelog author="fbui@suse.com" date="1734955200">- Import commit eb5a78f50e64a39a2a509fd5141e68ff216a4273 (merge of v254.22)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/600986ba4d9c562390d99513416f49a5be5559f3...eb5a78f50e64a39a2a509fd5141e68ff216a4273</changelog>
  <changelog author="fbui@suse.com" date="1734955201">- Import commit 127e162c9cc0beb5058a718b3a9a1fec6942a927
  679c57667d tpm2-util: Also retry unsealing after policy_pcr returns PCR_CHANGED (boo#1233752 bsc#1234313)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734955202">- Fix systemd-network recommending libidn2-devel (boo#1234765)</changelog>
  <changelog author="fbui@suse.com" date="1736942400">- Import commit 34b1c72fa9aeea9c2c20e6802530e4b915c9dabf (merge of v254.23)
  eab1d9753b stdio-bridge: fix polled fds
  f028f2298e hwdb: comment out the entry for Logitech MX Keys for Mac
  e808cbdd6d test: answer 2nd mdadm --create question for compat with new version
  bf01f3d692 core/unit-serialize: fix serialization of markers
  f043ab6f34 locale-setup: do not load locale from environemnt when /etc/locale.conf is unchanged
  71efbe69b6 core: fix assert when AddDependencyUnitFiles is called with invalid parameter</changelog>
  <changelog author="fbui@suse.com" date="1736942401">- Add 1020-core-create-the-credential-directory-even-if-it-s-em.patch (bsc#1229228)
- Rename 5012-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch into
  1021-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch
  Commit dc571cccd75db7be49b2aada64baf92e3a498c39 was backported and included in
  v254.9 bumping the version requirement on gcc from 4.7 to 8. Unfortunately
  this breakage won't be fixed by upstream therefore there's no longer a need to
  keep the patch that reverts the offending commit in quarantine.</changelog>
  <changelog author="fbui@suse.com" date="1738670400">- Move systemd-userwork from the experimental sub-package to the main package (bsc#1236643)
  It is likely an oversight from when systemd-userdb was migrated from the
  experimental package to the main one.</changelog>
  <changelog author="fbui@suse.com" date="1741089600">- Import commit b25faa18ee7ef3c2d0b16416dfa331d0013dd112
  b4693652f3 journald: close runtime journals before their parent directory removed
  044d051f0c journald: reset runtime seqnum data when flushing to system journal (bsc#1236886)</changelog>
  <changelog author="fbui@suse.com" date="1742385600">- Import commit 2b599c7501253b0e6b7987fdb2676af21bc72ab3 (merge of v254.24)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/b25faa18ee7ef3c2d0b16416dfa331d0013dd112...2b599c7501253b0e6b7987fdb2676af21bc72ab3</changelog>
  <changelog author="fbui@suse.com" date="1742385601">- Import commit 83b9060b6e4c9cdffbbed0e27467cbd2f806dc0d
  09b7477895 udev: allow/denylist for reading sysfs attributes when composing a NIC name (bsc#1234015)
- Drop 5004-udev-allow-denylist-for-reading-sysfs-attributes-whe.patch
  The path has been merged into the SUSE/v254 branch.</changelog>
  <changelog author="fbui@suse.com" date="1743595200">- Import commit 2f79a45369489b656be509a1517afcae4fe3ee20
  ebdfa3e44e man/pstore.conf: pstore.conf template is not always installed in /etc
  304ed20aab man: coredump.conf template is not always installed in /etc (bsc#1237496)</changelog>
  <changelog author="fbui@suse.com" date="1746792000">- Add 1003-journal-again-create-user-journals-for-users-with-hi.patch (bsc#1242938)
  Don't write messages sent from users with UID falling into the container UID
  range to the system journal. Daemons in the container don't talk to the
  outside journald as they talk to the inner one directly, which does its
  journal splitting based on shifted uids.</changelog>
  <changelog author="fbui@suse.com" date="1747051200">- Apply coredump sysctl settings on systemd-coredump updates/removals.</changelog>
  <changelog author="fbui@suse.com" date="1747396800">- Import commit a4100e9c74b0eafae18a13e9d1d988ebc8376c6a
  806c21e22b umount: do not move busy network mounts (bsc#1236177)</changelog>
  <changelog author="fbui@suse.com" date="1748865600">- Import commit b0ae3b6e85b6a4030cf2adb88519a6ca0ffc1343
  41d2be2fb5 Revert "macro: terminate the temporary VA_ARGS_FOREACH() array with a sentinel" (SUSE specific)</changelog>
  <changelog author="fbui@suse.com" date="1748865601">- Import commit e08f49f2432509787abfb7f3fc0b2f2c459def04 (merge of v254.25)
  This merge includes the following fix:
    7fc7aa5a4d coredump: use %d in kernel core pattern (bsc#1243935 CVE-2025-4598)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/b0ae3b6e85b6a4030cf2adb88519a6ca0ffc1343...e08f49f2432509787abfb7f3fc0b2f2c459def04
- Drop 1021-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch
  The SUSE specific patch has been integrated into the SUSE/v254 git
  branch. Some of the imported commits from the stable tree rely on the macro
  now.</changelog>
  <changelog author="fbui@suse.com" date="1749038400">- Start the systemd-coredump.socket unit on systemd-coredump package
  installation.
- Restore the kernel default values of the coredump sysctl settings on
  systemd-coredump package removal.</changelog>
  <changelog author="fbui@suse.com" date="1749211200">- Import commit 278fb676146e35a7b4057f52f34a7bbaf1b82369
  aa12f501ae logs-show: get timestamp and boot ID only when necessary (bsc#1242827)
  e8b17d11bc sd-journal: drop to use Hashmap to manage journal files per boot ID
  ea80273738 tree-wide: set SD_JOURNAL_ASSUME_IMMUTABLE where appropriate
  a5b3b5344f sd-journal: introduce SD_JOURNAL_ASSUME_IMMUTABLE flag
  5fa0600b34 sd-journal: make journal_file_read_tail_timestamp() notify to the caller that some new journal entries added
  737e8193e7 sd-journal: cache last entry offset and journal file state
  057dca426f sd-journal: fix typo in function name</changelog>
</package>
<package pkgid="fb64712ccaa6f9d6c3bd48f0feaefbd4884affc32266a94bb43ff630d37a904a" name="libudev1" arch="x86_64">
  <version epoch="0" ver="254.27" rel="150600.4.43.3"/>
  <changelog author="fbui@suse.com" date="1734955200">- Import commit eb5a78f50e64a39a2a509fd5141e68ff216a4273 (merge of v254.22)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/600986ba4d9c562390d99513416f49a5be5559f3...eb5a78f50e64a39a2a509fd5141e68ff216a4273</changelog>
  <changelog author="fbui@suse.com" date="1734955201">- Import commit 127e162c9cc0beb5058a718b3a9a1fec6942a927
  679c57667d tpm2-util: Also retry unsealing after policy_pcr returns PCR_CHANGED (boo#1233752 bsc#1234313)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734955202">- Fix systemd-network recommending libidn2-devel (boo#1234765)</changelog>
  <changelog author="fbui@suse.com" date="1736942400">- Import commit 34b1c72fa9aeea9c2c20e6802530e4b915c9dabf (merge of v254.23)
  eab1d9753b stdio-bridge: fix polled fds
  f028f2298e hwdb: comment out the entry for Logitech MX Keys for Mac
  e808cbdd6d test: answer 2nd mdadm --create question for compat with new version
  bf01f3d692 core/unit-serialize: fix serialization of markers
  f043ab6f34 locale-setup: do not load locale from environemnt when /etc/locale.conf is unchanged
  71efbe69b6 core: fix assert when AddDependencyUnitFiles is called with invalid parameter</changelog>
  <changelog author="fbui@suse.com" date="1736942401">- Add 1020-core-create-the-credential-directory-even-if-it-s-em.patch (bsc#1229228)
- Rename 5012-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch into
  1021-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch
  Commit dc571cccd75db7be49b2aada64baf92e3a498c39 was backported and included in
  v254.9 bumping the version requirement on gcc from 4.7 to 8. Unfortunately
  this breakage won't be fixed by upstream therefore there's no longer a need to
  keep the patch that reverts the offending commit in quarantine.</changelog>
  <changelog author="fbui@suse.com" date="1738670400">- Move systemd-userwork from the experimental sub-package to the main package (bsc#1236643)
  It is likely an oversight from when systemd-userdb was migrated from the
  experimental package to the main one.</changelog>
  <changelog author="fbui@suse.com" date="1741089600">- Import commit b25faa18ee7ef3c2d0b16416dfa331d0013dd112
  b4693652f3 journald: close runtime journals before their parent directory removed
  044d051f0c journald: reset runtime seqnum data when flushing to system journal (bsc#1236886)</changelog>
  <changelog author="fbui@suse.com" date="1742385600">- Import commit 2b599c7501253b0e6b7987fdb2676af21bc72ab3 (merge of v254.24)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/b25faa18ee7ef3c2d0b16416dfa331d0013dd112...2b599c7501253b0e6b7987fdb2676af21bc72ab3</changelog>
  <changelog author="fbui@suse.com" date="1742385601">- Import commit 83b9060b6e4c9cdffbbed0e27467cbd2f806dc0d
  09b7477895 udev: allow/denylist for reading sysfs attributes when composing a NIC name (bsc#1234015)
- Drop 5004-udev-allow-denylist-for-reading-sysfs-attributes-whe.patch
  The path has been merged into the SUSE/v254 branch.</changelog>
  <changelog author="fbui@suse.com" date="1743595200">- Import commit 2f79a45369489b656be509a1517afcae4fe3ee20
  ebdfa3e44e man/pstore.conf: pstore.conf template is not always installed in /etc
  304ed20aab man: coredump.conf template is not always installed in /etc (bsc#1237496)</changelog>
  <changelog author="fbui@suse.com" date="1746792000">- Add 1003-journal-again-create-user-journals-for-users-with-hi.patch (bsc#1242938)
  Don't write messages sent from users with UID falling into the container UID
  range to the system journal. Daemons in the container don't talk to the
  outside journald as they talk to the inner one directly, which does its
  journal splitting based on shifted uids.</changelog>
  <changelog author="fbui@suse.com" date="1747051200">- Apply coredump sysctl settings on systemd-coredump updates/removals.</changelog>
  <changelog author="fbui@suse.com" date="1747396800">- Import commit a4100e9c74b0eafae18a13e9d1d988ebc8376c6a
  806c21e22b umount: do not move busy network mounts (bsc#1236177)</changelog>
  <changelog author="fbui@suse.com" date="1748865600">- Import commit b0ae3b6e85b6a4030cf2adb88519a6ca0ffc1343
  41d2be2fb5 Revert "macro: terminate the temporary VA_ARGS_FOREACH() array with a sentinel" (SUSE specific)</changelog>
  <changelog author="fbui@suse.com" date="1748865601">- Import commit e08f49f2432509787abfb7f3fc0b2f2c459def04 (merge of v254.25)
  This merge includes the following fix:
    7fc7aa5a4d coredump: use %d in kernel core pattern (bsc#1243935 CVE-2025-4598)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/b0ae3b6e85b6a4030cf2adb88519a6ca0ffc1343...e08f49f2432509787abfb7f3fc0b2f2c459def04
- Drop 1021-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch
  The SUSE specific patch has been integrated into the SUSE/v254 git
  branch. Some of the imported commits from the stable tree rely on the macro
  now.</changelog>
  <changelog author="fbui@suse.com" date="1749038400">- Start the systemd-coredump.socket unit on systemd-coredump package
  installation.
- Restore the kernel default values of the coredump sysctl settings on
  systemd-coredump package removal.</changelog>
  <changelog author="fbui@suse.com" date="1749211200">- Import commit 278fb676146e35a7b4057f52f34a7bbaf1b82369
  aa12f501ae logs-show: get timestamp and boot ID only when necessary (bsc#1242827)
  e8b17d11bc sd-journal: drop to use Hashmap to manage journal files per boot ID
  ea80273738 tree-wide: set SD_JOURNAL_ASSUME_IMMUTABLE where appropriate
  a5b3b5344f sd-journal: introduce SD_JOURNAL_ASSUME_IMMUTABLE flag
  5fa0600b34 sd-journal: make journal_file_read_tail_timestamp() notify to the caller that some new journal entries added
  737e8193e7 sd-journal: cache last entry offset and journal file state
  057dca426f sd-journal: fix typo in function name</changelog>
  <changelog author="fbui@suse.com" date="1751544000">- Import commit 130293e510ceb4d121d11823e6ebd4b1e8332ea0 (merge of v254.27)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/278fb676146e35a7b4057f52f34a7bbaf1b82369...130293e510ceb4d121d11823e6ebd4b1e8332ea0</changelog>
  <changelog author="fbui@suse.com" date="1751544001">- systemd-repart is no more considered as experimental (jsc#PED-13213)</changelog>
  <changelog author="fbui@suse.com" date="1751889600">- triggers.systemd: skip update of hwdb, journal-catalog if executed during
  an offline update.</changelog>
</package>
<package pkgid="16b2ad05b63b2f75ebbb14da249e8e13cae623184dcc1eb6e2282fdc318627c3" name="libudev1" arch="x86_64">
  <version epoch="0" ver="254.27" rel="150600.4.46.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1734955200">- Fix systemd-network recommending libidn2-devel (boo#1234765)</changelog>
  <changelog author="fbui@suse.com" date="1736942400">- Import commit 34b1c72fa9aeea9c2c20e6802530e4b915c9dabf (merge of v254.23)
  eab1d9753b stdio-bridge: fix polled fds
  f028f2298e hwdb: comment out the entry for Logitech MX Keys for Mac
  e808cbdd6d test: answer 2nd mdadm --create question for compat with new version
  bf01f3d692 core/unit-serialize: fix serialization of markers
  f043ab6f34 locale-setup: do not load locale from environemnt when /etc/locale.conf is unchanged
  71efbe69b6 core: fix assert when AddDependencyUnitFiles is called with invalid parameter</changelog>
  <changelog author="fbui@suse.com" date="1736942401">- Add 1020-core-create-the-credential-directory-even-if-it-s-em.patch (bsc#1229228)
- Rename 5012-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch into
  1021-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch
  Commit dc571cccd75db7be49b2aada64baf92e3a498c39 was backported and included in
  v254.9 bumping the version requirement on gcc from 4.7 to 8. Unfortunately
  this breakage won't be fixed by upstream therefore there's no longer a need to
  keep the patch that reverts the offending commit in quarantine.</changelog>
  <changelog author="fbui@suse.com" date="1738670400">- Move systemd-userwork from the experimental sub-package to the main package (bsc#1236643)
  It is likely an oversight from when systemd-userdb was migrated from the
  experimental package to the main one.</changelog>
  <changelog author="fbui@suse.com" date="1741089600">- Import commit b25faa18ee7ef3c2d0b16416dfa331d0013dd112
  b4693652f3 journald: close runtime journals before their parent directory removed
  044d051f0c journald: reset runtime seqnum data when flushing to system journal (bsc#1236886)</changelog>
  <changelog author="fbui@suse.com" date="1742385600">- Import commit 2b599c7501253b0e6b7987fdb2676af21bc72ab3 (merge of v254.24)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/b25faa18ee7ef3c2d0b16416dfa331d0013dd112...2b599c7501253b0e6b7987fdb2676af21bc72ab3</changelog>
  <changelog author="fbui@suse.com" date="1742385601">- Import commit 83b9060b6e4c9cdffbbed0e27467cbd2f806dc0d
  09b7477895 udev: allow/denylist for reading sysfs attributes when composing a NIC name (bsc#1234015)
- Drop 5004-udev-allow-denylist-for-reading-sysfs-attributes-whe.patch
  The path has been merged into the SUSE/v254 branch.</changelog>
  <changelog author="fbui@suse.com" date="1743595200">- Import commit 2f79a45369489b656be509a1517afcae4fe3ee20
  ebdfa3e44e man/pstore.conf: pstore.conf template is not always installed in /etc
  304ed20aab man: coredump.conf template is not always installed in /etc (bsc#1237496)</changelog>
  <changelog author="fbui@suse.com" date="1746792000">- Add 1003-journal-again-create-user-journals-for-users-with-hi.patch (bsc#1242938)
  Don't write messages sent from users with UID falling into the container UID
  range to the system journal. Daemons in the container don't talk to the
  outside journald as they talk to the inner one directly, which does its
  journal splitting based on shifted uids.</changelog>
  <changelog author="fbui@suse.com" date="1747051200">- Apply coredump sysctl settings on systemd-coredump updates/removals.</changelog>
  <changelog author="fbui@suse.com" date="1747396800">- Import commit a4100e9c74b0eafae18a13e9d1d988ebc8376c6a
  806c21e22b umount: do not move busy network mounts (bsc#1236177)</changelog>
  <changelog author="fbui@suse.com" date="1748865600">- Import commit b0ae3b6e85b6a4030cf2adb88519a6ca0ffc1343
  41d2be2fb5 Revert "macro: terminate the temporary VA_ARGS_FOREACH() array with a sentinel" (SUSE specific)</changelog>
  <changelog author="fbui@suse.com" date="1748865601">- Import commit e08f49f2432509787abfb7f3fc0b2f2c459def04 (merge of v254.25)
  This merge includes the following fix:
    7fc7aa5a4d coredump: use %d in kernel core pattern (bsc#1243935 CVE-2025-4598)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/b0ae3b6e85b6a4030cf2adb88519a6ca0ffc1343...e08f49f2432509787abfb7f3fc0b2f2c459def04
- Drop 1021-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch
  The SUSE specific patch has been integrated into the SUSE/v254 git
  branch. Some of the imported commits from the stable tree rely on the macro
  now.</changelog>
  <changelog author="fbui@suse.com" date="1749038400">- Start the systemd-coredump.socket unit on systemd-coredump package
  installation.
- Restore the kernel default values of the coredump sysctl settings on
  systemd-coredump package removal.</changelog>
  <changelog author="fbui@suse.com" date="1749211200">- Import commit 278fb676146e35a7b4057f52f34a7bbaf1b82369
  aa12f501ae logs-show: get timestamp and boot ID only when necessary (bsc#1242827)
  e8b17d11bc sd-journal: drop to use Hashmap to manage journal files per boot ID
  ea80273738 tree-wide: set SD_JOURNAL_ASSUME_IMMUTABLE where appropriate
  a5b3b5344f sd-journal: introduce SD_JOURNAL_ASSUME_IMMUTABLE flag
  5fa0600b34 sd-journal: make journal_file_read_tail_timestamp() notify to the caller that some new journal entries added
  737e8193e7 sd-journal: cache last entry offset and journal file state
  057dca426f sd-journal: fix typo in function name</changelog>
  <changelog author="fbui@suse.com" date="1751544000">- Import commit 130293e510ceb4d121d11823e6ebd4b1e8332ea0 (merge of v254.27)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/278fb676146e35a7b4057f52f34a7bbaf1b82369...130293e510ceb4d121d11823e6ebd4b1e8332ea0</changelog>
  <changelog author="fbui@suse.com" date="1751544001">- systemd-repart is no more considered as experimental (jsc#PED-13213)</changelog>
  <changelog author="fbui@suse.com" date="1751889600">- triggers.systemd: skip update of hwdb, journal-catalog if executed during
  an offline update.</changelog>
  <changelog author="fbui@suse.com" date="1758196800">- Split systemd-network into two new sub-packages: systemd-networkd and
  systemd-resolved (bsc#1224386 jsc#PED-12669)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1758196801">- systemd.spec: use %sysusers_generate_pre so that some systemd users are
  already available in %pre. This is important because D-Bus automatically
  reloads its configuration whenever new configuration files are installed,
  i.e. between %pre and %post. (bsc#1248501)
  No needs for systemd and udev packages as they are always installed during
  the initial installation.</changelog>
</package>
<package pkgid="e6a1011597809e10997f4ef9b89f88f251de63ec058be50bc8563406dbc72456" name="libudev1" arch="x86_64">
  <version epoch="0" ver="254.27" rel="150600.4.55.1"/>
  <changelog author="fbui@suse.com" date="1742385600">- Import commit 2b599c7501253b0e6b7987fdb2676af21bc72ab3 (merge of v254.24)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/b25faa18ee7ef3c2d0b16416dfa331d0013dd112...2b599c7501253b0e6b7987fdb2676af21bc72ab3</changelog>
  <changelog author="fbui@suse.com" date="1742385601">- Import commit 83b9060b6e4c9cdffbbed0e27467cbd2f806dc0d
  09b7477895 udev: allow/denylist for reading sysfs attributes when composing a NIC name (bsc#1234015)
- Drop 5004-udev-allow-denylist-for-reading-sysfs-attributes-whe.patch
  The path has been merged into the SUSE/v254 branch.</changelog>
  <changelog author="fbui@suse.com" date="1743595200">- Import commit 2f79a45369489b656be509a1517afcae4fe3ee20
  ebdfa3e44e man/pstore.conf: pstore.conf template is not always installed in /etc
  304ed20aab man: coredump.conf template is not always installed in /etc (bsc#1237496)</changelog>
  <changelog author="fbui@suse.com" date="1746792000">- Add 1003-journal-again-create-user-journals-for-users-with-hi.patch (bsc#1242938)
  Don't write messages sent from users with UID falling into the container UID
  range to the system journal. Daemons in the container don't talk to the
  outside journald as they talk to the inner one directly, which does its
  journal splitting based on shifted uids.</changelog>
  <changelog author="fbui@suse.com" date="1747051200">- Apply coredump sysctl settings on systemd-coredump updates/removals.</changelog>
  <changelog author="fbui@suse.com" date="1747396800">- Import commit a4100e9c74b0eafae18a13e9d1d988ebc8376c6a
  806c21e22b umount: do not move busy network mounts (bsc#1236177)</changelog>
  <changelog author="fbui@suse.com" date="1748865600">- Import commit b0ae3b6e85b6a4030cf2adb88519a6ca0ffc1343
  41d2be2fb5 Revert "macro: terminate the temporary VA_ARGS_FOREACH() array with a sentinel" (SUSE specific)</changelog>
  <changelog author="fbui@suse.com" date="1748865601">- Import commit e08f49f2432509787abfb7f3fc0b2f2c459def04 (merge of v254.25)
  This merge includes the following fix:
    7fc7aa5a4d coredump: use %d in kernel core pattern (bsc#1243935 CVE-2025-4598)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/b0ae3b6e85b6a4030cf2adb88519a6ca0ffc1343...e08f49f2432509787abfb7f3fc0b2f2c459def04
- Drop 1021-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch
  The SUSE specific patch has been integrated into the SUSE/v254 git
  branch. Some of the imported commits from the stable tree rely on the macro
  now.</changelog>
  <changelog author="fbui@suse.com" date="1749038400">- Start the systemd-coredump.socket unit on systemd-coredump package
  installation.
- Restore the kernel default values of the coredump sysctl settings on
  systemd-coredump package removal.</changelog>
  <changelog author="fbui@suse.com" date="1749211200">- Import commit 278fb676146e35a7b4057f52f34a7bbaf1b82369
  aa12f501ae logs-show: get timestamp and boot ID only when necessary (bsc#1242827)
  e8b17d11bc sd-journal: drop to use Hashmap to manage journal files per boot ID
  ea80273738 tree-wide: set SD_JOURNAL_ASSUME_IMMUTABLE where appropriate
  a5b3b5344f sd-journal: introduce SD_JOURNAL_ASSUME_IMMUTABLE flag
  5fa0600b34 sd-journal: make journal_file_read_tail_timestamp() notify to the caller that some new journal entries added
  737e8193e7 sd-journal: cache last entry offset and journal file state
  057dca426f sd-journal: fix typo in function name</changelog>
  <changelog author="fbui@suse.com" date="1751544000">- Import commit 130293e510ceb4d121d11823e6ebd4b1e8332ea0 (merge of v254.27)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/278fb676146e35a7b4057f52f34a7bbaf1b82369...130293e510ceb4d121d11823e6ebd4b1e8332ea0</changelog>
  <changelog author="fbui@suse.com" date="1751544001">- systemd-repart is no more considered as experimental (jsc#PED-13213)</changelog>
  <changelog author="fbui@suse.com" date="1751889600">- triggers.systemd: skip update of hwdb, journal-catalog if executed during
  an offline update.</changelog>
  <changelog author="fbui@suse.com" date="1758196800">- Split systemd-network into two new sub-packages: systemd-networkd and
  systemd-resolved (bsc#1224386 jsc#PED-12669)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1758196801">- systemd.spec: use %sysusers_generate_pre so that some systemd users are
  already available in %pre. This is important because D-Bus automatically
  reloads its configuration whenever new configuration files are installed,
  i.e. between %pre and %post. (bsc#1248501)
  No needs for systemd and udev packages as they are always installed during
  the initial installation.</changelog>
  <changelog author="fbui@suse.com" date="1761652800">- Import commit 00ba3646e6cb3ce40bb3de3e92f93ebec0adce6d
  e4dd315b6c units: don't force the loading of the loop and dm_mod modules in systemd-repart.service (bsc#1248356)
  b58e72215a units: add dep on systemd-logind.service by user@.service
  97ceca445c detect-virt: add bare-metal support for GCE (bsc#1244449)</changelog>
  <changelog author="fbui@suse.com" date="1765281600">- Reintroduce systemd-network as a transitional dummy package containing no
  files (bsc#1254202)
  The contents of this package were split into two independent packages:
  systemd-networkd and systemd-resolved. However, the initial replacement caused
  both network services to be disabled. Consequently, the original package has
  been restored as an empty transitional package to prevent the disabling of the
  services. It can be safely removed once the update is complete.</changelog>
  <changelog author="fbui@suse.com" date="1765800000">- Import commit 5caaa71f4a7b00e6a6ceb396d08486af73687d45
  9ecd162284 timer: rebase last_trigger timestamp if needed
  cd4a9103ef timer: rebase the next elapse timestamp only if timer didn't already run
  c3f4407e97 timer: don't run service immediately after restart of a timer (bsc#1254563)
  05bcfe3295 test: check the next elapse timer timestamp after deserialization
  fe8f656975 test: restarting elapsed timer shouldn't trigger the corresponding service</changelog>
  <changelog author="fbui@suse.com" date="1766145600">- Import commit 75eab961ea843dc161707d4af0789b018d499676
  - 8bbac1d508 detect-virt: bare-metal GCE only for x86 and i386 (bsc#1254293)</changelog>
  <changelog author="fbui@suse.com" date="1768305600">- Name libsystemd-{shared,core} based on the major version of systemd and the
  package release number (bsc#1228081 bsc#1256427)
  This way, both the old and new versions of the shared libraries will be
  present during the update. This should prevent issues during package updates
  when incompatible changes are introduced in the new versions of the shared
  libraries.</changelog>
</package>
<package pkgid="18f4e69585461a44b81bff1dbe9e4fff5a11d9e1593d7ab45ed47b4926aa7139" name="libudev1" arch="x86_64">
  <version epoch="0" ver="254.27" rel="150600.4.62.1"/>
  <changelog author="fbui@suse.com" date="1743595200">- Import commit 2f79a45369489b656be509a1517afcae4fe3ee20
  ebdfa3e44e man/pstore.conf: pstore.conf template is not always installed in /etc
  304ed20aab man: coredump.conf template is not always installed in /etc (bsc#1237496)</changelog>
  <changelog author="fbui@suse.com" date="1746792000">- Add 1003-journal-again-create-user-journals-for-users-with-hi.patch (bsc#1242938)
  Don't write messages sent from users with UID falling into the container UID
  range to the system journal. Daemons in the container don't talk to the
  outside journald as they talk to the inner one directly, which does its
  journal splitting based on shifted uids.</changelog>
  <changelog author="fbui@suse.com" date="1747051200">- Apply coredump sysctl settings on systemd-coredump updates/removals.</changelog>
  <changelog author="fbui@suse.com" date="1747396800">- Import commit a4100e9c74b0eafae18a13e9d1d988ebc8376c6a
  806c21e22b umount: do not move busy network mounts (bsc#1236177)</changelog>
  <changelog author="fbui@suse.com" date="1748865600">- Import commit b0ae3b6e85b6a4030cf2adb88519a6ca0ffc1343
  41d2be2fb5 Revert "macro: terminate the temporary VA_ARGS_FOREACH() array with a sentinel" (SUSE specific)</changelog>
  <changelog author="fbui@suse.com" date="1748865601">- Import commit e08f49f2432509787abfb7f3fc0b2f2c459def04 (merge of v254.25)
  This merge includes the following fix:
    7fc7aa5a4d coredump: use %d in kernel core pattern (bsc#1243935 CVE-2025-4598)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/b0ae3b6e85b6a4030cf2adb88519a6ca0ffc1343...e08f49f2432509787abfb7f3fc0b2f2c459def04
- Drop 1021-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch
  The SUSE specific patch has been integrated into the SUSE/v254 git
  branch. Some of the imported commits from the stable tree rely on the macro
  now.</changelog>
  <changelog author="fbui@suse.com" date="1749038400">- Start the systemd-coredump.socket unit on systemd-coredump package
  installation.
- Restore the kernel default values of the coredump sysctl settings on
  systemd-coredump package removal.</changelog>
  <changelog author="fbui@suse.com" date="1749211200">- Import commit 278fb676146e35a7b4057f52f34a7bbaf1b82369
  aa12f501ae logs-show: get timestamp and boot ID only when necessary (bsc#1242827)
  e8b17d11bc sd-journal: drop to use Hashmap to manage journal files per boot ID
  ea80273738 tree-wide: set SD_JOURNAL_ASSUME_IMMUTABLE where appropriate
  a5b3b5344f sd-journal: introduce SD_JOURNAL_ASSUME_IMMUTABLE flag
  5fa0600b34 sd-journal: make journal_file_read_tail_timestamp() notify to the caller that some new journal entries added
  737e8193e7 sd-journal: cache last entry offset and journal file state
  057dca426f sd-journal: fix typo in function name</changelog>
  <changelog author="fbui@suse.com" date="1751544000">- Import commit 130293e510ceb4d121d11823e6ebd4b1e8332ea0 (merge of v254.27)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/278fb676146e35a7b4057f52f34a7bbaf1b82369...130293e510ceb4d121d11823e6ebd4b1e8332ea0</changelog>
  <changelog author="fbui@suse.com" date="1751544001">- systemd-repart is no more considered as experimental (jsc#PED-13213)</changelog>
  <changelog author="fbui@suse.com" date="1751889600">- triggers.systemd: skip update of hwdb, journal-catalog if executed during
  an offline update.</changelog>
  <changelog author="fbui@suse.com" date="1758196800">- Split systemd-network into two new sub-packages: systemd-networkd and
  systemd-resolved (bsc#1224386 jsc#PED-12669)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1758196801">- systemd.spec: use %sysusers_generate_pre so that some systemd users are
  already available in %pre. This is important because D-Bus automatically
  reloads its configuration whenever new configuration files are installed,
  i.e. between %pre and %post. (bsc#1248501)
  No needs for systemd and udev packages as they are always installed during
  the initial installation.</changelog>
  <changelog author="fbui@suse.com" date="1761652800">- Import commit 00ba3646e6cb3ce40bb3de3e92f93ebec0adce6d
  e4dd315b6c units: don't force the loading of the loop and dm_mod modules in systemd-repart.service (bsc#1248356)
  b58e72215a units: add dep on systemd-logind.service by user@.service
  97ceca445c detect-virt: add bare-metal support for GCE (bsc#1244449)</changelog>
  <changelog author="fbui@suse.com" date="1765281600">- Reintroduce systemd-network as a transitional dummy package containing no
  files (bsc#1254202)
  The contents of this package were split into two independent packages:
  systemd-networkd and systemd-resolved. However, the initial replacement caused
  both network services to be disabled. Consequently, the original package has
  been restored as an empty transitional package to prevent the disabling of the
  services. It can be safely removed once the update is complete.</changelog>
  <changelog author="fbui@suse.com" date="1765800000">- Import commit 5caaa71f4a7b00e6a6ceb396d08486af73687d45
  9ecd162284 timer: rebase last_trigger timestamp if needed
  cd4a9103ef timer: rebase the next elapse timestamp only if timer didn't already run
  c3f4407e97 timer: don't run service immediately after restart of a timer (bsc#1254563)
  05bcfe3295 test: check the next elapse timer timestamp after deserialization
  fe8f656975 test: restarting elapsed timer shouldn't trigger the corresponding service</changelog>
  <changelog author="fbui@suse.com" date="1766145600">- Import commit 75eab961ea843dc161707d4af0789b018d499676
  - 8bbac1d508 detect-virt: bare-metal GCE only for x86 and i386 (bsc#1254293)</changelog>
  <changelog author="fbui@suse.com" date="1768305600">- Name libsystemd-{shared,core} based on the major version of systemd and the
  package release number (bsc#1228081 bsc#1256427)
  This way, both the old and new versions of the shared libraries will be
  present during the update. This should prevent issues during package updates
  when incompatible changes are introduced in the new versions of the shared
  libraries.</changelog>
  <changelog author="fbui@suse.com" date="1772193600">- Import commit 626ffc7844795870235d15c6daab695f2d53a11e
  aef6e11921 core/cgroup: avoid one unnecessary strjoina()
  cc7426f38a sd-json: fix off-by-one issue when updating parent for array elements
  26a748f727 core: validate input cgroup path more prudently (CVE-2026-29111 bsc#1259418)
  99d8308fde core/dbus-manager: propagate meaningful dbus errors from EnqueueMarkedJobs</changelog>
  <changelog author="fbui@suse.com" date="1773921600">- Import commit c89ea566d98c8e3fb29a5b8edd4576b135b4bc92
  a943e3ce2f machined: reject invalid class types when registering machines (bsc#1259650 CVE-2026-4105)
  71593f77db udev: fix review mixup
  73a89810b4 udev-builtin-net-id: print cescaped bad attributes
  0f360bfdc0 udev-builtin-net_id: do not assume the current interface name is ethX
  40905232e2 udev: ensure tag parsing stays within bounds
  7bce9026e3 udev: ensure there is space for trailing NUL before calling sprintf
  d018ac1ea3 udev: check for invalid chars in various fields received from the kernel (bsc#1259697)</changelog>
</package>
<package pkgid="fadb5a0973e037d267eb048d997808372e231644dc23d8cbbb0e32e7ffff00d3" name="libudev1-32bit" arch="x86_64">
  <version epoch="0" ver="254.24" rel="150600.4.33.1"/>
  <changelog author="fbui@suse.com" date="1727870400">- Clean up some remnants from when homed was in the experimental sub-package (bsc#1231048)</changelog>
  <changelog author="fbui@suse.com" date="1729512000">- Import commit 0cbb02c0273374b14188f30e89874c9e8ae425c9 (merge of v254.19)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/44943af96be1422c2d7bdf271e4a77b42f4b41ec...0cbb02c0273374b14188f30e89874c9e8ae425c9</changelog>
  <changelog author="fbui@suse.com" date="1732708800">- Import commit f7f6a3454e3321f92cbdf8e30aeb8b17bc1ff8e8 (merge of v254.20)
  This merge includes the following fix:
    8b6ae951d3 udev: skipping empty udev rules file while collecting the stats (bsc#1232844)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/0cbb02c0273374b14188f30e89874c9e8ae425c9...f7f6a3454e3321f92cbdf8e30aeb8b17bc1ff8e8</changelog>
  <changelog author="fbui@suse.com" date="1733227200">- Import commit 600986ba4d9c562390d99513416f49a5be5559f3 (merge of v254.21)
  This merge includes the following fix:
    a467a411f pid1: make clear that $WATCHDOG_USEC is set for the shutdown binary, noone else (bsc#1232227)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/f7f6a3454e3321f92cbdf8e30aeb8b17bc1ff8e8...600986ba4d9c562390d99513416f49a5be5559f3</changelog>
  <changelog author="fbui@suse.com" date="1733227201">- Add 0003-Drop-support-for-efivar-SystemdOptions.patch (bsc#1220338)
  Upstream deprecated it and plan to drop it in the future.
  Let's get ahead and drop it now as this feature is unlikely to be used on SUSE
  distros and it might be used to gain access to encrypted SLEM systems with
  unattended disk unlock and with secure boot disabled.</changelog>
  <changelog author="fbui@suse.com" date="1734350400">- Import commit eddf52fb14391c30ee2f45fd0c3cab1be116c951
  807fe76411 udev: add new builtin net_driver
  3a48b5f21d udev-builtin-net_id: split-out pci_get_onboard_index() from dev_pci_onboard()
  5359c1d6d4 udev-builtin-net_id: split-out get_pci_slot_specifiers()
  1cd915ac7b udev-builtin-net_id: introduce get_port_specifier() helper function
  72a4218155 udev-builtin-net_id: split out get_dev_port() and make its failure critical
  f6c721b4da udev-builtin-net_id: split-out pci_get_hotplug_slot() and pci_get_hotplug_slot_from_address()
  9e16c3cf27 udev-builtin-net_id: return earlier when hotplug slot is not found
  4851355767 udev-builtin-net_id: skip non-directory entry earlier
  a571e5f1dd udev-builtin-net_id: make names_xen() self-contained
  9acc241d5f udev-builtin-net_id: use sd_device_get_sysnum() to get index of netdevsim
  ca8a431b55 udev-builtin-net_id: make names_netdevsim() self-contained
  a66251d666 udev-builtin-net_id: make names_platform() self-contained
  1e834d7157 udev-builtin-net_id: make names_vio() self-contained
  8b236dcd7a udev-builtin-net_id: make names_ccw() self-contained
  7d70e2fa7d udev-builtin-net_id: make dev_devicetree_onboard() self-contained
  46158a6e91 udev-builtin-net_id: make names_mac() self-contained
  7789e7f886 udev-builtin-net_id: split out get_ifname_prefix()
  9b0062a667 udev-builtin-net_id: swap arguments for streq() and friends
  181a775b40 udev-builtin-net_id: drop unused value from NetNameType
  Refactoring to prepare for backporting the filtering mechanism of specific
  sysfs attributes during predictable NIC name generation.</changelog>
  <changelog author="fbui@suse.com" date="1734350401">- Add 5004-udev-allow-denylist-for-reading-sysfs-attributes-whe.patch (bsc#1234015)
  Temporarily add this patch. It will be integrated in the git repository if
  no issues are reported in the coming months.</changelog>
  <changelog author="fbui@suse.com" date="1734955200">- Import commit eb5a78f50e64a39a2a509fd5141e68ff216a4273 (merge of v254.22)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/600986ba4d9c562390d99513416f49a5be5559f3...eb5a78f50e64a39a2a509fd5141e68ff216a4273</changelog>
  <changelog author="fbui@suse.com" date="1734955201">- Import commit 127e162c9cc0beb5058a718b3a9a1fec6942a927
  679c57667d tpm2-util: Also retry unsealing after policy_pcr returns PCR_CHANGED (boo#1233752 bsc#1234313)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734955202">- Fix systemd-network recommending libidn2-devel (boo#1234765)</changelog>
  <changelog author="fbui@suse.com" date="1736942400">- Import commit 34b1c72fa9aeea9c2c20e6802530e4b915c9dabf (merge of v254.23)
  eab1d9753b stdio-bridge: fix polled fds
  f028f2298e hwdb: comment out the entry for Logitech MX Keys for Mac
  e808cbdd6d test: answer 2nd mdadm --create question for compat with new version
  bf01f3d692 core/unit-serialize: fix serialization of markers
  f043ab6f34 locale-setup: do not load locale from environemnt when /etc/locale.conf is unchanged
  71efbe69b6 core: fix assert when AddDependencyUnitFiles is called with invalid parameter</changelog>
  <changelog author="fbui@suse.com" date="1736942401">- Add 1020-core-create-the-credential-directory-even-if-it-s-em.patch (bsc#1229228)
- Rename 5012-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch into
  1021-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch
  Commit dc571cccd75db7be49b2aada64baf92e3a498c39 was backported and included in
  v254.9 bumping the version requirement on gcc from 4.7 to 8. Unfortunately
  this breakage won't be fixed by upstream therefore there's no longer a need to
  keep the patch that reverts the offending commit in quarantine.</changelog>
  <changelog author="fbui@suse.com" date="1738670400">- Move systemd-userwork from the experimental sub-package to the main package (bsc#1236643)
  It is likely an oversight from when systemd-userdb was migrated from the
  experimental package to the main one.</changelog>
  <changelog author="fbui@suse.com" date="1741089600">- Import commit b25faa18ee7ef3c2d0b16416dfa331d0013dd112
  b4693652f3 journald: close runtime journals before their parent directory removed
  044d051f0c journald: reset runtime seqnum data when flushing to system journal (bsc#1236886)</changelog>
  <changelog author="fbui@suse.com" date="1742385600">- Import commit 2b599c7501253b0e6b7987fdb2676af21bc72ab3 (merge of v254.24)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/b25faa18ee7ef3c2d0b16416dfa331d0013dd112...2b599c7501253b0e6b7987fdb2676af21bc72ab3</changelog>
  <changelog author="fbui@suse.com" date="1742385601">- Import commit 83b9060b6e4c9cdffbbed0e27467cbd2f806dc0d
  09b7477895 udev: allow/denylist for reading sysfs attributes when composing a NIC name (bsc#1234015)
- Drop 5004-udev-allow-denylist-for-reading-sysfs-attributes-whe.patch
  The path has been merged into the SUSE/v254 branch.</changelog>
  <changelog author="fbui@suse.com" date="1743595200">- Import commit 2f79a45369489b656be509a1517afcae4fe3ee20
  ebdfa3e44e man/pstore.conf: pstore.conf template is not always installed in /etc
  304ed20aab man: coredump.conf template is not always installed in /etc (bsc#1237496)</changelog>
  <changelog author="fbui@suse.com" date="1746792000">- Add 1003-journal-again-create-user-journals-for-users-with-hi.patch (bsc#1242938)
  Don't write messages sent from users with UID falling into the container UID
  range to the system journal. Daemons in the container don't talk to the
  outside journald as they talk to the inner one directly, which does its
  journal splitting based on shifted uids.</changelog>
  <changelog author="fbui@suse.com" date="1747051200">- Apply coredump sysctl settings on systemd-coredump updates/removals.</changelog>
  <changelog author="fbui@suse.com" date="1747396800">- Import commit a4100e9c74b0eafae18a13e9d1d988ebc8376c6a
  806c21e22b umount: do not move busy network mounts (bsc#1236177)</changelog>
</package>
<package pkgid="6f2c3329e52f4874e2ba6fd74d4f8d7c5ce5c435d7450de0e96601aa66b6c7b2" name="libudev1-32bit" arch="x86_64">
  <version epoch="0" ver="254.25" rel="150600.4.40.1"/>
  <changelog author="fbui@suse.com" date="1733227200">- Add 0003-Drop-support-for-efivar-SystemdOptions.patch (bsc#1220338)
  Upstream deprecated it and plan to drop it in the future.
  Let's get ahead and drop it now as this feature is unlikely to be used on SUSE
  distros and it might be used to gain access to encrypted SLEM systems with
  unattended disk unlock and with secure boot disabled.</changelog>
  <changelog author="fbui@suse.com" date="1734350400">- Import commit eddf52fb14391c30ee2f45fd0c3cab1be116c951
  807fe76411 udev: add new builtin net_driver
  3a48b5f21d udev-builtin-net_id: split-out pci_get_onboard_index() from dev_pci_onboard()
  5359c1d6d4 udev-builtin-net_id: split-out get_pci_slot_specifiers()
  1cd915ac7b udev-builtin-net_id: introduce get_port_specifier() helper function
  72a4218155 udev-builtin-net_id: split out get_dev_port() and make its failure critical
  f6c721b4da udev-builtin-net_id: split-out pci_get_hotplug_slot() and pci_get_hotplug_slot_from_address()
  9e16c3cf27 udev-builtin-net_id: return earlier when hotplug slot is not found
  4851355767 udev-builtin-net_id: skip non-directory entry earlier
  a571e5f1dd udev-builtin-net_id: make names_xen() self-contained
  9acc241d5f udev-builtin-net_id: use sd_device_get_sysnum() to get index of netdevsim
  ca8a431b55 udev-builtin-net_id: make names_netdevsim() self-contained
  a66251d666 udev-builtin-net_id: make names_platform() self-contained
  1e834d7157 udev-builtin-net_id: make names_vio() self-contained
  8b236dcd7a udev-builtin-net_id: make names_ccw() self-contained
  7d70e2fa7d udev-builtin-net_id: make dev_devicetree_onboard() self-contained
  46158a6e91 udev-builtin-net_id: make names_mac() self-contained
  7789e7f886 udev-builtin-net_id: split out get_ifname_prefix()
  9b0062a667 udev-builtin-net_id: swap arguments for streq() and friends
  181a775b40 udev-builtin-net_id: drop unused value from NetNameType
  Refactoring to prepare for backporting the filtering mechanism of specific
  sysfs attributes during predictable NIC name generation.</changelog>
  <changelog author="fbui@suse.com" date="1734350401">- Add 5004-udev-allow-denylist-for-reading-sysfs-attributes-whe.patch (bsc#1234015)
  Temporarily add this patch. It will be integrated in the git repository if
  no issues are reported in the coming months.</changelog>
  <changelog author="fbui@suse.com" date="1734955200">- Import commit eb5a78f50e64a39a2a509fd5141e68ff216a4273 (merge of v254.22)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/600986ba4d9c562390d99513416f49a5be5559f3...eb5a78f50e64a39a2a509fd5141e68ff216a4273</changelog>
  <changelog author="fbui@suse.com" date="1734955201">- Import commit 127e162c9cc0beb5058a718b3a9a1fec6942a927
  679c57667d tpm2-util: Also retry unsealing after policy_pcr returns PCR_CHANGED (boo#1233752 bsc#1234313)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734955202">- Fix systemd-network recommending libidn2-devel (boo#1234765)</changelog>
  <changelog author="fbui@suse.com" date="1736942400">- Import commit 34b1c72fa9aeea9c2c20e6802530e4b915c9dabf (merge of v254.23)
  eab1d9753b stdio-bridge: fix polled fds
  f028f2298e hwdb: comment out the entry for Logitech MX Keys for Mac
  e808cbdd6d test: answer 2nd mdadm --create question for compat with new version
  bf01f3d692 core/unit-serialize: fix serialization of markers
  f043ab6f34 locale-setup: do not load locale from environemnt when /etc/locale.conf is unchanged
  71efbe69b6 core: fix assert when AddDependencyUnitFiles is called with invalid parameter</changelog>
  <changelog author="fbui@suse.com" date="1736942401">- Add 1020-core-create-the-credential-directory-even-if-it-s-em.patch (bsc#1229228)
- Rename 5012-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch into
  1021-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch
  Commit dc571cccd75db7be49b2aada64baf92e3a498c39 was backported and included in
  v254.9 bumping the version requirement on gcc from 4.7 to 8. Unfortunately
  this breakage won't be fixed by upstream therefore there's no longer a need to
  keep the patch that reverts the offending commit in quarantine.</changelog>
  <changelog author="fbui@suse.com" date="1738670400">- Move systemd-userwork from the experimental sub-package to the main package (bsc#1236643)
  It is likely an oversight from when systemd-userdb was migrated from the
  experimental package to the main one.</changelog>
  <changelog author="fbui@suse.com" date="1741089600">- Import commit b25faa18ee7ef3c2d0b16416dfa331d0013dd112
  b4693652f3 journald: close runtime journals before their parent directory removed
  044d051f0c journald: reset runtime seqnum data when flushing to system journal (bsc#1236886)</changelog>
  <changelog author="fbui@suse.com" date="1742385600">- Import commit 2b599c7501253b0e6b7987fdb2676af21bc72ab3 (merge of v254.24)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/b25faa18ee7ef3c2d0b16416dfa331d0013dd112...2b599c7501253b0e6b7987fdb2676af21bc72ab3</changelog>
  <changelog author="fbui@suse.com" date="1742385601">- Import commit 83b9060b6e4c9cdffbbed0e27467cbd2f806dc0d
  09b7477895 udev: allow/denylist for reading sysfs attributes when composing a NIC name (bsc#1234015)
- Drop 5004-udev-allow-denylist-for-reading-sysfs-attributes-whe.patch
  The path has been merged into the SUSE/v254 branch.</changelog>
  <changelog author="fbui@suse.com" date="1743595200">- Import commit 2f79a45369489b656be509a1517afcae4fe3ee20
  ebdfa3e44e man/pstore.conf: pstore.conf template is not always installed in /etc
  304ed20aab man: coredump.conf template is not always installed in /etc (bsc#1237496)</changelog>
  <changelog author="fbui@suse.com" date="1746792000">- Add 1003-journal-again-create-user-journals-for-users-with-hi.patch (bsc#1242938)
  Don't write messages sent from users with UID falling into the container UID
  range to the system journal. Daemons in the container don't talk to the
  outside journald as they talk to the inner one directly, which does its
  journal splitting based on shifted uids.</changelog>
  <changelog author="fbui@suse.com" date="1747051200">- Apply coredump sysctl settings on systemd-coredump updates/removals.</changelog>
  <changelog author="fbui@suse.com" date="1747396800">- Import commit a4100e9c74b0eafae18a13e9d1d988ebc8376c6a
  806c21e22b umount: do not move busy network mounts (bsc#1236177)</changelog>
  <changelog author="fbui@suse.com" date="1748865600">- Import commit b0ae3b6e85b6a4030cf2adb88519a6ca0ffc1343
  41d2be2fb5 Revert "macro: terminate the temporary VA_ARGS_FOREACH() array with a sentinel" (SUSE specific)</changelog>
  <changelog author="fbui@suse.com" date="1748865601">- Import commit e08f49f2432509787abfb7f3fc0b2f2c459def04 (merge of v254.25)
  This merge includes the following fix:
    7fc7aa5a4d coredump: use %d in kernel core pattern (bsc#1243935 CVE-2025-4598)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/b0ae3b6e85b6a4030cf2adb88519a6ca0ffc1343...e08f49f2432509787abfb7f3fc0b2f2c459def04
- Drop 1021-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch
  The SUSE specific patch has been integrated into the SUSE/v254 git
  branch. Some of the imported commits from the stable tree rely on the macro
  now.</changelog>
  <changelog author="fbui@suse.com" date="1749038400">- Start the systemd-coredump.socket unit on systemd-coredump package
  installation.
- Restore the kernel default values of the coredump sysctl settings on
  systemd-coredump package removal.</changelog>
  <changelog author="fbui@suse.com" date="1749211200">- Import commit 278fb676146e35a7b4057f52f34a7bbaf1b82369
  aa12f501ae logs-show: get timestamp and boot ID only when necessary (bsc#1242827)
  e8b17d11bc sd-journal: drop to use Hashmap to manage journal files per boot ID
  ea80273738 tree-wide: set SD_JOURNAL_ASSUME_IMMUTABLE where appropriate
  a5b3b5344f sd-journal: introduce SD_JOURNAL_ASSUME_IMMUTABLE flag
  5fa0600b34 sd-journal: make journal_file_read_tail_timestamp() notify to the caller that some new journal entries added
  737e8193e7 sd-journal: cache last entry offset and journal file state
  057dca426f sd-journal: fix typo in function name</changelog>
</package>
<package pkgid="8cc8691bbe24a181510d31682c10f2dc45b242e9334206a9501b08009118c671" name="libudev1-32bit" arch="x86_64">
  <version epoch="0" ver="254.27" rel="150600.4.43.3"/>
  <changelog author="fbui@suse.com" date="1734955200">- Import commit eb5a78f50e64a39a2a509fd5141e68ff216a4273 (merge of v254.22)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/600986ba4d9c562390d99513416f49a5be5559f3...eb5a78f50e64a39a2a509fd5141e68ff216a4273</changelog>
  <changelog author="fbui@suse.com" date="1734955201">- Import commit 127e162c9cc0beb5058a718b3a9a1fec6942a927
  679c57667d tpm2-util: Also retry unsealing after policy_pcr returns PCR_CHANGED (boo#1233752 bsc#1234313)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1734955202">- Fix systemd-network recommending libidn2-devel (boo#1234765)</changelog>
  <changelog author="fbui@suse.com" date="1736942400">- Import commit 34b1c72fa9aeea9c2c20e6802530e4b915c9dabf (merge of v254.23)
  eab1d9753b stdio-bridge: fix polled fds
  f028f2298e hwdb: comment out the entry for Logitech MX Keys for Mac
  e808cbdd6d test: answer 2nd mdadm --create question for compat with new version
  bf01f3d692 core/unit-serialize: fix serialization of markers
  f043ab6f34 locale-setup: do not load locale from environemnt when /etc/locale.conf is unchanged
  71efbe69b6 core: fix assert when AddDependencyUnitFiles is called with invalid parameter</changelog>
  <changelog author="fbui@suse.com" date="1736942401">- Add 1020-core-create-the-credential-directory-even-if-it-s-em.patch (bsc#1229228)
- Rename 5012-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch into
  1021-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch
  Commit dc571cccd75db7be49b2aada64baf92e3a498c39 was backported and included in
  v254.9 bumping the version requirement on gcc from 4.7 to 8. Unfortunately
  this breakage won't be fixed by upstream therefore there's no longer a need to
  keep the patch that reverts the offending commit in quarantine.</changelog>
  <changelog author="fbui@suse.com" date="1738670400">- Move systemd-userwork from the experimental sub-package to the main package (bsc#1236643)
  It is likely an oversight from when systemd-userdb was migrated from the
  experimental package to the main one.</changelog>
  <changelog author="fbui@suse.com" date="1741089600">- Import commit b25faa18ee7ef3c2d0b16416dfa331d0013dd112
  b4693652f3 journald: close runtime journals before their parent directory removed
  044d051f0c journald: reset runtime seqnum data when flushing to system journal (bsc#1236886)</changelog>
  <changelog author="fbui@suse.com" date="1742385600">- Import commit 2b599c7501253b0e6b7987fdb2676af21bc72ab3 (merge of v254.24)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/b25faa18ee7ef3c2d0b16416dfa331d0013dd112...2b599c7501253b0e6b7987fdb2676af21bc72ab3</changelog>
  <changelog author="fbui@suse.com" date="1742385601">- Import commit 83b9060b6e4c9cdffbbed0e27467cbd2f806dc0d
  09b7477895 udev: allow/denylist for reading sysfs attributes when composing a NIC name (bsc#1234015)
- Drop 5004-udev-allow-denylist-for-reading-sysfs-attributes-whe.patch
  The path has been merged into the SUSE/v254 branch.</changelog>
  <changelog author="fbui@suse.com" date="1743595200">- Import commit 2f79a45369489b656be509a1517afcae4fe3ee20
  ebdfa3e44e man/pstore.conf: pstore.conf template is not always installed in /etc
  304ed20aab man: coredump.conf template is not always installed in /etc (bsc#1237496)</changelog>
  <changelog author="fbui@suse.com" date="1746792000">- Add 1003-journal-again-create-user-journals-for-users-with-hi.patch (bsc#1242938)
  Don't write messages sent from users with UID falling into the container UID
  range to the system journal. Daemons in the container don't talk to the
  outside journald as they talk to the inner one directly, which does its
  journal splitting based on shifted uids.</changelog>
  <changelog author="fbui@suse.com" date="1747051200">- Apply coredump sysctl settings on systemd-coredump updates/removals.</changelog>
  <changelog author="fbui@suse.com" date="1747396800">- Import commit a4100e9c74b0eafae18a13e9d1d988ebc8376c6a
  806c21e22b umount: do not move busy network mounts (bsc#1236177)</changelog>
  <changelog author="fbui@suse.com" date="1748865600">- Import commit b0ae3b6e85b6a4030cf2adb88519a6ca0ffc1343
  41d2be2fb5 Revert "macro: terminate the temporary VA_ARGS_FOREACH() array with a sentinel" (SUSE specific)</changelog>
  <changelog author="fbui@suse.com" date="1748865601">- Import commit e08f49f2432509787abfb7f3fc0b2f2c459def04 (merge of v254.25)
  This merge includes the following fix:
    7fc7aa5a4d coredump: use %d in kernel core pattern (bsc#1243935 CVE-2025-4598)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/b0ae3b6e85b6a4030cf2adb88519a6ca0ffc1343...e08f49f2432509787abfb7f3fc0b2f2c459def04
- Drop 1021-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch
  The SUSE specific patch has been integrated into the SUSE/v254 git
  branch. Some of the imported commits from the stable tree rely on the macro
  now.</changelog>
  <changelog author="fbui@suse.com" date="1749038400">- Start the systemd-coredump.socket unit on systemd-coredump package
  installation.
- Restore the kernel default values of the coredump sysctl settings on
  systemd-coredump package removal.</changelog>
  <changelog author="fbui@suse.com" date="1749211200">- Import commit 278fb676146e35a7b4057f52f34a7bbaf1b82369
  aa12f501ae logs-show: get timestamp and boot ID only when necessary (bsc#1242827)
  e8b17d11bc sd-journal: drop to use Hashmap to manage journal files per boot ID
  ea80273738 tree-wide: set SD_JOURNAL_ASSUME_IMMUTABLE where appropriate
  a5b3b5344f sd-journal: introduce SD_JOURNAL_ASSUME_IMMUTABLE flag
  5fa0600b34 sd-journal: make journal_file_read_tail_timestamp() notify to the caller that some new journal entries added
  737e8193e7 sd-journal: cache last entry offset and journal file state
  057dca426f sd-journal: fix typo in function name</changelog>
  <changelog author="fbui@suse.com" date="1751544000">- Import commit 130293e510ceb4d121d11823e6ebd4b1e8332ea0 (merge of v254.27)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/278fb676146e35a7b4057f52f34a7bbaf1b82369...130293e510ceb4d121d11823e6ebd4b1e8332ea0</changelog>
  <changelog author="fbui@suse.com" date="1751544001">- systemd-repart is no more considered as experimental (jsc#PED-13213)</changelog>
  <changelog author="fbui@suse.com" date="1751889600">- triggers.systemd: skip update of hwdb, journal-catalog if executed during
  an offline update.</changelog>
</package>
<package pkgid="5f41b102c88348c484307ff07213f78a34fb64444e9217d0193058881df27f4f" name="libudev1-32bit" arch="x86_64">
  <version epoch="0" ver="254.27" rel="150600.4.46.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1734955200">- Fix systemd-network recommending libidn2-devel (boo#1234765)</changelog>
  <changelog author="fbui@suse.com" date="1736942400">- Import commit 34b1c72fa9aeea9c2c20e6802530e4b915c9dabf (merge of v254.23)
  eab1d9753b stdio-bridge: fix polled fds
  f028f2298e hwdb: comment out the entry for Logitech MX Keys for Mac
  e808cbdd6d test: answer 2nd mdadm --create question for compat with new version
  bf01f3d692 core/unit-serialize: fix serialization of markers
  f043ab6f34 locale-setup: do not load locale from environemnt when /etc/locale.conf is unchanged
  71efbe69b6 core: fix assert when AddDependencyUnitFiles is called with invalid parameter</changelog>
  <changelog author="fbui@suse.com" date="1736942401">- Add 1020-core-create-the-credential-directory-even-if-it-s-em.patch (bsc#1229228)
- Rename 5012-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch into
  1021-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch
  Commit dc571cccd75db7be49b2aada64baf92e3a498c39 was backported and included in
  v254.9 bumping the version requirement on gcc from 4.7 to 8. Unfortunately
  this breakage won't be fixed by upstream therefore there's no longer a need to
  keep the patch that reverts the offending commit in quarantine.</changelog>
  <changelog author="fbui@suse.com" date="1738670400">- Move systemd-userwork from the experimental sub-package to the main package (bsc#1236643)
  It is likely an oversight from when systemd-userdb was migrated from the
  experimental package to the main one.</changelog>
  <changelog author="fbui@suse.com" date="1741089600">- Import commit b25faa18ee7ef3c2d0b16416dfa331d0013dd112
  b4693652f3 journald: close runtime journals before their parent directory removed
  044d051f0c journald: reset runtime seqnum data when flushing to system journal (bsc#1236886)</changelog>
  <changelog author="fbui@suse.com" date="1742385600">- Import commit 2b599c7501253b0e6b7987fdb2676af21bc72ab3 (merge of v254.24)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/b25faa18ee7ef3c2d0b16416dfa331d0013dd112...2b599c7501253b0e6b7987fdb2676af21bc72ab3</changelog>
  <changelog author="fbui@suse.com" date="1742385601">- Import commit 83b9060b6e4c9cdffbbed0e27467cbd2f806dc0d
  09b7477895 udev: allow/denylist for reading sysfs attributes when composing a NIC name (bsc#1234015)
- Drop 5004-udev-allow-denylist-for-reading-sysfs-attributes-whe.patch
  The path has been merged into the SUSE/v254 branch.</changelog>
  <changelog author="fbui@suse.com" date="1743595200">- Import commit 2f79a45369489b656be509a1517afcae4fe3ee20
  ebdfa3e44e man/pstore.conf: pstore.conf template is not always installed in /etc
  304ed20aab man: coredump.conf template is not always installed in /etc (bsc#1237496)</changelog>
  <changelog author="fbui@suse.com" date="1746792000">- Add 1003-journal-again-create-user-journals-for-users-with-hi.patch (bsc#1242938)
  Don't write messages sent from users with UID falling into the container UID
  range to the system journal. Daemons in the container don't talk to the
  outside journald as they talk to the inner one directly, which does its
  journal splitting based on shifted uids.</changelog>
  <changelog author="fbui@suse.com" date="1747051200">- Apply coredump sysctl settings on systemd-coredump updates/removals.</changelog>
  <changelog author="fbui@suse.com" date="1747396800">- Import commit a4100e9c74b0eafae18a13e9d1d988ebc8376c6a
  806c21e22b umount: do not move busy network mounts (bsc#1236177)</changelog>
  <changelog author="fbui@suse.com" date="1748865600">- Import commit b0ae3b6e85b6a4030cf2adb88519a6ca0ffc1343
  41d2be2fb5 Revert "macro: terminate the temporary VA_ARGS_FOREACH() array with a sentinel" (SUSE specific)</changelog>
  <changelog author="fbui@suse.com" date="1748865601">- Import commit e08f49f2432509787abfb7f3fc0b2f2c459def04 (merge of v254.25)
  This merge includes the following fix:
    7fc7aa5a4d coredump: use %d in kernel core pattern (bsc#1243935 CVE-2025-4598)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/b0ae3b6e85b6a4030cf2adb88519a6ca0ffc1343...e08f49f2432509787abfb7f3fc0b2f2c459def04
- Drop 1021-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch
  The SUSE specific patch has been integrated into the SUSE/v254 git
  branch. Some of the imported commits from the stable tree rely on the macro
  now.</changelog>
  <changelog author="fbui@suse.com" date="1749038400">- Start the systemd-coredump.socket unit on systemd-coredump package
  installation.
- Restore the kernel default values of the coredump sysctl settings on
  systemd-coredump package removal.</changelog>
  <changelog author="fbui@suse.com" date="1749211200">- Import commit 278fb676146e35a7b4057f52f34a7bbaf1b82369
  aa12f501ae logs-show: get timestamp and boot ID only when necessary (bsc#1242827)
  e8b17d11bc sd-journal: drop to use Hashmap to manage journal files per boot ID
  ea80273738 tree-wide: set SD_JOURNAL_ASSUME_IMMUTABLE where appropriate
  a5b3b5344f sd-journal: introduce SD_JOURNAL_ASSUME_IMMUTABLE flag
  5fa0600b34 sd-journal: make journal_file_read_tail_timestamp() notify to the caller that some new journal entries added
  737e8193e7 sd-journal: cache last entry offset and journal file state
  057dca426f sd-journal: fix typo in function name</changelog>
  <changelog author="fbui@suse.com" date="1751544000">- Import commit 130293e510ceb4d121d11823e6ebd4b1e8332ea0 (merge of v254.27)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/278fb676146e35a7b4057f52f34a7bbaf1b82369...130293e510ceb4d121d11823e6ebd4b1e8332ea0</changelog>
  <changelog author="fbui@suse.com" date="1751544001">- systemd-repart is no more considered as experimental (jsc#PED-13213)</changelog>
  <changelog author="fbui@suse.com" date="1751889600">- triggers.systemd: skip update of hwdb, journal-catalog if executed during
  an offline update.</changelog>
  <changelog author="fbui@suse.com" date="1758196800">- Split systemd-network into two new sub-packages: systemd-networkd and
  systemd-resolved (bsc#1224386 jsc#PED-12669)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1758196801">- systemd.spec: use %sysusers_generate_pre so that some systemd users are
  already available in %pre. This is important because D-Bus automatically
  reloads its configuration whenever new configuration files are installed,
  i.e. between %pre and %post. (bsc#1248501)
  No needs for systemd and udev packages as they are always installed during
  the initial installation.</changelog>
</package>
<package pkgid="42bf92ba14cd3c74ae21b67a875b9b20a6dda2d6fc565e8b51aea18401666646" name="libudev1-32bit" arch="x86_64">
  <version epoch="0" ver="254.27" rel="150600.4.55.1"/>
  <changelog author="fbui@suse.com" date="1742385600">- Import commit 2b599c7501253b0e6b7987fdb2676af21bc72ab3 (merge of v254.24)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/b25faa18ee7ef3c2d0b16416dfa331d0013dd112...2b599c7501253b0e6b7987fdb2676af21bc72ab3</changelog>
  <changelog author="fbui@suse.com" date="1742385601">- Import commit 83b9060b6e4c9cdffbbed0e27467cbd2f806dc0d
  09b7477895 udev: allow/denylist for reading sysfs attributes when composing a NIC name (bsc#1234015)
- Drop 5004-udev-allow-denylist-for-reading-sysfs-attributes-whe.patch
  The path has been merged into the SUSE/v254 branch.</changelog>
  <changelog author="fbui@suse.com" date="1743595200">- Import commit 2f79a45369489b656be509a1517afcae4fe3ee20
  ebdfa3e44e man/pstore.conf: pstore.conf template is not always installed in /etc
  304ed20aab man: coredump.conf template is not always installed in /etc (bsc#1237496)</changelog>
  <changelog author="fbui@suse.com" date="1746792000">- Add 1003-journal-again-create-user-journals-for-users-with-hi.patch (bsc#1242938)
  Don't write messages sent from users with UID falling into the container UID
  range to the system journal. Daemons in the container don't talk to the
  outside journald as they talk to the inner one directly, which does its
  journal splitting based on shifted uids.</changelog>
  <changelog author="fbui@suse.com" date="1747051200">- Apply coredump sysctl settings on systemd-coredump updates/removals.</changelog>
  <changelog author="fbui@suse.com" date="1747396800">- Import commit a4100e9c74b0eafae18a13e9d1d988ebc8376c6a
  806c21e22b umount: do not move busy network mounts (bsc#1236177)</changelog>
  <changelog author="fbui@suse.com" date="1748865600">- Import commit b0ae3b6e85b6a4030cf2adb88519a6ca0ffc1343
  41d2be2fb5 Revert "macro: terminate the temporary VA_ARGS_FOREACH() array with a sentinel" (SUSE specific)</changelog>
  <changelog author="fbui@suse.com" date="1748865601">- Import commit e08f49f2432509787abfb7f3fc0b2f2c459def04 (merge of v254.25)
  This merge includes the following fix:
    7fc7aa5a4d coredump: use %d in kernel core pattern (bsc#1243935 CVE-2025-4598)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/b0ae3b6e85b6a4030cf2adb88519a6ca0ffc1343...e08f49f2432509787abfb7f3fc0b2f2c459def04
- Drop 1021-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch
  The SUSE specific patch has been integrated into the SUSE/v254 git
  branch. Some of the imported commits from the stable tree rely on the macro
  now.</changelog>
  <changelog author="fbui@suse.com" date="1749038400">- Start the systemd-coredump.socket unit on systemd-coredump package
  installation.
- Restore the kernel default values of the coredump sysctl settings on
  systemd-coredump package removal.</changelog>
  <changelog author="fbui@suse.com" date="1749211200">- Import commit 278fb676146e35a7b4057f52f34a7bbaf1b82369
  aa12f501ae logs-show: get timestamp and boot ID only when necessary (bsc#1242827)
  e8b17d11bc sd-journal: drop to use Hashmap to manage journal files per boot ID
  ea80273738 tree-wide: set SD_JOURNAL_ASSUME_IMMUTABLE where appropriate
  a5b3b5344f sd-journal: introduce SD_JOURNAL_ASSUME_IMMUTABLE flag
  5fa0600b34 sd-journal: make journal_file_read_tail_timestamp() notify to the caller that some new journal entries added
  737e8193e7 sd-journal: cache last entry offset and journal file state
  057dca426f sd-journal: fix typo in function name</changelog>
  <changelog author="fbui@suse.com" date="1751544000">- Import commit 130293e510ceb4d121d11823e6ebd4b1e8332ea0 (merge of v254.27)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/278fb676146e35a7b4057f52f34a7bbaf1b82369...130293e510ceb4d121d11823e6ebd4b1e8332ea0</changelog>
  <changelog author="fbui@suse.com" date="1751544001">- systemd-repart is no more considered as experimental (jsc#PED-13213)</changelog>
  <changelog author="fbui@suse.com" date="1751889600">- triggers.systemd: skip update of hwdb, journal-catalog if executed during
  an offline update.</changelog>
  <changelog author="fbui@suse.com" date="1758196800">- Split systemd-network into two new sub-packages: systemd-networkd and
  systemd-resolved (bsc#1224386 jsc#PED-12669)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1758196801">- systemd.spec: use %sysusers_generate_pre so that some systemd users are
  already available in %pre. This is important because D-Bus automatically
  reloads its configuration whenever new configuration files are installed,
  i.e. between %pre and %post. (bsc#1248501)
  No needs for systemd and udev packages as they are always installed during
  the initial installation.</changelog>
  <changelog author="fbui@suse.com" date="1761652800">- Import commit 00ba3646e6cb3ce40bb3de3e92f93ebec0adce6d
  e4dd315b6c units: don't force the loading of the loop and dm_mod modules in systemd-repart.service (bsc#1248356)
  b58e72215a units: add dep on systemd-logind.service by user@.service
  97ceca445c detect-virt: add bare-metal support for GCE (bsc#1244449)</changelog>
  <changelog author="fbui@suse.com" date="1765281600">- Reintroduce systemd-network as a transitional dummy package containing no
  files (bsc#1254202)
  The contents of this package were split into two independent packages:
  systemd-networkd and systemd-resolved. However, the initial replacement caused
  both network services to be disabled. Consequently, the original package has
  been restored as an empty transitional package to prevent the disabling of the
  services. It can be safely removed once the update is complete.</changelog>
  <changelog author="fbui@suse.com" date="1765800000">- Import commit 5caaa71f4a7b00e6a6ceb396d08486af73687d45
  9ecd162284 timer: rebase last_trigger timestamp if needed
  cd4a9103ef timer: rebase the next elapse timestamp only if timer didn't already run
  c3f4407e97 timer: don't run service immediately after restart of a timer (bsc#1254563)
  05bcfe3295 test: check the next elapse timer timestamp after deserialization
  fe8f656975 test: restarting elapsed timer shouldn't trigger the corresponding service</changelog>
  <changelog author="fbui@suse.com" date="1766145600">- Import commit 75eab961ea843dc161707d4af0789b018d499676
  - 8bbac1d508 detect-virt: bare-metal GCE only for x86 and i386 (bsc#1254293)</changelog>
  <changelog author="fbui@suse.com" date="1768305600">- Name libsystemd-{shared,core} based on the major version of systemd and the
  package release number (bsc#1228081 bsc#1256427)
  This way, both the old and new versions of the shared libraries will be
  present during the update. This should prevent issues during package updates
  when incompatible changes are introduced in the new versions of the shared
  libraries.</changelog>
</package>
<package pkgid="d538ab871e1a8c032c54101211a96acaba62247940c8198afbbec34b4736f0f7" name="libudev1-32bit" arch="x86_64">
  <version epoch="0" ver="254.27" rel="150600.4.62.1"/>
  <changelog author="fbui@suse.com" date="1743595200">- Import commit 2f79a45369489b656be509a1517afcae4fe3ee20
  ebdfa3e44e man/pstore.conf: pstore.conf template is not always installed in /etc
  304ed20aab man: coredump.conf template is not always installed in /etc (bsc#1237496)</changelog>
  <changelog author="fbui@suse.com" date="1746792000">- Add 1003-journal-again-create-user-journals-for-users-with-hi.patch (bsc#1242938)
  Don't write messages sent from users with UID falling into the container UID
  range to the system journal. Daemons in the container don't talk to the
  outside journald as they talk to the inner one directly, which does its
  journal splitting based on shifted uids.</changelog>
  <changelog author="fbui@suse.com" date="1747051200">- Apply coredump sysctl settings on systemd-coredump updates/removals.</changelog>
  <changelog author="fbui@suse.com" date="1747396800">- Import commit a4100e9c74b0eafae18a13e9d1d988ebc8376c6a
  806c21e22b umount: do not move busy network mounts (bsc#1236177)</changelog>
  <changelog author="fbui@suse.com" date="1748865600">- Import commit b0ae3b6e85b6a4030cf2adb88519a6ca0ffc1343
  41d2be2fb5 Revert "macro: terminate the temporary VA_ARGS_FOREACH() array with a sentinel" (SUSE specific)</changelog>
  <changelog author="fbui@suse.com" date="1748865601">- Import commit e08f49f2432509787abfb7f3fc0b2f2c459def04 (merge of v254.25)
  This merge includes the following fix:
    7fc7aa5a4d coredump: use %d in kernel core pattern (bsc#1243935 CVE-2025-4598)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/b0ae3b6e85b6a4030cf2adb88519a6ca0ffc1343...e08f49f2432509787abfb7f3fc0b2f2c459def04
- Drop 1021-Revert-macro-terminate-the-temporary-VA_ARGS_FOREACH.patch
  The SUSE specific patch has been integrated into the SUSE/v254 git
  branch. Some of the imported commits from the stable tree rely on the macro
  now.</changelog>
  <changelog author="fbui@suse.com" date="1749038400">- Start the systemd-coredump.socket unit on systemd-coredump package
  installation.
- Restore the kernel default values of the coredump sysctl settings on
  systemd-coredump package removal.</changelog>
  <changelog author="fbui@suse.com" date="1749211200">- Import commit 278fb676146e35a7b4057f52f34a7bbaf1b82369
  aa12f501ae logs-show: get timestamp and boot ID only when necessary (bsc#1242827)
  e8b17d11bc sd-journal: drop to use Hashmap to manage journal files per boot ID
  ea80273738 tree-wide: set SD_JOURNAL_ASSUME_IMMUTABLE where appropriate
  a5b3b5344f sd-journal: introduce SD_JOURNAL_ASSUME_IMMUTABLE flag
  5fa0600b34 sd-journal: make journal_file_read_tail_timestamp() notify to the caller that some new journal entries added
  737e8193e7 sd-journal: cache last entry offset and journal file state
  057dca426f sd-journal: fix typo in function name</changelog>
  <changelog author="fbui@suse.com" date="1751544000">- Import commit 130293e510ceb4d121d11823e6ebd4b1e8332ea0 (merge of v254.27)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/278fb676146e35a7b4057f52f34a7bbaf1b82369...130293e510ceb4d121d11823e6ebd4b1e8332ea0</changelog>
  <changelog author="fbui@suse.com" date="1751544001">- systemd-repart is no more considered as experimental (jsc#PED-13213)</changelog>
  <changelog author="fbui@suse.com" date="1751889600">- triggers.systemd: skip update of hwdb, journal-catalog if executed during
  an offline update.</changelog>
  <changelog author="fbui@suse.com" date="1758196800">- Split systemd-network into two new sub-packages: systemd-networkd and
  systemd-resolved (bsc#1224386 jsc#PED-12669)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1758196801">- systemd.spec: use %sysusers_generate_pre so that some systemd users are
  already available in %pre. This is important because D-Bus automatically
  reloads its configuration whenever new configuration files are installed,
  i.e. between %pre and %post. (bsc#1248501)
  No needs for systemd and udev packages as they are always installed during
  the initial installation.</changelog>
  <changelog author="fbui@suse.com" date="1761652800">- Import commit 00ba3646e6cb3ce40bb3de3e92f93ebec0adce6d
  e4dd315b6c units: don't force the loading of the loop and dm_mod modules in systemd-repart.service (bsc#1248356)
  b58e72215a units: add dep on systemd-logind.service by user@.service
  97ceca445c detect-virt: add bare-metal support for GCE (bsc#1244449)</changelog>
  <changelog author="fbui@suse.com" date="1765281600">- Reintroduce systemd-network as a transitional dummy package containing no
  files (bsc#1254202)
  The contents of this package were split into two independent packages:
  systemd-networkd and systemd-resolved. However, the initial replacement caused
  both network services to be disabled. Consequently, the original package has
  been restored as an empty transitional package to prevent the disabling of the
  services. It can be safely removed once the update is complete.</changelog>
  <changelog author="fbui@suse.com" date="1765800000">- Import commit 5caaa71f4a7b00e6a6ceb396d08486af73687d45
  9ecd162284 timer: rebase last_trigger timestamp if needed
  cd4a9103ef timer: rebase the next elapse timestamp only if timer didn't already run
  c3f4407e97 timer: don't run service immediately after restart of a timer (bsc#1254563)
  05bcfe3295 test: check the next elapse timer timestamp after deserialization
  fe8f656975 test: restarting elapsed timer shouldn't trigger the corresponding service</changelog>
  <changelog author="fbui@suse.com" date="1766145600">- Import commit 75eab961ea843dc161707d4af0789b018d499676
  - 8bbac1d508 detect-virt: bare-metal GCE only for x86 and i386 (bsc#1254293)</changelog>
  <changelog author="fbui@suse.com" date="1768305600">- Name libsystemd-{shared,core} based on the major version of systemd and the
  package release number (bsc#1228081 bsc#1256427)
  This way, both the old and new versions of the shared libraries will be
  present during the update. This should prevent issues during package updates
  when incompatible changes are introduced in the new versions of the shared
  libraries.</changelog>
  <changelog author="fbui@suse.com" date="1772193600">- Import commit 626ffc7844795870235d15c6daab695f2d53a11e
  aef6e11921 core/cgroup: avoid one unnecessary strjoina()
  cc7426f38a sd-json: fix off-by-one issue when updating parent for array elements
  26a748f727 core: validate input cgroup path more prudently (CVE-2026-29111 bsc#1259418)
  99d8308fde core/dbus-manager: propagate meaningful dbus errors from EnqueueMarkedJobs</changelog>
  <changelog author="fbui@suse.com" date="1773921600">- Import commit c89ea566d98c8e3fb29a5b8edd4576b135b4bc92
  a943e3ce2f machined: reject invalid class types when registering machines (bsc#1259650 CVE-2026-4105)
  71593f77db udev: fix review mixup
  73a89810b4 udev-builtin-net-id: print cescaped bad attributes
  0f360bfdc0 udev-builtin-net_id: do not assume the current interface name is ethX
  40905232e2 udev: ensure tag parsing stays within bounds
  7bce9026e3 udev: ensure there is space for trailing NUL before calling sprintf
  d018ac1ea3 udev: check for invalid chars in various fields received from the kernel (bsc#1259697)</changelog>
</package>
<package pkgid="81dc3285eab71f3a132e7cbdf531fafe012fd791783f7170096a22e3965f9b20" name="libudisks2-0" arch="x86_64">
  <version epoch="0" ver="2.9.2" rel="150400.3.11.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1520337600">- Fix BuildRequires/Requires tags related to libblockdev and
  libatasmart dependencies.
- Drop storaged Provides tags since there is no need for them.
- Switch libconfig-devel and libstoragemgmt-devel BuildRequires by
  their pkgconfig modules counterparts.
- Add a Recommends tag for the btrfs module to offer support for
  the openSUSE's file system of choice by default.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Require specific libblockdev plugins in due udisks2's modules,
  following libblockdev's plugins split (bsc#1086447).
- Drop redundant libblockdev-devel BuildRequires: it is not needed
  once its pkgconfig module is already a requirement.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524657600">- Add missing libblockdev-loop Requires tag: it is needed by
  default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1547208000">- Update to version 2.7.8:
  + Fix string format vulnerability (CVE-2018-17336)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add explicit libblockdev-lvm-dbus-devel BuildRequires: Previously
  pulled in implicitly.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331201">- Update to version 2.8.1:
  + Mostly bugfixes.
- Changes from version 2.8.0:
  + Introduce a new VDO module that is built on top of
    libblockdev-vdo.
  + General bugfixes.
  + Support creating LUKS 2 encrypted devices and other
    LUKS-related enhancements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548849600">- Add libblockdev-vdo-devel BuildRequires: Build the new vdo
  module. Following this, add new vdo sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549972800">- Add more info to description of vdo.</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Generalize VDO description.
- Fix faulty grammar.</changelog>
  <changelog author="ro@suse.de" date="1553083200">- update to 2.8.2
  + migration from intltool to gettext, udisks no longer depends
    on gnome-common
  + added 'windows_names' as a default mount option for ntfs-3g
  + fixed an issue potentially leading to open filedescriptors
    exhaustion
- drop buildreq for intltool</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.8.3:
  + This release brings many memory leak fixes with similar work
    done in libblockdev-2.22. While libblockdev version requirement
    remains unchanged, it's strongly recommended to use both
    releases together to get full coverage of the fixes.
  + Other notable changes include:
  - Default and supported encryption types are now exposed on the
    org.freedesktop.UDisks2.Manager interface.
  - Minor org.freedesktop.UDisks2.Filesystem improvements related
    to updating properties upon method call return.
  - Various test fixes and improvements.
  - Updated translations.</changelog>
  <changelog author="thomas.blume@suse.com" date="1562673600">- don't call systemd uninstall macro for clean-mount-point@.service
  template (boo#1139996)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1573732800">- Update to version 2.8.4:
  + This udisks-2.8.4 release brings couple of bugfixes, docs and
    test fixes and translation updates. With ongoing focus on
    development towards udisks-2.9.0, this is just a small
    maintenance release.</changelog>
  <changelog author="milsav92@outlook.com" date="1599393600">- Update to version 2.9.1:
  + This is mostly a bugfix release, notable changes include:
  - active modules are now tracked in a daemon state file and
    are automatically reloaded on next startup in case of
    previous unclean daemon shutdown
  - further improvements in object property updates while
    handling method calls
  - zram module fixes:
    + compatibility improvements with existing zram generators
    and toolkits
    + the zram-setup@.service systemd unit has been renamed to
    udisks2-zram-setup@.service
    + related udev rules have been separated into
    90-udisks2-zram.rules
    + the zram.conf.d path is now configurable and defaults to
    /usr/lib/zram.conf.d
- Update to version 2.9.0:
  + This 2.9.0 release brings many changes to the daemon core,
    internal modularity and the libudisks2 library.
    No public API has been removed, there is a couple of
    deprecations however.
  + There's a major change in how and when D-Bus object properties
    are updated. As a general rule when a method call returns
    affected objects should now have their properties updated by
    that moment. This is an ongoing task and while majority of the
    daemon API has been covered, there are pending issues in some
    of the modules.
  + Configurable mount options is a new big feature for this
    release, allowing sysadmins to re-define default mount options
    for each filesystem type. Extensive documentation is available
    at http://storaged.org/doc/udisks2-api/latest/mount_options.html
  + Internal module API has been reworked, modules should now be
    enabled separately via the new EnableModule() call that also
    reports initialization failures.
    The old org.freedesktop.UDisks2.Manager.EnableModules() call
    has been deprecated.
  + Additional feature highlights:
  - building the daemon can now be disabled via configure switch,
    only libudisks2 will be built
  - removed the systemd mount cleanup service, mount state is now
    tracked separately for persistent and non-persistent mount
    points and cleanup of lingering persistent mount points is
    performed on daemon startup (e.g. on system boot)
  - new LVM-VDO integration, deprecated the standalone VDO module
  - added support for (un)locking BitLocker devices
  - libudisks2 now includes generated GDBus code for compiled-in
    modules, separate pkg-config files are provided as well</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with symlinks
  * mount options: Allow 'nosymfollow' mount option for unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent() out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- drop udisks2-Fix-memory-leaks.patch, udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream)</changelog>
  <changelog author="thomas.blume@suse.com" date="1652097600">- CVE-2021-3802: fix insecure defaults in user-accessible mount helpers
  (bsc#1190606)
  + add 0001-mount-options-Always-use-errors-remount-ro-for-ext-f.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1723118400">- fix double free inside the g_static_resource_fini() atexit handler
  (bsc#1228290)
  + add 0001-udiskslinuxmountoptions-Do-not-free-static-daemon-re.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1755864000">- (CVE-2025-8067) VUL-0: missing bounds check can lead to out-of-bounds
  read in udisks daemon (bsc#1248502)
  + add 0001-udiskslinuxmanager-Add-lower-bounds-check-to-fd_inde.patch</changelog>
</package>
<package pkgid="7314f7bfbf40e45b9d5bf8a35891f71cf3fb387ac51af8bc226ee4c421317669" name="libudisks2-0-devel" arch="x86_64">
  <version epoch="0" ver="2.9.2" rel="150400.3.11.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1520337600">- Fix BuildRequires/Requires tags related to libblockdev and
  libatasmart dependencies.
- Drop storaged Provides tags since there is no need for them.
- Switch libconfig-devel and libstoragemgmt-devel BuildRequires by
  their pkgconfig modules counterparts.
- Add a Recommends tag for the btrfs module to offer support for
  the openSUSE's file system of choice by default.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Require specific libblockdev plugins in due udisks2's modules,
  following libblockdev's plugins split (bsc#1086447).
- Drop redundant libblockdev-devel BuildRequires: it is not needed
  once its pkgconfig module is already a requirement.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524657600">- Add missing libblockdev-loop Requires tag: it is needed by
  default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1547208000">- Update to version 2.7.8:
  + Fix string format vulnerability (CVE-2018-17336)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add explicit libblockdev-lvm-dbus-devel BuildRequires: Previously
  pulled in implicitly.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331201">- Update to version 2.8.1:
  + Mostly bugfixes.
- Changes from version 2.8.0:
  + Introduce a new VDO module that is built on top of
    libblockdev-vdo.
  + General bugfixes.
  + Support creating LUKS 2 encrypted devices and other
    LUKS-related enhancements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548849600">- Add libblockdev-vdo-devel BuildRequires: Build the new vdo
  module. Following this, add new vdo sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549972800">- Add more info to description of vdo.</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Generalize VDO description.
- Fix faulty grammar.</changelog>
  <changelog author="ro@suse.de" date="1553083200">- update to 2.8.2
  + migration from intltool to gettext, udisks no longer depends
    on gnome-common
  + added 'windows_names' as a default mount option for ntfs-3g
  + fixed an issue potentially leading to open filedescriptors
    exhaustion
- drop buildreq for intltool</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.8.3:
  + This release brings many memory leak fixes with similar work
    done in libblockdev-2.22. While libblockdev version requirement
    remains unchanged, it's strongly recommended to use both
    releases together to get full coverage of the fixes.
  + Other notable changes include:
  - Default and supported encryption types are now exposed on the
    org.freedesktop.UDisks2.Manager interface.
  - Minor org.freedesktop.UDisks2.Filesystem improvements related
    to updating properties upon method call return.
  - Various test fixes and improvements.
  - Updated translations.</changelog>
  <changelog author="thomas.blume@suse.com" date="1562673600">- don't call systemd uninstall macro for clean-mount-point@.service
  template (boo#1139996)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1573732800">- Update to version 2.8.4:
  + This udisks-2.8.4 release brings couple of bugfixes, docs and
    test fixes and translation updates. With ongoing focus on
    development towards udisks-2.9.0, this is just a small
    maintenance release.</changelog>
  <changelog author="milsav92@outlook.com" date="1599393600">- Update to version 2.9.1:
  + This is mostly a bugfix release, notable changes include:
  - active modules are now tracked in a daemon state file and
    are automatically reloaded on next startup in case of
    previous unclean daemon shutdown
  - further improvements in object property updates while
    handling method calls
  - zram module fixes:
    + compatibility improvements with existing zram generators
    and toolkits
    + the zram-setup@.service systemd unit has been renamed to
    udisks2-zram-setup@.service
    + related udev rules have been separated into
    90-udisks2-zram.rules
    + the zram.conf.d path is now configurable and defaults to
    /usr/lib/zram.conf.d
- Update to version 2.9.0:
  + This 2.9.0 release brings many changes to the daemon core,
    internal modularity and the libudisks2 library.
    No public API has been removed, there is a couple of
    deprecations however.
  + There's a major change in how and when D-Bus object properties
    are updated. As a general rule when a method call returns
    affected objects should now have their properties updated by
    that moment. This is an ongoing task and while majority of the
    daemon API has been covered, there are pending issues in some
    of the modules.
  + Configurable mount options is a new big feature for this
    release, allowing sysadmins to re-define default mount options
    for each filesystem type. Extensive documentation is available
    at http://storaged.org/doc/udisks2-api/latest/mount_options.html
  + Internal module API has been reworked, modules should now be
    enabled separately via the new EnableModule() call that also
    reports initialization failures.
    The old org.freedesktop.UDisks2.Manager.EnableModules() call
    has been deprecated.
  + Additional feature highlights:
  - building the daemon can now be disabled via configure switch,
    only libudisks2 will be built
  - removed the systemd mount cleanup service, mount state is now
    tracked separately for persistent and non-persistent mount
    points and cleanup of lingering persistent mount points is
    performed on daemon startup (e.g. on system boot)
  - new LVM-VDO integration, deprecated the standalone VDO module
  - added support for (un)locking BitLocker devices
  - libudisks2 now includes generated GDBus code for compiled-in
    modules, separate pkg-config files are provided as well</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with symlinks
  * mount options: Allow 'nosymfollow' mount option for unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent() out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- drop udisks2-Fix-memory-leaks.patch, udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream)</changelog>
  <changelog author="thomas.blume@suse.com" date="1652097600">- CVE-2021-3802: fix insecure defaults in user-accessible mount helpers
  (bsc#1190606)
  + add 0001-mount-options-Always-use-errors-remount-ro-for-ext-f.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1723118400">- fix double free inside the g_static_resource_fini() atexit handler
  (bsc#1228290)
  + add 0001-udiskslinuxmountoptions-Do-not-free-static-daemon-re.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1755864000">- (CVE-2025-8067) VUL-0: missing bounds check can lead to out-of-bounds
  read in udisks daemon (bsc#1248502)
  + add 0001-udiskslinuxmanager-Add-lower-bounds-check-to-fd_inde.patch</changelog>
</package>
<package pkgid="05c84b9bfdcb2cd959e456b6c84b9d58b041c8482d5ae897e7a5d3f9811d8f98" name="libunbound8" arch="x86_64">
  <version epoch="0" ver="1.20.0" rel="150600.23.13.1"/>
  <changelog author="michael@stroeder.com" date="1504526400">- update to 1.6.6
  Features:
- unbound-control dump_infra prints port number for address if not 53.
- Fix #1344: RFC6761-reserved domains: test. and invalid.
- Fix #1349: allow suppression of pidfiles (from Daniel Kahn Gillmor).
  With the -p option unbound does not create a pidfile.
- Added stats for queries that have been ratelimited by domain
  recursion.
- Patch to show DNSCrypt status in help output, from Carsten
  Strotmann.
- Fix #1407: Add ECS options check to unbound-checkconf.
- Fix #1415: [dnscrypt] shared secret cache, patch from
  Manu Bretelle.
  Bug Fixes:
- fixup of dnscrypt_cert_chacha test (from Manu Bretelle).
- First fix for zero b64 and hex text zone format in sldns.
- Better fixup of dnscrypt_cert_chacha test for different escapes.
- Fix that infra cache host hash does not change after reconfig.
- Fix python example0 return module wait instead of error for pass.
- enhancement for hardened-tls for DNS over TLS.  Removed duplicated
  security settings.
- Fix for unbound-checkconf, check ipsecmod-hook if ipsecmod is turned
  on.
- Fix #1331: libunbound segfault in threaded mode when context is
  deleted.
- Fix pythonmod link line option flag.
- Fix openssl 1.1.0 load of ssl error strings from ssl init.
- Fix 1332: Bump verbosity of failed chown'ing of the control socket.
- Redirect all localhost names to localhost address for RFC6761.
- Fix #1350: make cachedb backend configurable (from JINMEI Tatuya).
- Fix tests to use .tdir (from Manu Bretelle) instead of .tpkg.
- upgrade aclocal(pkg.m4 0.29.1), config.guess(2016-10-02),
  config.sub(2016-09-05).
- annotate case statement fallthrough for gcc 7.1.1.
- flex output from flex 2.6.1.
- snprintf of thread number does not warn about truncated string.
- squelch TCP fast open error on FreeBSD when kernel has it disabled,
  unless verbosity is high.
- remove warning from windows compile.
- Fix compile with libnettle
- Fix DSA configure switch (--disable dsa) for libnettle and libnss.
- Fix #1365: Add Ed25519 support using libnettle.
- Fix #1394: mix of serve-expired and response-ip could cause a crash.
- Remove unused iter_env member (ip6arpa_dname)
- Do not reset rrset.bogus stats when called using stats_noreset.
- Do not add rrset_bogus and query ratelimiting stats per thread, these
  module stats are global.
- Fix #1397: Recursive DS lookups for AS112 zones names should recurse.
- Fix #1398: make cachedb secret configurable.
- Remove spaces from Makefile.
- Fix issue on macOX 10.10 where TCP fast open is detected but not
  implemented causing TCP to fail. The fix allows fallback to regular
  TCP in this case and is also more robust for cases where connectx()
  fails for some reason.
- Fix #1402: squelch invalid argument error for fd_set_block on windows.
- Fix to reclaim tcp handler when it is closed due to dnscrypt buffer
  allocation failure.
- Fix #1415: patch to free dnscrypt environment on reload.
- iana portlist update
- Small fixes for the shared secret cache patch.
- Fix WKS records on kvm autobuild host, with default protobyname
  entries for udp and tcp.
- Fix #1414: fix segfault on parse failure and log_replies.
- zero qinfo in handle_request, this zeroes local_alias and also the
  qname member.
- new keys and certs for dnscrypt tests.
- fixup WKS test on buildhost without servicebyname.
- updated contrib/fastrpz.patch to apply with configparser changes.
- Fix 1416: qname-minimisation breaks TLSA lookups with CNAMEs.
- Fix #1424: cachedb:testframe is not thread safe.
- Fix #1417: [dnscrypt] shared secret cache counters, and works when
  dnscrypt is not enabled.  And cache size configuration option.
- Fix #1418: [ip ratelimit] initialize slabhash using
  ip-ratelimit-slabs.
- Recommend 1472 buffer size in unbound.conf</changelog>
  <changelog author="michael@stroeder.com" date="1507636800">- update to 1.6.7
  Features:
- Set trust-anchor-signaling default to yes
- Fix #1440: [dnscrypt] client nonce cache.
- Fix #1435: Please allow UDP to be disabled separately upstream and
  downstream.
  Bug fixes:
- Fix that looping modules always stop the query, and don't pass
  control.
- Fix unbound-host to report error for DNSSEC state of failed lookups.
- Spelling fixes, from Josh Soref.
- Fix #1400: allowing use of global cache on ECS-forwarding unless
  always-forward.
- use a cachedb answer even if it's "expired" when serve-expired is yes
  (patch from Jinmei Tatuya).
- trigger refetching of the answer in that case (this will bypass
  cachedb lookup)
- allow storing a 0-TTL answer from cachedb in the in-memory message
  cache when serve-expired is yes
- Fix DNSCACHE_STORE_ZEROTTL to be bigger than 0xffff.
- Log name of looping module
- Fix #1450: Generate again patch contrib/aaaa-filter-iterator.patch
  (by Danilo G. Baio).
- Fix param unused warning for windows exportsymbol compile.
- Use RCODE from A query on DNS64 synthesized answer.
- Fix trust-anchor-signaling works in libunbound.
- Fix spelling in unbound-control man page.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1512129600">- Use python3 instead of python2 (fate#323526)</changelog>
  <changelog author="michael@stroeder.com" date="1516363200">- update to 1.6.8 (bsc#1076963)
  patch for CVE-2017-15105: vulnerability in the processing of
  wildcard synthesized NSEC records.</changelog>
  <changelog author="dmueller@suse.com" date="1539691200">- adjust for root KSK rollover (bsc#1112009, bsc#1004165)</changelog>
  <changelog author="kbabioch@suse.com" date="1539691201">- Disabled DLV configuration by default (bsc#1055060)
- Updated the DNSSEC root trust anchor due to KSK roll over (bsc#1112009)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1542283200">- Migrated from cron to systemd timers (bsc#1115417)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1546603200">- Use systemd-tmpfiles to create /var/lib/unbound/root.key
  to avoid transactional update breakage (bsc#1111383)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1551960000">- Remove old pwdutils dependency and add shadow to cover both useradd
  and groupadd as suggested in (bsc#1126757)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1556020800">- Add systemd require in unbound-anchor to reflect new dependency (due to systemd-timers)</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913600">- Avoid amplifying an incoming query to a large number of queries
  Resolves CVE-2020-12662 CVE-2020-12663 (bsc#1171889)
  [ + unbound-1.6.8-amplifying-an-incoming-query.patch ]</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1592913601">- Avoid shell code execution after receiving a specially crafted answer
  Resolves CVE-2019-18934 (bsc#1157268)
  [ + patch_cve_2019-18934.patch ]</changelog>
  <changelog author="werner@suse.de" date="1642420800">- Add patches
  * bsc1185382_CVE-2019-25031_f8875527.patch
    bsc#1185382 for CVE-2019-25031
    configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack
  * bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc#1185383 for CVE-2019-25032
    integer overflow in the regional allocator via regional_alloc
    bsc#1185384 for CVE-2019-25033
    integer overflow in the regional allocator via the ALIGN_UP macro
  * bsc1185385_CVE-2019-25034_a3545867.patch
    bsc#1185385 for CVE-2019-25034
    integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write
  * bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc#1185386 for CVE-2019-25035
    out-of-bounds write in sldns_bget_token_par
    bsc#1185387 for CVE-2019-25036
    assertion failure and denial of service in synth_cname
  * bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc#1185391 for CVE-2019-25040
    infinite loop via a compressed name in dname_pkt_copy
    bsc#1185392 for CVE-2019-25041
    assertion failure via a compressed name in dname_pkt_copy
  * bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc#1185389 for CVE-2019-25038
    integer overflow in a size calculation in dnscrypt/dnscrypt.c
    bsc#1185390 for CVE-2019-25039
    integer overflow in a size calculation in respip/respip.c
  * bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc#1185388 for CVE-2019-25037
    assertion failure and denial of service in dname_pkt_copy via an invalid packet
  * bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc#1185393 for CVE-2019-25042
    out-of-bounds write via a compressed name in rdata_copy
- Correct indentation in patch unbound-1.6.8-amplifying-an-incoming-query.patch
  to make it fit to above patches</changelog>
  <changelog author="werner@suse.de" date="1642593600">- Add patch bsc1179191_CVE-2020-28935_19f8f4d9.patch to really fix
  bsc#1179191 CVE-2020-28935: unbound: symbolic link traversal when
  writing PID file</changelog>
  <changelog author="werner@suse.de" date="1642593601">- Import changes from OBS for dlv.isc.org.key, root.anchor, and
  root.key to fix bsc#1112033</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1711022400">- Update to 1.20.0
  * A lot of bugfixes and added features.
    For a complete list take a look at the changelog located at:
    /usr/share/doc/packages/unbound/Changelog or
    https://www.nlnetlabs.nl/projects/unbound/download/
  Some Noteworthy Changes:
  * Removed DLV. The DLV has been decommisioned since unbound
    1.5.4 and has been advised to stop using it since. The use of
    dlv options displays a warning.
  * Remove EDNS lame procedure, do not re-query without EDNS after
    timeout.
  * Add DNS over HTTPS
  * libunbound has been upgraded to major version 8
  Security Fixes:
  * Fix CVE-2023-50387, DNSSEC verification complexity can be
    exploited to exhaust CPU resources and stall DNS resolvers.
  [bsc#1219823, CVE-2023-50387]
  * Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust
    CPU.
  [bsc#1219826, CVE-2023-50868]
  * Fix CVE-2022-30698, Novel "ghost domain names" attack by
    introducing subdomain delegations.
  [bsc#1202033, CVE-2022-30698]
  * Fix CVE-2022-30699, Novel "ghost domain names" attack by
    updating almost expired delegation information.
  [bsc#1202031, CVE-2022-30699]
  * Fix CVE-2022-3204, NRDelegation attack leads to uncontrolled
    resource consumption (Non-Responsive Delegation Attack).
  [bsc#1203643, CVE-2022-3204]
  Packaging Changes:
  * Use prefixes instead of sudo in unbound.service
  * Remove no longer necessary BuildRequires: libfstrm-devel and
    libprotobuf-c-devel
  * Following patches removed because they are now obsolete:
    unbound-1.6.8-amplifying-an-incoming-query.patch
    patch_cve_2019-18934.patch
    bsc1185382_CVE-2019-25031_f8875527.patch
    bsc1185383.4_CVE-2019-25032.3_226298bb.patch
    bsc1185385_CVE-2019-25034_a3545867.patch
    bsc1185386.7_CVE-2019-25035.6_fa23ee8f.patch
    bsc1185391.2_CVE-2019-25040.1_2d444a50.patch
    bsc1185389.90_CVE-2019-25038.9_02080f6b.patch
    bsc1185388_CVE-2019-25037_d2eb78e8.patch
    bsc1185393_CVE-2019-25042_6c3a0b54.patch
    bsc1179191_CVE-2020-28935_19f8f4d9.patch
  [jsc#PED-8333]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1724155200">- Fix null pointer dereference issue in function ub_ctx_set_fwd.
  [CVE-2024-43167, bsc#1229068, unbound-1.20-CVE-2024-43167.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1728475200">- Fix CVE-2024-8508, unbounded name compression could lead to
  denial of service.
  [CVE-2024-8508, bsc#1231284, unbound-1.20-CVE-2024-8508.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1762948800">- Fix CVE-2025-11411 (possible domain hijacking attack).
  Since this minimal patch interferes with most of the unit tests,
  the '%check' section has been removed from the spec file.
  [CVE-2025-11411, bsc#1252525, unbound-1.20-CVE-2025-11411.patch]</changelog>
</package>
<package pkgid="d6ec81de5e5eea3c2c7102320b2d49de08602f3c768d4d1430660a5534345005" name="liburing2" arch="src">
  <version epoch="0" ver="2.9" rel="150700.10.3.1"/>
  <changelog author="jthumshirn@suse.com" date="1574856000">- Initial packaging for openSUSE (jsc#SLE-7494)</changelog>
  <changelog author="jthumshirn@suse.com" date="1576152000">- Fix builds on ppc64le and s390x (bsc#1159055)
  + barrier.h-add-generic-smp_mb-implementation.patch</changelog>
  <changelog author="milsav92@outlook.com" date="1604059200">!!IMPORTANT!!
  Version 0.7 BREAKS ABI COMPATIBILITY WITHOUT CHANGING THE SONAME!!!
  https://github.com/axboe/liburing/issues/228
  SONAME is bumped to 2 in commit 25bbcbef3e0a8bfba8044be55d08d5116c51dccd
  im master branch.
  !!!IMPORTANT!!!
- Update to version 0.6
  - removed barrier.h-add-generic-smp_mb-implementation.patch since
    it was merged in commit ba97eaf8f9ef2030d581be10df9d875dbfadc91d
- License changed to match upstream</changelog>
  <changelog author="dmueller@suse.com" date="1615636800">- update to 0.7:
  * io_uring.h: sync with kernel
  * io_uring_peek_batch_cqe should also check cq ring overflow
  * Check cq ring overflow status
  * configure: fix typos in help/error messages
  * src/setup: clarify that we always return -errno on error
  * man/io_uring_enter.2: updated io_uring_sqe and fixed incorrect flag references.
  * Removed misplaced periods from io_uring_enter(2).
  * Merge branch 'readme' of https://github.com/jobs-git/liburing
  * Make readme sensible
  * man/io_uring_enter: update connect to note use of const
  * Merge branch 'master' of https://github.com/KayEss/liburing
  * Take `sockaddr` immutably in io_uring_prep_connect
  * Merge branch 'dev' of https://github.com/CarterLi/liburing
  * Merge branch 'fix-splice-docs' of https://github.com/gerow/liburing
  * man: fix description of splice offsets
  * .travis.yml: Change the language from C to C++
  * configure: Use $CC and $CXX as default compilers if set
  * Make the liburing header files again compatible with C++
  * src/include/liburing/barrier.h: Restore clang compatibility
  * src/Makefile: Only specify -shared at link time
  * Merge branch 'openat_o_path' of https://github.com/MaxKellermann/liburing
  * Convert __io_uring_get_sqe() from a macro into an inline function
  * src/include/liburing/barrier.h: Use C11 atomics
  * Makefiles: Enable -Wextra
  * Bump version to 1.0.7
  * change poll_events to 32 bits to cover EPOLLEXCLUSIVE
  * examples/ucontext-cp.c: use IORING_OP_TIMEOUT
  * man/io_uring_enter: correct the description of
  * man/io_uring_register.2: add IORING_CQ_EVENTFD_DISABLED description
  * Add helpers to set and get eventfd notification status
  * man/io_uring_setup.2: add 'flags' field in the struct io_cqring_offsets
  * Add CQ ring 'flags' field
  * remove duplicate call to __io_uring_peek_cqe()
  * update wait_nr to account for completed event
  * preseve wait_nr if SETUP_IOPOLL is set
  * man/io_uring_enter.2: add IORING_OP_TEE entry
  * update io_uring.h with tee()
  * Merge branch 'master' of https://github.com/shuveb/liburing
  * Adding section to describe IORING_OP_EPOLL_CTL
  * fix missing '#include &lt;sys/stat.h&gt;' in 'src/include/liburing.h
  * fix build on musl libc
  * Use uint64_t for splice offsets
  * Use __off64_t for offsets
  * Merge branch 'master' of https://github.com/shuveb/liburing
  * Adding description for the IORING_OP_SPLICE operation
  * Merge branch 'master' of https://github.com/shuveb/liburing
  * Adding section describing IORING_OP_OPENAT2
  * Fix 32-bit warnings on compile
  * __io_uring_get_cqe: silence signed vs unsigned comparison warning
  * io_uring_get_sqe: always use khead</changelog>
  <changelog author="dmueller@suse.com" date="1615636801">- update to 2.0:
  * Sync io_uring.h API file with Linux 5.12
  * helpers: prefix any helper with t_ instead of io_uring_
  * helpers: add io_uring_create_buffers() helper
  * helpers: add io_uring_create_file() helper
  * helpers: add io_uring_calloc helper
  * helpers: add io_uring_posix_memalign helper
  * setup: cleanup probe code
  * setup: check whether malloc succ before using it
  * io_uring_prep_sync_file_range: cleanups
  * .gitignore: add sendmsg_fs_cve
  * Added prep function for sync_file_range op
  * Install man7 pages
  * src/queue: never clear data-&gt;wait_nr
  * src/queue: control kernel enter with a var
  * src/queue: don't re-wait for CQEs
  * src/queue: don't loop when don't enter
  * src/queue: clean _io_uring_get_cqe() err handling
  * src/queue: don't wait for less than expected
  * Add inline doc in the comments for io_uring_prep_splice
  * Fix sigset_t not found in liburing.h
  * src/queue: update comment on io_uring_wait_cqes() with timeouts
  * io_uring.h: 5.12 pending kernel sync
  * man/io_uring_register.2: fix spelling error
  * man/io_uring_register.2: Add documentation on IORING_REGISTER_FILES_SKIP
  * Add two ring deadlock case
  * Fix IORING_OP_FALLOCATE args in io_uring_enter(2) man page
  * src/queue: Fix a typo in `__io_uring_flush_sq()`
  * src/queue: fix `sq_ring_needs_enter()` indentation
  * src/queue: refactor io_uring_get_sqe()
  * man/io_uring_setup.2: correct 5.10 -&gt; 5.11 for non-fixed files and SQPOLL
  * man/io_uring_enter.2: document new opcodes
  * man/io_uring_enter.2: ensure all IORING_ENTER_* flags are documented
  * src/queue: add comment on why reading SQ-&gt;head for flush isn't atomic
  * liburing.h: fix 32-bit compile warning
  * man/io_uring.7: Fix typo
  * man/io_uring_enter.2: describe timeout updates
  * Don't enter the kernel to wait on cqes if they are already available.
  * Add timeout update
  * remove zero-size array in io_uring.h
  * Rename SIG_IS_DATA -&gt; EXT_ARG
  * Update SIG_IS_DATA to modified kernel API
  * Use IORING_ENTER_GETEVENTS_TIMEOUT if available
  * Add wrapper for __io_uring_get_cqe()
  * Add __sys_io_uring_enter2()
  * Include 'features' in struct io_uring
  * io_uring.h: update with 5.11-pending copy
  * Fix compilation with iso C standard (c89, c99 and c11)
  * examples: disable ucontext-cp if ucontext.h is not available
  * Moves function calls out of assert().
  * liburing.h: add renameat/unlinkat prep helpers
  * io_uring.h: add renameat and unlinkat opcodes
  * configure: Fix unsafe temporary file creation
  * Add const modifier to functions that do not change the state of the ring
  * man/io_uring_enter.2: clarify POLL_ADD return value
  * Add get_sqe manpage to debian package
  * Add man page for io_uring_get_sqe
  * man/io_uring_enter.2: add EACCES and EBADFD errors
  * man/io_uring_register.2: add description of restrictions
  * man/io_uring_setup.2: add IORING_SETUP_R_DISABLED description
  * Makefile: add .PHONY dependency
  * man/io_uring_enter.2: split ERRORS section in two sections
  * liburing.h: add `io_uring_prep_tee`
  * Fix build flag settings
  * .gitignore: Add sq-poll-dup
  * man/io_uring_enter.2: clarify PROVIDE_BUFFERS requirements
  * Update packaging/installation for new man pages
  * man/io_uring.7: clarify submission/completion ordering
  * man/io_uring.7: style and barrier updates
  * Add man page for io_uring_queue_exit
  * Add man page for io_uring_queue_init
  * Adding section 7 man page for io_uring
  * probes: provide our own free function
  * .gitignore: add pipe-reuse
  * Fold versioned symbols into LIBURING_2.0 version node
  * Remove versioned symbols not provided by the shared library anymore
  * man/io_uring_setup.2: improve SQPOLL wakeup example
  * Fix io_uring_sq_ready() to use load acquire to read khead.
  * io_uring.h: fix missing tab
  * Bump major version to 2
  * Add IORING_OP_SHUTDOWN and prep helper
  * Add a few function comments in liburing.h
  * Add io_uring_sqring_wait()
  * io_uring.h: add new definitions from 5.10
  * man/io_uring_setup.2: document missing IORING_FEAT_* feature flags
  * man/io_uring_enter.2: add description of buffer selections
  * build: Output CXX on quiet output when using a C++ compiler
  * Fix missing 'c' in sigfd-deadlock addition
  * Add helper to enable rings
  * Add helper to register restrictions
  * io_uring.h: add register restrictions and enable ring defines
  * io_uring.h: use an enumeration for io_uring_register(2) opcodes
  * io_uring_prep_splice(): fix type (again)
  * Use the right type for io_uring_prep_splice()
  * syscall: make syscall.h independently includeable
  * sq_ring_needs_enter: revert change to only enter if submit != 0
  * man/io_uring_setup.2: document IORING_SETUP_ATTACH_WQ
  * update debian/changelog
  * update debian/liburing1.symbols
  * debian/rules: pass down relativelibdir in order to get an absolute path
  * man/io_uring_setup.2: document IORING_SETUP_CLAMP
  * man/io_uring_enter: fix openat sqe doc</changelog>
  <changelog author="dmueller@suse.com" date="1615636802">- skip building the tests that are neither installed nor run
  as they fail to build on 32bit platforms (like e.g. armv7l) (bsc#1181571)</changelog>
  <changelog author="ddiss@suse.com" date="1634126400">- update to 2.1 (bsc#1193522):
  * Ignore spurious fadvise/madvise failures
  * build: add -D_GNU_SOURCE to all CPPFLAGS/CFLAGS.
  * man: clean up spelling
  * man/io_uring_enter.2: add notes about direct open/accept
  * io_uring.h: sync with 5.15 kernel
  * Fix IORING_REGISTER_IOWQ_MAX_WORKERS name
  * man: document new register/update API
  * liburing: add helpers for direct open/accept
  * liburing.h: correct max_worker name
  * Change IORING_REGISTER_IOWQ_MAX_UNBOUND_WORKERS
  * src/syscall.h: get rid of useless externs
  * man/io_uring_enter.2: document IORING_ENTER_EXT_ARG
  * Add io_uring_register_iowq_max_unbound() helper
  * Get rid of useless 'extern' on function declarations in liburing.h
  * Add (UN)REGISTER_IOWQ_AFF helpers
  * man/io_uring_register.2: note when MAX_UNBOUND became available
  * man/io_uring_register.2: add missing punctuation
  * man/io_uring_register.2: document IORING_REGISTER_IOWQ_MAX_UNBOUND
  * man/io_uring_enter.2: add IORING_OP_TIMEOUT clock sources
  * man/io_uring_enter.2: improve timeout entry
  * man/io_uring_enter.2: update SQE
  * man/io_uring_enter.2: note that not all requests support fixed files
  * man/io_uring_enter.2: add new 5.15 opcodes
  * man/io_uring_enter.2: note that cqe-&gt;flags is indeed used
  * man/io_uring_enter.2: add poll update and multishot mode
  * man/io_uring_register.2: add IORING_(UN)REGISTER_IOWQ
  * man: update notes on register quiesce
  * man: fix io_uring_sqe alignment
  * register: add tagging and buf update helpers
  * liburing.h: make header clean for implicit sign and size conversions
  * configure: document --cc and --cxx options
  * io_uring: update buffer update feature testing
  * liburing.h: dedup poll mask conversion
  * liburing.h: add a multipoll helper
  * Update io_uring.h
  * examples: disable ucontext-cp for elbrus (e2k) architecture
  * Update io_uring_setup.2
  * man/io_uring_setup.2: document the two most recent FEAT flags
  * man/io_uring_setup.2: make sure FEAT flags are kernel versioned
  * correct syscall NR in mips
  * Fix 32-bit compile warnings
  * liburing.h: make all file/IO offset __u64
  * src/queue: don't flush SQ ring for new wait interface
  * man/io_uring_enter.2: further clarify what cqe-&gt;res holds
  * Clarify information about error results
  * Refer to the accept_flags in io_uring_enter manual
  * Fix a bug due to the unreleased lock before function returns
  * debian/rules: add missing slash for relativelibdir
  * man/io_uring_enter.2: clarify io_uring_enter(2) SQPOLL return value
  * liburing.h: add linkat prep helper
  * io_uring.h: add linkat opcode
  * liburing.h: add symlinkat prep helper
  * io_uring.h: add symlinkat opcode
  * liburing.h: add mkdirat prep helper
  * update rsrc register/update ABI and tests
  * queue: clean up SQ flushing
  * io_uring_enter(2): Clarify how to read from and write to non-seekable files
  * clarify an edge case of IORING_SETUP_SQ_AFF
  * io_uring_enter(2): clarify OP_READ and OP_WRITE
  * sync io_uring.h API file with Linux 5.13
  * man: Fix typo in man io_uring_queue_exit
  * examples/link-cp: fix a couple of strerror negations
  * src/setup: don't treat dummy ring init as failure
  * src/setup: add some documentation to the memlock helpers
  * examples/ucontext-cp.c: cope with variable SIGSTKSZ
  * setup: provide helpers to inquire about necessary mlock sizes
  * examples/io_uring-cp: wait for pending writes before exit copy loop
  * spec: add explicit build dependency on make
  * spec: bump version to 2.0
  * man/io_uring_enter.2: note that -EBUSY can also happen for getevents</changelog>
  <changelog author="ddiss@suse.com" date="1643803200">- Rename liburing2 to avoid collision with inherited source for prior
  liburing-devel-0.X API (bsc#1193522)</changelog>
  <changelog author="dmueller@suse.com" date="1651233600">- avoid requiring kernel-default (bsc#1193522)</changelog>
  <changelog author="gabriel.bertazi@suse.com" date="1747137600">- Update to liburing 2.9 (PED-12844)
  * Add support for ring resizing
  * Add support for registered waits
  * Test additions and improvements
  * Fix bug with certain ring setups with SQE128 set not fully closing
    the ring after io_uring_queue_exit(3) had been called.
  * Various man page fixes and updates</changelog>
  <changelog author="gabriel.bertazi@suse.com" date="1749816000">- Move liburing-ffi2 to a separate package following factory packaging</changelog>
</package>
<package pkgid="0b0c3ba14d7e8e192919f7a008aca5898850af93ea10ad092a03d1d896e8b198" name="liburing2" arch="x86_64">
  <version epoch="0" ver="2.9" rel="150700.10.3.1"/>
  <changelog author="jthumshirn@suse.com" date="1574856000">- Initial packaging for openSUSE (jsc#SLE-7494)</changelog>
  <changelog author="jthumshirn@suse.com" date="1576152000">- Fix builds on ppc64le and s390x (bsc#1159055)
  + barrier.h-add-generic-smp_mb-implementation.patch</changelog>
  <changelog author="milsav92@outlook.com" date="1604059200">!!IMPORTANT!!
  Version 0.7 BREAKS ABI COMPATIBILITY WITHOUT CHANGING THE SONAME!!!
  https://github.com/axboe/liburing/issues/228
  SONAME is bumped to 2 in commit 25bbcbef3e0a8bfba8044be55d08d5116c51dccd
  im master branch.
  !!!IMPORTANT!!!
- Update to version 0.6
  - removed barrier.h-add-generic-smp_mb-implementation.patch since
    it was merged in commit ba97eaf8f9ef2030d581be10df9d875dbfadc91d
- License changed to match upstream</changelog>
  <changelog author="dmueller@suse.com" date="1615636800">- update to 0.7:
  * io_uring.h: sync with kernel
  * io_uring_peek_batch_cqe should also check cq ring overflow
  * Check cq ring overflow status
  * configure: fix typos in help/error messages
  * src/setup: clarify that we always return -errno on error
  * man/io_uring_enter.2: updated io_uring_sqe and fixed incorrect flag references.
  * Removed misplaced periods from io_uring_enter(2).
  * Merge branch 'readme' of https://github.com/jobs-git/liburing
  * Make readme sensible
  * man/io_uring_enter: update connect to note use of const
  * Merge branch 'master' of https://github.com/KayEss/liburing
  * Take `sockaddr` immutably in io_uring_prep_connect
  * Merge branch 'dev' of https://github.com/CarterLi/liburing
  * Merge branch 'fix-splice-docs' of https://github.com/gerow/liburing
  * man: fix description of splice offsets
  * .travis.yml: Change the language from C to C++
  * configure: Use $CC and $CXX as default compilers if set
  * Make the liburing header files again compatible with C++
  * src/include/liburing/barrier.h: Restore clang compatibility
  * src/Makefile: Only specify -shared at link time
  * Merge branch 'openat_o_path' of https://github.com/MaxKellermann/liburing
  * Convert __io_uring_get_sqe() from a macro into an inline function
  * src/include/liburing/barrier.h: Use C11 atomics
  * Makefiles: Enable -Wextra
  * Bump version to 1.0.7
  * change poll_events to 32 bits to cover EPOLLEXCLUSIVE
  * examples/ucontext-cp.c: use IORING_OP_TIMEOUT
  * man/io_uring_enter: correct the description of
  * man/io_uring_register.2: add IORING_CQ_EVENTFD_DISABLED description
  * Add helpers to set and get eventfd notification status
  * man/io_uring_setup.2: add 'flags' field in the struct io_cqring_offsets
  * Add CQ ring 'flags' field
  * remove duplicate call to __io_uring_peek_cqe()
  * update wait_nr to account for completed event
  * preseve wait_nr if SETUP_IOPOLL is set
  * man/io_uring_enter.2: add IORING_OP_TEE entry
  * update io_uring.h with tee()
  * Merge branch 'master' of https://github.com/shuveb/liburing
  * Adding section to describe IORING_OP_EPOLL_CTL
  * fix missing '#include &lt;sys/stat.h&gt;' in 'src/include/liburing.h
  * fix build on musl libc
  * Use uint64_t for splice offsets
  * Use __off64_t for offsets
  * Merge branch 'master' of https://github.com/shuveb/liburing
  * Adding description for the IORING_OP_SPLICE operation
  * Merge branch 'master' of https://github.com/shuveb/liburing
  * Adding section describing IORING_OP_OPENAT2
  * Fix 32-bit warnings on compile
  * __io_uring_get_cqe: silence signed vs unsigned comparison warning
  * io_uring_get_sqe: always use khead</changelog>
  <changelog author="dmueller@suse.com" date="1615636801">- update to 2.0:
  * Sync io_uring.h API file with Linux 5.12
  * helpers: prefix any helper with t_ instead of io_uring_
  * helpers: add io_uring_create_buffers() helper
  * helpers: add io_uring_create_file() helper
  * helpers: add io_uring_calloc helper
  * helpers: add io_uring_posix_memalign helper
  * setup: cleanup probe code
  * setup: check whether malloc succ before using it
  * io_uring_prep_sync_file_range: cleanups
  * .gitignore: add sendmsg_fs_cve
  * Added prep function for sync_file_range op
  * Install man7 pages
  * src/queue: never clear data-&gt;wait_nr
  * src/queue: control kernel enter with a var
  * src/queue: don't re-wait for CQEs
  * src/queue: don't loop when don't enter
  * src/queue: clean _io_uring_get_cqe() err handling
  * src/queue: don't wait for less than expected
  * Add inline doc in the comments for io_uring_prep_splice
  * Fix sigset_t not found in liburing.h
  * src/queue: update comment on io_uring_wait_cqes() with timeouts
  * io_uring.h: 5.12 pending kernel sync
  * man/io_uring_register.2: fix spelling error
  * man/io_uring_register.2: Add documentation on IORING_REGISTER_FILES_SKIP
  * Add two ring deadlock case
  * Fix IORING_OP_FALLOCATE args in io_uring_enter(2) man page
  * src/queue: Fix a typo in `__io_uring_flush_sq()`
  * src/queue: fix `sq_ring_needs_enter()` indentation
  * src/queue: refactor io_uring_get_sqe()
  * man/io_uring_setup.2: correct 5.10 -&gt; 5.11 for non-fixed files and SQPOLL
  * man/io_uring_enter.2: document new opcodes
  * man/io_uring_enter.2: ensure all IORING_ENTER_* flags are documented
  * src/queue: add comment on why reading SQ-&gt;head for flush isn't atomic
  * liburing.h: fix 32-bit compile warning
  * man/io_uring.7: Fix typo
  * man/io_uring_enter.2: describe timeout updates
  * Don't enter the kernel to wait on cqes if they are already available.
  * Add timeout update
  * remove zero-size array in io_uring.h
  * Rename SIG_IS_DATA -&gt; EXT_ARG
  * Update SIG_IS_DATA to modified kernel API
  * Use IORING_ENTER_GETEVENTS_TIMEOUT if available
  * Add wrapper for __io_uring_get_cqe()
  * Add __sys_io_uring_enter2()
  * Include 'features' in struct io_uring
  * io_uring.h: update with 5.11-pending copy
  * Fix compilation with iso C standard (c89, c99 and c11)
  * examples: disable ucontext-cp if ucontext.h is not available
  * Moves function calls out of assert().
  * liburing.h: add renameat/unlinkat prep helpers
  * io_uring.h: add renameat and unlinkat opcodes
  * configure: Fix unsafe temporary file creation
  * Add const modifier to functions that do not change the state of the ring
  * man/io_uring_enter.2: clarify POLL_ADD return value
  * Add get_sqe manpage to debian package
  * Add man page for io_uring_get_sqe
  * man/io_uring_enter.2: add EACCES and EBADFD errors
  * man/io_uring_register.2: add description of restrictions
  * man/io_uring_setup.2: add IORING_SETUP_R_DISABLED description
  * Makefile: add .PHONY dependency
  * man/io_uring_enter.2: split ERRORS section in two sections
  * liburing.h: add `io_uring_prep_tee`
  * Fix build flag settings
  * .gitignore: Add sq-poll-dup
  * man/io_uring_enter.2: clarify PROVIDE_BUFFERS requirements
  * Update packaging/installation for new man pages
  * man/io_uring.7: clarify submission/completion ordering
  * man/io_uring.7: style and barrier updates
  * Add man page for io_uring_queue_exit
  * Add man page for io_uring_queue_init
  * Adding section 7 man page for io_uring
  * probes: provide our own free function
  * .gitignore: add pipe-reuse
  * Fold versioned symbols into LIBURING_2.0 version node
  * Remove versioned symbols not provided by the shared library anymore
  * man/io_uring_setup.2: improve SQPOLL wakeup example
  * Fix io_uring_sq_ready() to use load acquire to read khead.
  * io_uring.h: fix missing tab
  * Bump major version to 2
  * Add IORING_OP_SHUTDOWN and prep helper
  * Add a few function comments in liburing.h
  * Add io_uring_sqring_wait()
  * io_uring.h: add new definitions from 5.10
  * man/io_uring_setup.2: document missing IORING_FEAT_* feature flags
  * man/io_uring_enter.2: add description of buffer selections
  * build: Output CXX on quiet output when using a C++ compiler
  * Fix missing 'c' in sigfd-deadlock addition
  * Add helper to enable rings
  * Add helper to register restrictions
  * io_uring.h: add register restrictions and enable ring defines
  * io_uring.h: use an enumeration for io_uring_register(2) opcodes
  * io_uring_prep_splice(): fix type (again)
  * Use the right type for io_uring_prep_splice()
  * syscall: make syscall.h independently includeable
  * sq_ring_needs_enter: revert change to only enter if submit != 0
  * man/io_uring_setup.2: document IORING_SETUP_ATTACH_WQ
  * update debian/changelog
  * update debian/liburing1.symbols
  * debian/rules: pass down relativelibdir in order to get an absolute path
  * man/io_uring_setup.2: document IORING_SETUP_CLAMP
  * man/io_uring_enter: fix openat sqe doc</changelog>
  <changelog author="dmueller@suse.com" date="1615636802">- skip building the tests that are neither installed nor run
  as they fail to build on 32bit platforms (like e.g. armv7l) (bsc#1181571)</changelog>
  <changelog author="ddiss@suse.com" date="1634126400">- update to 2.1 (bsc#1193522):
  * Ignore spurious fadvise/madvise failures
  * build: add -D_GNU_SOURCE to all CPPFLAGS/CFLAGS.
  * man: clean up spelling
  * man/io_uring_enter.2: add notes about direct open/accept
  * io_uring.h: sync with 5.15 kernel
  * Fix IORING_REGISTER_IOWQ_MAX_WORKERS name
  * man: document new register/update API
  * liburing: add helpers for direct open/accept
  * liburing.h: correct max_worker name
  * Change IORING_REGISTER_IOWQ_MAX_UNBOUND_WORKERS
  * src/syscall.h: get rid of useless externs
  * man/io_uring_enter.2: document IORING_ENTER_EXT_ARG
  * Add io_uring_register_iowq_max_unbound() helper
  * Get rid of useless 'extern' on function declarations in liburing.h
  * Add (UN)REGISTER_IOWQ_AFF helpers
  * man/io_uring_register.2: note when MAX_UNBOUND became available
  * man/io_uring_register.2: add missing punctuation
  * man/io_uring_register.2: document IORING_REGISTER_IOWQ_MAX_UNBOUND
  * man/io_uring_enter.2: add IORING_OP_TIMEOUT clock sources
  * man/io_uring_enter.2: improve timeout entry
  * man/io_uring_enter.2: update SQE
  * man/io_uring_enter.2: note that not all requests support fixed files
  * man/io_uring_enter.2: add new 5.15 opcodes
  * man/io_uring_enter.2: note that cqe-&gt;flags is indeed used
  * man/io_uring_enter.2: add poll update and multishot mode
  * man/io_uring_register.2: add IORING_(UN)REGISTER_IOWQ
  * man: update notes on register quiesce
  * man: fix io_uring_sqe alignment
  * register: add tagging and buf update helpers
  * liburing.h: make header clean for implicit sign and size conversions
  * configure: document --cc and --cxx options
  * io_uring: update buffer update feature testing
  * liburing.h: dedup poll mask conversion
  * liburing.h: add a multipoll helper
  * Update io_uring.h
  * examples: disable ucontext-cp for elbrus (e2k) architecture
  * Update io_uring_setup.2
  * man/io_uring_setup.2: document the two most recent FEAT flags
  * man/io_uring_setup.2: make sure FEAT flags are kernel versioned
  * correct syscall NR in mips
  * Fix 32-bit compile warnings
  * liburing.h: make all file/IO offset __u64
  * src/queue: don't flush SQ ring for new wait interface
  * man/io_uring_enter.2: further clarify what cqe-&gt;res holds
  * Clarify information about error results
  * Refer to the accept_flags in io_uring_enter manual
  * Fix a bug due to the unreleased lock before function returns
  * debian/rules: add missing slash for relativelibdir
  * man/io_uring_enter.2: clarify io_uring_enter(2) SQPOLL return value
  * liburing.h: add linkat prep helper
  * io_uring.h: add linkat opcode
  * liburing.h: add symlinkat prep helper
  * io_uring.h: add symlinkat opcode
  * liburing.h: add mkdirat prep helper
  * update rsrc register/update ABI and tests
  * queue: clean up SQ flushing
  * io_uring_enter(2): Clarify how to read from and write to non-seekable files
  * clarify an edge case of IORING_SETUP_SQ_AFF
  * io_uring_enter(2): clarify OP_READ and OP_WRITE
  * sync io_uring.h API file with Linux 5.13
  * man: Fix typo in man io_uring_queue_exit
  * examples/link-cp: fix a couple of strerror negations
  * src/setup: don't treat dummy ring init as failure
  * src/setup: add some documentation to the memlock helpers
  * examples/ucontext-cp.c: cope with variable SIGSTKSZ
  * setup: provide helpers to inquire about necessary mlock sizes
  * examples/io_uring-cp: wait for pending writes before exit copy loop
  * spec: add explicit build dependency on make
  * spec: bump version to 2.0
  * man/io_uring_enter.2: note that -EBUSY can also happen for getevents</changelog>
  <changelog author="ddiss@suse.com" date="1643803200">- Rename liburing2 to avoid collision with inherited source for prior
  liburing-devel-0.X API (bsc#1193522)</changelog>
  <changelog author="dmueller@suse.com" date="1651233600">- avoid requiring kernel-default (bsc#1193522)</changelog>
  <changelog author="gabriel.bertazi@suse.com" date="1747137600">- Update to liburing 2.9 (PED-12844)
  * Add support for ring resizing
  * Add support for registered waits
  * Test additions and improvements
  * Fix bug with certain ring setups with SQE128 set not fully closing
    the ring after io_uring_queue_exit(3) had been called.
  * Various man page fixes and updates</changelog>
  <changelog author="gabriel.bertazi@suse.com" date="1749816000">- Move liburing-ffi2 to a separate package following factory packaging</changelog>
</package>
<package pkgid="667297268e334da3ad0a40f37cdefd2e3bf059277f5edee68cd9804e9e40d246" name="libuuid-devel" arch="x86_64">
  <version epoch="0" ver="2.40.4" rel="150700.4.10.1"/>
  <changelog author="sbrabec@suse.com" date="1706011200">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1717934400">- Fix hang of lscpu -e (bsc#1225598,
  util-linux-libsmartcols-fix-reduction-stages-use.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1725364800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1733054400">- Update to version 2.40.2 (jsc#PED-9751):
  * Add lastlog2 (disabled for this build, SLE15/Leap15
    infrastructure is not ready for it)
  * agetty: Load autologin user from agetty.autologin credential
  * agetty: use get_terminal_default_type()
  * agetty: use sd_get_sessions() for number of users (#2088)
  * agetty: don't overwrite TERM passed by the user
  * blockdev: add support for BLKGETZONESZ
  * cfdisk: ask y/n before wipe
  * cfdisk: properly handle out-of-order partitions during resize
  * cfdisk: fix possible integer overflow
  * chcpu: document limitations of -g (bsc#1218609)
  * chsh: use libeconf to read /etc/shells
  * column: fix -l
  * column: fix memory leak
  * dmesg: fix FD leak
  * dmesg: fix delta calculation
  * dmesg: fix wrong size calculation
  * dmesg: support reading kmsg format from file
  * enosys: a new small command to make syscalls fail with ENOSYS
  * exch: new command to atomically exchanges paths between two files
  * fdisk: add support for partition resizing
  * fdisk: remove usage of VLA
  * fincore: add --output-all
  * findmnt: add --list-columns
  * findmnt: add -I, --dfi options for imitating the output of df -i
  * findmnt: add inode-related columns for implementing "df -i" like output
  * fsck.minix: fix possible overrun
  * hexdump: add '--one-byte-hex' format option
  * hwclock: add support for RTC_VL_READ/RTC_VL_CLR ioctls
  * libblkid: fix segfault when blkid.conf doesn't exist
  * libfdisk: add initializer to geometry
  * libmount: improving robustness in reading kernel messages,
    add pidfs to pseudo fs list
  * libmount: fix access check for utab in context
  * libmount: fix umount --read-only
  * login: initialize noauth from login.noauth credential
  * lsblk: add --filter
  * lsblk: add --highlight
  * lsblk: add --list-columns
  * lsclocks: new command to show clocks
  * lscpu: even more Arm part numbers (bsc#1223605)
  * lscpu: New Arm Cortex part numbers
    fix hang of lscpu -e (bsc#1225598)
  * lsfd: Refactor the pidfd logic, support pidfs
  * lsns: fix netns use
  * mkfs.minix: handle 64bit time on 32bit system
  * mkswap: implement --file
  * mkswap: implement --offset
  * mkswap.8.adoc: update note regarding swapfile creation
  * more: clean processes not cleaned up after failed SSH session
    using up 100% CPU (bsc#1220117)
  * mount: add --map-users and --map-groups convenience options
  * nsenter: add option `-c` to join the cgroup of target process
  * setarch: add riscv64/riscv32 support
  * setpgid: new command to run a program in a new process group
  * setpgid: make -f work
  * uuidd: add cont_clock persistence
  * uuidgen: add option --count
  * wall: query logind for list of users with tty (#2088)
    properly neutralize escape sequences (bsc#1221831,
    CVE-2024-28085)
  * write: query logind for list of users with tty (#2088)
  * libuuid: improved support for 64-bit time
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.2-ReleaseNotes
- Drop upstreamed patches:
    Revert-libblkid-try-LUKS2-first-when-probing.patch,
    util-linux-libsmartcols-fix-reduction-stages-use.patch,
    util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch,
    util-linux-chcpu-document-zVM-limitations.patch,
    util-linux-lscpu-add-ARM-cores-neoverse3.patch,
    util-linux-chcpu-document-zVM-limitations-generated.patch and
    util-linux-wall-CVE-2024-28085.patch.
- Add file conflict of util-linux-tty-tools and busybox-util-linux.
- Update util-linux-bash-completion-su-chsh-l.patch,
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch and
  make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.
- Move autoreconf back to %build.
- Add devel dependencies.
- Remove util-linux-rpmlintrc. It is no more needed with multibuild.
- uncomment "autoreconf --install" to use the new version of automake
- disable libmagic in more(1) for binary detection (bsc#1225197)
- Skip tests marked as ts_skip_qemu_user when running under qemu
- Mark racy lslocks test as known fail
- Re-enable lsfd tests using mkfds, as it is fixed now.</changelog>
  <changelog author="sbrabec@suse.com" date="1736856000">- Update to version 2.40.4 (jsc#PED-9751):
  * agetty: Prevent cursor escape (bsc#1194818, drop
    util-linux-agetty-prevent-cursor-escape.patch)
    add "systemd" to --version output\
  * chcpu(8): Document CPU deconfiguring behavior
  * fdisk: SGI fixes
  * hardlink: fix memory corruption
  * hardlink.1 directory|file is mandatory
  * lib/env: fix env_list_setenv() for strings without '='
  * libblkid:
    (exfat) validate fields used by prober
    (gpt) use blkid_probe_verify_csum() for partition array
    checksum
    add FSLASTBLOCK for swaparea
    bitlocker fix version on big-endian systems
  * libfdisk: make sure libblkid uses the same sector size
  * libmount:
    extract common error handling function
    propagate first error of multiple filesystem types
  * logger: correctly format tv_usec
  * lscpu: Skip aarch64 decode path for rest of the architectures
    (bsc#1229476, drop util-linux-lscpu-skip-aarch64-decode.patch)
  * lsns: ignore ESRCH errors reported when accessing files under
    /proc
  * mkswap: set selinux label also when creating file
  * more: make sure we have data on stderr
  * nsenter: support empty environ
  * umount, losetup: Document loop destroy behavior
    (bsc#1159034, drop
    util-linux-umount-losetup-lazy-destruction.patch,
    util-linux-umount-losetup-lazy-destruction-generated.patch).
  * uuidd: fix /var/lib/libuuid mode uuidd-tmpfiles.conf
    fix /var/lib/libuuid mode uuidd-tmpfiles.conf
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.3-ReleaseNotes
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.4-ReleaseNotes
  - Refresh util-linux.keyring. Key validity was extended.</changelog>
  <changelog author="sbrabec@suse.com" date="1743595200">- Use utmp as fallback for wall (bsc#1239671,
  util-linux-wall-use-utmp-fallback.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1774267200">- fdisk: Fix possible partition overlay and data corruption if EBR
  gap is missing (boo#1222465,
  util-linux-libfdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-2.patch,
  util-linux-libfdisk-ebr-missing-gap-2.patch,
  util-linux-tests-fdisk-ebr-missing-gap-3.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1774267201">- Recognize fuse "portal" as a virtual file system (boo#1234736,
  util-linux-libmount-fuse-portal.patch).</changelog>
</package>
<package pkgid="46c19f33e6cf78aca0c7dc06cc8bbf7b3c204dd006d8d83385ab4cde74d722d8" name="libuuid-devel" arch="x86_64">
  <version epoch="0" ver="2.40.4" rel="150700.4.3.1"/>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1717934400">- Fix hang of lscpu -e (bsc#1225598,
  util-linux-libsmartcols-fix-reduction-stages-use.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1725364800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1733054400">- Update to version 2.40.2 (jsc#PED-9751):
  * Add lastlog2 (disabled for this build, SLE15/Leap15
    infrastructure is not ready for it)
  * agetty: Load autologin user from agetty.autologin credential
  * agetty: use get_terminal_default_type()
  * agetty: use sd_get_sessions() for number of users (#2088)
  * agetty: don't overwrite TERM passed by the user
  * blockdev: add support for BLKGETZONESZ
  * cfdisk: ask y/n before wipe
  * cfdisk: properly handle out-of-order partitions during resize
  * cfdisk: fix possible integer overflow
  * chcpu: document limitations of -g (bsc#1218609)
  * chsh: use libeconf to read /etc/shells
  * column: fix -l
  * column: fix memory leak
  * dmesg: fix FD leak
  * dmesg: fix delta calculation
  * dmesg: fix wrong size calculation
  * dmesg: support reading kmsg format from file
  * enosys: a new small command to make syscalls fail with ENOSYS
  * exch: new command to atomically exchanges paths between two files
  * fdisk: add support for partition resizing
  * fdisk: remove usage of VLA
  * fincore: add --output-all
  * findmnt: add --list-columns
  * findmnt: add -I, --dfi options for imitating the output of df -i
  * findmnt: add inode-related columns for implementing "df -i" like output
  * fsck.minix: fix possible overrun
  * hexdump: add '--one-byte-hex' format option
  * hwclock: add support for RTC_VL_READ/RTC_VL_CLR ioctls
  * libblkid: fix segfault when blkid.conf doesn't exist
  * libfdisk: add initializer to geometry
  * libmount: improving robustness in reading kernel messages,
    add pidfs to pseudo fs list
  * libmount: fix access check for utab in context
  * libmount: fix umount --read-only
  * login: initialize noauth from login.noauth credential
  * lsblk: add --filter
  * lsblk: add --highlight
  * lsblk: add --list-columns
  * lsclocks: new command to show clocks
  * lscpu: even more Arm part numbers (bsc#1223605)
  * lscpu: New Arm Cortex part numbers
    fix hang of lscpu -e (bsc#1225598)
  * lsfd: Refactor the pidfd logic, support pidfs
  * lsns: fix netns use
  * mkfs.minix: handle 64bit time on 32bit system
  * mkswap: implement --file
  * mkswap: implement --offset
  * mkswap.8.adoc: update note regarding swapfile creation
  * more: clean processes not cleaned up after failed SSH session
    using up 100% CPU (bsc#1220117)
  * mount: add --map-users and --map-groups convenience options
  * nsenter: add option `-c` to join the cgroup of target process
  * setarch: add riscv64/riscv32 support
  * setpgid: new command to run a program in a new process group
  * setpgid: make -f work
  * uuidd: add cont_clock persistence
  * uuidgen: add option --count
  * wall: query logind for list of users with tty (#2088)
    properly neutralize escape sequences (bsc#1221831,
    CVE-2024-28085)
  * write: query logind for list of users with tty (#2088)
  * libuuid: improved support for 64-bit time
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.2-ReleaseNotes
- Drop upstreamed patches:
    Revert-libblkid-try-LUKS2-first-when-probing.patch,
    util-linux-libsmartcols-fix-reduction-stages-use.patch,
    util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch,
    util-linux-chcpu-document-zVM-limitations.patch,
    util-linux-lscpu-add-ARM-cores-neoverse3.patch,
    util-linux-chcpu-document-zVM-limitations-generated.patch and
    util-linux-wall-CVE-2024-28085.patch.
- Add file conflict of util-linux-tty-tools and busybox-util-linux.
- Update util-linux-bash-completion-su-chsh-l.patch,
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch and
  make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.
- Move autoreconf back to %build.
- Add devel dependencies.
- Remove util-linux-rpmlintrc. It is no more needed with multibuild.
- uncomment "autoreconf --install" to use the new version of automake
- disable libmagic in more(1) for binary detection (bsc#1225197)
- Skip tests marked as ts_skip_qemu_user when running under qemu
- Mark racy lslocks test as known fail
- Re-enable lsfd tests using mkfds, as it is fixed now.</changelog>
  <changelog author="sbrabec@suse.com" date="1736856000">- Update to version 2.40.4 (jsc#PED-9751):
  * agetty: Prevent cursor escape (bsc#1194818, drop
    util-linux-agetty-prevent-cursor-escape.patch)
    add "systemd" to --version output\
  * chcpu(8): Document CPU deconfiguring behavior
  * fdisk: SGI fixes
  * hardlink: fix memory corruption
  * hardlink.1 directory|file is mandatory
  * lib/env: fix env_list_setenv() for strings without '='
  * libblkid:
    (exfat) validate fields used by prober
    (gpt) use blkid_probe_verify_csum() for partition array
    checksum
    add FSLASTBLOCK for swaparea
    bitlocker fix version on big-endian systems
  * libfdisk: make sure libblkid uses the same sector size
  * libmount:
    extract common error handling function
    propagate first error of multiple filesystem types
  * logger: correctly format tv_usec
  * lscpu: Skip aarch64 decode path for rest of the architectures
    (bsc#1229476, drop util-linux-lscpu-skip-aarch64-decode.patch)
  * lsns: ignore ESRCH errors reported when accessing files under
    /proc
  * mkswap: set selinux label also when creating file
  * more: make sure we have data on stderr
  * nsenter: support empty environ
  * umount, losetup: Document loop destroy behavior
    (bsc#1159034, drop
    util-linux-umount-losetup-lazy-destruction.patch,
    util-linux-umount-losetup-lazy-destruction-generated.patch).
  * uuidd: fix /var/lib/libuuid mode uuidd-tmpfiles.conf
    fix /var/lib/libuuid mode uuidd-tmpfiles.conf
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.3-ReleaseNotes
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.4-ReleaseNotes
  - Refresh util-linux.keyring. Key validity was extended.</changelog>
  <changelog author="sbrabec@suse.com" date="1743595200">- Use utmp as fallback for wall (bsc#1239671,
  util-linux-wall-use-utmp-fallback.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
</package>
<package pkgid="ed0e6588e02c84512141ca02c44393acbe69c14934066027ff3a0c0063148c84" name="libuuid-devel-static" arch="x86_64">
  <version epoch="0" ver="2.40.4" rel="150700.4.10.1"/>
  <changelog author="sbrabec@suse.com" date="1706011200">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1717934400">- Fix hang of lscpu -e (bsc#1225598,
  util-linux-libsmartcols-fix-reduction-stages-use.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1725364800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1733054400">- Update to version 2.40.2 (jsc#PED-9751):
  * Add lastlog2 (disabled for this build, SLE15/Leap15
    infrastructure is not ready for it)
  * agetty: Load autologin user from agetty.autologin credential
  * agetty: use get_terminal_default_type()
  * agetty: use sd_get_sessions() for number of users (#2088)
  * agetty: don't overwrite TERM passed by the user
  * blockdev: add support for BLKGETZONESZ
  * cfdisk: ask y/n before wipe
  * cfdisk: properly handle out-of-order partitions during resize
  * cfdisk: fix possible integer overflow
  * chcpu: document limitations of -g (bsc#1218609)
  * chsh: use libeconf to read /etc/shells
  * column: fix -l
  * column: fix memory leak
  * dmesg: fix FD leak
  * dmesg: fix delta calculation
  * dmesg: fix wrong size calculation
  * dmesg: support reading kmsg format from file
  * enosys: a new small command to make syscalls fail with ENOSYS
  * exch: new command to atomically exchanges paths between two files
  * fdisk: add support for partition resizing
  * fdisk: remove usage of VLA
  * fincore: add --output-all
  * findmnt: add --list-columns
  * findmnt: add -I, --dfi options for imitating the output of df -i
  * findmnt: add inode-related columns for implementing "df -i" like output
  * fsck.minix: fix possible overrun
  * hexdump: add '--one-byte-hex' format option
  * hwclock: add support for RTC_VL_READ/RTC_VL_CLR ioctls
  * libblkid: fix segfault when blkid.conf doesn't exist
  * libfdisk: add initializer to geometry
  * libmount: improving robustness in reading kernel messages,
    add pidfs to pseudo fs list
  * libmount: fix access check for utab in context
  * libmount: fix umount --read-only
  * login: initialize noauth from login.noauth credential
  * lsblk: add --filter
  * lsblk: add --highlight
  * lsblk: add --list-columns
  * lsclocks: new command to show clocks
  * lscpu: even more Arm part numbers (bsc#1223605)
  * lscpu: New Arm Cortex part numbers
    fix hang of lscpu -e (bsc#1225598)
  * lsfd: Refactor the pidfd logic, support pidfs
  * lsns: fix netns use
  * mkfs.minix: handle 64bit time on 32bit system
  * mkswap: implement --file
  * mkswap: implement --offset
  * mkswap.8.adoc: update note regarding swapfile creation
  * more: clean processes not cleaned up after failed SSH session
    using up 100% CPU (bsc#1220117)
  * mount: add --map-users and --map-groups convenience options
  * nsenter: add option `-c` to join the cgroup of target process
  * setarch: add riscv64/riscv32 support
  * setpgid: new command to run a program in a new process group
  * setpgid: make -f work
  * uuidd: add cont_clock persistence
  * uuidgen: add option --count
  * wall: query logind for list of users with tty (#2088)
    properly neutralize escape sequences (bsc#1221831,
    CVE-2024-28085)
  * write: query logind for list of users with tty (#2088)
  * libuuid: improved support for 64-bit time
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.2-ReleaseNotes
- Drop upstreamed patches:
    Revert-libblkid-try-LUKS2-first-when-probing.patch,
    util-linux-libsmartcols-fix-reduction-stages-use.patch,
    util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch,
    util-linux-chcpu-document-zVM-limitations.patch,
    util-linux-lscpu-add-ARM-cores-neoverse3.patch,
    util-linux-chcpu-document-zVM-limitations-generated.patch and
    util-linux-wall-CVE-2024-28085.patch.
- Add file conflict of util-linux-tty-tools and busybox-util-linux.
- Update util-linux-bash-completion-su-chsh-l.patch,
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch and
  make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.
- Move autoreconf back to %build.
- Add devel dependencies.
- Remove util-linux-rpmlintrc. It is no more needed with multibuild.
- uncomment "autoreconf --install" to use the new version of automake
- disable libmagic in more(1) for binary detection (bsc#1225197)
- Skip tests marked as ts_skip_qemu_user when running under qemu
- Mark racy lslocks test as known fail
- Re-enable lsfd tests using mkfds, as it is fixed now.</changelog>
  <changelog author="sbrabec@suse.com" date="1736856000">- Update to version 2.40.4 (jsc#PED-9751):
  * agetty: Prevent cursor escape (bsc#1194818, drop
    util-linux-agetty-prevent-cursor-escape.patch)
    add "systemd" to --version output\
  * chcpu(8): Document CPU deconfiguring behavior
  * fdisk: SGI fixes
  * hardlink: fix memory corruption
  * hardlink.1 directory|file is mandatory
  * lib/env: fix env_list_setenv() for strings without '='
  * libblkid:
    (exfat) validate fields used by prober
    (gpt) use blkid_probe_verify_csum() for partition array
    checksum
    add FSLASTBLOCK for swaparea
    bitlocker fix version on big-endian systems
  * libfdisk: make sure libblkid uses the same sector size
  * libmount:
    extract common error handling function
    propagate first error of multiple filesystem types
  * logger: correctly format tv_usec
  * lscpu: Skip aarch64 decode path for rest of the architectures
    (bsc#1229476, drop util-linux-lscpu-skip-aarch64-decode.patch)
  * lsns: ignore ESRCH errors reported when accessing files under
    /proc
  * mkswap: set selinux label also when creating file
  * more: make sure we have data on stderr
  * nsenter: support empty environ
  * umount, losetup: Document loop destroy behavior
    (bsc#1159034, drop
    util-linux-umount-losetup-lazy-destruction.patch,
    util-linux-umount-losetup-lazy-destruction-generated.patch).
  * uuidd: fix /var/lib/libuuid mode uuidd-tmpfiles.conf
    fix /var/lib/libuuid mode uuidd-tmpfiles.conf
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.3-ReleaseNotes
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.4-ReleaseNotes
  - Refresh util-linux.keyring. Key validity was extended.</changelog>
  <changelog author="sbrabec@suse.com" date="1743595200">- Use utmp as fallback for wall (bsc#1239671,
  util-linux-wall-use-utmp-fallback.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1774267200">- fdisk: Fix possible partition overlay and data corruption if EBR
  gap is missing (boo#1222465,
  util-linux-libfdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-2.patch,
  util-linux-libfdisk-ebr-missing-gap-2.patch,
  util-linux-tests-fdisk-ebr-missing-gap-3.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1774267201">- Recognize fuse "portal" as a virtual file system (boo#1234736,
  util-linux-libmount-fuse-portal.patch).</changelog>
</package>
<package pkgid="1f3d76656d7703858da0b36539ef8e8324c030cf4ded660b5e3f51119cf3d030" name="libuuid-devel-static" arch="x86_64">
  <version epoch="0" ver="2.40.4" rel="150700.4.3.1"/>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1717934400">- Fix hang of lscpu -e (bsc#1225598,
  util-linux-libsmartcols-fix-reduction-stages-use.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1725364800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1733054400">- Update to version 2.40.2 (jsc#PED-9751):
  * Add lastlog2 (disabled for this build, SLE15/Leap15
    infrastructure is not ready for it)
  * agetty: Load autologin user from agetty.autologin credential
  * agetty: use get_terminal_default_type()
  * agetty: use sd_get_sessions() for number of users (#2088)
  * agetty: don't overwrite TERM passed by the user
  * blockdev: add support for BLKGETZONESZ
  * cfdisk: ask y/n before wipe
  * cfdisk: properly handle out-of-order partitions during resize
  * cfdisk: fix possible integer overflow
  * chcpu: document limitations of -g (bsc#1218609)
  * chsh: use libeconf to read /etc/shells
  * column: fix -l
  * column: fix memory leak
  * dmesg: fix FD leak
  * dmesg: fix delta calculation
  * dmesg: fix wrong size calculation
  * dmesg: support reading kmsg format from file
  * enosys: a new small command to make syscalls fail with ENOSYS
  * exch: new command to atomically exchanges paths between two files
  * fdisk: add support for partition resizing
  * fdisk: remove usage of VLA
  * fincore: add --output-all
  * findmnt: add --list-columns
  * findmnt: add -I, --dfi options for imitating the output of df -i
  * findmnt: add inode-related columns for implementing "df -i" like output
  * fsck.minix: fix possible overrun
  * hexdump: add '--one-byte-hex' format option
  * hwclock: add support for RTC_VL_READ/RTC_VL_CLR ioctls
  * libblkid: fix segfault when blkid.conf doesn't exist
  * libfdisk: add initializer to geometry
  * libmount: improving robustness in reading kernel messages,
    add pidfs to pseudo fs list
  * libmount: fix access check for utab in context
  * libmount: fix umount --read-only
  * login: initialize noauth from login.noauth credential
  * lsblk: add --filter
  * lsblk: add --highlight
  * lsblk: add --list-columns
  * lsclocks: new command to show clocks
  * lscpu: even more Arm part numbers (bsc#1223605)
  * lscpu: New Arm Cortex part numbers
    fix hang of lscpu -e (bsc#1225598)
  * lsfd: Refactor the pidfd logic, support pidfs
  * lsns: fix netns use
  * mkfs.minix: handle 64bit time on 32bit system
  * mkswap: implement --file
  * mkswap: implement --offset
  * mkswap.8.adoc: update note regarding swapfile creation
  * more: clean processes not cleaned up after failed SSH session
    using up 100% CPU (bsc#1220117)
  * mount: add --map-users and --map-groups convenience options
  * nsenter: add option `-c` to join the cgroup of target process
  * setarch: add riscv64/riscv32 support
  * setpgid: new command to run a program in a new process group
  * setpgid: make -f work
  * uuidd: add cont_clock persistence
  * uuidgen: add option --count
  * wall: query logind for list of users with tty (#2088)
    properly neutralize escape sequences (bsc#1221831,
    CVE-2024-28085)
  * write: query logind for list of users with tty (#2088)
  * libuuid: improved support for 64-bit time
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.2-ReleaseNotes
- Drop upstreamed patches:
    Revert-libblkid-try-LUKS2-first-when-probing.patch,
    util-linux-libsmartcols-fix-reduction-stages-use.patch,
    util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch,
    util-linux-chcpu-document-zVM-limitations.patch,
    util-linux-lscpu-add-ARM-cores-neoverse3.patch,
    util-linux-chcpu-document-zVM-limitations-generated.patch and
    util-linux-wall-CVE-2024-28085.patch.
- Add file conflict of util-linux-tty-tools and busybox-util-linux.
- Update util-linux-bash-completion-su-chsh-l.patch,
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch and
  make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.
- Move autoreconf back to %build.
- Add devel dependencies.
- Remove util-linux-rpmlintrc. It is no more needed with multibuild.
- uncomment "autoreconf --install" to use the new version of automake
- disable libmagic in more(1) for binary detection (bsc#1225197)
- Skip tests marked as ts_skip_qemu_user when running under qemu
- Mark racy lslocks test as known fail
- Re-enable lsfd tests using mkfds, as it is fixed now.</changelog>
  <changelog author="sbrabec@suse.com" date="1736856000">- Update to version 2.40.4 (jsc#PED-9751):
  * agetty: Prevent cursor escape (bsc#1194818, drop
    util-linux-agetty-prevent-cursor-escape.patch)
    add "systemd" to --version output\
  * chcpu(8): Document CPU deconfiguring behavior
  * fdisk: SGI fixes
  * hardlink: fix memory corruption
  * hardlink.1 directory|file is mandatory
  * lib/env: fix env_list_setenv() for strings without '='
  * libblkid:
    (exfat) validate fields used by prober
    (gpt) use blkid_probe_verify_csum() for partition array
    checksum
    add FSLASTBLOCK for swaparea
    bitlocker fix version on big-endian systems
  * libfdisk: make sure libblkid uses the same sector size
  * libmount:
    extract common error handling function
    propagate first error of multiple filesystem types
  * logger: correctly format tv_usec
  * lscpu: Skip aarch64 decode path for rest of the architectures
    (bsc#1229476, drop util-linux-lscpu-skip-aarch64-decode.patch)
  * lsns: ignore ESRCH errors reported when accessing files under
    /proc
  * mkswap: set selinux label also when creating file
  * more: make sure we have data on stderr
  * nsenter: support empty environ
  * umount, losetup: Document loop destroy behavior
    (bsc#1159034, drop
    util-linux-umount-losetup-lazy-destruction.patch,
    util-linux-umount-losetup-lazy-destruction-generated.patch).
  * uuidd: fix /var/lib/libuuid mode uuidd-tmpfiles.conf
    fix /var/lib/libuuid mode uuidd-tmpfiles.conf
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.3-ReleaseNotes
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.4-ReleaseNotes
  - Refresh util-linux.keyring. Key validity was extended.</changelog>
  <changelog author="sbrabec@suse.com" date="1743595200">- Use utmp as fallback for wall (bsc#1239671,
  util-linux-wall-use-utmp-fallback.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
</package>
<package pkgid="a3f00961c746864d656df82d2feb2ced1cadf077d07287b5b44d688ae64ec69d" name="libuuid1" arch="x86_64">
  <version epoch="0" ver="2.40.4" rel="150700.4.10.1"/>
  <changelog author="sbrabec@suse.com" date="1706011200">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1717934400">- Fix hang of lscpu -e (bsc#1225598,
  util-linux-libsmartcols-fix-reduction-stages-use.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1725364800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1733054400">- Update to version 2.40.2 (jsc#PED-9751):
  * Add lastlog2 (disabled for this build, SLE15/Leap15
    infrastructure is not ready for it)
  * agetty: Load autologin user from agetty.autologin credential
  * agetty: use get_terminal_default_type()
  * agetty: use sd_get_sessions() for number of users (#2088)
  * agetty: don't overwrite TERM passed by the user
  * blockdev: add support for BLKGETZONESZ
  * cfdisk: ask y/n before wipe
  * cfdisk: properly handle out-of-order partitions during resize
  * cfdisk: fix possible integer overflow
  * chcpu: document limitations of -g (bsc#1218609)
  * chsh: use libeconf to read /etc/shells
  * column: fix -l
  * column: fix memory leak
  * dmesg: fix FD leak
  * dmesg: fix delta calculation
  * dmesg: fix wrong size calculation
  * dmesg: support reading kmsg format from file
  * enosys: a new small command to make syscalls fail with ENOSYS
  * exch: new command to atomically exchanges paths between two files
  * fdisk: add support for partition resizing
  * fdisk: remove usage of VLA
  * fincore: add --output-all
  * findmnt: add --list-columns
  * findmnt: add -I, --dfi options for imitating the output of df -i
  * findmnt: add inode-related columns for implementing "df -i" like output
  * fsck.minix: fix possible overrun
  * hexdump: add '--one-byte-hex' format option
  * hwclock: add support for RTC_VL_READ/RTC_VL_CLR ioctls
  * libblkid: fix segfault when blkid.conf doesn't exist
  * libfdisk: add initializer to geometry
  * libmount: improving robustness in reading kernel messages,
    add pidfs to pseudo fs list
  * libmount: fix access check for utab in context
  * libmount: fix umount --read-only
  * login: initialize noauth from login.noauth credential
  * lsblk: add --filter
  * lsblk: add --highlight
  * lsblk: add --list-columns
  * lsclocks: new command to show clocks
  * lscpu: even more Arm part numbers (bsc#1223605)
  * lscpu: New Arm Cortex part numbers
    fix hang of lscpu -e (bsc#1225598)
  * lsfd: Refactor the pidfd logic, support pidfs
  * lsns: fix netns use
  * mkfs.minix: handle 64bit time on 32bit system
  * mkswap: implement --file
  * mkswap: implement --offset
  * mkswap.8.adoc: update note regarding swapfile creation
  * more: clean processes not cleaned up after failed SSH session
    using up 100% CPU (bsc#1220117)
  * mount: add --map-users and --map-groups convenience options
  * nsenter: add option `-c` to join the cgroup of target process
  * setarch: add riscv64/riscv32 support
  * setpgid: new command to run a program in a new process group
  * setpgid: make -f work
  * uuidd: add cont_clock persistence
  * uuidgen: add option --count
  * wall: query logind for list of users with tty (#2088)
    properly neutralize escape sequences (bsc#1221831,
    CVE-2024-28085)
  * write: query logind for list of users with tty (#2088)
  * libuuid: improved support for 64-bit time
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.2-ReleaseNotes
- Drop upstreamed patches:
    Revert-libblkid-try-LUKS2-first-when-probing.patch,
    util-linux-libsmartcols-fix-reduction-stages-use.patch,
    util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch,
    util-linux-chcpu-document-zVM-limitations.patch,
    util-linux-lscpu-add-ARM-cores-neoverse3.patch,
    util-linux-chcpu-document-zVM-limitations-generated.patch and
    util-linux-wall-CVE-2024-28085.patch.
- Add file conflict of util-linux-tty-tools and busybox-util-linux.
- Update util-linux-bash-completion-su-chsh-l.patch,
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch and
  make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.
- Move autoreconf back to %build.
- Add devel dependencies.
- Remove util-linux-rpmlintrc. It is no more needed with multibuild.
- uncomment "autoreconf --install" to use the new version of automake
- disable libmagic in more(1) for binary detection (bsc#1225197)
- Skip tests marked as ts_skip_qemu_user when running under qemu
- Mark racy lslocks test as known fail
- Re-enable lsfd tests using mkfds, as it is fixed now.</changelog>
  <changelog author="sbrabec@suse.com" date="1736856000">- Update to version 2.40.4 (jsc#PED-9751):
  * agetty: Prevent cursor escape (bsc#1194818, drop
    util-linux-agetty-prevent-cursor-escape.patch)
    add "systemd" to --version output\
  * chcpu(8): Document CPU deconfiguring behavior
  * fdisk: SGI fixes
  * hardlink: fix memory corruption
  * hardlink.1 directory|file is mandatory
  * lib/env: fix env_list_setenv() for strings without '='
  * libblkid:
    (exfat) validate fields used by prober
    (gpt) use blkid_probe_verify_csum() for partition array
    checksum
    add FSLASTBLOCK for swaparea
    bitlocker fix version on big-endian systems
  * libfdisk: make sure libblkid uses the same sector size
  * libmount:
    extract common error handling function
    propagate first error of multiple filesystem types
  * logger: correctly format tv_usec
  * lscpu: Skip aarch64 decode path for rest of the architectures
    (bsc#1229476, drop util-linux-lscpu-skip-aarch64-decode.patch)
  * lsns: ignore ESRCH errors reported when accessing files under
    /proc
  * mkswap: set selinux label also when creating file
  * more: make sure we have data on stderr
  * nsenter: support empty environ
  * umount, losetup: Document loop destroy behavior
    (bsc#1159034, drop
    util-linux-umount-losetup-lazy-destruction.patch,
    util-linux-umount-losetup-lazy-destruction-generated.patch).
  * uuidd: fix /var/lib/libuuid mode uuidd-tmpfiles.conf
    fix /var/lib/libuuid mode uuidd-tmpfiles.conf
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.3-ReleaseNotes
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.4-ReleaseNotes
  - Refresh util-linux.keyring. Key validity was extended.</changelog>
  <changelog author="sbrabec@suse.com" date="1743595200">- Use utmp as fallback for wall (bsc#1239671,
  util-linux-wall-use-utmp-fallback.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1774267200">- fdisk: Fix possible partition overlay and data corruption if EBR
  gap is missing (boo#1222465,
  util-linux-libfdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-2.patch,
  util-linux-libfdisk-ebr-missing-gap-2.patch,
  util-linux-tests-fdisk-ebr-missing-gap-3.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1774267201">- Recognize fuse "portal" as a virtual file system (boo#1234736,
  util-linux-libmount-fuse-portal.patch).</changelog>
</package>
<package pkgid="846692b19ec1efa2fcfe21c896a1659aefaae9388d85dca9a68c6f53c2566289" name="libuuid1" arch="x86_64">
  <version epoch="0" ver="2.40.4" rel="150700.4.3.1"/>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1717934400">- Fix hang of lscpu -e (bsc#1225598,
  util-linux-libsmartcols-fix-reduction-stages-use.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1725364800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1733054400">- Update to version 2.40.2 (jsc#PED-9751):
  * Add lastlog2 (disabled for this build, SLE15/Leap15
    infrastructure is not ready for it)
  * agetty: Load autologin user from agetty.autologin credential
  * agetty: use get_terminal_default_type()
  * agetty: use sd_get_sessions() for number of users (#2088)
  * agetty: don't overwrite TERM passed by the user
  * blockdev: add support for BLKGETZONESZ
  * cfdisk: ask y/n before wipe
  * cfdisk: properly handle out-of-order partitions during resize
  * cfdisk: fix possible integer overflow
  * chcpu: document limitations of -g (bsc#1218609)
  * chsh: use libeconf to read /etc/shells
  * column: fix -l
  * column: fix memory leak
  * dmesg: fix FD leak
  * dmesg: fix delta calculation
  * dmesg: fix wrong size calculation
  * dmesg: support reading kmsg format from file
  * enosys: a new small command to make syscalls fail with ENOSYS
  * exch: new command to atomically exchanges paths between two files
  * fdisk: add support for partition resizing
  * fdisk: remove usage of VLA
  * fincore: add --output-all
  * findmnt: add --list-columns
  * findmnt: add -I, --dfi options for imitating the output of df -i
  * findmnt: add inode-related columns for implementing "df -i" like output
  * fsck.minix: fix possible overrun
  * hexdump: add '--one-byte-hex' format option
  * hwclock: add support for RTC_VL_READ/RTC_VL_CLR ioctls
  * libblkid: fix segfault when blkid.conf doesn't exist
  * libfdisk: add initializer to geometry
  * libmount: improving robustness in reading kernel messages,
    add pidfs to pseudo fs list
  * libmount: fix access check for utab in context
  * libmount: fix umount --read-only
  * login: initialize noauth from login.noauth credential
  * lsblk: add --filter
  * lsblk: add --highlight
  * lsblk: add --list-columns
  * lsclocks: new command to show clocks
  * lscpu: even more Arm part numbers (bsc#1223605)
  * lscpu: New Arm Cortex part numbers
    fix hang of lscpu -e (bsc#1225598)
  * lsfd: Refactor the pidfd logic, support pidfs
  * lsns: fix netns use
  * mkfs.minix: handle 64bit time on 32bit system
  * mkswap: implement --file
  * mkswap: implement --offset
  * mkswap.8.adoc: update note regarding swapfile creation
  * more: clean processes not cleaned up after failed SSH session
    using up 100% CPU (bsc#1220117)
  * mount: add --map-users and --map-groups convenience options
  * nsenter: add option `-c` to join the cgroup of target process
  * setarch: add riscv64/riscv32 support
  * setpgid: new command to run a program in a new process group
  * setpgid: make -f work
  * uuidd: add cont_clock persistence
  * uuidgen: add option --count
  * wall: query logind for list of users with tty (#2088)
    properly neutralize escape sequences (bsc#1221831,
    CVE-2024-28085)
  * write: query logind for list of users with tty (#2088)
  * libuuid: improved support for 64-bit time
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.2-ReleaseNotes
- Drop upstreamed patches:
    Revert-libblkid-try-LUKS2-first-when-probing.patch,
    util-linux-libsmartcols-fix-reduction-stages-use.patch,
    util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch,
    util-linux-chcpu-document-zVM-limitations.patch,
    util-linux-lscpu-add-ARM-cores-neoverse3.patch,
    util-linux-chcpu-document-zVM-limitations-generated.patch and
    util-linux-wall-CVE-2024-28085.patch.
- Add file conflict of util-linux-tty-tools and busybox-util-linux.
- Update util-linux-bash-completion-su-chsh-l.patch,
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch and
  make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.
- Move autoreconf back to %build.
- Add devel dependencies.
- Remove util-linux-rpmlintrc. It is no more needed with multibuild.
- uncomment "autoreconf --install" to use the new version of automake
- disable libmagic in more(1) for binary detection (bsc#1225197)
- Skip tests marked as ts_skip_qemu_user when running under qemu
- Mark racy lslocks test as known fail
- Re-enable lsfd tests using mkfds, as it is fixed now.</changelog>
  <changelog author="sbrabec@suse.com" date="1736856000">- Update to version 2.40.4 (jsc#PED-9751):
  * agetty: Prevent cursor escape (bsc#1194818, drop
    util-linux-agetty-prevent-cursor-escape.patch)
    add "systemd" to --version output\
  * chcpu(8): Document CPU deconfiguring behavior
  * fdisk: SGI fixes
  * hardlink: fix memory corruption
  * hardlink.1 directory|file is mandatory
  * lib/env: fix env_list_setenv() for strings without '='
  * libblkid:
    (exfat) validate fields used by prober
    (gpt) use blkid_probe_verify_csum() for partition array
    checksum
    add FSLASTBLOCK for swaparea
    bitlocker fix version on big-endian systems
  * libfdisk: make sure libblkid uses the same sector size
  * libmount:
    extract common error handling function
    propagate first error of multiple filesystem types
  * logger: correctly format tv_usec
  * lscpu: Skip aarch64 decode path for rest of the architectures
    (bsc#1229476, drop util-linux-lscpu-skip-aarch64-decode.patch)
  * lsns: ignore ESRCH errors reported when accessing files under
    /proc
  * mkswap: set selinux label also when creating file
  * more: make sure we have data on stderr
  * nsenter: support empty environ
  * umount, losetup: Document loop destroy behavior
    (bsc#1159034, drop
    util-linux-umount-losetup-lazy-destruction.patch,
    util-linux-umount-losetup-lazy-destruction-generated.patch).
  * uuidd: fix /var/lib/libuuid mode uuidd-tmpfiles.conf
    fix /var/lib/libuuid mode uuidd-tmpfiles.conf
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.3-ReleaseNotes
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.4-ReleaseNotes
  - Refresh util-linux.keyring. Key validity was extended.</changelog>
  <changelog author="sbrabec@suse.com" date="1743595200">- Use utmp as fallback for wall (bsc#1239671,
  util-linux-wall-use-utmp-fallback.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
</package>
<package pkgid="2d4b2f6752198bcceebed271a080769d8d0d0e3b650340971b0b0383093edf07" name="libuuid1-32bit" arch="x86_64">
  <version epoch="0" ver="2.40.4" rel="150700.4.10.1"/>
  <changelog author="sbrabec@suse.com" date="1706011200">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1717934400">- Fix hang of lscpu -e (bsc#1225598,
  util-linux-libsmartcols-fix-reduction-stages-use.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1725364800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1733054400">- Update to version 2.40.2 (jsc#PED-9751):
  * Add lastlog2 (disabled for this build, SLE15/Leap15
    infrastructure is not ready for it)
  * agetty: Load autologin user from agetty.autologin credential
  * agetty: use get_terminal_default_type()
  * agetty: use sd_get_sessions() for number of users (#2088)
  * agetty: don't overwrite TERM passed by the user
  * blockdev: add support for BLKGETZONESZ
  * cfdisk: ask y/n before wipe
  * cfdisk: properly handle out-of-order partitions during resize
  * cfdisk: fix possible integer overflow
  * chcpu: document limitations of -g (bsc#1218609)
  * chsh: use libeconf to read /etc/shells
  * column: fix -l
  * column: fix memory leak
  * dmesg: fix FD leak
  * dmesg: fix delta calculation
  * dmesg: fix wrong size calculation
  * dmesg: support reading kmsg format from file
  * enosys: a new small command to make syscalls fail with ENOSYS
  * exch: new command to atomically exchanges paths between two files
  * fdisk: add support for partition resizing
  * fdisk: remove usage of VLA
  * fincore: add --output-all
  * findmnt: add --list-columns
  * findmnt: add -I, --dfi options for imitating the output of df -i
  * findmnt: add inode-related columns for implementing "df -i" like output
  * fsck.minix: fix possible overrun
  * hexdump: add '--one-byte-hex' format option
  * hwclock: add support for RTC_VL_READ/RTC_VL_CLR ioctls
  * libblkid: fix segfault when blkid.conf doesn't exist
  * libfdisk: add initializer to geometry
  * libmount: improving robustness in reading kernel messages,
    add pidfs to pseudo fs list
  * libmount: fix access check for utab in context
  * libmount: fix umount --read-only
  * login: initialize noauth from login.noauth credential
  * lsblk: add --filter
  * lsblk: add --highlight
  * lsblk: add --list-columns
  * lsclocks: new command to show clocks
  * lscpu: even more Arm part numbers (bsc#1223605)
  * lscpu: New Arm Cortex part numbers
    fix hang of lscpu -e (bsc#1225598)
  * lsfd: Refactor the pidfd logic, support pidfs
  * lsns: fix netns use
  * mkfs.minix: handle 64bit time on 32bit system
  * mkswap: implement --file
  * mkswap: implement --offset
  * mkswap.8.adoc: update note regarding swapfile creation
  * more: clean processes not cleaned up after failed SSH session
    using up 100% CPU (bsc#1220117)
  * mount: add --map-users and --map-groups convenience options
  * nsenter: add option `-c` to join the cgroup of target process
  * setarch: add riscv64/riscv32 support
  * setpgid: new command to run a program in a new process group
  * setpgid: make -f work
  * uuidd: add cont_clock persistence
  * uuidgen: add option --count
  * wall: query logind for list of users with tty (#2088)
    properly neutralize escape sequences (bsc#1221831,
    CVE-2024-28085)
  * write: query logind for list of users with tty (#2088)
  * libuuid: improved support for 64-bit time
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.2-ReleaseNotes
- Drop upstreamed patches:
    Revert-libblkid-try-LUKS2-first-when-probing.patch,
    util-linux-libsmartcols-fix-reduction-stages-use.patch,
    util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch,
    util-linux-chcpu-document-zVM-limitations.patch,
    util-linux-lscpu-add-ARM-cores-neoverse3.patch,
    util-linux-chcpu-document-zVM-limitations-generated.patch and
    util-linux-wall-CVE-2024-28085.patch.
- Add file conflict of util-linux-tty-tools and busybox-util-linux.
- Update util-linux-bash-completion-su-chsh-l.patch,
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch and
  make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.
- Move autoreconf back to %build.
- Add devel dependencies.
- Remove util-linux-rpmlintrc. It is no more needed with multibuild.
- uncomment "autoreconf --install" to use the new version of automake
- disable libmagic in more(1) for binary detection (bsc#1225197)
- Skip tests marked as ts_skip_qemu_user when running under qemu
- Mark racy lslocks test as known fail
- Re-enable lsfd tests using mkfds, as it is fixed now.</changelog>
  <changelog author="sbrabec@suse.com" date="1736856000">- Update to version 2.40.4 (jsc#PED-9751):
  * agetty: Prevent cursor escape (bsc#1194818, drop
    util-linux-agetty-prevent-cursor-escape.patch)
    add "systemd" to --version output\
  * chcpu(8): Document CPU deconfiguring behavior
  * fdisk: SGI fixes
  * hardlink: fix memory corruption
  * hardlink.1 directory|file is mandatory
  * lib/env: fix env_list_setenv() for strings without '='
  * libblkid:
    (exfat) validate fields used by prober
    (gpt) use blkid_probe_verify_csum() for partition array
    checksum
    add FSLASTBLOCK for swaparea
    bitlocker fix version on big-endian systems
  * libfdisk: make sure libblkid uses the same sector size
  * libmount:
    extract common error handling function
    propagate first error of multiple filesystem types
  * logger: correctly format tv_usec
  * lscpu: Skip aarch64 decode path for rest of the architectures
    (bsc#1229476, drop util-linux-lscpu-skip-aarch64-decode.patch)
  * lsns: ignore ESRCH errors reported when accessing files under
    /proc
  * mkswap: set selinux label also when creating file
  * more: make sure we have data on stderr
  * nsenter: support empty environ
  * umount, losetup: Document loop destroy behavior
    (bsc#1159034, drop
    util-linux-umount-losetup-lazy-destruction.patch,
    util-linux-umount-losetup-lazy-destruction-generated.patch).
  * uuidd: fix /var/lib/libuuid mode uuidd-tmpfiles.conf
    fix /var/lib/libuuid mode uuidd-tmpfiles.conf
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.3-ReleaseNotes
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.4-ReleaseNotes
  - Refresh util-linux.keyring. Key validity was extended.</changelog>
  <changelog author="sbrabec@suse.com" date="1743595200">- Use utmp as fallback for wall (bsc#1239671,
  util-linux-wall-use-utmp-fallback.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1772366400">- Use full hostname for PAM to ensure correct access control for
  "login -h" (bsc#1258859, CVE-2026-3184,
  util-linux-CVE-2026-3184.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1774267200">- fdisk: Fix possible partition overlay and data corruption if EBR
  gap is missing (boo#1222465,
  util-linux-libfdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-1.patch,
  util-linux-tests-fdisk-ebr-missing-gap-2.patch,
  util-linux-libfdisk-ebr-missing-gap-2.patch,
  util-linux-tests-fdisk-ebr-missing-gap-3.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1774267201">- Recognize fuse "portal" as a virtual file system (boo#1234736,
  util-linux-libmount-fuse-portal.patch).</changelog>
</package>
<package pkgid="7a161d49753d31f3285d64354e1a9e568256abbc50959698f085b83a9598d07f" name="libuuid1-32bit" arch="x86_64">
  <version epoch="0" ver="2.40.4" rel="150700.4.3.1"/>
  <changelog author="antonio.teixeira@suse.com" date="1699185600">- Convert to multibuild (PED-307)</changelog>
  <changelog author="sbrabec@suse.com" date="1705579200">- Minor multibuild fixes (PED-307):
  * Restore /bin symlinks in util-linux-systemd.
  * Restore compatibility supplements and split-provides.
  * Update safety check instructions.
  * Prevent propagating of structured comments to scriptlets.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="sbrabec@suse.com" date="1706011201">- Upgrade to version 2.39.3 (PED-7694):
  * libblkid: add support for bcachefs sub-device labels
  * libblkid: detect large bcachefs superblocks
  * libblkid: validate that NTFS sector_size is a power of two
  * libblkid: report endianness for VXFS
  * libmount: Fix regression when mounting with atime
  * libmount: accept '\' as escape for options separator
  * libmount: gracefully handle NULL path in mnt_resolve_target()
  * libmount: report statx in features list
  * libsmartcols: handle nameless tables in export format
  * libuuid: avoid truncation of clocks.txt to improve performance
  * lscpu: fix caches separator for --parse=&lt;list&gt;
  * lscpu: Add Phytium FTC862 cpu model
  * lsfd: fix the form for the optional argument of --inet option
    in manpage
  * lsfd: avoid a case of undefined behavior
  * lsfd: fix a memory leak
  * lslogins: fix -y option formatting in manpage
  * more: avoid an out-of-bound access
  * setpriv: fix some group argument completion
  * setterm: avoid restoring flags from uninitialized memory
  * umount: handle bindmounts during --recursive
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.3-ReleaseNotes
  * Changes from 2.39.2:
  * libblkid: fix topology chain types mismatch
  * libmount:
  * handle failure to apply flags as part of a mount operation
  * improve EPERM interpretation
  * update documentation for MNT_ERR_APPLYFLAGS
  * use mount(2) for remount on Linux &lt; 5.14
  * use some MS_* flags as superblock flags
  * setarch: add PER_LINUX_FDPIC fallback
  * uuidd: improve man page for -cont-clock
  * wall: do not error for ttys that do not exist
  * zramctl: add hint about supported algorithms
  * other changes, see:
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes
  * Changes from 2.39.1:
  * Various bug fixes including problem with parsing mount options.
    https://www.kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.1-ReleaseNotes
  * Changes from 2.39:
  * blkpr: New command to run persistent reservations ioctls on a device.
  * pipesz: New command to set or examine pipe and FIFO buffer sizes.
  * waitpid: New command to wait for arbitrary processes.
  * mount, libmount: Supports new file descriptors based mount kernel API.
  * mount, libmount: New mount options X-mount.idmap=, X-mount.auto-fstypes,
    X-mount.{owner,group,mode}=, rootcontext=@target.
  * renice: Supports posix-compliant -n (via POSIXLY_CORRECT) and add a new
    option --relative.
  * dmesg: Supports subsecond granularity for --since and --until.
  * dmesg: Option --level accepts '+' prefix or postfix for a level name to specify
    all higher or all lower levels.
  * blkid, libblkid: Supports bcachefs.
  * fstrim: New option --types to filter out by filesystem types.
  * lsblk: --nvme and --virtio are new options to filter out devices.
  * lsblk: Improves detection of hotplug and removable status.
  * nsenter: New option --env for allowing environment variables inheritance.
  * namei: New option -Z to report SELinux contexts.
  * Many other new features and fixes. For complete list see
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39-ReleaseNotes
  * Changes from 2.38.1:
  * column: fix buffer overflow when -l specified, fix greedy mode
  on -l
  * dmesg: fix --since and --until
  * libmount: when moving a mount point, all sub mount entries in
    utab should also be updated (bsc#1198731)
  * libuuid: improve cache handling (bsc#1201959, PED-1150)
  * lsblk: fix JSON output when without --bytes
  * lsfd:fix crash triggered by an empty filter expression
  * sulogin: fix includes (obsoletes linux-fs.patch)
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38.1-ReleaseNotes
  * Changes from 2.38:
  * first release with translated util-linux man-pages
  * mount: new options --mkdir as shortcut for X-mount.mkdir
  * mount, libmount: new mount options X-mount.subdir=
  * lsfd: new command
  * dmesg: new option --json to print kernel log in JSON format
  * libfdisk: improved to set correct CHS addresses in MBR
  * fstrim: ignores all /ect/fstab entries with X-fstrim.notrim
    (jsc#SLE-17942)
  * hardlink: now supports reflinks and new option --method=
  * hwclock: new command line options --param-get and --param-set
  * irqtop: new option --cpu-stat
  * libblkid: supports zoned disks for btrfs
  * lsblk: new options --noempty to ignore all devices with zero
    size, and --zoned to print information about zones
  * mkswap: new option --quiet
  * nsenter: new option --wdns to change working directory within
    namespace
  * rename: new options --all and --last to replace all or last
    occurrences of expression rather than the first one
  * su: now resets RLIMIT_AS, RLIMIT_{NICE,RTPRIO}, RLIMIT_FSIZE
    and RLIMIT_NOFILE reourse limits.
  * unshare: new options --map-users= and --map-groups= to map
    block of group IDs; new option --map-auto to map the first
    block of user IDs owned by the effective user from /etc/subuid
  * wdctl: new options --setpregovernor to set pre-timeout governor
    name, and --setpretimeout to set watchdog pre-timeout in
    seconds
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.38/v2.38-ReleaseNotes
- Port patches/libmount-print-a-blacklist-hint-for-unknown-filesyst.patch
- Drop upstreamed patches: util-linux-sulogin4bsc1175514.patch,
  blockdev-remove-nbsp.patch,
  util-linux-fstrim-implement-X-fstrim.notrim.patch,
  util-linux-uuidd-fix-lock-state.patch,
  util-linux-libuuid-extend-cache.patch (better upstream
  implementation exists),
  util-linux-uuidd-prevent-root-owning.patch (it should not happen
  in the re-implemented libuuid),
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch,
  util-linux-libuuid-uuid_parse-overrun.patch,
  util-linux-libuuid-improve-cache-handling.patch,
  util-linux-libuuid-continuous-clock-handling.patch,
  util-linux-libuuid-check-clock-value.patch,
  util-linux-fix-tests-when-at-symbol-in-path.patch,
  util-linux-flock-limitations.patch,
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch.
- Disable failing check fadvise/drop on ppc64le (test file does not
  appear in the kernel cache at all).</changelog>
  <changelog author="sbrabec@suse.com" date="1707480000">- Add file conflict of util-linux-tty-tools and busybox-util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-wall-CVE-2024-28085.patch, bsc#1221831,
  CVE-2024-28085).</changelog>
  <changelog author="rgoldwyn@suse.com" date="1714996800">- bsc#1220117: Processes not cleaned up after failed SSH session are using up 100% CPU
  + util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch</changelog>
  <changelog author="mwilck@suse.com" date="1715947200">- Fix misdetection of LUKS2 partition on MD RAID
  (bsc#1224393, boo#1213227, boo#1213361)
  * add Revert-libblkid-try-LUKS2-first-when-probing.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1716292800">- Document that chcpu -g is not supported on IBM z/VM (bsc#1218609,
  util-linux-chcpu-document-zVM-limitations.patch,
  util-linux-chcpu-document-zVM-limitations-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1716465600">- lscpu: Add more ARM cores (bsc#1223605,
  util-linux-lscpu-add-ARM-cores-neoverse3.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1717934400">- Fix hang of lscpu -e (bsc#1225598,
  util-linux-libsmartcols-fix-reduction-stages-use.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1718884800">- Don't delete binaries not common for all architectures. Create an
  util-linux-extra subpackage instead, so users of third party
  tools can use them. (bsc#1222285)</changelog>
  <changelog author="sbrabec@suse.com" date="1718884801">- Document unexpected side effects of lazy destruction
  (bsc#1159034, util-linux-umount-losetup-lazy-destruction.patch,
  util-linux-umount-losetup-lazy-destruction-generated.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1721736000">- agetty: Prevent login cursor escape (bsc#1194818,
  util-linux-agetty-prevent-cursor-escape.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1725364800">- Skip aarch64 decode path for rest of the architectures
  (bsc#1229476, util-linux-lscpu-skip-aarch64-decode.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1733054400">- Update to version 2.40.2 (jsc#PED-9751):
  * Add lastlog2 (disabled for this build, SLE15/Leap15
    infrastructure is not ready for it)
  * agetty: Load autologin user from agetty.autologin credential
  * agetty: use get_terminal_default_type()
  * agetty: use sd_get_sessions() for number of users (#2088)
  * agetty: don't overwrite TERM passed by the user
  * blockdev: add support for BLKGETZONESZ
  * cfdisk: ask y/n before wipe
  * cfdisk: properly handle out-of-order partitions during resize
  * cfdisk: fix possible integer overflow
  * chcpu: document limitations of -g (bsc#1218609)
  * chsh: use libeconf to read /etc/shells
  * column: fix -l
  * column: fix memory leak
  * dmesg: fix FD leak
  * dmesg: fix delta calculation
  * dmesg: fix wrong size calculation
  * dmesg: support reading kmsg format from file
  * enosys: a new small command to make syscalls fail with ENOSYS
  * exch: new command to atomically exchanges paths between two files
  * fdisk: add support for partition resizing
  * fdisk: remove usage of VLA
  * fincore: add --output-all
  * findmnt: add --list-columns
  * findmnt: add -I, --dfi options for imitating the output of df -i
  * findmnt: add inode-related columns for implementing "df -i" like output
  * fsck.minix: fix possible overrun
  * hexdump: add '--one-byte-hex' format option
  * hwclock: add support for RTC_VL_READ/RTC_VL_CLR ioctls
  * libblkid: fix segfault when blkid.conf doesn't exist
  * libfdisk: add initializer to geometry
  * libmount: improving robustness in reading kernel messages,
    add pidfs to pseudo fs list
  * libmount: fix access check for utab in context
  * libmount: fix umount --read-only
  * login: initialize noauth from login.noauth credential
  * lsblk: add --filter
  * lsblk: add --highlight
  * lsblk: add --list-columns
  * lsclocks: new command to show clocks
  * lscpu: even more Arm part numbers (bsc#1223605)
  * lscpu: New Arm Cortex part numbers
    fix hang of lscpu -e (bsc#1225598)
  * lsfd: Refactor the pidfd logic, support pidfs
  * lsns: fix netns use
  * mkfs.minix: handle 64bit time on 32bit system
  * mkswap: implement --file
  * mkswap: implement --offset
  * mkswap.8.adoc: update note regarding swapfile creation
  * more: clean processes not cleaned up after failed SSH session
    using up 100% CPU (bsc#1220117)
  * mount: add --map-users and --map-groups convenience options
  * nsenter: add option `-c` to join the cgroup of target process
  * setarch: add riscv64/riscv32 support
  * setpgid: new command to run a program in a new process group
  * setpgid: make -f work
  * uuidd: add cont_clock persistence
  * uuidgen: add option --count
  * wall: query logind for list of users with tty (#2088)
    properly neutralize escape sequences (bsc#1221831,
    CVE-2024-28085)
  * write: query logind for list of users with tty (#2088)
  * libuuid: improved support for 64-bit time
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.2-ReleaseNotes
- Drop upstreamed patches:
    Revert-libblkid-try-LUKS2-first-when-probing.patch,
    util-linux-libsmartcols-fix-reduction-stages-use.patch,
    util-linux-more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch,
    util-linux-chcpu-document-zVM-limitations.patch,
    util-linux-lscpu-add-ARM-cores-neoverse3.patch,
    util-linux-chcpu-document-zVM-limitations-generated.patch and
    util-linux-wall-CVE-2024-28085.patch.
- Add file conflict of util-linux-tty-tools and busybox-util-linux.
- Update util-linux-bash-completion-su-chsh-l.patch,
  Add-documentation-on-blacklisted-modules-to-mount-8-.patch and
  make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.
- Move autoreconf back to %build.
- Add devel dependencies.
- Remove util-linux-rpmlintrc. It is no more needed with multibuild.
- uncomment "autoreconf --install" to use the new version of automake
- disable libmagic in more(1) for binary detection (bsc#1225197)
- Skip tests marked as ts_skip_qemu_user when running under qemu
- Mark racy lslocks test as known fail
- Re-enable lsfd tests using mkfds, as it is fixed now.</changelog>
  <changelog author="sbrabec@suse.com" date="1736856000">- Update to version 2.40.4 (jsc#PED-9751):
  * agetty: Prevent cursor escape (bsc#1194818, drop
    util-linux-agetty-prevent-cursor-escape.patch)
    add "systemd" to --version output\
  * chcpu(8): Document CPU deconfiguring behavior
  * fdisk: SGI fixes
  * hardlink: fix memory corruption
  * hardlink.1 directory|file is mandatory
  * lib/env: fix env_list_setenv() for strings without '='
  * libblkid:
    (exfat) validate fields used by prober
    (gpt) use blkid_probe_verify_csum() for partition array
    checksum
    add FSLASTBLOCK for swaparea
    bitlocker fix version on big-endian systems
  * libfdisk: make sure libblkid uses the same sector size
  * libmount:
    extract common error handling function
    propagate first error of multiple filesystem types
  * logger: correctly format tv_usec
  * lscpu: Skip aarch64 decode path for rest of the architectures
    (bsc#1229476, drop util-linux-lscpu-skip-aarch64-decode.patch)
  * lsns: ignore ESRCH errors reported when accessing files under
    /proc
  * mkswap: set selinux label also when creating file
  * more: make sure we have data on stderr
  * nsenter: support empty environ
  * umount, losetup: Document loop destroy behavior
    (bsc#1159034, drop
    util-linux-umount-losetup-lazy-destruction.patch,
    util-linux-umount-losetup-lazy-destruction-generated.patch).
  * uuidd: fix /var/lib/libuuid mode uuidd-tmpfiles.conf
    fix /var/lib/libuuid mode uuidd-tmpfiles.conf
  * Many other fixes, improvements and code cleanup. For the
    complete list see
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.3-ReleaseNotes
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.40/v2.40.4-ReleaseNotes
  - Refresh util-linux.keyring. Key validity was extended.</changelog>
  <changelog author="sbrabec@suse.com" date="1743595200">- Use utmp as fallback for wall (bsc#1239671,
  util-linux-wall-use-utmp-fallback.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1760875200">- lscpu: Add support for NVIDIA Olympus arm64 core (jsc#PED-13682,
  util-linux-lscpu-add-arm64-NVIDIA-Olympus.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1768132800">- Fix heap buffer overread in setpwnam() when processing 256-byte
  usernames (bsc#1254666, CVE-2025-14104,
  util-linux-CVE-2025-14104-1.patch,
  util-linux-CVE-2025-14104-2.patch).</changelog>
</package>
<package pkgid="31a860e7ab2455234f0020891b4e714ddcae0192c9f162fd8d3b84f50b341913" name="libvdpau_r300" arch="x86_64">
  <version epoch="0" ver="22.3.5" rel="150500.77.8.1"/>
  <changelog author="dmueller@suse.com" date="1668686400">- update to 22.2.4:
  * clover: windows:  library filename has \`-1` suffix and a \`lib` prefix
    when built with mingw
  * radv, dxvk: Rendering errors in World of Tanks after "Switch to dynamic
    rendering only"
  * gen9 gt3e/gt4e skus fail dEQP-VK.pipeline.multisample.sample_locations_ext.*
  * v3d: Wrong colors (pink) in videos in Firefox (likely YUV-&gt;RGB shader issue)
  * panfrost t860 glmark-es2 regression
  * radv: Flickering in Spider-Man Remastered (Regression) (Bisected)
  * radv: Hitman 2 using Direct3D 12 has discolored squares on RDNA2 with DCC
    enabled
  * panfrost/midgard -  on Duckstation PSX emulator: segfault on GLES 3.0 and
    bad shader compilations on 3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1670068800">- spefile: removed Release lines from libxatracker2,
  libxatracker-devel packages in the hope to have reproducibly
  builds also on Tumbleweed (boo#1205998)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1672315200">- Update to version 22.3.0:
  * See https://docs.mesa3d.org/relnotes/22.3.0.html
- Update to version 22.3.1:
  * See https://docs.mesa3d.org/relnotes/22.3.1.html
- Update to version 22.3.2:
  * See https://docs.mesa3d.org/relnotes/22.3.2.html
- Remove the libXvMC_nouveau and libXvMC_r600 packages as XVMC
  support was removed.
- Add libvdpau_virtio_gpu package for VirtIO GPU.
- Rebase n_drirc-disable-rgb10-for-chromium-on-amd.patch.
- Rebase u_dep_xcb.patch.
- Rebase U_fix-mpeg1_2-decode-mesa-20.2.patch.
- Drop n_buildfix-21.3.0.patch: fixed upstream.</changelog>
  <changelog author="sndirsch@suse.com" date="1672488000">- don't try to generate libvdpau_virtio_gpu package on ppc64le; for
  some reason this driver doesn't get built on this platform</changelog>
  <changelog author="schwab@suse.de" date="1672660800">- Update list of gallium-drivers to match default list</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1673438400">- Update to version 22.3.3:
  * See https://docs.mesa3d.org/relnotes/22.3.3.html</changelog>
  <changelog author="mardnh@gmx.de" date="1673784000">- Fix some deprecation warnings
  * WARNING: option "false" deprecated, please use "disabled" instead.
  * WARNING: option "true" deprecated, please use "enabled" instead.</changelog>
  <changelog author="hp@urpla.net" date="1673870400">- Compile with gcc12 on Leaps: building drivers fails with:
  /usr/include/dxguids/dxguids.h:70:1: internal compiler error:
  in cxx_eval_bit_field_ref, at cp/constexpr.c:2578</changelog>
  <changelog author="mardnh@gmx.de" date="1673870401">- Add support for Rusticl - Mesa's new OpenCL implementation.
  * See https://docs.mesa3d.org/rusticl
  You will need to set your environment to use it
  * See https://docs.mesa3d.org/envvars#rusticl-environment-variables</changelog>
  <changelog author="sndirsch@suse.com" date="1674475200">- re-enable build on Leap, but only for 15.5; there is no gcc12
  on Leap 15.4, which is now officially required by Mesa 22.3</changelog>
  <changelog author="manfred.h@gmx.net" date="1674561600">- Add BuildRequires for x264 and x265 in case video_codecs should
  be built.</changelog>
  <changelog author="sndirsch@suse.com" date="1674561601">- force usage of gcc 12 only on Leap 15.5; there is no gcc12 on
  Leap 15.4</changelog>
  <changelog author="sndirsch@suse.com" date="1674820800">- using gcc 12 now also on Leap 15.4; after changing build project
  to openSUSE:Leap:15.4:Update gcc 12 packages are found now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1674820801">- removing again BuildRequires for x264 and x265 in case
  video_codecs should be built (these were never needed nor used
  for build)</changelog>
  <changelog author="sndirsch@suse.com" date="1674820802">- Update to version 22.3.4
  * bug fix release which fixes bugs found since Mesa 22.3.3
  * see https://docs.mesa3d.org/relnotes/22.3.4.html for more
    details</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- Don't enable rusticl without opencl</changelog>
  <changelog author="sndirsch@suse.com" date="1675944000">- Update to version 22.3.5
  * bug fix release which fixes bugs found since Mesa 22.3.4
  * see https://docs.mesa3d.org/relnotes/22.3.5.html for more
    details
- refreshed u_dep_xcb.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1676030400">- U_ReturnME.patch
  * fixes blackscreen in Return To Monkey Island on Intel graphics
    (boo#1208145)</changelog>
  <changelog author="sndirsch@suse.com" date="1727784000">- u_mesa-CVE-2023-45913.patch
  * NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId()
    (CVE-2023-45913, bsc#1222040)
- u_mesa-CVE-2023-45919.patch
  * buffer over-read in glXQueryServerString()
    (CVE-2023-45919, bsc#1222041)
- u_mesa-CVE-2023-45922.patch
  * segmentation violation in __glXGetDrawableAttribute()
    (CVE-2023-45922, bsc#1222042)</changelog>
  <changelog author="sndirsch@suse.com" date="1776168000">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
</package>
<package pkgid="85a8230018e7c8c246941c09c963b61f7bdddcaef3e124b06db41efe9b1c38fe" name="libvdpau_r600" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.5.1"/>
  <changelog author="sndirsch@suse.com" date="1730376000">- added -32bit package for Mesa-libva since it's needed by Steam;
  reported on packman ML:
  https://lists.links2linux.de/pipermail/packman/2024-October/017985.html</changelog>
  <changelog author="mrueckert@suse.de" date="1730376001">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
</package>
<package pkgid="adfea25ac8f6b23065b97457c07671173449d6633fd3beaf63495865f40f3509" name="libvdpau_r600" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.8.1"/>
  <changelog author="mrueckert@suse.de" date="1730376000">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
</package>
<package pkgid="51dfee884ce95b2ad466c4324372aed75a0f4bd28113c08c3b2a6f829ed55ab9" name="libvdpau_radeonsi" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.5.1"/>
  <changelog author="sndirsch@suse.com" date="1730376000">- added -32bit package for Mesa-libva since it's needed by Steam;
  reported on packman ML:
  https://lists.links2linux.de/pipermail/packman/2024-October/017985.html</changelog>
  <changelog author="mrueckert@suse.de" date="1730376001">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
</package>
<package pkgid="36f4875033702894556a6f52bf7b0d7636b3d66f2ab1b09f56804dc1008f95f6" name="libvdpau_radeonsi" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.8.1"/>
  <changelog author="mrueckert@suse.de" date="1730376000">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
</package>
<package pkgid="33a42b1301992f1da35e6d4725c6693cc95a00edd4c07d7681701d0c6489a918" name="libvdpau_virtio_gpu" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.5.1"/>
  <changelog author="sndirsch@suse.com" date="1730376000">- added -32bit package for Mesa-libva since it's needed by Steam;
  reported on packman ML:
  https://lists.links2linux.de/pipermail/packman/2024-October/017985.html</changelog>
  <changelog author="mrueckert@suse.de" date="1730376001">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
</package>
<package pkgid="d8ddf6815c0c6a53196d48e2a8180eb3387e779ec9bad43581b28f8477ea3358" name="libvdpau_virtio_gpu" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.8.1"/>
  <changelog author="mrueckert@suse.de" date="1730376000">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
</package>
<package pkgid="8b74d69bdc18a18bc8d03545dfab53731f9e08b48e596413efccc67bac611cfc" name="libvirt" arch="src">
  <version epoch="0" ver="11.0.0" rel="150700.4.10.1"/>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
  <changelog author="jfehlig@suse.com" date="1717416000">- Update to libvirt 10.4.0
  - network: use nftables to setup virtual network firewall rules
    boo#1201510
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-4-0-2024-06-03</changelog>
  <changelog author="jfehlig@suse.com" date="1719835200">- Update to libvirt 10.5.0
  - Introduce SEV-SNP support
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-5-0-2024-07-01</changelog>
  <changelog author="jfehlig@suse.com" date="1722859200">- Update to libvirt 10.6.0
  - jsc#PED-8909
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-6-0-2024-08-05</changelog>
  <changelog author="jfehlig@suse.com" date="1725364800">- Update to libvirt 10.7.0
  - CVE-2024-8235, bsc#1230024
  - Unconditionally disable building the interface driver
  - Remove SysV rc* compatibility symlinks
  - jsc#PED-8909
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-7-0-2024-09-02</changelog>
  <changelog author="jfehlig@suse.com" date="1727784000">- Update to libvirt 10.8.0
  - libvirt-daemon-driver-storage-core: Change dependency on
    nfs-utils from Requires to Recommends
  - Switch from YAJL to json-c for JSON parsing and formatting
  - jsc#PED-8909
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-8-0-2024-10-01</changelog>
  <changelog author="jfehlig@suse.com" date="1729598400">- spec: Use default_firewall_backend prjconf setting
- spec: Loosen nwfilter dependency
  boo#1231798</changelog>
  <changelog author="jfehlig@suse.com" date="1730462400">- Update to libvirt 10.9.0
  - jsc#PED-8909, jsc#PED-9854, jsc#PED-9855
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-9-0-2024-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1730721600">- json: do not call json_tokener_free with NULL
  Fixes potential SEGV in libvirt-nss module
  boo#1232726</changelog>
  <changelog author="jfehlig@suse.com" date="1733140800">- Update to libvirt 10.10.0
  - jsc#PED-8909, jsc#PED-9543, jsc#PED-9854, jsc#PED-9855
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-10-0-2024-12-02</changelog>
  <changelog author="jfehlig@suse.com" date="1734004800">- qemu: tpm: do not update profile name for transient domains
  Fixes a crash when starting a transient domain
  boo#1234438</changelog>
  <changelog author="jfehlig@suse.com" date="1735905600">- tests: Extend EOY check in virtimetest
  boo#1234995</changelog>
  <changelog author="jfehlig@suse.com" date="1736164800">- security: apparmor: Fix probing of apparmor availability on the
  VM host when using modular daemons
  bsc#1235079</changelog>
  <changelog author="dimstar@opensuse.org" date="1736337600">- Convert from tar_scm to obs_scm: allow OBS internal data
  structure to be more efficient by using .obscpio files</changelog>
  <changelog author="jfehlig@suse.com" date="1737028800">- Update to libvirt 11.0.0
  - jsc#PED-5899, jsc#PED-8909, jsc#PED-9543, jsc#PED-9854,
    jsc#PED-9855
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-0-0-2025-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1738584000">- spec: Change hooks dependency from libvirtd to the qemu driver
  bsc#1236378</changelog>
  <changelog author="jfehlig@suse.com" date="1746705600">- Add support for 'sparse' save image format
- Add support for parallel save and restore
  jsc#PED12599</changelog>
  <changelog author="jfehlig@suse.com" date="1749816000">- qemu: Fix failure when reverting to internal snapshots
  bsc#1244488</changelog>
  <changelog author="jfehlig@suse.com" date="1751371200">- qemu: Fix NVRAM image conversion check
  bsc#1245541
- qemu: Avoid crash in qemuDomainCheckCPU with unknown host CPU
- cpu: Do not call g_strv_contains on NULL list
- qemu: Be more forgiving when acquiring QUERY job when formatting
  domain XML</changelog>
  <changelog author="jfehlig@suse.com" date="1760356800">- qemu: Fix firmware auto-selection for SEV-SNP enabled VMs
  bsc#1241211</changelog>
</package>
<package pkgid="8b7592136738a7017a408fff9285ec7da2925f0c3fb351830eea4b1f03266a7b" name="libvirt" arch="src">
  <version epoch="0" ver="11.0.0" rel="150700.4.13.1"/>
  <changelog author="jfehlig@suse.com" date="1717416000">- Update to libvirt 10.4.0
  - network: use nftables to setup virtual network firewall rules
    boo#1201510
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-4-0-2024-06-03</changelog>
  <changelog author="jfehlig@suse.com" date="1719835200">- Update to libvirt 10.5.0
  - Introduce SEV-SNP support
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-5-0-2024-07-01</changelog>
  <changelog author="jfehlig@suse.com" date="1722859200">- Update to libvirt 10.6.0
  - jsc#PED-8909
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-6-0-2024-08-05</changelog>
  <changelog author="jfehlig@suse.com" date="1725364800">- Update to libvirt 10.7.0
  - CVE-2024-8235, bsc#1230024
  - Unconditionally disable building the interface driver
  - Remove SysV rc* compatibility symlinks
  - jsc#PED-8909
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-7-0-2024-09-02</changelog>
  <changelog author="jfehlig@suse.com" date="1727784000">- Update to libvirt 10.8.0
  - libvirt-daemon-driver-storage-core: Change dependency on
    nfs-utils from Requires to Recommends
  - Switch from YAJL to json-c for JSON parsing and formatting
  - jsc#PED-8909
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-8-0-2024-10-01</changelog>
  <changelog author="jfehlig@suse.com" date="1729598400">- spec: Use default_firewall_backend prjconf setting
- spec: Loosen nwfilter dependency
  boo#1231798</changelog>
  <changelog author="jfehlig@suse.com" date="1730462400">- Update to libvirt 10.9.0
  - jsc#PED-8909, jsc#PED-9854, jsc#PED-9855
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-9-0-2024-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1730721600">- json: do not call json_tokener_free with NULL
  Fixes potential SEGV in libvirt-nss module
  boo#1232726</changelog>
  <changelog author="jfehlig@suse.com" date="1733140800">- Update to libvirt 10.10.0
  - jsc#PED-8909, jsc#PED-9543, jsc#PED-9854, jsc#PED-9855
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-10-0-2024-12-02</changelog>
  <changelog author="jfehlig@suse.com" date="1734004800">- qemu: tpm: do not update profile name for transient domains
  Fixes a crash when starting a transient domain
  boo#1234438</changelog>
  <changelog author="jfehlig@suse.com" date="1735905600">- tests: Extend EOY check in virtimetest
  boo#1234995</changelog>
  <changelog author="jfehlig@suse.com" date="1736164800">- security: apparmor: Fix probing of apparmor availability on the
  VM host when using modular daemons
  bsc#1235079</changelog>
  <changelog author="dimstar@opensuse.org" date="1736337600">- Convert from tar_scm to obs_scm: allow OBS internal data
  structure to be more efficient by using .obscpio files</changelog>
  <changelog author="jfehlig@suse.com" date="1737028800">- Update to libvirt 11.0.0
  - jsc#PED-5899, jsc#PED-8909, jsc#PED-9543, jsc#PED-9854,
    jsc#PED-9855
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-0-0-2025-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1738584000">- spec: Change hooks dependency from libvirtd to the qemu driver
  bsc#1236378</changelog>
  <changelog author="jfehlig@suse.com" date="1746705600">- Add support for 'sparse' save image format
- Add support for parallel save and restore
  jsc#PED12599</changelog>
  <changelog author="jfehlig@suse.com" date="1749816000">- qemu: Fix failure when reverting to internal snapshots
  bsc#1244488</changelog>
  <changelog author="jfehlig@suse.com" date="1751371200">- qemu: Fix NVRAM image conversion check
  bsc#1245541
- qemu: Avoid crash in qemuDomainCheckCPU with unknown host CPU
- cpu: Do not call g_strv_contains on NULL list
- qemu: Be more forgiving when acquiring QUERY job when formatting
  domain XML</changelog>
  <changelog author="jfehlig@suse.com" date="1760356800">- qemu: Fix firmware auto-selection for SEV-SNP enabled VMs
  bsc#1241211</changelog>
  <changelog author="jfehlig@suse.com" date="1765886400">- CVE-2025-13193: qemu: Set umask for 'qemu-img' when creating
  external inactive snapshots
  bsc#1253703
- CVE-2025-12748: Check ACLs before parsing the whole domain XML
  bsc#1253278</changelog>
</package>
<package pkgid="0216e9d899a5ee180b40a365cc0d27e545d25c174294212a5a31832473d98d06" name="libvirt" arch="src">
  <version epoch="0" ver="11.0.0" rel="150700.4.16.1"/>
  <changelog author="jfehlig@suse.com" date="1719835200">- Update to libvirt 10.5.0
  - Introduce SEV-SNP support
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-5-0-2024-07-01</changelog>
  <changelog author="jfehlig@suse.com" date="1722859200">- Update to libvirt 10.6.0
  - jsc#PED-8909
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-6-0-2024-08-05</changelog>
  <changelog author="jfehlig@suse.com" date="1725364800">- Update to libvirt 10.7.0
  - CVE-2024-8235, bsc#1230024
  - Unconditionally disable building the interface driver
  - Remove SysV rc* compatibility symlinks
  - jsc#PED-8909
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-7-0-2024-09-02</changelog>
  <changelog author="jfehlig@suse.com" date="1727784000">- Update to libvirt 10.8.0
  - libvirt-daemon-driver-storage-core: Change dependency on
    nfs-utils from Requires to Recommends
  - Switch from YAJL to json-c for JSON parsing and formatting
  - jsc#PED-8909
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-8-0-2024-10-01</changelog>
  <changelog author="jfehlig@suse.com" date="1729598400">- spec: Use default_firewall_backend prjconf setting
- spec: Loosen nwfilter dependency
  boo#1231798</changelog>
  <changelog author="jfehlig@suse.com" date="1730462400">- Update to libvirt 10.9.0
  - jsc#PED-8909, jsc#PED-9854, jsc#PED-9855
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-9-0-2024-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1730721600">- json: do not call json_tokener_free with NULL
  Fixes potential SEGV in libvirt-nss module
  boo#1232726</changelog>
  <changelog author="jfehlig@suse.com" date="1733140800">- Update to libvirt 10.10.0
  - jsc#PED-8909, jsc#PED-9543, jsc#PED-9854, jsc#PED-9855
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-10-0-2024-12-02</changelog>
  <changelog author="jfehlig@suse.com" date="1734004800">- qemu: tpm: do not update profile name for transient domains
  Fixes a crash when starting a transient domain
  boo#1234438</changelog>
  <changelog author="jfehlig@suse.com" date="1735905600">- tests: Extend EOY check in virtimetest
  boo#1234995</changelog>
  <changelog author="jfehlig@suse.com" date="1736164800">- security: apparmor: Fix probing of apparmor availability on the
  VM host when using modular daemons
  bsc#1235079</changelog>
  <changelog author="dimstar@opensuse.org" date="1736337600">- Convert from tar_scm to obs_scm: allow OBS internal data
  structure to be more efficient by using .obscpio files</changelog>
  <changelog author="jfehlig@suse.com" date="1737028800">- Update to libvirt 11.0.0
  - jsc#PED-5899, jsc#PED-8909, jsc#PED-9543, jsc#PED-9854,
    jsc#PED-9855
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-0-0-2025-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1738584000">- spec: Change hooks dependency from libvirtd to the qemu driver
  bsc#1236378</changelog>
  <changelog author="jfehlig@suse.com" date="1746705600">- Add support for 'sparse' save image format
- Add support for parallel save and restore
  jsc#PED12599</changelog>
  <changelog author="jfehlig@suse.com" date="1749816000">- qemu: Fix failure when reverting to internal snapshots
  bsc#1244488</changelog>
  <changelog author="jfehlig@suse.com" date="1751371200">- qemu: Fix NVRAM image conversion check
  bsc#1245541
- qemu: Avoid crash in qemuDomainCheckCPU with unknown host CPU
- cpu: Do not call g_strv_contains on NULL list
- qemu: Be more forgiving when acquiring QUERY job when formatting
  domain XML</changelog>
  <changelog author="jfehlig@suse.com" date="1760356800">- qemu: Fix firmware auto-selection for SEV-SNP enabled VMs
  bsc#1241211</changelog>
  <changelog author="jfehlig@suse.com" date="1765886400">- CVE-2025-13193: qemu: Set umask for 'qemu-img' when creating
  external inactive snapshots
  bsc#1253703
- CVE-2025-12748: Check ACLs before parsing the whole domain XML
  bsc#1253278</changelog>
  <changelog author="jfehlig@suse.com" date="1770120000">- virsh: Introduce new hypervisor-cpu-models command
  jsc#PED-13062
- wireshark: Adapt to wireshark-4.6.0
  jsc#PED-15400</changelog>
</package>
<package pkgid="9ae77aac275ae4b832de35f9dd5d0e5fb8ef19f29f58c4a9327d23a00a3961e2" name="libvirt" arch="src">
  <version epoch="0" ver="11.0.0" rel="150700.4.19.1"/>
  <changelog author="jfehlig@suse.com" date="1719835200">- Update to libvirt 10.5.0
  - Introduce SEV-SNP support
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-5-0-2024-07-01</changelog>
  <changelog author="jfehlig@suse.com" date="1722859200">- Update to libvirt 10.6.0
  - jsc#PED-8909
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-6-0-2024-08-05</changelog>
  <changelog author="jfehlig@suse.com" date="1725364800">- Update to libvirt 10.7.0
  - CVE-2024-8235, bsc#1230024
  - Unconditionally disable building the interface driver
  - Remove SysV rc* compatibility symlinks
  - jsc#PED-8909
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-7-0-2024-09-02</changelog>
  <changelog author="jfehlig@suse.com" date="1727784000">- Update to libvirt 10.8.0
  - libvirt-daemon-driver-storage-core: Change dependency on
    nfs-utils from Requires to Recommends
  - Switch from YAJL to json-c for JSON parsing and formatting
  - jsc#PED-8909
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-8-0-2024-10-01</changelog>
  <changelog author="jfehlig@suse.com" date="1729598400">- spec: Use default_firewall_backend prjconf setting
- spec: Loosen nwfilter dependency
  boo#1231798</changelog>
  <changelog author="jfehlig@suse.com" date="1730462400">- Update to libvirt 10.9.0
  - jsc#PED-8909, jsc#PED-9854, jsc#PED-9855
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-9-0-2024-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1730721600">- json: do not call json_tokener_free with NULL
  Fixes potential SEGV in libvirt-nss module
  boo#1232726</changelog>
  <changelog author="jfehlig@suse.com" date="1733140800">- Update to libvirt 10.10.0
  - jsc#PED-8909, jsc#PED-9543, jsc#PED-9854, jsc#PED-9855
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-10-0-2024-12-02</changelog>
  <changelog author="jfehlig@suse.com" date="1734004800">- qemu: tpm: do not update profile name for transient domains
  Fixes a crash when starting a transient domain
  boo#1234438</changelog>
  <changelog author="jfehlig@suse.com" date="1735905600">- tests: Extend EOY check in virtimetest
  boo#1234995</changelog>
  <changelog author="jfehlig@suse.com" date="1736164800">- security: apparmor: Fix probing of apparmor availability on the
  VM host when using modular daemons
  bsc#1235079</changelog>
  <changelog author="dimstar@opensuse.org" date="1736337600">- Convert from tar_scm to obs_scm: allow OBS internal data
  structure to be more efficient by using .obscpio files</changelog>
  <changelog author="jfehlig@suse.com" date="1737028800">- Update to libvirt 11.0.0
  - jsc#PED-5899, jsc#PED-8909, jsc#PED-9543, jsc#PED-9854,
    jsc#PED-9855
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-0-0-2025-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1738584000">- spec: Change hooks dependency from libvirtd to the qemu driver
  bsc#1236378</changelog>
  <changelog author="jfehlig@suse.com" date="1746705600">- Add support for 'sparse' save image format
- Add support for parallel save and restore
  jsc#PED12599</changelog>
  <changelog author="jfehlig@suse.com" date="1749816000">- qemu: Fix failure when reverting to internal snapshots
  bsc#1244488</changelog>
  <changelog author="jfehlig@suse.com" date="1751371200">- qemu: Fix NVRAM image conversion check
  bsc#1245541
- qemu: Avoid crash in qemuDomainCheckCPU with unknown host CPU
- cpu: Do not call g_strv_contains on NULL list
- qemu: Be more forgiving when acquiring QUERY job when formatting
  domain XML</changelog>
  <changelog author="jfehlig@suse.com" date="1760356800">- qemu: Fix firmware auto-selection for SEV-SNP enabled VMs
  bsc#1241211</changelog>
  <changelog author="jfehlig@suse.com" date="1765886400">- CVE-2025-13193: qemu: Set umask for 'qemu-img' when creating
  external inactive snapshots
  bsc#1253703
- CVE-2025-12748: Check ACLs before parsing the whole domain XML
  bsc#1253278</changelog>
  <changelog author="jfehlig@suse.com" date="1770120000">- virsh: Introduce new hypervisor-cpu-models command
  jsc#PED-13062
- wireshark: Adapt to wireshark-4.6.0
  jsc#PED-15400</changelog>
</package>
<package pkgid="880c6377ac1b1dc1fc728709f7e11a1f0afca95127af5ee20846c6c0e6386b3c" name="libvirt" arch="src">
  <version epoch="0" ver="11.0.0" rel="150700.4.22.1"/>
  <changelog author="jfehlig@suse.com" date="1722859200">- Update to libvirt 10.6.0
  - jsc#PED-8909
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-6-0-2024-08-05</changelog>
  <changelog author="jfehlig@suse.com" date="1725364800">- Update to libvirt 10.7.0
  - CVE-2024-8235, bsc#1230024
  - Unconditionally disable building the interface driver
  - Remove SysV rc* compatibility symlinks
  - jsc#PED-8909
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-7-0-2024-09-02</changelog>
  <changelog author="jfehlig@suse.com" date="1727784000">- Update to libvirt 10.8.0
  - libvirt-daemon-driver-storage-core: Change dependency on
    nfs-utils from Requires to Recommends
  - Switch from YAJL to json-c for JSON parsing and formatting
  - jsc#PED-8909
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-8-0-2024-10-01</changelog>
  <changelog author="jfehlig@suse.com" date="1729598400">- spec: Use default_firewall_backend prjconf setting
- spec: Loosen nwfilter dependency
  boo#1231798</changelog>
  <changelog author="jfehlig@suse.com" date="1730462400">- Update to libvirt 10.9.0
  - jsc#PED-8909, jsc#PED-9854, jsc#PED-9855
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-9-0-2024-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1730721600">- json: do not call json_tokener_free with NULL
  Fixes potential SEGV in libvirt-nss module
  boo#1232726</changelog>
  <changelog author="jfehlig@suse.com" date="1733140800">- Update to libvirt 10.10.0
  - jsc#PED-8909, jsc#PED-9543, jsc#PED-9854, jsc#PED-9855
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-10-0-2024-12-02</changelog>
  <changelog author="jfehlig@suse.com" date="1734004800">- qemu: tpm: do not update profile name for transient domains
  Fixes a crash when starting a transient domain
  boo#1234438</changelog>
  <changelog author="jfehlig@suse.com" date="1735905600">- tests: Extend EOY check in virtimetest
  boo#1234995</changelog>
  <changelog author="jfehlig@suse.com" date="1736164800">- security: apparmor: Fix probing of apparmor availability on the
  VM host when using modular daemons
  bsc#1235079</changelog>
  <changelog author="dimstar@opensuse.org" date="1736337600">- Convert from tar_scm to obs_scm: allow OBS internal data
  structure to be more efficient by using .obscpio files</changelog>
  <changelog author="jfehlig@suse.com" date="1737028800">- Update to libvirt 11.0.0
  - jsc#PED-5899, jsc#PED-8909, jsc#PED-9543, jsc#PED-9854,
    jsc#PED-9855
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-0-0-2025-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1738584000">- spec: Change hooks dependency from libvirtd to the qemu driver
  bsc#1236378</changelog>
  <changelog author="jfehlig@suse.com" date="1746705600">- Add support for 'sparse' save image format
- Add support for parallel save and restore
  jsc#PED12599</changelog>
  <changelog author="jfehlig@suse.com" date="1749816000">- qemu: Fix failure when reverting to internal snapshots
  bsc#1244488</changelog>
  <changelog author="jfehlig@suse.com" date="1751371200">- qemu: Fix NVRAM image conversion check
  bsc#1245541
- qemu: Avoid crash in qemuDomainCheckCPU with unknown host CPU
- cpu: Do not call g_strv_contains on NULL list
- qemu: Be more forgiving when acquiring QUERY job when formatting
  domain XML</changelog>
  <changelog author="jfehlig@suse.com" date="1760356800">- qemu: Fix firmware auto-selection for SEV-SNP enabled VMs
  bsc#1241211</changelog>
  <changelog author="jfehlig@suse.com" date="1765886400">- CVE-2025-13193: qemu: Set umask for 'qemu-img' when creating
  external inactive snapshots
  bsc#1253703
- CVE-2025-12748: Check ACLs before parsing the whole domain XML
  bsc#1253278</changelog>
  <changelog author="jfehlig@suse.com" date="1770120000">- virsh: Introduce new hypervisor-cpu-models command
  jsc#PED-13062
- wireshark: Adapt to wireshark-4.6.0
  jsc#PED-15400</changelog>
  <changelog author="jfehlig@suse.com" date="1774353600">- qemu: Use numa-preplace instead of numad for numa placement advice
  bsc#1242979, jsc#PED-15886</changelog>
</package>
<package pkgid="5d5c6f4af97d30c75de826cb8edf4f323c5572f3f9b996f38b24fd1d135b9672" name="libvirt" arch="src">
  <version epoch="0" ver="11.0.0" rel="150700.4.7.1"/>
  <changelog author="jfehlig@suse.com" date="1714651200">- Update to libvirt 10.3.0
  - bsc#1220714
  - bsc#1226492
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-3-0-2024-05-02</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
  <changelog author="jfehlig@suse.com" date="1717416000">- Update to libvirt 10.4.0
  - network: use nftables to setup virtual network firewall rules
    boo#1201510
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-4-0-2024-06-03</changelog>
  <changelog author="jfehlig@suse.com" date="1719835200">- Update to libvirt 10.5.0
  - Introduce SEV-SNP support
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-5-0-2024-07-01</changelog>
  <changelog author="jfehlig@suse.com" date="1722859200">- Update to libvirt 10.6.0
  - jsc#PED-8909
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-6-0-2024-08-05</changelog>
  <changelog author="jfehlig@suse.com" date="1725364800">- Update to libvirt 10.7.0
  - CVE-2024-8235, bsc#1230024
  - Unconditionally disable building the interface driver
  - Remove SysV rc* compatibility symlinks
  - jsc#PED-8909
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-7-0-2024-09-02</changelog>
  <changelog author="jfehlig@suse.com" date="1727784000">- Update to libvirt 10.8.0
  - libvirt-daemon-driver-storage-core: Change dependency on
    nfs-utils from Requires to Recommends
  - Switch from YAJL to json-c for JSON parsing and formatting
  - jsc#PED-8909
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-8-0-2024-10-01</changelog>
  <changelog author="jfehlig@suse.com" date="1729598400">- spec: Use default_firewall_backend prjconf setting
- spec: Loosen nwfilter dependency
  boo#1231798</changelog>
  <changelog author="jfehlig@suse.com" date="1730462400">- Update to libvirt 10.9.0
  - jsc#PED-8909, jsc#PED-9854, jsc#PED-9855
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-9-0-2024-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1730721600">- json: do not call json_tokener_free with NULL
  Fixes potential SEGV in libvirt-nss module
  boo#1232726</changelog>
  <changelog author="jfehlig@suse.com" date="1733140800">- Update to libvirt 10.10.0
  - jsc#PED-8909, jsc#PED-9543, jsc#PED-9854, jsc#PED-9855
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-10-0-2024-12-02</changelog>
  <changelog author="jfehlig@suse.com" date="1734004800">- qemu: tpm: do not update profile name for transient domains
  Fixes a crash when starting a transient domain
  boo#1234438</changelog>
  <changelog author="jfehlig@suse.com" date="1735905600">- tests: Extend EOY check in virtimetest
  boo#1234995</changelog>
  <changelog author="jfehlig@suse.com" date="1736164800">- security: apparmor: Fix probing of apparmor availability on the
  VM host when using modular daemons
  bsc#1235079</changelog>
  <changelog author="dimstar@opensuse.org" date="1736337600">- Convert from tar_scm to obs_scm: allow OBS internal data
  structure to be more efficient by using .obscpio files</changelog>
  <changelog author="jfehlig@suse.com" date="1737028800">- Update to libvirt 11.0.0
  - jsc#PED-5899, jsc#PED-8909, jsc#PED-9543, jsc#PED-9854,
    jsc#PED-9855
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-0-0-2025-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1738584000">- spec: Change hooks dependency from libvirtd to the qemu driver
  bsc#1236378</changelog>
  <changelog author="jfehlig@suse.com" date="1746705600">- Add support for 'sparse' save image format
- Add support for parallel save and restore
  jsc#PED12599</changelog>
  <changelog author="jfehlig@suse.com" date="1749816000">- qemu: Fix failure when reverting to internal snapshots
  bsc#1244488</changelog>
  <changelog author="jfehlig@suse.com" date="1751371200">- qemu: Fix NVRAM image conversion check
  bsc#1245541
- qemu: Avoid crash in qemuDomainCheckCPU with unknown host CPU
- cpu: Do not call g_strv_contains on NULL list
- qemu: Be more forgiving when acquiring QUERY job when formatting
  domain XML</changelog>
</package>
<package pkgid="3857befdaddf4b5cc0e83c01308f34cab63c8cbdfddec3f97f9bd5ed4b3a91ad" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="11.0.0" rel="150700.4.10.1"/>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
  <changelog author="jfehlig@suse.com" date="1717416000">- Update to libvirt 10.4.0
  - network: use nftables to setup virtual network firewall rules
    boo#1201510
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-4-0-2024-06-03</changelog>
  <changelog author="jfehlig@suse.com" date="1719835200">- Update to libvirt 10.5.0
  - Introduce SEV-SNP support
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-5-0-2024-07-01</changelog>
  <changelog author="jfehlig@suse.com" date="1722859200">- Update to libvirt 10.6.0
  - jsc#PED-8909
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-6-0-2024-08-05</changelog>
  <changelog author="jfehlig@suse.com" date="1725364800">- Update to libvirt 10.7.0
  - CVE-2024-8235, bsc#1230024
  - Unconditionally disable building the interface driver
  - Remove SysV rc* compatibility symlinks
  - jsc#PED-8909
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-7-0-2024-09-02</changelog>
  <changelog author="jfehlig@suse.com" date="1727784000">- Update to libvirt 10.8.0
  - libvirt-daemon-driver-storage-core: Change dependency on
    nfs-utils from Requires to Recommends
  - Switch from YAJL to json-c for JSON parsing and formatting
  - jsc#PED-8909
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-8-0-2024-10-01</changelog>
  <changelog author="jfehlig@suse.com" date="1729598400">- spec: Use default_firewall_backend prjconf setting
- spec: Loosen nwfilter dependency
  boo#1231798</changelog>
  <changelog author="jfehlig@suse.com" date="1730462400">- Update to libvirt 10.9.0
  - jsc#PED-8909, jsc#PED-9854, jsc#PED-9855
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-9-0-2024-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1730721600">- json: do not call json_tokener_free with NULL
  Fixes potential SEGV in libvirt-nss module
  boo#1232726</changelog>
  <changelog author="jfehlig@suse.com" date="1733140800">- Update to libvirt 10.10.0
  - jsc#PED-8909, jsc#PED-9543, jsc#PED-9854, jsc#PED-9855
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-10-0-2024-12-02</changelog>
  <changelog author="jfehlig@suse.com" date="1734004800">- qemu: tpm: do not update profile name for transient domains
  Fixes a crash when starting a transient domain
  boo#1234438</changelog>
  <changelog author="jfehlig@suse.com" date="1735905600">- tests: Extend EOY check in virtimetest
  boo#1234995</changelog>
  <changelog author="jfehlig@suse.com" date="1736164800">- security: apparmor: Fix probing of apparmor availability on the
  VM host when using modular daemons
  bsc#1235079</changelog>
  <changelog author="dimstar@opensuse.org" date="1736337600">- Convert from tar_scm to obs_scm: allow OBS internal data
  structure to be more efficient by using .obscpio files</changelog>
  <changelog author="jfehlig@suse.com" date="1737028800">- Update to libvirt 11.0.0
  - jsc#PED-5899, jsc#PED-8909, jsc#PED-9543, jsc#PED-9854,
    jsc#PED-9855
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-0-0-2025-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1738584000">- spec: Change hooks dependency from libvirtd to the qemu driver
  bsc#1236378</changelog>
  <changelog author="jfehlig@suse.com" date="1746705600">- Add support for 'sparse' save image format
- Add support for parallel save and restore
  jsc#PED12599</changelog>
  <changelog author="jfehlig@suse.com" date="1749816000">- qemu: Fix failure when reverting to internal snapshots
  bsc#1244488</changelog>
  <changelog author="jfehlig@suse.com" date="1751371200">- qemu: Fix NVRAM image conversion check
  bsc#1245541
- qemu: Avoid crash in qemuDomainCheckCPU with unknown host CPU
- cpu: Do not call g_strv_contains on NULL list
- qemu: Be more forgiving when acquiring QUERY job when formatting
  domain XML</changelog>
  <changelog author="jfehlig@suse.com" date="1760356800">- qemu: Fix firmware auto-selection for SEV-SNP enabled VMs
  bsc#1241211</changelog>
</package>
<package pkgid="4aca83b3b95cba745fd4afd0e8699beff6a1038d75fee5638ccf5152c05056e0" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="11.0.0" rel="150700.4.13.1"/>
  <changelog author="jfehlig@suse.com" date="1717416000">- Update to libvirt 10.4.0
  - network: use nftables to setup virtual network firewall rules
    boo#1201510
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-4-0-2024-06-03</changelog>
  <changelog author="jfehlig@suse.com" date="1719835200">- Update to libvirt 10.5.0
  - Introduce SEV-SNP support
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-5-0-2024-07-01</changelog>
  <changelog author="jfehlig@suse.com" date="1722859200">- Update to libvirt 10.6.0
  - jsc#PED-8909
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-6-0-2024-08-05</changelog>
  <changelog author="jfehlig@suse.com" date="1725364800">- Update to libvirt 10.7.0
  - CVE-2024-8235, bsc#1230024
  - Unconditionally disable building the interface driver
  - Remove SysV rc* compatibility symlinks
  - jsc#PED-8909
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-7-0-2024-09-02</changelog>
  <changelog author="jfehlig@suse.com" date="1727784000">- Update to libvirt 10.8.0
  - libvirt-daemon-driver-storage-core: Change dependency on
    nfs-utils from Requires to Recommends
  - Switch from YAJL to json-c for JSON parsing and formatting
  - jsc#PED-8909
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-8-0-2024-10-01</changelog>
  <changelog author="jfehlig@suse.com" date="1729598400">- spec: Use default_firewall_backend prjconf setting
- spec: Loosen nwfilter dependency
  boo#1231798</changelog>
  <changelog author="jfehlig@suse.com" date="1730462400">- Update to libvirt 10.9.0
  - jsc#PED-8909, jsc#PED-9854, jsc#PED-9855
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-9-0-2024-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1730721600">- json: do not call json_tokener_free with NULL
  Fixes potential SEGV in libvirt-nss module
  boo#1232726</changelog>
  <changelog author="jfehlig@suse.com" date="1733140800">- Update to libvirt 10.10.0
  - jsc#PED-8909, jsc#PED-9543, jsc#PED-9854, jsc#PED-9855
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-10-0-2024-12-02</changelog>
  <changelog author="jfehlig@suse.com" date="1734004800">- qemu: tpm: do not update profile name for transient domains
  Fixes a crash when starting a transient domain
  boo#1234438</changelog>
  <changelog author="jfehlig@suse.com" date="1735905600">- tests: Extend EOY check in virtimetest
  boo#1234995</changelog>
  <changelog author="jfehlig@suse.com" date="1736164800">- security: apparmor: Fix probing of apparmor availability on the
  VM host when using modular daemons
  bsc#1235079</changelog>
  <changelog author="dimstar@opensuse.org" date="1736337600">- Convert from tar_scm to obs_scm: allow OBS internal data
  structure to be more efficient by using .obscpio files</changelog>
  <changelog author="jfehlig@suse.com" date="1737028800">- Update to libvirt 11.0.0
  - jsc#PED-5899, jsc#PED-8909, jsc#PED-9543, jsc#PED-9854,
    jsc#PED-9855
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-0-0-2025-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1738584000">- spec: Change hooks dependency from libvirtd to the qemu driver
  bsc#1236378</changelog>
  <changelog author="jfehlig@suse.com" date="1746705600">- Add support for 'sparse' save image format
- Add support for parallel save and restore
  jsc#PED12599</changelog>
  <changelog author="jfehlig@suse.com" date="1749816000">- qemu: Fix failure when reverting to internal snapshots
  bsc#1244488</changelog>
  <changelog author="jfehlig@suse.com" date="1751371200">- qemu: Fix NVRAM image conversion check
  bsc#1245541
- qemu: Avoid crash in qemuDomainCheckCPU with unknown host CPU
- cpu: Do not call g_strv_contains on NULL list
- qemu: Be more forgiving when acquiring QUERY job when formatting
  domain XML</changelog>
  <changelog author="jfehlig@suse.com" date="1760356800">- qemu: Fix firmware auto-selection for SEV-SNP enabled VMs
  bsc#1241211</changelog>
  <changelog author="jfehlig@suse.com" date="1765886400">- CVE-2025-13193: qemu: Set umask for 'qemu-img' when creating
  external inactive snapshots
  bsc#1253703
- CVE-2025-12748: Check ACLs before parsing the whole domain XML
  bsc#1253278</changelog>
</package>
<package pkgid="ee6d77a90fadced65a1606a8cdb361c893fce208bb2bda0ee3485ef2c5f14f9f" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="11.0.0" rel="150700.4.16.1"/>
  <changelog author="jfehlig@suse.com" date="1719835200">- Update to libvirt 10.5.0
  - Introduce SEV-SNP support
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-5-0-2024-07-01</changelog>
  <changelog author="jfehlig@suse.com" date="1722859200">- Update to libvirt 10.6.0
  - jsc#PED-8909
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-6-0-2024-08-05</changelog>
  <changelog author="jfehlig@suse.com" date="1725364800">- Update to libvirt 10.7.0
  - CVE-2024-8235, bsc#1230024
  - Unconditionally disable building the interface driver
  - Remove SysV rc* compatibility symlinks
  - jsc#PED-8909
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-7-0-2024-09-02</changelog>
  <changelog author="jfehlig@suse.com" date="1727784000">- Update to libvirt 10.8.0
  - libvirt-daemon-driver-storage-core: Change dependency on
    nfs-utils from Requires to Recommends
  - Switch from YAJL to json-c for JSON parsing and formatting
  - jsc#PED-8909
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-8-0-2024-10-01</changelog>
  <changelog author="jfehlig@suse.com" date="1729598400">- spec: Use default_firewall_backend prjconf setting
- spec: Loosen nwfilter dependency
  boo#1231798</changelog>
  <changelog author="jfehlig@suse.com" date="1730462400">- Update to libvirt 10.9.0
  - jsc#PED-8909, jsc#PED-9854, jsc#PED-9855
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-9-0-2024-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1730721600">- json: do not call json_tokener_free with NULL
  Fixes potential SEGV in libvirt-nss module
  boo#1232726</changelog>
  <changelog author="jfehlig@suse.com" date="1733140800">- Update to libvirt 10.10.0
  - jsc#PED-8909, jsc#PED-9543, jsc#PED-9854, jsc#PED-9855
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-10-0-2024-12-02</changelog>
  <changelog author="jfehlig@suse.com" date="1734004800">- qemu: tpm: do not update profile name for transient domains
  Fixes a crash when starting a transient domain
  boo#1234438</changelog>
  <changelog author="jfehlig@suse.com" date="1735905600">- tests: Extend EOY check in virtimetest
  boo#1234995</changelog>
  <changelog author="jfehlig@suse.com" date="1736164800">- security: apparmor: Fix probing of apparmor availability on the
  VM host when using modular daemons
  bsc#1235079</changelog>
  <changelog author="dimstar@opensuse.org" date="1736337600">- Convert from tar_scm to obs_scm: allow OBS internal data
  structure to be more efficient by using .obscpio files</changelog>
  <changelog author="jfehlig@suse.com" date="1737028800">- Update to libvirt 11.0.0
  - jsc#PED-5899, jsc#PED-8909, jsc#PED-9543, jsc#PED-9854,
    jsc#PED-9855
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-0-0-2025-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1738584000">- spec: Change hooks dependency from libvirtd to the qemu driver
  bsc#1236378</changelog>
  <changelog author="jfehlig@suse.com" date="1746705600">- Add support for 'sparse' save image format
- Add support for parallel save and restore
  jsc#PED12599</changelog>
  <changelog author="jfehlig@suse.com" date="1749816000">- qemu: Fix failure when reverting to internal snapshots
  bsc#1244488</changelog>
  <changelog author="jfehlig@suse.com" date="1751371200">- qemu: Fix NVRAM image conversion check
  bsc#1245541
- qemu: Avoid crash in qemuDomainCheckCPU with unknown host CPU
- cpu: Do not call g_strv_contains on NULL list
- qemu: Be more forgiving when acquiring QUERY job when formatting
  domain XML</changelog>
  <changelog author="jfehlig@suse.com" date="1760356800">- qemu: Fix firmware auto-selection for SEV-SNP enabled VMs
  bsc#1241211</changelog>
  <changelog author="jfehlig@suse.com" date="1765886400">- CVE-2025-13193: qemu: Set umask for 'qemu-img' when creating
  external inactive snapshots
  bsc#1253703
- CVE-2025-12748: Check ACLs before parsing the whole domain XML
  bsc#1253278</changelog>
  <changelog author="jfehlig@suse.com" date="1770120000">- virsh: Introduce new hypervisor-cpu-models command
  jsc#PED-13062
- wireshark: Adapt to wireshark-4.6.0
  jsc#PED-15400</changelog>
</package>
<package pkgid="899bef0218511cf636862062b114dd3a9f0f02bcc3b0e603bc76f4849796e951" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="11.0.0" rel="150700.4.19.1"/>
  <changelog author="jfehlig@suse.com" date="1719835200">- Update to libvirt 10.5.0
  - Introduce SEV-SNP support
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-5-0-2024-07-01</changelog>
  <changelog author="jfehlig@suse.com" date="1722859200">- Update to libvirt 10.6.0
  - jsc#PED-8909
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-6-0-2024-08-05</changelog>
  <changelog author="jfehlig@suse.com" date="1725364800">- Update to libvirt 10.7.0
  - CVE-2024-8235, bsc#1230024
  - Unconditionally disable building the interface driver
  - Remove SysV rc* compatibility symlinks
  - jsc#PED-8909
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-7-0-2024-09-02</changelog>
  <changelog author="jfehlig@suse.com" date="1727784000">- Update to libvirt 10.8.0
  - libvirt-daemon-driver-storage-core: Change dependency on
    nfs-utils from Requires to Recommends
  - Switch from YAJL to json-c for JSON parsing and formatting
  - jsc#PED-8909
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-8-0-2024-10-01</changelog>
  <changelog author="jfehlig@suse.com" date="1729598400">- spec: Use default_firewall_backend prjconf setting
- spec: Loosen nwfilter dependency
  boo#1231798</changelog>
  <changelog author="jfehlig@suse.com" date="1730462400">- Update to libvirt 10.9.0
  - jsc#PED-8909, jsc#PED-9854, jsc#PED-9855
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-9-0-2024-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1730721600">- json: do not call json_tokener_free with NULL
  Fixes potential SEGV in libvirt-nss module
  boo#1232726</changelog>
  <changelog author="jfehlig@suse.com" date="1733140800">- Update to libvirt 10.10.0
  - jsc#PED-8909, jsc#PED-9543, jsc#PED-9854, jsc#PED-9855
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-10-0-2024-12-02</changelog>
  <changelog author="jfehlig@suse.com" date="1734004800">- qemu: tpm: do not update profile name for transient domains
  Fixes a crash when starting a transient domain
  boo#1234438</changelog>
  <changelog author="jfehlig@suse.com" date="1735905600">- tests: Extend EOY check in virtimetest
  boo#1234995</changelog>
  <changelog author="jfehlig@suse.com" date="1736164800">- security: apparmor: Fix probing of apparmor availability on the
  VM host when using modular daemons
  bsc#1235079</changelog>
  <changelog author="dimstar@opensuse.org" date="1736337600">- Convert from tar_scm to obs_scm: allow OBS internal data
  structure to be more efficient by using .obscpio files</changelog>
  <changelog author="jfehlig@suse.com" date="1737028800">- Update to libvirt 11.0.0
  - jsc#PED-5899, jsc#PED-8909, jsc#PED-9543, jsc#PED-9854,
    jsc#PED-9855
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-0-0-2025-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1738584000">- spec: Change hooks dependency from libvirtd to the qemu driver
  bsc#1236378</changelog>
  <changelog author="jfehlig@suse.com" date="1746705600">- Add support for 'sparse' save image format
- Add support for parallel save and restore
  jsc#PED12599</changelog>
  <changelog author="jfehlig@suse.com" date="1749816000">- qemu: Fix failure when reverting to internal snapshots
  bsc#1244488</changelog>
  <changelog author="jfehlig@suse.com" date="1751371200">- qemu: Fix NVRAM image conversion check
  bsc#1245541
- qemu: Avoid crash in qemuDomainCheckCPU with unknown host CPU
- cpu: Do not call g_strv_contains on NULL list
- qemu: Be more forgiving when acquiring QUERY job when formatting
  domain XML</changelog>
  <changelog author="jfehlig@suse.com" date="1760356800">- qemu: Fix firmware auto-selection for SEV-SNP enabled VMs
  bsc#1241211</changelog>
  <changelog author="jfehlig@suse.com" date="1765886400">- CVE-2025-13193: qemu: Set umask for 'qemu-img' when creating
  external inactive snapshots
  bsc#1253703
- CVE-2025-12748: Check ACLs before parsing the whole domain XML
  bsc#1253278</changelog>
  <changelog author="jfehlig@suse.com" date="1770120000">- virsh: Introduce new hypervisor-cpu-models command
  jsc#PED-13062
- wireshark: Adapt to wireshark-4.6.0
  jsc#PED-15400</changelog>
</package>
<package pkgid="6db3d574a9afe551eb08f2d322c46ae43991afeea1de3ae7c4bcc78165488b3d" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="11.0.0" rel="150700.4.22.1"/>
  <changelog author="jfehlig@suse.com" date="1722859200">- Update to libvirt 10.6.0
  - jsc#PED-8909
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-6-0-2024-08-05</changelog>
  <changelog author="jfehlig@suse.com" date="1725364800">- Update to libvirt 10.7.0
  - CVE-2024-8235, bsc#1230024
  - Unconditionally disable building the interface driver
  - Remove SysV rc* compatibility symlinks
  - jsc#PED-8909
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-7-0-2024-09-02</changelog>
  <changelog author="jfehlig@suse.com" date="1727784000">- Update to libvirt 10.8.0
  - libvirt-daemon-driver-storage-core: Change dependency on
    nfs-utils from Requires to Recommends
  - Switch from YAJL to json-c for JSON parsing and formatting
  - jsc#PED-8909
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-8-0-2024-10-01</changelog>
  <changelog author="jfehlig@suse.com" date="1729598400">- spec: Use default_firewall_backend prjconf setting
- spec: Loosen nwfilter dependency
  boo#1231798</changelog>
  <changelog author="jfehlig@suse.com" date="1730462400">- Update to libvirt 10.9.0
  - jsc#PED-8909, jsc#PED-9854, jsc#PED-9855
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-9-0-2024-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1730721600">- json: do not call json_tokener_free with NULL
  Fixes potential SEGV in libvirt-nss module
  boo#1232726</changelog>
  <changelog author="jfehlig@suse.com" date="1733140800">- Update to libvirt 10.10.0
  - jsc#PED-8909, jsc#PED-9543, jsc#PED-9854, jsc#PED-9855
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-10-0-2024-12-02</changelog>
  <changelog author="jfehlig@suse.com" date="1734004800">- qemu: tpm: do not update profile name for transient domains
  Fixes a crash when starting a transient domain
  boo#1234438</changelog>
  <changelog author="jfehlig@suse.com" date="1735905600">- tests: Extend EOY check in virtimetest
  boo#1234995</changelog>
  <changelog author="jfehlig@suse.com" date="1736164800">- security: apparmor: Fix probing of apparmor availability on the
  VM host when using modular daemons
  bsc#1235079</changelog>
  <changelog author="dimstar@opensuse.org" date="1736337600">- Convert from tar_scm to obs_scm: allow OBS internal data
  structure to be more efficient by using .obscpio files</changelog>
  <changelog author="jfehlig@suse.com" date="1737028800">- Update to libvirt 11.0.0
  - jsc#PED-5899, jsc#PED-8909, jsc#PED-9543, jsc#PED-9854,
    jsc#PED-9855
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-0-0-2025-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1738584000">- spec: Change hooks dependency from libvirtd to the qemu driver
  bsc#1236378</changelog>
  <changelog author="jfehlig@suse.com" date="1746705600">- Add support for 'sparse' save image format
- Add support for parallel save and restore
  jsc#PED12599</changelog>
  <changelog author="jfehlig@suse.com" date="1749816000">- qemu: Fix failure when reverting to internal snapshots
  bsc#1244488</changelog>
  <changelog author="jfehlig@suse.com" date="1751371200">- qemu: Fix NVRAM image conversion check
  bsc#1245541
- qemu: Avoid crash in qemuDomainCheckCPU with unknown host CPU
- cpu: Do not call g_strv_contains on NULL list
- qemu: Be more forgiving when acquiring QUERY job when formatting
  domain XML</changelog>
  <changelog author="jfehlig@suse.com" date="1760356800">- qemu: Fix firmware auto-selection for SEV-SNP enabled VMs
  bsc#1241211</changelog>
  <changelog author="jfehlig@suse.com" date="1765886400">- CVE-2025-13193: qemu: Set umask for 'qemu-img' when creating
  external inactive snapshots
  bsc#1253703
- CVE-2025-12748: Check ACLs before parsing the whole domain XML
  bsc#1253278</changelog>
  <changelog author="jfehlig@suse.com" date="1770120000">- virsh: Introduce new hypervisor-cpu-models command
  jsc#PED-13062
- wireshark: Adapt to wireshark-4.6.0
  jsc#PED-15400</changelog>
  <changelog author="jfehlig@suse.com" date="1774353600">- qemu: Use numa-preplace instead of numad for numa placement advice
  bsc#1242979, jsc#PED-15886</changelog>
</package>
<package pkgid="7a1aea78b23a312b9e7f1dc31cbc7eeed333e44c0ed467edaac4070110d27304" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="11.0.0" rel="150700.4.7.1"/>
  <changelog author="jfehlig@suse.com" date="1714651200">- Update to libvirt 10.3.0
  - bsc#1220714
  - bsc#1226492
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-3-0-2024-05-02</changelog>
  <changelog author="jfehlig@suse.com" date="1715169600">- CVE-2024-4418: rpc: ensure temporary GSource is removed from
  client event loop
  bsc#1223849
- libxl: Fix domxml-to-native conversion
  bsc#1222584</changelog>
  <changelog author="jfehlig@suse.com" date="1717416000">- Update to libvirt 10.4.0
  - network: use nftables to setup virtual network firewall rules
    boo#1201510
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-4-0-2024-06-03</changelog>
  <changelog author="jfehlig@suse.com" date="1719835200">- Update to libvirt 10.5.0
  - Introduce SEV-SNP support
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-5-0-2024-07-01</changelog>
  <changelog author="jfehlig@suse.com" date="1722859200">- Update to libvirt 10.6.0
  - jsc#PED-8909
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-6-0-2024-08-05</changelog>
  <changelog author="jfehlig@suse.com" date="1725364800">- Update to libvirt 10.7.0
  - CVE-2024-8235, bsc#1230024
  - Unconditionally disable building the interface driver
  - Remove SysV rc* compatibility symlinks
  - jsc#PED-8909
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-7-0-2024-09-02</changelog>
  <changelog author="jfehlig@suse.com" date="1727784000">- Update to libvirt 10.8.0
  - libvirt-daemon-driver-storage-core: Change dependency on
    nfs-utils from Requires to Recommends
  - Switch from YAJL to json-c for JSON parsing and formatting
  - jsc#PED-8909
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-8-0-2024-10-01</changelog>
  <changelog author="jfehlig@suse.com" date="1729598400">- spec: Use default_firewall_backend prjconf setting
- spec: Loosen nwfilter dependency
  boo#1231798</changelog>
  <changelog author="jfehlig@suse.com" date="1730462400">- Update to libvirt 10.9.0
  - jsc#PED-8909, jsc#PED-9854, jsc#PED-9855
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-9-0-2024-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1730721600">- json: do not call json_tokener_free with NULL
  Fixes potential SEGV in libvirt-nss module
  boo#1232726</changelog>
  <changelog author="jfehlig@suse.com" date="1733140800">- Update to libvirt 10.10.0
  - jsc#PED-8909, jsc#PED-9543, jsc#PED-9854, jsc#PED-9855
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v10-10-0-2024-12-02</changelog>
  <changelog author="jfehlig@suse.com" date="1734004800">- qemu: tpm: do not update profile name for transient domains
  Fixes a crash when starting a transient domain
  boo#1234438</changelog>
  <changelog author="jfehlig@suse.com" date="1735905600">- tests: Extend EOY check in virtimetest
  boo#1234995</changelog>
  <changelog author="jfehlig@suse.com" date="1736164800">- security: apparmor: Fix probing of apparmor availability on the
  VM host when using modular daemons
  bsc#1235079</changelog>
  <changelog author="dimstar@opensuse.org" date="1736337600">- Convert from tar_scm to obs_scm: allow OBS internal data
  structure to be more efficient by using .obscpio files</changelog>
  <changelog author="jfehlig@suse.com" date="1737028800">- Update to libvirt 11.0.0
  - jsc#PED-5899, jsc#PED-8909, jsc#PED-9543, jsc#PED-9854,
    jsc#PED-9855
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v11-0-0-2025-01-15</changelog>
  <changelog author="jfehlig@suse.com" date="1738584000">- spec: Change hooks dependency from libvirtd to the qemu driver
  bsc#1236378</changelog>
  <changelog author="jfehlig@suse.com" date="1746705600">- Add support for 'sparse' save image format
- Add support for parallel save and restore
  jsc#PED12599</changelog>
  <changelog author="jfehlig@suse.com" date="1749816000">- qemu: Fix failure when reverting to internal snapshots
  bsc#1244488</changelog>
  <changelog author="jfehlig@suse.com" date="1751371200">- qemu: Fix NVRAM image conversion check
  bsc#1245541
- qemu: Avoid crash in qemuDomainCheckCPU with unknown host CPU
- cpu: Do not call g_strv_contains on NULL list
- qemu: Be more forgiving when acquiring QUERY job when formatting
  domain XML</changelog>
</package>
<package pkgid="4366293477884bcf9c4d9bcee86360806b15a325c2d364664e3e72c862a30cb5" name="libvmtools-devel" arch="x86_64">
  <version epoch="0" ver="12.5.2" rel="150600.3.12.1"/>
  <changelog author="kallan@suse.com" date="1694001600">- Update to 12.3.0 (build 22234872) (boo#1214850)
  - There are no new features in the open-vm-tools 12.3.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release integrates CVE-2023-20900 without the need for a patch.
    For more information on this vulnerability and its impact on VMware
    products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0019.html.
  - A tools.conf configuration setting is available to temporaily direct
    Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
    of ignoring file systems already frozen.
  - Building of the VMware Guest Authentication Service (VGAuth) using
    "xml-security-c" and "xerces-c" is being deprecated.
  - A number of Coverity reported issues have been addressed.
  - A number of GitHub issues and pull requests have been handled.
    Please see the Resolves Issues section of the Release Notes.
  - For issues resolved in this release, see the Resolved Issues section
    of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.0 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog
- Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests
- jsc-PED-1344 - reinable building containerinfo plugin for SLES 15 SP4.
- Drop patch now contained in 12.3.0:
  + 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch
  + 0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  + 2023-20867-Remove-some-dead-code.patch
  + CVE-20230-20900.patch</changelog>
  <changelog author="meissner@suse.com" date="1695297600">- open-vm-tools is built with containerinfo plugin from 15 sp3 onwards</changelog>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697976000">- Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer
  needed, nor used (since 12.3.0 release).</changelog>
  <changelog author="kallan@suse.com" date="1698667200">- Update to 12.3.5 (build 22544099) (boo#1216670)
  - There are no new features in the open-vm-tools 12.3.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release resolves CVE-2023-34058. For more information on this
    vulnerability and its impact on VMware products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0024.html.
  - This release resolves CVE-2023-34059 which only affects open-vm-tools.
    For more information on this vulnerability, please see the Resolved
    Issues section of the Release Notes.
  - A GitHub issue has been handled. Please see the Resolved Issues section
    of the Release Notes.
  - An update to the deployPkg plugin to coordinate with recent releases
    of cloud-init for improvement for guest VM customization.
  - For issues resolved in this release, see the Resolved Issues
    &lt;https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#resolved-issues&gt;
    section of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.5 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/ChangeLog
- Drop patch now contained in 12.3.5:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="kallan@suse.com" date="1702296000">- Fix (bsc#1217796) - Fix outdated libxmlsec1 dependency version.
  Updates to open-vm-tools for SLES 12 SP4 and SP5 are now being built
  againt against libxmlsec1-1-1.2.37. Update the spec file to now require
  libxmlsec1-openssl1 &gt;= 1.2.37.</changelog>
  <changelog author="dimstar@opensuse.org" date="1703073600">- Own %{_modulesloaddir}: used to be present via udev-mini -&gt; kmod
  - &gt; suse-module-tools dependency before.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1711195200">- update to 12.4.0:
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/open-vm-tools/ChangeLog
  There are no new features in the open-vm-tools 12.4.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been handled. Please see the Resolved
    Issues section of the Release Notes.
  * A number of issues flagged by Coverity have been addressed.
  * For issues resolved in this release, see the Resolved Issues
    section of the Release Notes.</changelog>
  <changelog author="kallan@suse.com" date="1711540800">- Remove protobuf &lt; 22 dependency from spec file (bsc#1217478)
  Required linking with additional absl libraries for sle_version &gt; 150400.
- Use (boo#1222089) for updating open-vm-tools to version 12.4.0.</changelog>
  <changelog author="kallan@suse.com" date="1719835200">- Update to 12.4.5 (build 23787635) (boo#1227181)
  - There are no new features in the open-vm-tools 12.4.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - A Github pull request and associated issue has been handled. Please
    see the Resolved Issues section of the Release Notes.
  - A number of issues flagged by Coverity and ShellCheck have been
    addressed.
  - A vmtoolsd process hang related to nested logging from an RPC Channel
    error has been fixed.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see: https://github.com/vmware/open-vm-tools/releases/tag/stable-12.4.5
  Release Notes are available at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/ReleaseNotes.md
  The granular changes that have gone into the 12.4.5 release are in the ChangeLog at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/open-vm-tools/ChangeLog</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1728648000">- convert to obs_scm
- update to 12.5.0 (boo#1231826):
  There are no new features in the open-vm-tools 12.5.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been integrated. Please see the
    Resolved Issues section of the Release Notes.
  * For a more complete list of issues resolved in this release,
    see the Resolved Issues section of the Release Notes.
  For complete details, see:
  https://github.com/vmware/open-vm-tools/releases/tag/stable-12.5.0
  Release Notes are available at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/ReleaseNotes.md
  The granular changes that have gone into the 12.5.0 release are
  in the ChangeLog at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/open-vm-tools/ChangeLog</changelog>
  <changelog author="kallan@suse.com" date="1740052800">- (bsc#1237180): Ensure vmtoolsd.service, vgauthd.service, and
  vmblock-fuse.service are set to enabled by default.</changelog>
  <changelog author="kallan@suse.com" date="1740484800">- Revert previous change (Thu Feb 20 23:08:43 UTC 2025).  The proposed
  solutions was non-standard.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742472000">- remove unused pcre build dependency</changelog>
  <changelog author="kallan@suse.com" date="1743076800">- (bsc#1237180): Ensure vmtoolsd.service and vgauthd.service
  are set to enabled by default. Do this by removing vmblock-fuse.service
  from the %pre section in the spec file.  vmblock-fuse.service still
  remains in the %pre desktop section.</changelog>
  <changelog author="kallan@suse.com" date="1744804800">- (bsc#1237147): Newer version of containerd do not have the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/api.
  Update detect-suse-location.patch to point to the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/vendor/github.com/containerd/containerd/api
  to find the needed files and update the tasks.proto file to import from
  github.com/containerd/containerd/vendor/github.com/containerd/containerd/api</changelog>
  <changelog author="hsk17@mail.de" date="1746273600">- Add open-vm-tools-12.5.0-gcc15.patch from upstream to fix
  gcc15 compile time error (boo#1241938)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1747137600">- update to 12.5.2 (bsc#1243106):
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/open-vm-tools/ChangeLog
  This release resolves CVE-2025-22247. For more information on this
  vulnerability and its impact on Broadcom products, see
  VMSA-2025-0007
  https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683</changelog>
</package>
<package pkgid="2f4d8d6c506d831138b30a97dd14942d0710bb312bf06a8cc3703fb2cbc64ecd" name="libvmtools-devel" arch="x86_64">
  <version epoch="0" ver="13.0.0" rel="150600.3.15.1"/>
  <changelog author="meissner@suse.com" date="1695297600">- open-vm-tools is built with containerinfo plugin from 15 sp3 onwards</changelog>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697976000">- Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer
  needed, nor used (since 12.3.0 release).</changelog>
  <changelog author="kallan@suse.com" date="1698667200">- Update to 12.3.5 (build 22544099) (boo#1216670)
  - There are no new features in the open-vm-tools 12.3.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release resolves CVE-2023-34058. For more information on this
    vulnerability and its impact on VMware products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0024.html.
  - This release resolves CVE-2023-34059 which only affects open-vm-tools.
    For more information on this vulnerability, please see the Resolved
    Issues section of the Release Notes.
  - A GitHub issue has been handled. Please see the Resolved Issues section
    of the Release Notes.
  - An update to the deployPkg plugin to coordinate with recent releases
    of cloud-init for improvement for guest VM customization.
  - For issues resolved in this release, see the Resolved Issues
    &lt;https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#resolved-issues&gt;
    section of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.5 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/ChangeLog
- Drop patch now contained in 12.3.5:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="kallan@suse.com" date="1702296000">- Fix (bsc#1217796) - Fix outdated libxmlsec1 dependency version.
  Updates to open-vm-tools for SLES 12 SP4 and SP5 are now being built
  againt against libxmlsec1-1-1.2.37. Update the spec file to now require
  libxmlsec1-openssl1 &gt;= 1.2.37.</changelog>
  <changelog author="dimstar@opensuse.org" date="1703073600">- Own %{_modulesloaddir}: used to be present via udev-mini -&gt; kmod
  - &gt; suse-module-tools dependency before.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1711195200">- update to 12.4.0:
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/open-vm-tools/ChangeLog
  There are no new features in the open-vm-tools 12.4.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been handled. Please see the Resolved
    Issues section of the Release Notes.
  * A number of issues flagged by Coverity have been addressed.
  * For issues resolved in this release, see the Resolved Issues
    section of the Release Notes.</changelog>
  <changelog author="kallan@suse.com" date="1711540800">- Remove protobuf &lt; 22 dependency from spec file (bsc#1217478)
  Required linking with additional absl libraries for sle_version &gt; 150400.
- Use (boo#1222089) for updating open-vm-tools to version 12.4.0.</changelog>
  <changelog author="kallan@suse.com" date="1719835200">- Update to 12.4.5 (build 23787635) (boo#1227181)
  - There are no new features in the open-vm-tools 12.4.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - A Github pull request and associated issue has been handled. Please
    see the Resolved Issues section of the Release Notes.
  - A number of issues flagged by Coverity and ShellCheck have been
    addressed.
  - A vmtoolsd process hang related to nested logging from an RPC Channel
    error has been fixed.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see: https://github.com/vmware/open-vm-tools/releases/tag/stable-12.4.5
  Release Notes are available at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/ReleaseNotes.md
  The granular changes that have gone into the 12.4.5 release are in the ChangeLog at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/open-vm-tools/ChangeLog</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1728648000">- convert to obs_scm
- update to 12.5.0 (boo#1231826):
  There are no new features in the open-vm-tools 12.5.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been integrated. Please see the
    Resolved Issues section of the Release Notes.
  * For a more complete list of issues resolved in this release,
    see the Resolved Issues section of the Release Notes.
  For complete details, see:
  https://github.com/vmware/open-vm-tools/releases/tag/stable-12.5.0
  Release Notes are available at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/ReleaseNotes.md
  The granular changes that have gone into the 12.5.0 release are
  in the ChangeLog at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/open-vm-tools/ChangeLog</changelog>
  <changelog author="kallan@suse.com" date="1740052800">- (bsc#1237180): Ensure vmtoolsd.service, vgauthd.service, and
  vmblock-fuse.service are set to enabled by default.</changelog>
  <changelog author="kallan@suse.com" date="1740484800">- Revert previous change (Thu Feb 20 23:08:43 UTC 2025).  The proposed
  solutions was non-standard.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742472000">- remove unused pcre build dependency</changelog>
  <changelog author="kallan@suse.com" date="1743076800">- (bsc#1237180): Ensure vmtoolsd.service and vgauthd.service
  are set to enabled by default. Do this by removing vmblock-fuse.service
  from the %pre section in the spec file.  vmblock-fuse.service still
  remains in the %pre desktop section.</changelog>
  <changelog author="kallan@suse.com" date="1744804800">- (bsc#1237147): Newer version of containerd do not have the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/api.
  Update detect-suse-location.patch to point to the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/vendor/github.com/containerd/containerd/api
  to find the needed files and update the tasks.proto file to import from
  github.com/containerd/containerd/vendor/github.com/containerd/containerd/api</changelog>
  <changelog author="hsk17@mail.de" date="1746273600">- Add open-vm-tools-12.5.0-gcc15.patch from upstream to fix
  gcc15 compile time error (boo#1241938)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1747137600">- update to 12.5.2 (bsc#1243106):
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/open-vm-tools/ChangeLog
  This release resolves CVE-2025-22247. For more information on this
  vulnerability and its impact on Broadcom products, see
  VMSA-2025-0007
  https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683</changelog>
  <changelog author="kallan@suse.com" date="1750420800">- Update to open-vm-tools 13.0.0 based on build 24696409. (boo#1245169):
  There are no new features in the open-vm-tools 13.0.0 release.  This is
  primarily a maintenance release that addresses a few issues, including:
  - The vm-support script has been updated to collect the open-vm-tools log
    files from the Linux guest and information from the systemd journal.
  - Github pull requests has been integrated and issues fixed.  Please see
    the Resolved Issues section of the Release Notes.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-13.0.0
  Release Notes are available at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/ReleaseNotes.md
  The granular changes that have gone into the 13.0.0 release are in the
  ChangeLog at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/open-vm-tools/ChangeLog
- Add patch:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  Currently the "telinit 6" command is used to reboot a Linux VM
  following Guest OS Customization.  As the classic Linux init system,
  SysVinit, is deprecated in favor of a newer init system, systemd,
  the telinit command may not be available on the base Linux OS.
  This change adds support to Guest OS Customization for the systemd init
  system.  If the modern init system, systemd, is available, then a
  "systemctl reboot" command will be used to trigger reboot.  Otherwise,
  the "telinit 6" command will be used assuming the traditional init
  system, SysVinit, is still available.
- Drop patch now contained in 13.0.0:
  open-vm-tools-12.5.0-gcc15.patch
- Ran /usr/lib/obs/service/source_validators/helpers/fix_changelog to fix changes
  file where source validator was failing.</changelog>
</package>
<package pkgid="032137c121de1297b6b809e443477a0407bb7d6fa3275d3e81c3546b08c7ed9a" name="libvmtools-devel" arch="x86_64">
  <version epoch="0" ver="13.0.0" rel="150600.3.18.1"/>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697976000">- Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer
  needed, nor used (since 12.3.0 release).</changelog>
  <changelog author="kallan@suse.com" date="1698667200">- Update to 12.3.5 (build 22544099) (boo#1216670)
  - There are no new features in the open-vm-tools 12.3.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release resolves CVE-2023-34058. For more information on this
    vulnerability and its impact on VMware products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0024.html.
  - This release resolves CVE-2023-34059 which only affects open-vm-tools.
    For more information on this vulnerability, please see the Resolved
    Issues section of the Release Notes.
  - A GitHub issue has been handled. Please see the Resolved Issues section
    of the Release Notes.
  - An update to the deployPkg plugin to coordinate with recent releases
    of cloud-init for improvement for guest VM customization.
  - For issues resolved in this release, see the Resolved Issues
    &lt;https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#resolved-issues&gt;
    section of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.5 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/ChangeLog
- Drop patch now contained in 12.3.5:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="kallan@suse.com" date="1702296000">- Fix (bsc#1217796) - Fix outdated libxmlsec1 dependency version.
  Updates to open-vm-tools for SLES 12 SP4 and SP5 are now being built
  againt against libxmlsec1-1-1.2.37. Update the spec file to now require
  libxmlsec1-openssl1 &gt;= 1.2.37.</changelog>
  <changelog author="dimstar@opensuse.org" date="1703073600">- Own %{_modulesloaddir}: used to be present via udev-mini -&gt; kmod
  - &gt; suse-module-tools dependency before.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1711195200">- update to 12.4.0:
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/open-vm-tools/ChangeLog
  There are no new features in the open-vm-tools 12.4.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been handled. Please see the Resolved
    Issues section of the Release Notes.
  * A number of issues flagged by Coverity have been addressed.
  * For issues resolved in this release, see the Resolved Issues
    section of the Release Notes.</changelog>
  <changelog author="kallan@suse.com" date="1711540800">- Remove protobuf &lt; 22 dependency from spec file (bsc#1217478)
  Required linking with additional absl libraries for sle_version &gt; 150400.
- Use (boo#1222089) for updating open-vm-tools to version 12.4.0.</changelog>
  <changelog author="kallan@suse.com" date="1719835200">- Update to 12.4.5 (build 23787635) (boo#1227181)
  - There are no new features in the open-vm-tools 12.4.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - A Github pull request and associated issue has been handled. Please
    see the Resolved Issues section of the Release Notes.
  - A number of issues flagged by Coverity and ShellCheck have been
    addressed.
  - A vmtoolsd process hang related to nested logging from an RPC Channel
    error has been fixed.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see: https://github.com/vmware/open-vm-tools/releases/tag/stable-12.4.5
  Release Notes are available at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/ReleaseNotes.md
  The granular changes that have gone into the 12.4.5 release are in the ChangeLog at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/open-vm-tools/ChangeLog</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1728648000">- convert to obs_scm
- update to 12.5.0 (boo#1231826):
  There are no new features in the open-vm-tools 12.5.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been integrated. Please see the
    Resolved Issues section of the Release Notes.
  * For a more complete list of issues resolved in this release,
    see the Resolved Issues section of the Release Notes.
  For complete details, see:
  https://github.com/vmware/open-vm-tools/releases/tag/stable-12.5.0
  Release Notes are available at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/ReleaseNotes.md
  The granular changes that have gone into the 12.5.0 release are
  in the ChangeLog at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/open-vm-tools/ChangeLog</changelog>
  <changelog author="kallan@suse.com" date="1740052800">- (bsc#1237180): Ensure vmtoolsd.service, vgauthd.service, and
  vmblock-fuse.service are set to enabled by default.</changelog>
  <changelog author="kallan@suse.com" date="1740484800">- Revert previous change (Thu Feb 20 23:08:43 UTC 2025).  The proposed
  solutions was non-standard.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742472000">- remove unused pcre build dependency</changelog>
  <changelog author="kallan@suse.com" date="1743076800">- (bsc#1237180): Ensure vmtoolsd.service and vgauthd.service
  are set to enabled by default. Do this by removing vmblock-fuse.service
  from the %pre section in the spec file.  vmblock-fuse.service still
  remains in the %pre desktop section.</changelog>
  <changelog author="kallan@suse.com" date="1744804800">- (bsc#1237147): Newer version of containerd do not have the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/api.
  Update detect-suse-location.patch to point to the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/vendor/github.com/containerd/containerd/api
  to find the needed files and update the tasks.proto file to import from
  github.com/containerd/containerd/vendor/github.com/containerd/containerd/api</changelog>
  <changelog author="hsk17@mail.de" date="1746273600">- Add open-vm-tools-12.5.0-gcc15.patch from upstream to fix
  gcc15 compile time error (boo#1241938)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1747137600">- update to 12.5.2 (bsc#1243106):
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/open-vm-tools/ChangeLog
  This release resolves CVE-2025-22247. For more information on this
  vulnerability and its impact on Broadcom products, see
  VMSA-2025-0007
  https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683</changelog>
  <changelog author="kallan@suse.com" date="1750420800">- Update to open-vm-tools 13.0.0 based on build 24696409. (boo#1245169):
  There are no new features in the open-vm-tools 13.0.0 release.  This is
  primarily a maintenance release that addresses a few issues, including:
  - The vm-support script has been updated to collect the open-vm-tools log
    files from the Linux guest and information from the systemd journal.
  - Github pull requests has been integrated and issues fixed.  Please see
    the Resolved Issues section of the Release Notes.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-13.0.0
  Release Notes are available at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/ReleaseNotes.md
  The granular changes that have gone into the 13.0.0 release are in the
  ChangeLog at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/open-vm-tools/ChangeLog
- Add patch:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  Currently the "telinit 6" command is used to reboot a Linux VM
  following Guest OS Customization.  As the classic Linux init system,
  SysVinit, is deprecated in favor of a newer init system, systemd,
  the telinit command may not be available on the base Linux OS.
  This change adds support to Guest OS Customization for the systemd init
  system.  If the modern init system, systemd, is available, then a
  "systemctl reboot" command will be used to trigger reboot.  Otherwise,
  the "telinit 6" command will be used assuming the traditional init
  system, SysVinit, is still available.
- Drop patch now contained in 13.0.0:
  open-vm-tools-12.5.0-gcc15.patch
- Ran /usr/lib/obs/service/source_validators/helpers/fix_changelog to fix changes
  file where source validator was failing.</changelog>
  <changelog author="kallan@suse.com" date="1758628800">- Fix (bsc#1250373 (CVE-2025-41244) - VUL-0: contains a local privilege
  escalation vulnerability.
  + Add patch:
  - CVE-2025-41244-1240-1300-SDMP.patch</changelog>
</package>
<package pkgid="fb4e03e4a2f018076f4b92167b99ff41025f237bd89ff4e07c2b0852074f67fc" name="libvmtools-devel" arch="x86_64">
  <version epoch="0" ver="13.0.10" rel="150600.3.24.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1697976000">- Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer
  needed, nor used (since 12.3.0 release).</changelog>
  <changelog author="kallan@suse.com" date="1698667200">- Update to 12.3.5 (build 22544099) (boo#1216670)
  - There are no new features in the open-vm-tools 12.3.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release resolves CVE-2023-34058. For more information on this
    vulnerability and its impact on VMware products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0024.html.
  - This release resolves CVE-2023-34059 which only affects open-vm-tools.
    For more information on this vulnerability, please see the Resolved
    Issues section of the Release Notes.
  - A GitHub issue has been handled. Please see the Resolved Issues section
    of the Release Notes.
  - An update to the deployPkg plugin to coordinate with recent releases
    of cloud-init for improvement for guest VM customization.
  - For issues resolved in this release, see the Resolved Issues
    &lt;https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#resolved-issues&gt;
    section of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.5 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/ChangeLog
- Drop patch now contained in 12.3.5:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="kallan@suse.com" date="1702296000">- Fix (bsc#1217796) - Fix outdated libxmlsec1 dependency version.
  Updates to open-vm-tools for SLES 12 SP4 and SP5 are now being built
  againt against libxmlsec1-1-1.2.37. Update the spec file to now require
  libxmlsec1-openssl1 &gt;= 1.2.37.</changelog>
  <changelog author="dimstar@opensuse.org" date="1703073600">- Own %{_modulesloaddir}: used to be present via udev-mini -&gt; kmod
  - &gt; suse-module-tools dependency before.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1711195200">- update to 12.4.0:
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/open-vm-tools/ChangeLog
  There are no new features in the open-vm-tools 12.4.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been handled. Please see the Resolved
    Issues section of the Release Notes.
  * A number of issues flagged by Coverity have been addressed.
  * For issues resolved in this release, see the Resolved Issues
    section of the Release Notes.</changelog>
  <changelog author="kallan@suse.com" date="1711540800">- Remove protobuf &lt; 22 dependency from spec file (bsc#1217478)
  Required linking with additional absl libraries for sle_version &gt; 150400.
- Use (boo#1222089) for updating open-vm-tools to version 12.4.0.</changelog>
  <changelog author="kallan@suse.com" date="1719835200">- Update to 12.4.5 (build 23787635) (boo#1227181)
  - There are no new features in the open-vm-tools 12.4.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - A Github pull request and associated issue has been handled. Please
    see the Resolved Issues section of the Release Notes.
  - A number of issues flagged by Coverity and ShellCheck have been
    addressed.
  - A vmtoolsd process hang related to nested logging from an RPC Channel
    error has been fixed.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see: https://github.com/vmware/open-vm-tools/releases/tag/stable-12.4.5
  Release Notes are available at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/ReleaseNotes.md
  The granular changes that have gone into the 12.4.5 release are in the ChangeLog at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/open-vm-tools/ChangeLog</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1728648000">- convert to obs_scm
- update to 12.5.0 (boo#1231826):
  There are no new features in the open-vm-tools 12.5.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been integrated. Please see the
    Resolved Issues section of the Release Notes.
  * For a more complete list of issues resolved in this release,
    see the Resolved Issues section of the Release Notes.
  For complete details, see:
  https://github.com/vmware/open-vm-tools/releases/tag/stable-12.5.0
  Release Notes are available at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/ReleaseNotes.md
  The granular changes that have gone into the 12.5.0 release are
  in the ChangeLog at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/open-vm-tools/ChangeLog</changelog>
  <changelog author="kallan@suse.com" date="1740052800">- (bsc#1237180): Ensure vmtoolsd.service, vgauthd.service, and
  vmblock-fuse.service are set to enabled by default.</changelog>
  <changelog author="kallan@suse.com" date="1740484800">- Revert previous change (Thu Feb 20 23:08:43 UTC 2025).  The proposed
  solutions was non-standard.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742472000">- remove unused pcre build dependency</changelog>
  <changelog author="kallan@suse.com" date="1743076800">- (bsc#1237180): Ensure vmtoolsd.service and vgauthd.service
  are set to enabled by default. Do this by removing vmblock-fuse.service
  from the %pre section in the spec file.  vmblock-fuse.service still
  remains in the %pre desktop section.</changelog>
  <changelog author="kallan@suse.com" date="1744804800">- (bsc#1237147): Newer version of containerd do not have the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/api.
  Update detect-suse-location.patch to point to the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/vendor/github.com/containerd/containerd/api
  to find the needed files and update the tasks.proto file to import from
  github.com/containerd/containerd/vendor/github.com/containerd/containerd/api</changelog>
  <changelog author="hsk17@mail.de" date="1746273600">- Add open-vm-tools-12.5.0-gcc15.patch from upstream to fix
  gcc15 compile time error (boo#1241938)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1747137600">- update to 12.5.2 (bsc#1243106):
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/open-vm-tools/ChangeLog
  This release resolves CVE-2025-22247. For more information on this
  vulnerability and its impact on Broadcom products, see
  VMSA-2025-0007
  https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683</changelog>
  <changelog author="kallan@suse.com" date="1750420800">- Update to open-vm-tools 13.0.0 based on build 24696409. (boo#1245169):
  There are no new features in the open-vm-tools 13.0.0 release.  This is
  primarily a maintenance release that addresses a few issues, including:
  - The vm-support script has been updated to collect the open-vm-tools log
    files from the Linux guest and information from the systemd journal.
  - Github pull requests has been integrated and issues fixed.  Please see
    the Resolved Issues section of the Release Notes.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-13.0.0
  Release Notes are available at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/ReleaseNotes.md
  The granular changes that have gone into the 13.0.0 release are in the
  ChangeLog at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/open-vm-tools/ChangeLog
- Add patch:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  Currently the "telinit 6" command is used to reboot a Linux VM
  following Guest OS Customization.  As the classic Linux init system,
  SysVinit, is deprecated in favor of a newer init system, systemd,
  the telinit command may not be available on the base Linux OS.
  This change adds support to Guest OS Customization for the systemd init
  system.  If the modern init system, systemd, is available, then a
  "systemctl reboot" command will be used to trigger reboot.  Otherwise,
  the "telinit 6" command will be used assuming the traditional init
  system, SysVinit, is still available.
- Drop patch now contained in 13.0.0:
  open-vm-tools-12.5.0-gcc15.patch
- Ran /usr/lib/obs/service/source_validators/helpers/fix_changelog to fix changes
  file where source validator was failing.</changelog>
  <changelog author="kallan@suse.com" date="1758628800">- Fix (bsc#1250373 (CVE-2025-41244) - VUL-0: contains a local privilege
  escalation vulnerability.
  + Add patch:
  - CVE-2025-41244-1240-1300-SDMP.patch</changelog>
  <changelog author="kallan@suse.com" date="1759320000">- Update to open-vm-tools 13.0.5 based on build 24915695. (boo#1250692):
  Please refer to the Release Notes at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/ReleaseNotes.md.
  The granular changes that have gone into the open-vm-tools 13.0.5 release
  are in the ChangeLog at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/open-vm-tools/ChangeLog.
  There are no new features in the open-vm-tools 13.0.5 release. This is
  primarily a maintenance release that addresses a security issue.
  This release resolves and includes the patch for CVE-2025-41244. For more
  information on this vulnerability and its impact on Broadcom products,
  see VMSA-2025-0015.
  A patch to address CVE-2025-41244 on earlier open-vm-tools releases is
  provided to the Linux community at CVE-2025-41244.patch.
  A minor enhancement has been made for Guest OS Customization. The
  DeployPkg plugin has been updated to use "systemctl reboot", if available.
  For a more complete list of issues addressed in this release, see the
  What's New and Resolved Issues section of the Release Notes.
- Drop patch now contained in 13.0.5:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  CVE-2025-41244-1240-1300-SDMP.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1769515200">- update to 13.0.10 based on build 25056151: (boo#1257357):
  Please refer to the Release Notes at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.10/ReleaseNotes.md.
  The granular changes that have gone into the open-vm-tools
  13.0.10 release are in the ChangeLog at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.10/open-vm-tools/ChangeLog.
  There are no new features in the open-vm-tools 13.0.10 release.
  This is primarily a maintenance release that addresses a fix.
  A minor enhancement has been made for Guest OS Customization. The
  DeployPkg plugin has been updated to handle a new cloud-init
  error code that signals a recoverable error and allow cloud-init
  to finish running.
  For a more complete description of what's new in this release,
  see the What's New and Resolved Issues sections of the Release
  Notes.</changelog>
</package>
<package pkgid="e28b083e7849b063da812bede007166dc5709514527c6a16a1a6a7efd79789ed" name="libvmtools-devel" arch="x86_64">
  <version epoch="0" ver="13.0.5" rel="150600.3.21.1"/>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697976000">- Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer
  needed, nor used (since 12.3.0 release).</changelog>
  <changelog author="kallan@suse.com" date="1698667200">- Update to 12.3.5 (build 22544099) (boo#1216670)
  - There are no new features in the open-vm-tools 12.3.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release resolves CVE-2023-34058. For more information on this
    vulnerability and its impact on VMware products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0024.html.
  - This release resolves CVE-2023-34059 which only affects open-vm-tools.
    For more information on this vulnerability, please see the Resolved
    Issues section of the Release Notes.
  - A GitHub issue has been handled. Please see the Resolved Issues section
    of the Release Notes.
  - An update to the deployPkg plugin to coordinate with recent releases
    of cloud-init for improvement for guest VM customization.
  - For issues resolved in this release, see the Resolved Issues
    &lt;https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#resolved-issues&gt;
    section of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.5 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/ChangeLog
- Drop patch now contained in 12.3.5:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="kallan@suse.com" date="1702296000">- Fix (bsc#1217796) - Fix outdated libxmlsec1 dependency version.
  Updates to open-vm-tools for SLES 12 SP4 and SP5 are now being built
  againt against libxmlsec1-1-1.2.37. Update the spec file to now require
  libxmlsec1-openssl1 &gt;= 1.2.37.</changelog>
  <changelog author="dimstar@opensuse.org" date="1703073600">- Own %{_modulesloaddir}: used to be present via udev-mini -&gt; kmod
  - &gt; suse-module-tools dependency before.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1711195200">- update to 12.4.0:
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/open-vm-tools/ChangeLog
  There are no new features in the open-vm-tools 12.4.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been handled. Please see the Resolved
    Issues section of the Release Notes.
  * A number of issues flagged by Coverity have been addressed.
  * For issues resolved in this release, see the Resolved Issues
    section of the Release Notes.</changelog>
  <changelog author="kallan@suse.com" date="1711540800">- Remove protobuf &lt; 22 dependency from spec file (bsc#1217478)
  Required linking with additional absl libraries for sle_version &gt; 150400.
- Use (boo#1222089) for updating open-vm-tools to version 12.4.0.</changelog>
  <changelog author="kallan@suse.com" date="1719835200">- Update to 12.4.5 (build 23787635) (boo#1227181)
  - There are no new features in the open-vm-tools 12.4.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - A Github pull request and associated issue has been handled. Please
    see the Resolved Issues section of the Release Notes.
  - A number of issues flagged by Coverity and ShellCheck have been
    addressed.
  - A vmtoolsd process hang related to nested logging from an RPC Channel
    error has been fixed.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see: https://github.com/vmware/open-vm-tools/releases/tag/stable-12.4.5
  Release Notes are available at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/ReleaseNotes.md
  The granular changes that have gone into the 12.4.5 release are in the ChangeLog at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/open-vm-tools/ChangeLog</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1728648000">- convert to obs_scm
- update to 12.5.0 (boo#1231826):
  There are no new features in the open-vm-tools 12.5.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been integrated. Please see the
    Resolved Issues section of the Release Notes.
  * For a more complete list of issues resolved in this release,
    see the Resolved Issues section of the Release Notes.
  For complete details, see:
  https://github.com/vmware/open-vm-tools/releases/tag/stable-12.5.0
  Release Notes are available at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/ReleaseNotes.md
  The granular changes that have gone into the 12.5.0 release are
  in the ChangeLog at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/open-vm-tools/ChangeLog</changelog>
  <changelog author="kallan@suse.com" date="1740052800">- (bsc#1237180): Ensure vmtoolsd.service, vgauthd.service, and
  vmblock-fuse.service are set to enabled by default.</changelog>
  <changelog author="kallan@suse.com" date="1740484800">- Revert previous change (Thu Feb 20 23:08:43 UTC 2025).  The proposed
  solutions was non-standard.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742472000">- remove unused pcre build dependency</changelog>
  <changelog author="kallan@suse.com" date="1743076800">- (bsc#1237180): Ensure vmtoolsd.service and vgauthd.service
  are set to enabled by default. Do this by removing vmblock-fuse.service
  from the %pre section in the spec file.  vmblock-fuse.service still
  remains in the %pre desktop section.</changelog>
  <changelog author="kallan@suse.com" date="1744804800">- (bsc#1237147): Newer version of containerd do not have the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/api.
  Update detect-suse-location.patch to point to the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/vendor/github.com/containerd/containerd/api
  to find the needed files and update the tasks.proto file to import from
  github.com/containerd/containerd/vendor/github.com/containerd/containerd/api</changelog>
  <changelog author="hsk17@mail.de" date="1746273600">- Add open-vm-tools-12.5.0-gcc15.patch from upstream to fix
  gcc15 compile time error (boo#1241938)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1747137600">- update to 12.5.2 (bsc#1243106):
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/open-vm-tools/ChangeLog
  This release resolves CVE-2025-22247. For more information on this
  vulnerability and its impact on Broadcom products, see
  VMSA-2025-0007
  https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683</changelog>
  <changelog author="kallan@suse.com" date="1750420800">- Update to open-vm-tools 13.0.0 based on build 24696409. (boo#1245169):
  There are no new features in the open-vm-tools 13.0.0 release.  This is
  primarily a maintenance release that addresses a few issues, including:
  - The vm-support script has been updated to collect the open-vm-tools log
    files from the Linux guest and information from the systemd journal.
  - Github pull requests has been integrated and issues fixed.  Please see
    the Resolved Issues section of the Release Notes.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-13.0.0
  Release Notes are available at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/ReleaseNotes.md
  The granular changes that have gone into the 13.0.0 release are in the
  ChangeLog at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/open-vm-tools/ChangeLog
- Add patch:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  Currently the "telinit 6" command is used to reboot a Linux VM
  following Guest OS Customization.  As the classic Linux init system,
  SysVinit, is deprecated in favor of a newer init system, systemd,
  the telinit command may not be available on the base Linux OS.
  This change adds support to Guest OS Customization for the systemd init
  system.  If the modern init system, systemd, is available, then a
  "systemctl reboot" command will be used to trigger reboot.  Otherwise,
  the "telinit 6" command will be used assuming the traditional init
  system, SysVinit, is still available.
- Drop patch now contained in 13.0.0:
  open-vm-tools-12.5.0-gcc15.patch
- Ran /usr/lib/obs/service/source_validators/helpers/fix_changelog to fix changes
  file where source validator was failing.</changelog>
  <changelog author="kallan@suse.com" date="1758628800">- Fix (bsc#1250373 (CVE-2025-41244) - VUL-0: contains a local privilege
  escalation vulnerability.
  + Add patch:
  - CVE-2025-41244-1240-1300-SDMP.patch</changelog>
  <changelog author="kallan@suse.com" date="1759320000">- Update to open-vm-tools 13.0.5 based on build 24915695. (boo#1250692):
  Please refer to the Release Notes at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/ReleaseNotes.md.
  The granular changes that have gone into the open-vm-tools 13.0.5 release
  are in the ChangeLog at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/open-vm-tools/ChangeLog.
  There are no new features in the open-vm-tools 13.0.5 release. This is
  primarily a maintenance release that addresses a security issue.
  This release resolves and includes the patch for CVE-2025-41244. For more
  information on this vulnerability and its impact on Broadcom products,
  see VMSA-2025-0015.
  A patch to address CVE-2025-41244 on earlier open-vm-tools releases is
  provided to the Linux community at CVE-2025-41244.patch.
  A minor enhancement has been made for Guest OS Customization. The
  DeployPkg plugin has been updated to use "systemctl reboot", if available.
  For a more complete list of issues addressed in this release, see the
  What's New and Resolved Issues section of the Release Notes.
- Drop patch now contained in 13.0.5:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  CVE-2025-41244-1240-1300-SDMP.patch</changelog>
</package>
<package pkgid="0bbb7e4e2a572adf08802931150ab0879658139a438f163145c9ce15f38cac0a" name="libvmtools-devel" arch="x86_64">
  <version epoch="0" ver="13.1.0" rel="150600.3.27.1"/>
  <changelog author="kallan@suse.com" date="1702296000">- Fix (bsc#1217796) - Fix outdated libxmlsec1 dependency version.
  Updates to open-vm-tools for SLES 12 SP4 and SP5 are now being built
  againt against libxmlsec1-1-1.2.37. Update the spec file to now require
  libxmlsec1-openssl1 &gt;= 1.2.37.</changelog>
  <changelog author="dimstar@opensuse.org" date="1703073600">- Own %{_modulesloaddir}: used to be present via udev-mini -&gt; kmod
  - &gt; suse-module-tools dependency before.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1711195200">- update to 12.4.0:
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/open-vm-tools/ChangeLog
  There are no new features in the open-vm-tools 12.4.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been handled. Please see the Resolved
    Issues section of the Release Notes.
  * A number of issues flagged by Coverity have been addressed.
  * For issues resolved in this release, see the Resolved Issues
    section of the Release Notes.</changelog>
  <changelog author="kallan@suse.com" date="1711540800">- Remove protobuf &lt; 22 dependency from spec file (bsc#1217478)
  Required linking with additional absl libraries for sle_version &gt; 150400.
- Use (boo#1222089) for updating open-vm-tools to version 12.4.0.</changelog>
  <changelog author="kallan@suse.com" date="1719835200">- Update to 12.4.5 (build 23787635) (boo#1227181)
  - There are no new features in the open-vm-tools 12.4.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - A Github pull request and associated issue has been handled. Please
    see the Resolved Issues section of the Release Notes.
  - A number of issues flagged by Coverity and ShellCheck have been
    addressed.
  - A vmtoolsd process hang related to nested logging from an RPC Channel
    error has been fixed.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see: https://github.com/vmware/open-vm-tools/releases/tag/stable-12.4.5
  Release Notes are available at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/ReleaseNotes.md
  The granular changes that have gone into the 12.4.5 release are in the ChangeLog at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/open-vm-tools/ChangeLog</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1728648000">- convert to obs_scm
- update to 12.5.0 (boo#1231826):
  There are no new features in the open-vm-tools 12.5.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been integrated. Please see the
    Resolved Issues section of the Release Notes.
  * For a more complete list of issues resolved in this release,
    see the Resolved Issues section of the Release Notes.
  For complete details, see:
  https://github.com/vmware/open-vm-tools/releases/tag/stable-12.5.0
  Release Notes are available at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/ReleaseNotes.md
  The granular changes that have gone into the 12.5.0 release are
  in the ChangeLog at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/open-vm-tools/ChangeLog</changelog>
  <changelog author="kallan@suse.com" date="1740052800">- (bsc#1237180): Ensure vmtoolsd.service, vgauthd.service, and
  vmblock-fuse.service are set to enabled by default.</changelog>
  <changelog author="kallan@suse.com" date="1740484800">- Revert previous change (Thu Feb 20 23:08:43 UTC 2025).  The proposed
  solutions was non-standard.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742472000">- remove unused pcre build dependency</changelog>
  <changelog author="kallan@suse.com" date="1743076800">- (bsc#1237180): Ensure vmtoolsd.service and vgauthd.service
  are set to enabled by default. Do this by removing vmblock-fuse.service
  from the %pre section in the spec file.  vmblock-fuse.service still
  remains in the %pre desktop section.</changelog>
  <changelog author="kallan@suse.com" date="1744804800">- (bsc#1237147): Newer version of containerd do not have the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/api.
  Update detect-suse-location.patch to point to the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/vendor/github.com/containerd/containerd/api
  to find the needed files and update the tasks.proto file to import from
  github.com/containerd/containerd/vendor/github.com/containerd/containerd/api</changelog>
  <changelog author="hsk17@mail.de" date="1746273600">- Add open-vm-tools-12.5.0-gcc15.patch from upstream to fix
  gcc15 compile time error (boo#1241938)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1747137600">- update to 12.5.2 (bsc#1243106):
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/open-vm-tools/ChangeLog
  This release resolves CVE-2025-22247. For more information on this
  vulnerability and its impact on Broadcom products, see
  VMSA-2025-0007
  https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683</changelog>
  <changelog author="kallan@suse.com" date="1750420800">- Update to open-vm-tools 13.0.0 based on build 24696409. (boo#1245169):
  There are no new features in the open-vm-tools 13.0.0 release.  This is
  primarily a maintenance release that addresses a few issues, including:
  - The vm-support script has been updated to collect the open-vm-tools log
    files from the Linux guest and information from the systemd journal.
  - Github pull requests has been integrated and issues fixed.  Please see
    the Resolved Issues section of the Release Notes.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-13.0.0
  Release Notes are available at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/ReleaseNotes.md
  The granular changes that have gone into the 13.0.0 release are in the
  ChangeLog at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/open-vm-tools/ChangeLog
- Add patch:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  Currently the "telinit 6" command is used to reboot a Linux VM
  following Guest OS Customization.  As the classic Linux init system,
  SysVinit, is deprecated in favor of a newer init system, systemd,
  the telinit command may not be available on the base Linux OS.
  This change adds support to Guest OS Customization for the systemd init
  system.  If the modern init system, systemd, is available, then a
  "systemctl reboot" command will be used to trigger reboot.  Otherwise,
  the "telinit 6" command will be used assuming the traditional init
  system, SysVinit, is still available.
- Drop patch now contained in 13.0.0:
  open-vm-tools-12.5.0-gcc15.patch
- Ran /usr/lib/obs/service/source_validators/helpers/fix_changelog to fix changes
  file where source validator was failing.</changelog>
  <changelog author="kallan@suse.com" date="1758628800">- Fix (bsc#1250373 (CVE-2025-41244) - VUL-0: contains a local privilege
  escalation vulnerability.
  + Add patch:
  - CVE-2025-41244-1240-1300-SDMP.patch</changelog>
  <changelog author="kallan@suse.com" date="1759320000">- Update to open-vm-tools 13.0.5 based on build 24915695. (boo#1250692):
  Please refer to the Release Notes at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/ReleaseNotes.md.
  The granular changes that have gone into the open-vm-tools 13.0.5 release
  are in the ChangeLog at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/open-vm-tools/ChangeLog.
  There are no new features in the open-vm-tools 13.0.5 release. This is
  primarily a maintenance release that addresses a security issue.
  This release resolves and includes the patch for CVE-2025-41244. For more
  information on this vulnerability and its impact on Broadcom products,
  see VMSA-2025-0015.
  A patch to address CVE-2025-41244 on earlier open-vm-tools releases is
  provided to the Linux community at CVE-2025-41244.patch.
  A minor enhancement has been made for Guest OS Customization. The
  DeployPkg plugin has been updated to use "systemctl reboot", if available.
  For a more complete list of issues addressed in this release, see the
  What's New and Resolved Issues section of the Release Notes.
- Drop patch now contained in 13.0.5:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  CVE-2025-41244-1240-1300-SDMP.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1769515200">- update to 13.0.10 based on build 25056151: (boo#1257357):
  Please refer to the Release Notes at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.10/ReleaseNotes.md.
  The granular changes that have gone into the open-vm-tools
  13.0.10 release are in the ChangeLog at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.10/open-vm-tools/ChangeLog.
  There are no new features in the open-vm-tools 13.0.10 release.
  This is primarily a maintenance release that addresses a fix.
  A minor enhancement has been made for Guest OS Customization. The
  DeployPkg plugin has been updated to handle a new cloud-init
  error code that signals a recoverable error and allow cloud-init
  to finish running.
  For a more complete description of what's new in this release,
  see the What's New and Resolved Issues sections of the Release
  Notes.</changelog>
  <changelog author="josef.melcr@suse.com" date="1777291200">- Fix build with glibc 2.43 (boo#1257312)
  + Add patch:
  - glibc243.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1778846400">- update to 13.1.0 release based on build 25218885: (boo#1265304)
  Please refer to the Release Notes at
  https://github.com/vmware/open-vm-tools/blob/stable-13.1.0/ReleaseNotes.md.
  Support for GNOME Toolkit version 4.
  This release of open-vm-tools supports building with either the
  GNOME Toolkit version 4 (GTK4) or to continue using version 3
  (GTK3). The configure script will accept options to restrict the
  build to either GTK3 or GTK4. If no restriction is applied, the
  latest version for which the required development package(s) are
  installed will be used. Please see the What's New section of the
  Release Notes for details.
  The following github issues have been resolved:
  - issue #707
  - issue #763
  The granular changes that have gone into the open-vm-tools 13.1.0
  release are in the ChangeLog at
  https://github.com/vmware/open-vm-tools/blob/stable-13.1.0/open-vm-tools/ChangeLog.
  For a more complete description of what is new in this release,
  see the What's New and Resolved Issues sections of the Release
  Notes.
  https://github.com/vmware/open-vm-tools/blob/stable-13.1.0/ReleaseNotes.md#whatsnew
  https://github.com/vmware/open-vm-tools/blob/stable-13.1.0/ReleaseNotes.md#resolved-issues</changelog>
</package>
<package pkgid="8b33dab95432df978132269888a0c097657778ab30877423eadb0497b8908ffd" name="libvmtools0" arch="x86_64">
  <version epoch="0" ver="12.5.2" rel="150600.3.12.1"/>
  <changelog author="kallan@suse.com" date="1694001600">- Update to 12.3.0 (build 22234872) (boo#1214850)
  - There are no new features in the open-vm-tools 12.3.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release integrates CVE-2023-20900 without the need for a patch.
    For more information on this vulnerability and its impact on VMware
    products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0019.html.
  - A tools.conf configuration setting is available to temporaily direct
    Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
    of ignoring file systems already frozen.
  - Building of the VMware Guest Authentication Service (VGAuth) using
    "xml-security-c" and "xerces-c" is being deprecated.
  - A number of Coverity reported issues have been addressed.
  - A number of GitHub issues and pull requests have been handled.
    Please see the Resolves Issues section of the Release Notes.
  - For issues resolved in this release, see the Resolved Issues section
    of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.0 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog
- Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests
- jsc-PED-1344 - reinable building containerinfo plugin for SLES 15 SP4.
- Drop patch now contained in 12.3.0:
  + 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch
  + 0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  + 2023-20867-Remove-some-dead-code.patch
  + CVE-20230-20900.patch</changelog>
  <changelog author="meissner@suse.com" date="1695297600">- open-vm-tools is built with containerinfo plugin from 15 sp3 onwards</changelog>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697976000">- Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer
  needed, nor used (since 12.3.0 release).</changelog>
  <changelog author="kallan@suse.com" date="1698667200">- Update to 12.3.5 (build 22544099) (boo#1216670)
  - There are no new features in the open-vm-tools 12.3.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release resolves CVE-2023-34058. For more information on this
    vulnerability and its impact on VMware products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0024.html.
  - This release resolves CVE-2023-34059 which only affects open-vm-tools.
    For more information on this vulnerability, please see the Resolved
    Issues section of the Release Notes.
  - A GitHub issue has been handled. Please see the Resolved Issues section
    of the Release Notes.
  - An update to the deployPkg plugin to coordinate with recent releases
    of cloud-init for improvement for guest VM customization.
  - For issues resolved in this release, see the Resolved Issues
    &lt;https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#resolved-issues&gt;
    section of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.5 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/ChangeLog
- Drop patch now contained in 12.3.5:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="kallan@suse.com" date="1702296000">- Fix (bsc#1217796) - Fix outdated libxmlsec1 dependency version.
  Updates to open-vm-tools for SLES 12 SP4 and SP5 are now being built
  againt against libxmlsec1-1-1.2.37. Update the spec file to now require
  libxmlsec1-openssl1 &gt;= 1.2.37.</changelog>
  <changelog author="dimstar@opensuse.org" date="1703073600">- Own %{_modulesloaddir}: used to be present via udev-mini -&gt; kmod
  - &gt; suse-module-tools dependency before.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1711195200">- update to 12.4.0:
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/open-vm-tools/ChangeLog
  There are no new features in the open-vm-tools 12.4.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been handled. Please see the Resolved
    Issues section of the Release Notes.
  * A number of issues flagged by Coverity have been addressed.
  * For issues resolved in this release, see the Resolved Issues
    section of the Release Notes.</changelog>
  <changelog author="kallan@suse.com" date="1711540800">- Remove protobuf &lt; 22 dependency from spec file (bsc#1217478)
  Required linking with additional absl libraries for sle_version &gt; 150400.
- Use (boo#1222089) for updating open-vm-tools to version 12.4.0.</changelog>
  <changelog author="kallan@suse.com" date="1719835200">- Update to 12.4.5 (build 23787635) (boo#1227181)
  - There are no new features in the open-vm-tools 12.4.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - A Github pull request and associated issue has been handled. Please
    see the Resolved Issues section of the Release Notes.
  - A number of issues flagged by Coverity and ShellCheck have been
    addressed.
  - A vmtoolsd process hang related to nested logging from an RPC Channel
    error has been fixed.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see: https://github.com/vmware/open-vm-tools/releases/tag/stable-12.4.5
  Release Notes are available at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/ReleaseNotes.md
  The granular changes that have gone into the 12.4.5 release are in the ChangeLog at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/open-vm-tools/ChangeLog</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1728648000">- convert to obs_scm
- update to 12.5.0 (boo#1231826):
  There are no new features in the open-vm-tools 12.5.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been integrated. Please see the
    Resolved Issues section of the Release Notes.
  * For a more complete list of issues resolved in this release,
    see the Resolved Issues section of the Release Notes.
  For complete details, see:
  https://github.com/vmware/open-vm-tools/releases/tag/stable-12.5.0
  Release Notes are available at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/ReleaseNotes.md
  The granular changes that have gone into the 12.5.0 release are
  in the ChangeLog at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/open-vm-tools/ChangeLog</changelog>
  <changelog author="kallan@suse.com" date="1740052800">- (bsc#1237180): Ensure vmtoolsd.service, vgauthd.service, and
  vmblock-fuse.service are set to enabled by default.</changelog>
  <changelog author="kallan@suse.com" date="1740484800">- Revert previous change (Thu Feb 20 23:08:43 UTC 2025).  The proposed
  solutions was non-standard.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742472000">- remove unused pcre build dependency</changelog>
  <changelog author="kallan@suse.com" date="1743076800">- (bsc#1237180): Ensure vmtoolsd.service and vgauthd.service
  are set to enabled by default. Do this by removing vmblock-fuse.service
  from the %pre section in the spec file.  vmblock-fuse.service still
  remains in the %pre desktop section.</changelog>
  <changelog author="kallan@suse.com" date="1744804800">- (bsc#1237147): Newer version of containerd do not have the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/api.
  Update detect-suse-location.patch to point to the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/vendor/github.com/containerd/containerd/api
  to find the needed files and update the tasks.proto file to import from
  github.com/containerd/containerd/vendor/github.com/containerd/containerd/api</changelog>
  <changelog author="hsk17@mail.de" date="1746273600">- Add open-vm-tools-12.5.0-gcc15.patch from upstream to fix
  gcc15 compile time error (boo#1241938)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1747137600">- update to 12.5.2 (bsc#1243106):
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/open-vm-tools/ChangeLog
  This release resolves CVE-2025-22247. For more information on this
  vulnerability and its impact on Broadcom products, see
  VMSA-2025-0007
  https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683</changelog>
</package>
<package pkgid="f43ea45988bbc316a232b8e615ab17be8727b17f87534b24d540840e0cdc09d8" name="libvmtools0" arch="x86_64">
  <version epoch="0" ver="13.0.0" rel="150600.3.15.1"/>
  <changelog author="meissner@suse.com" date="1695297600">- open-vm-tools is built with containerinfo plugin from 15 sp3 onwards</changelog>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697976000">- Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer
  needed, nor used (since 12.3.0 release).</changelog>
  <changelog author="kallan@suse.com" date="1698667200">- Update to 12.3.5 (build 22544099) (boo#1216670)
  - There are no new features in the open-vm-tools 12.3.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release resolves CVE-2023-34058. For more information on this
    vulnerability and its impact on VMware products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0024.html.
  - This release resolves CVE-2023-34059 which only affects open-vm-tools.
    For more information on this vulnerability, please see the Resolved
    Issues section of the Release Notes.
  - A GitHub issue has been handled. Please see the Resolved Issues section
    of the Release Notes.
  - An update to the deployPkg plugin to coordinate with recent releases
    of cloud-init for improvement for guest VM customization.
  - For issues resolved in this release, see the Resolved Issues
    &lt;https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#resolved-issues&gt;
    section of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.5 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/ChangeLog
- Drop patch now contained in 12.3.5:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="kallan@suse.com" date="1702296000">- Fix (bsc#1217796) - Fix outdated libxmlsec1 dependency version.
  Updates to open-vm-tools for SLES 12 SP4 and SP5 are now being built
  againt against libxmlsec1-1-1.2.37. Update the spec file to now require
  libxmlsec1-openssl1 &gt;= 1.2.37.</changelog>
  <changelog author="dimstar@opensuse.org" date="1703073600">- Own %{_modulesloaddir}: used to be present via udev-mini -&gt; kmod
  - &gt; suse-module-tools dependency before.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1711195200">- update to 12.4.0:
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/open-vm-tools/ChangeLog
  There are no new features in the open-vm-tools 12.4.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been handled. Please see the Resolved
    Issues section of the Release Notes.
  * A number of issues flagged by Coverity have been addressed.
  * For issues resolved in this release, see the Resolved Issues
    section of the Release Notes.</changelog>
  <changelog author="kallan@suse.com" date="1711540800">- Remove protobuf &lt; 22 dependency from spec file (bsc#1217478)
  Required linking with additional absl libraries for sle_version &gt; 150400.
- Use (boo#1222089) for updating open-vm-tools to version 12.4.0.</changelog>
  <changelog author="kallan@suse.com" date="1719835200">- Update to 12.4.5 (build 23787635) (boo#1227181)
  - There are no new features in the open-vm-tools 12.4.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - A Github pull request and associated issue has been handled. Please
    see the Resolved Issues section of the Release Notes.
  - A number of issues flagged by Coverity and ShellCheck have been
    addressed.
  - A vmtoolsd process hang related to nested logging from an RPC Channel
    error has been fixed.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see: https://github.com/vmware/open-vm-tools/releases/tag/stable-12.4.5
  Release Notes are available at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/ReleaseNotes.md
  The granular changes that have gone into the 12.4.5 release are in the ChangeLog at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/open-vm-tools/ChangeLog</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1728648000">- convert to obs_scm
- update to 12.5.0 (boo#1231826):
  There are no new features in the open-vm-tools 12.5.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been integrated. Please see the
    Resolved Issues section of the Release Notes.
  * For a more complete list of issues resolved in this release,
    see the Resolved Issues section of the Release Notes.
  For complete details, see:
  https://github.com/vmware/open-vm-tools/releases/tag/stable-12.5.0
  Release Notes are available at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/ReleaseNotes.md
  The granular changes that have gone into the 12.5.0 release are
  in the ChangeLog at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/open-vm-tools/ChangeLog</changelog>
  <changelog author="kallan@suse.com" date="1740052800">- (bsc#1237180): Ensure vmtoolsd.service, vgauthd.service, and
  vmblock-fuse.service are set to enabled by default.</changelog>
  <changelog author="kallan@suse.com" date="1740484800">- Revert previous change (Thu Feb 20 23:08:43 UTC 2025).  The proposed
  solutions was non-standard.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742472000">- remove unused pcre build dependency</changelog>
  <changelog author="kallan@suse.com" date="1743076800">- (bsc#1237180): Ensure vmtoolsd.service and vgauthd.service
  are set to enabled by default. Do this by removing vmblock-fuse.service
  from the %pre section in the spec file.  vmblock-fuse.service still
  remains in the %pre desktop section.</changelog>
  <changelog author="kallan@suse.com" date="1744804800">- (bsc#1237147): Newer version of containerd do not have the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/api.
  Update detect-suse-location.patch to point to the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/vendor/github.com/containerd/containerd/api
  to find the needed files and update the tasks.proto file to import from
  github.com/containerd/containerd/vendor/github.com/containerd/containerd/api</changelog>
  <changelog author="hsk17@mail.de" date="1746273600">- Add open-vm-tools-12.5.0-gcc15.patch from upstream to fix
  gcc15 compile time error (boo#1241938)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1747137600">- update to 12.5.2 (bsc#1243106):
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/open-vm-tools/ChangeLog
  This release resolves CVE-2025-22247. For more information on this
  vulnerability and its impact on Broadcom products, see
  VMSA-2025-0007
  https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683</changelog>
  <changelog author="kallan@suse.com" date="1750420800">- Update to open-vm-tools 13.0.0 based on build 24696409. (boo#1245169):
  There are no new features in the open-vm-tools 13.0.0 release.  This is
  primarily a maintenance release that addresses a few issues, including:
  - The vm-support script has been updated to collect the open-vm-tools log
    files from the Linux guest and information from the systemd journal.
  - Github pull requests has been integrated and issues fixed.  Please see
    the Resolved Issues section of the Release Notes.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-13.0.0
  Release Notes are available at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/ReleaseNotes.md
  The granular changes that have gone into the 13.0.0 release are in the
  ChangeLog at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/open-vm-tools/ChangeLog
- Add patch:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  Currently the "telinit 6" command is used to reboot a Linux VM
  following Guest OS Customization.  As the classic Linux init system,
  SysVinit, is deprecated in favor of a newer init system, systemd,
  the telinit command may not be available on the base Linux OS.
  This change adds support to Guest OS Customization for the systemd init
  system.  If the modern init system, systemd, is available, then a
  "systemctl reboot" command will be used to trigger reboot.  Otherwise,
  the "telinit 6" command will be used assuming the traditional init
  system, SysVinit, is still available.
- Drop patch now contained in 13.0.0:
  open-vm-tools-12.5.0-gcc15.patch
- Ran /usr/lib/obs/service/source_validators/helpers/fix_changelog to fix changes
  file where source validator was failing.</changelog>
</package>
<package pkgid="a44b3aacc6c0f73c43714419077f7c33f5f3d5d1347e0da86fd72f4c8a3a994e" name="libvmtools0" arch="x86_64">
  <version epoch="0" ver="13.0.0" rel="150600.3.18.1"/>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697976000">- Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer
  needed, nor used (since 12.3.0 release).</changelog>
  <changelog author="kallan@suse.com" date="1698667200">- Update to 12.3.5 (build 22544099) (boo#1216670)
  - There are no new features in the open-vm-tools 12.3.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release resolves CVE-2023-34058. For more information on this
    vulnerability and its impact on VMware products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0024.html.
  - This release resolves CVE-2023-34059 which only affects open-vm-tools.
    For more information on this vulnerability, please see the Resolved
    Issues section of the Release Notes.
  - A GitHub issue has been handled. Please see the Resolved Issues section
    of the Release Notes.
  - An update to the deployPkg plugin to coordinate with recent releases
    of cloud-init for improvement for guest VM customization.
  - For issues resolved in this release, see the Resolved Issues
    &lt;https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#resolved-issues&gt;
    section of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.5 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/ChangeLog
- Drop patch now contained in 12.3.5:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="kallan@suse.com" date="1702296000">- Fix (bsc#1217796) - Fix outdated libxmlsec1 dependency version.
  Updates to open-vm-tools for SLES 12 SP4 and SP5 are now being built
  againt against libxmlsec1-1-1.2.37. Update the spec file to now require
  libxmlsec1-openssl1 &gt;= 1.2.37.</changelog>
  <changelog author="dimstar@opensuse.org" date="1703073600">- Own %{_modulesloaddir}: used to be present via udev-mini -&gt; kmod
  - &gt; suse-module-tools dependency before.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1711195200">- update to 12.4.0:
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/open-vm-tools/ChangeLog
  There are no new features in the open-vm-tools 12.4.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been handled. Please see the Resolved
    Issues section of the Release Notes.
  * A number of issues flagged by Coverity have been addressed.
  * For issues resolved in this release, see the Resolved Issues
    section of the Release Notes.</changelog>
  <changelog author="kallan@suse.com" date="1711540800">- Remove protobuf &lt; 22 dependency from spec file (bsc#1217478)
  Required linking with additional absl libraries for sle_version &gt; 150400.
- Use (boo#1222089) for updating open-vm-tools to version 12.4.0.</changelog>
  <changelog author="kallan@suse.com" date="1719835200">- Update to 12.4.5 (build 23787635) (boo#1227181)
  - There are no new features in the open-vm-tools 12.4.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - A Github pull request and associated issue has been handled. Please
    see the Resolved Issues section of the Release Notes.
  - A number of issues flagged by Coverity and ShellCheck have been
    addressed.
  - A vmtoolsd process hang related to nested logging from an RPC Channel
    error has been fixed.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see: https://github.com/vmware/open-vm-tools/releases/tag/stable-12.4.5
  Release Notes are available at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/ReleaseNotes.md
  The granular changes that have gone into the 12.4.5 release are in the ChangeLog at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/open-vm-tools/ChangeLog</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1728648000">- convert to obs_scm
- update to 12.5.0 (boo#1231826):
  There are no new features in the open-vm-tools 12.5.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been integrated. Please see the
    Resolved Issues section of the Release Notes.
  * For a more complete list of issues resolved in this release,
    see the Resolved Issues section of the Release Notes.
  For complete details, see:
  https://github.com/vmware/open-vm-tools/releases/tag/stable-12.5.0
  Release Notes are available at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/ReleaseNotes.md
  The granular changes that have gone into the 12.5.0 release are
  in the ChangeLog at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/open-vm-tools/ChangeLog</changelog>
  <changelog author="kallan@suse.com" date="1740052800">- (bsc#1237180): Ensure vmtoolsd.service, vgauthd.service, and
  vmblock-fuse.service are set to enabled by default.</changelog>
  <changelog author="kallan@suse.com" date="1740484800">- Revert previous change (Thu Feb 20 23:08:43 UTC 2025).  The proposed
  solutions was non-standard.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742472000">- remove unused pcre build dependency</changelog>
  <changelog author="kallan@suse.com" date="1743076800">- (bsc#1237180): Ensure vmtoolsd.service and vgauthd.service
  are set to enabled by default. Do this by removing vmblock-fuse.service
  from the %pre section in the spec file.  vmblock-fuse.service still
  remains in the %pre desktop section.</changelog>
  <changelog author="kallan@suse.com" date="1744804800">- (bsc#1237147): Newer version of containerd do not have the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/api.
  Update detect-suse-location.patch to point to the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/vendor/github.com/containerd/containerd/api
  to find the needed files and update the tasks.proto file to import from
  github.com/containerd/containerd/vendor/github.com/containerd/containerd/api</changelog>
  <changelog author="hsk17@mail.de" date="1746273600">- Add open-vm-tools-12.5.0-gcc15.patch from upstream to fix
  gcc15 compile time error (boo#1241938)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1747137600">- update to 12.5.2 (bsc#1243106):
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/open-vm-tools/ChangeLog
  This release resolves CVE-2025-22247. For more information on this
  vulnerability and its impact on Broadcom products, see
  VMSA-2025-0007
  https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683</changelog>
  <changelog author="kallan@suse.com" date="1750420800">- Update to open-vm-tools 13.0.0 based on build 24696409. (boo#1245169):
  There are no new features in the open-vm-tools 13.0.0 release.  This is
  primarily a maintenance release that addresses a few issues, including:
  - The vm-support script has been updated to collect the open-vm-tools log
    files from the Linux guest and information from the systemd journal.
  - Github pull requests has been integrated and issues fixed.  Please see
    the Resolved Issues section of the Release Notes.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-13.0.0
  Release Notes are available at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/ReleaseNotes.md
  The granular changes that have gone into the 13.0.0 release are in the
  ChangeLog at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/open-vm-tools/ChangeLog
- Add patch:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  Currently the "telinit 6" command is used to reboot a Linux VM
  following Guest OS Customization.  As the classic Linux init system,
  SysVinit, is deprecated in favor of a newer init system, systemd,
  the telinit command may not be available on the base Linux OS.
  This change adds support to Guest OS Customization for the systemd init
  system.  If the modern init system, systemd, is available, then a
  "systemctl reboot" command will be used to trigger reboot.  Otherwise,
  the "telinit 6" command will be used assuming the traditional init
  system, SysVinit, is still available.
- Drop patch now contained in 13.0.0:
  open-vm-tools-12.5.0-gcc15.patch
- Ran /usr/lib/obs/service/source_validators/helpers/fix_changelog to fix changes
  file where source validator was failing.</changelog>
  <changelog author="kallan@suse.com" date="1758628800">- Fix (bsc#1250373 (CVE-2025-41244) - VUL-0: contains a local privilege
  escalation vulnerability.
  + Add patch:
  - CVE-2025-41244-1240-1300-SDMP.patch</changelog>
</package>
<package pkgid="e34ce0fb4de960f3115b5d595824d910e946c4fe23ca2f4226edef1853f6f21b" name="libvmtools0" arch="x86_64">
  <version epoch="0" ver="13.0.10" rel="150600.3.24.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1697976000">- Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer
  needed, nor used (since 12.3.0 release).</changelog>
  <changelog author="kallan@suse.com" date="1698667200">- Update to 12.3.5 (build 22544099) (boo#1216670)
  - There are no new features in the open-vm-tools 12.3.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release resolves CVE-2023-34058. For more information on this
    vulnerability and its impact on VMware products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0024.html.
  - This release resolves CVE-2023-34059 which only affects open-vm-tools.
    For more information on this vulnerability, please see the Resolved
    Issues section of the Release Notes.
  - A GitHub issue has been handled. Please see the Resolved Issues section
    of the Release Notes.
  - An update to the deployPkg plugin to coordinate with recent releases
    of cloud-init for improvement for guest VM customization.
  - For issues resolved in this release, see the Resolved Issues
    &lt;https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#resolved-issues&gt;
    section of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.5 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/ChangeLog
- Drop patch now contained in 12.3.5:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="kallan@suse.com" date="1702296000">- Fix (bsc#1217796) - Fix outdated libxmlsec1 dependency version.
  Updates to open-vm-tools for SLES 12 SP4 and SP5 are now being built
  againt against libxmlsec1-1-1.2.37. Update the spec file to now require
  libxmlsec1-openssl1 &gt;= 1.2.37.</changelog>
  <changelog author="dimstar@opensuse.org" date="1703073600">- Own %{_modulesloaddir}: used to be present via udev-mini -&gt; kmod
  - &gt; suse-module-tools dependency before.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1711195200">- update to 12.4.0:
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/open-vm-tools/ChangeLog
  There are no new features in the open-vm-tools 12.4.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been handled. Please see the Resolved
    Issues section of the Release Notes.
  * A number of issues flagged by Coverity have been addressed.
  * For issues resolved in this release, see the Resolved Issues
    section of the Release Notes.</changelog>
  <changelog author="kallan@suse.com" date="1711540800">- Remove protobuf &lt; 22 dependency from spec file (bsc#1217478)
  Required linking with additional absl libraries for sle_version &gt; 150400.
- Use (boo#1222089) for updating open-vm-tools to version 12.4.0.</changelog>
  <changelog author="kallan@suse.com" date="1719835200">- Update to 12.4.5 (build 23787635) (boo#1227181)
  - There are no new features in the open-vm-tools 12.4.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - A Github pull request and associated issue has been handled. Please
    see the Resolved Issues section of the Release Notes.
  - A number of issues flagged by Coverity and ShellCheck have been
    addressed.
  - A vmtoolsd process hang related to nested logging from an RPC Channel
    error has been fixed.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see: https://github.com/vmware/open-vm-tools/releases/tag/stable-12.4.5
  Release Notes are available at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/ReleaseNotes.md
  The granular changes that have gone into the 12.4.5 release are in the ChangeLog at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/open-vm-tools/ChangeLog</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1728648000">- convert to obs_scm
- update to 12.5.0 (boo#1231826):
  There are no new features in the open-vm-tools 12.5.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been integrated. Please see the
    Resolved Issues section of the Release Notes.
  * For a more complete list of issues resolved in this release,
    see the Resolved Issues section of the Release Notes.
  For complete details, see:
  https://github.com/vmware/open-vm-tools/releases/tag/stable-12.5.0
  Release Notes are available at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/ReleaseNotes.md
  The granular changes that have gone into the 12.5.0 release are
  in the ChangeLog at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/open-vm-tools/ChangeLog</changelog>
  <changelog author="kallan@suse.com" date="1740052800">- (bsc#1237180): Ensure vmtoolsd.service, vgauthd.service, and
  vmblock-fuse.service are set to enabled by default.</changelog>
  <changelog author="kallan@suse.com" date="1740484800">- Revert previous change (Thu Feb 20 23:08:43 UTC 2025).  The proposed
  solutions was non-standard.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742472000">- remove unused pcre build dependency</changelog>
  <changelog author="kallan@suse.com" date="1743076800">- (bsc#1237180): Ensure vmtoolsd.service and vgauthd.service
  are set to enabled by default. Do this by removing vmblock-fuse.service
  from the %pre section in the spec file.  vmblock-fuse.service still
  remains in the %pre desktop section.</changelog>
  <changelog author="kallan@suse.com" date="1744804800">- (bsc#1237147): Newer version of containerd do not have the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/api.
  Update detect-suse-location.patch to point to the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/vendor/github.com/containerd/containerd/api
  to find the needed files and update the tasks.proto file to import from
  github.com/containerd/containerd/vendor/github.com/containerd/containerd/api</changelog>
  <changelog author="hsk17@mail.de" date="1746273600">- Add open-vm-tools-12.5.0-gcc15.patch from upstream to fix
  gcc15 compile time error (boo#1241938)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1747137600">- update to 12.5.2 (bsc#1243106):
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/open-vm-tools/ChangeLog
  This release resolves CVE-2025-22247. For more information on this
  vulnerability and its impact on Broadcom products, see
  VMSA-2025-0007
  https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683</changelog>
  <changelog author="kallan@suse.com" date="1750420800">- Update to open-vm-tools 13.0.0 based on build 24696409. (boo#1245169):
  There are no new features in the open-vm-tools 13.0.0 release.  This is
  primarily a maintenance release that addresses a few issues, including:
  - The vm-support script has been updated to collect the open-vm-tools log
    files from the Linux guest and information from the systemd journal.
  - Github pull requests has been integrated and issues fixed.  Please see
    the Resolved Issues section of the Release Notes.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-13.0.0
  Release Notes are available at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/ReleaseNotes.md
  The granular changes that have gone into the 13.0.0 release are in the
  ChangeLog at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/open-vm-tools/ChangeLog
- Add patch:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  Currently the "telinit 6" command is used to reboot a Linux VM
  following Guest OS Customization.  As the classic Linux init system,
  SysVinit, is deprecated in favor of a newer init system, systemd,
  the telinit command may not be available on the base Linux OS.
  This change adds support to Guest OS Customization for the systemd init
  system.  If the modern init system, systemd, is available, then a
  "systemctl reboot" command will be used to trigger reboot.  Otherwise,
  the "telinit 6" command will be used assuming the traditional init
  system, SysVinit, is still available.
- Drop patch now contained in 13.0.0:
  open-vm-tools-12.5.0-gcc15.patch
- Ran /usr/lib/obs/service/source_validators/helpers/fix_changelog to fix changes
  file where source validator was failing.</changelog>
  <changelog author="kallan@suse.com" date="1758628800">- Fix (bsc#1250373 (CVE-2025-41244) - VUL-0: contains a local privilege
  escalation vulnerability.
  + Add patch:
  - CVE-2025-41244-1240-1300-SDMP.patch</changelog>
  <changelog author="kallan@suse.com" date="1759320000">- Update to open-vm-tools 13.0.5 based on build 24915695. (boo#1250692):
  Please refer to the Release Notes at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/ReleaseNotes.md.
  The granular changes that have gone into the open-vm-tools 13.0.5 release
  are in the ChangeLog at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/open-vm-tools/ChangeLog.
  There are no new features in the open-vm-tools 13.0.5 release. This is
  primarily a maintenance release that addresses a security issue.
  This release resolves and includes the patch for CVE-2025-41244. For more
  information on this vulnerability and its impact on Broadcom products,
  see VMSA-2025-0015.
  A patch to address CVE-2025-41244 on earlier open-vm-tools releases is
  provided to the Linux community at CVE-2025-41244.patch.
  A minor enhancement has been made for Guest OS Customization. The
  DeployPkg plugin has been updated to use "systemctl reboot", if available.
  For a more complete list of issues addressed in this release, see the
  What's New and Resolved Issues section of the Release Notes.
- Drop patch now contained in 13.0.5:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  CVE-2025-41244-1240-1300-SDMP.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1769515200">- update to 13.0.10 based on build 25056151: (boo#1257357):
  Please refer to the Release Notes at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.10/ReleaseNotes.md.
  The granular changes that have gone into the open-vm-tools
  13.0.10 release are in the ChangeLog at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.10/open-vm-tools/ChangeLog.
  There are no new features in the open-vm-tools 13.0.10 release.
  This is primarily a maintenance release that addresses a fix.
  A minor enhancement has been made for Guest OS Customization. The
  DeployPkg plugin has been updated to handle a new cloud-init
  error code that signals a recoverable error and allow cloud-init
  to finish running.
  For a more complete description of what's new in this release,
  see the What's New and Resolved Issues sections of the Release
  Notes.</changelog>
</package>
<package pkgid="b0901e9b882d1e4a8341834be51645396dbe326d5d5996e184bf7ad59170a2b3" name="libvmtools0" arch="x86_64">
  <version epoch="0" ver="13.0.5" rel="150600.3.21.1"/>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697976000">- Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer
  needed, nor used (since 12.3.0 release).</changelog>
  <changelog author="kallan@suse.com" date="1698667200">- Update to 12.3.5 (build 22544099) (boo#1216670)
  - There are no new features in the open-vm-tools 12.3.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release resolves CVE-2023-34058. For more information on this
    vulnerability and its impact on VMware products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0024.html.
  - This release resolves CVE-2023-34059 which only affects open-vm-tools.
    For more information on this vulnerability, please see the Resolved
    Issues section of the Release Notes.
  - A GitHub issue has been handled. Please see the Resolved Issues section
    of the Release Notes.
  - An update to the deployPkg plugin to coordinate with recent releases
    of cloud-init for improvement for guest VM customization.
  - For issues resolved in this release, see the Resolved Issues
    &lt;https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#resolved-issues&gt;
    section of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.5 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/ChangeLog
- Drop patch now contained in 12.3.5:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="kallan@suse.com" date="1702296000">- Fix (bsc#1217796) - Fix outdated libxmlsec1 dependency version.
  Updates to open-vm-tools for SLES 12 SP4 and SP5 are now being built
  againt against libxmlsec1-1-1.2.37. Update the spec file to now require
  libxmlsec1-openssl1 &gt;= 1.2.37.</changelog>
  <changelog author="dimstar@opensuse.org" date="1703073600">- Own %{_modulesloaddir}: used to be present via udev-mini -&gt; kmod
  - &gt; suse-module-tools dependency before.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1711195200">- update to 12.4.0:
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/open-vm-tools/ChangeLog
  There are no new features in the open-vm-tools 12.4.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been handled. Please see the Resolved
    Issues section of the Release Notes.
  * A number of issues flagged by Coverity have been addressed.
  * For issues resolved in this release, see the Resolved Issues
    section of the Release Notes.</changelog>
  <changelog author="kallan@suse.com" date="1711540800">- Remove protobuf &lt; 22 dependency from spec file (bsc#1217478)
  Required linking with additional absl libraries for sle_version &gt; 150400.
- Use (boo#1222089) for updating open-vm-tools to version 12.4.0.</changelog>
  <changelog author="kallan@suse.com" date="1719835200">- Update to 12.4.5 (build 23787635) (boo#1227181)
  - There are no new features in the open-vm-tools 12.4.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - A Github pull request and associated issue has been handled. Please
    see the Resolved Issues section of the Release Notes.
  - A number of issues flagged by Coverity and ShellCheck have been
    addressed.
  - A vmtoolsd process hang related to nested logging from an RPC Channel
    error has been fixed.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see: https://github.com/vmware/open-vm-tools/releases/tag/stable-12.4.5
  Release Notes are available at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/ReleaseNotes.md
  The granular changes that have gone into the 12.4.5 release are in the ChangeLog at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/open-vm-tools/ChangeLog</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1728648000">- convert to obs_scm
- update to 12.5.0 (boo#1231826):
  There are no new features in the open-vm-tools 12.5.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been integrated. Please see the
    Resolved Issues section of the Release Notes.
  * For a more complete list of issues resolved in this release,
    see the Resolved Issues section of the Release Notes.
  For complete details, see:
  https://github.com/vmware/open-vm-tools/releases/tag/stable-12.5.0
  Release Notes are available at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/ReleaseNotes.md
  The granular changes that have gone into the 12.5.0 release are
  in the ChangeLog at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/open-vm-tools/ChangeLog</changelog>
  <changelog author="kallan@suse.com" date="1740052800">- (bsc#1237180): Ensure vmtoolsd.service, vgauthd.service, and
  vmblock-fuse.service are set to enabled by default.</changelog>
  <changelog author="kallan@suse.com" date="1740484800">- Revert previous change (Thu Feb 20 23:08:43 UTC 2025).  The proposed
  solutions was non-standard.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742472000">- remove unused pcre build dependency</changelog>
  <changelog author="kallan@suse.com" date="1743076800">- (bsc#1237180): Ensure vmtoolsd.service and vgauthd.service
  are set to enabled by default. Do this by removing vmblock-fuse.service
  from the %pre section in the spec file.  vmblock-fuse.service still
  remains in the %pre desktop section.</changelog>
  <changelog author="kallan@suse.com" date="1744804800">- (bsc#1237147): Newer version of containerd do not have the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/api.
  Update detect-suse-location.patch to point to the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/vendor/github.com/containerd/containerd/api
  to find the needed files and update the tasks.proto file to import from
  github.com/containerd/containerd/vendor/github.com/containerd/containerd/api</changelog>
  <changelog author="hsk17@mail.de" date="1746273600">- Add open-vm-tools-12.5.0-gcc15.patch from upstream to fix
  gcc15 compile time error (boo#1241938)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1747137600">- update to 12.5.2 (bsc#1243106):
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/open-vm-tools/ChangeLog
  This release resolves CVE-2025-22247. For more information on this
  vulnerability and its impact on Broadcom products, see
  VMSA-2025-0007
  https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683</changelog>
  <changelog author="kallan@suse.com" date="1750420800">- Update to open-vm-tools 13.0.0 based on build 24696409. (boo#1245169):
  There are no new features in the open-vm-tools 13.0.0 release.  This is
  primarily a maintenance release that addresses a few issues, including:
  - The vm-support script has been updated to collect the open-vm-tools log
    files from the Linux guest and information from the systemd journal.
  - Github pull requests has been integrated and issues fixed.  Please see
    the Resolved Issues section of the Release Notes.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-13.0.0
  Release Notes are available at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/ReleaseNotes.md
  The granular changes that have gone into the 13.0.0 release are in the
  ChangeLog at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/open-vm-tools/ChangeLog
- Add patch:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  Currently the "telinit 6" command is used to reboot a Linux VM
  following Guest OS Customization.  As the classic Linux init system,
  SysVinit, is deprecated in favor of a newer init system, systemd,
  the telinit command may not be available on the base Linux OS.
  This change adds support to Guest OS Customization for the systemd init
  system.  If the modern init system, systemd, is available, then a
  "systemctl reboot" command will be used to trigger reboot.  Otherwise,
  the "telinit 6" command will be used assuming the traditional init
  system, SysVinit, is still available.
- Drop patch now contained in 13.0.0:
  open-vm-tools-12.5.0-gcc15.patch
- Ran /usr/lib/obs/service/source_validators/helpers/fix_changelog to fix changes
  file where source validator was failing.</changelog>
  <changelog author="kallan@suse.com" date="1758628800">- Fix (bsc#1250373 (CVE-2025-41244) - VUL-0: contains a local privilege
  escalation vulnerability.
  + Add patch:
  - CVE-2025-41244-1240-1300-SDMP.patch</changelog>
  <changelog author="kallan@suse.com" date="1759320000">- Update to open-vm-tools 13.0.5 based on build 24915695. (boo#1250692):
  Please refer to the Release Notes at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/ReleaseNotes.md.
  The granular changes that have gone into the open-vm-tools 13.0.5 release
  are in the ChangeLog at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/open-vm-tools/ChangeLog.
  There are no new features in the open-vm-tools 13.0.5 release. This is
  primarily a maintenance release that addresses a security issue.
  This release resolves and includes the patch for CVE-2025-41244. For more
  information on this vulnerability and its impact on Broadcom products,
  see VMSA-2025-0015.
  A patch to address CVE-2025-41244 on earlier open-vm-tools releases is
  provided to the Linux community at CVE-2025-41244.patch.
  A minor enhancement has been made for Guest OS Customization. The
  DeployPkg plugin has been updated to use "systemctl reboot", if available.
  For a more complete list of issues addressed in this release, see the
  What's New and Resolved Issues section of the Release Notes.
- Drop patch now contained in 13.0.5:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  CVE-2025-41244-1240-1300-SDMP.patch</changelog>
</package>
<package pkgid="c9408a85a68b3df93755c3f89e4daed768996fb645985a00213a92826deb8d86" name="libvmtools0" arch="x86_64">
  <version epoch="0" ver="13.1.0" rel="150600.3.27.1"/>
  <changelog author="kallan@suse.com" date="1702296000">- Fix (bsc#1217796) - Fix outdated libxmlsec1 dependency version.
  Updates to open-vm-tools for SLES 12 SP4 and SP5 are now being built
  againt against libxmlsec1-1-1.2.37. Update the spec file to now require
  libxmlsec1-openssl1 &gt;= 1.2.37.</changelog>
  <changelog author="dimstar@opensuse.org" date="1703073600">- Own %{_modulesloaddir}: used to be present via udev-mini -&gt; kmod
  - &gt; suse-module-tools dependency before.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1711195200">- update to 12.4.0:
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/open-vm-tools/ChangeLog
  There are no new features in the open-vm-tools 12.4.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been handled. Please see the Resolved
    Issues section of the Release Notes.
  * A number of issues flagged by Coverity have been addressed.
  * For issues resolved in this release, see the Resolved Issues
    section of the Release Notes.</changelog>
  <changelog author="kallan@suse.com" date="1711540800">- Remove protobuf &lt; 22 dependency from spec file (bsc#1217478)
  Required linking with additional absl libraries for sle_version &gt; 150400.
- Use (boo#1222089) for updating open-vm-tools to version 12.4.0.</changelog>
  <changelog author="kallan@suse.com" date="1719835200">- Update to 12.4.5 (build 23787635) (boo#1227181)
  - There are no new features in the open-vm-tools 12.4.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - A Github pull request and associated issue has been handled. Please
    see the Resolved Issues section of the Release Notes.
  - A number of issues flagged by Coverity and ShellCheck have been
    addressed.
  - A vmtoolsd process hang related to nested logging from an RPC Channel
    error has been fixed.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see: https://github.com/vmware/open-vm-tools/releases/tag/stable-12.4.5
  Release Notes are available at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/ReleaseNotes.md
  The granular changes that have gone into the 12.4.5 release are in the ChangeLog at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/open-vm-tools/ChangeLog</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1728648000">- convert to obs_scm
- update to 12.5.0 (boo#1231826):
  There are no new features in the open-vm-tools 12.5.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been integrated. Please see the
    Resolved Issues section of the Release Notes.
  * For a more complete list of issues resolved in this release,
    see the Resolved Issues section of the Release Notes.
  For complete details, see:
  https://github.com/vmware/open-vm-tools/releases/tag/stable-12.5.0
  Release Notes are available at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/ReleaseNotes.md
  The granular changes that have gone into the 12.5.0 release are
  in the ChangeLog at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/open-vm-tools/ChangeLog</changelog>
  <changelog author="kallan@suse.com" date="1740052800">- (bsc#1237180): Ensure vmtoolsd.service, vgauthd.service, and
  vmblock-fuse.service are set to enabled by default.</changelog>
  <changelog author="kallan@suse.com" date="1740484800">- Revert previous change (Thu Feb 20 23:08:43 UTC 2025).  The proposed
  solutions was non-standard.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742472000">- remove unused pcre build dependency</changelog>
  <changelog author="kallan@suse.com" date="1743076800">- (bsc#1237180): Ensure vmtoolsd.service and vgauthd.service
  are set to enabled by default. Do this by removing vmblock-fuse.service
  from the %pre section in the spec file.  vmblock-fuse.service still
  remains in the %pre desktop section.</changelog>
  <changelog author="kallan@suse.com" date="1744804800">- (bsc#1237147): Newer version of containerd do not have the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/api.
  Update detect-suse-location.patch to point to the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/vendor/github.com/containerd/containerd/api
  to find the needed files and update the tasks.proto file to import from
  github.com/containerd/containerd/vendor/github.com/containerd/containerd/api</changelog>
  <changelog author="hsk17@mail.de" date="1746273600">- Add open-vm-tools-12.5.0-gcc15.patch from upstream to fix
  gcc15 compile time error (boo#1241938)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1747137600">- update to 12.5.2 (bsc#1243106):
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/open-vm-tools/ChangeLog
  This release resolves CVE-2025-22247. For more information on this
  vulnerability and its impact on Broadcom products, see
  VMSA-2025-0007
  https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683</changelog>
  <changelog author="kallan@suse.com" date="1750420800">- Update to open-vm-tools 13.0.0 based on build 24696409. (boo#1245169):
  There are no new features in the open-vm-tools 13.0.0 release.  This is
  primarily a maintenance release that addresses a few issues, including:
  - The vm-support script has been updated to collect the open-vm-tools log
    files from the Linux guest and information from the systemd journal.
  - Github pull requests has been integrated and issues fixed.  Please see
    the Resolved Issues section of the Release Notes.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-13.0.0
  Release Notes are available at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/ReleaseNotes.md
  The granular changes that have gone into the 13.0.0 release are in the
  ChangeLog at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/open-vm-tools/ChangeLog
- Add patch:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  Currently the "telinit 6" command is used to reboot a Linux VM
  following Guest OS Customization.  As the classic Linux init system,
  SysVinit, is deprecated in favor of a newer init system, systemd,
  the telinit command may not be available on the base Linux OS.
  This change adds support to Guest OS Customization for the systemd init
  system.  If the modern init system, systemd, is available, then a
  "systemctl reboot" command will be used to trigger reboot.  Otherwise,
  the "telinit 6" command will be used assuming the traditional init
  system, SysVinit, is still available.
- Drop patch now contained in 13.0.0:
  open-vm-tools-12.5.0-gcc15.patch
- Ran /usr/lib/obs/service/source_validators/helpers/fix_changelog to fix changes
  file where source validator was failing.</changelog>
  <changelog author="kallan@suse.com" date="1758628800">- Fix (bsc#1250373 (CVE-2025-41244) - VUL-0: contains a local privilege
  escalation vulnerability.
  + Add patch:
  - CVE-2025-41244-1240-1300-SDMP.patch</changelog>
  <changelog author="kallan@suse.com" date="1759320000">- Update to open-vm-tools 13.0.5 based on build 24915695. (boo#1250692):
  Please refer to the Release Notes at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/ReleaseNotes.md.
  The granular changes that have gone into the open-vm-tools 13.0.5 release
  are in the ChangeLog at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/open-vm-tools/ChangeLog.
  There are no new features in the open-vm-tools 13.0.5 release. This is
  primarily a maintenance release that addresses a security issue.
  This release resolves and includes the patch for CVE-2025-41244. For more
  information on this vulnerability and its impact on Broadcom products,
  see VMSA-2025-0015.
  A patch to address CVE-2025-41244 on earlier open-vm-tools releases is
  provided to the Linux community at CVE-2025-41244.patch.
  A minor enhancement has been made for Guest OS Customization. The
  DeployPkg plugin has been updated to use "systemctl reboot", if available.
  For a more complete list of issues addressed in this release, see the
  What's New and Resolved Issues section of the Release Notes.
- Drop patch now contained in 13.0.5:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  CVE-2025-41244-1240-1300-SDMP.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1769515200">- update to 13.0.10 based on build 25056151: (boo#1257357):
  Please refer to the Release Notes at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.10/ReleaseNotes.md.
  The granular changes that have gone into the open-vm-tools
  13.0.10 release are in the ChangeLog at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.10/open-vm-tools/ChangeLog.
  There are no new features in the open-vm-tools 13.0.10 release.
  This is primarily a maintenance release that addresses a fix.
  A minor enhancement has been made for Guest OS Customization. The
  DeployPkg plugin has been updated to handle a new cloud-init
  error code that signals a recoverable error and allow cloud-init
  to finish running.
  For a more complete description of what's new in this release,
  see the What's New and Resolved Issues sections of the Release
  Notes.</changelog>
  <changelog author="josef.melcr@suse.com" date="1777291200">- Fix build with glibc 2.43 (boo#1257312)
  + Add patch:
  - glibc243.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1778846400">- update to 13.1.0 release based on build 25218885: (boo#1265304)
  Please refer to the Release Notes at
  https://github.com/vmware/open-vm-tools/blob/stable-13.1.0/ReleaseNotes.md.
  Support for GNOME Toolkit version 4.
  This release of open-vm-tools supports building with either the
  GNOME Toolkit version 4 (GTK4) or to continue using version 3
  (GTK3). The configure script will accept options to restrict the
  build to either GTK3 or GTK4. If no restriction is applied, the
  latest version for which the required development package(s) are
  installed will be used. Please see the What's New section of the
  Release Notes for details.
  The following github issues have been resolved:
  - issue #707
  - issue #763
  The granular changes that have gone into the open-vm-tools 13.1.0
  release are in the ChangeLog at
  https://github.com/vmware/open-vm-tools/blob/stable-13.1.0/open-vm-tools/ChangeLog.
  For a more complete description of what is new in this release,
  see the What's New and Resolved Issues sections of the Release
  Notes.
  https://github.com/vmware/open-vm-tools/blob/stable-13.1.0/ReleaseNotes.md#whatsnew
  https://github.com/vmware/open-vm-tools/blob/stable-13.1.0/ReleaseNotes.md#resolved-issues</changelog>
</package>
<package pkgid="0575f6a1bc03add7ad8252f5da5570919eb044a93e36448de85374a4064eb633" name="libvulkan_intel" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.5.1"/>
  <changelog author="sndirsch@suse.com" date="1730376000">- added -32bit package for Mesa-libva since it's needed by Steam;
  reported on packman ML:
  https://lists.links2linux.de/pipermail/packman/2024-October/017985.html</changelog>
  <changelog author="mrueckert@suse.de" date="1730376001">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
</package>
<package pkgid="83483f97eff01fd02c125b96f8c6716f2332ec37934713fe7fb46a85f5640dce" name="libvulkan_intel" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.8.1"/>
  <changelog author="mrueckert@suse.de" date="1730376000">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
</package>
<package pkgid="0ceca68eeb5cb0cf7f63b20b0ed5fa22be5b2071826ddeddb8f4cbc4394e9929" name="libvulkan_lvp" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.5.1"/>
  <changelog author="sndirsch@suse.com" date="1730376000">- added -32bit package for Mesa-libva since it's needed by Steam;
  reported on packman ML:
  https://lists.links2linux.de/pipermail/packman/2024-October/017985.html</changelog>
  <changelog author="mrueckert@suse.de" date="1730376001">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
</package>
<package pkgid="4dfa96929b8abc1a6447a771b80b8d589ed704fd155e258c975634f7c388ec19" name="libvulkan_lvp" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.8.1"/>
  <changelog author="mrueckert@suse.de" date="1730376000">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
</package>
<package pkgid="d045811c8b075e979326b18102aa1d658b092eb5bba8eada2de19adc6af62960" name="libvulkan_radeon" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.5.1"/>
  <changelog author="sndirsch@suse.com" date="1730376000">- added -32bit package for Mesa-libva since it's needed by Steam;
  reported on packman ML:
  https://lists.links2linux.de/pipermail/packman/2024-October/017985.html</changelog>
  <changelog author="mrueckert@suse.de" date="1730376001">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
</package>
<package pkgid="e09e9e19886ec1235a2222a8b33d50ae6d529dd694c271da3675572fc283aa12" name="libvulkan_radeon" arch="x86_64">
  <version epoch="0" ver="24.3.3" rel="150700.93.8.1"/>
  <changelog author="mrueckert@suse.de" date="1730376000">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
</package>
<package pkgid="40a460134fecc4fab0abcb08051679a255de2bbc231f067792eb08c421a87fb9" name="libwebkit2gtk-4_0-37" arch="x86_64">
  <version epoch="0" ver="2.48.2" rel="150600.12.40.2"/>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213,
    CVE-2024-23271.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834, CVE-2024-27808, CVE-2024-27820,
    CVE-2024-27833.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843, CVE-2024-54658.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
  <changelog author="mgorse@suse.com" date="1723118400">- Add CVE fixes:
  + webkit2gtk3-CVE-2024-40776.patch (boo#1228613 CVE-2024-40776)
  + webkit2gtk3-CVE-2024-40779.patch (boo#1228693 CVE-2024-40779)
  + webkit2gtk3-CVE-2024-40780.patch (boo#1228694 CVE-2024-40780)
  + webkit2gtk3-CVE-2024-40782.patch (boo#1228695 CVE-2024-40782)</changelog>
  <changelog author="mgorse@suse.com" date="1724068800">- Update to version 2.44.3 (boo#1228697):
  + Fix web process cache suspend/resume when sandbox is enabled.
  + Fix accelerated images dissapearing after scrolling.
  + Fix video flickering with DMA-BUF sink.
  + Fix pointer lock on X11.
  + Fix movement delta on mouse events in GTK3.
  + Undeprecate console message API and make it available in 2022
    API.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-40776, CVE-2024-40779, CVE-2024-40780,
    CVE-2024-40782, CVE-2024-40789, CVE-2024-4558, CVE-2024-27838,
  CVE-2024-27851.
- Drop patches now upstream:
  webkit2gtk3-CVE-2024-40776.patch
  webkit2gtk3-CVE-2024-40779.patch
  webkit2gtk3-CVE-2024-40780.patch
  webkit2gtk3-CVE-2024-40782.patch</changelog>
  <changelog author="mgorse@suse.com" date="1729166400">- Update to version 2.46.0 (boo#1231039):
  + Use Skia instead of cairo for 2D rendering and enable GPU
    rendering by default.
  + Enable offscreen canvas by default.
  + Add support for system tracing with Sysprof.
  + Implement printing using the Print portal.
  + Add new API to load settings from a config file.
  + Add a new setting to enable or disable the 2D canvas
    acceleration (enabled by default).
  + Undeprecate console messages API and make it available in 6.0
    API.
  + Security fixes: CVE-2024-40866, CVE-2024-44187, CVE-2024-44185,
    CVE-2024-54534, CVE-2024-27856.
- Drop webkit2gtk3-disable-dmabuf-nvidia.patch: Should not be
  needed anymore.
- Add webkit2gtk3-angle-s390x.patch: fix the build on s390x.
- Use gcc 13 to match what is tested upstream.
- Pass USE_SYSTEM_SYSPROF_CAPTURE=NO to cmake, avoid building
  sysprof capture for now.
- Add bug281495.patch: fix crash in ProcessLauncher socket
  monitor callback.</changelog>
  <changelog author="mgorse@suse.com" date="1730721600">- Update to version 2.46.3 (boo#1232747):
  + Flatten layers to a plane when preseve-3d style is set.
  + Fix DuckDuckGo links by adding a user agent quirk.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44244, CVE-2024-44296.
  + Changes in version 2.46.2:
  + Own well-known bus name on a11y bus.
  + Improve memory consumption when putImageData is used repeatedly
    on accelerated canvas.
  + Disable cached web process suspension for now to prevent leaks.
  + Improve text kerning with different combinations of antialias
    and hinting settings.
  + Destroy all network sessions on process exit.
  + Fix visible rectangle calculation when there are animations.
  + Fix the build with ENABLE_NOTIFICATIONS=OFF.
  + Fix the build with ENABLE_FULLSCREEN_API=OFF.
  + Fix the build with ENABLE_WEB_AUDIO=OFF.
  + Fix the build on ppc64le.
  + Changes in version 2.46.1:
  + Fix login QR code not shown in WhatsApp web.
  + Disable PSON by default again in GTK 3 API versions.
  + Disable DMABuf video sink by default to prevent file descriptor
    leaks.
  + Fix the build with GCC 13.
- Drop bug281495.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1732536000">- Add webkit2gtk3-CVE-2024-44308.patch: don't allocate DFG register
  after a slow path (boo#1233631 CVE-2024-44308).
- Add webkit2gtk3-CVE-2024-44309.patch: fix a cookie management
  issue (boo#1233632 CVE-2024-44309).</changelog>
  <changelog author="mgorse@suse.com" date="1735300800">- Update to version 2.46.5 (boo#1234851):
  + Fix the build with GBM and release logs disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-54479, CVE-2024-54502, CVE-2024-54505,
    CVE-2024-54508, CVE-2024-54543.
  + Changes in version 2.46.4:
  + Improve memory consumption and performance of Canvas
    getImageData.
  + Fix preserve-3D intersection rendering.
  + Fix video dimensions since GStreamer 1.24.9.
  + Fix the HTTP-based remote Web Inspector not loading in
    Chromium.
  + Fix content filters not working on about:blank iframes.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44308, CVE-2024-44309.
- Drop webkit2gtk3-CVE-2024-44308.patch and
  webkit2gtk3-CVE-2024-44309.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1739188800">- Update to version 2.46.6 (boo#1236946):
  + Fix a crash when enabling Skia CPU rendering.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24143, CVE-2025-24150, CVE-2025-24158,
    CVE-2025-24162.</changelog>
  <changelog author="mgorse@suse.com" date="1741953600">- Add 7d784721.patch: WebGL context primitive restart can be
  toggled from WebContent process (boo#1239547 CVE-2025-24201).</changelog>
  <changelog author="mgorse@suse.com" date="1743508800">- Update to version 2.48.0 (boo#1239863 boo#1239864):
  + Move tiles rendering to worker threads when rendering with the
    GPU.
  + Fix preserve-3D intersection rendering.
  + Added new function for creating Promise objects to
    JavaScripotCore GLib API.
  + The MediaRecorder backend gained WebM support (requires at
    least GStreamer 1.24.9) and audio bitrate configuration
    support.
  + Fix invalid DPI-aware font size conversion.
  + Bring back support for OpenType-SVG fonts using Skia SVG
    module.
  + Add metadata (title and creation/modification date) to the PDF
    document generated for printing.
  + Propagate the font’s computed locale to HarfBuzz.
  + The GPU process build is now enabled for WebGL, but the web
    process is still used by default. The runtime flag
    UseGPUProcessForWebGL can be used to use the GPU process for
    WebGL.
  + Security fixes: CVE-2024-44192, CVE-2024-54467, CVE-2025-24201.
- Drop 7d784721.patch: Fixed upstream.
- Disable speech synthesis. It has been disabled until now, and
  we don't have flite or spiel in SLE.
- Add gcc13-PIE to BuildRequires (bsc#1239950).
- Add webkit2gtk3-iochannel-network-cache.patch: backport upstream
  patch to stop using IOChannel in NetworkCache: hopefully fixes
  crashes in the network process.</changelog>
  <changelog author="mgorse@suse.com" date="1744113600">- Update to version 2.48.1 (boo#1240958 boo#1240961 boo#1240962
  boo#1240963 boo#1240964 boo#1240986 boo#1240987):
  + Limit the data stored in session state.
  + Remove the empty area below the title bar in Web Inspector when
    not docked.
  + Fix the build with GST_DISABLE_GST_DEBUG.
  + Fix the build with GStreamer &lt; 1.20.
  + Fix the build with video disabled.
  + Fix the build with clang 20.
  + Security fixes: CVE-2024-54551, CVE-2025-24208, CVE-2025-24209,
    CVE-2025-24213, CVE-2025-24216, CVE-2025-24264, CVE-2025-30427.
- Add 8bee9eb9.patch: fix the build on non-x86 architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1747828800">- Update to version 2.48.2 (boo#1243282 boo#1243286 boo#1243288
  boo#1243289 boo#1243424 boo#1243596):
  + Enable CSS Overscroll Behavior by default.
  + Change threaded rendering implementation to use Skia API
    instead of WebCore display list that is not thread safe.
  + Fix rendering when device scale factor change comes before the
    web view geometry update.
  + Fix network process crash on exit.
  + Fix the build with ENABLE_RESOURCE_USAGE=OFF.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24223, CVE-2025-31204, CVE-2025-31205,
    CVE-2025-31206, CVE-2025-31215, CVE-2025-31257.
- Drop 8bee9eb9.patch: fixed upstream.</changelog>
</package>
<package pkgid="d378a425087d9b4231214864b0cdc866b0e2bc365d136e7255ae96c0a5f86bc3" name="libwebkit2gtk-4_0-37" arch="x86_64">
  <version epoch="0" ver="2.48.5" rel="150600.12.43.1"/>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213,
    CVE-2024-23271.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834, CVE-2024-27808, CVE-2024-27820,
    CVE-2024-27833.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843, CVE-2024-54658.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
  <changelog author="mgorse@suse.com" date="1723118400">- Add CVE fixes:
  + webkit2gtk3-CVE-2024-40776.patch (boo#1228613 CVE-2024-40776)
  + webkit2gtk3-CVE-2024-40779.patch (boo#1228693 CVE-2024-40779)
  + webkit2gtk3-CVE-2024-40780.patch (boo#1228694 CVE-2024-40780)
  + webkit2gtk3-CVE-2024-40782.patch (boo#1228695 CVE-2024-40782)</changelog>
  <changelog author="mgorse@suse.com" date="1724068800">- Update to version 2.44.3 (boo#1228697):
  + Fix web process cache suspend/resume when sandbox is enabled.
  + Fix accelerated images dissapearing after scrolling.
  + Fix video flickering with DMA-BUF sink.
  + Fix pointer lock on X11.
  + Fix movement delta on mouse events in GTK3.
  + Undeprecate console message API and make it available in 2022
    API.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-40776, CVE-2024-40779, CVE-2024-40780,
    CVE-2024-40782, CVE-2024-40789, CVE-2024-4558, CVE-2024-27838,
  CVE-2024-27851.
- Drop patches now upstream:
  webkit2gtk3-CVE-2024-40776.patch
  webkit2gtk3-CVE-2024-40779.patch
  webkit2gtk3-CVE-2024-40780.patch
  webkit2gtk3-CVE-2024-40782.patch</changelog>
  <changelog author="mgorse@suse.com" date="1729166400">- Update to version 2.46.0 (boo#1231039):
  + Use Skia instead of cairo for 2D rendering and enable GPU
    rendering by default.
  + Enable offscreen canvas by default.
  + Add support for system tracing with Sysprof.
  + Implement printing using the Print portal.
  + Add new API to load settings from a config file.
  + Add a new setting to enable or disable the 2D canvas
    acceleration (enabled by default).
  + Undeprecate console messages API and make it available in 6.0
    API.
  + Security fixes: CVE-2024-40866, CVE-2024-44187, CVE-2024-44185,
    CVE-2024-54534, CVE-2024-27856.
- Drop webkit2gtk3-disable-dmabuf-nvidia.patch: Should not be
  needed anymore.
- Add webkit2gtk3-angle-s390x.patch: fix the build on s390x.
- Use gcc 13 to match what is tested upstream.
- Pass USE_SYSTEM_SYSPROF_CAPTURE=NO to cmake, avoid building
  sysprof capture for now.
- Add bug281495.patch: fix crash in ProcessLauncher socket
  monitor callback.</changelog>
  <changelog author="mgorse@suse.com" date="1730721600">- Update to version 2.46.3 (boo#1232747):
  + Flatten layers to a plane when preseve-3d style is set.
  + Fix DuckDuckGo links by adding a user agent quirk.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44244, CVE-2024-44296.
  + Changes in version 2.46.2:
  + Own well-known bus name on a11y bus.
  + Improve memory consumption when putImageData is used repeatedly
    on accelerated canvas.
  + Disable cached web process suspension for now to prevent leaks.
  + Improve text kerning with different combinations of antialias
    and hinting settings.
  + Destroy all network sessions on process exit.
  + Fix visible rectangle calculation when there are animations.
  + Fix the build with ENABLE_NOTIFICATIONS=OFF.
  + Fix the build with ENABLE_FULLSCREEN_API=OFF.
  + Fix the build with ENABLE_WEB_AUDIO=OFF.
  + Fix the build on ppc64le.
  + Changes in version 2.46.1:
  + Fix login QR code not shown in WhatsApp web.
  + Disable PSON by default again in GTK 3 API versions.
  + Disable DMABuf video sink by default to prevent file descriptor
    leaks.
  + Fix the build with GCC 13.
- Drop bug281495.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1732536000">- Add webkit2gtk3-CVE-2024-44308.patch: don't allocate DFG register
  after a slow path (boo#1233631 CVE-2024-44308).
- Add webkit2gtk3-CVE-2024-44309.patch: fix a cookie management
  issue (boo#1233632 CVE-2024-44309).</changelog>
  <changelog author="mgorse@suse.com" date="1735300800">- Update to version 2.46.5 (boo#1234851):
  + Fix the build with GBM and release logs disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-54479, CVE-2024-54502, CVE-2024-54505,
    CVE-2024-54508, CVE-2024-54543.
  + Changes in version 2.46.4:
  + Improve memory consumption and performance of Canvas
    getImageData.
  + Fix preserve-3D intersection rendering.
  + Fix video dimensions since GStreamer 1.24.9.
  + Fix the HTTP-based remote Web Inspector not loading in
    Chromium.
  + Fix content filters not working on about:blank iframes.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44308, CVE-2024-44309.
- Drop webkit2gtk3-CVE-2024-44308.patch and
  webkit2gtk3-CVE-2024-44309.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1739188800">- Update to version 2.46.6 (boo#1236946):
  + Fix a crash when enabling Skia CPU rendering.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24143, CVE-2025-24150, CVE-2025-24158,
    CVE-2025-24162.</changelog>
  <changelog author="mgorse@suse.com" date="1741953600">- Add 7d784721.patch: WebGL context primitive restart can be
  toggled from WebContent process (boo#1239547 CVE-2025-24201).</changelog>
  <changelog author="mgorse@suse.com" date="1743508800">- Update to version 2.48.0 (boo#1239863 boo#1239864):
  + Move tiles rendering to worker threads when rendering with the
    GPU.
  + Fix preserve-3D intersection rendering.
  + Added new function for creating Promise objects to
    JavaScripotCore GLib API.
  + The MediaRecorder backend gained WebM support (requires at
    least GStreamer 1.24.9) and audio bitrate configuration
    support.
  + Fix invalid DPI-aware font size conversion.
  + Bring back support for OpenType-SVG fonts using Skia SVG
    module.
  + Add metadata (title and creation/modification date) to the PDF
    document generated for printing.
  + Propagate the font’s computed locale to HarfBuzz.
  + The GPU process build is now enabled for WebGL, but the web
    process is still used by default. The runtime flag
    UseGPUProcessForWebGL can be used to use the GPU process for
    WebGL.
  + Security fixes: CVE-2024-44192, CVE-2024-54467, CVE-2025-24201,
  CVE-2025-24189.
- Drop 7d784721.patch: Fixed upstream.
- Disable speech synthesis. It has been disabled until now, and
  we don't have flite or spiel in SLE.
- Add gcc13-PIE to BuildRequires (bsc#1239950).
- Add webkit2gtk3-iochannel-network-cache.patch: backport upstream
  patch to stop using IOChannel in NetworkCache: hopefully fixes
  crashes in the network process.</changelog>
  <changelog author="mgorse@suse.com" date="1744113600">- Update to version 2.48.1 (boo#1240958 boo#1240961 boo#1240962
  boo#1240963 boo#1240964 boo#1240986 boo#1240987):
  + Limit the data stored in session state.
  + Remove the empty area below the title bar in Web Inspector when
    not docked.
  + Fix the build with GST_DISABLE_GST_DEBUG.
  + Fix the build with GStreamer &lt; 1.20.
  + Fix the build with video disabled.
  + Fix the build with clang 20.
  + Security fixes: CVE-2024-54551, CVE-2025-24208, CVE-2025-24209,
    CVE-2025-24213, CVE-2025-24216, CVE-2025-24264, CVE-2025-30427.
- Add 8bee9eb9.patch: fix the build on non-x86 architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1747828800">- Update to version 2.48.2 (boo#1243282 boo#1243286 boo#1243288
  boo#1243289 boo#1243424 boo#1243596):
  + Enable CSS Overscroll Behavior by default.
  + Change threaded rendering implementation to use Skia API
    instead of WebCore display list that is not thread safe.
  + Fix rendering when device scale factor change comes before the
    web view geometry update.
  + Fix network process crash on exit.
  + Fix the build with ENABLE_RESOURCE_USAGE=OFF.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24223, CVE-2025-31204, CVE-2025-31205,
    CVE-2025-31206, CVE-2025-31215, CVE-2025-31257.
- Drop 8bee9eb9.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1754395200">- Update to version 2.48.5 (boo#1247562 boo#1247563 boo#1247564
  boo#1247595 boo#1247596 boo#1247597 boo#1247598 boo#1247599
  boo#1247600):
  + Fix several crashes.
  + Security fixes: CVE-2025-31273, CVE-2025-31278, CVE-2025-43211,
    CVE-2025-43212, CVE-2025-43216, CVE-2025-43227, CVE-2025-43228,
    CVE-2025-43240, CVE-2025-43265, CVE-2025-6558.
  + Changes in version 2.48.4:
  + Improve emoji font selection with USE_SKIA=ON.
  + Improve playback of multimedia streams from blob URLs.
  + Fix the build with USE_SKIA_OPENTYPE_SVG=ON and
    USE_SYSPROF_CAPTURE=ON.
  + Fix the build on LoongArch with USE_SKIA=ON.
  + Fix crash when using a WebKitWebView widget in an offscreen
    window.
  + Fix several crashes and rendering issues.
  + Changes in version 2.48.3:
  + Fix a crash introduced by the new threaded rendering
    implementation using Skia API.
  + Improve rendering performance by recording layers once and
    replaying every dirty region in different worker threads.
  + Fix a crash when setting WEBKIT_SKIA_GPU_PAINTING_THREADS=0.
  + Fix a reference cycle in webkitmediastreamsrc preventing its
    disposal.
- Increase mem_per_process again to avoid running out of memory.</changelog>
</package>
<package pkgid="1488791412b0a471bd0d9ca3b0ddf94e992f56ce0e4c703cce5b5ced04e0b2d4" name="libwebkit2gtk-4_0-37" arch="x86_64">
  <version epoch="0" ver="2.50.1" rel="150600.12.48.3"/>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213,
    CVE-2024-23271.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834, CVE-2024-27808, CVE-2024-27820,
    CVE-2024-27833.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843, CVE-2024-54658.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
  <changelog author="mgorse@suse.com" date="1723118400">- Add CVE fixes:
  + webkit2gtk3-CVE-2024-40776.patch (boo#1228613 CVE-2024-40776)
  + webkit2gtk3-CVE-2024-40779.patch (boo#1228693 CVE-2024-40779)
  + webkit2gtk3-CVE-2024-40780.patch (boo#1228694 CVE-2024-40780)
  + webkit2gtk3-CVE-2024-40782.patch (boo#1228695 CVE-2024-40782)</changelog>
  <changelog author="mgorse@suse.com" date="1724068800">- Update to version 2.44.3 (boo#1228697):
  + Fix web process cache suspend/resume when sandbox is enabled.
  + Fix accelerated images dissapearing after scrolling.
  + Fix video flickering with DMA-BUF sink.
  + Fix pointer lock on X11.
  + Fix movement delta on mouse events in GTK3.
  + Undeprecate console message API and make it available in 2022
    API.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-40776, CVE-2024-40779, CVE-2024-40780,
    CVE-2024-40782, CVE-2024-40789, CVE-2024-4558, CVE-2024-27838,
  CVE-2024-27851.
- Drop patches now upstream:
  webkit2gtk3-CVE-2024-40776.patch
  webkit2gtk3-CVE-2024-40779.patch
  webkit2gtk3-CVE-2024-40780.patch
  webkit2gtk3-CVE-2024-40782.patch</changelog>
  <changelog author="mgorse@suse.com" date="1729166400">- Update to version 2.46.0 (boo#1231039):
  + Use Skia instead of cairo for 2D rendering and enable GPU
    rendering by default.
  + Enable offscreen canvas by default.
  + Add support for system tracing with Sysprof.
  + Implement printing using the Print portal.
  + Add new API to load settings from a config file.
  + Add a new setting to enable or disable the 2D canvas
    acceleration (enabled by default).
  + Undeprecate console messages API and make it available in 6.0
    API.
  + Security fixes: CVE-2024-40866, CVE-2024-44187, CVE-2024-44185,
    CVE-2024-54534, CVE-2024-27856.
- Drop webkit2gtk3-disable-dmabuf-nvidia.patch: Should not be
  needed anymore.
- Add webkit2gtk3-angle-s390x.patch: fix the build on s390x.
- Use gcc 13 to match what is tested upstream.
- Pass USE_SYSTEM_SYSPROF_CAPTURE=NO to cmake, avoid building
  sysprof capture for now.
- Add bug281495.patch: fix crash in ProcessLauncher socket
  monitor callback.</changelog>
  <changelog author="mgorse@suse.com" date="1730721600">- Update to version 2.46.3 (boo#1232747):
  + Flatten layers to a plane when preseve-3d style is set.
  + Fix DuckDuckGo links by adding a user agent quirk.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44244, CVE-2024-44296.
  + Changes in version 2.46.2:
  + Own well-known bus name on a11y bus.
  + Improve memory consumption when putImageData is used repeatedly
    on accelerated canvas.
  + Disable cached web process suspension for now to prevent leaks.
  + Improve text kerning with different combinations of antialias
    and hinting settings.
  + Destroy all network sessions on process exit.
  + Fix visible rectangle calculation when there are animations.
  + Fix the build with ENABLE_NOTIFICATIONS=OFF.
  + Fix the build with ENABLE_FULLSCREEN_API=OFF.
  + Fix the build with ENABLE_WEB_AUDIO=OFF.
  + Fix the build on ppc64le.
  + Changes in version 2.46.1:
  + Fix login QR code not shown in WhatsApp web.
  + Disable PSON by default again in GTK 3 API versions.
  + Disable DMABuf video sink by default to prevent file descriptor
    leaks.
  + Fix the build with GCC 13.
- Drop bug281495.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1732536000">- Add webkit2gtk3-CVE-2024-44308.patch: don't allocate DFG register
  after a slow path (boo#1233631 CVE-2024-44308).
- Add webkit2gtk3-CVE-2024-44309.patch: fix a cookie management
  issue (boo#1233632 CVE-2024-44309).</changelog>
  <changelog author="mgorse@suse.com" date="1735300800">- Update to version 2.46.5 (boo#1234851):
  + Fix the build with GBM and release logs disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-54479, CVE-2024-54502, CVE-2024-54505,
    CVE-2024-54508, CVE-2024-54543.
  + Changes in version 2.46.4:
  + Improve memory consumption and performance of Canvas
    getImageData.
  + Fix preserve-3D intersection rendering.
  + Fix video dimensions since GStreamer 1.24.9.
  + Fix the HTTP-based remote Web Inspector not loading in
    Chromium.
  + Fix content filters not working on about:blank iframes.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44308, CVE-2024-44309.
- Drop webkit2gtk3-CVE-2024-44308.patch and
  webkit2gtk3-CVE-2024-44309.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1739188800">- Update to version 2.46.6 (boo#1236946):
  + Fix a crash when enabling Skia CPU rendering.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24143, CVE-2025-24150, CVE-2025-24158,
    CVE-2025-24162.</changelog>
  <changelog author="mgorse@suse.com" date="1741953600">- Add 7d784721.patch: WebGL context primitive restart can be
  toggled from WebContent process (boo#1239547 CVE-2025-24201).</changelog>
  <changelog author="mgorse@suse.com" date="1743508800">- Update to version 2.48.0 (boo#1239863 boo#1239864):
  + Move tiles rendering to worker threads when rendering with the
    GPU.
  + Fix preserve-3D intersection rendering.
  + Added new function for creating Promise objects to
    JavaScripotCore GLib API.
  + The MediaRecorder backend gained WebM support (requires at
    least GStreamer 1.24.9) and audio bitrate configuration
    support.
  + Fix invalid DPI-aware font size conversion.
  + Bring back support for OpenType-SVG fonts using Skia SVG
    module.
  + Add metadata (title and creation/modification date) to the PDF
    document generated for printing.
  + Propagate the font’s computed locale to HarfBuzz.
  + The GPU process build is now enabled for WebGL, but the web
    process is still used by default. The runtime flag
    UseGPUProcessForWebGL can be used to use the GPU process for
    WebGL.
  + Security fixes: CVE-2024-44192, CVE-2024-54467, CVE-2025-24201,
  CVE-2025-24189.
- Drop 7d784721.patch: Fixed upstream.
- Disable speech synthesis. It has been disabled until now, and
  we don't have flite or spiel in SLE.
- Add gcc13-PIE to BuildRequires (bsc#1239950).
- Add webkit2gtk3-iochannel-network-cache.patch: backport upstream
  patch to stop using IOChannel in NetworkCache: hopefully fixes
  crashes in the network process.</changelog>
  <changelog author="mgorse@suse.com" date="1744113600">- Update to version 2.48.1 (boo#1240958 boo#1240961 boo#1240962
  boo#1240963 boo#1240964 boo#1240986 boo#1240987):
  + Limit the data stored in session state.
  + Remove the empty area below the title bar in Web Inspector when
    not docked.
  + Fix the build with GST_DISABLE_GST_DEBUG.
  + Fix the build with GStreamer &lt; 1.20.
  + Fix the build with video disabled.
  + Fix the build with clang 20.
  + Security fixes: CVE-2024-54551, CVE-2025-24208, CVE-2025-24209,
    CVE-2025-24213, CVE-2025-24216, CVE-2025-24264, CVE-2025-30427.
- Add 8bee9eb9.patch: fix the build on non-x86 architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1747828800">- Update to version 2.48.2 (boo#1243282 boo#1243286 boo#1243288
  boo#1243289 boo#1243424 boo#1243596):
  + Enable CSS Overscroll Behavior by default.
  + Change threaded rendering implementation to use Skia API
    instead of WebCore display list that is not thread safe.
  + Fix rendering when device scale factor change comes before the
    web view geometry update.
  + Fix network process crash on exit.
  + Fix the build with ENABLE_RESOURCE_USAGE=OFF.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24223, CVE-2025-31204, CVE-2025-31205,
    CVE-2025-31206, CVE-2025-31215, CVE-2025-31257.
- Drop 8bee9eb9.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1754395200">- Update to version 2.48.5 (boo#1247562 boo#1247563 boo#1247564
  boo#1247595 boo#1247596 boo#1247597 boo#1247598 boo#1247599
  boo#1247600):
  + Fix several crashes.
  + Security fixes: CVE-2025-31273, CVE-2025-31278, CVE-2025-43211,
    CVE-2025-43212, CVE-2025-43216, CVE-2025-43227, CVE-2025-43228,
    CVE-2025-43240, CVE-2025-43265, CVE-2025-6558.
  + Changes in version 2.48.4:
  + Improve emoji font selection with USE_SKIA=ON.
  + Improve playback of multimedia streams from blob URLs.
  + Fix the build with USE_SKIA_OPENTYPE_SVG=ON and
    USE_SYSPROF_CAPTURE=ON.
  + Fix the build on LoongArch with USE_SKIA=ON.
  + Fix crash when using a WebKitWebView widget in an offscreen
    window.
  + Fix several crashes and rendering issues.
  + Changes in version 2.48.3:
  + Fix a crash introduced by the new threaded rendering
    implementation using Skia API.
  + Improve rendering performance by recording layers once and
    replaying every dirty region in different worker threads.
  + Fix a crash when setting WEBKIT_SKIA_GPU_PAINTING_THREADS=0.
  + Fix a reference cycle in webkitmediastreamsrc preventing its
    disposal.
- Increase mem_per_process again to avoid running out of memory.</changelog>
  <changelog author="mgorse@suse.com" date="1758456000">- Update to version 2.50.0 (boo#1250439 boo#1250440 boo#1250441
  boo#1250442):
  + Improved rendering performance by recording each layer once and
    replaying every dirty region in different worker threads.
  + Enable damage propagation to the UI process by default.
  + CSS property font-variant-emoji is now enabled by default.
  + Font synthesis properties (bold/italic) are now properly
    handled.
  + Ensure web view is focused on tap gesture.
  + Added new API to get the theme color of a WebKitWebView.
  + Security fixes: CVE-2025-43272, CVE-2025-43342, CVE-2025-43356,
  CVE-2025-43368.
- Drop webkit2gtk3-iochannel-network-cache.patch: fixed upstream.
- Add webkit2gtk3-i586-build-fix.patch: fix the build on i586.
- Force the garbage collector to run more often when compiling on
  some architectures. Needed to avoid running out of memory.
- Remove _constraints override for armv6l and armv7l. They were not
  as restrictive as we would like and now seem unnecessary.</changelog>
  <changelog author="mgorse@suse.com" date="1760443200">- Update to version 2.50.1 (boo#1251975):
  + Improve text rendering performance.
  + Fix audio playback broken on instagram.
  + Fix rendering of layers with fractional transforms.
  + Fix the build with ENABLE(VIDEO) disabled.
  + Fix the build in s390x.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43343.
- Drop webkit2gtk3-i586-build-fix.patch: Merged upstream.
- Re-enable LTO on targets where it is not known to make the
  linker run out of memory.</changelog>
</package>
<package pkgid="3c83f8d1f5c8e83cee7f42119f953c803d33b846cc870ea3f99c21c366818d03" name="libwebkit2gtk-4_0-37" arch="x86_64">
  <version epoch="0" ver="2.50.4" rel="150600.12.54.1"/>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834, CVE-2024-27808, CVE-2024-27820,
    CVE-2024-27833.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843, CVE-2024-54658.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
  <changelog author="mgorse@suse.com" date="1723118400">- Add CVE fixes:
  + webkit2gtk3-CVE-2024-40776.patch (boo#1228613 CVE-2024-40776)
  + webkit2gtk3-CVE-2024-40779.patch (boo#1228693 CVE-2024-40779)
  + webkit2gtk3-CVE-2024-40780.patch (boo#1228694 CVE-2024-40780)
  + webkit2gtk3-CVE-2024-40782.patch (boo#1228695 CVE-2024-40782)</changelog>
  <changelog author="mgorse@suse.com" date="1724068800">- Update to version 2.44.3 (boo#1228697):
  + Fix web process cache suspend/resume when sandbox is enabled.
  + Fix accelerated images dissapearing after scrolling.
  + Fix video flickering with DMA-BUF sink.
  + Fix pointer lock on X11.
  + Fix movement delta on mouse events in GTK3.
  + Undeprecate console message API and make it available in 2022
    API.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-40776, CVE-2024-40779, CVE-2024-40780,
    CVE-2024-40782, CVE-2024-40789, CVE-2024-4558, CVE-2024-27838,
  CVE-2024-27851.
- Drop patches now upstream:
  webkit2gtk3-CVE-2024-40776.patch
  webkit2gtk3-CVE-2024-40779.patch
  webkit2gtk3-CVE-2024-40780.patch
  webkit2gtk3-CVE-2024-40782.patch</changelog>
  <changelog author="mgorse@suse.com" date="1729166400">- Update to version 2.46.0 (boo#1231039):
  + Use Skia instead of cairo for 2D rendering and enable GPU
    rendering by default.
  + Enable offscreen canvas by default.
  + Add support for system tracing with Sysprof.
  + Implement printing using the Print portal.
  + Add new API to load settings from a config file.
  + Add a new setting to enable or disable the 2D canvas
    acceleration (enabled by default).
  + Undeprecate console messages API and make it available in 6.0
    API.
  + Security fixes: CVE-2024-40866, CVE-2024-44187, CVE-2024-44185,
    CVE-2024-54534, CVE-2024-27856, CVE-2025-43480.
- Drop webkit2gtk3-disable-dmabuf-nvidia.patch: Should not be
  needed anymore.
- Add webkit2gtk3-angle-s390x.patch: fix the build on s390x.
- Use gcc 13 to match what is tested upstream.
- Pass USE_SYSTEM_SYSPROF_CAPTURE=NO to cmake, avoid building
  sysprof capture for now.
- Add bug281495.patch: fix crash in ProcessLauncher socket
  monitor callback.</changelog>
  <changelog author="mgorse@suse.com" date="1730721600">- Update to version 2.46.3 (boo#1232747):
  + Flatten layers to a plane when preseve-3d style is set.
  + Fix DuckDuckGo links by adding a user agent quirk.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44244, CVE-2024-44296.
  + Changes in version 2.46.2:
  + Own well-known bus name on a11y bus.
  + Improve memory consumption when putImageData is used repeatedly
    on accelerated canvas.
  + Disable cached web process suspension for now to prevent leaks.
  + Improve text kerning with different combinations of antialias
    and hinting settings.
  + Destroy all network sessions on process exit.
  + Fix visible rectangle calculation when there are animations.
  + Fix the build with ENABLE_NOTIFICATIONS=OFF.
  + Fix the build with ENABLE_FULLSCREEN_API=OFF.
  + Fix the build with ENABLE_WEB_AUDIO=OFF.
  + Fix the build on ppc64le.
  + Changes in version 2.46.1:
  + Fix login QR code not shown in WhatsApp web.
  + Disable PSON by default again in GTK 3 API versions.
  + Disable DMABuf video sink by default to prevent file descriptor
    leaks.
  + Fix the build with GCC 13.
- Drop bug281495.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1732536000">- Add webkit2gtk3-CVE-2024-44308.patch: don't allocate DFG register
  after a slow path (boo#1233631 CVE-2024-44308).
- Add webkit2gtk3-CVE-2024-44309.patch: fix a cookie management
  issue (boo#1233632 CVE-2024-44309).</changelog>
  <changelog author="mgorse@suse.com" date="1735300800">- Update to version 2.46.5 (boo#1234851):
  + Fix the build with GBM and release logs disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-54479, CVE-2024-54502, CVE-2024-54505,
    CVE-2024-54508, CVE-2024-54543.
  + Changes in version 2.46.4:
  + Improve memory consumption and performance of Canvas
    getImageData.
  + Fix preserve-3D intersection rendering.
  + Fix video dimensions since GStreamer 1.24.9.
  + Fix the HTTP-based remote Web Inspector not loading in
    Chromium.
  + Fix content filters not working on about:blank iframes.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44308, CVE-2024-44309.
- Drop webkit2gtk3-CVE-2024-44308.patch and
  webkit2gtk3-CVE-2024-44309.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1739188800">- Update to version 2.46.6 (boo#1236946):
  + Fix a crash when enabling Skia CPU rendering.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24143, CVE-2025-24150, CVE-2025-24158,
    CVE-2025-24162.</changelog>
  <changelog author="mgorse@suse.com" date="1741953600">- Add 7d784721.patch: WebGL context primitive restart can be
  toggled from WebContent process (boo#1239547 CVE-2025-24201).</changelog>
  <changelog author="mgorse@suse.com" date="1743508800">- Update to version 2.48.0 (boo#1239863 boo#1239864):
  + Move tiles rendering to worker threads when rendering with the
    GPU.
  + Fix preserve-3D intersection rendering.
  + Added new function for creating Promise objects to
    JavaScripotCore GLib API.
  + The MediaRecorder backend gained WebM support (requires at
    least GStreamer 1.24.9) and audio bitrate configuration
    support.
  + Fix invalid DPI-aware font size conversion.
  + Bring back support for OpenType-SVG fonts using Skia SVG
    module.
  + Add metadata (title and creation/modification date) to the PDF
    document generated for printing.
  + Propagate the font’s computed locale to HarfBuzz.
  + The GPU process build is now enabled for WebGL, but the web
    process is still used by default. The runtime flag
    UseGPUProcessForWebGL can be used to use the GPU process for
    WebGL.
  + Security fixes: CVE-2024-44192, CVE-2024-54467, CVE-2025-24201,
  CVE-2025-24189.
- Drop 7d784721.patch: Fixed upstream.
- Disable speech synthesis. It has been disabled until now, and
  we don't have flite or spiel in SLE.
- Add gcc13-PIE to BuildRequires (bsc#1239950).
- Add webkit2gtk3-iochannel-network-cache.patch: backport upstream
  patch to stop using IOChannel in NetworkCache: hopefully fixes
  crashes in the network process.</changelog>
  <changelog author="mgorse@suse.com" date="1744113600">- Update to version 2.48.1 (boo#1240958 boo#1240961 boo#1240962
  boo#1240963 boo#1240964 boo#1240986 boo#1240987):
  + Limit the data stored in session state.
  + Remove the empty area below the title bar in Web Inspector when
    not docked.
  + Fix the build with GST_DISABLE_GST_DEBUG.
  + Fix the build with GStreamer &lt; 1.20.
  + Fix the build with video disabled.
  + Fix the build with clang 20.
  + Security fixes: CVE-2024-54551, CVE-2025-24208, CVE-2025-24209,
    CVE-2025-24213, CVE-2025-24216, CVE-2025-24264, CVE-2025-30427.
- Add 8bee9eb9.patch: fix the build on non-x86 architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1747828800">- Update to version 2.48.2 (boo#1243282 boo#1243286 boo#1243288
  boo#1243289 boo#1243424 boo#1243596):
  + Enable CSS Overscroll Behavior by default.
  + Change threaded rendering implementation to use Skia API
    instead of WebCore display list that is not thread safe.
  + Fix rendering when device scale factor change comes before the
    web view geometry update.
  + Fix network process crash on exit.
  + Fix the build with ENABLE_RESOURCE_USAGE=OFF.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24223, CVE-2025-31204, CVE-2025-31205,
    CVE-2025-31206, CVE-2025-31215, CVE-2025-31257.
- Drop 8bee9eb9.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1754395200">- Update to version 2.48.5 (boo#1247562 boo#1247563 boo#1247564
  boo#1247595 boo#1247596 boo#1247597 boo#1247598 boo#1247599
  boo#1247600):
  + Fix several crashes.
  + Security fixes: CVE-2025-31273, CVE-2025-31278, CVE-2025-43211,
    CVE-2025-43212, CVE-2025-43216, CVE-2025-43227, CVE-2025-43228,
    CVE-2025-43240, CVE-2025-43265, CVE-2025-6558.
  + Changes in version 2.48.4:
  + Improve emoji font selection with USE_SKIA=ON.
  + Improve playback of multimedia streams from blob URLs.
  + Fix the build with USE_SKIA_OPENTYPE_SVG=ON and
    USE_SYSPROF_CAPTURE=ON.
  + Fix the build on LoongArch with USE_SKIA=ON.
  + Fix crash when using a WebKitWebView widget in an offscreen
    window.
  + Fix several crashes and rendering issues.
  + Changes in version 2.48.3:
  + Fix a crash introduced by the new threaded rendering
    implementation using Skia API.
  + Improve rendering performance by recording layers once and
    replaying every dirty region in different worker threads.
  + Fix a crash when setting WEBKIT_SKIA_GPU_PAINTING_THREADS=0.
  + Fix a reference cycle in webkitmediastreamsrc preventing its
    disposal.
- Increase mem_per_process again to avoid running out of memory.</changelog>
  <changelog author="mgorse@suse.com" date="1758456000">- Update to version 2.50.0 (boo#1250439 boo#1250440 boo#1250441
  boo#1250442):
  + Improved rendering performance by recording each layer once and
    replaying every dirty region in different worker threads.
  + Enable damage propagation to the UI process by default.
  + CSS property font-variant-emoji is now enabled by default.
  + Font synthesis properties (bold/italic) are now properly
    handled.
  + Ensure web view is focused on tap gesture.
  + Added new API to get the theme color of a WebKitWebView.
  + Security fixes: CVE-2025-43272, CVE-2025-43342, CVE-2025-43356,
  CVE-2025-43368, CVE-2025-43419.
- Drop webkit2gtk3-iochannel-network-cache.patch: fixed upstream.
- Add webkit2gtk3-i586-build-fix.patch: fix the build on i586.
- Force the garbage collector to run more often when compiling on
  some architectures. Needed to avoid running out of memory.
- Remove _constraints override for armv6l and armv7l. They were not
  as restrictive as we would like and now seem unnecessary.</changelog>
  <changelog author="mgorse@suse.com" date="1760443200">- Update to version 2.50.1 (boo#1251975):
  + Improve text rendering performance.
  + Fix audio playback broken on instagram.
  + Fix rendering of layers with fractional transforms.
  + Fix the build with ENABLE(VIDEO) disabled.
  + Fix the build in s390x.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43343.
- Drop webkit2gtk3-i586-build-fix.patch: Merged upstream.
- Re-enable LTO on targets where it is not known to make the
  linker run out of memory.</changelog>
  <changelog author="mgorse@suse.com" date="1763985600">- Update to version 2.50.2 (bsc#1254165 bsc#1254166 bsc#1254167
  bsc#1254168 bsc#1254169 bsc#1254170 bsc#1254171 bsc#1254172
  bsc#1254174 bsc#1254176 bsc#1254177 bsc#1254179 bsc#1254208):
  + Prevent unsafe URI schemes from participating in media
    playback.
  + Make jsc_value_array_buffer_get_data() function introspectable.
  + Fix logging in to Google accounts that have a WebAuthn second
    factor configured.
  + Fix loading webkit://gpu when there are no threads configured
    for GPU rendering.
  + Fix rendering gradiants that use the CSS hue interpolation
    method.
  + Fix pasting image data from the clipboard.
  + Fix font-family selection when the font name contains spaces.
  + Fix the build with standard C libraries that lack execinfo.h,
    like Musl or uClibc.
  + Fix capturing canvas snapshots in the Web Inspector.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43392, CVE-2025-43425, CVE-2025-43427,
    CVE-2025-43429, CVE-2025-43430, CVE-2025-43431, CVE-2025-43432,
    CVE-2025-43434, CVE-2025-43440, CVE-2025-43443, CVE-2025-13502.
- Add webkit2gtk3-undefined-symbol.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1765195200">- Update to version 2.50.3 (bsc#1254473 bsc#1254498 bsc#1254509):
  + Fix seeking and looping of media elements that set the "loop"
    property.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-13947, CVE-2025-43421, CVE-2025-43458,
    CVE-2025-66287.
- Drop webkit2gtk3-undefined-symbol.patch: fixed upstream.
- Use %limit_build. Also define %dwz_low_mem_die_limit and
  %dwz_max_die_limit, similar to what we have in wpewebkit.
  This should simplify the logic for limiting jobs and will
  hopefully help with intermittent build failures.</changelog>
  <changelog author="mgorse@suse.com" date="1765972800">- Update to version 2.50.4 (bsc#1255183 bsc#1255191 bsc#1255194
  bsc#1255195 bsc#1255198 bsc#1255200 bsc#1255497):
  + Correctly handle the program name passed to the sleep disabler.
  + Ensure GStreamer is initialized before using the Quirks.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-14174, CVE-2025-43501, CVE-2025-43529,
    CVE-2025-43531, CVE-2025-43535, CVE-2025-43536, CVE-2025-43541.
- Add webkit2gtk3-a11y-fix-role-mapping.patch: fix a11y regression
  where AT-SPI roles were mapped incorrectly.</changelog>
</package>
<package pkgid="2d293d14595e36ed8c7ff28dd7ef53d7a806378ff4b13bc4ff463baa33dcacc7" name="libwebkit2gtk-4_0-37" arch="x86_64">
  <version epoch="0" ver="2.52.1" rel="150600.12.63.1"/>
  <changelog author="mgorse@suse.com" date="1724068800">- Update to version 2.44.3 (boo#1228697):
  + Fix web process cache suspend/resume when sandbox is enabled.
  + Fix accelerated images dissapearing after scrolling.
  + Fix video flickering with DMA-BUF sink.
  + Fix pointer lock on X11.
  + Fix movement delta on mouse events in GTK3.
  + Undeprecate console message API and make it available in 2022
    API.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-40776, CVE-2024-40779, CVE-2024-40780,
    CVE-2024-40782, CVE-2024-40789, CVE-2024-4558, CVE-2024-27838,
  CVE-2024-27851.
- Drop patches now upstream:
  webkit2gtk3-CVE-2024-40776.patch
  webkit2gtk3-CVE-2024-40779.patch
  webkit2gtk3-CVE-2024-40780.patch
  webkit2gtk3-CVE-2024-40782.patch</changelog>
  <changelog author="mgorse@suse.com" date="1729166400">- Update to version 2.46.0 (boo#1231039):
  + Use Skia instead of cairo for 2D rendering and enable GPU
    rendering by default.
  + Enable offscreen canvas by default.
  + Add support for system tracing with Sysprof.
  + Implement printing using the Print portal.
  + Add new API to load settings from a config file.
  + Add a new setting to enable or disable the 2D canvas
    acceleration (enabled by default).
  + Undeprecate console messages API and make it available in 6.0
    API.
  + Security fixes: CVE-2024-40866, CVE-2024-44187, CVE-2024-44185,
    CVE-2024-54534, CVE-2024-27856, CVE-2025-43480.
- Drop webkit2gtk3-disable-dmabuf-nvidia.patch: Should not be
  needed anymore.
- Add webkit2gtk3-angle-s390x.patch: fix the build on s390x.
- Use gcc 13 to match what is tested upstream.
- Pass USE_SYSTEM_SYSPROF_CAPTURE=NO to cmake, avoid building
  sysprof capture for now.
- Add bug281495.patch: fix crash in ProcessLauncher socket
  monitor callback.</changelog>
  <changelog author="mgorse@suse.com" date="1730721600">- Update to version 2.46.3 (boo#1232747):
  + Flatten layers to a plane when preseve-3d style is set.
  + Fix DuckDuckGo links by adding a user agent quirk.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44244, CVE-2024-44296.
  + Changes in version 2.46.2:
  + Own well-known bus name on a11y bus.
  + Improve memory consumption when putImageData is used repeatedly
    on accelerated canvas.
  + Disable cached web process suspension for now to prevent leaks.
  + Improve text kerning with different combinations of antialias
    and hinting settings.
  + Destroy all network sessions on process exit.
  + Fix visible rectangle calculation when there are animations.
  + Fix the build with ENABLE_NOTIFICATIONS=OFF.
  + Fix the build with ENABLE_FULLSCREEN_API=OFF.
  + Fix the build with ENABLE_WEB_AUDIO=OFF.
  + Fix the build on ppc64le.
  + Changes in version 2.46.1:
  + Fix login QR code not shown in WhatsApp web.
  + Disable PSON by default again in GTK 3 API versions.
  + Disable DMABuf video sink by default to prevent file descriptor
    leaks.
  + Fix the build with GCC 13.
- Drop bug281495.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1732536000">- Add webkit2gtk3-CVE-2024-44308.patch: don't allocate DFG register
  after a slow path (boo#1233631 CVE-2024-44308).
- Add webkit2gtk3-CVE-2024-44309.patch: fix a cookie management
  issue (boo#1233632 CVE-2024-44309).</changelog>
  <changelog author="mgorse@suse.com" date="1735300800">- Update to version 2.46.5 (boo#1234851):
  + Fix the build with GBM and release logs disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-54479, CVE-2024-54502, CVE-2024-54505,
    CVE-2024-54508, CVE-2024-54543.
  + Changes in version 2.46.4:
  + Improve memory consumption and performance of Canvas
    getImageData.
  + Fix preserve-3D intersection rendering.
  + Fix video dimensions since GStreamer 1.24.9.
  + Fix the HTTP-based remote Web Inspector not loading in
    Chromium.
  + Fix content filters not working on about:blank iframes.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44308, CVE-2024-44309.
- Drop webkit2gtk3-CVE-2024-44308.patch and
  webkit2gtk3-CVE-2024-44309.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1739188800">- Update to version 2.46.6 (boo#1236946):
  + Fix a crash when enabling Skia CPU rendering.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24143, CVE-2025-24150, CVE-2025-24158,
    CVE-2025-24162.</changelog>
  <changelog author="mgorse@suse.com" date="1741953600">- Add 7d784721.patch: WebGL context primitive restart can be
  toggled from WebContent process (boo#1239547 CVE-2025-24201).</changelog>
  <changelog author="mgorse@suse.com" date="1743508800">- Update to version 2.48.0 (boo#1239863 boo#1239864):
  + Move tiles rendering to worker threads when rendering with the
    GPU.
  + Fix preserve-3D intersection rendering.
  + Added new function for creating Promise objects to
    JavaScripotCore GLib API.
  + The MediaRecorder backend gained WebM support (requires at
    least GStreamer 1.24.9) and audio bitrate configuration
    support.
  + Fix invalid DPI-aware font size conversion.
  + Bring back support for OpenType-SVG fonts using Skia SVG
    module.
  + Add metadata (title and creation/modification date) to the PDF
    document generated for printing.
  + Propagate the font’s computed locale to HarfBuzz.
  + The GPU process build is now enabled for WebGL, but the web
    process is still used by default. The runtime flag
    UseGPUProcessForWebGL can be used to use the GPU process for
    WebGL.
  + Security fixes: CVE-2024-44192, CVE-2024-54467, CVE-2025-24201,
  CVE-2025-24189.
- Drop 7d784721.patch: Fixed upstream.
- Disable speech synthesis. It has been disabled until now, and
  we don't have flite or spiel in SLE.
- Add gcc13-PIE to BuildRequires (bsc#1239950).
- Add webkit2gtk3-iochannel-network-cache.patch: backport upstream
  patch to stop using IOChannel in NetworkCache: hopefully fixes
  crashes in the network process.</changelog>
  <changelog author="mgorse@suse.com" date="1744113600">- Update to version 2.48.1 (boo#1240958 boo#1240961 boo#1240962
  boo#1240963 boo#1240964 boo#1240986 boo#1240987):
  + Limit the data stored in session state.
  + Remove the empty area below the title bar in Web Inspector when
    not docked.
  + Fix the build with GST_DISABLE_GST_DEBUG.
  + Fix the build with GStreamer &lt; 1.20.
  + Fix the build with video disabled.
  + Fix the build with clang 20.
  + Security fixes: CVE-2024-54551, CVE-2025-24208, CVE-2025-24209,
    CVE-2025-24213, CVE-2025-24216, CVE-2025-24264, CVE-2025-30427.
- Add 8bee9eb9.patch: fix the build on non-x86 architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1747828800">- Update to version 2.48.2 (boo#1243282 boo#1243286 boo#1243288
  boo#1243289 boo#1243424 boo#1243596):
  + Enable CSS Overscroll Behavior by default.
  + Change threaded rendering implementation to use Skia API
    instead of WebCore display list that is not thread safe.
  + Fix rendering when device scale factor change comes before the
    web view geometry update.
  + Fix network process crash on exit.
  + Fix the build with ENABLE_RESOURCE_USAGE=OFF.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24223, CVE-2025-31204, CVE-2025-31205,
    CVE-2025-31206, CVE-2025-31215, CVE-2025-31257.
- Drop 8bee9eb9.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1754395200">- Update to version 2.48.5 (boo#1247562 boo#1247563 boo#1247564
  boo#1247595 boo#1247596 boo#1247597 boo#1247598 boo#1247599
  boo#1247600):
  + Fix several crashes.
  + Security fixes: CVE-2025-31273, CVE-2025-31278, CVE-2025-43211,
    CVE-2025-43212, CVE-2025-43216, CVE-2025-43227, CVE-2025-43228,
    CVE-2025-43240, CVE-2025-43265, CVE-2025-6558.
  + Changes in version 2.48.4:
  + Improve emoji font selection with USE_SKIA=ON.
  + Improve playback of multimedia streams from blob URLs.
  + Fix the build with USE_SKIA_OPENTYPE_SVG=ON and
    USE_SYSPROF_CAPTURE=ON.
  + Fix the build on LoongArch with USE_SKIA=ON.
  + Fix crash when using a WebKitWebView widget in an offscreen
    window.
  + Fix several crashes and rendering issues.
  + Changes in version 2.48.3:
  + Fix a crash introduced by the new threaded rendering
    implementation using Skia API.
  + Improve rendering performance by recording layers once and
    replaying every dirty region in different worker threads.
  + Fix a crash when setting WEBKIT_SKIA_GPU_PAINTING_THREADS=0.
  + Fix a reference cycle in webkitmediastreamsrc preventing its
    disposal.
- Increase mem_per_process again to avoid running out of memory.</changelog>
  <changelog author="mgorse@suse.com" date="1758456000">- Update to version 2.50.0 (boo#1250439 boo#1250440 boo#1250441
  boo#1250442):
  + Improved rendering performance by recording each layer once and
    replaying every dirty region in different worker threads.
  + Enable damage propagation to the UI process by default.
  + CSS property font-variant-emoji is now enabled by default.
  + Font synthesis properties (bold/italic) are now properly
    handled.
  + Ensure web view is focused on tap gesture.
  + Added new API to get the theme color of a WebKitWebView.
  + Security fixes: CVE-2025-43272, CVE-2025-43342, CVE-2025-43356,
  CVE-2025-43368, CVE-2025-43419, CVE-2025-31223, CVE-2025-31277.
- Drop webkit2gtk3-iochannel-network-cache.patch: fixed upstream.
- Add webkit2gtk3-i586-build-fix.patch: fix the build on i586.
- Force the garbage collector to run more often when compiling on
  some architectures. Needed to avoid running out of memory.
- Remove _constraints override for armv6l and armv7l. They were not
  as restrictive as we would like and now seem unnecessary.</changelog>
  <changelog author="mgorse@suse.com" date="1760443200">- Update to version 2.50.1 (boo#1251975):
  + Improve text rendering performance.
  + Fix audio playback broken on instagram.
  + Fix rendering of layers with fractional transforms.
  + Fix the build with ENABLE(VIDEO) disabled.
  + Fix the build in s390x.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43343.
- Drop webkit2gtk3-i586-build-fix.patch: Merged upstream.
- Re-enable LTO on targets where it is not known to make the
  linker run out of memory.</changelog>
  <changelog author="mgorse@suse.com" date="1763985600">- Update to version 2.50.2 (bsc#1254165 bsc#1254166 bsc#1254167
  bsc#1254168 bsc#1254169 bsc#1254170 bsc#1254171 bsc#1254172
  bsc#1254174 bsc#1254176 bsc#1254177 bsc#1254179 bsc#1254208):
  + Prevent unsafe URI schemes from participating in media
    playback.
  + Make jsc_value_array_buffer_get_data() function introspectable.
  + Fix logging in to Google accounts that have a WebAuthn second
    factor configured.
  + Fix loading webkit://gpu when there are no threads configured
    for GPU rendering.
  + Fix rendering gradiants that use the CSS hue interpolation
    method.
  + Fix pasting image data from the clipboard.
  + Fix font-family selection when the font name contains spaces.
  + Fix the build with standard C libraries that lack execinfo.h,
    like Musl or uClibc.
  + Fix capturing canvas snapshots in the Web Inspector.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43392, CVE-2025-43425, CVE-2025-43427,
    CVE-2025-43429, CVE-2025-43430, CVE-2025-43431, CVE-2025-43432,
  +    CVE-2025-43434, CVE-2025-43440, CVE-2025-43443, CVE-2025-13502,
  +    CVE-2025-43433, CVE-2025-43438, CVE-2025-43441.
- Add webkit2gtk3-undefined-symbol.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1765195200">- Update to version 2.50.3 (bsc#1254473 bsc#1254498 bsc#1254509):
  + Fix seeking and looping of media elements that set the "loop"
    property.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-13947, CVE-2025-43421, CVE-2025-43458,
    CVE-2025-66287.
- Drop webkit2gtk3-undefined-symbol.patch: fixed upstream.
- Use %limit_build. Also define %dwz_low_mem_die_limit and
  %dwz_max_die_limit, similar to what we have in wpewebkit.
  This should simplify the logic for limiting jobs and will
  hopefully help with intermittent build failures.</changelog>
  <changelog author="mgorse@suse.com" date="1765972800">- Update to version 2.50.4 (bsc#1255183 bsc#1255191 bsc#1255194
  bsc#1255195 bsc#1255198 bsc#1255200 bsc#1255497):
  + Correctly handle the program name passed to the sleep disabler.
  + Ensure GStreamer is initialized before using the Quirks.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-14174, CVE-2025-43501, CVE-2025-43529,
    CVE-2025-43531, CVE-2025-43535, CVE-2025-43536, CVE-2025-43541.
- Add webkit2gtk3-a11y-fix-role-mapping.patch: fix a11y regression
  where AT-SPI roles were mapped incorrectly.</changelog>
  <changelog author="mgorse@suse.com" date="1773921600">- Update to version 2.52.0:
  + Make scrolling with touch input smoother for small movements.
  + Fix estimated load progress of downloads when Content-Length
    value is wrong.
  + Ensure that "scrollend" events are correctly emitted after
    scroll animations.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43213, CVE-2025-43214, CVE-2025-43457,
    CVE-2025-43511, CVE-2025-46299, CVE-2026-20608, CVE-2026-20635,
    CVE-2026-20636, CVE-2026-20644, CVE-2026-20652, CVE-2026-20676
    (bsc#1259934 bsc#1259935 bsc#1259936 bsc#1259937 bsc#1259938
    bsc#1259939 bsc#1259940 bsc#1259941 bsc#1259942 bsc#1259943
    bsc#1259944 bsc#1259945 bsc#1259946 bsc#1259947 bsc#1259948
    bsc#1259949 bsc#1259950)
- Drop webkit2gtk3-a11y-fix-role-mapping.patch: fixed upstream.
- Add webkit2gtk3-libsoup2.patch: reinstate support for libsoup2.</changelog>
  <changelog author="mgorse@suse.com" date="1774267200">- Add webkit2gtk3-aarch64-build-fix.patch: fix the build with JIT
  disabled.
- Increase limit_build to try to prevent running out of memory.</changelog>
  <changelog author="mgorse@suse.com" date="1774612800">- Pass ggc-min-expand=10 on some architectures, rather than 30.
  We are still getting "virtual memory exhausted" on i586
  sometimes, and hopefully this will help.</changelog>
  <changelog author="mgorse@suse.com" date="1775044800">- Update to version 2.52.1 (bsc#1261172 bsc#1261173 bsc#1261174
  bsc#1261175 bsc#1261176 bsc#1261177 bsc#1261178 bsc#1261179):
  + Reduce the amount of useless MPRIS notifications produced by
    MediaSesion when the information about media being played is
    incomplete.
  + Support turning off USE_GSTREAMER to configure the build with
    all multimedia features disabled.
  + Add Sysprof marks for mouse events.
  + Fix MediaSession icon for iheart.com not being displayed.
  + Fix the build with USE_GSTREAMER_GL disabled.
  + Fix the build with librice version 0.3.0 or newer.
  + Fix several crashes and rendering issues.
  + Translation updates: Georgian.
  + Security fixes: CVE-2026-20643, CVE-2026-20664, CVE-2026-20665,
    CVE-2026-20691, CVE-2026-28857, CVE-2026-28859, CVE-2026-28861,
    CVE-2026-28871.
- Rebase webkit2gtk3-libsoup2.patch.
- Add webkitgtk-gtk3-build-fix.patch: fix the gtk3 build.</changelog>
</package>
<package pkgid="01f726435ede79f4c7263cfe5527532df844742053ff336e4263a8a3f74c0a91" name="libwebkitgtk-6_0-4" arch="x86_64">
  <version epoch="0" ver="2.48.2" rel="150600.12.40.2"/>
  <changelog author="dimstar@opensuse.org" date="1701172800">- Adjust path to (openSUSE renamed) gst-plugin-scanner in the code
  using sed.</changelog>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213,
    CVE-2024-23271.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834, CVE-2024-27808, CVE-2024-27820,
    CVE-2024-27833.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843, CVE-2024-54658.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
  <changelog author="mgorse@suse.com" date="1723118400">- Add CVE fixes:
  + webkit2gtk3-CVE-2024-40776.patch (boo#1228613 CVE-2024-40776)
  + webkit2gtk3-CVE-2024-40779.patch (boo#1228693 CVE-2024-40779)
  + webkit2gtk3-CVE-2024-40780.patch (boo#1228694 CVE-2024-40780)
  + webkit2gtk3-CVE-2024-40782.patch (boo#1228695 CVE-2024-40782)</changelog>
  <changelog author="mgorse@suse.com" date="1724068800">- Update to version 2.44.3 (boo#1228697):
  + Fix web process cache suspend/resume when sandbox is enabled.
  + Fix accelerated images dissapearing after scrolling.
  + Fix video flickering with DMA-BUF sink.
  + Fix pointer lock on X11.
  + Fix movement delta on mouse events in GTK3.
  + Undeprecate console message API and make it available in 2022
    API.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-40776, CVE-2024-40779, CVE-2024-40780,
    CVE-2024-40782, CVE-2024-40789, CVE-2024-4558, CVE-2024-27838,
  CVE-2024-27851.
- Drop patches now upstream:
  webkit2gtk3-CVE-2024-40776.patch
  webkit2gtk3-CVE-2024-40779.patch
  webkit2gtk3-CVE-2024-40780.patch
  webkit2gtk3-CVE-2024-40782.patch</changelog>
  <changelog author="mgorse@suse.com" date="1729166400">- Update to version 2.46.0 (boo#1231039):
  + Use Skia instead of cairo for 2D rendering and enable GPU
    rendering by default.
  + Enable offscreen canvas by default.
  + Add support for system tracing with Sysprof.
  + Implement printing using the Print portal.
  + Add new API to load settings from a config file.
  + Add a new setting to enable or disable the 2D canvas
    acceleration (enabled by default).
  + Undeprecate console messages API and make it available in 6.0
    API.
  + Security fixes: CVE-2024-40866, CVE-2024-44187, CVE-2024-44185,
    CVE-2024-54534, CVE-2024-27856.
- Drop webkit2gtk3-disable-dmabuf-nvidia.patch: Should not be
  needed anymore.
- Add webkit2gtk3-angle-s390x.patch: fix the build on s390x.
- Use gcc 13 to match what is tested upstream.
- Pass USE_SYSTEM_SYSPROF_CAPTURE=NO to cmake, avoid building
  sysprof capture for now.
- Add bug281495.patch: fix crash in ProcessLauncher socket
  monitor callback.</changelog>
  <changelog author="mgorse@suse.com" date="1730721600">- Update to version 2.46.3 (boo#1232747):
  + Flatten layers to a plane when preseve-3d style is set.
  + Fix DuckDuckGo links by adding a user agent quirk.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44244, CVE-2024-44296.
  + Changes in version 2.46.2:
  + Own well-known bus name on a11y bus.
  + Improve memory consumption when putImageData is used repeatedly
    on accelerated canvas.
  + Disable cached web process suspension for now to prevent leaks.
  + Improve text kerning with different combinations of antialias
    and hinting settings.
  + Destroy all network sessions on process exit.
  + Fix visible rectangle calculation when there are animations.
  + Fix the build with ENABLE_NOTIFICATIONS=OFF.
  + Fix the build with ENABLE_FULLSCREEN_API=OFF.
  + Fix the build with ENABLE_WEB_AUDIO=OFF.
  + Fix the build on ppc64le.
  + Changes in version 2.46.1:
  + Fix login QR code not shown in WhatsApp web.
  + Disable PSON by default again in GTK 3 API versions.
  + Disable DMABuf video sink by default to prevent file descriptor
    leaks.
  + Fix the build with GCC 13.
- Drop bug281495.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1732536000">- Add webkit2gtk3-CVE-2024-44308.patch: don't allocate DFG register
  after a slow path (boo#1233631 CVE-2024-44308).
- Add webkit2gtk3-CVE-2024-44309.patch: fix a cookie management
  issue (boo#1233632 CVE-2024-44309).</changelog>
  <changelog author="mgorse@suse.com" date="1735300800">- Update to version 2.46.5 (boo#1234851):
  + Fix the build with GBM and release logs disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-54479, CVE-2024-54502, CVE-2024-54505,
    CVE-2024-54508, CVE-2024-54543.
  + Changes in version 2.46.4:
  + Improve memory consumption and performance of Canvas
    getImageData.
  + Fix preserve-3D intersection rendering.
  + Fix video dimensions since GStreamer 1.24.9.
  + Fix the HTTP-based remote Web Inspector not loading in
    Chromium.
  + Fix content filters not working on about:blank iframes.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44308, CVE-2024-44309.
- Drop webkit2gtk3-CVE-2024-44308.patch and
  webkit2gtk3-CVE-2024-44309.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1739188800">- Update to version 2.46.6 (boo#1236946):
  + Fix a crash when enabling Skia CPU rendering.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24143, CVE-2025-24150, CVE-2025-24158,
    CVE-2025-24162.</changelog>
  <changelog author="mgorse@suse.com" date="1741953600">- Add 7d784721.patch: WebGL context primitive restart can be
  toggled from WebContent process (boo#1239547 CVE-2025-24201).</changelog>
  <changelog author="mgorse@suse.com" date="1743508800">- Update to version 2.48.0 (boo#1239863 boo#1239864):
  + Move tiles rendering to worker threads when rendering with the
    GPU.
  + Fix preserve-3D intersection rendering.
  + Added new function for creating Promise objects to
    JavaScripotCore GLib API.
  + The MediaRecorder backend gained WebM support (requires at
    least GStreamer 1.24.9) and audio bitrate configuration
    support.
  + Fix invalid DPI-aware font size conversion.
  + Bring back support for OpenType-SVG fonts using Skia SVG
    module.
  + Add metadata (title and creation/modification date) to the PDF
    document generated for printing.
  + Propagate the font’s computed locale to HarfBuzz.
  + The GPU process build is now enabled for WebGL, but the web
    process is still used by default. The runtime flag
    UseGPUProcessForWebGL can be used to use the GPU process for
    WebGL.
  + Security fixes: CVE-2024-44192, CVE-2024-54467, CVE-2025-24201.
- Drop 7d784721.patch: Fixed upstream.
- Disable speech synthesis. It has been disabled until now, and
  we don't have flite or spiel in SLE.
- Add gcc13-PIE to BuildRequires (bsc#1239950).
- Add webkit2gtk3-iochannel-network-cache.patch: backport upstream
  patch to stop using IOChannel in NetworkCache: hopefully fixes
  crashes in the network process.</changelog>
  <changelog author="mgorse@suse.com" date="1744113600">- Update to version 2.48.1 (boo#1240958 boo#1240961 boo#1240962
  boo#1240963 boo#1240964 boo#1240986 boo#1240987):
  + Limit the data stored in session state.
  + Remove the empty area below the title bar in Web Inspector when
    not docked.
  + Fix the build with GST_DISABLE_GST_DEBUG.
  + Fix the build with GStreamer &lt; 1.20.
  + Fix the build with video disabled.
  + Fix the build with clang 20.
  + Security fixes: CVE-2024-54551, CVE-2025-24208, CVE-2025-24209,
    CVE-2025-24213, CVE-2025-24216, CVE-2025-24264, CVE-2025-30427.
- Add 8bee9eb9.patch: fix the build on non-x86 architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1747828800">- Update to version 2.48.2 (boo#1243282 boo#1243286 boo#1243288
  boo#1243289 boo#1243424 boo#1243596):
  + Enable CSS Overscroll Behavior by default.
  + Change threaded rendering implementation to use Skia API
    instead of WebCore display list that is not thread safe.
  + Fix rendering when device scale factor change comes before the
    web view geometry update.
  + Fix network process crash on exit.
  + Fix the build with ENABLE_RESOURCE_USAGE=OFF.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24223, CVE-2025-31204, CVE-2025-31205,
    CVE-2025-31206, CVE-2025-31215, CVE-2025-31257.
- Drop 8bee9eb9.patch: fixed upstream.</changelog>
</package>
<package pkgid="13379d5b41d962ef9e0d060da124893256ab9210fd2dd43a0828830622ea01bc" name="libwebkitgtk-6_0-4" arch="x86_64">
  <version epoch="0" ver="2.48.5" rel="150600.12.43.1"/>
  <changelog author="mgorse@suse.com" date="1701864000">- Update to version 2.42.3 (boo#1217844):
  + Fix flickering while playing videos with DMA-BUF sink.
  + Fix color picker being triggered in the inspector when typing
    "tan".
  + Do not special case the "sans" font family name.
  + Fix build failure with libxml2 version 2.12.0 due to an API
    change.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42916, CVE-2023-42917.</changelog>
  <changelog author="mgorse@suse.com" date="1702728000">- Update to version 2.42.4 (boo#1218032):
  + Fix incorrect random images incorrectly displayed as
    backgrounds of &lt;div&gt; elements.
  + Fix videos displayed aliased after being resized e.g. in
    YouTube.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-42883.</changelog>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213,
    CVE-2024-23271.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834, CVE-2024-27808, CVE-2024-27820,
    CVE-2024-27833.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843, CVE-2024-54658.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
  <changelog author="mgorse@suse.com" date="1723118400">- Add CVE fixes:
  + webkit2gtk3-CVE-2024-40776.patch (boo#1228613 CVE-2024-40776)
  + webkit2gtk3-CVE-2024-40779.patch (boo#1228693 CVE-2024-40779)
  + webkit2gtk3-CVE-2024-40780.patch (boo#1228694 CVE-2024-40780)
  + webkit2gtk3-CVE-2024-40782.patch (boo#1228695 CVE-2024-40782)</changelog>
  <changelog author="mgorse@suse.com" date="1724068800">- Update to version 2.44.3 (boo#1228697):
  + Fix web process cache suspend/resume when sandbox is enabled.
  + Fix accelerated images dissapearing after scrolling.
  + Fix video flickering with DMA-BUF sink.
  + Fix pointer lock on X11.
  + Fix movement delta on mouse events in GTK3.
  + Undeprecate console message API and make it available in 2022
    API.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-40776, CVE-2024-40779, CVE-2024-40780,
    CVE-2024-40782, CVE-2024-40789, CVE-2024-4558, CVE-2024-27838,
  CVE-2024-27851.
- Drop patches now upstream:
  webkit2gtk3-CVE-2024-40776.patch
  webkit2gtk3-CVE-2024-40779.patch
  webkit2gtk3-CVE-2024-40780.patch
  webkit2gtk3-CVE-2024-40782.patch</changelog>
  <changelog author="mgorse@suse.com" date="1729166400">- Update to version 2.46.0 (boo#1231039):
  + Use Skia instead of cairo for 2D rendering and enable GPU
    rendering by default.
  + Enable offscreen canvas by default.
  + Add support for system tracing with Sysprof.
  + Implement printing using the Print portal.
  + Add new API to load settings from a config file.
  + Add a new setting to enable or disable the 2D canvas
    acceleration (enabled by default).
  + Undeprecate console messages API and make it available in 6.0
    API.
  + Security fixes: CVE-2024-40866, CVE-2024-44187, CVE-2024-44185,
    CVE-2024-54534, CVE-2024-27856.
- Drop webkit2gtk3-disable-dmabuf-nvidia.patch: Should not be
  needed anymore.
- Add webkit2gtk3-angle-s390x.patch: fix the build on s390x.
- Use gcc 13 to match what is tested upstream.
- Pass USE_SYSTEM_SYSPROF_CAPTURE=NO to cmake, avoid building
  sysprof capture for now.
- Add bug281495.patch: fix crash in ProcessLauncher socket
  monitor callback.</changelog>
  <changelog author="mgorse@suse.com" date="1730721600">- Update to version 2.46.3 (boo#1232747):
  + Flatten layers to a plane when preseve-3d style is set.
  + Fix DuckDuckGo links by adding a user agent quirk.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44244, CVE-2024-44296.
  + Changes in version 2.46.2:
  + Own well-known bus name on a11y bus.
  + Improve memory consumption when putImageData is used repeatedly
    on accelerated canvas.
  + Disable cached web process suspension for now to prevent leaks.
  + Improve text kerning with different combinations of antialias
    and hinting settings.
  + Destroy all network sessions on process exit.
  + Fix visible rectangle calculation when there are animations.
  + Fix the build with ENABLE_NOTIFICATIONS=OFF.
  + Fix the build with ENABLE_FULLSCREEN_API=OFF.
  + Fix the build with ENABLE_WEB_AUDIO=OFF.
  + Fix the build on ppc64le.
  + Changes in version 2.46.1:
  + Fix login QR code not shown in WhatsApp web.
  + Disable PSON by default again in GTK 3 API versions.
  + Disable DMABuf video sink by default to prevent file descriptor
    leaks.
  + Fix the build with GCC 13.
- Drop bug281495.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1732536000">- Add webkit2gtk3-CVE-2024-44308.patch: don't allocate DFG register
  after a slow path (boo#1233631 CVE-2024-44308).
- Add webkit2gtk3-CVE-2024-44309.patch: fix a cookie management
  issue (boo#1233632 CVE-2024-44309).</changelog>
  <changelog author="mgorse@suse.com" date="1735300800">- Update to version 2.46.5 (boo#1234851):
  + Fix the build with GBM and release logs disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-54479, CVE-2024-54502, CVE-2024-54505,
    CVE-2024-54508, CVE-2024-54543.
  + Changes in version 2.46.4:
  + Improve memory consumption and performance of Canvas
    getImageData.
  + Fix preserve-3D intersection rendering.
  + Fix video dimensions since GStreamer 1.24.9.
  + Fix the HTTP-based remote Web Inspector not loading in
    Chromium.
  + Fix content filters not working on about:blank iframes.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44308, CVE-2024-44309.
- Drop webkit2gtk3-CVE-2024-44308.patch and
  webkit2gtk3-CVE-2024-44309.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1739188800">- Update to version 2.46.6 (boo#1236946):
  + Fix a crash when enabling Skia CPU rendering.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24143, CVE-2025-24150, CVE-2025-24158,
    CVE-2025-24162.</changelog>
  <changelog author="mgorse@suse.com" date="1741953600">- Add 7d784721.patch: WebGL context primitive restart can be
  toggled from WebContent process (boo#1239547 CVE-2025-24201).</changelog>
  <changelog author="mgorse@suse.com" date="1743508800">- Update to version 2.48.0 (boo#1239863 boo#1239864):
  + Move tiles rendering to worker threads when rendering with the
    GPU.
  + Fix preserve-3D intersection rendering.
  + Added new function for creating Promise objects to
    JavaScripotCore GLib API.
  + The MediaRecorder backend gained WebM support (requires at
    least GStreamer 1.24.9) and audio bitrate configuration
    support.
  + Fix invalid DPI-aware font size conversion.
  + Bring back support for OpenType-SVG fonts using Skia SVG
    module.
  + Add metadata (title and creation/modification date) to the PDF
    document generated for printing.
  + Propagate the font’s computed locale to HarfBuzz.
  + The GPU process build is now enabled for WebGL, but the web
    process is still used by default. The runtime flag
    UseGPUProcessForWebGL can be used to use the GPU process for
    WebGL.
  + Security fixes: CVE-2024-44192, CVE-2024-54467, CVE-2025-24201,
  CVE-2025-24189.
- Drop 7d784721.patch: Fixed upstream.
- Disable speech synthesis. It has been disabled until now, and
  we don't have flite or spiel in SLE.
- Add gcc13-PIE to BuildRequires (bsc#1239950).
- Add webkit2gtk3-iochannel-network-cache.patch: backport upstream
  patch to stop using IOChannel in NetworkCache: hopefully fixes
  crashes in the network process.</changelog>
  <changelog author="mgorse@suse.com" date="1744113600">- Update to version 2.48.1 (boo#1240958 boo#1240961 boo#1240962
  boo#1240963 boo#1240964 boo#1240986 boo#1240987):
  + Limit the data stored in session state.
  + Remove the empty area below the title bar in Web Inspector when
    not docked.
  + Fix the build with GST_DISABLE_GST_DEBUG.
  + Fix the build with GStreamer &lt; 1.20.
  + Fix the build with video disabled.
  + Fix the build with clang 20.
  + Security fixes: CVE-2024-54551, CVE-2025-24208, CVE-2025-24209,
    CVE-2025-24213, CVE-2025-24216, CVE-2025-24264, CVE-2025-30427.
- Add 8bee9eb9.patch: fix the build on non-x86 architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1747828800">- Update to version 2.48.2 (boo#1243282 boo#1243286 boo#1243288
  boo#1243289 boo#1243424 boo#1243596):
  + Enable CSS Overscroll Behavior by default.
  + Change threaded rendering implementation to use Skia API
    instead of WebCore display list that is not thread safe.
  + Fix rendering when device scale factor change comes before the
    web view geometry update.
  + Fix network process crash on exit.
  + Fix the build with ENABLE_RESOURCE_USAGE=OFF.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24223, CVE-2025-31204, CVE-2025-31205,
    CVE-2025-31206, CVE-2025-31215, CVE-2025-31257.
- Drop 8bee9eb9.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1754395200">- Update to version 2.48.5 (boo#1247562 boo#1247563 boo#1247564
  boo#1247595 boo#1247596 boo#1247597 boo#1247598 boo#1247599
  boo#1247600):
  + Fix several crashes.
  + Security fixes: CVE-2025-31273, CVE-2025-31278, CVE-2025-43211,
    CVE-2025-43212, CVE-2025-43216, CVE-2025-43227, CVE-2025-43228,
    CVE-2025-43240, CVE-2025-43265, CVE-2025-6558.
  + Changes in version 2.48.4:
  + Improve emoji font selection with USE_SKIA=ON.
  + Improve playback of multimedia streams from blob URLs.
  + Fix the build with USE_SKIA_OPENTYPE_SVG=ON and
    USE_SYSPROF_CAPTURE=ON.
  + Fix the build on LoongArch with USE_SKIA=ON.
  + Fix crash when using a WebKitWebView widget in an offscreen
    window.
  + Fix several crashes and rendering issues.
  + Changes in version 2.48.3:
  + Fix a crash introduced by the new threaded rendering
    implementation using Skia API.
  + Improve rendering performance by recording layers once and
    replaying every dirty region in different worker threads.
  + Fix a crash when setting WEBKIT_SKIA_GPU_PAINTING_THREADS=0.
  + Fix a reference cycle in webkitmediastreamsrc preventing its
    disposal.
- Increase mem_per_process again to avoid running out of memory.</changelog>
</package>
<package pkgid="981a890bb131f7432f8886b4faa16ab6e17f628c85aa57fbbf120ad21cb3fbcb" name="libwebkitgtk-6_0-4" arch="x86_64">
  <version epoch="0" ver="2.50.1" rel="150600.12.48.3"/>
  <changelog author="mgorse@suse.com" date="1706097600">- Add webkit2gtk3-CVE-2024-23222.patch: fix a type confusion issue
  (bsc#1219113 CVE-2024-23222).</changelog>
  <changelog author="mgorse@suse.com" date="1707134400">- Update to version 2.42.5 (boo#1219604):
  + Fix webkit_web_context_allow_tls_certificate_for_host to
    handle IPv6 URIs produced by SoupURI.
  + Ignore stops with offset zero before last one when rendering
    gradients with cairo.
  + Write bwrapinfo.json to disk for xdg-desktop-portal.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-23222, CVE-2024-23206, CVE-2024-23213,
    CVE-2024-23271.
- Drop webkit2gtk3-CVE-2024-23222.patch: fixed upstream.
- Add webkit2gtk3-llint-build-fix.patch: fix the build for non-x86
  architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1707912000">- Use gcc 11 on SLE, to match what is currently used on SP4, and
  adjust version check to include SP6. Also, use system malloc
  there; the build currently fails without this (webkit#243535).
- Require gcc &gt;= 10.2 to match the current cmake test.
- Disable jpegxl on SLE; it isn't currently available there.</changelog>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834, CVE-2024-27808, CVE-2024-27820,
    CVE-2024-27833.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843, CVE-2024-54658.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
  <changelog author="mgorse@suse.com" date="1723118400">- Add CVE fixes:
  + webkit2gtk3-CVE-2024-40776.patch (boo#1228613 CVE-2024-40776)
  + webkit2gtk3-CVE-2024-40779.patch (boo#1228693 CVE-2024-40779)
  + webkit2gtk3-CVE-2024-40780.patch (boo#1228694 CVE-2024-40780)
  + webkit2gtk3-CVE-2024-40782.patch (boo#1228695 CVE-2024-40782)</changelog>
  <changelog author="mgorse@suse.com" date="1724068800">- Update to version 2.44.3 (boo#1228697):
  + Fix web process cache suspend/resume when sandbox is enabled.
  + Fix accelerated images dissapearing after scrolling.
  + Fix video flickering with DMA-BUF sink.
  + Fix pointer lock on X11.
  + Fix movement delta on mouse events in GTK3.
  + Undeprecate console message API and make it available in 2022
    API.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-40776, CVE-2024-40779, CVE-2024-40780,
    CVE-2024-40782, CVE-2024-40789, CVE-2024-4558, CVE-2024-27838,
  CVE-2024-27851.
- Drop patches now upstream:
  webkit2gtk3-CVE-2024-40776.patch
  webkit2gtk3-CVE-2024-40779.patch
  webkit2gtk3-CVE-2024-40780.patch
  webkit2gtk3-CVE-2024-40782.patch</changelog>
  <changelog author="mgorse@suse.com" date="1729166400">- Update to version 2.46.0 (boo#1231039):
  + Use Skia instead of cairo for 2D rendering and enable GPU
    rendering by default.
  + Enable offscreen canvas by default.
  + Add support for system tracing with Sysprof.
  + Implement printing using the Print portal.
  + Add new API to load settings from a config file.
  + Add a new setting to enable or disable the 2D canvas
    acceleration (enabled by default).
  + Undeprecate console messages API and make it available in 6.0
    API.
  + Security fixes: CVE-2024-40866, CVE-2024-44187, CVE-2024-44185,
    CVE-2024-54534, CVE-2024-27856.
- Drop webkit2gtk3-disable-dmabuf-nvidia.patch: Should not be
  needed anymore.
- Add webkit2gtk3-angle-s390x.patch: fix the build on s390x.
- Use gcc 13 to match what is tested upstream.
- Pass USE_SYSTEM_SYSPROF_CAPTURE=NO to cmake, avoid building
  sysprof capture for now.
- Add bug281495.patch: fix crash in ProcessLauncher socket
  monitor callback.</changelog>
  <changelog author="mgorse@suse.com" date="1730721600">- Update to version 2.46.3 (boo#1232747):
  + Flatten layers to a plane when preseve-3d style is set.
  + Fix DuckDuckGo links by adding a user agent quirk.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44244, CVE-2024-44296.
  + Changes in version 2.46.2:
  + Own well-known bus name on a11y bus.
  + Improve memory consumption when putImageData is used repeatedly
    on accelerated canvas.
  + Disable cached web process suspension for now to prevent leaks.
  + Improve text kerning with different combinations of antialias
    and hinting settings.
  + Destroy all network sessions on process exit.
  + Fix visible rectangle calculation when there are animations.
  + Fix the build with ENABLE_NOTIFICATIONS=OFF.
  + Fix the build with ENABLE_FULLSCREEN_API=OFF.
  + Fix the build with ENABLE_WEB_AUDIO=OFF.
  + Fix the build on ppc64le.
  + Changes in version 2.46.1:
  + Fix login QR code not shown in WhatsApp web.
  + Disable PSON by default again in GTK 3 API versions.
  + Disable DMABuf video sink by default to prevent file descriptor
    leaks.
  + Fix the build with GCC 13.
- Drop bug281495.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1732536000">- Add webkit2gtk3-CVE-2024-44308.patch: don't allocate DFG register
  after a slow path (boo#1233631 CVE-2024-44308).
- Add webkit2gtk3-CVE-2024-44309.patch: fix a cookie management
  issue (boo#1233632 CVE-2024-44309).</changelog>
  <changelog author="mgorse@suse.com" date="1735300800">- Update to version 2.46.5 (boo#1234851):
  + Fix the build with GBM and release logs disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-54479, CVE-2024-54502, CVE-2024-54505,
    CVE-2024-54508, CVE-2024-54543.
  + Changes in version 2.46.4:
  + Improve memory consumption and performance of Canvas
    getImageData.
  + Fix preserve-3D intersection rendering.
  + Fix video dimensions since GStreamer 1.24.9.
  + Fix the HTTP-based remote Web Inspector not loading in
    Chromium.
  + Fix content filters not working on about:blank iframes.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44308, CVE-2024-44309.
- Drop webkit2gtk3-CVE-2024-44308.patch and
  webkit2gtk3-CVE-2024-44309.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1739188800">- Update to version 2.46.6 (boo#1236946):
  + Fix a crash when enabling Skia CPU rendering.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24143, CVE-2025-24150, CVE-2025-24158,
    CVE-2025-24162.</changelog>
  <changelog author="mgorse@suse.com" date="1741953600">- Add 7d784721.patch: WebGL context primitive restart can be
  toggled from WebContent process (boo#1239547 CVE-2025-24201).</changelog>
  <changelog author="mgorse@suse.com" date="1743508800">- Update to version 2.48.0 (boo#1239863 boo#1239864):
  + Move tiles rendering to worker threads when rendering with the
    GPU.
  + Fix preserve-3D intersection rendering.
  + Added new function for creating Promise objects to
    JavaScripotCore GLib API.
  + The MediaRecorder backend gained WebM support (requires at
    least GStreamer 1.24.9) and audio bitrate configuration
    support.
  + Fix invalid DPI-aware font size conversion.
  + Bring back support for OpenType-SVG fonts using Skia SVG
    module.
  + Add metadata (title and creation/modification date) to the PDF
    document generated for printing.
  + Propagate the font’s computed locale to HarfBuzz.
  + The GPU process build is now enabled for WebGL, but the web
    process is still used by default. The runtime flag
    UseGPUProcessForWebGL can be used to use the GPU process for
    WebGL.
  + Security fixes: CVE-2024-44192, CVE-2024-54467, CVE-2025-24201,
  CVE-2025-24189.
- Drop 7d784721.patch: Fixed upstream.
- Disable speech synthesis. It has been disabled until now, and
  we don't have flite or spiel in SLE.
- Add gcc13-PIE to BuildRequires (bsc#1239950).
- Add webkit2gtk3-iochannel-network-cache.patch: backport upstream
  patch to stop using IOChannel in NetworkCache: hopefully fixes
  crashes in the network process.</changelog>
  <changelog author="mgorse@suse.com" date="1744113600">- Update to version 2.48.1 (boo#1240958 boo#1240961 boo#1240962
  boo#1240963 boo#1240964 boo#1240986 boo#1240987):
  + Limit the data stored in session state.
  + Remove the empty area below the title bar in Web Inspector when
    not docked.
  + Fix the build with GST_DISABLE_GST_DEBUG.
  + Fix the build with GStreamer &lt; 1.20.
  + Fix the build with video disabled.
  + Fix the build with clang 20.
  + Security fixes: CVE-2024-54551, CVE-2025-24208, CVE-2025-24209,
    CVE-2025-24213, CVE-2025-24216, CVE-2025-24264, CVE-2025-30427.
- Add 8bee9eb9.patch: fix the build on non-x86 architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1747828800">- Update to version 2.48.2 (boo#1243282 boo#1243286 boo#1243288
  boo#1243289 boo#1243424 boo#1243596):
  + Enable CSS Overscroll Behavior by default.
  + Change threaded rendering implementation to use Skia API
    instead of WebCore display list that is not thread safe.
  + Fix rendering when device scale factor change comes before the
    web view geometry update.
  + Fix network process crash on exit.
  + Fix the build with ENABLE_RESOURCE_USAGE=OFF.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24223, CVE-2025-31204, CVE-2025-31205,
    CVE-2025-31206, CVE-2025-31215, CVE-2025-31257.
- Drop 8bee9eb9.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1754395200">- Update to version 2.48.5 (boo#1247562 boo#1247563 boo#1247564
  boo#1247595 boo#1247596 boo#1247597 boo#1247598 boo#1247599
  boo#1247600):
  + Fix several crashes.
  + Security fixes: CVE-2025-31273, CVE-2025-31278, CVE-2025-43211,
    CVE-2025-43212, CVE-2025-43216, CVE-2025-43227, CVE-2025-43228,
    CVE-2025-43240, CVE-2025-43265, CVE-2025-6558.
  + Changes in version 2.48.4:
  + Improve emoji font selection with USE_SKIA=ON.
  + Improve playback of multimedia streams from blob URLs.
  + Fix the build with USE_SKIA_OPENTYPE_SVG=ON and
    USE_SYSPROF_CAPTURE=ON.
  + Fix the build on LoongArch with USE_SKIA=ON.
  + Fix crash when using a WebKitWebView widget in an offscreen
    window.
  + Fix several crashes and rendering issues.
  + Changes in version 2.48.3:
  + Fix a crash introduced by the new threaded rendering
    implementation using Skia API.
  + Improve rendering performance by recording layers once and
    replaying every dirty region in different worker threads.
  + Fix a crash when setting WEBKIT_SKIA_GPU_PAINTING_THREADS=0.
  + Fix a reference cycle in webkitmediastreamsrc preventing its
    disposal.
- Increase mem_per_process again to avoid running out of memory.</changelog>
  <changelog author="mgorse@suse.com" date="1758456000">- Update to version 2.50.0 (boo#1250439 boo#1250440 boo#1250441
  boo#1250442):
  + Improved rendering performance by recording each layer once and
    replaying every dirty region in different worker threads.
  + Enable damage propagation to the UI process by default.
  + CSS property font-variant-emoji is now enabled by default.
  + Font synthesis properties (bold/italic) are now properly
    handled.
  + Ensure web view is focused on tap gesture.
  + Added new API to get the theme color of a WebKitWebView.
  + Security fixes: CVE-2025-43272, CVE-2025-43342, CVE-2025-43356,
  CVE-2025-43368.
- Drop webkit2gtk3-iochannel-network-cache.patch: fixed upstream.
- Add webkit2gtk3-i586-build-fix.patch: fix the build on i586.
- Force the garbage collector to run more often when compiling on
  some architectures. Needed to avoid running out of memory.
- Remove _constraints override for armv6l and armv7l. They were not
  as restrictive as we would like and now seem unnecessary.</changelog>
  <changelog author="mgorse@suse.com" date="1760443200">- Update to version 2.50.1 (boo#1251975):
  + Improve text rendering performance.
  + Fix audio playback broken on instagram.
  + Fix rendering of layers with fractional transforms.
  + Fix the build with ENABLE(VIDEO) disabled.
  + Fix the build in s390x.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43343.
- Drop webkit2gtk3-i586-build-fix.patch: Merged upstream.
- Re-enable LTO on targets where it is not known to make the
  linker run out of memory.</changelog>
</package>
<package pkgid="142ae620f3100d592e5de0e2159ed0bdf589b68047b99d1e994df378ea58aaf5" name="libwebkitgtk-6_0-4" arch="x86_64">
  <version epoch="0" ver="2.50.4" rel="150600.12.54.1"/>
  <changelog author="mgorse@suse.com" date="1707998400">- Fix package names for v6, and obsolete old packages.</changelog>
  <changelog author="mgorse@suse.com" date="1708084800">- Increase mem_per_process again to match what is in SLE. The build
  was sporadically failing there (bsc#1198743).
- Require libwaylandclient0 &gt;= 1.20. 15.4 originally had 1.19.0,
  but webkitgtk uses a function added in 1.20.0, so we need to
  ensure that the wayland update is pulled in (bsc#1215072).</changelog>
  <changelog author="mgorse@suse.com" date="1716552000">- Update to version 2.44.2 (boo#1225071):
  + Make gamepads visible on axis movements, and not only on
    button presses.
  + Disable the gst-libav AAC decoder.
  + Make user scripts and style sheets visible in the Web
    Inspector.
  + Use the geolocation portal where available, with the existing
    geoclue as fallback if the portal is not usable.
  + Use the printing portal when running sandboxed.
  + Use the file transfer portal for drag and drop when running
    sandboxed.
  + Avoid notifying an empty cursor rectangle to input methods.
  + Remove empty bar shown in detached inspector windows.
  + Consider keycode when activating application accelerators.
  + Fix the build with ENABLE_WEBAUDIO disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-27834, CVE-2024-27808, CVE-2024-27820,
    CVE-2024-27833.
- Changes in version 2.44.1:
  + Fix handling of lifetime of web view child dialogs in GTK4.
  + Do not schedule layer flushes when drawing area size is empty.
  + Fix videos with alpha when using the DMA-BUF sink.
  + Fix the build with USE_GBM=OFF.
  + Fix the build in 32bit platforms
  + Fix several crashes and rendering issues.
- Changes in version 2.44.0 (boo#1222010):
  + Make the DOM accessibility tree reachable from UI process with
    GTK4.
  + Removed the X11 and WPE renderers in favor of DMA-BUF.
  + Improved vblank synchronization when rendering.
  + Removed key event reinjection in GTK4 to make keyboard
    shortcuts work in web sites.
  + Fix gamepads detection by correctly handling focused window in
    GTK4.
  + Security fixes: CVE-2024-23252, CVE-2024-23254, CVE-2024-23263,
  CVE-2024-23280, CVE-2024-23284, CVE-2023-42950, CVE-2023-42956,
  CVE-2023-42843, CVE-2024-54658.
- Drop webkit2gtk3-create-destroy-egl-image.patch: fixed upstream.
- Rebase webkit2gtk3-disable-dmabuf-nvidia.patch.
- Use WebAssembly on aarch64. It is the upstream default and no
  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,
  and -DENABLE_SAMPLING_PROFILER=OFF for the same reason.
- Drop webkit2gtk3-llint-build-fix.patch: no longer needed.
- Disable libbacktrace: we don't have it in SLE.
- Adjust spec for gtk4 now being enabled by default.
- Update keyring (taken from rawhide).</changelog>
  <changelog author="mgorse@suse.com" date="1723118400">- Add CVE fixes:
  + webkit2gtk3-CVE-2024-40776.patch (boo#1228613 CVE-2024-40776)
  + webkit2gtk3-CVE-2024-40779.patch (boo#1228693 CVE-2024-40779)
  + webkit2gtk3-CVE-2024-40780.patch (boo#1228694 CVE-2024-40780)
  + webkit2gtk3-CVE-2024-40782.patch (boo#1228695 CVE-2024-40782)</changelog>
  <changelog author="mgorse@suse.com" date="1724068800">- Update to version 2.44.3 (boo#1228697):
  + Fix web process cache suspend/resume when sandbox is enabled.
  + Fix accelerated images dissapearing after scrolling.
  + Fix video flickering with DMA-BUF sink.
  + Fix pointer lock on X11.
  + Fix movement delta on mouse events in GTK3.
  + Undeprecate console message API and make it available in 2022
    API.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-40776, CVE-2024-40779, CVE-2024-40780,
    CVE-2024-40782, CVE-2024-40789, CVE-2024-4558, CVE-2024-27838,
  CVE-2024-27851.
- Drop patches now upstream:
  webkit2gtk3-CVE-2024-40776.patch
  webkit2gtk3-CVE-2024-40779.patch
  webkit2gtk3-CVE-2024-40780.patch
  webkit2gtk3-CVE-2024-40782.patch</changelog>
  <changelog author="mgorse@suse.com" date="1729166400">- Update to version 2.46.0 (boo#1231039):
  + Use Skia instead of cairo for 2D rendering and enable GPU
    rendering by default.
  + Enable offscreen canvas by default.
  + Add support for system tracing with Sysprof.
  + Implement printing using the Print portal.
  + Add new API to load settings from a config file.
  + Add a new setting to enable or disable the 2D canvas
    acceleration (enabled by default).
  + Undeprecate console messages API and make it available in 6.0
    API.
  + Security fixes: CVE-2024-40866, CVE-2024-44187, CVE-2024-44185,
    CVE-2024-54534, CVE-2024-27856, CVE-2025-43480.
- Drop webkit2gtk3-disable-dmabuf-nvidia.patch: Should not be
  needed anymore.
- Add webkit2gtk3-angle-s390x.patch: fix the build on s390x.
- Use gcc 13 to match what is tested upstream.
- Pass USE_SYSTEM_SYSPROF_CAPTURE=NO to cmake, avoid building
  sysprof capture for now.
- Add bug281495.patch: fix crash in ProcessLauncher socket
  monitor callback.</changelog>
  <changelog author="mgorse@suse.com" date="1730721600">- Update to version 2.46.3 (boo#1232747):
  + Flatten layers to a plane when preseve-3d style is set.
  + Fix DuckDuckGo links by adding a user agent quirk.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44244, CVE-2024-44296.
  + Changes in version 2.46.2:
  + Own well-known bus name on a11y bus.
  + Improve memory consumption when putImageData is used repeatedly
    on accelerated canvas.
  + Disable cached web process suspension for now to prevent leaks.
  + Improve text kerning with different combinations of antialias
    and hinting settings.
  + Destroy all network sessions on process exit.
  + Fix visible rectangle calculation when there are animations.
  + Fix the build with ENABLE_NOTIFICATIONS=OFF.
  + Fix the build with ENABLE_FULLSCREEN_API=OFF.
  + Fix the build with ENABLE_WEB_AUDIO=OFF.
  + Fix the build on ppc64le.
  + Changes in version 2.46.1:
  + Fix login QR code not shown in WhatsApp web.
  + Disable PSON by default again in GTK 3 API versions.
  + Disable DMABuf video sink by default to prevent file descriptor
    leaks.
  + Fix the build with GCC 13.
- Drop bug281495.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1732536000">- Add webkit2gtk3-CVE-2024-44308.patch: don't allocate DFG register
  after a slow path (boo#1233631 CVE-2024-44308).
- Add webkit2gtk3-CVE-2024-44309.patch: fix a cookie management
  issue (boo#1233632 CVE-2024-44309).</changelog>
  <changelog author="mgorse@suse.com" date="1735300800">- Update to version 2.46.5 (boo#1234851):
  + Fix the build with GBM and release logs disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-54479, CVE-2024-54502, CVE-2024-54505,
    CVE-2024-54508, CVE-2024-54543.
  + Changes in version 2.46.4:
  + Improve memory consumption and performance of Canvas
    getImageData.
  + Fix preserve-3D intersection rendering.
  + Fix video dimensions since GStreamer 1.24.9.
  + Fix the HTTP-based remote Web Inspector not loading in
    Chromium.
  + Fix content filters not working on about:blank iframes.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44308, CVE-2024-44309.
- Drop webkit2gtk3-CVE-2024-44308.patch and
  webkit2gtk3-CVE-2024-44309.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1739188800">- Update to version 2.46.6 (boo#1236946):
  + Fix a crash when enabling Skia CPU rendering.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24143, CVE-2025-24150, CVE-2025-24158,
    CVE-2025-24162.</changelog>
  <changelog author="mgorse@suse.com" date="1741953600">- Add 7d784721.patch: WebGL context primitive restart can be
  toggled from WebContent process (boo#1239547 CVE-2025-24201).</changelog>
  <changelog author="mgorse@suse.com" date="1743508800">- Update to version 2.48.0 (boo#1239863 boo#1239864):
  + Move tiles rendering to worker threads when rendering with the
    GPU.
  + Fix preserve-3D intersection rendering.
  + Added new function for creating Promise objects to
    JavaScripotCore GLib API.
  + The MediaRecorder backend gained WebM support (requires at
    least GStreamer 1.24.9) and audio bitrate configuration
    support.
  + Fix invalid DPI-aware font size conversion.
  + Bring back support for OpenType-SVG fonts using Skia SVG
    module.
  + Add metadata (title and creation/modification date) to the PDF
    document generated for printing.
  + Propagate the font’s computed locale to HarfBuzz.
  + The GPU process build is now enabled for WebGL, but the web
    process is still used by default. The runtime flag
    UseGPUProcessForWebGL can be used to use the GPU process for
    WebGL.
  + Security fixes: CVE-2024-44192, CVE-2024-54467, CVE-2025-24201,
  CVE-2025-24189.
- Drop 7d784721.patch: Fixed upstream.
- Disable speech synthesis. It has been disabled until now, and
  we don't have flite or spiel in SLE.
- Add gcc13-PIE to BuildRequires (bsc#1239950).
- Add webkit2gtk3-iochannel-network-cache.patch: backport upstream
  patch to stop using IOChannel in NetworkCache: hopefully fixes
  crashes in the network process.</changelog>
  <changelog author="mgorse@suse.com" date="1744113600">- Update to version 2.48.1 (boo#1240958 boo#1240961 boo#1240962
  boo#1240963 boo#1240964 boo#1240986 boo#1240987):
  + Limit the data stored in session state.
  + Remove the empty area below the title bar in Web Inspector when
    not docked.
  + Fix the build with GST_DISABLE_GST_DEBUG.
  + Fix the build with GStreamer &lt; 1.20.
  + Fix the build with video disabled.
  + Fix the build with clang 20.
  + Security fixes: CVE-2024-54551, CVE-2025-24208, CVE-2025-24209,
    CVE-2025-24213, CVE-2025-24216, CVE-2025-24264, CVE-2025-30427.
- Add 8bee9eb9.patch: fix the build on non-x86 architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1747828800">- Update to version 2.48.2 (boo#1243282 boo#1243286 boo#1243288
  boo#1243289 boo#1243424 boo#1243596):
  + Enable CSS Overscroll Behavior by default.
  + Change threaded rendering implementation to use Skia API
    instead of WebCore display list that is not thread safe.
  + Fix rendering when device scale factor change comes before the
    web view geometry update.
  + Fix network process crash on exit.
  + Fix the build with ENABLE_RESOURCE_USAGE=OFF.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24223, CVE-2025-31204, CVE-2025-31205,
    CVE-2025-31206, CVE-2025-31215, CVE-2025-31257.
- Drop 8bee9eb9.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1754395200">- Update to version 2.48.5 (boo#1247562 boo#1247563 boo#1247564
  boo#1247595 boo#1247596 boo#1247597 boo#1247598 boo#1247599
  boo#1247600):
  + Fix several crashes.
  + Security fixes: CVE-2025-31273, CVE-2025-31278, CVE-2025-43211,
    CVE-2025-43212, CVE-2025-43216, CVE-2025-43227, CVE-2025-43228,
    CVE-2025-43240, CVE-2025-43265, CVE-2025-6558.
  + Changes in version 2.48.4:
  + Improve emoji font selection with USE_SKIA=ON.
  + Improve playback of multimedia streams from blob URLs.
  + Fix the build with USE_SKIA_OPENTYPE_SVG=ON and
    USE_SYSPROF_CAPTURE=ON.
  + Fix the build on LoongArch with USE_SKIA=ON.
  + Fix crash when using a WebKitWebView widget in an offscreen
    window.
  + Fix several crashes and rendering issues.
  + Changes in version 2.48.3:
  + Fix a crash introduced by the new threaded rendering
    implementation using Skia API.
  + Improve rendering performance by recording layers once and
    replaying every dirty region in different worker threads.
  + Fix a crash when setting WEBKIT_SKIA_GPU_PAINTING_THREADS=0.
  + Fix a reference cycle in webkitmediastreamsrc preventing its
    disposal.
- Increase mem_per_process again to avoid running out of memory.</changelog>
  <changelog author="mgorse@suse.com" date="1758456000">- Update to version 2.50.0 (boo#1250439 boo#1250440 boo#1250441
  boo#1250442):
  + Improved rendering performance by recording each layer once and
    replaying every dirty region in different worker threads.
  + Enable damage propagation to the UI process by default.
  + CSS property font-variant-emoji is now enabled by default.
  + Font synthesis properties (bold/italic) are now properly
    handled.
  + Ensure web view is focused on tap gesture.
  + Added new API to get the theme color of a WebKitWebView.
  + Security fixes: CVE-2025-43272, CVE-2025-43342, CVE-2025-43356,
  CVE-2025-43368, CVE-2025-43419.
- Drop webkit2gtk3-iochannel-network-cache.patch: fixed upstream.
- Add webkit2gtk3-i586-build-fix.patch: fix the build on i586.
- Force the garbage collector to run more often when compiling on
  some architectures. Needed to avoid running out of memory.
- Remove _constraints override for armv6l and armv7l. They were not
  as restrictive as we would like and now seem unnecessary.</changelog>
  <changelog author="mgorse@suse.com" date="1760443200">- Update to version 2.50.1 (boo#1251975):
  + Improve text rendering performance.
  + Fix audio playback broken on instagram.
  + Fix rendering of layers with fractional transforms.
  + Fix the build with ENABLE(VIDEO) disabled.
  + Fix the build in s390x.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43343.
- Drop webkit2gtk3-i586-build-fix.patch: Merged upstream.
- Re-enable LTO on targets where it is not known to make the
  linker run out of memory.</changelog>
  <changelog author="mgorse@suse.com" date="1763985600">- Update to version 2.50.2 (bsc#1254165 bsc#1254166 bsc#1254167
  bsc#1254168 bsc#1254169 bsc#1254170 bsc#1254171 bsc#1254172
  bsc#1254174 bsc#1254176 bsc#1254177 bsc#1254179 bsc#1254208):
  + Prevent unsafe URI schemes from participating in media
    playback.
  + Make jsc_value_array_buffer_get_data() function introspectable.
  + Fix logging in to Google accounts that have a WebAuthn second
    factor configured.
  + Fix loading webkit://gpu when there are no threads configured
    for GPU rendering.
  + Fix rendering gradiants that use the CSS hue interpolation
    method.
  + Fix pasting image data from the clipboard.
  + Fix font-family selection when the font name contains spaces.
  + Fix the build with standard C libraries that lack execinfo.h,
    like Musl or uClibc.
  + Fix capturing canvas snapshots in the Web Inspector.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43392, CVE-2025-43425, CVE-2025-43427,
    CVE-2025-43429, CVE-2025-43430, CVE-2025-43431, CVE-2025-43432,
    CVE-2025-43434, CVE-2025-43440, CVE-2025-43443, CVE-2025-13502.
- Add webkit2gtk3-undefined-symbol.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1765195200">- Update to version 2.50.3 (bsc#1254473 bsc#1254498 bsc#1254509):
  + Fix seeking and looping of media elements that set the "loop"
    property.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-13947, CVE-2025-43421, CVE-2025-43458,
    CVE-2025-66287.
- Drop webkit2gtk3-undefined-symbol.patch: fixed upstream.
- Use %limit_build. Also define %dwz_low_mem_die_limit and
  %dwz_max_die_limit, similar to what we have in wpewebkit.
  This should simplify the logic for limiting jobs and will
  hopefully help with intermittent build failures.</changelog>
  <changelog author="mgorse@suse.com" date="1765972800">- Update to version 2.50.4 (bsc#1255183 bsc#1255191 bsc#1255194
  bsc#1255195 bsc#1255198 bsc#1255200 bsc#1255497):
  + Correctly handle the program name passed to the sleep disabler.
  + Ensure GStreamer is initialized before using the Quirks.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-14174, CVE-2025-43501, CVE-2025-43529,
    CVE-2025-43531, CVE-2025-43535, CVE-2025-43536, CVE-2025-43541.
- Add webkit2gtk3-a11y-fix-role-mapping.patch: fix a11y regression
  where AT-SPI roles were mapped incorrectly.</changelog>
</package>
<package pkgid="41a1142513f328b6e2234d805a811057ad5441ea4f6f9a052da44a57409a8f03" name="libwebkitgtk-6_0-4" arch="x86_64">
  <version epoch="0" ver="2.52.1" rel="150600.12.63.1"/>
  <changelog author="mgorse@suse.com" date="1724068800">- Update to version 2.44.3 (boo#1228697):
  + Fix web process cache suspend/resume when sandbox is enabled.
  + Fix accelerated images dissapearing after scrolling.
  + Fix video flickering with DMA-BUF sink.
  + Fix pointer lock on X11.
  + Fix movement delta on mouse events in GTK3.
  + Undeprecate console message API and make it available in 2022
    API.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-40776, CVE-2024-40779, CVE-2024-40780,
    CVE-2024-40782, CVE-2024-40789, CVE-2024-4558, CVE-2024-27838,
  CVE-2024-27851.
- Drop patches now upstream:
  webkit2gtk3-CVE-2024-40776.patch
  webkit2gtk3-CVE-2024-40779.patch
  webkit2gtk3-CVE-2024-40780.patch
  webkit2gtk3-CVE-2024-40782.patch</changelog>
  <changelog author="mgorse@suse.com" date="1729166400">- Update to version 2.46.0 (boo#1231039):
  + Use Skia instead of cairo for 2D rendering and enable GPU
    rendering by default.
  + Enable offscreen canvas by default.
  + Add support for system tracing with Sysprof.
  + Implement printing using the Print portal.
  + Add new API to load settings from a config file.
  + Add a new setting to enable or disable the 2D canvas
    acceleration (enabled by default).
  + Undeprecate console messages API and make it available in 6.0
    API.
  + Security fixes: CVE-2024-40866, CVE-2024-44187, CVE-2024-44185,
    CVE-2024-54534, CVE-2024-27856, CVE-2025-43480.
- Drop webkit2gtk3-disable-dmabuf-nvidia.patch: Should not be
  needed anymore.
- Add webkit2gtk3-angle-s390x.patch: fix the build on s390x.
- Use gcc 13 to match what is tested upstream.
- Pass USE_SYSTEM_SYSPROF_CAPTURE=NO to cmake, avoid building
  sysprof capture for now.
- Add bug281495.patch: fix crash in ProcessLauncher socket
  monitor callback.</changelog>
  <changelog author="mgorse@suse.com" date="1730721600">- Update to version 2.46.3 (boo#1232747):
  + Flatten layers to a plane when preseve-3d style is set.
  + Fix DuckDuckGo links by adding a user agent quirk.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44244, CVE-2024-44296.
  + Changes in version 2.46.2:
  + Own well-known bus name on a11y bus.
  + Improve memory consumption when putImageData is used repeatedly
    on accelerated canvas.
  + Disable cached web process suspension for now to prevent leaks.
  + Improve text kerning with different combinations of antialias
    and hinting settings.
  + Destroy all network sessions on process exit.
  + Fix visible rectangle calculation when there are animations.
  + Fix the build with ENABLE_NOTIFICATIONS=OFF.
  + Fix the build with ENABLE_FULLSCREEN_API=OFF.
  + Fix the build with ENABLE_WEB_AUDIO=OFF.
  + Fix the build on ppc64le.
  + Changes in version 2.46.1:
  + Fix login QR code not shown in WhatsApp web.
  + Disable PSON by default again in GTK 3 API versions.
  + Disable DMABuf video sink by default to prevent file descriptor
    leaks.
  + Fix the build with GCC 13.
- Drop bug281495.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1732536000">- Add webkit2gtk3-CVE-2024-44308.patch: don't allocate DFG register
  after a slow path (boo#1233631 CVE-2024-44308).
- Add webkit2gtk3-CVE-2024-44309.patch: fix a cookie management
  issue (boo#1233632 CVE-2024-44309).</changelog>
  <changelog author="mgorse@suse.com" date="1735300800">- Update to version 2.46.5 (boo#1234851):
  + Fix the build with GBM and release logs disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-54479, CVE-2024-54502, CVE-2024-54505,
    CVE-2024-54508, CVE-2024-54543.
  + Changes in version 2.46.4:
  + Improve memory consumption and performance of Canvas
    getImageData.
  + Fix preserve-3D intersection rendering.
  + Fix video dimensions since GStreamer 1.24.9.
  + Fix the HTTP-based remote Web Inspector not loading in
    Chromium.
  + Fix content filters not working on about:blank iframes.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2024-44308, CVE-2024-44309.
- Drop webkit2gtk3-CVE-2024-44308.patch and
  webkit2gtk3-CVE-2024-44309.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1739188800">- Update to version 2.46.6 (boo#1236946):
  + Fix a crash when enabling Skia CPU rendering.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24143, CVE-2025-24150, CVE-2025-24158,
    CVE-2025-24162.</changelog>
  <changelog author="mgorse@suse.com" date="1741953600">- Add 7d784721.patch: WebGL context primitive restart can be
  toggled from WebContent process (boo#1239547 CVE-2025-24201).</changelog>
  <changelog author="mgorse@suse.com" date="1743508800">- Update to version 2.48.0 (boo#1239863 boo#1239864):
  + Move tiles rendering to worker threads when rendering with the
    GPU.
  + Fix preserve-3D intersection rendering.
  + Added new function for creating Promise objects to
    JavaScripotCore GLib API.
  + The MediaRecorder backend gained WebM support (requires at
    least GStreamer 1.24.9) and audio bitrate configuration
    support.
  + Fix invalid DPI-aware font size conversion.
  + Bring back support for OpenType-SVG fonts using Skia SVG
    module.
  + Add metadata (title and creation/modification date) to the PDF
    document generated for printing.
  + Propagate the font’s computed locale to HarfBuzz.
  + The GPU process build is now enabled for WebGL, but the web
    process is still used by default. The runtime flag
    UseGPUProcessForWebGL can be used to use the GPU process for
    WebGL.
  + Security fixes: CVE-2024-44192, CVE-2024-54467, CVE-2025-24201,
  CVE-2025-24189.
- Drop 7d784721.patch: Fixed upstream.
- Disable speech synthesis. It has been disabled until now, and
  we don't have flite or spiel in SLE.
- Add gcc13-PIE to BuildRequires (bsc#1239950).
- Add webkit2gtk3-iochannel-network-cache.patch: backport upstream
  patch to stop using IOChannel in NetworkCache: hopefully fixes
  crashes in the network process.</changelog>
  <changelog author="mgorse@suse.com" date="1744113600">- Update to version 2.48.1 (boo#1240958 boo#1240961 boo#1240962
  boo#1240963 boo#1240964 boo#1240986 boo#1240987):
  + Limit the data stored in session state.
  + Remove the empty area below the title bar in Web Inspector when
    not docked.
  + Fix the build with GST_DISABLE_GST_DEBUG.
  + Fix the build with GStreamer &lt; 1.20.
  + Fix the build with video disabled.
  + Fix the build with clang 20.
  + Security fixes: CVE-2024-54551, CVE-2025-24208, CVE-2025-24209,
    CVE-2025-24213, CVE-2025-24216, CVE-2025-24264, CVE-2025-30427.
- Add 8bee9eb9.patch: fix the build on non-x86 architectures.</changelog>
  <changelog author="mgorse@suse.com" date="1747828800">- Update to version 2.48.2 (boo#1243282 boo#1243286 boo#1243288
  boo#1243289 boo#1243424 boo#1243596):
  + Enable CSS Overscroll Behavior by default.
  + Change threaded rendering implementation to use Skia API
    instead of WebCore display list that is not thread safe.
  + Fix rendering when device scale factor change comes before the
    web view geometry update.
  + Fix network process crash on exit.
  + Fix the build with ENABLE_RESOURCE_USAGE=OFF.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-24223, CVE-2025-31204, CVE-2025-31205,
    CVE-2025-31206, CVE-2025-31215, CVE-2025-31257.
- Drop 8bee9eb9.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1754395200">- Update to version 2.48.5 (boo#1247562 boo#1247563 boo#1247564
  boo#1247595 boo#1247596 boo#1247597 boo#1247598 boo#1247599
  boo#1247600):
  + Fix several crashes.
  + Security fixes: CVE-2025-31273, CVE-2025-31278, CVE-2025-43211,
    CVE-2025-43212, CVE-2025-43216, CVE-2025-43227, CVE-2025-43228,
    CVE-2025-43240, CVE-2025-43265, CVE-2025-6558.
  + Changes in version 2.48.4:
  + Improve emoji font selection with USE_SKIA=ON.
  + Improve playback of multimedia streams from blob URLs.
  + Fix the build with USE_SKIA_OPENTYPE_SVG=ON and
    USE_SYSPROF_CAPTURE=ON.
  + Fix the build on LoongArch with USE_SKIA=ON.
  + Fix crash when using a WebKitWebView widget in an offscreen
    window.
  + Fix several crashes and rendering issues.
  + Changes in version 2.48.3:
  + Fix a crash introduced by the new threaded rendering
    implementation using Skia API.
  + Improve rendering performance by recording layers once and
    replaying every dirty region in different worker threads.
  + Fix a crash when setting WEBKIT_SKIA_GPU_PAINTING_THREADS=0.
  + Fix a reference cycle in webkitmediastreamsrc preventing its
    disposal.
- Increase mem_per_process again to avoid running out of memory.</changelog>
  <changelog author="mgorse@suse.com" date="1758456000">- Update to version 2.50.0 (boo#1250439 boo#1250440 boo#1250441
  boo#1250442):
  + Improved rendering performance by recording each layer once and
    replaying every dirty region in different worker threads.
  + Enable damage propagation to the UI process by default.
  + CSS property font-variant-emoji is now enabled by default.
  + Font synthesis properties (bold/italic) are now properly
    handled.
  + Ensure web view is focused on tap gesture.
  + Added new API to get the theme color of a WebKitWebView.
  + Security fixes: CVE-2025-43272, CVE-2025-43342, CVE-2025-43356,
  CVE-2025-43368, CVE-2025-43419, CVE-2025-31223, CVE-2025-31277.
- Drop webkit2gtk3-iochannel-network-cache.patch: fixed upstream.
- Add webkit2gtk3-i586-build-fix.patch: fix the build on i586.
- Force the garbage collector to run more often when compiling on
  some architectures. Needed to avoid running out of memory.
- Remove _constraints override for armv6l and armv7l. They were not
  as restrictive as we would like and now seem unnecessary.</changelog>
  <changelog author="mgorse@suse.com" date="1760443200">- Update to version 2.50.1 (boo#1251975):
  + Improve text rendering performance.
  + Fix audio playback broken on instagram.
  + Fix rendering of layers with fractional transforms.
  + Fix the build with ENABLE(VIDEO) disabled.
  + Fix the build in s390x.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43343.
- Drop webkit2gtk3-i586-build-fix.patch: Merged upstream.
- Re-enable LTO on targets where it is not known to make the
  linker run out of memory.</changelog>
  <changelog author="mgorse@suse.com" date="1763985600">- Update to version 2.50.2 (bsc#1254165 bsc#1254166 bsc#1254167
  bsc#1254168 bsc#1254169 bsc#1254170 bsc#1254171 bsc#1254172
  bsc#1254174 bsc#1254176 bsc#1254177 bsc#1254179 bsc#1254208):
  + Prevent unsafe URI schemes from participating in media
    playback.
  + Make jsc_value_array_buffer_get_data() function introspectable.
  + Fix logging in to Google accounts that have a WebAuthn second
    factor configured.
  + Fix loading webkit://gpu when there are no threads configured
    for GPU rendering.
  + Fix rendering gradiants that use the CSS hue interpolation
    method.
  + Fix pasting image data from the clipboard.
  + Fix font-family selection when the font name contains spaces.
  + Fix the build with standard C libraries that lack execinfo.h,
    like Musl or uClibc.
  + Fix capturing canvas snapshots in the Web Inspector.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43392, CVE-2025-43425, CVE-2025-43427,
    CVE-2025-43429, CVE-2025-43430, CVE-2025-43431, CVE-2025-43432,
  +    CVE-2025-43434, CVE-2025-43440, CVE-2025-43443, CVE-2025-13502,
  +    CVE-2025-43433, CVE-2025-43438, CVE-2025-43441.
- Add webkit2gtk3-undefined-symbol.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1765195200">- Update to version 2.50.3 (bsc#1254473 bsc#1254498 bsc#1254509):
  + Fix seeking and looping of media elements that set the "loop"
    property.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-13947, CVE-2025-43421, CVE-2025-43458,
    CVE-2025-66287.
- Drop webkit2gtk3-undefined-symbol.patch: fixed upstream.
- Use %limit_build. Also define %dwz_low_mem_die_limit and
  %dwz_max_die_limit, similar to what we have in wpewebkit.
  This should simplify the logic for limiting jobs and will
  hopefully help with intermittent build failures.</changelog>
  <changelog author="mgorse@suse.com" date="1765972800">- Update to version 2.50.4 (bsc#1255183 bsc#1255191 bsc#1255194
  bsc#1255195 bsc#1255198 bsc#1255200 bsc#1255497):
  + Correctly handle the program name passed to the sleep disabler.
  + Ensure GStreamer is initialized before using the Quirks.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-14174, CVE-2025-43501, CVE-2025-43529,
    CVE-2025-43531, CVE-2025-43535, CVE-2025-43536, CVE-2025-43541.
- Add webkit2gtk3-a11y-fix-role-mapping.patch: fix a11y regression
  where AT-SPI roles were mapped incorrectly.</changelog>
  <changelog author="mgorse@suse.com" date="1773921600">- Update to version 2.52.0:
  + Make scrolling with touch input smoother for small movements.
  + Fix estimated load progress of downloads when Content-Length
    value is wrong.
  + Ensure that "scrollend" events are correctly emitted after
    scroll animations.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2025-43213, CVE-2025-43214, CVE-2025-43457,
    CVE-2025-43511, CVE-2025-46299, CVE-2026-20608, CVE-2026-20635,
    CVE-2026-20636, CVE-2026-20644, CVE-2026-20652, CVE-2026-20676
    (bsc#1259934 bsc#1259935 bsc#1259936 bsc#1259937 bsc#1259938
    bsc#1259939 bsc#1259940 bsc#1259941 bsc#1259942 bsc#1259943
    bsc#1259944 bsc#1259945 bsc#1259946 bsc#1259947 bsc#1259948
    bsc#1259949 bsc#1259950)
- Drop webkit2gtk3-a11y-fix-role-mapping.patch: fixed upstream.
- Add webkit2gtk3-libsoup2.patch: reinstate support for libsoup2.</changelog>
  <changelog author="mgorse@suse.com" date="1774267200">- Add webkit2gtk3-aarch64-build-fix.patch: fix the build with JIT
  disabled.
- Increase limit_build to try to prevent running out of memory.</changelog>
  <changelog author="mgorse@suse.com" date="1774612800">- Pass ggc-min-expand=10 on some architectures, rather than 30.
  We are still getting "virtual memory exhausted" on i586
  sometimes, and hopefully this will help.</changelog>
  <changelog author="mgorse@suse.com" date="1775044800">- Update to version 2.52.1 (bsc#1261172 bsc#1261173 bsc#1261174
  bsc#1261175 bsc#1261176 bsc#1261177 bsc#1261178 bsc#1261179):
  + Reduce the amount of useless MPRIS notifications produced by
    MediaSesion when the information about media being played is
    incomplete.
  + Support turning off USE_GSTREAMER to configure the build with
    all multimedia features disabled.
  + Add Sysprof marks for mouse events.
  + Fix MediaSession icon for iheart.com not being displayed.
  + Fix the build with USE_GSTREAMER_GL disabled.
  + Fix the build with librice version 0.3.0 or newer.
  + Fix several crashes and rendering issues.
  + Translation updates: Georgian.
  + Security fixes: CVE-2026-20643, CVE-2026-20664, CVE-2026-20665,
    CVE-2026-20691, CVE-2026-28857, CVE-2026-28859, CVE-2026-28861,
    CVE-2026-28871.
- Rebase webkit2gtk3-libsoup2.patch.
- Add webkitgtk-gtk3-build-fix.patch: fix the gtk3 build.</changelog>
</package>
<package pkgid="059963cf626da9bbbba62402f5a399f6aec0de6e586782e2f69dc62ada256cd4" name="libwebp" arch="src">
  <version epoch="0" ver="1.0.3" rel="150200.3.14.1"/>
  <changelog author="dimstar@opensuse.org" date="1346414400">- Update to version 0.2.0:
  * Add support for ARGB -&gt; YUVA conversion for lossless decoder
  * Add stats for lossless and alpha encoding
  * Security related hardening: allocation and size checks
  * Add PAM output support to dwebp
  * Alpha channel encode/decode support
  * Lossless encoder/decoder
  * Add TIFF input support to cwebp
  * Incompatible changes:
  - The encode ABI has been modified to support alpha encoding
  - Deprecated function WebPINew() has been removed
  - Decode function signatures have changed to consistently use
    size_t over int/uint32_t
  - decode_vp8.h is no longer installed system-wide
  - cwebp will encode the alpha channel if present.
  * Add libtiff-devel BuildRequires for the new tiff input support.
  * Rename libwebp2 subpackage to libwebp4 (by changing lname
  defines), following upstreams soname bump (incl. baselibs.conf).
  * No reason to run autogen</changelog>
  <changelog author="mailaender@opensuse.org" date="1355054400">- Update to version 0.2.1
  * libwebp: validate chunk size in ParseOptionalChunks
  * cwebp (windows): fix alpha image import on XP
  * autoconf/libwebp: enable dll builds for mingw
  * [cd]webp: always output windows errors
  * fix double to float conversion warning
  * cwebp: fix jpg encodes on XP
  * VP8LAllocateHistogramSet: fix overflow in size calculation
  * GetHistoBits: fix integer overflow
  * EncodeImageInternal: fix uninitialized free
  * fix the -g/O3 discrepancy for 32bit compile
  * fix the BITS=8 case
  * Make *InitSSE2() functions be empty on non-SSE2 platform
  * make *InitSSE2() functions be empty on non-SSE2 platform
  * make VP8DspInitNEON() public</changelog>
  <changelog author="jengelh@inai.de" date="1366113600">- Update to new upstream release 0.3.0
  * WebPINewRGB/WebPINewYUVA accept being passed a NULL output buffer
  and will perform auto-allocation.
  * Default filter option is now "-strong -f 60"
  * Encoding speed-up for lossy methods 3 to 6
  * Alpha encoding can be done in parallel to lossy using
  `cwebp -mt ...`
  * Color profile, metadata (XMP/EXIF) and animation support in the
  container was finalized.
  * Various NEON assembly additions
- Tool updates / additions:
  * gif2webp added
  * vwebp given color profile &amp; animation support
  * cwebp can preserve color profile / metadata with "-metadata"</changelog>
  <changelog author="jengelh@inai.de" date="1372248000">- Update to new upstream release 0.3.1
  * Add incremental decoding support for images containing
  ALPH and ICCP chunks.
- Enable libwebpmux, libwebpdemux</changelog>
  <changelog author="jengelh@inai.de" date="1389268800">- Update to new upstream release 0.4.0
  * improved gif2webp tool
  * numerous fixes, compression improvement and speed-up
  * dither option added to decoder (dwebp -dither 50 ...)
  * improved multi-threaded modes (-mt option)
  * improved filtering strength determination
  * BMP and TIFF format output added to 'dwebp'
  * Significant memory reduction for decoding lossy images with alpha.
  * Intertwined decoding of RGB and alpha for a shorter
  time-to-first-decoded-pixel.
  * WebPIterator has a new member 'has_alpha' denoting whether the
  frame contains transparency.
  * Container spec amended with new 'blending method' for animation.</changelog>
  <changelog author="jengelh@inai.de" date="1407758400">- Update to new upstream release 0.4.1
  * AArch64 (arm64) &amp; MIPS support/optimizations
  * NEON assembly additions: ~25% faster lossy decode/encode (-m 4);
  ~10% faster lossless decode;~5-10% faster lossless encode (-m 3/4)
  * dwebp/vwebp can read from stdin
  * cwebp/gif2webp can write to stdout
  * cwebp can read webp files; useful if storing sources as webp
  lossless</changelog>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1524916800">- update to 1.0.0
  - lossy encoder improvements to avoid chroma shifts in various
  - ircumstances (issues #308, #340)
  - big-endian fixes for decode, RGBA import and
    WebPPictureDistortion
  - Tool updates:
    gifwebp, anim_diff - default duration behavior (&lt;= 10ms)
    changed to match web browsers, transcoding
    tools (issue #379)
    img2webp, webpmux - allow options to be passed in via a file
    (issue #355)
- changes from 0.6.1
  - lossless performance and compression improvements + a new
    'cruncher' mode (-m 6 -q 100)
  - ARM performance improvements with clang (15-20% w/ndk r15c,
    issue #339)
  - webp-js: emscripten/webassembly based javascript decoder
  - miscellaneous bug &amp; build fixes (issue #329, #332, #343, #353,
    [#360], #361, #363)
  - Tool updates / additions:
  - added webpinfo - prints file format information (issue #330)
  - gif2webp - loop behavior modified to match Chrome M63+
    (crbug.com/649264); '-loop_compatibility' can be
    used for the old behavior
- changes from 0.6.0
  - lossless performance and compression improvements
  - miscellaneous performance improvements (SSE2, NEON, MSA)
  - webpmux gained a -duration option allowing for frame timing
    modification
  - new img2webp utility allowing a sequence of images to be
    converted to animated webp
  - API changes:
  - libwebp:
    WebPPictureSharpARGBToYUVA
    WebPPlaneDistortion
  - libwebpmux / gif2webp:
    WebPAnimEncoderOptions: kmax &lt;= 0 now disables keyframes,
    kmax == 1 forces all keyframes. See
    mux.h and the gif2webp manpage for
    details.
- changes from 0.5.2
  - This release covers CVE-2016-8888 and CVE-2016-9085.
  - further security related hardening in the tools; fixes to
    gif2webp/AnimEncoder (issues #310, #314, #316, #322),
    cwebp/libwebp (issue #312)
  - full libwebp (encoder &amp; decoder) iOS framework; libwebpdecoder
    WebP.framework renamed to WebPDecoder.framework (issue #307)
  - CMake support for Android Studio (2.2)
  - miscellaneous build related fixes (issue #306, #313)
  - miscellaneous documentation improvements (issue #225)
  - minor lossy encoder fixes and improvements
- changes from 0.5.1
  - miscellaneous bug fixes (issues #280, #289)
  - reverted alpha plane encoding with color cache for
    compatibility with libwebp 0.4.0-&gt;0.4.3 (issues #291, #298)
  - lossless encoding performance improvements
  - memory reduction in both lossless encoding and decoding
  - force mux output to be in the extended format (VP8X) when
    undefined chunks are present (issue #294)
  - gradle, cmake build support
  - workaround for compiler bug causing 64-bit decode failures on
    android devices using clang-3.8 in the r11c NDK
  - various WebPAnimEncoder improvements
- disable extras for now. it seems it is not building and
  installing a library anymore</changelog>
  <changelog author="mrueckert@suse.de" date="1524916801">- update baselibs.conf for the new soversions</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562155200">- Update to version 1.0.2:
  * Lossless encoder speedups.
  * Lossy encoder speedup on ARM.
  * Lossless multi-threaded security fix.
- Changes from version 1.0.1:
  * Lossless encoder speedups.
  * Big-endian fix for alpha decoding.
  * Gif2webp fix for loop count=65535 transcode.
  * Further security related hardening in libwebp &amp; libwebpmux.
  * Miscellaneous bug &amp; build fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1566648000">- Update to new upstream release 1.0.3
  * Resize fixes for Nx1 sizes and the addition of non-opaque
    alpha values for odd sizes.
  * Lossless encode/decode performance improvements.
  * Lossy compression performance improvement at low quality
    levels with flat content.
  * vwebp will now preserve the aspect ratio of images that
    exceed monitor resolution by scaling the image to fit.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1685448000">- Add libwebp-double-free.patch: Avoid a double free, upstream
  commit a486d800 (bsc#1210212 CVE-2023-1999).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1694692800">- Add 0001-Fix-OOB-write-in-BuildHuffmanTable.patch
  Add 0001-Fix-invalid-incremental-decoding-check.patch:
  [boo#1215231] [CVE-2023-4863]</changelog>
</package>
<package pkgid="f7d7619deabf7d65caeb61ea4723509353b7b63be9cd00507c9c4fe8b331cd32" name="libwebp-devel" arch="x86_64">
  <version epoch="0" ver="1.0.3" rel="150200.3.14.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1524916800">- update to 1.0.0
  - lossy encoder improvements to avoid chroma shifts in various
  - ircumstances (issues #308, #340)
  - big-endian fixes for decode, RGBA import and
    WebPPictureDistortion
  - Tool updates:
    gifwebp, anim_diff - default duration behavior (&lt;= 10ms)
    changed to match web browsers, transcoding
    tools (issue #379)
    img2webp, webpmux - allow options to be passed in via a file
    (issue #355)
- changes from 0.6.1
  - lossless performance and compression improvements + a new
    'cruncher' mode (-m 6 -q 100)
  - ARM performance improvements with clang (15-20% w/ndk r15c,
    issue #339)
  - webp-js: emscripten/webassembly based javascript decoder
  - miscellaneous bug &amp; build fixes (issue #329, #332, #343, #353,
    [#360], #361, #363)
  - Tool updates / additions:
  - added webpinfo - prints file format information (issue #330)
  - gif2webp - loop behavior modified to match Chrome M63+
    (crbug.com/649264); '-loop_compatibility' can be
    used for the old behavior
- changes from 0.6.0
  - lossless performance and compression improvements
  - miscellaneous performance improvements (SSE2, NEON, MSA)
  - webpmux gained a -duration option allowing for frame timing
    modification
  - new img2webp utility allowing a sequence of images to be
    converted to animated webp
  - API changes:
  - libwebp:
    WebPPictureSharpARGBToYUVA
    WebPPlaneDistortion
  - libwebpmux / gif2webp:
    WebPAnimEncoderOptions: kmax &lt;= 0 now disables keyframes,
    kmax == 1 forces all keyframes. See
    mux.h and the gif2webp manpage for
    details.
- changes from 0.5.2
  - This release covers CVE-2016-8888 and CVE-2016-9085.
  - further security related hardening in the tools; fixes to
    gif2webp/AnimEncoder (issues #310, #314, #316, #322),
    cwebp/libwebp (issue #312)
  - full libwebp (encoder &amp; decoder) iOS framework; libwebpdecoder
    WebP.framework renamed to WebPDecoder.framework (issue #307)
  - CMake support for Android Studio (2.2)
  - miscellaneous build related fixes (issue #306, #313)
  - miscellaneous documentation improvements (issue #225)
  - minor lossy encoder fixes and improvements
- changes from 0.5.1
  - miscellaneous bug fixes (issues #280, #289)
  - reverted alpha plane encoding with color cache for
    compatibility with libwebp 0.4.0-&gt;0.4.3 (issues #291, #298)
  - lossless encoding performance improvements
  - memory reduction in both lossless encoding and decoding
  - force mux output to be in the extended format (VP8X) when
    undefined chunks are present (issue #294)
  - gradle, cmake build support
  - workaround for compiler bug causing 64-bit decode failures on
    android devices using clang-3.8 in the r11c NDK
  - various WebPAnimEncoder improvements
- disable extras for now. it seems it is not building and
  installing a library anymore</changelog>
  <changelog author="mrueckert@suse.de" date="1524916801">- update baselibs.conf for the new soversions</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562155200">- Update to version 1.0.2:
  * Lossless encoder speedups.
  * Lossy encoder speedup on ARM.
  * Lossless multi-threaded security fix.
- Changes from version 1.0.1:
  * Lossless encoder speedups.
  * Big-endian fix for alpha decoding.
  * Gif2webp fix for loop count=65535 transcode.
  * Further security related hardening in libwebp &amp; libwebpmux.
  * Miscellaneous bug &amp; build fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1566648000">- Update to new upstream release 1.0.3
  * Resize fixes for Nx1 sizes and the addition of non-opaque
    alpha values for odd sizes.
  * Lossless encode/decode performance improvements.
  * Lossy compression performance improvement at low quality
    levels with flat content.
  * vwebp will now preserve the aspect ratio of images that
    exceed monitor resolution by scaling the image to fit.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1685448000">- Add libwebp-double-free.patch: Avoid a double free, upstream
  commit a486d800 (bsc#1210212 CVE-2023-1999).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1694692800">- Add 0001-Fix-OOB-write-in-BuildHuffmanTable.patch
  Add 0001-Fix-invalid-incremental-decoding-check.patch:
  [boo#1215231] [CVE-2023-4863]</changelog>
</package>
<package pkgid="6d1615d03de81c563e915992cd4eb322e9350a7cd24c259b4e30a1093f0e3fc8" name="libwebp7" arch="x86_64">
  <version epoch="0" ver="1.0.3" rel="150200.3.14.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1524916800">- update to 1.0.0
  - lossy encoder improvements to avoid chroma shifts in various
  - ircumstances (issues #308, #340)
  - big-endian fixes for decode, RGBA import and
    WebPPictureDistortion
  - Tool updates:
    gifwebp, anim_diff - default duration behavior (&lt;= 10ms)
    changed to match web browsers, transcoding
    tools (issue #379)
    img2webp, webpmux - allow options to be passed in via a file
    (issue #355)
- changes from 0.6.1
  - lossless performance and compression improvements + a new
    'cruncher' mode (-m 6 -q 100)
  - ARM performance improvements with clang (15-20% w/ndk r15c,
    issue #339)
  - webp-js: emscripten/webassembly based javascript decoder
  - miscellaneous bug &amp; build fixes (issue #329, #332, #343, #353,
    [#360], #361, #363)
  - Tool updates / additions:
  - added webpinfo - prints file format information (issue #330)
  - gif2webp - loop behavior modified to match Chrome M63+
    (crbug.com/649264); '-loop_compatibility' can be
    used for the old behavior
- changes from 0.6.0
  - lossless performance and compression improvements
  - miscellaneous performance improvements (SSE2, NEON, MSA)
  - webpmux gained a -duration option allowing for frame timing
    modification
  - new img2webp utility allowing a sequence of images to be
    converted to animated webp
  - API changes:
  - libwebp:
    WebPPictureSharpARGBToYUVA
    WebPPlaneDistortion
  - libwebpmux / gif2webp:
    WebPAnimEncoderOptions: kmax &lt;= 0 now disables keyframes,
    kmax == 1 forces all keyframes. See
    mux.h and the gif2webp manpage for
    details.
- changes from 0.5.2
  - This release covers CVE-2016-8888 and CVE-2016-9085.
  - further security related hardening in the tools; fixes to
    gif2webp/AnimEncoder (issues #310, #314, #316, #322),
    cwebp/libwebp (issue #312)
  - full libwebp (encoder &amp; decoder) iOS framework; libwebpdecoder
    WebP.framework renamed to WebPDecoder.framework (issue #307)
  - CMake support for Android Studio (2.2)
  - miscellaneous build related fixes (issue #306, #313)
  - miscellaneous documentation improvements (issue #225)
  - minor lossy encoder fixes and improvements
- changes from 0.5.1
  - miscellaneous bug fixes (issues #280, #289)
  - reverted alpha plane encoding with color cache for
    compatibility with libwebp 0.4.0-&gt;0.4.3 (issues #291, #298)
  - lossless encoding performance improvements
  - memory reduction in both lossless encoding and decoding
  - force mux output to be in the extended format (VP8X) when
    undefined chunks are present (issue #294)
  - gradle, cmake build support
  - workaround for compiler bug causing 64-bit decode failures on
    android devices using clang-3.8 in the r11c NDK
  - various WebPAnimEncoder improvements
- disable extras for now. it seems it is not building and
  installing a library anymore</changelog>
  <changelog author="mrueckert@suse.de" date="1524916801">- update baselibs.conf for the new soversions</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562155200">- Update to version 1.0.2:
  * Lossless encoder speedups.
  * Lossy encoder speedup on ARM.
  * Lossless multi-threaded security fix.
- Changes from version 1.0.1:
  * Lossless encoder speedups.
  * Big-endian fix for alpha decoding.
  * Gif2webp fix for loop count=65535 transcode.
  * Further security related hardening in libwebp &amp; libwebpmux.
  * Miscellaneous bug &amp; build fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1566648000">- Update to new upstream release 1.0.3
  * Resize fixes for Nx1 sizes and the addition of non-opaque
    alpha values for odd sizes.
  * Lossless encode/decode performance improvements.
  * Lossy compression performance improvement at low quality
    levels with flat content.
  * vwebp will now preserve the aspect ratio of images that
    exceed monitor resolution by scaling the image to fit.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1685448000">- Add libwebp-double-free.patch: Avoid a double free, upstream
  commit a486d800 (bsc#1210212 CVE-2023-1999).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1694692800">- Add 0001-Fix-OOB-write-in-BuildHuffmanTable.patch
  Add 0001-Fix-invalid-incremental-decoding-check.patch:
  [boo#1215231] [CVE-2023-4863]</changelog>
</package>
<package pkgid="84380b8289f12879d5eb1629cf7e4f8ef43acf5cd3d7864e9675f9bdb35807c1" name="libwebpdecoder3" arch="x86_64">
  <version epoch="0" ver="1.0.3" rel="150200.3.14.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1524916800">- update to 1.0.0
  - lossy encoder improvements to avoid chroma shifts in various
  - ircumstances (issues #308, #340)
  - big-endian fixes for decode, RGBA import and
    WebPPictureDistortion
  - Tool updates:
    gifwebp, anim_diff - default duration behavior (&lt;= 10ms)
    changed to match web browsers, transcoding
    tools (issue #379)
    img2webp, webpmux - allow options to be passed in via a file
    (issue #355)
- changes from 0.6.1
  - lossless performance and compression improvements + a new
    'cruncher' mode (-m 6 -q 100)
  - ARM performance improvements with clang (15-20% w/ndk r15c,
    issue #339)
  - webp-js: emscripten/webassembly based javascript decoder
  - miscellaneous bug &amp; build fixes (issue #329, #332, #343, #353,
    [#360], #361, #363)
  - Tool updates / additions:
  - added webpinfo - prints file format information (issue #330)
  - gif2webp - loop behavior modified to match Chrome M63+
    (crbug.com/649264); '-loop_compatibility' can be
    used for the old behavior
- changes from 0.6.0
  - lossless performance and compression improvements
  - miscellaneous performance improvements (SSE2, NEON, MSA)
  - webpmux gained a -duration option allowing for frame timing
    modification
  - new img2webp utility allowing a sequence of images to be
    converted to animated webp
  - API changes:
  - libwebp:
    WebPPictureSharpARGBToYUVA
    WebPPlaneDistortion
  - libwebpmux / gif2webp:
    WebPAnimEncoderOptions: kmax &lt;= 0 now disables keyframes,
    kmax == 1 forces all keyframes. See
    mux.h and the gif2webp manpage for
    details.
- changes from 0.5.2
  - This release covers CVE-2016-8888 and CVE-2016-9085.
  - further security related hardening in the tools; fixes to
    gif2webp/AnimEncoder (issues #310, #314, #316, #322),
    cwebp/libwebp (issue #312)
  - full libwebp (encoder &amp; decoder) iOS framework; libwebpdecoder
    WebP.framework renamed to WebPDecoder.framework (issue #307)
  - CMake support for Android Studio (2.2)
  - miscellaneous build related fixes (issue #306, #313)
  - miscellaneous documentation improvements (issue #225)
  - minor lossy encoder fixes and improvements
- changes from 0.5.1
  - miscellaneous bug fixes (issues #280, #289)
  - reverted alpha plane encoding with color cache for
    compatibility with libwebp 0.4.0-&gt;0.4.3 (issues #291, #298)
  - lossless encoding performance improvements
  - memory reduction in both lossless encoding and decoding
  - force mux output to be in the extended format (VP8X) when
    undefined chunks are present (issue #294)
  - gradle, cmake build support
  - workaround for compiler bug causing 64-bit decode failures on
    android devices using clang-3.8 in the r11c NDK
  - various WebPAnimEncoder improvements
- disable extras for now. it seems it is not building and
  installing a library anymore</changelog>
  <changelog author="mrueckert@suse.de" date="1524916801">- update baselibs.conf for the new soversions</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562155200">- Update to version 1.0.2:
  * Lossless encoder speedups.
  * Lossy encoder speedup on ARM.
  * Lossless multi-threaded security fix.
- Changes from version 1.0.1:
  * Lossless encoder speedups.
  * Big-endian fix for alpha decoding.
  * Gif2webp fix for loop count=65535 transcode.
  * Further security related hardening in libwebp &amp; libwebpmux.
  * Miscellaneous bug &amp; build fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1566648000">- Update to new upstream release 1.0.3
  * Resize fixes for Nx1 sizes and the addition of non-opaque
    alpha values for odd sizes.
  * Lossless encode/decode performance improvements.
  * Lossy compression performance improvement at low quality
    levels with flat content.
  * vwebp will now preserve the aspect ratio of images that
    exceed monitor resolution by scaling the image to fit.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1685448000">- Add libwebp-double-free.patch: Avoid a double free, upstream
  commit a486d800 (bsc#1210212 CVE-2023-1999).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1694692800">- Add 0001-Fix-OOB-write-in-BuildHuffmanTable.patch
  Add 0001-Fix-invalid-incremental-decoding-check.patch:
  [boo#1215231] [CVE-2023-4863]</changelog>
</package>
<package pkgid="8aa96ff4f3264d1a0ac4b842958807f9d9217e1dff66fdcc6faaee164dbac16f" name="libwebpdemux2" arch="x86_64">
  <version epoch="0" ver="1.0.3" rel="150200.3.14.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1524916800">- update to 1.0.0
  - lossy encoder improvements to avoid chroma shifts in various
  - ircumstances (issues #308, #340)
  - big-endian fixes for decode, RGBA import and
    WebPPictureDistortion
  - Tool updates:
    gifwebp, anim_diff - default duration behavior (&lt;= 10ms)
    changed to match web browsers, transcoding
    tools (issue #379)
    img2webp, webpmux - allow options to be passed in via a file
    (issue #355)
- changes from 0.6.1
  - lossless performance and compression improvements + a new
    'cruncher' mode (-m 6 -q 100)
  - ARM performance improvements with clang (15-20% w/ndk r15c,
    issue #339)
  - webp-js: emscripten/webassembly based javascript decoder
  - miscellaneous bug &amp; build fixes (issue #329, #332, #343, #353,
    [#360], #361, #363)
  - Tool updates / additions:
  - added webpinfo - prints file format information (issue #330)
  - gif2webp - loop behavior modified to match Chrome M63+
    (crbug.com/649264); '-loop_compatibility' can be
    used for the old behavior
- changes from 0.6.0
  - lossless performance and compression improvements
  - miscellaneous performance improvements (SSE2, NEON, MSA)
  - webpmux gained a -duration option allowing for frame timing
    modification
  - new img2webp utility allowing a sequence of images to be
    converted to animated webp
  - API changes:
  - libwebp:
    WebPPictureSharpARGBToYUVA
    WebPPlaneDistortion
  - libwebpmux / gif2webp:
    WebPAnimEncoderOptions: kmax &lt;= 0 now disables keyframes,
    kmax == 1 forces all keyframes. See
    mux.h and the gif2webp manpage for
    details.
- changes from 0.5.2
  - This release covers CVE-2016-8888 and CVE-2016-9085.
  - further security related hardening in the tools; fixes to
    gif2webp/AnimEncoder (issues #310, #314, #316, #322),
    cwebp/libwebp (issue #312)
  - full libwebp (encoder &amp; decoder) iOS framework; libwebpdecoder
    WebP.framework renamed to WebPDecoder.framework (issue #307)
  - CMake support for Android Studio (2.2)
  - miscellaneous build related fixes (issue #306, #313)
  - miscellaneous documentation improvements (issue #225)
  - minor lossy encoder fixes and improvements
- changes from 0.5.1
  - miscellaneous bug fixes (issues #280, #289)
  - reverted alpha plane encoding with color cache for
    compatibility with libwebp 0.4.0-&gt;0.4.3 (issues #291, #298)
  - lossless encoding performance improvements
  - memory reduction in both lossless encoding and decoding
  - force mux output to be in the extended format (VP8X) when
    undefined chunks are present (issue #294)
  - gradle, cmake build support
  - workaround for compiler bug causing 64-bit decode failures on
    android devices using clang-3.8 in the r11c NDK
  - various WebPAnimEncoder improvements
- disable extras for now. it seems it is not building and
  installing a library anymore</changelog>
  <changelog author="mrueckert@suse.de" date="1524916801">- update baselibs.conf for the new soversions</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562155200">- Update to version 1.0.2:
  * Lossless encoder speedups.
  * Lossy encoder speedup on ARM.
  * Lossless multi-threaded security fix.
- Changes from version 1.0.1:
  * Lossless encoder speedups.
  * Big-endian fix for alpha decoding.
  * Gif2webp fix for loop count=65535 transcode.
  * Further security related hardening in libwebp &amp; libwebpmux.
  * Miscellaneous bug &amp; build fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1566648000">- Update to new upstream release 1.0.3
  * Resize fixes for Nx1 sizes and the addition of non-opaque
    alpha values for odd sizes.
  * Lossless encode/decode performance improvements.
  * Lossy compression performance improvement at low quality
    levels with flat content.
  * vwebp will now preserve the aspect ratio of images that
    exceed monitor resolution by scaling the image to fit.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1685448000">- Add libwebp-double-free.patch: Avoid a double free, upstream
  commit a486d800 (bsc#1210212 CVE-2023-1999).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1694692800">- Add 0001-Fix-OOB-write-in-BuildHuffmanTable.patch
  Add 0001-Fix-invalid-incremental-decoding-check.patch:
  [boo#1215231] [CVE-2023-4863]</changelog>
</package>
<package pkgid="7260a3a7a29f330c3343b55748d42165424219a8c3a0c2f1b1f79df9eeb80e49" name="libwebpmux3" arch="x86_64">
  <version epoch="0" ver="1.0.3" rel="150200.3.14.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1524916800">- update to 1.0.0
  - lossy encoder improvements to avoid chroma shifts in various
  - ircumstances (issues #308, #340)
  - big-endian fixes for decode, RGBA import and
    WebPPictureDistortion
  - Tool updates:
    gifwebp, anim_diff - default duration behavior (&lt;= 10ms)
    changed to match web browsers, transcoding
    tools (issue #379)
    img2webp, webpmux - allow options to be passed in via a file
    (issue #355)
- changes from 0.6.1
  - lossless performance and compression improvements + a new
    'cruncher' mode (-m 6 -q 100)
  - ARM performance improvements with clang (15-20% w/ndk r15c,
    issue #339)
  - webp-js: emscripten/webassembly based javascript decoder
  - miscellaneous bug &amp; build fixes (issue #329, #332, #343, #353,
    [#360], #361, #363)
  - Tool updates / additions:
  - added webpinfo - prints file format information (issue #330)
  - gif2webp - loop behavior modified to match Chrome M63+
    (crbug.com/649264); '-loop_compatibility' can be
    used for the old behavior
- changes from 0.6.0
  - lossless performance and compression improvements
  - miscellaneous performance improvements (SSE2, NEON, MSA)
  - webpmux gained a -duration option allowing for frame timing
    modification
  - new img2webp utility allowing a sequence of images to be
    converted to animated webp
  - API changes:
  - libwebp:
    WebPPictureSharpARGBToYUVA
    WebPPlaneDistortion
  - libwebpmux / gif2webp:
    WebPAnimEncoderOptions: kmax &lt;= 0 now disables keyframes,
    kmax == 1 forces all keyframes. See
    mux.h and the gif2webp manpage for
    details.
- changes from 0.5.2
  - This release covers CVE-2016-8888 and CVE-2016-9085.
  - further security related hardening in the tools; fixes to
    gif2webp/AnimEncoder (issues #310, #314, #316, #322),
    cwebp/libwebp (issue #312)
  - full libwebp (encoder &amp; decoder) iOS framework; libwebpdecoder
    WebP.framework renamed to WebPDecoder.framework (issue #307)
  - CMake support for Android Studio (2.2)
  - miscellaneous build related fixes (issue #306, #313)
  - miscellaneous documentation improvements (issue #225)
  - minor lossy encoder fixes and improvements
- changes from 0.5.1
  - miscellaneous bug fixes (issues #280, #289)
  - reverted alpha plane encoding with color cache for
    compatibility with libwebp 0.4.0-&gt;0.4.3 (issues #291, #298)
  - lossless encoding performance improvements
  - memory reduction in both lossless encoding and decoding
  - force mux output to be in the extended format (VP8X) when
    undefined chunks are present (issue #294)
  - gradle, cmake build support
  - workaround for compiler bug causing 64-bit decode failures on
    android devices using clang-3.8 in the r11c NDK
  - various WebPAnimEncoder improvements
- disable extras for now. it seems it is not building and
  installing a library anymore</changelog>
  <changelog author="mrueckert@suse.de" date="1524916801">- update baselibs.conf for the new soversions</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562155200">- Update to version 1.0.2:
  * Lossless encoder speedups.
  * Lossy encoder speedup on ARM.
  * Lossless multi-threaded security fix.
- Changes from version 1.0.1:
  * Lossless encoder speedups.
  * Big-endian fix for alpha decoding.
  * Gif2webp fix for loop count=65535 transcode.
  * Further security related hardening in libwebp &amp; libwebpmux.
  * Miscellaneous bug &amp; build fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1566648000">- Update to new upstream release 1.0.3
  * Resize fixes for Nx1 sizes and the addition of non-opaque
    alpha values for odd sizes.
  * Lossless encode/decode performance improvements.
  * Lossy compression performance improvement at low quality
    levels with flat content.
  * vwebp will now preserve the aspect ratio of images that
    exceed monitor resolution by scaling the image to fit.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1685448000">- Add libwebp-double-free.patch: Avoid a double free, upstream
  commit a486d800 (bsc#1210212 CVE-2023-1999).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1694692800">- Add 0001-Fix-OOB-write-in-BuildHuffmanTable.patch
  Add 0001-Fix-invalid-incremental-decoding-check.patch:
  [boo#1215231] [CVE-2023-4863]</changelog>
</package>
<package pkgid="d30b9d3bc8c23c03afb9f69160cd1eb625400a89e3b47bb3cfe566eb168a8981" name="libwireshark17" arch="x86_64">
  <version epoch="0" ver="4.2.12" rel="150600.18.23.1"/>
  <changelog author="rfrohl@suse.com" date="1689249600">- Wireshark 4.0.7:
  * CVE-2023-3648: Kafka dissector crash (boo#1213319).
  * CVE-2023-3649: iSCSI dissector crash (boo#1213318).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.0.7.html</changelog>
  <changelog author="rfrohl@suse.com" date="1692792000">- Wireshark 4.0.8:
  * CVE-2023-4512: CBOR dissector crash (boo#1214561).
  * CVE-2023-4511: BT SDP dissector infinite loop (boo#1214560).
  * CVE-2023-4513: BT SDP dissector memory leak (boo#1214562).
  * CVE-2023-2906: CP2179 dissector crash (boo#1214652).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.0.8.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1696507200">- Wireshark 4.0.10:
  * CVE-2023-5371: RTPS dissector memory leak (wnpa-sec-2023-27, boo#1215959)
  * Fix a number of bugs in protocol parsers, including:
  * RTP/RFC 4571: Wrong desegmentation/reassembly in RTP over TCP packets
  * Incorrect bit values and namings in BSS Configuration Report TLV
  * Wireshark 4.0.9 contained a bug affecting other platforms</changelog>
  <changelog author="rfrohl@suse.com" date="1700136000">- Wireshark 4.0.11:
  * CVE-2023-6174: SSH dissector crash (boo#1217247).
  * CVE-2023-6175: NetScreen file parser crash (boo#1217272).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.0.11.html</changelog>
  <changelog author="rfrohl@suse.com" date="1700827200">- Wireshark 4.2.0:
  * CVE-2024-24476: Fixed buffer overflow in ws_manuf_lookup_str() (boo#1220181).
  * CVE-2022-3725: Fixed integer overflow in the OPUS dissector (boo#1204822).
  * Packet list sorting has been improved.
  * Wireshark and TShark are now better about generating valid UTF-8 output.
  * A new display filter feature for filtering raw bytes has been added.
  * Display filter autocomplete is smarter about not suggesting invalid syntax.
  * Tools › MAC Address Blocks can lookup a MAC address in the IEEE OUI registry.
  * The installation target no longer installs development headers by default.
  * The Wireshark installation is relocatable on Linux (and other ELF platforms with support for relative RPATHs).
  * Tools › Browser (SSL Keylog) can launch your web browser with the SSLKEYLOGFILE environment variable set to the appropriate value.
  * Wireshark now supports the Korean language.
  * Many other improvements have been made. See the “New and Updated Features” section below for more details.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.0.html
- Updated patches
  wireshark-0000-wsutil-implicit_declaration_memcpy.patch
  wireshark-0010-dumpcap-permission-denied.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701259200">- Install SDK using cmake --install --component Development instead
  of manually copying. This brings back the .pc file and simplifies
  the spec file.</changelog>
  <changelog author="rfrohl@suse.com" date="1704369600">- Wireshark 4.2.1:
  * CVE-2024-0207: HTTP3 dissector crash (boo#1218503).
  * CVE-2024-0208: GVCP dissector crash (boo#1218504).
  * CVE-2024-0209: IEEE 1609.2 dissector crash (boo#1218505).
  * CVE-2024-0210: Zigbee TLV dissector crash (boo#1218506).
  * CVE-2024-0211: DOCSIS dissector crash (boo#1218507).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1704456000">- Wireshark 4.2.2:
  * minor bug fix release
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.2.html</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- handle different CMAKE_INSTALL_DOCDIR setting between
  tumbleweed and leap</changelog>
  <changelog author="dmueller@suse.com" date="1707739200">- handle one more mismatch in docdir handling</changelog>
  <changelog author="rfrohl@suse.com" date="1707998400">- Wireshark 4.2.3:
  * Capture start fails when file set enabled and file extension not supplied if directory contains a period.
  * Cannot drag and move custom filter buttons in toolbar.
  * Not equal won’t work when used with wlan.addr.
  * sshdump fails to connect with private key (ssh-rsa)
  * ChmodBPF installation fails on macOS Sonoma 14.1.2.
  * Windows installers should check for Windows 8.1.
  * Fuzz job crash output: fuzz-2024-01-05-7725.pcap.
  * Fuzz job crash output: fuzz-2024-01-06-7734.pcap.
  * Incorrect recursion depth assert failure when dissecting a legitimate GOOSE message.
  * OPC UA - large read request is reported as malformed in 4.2.1 but not in 4.0.12.
  * TFTP dissector bug type listed as netscii instead of netascii doesn’t show all TFTP packets including TFTP blocks.
  * SMB1 replies from LAN Drive app only show up as NBSS Continuation Message.
  * ciscodump - older SSH key exchange algorithms not supported.
  * Problem decoding LAPB/X.25/FTAM after adding X.75 decoding.
  * Wireshark Filter not working.
  * CFLOW: failure to decode 0 length data fields of
  * Copy ...as Printable Text Feature Missing in 4.1/4.2.
  * Export Objects - HTTP is missing some HTTP/2 files in a two-pass analysis.
  * ASAM-CMP Plugin: Malformed message, length mismatch if vendor defined data of status messages has odd length.
  * OSS-Fuzz 66561: wireshark:fuzzshark_ip_proto-udp: Null-dereference READ in wmem_map_lookup.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1711627200">- Wireshark 4.2.4:
  * CVE-2024-2955: T.38 dissector crash (boo#1222030).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.4.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1715774400">- Wireshark 4.2.5:
  * CVE-2024-4854: MONGO and ZigBee TLV dissector infinite loops
    (wnpa-sec-2024-07 boo#1224274)
  * CVE-2024-4853: The editcap command line utility could crash
    when chopping bytes from the beginning of a packet
    (wnpa-sec-2024-08 boo#1224259)
  * CVE-2024-4855: The editcap command line utility could crash
    when injecting secrets while writing multiple files
    (wnpa-sec-2024-09 boo#1224276)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.5.html</changelog>
  <changelog author="info@ebner-markus.de" date="1718798400">- Fix Wireshark Super User Mode starter</changelog>
  <changelog author="rfrohl@suse.com" date="1720612800">- Wireshark 4.2.6 (jsc#PED-8517):
  * CVE-2024-8645: SPRT dissector crash (boo#1230372).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1724932800">- Wireshark 4.2.7:
  * CVE-2024-8250: NTLMSSP dissector crash (boo#1229907).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.7.html</changelog>
  <changelog author="rfrohl@suse.com" date="1728561600">- Wireshark 4.2.8:
  * CVE-2024-9781: AppleTalk and RELOAD Framing dissector crashes (bsc#1231476).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.8.html</changelog>
  <changelog author="rfrohl@suse.com" date="1732536000">- Wireshark 4.2.9:
  * CVE-2024-11595: FiveCo RAP dissector infinite loop (bsc#1233594).
  * CVE-2024-11596: ECMP dissector crash (bsc#1233593).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.9.html</changelog>
  <changelog author="rfrohl@suse.com" date="1740398400">- Wireshark 4.2.11:
  * CVE-2025-1492: Bundle Protocol and CBOR dissector crash (bsc#1237414).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.11.html</changelog>
  <changelog author="rfrohl@suse.com" date="1749124800">- Wireshark 4.2.12:
  * CVE-2025-5601: Dissection engine crash (bsc#1244081).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.12.html</changelog>
</package>
<package pkgid="adebec83d37ad6ea97eb25a69675cff5f20bd5f0f29a1abcc39effb3a7944fa8" name="libwireshark17" arch="x86_64">
  <version epoch="0" ver="4.2.13" rel="150600.18.26.1"/>
  <changelog author="rfrohl@suse.com" date="1692792000">- Wireshark 4.0.8:
  * CVE-2023-4512: CBOR dissector crash (boo#1214561).
  * CVE-2023-4511: BT SDP dissector infinite loop (boo#1214560).
  * CVE-2023-4513: BT SDP dissector memory leak (boo#1214562).
  * CVE-2023-2906: CP2179 dissector crash (boo#1214652).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.0.8.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1696507200">- Wireshark 4.0.10:
  * CVE-2023-5371: RTPS dissector memory leak (wnpa-sec-2023-27, boo#1215959)
  * Fix a number of bugs in protocol parsers, including:
  * RTP/RFC 4571: Wrong desegmentation/reassembly in RTP over TCP packets
  * Incorrect bit values and namings in BSS Configuration Report TLV
  * Wireshark 4.0.9 contained a bug affecting other platforms</changelog>
  <changelog author="rfrohl@suse.com" date="1700136000">- Wireshark 4.0.11:
  * CVE-2023-6174: SSH dissector crash (boo#1217247).
  * CVE-2023-6175: NetScreen file parser crash (boo#1217272).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.0.11.html</changelog>
  <changelog author="rfrohl@suse.com" date="1700827200">- Wireshark 4.2.0:
  * CVE-2024-24476: Fixed buffer overflow in ws_manuf_lookup_str() (boo#1220181).
  * CVE-2022-3725: Fixed integer overflow in the OPUS dissector (boo#1204822).
  * Packet list sorting has been improved.
  * Wireshark and TShark are now better about generating valid UTF-8 output.
  * A new display filter feature for filtering raw bytes has been added.
  * Display filter autocomplete is smarter about not suggesting invalid syntax.
  * Tools › MAC Address Blocks can lookup a MAC address in the IEEE OUI registry.
  * The installation target no longer installs development headers by default.
  * The Wireshark installation is relocatable on Linux (and other ELF platforms with support for relative RPATHs).
  * Tools › Browser (SSL Keylog) can launch your web browser with the SSLKEYLOGFILE environment variable set to the appropriate value.
  * Wireshark now supports the Korean language.
  * Many other improvements have been made. See the “New and Updated Features” section below for more details.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.0.html
- Updated patches
  wireshark-0000-wsutil-implicit_declaration_memcpy.patch
  wireshark-0010-dumpcap-permission-denied.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701259200">- Install SDK using cmake --install --component Development instead
  of manually copying. This brings back the .pc file and simplifies
  the spec file.</changelog>
  <changelog author="rfrohl@suse.com" date="1704369600">- Wireshark 4.2.1:
  * CVE-2024-0207: HTTP3 dissector crash (boo#1218503).
  * CVE-2024-0208: GVCP dissector crash (boo#1218504).
  * CVE-2024-0209: IEEE 1609.2 dissector crash (boo#1218505).
  * CVE-2024-0210: Zigbee TLV dissector crash (boo#1218506).
  * CVE-2024-0211: DOCSIS dissector crash (boo#1218507).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1704456000">- Wireshark 4.2.2:
  * minor bug fix release
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.2.html</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- handle different CMAKE_INSTALL_DOCDIR setting between
  tumbleweed and leap</changelog>
  <changelog author="dmueller@suse.com" date="1707739200">- handle one more mismatch in docdir handling</changelog>
  <changelog author="rfrohl@suse.com" date="1707998400">- Wireshark 4.2.3:
  * Capture start fails when file set enabled and file extension not supplied if directory contains a period.
  * Cannot drag and move custom filter buttons in toolbar.
  * Not equal won’t work when used with wlan.addr.
  * sshdump fails to connect with private key (ssh-rsa)
  * ChmodBPF installation fails on macOS Sonoma 14.1.2.
  * Windows installers should check for Windows 8.1.
  * Fuzz job crash output: fuzz-2024-01-05-7725.pcap.
  * Fuzz job crash output: fuzz-2024-01-06-7734.pcap.
  * Incorrect recursion depth assert failure when dissecting a legitimate GOOSE message.
  * OPC UA - large read request is reported as malformed in 4.2.1 but not in 4.0.12.
  * TFTP dissector bug type listed as netscii instead of netascii doesn’t show all TFTP packets including TFTP blocks.
  * SMB1 replies from LAN Drive app only show up as NBSS Continuation Message.
  * ciscodump - older SSH key exchange algorithms not supported.
  * Problem decoding LAPB/X.25/FTAM after adding X.75 decoding.
  * Wireshark Filter not working.
  * CFLOW: failure to decode 0 length data fields of
  * Copy ...as Printable Text Feature Missing in 4.1/4.2.
  * Export Objects - HTTP is missing some HTTP/2 files in a two-pass analysis.
  * ASAM-CMP Plugin: Malformed message, length mismatch if vendor defined data of status messages has odd length.
  * OSS-Fuzz 66561: wireshark:fuzzshark_ip_proto-udp: Null-dereference READ in wmem_map_lookup.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1711627200">- Wireshark 4.2.4:
  * CVE-2024-2955: T.38 dissector crash (boo#1222030).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.4.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1715774400">- Wireshark 4.2.5:
  * CVE-2024-4854: MONGO and ZigBee TLV dissector infinite loops
    (wnpa-sec-2024-07 boo#1224274)
  * CVE-2024-4853: The editcap command line utility could crash
    when chopping bytes from the beginning of a packet
    (wnpa-sec-2024-08 boo#1224259)
  * CVE-2024-4855: The editcap command line utility could crash
    when injecting secrets while writing multiple files
    (wnpa-sec-2024-09 boo#1224276)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.5.html</changelog>
  <changelog author="info@ebner-markus.de" date="1718798400">- Fix Wireshark Super User Mode starter</changelog>
  <changelog author="rfrohl@suse.com" date="1720612800">- Wireshark 4.2.6 (jsc#PED-8517):
  * CVE-2024-8645: SPRT dissector crash (boo#1230372).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1724932800">- Wireshark 4.2.7:
  * CVE-2024-8250: NTLMSSP dissector crash (boo#1229907).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.7.html</changelog>
  <changelog author="rfrohl@suse.com" date="1728561600">- Wireshark 4.2.8:
  * CVE-2024-9781: AppleTalk and RELOAD Framing dissector crashes (bsc#1231476).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.8.html</changelog>
  <changelog author="rfrohl@suse.com" date="1732536000">- Wireshark 4.2.9:
  * CVE-2024-11595: FiveCo RAP dissector infinite loop (bsc#1233594).
  * CVE-2024-11596: ECMP dissector crash (bsc#1233593).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.9.html</changelog>
  <changelog author="rfrohl@suse.com" date="1740398400">- Wireshark 4.2.11:
  * CVE-2025-1492: Bundle Protocol and CBOR dissector crash (bsc#1237414).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.11.html</changelog>
  <changelog author="rfrohl@suse.com" date="1749124800">- Wireshark 4.2.12:
  * CVE-2025-5601: Dissection engine crash (bsc#1244081).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.12.html</changelog>
  <changelog author="rfrohl@suse.com" date="1756987200">- CVE-2025-9817: SSH dissector crash (bsc#1249090).
  adding wireshark-0011-CVE-2025-9817.patch
- Wireshark 4.2.13:
  * Bug in UDS dissector with Service ReadDataByPeriodicIdentifier Response
  * application/x-www-form-urlencoded key parsed incorrectly following a name-value byte sequence with no '='
  * DNP3 time stamp was unable to work after epoch time (year 2038)
  * Bug in LZ77 decoder; reads a 16-bit length when it should read a 32-bit length
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.13.html</changelog>
</package>
<package pkgid="801363de279067488cb1f1ea1d2f10eee19a343e2a1cf1366bc64f25e53cd37e" name="libwireshark17" arch="x86_64">
  <version epoch="0" ver="4.2.14" rel="150600.18.29.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1696507200">- Wireshark 4.0.10:
  * CVE-2023-5371: RTPS dissector memory leak (wnpa-sec-2023-27, boo#1215959)
  * Fix a number of bugs in protocol parsers, including:
  * RTP/RFC 4571: Wrong desegmentation/reassembly in RTP over TCP packets
  * Incorrect bit values and namings in BSS Configuration Report TLV
  * Wireshark 4.0.9 contained a bug affecting other platforms</changelog>
  <changelog author="rfrohl@suse.com" date="1700136000">- Wireshark 4.0.11:
  * CVE-2023-6174: SSH dissector crash (boo#1217247).
  * CVE-2023-6175: NetScreen file parser crash (boo#1217272).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.0.11.html</changelog>
  <changelog author="rfrohl@suse.com" date="1700827200">- Wireshark 4.2.0:
  * CVE-2024-24476: Fixed buffer overflow in ws_manuf_lookup_str() (boo#1220181).
  * CVE-2022-3725: Fixed integer overflow in the OPUS dissector (boo#1204822).
  * Packet list sorting has been improved.
  * Wireshark and TShark are now better about generating valid UTF-8 output.
  * A new display filter feature for filtering raw bytes has been added.
  * Display filter autocomplete is smarter about not suggesting invalid syntax.
  * Tools › MAC Address Blocks can lookup a MAC address in the IEEE OUI registry.
  * The installation target no longer installs development headers by default.
  * The Wireshark installation is relocatable on Linux (and other ELF platforms with support for relative RPATHs).
  * Tools › Browser (SSL Keylog) can launch your web browser with the SSLKEYLOGFILE environment variable set to the appropriate value.
  * Wireshark now supports the Korean language.
  * Many other improvements have been made. See the “New and Updated Features” section below for more details.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.0.html
- Updated patches
  wireshark-0000-wsutil-implicit_declaration_memcpy.patch
  wireshark-0010-dumpcap-permission-denied.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701259200">- Install SDK using cmake --install --component Development instead
  of manually copying. This brings back the .pc file and simplifies
  the spec file.</changelog>
  <changelog author="rfrohl@suse.com" date="1704369600">- Wireshark 4.2.1:
  * CVE-2024-0207: HTTP3 dissector crash (boo#1218503).
  * CVE-2024-0208: GVCP dissector crash (boo#1218504).
  * CVE-2024-0209: IEEE 1609.2 dissector crash (boo#1218505).
  * CVE-2024-0210: Zigbee TLV dissector crash (boo#1218506).
  * CVE-2024-0211: DOCSIS dissector crash (boo#1218507).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1704456000">- Wireshark 4.2.2:
  * minor bug fix release
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.2.html</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- handle different CMAKE_INSTALL_DOCDIR setting between
  tumbleweed and leap</changelog>
  <changelog author="dmueller@suse.com" date="1707739200">- handle one more mismatch in docdir handling</changelog>
  <changelog author="rfrohl@suse.com" date="1707998400">- Wireshark 4.2.3:
  * Capture start fails when file set enabled and file extension not supplied if directory contains a period.
  * Cannot drag and move custom filter buttons in toolbar.
  * Not equal won’t work when used with wlan.addr.
  * sshdump fails to connect with private key (ssh-rsa)
  * ChmodBPF installation fails on macOS Sonoma 14.1.2.
  * Windows installers should check for Windows 8.1.
  * Fuzz job crash output: fuzz-2024-01-05-7725.pcap.
  * Fuzz job crash output: fuzz-2024-01-06-7734.pcap.
  * Incorrect recursion depth assert failure when dissecting a legitimate GOOSE message.
  * OPC UA - large read request is reported as malformed in 4.2.1 but not in 4.0.12.
  * TFTP dissector bug type listed as netscii instead of netascii doesn’t show all TFTP packets including TFTP blocks.
  * SMB1 replies from LAN Drive app only show up as NBSS Continuation Message.
  * ciscodump - older SSH key exchange algorithms not supported.
  * Problem decoding LAPB/X.25/FTAM after adding X.75 decoding.
  * Wireshark Filter not working.
  * CFLOW: failure to decode 0 length data fields of
  * Copy ...as Printable Text Feature Missing in 4.1/4.2.
  * Export Objects - HTTP is missing some HTTP/2 files in a two-pass analysis.
  * ASAM-CMP Plugin: Malformed message, length mismatch if vendor defined data of status messages has odd length.
  * OSS-Fuzz 66561: wireshark:fuzzshark_ip_proto-udp: Null-dereference READ in wmem_map_lookup.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1711627200">- Wireshark 4.2.4:
  * CVE-2024-2955: T.38 dissector crash (boo#1222030).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.4.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1715774400">- Wireshark 4.2.5:
  * CVE-2024-4854: MONGO and ZigBee TLV dissector infinite loops
    (wnpa-sec-2024-07 boo#1224274)
  * CVE-2024-4853: The editcap command line utility could crash
    when chopping bytes from the beginning of a packet
    (wnpa-sec-2024-08 boo#1224259)
  * CVE-2024-4855: The editcap command line utility could crash
    when injecting secrets while writing multiple files
    (wnpa-sec-2024-09 boo#1224276)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.5.html</changelog>
  <changelog author="info@ebner-markus.de" date="1718798400">- Fix Wireshark Super User Mode starter</changelog>
  <changelog author="rfrohl@suse.com" date="1720612800">- Wireshark 4.2.6 (jsc#PED-8517):
  * CVE-2024-8645: SPRT dissector crash (boo#1230372).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1724932800">- Wireshark 4.2.7:
  * CVE-2024-8250: NTLMSSP dissector crash (boo#1229907).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.7.html</changelog>
  <changelog author="rfrohl@suse.com" date="1728561600">- Wireshark 4.2.8:
  * CVE-2024-9781: AppleTalk and RELOAD Framing dissector crashes (bsc#1231476).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.8.html</changelog>
  <changelog author="rfrohl@suse.com" date="1732536000">- Wireshark 4.2.9:
  * CVE-2024-11595: FiveCo RAP dissector infinite loop (bsc#1233594).
  * CVE-2024-11596: ECMP dissector crash (bsc#1233593).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.9.html</changelog>
  <changelog author="rfrohl@suse.com" date="1740398400">- Wireshark 4.2.11:
  * CVE-2025-1492: Bundle Protocol and CBOR dissector crash (bsc#1237414).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.11.html</changelog>
  <changelog author="rfrohl@suse.com" date="1749124800">- Wireshark 4.2.12:
  * CVE-2025-5601: Dissection engine crash (bsc#1244081).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.12.html</changelog>
  <changelog author="rfrohl@suse.com" date="1756987200">- CVE-2025-9817: SSH dissector crash (bsc#1249090).
  adding wireshark-0011-CVE-2025-9817.patch
- Wireshark 4.2.13:
  * Bug in UDS dissector with Service ReadDataByPeriodicIdentifier Response
  * application/x-www-form-urlencoded key parsed incorrectly following a name-value byte sequence with no '='
  * DNP3 time stamp was unable to work after epoch time (year 2038)
  * Bug in LZ77 decoder; reads a 16-bit length when it should read a 32-bit length
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.13.html</changelog>
  <changelog author="rfrohl@suse.com" date="1760529600">- Wireshark 4.2.14:
  * CVE-2025-11626: MONGO dissector infinite loop (bsc#1251933).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.14.html</changelog>
</package>
<package pkgid="152845285180faae8fdd899e89c57d0c3038f14980bf356ba1c22af32d4af496" name="libwireshark17" arch="x86_64">
  <version epoch="0" ver="4.2.14" rel="150600.18.32.1"/>
  <changelog author="rfrohl@suse.com" date="1700136000">- Wireshark 4.0.11:
  * CVE-2023-6174: SSH dissector crash (boo#1217247).
  * CVE-2023-6175: NetScreen file parser crash (boo#1217272).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.0.11.html</changelog>
  <changelog author="rfrohl@suse.com" date="1700827200">- Wireshark 4.2.0:
  * CVE-2024-24476: Fixed buffer overflow in ws_manuf_lookup_str() (boo#1220181).
  * CVE-2022-3725: Fixed integer overflow in the OPUS dissector (boo#1204822).
  * Packet list sorting has been improved.
  * Wireshark and TShark are now better about generating valid UTF-8 output.
  * A new display filter feature for filtering raw bytes has been added.
  * Display filter autocomplete is smarter about not suggesting invalid syntax.
  * Tools › MAC Address Blocks can lookup a MAC address in the IEEE OUI registry.
  * The installation target no longer installs development headers by default.
  * The Wireshark installation is relocatable on Linux (and other ELF platforms with support for relative RPATHs).
  * Tools › Browser (SSL Keylog) can launch your web browser with the SSLKEYLOGFILE environment variable set to the appropriate value.
  * Wireshark now supports the Korean language.
  * Many other improvements have been made. See the “New and Updated Features” section below for more details.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.0.html
- Updated patches
  wireshark-0000-wsutil-implicit_declaration_memcpy.patch
  wireshark-0010-dumpcap-permission-denied.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701259200">- Install SDK using cmake --install --component Development instead
  of manually copying. This brings back the .pc file and simplifies
  the spec file.</changelog>
  <changelog author="rfrohl@suse.com" date="1704369600">- Wireshark 4.2.1:
  * CVE-2024-0207: HTTP3 dissector crash (boo#1218503).
  * CVE-2024-0208: GVCP dissector crash (boo#1218504).
  * CVE-2024-0209: IEEE 1609.2 dissector crash (boo#1218505).
  * CVE-2024-0210: Zigbee TLV dissector crash (boo#1218506).
  * CVE-2024-0211: DOCSIS dissector crash (boo#1218507).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1704456000">- Wireshark 4.2.2:
  * minor bug fix release
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.2.html</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- handle different CMAKE_INSTALL_DOCDIR setting between
  tumbleweed and leap</changelog>
  <changelog author="dmueller@suse.com" date="1707739200">- handle one more mismatch in docdir handling</changelog>
  <changelog author="rfrohl@suse.com" date="1707998400">- Wireshark 4.2.3:
  * Capture start fails when file set enabled and file extension not supplied if directory contains a period.
  * Cannot drag and move custom filter buttons in toolbar.
  * Not equal won’t work when used with wlan.addr.
  * sshdump fails to connect with private key (ssh-rsa)
  * ChmodBPF installation fails on macOS Sonoma 14.1.2.
  * Windows installers should check for Windows 8.1.
  * Fuzz job crash output: fuzz-2024-01-05-7725.pcap.
  * Fuzz job crash output: fuzz-2024-01-06-7734.pcap.
  * Incorrect recursion depth assert failure when dissecting a legitimate GOOSE message.
  * OPC UA - large read request is reported as malformed in 4.2.1 but not in 4.0.12.
  * TFTP dissector bug type listed as netscii instead of netascii doesn’t show all TFTP packets including TFTP blocks.
  * SMB1 replies from LAN Drive app only show up as NBSS Continuation Message.
  * ciscodump - older SSH key exchange algorithms not supported.
  * Problem decoding LAPB/X.25/FTAM after adding X.75 decoding.
  * Wireshark Filter not working.
  * CFLOW: failure to decode 0 length data fields of
  * Copy ...as Printable Text Feature Missing in 4.1/4.2.
  * Export Objects - HTTP is missing some HTTP/2 files in a two-pass analysis.
  * ASAM-CMP Plugin: Malformed message, length mismatch if vendor defined data of status messages has odd length.
  * OSS-Fuzz 66561: wireshark:fuzzshark_ip_proto-udp: Null-dereference READ in wmem_map_lookup.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1711627200">- Wireshark 4.2.4:
  * CVE-2024-2955: T.38 dissector crash (boo#1222030).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.4.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1715774400">- Wireshark 4.2.5:
  * CVE-2024-4854: MONGO and ZigBee TLV dissector infinite loops
    (wnpa-sec-2024-07 boo#1224274)
  * CVE-2024-4853: The editcap command line utility could crash
    when chopping bytes from the beginning of a packet
    (wnpa-sec-2024-08 boo#1224259)
  * CVE-2024-4855: The editcap command line utility could crash
    when injecting secrets while writing multiple files
    (wnpa-sec-2024-09 boo#1224276)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.5.html</changelog>
  <changelog author="info@ebner-markus.de" date="1718798400">- Fix Wireshark Super User Mode starter</changelog>
  <changelog author="rfrohl@suse.com" date="1720612800">- Wireshark 4.2.6 (jsc#PED-8517):
  * CVE-2024-8645: SPRT dissector crash (boo#1230372).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1724932800">- Wireshark 4.2.7:
  * CVE-2024-8250: NTLMSSP dissector crash (boo#1229907).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.7.html</changelog>
  <changelog author="rfrohl@suse.com" date="1728561600">- Wireshark 4.2.8:
  * CVE-2024-9781: AppleTalk and RELOAD Framing dissector crashes (bsc#1231476).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.8.html</changelog>
  <changelog author="rfrohl@suse.com" date="1732536000">- Wireshark 4.2.9:
  * CVE-2024-11595: FiveCo RAP dissector infinite loop (bsc#1233594).
  * CVE-2024-11596: ECMP dissector crash (bsc#1233593).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.9.html</changelog>
  <changelog author="rfrohl@suse.com" date="1740398400">- Wireshark 4.2.11:
  * CVE-2025-1492: Bundle Protocol and CBOR dissector crash (bsc#1237414).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.11.html</changelog>
  <changelog author="rfrohl@suse.com" date="1749124800">- Wireshark 4.2.12:
  * CVE-2025-5601: Dissection engine crash (bsc#1244081).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.12.html</changelog>
  <changelog author="rfrohl@suse.com" date="1756987200">- CVE-2025-9817: SSH dissector crash (bsc#1249090).
  adding wireshark-0011-CVE-2025-9817.patch
- Wireshark 4.2.13:
  * Bug in UDS dissector with Service ReadDataByPeriodicIdentifier Response
  * application/x-www-form-urlencoded key parsed incorrectly following a name-value byte sequence with no '='
  * DNP3 time stamp was unable to work after epoch time (year 2038)
  * Bug in LZ77 decoder; reads a 16-bit length when it should read a 32-bit length
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.13.html</changelog>
  <changelog author="rfrohl@suse.com" date="1760529600">- Wireshark 4.2.14:
  * CVE-2025-11626: MONGO dissector infinite loop (bsc#1251933).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.14.html</changelog>
  <changelog author="rfrohl@suse.com" date="1765195200">- CVE-2025-13499: Kafka dissector crash (bsc#1254108).
  adding wireshark-0012-CVE-2025-13499.patch
- CVE-2025-13946: MEGACO dissector infinite loop (bsc#1254472).
  adding wireshark-0013-CVE-2025-13946.patch</changelog>
</package>
<package pkgid="9fb3b4ebc51a60b87b4ef122a866b1ab0e9d3e259749c5eca5f218ee94746ff0" name="libwireshark17" arch="x86_64">
  <version epoch="0" ver="4.2.14" rel="150600.18.35.1"/>
  <changelog author="rfrohl@suse.com" date="1700827200">- Wireshark 4.2.0:
  * CVE-2024-24476: Fixed buffer overflow in ws_manuf_lookup_str() (boo#1220181).
  * CVE-2022-3725: Fixed integer overflow in the OPUS dissector (boo#1204822).
  * Packet list sorting has been improved.
  * Wireshark and TShark are now better about generating valid UTF-8 output.
  * A new display filter feature for filtering raw bytes has been added.
  * Display filter autocomplete is smarter about not suggesting invalid syntax.
  * Tools › MAC Address Blocks can lookup a MAC address in the IEEE OUI registry.
  * The installation target no longer installs development headers by default.
  * The Wireshark installation is relocatable on Linux (and other ELF platforms with support for relative RPATHs).
  * Tools › Browser (SSL Keylog) can launch your web browser with the SSLKEYLOGFILE environment variable set to the appropriate value.
  * Wireshark now supports the Korean language.
  * Many other improvements have been made. See the “New and Updated Features” section below for more details.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.0.html
- Updated patches
  wireshark-0000-wsutil-implicit_declaration_memcpy.patch
  wireshark-0010-dumpcap-permission-denied.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701259200">- Install SDK using cmake --install --component Development instead
  of manually copying. This brings back the .pc file and simplifies
  the spec file.</changelog>
  <changelog author="rfrohl@suse.com" date="1704369600">- Wireshark 4.2.1:
  * CVE-2024-0207: HTTP3 dissector crash (boo#1218503).
  * CVE-2024-0208: GVCP dissector crash (boo#1218504).
  * CVE-2024-0209: IEEE 1609.2 dissector crash (boo#1218505).
  * CVE-2024-0210: Zigbee TLV dissector crash (boo#1218506).
  * CVE-2024-0211: DOCSIS dissector crash (boo#1218507).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1704456000">- Wireshark 4.2.2:
  * minor bug fix release
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.2.html</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- handle different CMAKE_INSTALL_DOCDIR setting between
  tumbleweed and leap</changelog>
  <changelog author="dmueller@suse.com" date="1707739200">- handle one more mismatch in docdir handling</changelog>
  <changelog author="rfrohl@suse.com" date="1707998400">- Wireshark 4.2.3:
  * Capture start fails when file set enabled and file extension not supplied if directory contains a period.
  * Cannot drag and move custom filter buttons in toolbar.
  * Not equal won’t work when used with wlan.addr.
  * sshdump fails to connect with private key (ssh-rsa)
  * ChmodBPF installation fails on macOS Sonoma 14.1.2.
  * Windows installers should check for Windows 8.1.
  * Fuzz job crash output: fuzz-2024-01-05-7725.pcap.
  * Fuzz job crash output: fuzz-2024-01-06-7734.pcap.
  * Incorrect recursion depth assert failure when dissecting a legitimate GOOSE message.
  * OPC UA - large read request is reported as malformed in 4.2.1 but not in 4.0.12.
  * TFTP dissector bug type listed as netscii instead of netascii doesn’t show all TFTP packets including TFTP blocks.
  * SMB1 replies from LAN Drive app only show up as NBSS Continuation Message.
  * ciscodump - older SSH key exchange algorithms not supported.
  * Problem decoding LAPB/X.25/FTAM after adding X.75 decoding.
  * Wireshark Filter not working.
  * CFLOW: failure to decode 0 length data fields of
  * Copy ...as Printable Text Feature Missing in 4.1/4.2.
  * Export Objects - HTTP is missing some HTTP/2 files in a two-pass analysis.
  * ASAM-CMP Plugin: Malformed message, length mismatch if vendor defined data of status messages has odd length.
  * OSS-Fuzz 66561: wireshark:fuzzshark_ip_proto-udp: Null-dereference READ in wmem_map_lookup.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1711627200">- Wireshark 4.2.4:
  * CVE-2024-2955: T.38 dissector crash (boo#1222030).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.4.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1715774400">- Wireshark 4.2.5:
  * CVE-2024-4854: MONGO and ZigBee TLV dissector infinite loops
    (wnpa-sec-2024-07 boo#1224274)
  * CVE-2024-4853: The editcap command line utility could crash
    when chopping bytes from the beginning of a packet
    (wnpa-sec-2024-08 boo#1224259)
  * CVE-2024-4855: The editcap command line utility could crash
    when injecting secrets while writing multiple files
    (wnpa-sec-2024-09 boo#1224276)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.5.html</changelog>
  <changelog author="info@ebner-markus.de" date="1718798400">- Fix Wireshark Super User Mode starter</changelog>
  <changelog author="rfrohl@suse.com" date="1720612800">- Wireshark 4.2.6 (jsc#PED-8517):
  * CVE-2024-8645: SPRT dissector crash (boo#1230372).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1724932800">- Wireshark 4.2.7:
  * CVE-2024-8250: NTLMSSP dissector crash (boo#1229907).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.7.html</changelog>
  <changelog author="rfrohl@suse.com" date="1728561600">- Wireshark 4.2.8:
  * CVE-2024-9781: AppleTalk and RELOAD Framing dissector crashes (bsc#1231476).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.8.html</changelog>
  <changelog author="rfrohl@suse.com" date="1732536000">- Wireshark 4.2.9:
  * CVE-2024-11595: FiveCo RAP dissector infinite loop (bsc#1233594).
  * CVE-2024-11596: ECMP dissector crash (bsc#1233593).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.9.html</changelog>
  <changelog author="rfrohl@suse.com" date="1740398400">- Wireshark 4.2.11:
  * CVE-2025-1492: Bundle Protocol and CBOR dissector crash (bsc#1237414).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.11.html</changelog>
  <changelog author="rfrohl@suse.com" date="1749124800">- Wireshark 4.2.12:
  * CVE-2025-5601: Dissection engine crash (bsc#1244081).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.12.html</changelog>
  <changelog author="rfrohl@suse.com" date="1756987200">- CVE-2025-9817: SSH dissector crash (bsc#1249090).
  adding wireshark-0011-CVE-2025-9817.patch
- Wireshark 4.2.13:
  * Bug in UDS dissector with Service ReadDataByPeriodicIdentifier Response
  * application/x-www-form-urlencoded key parsed incorrectly following a name-value byte sequence with no '='
  * DNP3 time stamp was unable to work after epoch time (year 2038)
  * Bug in LZ77 decoder; reads a 16-bit length when it should read a 32-bit length
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.13.html</changelog>
  <changelog author="rfrohl@suse.com" date="1760529600">- Wireshark 4.2.14:
  * CVE-2025-11626: MONGO dissector infinite loop (bsc#1251933).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.14.html</changelog>
  <changelog author="rfrohl@suse.com" date="1765195200">- CVE-2025-13499: Kafka dissector crash (bsc#1254108).
  adding wireshark-0012-CVE-2025-13499.patch
- CVE-2025-13946: MEGACO dissector infinite loop (bsc#1254472).
  adding wireshark-0013-CVE-2025-13946.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1768564800">- CVE-2026-0959: IEEE 802.11 dissector crash (bsc#1256734).
  adding wireshark-0014-CVE-2026-0959.patch
- CVE-2026-0960: HTTP3 dissector infinite loop (bsc#1256736).
  adding wireshark-0015-CVE-2026-0960.patch
- CVE-2026-0962: SOME/IP-SD dissector crash (bsc#1256739).
  adding wireshark-0016-CVE-2026-0962.patch</changelog>
</package>
<package pkgid="9b53b186b49e3f26fa13e5ec30dee0413917b48767cc0cd1eef1ba8016da1f5b" name="libwireshark19" arch="x86_64">
  <version epoch="0" ver="4.6.4" rel="150700.21.8.1"/>
  <changelog author="rfrohl@suse.com" date="1724932800">- Wireshark 4.2.7:
  * CVE-2024-8250: NTLMSSP dissector crash (boo#1229907).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.7.html</changelog>
  <changelog author="rfrohl@suse.com" date="1725019200">- Wireshark 4.4.0
  * Many improvements and fixes to the graphing dialogs, including I/O Graphs,
    Flow Graph / VoIP Calls, and TCP Stream Graphs
  * Custom columns can be defined using any valid field expression, such as
    display filter functions, packet slices, arithmetic calculations, logical
    tests, raw byte addressing, and protocol layer modifiers
  * Wireshark now supports automatic profile switching. You can associate a
    display filter with a configuration profile, and when you open a capture
    file that matches the filter, Wireshark will automatically switch to that
    profile.
  * Improved display filter support for value strings (optional string
    representations for numeric fields).
- Many more features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.4.0.html
- drop wireshark-0000-wsutil-implicit_declaration_memcpy.patch: included upstream
- update wireshark-0010-dumpcap-permission-denied.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1728561600">- Wireshark 4.4.1
  * CVE-2024-9780: ITS dissector crash (boo#1231475).
  * CVE-2024-9781: AppleTalk and RELOAD Framing dissector crashes (boo#1231476).
- Many more features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.4.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1732190400">- Wireshark 4.4.2
  * CVE-2024-11595: FiveCo RAP dissector infinite loop (boo#1233594).
  * CVE-2024-11596: ECMP dissector crash (boo#1233593).
- Many more features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.4.2.html</changelog>
  <changelog author="opensuse-738561@jspam.de" date="1735387200">- Update Lua from 5.1 to 5.4</changelog>
  <changelog author="rfrohl@suse.com" date="1736424000">- Wireshark 4.4.3
  * Potential mis-match in GSM MAP dissector for uncertainty radius and its
    filter key
  * The NFSv2 Dissector appears to be swapping Character Special File and
    Directory in mode decoding
  * VOIP Calls call flow displaying hours
- Many more features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.4.3.html
- move to default system Lua, instead of using explicit version</changelog>
  <changelog author="rfrohl@suse.com" date="1738065600">- Default to building with qt6</changelog>
  <changelog author="ecsos@opensuse.org" date="1738670400">- Fix build error for Leap.</changelog>
  <changelog author="rfrohl@suse.com" date="1739966400">- Wireshark 4.4.4
  * CVE-2025-1492: Bundle Protocol and CBOR dissector crash (boo#1237414).
- Many more features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.4.4.html</changelog>
  <changelog author="rfrohl@suse.com" date="1740398400">- Wireshark 4.4.5
  * GRPC: protobuf_json only displays the truncated string value.
  * Wireshark crashes when clicking on a column title/header.
- Many more features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.4.5.html</changelog>
  <changelog author="rfrohl@suse.com" date="1744804800">- Wireshark 4.4.6
  * Bug in EtherCAT dissector with ECS order.
  * QUIC dissector breaks when src and dst change.
  * Trailing octet after IPv4 packet end is not detected or displayed in raw bytes.
- Many more features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.4.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1749124800">- Wireshark 4.4.7
  * CVE-2025-5601: Dissection engine crash (boo#1244081).
- Many more features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.4.7.html</changelog>
  <changelog author="rfrohl@suse.com" date="1752667200">- Wireshark 4.4.8
  * Renegotiated DTLS session is not being decrypted.
  * Wireshark is completely stuck in initialization because androiddump recv()
    is blocked.
  * Fuzz job UTF-8 encoding issue: fuzz-2025-06-20-7318.pcap.
  * Crash when showing packet in new window after reloading Lua plugins with a
    certain gui.column.format preference.
- Many more features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.4.8.html</changelog>
  <changelog author="rfrohl@suse.com" date="1756814400">- Wireshark 4.4.9
  * CVE-2025-9817: SSH dissector crash (bsc#1249090).
- Many more features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.4.9.html</changelog>
  <changelog author="rfrohl@suse.com" date="1760011200">- Wireshark 4.4.10
  * CVE-2025-11626: MONGO dissector infinite loop (bsc#1251933).
- Many more features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.4.10.html</changelog>
  <changelog author="rfrohl@suse.com" date="1760529600">- Wireshark 4.6.0 (jsc#PED-15400)
  * There are new features, bug fixes and updated protocol
    support. For an exhaustive list please refer to:
    https://www.wireshark.org/docs/relnotes/wireshark-4.6.0.html
- dropped wireshark-0010-dumpcap-permission-denied.patch:
  functionality not needed anymore, provided natively by the project.
- Dropping upstreamed patches:
  wireshark-0011-CVE-2025-9817.patch wireshark-0012-CVE-2025-13499.patch
  wireshark-0013-CVE-2025-13946.patch wireshark-0014-CVE-2026-0959.patch
  wireshark-0015-CVE-2026-0960.patch wireshark-0016-CVE-2026-0962.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1763985600">- Wireshark 4.6.1
  * CVE-2025-13674: BPv7 dissector crash (bsc#1254262).
  * CVE-2025-13499: Kafka dissector crash (bsc#1254108).
- Many more features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.6.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1764763200">- Wireshark 4.6.2
  * CVE-2025-13945: HTTP3 dissector crash (bsc#1254471).
  * CVE-2025-13946: MEGACO dissector infinite loop (bsc#1254472).
- Many more features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.6.2.html</changelog>
  <changelog author="rfrohl@suse.com" date="1768478400">- Wireshark 4.6.3
  * CVE-2026-0961: BLF file parser crash (bsc#1256738).
  * CVE-2026-0959: IEEE 802.11 dissector crash (bsc#1256734).
  * CVE-2026-0962: SOME/IP-SD dissector crash (bsc#1256739).
  * CVE-2026-0960: HTTP3 dissector infinite loop (bsc#1256736).
- Many more features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.6.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1768564800">- Wireshark 4.6.4
  * CVE-2026-3201: USB HID dissector memory exhaustion (bsc#1258907).
  * CVE-2026-3202: NTS-KE dissector crash (bsc#1258908).
  * CVE-2026-3203: RF4CE Profile dissector crash (bsc#1258909).
- Many more features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.6.4.html</changelog>
</package>
<package pkgid="de97b3aedaa87c83474b63878fc7d4cfbc0341bc9f3310441758c2c880f56bd6" name="libwiretap14" arch="x86_64">
  <version epoch="0" ver="4.2.12" rel="150600.18.23.1"/>
  <changelog author="rfrohl@suse.com" date="1689249600">- Wireshark 4.0.7:
  * CVE-2023-3648: Kafka dissector crash (boo#1213319).
  * CVE-2023-3649: iSCSI dissector crash (boo#1213318).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.0.7.html</changelog>
  <changelog author="rfrohl@suse.com" date="1692792000">- Wireshark 4.0.8:
  * CVE-2023-4512: CBOR dissector crash (boo#1214561).
  * CVE-2023-4511: BT SDP dissector infinite loop (boo#1214560).
  * CVE-2023-4513: BT SDP dissector memory leak (boo#1214562).
  * CVE-2023-2906: CP2179 dissector crash (boo#1214652).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.0.8.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1696507200">- Wireshark 4.0.10:
  * CVE-2023-5371: RTPS dissector memory leak (wnpa-sec-2023-27, boo#1215959)
  * Fix a number of bugs in protocol parsers, including:
  * RTP/RFC 4571: Wrong desegmentation/reassembly in RTP over TCP packets
  * Incorrect bit values and namings in BSS Configuration Report TLV
  * Wireshark 4.0.9 contained a bug affecting other platforms</changelog>
  <changelog author="rfrohl@suse.com" date="1700136000">- Wireshark 4.0.11:
  * CVE-2023-6174: SSH dissector crash (boo#1217247).
  * CVE-2023-6175: NetScreen file parser crash (boo#1217272).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.0.11.html</changelog>
  <changelog author="rfrohl@suse.com" date="1700827200">- Wireshark 4.2.0:
  * CVE-2024-24476: Fixed buffer overflow in ws_manuf_lookup_str() (boo#1220181).
  * CVE-2022-3725: Fixed integer overflow in the OPUS dissector (boo#1204822).
  * Packet list sorting has been improved.
  * Wireshark and TShark are now better about generating valid UTF-8 output.
  * A new display filter feature for filtering raw bytes has been added.
  * Display filter autocomplete is smarter about not suggesting invalid syntax.
  * Tools › MAC Address Blocks can lookup a MAC address in the IEEE OUI registry.
  * The installation target no longer installs development headers by default.
  * The Wireshark installation is relocatable on Linux (and other ELF platforms with support for relative RPATHs).
  * Tools › Browser (SSL Keylog) can launch your web browser with the SSLKEYLOGFILE environment variable set to the appropriate value.
  * Wireshark now supports the Korean language.
  * Many other improvements have been made. See the “New and Updated Features” section below for more details.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.0.html
- Updated patches
  wireshark-0000-wsutil-implicit_declaration_memcpy.patch
  wireshark-0010-dumpcap-permission-denied.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701259200">- Install SDK using cmake --install --component Development instead
  of manually copying. This brings back the .pc file and simplifies
  the spec file.</changelog>
  <changelog author="rfrohl@suse.com" date="1704369600">- Wireshark 4.2.1:
  * CVE-2024-0207: HTTP3 dissector crash (boo#1218503).
  * CVE-2024-0208: GVCP dissector crash (boo#1218504).
  * CVE-2024-0209: IEEE 1609.2 dissector crash (boo#1218505).
  * CVE-2024-0210: Zigbee TLV dissector crash (boo#1218506).
  * CVE-2024-0211: DOCSIS dissector crash (boo#1218507).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1704456000">- Wireshark 4.2.2:
  * minor bug fix release
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.2.html</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- handle different CMAKE_INSTALL_DOCDIR setting between
  tumbleweed and leap</changelog>
  <changelog author="dmueller@suse.com" date="1707739200">- handle one more mismatch in docdir handling</changelog>
  <changelog author="rfrohl@suse.com" date="1707998400">- Wireshark 4.2.3:
  * Capture start fails when file set enabled and file extension not supplied if directory contains a period.
  * Cannot drag and move custom filter buttons in toolbar.
  * Not equal won’t work when used with wlan.addr.
  * sshdump fails to connect with private key (ssh-rsa)
  * ChmodBPF installation fails on macOS Sonoma 14.1.2.
  * Windows installers should check for Windows 8.1.
  * Fuzz job crash output: fuzz-2024-01-05-7725.pcap.
  * Fuzz job crash output: fuzz-2024-01-06-7734.pcap.
  * Incorrect recursion depth assert failure when dissecting a legitimate GOOSE message.
  * OPC UA - large read request is reported as malformed in 4.2.1 but not in 4.0.12.
  * TFTP dissector bug type listed as netscii instead of netascii doesn’t show all TFTP packets including TFTP blocks.
  * SMB1 replies from LAN Drive app only show up as NBSS Continuation Message.
  * ciscodump - older SSH key exchange algorithms not supported.
  * Problem decoding LAPB/X.25/FTAM after adding X.75 decoding.
  * Wireshark Filter not working.
  * CFLOW: failure to decode 0 length data fields of
  * Copy ...as Printable Text Feature Missing in 4.1/4.2.
  * Export Objects - HTTP is missing some HTTP/2 files in a two-pass analysis.
  * ASAM-CMP Plugin: Malformed message, length mismatch if vendor defined data of status messages has odd length.
  * OSS-Fuzz 66561: wireshark:fuzzshark_ip_proto-udp: Null-dereference READ in wmem_map_lookup.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1711627200">- Wireshark 4.2.4:
  * CVE-2024-2955: T.38 dissector crash (boo#1222030).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.4.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1715774400">- Wireshark 4.2.5:
  * CVE-2024-4854: MONGO and ZigBee TLV dissector infinite loops
    (wnpa-sec-2024-07 boo#1224274)
  * CVE-2024-4853: The editcap command line utility could crash
    when chopping bytes from the beginning of a packet
    (wnpa-sec-2024-08 boo#1224259)
  * CVE-2024-4855: The editcap command line utility could crash
    when injecting secrets while writing multiple files
    (wnpa-sec-2024-09 boo#1224276)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.5.html</changelog>
  <changelog author="info@ebner-markus.de" date="1718798400">- Fix Wireshark Super User Mode starter</changelog>
  <changelog author="rfrohl@suse.com" date="1720612800">- Wireshark 4.2.6 (jsc#PED-8517):
  * CVE-2024-8645: SPRT dissector crash (boo#1230372).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1724932800">- Wireshark 4.2.7:
  * CVE-2024-8250: NTLMSSP dissector crash (boo#1229907).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.7.html</changelog>
  <changelog author="rfrohl@suse.com" date="1728561600">- Wireshark 4.2.8:
  * CVE-2024-9781: AppleTalk and RELOAD Framing dissector crashes (bsc#1231476).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.8.html</changelog>
  <changelog author="rfrohl@suse.com" date="1732536000">- Wireshark 4.2.9:
  * CVE-2024-11595: FiveCo RAP dissector infinite loop (bsc#1233594).
  * CVE-2024-11596: ECMP dissector crash (bsc#1233593).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.9.html</changelog>
  <changelog author="rfrohl@suse.com" date="1740398400">- Wireshark 4.2.11:
  * CVE-2025-1492: Bundle Protocol and CBOR dissector crash (bsc#1237414).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.11.html</changelog>
  <changelog author="rfrohl@suse.com" date="1749124800">- Wireshark 4.2.12:
  * CVE-2025-5601: Dissection engine crash (bsc#1244081).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.12.html</changelog>
</package>
<package pkgid="446669fa399ba7ceccfd2180395b85f8050243f095e048e555d96eca1acdf63f" name="libwiretap14" arch="x86_64">
  <version epoch="0" ver="4.2.13" rel="150600.18.26.1"/>
  <changelog author="rfrohl@suse.com" date="1692792000">- Wireshark 4.0.8:
  * CVE-2023-4512: CBOR dissector crash (boo#1214561).
  * CVE-2023-4511: BT SDP dissector infinite loop (boo#1214560).
  * CVE-2023-4513: BT SDP dissector memory leak (boo#1214562).
  * CVE-2023-2906: CP2179 dissector crash (boo#1214652).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.0.8.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1696507200">- Wireshark 4.0.10:
  * CVE-2023-5371: RTPS dissector memory leak (wnpa-sec-2023-27, boo#1215959)
  * Fix a number of bugs in protocol parsers, including:
  * RTP/RFC 4571: Wrong desegmentation/reassembly in RTP over TCP packets
  * Incorrect bit values and namings in BSS Configuration Report TLV
  * Wireshark 4.0.9 contained a bug affecting other platforms</changelog>
  <changelog author="rfrohl@suse.com" date="1700136000">- Wireshark 4.0.11:
  * CVE-2023-6174: SSH dissector crash (boo#1217247).
  * CVE-2023-6175: NetScreen file parser crash (boo#1217272).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.0.11.html</changelog>
  <changelog author="rfrohl@suse.com" date="1700827200">- Wireshark 4.2.0:
  * CVE-2024-24476: Fixed buffer overflow in ws_manuf_lookup_str() (boo#1220181).
  * CVE-2022-3725: Fixed integer overflow in the OPUS dissector (boo#1204822).
  * Packet list sorting has been improved.
  * Wireshark and TShark are now better about generating valid UTF-8 output.
  * A new display filter feature for filtering raw bytes has been added.
  * Display filter autocomplete is smarter about not suggesting invalid syntax.
  * Tools › MAC Address Blocks can lookup a MAC address in the IEEE OUI registry.
  * The installation target no longer installs development headers by default.
  * The Wireshark installation is relocatable on Linux (and other ELF platforms with support for relative RPATHs).
  * Tools › Browser (SSL Keylog) can launch your web browser with the SSLKEYLOGFILE environment variable set to the appropriate value.
  * Wireshark now supports the Korean language.
  * Many other improvements have been made. See the “New and Updated Features” section below for more details.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.0.html
- Updated patches
  wireshark-0000-wsutil-implicit_declaration_memcpy.patch
  wireshark-0010-dumpcap-permission-denied.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701259200">- Install SDK using cmake --install --component Development instead
  of manually copying. This brings back the .pc file and simplifies
  the spec file.</changelog>
  <changelog author="rfrohl@suse.com" date="1704369600">- Wireshark 4.2.1:
  * CVE-2024-0207: HTTP3 dissector crash (boo#1218503).
  * CVE-2024-0208: GVCP dissector crash (boo#1218504).
  * CVE-2024-0209: IEEE 1609.2 dissector crash (boo#1218505).
  * CVE-2024-0210: Zigbee TLV dissector crash (boo#1218506).
  * CVE-2024-0211: DOCSIS dissector crash (boo#1218507).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1704456000">- Wireshark 4.2.2:
  * minor bug fix release
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.2.html</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- handle different CMAKE_INSTALL_DOCDIR setting between
  tumbleweed and leap</changelog>
  <changelog author="dmueller@suse.com" date="1707739200">- handle one more mismatch in docdir handling</changelog>
  <changelog author="rfrohl@suse.com" date="1707998400">- Wireshark 4.2.3:
  * Capture start fails when file set enabled and file extension not supplied if directory contains a period.
  * Cannot drag and move custom filter buttons in toolbar.
  * Not equal won’t work when used with wlan.addr.
  * sshdump fails to connect with private key (ssh-rsa)
  * ChmodBPF installation fails on macOS Sonoma 14.1.2.
  * Windows installers should check for Windows 8.1.
  * Fuzz job crash output: fuzz-2024-01-05-7725.pcap.
  * Fuzz job crash output: fuzz-2024-01-06-7734.pcap.
  * Incorrect recursion depth assert failure when dissecting a legitimate GOOSE message.
  * OPC UA - large read request is reported as malformed in 4.2.1 but not in 4.0.12.
  * TFTP dissector bug type listed as netscii instead of netascii doesn’t show all TFTP packets including TFTP blocks.
  * SMB1 replies from LAN Drive app only show up as NBSS Continuation Message.
  * ciscodump - older SSH key exchange algorithms not supported.
  * Problem decoding LAPB/X.25/FTAM after adding X.75 decoding.
  * Wireshark Filter not working.
  * CFLOW: failure to decode 0 length data fields of
  * Copy ...as Printable Text Feature Missing in 4.1/4.2.
  * Export Objects - HTTP is missing some HTTP/2 files in a two-pass analysis.
  * ASAM-CMP Plugin: Malformed message, length mismatch if vendor defined data of status messages has odd length.
  * OSS-Fuzz 66561: wireshark:fuzzshark_ip_proto-udp: Null-dereference READ in wmem_map_lookup.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1711627200">- Wireshark 4.2.4:
  * CVE-2024-2955: T.38 dissector crash (boo#1222030).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.4.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1715774400">- Wireshark 4.2.5:
  * CVE-2024-4854: MONGO and ZigBee TLV dissector infinite loops
    (wnpa-sec-2024-07 boo#1224274)
  * CVE-2024-4853: The editcap command line utility could crash
    when chopping bytes from the beginning of a packet
    (wnpa-sec-2024-08 boo#1224259)
  * CVE-2024-4855: The editcap command line utility could crash
    when injecting secrets while writing multiple files
    (wnpa-sec-2024-09 boo#1224276)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.5.html</changelog>
  <changelog author="info@ebner-markus.de" date="1718798400">- Fix Wireshark Super User Mode starter</changelog>
  <changelog author="rfrohl@suse.com" date="1720612800">- Wireshark 4.2.6 (jsc#PED-8517):
  * CVE-2024-8645: SPRT dissector crash (boo#1230372).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1724932800">- Wireshark 4.2.7:
  * CVE-2024-8250: NTLMSSP dissector crash (boo#1229907).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.7.html</changelog>
  <changelog author="rfrohl@suse.com" date="1728561600">- Wireshark 4.2.8:
  * CVE-2024-9781: AppleTalk and RELOAD Framing dissector crashes (bsc#1231476).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.8.html</changelog>
  <changelog author="rfrohl@suse.com" date="1732536000">- Wireshark 4.2.9:
  * CVE-2024-11595: FiveCo RAP dissector infinite loop (bsc#1233594).
  * CVE-2024-11596: ECMP dissector crash (bsc#1233593).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.9.html</changelog>
  <changelog author="rfrohl@suse.com" date="1740398400">- Wireshark 4.2.11:
  * CVE-2025-1492: Bundle Protocol and CBOR dissector crash (bsc#1237414).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.11.html</changelog>
  <changelog author="rfrohl@suse.com" date="1749124800">- Wireshark 4.2.12:
  * CVE-2025-5601: Dissection engine crash (bsc#1244081).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.12.html</changelog>
  <changelog author="rfrohl@suse.com" date="1756987200">- CVE-2025-9817: SSH dissector crash (bsc#1249090).
  adding wireshark-0011-CVE-2025-9817.patch
- Wireshark 4.2.13:
  * Bug in UDS dissector with Service ReadDataByPeriodicIdentifier Response
  * application/x-www-form-urlencoded key parsed incorrectly following a name-value byte sequence with no '='
  * DNP3 time stamp was unable to work after epoch time (year 2038)
  * Bug in LZ77 decoder; reads a 16-bit length when it should read a 32-bit length
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.13.html</changelog>
</package>
<package pkgid="40997c978234269c9a9b88d294a36e72f17c7bd9bee6c3e9ede80189a17f215e" name="libwiretap14" arch="x86_64">
  <version epoch="0" ver="4.2.14" rel="150600.18.29.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1696507200">- Wireshark 4.0.10:
  * CVE-2023-5371: RTPS dissector memory leak (wnpa-sec-2023-27, boo#1215959)
  * Fix a number of bugs in protocol parsers, including:
  * RTP/RFC 4571: Wrong desegmentation/reassembly in RTP over TCP packets
  * Incorrect bit values and namings in BSS Configuration Report TLV
  * Wireshark 4.0.9 contained a bug affecting other platforms</changelog>
  <changelog author="rfrohl@suse.com" date="1700136000">- Wireshark 4.0.11:
  * CVE-2023-6174: SSH dissector crash (boo#1217247).
  * CVE-2023-6175: NetScreen file parser crash (boo#1217272).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.0.11.html</changelog>
  <changelog author="rfrohl@suse.com" date="1700827200">- Wireshark 4.2.0:
  * CVE-2024-24476: Fixed buffer overflow in ws_manuf_lookup_str() (boo#1220181).
  * CVE-2022-3725: Fixed integer overflow in the OPUS dissector (boo#1204822).
  * Packet list sorting has been improved.
  * Wireshark and TShark are now better about generating valid UTF-8 output.
  * A new display filter feature for filtering raw bytes has been added.
  * Display filter autocomplete is smarter about not suggesting invalid syntax.
  * Tools › MAC Address Blocks can lookup a MAC address in the IEEE OUI registry.
  * The installation target no longer installs development headers by default.
  * The Wireshark installation is relocatable on Linux (and other ELF platforms with support for relative RPATHs).
  * Tools › Browser (SSL Keylog) can launch your web browser with the SSLKEYLOGFILE environment variable set to the appropriate value.
  * Wireshark now supports the Korean language.
  * Many other improvements have been made. See the “New and Updated Features” section below for more details.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.0.html
- Updated patches
  wireshark-0000-wsutil-implicit_declaration_memcpy.patch
  wireshark-0010-dumpcap-permission-denied.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701259200">- Install SDK using cmake --install --component Development instead
  of manually copying. This brings back the .pc file and simplifies
  the spec file.</changelog>
  <changelog author="rfrohl@suse.com" date="1704369600">- Wireshark 4.2.1:
  * CVE-2024-0207: HTTP3 dissector crash (boo#1218503).
  * CVE-2024-0208: GVCP dissector crash (boo#1218504).
  * CVE-2024-0209: IEEE 1609.2 dissector crash (boo#1218505).
  * CVE-2024-0210: Zigbee TLV dissector crash (boo#1218506).
  * CVE-2024-0211: DOCSIS dissector crash (boo#1218507).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1704456000">- Wireshark 4.2.2:
  * minor bug fix release
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.2.html</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- handle different CMAKE_INSTALL_DOCDIR setting between
  tumbleweed and leap</changelog>
  <changelog author="dmueller@suse.com" date="1707739200">- handle one more mismatch in docdir handling</changelog>
  <changelog author="rfrohl@suse.com" date="1707998400">- Wireshark 4.2.3:
  * Capture start fails when file set enabled and file extension not supplied if directory contains a period.
  * Cannot drag and move custom filter buttons in toolbar.
  * Not equal won’t work when used with wlan.addr.
  * sshdump fails to connect with private key (ssh-rsa)
  * ChmodBPF installation fails on macOS Sonoma 14.1.2.
  * Windows installers should check for Windows 8.1.
  * Fuzz job crash output: fuzz-2024-01-05-7725.pcap.
  * Fuzz job crash output: fuzz-2024-01-06-7734.pcap.
  * Incorrect recursion depth assert failure when dissecting a legitimate GOOSE message.
  * OPC UA - large read request is reported as malformed in 4.2.1 but not in 4.0.12.
  * TFTP dissector bug type listed as netscii instead of netascii doesn’t show all TFTP packets including TFTP blocks.
  * SMB1 replies from LAN Drive app only show up as NBSS Continuation Message.
  * ciscodump - older SSH key exchange algorithms not supported.
  * Problem decoding LAPB/X.25/FTAM after adding X.75 decoding.
  * Wireshark Filter not working.
  * CFLOW: failure to decode 0 length data fields of
  * Copy ...as Printable Text Feature Missing in 4.1/4.2.
  * Export Objects - HTTP is missing some HTTP/2 files in a two-pass analysis.
  * ASAM-CMP Plugin: Malformed message, length mismatch if vendor defined data of status messages has odd length.
  * OSS-Fuzz 66561: wireshark:fuzzshark_ip_proto-udp: Null-dereference READ in wmem_map_lookup.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1711627200">- Wireshark 4.2.4:
  * CVE-2024-2955: T.38 dissector crash (boo#1222030).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.4.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1715774400">- Wireshark 4.2.5:
  * CVE-2024-4854: MONGO and ZigBee TLV dissector infinite loops
    (wnpa-sec-2024-07 boo#1224274)
  * CVE-2024-4853: The editcap command line utility could crash
    when chopping bytes from the beginning of a packet
    (wnpa-sec-2024-08 boo#1224259)
  * CVE-2024-4855: The editcap command line utility could crash
    when injecting secrets while writing multiple files
    (wnpa-sec-2024-09 boo#1224276)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.5.html</changelog>
  <changelog author="info@ebner-markus.de" date="1718798400">- Fix Wireshark Super User Mode starter</changelog>
  <changelog author="rfrohl@suse.com" date="1720612800">- Wireshark 4.2.6 (jsc#PED-8517):
  * CVE-2024-8645: SPRT dissector crash (boo#1230372).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1724932800">- Wireshark 4.2.7:
  * CVE-2024-8250: NTLMSSP dissector crash (boo#1229907).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.7.html</changelog>
  <changelog author="rfrohl@suse.com" date="1728561600">- Wireshark 4.2.8:
  * CVE-2024-9781: AppleTalk and RELOAD Framing dissector crashes (bsc#1231476).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.8.html</changelog>
  <changelog author="rfrohl@suse.com" date="1732536000">- Wireshark 4.2.9:
  * CVE-2024-11595: FiveCo RAP dissector infinite loop (bsc#1233594).
  * CVE-2024-11596: ECMP dissector crash (bsc#1233593).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.9.html</changelog>
  <changelog author="rfrohl@suse.com" date="1740398400">- Wireshark 4.2.11:
  * CVE-2025-1492: Bundle Protocol and CBOR dissector crash (bsc#1237414).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.11.html</changelog>
  <changelog author="rfrohl@suse.com" date="1749124800">- Wireshark 4.2.12:
  * CVE-2025-5601: Dissection engine crash (bsc#1244081).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.12.html</changelog>
  <changelog author="rfrohl@suse.com" date="1756987200">- CVE-2025-9817: SSH dissector crash (bsc#1249090).
  adding wireshark-0011-CVE-2025-9817.patch
- Wireshark 4.2.13:
  * Bug in UDS dissector with Service ReadDataByPeriodicIdentifier Response
  * application/x-www-form-urlencoded key parsed incorrectly following a name-value byte sequence with no '='
  * DNP3 time stamp was unable to work after epoch time (year 2038)
  * Bug in LZ77 decoder; reads a 16-bit length when it should read a 32-bit length
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.13.html</changelog>
  <changelog author="rfrohl@suse.com" date="1760529600">- Wireshark 4.2.14:
  * CVE-2025-11626: MONGO dissector infinite loop (bsc#1251933).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.14.html</changelog>
</package>
<package pkgid="e0fecddf3b1148ac05bfb0c0c670790d667237fab4d8adb6c32964c410662b29" name="libwiretap14" arch="x86_64">
  <version epoch="0" ver="4.2.14" rel="150600.18.32.1"/>
  <changelog author="rfrohl@suse.com" date="1700136000">- Wireshark 4.0.11:
  * CVE-2023-6174: SSH dissector crash (boo#1217247).
  * CVE-2023-6175: NetScreen file parser crash (boo#1217272).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.0.11.html</changelog>
  <changelog author="rfrohl@suse.com" date="1700827200">- Wireshark 4.2.0:
  * CVE-2024-24476: Fixed buffer overflow in ws_manuf_lookup_str() (boo#1220181).
  * CVE-2022-3725: Fixed integer overflow in the OPUS dissector (boo#1204822).
  * Packet list sorting has been improved.
  * Wireshark and TShark are now better about generating valid UTF-8 output.
  * A new display filter feature for filtering raw bytes has been added.
  * Display filter autocomplete is smarter about not suggesting invalid syntax.
  * Tools › MAC Address Blocks can lookup a MAC address in the IEEE OUI registry.
  * The installation target no longer installs development headers by default.
  * The Wireshark installation is relocatable on Linux (and other ELF platforms with support for relative RPATHs).
  * Tools › Browser (SSL Keylog) can launch your web browser with the SSLKEYLOGFILE environment variable set to the appropriate value.
  * Wireshark now supports the Korean language.
  * Many other improvements have been made. See the “New and Updated Features” section below for more details.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.0.html
- Updated patches
  wireshark-0000-wsutil-implicit_declaration_memcpy.patch
  wireshark-0010-dumpcap-permission-denied.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701259200">- Install SDK using cmake --install --component Development instead
  of manually copying. This brings back the .pc file and simplifies
  the spec file.</changelog>
  <changelog author="rfrohl@suse.com" date="1704369600">- Wireshark 4.2.1:
  * CVE-2024-0207: HTTP3 dissector crash (boo#1218503).
  * CVE-2024-0208: GVCP dissector crash (boo#1218504).
  * CVE-2024-0209: IEEE 1609.2 dissector crash (boo#1218505).
  * CVE-2024-0210: Zigbee TLV dissector crash (boo#1218506).
  * CVE-2024-0211: DOCSIS dissector crash (boo#1218507).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1704456000">- Wireshark 4.2.2:
  * minor bug fix release
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.2.html</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- handle different CMAKE_INSTALL_DOCDIR setting between
  tumbleweed and leap</changelog>
  <changelog author="dmueller@suse.com" date="1707739200">- handle one more mismatch in docdir handling</changelog>
  <changelog author="rfrohl@suse.com" date="1707998400">- Wireshark 4.2.3:
  * Capture start fails when file set enabled and file extension not supplied if directory contains a period.
  * Cannot drag and move custom filter buttons in toolbar.
  * Not equal won’t work when used with wlan.addr.
  * sshdump fails to connect with private key (ssh-rsa)
  * ChmodBPF installation fails on macOS Sonoma 14.1.2.
  * Windows installers should check for Windows 8.1.
  * Fuzz job crash output: fuzz-2024-01-05-7725.pcap.
  * Fuzz job crash output: fuzz-2024-01-06-7734.pcap.
  * Incorrect recursion depth assert failure when dissecting a legitimate GOOSE message.
  * OPC UA - large read request is reported as malformed in 4.2.1 but not in 4.0.12.
  * TFTP dissector bug type listed as netscii instead of netascii doesn’t show all TFTP packets including TFTP blocks.
  * SMB1 replies from LAN Drive app only show up as NBSS Continuation Message.
  * ciscodump - older SSH key exchange algorithms not supported.
  * Problem decoding LAPB/X.25/FTAM after adding X.75 decoding.
  * Wireshark Filter not working.
  * CFLOW: failure to decode 0 length data fields of
  * Copy ...as Printable Text Feature Missing in 4.1/4.2.
  * Export Objects - HTTP is missing some HTTP/2 files in a two-pass analysis.
  * ASAM-CMP Plugin: Malformed message, length mismatch if vendor defined data of status messages has odd length.
  * OSS-Fuzz 66561: wireshark:fuzzshark_ip_proto-udp: Null-dereference READ in wmem_map_lookup.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1711627200">- Wireshark 4.2.4:
  * CVE-2024-2955: T.38 dissector crash (boo#1222030).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.4.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1715774400">- Wireshark 4.2.5:
  * CVE-2024-4854: MONGO and ZigBee TLV dissector infinite loops
    (wnpa-sec-2024-07 boo#1224274)
  * CVE-2024-4853: The editcap command line utility could crash
    when chopping bytes from the beginning of a packet
    (wnpa-sec-2024-08 boo#1224259)
  * CVE-2024-4855: The editcap command line utility could crash
    when injecting secrets while writing multiple files
    (wnpa-sec-2024-09 boo#1224276)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.5.html</changelog>
  <changelog author="info@ebner-markus.de" date="1718798400">- Fix Wireshark Super User Mode starter</changelog>
  <changelog author="rfrohl@suse.com" date="1720612800">- Wireshark 4.2.6 (jsc#PED-8517):
  * CVE-2024-8645: SPRT dissector crash (boo#1230372).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1724932800">- Wireshark 4.2.7:
  * CVE-2024-8250: NTLMSSP dissector crash (boo#1229907).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.7.html</changelog>
  <changelog author="rfrohl@suse.com" date="1728561600">- Wireshark 4.2.8:
  * CVE-2024-9781: AppleTalk and RELOAD Framing dissector crashes (bsc#1231476).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.8.html</changelog>
  <changelog author="rfrohl@suse.com" date="1732536000">- Wireshark 4.2.9:
  * CVE-2024-11595: FiveCo RAP dissector infinite loop (bsc#1233594).
  * CVE-2024-11596: ECMP dissector crash (bsc#1233593).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.9.html</changelog>
  <changelog author="rfrohl@suse.com" date="1740398400">- Wireshark 4.2.11:
  * CVE-2025-1492: Bundle Protocol and CBOR dissector crash (bsc#1237414).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.11.html</changelog>
  <changelog author="rfrohl@suse.com" date="1749124800">- Wireshark 4.2.12:
  * CVE-2025-5601: Dissection engine crash (bsc#1244081).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.12.html</changelog>
  <changelog author="rfrohl@suse.com" date="1756987200">- CVE-2025-9817: SSH dissector crash (bsc#1249090).
  adding wireshark-0011-CVE-2025-9817.patch
- Wireshark 4.2.13:
  * Bug in UDS dissector with Service ReadDataByPeriodicIdentifier Response
  * application/x-www-form-urlencoded key parsed incorrectly following a name-value byte sequence with no '='
  * DNP3 time stamp was unable to work after epoch time (year 2038)
  * Bug in LZ77 decoder; reads a 16-bit length when it should read a 32-bit length
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.13.html</changelog>
  <changelog author="rfrohl@suse.com" date="1760529600">- Wireshark 4.2.14:
  * CVE-2025-11626: MONGO dissector infinite loop (bsc#1251933).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.14.html</changelog>
  <changelog author="rfrohl@suse.com" date="1765195200">- CVE-2025-13499: Kafka dissector crash (bsc#1254108).
  adding wireshark-0012-CVE-2025-13499.patch
- CVE-2025-13946: MEGACO dissector infinite loop (bsc#1254472).
  adding wireshark-0013-CVE-2025-13946.patch</changelog>
</package>
<package pkgid="229ef52f3706f2cb3ce1c480a18580fe23b416ce260b2853ddfec757d25090d5" name="libwiretap14" arch="x86_64">
  <version epoch="0" ver="4.2.14" rel="150600.18.35.1"/>
  <changelog author="rfrohl@suse.com" date="1700827200">- Wireshark 4.2.0:
  * CVE-2024-24476: Fixed buffer overflow in ws_manuf_lookup_str() (boo#1220181).
  * CVE-2022-3725: Fixed integer overflow in the OPUS dissector (boo#1204822).
  * Packet list sorting has been improved.
  * Wireshark and TShark are now better about generating valid UTF-8 output.
  * A new display filter feature for filtering raw bytes has been added.
  * Display filter autocomplete is smarter about not suggesting invalid syntax.
  * Tools › MAC Address Blocks can lookup a MAC address in the IEEE OUI registry.
  * The installation target no longer installs development headers by default.
  * The Wireshark installation is relocatable on Linux (and other ELF platforms with support for relative RPATHs).
  * Tools › Browser (SSL Keylog) can launch your web browser with the SSLKEYLOGFILE environment variable set to the appropriate value.
  * Wireshark now supports the Korean language.
  * Many other improvements have been made. See the “New and Updated Features” section below for more details.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.0.html
- Updated patches
  wireshark-0000-wsutil-implicit_declaration_memcpy.patch
  wireshark-0010-dumpcap-permission-denied.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701259200">- Install SDK using cmake --install --component Development instead
  of manually copying. This brings back the .pc file and simplifies
  the spec file.</changelog>
  <changelog author="rfrohl@suse.com" date="1704369600">- Wireshark 4.2.1:
  * CVE-2024-0207: HTTP3 dissector crash (boo#1218503).
  * CVE-2024-0208: GVCP dissector crash (boo#1218504).
  * CVE-2024-0209: IEEE 1609.2 dissector crash (boo#1218505).
  * CVE-2024-0210: Zigbee TLV dissector crash (boo#1218506).
  * CVE-2024-0211: DOCSIS dissector crash (boo#1218507).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1704456000">- Wireshark 4.2.2:
  * minor bug fix release
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.2.html</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- handle different CMAKE_INSTALL_DOCDIR setting between
  tumbleweed and leap</changelog>
  <changelog author="dmueller@suse.com" date="1707739200">- handle one more mismatch in docdir handling</changelog>
  <changelog author="rfrohl@suse.com" date="1707998400">- Wireshark 4.2.3:
  * Capture start fails when file set enabled and file extension not supplied if directory contains a period.
  * Cannot drag and move custom filter buttons in toolbar.
  * Not equal won’t work when used with wlan.addr.
  * sshdump fails to connect with private key (ssh-rsa)
  * ChmodBPF installation fails on macOS Sonoma 14.1.2.
  * Windows installers should check for Windows 8.1.
  * Fuzz job crash output: fuzz-2024-01-05-7725.pcap.
  * Fuzz job crash output: fuzz-2024-01-06-7734.pcap.
  * Incorrect recursion depth assert failure when dissecting a legitimate GOOSE message.
  * OPC UA - large read request is reported as malformed in 4.2.1 but not in 4.0.12.
  * TFTP dissector bug type listed as netscii instead of netascii doesn’t show all TFTP packets including TFTP blocks.
  * SMB1 replies from LAN Drive app only show up as NBSS Continuation Message.
  * ciscodump - older SSH key exchange algorithms not supported.
  * Problem decoding LAPB/X.25/FTAM after adding X.75 decoding.
  * Wireshark Filter not working.
  * CFLOW: failure to decode 0 length data fields of
  * Copy ...as Printable Text Feature Missing in 4.1/4.2.
  * Export Objects - HTTP is missing some HTTP/2 files in a two-pass analysis.
  * ASAM-CMP Plugin: Malformed message, length mismatch if vendor defined data of status messages has odd length.
  * OSS-Fuzz 66561: wireshark:fuzzshark_ip_proto-udp: Null-dereference READ in wmem_map_lookup.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1711627200">- Wireshark 4.2.4:
  * CVE-2024-2955: T.38 dissector crash (boo#1222030).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.4.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1715774400">- Wireshark 4.2.5:
  * CVE-2024-4854: MONGO and ZigBee TLV dissector infinite loops
    (wnpa-sec-2024-07 boo#1224274)
  * CVE-2024-4853: The editcap command line utility could crash
    when chopping bytes from the beginning of a packet
    (wnpa-sec-2024-08 boo#1224259)
  * CVE-2024-4855: The editcap command line utility could crash
    when injecting secrets while writing multiple files
    (wnpa-sec-2024-09 boo#1224276)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.5.html</changelog>
  <changelog author="info@ebner-markus.de" date="1718798400">- Fix Wireshark Super User Mode starter</changelog>
  <changelog author="rfrohl@suse.com" date="1720612800">- Wireshark 4.2.6 (jsc#PED-8517):
  * CVE-2024-8645: SPRT dissector crash (boo#1230372).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1724932800">- Wireshark 4.2.7:
  * CVE-2024-8250: NTLMSSP dissector crash (boo#1229907).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.7.html</changelog>
  <changelog author="rfrohl@suse.com" date="1728561600">- Wireshark 4.2.8:
  * CVE-2024-9781: AppleTalk and RELOAD Framing dissector crashes (bsc#1231476).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.8.html</changelog>
  <changelog author="rfrohl@suse.com" date="1732536000">- Wireshark 4.2.9:
  * CVE-2024-11595: FiveCo RAP dissector infinite loop (bsc#1233594).
  * CVE-2024-11596: ECMP dissector crash (bsc#1233593).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.9.html</changelog>
  <changelog author="rfrohl@suse.com" date="1740398400">- Wireshark 4.2.11:
  * CVE-2025-1492: Bundle Protocol and CBOR dissector crash (bsc#1237414).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.11.html</changelog>
  <changelog author="rfrohl@suse.com" date="1749124800">- Wireshark 4.2.12:
  * CVE-2025-5601: Dissection engine crash (bsc#1244081).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.12.html</changelog>
  <changelog author="rfrohl@suse.com" date="1756987200">- CVE-2025-9817: SSH dissector crash (bsc#1249090).
  adding wireshark-0011-CVE-2025-9817.patch
- Wireshark 4.2.13:
  * Bug in UDS dissector with Service ReadDataByPeriodicIdentifier Response
  * application/x-www-form-urlencoded key parsed incorrectly following a name-value byte sequence with no '='
  * DNP3 time stamp was unable to work after epoch time (year 2038)
  * Bug in LZ77 decoder; reads a 16-bit length when it should read a 32-bit length
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.13.html</changelog>
  <changelog author="rfrohl@suse.com" date="1760529600">- Wireshark 4.2.14:
  * CVE-2025-11626: MONGO dissector infinite loop (bsc#1251933).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.14.html</changelog>
  <changelog author="rfrohl@suse.com" date="1765195200">- CVE-2025-13499: Kafka dissector crash (bsc#1254108).
  adding wireshark-0012-CVE-2025-13499.patch
- CVE-2025-13946: MEGACO dissector infinite loop (bsc#1254472).
  adding wireshark-0013-CVE-2025-13946.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1768564800">- CVE-2026-0959: IEEE 802.11 dissector crash (bsc#1256734).
  adding wireshark-0014-CVE-2026-0959.patch
- CVE-2026-0960: HTTP3 dissector infinite loop (bsc#1256736).
  adding wireshark-0015-CVE-2026-0960.patch
- CVE-2026-0962: SOME/IP-SD dissector crash (bsc#1256739).
  adding wireshark-0016-CVE-2026-0962.patch</changelog>
</package>
<package pkgid="76db50ac24b436f73be2c979d16b86438255cf537685dca4f5261db75d8ae933" name="libwiretap16" arch="x86_64">
  <version epoch="0" ver="4.6.4" rel="150700.21.8.1"/>
  <changelog author="rfrohl@suse.com" date="1724932800">- Wireshark 4.2.7:
  * CVE-2024-8250: NTLMSSP dissector crash (boo#1229907).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.7.html</changelog>
  <changelog author="rfrohl@suse.com" date="1725019200">- Wireshark 4.4.0
  * Many improvements and fixes to the graphing dialogs, including I/O Graphs,
    Flow Graph / VoIP Calls, and TCP Stream Graphs
  * Custom columns can be defined using any valid field expression, such as
    display filter functions, packet slices, arithmetic calculations, logical
    tests, raw byte addressing, and protocol layer modifiers
  * Wireshark now supports automatic profile switching. You can associate a
    display filter with a configuration profile, and when you open a capture
    file that matches the filter, Wireshark will automatically switch to that
    profile.
  * Improved display filter support for value strings (optional string
    representations for numeric fields).
- Many more features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.4.0.html
- drop wireshark-0000-wsutil-implicit_declaration_memcpy.patch: included upstream
- update wireshark-0010-dumpcap-permission-denied.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1728561600">- Wireshark 4.4.1
  * CVE-2024-9780: ITS dissector crash (boo#1231475).
  * CVE-2024-9781: AppleTalk and RELOAD Framing dissector crashes (boo#1231476).
- Many more features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.4.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1732190400">- Wireshark 4.4.2
  * CVE-2024-11595: FiveCo RAP dissector infinite loop (boo#1233594).
  * CVE-2024-11596: ECMP dissector crash (boo#1233593).
- Many more features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.4.2.html</changelog>
  <changelog author="opensuse-738561@jspam.de" date="1735387200">- Update Lua from 5.1 to 5.4</changelog>
  <changelog author="rfrohl@suse.com" date="1736424000">- Wireshark 4.4.3
  * Potential mis-match in GSM MAP dissector for uncertainty radius and its
    filter key
  * The NFSv2 Dissector appears to be swapping Character Special File and
    Directory in mode decoding
  * VOIP Calls call flow displaying hours
- Many more features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.4.3.html
- move to default system Lua, instead of using explicit version</changelog>
  <changelog author="rfrohl@suse.com" date="1738065600">- Default to building with qt6</changelog>
  <changelog author="ecsos@opensuse.org" date="1738670400">- Fix build error for Leap.</changelog>
  <changelog author="rfrohl@suse.com" date="1739966400">- Wireshark 4.4.4
  * CVE-2025-1492: Bundle Protocol and CBOR dissector crash (boo#1237414).
- Many more features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.4.4.html</changelog>
  <changelog author="rfrohl@suse.com" date="1740398400">- Wireshark 4.4.5
  * GRPC: protobuf_json only displays the truncated string value.
  * Wireshark crashes when clicking on a column title/header.
- Many more features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.4.5.html</changelog>
  <changelog author="rfrohl@suse.com" date="1744804800">- Wireshark 4.4.6
  * Bug in EtherCAT dissector with ECS order.
  * QUIC dissector breaks when src and dst change.
  * Trailing octet after IPv4 packet end is not detected or displayed in raw bytes.
- Many more features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.4.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1749124800">- Wireshark 4.4.7
  * CVE-2025-5601: Dissection engine crash (boo#1244081).
- Many more features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.4.7.html</changelog>
  <changelog author="rfrohl@suse.com" date="1752667200">- Wireshark 4.4.8
  * Renegotiated DTLS session is not being decrypted.
  * Wireshark is completely stuck in initialization because androiddump recv()
    is blocked.
  * Fuzz job UTF-8 encoding issue: fuzz-2025-06-20-7318.pcap.
  * Crash when showing packet in new window after reloading Lua plugins with a
    certain gui.column.format preference.
- Many more features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.4.8.html</changelog>
  <changelog author="rfrohl@suse.com" date="1756814400">- Wireshark 4.4.9
  * CVE-2025-9817: SSH dissector crash (bsc#1249090).
- Many more features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.4.9.html</changelog>
  <changelog author="rfrohl@suse.com" date="1760011200">- Wireshark 4.4.10
  * CVE-2025-11626: MONGO dissector infinite loop (bsc#1251933).
- Many more features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.4.10.html</changelog>
  <changelog author="rfrohl@suse.com" date="1760529600">- Wireshark 4.6.0 (jsc#PED-15400)
  * There are new features, bug fixes and updated protocol
    support. For an exhaustive list please refer to:
    https://www.wireshark.org/docs/relnotes/wireshark-4.6.0.html
- dropped wireshark-0010-dumpcap-permission-denied.patch:
  functionality not needed anymore, provided natively by the project.
- Dropping upstreamed patches:
  wireshark-0011-CVE-2025-9817.patch wireshark-0012-CVE-2025-13499.patch
  wireshark-0013-CVE-2025-13946.patch wireshark-0014-CVE-2026-0959.patch
  wireshark-0015-CVE-2026-0960.patch wireshark-0016-CVE-2026-0962.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1763985600">- Wireshark 4.6.1
  * CVE-2025-13674: BPv7 dissector crash (bsc#1254262).
  * CVE-2025-13499: Kafka dissector crash (bsc#1254108).
- Many more features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.6.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1764763200">- Wireshark 4.6.2
  * CVE-2025-13945: HTTP3 dissector crash (bsc#1254471).
  * CVE-2025-13946: MEGACO dissector infinite loop (bsc#1254472).
- Many more features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.6.2.html</changelog>
  <changelog author="rfrohl@suse.com" date="1768478400">- Wireshark 4.6.3
  * CVE-2026-0961: BLF file parser crash (bsc#1256738).
  * CVE-2026-0959: IEEE 802.11 dissector crash (bsc#1256734).
  * CVE-2026-0962: SOME/IP-SD dissector crash (bsc#1256739).
  * CVE-2026-0960: HTTP3 dissector infinite loop (bsc#1256736).
- Many more features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.6.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1768564800">- Wireshark 4.6.4
  * CVE-2026-3201: USB HID dissector memory exhaustion (bsc#1258907).
  * CVE-2026-3202: NTS-KE dissector crash (bsc#1258908).
  * CVE-2026-3203: RF4CE Profile dissector crash (bsc#1258909).
- Many more features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.6.4.html</changelog>
</package>
<package pkgid="54b9cd7ac493240fb02eddcc5e5ae6f3a3cac6356b7ce7fe420ebfd40ebfe065" name="libwsutil15" arch="x86_64">
  <version epoch="0" ver="4.2.12" rel="150600.18.23.1"/>
  <changelog author="rfrohl@suse.com" date="1689249600">- Wireshark 4.0.7:
  * CVE-2023-3648: Kafka dissector crash (boo#1213319).
  * CVE-2023-3649: iSCSI dissector crash (boo#1213318).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.0.7.html</changelog>
  <changelog author="rfrohl@suse.com" date="1692792000">- Wireshark 4.0.8:
  * CVE-2023-4512: CBOR dissector crash (boo#1214561).
  * CVE-2023-4511: BT SDP dissector infinite loop (boo#1214560).
  * CVE-2023-4513: BT SDP dissector memory leak (boo#1214562).
  * CVE-2023-2906: CP2179 dissector crash (boo#1214652).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.0.8.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1696507200">- Wireshark 4.0.10:
  * CVE-2023-5371: RTPS dissector memory leak (wnpa-sec-2023-27, boo#1215959)
  * Fix a number of bugs in protocol parsers, including:
  * RTP/RFC 4571: Wrong desegmentation/reassembly in RTP over TCP packets
  * Incorrect bit values and namings in BSS Configuration Report TLV
  * Wireshark 4.0.9 contained a bug affecting other platforms</changelog>
  <changelog author="rfrohl@suse.com" date="1700136000">- Wireshark 4.0.11:
  * CVE-2023-6174: SSH dissector crash (boo#1217247).
  * CVE-2023-6175: NetScreen file parser crash (boo#1217272).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.0.11.html</changelog>
  <changelog author="rfrohl@suse.com" date="1700827200">- Wireshark 4.2.0:
  * CVE-2024-24476: Fixed buffer overflow in ws_manuf_lookup_str() (boo#1220181).
  * CVE-2022-3725: Fixed integer overflow in the OPUS dissector (boo#1204822).
  * Packet list sorting has been improved.
  * Wireshark and TShark are now better about generating valid UTF-8 output.
  * A new display filter feature for filtering raw bytes has been added.
  * Display filter autocomplete is smarter about not suggesting invalid syntax.
  * Tools › MAC Address Blocks can lookup a MAC address in the IEEE OUI registry.
  * The installation target no longer installs development headers by default.
  * The Wireshark installation is relocatable on Linux (and other ELF platforms with support for relative RPATHs).
  * Tools › Browser (SSL Keylog) can launch your web browser with the SSLKEYLOGFILE environment variable set to the appropriate value.
  * Wireshark now supports the Korean language.
  * Many other improvements have been made. See the “New and Updated Features” section below for more details.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.0.html
- Updated patches
  wireshark-0000-wsutil-implicit_declaration_memcpy.patch
  wireshark-0010-dumpcap-permission-denied.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701259200">- Install SDK using cmake --install --component Development instead
  of manually copying. This brings back the .pc file and simplifies
  the spec file.</changelog>
  <changelog author="rfrohl@suse.com" date="1704369600">- Wireshark 4.2.1:
  * CVE-2024-0207: HTTP3 dissector crash (boo#1218503).
  * CVE-2024-0208: GVCP dissector crash (boo#1218504).
  * CVE-2024-0209: IEEE 1609.2 dissector crash (boo#1218505).
  * CVE-2024-0210: Zigbee TLV dissector crash (boo#1218506).
  * CVE-2024-0211: DOCSIS dissector crash (boo#1218507).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1704456000">- Wireshark 4.2.2:
  * minor bug fix release
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.2.html</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- handle different CMAKE_INSTALL_DOCDIR setting between
  tumbleweed and leap</changelog>
  <changelog author="dmueller@suse.com" date="1707739200">- handle one more mismatch in docdir handling</changelog>
  <changelog author="rfrohl@suse.com" date="1707998400">- Wireshark 4.2.3:
  * Capture start fails when file set enabled and file extension not supplied if directory contains a period.
  * Cannot drag and move custom filter buttons in toolbar.
  * Not equal won’t work when used with wlan.addr.
  * sshdump fails to connect with private key (ssh-rsa)
  * ChmodBPF installation fails on macOS Sonoma 14.1.2.
  * Windows installers should check for Windows 8.1.
  * Fuzz job crash output: fuzz-2024-01-05-7725.pcap.
  * Fuzz job crash output: fuzz-2024-01-06-7734.pcap.
  * Incorrect recursion depth assert failure when dissecting a legitimate GOOSE message.
  * OPC UA - large read request is reported as malformed in 4.2.1 but not in 4.0.12.
  * TFTP dissector bug type listed as netscii instead of netascii doesn’t show all TFTP packets including TFTP blocks.
  * SMB1 replies from LAN Drive app only show up as NBSS Continuation Message.
  * ciscodump - older SSH key exchange algorithms not supported.
  * Problem decoding LAPB/X.25/FTAM after adding X.75 decoding.
  * Wireshark Filter not working.
  * CFLOW: failure to decode 0 length data fields of
  * Copy ...as Printable Text Feature Missing in 4.1/4.2.
  * Export Objects - HTTP is missing some HTTP/2 files in a two-pass analysis.
  * ASAM-CMP Plugin: Malformed message, length mismatch if vendor defined data of status messages has odd length.
  * OSS-Fuzz 66561: wireshark:fuzzshark_ip_proto-udp: Null-dereference READ in wmem_map_lookup.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1711627200">- Wireshark 4.2.4:
  * CVE-2024-2955: T.38 dissector crash (boo#1222030).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.4.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1715774400">- Wireshark 4.2.5:
  * CVE-2024-4854: MONGO and ZigBee TLV dissector infinite loops
    (wnpa-sec-2024-07 boo#1224274)
  * CVE-2024-4853: The editcap command line utility could crash
    when chopping bytes from the beginning of a packet
    (wnpa-sec-2024-08 boo#1224259)
  * CVE-2024-4855: The editcap command line utility could crash
    when injecting secrets while writing multiple files
    (wnpa-sec-2024-09 boo#1224276)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.5.html</changelog>
  <changelog author="info@ebner-markus.de" date="1718798400">- Fix Wireshark Super User Mode starter</changelog>
  <changelog author="rfrohl@suse.com" date="1720612800">- Wireshark 4.2.6 (jsc#PED-8517):
  * CVE-2024-8645: SPRT dissector crash (boo#1230372).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1724932800">- Wireshark 4.2.7:
  * CVE-2024-8250: NTLMSSP dissector crash (boo#1229907).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.7.html</changelog>
  <changelog author="rfrohl@suse.com" date="1728561600">- Wireshark 4.2.8:
  * CVE-2024-9781: AppleTalk and RELOAD Framing dissector crashes (bsc#1231476).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.8.html</changelog>
  <changelog author="rfrohl@suse.com" date="1732536000">- Wireshark 4.2.9:
  * CVE-2024-11595: FiveCo RAP dissector infinite loop (bsc#1233594).
  * CVE-2024-11596: ECMP dissector crash (bsc#1233593).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.9.html</changelog>
  <changelog author="rfrohl@suse.com" date="1740398400">- Wireshark 4.2.11:
  * CVE-2025-1492: Bundle Protocol and CBOR dissector crash (bsc#1237414).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.11.html</changelog>
  <changelog author="rfrohl@suse.com" date="1749124800">- Wireshark 4.2.12:
  * CVE-2025-5601: Dissection engine crash (bsc#1244081).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.12.html</changelog>
</package>
<package pkgid="afba6cfb6f1fe0f859a048f5c1ce40a5e3ebb7c94b7d09d68c26d97bc5f81358" name="libwsutil15" arch="x86_64">
  <version epoch="0" ver="4.2.13" rel="150600.18.26.1"/>
  <changelog author="rfrohl@suse.com" date="1692792000">- Wireshark 4.0.8:
  * CVE-2023-4512: CBOR dissector crash (boo#1214561).
  * CVE-2023-4511: BT SDP dissector infinite loop (boo#1214560).
  * CVE-2023-4513: BT SDP dissector memory leak (boo#1214562).
  * CVE-2023-2906: CP2179 dissector crash (boo#1214652).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.0.8.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1696507200">- Wireshark 4.0.10:
  * CVE-2023-5371: RTPS dissector memory leak (wnpa-sec-2023-27, boo#1215959)
  * Fix a number of bugs in protocol parsers, including:
  * RTP/RFC 4571: Wrong desegmentation/reassembly in RTP over TCP packets
  * Incorrect bit values and namings in BSS Configuration Report TLV
  * Wireshark 4.0.9 contained a bug affecting other platforms</changelog>
  <changelog author="rfrohl@suse.com" date="1700136000">- Wireshark 4.0.11:
  * CVE-2023-6174: SSH dissector crash (boo#1217247).
  * CVE-2023-6175: NetScreen file parser crash (boo#1217272).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.0.11.html</changelog>
  <changelog author="rfrohl@suse.com" date="1700827200">- Wireshark 4.2.0:
  * CVE-2024-24476: Fixed buffer overflow in ws_manuf_lookup_str() (boo#1220181).
  * CVE-2022-3725: Fixed integer overflow in the OPUS dissector (boo#1204822).
  * Packet list sorting has been improved.
  * Wireshark and TShark are now better about generating valid UTF-8 output.
  * A new display filter feature for filtering raw bytes has been added.
  * Display filter autocomplete is smarter about not suggesting invalid syntax.
  * Tools › MAC Address Blocks can lookup a MAC address in the IEEE OUI registry.
  * The installation target no longer installs development headers by default.
  * The Wireshark installation is relocatable on Linux (and other ELF platforms with support for relative RPATHs).
  * Tools › Browser (SSL Keylog) can launch your web browser with the SSLKEYLOGFILE environment variable set to the appropriate value.
  * Wireshark now supports the Korean language.
  * Many other improvements have been made. See the “New and Updated Features” section below for more details.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.0.html
- Updated patches
  wireshark-0000-wsutil-implicit_declaration_memcpy.patch
  wireshark-0010-dumpcap-permission-denied.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701259200">- Install SDK using cmake --install --component Development instead
  of manually copying. This brings back the .pc file and simplifies
  the spec file.</changelog>
  <changelog author="rfrohl@suse.com" date="1704369600">- Wireshark 4.2.1:
  * CVE-2024-0207: HTTP3 dissector crash (boo#1218503).
  * CVE-2024-0208: GVCP dissector crash (boo#1218504).
  * CVE-2024-0209: IEEE 1609.2 dissector crash (boo#1218505).
  * CVE-2024-0210: Zigbee TLV dissector crash (boo#1218506).
  * CVE-2024-0211: DOCSIS dissector crash (boo#1218507).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1704456000">- Wireshark 4.2.2:
  * minor bug fix release
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.2.html</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- handle different CMAKE_INSTALL_DOCDIR setting between
  tumbleweed and leap</changelog>
  <changelog author="dmueller@suse.com" date="1707739200">- handle one more mismatch in docdir handling</changelog>
  <changelog author="rfrohl@suse.com" date="1707998400">- Wireshark 4.2.3:
  * Capture start fails when file set enabled and file extension not supplied if directory contains a period.
  * Cannot drag and move custom filter buttons in toolbar.
  * Not equal won’t work when used with wlan.addr.
  * sshdump fails to connect with private key (ssh-rsa)
  * ChmodBPF installation fails on macOS Sonoma 14.1.2.
  * Windows installers should check for Windows 8.1.
  * Fuzz job crash output: fuzz-2024-01-05-7725.pcap.
  * Fuzz job crash output: fuzz-2024-01-06-7734.pcap.
  * Incorrect recursion depth assert failure when dissecting a legitimate GOOSE message.
  * OPC UA - large read request is reported as malformed in 4.2.1 but not in 4.0.12.
  * TFTP dissector bug type listed as netscii instead of netascii doesn’t show all TFTP packets including TFTP blocks.
  * SMB1 replies from LAN Drive app only show up as NBSS Continuation Message.
  * ciscodump - older SSH key exchange algorithms not supported.
  * Problem decoding LAPB/X.25/FTAM after adding X.75 decoding.
  * Wireshark Filter not working.
  * CFLOW: failure to decode 0 length data fields of
  * Copy ...as Printable Text Feature Missing in 4.1/4.2.
  * Export Objects - HTTP is missing some HTTP/2 files in a two-pass analysis.
  * ASAM-CMP Plugin: Malformed message, length mismatch if vendor defined data of status messages has odd length.
  * OSS-Fuzz 66561: wireshark:fuzzshark_ip_proto-udp: Null-dereference READ in wmem_map_lookup.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1711627200">- Wireshark 4.2.4:
  * CVE-2024-2955: T.38 dissector crash (boo#1222030).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.4.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1715774400">- Wireshark 4.2.5:
  * CVE-2024-4854: MONGO and ZigBee TLV dissector infinite loops
    (wnpa-sec-2024-07 boo#1224274)
  * CVE-2024-4853: The editcap command line utility could crash
    when chopping bytes from the beginning of a packet
    (wnpa-sec-2024-08 boo#1224259)
  * CVE-2024-4855: The editcap command line utility could crash
    when injecting secrets while writing multiple files
    (wnpa-sec-2024-09 boo#1224276)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.5.html</changelog>
  <changelog author="info@ebner-markus.de" date="1718798400">- Fix Wireshark Super User Mode starter</changelog>
  <changelog author="rfrohl@suse.com" date="1720612800">- Wireshark 4.2.6 (jsc#PED-8517):
  * CVE-2024-8645: SPRT dissector crash (boo#1230372).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1724932800">- Wireshark 4.2.7:
  * CVE-2024-8250: NTLMSSP dissector crash (boo#1229907).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.7.html</changelog>
  <changelog author="rfrohl@suse.com" date="1728561600">- Wireshark 4.2.8:
  * CVE-2024-9781: AppleTalk and RELOAD Framing dissector crashes (bsc#1231476).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.8.html</changelog>
  <changelog author="rfrohl@suse.com" date="1732536000">- Wireshark 4.2.9:
  * CVE-2024-11595: FiveCo RAP dissector infinite loop (bsc#1233594).
  * CVE-2024-11596: ECMP dissector crash (bsc#1233593).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.9.html</changelog>
  <changelog author="rfrohl@suse.com" date="1740398400">- Wireshark 4.2.11:
  * CVE-2025-1492: Bundle Protocol and CBOR dissector crash (bsc#1237414).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.11.html</changelog>
  <changelog author="rfrohl@suse.com" date="1749124800">- Wireshark 4.2.12:
  * CVE-2025-5601: Dissection engine crash (bsc#1244081).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.12.html</changelog>
  <changelog author="rfrohl@suse.com" date="1756987200">- CVE-2025-9817: SSH dissector crash (bsc#1249090).
  adding wireshark-0011-CVE-2025-9817.patch
- Wireshark 4.2.13:
  * Bug in UDS dissector with Service ReadDataByPeriodicIdentifier Response
  * application/x-www-form-urlencoded key parsed incorrectly following a name-value byte sequence with no '='
  * DNP3 time stamp was unable to work after epoch time (year 2038)
  * Bug in LZ77 decoder; reads a 16-bit length when it should read a 32-bit length
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.13.html</changelog>
</package>
<package pkgid="2e66f3fad322a780ea73cf56d2f920e8a28fdc1a75162046c5e08dd95c400bdf" name="libwsutil15" arch="x86_64">
  <version epoch="0" ver="4.2.14" rel="150600.18.29.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1696507200">- Wireshark 4.0.10:
  * CVE-2023-5371: RTPS dissector memory leak (wnpa-sec-2023-27, boo#1215959)
  * Fix a number of bugs in protocol parsers, including:
  * RTP/RFC 4571: Wrong desegmentation/reassembly in RTP over TCP packets
  * Incorrect bit values and namings in BSS Configuration Report TLV
  * Wireshark 4.0.9 contained a bug affecting other platforms</changelog>
  <changelog author="rfrohl@suse.com" date="1700136000">- Wireshark 4.0.11:
  * CVE-2023-6174: SSH dissector crash (boo#1217247).
  * CVE-2023-6175: NetScreen file parser crash (boo#1217272).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.0.11.html</changelog>
  <changelog author="rfrohl@suse.com" date="1700827200">- Wireshark 4.2.0:
  * CVE-2024-24476: Fixed buffer overflow in ws_manuf_lookup_str() (boo#1220181).
  * CVE-2022-3725: Fixed integer overflow in the OPUS dissector (boo#1204822).
  * Packet list sorting has been improved.
  * Wireshark and TShark are now better about generating valid UTF-8 output.
  * A new display filter feature for filtering raw bytes has been added.
  * Display filter autocomplete is smarter about not suggesting invalid syntax.
  * Tools › MAC Address Blocks can lookup a MAC address in the IEEE OUI registry.
  * The installation target no longer installs development headers by default.
  * The Wireshark installation is relocatable on Linux (and other ELF platforms with support for relative RPATHs).
  * Tools › Browser (SSL Keylog) can launch your web browser with the SSLKEYLOGFILE environment variable set to the appropriate value.
  * Wireshark now supports the Korean language.
  * Many other improvements have been made. See the “New and Updated Features” section below for more details.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.0.html
- Updated patches
  wireshark-0000-wsutil-implicit_declaration_memcpy.patch
  wireshark-0010-dumpcap-permission-denied.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701259200">- Install SDK using cmake --install --component Development instead
  of manually copying. This brings back the .pc file and simplifies
  the spec file.</changelog>
  <changelog author="rfrohl@suse.com" date="1704369600">- Wireshark 4.2.1:
  * CVE-2024-0207: HTTP3 dissector crash (boo#1218503).
  * CVE-2024-0208: GVCP dissector crash (boo#1218504).
  * CVE-2024-0209: IEEE 1609.2 dissector crash (boo#1218505).
  * CVE-2024-0210: Zigbee TLV dissector crash (boo#1218506).
  * CVE-2024-0211: DOCSIS dissector crash (boo#1218507).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1704456000">- Wireshark 4.2.2:
  * minor bug fix release
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.2.html</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- handle different CMAKE_INSTALL_DOCDIR setting between
  tumbleweed and leap</changelog>
  <changelog author="dmueller@suse.com" date="1707739200">- handle one more mismatch in docdir handling</changelog>
  <changelog author="rfrohl@suse.com" date="1707998400">- Wireshark 4.2.3:
  * Capture start fails when file set enabled and file extension not supplied if directory contains a period.
  * Cannot drag and move custom filter buttons in toolbar.
  * Not equal won’t work when used with wlan.addr.
  * sshdump fails to connect with private key (ssh-rsa)
  * ChmodBPF installation fails on macOS Sonoma 14.1.2.
  * Windows installers should check for Windows 8.1.
  * Fuzz job crash output: fuzz-2024-01-05-7725.pcap.
  * Fuzz job crash output: fuzz-2024-01-06-7734.pcap.
  * Incorrect recursion depth assert failure when dissecting a legitimate GOOSE message.
  * OPC UA - large read request is reported as malformed in 4.2.1 but not in 4.0.12.
  * TFTP dissector bug type listed as netscii instead of netascii doesn’t show all TFTP packets including TFTP blocks.
  * SMB1 replies from LAN Drive app only show up as NBSS Continuation Message.
  * ciscodump - older SSH key exchange algorithms not supported.
  * Problem decoding LAPB/X.25/FTAM after adding X.75 decoding.
  * Wireshark Filter not working.
  * CFLOW: failure to decode 0 length data fields of
  * Copy ...as Printable Text Feature Missing in 4.1/4.2.
  * Export Objects - HTTP is missing some HTTP/2 files in a two-pass analysis.
  * ASAM-CMP Plugin: Malformed message, length mismatch if vendor defined data of status messages has odd length.
  * OSS-Fuzz 66561: wireshark:fuzzshark_ip_proto-udp: Null-dereference READ in wmem_map_lookup.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1711627200">- Wireshark 4.2.4:
  * CVE-2024-2955: T.38 dissector crash (boo#1222030).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.4.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1715774400">- Wireshark 4.2.5:
  * CVE-2024-4854: MONGO and ZigBee TLV dissector infinite loops
    (wnpa-sec-2024-07 boo#1224274)
  * CVE-2024-4853: The editcap command line utility could crash
    when chopping bytes from the beginning of a packet
    (wnpa-sec-2024-08 boo#1224259)
  * CVE-2024-4855: The editcap command line utility could crash
    when injecting secrets while writing multiple files
    (wnpa-sec-2024-09 boo#1224276)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.5.html</changelog>
  <changelog author="info@ebner-markus.de" date="1718798400">- Fix Wireshark Super User Mode starter</changelog>
  <changelog author="rfrohl@suse.com" date="1720612800">- Wireshark 4.2.6 (jsc#PED-8517):
  * CVE-2024-8645: SPRT dissector crash (boo#1230372).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1724932800">- Wireshark 4.2.7:
  * CVE-2024-8250: NTLMSSP dissector crash (boo#1229907).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.7.html</changelog>
  <changelog author="rfrohl@suse.com" date="1728561600">- Wireshark 4.2.8:
  * CVE-2024-9781: AppleTalk and RELOAD Framing dissector crashes (bsc#1231476).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.8.html</changelog>
  <changelog author="rfrohl@suse.com" date="1732536000">- Wireshark 4.2.9:
  * CVE-2024-11595: FiveCo RAP dissector infinite loop (bsc#1233594).
  * CVE-2024-11596: ECMP dissector crash (bsc#1233593).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.9.html</changelog>
  <changelog author="rfrohl@suse.com" date="1740398400">- Wireshark 4.2.11:
  * CVE-2025-1492: Bundle Protocol and CBOR dissector crash (bsc#1237414).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.11.html</changelog>
  <changelog author="rfrohl@suse.com" date="1749124800">- Wireshark 4.2.12:
  * CVE-2025-5601: Dissection engine crash (bsc#1244081).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.12.html</changelog>
  <changelog author="rfrohl@suse.com" date="1756987200">- CVE-2025-9817: SSH dissector crash (bsc#1249090).
  adding wireshark-0011-CVE-2025-9817.patch
- Wireshark 4.2.13:
  * Bug in UDS dissector with Service ReadDataByPeriodicIdentifier Response
  * application/x-www-form-urlencoded key parsed incorrectly following a name-value byte sequence with no '='
  * DNP3 time stamp was unable to work after epoch time (year 2038)
  * Bug in LZ77 decoder; reads a 16-bit length when it should read a 32-bit length
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.13.html</changelog>
  <changelog author="rfrohl@suse.com" date="1760529600">- Wireshark 4.2.14:
  * CVE-2025-11626: MONGO dissector infinite loop (bsc#1251933).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.14.html</changelog>
</package>
<package pkgid="084d40e95757704a39379df9e0825f8087c1138e2249ccf5f7090084222128e0" name="libwsutil15" arch="x86_64">
  <version epoch="0" ver="4.2.14" rel="150600.18.32.1"/>
  <changelog author="rfrohl@suse.com" date="1700136000">- Wireshark 4.0.11:
  * CVE-2023-6174: SSH dissector crash (boo#1217247).
  * CVE-2023-6175: NetScreen file parser crash (boo#1217272).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.0.11.html</changelog>
  <changelog author="rfrohl@suse.com" date="1700827200">- Wireshark 4.2.0:
  * CVE-2024-24476: Fixed buffer overflow in ws_manuf_lookup_str() (boo#1220181).
  * CVE-2022-3725: Fixed integer overflow in the OPUS dissector (boo#1204822).
  * Packet list sorting has been improved.
  * Wireshark and TShark are now better about generating valid UTF-8 output.
  * A new display filter feature for filtering raw bytes has been added.
  * Display filter autocomplete is smarter about not suggesting invalid syntax.
  * Tools › MAC Address Blocks can lookup a MAC address in the IEEE OUI registry.
  * The installation target no longer installs development headers by default.
  * The Wireshark installation is relocatable on Linux (and other ELF platforms with support for relative RPATHs).
  * Tools › Browser (SSL Keylog) can launch your web browser with the SSLKEYLOGFILE environment variable set to the appropriate value.
  * Wireshark now supports the Korean language.
  * Many other improvements have been made. See the “New and Updated Features” section below for more details.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.0.html
- Updated patches
  wireshark-0000-wsutil-implicit_declaration_memcpy.patch
  wireshark-0010-dumpcap-permission-denied.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701259200">- Install SDK using cmake --install --component Development instead
  of manually copying. This brings back the .pc file and simplifies
  the spec file.</changelog>
  <changelog author="rfrohl@suse.com" date="1704369600">- Wireshark 4.2.1:
  * CVE-2024-0207: HTTP3 dissector crash (boo#1218503).
  * CVE-2024-0208: GVCP dissector crash (boo#1218504).
  * CVE-2024-0209: IEEE 1609.2 dissector crash (boo#1218505).
  * CVE-2024-0210: Zigbee TLV dissector crash (boo#1218506).
  * CVE-2024-0211: DOCSIS dissector crash (boo#1218507).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1704456000">- Wireshark 4.2.2:
  * minor bug fix release
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.2.html</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- handle different CMAKE_INSTALL_DOCDIR setting between
  tumbleweed and leap</changelog>
  <changelog author="dmueller@suse.com" date="1707739200">- handle one more mismatch in docdir handling</changelog>
  <changelog author="rfrohl@suse.com" date="1707998400">- Wireshark 4.2.3:
  * Capture start fails when file set enabled and file extension not supplied if directory contains a period.
  * Cannot drag and move custom filter buttons in toolbar.
  * Not equal won’t work when used with wlan.addr.
  * sshdump fails to connect with private key (ssh-rsa)
  * ChmodBPF installation fails on macOS Sonoma 14.1.2.
  * Windows installers should check for Windows 8.1.
  * Fuzz job crash output: fuzz-2024-01-05-7725.pcap.
  * Fuzz job crash output: fuzz-2024-01-06-7734.pcap.
  * Incorrect recursion depth assert failure when dissecting a legitimate GOOSE message.
  * OPC UA - large read request is reported as malformed in 4.2.1 but not in 4.0.12.
  * TFTP dissector bug type listed as netscii instead of netascii doesn’t show all TFTP packets including TFTP blocks.
  * SMB1 replies from LAN Drive app only show up as NBSS Continuation Message.
  * ciscodump - older SSH key exchange algorithms not supported.
  * Problem decoding LAPB/X.25/FTAM after adding X.75 decoding.
  * Wireshark Filter not working.
  * CFLOW: failure to decode 0 length data fields of
  * Copy ...as Printable Text Feature Missing in 4.1/4.2.
  * Export Objects - HTTP is missing some HTTP/2 files in a two-pass analysis.
  * ASAM-CMP Plugin: Malformed message, length mismatch if vendor defined data of status messages has odd length.
  * OSS-Fuzz 66561: wireshark:fuzzshark_ip_proto-udp: Null-dereference READ in wmem_map_lookup.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1711627200">- Wireshark 4.2.4:
  * CVE-2024-2955: T.38 dissector crash (boo#1222030).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.4.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1715774400">- Wireshark 4.2.5:
  * CVE-2024-4854: MONGO and ZigBee TLV dissector infinite loops
    (wnpa-sec-2024-07 boo#1224274)
  * CVE-2024-4853: The editcap command line utility could crash
    when chopping bytes from the beginning of a packet
    (wnpa-sec-2024-08 boo#1224259)
  * CVE-2024-4855: The editcap command line utility could crash
    when injecting secrets while writing multiple files
    (wnpa-sec-2024-09 boo#1224276)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.5.html</changelog>
  <changelog author="info@ebner-markus.de" date="1718798400">- Fix Wireshark Super User Mode starter</changelog>
  <changelog author="rfrohl@suse.com" date="1720612800">- Wireshark 4.2.6 (jsc#PED-8517):
  * CVE-2024-8645: SPRT dissector crash (boo#1230372).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1724932800">- Wireshark 4.2.7:
  * CVE-2024-8250: NTLMSSP dissector crash (boo#1229907).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.7.html</changelog>
  <changelog author="rfrohl@suse.com" date="1728561600">- Wireshark 4.2.8:
  * CVE-2024-9781: AppleTalk and RELOAD Framing dissector crashes (bsc#1231476).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.8.html</changelog>
  <changelog author="rfrohl@suse.com" date="1732536000">- Wireshark 4.2.9:
  * CVE-2024-11595: FiveCo RAP dissector infinite loop (bsc#1233594).
  * CVE-2024-11596: ECMP dissector crash (bsc#1233593).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.9.html</changelog>
  <changelog author="rfrohl@suse.com" date="1740398400">- Wireshark 4.2.11:
  * CVE-2025-1492: Bundle Protocol and CBOR dissector crash (bsc#1237414).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.11.html</changelog>
  <changelog author="rfrohl@suse.com" date="1749124800">- Wireshark 4.2.12:
  * CVE-2025-5601: Dissection engine crash (bsc#1244081).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.12.html</changelog>
  <changelog author="rfrohl@suse.com" date="1756987200">- CVE-2025-9817: SSH dissector crash (bsc#1249090).
  adding wireshark-0011-CVE-2025-9817.patch
- Wireshark 4.2.13:
  * Bug in UDS dissector with Service ReadDataByPeriodicIdentifier Response
  * application/x-www-form-urlencoded key parsed incorrectly following a name-value byte sequence with no '='
  * DNP3 time stamp was unable to work after epoch time (year 2038)
  * Bug in LZ77 decoder; reads a 16-bit length when it should read a 32-bit length
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.13.html</changelog>
  <changelog author="rfrohl@suse.com" date="1760529600">- Wireshark 4.2.14:
  * CVE-2025-11626: MONGO dissector infinite loop (bsc#1251933).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.14.html</changelog>
  <changelog author="rfrohl@suse.com" date="1765195200">- CVE-2025-13499: Kafka dissector crash (bsc#1254108).
  adding wireshark-0012-CVE-2025-13499.patch
- CVE-2025-13946: MEGACO dissector infinite loop (bsc#1254472).
  adding wireshark-0013-CVE-2025-13946.patch</changelog>
</package>
<package pkgid="603eefc85fbb91f45506d4a584b3f277e995f3cde23c28836d684c66fb9f1e3f" name="libwsutil15" arch="x86_64">
  <version epoch="0" ver="4.2.14" rel="150600.18.35.1"/>
  <changelog author="rfrohl@suse.com" date="1700827200">- Wireshark 4.2.0:
  * CVE-2024-24476: Fixed buffer overflow in ws_manuf_lookup_str() (boo#1220181).
  * CVE-2022-3725: Fixed integer overflow in the OPUS dissector (boo#1204822).
  * Packet list sorting has been improved.
  * Wireshark and TShark are now better about generating valid UTF-8 output.
  * A new display filter feature for filtering raw bytes has been added.
  * Display filter autocomplete is smarter about not suggesting invalid syntax.
  * Tools › MAC Address Blocks can lookup a MAC address in the IEEE OUI registry.
  * The installation target no longer installs development headers by default.
  * The Wireshark installation is relocatable on Linux (and other ELF platforms with support for relative RPATHs).
  * Tools › Browser (SSL Keylog) can launch your web browser with the SSLKEYLOGFILE environment variable set to the appropriate value.
  * Wireshark now supports the Korean language.
  * Many other improvements have been made. See the “New and Updated Features” section below for more details.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.0.html
- Updated patches
  wireshark-0000-wsutil-implicit_declaration_memcpy.patch
  wireshark-0010-dumpcap-permission-denied.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1701259200">- Install SDK using cmake --install --component Development instead
  of manually copying. This brings back the .pc file and simplifies
  the spec file.</changelog>
  <changelog author="rfrohl@suse.com" date="1704369600">- Wireshark 4.2.1:
  * CVE-2024-0207: HTTP3 dissector crash (boo#1218503).
  * CVE-2024-0208: GVCP dissector crash (boo#1218504).
  * CVE-2024-0209: IEEE 1609.2 dissector crash (boo#1218505).
  * CVE-2024-0210: Zigbee TLV dissector crash (boo#1218506).
  * CVE-2024-0211: DOCSIS dissector crash (boo#1218507).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1704456000">- Wireshark 4.2.2:
  * minor bug fix release
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.2.html</changelog>
  <changelog author="dmueller@suse.com" date="1706529600">- handle different CMAKE_INSTALL_DOCDIR setting between
  tumbleweed and leap</changelog>
  <changelog author="dmueller@suse.com" date="1707739200">- handle one more mismatch in docdir handling</changelog>
  <changelog author="rfrohl@suse.com" date="1707998400">- Wireshark 4.2.3:
  * Capture start fails when file set enabled and file extension not supplied if directory contains a period.
  * Cannot drag and move custom filter buttons in toolbar.
  * Not equal won’t work when used with wlan.addr.
  * sshdump fails to connect with private key (ssh-rsa)
  * ChmodBPF installation fails on macOS Sonoma 14.1.2.
  * Windows installers should check for Windows 8.1.
  * Fuzz job crash output: fuzz-2024-01-05-7725.pcap.
  * Fuzz job crash output: fuzz-2024-01-06-7734.pcap.
  * Incorrect recursion depth assert failure when dissecting a legitimate GOOSE message.
  * OPC UA - large read request is reported as malformed in 4.2.1 but not in 4.0.12.
  * TFTP dissector bug type listed as netscii instead of netascii doesn’t show all TFTP packets including TFTP blocks.
  * SMB1 replies from LAN Drive app only show up as NBSS Continuation Message.
  * ciscodump - older SSH key exchange algorithms not supported.
  * Problem decoding LAPB/X.25/FTAM after adding X.75 decoding.
  * Wireshark Filter not working.
  * CFLOW: failure to decode 0 length data fields of
  * Copy ...as Printable Text Feature Missing in 4.1/4.2.
  * Export Objects - HTTP is missing some HTTP/2 files in a two-pass analysis.
  * ASAM-CMP Plugin: Malformed message, length mismatch if vendor defined data of status messages has odd length.
  * OSS-Fuzz 66561: wireshark:fuzzshark_ip_proto-udp: Null-dereference READ in wmem_map_lookup.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1711627200">- Wireshark 4.2.4:
  * CVE-2024-2955: T.38 dissector crash (boo#1222030).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.4.html</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1715774400">- Wireshark 4.2.5:
  * CVE-2024-4854: MONGO and ZigBee TLV dissector infinite loops
    (wnpa-sec-2024-07 boo#1224274)
  * CVE-2024-4853: The editcap command line utility could crash
    when chopping bytes from the beginning of a packet
    (wnpa-sec-2024-08 boo#1224259)
  * CVE-2024-4855: The editcap command line utility could crash
    when injecting secrets while writing multiple files
    (wnpa-sec-2024-09 boo#1224276)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.5.html</changelog>
  <changelog author="info@ebner-markus.de" date="1718798400">- Fix Wireshark Super User Mode starter</changelog>
  <changelog author="rfrohl@suse.com" date="1720612800">- Wireshark 4.2.6 (jsc#PED-8517):
  * CVE-2024-8645: SPRT dissector crash (boo#1230372).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1724932800">- Wireshark 4.2.7:
  * CVE-2024-8250: NTLMSSP dissector crash (boo#1229907).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.7.html</changelog>
  <changelog author="rfrohl@suse.com" date="1728561600">- Wireshark 4.2.8:
  * CVE-2024-9781: AppleTalk and RELOAD Framing dissector crashes (bsc#1231476).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.8.html</changelog>
  <changelog author="rfrohl@suse.com" date="1732536000">- Wireshark 4.2.9:
  * CVE-2024-11595: FiveCo RAP dissector infinite loop (bsc#1233594).
  * CVE-2024-11596: ECMP dissector crash (bsc#1233593).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.9.html</changelog>
  <changelog author="rfrohl@suse.com" date="1740398400">- Wireshark 4.2.11:
  * CVE-2025-1492: Bundle Protocol and CBOR dissector crash (bsc#1237414).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.11.html</changelog>
  <changelog author="rfrohl@suse.com" date="1749124800">- Wireshark 4.2.12:
  * CVE-2025-5601: Dissection engine crash (bsc#1244081).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.12.html</changelog>
  <changelog author="rfrohl@suse.com" date="1756987200">- CVE-2025-9817: SSH dissector crash (bsc#1249090).
  adding wireshark-0011-CVE-2025-9817.patch
- Wireshark 4.2.13:
  * Bug in UDS dissector with Service ReadDataByPeriodicIdentifier Response
  * application/x-www-form-urlencoded key parsed incorrectly following a name-value byte sequence with no '='
  * DNP3 time stamp was unable to work after epoch time (year 2038)
  * Bug in LZ77 decoder; reads a 16-bit length when it should read a 32-bit length
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.13.html</changelog>
  <changelog author="rfrohl@suse.com" date="1760529600">- Wireshark 4.2.14:
  * CVE-2025-11626: MONGO dissector infinite loop (bsc#1251933).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.14.html</changelog>
  <changelog author="rfrohl@suse.com" date="1765195200">- CVE-2025-13499: Kafka dissector crash (bsc#1254108).
  adding wireshark-0012-CVE-2025-13499.patch
- CVE-2025-13946: MEGACO dissector infinite loop (bsc#1254472).
  adding wireshark-0013-CVE-2025-13946.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1768564800">- CVE-2026-0959: IEEE 802.11 dissector crash (bsc#1256734).
  adding wireshark-0014-CVE-2026-0959.patch
- CVE-2026-0960: HTTP3 dissector infinite loop (bsc#1256736).
  adding wireshark-0015-CVE-2026-0960.patch
- CVE-2026-0962: SOME/IP-SD dissector crash (bsc#1256739).
  adding wireshark-0016-CVE-2026-0962.patch</changelog>
</package>
<package pkgid="22051344ce548e56b113ae3d811193014b0ff56e260573561c31e855e74da62a" name="libwsutil17" arch="x86_64">
  <version epoch="0" ver="4.6.4" rel="150700.21.8.1"/>
  <changelog author="rfrohl@suse.com" date="1724932800">- Wireshark 4.2.7:
  * CVE-2024-8250: NTLMSSP dissector crash (boo#1229907).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.2.7.html</changelog>
  <changelog author="rfrohl@suse.com" date="1725019200">- Wireshark 4.4.0
  * Many improvements and fixes to the graphing dialogs, including I/O Graphs,
    Flow Graph / VoIP Calls, and TCP Stream Graphs
  * Custom columns can be defined using any valid field expression, such as
    display filter functions, packet slices, arithmetic calculations, logical
    tests, raw byte addressing, and protocol layer modifiers
  * Wireshark now supports automatic profile switching. You can associate a
    display filter with a configuration profile, and when you open a capture
    file that matches the filter, Wireshark will automatically switch to that
    profile.
  * Improved display filter support for value strings (optional string
    representations for numeric fields).
- Many more features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.4.0.html
- drop wireshark-0000-wsutil-implicit_declaration_memcpy.patch: included upstream
- update wireshark-0010-dumpcap-permission-denied.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1728561600">- Wireshark 4.4.1
  * CVE-2024-9780: ITS dissector crash (boo#1231475).
  * CVE-2024-9781: AppleTalk and RELOAD Framing dissector crashes (boo#1231476).
- Many more features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.4.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1732190400">- Wireshark 4.4.2
  * CVE-2024-11595: FiveCo RAP dissector infinite loop (boo#1233594).
  * CVE-2024-11596: ECMP dissector crash (boo#1233593).
- Many more features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.4.2.html</changelog>
  <changelog author="opensuse-738561@jspam.de" date="1735387200">- Update Lua from 5.1 to 5.4</changelog>
  <changelog author="rfrohl@suse.com" date="1736424000">- Wireshark 4.4.3
  * Potential mis-match in GSM MAP dissector for uncertainty radius and its
    filter key
  * The NFSv2 Dissector appears to be swapping Character Special File and
    Directory in mode decoding
  * VOIP Calls call flow displaying hours
- Many more features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.4.3.html
- move to default system Lua, instead of using explicit version</changelog>
  <changelog author="rfrohl@suse.com" date="1738065600">- Default to building with qt6</changelog>
  <changelog author="ecsos@opensuse.org" date="1738670400">- Fix build error for Leap.</changelog>
  <changelog author="rfrohl@suse.com" date="1739966400">- Wireshark 4.4.4
  * CVE-2025-1492: Bundle Protocol and CBOR dissector crash (boo#1237414).
- Many more features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.4.4.html</changelog>
  <changelog author="rfrohl@suse.com" date="1740398400">- Wireshark 4.4.5
  * GRPC: protobuf_json only displays the truncated string value.
  * Wireshark crashes when clicking on a column title/header.
- Many more features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.4.5.html</changelog>
  <changelog author="rfrohl@suse.com" date="1744804800">- Wireshark 4.4.6
  * Bug in EtherCAT dissector with ECS order.
  * QUIC dissector breaks when src and dst change.
  * Trailing octet after IPv4 packet end is not detected or displayed in raw bytes.
- Many more features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.4.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1749124800">- Wireshark 4.4.7
  * CVE-2025-5601: Dissection engine crash (boo#1244081).
- Many more features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.4.7.html</changelog>
  <changelog author="rfrohl@suse.com" date="1752667200">- Wireshark 4.4.8
  * Renegotiated DTLS session is not being decrypted.
  * Wireshark is completely stuck in initialization because androiddump recv()
    is blocked.
  * Fuzz job UTF-8 encoding issue: fuzz-2025-06-20-7318.pcap.
  * Crash when showing packet in new window after reloading Lua plugins with a
    certain gui.column.format preference.
- Many more features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.4.8.html</changelog>
  <changelog author="rfrohl@suse.com" date="1756814400">- Wireshark 4.4.9
  * CVE-2025-9817: SSH dissector crash (bsc#1249090).
- Many more features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.4.9.html</changelog>
  <changelog author="rfrohl@suse.com" date="1760011200">- Wireshark 4.4.10
  * CVE-2025-11626: MONGO dissector infinite loop (bsc#1251933).
- Many more features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.4.10.html</changelog>
  <changelog author="rfrohl@suse.com" date="1760529600">- Wireshark 4.6.0 (jsc#PED-15400)
  * There are new features, bug fixes and updated protocol
    support. For an exhaustive list please refer to:
    https://www.wireshark.org/docs/relnotes/wireshark-4.6.0.html
- dropped wireshark-0010-dumpcap-permission-denied.patch:
  functionality not needed anymore, provided natively by the project.
- Dropping upstreamed patches:
  wireshark-0011-CVE-2025-9817.patch wireshark-0012-CVE-2025-13499.patch
  wireshark-0013-CVE-2025-13946.patch wireshark-0014-CVE-2026-0959.patch
  wireshark-0015-CVE-2026-0960.patch wireshark-0016-CVE-2026-0962.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1763985600">- Wireshark 4.6.1
  * CVE-2025-13674: BPv7 dissector crash (bsc#1254262).
  * CVE-2025-13499: Kafka dissector crash (bsc#1254108).
- Many more features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.6.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1764763200">- Wireshark 4.6.2
  * CVE-2025-13945: HTTP3 dissector crash (bsc#1254471).
  * CVE-2025-13946: MEGACO dissector infinite loop (bsc#1254472).
- Many more features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.6.2.html</changelog>
  <changelog author="rfrohl@suse.com" date="1768478400">- Wireshark 4.6.3
  * CVE-2026-0961: BLF file parser crash (bsc#1256738).
  * CVE-2026-0959: IEEE 802.11 dissector crash (bsc#1256734).
  * CVE-2026-0962: SOME/IP-SD dissector crash (bsc#1256739).
  * CVE-2026-0960: HTTP3 dissector infinite loop (bsc#1256736).
- Many more features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.6.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1768564800">- Wireshark 4.6.4
  * CVE-2026-3201: USB HID dissector memory exhaustion (bsc#1258907).
  * CVE-2026-3202: NTS-KE dissector crash (bsc#1258908).
  * CVE-2026-3203: RF4CE Profile dissector crash (bsc#1258909).
- Many more features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-4.6.4.html</changelog>
</package>
<package pkgid="f705c664a8523d1c919037d38f84b38d4563b44910dffc3e5da3d1d1a282dc31" name="libxatracker-devel" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="150700.93.5.1"/>
  <changelog author="sndirsch@suse.com" date="1730376000">- added -32bit package for Mesa-libva since it's needed by Steam;
  reported on packman ML:
  https://lists.links2linux.de/pipermail/packman/2024-October/017985.html</changelog>
  <changelog author="mrueckert@suse.de" date="1730376001">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
</package>
<package pkgid="cd0d5d443a1f59dfccc439111b3a819306afc4c57019a04a01f9516f93d2f0f3" name="libxatracker-devel" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="150700.93.8.1"/>
  <changelog author="mrueckert@suse.de" date="1730376000">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
</package>
<package pkgid="71f681418c3dcb38b838568d233ac9dbefca196a602ef7ad5391ee2168ce0f52" name="libxatracker2" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="150700.93.5.1"/>
  <changelog author="sndirsch@suse.com" date="1730376000">- added -32bit package for Mesa-libva since it's needed by Steam;
  reported on packman ML:
  https://lists.links2linux.de/pipermail/packman/2024-October/017985.html</changelog>
  <changelog author="mrueckert@suse.de" date="1730376001">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
</package>
<package pkgid="7e280a1cd546a10fd5ddba6b4073c99eea6a9da54bc7e0a3ac3e2f4622a3ad88" name="libxatracker2" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="150700.93.8.1"/>
  <changelog author="mrueckert@suse.de" date="1730376000">- Update to release 24.2.6
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.6</changelog>
  <changelog author="sndirsch@suse.com" date="1730894400">- 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch
  * fixes colors for 'swrast' driver (boo#1230637, gitlab issue#11840)</changelog>
  <changelog author="sndirsch@suse.com" date="1732017600">- Update to release 24.2.7
  - -&gt; https://docs.mesa3d.org/relnotes/24.2.7
- supersedes 0001-dril-Fixup-order-of-pixel-formats-in-drilConfigs.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1732190400">- Update to release 24.3.0~rc2
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc2
- Update to release 24.3.0~rc1
  - -&gt; https://www.phoronix.com/news/Mesa-24.3-rc1-Released
- refreshed patches:
  * n_drirc-disable-rgb10-for-chromium-on-amd.patch
  * python36-buildfix1.patch
  * python36-buildfix2.patch
  * tlsdesc_test.patch
  * u_mesa-CVE-2023-45913.patch
  * u_mesa-CVE-2023-45919.patch
  * u_mesa-CVE-2023-45922.patch
  * u_dep_xcb.patch
- drop no longer supported options:
  * -Ddri3=enabled
  * -Ddri-search-path=%{_libdir}/dri
- new files added in this update currently packaged as part of
  Mesa-dri:
  * %{_libdir}/gbm/dri_gbm.so</changelog>
  <changelog author="mrueckert@suse.de" date="1732276800">- Update to release 24.3.0
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.0</changelog>
  <changelog author="sndirsch@suse.com" date="1732622400">- on s390x build Mesa 24.1.7 to fix colors with Xvnc (boo#1233167)
- adjusted patches for Mesa 24.1.7:
  * python36-buildfix1-s390x.patch
  * u_dep_xcb-s390x.patch
  * u_mesa-CVE-2023-45913-s390x.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1732708800">- trying to make buildservice happy by adding both tarballs to
  specfile ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733400000">- Update to release 24.3.1
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.1</changelog>
  <changelog author="sndirsch@suse.com" date="1733659200">- 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch
  * fixes mesa 24.3.1 gallium crash/segfault on GPUs without
    format modifiers (mesa issue#12253, mesa MR#32535, boo#1234302)</changelog>
  <changelog author="sndirsch@suse.com" date="1733745600">- don't apply patches of previous changelog for s390x; Mesa 24.1.7
  doesn't suffer from this issue, only Mesa 24.3.1 ...</changelog>
  <changelog author="sndirsch@suse.com" date="1733745601">- aarch64: disable build of etnaviv driver on sle15-sp7 due to
  python3-pycparser &gt;= 2.20 not available</changelog>
  <changelog author="sndirsch@suse.com" date="1734004800">- require llvm19/clang19 on sle15 &gt;= sp6</changelog>
  <changelog author="sndirsch@suse.com" date="1735992000">- Update to release 24.3.2
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.2
- supersedes the following patches:
  * 0001-dri-don-t-fetch-X11-modifiers-if-we-don-t-support-th.patch
  * 0002-egl-wayland-only-supply-LINEAR-modifier-when-support.patch
  * 0003-egl-wayland-fallback-to-implicit-modifiers-if-advert.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1735992001">- Update to release 24.3.3
  - -&gt; https://docs.mesa3d.org/relnotes/24.3.3</changelog>
  <changelog author="sndirsch@suse.com" date="1741176000">- n_remove-llvm17-wa-option.patch
  * no longer use --llvm17-wa option when running intel_clc;
    hopefully this fixes again Mesa's build after we updated
    llvm 19.1.5 to 19.1.7 and building it now with gcc13 instead of
    gcc7 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1741262400">- reverted previous change; n_remove-llvm17-wa-option.patch didn't
  help at all ...</changelog>
  <changelog author="sndirsch@suse.com" date="1741262401">- Build with GCC 13 on Leap/SLES 15 (bsc#1238713)</changelog>
  <changelog author="sndirsch@suse.com" date="1745582400">- U_egl-never-select-swrast-for-vmwgfx.patch
  * fixes crash in libgallium on virtualbox (bsc#1241701)</changelog>
  <changelog author="sndirsch@suse.com" date="1751630400">- U_0001-svga-add-svga_resource_create_with_modifiers-functio.patch
  U_0002-svga-fix-printing-64-bit-value-for-32-bit-build.patch
  * fixes Wayland session when using SP7 as vmware guest (bsc#1245034)</changelog>
  <changelog author="sndirsch@suse.com" date="1776081600">- bsc1261998-CVE-2026-40393-nir-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  bsc1261998-CVE-2026-40393-spirv-Use-STACK_ARRAY-instead-of-NIR_VLA.patch
  * Mesa: out-of-bounds memory access can occur in WebGPU because
    the amount of to-be-allocated data depends on an untrusted
    party (bsc#1261998, CVE-2026-40393)</changelog>
</package>
<package pkgid="c2c05dce6accb514ec1b4225d50bf514fbd0305be115fabd9a65ae2c05b07c3a" name="libxml2-2" arch="x86_64">
  <version epoch="0" ver="2.12.10" rel="150700.4.11.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1700136000">- Update to version 2.11.6:
  * Regressions:
  - threads: Fix --with-thread-alloc
  - xinclude: Fix ‘last’ pointer in xmlXIncludeCopyNode
  * Bug fixes: parser: Fix potential use-after-free in
    xmlParseCharDataInternal</changelog>
  <changelog author="david.anes@suse.com" date="1700136001">- Removed patches (already in upstream):
  * libxml2-CVE-2023-39615.patch
  * libxml2-CVE-2023-45322.patch
  * libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch
  * python312.patch
- Update to 2.12.0:
  * Major changes:
  - Most of the known issues leading to quadratic behavior in the
    XML parser were fixed. Internal hash tables were rewritten to
    reduce memory consumption.
  - Starting with this release, it should be enough to add the
  - -with-legacy configuration option to provide maximum ABI
    compatibility.
  - libxml2 will now store global variables in thread-local
    storage if supported by the compiler. This avoids allocating
    the data lazily which can result in a fatal error condition.
  - A new API function xmlCheckThreadLocalStorage was added so the
    allocation can be checked earlier if compiler TLS is not
    supported.
  - To prepare for future improvements, some API functions now
    expect or return a const xmlError struct.
  - Several cyclic dependencies in public header files were fixed.
  - Refactoring of the encoding code has been mostly completed.
    Calling xmlSwitchEncoding from client code is now fully
    supported, for example to override the encoding for the push
    parser.
  - When parsing data from memory, libxml2 will now stream data
    chunk by chunk instead of copying the whole buffer (possibly
    twice with encodings), reducing peak memory consumption
    considerably.
  - A new API function xmlCtxtSetMaxAmplification was added to
    allow parsing of files that would otherwise trigger the
    billion laughs protection.
  - Several bugs in the regex determinism checks were fixed.
    Invalid XML Schemas which previous versions erroneously
    accepted will now be rejected.
  * Deprecations
  - globals: Deprecate xmlLastError
  - parser: Deprecate global parser options
  - win32: Deprecate old Windows build system
  * Bug fixes
  - parser: Stop switching to ISO-8859-1 on encoding errors
  - parser: Support encoded external PEs in entity values
  - string: Fix UTF-8 validation in xmlGetUTF8Char
  - SAX2: Allow multiple top-level elements
  - parser: Update line number after coalescing text nodes
  - parser: Check for truncated multi-byte sequences
  * See the full changelog here:
  - https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.12.0</changelog>
  <changelog author="david.anes@suse.com" date="1700222400">- Bring back a patch that was mistakenly removed in the last update.
  * Readded libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700827200">- Update to verson 2.12.1:
  * Regressions:
  - hash: Fix deletion of entries during scan
  - parser: Only enable SAX2 if there are SAX2 element handlers
  * Build fixes:
  - autotools: Stop checking for snprintf
  - dict: Fix '__thread' before 'static'
  - fix: pthread weak references in globals.c
  - tests: Fix build with older MSVC</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.12.2:
  * Regressions:
  - parser:
    . Fix invalid free in xmlParseBalancedChunkMemoryRecover
    . Make CRLF increment line number
  - globals: Disable TLS in static Windows builds
  - html: Reenable buggy detection of XML declarations
  - tree: Fix regression when copying DTDs
  * Build fixes
  - build: Disable compiler TLS by default
  - cmake: Update config.h.cmake.in
  - tests: Fix tests --with-valid --without-xinclude</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
  <changelog author="foss@grueninger.de" date="1713355200">- Update to version 2.12.6
  * Regressions
  - parser: Fix detection of duplicate attributes in XML namespace
  - xmlreader: Fix xmlTextReaderConstEncoding
  - html: Fix htmlCreatePushParserCtxt with encoding
  - xmllint: Return error code if XPath returns empty nodeset
- Update to version 2.12.5
  * Security
  - [CVE-2024-25062] xmlreader: Don't expand XIncludes when backtracking
  * Regressions
  - parser: Fix crash in xmlParseInNodeContext with HTML documents
- Update to version 2.12.4
  * Regressions
  - parser: Fix regression parsing standalone declarations
  - autotools: Readd --with-xptr-locs configuration option
  - parser: Fix build --without-output
  - parser: Don't grow or shrink pull parser memory buffers
  - io: Fix memory lifetime issue with input buffers
- Update to version 2.12.3
  * Regressions
  - parser: Fix namespaces redefined from default attributes
  * Build fixes
  - include: Rename XML_EMPTY helper macro
  - include: Move declaration of xmlInitGlobals
  - include: Add missing includes
  - include: Move globals from xmlsave.h to parser.h
  - include: Readd circular dependency between tree.h and parser.h
- Drop libxml2-CVE-2024-25062.patch as it is part of upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1715688000">- Update to version 2.12.7:
  + Fix buffer overread with `xmllint --htmlout` (CVE-2024-34459, bsc#1224282).
  + xmllint: Fix --pedantic option.
  + save: Handle invalid parent pointers in xhtmlNodeDumpOutput.</changelog>
  <changelog author="dimstar@opensuse.org" date="1718193600">- Update to version 2.12.8:
  + parser: Fix performance regression when parsing namespaces.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1721908800">- Update to version 2.12.9 [bsc#1234812]:
  + Security: (CVE-2024-40896) Fix XXE protection in downstream
    code.
  + Improvements: Undeprecate xmlKeepBlanksDefault.</changelog>
  <changelog author="pgajdos@suse.com" date="1731499200">- add %{?sle15allpythons} macro [jsc#PED-68]
- use %python_build and %python_install for 15</changelog>
  <changelog author="pgajdos@suse.com" date="1740052800">- version update to 2.12.10 ([bsc#1237363], [bsc#1237370], [bsc#1237418]):
  [#]## Security
  - [CVE-2025-24928] Fix stack-buffer-overflow in xmlSnprintfElements
  - [CVE-2024-56171] Fix use-after-free after xmlSchemaItemListAdd
  - pattern: Fix compilation of explicit child axis
  [#]## Regressions
  - parser: Fix detection of duplicate attributes
  [#]## Bug fixes
  - xpath: Fix parsing of non-ASCII names
  [#]## Portability
  - python: Declare init func with PyMODINIT_FUNC
  - tests: Fix sanitizer version check on old Apple clang
  [#]## Build
  - autotools: Set AC_CONFIG_AUX_DIR
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file
- Also CVE-2025-27113 was assigned to this release.</changelog>
  <changelog author="pgajdos@suse.com" date="1745409600">- security update
- added patches
  CVE-2025-32414 [bsc#1241551], out-of-bounds read when parsing text via the Python API
  + libxml2-CVE-2025-32414.patch
  CVE-2025-32415 [bsc#1241453], a crafted XML document may lead to a heap-based buffer under-read
  + libxml2-CVE-2025-32415.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751025600">- security update
- added patches
  CVE-2025-6170 [bsc#1244700], stack buffer overflow may lead to a crash
  CVE-2025-6021 [bsc#1244580], Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2
  + libxml2-CVE-2025-6170,6021.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751025601">- security update
- added patches
  CVE-2025-49794 [bsc#1244554], heap use after free (UAF) can lead to Denial of service (DoS)
  CVE-2025-49796 [bsc#1244557], type confusion may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49794,49796.patch
  CVE-2025-49795 [bsc#1244555], null pointer dereference may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49795.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1752840000">- security update
- added patches
  CVE-2025-7425 [bsc#1246296], Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr
  + libxml2-CVE-2025-7425.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1768996800">- CVE-2026-0989: call stack exhaustion leading to application crash
  due to RelaxNG parser not limiting the recursion depth when
  resolving `&lt;include&gt;` directives (bsc#1256804, bsc#1256805, bsc#1256810)
  * Add patch libxml2-CVE-2026-0989.patch
  * https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/374</changelog>
  <changelog author="pgajdos@suse.com" date="1770206400">- CVE-2025-10911: use-after-free with key data stored cross-RVT (bsc#1250553)
  * Add patch libxml2-CVE-2025-10911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770206401">- CVE-2026-1757: memory leak in the `xmllint` interactive shell (bsc#1257593, bsc#1257594, bsc#1257595)
  * Add patch libxml2-CVE-2026-1757.patch</changelog>
  <changelog author="david.anes@suse.com" date="1770984000">- CVE-2026-0990: call stack overflow leading to application crash
  due to infinite recursion in `xmlCatalogXMLResolveURI` (bsc#1256807, bsc#1256811)
  * Add patch libxml2-CVE-2026-0990.patch
- CVE-2026-0992: excessive resource consumption when processing XML
  catalogs due to exponential behavior when handling `&lt;nextCatalog&gt;` elements (bsc#1256808, bsc#1256809, bsc#1256812)
  * Add patch libxml2-CVE-2026-0992.patch
- CVE-2025-8732: infinite recursion in catalog parsing functions when processing malformed SGML catalog files (bsc#1247858, bsc#1247850)
  * Add patch libxml2-CVE-2025-8732.patch</changelog>
</package>
<package pkgid="80dd9451f391470fda8b1e02d45a683e550253eb2da9f051690b795069b07ad7" name="libxml2-2" arch="x86_64">
  <version epoch="0" ver="2.12.10" rel="150700.4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1684497600">- Update to version 2.11.4:
  + Fixes a serious regression: parser: Fix regression when push
    parsing UTF-8 sequences.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691582400">- Update to version 2.11.5:
  + Regressions:
  - parser: Make xmlSwitchEncoding always skip the BOM
  - autotools: Improve iconv check
  + Bug fixes:
  - valid: Fix c1-&gt;parent pointer in xmlCopyDocElementContent
  - encoding: Always call ucnv_convertEx with flush set to false
  + Portability: autotools: fix Python module file ext for
    cygwin/msys2
  + Tests: runtest: Fix compilation without LIBXML_HTML_ENABLED</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security fix: CVE-2023-39615 (bsc#1214768)
  * crafted xml can cause global buffer overflow
  * Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1698062400">- Add python312.patch to make it compatible with python 3.12
  https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/226
- Use pyproject_wheel and pyproject_install macros instead of
  python_build, python_install</changelog>
  <changelog author="david.anes@suse.com" date="1699876800">- Security fix: CVE-2023-45322 (bsc#1216129)
  * use-after-free in xmlUnlinkNode() in tree.c
  * Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700136000">- Update to version 2.11.6:
  * Regressions:
  - threads: Fix --with-thread-alloc
  - xinclude: Fix ‘last’ pointer in xmlXIncludeCopyNode
  * Bug fixes: parser: Fix potential use-after-free in
    xmlParseCharDataInternal</changelog>
  <changelog author="david.anes@suse.com" date="1700136001">- Removed patches (already in upstream):
  * libxml2-CVE-2023-39615.patch
  * libxml2-CVE-2023-45322.patch
  * libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch
  * python312.patch
- Update to 2.12.0:
  * Major changes:
  - Most of the known issues leading to quadratic behavior in the
    XML parser were fixed. Internal hash tables were rewritten to
    reduce memory consumption.
  - Starting with this release, it should be enough to add the
  - -with-legacy configuration option to provide maximum ABI
    compatibility.
  - libxml2 will now store global variables in thread-local
    storage if supported by the compiler. This avoids allocating
    the data lazily which can result in a fatal error condition.
  - A new API function xmlCheckThreadLocalStorage was added so the
    allocation can be checked earlier if compiler TLS is not
    supported.
  - To prepare for future improvements, some API functions now
    expect or return a const xmlError struct.
  - Several cyclic dependencies in public header files were fixed.
  - Refactoring of the encoding code has been mostly completed.
    Calling xmlSwitchEncoding from client code is now fully
    supported, for example to override the encoding for the push
    parser.
  - When parsing data from memory, libxml2 will now stream data
    chunk by chunk instead of copying the whole buffer (possibly
    twice with encodings), reducing peak memory consumption
    considerably.
  - A new API function xmlCtxtSetMaxAmplification was added to
    allow parsing of files that would otherwise trigger the
    billion laughs protection.
  - Several bugs in the regex determinism checks were fixed.
    Invalid XML Schemas which previous versions erroneously
    accepted will now be rejected.
  * Deprecations
  - globals: Deprecate xmlLastError
  - parser: Deprecate global parser options
  - win32: Deprecate old Windows build system
  * Bug fixes
  - parser: Stop switching to ISO-8859-1 on encoding errors
  - parser: Support encoded external PEs in entity values
  - string: Fix UTF-8 validation in xmlGetUTF8Char
  - SAX2: Allow multiple top-level elements
  - parser: Update line number after coalescing text nodes
  - parser: Check for truncated multi-byte sequences
  * See the full changelog here:
  - https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.12.0</changelog>
  <changelog author="david.anes@suse.com" date="1700222400">- Bring back a patch that was mistakenly removed in the last update.
  * Readded libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700827200">- Update to verson 2.12.1:
  * Regressions:
  - hash: Fix deletion of entries during scan
  - parser: Only enable SAX2 if there are SAX2 element handlers
  * Build fixes:
  - autotools: Stop checking for snprintf
  - dict: Fix '__thread' before 'static'
  - fix: pthread weak references in globals.c
  - tests: Fix build with older MSVC</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.12.2:
  * Regressions:
  - parser:
    . Fix invalid free in xmlParseBalancedChunkMemoryRecover
    . Make CRLF increment line number
  - globals: Disable TLS in static Windows builds
  - html: Reenable buggy detection of XML declarations
  - tree: Fix regression when copying DTDs
  * Build fixes
  - build: Disable compiler TLS by default
  - cmake: Update config.h.cmake.in
  - tests: Fix tests --with-valid --without-xinclude</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
  <changelog author="foss@grueninger.de" date="1713355200">- Update to version 2.12.6
  * Regressions
  - parser: Fix detection of duplicate attributes in XML namespace
  - xmlreader: Fix xmlTextReaderConstEncoding
  - html: Fix htmlCreatePushParserCtxt with encoding
  - xmllint: Return error code if XPath returns empty nodeset
- Update to version 2.12.5
  * Security
  - [CVE-2024-25062] xmlreader: Don't expand XIncludes when backtracking
  * Regressions
  - parser: Fix crash in xmlParseInNodeContext with HTML documents
- Update to version 2.12.4
  * Regressions
  - parser: Fix regression parsing standalone declarations
  - autotools: Readd --with-xptr-locs configuration option
  - parser: Fix build --without-output
  - parser: Don't grow or shrink pull parser memory buffers
  - io: Fix memory lifetime issue with input buffers
- Update to version 2.12.3
  * Regressions
  - parser: Fix namespaces redefined from default attributes
  * Build fixes
  - include: Rename XML_EMPTY helper macro
  - include: Move declaration of xmlInitGlobals
  - include: Add missing includes
  - include: Move globals from xmlsave.h to parser.h
  - include: Readd circular dependency between tree.h and parser.h
- Drop libxml2-CVE-2024-25062.patch as it is part of upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1715688000">- Update to version 2.12.7:
  + Fix buffer overread with `xmllint --htmlout` (CVE-2024-34459, bsc#1224282).
  + xmllint: Fix --pedantic option.
  + save: Handle invalid parent pointers in xhtmlNodeDumpOutput.</changelog>
  <changelog author="dimstar@opensuse.org" date="1718193600">- Update to version 2.12.8:
  + parser: Fix performance regression when parsing namespaces.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1721908800">- Update to version 2.12.9 [bsc#1234812]:
  + Security: (CVE-2024-40896) Fix XXE protection in downstream
    code.
  + Improvements: Undeprecate xmlKeepBlanksDefault.</changelog>
  <changelog author="pgajdos@suse.com" date="1731499200">- add %{?sle15allpythons} macro [jsc#PED-68]
- use %python_build and %python_install for 15</changelog>
  <changelog author="pgajdos@suse.com" date="1740052800">- version update to 2.12.10 ([bsc#1237363], [bsc#1237370], [bsc#1237418]):
  [#]## Security
  - [CVE-2025-24928] Fix stack-buffer-overflow in xmlSnprintfElements
  - [CVE-2024-56171] Fix use-after-free after xmlSchemaItemListAdd
  - pattern: Fix compilation of explicit child axis
  [#]## Regressions
  - parser: Fix detection of duplicate attributes
  [#]## Bug fixes
  - xpath: Fix parsing of non-ASCII names
  [#]## Portability
  - python: Declare init func with PyMODINIT_FUNC
  - tests: Fix sanitizer version check on old Apple clang
  [#]## Build
  - autotools: Set AC_CONFIG_AUX_DIR
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file
- Also CVE-2025-27113 was assigned to this release.</changelog>
  <changelog author="pgajdos@suse.com" date="1745409600">- security update
- added patches
  CVE-2025-32414 [bsc#1241551], out-of-bounds read when parsing text via the Python API
  + libxml2-CVE-2025-32414.patch
  CVE-2025-32415 [bsc#1241453], a crafted XML document may lead to a heap-based buffer under-read
  + libxml2-CVE-2025-32415.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751025600">- security update
- added patches
  CVE-2025-6170 [bsc#1244700], stack buffer overflow may lead to a crash
  CVE-2025-6021 [bsc#1244580], Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2
  + libxml2-CVE-2025-6170,6021.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751025601">- security update
- added patches
  CVE-2025-49794 [bsc#1244554], heap use after free (UAF) can lead to Denial of service (DoS)
  CVE-2025-49796 [bsc#1244557], type confusion may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49794,49796.patch
  CVE-2025-49795 [bsc#1244555], null pointer dereference may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49795.patch</changelog>
</package>
<package pkgid="9745d9fc5a0a580dcd2c5532b91e276e7132b7de34080b3a8ecad2dc7682bf01" name="libxml2-2" arch="x86_64">
  <version epoch="0" ver="2.12.10" rel="150700.4.6.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1691582400">- Update to version 2.11.5:
  + Regressions:
  - parser: Make xmlSwitchEncoding always skip the BOM
  - autotools: Improve iconv check
  + Bug fixes:
  - valid: Fix c1-&gt;parent pointer in xmlCopyDocElementContent
  - encoding: Always call ucnv_convertEx with flush set to false
  + Portability: autotools: fix Python module file ext for
    cygwin/msys2
  + Tests: runtest: Fix compilation without LIBXML_HTML_ENABLED</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security fix: CVE-2023-39615 (bsc#1214768)
  * crafted xml can cause global buffer overflow
  * Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1698062400">- Add python312.patch to make it compatible with python 3.12
  https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/226
- Use pyproject_wheel and pyproject_install macros instead of
  python_build, python_install</changelog>
  <changelog author="david.anes@suse.com" date="1699876800">- Security fix: CVE-2023-45322 (bsc#1216129)
  * use-after-free in xmlUnlinkNode() in tree.c
  * Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700136000">- Update to version 2.11.6:
  * Regressions:
  - threads: Fix --with-thread-alloc
  - xinclude: Fix ‘last’ pointer in xmlXIncludeCopyNode
  * Bug fixes: parser: Fix potential use-after-free in
    xmlParseCharDataInternal</changelog>
  <changelog author="david.anes@suse.com" date="1700136001">- Removed patches (already in upstream):
  * libxml2-CVE-2023-39615.patch
  * libxml2-CVE-2023-45322.patch
  * libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch
  * python312.patch
- Update to 2.12.0:
  * Major changes:
  - Most of the known issues leading to quadratic behavior in the
    XML parser were fixed. Internal hash tables were rewritten to
    reduce memory consumption.
  - Starting with this release, it should be enough to add the
  - -with-legacy configuration option to provide maximum ABI
    compatibility.
  - libxml2 will now store global variables in thread-local
    storage if supported by the compiler. This avoids allocating
    the data lazily which can result in a fatal error condition.
  - A new API function xmlCheckThreadLocalStorage was added so the
    allocation can be checked earlier if compiler TLS is not
    supported.
  - To prepare for future improvements, some API functions now
    expect or return a const xmlError struct.
  - Several cyclic dependencies in public header files were fixed.
  - Refactoring of the encoding code has been mostly completed.
    Calling xmlSwitchEncoding from client code is now fully
    supported, for example to override the encoding for the push
    parser.
  - When parsing data from memory, libxml2 will now stream data
    chunk by chunk instead of copying the whole buffer (possibly
    twice with encodings), reducing peak memory consumption
    considerably.
  - A new API function xmlCtxtSetMaxAmplification was added to
    allow parsing of files that would otherwise trigger the
    billion laughs protection.
  - Several bugs in the regex determinism checks were fixed.
    Invalid XML Schemas which previous versions erroneously
    accepted will now be rejected.
  * Deprecations
  - globals: Deprecate xmlLastError
  - parser: Deprecate global parser options
  - win32: Deprecate old Windows build system
  * Bug fixes
  - parser: Stop switching to ISO-8859-1 on encoding errors
  - parser: Support encoded external PEs in entity values
  - string: Fix UTF-8 validation in xmlGetUTF8Char
  - SAX2: Allow multiple top-level elements
  - parser: Update line number after coalescing text nodes
  - parser: Check for truncated multi-byte sequences
  * See the full changelog here:
  - https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.12.0</changelog>
  <changelog author="david.anes@suse.com" date="1700222400">- Bring back a patch that was mistakenly removed in the last update.
  * Readded libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700827200">- Update to verson 2.12.1:
  * Regressions:
  - hash: Fix deletion of entries during scan
  - parser: Only enable SAX2 if there are SAX2 element handlers
  * Build fixes:
  - autotools: Stop checking for snprintf
  - dict: Fix '__thread' before 'static'
  - fix: pthread weak references in globals.c
  - tests: Fix build with older MSVC</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.12.2:
  * Regressions:
  - parser:
    . Fix invalid free in xmlParseBalancedChunkMemoryRecover
    . Make CRLF increment line number
  - globals: Disable TLS in static Windows builds
  - html: Reenable buggy detection of XML declarations
  - tree: Fix regression when copying DTDs
  * Build fixes
  - build: Disable compiler TLS by default
  - cmake: Update config.h.cmake.in
  - tests: Fix tests --with-valid --without-xinclude</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
  <changelog author="foss@grueninger.de" date="1713355200">- Update to version 2.12.6
  * Regressions
  - parser: Fix detection of duplicate attributes in XML namespace
  - xmlreader: Fix xmlTextReaderConstEncoding
  - html: Fix htmlCreatePushParserCtxt with encoding
  - xmllint: Return error code if XPath returns empty nodeset
- Update to version 2.12.5
  * Security
  - [CVE-2024-25062] xmlreader: Don't expand XIncludes when backtracking
  * Regressions
  - parser: Fix crash in xmlParseInNodeContext with HTML documents
- Update to version 2.12.4
  * Regressions
  - parser: Fix regression parsing standalone declarations
  - autotools: Readd --with-xptr-locs configuration option
  - parser: Fix build --without-output
  - parser: Don't grow or shrink pull parser memory buffers
  - io: Fix memory lifetime issue with input buffers
- Update to version 2.12.3
  * Regressions
  - parser: Fix namespaces redefined from default attributes
  * Build fixes
  - include: Rename XML_EMPTY helper macro
  - include: Move declaration of xmlInitGlobals
  - include: Add missing includes
  - include: Move globals from xmlsave.h to parser.h
  - include: Readd circular dependency between tree.h and parser.h
- Drop libxml2-CVE-2024-25062.patch as it is part of upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1715688000">- Update to version 2.12.7:
  + Fix buffer overread with `xmllint --htmlout` (CVE-2024-34459, bsc#1224282).
  + xmllint: Fix --pedantic option.
  + save: Handle invalid parent pointers in xhtmlNodeDumpOutput.</changelog>
  <changelog author="dimstar@opensuse.org" date="1718193600">- Update to version 2.12.8:
  + parser: Fix performance regression when parsing namespaces.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1721908800">- Update to version 2.12.9 [bsc#1234812]:
  + Security: (CVE-2024-40896) Fix XXE protection in downstream
    code.
  + Improvements: Undeprecate xmlKeepBlanksDefault.</changelog>
  <changelog author="pgajdos@suse.com" date="1731499200">- add %{?sle15allpythons} macro [jsc#PED-68]
- use %python_build and %python_install for 15</changelog>
  <changelog author="pgajdos@suse.com" date="1740052800">- version update to 2.12.10 ([bsc#1237363], [bsc#1237370], [bsc#1237418]):
  [#]## Security
  - [CVE-2025-24928] Fix stack-buffer-overflow in xmlSnprintfElements
  - [CVE-2024-56171] Fix use-after-free after xmlSchemaItemListAdd
  - pattern: Fix compilation of explicit child axis
  [#]## Regressions
  - parser: Fix detection of duplicate attributes
  [#]## Bug fixes
  - xpath: Fix parsing of non-ASCII names
  [#]## Portability
  - python: Declare init func with PyMODINIT_FUNC
  - tests: Fix sanitizer version check on old Apple clang
  [#]## Build
  - autotools: Set AC_CONFIG_AUX_DIR
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file
- Also CVE-2025-27113 was assigned to this release.</changelog>
  <changelog author="pgajdos@suse.com" date="1745409600">- security update
- added patches
  CVE-2025-32414 [bsc#1241551], out-of-bounds read when parsing text via the Python API
  + libxml2-CVE-2025-32414.patch
  CVE-2025-32415 [bsc#1241453], a crafted XML document may lead to a heap-based buffer under-read
  + libxml2-CVE-2025-32415.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751025600">- security update
- added patches
  CVE-2025-6170 [bsc#1244700], stack buffer overflow may lead to a crash
  CVE-2025-6021 [bsc#1244580], Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2
  + libxml2-CVE-2025-6170,6021.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751025601">- security update
- added patches
  CVE-2025-49794 [bsc#1244554], heap use after free (UAF) can lead to Denial of service (DoS)
  CVE-2025-49796 [bsc#1244557], type confusion may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49794,49796.patch
  CVE-2025-49795 [bsc#1244555], null pointer dereference may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49795.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1752840000">- security update
- added patches
  CVE-2025-7425 [bsc#1246296], Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr
  + libxml2-CVE-2025-7425.patch</changelog>
</package>
<package pkgid="78e37485b051494af235a98553c121d07f3b296433caebb7fabaed3a2302a5ef" name="libxml2-2-32bit" arch="x86_64">
  <version epoch="0" ver="2.12.10" rel="150700.4.11.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1700136000">- Update to version 2.11.6:
  * Regressions:
  - threads: Fix --with-thread-alloc
  - xinclude: Fix ‘last’ pointer in xmlXIncludeCopyNode
  * Bug fixes: parser: Fix potential use-after-free in
    xmlParseCharDataInternal</changelog>
  <changelog author="david.anes@suse.com" date="1700136001">- Removed patches (already in upstream):
  * libxml2-CVE-2023-39615.patch
  * libxml2-CVE-2023-45322.patch
  * libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch
  * python312.patch
- Update to 2.12.0:
  * Major changes:
  - Most of the known issues leading to quadratic behavior in the
    XML parser were fixed. Internal hash tables were rewritten to
    reduce memory consumption.
  - Starting with this release, it should be enough to add the
  - -with-legacy configuration option to provide maximum ABI
    compatibility.
  - libxml2 will now store global variables in thread-local
    storage if supported by the compiler. This avoids allocating
    the data lazily which can result in a fatal error condition.
  - A new API function xmlCheckThreadLocalStorage was added so the
    allocation can be checked earlier if compiler TLS is not
    supported.
  - To prepare for future improvements, some API functions now
    expect or return a const xmlError struct.
  - Several cyclic dependencies in public header files were fixed.
  - Refactoring of the encoding code has been mostly completed.
    Calling xmlSwitchEncoding from client code is now fully
    supported, for example to override the encoding for the push
    parser.
  - When parsing data from memory, libxml2 will now stream data
    chunk by chunk instead of copying the whole buffer (possibly
    twice with encodings), reducing peak memory consumption
    considerably.
  - A new API function xmlCtxtSetMaxAmplification was added to
    allow parsing of files that would otherwise trigger the
    billion laughs protection.
  - Several bugs in the regex determinism checks were fixed.
    Invalid XML Schemas which previous versions erroneously
    accepted will now be rejected.
  * Deprecations
  - globals: Deprecate xmlLastError
  - parser: Deprecate global parser options
  - win32: Deprecate old Windows build system
  * Bug fixes
  - parser: Stop switching to ISO-8859-1 on encoding errors
  - parser: Support encoded external PEs in entity values
  - string: Fix UTF-8 validation in xmlGetUTF8Char
  - SAX2: Allow multiple top-level elements
  - parser: Update line number after coalescing text nodes
  - parser: Check for truncated multi-byte sequences
  * See the full changelog here:
  - https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.12.0</changelog>
  <changelog author="david.anes@suse.com" date="1700222400">- Bring back a patch that was mistakenly removed in the last update.
  * Readded libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700827200">- Update to verson 2.12.1:
  * Regressions:
  - hash: Fix deletion of entries during scan
  - parser: Only enable SAX2 if there are SAX2 element handlers
  * Build fixes:
  - autotools: Stop checking for snprintf
  - dict: Fix '__thread' before 'static'
  - fix: pthread weak references in globals.c
  - tests: Fix build with older MSVC</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.12.2:
  * Regressions:
  - parser:
    . Fix invalid free in xmlParseBalancedChunkMemoryRecover
    . Make CRLF increment line number
  - globals: Disable TLS in static Windows builds
  - html: Reenable buggy detection of XML declarations
  - tree: Fix regression when copying DTDs
  * Build fixes
  - build: Disable compiler TLS by default
  - cmake: Update config.h.cmake.in
  - tests: Fix tests --with-valid --without-xinclude</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
  <changelog author="foss@grueninger.de" date="1713355200">- Update to version 2.12.6
  * Regressions
  - parser: Fix detection of duplicate attributes in XML namespace
  - xmlreader: Fix xmlTextReaderConstEncoding
  - html: Fix htmlCreatePushParserCtxt with encoding
  - xmllint: Return error code if XPath returns empty nodeset
- Update to version 2.12.5
  * Security
  - [CVE-2024-25062] xmlreader: Don't expand XIncludes when backtracking
  * Regressions
  - parser: Fix crash in xmlParseInNodeContext with HTML documents
- Update to version 2.12.4
  * Regressions
  - parser: Fix regression parsing standalone declarations
  - autotools: Readd --with-xptr-locs configuration option
  - parser: Fix build --without-output
  - parser: Don't grow or shrink pull parser memory buffers
  - io: Fix memory lifetime issue with input buffers
- Update to version 2.12.3
  * Regressions
  - parser: Fix namespaces redefined from default attributes
  * Build fixes
  - include: Rename XML_EMPTY helper macro
  - include: Move declaration of xmlInitGlobals
  - include: Add missing includes
  - include: Move globals from xmlsave.h to parser.h
  - include: Readd circular dependency between tree.h and parser.h
- Drop libxml2-CVE-2024-25062.patch as it is part of upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1715688000">- Update to version 2.12.7:
  + Fix buffer overread with `xmllint --htmlout` (CVE-2024-34459, bsc#1224282).
  + xmllint: Fix --pedantic option.
  + save: Handle invalid parent pointers in xhtmlNodeDumpOutput.</changelog>
  <changelog author="dimstar@opensuse.org" date="1718193600">- Update to version 2.12.8:
  + parser: Fix performance regression when parsing namespaces.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1721908800">- Update to version 2.12.9 [bsc#1234812]:
  + Security: (CVE-2024-40896) Fix XXE protection in downstream
    code.
  + Improvements: Undeprecate xmlKeepBlanksDefault.</changelog>
  <changelog author="pgajdos@suse.com" date="1731499200">- add %{?sle15allpythons} macro [jsc#PED-68]
- use %python_build and %python_install for 15</changelog>
  <changelog author="pgajdos@suse.com" date="1740052800">- version update to 2.12.10 ([bsc#1237363], [bsc#1237370], [bsc#1237418]):
  [#]## Security
  - [CVE-2025-24928] Fix stack-buffer-overflow in xmlSnprintfElements
  - [CVE-2024-56171] Fix use-after-free after xmlSchemaItemListAdd
  - pattern: Fix compilation of explicit child axis
  [#]## Regressions
  - parser: Fix detection of duplicate attributes
  [#]## Bug fixes
  - xpath: Fix parsing of non-ASCII names
  [#]## Portability
  - python: Declare init func with PyMODINIT_FUNC
  - tests: Fix sanitizer version check on old Apple clang
  [#]## Build
  - autotools: Set AC_CONFIG_AUX_DIR
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file
- Also CVE-2025-27113 was assigned to this release.</changelog>
  <changelog author="pgajdos@suse.com" date="1745409600">- security update
- added patches
  CVE-2025-32414 [bsc#1241551], out-of-bounds read when parsing text via the Python API
  + libxml2-CVE-2025-32414.patch
  CVE-2025-32415 [bsc#1241453], a crafted XML document may lead to a heap-based buffer under-read
  + libxml2-CVE-2025-32415.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751025600">- security update
- added patches
  CVE-2025-6170 [bsc#1244700], stack buffer overflow may lead to a crash
  CVE-2025-6021 [bsc#1244580], Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2
  + libxml2-CVE-2025-6170,6021.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751025601">- security update
- added patches
  CVE-2025-49794 [bsc#1244554], heap use after free (UAF) can lead to Denial of service (DoS)
  CVE-2025-49796 [bsc#1244557], type confusion may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49794,49796.patch
  CVE-2025-49795 [bsc#1244555], null pointer dereference may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49795.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1752840000">- security update
- added patches
  CVE-2025-7425 [bsc#1246296], Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr
  + libxml2-CVE-2025-7425.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1768996800">- CVE-2026-0989: call stack exhaustion leading to application crash
  due to RelaxNG parser not limiting the recursion depth when
  resolving `&lt;include&gt;` directives (bsc#1256804, bsc#1256805, bsc#1256810)
  * Add patch libxml2-CVE-2026-0989.patch
  * https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/374</changelog>
  <changelog author="pgajdos@suse.com" date="1770206400">- CVE-2025-10911: use-after-free with key data stored cross-RVT (bsc#1250553)
  * Add patch libxml2-CVE-2025-10911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770206401">- CVE-2026-1757: memory leak in the `xmllint` interactive shell (bsc#1257593, bsc#1257594, bsc#1257595)
  * Add patch libxml2-CVE-2026-1757.patch</changelog>
  <changelog author="david.anes@suse.com" date="1770984000">- CVE-2026-0990: call stack overflow leading to application crash
  due to infinite recursion in `xmlCatalogXMLResolveURI` (bsc#1256807, bsc#1256811)
  * Add patch libxml2-CVE-2026-0990.patch
- CVE-2026-0992: excessive resource consumption when processing XML
  catalogs due to exponential behavior when handling `&lt;nextCatalog&gt;` elements (bsc#1256808, bsc#1256809, bsc#1256812)
  * Add patch libxml2-CVE-2026-0992.patch
- CVE-2025-8732: infinite recursion in catalog parsing functions when processing malformed SGML catalog files (bsc#1247858, bsc#1247850)
  * Add patch libxml2-CVE-2025-8732.patch</changelog>
</package>
<package pkgid="1e0ee02a90a8a56a2f141b81c86a4905c6956d1a76768f17695a5cab7df399b8" name="libxml2-2-32bit" arch="x86_64">
  <version epoch="0" ver="2.12.10" rel="150700.4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1684497600">- Update to version 2.11.4:
  + Fixes a serious regression: parser: Fix regression when push
    parsing UTF-8 sequences.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691582400">- Update to version 2.11.5:
  + Regressions:
  - parser: Make xmlSwitchEncoding always skip the BOM
  - autotools: Improve iconv check
  + Bug fixes:
  - valid: Fix c1-&gt;parent pointer in xmlCopyDocElementContent
  - encoding: Always call ucnv_convertEx with flush set to false
  + Portability: autotools: fix Python module file ext for
    cygwin/msys2
  + Tests: runtest: Fix compilation without LIBXML_HTML_ENABLED</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security fix: CVE-2023-39615 (bsc#1214768)
  * crafted xml can cause global buffer overflow
  * Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1698062400">- Add python312.patch to make it compatible with python 3.12
  https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/226
- Use pyproject_wheel and pyproject_install macros instead of
  python_build, python_install</changelog>
  <changelog author="david.anes@suse.com" date="1699876800">- Security fix: CVE-2023-45322 (bsc#1216129)
  * use-after-free in xmlUnlinkNode() in tree.c
  * Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700136000">- Update to version 2.11.6:
  * Regressions:
  - threads: Fix --with-thread-alloc
  - xinclude: Fix ‘last’ pointer in xmlXIncludeCopyNode
  * Bug fixes: parser: Fix potential use-after-free in
    xmlParseCharDataInternal</changelog>
  <changelog author="david.anes@suse.com" date="1700136001">- Removed patches (already in upstream):
  * libxml2-CVE-2023-39615.patch
  * libxml2-CVE-2023-45322.patch
  * libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch
  * python312.patch
- Update to 2.12.0:
  * Major changes:
  - Most of the known issues leading to quadratic behavior in the
    XML parser were fixed. Internal hash tables were rewritten to
    reduce memory consumption.
  - Starting with this release, it should be enough to add the
  - -with-legacy configuration option to provide maximum ABI
    compatibility.
  - libxml2 will now store global variables in thread-local
    storage if supported by the compiler. This avoids allocating
    the data lazily which can result in a fatal error condition.
  - A new API function xmlCheckThreadLocalStorage was added so the
    allocation can be checked earlier if compiler TLS is not
    supported.
  - To prepare for future improvements, some API functions now
    expect or return a const xmlError struct.
  - Several cyclic dependencies in public header files were fixed.
  - Refactoring of the encoding code has been mostly completed.
    Calling xmlSwitchEncoding from client code is now fully
    supported, for example to override the encoding for the push
    parser.
  - When parsing data from memory, libxml2 will now stream data
    chunk by chunk instead of copying the whole buffer (possibly
    twice with encodings), reducing peak memory consumption
    considerably.
  - A new API function xmlCtxtSetMaxAmplification was added to
    allow parsing of files that would otherwise trigger the
    billion laughs protection.
  - Several bugs in the regex determinism checks were fixed.
    Invalid XML Schemas which previous versions erroneously
    accepted will now be rejected.
  * Deprecations
  - globals: Deprecate xmlLastError
  - parser: Deprecate global parser options
  - win32: Deprecate old Windows build system
  * Bug fixes
  - parser: Stop switching to ISO-8859-1 on encoding errors
  - parser: Support encoded external PEs in entity values
  - string: Fix UTF-8 validation in xmlGetUTF8Char
  - SAX2: Allow multiple top-level elements
  - parser: Update line number after coalescing text nodes
  - parser: Check for truncated multi-byte sequences
  * See the full changelog here:
  - https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.12.0</changelog>
  <changelog author="david.anes@suse.com" date="1700222400">- Bring back a patch that was mistakenly removed in the last update.
  * Readded libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700827200">- Update to verson 2.12.1:
  * Regressions:
  - hash: Fix deletion of entries during scan
  - parser: Only enable SAX2 if there are SAX2 element handlers
  * Build fixes:
  - autotools: Stop checking for snprintf
  - dict: Fix '__thread' before 'static'
  - fix: pthread weak references in globals.c
  - tests: Fix build with older MSVC</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.12.2:
  * Regressions:
  - parser:
    . Fix invalid free in xmlParseBalancedChunkMemoryRecover
    . Make CRLF increment line number
  - globals: Disable TLS in static Windows builds
  - html: Reenable buggy detection of XML declarations
  - tree: Fix regression when copying DTDs
  * Build fixes
  - build: Disable compiler TLS by default
  - cmake: Update config.h.cmake.in
  - tests: Fix tests --with-valid --without-xinclude</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
  <changelog author="foss@grueninger.de" date="1713355200">- Update to version 2.12.6
  * Regressions
  - parser: Fix detection of duplicate attributes in XML namespace
  - xmlreader: Fix xmlTextReaderConstEncoding
  - html: Fix htmlCreatePushParserCtxt with encoding
  - xmllint: Return error code if XPath returns empty nodeset
- Update to version 2.12.5
  * Security
  - [CVE-2024-25062] xmlreader: Don't expand XIncludes when backtracking
  * Regressions
  - parser: Fix crash in xmlParseInNodeContext with HTML documents
- Update to version 2.12.4
  * Regressions
  - parser: Fix regression parsing standalone declarations
  - autotools: Readd --with-xptr-locs configuration option
  - parser: Fix build --without-output
  - parser: Don't grow or shrink pull parser memory buffers
  - io: Fix memory lifetime issue with input buffers
- Update to version 2.12.3
  * Regressions
  - parser: Fix namespaces redefined from default attributes
  * Build fixes
  - include: Rename XML_EMPTY helper macro
  - include: Move declaration of xmlInitGlobals
  - include: Add missing includes
  - include: Move globals from xmlsave.h to parser.h
  - include: Readd circular dependency between tree.h and parser.h
- Drop libxml2-CVE-2024-25062.patch as it is part of upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1715688000">- Update to version 2.12.7:
  + Fix buffer overread with `xmllint --htmlout` (CVE-2024-34459, bsc#1224282).
  + xmllint: Fix --pedantic option.
  + save: Handle invalid parent pointers in xhtmlNodeDumpOutput.</changelog>
  <changelog author="dimstar@opensuse.org" date="1718193600">- Update to version 2.12.8:
  + parser: Fix performance regression when parsing namespaces.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1721908800">- Update to version 2.12.9 [bsc#1234812]:
  + Security: (CVE-2024-40896) Fix XXE protection in downstream
    code.
  + Improvements: Undeprecate xmlKeepBlanksDefault.</changelog>
  <changelog author="pgajdos@suse.com" date="1731499200">- add %{?sle15allpythons} macro [jsc#PED-68]
- use %python_build and %python_install for 15</changelog>
  <changelog author="pgajdos@suse.com" date="1740052800">- version update to 2.12.10 ([bsc#1237363], [bsc#1237370], [bsc#1237418]):
  [#]## Security
  - [CVE-2025-24928] Fix stack-buffer-overflow in xmlSnprintfElements
  - [CVE-2024-56171] Fix use-after-free after xmlSchemaItemListAdd
  - pattern: Fix compilation of explicit child axis
  [#]## Regressions
  - parser: Fix detection of duplicate attributes
  [#]## Bug fixes
  - xpath: Fix parsing of non-ASCII names
  [#]## Portability
  - python: Declare init func with PyMODINIT_FUNC
  - tests: Fix sanitizer version check on old Apple clang
  [#]## Build
  - autotools: Set AC_CONFIG_AUX_DIR
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file
- Also CVE-2025-27113 was assigned to this release.</changelog>
  <changelog author="pgajdos@suse.com" date="1745409600">- security update
- added patches
  CVE-2025-32414 [bsc#1241551], out-of-bounds read when parsing text via the Python API
  + libxml2-CVE-2025-32414.patch
  CVE-2025-32415 [bsc#1241453], a crafted XML document may lead to a heap-based buffer under-read
  + libxml2-CVE-2025-32415.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751025600">- security update
- added patches
  CVE-2025-6170 [bsc#1244700], stack buffer overflow may lead to a crash
  CVE-2025-6021 [bsc#1244580], Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2
  + libxml2-CVE-2025-6170,6021.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751025601">- security update
- added patches
  CVE-2025-49794 [bsc#1244554], heap use after free (UAF) can lead to Denial of service (DoS)
  CVE-2025-49796 [bsc#1244557], type confusion may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49794,49796.patch
  CVE-2025-49795 [bsc#1244555], null pointer dereference may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49795.patch</changelog>
</package>
<package pkgid="c5477f5f60e12ae48a4bd5451979a8f2dbb7e59ed3931e58ed55bff4ef9fd8df" name="libxml2-2-32bit" arch="x86_64">
  <version epoch="0" ver="2.12.10" rel="150700.4.6.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1691582400">- Update to version 2.11.5:
  + Regressions:
  - parser: Make xmlSwitchEncoding always skip the BOM
  - autotools: Improve iconv check
  + Bug fixes:
  - valid: Fix c1-&gt;parent pointer in xmlCopyDocElementContent
  - encoding: Always call ucnv_convertEx with flush set to false
  + Portability: autotools: fix Python module file ext for
    cygwin/msys2
  + Tests: runtest: Fix compilation without LIBXML_HTML_ENABLED</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security fix: CVE-2023-39615 (bsc#1214768)
  * crafted xml can cause global buffer overflow
  * Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1698062400">- Add python312.patch to make it compatible with python 3.12
  https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/226
- Use pyproject_wheel and pyproject_install macros instead of
  python_build, python_install</changelog>
  <changelog author="david.anes@suse.com" date="1699876800">- Security fix: CVE-2023-45322 (bsc#1216129)
  * use-after-free in xmlUnlinkNode() in tree.c
  * Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700136000">- Update to version 2.11.6:
  * Regressions:
  - threads: Fix --with-thread-alloc
  - xinclude: Fix ‘last’ pointer in xmlXIncludeCopyNode
  * Bug fixes: parser: Fix potential use-after-free in
    xmlParseCharDataInternal</changelog>
  <changelog author="david.anes@suse.com" date="1700136001">- Removed patches (already in upstream):
  * libxml2-CVE-2023-39615.patch
  * libxml2-CVE-2023-45322.patch
  * libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch
  * python312.patch
- Update to 2.12.0:
  * Major changes:
  - Most of the known issues leading to quadratic behavior in the
    XML parser were fixed. Internal hash tables were rewritten to
    reduce memory consumption.
  - Starting with this release, it should be enough to add the
  - -with-legacy configuration option to provide maximum ABI
    compatibility.
  - libxml2 will now store global variables in thread-local
    storage if supported by the compiler. This avoids allocating
    the data lazily which can result in a fatal error condition.
  - A new API function xmlCheckThreadLocalStorage was added so the
    allocation can be checked earlier if compiler TLS is not
    supported.
  - To prepare for future improvements, some API functions now
    expect or return a const xmlError struct.
  - Several cyclic dependencies in public header files were fixed.
  - Refactoring of the encoding code has been mostly completed.
    Calling xmlSwitchEncoding from client code is now fully
    supported, for example to override the encoding for the push
    parser.
  - When parsing data from memory, libxml2 will now stream data
    chunk by chunk instead of copying the whole buffer (possibly
    twice with encodings), reducing peak memory consumption
    considerably.
  - A new API function xmlCtxtSetMaxAmplification was added to
    allow parsing of files that would otherwise trigger the
    billion laughs protection.
  - Several bugs in the regex determinism checks were fixed.
    Invalid XML Schemas which previous versions erroneously
    accepted will now be rejected.
  * Deprecations
  - globals: Deprecate xmlLastError
  - parser: Deprecate global parser options
  - win32: Deprecate old Windows build system
  * Bug fixes
  - parser: Stop switching to ISO-8859-1 on encoding errors
  - parser: Support encoded external PEs in entity values
  - string: Fix UTF-8 validation in xmlGetUTF8Char
  - SAX2: Allow multiple top-level elements
  - parser: Update line number after coalescing text nodes
  - parser: Check for truncated multi-byte sequences
  * See the full changelog here:
  - https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.12.0</changelog>
  <changelog author="david.anes@suse.com" date="1700222400">- Bring back a patch that was mistakenly removed in the last update.
  * Readded libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700827200">- Update to verson 2.12.1:
  * Regressions:
  - hash: Fix deletion of entries during scan
  - parser: Only enable SAX2 if there are SAX2 element handlers
  * Build fixes:
  - autotools: Stop checking for snprintf
  - dict: Fix '__thread' before 'static'
  - fix: pthread weak references in globals.c
  - tests: Fix build with older MSVC</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.12.2:
  * Regressions:
  - parser:
    . Fix invalid free in xmlParseBalancedChunkMemoryRecover
    . Make CRLF increment line number
  - globals: Disable TLS in static Windows builds
  - html: Reenable buggy detection of XML declarations
  - tree: Fix regression when copying DTDs
  * Build fixes
  - build: Disable compiler TLS by default
  - cmake: Update config.h.cmake.in
  - tests: Fix tests --with-valid --without-xinclude</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
  <changelog author="foss@grueninger.de" date="1713355200">- Update to version 2.12.6
  * Regressions
  - parser: Fix detection of duplicate attributes in XML namespace
  - xmlreader: Fix xmlTextReaderConstEncoding
  - html: Fix htmlCreatePushParserCtxt with encoding
  - xmllint: Return error code if XPath returns empty nodeset
- Update to version 2.12.5
  * Security
  - [CVE-2024-25062] xmlreader: Don't expand XIncludes when backtracking
  * Regressions
  - parser: Fix crash in xmlParseInNodeContext with HTML documents
- Update to version 2.12.4
  * Regressions
  - parser: Fix regression parsing standalone declarations
  - autotools: Readd --with-xptr-locs configuration option
  - parser: Fix build --without-output
  - parser: Don't grow or shrink pull parser memory buffers
  - io: Fix memory lifetime issue with input buffers
- Update to version 2.12.3
  * Regressions
  - parser: Fix namespaces redefined from default attributes
  * Build fixes
  - include: Rename XML_EMPTY helper macro
  - include: Move declaration of xmlInitGlobals
  - include: Add missing includes
  - include: Move globals from xmlsave.h to parser.h
  - include: Readd circular dependency between tree.h and parser.h
- Drop libxml2-CVE-2024-25062.patch as it is part of upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1715688000">- Update to version 2.12.7:
  + Fix buffer overread with `xmllint --htmlout` (CVE-2024-34459, bsc#1224282).
  + xmllint: Fix --pedantic option.
  + save: Handle invalid parent pointers in xhtmlNodeDumpOutput.</changelog>
  <changelog author="dimstar@opensuse.org" date="1718193600">- Update to version 2.12.8:
  + parser: Fix performance regression when parsing namespaces.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1721908800">- Update to version 2.12.9 [bsc#1234812]:
  + Security: (CVE-2024-40896) Fix XXE protection in downstream
    code.
  + Improvements: Undeprecate xmlKeepBlanksDefault.</changelog>
  <changelog author="pgajdos@suse.com" date="1731499200">- add %{?sle15allpythons} macro [jsc#PED-68]
- use %python_build and %python_install for 15</changelog>
  <changelog author="pgajdos@suse.com" date="1740052800">- version update to 2.12.10 ([bsc#1237363], [bsc#1237370], [bsc#1237418]):
  [#]## Security
  - [CVE-2025-24928] Fix stack-buffer-overflow in xmlSnprintfElements
  - [CVE-2024-56171] Fix use-after-free after xmlSchemaItemListAdd
  - pattern: Fix compilation of explicit child axis
  [#]## Regressions
  - parser: Fix detection of duplicate attributes
  [#]## Bug fixes
  - xpath: Fix parsing of non-ASCII names
  [#]## Portability
  - python: Declare init func with PyMODINIT_FUNC
  - tests: Fix sanitizer version check on old Apple clang
  [#]## Build
  - autotools: Set AC_CONFIG_AUX_DIR
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file
- Also CVE-2025-27113 was assigned to this release.</changelog>
  <changelog author="pgajdos@suse.com" date="1745409600">- security update
- added patches
  CVE-2025-32414 [bsc#1241551], out-of-bounds read when parsing text via the Python API
  + libxml2-CVE-2025-32414.patch
  CVE-2025-32415 [bsc#1241453], a crafted XML document may lead to a heap-based buffer under-read
  + libxml2-CVE-2025-32415.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751025600">- security update
- added patches
  CVE-2025-6170 [bsc#1244700], stack buffer overflow may lead to a crash
  CVE-2025-6021 [bsc#1244580], Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2
  + libxml2-CVE-2025-6170,6021.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751025601">- security update
- added patches
  CVE-2025-49794 [bsc#1244554], heap use after free (UAF) can lead to Denial of service (DoS)
  CVE-2025-49796 [bsc#1244557], type confusion may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49794,49796.patch
  CVE-2025-49795 [bsc#1244555], null pointer dereference may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49795.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1752840000">- security update
- added patches
  CVE-2025-7425 [bsc#1246296], Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr
  + libxml2-CVE-2025-7425.patch</changelog>
</package>
<package pkgid="03d9cd032b91abdaeb514cf741609fd1affae2e0d5cb7c1d4de4d9a7554d9c52" name="libxml2" arch="src">
  <version epoch="0" ver="2.12.10" rel="150700.4.11.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1700136000">- Update to version 2.11.6:
  * Regressions:
  - threads: Fix --with-thread-alloc
  - xinclude: Fix ‘last’ pointer in xmlXIncludeCopyNode
  * Bug fixes: parser: Fix potential use-after-free in
    xmlParseCharDataInternal</changelog>
  <changelog author="david.anes@suse.com" date="1700136001">- Removed patches (already in upstream):
  * libxml2-CVE-2023-39615.patch
  * libxml2-CVE-2023-45322.patch
  * libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch
  * python312.patch
- Update to 2.12.0:
  * Major changes:
  - Most of the known issues leading to quadratic behavior in the
    XML parser were fixed. Internal hash tables were rewritten to
    reduce memory consumption.
  - Starting with this release, it should be enough to add the
  - -with-legacy configuration option to provide maximum ABI
    compatibility.
  - libxml2 will now store global variables in thread-local
    storage if supported by the compiler. This avoids allocating
    the data lazily which can result in a fatal error condition.
  - A new API function xmlCheckThreadLocalStorage was added so the
    allocation can be checked earlier if compiler TLS is not
    supported.
  - To prepare for future improvements, some API functions now
    expect or return a const xmlError struct.
  - Several cyclic dependencies in public header files were fixed.
  - Refactoring of the encoding code has been mostly completed.
    Calling xmlSwitchEncoding from client code is now fully
    supported, for example to override the encoding for the push
    parser.
  - When parsing data from memory, libxml2 will now stream data
    chunk by chunk instead of copying the whole buffer (possibly
    twice with encodings), reducing peak memory consumption
    considerably.
  - A new API function xmlCtxtSetMaxAmplification was added to
    allow parsing of files that would otherwise trigger the
    billion laughs protection.
  - Several bugs in the regex determinism checks were fixed.
    Invalid XML Schemas which previous versions erroneously
    accepted will now be rejected.
  * Deprecations
  - globals: Deprecate xmlLastError
  - parser: Deprecate global parser options
  - win32: Deprecate old Windows build system
  * Bug fixes
  - parser: Stop switching to ISO-8859-1 on encoding errors
  - parser: Support encoded external PEs in entity values
  - string: Fix UTF-8 validation in xmlGetUTF8Char
  - SAX2: Allow multiple top-level elements
  - parser: Update line number after coalescing text nodes
  - parser: Check for truncated multi-byte sequences
  * See the full changelog here:
  - https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.12.0</changelog>
  <changelog author="david.anes@suse.com" date="1700222400">- Bring back a patch that was mistakenly removed in the last update.
  * Readded libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700827200">- Update to verson 2.12.1:
  * Regressions:
  - hash: Fix deletion of entries during scan
  - parser: Only enable SAX2 if there are SAX2 element handlers
  * Build fixes:
  - autotools: Stop checking for snprintf
  - dict: Fix '__thread' before 'static'
  - fix: pthread weak references in globals.c
  - tests: Fix build with older MSVC</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.12.2:
  * Regressions:
  - parser:
    . Fix invalid free in xmlParseBalancedChunkMemoryRecover
    . Make CRLF increment line number
  - globals: Disable TLS in static Windows builds
  - html: Reenable buggy detection of XML declarations
  - tree: Fix regression when copying DTDs
  * Build fixes
  - build: Disable compiler TLS by default
  - cmake: Update config.h.cmake.in
  - tests: Fix tests --with-valid --without-xinclude</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
  <changelog author="foss@grueninger.de" date="1713355200">- Update to version 2.12.6
  * Regressions
  - parser: Fix detection of duplicate attributes in XML namespace
  - xmlreader: Fix xmlTextReaderConstEncoding
  - html: Fix htmlCreatePushParserCtxt with encoding
  - xmllint: Return error code if XPath returns empty nodeset
- Update to version 2.12.5
  * Security
  - [CVE-2024-25062] xmlreader: Don't expand XIncludes when backtracking
  * Regressions
  - parser: Fix crash in xmlParseInNodeContext with HTML documents
- Update to version 2.12.4
  * Regressions
  - parser: Fix regression parsing standalone declarations
  - autotools: Readd --with-xptr-locs configuration option
  - parser: Fix build --without-output
  - parser: Don't grow or shrink pull parser memory buffers
  - io: Fix memory lifetime issue with input buffers
- Update to version 2.12.3
  * Regressions
  - parser: Fix namespaces redefined from default attributes
  * Build fixes
  - include: Rename XML_EMPTY helper macro
  - include: Move declaration of xmlInitGlobals
  - include: Add missing includes
  - include: Move globals from xmlsave.h to parser.h
  - include: Readd circular dependency between tree.h and parser.h
- Drop libxml2-CVE-2024-25062.patch as it is part of upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1715688000">- Update to version 2.12.7:
  + Fix buffer overread with `xmllint --htmlout` (CVE-2024-34459, bsc#1224282).
  + xmllint: Fix --pedantic option.
  + save: Handle invalid parent pointers in xhtmlNodeDumpOutput.</changelog>
  <changelog author="dimstar@opensuse.org" date="1718193600">- Update to version 2.12.8:
  + parser: Fix performance regression when parsing namespaces.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1721908800">- Update to version 2.12.9 [bsc#1234812]:
  + Security: (CVE-2024-40896) Fix XXE protection in downstream
    code.
  + Improvements: Undeprecate xmlKeepBlanksDefault.</changelog>
  <changelog author="pgajdos@suse.com" date="1731499200">- add %{?sle15allpythons} macro [jsc#PED-68]
- use %python_build and %python_install for 15</changelog>
  <changelog author="pgajdos@suse.com" date="1740052800">- version update to 2.12.10 ([bsc#1237363], [bsc#1237370], [bsc#1237418]):
  [#]## Security
  - [CVE-2025-24928] Fix stack-buffer-overflow in xmlSnprintfElements
  - [CVE-2024-56171] Fix use-after-free after xmlSchemaItemListAdd
  - pattern: Fix compilation of explicit child axis
  [#]## Regressions
  - parser: Fix detection of duplicate attributes
  [#]## Bug fixes
  - xpath: Fix parsing of non-ASCII names
  [#]## Portability
  - python: Declare init func with PyMODINIT_FUNC
  - tests: Fix sanitizer version check on old Apple clang
  [#]## Build
  - autotools: Set AC_CONFIG_AUX_DIR
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file
- Also CVE-2025-27113 was assigned to this release.</changelog>
  <changelog author="pgajdos@suse.com" date="1745409600">- security update
- added patches
  CVE-2025-32414 [bsc#1241551], out-of-bounds read when parsing text via the Python API
  + libxml2-CVE-2025-32414.patch
  CVE-2025-32415 [bsc#1241453], a crafted XML document may lead to a heap-based buffer under-read
  + libxml2-CVE-2025-32415.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751025600">- security update
- added patches
  CVE-2025-6170 [bsc#1244700], stack buffer overflow may lead to a crash
  CVE-2025-6021 [bsc#1244580], Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2
  + libxml2-CVE-2025-6170,6021.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751025601">- security update
- added patches
  CVE-2025-49794 [bsc#1244554], heap use after free (UAF) can lead to Denial of service (DoS)
  CVE-2025-49796 [bsc#1244557], type confusion may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49794,49796.patch
  CVE-2025-49795 [bsc#1244555], null pointer dereference may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49795.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1752840000">- security update
- added patches
  CVE-2025-7425 [bsc#1246296], Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr
  + libxml2-CVE-2025-7425.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1768996800">- CVE-2026-0989: call stack exhaustion leading to application crash
  due to RelaxNG parser not limiting the recursion depth when
  resolving `&lt;include&gt;` directives (bsc#1256804, bsc#1256805, bsc#1256810)
  * Add patch libxml2-CVE-2026-0989.patch
  * https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/374</changelog>
  <changelog author="pgajdos@suse.com" date="1770206400">- CVE-2025-10911: use-after-free with key data stored cross-RVT (bsc#1250553)
  * Add patch libxml2-CVE-2025-10911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770206401">- CVE-2026-1757: memory leak in the `xmllint` interactive shell (bsc#1257593, bsc#1257594, bsc#1257595)
  * Add patch libxml2-CVE-2026-1757.patch</changelog>
  <changelog author="david.anes@suse.com" date="1770984000">- CVE-2026-0990: call stack overflow leading to application crash
  due to infinite recursion in `xmlCatalogXMLResolveURI` (bsc#1256807, bsc#1256811)
  * Add patch libxml2-CVE-2026-0990.patch
- CVE-2026-0992: excessive resource consumption when processing XML
  catalogs due to exponential behavior when handling `&lt;nextCatalog&gt;` elements (bsc#1256808, bsc#1256809, bsc#1256812)
  * Add patch libxml2-CVE-2026-0992.patch
- CVE-2025-8732: infinite recursion in catalog parsing functions when processing malformed SGML catalog files (bsc#1247858, bsc#1247850)
  * Add patch libxml2-CVE-2025-8732.patch</changelog>
</package>
<package pkgid="5aa153094acbc23b937288cb9cb6aa106b66cd4ea5a5b0cd88ac38a5c8110c80" name="libxml2" arch="src">
  <version epoch="0" ver="2.12.10" rel="150700.4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1684497600">- Update to version 2.11.4:
  + Fixes a serious regression: parser: Fix regression when push
    parsing UTF-8 sequences.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691582400">- Update to version 2.11.5:
  + Regressions:
  - parser: Make xmlSwitchEncoding always skip the BOM
  - autotools: Improve iconv check
  + Bug fixes:
  - valid: Fix c1-&gt;parent pointer in xmlCopyDocElementContent
  - encoding: Always call ucnv_convertEx with flush set to false
  + Portability: autotools: fix Python module file ext for
    cygwin/msys2
  + Tests: runtest: Fix compilation without LIBXML_HTML_ENABLED</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security fix: CVE-2023-39615 (bsc#1214768)
  * crafted xml can cause global buffer overflow
  * Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1698062400">- Add python312.patch to make it compatible with python 3.12
  https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/226
- Use pyproject_wheel and pyproject_install macros instead of
  python_build, python_install</changelog>
  <changelog author="david.anes@suse.com" date="1699876800">- Security fix: CVE-2023-45322 (bsc#1216129)
  * use-after-free in xmlUnlinkNode() in tree.c
  * Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700136000">- Update to version 2.11.6:
  * Regressions:
  - threads: Fix --with-thread-alloc
  - xinclude: Fix ‘last’ pointer in xmlXIncludeCopyNode
  * Bug fixes: parser: Fix potential use-after-free in
    xmlParseCharDataInternal</changelog>
  <changelog author="david.anes@suse.com" date="1700136001">- Removed patches (already in upstream):
  * libxml2-CVE-2023-39615.patch
  * libxml2-CVE-2023-45322.patch
  * libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch
  * python312.patch
- Update to 2.12.0:
  * Major changes:
  - Most of the known issues leading to quadratic behavior in the
    XML parser were fixed. Internal hash tables were rewritten to
    reduce memory consumption.
  - Starting with this release, it should be enough to add the
  - -with-legacy configuration option to provide maximum ABI
    compatibility.
  - libxml2 will now store global variables in thread-local
    storage if supported by the compiler. This avoids allocating
    the data lazily which can result in a fatal error condition.
  - A new API function xmlCheckThreadLocalStorage was added so the
    allocation can be checked earlier if compiler TLS is not
    supported.
  - To prepare for future improvements, some API functions now
    expect or return a const xmlError struct.
  - Several cyclic dependencies in public header files were fixed.
  - Refactoring of the encoding code has been mostly completed.
    Calling xmlSwitchEncoding from client code is now fully
    supported, for example to override the encoding for the push
    parser.
  - When parsing data from memory, libxml2 will now stream data
    chunk by chunk instead of copying the whole buffer (possibly
    twice with encodings), reducing peak memory consumption
    considerably.
  - A new API function xmlCtxtSetMaxAmplification was added to
    allow parsing of files that would otherwise trigger the
    billion laughs protection.
  - Several bugs in the regex determinism checks were fixed.
    Invalid XML Schemas which previous versions erroneously
    accepted will now be rejected.
  * Deprecations
  - globals: Deprecate xmlLastError
  - parser: Deprecate global parser options
  - win32: Deprecate old Windows build system
  * Bug fixes
  - parser: Stop switching to ISO-8859-1 on encoding errors
  - parser: Support encoded external PEs in entity values
  - string: Fix UTF-8 validation in xmlGetUTF8Char
  - SAX2: Allow multiple top-level elements
  - parser: Update line number after coalescing text nodes
  - parser: Check for truncated multi-byte sequences
  * See the full changelog here:
  - https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.12.0</changelog>
  <changelog author="david.anes@suse.com" date="1700222400">- Bring back a patch that was mistakenly removed in the last update.
  * Readded libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700827200">- Update to verson 2.12.1:
  * Regressions:
  - hash: Fix deletion of entries during scan
  - parser: Only enable SAX2 if there are SAX2 element handlers
  * Build fixes:
  - autotools: Stop checking for snprintf
  - dict: Fix '__thread' before 'static'
  - fix: pthread weak references in globals.c
  - tests: Fix build with older MSVC</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.12.2:
  * Regressions:
  - parser:
    . Fix invalid free in xmlParseBalancedChunkMemoryRecover
    . Make CRLF increment line number
  - globals: Disable TLS in static Windows builds
  - html: Reenable buggy detection of XML declarations
  - tree: Fix regression when copying DTDs
  * Build fixes
  - build: Disable compiler TLS by default
  - cmake: Update config.h.cmake.in
  - tests: Fix tests --with-valid --without-xinclude</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
  <changelog author="foss@grueninger.de" date="1713355200">- Update to version 2.12.6
  * Regressions
  - parser: Fix detection of duplicate attributes in XML namespace
  - xmlreader: Fix xmlTextReaderConstEncoding
  - html: Fix htmlCreatePushParserCtxt with encoding
  - xmllint: Return error code if XPath returns empty nodeset
- Update to version 2.12.5
  * Security
  - [CVE-2024-25062] xmlreader: Don't expand XIncludes when backtracking
  * Regressions
  - parser: Fix crash in xmlParseInNodeContext with HTML documents
- Update to version 2.12.4
  * Regressions
  - parser: Fix regression parsing standalone declarations
  - autotools: Readd --with-xptr-locs configuration option
  - parser: Fix build --without-output
  - parser: Don't grow or shrink pull parser memory buffers
  - io: Fix memory lifetime issue with input buffers
- Update to version 2.12.3
  * Regressions
  - parser: Fix namespaces redefined from default attributes
  * Build fixes
  - include: Rename XML_EMPTY helper macro
  - include: Move declaration of xmlInitGlobals
  - include: Add missing includes
  - include: Move globals from xmlsave.h to parser.h
  - include: Readd circular dependency between tree.h and parser.h
- Drop libxml2-CVE-2024-25062.patch as it is part of upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1715688000">- Update to version 2.12.7:
  + Fix buffer overread with `xmllint --htmlout` (CVE-2024-34459, bsc#1224282).
  + xmllint: Fix --pedantic option.
  + save: Handle invalid parent pointers in xhtmlNodeDumpOutput.</changelog>
  <changelog author="dimstar@opensuse.org" date="1718193600">- Update to version 2.12.8:
  + parser: Fix performance regression when parsing namespaces.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1721908800">- Update to version 2.12.9 [bsc#1234812]:
  + Security: (CVE-2024-40896) Fix XXE protection in downstream
    code.
  + Improvements: Undeprecate xmlKeepBlanksDefault.</changelog>
  <changelog author="pgajdos@suse.com" date="1731499200">- add %{?sle15allpythons} macro [jsc#PED-68]
- use %python_build and %python_install for 15</changelog>
  <changelog author="pgajdos@suse.com" date="1740052800">- version update to 2.12.10 ([bsc#1237363], [bsc#1237370], [bsc#1237418]):
  [#]## Security
  - [CVE-2025-24928] Fix stack-buffer-overflow in xmlSnprintfElements
  - [CVE-2024-56171] Fix use-after-free after xmlSchemaItemListAdd
  - pattern: Fix compilation of explicit child axis
  [#]## Regressions
  - parser: Fix detection of duplicate attributes
  [#]## Bug fixes
  - xpath: Fix parsing of non-ASCII names
  [#]## Portability
  - python: Declare init func with PyMODINIT_FUNC
  - tests: Fix sanitizer version check on old Apple clang
  [#]## Build
  - autotools: Set AC_CONFIG_AUX_DIR
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file
- Also CVE-2025-27113 was assigned to this release.</changelog>
  <changelog author="pgajdos@suse.com" date="1745409600">- security update
- added patches
  CVE-2025-32414 [bsc#1241551], out-of-bounds read when parsing text via the Python API
  + libxml2-CVE-2025-32414.patch
  CVE-2025-32415 [bsc#1241453], a crafted XML document may lead to a heap-based buffer under-read
  + libxml2-CVE-2025-32415.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751025600">- security update
- added patches
  CVE-2025-6170 [bsc#1244700], stack buffer overflow may lead to a crash
  CVE-2025-6021 [bsc#1244580], Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2
  + libxml2-CVE-2025-6170,6021.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751025601">- security update
- added patches
  CVE-2025-49794 [bsc#1244554], heap use after free (UAF) can lead to Denial of service (DoS)
  CVE-2025-49796 [bsc#1244557], type confusion may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49794,49796.patch
  CVE-2025-49795 [bsc#1244555], null pointer dereference may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49795.patch</changelog>
</package>
<package pkgid="839a2d15d6376796721ad35e37e93631b4f1c354d2a06dee19f94561d56fe652" name="libxml2" arch="src">
  <version epoch="0" ver="2.12.10" rel="150700.4.6.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1691582400">- Update to version 2.11.5:
  + Regressions:
  - parser: Make xmlSwitchEncoding always skip the BOM
  - autotools: Improve iconv check
  + Bug fixes:
  - valid: Fix c1-&gt;parent pointer in xmlCopyDocElementContent
  - encoding: Always call ucnv_convertEx with flush set to false
  + Portability: autotools: fix Python module file ext for
    cygwin/msys2
  + Tests: runtest: Fix compilation without LIBXML_HTML_ENABLED</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security fix: CVE-2023-39615 (bsc#1214768)
  * crafted xml can cause global buffer overflow
  * Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1698062400">- Add python312.patch to make it compatible with python 3.12
  https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/226
- Use pyproject_wheel and pyproject_install macros instead of
  python_build, python_install</changelog>
  <changelog author="david.anes@suse.com" date="1699876800">- Security fix: CVE-2023-45322 (bsc#1216129)
  * use-after-free in xmlUnlinkNode() in tree.c
  * Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700136000">- Update to version 2.11.6:
  * Regressions:
  - threads: Fix --with-thread-alloc
  - xinclude: Fix ‘last’ pointer in xmlXIncludeCopyNode
  * Bug fixes: parser: Fix potential use-after-free in
    xmlParseCharDataInternal</changelog>
  <changelog author="david.anes@suse.com" date="1700136001">- Removed patches (already in upstream):
  * libxml2-CVE-2023-39615.patch
  * libxml2-CVE-2023-45322.patch
  * libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch
  * python312.patch
- Update to 2.12.0:
  * Major changes:
  - Most of the known issues leading to quadratic behavior in the
    XML parser were fixed. Internal hash tables were rewritten to
    reduce memory consumption.
  - Starting with this release, it should be enough to add the
  - -with-legacy configuration option to provide maximum ABI
    compatibility.
  - libxml2 will now store global variables in thread-local
    storage if supported by the compiler. This avoids allocating
    the data lazily which can result in a fatal error condition.
  - A new API function xmlCheckThreadLocalStorage was added so the
    allocation can be checked earlier if compiler TLS is not
    supported.
  - To prepare for future improvements, some API functions now
    expect or return a const xmlError struct.
  - Several cyclic dependencies in public header files were fixed.
  - Refactoring of the encoding code has been mostly completed.
    Calling xmlSwitchEncoding from client code is now fully
    supported, for example to override the encoding for the push
    parser.
  - When parsing data from memory, libxml2 will now stream data
    chunk by chunk instead of copying the whole buffer (possibly
    twice with encodings), reducing peak memory consumption
    considerably.
  - A new API function xmlCtxtSetMaxAmplification was added to
    allow parsing of files that would otherwise trigger the
    billion laughs protection.
  - Several bugs in the regex determinism checks were fixed.
    Invalid XML Schemas which previous versions erroneously
    accepted will now be rejected.
  * Deprecations
  - globals: Deprecate xmlLastError
  - parser: Deprecate global parser options
  - win32: Deprecate old Windows build system
  * Bug fixes
  - parser: Stop switching to ISO-8859-1 on encoding errors
  - parser: Support encoded external PEs in entity values
  - string: Fix UTF-8 validation in xmlGetUTF8Char
  - SAX2: Allow multiple top-level elements
  - parser: Update line number after coalescing text nodes
  - parser: Check for truncated multi-byte sequences
  * See the full changelog here:
  - https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.12.0</changelog>
  <changelog author="david.anes@suse.com" date="1700222400">- Bring back a patch that was mistakenly removed in the last update.
  * Readded libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700827200">- Update to verson 2.12.1:
  * Regressions:
  - hash: Fix deletion of entries during scan
  - parser: Only enable SAX2 if there are SAX2 element handlers
  * Build fixes:
  - autotools: Stop checking for snprintf
  - dict: Fix '__thread' before 'static'
  - fix: pthread weak references in globals.c
  - tests: Fix build with older MSVC</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.12.2:
  * Regressions:
  - parser:
    . Fix invalid free in xmlParseBalancedChunkMemoryRecover
    . Make CRLF increment line number
  - globals: Disable TLS in static Windows builds
  - html: Reenable buggy detection of XML declarations
  - tree: Fix regression when copying DTDs
  * Build fixes
  - build: Disable compiler TLS by default
  - cmake: Update config.h.cmake.in
  - tests: Fix tests --with-valid --without-xinclude</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
  <changelog author="foss@grueninger.de" date="1713355200">- Update to version 2.12.6
  * Regressions
  - parser: Fix detection of duplicate attributes in XML namespace
  - xmlreader: Fix xmlTextReaderConstEncoding
  - html: Fix htmlCreatePushParserCtxt with encoding
  - xmllint: Return error code if XPath returns empty nodeset
- Update to version 2.12.5
  * Security
  - [CVE-2024-25062] xmlreader: Don't expand XIncludes when backtracking
  * Regressions
  - parser: Fix crash in xmlParseInNodeContext with HTML documents
- Update to version 2.12.4
  * Regressions
  - parser: Fix regression parsing standalone declarations
  - autotools: Readd --with-xptr-locs configuration option
  - parser: Fix build --without-output
  - parser: Don't grow or shrink pull parser memory buffers
  - io: Fix memory lifetime issue with input buffers
- Update to version 2.12.3
  * Regressions
  - parser: Fix namespaces redefined from default attributes
  * Build fixes
  - include: Rename XML_EMPTY helper macro
  - include: Move declaration of xmlInitGlobals
  - include: Add missing includes
  - include: Move globals from xmlsave.h to parser.h
  - include: Readd circular dependency between tree.h and parser.h
- Drop libxml2-CVE-2024-25062.patch as it is part of upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1715688000">- Update to version 2.12.7:
  + Fix buffer overread with `xmllint --htmlout` (CVE-2024-34459, bsc#1224282).
  + xmllint: Fix --pedantic option.
  + save: Handle invalid parent pointers in xhtmlNodeDumpOutput.</changelog>
  <changelog author="dimstar@opensuse.org" date="1718193600">- Update to version 2.12.8:
  + parser: Fix performance regression when parsing namespaces.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1721908800">- Update to version 2.12.9 [bsc#1234812]:
  + Security: (CVE-2024-40896) Fix XXE protection in downstream
    code.
  + Improvements: Undeprecate xmlKeepBlanksDefault.</changelog>
  <changelog author="pgajdos@suse.com" date="1731499200">- add %{?sle15allpythons} macro [jsc#PED-68]
- use %python_build and %python_install for 15</changelog>
  <changelog author="pgajdos@suse.com" date="1740052800">- version update to 2.12.10 ([bsc#1237363], [bsc#1237370], [bsc#1237418]):
  [#]## Security
  - [CVE-2025-24928] Fix stack-buffer-overflow in xmlSnprintfElements
  - [CVE-2024-56171] Fix use-after-free after xmlSchemaItemListAdd
  - pattern: Fix compilation of explicit child axis
  [#]## Regressions
  - parser: Fix detection of duplicate attributes
  [#]## Bug fixes
  - xpath: Fix parsing of non-ASCII names
  [#]## Portability
  - python: Declare init func with PyMODINIT_FUNC
  - tests: Fix sanitizer version check on old Apple clang
  [#]## Build
  - autotools: Set AC_CONFIG_AUX_DIR
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file
- Also CVE-2025-27113 was assigned to this release.</changelog>
  <changelog author="pgajdos@suse.com" date="1745409600">- security update
- added patches
  CVE-2025-32414 [bsc#1241551], out-of-bounds read when parsing text via the Python API
  + libxml2-CVE-2025-32414.patch
  CVE-2025-32415 [bsc#1241453], a crafted XML document may lead to a heap-based buffer under-read
  + libxml2-CVE-2025-32415.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751025600">- security update
- added patches
  CVE-2025-6170 [bsc#1244700], stack buffer overflow may lead to a crash
  CVE-2025-6021 [bsc#1244580], Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2
  + libxml2-CVE-2025-6170,6021.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751025601">- security update
- added patches
  CVE-2025-49794 [bsc#1244554], heap use after free (UAF) can lead to Denial of service (DoS)
  CVE-2025-49796 [bsc#1244557], type confusion may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49794,49796.patch
  CVE-2025-49795 [bsc#1244555], null pointer dereference may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49795.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1752840000">- security update
- added patches
  CVE-2025-7425 [bsc#1246296], Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr
  + libxml2-CVE-2025-7425.patch</changelog>
</package>
<package pkgid="0dae9bd75705877dc68bd592adcc765871acae4c0519750179418390d38daee4" name="libxml2-devel" arch="x86_64">
  <version epoch="0" ver="2.12.10" rel="150700.4.11.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1700136000">- Update to version 2.11.6:
  * Regressions:
  - threads: Fix --with-thread-alloc
  - xinclude: Fix ‘last’ pointer in xmlXIncludeCopyNode
  * Bug fixes: parser: Fix potential use-after-free in
    xmlParseCharDataInternal</changelog>
  <changelog author="david.anes@suse.com" date="1700136001">- Removed patches (already in upstream):
  * libxml2-CVE-2023-39615.patch
  * libxml2-CVE-2023-45322.patch
  * libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch
  * python312.patch
- Update to 2.12.0:
  * Major changes:
  - Most of the known issues leading to quadratic behavior in the
    XML parser were fixed. Internal hash tables were rewritten to
    reduce memory consumption.
  - Starting with this release, it should be enough to add the
  - -with-legacy configuration option to provide maximum ABI
    compatibility.
  - libxml2 will now store global variables in thread-local
    storage if supported by the compiler. This avoids allocating
    the data lazily which can result in a fatal error condition.
  - A new API function xmlCheckThreadLocalStorage was added so the
    allocation can be checked earlier if compiler TLS is not
    supported.
  - To prepare for future improvements, some API functions now
    expect or return a const xmlError struct.
  - Several cyclic dependencies in public header files were fixed.
  - Refactoring of the encoding code has been mostly completed.
    Calling xmlSwitchEncoding from client code is now fully
    supported, for example to override the encoding for the push
    parser.
  - When parsing data from memory, libxml2 will now stream data
    chunk by chunk instead of copying the whole buffer (possibly
    twice with encodings), reducing peak memory consumption
    considerably.
  - A new API function xmlCtxtSetMaxAmplification was added to
    allow parsing of files that would otherwise trigger the
    billion laughs protection.
  - Several bugs in the regex determinism checks were fixed.
    Invalid XML Schemas which previous versions erroneously
    accepted will now be rejected.
  * Deprecations
  - globals: Deprecate xmlLastError
  - parser: Deprecate global parser options
  - win32: Deprecate old Windows build system
  * Bug fixes
  - parser: Stop switching to ISO-8859-1 on encoding errors
  - parser: Support encoded external PEs in entity values
  - string: Fix UTF-8 validation in xmlGetUTF8Char
  - SAX2: Allow multiple top-level elements
  - parser: Update line number after coalescing text nodes
  - parser: Check for truncated multi-byte sequences
  * See the full changelog here:
  - https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.12.0</changelog>
  <changelog author="david.anes@suse.com" date="1700222400">- Bring back a patch that was mistakenly removed in the last update.
  * Readded libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700827200">- Update to verson 2.12.1:
  * Regressions:
  - hash: Fix deletion of entries during scan
  - parser: Only enable SAX2 if there are SAX2 element handlers
  * Build fixes:
  - autotools: Stop checking for snprintf
  - dict: Fix '__thread' before 'static'
  - fix: pthread weak references in globals.c
  - tests: Fix build with older MSVC</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.12.2:
  * Regressions:
  - parser:
    . Fix invalid free in xmlParseBalancedChunkMemoryRecover
    . Make CRLF increment line number
  - globals: Disable TLS in static Windows builds
  - html: Reenable buggy detection of XML declarations
  - tree: Fix regression when copying DTDs
  * Build fixes
  - build: Disable compiler TLS by default
  - cmake: Update config.h.cmake.in
  - tests: Fix tests --with-valid --without-xinclude</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
  <changelog author="foss@grueninger.de" date="1713355200">- Update to version 2.12.6
  * Regressions
  - parser: Fix detection of duplicate attributes in XML namespace
  - xmlreader: Fix xmlTextReaderConstEncoding
  - html: Fix htmlCreatePushParserCtxt with encoding
  - xmllint: Return error code if XPath returns empty nodeset
- Update to version 2.12.5
  * Security
  - [CVE-2024-25062] xmlreader: Don't expand XIncludes when backtracking
  * Regressions
  - parser: Fix crash in xmlParseInNodeContext with HTML documents
- Update to version 2.12.4
  * Regressions
  - parser: Fix regression parsing standalone declarations
  - autotools: Readd --with-xptr-locs configuration option
  - parser: Fix build --without-output
  - parser: Don't grow or shrink pull parser memory buffers
  - io: Fix memory lifetime issue with input buffers
- Update to version 2.12.3
  * Regressions
  - parser: Fix namespaces redefined from default attributes
  * Build fixes
  - include: Rename XML_EMPTY helper macro
  - include: Move declaration of xmlInitGlobals
  - include: Add missing includes
  - include: Move globals from xmlsave.h to parser.h
  - include: Readd circular dependency between tree.h and parser.h
- Drop libxml2-CVE-2024-25062.patch as it is part of upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1715688000">- Update to version 2.12.7:
  + Fix buffer overread with `xmllint --htmlout` (CVE-2024-34459, bsc#1224282).
  + xmllint: Fix --pedantic option.
  + save: Handle invalid parent pointers in xhtmlNodeDumpOutput.</changelog>
  <changelog author="dimstar@opensuse.org" date="1718193600">- Update to version 2.12.8:
  + parser: Fix performance regression when parsing namespaces.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1721908800">- Update to version 2.12.9 [bsc#1234812]:
  + Security: (CVE-2024-40896) Fix XXE protection in downstream
    code.
  + Improvements: Undeprecate xmlKeepBlanksDefault.</changelog>
  <changelog author="pgajdos@suse.com" date="1731499200">- add %{?sle15allpythons} macro [jsc#PED-68]
- use %python_build and %python_install for 15</changelog>
  <changelog author="pgajdos@suse.com" date="1740052800">- version update to 2.12.10 ([bsc#1237363], [bsc#1237370], [bsc#1237418]):
  [#]## Security
  - [CVE-2025-24928] Fix stack-buffer-overflow in xmlSnprintfElements
  - [CVE-2024-56171] Fix use-after-free after xmlSchemaItemListAdd
  - pattern: Fix compilation of explicit child axis
  [#]## Regressions
  - parser: Fix detection of duplicate attributes
  [#]## Bug fixes
  - xpath: Fix parsing of non-ASCII names
  [#]## Portability
  - python: Declare init func with PyMODINIT_FUNC
  - tests: Fix sanitizer version check on old Apple clang
  [#]## Build
  - autotools: Set AC_CONFIG_AUX_DIR
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file
- Also CVE-2025-27113 was assigned to this release.</changelog>
  <changelog author="pgajdos@suse.com" date="1745409600">- security update
- added patches
  CVE-2025-32414 [bsc#1241551], out-of-bounds read when parsing text via the Python API
  + libxml2-CVE-2025-32414.patch
  CVE-2025-32415 [bsc#1241453], a crafted XML document may lead to a heap-based buffer under-read
  + libxml2-CVE-2025-32415.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751025600">- security update
- added patches
  CVE-2025-6170 [bsc#1244700], stack buffer overflow may lead to a crash
  CVE-2025-6021 [bsc#1244580], Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2
  + libxml2-CVE-2025-6170,6021.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751025601">- security update
- added patches
  CVE-2025-49794 [bsc#1244554], heap use after free (UAF) can lead to Denial of service (DoS)
  CVE-2025-49796 [bsc#1244557], type confusion may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49794,49796.patch
  CVE-2025-49795 [bsc#1244555], null pointer dereference may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49795.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1752840000">- security update
- added patches
  CVE-2025-7425 [bsc#1246296], Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr
  + libxml2-CVE-2025-7425.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1768996800">- CVE-2026-0989: call stack exhaustion leading to application crash
  due to RelaxNG parser not limiting the recursion depth when
  resolving `&lt;include&gt;` directives (bsc#1256804, bsc#1256805, bsc#1256810)
  * Add patch libxml2-CVE-2026-0989.patch
  * https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/374</changelog>
  <changelog author="pgajdos@suse.com" date="1770206400">- CVE-2025-10911: use-after-free with key data stored cross-RVT (bsc#1250553)
  * Add patch libxml2-CVE-2025-10911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770206401">- CVE-2026-1757: memory leak in the `xmllint` interactive shell (bsc#1257593, bsc#1257594, bsc#1257595)
  * Add patch libxml2-CVE-2026-1757.patch</changelog>
  <changelog author="david.anes@suse.com" date="1770984000">- CVE-2026-0990: call stack overflow leading to application crash
  due to infinite recursion in `xmlCatalogXMLResolveURI` (bsc#1256807, bsc#1256811)
  * Add patch libxml2-CVE-2026-0990.patch
- CVE-2026-0992: excessive resource consumption when processing XML
  catalogs due to exponential behavior when handling `&lt;nextCatalog&gt;` elements (bsc#1256808, bsc#1256809, bsc#1256812)
  * Add patch libxml2-CVE-2026-0992.patch
- CVE-2025-8732: infinite recursion in catalog parsing functions when processing malformed SGML catalog files (bsc#1247858, bsc#1247850)
  * Add patch libxml2-CVE-2025-8732.patch</changelog>
</package>
<package pkgid="b137c92a8b62b0656f012a71696b580532bbecfc8e771b6b268cec00474f95e9" name="libxml2-devel" arch="x86_64">
  <version epoch="0" ver="2.12.10" rel="150700.4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1684497600">- Update to version 2.11.4:
  + Fixes a serious regression: parser: Fix regression when push
    parsing UTF-8 sequences.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691582400">- Update to version 2.11.5:
  + Regressions:
  - parser: Make xmlSwitchEncoding always skip the BOM
  - autotools: Improve iconv check
  + Bug fixes:
  - valid: Fix c1-&gt;parent pointer in xmlCopyDocElementContent
  - encoding: Always call ucnv_convertEx with flush set to false
  + Portability: autotools: fix Python module file ext for
    cygwin/msys2
  + Tests: runtest: Fix compilation without LIBXML_HTML_ENABLED</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security fix: CVE-2023-39615 (bsc#1214768)
  * crafted xml can cause global buffer overflow
  * Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1698062400">- Add python312.patch to make it compatible with python 3.12
  https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/226
- Use pyproject_wheel and pyproject_install macros instead of
  python_build, python_install</changelog>
  <changelog author="david.anes@suse.com" date="1699876800">- Security fix: CVE-2023-45322 (bsc#1216129)
  * use-after-free in xmlUnlinkNode() in tree.c
  * Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700136000">- Update to version 2.11.6:
  * Regressions:
  - threads: Fix --with-thread-alloc
  - xinclude: Fix ‘last’ pointer in xmlXIncludeCopyNode
  * Bug fixes: parser: Fix potential use-after-free in
    xmlParseCharDataInternal</changelog>
  <changelog author="david.anes@suse.com" date="1700136001">- Removed patches (already in upstream):
  * libxml2-CVE-2023-39615.patch
  * libxml2-CVE-2023-45322.patch
  * libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch
  * python312.patch
- Update to 2.12.0:
  * Major changes:
  - Most of the known issues leading to quadratic behavior in the
    XML parser were fixed. Internal hash tables were rewritten to
    reduce memory consumption.
  - Starting with this release, it should be enough to add the
  - -with-legacy configuration option to provide maximum ABI
    compatibility.
  - libxml2 will now store global variables in thread-local
    storage if supported by the compiler. This avoids allocating
    the data lazily which can result in a fatal error condition.
  - A new API function xmlCheckThreadLocalStorage was added so the
    allocation can be checked earlier if compiler TLS is not
    supported.
  - To prepare for future improvements, some API functions now
    expect or return a const xmlError struct.
  - Several cyclic dependencies in public header files were fixed.
  - Refactoring of the encoding code has been mostly completed.
    Calling xmlSwitchEncoding from client code is now fully
    supported, for example to override the encoding for the push
    parser.
  - When parsing data from memory, libxml2 will now stream data
    chunk by chunk instead of copying the whole buffer (possibly
    twice with encodings), reducing peak memory consumption
    considerably.
  - A new API function xmlCtxtSetMaxAmplification was added to
    allow parsing of files that would otherwise trigger the
    billion laughs protection.
  - Several bugs in the regex determinism checks were fixed.
    Invalid XML Schemas which previous versions erroneously
    accepted will now be rejected.
  * Deprecations
  - globals: Deprecate xmlLastError
  - parser: Deprecate global parser options
  - win32: Deprecate old Windows build system
  * Bug fixes
  - parser: Stop switching to ISO-8859-1 on encoding errors
  - parser: Support encoded external PEs in entity values
  - string: Fix UTF-8 validation in xmlGetUTF8Char
  - SAX2: Allow multiple top-level elements
  - parser: Update line number after coalescing text nodes
  - parser: Check for truncated multi-byte sequences
  * See the full changelog here:
  - https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.12.0</changelog>
  <changelog author="david.anes@suse.com" date="1700222400">- Bring back a patch that was mistakenly removed in the last update.
  * Readded libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700827200">- Update to verson 2.12.1:
  * Regressions:
  - hash: Fix deletion of entries during scan
  - parser: Only enable SAX2 if there are SAX2 element handlers
  * Build fixes:
  - autotools: Stop checking for snprintf
  - dict: Fix '__thread' before 'static'
  - fix: pthread weak references in globals.c
  - tests: Fix build with older MSVC</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.12.2:
  * Regressions:
  - parser:
    . Fix invalid free in xmlParseBalancedChunkMemoryRecover
    . Make CRLF increment line number
  - globals: Disable TLS in static Windows builds
  - html: Reenable buggy detection of XML declarations
  - tree: Fix regression when copying DTDs
  * Build fixes
  - build: Disable compiler TLS by default
  - cmake: Update config.h.cmake.in
  - tests: Fix tests --with-valid --without-xinclude</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
  <changelog author="foss@grueninger.de" date="1713355200">- Update to version 2.12.6
  * Regressions
  - parser: Fix detection of duplicate attributes in XML namespace
  - xmlreader: Fix xmlTextReaderConstEncoding
  - html: Fix htmlCreatePushParserCtxt with encoding
  - xmllint: Return error code if XPath returns empty nodeset
- Update to version 2.12.5
  * Security
  - [CVE-2024-25062] xmlreader: Don't expand XIncludes when backtracking
  * Regressions
  - parser: Fix crash in xmlParseInNodeContext with HTML documents
- Update to version 2.12.4
  * Regressions
  - parser: Fix regression parsing standalone declarations
  - autotools: Readd --with-xptr-locs configuration option
  - parser: Fix build --without-output
  - parser: Don't grow or shrink pull parser memory buffers
  - io: Fix memory lifetime issue with input buffers
- Update to version 2.12.3
  * Regressions
  - parser: Fix namespaces redefined from default attributes
  * Build fixes
  - include: Rename XML_EMPTY helper macro
  - include: Move declaration of xmlInitGlobals
  - include: Add missing includes
  - include: Move globals from xmlsave.h to parser.h
  - include: Readd circular dependency between tree.h and parser.h
- Drop libxml2-CVE-2024-25062.patch as it is part of upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1715688000">- Update to version 2.12.7:
  + Fix buffer overread with `xmllint --htmlout` (CVE-2024-34459, bsc#1224282).
  + xmllint: Fix --pedantic option.
  + save: Handle invalid parent pointers in xhtmlNodeDumpOutput.</changelog>
  <changelog author="dimstar@opensuse.org" date="1718193600">- Update to version 2.12.8:
  + parser: Fix performance regression when parsing namespaces.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1721908800">- Update to version 2.12.9 [bsc#1234812]:
  + Security: (CVE-2024-40896) Fix XXE protection in downstream
    code.
  + Improvements: Undeprecate xmlKeepBlanksDefault.</changelog>
  <changelog author="pgajdos@suse.com" date="1731499200">- add %{?sle15allpythons} macro [jsc#PED-68]
- use %python_build and %python_install for 15</changelog>
  <changelog author="pgajdos@suse.com" date="1740052800">- version update to 2.12.10 ([bsc#1237363], [bsc#1237370], [bsc#1237418]):
  [#]## Security
  - [CVE-2025-24928] Fix stack-buffer-overflow in xmlSnprintfElements
  - [CVE-2024-56171] Fix use-after-free after xmlSchemaItemListAdd
  - pattern: Fix compilation of explicit child axis
  [#]## Regressions
  - parser: Fix detection of duplicate attributes
  [#]## Bug fixes
  - xpath: Fix parsing of non-ASCII names
  [#]## Portability
  - python: Declare init func with PyMODINIT_FUNC
  - tests: Fix sanitizer version check on old Apple clang
  [#]## Build
  - autotools: Set AC_CONFIG_AUX_DIR
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file
- Also CVE-2025-27113 was assigned to this release.</changelog>
  <changelog author="pgajdos@suse.com" date="1745409600">- security update
- added patches
  CVE-2025-32414 [bsc#1241551], out-of-bounds read when parsing text via the Python API
  + libxml2-CVE-2025-32414.patch
  CVE-2025-32415 [bsc#1241453], a crafted XML document may lead to a heap-based buffer under-read
  + libxml2-CVE-2025-32415.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751025600">- security update
- added patches
  CVE-2025-6170 [bsc#1244700], stack buffer overflow may lead to a crash
  CVE-2025-6021 [bsc#1244580], Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2
  + libxml2-CVE-2025-6170,6021.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751025601">- security update
- added patches
  CVE-2025-49794 [bsc#1244554], heap use after free (UAF) can lead to Denial of service (DoS)
  CVE-2025-49796 [bsc#1244557], type confusion may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49794,49796.patch
  CVE-2025-49795 [bsc#1244555], null pointer dereference may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49795.patch</changelog>
</package>
<package pkgid="8fb5efa74ca4ffc353b856068e9bd18b2059ed33642ce2ca0da5c618cee8efd5" name="libxml2-devel" arch="x86_64">
  <version epoch="0" ver="2.12.10" rel="150700.4.6.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1691582400">- Update to version 2.11.5:
  + Regressions:
  - parser: Make xmlSwitchEncoding always skip the BOM
  - autotools: Improve iconv check
  + Bug fixes:
  - valid: Fix c1-&gt;parent pointer in xmlCopyDocElementContent
  - encoding: Always call ucnv_convertEx with flush set to false
  + Portability: autotools: fix Python module file ext for
    cygwin/msys2
  + Tests: runtest: Fix compilation without LIBXML_HTML_ENABLED</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security fix: CVE-2023-39615 (bsc#1214768)
  * crafted xml can cause global buffer overflow
  * Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1698062400">- Add python312.patch to make it compatible with python 3.12
  https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/226
- Use pyproject_wheel and pyproject_install macros instead of
  python_build, python_install</changelog>
  <changelog author="david.anes@suse.com" date="1699876800">- Security fix: CVE-2023-45322 (bsc#1216129)
  * use-after-free in xmlUnlinkNode() in tree.c
  * Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700136000">- Update to version 2.11.6:
  * Regressions:
  - threads: Fix --with-thread-alloc
  - xinclude: Fix ‘last’ pointer in xmlXIncludeCopyNode
  * Bug fixes: parser: Fix potential use-after-free in
    xmlParseCharDataInternal</changelog>
  <changelog author="david.anes@suse.com" date="1700136001">- Removed patches (already in upstream):
  * libxml2-CVE-2023-39615.patch
  * libxml2-CVE-2023-45322.patch
  * libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch
  * python312.patch
- Update to 2.12.0:
  * Major changes:
  - Most of the known issues leading to quadratic behavior in the
    XML parser were fixed. Internal hash tables were rewritten to
    reduce memory consumption.
  - Starting with this release, it should be enough to add the
  - -with-legacy configuration option to provide maximum ABI
    compatibility.
  - libxml2 will now store global variables in thread-local
    storage if supported by the compiler. This avoids allocating
    the data lazily which can result in a fatal error condition.
  - A new API function xmlCheckThreadLocalStorage was added so the
    allocation can be checked earlier if compiler TLS is not
    supported.
  - To prepare for future improvements, some API functions now
    expect or return a const xmlError struct.
  - Several cyclic dependencies in public header files were fixed.
  - Refactoring of the encoding code has been mostly completed.
    Calling xmlSwitchEncoding from client code is now fully
    supported, for example to override the encoding for the push
    parser.
  - When parsing data from memory, libxml2 will now stream data
    chunk by chunk instead of copying the whole buffer (possibly
    twice with encodings), reducing peak memory consumption
    considerably.
  - A new API function xmlCtxtSetMaxAmplification was added to
    allow parsing of files that would otherwise trigger the
    billion laughs protection.
  - Several bugs in the regex determinism checks were fixed.
    Invalid XML Schemas which previous versions erroneously
    accepted will now be rejected.
  * Deprecations
  - globals: Deprecate xmlLastError
  - parser: Deprecate global parser options
  - win32: Deprecate old Windows build system
  * Bug fixes
  - parser: Stop switching to ISO-8859-1 on encoding errors
  - parser: Support encoded external PEs in entity values
  - string: Fix UTF-8 validation in xmlGetUTF8Char
  - SAX2: Allow multiple top-level elements
  - parser: Update line number after coalescing text nodes
  - parser: Check for truncated multi-byte sequences
  * See the full changelog here:
  - https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.12.0</changelog>
  <changelog author="david.anes@suse.com" date="1700222400">- Bring back a patch that was mistakenly removed in the last update.
  * Readded libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700827200">- Update to verson 2.12.1:
  * Regressions:
  - hash: Fix deletion of entries during scan
  - parser: Only enable SAX2 if there are SAX2 element handlers
  * Build fixes:
  - autotools: Stop checking for snprintf
  - dict: Fix '__thread' before 'static'
  - fix: pthread weak references in globals.c
  - tests: Fix build with older MSVC</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.12.2:
  * Regressions:
  - parser:
    . Fix invalid free in xmlParseBalancedChunkMemoryRecover
    . Make CRLF increment line number
  - globals: Disable TLS in static Windows builds
  - html: Reenable buggy detection of XML declarations
  - tree: Fix regression when copying DTDs
  * Build fixes
  - build: Disable compiler TLS by default
  - cmake: Update config.h.cmake.in
  - tests: Fix tests --with-valid --without-xinclude</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
  <changelog author="foss@grueninger.de" date="1713355200">- Update to version 2.12.6
  * Regressions
  - parser: Fix detection of duplicate attributes in XML namespace
  - xmlreader: Fix xmlTextReaderConstEncoding
  - html: Fix htmlCreatePushParserCtxt with encoding
  - xmllint: Return error code if XPath returns empty nodeset
- Update to version 2.12.5
  * Security
  - [CVE-2024-25062] xmlreader: Don't expand XIncludes when backtracking
  * Regressions
  - parser: Fix crash in xmlParseInNodeContext with HTML documents
- Update to version 2.12.4
  * Regressions
  - parser: Fix regression parsing standalone declarations
  - autotools: Readd --with-xptr-locs configuration option
  - parser: Fix build --without-output
  - parser: Don't grow or shrink pull parser memory buffers
  - io: Fix memory lifetime issue with input buffers
- Update to version 2.12.3
  * Regressions
  - parser: Fix namespaces redefined from default attributes
  * Build fixes
  - include: Rename XML_EMPTY helper macro
  - include: Move declaration of xmlInitGlobals
  - include: Add missing includes
  - include: Move globals from xmlsave.h to parser.h
  - include: Readd circular dependency between tree.h and parser.h
- Drop libxml2-CVE-2024-25062.patch as it is part of upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1715688000">- Update to version 2.12.7:
  + Fix buffer overread with `xmllint --htmlout` (CVE-2024-34459, bsc#1224282).
  + xmllint: Fix --pedantic option.
  + save: Handle invalid parent pointers in xhtmlNodeDumpOutput.</changelog>
  <changelog author="dimstar@opensuse.org" date="1718193600">- Update to version 2.12.8:
  + parser: Fix performance regression when parsing namespaces.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1721908800">- Update to version 2.12.9 [bsc#1234812]:
  + Security: (CVE-2024-40896) Fix XXE protection in downstream
    code.
  + Improvements: Undeprecate xmlKeepBlanksDefault.</changelog>
  <changelog author="pgajdos@suse.com" date="1731499200">- add %{?sle15allpythons} macro [jsc#PED-68]
- use %python_build and %python_install for 15</changelog>
  <changelog author="pgajdos@suse.com" date="1740052800">- version update to 2.12.10 ([bsc#1237363], [bsc#1237370], [bsc#1237418]):
  [#]## Security
  - [CVE-2025-24928] Fix stack-buffer-overflow in xmlSnprintfElements
  - [CVE-2024-56171] Fix use-after-free after xmlSchemaItemListAdd
  - pattern: Fix compilation of explicit child axis
  [#]## Regressions
  - parser: Fix detection of duplicate attributes
  [#]## Bug fixes
  - xpath: Fix parsing of non-ASCII names
  [#]## Portability
  - python: Declare init func with PyMODINIT_FUNC
  - tests: Fix sanitizer version check on old Apple clang
  [#]## Build
  - autotools: Set AC_CONFIG_AUX_DIR
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file
- Also CVE-2025-27113 was assigned to this release.</changelog>
  <changelog author="pgajdos@suse.com" date="1745409600">- security update
- added patches
  CVE-2025-32414 [bsc#1241551], out-of-bounds read when parsing text via the Python API
  + libxml2-CVE-2025-32414.patch
  CVE-2025-32415 [bsc#1241453], a crafted XML document may lead to a heap-based buffer under-read
  + libxml2-CVE-2025-32415.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751025600">- security update
- added patches
  CVE-2025-6170 [bsc#1244700], stack buffer overflow may lead to a crash
  CVE-2025-6021 [bsc#1244580], Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2
  + libxml2-CVE-2025-6170,6021.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751025601">- security update
- added patches
  CVE-2025-49794 [bsc#1244554], heap use after free (UAF) can lead to Denial of service (DoS)
  CVE-2025-49796 [bsc#1244557], type confusion may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49794,49796.patch
  CVE-2025-49795 [bsc#1244555], null pointer dereference may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49795.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1752840000">- security update
- added patches
  CVE-2025-7425 [bsc#1246296], Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr
  + libxml2-CVE-2025-7425.patch</changelog>
</package>
<package pkgid="b0e1eedf5485e80b9428c7b99b9419e9db909936a0301fff92b72d4f9ab23c49" name="libxml2-python" arch="src">
  <version epoch="0" ver="2.12.10" rel="150700.4.11.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1700136000">- Update to version 2.11.6:
  * Regressions:
  - threads: Fix --with-thread-alloc
  - xinclude: Fix ‘last’ pointer in xmlXIncludeCopyNode
  * Bug fixes: parser: Fix potential use-after-free in
    xmlParseCharDataInternal</changelog>
  <changelog author="david.anes@suse.com" date="1700136001">- Removed patches (already in upstream):
  * libxml2-CVE-2023-39615.patch
  * libxml2-CVE-2023-45322.patch
  * libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch
  * python312.patch
- Update to 2.12.0:
  * Major changes:
  - Most of the known issues leading to quadratic behavior in the
    XML parser were fixed. Internal hash tables were rewritten to
    reduce memory consumption.
  - Starting with this release, it should be enough to add the
  - -with-legacy configuration option to provide maximum ABI
    compatibility.
  - libxml2 will now store global variables in thread-local
    storage if supported by the compiler. This avoids allocating
    the data lazily which can result in a fatal error condition.
  - A new API function xmlCheckThreadLocalStorage was added so the
    allocation can be checked earlier if compiler TLS is not
    supported.
  - To prepare for future improvements, some API functions now
    expect or return a const xmlError struct.
  - Several cyclic dependencies in public header files were fixed.
  - Refactoring of the encoding code has been mostly completed.
    Calling xmlSwitchEncoding from client code is now fully
    supported, for example to override the encoding for the push
    parser.
  - When parsing data from memory, libxml2 will now stream data
    chunk by chunk instead of copying the whole buffer (possibly
    twice with encodings), reducing peak memory consumption
    considerably.
  - A new API function xmlCtxtSetMaxAmplification was added to
    allow parsing of files that would otherwise trigger the
    billion laughs protection.
  - Several bugs in the regex determinism checks were fixed.
    Invalid XML Schemas which previous versions erroneously
    accepted will now be rejected.
  * Deprecations
  - globals: Deprecate xmlLastError
  - parser: Deprecate global parser options
  - win32: Deprecate old Windows build system
  * Bug fixes
  - parser: Stop switching to ISO-8859-1 on encoding errors
  - parser: Support encoded external PEs in entity values
  - string: Fix UTF-8 validation in xmlGetUTF8Char
  - SAX2: Allow multiple top-level elements
  - parser: Update line number after coalescing text nodes
  - parser: Check for truncated multi-byte sequences
  * See the full changelog here:
  - https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.12.0</changelog>
  <changelog author="david.anes@suse.com" date="1700222400">- Bring back a patch that was mistakenly removed in the last update.
  * Readded libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700827200">- Update to verson 2.12.1:
  * Regressions:
  - hash: Fix deletion of entries during scan
  - parser: Only enable SAX2 if there are SAX2 element handlers
  * Build fixes:
  - autotools: Stop checking for snprintf
  - dict: Fix '__thread' before 'static'
  - fix: pthread weak references in globals.c
  - tests: Fix build with older MSVC</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.12.2:
  * Regressions:
  - parser:
    . Fix invalid free in xmlParseBalancedChunkMemoryRecover
    . Make CRLF increment line number
  - globals: Disable TLS in static Windows builds
  - html: Reenable buggy detection of XML declarations
  - tree: Fix regression when copying DTDs
  * Build fixes
  - build: Disable compiler TLS by default
  - cmake: Update config.h.cmake.in
  - tests: Fix tests --with-valid --without-xinclude</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
  <changelog author="foss@grueninger.de" date="1713355200">- Update to version 2.12.6
  * Regressions
  - parser: Fix detection of duplicate attributes in XML namespace
  - xmlreader: Fix xmlTextReaderConstEncoding
  - html: Fix htmlCreatePushParserCtxt with encoding
  - xmllint: Return error code if XPath returns empty nodeset
- Update to version 2.12.5
  * Security
  - [CVE-2024-25062] xmlreader: Don't expand XIncludes when backtracking
  * Regressions
  - parser: Fix crash in xmlParseInNodeContext with HTML documents
- Update to version 2.12.4
  * Regressions
  - parser: Fix regression parsing standalone declarations
  - autotools: Readd --with-xptr-locs configuration option
  - parser: Fix build --without-output
  - parser: Don't grow or shrink pull parser memory buffers
  - io: Fix memory lifetime issue with input buffers
- Update to version 2.12.3
  * Regressions
  - parser: Fix namespaces redefined from default attributes
  * Build fixes
  - include: Rename XML_EMPTY helper macro
  - include: Move declaration of xmlInitGlobals
  - include: Add missing includes
  - include: Move globals from xmlsave.h to parser.h
  - include: Readd circular dependency between tree.h and parser.h
- Drop libxml2-CVE-2024-25062.patch as it is part of upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1715688000">- Update to version 2.12.7:
  + Fix buffer overread with `xmllint --htmlout` (CVE-2024-34459, bsc#1224282).
  + xmllint: Fix --pedantic option.
  + save: Handle invalid parent pointers in xhtmlNodeDumpOutput.</changelog>
  <changelog author="dimstar@opensuse.org" date="1718193600">- Update to version 2.12.8:
  + parser: Fix performance regression when parsing namespaces.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1721908800">- Update to version 2.12.9 [bsc#1234812]:
  + Security: (CVE-2024-40896) Fix XXE protection in downstream
    code.
  + Improvements: Undeprecate xmlKeepBlanksDefault.</changelog>
  <changelog author="pgajdos@suse.com" date="1731499200">- add %{?sle15allpythons} macro [jsc#PED-68]
- use %python_build and %python_install for 15</changelog>
  <changelog author="pgajdos@suse.com" date="1740052800">- version update to 2.12.10 ([bsc#1237363], [bsc#1237370], [bsc#1237418]):
  [#]## Security
  - [CVE-2025-24928] Fix stack-buffer-overflow in xmlSnprintfElements
  - [CVE-2024-56171] Fix use-after-free after xmlSchemaItemListAdd
  - pattern: Fix compilation of explicit child axis
  [#]## Regressions
  - parser: Fix detection of duplicate attributes
  [#]## Bug fixes
  - xpath: Fix parsing of non-ASCII names
  [#]## Portability
  - python: Declare init func with PyMODINIT_FUNC
  - tests: Fix sanitizer version check on old Apple clang
  [#]## Build
  - autotools: Set AC_CONFIG_AUX_DIR
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file
- Also CVE-2025-27113 was assigned to this release.</changelog>
  <changelog author="pgajdos@suse.com" date="1745409600">- security update
- added patches
  CVE-2025-32414 [bsc#1241551], out-of-bounds read when parsing text via the Python API
  + libxml2-CVE-2025-32414.patch
  CVE-2025-32415 [bsc#1241453], a crafted XML document may lead to a heap-based buffer under-read
  + libxml2-CVE-2025-32415.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751025600">- security update
- added patches
  CVE-2025-6170 [bsc#1244700], stack buffer overflow may lead to a crash
  CVE-2025-6021 [bsc#1244580], Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2
  + libxml2-CVE-2025-6170,6021.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751025601">- security update
- added patches
  CVE-2025-49794 [bsc#1244554], heap use after free (UAF) can lead to Denial of service (DoS)
  CVE-2025-49796 [bsc#1244557], type confusion may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49794,49796.patch
  CVE-2025-49795 [bsc#1244555], null pointer dereference may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49795.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1752840000">- security update
- added patches
  CVE-2025-7425 [bsc#1246296], Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr
  + libxml2-CVE-2025-7425.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1768996800">- CVE-2026-0989: call stack exhaustion leading to application crash
  due to RelaxNG parser not limiting the recursion depth when
  resolving `&lt;include&gt;` directives (bsc#1256804, bsc#1256805, bsc#1256810)
  * Add patch libxml2-CVE-2026-0989.patch
  * https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/374</changelog>
  <changelog author="pgajdos@suse.com" date="1770206400">- CVE-2025-10911: use-after-free with key data stored cross-RVT (bsc#1250553)
  * Add patch libxml2-CVE-2025-10911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770206401">- CVE-2026-1757: memory leak in the `xmllint` interactive shell (bsc#1257593, bsc#1257594, bsc#1257595)
  * Add patch libxml2-CVE-2026-1757.patch</changelog>
  <changelog author="david.anes@suse.com" date="1770984000">- CVE-2026-0990: call stack overflow leading to application crash
  due to infinite recursion in `xmlCatalogXMLResolveURI` (bsc#1256807, bsc#1256811)
  * Add patch libxml2-CVE-2026-0990.patch
- CVE-2026-0992: excessive resource consumption when processing XML
  catalogs due to exponential behavior when handling `&lt;nextCatalog&gt;` elements (bsc#1256808, bsc#1256809, bsc#1256812)
  * Add patch libxml2-CVE-2026-0992.patch
- CVE-2025-8732: infinite recursion in catalog parsing functions when processing malformed SGML catalog files (bsc#1247858, bsc#1247850)
  * Add patch libxml2-CVE-2025-8732.patch</changelog>
</package>
<package pkgid="ed9d661f405f0cdd974d0b9f614d5e93b9c67855be29d549362aece241bcf75d" name="libxml2-python" arch="src">
  <version epoch="0" ver="2.12.10" rel="150700.4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1684497600">- Update to version 2.11.4:
  + Fixes a serious regression: parser: Fix regression when push
    parsing UTF-8 sequences.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691582400">- Update to version 2.11.5:
  + Regressions:
  - parser: Make xmlSwitchEncoding always skip the BOM
  - autotools: Improve iconv check
  + Bug fixes:
  - valid: Fix c1-&gt;parent pointer in xmlCopyDocElementContent
  - encoding: Always call ucnv_convertEx with flush set to false
  + Portability: autotools: fix Python module file ext for
    cygwin/msys2
  + Tests: runtest: Fix compilation without LIBXML_HTML_ENABLED</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security fix: CVE-2023-39615 (bsc#1214768)
  * crafted xml can cause global buffer overflow
  * Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1698062400">- Add python312.patch to make it compatible with python 3.12
  https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/226
- Use pyproject_wheel and pyproject_install macros instead of
  python_build, python_install</changelog>
  <changelog author="david.anes@suse.com" date="1699876800">- Security fix: CVE-2023-45322 (bsc#1216129)
  * use-after-free in xmlUnlinkNode() in tree.c
  * Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700136000">- Update to version 2.11.6:
  * Regressions:
  - threads: Fix --with-thread-alloc
  - xinclude: Fix ‘last’ pointer in xmlXIncludeCopyNode
  * Bug fixes: parser: Fix potential use-after-free in
    xmlParseCharDataInternal</changelog>
  <changelog author="david.anes@suse.com" date="1700136001">- Removed patches (already in upstream):
  * libxml2-CVE-2023-39615.patch
  * libxml2-CVE-2023-45322.patch
  * libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch
  * python312.patch
- Update to 2.12.0:
  * Major changes:
  - Most of the known issues leading to quadratic behavior in the
    XML parser were fixed. Internal hash tables were rewritten to
    reduce memory consumption.
  - Starting with this release, it should be enough to add the
  - -with-legacy configuration option to provide maximum ABI
    compatibility.
  - libxml2 will now store global variables in thread-local
    storage if supported by the compiler. This avoids allocating
    the data lazily which can result in a fatal error condition.
  - A new API function xmlCheckThreadLocalStorage was added so the
    allocation can be checked earlier if compiler TLS is not
    supported.
  - To prepare for future improvements, some API functions now
    expect or return a const xmlError struct.
  - Several cyclic dependencies in public header files were fixed.
  - Refactoring of the encoding code has been mostly completed.
    Calling xmlSwitchEncoding from client code is now fully
    supported, for example to override the encoding for the push
    parser.
  - When parsing data from memory, libxml2 will now stream data
    chunk by chunk instead of copying the whole buffer (possibly
    twice with encodings), reducing peak memory consumption
    considerably.
  - A new API function xmlCtxtSetMaxAmplification was added to
    allow parsing of files that would otherwise trigger the
    billion laughs protection.
  - Several bugs in the regex determinism checks were fixed.
    Invalid XML Schemas which previous versions erroneously
    accepted will now be rejected.
  * Deprecations
  - globals: Deprecate xmlLastError
  - parser: Deprecate global parser options
  - win32: Deprecate old Windows build system
  * Bug fixes
  - parser: Stop switching to ISO-8859-1 on encoding errors
  - parser: Support encoded external PEs in entity values
  - string: Fix UTF-8 validation in xmlGetUTF8Char
  - SAX2: Allow multiple top-level elements
  - parser: Update line number after coalescing text nodes
  - parser: Check for truncated multi-byte sequences
  * See the full changelog here:
  - https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.12.0</changelog>
  <changelog author="david.anes@suse.com" date="1700222400">- Bring back a patch that was mistakenly removed in the last update.
  * Readded libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700827200">- Update to verson 2.12.1:
  * Regressions:
  - hash: Fix deletion of entries during scan
  - parser: Only enable SAX2 if there are SAX2 element handlers
  * Build fixes:
  - autotools: Stop checking for snprintf
  - dict: Fix '__thread' before 'static'
  - fix: pthread weak references in globals.c
  - tests: Fix build with older MSVC</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.12.2:
  * Regressions:
  - parser:
    . Fix invalid free in xmlParseBalancedChunkMemoryRecover
    . Make CRLF increment line number
  - globals: Disable TLS in static Windows builds
  - html: Reenable buggy detection of XML declarations
  - tree: Fix regression when copying DTDs
  * Build fixes
  - build: Disable compiler TLS by default
  - cmake: Update config.h.cmake.in
  - tests: Fix tests --with-valid --without-xinclude</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
  <changelog author="foss@grueninger.de" date="1713355200">- Update to version 2.12.6
  * Regressions
  - parser: Fix detection of duplicate attributes in XML namespace
  - xmlreader: Fix xmlTextReaderConstEncoding
  - html: Fix htmlCreatePushParserCtxt with encoding
  - xmllint: Return error code if XPath returns empty nodeset
- Update to version 2.12.5
  * Security
  - [CVE-2024-25062] xmlreader: Don't expand XIncludes when backtracking
  * Regressions
  - parser: Fix crash in xmlParseInNodeContext with HTML documents
- Update to version 2.12.4
  * Regressions
  - parser: Fix regression parsing standalone declarations
  - autotools: Readd --with-xptr-locs configuration option
  - parser: Fix build --without-output
  - parser: Don't grow or shrink pull parser memory buffers
  - io: Fix memory lifetime issue with input buffers
- Update to version 2.12.3
  * Regressions
  - parser: Fix namespaces redefined from default attributes
  * Build fixes
  - include: Rename XML_EMPTY helper macro
  - include: Move declaration of xmlInitGlobals
  - include: Add missing includes
  - include: Move globals from xmlsave.h to parser.h
  - include: Readd circular dependency between tree.h and parser.h
- Drop libxml2-CVE-2024-25062.patch as it is part of upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1715688000">- Update to version 2.12.7:
  + Fix buffer overread with `xmllint --htmlout` (CVE-2024-34459, bsc#1224282).
  + xmllint: Fix --pedantic option.
  + save: Handle invalid parent pointers in xhtmlNodeDumpOutput.</changelog>
  <changelog author="dimstar@opensuse.org" date="1718193600">- Update to version 2.12.8:
  + parser: Fix performance regression when parsing namespaces.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1721908800">- Update to version 2.12.9 [bsc#1234812]:
  + Security: (CVE-2024-40896) Fix XXE protection in downstream
    code.
  + Improvements: Undeprecate xmlKeepBlanksDefault.</changelog>
  <changelog author="pgajdos@suse.com" date="1731499200">- add %{?sle15allpythons} macro [jsc#PED-68]
- use %python_build and %python_install for 15</changelog>
  <changelog author="pgajdos@suse.com" date="1740052800">- version update to 2.12.10 ([bsc#1237363], [bsc#1237370], [bsc#1237418]):
  [#]## Security
  - [CVE-2025-24928] Fix stack-buffer-overflow in xmlSnprintfElements
  - [CVE-2024-56171] Fix use-after-free after xmlSchemaItemListAdd
  - pattern: Fix compilation of explicit child axis
  [#]## Regressions
  - parser: Fix detection of duplicate attributes
  [#]## Bug fixes
  - xpath: Fix parsing of non-ASCII names
  [#]## Portability
  - python: Declare init func with PyMODINIT_FUNC
  - tests: Fix sanitizer version check on old Apple clang
  [#]## Build
  - autotools: Set AC_CONFIG_AUX_DIR
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file
- Also CVE-2025-27113 was assigned to this release.</changelog>
  <changelog author="pgajdos@suse.com" date="1745409600">- security update
- added patches
  CVE-2025-32414 [bsc#1241551], out-of-bounds read when parsing text via the Python API
  + libxml2-CVE-2025-32414.patch
  CVE-2025-32415 [bsc#1241453], a crafted XML document may lead to a heap-based buffer under-read
  + libxml2-CVE-2025-32415.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751025600">- security update
- added patches
  CVE-2025-6170 [bsc#1244700], stack buffer overflow may lead to a crash
  CVE-2025-6021 [bsc#1244580], Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2
  + libxml2-CVE-2025-6170,6021.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751025601">- security update
- added patches
  CVE-2025-49794 [bsc#1244554], heap use after free (UAF) can lead to Denial of service (DoS)
  CVE-2025-49796 [bsc#1244557], type confusion may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49794,49796.patch
  CVE-2025-49795 [bsc#1244555], null pointer dereference may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49795.patch</changelog>
</package>
<package pkgid="6bf538aa59327fe9828642d2290aa875393845fda1b772c2e16d3be8bc2d1555" name="libxml2-python" arch="src">
  <version epoch="0" ver="2.12.10" rel="150700.4.6.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1691582400">- Update to version 2.11.5:
  + Regressions:
  - parser: Make xmlSwitchEncoding always skip the BOM
  - autotools: Improve iconv check
  + Bug fixes:
  - valid: Fix c1-&gt;parent pointer in xmlCopyDocElementContent
  - encoding: Always call ucnv_convertEx with flush set to false
  + Portability: autotools: fix Python module file ext for
    cygwin/msys2
  + Tests: runtest: Fix compilation without LIBXML_HTML_ENABLED</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security fix: CVE-2023-39615 (bsc#1214768)
  * crafted xml can cause global buffer overflow
  * Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1698062400">- Add python312.patch to make it compatible with python 3.12
  https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/226
- Use pyproject_wheel and pyproject_install macros instead of
  python_build, python_install</changelog>
  <changelog author="david.anes@suse.com" date="1699876800">- Security fix: CVE-2023-45322 (bsc#1216129)
  * use-after-free in xmlUnlinkNode() in tree.c
  * Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700136000">- Update to version 2.11.6:
  * Regressions:
  - threads: Fix --with-thread-alloc
  - xinclude: Fix ‘last’ pointer in xmlXIncludeCopyNode
  * Bug fixes: parser: Fix potential use-after-free in
    xmlParseCharDataInternal</changelog>
  <changelog author="david.anes@suse.com" date="1700136001">- Removed patches (already in upstream):
  * libxml2-CVE-2023-39615.patch
  * libxml2-CVE-2023-45322.patch
  * libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch
  * python312.patch
- Update to 2.12.0:
  * Major changes:
  - Most of the known issues leading to quadratic behavior in the
    XML parser were fixed. Internal hash tables were rewritten to
    reduce memory consumption.
  - Starting with this release, it should be enough to add the
  - -with-legacy configuration option to provide maximum ABI
    compatibility.
  - libxml2 will now store global variables in thread-local
    storage if supported by the compiler. This avoids allocating
    the data lazily which can result in a fatal error condition.
  - A new API function xmlCheckThreadLocalStorage was added so the
    allocation can be checked earlier if compiler TLS is not
    supported.
  - To prepare for future improvements, some API functions now
    expect or return a const xmlError struct.
  - Several cyclic dependencies in public header files were fixed.
  - Refactoring of the encoding code has been mostly completed.
    Calling xmlSwitchEncoding from client code is now fully
    supported, for example to override the encoding for the push
    parser.
  - When parsing data from memory, libxml2 will now stream data
    chunk by chunk instead of copying the whole buffer (possibly
    twice with encodings), reducing peak memory consumption
    considerably.
  - A new API function xmlCtxtSetMaxAmplification was added to
    allow parsing of files that would otherwise trigger the
    billion laughs protection.
  - Several bugs in the regex determinism checks were fixed.
    Invalid XML Schemas which previous versions erroneously
    accepted will now be rejected.
  * Deprecations
  - globals: Deprecate xmlLastError
  - parser: Deprecate global parser options
  - win32: Deprecate old Windows build system
  * Bug fixes
  - parser: Stop switching to ISO-8859-1 on encoding errors
  - parser: Support encoded external PEs in entity values
  - string: Fix UTF-8 validation in xmlGetUTF8Char
  - SAX2: Allow multiple top-level elements
  - parser: Update line number after coalescing text nodes
  - parser: Check for truncated multi-byte sequences
  * See the full changelog here:
  - https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.12.0</changelog>
  <changelog author="david.anes@suse.com" date="1700222400">- Bring back a patch that was mistakenly removed in the last update.
  * Readded libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700827200">- Update to verson 2.12.1:
  * Regressions:
  - hash: Fix deletion of entries during scan
  - parser: Only enable SAX2 if there are SAX2 element handlers
  * Build fixes:
  - autotools: Stop checking for snprintf
  - dict: Fix '__thread' before 'static'
  - fix: pthread weak references in globals.c
  - tests: Fix build with older MSVC</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.12.2:
  * Regressions:
  - parser:
    . Fix invalid free in xmlParseBalancedChunkMemoryRecover
    . Make CRLF increment line number
  - globals: Disable TLS in static Windows builds
  - html: Reenable buggy detection of XML declarations
  - tree: Fix regression when copying DTDs
  * Build fixes
  - build: Disable compiler TLS by default
  - cmake: Update config.h.cmake.in
  - tests: Fix tests --with-valid --without-xinclude</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
  <changelog author="foss@grueninger.de" date="1713355200">- Update to version 2.12.6
  * Regressions
  - parser: Fix detection of duplicate attributes in XML namespace
  - xmlreader: Fix xmlTextReaderConstEncoding
  - html: Fix htmlCreatePushParserCtxt with encoding
  - xmllint: Return error code if XPath returns empty nodeset
- Update to version 2.12.5
  * Security
  - [CVE-2024-25062] xmlreader: Don't expand XIncludes when backtracking
  * Regressions
  - parser: Fix crash in xmlParseInNodeContext with HTML documents
- Update to version 2.12.4
  * Regressions
  - parser: Fix regression parsing standalone declarations
  - autotools: Readd --with-xptr-locs configuration option
  - parser: Fix build --without-output
  - parser: Don't grow or shrink pull parser memory buffers
  - io: Fix memory lifetime issue with input buffers
- Update to version 2.12.3
  * Regressions
  - parser: Fix namespaces redefined from default attributes
  * Build fixes
  - include: Rename XML_EMPTY helper macro
  - include: Move declaration of xmlInitGlobals
  - include: Add missing includes
  - include: Move globals from xmlsave.h to parser.h
  - include: Readd circular dependency between tree.h and parser.h
- Drop libxml2-CVE-2024-25062.patch as it is part of upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1715688000">- Update to version 2.12.7:
  + Fix buffer overread with `xmllint --htmlout` (CVE-2024-34459, bsc#1224282).
  + xmllint: Fix --pedantic option.
  + save: Handle invalid parent pointers in xhtmlNodeDumpOutput.</changelog>
  <changelog author="dimstar@opensuse.org" date="1718193600">- Update to version 2.12.8:
  + parser: Fix performance regression when parsing namespaces.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1721908800">- Update to version 2.12.9 [bsc#1234812]:
  + Security: (CVE-2024-40896) Fix XXE protection in downstream
    code.
  + Improvements: Undeprecate xmlKeepBlanksDefault.</changelog>
  <changelog author="pgajdos@suse.com" date="1731499200">- add %{?sle15allpythons} macro [jsc#PED-68]
- use %python_build and %python_install for 15</changelog>
  <changelog author="pgajdos@suse.com" date="1740052800">- version update to 2.12.10 ([bsc#1237363], [bsc#1237370], [bsc#1237418]):
  [#]## Security
  - [CVE-2025-24928] Fix stack-buffer-overflow in xmlSnprintfElements
  - [CVE-2024-56171] Fix use-after-free after xmlSchemaItemListAdd
  - pattern: Fix compilation of explicit child axis
  [#]## Regressions
  - parser: Fix detection of duplicate attributes
  [#]## Bug fixes
  - xpath: Fix parsing of non-ASCII names
  [#]## Portability
  - python: Declare init func with PyMODINIT_FUNC
  - tests: Fix sanitizer version check on old Apple clang
  [#]## Build
  - autotools: Set AC_CONFIG_AUX_DIR
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file
- Also CVE-2025-27113 was assigned to this release.</changelog>
  <changelog author="pgajdos@suse.com" date="1745409600">- security update
- added patches
  CVE-2025-32414 [bsc#1241551], out-of-bounds read when parsing text via the Python API
  + libxml2-CVE-2025-32414.patch
  CVE-2025-32415 [bsc#1241453], a crafted XML document may lead to a heap-based buffer under-read
  + libxml2-CVE-2025-32415.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751025600">- security update
- added patches
  CVE-2025-6170 [bsc#1244700], stack buffer overflow may lead to a crash
  CVE-2025-6021 [bsc#1244580], Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2
  + libxml2-CVE-2025-6170,6021.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751025601">- security update
- added patches
  CVE-2025-49794 [bsc#1244554], heap use after free (UAF) can lead to Denial of service (DoS)
  CVE-2025-49796 [bsc#1244557], type confusion may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49794,49796.patch
  CVE-2025-49795 [bsc#1244555], null pointer dereference may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49795.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1752840000">- security update
- added patches
  CVE-2025-7425 [bsc#1246296], Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr
  + libxml2-CVE-2025-7425.patch</changelog>
</package>
<package pkgid="6fb0c46f7f96e0ac9c3d0db2ece91d2044b4fdce31242bb89c7cadb4ba2139ef" name="libxml2-tools" arch="x86_64">
  <version epoch="0" ver="2.12.10" rel="150700.4.11.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1700136000">- Update to version 2.11.6:
  * Regressions:
  - threads: Fix --with-thread-alloc
  - xinclude: Fix ‘last’ pointer in xmlXIncludeCopyNode
  * Bug fixes: parser: Fix potential use-after-free in
    xmlParseCharDataInternal</changelog>
  <changelog author="david.anes@suse.com" date="1700136001">- Removed patches (already in upstream):
  * libxml2-CVE-2023-39615.patch
  * libxml2-CVE-2023-45322.patch
  * libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch
  * python312.patch
- Update to 2.12.0:
  * Major changes:
  - Most of the known issues leading to quadratic behavior in the
    XML parser were fixed. Internal hash tables were rewritten to
    reduce memory consumption.
  - Starting with this release, it should be enough to add the
  - -with-legacy configuration option to provide maximum ABI
    compatibility.
  - libxml2 will now store global variables in thread-local
    storage if supported by the compiler. This avoids allocating
    the data lazily which can result in a fatal error condition.
  - A new API function xmlCheckThreadLocalStorage was added so the
    allocation can be checked earlier if compiler TLS is not
    supported.
  - To prepare for future improvements, some API functions now
    expect or return a const xmlError struct.
  - Several cyclic dependencies in public header files were fixed.
  - Refactoring of the encoding code has been mostly completed.
    Calling xmlSwitchEncoding from client code is now fully
    supported, for example to override the encoding for the push
    parser.
  - When parsing data from memory, libxml2 will now stream data
    chunk by chunk instead of copying the whole buffer (possibly
    twice with encodings), reducing peak memory consumption
    considerably.
  - A new API function xmlCtxtSetMaxAmplification was added to
    allow parsing of files that would otherwise trigger the
    billion laughs protection.
  - Several bugs in the regex determinism checks were fixed.
    Invalid XML Schemas which previous versions erroneously
    accepted will now be rejected.
  * Deprecations
  - globals: Deprecate xmlLastError
  - parser: Deprecate global parser options
  - win32: Deprecate old Windows build system
  * Bug fixes
  - parser: Stop switching to ISO-8859-1 on encoding errors
  - parser: Support encoded external PEs in entity values
  - string: Fix UTF-8 validation in xmlGetUTF8Char
  - SAX2: Allow multiple top-level elements
  - parser: Update line number after coalescing text nodes
  - parser: Check for truncated multi-byte sequences
  * See the full changelog here:
  - https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.12.0</changelog>
  <changelog author="david.anes@suse.com" date="1700222400">- Bring back a patch that was mistakenly removed in the last update.
  * Readded libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700827200">- Update to verson 2.12.1:
  * Regressions:
  - hash: Fix deletion of entries during scan
  - parser: Only enable SAX2 if there are SAX2 element handlers
  * Build fixes:
  - autotools: Stop checking for snprintf
  - dict: Fix '__thread' before 'static'
  - fix: pthread weak references in globals.c
  - tests: Fix build with older MSVC</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.12.2:
  * Regressions:
  - parser:
    . Fix invalid free in xmlParseBalancedChunkMemoryRecover
    . Make CRLF increment line number
  - globals: Disable TLS in static Windows builds
  - html: Reenable buggy detection of XML declarations
  - tree: Fix regression when copying DTDs
  * Build fixes
  - build: Disable compiler TLS by default
  - cmake: Update config.h.cmake.in
  - tests: Fix tests --with-valid --without-xinclude</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
  <changelog author="foss@grueninger.de" date="1713355200">- Update to version 2.12.6
  * Regressions
  - parser: Fix detection of duplicate attributes in XML namespace
  - xmlreader: Fix xmlTextReaderConstEncoding
  - html: Fix htmlCreatePushParserCtxt with encoding
  - xmllint: Return error code if XPath returns empty nodeset
- Update to version 2.12.5
  * Security
  - [CVE-2024-25062] xmlreader: Don't expand XIncludes when backtracking
  * Regressions
  - parser: Fix crash in xmlParseInNodeContext with HTML documents
- Update to version 2.12.4
  * Regressions
  - parser: Fix regression parsing standalone declarations
  - autotools: Readd --with-xptr-locs configuration option
  - parser: Fix build --without-output
  - parser: Don't grow or shrink pull parser memory buffers
  - io: Fix memory lifetime issue with input buffers
- Update to version 2.12.3
  * Regressions
  - parser: Fix namespaces redefined from default attributes
  * Build fixes
  - include: Rename XML_EMPTY helper macro
  - include: Move declaration of xmlInitGlobals
  - include: Add missing includes
  - include: Move globals from xmlsave.h to parser.h
  - include: Readd circular dependency between tree.h and parser.h
- Drop libxml2-CVE-2024-25062.patch as it is part of upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1715688000">- Update to version 2.12.7:
  + Fix buffer overread with `xmllint --htmlout` (CVE-2024-34459, bsc#1224282).
  + xmllint: Fix --pedantic option.
  + save: Handle invalid parent pointers in xhtmlNodeDumpOutput.</changelog>
  <changelog author="dimstar@opensuse.org" date="1718193600">- Update to version 2.12.8:
  + parser: Fix performance regression when parsing namespaces.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1721908800">- Update to version 2.12.9 [bsc#1234812]:
  + Security: (CVE-2024-40896) Fix XXE protection in downstream
    code.
  + Improvements: Undeprecate xmlKeepBlanksDefault.</changelog>
  <changelog author="pgajdos@suse.com" date="1731499200">- add %{?sle15allpythons} macro [jsc#PED-68]
- use %python_build and %python_install for 15</changelog>
  <changelog author="pgajdos@suse.com" date="1740052800">- version update to 2.12.10 ([bsc#1237363], [bsc#1237370], [bsc#1237418]):
  [#]## Security
  - [CVE-2025-24928] Fix stack-buffer-overflow in xmlSnprintfElements
  - [CVE-2024-56171] Fix use-after-free after xmlSchemaItemListAdd
  - pattern: Fix compilation of explicit child axis
  [#]## Regressions
  - parser: Fix detection of duplicate attributes
  [#]## Bug fixes
  - xpath: Fix parsing of non-ASCII names
  [#]## Portability
  - python: Declare init func with PyMODINIT_FUNC
  - tests: Fix sanitizer version check on old Apple clang
  [#]## Build
  - autotools: Set AC_CONFIG_AUX_DIR
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file
- Also CVE-2025-27113 was assigned to this release.</changelog>
  <changelog author="pgajdos@suse.com" date="1745409600">- security update
- added patches
  CVE-2025-32414 [bsc#1241551], out-of-bounds read when parsing text via the Python API
  + libxml2-CVE-2025-32414.patch
  CVE-2025-32415 [bsc#1241453], a crafted XML document may lead to a heap-based buffer under-read
  + libxml2-CVE-2025-32415.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751025600">- security update
- added patches
  CVE-2025-6170 [bsc#1244700], stack buffer overflow may lead to a crash
  CVE-2025-6021 [bsc#1244580], Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2
  + libxml2-CVE-2025-6170,6021.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751025601">- security update
- added patches
  CVE-2025-49794 [bsc#1244554], heap use after free (UAF) can lead to Denial of service (DoS)
  CVE-2025-49796 [bsc#1244557], type confusion may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49794,49796.patch
  CVE-2025-49795 [bsc#1244555], null pointer dereference may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49795.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1752840000">- security update
- added patches
  CVE-2025-7425 [bsc#1246296], Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr
  + libxml2-CVE-2025-7425.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1768996800">- CVE-2026-0989: call stack exhaustion leading to application crash
  due to RelaxNG parser not limiting the recursion depth when
  resolving `&lt;include&gt;` directives (bsc#1256804, bsc#1256805, bsc#1256810)
  * Add patch libxml2-CVE-2026-0989.patch
  * https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/374</changelog>
  <changelog author="pgajdos@suse.com" date="1770206400">- CVE-2025-10911: use-after-free with key data stored cross-RVT (bsc#1250553)
  * Add patch libxml2-CVE-2025-10911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770206401">- CVE-2026-1757: memory leak in the `xmllint` interactive shell (bsc#1257593, bsc#1257594, bsc#1257595)
  * Add patch libxml2-CVE-2026-1757.patch</changelog>
  <changelog author="david.anes@suse.com" date="1770984000">- CVE-2026-0990: call stack overflow leading to application crash
  due to infinite recursion in `xmlCatalogXMLResolveURI` (bsc#1256807, bsc#1256811)
  * Add patch libxml2-CVE-2026-0990.patch
- CVE-2026-0992: excessive resource consumption when processing XML
  catalogs due to exponential behavior when handling `&lt;nextCatalog&gt;` elements (bsc#1256808, bsc#1256809, bsc#1256812)
  * Add patch libxml2-CVE-2026-0992.patch
- CVE-2025-8732: infinite recursion in catalog parsing functions when processing malformed SGML catalog files (bsc#1247858, bsc#1247850)
  * Add patch libxml2-CVE-2025-8732.patch</changelog>
</package>
<package pkgid="1d35f0b66296464b942490647f8aa7ddcce582d35af34830bc4ee423ea74f9ae" name="libxml2-tools" arch="x86_64">
  <version epoch="0" ver="2.12.10" rel="150700.4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1684497600">- Update to version 2.11.4:
  + Fixes a serious regression: parser: Fix regression when push
    parsing UTF-8 sequences.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1691582400">- Update to version 2.11.5:
  + Regressions:
  - parser: Make xmlSwitchEncoding always skip the BOM
  - autotools: Improve iconv check
  + Bug fixes:
  - valid: Fix c1-&gt;parent pointer in xmlCopyDocElementContent
  - encoding: Always call ucnv_convertEx with flush set to false
  + Portability: autotools: fix Python module file ext for
    cygwin/msys2
  + Tests: runtest: Fix compilation without LIBXML_HTML_ENABLED</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security fix: CVE-2023-39615 (bsc#1214768)
  * crafted xml can cause global buffer overflow
  * Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1698062400">- Add python312.patch to make it compatible with python 3.12
  https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/226
- Use pyproject_wheel and pyproject_install macros instead of
  python_build, python_install</changelog>
  <changelog author="david.anes@suse.com" date="1699876800">- Security fix: CVE-2023-45322 (bsc#1216129)
  * use-after-free in xmlUnlinkNode() in tree.c
  * Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700136000">- Update to version 2.11.6:
  * Regressions:
  - threads: Fix --with-thread-alloc
  - xinclude: Fix ‘last’ pointer in xmlXIncludeCopyNode
  * Bug fixes: parser: Fix potential use-after-free in
    xmlParseCharDataInternal</changelog>
  <changelog author="david.anes@suse.com" date="1700136001">- Removed patches (already in upstream):
  * libxml2-CVE-2023-39615.patch
  * libxml2-CVE-2023-45322.patch
  * libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch
  * python312.patch
- Update to 2.12.0:
  * Major changes:
  - Most of the known issues leading to quadratic behavior in the
    XML parser were fixed. Internal hash tables were rewritten to
    reduce memory consumption.
  - Starting with this release, it should be enough to add the
  - -with-legacy configuration option to provide maximum ABI
    compatibility.
  - libxml2 will now store global variables in thread-local
    storage if supported by the compiler. This avoids allocating
    the data lazily which can result in a fatal error condition.
  - A new API function xmlCheckThreadLocalStorage was added so the
    allocation can be checked earlier if compiler TLS is not
    supported.
  - To prepare for future improvements, some API functions now
    expect or return a const xmlError struct.
  - Several cyclic dependencies in public header files were fixed.
  - Refactoring of the encoding code has been mostly completed.
    Calling xmlSwitchEncoding from client code is now fully
    supported, for example to override the encoding for the push
    parser.
  - When parsing data from memory, libxml2 will now stream data
    chunk by chunk instead of copying the whole buffer (possibly
    twice with encodings), reducing peak memory consumption
    considerably.
  - A new API function xmlCtxtSetMaxAmplification was added to
    allow parsing of files that would otherwise trigger the
    billion laughs protection.
  - Several bugs in the regex determinism checks were fixed.
    Invalid XML Schemas which previous versions erroneously
    accepted will now be rejected.
  * Deprecations
  - globals: Deprecate xmlLastError
  - parser: Deprecate global parser options
  - win32: Deprecate old Windows build system
  * Bug fixes
  - parser: Stop switching to ISO-8859-1 on encoding errors
  - parser: Support encoded external PEs in entity values
  - string: Fix UTF-8 validation in xmlGetUTF8Char
  - SAX2: Allow multiple top-level elements
  - parser: Update line number after coalescing text nodes
  - parser: Check for truncated multi-byte sequences
  * See the full changelog here:
  - https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.12.0</changelog>
  <changelog author="david.anes@suse.com" date="1700222400">- Bring back a patch that was mistakenly removed in the last update.
  * Readded libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700827200">- Update to verson 2.12.1:
  * Regressions:
  - hash: Fix deletion of entries during scan
  - parser: Only enable SAX2 if there are SAX2 element handlers
  * Build fixes:
  - autotools: Stop checking for snprintf
  - dict: Fix '__thread' before 'static'
  - fix: pthread weak references in globals.c
  - tests: Fix build with older MSVC</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.12.2:
  * Regressions:
  - parser:
    . Fix invalid free in xmlParseBalancedChunkMemoryRecover
    . Make CRLF increment line number
  - globals: Disable TLS in static Windows builds
  - html: Reenable buggy detection of XML declarations
  - tree: Fix regression when copying DTDs
  * Build fixes
  - build: Disable compiler TLS by default
  - cmake: Update config.h.cmake.in
  - tests: Fix tests --with-valid --without-xinclude</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
  <changelog author="foss@grueninger.de" date="1713355200">- Update to version 2.12.6
  * Regressions
  - parser: Fix detection of duplicate attributes in XML namespace
  - xmlreader: Fix xmlTextReaderConstEncoding
  - html: Fix htmlCreatePushParserCtxt with encoding
  - xmllint: Return error code if XPath returns empty nodeset
- Update to version 2.12.5
  * Security
  - [CVE-2024-25062] xmlreader: Don't expand XIncludes when backtracking
  * Regressions
  - parser: Fix crash in xmlParseInNodeContext with HTML documents
- Update to version 2.12.4
  * Regressions
  - parser: Fix regression parsing standalone declarations
  - autotools: Readd --with-xptr-locs configuration option
  - parser: Fix build --without-output
  - parser: Don't grow or shrink pull parser memory buffers
  - io: Fix memory lifetime issue with input buffers
- Update to version 2.12.3
  * Regressions
  - parser: Fix namespaces redefined from default attributes
  * Build fixes
  - include: Rename XML_EMPTY helper macro
  - include: Move declaration of xmlInitGlobals
  - include: Add missing includes
  - include: Move globals from xmlsave.h to parser.h
  - include: Readd circular dependency between tree.h and parser.h
- Drop libxml2-CVE-2024-25062.patch as it is part of upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1715688000">- Update to version 2.12.7:
  + Fix buffer overread with `xmllint --htmlout` (CVE-2024-34459, bsc#1224282).
  + xmllint: Fix --pedantic option.
  + save: Handle invalid parent pointers in xhtmlNodeDumpOutput.</changelog>
  <changelog author="dimstar@opensuse.org" date="1718193600">- Update to version 2.12.8:
  + parser: Fix performance regression when parsing namespaces.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1721908800">- Update to version 2.12.9 [bsc#1234812]:
  + Security: (CVE-2024-40896) Fix XXE protection in downstream
    code.
  + Improvements: Undeprecate xmlKeepBlanksDefault.</changelog>
  <changelog author="pgajdos@suse.com" date="1731499200">- add %{?sle15allpythons} macro [jsc#PED-68]
- use %python_build and %python_install for 15</changelog>
  <changelog author="pgajdos@suse.com" date="1740052800">- version update to 2.12.10 ([bsc#1237363], [bsc#1237370], [bsc#1237418]):
  [#]## Security
  - [CVE-2025-24928] Fix stack-buffer-overflow in xmlSnprintfElements
  - [CVE-2024-56171] Fix use-after-free after xmlSchemaItemListAdd
  - pattern: Fix compilation of explicit child axis
  [#]## Regressions
  - parser: Fix detection of duplicate attributes
  [#]## Bug fixes
  - xpath: Fix parsing of non-ASCII names
  [#]## Portability
  - python: Declare init func with PyMODINIT_FUNC
  - tests: Fix sanitizer version check on old Apple clang
  [#]## Build
  - autotools: Set AC_CONFIG_AUX_DIR
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file
- Also CVE-2025-27113 was assigned to this release.</changelog>
  <changelog author="pgajdos@suse.com" date="1745409600">- security update
- added patches
  CVE-2025-32414 [bsc#1241551], out-of-bounds read when parsing text via the Python API
  + libxml2-CVE-2025-32414.patch
  CVE-2025-32415 [bsc#1241453], a crafted XML document may lead to a heap-based buffer under-read
  + libxml2-CVE-2025-32415.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751025600">- security update
- added patches
  CVE-2025-6170 [bsc#1244700], stack buffer overflow may lead to a crash
  CVE-2025-6021 [bsc#1244580], Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2
  + libxml2-CVE-2025-6170,6021.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751025601">- security update
- added patches
  CVE-2025-49794 [bsc#1244554], heap use after free (UAF) can lead to Denial of service (DoS)
  CVE-2025-49796 [bsc#1244557], type confusion may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49794,49796.patch
  CVE-2025-49795 [bsc#1244555], null pointer dereference may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49795.patch</changelog>
</package>
<package pkgid="7b664517dffb02b261746a6622d4fd475a804e5823db154606780c1df817a044" name="libxml2-tools" arch="x86_64">
  <version epoch="0" ver="2.12.10" rel="150700.4.6.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1691582400">- Update to version 2.11.5:
  + Regressions:
  - parser: Make xmlSwitchEncoding always skip the BOM
  - autotools: Improve iconv check
  + Bug fixes:
  - valid: Fix c1-&gt;parent pointer in xmlCopyDocElementContent
  - encoding: Always call ucnv_convertEx with flush set to false
  + Portability: autotools: fix Python module file ext for
    cygwin/msys2
  + Tests: runtest: Fix compilation without LIBXML_HTML_ENABLED</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security fix: CVE-2023-39615 (bsc#1214768)
  * crafted xml can cause global buffer overflow
  * Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1698062400">- Add python312.patch to make it compatible with python 3.12
  https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/226
- Use pyproject_wheel and pyproject_install macros instead of
  python_build, python_install</changelog>
  <changelog author="david.anes@suse.com" date="1699876800">- Security fix: CVE-2023-45322 (bsc#1216129)
  * use-after-free in xmlUnlinkNode() in tree.c
  * Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700136000">- Update to version 2.11.6:
  * Regressions:
  - threads: Fix --with-thread-alloc
  - xinclude: Fix ‘last’ pointer in xmlXIncludeCopyNode
  * Bug fixes: parser: Fix potential use-after-free in
    xmlParseCharDataInternal</changelog>
  <changelog author="david.anes@suse.com" date="1700136001">- Removed patches (already in upstream):
  * libxml2-CVE-2023-39615.patch
  * libxml2-CVE-2023-45322.patch
  * libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch
  * python312.patch
- Update to 2.12.0:
  * Major changes:
  - Most of the known issues leading to quadratic behavior in the
    XML parser were fixed. Internal hash tables were rewritten to
    reduce memory consumption.
  - Starting with this release, it should be enough to add the
  - -with-legacy configuration option to provide maximum ABI
    compatibility.
  - libxml2 will now store global variables in thread-local
    storage if supported by the compiler. This avoids allocating
    the data lazily which can result in a fatal error condition.
  - A new API function xmlCheckThreadLocalStorage was added so the
    allocation can be checked earlier if compiler TLS is not
    supported.
  - To prepare for future improvements, some API functions now
    expect or return a const xmlError struct.
  - Several cyclic dependencies in public header files were fixed.
  - Refactoring of the encoding code has been mostly completed.
    Calling xmlSwitchEncoding from client code is now fully
    supported, for example to override the encoding for the push
    parser.
  - When parsing data from memory, libxml2 will now stream data
    chunk by chunk instead of copying the whole buffer (possibly
    twice with encodings), reducing peak memory consumption
    considerably.
  - A new API function xmlCtxtSetMaxAmplification was added to
    allow parsing of files that would otherwise trigger the
    billion laughs protection.
  - Several bugs in the regex determinism checks were fixed.
    Invalid XML Schemas which previous versions erroneously
    accepted will now be rejected.
  * Deprecations
  - globals: Deprecate xmlLastError
  - parser: Deprecate global parser options
  - win32: Deprecate old Windows build system
  * Bug fixes
  - parser: Stop switching to ISO-8859-1 on encoding errors
  - parser: Support encoded external PEs in entity values
  - string: Fix UTF-8 validation in xmlGetUTF8Char
  - SAX2: Allow multiple top-level elements
  - parser: Update line number after coalescing text nodes
  - parser: Check for truncated multi-byte sequences
  * See the full changelog here:
  - https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.12.0</changelog>
  <changelog author="david.anes@suse.com" date="1700222400">- Bring back a patch that was mistakenly removed in the last update.
  * Readded libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1700827200">- Update to verson 2.12.1:
  * Regressions:
  - hash: Fix deletion of entries during scan
  - parser: Only enable SAX2 if there are SAX2 element handlers
  * Build fixes:
  - autotools: Stop checking for snprintf
  - dict: Fix '__thread' before 'static'
  - fix: pthread weak references in globals.c
  - tests: Fix build with older MSVC</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1701777600">- Update to version 2.12.2:
  * Regressions:
  - parser:
    . Fix invalid free in xmlParseBalancedChunkMemoryRecover
    . Make CRLF increment line number
  - globals: Disable TLS in static Windows builds
  - html: Reenable buggy detection of XML declarations
  - tree: Fix regression when copying DTDs
  * Build fixes
  - build: Disable compiler TLS by default
  - cmake: Update config.h.cmake.in
  - tests: Fix tests --with-valid --without-xinclude</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
  <changelog author="foss@grueninger.de" date="1713355200">- Update to version 2.12.6
  * Regressions
  - parser: Fix detection of duplicate attributes in XML namespace
  - xmlreader: Fix xmlTextReaderConstEncoding
  - html: Fix htmlCreatePushParserCtxt with encoding
  - xmllint: Return error code if XPath returns empty nodeset
- Update to version 2.12.5
  * Security
  - [CVE-2024-25062] xmlreader: Don't expand XIncludes when backtracking
  * Regressions
  - parser: Fix crash in xmlParseInNodeContext with HTML documents
- Update to version 2.12.4
  * Regressions
  - parser: Fix regression parsing standalone declarations
  - autotools: Readd --with-xptr-locs configuration option
  - parser: Fix build --without-output
  - parser: Don't grow or shrink pull parser memory buffers
  - io: Fix memory lifetime issue with input buffers
- Update to version 2.12.3
  * Regressions
  - parser: Fix namespaces redefined from default attributes
  * Build fixes
  - include: Rename XML_EMPTY helper macro
  - include: Move declaration of xmlInitGlobals
  - include: Add missing includes
  - include: Move globals from xmlsave.h to parser.h
  - include: Readd circular dependency between tree.h and parser.h
- Drop libxml2-CVE-2024-25062.patch as it is part of upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1715688000">- Update to version 2.12.7:
  + Fix buffer overread with `xmllint --htmlout` (CVE-2024-34459, bsc#1224282).
  + xmllint: Fix --pedantic option.
  + save: Handle invalid parent pointers in xhtmlNodeDumpOutput.</changelog>
  <changelog author="dimstar@opensuse.org" date="1718193600">- Update to version 2.12.8:
  + parser: Fix performance regression when parsing namespaces.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1721908800">- Update to version 2.12.9 [bsc#1234812]:
  + Security: (CVE-2024-40896) Fix XXE protection in downstream
    code.
  + Improvements: Undeprecate xmlKeepBlanksDefault.</changelog>
  <changelog author="pgajdos@suse.com" date="1731499200">- add %{?sle15allpythons} macro [jsc#PED-68]
- use %python_build and %python_install for 15</changelog>
  <changelog author="pgajdos@suse.com" date="1740052800">- version update to 2.12.10 ([bsc#1237363], [bsc#1237370], [bsc#1237418]):
  [#]## Security
  - [CVE-2025-24928] Fix stack-buffer-overflow in xmlSnprintfElements
  - [CVE-2024-56171] Fix use-after-free after xmlSchemaItemListAdd
  - pattern: Fix compilation of explicit child axis
  [#]## Regressions
  - parser: Fix detection of duplicate attributes
  [#]## Bug fixes
  - xpath: Fix parsing of non-ASCII names
  [#]## Portability
  - python: Declare init func with PyMODINIT_FUNC
  - tests: Fix sanitizer version check on old Apple clang
  [#]## Build
  - autotools: Set AC_CONFIG_AUX_DIR
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file
- Also CVE-2025-27113 was assigned to this release.</changelog>
  <changelog author="pgajdos@suse.com" date="1745409600">- security update
- added patches
  CVE-2025-32414 [bsc#1241551], out-of-bounds read when parsing text via the Python API
  + libxml2-CVE-2025-32414.patch
  CVE-2025-32415 [bsc#1241453], a crafted XML document may lead to a heap-based buffer under-read
  + libxml2-CVE-2025-32415.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751025600">- security update
- added patches
  CVE-2025-6170 [bsc#1244700], stack buffer overflow may lead to a crash
  CVE-2025-6021 [bsc#1244580], Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2
  + libxml2-CVE-2025-6170,6021.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1751025601">- security update
- added patches
  CVE-2025-49794 [bsc#1244554], heap use after free (UAF) can lead to Denial of service (DoS)
  CVE-2025-49796 [bsc#1244557], type confusion may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49794,49796.patch
  CVE-2025-49795 [bsc#1244555], null pointer dereference may lead to Denial of service (DoS)
  + libxml2-CVE-2025-49795.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1752840000">- security update
- added patches
  CVE-2025-7425 [bsc#1246296], Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr
  + libxml2-CVE-2025-7425.patch</changelog>
</package>
<package pkgid="73f96fa97d1793fddeb6a091b71aa255fe09c8ddcdcccf87fc9f89ed3c84f22a" name="libxslt" arch="src">
  <version epoch="0" ver="1.1.34" rel="150400.3.13.1"/>
  <changelog author="mpluskal@suse.com" date="1501243200">- Add gpg signature
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Fix RPM groups. Drop ineffective --with-pic.
  Trim conjecture from description.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508414400">- Update to version 1.1.30 [bsc#1063934]
  * Documentation:
  - Misc doc fixes
  * Portability:
  - Look for libxml2 via pkg-config first
  * Bug Fixes:
  - Also fix memory hazards in exsltFuncResultElem
  - Fix NULL deref in xsltDefaultSortFunction
  - Fix memory hazards in exsltFuncFunctionFunction
  - Fix memory leaks in EXSLT error paths
  - Fix memory leak in str:concat with empty node-set
  - Fix memory leaks in error paths
  - Switch to xmlUTF8Strsize in numbers.c
  - Fix NULL pointer deref in xsltFormatNumberFunction
  - Fix UTF-8 check in str:padding
  - Fix xmlStrPrintf argument
  - Check for overflow in _exsltDateParseGYear
  - Fix double to int conversion
  - Check for overflow in exsltDateParseDuration
  - Change version of xsltMaxVars back to 1.0.24
  - Disable xsltCopyTextString optimization for extensions
  - Create DOCTYPE for HTML version 5
  - Make xsl:decimal-format work with namespaces
  - Remove norm:localTime extension function
  - Check for integer overflow in xsltAddTextString
  - Detect infinite recursion when evaluating function arguments
  - Fix memory leak in xsltElementAvailableFunction
  - Fix for pattern predicates calling functions
  - Fix cmd.exe invocations in Makefile.mingw
  - Don't try to install index.sgml
  - Fix symbols.xml
  - Fix heap overread in xsltFormatNumberConversion
  - Fix &lt;xsl:number level="any"/&gt; for non-element nodes
  - Fix unreachable code in xsltAddChild
  - Change version number in xsl:version warning
  - Avoid infinite recursion after failed param evaluation
  - Stop if potential recursion is detected
  - Consider built-in templates in apply-imports
  - Fix precedence with multiple attribute sets
  - Rework attribute set resolution
  * Improvements:
  - Silence tests a little
  - Set LIBXML_SRC to absolute path
  - Add missing #include
  - Adjust expected error messages in tests
  - Make xsltDebug more quiet
  - New-line terminate error message that missed this convention
  - Use xmlBuffers in EXSLT string functions
  - Switch to xmlUTF8Strsize in EXSLT string functions
  - Check for return value of xmlUTF8Strlen
  - Avoid double/long round trip in FORMAT_ITEM
  - Separate date and duration structs
  - Check for overflow in _exsltDateDifference
  - Clamp seconds field of durations
  - Change _exsltDateAddDurCalc parameter types
  - Fix date:difference with time zones
  - Rework division/remainder arithmetic in date.c
  - Remove exsltDateCastDateToNumber
  - Change internal representation of years
  - Optimize IS_LEAP
  - Link libraries with libm
  - Rename xsltCopyTreeInternal to xsltCopyTree
  - Update linker version script
  - Add local wildcard to version script
  - Make some symbols static
  - Remove redundant NULL check in xsltNumberComp
  - Fix forwards compatibility for imported stylesheets
  - Reduce warnings in forwards-compatible mode
  - Precompute XSLT elements after preprocessing
  - Fix whitespace in xsltParseStylesheetTop
  - Consolidate recursion checks
  - Treat XSLT_STATE_STOPPED same as errors
  - Make sure that XSLT_STATE_STOPPED isn't overwritten
  - Add comment regarding built-in templates and params
  - Rewrite memory management of local RVTs
  - Validate QNames of attribute sets
  - Add xsl:attribute-set regression tests
  - Ignore imported stylesheets in xsltApplyAttributeSet
- Dropped patches fixed upstream
  * libxslt-CVE-2016-4738.patch
  * libxslt-1.1.28-CVE-2017-5029.patch</changelog>
  <changelog author="vcizek@suse.com" date="1510142400">- Update to version 1.1.32
  * fixes xml-config detection regression (boo#1066525)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1551700800">- Update to version 1.1.33
  * Portability:
  - Variables need 'extern' in static lib on Cygwin
  - Really declare dllexport/dllimport for Cygwin
  - Fix callback signatures in Python bindings
  - Fix transform callback signatures
  - Fix extension callback signatures
  - Fix deallocator signatures
  - Fix XPath callback signatures
  - Fix hash callback signatures
  * Bug Fixes:
  - Don't cache direct evaluation of patterns with variables
  - Move function result RVTs to context variable
  - Fix EXSLT functions returning RVTs from outer scopes
  - Fix handling of RVTs returned from nested EXSLT functions
  - Fix typos
  * Improvements:
  - Run Travis ASan tests with "sudo: required"
  * Cleanups:
  - Remove doc/libxslt-decl.txt
  - Docs for 1.1.32 release
- Cleaned with spec-cleaner</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554984000">- Security fix: [bsc#1132160, CVE-2019-11068]
  * Bypass of a protection mechanism because callers of xsltCheckRead
    and xsltCheckWrite permit access even upon receiving a -1 error
    code. xsltCheckRead can return -1 for a crafted URL that is not
    actually invalid and is subsequently loaded.
  * Added libxslt-CVE-2019-11068.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1562068800">- Security fix: [bsc#1140095, CVE-2019-13117]
  * Fix uninitialized read of xsl:number token. An xsl number with
    certain format strings could lead to a uninitialized read in
    xsltNumberFormatInsertNumbers
  * Added libxslt-CVE-2019-13117.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1562068801">- Security fix: [bsc#1140101, CVE-2019-13118]
  * Fix uninitialized read with UTF-8 grouping chars. Read of
    uninitialized stack data due to too narrow xsl:number
    instruction and an invalid character
  * Added libxslt-CVE-2019-13118.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1569931200">- Drop out lilbxslt-python package as it is just py2 based and
  upstream yet didn't bother to port it to python3.
  When there is python3 compatible code it should be enabled as
  multibuild here
  * Drop now unused libxslt-1.1.24-linkflags.patch and
    libxslt-do_not_build_doc_nor_xsltproc.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571659200">- Security fix [bsc#1154609, CVE-2019-18197]
  * Fix dangling pointer in xsltCopyText
  * Add libxslt-CVE-2019-18197.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574251200">- Update to 1.1.34: Oct 30 2019
  * Documentation:
  - Fix EXSLT web pages, Regenerate web pages
  - Fix Git link in news.html
  - Minor documentation fixes after recent changes
  - Regenerate symbols and API docs
  - Regenerate EXSLT website
  * Portability:
  - Remove stubs when compiling without debugger or profiler
  - configure.ac: Invoke PKG_CHECK_MODULES for building shared libraries
  - configure.ac: Conditionally determine whether xml2-config should pass
    shared libraries or static libraries
  - xslt-config.in: Fix broken --prefix=DIR support
  - libexslt.pc.in: Do not expose private library dependencies unless invoked
  - libxslt.pc.in: Do not expose private library dependencies unless invoked
  - Fix -Wformat-overflow warning (GCC 9)
  - Stop including ansidecl.h
  - Remove WIN32_EXTRA_* variables
  - Build without winsock
  * Bug Fixes:
  - xsl:template without name and match attributes should not be allowed
  - Make sure that Python tests exit with error code
  - Improve handling of invalid UTF-8 in format-number
  - Fix dangling pointer in xsltCopyText
  - Fix memory leak in pattern compilation error path
  - Fix uninitialized read with UTF-8 grouping chars
  - Fix integer overflow in FORMAT_GYEAR
  - Fix performance regression with xsl:number
  - Backup XPath context node in xsltInitCtxtKey
  - Fix unsigned integer overflow in date.c
  - Fix insertion of xsl:fallback content
  - Avoid quadratic behavior in xsltSaveResultTo
  - Fix numbering in non-Latin scripts
  - Fix uninitialized read of xsl:number token
  - Fix integer overflow in _exsltDateDayInWeek
  - Rework xsltAttrVT allocation
  - Fix check of xsltTestCompMatch return value
  - Fix security framework bypass
  - Use xmlNewTextChild in EXSLT dyn:map
  - Fix float casts in exsltDateDuration
  - Always set context node before calling XPath iterators
  - Fix attribute precedence with xsl:use-attribute-sets
  - Backup context node in exsltFuncFunctionFunction
  - Initialize ctxt-&gt;output before evaluating global vars
  - Fix memory leak in EXSLT functions error path
  * Improvements:
  - Fix -Wimplicit-fallthrough warnings
  - Adjust number of API index pages
  - Make xsltCompileRelativePathPattern non-recursive
  - Check that crypto:rc4_decrypt produces valid UTF-8
  - Avoid recursion in keys.c:skipPredicate
  - xslt-config.in: Simply handling of $all_flags
  - xslt-config.in: Add a --dynamic option to --libs
  - xslt-config.in: Simplify basic library handling
  - xslt-config.in: Remove unused variable
  - xslt-config: Simply handling of --cflags
  - Improve fuzzers
  - Always reuse XPath context
  - Compile with -Wextra
  - Make profiler support optional
  - Hide unused code when compiling without debugger
  - Reorganize fuzzing code
  - Optional operation limit
  - Improve seed corpus and dictionary
  - Reuse XPath context when compiling stylesheets
  - Reuse XPath context in dyn:map
  - Reuse XPath context in saxon:expression
  - Add libFuzzer targets
  - Adjust error message in expected test output
  - Change bug tracker URL
  - Change git repo URL
  - Regenerate NEWS
  - Fix misleading indentation in security.c
  * Cleanups:
  - Remove empty TODO file
  - Remove generated file libxsltclass.txt from version control
  - Rebuild docs
- Rebase patch libxslt-config-fixes.patch
- Remove patches fixed upstream:
  * libxslt-CVE-2019-11068.patch
  * libxslt-CVE-2019-13117.patch
  * libxslt-CVE-2019-13118.patch
  * libxslt-CVE-2019-18197.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Fix build with libxml2 2.9.12 that removes maxParserDepth XPath limit
- Add upstream patches:
  * libxslt-Stop-using-maxParserDepth-XPath-limit.patch
  * libxslt-Do-not-set-maxDepth-in-XPath-contexts.patch</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Move the Copyright file to %_defaultlicensedir
  Configure.ac replaces the COPYING file with a symlink.</changelog>
  <changelog author="schwab@suse.de" date="1623067200">- Don't disable testsuite under QEMU</changelog>
  <changelog author="pvorel@suse.cz" date="1623326400">- Backport upstream xsltproc manpage fix
  f165525f Recreate xsltproc man page with old Docbook stylesheet URL
  Recreate-xsltproc-man-page-with-old-Docbook-styleshe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677067200">- Security Fix: [bsc#1208574, CVE-2021-30560]
  * Use after free in Blink XSLT
  * Add libxslt-CVE-2021-30560.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1742385600">- Security fixes:
  * Fix use-after-free of XPath context node [bsc#1239625, CVE-2025-24855]
  * Fix UAF related to excluded namespaces [bsc#1239637, CVE-2024-55549]
  * Make generate-id() deterministic [bsc#1238591, CVE-2023-40403]
    Just adding the reference here as this CVE was already fixed
    in 0009-Make-generate-id-deterministic.patch
  * Rebase patches to use autosetup:
  - libxslt-1.1.24-no-net-autobuild.patch
  - libxslt-config-fixes.patch
  * Add patches:
  - libxslt-CVE-2024-55549.patch
  - libxslt-CVE-2025-24855.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1759406400">- security update
- added patches
  CVE-2025-10911 [bsc#1250553], use-after-free with key data stored cross-RVT
  * libxslt-CVE-2025-10911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1760097600">- propagate test failure into build failure
- added sources
  * libxslt-test-results.ref</changelog>
  <changelog author="pgajdos@suse.com" date="1760529600">- security update
- added patches
  CVE-2025-11731 [bsc#1251979], type confusion in exsltFuncResultCompfunction leading to denial of service
  * libxslt-CVE-2025-11731.patch</changelog>
</package>
<package pkgid="25383b2df2bef8ae50a48230fdef28023a1cded60976591ac70c6ccbbc0bff01" name="libxslt" arch="src">
  <version epoch="0" ver="1.1.34" rel="150400.3.16.1"/>
  <changelog author="jengelh@inai.de" date="1505131200">- Fix RPM groups. Drop ineffective --with-pic.
  Trim conjecture from description.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508414400">- Update to version 1.1.30 [bsc#1063934]
  * Documentation:
  - Misc doc fixes
  * Portability:
  - Look for libxml2 via pkg-config first
  * Bug Fixes:
  - Also fix memory hazards in exsltFuncResultElem
  - Fix NULL deref in xsltDefaultSortFunction
  - Fix memory hazards in exsltFuncFunctionFunction
  - Fix memory leaks in EXSLT error paths
  - Fix memory leak in str:concat with empty node-set
  - Fix memory leaks in error paths
  - Switch to xmlUTF8Strsize in numbers.c
  - Fix NULL pointer deref in xsltFormatNumberFunction
  - Fix UTF-8 check in str:padding
  - Fix xmlStrPrintf argument
  - Check for overflow in _exsltDateParseGYear
  - Fix double to int conversion
  - Check for overflow in exsltDateParseDuration
  - Change version of xsltMaxVars back to 1.0.24
  - Disable xsltCopyTextString optimization for extensions
  - Create DOCTYPE for HTML version 5
  - Make xsl:decimal-format work with namespaces
  - Remove norm:localTime extension function
  - Check for integer overflow in xsltAddTextString
  - Detect infinite recursion when evaluating function arguments
  - Fix memory leak in xsltElementAvailableFunction
  - Fix for pattern predicates calling functions
  - Fix cmd.exe invocations in Makefile.mingw
  - Don't try to install index.sgml
  - Fix symbols.xml
  - Fix heap overread in xsltFormatNumberConversion
  - Fix &lt;xsl:number level="any"/&gt; for non-element nodes
  - Fix unreachable code in xsltAddChild
  - Change version number in xsl:version warning
  - Avoid infinite recursion after failed param evaluation
  - Stop if potential recursion is detected
  - Consider built-in templates in apply-imports
  - Fix precedence with multiple attribute sets
  - Rework attribute set resolution
  * Improvements:
  - Silence tests a little
  - Set LIBXML_SRC to absolute path
  - Add missing #include
  - Adjust expected error messages in tests
  - Make xsltDebug more quiet
  - New-line terminate error message that missed this convention
  - Use xmlBuffers in EXSLT string functions
  - Switch to xmlUTF8Strsize in EXSLT string functions
  - Check for return value of xmlUTF8Strlen
  - Avoid double/long round trip in FORMAT_ITEM
  - Separate date and duration structs
  - Check for overflow in _exsltDateDifference
  - Clamp seconds field of durations
  - Change _exsltDateAddDurCalc parameter types
  - Fix date:difference with time zones
  - Rework division/remainder arithmetic in date.c
  - Remove exsltDateCastDateToNumber
  - Change internal representation of years
  - Optimize IS_LEAP
  - Link libraries with libm
  - Rename xsltCopyTreeInternal to xsltCopyTree
  - Update linker version script
  - Add local wildcard to version script
  - Make some symbols static
  - Remove redundant NULL check in xsltNumberComp
  - Fix forwards compatibility for imported stylesheets
  - Reduce warnings in forwards-compatible mode
  - Precompute XSLT elements after preprocessing
  - Fix whitespace in xsltParseStylesheetTop
  - Consolidate recursion checks
  - Treat XSLT_STATE_STOPPED same as errors
  - Make sure that XSLT_STATE_STOPPED isn't overwritten
  - Add comment regarding built-in templates and params
  - Rewrite memory management of local RVTs
  - Validate QNames of attribute sets
  - Add xsl:attribute-set regression tests
  - Ignore imported stylesheets in xsltApplyAttributeSet
- Dropped patches fixed upstream
  * libxslt-CVE-2016-4738.patch
  * libxslt-1.1.28-CVE-2017-5029.patch</changelog>
  <changelog author="vcizek@suse.com" date="1510142400">- Update to version 1.1.32
  * fixes xml-config detection regression (boo#1066525)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1551700800">- Update to version 1.1.33
  * Portability:
  - Variables need 'extern' in static lib on Cygwin
  - Really declare dllexport/dllimport for Cygwin
  - Fix callback signatures in Python bindings
  - Fix transform callback signatures
  - Fix extension callback signatures
  - Fix deallocator signatures
  - Fix XPath callback signatures
  - Fix hash callback signatures
  * Bug Fixes:
  - Don't cache direct evaluation of patterns with variables
  - Move function result RVTs to context variable
  - Fix EXSLT functions returning RVTs from outer scopes
  - Fix handling of RVTs returned from nested EXSLT functions
  - Fix typos
  * Improvements:
  - Run Travis ASan tests with "sudo: required"
  * Cleanups:
  - Remove doc/libxslt-decl.txt
  - Docs for 1.1.32 release
- Cleaned with spec-cleaner</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554984000">- Security fix: [bsc#1132160, CVE-2019-11068]
  * Bypass of a protection mechanism because callers of xsltCheckRead
    and xsltCheckWrite permit access even upon receiving a -1 error
    code. xsltCheckRead can return -1 for a crafted URL that is not
    actually invalid and is subsequently loaded.
  * Added libxslt-CVE-2019-11068.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1562068800">- Security fix: [bsc#1140095, CVE-2019-13117]
  * Fix uninitialized read of xsl:number token. An xsl number with
    certain format strings could lead to a uninitialized read in
    xsltNumberFormatInsertNumbers
  * Added libxslt-CVE-2019-13117.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1562068801">- Security fix: [bsc#1140101, CVE-2019-13118]
  * Fix uninitialized read with UTF-8 grouping chars. Read of
    uninitialized stack data due to too narrow xsl:number
    instruction and an invalid character
  * Added libxslt-CVE-2019-13118.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1569931200">- Drop out lilbxslt-python package as it is just py2 based and
  upstream yet didn't bother to port it to python3.
  When there is python3 compatible code it should be enabled as
  multibuild here
  * Drop now unused libxslt-1.1.24-linkflags.patch and
    libxslt-do_not_build_doc_nor_xsltproc.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571659200">- Security fix [bsc#1154609, CVE-2019-18197]
  * Fix dangling pointer in xsltCopyText
  * Add libxslt-CVE-2019-18197.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574251200">- Update to 1.1.34: Oct 30 2019
  * Documentation:
  - Fix EXSLT web pages, Regenerate web pages
  - Fix Git link in news.html
  - Minor documentation fixes after recent changes
  - Regenerate symbols and API docs
  - Regenerate EXSLT website
  * Portability:
  - Remove stubs when compiling without debugger or profiler
  - configure.ac: Invoke PKG_CHECK_MODULES for building shared libraries
  - configure.ac: Conditionally determine whether xml2-config should pass
    shared libraries or static libraries
  - xslt-config.in: Fix broken --prefix=DIR support
  - libexslt.pc.in: Do not expose private library dependencies unless invoked
  - libxslt.pc.in: Do not expose private library dependencies unless invoked
  - Fix -Wformat-overflow warning (GCC 9)
  - Stop including ansidecl.h
  - Remove WIN32_EXTRA_* variables
  - Build without winsock
  * Bug Fixes:
  - xsl:template without name and match attributes should not be allowed
  - Make sure that Python tests exit with error code
  - Improve handling of invalid UTF-8 in format-number
  - Fix dangling pointer in xsltCopyText
  - Fix memory leak in pattern compilation error path
  - Fix uninitialized read with UTF-8 grouping chars
  - Fix integer overflow in FORMAT_GYEAR
  - Fix performance regression with xsl:number
  - Backup XPath context node in xsltInitCtxtKey
  - Fix unsigned integer overflow in date.c
  - Fix insertion of xsl:fallback content
  - Avoid quadratic behavior in xsltSaveResultTo
  - Fix numbering in non-Latin scripts
  - Fix uninitialized read of xsl:number token
  - Fix integer overflow in _exsltDateDayInWeek
  - Rework xsltAttrVT allocation
  - Fix check of xsltTestCompMatch return value
  - Fix security framework bypass
  - Use xmlNewTextChild in EXSLT dyn:map
  - Fix float casts in exsltDateDuration
  - Always set context node before calling XPath iterators
  - Fix attribute precedence with xsl:use-attribute-sets
  - Backup context node in exsltFuncFunctionFunction
  - Initialize ctxt-&gt;output before evaluating global vars
  - Fix memory leak in EXSLT functions error path
  * Improvements:
  - Fix -Wimplicit-fallthrough warnings
  - Adjust number of API index pages
  - Make xsltCompileRelativePathPattern non-recursive
  - Check that crypto:rc4_decrypt produces valid UTF-8
  - Avoid recursion in keys.c:skipPredicate
  - xslt-config.in: Simply handling of $all_flags
  - xslt-config.in: Add a --dynamic option to --libs
  - xslt-config.in: Simplify basic library handling
  - xslt-config.in: Remove unused variable
  - xslt-config: Simply handling of --cflags
  - Improve fuzzers
  - Always reuse XPath context
  - Compile with -Wextra
  - Make profiler support optional
  - Hide unused code when compiling without debugger
  - Reorganize fuzzing code
  - Optional operation limit
  - Improve seed corpus and dictionary
  - Reuse XPath context when compiling stylesheets
  - Reuse XPath context in dyn:map
  - Reuse XPath context in saxon:expression
  - Add libFuzzer targets
  - Adjust error message in expected test output
  - Change bug tracker URL
  - Change git repo URL
  - Regenerate NEWS
  - Fix misleading indentation in security.c
  * Cleanups:
  - Remove empty TODO file
  - Remove generated file libxsltclass.txt from version control
  - Rebuild docs
- Rebase patch libxslt-config-fixes.patch
- Remove patches fixed upstream:
  * libxslt-CVE-2019-11068.patch
  * libxslt-CVE-2019-13117.patch
  * libxslt-CVE-2019-13118.patch
  * libxslt-CVE-2019-18197.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Fix build with libxml2 2.9.12 that removes maxParserDepth XPath limit
- Add upstream patches:
  * libxslt-Stop-using-maxParserDepth-XPath-limit.patch
  * libxslt-Do-not-set-maxDepth-in-XPath-contexts.patch</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Move the Copyright file to %_defaultlicensedir
  Configure.ac replaces the COPYING file with a symlink.</changelog>
  <changelog author="schwab@suse.de" date="1623067200">- Don't disable testsuite under QEMU</changelog>
  <changelog author="pvorel@suse.cz" date="1623326400">- Backport upstream xsltproc manpage fix
  f165525f Recreate xsltproc man page with old Docbook stylesheet URL
  Recreate-xsltproc-man-page-with-old-Docbook-styleshe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677067200">- Security Fix: [bsc#1208574, CVE-2021-30560]
  * Use after free in Blink XSLT
  * Add libxslt-CVE-2021-30560.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1742385600">- Security fixes:
  * Fix use-after-free of XPath context node [bsc#1239625, CVE-2025-24855]
  * Fix UAF related to excluded namespaces [bsc#1239637, CVE-2024-55549]
  * Make generate-id() deterministic [bsc#1238591, CVE-2023-40403]
    Just adding the reference here as this CVE was already fixed
    in 0009-Make-generate-id-deterministic.patch
  * Rebase patches to use autosetup:
  - libxslt-1.1.24-no-net-autobuild.patch
  - libxslt-config-fixes.patch
  * Add patches:
  - libxslt-CVE-2024-55549.patch
  - libxslt-CVE-2025-24855.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1759406400">- security update
- added patches
  CVE-2025-10911 [bsc#1250553], use-after-free with key data stored cross-RVT
  * libxslt-CVE-2025-10911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1760097600">- propagate test failure into build failure
- added sources
  * libxslt-test-results.ref</changelog>
  <changelog author="pgajdos@suse.com" date="1760529600">- security update
- added patches
  CVE-2025-11731 [bsc#1251979], type confusion in exsltFuncResultCompfunction leading to denial of service
  * libxslt-CVE-2025-11731.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770206400">- CVE-2025-10911 will be fixed on libxml2 side instead [bsc#1250553]
- deleted patches
  * libxslt-CVE-2025-10911.patch</changelog>
</package>
<package pkgid="5838b470ddea5ceff372ea7bf86079044d3589fe82749648cb704d3a2783c130" name="libxslt-devel" arch="x86_64">
  <version epoch="0" ver="1.1.34" rel="150400.3.13.1"/>
  <changelog author="mpluskal@suse.com" date="1501243200">- Add gpg signature
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Fix RPM groups. Drop ineffective --with-pic.
  Trim conjecture from description.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508414400">- Update to version 1.1.30 [bsc#1063934]
  * Documentation:
  - Misc doc fixes
  * Portability:
  - Look for libxml2 via pkg-config first
  * Bug Fixes:
  - Also fix memory hazards in exsltFuncResultElem
  - Fix NULL deref in xsltDefaultSortFunction
  - Fix memory hazards in exsltFuncFunctionFunction
  - Fix memory leaks in EXSLT error paths
  - Fix memory leak in str:concat with empty node-set
  - Fix memory leaks in error paths
  - Switch to xmlUTF8Strsize in numbers.c
  - Fix NULL pointer deref in xsltFormatNumberFunction
  - Fix UTF-8 check in str:padding
  - Fix xmlStrPrintf argument
  - Check for overflow in _exsltDateParseGYear
  - Fix double to int conversion
  - Check for overflow in exsltDateParseDuration
  - Change version of xsltMaxVars back to 1.0.24
  - Disable xsltCopyTextString optimization for extensions
  - Create DOCTYPE for HTML version 5
  - Make xsl:decimal-format work with namespaces
  - Remove norm:localTime extension function
  - Check for integer overflow in xsltAddTextString
  - Detect infinite recursion when evaluating function arguments
  - Fix memory leak in xsltElementAvailableFunction
  - Fix for pattern predicates calling functions
  - Fix cmd.exe invocations in Makefile.mingw
  - Don't try to install index.sgml
  - Fix symbols.xml
  - Fix heap overread in xsltFormatNumberConversion
  - Fix &lt;xsl:number level="any"/&gt; for non-element nodes
  - Fix unreachable code in xsltAddChild
  - Change version number in xsl:version warning
  - Avoid infinite recursion after failed param evaluation
  - Stop if potential recursion is detected
  - Consider built-in templates in apply-imports
  - Fix precedence with multiple attribute sets
  - Rework attribute set resolution
  * Improvements:
  - Silence tests a little
  - Set LIBXML_SRC to absolute path
  - Add missing #include
  - Adjust expected error messages in tests
  - Make xsltDebug more quiet
  - New-line terminate error message that missed this convention
  - Use xmlBuffers in EXSLT string functions
  - Switch to xmlUTF8Strsize in EXSLT string functions
  - Check for return value of xmlUTF8Strlen
  - Avoid double/long round trip in FORMAT_ITEM
  - Separate date and duration structs
  - Check for overflow in _exsltDateDifference
  - Clamp seconds field of durations
  - Change _exsltDateAddDurCalc parameter types
  - Fix date:difference with time zones
  - Rework division/remainder arithmetic in date.c
  - Remove exsltDateCastDateToNumber
  - Change internal representation of years
  - Optimize IS_LEAP
  - Link libraries with libm
  - Rename xsltCopyTreeInternal to xsltCopyTree
  - Update linker version script
  - Add local wildcard to version script
  - Make some symbols static
  - Remove redundant NULL check in xsltNumberComp
  - Fix forwards compatibility for imported stylesheets
  - Reduce warnings in forwards-compatible mode
  - Precompute XSLT elements after preprocessing
  - Fix whitespace in xsltParseStylesheetTop
  - Consolidate recursion checks
  - Treat XSLT_STATE_STOPPED same as errors
  - Make sure that XSLT_STATE_STOPPED isn't overwritten
  - Add comment regarding built-in templates and params
  - Rewrite memory management of local RVTs
  - Validate QNames of attribute sets
  - Add xsl:attribute-set regression tests
  - Ignore imported stylesheets in xsltApplyAttributeSet
- Dropped patches fixed upstream
  * libxslt-CVE-2016-4738.patch
  * libxslt-1.1.28-CVE-2017-5029.patch</changelog>
  <changelog author="vcizek@suse.com" date="1510142400">- Update to version 1.1.32
  * fixes xml-config detection regression (boo#1066525)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1551700800">- Update to version 1.1.33
  * Portability:
  - Variables need 'extern' in static lib on Cygwin
  - Really declare dllexport/dllimport for Cygwin
  - Fix callback signatures in Python bindings
  - Fix transform callback signatures
  - Fix extension callback signatures
  - Fix deallocator signatures
  - Fix XPath callback signatures
  - Fix hash callback signatures
  * Bug Fixes:
  - Don't cache direct evaluation of patterns with variables
  - Move function result RVTs to context variable
  - Fix EXSLT functions returning RVTs from outer scopes
  - Fix handling of RVTs returned from nested EXSLT functions
  - Fix typos
  * Improvements:
  - Run Travis ASan tests with "sudo: required"
  * Cleanups:
  - Remove doc/libxslt-decl.txt
  - Docs for 1.1.32 release
- Cleaned with spec-cleaner</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554984000">- Security fix: [bsc#1132160, CVE-2019-11068]
  * Bypass of a protection mechanism because callers of xsltCheckRead
    and xsltCheckWrite permit access even upon receiving a -1 error
    code. xsltCheckRead can return -1 for a crafted URL that is not
    actually invalid and is subsequently loaded.
  * Added libxslt-CVE-2019-11068.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1562068800">- Security fix: [bsc#1140095, CVE-2019-13117]
  * Fix uninitialized read of xsl:number token. An xsl number with
    certain format strings could lead to a uninitialized read in
    xsltNumberFormatInsertNumbers
  * Added libxslt-CVE-2019-13117.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1562068801">- Security fix: [bsc#1140101, CVE-2019-13118]
  * Fix uninitialized read with UTF-8 grouping chars. Read of
    uninitialized stack data due to too narrow xsl:number
    instruction and an invalid character
  * Added libxslt-CVE-2019-13118.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1569931200">- Drop out lilbxslt-python package as it is just py2 based and
  upstream yet didn't bother to port it to python3.
  When there is python3 compatible code it should be enabled as
  multibuild here
  * Drop now unused libxslt-1.1.24-linkflags.patch and
    libxslt-do_not_build_doc_nor_xsltproc.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571659200">- Security fix [bsc#1154609, CVE-2019-18197]
  * Fix dangling pointer in xsltCopyText
  * Add libxslt-CVE-2019-18197.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574251200">- Update to 1.1.34: Oct 30 2019
  * Documentation:
  - Fix EXSLT web pages, Regenerate web pages
  - Fix Git link in news.html
  - Minor documentation fixes after recent changes
  - Regenerate symbols and API docs
  - Regenerate EXSLT website
  * Portability:
  - Remove stubs when compiling without debugger or profiler
  - configure.ac: Invoke PKG_CHECK_MODULES for building shared libraries
  - configure.ac: Conditionally determine whether xml2-config should pass
    shared libraries or static libraries
  - xslt-config.in: Fix broken --prefix=DIR support
  - libexslt.pc.in: Do not expose private library dependencies unless invoked
  - libxslt.pc.in: Do not expose private library dependencies unless invoked
  - Fix -Wformat-overflow warning (GCC 9)
  - Stop including ansidecl.h
  - Remove WIN32_EXTRA_* variables
  - Build without winsock
  * Bug Fixes:
  - xsl:template without name and match attributes should not be allowed
  - Make sure that Python tests exit with error code
  - Improve handling of invalid UTF-8 in format-number
  - Fix dangling pointer in xsltCopyText
  - Fix memory leak in pattern compilation error path
  - Fix uninitialized read with UTF-8 grouping chars
  - Fix integer overflow in FORMAT_GYEAR
  - Fix performance regression with xsl:number
  - Backup XPath context node in xsltInitCtxtKey
  - Fix unsigned integer overflow in date.c
  - Fix insertion of xsl:fallback content
  - Avoid quadratic behavior in xsltSaveResultTo
  - Fix numbering in non-Latin scripts
  - Fix uninitialized read of xsl:number token
  - Fix integer overflow in _exsltDateDayInWeek
  - Rework xsltAttrVT allocation
  - Fix check of xsltTestCompMatch return value
  - Fix security framework bypass
  - Use xmlNewTextChild in EXSLT dyn:map
  - Fix float casts in exsltDateDuration
  - Always set context node before calling XPath iterators
  - Fix attribute precedence with xsl:use-attribute-sets
  - Backup context node in exsltFuncFunctionFunction
  - Initialize ctxt-&gt;output before evaluating global vars
  - Fix memory leak in EXSLT functions error path
  * Improvements:
  - Fix -Wimplicit-fallthrough warnings
  - Adjust number of API index pages
  - Make xsltCompileRelativePathPattern non-recursive
  - Check that crypto:rc4_decrypt produces valid UTF-8
  - Avoid recursion in keys.c:skipPredicate
  - xslt-config.in: Simply handling of $all_flags
  - xslt-config.in: Add a --dynamic option to --libs
  - xslt-config.in: Simplify basic library handling
  - xslt-config.in: Remove unused variable
  - xslt-config: Simply handling of --cflags
  - Improve fuzzers
  - Always reuse XPath context
  - Compile with -Wextra
  - Make profiler support optional
  - Hide unused code when compiling without debugger
  - Reorganize fuzzing code
  - Optional operation limit
  - Improve seed corpus and dictionary
  - Reuse XPath context when compiling stylesheets
  - Reuse XPath context in dyn:map
  - Reuse XPath context in saxon:expression
  - Add libFuzzer targets
  - Adjust error message in expected test output
  - Change bug tracker URL
  - Change git repo URL
  - Regenerate NEWS
  - Fix misleading indentation in security.c
  * Cleanups:
  - Remove empty TODO file
  - Remove generated file libxsltclass.txt from version control
  - Rebuild docs
- Rebase patch libxslt-config-fixes.patch
- Remove patches fixed upstream:
  * libxslt-CVE-2019-11068.patch
  * libxslt-CVE-2019-13117.patch
  * libxslt-CVE-2019-13118.patch
  * libxslt-CVE-2019-18197.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Fix build with libxml2 2.9.12 that removes maxParserDepth XPath limit
- Add upstream patches:
  * libxslt-Stop-using-maxParserDepth-XPath-limit.patch
  * libxslt-Do-not-set-maxDepth-in-XPath-contexts.patch</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Move the Copyright file to %_defaultlicensedir
  Configure.ac replaces the COPYING file with a symlink.</changelog>
  <changelog author="schwab@suse.de" date="1623067200">- Don't disable testsuite under QEMU</changelog>
  <changelog author="pvorel@suse.cz" date="1623326400">- Backport upstream xsltproc manpage fix
  f165525f Recreate xsltproc man page with old Docbook stylesheet URL
  Recreate-xsltproc-man-page-with-old-Docbook-styleshe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677067200">- Security Fix: [bsc#1208574, CVE-2021-30560]
  * Use after free in Blink XSLT
  * Add libxslt-CVE-2021-30560.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1742385600">- Security fixes:
  * Fix use-after-free of XPath context node [bsc#1239625, CVE-2025-24855]
  * Fix UAF related to excluded namespaces [bsc#1239637, CVE-2024-55549]
  * Make generate-id() deterministic [bsc#1238591, CVE-2023-40403]
    Just adding the reference here as this CVE was already fixed
    in 0009-Make-generate-id-deterministic.patch
  * Rebase patches to use autosetup:
  - libxslt-1.1.24-no-net-autobuild.patch
  - libxslt-config-fixes.patch
  * Add patches:
  - libxslt-CVE-2024-55549.patch
  - libxslt-CVE-2025-24855.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1759406400">- security update
- added patches
  CVE-2025-10911 [bsc#1250553], use-after-free with key data stored cross-RVT
  * libxslt-CVE-2025-10911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1760097600">- propagate test failure into build failure
- added sources
  * libxslt-test-results.ref</changelog>
  <changelog author="pgajdos@suse.com" date="1760529600">- security update
- added patches
  CVE-2025-11731 [bsc#1251979], type confusion in exsltFuncResultCompfunction leading to denial of service
  * libxslt-CVE-2025-11731.patch</changelog>
</package>
<package pkgid="4c24732afce1f836bc173e106a7bb56b574614074cedf32adb6c43d95eeca12f" name="libxslt-devel" arch="x86_64">
  <version epoch="0" ver="1.1.34" rel="150400.3.16.1"/>
  <changelog author="jengelh@inai.de" date="1505131200">- Fix RPM groups. Drop ineffective --with-pic.
  Trim conjecture from description.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508414400">- Update to version 1.1.30 [bsc#1063934]
  * Documentation:
  - Misc doc fixes
  * Portability:
  - Look for libxml2 via pkg-config first
  * Bug Fixes:
  - Also fix memory hazards in exsltFuncResultElem
  - Fix NULL deref in xsltDefaultSortFunction
  - Fix memory hazards in exsltFuncFunctionFunction
  - Fix memory leaks in EXSLT error paths
  - Fix memory leak in str:concat with empty node-set
  - Fix memory leaks in error paths
  - Switch to xmlUTF8Strsize in numbers.c
  - Fix NULL pointer deref in xsltFormatNumberFunction
  - Fix UTF-8 check in str:padding
  - Fix xmlStrPrintf argument
  - Check for overflow in _exsltDateParseGYear
  - Fix double to int conversion
  - Check for overflow in exsltDateParseDuration
  - Change version of xsltMaxVars back to 1.0.24
  - Disable xsltCopyTextString optimization for extensions
  - Create DOCTYPE for HTML version 5
  - Make xsl:decimal-format work with namespaces
  - Remove norm:localTime extension function
  - Check for integer overflow in xsltAddTextString
  - Detect infinite recursion when evaluating function arguments
  - Fix memory leak in xsltElementAvailableFunction
  - Fix for pattern predicates calling functions
  - Fix cmd.exe invocations in Makefile.mingw
  - Don't try to install index.sgml
  - Fix symbols.xml
  - Fix heap overread in xsltFormatNumberConversion
  - Fix &lt;xsl:number level="any"/&gt; for non-element nodes
  - Fix unreachable code in xsltAddChild
  - Change version number in xsl:version warning
  - Avoid infinite recursion after failed param evaluation
  - Stop if potential recursion is detected
  - Consider built-in templates in apply-imports
  - Fix precedence with multiple attribute sets
  - Rework attribute set resolution
  * Improvements:
  - Silence tests a little
  - Set LIBXML_SRC to absolute path
  - Add missing #include
  - Adjust expected error messages in tests
  - Make xsltDebug more quiet
  - New-line terminate error message that missed this convention
  - Use xmlBuffers in EXSLT string functions
  - Switch to xmlUTF8Strsize in EXSLT string functions
  - Check for return value of xmlUTF8Strlen
  - Avoid double/long round trip in FORMAT_ITEM
  - Separate date and duration structs
  - Check for overflow in _exsltDateDifference
  - Clamp seconds field of durations
  - Change _exsltDateAddDurCalc parameter types
  - Fix date:difference with time zones
  - Rework division/remainder arithmetic in date.c
  - Remove exsltDateCastDateToNumber
  - Change internal representation of years
  - Optimize IS_LEAP
  - Link libraries with libm
  - Rename xsltCopyTreeInternal to xsltCopyTree
  - Update linker version script
  - Add local wildcard to version script
  - Make some symbols static
  - Remove redundant NULL check in xsltNumberComp
  - Fix forwards compatibility for imported stylesheets
  - Reduce warnings in forwards-compatible mode
  - Precompute XSLT elements after preprocessing
  - Fix whitespace in xsltParseStylesheetTop
  - Consolidate recursion checks
  - Treat XSLT_STATE_STOPPED same as errors
  - Make sure that XSLT_STATE_STOPPED isn't overwritten
  - Add comment regarding built-in templates and params
  - Rewrite memory management of local RVTs
  - Validate QNames of attribute sets
  - Add xsl:attribute-set regression tests
  - Ignore imported stylesheets in xsltApplyAttributeSet
- Dropped patches fixed upstream
  * libxslt-CVE-2016-4738.patch
  * libxslt-1.1.28-CVE-2017-5029.patch</changelog>
  <changelog author="vcizek@suse.com" date="1510142400">- Update to version 1.1.32
  * fixes xml-config detection regression (boo#1066525)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1551700800">- Update to version 1.1.33
  * Portability:
  - Variables need 'extern' in static lib on Cygwin
  - Really declare dllexport/dllimport for Cygwin
  - Fix callback signatures in Python bindings
  - Fix transform callback signatures
  - Fix extension callback signatures
  - Fix deallocator signatures
  - Fix XPath callback signatures
  - Fix hash callback signatures
  * Bug Fixes:
  - Don't cache direct evaluation of patterns with variables
  - Move function result RVTs to context variable
  - Fix EXSLT functions returning RVTs from outer scopes
  - Fix handling of RVTs returned from nested EXSLT functions
  - Fix typos
  * Improvements:
  - Run Travis ASan tests with "sudo: required"
  * Cleanups:
  - Remove doc/libxslt-decl.txt
  - Docs for 1.1.32 release
- Cleaned with spec-cleaner</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554984000">- Security fix: [bsc#1132160, CVE-2019-11068]
  * Bypass of a protection mechanism because callers of xsltCheckRead
    and xsltCheckWrite permit access even upon receiving a -1 error
    code. xsltCheckRead can return -1 for a crafted URL that is not
    actually invalid and is subsequently loaded.
  * Added libxslt-CVE-2019-11068.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1562068800">- Security fix: [bsc#1140095, CVE-2019-13117]
  * Fix uninitialized read of xsl:number token. An xsl number with
    certain format strings could lead to a uninitialized read in
    xsltNumberFormatInsertNumbers
  * Added libxslt-CVE-2019-13117.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1562068801">- Security fix: [bsc#1140101, CVE-2019-13118]
  * Fix uninitialized read with UTF-8 grouping chars. Read of
    uninitialized stack data due to too narrow xsl:number
    instruction and an invalid character
  * Added libxslt-CVE-2019-13118.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1569931200">- Drop out lilbxslt-python package as it is just py2 based and
  upstream yet didn't bother to port it to python3.
  When there is python3 compatible code it should be enabled as
  multibuild here
  * Drop now unused libxslt-1.1.24-linkflags.patch and
    libxslt-do_not_build_doc_nor_xsltproc.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571659200">- Security fix [bsc#1154609, CVE-2019-18197]
  * Fix dangling pointer in xsltCopyText
  * Add libxslt-CVE-2019-18197.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574251200">- Update to 1.1.34: Oct 30 2019
  * Documentation:
  - Fix EXSLT web pages, Regenerate web pages
  - Fix Git link in news.html
  - Minor documentation fixes after recent changes
  - Regenerate symbols and API docs
  - Regenerate EXSLT website
  * Portability:
  - Remove stubs when compiling without debugger or profiler
  - configure.ac: Invoke PKG_CHECK_MODULES for building shared libraries
  - configure.ac: Conditionally determine whether xml2-config should pass
    shared libraries or static libraries
  - xslt-config.in: Fix broken --prefix=DIR support
  - libexslt.pc.in: Do not expose private library dependencies unless invoked
  - libxslt.pc.in: Do not expose private library dependencies unless invoked
  - Fix -Wformat-overflow warning (GCC 9)
  - Stop including ansidecl.h
  - Remove WIN32_EXTRA_* variables
  - Build without winsock
  * Bug Fixes:
  - xsl:template without name and match attributes should not be allowed
  - Make sure that Python tests exit with error code
  - Improve handling of invalid UTF-8 in format-number
  - Fix dangling pointer in xsltCopyText
  - Fix memory leak in pattern compilation error path
  - Fix uninitialized read with UTF-8 grouping chars
  - Fix integer overflow in FORMAT_GYEAR
  - Fix performance regression with xsl:number
  - Backup XPath context node in xsltInitCtxtKey
  - Fix unsigned integer overflow in date.c
  - Fix insertion of xsl:fallback content
  - Avoid quadratic behavior in xsltSaveResultTo
  - Fix numbering in non-Latin scripts
  - Fix uninitialized read of xsl:number token
  - Fix integer overflow in _exsltDateDayInWeek
  - Rework xsltAttrVT allocation
  - Fix check of xsltTestCompMatch return value
  - Fix security framework bypass
  - Use xmlNewTextChild in EXSLT dyn:map
  - Fix float casts in exsltDateDuration
  - Always set context node before calling XPath iterators
  - Fix attribute precedence with xsl:use-attribute-sets
  - Backup context node in exsltFuncFunctionFunction
  - Initialize ctxt-&gt;output before evaluating global vars
  - Fix memory leak in EXSLT functions error path
  * Improvements:
  - Fix -Wimplicit-fallthrough warnings
  - Adjust number of API index pages
  - Make xsltCompileRelativePathPattern non-recursive
  - Check that crypto:rc4_decrypt produces valid UTF-8
  - Avoid recursion in keys.c:skipPredicate
  - xslt-config.in: Simply handling of $all_flags
  - xslt-config.in: Add a --dynamic option to --libs
  - xslt-config.in: Simplify basic library handling
  - xslt-config.in: Remove unused variable
  - xslt-config: Simply handling of --cflags
  - Improve fuzzers
  - Always reuse XPath context
  - Compile with -Wextra
  - Make profiler support optional
  - Hide unused code when compiling without debugger
  - Reorganize fuzzing code
  - Optional operation limit
  - Improve seed corpus and dictionary
  - Reuse XPath context when compiling stylesheets
  - Reuse XPath context in dyn:map
  - Reuse XPath context in saxon:expression
  - Add libFuzzer targets
  - Adjust error message in expected test output
  - Change bug tracker URL
  - Change git repo URL
  - Regenerate NEWS
  - Fix misleading indentation in security.c
  * Cleanups:
  - Remove empty TODO file
  - Remove generated file libxsltclass.txt from version control
  - Rebuild docs
- Rebase patch libxslt-config-fixes.patch
- Remove patches fixed upstream:
  * libxslt-CVE-2019-11068.patch
  * libxslt-CVE-2019-13117.patch
  * libxslt-CVE-2019-13118.patch
  * libxslt-CVE-2019-18197.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Fix build with libxml2 2.9.12 that removes maxParserDepth XPath limit
- Add upstream patches:
  * libxslt-Stop-using-maxParserDepth-XPath-limit.patch
  * libxslt-Do-not-set-maxDepth-in-XPath-contexts.patch</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Move the Copyright file to %_defaultlicensedir
  Configure.ac replaces the COPYING file with a symlink.</changelog>
  <changelog author="schwab@suse.de" date="1623067200">- Don't disable testsuite under QEMU</changelog>
  <changelog author="pvorel@suse.cz" date="1623326400">- Backport upstream xsltproc manpage fix
  f165525f Recreate xsltproc man page with old Docbook stylesheet URL
  Recreate-xsltproc-man-page-with-old-Docbook-styleshe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677067200">- Security Fix: [bsc#1208574, CVE-2021-30560]
  * Use after free in Blink XSLT
  * Add libxslt-CVE-2021-30560.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1742385600">- Security fixes:
  * Fix use-after-free of XPath context node [bsc#1239625, CVE-2025-24855]
  * Fix UAF related to excluded namespaces [bsc#1239637, CVE-2024-55549]
  * Make generate-id() deterministic [bsc#1238591, CVE-2023-40403]
    Just adding the reference here as this CVE was already fixed
    in 0009-Make-generate-id-deterministic.patch
  * Rebase patches to use autosetup:
  - libxslt-1.1.24-no-net-autobuild.patch
  - libxslt-config-fixes.patch
  * Add patches:
  - libxslt-CVE-2024-55549.patch
  - libxslt-CVE-2025-24855.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1759406400">- security update
- added patches
  CVE-2025-10911 [bsc#1250553], use-after-free with key data stored cross-RVT
  * libxslt-CVE-2025-10911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1760097600">- propagate test failure into build failure
- added sources
  * libxslt-test-results.ref</changelog>
  <changelog author="pgajdos@suse.com" date="1760529600">- security update
- added patches
  CVE-2025-11731 [bsc#1251979], type confusion in exsltFuncResultCompfunction leading to denial of service
  * libxslt-CVE-2025-11731.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770206400">- CVE-2025-10911 will be fixed on libxml2 side instead [bsc#1250553]
- deleted patches
  * libxslt-CVE-2025-10911.patch</changelog>
</package>
<package pkgid="443e0f26cdaef10a351ba21852d15796bb2710bfbf9d79f1c911fd6d6ccf983f" name="libxslt-tools" arch="x86_64">
  <version epoch="0" ver="1.1.34" rel="150400.3.13.1"/>
  <changelog author="mpluskal@suse.com" date="1501243200">- Add gpg signature
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Fix RPM groups. Drop ineffective --with-pic.
  Trim conjecture from description.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508414400">- Update to version 1.1.30 [bsc#1063934]
  * Documentation:
  - Misc doc fixes
  * Portability:
  - Look for libxml2 via pkg-config first
  * Bug Fixes:
  - Also fix memory hazards in exsltFuncResultElem
  - Fix NULL deref in xsltDefaultSortFunction
  - Fix memory hazards in exsltFuncFunctionFunction
  - Fix memory leaks in EXSLT error paths
  - Fix memory leak in str:concat with empty node-set
  - Fix memory leaks in error paths
  - Switch to xmlUTF8Strsize in numbers.c
  - Fix NULL pointer deref in xsltFormatNumberFunction
  - Fix UTF-8 check in str:padding
  - Fix xmlStrPrintf argument
  - Check for overflow in _exsltDateParseGYear
  - Fix double to int conversion
  - Check for overflow in exsltDateParseDuration
  - Change version of xsltMaxVars back to 1.0.24
  - Disable xsltCopyTextString optimization for extensions
  - Create DOCTYPE for HTML version 5
  - Make xsl:decimal-format work with namespaces
  - Remove norm:localTime extension function
  - Check for integer overflow in xsltAddTextString
  - Detect infinite recursion when evaluating function arguments
  - Fix memory leak in xsltElementAvailableFunction
  - Fix for pattern predicates calling functions
  - Fix cmd.exe invocations in Makefile.mingw
  - Don't try to install index.sgml
  - Fix symbols.xml
  - Fix heap overread in xsltFormatNumberConversion
  - Fix &lt;xsl:number level="any"/&gt; for non-element nodes
  - Fix unreachable code in xsltAddChild
  - Change version number in xsl:version warning
  - Avoid infinite recursion after failed param evaluation
  - Stop if potential recursion is detected
  - Consider built-in templates in apply-imports
  - Fix precedence with multiple attribute sets
  - Rework attribute set resolution
  * Improvements:
  - Silence tests a little
  - Set LIBXML_SRC to absolute path
  - Add missing #include
  - Adjust expected error messages in tests
  - Make xsltDebug more quiet
  - New-line terminate error message that missed this convention
  - Use xmlBuffers in EXSLT string functions
  - Switch to xmlUTF8Strsize in EXSLT string functions
  - Check for return value of xmlUTF8Strlen
  - Avoid double/long round trip in FORMAT_ITEM
  - Separate date and duration structs
  - Check for overflow in _exsltDateDifference
  - Clamp seconds field of durations
  - Change _exsltDateAddDurCalc parameter types
  - Fix date:difference with time zones
  - Rework division/remainder arithmetic in date.c
  - Remove exsltDateCastDateToNumber
  - Change internal representation of years
  - Optimize IS_LEAP
  - Link libraries with libm
  - Rename xsltCopyTreeInternal to xsltCopyTree
  - Update linker version script
  - Add local wildcard to version script
  - Make some symbols static
  - Remove redundant NULL check in xsltNumberComp
  - Fix forwards compatibility for imported stylesheets
  - Reduce warnings in forwards-compatible mode
  - Precompute XSLT elements after preprocessing
  - Fix whitespace in xsltParseStylesheetTop
  - Consolidate recursion checks
  - Treat XSLT_STATE_STOPPED same as errors
  - Make sure that XSLT_STATE_STOPPED isn't overwritten
  - Add comment regarding built-in templates and params
  - Rewrite memory management of local RVTs
  - Validate QNames of attribute sets
  - Add xsl:attribute-set regression tests
  - Ignore imported stylesheets in xsltApplyAttributeSet
- Dropped patches fixed upstream
  * libxslt-CVE-2016-4738.patch
  * libxslt-1.1.28-CVE-2017-5029.patch</changelog>
  <changelog author="vcizek@suse.com" date="1510142400">- Update to version 1.1.32
  * fixes xml-config detection regression (boo#1066525)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1551700800">- Update to version 1.1.33
  * Portability:
  - Variables need 'extern' in static lib on Cygwin
  - Really declare dllexport/dllimport for Cygwin
  - Fix callback signatures in Python bindings
  - Fix transform callback signatures
  - Fix extension callback signatures
  - Fix deallocator signatures
  - Fix XPath callback signatures
  - Fix hash callback signatures
  * Bug Fixes:
  - Don't cache direct evaluation of patterns with variables
  - Move function result RVTs to context variable
  - Fix EXSLT functions returning RVTs from outer scopes
  - Fix handling of RVTs returned from nested EXSLT functions
  - Fix typos
  * Improvements:
  - Run Travis ASan tests with "sudo: required"
  * Cleanups:
  - Remove doc/libxslt-decl.txt
  - Docs for 1.1.32 release
- Cleaned with spec-cleaner</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554984000">- Security fix: [bsc#1132160, CVE-2019-11068]
  * Bypass of a protection mechanism because callers of xsltCheckRead
    and xsltCheckWrite permit access even upon receiving a -1 error
    code. xsltCheckRead can return -1 for a crafted URL that is not
    actually invalid and is subsequently loaded.
  * Added libxslt-CVE-2019-11068.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1562068800">- Security fix: [bsc#1140095, CVE-2019-13117]
  * Fix uninitialized read of xsl:number token. An xsl number with
    certain format strings could lead to a uninitialized read in
    xsltNumberFormatInsertNumbers
  * Added libxslt-CVE-2019-13117.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1562068801">- Security fix: [bsc#1140101, CVE-2019-13118]
  * Fix uninitialized read with UTF-8 grouping chars. Read of
    uninitialized stack data due to too narrow xsl:number
    instruction and an invalid character
  * Added libxslt-CVE-2019-13118.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1569931200">- Drop out lilbxslt-python package as it is just py2 based and
  upstream yet didn't bother to port it to python3.
  When there is python3 compatible code it should be enabled as
  multibuild here
  * Drop now unused libxslt-1.1.24-linkflags.patch and
    libxslt-do_not_build_doc_nor_xsltproc.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571659200">- Security fix [bsc#1154609, CVE-2019-18197]
  * Fix dangling pointer in xsltCopyText
  * Add libxslt-CVE-2019-18197.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574251200">- Update to 1.1.34: Oct 30 2019
  * Documentation:
  - Fix EXSLT web pages, Regenerate web pages
  - Fix Git link in news.html
  - Minor documentation fixes after recent changes
  - Regenerate symbols and API docs
  - Regenerate EXSLT website
  * Portability:
  - Remove stubs when compiling without debugger or profiler
  - configure.ac: Invoke PKG_CHECK_MODULES for building shared libraries
  - configure.ac: Conditionally determine whether xml2-config should pass
    shared libraries or static libraries
  - xslt-config.in: Fix broken --prefix=DIR support
  - libexslt.pc.in: Do not expose private library dependencies unless invoked
  - libxslt.pc.in: Do not expose private library dependencies unless invoked
  - Fix -Wformat-overflow warning (GCC 9)
  - Stop including ansidecl.h
  - Remove WIN32_EXTRA_* variables
  - Build without winsock
  * Bug Fixes:
  - xsl:template without name and match attributes should not be allowed
  - Make sure that Python tests exit with error code
  - Improve handling of invalid UTF-8 in format-number
  - Fix dangling pointer in xsltCopyText
  - Fix memory leak in pattern compilation error path
  - Fix uninitialized read with UTF-8 grouping chars
  - Fix integer overflow in FORMAT_GYEAR
  - Fix performance regression with xsl:number
  - Backup XPath context node in xsltInitCtxtKey
  - Fix unsigned integer overflow in date.c
  - Fix insertion of xsl:fallback content
  - Avoid quadratic behavior in xsltSaveResultTo
  - Fix numbering in non-Latin scripts
  - Fix uninitialized read of xsl:number token
  - Fix integer overflow in _exsltDateDayInWeek
  - Rework xsltAttrVT allocation
  - Fix check of xsltTestCompMatch return value
  - Fix security framework bypass
  - Use xmlNewTextChild in EXSLT dyn:map
  - Fix float casts in exsltDateDuration
  - Always set context node before calling XPath iterators
  - Fix attribute precedence with xsl:use-attribute-sets
  - Backup context node in exsltFuncFunctionFunction
  - Initialize ctxt-&gt;output before evaluating global vars
  - Fix memory leak in EXSLT functions error path
  * Improvements:
  - Fix -Wimplicit-fallthrough warnings
  - Adjust number of API index pages
  - Make xsltCompileRelativePathPattern non-recursive
  - Check that crypto:rc4_decrypt produces valid UTF-8
  - Avoid recursion in keys.c:skipPredicate
  - xslt-config.in: Simply handling of $all_flags
  - xslt-config.in: Add a --dynamic option to --libs
  - xslt-config.in: Simplify basic library handling
  - xslt-config.in: Remove unused variable
  - xslt-config: Simply handling of --cflags
  - Improve fuzzers
  - Always reuse XPath context
  - Compile with -Wextra
  - Make profiler support optional
  - Hide unused code when compiling without debugger
  - Reorganize fuzzing code
  - Optional operation limit
  - Improve seed corpus and dictionary
  - Reuse XPath context when compiling stylesheets
  - Reuse XPath context in dyn:map
  - Reuse XPath context in saxon:expression
  - Add libFuzzer targets
  - Adjust error message in expected test output
  - Change bug tracker URL
  - Change git repo URL
  - Regenerate NEWS
  - Fix misleading indentation in security.c
  * Cleanups:
  - Remove empty TODO file
  - Remove generated file libxsltclass.txt from version control
  - Rebuild docs
- Rebase patch libxslt-config-fixes.patch
- Remove patches fixed upstream:
  * libxslt-CVE-2019-11068.patch
  * libxslt-CVE-2019-13117.patch
  * libxslt-CVE-2019-13118.patch
  * libxslt-CVE-2019-18197.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Fix build with libxml2 2.9.12 that removes maxParserDepth XPath limit
- Add upstream patches:
  * libxslt-Stop-using-maxParserDepth-XPath-limit.patch
  * libxslt-Do-not-set-maxDepth-in-XPath-contexts.patch</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Move the Copyright file to %_defaultlicensedir
  Configure.ac replaces the COPYING file with a symlink.</changelog>
  <changelog author="schwab@suse.de" date="1623067200">- Don't disable testsuite under QEMU</changelog>
  <changelog author="pvorel@suse.cz" date="1623326400">- Backport upstream xsltproc manpage fix
  f165525f Recreate xsltproc man page with old Docbook stylesheet URL
  Recreate-xsltproc-man-page-with-old-Docbook-styleshe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677067200">- Security Fix: [bsc#1208574, CVE-2021-30560]
  * Use after free in Blink XSLT
  * Add libxslt-CVE-2021-30560.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1742385600">- Security fixes:
  * Fix use-after-free of XPath context node [bsc#1239625, CVE-2025-24855]
  * Fix UAF related to excluded namespaces [bsc#1239637, CVE-2024-55549]
  * Make generate-id() deterministic [bsc#1238591, CVE-2023-40403]
    Just adding the reference here as this CVE was already fixed
    in 0009-Make-generate-id-deterministic.patch
  * Rebase patches to use autosetup:
  - libxslt-1.1.24-no-net-autobuild.patch
  - libxslt-config-fixes.patch
  * Add patches:
  - libxslt-CVE-2024-55549.patch
  - libxslt-CVE-2025-24855.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1759406400">- security update
- added patches
  CVE-2025-10911 [bsc#1250553], use-after-free with key data stored cross-RVT
  * libxslt-CVE-2025-10911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1760097600">- propagate test failure into build failure
- added sources
  * libxslt-test-results.ref</changelog>
  <changelog author="pgajdos@suse.com" date="1760529600">- security update
- added patches
  CVE-2025-11731 [bsc#1251979], type confusion in exsltFuncResultCompfunction leading to denial of service
  * libxslt-CVE-2025-11731.patch</changelog>
</package>
<package pkgid="93bc9e5e7e802935af1abd0959e71bfa3c03e8609bdad38e606ca70dd480b7a4" name="libxslt-tools" arch="x86_64">
  <version epoch="0" ver="1.1.34" rel="150400.3.16.1"/>
  <changelog author="jengelh@inai.de" date="1505131200">- Fix RPM groups. Drop ineffective --with-pic.
  Trim conjecture from description.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508414400">- Update to version 1.1.30 [bsc#1063934]
  * Documentation:
  - Misc doc fixes
  * Portability:
  - Look for libxml2 via pkg-config first
  * Bug Fixes:
  - Also fix memory hazards in exsltFuncResultElem
  - Fix NULL deref in xsltDefaultSortFunction
  - Fix memory hazards in exsltFuncFunctionFunction
  - Fix memory leaks in EXSLT error paths
  - Fix memory leak in str:concat with empty node-set
  - Fix memory leaks in error paths
  - Switch to xmlUTF8Strsize in numbers.c
  - Fix NULL pointer deref in xsltFormatNumberFunction
  - Fix UTF-8 check in str:padding
  - Fix xmlStrPrintf argument
  - Check for overflow in _exsltDateParseGYear
  - Fix double to int conversion
  - Check for overflow in exsltDateParseDuration
  - Change version of xsltMaxVars back to 1.0.24
  - Disable xsltCopyTextString optimization for extensions
  - Create DOCTYPE for HTML version 5
  - Make xsl:decimal-format work with namespaces
  - Remove norm:localTime extension function
  - Check for integer overflow in xsltAddTextString
  - Detect infinite recursion when evaluating function arguments
  - Fix memory leak in xsltElementAvailableFunction
  - Fix for pattern predicates calling functions
  - Fix cmd.exe invocations in Makefile.mingw
  - Don't try to install index.sgml
  - Fix symbols.xml
  - Fix heap overread in xsltFormatNumberConversion
  - Fix &lt;xsl:number level="any"/&gt; for non-element nodes
  - Fix unreachable code in xsltAddChild
  - Change version number in xsl:version warning
  - Avoid infinite recursion after failed param evaluation
  - Stop if potential recursion is detected
  - Consider built-in templates in apply-imports
  - Fix precedence with multiple attribute sets
  - Rework attribute set resolution
  * Improvements:
  - Silence tests a little
  - Set LIBXML_SRC to absolute path
  - Add missing #include
  - Adjust expected error messages in tests
  - Make xsltDebug more quiet
  - New-line terminate error message that missed this convention
  - Use xmlBuffers in EXSLT string functions
  - Switch to xmlUTF8Strsize in EXSLT string functions
  - Check for return value of xmlUTF8Strlen
  - Avoid double/long round trip in FORMAT_ITEM
  - Separate date and duration structs
  - Check for overflow in _exsltDateDifference
  - Clamp seconds field of durations
  - Change _exsltDateAddDurCalc parameter types
  - Fix date:difference with time zones
  - Rework division/remainder arithmetic in date.c
  - Remove exsltDateCastDateToNumber
  - Change internal representation of years
  - Optimize IS_LEAP
  - Link libraries with libm
  - Rename xsltCopyTreeInternal to xsltCopyTree
  - Update linker version script
  - Add local wildcard to version script
  - Make some symbols static
  - Remove redundant NULL check in xsltNumberComp
  - Fix forwards compatibility for imported stylesheets
  - Reduce warnings in forwards-compatible mode
  - Precompute XSLT elements after preprocessing
  - Fix whitespace in xsltParseStylesheetTop
  - Consolidate recursion checks
  - Treat XSLT_STATE_STOPPED same as errors
  - Make sure that XSLT_STATE_STOPPED isn't overwritten
  - Add comment regarding built-in templates and params
  - Rewrite memory management of local RVTs
  - Validate QNames of attribute sets
  - Add xsl:attribute-set regression tests
  - Ignore imported stylesheets in xsltApplyAttributeSet
- Dropped patches fixed upstream
  * libxslt-CVE-2016-4738.patch
  * libxslt-1.1.28-CVE-2017-5029.patch</changelog>
  <changelog author="vcizek@suse.com" date="1510142400">- Update to version 1.1.32
  * fixes xml-config detection regression (boo#1066525)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1551700800">- Update to version 1.1.33
  * Portability:
  - Variables need 'extern' in static lib on Cygwin
  - Really declare dllexport/dllimport for Cygwin
  - Fix callback signatures in Python bindings
  - Fix transform callback signatures
  - Fix extension callback signatures
  - Fix deallocator signatures
  - Fix XPath callback signatures
  - Fix hash callback signatures
  * Bug Fixes:
  - Don't cache direct evaluation of patterns with variables
  - Move function result RVTs to context variable
  - Fix EXSLT functions returning RVTs from outer scopes
  - Fix handling of RVTs returned from nested EXSLT functions
  - Fix typos
  * Improvements:
  - Run Travis ASan tests with "sudo: required"
  * Cleanups:
  - Remove doc/libxslt-decl.txt
  - Docs for 1.1.32 release
- Cleaned with spec-cleaner</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554984000">- Security fix: [bsc#1132160, CVE-2019-11068]
  * Bypass of a protection mechanism because callers of xsltCheckRead
    and xsltCheckWrite permit access even upon receiving a -1 error
    code. xsltCheckRead can return -1 for a crafted URL that is not
    actually invalid and is subsequently loaded.
  * Added libxslt-CVE-2019-11068.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1562068800">- Security fix: [bsc#1140095, CVE-2019-13117]
  * Fix uninitialized read of xsl:number token. An xsl number with
    certain format strings could lead to a uninitialized read in
    xsltNumberFormatInsertNumbers
  * Added libxslt-CVE-2019-13117.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1562068801">- Security fix: [bsc#1140101, CVE-2019-13118]
  * Fix uninitialized read with UTF-8 grouping chars. Read of
    uninitialized stack data due to too narrow xsl:number
    instruction and an invalid character
  * Added libxslt-CVE-2019-13118.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1569931200">- Drop out lilbxslt-python package as it is just py2 based and
  upstream yet didn't bother to port it to python3.
  When there is python3 compatible code it should be enabled as
  multibuild here
  * Drop now unused libxslt-1.1.24-linkflags.patch and
    libxslt-do_not_build_doc_nor_xsltproc.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571659200">- Security fix [bsc#1154609, CVE-2019-18197]
  * Fix dangling pointer in xsltCopyText
  * Add libxslt-CVE-2019-18197.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574251200">- Update to 1.1.34: Oct 30 2019
  * Documentation:
  - Fix EXSLT web pages, Regenerate web pages
  - Fix Git link in news.html
  - Minor documentation fixes after recent changes
  - Regenerate symbols and API docs
  - Regenerate EXSLT website
  * Portability:
  - Remove stubs when compiling without debugger or profiler
  - configure.ac: Invoke PKG_CHECK_MODULES for building shared libraries
  - configure.ac: Conditionally determine whether xml2-config should pass
    shared libraries or static libraries
  - xslt-config.in: Fix broken --prefix=DIR support
  - libexslt.pc.in: Do not expose private library dependencies unless invoked
  - libxslt.pc.in: Do not expose private library dependencies unless invoked
  - Fix -Wformat-overflow warning (GCC 9)
  - Stop including ansidecl.h
  - Remove WIN32_EXTRA_* variables
  - Build without winsock
  * Bug Fixes:
  - xsl:template without name and match attributes should not be allowed
  - Make sure that Python tests exit with error code
  - Improve handling of invalid UTF-8 in format-number
  - Fix dangling pointer in xsltCopyText
  - Fix memory leak in pattern compilation error path
  - Fix uninitialized read with UTF-8 grouping chars
  - Fix integer overflow in FORMAT_GYEAR
  - Fix performance regression with xsl:number
  - Backup XPath context node in xsltInitCtxtKey
  - Fix unsigned integer overflow in date.c
  - Fix insertion of xsl:fallback content
  - Avoid quadratic behavior in xsltSaveResultTo
  - Fix numbering in non-Latin scripts
  - Fix uninitialized read of xsl:number token
  - Fix integer overflow in _exsltDateDayInWeek
  - Rework xsltAttrVT allocation
  - Fix check of xsltTestCompMatch return value
  - Fix security framework bypass
  - Use xmlNewTextChild in EXSLT dyn:map
  - Fix float casts in exsltDateDuration
  - Always set context node before calling XPath iterators
  - Fix attribute precedence with xsl:use-attribute-sets
  - Backup context node in exsltFuncFunctionFunction
  - Initialize ctxt-&gt;output before evaluating global vars
  - Fix memory leak in EXSLT functions error path
  * Improvements:
  - Fix -Wimplicit-fallthrough warnings
  - Adjust number of API index pages
  - Make xsltCompileRelativePathPattern non-recursive
  - Check that crypto:rc4_decrypt produces valid UTF-8
  - Avoid recursion in keys.c:skipPredicate
  - xslt-config.in: Simply handling of $all_flags
  - xslt-config.in: Add a --dynamic option to --libs
  - xslt-config.in: Simplify basic library handling
  - xslt-config.in: Remove unused variable
  - xslt-config: Simply handling of --cflags
  - Improve fuzzers
  - Always reuse XPath context
  - Compile with -Wextra
  - Make profiler support optional
  - Hide unused code when compiling without debugger
  - Reorganize fuzzing code
  - Optional operation limit
  - Improve seed corpus and dictionary
  - Reuse XPath context when compiling stylesheets
  - Reuse XPath context in dyn:map
  - Reuse XPath context in saxon:expression
  - Add libFuzzer targets
  - Adjust error message in expected test output
  - Change bug tracker URL
  - Change git repo URL
  - Regenerate NEWS
  - Fix misleading indentation in security.c
  * Cleanups:
  - Remove empty TODO file
  - Remove generated file libxsltclass.txt from version control
  - Rebuild docs
- Rebase patch libxslt-config-fixes.patch
- Remove patches fixed upstream:
  * libxslt-CVE-2019-11068.patch
  * libxslt-CVE-2019-13117.patch
  * libxslt-CVE-2019-13118.patch
  * libxslt-CVE-2019-18197.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Fix build with libxml2 2.9.12 that removes maxParserDepth XPath limit
- Add upstream patches:
  * libxslt-Stop-using-maxParserDepth-XPath-limit.patch
  * libxslt-Do-not-set-maxDepth-in-XPath-contexts.patch</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Move the Copyright file to %_defaultlicensedir
  Configure.ac replaces the COPYING file with a symlink.</changelog>
  <changelog author="schwab@suse.de" date="1623067200">- Don't disable testsuite under QEMU</changelog>
  <changelog author="pvorel@suse.cz" date="1623326400">- Backport upstream xsltproc manpage fix
  f165525f Recreate xsltproc man page with old Docbook stylesheet URL
  Recreate-xsltproc-man-page-with-old-Docbook-styleshe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677067200">- Security Fix: [bsc#1208574, CVE-2021-30560]
  * Use after free in Blink XSLT
  * Add libxslt-CVE-2021-30560.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1742385600">- Security fixes:
  * Fix use-after-free of XPath context node [bsc#1239625, CVE-2025-24855]
  * Fix UAF related to excluded namespaces [bsc#1239637, CVE-2024-55549]
  * Make generate-id() deterministic [bsc#1238591, CVE-2023-40403]
    Just adding the reference here as this CVE was already fixed
    in 0009-Make-generate-id-deterministic.patch
  * Rebase patches to use autosetup:
  - libxslt-1.1.24-no-net-autobuild.patch
  - libxslt-config-fixes.patch
  * Add patches:
  - libxslt-CVE-2024-55549.patch
  - libxslt-CVE-2025-24855.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1759406400">- security update
- added patches
  CVE-2025-10911 [bsc#1250553], use-after-free with key data stored cross-RVT
  * libxslt-CVE-2025-10911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1760097600">- propagate test failure into build failure
- added sources
  * libxslt-test-results.ref</changelog>
  <changelog author="pgajdos@suse.com" date="1760529600">- security update
- added patches
  CVE-2025-11731 [bsc#1251979], type confusion in exsltFuncResultCompfunction leading to denial of service
  * libxslt-CVE-2025-11731.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770206400">- CVE-2025-10911 will be fixed on libxml2 side instead [bsc#1250553]
- deleted patches
  * libxslt-CVE-2025-10911.patch</changelog>
</package>
<package pkgid="a08c7d822b89e512306b815a4e7838d9ad2734124ce6074a584df818e35aa69b" name="libxslt1" arch="x86_64">
  <version epoch="0" ver="1.1.34" rel="150400.3.13.1"/>
  <changelog author="mpluskal@suse.com" date="1501243200">- Add gpg signature
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Fix RPM groups. Drop ineffective --with-pic.
  Trim conjecture from description.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508414400">- Update to version 1.1.30 [bsc#1063934]
  * Documentation:
  - Misc doc fixes
  * Portability:
  - Look for libxml2 via pkg-config first
  * Bug Fixes:
  - Also fix memory hazards in exsltFuncResultElem
  - Fix NULL deref in xsltDefaultSortFunction
  - Fix memory hazards in exsltFuncFunctionFunction
  - Fix memory leaks in EXSLT error paths
  - Fix memory leak in str:concat with empty node-set
  - Fix memory leaks in error paths
  - Switch to xmlUTF8Strsize in numbers.c
  - Fix NULL pointer deref in xsltFormatNumberFunction
  - Fix UTF-8 check in str:padding
  - Fix xmlStrPrintf argument
  - Check for overflow in _exsltDateParseGYear
  - Fix double to int conversion
  - Check for overflow in exsltDateParseDuration
  - Change version of xsltMaxVars back to 1.0.24
  - Disable xsltCopyTextString optimization for extensions
  - Create DOCTYPE for HTML version 5
  - Make xsl:decimal-format work with namespaces
  - Remove norm:localTime extension function
  - Check for integer overflow in xsltAddTextString
  - Detect infinite recursion when evaluating function arguments
  - Fix memory leak in xsltElementAvailableFunction
  - Fix for pattern predicates calling functions
  - Fix cmd.exe invocations in Makefile.mingw
  - Don't try to install index.sgml
  - Fix symbols.xml
  - Fix heap overread in xsltFormatNumberConversion
  - Fix &lt;xsl:number level="any"/&gt; for non-element nodes
  - Fix unreachable code in xsltAddChild
  - Change version number in xsl:version warning
  - Avoid infinite recursion after failed param evaluation
  - Stop if potential recursion is detected
  - Consider built-in templates in apply-imports
  - Fix precedence with multiple attribute sets
  - Rework attribute set resolution
  * Improvements:
  - Silence tests a little
  - Set LIBXML_SRC to absolute path
  - Add missing #include
  - Adjust expected error messages in tests
  - Make xsltDebug more quiet
  - New-line terminate error message that missed this convention
  - Use xmlBuffers in EXSLT string functions
  - Switch to xmlUTF8Strsize in EXSLT string functions
  - Check for return value of xmlUTF8Strlen
  - Avoid double/long round trip in FORMAT_ITEM
  - Separate date and duration structs
  - Check for overflow in _exsltDateDifference
  - Clamp seconds field of durations
  - Change _exsltDateAddDurCalc parameter types
  - Fix date:difference with time zones
  - Rework division/remainder arithmetic in date.c
  - Remove exsltDateCastDateToNumber
  - Change internal representation of years
  - Optimize IS_LEAP
  - Link libraries with libm
  - Rename xsltCopyTreeInternal to xsltCopyTree
  - Update linker version script
  - Add local wildcard to version script
  - Make some symbols static
  - Remove redundant NULL check in xsltNumberComp
  - Fix forwards compatibility for imported stylesheets
  - Reduce warnings in forwards-compatible mode
  - Precompute XSLT elements after preprocessing
  - Fix whitespace in xsltParseStylesheetTop
  - Consolidate recursion checks
  - Treat XSLT_STATE_STOPPED same as errors
  - Make sure that XSLT_STATE_STOPPED isn't overwritten
  - Add comment regarding built-in templates and params
  - Rewrite memory management of local RVTs
  - Validate QNames of attribute sets
  - Add xsl:attribute-set regression tests
  - Ignore imported stylesheets in xsltApplyAttributeSet
- Dropped patches fixed upstream
  * libxslt-CVE-2016-4738.patch
  * libxslt-1.1.28-CVE-2017-5029.patch</changelog>
  <changelog author="vcizek@suse.com" date="1510142400">- Update to version 1.1.32
  * fixes xml-config detection regression (boo#1066525)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1551700800">- Update to version 1.1.33
  * Portability:
  - Variables need 'extern' in static lib on Cygwin
  - Really declare dllexport/dllimport for Cygwin
  - Fix callback signatures in Python bindings
  - Fix transform callback signatures
  - Fix extension callback signatures
  - Fix deallocator signatures
  - Fix XPath callback signatures
  - Fix hash callback signatures
  * Bug Fixes:
  - Don't cache direct evaluation of patterns with variables
  - Move function result RVTs to context variable
  - Fix EXSLT functions returning RVTs from outer scopes
  - Fix handling of RVTs returned from nested EXSLT functions
  - Fix typos
  * Improvements:
  - Run Travis ASan tests with "sudo: required"
  * Cleanups:
  - Remove doc/libxslt-decl.txt
  - Docs for 1.1.32 release
- Cleaned with spec-cleaner</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554984000">- Security fix: [bsc#1132160, CVE-2019-11068]
  * Bypass of a protection mechanism because callers of xsltCheckRead
    and xsltCheckWrite permit access even upon receiving a -1 error
    code. xsltCheckRead can return -1 for a crafted URL that is not
    actually invalid and is subsequently loaded.
  * Added libxslt-CVE-2019-11068.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1562068800">- Security fix: [bsc#1140095, CVE-2019-13117]
  * Fix uninitialized read of xsl:number token. An xsl number with
    certain format strings could lead to a uninitialized read in
    xsltNumberFormatInsertNumbers
  * Added libxslt-CVE-2019-13117.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1562068801">- Security fix: [bsc#1140101, CVE-2019-13118]
  * Fix uninitialized read with UTF-8 grouping chars. Read of
    uninitialized stack data due to too narrow xsl:number
    instruction and an invalid character
  * Added libxslt-CVE-2019-13118.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1569931200">- Drop out lilbxslt-python package as it is just py2 based and
  upstream yet didn't bother to port it to python3.
  When there is python3 compatible code it should be enabled as
  multibuild here
  * Drop now unused libxslt-1.1.24-linkflags.patch and
    libxslt-do_not_build_doc_nor_xsltproc.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571659200">- Security fix [bsc#1154609, CVE-2019-18197]
  * Fix dangling pointer in xsltCopyText
  * Add libxslt-CVE-2019-18197.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574251200">- Update to 1.1.34: Oct 30 2019
  * Documentation:
  - Fix EXSLT web pages, Regenerate web pages
  - Fix Git link in news.html
  - Minor documentation fixes after recent changes
  - Regenerate symbols and API docs
  - Regenerate EXSLT website
  * Portability:
  - Remove stubs when compiling without debugger or profiler
  - configure.ac: Invoke PKG_CHECK_MODULES for building shared libraries
  - configure.ac: Conditionally determine whether xml2-config should pass
    shared libraries or static libraries
  - xslt-config.in: Fix broken --prefix=DIR support
  - libexslt.pc.in: Do not expose private library dependencies unless invoked
  - libxslt.pc.in: Do not expose private library dependencies unless invoked
  - Fix -Wformat-overflow warning (GCC 9)
  - Stop including ansidecl.h
  - Remove WIN32_EXTRA_* variables
  - Build without winsock
  * Bug Fixes:
  - xsl:template without name and match attributes should not be allowed
  - Make sure that Python tests exit with error code
  - Improve handling of invalid UTF-8 in format-number
  - Fix dangling pointer in xsltCopyText
  - Fix memory leak in pattern compilation error path
  - Fix uninitialized read with UTF-8 grouping chars
  - Fix integer overflow in FORMAT_GYEAR
  - Fix performance regression with xsl:number
  - Backup XPath context node in xsltInitCtxtKey
  - Fix unsigned integer overflow in date.c
  - Fix insertion of xsl:fallback content
  - Avoid quadratic behavior in xsltSaveResultTo
  - Fix numbering in non-Latin scripts
  - Fix uninitialized read of xsl:number token
  - Fix integer overflow in _exsltDateDayInWeek
  - Rework xsltAttrVT allocation
  - Fix check of xsltTestCompMatch return value
  - Fix security framework bypass
  - Use xmlNewTextChild in EXSLT dyn:map
  - Fix float casts in exsltDateDuration
  - Always set context node before calling XPath iterators
  - Fix attribute precedence with xsl:use-attribute-sets
  - Backup context node in exsltFuncFunctionFunction
  - Initialize ctxt-&gt;output before evaluating global vars
  - Fix memory leak in EXSLT functions error path
  * Improvements:
  - Fix -Wimplicit-fallthrough warnings
  - Adjust number of API index pages
  - Make xsltCompileRelativePathPattern non-recursive
  - Check that crypto:rc4_decrypt produces valid UTF-8
  - Avoid recursion in keys.c:skipPredicate
  - xslt-config.in: Simply handling of $all_flags
  - xslt-config.in: Add a --dynamic option to --libs
  - xslt-config.in: Simplify basic library handling
  - xslt-config.in: Remove unused variable
  - xslt-config: Simply handling of --cflags
  - Improve fuzzers
  - Always reuse XPath context
  - Compile with -Wextra
  - Make profiler support optional
  - Hide unused code when compiling without debugger
  - Reorganize fuzzing code
  - Optional operation limit
  - Improve seed corpus and dictionary
  - Reuse XPath context when compiling stylesheets
  - Reuse XPath context in dyn:map
  - Reuse XPath context in saxon:expression
  - Add libFuzzer targets
  - Adjust error message in expected test output
  - Change bug tracker URL
  - Change git repo URL
  - Regenerate NEWS
  - Fix misleading indentation in security.c
  * Cleanups:
  - Remove empty TODO file
  - Remove generated file libxsltclass.txt from version control
  - Rebuild docs
- Rebase patch libxslt-config-fixes.patch
- Remove patches fixed upstream:
  * libxslt-CVE-2019-11068.patch
  * libxslt-CVE-2019-13117.patch
  * libxslt-CVE-2019-13118.patch
  * libxslt-CVE-2019-18197.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Fix build with libxml2 2.9.12 that removes maxParserDepth XPath limit
- Add upstream patches:
  * libxslt-Stop-using-maxParserDepth-XPath-limit.patch
  * libxslt-Do-not-set-maxDepth-in-XPath-contexts.patch</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Move the Copyright file to %_defaultlicensedir
  Configure.ac replaces the COPYING file with a symlink.</changelog>
  <changelog author="schwab@suse.de" date="1623067200">- Don't disable testsuite under QEMU</changelog>
  <changelog author="pvorel@suse.cz" date="1623326400">- Backport upstream xsltproc manpage fix
  f165525f Recreate xsltproc man page with old Docbook stylesheet URL
  Recreate-xsltproc-man-page-with-old-Docbook-styleshe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677067200">- Security Fix: [bsc#1208574, CVE-2021-30560]
  * Use after free in Blink XSLT
  * Add libxslt-CVE-2021-30560.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1742385600">- Security fixes:
  * Fix use-after-free of XPath context node [bsc#1239625, CVE-2025-24855]
  * Fix UAF related to excluded namespaces [bsc#1239637, CVE-2024-55549]
  * Make generate-id() deterministic [bsc#1238591, CVE-2023-40403]
    Just adding the reference here as this CVE was already fixed
    in 0009-Make-generate-id-deterministic.patch
  * Rebase patches to use autosetup:
  - libxslt-1.1.24-no-net-autobuild.patch
  - libxslt-config-fixes.patch
  * Add patches:
  - libxslt-CVE-2024-55549.patch
  - libxslt-CVE-2025-24855.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1759406400">- security update
- added patches
  CVE-2025-10911 [bsc#1250553], use-after-free with key data stored cross-RVT
  * libxslt-CVE-2025-10911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1760097600">- propagate test failure into build failure
- added sources
  * libxslt-test-results.ref</changelog>
  <changelog author="pgajdos@suse.com" date="1760529600">- security update
- added patches
  CVE-2025-11731 [bsc#1251979], type confusion in exsltFuncResultCompfunction leading to denial of service
  * libxslt-CVE-2025-11731.patch</changelog>
</package>
<package pkgid="110c63ef7933337cb40dbbec69b07e6776a5305db00d5a691db5124220f93ec4" name="libxslt1" arch="x86_64">
  <version epoch="0" ver="1.1.34" rel="150400.3.16.1"/>
  <changelog author="jengelh@inai.de" date="1505131200">- Fix RPM groups. Drop ineffective --with-pic.
  Trim conjecture from description.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508414400">- Update to version 1.1.30 [bsc#1063934]
  * Documentation:
  - Misc doc fixes
  * Portability:
  - Look for libxml2 via pkg-config first
  * Bug Fixes:
  - Also fix memory hazards in exsltFuncResultElem
  - Fix NULL deref in xsltDefaultSortFunction
  - Fix memory hazards in exsltFuncFunctionFunction
  - Fix memory leaks in EXSLT error paths
  - Fix memory leak in str:concat with empty node-set
  - Fix memory leaks in error paths
  - Switch to xmlUTF8Strsize in numbers.c
  - Fix NULL pointer deref in xsltFormatNumberFunction
  - Fix UTF-8 check in str:padding
  - Fix xmlStrPrintf argument
  - Check for overflow in _exsltDateParseGYear
  - Fix double to int conversion
  - Check for overflow in exsltDateParseDuration
  - Change version of xsltMaxVars back to 1.0.24
  - Disable xsltCopyTextString optimization for extensions
  - Create DOCTYPE for HTML version 5
  - Make xsl:decimal-format work with namespaces
  - Remove norm:localTime extension function
  - Check for integer overflow in xsltAddTextString
  - Detect infinite recursion when evaluating function arguments
  - Fix memory leak in xsltElementAvailableFunction
  - Fix for pattern predicates calling functions
  - Fix cmd.exe invocations in Makefile.mingw
  - Don't try to install index.sgml
  - Fix symbols.xml
  - Fix heap overread in xsltFormatNumberConversion
  - Fix &lt;xsl:number level="any"/&gt; for non-element nodes
  - Fix unreachable code in xsltAddChild
  - Change version number in xsl:version warning
  - Avoid infinite recursion after failed param evaluation
  - Stop if potential recursion is detected
  - Consider built-in templates in apply-imports
  - Fix precedence with multiple attribute sets
  - Rework attribute set resolution
  * Improvements:
  - Silence tests a little
  - Set LIBXML_SRC to absolute path
  - Add missing #include
  - Adjust expected error messages in tests
  - Make xsltDebug more quiet
  - New-line terminate error message that missed this convention
  - Use xmlBuffers in EXSLT string functions
  - Switch to xmlUTF8Strsize in EXSLT string functions
  - Check for return value of xmlUTF8Strlen
  - Avoid double/long round trip in FORMAT_ITEM
  - Separate date and duration structs
  - Check for overflow in _exsltDateDifference
  - Clamp seconds field of durations
  - Change _exsltDateAddDurCalc parameter types
  - Fix date:difference with time zones
  - Rework division/remainder arithmetic in date.c
  - Remove exsltDateCastDateToNumber
  - Change internal representation of years
  - Optimize IS_LEAP
  - Link libraries with libm
  - Rename xsltCopyTreeInternal to xsltCopyTree
  - Update linker version script
  - Add local wildcard to version script
  - Make some symbols static
  - Remove redundant NULL check in xsltNumberComp
  - Fix forwards compatibility for imported stylesheets
  - Reduce warnings in forwards-compatible mode
  - Precompute XSLT elements after preprocessing
  - Fix whitespace in xsltParseStylesheetTop
  - Consolidate recursion checks
  - Treat XSLT_STATE_STOPPED same as errors
  - Make sure that XSLT_STATE_STOPPED isn't overwritten
  - Add comment regarding built-in templates and params
  - Rewrite memory management of local RVTs
  - Validate QNames of attribute sets
  - Add xsl:attribute-set regression tests
  - Ignore imported stylesheets in xsltApplyAttributeSet
- Dropped patches fixed upstream
  * libxslt-CVE-2016-4738.patch
  * libxslt-1.1.28-CVE-2017-5029.patch</changelog>
  <changelog author="vcizek@suse.com" date="1510142400">- Update to version 1.1.32
  * fixes xml-config detection regression (boo#1066525)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1551700800">- Update to version 1.1.33
  * Portability:
  - Variables need 'extern' in static lib on Cygwin
  - Really declare dllexport/dllimport for Cygwin
  - Fix callback signatures in Python bindings
  - Fix transform callback signatures
  - Fix extension callback signatures
  - Fix deallocator signatures
  - Fix XPath callback signatures
  - Fix hash callback signatures
  * Bug Fixes:
  - Don't cache direct evaluation of patterns with variables
  - Move function result RVTs to context variable
  - Fix EXSLT functions returning RVTs from outer scopes
  - Fix handling of RVTs returned from nested EXSLT functions
  - Fix typos
  * Improvements:
  - Run Travis ASan tests with "sudo: required"
  * Cleanups:
  - Remove doc/libxslt-decl.txt
  - Docs for 1.1.32 release
- Cleaned with spec-cleaner</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554984000">- Security fix: [bsc#1132160, CVE-2019-11068]
  * Bypass of a protection mechanism because callers of xsltCheckRead
    and xsltCheckWrite permit access even upon receiving a -1 error
    code. xsltCheckRead can return -1 for a crafted URL that is not
    actually invalid and is subsequently loaded.
  * Added libxslt-CVE-2019-11068.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1562068800">- Security fix: [bsc#1140095, CVE-2019-13117]
  * Fix uninitialized read of xsl:number token. An xsl number with
    certain format strings could lead to a uninitialized read in
    xsltNumberFormatInsertNumbers
  * Added libxslt-CVE-2019-13117.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1562068801">- Security fix: [bsc#1140101, CVE-2019-13118]
  * Fix uninitialized read with UTF-8 grouping chars. Read of
    uninitialized stack data due to too narrow xsl:number
    instruction and an invalid character
  * Added libxslt-CVE-2019-13118.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1569931200">- Drop out lilbxslt-python package as it is just py2 based and
  upstream yet didn't bother to port it to python3.
  When there is python3 compatible code it should be enabled as
  multibuild here
  * Drop now unused libxslt-1.1.24-linkflags.patch and
    libxslt-do_not_build_doc_nor_xsltproc.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571659200">- Security fix [bsc#1154609, CVE-2019-18197]
  * Fix dangling pointer in xsltCopyText
  * Add libxslt-CVE-2019-18197.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574251200">- Update to 1.1.34: Oct 30 2019
  * Documentation:
  - Fix EXSLT web pages, Regenerate web pages
  - Fix Git link in news.html
  - Minor documentation fixes after recent changes
  - Regenerate symbols and API docs
  - Regenerate EXSLT website
  * Portability:
  - Remove stubs when compiling without debugger or profiler
  - configure.ac: Invoke PKG_CHECK_MODULES for building shared libraries
  - configure.ac: Conditionally determine whether xml2-config should pass
    shared libraries or static libraries
  - xslt-config.in: Fix broken --prefix=DIR support
  - libexslt.pc.in: Do not expose private library dependencies unless invoked
  - libxslt.pc.in: Do not expose private library dependencies unless invoked
  - Fix -Wformat-overflow warning (GCC 9)
  - Stop including ansidecl.h
  - Remove WIN32_EXTRA_* variables
  - Build without winsock
  * Bug Fixes:
  - xsl:template without name and match attributes should not be allowed
  - Make sure that Python tests exit with error code
  - Improve handling of invalid UTF-8 in format-number
  - Fix dangling pointer in xsltCopyText
  - Fix memory leak in pattern compilation error path
  - Fix uninitialized read with UTF-8 grouping chars
  - Fix integer overflow in FORMAT_GYEAR
  - Fix performance regression with xsl:number
  - Backup XPath context node in xsltInitCtxtKey
  - Fix unsigned integer overflow in date.c
  - Fix insertion of xsl:fallback content
  - Avoid quadratic behavior in xsltSaveResultTo
  - Fix numbering in non-Latin scripts
  - Fix uninitialized read of xsl:number token
  - Fix integer overflow in _exsltDateDayInWeek
  - Rework xsltAttrVT allocation
  - Fix check of xsltTestCompMatch return value
  - Fix security framework bypass
  - Use xmlNewTextChild in EXSLT dyn:map
  - Fix float casts in exsltDateDuration
  - Always set context node before calling XPath iterators
  - Fix attribute precedence with xsl:use-attribute-sets
  - Backup context node in exsltFuncFunctionFunction
  - Initialize ctxt-&gt;output before evaluating global vars
  - Fix memory leak in EXSLT functions error path
  * Improvements:
  - Fix -Wimplicit-fallthrough warnings
  - Adjust number of API index pages
  - Make xsltCompileRelativePathPattern non-recursive
  - Check that crypto:rc4_decrypt produces valid UTF-8
  - Avoid recursion in keys.c:skipPredicate
  - xslt-config.in: Simply handling of $all_flags
  - xslt-config.in: Add a --dynamic option to --libs
  - xslt-config.in: Simplify basic library handling
  - xslt-config.in: Remove unused variable
  - xslt-config: Simply handling of --cflags
  - Improve fuzzers
  - Always reuse XPath context
  - Compile with -Wextra
  - Make profiler support optional
  - Hide unused code when compiling without debugger
  - Reorganize fuzzing code
  - Optional operation limit
  - Improve seed corpus and dictionary
  - Reuse XPath context when compiling stylesheets
  - Reuse XPath context in dyn:map
  - Reuse XPath context in saxon:expression
  - Add libFuzzer targets
  - Adjust error message in expected test output
  - Change bug tracker URL
  - Change git repo URL
  - Regenerate NEWS
  - Fix misleading indentation in security.c
  * Cleanups:
  - Remove empty TODO file
  - Remove generated file libxsltclass.txt from version control
  - Rebuild docs
- Rebase patch libxslt-config-fixes.patch
- Remove patches fixed upstream:
  * libxslt-CVE-2019-11068.patch
  * libxslt-CVE-2019-13117.patch
  * libxslt-CVE-2019-13118.patch
  * libxslt-CVE-2019-18197.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Fix build with libxml2 2.9.12 that removes maxParserDepth XPath limit
- Add upstream patches:
  * libxslt-Stop-using-maxParserDepth-XPath-limit.patch
  * libxslt-Do-not-set-maxDepth-in-XPath-contexts.patch</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Move the Copyright file to %_defaultlicensedir
  Configure.ac replaces the COPYING file with a symlink.</changelog>
  <changelog author="schwab@suse.de" date="1623067200">- Don't disable testsuite under QEMU</changelog>
  <changelog author="pvorel@suse.cz" date="1623326400">- Backport upstream xsltproc manpage fix
  f165525f Recreate xsltproc man page with old Docbook stylesheet URL
  Recreate-xsltproc-man-page-with-old-Docbook-styleshe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677067200">- Security Fix: [bsc#1208574, CVE-2021-30560]
  * Use after free in Blink XSLT
  * Add libxslt-CVE-2021-30560.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1742385600">- Security fixes:
  * Fix use-after-free of XPath context node [bsc#1239625, CVE-2025-24855]
  * Fix UAF related to excluded namespaces [bsc#1239637, CVE-2024-55549]
  * Make generate-id() deterministic [bsc#1238591, CVE-2023-40403]
    Just adding the reference here as this CVE was already fixed
    in 0009-Make-generate-id-deterministic.patch
  * Rebase patches to use autosetup:
  - libxslt-1.1.24-no-net-autobuild.patch
  - libxslt-config-fixes.patch
  * Add patches:
  - libxslt-CVE-2024-55549.patch
  - libxslt-CVE-2025-24855.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1759406400">- security update
- added patches
  CVE-2025-10911 [bsc#1250553], use-after-free with key data stored cross-RVT
  * libxslt-CVE-2025-10911.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1760097600">- propagate test failure into build failure
- added sources
  * libxslt-test-results.ref</changelog>
  <changelog author="pgajdos@suse.com" date="1760529600">- security update
- added patches
  CVE-2025-11731 [bsc#1251979], type confusion in exsltFuncResultCompfunction leading to denial of service
  * libxslt-CVE-2025-11731.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1770206400">- CVE-2025-10911 will be fixed on libxml2 side instead [bsc#1250553]
- deleted patches
  * libxslt-CVE-2025-10911.patch</changelog>
</package>
<package pkgid="f98cb5080f991c519322861b457aa4a31045033074924d3b840812d6900e1846" name="libyaml-0-2" arch="x86_64">
  <version epoch="0" ver="0.1.7" rel="150000.3.4.1"/>
  <changelog author="mrueckert@suse.de" date="1270555200">- initial package of version 0.1.3</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1297252800">- fixed erroneous license from GPLv2 to MIT, bnc#670525</changelog>
  <changelog author="jengelh@medozas.de" date="1327838400">- Remove redundant tags/sections per specfile guideline suggestions</changelog>
  <changelog author="dmueller@suse.com" date="1364299200">- update to 0.1.4:
  * documentation update
  * add pkgconfig support</changelog>
  <changelog author="dmueller@suse.com" date="1391774400">- update to 0.1.5:
  * Manually define PTRDIFF_MAX for VS C compiler
  * Limit input size to SIZE_MAX/2
  * Guard against overflows in indent and flow_level (CVE-2013-6393, bnc#860617)
  * Prevent node index overflow (Reported by Florian Weimer).
  * Fixed invalid size_t-&gt;int cast (Thank to Florian Weimer).</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1396008000">- update to 0.1.6 is a security update release for:
  * CVE-2014-2525: heap overflow during parsing (bnc#868944)
  bnc#860617)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1417608000">- fix CVE-2014-9130: libyaml: assert failure when processing
  wrapped strings (bnc#907809)
  CVE-2014-9130.patch contains the fix</changelog>
  <changelog author="avindra@opensuse.org" date="1514721600">- update to 0.1.7
  * Fixed segfault in yaml_string_write_handler
  * Fixed invalid simple key assertion (CVE-2014-9130)
  * Fixed error handling in some examples
- remove CVE-2014-9130.patch
  - fixed upstream in 946596172d140497b560e016e581accb0a92cca4
- cleanup spec file with spec-cleaner</changelog>
</package>
<package pkgid="61c97d612d05c6c364edea7dd37cd5758926b061a91113cd702f489a6867359c" name="libyaml" arch="src">
  <version epoch="0" ver="0.1.7" rel="150000.3.4.1"/>
  <changelog author="mrueckert@suse.de" date="1270555200">- initial package of version 0.1.3</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1297252800">- fixed erroneous license from GPLv2 to MIT, bnc#670525</changelog>
  <changelog author="jengelh@medozas.de" date="1327838400">- Remove redundant tags/sections per specfile guideline suggestions</changelog>
  <changelog author="dmueller@suse.com" date="1364299200">- update to 0.1.4:
  * documentation update
  * add pkgconfig support</changelog>
  <changelog author="dmueller@suse.com" date="1391774400">- update to 0.1.5:
  * Manually define PTRDIFF_MAX for VS C compiler
  * Limit input size to SIZE_MAX/2
  * Guard against overflows in indent and flow_level (CVE-2013-6393, bnc#860617)
  * Prevent node index overflow (Reported by Florian Weimer).
  * Fixed invalid size_t-&gt;int cast (Thank to Florian Weimer).</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1396008000">- update to 0.1.6 is a security update release for:
  * CVE-2014-2525: heap overflow during parsing (bnc#868944)
  bnc#860617)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1417608000">- fix CVE-2014-9130: libyaml: assert failure when processing
  wrapped strings (bnc#907809)
  CVE-2014-9130.patch contains the fix</changelog>
  <changelog author="avindra@opensuse.org" date="1514721600">- update to 0.1.7
  * Fixed segfault in yaml_string_write_handler
  * Fixed invalid simple key assertion (CVE-2014-9130)
  * Fixed error handling in some examples
- remove CVE-2014-9130.patch
  - fixed upstream in 946596172d140497b560e016e581accb0a92cca4
- cleanup spec file with spec-cleaner</changelog>
</package>
<package pkgid="dff3aeb7c98e7831aa5674a254ec9a56145a374de07b7205c3e922023795d01f" name="libyaml-devel" arch="x86_64">
  <version epoch="0" ver="0.1.7" rel="150000.3.4.1"/>
  <changelog author="mrueckert@suse.de" date="1270555200">- initial package of version 0.1.3</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1297252800">- fixed erroneous license from GPLv2 to MIT, bnc#670525</changelog>
  <changelog author="jengelh@medozas.de" date="1327838400">- Remove redundant tags/sections per specfile guideline suggestions</changelog>
  <changelog author="dmueller@suse.com" date="1364299200">- update to 0.1.4:
  * documentation update
  * add pkgconfig support</changelog>
  <changelog author="dmueller@suse.com" date="1391774400">- update to 0.1.5:
  * Manually define PTRDIFF_MAX for VS C compiler
  * Limit input size to SIZE_MAX/2
  * Guard against overflows in indent and flow_level (CVE-2013-6393, bnc#860617)
  * Prevent node index overflow (Reported by Florian Weimer).
  * Fixed invalid size_t-&gt;int cast (Thank to Florian Weimer).</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1396008000">- update to 0.1.6 is a security update release for:
  * CVE-2014-2525: heap overflow during parsing (bnc#868944)
  bnc#860617)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1417608000">- fix CVE-2014-9130: libyaml: assert failure when processing
  wrapped strings (bnc#907809)
  CVE-2014-9130.patch contains the fix</changelog>
  <changelog author="avindra@opensuse.org" date="1514721600">- update to 0.1.7
  * Fixed segfault in yaml_string_write_handler
  * Fixed invalid simple key assertion (CVE-2014-9130)
  * Fixed error handling in some examples
- remove CVE-2014-9130.patch
  - fixed upstream in 946596172d140497b560e016e581accb0a92cca4
- cleanup spec file with spec-cleaner</changelog>
</package>
<package pkgid="a57a9adfada86fc3d363e0032a1131a2764291af62f433b92b0a136a1693be20" name="libz1" arch="x86_64">
  <version epoch="0" ver="1.2.13" rel="150500.4.6.1"/>
  <changelog author="tchvatal@suse.com" date="1563364800">- Update the s390 patchset bsc#1137624:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1571659200">- Add SUSE specific patch to fix bsc#1138793, we simply don't want
  to test if the app was linked with exactly same version of zlib
  like the one that is present on the runtime:
  * zlib-no-version-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1572350400">- Update the zlib-no-version-check.patch to be even more forgiving
  with the versions on the zlib to allow updates without rebuilds</changelog>
  <changelog author="tchvatal@suse.com" date="1587643200">- Update 410.patch to contain latest fixes from IBM bsc#1166260
  * The build behaviour changed</changelog>
  <changelog author="lidong.zhong@suse.com" date="1596715200">- Permit a deflateParams() parameter change as soon as possible(bsc#1174736)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  Fix DFLTCC not flushing EOBS when creating raw streams(bsc#1174551)
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1598529600">- Set -DDFLTCC_LEVEL_MASK=0x7e on s390/s390x jsc#13776</changelog>
  <changelog author="tchvatal@suse.com" date="1598616000">- Add patch to fix compression level switching
  bsc#1175811 bsc#1175830 bsc#1175831
  * zlib-compression-switching.patch</changelog>
  <changelog author="coolo@suse.com" date="1600257600">- Provide a testsuite subpackage to run post-build validation</changelog>
  <changelog author="lnussel@suse.de" date="1603886400">- install to /usr (boo#1029961)</changelog>
  <changelog author="ali.abdallah@suse.com" date="1604923200">- Fix hw compression on z15 bsc#1176201
- Add zlib-s390x-z15-fix-hw-compression.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1647000000">- Don't install (internal) crypt.h header in minizip
  * minizip-dont-install-crypt-header.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1648209600">- Fix memory corruption on deflate, bsc#1197459
  * bsc1197459.patch - CVE-2018-25032
- Update 410.patch
  * Remove included patches:
    bsc1174551-fxi-imcomplete-raw-streams.patch
    zlib-compression-switching.patch
    zlib-s390x-z15-fix-hw-compression.patch
- Refresh bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch</changelog>
  <changelog author="meissner@suse.com" date="1656763200">- switch to https urls</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661256000">- Update to 1.2.12:
  * A lot of bug fixes
  * Improve speed of crc32 functions
  * Use ARM crc32 instructions if the ARM architecture has them
  For the complete changes, see ChangeLog
- Fixes CVE-2022-37434,  heap-based buffer over-read or buffer overflow in
  inflate.c via a large gzip header extra field
  (CVE-2022-37434, bsc#1202175)
- Added patches:
  * zlib-1.2.11-covscan-issues-rhel9.patch
  * zlib-1.2.11-covscan-issues.patch
  * zlib-1.2.12-s390-vectorize-crc32.patch
  * zlib-1.2.12-optimized-crc32-power8.patch
  * zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.12-fix-configure.patch
  * zlib-1.2.12-correct-inputs-provided-to-crc-func.patch
  * zlib-1.2.12-fix-CVE-2022-37434.patch
  * zlib-1.2.5-minizip-fixuncrypt.patch
- Removed patches:
  * bsc1197459.patch (upstreamed)
  * zlib-power8-fate325307.patch
    (replaced by zlib-1.2.12-optimized-crc32-power8.patch)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
    (replaced by zlib-1.2.12-IBM-Z-hw-accelrated-deflate-s390x.patch)
  * 410.patch
    (replaced by zlib-1.2.12-IBM-Z-hw-accelrated-deflate-s390x.patch)
- Refreshed patches:
  * zlib-format.patch
  * zlib-no-version-check.patch
- Disable profiling since it breaks tests
- Update zlib-rpmlintrc</changelog>
  <changelog author="danilo.spinella@suse.com" date="1665403200">- Add Power8 optimizations:
  * zlib-1.2.12-add-optimized-slide_hash-for-power.patch
  * zlib-1.2.12-add-vectorized-longest_match-for-power.patch
  * zlib-1.2.12-adler32-vector-optimizations-for-power.patch
  * zlib-1.2.12-fix-invalid-memory-access-on-ppc-and-ppc64.patch
- Update zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch</changelog>
  <changelog author="dmueller@suse.com" date="1670760000">- build zlib with optflags again</changelog>
  <changelog author="danilo.spinella@suse.com" date="1674129600">- Update to 1.13:
  * Fix configure issue that discarded provided CC definition
  * Correct incorrect inputs provided to the CRC functions
  * Repair prototypes and exporting of new CRC functions
  * Fix inflateBack to detect invalid input with distances too far
  * Have infback() deliver all of the available output up to any error
  * Fix a bug when getting a gzip header extra field with inflate()
  * Fix bug in block type selection when Z_FIXED used
  * Tighten deflateBound bounds
  * Remove deleted assembler code references
  * Various portability and appearance improvements
- Added patches:
  * zlib-1.2.13-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.13-fix-bug-deflateBound.patch
  * zlib-1.2.13-optimized-s390.patch
- Refreshed patches:
  * zlib-1.2.12-add-optimized-slide_hash-for-power.patch
  * zlib-1.2.12-add-vectorized-longest_match-for-power.patch
  * zlib-1.2.12-s390-vectorize-crc32.patch
- Removed patches:
  * zlib-1.2.12-fix-configure.patch
  * zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.12-optimized-crc32-power8.patch
  * zlib-1.2.12-correct-inputs-provided-to-crc-func.patch
  * zlib-1.2.12-fix-CVE-2022-37434.patch
  * zlib-1.2.11-optimized-s390.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1683201600">- Fix deflateBound() before deflateInit(), bsc#1210593, bsc#1211005
  bsc1210593.patch</changelog>
  <changelog author="oss@danyspin97.org" date="1697716800">- Fix CVE-2023-45853, integer overflow and resultant heap-based buffer
  overflow in zipOpenNewFileInZip4_6, bsc#1216378
  * CVE-2023-45853.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1771416000">- Fix CVE-2026-27171, infinite loop via the crc32_combine64 and
  crc32_combine_gen64 functions due to missing checks for negative
  lengths (bsc#1258392)
  * CVE-2026-27171.patch</changelog>
</package>
<package pkgid="c1af97e0f342abbadef0f6b793c0a3586e435f875381901061ed05de9d6b6299" name="libz1-32bit" arch="x86_64">
  <version epoch="0" ver="1.2.13" rel="150500.4.6.1"/>
  <changelog author="tchvatal@suse.com" date="1563364800">- Update the s390 patchset bsc#1137624:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1571659200">- Add SUSE specific patch to fix bsc#1138793, we simply don't want
  to test if the app was linked with exactly same version of zlib
  like the one that is present on the runtime:
  * zlib-no-version-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1572350400">- Update the zlib-no-version-check.patch to be even more forgiving
  with the versions on the zlib to allow updates without rebuilds</changelog>
  <changelog author="tchvatal@suse.com" date="1587643200">- Update 410.patch to contain latest fixes from IBM bsc#1166260
  * The build behaviour changed</changelog>
  <changelog author="lidong.zhong@suse.com" date="1596715200">- Permit a deflateParams() parameter change as soon as possible(bsc#1174736)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  Fix DFLTCC not flushing EOBS when creating raw streams(bsc#1174551)
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1598529600">- Set -DDFLTCC_LEVEL_MASK=0x7e on s390/s390x jsc#13776</changelog>
  <changelog author="tchvatal@suse.com" date="1598616000">- Add patch to fix compression level switching
  bsc#1175811 bsc#1175830 bsc#1175831
  * zlib-compression-switching.patch</changelog>
  <changelog author="coolo@suse.com" date="1600257600">- Provide a testsuite subpackage to run post-build validation</changelog>
  <changelog author="lnussel@suse.de" date="1603886400">- install to /usr (boo#1029961)</changelog>
  <changelog author="ali.abdallah@suse.com" date="1604923200">- Fix hw compression on z15 bsc#1176201
- Add zlib-s390x-z15-fix-hw-compression.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1647000000">- Don't install (internal) crypt.h header in minizip
  * minizip-dont-install-crypt-header.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1648209600">- Fix memory corruption on deflate, bsc#1197459
  * bsc1197459.patch - CVE-2018-25032
- Update 410.patch
  * Remove included patches:
    bsc1174551-fxi-imcomplete-raw-streams.patch
    zlib-compression-switching.patch
    zlib-s390x-z15-fix-hw-compression.patch
- Refresh bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch</changelog>
  <changelog author="meissner@suse.com" date="1656763200">- switch to https urls</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661256000">- Update to 1.2.12:
  * A lot of bug fixes
  * Improve speed of crc32 functions
  * Use ARM crc32 instructions if the ARM architecture has them
  For the complete changes, see ChangeLog
- Fixes CVE-2022-37434,  heap-based buffer over-read or buffer overflow in
  inflate.c via a large gzip header extra field
  (CVE-2022-37434, bsc#1202175)
- Added patches:
  * zlib-1.2.11-covscan-issues-rhel9.patch
  * zlib-1.2.11-covscan-issues.patch
  * zlib-1.2.12-s390-vectorize-crc32.patch
  * zlib-1.2.12-optimized-crc32-power8.patch
  * zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.12-fix-configure.patch
  * zlib-1.2.12-correct-inputs-provided-to-crc-func.patch
  * zlib-1.2.12-fix-CVE-2022-37434.patch
  * zlib-1.2.5-minizip-fixuncrypt.patch
- Removed patches:
  * bsc1197459.patch (upstreamed)
  * zlib-power8-fate325307.patch
    (replaced by zlib-1.2.12-optimized-crc32-power8.patch)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
    (replaced by zlib-1.2.12-IBM-Z-hw-accelrated-deflate-s390x.patch)
  * 410.patch
    (replaced by zlib-1.2.12-IBM-Z-hw-accelrated-deflate-s390x.patch)
- Refreshed patches:
  * zlib-format.patch
  * zlib-no-version-check.patch
- Disable profiling since it breaks tests
- Update zlib-rpmlintrc</changelog>
  <changelog author="danilo.spinella@suse.com" date="1665403200">- Add Power8 optimizations:
  * zlib-1.2.12-add-optimized-slide_hash-for-power.patch
  * zlib-1.2.12-add-vectorized-longest_match-for-power.patch
  * zlib-1.2.12-adler32-vector-optimizations-for-power.patch
  * zlib-1.2.12-fix-invalid-memory-access-on-ppc-and-ppc64.patch
- Update zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch</changelog>
  <changelog author="dmueller@suse.com" date="1670760000">- build zlib with optflags again</changelog>
  <changelog author="danilo.spinella@suse.com" date="1674129600">- Update to 1.13:
  * Fix configure issue that discarded provided CC definition
  * Correct incorrect inputs provided to the CRC functions
  * Repair prototypes and exporting of new CRC functions
  * Fix inflateBack to detect invalid input with distances too far
  * Have infback() deliver all of the available output up to any error
  * Fix a bug when getting a gzip header extra field with inflate()
  * Fix bug in block type selection when Z_FIXED used
  * Tighten deflateBound bounds
  * Remove deleted assembler code references
  * Various portability and appearance improvements
- Added patches:
  * zlib-1.2.13-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.13-fix-bug-deflateBound.patch
  * zlib-1.2.13-optimized-s390.patch
- Refreshed patches:
  * zlib-1.2.12-add-optimized-slide_hash-for-power.patch
  * zlib-1.2.12-add-vectorized-longest_match-for-power.patch
  * zlib-1.2.12-s390-vectorize-crc32.patch
- Removed patches:
  * zlib-1.2.12-fix-configure.patch
  * zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.12-optimized-crc32-power8.patch
  * zlib-1.2.12-correct-inputs-provided-to-crc-func.patch
  * zlib-1.2.12-fix-CVE-2022-37434.patch
  * zlib-1.2.11-optimized-s390.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1683201600">- Fix deflateBound() before deflateInit(), bsc#1210593, bsc#1211005
  bsc1210593.patch</changelog>
  <changelog author="oss@danyspin97.org" date="1697716800">- Fix CVE-2023-45853, integer overflow and resultant heap-based buffer
  overflow in zipOpenNewFileInZip4_6, bsc#1216378
  * CVE-2023-45853.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1771416000">- Fix CVE-2026-27171, infinite loop via the crc32_combine64 and
  crc32_combine_gen64 functions due to missing checks for negative
  lengths (bsc#1258392)
  * CVE-2026-27171.patch</changelog>
</package>
<package pkgid="2de3a1b1bd11df615f28a0d7e064f53fd75a76df08c2bb7003b0b110fd472374" name="libzypp" arch="src">
  <version epoch="0" ver="17.36.7" rel="150600.3.53.1"/>
  <changelog author="ma@suse.de" date="1722600000">- Make sure not to statically linked installed tools (bsc#1228787)
- version 17.35.8 (35)</changelog>
  <changelog author="ma@suse.de" date="1722859200">- single_rpmtrans: fix installation of .src.rpms (bsc#1228647)
- version 17.35.9 (35)</changelog>
  <changelog author="ma@suse.de" date="1725624000">- API refactoring. Prevent zypper from using now private libzypp
  symbols (bsc#1230267)
- Conflicts: zypper &lt;= 1.14.76
- version 17.35.10 (35)</changelog>
  <changelog author="ma@suse.de" date="1726142400">- Deprecate librpmDb::db_const_iterator default ctor (bsc#1230267)
  It's preferred to explicitly tell the root directory of the
  system whose database you want to query.
- version 17.35.11 (35)</changelog>
  <changelog author="ma@suse.de" date="1728475200">- PluginFrame: Send unescaped colons in header values
  (bsc#1231043)
  According to the STOMP protocol it would be correct to escape a
  colon in a header-value, but it breaks plugin receivers which do
  not expect this. The first colon separates header-name from
  header-value, so escaping in the header-value is not needed
  anyway.
  Escaping in the header-value affects especially the urlresolver
  plugins. The input URL is passed in a header, but sent back as
  raw data in the frames body. If the plugin receiver does not
  correctly unescape the URL we may get back a "https\c//" which is
  not usable.
- Do not ignore return value of std::remove_if in MediaSyncFacade
  (fixes #579)
- Fix hang in curl code with no network connection (bsc#1230912)
- version 17.35.12 (35)</changelog>
  <changelog author="ma@suse.de" date="1731412800">- BuildCache: Don't try to retrieve missing raw metadata if no
  permission to write the cache (bsc#1225451)
- RepoManager: throw RepoNoPermissionException if the user has no
  permission to update(write) the caches (bsc#1225451)
- version 17.35.13 (35)</changelog>
  <changelog author="ma@suse.de" date="1731672000">- The 20MB download limit must not apply to non-metadata files like
  package URLs provided via the CLI (bsc#1233393).
- version 17.35.14 (35)</changelog>
  <changelog author="ma@suse.de" date="1733745600">- Url query part: `=` is a safe char in value (bsc#1234304)
- RpmDb: Recognize rpmdb.sqlite as database file (#593)
- Fix typo (fixes #592)
- cmake: check location of fcgi header and adjust include
  accordingly. On Debian and derivatives the fcgi headers
  are not stored in a fastcgi/ subdirectory.(#590)
- version 17.35.15 (35)</changelog>
  <changelog author="ma@suse.de" date="1734523200">- Url: queryparams without value should not have a trailing "=".
- version 17.35.16 (35)</changelog>
  <changelog author="ma@suse.de" date="1737374400">- Move cmake config files to LIB_INSTALL_DIR/cmake/Zypp (fixes #28)
- Fix 'zypper ps' when running in incus container (bsc#1229106)
  Should apply to lxc and lxd containers as well.
- Re-enable 'rpm --runposttrans' usage for chrooted systems
  (bsc#1216091)
- version 17.35.17 (35)</changelog>
  <changelog author="ma@suse.de" date="1737374401">- Fix missing UID checks in repomanager workflow (fixes #603)
- version 17.35.18 (35)</changelog>
  <changelog author="ma@suse.de" date="1737547200">- Create '.keep_packages' in the package cache dir to enforce
  keeping downloaded packages of all repos cahed there (bsc#1232458)
- version 17.35.19 (35)</changelog>
  <changelog author="ma@suse.de" date="1739188800">- Drop zypp-CheckAccessDeleted in favor of 'zypper ps'.
- Fix Repoverification plugin not being executed (fixes #614)
- Refresh: Fetch the master index file before key and signature
  (bsc#1236820)
- Allow libzypp to compile with C++20.
- Deprecate RepoReports we do not trigger.
- version 17.36.0 (35)</changelog>
  <changelog author="ma@suse.de" date="1739361600">- Don't issue deprecated warnings if -DNDEBUG is set (bsc#1236983)
  Released libyui packages compile with -Werror=deprecated-declarations
  so we can't add deprecated warnings without breaking them.
- make gcc15 happy (fixes #613)
- version 17.36.1 (35)</changelog>
  <changelog author="ma@suse.de" date="1740139200">- Filesystem usrmerge must not be done in singletrans mode
  (bsc#1236481, bsc#1189788)
  Commit will amend the backend in case the transaction would
  perform a filesystem usrmerge.
- Workaround bsc#1216091 on Code16.
- version 17.36.2 (35)</changelog>
  <changelog author="ma@suse.de" date="1740657600">- Disable zypp.conf:download.use_deltarpm by default (fixes #620)
  Measurements show that you don't benefit from using deltarpms
  unless your network connection is very slow. That's why most
  distributions even stop offering deltarpms. The default remains
  unchanged on SUSE-15.6 and older.
- Make sure repo variables are evaluated in the right context
  (bsc#1237044)
- Introducing MediaCurl2 a alternative HTTP backend.
  This patch adds MediaCurl2 as a testbed for experimenting with a
  more simple way to download files. Set ZYPP_CURL2=1 in the
  environment to use it.
- version 17.36.3 (35)</changelog>
  <changelog author="ma@suse.de" date="1740744000">- Add a transaction package preloader (fixes openSUSE/zypper#104)
  This patch adds a preloader that concurrently downloads files
  during a transaction commit. It's not yet enabled per default.
  To enable the preview set ZYPP_CURL2=1 and ZYPP_PCK_PRELOAD=1
  in the environment.
- RpmPkgSigCheck_test: Exchange the test package signingkey
  (fixes #622)
- Exclude MediaCurl tests if DISABLE_MEDIABACKEND_TESTS (fixes #626)
- Strip a mediahandler tag from baseUrl querystrings.
- version 17.36.4 (35)</changelog>
  <changelog author="ma@suse.de" date="1742212800">- Fix computation of RepStatus if Repo URLs change.
- Fix lost double slash when appending to an absolute FTP url
  (bsc#1238315)
  Ftp actually differs between absolute and relative URL paths.
  Absolute path names begin with a double slash encoded as '/%2F'.
  This must be preserved when manipulating the path.
- version 17.36.5 (35)</changelog>
  <changelog author="ma@suse.de" date="1743681600">- Drop workaround for broken rpm-4.18 in Code16 (bsc#1237172)
- BuildRequires:  %{libsolv_devel_package} &gt;= 0.7.32.
  Code16 moved static libs to libsolv-devel-static.
- Drop usage of SHA1 hash algorithm because it will become
  unavailable in FIPS mode (bsc#1240529)
- Fix zypp.conf dupAllowVendorChange to reflect the correct
  default (false).
  The default was true in Code12 (libzypp-16.x) and changed to
  false with Code15 (libzypp-17.x). Unfortunately this was done by
  shipping a modified zypp.conf file rather than fixing the code.
- zypp.conf: Add `lock_timeout` ($ZYPP_LOCK_TIMEOUT) (bsc#1239809)
- version 17.36.6 (35)</changelog>
  <changelog author="ma@suse.de" date="1746014400">- fixed build with boost 1.88.
- XmlReader: Fix detection of bad input streams (fixes #635)
  libxml2 2.14 potentially reads the complete stream, so it may
  have the 'eof' bit set. Which is not 'good' but also not 'bad'.
- rpm: Fix detection of %triggerscript starts (bsc#1222044)
- RepoindexFileReader: add more &lt;repo&gt; related attributes a
  service may set.
  Add optional attributes gpgcheck, repo_gpgcheck, pkg_gpgcheck,
  keeppackages, gpgkey, mirrorlist, and metalink with the same
  semantic as in a .repo file.
- version 17.36.7 (35)</changelog>
</package>
<package pkgid="8936c49ecdc2d65f7b511d026e7aad8c8b1f2fa9c098da1ac9bb17a40a153ecf" name="libzypp" arch="x86_64">
  <version epoch="0" ver="17.36.7" rel="150600.3.53.1"/>
  <changelog author="ma@suse.de" date="1722600000">- Make sure not to statically linked installed tools (bsc#1228787)
- version 17.35.8 (35)</changelog>
  <changelog author="ma@suse.de" date="1722859200">- single_rpmtrans: fix installation of .src.rpms (bsc#1228647)
- version 17.35.9 (35)</changelog>
  <changelog author="ma@suse.de" date="1725624000">- API refactoring. Prevent zypper from using now private libzypp
  symbols (bsc#1230267)
- Conflicts: zypper &lt;= 1.14.76
- version 17.35.10 (35)</changelog>
  <changelog author="ma@suse.de" date="1726142400">- Deprecate librpmDb::db_const_iterator default ctor (bsc#1230267)
  It's preferred to explicitly tell the root directory of the
  system whose database you want to query.
- version 17.35.11 (35)</changelog>
  <changelog author="ma@suse.de" date="1728475200">- PluginFrame: Send unescaped colons in header values
  (bsc#1231043)
  According to the STOMP protocol it would be correct to escape a
  colon in a header-value, but it breaks plugin receivers which do
  not expect this. The first colon separates header-name from
  header-value, so escaping in the header-value is not needed
  anyway.
  Escaping in the header-value affects especially the urlresolver
  plugins. The input URL is passed in a header, but sent back as
  raw data in the frames body. If the plugin receiver does not
  correctly unescape the URL we may get back a "https\c//" which is
  not usable.
- Do not ignore return value of std::remove_if in MediaSyncFacade
  (fixes #579)
- Fix hang in curl code with no network connection (bsc#1230912)
- version 17.35.12 (35)</changelog>
  <changelog author="ma@suse.de" date="1731412800">- BuildCache: Don't try to retrieve missing raw metadata if no
  permission to write the cache (bsc#1225451)
- RepoManager: throw RepoNoPermissionException if the user has no
  permission to update(write) the caches (bsc#1225451)
- version 17.35.13 (35)</changelog>
  <changelog author="ma@suse.de" date="1731672000">- The 20MB download limit must not apply to non-metadata files like
  package URLs provided via the CLI (bsc#1233393).
- version 17.35.14 (35)</changelog>
  <changelog author="ma@suse.de" date="1733745600">- Url query part: `=` is a safe char in value (bsc#1234304)
- RpmDb: Recognize rpmdb.sqlite as database file (#593)
- Fix typo (fixes #592)
- cmake: check location of fcgi header and adjust include
  accordingly. On Debian and derivatives the fcgi headers
  are not stored in a fastcgi/ subdirectory.(#590)
- version 17.35.15 (35)</changelog>
  <changelog author="ma@suse.de" date="1734523200">- Url: queryparams without value should not have a trailing "=".
- version 17.35.16 (35)</changelog>
  <changelog author="ma@suse.de" date="1737374400">- Move cmake config files to LIB_INSTALL_DIR/cmake/Zypp (fixes #28)
- Fix 'zypper ps' when running in incus container (bsc#1229106)
  Should apply to lxc and lxd containers as well.
- Re-enable 'rpm --runposttrans' usage for chrooted systems
  (bsc#1216091)
- version 17.35.17 (35)</changelog>
  <changelog author="ma@suse.de" date="1737374401">- Fix missing UID checks in repomanager workflow (fixes #603)
- version 17.35.18 (35)</changelog>
  <changelog author="ma@suse.de" date="1737547200">- Create '.keep_packages' in the package cache dir to enforce
  keeping downloaded packages of all repos cahed there (bsc#1232458)
- version 17.35.19 (35)</changelog>
  <changelog author="ma@suse.de" date="1739188800">- Drop zypp-CheckAccessDeleted in favor of 'zypper ps'.
- Fix Repoverification plugin not being executed (fixes #614)
- Refresh: Fetch the master index file before key and signature
  (bsc#1236820)
- Allow libzypp to compile with C++20.
- Deprecate RepoReports we do not trigger.
- version 17.36.0 (35)</changelog>
  <changelog author="ma@suse.de" date="1739361600">- Don't issue deprecated warnings if -DNDEBUG is set (bsc#1236983)
  Released libyui packages compile with -Werror=deprecated-declarations
  so we can't add deprecated warnings without breaking them.
- make gcc15 happy (fixes #613)
- version 17.36.1 (35)</changelog>
  <changelog author="ma@suse.de" date="1740139200">- Filesystem usrmerge must not be done in singletrans mode
  (bsc#1236481, bsc#1189788)
  Commit will amend the backend in case the transaction would
  perform a filesystem usrmerge.
- Workaround bsc#1216091 on Code16.
- version 17.36.2 (35)</changelog>
  <changelog author="ma@suse.de" date="1740657600">- Disable zypp.conf:download.use_deltarpm by default (fixes #620)
  Measurements show that you don't benefit from using deltarpms
  unless your network connection is very slow. That's why most
  distributions even stop offering deltarpms. The default remains
  unchanged on SUSE-15.6 and older.
- Make sure repo variables are evaluated in the right context
  (bsc#1237044)
- Introducing MediaCurl2 a alternative HTTP backend.
  This patch adds MediaCurl2 as a testbed for experimenting with a
  more simple way to download files. Set ZYPP_CURL2=1 in the
  environment to use it.
- version 17.36.3 (35)</changelog>
  <changelog author="ma@suse.de" date="1740744000">- Add a transaction package preloader (fixes openSUSE/zypper#104)
  This patch adds a preloader that concurrently downloads files
  during a transaction commit. It's not yet enabled per default.
  To enable the preview set ZYPP_CURL2=1 and ZYPP_PCK_PRELOAD=1
  in the environment.
- RpmPkgSigCheck_test: Exchange the test package signingkey
  (fixes #622)
- Exclude MediaCurl tests if DISABLE_MEDIABACKEND_TESTS (fixes #626)
- Strip a mediahandler tag from baseUrl querystrings.
- version 17.36.4 (35)</changelog>
  <changelog author="ma@suse.de" date="1742212800">- Fix computation of RepStatus if Repo URLs change.
- Fix lost double slash when appending to an absolute FTP url
  (bsc#1238315)
  Ftp actually differs between absolute and relative URL paths.
  Absolute path names begin with a double slash encoded as '/%2F'.
  This must be preserved when manipulating the path.
- version 17.36.5 (35)</changelog>
  <changelog author="ma@suse.de" date="1743681600">- Drop workaround for broken rpm-4.18 in Code16 (bsc#1237172)
- BuildRequires:  %{libsolv_devel_package} &gt;= 0.7.32.
  Code16 moved static libs to libsolv-devel-static.
- Drop usage of SHA1 hash algorithm because it will become
  unavailable in FIPS mode (bsc#1240529)
- Fix zypp.conf dupAllowVendorChange to reflect the correct
  default (false).
  The default was true in Code12 (libzypp-16.x) and changed to
  false with Code15 (libzypp-17.x). Unfortunately this was done by
  shipping a modified zypp.conf file rather than fixing the code.
- zypp.conf: Add `lock_timeout` ($ZYPP_LOCK_TIMEOUT) (bsc#1239809)
- version 17.36.6 (35)</changelog>
  <changelog author="ma@suse.de" date="1746014400">- fixed build with boost 1.88.
- XmlReader: Fix detection of bad input streams (fixes #635)
  libxml2 2.14 potentially reads the complete stream, so it may
  have the 'eof' bit set. Which is not 'good' but also not 'bad'.
- rpm: Fix detection of %triggerscript starts (bsc#1222044)
- RepoindexFileReader: add more &lt;repo&gt; related attributes a
  service may set.
  Add optional attributes gpgcheck, repo_gpgcheck, pkg_gpgcheck,
  keeppackages, gpgkey, mirrorlist, and metalink with the same
  semantic as in a .repo file.
- version 17.36.7 (35)</changelog>
</package>
<package pkgid="7ced15a7712e9209d2ac21aedebbf394e934c69d5d7186eda15592fda97cf541" name="libzypp" arch="src">
  <version epoch="0" ver="17.37.10" rel="150600.3.74.1"/>
  <changelog author="ma@suse.de" date="1737547200">- Create '.keep_packages' in the package cache dir to enforce
  keeping downloaded packages of all repos cahed there (bsc#1232458)
- version 17.35.19 (35)</changelog>
  <changelog author="ma@suse.de" date="1739188800">- Drop zypp-CheckAccessDeleted in favor of 'zypper ps'.
- Fix Repoverification plugin not being executed (fixes #614)
- Refresh: Fetch the master index file before key and signature
  (bsc#1236820)
- Allow libzypp to compile with C++20.
- Deprecate RepoReports we do not trigger.
- version 17.36.0 (35)</changelog>
  <changelog author="ma@suse.de" date="1739361600">- Don't issue deprecated warnings if -DNDEBUG is set (bsc#1236983)
  Released libyui packages compile with -Werror=deprecated-declarations
  so we can't add deprecated warnings without breaking them.
- make gcc15 happy (fixes #613)
- version 17.36.1 (35)</changelog>
  <changelog author="ma@suse.de" date="1740139200">- Filesystem usrmerge must not be done in singletrans mode
  (bsc#1236481, bsc#1189788)
  Commit will amend the backend in case the transaction would
  perform a filesystem usrmerge.
- Workaround bsc#1216091 on Code16.
- version 17.36.2 (35)</changelog>
  <changelog author="ma@suse.de" date="1740657600">- Disable zypp.conf:download.use_deltarpm by default (fixes #620)
  Measurements show that you don't benefit from using deltarpms
  unless your network connection is very slow. That's why most
  distributions even stop offering deltarpms. The default remains
  unchanged on SUSE-15.6 and older.
- Make sure repo variables are evaluated in the right context
  (bsc#1237044)
- Introducing MediaCurl2 a alternative HTTP backend.
  This patch adds MediaCurl2 as a testbed for experimenting with a
  more simple way to download files. Set ZYPP_CURL2=1 in the
  environment to use it.
- version 17.36.3 (35)</changelog>
  <changelog author="ma@suse.de" date="1740744000">- Add a transaction package preloader (fixes openSUSE/zypper#104)
  This patch adds a preloader that concurrently downloads files
  during a transaction commit. It's not yet enabled per default.
  To enable the preview set ZYPP_CURL2=1 and ZYPP_PCK_PRELOAD=1
  in the environment.
- RpmPkgSigCheck_test: Exchange the test package signingkey
  (fixes #622)
- Exclude MediaCurl tests if DISABLE_MEDIABACKEND_TESTS (fixes #626)
- Strip a mediahandler tag from baseUrl querystrings.
- version 17.36.4 (35)</changelog>
  <changelog author="ma@suse.de" date="1742212800">- Fix computation of RepStatus if Repo URLs change.
- Fix lost double slash when appending to an absolute FTP url
  (bsc#1238315)
  Ftp actually differs between absolute and relative URL paths.
  Absolute path names begin with a double slash encoded as '/%2F'.
  This must be preserved when manipulating the path.
- version 17.36.5 (35)</changelog>
  <changelog author="ma@suse.de" date="1743681600">- Drop workaround for broken rpm-4.18 in Code16 (bsc#1237172)
- BuildRequires:  %{libsolv_devel_package} &gt;= 0.7.32.
  Code16 moved static libs to libsolv-devel-static.
- Drop usage of SHA1 hash algorithm because it will become
  unavailable in FIPS mode (bsc#1240529)
- Fix zypp.conf dupAllowVendorChange to reflect the correct
  default (false).
  The default was true in Code12 (libzypp-16.x) and changed to
  false with Code15 (libzypp-17.x). Unfortunately this was done by
  shipping a modified zypp.conf file rather than fixing the code.
- zypp.conf: Add `lock_timeout` ($ZYPP_LOCK_TIMEOUT) (bsc#1239809)
- version 17.36.6 (35)</changelog>
  <changelog author="ma@suse.de" date="1746014400">- fixed build with boost 1.88.
- XmlReader: Fix detection of bad input streams (fixes #635)
  libxml2 2.14 potentially reads the complete stream, so it may
  have the 'eof' bit set. Which is not 'good' but also not 'bad'.
- rpm: Fix detection of %triggerscript starts (bsc#1222044)
- RepoindexFileReader: add more &lt;repo&gt; related attributes a
  service may set.
  Add optional attributes gpgcheck, repo_gpgcheck, pkg_gpgcheck,
  keeppackages, gpgkey, mirrorlist, and metalink with the same
  semantic as in a .repo file.
- version 17.36.7 (35)</changelog>
  <changelog author="ma@suse.de" date="1747915200">- Code16: Enable curl2 backend and parallel package download by
  default. In Code15 it's optional.
  Environment variables ZYPP_CURL2=&lt;0|1&gt; and ZYPP_PCK_PRELOAD=&lt;0|1&gt;
  can be used to turn the features on or off.
- Make gpgKeyUrl the default source for gpg keys.
  When refreshing zypp now primarily uses gpgKeyUrl information
  from the repo files and only falls back to a automatically
  generated key Url if a gpgKeyUrl was not specified.
- Introduce mirrors into the Media backends (bsc#1240132)
- Drop MediaMultiCurl backend.
- Throttle progress updates when preloading packages (bsc#1239543)
- Check if request is in valid state in CURL callbacks (fixes
  openSUSE/zypper#605)
- spec/CMake: add conditional build
  '--with[out] classic_rpmtrans_as_default'.
  classic_rpmtrans is the current builtin default for SUSE,
  otherwise it's single_rpmtrans.
  The `enable_preview_single_rpmtrans_as_default_for_zypper` switch
  was removed from the spec file.  Accordingly the CMake option
  ENABLE_PREVIEW_SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER was removed.
- version 17.37.0 (35)</changelog>
  <changelog author="ma@suse.de" date="1748001600">- Use a cookie file to validate mirrorlist cache.
  This patch extends the mirrorlist code to use a cookie file to
  validate the contents of the cache against the source URL, making
  sure that we do not accidentially use a old cache when the
  mirrorlist url was changed. For example when migrating a system
  from one release to the next where the same repo alias might just
  have a different URL.
- Let Service define and update gpgkey, mirrorlist and metalink.
- Preserve a mirrorlist file in the raw cache during refresh.
- version 17.37.1 (35)</changelog>
  <changelog author="ma@suse.de" date="1748347200">- Add a note to service maintained .repo file entries (fixes #638)
- Support using %{url} variable in a RIS service's repo section.
- version 17.37.2 (35)</changelog>
  <changelog author="ma@suse.de" date="1748865600">- Do not warn about no mirrors if mirrorlist was switched on
  automatically. (bsc#1243901)
- Relax permission of cached packages to 0644 &amp; ~umask
  (bsc#1243887)
- version 17.37.3 (35)</changelog>
  <changelog author="ma@suse.de" date="1749038400">- RepoInfo: use pathNameSetTrailingSlash (fixes #643)
- Fix wrong userdata parameter type when running zypp with debug
  verbosity (bsc#1239012)
- version 17.37.4 (35)</changelog>
  <changelog author="ma@suse.de" date="1749211200">- Fix credential handling in HEAD requests (bsc#1244105)
- version 17.37.5 (35)</changelog>
  <changelog author="ma@suse.de" date="1750248000">- Enhancements regarding mirror handling during repo refresh.
  Added  means to disable the use of mirrors when downloading
  security relevant files. Requires updaing zypper to 1.14.91.
- Fix autotestcase writer if ZYPP_FULLLOG=1 (bsc#1244042)
  If ZYPP_FULLLOG=1 a solver testcase to
  "/var/log/YaST2/autoTestcase" should be written for each solver
  run. There was no testcase written for the very first solver run.
  This is now fixed.
- Pass $1==2 to %posttrans script if it's an update (bsc#1243279)
- version 17.37.6 (35)</changelog>
  <changelog author="ma@suse.de" date="1751457600">- Fix SEGV in MediaDISK handler (bsc#1245452)
- Explicitly selecting DownloadAsNeeded also selects the
  classic_rpmtrans backend.
  DownloadAsNeeded can not be combined with the rpm singletrans
  installer backend because a rpm transaction requires all package
  headers to be available the the beginning of the transaction. So
  explicitly selecting this mode also turns on the classic_rpmtrans
  backend.
- Fix evaluation of libproxy results (bsc#1244710)
- version 17.37.7 (35)</changelog>
  <changelog author="ma@suse.de" date="1751457601">- Do not trigger download data exceeded errors on HTTP non data
  responses (bsc#1245220)
  In some cases a HTTP 401 or 407 did trigger a "filesize exceeded"
  error, because the response payload size was compared against the
  expected filesize. This patch adds some checks if the response
  code is in the success range and only then takes expected
  filesize into account. Otherwise the response content-length is
  used or a fallback of 2Mb if no content-length is known.
- version 17.37.8 (35)</changelog>
  <changelog author="ma@suse.de" date="1751630400">- Ignore DeltaRpm download errors (bsc#1245672)
  DeltaRpms are in fact optional resources. In case of a failure
  the full rpm is downloaded.
- Improve fix for incorrect filesize handling (bsc#1245220)
- version 17.37.9 (35)</changelog>
  <changelog author="ma@suse.de" date="1751889600">- BuildRequires: %{libsolv_devel_package} &gt;= 0.7.34 (bsc#1243486)
  Newer rpm versions no longer allow a ':' in rpm package names or
  obsoletes. So injecting an
    Obsoletes: product:oldproductname &lt; oldproductversion
  into the -release package to indicate a product rename is no longer
  possible.
  Since libsolv-0.7.34 you can and should use:
    Provides: product-obsoletes(oldproductname) &lt; oldproductversion
  in the -release package. libsolv will then inject the appropriate
  Obsoletes into the Product.
- version 17.37.10 (35)</changelog>
</package>
<package pkgid="4985b3bb64ed7019907066610bbd83e6a56723d9c7d6752b956387dfd94198e1" name="libzypp" arch="x86_64">
  <version epoch="0" ver="17.37.10" rel="150600.3.74.1"/>
  <changelog author="ma@suse.de" date="1737547200">- Create '.keep_packages' in the package cache dir to enforce
  keeping downloaded packages of all repos cahed there (bsc#1232458)
- version 17.35.19 (35)</changelog>
  <changelog author="ma@suse.de" date="1739188800">- Drop zypp-CheckAccessDeleted in favor of 'zypper ps'.
- Fix Repoverification plugin not being executed (fixes #614)
- Refresh: Fetch the master index file before key and signature
  (bsc#1236820)
- Allow libzypp to compile with C++20.
- Deprecate RepoReports we do not trigger.
- version 17.36.0 (35)</changelog>
  <changelog author="ma@suse.de" date="1739361600">- Don't issue deprecated warnings if -DNDEBUG is set (bsc#1236983)
  Released libyui packages compile with -Werror=deprecated-declarations
  so we can't add deprecated warnings without breaking them.
- make gcc15 happy (fixes #613)
- version 17.36.1 (35)</changelog>
  <changelog author="ma@suse.de" date="1740139200">- Filesystem usrmerge must not be done in singletrans mode
  (bsc#1236481, bsc#1189788)
  Commit will amend the backend in case the transaction would
  perform a filesystem usrmerge.
- Workaround bsc#1216091 on Code16.
- version 17.36.2 (35)</changelog>
  <changelog author="ma@suse.de" date="1740657600">- Disable zypp.conf:download.use_deltarpm by default (fixes #620)
  Measurements show that you don't benefit from using deltarpms
  unless your network connection is very slow. That's why most
  distributions even stop offering deltarpms. The default remains
  unchanged on SUSE-15.6 and older.
- Make sure repo variables are evaluated in the right context
  (bsc#1237044)
- Introducing MediaCurl2 a alternative HTTP backend.
  This patch adds MediaCurl2 as a testbed for experimenting with a
  more simple way to download files. Set ZYPP_CURL2=1 in the
  environment to use it.
- version 17.36.3 (35)</changelog>
  <changelog author="ma@suse.de" date="1740744000">- Add a transaction package preloader (fixes openSUSE/zypper#104)
  This patch adds a preloader that concurrently downloads files
  during a transaction commit. It's not yet enabled per default.
  To enable the preview set ZYPP_CURL2=1 and ZYPP_PCK_PRELOAD=1
  in the environment.
- RpmPkgSigCheck_test: Exchange the test package signingkey
  (fixes #622)
- Exclude MediaCurl tests if DISABLE_MEDIABACKEND_TESTS (fixes #626)
- Strip a mediahandler tag from baseUrl querystrings.
- version 17.36.4 (35)</changelog>
  <changelog author="ma@suse.de" date="1742212800">- Fix computation of RepStatus if Repo URLs change.
- Fix lost double slash when appending to an absolute FTP url
  (bsc#1238315)
  Ftp actually differs between absolute and relative URL paths.
  Absolute path names begin with a double slash encoded as '/%2F'.
  This must be preserved when manipulating the path.
- version 17.36.5 (35)</changelog>
  <changelog author="ma@suse.de" date="1743681600">- Drop workaround for broken rpm-4.18 in Code16 (bsc#1237172)
- BuildRequires:  %{libsolv_devel_package} &gt;= 0.7.32.
  Code16 moved static libs to libsolv-devel-static.
- Drop usage of SHA1 hash algorithm because it will become
  unavailable in FIPS mode (bsc#1240529)
- Fix zypp.conf dupAllowVendorChange to reflect the correct
  default (false).
  The default was true in Code12 (libzypp-16.x) and changed to
  false with Code15 (libzypp-17.x). Unfortunately this was done by
  shipping a modified zypp.conf file rather than fixing the code.
- zypp.conf: Add `lock_timeout` ($ZYPP_LOCK_TIMEOUT) (bsc#1239809)
- version 17.36.6 (35)</changelog>
  <changelog author="ma@suse.de" date="1746014400">- fixed build with boost 1.88.
- XmlReader: Fix detection of bad input streams (fixes #635)
  libxml2 2.14 potentially reads the complete stream, so it may
  have the 'eof' bit set. Which is not 'good' but also not 'bad'.
- rpm: Fix detection of %triggerscript starts (bsc#1222044)
- RepoindexFileReader: add more &lt;repo&gt; related attributes a
  service may set.
  Add optional attributes gpgcheck, repo_gpgcheck, pkg_gpgcheck,
  keeppackages, gpgkey, mirrorlist, and metalink with the same
  semantic as in a .repo file.
- version 17.36.7 (35)</changelog>
  <changelog author="ma@suse.de" date="1747915200">- Code16: Enable curl2 backend and parallel package download by
  default. In Code15 it's optional.
  Environment variables ZYPP_CURL2=&lt;0|1&gt; and ZYPP_PCK_PRELOAD=&lt;0|1&gt;
  can be used to turn the features on or off.
- Make gpgKeyUrl the default source for gpg keys.
  When refreshing zypp now primarily uses gpgKeyUrl information
  from the repo files and only falls back to a automatically
  generated key Url if a gpgKeyUrl was not specified.
- Introduce mirrors into the Media backends (bsc#1240132)
- Drop MediaMultiCurl backend.
- Throttle progress updates when preloading packages (bsc#1239543)
- Check if request is in valid state in CURL callbacks (fixes
  openSUSE/zypper#605)
- spec/CMake: add conditional build
  '--with[out] classic_rpmtrans_as_default'.
  classic_rpmtrans is the current builtin default for SUSE,
  otherwise it's single_rpmtrans.
  The `enable_preview_single_rpmtrans_as_default_for_zypper` switch
  was removed from the spec file.  Accordingly the CMake option
  ENABLE_PREVIEW_SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER was removed.
- version 17.37.0 (35)</changelog>
  <changelog author="ma@suse.de" date="1748001600">- Use a cookie file to validate mirrorlist cache.
  This patch extends the mirrorlist code to use a cookie file to
  validate the contents of the cache against the source URL, making
  sure that we do not accidentially use a old cache when the
  mirrorlist url was changed. For example when migrating a system
  from one release to the next where the same repo alias might just
  have a different URL.
- Let Service define and update gpgkey, mirrorlist and metalink.
- Preserve a mirrorlist file in the raw cache during refresh.
- version 17.37.1 (35)</changelog>
  <changelog author="ma@suse.de" date="1748347200">- Add a note to service maintained .repo file entries (fixes #638)
- Support using %{url} variable in a RIS service's repo section.
- version 17.37.2 (35)</changelog>
  <changelog author="ma@suse.de" date="1748865600">- Do not warn about no mirrors if mirrorlist was switched on
  automatically. (bsc#1243901)
- Relax permission of cached packages to 0644 &amp; ~umask
  (bsc#1243887)
- version 17.37.3 (35)</changelog>
  <changelog author="ma@suse.de" date="1749038400">- RepoInfo: use pathNameSetTrailingSlash (fixes #643)
- Fix wrong userdata parameter type when running zypp with debug
  verbosity (bsc#1239012)
- version 17.37.4 (35)</changelog>
  <changelog author="ma@suse.de" date="1749211200">- Fix credential handling in HEAD requests (bsc#1244105)
- version 17.37.5 (35)</changelog>
  <changelog author="ma@suse.de" date="1750248000">- Enhancements regarding mirror handling during repo refresh.
  Added  means to disable the use of mirrors when downloading
  security relevant files. Requires updaing zypper to 1.14.91.
- Fix autotestcase writer if ZYPP_FULLLOG=1 (bsc#1244042)
  If ZYPP_FULLLOG=1 a solver testcase to
  "/var/log/YaST2/autoTestcase" should be written for each solver
  run. There was no testcase written for the very first solver run.
  This is now fixed.
- Pass $1==2 to %posttrans script if it's an update (bsc#1243279)
- version 17.37.6 (35)</changelog>
  <changelog author="ma@suse.de" date="1751457600">- Fix SEGV in MediaDISK handler (bsc#1245452)
- Explicitly selecting DownloadAsNeeded also selects the
  classic_rpmtrans backend.
  DownloadAsNeeded can not be combined with the rpm singletrans
  installer backend because a rpm transaction requires all package
  headers to be available the the beginning of the transaction. So
  explicitly selecting this mode also turns on the classic_rpmtrans
  backend.
- Fix evaluation of libproxy results (bsc#1244710)
- version 17.37.7 (35)</changelog>
  <changelog author="ma@suse.de" date="1751457601">- Do not trigger download data exceeded errors on HTTP non data
  responses (bsc#1245220)
  In some cases a HTTP 401 or 407 did trigger a "filesize exceeded"
  error, because the response payload size was compared against the
  expected filesize. This patch adds some checks if the response
  code is in the success range and only then takes expected
  filesize into account. Otherwise the response content-length is
  used or a fallback of 2Mb if no content-length is known.
- version 17.37.8 (35)</changelog>
  <changelog author="ma@suse.de" date="1751630400">- Ignore DeltaRpm download errors (bsc#1245672)
  DeltaRpms are in fact optional resources. In case of a failure
  the full rpm is downloaded.
- Improve fix for incorrect filesize handling (bsc#1245220)
- version 17.37.9 (35)</changelog>
  <changelog author="ma@suse.de" date="1751889600">- BuildRequires: %{libsolv_devel_package} &gt;= 0.7.34 (bsc#1243486)
  Newer rpm versions no longer allow a ':' in rpm package names or
  obsoletes. So injecting an
    Obsoletes: product:oldproductname &lt; oldproductversion
  into the -release package to indicate a product rename is no longer
  possible.
  Since libsolv-0.7.34 you can and should use:
    Provides: product-obsoletes(oldproductname) &lt; oldproductversion
  in the -release package. libsolv will then inject the appropriate
  Obsoletes into the Product.
- version 17.37.10 (35)</changelog>
</package>
<package pkgid="20ac329bf4a08fbc322c4f50f1052cfd2c49de29aaeaed92c3e8a6f9dbf0efac" name="libzypp" arch="src">
  <version epoch="0" ver="17.37.16" rel="150600.3.79.1"/>
  <changelog author="ma@suse.de" date="1742212800">- Fix computation of RepStatus if Repo URLs change.
- Fix lost double slash when appending to an absolute FTP url
  (bsc#1238315)
  Ftp actually differs between absolute and relative URL paths.
  Absolute path names begin with a double slash encoded as '/%2F'.
  This must be preserved when manipulating the path.
- version 17.36.5 (35)</changelog>
  <changelog author="ma@suse.de" date="1743681600">- Drop workaround for broken rpm-4.18 in Code16 (bsc#1237172)
- BuildRequires:  %{libsolv_devel_package} &gt;= 0.7.32.
  Code16 moved static libs to libsolv-devel-static.
- Drop usage of SHA1 hash algorithm because it will become
  unavailable in FIPS mode (bsc#1240529)
- Fix zypp.conf dupAllowVendorChange to reflect the correct
  default (false).
  The default was true in Code12 (libzypp-16.x) and changed to
  false with Code15 (libzypp-17.x). Unfortunately this was done by
  shipping a modified zypp.conf file rather than fixing the code.
- zypp.conf: Add `lock_timeout` ($ZYPP_LOCK_TIMEOUT) (bsc#1239809)
- version 17.36.6 (35)</changelog>
  <changelog author="ma@suse.de" date="1746014400">- fixed build with boost 1.88.
- XmlReader: Fix detection of bad input streams (fixes #635)
  libxml2 2.14 potentially reads the complete stream, so it may
  have the 'eof' bit set. Which is not 'good' but also not 'bad'.
- rpm: Fix detection of %triggerscript starts (bsc#1222044)
- RepoindexFileReader: add more &lt;repo&gt; related attributes a
  service may set.
  Add optional attributes gpgcheck, repo_gpgcheck, pkg_gpgcheck,
  keeppackages, gpgkey, mirrorlist, and metalink with the same
  semantic as in a .repo file.
- version 17.36.7 (35)</changelog>
  <changelog author="ma@suse.de" date="1747915200">- Code16: Enable curl2 backend and parallel package download by
  default. In Code15 it's optional.
  Environment variables ZYPP_CURL2=&lt;0|1&gt; and ZYPP_PCK_PRELOAD=&lt;0|1&gt;
  can be used to turn the features on or off.
- Make gpgKeyUrl the default source for gpg keys.
  When refreshing zypp now primarily uses gpgKeyUrl information
  from the repo files and only falls back to a automatically
  generated key Url if a gpgKeyUrl was not specified.
- Introduce mirrors into the Media backends (bsc#1240132)
- Drop MediaMultiCurl backend.
- Throttle progress updates when preloading packages (bsc#1239543)
- Check if request is in valid state in CURL callbacks (fixes
  openSUSE/zypper#605)
- spec/CMake: add conditional build
  '--with[out] classic_rpmtrans_as_default'.
  classic_rpmtrans is the current builtin default for SUSE,
  otherwise it's single_rpmtrans.
  The `enable_preview_single_rpmtrans_as_default_for_zypper` switch
  was removed from the spec file.  Accordingly the CMake option
  ENABLE_PREVIEW_SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER was removed.
- version 17.37.0 (35)</changelog>
  <changelog author="ma@suse.de" date="1748001600">- Use a cookie file to validate mirrorlist cache.
  This patch extends the mirrorlist code to use a cookie file to
  validate the contents of the cache against the source URL, making
  sure that we do not accidentially use a old cache when the
  mirrorlist url was changed. For example when migrating a system
  from one release to the next where the same repo alias might just
  have a different URL.
- Let Service define and update gpgkey, mirrorlist and metalink.
- Preserve a mirrorlist file in the raw cache during refresh.
- version 17.37.1 (35)</changelog>
  <changelog author="ma@suse.de" date="1748347200">- Add a note to service maintained .repo file entries (fixes #638)
- Support using %{url} variable in a RIS service's repo section.
- version 17.37.2 (35)</changelog>
  <changelog author="ma@suse.de" date="1748865600">- Do not warn about no mirrors if mirrorlist was switched on
  automatically. (bsc#1243901)
- Relax permission of cached packages to 0644 &amp; ~umask
  (bsc#1243887)
- version 17.37.3 (35)</changelog>
  <changelog author="ma@suse.de" date="1749038400">- RepoInfo: use pathNameSetTrailingSlash (fixes #643)
- Fix wrong userdata parameter type when running zypp with debug
  verbosity (bsc#1239012)
- version 17.37.4 (35)</changelog>
  <changelog author="ma@suse.de" date="1749211200">- Fix credential handling in HEAD requests (bsc#1244105)
- version 17.37.5 (35)</changelog>
  <changelog author="ma@suse.de" date="1750248000">- Enhancements regarding mirror handling during repo refresh.
  Added  means to disable the use of mirrors when downloading
  security relevant files. Requires updaing zypper to 1.14.91.
- Fix autotestcase writer if ZYPP_FULLLOG=1 (bsc#1244042)
  If ZYPP_FULLLOG=1 a solver testcase to
  "/var/log/YaST2/autoTestcase" should be written for each solver
  run. There was no testcase written for the very first solver run.
  This is now fixed.
- Pass $1==2 to %posttrans script if it's an update (bsc#1243279)
- version 17.37.6 (35)</changelog>
  <changelog author="ma@suse.de" date="1751457600">- Fix SEGV in MediaDISK handler (bsc#1245452)
- Explicitly selecting DownloadAsNeeded also selects the
  classic_rpmtrans backend.
  DownloadAsNeeded can not be combined with the rpm singletrans
  installer backend because a rpm transaction requires all package
  headers to be available the the beginning of the transaction. So
  explicitly selecting this mode also turns on the classic_rpmtrans
  backend.
- Fix evaluation of libproxy results (bsc#1244710)
- version 17.37.7 (35)</changelog>
  <changelog author="ma@suse.de" date="1751457601">- Do not trigger download data exceeded errors on HTTP non data
  responses (bsc#1245220)
  In some cases a HTTP 401 or 407 did trigger a "filesize exceeded"
  error, because the response payload size was compared against the
  expected filesize. This patch adds some checks if the response
  code is in the success range and only then takes expected
  filesize into account. Otherwise the response content-length is
  used or a fallback of 2Mb if no content-length is known.
- version 17.37.8 (35)</changelog>
  <changelog author="ma@suse.de" date="1751630400">- Ignore DeltaRpm download errors (bsc#1245672)
  DeltaRpms are in fact optional resources. In case of a failure
  the full rpm is downloaded.
- Improve fix for incorrect filesize handling (bsc#1245220)
- version 17.37.9 (35)</changelog>
  <changelog author="ma@suse.de" date="1751889600">- BuildRequires: %{libsolv_devel_package} &gt;= 0.7.34 (bsc#1243486)
  Newer rpm versions no longer allow a ':' in rpm package names or
  obsoletes. So injecting an
    Obsoletes: product:oldproductname &lt; oldproductversion
  into the -release package to indicate a product rename is no longer
  possible.
  Since libsolv-0.7.34 you can and should use:
    Provides: product-obsoletes(oldproductname) &lt; oldproductversion
  in the -release package. libsolv will then inject the appropriate
  Obsoletes into the Product.
- version 17.37.10 (35)</changelog>
  <changelog author="ma@suse.de" date="1752494400">- Add runtime check for a broken rpm-4.18.0 --runpostrans
  (bsc#1246149)
- Add regression test for bsc#1245220 and some other filesize
  related tests.
- version 17.37.11 (35)</changelog>
  <changelog author="ma@suse.de" date="1752753600">- Allow explicit request to probe an added repo's URL
  (bsc#1246466)
- Fix tests with -DISABLE_MEDIABACKEND_TESTS=1 (fixes #661)
- version 17.37.12 (35)</changelog>
  <changelog author="ma@suse.de" date="1753185600">- Workaround 'rpm -vv' leaving scriptlets /var/tmp (bsc#1218459)
- Verbose log libproxy results if PX_DEBUG=1 is set.
- BuildRequires:  cmake &gt;= 3.17.
- version 17.37.13 (35)</changelog>
  <changelog author="ma@suse.de" date="1753272000">- During installation indicate the backend being used (bsc#1246038)
  If some package actually needs to know, it should test for
  ZYPP_CLASSIC_RPMTRANS being set in the environment.
  Otherwise the transaction is driven by librpm.
- version 17.37.14 (35)</changelog>
  <changelog author="ma@suse.de" date="1753963200">- Append RepoInfo::path() to the mirror URLs in Preloader
  (bsc#1247054)
- version 17.37.15 (35)</changelog>
  <changelog author="ma@suse.de" date="1754568000">- Fix evaluation of libproxy results (bsc#1247690)
- Replace URL variables inside mirrorlist/metalink files
  (fixes #667)
- version 17.37.16 (35)</changelog>
</package>
<package pkgid="70ad5da70f6da44cb780716d0132e58c6e4bfc2315b03688afade1d19b846385" name="libzypp" arch="x86_64">
  <version epoch="0" ver="17.37.16" rel="150600.3.79.1"/>
  <changelog author="ma@suse.de" date="1742212800">- Fix computation of RepStatus if Repo URLs change.
- Fix lost double slash when appending to an absolute FTP url
  (bsc#1238315)
  Ftp actually differs between absolute and relative URL paths.
  Absolute path names begin with a double slash encoded as '/%2F'.
  This must be preserved when manipulating the path.
- version 17.36.5 (35)</changelog>
  <changelog author="ma@suse.de" date="1743681600">- Drop workaround for broken rpm-4.18 in Code16 (bsc#1237172)
- BuildRequires:  %{libsolv_devel_package} &gt;= 0.7.32.
  Code16 moved static libs to libsolv-devel-static.
- Drop usage of SHA1 hash algorithm because it will become
  unavailable in FIPS mode (bsc#1240529)
- Fix zypp.conf dupAllowVendorChange to reflect the correct
  default (false).
  The default was true in Code12 (libzypp-16.x) and changed to
  false with Code15 (libzypp-17.x). Unfortunately this was done by
  shipping a modified zypp.conf file rather than fixing the code.
- zypp.conf: Add `lock_timeout` ($ZYPP_LOCK_TIMEOUT) (bsc#1239809)
- version 17.36.6 (35)</changelog>
  <changelog author="ma@suse.de" date="1746014400">- fixed build with boost 1.88.
- XmlReader: Fix detection of bad input streams (fixes #635)
  libxml2 2.14 potentially reads the complete stream, so it may
  have the 'eof' bit set. Which is not 'good' but also not 'bad'.
- rpm: Fix detection of %triggerscript starts (bsc#1222044)
- RepoindexFileReader: add more &lt;repo&gt; related attributes a
  service may set.
  Add optional attributes gpgcheck, repo_gpgcheck, pkg_gpgcheck,
  keeppackages, gpgkey, mirrorlist, and metalink with the same
  semantic as in a .repo file.
- version 17.36.7 (35)</changelog>
  <changelog author="ma@suse.de" date="1747915200">- Code16: Enable curl2 backend and parallel package download by
  default. In Code15 it's optional.
  Environment variables ZYPP_CURL2=&lt;0|1&gt; and ZYPP_PCK_PRELOAD=&lt;0|1&gt;
  can be used to turn the features on or off.
- Make gpgKeyUrl the default source for gpg keys.
  When refreshing zypp now primarily uses gpgKeyUrl information
  from the repo files and only falls back to a automatically
  generated key Url if a gpgKeyUrl was not specified.
- Introduce mirrors into the Media backends (bsc#1240132)
- Drop MediaMultiCurl backend.
- Throttle progress updates when preloading packages (bsc#1239543)
- Check if request is in valid state in CURL callbacks (fixes
  openSUSE/zypper#605)
- spec/CMake: add conditional build
  '--with[out] classic_rpmtrans_as_default'.
  classic_rpmtrans is the current builtin default for SUSE,
  otherwise it's single_rpmtrans.
  The `enable_preview_single_rpmtrans_as_default_for_zypper` switch
  was removed from the spec file.  Accordingly the CMake option
  ENABLE_PREVIEW_SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER was removed.
- version 17.37.0 (35)</changelog>
  <changelog author="ma@suse.de" date="1748001600">- Use a cookie file to validate mirrorlist cache.
  This patch extends the mirrorlist code to use a cookie file to
  validate the contents of the cache against the source URL, making
  sure that we do not accidentially use a old cache when the
  mirrorlist url was changed. For example when migrating a system
  from one release to the next where the same repo alias might just
  have a different URL.
- Let Service define and update gpgkey, mirrorlist and metalink.
- Preserve a mirrorlist file in the raw cache during refresh.
- version 17.37.1 (35)</changelog>
  <changelog author="ma@suse.de" date="1748347200">- Add a note to service maintained .repo file entries (fixes #638)
- Support using %{url} variable in a RIS service's repo section.
- version 17.37.2 (35)</changelog>
  <changelog author="ma@suse.de" date="1748865600">- Do not warn about no mirrors if mirrorlist was switched on
  automatically. (bsc#1243901)
- Relax permission of cached packages to 0644 &amp; ~umask
  (bsc#1243887)
- version 17.37.3 (35)</changelog>
  <changelog author="ma@suse.de" date="1749038400">- RepoInfo: use pathNameSetTrailingSlash (fixes #643)
- Fix wrong userdata parameter type when running zypp with debug
  verbosity (bsc#1239012)
- version 17.37.4 (35)</changelog>
  <changelog author="ma@suse.de" date="1749211200">- Fix credential handling in HEAD requests (bsc#1244105)
- version 17.37.5 (35)</changelog>
  <changelog author="ma@suse.de" date="1750248000">- Enhancements regarding mirror handling during repo refresh.
  Added  means to disable the use of mirrors when downloading
  security relevant files. Requires updaing zypper to 1.14.91.
- Fix autotestcase writer if ZYPP_FULLLOG=1 (bsc#1244042)
  If ZYPP_FULLLOG=1 a solver testcase to
  "/var/log/YaST2/autoTestcase" should be written for each solver
  run. There was no testcase written for the very first solver run.
  This is now fixed.
- Pass $1==2 to %posttrans script if it's an update (bsc#1243279)
- version 17.37.6 (35)</changelog>
  <changelog author="ma@suse.de" date="1751457600">- Fix SEGV in MediaDISK handler (bsc#1245452)
- Explicitly selecting DownloadAsNeeded also selects the
  classic_rpmtrans backend.
  DownloadAsNeeded can not be combined with the rpm singletrans
  installer backend because a rpm transaction requires all package
  headers to be available the the beginning of the transaction. So
  explicitly selecting this mode also turns on the classic_rpmtrans
  backend.
- Fix evaluation of libproxy results (bsc#1244710)
- version 17.37.7 (35)</changelog>
  <changelog author="ma@suse.de" date="1751457601">- Do not trigger download data exceeded errors on HTTP non data
  responses (bsc#1245220)
  In some cases a HTTP 401 or 407 did trigger a "filesize exceeded"
  error, because the response payload size was compared against the
  expected filesize. This patch adds some checks if the response
  code is in the success range and only then takes expected
  filesize into account. Otherwise the response content-length is
  used or a fallback of 2Mb if no content-length is known.
- version 17.37.8 (35)</changelog>
  <changelog author="ma@suse.de" date="1751630400">- Ignore DeltaRpm download errors (bsc#1245672)
  DeltaRpms are in fact optional resources. In case of a failure
  the full rpm is downloaded.
- Improve fix for incorrect filesize handling (bsc#1245220)
- version 17.37.9 (35)</changelog>
  <changelog author="ma@suse.de" date="1751889600">- BuildRequires: %{libsolv_devel_package} &gt;= 0.7.34 (bsc#1243486)
  Newer rpm versions no longer allow a ':' in rpm package names or
  obsoletes. So injecting an
    Obsoletes: product:oldproductname &lt; oldproductversion
  into the -release package to indicate a product rename is no longer
  possible.
  Since libsolv-0.7.34 you can and should use:
    Provides: product-obsoletes(oldproductname) &lt; oldproductversion
  in the -release package. libsolv will then inject the appropriate
  Obsoletes into the Product.
- version 17.37.10 (35)</changelog>
  <changelog author="ma@suse.de" date="1752494400">- Add runtime check for a broken rpm-4.18.0 --runpostrans
  (bsc#1246149)
- Add regression test for bsc#1245220 and some other filesize
  related tests.
- version 17.37.11 (35)</changelog>
  <changelog author="ma@suse.de" date="1752753600">- Allow explicit request to probe an added repo's URL
  (bsc#1246466)
- Fix tests with -DISABLE_MEDIABACKEND_TESTS=1 (fixes #661)
- version 17.37.12 (35)</changelog>
  <changelog author="ma@suse.de" date="1753185600">- Workaround 'rpm -vv' leaving scriptlets /var/tmp (bsc#1218459)
- Verbose log libproxy results if PX_DEBUG=1 is set.
- BuildRequires:  cmake &gt;= 3.17.
- version 17.37.13 (35)</changelog>
  <changelog author="ma@suse.de" date="1753272000">- During installation indicate the backend being used (bsc#1246038)
  If some package actually needs to know, it should test for
  ZYPP_CLASSIC_RPMTRANS being set in the environment.
  Otherwise the transaction is driven by librpm.
- version 17.37.14 (35)</changelog>
  <changelog author="ma@suse.de" date="1753963200">- Append RepoInfo::path() to the mirror URLs in Preloader
  (bsc#1247054)
- version 17.37.15 (35)</changelog>
  <changelog author="ma@suse.de" date="1754568000">- Fix evaluation of libproxy results (bsc#1247690)
- Replace URL variables inside mirrorlist/metalink files
  (fixes #667)
- version 17.37.16 (35)</changelog>
</package>
<package pkgid="8fc59269f862d6b2baafb95baf3675688ac1439f70efac79b07280df56f03e66" name="libzypp" arch="src">
  <version epoch="0" ver="17.37.18" rel="150700.6.3.1"/>
  <changelog author="ma@suse.de" date="1746014400">- fixed build with boost 1.88.
- XmlReader: Fix detection of bad input streams (fixes #635)
  libxml2 2.14 potentially reads the complete stream, so it may
  have the 'eof' bit set. Which is not 'good' but also not 'bad'.
- rpm: Fix detection of %triggerscript starts (bsc#1222044)
- RepoindexFileReader: add more &lt;repo&gt; related attributes a
  service may set.
  Add optional attributes gpgcheck, repo_gpgcheck, pkg_gpgcheck,
  keeppackages, gpgkey, mirrorlist, and metalink with the same
  semantic as in a .repo file.
- version 17.36.7 (35)</changelog>
  <changelog author="ma@suse.de" date="1747915200">- Code16: Enable curl2 backend and parallel package download by
  default. In Code15 it's optional.
  Environment variables ZYPP_CURL2=&lt;0|1&gt; and ZYPP_PCK_PRELOAD=&lt;0|1&gt;
  can be used to turn the features on or off.
- Make gpgKeyUrl the default source for gpg keys.
  When refreshing zypp now primarily uses gpgKeyUrl information
  from the repo files and only falls back to a automatically
  generated key Url if a gpgKeyUrl was not specified.
- Introduce mirrors into the Media backends (bsc#1240132)
- Drop MediaMultiCurl backend.
- Throttle progress updates when preloading packages (bsc#1239543)
- Check if request is in valid state in CURL callbacks (fixes
  openSUSE/zypper#605)
- spec/CMake: add conditional build
  '--with[out] classic_rpmtrans_as_default'.
  classic_rpmtrans is the current builtin default for SUSE,
  otherwise it's single_rpmtrans.
  The `enable_preview_single_rpmtrans_as_default_for_zypper` switch
  was removed from the spec file.  Accordingly the CMake option
  ENABLE_PREVIEW_SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER was removed.
- version 17.37.0 (35)</changelog>
  <changelog author="ma@suse.de" date="1748001600">- Use a cookie file to validate mirrorlist cache.
  This patch extends the mirrorlist code to use a cookie file to
  validate the contents of the cache against the source URL, making
  sure that we do not accidentially use a old cache when the
  mirrorlist url was changed. For example when migrating a system
  from one release to the next where the same repo alias might just
  have a different URL.
- Let Service define and update gpgkey, mirrorlist and metalink.
- Preserve a mirrorlist file in the raw cache during refresh.
- version 17.37.1 (35)</changelog>
  <changelog author="ma@suse.de" date="1748347200">- Add a note to service maintained .repo file entries (fixes #638)
- Support using %{url} variable in a RIS service's repo section.
- version 17.37.2 (35)</changelog>
  <changelog author="ma@suse.de" date="1748865600">- Do not warn about no mirrors if mirrorlist was switched on
  automatically. (bsc#1243901)
- Relax permission of cached packages to 0644 &amp; ~umask
  (bsc#1243887)
- version 17.37.3 (35)</changelog>
  <changelog author="ma@suse.de" date="1749038400">- RepoInfo: use pathNameSetTrailingSlash (fixes #643)
- Fix wrong userdata parameter type when running zypp with debug
  verbosity (bsc#1239012)
- version 17.37.4 (35)</changelog>
  <changelog author="ma@suse.de" date="1749211200">- Fix credential handling in HEAD requests (bsc#1244105)
- version 17.37.5 (35)</changelog>
  <changelog author="ma@suse.de" date="1750248000">- Enhancements regarding mirror handling during repo refresh.
  Added  means to disable the use of mirrors when downloading
  security relevant files. Requires updaing zypper to 1.14.91.
- Fix autotestcase writer if ZYPP_FULLLOG=1 (bsc#1244042)
  If ZYPP_FULLLOG=1 a solver testcase to
  "/var/log/YaST2/autoTestcase" should be written for each solver
  run. There was no testcase written for the very first solver run.
  This is now fixed.
- Pass $1==2 to %posttrans script if it's an update (bsc#1243279)
- version 17.37.6 (35)</changelog>
  <changelog author="ma@suse.de" date="1751457600">- Fix SEGV in MediaDISK handler (bsc#1245452)
- Explicitly selecting DownloadAsNeeded also selects the
  classic_rpmtrans backend.
  DownloadAsNeeded can not be combined with the rpm singletrans
  installer backend because a rpm transaction requires all package
  headers to be available the the beginning of the transaction. So
  explicitly selecting this mode also turns on the classic_rpmtrans
  backend.
- Fix evaluation of libproxy results (bsc#1244710)
- version 17.37.7 (35)</changelog>
  <changelog author="ma@suse.de" date="1751457601">- Do not trigger download data exceeded errors on HTTP non data
  responses (bsc#1245220)
  In some cases a HTTP 401 or 407 did trigger a "filesize exceeded"
  error, because the response payload size was compared against the
  expected filesize. This patch adds some checks if the response
  code is in the success range and only then takes expected
  filesize into account. Otherwise the response content-length is
  used or a fallback of 2Mb if no content-length is known.
- version 17.37.8 (35)</changelog>
  <changelog author="ma@suse.de" date="1751630400">- Ignore DeltaRpm download errors (bsc#1245672)
  DeltaRpms are in fact optional resources. In case of a failure
  the full rpm is downloaded.
- Improve fix for incorrect filesize handling (bsc#1245220)
- version 17.37.9 (35)</changelog>
  <changelog author="ma@suse.de" date="1751889600">- BuildRequires: %{libsolv_devel_package} &gt;= 0.7.34 (bsc#1243486)
  Newer rpm versions no longer allow a ':' in rpm package names or
  obsoletes. So injecting an
    Obsoletes: product:oldproductname &lt; oldproductversion
  into the -release package to indicate a product rename is no longer
  possible.
  Since libsolv-0.7.34 you can and should use:
    Provides: product-obsoletes(oldproductname) &lt; oldproductversion
  in the -release package. libsolv will then inject the appropriate
  Obsoletes into the Product.
- version 17.37.10 (35)</changelog>
  <changelog author="ma@suse.de" date="1752494400">- Add runtime check for a broken rpm-4.18.0 --runpostrans
  (bsc#1246149)
- Add regression test for bsc#1245220 and some other filesize
  related tests.
- version 17.37.11 (35)</changelog>
  <changelog author="ma@suse.de" date="1752753600">- Allow explicit request to probe an added repo's URL
  (bsc#1246466)
- Fix tests with -DISABLE_MEDIABACKEND_TESTS=1 (fixes #661)
- version 17.37.12 (35)</changelog>
  <changelog author="ma@suse.de" date="1753185600">- Workaround 'rpm -vv' leaving scriptlets /var/tmp (bsc#1218459)
- Verbose log libproxy results if PX_DEBUG=1 is set.
- BuildRequires:  cmake &gt;= 3.17.
- version 17.37.13 (35)</changelog>
  <changelog author="ma@suse.de" date="1753272000">- During installation indicate the backend being used (bsc#1246038)
  If some package actually needs to know, it should test for
  ZYPP_CLASSIC_RPMTRANS being set in the environment.
  Otherwise the transaction is driven by librpm.
- version 17.37.14 (35)</changelog>
  <changelog author="ma@suse.de" date="1753963200">- Append RepoInfo::path() to the mirror URLs in Preloader
  (bsc#1247054)
- version 17.37.15 (35)</changelog>
  <changelog author="ma@suse.de" date="1754568000">- Fix evaluation of libproxy results (bsc#1247690)
- Replace URL variables inside mirrorlist/metalink files
  (fixes #667)
- version 17.37.16 (35)</changelog>
  <changelog author="ma@suse.de" date="1754913600">- Make ld.so ignore the subarch packages during install
  (bsc#1246912)
- version 17.37.17 (35)</changelog>
  <changelog author="ma@suse.de" date="1758628800">- runposttrans: strip root prefix from tmppath (bsc#1250343)
- fixup! Make ld.so ignore the subarch packages during install
  (bsc#1246912)
- version 17.37.18 (35)</changelog>
</package>
<package pkgid="50083542b6d050e4a473f1cac8b3274bab928ba8c70679bb64653a869c52d024" name="libzypp" arch="x86_64">
  <version epoch="0" ver="17.37.18" rel="150700.6.3.1"/>
  <changelog author="ma@suse.de" date="1746014400">- fixed build with boost 1.88.
- XmlReader: Fix detection of bad input streams (fixes #635)
  libxml2 2.14 potentially reads the complete stream, so it may
  have the 'eof' bit set. Which is not 'good' but also not 'bad'.
- rpm: Fix detection of %triggerscript starts (bsc#1222044)
- RepoindexFileReader: add more &lt;repo&gt; related attributes a
  service may set.
  Add optional attributes gpgcheck, repo_gpgcheck, pkg_gpgcheck,
  keeppackages, gpgkey, mirrorlist, and metalink with the same
  semantic as in a .repo file.
- version 17.36.7 (35)</changelog>
  <changelog author="ma@suse.de" date="1747915200">- Code16: Enable curl2 backend and parallel package download by
  default. In Code15 it's optional.
  Environment variables ZYPP_CURL2=&lt;0|1&gt; and ZYPP_PCK_PRELOAD=&lt;0|1&gt;
  can be used to turn the features on or off.
- Make gpgKeyUrl the default source for gpg keys.
  When refreshing zypp now primarily uses gpgKeyUrl information
  from the repo files and only falls back to a automatically
  generated key Url if a gpgKeyUrl was not specified.
- Introduce mirrors into the Media backends (bsc#1240132)
- Drop MediaMultiCurl backend.
- Throttle progress updates when preloading packages (bsc#1239543)
- Check if request is in valid state in CURL callbacks (fixes
  openSUSE/zypper#605)
- spec/CMake: add conditional build
  '--with[out] classic_rpmtrans_as_default'.
  classic_rpmtrans is the current builtin default for SUSE,
  otherwise it's single_rpmtrans.
  The `enable_preview_single_rpmtrans_as_default_for_zypper` switch
  was removed from the spec file.  Accordingly the CMake option
  ENABLE_PREVIEW_SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER was removed.
- version 17.37.0 (35)</changelog>
  <changelog author="ma@suse.de" date="1748001600">- Use a cookie file to validate mirrorlist cache.
  This patch extends the mirrorlist code to use a cookie file to
  validate the contents of the cache against the source URL, making
  sure that we do not accidentially use a old cache when the
  mirrorlist url was changed. For example when migrating a system
  from one release to the next where the same repo alias might just
  have a different URL.
- Let Service define and update gpgkey, mirrorlist and metalink.
- Preserve a mirrorlist file in the raw cache during refresh.
- version 17.37.1 (35)</changelog>
  <changelog author="ma@suse.de" date="1748347200">- Add a note to service maintained .repo file entries (fixes #638)
- Support using %{url} variable in a RIS service's repo section.
- version 17.37.2 (35)</changelog>
  <changelog author="ma@suse.de" date="1748865600">- Do not warn about no mirrors if mirrorlist was switched on
  automatically. (bsc#1243901)
- Relax permission of cached packages to 0644 &amp; ~umask
  (bsc#1243887)
- version 17.37.3 (35)</changelog>
  <changelog author="ma@suse.de" date="1749038400">- RepoInfo: use pathNameSetTrailingSlash (fixes #643)
- Fix wrong userdata parameter type when running zypp with debug
  verbosity (bsc#1239012)
- version 17.37.4 (35)</changelog>
  <changelog author="ma@suse.de" date="1749211200">- Fix credential handling in HEAD requests (bsc#1244105)
- version 17.37.5 (35)</changelog>
  <changelog author="ma@suse.de" date="1750248000">- Enhancements regarding mirror handling during repo refresh.
  Added  means to disable the use of mirrors when downloading
  security relevant files. Requires updaing zypper to 1.14.91.
- Fix autotestcase writer if ZYPP_FULLLOG=1 (bsc#1244042)
  If ZYPP_FULLLOG=1 a solver testcase to
  "/var/log/YaST2/autoTestcase" should be written for each solver
  run. There was no testcase written for the very first solver run.
  This is now fixed.
- Pass $1==2 to %posttrans script if it's an update (bsc#1243279)
- version 17.37.6 (35)</changelog>
  <changelog author="ma@suse.de" date="1751457600">- Fix SEGV in MediaDISK handler (bsc#1245452)
- Explicitly selecting DownloadAsNeeded also selects the
  classic_rpmtrans backend.
  DownloadAsNeeded can not be combined with the rpm singletrans
  installer backend because a rpm transaction requires all package
  headers to be available the the beginning of the transaction. So
  explicitly selecting this mode also turns on the classic_rpmtrans
  backend.
- Fix evaluation of libproxy results (bsc#1244710)
- version 17.37.7 (35)</changelog>
  <changelog author="ma@suse.de" date="1751457601">- Do not trigger download data exceeded errors on HTTP non data
  responses (bsc#1245220)
  In some cases a HTTP 401 or 407 did trigger a "filesize exceeded"
  error, because the response payload size was compared against the
  expected filesize. This patch adds some checks if the response
  code is in the success range and only then takes expected
  filesize into account. Otherwise the response content-length is
  used or a fallback of 2Mb if no content-length is known.
- version 17.37.8 (35)</changelog>
  <changelog author="ma@suse.de" date="1751630400">- Ignore DeltaRpm download errors (bsc#1245672)
  DeltaRpms are in fact optional resources. In case of a failure
  the full rpm is downloaded.
- Improve fix for incorrect filesize handling (bsc#1245220)
- version 17.37.9 (35)</changelog>
  <changelog author="ma@suse.de" date="1751889600">- BuildRequires: %{libsolv_devel_package} &gt;= 0.7.34 (bsc#1243486)
  Newer rpm versions no longer allow a ':' in rpm package names or
  obsoletes. So injecting an
    Obsoletes: product:oldproductname &lt; oldproductversion
  into the -release package to indicate a product rename is no longer
  possible.
  Since libsolv-0.7.34 you can and should use:
    Provides: product-obsoletes(oldproductname) &lt; oldproductversion
  in the -release package. libsolv will then inject the appropriate
  Obsoletes into the Product.
- version 17.37.10 (35)</changelog>
  <changelog author="ma@suse.de" date="1752494400">- Add runtime check for a broken rpm-4.18.0 --runpostrans
  (bsc#1246149)
- Add regression test for bsc#1245220 and some other filesize
  related tests.
- version 17.37.11 (35)</changelog>
  <changelog author="ma@suse.de" date="1752753600">- Allow explicit request to probe an added repo's URL
  (bsc#1246466)
- Fix tests with -DISABLE_MEDIABACKEND_TESTS=1 (fixes #661)
- version 17.37.12 (35)</changelog>
  <changelog author="ma@suse.de" date="1753185600">- Workaround 'rpm -vv' leaving scriptlets /var/tmp (bsc#1218459)
- Verbose log libproxy results if PX_DEBUG=1 is set.
- BuildRequires:  cmake &gt;= 3.17.
- version 17.37.13 (35)</changelog>
  <changelog author="ma@suse.de" date="1753272000">- During installation indicate the backend being used (bsc#1246038)
  If some package actually needs to know, it should test for
  ZYPP_CLASSIC_RPMTRANS being set in the environment.
  Otherwise the transaction is driven by librpm.
- version 17.37.14 (35)</changelog>
  <changelog author="ma@suse.de" date="1753963200">- Append RepoInfo::path() to the mirror URLs in Preloader
  (bsc#1247054)
- version 17.37.15 (35)</changelog>
  <changelog author="ma@suse.de" date="1754568000">- Fix evaluation of libproxy results (bsc#1247690)
- Replace URL variables inside mirrorlist/metalink files
  (fixes #667)
- version 17.37.16 (35)</changelog>
  <changelog author="ma@suse.de" date="1754913600">- Make ld.so ignore the subarch packages during install
  (bsc#1246912)
- version 17.37.17 (35)</changelog>
  <changelog author="ma@suse.de" date="1758628800">- runposttrans: strip root prefix from tmppath (bsc#1250343)
- fixup! Make ld.so ignore the subarch packages during install
  (bsc#1246912)
- version 17.37.18 (35)</changelog>
</package>
<package pkgid="e044b1d1e29d379e4983d1dd4da0565c4530555e904bb4a0f92ac25085798a65" name="libzypp" arch="src">
  <version epoch="0" ver="17.37.5" rel="150600.3.60.1"/>
  <changelog author="ma@suse.de" date="1731672000">- The 20MB download limit must not apply to non-metadata files like
  package URLs provided via the CLI (bsc#1233393).
- version 17.35.14 (35)</changelog>
  <changelog author="ma@suse.de" date="1733745600">- Url query part: `=` is a safe char in value (bsc#1234304)
- RpmDb: Recognize rpmdb.sqlite as database file (#593)
- Fix typo (fixes #592)
- cmake: check location of fcgi header and adjust include
  accordingly. On Debian and derivatives the fcgi headers
  are not stored in a fastcgi/ subdirectory.(#590)
- version 17.35.15 (35)</changelog>
  <changelog author="ma@suse.de" date="1734523200">- Url: queryparams without value should not have a trailing "=".
- version 17.35.16 (35)</changelog>
  <changelog author="ma@suse.de" date="1737374400">- Move cmake config files to LIB_INSTALL_DIR/cmake/Zypp (fixes #28)
- Fix 'zypper ps' when running in incus container (bsc#1229106)
  Should apply to lxc and lxd containers as well.
- Re-enable 'rpm --runposttrans' usage for chrooted systems
  (bsc#1216091)
- version 17.35.17 (35)</changelog>
  <changelog author="ma@suse.de" date="1737374401">- Fix missing UID checks in repomanager workflow (fixes #603)
- version 17.35.18 (35)</changelog>
  <changelog author="ma@suse.de" date="1737547200">- Create '.keep_packages' in the package cache dir to enforce
  keeping downloaded packages of all repos cahed there (bsc#1232458)
- version 17.35.19 (35)</changelog>
  <changelog author="ma@suse.de" date="1739188800">- Drop zypp-CheckAccessDeleted in favor of 'zypper ps'.
- Fix Repoverification plugin not being executed (fixes #614)
- Refresh: Fetch the master index file before key and signature
  (bsc#1236820)
- Allow libzypp to compile with C++20.
- Deprecate RepoReports we do not trigger.
- version 17.36.0 (35)</changelog>
  <changelog author="ma@suse.de" date="1739361600">- Don't issue deprecated warnings if -DNDEBUG is set (bsc#1236983)
  Released libyui packages compile with -Werror=deprecated-declarations
  so we can't add deprecated warnings without breaking them.
- make gcc15 happy (fixes #613)
- version 17.36.1 (35)</changelog>
  <changelog author="ma@suse.de" date="1740139200">- Filesystem usrmerge must not be done in singletrans mode
  (bsc#1236481, bsc#1189788)
  Commit will amend the backend in case the transaction would
  perform a filesystem usrmerge.
- Workaround bsc#1216091 on Code16.
- version 17.36.2 (35)</changelog>
  <changelog author="ma@suse.de" date="1740657600">- Disable zypp.conf:download.use_deltarpm by default (fixes #620)
  Measurements show that you don't benefit from using deltarpms
  unless your network connection is very slow. That's why most
  distributions even stop offering deltarpms. The default remains
  unchanged on SUSE-15.6 and older.
- Make sure repo variables are evaluated in the right context
  (bsc#1237044)
- Introducing MediaCurl2 a alternative HTTP backend.
  This patch adds MediaCurl2 as a testbed for experimenting with a
  more simple way to download files. Set ZYPP_CURL2=1 in the
  environment to use it.
- version 17.36.3 (35)</changelog>
  <changelog author="ma@suse.de" date="1740744000">- Add a transaction package preloader (fixes openSUSE/zypper#104)
  This patch adds a preloader that concurrently downloads files
  during a transaction commit. It's not yet enabled per default.
  To enable the preview set ZYPP_CURL2=1 and ZYPP_PCK_PRELOAD=1
  in the environment.
- RpmPkgSigCheck_test: Exchange the test package signingkey
  (fixes #622)
- Exclude MediaCurl tests if DISABLE_MEDIABACKEND_TESTS (fixes #626)
- Strip a mediahandler tag from baseUrl querystrings.
- version 17.36.4 (35)</changelog>
  <changelog author="ma@suse.de" date="1742212800">- Fix computation of RepStatus if Repo URLs change.
- Fix lost double slash when appending to an absolute FTP url
  (bsc#1238315)
  Ftp actually differs between absolute and relative URL paths.
  Absolute path names begin with a double slash encoded as '/%2F'.
  This must be preserved when manipulating the path.
- version 17.36.5 (35)</changelog>
  <changelog author="ma@suse.de" date="1743681600">- Drop workaround for broken rpm-4.18 in Code16 (bsc#1237172)
- BuildRequires:  %{libsolv_devel_package} &gt;= 0.7.32.
  Code16 moved static libs to libsolv-devel-static.
- Drop usage of SHA1 hash algorithm because it will become
  unavailable in FIPS mode (bsc#1240529)
- Fix zypp.conf dupAllowVendorChange to reflect the correct
  default (false).
  The default was true in Code12 (libzypp-16.x) and changed to
  false with Code15 (libzypp-17.x). Unfortunately this was done by
  shipping a modified zypp.conf file rather than fixing the code.
- zypp.conf: Add `lock_timeout` ($ZYPP_LOCK_TIMEOUT) (bsc#1239809)
- version 17.36.6 (35)</changelog>
  <changelog author="ma@suse.de" date="1746014400">- fixed build with boost 1.88.
- XmlReader: Fix detection of bad input streams (fixes #635)
  libxml2 2.14 potentially reads the complete stream, so it may
  have the 'eof' bit set. Which is not 'good' but also not 'bad'.
- rpm: Fix detection of %triggerscript starts (bsc#1222044)
- RepoindexFileReader: add more &lt;repo&gt; related attributes a
  service may set.
  Add optional attributes gpgcheck, repo_gpgcheck, pkg_gpgcheck,
  keeppackages, gpgkey, mirrorlist, and metalink with the same
  semantic as in a .repo file.
- version 17.36.7 (35)</changelog>
  <changelog author="ma@suse.de" date="1747915200">- Code16: Enable curl2 backend and parallel package download by
  default. In Code15 it's optional.
  Environment variables ZYPP_CURL2=&lt;0|1&gt; and ZYPP_PCK_PRELOAD=&lt;0|1&gt;
  can be used to turn the features on or off.
- Make gpgKeyUrl the default source for gpg keys.
  When refreshing zypp now primarily uses gpgKeyUrl information
  from the repo files and only falls back to a automatically
  generated key Url if a gpgKeyUrl was not specified.
- Introduce mirrors into the Media backends (bsc#1240132)
- Drop MediaMultiCurl backend.
- Throttle progress updates when preloading packages (bsc#1239543)
- Check if request is in valid state in CURL callbacks (fixes
  openSUSE/zypper#605)
- spec/CMake: add conditional build
  '--with[out] classic_rpmtrans_as_default'.
  classic_rpmtrans is the current builtin default for SUSE,
  otherwise it's single_rpmtrans.
  The `enable_preview_single_rpmtrans_as_default_for_zypper` switch
  was removed from the spec file.  Accordingly the CMake option
  ENABLE_PREVIEW_SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER was removed.
- version 17.37.0 (35)</changelog>
  <changelog author="ma@suse.de" date="1748001600">- Use a cookie file to validate mirrorlist cache.
  This patch extends the mirrorlist code to use a cookie file to
  validate the contents of the cache against the source URL, making
  sure that we do not accidentially use a old cache when the
  mirrorlist url was changed. For example when migrating a system
  from one release to the next where the same repo alias might just
  have a different URL.
- Let Service define and update gpgkey, mirrorlist and metalink.
- Preserve a mirrorlist file in the raw cache during refresh.
- version 17.37.1 (35)</changelog>
  <changelog author="ma@suse.de" date="1748347200">- Add a note to service maintained .repo file entries (fixes #638)
- Support using %{url} variable in a RIS service's repo section.
- version 17.37.2 (35)</changelog>
  <changelog author="ma@suse.de" date="1748865600">- Do not warn about no mirrors if mirrorlist was switched on
  automatically. (bsc#1243901)
- Relax permission of cached packages to 0644 &amp; ~umask
  (bsc#1243887)
- version 17.37.3 (35)</changelog>
  <changelog author="ma@suse.de" date="1749038400">- RepoInfo: use pathNameSetTrailingSlash (fixes #643)
- Fix wrong userdata parameter type when running zypp with debug
  verbosity (bsc#1239012)
- version 17.37.4 (35)</changelog>
  <changelog author="ma@suse.de" date="1749211200">- Fix credential handling in HEAD requests (bsc#1244105)
- version 17.37.5 (35)</changelog>
</package>
<package pkgid="07bf852e6604254d4c346209d305eb7e15e2a5e9dad37e6a205ab4fe09aff673" name="libzypp" arch="x86_64">
  <version epoch="0" ver="17.37.5" rel="150600.3.60.1"/>
  <changelog author="ma@suse.de" date="1731672000">- The 20MB download limit must not apply to non-metadata files like
  package URLs provided via the CLI (bsc#1233393).
- version 17.35.14 (35)</changelog>
  <changelog author="ma@suse.de" date="1733745600">- Url query part: `=` is a safe char in value (bsc#1234304)
- RpmDb: Recognize rpmdb.sqlite as database file (#593)
- Fix typo (fixes #592)
- cmake: check location of fcgi header and adjust include
  accordingly. On Debian and derivatives the fcgi headers
  are not stored in a fastcgi/ subdirectory.(#590)
- version 17.35.15 (35)</changelog>
  <changelog author="ma@suse.de" date="1734523200">- Url: queryparams without value should not have a trailing "=".
- version 17.35.16 (35)</changelog>
  <changelog author="ma@suse.de" date="1737374400">- Move cmake config files to LIB_INSTALL_DIR/cmake/Zypp (fixes #28)
- Fix 'zypper ps' when running in incus container (bsc#1229106)
  Should apply to lxc and lxd containers as well.
- Re-enable 'rpm --runposttrans' usage for chrooted systems
  (bsc#1216091)
- version 17.35.17 (35)</changelog>
  <changelog author="ma@suse.de" date="1737374401">- Fix missing UID checks in repomanager workflow (fixes #603)
- version 17.35.18 (35)</changelog>
  <changelog author="ma@suse.de" date="1737547200">- Create '.keep_packages' in the package cache dir to enforce
  keeping downloaded packages of all repos cahed there (bsc#1232458)
- version 17.35.19 (35)</changelog>
  <changelog author="ma@suse.de" date="1739188800">- Drop zypp-CheckAccessDeleted in favor of 'zypper ps'.
- Fix Repoverification plugin not being executed (fixes #614)
- Refresh: Fetch the master index file before key and signature
  (bsc#1236820)
- Allow libzypp to compile with C++20.
- Deprecate RepoReports we do not trigger.
- version 17.36.0 (35)</changelog>
  <changelog author="ma@suse.de" date="1739361600">- Don't issue deprecated warnings if -DNDEBUG is set (bsc#1236983)
  Released libyui packages compile with -Werror=deprecated-declarations
  so we can't add deprecated warnings without breaking them.
- make gcc15 happy (fixes #613)
- version 17.36.1 (35)</changelog>
  <changelog author="ma@suse.de" date="1740139200">- Filesystem usrmerge must not be done in singletrans mode
  (bsc#1236481, bsc#1189788)
  Commit will amend the backend in case the transaction would
  perform a filesystem usrmerge.
- Workaround bsc#1216091 on Code16.
- version 17.36.2 (35)</changelog>
  <changelog author="ma@suse.de" date="1740657600">- Disable zypp.conf:download.use_deltarpm by default (fixes #620)
  Measurements show that you don't benefit from using deltarpms
  unless your network connection is very slow. That's why most
  distributions even stop offering deltarpms. The default remains
  unchanged on SUSE-15.6 and older.
- Make sure repo variables are evaluated in the right context
  (bsc#1237044)
- Introducing MediaCurl2 a alternative HTTP backend.
  This patch adds MediaCurl2 as a testbed for experimenting with a
  more simple way to download files. Set ZYPP_CURL2=1 in the
  environment to use it.
- version 17.36.3 (35)</changelog>
  <changelog author="ma@suse.de" date="1740744000">- Add a transaction package preloader (fixes openSUSE/zypper#104)
  This patch adds a preloader that concurrently downloads files
  during a transaction commit. It's not yet enabled per default.
  To enable the preview set ZYPP_CURL2=1 and ZYPP_PCK_PRELOAD=1
  in the environment.
- RpmPkgSigCheck_test: Exchange the test package signingkey
  (fixes #622)
- Exclude MediaCurl tests if DISABLE_MEDIABACKEND_TESTS (fixes #626)
- Strip a mediahandler tag from baseUrl querystrings.
- version 17.36.4 (35)</changelog>
  <changelog author="ma@suse.de" date="1742212800">- Fix computation of RepStatus if Repo URLs change.
- Fix lost double slash when appending to an absolute FTP url
  (bsc#1238315)
  Ftp actually differs between absolute and relative URL paths.
  Absolute path names begin with a double slash encoded as '/%2F'.
  This must be preserved when manipulating the path.
- version 17.36.5 (35)</changelog>
  <changelog author="ma@suse.de" date="1743681600">- Drop workaround for broken rpm-4.18 in Code16 (bsc#1237172)
- BuildRequires:  %{libsolv_devel_package} &gt;= 0.7.32.
  Code16 moved static libs to libsolv-devel-static.
- Drop usage of SHA1 hash algorithm because it will become
  unavailable in FIPS mode (bsc#1240529)
- Fix zypp.conf dupAllowVendorChange to reflect the correct
  default (false).
  The default was true in Code12 (libzypp-16.x) and changed to
  false with Code15 (libzypp-17.x). Unfortunately this was done by
  shipping a modified zypp.conf file rather than fixing the code.
- zypp.conf: Add `lock_timeout` ($ZYPP_LOCK_TIMEOUT) (bsc#1239809)
- version 17.36.6 (35)</changelog>
  <changelog author="ma@suse.de" date="1746014400">- fixed build with boost 1.88.
- XmlReader: Fix detection of bad input streams (fixes #635)
  libxml2 2.14 potentially reads the complete stream, so it may
  have the 'eof' bit set. Which is not 'good' but also not 'bad'.
- rpm: Fix detection of %triggerscript starts (bsc#1222044)
- RepoindexFileReader: add more &lt;repo&gt; related attributes a
  service may set.
  Add optional attributes gpgcheck, repo_gpgcheck, pkg_gpgcheck,
  keeppackages, gpgkey, mirrorlist, and metalink with the same
  semantic as in a .repo file.
- version 17.36.7 (35)</changelog>
  <changelog author="ma@suse.de" date="1747915200">- Code16: Enable curl2 backend and parallel package download by
  default. In Code15 it's optional.
  Environment variables ZYPP_CURL2=&lt;0|1&gt; and ZYPP_PCK_PRELOAD=&lt;0|1&gt;
  can be used to turn the features on or off.
- Make gpgKeyUrl the default source for gpg keys.
  When refreshing zypp now primarily uses gpgKeyUrl information
  from the repo files and only falls back to a automatically
  generated key Url if a gpgKeyUrl was not specified.
- Introduce mirrors into the Media backends (bsc#1240132)
- Drop MediaMultiCurl backend.
- Throttle progress updates when preloading packages (bsc#1239543)
- Check if request is in valid state in CURL callbacks (fixes
  openSUSE/zypper#605)
- spec/CMake: add conditional build
  '--with[out] classic_rpmtrans_as_default'.
  classic_rpmtrans is the current builtin default for SUSE,
  otherwise it's single_rpmtrans.
  The `enable_preview_single_rpmtrans_as_default_for_zypper` switch
  was removed from the spec file.  Accordingly the CMake option
  ENABLE_PREVIEW_SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER was removed.
- version 17.37.0 (35)</changelog>
  <changelog author="ma@suse.de" date="1748001600">- Use a cookie file to validate mirrorlist cache.
  This patch extends the mirrorlist code to use a cookie file to
  validate the contents of the cache against the source URL, making
  sure that we do not accidentially use a old cache when the
  mirrorlist url was changed. For example when migrating a system
  from one release to the next where the same repo alias might just
  have a different URL.
- Let Service define and update gpgkey, mirrorlist and metalink.
- Preserve a mirrorlist file in the raw cache during refresh.
- version 17.37.1 (35)</changelog>
  <changelog author="ma@suse.de" date="1748347200">- Add a note to service maintained .repo file entries (fixes #638)
- Support using %{url} variable in a RIS service's repo section.
- version 17.37.2 (35)</changelog>
  <changelog author="ma@suse.de" date="1748865600">- Do not warn about no mirrors if mirrorlist was switched on
  automatically. (bsc#1243901)
- Relax permission of cached packages to 0644 &amp; ~umask
  (bsc#1243887)
- version 17.37.3 (35)</changelog>
  <changelog author="ma@suse.de" date="1749038400">- RepoInfo: use pathNameSetTrailingSlash (fixes #643)
- Fix wrong userdata parameter type when running zypp with debug
  verbosity (bsc#1239012)
- version 17.37.4 (35)</changelog>
  <changelog author="ma@suse.de" date="1749211200">- Fix credential handling in HEAD requests (bsc#1244105)
- version 17.37.5 (35)</changelog>
</package>
<package pkgid="ed6faf4616ff28883e914dc07b18996b8f58101ddbb0da50a60ba7febcb67c78" name="libzypp-devel" arch="x86_64">
  <version epoch="0" ver="17.36.7" rel="150600.3.53.1"/>
  <changelog author="ma@suse.de" date="1722600000">- Make sure not to statically linked installed tools (bsc#1228787)
- version 17.35.8 (35)</changelog>
  <changelog author="ma@suse.de" date="1722859200">- single_rpmtrans: fix installation of .src.rpms (bsc#1228647)
- version 17.35.9 (35)</changelog>
  <changelog author="ma@suse.de" date="1725624000">- API refactoring. Prevent zypper from using now private libzypp
  symbols (bsc#1230267)
- Conflicts: zypper &lt;= 1.14.76
- version 17.35.10 (35)</changelog>
  <changelog author="ma@suse.de" date="1726142400">- Deprecate librpmDb::db_const_iterator default ctor (bsc#1230267)
  It's preferred to explicitly tell the root directory of the
  system whose database you want to query.
- version 17.35.11 (35)</changelog>
  <changelog author="ma@suse.de" date="1728475200">- PluginFrame: Send unescaped colons in header values
  (bsc#1231043)
  According to the STOMP protocol it would be correct to escape a
  colon in a header-value, but it breaks plugin receivers which do
  not expect this. The first colon separates header-name from
  header-value, so escaping in the header-value is not needed
  anyway.
  Escaping in the header-value affects especially the urlresolver
  plugins. The input URL is passed in a header, but sent back as
  raw data in the frames body. If the plugin receiver does not
  correctly unescape the URL we may get back a "https\c//" which is
  not usable.
- Do not ignore return value of std::remove_if in MediaSyncFacade
  (fixes #579)
- Fix hang in curl code with no network connection (bsc#1230912)
- version 17.35.12 (35)</changelog>
  <changelog author="ma@suse.de" date="1731412800">- BuildCache: Don't try to retrieve missing raw metadata if no
  permission to write the cache (bsc#1225451)
- RepoManager: throw RepoNoPermissionException if the user has no
  permission to update(write) the caches (bsc#1225451)
- version 17.35.13 (35)</changelog>
  <changelog author="ma@suse.de" date="1731672000">- The 20MB download limit must not apply to non-metadata files like
  package URLs provided via the CLI (bsc#1233393).
- version 17.35.14 (35)</changelog>
  <changelog author="ma@suse.de" date="1733745600">- Url query part: `=` is a safe char in value (bsc#1234304)
- RpmDb: Recognize rpmdb.sqlite as database file (#593)
- Fix typo (fixes #592)
- cmake: check location of fcgi header and adjust include
  accordingly. On Debian and derivatives the fcgi headers
  are not stored in a fastcgi/ subdirectory.(#590)
- version 17.35.15 (35)</changelog>
  <changelog author="ma@suse.de" date="1734523200">- Url: queryparams without value should not have a trailing "=".
- version 17.35.16 (35)</changelog>
  <changelog author="ma@suse.de" date="1737374400">- Move cmake config files to LIB_INSTALL_DIR/cmake/Zypp (fixes #28)
- Fix 'zypper ps' when running in incus container (bsc#1229106)
  Should apply to lxc and lxd containers as well.
- Re-enable 'rpm --runposttrans' usage for chrooted systems
  (bsc#1216091)
- version 17.35.17 (35)</changelog>
  <changelog author="ma@suse.de" date="1737374401">- Fix missing UID checks in repomanager workflow (fixes #603)
- version 17.35.18 (35)</changelog>
  <changelog author="ma@suse.de" date="1737547200">- Create '.keep_packages' in the package cache dir to enforce
  keeping downloaded packages of all repos cahed there (bsc#1232458)
- version 17.35.19 (35)</changelog>
  <changelog author="ma@suse.de" date="1739188800">- Drop zypp-CheckAccessDeleted in favor of 'zypper ps'.
- Fix Repoverification plugin not being executed (fixes #614)
- Refresh: Fetch the master index file before key and signature
  (bsc#1236820)
- Allow libzypp to compile with C++20.
- Deprecate RepoReports we do not trigger.
- version 17.36.0 (35)</changelog>
  <changelog author="ma@suse.de" date="1739361600">- Don't issue deprecated warnings if -DNDEBUG is set (bsc#1236983)
  Released libyui packages compile with -Werror=deprecated-declarations
  so we can't add deprecated warnings without breaking them.
- make gcc15 happy (fixes #613)
- version 17.36.1 (35)</changelog>
  <changelog author="ma@suse.de" date="1740139200">- Filesystem usrmerge must not be done in singletrans mode
  (bsc#1236481, bsc#1189788)
  Commit will amend the backend in case the transaction would
  perform a filesystem usrmerge.
- Workaround bsc#1216091 on Code16.
- version 17.36.2 (35)</changelog>
  <changelog author="ma@suse.de" date="1740657600">- Disable zypp.conf:download.use_deltarpm by default (fixes #620)
  Measurements show that you don't benefit from using deltarpms
  unless your network connection is very slow. That's why most
  distributions even stop offering deltarpms. The default remains
  unchanged on SUSE-15.6 and older.
- Make sure repo variables are evaluated in the right context
  (bsc#1237044)
- Introducing MediaCurl2 a alternative HTTP backend.
  This patch adds MediaCurl2 as a testbed for experimenting with a
  more simple way to download files. Set ZYPP_CURL2=1 in the
  environment to use it.
- version 17.36.3 (35)</changelog>
  <changelog author="ma@suse.de" date="1740744000">- Add a transaction package preloader (fixes openSUSE/zypper#104)
  This patch adds a preloader that concurrently downloads files
  during a transaction commit. It's not yet enabled per default.
  To enable the preview set ZYPP_CURL2=1 and ZYPP_PCK_PRELOAD=1
  in the environment.
- RpmPkgSigCheck_test: Exchange the test package signingkey
  (fixes #622)
- Exclude MediaCurl tests if DISABLE_MEDIABACKEND_TESTS (fixes #626)
- Strip a mediahandler tag from baseUrl querystrings.
- version 17.36.4 (35)</changelog>
  <changelog author="ma@suse.de" date="1742212800">- Fix computation of RepStatus if Repo URLs change.
- Fix lost double slash when appending to an absolute FTP url
  (bsc#1238315)
  Ftp actually differs between absolute and relative URL paths.
  Absolute path names begin with a double slash encoded as '/%2F'.
  This must be preserved when manipulating the path.
- version 17.36.5 (35)</changelog>
  <changelog author="ma@suse.de" date="1743681600">- Drop workaround for broken rpm-4.18 in Code16 (bsc#1237172)
- BuildRequires:  %{libsolv_devel_package} &gt;= 0.7.32.
  Code16 moved static libs to libsolv-devel-static.
- Drop usage of SHA1 hash algorithm because it will become
  unavailable in FIPS mode (bsc#1240529)
- Fix zypp.conf dupAllowVendorChange to reflect the correct
  default (false).
  The default was true in Code12 (libzypp-16.x) and changed to
  false with Code15 (libzypp-17.x). Unfortunately this was done by
  shipping a modified zypp.conf file rather than fixing the code.
- zypp.conf: Add `lock_timeout` ($ZYPP_LOCK_TIMEOUT) (bsc#1239809)
- version 17.36.6 (35)</changelog>
  <changelog author="ma@suse.de" date="1746014400">- fixed build with boost 1.88.
- XmlReader: Fix detection of bad input streams (fixes #635)
  libxml2 2.14 potentially reads the complete stream, so it may
  have the 'eof' bit set. Which is not 'good' but also not 'bad'.
- rpm: Fix detection of %triggerscript starts (bsc#1222044)
- RepoindexFileReader: add more &lt;repo&gt; related attributes a
  service may set.
  Add optional attributes gpgcheck, repo_gpgcheck, pkg_gpgcheck,
  keeppackages, gpgkey, mirrorlist, and metalink with the same
  semantic as in a .repo file.
- version 17.36.7 (35)</changelog>
</package>
<package pkgid="fb352881f11c53515932a4f2fbc79b7174b2cfa25a02d3ab9f6db7016ec69967" name="libzypp-devel" arch="x86_64">
  <version epoch="0" ver="17.37.10" rel="150600.3.74.1"/>
  <changelog author="ma@suse.de" date="1737547200">- Create '.keep_packages' in the package cache dir to enforce
  keeping downloaded packages of all repos cahed there (bsc#1232458)
- version 17.35.19 (35)</changelog>
  <changelog author="ma@suse.de" date="1739188800">- Drop zypp-CheckAccessDeleted in favor of 'zypper ps'.
- Fix Repoverification plugin not being executed (fixes #614)
- Refresh: Fetch the master index file before key and signature
  (bsc#1236820)
- Allow libzypp to compile with C++20.
- Deprecate RepoReports we do not trigger.
- version 17.36.0 (35)</changelog>
  <changelog author="ma@suse.de" date="1739361600">- Don't issue deprecated warnings if -DNDEBUG is set (bsc#1236983)
  Released libyui packages compile with -Werror=deprecated-declarations
  so we can't add deprecated warnings without breaking them.
- make gcc15 happy (fixes #613)
- version 17.36.1 (35)</changelog>
  <changelog author="ma@suse.de" date="1740139200">- Filesystem usrmerge must not be done in singletrans mode
  (bsc#1236481, bsc#1189788)
  Commit will amend the backend in case the transaction would
  perform a filesystem usrmerge.
- Workaround bsc#1216091 on Code16.
- version 17.36.2 (35)</changelog>
  <changelog author="ma@suse.de" date="1740657600">- Disable zypp.conf:download.use_deltarpm by default (fixes #620)
  Measurements show that you don't benefit from using deltarpms
  unless your network connection is very slow. That's why most
  distributions even stop offering deltarpms. The default remains
  unchanged on SUSE-15.6 and older.
- Make sure repo variables are evaluated in the right context
  (bsc#1237044)
- Introducing MediaCurl2 a alternative HTTP backend.
  This patch adds MediaCurl2 as a testbed for experimenting with a
  more simple way to download files. Set ZYPP_CURL2=1 in the
  environment to use it.
- version 17.36.3 (35)</changelog>
  <changelog author="ma@suse.de" date="1740744000">- Add a transaction package preloader (fixes openSUSE/zypper#104)
  This patch adds a preloader that concurrently downloads files
  during a transaction commit. It's not yet enabled per default.
  To enable the preview set ZYPP_CURL2=1 and ZYPP_PCK_PRELOAD=1
  in the environment.
- RpmPkgSigCheck_test: Exchange the test package signingkey
  (fixes #622)
- Exclude MediaCurl tests if DISABLE_MEDIABACKEND_TESTS (fixes #626)
- Strip a mediahandler tag from baseUrl querystrings.
- version 17.36.4 (35)</changelog>
  <changelog author="ma@suse.de" date="1742212800">- Fix computation of RepStatus if Repo URLs change.
- Fix lost double slash when appending to an absolute FTP url
  (bsc#1238315)
  Ftp actually differs between absolute and relative URL paths.
  Absolute path names begin with a double slash encoded as '/%2F'.
  This must be preserved when manipulating the path.
- version 17.36.5 (35)</changelog>
  <changelog author="ma@suse.de" date="1743681600">- Drop workaround for broken rpm-4.18 in Code16 (bsc#1237172)
- BuildRequires:  %{libsolv_devel_package} &gt;= 0.7.32.
  Code16 moved static libs to libsolv-devel-static.
- Drop usage of SHA1 hash algorithm because it will become
  unavailable in FIPS mode (bsc#1240529)
- Fix zypp.conf dupAllowVendorChange to reflect the correct
  default (false).
  The default was true in Code12 (libzypp-16.x) and changed to
  false with Code15 (libzypp-17.x). Unfortunately this was done by
  shipping a modified zypp.conf file rather than fixing the code.
- zypp.conf: Add `lock_timeout` ($ZYPP_LOCK_TIMEOUT) (bsc#1239809)
- version 17.36.6 (35)</changelog>
  <changelog author="ma@suse.de" date="1746014400">- fixed build with boost 1.88.
- XmlReader: Fix detection of bad input streams (fixes #635)
  libxml2 2.14 potentially reads the complete stream, so it may
  have the 'eof' bit set. Which is not 'good' but also not 'bad'.
- rpm: Fix detection of %triggerscript starts (bsc#1222044)
- RepoindexFileReader: add more &lt;repo&gt; related attributes a
  service may set.
  Add optional attributes gpgcheck, repo_gpgcheck, pkg_gpgcheck,
  keeppackages, gpgkey, mirrorlist, and metalink with the same
  semantic as in a .repo file.
- version 17.36.7 (35)</changelog>
  <changelog author="ma@suse.de" date="1747915200">- Code16: Enable curl2 backend and parallel package download by
  default. In Code15 it's optional.
  Environment variables ZYPP_CURL2=&lt;0|1&gt; and ZYPP_PCK_PRELOAD=&lt;0|1&gt;
  can be used to turn the features on or off.
- Make gpgKeyUrl the default source for gpg keys.
  When refreshing zypp now primarily uses gpgKeyUrl information
  from the repo files and only falls back to a automatically
  generated key Url if a gpgKeyUrl was not specified.
- Introduce mirrors into the Media backends (bsc#1240132)
- Drop MediaMultiCurl backend.
- Throttle progress updates when preloading packages (bsc#1239543)
- Check if request is in valid state in CURL callbacks (fixes
  openSUSE/zypper#605)
- spec/CMake: add conditional build
  '--with[out] classic_rpmtrans_as_default'.
  classic_rpmtrans is the current builtin default for SUSE,
  otherwise it's single_rpmtrans.
  The `enable_preview_single_rpmtrans_as_default_for_zypper` switch
  was removed from the spec file.  Accordingly the CMake option
  ENABLE_PREVIEW_SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER was removed.
- version 17.37.0 (35)</changelog>
  <changelog author="ma@suse.de" date="1748001600">- Use a cookie file to validate mirrorlist cache.
  This patch extends the mirrorlist code to use a cookie file to
  validate the contents of the cache against the source URL, making
  sure that we do not accidentially use a old cache when the
  mirrorlist url was changed. For example when migrating a system
  from one release to the next where the same repo alias might just
  have a different URL.
- Let Service define and update gpgkey, mirrorlist and metalink.
- Preserve a mirrorlist file in the raw cache during refresh.
- version 17.37.1 (35)</changelog>
  <changelog author="ma@suse.de" date="1748347200">- Add a note to service maintained .repo file entries (fixes #638)
- Support using %{url} variable in a RIS service's repo section.
- version 17.37.2 (35)</changelog>
  <changelog author="ma@suse.de" date="1748865600">- Do not warn about no mirrors if mirrorlist was switched on
  automatically. (bsc#1243901)
- Relax permission of cached packages to 0644 &amp; ~umask
  (bsc#1243887)
- version 17.37.3 (35)</changelog>
  <changelog author="ma@suse.de" date="1749038400">- RepoInfo: use pathNameSetTrailingSlash (fixes #643)
- Fix wrong userdata parameter type when running zypp with debug
  verbosity (bsc#1239012)
- version 17.37.4 (35)</changelog>
  <changelog author="ma@suse.de" date="1749211200">- Fix credential handling in HEAD requests (bsc#1244105)
- version 17.37.5 (35)</changelog>
  <changelog author="ma@suse.de" date="1750248000">- Enhancements regarding mirror handling during repo refresh.
  Added  means to disable the use of mirrors when downloading
  security relevant files. Requires updaing zypper to 1.14.91.
- Fix autotestcase writer if ZYPP_FULLLOG=1 (bsc#1244042)
  If ZYPP_FULLLOG=1 a solver testcase to
  "/var/log/YaST2/autoTestcase" should be written for each solver
  run. There was no testcase written for the very first solver run.
  This is now fixed.
- Pass $1==2 to %posttrans script if it's an update (bsc#1243279)
- version 17.37.6 (35)</changelog>
  <changelog author="ma@suse.de" date="1751457600">- Fix SEGV in MediaDISK handler (bsc#1245452)
- Explicitly selecting DownloadAsNeeded also selects the
  classic_rpmtrans backend.
  DownloadAsNeeded can not be combined with the rpm singletrans
  installer backend because a rpm transaction requires all package
  headers to be available the the beginning of the transaction. So
  explicitly selecting this mode also turns on the classic_rpmtrans
  backend.
- Fix evaluation of libproxy results (bsc#1244710)
- version 17.37.7 (35)</changelog>
  <changelog author="ma@suse.de" date="1751457601">- Do not trigger download data exceeded errors on HTTP non data
  responses (bsc#1245220)
  In some cases a HTTP 401 or 407 did trigger a "filesize exceeded"
  error, because the response payload size was compared against the
  expected filesize. This patch adds some checks if the response
  code is in the success range and only then takes expected
  filesize into account. Otherwise the response content-length is
  used or a fallback of 2Mb if no content-length is known.
- version 17.37.8 (35)</changelog>
  <changelog author="ma@suse.de" date="1751630400">- Ignore DeltaRpm download errors (bsc#1245672)
  DeltaRpms are in fact optional resources. In case of a failure
  the full rpm is downloaded.
- Improve fix for incorrect filesize handling (bsc#1245220)
- version 17.37.9 (35)</changelog>
  <changelog author="ma@suse.de" date="1751889600">- BuildRequires: %{libsolv_devel_package} &gt;= 0.7.34 (bsc#1243486)
  Newer rpm versions no longer allow a ':' in rpm package names or
  obsoletes. So injecting an
    Obsoletes: product:oldproductname &lt; oldproductversion
  into the -release package to indicate a product rename is no longer
  possible.
  Since libsolv-0.7.34 you can and should use:
    Provides: product-obsoletes(oldproductname) &lt; oldproductversion
  in the -release package. libsolv will then inject the appropriate
  Obsoletes into the Product.
- version 17.37.10 (35)</changelog>
</package>
<package pkgid="08f2c97ac2ad305b47866572f4f34fe2ad61511640843ed053d864452d199dd1" name="libzypp-devel" arch="x86_64">
  <version epoch="0" ver="17.37.16" rel="150600.3.79.1"/>
  <changelog author="ma@suse.de" date="1742212800">- Fix computation of RepStatus if Repo URLs change.
- Fix lost double slash when appending to an absolute FTP url
  (bsc#1238315)
  Ftp actually differs between absolute and relative URL paths.
  Absolute path names begin with a double slash encoded as '/%2F'.
  This must be preserved when manipulating the path.
- version 17.36.5 (35)</changelog>
  <changelog author="ma@suse.de" date="1743681600">- Drop workaround for broken rpm-4.18 in Code16 (bsc#1237172)
- BuildRequires:  %{libsolv_devel_package} &gt;= 0.7.32.
  Code16 moved static libs to libsolv-devel-static.
- Drop usage of SHA1 hash algorithm because it will become
  unavailable in FIPS mode (bsc#1240529)
- Fix zypp.conf dupAllowVendorChange to reflect the correct
  default (false).
  The default was true in Code12 (libzypp-16.x) and changed to
  false with Code15 (libzypp-17.x). Unfortunately this was done by
  shipping a modified zypp.conf file rather than fixing the code.
- zypp.conf: Add `lock_timeout` ($ZYPP_LOCK_TIMEOUT) (bsc#1239809)
- version 17.36.6 (35)</changelog>
  <changelog author="ma@suse.de" date="1746014400">- fixed build with boost 1.88.
- XmlReader: Fix detection of bad input streams (fixes #635)
  libxml2 2.14 potentially reads the complete stream, so it may
  have the 'eof' bit set. Which is not 'good' but also not 'bad'.
- rpm: Fix detection of %triggerscript starts (bsc#1222044)
- RepoindexFileReader: add more &lt;repo&gt; related attributes a
  service may set.
  Add optional attributes gpgcheck, repo_gpgcheck, pkg_gpgcheck,
  keeppackages, gpgkey, mirrorlist, and metalink with the same
  semantic as in a .repo file.
- version 17.36.7 (35)</changelog>
  <changelog author="ma@suse.de" date="1747915200">- Code16: Enable curl2 backend and parallel package download by
  default. In Code15 it's optional.
  Environment variables ZYPP_CURL2=&lt;0|1&gt; and ZYPP_PCK_PRELOAD=&lt;0|1&gt;
  can be used to turn the features on or off.
- Make gpgKeyUrl the default source for gpg keys.
  When refreshing zypp now primarily uses gpgKeyUrl information
  from the repo files and only falls back to a automatically
  generated key Url if a gpgKeyUrl was not specified.
- Introduce mirrors into the Media backends (bsc#1240132)
- Drop MediaMultiCurl backend.
- Throttle progress updates when preloading packages (bsc#1239543)
- Check if request is in valid state in CURL callbacks (fixes
  openSUSE/zypper#605)
- spec/CMake: add conditional build
  '--with[out] classic_rpmtrans_as_default'.
  classic_rpmtrans is the current builtin default for SUSE,
  otherwise it's single_rpmtrans.
  The `enable_preview_single_rpmtrans_as_default_for_zypper` switch
  was removed from the spec file.  Accordingly the CMake option
  ENABLE_PREVIEW_SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER was removed.
- version 17.37.0 (35)</changelog>
  <changelog author="ma@suse.de" date="1748001600">- Use a cookie file to validate mirrorlist cache.
  This patch extends the mirrorlist code to use a cookie file to
  validate the contents of the cache against the source URL, making
  sure that we do not accidentially use a old cache when the
  mirrorlist url was changed. For example when migrating a system
  from one release to the next where the same repo alias might just
  have a different URL.
- Let Service define and update gpgkey, mirrorlist and metalink.
- Preserve a mirrorlist file in the raw cache during refresh.
- version 17.37.1 (35)</changelog>
  <changelog author="ma@suse.de" date="1748347200">- Add a note to service maintained .repo file entries (fixes #638)
- Support using %{url} variable in a RIS service's repo section.
- version 17.37.2 (35)</changelog>
  <changelog author="ma@suse.de" date="1748865600">- Do not warn about no mirrors if mirrorlist was switched on
  automatically. (bsc#1243901)
- Relax permission of cached packages to 0644 &amp; ~umask
  (bsc#1243887)
- version 17.37.3 (35)</changelog>
  <changelog author="ma@suse.de" date="1749038400">- RepoInfo: use pathNameSetTrailingSlash (fixes #643)
- Fix wrong userdata parameter type when running zypp with debug
  verbosity (bsc#1239012)
- version 17.37.4 (35)</changelog>
  <changelog author="ma@suse.de" date="1749211200">- Fix credential handling in HEAD requests (bsc#1244105)
- version 17.37.5 (35)</changelog>
  <changelog author="ma@suse.de" date="1750248000">- Enhancements regarding mirror handling during repo refresh.
  Added  means to disable the use of mirrors when downloading
  security relevant files. Requires updaing zypper to 1.14.91.
- Fix autotestcase writer if ZYPP_FULLLOG=1 (bsc#1244042)
  If ZYPP_FULLLOG=1 a solver testcase to
  "/var/log/YaST2/autoTestcase" should be written for each solver
  run. There was no testcase written for the very first solver run.
  This is now fixed.
- Pass $1==2 to %posttrans script if it's an update (bsc#1243279)
- version 17.37.6 (35)</changelog>
  <changelog author="ma@suse.de" date="1751457600">- Fix SEGV in MediaDISK handler (bsc#1245452)
- Explicitly selecting DownloadAsNeeded also selects the
  classic_rpmtrans backend.
  DownloadAsNeeded can not be combined with the rpm singletrans
  installer backend because a rpm transaction requires all package
  headers to be available the the beginning of the transaction. So
  explicitly selecting this mode also turns on the classic_rpmtrans
  backend.
- Fix evaluation of libproxy results (bsc#1244710)
- version 17.37.7 (35)</changelog>
  <changelog author="ma@suse.de" date="1751457601">- Do not trigger download data exceeded errors on HTTP non data
  responses (bsc#1245220)
  In some cases a HTTP 401 or 407 did trigger a "filesize exceeded"
  error, because the response payload size was compared against the
  expected filesize. This patch adds some checks if the response
  code is in the success range and only then takes expected
  filesize into account. Otherwise the response content-length is
  used or a fallback of 2Mb if no content-length is known.
- version 17.37.8 (35)</changelog>
  <changelog author="ma@suse.de" date="1751630400">- Ignore DeltaRpm download errors (bsc#1245672)
  DeltaRpms are in fact optional resources. In case of a failure
  the full rpm is downloaded.
- Improve fix for incorrect filesize handling (bsc#1245220)
- version 17.37.9 (35)</changelog>
  <changelog author="ma@suse.de" date="1751889600">- BuildRequires: %{libsolv_devel_package} &gt;= 0.7.34 (bsc#1243486)
  Newer rpm versions no longer allow a ':' in rpm package names or
  obsoletes. So injecting an
    Obsoletes: product:oldproductname &lt; oldproductversion
  into the -release package to indicate a product rename is no longer
  possible.
  Since libsolv-0.7.34 you can and should use:
    Provides: product-obsoletes(oldproductname) &lt; oldproductversion
  in the -release package. libsolv will then inject the appropriate
  Obsoletes into the Product.
- version 17.37.10 (35)</changelog>
  <changelog author="ma@suse.de" date="1752494400">- Add runtime check for a broken rpm-4.18.0 --runpostrans
  (bsc#1246149)
- Add regression test for bsc#1245220 and some other filesize
  related tests.
- version 17.37.11 (35)</changelog>
  <changelog author="ma@suse.de" date="1752753600">- Allow explicit request to probe an added repo's URL
  (bsc#1246466)
- Fix tests with -DISABLE_MEDIABACKEND_TESTS=1 (fixes #661)
- version 17.37.12 (35)</changelog>
  <changelog author="ma@suse.de" date="1753185600">- Workaround 'rpm -vv' leaving scriptlets /var/tmp (bsc#1218459)
- Verbose log libproxy results if PX_DEBUG=1 is set.
- BuildRequires:  cmake &gt;= 3.17.
- version 17.37.13 (35)</changelog>
  <changelog author="ma@suse.de" date="1753272000">- During installation indicate the backend being used (bsc#1246038)
  If some package actually needs to know, it should test for
  ZYPP_CLASSIC_RPMTRANS being set in the environment.
  Otherwise the transaction is driven by librpm.
- version 17.37.14 (35)</changelog>
  <changelog author="ma@suse.de" date="1753963200">- Append RepoInfo::path() to the mirror URLs in Preloader
  (bsc#1247054)
- version 17.37.15 (35)</changelog>
  <changelog author="ma@suse.de" date="1754568000">- Fix evaluation of libproxy results (bsc#1247690)
- Replace URL variables inside mirrorlist/metalink files
  (fixes #667)
- version 17.37.16 (35)</changelog>
</package>
<package pkgid="950add5d8b9c85c497a260e6b00a21b76ec8b7dd3cbc0b7deadd2851bdd5e981" name="libzypp-devel" arch="x86_64">
  <version epoch="0" ver="17.37.18" rel="150700.6.3.1"/>
  <changelog author="ma@suse.de" date="1746014400">- fixed build with boost 1.88.
- XmlReader: Fix detection of bad input streams (fixes #635)
  libxml2 2.14 potentially reads the complete stream, so it may
  have the 'eof' bit set. Which is not 'good' but also not 'bad'.
- rpm: Fix detection of %triggerscript starts (bsc#1222044)
- RepoindexFileReader: add more &lt;repo&gt; related attributes a
  service may set.
  Add optional attributes gpgcheck, repo_gpgcheck, pkg_gpgcheck,
  keeppackages, gpgkey, mirrorlist, and metalink with the same
  semantic as in a .repo file.
- version 17.36.7 (35)</changelog>
  <changelog author="ma@suse.de" date="1747915200">- Code16: Enable curl2 backend and parallel package download by
  default. In Code15 it's optional.
  Environment variables ZYPP_CURL2=&lt;0|1&gt; and ZYPP_PCK_PRELOAD=&lt;0|1&gt;
  can be used to turn the features on or off.
- Make gpgKeyUrl the default source for gpg keys.
  When refreshing zypp now primarily uses gpgKeyUrl information
  from the repo files and only falls back to a automatically
  generated key Url if a gpgKeyUrl was not specified.
- Introduce mirrors into the Media backends (bsc#1240132)
- Drop MediaMultiCurl backend.
- Throttle progress updates when preloading packages (bsc#1239543)
- Check if request is in valid state in CURL callbacks (fixes
  openSUSE/zypper#605)
- spec/CMake: add conditional build
  '--with[out] classic_rpmtrans_as_default'.
  classic_rpmtrans is the current builtin default for SUSE,
  otherwise it's single_rpmtrans.
  The `enable_preview_single_rpmtrans_as_default_for_zypper` switch
  was removed from the spec file.  Accordingly the CMake option
  ENABLE_PREVIEW_SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER was removed.
- version 17.37.0 (35)</changelog>
  <changelog author="ma@suse.de" date="1748001600">- Use a cookie file to validate mirrorlist cache.
  This patch extends the mirrorlist code to use a cookie file to
  validate the contents of the cache against the source URL, making
  sure that we do not accidentially use a old cache when the
  mirrorlist url was changed. For example when migrating a system
  from one release to the next where the same repo alias might just
  have a different URL.
- Let Service define and update gpgkey, mirrorlist and metalink.
- Preserve a mirrorlist file in the raw cache during refresh.
- version 17.37.1 (35)</changelog>
  <changelog author="ma@suse.de" date="1748347200">- Add a note to service maintained .repo file entries (fixes #638)
- Support using %{url} variable in a RIS service's repo section.
- version 17.37.2 (35)</changelog>
  <changelog author="ma@suse.de" date="1748865600">- Do not warn about no mirrors if mirrorlist was switched on
  automatically. (bsc#1243901)
- Relax permission of cached packages to 0644 &amp; ~umask
  (bsc#1243887)
- version 17.37.3 (35)</changelog>
  <changelog author="ma@suse.de" date="1749038400">- RepoInfo: use pathNameSetTrailingSlash (fixes #643)
- Fix wrong userdata parameter type when running zypp with debug
  verbosity (bsc#1239012)
- version 17.37.4 (35)</changelog>
  <changelog author="ma@suse.de" date="1749211200">- Fix credential handling in HEAD requests (bsc#1244105)
- version 17.37.5 (35)</changelog>
  <changelog author="ma@suse.de" date="1750248000">- Enhancements regarding mirror handling during repo refresh.
  Added  means to disable the use of mirrors when downloading
  security relevant files. Requires updaing zypper to 1.14.91.
- Fix autotestcase writer if ZYPP_FULLLOG=1 (bsc#1244042)
  If ZYPP_FULLLOG=1 a solver testcase to
  "/var/log/YaST2/autoTestcase" should be written for each solver
  run. There was no testcase written for the very first solver run.
  This is now fixed.
- Pass $1==2 to %posttrans script if it's an update (bsc#1243279)
- version 17.37.6 (35)</changelog>
  <changelog author="ma@suse.de" date="1751457600">- Fix SEGV in MediaDISK handler (bsc#1245452)
- Explicitly selecting DownloadAsNeeded also selects the
  classic_rpmtrans backend.
  DownloadAsNeeded can not be combined with the rpm singletrans
  installer backend because a rpm transaction requires all package
  headers to be available the the beginning of the transaction. So
  explicitly selecting this mode also turns on the classic_rpmtrans
  backend.
- Fix evaluation of libproxy results (bsc#1244710)
- version 17.37.7 (35)</changelog>
  <changelog author="ma@suse.de" date="1751457601">- Do not trigger download data exceeded errors on HTTP non data
  responses (bsc#1245220)
  In some cases a HTTP 401 or 407 did trigger a "filesize exceeded"
  error, because the response payload size was compared against the
  expected filesize. This patch adds some checks if the response
  code is in the success range and only then takes expected
  filesize into account. Otherwise the response content-length is
  used or a fallback of 2Mb if no content-length is known.
- version 17.37.8 (35)</changelog>
  <changelog author="ma@suse.de" date="1751630400">- Ignore DeltaRpm download errors (bsc#1245672)
  DeltaRpms are in fact optional resources. In case of a failure
  the full rpm is downloaded.
- Improve fix for incorrect filesize handling (bsc#1245220)
- version 17.37.9 (35)</changelog>
  <changelog author="ma@suse.de" date="1751889600">- BuildRequires: %{libsolv_devel_package} &gt;= 0.7.34 (bsc#1243486)
  Newer rpm versions no longer allow a ':' in rpm package names or
  obsoletes. So injecting an
    Obsoletes: product:oldproductname &lt; oldproductversion
  into the -release package to indicate a product rename is no longer
  possible.
  Since libsolv-0.7.34 you can and should use:
    Provides: product-obsoletes(oldproductname) &lt; oldproductversion
  in the -release package. libsolv will then inject the appropriate
  Obsoletes into the Product.
- version 17.37.10 (35)</changelog>
  <changelog author="ma@suse.de" date="1752494400">- Add runtime check for a broken rpm-4.18.0 --runpostrans
  (bsc#1246149)
- Add regression test for bsc#1245220 and some other filesize
  related tests.
- version 17.37.11 (35)</changelog>
  <changelog author="ma@suse.de" date="1752753600">- Allow explicit request to probe an added repo's URL
  (bsc#1246466)
- Fix tests with -DISABLE_MEDIABACKEND_TESTS=1 (fixes #661)
- version 17.37.12 (35)</changelog>
  <changelog author="ma@suse.de" date="1753185600">- Workaround 'rpm -vv' leaving scriptlets /var/tmp (bsc#1218459)
- Verbose log libproxy results if PX_DEBUG=1 is set.
- BuildRequires:  cmake &gt;= 3.17.
- version 17.37.13 (35)</changelog>
  <changelog author="ma@suse.de" date="1753272000">- During installation indicate the backend being used (bsc#1246038)
  If some package actually needs to know, it should test for
  ZYPP_CLASSIC_RPMTRANS being set in the environment.
  Otherwise the transaction is driven by librpm.
- version 17.37.14 (35)</changelog>
  <changelog author="ma@suse.de" date="1753963200">- Append RepoInfo::path() to the mirror URLs in Preloader
  (bsc#1247054)
- version 17.37.15 (35)</changelog>
  <changelog author="ma@suse.de" date="1754568000">- Fix evaluation of libproxy results (bsc#1247690)
- Replace URL variables inside mirrorlist/metalink files
  (fixes #667)
- version 17.37.16 (35)</changelog>
  <changelog author="ma@suse.de" date="1754913600">- Make ld.so ignore the subarch packages during install
  (bsc#1246912)
- version 17.37.17 (35)</changelog>
  <changelog author="ma@suse.de" date="1758628800">- runposttrans: strip root prefix from tmppath (bsc#1250343)
- fixup! Make ld.so ignore the subarch packages during install
  (bsc#1246912)
- version 17.37.18 (35)</changelog>
</package>
<package pkgid="24d6d7b79ee0eb50f016f1da82bb0be2c3f682dbc34ddbf60b1e1bbc0e43855f" name="libzypp-devel" arch="x86_64">
  <version epoch="0" ver="17.37.5" rel="150600.3.60.1"/>
  <changelog author="ma@suse.de" date="1731672000">- The 20MB download limit must not apply to non-metadata files like
  package URLs provided via the CLI (bsc#1233393).
- version 17.35.14 (35)</changelog>
  <changelog author="ma@suse.de" date="1733745600">- Url query part: `=` is a safe char in value (bsc#1234304)
- RpmDb: Recognize rpmdb.sqlite as database file (#593)
- Fix typo (fixes #592)
- cmake: check location of fcgi header and adjust include
  accordingly. On Debian and derivatives the fcgi headers
  are not stored in a fastcgi/ subdirectory.(#590)
- version 17.35.15 (35)</changelog>
  <changelog author="ma@suse.de" date="1734523200">- Url: queryparams without value should not have a trailing "=".
- version 17.35.16 (35)</changelog>
  <changelog author="ma@suse.de" date="1737374400">- Move cmake config files to LIB_INSTALL_DIR/cmake/Zypp (fixes #28)
- Fix 'zypper ps' when running in incus container (bsc#1229106)
  Should apply to lxc and lxd containers as well.
- Re-enable 'rpm --runposttrans' usage for chrooted systems
  (bsc#1216091)
- version 17.35.17 (35)</changelog>
  <changelog author="ma@suse.de" date="1737374401">- Fix missing UID checks in repomanager workflow (fixes #603)
- version 17.35.18 (35)</changelog>
  <changelog author="ma@suse.de" date="1737547200">- Create '.keep_packages' in the package cache dir to enforce
  keeping downloaded packages of all repos cahed there (bsc#1232458)
- version 17.35.19 (35)</changelog>
  <changelog author="ma@suse.de" date="1739188800">- Drop zypp-CheckAccessDeleted in favor of 'zypper ps'.
- Fix Repoverification plugin not being executed (fixes #614)
- Refresh: Fetch the master index file before key and signature
  (bsc#1236820)
- Allow libzypp to compile with C++20.
- Deprecate RepoReports we do not trigger.
- version 17.36.0 (35)</changelog>
  <changelog author="ma@suse.de" date="1739361600">- Don't issue deprecated warnings if -DNDEBUG is set (bsc#1236983)
  Released libyui packages compile with -Werror=deprecated-declarations
  so we can't add deprecated warnings without breaking them.
- make gcc15 happy (fixes #613)
- version 17.36.1 (35)</changelog>
  <changelog author="ma@suse.de" date="1740139200">- Filesystem usrmerge must not be done in singletrans mode
  (bsc#1236481, bsc#1189788)
  Commit will amend the backend in case the transaction would
  perform a filesystem usrmerge.
- Workaround bsc#1216091 on Code16.
- version 17.36.2 (35)</changelog>
  <changelog author="ma@suse.de" date="1740657600">- Disable zypp.conf:download.use_deltarpm by default (fixes #620)
  Measurements show that you don't benefit from using deltarpms
  unless your network connection is very slow. That's why most
  distributions even stop offering deltarpms. The default remains
  unchanged on SUSE-15.6 and older.
- Make sure repo variables are evaluated in the right context
  (bsc#1237044)
- Introducing MediaCurl2 a alternative HTTP backend.
  This patch adds MediaCurl2 as a testbed for experimenting with a
  more simple way to download files. Set ZYPP_CURL2=1 in the
  environment to use it.
- version 17.36.3 (35)</changelog>
  <changelog author="ma@suse.de" date="1740744000">- Add a transaction package preloader (fixes openSUSE/zypper#104)
  This patch adds a preloader that concurrently downloads files
  during a transaction commit. It's not yet enabled per default.
  To enable the preview set ZYPP_CURL2=1 and ZYPP_PCK_PRELOAD=1
  in the environment.
- RpmPkgSigCheck_test: Exchange the test package signingkey
  (fixes #622)
- Exclude MediaCurl tests if DISABLE_MEDIABACKEND_TESTS (fixes #626)
- Strip a mediahandler tag from baseUrl querystrings.
- version 17.36.4 (35)</changelog>
  <changelog author="ma@suse.de" date="1742212800">- Fix computation of RepStatus if Repo URLs change.
- Fix lost double slash when appending to an absolute FTP url
  (bsc#1238315)
  Ftp actually differs between absolute and relative URL paths.
  Absolute path names begin with a double slash encoded as '/%2F'.
  This must be preserved when manipulating the path.
- version 17.36.5 (35)</changelog>
  <changelog author="ma@suse.de" date="1743681600">- Drop workaround for broken rpm-4.18 in Code16 (bsc#1237172)
- BuildRequires:  %{libsolv_devel_package} &gt;= 0.7.32.
  Code16 moved static libs to libsolv-devel-static.
- Drop usage of SHA1 hash algorithm because it will become
  unavailable in FIPS mode (bsc#1240529)
- Fix zypp.conf dupAllowVendorChange to reflect the correct
  default (false).
  The default was true in Code12 (libzypp-16.x) and changed to
  false with Code15 (libzypp-17.x). Unfortunately this was done by
  shipping a modified zypp.conf file rather than fixing the code.
- zypp.conf: Add `lock_timeout` ($ZYPP_LOCK_TIMEOUT) (bsc#1239809)
- version 17.36.6 (35)</changelog>
  <changelog author="ma@suse.de" date="1746014400">- fixed build with boost 1.88.
- XmlReader: Fix detection of bad input streams (fixes #635)
  libxml2 2.14 potentially reads the complete stream, so it may
  have the 'eof' bit set. Which is not 'good' but also not 'bad'.
- rpm: Fix detection of %triggerscript starts (bsc#1222044)
- RepoindexFileReader: add more &lt;repo&gt; related attributes a
  service may set.
  Add optional attributes gpgcheck, repo_gpgcheck, pkg_gpgcheck,
  keeppackages, gpgkey, mirrorlist, and metalink with the same
  semantic as in a .repo file.
- version 17.36.7 (35)</changelog>
  <changelog author="ma@suse.de" date="1747915200">- Code16: Enable curl2 backend and parallel package download by
  default. In Code15 it's optional.
  Environment variables ZYPP_CURL2=&lt;0|1&gt; and ZYPP_PCK_PRELOAD=&lt;0|1&gt;
  can be used to turn the features on or off.
- Make gpgKeyUrl the default source for gpg keys.
  When refreshing zypp now primarily uses gpgKeyUrl information
  from the repo files and only falls back to a automatically
  generated key Url if a gpgKeyUrl was not specified.
- Introduce mirrors into the Media backends (bsc#1240132)
- Drop MediaMultiCurl backend.
- Throttle progress updates when preloading packages (bsc#1239543)
- Check if request is in valid state in CURL callbacks (fixes
  openSUSE/zypper#605)
- spec/CMake: add conditional build
  '--with[out] classic_rpmtrans_as_default'.
  classic_rpmtrans is the current builtin default for SUSE,
  otherwise it's single_rpmtrans.
  The `enable_preview_single_rpmtrans_as_default_for_zypper` switch
  was removed from the spec file.  Accordingly the CMake option
  ENABLE_PREVIEW_SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER was removed.
- version 17.37.0 (35)</changelog>
  <changelog author="ma@suse.de" date="1748001600">- Use a cookie file to validate mirrorlist cache.
  This patch extends the mirrorlist code to use a cookie file to
  validate the contents of the cache against the source URL, making
  sure that we do not accidentially use a old cache when the
  mirrorlist url was changed. For example when migrating a system
  from one release to the next where the same repo alias might just
  have a different URL.
- Let Service define and update gpgkey, mirrorlist and metalink.
- Preserve a mirrorlist file in the raw cache during refresh.
- version 17.37.1 (35)</changelog>
  <changelog author="ma@suse.de" date="1748347200">- Add a note to service maintained .repo file entries (fixes #638)
- Support using %{url} variable in a RIS service's repo section.
- version 17.37.2 (35)</changelog>
  <changelog author="ma@suse.de" date="1748865600">- Do not warn about no mirrors if mirrorlist was switched on
  automatically. (bsc#1243901)
- Relax permission of cached packages to 0644 &amp; ~umask
  (bsc#1243887)
- version 17.37.3 (35)</changelog>
  <changelog author="ma@suse.de" date="1749038400">- RepoInfo: use pathNameSetTrailingSlash (fixes #643)
- Fix wrong userdata parameter type when running zypp with debug
  verbosity (bsc#1239012)
- version 17.37.4 (35)</changelog>
  <changelog author="ma@suse.de" date="1749211200">- Fix credential handling in HEAD requests (bsc#1244105)
- version 17.37.5 (35)</changelog>
</package>
<package pkgid="9c0a17c968a65cfaedc4a652243566e80384f8ac8d8f95d7397433449007e069" name="llvm19" arch="src">
  <version epoch="0" ver="19.1.7" rel="150700.3.3.1"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="martin.liska@hey.com" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="msuchanek@suse.de" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="schwab@suse.de" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="ro@suse.de" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="24c10ab4cd921643d2ad42996e4ea54f20f714834b6085580ff6124f5a4be861" name="llvm19" arch="src">
  <version epoch="0" ver="19.1.7" rel="150700.3.6.1"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1715083200">- Update to version 18.1.5.
  * This release contains bug-fixes for the LLVM 18.1.0 release.
    This release is API and ABI compatible with 18.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1716292800">- Update to version 18.1.6.
  * Fixes issues where LLVM is either generating the incorrect thunk
    for a function with aligned parameters or didn't correctly pass
    through the return value when StructRet was used.
  * `-Xclang -target-feature -Xclang +unaligned-scalar-mem` can be
    used to enable unaligned scalar memory accesses for CPUs that
    do not support unaligned vector accesses. `-mno-strict-align`
    will enable unaligned scalar and vector memory accesses.
  * Don't replace an aliasee with an alias that has weak linkage.
    This avoids incorrect linkage that can lead to using the wrong
    symbols during linking time.
  * Fixes build failures when compiling AVX512 code using
    `-march=native` on machines without AVX512. The problem was
    introduced in LLVM 18.1.5.
  * Fixes crash in AArch64 backend when having `true` or `false` as
    operand for `fcmp` instruction on IR level.
  * Fixes compiler crash when user specifies `-mno-evex512` with
    AVX512 features but no AVX512VL.
  * Fixes a bug that tries to do VBROADCAST_LOAD for `f16` without
    AVX2.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1719748800">- Update to version 18.1.8.
  * Fix a regression from the 18.1.6 release, which could result in
    compiler crashes in the PPCMergeStringPool pass when compiling
    for PowerPC targets.
  * Fixes clang-format regressions (since 18.1.1) on breaking
    before a stream insertion operator (&lt;&lt;) when both operands are
    string literals.
  * Fixes a clang-format regression (since 17.0.6) on formatting
    goto labels in macro definitions.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1724155200">- Add minor version to Python shebangs. (boo#1212476)
- Remove shebang and executable bit where not needed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1724414400">- Split off clang shared runtime libraries into libclang_rtX, so
  that they can be used by other packages without requiring the
  entire compiler tool chain. This is still not ergonomical: the
  libraries don't sit in %{_libdir}, so an RPATH or setting
  LD_LIBRARY_PATH is required, and they don't have an SO version,
  so zypper won't know which version to is needed. (boo#1225784)</changelog>
  <changelog author="martin.liska@hey.com" date="1725364800">- Enable zstd compression support again.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1727006400">- Update to version 19.1.0.
  * For details, see the release notes:
  - https://releases.llvm.org/19.1.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/19.1.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tool: reduce-chunk-list to help find bugs using debug
    counters. See the Programmer's Manual for usage.
  * New Clang tools: clang-installapi for Apple-related package
    management, clang-nvlink-wrapper as a wrapper around `nvlink`.
- No longer include OpenMP offload libraries.
- Rebase patches:
  * clang-fix-openmp-test.patch
  * libcxx-test-library-path.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm_build_tablegen_component_as_shared_library.patch
- Remove obsolete patches:
  * lld-default-sha1.patch because upstream switched to sha1.
  * llvm-remove-clang-only-flags.patch because warning flags are no
    longer autodetected.
  * openmp-dont-run-gpu-arch.patch because we're excluding the
    offload project for now.
- Add llvm-fix-build-failure-on-ppc64le.patch to fix ppc64le build.
- Require Python 3.11 on Leap because we need Python &gt;= 3.8 now.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1727870400">- Update to version 19.1.1.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1729771200">- Update to version 19.1.2.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1730203200">- Update llvm19.keyring from upstream.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1730548800">- Update to version 19.1.3.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase patches:
  * llvm-do-not-install-static-libraries.patch
  * llvm-suse-implicit-gnu.patch
- Patch llvm-fix-build-failure-on-ppc64le.patch landed upstream.</changelog>
  <changelog author="msuchanek@suse.de" date="1730894400">- Enable lldb on s390x and ppc64le (bsc#1232906).</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1731844800">- Apply clang-shlib-symbol-versioning.patch to add symbol versions
  to libclang-cpp.so similar to libLLVM.so. This is required when
  multiple versions of the library are loaded into the same
  process. (boo#1219405, boo#1221183, boo#1233220)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1732017600">- Update to version 19.1.4.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1733486400">- Update to version 19.1.5.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1734609600">- Update to version 19.1.6.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1737028800">- Update to version 19.1.7.
  * This release contains bug-fixes for the LLVM 19.1.0 release.
    This release is API and ABI compatible with 19.1.0.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1740139200">- Build with GCC 13 on Leap/SLES 15 (bsc#1235697)</changelog>
  <changelog author="schwab@suse.de" date="1742299200">- Enable build of libc++ and openmp for riscv64</changelog>
  <changelog author="ro@suse.de" date="1747137600">- Enable build of libc++ for ppc64le</changelog>
</package>
<package pkgid="3312e80804f3e054c1e5010804a3bb4dd8b8c9f6bb5951de7a9efa8de307ad84" name="lmdb" arch="src">
  <version epoch="0" ver="0.9.30" rel="150500.3.2.1"/>
  <changelog author="ro@suse.de" date="1391688000">- at least set an soname, a version would be even better</changelog>
  <changelog author="kkaempf@suse.com" date="1392206400">- Switch to cmake, fix dynamic lib build and versioning.
  Drop liblmdb.patch
  Add VERSION.cmake and CMakeLists.txt</changelog>
  <changelog author="jengelh@inai.de" date="1400241600">- Replace verbose cmake script (remove CMakeLists.txt).
- Instead, use a simpler automake patch (add automake.diff).
- There is a change in shared library versioning scheme to line up
  with our packaging guidelines. This is embodied within
  automake.diff.
- Shorten the description by 2/3, focus on the important points.
- Do not unnecessarily pull in a C++ compiler for the build.
- Invoke ldconfig directly as %post rather than sh+ldconfig.</changelog>
  <changelog author="kkaempf@suse.com" date="1406548800">- Prevent deadlock when process holding the db lock dies
  0001-Patch-for-LMDB-to-use-robust-mutexes.patch
- command line tools for debugging
  0002-Add-extra-tools-and-CFEngine-modifications-for-LMDB.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1410350400">- automake.diff changes:
  * for autoconf tests to have effect, (like those in
  0001-Patch-for-LMDB-to-use-robust-mutexes.patch) config.h must be
  included as first file in all C code.
  * in 32 bit systems, ensure we support large databases.
  * Switch the compiler to the current C standard, currently -std=gnu99
  in upcoming autoconf versions it is C11 though.
- liblmdb-implicit-decl.patch atol() requires stdlib.h
- Enable verbose build, rpmlint depends on that to work.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1427803200">- Update to 0.9.14:
  * Fix to support 64K page size (ITS#7713)
  * Fix to persist decreased as well as increased mapsizes (ITS#7789)
  * Fix cursor bug when deleting last node of a DUPSORT key
  * Fix mdb_env_info to return FIXEDMAP address
  * Fix ambiguous error code from writing to closed DBI (ITS#7825)
  * Fix mdb_copy copying past end of file (ITS#7886)
  * Fix cursor bugs from page_merge/rebalance
  * Fix to dirty fewer pages in deletes (mdb_page_loose())
  * Fix mdb_dbi_open creating subDBs (ITS#7917)
  * Fix mdb_cursor_get(_DUP) with single value (ITS#7913)
  * Fix Windows compat issues in mtests (ITS#7879)
  * Add compacting variant of mdb_copy
  * Add BigEndian integer key compare code
  * Add mdb_dump/mdb_load utilities
  - Changes since 0.9.13:
  * Fix mdb_page_alloc unlimited overflow page search
  * Documentation:
  Re-fix MDB_CURRENT doc (ITS#7793)
  Fix MDB_GET_MULTIPLE/MDB_NEXT_MULTIPLE doc
  - Changes since 0.9.12:
  * Fix MDB_GET_BOTH regression (ITS#7875,#7681)
  * Fix MDB_MULTIPLE writing multiple keys (ITS#7834)
  * Fix mdb_rebalance (ITS#7829)
  * Fix mdb_page_split (ITS#7815)
  * Fix md_entries count (ITS#7861,#7828,#7793)
  * Fix MDB_CURRENT (ITS#7793)
  * Fix possible crash on Windows DLL detach
  * Misc code cleanup
  * Documentation:
  mdb_cursor_put: cursor moves on error (ITS#7771)
- Rebase automake.diff and 0001-Patch-for-LMDB-to-use-robust-mutexes.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1442577600">- Add baselibs.conf: liblmdb*-32bit is required by
  libKF5Baloo5-32bit.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1445688000">- Update to 0.9.16:
  * Fix cursor EOF bug (ITS#8190)
  * Fix handling of subDB records (ITS#8181)
  * Fix mdb_midl_shrink() usage (ITS#8200)
  - Changes since 0.9.15:
  * Fix txn init (ITS#7961,#7987)
  * Fix MDB_PREV_DUP (ITS#7955,#7671)
  * Fix compact of empty env (ITS#7956)
  * Fix mdb_copy file mode
  * Fix mdb_env_close() after failed mdb_env_open()
  * Fix mdb_rebalance collapsing root (ITS#8062)
  * Fix mdb_load with large values (ITS#8066)
  * Fix to retry writes on EINTR (ITS#8106)
  * Fix mdb_cursor_del on empty DB (ITS#8109)
  * Fix MDB_INTEGERDUP key compare (ITS#8117)
  * Fix error handling (ITS#7959,#8157,etc.)
  * Fix race conditions (ITS#7969,7970)
  * Added workaround for fdatasync bug in ext3fs
  * Build:
  * Don't use -fPIC for static lib
  * Update .gitignore (ITS#7952,#7953)
  * Cleanup for "make test" (ITS#7841), "make clean", mtest*.c
  * Misc. Android/Windows cleanup
  * Documentation
  * Fix MDB_APPEND doc
  * Fix MDB_MAXKEYSIZE doc (ITS#8156)
  * Fix mdb_cursor_put,mdb_cursor_del EACCES description
  * Fix mdb_env_sync(MDB_RDONLY env) doc (ITS#8021)
  * Clarify MDB_WRITEMAP doc (ITS#8021)
  * Clarify mdb_env_open doc
  * Clarify mdb_dbi_open doc</changelog>
  <changelog author="jengelh@inai.de" date="1447588800">- Use a source URL</changelog>
  <changelog author="kkaempf@suse.com" date="1454328000">- Renamed patches
  0002-Add-extra-tools-and-CFEngine-modifications-for-LMDB.patch
  - &gt; 0001-Add-extra-tools-and-CFEngine-modifications-for-LMDB.patch
  automake.diff
  - &gt; 0002-Autoconf-files.patch
  0003-Optimization-Define-correct-cacheline-size-on-HPUX.patch
- Dropped patch (upstream)
  0001-Patch-for-LMDB-to-use-robust-mutexes.patch
- Update to 0.9.17
  Fix ITS#7377 catch calloc failure
  Fix ITS#8237 regression from ITS#7589
  Fix ITS#8238 page_split for DUPFIXED pages
  Fix ITS#8221 MDB_PAGE_FULL on delete/rebalance
  Fix ITS#8258 rebalance/split assert
  Fix ITS#8263 cursor_put cursor tracking
  Fix ITS#8264 cursor_del cursor tracking
  Fix ITS#8310 cursor_del cursor tracking
  Fix ITS#8299 mdb_del cursor tracking
  Fix ITS#8300 mdb_del cursor tracking
  Fix ITS#8304 mdb_del cursor tracking
  Fix ITS#7771 fakepage cursor tracking
  Fix ITS#7789 ensure mapsize &gt;= pages in use
  Fix ITS#7971 mdb_txn_renew0() new reader slots
  Fix ITS#7969 use __sync_synchronize on non-x86
  Fix ITS#8311 page_split from update_key
  Fix ITS#8312 loose pages in nested txn
  Fix ITS#8313 mdb_rebalance dummy cursor
  Fix ITS#8315 dirty_room in nested txn
  Fix ITS#8323 dirty_list in nested txn
  Fix ITS#8316 page_merge cursor tracking
  Fix ITS#8321 cursor tracking
  Fix ITS#8319 mdb_load error messages
  Fix ITS#8320 mdb_load plaintext input
  Added mdb_txn_id() (ITS#7994)
  Added robust mutex support
  Miscellaneous cleanup/simplification
  Build
    Create install dirs if needed (ITS#8256)
    Fix ThreadProc decl on Win32/MSVC (ITS#8270)
    Added ssize_t typedef for MSVC (ITS#8067)
    Use ANSI apis on Windows (ITS#8069)
    Use O_SYNC if O_DSYNC,MDB_DSYNC are not defined (ITS#7209)
    Allow passing AR to make (ITS#8168)
    Allow passing mandir to make install (ITS#8169)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1466337600">- Update 0001-Add-extra-tools-and-CFEngine-modifications-for-LMDB.patch
  * do not force enable NOSUBDIR option in mdb_copy
- Update 0002-Autoconf-files.patch
  * build mdb_dump, mdb_load
  * distribute manpages</changelog>
  <changelog author="dmueller@suse.com" date="1507896000">- add soname-configurable.patch: Actually set the soname in the
  shared library rather than just renaming the files on disk post
  install (which does not actually do anything)</changelog>
  <changelog author="varkoly@suse.com" date="1562760000">- Fix occasional crash when freed pages landed on the dirty list twice
  (bnc#1136132).
  * Add 0001-ITS-8756-remove-loose-pg-from-dirty-list-in-freelist.patch</changelog>
  <changelog author="scabrero@suse.de" date="1576152000">- Fix assert in mdb_page_search_root (bsc#1159086).
  * Add 0001-ITS-8336-fix-page_search_root-assert-on-FreeDB.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1584792000">- LMDB 0.9.24 Release (2019/07/24)
  * ITS#8969 Tweak mdb_page_split
  * ITS#8975 WIN32 fix writemap set_mapsize crash
  * ITS#9007 Fix loose pages in WRITEMAP
- LMDB 0.9.23 Release (2018/12/19)
  * ITS#8756 Fix loose pages in dirty list
  * ITS#8831 Fix mdb_load flag init
  * ITS#8844 Fix mdb_env_close in forked process
  * Documentation
    + ITS#8857 mdb_cursor_del doesn't invalidate cursor
    + ITS#8908 GET_MULTIPLE etc don't change passed in key
- Drop upstream 0001-ITS-8756-remove-loose-pg-from-dirty-list-in-freelist.patch
- Drop upstream 0001-ITS-8336-fix-page_search_root-assert-on-FreeDB.patch
- Cleanup:
  * Use %license, drop %defattr
  * Use https for Url tag
- LMDB 0.9.22 Release (2018-03-22)
  * Fix MDB_DUPSORT alignment bug (ITS#8819)
  * Fix regression with new db from 0.9.19 (ITS#8760)
  * Fix liblmdb to build on Solaris (ITS#8612)
  * Fix delete behavior with DUPSORT DB (ITS#8622)
  * Fix mdb_cursor_get/mdb_cursor_del behavior (ITS#8722)
- LMDB 0.9.21 Release (2017/06/01)
  * Fix xcursor after cursor_del (ITS#8622)
- LMDB 0.9.20 (Withdrawn)
  * Fix mdb_load with escaped plaintext (ITS#8558)
  * Fix mdb_cursor_last / mdb_put interaction (ITS#8557)
- LMDB 0.9.19 Release (2016/12/28)
  * Fix mdb_env_cwalk cursor init (ITS#8424)
  * Fix robust mutexes on Solaris 10/11 (ITS#8339)
  * Tweak Win32 error message buffer
  * Fix MDB_GET_BOTH on non-dup record (ITS#8393)
  * Optimize mdb_drop
  * Fix xcursors after mdb_cursor_del (ITS#8406)
  * Fix MDB_NEXT_DUP after mdb_cursor_del (ITS#8412)
  * Fix mdb_cursor_put resetting C_EOF (ITS#8489)
  * Fix mdb_env_copyfd2 to return EPIPE on SIGPIPE (ITS#8504)
  * Fix mdb_env_copy with empty DB (ITS#8209)
  * Fix behaviors with fork (ITS#8505)
    LMDB leaks database FD into child processes (bsc#1178706)
  * Fix mdb_dbi_open with mainDB cursors (ITS#8542)
  * Fix robust mutexes on kFreeBSD (ITS#8554)
  * Fix utf8_to_utf16 error checks (ITS#7992)
  * Fix F_NOCACHE on MacOS, error is non-fatal (ITS#7682)
  * Build
    Make shared lib suffix overridable (ITS#8481)
  * Documentation
    + Cleanup doxygen nits
    + Note reserved vs actual mem/disk usage
- LMDB 0.9.18 Release (2016/02/05)
  * Fix robust mutex detection on glibc 2.10-11 (ITS#8330)
  * Fix page_search_root assert on FreeDB (ITS#8336)
  * Fix MDB_APPENDDUP vs. rewrite(single item) (ITS#8334)
  * Fix mdb_copy of large files on Windows
  * Fix subcursor move after delete (ITS#8355)
  * Fix mdb_midl_shirnk off-by-one (ITS#8363)
  * Check for utf8_to_utf16 failures (ITS#7992)
  * Catch strdup failure in mdb_dbi_open
  * Build
    + Additional makefile var tweaks (ITS#8169)
  * Documentation
    + Add Getting Started page
    + Update WRITEMAP description
- Drop 0002-Autoconf-files.patch, soname-configurable.patch and
  add Makefile-build-use-shared-lib.patch instead. Instead of
  replacing the Makefile with a libtool/automake based one, just
  patch the relevant parts of the upstream Makefile.</changelog>
  <changelog author="mrueckert@suse.de" date="1584792001">- copy the pkg config support from the fedora package</changelog>
  <changelog author="jgwang@suse.com" date="1614772800">- LMDB 0.9.28 Release (2021/02/04)
  * ITS#8662 add -a append option to mdb_load
- LMDB 0.9.27 Release (2020/10/26)
  * ITS#9376 fix repeated DUPSORT cursor deletes
- LMDB 0.9.26 Release (2020/08/11)
  * ITS#9278 fix robust mutex cleanup for FreeBSD
- LMDB 0.9.25 Release (2020/01/30)
  * ITS#9068 fix mdb_dump/load backslashes in printable content
  * ITS#9118 add MAP_NOSYNC for FreeBSD
  * ITS#9155 free mt_spill_pgs in non-nested txn on end</changelog>
  <changelog author="dmueller@suse.com" date="1616155200">- update to 0.9.29:
  * ITS#9461 refix ITS#9376
  * ITS#9500 fix regression from ITS#8662</changelog>
  <changelog author="alx.kuzza@gmail.com" date="1674475200">- update to 0.9.29:
  * lmdump is not creating lock files</changelog>
  <changelog author="dmueller@suse.com" date="1679227200">- update to 0.9.30:
  * LMDB page_split: key threshold depends on page
    size
  * avoid gcc optimization bug on sparc64 linux
  * - Mark infrequently used functions as cold
  * clear C_EOF on cursor with MDB_FIRST_DUP
  * Use sys/cachectl.h rather than asm/cachectl.h on
    mips</changelog>
</package>
<package pkgid="930e72be9b1a2c25ac14a7443a4fa8f4e5b72b7c4bb21c52a82713086e893a98" name="lmdb" arch="x86_64">
  <version epoch="0" ver="0.9.30" rel="150500.3.2.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1427803200">- Update to 0.9.14:
  * Fix to support 64K page size (ITS#7713)
  * Fix to persist decreased as well as increased mapsizes (ITS#7789)
  * Fix cursor bug when deleting last node of a DUPSORT key
  * Fix mdb_env_info to return FIXEDMAP address
  * Fix ambiguous error code from writing to closed DBI (ITS#7825)
  * Fix mdb_copy copying past end of file (ITS#7886)
  * Fix cursor bugs from page_merge/rebalance
  * Fix to dirty fewer pages in deletes (mdb_page_loose())
  * Fix mdb_dbi_open creating subDBs (ITS#7917)
  * Fix mdb_cursor_get(_DUP) with single value (ITS#7913)
  * Fix Windows compat issues in mtests (ITS#7879)
  * Add compacting variant of mdb_copy
  * Add BigEndian integer key compare code
  * Add mdb_dump/mdb_load utilities
  - Changes since 0.9.13:
  * Fix mdb_page_alloc unlimited overflow page search
  * Documentation:
  Re-fix MDB_CURRENT doc (ITS#7793)
  Fix MDB_GET_MULTIPLE/MDB_NEXT_MULTIPLE doc
  - Changes since 0.9.12:
  * Fix MDB_GET_BOTH regression (ITS#7875,#7681)
  * Fix MDB_MULTIPLE writing multiple keys (ITS#7834)
  * Fix mdb_rebalance (ITS#7829)
  * Fix mdb_page_split (ITS#7815)
  * Fix md_entries count (ITS#7861,#7828,#7793)
  * Fix MDB_CURRENT (ITS#7793)
  * Fix possible crash on Windows DLL detach
  * Misc code cleanup
  * Documentation:
  mdb_cursor_put: cursor moves on error (ITS#7771)
- Rebase automake.diff and 0001-Patch-for-LMDB-to-use-robust-mutexes.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1442577600">- Add baselibs.conf: liblmdb*-32bit is required by
  libKF5Baloo5-32bit.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1445688000">- Update to 0.9.16:
  * Fix cursor EOF bug (ITS#8190)
  * Fix handling of subDB records (ITS#8181)
  * Fix mdb_midl_shrink() usage (ITS#8200)
  - Changes since 0.9.15:
  * Fix txn init (ITS#7961,#7987)
  * Fix MDB_PREV_DUP (ITS#7955,#7671)
  * Fix compact of empty env (ITS#7956)
  * Fix mdb_copy file mode
  * Fix mdb_env_close() after failed mdb_env_open()
  * Fix mdb_rebalance collapsing root (ITS#8062)
  * Fix mdb_load with large values (ITS#8066)
  * Fix to retry writes on EINTR (ITS#8106)
  * Fix mdb_cursor_del on empty DB (ITS#8109)
  * Fix MDB_INTEGERDUP key compare (ITS#8117)
  * Fix error handling (ITS#7959,#8157,etc.)
  * Fix race conditions (ITS#7969,7970)
  * Added workaround for fdatasync bug in ext3fs
  * Build:
  * Don't use -fPIC for static lib
  * Update .gitignore (ITS#7952,#7953)
  * Cleanup for "make test" (ITS#7841), "make clean", mtest*.c
  * Misc. Android/Windows cleanup
  * Documentation
  * Fix MDB_APPEND doc
  * Fix MDB_MAXKEYSIZE doc (ITS#8156)
  * Fix mdb_cursor_put,mdb_cursor_del EACCES description
  * Fix mdb_env_sync(MDB_RDONLY env) doc (ITS#8021)
  * Clarify MDB_WRITEMAP doc (ITS#8021)
  * Clarify mdb_env_open doc
  * Clarify mdb_dbi_open doc</changelog>
  <changelog author="jengelh@inai.de" date="1447588800">- Use a source URL</changelog>
  <changelog author="kkaempf@suse.com" date="1454328000">- Renamed patches
  0002-Add-extra-tools-and-CFEngine-modifications-for-LMDB.patch
  - &gt; 0001-Add-extra-tools-and-CFEngine-modifications-for-LMDB.patch
  automake.diff
  - &gt; 0002-Autoconf-files.patch
  0003-Optimization-Define-correct-cacheline-size-on-HPUX.patch
- Dropped patch (upstream)
  0001-Patch-for-LMDB-to-use-robust-mutexes.patch
- Update to 0.9.17
  Fix ITS#7377 catch calloc failure
  Fix ITS#8237 regression from ITS#7589
  Fix ITS#8238 page_split for DUPFIXED pages
  Fix ITS#8221 MDB_PAGE_FULL on delete/rebalance
  Fix ITS#8258 rebalance/split assert
  Fix ITS#8263 cursor_put cursor tracking
  Fix ITS#8264 cursor_del cursor tracking
  Fix ITS#8310 cursor_del cursor tracking
  Fix ITS#8299 mdb_del cursor tracking
  Fix ITS#8300 mdb_del cursor tracking
  Fix ITS#8304 mdb_del cursor tracking
  Fix ITS#7771 fakepage cursor tracking
  Fix ITS#7789 ensure mapsize &gt;= pages in use
  Fix ITS#7971 mdb_txn_renew0() new reader slots
  Fix ITS#7969 use __sync_synchronize on non-x86
  Fix ITS#8311 page_split from update_key
  Fix ITS#8312 loose pages in nested txn
  Fix ITS#8313 mdb_rebalance dummy cursor
  Fix ITS#8315 dirty_room in nested txn
  Fix ITS#8323 dirty_list in nested txn
  Fix ITS#8316 page_merge cursor tracking
  Fix ITS#8321 cursor tracking
  Fix ITS#8319 mdb_load error messages
  Fix ITS#8320 mdb_load plaintext input
  Added mdb_txn_id() (ITS#7994)
  Added robust mutex support
  Miscellaneous cleanup/simplification
  Build
    Create install dirs if needed (ITS#8256)
    Fix ThreadProc decl on Win32/MSVC (ITS#8270)
    Added ssize_t typedef for MSVC (ITS#8067)
    Use ANSI apis on Windows (ITS#8069)
    Use O_SYNC if O_DSYNC,MDB_DSYNC are not defined (ITS#7209)
    Allow passing AR to make (ITS#8168)
    Allow passing mandir to make install (ITS#8169)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1466337600">- Update 0001-Add-extra-tools-and-CFEngine-modifications-for-LMDB.patch
  * do not force enable NOSUBDIR option in mdb_copy
- Update 0002-Autoconf-files.patch
  * build mdb_dump, mdb_load
  * distribute manpages</changelog>
  <changelog author="dmueller@suse.com" date="1507896000">- add soname-configurable.patch: Actually set the soname in the
  shared library rather than just renaming the files on disk post
  install (which does not actually do anything)</changelog>
  <changelog author="varkoly@suse.com" date="1562760000">- Fix occasional crash when freed pages landed on the dirty list twice
  (bnc#1136132).
  * Add 0001-ITS-8756-remove-loose-pg-from-dirty-list-in-freelist.patch</changelog>
  <changelog author="scabrero@suse.de" date="1576152000">- Fix assert in mdb_page_search_root (bsc#1159086).
  * Add 0001-ITS-8336-fix-page_search_root-assert-on-FreeDB.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1584792000">- LMDB 0.9.24 Release (2019/07/24)
  * ITS#8969 Tweak mdb_page_split
  * ITS#8975 WIN32 fix writemap set_mapsize crash
  * ITS#9007 Fix loose pages in WRITEMAP
- LMDB 0.9.23 Release (2018/12/19)
  * ITS#8756 Fix loose pages in dirty list
  * ITS#8831 Fix mdb_load flag init
  * ITS#8844 Fix mdb_env_close in forked process
  * Documentation
    + ITS#8857 mdb_cursor_del doesn't invalidate cursor
    + ITS#8908 GET_MULTIPLE etc don't change passed in key
- Drop upstream 0001-ITS-8756-remove-loose-pg-from-dirty-list-in-freelist.patch
- Drop upstream 0001-ITS-8336-fix-page_search_root-assert-on-FreeDB.patch
- Cleanup:
  * Use %license, drop %defattr
  * Use https for Url tag
- LMDB 0.9.22 Release (2018-03-22)
  * Fix MDB_DUPSORT alignment bug (ITS#8819)
  * Fix regression with new db from 0.9.19 (ITS#8760)
  * Fix liblmdb to build on Solaris (ITS#8612)
  * Fix delete behavior with DUPSORT DB (ITS#8622)
  * Fix mdb_cursor_get/mdb_cursor_del behavior (ITS#8722)
- LMDB 0.9.21 Release (2017/06/01)
  * Fix xcursor after cursor_del (ITS#8622)
- LMDB 0.9.20 (Withdrawn)
  * Fix mdb_load with escaped plaintext (ITS#8558)
  * Fix mdb_cursor_last / mdb_put interaction (ITS#8557)
- LMDB 0.9.19 Release (2016/12/28)
  * Fix mdb_env_cwalk cursor init (ITS#8424)
  * Fix robust mutexes on Solaris 10/11 (ITS#8339)
  * Tweak Win32 error message buffer
  * Fix MDB_GET_BOTH on non-dup record (ITS#8393)
  * Optimize mdb_drop
  * Fix xcursors after mdb_cursor_del (ITS#8406)
  * Fix MDB_NEXT_DUP after mdb_cursor_del (ITS#8412)
  * Fix mdb_cursor_put resetting C_EOF (ITS#8489)
  * Fix mdb_env_copyfd2 to return EPIPE on SIGPIPE (ITS#8504)
  * Fix mdb_env_copy with empty DB (ITS#8209)
  * Fix behaviors with fork (ITS#8505)
    LMDB leaks database FD into child processes (bsc#1178706)
  * Fix mdb_dbi_open with mainDB cursors (ITS#8542)
  * Fix robust mutexes on kFreeBSD (ITS#8554)
  * Fix utf8_to_utf16 error checks (ITS#7992)
  * Fix F_NOCACHE on MacOS, error is non-fatal (ITS#7682)
  * Build
    Make shared lib suffix overridable (ITS#8481)
  * Documentation
    + Cleanup doxygen nits
    + Note reserved vs actual mem/disk usage
- LMDB 0.9.18 Release (2016/02/05)
  * Fix robust mutex detection on glibc 2.10-11 (ITS#8330)
  * Fix page_search_root assert on FreeDB (ITS#8336)
  * Fix MDB_APPENDDUP vs. rewrite(single item) (ITS#8334)
  * Fix mdb_copy of large files on Windows
  * Fix subcursor move after delete (ITS#8355)
  * Fix mdb_midl_shirnk off-by-one (ITS#8363)
  * Check for utf8_to_utf16 failures (ITS#7992)
  * Catch strdup failure in mdb_dbi_open
  * Build
    + Additional makefile var tweaks (ITS#8169)
  * Documentation
    + Add Getting Started page
    + Update WRITEMAP description
- Drop 0002-Autoconf-files.patch, soname-configurable.patch and
  add Makefile-build-use-shared-lib.patch instead. Instead of
  replacing the Makefile with a libtool/automake based one, just
  patch the relevant parts of the upstream Makefile.</changelog>
  <changelog author="mrueckert@suse.de" date="1584792001">- copy the pkg config support from the fedora package</changelog>
  <changelog author="jgwang@suse.com" date="1614772800">- LMDB 0.9.28 Release (2021/02/04)
  * ITS#8662 add -a append option to mdb_load
- LMDB 0.9.27 Release (2020/10/26)
  * ITS#9376 fix repeated DUPSORT cursor deletes
- LMDB 0.9.26 Release (2020/08/11)
  * ITS#9278 fix robust mutex cleanup for FreeBSD
- LMDB 0.9.25 Release (2020/01/30)
  * ITS#9068 fix mdb_dump/load backslashes in printable content
  * ITS#9118 add MAP_NOSYNC for FreeBSD
  * ITS#9155 free mt_spill_pgs in non-nested txn on end</changelog>
  <changelog author="dmueller@suse.com" date="1616155200">- update to 0.9.29:
  * ITS#9461 refix ITS#9376
  * ITS#9500 fix regression from ITS#8662</changelog>
  <changelog author="alx.kuzza@gmail.com" date="1674475200">- update to 0.9.29:
  * lmdump is not creating lock files</changelog>
  <changelog author="dmueller@suse.com" date="1679227200">- update to 0.9.30:
  * LMDB page_split: key threshold depends on page
    size
  * avoid gcc optimization bug on sparc64 linux
  * - Mark infrequently used functions as cold
  * clear C_EOF on cursor with MDB_FIRST_DUP
  * Use sys/cachectl.h rather than asm/cachectl.h on
    mips</changelog>
</package>
<package pkgid="53059d9169c34488cc1b69454429e9f0db8cfdf546053d5ed190e67d11bd4be7" name="log4j" arch="noarch">
  <version epoch="0" ver="2.20.0" rel="150200.4.30.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1579608000">- Update to 2.13.0 [bsc#1159646, CVE-2019-17571]
  * Bugfixes and minor enhancements:
  - CVE-2019-17571: Remote code execution: Deserialization of untrusted
    data in SocketServer
  - Log4j 2 now requires Java 8 or higher to build and run.
  - Better integration with Spring Boot by providing access to Spring
    variables in Log4j 2 configuration files and allowing Log4j 2 system
    properties to be defined in the Spring configuration.
  - Support for accessing Kubernetes information via a Log4j 2 Lookup.
  - The Gelf Layout now allows the message to be formatted using a
    PatternLayout pattern.
  - Due to a break in compatibility in the SLF4J binding, Log4j now
    ships with two versions of the SLF4J to Log4j adapters.
  - log4j-slf4j-impl should be used with SLF4J 1.7.x and earlier and
    log4j-slf4j18-impl should be used with SLF4J 1.8.x and later.
  - Note that the XML, JSON and YAML formats changed in the 2.11.0 release:
    they no longer have the "timeMillis" attribute and instead have an
    "Instant" element with "epochSecond" and "nanoOfSecond" attributes.
  - The Log4j 2.13.0 API, as well as many core components, maintains
    binary compatibility with previous releases.
  * New Features
  - Add ThreadContext.putIfNotNull method.
  - Add a Level Patttern Selector.
  - Add experimental support for Log4j 1 configuration files.
  - Add the ability to lookup Kubernetes attributes in the Log4j
    configuration. Allow Log4j properties to be retrieved from the
    Spring environment if it is available.
  - Allow Spring Boot application properties to be accessed in the
    Log4j 2 configuration. Add lower and upper case Lookups.
  - Add builder pattern to Logger interface.
  * Fixed Bugs
  - Prevent recursive calls to java.util.LogManager.getLogger().
  - Added try/finally around event.execute() for RingBufferLogEventHandler
    to clear memory correctly in case of exception/error.
  - Wrong java version check in ThreadNameCachingStrategy.
  - Use a less confusing name for the CompositeConfiguration source.
  - Add setKey method to Kafka Appender Builder.
  - ArrayIndexOutOfBoundsException could occur with MAC address longer
    than 6 bytes.
  - The rolling file appenders would fail to compress the file after
    rollover if the file name matched the file pattern.
  - @PluginValue does not support attribute names besides "value".
  - Validation blocks definition of script in properties configuration.
  - Set result of rename action to true if file was copied.
  - Add automatic module names where missing.
  - OutputStreamAppender.Builder ignores setFilter().
  - Prevent a memory leak when async loggers throw errors.
  * Changes
  - Update Jackson to 2.9.10.
  - Allow message portion of GELF layout to be formatted using a PatternLayout.
  - Allow ThreadContext attributes to be explicitly included or excluded in the GelfLayout.</changelog>
  <changelog author="fstrba@suse.com" date="1582718400">- Added patches:
  * logging-log4j-LOG4J2-2745-LOG4J2-2744-slf4j.patch
  * logging-log4j-Remove-unsupported-EventDataConverter.patch
    + fix build with newer slf4j</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1587988800">- Security fix: [bsc#1170535, CVE-2020-9488]
  * Improper validation of certificate with host mismatch in SMTP appender.
- Add log4j-CVE-2020-9488.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1587988801">- Update to 2.13.2 [bsc#1170535, CVE-2020-9488]
  * Bugfixes and minor enhancements:
  - CVE-2020-9488: Improper validation of certificate with host mismatch
    in Apache Log4j SMTP appender.
  - Implement requiresLocation in GelfLayout to reflect whether location
    information is used in the message Pattern.
  - Add option to restore printing timeMillis in the JsonLayout.
  - Initialize pattern processor before triggering policy during reconfiguration.
  - Add information about using a url in log4j.configurationFile.
  - serializeToBytes was checking wrong variable for null.
  - Fix Javadoc for ScriptPatternSelector.
  - Allow trailing and leading spaces in log level.
  - Correct JsonLayout timestamp sorting issue.
  - Allow the file size action to parse the value without being sensitive
    to the current locale.
  - Make YamlLayoutTest more resiliant to environmental differences.
  - Conditionally allocate PluginEntry during PluginCache loading.
  - Add missing includeLocation parameter when creating AsyncLogger.
  - Fix Exceptions when whitespace is in the file path and Java security
    manager is used.
  - Avoid NullPointerException when StackWalker returns null.
  - TimeFilter did not handle daylight saving time transitions and did
    not support a range over 2 days.
  - Provide a Log4j implementation of System.Logger.
  - Added EventLookup to retrieve fields from the log event.
  * Changes:
  - Allow the file extension in the file pattern to be modified during reconfiguration.
  - Add support for specifying an SSL configuration for SmtpAppender.
  - Allow servlet context path to be retrieved without "/".
  - Allow Spring Lookup to return default and active profiles.
  - Allow Spring Boot applications to use composite configuratons.
  - Add ContextDataProviders as an alternative to having to implement a ContextDataInjector.
  - [JDBC] Throw a AppenderLoggingException instead of an NPE in the JDBC database manager.
- Update to 2.13.1
  - Prevent LoggerContext from being garbage collected while being created.
  - Do not log an error if Files.move does not work.
  - Rollover fails when file matches pattern but index is too large.
  - Counter stuck at 10 and overwriting files when leading zeros used in the file pattern count.
  - ClassLoaderContextSelector was not locating the LoggerContext during shutdown.
  - JSON output wrong when using additonal fields.
  - GraalVM does not allow use of MethodHandles.
  - Allow Lookup keys with leading dashes by using a slash as an escape character.
  - ServletContainerInitializer was obtaining the StatusLogger too soon.
  - PluginProcessor should use Messager instead of System.out.
  - MapMessage.getFormattedMesssage() would incorrectly format objects.
  - Always write header on a new OutputStream.
  - An error message in RollingFileAppender uses a placeholder for the name but does not
    specify the name argument in the logging call.
  - NullPointerException when using a custom DirectFileRolloverStrategy without a file name.
  - Add mulit-parameter overloads to LogBuilder.
  - Fixed NullPointerException after reconfiguring via JMX.
  - RollingFileAppender was not rolling on startup if createOnDemand was set to true.
  - Warn if pattern is missing on Routes element. Use default route.
  - Fix lock contention in the classloader using new versions of slf4j without EventData
    on slf4j logger creation.
  - Rollover handles parallel file deletion gracefully.
  - Remove unnecessary EventLogger references from log4j-slf4j18-impl due to removal from slf4j.
  - Fix a memory leak using fully asynchronous logging when the queue is full using the 'discard'
    asynchronous queue full strategy.
  - Fix erroneous log4j-jul recursive logger detection resulting in some no-op JUL loggers and
    'WARN Recursive call to getLogger' being reported by the status logger.
  - PluginCache output is reproducible allowing the annotation processor to produce
    deterministic results.
  - Fix StackLocator.getCallerClass performance in cases where Reflection.getCallerClass
    is not accessible.
  - MutableLogEvent and RingBufferLogEvent avoid StringBuffer and parameter array allocation
    unless reusable messages are used.
  - LoaderUtil.getClassLoaders may discover additional loaders and no longer erroneously returns
    a result with a null element in some environments.
  - CronExpression.getBeforeTime() would sometimes return incorrect result.
  - [JDBC] MS-SQL Server JDBC driver throws SQLServerException when inserting a null value
    for a VARBINARY column.
  - NullPointerException after reconfiguring via JMX.
  - Implement ISO8601_PERIOD_MICROS fixed date format matching ISO8601_PERIOD with support
    for microsecond precision.
  * Changes:
  - Conditionally perform status logging calculations in PluginRegistry.
  - Use LinkedBlockingQueue instead of synchronized collction in StatusConfiguration.
  - Add a retry count attribute to the KafkaAppender.
  - Update log4j-slf4j18-impl slf4j version to 1.8.0-beta4 from 1.8.0-alpha2.
  - Update dependencies.
- Remove patch fixed upstream:
  * logging-log4j-LOG4J2-2745-LOG4J2-2744-slf4j.patch
  * log4j-CVE-2020-9488.patch
- Refresh patch:
  * logging-log4j-Remove-unsupported-EventDataConverter.patch</changelog>
  <changelog author="fstrba@suse.com" date="1587988802">- Do not build the log4j-jpl artifact, as to avoid java-11-only
  features</changelog>
  <changelog author="psimons@suse.com" date="1639137600">- Apply "CVE-2021-44228.patch" to fix a remote code execution
  vulnerability that existed in the LDAP JNDI parser. [bsc#1193611,
  CVE-2021-44228]</changelog>
  <changelog author="psimons@suse.com" date="1639483200">- Apply "disable-jndi-by-default.patch" to disable JNDI support by
  default. There is evidence that the previous upstream fix for
  CVE-2021-44228 did not solve the vulnerability entirely. Since
  JNDI support is ususally not required, upstream recommends this
  route to be completely safe. [bsc#1193611, CVE-2021-44228]</changelog>
  <changelog author="sflees@suse.de" date="1639569600">- Update to 2.16.0 [bsc#1193743, CVE-2021-45046]
  * Features
  - Add JsonTemplateLayout.
  - Create module log4j-mongodb4 to use new major version 4
    MongoDB driver.
  - More flexible configuration of the Disruptor WaitStrategy.
    Thanks to Stepan Gorban.
  * Bugfixes and minor enhancements
  - It was found that the fix to address CVE-2021-44228 in Apache
    Log4j 2.15.0 was incomplete in certain non-default
    configurations.
    This could allows attackers with control over Thread Context
    Map (MDC) input data when the logging configuration uses a
    Pattern Layout with either a Context Lookup (for example,
    $${ctx:loginId}) or a Thread Context Map pattern (%X, %mdc, or
    %MDC) to craft malicious input data using a JNDI Lookup
    pattern resulting in a denial of service (DOS) attack.
    Log4j 2.15.0 restricts JNDI LDAP lookups to localhost by
    default. Note that previous mitigations involving
    configuration such as setting the system property
    log4j2.noFormatMsgLookup to true do NOT mitigate this specific
    vulnerability.
  - Upstream initial fix for bsc#1193611, CVE-2021-44228
  - Numerous other minor bugfixes
  * Drop CVE-2021-44228.patch and disable-jndi-by-default.patch
    included upstream
  * To make the bots happy this stream isn't affected by
    bsc#1193662 CVE-2021-4104 which is 1.X only</changelog>
  <changelog author="david.anes@suse.com" date="1639828800">- Update to 2.17.0 [bsc#1193887, bsc#1193888, CVE-2021-45105]
  * Fixed Bugs
  - Fix string substitution recursion.
  - Limit JNDI to the java protocol only. JNDI will remain disabled
    by default. Rename JNDI enablement property from
    'log4j2.enableJndi' to 'log4j2.enableJndiLookup',
    'log4j2.enableJndiJms', and 'log4j2.enableJndiContextSelector'.
  - Limit JNDI to the java protocol only. JNDI will remain disabled
    by default. The enablement property has been renamed to
    'log4j2.enableJndiJava'
  - Do not declare log4j-api-java9 and log4j-core-java9 as
    dependencies as it causes problems with the Maven enforcer
    plugin.
  - PropertiesConfiguration.parseAppenderFilters NPE when parsing
    properties file filters.
  - Log4j 1.2 bridge for Syslog Appender defaults to port 512
    instead of 514.
  - Log4j 1.2 bridge API hard codes the Syslog protocol to TCP.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639828801">- add upstream signing key to verify source signature</changelog>
  <changelog author="david.anes@suse.com" date="1640779200">- Update to 2.17.1 [bsc#1194127, CVE-2021-44832]
  * Fixed bugs:
  - JdbcAppender now uses JndiManager to access JNDI resources.
    JNDI is only enabled when system property log4j2.enableJndiJdbc
    is set to true.
  - Remove unused method.
  - ExtendedLoggerWrapper.logMessage no longer double-logs when
    location is requested.
  - log4j-to-slf4j no longer re-interpolates formatted message
    contents.
  - Correct SpringLookup package name in Interpolator.
  - log4j-to-slf4j takes the provided MessageFactory into account.
  - Fix MapLookup to lookup MapMessage before DefaultMap.
  - Buffered I/O checked had inverted logic in
    RollingFileAppenderBuidler.
  - Fix NPE when input is null in
    StrSubstitutor.replace(String, Properties).
  - Lookups with no prefix only read values from the configuration
    properties as expected.
  - Reduce ignored package scope of KafkaAppender.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Remove alias log4j:log4j from log4j-1.2-api, since it is not a
  drop-in replacement</changelog>
  <changelog author="david.anes@suse.com" date="1646913600">- Update to 2.17.2
  * New Features
  - Limit loading of configuration via a url to https by default.
  - Require log4j2.Script.enableLanguages to be specified to
    enable scripting for specific languages.
  - Add TB support to FileSize.
  - Add the log4j-to-jul JDK Logging Bridge.
  - Add org.apache.logging.log4j.core.appender.AsyncAppender.getAppenders()
    to more easily port from org.apache.log4j.AsyncAppender.getAllAppenders().
  - Add Configurator.setLevel(Logger, Level),
    setLevel(String, String), and setLevel(Class, Level).
  - Add shorthand syntax for properties configuration format for
    specifying a logger level and appender refs.
  - Add optional additional fields to NoSQLAppender.
  * Fixed Bugs
  - Flag LogManager as initiialized if the LoggerFactory is
    provided as a property.
  - Fix DefaultConfiguration leak in PatternLayout.
  - Document that the Spring Boot Lookup requires the
    log4j-spring-boot dependency.
  - Fix RoutingAppender backcompat and disallow recursive
    evaluation of lookup results outside of configuration
    properties.
  - Fix ThreadContextDataInjector initialization deadlock.
  - Fix substitutions when programmatic configuration is used.
  - OptionConverter could cause a StackOverflowError.
  - Log4j 1.2 bridge class ConsoleAppender should extend
    WriterAppender and provide better compatibility with custom
    appenders.
  - Log4j 1.2 bridge method NDC.inherit(Stack) should not use
    generics to provide source compatibility.
  - Log4j 1.2 bridge class PatternLayout is missing constants
    DEFAULT_CONVERSION_PATTERN and TTCC_CONVERSION_PATTERN.
  - Log4j 1.2 bridge class PropertyConfigurator should implement
    Configurator.
  - Log4j 1.2 bridge interface Configurator doConfigure() methods
    should use LoggerRepository, not LoggerContext.
  - Log4j 1.2 bridge class OptionConverter is missing
    selectAndConfigure() methods.
  - Log4j 1.2 bridge class Category should implement
    AppenderAttachable.
  - Log4j 1.2 bridge method Category.exists(String) should be
    static.
  - Log4j 1.2 bridge methods missing in org.apache.log4j.Category:
    getDefaultHierarchy(), getHierarchy(), getLoggerRepository().
  - Log4j 1.2 bridge class LogManager default constructor should
    be public.
  - Log4j 1.2 bridge interface org.apache.log4j.spi.RendererSupport
    was in the wrong package and incomplete.
  - Log4j 1.2 bridge interfaces missing from package
    org.apache.log4j.spi: ThrowableRenderer,
    ThrowableRendererSupport, TriggeringEventEvaluator.
  - Log4j 1.2 bridge missing class org.apache.log4j.or.RendererMap.
  - Log4j 1.2 bridge PropertiesConfiguration.buildAppender not
    adding filters to custom appender.
  - Log4j 1.2 bridge should ignore case in properties file keys.
  - Log4j 1.2 bridge adds org.apache.log4j.component.helpers.Constants.
  - Log4j 1.2 bridge adds org.apache.log4j.helpers.LogLog.
  - Log4j 1.2 bridge adds org.apache.log4j.helpers.Loader.
  - Log4j 1.2 bridge adds org.apache.log4j.spi.RootLogger.
  - Log4j 1.2 bridge class Category is missing some protected
    instance variables.
  - Log4j 1.2 bridge adds org.apache.log4j.Hierarchy.
  - Log4j 1.2 bridge methods Category.getChainedPriority() and
    getEffectiveLevel() should not be final.
  - Log4j 1.2 bridge adds org.apache.log4j.spi.NOPLoggerRepository
    and NOPLogger.
  - Log4j 1.2 bridge adds org.apache.log4j.spi.DefaultRepositorySelector.
  - Log4j 1.2 bridge implements LogManager.getCurrentLoggers()
    fully.
  - Log4j 1.2 bridge fixes parsing filters in properties
    configuration file #680.
  - Log4j 1.2 bridge missing OptionConverter.instantiateByKey(
    Properties, String, Class, Object).
  - Log4j 1.2 bridge class org.apache.log4j.spi.LoggingEvent
    missing constructors and public instance variable.
  - Log4j 1.2 bridge does not support system properties in log4j.xml.
  - Log4j 1.2 bridge now logs a warning instead of throwing an
    NullPointerException when building a Syslog appender with a
    missing "SyslogHost" param.
  - Log4j 1.2 bridge should allow property and XML attributes to
    start with either an upper-case or lower-case letter.
  - Log4j 1.2 bridge uses the wrong default values for a
    TTCCLayout.
  - Log4j 1.2 bridge throws ClassCastException when using
    SimpleLayout and others.
  - Log4j 1.2 bridge uses the wrong file pattern for rolling file
    appenders.
  - Log4j 1.2 bridge throws ClassCastException when using
    SimpleLayout and others.
  - Log4j 1.2 bridge creates a SocketAppender instead of a
    SyslogAppender.
  - Log4j 1.2 bridge uses some incorrect default property values
    in some appenders.
  - Log4j 1.2 bridge supports the SocketAppender.
  - Log4j 1.2 bridge missing DefaultThrowableRenderer.
  - Log4j 1.2 bridge missing some ThrowableInformation constructors.
  - Log4j 1.2 bridge missing some LocationInfo constructors.
  - Log4j 1.2 bridge missed
  - Log4j 1.2 bridge missed org.apache.log4j.pattern.FormattingInfo.
  - Log4j 1.2 bridge missed org.apache.log4j.pattern.NameAbbreviator.
  - Log4j 1.2 bridge missing UtilLoggingLevel.
  - Log4j 1.2 bridge missing FormattingInfo.
  - Log4j 1.2 bridge missing PatternConverter.
  - Log4j 1.2 bridge missing PatternParser.
  - Log4j 1.2 bridge issues with filters.
  - Log4j 1.2 bridge implements most of DOMConfigurator.
  - JndiManager reverts to 2.17.0 behavior: Read the system
    property for each call.
  - Configurator.setLevel not fetching the correct LoggerContext.
  - Fix DTD error: Add missing ELEMENT for Marker.
  - Fix log4j-jakarta-web service file.
  - AppenderLoggingException logging any exception to a MongoDB
    Appender.
  - Possible NullPointerException in MongoDb4DocumentObject,
    MongoDbDocumentObject, DefaultNoSqlObject.
  - Trim whitespace before parsing a String into an Integer.
  - Log4j 1.2 bridge throws a ClassCastException when logging a
    Map with non-String keys.
  - Log4j 1.2 bridge Check for non-existent appender when parsing
    properties #761. Thanks to Kenny MacLeod.
  - Log4j 1.2 bridge supports global threshold.
  * Changes
  - Change modifier of method
    org.apache.logging.log4j.core.tools.Generate#generate to
    public (was package private) to facilitate automated code
    generation.</changelog>
  <changelog author="fstrba@suse.com" date="1649678400">- Add dependency on standalone javax.activation-api that is not
  included in newer JDKs</changelog>
  <changelog author="fstrba@suse.com" date="1655121600">- Build as multi-release jar.
- Add some logging providers which we can build with the existing
  dependencies and without cycles.</changelog>
  <changelog author="fstrba@suse.com" date="1655121601">- Do not package the *.zip artifacts whose content is part of the
  multi-release jars already
- Added patch:
  * log4j-java8compat.patch
    + maintain ByteBuffer and CharBuffer compatibility with java 8</changelog>
  <changelog author="fstrba@suse.com" date="1655294400">- Build also taglib, jmx-gui, bom, nosql and web modules, on
  platforms where we have the dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1710072000">- Added patch:
  * log4j-jackson-databind.patch
    + do not use previously deprecated methods, removed in
    jackson-databind 2.16.x</changelog>
  <changelog author="fstrba@suse.com" date="1714392000">- The binaries are compatible with java 1.8
- Fetch newer upstream keyring</changelog>
  <changelog author="fstrba@suse.com" date="1767614400">- Upgrade to 2.18.0
  * Added
    + Add support for Jakarta Mail API in the SMTP appender.
    + Add support for custom Log4j 1.x levels.
    + Add support for adding and retrieving appenders in Log4j 1.x
    bridge.
    + Add support for custom LMAX disruptor WaitStrategy
    configuration.
    + Add support for Apache Extras' RollingFileAppender in Log4j
    1.x bridge.
    + Add MutableThreadContextMapFilter.
    + Add support for 24 colors in highlighting
  * Changed
    + Improves ServiceLoader support on servlet containers.
    + Make the default disruptor WaitStrategy used by Async Loggers
    garbage-free.
    + Do not throw UnsupportedOperationException when JUL
    ApiLogger::setLevel is called.
    + Support Spring 2.6.x.
    + Move perf tests to log4j-core-its
    + Upgrade the Flume Appender to Flume 1.10.0
  * Fixed
    + Fix minor typo #792.
    + Improve validation and reporting of configuration errors.
    + Allow enterprise id to be an OID fragment.
    + Fix problem with non-uppercase custom levels.
    + Avoid ClassCastException in JeroMqManager with custom
    LoggerContextFactory #791.
    + DirectWriteRolloverStrategy should use the current time when
    creating files.
    + Fixes the syslog appender in Log4j 1.x bridge, when used with
    a custom layout.
    + log4j-1.2-api 2.17.2 throws NullPointerException while
    removing appender with name as null.
    + Improve JsonTemplateLayout performance.
    + Fix resolution of non-Log4j properties.
    + Fixes Spring Boot logging system registration in a
    multi-application environment.
    + JAR file containing Log4j configuration isn’t closed.
    + Properties defined in configuration using a value attribute
    (as opposed to element) are read correctly.
    + Syslog appender lacks the SocketOptions setting.
    + Log4j 1.2 bridge should not wrap components unnecessarily.
    + Update 3rd party dependencies for 2.18.0.
    + SizeBasedTriggeringPolicy would fail to rename files properly
    when integer pattern contained a leading zero.
    + Fixes default SslConfiguration, when a custom keystore is
    used.
    + Fixes appender concurrency problems in Log4j 1.x bridge.
    + Fix and test for race condition in FileUtils.mkdir().
    + LocalizedMessage logs misleading errors on the console.
    + Add missing message parameterization in RegexFilter.
    + Add the missing context stack to JsonLayout template.
    + HttpWatcher did not pass credentials when polling.
    + UrlConnectionFactory.createConnection now accepts an
    AuthorizationProvider as a parameter.
    + The DirectWriteRolloverStrategy was not detecting the correct
    index to use during startup.
    + Async Loggers were including the location information by
    default.
    + ClassArbiter’s newBuilder method referenced the wrong class.
    + Don’t use Paths.get() to avoid circular file systems.
    + Fix parsing error, when XInclude is disabled.
    + Fix LevelRangeFilterBuilder to align with log4j1’s behavior.
    + Fixes problem with wrong ANSI escape code for bright colors
    + Log4j 1.2 bridge should generate Log4j 2.x messages based on
    the parameter runtime type.
- Update to 2.19.0
  * Added
    + Add implementation of SLF4J2 fluent API.
    + Add support for SLF4J2 stack-valued MDC.
  * Changed
    + Add getExplicitLevel method to LoggerConfig.
    + Allow PropertySources to be added.
    + Allow Plugins to be injected with the LoggerContext reference.
  * Fixed
    + Add correct manifest entries for OSGi to log4j-jcl
    + Improve support for passwordless keystores.
    + SystemPropertyArbiter was assigning the value as the name.
    + Make JsonTemplateLayout stack trace truncation operate for
    each label block.
    + Fix recursion between Log4j 1.2 LogManager and Category.
    + Fix resolution of properties not starting with log4j2..
    + Logger$PrivateConfig.filter(Level, Marker, String) was
    allocating empty varargs array.
    + Allows a space separated list of style specifiers in the
    %style pattern for consistency with %highlight.
    + Fix NPE in log4j-to-jul in the case the root logger level is
    null.
    + Fix RollingRandomAccessFileAppender with
    DirectWriteRolloverStrategy can’t create the first log file of
    different directory.
    + Generate new SSL certs for testing.
    + Fix ServiceLoaderUtil behavior in the presence of a
    SecurityManager.
    + Fix regression in Rfc5424Layout default values.
    + Harden InstantFormatter against delegate failures.
    + Add async support to Log4jServletFilter.
  * Removed
    + Removed build page in favor of a single build instructions
    file.
    + Remove SLF4J 1.8.x binding.
- Update to 2.20.0
  * Added
    + Add support for timezones in RollingFileAppender date pattern
    + Add LogEvent timestamp to ProducerRecord in KafkaAppender
    + Add PatternLayout support for abbreviating the name of all
    logger components except the 2 rightmost
    + Removes internal field that leaked into public API.
    + Add a LogBuilder#logAndGet() method to emulate the
    Logger#traceEntry method.
  * Changed
    + Simplify site generation
    + Switch the issue tracker from JIRA to GitHub Issues
    + Remove liquibase-log4j2 maven module
    + Fix order of stacktrace elements, that causes cache misses in
    ThrowableProxyHelper.
    + Switch from com.sun.mail to Eclipse Angus.
    + Add Log4j2 Core as default runtime dependency of the
    SLF4J2-to-Log4j2 API bridge.
    + Replace maven-changes-plugin with a custom changelog
    implementation
    + Moved log4j-api and log4j-core artifacts with classifier tests
    to log4j-api-test and log4j-core-test respectively.
  * Deprecated
    + Deprecate support for package scanning for plugins
  * Fixed
    + Copy programmatically supplied location even if
    includeLocation="false".
    + Eliminate status logger warning, when disableAnsi or
    noConsoleNoAnsi is used the style and highlight patterns.
    + Fix detection of location requirements in RewriteAppender.
    + Replace regex with manual code to escape characters in
    Rfc5424Layout.
    + Fix java.sql.Time object formatting in MapMessage
    + Fix previous fire time computation in CronTriggeringPolicy
    + Correct default to not include location for AsyncRootLoggers
    + Make StatusConsoleListener use SimpleLogger internally.
    + Lazily evaluate the level of a SLF4J LogEventBuilder
    + Fixes priority of Legacy system properties, which are now back
    to having higher priority than Environment variables.
    + Protects ServiceLoaderUtil from unchecked ServiceLoader
    exceptions.
    + Fix Configurator#setLevel for internal classes
    + Fix level propagation in Log4jBridgeHandler
    + Disable OsgiServiceLocator if not running in OSGI container.
    + When using a Date Lookup in the file pattern the current time
    should be used.
    + Fixed LogBuilder filtering in the presence of global filters.
- Removed patch:
  * log4j-java8compat.patch
    + not needed with this version
- Modified patch:
  * logging-log4j-Remove-unsupported-EventDataConverter.patch
    + rediff
- Added patch:
  * 0002-Remove-usage-of-toolchains.patch
    + do not use the maven-toolchains-plugin
  * log4j-CVE-2025-68161.patch
    + bsc#1255427, CVE-2025-68161: absent TLS hostname verification
    may allow a man-in-the-middle attack</changelog>
</package>
<package pkgid="7d84e248ea814634482e81eb23d2a5234a99c1d01328f135f2f6b6137b8b8ea4" name="log4j" arch="src">
  <version epoch="0" ver="2.20.0" rel="150200.4.30.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1579608000">- Update to 2.13.0 [bsc#1159646, CVE-2019-17571]
  * Bugfixes and minor enhancements:
  - CVE-2019-17571: Remote code execution: Deserialization of untrusted
    data in SocketServer
  - Log4j 2 now requires Java 8 or higher to build and run.
  - Better integration with Spring Boot by providing access to Spring
    variables in Log4j 2 configuration files and allowing Log4j 2 system
    properties to be defined in the Spring configuration.
  - Support for accessing Kubernetes information via a Log4j 2 Lookup.
  - The Gelf Layout now allows the message to be formatted using a
    PatternLayout pattern.
  - Due to a break in compatibility in the SLF4J binding, Log4j now
    ships with two versions of the SLF4J to Log4j adapters.
  - log4j-slf4j-impl should be used with SLF4J 1.7.x and earlier and
    log4j-slf4j18-impl should be used with SLF4J 1.8.x and later.
  - Note that the XML, JSON and YAML formats changed in the 2.11.0 release:
    they no longer have the "timeMillis" attribute and instead have an
    "Instant" element with "epochSecond" and "nanoOfSecond" attributes.
  - The Log4j 2.13.0 API, as well as many core components, maintains
    binary compatibility with previous releases.
  * New Features
  - Add ThreadContext.putIfNotNull method.
  - Add a Level Patttern Selector.
  - Add experimental support for Log4j 1 configuration files.
  - Add the ability to lookup Kubernetes attributes in the Log4j
    configuration. Allow Log4j properties to be retrieved from the
    Spring environment if it is available.
  - Allow Spring Boot application properties to be accessed in the
    Log4j 2 configuration. Add lower and upper case Lookups.
  - Add builder pattern to Logger interface.
  * Fixed Bugs
  - Prevent recursive calls to java.util.LogManager.getLogger().
  - Added try/finally around event.execute() for RingBufferLogEventHandler
    to clear memory correctly in case of exception/error.
  - Wrong java version check in ThreadNameCachingStrategy.
  - Use a less confusing name for the CompositeConfiguration source.
  - Add setKey method to Kafka Appender Builder.
  - ArrayIndexOutOfBoundsException could occur with MAC address longer
    than 6 bytes.
  - The rolling file appenders would fail to compress the file after
    rollover if the file name matched the file pattern.
  - @PluginValue does not support attribute names besides "value".
  - Validation blocks definition of script in properties configuration.
  - Set result of rename action to true if file was copied.
  - Add automatic module names where missing.
  - OutputStreamAppender.Builder ignores setFilter().
  - Prevent a memory leak when async loggers throw errors.
  * Changes
  - Update Jackson to 2.9.10.
  - Allow message portion of GELF layout to be formatted using a PatternLayout.
  - Allow ThreadContext attributes to be explicitly included or excluded in the GelfLayout.</changelog>
  <changelog author="fstrba@suse.com" date="1582718400">- Added patches:
  * logging-log4j-LOG4J2-2745-LOG4J2-2744-slf4j.patch
  * logging-log4j-Remove-unsupported-EventDataConverter.patch
    + fix build with newer slf4j</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1587988800">- Security fix: [bsc#1170535, CVE-2020-9488]
  * Improper validation of certificate with host mismatch in SMTP appender.
- Add log4j-CVE-2020-9488.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1587988801">- Update to 2.13.2 [bsc#1170535, CVE-2020-9488]
  * Bugfixes and minor enhancements:
  - CVE-2020-9488: Improper validation of certificate with host mismatch
    in Apache Log4j SMTP appender.
  - Implement requiresLocation in GelfLayout to reflect whether location
    information is used in the message Pattern.
  - Add option to restore printing timeMillis in the JsonLayout.
  - Initialize pattern processor before triggering policy during reconfiguration.
  - Add information about using a url in log4j.configurationFile.
  - serializeToBytes was checking wrong variable for null.
  - Fix Javadoc for ScriptPatternSelector.
  - Allow trailing and leading spaces in log level.
  - Correct JsonLayout timestamp sorting issue.
  - Allow the file size action to parse the value without being sensitive
    to the current locale.
  - Make YamlLayoutTest more resiliant to environmental differences.
  - Conditionally allocate PluginEntry during PluginCache loading.
  - Add missing includeLocation parameter when creating AsyncLogger.
  - Fix Exceptions when whitespace is in the file path and Java security
    manager is used.
  - Avoid NullPointerException when StackWalker returns null.
  - TimeFilter did not handle daylight saving time transitions and did
    not support a range over 2 days.
  - Provide a Log4j implementation of System.Logger.
  - Added EventLookup to retrieve fields from the log event.
  * Changes:
  - Allow the file extension in the file pattern to be modified during reconfiguration.
  - Add support for specifying an SSL configuration for SmtpAppender.
  - Allow servlet context path to be retrieved without "/".
  - Allow Spring Lookup to return default and active profiles.
  - Allow Spring Boot applications to use composite configuratons.
  - Add ContextDataProviders as an alternative to having to implement a ContextDataInjector.
  - [JDBC] Throw a AppenderLoggingException instead of an NPE in the JDBC database manager.
- Update to 2.13.1
  - Prevent LoggerContext from being garbage collected while being created.
  - Do not log an error if Files.move does not work.
  - Rollover fails when file matches pattern but index is too large.
  - Counter stuck at 10 and overwriting files when leading zeros used in the file pattern count.
  - ClassLoaderContextSelector was not locating the LoggerContext during shutdown.
  - JSON output wrong when using additonal fields.
  - GraalVM does not allow use of MethodHandles.
  - Allow Lookup keys with leading dashes by using a slash as an escape character.
  - ServletContainerInitializer was obtaining the StatusLogger too soon.
  - PluginProcessor should use Messager instead of System.out.
  - MapMessage.getFormattedMesssage() would incorrectly format objects.
  - Always write header on a new OutputStream.
  - An error message in RollingFileAppender uses a placeholder for the name but does not
    specify the name argument in the logging call.
  - NullPointerException when using a custom DirectFileRolloverStrategy without a file name.
  - Add mulit-parameter overloads to LogBuilder.
  - Fixed NullPointerException after reconfiguring via JMX.
  - RollingFileAppender was not rolling on startup if createOnDemand was set to true.
  - Warn if pattern is missing on Routes element. Use default route.
  - Fix lock contention in the classloader using new versions of slf4j without EventData
    on slf4j logger creation.
  - Rollover handles parallel file deletion gracefully.
  - Remove unnecessary EventLogger references from log4j-slf4j18-impl due to removal from slf4j.
  - Fix a memory leak using fully asynchronous logging when the queue is full using the 'discard'
    asynchronous queue full strategy.
  - Fix erroneous log4j-jul recursive logger detection resulting in some no-op JUL loggers and
    'WARN Recursive call to getLogger' being reported by the status logger.
  - PluginCache output is reproducible allowing the annotation processor to produce
    deterministic results.
  - Fix StackLocator.getCallerClass performance in cases where Reflection.getCallerClass
    is not accessible.
  - MutableLogEvent and RingBufferLogEvent avoid StringBuffer and parameter array allocation
    unless reusable messages are used.
  - LoaderUtil.getClassLoaders may discover additional loaders and no longer erroneously returns
    a result with a null element in some environments.
  - CronExpression.getBeforeTime() would sometimes return incorrect result.
  - [JDBC] MS-SQL Server JDBC driver throws SQLServerException when inserting a null value
    for a VARBINARY column.
  - NullPointerException after reconfiguring via JMX.
  - Implement ISO8601_PERIOD_MICROS fixed date format matching ISO8601_PERIOD with support
    for microsecond precision.
  * Changes:
  - Conditionally perform status logging calculations in PluginRegistry.
  - Use LinkedBlockingQueue instead of synchronized collction in StatusConfiguration.
  - Add a retry count attribute to the KafkaAppender.
  - Update log4j-slf4j18-impl slf4j version to 1.8.0-beta4 from 1.8.0-alpha2.
  - Update dependencies.
- Remove patch fixed upstream:
  * logging-log4j-LOG4J2-2745-LOG4J2-2744-slf4j.patch
  * log4j-CVE-2020-9488.patch
- Refresh patch:
  * logging-log4j-Remove-unsupported-EventDataConverter.patch</changelog>
  <changelog author="fstrba@suse.com" date="1587988802">- Do not build the log4j-jpl artifact, as to avoid java-11-only
  features</changelog>
  <changelog author="psimons@suse.com" date="1639137600">- Apply "CVE-2021-44228.patch" to fix a remote code execution
  vulnerability that existed in the LDAP JNDI parser. [bsc#1193611,
  CVE-2021-44228]</changelog>
  <changelog author="psimons@suse.com" date="1639483200">- Apply "disable-jndi-by-default.patch" to disable JNDI support by
  default. There is evidence that the previous upstream fix for
  CVE-2021-44228 did not solve the vulnerability entirely. Since
  JNDI support is ususally not required, upstream recommends this
  route to be completely safe. [bsc#1193611, CVE-2021-44228]</changelog>
  <changelog author="sflees@suse.de" date="1639569600">- Update to 2.16.0 [bsc#1193743, CVE-2021-45046]
  * Features
  - Add JsonTemplateLayout.
  - Create module log4j-mongodb4 to use new major version 4
    MongoDB driver.
  - More flexible configuration of the Disruptor WaitStrategy.
    Thanks to Stepan Gorban.
  * Bugfixes and minor enhancements
  - It was found that the fix to address CVE-2021-44228 in Apache
    Log4j 2.15.0 was incomplete in certain non-default
    configurations.
    This could allows attackers with control over Thread Context
    Map (MDC) input data when the logging configuration uses a
    Pattern Layout with either a Context Lookup (for example,
    $${ctx:loginId}) or a Thread Context Map pattern (%X, %mdc, or
    %MDC) to craft malicious input data using a JNDI Lookup
    pattern resulting in a denial of service (DOS) attack.
    Log4j 2.15.0 restricts JNDI LDAP lookups to localhost by
    default. Note that previous mitigations involving
    configuration such as setting the system property
    log4j2.noFormatMsgLookup to true do NOT mitigate this specific
    vulnerability.
  - Upstream initial fix for bsc#1193611, CVE-2021-44228
  - Numerous other minor bugfixes
  * Drop CVE-2021-44228.patch and disable-jndi-by-default.patch
    included upstream
  * To make the bots happy this stream isn't affected by
    bsc#1193662 CVE-2021-4104 which is 1.X only</changelog>
  <changelog author="david.anes@suse.com" date="1639828800">- Update to 2.17.0 [bsc#1193887, bsc#1193888, CVE-2021-45105]
  * Fixed Bugs
  - Fix string substitution recursion.
  - Limit JNDI to the java protocol only. JNDI will remain disabled
    by default. Rename JNDI enablement property from
    'log4j2.enableJndi' to 'log4j2.enableJndiLookup',
    'log4j2.enableJndiJms', and 'log4j2.enableJndiContextSelector'.
  - Limit JNDI to the java protocol only. JNDI will remain disabled
    by default. The enablement property has been renamed to
    'log4j2.enableJndiJava'
  - Do not declare log4j-api-java9 and log4j-core-java9 as
    dependencies as it causes problems with the Maven enforcer
    plugin.
  - PropertiesConfiguration.parseAppenderFilters NPE when parsing
    properties file filters.
  - Log4j 1.2 bridge for Syslog Appender defaults to port 512
    instead of 514.
  - Log4j 1.2 bridge API hard codes the Syslog protocol to TCP.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639828801">- add upstream signing key to verify source signature</changelog>
  <changelog author="david.anes@suse.com" date="1640779200">- Update to 2.17.1 [bsc#1194127, CVE-2021-44832]
  * Fixed bugs:
  - JdbcAppender now uses JndiManager to access JNDI resources.
    JNDI is only enabled when system property log4j2.enableJndiJdbc
    is set to true.
  - Remove unused method.
  - ExtendedLoggerWrapper.logMessage no longer double-logs when
    location is requested.
  - log4j-to-slf4j no longer re-interpolates formatted message
    contents.
  - Correct SpringLookup package name in Interpolator.
  - log4j-to-slf4j takes the provided MessageFactory into account.
  - Fix MapLookup to lookup MapMessage before DefaultMap.
  - Buffered I/O checked had inverted logic in
    RollingFileAppenderBuidler.
  - Fix NPE when input is null in
    StrSubstitutor.replace(String, Properties).
  - Lookups with no prefix only read values from the configuration
    properties as expected.
  - Reduce ignored package scope of KafkaAppender.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Remove alias log4j:log4j from log4j-1.2-api, since it is not a
  drop-in replacement</changelog>
  <changelog author="david.anes@suse.com" date="1646913600">- Update to 2.17.2
  * New Features
  - Limit loading of configuration via a url to https by default.
  - Require log4j2.Script.enableLanguages to be specified to
    enable scripting for specific languages.
  - Add TB support to FileSize.
  - Add the log4j-to-jul JDK Logging Bridge.
  - Add org.apache.logging.log4j.core.appender.AsyncAppender.getAppenders()
    to more easily port from org.apache.log4j.AsyncAppender.getAllAppenders().
  - Add Configurator.setLevel(Logger, Level),
    setLevel(String, String), and setLevel(Class, Level).
  - Add shorthand syntax for properties configuration format for
    specifying a logger level and appender refs.
  - Add optional additional fields to NoSQLAppender.
  * Fixed Bugs
  - Flag LogManager as initiialized if the LoggerFactory is
    provided as a property.
  - Fix DefaultConfiguration leak in PatternLayout.
  - Document that the Spring Boot Lookup requires the
    log4j-spring-boot dependency.
  - Fix RoutingAppender backcompat and disallow recursive
    evaluation of lookup results outside of configuration
    properties.
  - Fix ThreadContextDataInjector initialization deadlock.
  - Fix substitutions when programmatic configuration is used.
  - OptionConverter could cause a StackOverflowError.
  - Log4j 1.2 bridge class ConsoleAppender should extend
    WriterAppender and provide better compatibility with custom
    appenders.
  - Log4j 1.2 bridge method NDC.inherit(Stack) should not use
    generics to provide source compatibility.
  - Log4j 1.2 bridge class PatternLayout is missing constants
    DEFAULT_CONVERSION_PATTERN and TTCC_CONVERSION_PATTERN.
  - Log4j 1.2 bridge class PropertyConfigurator should implement
    Configurator.
  - Log4j 1.2 bridge interface Configurator doConfigure() methods
    should use LoggerRepository, not LoggerContext.
  - Log4j 1.2 bridge class OptionConverter is missing
    selectAndConfigure() methods.
  - Log4j 1.2 bridge class Category should implement
    AppenderAttachable.
  - Log4j 1.2 bridge method Category.exists(String) should be
    static.
  - Log4j 1.2 bridge methods missing in org.apache.log4j.Category:
    getDefaultHierarchy(), getHierarchy(), getLoggerRepository().
  - Log4j 1.2 bridge class LogManager default constructor should
    be public.
  - Log4j 1.2 bridge interface org.apache.log4j.spi.RendererSupport
    was in the wrong package and incomplete.
  - Log4j 1.2 bridge interfaces missing from package
    org.apache.log4j.spi: ThrowableRenderer,
    ThrowableRendererSupport, TriggeringEventEvaluator.
  - Log4j 1.2 bridge missing class org.apache.log4j.or.RendererMap.
  - Log4j 1.2 bridge PropertiesConfiguration.buildAppender not
    adding filters to custom appender.
  - Log4j 1.2 bridge should ignore case in properties file keys.
  - Log4j 1.2 bridge adds org.apache.log4j.component.helpers.Constants.
  - Log4j 1.2 bridge adds org.apache.log4j.helpers.LogLog.
  - Log4j 1.2 bridge adds org.apache.log4j.helpers.Loader.
  - Log4j 1.2 bridge adds org.apache.log4j.spi.RootLogger.
  - Log4j 1.2 bridge class Category is missing some protected
    instance variables.
  - Log4j 1.2 bridge adds org.apache.log4j.Hierarchy.
  - Log4j 1.2 bridge methods Category.getChainedPriority() and
    getEffectiveLevel() should not be final.
  - Log4j 1.2 bridge adds org.apache.log4j.spi.NOPLoggerRepository
    and NOPLogger.
  - Log4j 1.2 bridge adds org.apache.log4j.spi.DefaultRepositorySelector.
  - Log4j 1.2 bridge implements LogManager.getCurrentLoggers()
    fully.
  - Log4j 1.2 bridge fixes parsing filters in properties
    configuration file #680.
  - Log4j 1.2 bridge missing OptionConverter.instantiateByKey(
    Properties, String, Class, Object).
  - Log4j 1.2 bridge class org.apache.log4j.spi.LoggingEvent
    missing constructors and public instance variable.
  - Log4j 1.2 bridge does not support system properties in log4j.xml.
  - Log4j 1.2 bridge now logs a warning instead of throwing an
    NullPointerException when building a Syslog appender with a
    missing "SyslogHost" param.
  - Log4j 1.2 bridge should allow property and XML attributes to
    start with either an upper-case or lower-case letter.
  - Log4j 1.2 bridge uses the wrong default values for a
    TTCCLayout.
  - Log4j 1.2 bridge throws ClassCastException when using
    SimpleLayout and others.
  - Log4j 1.2 bridge uses the wrong file pattern for rolling file
    appenders.
  - Log4j 1.2 bridge throws ClassCastException when using
    SimpleLayout and others.
  - Log4j 1.2 bridge creates a SocketAppender instead of a
    SyslogAppender.
  - Log4j 1.2 bridge uses some incorrect default property values
    in some appenders.
  - Log4j 1.2 bridge supports the SocketAppender.
  - Log4j 1.2 bridge missing DefaultThrowableRenderer.
  - Log4j 1.2 bridge missing some ThrowableInformation constructors.
  - Log4j 1.2 bridge missing some LocationInfo constructors.
  - Log4j 1.2 bridge missed
  - Log4j 1.2 bridge missed org.apache.log4j.pattern.FormattingInfo.
  - Log4j 1.2 bridge missed org.apache.log4j.pattern.NameAbbreviator.
  - Log4j 1.2 bridge missing UtilLoggingLevel.
  - Log4j 1.2 bridge missing FormattingInfo.
  - Log4j 1.2 bridge missing PatternConverter.
  - Log4j 1.2 bridge missing PatternParser.
  - Log4j 1.2 bridge issues with filters.
  - Log4j 1.2 bridge implements most of DOMConfigurator.
  - JndiManager reverts to 2.17.0 behavior: Read the system
    property for each call.
  - Configurator.setLevel not fetching the correct LoggerContext.
  - Fix DTD error: Add missing ELEMENT for Marker.
  - Fix log4j-jakarta-web service file.
  - AppenderLoggingException logging any exception to a MongoDB
    Appender.
  - Possible NullPointerException in MongoDb4DocumentObject,
    MongoDbDocumentObject, DefaultNoSqlObject.
  - Trim whitespace before parsing a String into an Integer.
  - Log4j 1.2 bridge throws a ClassCastException when logging a
    Map with non-String keys.
  - Log4j 1.2 bridge Check for non-existent appender when parsing
    properties #761. Thanks to Kenny MacLeod.
  - Log4j 1.2 bridge supports global threshold.
  * Changes
  - Change modifier of method
    org.apache.logging.log4j.core.tools.Generate#generate to
    public (was package private) to facilitate automated code
    generation.</changelog>
  <changelog author="fstrba@suse.com" date="1649678400">- Add dependency on standalone javax.activation-api that is not
  included in newer JDKs</changelog>
  <changelog author="fstrba@suse.com" date="1655121600">- Build as multi-release jar.
- Add some logging providers which we can build with the existing
  dependencies and without cycles.</changelog>
  <changelog author="fstrba@suse.com" date="1655121601">- Do not package the *.zip artifacts whose content is part of the
  multi-release jars already
- Added patch:
  * log4j-java8compat.patch
    + maintain ByteBuffer and CharBuffer compatibility with java 8</changelog>
  <changelog author="fstrba@suse.com" date="1655294400">- Build also taglib, jmx-gui, bom, nosql and web modules, on
  platforms where we have the dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1710072000">- Added patch:
  * log4j-jackson-databind.patch
    + do not use previously deprecated methods, removed in
    jackson-databind 2.16.x</changelog>
  <changelog author="fstrba@suse.com" date="1714392000">- The binaries are compatible with java 1.8
- Fetch newer upstream keyring</changelog>
  <changelog author="fstrba@suse.com" date="1767614400">- Upgrade to 2.18.0
  * Added
    + Add support for Jakarta Mail API in the SMTP appender.
    + Add support for custom Log4j 1.x levels.
    + Add support for adding and retrieving appenders in Log4j 1.x
    bridge.
    + Add support for custom LMAX disruptor WaitStrategy
    configuration.
    + Add support for Apache Extras' RollingFileAppender in Log4j
    1.x bridge.
    + Add MutableThreadContextMapFilter.
    + Add support for 24 colors in highlighting
  * Changed
    + Improves ServiceLoader support on servlet containers.
    + Make the default disruptor WaitStrategy used by Async Loggers
    garbage-free.
    + Do not throw UnsupportedOperationException when JUL
    ApiLogger::setLevel is called.
    + Support Spring 2.6.x.
    + Move perf tests to log4j-core-its
    + Upgrade the Flume Appender to Flume 1.10.0
  * Fixed
    + Fix minor typo #792.
    + Improve validation and reporting of configuration errors.
    + Allow enterprise id to be an OID fragment.
    + Fix problem with non-uppercase custom levels.
    + Avoid ClassCastException in JeroMqManager with custom
    LoggerContextFactory #791.
    + DirectWriteRolloverStrategy should use the current time when
    creating files.
    + Fixes the syslog appender in Log4j 1.x bridge, when used with
    a custom layout.
    + log4j-1.2-api 2.17.2 throws NullPointerException while
    removing appender with name as null.
    + Improve JsonTemplateLayout performance.
    + Fix resolution of non-Log4j properties.
    + Fixes Spring Boot logging system registration in a
    multi-application environment.
    + JAR file containing Log4j configuration isn’t closed.
    + Properties defined in configuration using a value attribute
    (as opposed to element) are read correctly.
    + Syslog appender lacks the SocketOptions setting.
    + Log4j 1.2 bridge should not wrap components unnecessarily.
    + Update 3rd party dependencies for 2.18.0.
    + SizeBasedTriggeringPolicy would fail to rename files properly
    when integer pattern contained a leading zero.
    + Fixes default SslConfiguration, when a custom keystore is
    used.
    + Fixes appender concurrency problems in Log4j 1.x bridge.
    + Fix and test for race condition in FileUtils.mkdir().
    + LocalizedMessage logs misleading errors on the console.
    + Add missing message parameterization in RegexFilter.
    + Add the missing context stack to JsonLayout template.
    + HttpWatcher did not pass credentials when polling.
    + UrlConnectionFactory.createConnection now accepts an
    AuthorizationProvider as a parameter.
    + The DirectWriteRolloverStrategy was not detecting the correct
    index to use during startup.
    + Async Loggers were including the location information by
    default.
    + ClassArbiter’s newBuilder method referenced the wrong class.
    + Don’t use Paths.get() to avoid circular file systems.
    + Fix parsing error, when XInclude is disabled.
    + Fix LevelRangeFilterBuilder to align with log4j1’s behavior.
    + Fixes problem with wrong ANSI escape code for bright colors
    + Log4j 1.2 bridge should generate Log4j 2.x messages based on
    the parameter runtime type.
- Update to 2.19.0
  * Added
    + Add implementation of SLF4J2 fluent API.
    + Add support for SLF4J2 stack-valued MDC.
  * Changed
    + Add getExplicitLevel method to LoggerConfig.
    + Allow PropertySources to be added.
    + Allow Plugins to be injected with the LoggerContext reference.
  * Fixed
    + Add correct manifest entries for OSGi to log4j-jcl
    + Improve support for passwordless keystores.
    + SystemPropertyArbiter was assigning the value as the name.
    + Make JsonTemplateLayout stack trace truncation operate for
    each label block.
    + Fix recursion between Log4j 1.2 LogManager and Category.
    + Fix resolution of properties not starting with log4j2..
    + Logger$PrivateConfig.filter(Level, Marker, String) was
    allocating empty varargs array.
    + Allows a space separated list of style specifiers in the
    %style pattern for consistency with %highlight.
    + Fix NPE in log4j-to-jul in the case the root logger level is
    null.
    + Fix RollingRandomAccessFileAppender with
    DirectWriteRolloverStrategy can’t create the first log file of
    different directory.
    + Generate new SSL certs for testing.
    + Fix ServiceLoaderUtil behavior in the presence of a
    SecurityManager.
    + Fix regression in Rfc5424Layout default values.
    + Harden InstantFormatter against delegate failures.
    + Add async support to Log4jServletFilter.
  * Removed
    + Removed build page in favor of a single build instructions
    file.
    + Remove SLF4J 1.8.x binding.
- Update to 2.20.0
  * Added
    + Add support for timezones in RollingFileAppender date pattern
    + Add LogEvent timestamp to ProducerRecord in KafkaAppender
    + Add PatternLayout support for abbreviating the name of all
    logger components except the 2 rightmost
    + Removes internal field that leaked into public API.
    + Add a LogBuilder#logAndGet() method to emulate the
    Logger#traceEntry method.
  * Changed
    + Simplify site generation
    + Switch the issue tracker from JIRA to GitHub Issues
    + Remove liquibase-log4j2 maven module
    + Fix order of stacktrace elements, that causes cache misses in
    ThrowableProxyHelper.
    + Switch from com.sun.mail to Eclipse Angus.
    + Add Log4j2 Core as default runtime dependency of the
    SLF4J2-to-Log4j2 API bridge.
    + Replace maven-changes-plugin with a custom changelog
    implementation
    + Moved log4j-api and log4j-core artifacts with classifier tests
    to log4j-api-test and log4j-core-test respectively.
  * Deprecated
    + Deprecate support for package scanning for plugins
  * Fixed
    + Copy programmatically supplied location even if
    includeLocation="false".
    + Eliminate status logger warning, when disableAnsi or
    noConsoleNoAnsi is used the style and highlight patterns.
    + Fix detection of location requirements in RewriteAppender.
    + Replace regex with manual code to escape characters in
    Rfc5424Layout.
    + Fix java.sql.Time object formatting in MapMessage
    + Fix previous fire time computation in CronTriggeringPolicy
    + Correct default to not include location for AsyncRootLoggers
    + Make StatusConsoleListener use SimpleLogger internally.
    + Lazily evaluate the level of a SLF4J LogEventBuilder
    + Fixes priority of Legacy system properties, which are now back
    to having higher priority than Environment variables.
    + Protects ServiceLoaderUtil from unchecked ServiceLoader
    exceptions.
    + Fix Configurator#setLevel for internal classes
    + Fix level propagation in Log4jBridgeHandler
    + Disable OsgiServiceLocator if not running in OSGI container.
    + When using a Date Lookup in the file pattern the current time
    should be used.
    + Fixed LogBuilder filtering in the presence of global filters.
- Removed patch:
  * log4j-java8compat.patch
    + not needed with this version
- Modified patch:
  * logging-log4j-Remove-unsupported-EventDataConverter.patch
    + rediff
- Added patch:
  * 0002-Remove-usage-of-toolchains.patch
    + do not use the maven-toolchains-plugin
  * log4j-CVE-2025-68161.patch
    + bsc#1255427, CVE-2025-68161: absent TLS hostname verification
    may allow a man-in-the-middle attack</changelog>
</package>
<package pkgid="bd1d501752681ccde3eb438a45e14c567f63bd78b1d94331022808b555cd1dbe" name="log4j" arch="noarch">
  <version epoch="0" ver="2.20.0" rel="150200.4.33.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1587988800">- Security fix: [bsc#1170535, CVE-2020-9488]
  * Improper validation of certificate with host mismatch in SMTP appender.
- Add log4j-CVE-2020-9488.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1587988801">- Update to 2.13.2 [bsc#1170535, CVE-2020-9488]
  * Bugfixes and minor enhancements:
  - CVE-2020-9488: Improper validation of certificate with host mismatch
    in Apache Log4j SMTP appender.
  - Implement requiresLocation in GelfLayout to reflect whether location
    information is used in the message Pattern.
  - Add option to restore printing timeMillis in the JsonLayout.
  - Initialize pattern processor before triggering policy during reconfiguration.
  - Add information about using a url in log4j.configurationFile.
  - serializeToBytes was checking wrong variable for null.
  - Fix Javadoc for ScriptPatternSelector.
  - Allow trailing and leading spaces in log level.
  - Correct JsonLayout timestamp sorting issue.
  - Allow the file size action to parse the value without being sensitive
    to the current locale.
  - Make YamlLayoutTest more resiliant to environmental differences.
  - Conditionally allocate PluginEntry during PluginCache loading.
  - Add missing includeLocation parameter when creating AsyncLogger.
  - Fix Exceptions when whitespace is in the file path and Java security
    manager is used.
  - Avoid NullPointerException when StackWalker returns null.
  - TimeFilter did not handle daylight saving time transitions and did
    not support a range over 2 days.
  - Provide a Log4j implementation of System.Logger.
  - Added EventLookup to retrieve fields from the log event.
  * Changes:
  - Allow the file extension in the file pattern to be modified during reconfiguration.
  - Add support for specifying an SSL configuration for SmtpAppender.
  - Allow servlet context path to be retrieved without "/".
  - Allow Spring Lookup to return default and active profiles.
  - Allow Spring Boot applications to use composite configuratons.
  - Add ContextDataProviders as an alternative to having to implement a ContextDataInjector.
  - [JDBC] Throw a AppenderLoggingException instead of an NPE in the JDBC database manager.
- Update to 2.13.1
  - Prevent LoggerContext from being garbage collected while being created.
  - Do not log an error if Files.move does not work.
  - Rollover fails when file matches pattern but index is too large.
  - Counter stuck at 10 and overwriting files when leading zeros used in the file pattern count.
  - ClassLoaderContextSelector was not locating the LoggerContext during shutdown.
  - JSON output wrong when using additonal fields.
  - GraalVM does not allow use of MethodHandles.
  - Allow Lookup keys with leading dashes by using a slash as an escape character.
  - ServletContainerInitializer was obtaining the StatusLogger too soon.
  - PluginProcessor should use Messager instead of System.out.
  - MapMessage.getFormattedMesssage() would incorrectly format objects.
  - Always write header on a new OutputStream.
  - An error message in RollingFileAppender uses a placeholder for the name but does not
    specify the name argument in the logging call.
  - NullPointerException when using a custom DirectFileRolloverStrategy without a file name.
  - Add mulit-parameter overloads to LogBuilder.
  - Fixed NullPointerException after reconfiguring via JMX.
  - RollingFileAppender was not rolling on startup if createOnDemand was set to true.
  - Warn if pattern is missing on Routes element. Use default route.
  - Fix lock contention in the classloader using new versions of slf4j without EventData
    on slf4j logger creation.
  - Rollover handles parallel file deletion gracefully.
  - Remove unnecessary EventLogger references from log4j-slf4j18-impl due to removal from slf4j.
  - Fix a memory leak using fully asynchronous logging when the queue is full using the 'discard'
    asynchronous queue full strategy.
  - Fix erroneous log4j-jul recursive logger detection resulting in some no-op JUL loggers and
    'WARN Recursive call to getLogger' being reported by the status logger.
  - PluginCache output is reproducible allowing the annotation processor to produce
    deterministic results.
  - Fix StackLocator.getCallerClass performance in cases where Reflection.getCallerClass
    is not accessible.
  - MutableLogEvent and RingBufferLogEvent avoid StringBuffer and parameter array allocation
    unless reusable messages are used.
  - LoaderUtil.getClassLoaders may discover additional loaders and no longer erroneously returns
    a result with a null element in some environments.
  - CronExpression.getBeforeTime() would sometimes return incorrect result.
  - [JDBC] MS-SQL Server JDBC driver throws SQLServerException when inserting a null value
    for a VARBINARY column.
  - NullPointerException after reconfiguring via JMX.
  - Implement ISO8601_PERIOD_MICROS fixed date format matching ISO8601_PERIOD with support
    for microsecond precision.
  * Changes:
  - Conditionally perform status logging calculations in PluginRegistry.
  - Use LinkedBlockingQueue instead of synchronized collction in StatusConfiguration.
  - Add a retry count attribute to the KafkaAppender.
  - Update log4j-slf4j18-impl slf4j version to 1.8.0-beta4 from 1.8.0-alpha2.
  - Update dependencies.
- Remove patch fixed upstream:
  * logging-log4j-LOG4J2-2745-LOG4J2-2744-slf4j.patch
  * log4j-CVE-2020-9488.patch
- Refresh patch:
  * logging-log4j-Remove-unsupported-EventDataConverter.patch</changelog>
  <changelog author="fstrba@suse.com" date="1587988802">- Do not build the log4j-jpl artifact, as to avoid java-11-only
  features</changelog>
  <changelog author="psimons@suse.com" date="1639137600">- Apply "CVE-2021-44228.patch" to fix a remote code execution
  vulnerability that existed in the LDAP JNDI parser. [bsc#1193611,
  CVE-2021-44228]</changelog>
  <changelog author="psimons@suse.com" date="1639483200">- Apply "disable-jndi-by-default.patch" to disable JNDI support by
  default. There is evidence that the previous upstream fix for
  CVE-2021-44228 did not solve the vulnerability entirely. Since
  JNDI support is ususally not required, upstream recommends this
  route to be completely safe. [bsc#1193611, CVE-2021-44228]</changelog>
  <changelog author="sflees@suse.de" date="1639569600">- Update to 2.16.0 [bsc#1193743, CVE-2021-45046]
  * Features
  - Add JsonTemplateLayout.
  - Create module log4j-mongodb4 to use new major version 4
    MongoDB driver.
  - More flexible configuration of the Disruptor WaitStrategy.
    Thanks to Stepan Gorban.
  * Bugfixes and minor enhancements
  - It was found that the fix to address CVE-2021-44228 in Apache
    Log4j 2.15.0 was incomplete in certain non-default
    configurations.
    This could allows attackers with control over Thread Context
    Map (MDC) input data when the logging configuration uses a
    Pattern Layout with either a Context Lookup (for example,
    $${ctx:loginId}) or a Thread Context Map pattern (%X, %mdc, or
    %MDC) to craft malicious input data using a JNDI Lookup
    pattern resulting in a denial of service (DOS) attack.
    Log4j 2.15.0 restricts JNDI LDAP lookups to localhost by
    default. Note that previous mitigations involving
    configuration such as setting the system property
    log4j2.noFormatMsgLookup to true do NOT mitigate this specific
    vulnerability.
  - Upstream initial fix for bsc#1193611, CVE-2021-44228
  - Numerous other minor bugfixes
  * Drop CVE-2021-44228.patch and disable-jndi-by-default.patch
    included upstream
  * To make the bots happy this stream isn't affected by
    bsc#1193662 CVE-2021-4104 which is 1.X only</changelog>
  <changelog author="david.anes@suse.com" date="1639828800">- Update to 2.17.0 [bsc#1193887, bsc#1193888, CVE-2021-45105]
  * Fixed Bugs
  - Fix string substitution recursion.
  - Limit JNDI to the java protocol only. JNDI will remain disabled
    by default. Rename JNDI enablement property from
    'log4j2.enableJndi' to 'log4j2.enableJndiLookup',
    'log4j2.enableJndiJms', and 'log4j2.enableJndiContextSelector'.
  - Limit JNDI to the java protocol only. JNDI will remain disabled
    by default. The enablement property has been renamed to
    'log4j2.enableJndiJava'
  - Do not declare log4j-api-java9 and log4j-core-java9 as
    dependencies as it causes problems with the Maven enforcer
    plugin.
  - PropertiesConfiguration.parseAppenderFilters NPE when parsing
    properties file filters.
  - Log4j 1.2 bridge for Syslog Appender defaults to port 512
    instead of 514.
  - Log4j 1.2 bridge API hard codes the Syslog protocol to TCP.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639828801">- add upstream signing key to verify source signature</changelog>
  <changelog author="david.anes@suse.com" date="1640779200">- Update to 2.17.1 [bsc#1194127, CVE-2021-44832]
  * Fixed bugs:
  - JdbcAppender now uses JndiManager to access JNDI resources.
    JNDI is only enabled when system property log4j2.enableJndiJdbc
    is set to true.
  - Remove unused method.
  - ExtendedLoggerWrapper.logMessage no longer double-logs when
    location is requested.
  - log4j-to-slf4j no longer re-interpolates formatted message
    contents.
  - Correct SpringLookup package name in Interpolator.
  - log4j-to-slf4j takes the provided MessageFactory into account.
  - Fix MapLookup to lookup MapMessage before DefaultMap.
  - Buffered I/O checked had inverted logic in
    RollingFileAppenderBuidler.
  - Fix NPE when input is null in
    StrSubstitutor.replace(String, Properties).
  - Lookups with no prefix only read values from the configuration
    properties as expected.
  - Reduce ignored package scope of KafkaAppender.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Remove alias log4j:log4j from log4j-1.2-api, since it is not a
  drop-in replacement</changelog>
  <changelog author="david.anes@suse.com" date="1646913600">- Update to 2.17.2
  * New Features
  - Limit loading of configuration via a url to https by default.
  - Require log4j2.Script.enableLanguages to be specified to
    enable scripting for specific languages.
  - Add TB support to FileSize.
  - Add the log4j-to-jul JDK Logging Bridge.
  - Add org.apache.logging.log4j.core.appender.AsyncAppender.getAppenders()
    to more easily port from org.apache.log4j.AsyncAppender.getAllAppenders().
  - Add Configurator.setLevel(Logger, Level),
    setLevel(String, String), and setLevel(Class, Level).
  - Add shorthand syntax for properties configuration format for
    specifying a logger level and appender refs.
  - Add optional additional fields to NoSQLAppender.
  * Fixed Bugs
  - Flag LogManager as initiialized if the LoggerFactory is
    provided as a property.
  - Fix DefaultConfiguration leak in PatternLayout.
  - Document that the Spring Boot Lookup requires the
    log4j-spring-boot dependency.
  - Fix RoutingAppender backcompat and disallow recursive
    evaluation of lookup results outside of configuration
    properties.
  - Fix ThreadContextDataInjector initialization deadlock.
  - Fix substitutions when programmatic configuration is used.
  - OptionConverter could cause a StackOverflowError.
  - Log4j 1.2 bridge class ConsoleAppender should extend
    WriterAppender and provide better compatibility with custom
    appenders.
  - Log4j 1.2 bridge method NDC.inherit(Stack) should not use
    generics to provide source compatibility.
  - Log4j 1.2 bridge class PatternLayout is missing constants
    DEFAULT_CONVERSION_PATTERN and TTCC_CONVERSION_PATTERN.
  - Log4j 1.2 bridge class PropertyConfigurator should implement
    Configurator.
  - Log4j 1.2 bridge interface Configurator doConfigure() methods
    should use LoggerRepository, not LoggerContext.
  - Log4j 1.2 bridge class OptionConverter is missing
    selectAndConfigure() methods.
  - Log4j 1.2 bridge class Category should implement
    AppenderAttachable.
  - Log4j 1.2 bridge method Category.exists(String) should be
    static.
  - Log4j 1.2 bridge methods missing in org.apache.log4j.Category:
    getDefaultHierarchy(), getHierarchy(), getLoggerRepository().
  - Log4j 1.2 bridge class LogManager default constructor should
    be public.
  - Log4j 1.2 bridge interface org.apache.log4j.spi.RendererSupport
    was in the wrong package and incomplete.
  - Log4j 1.2 bridge interfaces missing from package
    org.apache.log4j.spi: ThrowableRenderer,
    ThrowableRendererSupport, TriggeringEventEvaluator.
  - Log4j 1.2 bridge missing class org.apache.log4j.or.RendererMap.
  - Log4j 1.2 bridge PropertiesConfiguration.buildAppender not
    adding filters to custom appender.
  - Log4j 1.2 bridge should ignore case in properties file keys.
  - Log4j 1.2 bridge adds org.apache.log4j.component.helpers.Constants.
  - Log4j 1.2 bridge adds org.apache.log4j.helpers.LogLog.
  - Log4j 1.2 bridge adds org.apache.log4j.helpers.Loader.
  - Log4j 1.2 bridge adds org.apache.log4j.spi.RootLogger.
  - Log4j 1.2 bridge class Category is missing some protected
    instance variables.
  - Log4j 1.2 bridge adds org.apache.log4j.Hierarchy.
  - Log4j 1.2 bridge methods Category.getChainedPriority() and
    getEffectiveLevel() should not be final.
  - Log4j 1.2 bridge adds org.apache.log4j.spi.NOPLoggerRepository
    and NOPLogger.
  - Log4j 1.2 bridge adds org.apache.log4j.spi.DefaultRepositorySelector.
  - Log4j 1.2 bridge implements LogManager.getCurrentLoggers()
    fully.
  - Log4j 1.2 bridge fixes parsing filters in properties
    configuration file #680.
  - Log4j 1.2 bridge missing OptionConverter.instantiateByKey(
    Properties, String, Class, Object).
  - Log4j 1.2 bridge class org.apache.log4j.spi.LoggingEvent
    missing constructors and public instance variable.
  - Log4j 1.2 bridge does not support system properties in log4j.xml.
  - Log4j 1.2 bridge now logs a warning instead of throwing an
    NullPointerException when building a Syslog appender with a
    missing "SyslogHost" param.
  - Log4j 1.2 bridge should allow property and XML attributes to
    start with either an upper-case or lower-case letter.
  - Log4j 1.2 bridge uses the wrong default values for a
    TTCCLayout.
  - Log4j 1.2 bridge throws ClassCastException when using
    SimpleLayout and others.
  - Log4j 1.2 bridge uses the wrong file pattern for rolling file
    appenders.
  - Log4j 1.2 bridge throws ClassCastException when using
    SimpleLayout and others.
  - Log4j 1.2 bridge creates a SocketAppender instead of a
    SyslogAppender.
  - Log4j 1.2 bridge uses some incorrect default property values
    in some appenders.
  - Log4j 1.2 bridge supports the SocketAppender.
  - Log4j 1.2 bridge missing DefaultThrowableRenderer.
  - Log4j 1.2 bridge missing some ThrowableInformation constructors.
  - Log4j 1.2 bridge missing some LocationInfo constructors.
  - Log4j 1.2 bridge missed
  - Log4j 1.2 bridge missed org.apache.log4j.pattern.FormattingInfo.
  - Log4j 1.2 bridge missed org.apache.log4j.pattern.NameAbbreviator.
  - Log4j 1.2 bridge missing UtilLoggingLevel.
  - Log4j 1.2 bridge missing FormattingInfo.
  - Log4j 1.2 bridge missing PatternConverter.
  - Log4j 1.2 bridge missing PatternParser.
  - Log4j 1.2 bridge issues with filters.
  - Log4j 1.2 bridge implements most of DOMConfigurator.
  - JndiManager reverts to 2.17.0 behavior: Read the system
    property for each call.
  - Configurator.setLevel not fetching the correct LoggerContext.
  - Fix DTD error: Add missing ELEMENT for Marker.
  - Fix log4j-jakarta-web service file.
  - AppenderLoggingException logging any exception to a MongoDB
    Appender.
  - Possible NullPointerException in MongoDb4DocumentObject,
    MongoDbDocumentObject, DefaultNoSqlObject.
  - Trim whitespace before parsing a String into an Integer.
  - Log4j 1.2 bridge throws a ClassCastException when logging a
    Map with non-String keys.
  - Log4j 1.2 bridge Check for non-existent appender when parsing
    properties #761. Thanks to Kenny MacLeod.
  - Log4j 1.2 bridge supports global threshold.
  * Changes
  - Change modifier of method
    org.apache.logging.log4j.core.tools.Generate#generate to
    public (was package private) to facilitate automated code
    generation.</changelog>
  <changelog author="fstrba@suse.com" date="1649678400">- Add dependency on standalone javax.activation-api that is not
  included in newer JDKs</changelog>
  <changelog author="fstrba@suse.com" date="1655121600">- Build as multi-release jar.
- Add some logging providers which we can build with the existing
  dependencies and without cycles.</changelog>
  <changelog author="fstrba@suse.com" date="1655121601">- Do not package the *.zip artifacts whose content is part of the
  multi-release jars already
- Added patch:
  * log4j-java8compat.patch
    + maintain ByteBuffer and CharBuffer compatibility with java 8</changelog>
  <changelog author="fstrba@suse.com" date="1655294400">- Build also taglib, jmx-gui, bom, nosql and web modules, on
  platforms where we have the dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1710072000">- Added patch:
  * log4j-jackson-databind.patch
    + do not use previously deprecated methods, removed in
    jackson-databind 2.16.x</changelog>
  <changelog author="fstrba@suse.com" date="1714392000">- The binaries are compatible with java 1.8
- Fetch newer upstream keyring</changelog>
  <changelog author="fstrba@suse.com" date="1767614400">- Upgrade to 2.18.0
  * Added
    + Add support for Jakarta Mail API in the SMTP appender.
    + Add support for custom Log4j 1.x levels.
    + Add support for adding and retrieving appenders in Log4j 1.x
    bridge.
    + Add support for custom LMAX disruptor WaitStrategy
    configuration.
    + Add support for Apache Extras' RollingFileAppender in Log4j
    1.x bridge.
    + Add MutableThreadContextMapFilter.
    + Add support for 24 colors in highlighting
  * Changed
    + Improves ServiceLoader support on servlet containers.
    + Make the default disruptor WaitStrategy used by Async Loggers
    garbage-free.
    + Do not throw UnsupportedOperationException when JUL
    ApiLogger::setLevel is called.
    + Support Spring 2.6.x.
    + Move perf tests to log4j-core-its
    + Upgrade the Flume Appender to Flume 1.10.0
  * Fixed
    + Fix minor typo #792.
    + Improve validation and reporting of configuration errors.
    + Allow enterprise id to be an OID fragment.
    + Fix problem with non-uppercase custom levels.
    + Avoid ClassCastException in JeroMqManager with custom
    LoggerContextFactory #791.
    + DirectWriteRolloverStrategy should use the current time when
    creating files.
    + Fixes the syslog appender in Log4j 1.x bridge, when used with
    a custom layout.
    + log4j-1.2-api 2.17.2 throws NullPointerException while
    removing appender with name as null.
    + Improve JsonTemplateLayout performance.
    + Fix resolution of non-Log4j properties.
    + Fixes Spring Boot logging system registration in a
    multi-application environment.
    + JAR file containing Log4j configuration isn’t closed.
    + Properties defined in configuration using a value attribute
    (as opposed to element) are read correctly.
    + Syslog appender lacks the SocketOptions setting.
    + Log4j 1.2 bridge should not wrap components unnecessarily.
    + Update 3rd party dependencies for 2.18.0.
    + SizeBasedTriggeringPolicy would fail to rename files properly
    when integer pattern contained a leading zero.
    + Fixes default SslConfiguration, when a custom keystore is
    used.
    + Fixes appender concurrency problems in Log4j 1.x bridge.
    + Fix and test for race condition in FileUtils.mkdir().
    + LocalizedMessage logs misleading errors on the console.
    + Add missing message parameterization in RegexFilter.
    + Add the missing context stack to JsonLayout template.
    + HttpWatcher did not pass credentials when polling.
    + UrlConnectionFactory.createConnection now accepts an
    AuthorizationProvider as a parameter.
    + The DirectWriteRolloverStrategy was not detecting the correct
    index to use during startup.
    + Async Loggers were including the location information by
    default.
    + ClassArbiter’s newBuilder method referenced the wrong class.
    + Don’t use Paths.get() to avoid circular file systems.
    + Fix parsing error, when XInclude is disabled.
    + Fix LevelRangeFilterBuilder to align with log4j1’s behavior.
    + Fixes problem with wrong ANSI escape code for bright colors
    + Log4j 1.2 bridge should generate Log4j 2.x messages based on
    the parameter runtime type.
- Update to 2.19.0
  * Added
    + Add implementation of SLF4J2 fluent API.
    + Add support for SLF4J2 stack-valued MDC.
  * Changed
    + Add getExplicitLevel method to LoggerConfig.
    + Allow PropertySources to be added.
    + Allow Plugins to be injected with the LoggerContext reference.
  * Fixed
    + Add correct manifest entries for OSGi to log4j-jcl
    + Improve support for passwordless keystores.
    + SystemPropertyArbiter was assigning the value as the name.
    + Make JsonTemplateLayout stack trace truncation operate for
    each label block.
    + Fix recursion between Log4j 1.2 LogManager and Category.
    + Fix resolution of properties not starting with log4j2..
    + Logger$PrivateConfig.filter(Level, Marker, String) was
    allocating empty varargs array.
    + Allows a space separated list of style specifiers in the
    %style pattern for consistency with %highlight.
    + Fix NPE in log4j-to-jul in the case the root logger level is
    null.
    + Fix RollingRandomAccessFileAppender with
    DirectWriteRolloverStrategy can’t create the first log file of
    different directory.
    + Generate new SSL certs for testing.
    + Fix ServiceLoaderUtil behavior in the presence of a
    SecurityManager.
    + Fix regression in Rfc5424Layout default values.
    + Harden InstantFormatter against delegate failures.
    + Add async support to Log4jServletFilter.
  * Removed
    + Removed build page in favor of a single build instructions
    file.
    + Remove SLF4J 1.8.x binding.
- Update to 2.20.0
  * Added
    + Add support for timezones in RollingFileAppender date pattern
    + Add LogEvent timestamp to ProducerRecord in KafkaAppender
    + Add PatternLayout support for abbreviating the name of all
    logger components except the 2 rightmost
    + Removes internal field that leaked into public API.
    + Add a LogBuilder#logAndGet() method to emulate the
    Logger#traceEntry method.
  * Changed
    + Simplify site generation
    + Switch the issue tracker from JIRA to GitHub Issues
    + Remove liquibase-log4j2 maven module
    + Fix order of stacktrace elements, that causes cache misses in
    ThrowableProxyHelper.
    + Switch from com.sun.mail to Eclipse Angus.
    + Add Log4j2 Core as default runtime dependency of the
    SLF4J2-to-Log4j2 API bridge.
    + Replace maven-changes-plugin with a custom changelog
    implementation
    + Moved log4j-api and log4j-core artifacts with classifier tests
    to log4j-api-test and log4j-core-test respectively.
  * Deprecated
    + Deprecate support for package scanning for plugins
  * Fixed
    + Copy programmatically supplied location even if
    includeLocation="false".
    + Eliminate status logger warning, when disableAnsi or
    noConsoleNoAnsi is used the style and highlight patterns.
    + Fix detection of location requirements in RewriteAppender.
    + Replace regex with manual code to escape characters in
    Rfc5424Layout.
    + Fix java.sql.Time object formatting in MapMessage
    + Fix previous fire time computation in CronTriggeringPolicy
    + Correct default to not include location for AsyncRootLoggers
    + Make StatusConsoleListener use SimpleLogger internally.
    + Lazily evaluate the level of a SLF4J LogEventBuilder
    + Fixes priority of Legacy system properties, which are now back
    to having higher priority than Environment variables.
    + Protects ServiceLoaderUtil from unchecked ServiceLoader
    exceptions.
    + Fix Configurator#setLevel for internal classes
    + Fix level propagation in Log4jBridgeHandler
    + Disable OsgiServiceLocator if not running in OSGI container.
    + When using a Date Lookup in the file pattern the current time
    should be used.
    + Fixed LogBuilder filtering in the presence of global filters.
- Removed patch:
  * log4j-java8compat.patch
    + not needed with this version
- Modified patch:
  * logging-log4j-Remove-unsupported-EventDataConverter.patch
    + rediff
- Added patch:
  * 0002-Remove-usage-of-toolchains.patch
    + do not use the maven-toolchains-plugin
  * log4j-CVE-2025-68161.patch
    + bsc#1255427, CVE-2025-68161: absent TLS hostname verification
    may allow a man-in-the-middle attack</changelog>
  <changelog author="fstrba@suse.com" date="1776168000">- Added patch:
  * log4j-CVE-2026-34477.patch
    + backported upstream fix for bsc#1262050 (CVE-2026-34477):
    man-in-the-middle attack due to incomplete hostname
    verification</changelog>
  <changelog author="fstrba@suse.com" date="1776168001">- Added patches:
  * log4j-CVE-2026-34479.patch
    + backported upstream fix for bsc#1262091 (CVE-2026-34479):
    log processing denial of service due to improper XML escaping
  * log4j-CVE-2026-34480.patch
    + backported upstream fix for bsc#1262092 (CVE-2026-34480):
    invalid XML output causes denial of service in logging
  * log4j-CVE-2026-34481.patch
    + backported upstream fix for bsc#1262093 (CVE-2026-34481):
    denial of service via invalid JSON output</changelog>
</package>
<package pkgid="8e980cee2b1120a61122a0d3389d982f017efff0eabdafd13815bc67e5370d12" name="log4j" arch="src">
  <version epoch="0" ver="2.20.0" rel="150200.4.33.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1587988800">- Security fix: [bsc#1170535, CVE-2020-9488]
  * Improper validation of certificate with host mismatch in SMTP appender.
- Add log4j-CVE-2020-9488.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1587988801">- Update to 2.13.2 [bsc#1170535, CVE-2020-9488]
  * Bugfixes and minor enhancements:
  - CVE-2020-9488: Improper validation of certificate with host mismatch
    in Apache Log4j SMTP appender.
  - Implement requiresLocation in GelfLayout to reflect whether location
    information is used in the message Pattern.
  - Add option to restore printing timeMillis in the JsonLayout.
  - Initialize pattern processor before triggering policy during reconfiguration.
  - Add information about using a url in log4j.configurationFile.
  - serializeToBytes was checking wrong variable for null.
  - Fix Javadoc for ScriptPatternSelector.
  - Allow trailing and leading spaces in log level.
  - Correct JsonLayout timestamp sorting issue.
  - Allow the file size action to parse the value without being sensitive
    to the current locale.
  - Make YamlLayoutTest more resiliant to environmental differences.
  - Conditionally allocate PluginEntry during PluginCache loading.
  - Add missing includeLocation parameter when creating AsyncLogger.
  - Fix Exceptions when whitespace is in the file path and Java security
    manager is used.
  - Avoid NullPointerException when StackWalker returns null.
  - TimeFilter did not handle daylight saving time transitions and did
    not support a range over 2 days.
  - Provide a Log4j implementation of System.Logger.
  - Added EventLookup to retrieve fields from the log event.
  * Changes:
  - Allow the file extension in the file pattern to be modified during reconfiguration.
  - Add support for specifying an SSL configuration for SmtpAppender.
  - Allow servlet context path to be retrieved without "/".
  - Allow Spring Lookup to return default and active profiles.
  - Allow Spring Boot applications to use composite configuratons.
  - Add ContextDataProviders as an alternative to having to implement a ContextDataInjector.
  - [JDBC] Throw a AppenderLoggingException instead of an NPE in the JDBC database manager.
- Update to 2.13.1
  - Prevent LoggerContext from being garbage collected while being created.
  - Do not log an error if Files.move does not work.
  - Rollover fails when file matches pattern but index is too large.
  - Counter stuck at 10 and overwriting files when leading zeros used in the file pattern count.
  - ClassLoaderContextSelector was not locating the LoggerContext during shutdown.
  - JSON output wrong when using additonal fields.
  - GraalVM does not allow use of MethodHandles.
  - Allow Lookup keys with leading dashes by using a slash as an escape character.
  - ServletContainerInitializer was obtaining the StatusLogger too soon.
  - PluginProcessor should use Messager instead of System.out.
  - MapMessage.getFormattedMesssage() would incorrectly format objects.
  - Always write header on a new OutputStream.
  - An error message in RollingFileAppender uses a placeholder for the name but does not
    specify the name argument in the logging call.
  - NullPointerException when using a custom DirectFileRolloverStrategy without a file name.
  - Add mulit-parameter overloads to LogBuilder.
  - Fixed NullPointerException after reconfiguring via JMX.
  - RollingFileAppender was not rolling on startup if createOnDemand was set to true.
  - Warn if pattern is missing on Routes element. Use default route.
  - Fix lock contention in the classloader using new versions of slf4j without EventData
    on slf4j logger creation.
  - Rollover handles parallel file deletion gracefully.
  - Remove unnecessary EventLogger references from log4j-slf4j18-impl due to removal from slf4j.
  - Fix a memory leak using fully asynchronous logging when the queue is full using the 'discard'
    asynchronous queue full strategy.
  - Fix erroneous log4j-jul recursive logger detection resulting in some no-op JUL loggers and
    'WARN Recursive call to getLogger' being reported by the status logger.
  - PluginCache output is reproducible allowing the annotation processor to produce
    deterministic results.
  - Fix StackLocator.getCallerClass performance in cases where Reflection.getCallerClass
    is not accessible.
  - MutableLogEvent and RingBufferLogEvent avoid StringBuffer and parameter array allocation
    unless reusable messages are used.
  - LoaderUtil.getClassLoaders may discover additional loaders and no longer erroneously returns
    a result with a null element in some environments.
  - CronExpression.getBeforeTime() would sometimes return incorrect result.
  - [JDBC] MS-SQL Server JDBC driver throws SQLServerException when inserting a null value
    for a VARBINARY column.
  - NullPointerException after reconfiguring via JMX.
  - Implement ISO8601_PERIOD_MICROS fixed date format matching ISO8601_PERIOD with support
    for microsecond precision.
  * Changes:
  - Conditionally perform status logging calculations in PluginRegistry.
  - Use LinkedBlockingQueue instead of synchronized collction in StatusConfiguration.
  - Add a retry count attribute to the KafkaAppender.
  - Update log4j-slf4j18-impl slf4j version to 1.8.0-beta4 from 1.8.0-alpha2.
  - Update dependencies.
- Remove patch fixed upstream:
  * logging-log4j-LOG4J2-2745-LOG4J2-2744-slf4j.patch
  * log4j-CVE-2020-9488.patch
- Refresh patch:
  * logging-log4j-Remove-unsupported-EventDataConverter.patch</changelog>
  <changelog author="fstrba@suse.com" date="1587988802">- Do not build the log4j-jpl artifact, as to avoid java-11-only
  features</changelog>
  <changelog author="psimons@suse.com" date="1639137600">- Apply "CVE-2021-44228.patch" to fix a remote code execution
  vulnerability that existed in the LDAP JNDI parser. [bsc#1193611,
  CVE-2021-44228]</changelog>
  <changelog author="psimons@suse.com" date="1639483200">- Apply "disable-jndi-by-default.patch" to disable JNDI support by
  default. There is evidence that the previous upstream fix for
  CVE-2021-44228 did not solve the vulnerability entirely. Since
  JNDI support is ususally not required, upstream recommends this
  route to be completely safe. [bsc#1193611, CVE-2021-44228]</changelog>
  <changelog author="sflees@suse.de" date="1639569600">- Update to 2.16.0 [bsc#1193743, CVE-2021-45046]
  * Features
  - Add JsonTemplateLayout.
  - Create module log4j-mongodb4 to use new major version 4
    MongoDB driver.
  - More flexible configuration of the Disruptor WaitStrategy.
    Thanks to Stepan Gorban.
  * Bugfixes and minor enhancements
  - It was found that the fix to address CVE-2021-44228 in Apache
    Log4j 2.15.0 was incomplete in certain non-default
    configurations.
    This could allows attackers with control over Thread Context
    Map (MDC) input data when the logging configuration uses a
    Pattern Layout with either a Context Lookup (for example,
    $${ctx:loginId}) or a Thread Context Map pattern (%X, %mdc, or
    %MDC) to craft malicious input data using a JNDI Lookup
    pattern resulting in a denial of service (DOS) attack.
    Log4j 2.15.0 restricts JNDI LDAP lookups to localhost by
    default. Note that previous mitigations involving
    configuration such as setting the system property
    log4j2.noFormatMsgLookup to true do NOT mitigate this specific
    vulnerability.
  - Upstream initial fix for bsc#1193611, CVE-2021-44228
  - Numerous other minor bugfixes
  * Drop CVE-2021-44228.patch and disable-jndi-by-default.patch
    included upstream
  * To make the bots happy this stream isn't affected by
    bsc#1193662 CVE-2021-4104 which is 1.X only</changelog>
  <changelog author="david.anes@suse.com" date="1639828800">- Update to 2.17.0 [bsc#1193887, bsc#1193888, CVE-2021-45105]
  * Fixed Bugs
  - Fix string substitution recursion.
  - Limit JNDI to the java protocol only. JNDI will remain disabled
    by default. Rename JNDI enablement property from
    'log4j2.enableJndi' to 'log4j2.enableJndiLookup',
    'log4j2.enableJndiJms', and 'log4j2.enableJndiContextSelector'.
  - Limit JNDI to the java protocol only. JNDI will remain disabled
    by default. The enablement property has been renamed to
    'log4j2.enableJndiJava'
  - Do not declare log4j-api-java9 and log4j-core-java9 as
    dependencies as it causes problems with the Maven enforcer
    plugin.
  - PropertiesConfiguration.parseAppenderFilters NPE when parsing
    properties file filters.
  - Log4j 1.2 bridge for Syslog Appender defaults to port 512
    instead of 514.
  - Log4j 1.2 bridge API hard codes the Syslog protocol to TCP.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639828801">- add upstream signing key to verify source signature</changelog>
  <changelog author="david.anes@suse.com" date="1640779200">- Update to 2.17.1 [bsc#1194127, CVE-2021-44832]
  * Fixed bugs:
  - JdbcAppender now uses JndiManager to access JNDI resources.
    JNDI is only enabled when system property log4j2.enableJndiJdbc
    is set to true.
  - Remove unused method.
  - ExtendedLoggerWrapper.logMessage no longer double-logs when
    location is requested.
  - log4j-to-slf4j no longer re-interpolates formatted message
    contents.
  - Correct SpringLookup package name in Interpolator.
  - log4j-to-slf4j takes the provided MessageFactory into account.
  - Fix MapLookup to lookup MapMessage before DefaultMap.
  - Buffered I/O checked had inverted logic in
    RollingFileAppenderBuidler.
  - Fix NPE when input is null in
    StrSubstitutor.replace(String, Properties).
  - Lookups with no prefix only read values from the configuration
    properties as expected.
  - Reduce ignored package scope of KafkaAppender.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Remove alias log4j:log4j from log4j-1.2-api, since it is not a
  drop-in replacement</changelog>
  <changelog author="david.anes@suse.com" date="1646913600">- Update to 2.17.2
  * New Features
  - Limit loading of configuration via a url to https by default.
  - Require log4j2.Script.enableLanguages to be specified to
    enable scripting for specific languages.
  - Add TB support to FileSize.
  - Add the log4j-to-jul JDK Logging Bridge.
  - Add org.apache.logging.log4j.core.appender.AsyncAppender.getAppenders()
    to more easily port from org.apache.log4j.AsyncAppender.getAllAppenders().
  - Add Configurator.setLevel(Logger, Level),
    setLevel(String, String), and setLevel(Class, Level).
  - Add shorthand syntax for properties configuration format for
    specifying a logger level and appender refs.
  - Add optional additional fields to NoSQLAppender.
  * Fixed Bugs
  - Flag LogManager as initiialized if the LoggerFactory is
    provided as a property.
  - Fix DefaultConfiguration leak in PatternLayout.
  - Document that the Spring Boot Lookup requires the
    log4j-spring-boot dependency.
  - Fix RoutingAppender backcompat and disallow recursive
    evaluation of lookup results outside of configuration
    properties.
  - Fix ThreadContextDataInjector initialization deadlock.
  - Fix substitutions when programmatic configuration is used.
  - OptionConverter could cause a StackOverflowError.
  - Log4j 1.2 bridge class ConsoleAppender should extend
    WriterAppender and provide better compatibility with custom
    appenders.
  - Log4j 1.2 bridge method NDC.inherit(Stack) should not use
    generics to provide source compatibility.
  - Log4j 1.2 bridge class PatternLayout is missing constants
    DEFAULT_CONVERSION_PATTERN and TTCC_CONVERSION_PATTERN.
  - Log4j 1.2 bridge class PropertyConfigurator should implement
    Configurator.
  - Log4j 1.2 bridge interface Configurator doConfigure() methods
    should use LoggerRepository, not LoggerContext.
  - Log4j 1.2 bridge class OptionConverter is missing
    selectAndConfigure() methods.
  - Log4j 1.2 bridge class Category should implement
    AppenderAttachable.
  - Log4j 1.2 bridge method Category.exists(String) should be
    static.
  - Log4j 1.2 bridge methods missing in org.apache.log4j.Category:
    getDefaultHierarchy(), getHierarchy(), getLoggerRepository().
  - Log4j 1.2 bridge class LogManager default constructor should
    be public.
  - Log4j 1.2 bridge interface org.apache.log4j.spi.RendererSupport
    was in the wrong package and incomplete.
  - Log4j 1.2 bridge interfaces missing from package
    org.apache.log4j.spi: ThrowableRenderer,
    ThrowableRendererSupport, TriggeringEventEvaluator.
  - Log4j 1.2 bridge missing class org.apache.log4j.or.RendererMap.
  - Log4j 1.2 bridge PropertiesConfiguration.buildAppender not
    adding filters to custom appender.
  - Log4j 1.2 bridge should ignore case in properties file keys.
  - Log4j 1.2 bridge adds org.apache.log4j.component.helpers.Constants.
  - Log4j 1.2 bridge adds org.apache.log4j.helpers.LogLog.
  - Log4j 1.2 bridge adds org.apache.log4j.helpers.Loader.
  - Log4j 1.2 bridge adds org.apache.log4j.spi.RootLogger.
  - Log4j 1.2 bridge class Category is missing some protected
    instance variables.
  - Log4j 1.2 bridge adds org.apache.log4j.Hierarchy.
  - Log4j 1.2 bridge methods Category.getChainedPriority() and
    getEffectiveLevel() should not be final.
  - Log4j 1.2 bridge adds org.apache.log4j.spi.NOPLoggerRepository
    and NOPLogger.
  - Log4j 1.2 bridge adds org.apache.log4j.spi.DefaultRepositorySelector.
  - Log4j 1.2 bridge implements LogManager.getCurrentLoggers()
    fully.
  - Log4j 1.2 bridge fixes parsing filters in properties
    configuration file #680.
  - Log4j 1.2 bridge missing OptionConverter.instantiateByKey(
    Properties, String, Class, Object).
  - Log4j 1.2 bridge class org.apache.log4j.spi.LoggingEvent
    missing constructors and public instance variable.
  - Log4j 1.2 bridge does not support system properties in log4j.xml.
  - Log4j 1.2 bridge now logs a warning instead of throwing an
    NullPointerException when building a Syslog appender with a
    missing "SyslogHost" param.
  - Log4j 1.2 bridge should allow property and XML attributes to
    start with either an upper-case or lower-case letter.
  - Log4j 1.2 bridge uses the wrong default values for a
    TTCCLayout.
  - Log4j 1.2 bridge throws ClassCastException when using
    SimpleLayout and others.
  - Log4j 1.2 bridge uses the wrong file pattern for rolling file
    appenders.
  - Log4j 1.2 bridge throws ClassCastException when using
    SimpleLayout and others.
  - Log4j 1.2 bridge creates a SocketAppender instead of a
    SyslogAppender.
  - Log4j 1.2 bridge uses some incorrect default property values
    in some appenders.
  - Log4j 1.2 bridge supports the SocketAppender.
  - Log4j 1.2 bridge missing DefaultThrowableRenderer.
  - Log4j 1.2 bridge missing some ThrowableInformation constructors.
  - Log4j 1.2 bridge missing some LocationInfo constructors.
  - Log4j 1.2 bridge missed
  - Log4j 1.2 bridge missed org.apache.log4j.pattern.FormattingInfo.
  - Log4j 1.2 bridge missed org.apache.log4j.pattern.NameAbbreviator.
  - Log4j 1.2 bridge missing UtilLoggingLevel.
  - Log4j 1.2 bridge missing FormattingInfo.
  - Log4j 1.2 bridge missing PatternConverter.
  - Log4j 1.2 bridge missing PatternParser.
  - Log4j 1.2 bridge issues with filters.
  - Log4j 1.2 bridge implements most of DOMConfigurator.
  - JndiManager reverts to 2.17.0 behavior: Read the system
    property for each call.
  - Configurator.setLevel not fetching the correct LoggerContext.
  - Fix DTD error: Add missing ELEMENT for Marker.
  - Fix log4j-jakarta-web service file.
  - AppenderLoggingException logging any exception to a MongoDB
    Appender.
  - Possible NullPointerException in MongoDb4DocumentObject,
    MongoDbDocumentObject, DefaultNoSqlObject.
  - Trim whitespace before parsing a String into an Integer.
  - Log4j 1.2 bridge throws a ClassCastException when logging a
    Map with non-String keys.
  - Log4j 1.2 bridge Check for non-existent appender when parsing
    properties #761. Thanks to Kenny MacLeod.
  - Log4j 1.2 bridge supports global threshold.
  * Changes
  - Change modifier of method
    org.apache.logging.log4j.core.tools.Generate#generate to
    public (was package private) to facilitate automated code
    generation.</changelog>
  <changelog author="fstrba@suse.com" date="1649678400">- Add dependency on standalone javax.activation-api that is not
  included in newer JDKs</changelog>
  <changelog author="fstrba@suse.com" date="1655121600">- Build as multi-release jar.
- Add some logging providers which we can build with the existing
  dependencies and without cycles.</changelog>
  <changelog author="fstrba@suse.com" date="1655121601">- Do not package the *.zip artifacts whose content is part of the
  multi-release jars already
- Added patch:
  * log4j-java8compat.patch
    + maintain ByteBuffer and CharBuffer compatibility with java 8</changelog>
  <changelog author="fstrba@suse.com" date="1655294400">- Build also taglib, jmx-gui, bom, nosql and web modules, on
  platforms where we have the dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1710072000">- Added patch:
  * log4j-jackson-databind.patch
    + do not use previously deprecated methods, removed in
    jackson-databind 2.16.x</changelog>
  <changelog author="fstrba@suse.com" date="1714392000">- The binaries are compatible with java 1.8
- Fetch newer upstream keyring</changelog>
  <changelog author="fstrba@suse.com" date="1767614400">- Upgrade to 2.18.0
  * Added
    + Add support for Jakarta Mail API in the SMTP appender.
    + Add support for custom Log4j 1.x levels.
    + Add support for adding and retrieving appenders in Log4j 1.x
    bridge.
    + Add support for custom LMAX disruptor WaitStrategy
    configuration.
    + Add support for Apache Extras' RollingFileAppender in Log4j
    1.x bridge.
    + Add MutableThreadContextMapFilter.
    + Add support for 24 colors in highlighting
  * Changed
    + Improves ServiceLoader support on servlet containers.
    + Make the default disruptor WaitStrategy used by Async Loggers
    garbage-free.
    + Do not throw UnsupportedOperationException when JUL
    ApiLogger::setLevel is called.
    + Support Spring 2.6.x.
    + Move perf tests to log4j-core-its
    + Upgrade the Flume Appender to Flume 1.10.0
  * Fixed
    + Fix minor typo #792.
    + Improve validation and reporting of configuration errors.
    + Allow enterprise id to be an OID fragment.
    + Fix problem with non-uppercase custom levels.
    + Avoid ClassCastException in JeroMqManager with custom
    LoggerContextFactory #791.
    + DirectWriteRolloverStrategy should use the current time when
    creating files.
    + Fixes the syslog appender in Log4j 1.x bridge, when used with
    a custom layout.
    + log4j-1.2-api 2.17.2 throws NullPointerException while
    removing appender with name as null.
    + Improve JsonTemplateLayout performance.
    + Fix resolution of non-Log4j properties.
    + Fixes Spring Boot logging system registration in a
    multi-application environment.
    + JAR file containing Log4j configuration isn’t closed.
    + Properties defined in configuration using a value attribute
    (as opposed to element) are read correctly.
    + Syslog appender lacks the SocketOptions setting.
    + Log4j 1.2 bridge should not wrap components unnecessarily.
    + Update 3rd party dependencies for 2.18.0.
    + SizeBasedTriggeringPolicy would fail to rename files properly
    when integer pattern contained a leading zero.
    + Fixes default SslConfiguration, when a custom keystore is
    used.
    + Fixes appender concurrency problems in Log4j 1.x bridge.
    + Fix and test for race condition in FileUtils.mkdir().
    + LocalizedMessage logs misleading errors on the console.
    + Add missing message parameterization in RegexFilter.
    + Add the missing context stack to JsonLayout template.
    + HttpWatcher did not pass credentials when polling.
    + UrlConnectionFactory.createConnection now accepts an
    AuthorizationProvider as a parameter.
    + The DirectWriteRolloverStrategy was not detecting the correct
    index to use during startup.
    + Async Loggers were including the location information by
    default.
    + ClassArbiter’s newBuilder method referenced the wrong class.
    + Don’t use Paths.get() to avoid circular file systems.
    + Fix parsing error, when XInclude is disabled.
    + Fix LevelRangeFilterBuilder to align with log4j1’s behavior.
    + Fixes problem with wrong ANSI escape code for bright colors
    + Log4j 1.2 bridge should generate Log4j 2.x messages based on
    the parameter runtime type.
- Update to 2.19.0
  * Added
    + Add implementation of SLF4J2 fluent API.
    + Add support for SLF4J2 stack-valued MDC.
  * Changed
    + Add getExplicitLevel method to LoggerConfig.
    + Allow PropertySources to be added.
    + Allow Plugins to be injected with the LoggerContext reference.
  * Fixed
    + Add correct manifest entries for OSGi to log4j-jcl
    + Improve support for passwordless keystores.
    + SystemPropertyArbiter was assigning the value as the name.
    + Make JsonTemplateLayout stack trace truncation operate for
    each label block.
    + Fix recursion between Log4j 1.2 LogManager and Category.
    + Fix resolution of properties not starting with log4j2..
    + Logger$PrivateConfig.filter(Level, Marker, String) was
    allocating empty varargs array.
    + Allows a space separated list of style specifiers in the
    %style pattern for consistency with %highlight.
    + Fix NPE in log4j-to-jul in the case the root logger level is
    null.
    + Fix RollingRandomAccessFileAppender with
    DirectWriteRolloverStrategy can’t create the first log file of
    different directory.
    + Generate new SSL certs for testing.
    + Fix ServiceLoaderUtil behavior in the presence of a
    SecurityManager.
    + Fix regression in Rfc5424Layout default values.
    + Harden InstantFormatter against delegate failures.
    + Add async support to Log4jServletFilter.
  * Removed
    + Removed build page in favor of a single build instructions
    file.
    + Remove SLF4J 1.8.x binding.
- Update to 2.20.0
  * Added
    + Add support for timezones in RollingFileAppender date pattern
    + Add LogEvent timestamp to ProducerRecord in KafkaAppender
    + Add PatternLayout support for abbreviating the name of all
    logger components except the 2 rightmost
    + Removes internal field that leaked into public API.
    + Add a LogBuilder#logAndGet() method to emulate the
    Logger#traceEntry method.
  * Changed
    + Simplify site generation
    + Switch the issue tracker from JIRA to GitHub Issues
    + Remove liquibase-log4j2 maven module
    + Fix order of stacktrace elements, that causes cache misses in
    ThrowableProxyHelper.
    + Switch from com.sun.mail to Eclipse Angus.
    + Add Log4j2 Core as default runtime dependency of the
    SLF4J2-to-Log4j2 API bridge.
    + Replace maven-changes-plugin with a custom changelog
    implementation
    + Moved log4j-api and log4j-core artifacts with classifier tests
    to log4j-api-test and log4j-core-test respectively.
  * Deprecated
    + Deprecate support for package scanning for plugins
  * Fixed
    + Copy programmatically supplied location even if
    includeLocation="false".
    + Eliminate status logger warning, when disableAnsi or
    noConsoleNoAnsi is used the style and highlight patterns.
    + Fix detection of location requirements in RewriteAppender.
    + Replace regex with manual code to escape characters in
    Rfc5424Layout.
    + Fix java.sql.Time object formatting in MapMessage
    + Fix previous fire time computation in CronTriggeringPolicy
    + Correct default to not include location for AsyncRootLoggers
    + Make StatusConsoleListener use SimpleLogger internally.
    + Lazily evaluate the level of a SLF4J LogEventBuilder
    + Fixes priority of Legacy system properties, which are now back
    to having higher priority than Environment variables.
    + Protects ServiceLoaderUtil from unchecked ServiceLoader
    exceptions.
    + Fix Configurator#setLevel for internal classes
    + Fix level propagation in Log4jBridgeHandler
    + Disable OsgiServiceLocator if not running in OSGI container.
    + When using a Date Lookup in the file pattern the current time
    should be used.
    + Fixed LogBuilder filtering in the presence of global filters.
- Removed patch:
  * log4j-java8compat.patch
    + not needed with this version
- Modified patch:
  * logging-log4j-Remove-unsupported-EventDataConverter.patch
    + rediff
- Added patch:
  * 0002-Remove-usage-of-toolchains.patch
    + do not use the maven-toolchains-plugin
  * log4j-CVE-2025-68161.patch
    + bsc#1255427, CVE-2025-68161: absent TLS hostname verification
    may allow a man-in-the-middle attack</changelog>
  <changelog author="fstrba@suse.com" date="1776168000">- Added patch:
  * log4j-CVE-2026-34477.patch
    + backported upstream fix for bsc#1262050 (CVE-2026-34477):
    man-in-the-middle attack due to incomplete hostname
    verification</changelog>
  <changelog author="fstrba@suse.com" date="1776168001">- Added patches:
  * log4j-CVE-2026-34479.patch
    + backported upstream fix for bsc#1262091 (CVE-2026-34479):
    log processing denial of service due to improper XML escaping
  * log4j-CVE-2026-34480.patch
    + backported upstream fix for bsc#1262092 (CVE-2026-34480):
    invalid XML output causes denial of service in logging
  * log4j-CVE-2026-34481.patch
    + backported upstream fix for bsc#1262093 (CVE-2026-34481):
    denial of service via invalid JSON output</changelog>
</package>
<package pkgid="95e9a61f65bfdb0f876b259de626a33e0e2c775f52c30f6b177cb858fc170575" name="log4j-javadoc" arch="noarch">
  <version epoch="0" ver="2.20.0" rel="150200.4.30.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1579608000">- Update to 2.13.0 [bsc#1159646, CVE-2019-17571]
  * Bugfixes and minor enhancements:
  - CVE-2019-17571: Remote code execution: Deserialization of untrusted
    data in SocketServer
  - Log4j 2 now requires Java 8 or higher to build and run.
  - Better integration with Spring Boot by providing access to Spring
    variables in Log4j 2 configuration files and allowing Log4j 2 system
    properties to be defined in the Spring configuration.
  - Support for accessing Kubernetes information via a Log4j 2 Lookup.
  - The Gelf Layout now allows the message to be formatted using a
    PatternLayout pattern.
  - Due to a break in compatibility in the SLF4J binding, Log4j now
    ships with two versions of the SLF4J to Log4j adapters.
  - log4j-slf4j-impl should be used with SLF4J 1.7.x and earlier and
    log4j-slf4j18-impl should be used with SLF4J 1.8.x and later.
  - Note that the XML, JSON and YAML formats changed in the 2.11.0 release:
    they no longer have the "timeMillis" attribute and instead have an
    "Instant" element with "epochSecond" and "nanoOfSecond" attributes.
  - The Log4j 2.13.0 API, as well as many core components, maintains
    binary compatibility with previous releases.
  * New Features
  - Add ThreadContext.putIfNotNull method.
  - Add a Level Patttern Selector.
  - Add experimental support for Log4j 1 configuration files.
  - Add the ability to lookup Kubernetes attributes in the Log4j
    configuration. Allow Log4j properties to be retrieved from the
    Spring environment if it is available.
  - Allow Spring Boot application properties to be accessed in the
    Log4j 2 configuration. Add lower and upper case Lookups.
  - Add builder pattern to Logger interface.
  * Fixed Bugs
  - Prevent recursive calls to java.util.LogManager.getLogger().
  - Added try/finally around event.execute() for RingBufferLogEventHandler
    to clear memory correctly in case of exception/error.
  - Wrong java version check in ThreadNameCachingStrategy.
  - Use a less confusing name for the CompositeConfiguration source.
  - Add setKey method to Kafka Appender Builder.
  - ArrayIndexOutOfBoundsException could occur with MAC address longer
    than 6 bytes.
  - The rolling file appenders would fail to compress the file after
    rollover if the file name matched the file pattern.
  - @PluginValue does not support attribute names besides "value".
  - Validation blocks definition of script in properties configuration.
  - Set result of rename action to true if file was copied.
  - Add automatic module names where missing.
  - OutputStreamAppender.Builder ignores setFilter().
  - Prevent a memory leak when async loggers throw errors.
  * Changes
  - Update Jackson to 2.9.10.
  - Allow message portion of GELF layout to be formatted using a PatternLayout.
  - Allow ThreadContext attributes to be explicitly included or excluded in the GelfLayout.</changelog>
  <changelog author="fstrba@suse.com" date="1582718400">- Added patches:
  * logging-log4j-LOG4J2-2745-LOG4J2-2744-slf4j.patch
  * logging-log4j-Remove-unsupported-EventDataConverter.patch
    + fix build with newer slf4j</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1587988800">- Security fix: [bsc#1170535, CVE-2020-9488]
  * Improper validation of certificate with host mismatch in SMTP appender.
- Add log4j-CVE-2020-9488.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1587988801">- Update to 2.13.2 [bsc#1170535, CVE-2020-9488]
  * Bugfixes and minor enhancements:
  - CVE-2020-9488: Improper validation of certificate with host mismatch
    in Apache Log4j SMTP appender.
  - Implement requiresLocation in GelfLayout to reflect whether location
    information is used in the message Pattern.
  - Add option to restore printing timeMillis in the JsonLayout.
  - Initialize pattern processor before triggering policy during reconfiguration.
  - Add information about using a url in log4j.configurationFile.
  - serializeToBytes was checking wrong variable for null.
  - Fix Javadoc for ScriptPatternSelector.
  - Allow trailing and leading spaces in log level.
  - Correct JsonLayout timestamp sorting issue.
  - Allow the file size action to parse the value without being sensitive
    to the current locale.
  - Make YamlLayoutTest more resiliant to environmental differences.
  - Conditionally allocate PluginEntry during PluginCache loading.
  - Add missing includeLocation parameter when creating AsyncLogger.
  - Fix Exceptions when whitespace is in the file path and Java security
    manager is used.
  - Avoid NullPointerException when StackWalker returns null.
  - TimeFilter did not handle daylight saving time transitions and did
    not support a range over 2 days.
  - Provide a Log4j implementation of System.Logger.
  - Added EventLookup to retrieve fields from the log event.
  * Changes:
  - Allow the file extension in the file pattern to be modified during reconfiguration.
  - Add support for specifying an SSL configuration for SmtpAppender.
  - Allow servlet context path to be retrieved without "/".
  - Allow Spring Lookup to return default and active profiles.
  - Allow Spring Boot applications to use composite configuratons.
  - Add ContextDataProviders as an alternative to having to implement a ContextDataInjector.
  - [JDBC] Throw a AppenderLoggingException instead of an NPE in the JDBC database manager.
- Update to 2.13.1
  - Prevent LoggerContext from being garbage collected while being created.
  - Do not log an error if Files.move does not work.
  - Rollover fails when file matches pattern but index is too large.
  - Counter stuck at 10 and overwriting files when leading zeros used in the file pattern count.
  - ClassLoaderContextSelector was not locating the LoggerContext during shutdown.
  - JSON output wrong when using additonal fields.
  - GraalVM does not allow use of MethodHandles.
  - Allow Lookup keys with leading dashes by using a slash as an escape character.
  - ServletContainerInitializer was obtaining the StatusLogger too soon.
  - PluginProcessor should use Messager instead of System.out.
  - MapMessage.getFormattedMesssage() would incorrectly format objects.
  - Always write header on a new OutputStream.
  - An error message in RollingFileAppender uses a placeholder for the name but does not
    specify the name argument in the logging call.
  - NullPointerException when using a custom DirectFileRolloverStrategy without a file name.
  - Add mulit-parameter overloads to LogBuilder.
  - Fixed NullPointerException after reconfiguring via JMX.
  - RollingFileAppender was not rolling on startup if createOnDemand was set to true.
  - Warn if pattern is missing on Routes element. Use default route.
  - Fix lock contention in the classloader using new versions of slf4j without EventData
    on slf4j logger creation.
  - Rollover handles parallel file deletion gracefully.
  - Remove unnecessary EventLogger references from log4j-slf4j18-impl due to removal from slf4j.
  - Fix a memory leak using fully asynchronous logging when the queue is full using the 'discard'
    asynchronous queue full strategy.
  - Fix erroneous log4j-jul recursive logger detection resulting in some no-op JUL loggers and
    'WARN Recursive call to getLogger' being reported by the status logger.
  - PluginCache output is reproducible allowing the annotation processor to produce
    deterministic results.
  - Fix StackLocator.getCallerClass performance in cases where Reflection.getCallerClass
    is not accessible.
  - MutableLogEvent and RingBufferLogEvent avoid StringBuffer and parameter array allocation
    unless reusable messages are used.
  - LoaderUtil.getClassLoaders may discover additional loaders and no longer erroneously returns
    a result with a null element in some environments.
  - CronExpression.getBeforeTime() would sometimes return incorrect result.
  - [JDBC] MS-SQL Server JDBC driver throws SQLServerException when inserting a null value
    for a VARBINARY column.
  - NullPointerException after reconfiguring via JMX.
  - Implement ISO8601_PERIOD_MICROS fixed date format matching ISO8601_PERIOD with support
    for microsecond precision.
  * Changes:
  - Conditionally perform status logging calculations in PluginRegistry.
  - Use LinkedBlockingQueue instead of synchronized collction in StatusConfiguration.
  - Add a retry count attribute to the KafkaAppender.
  - Update log4j-slf4j18-impl slf4j version to 1.8.0-beta4 from 1.8.0-alpha2.
  - Update dependencies.
- Remove patch fixed upstream:
  * logging-log4j-LOG4J2-2745-LOG4J2-2744-slf4j.patch
  * log4j-CVE-2020-9488.patch
- Refresh patch:
  * logging-log4j-Remove-unsupported-EventDataConverter.patch</changelog>
  <changelog author="fstrba@suse.com" date="1587988802">- Do not build the log4j-jpl artifact, as to avoid java-11-only
  features</changelog>
  <changelog author="psimons@suse.com" date="1639137600">- Apply "CVE-2021-44228.patch" to fix a remote code execution
  vulnerability that existed in the LDAP JNDI parser. [bsc#1193611,
  CVE-2021-44228]</changelog>
  <changelog author="psimons@suse.com" date="1639483200">- Apply "disable-jndi-by-default.patch" to disable JNDI support by
  default. There is evidence that the previous upstream fix for
  CVE-2021-44228 did not solve the vulnerability entirely. Since
  JNDI support is ususally not required, upstream recommends this
  route to be completely safe. [bsc#1193611, CVE-2021-44228]</changelog>
  <changelog author="sflees@suse.de" date="1639569600">- Update to 2.16.0 [bsc#1193743, CVE-2021-45046]
  * Features
  - Add JsonTemplateLayout.
  - Create module log4j-mongodb4 to use new major version 4
    MongoDB driver.
  - More flexible configuration of the Disruptor WaitStrategy.
    Thanks to Stepan Gorban.
  * Bugfixes and minor enhancements
  - It was found that the fix to address CVE-2021-44228 in Apache
    Log4j 2.15.0 was incomplete in certain non-default
    configurations.
    This could allows attackers with control over Thread Context
    Map (MDC) input data when the logging configuration uses a
    Pattern Layout with either a Context Lookup (for example,
    $${ctx:loginId}) or a Thread Context Map pattern (%X, %mdc, or
    %MDC) to craft malicious input data using a JNDI Lookup
    pattern resulting in a denial of service (DOS) attack.
    Log4j 2.15.0 restricts JNDI LDAP lookups to localhost by
    default. Note that previous mitigations involving
    configuration such as setting the system property
    log4j2.noFormatMsgLookup to true do NOT mitigate this specific
    vulnerability.
  - Upstream initial fix for bsc#1193611, CVE-2021-44228
  - Numerous other minor bugfixes
  * Drop CVE-2021-44228.patch and disable-jndi-by-default.patch
    included upstream
  * To make the bots happy this stream isn't affected by
    bsc#1193662 CVE-2021-4104 which is 1.X only</changelog>
  <changelog author="david.anes@suse.com" date="1639828800">- Update to 2.17.0 [bsc#1193887, bsc#1193888, CVE-2021-45105]
  * Fixed Bugs
  - Fix string substitution recursion.
  - Limit JNDI to the java protocol only. JNDI will remain disabled
    by default. Rename JNDI enablement property from
    'log4j2.enableJndi' to 'log4j2.enableJndiLookup',
    'log4j2.enableJndiJms', and 'log4j2.enableJndiContextSelector'.
  - Limit JNDI to the java protocol only. JNDI will remain disabled
    by default. The enablement property has been renamed to
    'log4j2.enableJndiJava'
  - Do not declare log4j-api-java9 and log4j-core-java9 as
    dependencies as it causes problems with the Maven enforcer
    plugin.
  - PropertiesConfiguration.parseAppenderFilters NPE when parsing
    properties file filters.
  - Log4j 1.2 bridge for Syslog Appender defaults to port 512
    instead of 514.
  - Log4j 1.2 bridge API hard codes the Syslog protocol to TCP.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639828801">- add upstream signing key to verify source signature</changelog>
  <changelog author="david.anes@suse.com" date="1640779200">- Update to 2.17.1 [bsc#1194127, CVE-2021-44832]
  * Fixed bugs:
  - JdbcAppender now uses JndiManager to access JNDI resources.
    JNDI is only enabled when system property log4j2.enableJndiJdbc
    is set to true.
  - Remove unused method.
  - ExtendedLoggerWrapper.logMessage no longer double-logs when
    location is requested.
  - log4j-to-slf4j no longer re-interpolates formatted message
    contents.
  - Correct SpringLookup package name in Interpolator.
  - log4j-to-slf4j takes the provided MessageFactory into account.
  - Fix MapLookup to lookup MapMessage before DefaultMap.
  - Buffered I/O checked had inverted logic in
    RollingFileAppenderBuidler.
  - Fix NPE when input is null in
    StrSubstitutor.replace(String, Properties).
  - Lookups with no prefix only read values from the configuration
    properties as expected.
  - Reduce ignored package scope of KafkaAppender.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Remove alias log4j:log4j from log4j-1.2-api, since it is not a
  drop-in replacement</changelog>
  <changelog author="david.anes@suse.com" date="1646913600">- Update to 2.17.2
  * New Features
  - Limit loading of configuration via a url to https by default.
  - Require log4j2.Script.enableLanguages to be specified to
    enable scripting for specific languages.
  - Add TB support to FileSize.
  - Add the log4j-to-jul JDK Logging Bridge.
  - Add org.apache.logging.log4j.core.appender.AsyncAppender.getAppenders()
    to more easily port from org.apache.log4j.AsyncAppender.getAllAppenders().
  - Add Configurator.setLevel(Logger, Level),
    setLevel(String, String), and setLevel(Class, Level).
  - Add shorthand syntax for properties configuration format for
    specifying a logger level and appender refs.
  - Add optional additional fields to NoSQLAppender.
  * Fixed Bugs
  - Flag LogManager as initiialized if the LoggerFactory is
    provided as a property.
  - Fix DefaultConfiguration leak in PatternLayout.
  - Document that the Spring Boot Lookup requires the
    log4j-spring-boot dependency.
  - Fix RoutingAppender backcompat and disallow recursive
    evaluation of lookup results outside of configuration
    properties.
  - Fix ThreadContextDataInjector initialization deadlock.
  - Fix substitutions when programmatic configuration is used.
  - OptionConverter could cause a StackOverflowError.
  - Log4j 1.2 bridge class ConsoleAppender should extend
    WriterAppender and provide better compatibility with custom
    appenders.
  - Log4j 1.2 bridge method NDC.inherit(Stack) should not use
    generics to provide source compatibility.
  - Log4j 1.2 bridge class PatternLayout is missing constants
    DEFAULT_CONVERSION_PATTERN and TTCC_CONVERSION_PATTERN.
  - Log4j 1.2 bridge class PropertyConfigurator should implement
    Configurator.
  - Log4j 1.2 bridge interface Configurator doConfigure() methods
    should use LoggerRepository, not LoggerContext.
  - Log4j 1.2 bridge class OptionConverter is missing
    selectAndConfigure() methods.
  - Log4j 1.2 bridge class Category should implement
    AppenderAttachable.
  - Log4j 1.2 bridge method Category.exists(String) should be
    static.
  - Log4j 1.2 bridge methods missing in org.apache.log4j.Category:
    getDefaultHierarchy(), getHierarchy(), getLoggerRepository().
  - Log4j 1.2 bridge class LogManager default constructor should
    be public.
  - Log4j 1.2 bridge interface org.apache.log4j.spi.RendererSupport
    was in the wrong package and incomplete.
  - Log4j 1.2 bridge interfaces missing from package
    org.apache.log4j.spi: ThrowableRenderer,
    ThrowableRendererSupport, TriggeringEventEvaluator.
  - Log4j 1.2 bridge missing class org.apache.log4j.or.RendererMap.
  - Log4j 1.2 bridge PropertiesConfiguration.buildAppender not
    adding filters to custom appender.
  - Log4j 1.2 bridge should ignore case in properties file keys.
  - Log4j 1.2 bridge adds org.apache.log4j.component.helpers.Constants.
  - Log4j 1.2 bridge adds org.apache.log4j.helpers.LogLog.
  - Log4j 1.2 bridge adds org.apache.log4j.helpers.Loader.
  - Log4j 1.2 bridge adds org.apache.log4j.spi.RootLogger.
  - Log4j 1.2 bridge class Category is missing some protected
    instance variables.
  - Log4j 1.2 bridge adds org.apache.log4j.Hierarchy.
  - Log4j 1.2 bridge methods Category.getChainedPriority() and
    getEffectiveLevel() should not be final.
  - Log4j 1.2 bridge adds org.apache.log4j.spi.NOPLoggerRepository
    and NOPLogger.
  - Log4j 1.2 bridge adds org.apache.log4j.spi.DefaultRepositorySelector.
  - Log4j 1.2 bridge implements LogManager.getCurrentLoggers()
    fully.
  - Log4j 1.2 bridge fixes parsing filters in properties
    configuration file #680.
  - Log4j 1.2 bridge missing OptionConverter.instantiateByKey(
    Properties, String, Class, Object).
  - Log4j 1.2 bridge class org.apache.log4j.spi.LoggingEvent
    missing constructors and public instance variable.
  - Log4j 1.2 bridge does not support system properties in log4j.xml.
  - Log4j 1.2 bridge now logs a warning instead of throwing an
    NullPointerException when building a Syslog appender with a
    missing "SyslogHost" param.
  - Log4j 1.2 bridge should allow property and XML attributes to
    start with either an upper-case or lower-case letter.
  - Log4j 1.2 bridge uses the wrong default values for a
    TTCCLayout.
  - Log4j 1.2 bridge throws ClassCastException when using
    SimpleLayout and others.
  - Log4j 1.2 bridge uses the wrong file pattern for rolling file
    appenders.
  - Log4j 1.2 bridge throws ClassCastException when using
    SimpleLayout and others.
  - Log4j 1.2 bridge creates a SocketAppender instead of a
    SyslogAppender.
  - Log4j 1.2 bridge uses some incorrect default property values
    in some appenders.
  - Log4j 1.2 bridge supports the SocketAppender.
  - Log4j 1.2 bridge missing DefaultThrowableRenderer.
  - Log4j 1.2 bridge missing some ThrowableInformation constructors.
  - Log4j 1.2 bridge missing some LocationInfo constructors.
  - Log4j 1.2 bridge missed
  - Log4j 1.2 bridge missed org.apache.log4j.pattern.FormattingInfo.
  - Log4j 1.2 bridge missed org.apache.log4j.pattern.NameAbbreviator.
  - Log4j 1.2 bridge missing UtilLoggingLevel.
  - Log4j 1.2 bridge missing FormattingInfo.
  - Log4j 1.2 bridge missing PatternConverter.
  - Log4j 1.2 bridge missing PatternParser.
  - Log4j 1.2 bridge issues with filters.
  - Log4j 1.2 bridge implements most of DOMConfigurator.
  - JndiManager reverts to 2.17.0 behavior: Read the system
    property for each call.
  - Configurator.setLevel not fetching the correct LoggerContext.
  - Fix DTD error: Add missing ELEMENT for Marker.
  - Fix log4j-jakarta-web service file.
  - AppenderLoggingException logging any exception to a MongoDB
    Appender.
  - Possible NullPointerException in MongoDb4DocumentObject,
    MongoDbDocumentObject, DefaultNoSqlObject.
  - Trim whitespace before parsing a String into an Integer.
  - Log4j 1.2 bridge throws a ClassCastException when logging a
    Map with non-String keys.
  - Log4j 1.2 bridge Check for non-existent appender when parsing
    properties #761. Thanks to Kenny MacLeod.
  - Log4j 1.2 bridge supports global threshold.
  * Changes
  - Change modifier of method
    org.apache.logging.log4j.core.tools.Generate#generate to
    public (was package private) to facilitate automated code
    generation.</changelog>
  <changelog author="fstrba@suse.com" date="1649678400">- Add dependency on standalone javax.activation-api that is not
  included in newer JDKs</changelog>
  <changelog author="fstrba@suse.com" date="1655121600">- Build as multi-release jar.
- Add some logging providers which we can build with the existing
  dependencies and without cycles.</changelog>
  <changelog author="fstrba@suse.com" date="1655121601">- Do not package the *.zip artifacts whose content is part of the
  multi-release jars already
- Added patch:
  * log4j-java8compat.patch
    + maintain ByteBuffer and CharBuffer compatibility with java 8</changelog>
  <changelog author="fstrba@suse.com" date="1655294400">- Build also taglib, jmx-gui, bom, nosql and web modules, on
  platforms where we have the dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1710072000">- Added patch:
  * log4j-jackson-databind.patch
    + do not use previously deprecated methods, removed in
    jackson-databind 2.16.x</changelog>
  <changelog author="fstrba@suse.com" date="1714392000">- The binaries are compatible with java 1.8
- Fetch newer upstream keyring</changelog>
  <changelog author="fstrba@suse.com" date="1767614400">- Upgrade to 2.18.0
  * Added
    + Add support for Jakarta Mail API in the SMTP appender.
    + Add support for custom Log4j 1.x levels.
    + Add support for adding and retrieving appenders in Log4j 1.x
    bridge.
    + Add support for custom LMAX disruptor WaitStrategy
    configuration.
    + Add support for Apache Extras' RollingFileAppender in Log4j
    1.x bridge.
    + Add MutableThreadContextMapFilter.
    + Add support for 24 colors in highlighting
  * Changed
    + Improves ServiceLoader support on servlet containers.
    + Make the default disruptor WaitStrategy used by Async Loggers
    garbage-free.
    + Do not throw UnsupportedOperationException when JUL
    ApiLogger::setLevel is called.
    + Support Spring 2.6.x.
    + Move perf tests to log4j-core-its
    + Upgrade the Flume Appender to Flume 1.10.0
  * Fixed
    + Fix minor typo #792.
    + Improve validation and reporting of configuration errors.
    + Allow enterprise id to be an OID fragment.
    + Fix problem with non-uppercase custom levels.
    + Avoid ClassCastException in JeroMqManager with custom
    LoggerContextFactory #791.
    + DirectWriteRolloverStrategy should use the current time when
    creating files.
    + Fixes the syslog appender in Log4j 1.x bridge, when used with
    a custom layout.
    + log4j-1.2-api 2.17.2 throws NullPointerException while
    removing appender with name as null.
    + Improve JsonTemplateLayout performance.
    + Fix resolution of non-Log4j properties.
    + Fixes Spring Boot logging system registration in a
    multi-application environment.
    + JAR file containing Log4j configuration isn’t closed.
    + Properties defined in configuration using a value attribute
    (as opposed to element) are read correctly.
    + Syslog appender lacks the SocketOptions setting.
    + Log4j 1.2 bridge should not wrap components unnecessarily.
    + Update 3rd party dependencies for 2.18.0.
    + SizeBasedTriggeringPolicy would fail to rename files properly
    when integer pattern contained a leading zero.
    + Fixes default SslConfiguration, when a custom keystore is
    used.
    + Fixes appender concurrency problems in Log4j 1.x bridge.
    + Fix and test for race condition in FileUtils.mkdir().
    + LocalizedMessage logs misleading errors on the console.
    + Add missing message parameterization in RegexFilter.
    + Add the missing context stack to JsonLayout template.
    + HttpWatcher did not pass credentials when polling.
    + UrlConnectionFactory.createConnection now accepts an
    AuthorizationProvider as a parameter.
    + The DirectWriteRolloverStrategy was not detecting the correct
    index to use during startup.
    + Async Loggers were including the location information by
    default.
    + ClassArbiter’s newBuilder method referenced the wrong class.
    + Don’t use Paths.get() to avoid circular file systems.
    + Fix parsing error, when XInclude is disabled.
    + Fix LevelRangeFilterBuilder to align with log4j1’s behavior.
    + Fixes problem with wrong ANSI escape code for bright colors
    + Log4j 1.2 bridge should generate Log4j 2.x messages based on
    the parameter runtime type.
- Update to 2.19.0
  * Added
    + Add implementation of SLF4J2 fluent API.
    + Add support for SLF4J2 stack-valued MDC.
  * Changed
    + Add getExplicitLevel method to LoggerConfig.
    + Allow PropertySources to be added.
    + Allow Plugins to be injected with the LoggerContext reference.
  * Fixed
    + Add correct manifest entries for OSGi to log4j-jcl
    + Improve support for passwordless keystores.
    + SystemPropertyArbiter was assigning the value as the name.
    + Make JsonTemplateLayout stack trace truncation operate for
    each label block.
    + Fix recursion between Log4j 1.2 LogManager and Category.
    + Fix resolution of properties not starting with log4j2..
    + Logger$PrivateConfig.filter(Level, Marker, String) was
    allocating empty varargs array.
    + Allows a space separated list of style specifiers in the
    %style pattern for consistency with %highlight.
    + Fix NPE in log4j-to-jul in the case the root logger level is
    null.
    + Fix RollingRandomAccessFileAppender with
    DirectWriteRolloverStrategy can’t create the first log file of
    different directory.
    + Generate new SSL certs for testing.
    + Fix ServiceLoaderUtil behavior in the presence of a
    SecurityManager.
    + Fix regression in Rfc5424Layout default values.
    + Harden InstantFormatter against delegate failures.
    + Add async support to Log4jServletFilter.
  * Removed
    + Removed build page in favor of a single build instructions
    file.
    + Remove SLF4J 1.8.x binding.
- Update to 2.20.0
  * Added
    + Add support for timezones in RollingFileAppender date pattern
    + Add LogEvent timestamp to ProducerRecord in KafkaAppender
    + Add PatternLayout support for abbreviating the name of all
    logger components except the 2 rightmost
    + Removes internal field that leaked into public API.
    + Add a LogBuilder#logAndGet() method to emulate the
    Logger#traceEntry method.
  * Changed
    + Simplify site generation
    + Switch the issue tracker from JIRA to GitHub Issues
    + Remove liquibase-log4j2 maven module
    + Fix order of stacktrace elements, that causes cache misses in
    ThrowableProxyHelper.
    + Switch from com.sun.mail to Eclipse Angus.
    + Add Log4j2 Core as default runtime dependency of the
    SLF4J2-to-Log4j2 API bridge.
    + Replace maven-changes-plugin with a custom changelog
    implementation
    + Moved log4j-api and log4j-core artifacts with classifier tests
    to log4j-api-test and log4j-core-test respectively.
  * Deprecated
    + Deprecate support for package scanning for plugins
  * Fixed
    + Copy programmatically supplied location even if
    includeLocation="false".
    + Eliminate status logger warning, when disableAnsi or
    noConsoleNoAnsi is used the style and highlight patterns.
    + Fix detection of location requirements in RewriteAppender.
    + Replace regex with manual code to escape characters in
    Rfc5424Layout.
    + Fix java.sql.Time object formatting in MapMessage
    + Fix previous fire time computation in CronTriggeringPolicy
    + Correct default to not include location for AsyncRootLoggers
    + Make StatusConsoleListener use SimpleLogger internally.
    + Lazily evaluate the level of a SLF4J LogEventBuilder
    + Fixes priority of Legacy system properties, which are now back
    to having higher priority than Environment variables.
    + Protects ServiceLoaderUtil from unchecked ServiceLoader
    exceptions.
    + Fix Configurator#setLevel for internal classes
    + Fix level propagation in Log4jBridgeHandler
    + Disable OsgiServiceLocator if not running in OSGI container.
    + When using a Date Lookup in the file pattern the current time
    should be used.
    + Fixed LogBuilder filtering in the presence of global filters.
- Removed patch:
  * log4j-java8compat.patch
    + not needed with this version
- Modified patch:
  * logging-log4j-Remove-unsupported-EventDataConverter.patch
    + rediff
- Added patch:
  * 0002-Remove-usage-of-toolchains.patch
    + do not use the maven-toolchains-plugin
  * log4j-CVE-2025-68161.patch
    + bsc#1255427, CVE-2025-68161: absent TLS hostname verification
    may allow a man-in-the-middle attack</changelog>
</package>
<package pkgid="d3ea4492eba357a64acb76150f44e10c4ab762eef853948fda49882ae63ee226" name="log4j-javadoc" arch="noarch">
  <version epoch="0" ver="2.20.0" rel="150200.4.33.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1587988800">- Security fix: [bsc#1170535, CVE-2020-9488]
  * Improper validation of certificate with host mismatch in SMTP appender.
- Add log4j-CVE-2020-9488.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1587988801">- Update to 2.13.2 [bsc#1170535, CVE-2020-9488]
  * Bugfixes and minor enhancements:
  - CVE-2020-9488: Improper validation of certificate with host mismatch
    in Apache Log4j SMTP appender.
  - Implement requiresLocation in GelfLayout to reflect whether location
    information is used in the message Pattern.
  - Add option to restore printing timeMillis in the JsonLayout.
  - Initialize pattern processor before triggering policy during reconfiguration.
  - Add information about using a url in log4j.configurationFile.
  - serializeToBytes was checking wrong variable for null.
  - Fix Javadoc for ScriptPatternSelector.
  - Allow trailing and leading spaces in log level.
  - Correct JsonLayout timestamp sorting issue.
  - Allow the file size action to parse the value without being sensitive
    to the current locale.
  - Make YamlLayoutTest more resiliant to environmental differences.
  - Conditionally allocate PluginEntry during PluginCache loading.
  - Add missing includeLocation parameter when creating AsyncLogger.
  - Fix Exceptions when whitespace is in the file path and Java security
    manager is used.
  - Avoid NullPointerException when StackWalker returns null.
  - TimeFilter did not handle daylight saving time transitions and did
    not support a range over 2 days.
  - Provide a Log4j implementation of System.Logger.
  - Added EventLookup to retrieve fields from the log event.
  * Changes:
  - Allow the file extension in the file pattern to be modified during reconfiguration.
  - Add support for specifying an SSL configuration for SmtpAppender.
  - Allow servlet context path to be retrieved without "/".
  - Allow Spring Lookup to return default and active profiles.
  - Allow Spring Boot applications to use composite configuratons.
  - Add ContextDataProviders as an alternative to having to implement a ContextDataInjector.
  - [JDBC] Throw a AppenderLoggingException instead of an NPE in the JDBC database manager.
- Update to 2.13.1
  - Prevent LoggerContext from being garbage collected while being created.
  - Do not log an error if Files.move does not work.
  - Rollover fails when file matches pattern but index is too large.
  - Counter stuck at 10 and overwriting files when leading zeros used in the file pattern count.
  - ClassLoaderContextSelector was not locating the LoggerContext during shutdown.
  - JSON output wrong when using additonal fields.
  - GraalVM does not allow use of MethodHandles.
  - Allow Lookup keys with leading dashes by using a slash as an escape character.
  - ServletContainerInitializer was obtaining the StatusLogger too soon.
  - PluginProcessor should use Messager instead of System.out.
  - MapMessage.getFormattedMesssage() would incorrectly format objects.
  - Always write header on a new OutputStream.
  - An error message in RollingFileAppender uses a placeholder for the name but does not
    specify the name argument in the logging call.
  - NullPointerException when using a custom DirectFileRolloverStrategy without a file name.
  - Add mulit-parameter overloads to LogBuilder.
  - Fixed NullPointerException after reconfiguring via JMX.
  - RollingFileAppender was not rolling on startup if createOnDemand was set to true.
  - Warn if pattern is missing on Routes element. Use default route.
  - Fix lock contention in the classloader using new versions of slf4j without EventData
    on slf4j logger creation.
  - Rollover handles parallel file deletion gracefully.
  - Remove unnecessary EventLogger references from log4j-slf4j18-impl due to removal from slf4j.
  - Fix a memory leak using fully asynchronous logging when the queue is full using the 'discard'
    asynchronous queue full strategy.
  - Fix erroneous log4j-jul recursive logger detection resulting in some no-op JUL loggers and
    'WARN Recursive call to getLogger' being reported by the status logger.
  - PluginCache output is reproducible allowing the annotation processor to produce
    deterministic results.
  - Fix StackLocator.getCallerClass performance in cases where Reflection.getCallerClass
    is not accessible.
  - MutableLogEvent and RingBufferLogEvent avoid StringBuffer and parameter array allocation
    unless reusable messages are used.
  - LoaderUtil.getClassLoaders may discover additional loaders and no longer erroneously returns
    a result with a null element in some environments.
  - CronExpression.getBeforeTime() would sometimes return incorrect result.
  - [JDBC] MS-SQL Server JDBC driver throws SQLServerException when inserting a null value
    for a VARBINARY column.
  - NullPointerException after reconfiguring via JMX.
  - Implement ISO8601_PERIOD_MICROS fixed date format matching ISO8601_PERIOD with support
    for microsecond precision.
  * Changes:
  - Conditionally perform status logging calculations in PluginRegistry.
  - Use LinkedBlockingQueue instead of synchronized collction in StatusConfiguration.
  - Add a retry count attribute to the KafkaAppender.
  - Update log4j-slf4j18-impl slf4j version to 1.8.0-beta4 from 1.8.0-alpha2.
  - Update dependencies.
- Remove patch fixed upstream:
  * logging-log4j-LOG4J2-2745-LOG4J2-2744-slf4j.patch
  * log4j-CVE-2020-9488.patch
- Refresh patch:
  * logging-log4j-Remove-unsupported-EventDataConverter.patch</changelog>
  <changelog author="fstrba@suse.com" date="1587988802">- Do not build the log4j-jpl artifact, as to avoid java-11-only
  features</changelog>
  <changelog author="psimons@suse.com" date="1639137600">- Apply "CVE-2021-44228.patch" to fix a remote code execution
  vulnerability that existed in the LDAP JNDI parser. [bsc#1193611,
  CVE-2021-44228]</changelog>
  <changelog author="psimons@suse.com" date="1639483200">- Apply "disable-jndi-by-default.patch" to disable JNDI support by
  default. There is evidence that the previous upstream fix for
  CVE-2021-44228 did not solve the vulnerability entirely. Since
  JNDI support is ususally not required, upstream recommends this
  route to be completely safe. [bsc#1193611, CVE-2021-44228]</changelog>
  <changelog author="sflees@suse.de" date="1639569600">- Update to 2.16.0 [bsc#1193743, CVE-2021-45046]
  * Features
  - Add JsonTemplateLayout.
  - Create module log4j-mongodb4 to use new major version 4
    MongoDB driver.
  - More flexible configuration of the Disruptor WaitStrategy.
    Thanks to Stepan Gorban.
  * Bugfixes and minor enhancements
  - It was found that the fix to address CVE-2021-44228 in Apache
    Log4j 2.15.0 was incomplete in certain non-default
    configurations.
    This could allows attackers with control over Thread Context
    Map (MDC) input data when the logging configuration uses a
    Pattern Layout with either a Context Lookup (for example,
    $${ctx:loginId}) or a Thread Context Map pattern (%X, %mdc, or
    %MDC) to craft malicious input data using a JNDI Lookup
    pattern resulting in a denial of service (DOS) attack.
    Log4j 2.15.0 restricts JNDI LDAP lookups to localhost by
    default. Note that previous mitigations involving
    configuration such as setting the system property
    log4j2.noFormatMsgLookup to true do NOT mitigate this specific
    vulnerability.
  - Upstream initial fix for bsc#1193611, CVE-2021-44228
  - Numerous other minor bugfixes
  * Drop CVE-2021-44228.patch and disable-jndi-by-default.patch
    included upstream
  * To make the bots happy this stream isn't affected by
    bsc#1193662 CVE-2021-4104 which is 1.X only</changelog>
  <changelog author="david.anes@suse.com" date="1639828800">- Update to 2.17.0 [bsc#1193887, bsc#1193888, CVE-2021-45105]
  * Fixed Bugs
  - Fix string substitution recursion.
  - Limit JNDI to the java protocol only. JNDI will remain disabled
    by default. Rename JNDI enablement property from
    'log4j2.enableJndi' to 'log4j2.enableJndiLookup',
    'log4j2.enableJndiJms', and 'log4j2.enableJndiContextSelector'.
  - Limit JNDI to the java protocol only. JNDI will remain disabled
    by default. The enablement property has been renamed to
    'log4j2.enableJndiJava'
  - Do not declare log4j-api-java9 and log4j-core-java9 as
    dependencies as it causes problems with the Maven enforcer
    plugin.
  - PropertiesConfiguration.parseAppenderFilters NPE when parsing
    properties file filters.
  - Log4j 1.2 bridge for Syslog Appender defaults to port 512
    instead of 514.
  - Log4j 1.2 bridge API hard codes the Syslog protocol to TCP.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639828801">- add upstream signing key to verify source signature</changelog>
  <changelog author="david.anes@suse.com" date="1640779200">- Update to 2.17.1 [bsc#1194127, CVE-2021-44832]
  * Fixed bugs:
  - JdbcAppender now uses JndiManager to access JNDI resources.
    JNDI is only enabled when system property log4j2.enableJndiJdbc
    is set to true.
  - Remove unused method.
  - ExtendedLoggerWrapper.logMessage no longer double-logs when
    location is requested.
  - log4j-to-slf4j no longer re-interpolates formatted message
    contents.
  - Correct SpringLookup package name in Interpolator.
  - log4j-to-slf4j takes the provided MessageFactory into account.
  - Fix MapLookup to lookup MapMessage before DefaultMap.
  - Buffered I/O checked had inverted logic in
    RollingFileAppenderBuidler.
  - Fix NPE when input is null in
    StrSubstitutor.replace(String, Properties).
  - Lookups with no prefix only read values from the configuration
    properties as expected.
  - Reduce ignored package scope of KafkaAppender.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Remove alias log4j:log4j from log4j-1.2-api, since it is not a
  drop-in replacement</changelog>
  <changelog author="david.anes@suse.com" date="1646913600">- Update to 2.17.2
  * New Features
  - Limit loading of configuration via a url to https by default.
  - Require log4j2.Script.enableLanguages to be specified to
    enable scripting for specific languages.
  - Add TB support to FileSize.
  - Add the log4j-to-jul JDK Logging Bridge.
  - Add org.apache.logging.log4j.core.appender.AsyncAppender.getAppenders()
    to more easily port from org.apache.log4j.AsyncAppender.getAllAppenders().
  - Add Configurator.setLevel(Logger, Level),
    setLevel(String, String), and setLevel(Class, Level).
  - Add shorthand syntax for properties configuration format for
    specifying a logger level and appender refs.
  - Add optional additional fields to NoSQLAppender.
  * Fixed Bugs
  - Flag LogManager as initiialized if the LoggerFactory is
    provided as a property.
  - Fix DefaultConfiguration leak in PatternLayout.
  - Document that the Spring Boot Lookup requires the
    log4j-spring-boot dependency.
  - Fix RoutingAppender backcompat and disallow recursive
    evaluation of lookup results outside of configuration
    properties.
  - Fix ThreadContextDataInjector initialization deadlock.
  - Fix substitutions when programmatic configuration is used.
  - OptionConverter could cause a StackOverflowError.
  - Log4j 1.2 bridge class ConsoleAppender should extend
    WriterAppender and provide better compatibility with custom
    appenders.
  - Log4j 1.2 bridge method NDC.inherit(Stack) should not use
    generics to provide source compatibility.
  - Log4j 1.2 bridge class PatternLayout is missing constants
    DEFAULT_CONVERSION_PATTERN and TTCC_CONVERSION_PATTERN.
  - Log4j 1.2 bridge class PropertyConfigurator should implement
    Configurator.
  - Log4j 1.2 bridge interface Configurator doConfigure() methods
    should use LoggerRepository, not LoggerContext.
  - Log4j 1.2 bridge class OptionConverter is missing
    selectAndConfigure() methods.
  - Log4j 1.2 bridge class Category should implement
    AppenderAttachable.
  - Log4j 1.2 bridge method Category.exists(String) should be
    static.
  - Log4j 1.2 bridge methods missing in org.apache.log4j.Category:
    getDefaultHierarchy(), getHierarchy(), getLoggerRepository().
  - Log4j 1.2 bridge class LogManager default constructor should
    be public.
  - Log4j 1.2 bridge interface org.apache.log4j.spi.RendererSupport
    was in the wrong package and incomplete.
  - Log4j 1.2 bridge interfaces missing from package
    org.apache.log4j.spi: ThrowableRenderer,
    ThrowableRendererSupport, TriggeringEventEvaluator.
  - Log4j 1.2 bridge missing class org.apache.log4j.or.RendererMap.
  - Log4j 1.2 bridge PropertiesConfiguration.buildAppender not
    adding filters to custom appender.
  - Log4j 1.2 bridge should ignore case in properties file keys.
  - Log4j 1.2 bridge adds org.apache.log4j.component.helpers.Constants.
  - Log4j 1.2 bridge adds org.apache.log4j.helpers.LogLog.
  - Log4j 1.2 bridge adds org.apache.log4j.helpers.Loader.
  - Log4j 1.2 bridge adds org.apache.log4j.spi.RootLogger.
  - Log4j 1.2 bridge class Category is missing some protected
    instance variables.
  - Log4j 1.2 bridge adds org.apache.log4j.Hierarchy.
  - Log4j 1.2 bridge methods Category.getChainedPriority() and
    getEffectiveLevel() should not be final.
  - Log4j 1.2 bridge adds org.apache.log4j.spi.NOPLoggerRepository
    and NOPLogger.
  - Log4j 1.2 bridge adds org.apache.log4j.spi.DefaultRepositorySelector.
  - Log4j 1.2 bridge implements LogManager.getCurrentLoggers()
    fully.
  - Log4j 1.2 bridge fixes parsing filters in properties
    configuration file #680.
  - Log4j 1.2 bridge missing OptionConverter.instantiateByKey(
    Properties, String, Class, Object).
  - Log4j 1.2 bridge class org.apache.log4j.spi.LoggingEvent
    missing constructors and public instance variable.
  - Log4j 1.2 bridge does not support system properties in log4j.xml.
  - Log4j 1.2 bridge now logs a warning instead of throwing an
    NullPointerException when building a Syslog appender with a
    missing "SyslogHost" param.
  - Log4j 1.2 bridge should allow property and XML attributes to
    start with either an upper-case or lower-case letter.
  - Log4j 1.2 bridge uses the wrong default values for a
    TTCCLayout.
  - Log4j 1.2 bridge throws ClassCastException when using
    SimpleLayout and others.
  - Log4j 1.2 bridge uses the wrong file pattern for rolling file
    appenders.
  - Log4j 1.2 bridge throws ClassCastException when using
    SimpleLayout and others.
  - Log4j 1.2 bridge creates a SocketAppender instead of a
    SyslogAppender.
  - Log4j 1.2 bridge uses some incorrect default property values
    in some appenders.
  - Log4j 1.2 bridge supports the SocketAppender.
  - Log4j 1.2 bridge missing DefaultThrowableRenderer.
  - Log4j 1.2 bridge missing some ThrowableInformation constructors.
  - Log4j 1.2 bridge missing some LocationInfo constructors.
  - Log4j 1.2 bridge missed
  - Log4j 1.2 bridge missed org.apache.log4j.pattern.FormattingInfo.
  - Log4j 1.2 bridge missed org.apache.log4j.pattern.NameAbbreviator.
  - Log4j 1.2 bridge missing UtilLoggingLevel.
  - Log4j 1.2 bridge missing FormattingInfo.
  - Log4j 1.2 bridge missing PatternConverter.
  - Log4j 1.2 bridge missing PatternParser.
  - Log4j 1.2 bridge issues with filters.
  - Log4j 1.2 bridge implements most of DOMConfigurator.
  - JndiManager reverts to 2.17.0 behavior: Read the system
    property for each call.
  - Configurator.setLevel not fetching the correct LoggerContext.
  - Fix DTD error: Add missing ELEMENT for Marker.
  - Fix log4j-jakarta-web service file.
  - AppenderLoggingException logging any exception to a MongoDB
    Appender.
  - Possible NullPointerException in MongoDb4DocumentObject,
    MongoDbDocumentObject, DefaultNoSqlObject.
  - Trim whitespace before parsing a String into an Integer.
  - Log4j 1.2 bridge throws a ClassCastException when logging a
    Map with non-String keys.
  - Log4j 1.2 bridge Check for non-existent appender when parsing
    properties #761. Thanks to Kenny MacLeod.
  - Log4j 1.2 bridge supports global threshold.
  * Changes
  - Change modifier of method
    org.apache.logging.log4j.core.tools.Generate#generate to
    public (was package private) to facilitate automated code
    generation.</changelog>
  <changelog author="fstrba@suse.com" date="1649678400">- Add dependency on standalone javax.activation-api that is not
  included in newer JDKs</changelog>
  <changelog author="fstrba@suse.com" date="1655121600">- Build as multi-release jar.
- Add some logging providers which we can build with the existing
  dependencies and without cycles.</changelog>
  <changelog author="fstrba@suse.com" date="1655121601">- Do not package the *.zip artifacts whose content is part of the
  multi-release jars already
- Added patch:
  * log4j-java8compat.patch
    + maintain ByteBuffer and CharBuffer compatibility with java 8</changelog>
  <changelog author="fstrba@suse.com" date="1655294400">- Build also taglib, jmx-gui, bom, nosql and web modules, on
  platforms where we have the dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1710072000">- Added patch:
  * log4j-jackson-databind.patch
    + do not use previously deprecated methods, removed in
    jackson-databind 2.16.x</changelog>
  <changelog author="fstrba@suse.com" date="1714392000">- The binaries are compatible with java 1.8
- Fetch newer upstream keyring</changelog>
  <changelog author="fstrba@suse.com" date="1767614400">- Upgrade to 2.18.0
  * Added
    + Add support for Jakarta Mail API in the SMTP appender.
    + Add support for custom Log4j 1.x levels.
    + Add support for adding and retrieving appenders in Log4j 1.x
    bridge.
    + Add support for custom LMAX disruptor WaitStrategy
    configuration.
    + Add support for Apache Extras' RollingFileAppender in Log4j
    1.x bridge.
    + Add MutableThreadContextMapFilter.
    + Add support for 24 colors in highlighting
  * Changed
    + Improves ServiceLoader support on servlet containers.
    + Make the default disruptor WaitStrategy used by Async Loggers
    garbage-free.
    + Do not throw UnsupportedOperationException when JUL
    ApiLogger::setLevel is called.
    + Support Spring 2.6.x.
    + Move perf tests to log4j-core-its
    + Upgrade the Flume Appender to Flume 1.10.0
  * Fixed
    + Fix minor typo #792.
    + Improve validation and reporting of configuration errors.
    + Allow enterprise id to be an OID fragment.
    + Fix problem with non-uppercase custom levels.
    + Avoid ClassCastException in JeroMqManager with custom
    LoggerContextFactory #791.
    + DirectWriteRolloverStrategy should use the current time when
    creating files.
    + Fixes the syslog appender in Log4j 1.x bridge, when used with
    a custom layout.
    + log4j-1.2-api 2.17.2 throws NullPointerException while
    removing appender with name as null.
    + Improve JsonTemplateLayout performance.
    + Fix resolution of non-Log4j properties.
    + Fixes Spring Boot logging system registration in a
    multi-application environment.
    + JAR file containing Log4j configuration isn’t closed.
    + Properties defined in configuration using a value attribute
    (as opposed to element) are read correctly.
    + Syslog appender lacks the SocketOptions setting.
    + Log4j 1.2 bridge should not wrap components unnecessarily.
    + Update 3rd party dependencies for 2.18.0.
    + SizeBasedTriggeringPolicy would fail to rename files properly
    when integer pattern contained a leading zero.
    + Fixes default SslConfiguration, when a custom keystore is
    used.
    + Fixes appender concurrency problems in Log4j 1.x bridge.
    + Fix and test for race condition in FileUtils.mkdir().
    + LocalizedMessage logs misleading errors on the console.
    + Add missing message parameterization in RegexFilter.
    + Add the missing context stack to JsonLayout template.
    + HttpWatcher did not pass credentials when polling.
    + UrlConnectionFactory.createConnection now accepts an
    AuthorizationProvider as a parameter.
    + The DirectWriteRolloverStrategy was not detecting the correct
    index to use during startup.
    + Async Loggers were including the location information by
    default.
    + ClassArbiter’s newBuilder method referenced the wrong class.
    + Don’t use Paths.get() to avoid circular file systems.
    + Fix parsing error, when XInclude is disabled.
    + Fix LevelRangeFilterBuilder to align with log4j1’s behavior.
    + Fixes problem with wrong ANSI escape code for bright colors
    + Log4j 1.2 bridge should generate Log4j 2.x messages based on
    the parameter runtime type.
- Update to 2.19.0
  * Added
    + Add implementation of SLF4J2 fluent API.
    + Add support for SLF4J2 stack-valued MDC.
  * Changed
    + Add getExplicitLevel method to LoggerConfig.
    + Allow PropertySources to be added.
    + Allow Plugins to be injected with the LoggerContext reference.
  * Fixed
    + Add correct manifest entries for OSGi to log4j-jcl
    + Improve support for passwordless keystores.
    + SystemPropertyArbiter was assigning the value as the name.
    + Make JsonTemplateLayout stack trace truncation operate for
    each label block.
    + Fix recursion between Log4j 1.2 LogManager and Category.
    + Fix resolution of properties not starting with log4j2..
    + Logger$PrivateConfig.filter(Level, Marker, String) was
    allocating empty varargs array.
    + Allows a space separated list of style specifiers in the
    %style pattern for consistency with %highlight.
    + Fix NPE in log4j-to-jul in the case the root logger level is
    null.
    + Fix RollingRandomAccessFileAppender with
    DirectWriteRolloverStrategy can’t create the first log file of
    different directory.
    + Generate new SSL certs for testing.
    + Fix ServiceLoaderUtil behavior in the presence of a
    SecurityManager.
    + Fix regression in Rfc5424Layout default values.
    + Harden InstantFormatter against delegate failures.
    + Add async support to Log4jServletFilter.
  * Removed
    + Removed build page in favor of a single build instructions
    file.
    + Remove SLF4J 1.8.x binding.
- Update to 2.20.0
  * Added
    + Add support for timezones in RollingFileAppender date pattern
    + Add LogEvent timestamp to ProducerRecord in KafkaAppender
    + Add PatternLayout support for abbreviating the name of all
    logger components except the 2 rightmost
    + Removes internal field that leaked into public API.
    + Add a LogBuilder#logAndGet() method to emulate the
    Logger#traceEntry method.
  * Changed
    + Simplify site generation
    + Switch the issue tracker from JIRA to GitHub Issues
    + Remove liquibase-log4j2 maven module
    + Fix order of stacktrace elements, that causes cache misses in
    ThrowableProxyHelper.
    + Switch from com.sun.mail to Eclipse Angus.
    + Add Log4j2 Core as default runtime dependency of the
    SLF4J2-to-Log4j2 API bridge.
    + Replace maven-changes-plugin with a custom changelog
    implementation
    + Moved log4j-api and log4j-core artifacts with classifier tests
    to log4j-api-test and log4j-core-test respectively.
  * Deprecated
    + Deprecate support for package scanning for plugins
  * Fixed
    + Copy programmatically supplied location even if
    includeLocation="false".
    + Eliminate status logger warning, when disableAnsi or
    noConsoleNoAnsi is used the style and highlight patterns.
    + Fix detection of location requirements in RewriteAppender.
    + Replace regex with manual code to escape characters in
    Rfc5424Layout.
    + Fix java.sql.Time object formatting in MapMessage
    + Fix previous fire time computation in CronTriggeringPolicy
    + Correct default to not include location for AsyncRootLoggers
    + Make StatusConsoleListener use SimpleLogger internally.
    + Lazily evaluate the level of a SLF4J LogEventBuilder
    + Fixes priority of Legacy system properties, which are now back
    to having higher priority than Environment variables.
    + Protects ServiceLoaderUtil from unchecked ServiceLoader
    exceptions.
    + Fix Configurator#setLevel for internal classes
    + Fix level propagation in Log4jBridgeHandler
    + Disable OsgiServiceLocator if not running in OSGI container.
    + When using a Date Lookup in the file pattern the current time
    should be used.
    + Fixed LogBuilder filtering in the presence of global filters.
- Removed patch:
  * log4j-java8compat.patch
    + not needed with this version
- Modified patch:
  * logging-log4j-Remove-unsupported-EventDataConverter.patch
    + rediff
- Added patch:
  * 0002-Remove-usage-of-toolchains.patch
    + do not use the maven-toolchains-plugin
  * log4j-CVE-2025-68161.patch
    + bsc#1255427, CVE-2025-68161: absent TLS hostname verification
    may allow a man-in-the-middle attack</changelog>
  <changelog author="fstrba@suse.com" date="1776168000">- Added patch:
  * log4j-CVE-2026-34477.patch
    + backported upstream fix for bsc#1262050 (CVE-2026-34477):
    man-in-the-middle attack due to incomplete hostname
    verification</changelog>
  <changelog author="fstrba@suse.com" date="1776168001">- Added patches:
  * log4j-CVE-2026-34479.patch
    + backported upstream fix for bsc#1262091 (CVE-2026-34479):
    log processing denial of service due to improper XML escaping
  * log4j-CVE-2026-34480.patch
    + backported upstream fix for bsc#1262092 (CVE-2026-34480):
    invalid XML output causes denial of service in logging
  * log4j-CVE-2026-34481.patch
    + backported upstream fix for bsc#1262093 (CVE-2026-34481):
    denial of service via invalid JSON output</changelog>
</package>
<package pkgid="a3fab7a28cdc4493c1c5629037ce3d7ad38277ef9ff6fc75c501a2f87dae02ce" name="log4j-jcl" arch="noarch">
  <version epoch="0" ver="2.20.0" rel="150200.4.30.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1579608000">- Update to 2.13.0 [bsc#1159646, CVE-2019-17571]
  * Bugfixes and minor enhancements:
  - CVE-2019-17571: Remote code execution: Deserialization of untrusted
    data in SocketServer
  - Log4j 2 now requires Java 8 or higher to build and run.
  - Better integration with Spring Boot by providing access to Spring
    variables in Log4j 2 configuration files and allowing Log4j 2 system
    properties to be defined in the Spring configuration.
  - Support for accessing Kubernetes information via a Log4j 2 Lookup.
  - The Gelf Layout now allows the message to be formatted using a
    PatternLayout pattern.
  - Due to a break in compatibility in the SLF4J binding, Log4j now
    ships with two versions of the SLF4J to Log4j adapters.
  - log4j-slf4j-impl should be used with SLF4J 1.7.x and earlier and
    log4j-slf4j18-impl should be used with SLF4J 1.8.x and later.
  - Note that the XML, JSON and YAML formats changed in the 2.11.0 release:
    they no longer have the "timeMillis" attribute and instead have an
    "Instant" element with "epochSecond" and "nanoOfSecond" attributes.
  - The Log4j 2.13.0 API, as well as many core components, maintains
    binary compatibility with previous releases.
  * New Features
  - Add ThreadContext.putIfNotNull method.
  - Add a Level Patttern Selector.
  - Add experimental support for Log4j 1 configuration files.
  - Add the ability to lookup Kubernetes attributes in the Log4j
    configuration. Allow Log4j properties to be retrieved from the
    Spring environment if it is available.
  - Allow Spring Boot application properties to be accessed in the
    Log4j 2 configuration. Add lower and upper case Lookups.
  - Add builder pattern to Logger interface.
  * Fixed Bugs
  - Prevent recursive calls to java.util.LogManager.getLogger().
  - Added try/finally around event.execute() for RingBufferLogEventHandler
    to clear memory correctly in case of exception/error.
  - Wrong java version check in ThreadNameCachingStrategy.
  - Use a less confusing name for the CompositeConfiguration source.
  - Add setKey method to Kafka Appender Builder.
  - ArrayIndexOutOfBoundsException could occur with MAC address longer
    than 6 bytes.
  - The rolling file appenders would fail to compress the file after
    rollover if the file name matched the file pattern.
  - @PluginValue does not support attribute names besides "value".
  - Validation blocks definition of script in properties configuration.
  - Set result of rename action to true if file was copied.
  - Add automatic module names where missing.
  - OutputStreamAppender.Builder ignores setFilter().
  - Prevent a memory leak when async loggers throw errors.
  * Changes
  - Update Jackson to 2.9.10.
  - Allow message portion of GELF layout to be formatted using a PatternLayout.
  - Allow ThreadContext attributes to be explicitly included or excluded in the GelfLayout.</changelog>
  <changelog author="fstrba@suse.com" date="1582718400">- Added patches:
  * logging-log4j-LOG4J2-2745-LOG4J2-2744-slf4j.patch
  * logging-log4j-Remove-unsupported-EventDataConverter.patch
    + fix build with newer slf4j</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1587988800">- Security fix: [bsc#1170535, CVE-2020-9488]
  * Improper validation of certificate with host mismatch in SMTP appender.
- Add log4j-CVE-2020-9488.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1587988801">- Update to 2.13.2 [bsc#1170535, CVE-2020-9488]
  * Bugfixes and minor enhancements:
  - CVE-2020-9488: Improper validation of certificate with host mismatch
    in Apache Log4j SMTP appender.
  - Implement requiresLocation in GelfLayout to reflect whether location
    information is used in the message Pattern.
  - Add option to restore printing timeMillis in the JsonLayout.
  - Initialize pattern processor before triggering policy during reconfiguration.
  - Add information about using a url in log4j.configurationFile.
  - serializeToBytes was checking wrong variable for null.
  - Fix Javadoc for ScriptPatternSelector.
  - Allow trailing and leading spaces in log level.
  - Correct JsonLayout timestamp sorting issue.
  - Allow the file size action to parse the value without being sensitive
    to the current locale.
  - Make YamlLayoutTest more resiliant to environmental differences.
  - Conditionally allocate PluginEntry during PluginCache loading.
  - Add missing includeLocation parameter when creating AsyncLogger.
  - Fix Exceptions when whitespace is in the file path and Java security
    manager is used.
  - Avoid NullPointerException when StackWalker returns null.
  - TimeFilter did not handle daylight saving time transitions and did
    not support a range over 2 days.
  - Provide a Log4j implementation of System.Logger.
  - Added EventLookup to retrieve fields from the log event.
  * Changes:
  - Allow the file extension in the file pattern to be modified during reconfiguration.
  - Add support for specifying an SSL configuration for SmtpAppender.
  - Allow servlet context path to be retrieved without "/".
  - Allow Spring Lookup to return default and active profiles.
  - Allow Spring Boot applications to use composite configuratons.
  - Add ContextDataProviders as an alternative to having to implement a ContextDataInjector.
  - [JDBC] Throw a AppenderLoggingException instead of an NPE in the JDBC database manager.
- Update to 2.13.1
  - Prevent LoggerContext from being garbage collected while being created.
  - Do not log an error if Files.move does not work.
  - Rollover fails when file matches pattern but index is too large.
  - Counter stuck at 10 and overwriting files when leading zeros used in the file pattern count.
  - ClassLoaderContextSelector was not locating the LoggerContext during shutdown.
  - JSON output wrong when using additonal fields.
  - GraalVM does not allow use of MethodHandles.
  - Allow Lookup keys with leading dashes by using a slash as an escape character.
  - ServletContainerInitializer was obtaining the StatusLogger too soon.
  - PluginProcessor should use Messager instead of System.out.
  - MapMessage.getFormattedMesssage() would incorrectly format objects.
  - Always write header on a new OutputStream.
  - An error message in RollingFileAppender uses a placeholder for the name but does not
    specify the name argument in the logging call.
  - NullPointerException when using a custom DirectFileRolloverStrategy without a file name.
  - Add mulit-parameter overloads to LogBuilder.
  - Fixed NullPointerException after reconfiguring via JMX.
  - RollingFileAppender was not rolling on startup if createOnDemand was set to true.
  - Warn if pattern is missing on Routes element. Use default route.
  - Fix lock contention in the classloader using new versions of slf4j without EventData
    on slf4j logger creation.
  - Rollover handles parallel file deletion gracefully.
  - Remove unnecessary EventLogger references from log4j-slf4j18-impl due to removal from slf4j.
  - Fix a memory leak using fully asynchronous logging when the queue is full using the 'discard'
    asynchronous queue full strategy.
  - Fix erroneous log4j-jul recursive logger detection resulting in some no-op JUL loggers and
    'WARN Recursive call to getLogger' being reported by the status logger.
  - PluginCache output is reproducible allowing the annotation processor to produce
    deterministic results.
  - Fix StackLocator.getCallerClass performance in cases where Reflection.getCallerClass
    is not accessible.
  - MutableLogEvent and RingBufferLogEvent avoid StringBuffer and parameter array allocation
    unless reusable messages are used.
  - LoaderUtil.getClassLoaders may discover additional loaders and no longer erroneously returns
    a result with a null element in some environments.
  - CronExpression.getBeforeTime() would sometimes return incorrect result.
  - [JDBC] MS-SQL Server JDBC driver throws SQLServerException when inserting a null value
    for a VARBINARY column.
  - NullPointerException after reconfiguring via JMX.
  - Implement ISO8601_PERIOD_MICROS fixed date format matching ISO8601_PERIOD with support
    for microsecond precision.
  * Changes:
  - Conditionally perform status logging calculations in PluginRegistry.
  - Use LinkedBlockingQueue instead of synchronized collction in StatusConfiguration.
  - Add a retry count attribute to the KafkaAppender.
  - Update log4j-slf4j18-impl slf4j version to 1.8.0-beta4 from 1.8.0-alpha2.
  - Update dependencies.
- Remove patch fixed upstream:
  * logging-log4j-LOG4J2-2745-LOG4J2-2744-slf4j.patch
  * log4j-CVE-2020-9488.patch
- Refresh patch:
  * logging-log4j-Remove-unsupported-EventDataConverter.patch</changelog>
  <changelog author="fstrba@suse.com" date="1587988802">- Do not build the log4j-jpl artifact, as to avoid java-11-only
  features</changelog>
  <changelog author="psimons@suse.com" date="1639137600">- Apply "CVE-2021-44228.patch" to fix a remote code execution
  vulnerability that existed in the LDAP JNDI parser. [bsc#1193611,
  CVE-2021-44228]</changelog>
  <changelog author="psimons@suse.com" date="1639483200">- Apply "disable-jndi-by-default.patch" to disable JNDI support by
  default. There is evidence that the previous upstream fix for
  CVE-2021-44228 did not solve the vulnerability entirely. Since
  JNDI support is ususally not required, upstream recommends this
  route to be completely safe. [bsc#1193611, CVE-2021-44228]</changelog>
  <changelog author="sflees@suse.de" date="1639569600">- Update to 2.16.0 [bsc#1193743, CVE-2021-45046]
  * Features
  - Add JsonTemplateLayout.
  - Create module log4j-mongodb4 to use new major version 4
    MongoDB driver.
  - More flexible configuration of the Disruptor WaitStrategy.
    Thanks to Stepan Gorban.
  * Bugfixes and minor enhancements
  - It was found that the fix to address CVE-2021-44228 in Apache
    Log4j 2.15.0 was incomplete in certain non-default
    configurations.
    This could allows attackers with control over Thread Context
    Map (MDC) input data when the logging configuration uses a
    Pattern Layout with either a Context Lookup (for example,
    $${ctx:loginId}) or a Thread Context Map pattern (%X, %mdc, or
    %MDC) to craft malicious input data using a JNDI Lookup
    pattern resulting in a denial of service (DOS) attack.
    Log4j 2.15.0 restricts JNDI LDAP lookups to localhost by
    default. Note that previous mitigations involving
    configuration such as setting the system property
    log4j2.noFormatMsgLookup to true do NOT mitigate this specific
    vulnerability.
  - Upstream initial fix for bsc#1193611, CVE-2021-44228
  - Numerous other minor bugfixes
  * Drop CVE-2021-44228.patch and disable-jndi-by-default.patch
    included upstream
  * To make the bots happy this stream isn't affected by
    bsc#1193662 CVE-2021-4104 which is 1.X only</changelog>
  <changelog author="david.anes@suse.com" date="1639828800">- Update to 2.17.0 [bsc#1193887, bsc#1193888, CVE-2021-45105]
  * Fixed Bugs
  - Fix string substitution recursion.
  - Limit JNDI to the java protocol only. JNDI will remain disabled
    by default. Rename JNDI enablement property from
    'log4j2.enableJndi' to 'log4j2.enableJndiLookup',
    'log4j2.enableJndiJms', and 'log4j2.enableJndiContextSelector'.
  - Limit JNDI to the java protocol only. JNDI will remain disabled
    by default. The enablement property has been renamed to
    'log4j2.enableJndiJava'
  - Do not declare log4j-api-java9 and log4j-core-java9 as
    dependencies as it causes problems with the Maven enforcer
    plugin.
  - PropertiesConfiguration.parseAppenderFilters NPE when parsing
    properties file filters.
  - Log4j 1.2 bridge for Syslog Appender defaults to port 512
    instead of 514.
  - Log4j 1.2 bridge API hard codes the Syslog protocol to TCP.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639828801">- add upstream signing key to verify source signature</changelog>
  <changelog author="david.anes@suse.com" date="1640779200">- Update to 2.17.1 [bsc#1194127, CVE-2021-44832]
  * Fixed bugs:
  - JdbcAppender now uses JndiManager to access JNDI resources.
    JNDI is only enabled when system property log4j2.enableJndiJdbc
    is set to true.
  - Remove unused method.
  - ExtendedLoggerWrapper.logMessage no longer double-logs when
    location is requested.
  - log4j-to-slf4j no longer re-interpolates formatted message
    contents.
  - Correct SpringLookup package name in Interpolator.
  - log4j-to-slf4j takes the provided MessageFactory into account.
  - Fix MapLookup to lookup MapMessage before DefaultMap.
  - Buffered I/O checked had inverted logic in
    RollingFileAppenderBuidler.
  - Fix NPE when input is null in
    StrSubstitutor.replace(String, Properties).
  - Lookups with no prefix only read values from the configuration
    properties as expected.
  - Reduce ignored package scope of KafkaAppender.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Remove alias log4j:log4j from log4j-1.2-api, since it is not a
  drop-in replacement</changelog>
  <changelog author="david.anes@suse.com" date="1646913600">- Update to 2.17.2
  * New Features
  - Limit loading of configuration via a url to https by default.
  - Require log4j2.Script.enableLanguages to be specified to
    enable scripting for specific languages.
  - Add TB support to FileSize.
  - Add the log4j-to-jul JDK Logging Bridge.
  - Add org.apache.logging.log4j.core.appender.AsyncAppender.getAppenders()
    to more easily port from org.apache.log4j.AsyncAppender.getAllAppenders().
  - Add Configurator.setLevel(Logger, Level),
    setLevel(String, String), and setLevel(Class, Level).
  - Add shorthand syntax for properties configuration format for
    specifying a logger level and appender refs.
  - Add optional additional fields to NoSQLAppender.
  * Fixed Bugs
  - Flag LogManager as initiialized if the LoggerFactory is
    provided as a property.
  - Fix DefaultConfiguration leak in PatternLayout.
  - Document that the Spring Boot Lookup requires the
    log4j-spring-boot dependency.
  - Fix RoutingAppender backcompat and disallow recursive
    evaluation of lookup results outside of configuration
    properties.
  - Fix ThreadContextDataInjector initialization deadlock.
  - Fix substitutions when programmatic configuration is used.
  - OptionConverter could cause a StackOverflowError.
  - Log4j 1.2 bridge class ConsoleAppender should extend
    WriterAppender and provide better compatibility with custom
    appenders.
  - Log4j 1.2 bridge method NDC.inherit(Stack) should not use
    generics to provide source compatibility.
  - Log4j 1.2 bridge class PatternLayout is missing constants
    DEFAULT_CONVERSION_PATTERN and TTCC_CONVERSION_PATTERN.
  - Log4j 1.2 bridge class PropertyConfigurator should implement
    Configurator.
  - Log4j 1.2 bridge interface Configurator doConfigure() methods
    should use LoggerRepository, not LoggerContext.
  - Log4j 1.2 bridge class OptionConverter is missing
    selectAndConfigure() methods.
  - Log4j 1.2 bridge class Category should implement
    AppenderAttachable.
  - Log4j 1.2 bridge method Category.exists(String) should be
    static.
  - Log4j 1.2 bridge methods missing in org.apache.log4j.Category:
    getDefaultHierarchy(), getHierarchy(), getLoggerRepository().
  - Log4j 1.2 bridge class LogManager default constructor should
    be public.
  - Log4j 1.2 bridge interface org.apache.log4j.spi.RendererSupport
    was in the wrong package and incomplete.
  - Log4j 1.2 bridge interfaces missing from package
    org.apache.log4j.spi: ThrowableRenderer,
    ThrowableRendererSupport, TriggeringEventEvaluator.
  - Log4j 1.2 bridge missing class org.apache.log4j.or.RendererMap.
  - Log4j 1.2 bridge PropertiesConfiguration.buildAppender not
    adding filters to custom appender.
  - Log4j 1.2 bridge should ignore case in properties file keys.
  - Log4j 1.2 bridge adds org.apache.log4j.component.helpers.Constants.
  - Log4j 1.2 bridge adds org.apache.log4j.helpers.LogLog.
  - Log4j 1.2 bridge adds org.apache.log4j.helpers.Loader.
  - Log4j 1.2 bridge adds org.apache.log4j.spi.RootLogger.
  - Log4j 1.2 bridge class Category is missing some protected
    instance variables.
  - Log4j 1.2 bridge adds org.apache.log4j.Hierarchy.
  - Log4j 1.2 bridge methods Category.getChainedPriority() and
    getEffectiveLevel() should not be final.
  - Log4j 1.2 bridge adds org.apache.log4j.spi.NOPLoggerRepository
    and NOPLogger.
  - Log4j 1.2 bridge adds org.apache.log4j.spi.DefaultRepositorySelector.
  - Log4j 1.2 bridge implements LogManager.getCurrentLoggers()
    fully.
  - Log4j 1.2 bridge fixes parsing filters in properties
    configuration file #680.
  - Log4j 1.2 bridge missing OptionConverter.instantiateByKey(
    Properties, String, Class, Object).
  - Log4j 1.2 bridge class org.apache.log4j.spi.LoggingEvent
    missing constructors and public instance variable.
  - Log4j 1.2 bridge does not support system properties in log4j.xml.
  - Log4j 1.2 bridge now logs a warning instead of throwing an
    NullPointerException when building a Syslog appender with a
    missing "SyslogHost" param.
  - Log4j 1.2 bridge should allow property and XML attributes to
    start with either an upper-case or lower-case letter.
  - Log4j 1.2 bridge uses the wrong default values for a
    TTCCLayout.
  - Log4j 1.2 bridge throws ClassCastException when using
    SimpleLayout and others.
  - Log4j 1.2 bridge uses the wrong file pattern for rolling file
    appenders.
  - Log4j 1.2 bridge throws ClassCastException when using
    SimpleLayout and others.
  - Log4j 1.2 bridge creates a SocketAppender instead of a
    SyslogAppender.
  - Log4j 1.2 bridge uses some incorrect default property values
    in some appenders.
  - Log4j 1.2 bridge supports the SocketAppender.
  - Log4j 1.2 bridge missing DefaultThrowableRenderer.
  - Log4j 1.2 bridge missing some ThrowableInformation constructors.
  - Log4j 1.2 bridge missing some LocationInfo constructors.
  - Log4j 1.2 bridge missed
  - Log4j 1.2 bridge missed org.apache.log4j.pattern.FormattingInfo.
  - Log4j 1.2 bridge missed org.apache.log4j.pattern.NameAbbreviator.
  - Log4j 1.2 bridge missing UtilLoggingLevel.
  - Log4j 1.2 bridge missing FormattingInfo.
  - Log4j 1.2 bridge missing PatternConverter.
  - Log4j 1.2 bridge missing PatternParser.
  - Log4j 1.2 bridge issues with filters.
  - Log4j 1.2 bridge implements most of DOMConfigurator.
  - JndiManager reverts to 2.17.0 behavior: Read the system
    property for each call.
  - Configurator.setLevel not fetching the correct LoggerContext.
  - Fix DTD error: Add missing ELEMENT for Marker.
  - Fix log4j-jakarta-web service file.
  - AppenderLoggingException logging any exception to a MongoDB
    Appender.
  - Possible NullPointerException in MongoDb4DocumentObject,
    MongoDbDocumentObject, DefaultNoSqlObject.
  - Trim whitespace before parsing a String into an Integer.
  - Log4j 1.2 bridge throws a ClassCastException when logging a
    Map with non-String keys.
  - Log4j 1.2 bridge Check for non-existent appender when parsing
    properties #761. Thanks to Kenny MacLeod.
  - Log4j 1.2 bridge supports global threshold.
  * Changes
  - Change modifier of method
    org.apache.logging.log4j.core.tools.Generate#generate to
    public (was package private) to facilitate automated code
    generation.</changelog>
  <changelog author="fstrba@suse.com" date="1649678400">- Add dependency on standalone javax.activation-api that is not
  included in newer JDKs</changelog>
  <changelog author="fstrba@suse.com" date="1655121600">- Build as multi-release jar.
- Add some logging providers which we can build with the existing
  dependencies and without cycles.</changelog>
  <changelog author="fstrba@suse.com" date="1655121601">- Do not package the *.zip artifacts whose content is part of the
  multi-release jars already
- Added patch:
  * log4j-java8compat.patch
    + maintain ByteBuffer and CharBuffer compatibility with java 8</changelog>
  <changelog author="fstrba@suse.com" date="1655294400">- Build also taglib, jmx-gui, bom, nosql and web modules, on
  platforms where we have the dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1710072000">- Added patch:
  * log4j-jackson-databind.patch
    + do not use previously deprecated methods, removed in
    jackson-databind 2.16.x</changelog>
  <changelog author="fstrba@suse.com" date="1714392000">- The binaries are compatible with java 1.8
- Fetch newer upstream keyring</changelog>
  <changelog author="fstrba@suse.com" date="1767614400">- Upgrade to 2.18.0
  * Added
    + Add support for Jakarta Mail API in the SMTP appender.
    + Add support for custom Log4j 1.x levels.
    + Add support for adding and retrieving appenders in Log4j 1.x
    bridge.
    + Add support for custom LMAX disruptor WaitStrategy
    configuration.
    + Add support for Apache Extras' RollingFileAppender in Log4j
    1.x bridge.
    + Add MutableThreadContextMapFilter.
    + Add support for 24 colors in highlighting
  * Changed
    + Improves ServiceLoader support on servlet containers.
    + Make the default disruptor WaitStrategy used by Async Loggers
    garbage-free.
    + Do not throw UnsupportedOperationException when JUL
    ApiLogger::setLevel is called.
    + Support Spring 2.6.x.
    + Move perf tests to log4j-core-its
    + Upgrade the Flume Appender to Flume 1.10.0
  * Fixed
    + Fix minor typo #792.
    + Improve validation and reporting of configuration errors.
    + Allow enterprise id to be an OID fragment.
    + Fix problem with non-uppercase custom levels.
    + Avoid ClassCastException in JeroMqManager with custom
    LoggerContextFactory #791.
    + DirectWriteRolloverStrategy should use the current time when
    creating files.
    + Fixes the syslog appender in Log4j 1.x bridge, when used with
    a custom layout.
    + log4j-1.2-api 2.17.2 throws NullPointerException while
    removing appender with name as null.
    + Improve JsonTemplateLayout performance.
    + Fix resolution of non-Log4j properties.
    + Fixes Spring Boot logging system registration in a
    multi-application environment.
    + JAR file containing Log4j configuration isn’t closed.
    + Properties defined in configuration using a value attribute
    (as opposed to element) are read correctly.
    + Syslog appender lacks the SocketOptions setting.
    + Log4j 1.2 bridge should not wrap components unnecessarily.
    + Update 3rd party dependencies for 2.18.0.
    + SizeBasedTriggeringPolicy would fail to rename files properly
    when integer pattern contained a leading zero.
    + Fixes default SslConfiguration, when a custom keystore is
    used.
    + Fixes appender concurrency problems in Log4j 1.x bridge.
    + Fix and test for race condition in FileUtils.mkdir().
    + LocalizedMessage logs misleading errors on the console.
    + Add missing message parameterization in RegexFilter.
    + Add the missing context stack to JsonLayout template.
    + HttpWatcher did not pass credentials when polling.
    + UrlConnectionFactory.createConnection now accepts an
    AuthorizationProvider as a parameter.
    + The DirectWriteRolloverStrategy was not detecting the correct
    index to use during startup.
    + Async Loggers were including the location information by
    default.
    + ClassArbiter’s newBuilder method referenced the wrong class.
    + Don’t use Paths.get() to avoid circular file systems.
    + Fix parsing error, when XInclude is disabled.
    + Fix LevelRangeFilterBuilder to align with log4j1’s behavior.
    + Fixes problem with wrong ANSI escape code for bright colors
    + Log4j 1.2 bridge should generate Log4j 2.x messages based on
    the parameter runtime type.
- Update to 2.19.0
  * Added
    + Add implementation of SLF4J2 fluent API.
    + Add support for SLF4J2 stack-valued MDC.
  * Changed
    + Add getExplicitLevel method to LoggerConfig.
    + Allow PropertySources to be added.
    + Allow Plugins to be injected with the LoggerContext reference.
  * Fixed
    + Add correct manifest entries for OSGi to log4j-jcl
    + Improve support for passwordless keystores.
    + SystemPropertyArbiter was assigning the value as the name.
    + Make JsonTemplateLayout stack trace truncation operate for
    each label block.
    + Fix recursion between Log4j 1.2 LogManager and Category.
    + Fix resolution of properties not starting with log4j2..
    + Logger$PrivateConfig.filter(Level, Marker, String) was
    allocating empty varargs array.
    + Allows a space separated list of style specifiers in the
    %style pattern for consistency with %highlight.
    + Fix NPE in log4j-to-jul in the case the root logger level is
    null.
    + Fix RollingRandomAccessFileAppender with
    DirectWriteRolloverStrategy can’t create the first log file of
    different directory.
    + Generate new SSL certs for testing.
    + Fix ServiceLoaderUtil behavior in the presence of a
    SecurityManager.
    + Fix regression in Rfc5424Layout default values.
    + Harden InstantFormatter against delegate failures.
    + Add async support to Log4jServletFilter.
  * Removed
    + Removed build page in favor of a single build instructions
    file.
    + Remove SLF4J 1.8.x binding.
- Update to 2.20.0
  * Added
    + Add support for timezones in RollingFileAppender date pattern
    + Add LogEvent timestamp to ProducerRecord in KafkaAppender
    + Add PatternLayout support for abbreviating the name of all
    logger components except the 2 rightmost
    + Removes internal field that leaked into public API.
    + Add a LogBuilder#logAndGet() method to emulate the
    Logger#traceEntry method.
  * Changed
    + Simplify site generation
    + Switch the issue tracker from JIRA to GitHub Issues
    + Remove liquibase-log4j2 maven module
    + Fix order of stacktrace elements, that causes cache misses in
    ThrowableProxyHelper.
    + Switch from com.sun.mail to Eclipse Angus.
    + Add Log4j2 Core as default runtime dependency of the
    SLF4J2-to-Log4j2 API bridge.
    + Replace maven-changes-plugin with a custom changelog
    implementation
    + Moved log4j-api and log4j-core artifacts with classifier tests
    to log4j-api-test and log4j-core-test respectively.
  * Deprecated
    + Deprecate support for package scanning for plugins
  * Fixed
    + Copy programmatically supplied location even if
    includeLocation="false".
    + Eliminate status logger warning, when disableAnsi or
    noConsoleNoAnsi is used the style and highlight patterns.
    + Fix detection of location requirements in RewriteAppender.
    + Replace regex with manual code to escape characters in
    Rfc5424Layout.
    + Fix java.sql.Time object formatting in MapMessage
    + Fix previous fire time computation in CronTriggeringPolicy
    + Correct default to not include location for AsyncRootLoggers
    + Make StatusConsoleListener use SimpleLogger internally.
    + Lazily evaluate the level of a SLF4J LogEventBuilder
    + Fixes priority of Legacy system properties, which are now back
    to having higher priority than Environment variables.
    + Protects ServiceLoaderUtil from unchecked ServiceLoader
    exceptions.
    + Fix Configurator#setLevel for internal classes
    + Fix level propagation in Log4jBridgeHandler
    + Disable OsgiServiceLocator if not running in OSGI container.
    + When using a Date Lookup in the file pattern the current time
    should be used.
    + Fixed LogBuilder filtering in the presence of global filters.
- Removed patch:
  * log4j-java8compat.patch
    + not needed with this version
- Modified patch:
  * logging-log4j-Remove-unsupported-EventDataConverter.patch
    + rediff
- Added patch:
  * 0002-Remove-usage-of-toolchains.patch
    + do not use the maven-toolchains-plugin
  * log4j-CVE-2025-68161.patch
    + bsc#1255427, CVE-2025-68161: absent TLS hostname verification
    may allow a man-in-the-middle attack</changelog>
</package>
<package pkgid="9474d700db0687837ab7eb76158f16a0b56b739c0085491a7c15f045e4c55564" name="log4j-jcl" arch="noarch">
  <version epoch="0" ver="2.20.0" rel="150200.4.33.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1587988800">- Security fix: [bsc#1170535, CVE-2020-9488]
  * Improper validation of certificate with host mismatch in SMTP appender.
- Add log4j-CVE-2020-9488.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1587988801">- Update to 2.13.2 [bsc#1170535, CVE-2020-9488]
  * Bugfixes and minor enhancements:
  - CVE-2020-9488: Improper validation of certificate with host mismatch
    in Apache Log4j SMTP appender.
  - Implement requiresLocation in GelfLayout to reflect whether location
    information is used in the message Pattern.
  - Add option to restore printing timeMillis in the JsonLayout.
  - Initialize pattern processor before triggering policy during reconfiguration.
  - Add information about using a url in log4j.configurationFile.
  - serializeToBytes was checking wrong variable for null.
  - Fix Javadoc for ScriptPatternSelector.
  - Allow trailing and leading spaces in log level.
  - Correct JsonLayout timestamp sorting issue.
  - Allow the file size action to parse the value without being sensitive
    to the current locale.
  - Make YamlLayoutTest more resiliant to environmental differences.
  - Conditionally allocate PluginEntry during PluginCache loading.
  - Add missing includeLocation parameter when creating AsyncLogger.
  - Fix Exceptions when whitespace is in the file path and Java security
    manager is used.
  - Avoid NullPointerException when StackWalker returns null.
  - TimeFilter did not handle daylight saving time transitions and did
    not support a range over 2 days.
  - Provide a Log4j implementation of System.Logger.
  - Added EventLookup to retrieve fields from the log event.
  * Changes:
  - Allow the file extension in the file pattern to be modified during reconfiguration.
  - Add support for specifying an SSL configuration for SmtpAppender.
  - Allow servlet context path to be retrieved without "/".
  - Allow Spring Lookup to return default and active profiles.
  - Allow Spring Boot applications to use composite configuratons.
  - Add ContextDataProviders as an alternative to having to implement a ContextDataInjector.
  - [JDBC] Throw a AppenderLoggingException instead of an NPE in the JDBC database manager.
- Update to 2.13.1
  - Prevent LoggerContext from being garbage collected while being created.
  - Do not log an error if Files.move does not work.
  - Rollover fails when file matches pattern but index is too large.
  - Counter stuck at 10 and overwriting files when leading zeros used in the file pattern count.
  - ClassLoaderContextSelector was not locating the LoggerContext during shutdown.
  - JSON output wrong when using additonal fields.
  - GraalVM does not allow use of MethodHandles.
  - Allow Lookup keys with leading dashes by using a slash as an escape character.
  - ServletContainerInitializer was obtaining the StatusLogger too soon.
  - PluginProcessor should use Messager instead of System.out.
  - MapMessage.getFormattedMesssage() would incorrectly format objects.
  - Always write header on a new OutputStream.
  - An error message in RollingFileAppender uses a placeholder for the name but does not
    specify the name argument in the logging call.
  - NullPointerException when using a custom DirectFileRolloverStrategy without a file name.
  - Add mulit-parameter overloads to LogBuilder.
  - Fixed NullPointerException after reconfiguring via JMX.
  - RollingFileAppender was not rolling on startup if createOnDemand was set to true.
  - Warn if pattern is missing on Routes element. Use default route.
  - Fix lock contention in the classloader using new versions of slf4j without EventData
    on slf4j logger creation.
  - Rollover handles parallel file deletion gracefully.
  - Remove unnecessary EventLogger references from log4j-slf4j18-impl due to removal from slf4j.
  - Fix a memory leak using fully asynchronous logging when the queue is full using the 'discard'
    asynchronous queue full strategy.
  - Fix erroneous log4j-jul recursive logger detection resulting in some no-op JUL loggers and
    'WARN Recursive call to getLogger' being reported by the status logger.
  - PluginCache output is reproducible allowing the annotation processor to produce
    deterministic results.
  - Fix StackLocator.getCallerClass performance in cases where Reflection.getCallerClass
    is not accessible.
  - MutableLogEvent and RingBufferLogEvent avoid StringBuffer and parameter array allocation
    unless reusable messages are used.
  - LoaderUtil.getClassLoaders may discover additional loaders and no longer erroneously returns
    a result with a null element in some environments.
  - CronExpression.getBeforeTime() would sometimes return incorrect result.
  - [JDBC] MS-SQL Server JDBC driver throws SQLServerException when inserting a null value
    for a VARBINARY column.
  - NullPointerException after reconfiguring via JMX.
  - Implement ISO8601_PERIOD_MICROS fixed date format matching ISO8601_PERIOD with support
    for microsecond precision.
  * Changes:
  - Conditionally perform status logging calculations in PluginRegistry.
  - Use LinkedBlockingQueue instead of synchronized collction in StatusConfiguration.
  - Add a retry count attribute to the KafkaAppender.
  - Update log4j-slf4j18-impl slf4j version to 1.8.0-beta4 from 1.8.0-alpha2.
  - Update dependencies.
- Remove patch fixed upstream:
  * logging-log4j-LOG4J2-2745-LOG4J2-2744-slf4j.patch
  * log4j-CVE-2020-9488.patch
- Refresh patch:
  * logging-log4j-Remove-unsupported-EventDataConverter.patch</changelog>
  <changelog author="fstrba@suse.com" date="1587988802">- Do not build the log4j-jpl artifact, as to avoid java-11-only
  features</changelog>
  <changelog author="psimons@suse.com" date="1639137600">- Apply "CVE-2021-44228.patch" to fix a remote code execution
  vulnerability that existed in the LDAP JNDI parser. [bsc#1193611,
  CVE-2021-44228]</changelog>
  <changelog author="psimons@suse.com" date="1639483200">- Apply "disable-jndi-by-default.patch" to disable JNDI support by
  default. There is evidence that the previous upstream fix for
  CVE-2021-44228 did not solve the vulnerability entirely. Since
  JNDI support is ususally not required, upstream recommends this
  route to be completely safe. [bsc#1193611, CVE-2021-44228]</changelog>
  <changelog author="sflees@suse.de" date="1639569600">- Update to 2.16.0 [bsc#1193743, CVE-2021-45046]
  * Features
  - Add JsonTemplateLayout.
  - Create module log4j-mongodb4 to use new major version 4
    MongoDB driver.
  - More flexible configuration of the Disruptor WaitStrategy.
    Thanks to Stepan Gorban.
  * Bugfixes and minor enhancements
  - It was found that the fix to address CVE-2021-44228 in Apache
    Log4j 2.15.0 was incomplete in certain non-default
    configurations.
    This could allows attackers with control over Thread Context
    Map (MDC) input data when the logging configuration uses a
    Pattern Layout with either a Context Lookup (for example,
    $${ctx:loginId}) or a Thread Context Map pattern (%X, %mdc, or
    %MDC) to craft malicious input data using a JNDI Lookup
    pattern resulting in a denial of service (DOS) attack.
    Log4j 2.15.0 restricts JNDI LDAP lookups to localhost by
    default. Note that previous mitigations involving
    configuration such as setting the system property
    log4j2.noFormatMsgLookup to true do NOT mitigate this specific
    vulnerability.
  - Upstream initial fix for bsc#1193611, CVE-2021-44228
  - Numerous other minor bugfixes
  * Drop CVE-2021-44228.patch and disable-jndi-by-default.patch
    included upstream
  * To make the bots happy this stream isn't affected by
    bsc#1193662 CVE-2021-4104 which is 1.X only</changelog>
  <changelog author="david.anes@suse.com" date="1639828800">- Update to 2.17.0 [bsc#1193887, bsc#1193888, CVE-2021-45105]
  * Fixed Bugs
  - Fix string substitution recursion.
  - Limit JNDI to the java protocol only. JNDI will remain disabled
    by default. Rename JNDI enablement property from
    'log4j2.enableJndi' to 'log4j2.enableJndiLookup',
    'log4j2.enableJndiJms', and 'log4j2.enableJndiContextSelector'.
  - Limit JNDI to the java protocol only. JNDI will remain disabled
    by default. The enablement property has been renamed to
    'log4j2.enableJndiJava'
  - Do not declare log4j-api-java9 and log4j-core-java9 as
    dependencies as it causes problems with the Maven enforcer
    plugin.
  - PropertiesConfiguration.parseAppenderFilters NPE when parsing
    properties file filters.
  - Log4j 1.2 bridge for Syslog Appender defaults to port 512
    instead of 514.
  - Log4j 1.2 bridge API hard codes the Syslog protocol to TCP.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639828801">- add upstream signing key to verify source signature</changelog>
  <changelog author="david.anes@suse.com" date="1640779200">- Update to 2.17.1 [bsc#1194127, CVE-2021-44832]
  * Fixed bugs:
  - JdbcAppender now uses JndiManager to access JNDI resources.
    JNDI is only enabled when system property log4j2.enableJndiJdbc
    is set to true.
  - Remove unused method.
  - ExtendedLoggerWrapper.logMessage no longer double-logs when
    location is requested.
  - log4j-to-slf4j no longer re-interpolates formatted message
    contents.
  - Correct SpringLookup package name in Interpolator.
  - log4j-to-slf4j takes the provided MessageFactory into account.
  - Fix MapLookup to lookup MapMessage before DefaultMap.
  - Buffered I/O checked had inverted logic in
    RollingFileAppenderBuidler.
  - Fix NPE when input is null in
    StrSubstitutor.replace(String, Properties).
  - Lookups with no prefix only read values from the configuration
    properties as expected.
  - Reduce ignored package scope of KafkaAppender.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Remove alias log4j:log4j from log4j-1.2-api, since it is not a
  drop-in replacement</changelog>
  <changelog author="david.anes@suse.com" date="1646913600">- Update to 2.17.2
  * New Features
  - Limit loading of configuration via a url to https by default.
  - Require log4j2.Script.enableLanguages to be specified to
    enable scripting for specific languages.
  - Add TB support to FileSize.
  - Add the log4j-to-jul JDK Logging Bridge.
  - Add org.apache.logging.log4j.core.appender.AsyncAppender.getAppenders()
    to more easily port from org.apache.log4j.AsyncAppender.getAllAppenders().
  - Add Configurator.setLevel(Logger, Level),
    setLevel(String, String), and setLevel(Class, Level).
  - Add shorthand syntax for properties configuration format for
    specifying a logger level and appender refs.
  - Add optional additional fields to NoSQLAppender.
  * Fixed Bugs
  - Flag LogManager as initiialized if the LoggerFactory is
    provided as a property.
  - Fix DefaultConfiguration leak in PatternLayout.
  - Document that the Spring Boot Lookup requires the
    log4j-spring-boot dependency.
  - Fix RoutingAppender backcompat and disallow recursive
    evaluation of lookup results outside of configuration
    properties.
  - Fix ThreadContextDataInjector initialization deadlock.
  - Fix substitutions when programmatic configuration is used.
  - OptionConverter could cause a StackOverflowError.
  - Log4j 1.2 bridge class ConsoleAppender should extend
    WriterAppender and provide better compatibility with custom
    appenders.
  - Log4j 1.2 bridge method NDC.inherit(Stack) should not use
    generics to provide source compatibility.
  - Log4j 1.2 bridge class PatternLayout is missing constants
    DEFAULT_CONVERSION_PATTERN and TTCC_CONVERSION_PATTERN.
  - Log4j 1.2 bridge class PropertyConfigurator should implement
    Configurator.
  - Log4j 1.2 bridge interface Configurator doConfigure() methods
    should use LoggerRepository, not LoggerContext.
  - Log4j 1.2 bridge class OptionConverter is missing
    selectAndConfigure() methods.
  - Log4j 1.2 bridge class Category should implement
    AppenderAttachable.
  - Log4j 1.2 bridge method Category.exists(String) should be
    static.
  - Log4j 1.2 bridge methods missing in org.apache.log4j.Category:
    getDefaultHierarchy(), getHierarchy(), getLoggerRepository().
  - Log4j 1.2 bridge class LogManager default constructor should
    be public.
  - Log4j 1.2 bridge interface org.apache.log4j.spi.RendererSupport
    was in the wrong package and incomplete.
  - Log4j 1.2 bridge interfaces missing from package
    org.apache.log4j.spi: ThrowableRenderer,
    ThrowableRendererSupport, TriggeringEventEvaluator.
  - Log4j 1.2 bridge missing class org.apache.log4j.or.RendererMap.
  - Log4j 1.2 bridge PropertiesConfiguration.buildAppender not
    adding filters to custom appender.
  - Log4j 1.2 bridge should ignore case in properties file keys.
  - Log4j 1.2 bridge adds org.apache.log4j.component.helpers.Constants.
  - Log4j 1.2 bridge adds org.apache.log4j.helpers.LogLog.
  - Log4j 1.2 bridge adds org.apache.log4j.helpers.Loader.
  - Log4j 1.2 bridge adds org.apache.log4j.spi.RootLogger.
  - Log4j 1.2 bridge class Category is missing some protected
    instance variables.
  - Log4j 1.2 bridge adds org.apache.log4j.Hierarchy.
  - Log4j 1.2 bridge methods Category.getChainedPriority() and
    getEffectiveLevel() should not be final.
  - Log4j 1.2 bridge adds org.apache.log4j.spi.NOPLoggerRepository
    and NOPLogger.
  - Log4j 1.2 bridge adds org.apache.log4j.spi.DefaultRepositorySelector.
  - Log4j 1.2 bridge implements LogManager.getCurrentLoggers()
    fully.
  - Log4j 1.2 bridge fixes parsing filters in properties
    configuration file #680.
  - Log4j 1.2 bridge missing OptionConverter.instantiateByKey(
    Properties, String, Class, Object).
  - Log4j 1.2 bridge class org.apache.log4j.spi.LoggingEvent
    missing constructors and public instance variable.
  - Log4j 1.2 bridge does not support system properties in log4j.xml.
  - Log4j 1.2 bridge now logs a warning instead of throwing an
    NullPointerException when building a Syslog appender with a
    missing "SyslogHost" param.
  - Log4j 1.2 bridge should allow property and XML attributes to
    start with either an upper-case or lower-case letter.
  - Log4j 1.2 bridge uses the wrong default values for a
    TTCCLayout.
  - Log4j 1.2 bridge throws ClassCastException when using
    SimpleLayout and others.
  - Log4j 1.2 bridge uses the wrong file pattern for rolling file
    appenders.
  - Log4j 1.2 bridge throws ClassCastException when using
    SimpleLayout and others.
  - Log4j 1.2 bridge creates a SocketAppender instead of a
    SyslogAppender.
  - Log4j 1.2 bridge uses some incorrect default property values
    in some appenders.
  - Log4j 1.2 bridge supports the SocketAppender.
  - Log4j 1.2 bridge missing DefaultThrowableRenderer.
  - Log4j 1.2 bridge missing some ThrowableInformation constructors.
  - Log4j 1.2 bridge missing some LocationInfo constructors.
  - Log4j 1.2 bridge missed
  - Log4j 1.2 bridge missed org.apache.log4j.pattern.FormattingInfo.
  - Log4j 1.2 bridge missed org.apache.log4j.pattern.NameAbbreviator.
  - Log4j 1.2 bridge missing UtilLoggingLevel.
  - Log4j 1.2 bridge missing FormattingInfo.
  - Log4j 1.2 bridge missing PatternConverter.
  - Log4j 1.2 bridge missing PatternParser.
  - Log4j 1.2 bridge issues with filters.
  - Log4j 1.2 bridge implements most of DOMConfigurator.
  - JndiManager reverts to 2.17.0 behavior: Read the system
    property for each call.
  - Configurator.setLevel not fetching the correct LoggerContext.
  - Fix DTD error: Add missing ELEMENT for Marker.
  - Fix log4j-jakarta-web service file.
  - AppenderLoggingException logging any exception to a MongoDB
    Appender.
  - Possible NullPointerException in MongoDb4DocumentObject,
    MongoDbDocumentObject, DefaultNoSqlObject.
  - Trim whitespace before parsing a String into an Integer.
  - Log4j 1.2 bridge throws a ClassCastException when logging a
    Map with non-String keys.
  - Log4j 1.2 bridge Check for non-existent appender when parsing
    properties #761. Thanks to Kenny MacLeod.
  - Log4j 1.2 bridge supports global threshold.
  * Changes
  - Change modifier of method
    org.apache.logging.log4j.core.tools.Generate#generate to
    public (was package private) to facilitate automated code
    generation.</changelog>
  <changelog author="fstrba@suse.com" date="1649678400">- Add dependency on standalone javax.activation-api that is not
  included in newer JDKs</changelog>
  <changelog author="fstrba@suse.com" date="1655121600">- Build as multi-release jar.
- Add some logging providers which we can build with the existing
  dependencies and without cycles.</changelog>
  <changelog author="fstrba@suse.com" date="1655121601">- Do not package the *.zip artifacts whose content is part of the
  multi-release jars already
- Added patch:
  * log4j-java8compat.patch
    + maintain ByteBuffer and CharBuffer compatibility with java 8</changelog>
  <changelog author="fstrba@suse.com" date="1655294400">- Build also taglib, jmx-gui, bom, nosql and web modules, on
  platforms where we have the dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1710072000">- Added patch:
  * log4j-jackson-databind.patch
    + do not use previously deprecated methods, removed in
    jackson-databind 2.16.x</changelog>
  <changelog author="fstrba@suse.com" date="1714392000">- The binaries are compatible with java 1.8
- Fetch newer upstream keyring</changelog>
  <changelog author="fstrba@suse.com" date="1767614400">- Upgrade to 2.18.0
  * Added
    + Add support for Jakarta Mail API in the SMTP appender.
    + Add support for custom Log4j 1.x levels.
    + Add support for adding and retrieving appenders in Log4j 1.x
    bridge.
    + Add support for custom LMAX disruptor WaitStrategy
    configuration.
    + Add support for Apache Extras' RollingFileAppender in Log4j
    1.x bridge.
    + Add MutableThreadContextMapFilter.
    + Add support for 24 colors in highlighting
  * Changed
    + Improves ServiceLoader support on servlet containers.
    + Make the default disruptor WaitStrategy used by Async Loggers
    garbage-free.
    + Do not throw UnsupportedOperationException when JUL
    ApiLogger::setLevel is called.
    + Support Spring 2.6.x.
    + Move perf tests to log4j-core-its
    + Upgrade the Flume Appender to Flume 1.10.0
  * Fixed
    + Fix minor typo #792.
    + Improve validation and reporting of configuration errors.
    + Allow enterprise id to be an OID fragment.
    + Fix problem with non-uppercase custom levels.
    + Avoid ClassCastException in JeroMqManager with custom
    LoggerContextFactory #791.
    + DirectWriteRolloverStrategy should use the current time when
    creating files.
    + Fixes the syslog appender in Log4j 1.x bridge, when used with
    a custom layout.
    + log4j-1.2-api 2.17.2 throws NullPointerException while
    removing appender with name as null.
    + Improve JsonTemplateLayout performance.
    + Fix resolution of non-Log4j properties.
    + Fixes Spring Boot logging system registration in a
    multi-application environment.
    + JAR file containing Log4j configuration isn’t closed.
    + Properties defined in configuration using a value attribute
    (as opposed to element) are read correctly.
    + Syslog appender lacks the SocketOptions setting.
    + Log4j 1.2 bridge should not wrap components unnecessarily.
    + Update 3rd party dependencies for 2.18.0.
    + SizeBasedTriggeringPolicy would fail to rename files properly
    when integer pattern contained a leading zero.
    + Fixes default SslConfiguration, when a custom keystore is
    used.
    + Fixes appender concurrency problems in Log4j 1.x bridge.
    + Fix and test for race condition in FileUtils.mkdir().
    + LocalizedMessage logs misleading errors on the console.
    + Add missing message parameterization in RegexFilter.
    + Add the missing context stack to JsonLayout template.
    + HttpWatcher did not pass credentials when polling.
    + UrlConnectionFactory.createConnection now accepts an
    AuthorizationProvider as a parameter.
    + The DirectWriteRolloverStrategy was not detecting the correct
    index to use during startup.
    + Async Loggers were including the location information by
    default.
    + ClassArbiter’s newBuilder method referenced the wrong class.
    + Don’t use Paths.get() to avoid circular file systems.
    + Fix parsing error, when XInclude is disabled.
    + Fix LevelRangeFilterBuilder to align with log4j1’s behavior.
    + Fixes problem with wrong ANSI escape code for bright colors
    + Log4j 1.2 bridge should generate Log4j 2.x messages based on
    the parameter runtime type.
- Update to 2.19.0
  * Added
    + Add implementation of SLF4J2 fluent API.
    + Add support for SLF4J2 stack-valued MDC.
  * Changed
    + Add getExplicitLevel method to LoggerConfig.
    + Allow PropertySources to be added.
    + Allow Plugins to be injected with the LoggerContext reference.
  * Fixed
    + Add correct manifest entries for OSGi to log4j-jcl
    + Improve support for passwordless keystores.
    + SystemPropertyArbiter was assigning the value as the name.
    + Make JsonTemplateLayout stack trace truncation operate for
    each label block.
    + Fix recursion between Log4j 1.2 LogManager and Category.
    + Fix resolution of properties not starting with log4j2..
    + Logger$PrivateConfig.filter(Level, Marker, String) was
    allocating empty varargs array.
    + Allows a space separated list of style specifiers in the
    %style pattern for consistency with %highlight.
    + Fix NPE in log4j-to-jul in the case the root logger level is
    null.
    + Fix RollingRandomAccessFileAppender with
    DirectWriteRolloverStrategy can’t create the first log file of
    different directory.
    + Generate new SSL certs for testing.
    + Fix ServiceLoaderUtil behavior in the presence of a
    SecurityManager.
    + Fix regression in Rfc5424Layout default values.
    + Harden InstantFormatter against delegate failures.
    + Add async support to Log4jServletFilter.
  * Removed
    + Removed build page in favor of a single build instructions
    file.
    + Remove SLF4J 1.8.x binding.
- Update to 2.20.0
  * Added
    + Add support for timezones in RollingFileAppender date pattern
    + Add LogEvent timestamp to ProducerRecord in KafkaAppender
    + Add PatternLayout support for abbreviating the name of all
    logger components except the 2 rightmost
    + Removes internal field that leaked into public API.
    + Add a LogBuilder#logAndGet() method to emulate the
    Logger#traceEntry method.
  * Changed
    + Simplify site generation
    + Switch the issue tracker from JIRA to GitHub Issues
    + Remove liquibase-log4j2 maven module
    + Fix order of stacktrace elements, that causes cache misses in
    ThrowableProxyHelper.
    + Switch from com.sun.mail to Eclipse Angus.
    + Add Log4j2 Core as default runtime dependency of the
    SLF4J2-to-Log4j2 API bridge.
    + Replace maven-changes-plugin with a custom changelog
    implementation
    + Moved log4j-api and log4j-core artifacts with classifier tests
    to log4j-api-test and log4j-core-test respectively.
  * Deprecated
    + Deprecate support for package scanning for plugins
  * Fixed
    + Copy programmatically supplied location even if
    includeLocation="false".
    + Eliminate status logger warning, when disableAnsi or
    noConsoleNoAnsi is used the style and highlight patterns.
    + Fix detection of location requirements in RewriteAppender.
    + Replace regex with manual code to escape characters in
    Rfc5424Layout.
    + Fix java.sql.Time object formatting in MapMessage
    + Fix previous fire time computation in CronTriggeringPolicy
    + Correct default to not include location for AsyncRootLoggers
    + Make StatusConsoleListener use SimpleLogger internally.
    + Lazily evaluate the level of a SLF4J LogEventBuilder
    + Fixes priority of Legacy system properties, which are now back
    to having higher priority than Environment variables.
    + Protects ServiceLoaderUtil from unchecked ServiceLoader
    exceptions.
    + Fix Configurator#setLevel for internal classes
    + Fix level propagation in Log4jBridgeHandler
    + Disable OsgiServiceLocator if not running in OSGI container.
    + When using a Date Lookup in the file pattern the current time
    should be used.
    + Fixed LogBuilder filtering in the presence of global filters.
- Removed patch:
  * log4j-java8compat.patch
    + not needed with this version
- Modified patch:
  * logging-log4j-Remove-unsupported-EventDataConverter.patch
    + rediff
- Added patch:
  * 0002-Remove-usage-of-toolchains.patch
    + do not use the maven-toolchains-plugin
  * log4j-CVE-2025-68161.patch
    + bsc#1255427, CVE-2025-68161: absent TLS hostname verification
    may allow a man-in-the-middle attack</changelog>
  <changelog author="fstrba@suse.com" date="1776168000">- Added patch:
  * log4j-CVE-2026-34477.patch
    + backported upstream fix for bsc#1262050 (CVE-2026-34477):
    man-in-the-middle attack due to incomplete hostname
    verification</changelog>
  <changelog author="fstrba@suse.com" date="1776168001">- Added patches:
  * log4j-CVE-2026-34479.patch
    + backported upstream fix for bsc#1262091 (CVE-2026-34479):
    log processing denial of service due to improper XML escaping
  * log4j-CVE-2026-34480.patch
    + backported upstream fix for bsc#1262092 (CVE-2026-34480):
    invalid XML output causes denial of service in logging
  * log4j-CVE-2026-34481.patch
    + backported upstream fix for bsc#1262093 (CVE-2026-34481):
    denial of service via invalid JSON output</changelog>
</package>
<package pkgid="b8664f535a51b2265e64fed48fb1bc1af9887ab0609f0d0b389ae1ce4d87408a" name="log4j-slf4j" arch="noarch">
  <version epoch="0" ver="2.20.0" rel="150200.4.30.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1579608000">- Update to 2.13.0 [bsc#1159646, CVE-2019-17571]
  * Bugfixes and minor enhancements:
  - CVE-2019-17571: Remote code execution: Deserialization of untrusted
    data in SocketServer
  - Log4j 2 now requires Java 8 or higher to build and run.
  - Better integration with Spring Boot by providing access to Spring
    variables in Log4j 2 configuration files and allowing Log4j 2 system
    properties to be defined in the Spring configuration.
  - Support for accessing Kubernetes information via a Log4j 2 Lookup.
  - The Gelf Layout now allows the message to be formatted using a
    PatternLayout pattern.
  - Due to a break in compatibility in the SLF4J binding, Log4j now
    ships with two versions of the SLF4J to Log4j adapters.
  - log4j-slf4j-impl should be used with SLF4J 1.7.x and earlier and
    log4j-slf4j18-impl should be used with SLF4J 1.8.x and later.
  - Note that the XML, JSON and YAML formats changed in the 2.11.0 release:
    they no longer have the "timeMillis" attribute and instead have an
    "Instant" element with "epochSecond" and "nanoOfSecond" attributes.
  - The Log4j 2.13.0 API, as well as many core components, maintains
    binary compatibility with previous releases.
  * New Features
  - Add ThreadContext.putIfNotNull method.
  - Add a Level Patttern Selector.
  - Add experimental support for Log4j 1 configuration files.
  - Add the ability to lookup Kubernetes attributes in the Log4j
    configuration. Allow Log4j properties to be retrieved from the
    Spring environment if it is available.
  - Allow Spring Boot application properties to be accessed in the
    Log4j 2 configuration. Add lower and upper case Lookups.
  - Add builder pattern to Logger interface.
  * Fixed Bugs
  - Prevent recursive calls to java.util.LogManager.getLogger().
  - Added try/finally around event.execute() for RingBufferLogEventHandler
    to clear memory correctly in case of exception/error.
  - Wrong java version check in ThreadNameCachingStrategy.
  - Use a less confusing name for the CompositeConfiguration source.
  - Add setKey method to Kafka Appender Builder.
  - ArrayIndexOutOfBoundsException could occur with MAC address longer
    than 6 bytes.
  - The rolling file appenders would fail to compress the file after
    rollover if the file name matched the file pattern.
  - @PluginValue does not support attribute names besides "value".
  - Validation blocks definition of script in properties configuration.
  - Set result of rename action to true if file was copied.
  - Add automatic module names where missing.
  - OutputStreamAppender.Builder ignores setFilter().
  - Prevent a memory leak when async loggers throw errors.
  * Changes
  - Update Jackson to 2.9.10.
  - Allow message portion of GELF layout to be formatted using a PatternLayout.
  - Allow ThreadContext attributes to be explicitly included or excluded in the GelfLayout.</changelog>
  <changelog author="fstrba@suse.com" date="1582718400">- Added patches:
  * logging-log4j-LOG4J2-2745-LOG4J2-2744-slf4j.patch
  * logging-log4j-Remove-unsupported-EventDataConverter.patch
    + fix build with newer slf4j</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1587988800">- Security fix: [bsc#1170535, CVE-2020-9488]
  * Improper validation of certificate with host mismatch in SMTP appender.
- Add log4j-CVE-2020-9488.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1587988801">- Update to 2.13.2 [bsc#1170535, CVE-2020-9488]
  * Bugfixes and minor enhancements:
  - CVE-2020-9488: Improper validation of certificate with host mismatch
    in Apache Log4j SMTP appender.
  - Implement requiresLocation in GelfLayout to reflect whether location
    information is used in the message Pattern.
  - Add option to restore printing timeMillis in the JsonLayout.
  - Initialize pattern processor before triggering policy during reconfiguration.
  - Add information about using a url in log4j.configurationFile.
  - serializeToBytes was checking wrong variable for null.
  - Fix Javadoc for ScriptPatternSelector.
  - Allow trailing and leading spaces in log level.
  - Correct JsonLayout timestamp sorting issue.
  - Allow the file size action to parse the value without being sensitive
    to the current locale.
  - Make YamlLayoutTest more resiliant to environmental differences.
  - Conditionally allocate PluginEntry during PluginCache loading.
  - Add missing includeLocation parameter when creating AsyncLogger.
  - Fix Exceptions when whitespace is in the file path and Java security
    manager is used.
  - Avoid NullPointerException when StackWalker returns null.
  - TimeFilter did not handle daylight saving time transitions and did
    not support a range over 2 days.
  - Provide a Log4j implementation of System.Logger.
  - Added EventLookup to retrieve fields from the log event.
  * Changes:
  - Allow the file extension in the file pattern to be modified during reconfiguration.
  - Add support for specifying an SSL configuration for SmtpAppender.
  - Allow servlet context path to be retrieved without "/".
  - Allow Spring Lookup to return default and active profiles.
  - Allow Spring Boot applications to use composite configuratons.
  - Add ContextDataProviders as an alternative to having to implement a ContextDataInjector.
  - [JDBC] Throw a AppenderLoggingException instead of an NPE in the JDBC database manager.
- Update to 2.13.1
  - Prevent LoggerContext from being garbage collected while being created.
  - Do not log an error if Files.move does not work.
  - Rollover fails when file matches pattern but index is too large.
  - Counter stuck at 10 and overwriting files when leading zeros used in the file pattern count.
  - ClassLoaderContextSelector was not locating the LoggerContext during shutdown.
  - JSON output wrong when using additonal fields.
  - GraalVM does not allow use of MethodHandles.
  - Allow Lookup keys with leading dashes by using a slash as an escape character.
  - ServletContainerInitializer was obtaining the StatusLogger too soon.
  - PluginProcessor should use Messager instead of System.out.
  - MapMessage.getFormattedMesssage() would incorrectly format objects.
  - Always write header on a new OutputStream.
  - An error message in RollingFileAppender uses a placeholder for the name but does not
    specify the name argument in the logging call.
  - NullPointerException when using a custom DirectFileRolloverStrategy without a file name.
  - Add mulit-parameter overloads to LogBuilder.
  - Fixed NullPointerException after reconfiguring via JMX.
  - RollingFileAppender was not rolling on startup if createOnDemand was set to true.
  - Warn if pattern is missing on Routes element. Use default route.
  - Fix lock contention in the classloader using new versions of slf4j without EventData
    on slf4j logger creation.
  - Rollover handles parallel file deletion gracefully.
  - Remove unnecessary EventLogger references from log4j-slf4j18-impl due to removal from slf4j.
  - Fix a memory leak using fully asynchronous logging when the queue is full using the 'discard'
    asynchronous queue full strategy.
  - Fix erroneous log4j-jul recursive logger detection resulting in some no-op JUL loggers and
    'WARN Recursive call to getLogger' being reported by the status logger.
  - PluginCache output is reproducible allowing the annotation processor to produce
    deterministic results.
  - Fix StackLocator.getCallerClass performance in cases where Reflection.getCallerClass
    is not accessible.
  - MutableLogEvent and RingBufferLogEvent avoid StringBuffer and parameter array allocation
    unless reusable messages are used.
  - LoaderUtil.getClassLoaders may discover additional loaders and no longer erroneously returns
    a result with a null element in some environments.
  - CronExpression.getBeforeTime() would sometimes return incorrect result.
  - [JDBC] MS-SQL Server JDBC driver throws SQLServerException when inserting a null value
    for a VARBINARY column.
  - NullPointerException after reconfiguring via JMX.
  - Implement ISO8601_PERIOD_MICROS fixed date format matching ISO8601_PERIOD with support
    for microsecond precision.
  * Changes:
  - Conditionally perform status logging calculations in PluginRegistry.
  - Use LinkedBlockingQueue instead of synchronized collction in StatusConfiguration.
  - Add a retry count attribute to the KafkaAppender.
  - Update log4j-slf4j18-impl slf4j version to 1.8.0-beta4 from 1.8.0-alpha2.
  - Update dependencies.
- Remove patch fixed upstream:
  * logging-log4j-LOG4J2-2745-LOG4J2-2744-slf4j.patch
  * log4j-CVE-2020-9488.patch
- Refresh patch:
  * logging-log4j-Remove-unsupported-EventDataConverter.patch</changelog>
  <changelog author="fstrba@suse.com" date="1587988802">- Do not build the log4j-jpl artifact, as to avoid java-11-only
  features</changelog>
  <changelog author="psimons@suse.com" date="1639137600">- Apply "CVE-2021-44228.patch" to fix a remote code execution
  vulnerability that existed in the LDAP JNDI parser. [bsc#1193611,
  CVE-2021-44228]</changelog>
  <changelog author="psimons@suse.com" date="1639483200">- Apply "disable-jndi-by-default.patch" to disable JNDI support by
  default. There is evidence that the previous upstream fix for
  CVE-2021-44228 did not solve the vulnerability entirely. Since
  JNDI support is ususally not required, upstream recommends this
  route to be completely safe. [bsc#1193611, CVE-2021-44228]</changelog>
  <changelog author="sflees@suse.de" date="1639569600">- Update to 2.16.0 [bsc#1193743, CVE-2021-45046]
  * Features
  - Add JsonTemplateLayout.
  - Create module log4j-mongodb4 to use new major version 4
    MongoDB driver.
  - More flexible configuration of the Disruptor WaitStrategy.
    Thanks to Stepan Gorban.
  * Bugfixes and minor enhancements
  - It was found that the fix to address CVE-2021-44228 in Apache
    Log4j 2.15.0 was incomplete in certain non-default
    configurations.
    This could allows attackers with control over Thread Context
    Map (MDC) input data when the logging configuration uses a
    Pattern Layout with either a Context Lookup (for example,
    $${ctx:loginId}) or a Thread Context Map pattern (%X, %mdc, or
    %MDC) to craft malicious input data using a JNDI Lookup
    pattern resulting in a denial of service (DOS) attack.
    Log4j 2.15.0 restricts JNDI LDAP lookups to localhost by
    default. Note that previous mitigations involving
    configuration such as setting the system property
    log4j2.noFormatMsgLookup to true do NOT mitigate this specific
    vulnerability.
  - Upstream initial fix for bsc#1193611, CVE-2021-44228
  - Numerous other minor bugfixes
  * Drop CVE-2021-44228.patch and disable-jndi-by-default.patch
    included upstream
  * To make the bots happy this stream isn't affected by
    bsc#1193662 CVE-2021-4104 which is 1.X only</changelog>
  <changelog author="david.anes@suse.com" date="1639828800">- Update to 2.17.0 [bsc#1193887, bsc#1193888, CVE-2021-45105]
  * Fixed Bugs
  - Fix string substitution recursion.
  - Limit JNDI to the java protocol only. JNDI will remain disabled
    by default. Rename JNDI enablement property from
    'log4j2.enableJndi' to 'log4j2.enableJndiLookup',
    'log4j2.enableJndiJms', and 'log4j2.enableJndiContextSelector'.
  - Limit JNDI to the java protocol only. JNDI will remain disabled
    by default. The enablement property has been renamed to
    'log4j2.enableJndiJava'
  - Do not declare log4j-api-java9 and log4j-core-java9 as
    dependencies as it causes problems with the Maven enforcer
    plugin.
  - PropertiesConfiguration.parseAppenderFilters NPE when parsing
    properties file filters.
  - Log4j 1.2 bridge for Syslog Appender defaults to port 512
    instead of 514.
  - Log4j 1.2 bridge API hard codes the Syslog protocol to TCP.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639828801">- add upstream signing key to verify source signature</changelog>
  <changelog author="david.anes@suse.com" date="1640779200">- Update to 2.17.1 [bsc#1194127, CVE-2021-44832]
  * Fixed bugs:
  - JdbcAppender now uses JndiManager to access JNDI resources.
    JNDI is only enabled when system property log4j2.enableJndiJdbc
    is set to true.
  - Remove unused method.
  - ExtendedLoggerWrapper.logMessage no longer double-logs when
    location is requested.
  - log4j-to-slf4j no longer re-interpolates formatted message
    contents.
  - Correct SpringLookup package name in Interpolator.
  - log4j-to-slf4j takes the provided MessageFactory into account.
  - Fix MapLookup to lookup MapMessage before DefaultMap.
  - Buffered I/O checked had inverted logic in
    RollingFileAppenderBuidler.
  - Fix NPE when input is null in
    StrSubstitutor.replace(String, Properties).
  - Lookups with no prefix only read values from the configuration
    properties as expected.
  - Reduce ignored package scope of KafkaAppender.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Remove alias log4j:log4j from log4j-1.2-api, since it is not a
  drop-in replacement</changelog>
  <changelog author="david.anes@suse.com" date="1646913600">- Update to 2.17.2
  * New Features
  - Limit loading of configuration via a url to https by default.
  - Require log4j2.Script.enableLanguages to be specified to
    enable scripting for specific languages.
  - Add TB support to FileSize.
  - Add the log4j-to-jul JDK Logging Bridge.
  - Add org.apache.logging.log4j.core.appender.AsyncAppender.getAppenders()
    to more easily port from org.apache.log4j.AsyncAppender.getAllAppenders().
  - Add Configurator.setLevel(Logger, Level),
    setLevel(String, String), and setLevel(Class, Level).
  - Add shorthand syntax for properties configuration format for
    specifying a logger level and appender refs.
  - Add optional additional fields to NoSQLAppender.
  * Fixed Bugs
  - Flag LogManager as initiialized if the LoggerFactory is
    provided as a property.
  - Fix DefaultConfiguration leak in PatternLayout.
  - Document that the Spring Boot Lookup requires the
    log4j-spring-boot dependency.
  - Fix RoutingAppender backcompat and disallow recursive
    evaluation of lookup results outside of configuration
    properties.
  - Fix ThreadContextDataInjector initialization deadlock.
  - Fix substitutions when programmatic configuration is used.
  - OptionConverter could cause a StackOverflowError.
  - Log4j 1.2 bridge class ConsoleAppender should extend
    WriterAppender and provide better compatibility with custom
    appenders.
  - Log4j 1.2 bridge method NDC.inherit(Stack) should not use
    generics to provide source compatibility.
  - Log4j 1.2 bridge class PatternLayout is missing constants
    DEFAULT_CONVERSION_PATTERN and TTCC_CONVERSION_PATTERN.
  - Log4j 1.2 bridge class PropertyConfigurator should implement
    Configurator.
  - Log4j 1.2 bridge interface Configurator doConfigure() methods
    should use LoggerRepository, not LoggerContext.
  - Log4j 1.2 bridge class OptionConverter is missing
    selectAndConfigure() methods.
  - Log4j 1.2 bridge class Category should implement
    AppenderAttachable.
  - Log4j 1.2 bridge method Category.exists(String) should be
    static.
  - Log4j 1.2 bridge methods missing in org.apache.log4j.Category:
    getDefaultHierarchy(), getHierarchy(), getLoggerRepository().
  - Log4j 1.2 bridge class LogManager default constructor should
    be public.
  - Log4j 1.2 bridge interface org.apache.log4j.spi.RendererSupport
    was in the wrong package and incomplete.
  - Log4j 1.2 bridge interfaces missing from package
    org.apache.log4j.spi: ThrowableRenderer,
    ThrowableRendererSupport, TriggeringEventEvaluator.
  - Log4j 1.2 bridge missing class org.apache.log4j.or.RendererMap.
  - Log4j 1.2 bridge PropertiesConfiguration.buildAppender not
    adding filters to custom appender.
  - Log4j 1.2 bridge should ignore case in properties file keys.
  - Log4j 1.2 bridge adds org.apache.log4j.component.helpers.Constants.
  - Log4j 1.2 bridge adds org.apache.log4j.helpers.LogLog.
  - Log4j 1.2 bridge adds org.apache.log4j.helpers.Loader.
  - Log4j 1.2 bridge adds org.apache.log4j.spi.RootLogger.
  - Log4j 1.2 bridge class Category is missing some protected
    instance variables.
  - Log4j 1.2 bridge adds org.apache.log4j.Hierarchy.
  - Log4j 1.2 bridge methods Category.getChainedPriority() and
    getEffectiveLevel() should not be final.
  - Log4j 1.2 bridge adds org.apache.log4j.spi.NOPLoggerRepository
    and NOPLogger.
  - Log4j 1.2 bridge adds org.apache.log4j.spi.DefaultRepositorySelector.
  - Log4j 1.2 bridge implements LogManager.getCurrentLoggers()
    fully.
  - Log4j 1.2 bridge fixes parsing filters in properties
    configuration file #680.
  - Log4j 1.2 bridge missing OptionConverter.instantiateByKey(
    Properties, String, Class, Object).
  - Log4j 1.2 bridge class org.apache.log4j.spi.LoggingEvent
    missing constructors and public instance variable.
  - Log4j 1.2 bridge does not support system properties in log4j.xml.
  - Log4j 1.2 bridge now logs a warning instead of throwing an
    NullPointerException when building a Syslog appender with a
    missing "SyslogHost" param.
  - Log4j 1.2 bridge should allow property and XML attributes to
    start with either an upper-case or lower-case letter.
  - Log4j 1.2 bridge uses the wrong default values for a
    TTCCLayout.
  - Log4j 1.2 bridge throws ClassCastException when using
    SimpleLayout and others.
  - Log4j 1.2 bridge uses the wrong file pattern for rolling file
    appenders.
  - Log4j 1.2 bridge throws ClassCastException when using
    SimpleLayout and others.
  - Log4j 1.2 bridge creates a SocketAppender instead of a
    SyslogAppender.
  - Log4j 1.2 bridge uses some incorrect default property values
    in some appenders.
  - Log4j 1.2 bridge supports the SocketAppender.
  - Log4j 1.2 bridge missing DefaultThrowableRenderer.
  - Log4j 1.2 bridge missing some ThrowableInformation constructors.
  - Log4j 1.2 bridge missing some LocationInfo constructors.
  - Log4j 1.2 bridge missed
  - Log4j 1.2 bridge missed org.apache.log4j.pattern.FormattingInfo.
  - Log4j 1.2 bridge missed org.apache.log4j.pattern.NameAbbreviator.
  - Log4j 1.2 bridge missing UtilLoggingLevel.
  - Log4j 1.2 bridge missing FormattingInfo.
  - Log4j 1.2 bridge missing PatternConverter.
  - Log4j 1.2 bridge missing PatternParser.
  - Log4j 1.2 bridge issues with filters.
  - Log4j 1.2 bridge implements most of DOMConfigurator.
  - JndiManager reverts to 2.17.0 behavior: Read the system
    property for each call.
  - Configurator.setLevel not fetching the correct LoggerContext.
  - Fix DTD error: Add missing ELEMENT for Marker.
  - Fix log4j-jakarta-web service file.
  - AppenderLoggingException logging any exception to a MongoDB
    Appender.
  - Possible NullPointerException in MongoDb4DocumentObject,
    MongoDbDocumentObject, DefaultNoSqlObject.
  - Trim whitespace before parsing a String into an Integer.
  - Log4j 1.2 bridge throws a ClassCastException when logging a
    Map with non-String keys.
  - Log4j 1.2 bridge Check for non-existent appender when parsing
    properties #761. Thanks to Kenny MacLeod.
  - Log4j 1.2 bridge supports global threshold.
  * Changes
  - Change modifier of method
    org.apache.logging.log4j.core.tools.Generate#generate to
    public (was package private) to facilitate automated code
    generation.</changelog>
  <changelog author="fstrba@suse.com" date="1649678400">- Add dependency on standalone javax.activation-api that is not
  included in newer JDKs</changelog>
  <changelog author="fstrba@suse.com" date="1655121600">- Build as multi-release jar.
- Add some logging providers which we can build with the existing
  dependencies and without cycles.</changelog>
  <changelog author="fstrba@suse.com" date="1655121601">- Do not package the *.zip artifacts whose content is part of the
  multi-release jars already
- Added patch:
  * log4j-java8compat.patch
    + maintain ByteBuffer and CharBuffer compatibility with java 8</changelog>
  <changelog author="fstrba@suse.com" date="1655294400">- Build also taglib, jmx-gui, bom, nosql and web modules, on
  platforms where we have the dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1710072000">- Added patch:
  * log4j-jackson-databind.patch
    + do not use previously deprecated methods, removed in
    jackson-databind 2.16.x</changelog>
  <changelog author="fstrba@suse.com" date="1714392000">- The binaries are compatible with java 1.8
- Fetch newer upstream keyring</changelog>
  <changelog author="fstrba@suse.com" date="1767614400">- Upgrade to 2.18.0
  * Added
    + Add support for Jakarta Mail API in the SMTP appender.
    + Add support for custom Log4j 1.x levels.
    + Add support for adding and retrieving appenders in Log4j 1.x
    bridge.
    + Add support for custom LMAX disruptor WaitStrategy
    configuration.
    + Add support for Apache Extras' RollingFileAppender in Log4j
    1.x bridge.
    + Add MutableThreadContextMapFilter.
    + Add support for 24 colors in highlighting
  * Changed
    + Improves ServiceLoader support on servlet containers.
    + Make the default disruptor WaitStrategy used by Async Loggers
    garbage-free.
    + Do not throw UnsupportedOperationException when JUL
    ApiLogger::setLevel is called.
    + Support Spring 2.6.x.
    + Move perf tests to log4j-core-its
    + Upgrade the Flume Appender to Flume 1.10.0
  * Fixed
    + Fix minor typo #792.
    + Improve validation and reporting of configuration errors.
    + Allow enterprise id to be an OID fragment.
    + Fix problem with non-uppercase custom levels.
    + Avoid ClassCastException in JeroMqManager with custom
    LoggerContextFactory #791.
    + DirectWriteRolloverStrategy should use the current time when
    creating files.
    + Fixes the syslog appender in Log4j 1.x bridge, when used with
    a custom layout.
    + log4j-1.2-api 2.17.2 throws NullPointerException while
    removing appender with name as null.
    + Improve JsonTemplateLayout performance.
    + Fix resolution of non-Log4j properties.
    + Fixes Spring Boot logging system registration in a
    multi-application environment.
    + JAR file containing Log4j configuration isn’t closed.
    + Properties defined in configuration using a value attribute
    (as opposed to element) are read correctly.
    + Syslog appender lacks the SocketOptions setting.
    + Log4j 1.2 bridge should not wrap components unnecessarily.
    + Update 3rd party dependencies for 2.18.0.
    + SizeBasedTriggeringPolicy would fail to rename files properly
    when integer pattern contained a leading zero.
    + Fixes default SslConfiguration, when a custom keystore is
    used.
    + Fixes appender concurrency problems in Log4j 1.x bridge.
    + Fix and test for race condition in FileUtils.mkdir().
    + LocalizedMessage logs misleading errors on the console.
    + Add missing message parameterization in RegexFilter.
    + Add the missing context stack to JsonLayout template.
    + HttpWatcher did not pass credentials when polling.
    + UrlConnectionFactory.createConnection now accepts an
    AuthorizationProvider as a parameter.
    + The DirectWriteRolloverStrategy was not detecting the correct
    index to use during startup.
    + Async Loggers were including the location information by
    default.
    + ClassArbiter’s newBuilder method referenced the wrong class.
    + Don’t use Paths.get() to avoid circular file systems.
    + Fix parsing error, when XInclude is disabled.
    + Fix LevelRangeFilterBuilder to align with log4j1’s behavior.
    + Fixes problem with wrong ANSI escape code for bright colors
    + Log4j 1.2 bridge should generate Log4j 2.x messages based on
    the parameter runtime type.
- Update to 2.19.0
  * Added
    + Add implementation of SLF4J2 fluent API.
    + Add support for SLF4J2 stack-valued MDC.
  * Changed
    + Add getExplicitLevel method to LoggerConfig.
    + Allow PropertySources to be added.
    + Allow Plugins to be injected with the LoggerContext reference.
  * Fixed
    + Add correct manifest entries for OSGi to log4j-jcl
    + Improve support for passwordless keystores.
    + SystemPropertyArbiter was assigning the value as the name.
    + Make JsonTemplateLayout stack trace truncation operate for
    each label block.
    + Fix recursion between Log4j 1.2 LogManager and Category.
    + Fix resolution of properties not starting with log4j2..
    + Logger$PrivateConfig.filter(Level, Marker, String) was
    allocating empty varargs array.
    + Allows a space separated list of style specifiers in the
    %style pattern for consistency with %highlight.
    + Fix NPE in log4j-to-jul in the case the root logger level is
    null.
    + Fix RollingRandomAccessFileAppender with
    DirectWriteRolloverStrategy can’t create the first log file of
    different directory.
    + Generate new SSL certs for testing.
    + Fix ServiceLoaderUtil behavior in the presence of a
    SecurityManager.
    + Fix regression in Rfc5424Layout default values.
    + Harden InstantFormatter against delegate failures.
    + Add async support to Log4jServletFilter.
  * Removed
    + Removed build page in favor of a single build instructions
    file.
    + Remove SLF4J 1.8.x binding.
- Update to 2.20.0
  * Added
    + Add support for timezones in RollingFileAppender date pattern
    + Add LogEvent timestamp to ProducerRecord in KafkaAppender
    + Add PatternLayout support for abbreviating the name of all
    logger components except the 2 rightmost
    + Removes internal field that leaked into public API.
    + Add a LogBuilder#logAndGet() method to emulate the
    Logger#traceEntry method.
  * Changed
    + Simplify site generation
    + Switch the issue tracker from JIRA to GitHub Issues
    + Remove liquibase-log4j2 maven module
    + Fix order of stacktrace elements, that causes cache misses in
    ThrowableProxyHelper.
    + Switch from com.sun.mail to Eclipse Angus.
    + Add Log4j2 Core as default runtime dependency of the
    SLF4J2-to-Log4j2 API bridge.
    + Replace maven-changes-plugin with a custom changelog
    implementation
    + Moved log4j-api and log4j-core artifacts with classifier tests
    to log4j-api-test and log4j-core-test respectively.
  * Deprecated
    + Deprecate support for package scanning for plugins
  * Fixed
    + Copy programmatically supplied location even if
    includeLocation="false".
    + Eliminate status logger warning, when disableAnsi or
    noConsoleNoAnsi is used the style and highlight patterns.
    + Fix detection of location requirements in RewriteAppender.
    + Replace regex with manual code to escape characters in
    Rfc5424Layout.
    + Fix java.sql.Time object formatting in MapMessage
    + Fix previous fire time computation in CronTriggeringPolicy
    + Correct default to not include location for AsyncRootLoggers
    + Make StatusConsoleListener use SimpleLogger internally.
    + Lazily evaluate the level of a SLF4J LogEventBuilder
    + Fixes priority of Legacy system properties, which are now back
    to having higher priority than Environment variables.
    + Protects ServiceLoaderUtil from unchecked ServiceLoader
    exceptions.
    + Fix Configurator#setLevel for internal classes
    + Fix level propagation in Log4jBridgeHandler
    + Disable OsgiServiceLocator if not running in OSGI container.
    + When using a Date Lookup in the file pattern the current time
    should be used.
    + Fixed LogBuilder filtering in the presence of global filters.
- Removed patch:
  * log4j-java8compat.patch
    + not needed with this version
- Modified patch:
  * logging-log4j-Remove-unsupported-EventDataConverter.patch
    + rediff
- Added patch:
  * 0002-Remove-usage-of-toolchains.patch
    + do not use the maven-toolchains-plugin
  * log4j-CVE-2025-68161.patch
    + bsc#1255427, CVE-2025-68161: absent TLS hostname verification
    may allow a man-in-the-middle attack</changelog>
</package>
<package pkgid="8a4ac36870912653b295b5c21c89ce4441509974827670150d3368cd197642ce" name="log4j-slf4j" arch="noarch">
  <version epoch="0" ver="2.20.0" rel="150200.4.33.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1587988800">- Security fix: [bsc#1170535, CVE-2020-9488]
  * Improper validation of certificate with host mismatch in SMTP appender.
- Add log4j-CVE-2020-9488.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1587988801">- Update to 2.13.2 [bsc#1170535, CVE-2020-9488]
  * Bugfixes and minor enhancements:
  - CVE-2020-9488: Improper validation of certificate with host mismatch
    in Apache Log4j SMTP appender.
  - Implement requiresLocation in GelfLayout to reflect whether location
    information is used in the message Pattern.
  - Add option to restore printing timeMillis in the JsonLayout.
  - Initialize pattern processor before triggering policy during reconfiguration.
  - Add information about using a url in log4j.configurationFile.
  - serializeToBytes was checking wrong variable for null.
  - Fix Javadoc for ScriptPatternSelector.
  - Allow trailing and leading spaces in log level.
  - Correct JsonLayout timestamp sorting issue.
  - Allow the file size action to parse the value without being sensitive
    to the current locale.
  - Make YamlLayoutTest more resiliant to environmental differences.
  - Conditionally allocate PluginEntry during PluginCache loading.
  - Add missing includeLocation parameter when creating AsyncLogger.
  - Fix Exceptions when whitespace is in the file path and Java security
    manager is used.
  - Avoid NullPointerException when StackWalker returns null.
  - TimeFilter did not handle daylight saving time transitions and did
    not support a range over 2 days.
  - Provide a Log4j implementation of System.Logger.
  - Added EventLookup to retrieve fields from the log event.
  * Changes:
  - Allow the file extension in the file pattern to be modified during reconfiguration.
  - Add support for specifying an SSL configuration for SmtpAppender.
  - Allow servlet context path to be retrieved without "/".
  - Allow Spring Lookup to return default and active profiles.
  - Allow Spring Boot applications to use composite configuratons.
  - Add ContextDataProviders as an alternative to having to implement a ContextDataInjector.
  - [JDBC] Throw a AppenderLoggingException instead of an NPE in the JDBC database manager.
- Update to 2.13.1
  - Prevent LoggerContext from being garbage collected while being created.
  - Do not log an error if Files.move does not work.
  - Rollover fails when file matches pattern but index is too large.
  - Counter stuck at 10 and overwriting files when leading zeros used in the file pattern count.
  - ClassLoaderContextSelector was not locating the LoggerContext during shutdown.
  - JSON output wrong when using additonal fields.
  - GraalVM does not allow use of MethodHandles.
  - Allow Lookup keys with leading dashes by using a slash as an escape character.
  - ServletContainerInitializer was obtaining the StatusLogger too soon.
  - PluginProcessor should use Messager instead of System.out.
  - MapMessage.getFormattedMesssage() would incorrectly format objects.
  - Always write header on a new OutputStream.
  - An error message in RollingFileAppender uses a placeholder for the name but does not
    specify the name argument in the logging call.
  - NullPointerException when using a custom DirectFileRolloverStrategy without a file name.
  - Add mulit-parameter overloads to LogBuilder.
  - Fixed NullPointerException after reconfiguring via JMX.
  - RollingFileAppender was not rolling on startup if createOnDemand was set to true.
  - Warn if pattern is missing on Routes element. Use default route.
  - Fix lock contention in the classloader using new versions of slf4j without EventData
    on slf4j logger creation.
  - Rollover handles parallel file deletion gracefully.
  - Remove unnecessary EventLogger references from log4j-slf4j18-impl due to removal from slf4j.
  - Fix a memory leak using fully asynchronous logging when the queue is full using the 'discard'
    asynchronous queue full strategy.
  - Fix erroneous log4j-jul recursive logger detection resulting in some no-op JUL loggers and
    'WARN Recursive call to getLogger' being reported by the status logger.
  - PluginCache output is reproducible allowing the annotation processor to produce
    deterministic results.
  - Fix StackLocator.getCallerClass performance in cases where Reflection.getCallerClass
    is not accessible.
  - MutableLogEvent and RingBufferLogEvent avoid StringBuffer and parameter array allocation
    unless reusable messages are used.
  - LoaderUtil.getClassLoaders may discover additional loaders and no longer erroneously returns
    a result with a null element in some environments.
  - CronExpression.getBeforeTime() would sometimes return incorrect result.
  - [JDBC] MS-SQL Server JDBC driver throws SQLServerException when inserting a null value
    for a VARBINARY column.
  - NullPointerException after reconfiguring via JMX.
  - Implement ISO8601_PERIOD_MICROS fixed date format matching ISO8601_PERIOD with support
    for microsecond precision.
  * Changes:
  - Conditionally perform status logging calculations in PluginRegistry.
  - Use LinkedBlockingQueue instead of synchronized collction in StatusConfiguration.
  - Add a retry count attribute to the KafkaAppender.
  - Update log4j-slf4j18-impl slf4j version to 1.8.0-beta4 from 1.8.0-alpha2.
  - Update dependencies.
- Remove patch fixed upstream:
  * logging-log4j-LOG4J2-2745-LOG4J2-2744-slf4j.patch
  * log4j-CVE-2020-9488.patch
- Refresh patch:
  * logging-log4j-Remove-unsupported-EventDataConverter.patch</changelog>
  <changelog author="fstrba@suse.com" date="1587988802">- Do not build the log4j-jpl artifact, as to avoid java-11-only
  features</changelog>
  <changelog author="psimons@suse.com" date="1639137600">- Apply "CVE-2021-44228.patch" to fix a remote code execution
  vulnerability that existed in the LDAP JNDI parser. [bsc#1193611,
  CVE-2021-44228]</changelog>
  <changelog author="psimons@suse.com" date="1639483200">- Apply "disable-jndi-by-default.patch" to disable JNDI support by
  default. There is evidence that the previous upstream fix for
  CVE-2021-44228 did not solve the vulnerability entirely. Since
  JNDI support is ususally not required, upstream recommends this
  route to be completely safe. [bsc#1193611, CVE-2021-44228]</changelog>
  <changelog author="sflees@suse.de" date="1639569600">- Update to 2.16.0 [bsc#1193743, CVE-2021-45046]
  * Features
  - Add JsonTemplateLayout.
  - Create module log4j-mongodb4 to use new major version 4
    MongoDB driver.
  - More flexible configuration of the Disruptor WaitStrategy.
    Thanks to Stepan Gorban.
  * Bugfixes and minor enhancements
  - It was found that the fix to address CVE-2021-44228 in Apache
    Log4j 2.15.0 was incomplete in certain non-default
    configurations.
    This could allows attackers with control over Thread Context
    Map (MDC) input data when the logging configuration uses a
    Pattern Layout with either a Context Lookup (for example,
    $${ctx:loginId}) or a Thread Context Map pattern (%X, %mdc, or
    %MDC) to craft malicious input data using a JNDI Lookup
    pattern resulting in a denial of service (DOS) attack.
    Log4j 2.15.0 restricts JNDI LDAP lookups to localhost by
    default. Note that previous mitigations involving
    configuration such as setting the system property
    log4j2.noFormatMsgLookup to true do NOT mitigate this specific
    vulnerability.
  - Upstream initial fix for bsc#1193611, CVE-2021-44228
  - Numerous other minor bugfixes
  * Drop CVE-2021-44228.patch and disable-jndi-by-default.patch
    included upstream
  * To make the bots happy this stream isn't affected by
    bsc#1193662 CVE-2021-4104 which is 1.X only</changelog>
  <changelog author="david.anes@suse.com" date="1639828800">- Update to 2.17.0 [bsc#1193887, bsc#1193888, CVE-2021-45105]
  * Fixed Bugs
  - Fix string substitution recursion.
  - Limit JNDI to the java protocol only. JNDI will remain disabled
    by default. Rename JNDI enablement property from
    'log4j2.enableJndi' to 'log4j2.enableJndiLookup',
    'log4j2.enableJndiJms', and 'log4j2.enableJndiContextSelector'.
  - Limit JNDI to the java protocol only. JNDI will remain disabled
    by default. The enablement property has been renamed to
    'log4j2.enableJndiJava'
  - Do not declare log4j-api-java9 and log4j-core-java9 as
    dependencies as it causes problems with the Maven enforcer
    plugin.
  - PropertiesConfiguration.parseAppenderFilters NPE when parsing
    properties file filters.
  - Log4j 1.2 bridge for Syslog Appender defaults to port 512
    instead of 514.
  - Log4j 1.2 bridge API hard codes the Syslog protocol to TCP.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639828801">- add upstream signing key to verify source signature</changelog>
  <changelog author="david.anes@suse.com" date="1640779200">- Update to 2.17.1 [bsc#1194127, CVE-2021-44832]
  * Fixed bugs:
  - JdbcAppender now uses JndiManager to access JNDI resources.
    JNDI is only enabled when system property log4j2.enableJndiJdbc
    is set to true.
  - Remove unused method.
  - ExtendedLoggerWrapper.logMessage no longer double-logs when
    location is requested.
  - log4j-to-slf4j no longer re-interpolates formatted message
    contents.
  - Correct SpringLookup package name in Interpolator.
  - log4j-to-slf4j takes the provided MessageFactory into account.
  - Fix MapLookup to lookup MapMessage before DefaultMap.
  - Buffered I/O checked had inverted logic in
    RollingFileAppenderBuidler.
  - Fix NPE when input is null in
    StrSubstitutor.replace(String, Properties).
  - Lookups with no prefix only read values from the configuration
    properties as expected.
  - Reduce ignored package scope of KafkaAppender.</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Remove alias log4j:log4j from log4j-1.2-api, since it is not a
  drop-in replacement</changelog>
  <changelog author="david.anes@suse.com" date="1646913600">- Update to 2.17.2
  * New Features
  - Limit loading of configuration via a url to https by default.
  - Require log4j2.Script.enableLanguages to be specified to
    enable scripting for specific languages.
  - Add TB support to FileSize.
  - Add the log4j-to-jul JDK Logging Bridge.
  - Add org.apache.logging.log4j.core.appender.AsyncAppender.getAppenders()
    to more easily port from org.apache.log4j.AsyncAppender.getAllAppenders().
  - Add Configurator.setLevel(Logger, Level),
    setLevel(String, String), and setLevel(Class, Level).
  - Add shorthand syntax for properties configuration format for
    specifying a logger level and appender refs.
  - Add optional additional fields to NoSQLAppender.
  * Fixed Bugs
  - Flag LogManager as initiialized if the LoggerFactory is
    provided as a property.
  - Fix DefaultConfiguration leak in PatternLayout.
  - Document that the Spring Boot Lookup requires the
    log4j-spring-boot dependency.
  - Fix RoutingAppender backcompat and disallow recursive
    evaluation of lookup results outside of configuration
    properties.
  - Fix ThreadContextDataInjector initialization deadlock.
  - Fix substitutions when programmatic configuration is used.
  - OptionConverter could cause a StackOverflowError.
  - Log4j 1.2 bridge class ConsoleAppender should extend
    WriterAppender and provide better compatibility with custom
    appenders.
  - Log4j 1.2 bridge method NDC.inherit(Stack) should not use
    generics to provide source compatibility.
  - Log4j 1.2 bridge class PatternLayout is missing constants
    DEFAULT_CONVERSION_PATTERN and TTCC_CONVERSION_PATTERN.
  - Log4j 1.2 bridge class PropertyConfigurator should implement
    Configurator.
  - Log4j 1.2 bridge interface Configurator doConfigure() methods
    should use LoggerRepository, not LoggerContext.
  - Log4j 1.2 bridge class OptionConverter is missing
    selectAndConfigure() methods.
  - Log4j 1.2 bridge class Category should implement
    AppenderAttachable.
  - Log4j 1.2 bridge method Category.exists(String) should be
    static.
  - Log4j 1.2 bridge methods missing in org.apache.log4j.Category:
    getDefaultHierarchy(), getHierarchy(), getLoggerRepository().
  - Log4j 1.2 bridge class LogManager default constructor should
    be public.
  - Log4j 1.2 bridge interface org.apache.log4j.spi.RendererSupport
    was in the wrong package and incomplete.
  - Log4j 1.2 bridge interfaces missing from package
    org.apache.log4j.spi: ThrowableRenderer,
    ThrowableRendererSupport, TriggeringEventEvaluator.
  - Log4j 1.2 bridge missing class org.apache.log4j.or.RendererMap.
  - Log4j 1.2 bridge PropertiesConfiguration.buildAppender not
    adding filters to custom appender.
  - Log4j 1.2 bridge should ignore case in properties file keys.
  - Log4j 1.2 bridge adds org.apache.log4j.component.helpers.Constants.
  - Log4j 1.2 bridge adds org.apache.log4j.helpers.LogLog.
  - Log4j 1.2 bridge adds org.apache.log4j.helpers.Loader.
  - Log4j 1.2 bridge adds org.apache.log4j.spi.RootLogger.
  - Log4j 1.2 bridge class Category is missing some protected
    instance variables.
  - Log4j 1.2 bridge adds org.apache.log4j.Hierarchy.
  - Log4j 1.2 bridge methods Category.getChainedPriority() and
    getEffectiveLevel() should not be final.
  - Log4j 1.2 bridge adds org.apache.log4j.spi.NOPLoggerRepository
    and NOPLogger.
  - Log4j 1.2 bridge adds org.apache.log4j.spi.DefaultRepositorySelector.
  - Log4j 1.2 bridge implements LogManager.getCurrentLoggers()
    fully.
  - Log4j 1.2 bridge fixes parsing filters in properties
    configuration file #680.
  - Log4j 1.2 bridge missing OptionConverter.instantiateByKey(
    Properties, String, Class, Object).
  - Log4j 1.2 bridge class org.apache.log4j.spi.LoggingEvent
    missing constructors and public instance variable.
  - Log4j 1.2 bridge does not support system properties in log4j.xml.
  - Log4j 1.2 bridge now logs a warning instead of throwing an
    NullPointerException when building a Syslog appender with a
    missing "SyslogHost" param.
  - Log4j 1.2 bridge should allow property and XML attributes to
    start with either an upper-case or lower-case letter.
  - Log4j 1.2 bridge uses the wrong default values for a
    TTCCLayout.
  - Log4j 1.2 bridge throws ClassCastException when using
    SimpleLayout and others.
  - Log4j 1.2 bridge uses the wrong file pattern for rolling file
    appenders.
  - Log4j 1.2 bridge throws ClassCastException when using
    SimpleLayout and others.
  - Log4j 1.2 bridge creates a SocketAppender instead of a
    SyslogAppender.
  - Log4j 1.2 bridge uses some incorrect default property values
    in some appenders.
  - Log4j 1.2 bridge supports the SocketAppender.
  - Log4j 1.2 bridge missing DefaultThrowableRenderer.
  - Log4j 1.2 bridge missing some ThrowableInformation constructors.
  - Log4j 1.2 bridge missing some LocationInfo constructors.
  - Log4j 1.2 bridge missed
  - Log4j 1.2 bridge missed org.apache.log4j.pattern.FormattingInfo.
  - Log4j 1.2 bridge missed org.apache.log4j.pattern.NameAbbreviator.
  - Log4j 1.2 bridge missing UtilLoggingLevel.
  - Log4j 1.2 bridge missing FormattingInfo.
  - Log4j 1.2 bridge missing PatternConverter.
  - Log4j 1.2 bridge missing PatternParser.
  - Log4j 1.2 bridge issues with filters.
  - Log4j 1.2 bridge implements most of DOMConfigurator.
  - JndiManager reverts to 2.17.0 behavior: Read the system
    property for each call.
  - Configurator.setLevel not fetching the correct LoggerContext.
  - Fix DTD error: Add missing ELEMENT for Marker.
  - Fix log4j-jakarta-web service file.
  - AppenderLoggingException logging any exception to a MongoDB
    Appender.
  - Possible NullPointerException in MongoDb4DocumentObject,
    MongoDbDocumentObject, DefaultNoSqlObject.
  - Trim whitespace before parsing a String into an Integer.
  - Log4j 1.2 bridge throws a ClassCastException when logging a
    Map with non-String keys.
  - Log4j 1.2 bridge Check for non-existent appender when parsing
    properties #761. Thanks to Kenny MacLeod.
  - Log4j 1.2 bridge supports global threshold.
  * Changes
  - Change modifier of method
    org.apache.logging.log4j.core.tools.Generate#generate to
    public (was package private) to facilitate automated code
    generation.</changelog>
  <changelog author="fstrba@suse.com" date="1649678400">- Add dependency on standalone javax.activation-api that is not
  included in newer JDKs</changelog>
  <changelog author="fstrba@suse.com" date="1655121600">- Build as multi-release jar.
- Add some logging providers which we can build with the existing
  dependencies and without cycles.</changelog>
  <changelog author="fstrba@suse.com" date="1655121601">- Do not package the *.zip artifacts whose content is part of the
  multi-release jars already
- Added patch:
  * log4j-java8compat.patch
    + maintain ByteBuffer and CharBuffer compatibility with java 8</changelog>
  <changelog author="fstrba@suse.com" date="1655294400">- Build also taglib, jmx-gui, bom, nosql and web modules, on
  platforms where we have the dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1710072000">- Added patch:
  * log4j-jackson-databind.patch
    + do not use previously deprecated methods, removed in
    jackson-databind 2.16.x</changelog>
  <changelog author="fstrba@suse.com" date="1714392000">- The binaries are compatible with java 1.8
- Fetch newer upstream keyring</changelog>
  <changelog author="fstrba@suse.com" date="1767614400">- Upgrade to 2.18.0
  * Added
    + Add support for Jakarta Mail API in the SMTP appender.
    + Add support for custom Log4j 1.x levels.
    + Add support for adding and retrieving appenders in Log4j 1.x
    bridge.
    + Add support for custom LMAX disruptor WaitStrategy
    configuration.
    + Add support for Apache Extras' RollingFileAppender in Log4j
    1.x bridge.
    + Add MutableThreadContextMapFilter.
    + Add support for 24 colors in highlighting
  * Changed
    + Improves ServiceLoader support on servlet containers.
    + Make the default disruptor WaitStrategy used by Async Loggers
    garbage-free.
    + Do not throw UnsupportedOperationException when JUL
    ApiLogger::setLevel is called.
    + Support Spring 2.6.x.
    + Move perf tests to log4j-core-its
    + Upgrade the Flume Appender to Flume 1.10.0
  * Fixed
    + Fix minor typo #792.
    + Improve validation and reporting of configuration errors.
    + Allow enterprise id to be an OID fragment.
    + Fix problem with non-uppercase custom levels.
    + Avoid ClassCastException in JeroMqManager with custom
    LoggerContextFactory #791.
    + DirectWriteRolloverStrategy should use the current time when
    creating files.
    + Fixes the syslog appender in Log4j 1.x bridge, when used with
    a custom layout.
    + log4j-1.2-api 2.17.2 throws NullPointerException while
    removing appender with name as null.
    + Improve JsonTemplateLayout performance.
    + Fix resolution of non-Log4j properties.
    + Fixes Spring Boot logging system registration in a
    multi-application environment.
    + JAR file containing Log4j configuration isn’t closed.
    + Properties defined in configuration using a value attribute
    (as opposed to element) are read correctly.
    + Syslog appender lacks the SocketOptions setting.
    + Log4j 1.2 bridge should not wrap components unnecessarily.
    + Update 3rd party dependencies for 2.18.0.
    + SizeBasedTriggeringPolicy would fail to rename files properly
    when integer pattern contained a leading zero.
    + Fixes default SslConfiguration, when a custom keystore is
    used.
    + Fixes appender concurrency problems in Log4j 1.x bridge.
    + Fix and test for race condition in FileUtils.mkdir().
    + LocalizedMessage logs misleading errors on the console.
    + Add missing message parameterization in RegexFilter.
    + Add the missing context stack to JsonLayout template.
    + HttpWatcher did not pass credentials when polling.
    + UrlConnectionFactory.createConnection now accepts an
    AuthorizationProvider as a parameter.
    + The DirectWriteRolloverStrategy was not detecting the correct
    index to use during startup.
    + Async Loggers were including the location information by
    default.
    + ClassArbiter’s newBuilder method referenced the wrong class.
    + Don’t use Paths.get() to avoid circular file systems.
    + Fix parsing error, when XInclude is disabled.
    + Fix LevelRangeFilterBuilder to align with log4j1’s behavior.
    + Fixes problem with wrong ANSI escape code for bright colors
    + Log4j 1.2 bridge should generate Log4j 2.x messages based on
    the parameter runtime type.
- Update to 2.19.0
  * Added
    + Add implementation of SLF4J2 fluent API.
    + Add support for SLF4J2 stack-valued MDC.
  * Changed
    + Add getExplicitLevel method to LoggerConfig.
    + Allow PropertySources to be added.
    + Allow Plugins to be injected with the LoggerContext reference.
  * Fixed
    + Add correct manifest entries for OSGi to log4j-jcl
    + Improve support for passwordless keystores.
    + SystemPropertyArbiter was assigning the value as the name.
    + Make JsonTemplateLayout stack trace truncation operate for
    each label block.
    + Fix recursion between Log4j 1.2 LogManager and Category.
    + Fix resolution of properties not starting with log4j2..
    + Logger$PrivateConfig.filter(Level, Marker, String) was
    allocating empty varargs array.
    + Allows a space separated list of style specifiers in the
    %style pattern for consistency with %highlight.
    + Fix NPE in log4j-to-jul in the case the root logger level is
    null.
    + Fix RollingRandomAccessFileAppender with
    DirectWriteRolloverStrategy can’t create the first log file of
    different directory.
    + Generate new SSL certs for testing.
    + Fix ServiceLoaderUtil behavior in the presence of a
    SecurityManager.
    + Fix regression in Rfc5424Layout default values.
    + Harden InstantFormatter against delegate failures.
    + Add async support to Log4jServletFilter.
  * Removed
    + Removed build page in favor of a single build instructions
    file.
    + Remove SLF4J 1.8.x binding.
- Update to 2.20.0
  * Added
    + Add support for timezones in RollingFileAppender date pattern
    + Add LogEvent timestamp to ProducerRecord in KafkaAppender
    + Add PatternLayout support for abbreviating the name of all
    logger components except the 2 rightmost
    + Removes internal field that leaked into public API.
    + Add a LogBuilder#logAndGet() method to emulate the
    Logger#traceEntry method.
  * Changed
    + Simplify site generation
    + Switch the issue tracker from JIRA to GitHub Issues
    + Remove liquibase-log4j2 maven module
    + Fix order of stacktrace elements, that causes cache misses in
    ThrowableProxyHelper.
    + Switch from com.sun.mail to Eclipse Angus.
    + Add Log4j2 Core as default runtime dependency of the
    SLF4J2-to-Log4j2 API bridge.
    + Replace maven-changes-plugin with a custom changelog
    implementation
    + Moved log4j-api and log4j-core artifacts with classifier tests
    to log4j-api-test and log4j-core-test respectively.
  * Deprecated
    + Deprecate support for package scanning for plugins
  * Fixed
    + Copy programmatically supplied location even if
    includeLocation="false".
    + Eliminate status logger warning, when disableAnsi or
    noConsoleNoAnsi is used the style and highlight patterns.
    + Fix detection of location requirements in RewriteAppender.
    + Replace regex with manual code to escape characters in
    Rfc5424Layout.
    + Fix java.sql.Time object formatting in MapMessage
    + Fix previous fire time computation in CronTriggeringPolicy
    + Correct default to not include location for AsyncRootLoggers
    + Make StatusConsoleListener use SimpleLogger internally.
    + Lazily evaluate the level of a SLF4J LogEventBuilder
    + Fixes priority of Legacy system properties, which are now back
    to having higher priority than Environment variables.
    + Protects ServiceLoaderUtil from unchecked ServiceLoader
    exceptions.
    + Fix Configurator#setLevel for internal classes
    + Fix level propagation in Log4jBridgeHandler
    + Disable OsgiServiceLocator if not running in OSGI container.
    + When using a Date Lookup in the file pattern the current time
    should be used.
    + Fixed LogBuilder filtering in the presence of global filters.
- Removed patch:
  * log4j-java8compat.patch
    + not needed with this version
- Modified patch:
  * logging-log4j-Remove-unsupported-EventDataConverter.patch
    + rediff
- Added patch:
  * 0002-Remove-usage-of-toolchains.patch
    + do not use the maven-toolchains-plugin
  * log4j-CVE-2025-68161.patch
    + bsc#1255427, CVE-2025-68161: absent TLS hostname verification
    may allow a man-in-the-middle attack</changelog>
  <changelog author="fstrba@suse.com" date="1776168000">- Added patch:
  * log4j-CVE-2026-34477.patch
    + backported upstream fix for bsc#1262050 (CVE-2026-34477):
    man-in-the-middle attack due to incomplete hostname
    verification</changelog>
  <changelog author="fstrba@suse.com" date="1776168001">- Added patches:
  * log4j-CVE-2026-34479.patch
    + backported upstream fix for bsc#1262091 (CVE-2026-34479):
    log processing denial of service due to improper XML escaping
  * log4j-CVE-2026-34480.patch
    + backported upstream fix for bsc#1262092 (CVE-2026-34480):
    invalid XML output causes denial of service in logging
  * log4j-CVE-2026-34481.patch
    + backported upstream fix for bsc#1262093 (CVE-2026-34481):
    denial of service via invalid JSON output</changelog>
</package>
<package pkgid="c3bf813026b45983574062b0e6161e3f452697540211df3b87936b2aedc2ebcd" name="login_defs" arch="noarch">
  <version epoch="0" ver="4.17.2" rel="150600.17.18.1"/>
  <changelog author="mvetter@suse.com" date="1704801600">- bsc#1199026 bsc#1203823:
  Remove pam_keyinit from PAM configuration.
  This was introduced for bsc#1144060.</changelog>
  <changelog author="mvetter@suse.com" date="1705406400">- Update to 4.14.3:
  * libshadow:
    + Avoid null pointer dereference (#904)</changelog>
  <changelog author="mvetter@suse.com" date="1707739200">- Update to 4.14.4:
  * Build system:
    + Link correctly with libdl.
    + Install pam configs for chpasswd(8) and newusers(8) when using
    ./configure --with-libpam --disable-account-tools-setuid.
  * libshadow:
    + Fix build error (parameter name omitted).
    + Fix off-by-one bug.
    + Remove warning.
- Add shadow-4.14.4-chgpasswd-typo.patch: to fix build. See #926
- Update patch macro `patchN` -&gt; `patch -P N`</changelog>
  <changelog author="mvetter@suse.com" date="1707825600">- Update to 4.14.5:
  * Build system:
    + Fix regression introduced in 4.14.4, due to a typo. chgpasswd had
    been deleted from a Makefile variable, but it should have been
    chpasswd.
- Remove shadow-4.14.4-chgpasswd-typo.patch</changelog>
  <changelog author="mvetter@suse.com" date="1709467200">- Update to 4.14.6:
  * login(1):
    + Fix off-by-one bugs.
  * passwd(1):
    + Don't silently truncate passwords of length &gt;= 200 characters.
    Instead, accept a length of PASS_MAX, and reject longer ones.
  * libshadow:
    + Fix calculation in strtoday(), which caused a wrong half-day
    offset in some cases (bsc#1176006)
    + Fix parsing of dates in get_date() (bsc#1176006)
    + Use utmpx instead of utmp. This fixes a regression introduced in
    4.14.0.</changelog>
  <changelog author="mvetter@suse.com" date="1710072000">- Update to 4.15.0
  * libshadow:
    + Use utmpx instead of utmp. This fixes a regression introduced
    in 4.14.0.
    + Fix build error (parameter name omitted).
  * Build system:
    + Link correctly with libdl.
    + Install pam configs for chpasswd(8) and newusers(8) when using
    ./configure --with-libpam --disable-account-tools-setuid.
    + Merge libshadow and libmisc into a single libshadow. This fixes
    problems in the linker, which were reported at least in Gentoo.
    + Fix build with musl libc.
    + Support out of tree builds
  * useradd(8):
    + Set proper SELinux labels for def_usrtemplate
- Update Serge Hallyns GPG key
- Update shadow-login_defs-unused-by-pam.patch</changelog>
  <changelog author="mvetter@suse.com" date="1711022400">- Add shadow-4.15.0-fix-definition.patch:
  Fix error messages about config options.
  See gh/shadow-maint/shadow#967</changelog>
  <changelog author="mvetter@suse.com" date="1711281600">- Update to 4.15.1:
  * Fix a bug that caused spurious error messages about unknown
    login.defs configuration options #967
  * Adding checks for fd omission #964
  * Use temporary stat buffer #974
  * Fix wrong french translation #975
- Drop shadow-4.15.0-fix-definition.patch</changelog>
  <changelog author="mvetter@suse.com" date="1718798400">- Update to 4.16.0:
  * The shadow implementations of id(1) and groups(1) are deprecated
    in favor of the GNU coreutils and binutils versions.
    They will be removed in 4.17.0.
  * The rlogind implementation has been removed.
  * The libsubid major version has been bumped, since it now requires
    specification of the module's free() implementation.
- Update shadow-login_defs-suse.patch
- Add shadow-4.16.0-econf.patch:
  Replace deprecated econf_readDirs with econf_readConfig</changelog>
  <changelog author="mvetter@suse.com" date="1719230400">- bsc#1226850: Drop incorrect econf patch (until time to fix it)
  Drop shadow-4.16.0-econf.patch</changelog>
  <changelog author="scabrero@suse.de" date="1720440000">- Disable flushing sssd caches. The sssd's files provider is no
  longer available.</changelog>
  <changelog author="mvetter@suse.com" date="1733486400">- Update to 4.17.0 RC1:
  Pre-release without changelog</changelog>
  <changelog author="mvetter@suse.com" date="1735300800">- Update to 4.17.0:
  * Fix the lower part of the domain of csrand_uniform()
  * Fix use of volatile pointer
  * Use 'dist-hook' to clean up &lt;tests/unit/Makefile&gt;
  * Use str2[u]l() instead of atoi(3)
  * Use a2i() in various places
  * Fix const correctness
  * Use uid_t for holding UIDs (and GIDs)
  * Move all sprintf(3)-like APIs to a subdirectory
  * Move all copying APIs to a subdirectory
  * Fix forever loop on ENOMEM
  * Fix REALLOC() nmemb calculation
  * Remove id(1)
  * Remove groups(1)
  * Use local time for human-readable dates
  * Use %F instead of %Y-%m-%d with strftime(3)
  * is_valid{user,group}_name(): Set errno to distinguish the reasons
  * Recommend --badname only if it is useful
  * Add fmkomstemp() to fix mode of &lt;/etc/default/useradd&gt;
  * Fix use-after-free bug in sgetgrent()
  * Update Catalan translation
  * Remove references to cppw, cpgr
  * groupadd, groupmod: Update gshadow file with -U
  * Added option -a for listing active users only, optimized using if aflg,return
  * Added information in lastlog man page for new option '-a'
  * Plenty of code cleanup and clarifications</changelog>
  <changelog author="mvetter@suse.com" date="1735646400">- Update to 4.17.1:
  * Fix `su -` regression #1163</changelog>
  <changelog author="mvetter@suse.com" date="1736596800">- Update to 4.17.2:
  * src/login_nopam.c: Fix compiler warnings #1170
  * lib/chkname.c: Put limits for LOGIN_NAME_MAX and sysconf(_SC_LOGIN_NAME_MAX) #1169
  * Use HTTPS in link to Wikipedia article on password strength #1164
  * lib/attr.h: use C23 attributes only with gcc &gt;= 10 #1172
  * login: Fix no-pam authorization regression #1174
  * man: Add Portuguese translation #1178
  * Update French translation #1177
  * Add cheap defense mechanisms #1171
  * Add Romanian translation #1176</changelog>
  <changelog author="mvetter@suse.com" date="1737374400">- bsc#1235453: Set SYS_{UID,GID}_MIN to 201:
  After repeated similar requests to change the ID ranges we set the
  above mentioned value to 201. The max value will stay at 499.
  This range should be sufficient and will give us leeway for the
  future.
  It's not straightforward to find out which static UIDs/GIDs are
  used in all packages.
  Update shadow-login_defs-suse.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1744200000">- shadow-util-linux.patch: util-linux-2.41 introduced new variable:
  LOGIN_ENV_SAFELIST. Recognize it and update dependencies. The
  patch includes gh/shadow-maint/shadow/pull#1248.
- shadow-login_defs-check-login_defs.lst: Make the util-linux.spec
  multibuild file compatible with quilt. Make it working with new
  quilt.</changelog>
  <changelog author="fstrba@suse.com" date="1767787200">- Because of the need of __VA_OPT__ macro, build using gcc11 on
  systemw where the default gcc is lower.</changelog>
  <changelog author="mvetter@suse.com" date="1772712000">- jira#PED-14520: Build with --enable-lastlog
  shadow disabled building lastlog by default in 4.14.0.
  At that point we switched to lastlog2. For SLE 15 we need to
  enable building lastlog again to stay compatible.</changelog>
  <changelog author="mvetter@suse.com" date="1773748800">- bsc#1259542:
  * Install /etc/default/useradd, which shadow doesn't ship anymore
    in the current upstream version, in case users depend on the file.</changelog>
</package>
<package pkgid="661e4ce100ab7b06c83295b6a0917eced49f7a904c93df310178bf1f31716034" name="lsscsi" arch="src">
  <version epoch="0" ver="0.32" rel="150700.17.3.1"/>
  <changelog author="hare@suse.de" date="1209038400">- Split off from original scsi package.</changelog>
  <changelog author="hare@suse.de" date="1211544000">- using 'Provides' to clean update dependency.</changelog>
  <changelog author="garloff@suse.de" date="1218542400">- Update to lsscsi-0.21:
  SysFS scanning changes imposed by kernel 2.6.25/26.</changelog>
  <changelog author="hare@suse.de" date="1225454400">- Update sysfs patch to match latest sysfs changes (bnc#434823)</changelog>
  <changelog author="jdelvare@suse.de" date="1260187200">- Update to lsscsi-0.23:
  * Show protection information with '--protection' option, ATA,
    SATA and USB transport information.
  * Stop scanning /proc/mounts; assume /sys unless overridden by
    '--sysfsroot=PATH' option.
- This update fixes bnc#556180.</changelog>
  <changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1371124800">- Update to new upstream release 0.24
  * FC transport syntax changes (colon to slash)
- Update to new upstream release 0.25
  * add sas_port and fc_remote_ports transport information
  * print enclosure_device entry
  * add a "--size" option to show size of disks
  * add a "--protmode" option to show protection information mode
- Update to new upstream release 0.26
  * add a "fcoe" transport indicator
  * add a "--wwn" option and datamine /dev/disk/by-id/wwn*
- Update to new upstream release 0.27
  * Accept large (64-bit) LUNs
  * add a "--lunhex" option and recognition of LSSCSI_LUNHEX_OPT
  environment variable for displaying LUNs in hex
- Normalized build/install procedure;
  remove redundant %clean section</changelog>
  <changelog author="mpluskal@suse.com" date="1424779200">- Update to 0.28
  * fix handling of scsi_level 0 (no compliance)
  * add SRP transport identifier
  * add --unit option for LU identifier (&gt;= lk 3.15)
  * add (S)ATA transport identifier (&gt;= lk 3.15)
  * make USB transport ids more consistent
  * fix FC transport id missing comma
  * add pdt strings for security manager and zbc
  * upgrade automake to version 1.14.1
- Do not install empty NEWS</changelog>
  <changelog author="ro@suse.de" date="1464177600">- Update to new upstream release 0.29 (bsc#977572)
  - '-u' now decodes locally assigned UUIDs (spc5r08)
  - as last try use T10 Vendor ID for lu name
  - if no lu name found, print 'none'
  - change '-uuu' to output the full lu name followed
    by the normal fields (which were skipped before)
  - add 'U' option, same action as '-uuu'
  - '-UU' prefixes lu names with 'eui.', 'naa.', etc
  - if '-s' given twice, lu size is base 2 related
  - if very long [h:c:t:l] then append space
  - print_enclosure_device() for FCP may be useless,
    comment out while checking ...
  - with '-t' print 0x0000000000000000 for non-SAS
    device in SAS domain
  - autogen.sh: upgrade to 20091223 version
  - automake: upgrade to 1.15 (ubuntu 16.04)
  * Delete lsscsi-0.27.tar.xz
  * Add lsscsi-0.29.tar.xz
- Update to new upstream release 0.28
  - fix handling of scsi_level 0 (no compliance)
  - add SRP transport identifier
  - add --unit option for LU identifier (&gt;= lk 3.15)
  - add (S)ATA transport identifier (&gt;= lk 3.15)
  - make USB transport ids more consistent
  - fix FC transport id missing comma
  - add pdt strings for security manager and zbc
  - upgrade automake to version 1.14.1
- Remove patches merged with upstream
  * Delete lsscsi-fixup-fc-transport-id.patch
  * Delete lsscsi-usb.diff
  * Delete lsscsi-fix-classic-output</changelog>
  <changelog author="hare@suse.de" date="1499688000">- Lookup WWN using /dev/disk/by-id/scsi-* (bsc#1008935)
- fixup display of 'lsscsi -t' (bsc#1047884)</changelog>
  <changelog author="mpluskal@suse.com" date="1533211200">- Update to version 0.30:
  * add support for NVMe devices and controllers
  - to build without: ./configure --disable-nvme-supp
  - deselect at runtime: lsscsi --no-nvme
  - deselect SCSI devices at runtime: lsscsi N
  * add --brief for tuple + device_name(s) only
  * add --pdt (-D) for device type in hex
  * extend --size (-s) so when given three times
    the size as a logical block count is output
  * add --sz-lbs (-S) that is equivalent to '-sss'
    when used twice adds comma then logical block size
  * '-w' now decodes 128 bit WWN without truncation
  * /dev/disk/by-id/wwn- is not guaranteed to be
    persistent (or stable); instead use
    /dev/disk/by-id/scsi-
  * '-t' on a FC host was not printing the comma
    separator resulting in garbled output, fix
- Small spec file modernisation with spec-cleaner
- Restore removed parts of changelog</changelog>
  <changelog author="alnovak@suse.com" date="1765886400">- Update to release 0.32 (jsc#PED-13948)
  * improve NVMe device parsing (e.g. /dev/nvme0c1n2)
  * print nr_hw_queues when available for SCSI hosts
  * make WWN printing for NVMe more consistent with
    output from SCSI devices (e.g. with -u and -t)
  * logic to select best SCSI id (--scsi_id) to output
  * fix issue where host managed ZBC devices don't
    output their size. [Fix also for RBC and CD/DVD.]
  * exclude NVMe listings when --classic given
  * supply "-" for generic NVMe device one line output
    so 'lsscsi -gb' output is consistent [jsc</changelog>
</package>
<package pkgid="4a6dab98ee95e52e7860f2af48debda51f1360fda6e02501feaa5686d5a9ed2d" name="lsscsi" arch="x86_64">
  <version epoch="0" ver="0.32" rel="150700.17.3.1"/>
  <changelog author="garloff@suse.de" date="1218542400">- Update to lsscsi-0.21:
  SysFS scanning changes imposed by kernel 2.6.25/26.</changelog>
  <changelog author="hare@suse.de" date="1225454400">- Update sysfs patch to match latest sysfs changes (bnc#434823)</changelog>
  <changelog author="jdelvare@suse.de" date="1260187200">- Update to lsscsi-0.23:
  * Show protection information with '--protection' option, ATA,
    SATA and USB transport information.
  * Stop scanning /proc/mounts; assume /sys unless overridden by
    '--sysfsroot=PATH' option.
- This update fixes bnc#556180.</changelog>
  <changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1371124800">- Update to new upstream release 0.24
  * FC transport syntax changes (colon to slash)
- Update to new upstream release 0.25
  * add sas_port and fc_remote_ports transport information
  * print enclosure_device entry
  * add a "--size" option to show size of disks
  * add a "--protmode" option to show protection information mode
- Update to new upstream release 0.26
  * add a "fcoe" transport indicator
  * add a "--wwn" option and datamine /dev/disk/by-id/wwn*
- Update to new upstream release 0.27
  * Accept large (64-bit) LUNs
  * add a "--lunhex" option and recognition of LSSCSI_LUNHEX_OPT
  environment variable for displaying LUNs in hex
- Normalized build/install procedure;
  remove redundant %clean section</changelog>
  <changelog author="mpluskal@suse.com" date="1424779200">- Update to 0.28
  * fix handling of scsi_level 0 (no compliance)
  * add SRP transport identifier
  * add --unit option for LU identifier (&gt;= lk 3.15)
  * add (S)ATA transport identifier (&gt;= lk 3.15)
  * make USB transport ids more consistent
  * fix FC transport id missing comma
  * add pdt strings for security manager and zbc
  * upgrade automake to version 1.14.1
- Do not install empty NEWS</changelog>
  <changelog author="ro@suse.de" date="1464177600">- Update to new upstream release 0.29 (bsc#977572)
  - '-u' now decodes locally assigned UUIDs (spc5r08)
  - as last try use T10 Vendor ID for lu name
  - if no lu name found, print 'none'
  - change '-uuu' to output the full lu name followed
    by the normal fields (which were skipped before)
  - add 'U' option, same action as '-uuu'
  - '-UU' prefixes lu names with 'eui.', 'naa.', etc
  - if '-s' given twice, lu size is base 2 related
  - if very long [h:c:t:l] then append space
  - print_enclosure_device() for FCP may be useless,
    comment out while checking ...
  - with '-t' print 0x0000000000000000 for non-SAS
    device in SAS domain
  - autogen.sh: upgrade to 20091223 version
  - automake: upgrade to 1.15 (ubuntu 16.04)
  * Delete lsscsi-0.27.tar.xz
  * Add lsscsi-0.29.tar.xz
- Update to new upstream release 0.28
  - fix handling of scsi_level 0 (no compliance)
  - add SRP transport identifier
  - add --unit option for LU identifier (&gt;= lk 3.15)
  - add (S)ATA transport identifier (&gt;= lk 3.15)
  - make USB transport ids more consistent
  - fix FC transport id missing comma
  - add pdt strings for security manager and zbc
  - upgrade automake to version 1.14.1
- Remove patches merged with upstream
  * Delete lsscsi-fixup-fc-transport-id.patch
  * Delete lsscsi-usb.diff
  * Delete lsscsi-fix-classic-output</changelog>
  <changelog author="hare@suse.de" date="1499688000">- Lookup WWN using /dev/disk/by-id/scsi-* (bsc#1008935)
- fixup display of 'lsscsi -t' (bsc#1047884)</changelog>
  <changelog author="mpluskal@suse.com" date="1533211200">- Update to version 0.30:
  * add support for NVMe devices and controllers
  - to build without: ./configure --disable-nvme-supp
  - deselect at runtime: lsscsi --no-nvme
  - deselect SCSI devices at runtime: lsscsi N
  * add --brief for tuple + device_name(s) only
  * add --pdt (-D) for device type in hex
  * extend --size (-s) so when given three times
    the size as a logical block count is output
  * add --sz-lbs (-S) that is equivalent to '-sss'
    when used twice adds comma then logical block size
  * '-w' now decodes 128 bit WWN without truncation
  * /dev/disk/by-id/wwn- is not guaranteed to be
    persistent (or stable); instead use
    /dev/disk/by-id/scsi-
  * '-t' on a FC host was not printing the comma
    separator resulting in garbled output, fix
- Small spec file modernisation with spec-cleaner
- Restore removed parts of changelog</changelog>
  <changelog author="alnovak@suse.com" date="1765886400">- Update to release 0.32 (jsc#PED-13948)
  * improve NVMe device parsing (e.g. /dev/nvme0c1n2)
  * print nr_hw_queues when available for SCSI hosts
  * make WWN printing for NVMe more consistent with
    output from SCSI devices (e.g. with -u and -t)
  * logic to select best SCSI id (--scsi_id) to output
  * fix issue where host managed ZBC devices don't
    output their size. [Fix also for RBC and CD/DVD.]
  * exclude NVMe listings when --classic given
  * supply "-" for generic NVMe device one line output
    so 'lsscsi -gb' output is consistent [jsc</changelog>
</package>
<package pkgid="a783ff6c08d77f77d61e5802bee8177cc504aaafd29b65fca46aee8626086bbf" name="luajit" arch="src">
  <version epoch="0" ver="2.1.0~beta3+git.1624618403.e9577376" rel="150400.4.5.1"/>
  <changelog author="munix9@googlemail.com" date="1624536000">- Update to version 2.1.0~beta3+git291.3f9389ed:
  * Throw any errors before stack changes in trace stitching.
  * DynASM/x86: Add missing escape in pattern.
  * Fix HTML.
  * String buffers, part 2e: add serialization string dictionary.
  * DynASM/ARM64: Fix LSL/BFI* encoding with variable shifts.
  * Fix MinGW static build.
  * Fix dependencies.
  * Fix IR_BUFHDR assembly.</changelog>
  <changelog author="munix9@googlemail.com" date="1624968000">- Update to version 2.1.0~beta3+git294.e9577376:
  * Disable unreliable assertion for external frame unwinding.
  * Flush and close output file after profiling run.
  * Avoid conflict between 64 bit lightuserdata and ITERN key.</changelog>
  <changelog author="mcepl@suse.com" date="1626091200">- Clean up SPEC. We don't need update-alternatives after all.</changelog>
  <changelog author="mgorse@suse.com" date="1633608000">- Exclude s390x for now. There is a not-yet-upstreamed port
  available, but we would need to rebase it for our release.</changelog>
  <changelog author="mgorse@suse.com" date="1635163200">- Add luajit-ppc64-remove-asserts.patch: remove calls to
  lua_assert. Fixes the build with our revision (bsc#1191615).
- Add luajit-s390x.patch: add s390x support, based on Fedora's
  patch and ported to our revision.
- Remove ExcludeArch, since package currently builds on s390x.</changelog>
  <changelog author="fvogt@suse.com" date="1635336000">- Replace luajit-ppc64-remove-asserts.patch with
  luajit-ppc64-replace-asserts.patch to use the proper assert
  functions instead of removing them.</changelog>
  <changelog author="mgorse@suse.com" date="1754395200">- Add luajit-CVE-2024-25176.patch: fix zero stripping in %g number
  formatting (bsc#1246077 CVE-2024-25176).
- Add luajit-CVE-2024-25177.patch: fix unsinking of IR_FSTORE for
  NULL metatable (bsc#1246078 CVE-2024-25177).
- Add luajit-CVE-2024-25178.patch: rework stack overflow handling
  (bsc#1246079 CVE-2024-25178).</changelog>
</package>
<package pkgid="4f74cdc46b38f7c77c2e28b9539d242c2de696f6a00c7821196c441e87c90d22" name="luajit" arch="src">
  <version epoch="0" ver="2.1.0~beta3+git.1624618403.e9577376" rel="150400.4.7.1"/>
  <changelog author="munix9@googlemail.com" date="1624536000">- Update to version 2.1.0~beta3+git291.3f9389ed:
  * Throw any errors before stack changes in trace stitching.
  * DynASM/x86: Add missing escape in pattern.
  * Fix HTML.
  * String buffers, part 2e: add serialization string dictionary.
  * DynASM/ARM64: Fix LSL/BFI* encoding with variable shifts.
  * Fix MinGW static build.
  * Fix dependencies.
  * Fix IR_BUFHDR assembly.</changelog>
  <changelog author="munix9@googlemail.com" date="1624968000">- Update to version 2.1.0~beta3+git294.e9577376:
  * Disable unreliable assertion for external frame unwinding.
  * Flush and close output file after profiling run.
  * Avoid conflict between 64 bit lightuserdata and ITERN key.</changelog>
  <changelog author="mcepl@suse.com" date="1626091200">- Clean up SPEC. We don't need update-alternatives after all.</changelog>
  <changelog author="mgorse@suse.com" date="1633608000">- Exclude s390x for now. There is a not-yet-upstreamed port
  available, but we would need to rebase it for our release.</changelog>
  <changelog author="mgorse@suse.com" date="1635163200">- Add luajit-ppc64-remove-asserts.patch: remove calls to
  lua_assert. Fixes the build with our revision (bsc#1191615).
- Add luajit-s390x.patch: add s390x support, based on Fedora's
  patch and ported to our revision.
- Remove ExcludeArch, since package currently builds on s390x.</changelog>
  <changelog author="fvogt@suse.com" date="1635336000">- Replace luajit-ppc64-remove-asserts.patch with
  luajit-ppc64-replace-asserts.patch to use the proper assert
  functions instead of removing them.</changelog>
  <changelog author="mgorse@suse.com" date="1754395200">- Add luajit-CVE-2024-25176.patch: fix zero stripping in %g number
  formatting (bsc#1246077 CVE-2024-25176).
- Add luajit-CVE-2024-25177.patch: fix unsinking of IR_FSTORE for
  NULL metatable (bsc#1246078 CVE-2024-25177).
- Add luajit-CVE-2024-25178.patch: rework stack overflow handling
  (bsc#1246079 CVE-2024-25178).</changelog>
</package>
<package pkgid="7ea3192f4f455c65c777db3c6e6dbf1b7a453967e520b2b2c651afdbeccec5d2" name="lvm2" arch="src">
  <version epoch="0" ver="2.03.24" rel="150700.7.3.3"/>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6339)
  * 2.03.22:
  * Fix pv_major/pv_minor report field types so they are integers, not strings.
  * Add lvmdevices --delnotfound to delete entries for missing devices.
  * Always use cachepool name for metadata backup LV for lvconvert --repair.
  * Make metadata backup LVs read-only after pool's lvconvert --repair.
  * Handle 'lvextend --usepolicies' for pools for all activation variants.
  * Fix memleak in vgchange autoactivation setup.
  * Support conversion from thick to fully provisioned thin LV.
  * Cache/Thin-pool can use error and zero volumes for testing.
  * Individual thin volume can be cached, but cannot take snapshot.
  * internal support for handling error and zero target (for testing).
  * COW above trimmed maximal size is does not return error.
  * Add lvm.conf thin_restore and cache_restore settings.
  * Handle multiple mounts while resizing volume with a FS.
  * Handle leading/trailing spaces in sys_wwid and sys_serial used by deivce_id.
  * Fix failing -S|--select for non-reporting cmds if using LV info/status fields.
  * Allow snapshots of raid+integrity LV.
  * Fix multisegment RAID1 allocator to prevent using single disk for more legs.
  * 2.03.21:
  * Allow (write)cache over raid+integrity LV.
  * 2.03.20:
  * Fix segfault if using -S|--select with log/report_command_log=1 setting.
  * 2.03.19:
  * Do not reset SYSTEMD_READY variable in udev for PVs on MD and loop devices.
  * Ensure udev is processing origin LV before its thick snapshots LVs.
  * 2.03.18:
  * Fix warning for thin pool overprovisioning on lvextend.
  * Add support for writecache metadata_only and pause_writeback settings.
  * Fix missing error messages in lvmdbusd.
  * 2.03.17:
  * Add new options (--fs, --fsmode) for FS handling when resizing LVs (btrfs is unsupported).
  * Fix 'lvremove -S|--select LV' to not also remove its historical LV right away.
  * Fix lv_active field type to binary so --select and --binary applies properly.
  * Error out in lvm shell if using a cmd argument not supported in the shell.
  * Fix lvm shell's lastlog command to report previous pre-command failures.
  * Add --valuesonly option to lvmconfig to print only values without keys.
  * Add json_std output format for more JSON standard compliant version of output.
  * Fix many corner cases in device_id, including handling of S/N duplicates.
  * Fix various issues in lvmdbusd.
- device-mapper version upgrade to 1.02.196
  * Improve parallel creation of /dev/mapper/control device node.
  * Import previous ID_FS_* udev records in 13-dm-disk.rules for suspended DM dev.
  * Remove NAME="mapper/control" rule from 10-dm.rules to avoid udev warnings.
  * Improve 'dmsetup create' without given table line with new kernels.
  * Add DM_REPORT_GROUP_JSON_STD for more JSON standard compliant output format.
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
  <changelog author="heming.zhao@suse.com" date="1716724800">- Update lvm2 from LVM2.2.03.22 to LVM2.2.03.24
  * ** WHATS_NEW from 2.03.22 to 2.03.24 ***
  Version 2.03.24 - 16th May 2024
  ===============================
    Lvconvert supports VDO options for thin-pool with vdo conversion.
    Improve placement to .data.rel.ro and .rodata sections.
    Fix support for -y and -W when creating thinpool with vdo.
    Bettter support for runtime valgrind detection.
    Allow command interruption when communicating with dmeventd.
    Fix resize of VDO volume used for thin pool data volume.
    Use -Wl,-z,now and -Wl,--as-needed for compilation by default.
    Require 3.7 as minimal version for sanlock.
    Share code for closing opened desriptors on program startup.
    Fix memleak in lvmcache.
    Add configure --with-default-event-activation=ON setting.
    Fix return value from reporter function when hitting internal error.
    Skip checking of pools for lvremove and vgremove commands.
    VDO modprobes dm-vdo for 6.9 kernel and kvdo for older kernel version.
    Fix lvs reporting for VDO volumes with new upstream kernel driver.
    Don't import DM_UDEV_DISABLE_OTHER_RULES_FLAG in LVM rules, DM rules cover it.
    Fix table line generation for cache snapshots using cachevol.
    Enhance lvconvert support for external origins stacking.
    When swapping LV names also swap properties like hostname, time and data.
    Fix removal of stacked external origins.
    Lock filesystem when converting volume to read-only external origin.
    Support external origin between different thin-pool.
    Improve validation of acceptable volumes for external origins.
    Reduce amount of preloaded devices for complex device trees.
    Avoid logging problems from monitoring snapshots with inactive origins.
    Check for cache policy module presence in kernel's builtin modules file.
    Add configure --with-modulesdir to select kernel modules directory.
    Support creation of thin-pool with VDO use for its data volume.
  Version 2.03.23 - 21st November 2023
  ====================================
    Set the first lv_attr flag for raid integrity images to i or I.
    Add -A option for pvs and pvscan to show PVs outside devices file.
    Improve searched_devnames temp file usage to prevent redundant scanning.
    Change default search_for_devnames from auto to all.
    Add lvmdevices --refresh to search for missing PVIDs on all devices.
    Add comparison between old and new entries in lvmdevices --check.
    Fix device_id matching order - match non-devname first.
    Fix "lvconvert -m 0" when there is other than first in-sync leg.
    Use system.devices as default for dmeventd when dmeventd.devices is undefined.
    Accept WWIDs containing QEMU HARDDISK for device_id.
    Improve handling of non-standard WWID prefixes used for device_id.
    Configure automatically enables cmdlib for dmeventd and notify-dbus for dbus.
    Fix hint calculation for pools with zero or error segment.
    Configure supports --disable-shared to build only static binaries.
    Configure supports --without-{blkid|systemd|udev} for easier static build.
    Refresh device ids if the system changes.
    Fix pvmove when specifying raid components as moved LVs.
    Enhance error detection for lvm_import_vdo.
    Support PV lists with thin lvconvert.
    Fix support for lvm_import_vdo with SCSI VDO volumes.
    Fix locking issue leading to hanging concurrent vgchange --refresh.
    Recognize lvm.conf report/headings=2 for full column names in report headings.
    Add --headings none|abbrev|full cmd line option to set report headings type.
    Fix conversion to thin pool using lvmlockd.
    Fix conversion from thick into thin volume using lvmlockd.
    Require writable LV for conversion to vdo pool.
    Fix return value from lvconvert integrity remove.
    Preserve UUID for pool metadata spare.
    Preserve UUID for swapped pool metadata.
    Rewrite validation of device name entries used as device_id.
  * ** WHATS_NEW_DM from 1.02.196 to 1.02.198 ***
  Version 1.02.198 - 16th May 2024
  ================================
    Fix static only compilation of libdevmapper.a and dmsetup tool.
    Use better code for closing opened descriptors when starting dmeventd.
    Correct dmeventd -R for systemd environment.
    Restart of dmeventd -R checks pid file to detect running dmeventd first.
    Query with dmeventd -i quickly ends when there is no running dmeventd.
    Enhance dm_get_status_raid to handle mismatching status or reported legs.
    Create /dev/disk/by-label symlinks for DM devs that have crypto as next layer.
    Persist udev db for DM devs on cleanup used in initrd to rootfs transition.
    Process synthetic udev events other than 'add/change' as 'change' events.
    Increase DM_UDEV_RULES_VSN to 3 to indicate changed udev rules.
    Rename DM_NOSCAN to .DM_NOSCAN so it's not stored in udev db.
    Rename DM_SUSPENDED to .DM_SUSPENDED so it's not stored in udev db.
    Do not import DM_UDEV_DISABLE_OTHER_RULES_FLAG from db in 10-dm-disk.rules.
    Test DISK_RO after importing properties from db in 10-dm.rules.
    Also import ID_FS_TYPE in 13-dm-disk.rules from db if needed.
  Version 1.02.197 - 21st November 2023
  =====================================
    Fix invalid JSON report if using DM_REPORT_OUTPUT_MULTIPLE_TIMES and selection.
    Propagate ioctl errno from dm_task_run when creating new table line.
    Add support for group aliases in dmstats.
    Add support for exit-on file for dmeventd to reduce shutdown delays.
    Add configure option --with-dmeventd-exit-on-path to specify default path.
    Add dmsetup --headings none|abbrev|full to set report headings type.
    Add DM_REPORT_OUTPUT_FIELD_IDS_IN_HEADINGS to provide alternative headings.
- Drop patches that have been merged into upstream
  - 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  - 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  - 0003-lvconvert-fix-regresion-from-integrity-check.patch
  - 0004-gcc-cleanup-warnings.patch
  - 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  - 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  - 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  - 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  - 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  - 0010-lvmlockd-client-mutex-ordering.patch
  - 0011-filesystem-move-stat-after-open-check.patch
  - 0012-tests-check-for-writecache.patch
  - 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  - 0014-gcc-fix-warnings-for-x32-architecture.patch
  - 0015-gcc-warning-missing-braces-around-initializer.patch
  - 0016-test-improve-aux-teardown.patch
  - 0017-tests-aux-try-with-extra-sleep.patch
  - 0018-tests-aux-using-singl-lvmconf-call.patch
  - 0019-tests-missing-to-check-for-writecache-support.patch
  - 0020-tests-pvmove-large-disk-area.patch
  - 0021-tests-enforce-full-fs-check.patch
  - 0022-tests-update-for-work-in-fake-dev-environment.patch
  - 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  - 0024-tests-better-slowdown.patch
- Update patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch</changelog>
  <changelog author="glass.su@suse.com" date="1729771200">- add rpm dependency in spec file for aligning new DM udev rules (bsc#1225783 bsc#1229518 bsc#1232063)
  * update lvm2.spec for multipath-tools and udev</changelog>
  <changelog author="heming.zhao@suse.com" date="1740052800">- system with LVM on iSCSI hangs on shutdown because blk-availability.service is not enabled (bsc#1236788)
  * update lvm2.spec
  - remove blk-availability.service from %postun
  - add new Provides 'dont_stop_blk_availability_service'</changelog>
  <changelog author="heming.zhao@suse.com" date="1741003200">- Fixes the lvm2-testsuite failure to run on SUSE kernel (bsc#1238213)
  * Add upstream patch
    + tests-fix-wrong-pos-with-CONFIG_PRINTK_CALLER.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1741348800">- Fixes the lvm2-testsuite case fsadm-btrfs.sh (bsc#1238857)
  * Update SUSE special patch
    + fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1744718400">- LVM filter behaves unexpectedly for MPIO devices in SLES15SP5 (bsc#1216938)
  * set lvm.conf devices.multipath_wwids_file=""</changelog>
  <changelog author="glass.su@suse.com" date="1753876800">- L3: systemd fails to start lvmlockd with sanlock running (bsc#1246691)
  * Add upstream patches for sd_notify configure option
    + bug-1246691_01-configure.ac-build-lvmlockd-with-notify.patch
    + bug-1246691_02-configure-autoreconf.patch
    + bug-1246691_03-configure.ac-add-option-disable-enable-sd-notify.patch
    + bug-1246691_04-lvmlockd-utilize-SD_NOTIFY_SUPPORT.patch
    + bug-1246691_05-configure-autoreconf.patch
  * Update lvm2.spec
    + add pkgconfig(systemd) for lvmlockd build
    + enable configure option '--enable-sd-notify' for lvmlockd</changelog>
</package>
<package pkgid="2076c21df0fc52a57566c9743c0862ac600d47d46c0a58c341dbbfda92b2ce56" name="lvm2" arch="x86_64">
  <version epoch="0" ver="2.03.24" rel="150700.7.3.3"/>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6339)
  * 2.03.22:
  * Fix pv_major/pv_minor report field types so they are integers, not strings.
  * Add lvmdevices --delnotfound to delete entries for missing devices.
  * Always use cachepool name for metadata backup LV for lvconvert --repair.
  * Make metadata backup LVs read-only after pool's lvconvert --repair.
  * Handle 'lvextend --usepolicies' for pools for all activation variants.
  * Fix memleak in vgchange autoactivation setup.
  * Support conversion from thick to fully provisioned thin LV.
  * Cache/Thin-pool can use error and zero volumes for testing.
  * Individual thin volume can be cached, but cannot take snapshot.
  * internal support for handling error and zero target (for testing).
  * COW above trimmed maximal size is does not return error.
  * Add lvm.conf thin_restore and cache_restore settings.
  * Handle multiple mounts while resizing volume with a FS.
  * Handle leading/trailing spaces in sys_wwid and sys_serial used by deivce_id.
  * Fix failing -S|--select for non-reporting cmds if using LV info/status fields.
  * Allow snapshots of raid+integrity LV.
  * Fix multisegment RAID1 allocator to prevent using single disk for more legs.
  * 2.03.21:
  * Allow (write)cache over raid+integrity LV.
  * 2.03.20:
  * Fix segfault if using -S|--select with log/report_command_log=1 setting.
  * 2.03.19:
  * Do not reset SYSTEMD_READY variable in udev for PVs on MD and loop devices.
  * Ensure udev is processing origin LV before its thick snapshots LVs.
  * 2.03.18:
  * Fix warning for thin pool overprovisioning on lvextend.
  * Add support for writecache metadata_only and pause_writeback settings.
  * Fix missing error messages in lvmdbusd.
  * 2.03.17:
  * Add new options (--fs, --fsmode) for FS handling when resizing LVs (btrfs is unsupported).
  * Fix 'lvremove -S|--select LV' to not also remove its historical LV right away.
  * Fix lv_active field type to binary so --select and --binary applies properly.
  * Error out in lvm shell if using a cmd argument not supported in the shell.
  * Fix lvm shell's lastlog command to report previous pre-command failures.
  * Add --valuesonly option to lvmconfig to print only values without keys.
  * Add json_std output format for more JSON standard compliant version of output.
  * Fix many corner cases in device_id, including handling of S/N duplicates.
  * Fix various issues in lvmdbusd.
- device-mapper version upgrade to 1.02.196
  * Improve parallel creation of /dev/mapper/control device node.
  * Import previous ID_FS_* udev records in 13-dm-disk.rules for suspended DM dev.
  * Remove NAME="mapper/control" rule from 10-dm.rules to avoid udev warnings.
  * Improve 'dmsetup create' without given table line with new kernels.
  * Add DM_REPORT_GROUP_JSON_STD for more JSON standard compliant output format.
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
  <changelog author="heming.zhao@suse.com" date="1716724800">- Update lvm2 from LVM2.2.03.22 to LVM2.2.03.24
  * ** WHATS_NEW from 2.03.22 to 2.03.24 ***
  Version 2.03.24 - 16th May 2024
  ===============================
    Lvconvert supports VDO options for thin-pool with vdo conversion.
    Improve placement to .data.rel.ro and .rodata sections.
    Fix support for -y and -W when creating thinpool with vdo.
    Bettter support for runtime valgrind detection.
    Allow command interruption when communicating with dmeventd.
    Fix resize of VDO volume used for thin pool data volume.
    Use -Wl,-z,now and -Wl,--as-needed for compilation by default.
    Require 3.7 as minimal version for sanlock.
    Share code for closing opened desriptors on program startup.
    Fix memleak in lvmcache.
    Add configure --with-default-event-activation=ON setting.
    Fix return value from reporter function when hitting internal error.
    Skip checking of pools for lvremove and vgremove commands.
    VDO modprobes dm-vdo for 6.9 kernel and kvdo for older kernel version.
    Fix lvs reporting for VDO volumes with new upstream kernel driver.
    Don't import DM_UDEV_DISABLE_OTHER_RULES_FLAG in LVM rules, DM rules cover it.
    Fix table line generation for cache snapshots using cachevol.
    Enhance lvconvert support for external origins stacking.
    When swapping LV names also swap properties like hostname, time and data.
    Fix removal of stacked external origins.
    Lock filesystem when converting volume to read-only external origin.
    Support external origin between different thin-pool.
    Improve validation of acceptable volumes for external origins.
    Reduce amount of preloaded devices for complex device trees.
    Avoid logging problems from monitoring snapshots with inactive origins.
    Check for cache policy module presence in kernel's builtin modules file.
    Add configure --with-modulesdir to select kernel modules directory.
    Support creation of thin-pool with VDO use for its data volume.
  Version 2.03.23 - 21st November 2023
  ====================================
    Set the first lv_attr flag for raid integrity images to i or I.
    Add -A option for pvs and pvscan to show PVs outside devices file.
    Improve searched_devnames temp file usage to prevent redundant scanning.
    Change default search_for_devnames from auto to all.
    Add lvmdevices --refresh to search for missing PVIDs on all devices.
    Add comparison between old and new entries in lvmdevices --check.
    Fix device_id matching order - match non-devname first.
    Fix "lvconvert -m 0" when there is other than first in-sync leg.
    Use system.devices as default for dmeventd when dmeventd.devices is undefined.
    Accept WWIDs containing QEMU HARDDISK for device_id.
    Improve handling of non-standard WWID prefixes used for device_id.
    Configure automatically enables cmdlib for dmeventd and notify-dbus for dbus.
    Fix hint calculation for pools with zero or error segment.
    Configure supports --disable-shared to build only static binaries.
    Configure supports --without-{blkid|systemd|udev} for easier static build.
    Refresh device ids if the system changes.
    Fix pvmove when specifying raid components as moved LVs.
    Enhance error detection for lvm_import_vdo.
    Support PV lists with thin lvconvert.
    Fix support for lvm_import_vdo with SCSI VDO volumes.
    Fix locking issue leading to hanging concurrent vgchange --refresh.
    Recognize lvm.conf report/headings=2 for full column names in report headings.
    Add --headings none|abbrev|full cmd line option to set report headings type.
    Fix conversion to thin pool using lvmlockd.
    Fix conversion from thick into thin volume using lvmlockd.
    Require writable LV for conversion to vdo pool.
    Fix return value from lvconvert integrity remove.
    Preserve UUID for pool metadata spare.
    Preserve UUID for swapped pool metadata.
    Rewrite validation of device name entries used as device_id.
  * ** WHATS_NEW_DM from 1.02.196 to 1.02.198 ***
  Version 1.02.198 - 16th May 2024
  ================================
    Fix static only compilation of libdevmapper.a and dmsetup tool.
    Use better code for closing opened descriptors when starting dmeventd.
    Correct dmeventd -R for systemd environment.
    Restart of dmeventd -R checks pid file to detect running dmeventd first.
    Query with dmeventd -i quickly ends when there is no running dmeventd.
    Enhance dm_get_status_raid to handle mismatching status or reported legs.
    Create /dev/disk/by-label symlinks for DM devs that have crypto as next layer.
    Persist udev db for DM devs on cleanup used in initrd to rootfs transition.
    Process synthetic udev events other than 'add/change' as 'change' events.
    Increase DM_UDEV_RULES_VSN to 3 to indicate changed udev rules.
    Rename DM_NOSCAN to .DM_NOSCAN so it's not stored in udev db.
    Rename DM_SUSPENDED to .DM_SUSPENDED so it's not stored in udev db.
    Do not import DM_UDEV_DISABLE_OTHER_RULES_FLAG from db in 10-dm-disk.rules.
    Test DISK_RO after importing properties from db in 10-dm.rules.
    Also import ID_FS_TYPE in 13-dm-disk.rules from db if needed.
  Version 1.02.197 - 21st November 2023
  =====================================
    Fix invalid JSON report if using DM_REPORT_OUTPUT_MULTIPLE_TIMES and selection.
    Propagate ioctl errno from dm_task_run when creating new table line.
    Add support for group aliases in dmstats.
    Add support for exit-on file for dmeventd to reduce shutdown delays.
    Add configure option --with-dmeventd-exit-on-path to specify default path.
    Add dmsetup --headings none|abbrev|full to set report headings type.
    Add DM_REPORT_OUTPUT_FIELD_IDS_IN_HEADINGS to provide alternative headings.
- Drop patches that have been merged into upstream
  - 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  - 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  - 0003-lvconvert-fix-regresion-from-integrity-check.patch
  - 0004-gcc-cleanup-warnings.patch
  - 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  - 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  - 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  - 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  - 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  - 0010-lvmlockd-client-mutex-ordering.patch
  - 0011-filesystem-move-stat-after-open-check.patch
  - 0012-tests-check-for-writecache.patch
  - 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  - 0014-gcc-fix-warnings-for-x32-architecture.patch
  - 0015-gcc-warning-missing-braces-around-initializer.patch
  - 0016-test-improve-aux-teardown.patch
  - 0017-tests-aux-try-with-extra-sleep.patch
  - 0018-tests-aux-using-singl-lvmconf-call.patch
  - 0019-tests-missing-to-check-for-writecache-support.patch
  - 0020-tests-pvmove-large-disk-area.patch
  - 0021-tests-enforce-full-fs-check.patch
  - 0022-tests-update-for-work-in-fake-dev-environment.patch
  - 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  - 0024-tests-better-slowdown.patch
- Update patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch</changelog>
  <changelog author="glass.su@suse.com" date="1729771200">- add rpm dependency in spec file for aligning new DM udev rules (bsc#1225783 bsc#1229518 bsc#1232063)
  * update lvm2.spec for multipath-tools and udev</changelog>
  <changelog author="heming.zhao@suse.com" date="1740052800">- system with LVM on iSCSI hangs on shutdown because blk-availability.service is not enabled (bsc#1236788)
  * update lvm2.spec
  - remove blk-availability.service from %postun
  - add new Provides 'dont_stop_blk_availability_service'</changelog>
  <changelog author="heming.zhao@suse.com" date="1741003200">- Fixes the lvm2-testsuite failure to run on SUSE kernel (bsc#1238213)
  * Add upstream patch
    + tests-fix-wrong-pos-with-CONFIG_PRINTK_CALLER.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1741348800">- Fixes the lvm2-testsuite case fsadm-btrfs.sh (bsc#1238857)
  * Update SUSE special patch
    + fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1744718400">- LVM filter behaves unexpectedly for MPIO devices in SLES15SP5 (bsc#1216938)
  * set lvm.conf devices.multipath_wwids_file=""</changelog>
  <changelog author="glass.su@suse.com" date="1753876800">- L3: systemd fails to start lvmlockd with sanlock running (bsc#1246691)
  * Add upstream patches for sd_notify configure option
    + bug-1246691_01-configure.ac-build-lvmlockd-with-notify.patch
    + bug-1246691_02-configure-autoreconf.patch
    + bug-1246691_03-configure.ac-add-option-disable-enable-sd-notify.patch
    + bug-1246691_04-lvmlockd-utilize-SD_NOTIFY_SUPPORT.patch
    + bug-1246691_05-configure-autoreconf.patch
  * Update lvm2.spec
    + add pkgconfig(systemd) for lvmlockd build
    + enable configure option '--enable-sd-notify' for lvmlockd</changelog>
</package>
<package pkgid="db32df9a5bc32d8e1dc4abea64c47ace85aad4df3ae6b6be22f1b16ee706137b" name="lvm2" arch="src">
  <version epoch="0" ver="2.03.24" rel="150700.7.6.1"/>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6339)
  * 2.03.22:
  * Fix pv_major/pv_minor report field types so they are integers, not strings.
  * Add lvmdevices --delnotfound to delete entries for missing devices.
  * Always use cachepool name for metadata backup LV for lvconvert --repair.
  * Make metadata backup LVs read-only after pool's lvconvert --repair.
  * Handle 'lvextend --usepolicies' for pools for all activation variants.
  * Fix memleak in vgchange autoactivation setup.
  * Support conversion from thick to fully provisioned thin LV.
  * Cache/Thin-pool can use error and zero volumes for testing.
  * Individual thin volume can be cached, but cannot take snapshot.
  * internal support for handling error and zero target (for testing).
  * COW above trimmed maximal size is does not return error.
  * Add lvm.conf thin_restore and cache_restore settings.
  * Handle multiple mounts while resizing volume with a FS.
  * Handle leading/trailing spaces in sys_wwid and sys_serial used by deivce_id.
  * Fix failing -S|--select for non-reporting cmds if using LV info/status fields.
  * Allow snapshots of raid+integrity LV.
  * Fix multisegment RAID1 allocator to prevent using single disk for more legs.
  * 2.03.21:
  * Allow (write)cache over raid+integrity LV.
  * 2.03.20:
  * Fix segfault if using -S|--select with log/report_command_log=1 setting.
  * 2.03.19:
  * Do not reset SYSTEMD_READY variable in udev for PVs on MD and loop devices.
  * Ensure udev is processing origin LV before its thick snapshots LVs.
  * 2.03.18:
  * Fix warning for thin pool overprovisioning on lvextend.
  * Add support for writecache metadata_only and pause_writeback settings.
  * Fix missing error messages in lvmdbusd.
  * 2.03.17:
  * Add new options (--fs, --fsmode) for FS handling when resizing LVs (btrfs is unsupported).
  * Fix 'lvremove -S|--select LV' to not also remove its historical LV right away.
  * Fix lv_active field type to binary so --select and --binary applies properly.
  * Error out in lvm shell if using a cmd argument not supported in the shell.
  * Fix lvm shell's lastlog command to report previous pre-command failures.
  * Add --valuesonly option to lvmconfig to print only values without keys.
  * Add json_std output format for more JSON standard compliant version of output.
  * Fix many corner cases in device_id, including handling of S/N duplicates.
  * Fix various issues in lvmdbusd.
- device-mapper version upgrade to 1.02.196
  * Improve parallel creation of /dev/mapper/control device node.
  * Import previous ID_FS_* udev records in 13-dm-disk.rules for suspended DM dev.
  * Remove NAME="mapper/control" rule from 10-dm.rules to avoid udev warnings.
  * Improve 'dmsetup create' without given table line with new kernels.
  * Add DM_REPORT_GROUP_JSON_STD for more JSON standard compliant output format.
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
  <changelog author="heming.zhao@suse.com" date="1716724800">- Update lvm2 from LVM2.2.03.22 to LVM2.2.03.24
  * ** WHATS_NEW from 2.03.22 to 2.03.24 ***
  Version 2.03.24 - 16th May 2024
  ===============================
    Lvconvert supports VDO options for thin-pool with vdo conversion.
    Improve placement to .data.rel.ro and .rodata sections.
    Fix support for -y and -W when creating thinpool with vdo.
    Bettter support for runtime valgrind detection.
    Allow command interruption when communicating with dmeventd.
    Fix resize of VDO volume used for thin pool data volume.
    Use -Wl,-z,now and -Wl,--as-needed for compilation by default.
    Require 3.7 as minimal version for sanlock.
    Share code for closing opened desriptors on program startup.
    Fix memleak in lvmcache.
    Add configure --with-default-event-activation=ON setting.
    Fix return value from reporter function when hitting internal error.
    Skip checking of pools for lvremove and vgremove commands.
    VDO modprobes dm-vdo for 6.9 kernel and kvdo for older kernel version.
    Fix lvs reporting for VDO volumes with new upstream kernel driver.
    Don't import DM_UDEV_DISABLE_OTHER_RULES_FLAG in LVM rules, DM rules cover it.
    Fix table line generation for cache snapshots using cachevol.
    Enhance lvconvert support for external origins stacking.
    When swapping LV names also swap properties like hostname, time and data.
    Fix removal of stacked external origins.
    Lock filesystem when converting volume to read-only external origin.
    Support external origin between different thin-pool.
    Improve validation of acceptable volumes for external origins.
    Reduce amount of preloaded devices for complex device trees.
    Avoid logging problems from monitoring snapshots with inactive origins.
    Check for cache policy module presence in kernel's builtin modules file.
    Add configure --with-modulesdir to select kernel modules directory.
    Support creation of thin-pool with VDO use for its data volume.
  Version 2.03.23 - 21st November 2023
  ====================================
    Set the first lv_attr flag for raid integrity images to i or I.
    Add -A option for pvs and pvscan to show PVs outside devices file.
    Improve searched_devnames temp file usage to prevent redundant scanning.
    Change default search_for_devnames from auto to all.
    Add lvmdevices --refresh to search for missing PVIDs on all devices.
    Add comparison between old and new entries in lvmdevices --check.
    Fix device_id matching order - match non-devname first.
    Fix "lvconvert -m 0" when there is other than first in-sync leg.
    Use system.devices as default for dmeventd when dmeventd.devices is undefined.
    Accept WWIDs containing QEMU HARDDISK for device_id.
    Improve handling of non-standard WWID prefixes used for device_id.
    Configure automatically enables cmdlib for dmeventd and notify-dbus for dbus.
    Fix hint calculation for pools with zero or error segment.
    Configure supports --disable-shared to build only static binaries.
    Configure supports --without-{blkid|systemd|udev} for easier static build.
    Refresh device ids if the system changes.
    Fix pvmove when specifying raid components as moved LVs.
    Enhance error detection for lvm_import_vdo.
    Support PV lists with thin lvconvert.
    Fix support for lvm_import_vdo with SCSI VDO volumes.
    Fix locking issue leading to hanging concurrent vgchange --refresh.
    Recognize lvm.conf report/headings=2 for full column names in report headings.
    Add --headings none|abbrev|full cmd line option to set report headings type.
    Fix conversion to thin pool using lvmlockd.
    Fix conversion from thick into thin volume using lvmlockd.
    Require writable LV for conversion to vdo pool.
    Fix return value from lvconvert integrity remove.
    Preserve UUID for pool metadata spare.
    Preserve UUID for swapped pool metadata.
    Rewrite validation of device name entries used as device_id.
  * ** WHATS_NEW_DM from 1.02.196 to 1.02.198 ***
  Version 1.02.198 - 16th May 2024
  ================================
    Fix static only compilation of libdevmapper.a and dmsetup tool.
    Use better code for closing opened descriptors when starting dmeventd.
    Correct dmeventd -R for systemd environment.
    Restart of dmeventd -R checks pid file to detect running dmeventd first.
    Query with dmeventd -i quickly ends when there is no running dmeventd.
    Enhance dm_get_status_raid to handle mismatching status or reported legs.
    Create /dev/disk/by-label symlinks for DM devs that have crypto as next layer.
    Persist udev db for DM devs on cleanup used in initrd to rootfs transition.
    Process synthetic udev events other than 'add/change' as 'change' events.
    Increase DM_UDEV_RULES_VSN to 3 to indicate changed udev rules.
    Rename DM_NOSCAN to .DM_NOSCAN so it's not stored in udev db.
    Rename DM_SUSPENDED to .DM_SUSPENDED so it's not stored in udev db.
    Do not import DM_UDEV_DISABLE_OTHER_RULES_FLAG from db in 10-dm-disk.rules.
    Test DISK_RO after importing properties from db in 10-dm.rules.
    Also import ID_FS_TYPE in 13-dm-disk.rules from db if needed.
  Version 1.02.197 - 21st November 2023
  =====================================
    Fix invalid JSON report if using DM_REPORT_OUTPUT_MULTIPLE_TIMES and selection.
    Propagate ioctl errno from dm_task_run when creating new table line.
    Add support for group aliases in dmstats.
    Add support for exit-on file for dmeventd to reduce shutdown delays.
    Add configure option --with-dmeventd-exit-on-path to specify default path.
    Add dmsetup --headings none|abbrev|full to set report headings type.
    Add DM_REPORT_OUTPUT_FIELD_IDS_IN_HEADINGS to provide alternative headings.
- Drop patches that have been merged into upstream
  - 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  - 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  - 0003-lvconvert-fix-regresion-from-integrity-check.patch
  - 0004-gcc-cleanup-warnings.patch
  - 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  - 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  - 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  - 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  - 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  - 0010-lvmlockd-client-mutex-ordering.patch
  - 0011-filesystem-move-stat-after-open-check.patch
  - 0012-tests-check-for-writecache.patch
  - 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  - 0014-gcc-fix-warnings-for-x32-architecture.patch
  - 0015-gcc-warning-missing-braces-around-initializer.patch
  - 0016-test-improve-aux-teardown.patch
  - 0017-tests-aux-try-with-extra-sleep.patch
  - 0018-tests-aux-using-singl-lvmconf-call.patch
  - 0019-tests-missing-to-check-for-writecache-support.patch
  - 0020-tests-pvmove-large-disk-area.patch
  - 0021-tests-enforce-full-fs-check.patch
  - 0022-tests-update-for-work-in-fake-dev-environment.patch
  - 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  - 0024-tests-better-slowdown.patch
- Update patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch</changelog>
  <changelog author="glass.su@suse.com" date="1729771200">- add rpm dependency in spec file for aligning new DM udev rules (bsc#1225783 bsc#1229518 bsc#1232063)
  * update lvm2.spec for multipath-tools and udev</changelog>
  <changelog author="heming.zhao@suse.com" date="1740052800">- system with LVM on iSCSI hangs on shutdown because blk-availability.service is not enabled (bsc#1236788)
  * update lvm2.spec
  - remove blk-availability.service from %postun
  - add new Provides 'dont_stop_blk_availability_service'</changelog>
  <changelog author="heming.zhao@suse.com" date="1741003200">- Fixes the lvm2-testsuite failure to run on SUSE kernel (bsc#1238213)
  * Add upstream patch
    + tests-fix-wrong-pos-with-CONFIG_PRINTK_CALLER.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1741348800">- Fixes the lvm2-testsuite case fsadm-btrfs.sh (bsc#1238857)
  * Update SUSE special patch
    + fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1744718400">- LVM filter behaves unexpectedly for MPIO devices in SLES15SP5 (bsc#1216938)
  * set lvm.conf devices.multipath_wwids_file=""</changelog>
  <changelog author="glass.su@suse.com" date="1753876800">- L3: systemd fails to start lvmlockd with sanlock running (bsc#1246691)
  * Add upstream patches for sd_notify configure option
    + bug-1246691_01-configure.ac-build-lvmlockd-with-notify.patch
    + bug-1246691_02-configure-autoreconf.patch
    + bug-1246691_03-configure.ac-add-option-disable-enable-sd-notify.patch
    + bug-1246691_04-lvmlockd-utilize-SD_NOTIFY_SUPPORT.patch
    + bug-1246691_05-configure-autoreconf.patch
  * Update lvm2.spec
    + add pkgconfig(systemd) for lvmlockd build
    + enable configure option '--enable-sd-notify' for lvmlockd</changelog>
  <changelog author="glass.su@suse.com" date="1770724800">- L3: LVM_SUPPRESS_FD_WARNINGS is no longer effective (bsc#1257661)
  * Add upstream patch
    + bug-1257661-libdaemon-fix-suppressing-stray-fd-warnings.patch</changelog>
</package>
<package pkgid="6dd60ff8c3cc96fa4386f8c2be298e11c4b8dfd9da257469619dd7f9ea9a9453" name="lvm2" arch="x86_64">
  <version epoch="0" ver="2.03.24" rel="150700.7.6.1"/>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6339)
  * 2.03.22:
  * Fix pv_major/pv_minor report field types so they are integers, not strings.
  * Add lvmdevices --delnotfound to delete entries for missing devices.
  * Always use cachepool name for metadata backup LV for lvconvert --repair.
  * Make metadata backup LVs read-only after pool's lvconvert --repair.
  * Handle 'lvextend --usepolicies' for pools for all activation variants.
  * Fix memleak in vgchange autoactivation setup.
  * Support conversion from thick to fully provisioned thin LV.
  * Cache/Thin-pool can use error and zero volumes for testing.
  * Individual thin volume can be cached, but cannot take snapshot.
  * internal support for handling error and zero target (for testing).
  * COW above trimmed maximal size is does not return error.
  * Add lvm.conf thin_restore and cache_restore settings.
  * Handle multiple mounts while resizing volume with a FS.
  * Handle leading/trailing spaces in sys_wwid and sys_serial used by deivce_id.
  * Fix failing -S|--select for non-reporting cmds if using LV info/status fields.
  * Allow snapshots of raid+integrity LV.
  * Fix multisegment RAID1 allocator to prevent using single disk for more legs.
  * 2.03.21:
  * Allow (write)cache over raid+integrity LV.
  * 2.03.20:
  * Fix segfault if using -S|--select with log/report_command_log=1 setting.
  * 2.03.19:
  * Do not reset SYSTEMD_READY variable in udev for PVs on MD and loop devices.
  * Ensure udev is processing origin LV before its thick snapshots LVs.
  * 2.03.18:
  * Fix warning for thin pool overprovisioning on lvextend.
  * Add support for writecache metadata_only and pause_writeback settings.
  * Fix missing error messages in lvmdbusd.
  * 2.03.17:
  * Add new options (--fs, --fsmode) for FS handling when resizing LVs (btrfs is unsupported).
  * Fix 'lvremove -S|--select LV' to not also remove its historical LV right away.
  * Fix lv_active field type to binary so --select and --binary applies properly.
  * Error out in lvm shell if using a cmd argument not supported in the shell.
  * Fix lvm shell's lastlog command to report previous pre-command failures.
  * Add --valuesonly option to lvmconfig to print only values without keys.
  * Add json_std output format for more JSON standard compliant version of output.
  * Fix many corner cases in device_id, including handling of S/N duplicates.
  * Fix various issues in lvmdbusd.
- device-mapper version upgrade to 1.02.196
  * Improve parallel creation of /dev/mapper/control device node.
  * Import previous ID_FS_* udev records in 13-dm-disk.rules for suspended DM dev.
  * Remove NAME="mapper/control" rule from 10-dm.rules to avoid udev warnings.
  * Improve 'dmsetup create' without given table line with new kernels.
  * Add DM_REPORT_GROUP_JSON_STD for more JSON standard compliant output format.
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
  <changelog author="heming.zhao@suse.com" date="1716724800">- Update lvm2 from LVM2.2.03.22 to LVM2.2.03.24
  * ** WHATS_NEW from 2.03.22 to 2.03.24 ***
  Version 2.03.24 - 16th May 2024
  ===============================
    Lvconvert supports VDO options for thin-pool with vdo conversion.
    Improve placement to .data.rel.ro and .rodata sections.
    Fix support for -y and -W when creating thinpool with vdo.
    Bettter support for runtime valgrind detection.
    Allow command interruption when communicating with dmeventd.
    Fix resize of VDO volume used for thin pool data volume.
    Use -Wl,-z,now and -Wl,--as-needed for compilation by default.
    Require 3.7 as minimal version for sanlock.
    Share code for closing opened desriptors on program startup.
    Fix memleak in lvmcache.
    Add configure --with-default-event-activation=ON setting.
    Fix return value from reporter function when hitting internal error.
    Skip checking of pools for lvremove and vgremove commands.
    VDO modprobes dm-vdo for 6.9 kernel and kvdo for older kernel version.
    Fix lvs reporting for VDO volumes with new upstream kernel driver.
    Don't import DM_UDEV_DISABLE_OTHER_RULES_FLAG in LVM rules, DM rules cover it.
    Fix table line generation for cache snapshots using cachevol.
    Enhance lvconvert support for external origins stacking.
    When swapping LV names also swap properties like hostname, time and data.
    Fix removal of stacked external origins.
    Lock filesystem when converting volume to read-only external origin.
    Support external origin between different thin-pool.
    Improve validation of acceptable volumes for external origins.
    Reduce amount of preloaded devices for complex device trees.
    Avoid logging problems from monitoring snapshots with inactive origins.
    Check for cache policy module presence in kernel's builtin modules file.
    Add configure --with-modulesdir to select kernel modules directory.
    Support creation of thin-pool with VDO use for its data volume.
  Version 2.03.23 - 21st November 2023
  ====================================
    Set the first lv_attr flag for raid integrity images to i or I.
    Add -A option for pvs and pvscan to show PVs outside devices file.
    Improve searched_devnames temp file usage to prevent redundant scanning.
    Change default search_for_devnames from auto to all.
    Add lvmdevices --refresh to search for missing PVIDs on all devices.
    Add comparison between old and new entries in lvmdevices --check.
    Fix device_id matching order - match non-devname first.
    Fix "lvconvert -m 0" when there is other than first in-sync leg.
    Use system.devices as default for dmeventd when dmeventd.devices is undefined.
    Accept WWIDs containing QEMU HARDDISK for device_id.
    Improve handling of non-standard WWID prefixes used for device_id.
    Configure automatically enables cmdlib for dmeventd and notify-dbus for dbus.
    Fix hint calculation for pools with zero or error segment.
    Configure supports --disable-shared to build only static binaries.
    Configure supports --without-{blkid|systemd|udev} for easier static build.
    Refresh device ids if the system changes.
    Fix pvmove when specifying raid components as moved LVs.
    Enhance error detection for lvm_import_vdo.
    Support PV lists with thin lvconvert.
    Fix support for lvm_import_vdo with SCSI VDO volumes.
    Fix locking issue leading to hanging concurrent vgchange --refresh.
    Recognize lvm.conf report/headings=2 for full column names in report headings.
    Add --headings none|abbrev|full cmd line option to set report headings type.
    Fix conversion to thin pool using lvmlockd.
    Fix conversion from thick into thin volume using lvmlockd.
    Require writable LV for conversion to vdo pool.
    Fix return value from lvconvert integrity remove.
    Preserve UUID for pool metadata spare.
    Preserve UUID for swapped pool metadata.
    Rewrite validation of device name entries used as device_id.
  * ** WHATS_NEW_DM from 1.02.196 to 1.02.198 ***
  Version 1.02.198 - 16th May 2024
  ================================
    Fix static only compilation of libdevmapper.a and dmsetup tool.
    Use better code for closing opened descriptors when starting dmeventd.
    Correct dmeventd -R for systemd environment.
    Restart of dmeventd -R checks pid file to detect running dmeventd first.
    Query with dmeventd -i quickly ends when there is no running dmeventd.
    Enhance dm_get_status_raid to handle mismatching status or reported legs.
    Create /dev/disk/by-label symlinks for DM devs that have crypto as next layer.
    Persist udev db for DM devs on cleanup used in initrd to rootfs transition.
    Process synthetic udev events other than 'add/change' as 'change' events.
    Increase DM_UDEV_RULES_VSN to 3 to indicate changed udev rules.
    Rename DM_NOSCAN to .DM_NOSCAN so it's not stored in udev db.
    Rename DM_SUSPENDED to .DM_SUSPENDED so it's not stored in udev db.
    Do not import DM_UDEV_DISABLE_OTHER_RULES_FLAG from db in 10-dm-disk.rules.
    Test DISK_RO after importing properties from db in 10-dm.rules.
    Also import ID_FS_TYPE in 13-dm-disk.rules from db if needed.
  Version 1.02.197 - 21st November 2023
  =====================================
    Fix invalid JSON report if using DM_REPORT_OUTPUT_MULTIPLE_TIMES and selection.
    Propagate ioctl errno from dm_task_run when creating new table line.
    Add support for group aliases in dmstats.
    Add support for exit-on file for dmeventd to reduce shutdown delays.
    Add configure option --with-dmeventd-exit-on-path to specify default path.
    Add dmsetup --headings none|abbrev|full to set report headings type.
    Add DM_REPORT_OUTPUT_FIELD_IDS_IN_HEADINGS to provide alternative headings.
- Drop patches that have been merged into upstream
  - 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  - 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  - 0003-lvconvert-fix-regresion-from-integrity-check.patch
  - 0004-gcc-cleanup-warnings.patch
  - 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  - 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  - 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  - 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  - 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  - 0010-lvmlockd-client-mutex-ordering.patch
  - 0011-filesystem-move-stat-after-open-check.patch
  - 0012-tests-check-for-writecache.patch
  - 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  - 0014-gcc-fix-warnings-for-x32-architecture.patch
  - 0015-gcc-warning-missing-braces-around-initializer.patch
  - 0016-test-improve-aux-teardown.patch
  - 0017-tests-aux-try-with-extra-sleep.patch
  - 0018-tests-aux-using-singl-lvmconf-call.patch
  - 0019-tests-missing-to-check-for-writecache-support.patch
  - 0020-tests-pvmove-large-disk-area.patch
  - 0021-tests-enforce-full-fs-check.patch
  - 0022-tests-update-for-work-in-fake-dev-environment.patch
  - 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  - 0024-tests-better-slowdown.patch
- Update patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch</changelog>
  <changelog author="glass.su@suse.com" date="1729771200">- add rpm dependency in spec file for aligning new DM udev rules (bsc#1225783 bsc#1229518 bsc#1232063)
  * update lvm2.spec for multipath-tools and udev</changelog>
  <changelog author="heming.zhao@suse.com" date="1740052800">- system with LVM on iSCSI hangs on shutdown because blk-availability.service is not enabled (bsc#1236788)
  * update lvm2.spec
  - remove blk-availability.service from %postun
  - add new Provides 'dont_stop_blk_availability_service'</changelog>
  <changelog author="heming.zhao@suse.com" date="1741003200">- Fixes the lvm2-testsuite failure to run on SUSE kernel (bsc#1238213)
  * Add upstream patch
    + tests-fix-wrong-pos-with-CONFIG_PRINTK_CALLER.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1741348800">- Fixes the lvm2-testsuite case fsadm-btrfs.sh (bsc#1238857)
  * Update SUSE special patch
    + fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1744718400">- LVM filter behaves unexpectedly for MPIO devices in SLES15SP5 (bsc#1216938)
  * set lvm.conf devices.multipath_wwids_file=""</changelog>
  <changelog author="glass.su@suse.com" date="1753876800">- L3: systemd fails to start lvmlockd with sanlock running (bsc#1246691)
  * Add upstream patches for sd_notify configure option
    + bug-1246691_01-configure.ac-build-lvmlockd-with-notify.patch
    + bug-1246691_02-configure-autoreconf.patch
    + bug-1246691_03-configure.ac-add-option-disable-enable-sd-notify.patch
    + bug-1246691_04-lvmlockd-utilize-SD_NOTIFY_SUPPORT.patch
    + bug-1246691_05-configure-autoreconf.patch
  * Update lvm2.spec
    + add pkgconfig(systemd) for lvmlockd build
    + enable configure option '--enable-sd-notify' for lvmlockd</changelog>
  <changelog author="glass.su@suse.com" date="1770724800">- L3: LVM_SUPPRESS_FD_WARNINGS is no longer effective (bsc#1257661)
  * Add upstream patch
    + bug-1257661-libdaemon-fix-suppressing-stray-fd-warnings.patch</changelog>
</package>
<package pkgid="1d81f0d9b63b0ab8d20133190faabbff2ae0dc761cd9a895a137beb8e2709de0" name="lvm2-devel" arch="x86_64">
  <version epoch="0" ver="2.03.24" rel="150700.7.3.3"/>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6339)
  * 2.03.22:
  * Fix pv_major/pv_minor report field types so they are integers, not strings.
  * Add lvmdevices --delnotfound to delete entries for missing devices.
  * Always use cachepool name for metadata backup LV for lvconvert --repair.
  * Make metadata backup LVs read-only after pool's lvconvert --repair.
  * Handle 'lvextend --usepolicies' for pools for all activation variants.
  * Fix memleak in vgchange autoactivation setup.
  * Support conversion from thick to fully provisioned thin LV.
  * Cache/Thin-pool can use error and zero volumes for testing.
  * Individual thin volume can be cached, but cannot take snapshot.
  * internal support for handling error and zero target (for testing).
  * COW above trimmed maximal size is does not return error.
  * Add lvm.conf thin_restore and cache_restore settings.
  * Handle multiple mounts while resizing volume with a FS.
  * Handle leading/trailing spaces in sys_wwid and sys_serial used by deivce_id.
  * Fix failing -S|--select for non-reporting cmds if using LV info/status fields.
  * Allow snapshots of raid+integrity LV.
  * Fix multisegment RAID1 allocator to prevent using single disk for more legs.
  * 2.03.21:
  * Allow (write)cache over raid+integrity LV.
  * 2.03.20:
  * Fix segfault if using -S|--select with log/report_command_log=1 setting.
  * 2.03.19:
  * Do not reset SYSTEMD_READY variable in udev for PVs on MD and loop devices.
  * Ensure udev is processing origin LV before its thick snapshots LVs.
  * 2.03.18:
  * Fix warning for thin pool overprovisioning on lvextend.
  * Add support for writecache metadata_only and pause_writeback settings.
  * Fix missing error messages in lvmdbusd.
  * 2.03.17:
  * Add new options (--fs, --fsmode) for FS handling when resizing LVs (btrfs is unsupported).
  * Fix 'lvremove -S|--select LV' to not also remove its historical LV right away.
  * Fix lv_active field type to binary so --select and --binary applies properly.
  * Error out in lvm shell if using a cmd argument not supported in the shell.
  * Fix lvm shell's lastlog command to report previous pre-command failures.
  * Add --valuesonly option to lvmconfig to print only values without keys.
  * Add json_std output format for more JSON standard compliant version of output.
  * Fix many corner cases in device_id, including handling of S/N duplicates.
  * Fix various issues in lvmdbusd.
- device-mapper version upgrade to 1.02.196
  * Improve parallel creation of /dev/mapper/control device node.
  * Import previous ID_FS_* udev records in 13-dm-disk.rules for suspended DM dev.
  * Remove NAME="mapper/control" rule from 10-dm.rules to avoid udev warnings.
  * Improve 'dmsetup create' without given table line with new kernels.
  * Add DM_REPORT_GROUP_JSON_STD for more JSON standard compliant output format.
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
  <changelog author="heming.zhao@suse.com" date="1716724800">- Update lvm2 from LVM2.2.03.22 to LVM2.2.03.24
  * ** WHATS_NEW from 2.03.22 to 2.03.24 ***
  Version 2.03.24 - 16th May 2024
  ===============================
    Lvconvert supports VDO options for thin-pool with vdo conversion.
    Improve placement to .data.rel.ro and .rodata sections.
    Fix support for -y and -W when creating thinpool with vdo.
    Bettter support for runtime valgrind detection.
    Allow command interruption when communicating with dmeventd.
    Fix resize of VDO volume used for thin pool data volume.
    Use -Wl,-z,now and -Wl,--as-needed for compilation by default.
    Require 3.7 as minimal version for sanlock.
    Share code for closing opened desriptors on program startup.
    Fix memleak in lvmcache.
    Add configure --with-default-event-activation=ON setting.
    Fix return value from reporter function when hitting internal error.
    Skip checking of pools for lvremove and vgremove commands.
    VDO modprobes dm-vdo for 6.9 kernel and kvdo for older kernel version.
    Fix lvs reporting for VDO volumes with new upstream kernel driver.
    Don't import DM_UDEV_DISABLE_OTHER_RULES_FLAG in LVM rules, DM rules cover it.
    Fix table line generation for cache snapshots using cachevol.
    Enhance lvconvert support for external origins stacking.
    When swapping LV names also swap properties like hostname, time and data.
    Fix removal of stacked external origins.
    Lock filesystem when converting volume to read-only external origin.
    Support external origin between different thin-pool.
    Improve validation of acceptable volumes for external origins.
    Reduce amount of preloaded devices for complex device trees.
    Avoid logging problems from monitoring snapshots with inactive origins.
    Check for cache policy module presence in kernel's builtin modules file.
    Add configure --with-modulesdir to select kernel modules directory.
    Support creation of thin-pool with VDO use for its data volume.
  Version 2.03.23 - 21st November 2023
  ====================================
    Set the first lv_attr flag for raid integrity images to i or I.
    Add -A option for pvs and pvscan to show PVs outside devices file.
    Improve searched_devnames temp file usage to prevent redundant scanning.
    Change default search_for_devnames from auto to all.
    Add lvmdevices --refresh to search for missing PVIDs on all devices.
    Add comparison between old and new entries in lvmdevices --check.
    Fix device_id matching order - match non-devname first.
    Fix "lvconvert -m 0" when there is other than first in-sync leg.
    Use system.devices as default for dmeventd when dmeventd.devices is undefined.
    Accept WWIDs containing QEMU HARDDISK for device_id.
    Improve handling of non-standard WWID prefixes used for device_id.
    Configure automatically enables cmdlib for dmeventd and notify-dbus for dbus.
    Fix hint calculation for pools with zero or error segment.
    Configure supports --disable-shared to build only static binaries.
    Configure supports --without-{blkid|systemd|udev} for easier static build.
    Refresh device ids if the system changes.
    Fix pvmove when specifying raid components as moved LVs.
    Enhance error detection for lvm_import_vdo.
    Support PV lists with thin lvconvert.
    Fix support for lvm_import_vdo with SCSI VDO volumes.
    Fix locking issue leading to hanging concurrent vgchange --refresh.
    Recognize lvm.conf report/headings=2 for full column names in report headings.
    Add --headings none|abbrev|full cmd line option to set report headings type.
    Fix conversion to thin pool using lvmlockd.
    Fix conversion from thick into thin volume using lvmlockd.
    Require writable LV for conversion to vdo pool.
    Fix return value from lvconvert integrity remove.
    Preserve UUID for pool metadata spare.
    Preserve UUID for swapped pool metadata.
    Rewrite validation of device name entries used as device_id.
  * ** WHATS_NEW_DM from 1.02.196 to 1.02.198 ***
  Version 1.02.198 - 16th May 2024
  ================================
    Fix static only compilation of libdevmapper.a and dmsetup tool.
    Use better code for closing opened descriptors when starting dmeventd.
    Correct dmeventd -R for systemd environment.
    Restart of dmeventd -R checks pid file to detect running dmeventd first.
    Query with dmeventd -i quickly ends when there is no running dmeventd.
    Enhance dm_get_status_raid to handle mismatching status or reported legs.
    Create /dev/disk/by-label symlinks for DM devs that have crypto as next layer.
    Persist udev db for DM devs on cleanup used in initrd to rootfs transition.
    Process synthetic udev events other than 'add/change' as 'change' events.
    Increase DM_UDEV_RULES_VSN to 3 to indicate changed udev rules.
    Rename DM_NOSCAN to .DM_NOSCAN so it's not stored in udev db.
    Rename DM_SUSPENDED to .DM_SUSPENDED so it's not stored in udev db.
    Do not import DM_UDEV_DISABLE_OTHER_RULES_FLAG from db in 10-dm-disk.rules.
    Test DISK_RO after importing properties from db in 10-dm.rules.
    Also import ID_FS_TYPE in 13-dm-disk.rules from db if needed.
  Version 1.02.197 - 21st November 2023
  =====================================
    Fix invalid JSON report if using DM_REPORT_OUTPUT_MULTIPLE_TIMES and selection.
    Propagate ioctl errno from dm_task_run when creating new table line.
    Add support for group aliases in dmstats.
    Add support for exit-on file for dmeventd to reduce shutdown delays.
    Add configure option --with-dmeventd-exit-on-path to specify default path.
    Add dmsetup --headings none|abbrev|full to set report headings type.
    Add DM_REPORT_OUTPUT_FIELD_IDS_IN_HEADINGS to provide alternative headings.
- Drop patches that have been merged into upstream
  - 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  - 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  - 0003-lvconvert-fix-regresion-from-integrity-check.patch
  - 0004-gcc-cleanup-warnings.patch
  - 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  - 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  - 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  - 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  - 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  - 0010-lvmlockd-client-mutex-ordering.patch
  - 0011-filesystem-move-stat-after-open-check.patch
  - 0012-tests-check-for-writecache.patch
  - 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  - 0014-gcc-fix-warnings-for-x32-architecture.patch
  - 0015-gcc-warning-missing-braces-around-initializer.patch
  - 0016-test-improve-aux-teardown.patch
  - 0017-tests-aux-try-with-extra-sleep.patch
  - 0018-tests-aux-using-singl-lvmconf-call.patch
  - 0019-tests-missing-to-check-for-writecache-support.patch
  - 0020-tests-pvmove-large-disk-area.patch
  - 0021-tests-enforce-full-fs-check.patch
  - 0022-tests-update-for-work-in-fake-dev-environment.patch
  - 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  - 0024-tests-better-slowdown.patch
- Update patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch</changelog>
  <changelog author="glass.su@suse.com" date="1729771200">- add rpm dependency in spec file for aligning new DM udev rules (bsc#1225783 bsc#1229518 bsc#1232063)
  * update lvm2.spec for multipath-tools and udev</changelog>
  <changelog author="heming.zhao@suse.com" date="1740052800">- system with LVM on iSCSI hangs on shutdown because blk-availability.service is not enabled (bsc#1236788)
  * update lvm2.spec
  - remove blk-availability.service from %postun
  - add new Provides 'dont_stop_blk_availability_service'</changelog>
  <changelog author="heming.zhao@suse.com" date="1741003200">- Fixes the lvm2-testsuite failure to run on SUSE kernel (bsc#1238213)
  * Add upstream patch
    + tests-fix-wrong-pos-with-CONFIG_PRINTK_CALLER.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1741348800">- Fixes the lvm2-testsuite case fsadm-btrfs.sh (bsc#1238857)
  * Update SUSE special patch
    + fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1744718400">- LVM filter behaves unexpectedly for MPIO devices in SLES15SP5 (bsc#1216938)
  * set lvm.conf devices.multipath_wwids_file=""</changelog>
  <changelog author="glass.su@suse.com" date="1753876800">- L3: systemd fails to start lvmlockd with sanlock running (bsc#1246691)
  * Add upstream patches for sd_notify configure option
    + bug-1246691_01-configure.ac-build-lvmlockd-with-notify.patch
    + bug-1246691_02-configure-autoreconf.patch
    + bug-1246691_03-configure.ac-add-option-disable-enable-sd-notify.patch
    + bug-1246691_04-lvmlockd-utilize-SD_NOTIFY_SUPPORT.patch
    + bug-1246691_05-configure-autoreconf.patch
  * Update lvm2.spec
    + add pkgconfig(systemd) for lvmlockd build
    + enable configure option '--enable-sd-notify' for lvmlockd</changelog>
</package>
<package pkgid="56728f0bd4a48628f3305167a9a8b4b123d70227e8e0e988682d78467194db53" name="lvm2-devel" arch="x86_64">
  <version epoch="0" ver="2.03.24" rel="150700.7.6.1"/>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6339)
  * 2.03.22:
  * Fix pv_major/pv_minor report field types so they are integers, not strings.
  * Add lvmdevices --delnotfound to delete entries for missing devices.
  * Always use cachepool name for metadata backup LV for lvconvert --repair.
  * Make metadata backup LVs read-only after pool's lvconvert --repair.
  * Handle 'lvextend --usepolicies' for pools for all activation variants.
  * Fix memleak in vgchange autoactivation setup.
  * Support conversion from thick to fully provisioned thin LV.
  * Cache/Thin-pool can use error and zero volumes for testing.
  * Individual thin volume can be cached, but cannot take snapshot.
  * internal support for handling error and zero target (for testing).
  * COW above trimmed maximal size is does not return error.
  * Add lvm.conf thin_restore and cache_restore settings.
  * Handle multiple mounts while resizing volume with a FS.
  * Handle leading/trailing spaces in sys_wwid and sys_serial used by deivce_id.
  * Fix failing -S|--select for non-reporting cmds if using LV info/status fields.
  * Allow snapshots of raid+integrity LV.
  * Fix multisegment RAID1 allocator to prevent using single disk for more legs.
  * 2.03.21:
  * Allow (write)cache over raid+integrity LV.
  * 2.03.20:
  * Fix segfault if using -S|--select with log/report_command_log=1 setting.
  * 2.03.19:
  * Do not reset SYSTEMD_READY variable in udev for PVs on MD and loop devices.
  * Ensure udev is processing origin LV before its thick snapshots LVs.
  * 2.03.18:
  * Fix warning for thin pool overprovisioning on lvextend.
  * Add support for writecache metadata_only and pause_writeback settings.
  * Fix missing error messages in lvmdbusd.
  * 2.03.17:
  * Add new options (--fs, --fsmode) for FS handling when resizing LVs (btrfs is unsupported).
  * Fix 'lvremove -S|--select LV' to not also remove its historical LV right away.
  * Fix lv_active field type to binary so --select and --binary applies properly.
  * Error out in lvm shell if using a cmd argument not supported in the shell.
  * Fix lvm shell's lastlog command to report previous pre-command failures.
  * Add --valuesonly option to lvmconfig to print only values without keys.
  * Add json_std output format for more JSON standard compliant version of output.
  * Fix many corner cases in device_id, including handling of S/N duplicates.
  * Fix various issues in lvmdbusd.
- device-mapper version upgrade to 1.02.196
  * Improve parallel creation of /dev/mapper/control device node.
  * Import previous ID_FS_* udev records in 13-dm-disk.rules for suspended DM dev.
  * Remove NAME="mapper/control" rule from 10-dm.rules to avoid udev warnings.
  * Improve 'dmsetup create' without given table line with new kernels.
  * Add DM_REPORT_GROUP_JSON_STD for more JSON standard compliant output format.
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
  <changelog author="heming.zhao@suse.com" date="1716724800">- Update lvm2 from LVM2.2.03.22 to LVM2.2.03.24
  * ** WHATS_NEW from 2.03.22 to 2.03.24 ***
  Version 2.03.24 - 16th May 2024
  ===============================
    Lvconvert supports VDO options for thin-pool with vdo conversion.
    Improve placement to .data.rel.ro and .rodata sections.
    Fix support for -y and -W when creating thinpool with vdo.
    Bettter support for runtime valgrind detection.
    Allow command interruption when communicating with dmeventd.
    Fix resize of VDO volume used for thin pool data volume.
    Use -Wl,-z,now and -Wl,--as-needed for compilation by default.
    Require 3.7 as minimal version for sanlock.
    Share code for closing opened desriptors on program startup.
    Fix memleak in lvmcache.
    Add configure --with-default-event-activation=ON setting.
    Fix return value from reporter function when hitting internal error.
    Skip checking of pools for lvremove and vgremove commands.
    VDO modprobes dm-vdo for 6.9 kernel and kvdo for older kernel version.
    Fix lvs reporting for VDO volumes with new upstream kernel driver.
    Don't import DM_UDEV_DISABLE_OTHER_RULES_FLAG in LVM rules, DM rules cover it.
    Fix table line generation for cache snapshots using cachevol.
    Enhance lvconvert support for external origins stacking.
    When swapping LV names also swap properties like hostname, time and data.
    Fix removal of stacked external origins.
    Lock filesystem when converting volume to read-only external origin.
    Support external origin between different thin-pool.
    Improve validation of acceptable volumes for external origins.
    Reduce amount of preloaded devices for complex device trees.
    Avoid logging problems from monitoring snapshots with inactive origins.
    Check for cache policy module presence in kernel's builtin modules file.
    Add configure --with-modulesdir to select kernel modules directory.
    Support creation of thin-pool with VDO use for its data volume.
  Version 2.03.23 - 21st November 2023
  ====================================
    Set the first lv_attr flag for raid integrity images to i or I.
    Add -A option for pvs and pvscan to show PVs outside devices file.
    Improve searched_devnames temp file usage to prevent redundant scanning.
    Change default search_for_devnames from auto to all.
    Add lvmdevices --refresh to search for missing PVIDs on all devices.
    Add comparison between old and new entries in lvmdevices --check.
    Fix device_id matching order - match non-devname first.
    Fix "lvconvert -m 0" when there is other than first in-sync leg.
    Use system.devices as default for dmeventd when dmeventd.devices is undefined.
    Accept WWIDs containing QEMU HARDDISK for device_id.
    Improve handling of non-standard WWID prefixes used for device_id.
    Configure automatically enables cmdlib for dmeventd and notify-dbus for dbus.
    Fix hint calculation for pools with zero or error segment.
    Configure supports --disable-shared to build only static binaries.
    Configure supports --without-{blkid|systemd|udev} for easier static build.
    Refresh device ids if the system changes.
    Fix pvmove when specifying raid components as moved LVs.
    Enhance error detection for lvm_import_vdo.
    Support PV lists with thin lvconvert.
    Fix support for lvm_import_vdo with SCSI VDO volumes.
    Fix locking issue leading to hanging concurrent vgchange --refresh.
    Recognize lvm.conf report/headings=2 for full column names in report headings.
    Add --headings none|abbrev|full cmd line option to set report headings type.
    Fix conversion to thin pool using lvmlockd.
    Fix conversion from thick into thin volume using lvmlockd.
    Require writable LV for conversion to vdo pool.
    Fix return value from lvconvert integrity remove.
    Preserve UUID for pool metadata spare.
    Preserve UUID for swapped pool metadata.
    Rewrite validation of device name entries used as device_id.
  * ** WHATS_NEW_DM from 1.02.196 to 1.02.198 ***
  Version 1.02.198 - 16th May 2024
  ================================
    Fix static only compilation of libdevmapper.a and dmsetup tool.
    Use better code for closing opened descriptors when starting dmeventd.
    Correct dmeventd -R for systemd environment.
    Restart of dmeventd -R checks pid file to detect running dmeventd first.
    Query with dmeventd -i quickly ends when there is no running dmeventd.
    Enhance dm_get_status_raid to handle mismatching status or reported legs.
    Create /dev/disk/by-label symlinks for DM devs that have crypto as next layer.
    Persist udev db for DM devs on cleanup used in initrd to rootfs transition.
    Process synthetic udev events other than 'add/change' as 'change' events.
    Increase DM_UDEV_RULES_VSN to 3 to indicate changed udev rules.
    Rename DM_NOSCAN to .DM_NOSCAN so it's not stored in udev db.
    Rename DM_SUSPENDED to .DM_SUSPENDED so it's not stored in udev db.
    Do not import DM_UDEV_DISABLE_OTHER_RULES_FLAG from db in 10-dm-disk.rules.
    Test DISK_RO after importing properties from db in 10-dm.rules.
    Also import ID_FS_TYPE in 13-dm-disk.rules from db if needed.
  Version 1.02.197 - 21st November 2023
  =====================================
    Fix invalid JSON report if using DM_REPORT_OUTPUT_MULTIPLE_TIMES and selection.
    Propagate ioctl errno from dm_task_run when creating new table line.
    Add support for group aliases in dmstats.
    Add support for exit-on file for dmeventd to reduce shutdown delays.
    Add configure option --with-dmeventd-exit-on-path to specify default path.
    Add dmsetup --headings none|abbrev|full to set report headings type.
    Add DM_REPORT_OUTPUT_FIELD_IDS_IN_HEADINGS to provide alternative headings.
- Drop patches that have been merged into upstream
  - 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  - 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  - 0003-lvconvert-fix-regresion-from-integrity-check.patch
  - 0004-gcc-cleanup-warnings.patch
  - 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  - 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  - 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  - 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  - 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  - 0010-lvmlockd-client-mutex-ordering.patch
  - 0011-filesystem-move-stat-after-open-check.patch
  - 0012-tests-check-for-writecache.patch
  - 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  - 0014-gcc-fix-warnings-for-x32-architecture.patch
  - 0015-gcc-warning-missing-braces-around-initializer.patch
  - 0016-test-improve-aux-teardown.patch
  - 0017-tests-aux-try-with-extra-sleep.patch
  - 0018-tests-aux-using-singl-lvmconf-call.patch
  - 0019-tests-missing-to-check-for-writecache-support.patch
  - 0020-tests-pvmove-large-disk-area.patch
  - 0021-tests-enforce-full-fs-check.patch
  - 0022-tests-update-for-work-in-fake-dev-environment.patch
  - 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  - 0024-tests-better-slowdown.patch
- Update patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch</changelog>
  <changelog author="glass.su@suse.com" date="1729771200">- add rpm dependency in spec file for aligning new DM udev rules (bsc#1225783 bsc#1229518 bsc#1232063)
  * update lvm2.spec for multipath-tools and udev</changelog>
  <changelog author="heming.zhao@suse.com" date="1740052800">- system with LVM on iSCSI hangs on shutdown because blk-availability.service is not enabled (bsc#1236788)
  * update lvm2.spec
  - remove blk-availability.service from %postun
  - add new Provides 'dont_stop_blk_availability_service'</changelog>
  <changelog author="heming.zhao@suse.com" date="1741003200">- Fixes the lvm2-testsuite failure to run on SUSE kernel (bsc#1238213)
  * Add upstream patch
    + tests-fix-wrong-pos-with-CONFIG_PRINTK_CALLER.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1741348800">- Fixes the lvm2-testsuite case fsadm-btrfs.sh (bsc#1238857)
  * Update SUSE special patch
    + fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1744718400">- LVM filter behaves unexpectedly for MPIO devices in SLES15SP5 (bsc#1216938)
  * set lvm.conf devices.multipath_wwids_file=""</changelog>
  <changelog author="glass.su@suse.com" date="1753876800">- L3: systemd fails to start lvmlockd with sanlock running (bsc#1246691)
  * Add upstream patches for sd_notify configure option
    + bug-1246691_01-configure.ac-build-lvmlockd-with-notify.patch
    + bug-1246691_02-configure-autoreconf.patch
    + bug-1246691_03-configure.ac-add-option-disable-enable-sd-notify.patch
    + bug-1246691_04-lvmlockd-utilize-SD_NOTIFY_SUPPORT.patch
    + bug-1246691_05-configure-autoreconf.patch
  * Update lvm2.spec
    + add pkgconfig(systemd) for lvmlockd build
    + enable configure option '--enable-sd-notify' for lvmlockd</changelog>
  <changelog author="glass.su@suse.com" date="1770724800">- L3: LVM_SUPPRESS_FD_WARNINGS is no longer effective (bsc#1257661)
  * Add upstream patch
    + bug-1257661-libdaemon-fix-suppressing-stray-fd-warnings.patch</changelog>
</package>
<package pkgid="5e60bcbd400515b44766629aeda7f51360555e1c6ba1a6c957422dca2a3a5631" name="lvm2-device-mapper" arch="src">
  <version epoch="0" ver="2.03.24" rel="150700.7.3.3"/>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6339)
  * 2.03.22:
  * Fix pv_major/pv_minor report field types so they are integers, not strings.
  * Add lvmdevices --delnotfound to delete entries for missing devices.
  * Always use cachepool name for metadata backup LV for lvconvert --repair.
  * Make metadata backup LVs read-only after pool's lvconvert --repair.
  * Handle 'lvextend --usepolicies' for pools for all activation variants.
  * Fix memleak in vgchange autoactivation setup.
  * Support conversion from thick to fully provisioned thin LV.
  * Cache/Thin-pool can use error and zero volumes for testing.
  * Individual thin volume can be cached, but cannot take snapshot.
  * internal support for handling error and zero target (for testing).
  * COW above trimmed maximal size is does not return error.
  * Add lvm.conf thin_restore and cache_restore settings.
  * Handle multiple mounts while resizing volume with a FS.
  * Handle leading/trailing spaces in sys_wwid and sys_serial used by deivce_id.
  * Fix failing -S|--select for non-reporting cmds if using LV info/status fields.
  * Allow snapshots of raid+integrity LV.
  * Fix multisegment RAID1 allocator to prevent using single disk for more legs.
  * 2.03.21:
  * Allow (write)cache over raid+integrity LV.
  * 2.03.20:
  * Fix segfault if using -S|--select with log/report_command_log=1 setting.
  * 2.03.19:
  * Do not reset SYSTEMD_READY variable in udev for PVs on MD and loop devices.
  * Ensure udev is processing origin LV before its thick snapshots LVs.
  * 2.03.18:
  * Fix warning for thin pool overprovisioning on lvextend.
  * Add support for writecache metadata_only and pause_writeback settings.
  * Fix missing error messages in lvmdbusd.
  * 2.03.17:
  * Add new options (--fs, --fsmode) for FS handling when resizing LVs (btrfs is unsupported).
  * Fix 'lvremove -S|--select LV' to not also remove its historical LV right away.
  * Fix lv_active field type to binary so --select and --binary applies properly.
  * Error out in lvm shell if using a cmd argument not supported in the shell.
  * Fix lvm shell's lastlog command to report previous pre-command failures.
  * Add --valuesonly option to lvmconfig to print only values without keys.
  * Add json_std output format for more JSON standard compliant version of output.
  * Fix many corner cases in device_id, including handling of S/N duplicates.
  * Fix various issues in lvmdbusd.
- device-mapper version upgrade to 1.02.196
  * Improve parallel creation of /dev/mapper/control device node.
  * Import previous ID_FS_* udev records in 13-dm-disk.rules for suspended DM dev.
  * Remove NAME="mapper/control" rule from 10-dm.rules to avoid udev warnings.
  * Improve 'dmsetup create' without given table line with new kernels.
  * Add DM_REPORT_GROUP_JSON_STD for more JSON standard compliant output format.
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
  <changelog author="heming.zhao@suse.com" date="1716724800">- Update lvm2 from LVM2.2.03.22 to LVM2.2.03.24
  * ** WHATS_NEW from 2.03.22 to 2.03.24 ***
  Version 2.03.24 - 16th May 2024
  ===============================
    Lvconvert supports VDO options for thin-pool with vdo conversion.
    Improve placement to .data.rel.ro and .rodata sections.
    Fix support for -y and -W when creating thinpool with vdo.
    Bettter support for runtime valgrind detection.
    Allow command interruption when communicating with dmeventd.
    Fix resize of VDO volume used for thin pool data volume.
    Use -Wl,-z,now and -Wl,--as-needed for compilation by default.
    Require 3.7 as minimal version for sanlock.
    Share code for closing opened desriptors on program startup.
    Fix memleak in lvmcache.
    Add configure --with-default-event-activation=ON setting.
    Fix return value from reporter function when hitting internal error.
    Skip checking of pools for lvremove and vgremove commands.
    VDO modprobes dm-vdo for 6.9 kernel and kvdo for older kernel version.
    Fix lvs reporting for VDO volumes with new upstream kernel driver.
    Don't import DM_UDEV_DISABLE_OTHER_RULES_FLAG in LVM rules, DM rules cover it.
    Fix table line generation for cache snapshots using cachevol.
    Enhance lvconvert support for external origins stacking.
    When swapping LV names also swap properties like hostname, time and data.
    Fix removal of stacked external origins.
    Lock filesystem when converting volume to read-only external origin.
    Support external origin between different thin-pool.
    Improve validation of acceptable volumes for external origins.
    Reduce amount of preloaded devices for complex device trees.
    Avoid logging problems from monitoring snapshots with inactive origins.
    Check for cache policy module presence in kernel's builtin modules file.
    Add configure --with-modulesdir to select kernel modules directory.
    Support creation of thin-pool with VDO use for its data volume.
  Version 2.03.23 - 21st November 2023
  ====================================
    Set the first lv_attr flag for raid integrity images to i or I.
    Add -A option for pvs and pvscan to show PVs outside devices file.
    Improve searched_devnames temp file usage to prevent redundant scanning.
    Change default search_for_devnames from auto to all.
    Add lvmdevices --refresh to search for missing PVIDs on all devices.
    Add comparison between old and new entries in lvmdevices --check.
    Fix device_id matching order - match non-devname first.
    Fix "lvconvert -m 0" when there is other than first in-sync leg.
    Use system.devices as default for dmeventd when dmeventd.devices is undefined.
    Accept WWIDs containing QEMU HARDDISK for device_id.
    Improve handling of non-standard WWID prefixes used for device_id.
    Configure automatically enables cmdlib for dmeventd and notify-dbus for dbus.
    Fix hint calculation for pools with zero or error segment.
    Configure supports --disable-shared to build only static binaries.
    Configure supports --without-{blkid|systemd|udev} for easier static build.
    Refresh device ids if the system changes.
    Fix pvmove when specifying raid components as moved LVs.
    Enhance error detection for lvm_import_vdo.
    Support PV lists with thin lvconvert.
    Fix support for lvm_import_vdo with SCSI VDO volumes.
    Fix locking issue leading to hanging concurrent vgchange --refresh.
    Recognize lvm.conf report/headings=2 for full column names in report headings.
    Add --headings none|abbrev|full cmd line option to set report headings type.
    Fix conversion to thin pool using lvmlockd.
    Fix conversion from thick into thin volume using lvmlockd.
    Require writable LV for conversion to vdo pool.
    Fix return value from lvconvert integrity remove.
    Preserve UUID for pool metadata spare.
    Preserve UUID for swapped pool metadata.
    Rewrite validation of device name entries used as device_id.
  * ** WHATS_NEW_DM from 1.02.196 to 1.02.198 ***
  Version 1.02.198 - 16th May 2024
  ================================
    Fix static only compilation of libdevmapper.a and dmsetup tool.
    Use better code for closing opened descriptors when starting dmeventd.
    Correct dmeventd -R for systemd environment.
    Restart of dmeventd -R checks pid file to detect running dmeventd first.
    Query with dmeventd -i quickly ends when there is no running dmeventd.
    Enhance dm_get_status_raid to handle mismatching status or reported legs.
    Create /dev/disk/by-label symlinks for DM devs that have crypto as next layer.
    Persist udev db for DM devs on cleanup used in initrd to rootfs transition.
    Process synthetic udev events other than 'add/change' as 'change' events.
    Increase DM_UDEV_RULES_VSN to 3 to indicate changed udev rules.
    Rename DM_NOSCAN to .DM_NOSCAN so it's not stored in udev db.
    Rename DM_SUSPENDED to .DM_SUSPENDED so it's not stored in udev db.
    Do not import DM_UDEV_DISABLE_OTHER_RULES_FLAG from db in 10-dm-disk.rules.
    Test DISK_RO after importing properties from db in 10-dm.rules.
    Also import ID_FS_TYPE in 13-dm-disk.rules from db if needed.
  Version 1.02.197 - 21st November 2023
  =====================================
    Fix invalid JSON report if using DM_REPORT_OUTPUT_MULTIPLE_TIMES and selection.
    Propagate ioctl errno from dm_task_run when creating new table line.
    Add support for group aliases in dmstats.
    Add support for exit-on file for dmeventd to reduce shutdown delays.
    Add configure option --with-dmeventd-exit-on-path to specify default path.
    Add dmsetup --headings none|abbrev|full to set report headings type.
    Add DM_REPORT_OUTPUT_FIELD_IDS_IN_HEADINGS to provide alternative headings.
- Drop patches that have been merged into upstream
  - 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  - 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  - 0003-lvconvert-fix-regresion-from-integrity-check.patch
  - 0004-gcc-cleanup-warnings.patch
  - 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  - 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  - 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  - 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  - 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  - 0010-lvmlockd-client-mutex-ordering.patch
  - 0011-filesystem-move-stat-after-open-check.patch
  - 0012-tests-check-for-writecache.patch
  - 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  - 0014-gcc-fix-warnings-for-x32-architecture.patch
  - 0015-gcc-warning-missing-braces-around-initializer.patch
  - 0016-test-improve-aux-teardown.patch
  - 0017-tests-aux-try-with-extra-sleep.patch
  - 0018-tests-aux-using-singl-lvmconf-call.patch
  - 0019-tests-missing-to-check-for-writecache-support.patch
  - 0020-tests-pvmove-large-disk-area.patch
  - 0021-tests-enforce-full-fs-check.patch
  - 0022-tests-update-for-work-in-fake-dev-environment.patch
  - 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  - 0024-tests-better-slowdown.patch
- Update patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch</changelog>
  <changelog author="glass.su@suse.com" date="1729771200">- add rpm dependency in spec file for aligning new DM udev rules (bsc#1225783 bsc#1229518 bsc#1232063)
  * update lvm2.spec for multipath-tools and udev</changelog>
  <changelog author="heming.zhao@suse.com" date="1740052800">- system with LVM on iSCSI hangs on shutdown because blk-availability.service is not enabled (bsc#1236788)
  * update lvm2.spec
  - remove blk-availability.service from %postun
  - add new Provides 'dont_stop_blk_availability_service'</changelog>
  <changelog author="heming.zhao@suse.com" date="1741003200">- Fixes the lvm2-testsuite failure to run on SUSE kernel (bsc#1238213)
  * Add upstream patch
    + tests-fix-wrong-pos-with-CONFIG_PRINTK_CALLER.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1741348800">- Fixes the lvm2-testsuite case fsadm-btrfs.sh (bsc#1238857)
  * Update SUSE special patch
    + fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1744718400">- LVM filter behaves unexpectedly for MPIO devices in SLES15SP5 (bsc#1216938)
  * set lvm.conf devices.multipath_wwids_file=""</changelog>
  <changelog author="glass.su@suse.com" date="1753876800">- L3: systemd fails to start lvmlockd with sanlock running (bsc#1246691)
  * Add upstream patches for sd_notify configure option
    + bug-1246691_01-configure.ac-build-lvmlockd-with-notify.patch
    + bug-1246691_02-configure-autoreconf.patch
    + bug-1246691_03-configure.ac-add-option-disable-enable-sd-notify.patch
    + bug-1246691_04-lvmlockd-utilize-SD_NOTIFY_SUPPORT.patch
    + bug-1246691_05-configure-autoreconf.patch
  * Update lvm2.spec
    + add pkgconfig(systemd) for lvmlockd build
    + enable configure option '--enable-sd-notify' for lvmlockd</changelog>
</package>
<package pkgid="747d4e9ea3c844a1290b438ca2b714749685a4c0b6866ad179721487426c8ca2" name="lvm2-device-mapper" arch="src">
  <version epoch="0" ver="2.03.24" rel="150700.7.6.1"/>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662033600">- Upgrade lvm2 from LVM2.2.03.05 to LVM2.2.03.16 (bsc#1201616)
  - device-mapper version upgrade to 1.02.185 (bsc#1199074)
- Drop patches that have been merged into upstream
  - bug-1122666_devices-drop-open-error-message.patch
  - bug-1150021_01-scanning-open-devs-rw-when-rescanning-for-write.patch
  - bug-1149408_Fix-rounding-writes-up-to-sector-size.patch
  - bug-1149408_vgcreate-vgextend-restrict-PVs-with-mixed-block-size.patch
  - bug-1152378-md-component-detection-for-differing-PV-and-device-s.patch
  - bug-1152378-pvscan-fix-PV-online-when-device-has-a-different-siz.patch
  - jcs-SLE5498_pvscan-allow-use-of-noudevsync-option.patch
  - bug-1154655_udev-remove-unsupported-OPTIONS-event_timeout-rule.patch
  - bug-1158628_01-tests-replaces-grep-q-usage.patch
  - bug-1158628_02-tests-fix-ra-checking.patch
  - bug-1158628_03-tests-simplify-some-var-settings.patch
  - bug-1158628_04-pvmove-correcting-read_ahead-setting.patch
  - bug-1158628_05-activation-add-synchronization-point.patch
  - bug-1158628_06-pvmove-add-missing-synchronization.patch
  - bug-1158628_07-activation-extend-handling-of-pending_delete.patch
  - bug-1158628_08-lv_manip-add-synchronizations.patch
  - bug-1158628_09-lvconvert-improve-validation-thin-and-cache-pool-con.patch
  - bug-1158628_10-thin-activate-layer-pool-aas-read-only-LV.patch
  - bug-1158628_11-tests-mdadm-stop-in-test-cleanup.patch
  - bug-1158628_12-test-increase-size-of-raid10-LV-allowing-tests-to-su.patch
  - bug-1158628_13-lvconvert-fix-return-value-when-zeroing-fails.patch
  - bug-1158628_14-tests-add-extra-settle.patch
  - bug-1158628_15-test-Fix-handling-leftovers-from-previous-tests.patch
  - bug-1158861_01-config-remove-filter-typo.patch
  - bug-1158861_02-config-Fix-default-option-which-makes-no-sense.patch
  - bug-1158861_03-vgchange-don-t-fail-monitor-command-if-vg-is-exporte.patch
  - bug-1158861_04-fix-duplicate-pv-size-check.patch
  - bug-1158861_05-hints-fix-copy-of-filter.patch
  - bug-1158861_06-fix-segfault-for-invalid-characters-in-vg-name.patch
  - bug-1158861_07-vgck-let-updatemetadata-repair-mismatched-metadata.patch
  - bug-1158861_08-hints-fix-mem-leaking-buffers.patch
  - bug-1158861_09-pvcreate-pvremove-fix-reacquiring-global-lock-after.patch
  - bug-1150021_02-bcache-add-bcache_abort.patch
  - bug-1150021_03-label-Use-bcache_abort_fd-to-ensure-blocks-are-no-lo.patch
  - bug-1150021_04-bcache-add-unit-test.patch
  - bug-1150021_05-bcache-bcache_invalidate_fd-only-remove-prefixes-on.patch
  - bug-1150021_06-fix-dev_unset_last_byte-after-write-error.patch
  - bug-1157736-add-suggestion-message-for-mirror-LVs.patch
  - bug-1171907-lvremove-remove-attached-cachevol-with-removed-LV.patch
  - bug-1172566_cachevol-use-cachepool-code-for-metadata-size.patch
  - bug-1175110_dmeventd-avoid-bail-out-preventing-repair-in-raid-pl.patch
  - bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch
  - bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  - bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  - bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  - bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  - bug-1181319_05-cov-check-sscanf-result.patch
  - bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch
  - bug-1185190_01-pvscan-support-disabled-event_activation.patch
  - bug-1185190_02-config-improve-description-for-event_activation.patch
  - bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch
  - bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
  - bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch
  - bug-1202011_vgchange-monitor-don-t-use-udev-info.patch
  - bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch
  - bug-1179691_config-set-external_device_info_source-none.patch
- Update patch
  - fate-309425_display-dm-name-for-lv-name.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- replace exist patch with fixed bug patches
  - (remove) fate-31841_fsadm-add-support-for-btrfs.patch
  - (add) fate-31841-01_fsadm-add-support-to-resize-check-btrfs-filesystem.patch
  - (add) fate-31841-02_man-add-support-for-btrfs.patch
  - (add) fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Add upstream patch
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
- update lvm2.spec
  - indent some lines for easy read
  - add new binraries: lvmdevices lvm_import_vdo vgimportdevices dmfilemapd
  - remove config item '--enable-cmirrord', which was obsoleted.
  - remove config item '--enable-realtime', which became default setting.
  - add config item "--with-cluster=internal" for cluster test
  - add config item "--enable-dmfilemapd" for new daemon dmfilemapd
  - add new man: lvmautoactivation.7 lvmdevices.8 lvm_import_vdo.8 dmfilemapd.8
  - remove lvm2-activation-generator &amp; lvm2-activation-generator.8
  - remove lvm2-pvscan@.service
  - replace 69-dm-lvm-metad.rules with 69-dm-lvm.rules
  - change %post behaviour, only do deleting job for non-link folder (bsc#1198523)
- lvm.conf
  - follow upstream style, comment out default value (bsc#1179739)</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1665576000">- lvm.conf should re-enable commented out option use_lvmlockd (bsc#1204219)
  - re-enable "use_lvmlockd = 0" in lvm.conf</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.185 to %{lvm2_version}_1.02.185</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1687521600">- multipath_component_detection = 0 in lvm.conf does not have any effect (bsc#1212613)
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1695816000">- Update lvm2 from LVM2.2.03.16 to LVM2.2.03.22 (jsc#PED-6339)
  * 2.03.22:
  * Fix pv_major/pv_minor report field types so they are integers, not strings.
  * Add lvmdevices --delnotfound to delete entries for missing devices.
  * Always use cachepool name for metadata backup LV for lvconvert --repair.
  * Make metadata backup LVs read-only after pool's lvconvert --repair.
  * Handle 'lvextend --usepolicies' for pools for all activation variants.
  * Fix memleak in vgchange autoactivation setup.
  * Support conversion from thick to fully provisioned thin LV.
  * Cache/Thin-pool can use error and zero volumes for testing.
  * Individual thin volume can be cached, but cannot take snapshot.
  * internal support for handling error and zero target (for testing).
  * COW above trimmed maximal size is does not return error.
  * Add lvm.conf thin_restore and cache_restore settings.
  * Handle multiple mounts while resizing volume with a FS.
  * Handle leading/trailing spaces in sys_wwid and sys_serial used by deivce_id.
  * Fix failing -S|--select for non-reporting cmds if using LV info/status fields.
  * Allow snapshots of raid+integrity LV.
  * Fix multisegment RAID1 allocator to prevent using single disk for more legs.
  * 2.03.21:
  * Allow (write)cache over raid+integrity LV.
  * 2.03.20:
  * Fix segfault if using -S|--select with log/report_command_log=1 setting.
  * 2.03.19:
  * Do not reset SYSTEMD_READY variable in udev for PVs on MD and loop devices.
  * Ensure udev is processing origin LV before its thick snapshots LVs.
  * 2.03.18:
  * Fix warning for thin pool overprovisioning on lvextend.
  * Add support for writecache metadata_only and pause_writeback settings.
  * Fix missing error messages in lvmdbusd.
  * 2.03.17:
  * Add new options (--fs, --fsmode) for FS handling when resizing LVs (btrfs is unsupported).
  * Fix 'lvremove -S|--select LV' to not also remove its historical LV right away.
  * Fix lv_active field type to binary so --select and --binary applies properly.
  * Error out in lvm shell if using a cmd argument not supported in the shell.
  * Fix lvm shell's lastlog command to report previous pre-command failures.
  * Add --valuesonly option to lvmconfig to print only values without keys.
  * Add json_std output format for more JSON standard compliant version of output.
  * Fix many corner cases in device_id, including handling of S/N duplicates.
  * Fix various issues in lvmdbusd.
- device-mapper version upgrade to 1.02.196
  * Improve parallel creation of /dev/mapper/control device node.
  * Import previous ID_FS_* udev records in 13-dm-disk.rules for suspended DM dev.
  * Remove NAME="mapper/control" rule from 10-dm.rules to avoid udev warnings.
  * Improve 'dmsetup create' without given table line with new kernels.
  * Add DM_REPORT_GROUP_JSON_STD for more JSON standard compliant output format.
- Drop patches that have been merged into upstream
  - 0001-devices-file-move-clean-up-after-command-is-run.patch
  - 0002-devices-file-fail-if-devicesfile-filename-doesn-t-ex.patch
  - 0003-filter-mpath-handle-other-wwid-types-in-blacklist.patch
  - 0004-filter-mpath-get-wwids-from-sysfs-vpd_pg83.patch
  - 0005-pvdisplay-restore-reportformat-option.patch
  - 0006-exit-with-error-when-devicesfile-name-doesn-t-exist.patch
  - 0007-report-fix-pe_start-column-type-from-NUM-to-SIZ.patch
  - 0008-_vg_read_raw_area-fix-segfault-caused-by-using-null-.patch
  - 0009-mm-remove-libaio-from-being-skipped.patch
  - 0010-dmsetup-check-also-for-ouf-of-range-value.patch
  - 0011-devices-drop-double-from-sysfs-path.patch
  - 0012-devices-file-fix-pvcreate-uuid-matching-pvid-entry-w.patch
  - 0013-vgimportdevices-change-result-when-devices-are-not-a.patch
  - 0014-vgimportdevices-fix-locking-when-creating-devices-fi.patch
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch
  - bug-1212613_apply-multipath_component_detection-0-to-duplicate-P.patch
- Add upstream patch
  + 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  + 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  + 0003-lvconvert-fix-regresion-from-integrity-check.patch
  + 0004-gcc-cleanup-warnings.patch
  + 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  + 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  + 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  + 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  + 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  + 0010-lvmlockd-client-mutex-ordering.patch
  + 0011-filesystem-move-stat-after-open-check.patch
  + 0012-tests-check-for-writecache.patch
  + 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  + 0014-gcc-fix-warnings-for-x32-architecture.patch
  + 0015-gcc-warning-missing-braces-around-initializer.patch
  + 0016-test-improve-aux-teardown.patch
  + 0017-tests-aux-try-with-extra-sleep.patch
  + 0018-tests-aux-using-singl-lvmconf-call.patch
  + 0019-tests-missing-to-check-for-writecache-support.patch
  + 0020-tests-pvmove-large-disk-area.patch
  + 0021-tests-enforce-full-fs-check.patch
  + 0022-tests-update-for-work-in-fake-dev-environment.patch
  + 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  + 0024-tests-better-slowdown.patch
- Update patch
  - bug-1037309_Makefile-skip-compliling-daemons-lvmlockd-directory.patch
  - bug-1184124-link-tests-as-PIE.patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch
  - fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch
- Rename &amp; Update patch
  - bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-rules.patch
- update lvm2.spec
  - change upstream_device_mapper_version to 1.02.196
  - change device_mapper_version to %{lvm2_version}_1.02.196
  - add config item "-with-libexecdir=%{_libexecdir}" to fix libexec path since commit a2d33cdf
  - add new binary "%{_libexecdir}/lvresize_fs_helper" to lvm2 package</changelog>
  <changelog author="heming.zhao@suse.com" date="1716724800">- Update lvm2 from LVM2.2.03.22 to LVM2.2.03.24
  * ** WHATS_NEW from 2.03.22 to 2.03.24 ***
  Version 2.03.24 - 16th May 2024
  ===============================
    Lvconvert supports VDO options for thin-pool with vdo conversion.
    Improve placement to .data.rel.ro and .rodata sections.
    Fix support for -y and -W when creating thinpool with vdo.
    Bettter support for runtime valgrind detection.
    Allow command interruption when communicating with dmeventd.
    Fix resize of VDO volume used for thin pool data volume.
    Use -Wl,-z,now and -Wl,--as-needed for compilation by default.
    Require 3.7 as minimal version for sanlock.
    Share code for closing opened desriptors on program startup.
    Fix memleak in lvmcache.
    Add configure --with-default-event-activation=ON setting.
    Fix return value from reporter function when hitting internal error.
    Skip checking of pools for lvremove and vgremove commands.
    VDO modprobes dm-vdo for 6.9 kernel and kvdo for older kernel version.
    Fix lvs reporting for VDO volumes with new upstream kernel driver.
    Don't import DM_UDEV_DISABLE_OTHER_RULES_FLAG in LVM rules, DM rules cover it.
    Fix table line generation for cache snapshots using cachevol.
    Enhance lvconvert support for external origins stacking.
    When swapping LV names also swap properties like hostname, time and data.
    Fix removal of stacked external origins.
    Lock filesystem when converting volume to read-only external origin.
    Support external origin between different thin-pool.
    Improve validation of acceptable volumes for external origins.
    Reduce amount of preloaded devices for complex device trees.
    Avoid logging problems from monitoring snapshots with inactive origins.
    Check for cache policy module presence in kernel's builtin modules file.
    Add configure --with-modulesdir to select kernel modules directory.
    Support creation of thin-pool with VDO use for its data volume.
  Version 2.03.23 - 21st November 2023
  ====================================
    Set the first lv_attr flag for raid integrity images to i or I.
    Add -A option for pvs and pvscan to show PVs outside devices file.
    Improve searched_devnames temp file usage to prevent redundant scanning.
    Change default search_for_devnames from auto to all.
    Add lvmdevices --refresh to search for missing PVIDs on all devices.
    Add comparison between old and new entries in lvmdevices --check.
    Fix device_id matching order - match non-devname first.
    Fix "lvconvert -m 0" when there is other than first in-sync leg.
    Use system.devices as default for dmeventd when dmeventd.devices is undefined.
    Accept WWIDs containing QEMU HARDDISK for device_id.
    Improve handling of non-standard WWID prefixes used for device_id.
    Configure automatically enables cmdlib for dmeventd and notify-dbus for dbus.
    Fix hint calculation for pools with zero or error segment.
    Configure supports --disable-shared to build only static binaries.
    Configure supports --without-{blkid|systemd|udev} for easier static build.
    Refresh device ids if the system changes.
    Fix pvmove when specifying raid components as moved LVs.
    Enhance error detection for lvm_import_vdo.
    Support PV lists with thin lvconvert.
    Fix support for lvm_import_vdo with SCSI VDO volumes.
    Fix locking issue leading to hanging concurrent vgchange --refresh.
    Recognize lvm.conf report/headings=2 for full column names in report headings.
    Add --headings none|abbrev|full cmd line option to set report headings type.
    Fix conversion to thin pool using lvmlockd.
    Fix conversion from thick into thin volume using lvmlockd.
    Require writable LV for conversion to vdo pool.
    Fix return value from lvconvert integrity remove.
    Preserve UUID for pool metadata spare.
    Preserve UUID for swapped pool metadata.
    Rewrite validation of device name entries used as device_id.
  * ** WHATS_NEW_DM from 1.02.196 to 1.02.198 ***
  Version 1.02.198 - 16th May 2024
  ================================
    Fix static only compilation of libdevmapper.a and dmsetup tool.
    Use better code for closing opened descriptors when starting dmeventd.
    Correct dmeventd -R for systemd environment.
    Restart of dmeventd -R checks pid file to detect running dmeventd first.
    Query with dmeventd -i quickly ends when there is no running dmeventd.
    Enhance dm_get_status_raid to handle mismatching status or reported legs.
    Create /dev/disk/by-label symlinks for DM devs that have crypto as next layer.
    Persist udev db for DM devs on cleanup used in initrd to rootfs transition.
    Process synthetic udev events other than 'add/change' as 'change' events.
    Increase DM_UDEV_RULES_VSN to 3 to indicate changed udev rules.
    Rename DM_NOSCAN to .DM_NOSCAN so it's not stored in udev db.
    Rename DM_SUSPENDED to .DM_SUSPENDED so it's not stored in udev db.
    Do not import DM_UDEV_DISABLE_OTHER_RULES_FLAG from db in 10-dm-disk.rules.
    Test DISK_RO after importing properties from db in 10-dm.rules.
    Also import ID_FS_TYPE in 13-dm-disk.rules from db if needed.
  Version 1.02.197 - 21st November 2023
  =====================================
    Fix invalid JSON report if using DM_REPORT_OUTPUT_MULTIPLE_TIMES and selection.
    Propagate ioctl errno from dm_task_run when creating new table line.
    Add support for group aliases in dmstats.
    Add support for exit-on file for dmeventd to reduce shutdown delays.
    Add configure option --with-dmeventd-exit-on-path to specify default path.
    Add dmsetup --headings none|abbrev|full to set report headings type.
    Add DM_REPORT_OUTPUT_FIELD_IDS_IN_HEADINGS to provide alternative headings.
- Drop patches that have been merged into upstream
  - 0001-lvconvert-swapmetadata-fix-lvmlockd-locking.patch
  - 0002-lvconvert-fix-ret-values-fro-integrity-remove.patch
  - 0003-lvconvert-fix-regresion-from-integrity-check.patch
  - 0004-gcc-cleanup-warnings.patch
  - 0005-lvmlockd-fix-thick-to-thin-lv-conversion.patch
  - 0006-lvmlockd-let-lockd_init_lv_args-set-lock_args.patch
  - 0007-lvmlockd-fix-lvconvert-to-thin-pool.patch
  - 0008-lvconvert-run-error-path-code-only-for-shared-VG.patch
  - 0009-vgchange-acquire-an-exclusive-VG-lock-for-refresh.patch
  - 0010-lvmlockd-client-mutex-ordering.patch
  - 0011-filesystem-move-stat-after-open-check.patch
  - 0012-tests-check-for-writecache.patch
  - 0013-lvresize-fix-32-bit-overflow-in-size-calculation.patch
  - 0014-gcc-fix-warnings-for-x32-architecture.patch
  - 0015-gcc-warning-missing-braces-around-initializer.patch
  - 0016-test-improve-aux-teardown.patch
  - 0017-tests-aux-try-with-extra-sleep.patch
  - 0018-tests-aux-using-singl-lvmconf-call.patch
  - 0019-tests-missing-to-check-for-writecache-support.patch
  - 0020-tests-pvmove-large-disk-area.patch
  - 0021-tests-enforce-full-fs-check.patch
  - 0022-tests-update-for-work-in-fake-dev-environment.patch
  - 0023-tests-skip-test-when-lvmdbusd-runs-on-the-system.patch
  - 0024-tests-better-slowdown.patch
- Update patch
  - bug-1184687_Add-nolvm-for-kernel-cmdline.patch</changelog>
  <changelog author="glass.su@suse.com" date="1729771200">- add rpm dependency in spec file for aligning new DM udev rules (bsc#1225783 bsc#1229518 bsc#1232063)
  * update lvm2.spec for multipath-tools and udev</changelog>
  <changelog author="heming.zhao@suse.com" date="1740052800">- system with LVM on iSCSI hangs on shutdown because blk-availability.service is not enabled (bsc#1236788)
  * update lvm2.spec
  - remove blk-availability.service from %postun
  - add new Provides 'dont_stop_blk_availability_service'</changelog>
  <changelog author="heming.zhao@suse.com" date="1741003200">- Fixes the lvm2-testsuite failure to run on SUSE kernel (bsc#1238213)
  * Add upstream patch
    + tests-fix-wrong-pos-with-CONFIG_PRINTK_CALLER.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1741348800">- Fixes the lvm2-testsuite case fsadm-btrfs.sh (bsc#1238857)
  * Update SUSE special patch
    + fate-31841-03_tests-new-test-suite-of-fsadm-for-btrfs.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1744718400">- LVM filter behaves unexpectedly for MPIO devices in SLES15SP5 (bsc#1216938)
  * set lvm.conf devices.multipath_wwids_file=""</changelog>
  <changelog author="glass.su@suse.com" date="1753876800">- L3: systemd fails to start lvmlockd with sanlock running (bsc#1246691)
  * Add upstream patches for sd_notify configure option
    + bug-1246691_01-configure.ac-build-lvmlockd-with-notify.patch
    + bug-1246691_02-configure-autoreconf.patch
    + bug-1246691_03-configure.ac-add-option-disable-enable-sd-notify.patch
    + bug-1246691_04-lvmlockd-utilize-SD_NOTIFY_SUPPORT.patch
    + bug-1246691_05-configure-autoreconf.patch
  * Update lvm2.spec
    + add pkgconfig(systemd) for lvmlockd build
    + enable configure option '--enable-sd-notify' for lvmlockd</changelog>
  <changelog author="glass.su@suse.com" date="1770724800">- L3: LVM_SUPPRESS_FD_WARNINGS is no longer effective (bsc#1257661)
  * Add upstream patch
    + bug-1257661-libdaemon-fix-suppressing-stray-fd-warnings.patch</changelog>
</package>
<package pkgid="78196ce638e12ed68b8ca2147a95e2dce2cd852d8d846f2141f78352bbe8e336" name="makedumpfile" arch="src">
  <version epoch="0" ver="1.7.4" rel="150600.3.6.1"/>
  <changelog author="ptesarik@suse.com" date="1617537600">- Update upstream project location (URL and Source).</changelog>
  <changelog author="ptesarik@suse.com" date="1617796800">- Support kernel 5.11:
  * makedumpfile-use-uts_namespace.name-offset-VMCOREINFO.patch:
    make use of 'uts_namespace.name' offset in VMCOREINFO.</changelog>
  <changelog author="mbrugger@suse.com" date="1617883200">- Fix guessing of va_bits (bsc#1183977)
  * makedumpfile-1-3-Use-vmcoreinfo-note-in-proc-kcore-for-mem-.patch
  * makedumpfile-2-3-arm64-Make-use-of-NUMBER-VA_BITS-in-vmcore.patch
  * makedumpfile-3-3-arm64-support-flipped-VA-and-52-bit-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1618833600">- Update patch metadata.</changelog>
  <changelog author="rpm@fthiessen.de" date="1625918400">- Update to 1.6.9
  * Add initial mips64 support
  * Support newer kernels up to v5.12
  * x86_64: fix a use-after-free bug in -e option
  * arm64: support flipped VA and 52-bit kernel VA
  * Add shorthand --show-stats option to show report stats
  * Add --dry-run option to prevent writing the dumpfile
  * printk: add support for lockless ringbuffer
- Fix rpmlintrc to not be version agnostic
- Refresh makedumpfile-override-libtinfo.patch
- Drop upstream merged
  * makedumpfile-printk-add-support-for-lockless-ringbuffer.patch
  * makedumpfile-printk-use-committed-finalized-state-value.patch
  * makedumpfile-use-uts_namespace.name-offset-VMCOREINFO.patch
  * makedumpfile-1-3-Use-vmcoreinfo-note-in-proc-kcore-for-mem-.patch
  * makedumpfile-2-3-arm64-Make-use-of-NUMBER-VA_BITS-in-vmcore.patch
  * makedumpfile-3-3-arm64-support-flipped-VA-and-52-bit-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1637236800">- Update to 1.7.0
  * Zstandard (zstd) compression support
  * New -L option to limit output file size
  * Support of kernels up to v5.15 (x86_64)</changelog>
  <changelog author="ptesarik@suse.com" date="1637323200">- Turn on zstd.</changelog>
  <changelog author="ptesarik@suse.com" date="1638532800">- Merge SLE15 SP3 changelog.
- Patches that were never actually applied to Factory:
  * makedumpfile-Retrieve-MAX_PHYSMEM_BITS-from-vmcoreinfo.patch
    (included in 1.6.8)
  * makedumpfile-arm64-Add-support-for-ARMv8.2-LPA-52-bit-PA-su.patch
    (included in 1.6.8)</changelog>
  <changelog author="ptesarik@suse.com" date="1638792000">- Non-existent patches must be listed twice to appear as added in a
  unified diff against a version that had them. Only that can make
  factory-auto happy. Here we go:
  * makedumpfile-Retrieve-MAX_PHYSMEM_BITS-from-vmcoreinfo.patch
  * makedumpfile-arm64-Add-support-for-ARMv8.2-LPA-52-bit-PA-su.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1644580800">- Turn on zstd in Tumbleweed.</changelog>
  <changelog author="ptesarik@suse.com" date="1647864000">- makedumpfile-sadump-kaslr-fix-kaslr_offset-calculation.patch:
  sadump, kaslr: fix failure of calculating kaslr_offset
  (bsc#1196736).</changelog>
  <changelog author="info@paolostivanin.com" date="1650456000">- Update to 1.7.1:
  * support for kernel up to 5.17
  * sadump: remove variable length array
  * print error when reading with unsupported compression
- Drop upstreamed makedumpfile-sadump-kaslr-fix-kaslr_offset-calculation.patch</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 1.7.2:
  * LoongArch64 architecture support
  * Support kernels up to v6.0 (x86_64)</changelog>
  <changelog author="petr@tesarici.cz" date="1682424000">- update to 1.7.3:
  * Support kernels up to v6.3 (x86_64)
  * Support sadump with 5-level paging
- temporarily disable eppic until v5.0 branch can be supported</changelog>
  <changelog author="msuchanek@suse.de" date="1696593600">- Add Support-struct-module_memory-on-Linux-6.4-and-.patch (jsc#PED-4593)
- Add ppc64-do-page-traversal-if-vmemmap_list-not-po.patch (bsc#1215364)
- Re-enable eppic on systems with old enough libeppic</changelog>
  <changelog author="petr@tesarici.cz" date="1700049600">- Update to 1.7.4:
  * Add riscv64 support
  * Support kernels up to v6.6 (x86_64)
- Drop upstreamed patches:
  * ppc64-do-page-traversal-if-vmemmap_list-not-po.patch
  * Support-struct-module_memory-on-Linux-6.4-and-.patch
- Build with a bundled eppic git snapshot.</changelog>
  <changelog author="petr@tesarici.cz" date="1700049601">- Reduce compatibility cruft.</changelog>
  <changelog author="petr@tesarici.cz" date="1700049602">- Enable build for riscv64.</changelog>
  <changelog author="jbohac@suse.com" date="1723204800">- don't reserve disk space for flattened format (bsc#1226183)
  * Add make-reserve_diskspace-do-nothing-for-flattened-form.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1771502400">- makedumpfile-Fix-data-race-in-multi-threading-mode.patch: Fix a
  data race in multi-threading mode (--num-threads=N)
  (bsc#1245569, bsc#1256455).</changelog>
</package>
<package pkgid="e4a52091b685101212db22773289fa94f6115ada1479ae2851eae1b4f04afbff" name="makedumpfile" arch="x86_64">
  <version epoch="0" ver="1.7.4" rel="150600.3.6.1"/>
  <changelog author="ptesarik@suse.com" date="1617537600">- Update upstream project location (URL and Source).</changelog>
  <changelog author="ptesarik@suse.com" date="1617796800">- Support kernel 5.11:
  * makedumpfile-use-uts_namespace.name-offset-VMCOREINFO.patch:
    make use of 'uts_namespace.name' offset in VMCOREINFO.</changelog>
  <changelog author="mbrugger@suse.com" date="1617883200">- Fix guessing of va_bits (bsc#1183977)
  * makedumpfile-1-3-Use-vmcoreinfo-note-in-proc-kcore-for-mem-.patch
  * makedumpfile-2-3-arm64-Make-use-of-NUMBER-VA_BITS-in-vmcore.patch
  * makedumpfile-3-3-arm64-support-flipped-VA-and-52-bit-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1618833600">- Update patch metadata.</changelog>
  <changelog author="rpm@fthiessen.de" date="1625918400">- Update to 1.6.9
  * Add initial mips64 support
  * Support newer kernels up to v5.12
  * x86_64: fix a use-after-free bug in -e option
  * arm64: support flipped VA and 52-bit kernel VA
  * Add shorthand --show-stats option to show report stats
  * Add --dry-run option to prevent writing the dumpfile
  * printk: add support for lockless ringbuffer
- Fix rpmlintrc to not be version agnostic
- Refresh makedumpfile-override-libtinfo.patch
- Drop upstream merged
  * makedumpfile-printk-add-support-for-lockless-ringbuffer.patch
  * makedumpfile-printk-use-committed-finalized-state-value.patch
  * makedumpfile-use-uts_namespace.name-offset-VMCOREINFO.patch
  * makedumpfile-1-3-Use-vmcoreinfo-note-in-proc-kcore-for-mem-.patch
  * makedumpfile-2-3-arm64-Make-use-of-NUMBER-VA_BITS-in-vmcore.patch
  * makedumpfile-3-3-arm64-support-flipped-VA-and-52-bit-kernel.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1637236800">- Update to 1.7.0
  * Zstandard (zstd) compression support
  * New -L option to limit output file size
  * Support of kernels up to v5.15 (x86_64)</changelog>
  <changelog author="ptesarik@suse.com" date="1637323200">- Turn on zstd.</changelog>
  <changelog author="ptesarik@suse.com" date="1638532800">- Merge SLE15 SP3 changelog.
- Patches that were never actually applied to Factory:
  * makedumpfile-Retrieve-MAX_PHYSMEM_BITS-from-vmcoreinfo.patch
    (included in 1.6.8)
  * makedumpfile-arm64-Add-support-for-ARMv8.2-LPA-52-bit-PA-su.patch
    (included in 1.6.8)</changelog>
  <changelog author="ptesarik@suse.com" date="1638792000">- Non-existent patches must be listed twice to appear as added in a
  unified diff against a version that had them. Only that can make
  factory-auto happy. Here we go:
  * makedumpfile-Retrieve-MAX_PHYSMEM_BITS-from-vmcoreinfo.patch
  * makedumpfile-arm64-Add-support-for-ARMv8.2-LPA-52-bit-PA-su.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1644580800">- Turn on zstd in Tumbleweed.</changelog>
  <changelog author="ptesarik@suse.com" date="1647864000">- makedumpfile-sadump-kaslr-fix-kaslr_offset-calculation.patch:
  sadump, kaslr: fix failure of calculating kaslr_offset
  (bsc#1196736).</changelog>
  <changelog author="info@paolostivanin.com" date="1650456000">- Update to 1.7.1:
  * support for kernel up to 5.17
  * sadump: remove variable length array
  * print error when reading with unsupported compression
- Drop upstreamed makedumpfile-sadump-kaslr-fix-kaslr_offset-calculation.patch</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 1.7.2:
  * LoongArch64 architecture support
  * Support kernels up to v6.0 (x86_64)</changelog>
  <changelog author="petr@tesarici.cz" date="1682424000">- update to 1.7.3:
  * Support kernels up to v6.3 (x86_64)
  * Support sadump with 5-level paging
- temporarily disable eppic until v5.0 branch can be supported</changelog>
  <changelog author="msuchanek@suse.de" date="1696593600">- Add Support-struct-module_memory-on-Linux-6.4-and-.patch (jsc#PED-4593)
- Add ppc64-do-page-traversal-if-vmemmap_list-not-po.patch (bsc#1215364)
- Re-enable eppic on systems with old enough libeppic</changelog>
  <changelog author="petr@tesarici.cz" date="1700049600">- Update to 1.7.4:
  * Add riscv64 support
  * Support kernels up to v6.6 (x86_64)
- Drop upstreamed patches:
  * ppc64-do-page-traversal-if-vmemmap_list-not-po.patch
  * Support-struct-module_memory-on-Linux-6.4-and-.patch
- Build with a bundled eppic git snapshot.</changelog>
  <changelog author="petr@tesarici.cz" date="1700049601">- Reduce compatibility cruft.</changelog>
  <changelog author="petr@tesarici.cz" date="1700049602">- Enable build for riscv64.</changelog>
  <changelog author="jbohac@suse.com" date="1723204800">- don't reserve disk space for flattened format (bsc#1226183)
  * Add make-reserve_diskspace-do-nothing-for-flattened-form.patch</changelog>
  <changelog author="ptesarik@suse.com" date="1771502400">- makedumpfile-Fix-data-race-in-multi-threading-mode.patch: Fix a
  data race in multi-threading mode (--num-threads=N)
  (bsc#1245569, bsc#1256455).</changelog>
</package>
<package pkgid="85e806094aa13e6f51078e5b7674c871dbfb87cd56d1c6bd40fbe43119e1f538" name="man-pages-posix" arch="noarch">
  <version epoch="0" ver="2013a" rel="150000.3.6.2"/>
  <changelog author="pgajdos@suse.cz" date="1219233600">- splitted from man-pages</changelog>
  <changelog author="andrea.turrini@gmail.com" date="1316606400">- removed repeated sentence from man-pages-posix.spec description</changelog>
  <changelog author="cfarrell@suse.com" date="1345723200">- license update: SUSE-IEEE
  A new license string was added to the spreadsheet linked from
  license.opensuse.org. It corresponds to the Fedora entry. The proprietary
  SUSE- prefix is included until the license is accepted upstream at
  spdx.org/licenses</changelog>
  <changelog author="pgajdos@suse.com" date="1364299200">- adjust url</changelog>
  <changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1390651200">- Update to new upstream release 2013a
  * Update to the latest revision of the POSIX standard
- Feed specfile through formatter; kill redundant %clean section;
  %fdupes ought not to be called across directories that potentially
  live across standard partitions</changelog>
  <changelog author="pgajdos@suse.com" date="1546603200">- supplements man [bsc#1116987]</changelog>
  <changelog author="pgajdos@suse.com" date="1760702400">-  use %license tag [bsc#1252161]</changelog>
</package>
<package pkgid="9d55ab2d2e30f269cc7c52bf37d4fc0e9fb3f755dac9e914c36ca2c4df20eaed" name="man-pages-posix" arch="src">
  <version epoch="0" ver="2013a" rel="150000.3.6.2"/>
  <changelog author="pgajdos@suse.cz" date="1219233600">- splitted from man-pages</changelog>
  <changelog author="andrea.turrini@gmail.com" date="1316606400">- removed repeated sentence from man-pages-posix.spec description</changelog>
  <changelog author="cfarrell@suse.com" date="1345723200">- license update: SUSE-IEEE
  A new license string was added to the spreadsheet linked from
  license.opensuse.org. It corresponds to the Fedora entry. The proprietary
  SUSE- prefix is included until the license is accepted upstream at
  spdx.org/licenses</changelog>
  <changelog author="pgajdos@suse.com" date="1364299200">- adjust url</changelog>
  <changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1390651200">- Update to new upstream release 2013a
  * Update to the latest revision of the POSIX standard
- Feed specfile through formatter; kill redundant %clean section;
  %fdupes ought not to be called across directories that potentially
  live across standard partitions</changelog>
  <changelog author="pgajdos@suse.com" date="1546603200">- supplements man [bsc#1116987]</changelog>
  <changelog author="pgajdos@suse.com" date="1760702400">-  use %license tag [bsc#1252161]</changelog>
</package>
<package pkgid="7ebdc9634561387fd6d10fa3107279165aab83fc834711a5b26ca0202f4c4227" name="mdadm" arch="src">
  <version epoch="0" ver="4.4+29.gf8bb524b" rel="150700.4.15.4"/>
  <changelog author="lnussel@suse.com" date="1690200000">- mdadm.spec: replace transitional %usrmerged macro with regular
  version check (boo#1206798)</changelog>
  <changelog author="dimstar@opensuse.org" date="1700222400">- No longer recommend smtp-daemon: this was a remainder from the
  cron configuration, which was removed back in 2018.</changelog>
  <changelog author="colyli@suse.de" date="1704715200">- Update mdadm to latest upstream state upto commit
  582945c2d3bb. (jsc#PED-7542)
  1) The testing changes are not included here.
  2) Code clean up, and more helper routines added for Manage.c,
    Monitor.c, mdadm.c, ReadMe.c, super-intel.c, super0.c, super1.c,
    Create.c, Incremental.c and so on.
  3) Man page update for mdadm.8.in.
  4) Several memory leak and double free fixes.
  5) Check /etc/initrd-release for whether systemd running on an initrd.
  - Manage: Block unsafe member failing
    0062-Manage-Block-unsafe-member-failing.patch
  - Mdmonitor: Split alert() into separate functions
    0063-Mdmonitor-Split-alert-into-separate-functions.patch
  - Monitor: block if monitor modes are combined.
    0064-Monitor-block-if-monitor-modes-are-combined.patch
  - Update mdadm Monitor manual.
    0065-Update-mdadm-Monitor-manual.patch
  - mdadm: create ident_init()
    0066-mdadm-create-ident_init.patch
  - mdadm: Add option validation for --update-subarray
    0067-mdadm-Add-option-validation-for-update-subarray.patch
  - Fix --update-subarray on active volume
    0068-Fix-update-subarray-on-active-volume.patch
  - Add code specific update options to enum.
    0069-Add-code-specific-update-options-to-enum.patch
  - super-ddf: Remove update_super_ddf.
    0070-super-ddf-Remove-update_super_ddf.patch
  - super0: refactor the code for enum
    0071-super0-refactor-the-code-for-enum.patch
  - super1: refactor the code for enum
    0072-super1-refactor-the-code-for-enum.patch
  - super-intel: refactor the code for enum
    0073-super-intel-refactor-the-code-for-enum.patch
  - Change update to enum in update_super and update_subarray
    0074-Change-update-to-enum-in-update_super-and-update_sub.patch
  - Manage&amp;Incremental: code refactor, string to enum
    0075-Manage-Incremental-code-refactor-string-to-enum.patch
  - Change char* to enum in context-&gt;update &amp; refactor code
    0076-Change-char-to-enum-in-context-update-refactor-code.patch
  - mdadm/udev: Don't handle change event on raw devices
    0077-mdadm-udev-Don-t-handle-change-event-on-raw-devices.patch
  - Manage: do not check array state when drive is removed
    0078-Manage-do-not-check-array-state-when-drive-is-remove.patch
  - incremental, manage: do not verify if remove is safe
    0079-incremental-manage-do-not-verify-if-remove-is-safe.patch
  - super-intel: make freesize not required for chunk size
    0080-super-intel-make-freesize-not-required-for-chunk-siz.patch
  - manage: move comment with function description
    0081-manage-move-comment-with-function-description.patch
  - Fix NULL dereference in super_by_fd
    0082-Fix-NULL-dereference-in-super_by_fd.patch
  - Mdmonitor: Make alert_info global
    0083-Mdmonitor-Make-alert_info-global.patch
  - Mdmonitor: Pass events to alert() using enums instead of
    0084-Mdmonitor-Pass-events-to-alert-using-enums-instead-o.patch
  - Mdmonitor: Add helper functions
    0085-Mdmonitor-Add-helper-functions.patch
  - Add helpers to determine whether directories or files are
    0086-Add-helpers-to-determine-whether-directories-or-file.patch
  - Mdmonitor: Refactor write_autorebuild_pid()
    0087-Mdmonitor-Refactor-write_autorebuild_pid.patch
  - Mdmonitor: Refactor check_one_sharer() for better error
    0088-Mdmonitor-Refactor-check_one_sharer-for-better-error.patch
  - util.c: reorder code lines in parse_layout_faulty()
    0089-util.c-reorder-code-lines-in-parse_layout_faulty.patch
  - util.c: fix memleak in parse_layout_faulty()
    0090-util.c-fix-memleak-in-parse_layout_faulty.patch
  - Detail.c: fix memleak in Detail()
    0091-Detail.c-fix-memleak-in-Detail.patch
  - isuper-intel.c: fix double free in load_imsm_mpb()
    0092-isuper-intel.c-fix-double-free-in-load_imsm_mpb.patch
  - super-intel.c: fix memleak in find_disk_attached_hba()
    0093-super-intel.c-fix-memleak-in-find_disk_attached_hba.patch
  - super-ddf.c: fix memleak in get_vd_num_of_subarray()
    0094-super-ddf.c-fix-memleak-in-get_vd_num_of_subarray.patch
  - Create: goto abort_locked instead of return 1 in error path
    0095-Create-goto-abort_locked-instead-of-return-1-in-erro.patch
  - Create: remove safe_mode_delay local variable
    0096-Create-remove-safe_mode_delay-local-variable.patch
  - Create: Factor out add_disks() helpers
    0097-Create-Factor-out-add_disks-helpers.patch
  - mdadm: Introduce pr_info()
    0098-mdadm-Introduce-pr_info.patch
  - mdadm: Add --write-zeros option for Create
    0099-mdadm-Add-write-zeros-option-for-Create.patch
  - manpage: Add --write-zeroes option to manpage
    0100-manpage-Add-write-zeroes-option-to-manpage.patch
  - Define alignof using _Alignof when using C11 or newer
    0101-Define-alignof-using-_Alignof-when-using-C11-or-newe.patch
  - Use existence of /etc/initrd-release to detect initrd.
    0102-Use-existence-of-etc-initrd-release-to-detect-initrd.patch
  - Create: Fix checking for container in update_metadata
    0103-Create-Fix-checking-for-container-in-update_metadata.patch</changelog>
  <changelog author="colyli@suse.de" date="1708689600">- Upgrade to mdadm-4.3 (jsc#PED-7542). Beside previous already back
  ported patches, mdadm-4.3 has the following extra changes since
  last update upto commit 582945c2d3bb,
  - Fix null pointer for incremental in mdadm.
  - Super1: fix truncation check for journal device.
  - Fix some cases eyesore formatting.
  - Bump minimum kernel version to 2.6.32.
  - Remove the config files in mdcheck_start|continue service.
  - Define DEV_MD_DIR, DEV_NUM_PREF, is_devname_ignore(),
    ident_set_devname().
  - Enable RAID for SATA under VMD.
  - Imsm: Fix possible segfault in check_no_platform()
  - Imsm refactor on imsm_get_free_size(), merge_extents().
  - Imsm: return free space after volume for expand.
  - Imsm: fix free space calculations.
  - Add secure gethostname() wrapper.
  - mdadm: Stop mdcheck_continue timer when mdcheck_start service can
    finish check.
  - Fix memory leak in files Assemble.c, Kill.c, Manage.c, mdadm.c.
  - Fix unsafe string functions.
  - platform-intel: limit guid length.
  - Imsm: Add reading vmd register for finding imsm capability.
  - Add compiler defenses flags.
  - Assemble: fix redundant memory free.
  - More regression test cases added into tests.
  - Mdadm: set ident.devname if applicable.
  - Mdadm: refactor ident-&gt;name handling.
  - Mdadm: Follow POSIX Portable Character Set.
  - Incremental: remove obsoleted calls to udisks.
  - Fix race of "mdadm --add" and "mdadm --incremental".
  - mdadm/ddf: Abort when raid disk is smaller in getinfo_super_ddf.
  - mdadm/super1: Add MD_FEATURE_RAID0_LAYOUT if kernel&gt;=5.4.
  - Fix assembling RAID volume by using incremental.
  - Mdmonitor: Improve udev event handling.
  - Udev: Move udev_block() and udev_unblock() into udev.c.
  - Manage: adjust checking subarray state in update_subarray.
  - Super1: remove support for name= in config.
  - Mdadm: fix update=resync regression.
- Rebase to keep consistent behavior for current code base.
  - 1004-call-mdadm_env.sh-from-usr-libexec-mdadm.patch
- The following patches are moved from package because they are all
  included in mdadm-4.3,
  - 0001-Unify-error-message.patch
  - 0002-mdadm-Fix-double-free.patch
  - 0003-Grow_reshape-Add-r0-grow-size-error-message-and-upda.patch
  - 0004-udev-adapt-rules-to-systemd-v247.patch
  - 0005-Replace-error-prone-signal-with-sigaction.patch
  - 0006-mdadm-Respect-config-file-location-in-man.patch
  - 0007-mdadm-Update-ReadMe.patch
  - 0008-mdadm-Update-config-man-regarding-default-files-and-.patch
  - 0009-mdadm-Update-config-manual.patch
  - 0010-Create-Build-use-default_layout.patch
  - 0011-mdadm-add-map_num_s.patch
  - 0012-mdmon-Stop-parsing-duplicate-options.patch
  - 0013-Grow-block-n-on-external-volumes.patch
  - 0014-Incremental-Fix-possible-memory-and-resource-leaks.patch
  - 0015-Mdmonitor-Fix-segfault.patch
  - 0016-Mdmonitor-Improve-logging-method.patch
  - 0017-Fix-possible-NULL-ptr-dereferences-and-memory-leaks.patch
  - 0018-imsm-Remove-possibility-for-get_imsm_dev-to-return-N.patch
  - 0019-Revert-mdadm-fix-coredump-of-mdadm-monitor-r.patch
  - 0020-util-replace-ioctl-use-with-function.patch
  - 0021-mdadm-super1-restore-commit-45a87c2f31335-to-fix-clu.patch
  - 0022-imsm-introduce-get_disk_slot_in_dev.patch
  - 0023-imsm-use-same-slot-across-container.patch
  - 0024-imsm-block-changing-slots-during-creation.patch
  - 0025-mdadm-block-update-ppl-for-non-raid456-levels.patch
  - 0026-mdadm-Fix-array-size-mismatch-after-grow.patch
  - 0027-mdadm-Remove-dead-code-in-imsm_fix_size_mismatch.patch
  - 0028-Monitor-use-devname-as-char-array-instead-of-pointer.patch
  - 0029-Monitor-use-snprintf-to-fill-device-name.patch
  - 0030-Makefile-Don-t-build-static-build-with-everything-an.patch
  - 0031-DDF-Cleanup-validate_geometry_ddf_container.patch
  - 0032-DDF-Fix-NULL-pointer-dereference-in-validate_geometr.patch
  - 0033-mdadm-Grow-Fix-use-after-close-bug-by-closing-after-.patch
  - 0034-monitor-Avoid-segfault-when-calling-NULL-get_bad_blo.patch
  - 0035-mdadm-Fix-mdadm-r-remove-option-regression.patch
  - 0036-mdadm-Fix-optional-write-behind-parameter.patch
  - 0037-mdadm-Replace-obsolete-usleep-with-nanosleep.patch
  - 0038-mdadm-remove-symlink-option.patch
  - 0039-mdadm-move-data_offset-to-struct-shape.patch
  - 0040-mdadm-Don-t-open-md-device-for-CREATE-and-ASSEMBLE.patch
  - 0041-Grow-Split-Grow_reshape-into-helper-function.patch
  - 0042-Assemble-check-if-device-is-container-before-schedul.patch
  - 0043-super1-report-truncated-device.patch
  - 0044-mdadm-Correct-typos-punctuation-and-grammar-in-man.patch
  - 0046-Monitor-Fix-statelist-memory-leaks.patch
  - 0047-mdadm-added-support-for-Intel-Alderlake-RST-on-VMD-p.patch
  - 0048-mdadm-Add-Documentation-entries-to-systemd-services.patch
  - 0049-ReadMe-fix-command-line-help.patch
  - 0050-mdadm-replace-container-level-checking-with-inline.patch
  - 0051-Mdmonitor-Omit-non-md-devices.patch
  - 0052-mdmon-fix-segfault.patch
  - 0053-util-remove-obsolete-code-from-get_md_name.patch
  - 0054-mdmon-don-t-test-both-all-and-container_name.patch
  - 0055-mdmon-change-systemd-unit-file-to-use-foreground.patch
  - 0056-mdmon-Remove-need-for-KillMode-none.patch
  - 0057-mdmon-Improve-switchroot-interactions.patch
  - 0058-mdopen-always-try-create_named_array.patch
  - 0059-Improvements-for-IMSM_NO_PLATFORM-testing.patch
  - 0060-Grow-fix-possible-memory-leak.patch
  - 0061-Grow-fix-can-t-change-bitmap-type-from-none-to-clustered.patch
  - 0062-Manage-Block-unsafe-member-failing.patch
  - 0063-Mdmonitor-Split-alert-into-separate-functions.patch
  - 0064-Monitor-block-if-monitor-modes-are-combined.patch
  - 0065-Update-mdadm-Monitor-manual.patch
  - 0066-mdadm-create-ident_init.patch
  - 0067-mdadm-Add-option-validation-for-update-subarray.patch
  - 0068-Fix-update-subarray-on-active-volume.patch
  - 0069-Add-code-specific-update-options-to-enum.patch
  - 0070-super-ddf-Remove-update_super_ddf.patch
  - 0071-super0-refactor-the-code-for-enum.patch
  - 0072-super1-refactor-the-code-for-enum.patch
  - 0073-super-intel-refactor-the-code-for-enum.patch
  - 0074-Change-update-to-enum-in-update_super-and-update_sub.patch
  - 0075-Manage-Incremental-code-refactor-string-to-enum.patch
  - 0076-Change-char-to-enum-in-context-update-refactor-code.patch
  - 0077-mdadm-udev-Don-t-handle-change-event-on-raw-devices.patch
  - 0078-Manage-do-not-check-array-state-when-drive-is-remove.patch
  - 0079-incremental-manage-do-not-verify-if-remove-is-safe.patch
  - 0080-super-intel-make-freesize-not-required-for-chunk-siz.patch
  - 0081-manage-move-comment-with-function-description.patch
  - 0082-Fix-NULL-dereference-in-super_by_fd.patch
  - 0083-Mdmonitor-Make-alert_info-global.patch
  - 0084-Mdmonitor-Pass-events-to-alert-using-enums-instead-o.patch
  - 0085-Mdmonitor-Add-helper-functions.patch
  - 0086-Add-helpers-to-determine-whether-directories-or-file.patch
  - 0087-Mdmonitor-Refactor-write_autorebuild_pid.patch
  - 0088-Mdmonitor-Refactor-check_one_sharer-for-better-error.patch
  - 0089-util.c-reorder-code-lines-in-parse_layout_faulty.patch
  - 0090-util.c-fix-memleak-in-parse_layout_faulty.patch
  - 0091-Detail.c-fix-memleak-in-Detail.patch
  - 0092-isuper-intel.c-fix-double-free-in-load_imsm_mpb.patch
  - 0093-super-intel.c-fix-memleak-in-find_disk_attached_hba.patch
  - 0094-super-ddf.c-fix-memleak-in-get_vd_num_of_subarray.patch
  - 0095-Create-goto-abort_locked-instead-of-return-1-in-erro.patch
  - 0096-Create-remove-safe_mode_delay-local-variable.patch
  - 0097-Create-Factor-out-add_disks-helpers.patch
  - 0098-mdadm-Introduce-pr_info.patch
  - 0099-mdadm-Add-write-zeros-option-for-Create.patch
  - 0100-manpage-Add-write-zeroes-option-to-manpage.patch
  - 0101-Define-alignof-using-_Alignof-when-using-C11-or-newe.patch
  - 0102-Use-existence-of-etc-initrd-release-to-detect-initrd.patch
  - 0103-Create-Fix-checking-for-container-in-update_metadata.patch</changelog>
  <changelog author="colyli@suse.de" date="1708689601">- Update mdadm-4.3 to latest status (jsc#PED-7542)
  - Remove hardcoded checkpoint interval checking
    0001-Remove-hardcoded-checkpoint-interval-checking.patch
  - monitor: refactor checkpoint update
    0002-monitor-refactor-checkpoint-update.patch
  - Super-intel: Fix first checkpoint restart
    0003-Super-intel-Fix-first-checkpoint-restart.patch
  - Grow: Move update_tail assign to Grow_reshape()
    0004-Grow-Move-update_tail-assign-to-Grow_reshape.patch
  - Add understanding output section in man
    0005-Add-understanding-output-section-in-man.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1708689602">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="colyli@suse.de" date="1720267200">- util.c: change devnm to const in mdmon functions (bsc#1225307)
  0006-util.c-change-devnm-to-const-in-mdmon-functions.patch
- Wait for mdmon when it is stared via systemd (bsc#1225307)
  0007-Wait-for-mdmon-when-it-is-stared-via-systemd.patch</changelog>
  <changelog author="colyli@suse.de" date="1726660800">- Detail: remove duplicated code (bsc#1226413)
  0008-Detail-remove-duplicated-code.patch
- mdadm: Fix native --detail --export (bsc#1226413)
  0009-mdadm-Fix-native-detail-export.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="mwilck@suse.com" date="1740657600">- Update to version 4.4 (jsc#PED-10220)
  Features:
  * Remove custom bitmap file support from Yu Kuai.
  * Custom device policies implementation from Mariusz Tkaczyk.
  * Self encrypted drives (**SED**) support for IMSM metadata from Blazej Kucman.
  * Support more than 4 disks for **IMSM** RAID10 from Mateusz Kusiak.
  * Read **IMSM** license information from ACPI tables from Blazej Kucman.
  * Support devnode in **--Incremental --remove** from Mariusz Tkaczyk.
  * Printing **IMSM** license type in **--detail-platform** from Blazej Kucman.
  * README.md from Mariusz Tkaczyk and Anna Sztukowska.
  Fixes:
  * Tests improvements from Xiao Ni and Kinga Stefaniuk.
  * Mdmon's Checkpointing improvements from Mateusz Kusiak.
  * Pass mdadm environment flags to systemd-env to enable tests from Mateusz Kusiak.
  * Superblock 1.0 uuid printing fixes from Mariusz Tkaczyk.
  * Find VMD bus manually if link is not available from Mariusz Tkaczyk.
  * Unconditional devices count printing in --detail from Anna Sztukowska.
  * Improve SIGTERM handling during reshape, from Mateusz Kusiak.
  * **Monitor.c** renamed to **Mdmonitor.c** from Kinga Stefaniuk.
  * Mdmonitor service documentation update from Mariusz Tkaczyk.
  * Rework around writing to sysfs files from Mariusz Tkaczyk.
  * Drop of HOT_REMOVE_DISK ioctl in Manage in favour of sysfs from Mariusz Tkaczyk.
  * Delegate disk removal to managemon from Mariusz Tkaczyk.
  * Some clean-ups of legacy code and functionalities like **--auto=md** from Mariusz Tkaczyk.
  * Manual clean-up, references to old kernels removed from Mariusz Tkaczyk.
  * Various static code analysis fixes.
- Add 1000-Revert-mdmonitor-Abandon-custom-configuration-files.patch
  (reverts upstream change to ignore /etc/sysconfig/mdadm)
- Drop obsolete patches (included upstream):
  * Del 0001-Remove-hardcoded-checkpoint-interval-checking.patch
  * Del 0002-monitor-refactor-checkpoint-update.patch
  * Del 0003-Super-intel-Fix-first-checkpoint-restart.patch
  * Del 0004-Grow-Move-update_tail-assign-to-Grow_reshape.patch
  * Del 0005-Add-understanding-output-section-in-man.patch
  * Del 0006-util.c-change-devnm-to-const-in-mdmon-functions.patch
  * Del 0007-Wait-for-mdmon-when-it-is-stared-via-systemd.patch
  * Del 0008-Detail-remove-duplicated-code.patch
  * Del 0009-mdadm-Fix-native-detail-export.patch
- Use obs_scm for code maintenance</changelog>
  <changelog author="mwilck@suse.com" date="1740744000">- mdopen: add sbin path to env PATH when call system("modprobe md_mod")
  (bsc#1233265)
  add 0010-mdopen-add-sbin-path-to-env-PATH-when-call-system-mo.patch</changelog>
  <changelog author="mwilck@suse.com" date="1741089600">- cleanup 1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch
  (remove a redundant macro definition)</changelog>
  <changelog author="alnovak@suse.com" date="1744286400">- IMSM RAID0 2 disks to RAID10 4 disks migration fix
  add 1006-imsm-Fix-RAID0-to-RAID10-migration.patch (bsc#1241001)</changelog>
  <changelog author="mwilck@suse.com" date="1746532800">- Add dependency on suse-module-tools for SLE15 (bsc#1242696)</changelog>
  <changelog author="mwilck@suse.com" date="1746619200">- Allow any valid minor name in md device name (bsc#1240789)
  * add 1007-mdadm-allow-any-valid-minor-number-in-md-device-name.patch</changelog>
  <changelog author="mwilck@suse.com" date="1748347200">- monitor: Add MAILFROM address to email envelope to avoid smtp auth
  errors (bsc#1241474)
  * add 1008-mdmonitor-use-MAILFROM-to-set-sendmail-envelope-send.patch</changelog>
  <changelog author="jengelh@inai.de" date="1753099200">- Stop emitting %release into program binaries [boo#1246806]</changelog>
  <changelog author="mwilck@suse.com" date="1755172800">- Fix systemd unit file handling in spec file (boo#1207266)
  * make all units known to systemd
  * restart only timers and mdmonitor.service</changelog>
  <changelog author="mwilck@suse.com" date="1762257600">- _service: pull from github.com/openSUSE/mdadm, patches now managed in git
  * delete 0010-mdopen-add-sbin-path-to-env-PATH-when-call-system-mo.patch
  * delete 1000-Revert-mdmonitor-Abandon-custom-configuration-files.patch
  * delete 1001-display-timeout-status.patch
  * delete 1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch
  * delete 1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch
  * delete 1004-call-mdadm_env.sh-from-usr-libexec-mdadm.patch
  * delete 1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch
  * delete 1006-imsm-Fix-RAID0-to-RAID10-migration.patch
  * delete 1007-mdadm-allow-any-valid-minor-number-in-md-device-name.patch
  * delete 1008-mdmonitor-use-MAILFROM-to-set-sendmail-envelope-send.patch
- New versioning scheme: add tag offset and git commit from openSUSE/mdadm repo</changelog>
  <changelog author="mwilck@suse.com" date="1762430400">- Split off the Software RAID HOWTO into a -doc package
- Update to version 4.4+29.gf8bb524b:
  * fix race between mdcheck_start.service and mdcheck_continue.service
    (bsc#1243443, bsc#1248097)
  * various fixes for mdcheck (bsc#1248097)
  * mdadm_env.sh: ignore MDADM_RAIDDEVICES if MDADM_SCAN is set
    (bsc#1229997)
- Upstream bug fixes since 4.4 (bsc#1253060)
  * mdadm: add attribute nonstring for signature
  * super-ddf: Prevent crash when handling DDF metadata
  * platform-intel: Disable legacy option ROM scan on UEFI machines
  * mdadm: fix --grow with --add for linear
  * mdadm/raid6check: add xmalloc.h to raid6check.c
  * Coverity fixes resources leaks
  * udev: persist properties of MD devices after switch_root
- _service: switch to tar_scm for better interoperabity with SLFO.</changelog>
</package>
<package pkgid="b97e5ca27a0fa9cfa90c12078e8cb8127d9907160b706ef22aa781580dc7a7ee" name="mdadm" arch="x86_64">
  <version epoch="0" ver="4.4+29.gf8bb524b" rel="150700.4.15.4"/>
  <changelog author="lnussel@suse.com" date="1690200000">- mdadm.spec: replace transitional %usrmerged macro with regular
  version check (boo#1206798)</changelog>
  <changelog author="dimstar@opensuse.org" date="1700222400">- No longer recommend smtp-daemon: this was a remainder from the
  cron configuration, which was removed back in 2018.</changelog>
  <changelog author="colyli@suse.de" date="1704715200">- Update mdadm to latest upstream state upto commit
  582945c2d3bb. (jsc#PED-7542)
  1) The testing changes are not included here.
  2) Code clean up, and more helper routines added for Manage.c,
    Monitor.c, mdadm.c, ReadMe.c, super-intel.c, super0.c, super1.c,
    Create.c, Incremental.c and so on.
  3) Man page update for mdadm.8.in.
  4) Several memory leak and double free fixes.
  5) Check /etc/initrd-release for whether systemd running on an initrd.
  - Manage: Block unsafe member failing
    0062-Manage-Block-unsafe-member-failing.patch
  - Mdmonitor: Split alert() into separate functions
    0063-Mdmonitor-Split-alert-into-separate-functions.patch
  - Monitor: block if monitor modes are combined.
    0064-Monitor-block-if-monitor-modes-are-combined.patch
  - Update mdadm Monitor manual.
    0065-Update-mdadm-Monitor-manual.patch
  - mdadm: create ident_init()
    0066-mdadm-create-ident_init.patch
  - mdadm: Add option validation for --update-subarray
    0067-mdadm-Add-option-validation-for-update-subarray.patch
  - Fix --update-subarray on active volume
    0068-Fix-update-subarray-on-active-volume.patch
  - Add code specific update options to enum.
    0069-Add-code-specific-update-options-to-enum.patch
  - super-ddf: Remove update_super_ddf.
    0070-super-ddf-Remove-update_super_ddf.patch
  - super0: refactor the code for enum
    0071-super0-refactor-the-code-for-enum.patch
  - super1: refactor the code for enum
    0072-super1-refactor-the-code-for-enum.patch
  - super-intel: refactor the code for enum
    0073-super-intel-refactor-the-code-for-enum.patch
  - Change update to enum in update_super and update_subarray
    0074-Change-update-to-enum-in-update_super-and-update_sub.patch
  - Manage&amp;Incremental: code refactor, string to enum
    0075-Manage-Incremental-code-refactor-string-to-enum.patch
  - Change char* to enum in context-&gt;update &amp; refactor code
    0076-Change-char-to-enum-in-context-update-refactor-code.patch
  - mdadm/udev: Don't handle change event on raw devices
    0077-mdadm-udev-Don-t-handle-change-event-on-raw-devices.patch
  - Manage: do not check array state when drive is removed
    0078-Manage-do-not-check-array-state-when-drive-is-remove.patch
  - incremental, manage: do not verify if remove is safe
    0079-incremental-manage-do-not-verify-if-remove-is-safe.patch
  - super-intel: make freesize not required for chunk size
    0080-super-intel-make-freesize-not-required-for-chunk-siz.patch
  - manage: move comment with function description
    0081-manage-move-comment-with-function-description.patch
  - Fix NULL dereference in super_by_fd
    0082-Fix-NULL-dereference-in-super_by_fd.patch
  - Mdmonitor: Make alert_info global
    0083-Mdmonitor-Make-alert_info-global.patch
  - Mdmonitor: Pass events to alert() using enums instead of
    0084-Mdmonitor-Pass-events-to-alert-using-enums-instead-o.patch
  - Mdmonitor: Add helper functions
    0085-Mdmonitor-Add-helper-functions.patch
  - Add helpers to determine whether directories or files are
    0086-Add-helpers-to-determine-whether-directories-or-file.patch
  - Mdmonitor: Refactor write_autorebuild_pid()
    0087-Mdmonitor-Refactor-write_autorebuild_pid.patch
  - Mdmonitor: Refactor check_one_sharer() for better error
    0088-Mdmonitor-Refactor-check_one_sharer-for-better-error.patch
  - util.c: reorder code lines in parse_layout_faulty()
    0089-util.c-reorder-code-lines-in-parse_layout_faulty.patch
  - util.c: fix memleak in parse_layout_faulty()
    0090-util.c-fix-memleak-in-parse_layout_faulty.patch
  - Detail.c: fix memleak in Detail()
    0091-Detail.c-fix-memleak-in-Detail.patch
  - isuper-intel.c: fix double free in load_imsm_mpb()
    0092-isuper-intel.c-fix-double-free-in-load_imsm_mpb.patch
  - super-intel.c: fix memleak in find_disk_attached_hba()
    0093-super-intel.c-fix-memleak-in-find_disk_attached_hba.patch
  - super-ddf.c: fix memleak in get_vd_num_of_subarray()
    0094-super-ddf.c-fix-memleak-in-get_vd_num_of_subarray.patch
  - Create: goto abort_locked instead of return 1 in error path
    0095-Create-goto-abort_locked-instead-of-return-1-in-erro.patch
  - Create: remove safe_mode_delay local variable
    0096-Create-remove-safe_mode_delay-local-variable.patch
  - Create: Factor out add_disks() helpers
    0097-Create-Factor-out-add_disks-helpers.patch
  - mdadm: Introduce pr_info()
    0098-mdadm-Introduce-pr_info.patch
  - mdadm: Add --write-zeros option for Create
    0099-mdadm-Add-write-zeros-option-for-Create.patch
  - manpage: Add --write-zeroes option to manpage
    0100-manpage-Add-write-zeroes-option-to-manpage.patch
  - Define alignof using _Alignof when using C11 or newer
    0101-Define-alignof-using-_Alignof-when-using-C11-or-newe.patch
  - Use existence of /etc/initrd-release to detect initrd.
    0102-Use-existence-of-etc-initrd-release-to-detect-initrd.patch
  - Create: Fix checking for container in update_metadata
    0103-Create-Fix-checking-for-container-in-update_metadata.patch</changelog>
  <changelog author="colyli@suse.de" date="1708689600">- Upgrade to mdadm-4.3 (jsc#PED-7542). Beside previous already back
  ported patches, mdadm-4.3 has the following extra changes since
  last update upto commit 582945c2d3bb,
  - Fix null pointer for incremental in mdadm.
  - Super1: fix truncation check for journal device.
  - Fix some cases eyesore formatting.
  - Bump minimum kernel version to 2.6.32.
  - Remove the config files in mdcheck_start|continue service.
  - Define DEV_MD_DIR, DEV_NUM_PREF, is_devname_ignore(),
    ident_set_devname().
  - Enable RAID for SATA under VMD.
  - Imsm: Fix possible segfault in check_no_platform()
  - Imsm refactor on imsm_get_free_size(), merge_extents().
  - Imsm: return free space after volume for expand.
  - Imsm: fix free space calculations.
  - Add secure gethostname() wrapper.
  - mdadm: Stop mdcheck_continue timer when mdcheck_start service can
    finish check.
  - Fix memory leak in files Assemble.c, Kill.c, Manage.c, mdadm.c.
  - Fix unsafe string functions.
  - platform-intel: limit guid length.
  - Imsm: Add reading vmd register for finding imsm capability.
  - Add compiler defenses flags.
  - Assemble: fix redundant memory free.
  - More regression test cases added into tests.
  - Mdadm: set ident.devname if applicable.
  - Mdadm: refactor ident-&gt;name handling.
  - Mdadm: Follow POSIX Portable Character Set.
  - Incremental: remove obsoleted calls to udisks.
  - Fix race of "mdadm --add" and "mdadm --incremental".
  - mdadm/ddf: Abort when raid disk is smaller in getinfo_super_ddf.
  - mdadm/super1: Add MD_FEATURE_RAID0_LAYOUT if kernel&gt;=5.4.
  - Fix assembling RAID volume by using incremental.
  - Mdmonitor: Improve udev event handling.
  - Udev: Move udev_block() and udev_unblock() into udev.c.
  - Manage: adjust checking subarray state in update_subarray.
  - Super1: remove support for name= in config.
  - Mdadm: fix update=resync regression.
- Rebase to keep consistent behavior for current code base.
  - 1004-call-mdadm_env.sh-from-usr-libexec-mdadm.patch
- The following patches are moved from package because they are all
  included in mdadm-4.3,
  - 0001-Unify-error-message.patch
  - 0002-mdadm-Fix-double-free.patch
  - 0003-Grow_reshape-Add-r0-grow-size-error-message-and-upda.patch
  - 0004-udev-adapt-rules-to-systemd-v247.patch
  - 0005-Replace-error-prone-signal-with-sigaction.patch
  - 0006-mdadm-Respect-config-file-location-in-man.patch
  - 0007-mdadm-Update-ReadMe.patch
  - 0008-mdadm-Update-config-man-regarding-default-files-and-.patch
  - 0009-mdadm-Update-config-manual.patch
  - 0010-Create-Build-use-default_layout.patch
  - 0011-mdadm-add-map_num_s.patch
  - 0012-mdmon-Stop-parsing-duplicate-options.patch
  - 0013-Grow-block-n-on-external-volumes.patch
  - 0014-Incremental-Fix-possible-memory-and-resource-leaks.patch
  - 0015-Mdmonitor-Fix-segfault.patch
  - 0016-Mdmonitor-Improve-logging-method.patch
  - 0017-Fix-possible-NULL-ptr-dereferences-and-memory-leaks.patch
  - 0018-imsm-Remove-possibility-for-get_imsm_dev-to-return-N.patch
  - 0019-Revert-mdadm-fix-coredump-of-mdadm-monitor-r.patch
  - 0020-util-replace-ioctl-use-with-function.patch
  - 0021-mdadm-super1-restore-commit-45a87c2f31335-to-fix-clu.patch
  - 0022-imsm-introduce-get_disk_slot_in_dev.patch
  - 0023-imsm-use-same-slot-across-container.patch
  - 0024-imsm-block-changing-slots-during-creation.patch
  - 0025-mdadm-block-update-ppl-for-non-raid456-levels.patch
  - 0026-mdadm-Fix-array-size-mismatch-after-grow.patch
  - 0027-mdadm-Remove-dead-code-in-imsm_fix_size_mismatch.patch
  - 0028-Monitor-use-devname-as-char-array-instead-of-pointer.patch
  - 0029-Monitor-use-snprintf-to-fill-device-name.patch
  - 0030-Makefile-Don-t-build-static-build-with-everything-an.patch
  - 0031-DDF-Cleanup-validate_geometry_ddf_container.patch
  - 0032-DDF-Fix-NULL-pointer-dereference-in-validate_geometr.patch
  - 0033-mdadm-Grow-Fix-use-after-close-bug-by-closing-after-.patch
  - 0034-monitor-Avoid-segfault-when-calling-NULL-get_bad_blo.patch
  - 0035-mdadm-Fix-mdadm-r-remove-option-regression.patch
  - 0036-mdadm-Fix-optional-write-behind-parameter.patch
  - 0037-mdadm-Replace-obsolete-usleep-with-nanosleep.patch
  - 0038-mdadm-remove-symlink-option.patch
  - 0039-mdadm-move-data_offset-to-struct-shape.patch
  - 0040-mdadm-Don-t-open-md-device-for-CREATE-and-ASSEMBLE.patch
  - 0041-Grow-Split-Grow_reshape-into-helper-function.patch
  - 0042-Assemble-check-if-device-is-container-before-schedul.patch
  - 0043-super1-report-truncated-device.patch
  - 0044-mdadm-Correct-typos-punctuation-and-grammar-in-man.patch
  - 0046-Monitor-Fix-statelist-memory-leaks.patch
  - 0047-mdadm-added-support-for-Intel-Alderlake-RST-on-VMD-p.patch
  - 0048-mdadm-Add-Documentation-entries-to-systemd-services.patch
  - 0049-ReadMe-fix-command-line-help.patch
  - 0050-mdadm-replace-container-level-checking-with-inline.patch
  - 0051-Mdmonitor-Omit-non-md-devices.patch
  - 0052-mdmon-fix-segfault.patch
  - 0053-util-remove-obsolete-code-from-get_md_name.patch
  - 0054-mdmon-don-t-test-both-all-and-container_name.patch
  - 0055-mdmon-change-systemd-unit-file-to-use-foreground.patch
  - 0056-mdmon-Remove-need-for-KillMode-none.patch
  - 0057-mdmon-Improve-switchroot-interactions.patch
  - 0058-mdopen-always-try-create_named_array.patch
  - 0059-Improvements-for-IMSM_NO_PLATFORM-testing.patch
  - 0060-Grow-fix-possible-memory-leak.patch
  - 0061-Grow-fix-can-t-change-bitmap-type-from-none-to-clustered.patch
  - 0062-Manage-Block-unsafe-member-failing.patch
  - 0063-Mdmonitor-Split-alert-into-separate-functions.patch
  - 0064-Monitor-block-if-monitor-modes-are-combined.patch
  - 0065-Update-mdadm-Monitor-manual.patch
  - 0066-mdadm-create-ident_init.patch
  - 0067-mdadm-Add-option-validation-for-update-subarray.patch
  - 0068-Fix-update-subarray-on-active-volume.patch
  - 0069-Add-code-specific-update-options-to-enum.patch
  - 0070-super-ddf-Remove-update_super_ddf.patch
  - 0071-super0-refactor-the-code-for-enum.patch
  - 0072-super1-refactor-the-code-for-enum.patch
  - 0073-super-intel-refactor-the-code-for-enum.patch
  - 0074-Change-update-to-enum-in-update_super-and-update_sub.patch
  - 0075-Manage-Incremental-code-refactor-string-to-enum.patch
  - 0076-Change-char-to-enum-in-context-update-refactor-code.patch
  - 0077-mdadm-udev-Don-t-handle-change-event-on-raw-devices.patch
  - 0078-Manage-do-not-check-array-state-when-drive-is-remove.patch
  - 0079-incremental-manage-do-not-verify-if-remove-is-safe.patch
  - 0080-super-intel-make-freesize-not-required-for-chunk-siz.patch
  - 0081-manage-move-comment-with-function-description.patch
  - 0082-Fix-NULL-dereference-in-super_by_fd.patch
  - 0083-Mdmonitor-Make-alert_info-global.patch
  - 0084-Mdmonitor-Pass-events-to-alert-using-enums-instead-o.patch
  - 0085-Mdmonitor-Add-helper-functions.patch
  - 0086-Add-helpers-to-determine-whether-directories-or-file.patch
  - 0087-Mdmonitor-Refactor-write_autorebuild_pid.patch
  - 0088-Mdmonitor-Refactor-check_one_sharer-for-better-error.patch
  - 0089-util.c-reorder-code-lines-in-parse_layout_faulty.patch
  - 0090-util.c-fix-memleak-in-parse_layout_faulty.patch
  - 0091-Detail.c-fix-memleak-in-Detail.patch
  - 0092-isuper-intel.c-fix-double-free-in-load_imsm_mpb.patch
  - 0093-super-intel.c-fix-memleak-in-find_disk_attached_hba.patch
  - 0094-super-ddf.c-fix-memleak-in-get_vd_num_of_subarray.patch
  - 0095-Create-goto-abort_locked-instead-of-return-1-in-erro.patch
  - 0096-Create-remove-safe_mode_delay-local-variable.patch
  - 0097-Create-Factor-out-add_disks-helpers.patch
  - 0098-mdadm-Introduce-pr_info.patch
  - 0099-mdadm-Add-write-zeros-option-for-Create.patch
  - 0100-manpage-Add-write-zeroes-option-to-manpage.patch
  - 0101-Define-alignof-using-_Alignof-when-using-C11-or-newe.patch
  - 0102-Use-existence-of-etc-initrd-release-to-detect-initrd.patch
  - 0103-Create-Fix-checking-for-container-in-update_metadata.patch</changelog>
  <changelog author="colyli@suse.de" date="1708689601">- Update mdadm-4.3 to latest status (jsc#PED-7542)
  - Remove hardcoded checkpoint interval checking
    0001-Remove-hardcoded-checkpoint-interval-checking.patch
  - monitor: refactor checkpoint update
    0002-monitor-refactor-checkpoint-update.patch
  - Super-intel: Fix first checkpoint restart
    0003-Super-intel-Fix-first-checkpoint-restart.patch
  - Grow: Move update_tail assign to Grow_reshape()
    0004-Grow-Move-update_tail-assign-to-Grow_reshape.patch
  - Add understanding output section in man
    0005-Add-understanding-output-section-in-man.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1708689602">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="colyli@suse.de" date="1720267200">- util.c: change devnm to const in mdmon functions (bsc#1225307)
  0006-util.c-change-devnm-to-const-in-mdmon-functions.patch
- Wait for mdmon when it is stared via systemd (bsc#1225307)
  0007-Wait-for-mdmon-when-it-is-stared-via-systemd.patch</changelog>
  <changelog author="colyli@suse.de" date="1726660800">- Detail: remove duplicated code (bsc#1226413)
  0008-Detail-remove-duplicated-code.patch
- mdadm: Fix native --detail --export (bsc#1226413)
  0009-mdadm-Fix-native-detail-export.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="mwilck@suse.com" date="1740657600">- Update to version 4.4 (jsc#PED-10220)
  Features:
  * Remove custom bitmap file support from Yu Kuai.
  * Custom device policies implementation from Mariusz Tkaczyk.
  * Self encrypted drives (**SED**) support for IMSM metadata from Blazej Kucman.
  * Support more than 4 disks for **IMSM** RAID10 from Mateusz Kusiak.
  * Read **IMSM** license information from ACPI tables from Blazej Kucman.
  * Support devnode in **--Incremental --remove** from Mariusz Tkaczyk.
  * Printing **IMSM** license type in **--detail-platform** from Blazej Kucman.
  * README.md from Mariusz Tkaczyk and Anna Sztukowska.
  Fixes:
  * Tests improvements from Xiao Ni and Kinga Stefaniuk.
  * Mdmon's Checkpointing improvements from Mateusz Kusiak.
  * Pass mdadm environment flags to systemd-env to enable tests from Mateusz Kusiak.
  * Superblock 1.0 uuid printing fixes from Mariusz Tkaczyk.
  * Find VMD bus manually if link is not available from Mariusz Tkaczyk.
  * Unconditional devices count printing in --detail from Anna Sztukowska.
  * Improve SIGTERM handling during reshape, from Mateusz Kusiak.
  * **Monitor.c** renamed to **Mdmonitor.c** from Kinga Stefaniuk.
  * Mdmonitor service documentation update from Mariusz Tkaczyk.
  * Rework around writing to sysfs files from Mariusz Tkaczyk.
  * Drop of HOT_REMOVE_DISK ioctl in Manage in favour of sysfs from Mariusz Tkaczyk.
  * Delegate disk removal to managemon from Mariusz Tkaczyk.
  * Some clean-ups of legacy code and functionalities like **--auto=md** from Mariusz Tkaczyk.
  * Manual clean-up, references to old kernels removed from Mariusz Tkaczyk.
  * Various static code analysis fixes.
- Add 1000-Revert-mdmonitor-Abandon-custom-configuration-files.patch
  (reverts upstream change to ignore /etc/sysconfig/mdadm)
- Drop obsolete patches (included upstream):
  * Del 0001-Remove-hardcoded-checkpoint-interval-checking.patch
  * Del 0002-monitor-refactor-checkpoint-update.patch
  * Del 0003-Super-intel-Fix-first-checkpoint-restart.patch
  * Del 0004-Grow-Move-update_tail-assign-to-Grow_reshape.patch
  * Del 0005-Add-understanding-output-section-in-man.patch
  * Del 0006-util.c-change-devnm-to-const-in-mdmon-functions.patch
  * Del 0007-Wait-for-mdmon-when-it-is-stared-via-systemd.patch
  * Del 0008-Detail-remove-duplicated-code.patch
  * Del 0009-mdadm-Fix-native-detail-export.patch
- Use obs_scm for code maintenance</changelog>
  <changelog author="mwilck@suse.com" date="1740744000">- mdopen: add sbin path to env PATH when call system("modprobe md_mod")
  (bsc#1233265)
  add 0010-mdopen-add-sbin-path-to-env-PATH-when-call-system-mo.patch</changelog>
  <changelog author="mwilck@suse.com" date="1741089600">- cleanup 1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch
  (remove a redundant macro definition)</changelog>
  <changelog author="alnovak@suse.com" date="1744286400">- IMSM RAID0 2 disks to RAID10 4 disks migration fix
  add 1006-imsm-Fix-RAID0-to-RAID10-migration.patch (bsc#1241001)</changelog>
  <changelog author="mwilck@suse.com" date="1746532800">- Add dependency on suse-module-tools for SLE15 (bsc#1242696)</changelog>
  <changelog author="mwilck@suse.com" date="1746619200">- Allow any valid minor name in md device name (bsc#1240789)
  * add 1007-mdadm-allow-any-valid-minor-number-in-md-device-name.patch</changelog>
  <changelog author="mwilck@suse.com" date="1748347200">- monitor: Add MAILFROM address to email envelope to avoid smtp auth
  errors (bsc#1241474)
  * add 1008-mdmonitor-use-MAILFROM-to-set-sendmail-envelope-send.patch</changelog>
  <changelog author="jengelh@inai.de" date="1753099200">- Stop emitting %release into program binaries [boo#1246806]</changelog>
  <changelog author="mwilck@suse.com" date="1755172800">- Fix systemd unit file handling in spec file (boo#1207266)
  * make all units known to systemd
  * restart only timers and mdmonitor.service</changelog>
  <changelog author="mwilck@suse.com" date="1762257600">- _service: pull from github.com/openSUSE/mdadm, patches now managed in git
  * delete 0010-mdopen-add-sbin-path-to-env-PATH-when-call-system-mo.patch
  * delete 1000-Revert-mdmonitor-Abandon-custom-configuration-files.patch
  * delete 1001-display-timeout-status.patch
  * delete 1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch
  * delete 1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch
  * delete 1004-call-mdadm_env.sh-from-usr-libexec-mdadm.patch
  * delete 1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch
  * delete 1006-imsm-Fix-RAID0-to-RAID10-migration.patch
  * delete 1007-mdadm-allow-any-valid-minor-number-in-md-device-name.patch
  * delete 1008-mdmonitor-use-MAILFROM-to-set-sendmail-envelope-send.patch
- New versioning scheme: add tag offset and git commit from openSUSE/mdadm repo</changelog>
  <changelog author="mwilck@suse.com" date="1762430400">- Split off the Software RAID HOWTO into a -doc package
- Update to version 4.4+29.gf8bb524b:
  * fix race between mdcheck_start.service and mdcheck_continue.service
    (bsc#1243443, bsc#1248097)
  * various fixes for mdcheck (bsc#1248097)
  * mdadm_env.sh: ignore MDADM_RAIDDEVICES if MDADM_SCAN is set
    (bsc#1229997)
- Upstream bug fixes since 4.4 (bsc#1253060)
  * mdadm: add attribute nonstring for signature
  * super-ddf: Prevent crash when handling DDF metadata
  * platform-intel: Disable legacy option ROM scan on UEFI machines
  * mdadm: fix --grow with --add for linear
  * mdadm/raid6check: add xmalloc.h to raid6check.c
  * Coverity fixes resources leaks
  * udev: persist properties of MD devices after switch_root
- _service: switch to tar_scm for better interoperabity with SLFO.</changelog>
</package>
<package pkgid="69ec495c5fb28ae78775281a44294149a513627ceabe16fb7ef80196300b6404" name="mdadm" arch="src">
  <version epoch="0" ver="4.4+31.g541b40d3" rel="150700.4.18.1"/>
  <changelog author="colyli@suse.de" date="1704715200">- Update mdadm to latest upstream state upto commit
  582945c2d3bb. (jsc#PED-7542)
  1) The testing changes are not included here.
  2) Code clean up, and more helper routines added for Manage.c,
    Monitor.c, mdadm.c, ReadMe.c, super-intel.c, super0.c, super1.c,
    Create.c, Incremental.c and so on.
  3) Man page update for mdadm.8.in.
  4) Several memory leak and double free fixes.
  5) Check /etc/initrd-release for whether systemd running on an initrd.
  - Manage: Block unsafe member failing
    0062-Manage-Block-unsafe-member-failing.patch
  - Mdmonitor: Split alert() into separate functions
    0063-Mdmonitor-Split-alert-into-separate-functions.patch
  - Monitor: block if monitor modes are combined.
    0064-Monitor-block-if-monitor-modes-are-combined.patch
  - Update mdadm Monitor manual.
    0065-Update-mdadm-Monitor-manual.patch
  - mdadm: create ident_init()
    0066-mdadm-create-ident_init.patch
  - mdadm: Add option validation for --update-subarray
    0067-mdadm-Add-option-validation-for-update-subarray.patch
  - Fix --update-subarray on active volume
    0068-Fix-update-subarray-on-active-volume.patch
  - Add code specific update options to enum.
    0069-Add-code-specific-update-options-to-enum.patch
  - super-ddf: Remove update_super_ddf.
    0070-super-ddf-Remove-update_super_ddf.patch
  - super0: refactor the code for enum
    0071-super0-refactor-the-code-for-enum.patch
  - super1: refactor the code for enum
    0072-super1-refactor-the-code-for-enum.patch
  - super-intel: refactor the code for enum
    0073-super-intel-refactor-the-code-for-enum.patch
  - Change update to enum in update_super and update_subarray
    0074-Change-update-to-enum-in-update_super-and-update_sub.patch
  - Manage&amp;Incremental: code refactor, string to enum
    0075-Manage-Incremental-code-refactor-string-to-enum.patch
  - Change char* to enum in context-&gt;update &amp; refactor code
    0076-Change-char-to-enum-in-context-update-refactor-code.patch
  - mdadm/udev: Don't handle change event on raw devices
    0077-mdadm-udev-Don-t-handle-change-event-on-raw-devices.patch
  - Manage: do not check array state when drive is removed
    0078-Manage-do-not-check-array-state-when-drive-is-remove.patch
  - incremental, manage: do not verify if remove is safe
    0079-incremental-manage-do-not-verify-if-remove-is-safe.patch
  - super-intel: make freesize not required for chunk size
    0080-super-intel-make-freesize-not-required-for-chunk-siz.patch
  - manage: move comment with function description
    0081-manage-move-comment-with-function-description.patch
  - Fix NULL dereference in super_by_fd
    0082-Fix-NULL-dereference-in-super_by_fd.patch
  - Mdmonitor: Make alert_info global
    0083-Mdmonitor-Make-alert_info-global.patch
  - Mdmonitor: Pass events to alert() using enums instead of
    0084-Mdmonitor-Pass-events-to-alert-using-enums-instead-o.patch
  - Mdmonitor: Add helper functions
    0085-Mdmonitor-Add-helper-functions.patch
  - Add helpers to determine whether directories or files are
    0086-Add-helpers-to-determine-whether-directories-or-file.patch
  - Mdmonitor: Refactor write_autorebuild_pid()
    0087-Mdmonitor-Refactor-write_autorebuild_pid.patch
  - Mdmonitor: Refactor check_one_sharer() for better error
    0088-Mdmonitor-Refactor-check_one_sharer-for-better-error.patch
  - util.c: reorder code lines in parse_layout_faulty()
    0089-util.c-reorder-code-lines-in-parse_layout_faulty.patch
  - util.c: fix memleak in parse_layout_faulty()
    0090-util.c-fix-memleak-in-parse_layout_faulty.patch
  - Detail.c: fix memleak in Detail()
    0091-Detail.c-fix-memleak-in-Detail.patch
  - isuper-intel.c: fix double free in load_imsm_mpb()
    0092-isuper-intel.c-fix-double-free-in-load_imsm_mpb.patch
  - super-intel.c: fix memleak in find_disk_attached_hba()
    0093-super-intel.c-fix-memleak-in-find_disk_attached_hba.patch
  - super-ddf.c: fix memleak in get_vd_num_of_subarray()
    0094-super-ddf.c-fix-memleak-in-get_vd_num_of_subarray.patch
  - Create: goto abort_locked instead of return 1 in error path
    0095-Create-goto-abort_locked-instead-of-return-1-in-erro.patch
  - Create: remove safe_mode_delay local variable
    0096-Create-remove-safe_mode_delay-local-variable.patch
  - Create: Factor out add_disks() helpers
    0097-Create-Factor-out-add_disks-helpers.patch
  - mdadm: Introduce pr_info()
    0098-mdadm-Introduce-pr_info.patch
  - mdadm: Add --write-zeros option for Create
    0099-mdadm-Add-write-zeros-option-for-Create.patch
  - manpage: Add --write-zeroes option to manpage
    0100-manpage-Add-write-zeroes-option-to-manpage.patch
  - Define alignof using _Alignof when using C11 or newer
    0101-Define-alignof-using-_Alignof-when-using-C11-or-newe.patch
  - Use existence of /etc/initrd-release to detect initrd.
    0102-Use-existence-of-etc-initrd-release-to-detect-initrd.patch
  - Create: Fix checking for container in update_metadata
    0103-Create-Fix-checking-for-container-in-update_metadata.patch</changelog>
  <changelog author="colyli@suse.de" date="1708689600">- Upgrade to mdadm-4.3 (jsc#PED-7542). Beside previous already back
  ported patches, mdadm-4.3 has the following extra changes since
  last update upto commit 582945c2d3bb,
  - Fix null pointer for incremental in mdadm.
  - Super1: fix truncation check for journal device.
  - Fix some cases eyesore formatting.
  - Bump minimum kernel version to 2.6.32.
  - Remove the config files in mdcheck_start|continue service.
  - Define DEV_MD_DIR, DEV_NUM_PREF, is_devname_ignore(),
    ident_set_devname().
  - Enable RAID for SATA under VMD.
  - Imsm: Fix possible segfault in check_no_platform()
  - Imsm refactor on imsm_get_free_size(), merge_extents().
  - Imsm: return free space after volume for expand.
  - Imsm: fix free space calculations.
  - Add secure gethostname() wrapper.
  - mdadm: Stop mdcheck_continue timer when mdcheck_start service can
    finish check.
  - Fix memory leak in files Assemble.c, Kill.c, Manage.c, mdadm.c.
  - Fix unsafe string functions.
  - platform-intel: limit guid length.
  - Imsm: Add reading vmd register for finding imsm capability.
  - Add compiler defenses flags.
  - Assemble: fix redundant memory free.
  - More regression test cases added into tests.
  - Mdadm: set ident.devname if applicable.
  - Mdadm: refactor ident-&gt;name handling.
  - Mdadm: Follow POSIX Portable Character Set.
  - Incremental: remove obsoleted calls to udisks.
  - Fix race of "mdadm --add" and "mdadm --incremental".
  - mdadm/ddf: Abort when raid disk is smaller in getinfo_super_ddf.
  - mdadm/super1: Add MD_FEATURE_RAID0_LAYOUT if kernel&gt;=5.4.
  - Fix assembling RAID volume by using incremental.
  - Mdmonitor: Improve udev event handling.
  - Udev: Move udev_block() and udev_unblock() into udev.c.
  - Manage: adjust checking subarray state in update_subarray.
  - Super1: remove support for name= in config.
  - Mdadm: fix update=resync regression.
- Rebase to keep consistent behavior for current code base.
  - 1004-call-mdadm_env.sh-from-usr-libexec-mdadm.patch
- The following patches are moved from package because they are all
  included in mdadm-4.3,
  - 0001-Unify-error-message.patch
  - 0002-mdadm-Fix-double-free.patch
  - 0003-Grow_reshape-Add-r0-grow-size-error-message-and-upda.patch
  - 0004-udev-adapt-rules-to-systemd-v247.patch
  - 0005-Replace-error-prone-signal-with-sigaction.patch
  - 0006-mdadm-Respect-config-file-location-in-man.patch
  - 0007-mdadm-Update-ReadMe.patch
  - 0008-mdadm-Update-config-man-regarding-default-files-and-.patch
  - 0009-mdadm-Update-config-manual.patch
  - 0010-Create-Build-use-default_layout.patch
  - 0011-mdadm-add-map_num_s.patch
  - 0012-mdmon-Stop-parsing-duplicate-options.patch
  - 0013-Grow-block-n-on-external-volumes.patch
  - 0014-Incremental-Fix-possible-memory-and-resource-leaks.patch
  - 0015-Mdmonitor-Fix-segfault.patch
  - 0016-Mdmonitor-Improve-logging-method.patch
  - 0017-Fix-possible-NULL-ptr-dereferences-and-memory-leaks.patch
  - 0018-imsm-Remove-possibility-for-get_imsm_dev-to-return-N.patch
  - 0019-Revert-mdadm-fix-coredump-of-mdadm-monitor-r.patch
  - 0020-util-replace-ioctl-use-with-function.patch
  - 0021-mdadm-super1-restore-commit-45a87c2f31335-to-fix-clu.patch
  - 0022-imsm-introduce-get_disk_slot_in_dev.patch
  - 0023-imsm-use-same-slot-across-container.patch
  - 0024-imsm-block-changing-slots-during-creation.patch
  - 0025-mdadm-block-update-ppl-for-non-raid456-levels.patch
  - 0026-mdadm-Fix-array-size-mismatch-after-grow.patch
  - 0027-mdadm-Remove-dead-code-in-imsm_fix_size_mismatch.patch
  - 0028-Monitor-use-devname-as-char-array-instead-of-pointer.patch
  - 0029-Monitor-use-snprintf-to-fill-device-name.patch
  - 0030-Makefile-Don-t-build-static-build-with-everything-an.patch
  - 0031-DDF-Cleanup-validate_geometry_ddf_container.patch
  - 0032-DDF-Fix-NULL-pointer-dereference-in-validate_geometr.patch
  - 0033-mdadm-Grow-Fix-use-after-close-bug-by-closing-after-.patch
  - 0034-monitor-Avoid-segfault-when-calling-NULL-get_bad_blo.patch
  - 0035-mdadm-Fix-mdadm-r-remove-option-regression.patch
  - 0036-mdadm-Fix-optional-write-behind-parameter.patch
  - 0037-mdadm-Replace-obsolete-usleep-with-nanosleep.patch
  - 0038-mdadm-remove-symlink-option.patch
  - 0039-mdadm-move-data_offset-to-struct-shape.patch
  - 0040-mdadm-Don-t-open-md-device-for-CREATE-and-ASSEMBLE.patch
  - 0041-Grow-Split-Grow_reshape-into-helper-function.patch
  - 0042-Assemble-check-if-device-is-container-before-schedul.patch
  - 0043-super1-report-truncated-device.patch
  - 0044-mdadm-Correct-typos-punctuation-and-grammar-in-man.patch
  - 0046-Monitor-Fix-statelist-memory-leaks.patch
  - 0047-mdadm-added-support-for-Intel-Alderlake-RST-on-VMD-p.patch
  - 0048-mdadm-Add-Documentation-entries-to-systemd-services.patch
  - 0049-ReadMe-fix-command-line-help.patch
  - 0050-mdadm-replace-container-level-checking-with-inline.patch
  - 0051-Mdmonitor-Omit-non-md-devices.patch
  - 0052-mdmon-fix-segfault.patch
  - 0053-util-remove-obsolete-code-from-get_md_name.patch
  - 0054-mdmon-don-t-test-both-all-and-container_name.patch
  - 0055-mdmon-change-systemd-unit-file-to-use-foreground.patch
  - 0056-mdmon-Remove-need-for-KillMode-none.patch
  - 0057-mdmon-Improve-switchroot-interactions.patch
  - 0058-mdopen-always-try-create_named_array.patch
  - 0059-Improvements-for-IMSM_NO_PLATFORM-testing.patch
  - 0060-Grow-fix-possible-memory-leak.patch
  - 0061-Grow-fix-can-t-change-bitmap-type-from-none-to-clustered.patch
  - 0062-Manage-Block-unsafe-member-failing.patch
  - 0063-Mdmonitor-Split-alert-into-separate-functions.patch
  - 0064-Monitor-block-if-monitor-modes-are-combined.patch
  - 0065-Update-mdadm-Monitor-manual.patch
  - 0066-mdadm-create-ident_init.patch
  - 0067-mdadm-Add-option-validation-for-update-subarray.patch
  - 0068-Fix-update-subarray-on-active-volume.patch
  - 0069-Add-code-specific-update-options-to-enum.patch
  - 0070-super-ddf-Remove-update_super_ddf.patch
  - 0071-super0-refactor-the-code-for-enum.patch
  - 0072-super1-refactor-the-code-for-enum.patch
  - 0073-super-intel-refactor-the-code-for-enum.patch
  - 0074-Change-update-to-enum-in-update_super-and-update_sub.patch
  - 0075-Manage-Incremental-code-refactor-string-to-enum.patch
  - 0076-Change-char-to-enum-in-context-update-refactor-code.patch
  - 0077-mdadm-udev-Don-t-handle-change-event-on-raw-devices.patch
  - 0078-Manage-do-not-check-array-state-when-drive-is-remove.patch
  - 0079-incremental-manage-do-not-verify-if-remove-is-safe.patch
  - 0080-super-intel-make-freesize-not-required-for-chunk-siz.patch
  - 0081-manage-move-comment-with-function-description.patch
  - 0082-Fix-NULL-dereference-in-super_by_fd.patch
  - 0083-Mdmonitor-Make-alert_info-global.patch
  - 0084-Mdmonitor-Pass-events-to-alert-using-enums-instead-o.patch
  - 0085-Mdmonitor-Add-helper-functions.patch
  - 0086-Add-helpers-to-determine-whether-directories-or-file.patch
  - 0087-Mdmonitor-Refactor-write_autorebuild_pid.patch
  - 0088-Mdmonitor-Refactor-check_one_sharer-for-better-error.patch
  - 0089-util.c-reorder-code-lines-in-parse_layout_faulty.patch
  - 0090-util.c-fix-memleak-in-parse_layout_faulty.patch
  - 0091-Detail.c-fix-memleak-in-Detail.patch
  - 0092-isuper-intel.c-fix-double-free-in-load_imsm_mpb.patch
  - 0093-super-intel.c-fix-memleak-in-find_disk_attached_hba.patch
  - 0094-super-ddf.c-fix-memleak-in-get_vd_num_of_subarray.patch
  - 0095-Create-goto-abort_locked-instead-of-return-1-in-erro.patch
  - 0096-Create-remove-safe_mode_delay-local-variable.patch
  - 0097-Create-Factor-out-add_disks-helpers.patch
  - 0098-mdadm-Introduce-pr_info.patch
  - 0099-mdadm-Add-write-zeros-option-for-Create.patch
  - 0100-manpage-Add-write-zeroes-option-to-manpage.patch
  - 0101-Define-alignof-using-_Alignof-when-using-C11-or-newe.patch
  - 0102-Use-existence-of-etc-initrd-release-to-detect-initrd.patch
  - 0103-Create-Fix-checking-for-container-in-update_metadata.patch</changelog>
  <changelog author="colyli@suse.de" date="1708689601">- Update mdadm-4.3 to latest status (jsc#PED-7542)
  - Remove hardcoded checkpoint interval checking
    0001-Remove-hardcoded-checkpoint-interval-checking.patch
  - monitor: refactor checkpoint update
    0002-monitor-refactor-checkpoint-update.patch
  - Super-intel: Fix first checkpoint restart
    0003-Super-intel-Fix-first-checkpoint-restart.patch
  - Grow: Move update_tail assign to Grow_reshape()
    0004-Grow-Move-update_tail-assign-to-Grow_reshape.patch
  - Add understanding output section in man
    0005-Add-understanding-output-section-in-man.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1708689602">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="colyli@suse.de" date="1720267200">- util.c: change devnm to const in mdmon functions (bsc#1225307)
  0006-util.c-change-devnm-to-const-in-mdmon-functions.patch
- Wait for mdmon when it is stared via systemd (bsc#1225307)
  0007-Wait-for-mdmon-when-it-is-stared-via-systemd.patch</changelog>
  <changelog author="colyli@suse.de" date="1726660800">- Detail: remove duplicated code (bsc#1226413)
  0008-Detail-remove-duplicated-code.patch
- mdadm: Fix native --detail --export (bsc#1226413)
  0009-mdadm-Fix-native-detail-export.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="mwilck@suse.com" date="1740657600">- Update to version 4.4 (jsc#PED-10220)
  Features:
  * Remove custom bitmap file support from Yu Kuai.
  * Custom device policies implementation from Mariusz Tkaczyk.
  * Self encrypted drives (**SED**) support for IMSM metadata from Blazej Kucman.
  * Support more than 4 disks for **IMSM** RAID10 from Mateusz Kusiak.
  * Read **IMSM** license information from ACPI tables from Blazej Kucman.
  * Support devnode in **--Incremental --remove** from Mariusz Tkaczyk.
  * Printing **IMSM** license type in **--detail-platform** from Blazej Kucman.
  * README.md from Mariusz Tkaczyk and Anna Sztukowska.
  Fixes:
  * Tests improvements from Xiao Ni and Kinga Stefaniuk.
  * Mdmon's Checkpointing improvements from Mateusz Kusiak.
  * Pass mdadm environment flags to systemd-env to enable tests from Mateusz Kusiak.
  * Superblock 1.0 uuid printing fixes from Mariusz Tkaczyk.
  * Find VMD bus manually if link is not available from Mariusz Tkaczyk.
  * Unconditional devices count printing in --detail from Anna Sztukowska.
  * Improve SIGTERM handling during reshape, from Mateusz Kusiak.
  * **Monitor.c** renamed to **Mdmonitor.c** from Kinga Stefaniuk.
  * Mdmonitor service documentation update from Mariusz Tkaczyk.
  * Rework around writing to sysfs files from Mariusz Tkaczyk.
  * Drop of HOT_REMOVE_DISK ioctl in Manage in favour of sysfs from Mariusz Tkaczyk.
  * Delegate disk removal to managemon from Mariusz Tkaczyk.
  * Some clean-ups of legacy code and functionalities like **--auto=md** from Mariusz Tkaczyk.
  * Manual clean-up, references to old kernels removed from Mariusz Tkaczyk.
  * Various static code analysis fixes.
- Add 1000-Revert-mdmonitor-Abandon-custom-configuration-files.patch
  (reverts upstream change to ignore /etc/sysconfig/mdadm)
- Drop obsolete patches (included upstream):
  * Del 0001-Remove-hardcoded-checkpoint-interval-checking.patch
  * Del 0002-monitor-refactor-checkpoint-update.patch
  * Del 0003-Super-intel-Fix-first-checkpoint-restart.patch
  * Del 0004-Grow-Move-update_tail-assign-to-Grow_reshape.patch
  * Del 0005-Add-understanding-output-section-in-man.patch
  * Del 0006-util.c-change-devnm-to-const-in-mdmon-functions.patch
  * Del 0007-Wait-for-mdmon-when-it-is-stared-via-systemd.patch
  * Del 0008-Detail-remove-duplicated-code.patch
  * Del 0009-mdadm-Fix-native-detail-export.patch
- Use obs_scm for code maintenance</changelog>
  <changelog author="mwilck@suse.com" date="1740744000">- mdopen: add sbin path to env PATH when call system("modprobe md_mod")
  (bsc#1233265)
  add 0010-mdopen-add-sbin-path-to-env-PATH-when-call-system-mo.patch</changelog>
  <changelog author="mwilck@suse.com" date="1741089600">- cleanup 1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch
  (remove a redundant macro definition)</changelog>
  <changelog author="alnovak@suse.com" date="1744286400">- IMSM RAID0 2 disks to RAID10 4 disks migration fix
  add 1006-imsm-Fix-RAID0-to-RAID10-migration.patch (bsc#1241001)</changelog>
  <changelog author="mwilck@suse.com" date="1746532800">- Add dependency on suse-module-tools for SLE15 (bsc#1242696)</changelog>
  <changelog author="mwilck@suse.com" date="1746619200">- Allow any valid minor name in md device name (bsc#1240789)
  * add 1007-mdadm-allow-any-valid-minor-number-in-md-device-name.patch</changelog>
  <changelog author="mwilck@suse.com" date="1748347200">- monitor: Add MAILFROM address to email envelope to avoid smtp auth
  errors (bsc#1241474)
  * add 1008-mdmonitor-use-MAILFROM-to-set-sendmail-envelope-send.patch</changelog>
  <changelog author="jengelh@inai.de" date="1753099200">- Stop emitting %release into program binaries [boo#1246806]</changelog>
  <changelog author="mwilck@suse.com" date="1755172800">- Fix systemd unit file handling in spec file (boo#1207266)
  * make all units known to systemd
  * restart only timers and mdmonitor.service</changelog>
  <changelog author="mwilck@suse.com" date="1762257600">- _service: pull from github.com/openSUSE/mdadm, patches now managed in git
  * delete 0010-mdopen-add-sbin-path-to-env-PATH-when-call-system-mo.patch
  * delete 1000-Revert-mdmonitor-Abandon-custom-configuration-files.patch
  * delete 1001-display-timeout-status.patch
  * delete 1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch
  * delete 1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch
  * delete 1004-call-mdadm_env.sh-from-usr-libexec-mdadm.patch
  * delete 1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch
  * delete 1006-imsm-Fix-RAID0-to-RAID10-migration.patch
  * delete 1007-mdadm-allow-any-valid-minor-number-in-md-device-name.patch
  * delete 1008-mdmonitor-use-MAILFROM-to-set-sendmail-envelope-send.patch
- New versioning scheme: add tag offset and git commit from openSUSE/mdadm repo</changelog>
  <changelog author="mwilck@suse.com" date="1762430400">- Split off the Software RAID HOWTO into a -doc package
- Update to version 4.4+29.gf8bb524b:
  * fix race between mdcheck_start.service and mdcheck_continue.service
    (bsc#1243443, bsc#1248097)
  * various fixes for mdcheck (bsc#1248097)
  * mdadm_env.sh: ignore MDADM_RAIDDEVICES if MDADM_SCAN is set
    (bsc#1229997)
- Upstream bug fixes since 4.4 (bsc#1253060)
  * mdadm: add attribute nonstring for signature
  * super-ddf: Prevent crash when handling DDF metadata
  * platform-intel: Disable legacy option ROM scan on UEFI machines
  * mdadm: fix --grow with --add for linear
  * mdadm/raid6check: add xmalloc.h to raid6check.c
  * Coverity fixes resources leaks
  * udev: persist properties of MD devices after switch_root
- _service: switch to tar_scm for better interoperabity with SLFO.</changelog>
  <changelog author="mwilck@suse.com" date="1763640000">- Update to version 4.4+30.g9a59bf51:
  * mdcheck: work around bash 5.3 bug (bsc#1254087)</changelog>
  <changelog author="mwilck@suse.com" date="1765195200">- Update to version 4.4+31.g541b40d3:
  * fix crash with homehost=none (bsc#1254541)</changelog>
</package>
<package pkgid="b47c993401290bb70c5bfba985a5f2973b81bdbf26933a0988009ab928efb190" name="mdadm" arch="x86_64">
  <version epoch="0" ver="4.4+31.g541b40d3" rel="150700.4.18.1"/>
  <changelog author="colyli@suse.de" date="1704715200">- Update mdadm to latest upstream state upto commit
  582945c2d3bb. (jsc#PED-7542)
  1) The testing changes are not included here.
  2) Code clean up, and more helper routines added for Manage.c,
    Monitor.c, mdadm.c, ReadMe.c, super-intel.c, super0.c, super1.c,
    Create.c, Incremental.c and so on.
  3) Man page update for mdadm.8.in.
  4) Several memory leak and double free fixes.
  5) Check /etc/initrd-release for whether systemd running on an initrd.
  - Manage: Block unsafe member failing
    0062-Manage-Block-unsafe-member-failing.patch
  - Mdmonitor: Split alert() into separate functions
    0063-Mdmonitor-Split-alert-into-separate-functions.patch
  - Monitor: block if monitor modes are combined.
    0064-Monitor-block-if-monitor-modes-are-combined.patch
  - Update mdadm Monitor manual.
    0065-Update-mdadm-Monitor-manual.patch
  - mdadm: create ident_init()
    0066-mdadm-create-ident_init.patch
  - mdadm: Add option validation for --update-subarray
    0067-mdadm-Add-option-validation-for-update-subarray.patch
  - Fix --update-subarray on active volume
    0068-Fix-update-subarray-on-active-volume.patch
  - Add code specific update options to enum.
    0069-Add-code-specific-update-options-to-enum.patch
  - super-ddf: Remove update_super_ddf.
    0070-super-ddf-Remove-update_super_ddf.patch
  - super0: refactor the code for enum
    0071-super0-refactor-the-code-for-enum.patch
  - super1: refactor the code for enum
    0072-super1-refactor-the-code-for-enum.patch
  - super-intel: refactor the code for enum
    0073-super-intel-refactor-the-code-for-enum.patch
  - Change update to enum in update_super and update_subarray
    0074-Change-update-to-enum-in-update_super-and-update_sub.patch
  - Manage&amp;Incremental: code refactor, string to enum
    0075-Manage-Incremental-code-refactor-string-to-enum.patch
  - Change char* to enum in context-&gt;update &amp; refactor code
    0076-Change-char-to-enum-in-context-update-refactor-code.patch
  - mdadm/udev: Don't handle change event on raw devices
    0077-mdadm-udev-Don-t-handle-change-event-on-raw-devices.patch
  - Manage: do not check array state when drive is removed
    0078-Manage-do-not-check-array-state-when-drive-is-remove.patch
  - incremental, manage: do not verify if remove is safe
    0079-incremental-manage-do-not-verify-if-remove-is-safe.patch
  - super-intel: make freesize not required for chunk size
    0080-super-intel-make-freesize-not-required-for-chunk-siz.patch
  - manage: move comment with function description
    0081-manage-move-comment-with-function-description.patch
  - Fix NULL dereference in super_by_fd
    0082-Fix-NULL-dereference-in-super_by_fd.patch
  - Mdmonitor: Make alert_info global
    0083-Mdmonitor-Make-alert_info-global.patch
  - Mdmonitor: Pass events to alert() using enums instead of
    0084-Mdmonitor-Pass-events-to-alert-using-enums-instead-o.patch
  - Mdmonitor: Add helper functions
    0085-Mdmonitor-Add-helper-functions.patch
  - Add helpers to determine whether directories or files are
    0086-Add-helpers-to-determine-whether-directories-or-file.patch
  - Mdmonitor: Refactor write_autorebuild_pid()
    0087-Mdmonitor-Refactor-write_autorebuild_pid.patch
  - Mdmonitor: Refactor check_one_sharer() for better error
    0088-Mdmonitor-Refactor-check_one_sharer-for-better-error.patch
  - util.c: reorder code lines in parse_layout_faulty()
    0089-util.c-reorder-code-lines-in-parse_layout_faulty.patch
  - util.c: fix memleak in parse_layout_faulty()
    0090-util.c-fix-memleak-in-parse_layout_faulty.patch
  - Detail.c: fix memleak in Detail()
    0091-Detail.c-fix-memleak-in-Detail.patch
  - isuper-intel.c: fix double free in load_imsm_mpb()
    0092-isuper-intel.c-fix-double-free-in-load_imsm_mpb.patch
  - super-intel.c: fix memleak in find_disk_attached_hba()
    0093-super-intel.c-fix-memleak-in-find_disk_attached_hba.patch
  - super-ddf.c: fix memleak in get_vd_num_of_subarray()
    0094-super-ddf.c-fix-memleak-in-get_vd_num_of_subarray.patch
  - Create: goto abort_locked instead of return 1 in error path
    0095-Create-goto-abort_locked-instead-of-return-1-in-erro.patch
  - Create: remove safe_mode_delay local variable
    0096-Create-remove-safe_mode_delay-local-variable.patch
  - Create: Factor out add_disks() helpers
    0097-Create-Factor-out-add_disks-helpers.patch
  - mdadm: Introduce pr_info()
    0098-mdadm-Introduce-pr_info.patch
  - mdadm: Add --write-zeros option for Create
    0099-mdadm-Add-write-zeros-option-for-Create.patch
  - manpage: Add --write-zeroes option to manpage
    0100-manpage-Add-write-zeroes-option-to-manpage.patch
  - Define alignof using _Alignof when using C11 or newer
    0101-Define-alignof-using-_Alignof-when-using-C11-or-newe.patch
  - Use existence of /etc/initrd-release to detect initrd.
    0102-Use-existence-of-etc-initrd-release-to-detect-initrd.patch
  - Create: Fix checking for container in update_metadata
    0103-Create-Fix-checking-for-container-in-update_metadata.patch</changelog>
  <changelog author="colyli@suse.de" date="1708689600">- Upgrade to mdadm-4.3 (jsc#PED-7542). Beside previous already back
  ported patches, mdadm-4.3 has the following extra changes since
  last update upto commit 582945c2d3bb,
  - Fix null pointer for incremental in mdadm.
  - Super1: fix truncation check for journal device.
  - Fix some cases eyesore formatting.
  - Bump minimum kernel version to 2.6.32.
  - Remove the config files in mdcheck_start|continue service.
  - Define DEV_MD_DIR, DEV_NUM_PREF, is_devname_ignore(),
    ident_set_devname().
  - Enable RAID for SATA under VMD.
  - Imsm: Fix possible segfault in check_no_platform()
  - Imsm refactor on imsm_get_free_size(), merge_extents().
  - Imsm: return free space after volume for expand.
  - Imsm: fix free space calculations.
  - Add secure gethostname() wrapper.
  - mdadm: Stop mdcheck_continue timer when mdcheck_start service can
    finish check.
  - Fix memory leak in files Assemble.c, Kill.c, Manage.c, mdadm.c.
  - Fix unsafe string functions.
  - platform-intel: limit guid length.
  - Imsm: Add reading vmd register for finding imsm capability.
  - Add compiler defenses flags.
  - Assemble: fix redundant memory free.
  - More regression test cases added into tests.
  - Mdadm: set ident.devname if applicable.
  - Mdadm: refactor ident-&gt;name handling.
  - Mdadm: Follow POSIX Portable Character Set.
  - Incremental: remove obsoleted calls to udisks.
  - Fix race of "mdadm --add" and "mdadm --incremental".
  - mdadm/ddf: Abort when raid disk is smaller in getinfo_super_ddf.
  - mdadm/super1: Add MD_FEATURE_RAID0_LAYOUT if kernel&gt;=5.4.
  - Fix assembling RAID volume by using incremental.
  - Mdmonitor: Improve udev event handling.
  - Udev: Move udev_block() and udev_unblock() into udev.c.
  - Manage: adjust checking subarray state in update_subarray.
  - Super1: remove support for name= in config.
  - Mdadm: fix update=resync regression.
- Rebase to keep consistent behavior for current code base.
  - 1004-call-mdadm_env.sh-from-usr-libexec-mdadm.patch
- The following patches are moved from package because they are all
  included in mdadm-4.3,
  - 0001-Unify-error-message.patch
  - 0002-mdadm-Fix-double-free.patch
  - 0003-Grow_reshape-Add-r0-grow-size-error-message-and-upda.patch
  - 0004-udev-adapt-rules-to-systemd-v247.patch
  - 0005-Replace-error-prone-signal-with-sigaction.patch
  - 0006-mdadm-Respect-config-file-location-in-man.patch
  - 0007-mdadm-Update-ReadMe.patch
  - 0008-mdadm-Update-config-man-regarding-default-files-and-.patch
  - 0009-mdadm-Update-config-manual.patch
  - 0010-Create-Build-use-default_layout.patch
  - 0011-mdadm-add-map_num_s.patch
  - 0012-mdmon-Stop-parsing-duplicate-options.patch
  - 0013-Grow-block-n-on-external-volumes.patch
  - 0014-Incremental-Fix-possible-memory-and-resource-leaks.patch
  - 0015-Mdmonitor-Fix-segfault.patch
  - 0016-Mdmonitor-Improve-logging-method.patch
  - 0017-Fix-possible-NULL-ptr-dereferences-and-memory-leaks.patch
  - 0018-imsm-Remove-possibility-for-get_imsm_dev-to-return-N.patch
  - 0019-Revert-mdadm-fix-coredump-of-mdadm-monitor-r.patch
  - 0020-util-replace-ioctl-use-with-function.patch
  - 0021-mdadm-super1-restore-commit-45a87c2f31335-to-fix-clu.patch
  - 0022-imsm-introduce-get_disk_slot_in_dev.patch
  - 0023-imsm-use-same-slot-across-container.patch
  - 0024-imsm-block-changing-slots-during-creation.patch
  - 0025-mdadm-block-update-ppl-for-non-raid456-levels.patch
  - 0026-mdadm-Fix-array-size-mismatch-after-grow.patch
  - 0027-mdadm-Remove-dead-code-in-imsm_fix_size_mismatch.patch
  - 0028-Monitor-use-devname-as-char-array-instead-of-pointer.patch
  - 0029-Monitor-use-snprintf-to-fill-device-name.patch
  - 0030-Makefile-Don-t-build-static-build-with-everything-an.patch
  - 0031-DDF-Cleanup-validate_geometry_ddf_container.patch
  - 0032-DDF-Fix-NULL-pointer-dereference-in-validate_geometr.patch
  - 0033-mdadm-Grow-Fix-use-after-close-bug-by-closing-after-.patch
  - 0034-monitor-Avoid-segfault-when-calling-NULL-get_bad_blo.patch
  - 0035-mdadm-Fix-mdadm-r-remove-option-regression.patch
  - 0036-mdadm-Fix-optional-write-behind-parameter.patch
  - 0037-mdadm-Replace-obsolete-usleep-with-nanosleep.patch
  - 0038-mdadm-remove-symlink-option.patch
  - 0039-mdadm-move-data_offset-to-struct-shape.patch
  - 0040-mdadm-Don-t-open-md-device-for-CREATE-and-ASSEMBLE.patch
  - 0041-Grow-Split-Grow_reshape-into-helper-function.patch
  - 0042-Assemble-check-if-device-is-container-before-schedul.patch
  - 0043-super1-report-truncated-device.patch
  - 0044-mdadm-Correct-typos-punctuation-and-grammar-in-man.patch
  - 0046-Monitor-Fix-statelist-memory-leaks.patch
  - 0047-mdadm-added-support-for-Intel-Alderlake-RST-on-VMD-p.patch
  - 0048-mdadm-Add-Documentation-entries-to-systemd-services.patch
  - 0049-ReadMe-fix-command-line-help.patch
  - 0050-mdadm-replace-container-level-checking-with-inline.patch
  - 0051-Mdmonitor-Omit-non-md-devices.patch
  - 0052-mdmon-fix-segfault.patch
  - 0053-util-remove-obsolete-code-from-get_md_name.patch
  - 0054-mdmon-don-t-test-both-all-and-container_name.patch
  - 0055-mdmon-change-systemd-unit-file-to-use-foreground.patch
  - 0056-mdmon-Remove-need-for-KillMode-none.patch
  - 0057-mdmon-Improve-switchroot-interactions.patch
  - 0058-mdopen-always-try-create_named_array.patch
  - 0059-Improvements-for-IMSM_NO_PLATFORM-testing.patch
  - 0060-Grow-fix-possible-memory-leak.patch
  - 0061-Grow-fix-can-t-change-bitmap-type-from-none-to-clustered.patch
  - 0062-Manage-Block-unsafe-member-failing.patch
  - 0063-Mdmonitor-Split-alert-into-separate-functions.patch
  - 0064-Monitor-block-if-monitor-modes-are-combined.patch
  - 0065-Update-mdadm-Monitor-manual.patch
  - 0066-mdadm-create-ident_init.patch
  - 0067-mdadm-Add-option-validation-for-update-subarray.patch
  - 0068-Fix-update-subarray-on-active-volume.patch
  - 0069-Add-code-specific-update-options-to-enum.patch
  - 0070-super-ddf-Remove-update_super_ddf.patch
  - 0071-super0-refactor-the-code-for-enum.patch
  - 0072-super1-refactor-the-code-for-enum.patch
  - 0073-super-intel-refactor-the-code-for-enum.patch
  - 0074-Change-update-to-enum-in-update_super-and-update_sub.patch
  - 0075-Manage-Incremental-code-refactor-string-to-enum.patch
  - 0076-Change-char-to-enum-in-context-update-refactor-code.patch
  - 0077-mdadm-udev-Don-t-handle-change-event-on-raw-devices.patch
  - 0078-Manage-do-not-check-array-state-when-drive-is-remove.patch
  - 0079-incremental-manage-do-not-verify-if-remove-is-safe.patch
  - 0080-super-intel-make-freesize-not-required-for-chunk-siz.patch
  - 0081-manage-move-comment-with-function-description.patch
  - 0082-Fix-NULL-dereference-in-super_by_fd.patch
  - 0083-Mdmonitor-Make-alert_info-global.patch
  - 0084-Mdmonitor-Pass-events-to-alert-using-enums-instead-o.patch
  - 0085-Mdmonitor-Add-helper-functions.patch
  - 0086-Add-helpers-to-determine-whether-directories-or-file.patch
  - 0087-Mdmonitor-Refactor-write_autorebuild_pid.patch
  - 0088-Mdmonitor-Refactor-check_one_sharer-for-better-error.patch
  - 0089-util.c-reorder-code-lines-in-parse_layout_faulty.patch
  - 0090-util.c-fix-memleak-in-parse_layout_faulty.patch
  - 0091-Detail.c-fix-memleak-in-Detail.patch
  - 0092-isuper-intel.c-fix-double-free-in-load_imsm_mpb.patch
  - 0093-super-intel.c-fix-memleak-in-find_disk_attached_hba.patch
  - 0094-super-ddf.c-fix-memleak-in-get_vd_num_of_subarray.patch
  - 0095-Create-goto-abort_locked-instead-of-return-1-in-erro.patch
  - 0096-Create-remove-safe_mode_delay-local-variable.patch
  - 0097-Create-Factor-out-add_disks-helpers.patch
  - 0098-mdadm-Introduce-pr_info.patch
  - 0099-mdadm-Add-write-zeros-option-for-Create.patch
  - 0100-manpage-Add-write-zeroes-option-to-manpage.patch
  - 0101-Define-alignof-using-_Alignof-when-using-C11-or-newe.patch
  - 0102-Use-existence-of-etc-initrd-release-to-detect-initrd.patch
  - 0103-Create-Fix-checking-for-container-in-update_metadata.patch</changelog>
  <changelog author="colyli@suse.de" date="1708689601">- Update mdadm-4.3 to latest status (jsc#PED-7542)
  - Remove hardcoded checkpoint interval checking
    0001-Remove-hardcoded-checkpoint-interval-checking.patch
  - monitor: refactor checkpoint update
    0002-monitor-refactor-checkpoint-update.patch
  - Super-intel: Fix first checkpoint restart
    0003-Super-intel-Fix-first-checkpoint-restart.patch
  - Grow: Move update_tail assign to Grow_reshape()
    0004-Grow-Move-update_tail-assign-to-Grow_reshape.patch
  - Add understanding output section in man
    0005-Add-understanding-output-section-in-man.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1708689602">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="colyli@suse.de" date="1720267200">- util.c: change devnm to const in mdmon functions (bsc#1225307)
  0006-util.c-change-devnm-to-const-in-mdmon-functions.patch
- Wait for mdmon when it is stared via systemd (bsc#1225307)
  0007-Wait-for-mdmon-when-it-is-stared-via-systemd.patch</changelog>
  <changelog author="colyli@suse.de" date="1726660800">- Detail: remove duplicated code (bsc#1226413)
  0008-Detail-remove-duplicated-code.patch
- mdadm: Fix native --detail --export (bsc#1226413)
  0009-mdadm-Fix-native-detail-export.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="mwilck@suse.com" date="1740657600">- Update to version 4.4 (jsc#PED-10220)
  Features:
  * Remove custom bitmap file support from Yu Kuai.
  * Custom device policies implementation from Mariusz Tkaczyk.
  * Self encrypted drives (**SED**) support for IMSM metadata from Blazej Kucman.
  * Support more than 4 disks for **IMSM** RAID10 from Mateusz Kusiak.
  * Read **IMSM** license information from ACPI tables from Blazej Kucman.
  * Support devnode in **--Incremental --remove** from Mariusz Tkaczyk.
  * Printing **IMSM** license type in **--detail-platform** from Blazej Kucman.
  * README.md from Mariusz Tkaczyk and Anna Sztukowska.
  Fixes:
  * Tests improvements from Xiao Ni and Kinga Stefaniuk.
  * Mdmon's Checkpointing improvements from Mateusz Kusiak.
  * Pass mdadm environment flags to systemd-env to enable tests from Mateusz Kusiak.
  * Superblock 1.0 uuid printing fixes from Mariusz Tkaczyk.
  * Find VMD bus manually if link is not available from Mariusz Tkaczyk.
  * Unconditional devices count printing in --detail from Anna Sztukowska.
  * Improve SIGTERM handling during reshape, from Mateusz Kusiak.
  * **Monitor.c** renamed to **Mdmonitor.c** from Kinga Stefaniuk.
  * Mdmonitor service documentation update from Mariusz Tkaczyk.
  * Rework around writing to sysfs files from Mariusz Tkaczyk.
  * Drop of HOT_REMOVE_DISK ioctl in Manage in favour of sysfs from Mariusz Tkaczyk.
  * Delegate disk removal to managemon from Mariusz Tkaczyk.
  * Some clean-ups of legacy code and functionalities like **--auto=md** from Mariusz Tkaczyk.
  * Manual clean-up, references to old kernels removed from Mariusz Tkaczyk.
  * Various static code analysis fixes.
- Add 1000-Revert-mdmonitor-Abandon-custom-configuration-files.patch
  (reverts upstream change to ignore /etc/sysconfig/mdadm)
- Drop obsolete patches (included upstream):
  * Del 0001-Remove-hardcoded-checkpoint-interval-checking.patch
  * Del 0002-monitor-refactor-checkpoint-update.patch
  * Del 0003-Super-intel-Fix-first-checkpoint-restart.patch
  * Del 0004-Grow-Move-update_tail-assign-to-Grow_reshape.patch
  * Del 0005-Add-understanding-output-section-in-man.patch
  * Del 0006-util.c-change-devnm-to-const-in-mdmon-functions.patch
  * Del 0007-Wait-for-mdmon-when-it-is-stared-via-systemd.patch
  * Del 0008-Detail-remove-duplicated-code.patch
  * Del 0009-mdadm-Fix-native-detail-export.patch
- Use obs_scm for code maintenance</changelog>
  <changelog author="mwilck@suse.com" date="1740744000">- mdopen: add sbin path to env PATH when call system("modprobe md_mod")
  (bsc#1233265)
  add 0010-mdopen-add-sbin-path-to-env-PATH-when-call-system-mo.patch</changelog>
  <changelog author="mwilck@suse.com" date="1741089600">- cleanup 1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch
  (remove a redundant macro definition)</changelog>
  <changelog author="alnovak@suse.com" date="1744286400">- IMSM RAID0 2 disks to RAID10 4 disks migration fix
  add 1006-imsm-Fix-RAID0-to-RAID10-migration.patch (bsc#1241001)</changelog>
  <changelog author="mwilck@suse.com" date="1746532800">- Add dependency on suse-module-tools for SLE15 (bsc#1242696)</changelog>
  <changelog author="mwilck@suse.com" date="1746619200">- Allow any valid minor name in md device name (bsc#1240789)
  * add 1007-mdadm-allow-any-valid-minor-number-in-md-device-name.patch</changelog>
  <changelog author="mwilck@suse.com" date="1748347200">- monitor: Add MAILFROM address to email envelope to avoid smtp auth
  errors (bsc#1241474)
  * add 1008-mdmonitor-use-MAILFROM-to-set-sendmail-envelope-send.patch</changelog>
  <changelog author="jengelh@inai.de" date="1753099200">- Stop emitting %release into program binaries [boo#1246806]</changelog>
  <changelog author="mwilck@suse.com" date="1755172800">- Fix systemd unit file handling in spec file (boo#1207266)
  * make all units known to systemd
  * restart only timers and mdmonitor.service</changelog>
  <changelog author="mwilck@suse.com" date="1762257600">- _service: pull from github.com/openSUSE/mdadm, patches now managed in git
  * delete 0010-mdopen-add-sbin-path-to-env-PATH-when-call-system-mo.patch
  * delete 1000-Revert-mdmonitor-Abandon-custom-configuration-files.patch
  * delete 1001-display-timeout-status.patch
  * delete 1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch
  * delete 1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch
  * delete 1004-call-mdadm_env.sh-from-usr-libexec-mdadm.patch
  * delete 1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch
  * delete 1006-imsm-Fix-RAID0-to-RAID10-migration.patch
  * delete 1007-mdadm-allow-any-valid-minor-number-in-md-device-name.patch
  * delete 1008-mdmonitor-use-MAILFROM-to-set-sendmail-envelope-send.patch
- New versioning scheme: add tag offset and git commit from openSUSE/mdadm repo</changelog>
  <changelog author="mwilck@suse.com" date="1762430400">- Split off the Software RAID HOWTO into a -doc package
- Update to version 4.4+29.gf8bb524b:
  * fix race between mdcheck_start.service and mdcheck_continue.service
    (bsc#1243443, bsc#1248097)
  * various fixes for mdcheck (bsc#1248097)
  * mdadm_env.sh: ignore MDADM_RAIDDEVICES if MDADM_SCAN is set
    (bsc#1229997)
- Upstream bug fixes since 4.4 (bsc#1253060)
  * mdadm: add attribute nonstring for signature
  * super-ddf: Prevent crash when handling DDF metadata
  * platform-intel: Disable legacy option ROM scan on UEFI machines
  * mdadm: fix --grow with --add for linear
  * mdadm/raid6check: add xmalloc.h to raid6check.c
  * Coverity fixes resources leaks
  * udev: persist properties of MD devices after switch_root
- _service: switch to tar_scm for better interoperabity with SLFO.</changelog>
  <changelog author="mwilck@suse.com" date="1763640000">- Update to version 4.4+30.g9a59bf51:
  * mdcheck: work around bash 5.3 bug (bsc#1254087)</changelog>
  <changelog author="mwilck@suse.com" date="1765195200">- Update to version 4.4+31.g541b40d3:
  * fix crash with homehost=none (bsc#1254541)</changelog>
</package>
<package pkgid="8ddc43d2c04e795cf7b9c3c5bd4fcd7a2e6137babc583ecdd042dcd177aded03" name="mdadm" arch="src">
  <version epoch="0" ver="4.4+39.g6e1c3b06" rel="150700.4.21.1"/>
  <changelog author="colyli@suse.de" date="1708689600">- Update mdadm-4.3 to latest status (jsc#PED-7542)
  - Remove hardcoded checkpoint interval checking
    0001-Remove-hardcoded-checkpoint-interval-checking.patch
  - monitor: refactor checkpoint update
    0002-monitor-refactor-checkpoint-update.patch
  - Super-intel: Fix first checkpoint restart
    0003-Super-intel-Fix-first-checkpoint-restart.patch
  - Grow: Move update_tail assign to Grow_reshape()
    0004-Grow-Move-update_tail-assign-to-Grow_reshape.patch
  - Add understanding output section in man
    0005-Add-understanding-output-section-in-man.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1708689601">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="colyli@suse.de" date="1720267200">- util.c: change devnm to const in mdmon functions (bsc#1225307)
  0006-util.c-change-devnm-to-const-in-mdmon-functions.patch
- Wait for mdmon when it is stared via systemd (bsc#1225307)
  0007-Wait-for-mdmon-when-it-is-stared-via-systemd.patch</changelog>
  <changelog author="colyli@suse.de" date="1726660800">- Detail: remove duplicated code (bsc#1226413)
  0008-Detail-remove-duplicated-code.patch
- mdadm: Fix native --detail --export (bsc#1226413)
  0009-mdadm-Fix-native-detail-export.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="mwilck@suse.com" date="1740657600">- Update to version 4.4 (jsc#PED-10220)
  Features:
  * Remove custom bitmap file support from Yu Kuai.
  * Custom device policies implementation from Mariusz Tkaczyk.
  * Self encrypted drives (**SED**) support for IMSM metadata from Blazej Kucman.
  * Support more than 4 disks for **IMSM** RAID10 from Mateusz Kusiak.
  * Read **IMSM** license information from ACPI tables from Blazej Kucman.
  * Support devnode in **--Incremental --remove** from Mariusz Tkaczyk.
  * Printing **IMSM** license type in **--detail-platform** from Blazej Kucman.
  * README.md from Mariusz Tkaczyk and Anna Sztukowska.
  Fixes:
  * Tests improvements from Xiao Ni and Kinga Stefaniuk.
  * Mdmon's Checkpointing improvements from Mateusz Kusiak.
  * Pass mdadm environment flags to systemd-env to enable tests from Mateusz Kusiak.
  * Superblock 1.0 uuid printing fixes from Mariusz Tkaczyk.
  * Find VMD bus manually if link is not available from Mariusz Tkaczyk.
  * Unconditional devices count printing in --detail from Anna Sztukowska.
  * Improve SIGTERM handling during reshape, from Mateusz Kusiak.
  * **Monitor.c** renamed to **Mdmonitor.c** from Kinga Stefaniuk.
  * Mdmonitor service documentation update from Mariusz Tkaczyk.
  * Rework around writing to sysfs files from Mariusz Tkaczyk.
  * Drop of HOT_REMOVE_DISK ioctl in Manage in favour of sysfs from Mariusz Tkaczyk.
  * Delegate disk removal to managemon from Mariusz Tkaczyk.
  * Some clean-ups of legacy code and functionalities like **--auto=md** from Mariusz Tkaczyk.
  * Manual clean-up, references to old kernels removed from Mariusz Tkaczyk.
  * Various static code analysis fixes.
- Add 1000-Revert-mdmonitor-Abandon-custom-configuration-files.patch
  (reverts upstream change to ignore /etc/sysconfig/mdadm)
- Drop obsolete patches (included upstream):
  * Del 0001-Remove-hardcoded-checkpoint-interval-checking.patch
  * Del 0002-monitor-refactor-checkpoint-update.patch
  * Del 0003-Super-intel-Fix-first-checkpoint-restart.patch
  * Del 0004-Grow-Move-update_tail-assign-to-Grow_reshape.patch
  * Del 0005-Add-understanding-output-section-in-man.patch
  * Del 0006-util.c-change-devnm-to-const-in-mdmon-functions.patch
  * Del 0007-Wait-for-mdmon-when-it-is-stared-via-systemd.patch
  * Del 0008-Detail-remove-duplicated-code.patch
  * Del 0009-mdadm-Fix-native-detail-export.patch
- Use obs_scm for code maintenance</changelog>
  <changelog author="mwilck@suse.com" date="1740744000">- mdopen: add sbin path to env PATH when call system("modprobe md_mod")
  (bsc#1233265)
  add 0010-mdopen-add-sbin-path-to-env-PATH-when-call-system-mo.patch</changelog>
  <changelog author="mwilck@suse.com" date="1741089600">- cleanup 1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch
  (remove a redundant macro definition)</changelog>
  <changelog author="alnovak@suse.com" date="1744286400">- IMSM RAID0 2 disks to RAID10 4 disks migration fix
  add 1006-imsm-Fix-RAID0-to-RAID10-migration.patch (bsc#1241001)</changelog>
  <changelog author="mwilck@suse.com" date="1746532800">- Add dependency on suse-module-tools for SLE15 (bsc#1242696)</changelog>
  <changelog author="mwilck@suse.com" date="1746619200">- Allow any valid minor name in md device name (bsc#1240789)
  * add 1007-mdadm-allow-any-valid-minor-number-in-md-device-name.patch</changelog>
  <changelog author="mwilck@suse.com" date="1748347200">- monitor: Add MAILFROM address to email envelope to avoid smtp auth
  errors (bsc#1241474)
  * add 1008-mdmonitor-use-MAILFROM-to-set-sendmail-envelope-send.patch</changelog>
  <changelog author="jengelh@inai.de" date="1753099200">- Stop emitting %release into program binaries [boo#1246806]</changelog>
  <changelog author="mwilck@suse.com" date="1755172800">- Fix systemd unit file handling in spec file (boo#1207266)
  * make all units known to systemd
  * restart only timers and mdmonitor.service</changelog>
  <changelog author="mwilck@suse.com" date="1762257600">- _service: pull from github.com/openSUSE/mdadm, patches now managed in git
  * delete 0010-mdopen-add-sbin-path-to-env-PATH-when-call-system-mo.patch
  * delete 1000-Revert-mdmonitor-Abandon-custom-configuration-files.patch
  * delete 1001-display-timeout-status.patch
  * delete 1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch
  * delete 1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch
  * delete 1004-call-mdadm_env.sh-from-usr-libexec-mdadm.patch
  * delete 1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch
  * delete 1006-imsm-Fix-RAID0-to-RAID10-migration.patch
  * delete 1007-mdadm-allow-any-valid-minor-number-in-md-device-name.patch
  * delete 1008-mdmonitor-use-MAILFROM-to-set-sendmail-envelope-send.patch
- New versioning scheme: add tag offset and git commit from openSUSE/mdadm repo</changelog>
  <changelog author="mwilck@suse.com" date="1762430400">- Split off the Software RAID HOWTO into a -doc package
- Update to version 4.4+29.gf8bb524b:
  * fix race between mdcheck_start.service and mdcheck_continue.service
    (bsc#1243443, bsc#1248097)
  * various fixes for mdcheck (bsc#1248097)
  * mdadm_env.sh: ignore MDADM_RAIDDEVICES if MDADM_SCAN is set
    (bsc#1229997)
- Upstream bug fixes since 4.4 (bsc#1253060)
  * mdadm: add attribute nonstring for signature
  * super-ddf: Prevent crash when handling DDF metadata
  * platform-intel: Disable legacy option ROM scan on UEFI machines
  * mdadm: fix --grow with --add for linear
  * mdadm/raid6check: add xmalloc.h to raid6check.c
  * Coverity fixes resources leaks
  * udev: persist properties of MD devices after switch_root
- _service: switch to tar_scm for better interoperabity with SLFO.</changelog>
  <changelog author="mwilck@suse.com" date="1763640000">- Update to version 4.4+30.g9a59bf51:
  * mdcheck: work around bash 5.3 bug (bsc#1254087)</changelog>
  <changelog author="mwilck@suse.com" date="1765195200">- Update to version 4.4+31.g541b40d3:
  * fix crash with homehost=none (bsc#1254541)</changelog>
  <changelog author="mwilck@suse.com" date="1770811200">- Update to version 4.4+37.gea219956:
- Backport upstream fixes from 4.5 (bsc#1257009)
  * Re-enable mdadm --monitor ... for /dev/mdX
  * Allow RAID0 to be created with v0.90 metadata
  * Moves memory management into Assemble to avoid null pointer dereference
  * Support non-absolute name during monitor scan
  * Don't set badblock flag when adding a new disk
  * Fix metadata corruption when managing new imsm array</changelog>
  <changelog author="mwilck@suse.com" date="1771848000">- Update to version 4.4+39.g6e1c3b06:
  * platform-intel: Deal with hot-unplugged devices (bsc#1258265)
  * imsm: Fix UEFI backward compatibility for RAID10D4 (bsc#1257009)</changelog>
</package>
<package pkgid="1f361be1131be8ebac65aa81b2deead974ff2890f27b64dd0b74d223a6e1ab9b" name="mdadm" arch="x86_64">
  <version epoch="0" ver="4.4+39.g6e1c3b06" rel="150700.4.21.1"/>
  <changelog author="colyli@suse.de" date="1708689600">- Update mdadm-4.3 to latest status (jsc#PED-7542)
  - Remove hardcoded checkpoint interval checking
    0001-Remove-hardcoded-checkpoint-interval-checking.patch
  - monitor: refactor checkpoint update
    0002-monitor-refactor-checkpoint-update.patch
  - Super-intel: Fix first checkpoint restart
    0003-Super-intel-Fix-first-checkpoint-restart.patch
  - Grow: Move update_tail assign to Grow_reshape()
    0004-Grow-Move-update_tail-assign-to-Grow_reshape.patch
  - Add understanding output section in man
    0005-Add-understanding-output-section-in-man.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1708689601">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="colyli@suse.de" date="1720267200">- util.c: change devnm to const in mdmon functions (bsc#1225307)
  0006-util.c-change-devnm-to-const-in-mdmon-functions.patch
- Wait for mdmon when it is stared via systemd (bsc#1225307)
  0007-Wait-for-mdmon-when-it-is-stared-via-systemd.patch</changelog>
  <changelog author="colyli@suse.de" date="1726660800">- Detail: remove duplicated code (bsc#1226413)
  0008-Detail-remove-duplicated-code.patch
- mdadm: Fix native --detail --export (bsc#1226413)
  0009-mdadm-Fix-native-detail-export.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="mwilck@suse.com" date="1740657600">- Update to version 4.4 (jsc#PED-10220)
  Features:
  * Remove custom bitmap file support from Yu Kuai.
  * Custom device policies implementation from Mariusz Tkaczyk.
  * Self encrypted drives (**SED**) support for IMSM metadata from Blazej Kucman.
  * Support more than 4 disks for **IMSM** RAID10 from Mateusz Kusiak.
  * Read **IMSM** license information from ACPI tables from Blazej Kucman.
  * Support devnode in **--Incremental --remove** from Mariusz Tkaczyk.
  * Printing **IMSM** license type in **--detail-platform** from Blazej Kucman.
  * README.md from Mariusz Tkaczyk and Anna Sztukowska.
  Fixes:
  * Tests improvements from Xiao Ni and Kinga Stefaniuk.
  * Mdmon's Checkpointing improvements from Mateusz Kusiak.
  * Pass mdadm environment flags to systemd-env to enable tests from Mateusz Kusiak.
  * Superblock 1.0 uuid printing fixes from Mariusz Tkaczyk.
  * Find VMD bus manually if link is not available from Mariusz Tkaczyk.
  * Unconditional devices count printing in --detail from Anna Sztukowska.
  * Improve SIGTERM handling during reshape, from Mateusz Kusiak.
  * **Monitor.c** renamed to **Mdmonitor.c** from Kinga Stefaniuk.
  * Mdmonitor service documentation update from Mariusz Tkaczyk.
  * Rework around writing to sysfs files from Mariusz Tkaczyk.
  * Drop of HOT_REMOVE_DISK ioctl in Manage in favour of sysfs from Mariusz Tkaczyk.
  * Delegate disk removal to managemon from Mariusz Tkaczyk.
  * Some clean-ups of legacy code and functionalities like **--auto=md** from Mariusz Tkaczyk.
  * Manual clean-up, references to old kernels removed from Mariusz Tkaczyk.
  * Various static code analysis fixes.
- Add 1000-Revert-mdmonitor-Abandon-custom-configuration-files.patch
  (reverts upstream change to ignore /etc/sysconfig/mdadm)
- Drop obsolete patches (included upstream):
  * Del 0001-Remove-hardcoded-checkpoint-interval-checking.patch
  * Del 0002-monitor-refactor-checkpoint-update.patch
  * Del 0003-Super-intel-Fix-first-checkpoint-restart.patch
  * Del 0004-Grow-Move-update_tail-assign-to-Grow_reshape.patch
  * Del 0005-Add-understanding-output-section-in-man.patch
  * Del 0006-util.c-change-devnm-to-const-in-mdmon-functions.patch
  * Del 0007-Wait-for-mdmon-when-it-is-stared-via-systemd.patch
  * Del 0008-Detail-remove-duplicated-code.patch
  * Del 0009-mdadm-Fix-native-detail-export.patch
- Use obs_scm for code maintenance</changelog>
  <changelog author="mwilck@suse.com" date="1740744000">- mdopen: add sbin path to env PATH when call system("modprobe md_mod")
  (bsc#1233265)
  add 0010-mdopen-add-sbin-path-to-env-PATH-when-call-system-mo.patch</changelog>
  <changelog author="mwilck@suse.com" date="1741089600">- cleanup 1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch
  (remove a redundant macro definition)</changelog>
  <changelog author="alnovak@suse.com" date="1744286400">- IMSM RAID0 2 disks to RAID10 4 disks migration fix
  add 1006-imsm-Fix-RAID0-to-RAID10-migration.patch (bsc#1241001)</changelog>
  <changelog author="mwilck@suse.com" date="1746532800">- Add dependency on suse-module-tools for SLE15 (bsc#1242696)</changelog>
  <changelog author="mwilck@suse.com" date="1746619200">- Allow any valid minor name in md device name (bsc#1240789)
  * add 1007-mdadm-allow-any-valid-minor-number-in-md-device-name.patch</changelog>
  <changelog author="mwilck@suse.com" date="1748347200">- monitor: Add MAILFROM address to email envelope to avoid smtp auth
  errors (bsc#1241474)
  * add 1008-mdmonitor-use-MAILFROM-to-set-sendmail-envelope-send.patch</changelog>
  <changelog author="jengelh@inai.de" date="1753099200">- Stop emitting %release into program binaries [boo#1246806]</changelog>
  <changelog author="mwilck@suse.com" date="1755172800">- Fix systemd unit file handling in spec file (boo#1207266)
  * make all units known to systemd
  * restart only timers and mdmonitor.service</changelog>
  <changelog author="mwilck@suse.com" date="1762257600">- _service: pull from github.com/openSUSE/mdadm, patches now managed in git
  * delete 0010-mdopen-add-sbin-path-to-env-PATH-when-call-system-mo.patch
  * delete 1000-Revert-mdmonitor-Abandon-custom-configuration-files.patch
  * delete 1001-display-timeout-status.patch
  * delete 1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch
  * delete 1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch
  * delete 1004-call-mdadm_env.sh-from-usr-libexec-mdadm.patch
  * delete 1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch
  * delete 1006-imsm-Fix-RAID0-to-RAID10-migration.patch
  * delete 1007-mdadm-allow-any-valid-minor-number-in-md-device-name.patch
  * delete 1008-mdmonitor-use-MAILFROM-to-set-sendmail-envelope-send.patch
- New versioning scheme: add tag offset and git commit from openSUSE/mdadm repo</changelog>
  <changelog author="mwilck@suse.com" date="1762430400">- Split off the Software RAID HOWTO into a -doc package
- Update to version 4.4+29.gf8bb524b:
  * fix race between mdcheck_start.service and mdcheck_continue.service
    (bsc#1243443, bsc#1248097)
  * various fixes for mdcheck (bsc#1248097)
  * mdadm_env.sh: ignore MDADM_RAIDDEVICES if MDADM_SCAN is set
    (bsc#1229997)
- Upstream bug fixes since 4.4 (bsc#1253060)
  * mdadm: add attribute nonstring for signature
  * super-ddf: Prevent crash when handling DDF metadata
  * platform-intel: Disable legacy option ROM scan on UEFI machines
  * mdadm: fix --grow with --add for linear
  * mdadm/raid6check: add xmalloc.h to raid6check.c
  * Coverity fixes resources leaks
  * udev: persist properties of MD devices after switch_root
- _service: switch to tar_scm for better interoperabity with SLFO.</changelog>
  <changelog author="mwilck@suse.com" date="1763640000">- Update to version 4.4+30.g9a59bf51:
  * mdcheck: work around bash 5.3 bug (bsc#1254087)</changelog>
  <changelog author="mwilck@suse.com" date="1765195200">- Update to version 4.4+31.g541b40d3:
  * fix crash with homehost=none (bsc#1254541)</changelog>
  <changelog author="mwilck@suse.com" date="1770811200">- Update to version 4.4+37.gea219956:
- Backport upstream fixes from 4.5 (bsc#1257009)
  * Re-enable mdadm --monitor ... for /dev/mdX
  * Allow RAID0 to be created with v0.90 metadata
  * Moves memory management into Assemble to avoid null pointer dereference
  * Support non-absolute name during monitor scan
  * Don't set badblock flag when adding a new disk
  * Fix metadata corruption when managing new imsm array</changelog>
  <changelog author="mwilck@suse.com" date="1771848000">- Update to version 4.4+39.g6e1c3b06:
  * platform-intel: Deal with hot-unplugged devices (bsc#1258265)
  * imsm: Fix UEFI backward compatibility for RAID10D4 (bsc#1257009)</changelog>
</package>
<package pkgid="7573cb1887d21ca9027c4d0d74b89e320c2ef81cde4b020f67b0df75c777f2d5" name="mdadm" arch="src">
  <version epoch="0" ver="4.4+40.g243a5d9f" rel="150700.4.24.1"/>
  <changelog author="pgajdos@suse.com" date="1708689600">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="colyli@suse.de" date="1720267200">- util.c: change devnm to const in mdmon functions (bsc#1225307)
  0006-util.c-change-devnm-to-const-in-mdmon-functions.patch
- Wait for mdmon when it is stared via systemd (bsc#1225307)
  0007-Wait-for-mdmon-when-it-is-stared-via-systemd.patch</changelog>
  <changelog author="colyli@suse.de" date="1726660800">- Detail: remove duplicated code (bsc#1226413)
  0008-Detail-remove-duplicated-code.patch
- mdadm: Fix native --detail --export (bsc#1226413)
  0009-mdadm-Fix-native-detail-export.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="mwilck@suse.com" date="1740657600">- Update to version 4.4 (jsc#PED-10220)
  Features:
  * Remove custom bitmap file support from Yu Kuai.
  * Custom device policies implementation from Mariusz Tkaczyk.
  * Self encrypted drives (**SED**) support for IMSM metadata from Blazej Kucman.
  * Support more than 4 disks for **IMSM** RAID10 from Mateusz Kusiak.
  * Read **IMSM** license information from ACPI tables from Blazej Kucman.
  * Support devnode in **--Incremental --remove** from Mariusz Tkaczyk.
  * Printing **IMSM** license type in **--detail-platform** from Blazej Kucman.
  * README.md from Mariusz Tkaczyk and Anna Sztukowska.
  Fixes:
  * Tests improvements from Xiao Ni and Kinga Stefaniuk.
  * Mdmon's Checkpointing improvements from Mateusz Kusiak.
  * Pass mdadm environment flags to systemd-env to enable tests from Mateusz Kusiak.
  * Superblock 1.0 uuid printing fixes from Mariusz Tkaczyk.
  * Find VMD bus manually if link is not available from Mariusz Tkaczyk.
  * Unconditional devices count printing in --detail from Anna Sztukowska.
  * Improve SIGTERM handling during reshape, from Mateusz Kusiak.
  * **Monitor.c** renamed to **Mdmonitor.c** from Kinga Stefaniuk.
  * Mdmonitor service documentation update from Mariusz Tkaczyk.
  * Rework around writing to sysfs files from Mariusz Tkaczyk.
  * Drop of HOT_REMOVE_DISK ioctl in Manage in favour of sysfs from Mariusz Tkaczyk.
  * Delegate disk removal to managemon from Mariusz Tkaczyk.
  * Some clean-ups of legacy code and functionalities like **--auto=md** from Mariusz Tkaczyk.
  * Manual clean-up, references to old kernels removed from Mariusz Tkaczyk.
  * Various static code analysis fixes.
- Add 1000-Revert-mdmonitor-Abandon-custom-configuration-files.patch
  (reverts upstream change to ignore /etc/sysconfig/mdadm)
- Drop obsolete patches (included upstream):
  * Del 0001-Remove-hardcoded-checkpoint-interval-checking.patch
  * Del 0002-monitor-refactor-checkpoint-update.patch
  * Del 0003-Super-intel-Fix-first-checkpoint-restart.patch
  * Del 0004-Grow-Move-update_tail-assign-to-Grow_reshape.patch
  * Del 0005-Add-understanding-output-section-in-man.patch
  * Del 0006-util.c-change-devnm-to-const-in-mdmon-functions.patch
  * Del 0007-Wait-for-mdmon-when-it-is-stared-via-systemd.patch
  * Del 0008-Detail-remove-duplicated-code.patch
  * Del 0009-mdadm-Fix-native-detail-export.patch
- Use obs_scm for code maintenance</changelog>
  <changelog author="mwilck@suse.com" date="1740744000">- mdopen: add sbin path to env PATH when call system("modprobe md_mod")
  (bsc#1233265)
  add 0010-mdopen-add-sbin-path-to-env-PATH-when-call-system-mo.patch</changelog>
  <changelog author="mwilck@suse.com" date="1741089600">- cleanup 1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch
  (remove a redundant macro definition)</changelog>
  <changelog author="alnovak@suse.com" date="1744286400">- IMSM RAID0 2 disks to RAID10 4 disks migration fix
  add 1006-imsm-Fix-RAID0-to-RAID10-migration.patch (bsc#1241001)</changelog>
  <changelog author="mwilck@suse.com" date="1746532800">- Add dependency on suse-module-tools for SLE15 (bsc#1242696)</changelog>
  <changelog author="mwilck@suse.com" date="1746619200">- Allow any valid minor name in md device name (bsc#1240789)
  * add 1007-mdadm-allow-any-valid-minor-number-in-md-device-name.patch</changelog>
  <changelog author="mwilck@suse.com" date="1748347200">- monitor: Add MAILFROM address to email envelope to avoid smtp auth
  errors (bsc#1241474)
  * add 1008-mdmonitor-use-MAILFROM-to-set-sendmail-envelope-send.patch</changelog>
  <changelog author="jengelh@inai.de" date="1753099200">- Stop emitting %release into program binaries [boo#1246806]</changelog>
  <changelog author="mwilck@suse.com" date="1755172800">- Fix systemd unit file handling in spec file (boo#1207266)
  * make all units known to systemd
  * restart only timers and mdmonitor.service</changelog>
  <changelog author="mwilck@suse.com" date="1762257600">- _service: pull from github.com/openSUSE/mdadm, patches now managed in git
  * delete 0010-mdopen-add-sbin-path-to-env-PATH-when-call-system-mo.patch
  * delete 1000-Revert-mdmonitor-Abandon-custom-configuration-files.patch
  * delete 1001-display-timeout-status.patch
  * delete 1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch
  * delete 1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch
  * delete 1004-call-mdadm_env.sh-from-usr-libexec-mdadm.patch
  * delete 1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch
  * delete 1006-imsm-Fix-RAID0-to-RAID10-migration.patch
  * delete 1007-mdadm-allow-any-valid-minor-number-in-md-device-name.patch
  * delete 1008-mdmonitor-use-MAILFROM-to-set-sendmail-envelope-send.patch
- New versioning scheme: add tag offset and git commit from openSUSE/mdadm repo</changelog>
  <changelog author="mwilck@suse.com" date="1762430400">- Split off the Software RAID HOWTO into a -doc package
- Update to version 4.4+29.gf8bb524b:
  * fix race between mdcheck_start.service and mdcheck_continue.service
    (bsc#1243443, bsc#1248097)
  * various fixes for mdcheck (bsc#1248097)
  * mdadm_env.sh: ignore MDADM_RAIDDEVICES if MDADM_SCAN is set
    (bsc#1229997)
- Upstream bug fixes since 4.4 (bsc#1253060)
  * mdadm: add attribute nonstring for signature
  * super-ddf: Prevent crash when handling DDF metadata
  * platform-intel: Disable legacy option ROM scan on UEFI machines
  * mdadm: fix --grow with --add for linear
  * mdadm/raid6check: add xmalloc.h to raid6check.c
  * Coverity fixes resources leaks
  * udev: persist properties of MD devices after switch_root
- _service: switch to tar_scm for better interoperabity with SLFO.</changelog>
  <changelog author="mwilck@suse.com" date="1763640000">- Update to version 4.4+30.g9a59bf51:
  * mdcheck: work around bash 5.3 bug (bsc#1254087)</changelog>
  <changelog author="mwilck@suse.com" date="1765195200">- Update to version 4.4+31.g541b40d3:
  * fix crash with homehost=none (bsc#1254541)</changelog>
  <changelog author="mwilck@suse.com" date="1770811200">- Update to version 4.4+37.gea219956:
- Backport upstream fixes from 4.5 (bsc#1257009)
  * Re-enable mdadm --monitor ... for /dev/mdX
  * Allow RAID0 to be created with v0.90 metadata
  * Moves memory management into Assemble to avoid null pointer dereference
  * Support non-absolute name during monitor scan
  * Don't set badblock flag when adding a new disk
  * Fix metadata corruption when managing new imsm array</changelog>
  <changelog author="mwilck@suse.com" date="1771848000">- Update to version 4.4+39.g6e1c3b06:
  * platform-intel: Deal with hot-unplugged devices (bsc#1258265)
  * imsm: Fix UEFI backward compatibility for RAID10D4 (bsc#1257009)</changelog>
  <changelog author="mwilck@suse.com" date="1772625600">- Update to version 4.4+40.g243a5d9f:
  * avoid mdcheck_continue.timer and mdcheck_start.timer
    firing simultaneously (bsc#1243443, bsc#1259090)</changelog>
</package>
<package pkgid="e5baaad1767b9776a3ec4c219adcf1c133392fd8f2f7d14a896ac52e92be7221" name="mdadm" arch="x86_64">
  <version epoch="0" ver="4.4+40.g243a5d9f" rel="150700.4.24.1"/>
  <changelog author="pgajdos@suse.com" date="1708689600">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="colyli@suse.de" date="1720267200">- util.c: change devnm to const in mdmon functions (bsc#1225307)
  0006-util.c-change-devnm-to-const-in-mdmon-functions.patch
- Wait for mdmon when it is stared via systemd (bsc#1225307)
  0007-Wait-for-mdmon-when-it-is-stared-via-systemd.patch</changelog>
  <changelog author="colyli@suse.de" date="1726660800">- Detail: remove duplicated code (bsc#1226413)
  0008-Detail-remove-duplicated-code.patch
- mdadm: Fix native --detail --export (bsc#1226413)
  0009-mdadm-Fix-native-detail-export.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="mwilck@suse.com" date="1740657600">- Update to version 4.4 (jsc#PED-10220)
  Features:
  * Remove custom bitmap file support from Yu Kuai.
  * Custom device policies implementation from Mariusz Tkaczyk.
  * Self encrypted drives (**SED**) support for IMSM metadata from Blazej Kucman.
  * Support more than 4 disks for **IMSM** RAID10 from Mateusz Kusiak.
  * Read **IMSM** license information from ACPI tables from Blazej Kucman.
  * Support devnode in **--Incremental --remove** from Mariusz Tkaczyk.
  * Printing **IMSM** license type in **--detail-platform** from Blazej Kucman.
  * README.md from Mariusz Tkaczyk and Anna Sztukowska.
  Fixes:
  * Tests improvements from Xiao Ni and Kinga Stefaniuk.
  * Mdmon's Checkpointing improvements from Mateusz Kusiak.
  * Pass mdadm environment flags to systemd-env to enable tests from Mateusz Kusiak.
  * Superblock 1.0 uuid printing fixes from Mariusz Tkaczyk.
  * Find VMD bus manually if link is not available from Mariusz Tkaczyk.
  * Unconditional devices count printing in --detail from Anna Sztukowska.
  * Improve SIGTERM handling during reshape, from Mateusz Kusiak.
  * **Monitor.c** renamed to **Mdmonitor.c** from Kinga Stefaniuk.
  * Mdmonitor service documentation update from Mariusz Tkaczyk.
  * Rework around writing to sysfs files from Mariusz Tkaczyk.
  * Drop of HOT_REMOVE_DISK ioctl in Manage in favour of sysfs from Mariusz Tkaczyk.
  * Delegate disk removal to managemon from Mariusz Tkaczyk.
  * Some clean-ups of legacy code and functionalities like **--auto=md** from Mariusz Tkaczyk.
  * Manual clean-up, references to old kernels removed from Mariusz Tkaczyk.
  * Various static code analysis fixes.
- Add 1000-Revert-mdmonitor-Abandon-custom-configuration-files.patch
  (reverts upstream change to ignore /etc/sysconfig/mdadm)
- Drop obsolete patches (included upstream):
  * Del 0001-Remove-hardcoded-checkpoint-interval-checking.patch
  * Del 0002-monitor-refactor-checkpoint-update.patch
  * Del 0003-Super-intel-Fix-first-checkpoint-restart.patch
  * Del 0004-Grow-Move-update_tail-assign-to-Grow_reshape.patch
  * Del 0005-Add-understanding-output-section-in-man.patch
  * Del 0006-util.c-change-devnm-to-const-in-mdmon-functions.patch
  * Del 0007-Wait-for-mdmon-when-it-is-stared-via-systemd.patch
  * Del 0008-Detail-remove-duplicated-code.patch
  * Del 0009-mdadm-Fix-native-detail-export.patch
- Use obs_scm for code maintenance</changelog>
  <changelog author="mwilck@suse.com" date="1740744000">- mdopen: add sbin path to env PATH when call system("modprobe md_mod")
  (bsc#1233265)
  add 0010-mdopen-add-sbin-path-to-env-PATH-when-call-system-mo.patch</changelog>
  <changelog author="mwilck@suse.com" date="1741089600">- cleanup 1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch
  (remove a redundant macro definition)</changelog>
  <changelog author="alnovak@suse.com" date="1744286400">- IMSM RAID0 2 disks to RAID10 4 disks migration fix
  add 1006-imsm-Fix-RAID0-to-RAID10-migration.patch (bsc#1241001)</changelog>
  <changelog author="mwilck@suse.com" date="1746532800">- Add dependency on suse-module-tools for SLE15 (bsc#1242696)</changelog>
  <changelog author="mwilck@suse.com" date="1746619200">- Allow any valid minor name in md device name (bsc#1240789)
  * add 1007-mdadm-allow-any-valid-minor-number-in-md-device-name.patch</changelog>
  <changelog author="mwilck@suse.com" date="1748347200">- monitor: Add MAILFROM address to email envelope to avoid smtp auth
  errors (bsc#1241474)
  * add 1008-mdmonitor-use-MAILFROM-to-set-sendmail-envelope-send.patch</changelog>
  <changelog author="jengelh@inai.de" date="1753099200">- Stop emitting %release into program binaries [boo#1246806]</changelog>
  <changelog author="mwilck@suse.com" date="1755172800">- Fix systemd unit file handling in spec file (boo#1207266)
  * make all units known to systemd
  * restart only timers and mdmonitor.service</changelog>
  <changelog author="mwilck@suse.com" date="1762257600">- _service: pull from github.com/openSUSE/mdadm, patches now managed in git
  * delete 0010-mdopen-add-sbin-path-to-env-PATH-when-call-system-mo.patch
  * delete 1000-Revert-mdmonitor-Abandon-custom-configuration-files.patch
  * delete 1001-display-timeout-status.patch
  * delete 1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch
  * delete 1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch
  * delete 1004-call-mdadm_env.sh-from-usr-libexec-mdadm.patch
  * delete 1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch
  * delete 1006-imsm-Fix-RAID0-to-RAID10-migration.patch
  * delete 1007-mdadm-allow-any-valid-minor-number-in-md-device-name.patch
  * delete 1008-mdmonitor-use-MAILFROM-to-set-sendmail-envelope-send.patch
- New versioning scheme: add tag offset and git commit from openSUSE/mdadm repo</changelog>
  <changelog author="mwilck@suse.com" date="1762430400">- Split off the Software RAID HOWTO into a -doc package
- Update to version 4.4+29.gf8bb524b:
  * fix race between mdcheck_start.service and mdcheck_continue.service
    (bsc#1243443, bsc#1248097)
  * various fixes for mdcheck (bsc#1248097)
  * mdadm_env.sh: ignore MDADM_RAIDDEVICES if MDADM_SCAN is set
    (bsc#1229997)
- Upstream bug fixes since 4.4 (bsc#1253060)
  * mdadm: add attribute nonstring for signature
  * super-ddf: Prevent crash when handling DDF metadata
  * platform-intel: Disable legacy option ROM scan on UEFI machines
  * mdadm: fix --grow with --add for linear
  * mdadm/raid6check: add xmalloc.h to raid6check.c
  * Coverity fixes resources leaks
  * udev: persist properties of MD devices after switch_root
- _service: switch to tar_scm for better interoperabity with SLFO.</changelog>
  <changelog author="mwilck@suse.com" date="1763640000">- Update to version 4.4+30.g9a59bf51:
  * mdcheck: work around bash 5.3 bug (bsc#1254087)</changelog>
  <changelog author="mwilck@suse.com" date="1765195200">- Update to version 4.4+31.g541b40d3:
  * fix crash with homehost=none (bsc#1254541)</changelog>
  <changelog author="mwilck@suse.com" date="1770811200">- Update to version 4.4+37.gea219956:
- Backport upstream fixes from 4.5 (bsc#1257009)
  * Re-enable mdadm --monitor ... for /dev/mdX
  * Allow RAID0 to be created with v0.90 metadata
  * Moves memory management into Assemble to avoid null pointer dereference
  * Support non-absolute name during monitor scan
  * Don't set badblock flag when adding a new disk
  * Fix metadata corruption when managing new imsm array</changelog>
  <changelog author="mwilck@suse.com" date="1771848000">- Update to version 4.4+39.g6e1c3b06:
  * platform-intel: Deal with hot-unplugged devices (bsc#1258265)
  * imsm: Fix UEFI backward compatibility for RAID10D4 (bsc#1257009)</changelog>
  <changelog author="mwilck@suse.com" date="1772625600">- Update to version 4.4+40.g243a5d9f:
  * avoid mdcheck_continue.timer and mdcheck_start.timer
    firing simultaneously (bsc#1243443, bsc#1259090)</changelog>
</package>
<package pkgid="f6f7a270d710f2ebf71350c20f456aa91a8d55729078be859746452a380d1663" name="mdadm" arch="src">
  <version epoch="0" ver="4.4" rel="150700.4.5.3"/>
  <changelog author="colyli@suse.de" date="1680350400">- sysconfig.mdadm: Remove ServiceRestart line to mdadm since there
  is not such systemd service. (bsc#1203491)</changelog>
  <changelog author="colyli@suse.de" date="1682337600">- Fixes for mdmon to ensure it run at the right time in the
  fight mount namespace.  This fixes various problems with
  IMSM raid arrays in 15-SP4 (bsc#1205493, bsc#1205830)
  - mdmon: fix segfault
    0052-mdmon-fix-segfault.patch
  - util: remove obsolete code from get_md_name
    0053-util-remove-obsolete-code-from-get_md_name.patch
  - mdmon: don't test both 'all' and 'container_name'.
    0054-mdmon-don-t-test-both-all-and-container_name.patch
  - mdmon: change systemd unit file to use --foreground
    0055-mdmon-change-systemd-unit-file-to-use-foreground.patch
  - mdmon: Remove need for KillMode=none
    0056-mdmon-Remove-need-for-KillMode-none.patch
  - mdmon: Improve switchroot interactions.
    0057-mdmon-Improve-switchroot-interactions.patch
  - mdopen: always try create_named_array()
    0058-mdopen-always-try-create_named_array.patch
  - Improvements for IMSM_NO_PLATFORM testing
    0059-Improvements-for-IMSM_NO_PLATFORM-testing.patch</changelog>
  <changelog author="colyli@suse.de" date="1685102400">- Grow: fix possible memory leak (bsc#1208618)
  0060-Grow-fix-possible-memory-leak.patch
- Grow: fix can't change bitmap type from none to clustered
  (bsc#1208618)
  0061-Grow-fix-can-t-change-bitmap-type-from-none-to-clustered.patch
- Use source code mdadm-4.2.tar.xz from kernel.org version for
  checksum
  - mdadm-4.2.tar.xz</changelog>
  <changelog author="lnussel@suse.com" date="1690200000">- mdadm.spec: replace transitional %usrmerged macro with regular
  version check (boo#1206798)</changelog>
  <changelog author="dimstar@opensuse.org" date="1700222400">- No longer recommend smtp-daemon: this was a remainder from the
  cron configuration, which was removed back in 2018.</changelog>
  <changelog author="colyli@suse.de" date="1704715200">- Update mdadm to latest upstream state upto commit
  582945c2d3bb. (jsc#PED-7542)
  1) The testing changes are not included here.
  2) Code clean up, and more helper routines added for Manage.c,
    Monitor.c, mdadm.c, ReadMe.c, super-intel.c, super0.c, super1.c,
    Create.c, Incremental.c and so on.
  3) Man page update for mdadm.8.in.
  4) Several memory leak and double free fixes.
  5) Check /etc/initrd-release for whether systemd running on an initrd.
  - Manage: Block unsafe member failing
    0062-Manage-Block-unsafe-member-failing.patch
  - Mdmonitor: Split alert() into separate functions
    0063-Mdmonitor-Split-alert-into-separate-functions.patch
  - Monitor: block if monitor modes are combined.
    0064-Monitor-block-if-monitor-modes-are-combined.patch
  - Update mdadm Monitor manual.
    0065-Update-mdadm-Monitor-manual.patch
  - mdadm: create ident_init()
    0066-mdadm-create-ident_init.patch
  - mdadm: Add option validation for --update-subarray
    0067-mdadm-Add-option-validation-for-update-subarray.patch
  - Fix --update-subarray on active volume
    0068-Fix-update-subarray-on-active-volume.patch
  - Add code specific update options to enum.
    0069-Add-code-specific-update-options-to-enum.patch
  - super-ddf: Remove update_super_ddf.
    0070-super-ddf-Remove-update_super_ddf.patch
  - super0: refactor the code for enum
    0071-super0-refactor-the-code-for-enum.patch
  - super1: refactor the code for enum
    0072-super1-refactor-the-code-for-enum.patch
  - super-intel: refactor the code for enum
    0073-super-intel-refactor-the-code-for-enum.patch
  - Change update to enum in update_super and update_subarray
    0074-Change-update-to-enum-in-update_super-and-update_sub.patch
  - Manage&amp;Incremental: code refactor, string to enum
    0075-Manage-Incremental-code-refactor-string-to-enum.patch
  - Change char* to enum in context-&gt;update &amp; refactor code
    0076-Change-char-to-enum-in-context-update-refactor-code.patch
  - mdadm/udev: Don't handle change event on raw devices
    0077-mdadm-udev-Don-t-handle-change-event-on-raw-devices.patch
  - Manage: do not check array state when drive is removed
    0078-Manage-do-not-check-array-state-when-drive-is-remove.patch
  - incremental, manage: do not verify if remove is safe
    0079-incremental-manage-do-not-verify-if-remove-is-safe.patch
  - super-intel: make freesize not required for chunk size
    0080-super-intel-make-freesize-not-required-for-chunk-siz.patch
  - manage: move comment with function description
    0081-manage-move-comment-with-function-description.patch
  - Fix NULL dereference in super_by_fd
    0082-Fix-NULL-dereference-in-super_by_fd.patch
  - Mdmonitor: Make alert_info global
    0083-Mdmonitor-Make-alert_info-global.patch
  - Mdmonitor: Pass events to alert() using enums instead of
    0084-Mdmonitor-Pass-events-to-alert-using-enums-instead-o.patch
  - Mdmonitor: Add helper functions
    0085-Mdmonitor-Add-helper-functions.patch
  - Add helpers to determine whether directories or files are
    0086-Add-helpers-to-determine-whether-directories-or-file.patch
  - Mdmonitor: Refactor write_autorebuild_pid()
    0087-Mdmonitor-Refactor-write_autorebuild_pid.patch
  - Mdmonitor: Refactor check_one_sharer() for better error
    0088-Mdmonitor-Refactor-check_one_sharer-for-better-error.patch
  - util.c: reorder code lines in parse_layout_faulty()
    0089-util.c-reorder-code-lines-in-parse_layout_faulty.patch
  - util.c: fix memleak in parse_layout_faulty()
    0090-util.c-fix-memleak-in-parse_layout_faulty.patch
  - Detail.c: fix memleak in Detail()
    0091-Detail.c-fix-memleak-in-Detail.patch
  - isuper-intel.c: fix double free in load_imsm_mpb()
    0092-isuper-intel.c-fix-double-free-in-load_imsm_mpb.patch
  - super-intel.c: fix memleak in find_disk_attached_hba()
    0093-super-intel.c-fix-memleak-in-find_disk_attached_hba.patch
  - super-ddf.c: fix memleak in get_vd_num_of_subarray()
    0094-super-ddf.c-fix-memleak-in-get_vd_num_of_subarray.patch
  - Create: goto abort_locked instead of return 1 in error path
    0095-Create-goto-abort_locked-instead-of-return-1-in-erro.patch
  - Create: remove safe_mode_delay local variable
    0096-Create-remove-safe_mode_delay-local-variable.patch
  - Create: Factor out add_disks() helpers
    0097-Create-Factor-out-add_disks-helpers.patch
  - mdadm: Introduce pr_info()
    0098-mdadm-Introduce-pr_info.patch
  - mdadm: Add --write-zeros option for Create
    0099-mdadm-Add-write-zeros-option-for-Create.patch
  - manpage: Add --write-zeroes option to manpage
    0100-manpage-Add-write-zeroes-option-to-manpage.patch
  - Define alignof using _Alignof when using C11 or newer
    0101-Define-alignof-using-_Alignof-when-using-C11-or-newe.patch
  - Use existence of /etc/initrd-release to detect initrd.
    0102-Use-existence-of-etc-initrd-release-to-detect-initrd.patch
  - Create: Fix checking for container in update_metadata
    0103-Create-Fix-checking-for-container-in-update_metadata.patch</changelog>
  <changelog author="colyli@suse.de" date="1708689600">- Upgrade to mdadm-4.3 (jsc#PED-7542). Beside previous already back
  ported patches, mdadm-4.3 has the following extra changes since
  last update upto commit 582945c2d3bb,
  - Fix null pointer for incremental in mdadm.
  - Super1: fix truncation check for journal device.
  - Fix some cases eyesore formatting.
  - Bump minimum kernel version to 2.6.32.
  - Remove the config files in mdcheck_start|continue service.
  - Define DEV_MD_DIR, DEV_NUM_PREF, is_devname_ignore(),
    ident_set_devname().
  - Enable RAID for SATA under VMD.
  - Imsm: Fix possible segfault in check_no_platform()
  - Imsm refactor on imsm_get_free_size(), merge_extents().
  - Imsm: return free space after volume for expand.
  - Imsm: fix free space calculations.
  - Add secure gethostname() wrapper.
  - mdadm: Stop mdcheck_continue timer when mdcheck_start service can
    finish check.
  - Fix memory leak in files Assemble.c, Kill.c, Manage.c, mdadm.c.
  - Fix unsafe string functions.
  - platform-intel: limit guid length.
  - Imsm: Add reading vmd register for finding imsm capability.
  - Add compiler defenses flags.
  - Assemble: fix redundant memory free.
  - More regression test cases added into tests.
  - Mdadm: set ident.devname if applicable.
  - Mdadm: refactor ident-&gt;name handling.
  - Mdadm: Follow POSIX Portable Character Set.
  - Incremental: remove obsoleted calls to udisks.
  - Fix race of "mdadm --add" and "mdadm --incremental".
  - mdadm/ddf: Abort when raid disk is smaller in getinfo_super_ddf.
  - mdadm/super1: Add MD_FEATURE_RAID0_LAYOUT if kernel&gt;=5.4.
  - Fix assembling RAID volume by using incremental.
  - Mdmonitor: Improve udev event handling.
  - Udev: Move udev_block() and udev_unblock() into udev.c.
  - Manage: adjust checking subarray state in update_subarray.
  - Super1: remove support for name= in config.
  - Mdadm: fix update=resync regression.
- Rebase to keep consistent behavior for current code base.
  - 1004-call-mdadm_env.sh-from-usr-libexec-mdadm.patch
- The following patches are moved from package because they are all
  included in mdadm-4.3,
  - 0001-Unify-error-message.patch
  - 0002-mdadm-Fix-double-free.patch
  - 0003-Grow_reshape-Add-r0-grow-size-error-message-and-upda.patch
  - 0004-udev-adapt-rules-to-systemd-v247.patch
  - 0005-Replace-error-prone-signal-with-sigaction.patch
  - 0006-mdadm-Respect-config-file-location-in-man.patch
  - 0007-mdadm-Update-ReadMe.patch
  - 0008-mdadm-Update-config-man-regarding-default-files-and-.patch
  - 0009-mdadm-Update-config-manual.patch
  - 0010-Create-Build-use-default_layout.patch
  - 0011-mdadm-add-map_num_s.patch
  - 0012-mdmon-Stop-parsing-duplicate-options.patch
  - 0013-Grow-block-n-on-external-volumes.patch
  - 0014-Incremental-Fix-possible-memory-and-resource-leaks.patch
  - 0015-Mdmonitor-Fix-segfault.patch
  - 0016-Mdmonitor-Improve-logging-method.patch
  - 0017-Fix-possible-NULL-ptr-dereferences-and-memory-leaks.patch
  - 0018-imsm-Remove-possibility-for-get_imsm_dev-to-return-N.patch
  - 0019-Revert-mdadm-fix-coredump-of-mdadm-monitor-r.patch
  - 0020-util-replace-ioctl-use-with-function.patch
  - 0021-mdadm-super1-restore-commit-45a87c2f31335-to-fix-clu.patch
  - 0022-imsm-introduce-get_disk_slot_in_dev.patch
  - 0023-imsm-use-same-slot-across-container.patch
  - 0024-imsm-block-changing-slots-during-creation.patch
  - 0025-mdadm-block-update-ppl-for-non-raid456-levels.patch
  - 0026-mdadm-Fix-array-size-mismatch-after-grow.patch
  - 0027-mdadm-Remove-dead-code-in-imsm_fix_size_mismatch.patch
  - 0028-Monitor-use-devname-as-char-array-instead-of-pointer.patch
  - 0029-Monitor-use-snprintf-to-fill-device-name.patch
  - 0030-Makefile-Don-t-build-static-build-with-everything-an.patch
  - 0031-DDF-Cleanup-validate_geometry_ddf_container.patch
  - 0032-DDF-Fix-NULL-pointer-dereference-in-validate_geometr.patch
  - 0033-mdadm-Grow-Fix-use-after-close-bug-by-closing-after-.patch
  - 0034-monitor-Avoid-segfault-when-calling-NULL-get_bad_blo.patch
  - 0035-mdadm-Fix-mdadm-r-remove-option-regression.patch
  - 0036-mdadm-Fix-optional-write-behind-parameter.patch
  - 0037-mdadm-Replace-obsolete-usleep-with-nanosleep.patch
  - 0038-mdadm-remove-symlink-option.patch
  - 0039-mdadm-move-data_offset-to-struct-shape.patch
  - 0040-mdadm-Don-t-open-md-device-for-CREATE-and-ASSEMBLE.patch
  - 0041-Grow-Split-Grow_reshape-into-helper-function.patch
  - 0042-Assemble-check-if-device-is-container-before-schedul.patch
  - 0043-super1-report-truncated-device.patch
  - 0044-mdadm-Correct-typos-punctuation-and-grammar-in-man.patch
  - 0046-Monitor-Fix-statelist-memory-leaks.patch
  - 0047-mdadm-added-support-for-Intel-Alderlake-RST-on-VMD-p.patch
  - 0048-mdadm-Add-Documentation-entries-to-systemd-services.patch
  - 0049-ReadMe-fix-command-line-help.patch
  - 0050-mdadm-replace-container-level-checking-with-inline.patch
  - 0051-Mdmonitor-Omit-non-md-devices.patch
  - 0052-mdmon-fix-segfault.patch
  - 0053-util-remove-obsolete-code-from-get_md_name.patch
  - 0054-mdmon-don-t-test-both-all-and-container_name.patch
  - 0055-mdmon-change-systemd-unit-file-to-use-foreground.patch
  - 0056-mdmon-Remove-need-for-KillMode-none.patch
  - 0057-mdmon-Improve-switchroot-interactions.patch
  - 0058-mdopen-always-try-create_named_array.patch
  - 0059-Improvements-for-IMSM_NO_PLATFORM-testing.patch
  - 0060-Grow-fix-possible-memory-leak.patch
  - 0061-Grow-fix-can-t-change-bitmap-type-from-none-to-clustered.patch
  - 0062-Manage-Block-unsafe-member-failing.patch
  - 0063-Mdmonitor-Split-alert-into-separate-functions.patch
  - 0064-Monitor-block-if-monitor-modes-are-combined.patch
  - 0065-Update-mdadm-Monitor-manual.patch
  - 0066-mdadm-create-ident_init.patch
  - 0067-mdadm-Add-option-validation-for-update-subarray.patch
  - 0068-Fix-update-subarray-on-active-volume.patch
  - 0069-Add-code-specific-update-options-to-enum.patch
  - 0070-super-ddf-Remove-update_super_ddf.patch
  - 0071-super0-refactor-the-code-for-enum.patch
  - 0072-super1-refactor-the-code-for-enum.patch
  - 0073-super-intel-refactor-the-code-for-enum.patch
  - 0074-Change-update-to-enum-in-update_super-and-update_sub.patch
  - 0075-Manage-Incremental-code-refactor-string-to-enum.patch
  - 0076-Change-char-to-enum-in-context-update-refactor-code.patch
  - 0077-mdadm-udev-Don-t-handle-change-event-on-raw-devices.patch
  - 0078-Manage-do-not-check-array-state-when-drive-is-remove.patch
  - 0079-incremental-manage-do-not-verify-if-remove-is-safe.patch
  - 0080-super-intel-make-freesize-not-required-for-chunk-siz.patch
  - 0081-manage-move-comment-with-function-description.patch
  - 0082-Fix-NULL-dereference-in-super_by_fd.patch
  - 0083-Mdmonitor-Make-alert_info-global.patch
  - 0084-Mdmonitor-Pass-events-to-alert-using-enums-instead-o.patch
  - 0085-Mdmonitor-Add-helper-functions.patch
  - 0086-Add-helpers-to-determine-whether-directories-or-file.patch
  - 0087-Mdmonitor-Refactor-write_autorebuild_pid.patch
  - 0088-Mdmonitor-Refactor-check_one_sharer-for-better-error.patch
  - 0089-util.c-reorder-code-lines-in-parse_layout_faulty.patch
  - 0090-util.c-fix-memleak-in-parse_layout_faulty.patch
  - 0091-Detail.c-fix-memleak-in-Detail.patch
  - 0092-isuper-intel.c-fix-double-free-in-load_imsm_mpb.patch
  - 0093-super-intel.c-fix-memleak-in-find_disk_attached_hba.patch
  - 0094-super-ddf.c-fix-memleak-in-get_vd_num_of_subarray.patch
  - 0095-Create-goto-abort_locked-instead-of-return-1-in-erro.patch
  - 0096-Create-remove-safe_mode_delay-local-variable.patch
  - 0097-Create-Factor-out-add_disks-helpers.patch
  - 0098-mdadm-Introduce-pr_info.patch
  - 0099-mdadm-Add-write-zeros-option-for-Create.patch
  - 0100-manpage-Add-write-zeroes-option-to-manpage.patch
  - 0101-Define-alignof-using-_Alignof-when-using-C11-or-newe.patch
  - 0102-Use-existence-of-etc-initrd-release-to-detect-initrd.patch
  - 0103-Create-Fix-checking-for-container-in-update_metadata.patch</changelog>
  <changelog author="colyli@suse.de" date="1708689601">- Update mdadm-4.3 to latest status (jsc#PED-7542)
  - Remove hardcoded checkpoint interval checking
    0001-Remove-hardcoded-checkpoint-interval-checking.patch
  - monitor: refactor checkpoint update
    0002-monitor-refactor-checkpoint-update.patch
  - Super-intel: Fix first checkpoint restart
    0003-Super-intel-Fix-first-checkpoint-restart.patch
  - Grow: Move update_tail assign to Grow_reshape()
    0004-Grow-Move-update_tail-assign-to-Grow_reshape.patch
  - Add understanding output section in man
    0005-Add-understanding-output-section-in-man.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1708689602">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="colyli@suse.de" date="1720267200">- util.c: change devnm to const in mdmon functions (bsc#1225307)
  0006-util.c-change-devnm-to-const-in-mdmon-functions.patch
- Wait for mdmon when it is stared via systemd (bsc#1225307)
  0007-Wait-for-mdmon-when-it-is-stared-via-systemd.patch</changelog>
  <changelog author="colyli@suse.de" date="1726660800">- Detail: remove duplicated code (bsc#1226413)
  0008-Detail-remove-duplicated-code.patch
- mdadm: Fix native --detail --export (bsc#1226413)
  0009-mdadm-Fix-native-detail-export.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="colyli@suse.de" date="1738843200">- mdopen: add sbin path to env PATH when call system("modprobe md_mod")
  (bsc#1233265)
  0010-mdopen-add-sbin-path-to-env-PATH-when-call-system-mo.patch</changelog>
  <changelog author="mwilck@suse.com" date="1740657600">- Update to version 4.4 (jsc#PED-10220)
  Features:
  * Remove custom bitmap file support from Yu Kuai.
  * Custom device policies implementation from Mariusz Tkaczyk.
  * Self encrypted drives (**SED**) support for IMSM metadata from Blazej Kucman.
  * Support more than 4 disks for **IMSM** RAID10 from Mateusz Kusiak.
  * Read **IMSM** license information from ACPI tables from Blazej Kucman.
  * Support devnode in **--Incremental --remove** from Mariusz Tkaczyk.
  * Printing **IMSM** license type in **--detail-platform** from Blazej Kucman.
  * README.md from Mariusz Tkaczyk and Anna Sztukowska.
  Fixes:
  * Tests improvements from Xiao Ni and Kinga Stefaniuk.
  * Mdmon's Checkpointing improvements from Mateusz Kusiak.
  * Pass mdadm environment flags to systemd-env to enable tests from Mateusz Kusiak.
  * Superblock 1.0 uuid printing fixes from Mariusz Tkaczyk.
  * Find VMD bus manually if link is not available from Mariusz Tkaczyk.
  * Unconditional devices count printing in --detail from Anna Sztukowska.
  * Improve SIGTERM handling during reshape, from Mateusz Kusiak.
  * **Monitor.c** renamed to **Mdmonitor.c** from Kinga Stefaniuk.
  * Mdmonitor service documentation update from Mariusz Tkaczyk.
  * Rework around writing to sysfs files from Mariusz Tkaczyk.
  * Drop of HOT_REMOVE_DISK ioctl in Manage in favour of sysfs from Mariusz Tkaczyk.
  * Delegate disk removal to managemon from Mariusz Tkaczyk.
  * Some clean-ups of legacy code and functionalities like **--auto=md** from Mariusz Tkaczyk.
  * Manual clean-up, references to old kernels removed from Mariusz Tkaczyk.
  * Various static code analysis fixes.
- Add 1000-Revert-mdmonitor-Abandon-custom-configuration-files.patch
  (reverts upstream change to ignore /etc/sysconfig/mdadm)
- Drop obsolete patches (included upstream):
  * Del 0001-Remove-hardcoded-checkpoint-interval-checking.patch
  * Del 0002-monitor-refactor-checkpoint-update.patch
  * Del 0003-Super-intel-Fix-first-checkpoint-restart.patch
  * Del 0004-Grow-Move-update_tail-assign-to-Grow_reshape.patch
  * Del 0005-Add-understanding-output-section-in-man.patch
  * Del 0006-util.c-change-devnm-to-const-in-mdmon-functions.patch
  * Del 0007-Wait-for-mdmon-when-it-is-stared-via-systemd.patch
  * Del 0008-Detail-remove-duplicated-code.patch
  * Del 0009-mdadm-Fix-native-detail-export.patch
- Use obs_scm for code maintenance</changelog>
  <changelog author="mwilck@suse.com" date="1740744000">- mdopen: add sbin path to env PATH when call system("modprobe md_mod")
  (bsc#1233265)
  add 0010-mdopen-add-sbin-path-to-env-PATH-when-call-system-mo.patch</changelog>
  <changelog author="mwilck@suse.com" date="1741089600">- cleanup 1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch
  (remove a redundant macro definition)</changelog>
  <changelog author="alnovak@suse.com" date="1744286400">- IMSM RAID0 2 disks to RAID10 4 disks migration fix
  add 1006-imsm-Fix-RAID0-to-RAID10-migration.patch (bsc#1241001)</changelog>
  <changelog author="mwilck@suse.com" date="1746532800">- Add dependency on suse-module-tools for SLE15 (bsc#1242696)</changelog>
  <changelog author="mwilck@suse.com" date="1746619200">- Allow any valid minor name in md device name (bsc#1240789)
  * add 1007-mdadm-allow-any-valid-minor-number-in-md-device-name.patch</changelog>
  <changelog author="mwilck@suse.com" date="1748347200">- monitor: Add MAILFROM address to email envelope to avoid smtp auth
  errors (bsc#1241474)
  * add 1008-mdmonitor-use-MAILFROM-to-set-sendmail-envelope-send.patch</changelog>
</package>
<package pkgid="c0feb51c1b5b3c9cc6bace53822d2825e51517b2010092897175bdabeac0d167" name="mdadm" arch="x86_64">
  <version epoch="0" ver="4.4" rel="150700.4.5.3"/>
  <changelog author="colyli@suse.de" date="1680350400">- sysconfig.mdadm: Remove ServiceRestart line to mdadm since there
  is not such systemd service. (bsc#1203491)</changelog>
  <changelog author="colyli@suse.de" date="1682337600">- Fixes for mdmon to ensure it run at the right time in the
  fight mount namespace.  This fixes various problems with
  IMSM raid arrays in 15-SP4 (bsc#1205493, bsc#1205830)
  - mdmon: fix segfault
    0052-mdmon-fix-segfault.patch
  - util: remove obsolete code from get_md_name
    0053-util-remove-obsolete-code-from-get_md_name.patch
  - mdmon: don't test both 'all' and 'container_name'.
    0054-mdmon-don-t-test-both-all-and-container_name.patch
  - mdmon: change systemd unit file to use --foreground
    0055-mdmon-change-systemd-unit-file-to-use-foreground.patch
  - mdmon: Remove need for KillMode=none
    0056-mdmon-Remove-need-for-KillMode-none.patch
  - mdmon: Improve switchroot interactions.
    0057-mdmon-Improve-switchroot-interactions.patch
  - mdopen: always try create_named_array()
    0058-mdopen-always-try-create_named_array.patch
  - Improvements for IMSM_NO_PLATFORM testing
    0059-Improvements-for-IMSM_NO_PLATFORM-testing.patch</changelog>
  <changelog author="colyli@suse.de" date="1685102400">- Grow: fix possible memory leak (bsc#1208618)
  0060-Grow-fix-possible-memory-leak.patch
- Grow: fix can't change bitmap type from none to clustered
  (bsc#1208618)
  0061-Grow-fix-can-t-change-bitmap-type-from-none-to-clustered.patch
- Use source code mdadm-4.2.tar.xz from kernel.org version for
  checksum
  - mdadm-4.2.tar.xz</changelog>
  <changelog author="lnussel@suse.com" date="1690200000">- mdadm.spec: replace transitional %usrmerged macro with regular
  version check (boo#1206798)</changelog>
  <changelog author="dimstar@opensuse.org" date="1700222400">- No longer recommend smtp-daemon: this was a remainder from the
  cron configuration, which was removed back in 2018.</changelog>
  <changelog author="colyli@suse.de" date="1704715200">- Update mdadm to latest upstream state upto commit
  582945c2d3bb. (jsc#PED-7542)
  1) The testing changes are not included here.
  2) Code clean up, and more helper routines added for Manage.c,
    Monitor.c, mdadm.c, ReadMe.c, super-intel.c, super0.c, super1.c,
    Create.c, Incremental.c and so on.
  3) Man page update for mdadm.8.in.
  4) Several memory leak and double free fixes.
  5) Check /etc/initrd-release for whether systemd running on an initrd.
  - Manage: Block unsafe member failing
    0062-Manage-Block-unsafe-member-failing.patch
  - Mdmonitor: Split alert() into separate functions
    0063-Mdmonitor-Split-alert-into-separate-functions.patch
  - Monitor: block if monitor modes are combined.
    0064-Monitor-block-if-monitor-modes-are-combined.patch
  - Update mdadm Monitor manual.
    0065-Update-mdadm-Monitor-manual.patch
  - mdadm: create ident_init()
    0066-mdadm-create-ident_init.patch
  - mdadm: Add option validation for --update-subarray
    0067-mdadm-Add-option-validation-for-update-subarray.patch
  - Fix --update-subarray on active volume
    0068-Fix-update-subarray-on-active-volume.patch
  - Add code specific update options to enum.
    0069-Add-code-specific-update-options-to-enum.patch
  - super-ddf: Remove update_super_ddf.
    0070-super-ddf-Remove-update_super_ddf.patch
  - super0: refactor the code for enum
    0071-super0-refactor-the-code-for-enum.patch
  - super1: refactor the code for enum
    0072-super1-refactor-the-code-for-enum.patch
  - super-intel: refactor the code for enum
    0073-super-intel-refactor-the-code-for-enum.patch
  - Change update to enum in update_super and update_subarray
    0074-Change-update-to-enum-in-update_super-and-update_sub.patch
  - Manage&amp;Incremental: code refactor, string to enum
    0075-Manage-Incremental-code-refactor-string-to-enum.patch
  - Change char* to enum in context-&gt;update &amp; refactor code
    0076-Change-char-to-enum-in-context-update-refactor-code.patch
  - mdadm/udev: Don't handle change event on raw devices
    0077-mdadm-udev-Don-t-handle-change-event-on-raw-devices.patch
  - Manage: do not check array state when drive is removed
    0078-Manage-do-not-check-array-state-when-drive-is-remove.patch
  - incremental, manage: do not verify if remove is safe
    0079-incremental-manage-do-not-verify-if-remove-is-safe.patch
  - super-intel: make freesize not required for chunk size
    0080-super-intel-make-freesize-not-required-for-chunk-siz.patch
  - manage: move comment with function description
    0081-manage-move-comment-with-function-description.patch
  - Fix NULL dereference in super_by_fd
    0082-Fix-NULL-dereference-in-super_by_fd.patch
  - Mdmonitor: Make alert_info global
    0083-Mdmonitor-Make-alert_info-global.patch
  - Mdmonitor: Pass events to alert() using enums instead of
    0084-Mdmonitor-Pass-events-to-alert-using-enums-instead-o.patch
  - Mdmonitor: Add helper functions
    0085-Mdmonitor-Add-helper-functions.patch
  - Add helpers to determine whether directories or files are
    0086-Add-helpers-to-determine-whether-directories-or-file.patch
  - Mdmonitor: Refactor write_autorebuild_pid()
    0087-Mdmonitor-Refactor-write_autorebuild_pid.patch
  - Mdmonitor: Refactor check_one_sharer() for better error
    0088-Mdmonitor-Refactor-check_one_sharer-for-better-error.patch
  - util.c: reorder code lines in parse_layout_faulty()
    0089-util.c-reorder-code-lines-in-parse_layout_faulty.patch
  - util.c: fix memleak in parse_layout_faulty()
    0090-util.c-fix-memleak-in-parse_layout_faulty.patch
  - Detail.c: fix memleak in Detail()
    0091-Detail.c-fix-memleak-in-Detail.patch
  - isuper-intel.c: fix double free in load_imsm_mpb()
    0092-isuper-intel.c-fix-double-free-in-load_imsm_mpb.patch
  - super-intel.c: fix memleak in find_disk_attached_hba()
    0093-super-intel.c-fix-memleak-in-find_disk_attached_hba.patch
  - super-ddf.c: fix memleak in get_vd_num_of_subarray()
    0094-super-ddf.c-fix-memleak-in-get_vd_num_of_subarray.patch
  - Create: goto abort_locked instead of return 1 in error path
    0095-Create-goto-abort_locked-instead-of-return-1-in-erro.patch
  - Create: remove safe_mode_delay local variable
    0096-Create-remove-safe_mode_delay-local-variable.patch
  - Create: Factor out add_disks() helpers
    0097-Create-Factor-out-add_disks-helpers.patch
  - mdadm: Introduce pr_info()
    0098-mdadm-Introduce-pr_info.patch
  - mdadm: Add --write-zeros option for Create
    0099-mdadm-Add-write-zeros-option-for-Create.patch
  - manpage: Add --write-zeroes option to manpage
    0100-manpage-Add-write-zeroes-option-to-manpage.patch
  - Define alignof using _Alignof when using C11 or newer
    0101-Define-alignof-using-_Alignof-when-using-C11-or-newe.patch
  - Use existence of /etc/initrd-release to detect initrd.
    0102-Use-existence-of-etc-initrd-release-to-detect-initrd.patch
  - Create: Fix checking for container in update_metadata
    0103-Create-Fix-checking-for-container-in-update_metadata.patch</changelog>
  <changelog author="colyli@suse.de" date="1708689600">- Upgrade to mdadm-4.3 (jsc#PED-7542). Beside previous already back
  ported patches, mdadm-4.3 has the following extra changes since
  last update upto commit 582945c2d3bb,
  - Fix null pointer for incremental in mdadm.
  - Super1: fix truncation check for journal device.
  - Fix some cases eyesore formatting.
  - Bump minimum kernel version to 2.6.32.
  - Remove the config files in mdcheck_start|continue service.
  - Define DEV_MD_DIR, DEV_NUM_PREF, is_devname_ignore(),
    ident_set_devname().
  - Enable RAID for SATA under VMD.
  - Imsm: Fix possible segfault in check_no_platform()
  - Imsm refactor on imsm_get_free_size(), merge_extents().
  - Imsm: return free space after volume for expand.
  - Imsm: fix free space calculations.
  - Add secure gethostname() wrapper.
  - mdadm: Stop mdcheck_continue timer when mdcheck_start service can
    finish check.
  - Fix memory leak in files Assemble.c, Kill.c, Manage.c, mdadm.c.
  - Fix unsafe string functions.
  - platform-intel: limit guid length.
  - Imsm: Add reading vmd register for finding imsm capability.
  - Add compiler defenses flags.
  - Assemble: fix redundant memory free.
  - More regression test cases added into tests.
  - Mdadm: set ident.devname if applicable.
  - Mdadm: refactor ident-&gt;name handling.
  - Mdadm: Follow POSIX Portable Character Set.
  - Incremental: remove obsoleted calls to udisks.
  - Fix race of "mdadm --add" and "mdadm --incremental".
  - mdadm/ddf: Abort when raid disk is smaller in getinfo_super_ddf.
  - mdadm/super1: Add MD_FEATURE_RAID0_LAYOUT if kernel&gt;=5.4.
  - Fix assembling RAID volume by using incremental.
  - Mdmonitor: Improve udev event handling.
  - Udev: Move udev_block() and udev_unblock() into udev.c.
  - Manage: adjust checking subarray state in update_subarray.
  - Super1: remove support for name= in config.
  - Mdadm: fix update=resync regression.
- Rebase to keep consistent behavior for current code base.
  - 1004-call-mdadm_env.sh-from-usr-libexec-mdadm.patch
- The following patches are moved from package because they are all
  included in mdadm-4.3,
  - 0001-Unify-error-message.patch
  - 0002-mdadm-Fix-double-free.patch
  - 0003-Grow_reshape-Add-r0-grow-size-error-message-and-upda.patch
  - 0004-udev-adapt-rules-to-systemd-v247.patch
  - 0005-Replace-error-prone-signal-with-sigaction.patch
  - 0006-mdadm-Respect-config-file-location-in-man.patch
  - 0007-mdadm-Update-ReadMe.patch
  - 0008-mdadm-Update-config-man-regarding-default-files-and-.patch
  - 0009-mdadm-Update-config-manual.patch
  - 0010-Create-Build-use-default_layout.patch
  - 0011-mdadm-add-map_num_s.patch
  - 0012-mdmon-Stop-parsing-duplicate-options.patch
  - 0013-Grow-block-n-on-external-volumes.patch
  - 0014-Incremental-Fix-possible-memory-and-resource-leaks.patch
  - 0015-Mdmonitor-Fix-segfault.patch
  - 0016-Mdmonitor-Improve-logging-method.patch
  - 0017-Fix-possible-NULL-ptr-dereferences-and-memory-leaks.patch
  - 0018-imsm-Remove-possibility-for-get_imsm_dev-to-return-N.patch
  - 0019-Revert-mdadm-fix-coredump-of-mdadm-monitor-r.patch
  - 0020-util-replace-ioctl-use-with-function.patch
  - 0021-mdadm-super1-restore-commit-45a87c2f31335-to-fix-clu.patch
  - 0022-imsm-introduce-get_disk_slot_in_dev.patch
  - 0023-imsm-use-same-slot-across-container.patch
  - 0024-imsm-block-changing-slots-during-creation.patch
  - 0025-mdadm-block-update-ppl-for-non-raid456-levels.patch
  - 0026-mdadm-Fix-array-size-mismatch-after-grow.patch
  - 0027-mdadm-Remove-dead-code-in-imsm_fix_size_mismatch.patch
  - 0028-Monitor-use-devname-as-char-array-instead-of-pointer.patch
  - 0029-Monitor-use-snprintf-to-fill-device-name.patch
  - 0030-Makefile-Don-t-build-static-build-with-everything-an.patch
  - 0031-DDF-Cleanup-validate_geometry_ddf_container.patch
  - 0032-DDF-Fix-NULL-pointer-dereference-in-validate_geometr.patch
  - 0033-mdadm-Grow-Fix-use-after-close-bug-by-closing-after-.patch
  - 0034-monitor-Avoid-segfault-when-calling-NULL-get_bad_blo.patch
  - 0035-mdadm-Fix-mdadm-r-remove-option-regression.patch
  - 0036-mdadm-Fix-optional-write-behind-parameter.patch
  - 0037-mdadm-Replace-obsolete-usleep-with-nanosleep.patch
  - 0038-mdadm-remove-symlink-option.patch
  - 0039-mdadm-move-data_offset-to-struct-shape.patch
  - 0040-mdadm-Don-t-open-md-device-for-CREATE-and-ASSEMBLE.patch
  - 0041-Grow-Split-Grow_reshape-into-helper-function.patch
  - 0042-Assemble-check-if-device-is-container-before-schedul.patch
  - 0043-super1-report-truncated-device.patch
  - 0044-mdadm-Correct-typos-punctuation-and-grammar-in-man.patch
  - 0046-Monitor-Fix-statelist-memory-leaks.patch
  - 0047-mdadm-added-support-for-Intel-Alderlake-RST-on-VMD-p.patch
  - 0048-mdadm-Add-Documentation-entries-to-systemd-services.patch
  - 0049-ReadMe-fix-command-line-help.patch
  - 0050-mdadm-replace-container-level-checking-with-inline.patch
  - 0051-Mdmonitor-Omit-non-md-devices.patch
  - 0052-mdmon-fix-segfault.patch
  - 0053-util-remove-obsolete-code-from-get_md_name.patch
  - 0054-mdmon-don-t-test-both-all-and-container_name.patch
  - 0055-mdmon-change-systemd-unit-file-to-use-foreground.patch
  - 0056-mdmon-Remove-need-for-KillMode-none.patch
  - 0057-mdmon-Improve-switchroot-interactions.patch
  - 0058-mdopen-always-try-create_named_array.patch
  - 0059-Improvements-for-IMSM_NO_PLATFORM-testing.patch
  - 0060-Grow-fix-possible-memory-leak.patch
  - 0061-Grow-fix-can-t-change-bitmap-type-from-none-to-clustered.patch
  - 0062-Manage-Block-unsafe-member-failing.patch
  - 0063-Mdmonitor-Split-alert-into-separate-functions.patch
  - 0064-Monitor-block-if-monitor-modes-are-combined.patch
  - 0065-Update-mdadm-Monitor-manual.patch
  - 0066-mdadm-create-ident_init.patch
  - 0067-mdadm-Add-option-validation-for-update-subarray.patch
  - 0068-Fix-update-subarray-on-active-volume.patch
  - 0069-Add-code-specific-update-options-to-enum.patch
  - 0070-super-ddf-Remove-update_super_ddf.patch
  - 0071-super0-refactor-the-code-for-enum.patch
  - 0072-super1-refactor-the-code-for-enum.patch
  - 0073-super-intel-refactor-the-code-for-enum.patch
  - 0074-Change-update-to-enum-in-update_super-and-update_sub.patch
  - 0075-Manage-Incremental-code-refactor-string-to-enum.patch
  - 0076-Change-char-to-enum-in-context-update-refactor-code.patch
  - 0077-mdadm-udev-Don-t-handle-change-event-on-raw-devices.patch
  - 0078-Manage-do-not-check-array-state-when-drive-is-remove.patch
  - 0079-incremental-manage-do-not-verify-if-remove-is-safe.patch
  - 0080-super-intel-make-freesize-not-required-for-chunk-siz.patch
  - 0081-manage-move-comment-with-function-description.patch
  - 0082-Fix-NULL-dereference-in-super_by_fd.patch
  - 0083-Mdmonitor-Make-alert_info-global.patch
  - 0084-Mdmonitor-Pass-events-to-alert-using-enums-instead-o.patch
  - 0085-Mdmonitor-Add-helper-functions.patch
  - 0086-Add-helpers-to-determine-whether-directories-or-file.patch
  - 0087-Mdmonitor-Refactor-write_autorebuild_pid.patch
  - 0088-Mdmonitor-Refactor-check_one_sharer-for-better-error.patch
  - 0089-util.c-reorder-code-lines-in-parse_layout_faulty.patch
  - 0090-util.c-fix-memleak-in-parse_layout_faulty.patch
  - 0091-Detail.c-fix-memleak-in-Detail.patch
  - 0092-isuper-intel.c-fix-double-free-in-load_imsm_mpb.patch
  - 0093-super-intel.c-fix-memleak-in-find_disk_attached_hba.patch
  - 0094-super-ddf.c-fix-memleak-in-get_vd_num_of_subarray.patch
  - 0095-Create-goto-abort_locked-instead-of-return-1-in-erro.patch
  - 0096-Create-remove-safe_mode_delay-local-variable.patch
  - 0097-Create-Factor-out-add_disks-helpers.patch
  - 0098-mdadm-Introduce-pr_info.patch
  - 0099-mdadm-Add-write-zeros-option-for-Create.patch
  - 0100-manpage-Add-write-zeroes-option-to-manpage.patch
  - 0101-Define-alignof-using-_Alignof-when-using-C11-or-newe.patch
  - 0102-Use-existence-of-etc-initrd-release-to-detect-initrd.patch
  - 0103-Create-Fix-checking-for-container-in-update_metadata.patch</changelog>
  <changelog author="colyli@suse.de" date="1708689601">- Update mdadm-4.3 to latest status (jsc#PED-7542)
  - Remove hardcoded checkpoint interval checking
    0001-Remove-hardcoded-checkpoint-interval-checking.patch
  - monitor: refactor checkpoint update
    0002-monitor-refactor-checkpoint-update.patch
  - Super-intel: Fix first checkpoint restart
    0003-Super-intel-Fix-first-checkpoint-restart.patch
  - Grow: Move update_tail assign to Grow_reshape()
    0004-Grow-Move-update_tail-assign-to-Grow_reshape.patch
  - Add understanding output section in man
    0005-Add-understanding-output-section-in-man.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1708689602">- Use %autosetup macro. Allows to eliminate the usage of deprecated
  %patchN</changelog>
  <changelog author="colyli@suse.de" date="1720267200">- util.c: change devnm to const in mdmon functions (bsc#1225307)
  0006-util.c-change-devnm-to-const-in-mdmon-functions.patch
- Wait for mdmon when it is stared via systemd (bsc#1225307)
  0007-Wait-for-mdmon-when-it-is-stared-via-systemd.patch</changelog>
  <changelog author="colyli@suse.de" date="1726660800">- Detail: remove duplicated code (bsc#1226413)
  0008-Detail-remove-duplicated-code.patch
- mdadm: Fix native --detail --export (bsc#1226413)
  0009-mdadm-Fix-native-detail-export.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="colyli@suse.de" date="1738843200">- mdopen: add sbin path to env PATH when call system("modprobe md_mod")
  (bsc#1233265)
  0010-mdopen-add-sbin-path-to-env-PATH-when-call-system-mo.patch</changelog>
  <changelog author="mwilck@suse.com" date="1740657600">- Update to version 4.4 (jsc#PED-10220)
  Features:
  * Remove custom bitmap file support from Yu Kuai.
  * Custom device policies implementation from Mariusz Tkaczyk.
  * Self encrypted drives (**SED**) support for IMSM metadata from Blazej Kucman.
  * Support more than 4 disks for **IMSM** RAID10 from Mateusz Kusiak.
  * Read **IMSM** license information from ACPI tables from Blazej Kucman.
  * Support devnode in **--Incremental --remove** from Mariusz Tkaczyk.
  * Printing **IMSM** license type in **--detail-platform** from Blazej Kucman.
  * README.md from Mariusz Tkaczyk and Anna Sztukowska.
  Fixes:
  * Tests improvements from Xiao Ni and Kinga Stefaniuk.
  * Mdmon's Checkpointing improvements from Mateusz Kusiak.
  * Pass mdadm environment flags to systemd-env to enable tests from Mateusz Kusiak.
  * Superblock 1.0 uuid printing fixes from Mariusz Tkaczyk.
  * Find VMD bus manually if link is not available from Mariusz Tkaczyk.
  * Unconditional devices count printing in --detail from Anna Sztukowska.
  * Improve SIGTERM handling during reshape, from Mateusz Kusiak.
  * **Monitor.c** renamed to **Mdmonitor.c** from Kinga Stefaniuk.
  * Mdmonitor service documentation update from Mariusz Tkaczyk.
  * Rework around writing to sysfs files from Mariusz Tkaczyk.
  * Drop of HOT_REMOVE_DISK ioctl in Manage in favour of sysfs from Mariusz Tkaczyk.
  * Delegate disk removal to managemon from Mariusz Tkaczyk.
  * Some clean-ups of legacy code and functionalities like **--auto=md** from Mariusz Tkaczyk.
  * Manual clean-up, references to old kernels removed from Mariusz Tkaczyk.
  * Various static code analysis fixes.
- Add 1000-Revert-mdmonitor-Abandon-custom-configuration-files.patch
  (reverts upstream change to ignore /etc/sysconfig/mdadm)
- Drop obsolete patches (included upstream):
  * Del 0001-Remove-hardcoded-checkpoint-interval-checking.patch
  * Del 0002-monitor-refactor-checkpoint-update.patch
  * Del 0003-Super-intel-Fix-first-checkpoint-restart.patch
  * Del 0004-Grow-Move-update_tail-assign-to-Grow_reshape.patch
  * Del 0005-Add-understanding-output-section-in-man.patch
  * Del 0006-util.c-change-devnm-to-const-in-mdmon-functions.patch
  * Del 0007-Wait-for-mdmon-when-it-is-stared-via-systemd.patch
  * Del 0008-Detail-remove-duplicated-code.patch
  * Del 0009-mdadm-Fix-native-detail-export.patch
- Use obs_scm for code maintenance</changelog>
  <changelog author="mwilck@suse.com" date="1740744000">- mdopen: add sbin path to env PATH when call system("modprobe md_mod")
  (bsc#1233265)
  add 0010-mdopen-add-sbin-path-to-env-PATH-when-call-system-mo.patch</changelog>
  <changelog author="mwilck@suse.com" date="1741089600">- cleanup 1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch
  (remove a redundant macro definition)</changelog>
  <changelog author="alnovak@suse.com" date="1744286400">- IMSM RAID0 2 disks to RAID10 4 disks migration fix
  add 1006-imsm-Fix-RAID0-to-RAID10-migration.patch (bsc#1241001)</changelog>
  <changelog author="mwilck@suse.com" date="1746532800">- Add dependency on suse-module-tools for SLE15 (bsc#1242696)</changelog>
  <changelog author="mwilck@suse.com" date="1746619200">- Allow any valid minor name in md device name (bsc#1240789)
  * add 1007-mdadm-allow-any-valid-minor-number-in-md-device-name.patch</changelog>
  <changelog author="mwilck@suse.com" date="1748347200">- monitor: Add MAILFROM address to email envelope to avoid smtp auth
  errors (bsc#1241474)
  * add 1008-mdmonitor-use-MAILFROM-to-set-sendmail-envelope-send.patch</changelog>
</package>
<package pkgid="97cc75b9649b855e8d08bc51bc2759f59933c580a5830f89f27cd361f1fbccfe" name="minizip-devel" arch="x86_64">
  <version epoch="0" ver="1.2.13" rel="150500.4.6.1"/>
  <changelog author="tchvatal@suse.com" date="1563364800">- Update the s390 patchset bsc#1137624:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1571659200">- Add SUSE specific patch to fix bsc#1138793, we simply don't want
  to test if the app was linked with exactly same version of zlib
  like the one that is present on the runtime:
  * zlib-no-version-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1572350400">- Update the zlib-no-version-check.patch to be even more forgiving
  with the versions on the zlib to allow updates without rebuilds</changelog>
  <changelog author="tchvatal@suse.com" date="1587643200">- Update 410.patch to contain latest fixes from IBM bsc#1166260
  * The build behaviour changed</changelog>
  <changelog author="lidong.zhong@suse.com" date="1596715200">- Permit a deflateParams() parameter change as soon as possible(bsc#1174736)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  Fix DFLTCC not flushing EOBS when creating raw streams(bsc#1174551)
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1598529600">- Set -DDFLTCC_LEVEL_MASK=0x7e on s390/s390x jsc#13776</changelog>
  <changelog author="tchvatal@suse.com" date="1598616000">- Add patch to fix compression level switching
  bsc#1175811 bsc#1175830 bsc#1175831
  * zlib-compression-switching.patch</changelog>
  <changelog author="coolo@suse.com" date="1600257600">- Provide a testsuite subpackage to run post-build validation</changelog>
  <changelog author="lnussel@suse.de" date="1603886400">- install to /usr (boo#1029961)</changelog>
  <changelog author="ali.abdallah@suse.com" date="1604923200">- Fix hw compression on z15 bsc#1176201
- Add zlib-s390x-z15-fix-hw-compression.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1647000000">- Don't install (internal) crypt.h header in minizip
  * minizip-dont-install-crypt-header.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1648209600">- Fix memory corruption on deflate, bsc#1197459
  * bsc1197459.patch - CVE-2018-25032
- Update 410.patch
  * Remove included patches:
    bsc1174551-fxi-imcomplete-raw-streams.patch
    zlib-compression-switching.patch
    zlib-s390x-z15-fix-hw-compression.patch
- Refresh bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch</changelog>
  <changelog author="meissner@suse.com" date="1656763200">- switch to https urls</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661256000">- Update to 1.2.12:
  * A lot of bug fixes
  * Improve speed of crc32 functions
  * Use ARM crc32 instructions if the ARM architecture has them
  For the complete changes, see ChangeLog
- Fixes CVE-2022-37434,  heap-based buffer over-read or buffer overflow in
  inflate.c via a large gzip header extra field
  (CVE-2022-37434, bsc#1202175)
- Added patches:
  * zlib-1.2.11-covscan-issues-rhel9.patch
  * zlib-1.2.11-covscan-issues.patch
  * zlib-1.2.12-s390-vectorize-crc32.patch
  * zlib-1.2.12-optimized-crc32-power8.patch
  * zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.12-fix-configure.patch
  * zlib-1.2.12-correct-inputs-provided-to-crc-func.patch
  * zlib-1.2.12-fix-CVE-2022-37434.patch
  * zlib-1.2.5-minizip-fixuncrypt.patch
- Removed patches:
  * bsc1197459.patch (upstreamed)
  * zlib-power8-fate325307.patch
    (replaced by zlib-1.2.12-optimized-crc32-power8.patch)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
    (replaced by zlib-1.2.12-IBM-Z-hw-accelrated-deflate-s390x.patch)
  * 410.patch
    (replaced by zlib-1.2.12-IBM-Z-hw-accelrated-deflate-s390x.patch)
- Refreshed patches:
  * zlib-format.patch
  * zlib-no-version-check.patch
- Disable profiling since it breaks tests
- Update zlib-rpmlintrc</changelog>
  <changelog author="danilo.spinella@suse.com" date="1665403200">- Add Power8 optimizations:
  * zlib-1.2.12-add-optimized-slide_hash-for-power.patch
  * zlib-1.2.12-add-vectorized-longest_match-for-power.patch
  * zlib-1.2.12-adler32-vector-optimizations-for-power.patch
  * zlib-1.2.12-fix-invalid-memory-access-on-ppc-and-ppc64.patch
- Update zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch</changelog>
  <changelog author="dmueller@suse.com" date="1670760000">- build zlib with optflags again</changelog>
  <changelog author="danilo.spinella@suse.com" date="1674129600">- Update to 1.13:
  * Fix configure issue that discarded provided CC definition
  * Correct incorrect inputs provided to the CRC functions
  * Repair prototypes and exporting of new CRC functions
  * Fix inflateBack to detect invalid input with distances too far
  * Have infback() deliver all of the available output up to any error
  * Fix a bug when getting a gzip header extra field with inflate()
  * Fix bug in block type selection when Z_FIXED used
  * Tighten deflateBound bounds
  * Remove deleted assembler code references
  * Various portability and appearance improvements
- Added patches:
  * zlib-1.2.13-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.13-fix-bug-deflateBound.patch
  * zlib-1.2.13-optimized-s390.patch
- Refreshed patches:
  * zlib-1.2.12-add-optimized-slide_hash-for-power.patch
  * zlib-1.2.12-add-vectorized-longest_match-for-power.patch
  * zlib-1.2.12-s390-vectorize-crc32.patch
- Removed patches:
  * zlib-1.2.12-fix-configure.patch
  * zlib-1.2.12-IBM-Z-hw-accelerated-deflate-s390x.patch
  * zlib-1.2.12-optimized-crc32-power8.patch
  * zlib-1.2.12-correct-inputs-provided-to-crc-func.patch
  * zlib-1.2.12-fix-CVE-2022-37434.patch
  * zlib-1.2.11-optimized-s390.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1683201600">- Fix deflateBound() before deflateInit(), bsc#1210593, bsc#1211005
  bsc1210593.patch</changelog>
  <changelog author="oss@danyspin97.org" date="1697716800">- Fix CVE-2023-45853, integer overflow and resultant heap-based buffer
  overflow in zipOpenNewFileInZip4_6, bsc#1216378
  * CVE-2023-45853.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1771416000">- Fix CVE-2026-27171, infinite loop via the crc32_combine64 and
  crc32_combine_gen64 functions due to missing checks for negative
  lengths (bsc#1258392)
  * CVE-2026-27171.patch</changelog>
</package>
<package pkgid="349feedf5b56264c8390cf055226923886980c9ff08646400867804bc511f6f1" name="mozilla-nspr-32bit" arch="x86_64">
  <version epoch="0" ver="4.36" rel="150000.3.32.1"/>
  <changelog author="wr@rosenauer.org" date="1518004800">- update to version 4.18
  * removed HP-UX DCE threads support
  * improvements for the Windows implementation of PR_SetCurrentThreadName
  * fixes for the Windows implementation of TCP Fast Open</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to version 4.19
  * changed order of shutdown cleanup to avoid a crash on Mac OSX
  * build compatibility with Android NDK r16 and glibc 2.26</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to version 4.20
  * abstract socket address support for Linux (incl. Android)
  * aarch64 support for Windows
  * support for riscv64</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to version 4.21
  * Use MAP_SHARED for read-only file mappings on MacOS and
    Android.
  * Changed prbit.h to use builtin function on aarch64.
  * Test program build fixes.
  * Minor fixes to support unified builds.
  * Update library copyright notices.
  * Removed Gonk/B2G references.</changelog>
  <changelog author="cgrobertson@suse.com" date="1574424000">- Use FAT LTO objects in order to provide proper static library</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to version 4.23
  * fixed a build failure that was introduced in 4.22
  * correctness fix for Win64 socket polling
  * whitespace in C files was cleaned up and no longer uses
    tab characters for indenting
- update to version 4.22
  * added support for the ARC architecture
  * removed support for the following platforms:
    OSF1/Tru64, DGUX, IRIX, Symbian, BeOS
  * correctness and build fixes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1579089600">- update to version 4.24
  * added macro PR_ASSERT_ARG
  * removed some declarations
  * added support for Nios-II, Nds32 and Microblaze architectures</changelog>
  <changelog author="wr@rosenauer.org" date="1583236800">- update to version 4.25
  * fixed reading files larger than 4 GB on Win32
  * added support for Xtensa architecture</changelog>
  <changelog author="wr@rosenauer.org" date="1595505600">- update to version 4.26
  * PR_GetSystemInfo supports a new flag PR_SI_RELEASE_BUILD to get
    information about the operating system build version.
  * Better support parallel building on Windows.
  * The internal release automatic script requires python 3.</changelog>
  <changelog author="wr@rosenauer.org" date="1598097600">- update to version 4.27
  * the macOS platform code for shared library loading was
    changed to support macOS 11.
    If the absolute path parameter given to PR_LoadLibrary
    begins with either /System/ or /usr/lib/ then no test is
    performed if the library exists at a file.
  * An include statement for a Windows system library header
    was added</changelog>
  <changelog author="wr@rosenauer.org" date="1599566400">- update to version 4.28
  * Fix a compiler warning
  * Add rule for cross-compiling with cygwin</changelog>
  <changelog author="wr@rosenauer.org" date="1601467200">- update to version 4.29
  * Remove macOS Code Fragment Manager support code
  * Remove XP_MACOSX and OS_TARGET=MacOSX
  * Refresh config.guess and config.sub
  * Remove NSPR's patch to config.sub
  * Add support for e2k target (64-bit Elbrus 2000)</changelog>
  <changelog author="wr@rosenauer.org" date="1618747200">- update to version 4.30
  * support longer thread names on macOS
  * fix a build failure on OpenBSD</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622116800">- update to version 4.31:
  * Lock access to PRCallOnceType members in PR_CallOnce* for
    thread safety bmo#1686138</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1627300800">- update to version 4.32:
  * implement new socket option PR_SockOpt_DontFrag
  * support larger DNS records by increasing the default buffer
    size for DNS queries</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1640779200">- update to 4.33:
  * fixes to build system and export of private symbols</changelog>
  <changelog author="wr@rosenauer.org" date="1653825600">- update to version 4.34
  * add an API that returns a preferred loopback IP on hosts that
    have two IP stacks available.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1660132800">- update to version 4.34.1
  * add file descriptor sanity checks in the NSPR poll function.</changelog>
  <changelog author="wr@rosenauer.org" date="1665921600">- update to version 4.35
  * fixes for building with clang
  * use the number of online processors for the
    PR_GetNumberOfProcessors() API on some platforms
  * fix build on mips+musl libc
  * Add support for the LoongArch 64-bit architecture</changelog>
  <changelog author="wr@rosenauer.org" date="1732536000">- update to version 4.36
  * remove support for OS/2
  * remove support for Unixware, Bsdi, old AIX, old HPUX9 &amp; scoos
  * remove support for Windows 16 bit
  * renamed the prwin16.h header to prwin.h
  * configure was updated from 2.69 to 2.71
  * various build, test and automation script fixes
  * major parts of the source code were reformatted</changelog>
</package>
<package pkgid="43c9eb350571d32d58540020722e6aacd5e6848dd37d190e05cdf5c0044029a9" name="mozilla-nspr-32bit" arch="x86_64">
  <version epoch="0" ver="4.36.2" rel="150000.3.36.1"/>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to version 4.19
  * changed order of shutdown cleanup to avoid a crash on Mac OSX
  * build compatibility with Android NDK r16 and glibc 2.26</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to version 4.20
  * abstract socket address support for Linux (incl. Android)
  * aarch64 support for Windows
  * support for riscv64</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to version 4.21
  * Use MAP_SHARED for read-only file mappings on MacOS and
    Android.
  * Changed prbit.h to use builtin function on aarch64.
  * Test program build fixes.
  * Minor fixes to support unified builds.
  * Update library copyright notices.
  * Removed Gonk/B2G references.</changelog>
  <changelog author="cgrobertson@suse.com" date="1574424000">- Use FAT LTO objects in order to provide proper static library</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to version 4.23
  * fixed a build failure that was introduced in 4.22
  * correctness fix for Win64 socket polling
  * whitespace in C files was cleaned up and no longer uses
    tab characters for indenting
- update to version 4.22
  * added support for the ARC architecture
  * removed support for the following platforms:
    OSF1/Tru64, DGUX, IRIX, Symbian, BeOS
  * correctness and build fixes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1579089600">- update to version 4.24
  * added macro PR_ASSERT_ARG
  * removed some declarations
  * added support for Nios-II, Nds32 and Microblaze architectures</changelog>
  <changelog author="wr@rosenauer.org" date="1583236800">- update to version 4.25
  * fixed reading files larger than 4 GB on Win32
  * added support for Xtensa architecture</changelog>
  <changelog author="wr@rosenauer.org" date="1595505600">- update to version 4.26
  * PR_GetSystemInfo supports a new flag PR_SI_RELEASE_BUILD to get
    information about the operating system build version.
  * Better support parallel building on Windows.
  * The internal release automatic script requires python 3.</changelog>
  <changelog author="wr@rosenauer.org" date="1598097600">- update to version 4.27
  * the macOS platform code for shared library loading was
    changed to support macOS 11.
    If the absolute path parameter given to PR_LoadLibrary
    begins with either /System/ or /usr/lib/ then no test is
    performed if the library exists at a file.
  * An include statement for a Windows system library header
    was added</changelog>
  <changelog author="wr@rosenauer.org" date="1599566400">- update to version 4.28
  * Fix a compiler warning
  * Add rule for cross-compiling with cygwin</changelog>
  <changelog author="wr@rosenauer.org" date="1601467200">- update to version 4.29
  * Remove macOS Code Fragment Manager support code
  * Remove XP_MACOSX and OS_TARGET=MacOSX
  * Refresh config.guess and config.sub
  * Remove NSPR's patch to config.sub
  * Add support for e2k target (64-bit Elbrus 2000)</changelog>
  <changelog author="wr@rosenauer.org" date="1618747200">- update to version 4.30
  * support longer thread names on macOS
  * fix a build failure on OpenBSD</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622116800">- update to version 4.31:
  * Lock access to PRCallOnceType members in PR_CallOnce* for
    thread safety bmo#1686138</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1627300800">- update to version 4.32:
  * implement new socket option PR_SockOpt_DontFrag
  * support larger DNS records by increasing the default buffer
    size for DNS queries</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1640779200">- update to 4.33:
  * fixes to build system and export of private symbols</changelog>
  <changelog author="wr@rosenauer.org" date="1653825600">- update to version 4.34
  * add an API that returns a preferred loopback IP on hosts that
    have two IP stacks available.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1660132800">- update to version 4.34.1
  * add file descriptor sanity checks in the NSPR poll function.</changelog>
  <changelog author="wr@rosenauer.org" date="1665921600">- update to version 4.35
  * fixes for building with clang
  * use the number of online processors for the
    PR_GetNumberOfProcessors() API on some platforms
  * fix build on mips+musl libc
  * Add support for the LoongArch 64-bit architecture</changelog>
  <changelog author="wr@rosenauer.org" date="1732536000">- update to version 4.36
  * remove support for OS/2
  * remove support for Unixware, Bsdi, old AIX, old HPUX9 &amp; scoos
  * remove support for Windows 16 bit
  * renamed the prwin16.h header to prwin.h
  * configure was updated from 2.69 to 2.71
  * various build, test and automation script fixes
  * major parts of the source code were reformatted</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1762948800">- update to NSPR 4.36.2
  * Fixed a syntax error in test file parsetm.c,
    which was introduced in 4.36.1
- update to NSPR 4.36.1
  * Incorrect time value produced by PR_ParseTimeString and
    PR_ParseTimeStringToExplodedTime if input string doesn't
    specify seconds.</changelog>
</package>
<package pkgid="51473b60e56804e1425b7c4686799be59ef7182ea03620133703922adc8f95b1" name="mozilla-nspr" arch="src">
  <version epoch="0" ver="4.36" rel="150000.3.32.1"/>
  <changelog author="wr@rosenauer.org" date="1518004800">- update to version 4.18
  * removed HP-UX DCE threads support
  * improvements for the Windows implementation of PR_SetCurrentThreadName
  * fixes for the Windows implementation of TCP Fast Open</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to version 4.19
  * changed order of shutdown cleanup to avoid a crash on Mac OSX
  * build compatibility with Android NDK r16 and glibc 2.26</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to version 4.20
  * abstract socket address support for Linux (incl. Android)
  * aarch64 support for Windows
  * support for riscv64</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to version 4.21
  * Use MAP_SHARED for read-only file mappings on MacOS and
    Android.
  * Changed prbit.h to use builtin function on aarch64.
  * Test program build fixes.
  * Minor fixes to support unified builds.
  * Update library copyright notices.
  * Removed Gonk/B2G references.</changelog>
  <changelog author="cgrobertson@suse.com" date="1574424000">- Use FAT LTO objects in order to provide proper static library</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to version 4.23
  * fixed a build failure that was introduced in 4.22
  * correctness fix for Win64 socket polling
  * whitespace in C files was cleaned up and no longer uses
    tab characters for indenting
- update to version 4.22
  * added support for the ARC architecture
  * removed support for the following platforms:
    OSF1/Tru64, DGUX, IRIX, Symbian, BeOS
  * correctness and build fixes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1579089600">- update to version 4.24
  * added macro PR_ASSERT_ARG
  * removed some declarations
  * added support for Nios-II, Nds32 and Microblaze architectures</changelog>
  <changelog author="wr@rosenauer.org" date="1583236800">- update to version 4.25
  * fixed reading files larger than 4 GB on Win32
  * added support for Xtensa architecture</changelog>
  <changelog author="wr@rosenauer.org" date="1595505600">- update to version 4.26
  * PR_GetSystemInfo supports a new flag PR_SI_RELEASE_BUILD to get
    information about the operating system build version.
  * Better support parallel building on Windows.
  * The internal release automatic script requires python 3.</changelog>
  <changelog author="wr@rosenauer.org" date="1598097600">- update to version 4.27
  * the macOS platform code for shared library loading was
    changed to support macOS 11.
    If the absolute path parameter given to PR_LoadLibrary
    begins with either /System/ or /usr/lib/ then no test is
    performed if the library exists at a file.
  * An include statement for a Windows system library header
    was added</changelog>
  <changelog author="wr@rosenauer.org" date="1599566400">- update to version 4.28
  * Fix a compiler warning
  * Add rule for cross-compiling with cygwin</changelog>
  <changelog author="wr@rosenauer.org" date="1601467200">- update to version 4.29
  * Remove macOS Code Fragment Manager support code
  * Remove XP_MACOSX and OS_TARGET=MacOSX
  * Refresh config.guess and config.sub
  * Remove NSPR's patch to config.sub
  * Add support for e2k target (64-bit Elbrus 2000)</changelog>
  <changelog author="wr@rosenauer.org" date="1618747200">- update to version 4.30
  * support longer thread names on macOS
  * fix a build failure on OpenBSD</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622116800">- update to version 4.31:
  * Lock access to PRCallOnceType members in PR_CallOnce* for
    thread safety bmo#1686138</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1627300800">- update to version 4.32:
  * implement new socket option PR_SockOpt_DontFrag
  * support larger DNS records by increasing the default buffer
    size for DNS queries</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1640779200">- update to 4.33:
  * fixes to build system and export of private symbols</changelog>
  <changelog author="wr@rosenauer.org" date="1653825600">- update to version 4.34
  * add an API that returns a preferred loopback IP on hosts that
    have two IP stacks available.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1660132800">- update to version 4.34.1
  * add file descriptor sanity checks in the NSPR poll function.</changelog>
  <changelog author="wr@rosenauer.org" date="1665921600">- update to version 4.35
  * fixes for building with clang
  * use the number of online processors for the
    PR_GetNumberOfProcessors() API on some platforms
  * fix build on mips+musl libc
  * Add support for the LoongArch 64-bit architecture</changelog>
  <changelog author="wr@rosenauer.org" date="1732536000">- update to version 4.36
  * remove support for OS/2
  * remove support for Unixware, Bsdi, old AIX, old HPUX9 &amp; scoos
  * remove support for Windows 16 bit
  * renamed the prwin16.h header to prwin.h
  * configure was updated from 2.69 to 2.71
  * various build, test and automation script fixes
  * major parts of the source code were reformatted</changelog>
</package>
<package pkgid="ccf277f3e597906f0db7e85d7062d75c21706a020a58593cf98bd8e5520c3fb7" name="mozilla-nspr" arch="x86_64">
  <version epoch="0" ver="4.36" rel="150000.3.32.1"/>
  <changelog author="wr@rosenauer.org" date="1518004800">- update to version 4.18
  * removed HP-UX DCE threads support
  * improvements for the Windows implementation of PR_SetCurrentThreadName
  * fixes for the Windows implementation of TCP Fast Open</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to version 4.19
  * changed order of shutdown cleanup to avoid a crash on Mac OSX
  * build compatibility with Android NDK r16 and glibc 2.26</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to version 4.20
  * abstract socket address support for Linux (incl. Android)
  * aarch64 support for Windows
  * support for riscv64</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to version 4.21
  * Use MAP_SHARED for read-only file mappings on MacOS and
    Android.
  * Changed prbit.h to use builtin function on aarch64.
  * Test program build fixes.
  * Minor fixes to support unified builds.
  * Update library copyright notices.
  * Removed Gonk/B2G references.</changelog>
  <changelog author="cgrobertson@suse.com" date="1574424000">- Use FAT LTO objects in order to provide proper static library</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to version 4.23
  * fixed a build failure that was introduced in 4.22
  * correctness fix for Win64 socket polling
  * whitespace in C files was cleaned up and no longer uses
    tab characters for indenting
- update to version 4.22
  * added support for the ARC architecture
  * removed support for the following platforms:
    OSF1/Tru64, DGUX, IRIX, Symbian, BeOS
  * correctness and build fixes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1579089600">- update to version 4.24
  * added macro PR_ASSERT_ARG
  * removed some declarations
  * added support for Nios-II, Nds32 and Microblaze architectures</changelog>
  <changelog author="wr@rosenauer.org" date="1583236800">- update to version 4.25
  * fixed reading files larger than 4 GB on Win32
  * added support for Xtensa architecture</changelog>
  <changelog author="wr@rosenauer.org" date="1595505600">- update to version 4.26
  * PR_GetSystemInfo supports a new flag PR_SI_RELEASE_BUILD to get
    information about the operating system build version.
  * Better support parallel building on Windows.
  * The internal release automatic script requires python 3.</changelog>
  <changelog author="wr@rosenauer.org" date="1598097600">- update to version 4.27
  * the macOS platform code for shared library loading was
    changed to support macOS 11.
    If the absolute path parameter given to PR_LoadLibrary
    begins with either /System/ or /usr/lib/ then no test is
    performed if the library exists at a file.
  * An include statement for a Windows system library header
    was added</changelog>
  <changelog author="wr@rosenauer.org" date="1599566400">- update to version 4.28
  * Fix a compiler warning
  * Add rule for cross-compiling with cygwin</changelog>
  <changelog author="wr@rosenauer.org" date="1601467200">- update to version 4.29
  * Remove macOS Code Fragment Manager support code
  * Remove XP_MACOSX and OS_TARGET=MacOSX
  * Refresh config.guess and config.sub
  * Remove NSPR's patch to config.sub
  * Add support for e2k target (64-bit Elbrus 2000)</changelog>
  <changelog author="wr@rosenauer.org" date="1618747200">- update to version 4.30
  * support longer thread names on macOS
  * fix a build failure on OpenBSD</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622116800">- update to version 4.31:
  * Lock access to PRCallOnceType members in PR_CallOnce* for
    thread safety bmo#1686138</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1627300800">- update to version 4.32:
  * implement new socket option PR_SockOpt_DontFrag
  * support larger DNS records by increasing the default buffer
    size for DNS queries</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1640779200">- update to 4.33:
  * fixes to build system and export of private symbols</changelog>
  <changelog author="wr@rosenauer.org" date="1653825600">- update to version 4.34
  * add an API that returns a preferred loopback IP on hosts that
    have two IP stacks available.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1660132800">- update to version 4.34.1
  * add file descriptor sanity checks in the NSPR poll function.</changelog>
  <changelog author="wr@rosenauer.org" date="1665921600">- update to version 4.35
  * fixes for building with clang
  * use the number of online processors for the
    PR_GetNumberOfProcessors() API on some platforms
  * fix build on mips+musl libc
  * Add support for the LoongArch 64-bit architecture</changelog>
  <changelog author="wr@rosenauer.org" date="1732536000">- update to version 4.36
  * remove support for OS/2
  * remove support for Unixware, Bsdi, old AIX, old HPUX9 &amp; scoos
  * remove support for Windows 16 bit
  * renamed the prwin16.h header to prwin.h
  * configure was updated from 2.69 to 2.71
  * various build, test and automation script fixes
  * major parts of the source code were reformatted</changelog>
</package>
<package pkgid="49708879c1c4e06fec0f2a2433f3b16f08dfb936df228bede8132fca59a72ec6" name="mozilla-nspr" arch="src">
  <version epoch="0" ver="4.36.2" rel="150000.3.36.1"/>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to version 4.19
  * changed order of shutdown cleanup to avoid a crash on Mac OSX
  * build compatibility with Android NDK r16 and glibc 2.26</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to version 4.20
  * abstract socket address support for Linux (incl. Android)
  * aarch64 support for Windows
  * support for riscv64</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to version 4.21
  * Use MAP_SHARED for read-only file mappings on MacOS and
    Android.
  * Changed prbit.h to use builtin function on aarch64.
  * Test program build fixes.
  * Minor fixes to support unified builds.
  * Update library copyright notices.
  * Removed Gonk/B2G references.</changelog>
  <changelog author="cgrobertson@suse.com" date="1574424000">- Use FAT LTO objects in order to provide proper static library</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to version 4.23
  * fixed a build failure that was introduced in 4.22
  * correctness fix for Win64 socket polling
  * whitespace in C files was cleaned up and no longer uses
    tab characters for indenting
- update to version 4.22
  * added support for the ARC architecture
  * removed support for the following platforms:
    OSF1/Tru64, DGUX, IRIX, Symbian, BeOS
  * correctness and build fixes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1579089600">- update to version 4.24
  * added macro PR_ASSERT_ARG
  * removed some declarations
  * added support for Nios-II, Nds32 and Microblaze architectures</changelog>
  <changelog author="wr@rosenauer.org" date="1583236800">- update to version 4.25
  * fixed reading files larger than 4 GB on Win32
  * added support for Xtensa architecture</changelog>
  <changelog author="wr@rosenauer.org" date="1595505600">- update to version 4.26
  * PR_GetSystemInfo supports a new flag PR_SI_RELEASE_BUILD to get
    information about the operating system build version.
  * Better support parallel building on Windows.
  * The internal release automatic script requires python 3.</changelog>
  <changelog author="wr@rosenauer.org" date="1598097600">- update to version 4.27
  * the macOS platform code for shared library loading was
    changed to support macOS 11.
    If the absolute path parameter given to PR_LoadLibrary
    begins with either /System/ or /usr/lib/ then no test is
    performed if the library exists at a file.
  * An include statement for a Windows system library header
    was added</changelog>
  <changelog author="wr@rosenauer.org" date="1599566400">- update to version 4.28
  * Fix a compiler warning
  * Add rule for cross-compiling with cygwin</changelog>
  <changelog author="wr@rosenauer.org" date="1601467200">- update to version 4.29
  * Remove macOS Code Fragment Manager support code
  * Remove XP_MACOSX and OS_TARGET=MacOSX
  * Refresh config.guess and config.sub
  * Remove NSPR's patch to config.sub
  * Add support for e2k target (64-bit Elbrus 2000)</changelog>
  <changelog author="wr@rosenauer.org" date="1618747200">- update to version 4.30
  * support longer thread names on macOS
  * fix a build failure on OpenBSD</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622116800">- update to version 4.31:
  * Lock access to PRCallOnceType members in PR_CallOnce* for
    thread safety bmo#1686138</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1627300800">- update to version 4.32:
  * implement new socket option PR_SockOpt_DontFrag
  * support larger DNS records by increasing the default buffer
    size for DNS queries</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1640779200">- update to 4.33:
  * fixes to build system and export of private symbols</changelog>
  <changelog author="wr@rosenauer.org" date="1653825600">- update to version 4.34
  * add an API that returns a preferred loopback IP on hosts that
    have two IP stacks available.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1660132800">- update to version 4.34.1
  * add file descriptor sanity checks in the NSPR poll function.</changelog>
  <changelog author="wr@rosenauer.org" date="1665921600">- update to version 4.35
  * fixes for building with clang
  * use the number of online processors for the
    PR_GetNumberOfProcessors() API on some platforms
  * fix build on mips+musl libc
  * Add support for the LoongArch 64-bit architecture</changelog>
  <changelog author="wr@rosenauer.org" date="1732536000">- update to version 4.36
  * remove support for OS/2
  * remove support for Unixware, Bsdi, old AIX, old HPUX9 &amp; scoos
  * remove support for Windows 16 bit
  * renamed the prwin16.h header to prwin.h
  * configure was updated from 2.69 to 2.71
  * various build, test and automation script fixes
  * major parts of the source code were reformatted</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1762948800">- update to NSPR 4.36.2
  * Fixed a syntax error in test file parsetm.c,
    which was introduced in 4.36.1
- update to NSPR 4.36.1
  * Incorrect time value produced by PR_ParseTimeString and
    PR_ParseTimeStringToExplodedTime if input string doesn't
    specify seconds.</changelog>
</package>
<package pkgid="a02879fc9c1a01eeeb223dfbebf993bfc8dab7c75d8ccdf8dea75fdf2b7c3495" name="mozilla-nspr" arch="x86_64">
  <version epoch="0" ver="4.36.2" rel="150000.3.36.1"/>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to version 4.19
  * changed order of shutdown cleanup to avoid a crash on Mac OSX
  * build compatibility with Android NDK r16 and glibc 2.26</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to version 4.20
  * abstract socket address support for Linux (incl. Android)
  * aarch64 support for Windows
  * support for riscv64</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to version 4.21
  * Use MAP_SHARED for read-only file mappings on MacOS and
    Android.
  * Changed prbit.h to use builtin function on aarch64.
  * Test program build fixes.
  * Minor fixes to support unified builds.
  * Update library copyright notices.
  * Removed Gonk/B2G references.</changelog>
  <changelog author="cgrobertson@suse.com" date="1574424000">- Use FAT LTO objects in order to provide proper static library</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to version 4.23
  * fixed a build failure that was introduced in 4.22
  * correctness fix for Win64 socket polling
  * whitespace in C files was cleaned up and no longer uses
    tab characters for indenting
- update to version 4.22
  * added support for the ARC architecture
  * removed support for the following platforms:
    OSF1/Tru64, DGUX, IRIX, Symbian, BeOS
  * correctness and build fixes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1579089600">- update to version 4.24
  * added macro PR_ASSERT_ARG
  * removed some declarations
  * added support for Nios-II, Nds32 and Microblaze architectures</changelog>
  <changelog author="wr@rosenauer.org" date="1583236800">- update to version 4.25
  * fixed reading files larger than 4 GB on Win32
  * added support for Xtensa architecture</changelog>
  <changelog author="wr@rosenauer.org" date="1595505600">- update to version 4.26
  * PR_GetSystemInfo supports a new flag PR_SI_RELEASE_BUILD to get
    information about the operating system build version.
  * Better support parallel building on Windows.
  * The internal release automatic script requires python 3.</changelog>
  <changelog author="wr@rosenauer.org" date="1598097600">- update to version 4.27
  * the macOS platform code for shared library loading was
    changed to support macOS 11.
    If the absolute path parameter given to PR_LoadLibrary
    begins with either /System/ or /usr/lib/ then no test is
    performed if the library exists at a file.
  * An include statement for a Windows system library header
    was added</changelog>
  <changelog author="wr@rosenauer.org" date="1599566400">- update to version 4.28
  * Fix a compiler warning
  * Add rule for cross-compiling with cygwin</changelog>
  <changelog author="wr@rosenauer.org" date="1601467200">- update to version 4.29
  * Remove macOS Code Fragment Manager support code
  * Remove XP_MACOSX and OS_TARGET=MacOSX
  * Refresh config.guess and config.sub
  * Remove NSPR's patch to config.sub
  * Add support for e2k target (64-bit Elbrus 2000)</changelog>
  <changelog author="wr@rosenauer.org" date="1618747200">- update to version 4.30
  * support longer thread names on macOS
  * fix a build failure on OpenBSD</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622116800">- update to version 4.31:
  * Lock access to PRCallOnceType members in PR_CallOnce* for
    thread safety bmo#1686138</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1627300800">- update to version 4.32:
  * implement new socket option PR_SockOpt_DontFrag
  * support larger DNS records by increasing the default buffer
    size for DNS queries</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1640779200">- update to 4.33:
  * fixes to build system and export of private symbols</changelog>
  <changelog author="wr@rosenauer.org" date="1653825600">- update to version 4.34
  * add an API that returns a preferred loopback IP on hosts that
    have two IP stacks available.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1660132800">- update to version 4.34.1
  * add file descriptor sanity checks in the NSPR poll function.</changelog>
  <changelog author="wr@rosenauer.org" date="1665921600">- update to version 4.35
  * fixes for building with clang
  * use the number of online processors for the
    PR_GetNumberOfProcessors() API on some platforms
  * fix build on mips+musl libc
  * Add support for the LoongArch 64-bit architecture</changelog>
  <changelog author="wr@rosenauer.org" date="1732536000">- update to version 4.36
  * remove support for OS/2
  * remove support for Unixware, Bsdi, old AIX, old HPUX9 &amp; scoos
  * remove support for Windows 16 bit
  * renamed the prwin16.h header to prwin.h
  * configure was updated from 2.69 to 2.71
  * various build, test and automation script fixes
  * major parts of the source code were reformatted</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1762948800">- update to NSPR 4.36.2
  * Fixed a syntax error in test file parsetm.c,
    which was introduced in 4.36.1
- update to NSPR 4.36.1
  * Incorrect time value produced by PR_ParseTimeString and
    PR_ParseTimeStringToExplodedTime if input string doesn't
    specify seconds.</changelog>
</package>
<package pkgid="fa8175c7934e72bca255992aa8ad78a975a7e0e6a01b77659f0f7917de37f35f" name="mozilla-nspr-devel" arch="x86_64">
  <version epoch="0" ver="4.36" rel="150000.3.32.1"/>
  <changelog author="wr@rosenauer.org" date="1518004800">- update to version 4.18
  * removed HP-UX DCE threads support
  * improvements for the Windows implementation of PR_SetCurrentThreadName
  * fixes for the Windows implementation of TCP Fast Open</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to version 4.19
  * changed order of shutdown cleanup to avoid a crash on Mac OSX
  * build compatibility with Android NDK r16 and glibc 2.26</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to version 4.20
  * abstract socket address support for Linux (incl. Android)
  * aarch64 support for Windows
  * support for riscv64</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to version 4.21
  * Use MAP_SHARED for read-only file mappings on MacOS and
    Android.
  * Changed prbit.h to use builtin function on aarch64.
  * Test program build fixes.
  * Minor fixes to support unified builds.
  * Update library copyright notices.
  * Removed Gonk/B2G references.</changelog>
  <changelog author="cgrobertson@suse.com" date="1574424000">- Use FAT LTO objects in order to provide proper static library</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to version 4.23
  * fixed a build failure that was introduced in 4.22
  * correctness fix for Win64 socket polling
  * whitespace in C files was cleaned up and no longer uses
    tab characters for indenting
- update to version 4.22
  * added support for the ARC architecture
  * removed support for the following platforms:
    OSF1/Tru64, DGUX, IRIX, Symbian, BeOS
  * correctness and build fixes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1579089600">- update to version 4.24
  * added macro PR_ASSERT_ARG
  * removed some declarations
  * added support for Nios-II, Nds32 and Microblaze architectures</changelog>
  <changelog author="wr@rosenauer.org" date="1583236800">- update to version 4.25
  * fixed reading files larger than 4 GB on Win32
  * added support for Xtensa architecture</changelog>
  <changelog author="wr@rosenauer.org" date="1595505600">- update to version 4.26
  * PR_GetSystemInfo supports a new flag PR_SI_RELEASE_BUILD to get
    information about the operating system build version.
  * Better support parallel building on Windows.
  * The internal release automatic script requires python 3.</changelog>
  <changelog author="wr@rosenauer.org" date="1598097600">- update to version 4.27
  * the macOS platform code for shared library loading was
    changed to support macOS 11.
    If the absolute path parameter given to PR_LoadLibrary
    begins with either /System/ or /usr/lib/ then no test is
    performed if the library exists at a file.
  * An include statement for a Windows system library header
    was added</changelog>
  <changelog author="wr@rosenauer.org" date="1599566400">- update to version 4.28
  * Fix a compiler warning
  * Add rule for cross-compiling with cygwin</changelog>
  <changelog author="wr@rosenauer.org" date="1601467200">- update to version 4.29
  * Remove macOS Code Fragment Manager support code
  * Remove XP_MACOSX and OS_TARGET=MacOSX
  * Refresh config.guess and config.sub
  * Remove NSPR's patch to config.sub
  * Add support for e2k target (64-bit Elbrus 2000)</changelog>
  <changelog author="wr@rosenauer.org" date="1618747200">- update to version 4.30
  * support longer thread names on macOS
  * fix a build failure on OpenBSD</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622116800">- update to version 4.31:
  * Lock access to PRCallOnceType members in PR_CallOnce* for
    thread safety bmo#1686138</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1627300800">- update to version 4.32:
  * implement new socket option PR_SockOpt_DontFrag
  * support larger DNS records by increasing the default buffer
    size for DNS queries</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1640779200">- update to 4.33:
  * fixes to build system and export of private symbols</changelog>
  <changelog author="wr@rosenauer.org" date="1653825600">- update to version 4.34
  * add an API that returns a preferred loopback IP on hosts that
    have two IP stacks available.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1660132800">- update to version 4.34.1
  * add file descriptor sanity checks in the NSPR poll function.</changelog>
  <changelog author="wr@rosenauer.org" date="1665921600">- update to version 4.35
  * fixes for building with clang
  * use the number of online processors for the
    PR_GetNumberOfProcessors() API on some platforms
  * fix build on mips+musl libc
  * Add support for the LoongArch 64-bit architecture</changelog>
  <changelog author="wr@rosenauer.org" date="1732536000">- update to version 4.36
  * remove support for OS/2
  * remove support for Unixware, Bsdi, old AIX, old HPUX9 &amp; scoos
  * remove support for Windows 16 bit
  * renamed the prwin16.h header to prwin.h
  * configure was updated from 2.69 to 2.71
  * various build, test and automation script fixes
  * major parts of the source code were reformatted</changelog>
</package>
<package pkgid="68e9dca6ec72193f4e6e59928729ce1e7f46959b28f0c27c8192f4c9dc726052" name="mozilla-nspr-devel" arch="x86_64">
  <version epoch="0" ver="4.36.2" rel="150000.3.36.1"/>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to version 4.19
  * changed order of shutdown cleanup to avoid a crash on Mac OSX
  * build compatibility with Android NDK r16 and glibc 2.26</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to version 4.20
  * abstract socket address support for Linux (incl. Android)
  * aarch64 support for Windows
  * support for riscv64</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to version 4.21
  * Use MAP_SHARED for read-only file mappings on MacOS and
    Android.
  * Changed prbit.h to use builtin function on aarch64.
  * Test program build fixes.
  * Minor fixes to support unified builds.
  * Update library copyright notices.
  * Removed Gonk/B2G references.</changelog>
  <changelog author="cgrobertson@suse.com" date="1574424000">- Use FAT LTO objects in order to provide proper static library</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to version 4.23
  * fixed a build failure that was introduced in 4.22
  * correctness fix for Win64 socket polling
  * whitespace in C files was cleaned up and no longer uses
    tab characters for indenting
- update to version 4.22
  * added support for the ARC architecture
  * removed support for the following platforms:
    OSF1/Tru64, DGUX, IRIX, Symbian, BeOS
  * correctness and build fixes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1579089600">- update to version 4.24
  * added macro PR_ASSERT_ARG
  * removed some declarations
  * added support for Nios-II, Nds32 and Microblaze architectures</changelog>
  <changelog author="wr@rosenauer.org" date="1583236800">- update to version 4.25
  * fixed reading files larger than 4 GB on Win32
  * added support for Xtensa architecture</changelog>
  <changelog author="wr@rosenauer.org" date="1595505600">- update to version 4.26
  * PR_GetSystemInfo supports a new flag PR_SI_RELEASE_BUILD to get
    information about the operating system build version.
  * Better support parallel building on Windows.
  * The internal release automatic script requires python 3.</changelog>
  <changelog author="wr@rosenauer.org" date="1598097600">- update to version 4.27
  * the macOS platform code for shared library loading was
    changed to support macOS 11.
    If the absolute path parameter given to PR_LoadLibrary
    begins with either /System/ or /usr/lib/ then no test is
    performed if the library exists at a file.
  * An include statement for a Windows system library header
    was added</changelog>
  <changelog author="wr@rosenauer.org" date="1599566400">- update to version 4.28
  * Fix a compiler warning
  * Add rule for cross-compiling with cygwin</changelog>
  <changelog author="wr@rosenauer.org" date="1601467200">- update to version 4.29
  * Remove macOS Code Fragment Manager support code
  * Remove XP_MACOSX and OS_TARGET=MacOSX
  * Refresh config.guess and config.sub
  * Remove NSPR's patch to config.sub
  * Add support for e2k target (64-bit Elbrus 2000)</changelog>
  <changelog author="wr@rosenauer.org" date="1618747200">- update to version 4.30
  * support longer thread names on macOS
  * fix a build failure on OpenBSD</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622116800">- update to version 4.31:
  * Lock access to PRCallOnceType members in PR_CallOnce* for
    thread safety bmo#1686138</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1627300800">- update to version 4.32:
  * implement new socket option PR_SockOpt_DontFrag
  * support larger DNS records by increasing the default buffer
    size for DNS queries</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1640779200">- update to 4.33:
  * fixes to build system and export of private symbols</changelog>
  <changelog author="wr@rosenauer.org" date="1653825600">- update to version 4.34
  * add an API that returns a preferred loopback IP on hosts that
    have two IP stacks available.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1660132800">- update to version 4.34.1
  * add file descriptor sanity checks in the NSPR poll function.</changelog>
  <changelog author="wr@rosenauer.org" date="1665921600">- update to version 4.35
  * fixes for building with clang
  * use the number of online processors for the
    PR_GetNumberOfProcessors() API on some platforms
  * fix build on mips+musl libc
  * Add support for the LoongArch 64-bit architecture</changelog>
  <changelog author="wr@rosenauer.org" date="1732536000">- update to version 4.36
  * remove support for OS/2
  * remove support for Unixware, Bsdi, old AIX, old HPUX9 &amp; scoos
  * remove support for Windows 16 bit
  * renamed the prwin16.h header to prwin.h
  * configure was updated from 2.69 to 2.71
  * various build, test and automation script fixes
  * major parts of the source code were reformatted</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1762948800">- update to NSPR 4.36.2
  * Fixed a syntax error in test file parsetm.c,
    which was introduced in 4.36.1
- update to NSPR 4.36.1
  * Incorrect time value produced by PR_ParseTimeString and
    PR_ParseTimeStringToExplodedTime if input string doesn't
    specify seconds.</changelog>
</package>
<package pkgid="996d57124e1b9e4791d2bbf237b85b63568fa813ed09576b540710b5100f5b3c" name="mozilla-nss" arch="src">
  <version epoch="0" ver="3.112" rel="150400.3.57.1"/>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
</package>
<package pkgid="9b234c52ac5cc3a0136ef67154d4029dfda69c2b9fa58dac416a68579790851b" name="mozilla-nss" arch="x86_64">
  <version epoch="0" ver="3.112" rel="150400.3.57.1"/>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
</package>
<package pkgid="08af7ad2e30dca0b3d7db97ab659a757004eed11bc80d8531e0ed088ba8613f3" name="mozilla-nss" arch="src">
  <version epoch="0" ver="3.112.2" rel="150400.3.60.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Removed upstreamed nss-reproducible-chksums.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755864000">- update to NSS 3.112.1
  * bmo#1982742 - restore support for finding certificates by decoded serial number.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759752000">- update to NSS 3.112.2
  * bmo#1970079 - Prevent leaks during pkcs12 decoding.
  * bmo#1988046 - SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates
- Adding patch bmo1980465.patch to fix bug on s390x (bmo#1980465)
- Adding patch bmo1956754.patch to fix possible undefined behaviour (bmo#1956754)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759838400">- Add bmo1990242.patch to move NSS DB password hash away from SHA-1</changelog>
</package>
<package pkgid="9f705e6c8aea3722e5b79c40e29f0f7f259bc53a59b2addf9b6b0764f4275ed1" name="mozilla-nss" arch="x86_64">
  <version epoch="0" ver="3.112.2" rel="150400.3.60.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Removed upstreamed nss-reproducible-chksums.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755864000">- update to NSS 3.112.1
  * bmo#1982742 - restore support for finding certificates by decoded serial number.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759752000">- update to NSS 3.112.2
  * bmo#1970079 - Prevent leaks during pkcs12 decoding.
  * bmo#1988046 - SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates
- Adding patch bmo1980465.patch to fix bug on s390x (bmo#1980465)
- Adding patch bmo1956754.patch to fix possible undefined behaviour (bmo#1956754)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759838400">- Add bmo1990242.patch to move NSS DB password hash away from SHA-1</changelog>
</package>
<package pkgid="071364367c4d93b2d5887d11bd293f10237e6e01f8be4ffa39e978a2aa74ac84" name="mozilla-nss" arch="src">
  <version epoch="0" ver="3.112.3" rel="150400.3.63.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Removed upstreamed nss-reproducible-chksums.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755864000">- update to NSS 3.112.1
  * bmo#1982742 - restore support for finding certificates by decoded serial number.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759752000">- update to NSS 3.112.2
  * bmo#1970079 - Prevent leaks during pkcs12 decoding.
  * bmo#1988046 - SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates
- Adding patch bmo1980465.patch to fix bug on s390x (bmo#1980465)
- Adding patch bmo1956754.patch to fix possible undefined behaviour (bmo#1956754)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759838400">- Add bmo1990242.patch to move NSS DB password hash away from SHA-1</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- update to NSS 3.112.3
  * bmo#2009552 - avoid integer overflow in platform-independent ghash</changelog>
</package>
<package pkgid="5a10d910563b561f161d3d8cc5442f4a63c0f527ad7d433fddf1e9c2c599f908" name="mozilla-nss" arch="x86_64">
  <version epoch="0" ver="3.112.3" rel="150400.3.63.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Removed upstreamed nss-reproducible-chksums.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755864000">- update to NSS 3.112.1
  * bmo#1982742 - restore support for finding certificates by decoded serial number.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759752000">- update to NSS 3.112.2
  * bmo#1970079 - Prevent leaks during pkcs12 decoding.
  * bmo#1988046 - SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates
- Adding patch bmo1980465.patch to fix bug on s390x (bmo#1980465)
- Adding patch bmo1956754.patch to fix possible undefined behaviour (bmo#1956754)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759838400">- Add bmo1990242.patch to move NSS DB password hash away from SHA-1</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- update to NSS 3.112.3
  * bmo#2009552 - avoid integer overflow in platform-independent ghash</changelog>
</package>
<package pkgid="73ed41de65b04472d6a43c2bf26b6a9ed189882924b396cad0e0caf0e0c98ddc" name="mozilla-nss" arch="src">
  <version epoch="0" ver="3.112.4" rel="150400.3.66.1"/>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Removed upstreamed nss-reproducible-chksums.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755864000">- update to NSS 3.112.1
  * bmo#1982742 - restore support for finding certificates by decoded serial number.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759752000">- update to NSS 3.112.2
  * bmo#1970079 - Prevent leaks during pkcs12 decoding.
  * bmo#1988046 - SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates
- Adding patch bmo1980465.patch to fix bug on s390x (bmo#1980465)
- Adding patch bmo1956754.patch to fix possible undefined behaviour (bmo#1956754)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759838400">- Add bmo1990242.patch to move NSS DB password hash away from SHA-1</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- update to NSS 3.112.3
  * bmo#2009552 - avoid integer overflow in platform-independent ghash</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1776168000">- update to NSS 3.112.4
  * bmo#2030135 - improve error handling in PK11_ImportPrivateKeyInfoAndReturnKey.
  * bmo#2029752 - Improving the allocation of S/MIME DecryptSymKey.
  * bmo#2029462 - store email on subject cache_entry in NSS trust domain.
  * bmo#2029425 - Heap use-after-free in cert_VerifyCertChainOld via dangling certsList[] entry on NameConstraints violation.
  * bmo#2029323 - Improve size calculations in CMS content buffering.
  * bmo#2028001 - avoid integer overflow while escaping RFC822 Names.
  * bmo#2027378 - Reject excessively large ASN.1 SEQUENCE OF in quickder.
  * bmo#2027365 - Deep copy profile data in CERT_FindSMimeProfile.
  * bmo#2027345 - Improve input validation in DSAU signature decoding.
  * bmo#2026311 - avoid integer overflow in RSA_EMSAEncodePSS.
  * bmo#2019357 - RSA_EMSAEncodePSS should validate the length of mHash.
  * bmo#2026156 - Add a maximum cert uncompressed len and tests.
  * bmo#2026089 - Clarify extension negotiation mechanism for TLS Handshakes.
  * bmo#2023209 - ensure permittedSubtrees don't match wildcards that could be outside the permitted tree.
  * bmo#2023207 - Fix integer underflow in tls13_AEAD when ciphertext is shorter than tag.
  * bmo#2019224 - Remove invalid PORT_Free().
  * bmo#1964722 - free digest objects in SEC_PKCS7DecoderFinish if they haven't already been freed.
  * bmo#1935995 - make ss-&gt;ssl3.hs.cookie an owned-copy of the cookie.</changelog>
</package>
<package pkgid="04d71c48d9d33a93534bcb124b26f84fd67c16af3417580a457afbb0a2ad6d56" name="mozilla-nss" arch="x86_64">
  <version epoch="0" ver="3.112.4" rel="150400.3.66.1"/>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Removed upstreamed nss-reproducible-chksums.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755864000">- update to NSS 3.112.1
  * bmo#1982742 - restore support for finding certificates by decoded serial number.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759752000">- update to NSS 3.112.2
  * bmo#1970079 - Prevent leaks during pkcs12 decoding.
  * bmo#1988046 - SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates
- Adding patch bmo1980465.patch to fix bug on s390x (bmo#1980465)
- Adding patch bmo1956754.patch to fix possible undefined behaviour (bmo#1956754)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759838400">- Add bmo1990242.patch to move NSS DB password hash away from SHA-1</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- update to NSS 3.112.3
  * bmo#2009552 - avoid integer overflow in platform-independent ghash</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1776168000">- update to NSS 3.112.4
  * bmo#2030135 - improve error handling in PK11_ImportPrivateKeyInfoAndReturnKey.
  * bmo#2029752 - Improving the allocation of S/MIME DecryptSymKey.
  * bmo#2029462 - store email on subject cache_entry in NSS trust domain.
  * bmo#2029425 - Heap use-after-free in cert_VerifyCertChainOld via dangling certsList[] entry on NameConstraints violation.
  * bmo#2029323 - Improve size calculations in CMS content buffering.
  * bmo#2028001 - avoid integer overflow while escaping RFC822 Names.
  * bmo#2027378 - Reject excessively large ASN.1 SEQUENCE OF in quickder.
  * bmo#2027365 - Deep copy profile data in CERT_FindSMimeProfile.
  * bmo#2027345 - Improve input validation in DSAU signature decoding.
  * bmo#2026311 - avoid integer overflow in RSA_EMSAEncodePSS.
  * bmo#2019357 - RSA_EMSAEncodePSS should validate the length of mHash.
  * bmo#2026156 - Add a maximum cert uncompressed len and tests.
  * bmo#2026089 - Clarify extension negotiation mechanism for TLS Handshakes.
  * bmo#2023209 - ensure permittedSubtrees don't match wildcards that could be outside the permitted tree.
  * bmo#2023207 - Fix integer underflow in tls13_AEAD when ciphertext is shorter than tag.
  * bmo#2019224 - Remove invalid PORT_Free().
  * bmo#1964722 - free digest objects in SEC_PKCS7DecoderFinish if they haven't already been freed.
  * bmo#1935995 - make ss-&gt;ssl3.hs.cookie an owned-copy of the cookie.</changelog>
</package>
<package pkgid="9a762403846d661905af23b1b33c56a4a46e49e1cb6c99e7779252af11ffe632" name="mozilla-nss-32bit" arch="x86_64">
  <version epoch="0" ver="3.112" rel="150400.3.57.1"/>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
</package>
<package pkgid="cc848b436c1507cf84eedecbaddfff8354edaf7a6fbda2beee4f23e151a7dd28" name="mozilla-nss-32bit" arch="x86_64">
  <version epoch="0" ver="3.112.2" rel="150400.3.60.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Removed upstreamed nss-reproducible-chksums.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755864000">- update to NSS 3.112.1
  * bmo#1982742 - restore support for finding certificates by decoded serial number.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759752000">- update to NSS 3.112.2
  * bmo#1970079 - Prevent leaks during pkcs12 decoding.
  * bmo#1988046 - SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates
- Adding patch bmo1980465.patch to fix bug on s390x (bmo#1980465)
- Adding patch bmo1956754.patch to fix possible undefined behaviour (bmo#1956754)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759838400">- Add bmo1990242.patch to move NSS DB password hash away from SHA-1</changelog>
</package>
<package pkgid="516055d90aab4d61ef7f6f8012b0d0e9e0d344882bb9178d2223a83c9edb05df" name="mozilla-nss-32bit" arch="x86_64">
  <version epoch="0" ver="3.112.3" rel="150400.3.63.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Removed upstreamed nss-reproducible-chksums.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755864000">- update to NSS 3.112.1
  * bmo#1982742 - restore support for finding certificates by decoded serial number.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759752000">- update to NSS 3.112.2
  * bmo#1970079 - Prevent leaks during pkcs12 decoding.
  * bmo#1988046 - SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates
- Adding patch bmo1980465.patch to fix bug on s390x (bmo#1980465)
- Adding patch bmo1956754.patch to fix possible undefined behaviour (bmo#1956754)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759838400">- Add bmo1990242.patch to move NSS DB password hash away from SHA-1</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- update to NSS 3.112.3
  * bmo#2009552 - avoid integer overflow in platform-independent ghash</changelog>
</package>
<package pkgid="394b7134b9fdaf123ce0d59d41979bebac8fcb2e556331752c92fa2ed8dfb1e1" name="mozilla-nss-32bit" arch="x86_64">
  <version epoch="0" ver="3.112.4" rel="150400.3.66.1"/>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Removed upstreamed nss-reproducible-chksums.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755864000">- update to NSS 3.112.1
  * bmo#1982742 - restore support for finding certificates by decoded serial number.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759752000">- update to NSS 3.112.2
  * bmo#1970079 - Prevent leaks during pkcs12 decoding.
  * bmo#1988046 - SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates
- Adding patch bmo1980465.patch to fix bug on s390x (bmo#1980465)
- Adding patch bmo1956754.patch to fix possible undefined behaviour (bmo#1956754)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759838400">- Add bmo1990242.patch to move NSS DB password hash away from SHA-1</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- update to NSS 3.112.3
  * bmo#2009552 - avoid integer overflow in platform-independent ghash</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1776168000">- update to NSS 3.112.4
  * bmo#2030135 - improve error handling in PK11_ImportPrivateKeyInfoAndReturnKey.
  * bmo#2029752 - Improving the allocation of S/MIME DecryptSymKey.
  * bmo#2029462 - store email on subject cache_entry in NSS trust domain.
  * bmo#2029425 - Heap use-after-free in cert_VerifyCertChainOld via dangling certsList[] entry on NameConstraints violation.
  * bmo#2029323 - Improve size calculations in CMS content buffering.
  * bmo#2028001 - avoid integer overflow while escaping RFC822 Names.
  * bmo#2027378 - Reject excessively large ASN.1 SEQUENCE OF in quickder.
  * bmo#2027365 - Deep copy profile data in CERT_FindSMimeProfile.
  * bmo#2027345 - Improve input validation in DSAU signature decoding.
  * bmo#2026311 - avoid integer overflow in RSA_EMSAEncodePSS.
  * bmo#2019357 - RSA_EMSAEncodePSS should validate the length of mHash.
  * bmo#2026156 - Add a maximum cert uncompressed len and tests.
  * bmo#2026089 - Clarify extension negotiation mechanism for TLS Handshakes.
  * bmo#2023209 - ensure permittedSubtrees don't match wildcards that could be outside the permitted tree.
  * bmo#2023207 - Fix integer underflow in tls13_AEAD when ciphertext is shorter than tag.
  * bmo#2019224 - Remove invalid PORT_Free().
  * bmo#1964722 - free digest objects in SEC_PKCS7DecoderFinish if they haven't already been freed.
  * bmo#1935995 - make ss-&gt;ssl3.hs.cookie an owned-copy of the cookie.</changelog>
</package>
<package pkgid="ebc3a6dee738e7acdfab5c193e2c1f776acb1b0333165267423c146f2b588100" name="mozilla-nss-certs" arch="x86_64">
  <version epoch="0" ver="3.112" rel="150400.3.57.1"/>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
</package>
<package pkgid="987e34f71c19a9b99f499c53381e811d2ea5dcea5e0f953519faed1cedd46533" name="mozilla-nss-certs" arch="x86_64">
  <version epoch="0" ver="3.112.2" rel="150400.3.60.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Removed upstreamed nss-reproducible-chksums.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755864000">- update to NSS 3.112.1
  * bmo#1982742 - restore support for finding certificates by decoded serial number.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759752000">- update to NSS 3.112.2
  * bmo#1970079 - Prevent leaks during pkcs12 decoding.
  * bmo#1988046 - SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates
- Adding patch bmo1980465.patch to fix bug on s390x (bmo#1980465)
- Adding patch bmo1956754.patch to fix possible undefined behaviour (bmo#1956754)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759838400">- Add bmo1990242.patch to move NSS DB password hash away from SHA-1</changelog>
</package>
<package pkgid="8a14318c292998275c0b9a90974493185b1e182353e8fdab8e20a9526ece10aa" name="mozilla-nss-certs" arch="x86_64">
  <version epoch="0" ver="3.112.3" rel="150400.3.63.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Removed upstreamed nss-reproducible-chksums.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755864000">- update to NSS 3.112.1
  * bmo#1982742 - restore support for finding certificates by decoded serial number.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759752000">- update to NSS 3.112.2
  * bmo#1970079 - Prevent leaks during pkcs12 decoding.
  * bmo#1988046 - SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates
- Adding patch bmo1980465.patch to fix bug on s390x (bmo#1980465)
- Adding patch bmo1956754.patch to fix possible undefined behaviour (bmo#1956754)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759838400">- Add bmo1990242.patch to move NSS DB password hash away from SHA-1</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- update to NSS 3.112.3
  * bmo#2009552 - avoid integer overflow in platform-independent ghash</changelog>
</package>
<package pkgid="68667ca4652d079cde0a6dc1ddd03ee0f878b15cb930ecd8aceb94c850451447" name="mozilla-nss-certs" arch="x86_64">
  <version epoch="0" ver="3.112.4" rel="150400.3.66.1"/>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Removed upstreamed nss-reproducible-chksums.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755864000">- update to NSS 3.112.1
  * bmo#1982742 - restore support for finding certificates by decoded serial number.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759752000">- update to NSS 3.112.2
  * bmo#1970079 - Prevent leaks during pkcs12 decoding.
  * bmo#1988046 - SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates
- Adding patch bmo1980465.patch to fix bug on s390x (bmo#1980465)
- Adding patch bmo1956754.patch to fix possible undefined behaviour (bmo#1956754)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759838400">- Add bmo1990242.patch to move NSS DB password hash away from SHA-1</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- update to NSS 3.112.3
  * bmo#2009552 - avoid integer overflow in platform-independent ghash</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1776168000">- update to NSS 3.112.4
  * bmo#2030135 - improve error handling in PK11_ImportPrivateKeyInfoAndReturnKey.
  * bmo#2029752 - Improving the allocation of S/MIME DecryptSymKey.
  * bmo#2029462 - store email on subject cache_entry in NSS trust domain.
  * bmo#2029425 - Heap use-after-free in cert_VerifyCertChainOld via dangling certsList[] entry on NameConstraints violation.
  * bmo#2029323 - Improve size calculations in CMS content buffering.
  * bmo#2028001 - avoid integer overflow while escaping RFC822 Names.
  * bmo#2027378 - Reject excessively large ASN.1 SEQUENCE OF in quickder.
  * bmo#2027365 - Deep copy profile data in CERT_FindSMimeProfile.
  * bmo#2027345 - Improve input validation in DSAU signature decoding.
  * bmo#2026311 - avoid integer overflow in RSA_EMSAEncodePSS.
  * bmo#2019357 - RSA_EMSAEncodePSS should validate the length of mHash.
  * bmo#2026156 - Add a maximum cert uncompressed len and tests.
  * bmo#2026089 - Clarify extension negotiation mechanism for TLS Handshakes.
  * bmo#2023209 - ensure permittedSubtrees don't match wildcards that could be outside the permitted tree.
  * bmo#2023207 - Fix integer underflow in tls13_AEAD when ciphertext is shorter than tag.
  * bmo#2019224 - Remove invalid PORT_Free().
  * bmo#1964722 - free digest objects in SEC_PKCS7DecoderFinish if they haven't already been freed.
  * bmo#1935995 - make ss-&gt;ssl3.hs.cookie an owned-copy of the cookie.</changelog>
</package>
<package pkgid="54aa9cd5a0928707192e26b43164d46490c50f43bc935a48dc38936fba4518c4" name="mozilla-nss-certs-32bit" arch="x86_64">
  <version epoch="0" ver="3.112" rel="150400.3.57.1"/>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
</package>
<package pkgid="92ae64277ceb6a887d456c9c894342401192261e0caf722fc3dca452505bbefe" name="mozilla-nss-certs-32bit" arch="x86_64">
  <version epoch="0" ver="3.112.2" rel="150400.3.60.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Removed upstreamed nss-reproducible-chksums.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755864000">- update to NSS 3.112.1
  * bmo#1982742 - restore support for finding certificates by decoded serial number.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759752000">- update to NSS 3.112.2
  * bmo#1970079 - Prevent leaks during pkcs12 decoding.
  * bmo#1988046 - SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates
- Adding patch bmo1980465.patch to fix bug on s390x (bmo#1980465)
- Adding patch bmo1956754.patch to fix possible undefined behaviour (bmo#1956754)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759838400">- Add bmo1990242.patch to move NSS DB password hash away from SHA-1</changelog>
</package>
<package pkgid="c1f16753ddbfb62ee562d01209c296aa785ffe201e674e4cb8aaf76c0be9b339" name="mozilla-nss-certs-32bit" arch="x86_64">
  <version epoch="0" ver="3.112.3" rel="150400.3.63.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Removed upstreamed nss-reproducible-chksums.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755864000">- update to NSS 3.112.1
  * bmo#1982742 - restore support for finding certificates by decoded serial number.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759752000">- update to NSS 3.112.2
  * bmo#1970079 - Prevent leaks during pkcs12 decoding.
  * bmo#1988046 - SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates
- Adding patch bmo1980465.patch to fix bug on s390x (bmo#1980465)
- Adding patch bmo1956754.patch to fix possible undefined behaviour (bmo#1956754)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759838400">- Add bmo1990242.patch to move NSS DB password hash away from SHA-1</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- update to NSS 3.112.3
  * bmo#2009552 - avoid integer overflow in platform-independent ghash</changelog>
</package>
<package pkgid="dcd53875acd4bf1143735ceefb08e4a74e6b1f9411882324c73ad85785d4a672" name="mozilla-nss-certs-32bit" arch="x86_64">
  <version epoch="0" ver="3.112.4" rel="150400.3.66.1"/>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Removed upstreamed nss-reproducible-chksums.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755864000">- update to NSS 3.112.1
  * bmo#1982742 - restore support for finding certificates by decoded serial number.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759752000">- update to NSS 3.112.2
  * bmo#1970079 - Prevent leaks during pkcs12 decoding.
  * bmo#1988046 - SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates
- Adding patch bmo1980465.patch to fix bug on s390x (bmo#1980465)
- Adding patch bmo1956754.patch to fix possible undefined behaviour (bmo#1956754)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759838400">- Add bmo1990242.patch to move NSS DB password hash away from SHA-1</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- update to NSS 3.112.3
  * bmo#2009552 - avoid integer overflow in platform-independent ghash</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1776168000">- update to NSS 3.112.4
  * bmo#2030135 - improve error handling in PK11_ImportPrivateKeyInfoAndReturnKey.
  * bmo#2029752 - Improving the allocation of S/MIME DecryptSymKey.
  * bmo#2029462 - store email on subject cache_entry in NSS trust domain.
  * bmo#2029425 - Heap use-after-free in cert_VerifyCertChainOld via dangling certsList[] entry on NameConstraints violation.
  * bmo#2029323 - Improve size calculations in CMS content buffering.
  * bmo#2028001 - avoid integer overflow while escaping RFC822 Names.
  * bmo#2027378 - Reject excessively large ASN.1 SEQUENCE OF in quickder.
  * bmo#2027365 - Deep copy profile data in CERT_FindSMimeProfile.
  * bmo#2027345 - Improve input validation in DSAU signature decoding.
  * bmo#2026311 - avoid integer overflow in RSA_EMSAEncodePSS.
  * bmo#2019357 - RSA_EMSAEncodePSS should validate the length of mHash.
  * bmo#2026156 - Add a maximum cert uncompressed len and tests.
  * bmo#2026089 - Clarify extension negotiation mechanism for TLS Handshakes.
  * bmo#2023209 - ensure permittedSubtrees don't match wildcards that could be outside the permitted tree.
  * bmo#2023207 - Fix integer underflow in tls13_AEAD when ciphertext is shorter than tag.
  * bmo#2019224 - Remove invalid PORT_Free().
  * bmo#1964722 - free digest objects in SEC_PKCS7DecoderFinish if they haven't already been freed.
  * bmo#1935995 - make ss-&gt;ssl3.hs.cookie an owned-copy of the cookie.</changelog>
</package>
<package pkgid="9e184eed25da2acd61e27170d5c0fbb6dec33a7895aeaf9f2877a19bfd7b7f55" name="mozilla-nss-devel" arch="x86_64">
  <version epoch="0" ver="3.112" rel="150400.3.57.1"/>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
</package>
<package pkgid="51bbb5ce9e3e58c812c261f5d3389116dc014489c21d7e4ef5ef0381722711a8" name="mozilla-nss-devel" arch="x86_64">
  <version epoch="0" ver="3.112.2" rel="150400.3.60.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Removed upstreamed nss-reproducible-chksums.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755864000">- update to NSS 3.112.1
  * bmo#1982742 - restore support for finding certificates by decoded serial number.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759752000">- update to NSS 3.112.2
  * bmo#1970079 - Prevent leaks during pkcs12 decoding.
  * bmo#1988046 - SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates
- Adding patch bmo1980465.patch to fix bug on s390x (bmo#1980465)
- Adding patch bmo1956754.patch to fix possible undefined behaviour (bmo#1956754)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759838400">- Add bmo1990242.patch to move NSS DB password hash away from SHA-1</changelog>
</package>
<package pkgid="15993f331f9b582e4d7f4c1bd2e18166e4e1cb52c277fff297d8e2dd8195e52c" name="mozilla-nss-devel" arch="x86_64">
  <version epoch="0" ver="3.112.3" rel="150400.3.63.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Removed upstreamed nss-reproducible-chksums.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755864000">- update to NSS 3.112.1
  * bmo#1982742 - restore support for finding certificates by decoded serial number.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759752000">- update to NSS 3.112.2
  * bmo#1970079 - Prevent leaks during pkcs12 decoding.
  * bmo#1988046 - SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates
- Adding patch bmo1980465.patch to fix bug on s390x (bmo#1980465)
- Adding patch bmo1956754.patch to fix possible undefined behaviour (bmo#1956754)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759838400">- Add bmo1990242.patch to move NSS DB password hash away from SHA-1</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- update to NSS 3.112.3
  * bmo#2009552 - avoid integer overflow in platform-independent ghash</changelog>
</package>
<package pkgid="741190562bea189f0a4745175a812541007174e7df9198b27d49cc6ebcadbd94" name="mozilla-nss-devel" arch="x86_64">
  <version epoch="0" ver="3.112.4" rel="150400.3.66.1"/>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Removed upstreamed nss-reproducible-chksums.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755864000">- update to NSS 3.112.1
  * bmo#1982742 - restore support for finding certificates by decoded serial number.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759752000">- update to NSS 3.112.2
  * bmo#1970079 - Prevent leaks during pkcs12 decoding.
  * bmo#1988046 - SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates
- Adding patch bmo1980465.patch to fix bug on s390x (bmo#1980465)
- Adding patch bmo1956754.patch to fix possible undefined behaviour (bmo#1956754)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759838400">- Add bmo1990242.patch to move NSS DB password hash away from SHA-1</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- update to NSS 3.112.3
  * bmo#2009552 - avoid integer overflow in platform-independent ghash</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1776168000">- update to NSS 3.112.4
  * bmo#2030135 - improve error handling in PK11_ImportPrivateKeyInfoAndReturnKey.
  * bmo#2029752 - Improving the allocation of S/MIME DecryptSymKey.
  * bmo#2029462 - store email on subject cache_entry in NSS trust domain.
  * bmo#2029425 - Heap use-after-free in cert_VerifyCertChainOld via dangling certsList[] entry on NameConstraints violation.
  * bmo#2029323 - Improve size calculations in CMS content buffering.
  * bmo#2028001 - avoid integer overflow while escaping RFC822 Names.
  * bmo#2027378 - Reject excessively large ASN.1 SEQUENCE OF in quickder.
  * bmo#2027365 - Deep copy profile data in CERT_FindSMimeProfile.
  * bmo#2027345 - Improve input validation in DSAU signature decoding.
  * bmo#2026311 - avoid integer overflow in RSA_EMSAEncodePSS.
  * bmo#2019357 - RSA_EMSAEncodePSS should validate the length of mHash.
  * bmo#2026156 - Add a maximum cert uncompressed len and tests.
  * bmo#2026089 - Clarify extension negotiation mechanism for TLS Handshakes.
  * bmo#2023209 - ensure permittedSubtrees don't match wildcards that could be outside the permitted tree.
  * bmo#2023207 - Fix integer underflow in tls13_AEAD when ciphertext is shorter than tag.
  * bmo#2019224 - Remove invalid PORT_Free().
  * bmo#1964722 - free digest objects in SEC_PKCS7DecoderFinish if they haven't already been freed.
  * bmo#1935995 - make ss-&gt;ssl3.hs.cookie an owned-copy of the cookie.</changelog>
</package>
<package pkgid="fd7c8104b69cdab844b96272c4100f5a15aecfa44571cbb7216e3daf49eaa7c2" name="mozilla-nss-sysinit" arch="x86_64">
  <version epoch="0" ver="3.112" rel="150400.3.57.1"/>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
</package>
<package pkgid="738f859b9cb569eee2b02a29d7da5239c2e432b3f979cc3ddc4733a5f97459f9" name="mozilla-nss-sysinit" arch="x86_64">
  <version epoch="0" ver="3.112.2" rel="150400.3.60.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Removed upstreamed nss-reproducible-chksums.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755864000">- update to NSS 3.112.1
  * bmo#1982742 - restore support for finding certificates by decoded serial number.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759752000">- update to NSS 3.112.2
  * bmo#1970079 - Prevent leaks during pkcs12 decoding.
  * bmo#1988046 - SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates
- Adding patch bmo1980465.patch to fix bug on s390x (bmo#1980465)
- Adding patch bmo1956754.patch to fix possible undefined behaviour (bmo#1956754)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759838400">- Add bmo1990242.patch to move NSS DB password hash away from SHA-1</changelog>
</package>
<package pkgid="f30b141467f2136243af7ec3d632bc75330140354234cc716f93f7b597353a03" name="mozilla-nss-sysinit" arch="x86_64">
  <version epoch="0" ver="3.112.3" rel="150400.3.63.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Removed upstreamed nss-reproducible-chksums.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755864000">- update to NSS 3.112.1
  * bmo#1982742 - restore support for finding certificates by decoded serial number.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759752000">- update to NSS 3.112.2
  * bmo#1970079 - Prevent leaks during pkcs12 decoding.
  * bmo#1988046 - SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates
- Adding patch bmo1980465.patch to fix bug on s390x (bmo#1980465)
- Adding patch bmo1956754.patch to fix possible undefined behaviour (bmo#1956754)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759838400">- Add bmo1990242.patch to move NSS DB password hash away from SHA-1</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- update to NSS 3.112.3
  * bmo#2009552 - avoid integer overflow in platform-independent ghash</changelog>
</package>
<package pkgid="f86fdae1850e7e7f1987483a131adc519664694d6c64f367252839d66fb34362" name="mozilla-nss-sysinit" arch="x86_64">
  <version epoch="0" ver="3.112.4" rel="150400.3.66.1"/>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Removed upstreamed nss-reproducible-chksums.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755864000">- update to NSS 3.112.1
  * bmo#1982742 - restore support for finding certificates by decoded serial number.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759752000">- update to NSS 3.112.2
  * bmo#1970079 - Prevent leaks during pkcs12 decoding.
  * bmo#1988046 - SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates
- Adding patch bmo1980465.patch to fix bug on s390x (bmo#1980465)
- Adding patch bmo1956754.patch to fix possible undefined behaviour (bmo#1956754)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759838400">- Add bmo1990242.patch to move NSS DB password hash away from SHA-1</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- update to NSS 3.112.3
  * bmo#2009552 - avoid integer overflow in platform-independent ghash</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1776168000">- update to NSS 3.112.4
  * bmo#2030135 - improve error handling in PK11_ImportPrivateKeyInfoAndReturnKey.
  * bmo#2029752 - Improving the allocation of S/MIME DecryptSymKey.
  * bmo#2029462 - store email on subject cache_entry in NSS trust domain.
  * bmo#2029425 - Heap use-after-free in cert_VerifyCertChainOld via dangling certsList[] entry on NameConstraints violation.
  * bmo#2029323 - Improve size calculations in CMS content buffering.
  * bmo#2028001 - avoid integer overflow while escaping RFC822 Names.
  * bmo#2027378 - Reject excessively large ASN.1 SEQUENCE OF in quickder.
  * bmo#2027365 - Deep copy profile data in CERT_FindSMimeProfile.
  * bmo#2027345 - Improve input validation in DSAU signature decoding.
  * bmo#2026311 - avoid integer overflow in RSA_EMSAEncodePSS.
  * bmo#2019357 - RSA_EMSAEncodePSS should validate the length of mHash.
  * bmo#2026156 - Add a maximum cert uncompressed len and tests.
  * bmo#2026089 - Clarify extension negotiation mechanism for TLS Handshakes.
  * bmo#2023209 - ensure permittedSubtrees don't match wildcards that could be outside the permitted tree.
  * bmo#2023207 - Fix integer underflow in tls13_AEAD when ciphertext is shorter than tag.
  * bmo#2019224 - Remove invalid PORT_Free().
  * bmo#1964722 - free digest objects in SEC_PKCS7DecoderFinish if they haven't already been freed.
  * bmo#1935995 - make ss-&gt;ssl3.hs.cookie an owned-copy of the cookie.</changelog>
</package>
<package pkgid="6809d31d807e3e0c05554e29c85a51b9e0948c1934a7ae647e0e23b0ae4a250c" name="mozilla-nss-tools" arch="x86_64">
  <version epoch="0" ver="3.112" rel="150400.3.57.1"/>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
</package>
<package pkgid="c8530344e93275419b17b40a30d4f41d366989d45914ecc0cd22c78ea8930816" name="mozilla-nss-tools" arch="x86_64">
  <version epoch="0" ver="3.112.2" rel="150400.3.60.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Removed upstreamed nss-reproducible-chksums.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755864000">- update to NSS 3.112.1
  * bmo#1982742 - restore support for finding certificates by decoded serial number.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759752000">- update to NSS 3.112.2
  * bmo#1970079 - Prevent leaks during pkcs12 decoding.
  * bmo#1988046 - SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates
- Adding patch bmo1980465.patch to fix bug on s390x (bmo#1980465)
- Adding patch bmo1956754.patch to fix possible undefined behaviour (bmo#1956754)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759838400">- Add bmo1990242.patch to move NSS DB password hash away from SHA-1</changelog>
</package>
<package pkgid="7f496f971f3978e9a88d0fab1286dc01988210b3eb9d497b965ac9c688c3b06c" name="mozilla-nss-tools" arch="x86_64">
  <version epoch="0" ver="3.112.3" rel="150400.3.63.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Removed upstreamed nss-reproducible-chksums.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755864000">- update to NSS 3.112.1
  * bmo#1982742 - restore support for finding certificates by decoded serial number.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759752000">- update to NSS 3.112.2
  * bmo#1970079 - Prevent leaks during pkcs12 decoding.
  * bmo#1988046 - SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates
- Adding patch bmo1980465.patch to fix bug on s390x (bmo#1980465)
- Adding patch bmo1956754.patch to fix possible undefined behaviour (bmo#1956754)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759838400">- Add bmo1990242.patch to move NSS DB password hash away from SHA-1</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- update to NSS 3.112.3
  * bmo#2009552 - avoid integer overflow in platform-independent ghash</changelog>
</package>
<package pkgid="1412e29f44f8a40d2fd690f569f7614640dede13c5a03df9bd96362ded905ac9" name="mozilla-nss-tools" arch="x86_64">
  <version epoch="0" ver="3.112.4" rel="150400.3.66.1"/>
  <changelog author="cgrobertson@suse.com" date="1709035200">- Added "Provides: nss" so other RPMs that require 'nss' can
  be installed (jira PED-6358).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1716552000">- Adding nss-fips-bsc1223724.patch to fix startup crash of Firefox
  when using FIPS-mode (bsc#1223724).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612800">- update to NSS 3.90.3
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1748105 - clean up escape handling.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1836925 - Disable ASM support for Curve25519.
  * bmo#1836781 - Disable ASM support for Curve25519 for all but X86_64.
- remove upstreamed nss-fix-bmo1836925.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1720612801">- update to NSS 3.101.1
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
- update to NSS 3.101
  * bmo#1900413 - add diagnostic assertions for SFTKObject refcount.
  * bmo#1899759 - freeing the slot in DeleteCertAndKey if authentication failed
  * bmo#1899883 - fix formatting issues.
  * bmo#1889671 - Add Firmaprofesional CA Root-A Web to NSS.
  * bmo#1899593 - remove invalid acvp fuzz test vectors.
  * bmo#1898830 - pad short P-384 and P-521 signatures gtests.
  * bmo#1898627 - remove unused FreeBL ECC code.
  * bmo#1898830 - pad short P-384 and P-521 signatures.
  * bmo#1898825 - be less strict about ECDSA private key length.
  * bmo#1854439 - Integrate HACL* P-521.
  * bmo#1854438 - Integrate HACL* P-384.
  * bmo#1898074 - memory leak in create_objects_from_handles.
  * bmo#1898858 - ensure all input is consumed in a few places in mozilla::pkix
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1748105 - clean up escape handling
  * bmo#1896353 - Use lib::pkix as default validator instead of the old-one
  * bmo#1827444 - Need to add high level support for PQ signing.
  * bmo#1548723 - Certificate Compression: changing the allocation/freeing of buffer + Improving the documentation
  * bmo#1884444 - SMIME/CMS and PKCS #12 do not integrate with modern NSS policy
  * bmo#1893404 - Allow for non-full length ecdsa signature when using softoken
  * bmo#1830415 - Modification of .taskcluster.yml due to mozlint indent defects
  * bmo#1793811 - Implement support for PBMAC1 in PKCS#12
  * bmo#1897487 - disable VLA warnings for fuzz builds.
  * bmo#1895032 - remove redundant AllocItem implementation.
  * bmo#1893334 - add PK11_ReadDistrustAfterAttribute.
  * bmo#215997  - Clang-formatting of SEC_GetMgfTypeByOidTag update
  * bmo#1895012 - Set SEC_ERROR_LIBRARY_FAILURE on self-test failure
  * bmo#1894572 - sftk_getParameters(): Fix fallback to default variable after error with configfile.
  * bmo#1830415 - Switch to the mozillareleases/image_builder image
- Follow upstream changes in nss-fips-constructor-self-tests.patch (switch from ec_field_GFp to ec_field_plain)
- Remove part of nss-fips-zeroization.patch that got removed upstream
- update to NSS 3.100
  - bmo#1893029 - merge pk11_kyberSlotList into pk11_ecSlotList for
    faster Xyber operations.
  - bmo#1893752 - remove ckcapi.
  - bmo#1893162 - avoid a potential PK11GenericObject memory leak.
  - bmo#671060  - Remove incomplete ESDH code.
  - bmo#215997  - Decrypt RSA OAEP encrypted messages.
  - bmo#1887996 - Fix certutil CRLDP URI code.
  - bmo#1890069 - Don't set CKA_DERIVE for CKK_EC_EDWARDS private keys.
  - bmo#676118  - Add ability to encrypt and decrypt CMS messages using ECDH.
  - bmo#676100  - Correct Templates for key agreement in smime/cmsasn.c.
  - bmo#1548723 - Moving the decodedCert allocation to NSS.
  - bmo#1885404 - Allow developers to speed up repeated local execution
    of NSS tests that depend on certificates.
- update to NSS 3.99
  * Removing check for message len in ed25519 (bmo#1325335)
  * add ed25519 to SECU_ecName2params. (bmo#1884276)
  * add EdDSA wycheproof tests. (bmo#1325335)
  * nss/lib layer code for EDDSA. (bmo#1325335)
  * Adding EdDSA implementation. (bmo#1325335)
  * Exporting Certificate Compression types (bmo#1881027)
  * Updating ACVP docker to rust 1.74 (bmo#1880857)
  * Updating HACL* to 0f136f28935822579c244f287e1d2a1908a7e552 (bmo#1325335)
  * Add NSS_CMSRecipient_IsSupported. (bmo#1877730)
- update to NSS 3.98
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA decryption
    in TLS
  * bmo#1879513 - Certificate Compression: enabling the check that
    the compression was advertised
  * bmo#1831552 - Move Windows workers to nss-1/b-win2022-alpha
  * bmo#1879945 - Remove Email trust bit from OISTE WISeKey
    Global Root GC CA
  * bmo#1877344 - Replace `distutils.spawn.find_executable` with
    `shutil.which` within `mach` in `nss`
  * bmo#1548723 - Certificate Compression: Updating nss_bogo_shim to
    support Certificate compression
  * bmo#1548723 - TLS Certificate Compression (RFC 8879) Implementation
  * bmo#1875356 - Add valgrind annotations to freebl kyber operations
    for constant-time execution tests
  * bmo#1870673 - Set nssckbi version number to 2.66
  * bmo#1874017 - Add Telekom Security roots
  * bmo#1873095 - Add D-Trust 2022 S/MIME roots
  * bmo#1865450 - Remove expired Security Communication RootCA1 root
  * bmo#1876179 - move keys to a slot that supports concatenation in
    PK11_ConcatSymKeys
  * bmo#1876800 - remove unmaintained tls-interop tests
  * bmo#1874937 - bogo: add support for the -ipv6 and -shim-id shim
    flags
  * bmo#1874937 - bogo: add support for the -curves shim flag and
    update Kyber expectations
  * bmo#1874937 - bogo: adjust expectation for a key usage bit test
  * bmo#1757758 - mozpkix: add option to ignore invalid subject
    alternative names
  * bmo#1841029 - Fix selfserv not stripping `publicname:` from -X value
  * bmo#1876390 - take ownership of ecckilla shims
  * bmo#1874458 - add valgrind annotations to freebl/ec.c
  * bmo#864039  - PR_INADDR_ANY needs PR_htonl before assignment to inet.ip
  * bmo#1875965 - Update zlib to 1.3.1
- Use %patch -P N instead of deprecated %patchN.
- update to NSS 3.97
  * bmo#1875506 - make Xyber768d00 opt-in by policy
  * bmo#1871631 - add libssl support for xyber768d00
  * bmo#1871630 - add PK11_ConcatSymKeys
  * bmo#1775046 - add Kyber and a PKCS#11 KEM interface to softoken
  * bmo#1871152 - add a FreeBL API for Kyber
  * bmo#1826451 - part 2: vendor github.com/pq-crystals/kyber/commit/e0d1c6ff
  * bmo#1826451 - part 1: add a script for vendoring kyber from pq-crystals repo
  * bmo#1835828 - Removing the calls to RSA Blind from loader.*
  * bmo#1874111 - fix worker type for level3 mac tasks
  * bmo#1835828 - RSA Blind implementation
  * bmo#1869642 - Remove DSA selftests
  * bmo#1873296 - read KWP testvectors from JSON
  * bmo#1822450 - Backed out changeset dcb174139e4f
  * bmo#1822450 - Fix CKM_PBE_SHA1_DES2_EDE_CBC derivation
  * bmo#1871219 - Wrap CC shell commands in gyp expansions
- update to NSS 3.96.1
  * bmo#1869408 - Use pypi dependencies for MacOS worker in ./build_gyp.sh
  * bmo#1830978 - p7sign: add -a hash and -u certusage (also p7verify cleanups)
  * bmo#1867408 - add a defensive check for large ssl_DefSend return values
  * bmo#1869378 - Add dependency to the taskcluster script for Darwin
  * bmo#1869378 - Upgrade version of the MacOS worker for the CI
- add nss-allow-slow-tests-s390x.patch: "certutil dump keys with
  explicit default trust flags" test needs longer than the allowed
  6 seconds on s390x
- update to NSS 3.95
  * bmo#1842932 - Bump builtins version number.
  * bmo#1851044 - Remove Email trust bit from Autoridad de Certificacion
    Firmaprofesional CIF A62634068 root cert.
  * bmo#1855318 - Remove 4 DigiCert (Symantec/Verisign) Root Certificates
  * bmo#1851049 - Remove 3 TrustCor Root Certificates from NSS.
  * bmo#1850982 - Remove Camerfirma root certificates from NSS.
  * bmo#1842935 - Remove old Autoridad de Certificacion Firmaprofesional
    Certificate.
  * bmo#1860670 - Add four Commscope root certificates to NSS.
  * bmo#1850598 - Add TrustAsia Global Root CA G3 and G4 root certificates.
  * bmo#1863605 - Include P-384 and P-521 Scalar Validation from HACL*
  * bmo#1861728 - Include P-256 Scalar Validation from HACL*.
  * bmo#1861265 - After the HACL 256 ECC patch, NSS incorrectly encodes
    256 ECC without DER wrapping at the softoken level
  * bmo#1837987 - Add means to provide library parameters to C_Initialize
  * bmo#1573097 - clang format
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
  * bmo#1858241 - Typo in ssl3_AppendHandshakeNumber
  * bmo#1858241 - Introducing input check of ssl3_AppendHandshakeNumber
  * bmo#1573097 - Fix Invalid casts in instance.c
- update to NSS 3.94
  * bmo#1853737 - Updated code and commit ID for HACL*
  * bmo#1840510 - update ACVP fuzzed test vector: refuzzed with
    current NSS
  * bmo#1827303 - Softoken C_ calls should use system FIPS setting
    to select NSC_ or FC_ variants
  * bmo#1774659 - NSS needs a database tool that can dump the low level
    representation of the database
  * bmo#1852179 - declare string literals using char in pkixnames_tests.cpp
  * bmo#1852179 - avoid implicit conversion for ByteString
  * bmo#1818766 - update rust version for acvp docker
  * bmo#1852011 - Moving the init function of the mpi_ints before
    clean-up in ec.c
  * bmo#1615555 - P-256 ECDH and ECDSA from HACL*
  * bmo#1840510 - Add ACVP test vectors to the repository
  * bmo#1849077 - Stop relying on std::basic_string&lt;uint8_t&gt;
  * bmo#1847845 - Transpose the PPC_ABI check from Makefile to gyp
- rebased patches
- added nss-fips-test.patch to fix broken test
- Update to NSS 3.93:
  * bmo#1849471 - Update zlib in NSS to 1.3.
  * bmo#1848183 - softoken: iterate hashUpdate calls for long inputs.
  * bmo#1813401 - regenerate NameConstraints test certificates (boo#1214980).
- Rebase nss-fips-pct-pubkeys.patch.
- update to NSS 3.92
  * bmo#1822935 - Set nssckbi version number to 2.62
  * bmo#1833270 - Add 4 Atos TrustedRoot Root CA certificates to NSS
  * bmo#1839992 - Add 4 SSL.com Root CA certificates
  * bmo#1840429 - Add Sectigo E46 and R46 Root CA certificates
  * bmo#1840437 - Add LAWtrust Root CA2 (4096)
  * bmo#1822936 - Remove E-Tugra Certification Authority root
  * bmo#1827224 - Remove Camerfirma Chambers of Commerce Root.
  * bmo#1840505 - Remove Hongkong Post Root CA 1
  * bmo#1842928 - Remove E-Tugra Global Root CA ECC v3 and RSA v3
  * bmo#1842937 - Avoid redefining BYTE_ORDER on hppa Linux
- update to NSS 3.91
  * bmo#1837431 - Implementation of the HW support check for ADX instruction
  * bmo#1836925 - Removing the support of Curve25519
  * bmo#1839795 - Fix comment about the addition of ticketSupportsEarlyData
  * bmo#1839327 - Adding args to enable-legacy-db build
  * bmo#1835357 - dbtests.sh failure in "certutil dump keys with explicit
    default trust flags"
  * bmo#1837617 - Initialize flags in slot structures
  * bmo#1835425 - Improve the length check of RSA input to avoid heap overflow
  * bmo#1829112 - Followup Fixes
  * bmo#1784253 - avoid processing unexpected inputs by checking for
    m_exptmod base sign
  * bmo#1826652 - add a limit check on order_k to avoid infinite loop
  * bmo#1834851 - Update HACL* to commit 5f6051d2
  * bmo#1753026 - add SHA3 to cryptohi and softoken
  * bmo#1753026 - HACL SHA3
  * bmo#1836781 - Disabling ASM C25519 for A but X86_64
- removed upstreamed patch nss-fix-bmo1836925.patch</changelog>
  <changelog author="hpj@suse.com" date="1720612802">- Added nss-fips-safe-memset.patch, fixing bsc#1222811.
- Removed some dead code from nss-fips-constructor-self-tests.patch.
- Rebased nss-fips-approved-crypto-non-ec.patch on above changes.
- Added nss-fips-aes-gcm-restrict.patch, fixing bsc#1222830.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222813,
  bsc#1222814, bsc#1222821, bsc#1222822, bsc#1224118.
- Updated nss-fips-approved-crypto-non-ec.patch and
  nss-fips-constructor-self-tests.patch, fixing bsc#1222807,
  bsc#1222828, bsc#1222834.
- Updated nss-fips-approved-crypto-non-ec.patch, fixing bsc#1222804,
  bsc#1222826, bsc#1222833, bsc#1224113, bsc#1224115, bsc#1224116.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1721908800">- update to NSS 3.101.2
  * bmo#1905691 - ChaChaXor to return after the function</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1722254400">- Require `sed` for mozilla-nss-sysinit, as setup-nsssysinit.sh
  depends on it and will create a broken, empty config, if sed is
  missing (bsc#1227918)</changelog>
  <changelog author="hpj@suse.com" date="1722600000">- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).</changelog>
  <changelog author="hpj@suse.com" date="1731412800">- Updated nss-fips-approved-crypto-non-ec.patch to approve
  RSA signature verification  mechanisms with PKCS padding and
  legacy moduli (bsc#1222834).</changelog>
  <changelog author="hpj@suse.com" date="1732622400">- Updated nss-fips-approved-crypto-non-ec.patch to not pass in
  bad targetKeyLength parameters when checking for FIPS approval
  after keygen. This was causing false rejections.</changelog>
  <changelog author="hpj@suse.com" date="1740830400">- Updated nss-fips-approved-crypto-non-ec.patch to exclude the
  SHA-1 hash from SLI approval.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1741608000">- Add nss-reproducible-chksums.patch to make NSS-build reproducible
  Use key from openssl (bsc#1081723)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747224000">- update to NSS 3.110
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1954724 - Prevent excess allocations in sslBuffer_Grow
  * bmo#1953429 - Remove Crl templates from ASN1 fuzz target
  * bmo#1953429 - Remove CERT_CrlTemplate from ASN1 fuzz target
  * bmo#1952855 - Fix memory leak in NSS_CMSMessage_IsSigned
  * bmo#1930807 - NSS policy updates
  * bmo#1951161 - Improve locking in nssPKIObject_GetInstances
  * bmo#1951394 - Fix race in sdb_GetMetaData
  * bmo#1951800 - Fix member access within null pointer
  * bmo#1950077 - Increase smime fuzzer memory limit
  * bmo#1949677 - Enable resumption when using custom extensions
  * bmo#1952568 - change CN of server12 test certificate
  * bmo#1949118 - Part 2: Add missing check in
    NSS_CMSDigestContext_FinishSingle
  * bmo#1949118 - Part 1: Fix smime UBSan errors
  * bmo#1930806 - FIPS changes need to be upstreamed: updated key checks
  * bmo#1951491 - Don't build libpkix in static builds
  * bmo#1951395 - handle `-p all` in try syntax
  * bmo#1951346 - fix opt-make builds to actually be opt
  * bmo#1951346 - fix opt-static builds to actually be opt
  * bmo#1916439 - Remove extraneous assert
- Removed upstreamed nss-fips-stricter-dh.patch
- Removed upstreamed nss-reproducible-chksums.patch
- Added bmo1962556.patch to fix test failures
- Rebased nss-fips-approved-crypto-non-ec.patch nss-fips-combined-hash-sign-dsa-ecdsa.patch
- update to NSS 3.109
  * bmo#1939512 - Call BL_Init before RNG_RNGInit() so that special
    SHA instructions can be used if available
  * bmo#1930807 - NSS policy updates - fix inaccurate key policy issues
  * bmo#1945883 - SMIME fuzz target
  * bmo#1914256 - ASN1 decoder fuzz target
  * bmo#1936001 - Part 2: Revert “Extract testcases from ssl gtests
    for fuzzing”
  * bmo#1915155 - Add fuzz/README.md
  * bmo#1936001 - Part 4: Fix tstclnt arguments script
  * bmo#1944545 - Extend pkcs7 fuzz target
  * bmo#1912320 - Extend certDN fuzz target
  * bmo#1944300 - revert changes to HACL* files from bug 1866841
  * bmo#1936001 - Part 3: Package frida corpus script
- update to NSS 3.108
  * bmo#1923285 - libclang-16 -&gt; libclang-19
  * bmo#1939086 - Turn off Secure Email Trust Bit for Security
    Communication ECC RootCA1
  * bmo#1937332 - Turn off Secure Email Trust Bit for BJCA Global Root
    CA1 and BJCA Global Root CA2
  * bmo#1915902 - Remove SwissSign Silver CA – G2
  * bmo#1938245 - Add D-Trust 2023 TLS Roots to NSS
  * bmo#1942301 - fix fips test failure on windows
  * bmo#1935925 - change default sensitivity of KEM keys
  * bmo#1936001 - Part 1: Introduce frida hooks and script
  * bmo#1942350 - add missing arm_neon.h include to gcm.c
  * bmo#1831552 - ci: update windows workers to win2022
  * bmo#1831552 - strip trailing carriage returns in tools tests
  * bmo#1880256 - work around unix/windows path translation issues
    in cert test script
  * bmo#1831552 - ci: let the windows setup script work without $m
  * bmo#1880255 - detect msys
  * bmo#1936680 - add a specialized CTR_Update variant for AES-GCM
  * bmo#1930807 - NSS policy updates
  * bmo#1930806 - FIPS changes need to be upstreamed: FIPS 140-3 RNG
  * bmo#1930806 - FIPS changes need to be upstreamed: Add SafeZero
  * bmo#1930806 - FIPS changes need to be upstreamed - updated POST
  * bmo#1933031 - Segmentation fault in SECITEM_Hash during pkcs12 processing
  * bmo#1929922 - Extending NSS with LoadModuleFromFunction functionality
  * bmo#1935984 - Ensure zero-initialization of collectArgs.cert
  * bmo#1934526 - pkcs7 fuzz target use CERT_DestroyCertificate
  * bmo#1915898 - Fix actual underlying ODR violations issue
  * bmo#1184059 - mozilla::pkix: allow reference ID labels to begin
    and/or end with hyphens
  * bmo#1927953 - don't look for secmod.db in nssutil_ReadSecmodDB if
    NSS_DISABLE_DBM is set
  * bmo#1934526 - Fix memory leak in pkcs7 fuzz target
  * bmo#1934529 - Set -O2 for ASan builds in CI
  * bmo#1934543 - Change branch of tlsfuzzer dependency
  * bmo#1915898 - Run tests in CI for ASan builds with detect_odr_violation=1
  * bmo#1934241 - Fix coverage failure in CI
  * bmo#1934213 - Add fuzzing for delegated credentials, DTLS short
    header and Tls13BackendEch
  * bmo#1927142 - Add fuzzing for SSL_EnableTls13GreaseEch and
    SSL_SetDtls13VersionWorkaround
  * bmo#1913677 - Part 3: Restructure fuzz/
  * bmo#1931925 - Extract testcases from ssl gtests for fuzzing
  * bmo#1923037 - Force Cryptofuzz to use NSS in CI
  * bmo#1923037 - Fix Cryptofuzz on 32 bit in CI
  * bmo#1933154 - Update Cryptofuzz repository link
  * bmo#1926256 - fix build error from 9505f79d
  * bmo#1926256 - simplify error handling in get_token_objects_for_cache
  * bmo#1931973 - nss doc: fix a warning
  * bmo#1930797 - pkcs12 fixes from RHEL need to be picked up
- remove obsolete patches
  * nss-fips-safe-memset.patch
  * nss-bmo1930797.patch
- update to NSS 3.107
  * bmo#1923038 - Remove MPI fuzz targets.
  * bmo#1925512 - Remove globals `lockStatus` and `locksEverDisabled`.
  * bmo#1919015 - Enable PKCS8 fuzz target.
  * bmo#1923037 - Integrate Cryptofuzz in CI.
  * bmo#1913677 - Part 2: Set tls server target socket options in config class
  * bmo#1913677 - Part 1: Set tls client target socket options in config class
  * bmo#1913680 - Support building with thread sanitizer.
  * bmo#1922392 - set nssckbi version number to 2.72.
  * bmo#1919913 - remove Websites Trust Bit from Entrust Root
    Certification Authority - G4.
  * bmo#1920641 - remove Security Communication RootCA3 root cert.
  * bmo#1918559 - remove SecureSign RootCA11 root cert.
  * bmo#1922387 - Add distrust-after for TLS to Entrust Roots.
  * bmo#1927096 - update expected error code in pk12util pbmac1 tests.
  * bmo#1929041 - Use random tstclnt args with handshake collection script
  * bmo#1920466 - Remove extraneous assert in ssl3gthr.c.
  * bmo#1928402 - Adding missing release notes for NSS_3_105.
  * bmo#1874451 - Enable the disabled mlkem tests for dtls.
  * bmo#1874451 - NSS gtests filter cleans up the constucted buffer
    before the use.
  * bmo#1925505 - Make ssl_SetDefaultsFromEnvironment thread-safe.
  * bmo#1925503 - Remove short circuit test from ssl_Init.
- fix build on loongarch64 (setting it as 64bit arch)
- Remove upstreamed bmo-1400603.patch
- Added nss-bmo1930797.patch to fix failing tests in testsuite
- update to NSS 3.106
  * bmo#1925975 - NSS 3.106 should be distributed with NSPR 4.36.
  * bmo#1923767 - pk12util: improve error handling in p12U_ReadPKCS12File.
  * bmo#1899402 - Correctly destroy bulkkey in error scenario.
  * bmo#1919997 - PKCS7 fuzz target, r=djackson,nss-reviewers.
  * bmo#1923002 - Extract certificates with handshake collection script.
  * bmo#1923006 - Specify len_control for fuzz targets.
  * bmo#1923280 - Fix memory leak in dumpCertificatePEM.
  * bmo#1102981 - Fix UBSan errors for SECU_PrintCertificate and
    SECU_PrintCertificateBasicInfo.
  * bmo#1921528 - add new error codes to mozilla::pkix for Firefox to use.
  * bmo#1921768 - allow null phKey in NSC_DeriveKey.
  * bmo#1921801 - Only create seed corpus zip from existing corpus.
  * bmo#1826035 - Use explicit allowlist for for KDF PRFS.
  * bmo#1920138 - Increase optimization level for fuzz builds.
  * bmo#1920470 - Remove incorrect assert.
  * bmo#1914870 - Use libFuzzer options from fuzz/options/\*.options in CI.
  * bmo#1920945 - Polish corpus collection for automation.
  * bmo#1917572 - Detect new and unfuzzed SSL options.
  * bmo#1804646 - PKCS12 fuzzing target.
- requires NSPR 4.36
- update to NSS 3.105
  * bmo#1915792 - Allow importing PKCS#8 private EC keys missing public key
  * bmo#1909768 - UBSAN fix: applying zero offset to null pointer in sslsnce.c
  * bmo#1919577 - set KRML_MUSTINLINE=inline in makefile builds
  * bmo#1918965 - Don't set CKA_SIGN for CKK_EC_MONTGOMERY private keys
  * bmo#1918767 - override default definition of KRML_MUSTINLINE
  * bmo#1916525 - libssl support for mlkem768x25519
  * bmo#1916524 - support for ML-KEM-768 in softoken and pk11wrap
  * bmo#1866841 - Add Libcrux implementation of ML-KEM 768 to FreeBL
  * bmo#1911912 - Avoid misuse of ctype(3) functions
  * bmo#1917311 - part 2: run clang-format
  * bmo#1917311 - part 1: upgrade to clang-format 13
  * bmo#1916953 - clang-format fuzz
  * bmo#1910370 - DTLS client message buffer may not empty be on retransmit
  * bmo#1916413 - Optionally print config for TLS client and server
    fuzz target
  * bmo#1916059 - Fix some simple documentation issues in NSS.
  * bmo#1915439 - improve performance of NSC_FindObjectsInit when
    template has CKA_TOKEN attr
  * bmo#1912828 - define CKM_NSS_ECDHE_NO_PAIRWISE_CHECK_KEY_PAIR_GEN
- Fix build error under Leap by rebasing nss-fips-safe-memset.patch.
- update to NSS 3.104
  * bmo#1910071 - Copy original corpus to heap-allocated buffer
  * bmo#1910079 - Fix min ssl version for DTLS client fuzzer
  * bmo#1908990 - Remove OS2 support just like we did on NSPR
  * bmo#1910605 - clang-format NSS improvements
  * bmo#1902078 - Adding basicutil.h to use HexString2SECItem function
  * bmo#1908990 - removing dirent.c from build
  * bmo#1902078 - Allow handing in keymaterial to shlibsign to make
    the output reproducible
  * bmo#1908990 - remove nec4.3, sunos4, riscos and SNI references
  * bmo#1908990 - remove other old OS (BSDI, old HP UX, NCR,
    openunix, sco, unixware or reliantUnix
  * bmo#1908990 - remove mentions of WIN95
  * bmo#1908990 - remove mentions of WIN16
  * bmo#1913750 - More explicit directory naming
  * bmo#1913755 - Add more options to TLS server fuzz target
  * bmo#1913675 - Add more options to TLS client fuzz target
  * bmo#1835240 - Use OSS-Fuzz corpus in NSS CI
  * bmo#1908012 - set nssckbi version number to 2.70.
  * bmo#1914499 - Remove Email Trust bit from ACCVRAIZ1 root cert.
  * bmo#1908009 - Remove Email Trust bit from certSIGN ROOT CA.
  * bmo#1908006 - Add Cybertrust Japan Roots to NSS.
  * bmo#1908004 - Add Taiwan CA Roots to NSS.
  * bmo#1911354 - remove search by decoded serial in
    nssToken_FindCertificateByIssuerAndSerialNumber
  * bmo#1913132 - Fix tstclnt CI build failure
  * bmo#1913047 - vfyserv: ensure peer cert chain is in db for
    CERT_VerifyCertificateNow
  * bmo#1912427 - Enable all supported protocol versions for UDP
  * bmo#1910361 - Actually use random PSK hash type
  * bmo#1911576 - Initialize NSS DB once
  * bmo#1910361 - Additional ECH cipher suites and PSK hash types
  * bmo#1903604 - Automate corpus file generation for TLS client Fuzzer
  * bmo#1910364 - Fix crash with UNSAFE_FUZZER_MODE
  * bmo#1910605 - clang-format shlibsign.c
- remove obsolete nss-reproducible-builds.patch
- update to NSS 3.103
  * bmo#1908623 - move list size check after lock acquisition in sftk_PutObjectToList.
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_POST_HANDSHAKE_AUTH,
  * bmo#1909638 - Follow-up to fix test for presence of file nspr.patch.
  * bmo#1903783 - Adjust libFuzzer size limits
  * bmo#1899542 - Add fuzzing support for SSL_SetCertificateCompressionAlgorithm,
    SSL_SetClientEchConfigs, SSL_VersionRangeSet and SSL_AddExternalPsk
  * bmo#1899542 - Add fuzzing support for SSL_ENABLE_GREASE and
    SSL_ENABLE_CH_EXTENSION_PERMUTATION
- Add nss-reproducible-builds.patch to make the rpms reproducible,
  by using a hardcoded, static key to generate the checksums (*.chk-files)
- Updated nss-fips-approved-crypto-non-ec.patch to enforce
  approved curves with the CKK_EC_MONTGOMERY key type (bsc#1224113).
- update to NSS 3.102.1
  * bmo#1905691 - ChaChaXor to return after the function
- update to NSS 3.102
  * bmo#1880351 - Add Valgrind annotations to freebl Chacha20-Poly1305.
  * bmo#1901932 - missing sqlite header.
  * bmo#1901080 - GLOBALTRUST 2020: Set Distrust After for TLS and S/MIME.
  * bmo#1615298 - improve certutil keyUsage, extKeyUsage, and nsCertType keyword handling.
  * bmo#1660676 - correct length of raw SPKI data before printing in pp utility.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1747828800">- update to NSS 3.111
  * bmo#1930806 - FIPS changes need to be upstreamed: force ems policy
  * bmo#1957685 - Turn off Websites Trust Bit from CAs
  * bmo#1937338 - Update nssckbi version following April 2025 Batch of Changes
  * bmo#1943135 - Disable SMIME ‘trust bit’ for GoDaddy CAs
  * bmo#1874383 - Replaced deprecated sprintf function with snprintf in dbtool.c
  * bmo#1954612 - Need up update NSS for PKCS 3.1
  * bmo#1773374 - avoid leaking localCert if it is already set in ssl3_FillInCachedSID
  * bmo#1953097 - Decrease ASAN quarantine size for Cryptofuzz in CI
  * bmo#1943962 - selfserv: Add support for zlib certificate compression</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1748260800">- update to NSS 3.112
  * bmo#1963792 - Fix alias for mac workers on try
  * bmo#1966786 - ensure all options can be configured with SSL_OptionSet and SSL_OptionSetDefault
  * bmo#1931930 - ABI/API break in ssl certificate processing
  * bmo#1955971 - remove unnecessary assertion in sec_asn1d_init_state_based_on_template
  * bmo#1965754 - update taskgraph to v14.2.1
  * bmo#1964358 - Workflow for automation of the release on GitHub when pushing a tag
  * bmo#1952860 - fix faulty assertions in SEC_ASN1DecoderUpdate
  * bmo#1934877 - Renegotiations should use a fresh ECH GREASE buffer
  * bmo#1951396 - update taskgraph to v14.1.1
  * bmo#1962503 - Partial fix for ACVP build CI job
  * bmo#1961827 - Initialize find in sftk_searchDatabase
  * bmo#1963121 - Add clang-18 to extra builds
  * bmo#1963044 - Fault tolerant git fetch for fuzzing
  * bmo#1962556 - Tolerate intermittent failures in ssl_policy_pkix_ocsp
  * bmo#1962770 - fix compiler warnings when DEBUG_ASN1D_STATES or CMSDEBUG are set
  * bmo#1961835 - fix content type tag check in NSS_CMSMessage_ContainsCertsOrCrls
  * bmo#1963102 - Remove Cryptofuzz CI version check</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1755864000">- update to NSS 3.112.1
  * bmo#1982742 - restore support for finding certificates by decoded serial number.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759752000">- update to NSS 3.112.2
  * bmo#1970079 - Prevent leaks during pkcs12 decoding.
  * bmo#1988046 - SEC_ASN1Decode* should ensure it has read as many bytes as each length field indicates
- Adding patch bmo1980465.patch to fix bug on s390x (bmo#1980465)
- Adding patch bmo1956754.patch to fix possible undefined behaviour (bmo#1956754)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1759838400">- Add bmo1990242.patch to move NSS DB password hash away from SHA-1</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1771588800">- update to NSS 3.112.3
  * bmo#2009552 - avoid integer overflow in platform-independent ghash</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1776168000">- update to NSS 3.112.4
  * bmo#2030135 - improve error handling in PK11_ImportPrivateKeyInfoAndReturnKey.
  * bmo#2029752 - Improving the allocation of S/MIME DecryptSymKey.
  * bmo#2029462 - store email on subject cache_entry in NSS trust domain.
  * bmo#2029425 - Heap use-after-free in cert_VerifyCertChainOld via dangling certsList[] entry on NameConstraints violation.
  * bmo#2029323 - Improve size calculations in CMS content buffering.
  * bmo#2028001 - avoid integer overflow while escaping RFC822 Names.
  * bmo#2027378 - Reject excessively large ASN.1 SEQUENCE OF in quickder.
  * bmo#2027365 - Deep copy profile data in CERT_FindSMimeProfile.
  * bmo#2027345 - Improve input validation in DSAU signature decoding.
  * bmo#2026311 - avoid integer overflow in RSA_EMSAEncodePSS.
  * bmo#2019357 - RSA_EMSAEncodePSS should validate the length of mHash.
  * bmo#2026156 - Add a maximum cert uncompressed len and tests.
  * bmo#2026089 - Clarify extension negotiation mechanism for TLS Handshakes.
  * bmo#2023209 - ensure permittedSubtrees don't match wildcards that could be outside the permitted tree.
  * bmo#2023207 - Fix integer underflow in tls13_AEAD when ciphertext is shorter than tag.
  * bmo#2019224 - Remove invalid PORT_Free().
  * bmo#1964722 - free digest objects in SEC_PKCS7DecoderFinish if they haven't already been freed.
  * bmo#1935995 - make ss-&gt;ssl3.hs.cookie an owned-copy of the cookie.</changelog>
</package>
<package pkgid="e3d317c764b2bc68038632e16deba2027293e7cf6d1da104e38c99abd8315bfa" name="mozjs60" arch="src">
  <version epoch="0" ver="60.9.0" rel="150200.6.11.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1533124800">- Initial package (based on mozjs52), version 60.1.0:
  * New syntax:
  - `for await (... of ...)` syntax is used for async iteration;
  - The rest operator is now supported in object destructuring:
    e.g. `({a, b, ...cd} = {a: 1, b: 2, c: 3, d: 4});`;
  - The spread operator is now supported in object literals: e.g.
    `mergedObject = {...obj1, ...obj2};`;
  - Generator methods can now be async, using the `async
    function*` syntax, or `async* f() {...}` method shorthand;
  - It's now allowed to omit the variable binding from a catch
    statement, if you don't need to access the thrown exception:
    `try {...} catch {}`.
  * New APIs:
  - Promise.prototype.finally(), popular in many third-party
    Promise libraries, is now available natively;
  - String.prototype.toLocaleLowerCase() and
    String.prototype.toLocaleUpperCase() now take an optional
    locale or array of locales;
  - Intl.PluralRules is now available;
  - Intl.NumberFormat.protoype.formatToParts() is now available;
  - Intl.Collator now has a caseFirst option;
  - Intl.DateTimeFormat now has an hourCycle option.
  * New behaviour: There are a lot of minor behaviour changes as
    SpiderMonkey's JS implementation conforms ever closer to
    ECMAScript standards.
  * Backwards-incompatible changes:
  - Conditional catch clauses have been removed, as they were a
    Mozilla extension which will not be standardized;
  - The nonstandard `for each (... in ...)` loop was removed;
  - The nonstandard legacy lambda syntax (`function(x) x*x`) was
    removed;
  - The nonstandard Mozilla iteration protocol was removed, as
    well as nonstandard Mozilla generators, including the
    Iterator and StopIteration objects, and the
    Function.prototype.isGenerator() method.
  - Array comprehensions and generator comprehensions have been
    removed.
  - Several nonstandard methods were removed: ArrayBuffer.slice()
    (but not the standard version, ArrayBuffer.prototype.\
    slice()), Date.prototype.toLocaleFormat(), Function.\
    prototype.isGenerator(), Object.prototype.watch(), and
    Object.prototype.unwatch().
- Drop bmo1176787.patch inherited from mozjs52: fixed upstream.
- Add patches:
  mozjs60-fix-memory-leak-in-LCovCompartment-esr60.patch
  (bmo#1478679) and
  mozjs60-prevent-an-internal-gcc-8_0_1-error.patch
  (bmo#1458382).</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1536840000">- Use memory-constraints to avoid OOM errors</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540382400">- Update to version 60.2.2:
  * Bug fix release.
- Drop mozjs60-fix-memory-leak-in-LCovCompartment-esr60.patch and
  mozjs60-prevent-an-internal-gcc-8_0_1-error.patch: Fixed upstream</changelog>
  <changelog author="schwab@suse.de" date="1549108800">- mozjs60-mozilla-s390-bigendian.patch: rediff and apply on more big
  endian archs
- mozjs60-xulrunner-24.0-s390-inlines.patch: remove
- Replace icudt58b.dat.xz by icudt60b.dat.xz
- riscv-support.patch: add basic support for riscv64</changelog>
  <changelog author="wr@rosenauer.org" date="1549195200">- update to ESR codebase (60.4.0)
- rebased riscv-support.patch</changelog>
  <changelog author="schwab@suse.de" date="1549886400">- riscv-support.patch: fix last change</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- No longer pass --enable-debug to configure. It is not needed for
  our endusers, and will only slow down the engine. Nor have we
  built it with debug in the past.</changelog>
  <changelog author="dimstar@opensuse.org" date="1561032000">- Drop python-wheel BuildRequires: causes a build cycle, and is not
  needed.</changelog>
  <changelog author="mgorse@suse.com" date="1570190400">- Update to version 60.9.0
- rebased riscv-support.patch
- Remove source modifications that made some private functions
  public. Probably not needed anymore, and was introducing a
  build error
- Regenerate icudt60b.dat.xz
- Added some upstream bug fixes included in Debian and Fedora:
  Always-use-the-equivalent-year-to-determine-the-time-zone.patch
  emitter.patch
  emitter_test.patch
  init_patch.patch
  enddianness.patch
  jsproperty-endian.patch
  Save-x28-before-clobbering-it-in-the-regex-compiler.patch
  Save-and-restore-non-volatile-x28-on-ARM64-for-generated-unboxed-object-constructor.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1575979200">- Add Don-t-run-non262-extensions-clone-errors.js-on-s390x.patch,
  based on Debian patch, to enable back tests on s390x (and ppc64).
- Add tests-Expect-a-test-to-fail-on-big-endian.patch, based on
  Debian patch, accept a test failure on big-endian like s390x.
- Ensure build for x86 is with SSE2 (SSE for floating point math),*
  required by upstream (requires switching package to i686).
- enable back tests on s390x and i586
- Remove build workaround on ppc64le.
- Reorder/change build flags to follow Debian and Fedora.
- Enable back tests on all platforms (except JIT on s390).
- Ensure we don't build bundled security libs.
- Don't ship a icu bundle for big-endian, recreate it instead, with
  patches icu_sources_data-Write-command-output-to-our-stderr.patch
  and icu_sources_data.py-Decouple-from-Mozilla-build-system.patch.
- Update patch enddianness.patch with more fixes from
  bmo#1590907 to fix strings usage on s390x (bsc#1158355).
- Add Skip-some-i18n-tests-because-we-are-now-using-system-ICU.patch
  Update-to-ICU-61-Part-3-Update-tests.patch,
  Update-to-ICU-64-Part-3-Update-tests.patch,
  Update-to-ICU-65-Part-3-Update-tests.patch to allow building
  with system icu
- Add flag to switch between system icu and embedded icu and
  enable system icu.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Remove Update-to-ICU-64-Part-3-Update-tests.patch, SLE is back to
  ICU 60.x.</changelog>
  <changelog author="fcrozat@suse.com" date="1576756800">- SLE 15 SP2 will ship with ICU 65, apply patches accordingly
  (jsc#SLE-11118).</changelog>
  <changelog author="qzhao@suse.com" date="1727697600">- Add mozjs115-CVE-2024-45490-part01-5c1a3164.patch:
  Backporting 5c1a3164 from libexpat upstream, Reject negative len
  for XML_ParseBuffer.
  CVE-2024-45490's fixes including 3 parts: 5c1a3164 for libexpat
  sources; c12f039b for libexpat tests; 2db23301 for libexpat docs;
  Because mozjs only embeds libexpat sources, so unnecessary to
  port prart02 and part03.
  (CVE-2024-45490, bsc#1230036)</changelog>
  <changelog author="qzhao@suse.com" date="1727697601">- Add mozjs115-CVE-2024-45491.patch:
  Backporting 8e439a99 from libexpat upstream, Detect integer
  overflow in dtdCopy.
  (CVE-2024-45491, bsc#1230037)</changelog>
  <changelog author="qzhao@suse.com" date="1727697602">- Add mozjs115-CVE-2024-45492.patch:
  Backporting 9bf0f2c1 from libexpat upstream, Detect integer
  overflow in function nextScaffoldPart.
  (CVE-2024-45492, bsc#1230038)</changelog>
  <changelog author="qzhao@suse.com" date="1733400000">- Add mozjs52-CVE-2024-50602_part01_51c70190.patch:
  Backporting 51c70190 from upstream,
  * lib: Make XML_StopParser refuse to stop/suspend an unstarted parser.
  * lib: Be explicit about XML_PARSING in XML_StopParser.
  (CVE-2024-50602, bsc#1232599, bsc#1232602)</changelog>
  <changelog author="qzhao@suse.com" date="1733486400">- Add mozjs52-CVE-2024-50602_part02_5fb89e7b.patch:
  Backporting 5c1a3164 from upstream, Be explicit about XML_PARSING
  in XML_StopParser.
  (CVE-2024-50602, bsc#1232599, bsc#1232602)</changelog>
  <changelog author="mgorse@suse.com" date="1744286400">- Add libtheora-avoid-negative-shift.patch: avoid negative shift in
  huffdec.c (bsc#1234837 CVE-2024-56431).
- Explicitly require libicu-devel, rather than using pkgconfig, to
  avoid unintentionally building against icu 73.</changelog>
  <changelog author="mgorse@suse.com" date="1777204800">- Add security fixes:
  + mozjs60-CVE-2026-32776.patch (bsc#1259728 CVE-2026-32776)
  + mozjs60-CVE-2026-32777.patch (bsc#1259713 CVE-2026-32777)
  + mozjs60-CVE-2026-32778.patch (bsc#1259731 CVE-2026-32778)</changelog>
</package>
<package pkgid="8a066e93796613dfbe9c5ddb5b8b919e1108a003bef4c24e5e35f00728544a7a" name="mozjs60" arch="src">
  <version epoch="0" ver="60.9.0" rel="150200.6.8.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1533124800">- Initial package (based on mozjs52), version 60.1.0:
  * New syntax:
  - `for await (... of ...)` syntax is used for async iteration;
  - The rest operator is now supported in object destructuring:
    e.g. `({a, b, ...cd} = {a: 1, b: 2, c: 3, d: 4});`;
  - The spread operator is now supported in object literals: e.g.
    `mergedObject = {...obj1, ...obj2};`;
  - Generator methods can now be async, using the `async
    function*` syntax, or `async* f() {...}` method shorthand;
  - It's now allowed to omit the variable binding from a catch
    statement, if you don't need to access the thrown exception:
    `try {...} catch {}`.
  * New APIs:
  - Promise.prototype.finally(), popular in many third-party
    Promise libraries, is now available natively;
  - String.prototype.toLocaleLowerCase() and
    String.prototype.toLocaleUpperCase() now take an optional
    locale or array of locales;
  - Intl.PluralRules is now available;
  - Intl.NumberFormat.protoype.formatToParts() is now available;
  - Intl.Collator now has a caseFirst option;
  - Intl.DateTimeFormat now has an hourCycle option.
  * New behaviour: There are a lot of minor behaviour changes as
    SpiderMonkey's JS implementation conforms ever closer to
    ECMAScript standards.
  * Backwards-incompatible changes:
  - Conditional catch clauses have been removed, as they were a
    Mozilla extension which will not be standardized;
  - The nonstandard `for each (... in ...)` loop was removed;
  - The nonstandard legacy lambda syntax (`function(x) x*x`) was
    removed;
  - The nonstandard Mozilla iteration protocol was removed, as
    well as nonstandard Mozilla generators, including the
    Iterator and StopIteration objects, and the
    Function.prototype.isGenerator() method.
  - Array comprehensions and generator comprehensions have been
    removed.
  - Several nonstandard methods were removed: ArrayBuffer.slice()
    (but not the standard version, ArrayBuffer.prototype.\
    slice()), Date.prototype.toLocaleFormat(), Function.\
    prototype.isGenerator(), Object.prototype.watch(), and
    Object.prototype.unwatch().
- Drop bmo1176787.patch inherited from mozjs52: fixed upstream.
- Add patches:
  mozjs60-fix-memory-leak-in-LCovCompartment-esr60.patch
  (bmo#1478679) and
  mozjs60-prevent-an-internal-gcc-8_0_1-error.patch
  (bmo#1458382).</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1536840000">- Use memory-constraints to avoid OOM errors</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540382400">- Update to version 60.2.2:
  * Bug fix release.
- Drop mozjs60-fix-memory-leak-in-LCovCompartment-esr60.patch and
  mozjs60-prevent-an-internal-gcc-8_0_1-error.patch: Fixed upstream</changelog>
  <changelog author="schwab@suse.de" date="1549108800">- mozjs60-mozilla-s390-bigendian.patch: rediff and apply on more big
  endian archs
- mozjs60-xulrunner-24.0-s390-inlines.patch: remove
- Replace icudt58b.dat.xz by icudt60b.dat.xz
- riscv-support.patch: add basic support for riscv64</changelog>
  <changelog author="wr@rosenauer.org" date="1549195200">- update to ESR codebase (60.4.0)
- rebased riscv-support.patch</changelog>
  <changelog author="schwab@suse.de" date="1549886400">- riscv-support.patch: fix last change</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- No longer pass --enable-debug to configure. It is not needed for
  our endusers, and will only slow down the engine. Nor have we
  built it with debug in the past.</changelog>
  <changelog author="dimstar@opensuse.org" date="1561032000">- Drop python-wheel BuildRequires: causes a build cycle, and is not
  needed.</changelog>
  <changelog author="mgorse@suse.com" date="1570190400">- Update to version 60.9.0
- rebased riscv-support.patch
- Remove source modifications that made some private functions
  public. Probably not needed anymore, and was introducing a
  build error
- Regenerate icudt60b.dat.xz
- Added some upstream bug fixes included in Debian and Fedora:
  Always-use-the-equivalent-year-to-determine-the-time-zone.patch
  emitter.patch
  emitter_test.patch
  init_patch.patch
  enddianness.patch
  jsproperty-endian.patch
  Save-x28-before-clobbering-it-in-the-regex-compiler.patch
  Save-and-restore-non-volatile-x28-on-ARM64-for-generated-unboxed-object-constructor.patch</changelog>
  <changelog author="fcrozat@suse.com" date="1575979200">- Add Don-t-run-non262-extensions-clone-errors.js-on-s390x.patch,
  based on Debian patch, to enable back tests on s390x (and ppc64).
- Add tests-Expect-a-test-to-fail-on-big-endian.patch, based on
  Debian patch, accept a test failure on big-endian like s390x.
- Ensure build for x86 is with SSE2 (SSE for floating point math),*
  required by upstream (requires switching package to i686).
- enable back tests on s390x and i586
- Remove build workaround on ppc64le.
- Reorder/change build flags to follow Debian and Fedora.
- Enable back tests on all platforms (except JIT on s390).
- Ensure we don't build bundled security libs.
- Don't ship a icu bundle for big-endian, recreate it instead, with
  patches icu_sources_data-Write-command-output-to-our-stderr.patch
  and icu_sources_data.py-Decouple-from-Mozilla-build-system.patch.
- Update patch enddianness.patch with more fixes from
  bmo#1590907 to fix strings usage on s390x (bsc#1158355).
- Add Skip-some-i18n-tests-because-we-are-now-using-system-ICU.patch
  Update-to-ICU-61-Part-3-Update-tests.patch,
  Update-to-ICU-64-Part-3-Update-tests.patch,
  Update-to-ICU-65-Part-3-Update-tests.patch to allow building
  with system icu
- Add flag to switch between system icu and embedded icu and
  enable system icu.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Remove Update-to-ICU-64-Part-3-Update-tests.patch, SLE is back to
  ICU 60.x.</changelog>
  <changelog author="fcrozat@suse.com" date="1576756800">- SLE 15 SP2 will ship with ICU 65, apply patches accordingly
  (jsc#SLE-11118).</changelog>
  <changelog author="qzhao@suse.com" date="1727697600">- Add mozjs115-CVE-2024-45490-part01-5c1a3164.patch:
  Backporting 5c1a3164 from libexpat upstream, Reject negative len
  for XML_ParseBuffer.
  CVE-2024-45490's fixes including 3 parts: 5c1a3164 for libexpat
  sources; c12f039b for libexpat tests; 2db23301 for libexpat docs;
  Because mozjs only embeds libexpat sources, so unnecessary to
  port prart02 and part03.
  (CVE-2024-45490, bsc#1230036)</changelog>
  <changelog author="qzhao@suse.com" date="1727697601">- Add mozjs115-CVE-2024-45491.patch:
  Backporting 8e439a99 from libexpat upstream, Detect integer
  overflow in dtdCopy.
  (CVE-2024-45491, bsc#1230037)</changelog>
  <changelog author="qzhao@suse.com" date="1727697602">- Add mozjs115-CVE-2024-45492.patch:
  Backporting 9bf0f2c1 from libexpat upstream, Detect integer
  overflow in function nextScaffoldPart.
  (CVE-2024-45492, bsc#1230038)</changelog>
  <changelog author="qzhao@suse.com" date="1733400000">- Add mozjs52-CVE-2024-50602_part01_51c70190.patch:
  Backporting 51c70190 from upstream,
  * lib: Make XML_StopParser refuse to stop/suspend an unstarted parser.
  * lib: Be explicit about XML_PARSING in XML_StopParser.
  (CVE-2024-50602, bsc#1232599, bsc#1232602)</changelog>
  <changelog author="qzhao@suse.com" date="1733486400">- Add mozjs52-CVE-2024-50602_part02_5fb89e7b.patch:
  Backporting 5c1a3164 from upstream, Be explicit about XML_PARSING
  in XML_StopParser.
  (CVE-2024-50602, bsc#1232599, bsc#1232602)</changelog>
  <changelog author="mgorse@suse.com" date="1744286400">- Add libtheora-avoid-negative-shift.patch: avoid negative shift in
  huffdec.c (bsc#1234837 CVE-2024-56431).
- Explicitly require libicu-devel, rather than using pkgconfig, to
  avoid unintentionally building against icu 73.</changelog>
</package>
<package pkgid="754e72cb6c7b46a182a71b444c1700f2400951233e0e2d544d0fcfe867098c26" name="multipath-tools" arch="src">
  <version epoch="0" ver="0.10.3+124+suse.ed5b4b11" rel="150700.3.3.1"/>
  <changelog author="mwilck@suse.com" date="1704456000">- Update to version 0.9.7+93+suse.e2f2272:
  * fix ANA prioritizer enablement logic (bsc#1218326)
  * avoid setting queue_if_no_path on multipath maps for which the
    no_path_retry timeout has expired
  * the interactive commands "restorequeueing map X" and
    "restorequeing maps" now only affect maps that had queueing
    manually disabled using "disablequeuing maps" or
    "disablequeuing map X" beforehand
  * Spelling fixes</changelog>
  <changelog author="mwilck@suse.com" date="1707739200">- Update to version 0.9.7+140+suse.2d78457:
  * This is a multipath-tools 0.9.8 pre-release
  * Socket activation via multipathd.socket has been disabled by default
    because it has undesirable side effects on systems without multipath.
    Users with multipath hardware should enable multipathd.service
  * The restorequeueing CLI command now only enables queueing if
    disablequeueing had been sent before
  * Avoid multipathd hang during map flush
  * multipathd now tracks the queueing mode of maps in its internal features string
  * Improve error messages in 'multipathd -k'
  * Fix segfault in autoresize code (bsc#1219289)
  * Fix missing map reloads (bsc#1219796)
  * Documentation fixes, spelling fixes, minor code fixes</changelog>
  <changelog author="mwilck@suse.com" date="1707739201">- Update to version 0.9.7+148+suse.7d9953e.obscpio
  * This is a multipath-tools 0.9.8 pre-release
  * fix fast_io_fail for Infinibox (bsc#1219348)
  * Fix activation of LVM volume groups during coldplug (bsc#1219142)</changelog>
  <changelog author="mwilck@suse.com" date="1707912000">- Update to version 0.9.7+148+suse.9780ae0:
  * 11-dm-mpath.rules: Fix quoting mistake (bsc#1219142)</changelog>
  <changelog author="mwilck@suse.com" date="1707998400">- Update to version 0.9.8~1+82+suse.dcd98a3:
  * Adapt package version such that it shows as a 0.9.8 prerelease
  * Add missing udev rules file</changelog>
  <changelog author="mwilck@suse.com" date="1708948800">- Update to version 0.9.8+83+suse.bcae610 (bsc#1220374)
  * multipath-tools: added NEWS.md</changelog>
  <changelog author="mwilck@suse.com" date="1709035200">- Remove libmpathpersist-example-old.c, which has been obsolete
  since multipath-tools 0.8.6.</changelog>
  <changelog author="mwilck@suse.com" date="1709640000">- Update to version 0.9.8+87+suse.f72b9f3:
  * fix misspelled DM_UDEV_DISABLE_OTHER_RULES_FLAG in udev rules
    (bsc#1220810)</changelog>
  <changelog author="mwilck@suse.com" date="1712836800">- Update to version 0.9.8+88+suse.d504d83:
  * Revert "libmultipath: fix max_sectors_kb on adding path"
  (bsc#1222458)</changelog>
  <changelog author="mwilck@suse.com" date="1719316800">- Update to version 0.9.9+90+suse.f1d2f20:
  * Fix unit tests on Tumbleweed/armv7l
- Update to 0.9.9 upstream (see NEWS.md for details)
  * Update udev rules to be compliant with device-mapper udev
  rules update in LVM2 &gt;= 2.03.24.
  * Limit real-time scheduling priority to 10 by default. This
  can now be configured in multipathd.service using "LimitRTPRIO="
  * Set max_sectors_kb only on map creation, or when a new path
  is added, to avoid IO errors
  * The configuration option "flush_on_last_del" now takes the
  values "always" (="yes"), "unused" (="no"), and "never". "yes"
  and "no" are still supported
  * Add wildcard %k for max_sectors_kb for CLI commands like
  "multipath show {paths,maps} format"
  * Accept WWID value in CLI commands that take a map name, like
  "resize map $map"
  * Removed support for CLI wildcards for pathgroups, which were
  not function anyway.
  * Fix map failure count for no_path_retry &gt; 0</changelog>
  <changelog author="mwilck@suse.com" date="1721390400">- Update to version 0.9.9+161+suse.0c835ef:
  * Update to upstream reviewed code path (787e00d)
  * Added hardware defaults for Huawei storage arrays and XSG1 vendors
  * Refactored and improved the libultipath / libdevmapper interface
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove`
  (bug introduced in 0.9.9). (bsc#1229898)
  * CI improvements
  * Documentation fixes</changelog>
  <changelog author="mwilck@suse.com" date="1724932800">- Update to 0.10.0+103+suse.0fc97cd
- Update to upstream 0.10.0 (see also NEWS.md)
  * The `multipathd show daemon` command now shows `(reconfigure pending)`
  if a reconfiguration has been triggered but not finished yet.
  * Refactored the path checker loop. Paths are now checked for each multipath
  map in turn
  * Renamed public functions, variables, and macros to comply with the glibc policy
  for reserved names (gh#opensvc/multipath-tools#91)
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove` (bug introduced in
  0.9.9). (bsc#1229898)
  * Fixed old mpathpersist bug leading to the error message "configured reservation
  key doesn't match: 0x0" when `reservation_key` was configured in the
  multipaths section of `multipath.conf`. (bsc#1228926, gh#opensvc/multipath-tools#92)
  * Fixed output of `multipath -t` and `multipath -T` for the options
  `force_sync` and `retrigger_tries`. (bsc#1229898, gh#opensvc/multipath-tools#88)
  * Fixed adding maps by WWID in CLI (command `add map $WWID`). (bsc#1229898)</changelog>
  <changelog author="mwilck@suse.com" date="1730721600">- Update to version 0.10.0+106+suse.ffbdb7a:
  * Fix reboot hang if uevent is processed for suspended device
  (bsc#1232063)</changelog>
  <changelog author="mwilck@suse.com" date="1730808000">- Update to version 0.10.0+108+suse.2c2e597:
  * Update fix for bsc#1232063 to upstream-accepted solution</changelog>
  <changelog author="mwilck@suse.com" date="1732190400">- Update to version 0.10.1~1+113+suse.d6eca5e:
  This is a pre-release of the upstream stable release 0.10.1.
  * libmultipath: dm_get_maps(): don't bail out for single-map failures
  (bsc#1233588, gh#opensvc/multipath-tools#102)
  * libmultipath: don't print error message if WATCHDOG_USEC is 0
  (bsc#1232227)
  * libmultipath: don't set dev_loss_tmo to 0 for NO_PATH_RETRY_FAIL
  * multipathd: fix deferred_failback_tick for reload removes</changelog>
  <changelog author="mwilck@suse.com" date="1732536000">- Update to version 0.10.1~2+112+suse.b66763a:
  * libmultipath: reduce log level of "map X has multiple targets"
  (bsc#1233588)</changelog>
  <changelog author="mwilck@suse.com" date="1737720000">- Update to version 0.10.2+117+suse.33411aa:
  * multipathd: trigger uevents for blacklisted paths in reconfigure
    (bsc#1236321)
  * Make sure maps are reloaded in the path checker loop after detecting an
    inconsistent or wrong kernel state (bsc#1236392)
  * Make sure udev and systemd notice changes in multipath path state
    when devices are added to or removed from multipath maps (bsc#1236321)
  * Fix the problem that `group_by_tpg` might be disabled if one or more
    paths were offline during initial configuration (bsc#1236392)
  * Fix multipathd crash because of invalid path group index value, for example
    if an invalid path device was removed from a map.
    (gh#opensvc/multipath-tools#105, bsc#1236392)
  * Fixed a memory leak in the nvme foreign library.
  * Fixed a problem in the marginal path detection algorithm that could cause
    the io error check for a recently failed path to be delayed.
    (bsc#1236390)
  * Reduce log level of harmless "map ... doesn't exist" message
    (bsc#1236390)</changelog>
  <changelog author="mwilck@suse.com" date="1741176000">- Update to version 0.10.2+122+suse.51e02cc:
  * multipathd: fix hang during shutdown with queuing maps
    (bsc#1238484).
    This adds multipathd-queueing.service.</changelog>
  <changelog author="mwilck@suse.com" date="1751371200">- Update to version 0.10.2+123+suse.48d66ee8:
  * multipathd: cli_reinstate(): avoid reinstated paths being failed again
  (bsc#1244917)</changelog>
  <changelog author="mwilck@suse.com" date="1752494400">- Update to version 0.10.3+124+suse.ed5b4b11:
  * multipath-tools: add HPE MSA Gen7 (2070/2072) to hwtable
    (bsc#1246501)</changelog>
</package>
<package pkgid="d4622cfbd3ce9ea5cb61f38d99ff087e61033c913cfa204c3f83035d274973a4" name="multipath-tools" arch="x86_64">
  <version epoch="0" ver="0.10.3+124+suse.ed5b4b11" rel="150700.3.3.1"/>
  <changelog author="mwilck@suse.com" date="1704456000">- Update to version 0.9.7+93+suse.e2f2272:
  * fix ANA prioritizer enablement logic (bsc#1218326)
  * avoid setting queue_if_no_path on multipath maps for which the
    no_path_retry timeout has expired
  * the interactive commands "restorequeueing map X" and
    "restorequeing maps" now only affect maps that had queueing
    manually disabled using "disablequeuing maps" or
    "disablequeuing map X" beforehand
  * Spelling fixes</changelog>
  <changelog author="mwilck@suse.com" date="1707739200">- Update to version 0.9.7+140+suse.2d78457:
  * This is a multipath-tools 0.9.8 pre-release
  * Socket activation via multipathd.socket has been disabled by default
    because it has undesirable side effects on systems without multipath.
    Users with multipath hardware should enable multipathd.service
  * The restorequeueing CLI command now only enables queueing if
    disablequeueing had been sent before
  * Avoid multipathd hang during map flush
  * multipathd now tracks the queueing mode of maps in its internal features string
  * Improve error messages in 'multipathd -k'
  * Fix segfault in autoresize code (bsc#1219289)
  * Fix missing map reloads (bsc#1219796)
  * Documentation fixes, spelling fixes, minor code fixes</changelog>
  <changelog author="mwilck@suse.com" date="1707739201">- Update to version 0.9.7+148+suse.7d9953e.obscpio
  * This is a multipath-tools 0.9.8 pre-release
  * fix fast_io_fail for Infinibox (bsc#1219348)
  * Fix activation of LVM volume groups during coldplug (bsc#1219142)</changelog>
  <changelog author="mwilck@suse.com" date="1707912000">- Update to version 0.9.7+148+suse.9780ae0:
  * 11-dm-mpath.rules: Fix quoting mistake (bsc#1219142)</changelog>
  <changelog author="mwilck@suse.com" date="1707998400">- Update to version 0.9.8~1+82+suse.dcd98a3:
  * Adapt package version such that it shows as a 0.9.8 prerelease
  * Add missing udev rules file</changelog>
  <changelog author="mwilck@suse.com" date="1708948800">- Update to version 0.9.8+83+suse.bcae610 (bsc#1220374)
  * multipath-tools: added NEWS.md</changelog>
  <changelog author="mwilck@suse.com" date="1709035200">- Remove libmpathpersist-example-old.c, which has been obsolete
  since multipath-tools 0.8.6.</changelog>
  <changelog author="mwilck@suse.com" date="1709640000">- Update to version 0.9.8+87+suse.f72b9f3:
  * fix misspelled DM_UDEV_DISABLE_OTHER_RULES_FLAG in udev rules
    (bsc#1220810)</changelog>
  <changelog author="mwilck@suse.com" date="1712836800">- Update to version 0.9.8+88+suse.d504d83:
  * Revert "libmultipath: fix max_sectors_kb on adding path"
  (bsc#1222458)</changelog>
  <changelog author="mwilck@suse.com" date="1719316800">- Update to version 0.9.9+90+suse.f1d2f20:
  * Fix unit tests on Tumbleweed/armv7l
- Update to 0.9.9 upstream (see NEWS.md for details)
  * Update udev rules to be compliant with device-mapper udev
  rules update in LVM2 &gt;= 2.03.24.
  * Limit real-time scheduling priority to 10 by default. This
  can now be configured in multipathd.service using "LimitRTPRIO="
  * Set max_sectors_kb only on map creation, or when a new path
  is added, to avoid IO errors
  * The configuration option "flush_on_last_del" now takes the
  values "always" (="yes"), "unused" (="no"), and "never". "yes"
  and "no" are still supported
  * Add wildcard %k for max_sectors_kb for CLI commands like
  "multipath show {paths,maps} format"
  * Accept WWID value in CLI commands that take a map name, like
  "resize map $map"
  * Removed support for CLI wildcards for pathgroups, which were
  not function anyway.
  * Fix map failure count for no_path_retry &gt; 0</changelog>
  <changelog author="mwilck@suse.com" date="1721390400">- Update to version 0.9.9+161+suse.0c835ef:
  * Update to upstream reviewed code path (787e00d)
  * Added hardware defaults for Huawei storage arrays and XSG1 vendors
  * Refactored and improved the libultipath / libdevmapper interface
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove`
  (bug introduced in 0.9.9). (bsc#1229898)
  * CI improvements
  * Documentation fixes</changelog>
  <changelog author="mwilck@suse.com" date="1724932800">- Update to 0.10.0+103+suse.0fc97cd
- Update to upstream 0.10.0 (see also NEWS.md)
  * The `multipathd show daemon` command now shows `(reconfigure pending)`
  if a reconfiguration has been triggered but not finished yet.
  * Refactored the path checker loop. Paths are now checked for each multipath
  map in turn
  * Renamed public functions, variables, and macros to comply with the glibc policy
  for reserved names (gh#opensvc/multipath-tools#91)
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove` (bug introduced in
  0.9.9). (bsc#1229898)
  * Fixed old mpathpersist bug leading to the error message "configured reservation
  key doesn't match: 0x0" when `reservation_key` was configured in the
  multipaths section of `multipath.conf`. (bsc#1228926, gh#opensvc/multipath-tools#92)
  * Fixed output of `multipath -t` and `multipath -T` for the options
  `force_sync` and `retrigger_tries`. (bsc#1229898, gh#opensvc/multipath-tools#88)
  * Fixed adding maps by WWID in CLI (command `add map $WWID`). (bsc#1229898)</changelog>
  <changelog author="mwilck@suse.com" date="1730721600">- Update to version 0.10.0+106+suse.ffbdb7a:
  * Fix reboot hang if uevent is processed for suspended device
  (bsc#1232063)</changelog>
  <changelog author="mwilck@suse.com" date="1730808000">- Update to version 0.10.0+108+suse.2c2e597:
  * Update fix for bsc#1232063 to upstream-accepted solution</changelog>
  <changelog author="mwilck@suse.com" date="1732190400">- Update to version 0.10.1~1+113+suse.d6eca5e:
  This is a pre-release of the upstream stable release 0.10.1.
  * libmultipath: dm_get_maps(): don't bail out for single-map failures
  (bsc#1233588, gh#opensvc/multipath-tools#102)
  * libmultipath: don't print error message if WATCHDOG_USEC is 0
  (bsc#1232227)
  * libmultipath: don't set dev_loss_tmo to 0 for NO_PATH_RETRY_FAIL
  * multipathd: fix deferred_failback_tick for reload removes</changelog>
  <changelog author="mwilck@suse.com" date="1732536000">- Update to version 0.10.1~2+112+suse.b66763a:
  * libmultipath: reduce log level of "map X has multiple targets"
  (bsc#1233588)</changelog>
  <changelog author="mwilck@suse.com" date="1737720000">- Update to version 0.10.2+117+suse.33411aa:
  * multipathd: trigger uevents for blacklisted paths in reconfigure
    (bsc#1236321)
  * Make sure maps are reloaded in the path checker loop after detecting an
    inconsistent or wrong kernel state (bsc#1236392)
  * Make sure udev and systemd notice changes in multipath path state
    when devices are added to or removed from multipath maps (bsc#1236321)
  * Fix the problem that `group_by_tpg` might be disabled if one or more
    paths were offline during initial configuration (bsc#1236392)
  * Fix multipathd crash because of invalid path group index value, for example
    if an invalid path device was removed from a map.
    (gh#opensvc/multipath-tools#105, bsc#1236392)
  * Fixed a memory leak in the nvme foreign library.
  * Fixed a problem in the marginal path detection algorithm that could cause
    the io error check for a recently failed path to be delayed.
    (bsc#1236390)
  * Reduce log level of harmless "map ... doesn't exist" message
    (bsc#1236390)</changelog>
  <changelog author="mwilck@suse.com" date="1741176000">- Update to version 0.10.2+122+suse.51e02cc:
  * multipathd: fix hang during shutdown with queuing maps
    (bsc#1238484).
    This adds multipathd-queueing.service.</changelog>
  <changelog author="mwilck@suse.com" date="1751371200">- Update to version 0.10.2+123+suse.48d66ee8:
  * multipathd: cli_reinstate(): avoid reinstated paths being failed again
  (bsc#1244917)</changelog>
  <changelog author="mwilck@suse.com" date="1752494400">- Update to version 0.10.3+124+suse.ed5b4b11:
  * multipath-tools: add HPE MSA Gen7 (2070/2072) to hwtable
    (bsc#1246501)</changelog>
</package>
<package pkgid="e9e33d29a48c567823ecadf9c371b4a8e0e01827f92c878a55bb4d439b917b82" name="multipath-tools" arch="src">
  <version epoch="0" ver="0.10.5+198+suse.5875f383" rel="150700.3.6.1"/>
  <changelog author="mwilck@suse.com" date="1707998400">- Update to version 0.9.8~1+82+suse.dcd98a3:
  * Adapt package version such that it shows as a 0.9.8 prerelease
  * Add missing udev rules file</changelog>
  <changelog author="mwilck@suse.com" date="1708948800">- Update to version 0.9.8+83+suse.bcae610 (bsc#1220374)
  * multipath-tools: added NEWS.md</changelog>
  <changelog author="mwilck@suse.com" date="1709035200">- Remove libmpathpersist-example-old.c, which has been obsolete
  since multipath-tools 0.8.6.</changelog>
  <changelog author="mwilck@suse.com" date="1709640000">- Update to version 0.9.8+87+suse.f72b9f3:
  * fix misspelled DM_UDEV_DISABLE_OTHER_RULES_FLAG in udev rules
    (bsc#1220810)</changelog>
  <changelog author="mwilck@suse.com" date="1712836800">- Update to version 0.9.8+88+suse.d504d83:
  * Revert "libmultipath: fix max_sectors_kb on adding path"
  (bsc#1222458)</changelog>
  <changelog author="mwilck@suse.com" date="1719316800">- Update to version 0.9.9+90+suse.f1d2f20:
  * Fix unit tests on Tumbleweed/armv7l
- Update to 0.9.9 upstream (see NEWS.md for details)
  * Update udev rules to be compliant with device-mapper udev
  rules update in LVM2 &gt;= 2.03.24.
  * Limit real-time scheduling priority to 10 by default. This
  can now be configured in multipathd.service using "LimitRTPRIO="
  * Set max_sectors_kb only on map creation, or when a new path
  is added, to avoid IO errors
  * The configuration option "flush_on_last_del" now takes the
  values "always" (="yes"), "unused" (="no"), and "never". "yes"
  and "no" are still supported
  * Add wildcard %k for max_sectors_kb for CLI commands like
  "multipath show {paths,maps} format"
  * Accept WWID value in CLI commands that take a map name, like
  "resize map $map"
  * Removed support for CLI wildcards for pathgroups, which were
  not function anyway.
  * Fix map failure count for no_path_retry &gt; 0</changelog>
  <changelog author="mwilck@suse.com" date="1721390400">- Update to version 0.9.9+161+suse.0c835ef:
  * Update to upstream reviewed code path (787e00d)
  * Added hardware defaults for Huawei storage arrays and XSG1 vendors
  * Refactored and improved the libultipath / libdevmapper interface
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove`
  (bug introduced in 0.9.9). (bsc#1229898)
  * CI improvements
  * Documentation fixes</changelog>
  <changelog author="mwilck@suse.com" date="1724932800">- Update to 0.10.0+103+suse.0fc97cd
- Update to upstream 0.10.0 (see also NEWS.md)
  * The `multipathd show daemon` command now shows `(reconfigure pending)`
  if a reconfiguration has been triggered but not finished yet.
  * Refactored the path checker loop. Paths are now checked for each multipath
  map in turn
  * Renamed public functions, variables, and macros to comply with the glibc policy
  for reserved names (gh#opensvc/multipath-tools#91)
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove` (bug introduced in
  0.9.9). (bsc#1229898)
  * Fixed old mpathpersist bug leading to the error message "configured reservation
  key doesn't match: 0x0" when `reservation_key` was configured in the
  multipaths section of `multipath.conf`. (bsc#1228926, gh#opensvc/multipath-tools#92)
  * Fixed output of `multipath -t` and `multipath -T` for the options
  `force_sync` and `retrigger_tries`. (bsc#1229898, gh#opensvc/multipath-tools#88)
  * Fixed adding maps by WWID in CLI (command `add map $WWID`). (bsc#1229898)</changelog>
  <changelog author="mwilck@suse.com" date="1730721600">- Update to version 0.10.0+106+suse.ffbdb7a:
  * Fix reboot hang if uevent is processed for suspended device
  (bsc#1232063)</changelog>
  <changelog author="mwilck@suse.com" date="1730808000">- Update to version 0.10.0+108+suse.2c2e597:
  * Update fix for bsc#1232063 to upstream-accepted solution</changelog>
  <changelog author="mwilck@suse.com" date="1732190400">- Update to version 0.10.1~1+113+suse.d6eca5e:
  This is a pre-release of the upstream stable release 0.10.1.
  * libmultipath: dm_get_maps(): don't bail out for single-map failures
  (bsc#1233588, gh#opensvc/multipath-tools#102)
  * libmultipath: don't print error message if WATCHDOG_USEC is 0
  (bsc#1232227)
  * libmultipath: don't set dev_loss_tmo to 0 for NO_PATH_RETRY_FAIL
  * multipathd: fix deferred_failback_tick for reload removes</changelog>
  <changelog author="mwilck@suse.com" date="1732536000">- Update to version 0.10.1~2+112+suse.b66763a:
  * libmultipath: reduce log level of "map X has multiple targets"
  (bsc#1233588)</changelog>
  <changelog author="mwilck@suse.com" date="1737720000">- Update to version 0.10.2+117+suse.33411aa:
  * multipathd: trigger uevents for blacklisted paths in reconfigure
    (bsc#1236321)
  * Make sure maps are reloaded in the path checker loop after detecting an
    inconsistent or wrong kernel state (bsc#1236392)
  * Make sure udev and systemd notice changes in multipath path state
    when devices are added to or removed from multipath maps (bsc#1236321)
  * Fix the problem that `group_by_tpg` might be disabled if one or more
    paths were offline during initial configuration (bsc#1236392)
  * Fix multipathd crash because of invalid path group index value, for example
    if an invalid path device was removed from a map.
    (gh#opensvc/multipath-tools#105, bsc#1236392)
  * Fixed a memory leak in the nvme foreign library.
  * Fixed a problem in the marginal path detection algorithm that could cause
    the io error check for a recently failed path to be delayed.
    (bsc#1236390)
  * Reduce log level of harmless "map ... doesn't exist" message
    (bsc#1236390)</changelog>
  <changelog author="mwilck@suse.com" date="1741176000">- Update to version 0.10.2+122+suse.51e02cc:
  * multipathd: fix hang during shutdown with queuing maps
    (bsc#1238484).
    This adds multipathd-queueing.service.</changelog>
  <changelog author="mwilck@suse.com" date="1751371200">- Update to version 0.10.2+123+suse.48d66ee8:
  * multipathd: cli_reinstate(): avoid reinstated paths being failed again
  (bsc#1244917)</changelog>
  <changelog author="mwilck@suse.com" date="1752494400">- Update to version 0.10.3+124+suse.ed5b4b11:
  * multipath-tools: add HPE MSA Gen7 (2070/2072) to hwtable
    (bsc#1246501)</changelog>
  <changelog author="mwilck@suse.com" date="1762948800">- Update to version 0.10.5+125+suse.1ed79487:
- Fixes from upstream 0.10.5 (see also NEWS.md) (bsc#1253260)
  * Improved the communication with **udev** and **systemd** by triggering
    uevents when path devices are added to or removed from multipath maps,
    or when `multipathd reconfigure` is executed after changing blacklist
    directives in `multipath.conf`.
  * Failed paths should be checked every `polling_interval`. In certain cases,
    this wouldn't happen, because the check interval wasn't reset by multipathd.
  * It could happen that multipathd would accidentally release a SCSI persistent
    reservation held by another node. Fix it.
  * After manually failing some paths and then reinstating them, sometimes
    the reinstated paths were immediately failed again by multipathd. Fix it.
  * Various minor fixes reported by coverity.</changelog>
  <changelog author="mwilck@suse.com" date="1762948801">- _service: switched to tar_scm for git LFS</changelog>
  <changelog author="mwilck@suse.com" date="1763380800">- Update to version 0.10.5+190+suse.a9f87040:
  * CI: GitHub workflow updates. No code changes.</changelog>
  <changelog author="mwilck@suse.com" date="1763380801">- Update to version 0.10.5+198+suse.5875f383:
  * CI: more GitHub workflow updates. No code changes.</changelog>
</package>
<package pkgid="432c0a790a3742444070109a635f958492c6bd596c08b17825f17a94af7bf2af" name="multipath-tools" arch="x86_64">
  <version epoch="0" ver="0.10.5+198+suse.5875f383" rel="150700.3.6.1"/>
  <changelog author="mwilck@suse.com" date="1707998400">- Update to version 0.9.8~1+82+suse.dcd98a3:
  * Adapt package version such that it shows as a 0.9.8 prerelease
  * Add missing udev rules file</changelog>
  <changelog author="mwilck@suse.com" date="1708948800">- Update to version 0.9.8+83+suse.bcae610 (bsc#1220374)
  * multipath-tools: added NEWS.md</changelog>
  <changelog author="mwilck@suse.com" date="1709035200">- Remove libmpathpersist-example-old.c, which has been obsolete
  since multipath-tools 0.8.6.</changelog>
  <changelog author="mwilck@suse.com" date="1709640000">- Update to version 0.9.8+87+suse.f72b9f3:
  * fix misspelled DM_UDEV_DISABLE_OTHER_RULES_FLAG in udev rules
    (bsc#1220810)</changelog>
  <changelog author="mwilck@suse.com" date="1712836800">- Update to version 0.9.8+88+suse.d504d83:
  * Revert "libmultipath: fix max_sectors_kb on adding path"
  (bsc#1222458)</changelog>
  <changelog author="mwilck@suse.com" date="1719316800">- Update to version 0.9.9+90+suse.f1d2f20:
  * Fix unit tests on Tumbleweed/armv7l
- Update to 0.9.9 upstream (see NEWS.md for details)
  * Update udev rules to be compliant with device-mapper udev
  rules update in LVM2 &gt;= 2.03.24.
  * Limit real-time scheduling priority to 10 by default. This
  can now be configured in multipathd.service using "LimitRTPRIO="
  * Set max_sectors_kb only on map creation, or when a new path
  is added, to avoid IO errors
  * The configuration option "flush_on_last_del" now takes the
  values "always" (="yes"), "unused" (="no"), and "never". "yes"
  and "no" are still supported
  * Add wildcard %k for max_sectors_kb for CLI commands like
  "multipath show {paths,maps} format"
  * Accept WWID value in CLI commands that take a map name, like
  "resize map $map"
  * Removed support for CLI wildcards for pathgroups, which were
  not function anyway.
  * Fix map failure count for no_path_retry &gt; 0</changelog>
  <changelog author="mwilck@suse.com" date="1721390400">- Update to version 0.9.9+161+suse.0c835ef:
  * Update to upstream reviewed code path (787e00d)
  * Added hardware defaults for Huawei storage arrays and XSG1 vendors
  * Refactored and improved the libultipath / libdevmapper interface
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove`
  (bug introduced in 0.9.9). (bsc#1229898)
  * CI improvements
  * Documentation fixes</changelog>
  <changelog author="mwilck@suse.com" date="1724932800">- Update to 0.10.0+103+suse.0fc97cd
- Update to upstream 0.10.0 (see also NEWS.md)
  * The `multipathd show daemon` command now shows `(reconfigure pending)`
  if a reconfiguration has been triggered but not finished yet.
  * Refactored the path checker loop. Paths are now checked for each multipath
  map in turn
  * Renamed public functions, variables, and macros to comply with the glibc policy
  for reserved names (gh#opensvc/multipath-tools#91)
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove` (bug introduced in
  0.9.9). (bsc#1229898)
  * Fixed old mpathpersist bug leading to the error message "configured reservation
  key doesn't match: 0x0" when `reservation_key` was configured in the
  multipaths section of `multipath.conf`. (bsc#1228926, gh#opensvc/multipath-tools#92)
  * Fixed output of `multipath -t` and `multipath -T` for the options
  `force_sync` and `retrigger_tries`. (bsc#1229898, gh#opensvc/multipath-tools#88)
  * Fixed adding maps by WWID in CLI (command `add map $WWID`). (bsc#1229898)</changelog>
  <changelog author="mwilck@suse.com" date="1730721600">- Update to version 0.10.0+106+suse.ffbdb7a:
  * Fix reboot hang if uevent is processed for suspended device
  (bsc#1232063)</changelog>
  <changelog author="mwilck@suse.com" date="1730808000">- Update to version 0.10.0+108+suse.2c2e597:
  * Update fix for bsc#1232063 to upstream-accepted solution</changelog>
  <changelog author="mwilck@suse.com" date="1732190400">- Update to version 0.10.1~1+113+suse.d6eca5e:
  This is a pre-release of the upstream stable release 0.10.1.
  * libmultipath: dm_get_maps(): don't bail out for single-map failures
  (bsc#1233588, gh#opensvc/multipath-tools#102)
  * libmultipath: don't print error message if WATCHDOG_USEC is 0
  (bsc#1232227)
  * libmultipath: don't set dev_loss_tmo to 0 for NO_PATH_RETRY_FAIL
  * multipathd: fix deferred_failback_tick for reload removes</changelog>
  <changelog author="mwilck@suse.com" date="1732536000">- Update to version 0.10.1~2+112+suse.b66763a:
  * libmultipath: reduce log level of "map X has multiple targets"
  (bsc#1233588)</changelog>
  <changelog author="mwilck@suse.com" date="1737720000">- Update to version 0.10.2+117+suse.33411aa:
  * multipathd: trigger uevents for blacklisted paths in reconfigure
    (bsc#1236321)
  * Make sure maps are reloaded in the path checker loop after detecting an
    inconsistent or wrong kernel state (bsc#1236392)
  * Make sure udev and systemd notice changes in multipath path state
    when devices are added to or removed from multipath maps (bsc#1236321)
  * Fix the problem that `group_by_tpg` might be disabled if one or more
    paths were offline during initial configuration (bsc#1236392)
  * Fix multipathd crash because of invalid path group index value, for example
    if an invalid path device was removed from a map.
    (gh#opensvc/multipath-tools#105, bsc#1236392)
  * Fixed a memory leak in the nvme foreign library.
  * Fixed a problem in the marginal path detection algorithm that could cause
    the io error check for a recently failed path to be delayed.
    (bsc#1236390)
  * Reduce log level of harmless "map ... doesn't exist" message
    (bsc#1236390)</changelog>
  <changelog author="mwilck@suse.com" date="1741176000">- Update to version 0.10.2+122+suse.51e02cc:
  * multipathd: fix hang during shutdown with queuing maps
    (bsc#1238484).
    This adds multipathd-queueing.service.</changelog>
  <changelog author="mwilck@suse.com" date="1751371200">- Update to version 0.10.2+123+suse.48d66ee8:
  * multipathd: cli_reinstate(): avoid reinstated paths being failed again
  (bsc#1244917)</changelog>
  <changelog author="mwilck@suse.com" date="1752494400">- Update to version 0.10.3+124+suse.ed5b4b11:
  * multipath-tools: add HPE MSA Gen7 (2070/2072) to hwtable
    (bsc#1246501)</changelog>
  <changelog author="mwilck@suse.com" date="1762948800">- Update to version 0.10.5+125+suse.1ed79487:
- Fixes from upstream 0.10.5 (see also NEWS.md) (bsc#1253260)
  * Improved the communication with **udev** and **systemd** by triggering
    uevents when path devices are added to or removed from multipath maps,
    or when `multipathd reconfigure` is executed after changing blacklist
    directives in `multipath.conf`.
  * Failed paths should be checked every `polling_interval`. In certain cases,
    this wouldn't happen, because the check interval wasn't reset by multipathd.
  * It could happen that multipathd would accidentally release a SCSI persistent
    reservation held by another node. Fix it.
  * After manually failing some paths and then reinstating them, sometimes
    the reinstated paths were immediately failed again by multipathd. Fix it.
  * Various minor fixes reported by coverity.</changelog>
  <changelog author="mwilck@suse.com" date="1762948801">- _service: switched to tar_scm for git LFS</changelog>
  <changelog author="mwilck@suse.com" date="1763380800">- Update to version 0.10.5+190+suse.a9f87040:
  * CI: GitHub workflow updates. No code changes.</changelog>
  <changelog author="mwilck@suse.com" date="1763380801">- Update to version 0.10.5+198+suse.5875f383:
  * CI: more GitHub workflow updates. No code changes.</changelog>
</package>
<package pkgid="e2e89fb2f0a56d9856e04ade31264826a2f7b865a988f48c2fac61596cee1b38" name="multipath-tools" arch="src">
  <version epoch="0" ver="0.10.6+201+suse.9f189e79" rel="150700.3.11.1"/>
  <changelog author="mwilck@suse.com" date="1709035200">- Remove libmpathpersist-example-old.c, which has been obsolete
  since multipath-tools 0.8.6.</changelog>
  <changelog author="mwilck@suse.com" date="1709640000">- Update to version 0.9.8+87+suse.f72b9f3:
  * fix misspelled DM_UDEV_DISABLE_OTHER_RULES_FLAG in udev rules
    (bsc#1220810)</changelog>
  <changelog author="mwilck@suse.com" date="1712836800">- Update to version 0.9.8+88+suse.d504d83:
  * Revert "libmultipath: fix max_sectors_kb on adding path"
  (bsc#1222458)</changelog>
  <changelog author="mwilck@suse.com" date="1719316800">- Update to version 0.9.9+90+suse.f1d2f20:
  * Fix unit tests on Tumbleweed/armv7l
- Update to 0.9.9 upstream (see NEWS.md for details)
  * Update udev rules to be compliant with device-mapper udev
  rules update in LVM2 &gt;= 2.03.24.
  * Limit real-time scheduling priority to 10 by default. This
  can now be configured in multipathd.service using "LimitRTPRIO="
  * Set max_sectors_kb only on map creation, or when a new path
  is added, to avoid IO errors
  * The configuration option "flush_on_last_del" now takes the
  values "always" (="yes"), "unused" (="no"), and "never". "yes"
  and "no" are still supported
  * Add wildcard %k for max_sectors_kb for CLI commands like
  "multipath show {paths,maps} format"
  * Accept WWID value in CLI commands that take a map name, like
  "resize map $map"
  * Removed support for CLI wildcards for pathgroups, which were
  not function anyway.
  * Fix map failure count for no_path_retry &gt; 0</changelog>
  <changelog author="mwilck@suse.com" date="1721390400">- Update to version 0.9.9+161+suse.0c835ef:
  * Update to upstream reviewed code path (787e00d)
  * Added hardware defaults for Huawei storage arrays and XSG1 vendors
  * Refactored and improved the libultipath / libdevmapper interface
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove`
  (bug introduced in 0.9.9). (bsc#1229898)
  * CI improvements
  * Documentation fixes</changelog>
  <changelog author="mwilck@suse.com" date="1724932800">- Update to 0.10.0+103+suse.0fc97cd
- Update to upstream 0.10.0 (see also NEWS.md)
  * The `multipathd show daemon` command now shows `(reconfigure pending)`
  if a reconfiguration has been triggered but not finished yet.
  * Refactored the path checker loop. Paths are now checked for each multipath
  map in turn
  * Renamed public functions, variables, and macros to comply with the glibc policy
  for reserved names (gh#opensvc/multipath-tools#91)
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove` (bug introduced in
  0.9.9). (bsc#1229898)
  * Fixed old mpathpersist bug leading to the error message "configured reservation
  key doesn't match: 0x0" when `reservation_key` was configured in the
  multipaths section of `multipath.conf`. (bsc#1228926, gh#opensvc/multipath-tools#92)
  * Fixed output of `multipath -t` and `multipath -T` for the options
  `force_sync` and `retrigger_tries`. (bsc#1229898, gh#opensvc/multipath-tools#88)
  * Fixed adding maps by WWID in CLI (command `add map $WWID`). (bsc#1229898)</changelog>
  <changelog author="mwilck@suse.com" date="1730721600">- Update to version 0.10.0+106+suse.ffbdb7a:
  * Fix reboot hang if uevent is processed for suspended device
  (bsc#1232063)</changelog>
  <changelog author="mwilck@suse.com" date="1730808000">- Update to version 0.10.0+108+suse.2c2e597:
  * Update fix for bsc#1232063 to upstream-accepted solution</changelog>
  <changelog author="mwilck@suse.com" date="1732190400">- Update to version 0.10.1~1+113+suse.d6eca5e:
  This is a pre-release of the upstream stable release 0.10.1.
  * libmultipath: dm_get_maps(): don't bail out for single-map failures
  (bsc#1233588, gh#opensvc/multipath-tools#102)
  * libmultipath: don't print error message if WATCHDOG_USEC is 0
  (bsc#1232227)
  * libmultipath: don't set dev_loss_tmo to 0 for NO_PATH_RETRY_FAIL
  * multipathd: fix deferred_failback_tick for reload removes</changelog>
  <changelog author="mwilck@suse.com" date="1732536000">- Update to version 0.10.1~2+112+suse.b66763a:
  * libmultipath: reduce log level of "map X has multiple targets"
  (bsc#1233588)</changelog>
  <changelog author="mwilck@suse.com" date="1737720000">- Update to version 0.10.2+117+suse.33411aa:
  * multipathd: trigger uevents for blacklisted paths in reconfigure
    (bsc#1236321)
  * Make sure maps are reloaded in the path checker loop after detecting an
    inconsistent or wrong kernel state (bsc#1236392)
  * Make sure udev and systemd notice changes in multipath path state
    when devices are added to or removed from multipath maps (bsc#1236321)
  * Fix the problem that `group_by_tpg` might be disabled if one or more
    paths were offline during initial configuration (bsc#1236392)
  * Fix multipathd crash because of invalid path group index value, for example
    if an invalid path device was removed from a map.
    (gh#opensvc/multipath-tools#105, bsc#1236392)
  * Fixed a memory leak in the nvme foreign library.
  * Fixed a problem in the marginal path detection algorithm that could cause
    the io error check for a recently failed path to be delayed.
    (bsc#1236390)
  * Reduce log level of harmless "map ... doesn't exist" message
    (bsc#1236390)</changelog>
  <changelog author="mwilck@suse.com" date="1741176000">- Update to version 0.10.2+122+suse.51e02cc:
  * multipathd: fix hang during shutdown with queuing maps
    (bsc#1238484).
    This adds multipathd-queueing.service.</changelog>
  <changelog author="mwilck@suse.com" date="1751371200">- Update to version 0.10.2+123+suse.48d66ee8:
  * multipathd: cli_reinstate(): avoid reinstated paths being failed again
  (bsc#1244917)</changelog>
  <changelog author="mwilck@suse.com" date="1752494400">- Update to version 0.10.3+124+suse.ed5b4b11:
  * multipath-tools: add HPE MSA Gen7 (2070/2072) to hwtable
    (bsc#1246501)</changelog>
  <changelog author="mwilck@suse.com" date="1762948800">- Update to version 0.10.5+125+suse.1ed79487:
- Fixes from upstream 0.10.5 (see also NEWS.md) (bsc#1253260)
  * Improved the communication with **udev** and **systemd** by triggering
    uevents when path devices are added to or removed from multipath maps,
    or when `multipathd reconfigure` is executed after changing blacklist
    directives in `multipath.conf`.
  * Failed paths should be checked every `polling_interval`. In certain cases,
    this wouldn't happen, because the check interval wasn't reset by multipathd.
  * It could happen that multipathd would accidentally release a SCSI persistent
    reservation held by another node. Fix it.
  * After manually failing some paths and then reinstating them, sometimes
    the reinstated paths were immediately failed again by multipathd. Fix it.
  * Various minor fixes reported by coverity.</changelog>
  <changelog author="mwilck@suse.com" date="1762948801">- _service: switched to tar_scm for git LFS</changelog>
  <changelog author="mwilck@suse.com" date="1763380800">- Update to version 0.10.5+190+suse.a9f87040:
  * CI: GitHub workflow updates. No code changes.</changelog>
  <changelog author="mwilck@suse.com" date="1763726400">- Update to version 0.10.5+213+suse.04c3a0ac:
  * Log offline path state if "log_checker_err always" is set
    (bsc#1254094)
  * mpathpersist: Fix REPORT CAPABILITIES output</changelog>
  <changelog author="mwilck@suse.com" date="1769515200">- Update to version 0.10.6+200+suse.547788f4 (bsc#1257007):
  * kpartx: fix segfault when operating on regular files
    (bsc#1257244, bsc#1257153)
  * multipathd: print path offline message even without a checker
    (bsc#1254094)
  * Fix command descriptions in the multipathd man page.
  * Fix ISO C23 compatibility issue causing errors with new compilers.
  * Fix memory leak caused by not joining the "init unwinder" thread.
  * Fix memory leaks in kpartx.
  * Print the warning "setting scsi timeouts is unsupported for protocol" only
    once per protocol.
  * Make sure multipath-tools is compiled with the compiler flag
    `-fno-strict-aliasing`. (gh#opensvc/multipath-tools#130, bsc#1255285)</changelog>
  <changelog author="mwilck@suse.com" date="1769774400">- Update to version 0.10.6+201+suse.9f189e79:
  * libmultipath: reduce log level of "map X has no targets"
  (bsc#1257476)</changelog>
</package>
<package pkgid="fe1f3f2cb89c96e65a94792434313e1cb154e7dfec863933937e73da69c1f273" name="multipath-tools" arch="x86_64">
  <version epoch="0" ver="0.10.6+201+suse.9f189e79" rel="150700.3.11.1"/>
  <changelog author="mwilck@suse.com" date="1709035200">- Remove libmpathpersist-example-old.c, which has been obsolete
  since multipath-tools 0.8.6.</changelog>
  <changelog author="mwilck@suse.com" date="1709640000">- Update to version 0.9.8+87+suse.f72b9f3:
  * fix misspelled DM_UDEV_DISABLE_OTHER_RULES_FLAG in udev rules
    (bsc#1220810)</changelog>
  <changelog author="mwilck@suse.com" date="1712836800">- Update to version 0.9.8+88+suse.d504d83:
  * Revert "libmultipath: fix max_sectors_kb on adding path"
  (bsc#1222458)</changelog>
  <changelog author="mwilck@suse.com" date="1719316800">- Update to version 0.9.9+90+suse.f1d2f20:
  * Fix unit tests on Tumbleweed/armv7l
- Update to 0.9.9 upstream (see NEWS.md for details)
  * Update udev rules to be compliant with device-mapper udev
  rules update in LVM2 &gt;= 2.03.24.
  * Limit real-time scheduling priority to 10 by default. This
  can now be configured in multipathd.service using "LimitRTPRIO="
  * Set max_sectors_kb only on map creation, or when a new path
  is added, to avoid IO errors
  * The configuration option "flush_on_last_del" now takes the
  values "always" (="yes"), "unused" (="no"), and "never". "yes"
  and "no" are still supported
  * Add wildcard %k for max_sectors_kb for CLI commands like
  "multipath show {paths,maps} format"
  * Accept WWID value in CLI commands that take a map name, like
  "resize map $map"
  * Removed support for CLI wildcards for pathgroups, which were
  not function anyway.
  * Fix map failure count for no_path_retry &gt; 0</changelog>
  <changelog author="mwilck@suse.com" date="1721390400">- Update to version 0.9.9+161+suse.0c835ef:
  * Update to upstream reviewed code path (787e00d)
  * Added hardware defaults for Huawei storage arrays and XSG1 vendors
  * Refactored and improved the libultipath / libdevmapper interface
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove`
  (bug introduced in 0.9.9). (bsc#1229898)
  * CI improvements
  * Documentation fixes</changelog>
  <changelog author="mwilck@suse.com" date="1724932800">- Update to 0.10.0+103+suse.0fc97cd
- Update to upstream 0.10.0 (see also NEWS.md)
  * The `multipathd show daemon` command now shows `(reconfigure pending)`
  if a reconfiguration has been triggered but not finished yet.
  * Refactored the path checker loop. Paths are now checked for each multipath
  map in turn
  * Renamed public functions, variables, and macros to comply with the glibc policy
  for reserved names (gh#opensvc/multipath-tools#91)
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove` (bug introduced in
  0.9.9). (bsc#1229898)
  * Fixed old mpathpersist bug leading to the error message "configured reservation
  key doesn't match: 0x0" when `reservation_key` was configured in the
  multipaths section of `multipath.conf`. (bsc#1228926, gh#opensvc/multipath-tools#92)
  * Fixed output of `multipath -t` and `multipath -T` for the options
  `force_sync` and `retrigger_tries`. (bsc#1229898, gh#opensvc/multipath-tools#88)
  * Fixed adding maps by WWID in CLI (command `add map $WWID`). (bsc#1229898)</changelog>
  <changelog author="mwilck@suse.com" date="1730721600">- Update to version 0.10.0+106+suse.ffbdb7a:
  * Fix reboot hang if uevent is processed for suspended device
  (bsc#1232063)</changelog>
  <changelog author="mwilck@suse.com" date="1730808000">- Update to version 0.10.0+108+suse.2c2e597:
  * Update fix for bsc#1232063 to upstream-accepted solution</changelog>
  <changelog author="mwilck@suse.com" date="1732190400">- Update to version 0.10.1~1+113+suse.d6eca5e:
  This is a pre-release of the upstream stable release 0.10.1.
  * libmultipath: dm_get_maps(): don't bail out for single-map failures
  (bsc#1233588, gh#opensvc/multipath-tools#102)
  * libmultipath: don't print error message if WATCHDOG_USEC is 0
  (bsc#1232227)
  * libmultipath: don't set dev_loss_tmo to 0 for NO_PATH_RETRY_FAIL
  * multipathd: fix deferred_failback_tick for reload removes</changelog>
  <changelog author="mwilck@suse.com" date="1732536000">- Update to version 0.10.1~2+112+suse.b66763a:
  * libmultipath: reduce log level of "map X has multiple targets"
  (bsc#1233588)</changelog>
  <changelog author="mwilck@suse.com" date="1737720000">- Update to version 0.10.2+117+suse.33411aa:
  * multipathd: trigger uevents for blacklisted paths in reconfigure
    (bsc#1236321)
  * Make sure maps are reloaded in the path checker loop after detecting an
    inconsistent or wrong kernel state (bsc#1236392)
  * Make sure udev and systemd notice changes in multipath path state
    when devices are added to or removed from multipath maps (bsc#1236321)
  * Fix the problem that `group_by_tpg` might be disabled if one or more
    paths were offline during initial configuration (bsc#1236392)
  * Fix multipathd crash because of invalid path group index value, for example
    if an invalid path device was removed from a map.
    (gh#opensvc/multipath-tools#105, bsc#1236392)
  * Fixed a memory leak in the nvme foreign library.
  * Fixed a problem in the marginal path detection algorithm that could cause
    the io error check for a recently failed path to be delayed.
    (bsc#1236390)
  * Reduce log level of harmless "map ... doesn't exist" message
    (bsc#1236390)</changelog>
  <changelog author="mwilck@suse.com" date="1741176000">- Update to version 0.10.2+122+suse.51e02cc:
  * multipathd: fix hang during shutdown with queuing maps
    (bsc#1238484).
    This adds multipathd-queueing.service.</changelog>
  <changelog author="mwilck@suse.com" date="1751371200">- Update to version 0.10.2+123+suse.48d66ee8:
  * multipathd: cli_reinstate(): avoid reinstated paths being failed again
  (bsc#1244917)</changelog>
  <changelog author="mwilck@suse.com" date="1752494400">- Update to version 0.10.3+124+suse.ed5b4b11:
  * multipath-tools: add HPE MSA Gen7 (2070/2072) to hwtable
    (bsc#1246501)</changelog>
  <changelog author="mwilck@suse.com" date="1762948800">- Update to version 0.10.5+125+suse.1ed79487:
- Fixes from upstream 0.10.5 (see also NEWS.md) (bsc#1253260)
  * Improved the communication with **udev** and **systemd** by triggering
    uevents when path devices are added to or removed from multipath maps,
    or when `multipathd reconfigure` is executed after changing blacklist
    directives in `multipath.conf`.
  * Failed paths should be checked every `polling_interval`. In certain cases,
    this wouldn't happen, because the check interval wasn't reset by multipathd.
  * It could happen that multipathd would accidentally release a SCSI persistent
    reservation held by another node. Fix it.
  * After manually failing some paths and then reinstating them, sometimes
    the reinstated paths were immediately failed again by multipathd. Fix it.
  * Various minor fixes reported by coverity.</changelog>
  <changelog author="mwilck@suse.com" date="1762948801">- _service: switched to tar_scm for git LFS</changelog>
  <changelog author="mwilck@suse.com" date="1763380800">- Update to version 0.10.5+190+suse.a9f87040:
  * CI: GitHub workflow updates. No code changes.</changelog>
  <changelog author="mwilck@suse.com" date="1763726400">- Update to version 0.10.5+213+suse.04c3a0ac:
  * Log offline path state if "log_checker_err always" is set
    (bsc#1254094)
  * mpathpersist: Fix REPORT CAPABILITIES output</changelog>
  <changelog author="mwilck@suse.com" date="1769515200">- Update to version 0.10.6+200+suse.547788f4 (bsc#1257007):
  * kpartx: fix segfault when operating on regular files
    (bsc#1257244, bsc#1257153)
  * multipathd: print path offline message even without a checker
    (bsc#1254094)
  * Fix command descriptions in the multipathd man page.
  * Fix ISO C23 compatibility issue causing errors with new compilers.
  * Fix memory leak caused by not joining the "init unwinder" thread.
  * Fix memory leaks in kpartx.
  * Print the warning "setting scsi timeouts is unsupported for protocol" only
    once per protocol.
  * Make sure multipath-tools is compiled with the compiler flag
    `-fno-strict-aliasing`. (gh#opensvc/multipath-tools#130, bsc#1255285)</changelog>
  <changelog author="mwilck@suse.com" date="1769774400">- Update to version 0.10.6+201+suse.9f189e79:
  * libmultipath: reduce log level of "map X has no targets"
  (bsc#1257476)</changelog>
</package>
<package pkgid="963c5334c0e4efbc7dd745f50755754f95d306f1efb2e38b1436c4746e9405c1" name="multipath-tools-devel" arch="x86_64">
  <version epoch="0" ver="0.10.3+124+suse.ed5b4b11" rel="150700.3.3.1"/>
  <changelog author="mwilck@suse.com" date="1704456000">- Update to version 0.9.7+93+suse.e2f2272:
  * fix ANA prioritizer enablement logic (bsc#1218326)
  * avoid setting queue_if_no_path on multipath maps for which the
    no_path_retry timeout has expired
  * the interactive commands "restorequeueing map X" and
    "restorequeing maps" now only affect maps that had queueing
    manually disabled using "disablequeuing maps" or
    "disablequeuing map X" beforehand
  * Spelling fixes</changelog>
  <changelog author="mwilck@suse.com" date="1707739200">- Update to version 0.9.7+140+suse.2d78457:
  * This is a multipath-tools 0.9.8 pre-release
  * Socket activation via multipathd.socket has been disabled by default
    because it has undesirable side effects on systems without multipath.
    Users with multipath hardware should enable multipathd.service
  * The restorequeueing CLI command now only enables queueing if
    disablequeueing had been sent before
  * Avoid multipathd hang during map flush
  * multipathd now tracks the queueing mode of maps in its internal features string
  * Improve error messages in 'multipathd -k'
  * Fix segfault in autoresize code (bsc#1219289)
  * Fix missing map reloads (bsc#1219796)
  * Documentation fixes, spelling fixes, minor code fixes</changelog>
  <changelog author="mwilck@suse.com" date="1707739201">- Update to version 0.9.7+148+suse.7d9953e.obscpio
  * This is a multipath-tools 0.9.8 pre-release
  * fix fast_io_fail for Infinibox (bsc#1219348)
  * Fix activation of LVM volume groups during coldplug (bsc#1219142)</changelog>
  <changelog author="mwilck@suse.com" date="1707912000">- Update to version 0.9.7+148+suse.9780ae0:
  * 11-dm-mpath.rules: Fix quoting mistake (bsc#1219142)</changelog>
  <changelog author="mwilck@suse.com" date="1707998400">- Update to version 0.9.8~1+82+suse.dcd98a3:
  * Adapt package version such that it shows as a 0.9.8 prerelease
  * Add missing udev rules file</changelog>
  <changelog author="mwilck@suse.com" date="1708948800">- Update to version 0.9.8+83+suse.bcae610 (bsc#1220374)
  * multipath-tools: added NEWS.md</changelog>
  <changelog author="mwilck@suse.com" date="1709035200">- Remove libmpathpersist-example-old.c, which has been obsolete
  since multipath-tools 0.8.6.</changelog>
  <changelog author="mwilck@suse.com" date="1709640000">- Update to version 0.9.8+87+suse.f72b9f3:
  * fix misspelled DM_UDEV_DISABLE_OTHER_RULES_FLAG in udev rules
    (bsc#1220810)</changelog>
  <changelog author="mwilck@suse.com" date="1712836800">- Update to version 0.9.8+88+suse.d504d83:
  * Revert "libmultipath: fix max_sectors_kb on adding path"
  (bsc#1222458)</changelog>
  <changelog author="mwilck@suse.com" date="1719316800">- Update to version 0.9.9+90+suse.f1d2f20:
  * Fix unit tests on Tumbleweed/armv7l
- Update to 0.9.9 upstream (see NEWS.md for details)
  * Update udev rules to be compliant with device-mapper udev
  rules update in LVM2 &gt;= 2.03.24.
  * Limit real-time scheduling priority to 10 by default. This
  can now be configured in multipathd.service using "LimitRTPRIO="
  * Set max_sectors_kb only on map creation, or when a new path
  is added, to avoid IO errors
  * The configuration option "flush_on_last_del" now takes the
  values "always" (="yes"), "unused" (="no"), and "never". "yes"
  and "no" are still supported
  * Add wildcard %k for max_sectors_kb for CLI commands like
  "multipath show {paths,maps} format"
  * Accept WWID value in CLI commands that take a map name, like
  "resize map $map"
  * Removed support for CLI wildcards for pathgroups, which were
  not function anyway.
  * Fix map failure count for no_path_retry &gt; 0</changelog>
  <changelog author="mwilck@suse.com" date="1721390400">- Update to version 0.9.9+161+suse.0c835ef:
  * Update to upstream reviewed code path (787e00d)
  * Added hardware defaults for Huawei storage arrays and XSG1 vendors
  * Refactored and improved the libultipath / libdevmapper interface
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove`
  (bug introduced in 0.9.9). (bsc#1229898)
  * CI improvements
  * Documentation fixes</changelog>
  <changelog author="mwilck@suse.com" date="1724932800">- Update to 0.10.0+103+suse.0fc97cd
- Update to upstream 0.10.0 (see also NEWS.md)
  * The `multipathd show daemon` command now shows `(reconfigure pending)`
  if a reconfiguration has been triggered but not finished yet.
  * Refactored the path checker loop. Paths are now checked for each multipath
  map in turn
  * Renamed public functions, variables, and macros to comply with the glibc policy
  for reserved names (gh#opensvc/multipath-tools#91)
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove` (bug introduced in
  0.9.9). (bsc#1229898)
  * Fixed old mpathpersist bug leading to the error message "configured reservation
  key doesn't match: 0x0" when `reservation_key` was configured in the
  multipaths section of `multipath.conf`. (bsc#1228926, gh#opensvc/multipath-tools#92)
  * Fixed output of `multipath -t` and `multipath -T` for the options
  `force_sync` and `retrigger_tries`. (bsc#1229898, gh#opensvc/multipath-tools#88)
  * Fixed adding maps by WWID in CLI (command `add map $WWID`). (bsc#1229898)</changelog>
  <changelog author="mwilck@suse.com" date="1730721600">- Update to version 0.10.0+106+suse.ffbdb7a:
  * Fix reboot hang if uevent is processed for suspended device
  (bsc#1232063)</changelog>
  <changelog author="mwilck@suse.com" date="1730808000">- Update to version 0.10.0+108+suse.2c2e597:
  * Update fix for bsc#1232063 to upstream-accepted solution</changelog>
  <changelog author="mwilck@suse.com" date="1732190400">- Update to version 0.10.1~1+113+suse.d6eca5e:
  This is a pre-release of the upstream stable release 0.10.1.
  * libmultipath: dm_get_maps(): don't bail out for single-map failures
  (bsc#1233588, gh#opensvc/multipath-tools#102)
  * libmultipath: don't print error message if WATCHDOG_USEC is 0
  (bsc#1232227)
  * libmultipath: don't set dev_loss_tmo to 0 for NO_PATH_RETRY_FAIL
  * multipathd: fix deferred_failback_tick for reload removes</changelog>
  <changelog author="mwilck@suse.com" date="1732536000">- Update to version 0.10.1~2+112+suse.b66763a:
  * libmultipath: reduce log level of "map X has multiple targets"
  (bsc#1233588)</changelog>
  <changelog author="mwilck@suse.com" date="1737720000">- Update to version 0.10.2+117+suse.33411aa:
  * multipathd: trigger uevents for blacklisted paths in reconfigure
    (bsc#1236321)
  * Make sure maps are reloaded in the path checker loop after detecting an
    inconsistent or wrong kernel state (bsc#1236392)
  * Make sure udev and systemd notice changes in multipath path state
    when devices are added to or removed from multipath maps (bsc#1236321)
  * Fix the problem that `group_by_tpg` might be disabled if one or more
    paths were offline during initial configuration (bsc#1236392)
  * Fix multipathd crash because of invalid path group index value, for example
    if an invalid path device was removed from a map.
    (gh#opensvc/multipath-tools#105, bsc#1236392)
  * Fixed a memory leak in the nvme foreign library.
  * Fixed a problem in the marginal path detection algorithm that could cause
    the io error check for a recently failed path to be delayed.
    (bsc#1236390)
  * Reduce log level of harmless "map ... doesn't exist" message
    (bsc#1236390)</changelog>
  <changelog author="mwilck@suse.com" date="1741176000">- Update to version 0.10.2+122+suse.51e02cc:
  * multipathd: fix hang during shutdown with queuing maps
    (bsc#1238484).
    This adds multipathd-queueing.service.</changelog>
  <changelog author="mwilck@suse.com" date="1751371200">- Update to version 0.10.2+123+suse.48d66ee8:
  * multipathd: cli_reinstate(): avoid reinstated paths being failed again
  (bsc#1244917)</changelog>
  <changelog author="mwilck@suse.com" date="1752494400">- Update to version 0.10.3+124+suse.ed5b4b11:
  * multipath-tools: add HPE MSA Gen7 (2070/2072) to hwtable
    (bsc#1246501)</changelog>
</package>
<package pkgid="b100687ba3a5ff8ac9b7db4372b76ed8c5330af26e9640504e913a6e39d09552" name="multipath-tools-devel" arch="x86_64">
  <version epoch="0" ver="0.10.5+198+suse.5875f383" rel="150700.3.6.1"/>
  <changelog author="mwilck@suse.com" date="1707998400">- Update to version 0.9.8~1+82+suse.dcd98a3:
  * Adapt package version such that it shows as a 0.9.8 prerelease
  * Add missing udev rules file</changelog>
  <changelog author="mwilck@suse.com" date="1708948800">- Update to version 0.9.8+83+suse.bcae610 (bsc#1220374)
  * multipath-tools: added NEWS.md</changelog>
  <changelog author="mwilck@suse.com" date="1709035200">- Remove libmpathpersist-example-old.c, which has been obsolete
  since multipath-tools 0.8.6.</changelog>
  <changelog author="mwilck@suse.com" date="1709640000">- Update to version 0.9.8+87+suse.f72b9f3:
  * fix misspelled DM_UDEV_DISABLE_OTHER_RULES_FLAG in udev rules
    (bsc#1220810)</changelog>
  <changelog author="mwilck@suse.com" date="1712836800">- Update to version 0.9.8+88+suse.d504d83:
  * Revert "libmultipath: fix max_sectors_kb on adding path"
  (bsc#1222458)</changelog>
  <changelog author="mwilck@suse.com" date="1719316800">- Update to version 0.9.9+90+suse.f1d2f20:
  * Fix unit tests on Tumbleweed/armv7l
- Update to 0.9.9 upstream (see NEWS.md for details)
  * Update udev rules to be compliant with device-mapper udev
  rules update in LVM2 &gt;= 2.03.24.
  * Limit real-time scheduling priority to 10 by default. This
  can now be configured in multipathd.service using "LimitRTPRIO="
  * Set max_sectors_kb only on map creation, or when a new path
  is added, to avoid IO errors
  * The configuration option "flush_on_last_del" now takes the
  values "always" (="yes"), "unused" (="no"), and "never". "yes"
  and "no" are still supported
  * Add wildcard %k for max_sectors_kb for CLI commands like
  "multipath show {paths,maps} format"
  * Accept WWID value in CLI commands that take a map name, like
  "resize map $map"
  * Removed support for CLI wildcards for pathgroups, which were
  not function anyway.
  * Fix map failure count for no_path_retry &gt; 0</changelog>
  <changelog author="mwilck@suse.com" date="1721390400">- Update to version 0.9.9+161+suse.0c835ef:
  * Update to upstream reviewed code path (787e00d)
  * Added hardware defaults for Huawei storage arrays and XSG1 vendors
  * Refactored and improved the libultipath / libdevmapper interface
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove`
  (bug introduced in 0.9.9). (bsc#1229898)
  * CI improvements
  * Documentation fixes</changelog>
  <changelog author="mwilck@suse.com" date="1724932800">- Update to 0.10.0+103+suse.0fc97cd
- Update to upstream 0.10.0 (see also NEWS.md)
  * The `multipathd show daemon` command now shows `(reconfigure pending)`
  if a reconfiguration has been triggered but not finished yet.
  * Refactored the path checker loop. Paths are now checked for each multipath
  map in turn
  * Renamed public functions, variables, and macros to comply with the glibc policy
  for reserved names (gh#opensvc/multipath-tools#91)
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove` (bug introduced in
  0.9.9). (bsc#1229898)
  * Fixed old mpathpersist bug leading to the error message "configured reservation
  key doesn't match: 0x0" when `reservation_key` was configured in the
  multipaths section of `multipath.conf`. (bsc#1228926, gh#opensvc/multipath-tools#92)
  * Fixed output of `multipath -t` and `multipath -T` for the options
  `force_sync` and `retrigger_tries`. (bsc#1229898, gh#opensvc/multipath-tools#88)
  * Fixed adding maps by WWID in CLI (command `add map $WWID`). (bsc#1229898)</changelog>
  <changelog author="mwilck@suse.com" date="1730721600">- Update to version 0.10.0+106+suse.ffbdb7a:
  * Fix reboot hang if uevent is processed for suspended device
  (bsc#1232063)</changelog>
  <changelog author="mwilck@suse.com" date="1730808000">- Update to version 0.10.0+108+suse.2c2e597:
  * Update fix for bsc#1232063 to upstream-accepted solution</changelog>
  <changelog author="mwilck@suse.com" date="1732190400">- Update to version 0.10.1~1+113+suse.d6eca5e:
  This is a pre-release of the upstream stable release 0.10.1.
  * libmultipath: dm_get_maps(): don't bail out for single-map failures
  (bsc#1233588, gh#opensvc/multipath-tools#102)
  * libmultipath: don't print error message if WATCHDOG_USEC is 0
  (bsc#1232227)
  * libmultipath: don't set dev_loss_tmo to 0 for NO_PATH_RETRY_FAIL
  * multipathd: fix deferred_failback_tick for reload removes</changelog>
  <changelog author="mwilck@suse.com" date="1732536000">- Update to version 0.10.1~2+112+suse.b66763a:
  * libmultipath: reduce log level of "map X has multiple targets"
  (bsc#1233588)</changelog>
  <changelog author="mwilck@suse.com" date="1737720000">- Update to version 0.10.2+117+suse.33411aa:
  * multipathd: trigger uevents for blacklisted paths in reconfigure
    (bsc#1236321)
  * Make sure maps are reloaded in the path checker loop after detecting an
    inconsistent or wrong kernel state (bsc#1236392)
  * Make sure udev and systemd notice changes in multipath path state
    when devices are added to or removed from multipath maps (bsc#1236321)
  * Fix the problem that `group_by_tpg` might be disabled if one or more
    paths were offline during initial configuration (bsc#1236392)
  * Fix multipathd crash because of invalid path group index value, for example
    if an invalid path device was removed from a map.
    (gh#opensvc/multipath-tools#105, bsc#1236392)
  * Fixed a memory leak in the nvme foreign library.
  * Fixed a problem in the marginal path detection algorithm that could cause
    the io error check for a recently failed path to be delayed.
    (bsc#1236390)
  * Reduce log level of harmless "map ... doesn't exist" message
    (bsc#1236390)</changelog>
  <changelog author="mwilck@suse.com" date="1741176000">- Update to version 0.10.2+122+suse.51e02cc:
  * multipathd: fix hang during shutdown with queuing maps
    (bsc#1238484).
    This adds multipathd-queueing.service.</changelog>
  <changelog author="mwilck@suse.com" date="1751371200">- Update to version 0.10.2+123+suse.48d66ee8:
  * multipathd: cli_reinstate(): avoid reinstated paths being failed again
  (bsc#1244917)</changelog>
  <changelog author="mwilck@suse.com" date="1752494400">- Update to version 0.10.3+124+suse.ed5b4b11:
  * multipath-tools: add HPE MSA Gen7 (2070/2072) to hwtable
    (bsc#1246501)</changelog>
  <changelog author="mwilck@suse.com" date="1762948800">- Update to version 0.10.5+125+suse.1ed79487:
- Fixes from upstream 0.10.5 (see also NEWS.md) (bsc#1253260)
  * Improved the communication with **udev** and **systemd** by triggering
    uevents when path devices are added to or removed from multipath maps,
    or when `multipathd reconfigure` is executed after changing blacklist
    directives in `multipath.conf`.
  * Failed paths should be checked every `polling_interval`. In certain cases,
    this wouldn't happen, because the check interval wasn't reset by multipathd.
  * It could happen that multipathd would accidentally release a SCSI persistent
    reservation held by another node. Fix it.
  * After manually failing some paths and then reinstating them, sometimes
    the reinstated paths were immediately failed again by multipathd. Fix it.
  * Various minor fixes reported by coverity.</changelog>
  <changelog author="mwilck@suse.com" date="1762948801">- _service: switched to tar_scm for git LFS</changelog>
  <changelog author="mwilck@suse.com" date="1763380800">- Update to version 0.10.5+190+suse.a9f87040:
  * CI: GitHub workflow updates. No code changes.</changelog>
  <changelog author="mwilck@suse.com" date="1763380801">- Update to version 0.10.5+198+suse.5875f383:
  * CI: more GitHub workflow updates. No code changes.</changelog>
</package>
<package pkgid="6780c443ac7015be5898348896a469ee1ad1fece42efcb5ed04b0fac26a58e09" name="multipath-tools-devel" arch="x86_64">
  <version epoch="0" ver="0.10.6+201+suse.9f189e79" rel="150700.3.11.1"/>
  <changelog author="mwilck@suse.com" date="1709035200">- Remove libmpathpersist-example-old.c, which has been obsolete
  since multipath-tools 0.8.6.</changelog>
  <changelog author="mwilck@suse.com" date="1709640000">- Update to version 0.9.8+87+suse.f72b9f3:
  * fix misspelled DM_UDEV_DISABLE_OTHER_RULES_FLAG in udev rules
    (bsc#1220810)</changelog>
  <changelog author="mwilck@suse.com" date="1712836800">- Update to version 0.9.8+88+suse.d504d83:
  * Revert "libmultipath: fix max_sectors_kb on adding path"
  (bsc#1222458)</changelog>
  <changelog author="mwilck@suse.com" date="1719316800">- Update to version 0.9.9+90+suse.f1d2f20:
  * Fix unit tests on Tumbleweed/armv7l
- Update to 0.9.9 upstream (see NEWS.md for details)
  * Update udev rules to be compliant with device-mapper udev
  rules update in LVM2 &gt;= 2.03.24.
  * Limit real-time scheduling priority to 10 by default. This
  can now be configured in multipathd.service using "LimitRTPRIO="
  * Set max_sectors_kb only on map creation, or when a new path
  is added, to avoid IO errors
  * The configuration option "flush_on_last_del" now takes the
  values "always" (="yes"), "unused" (="no"), and "never". "yes"
  and "no" are still supported
  * Add wildcard %k for max_sectors_kb for CLI commands like
  "multipath show {paths,maps} format"
  * Accept WWID value in CLI commands that take a map name, like
  "resize map $map"
  * Removed support for CLI wildcards for pathgroups, which were
  not function anyway.
  * Fix map failure count for no_path_retry &gt; 0</changelog>
  <changelog author="mwilck@suse.com" date="1721390400">- Update to version 0.9.9+161+suse.0c835ef:
  * Update to upstream reviewed code path (787e00d)
  * Added hardware defaults for Huawei storage arrays and XSG1 vendors
  * Refactored and improved the libultipath / libdevmapper interface
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove`
  (bug introduced in 0.9.9). (bsc#1229898)
  * CI improvements
  * Documentation fixes</changelog>
  <changelog author="mwilck@suse.com" date="1724932800">- Update to 0.10.0+103+suse.0fc97cd
- Update to upstream 0.10.0 (see also NEWS.md)
  * The `multipathd show daemon` command now shows `(reconfigure pending)`
  if a reconfiguration has been triggered but not finished yet.
  * Refactored the path checker loop. Paths are now checked for each multipath
  map in turn
  * Renamed public functions, variables, and macros to comply with the glibc policy
  for reserved names (gh#opensvc/multipath-tools#91)
  * Fixed bug that caused queueing to be always disabled if flushing a map failed
  (bug introduced in 0.9.8). (bsc#1229898)
  * Fixed failure to remove maps even with `deferred_remove` (bug introduced in
  0.9.9). (bsc#1229898)
  * Fixed old mpathpersist bug leading to the error message "configured reservation
  key doesn't match: 0x0" when `reservation_key` was configured in the
  multipaths section of `multipath.conf`. (bsc#1228926, gh#opensvc/multipath-tools#92)
  * Fixed output of `multipath -t` and `multipath -T` for the options
  `force_sync` and `retrigger_tries`. (bsc#1229898, gh#opensvc/multipath-tools#88)
  * Fixed adding maps by WWID in CLI (command `add map $WWID`). (bsc#1229898)</changelog>
  <changelog author="mwilck@suse.com" date="1730721600">- Update to version 0.10.0+106+suse.ffbdb7a:
  * Fix reboot hang if uevent is processed for suspended device
  (bsc#1232063)</changelog>
  <changelog author="mwilck@suse.com" date="1730808000">- Update to version 0.10.0+108+suse.2c2e597:
  * Update fix for bsc#1232063 to upstream-accepted solution</changelog>
  <changelog author="mwilck@suse.com" date="1732190400">- Update to version 0.10.1~1+113+suse.d6eca5e:
  This is a pre-release of the upstream stable release 0.10.1.
  * libmultipath: dm_get_maps(): don't bail out for single-map failures
  (bsc#1233588, gh#opensvc/multipath-tools#102)
  * libmultipath: don't print error message if WATCHDOG_USEC is 0
  (bsc#1232227)
  * libmultipath: don't set dev_loss_tmo to 0 for NO_PATH_RETRY_FAIL
  * multipathd: fix deferred_failback_tick for reload removes</changelog>
  <changelog author="mwilck@suse.com" date="1732536000">- Update to version 0.10.1~2+112+suse.b66763a:
  * libmultipath: reduce log level of "map X has multiple targets"
  (bsc#1233588)</changelog>
  <changelog author="mwilck@suse.com" date="1737720000">- Update to version 0.10.2+117+suse.33411aa:
  * multipathd: trigger uevents for blacklisted paths in reconfigure
    (bsc#1236321)
  * Make sure maps are reloaded in the path checker loop after detecting an
    inconsistent or wrong kernel state (bsc#1236392)
  * Make sure udev and systemd notice changes in multipath path state
    when devices are added to or removed from multipath maps (bsc#1236321)
  * Fix the problem that `group_by_tpg` might be disabled if one or more
    paths were offline during initial configuration (bsc#1236392)
  * Fix multipathd crash because of invalid path group index value, for example
    if an invalid path device was removed from a map.
    (gh#opensvc/multipath-tools#105, bsc#1236392)
  * Fixed a memory leak in the nvme foreign library.
  * Fixed a problem in the marginal path detection algorithm that could cause
    the io error check for a recently failed path to be delayed.
    (bsc#1236390)
  * Reduce log level of harmless "map ... doesn't exist" message
    (bsc#1236390)</changelog>
  <changelog author="mwilck@suse.com" date="1741176000">- Update to version 0.10.2+122+suse.51e02cc:
  * multipathd: fix hang during shutdown with queuing maps
    (bsc#1238484).
    This adds multipathd-queueing.service.</changelog>
  <changelog author="mwilck@suse.com" date="1751371200">- Update to version 0.10.2+123+suse.48d66ee8:
  * multipathd: cli_reinstate(): avoid reinstated paths being failed again
  (bsc#1244917)</changelog>
  <changelog author="mwilck@suse.com" date="1752494400">- Update to version 0.10.3+124+suse.ed5b4b11:
  * multipath-tools: add HPE MSA Gen7 (2070/2072) to hwtable
    (bsc#1246501)</changelog>
  <changelog author="mwilck@suse.com" date="1762948800">- Update to version 0.10.5+125+suse.1ed79487:
- Fixes from upstream 0.10.5 (see also NEWS.md) (bsc#1253260)
  * Improved the communication with **udev** and **systemd** by triggering
    uevents when path devices are added to or removed from multipath maps,
    or when `multipathd reconfigure` is executed after changing blacklist
    directives in `multipath.conf`.
  * Failed paths should be checked every `polling_interval`. In certain cases,
    this wouldn't happen, because the check interval wasn't reset by multipathd.
  * It could happen that multipathd would accidentally release a SCSI persistent
    reservation held by another node. Fix it.
  * After manually failing some paths and then reinstating them, sometimes
    the reinstated paths were immediately failed again by multipathd. Fix it.
  * Various minor fixes reported by coverity.</changelog>
  <changelog author="mwilck@suse.com" date="1762948801">- _service: switched to tar_scm for git LFS</changelog>
  <changelog author="mwilck@suse.com" date="1763380800">- Update to version 0.10.5+190+suse.a9f87040:
  * CI: GitHub workflow updates. No code changes.</changelog>
  <changelog author="mwilck@suse.com" date="1763726400">- Update to version 0.10.5+213+suse.04c3a0ac:
  * Log offline path state if "log_checker_err always" is set
    (bsc#1254094)
  * mpathpersist: Fix REPORT CAPABILITIES output</changelog>
  <changelog author="mwilck@suse.com" date="1769515200">- Update to version 0.10.6+200+suse.547788f4 (bsc#1257007):
  * kpartx: fix segfault when operating on regular files
    (bsc#1257244, bsc#1257153)
  * multipathd: print path offline message even without a checker
    (bsc#1254094)
  * Fix command descriptions in the multipathd man page.
  * Fix ISO C23 compatibility issue causing errors with new compilers.
  * Fix memory leak caused by not joining the "init unwinder" thread.
  * Fix memory leaks in kpartx.
  * Print the warning "setting scsi timeouts is unsupported for protocol" only
    once per protocol.
  * Make sure multipath-tools is compiled with the compiler flag
    `-fno-strict-aliasing`. (gh#opensvc/multipath-tools#130, bsc#1255285)</changelog>
  <changelog author="mwilck@suse.com" date="1769774400">- Update to version 0.10.6+201+suse.9f189e79:
  * libmultipath: reduce log level of "map X has no targets"
  (bsc#1257476)</changelog>
</package>
<package pkgid="ea1e6c94e2e612ed99d803dace57843ef401d09fdc5debc155114a818ca1d783" name="mutt" arch="src">
  <version epoch="0" ver="2.2.14" rel="150600.3.3.1"/>
  <changelog author="werner@suse.de" date="1644235200">- For iconv glibc-locale should be installed</changelog>
  <changelog author="werner@suse.de" date="1650369600">- Update to mutt 2.2.3 (bsc#1198518 for CVE-2022-1328)
  * Fix read past end of buf in is_mmnoask().
  * Fix strlen() assigns to be of type size_t where obvious.
  * Flush iconv() in mutt_convert_string().
  * Add convert_string() size check.
  * Fix integer overflow in mutt_convert_string().
  * Fix uudecode cleanup on unexpected eof.
  * Fix uudecode buffer overflow.
  * automatic post-release commit for mutt-2.2.2
  * Protect prompt completion memcpy() calls with a NULL check.
  * Fix mutt.man formatting.
  * Fix query menu tagging behavior.
  * Fix some mailbox prompts to use mailbox history ring.
  * automatic post-release commit for mutt-2.2.1
  * Fix ambiguity in translation
  * Update the Polish translation for Mutt 2.2.0
  * Improve Turkish translations
  * Fix mutt_paddstr() to properly filter unprintable chars.
  * Change mailto_allow to be exact match only.
  * Filter headers passed via the command line.
  * Fix mbox.man asctime(3) reference.
  * Clarify description of $local_date_header
  * Don't queue IMAP close commands.
  * Update Finnish translation.
  * Updated Catalan translation.
  * Updated Russian translation.
  * Updated Ukrainian translation.
  * Fix argc==0 handling.
  * Update de.po.
  * Update Turkish translations.
  * Update Czech translation for mutt-2.2.0
  * Update translation files copyright string.
  * Updated French translation.
  * Fix $status_format documentation of $sort_thread_groups expando.
  * Update source file copyright lines based on commit history.
  * Update manual and program copyright notices.
  * Updated French translation.
  * Add very basic cd path completion.
  * Simplify the mutt_select_file() call for MUTT_CMD completion.
  * Add memcpy on MUTT_CMD completion to invoke the file selector.
  * Enable $rfc2047_parameters by default.
  * Set environ for sendmail execvp() call.
  * Updated French translation.
  * Convert SMTP cyrus sasl to use buffers.
  * Move hard_redraw() after sendmail invocation.
  * Revert "Add $reply_prefix."
  * Add config.h dependency for keymap_defs.h generation.
  * Force resort_init if $reply_regexp changes.
  * Add $reply_prefix.
  * Localize $reply_regexp.
  * Fix $reply_regexp default value.
  * Fix manual generation string_unescape() of backslash values.
  * Improve Turkish translations
  * Add pager REDRAW_FLOW redraw flag when popping a menu.
  * Merge branch 'stable'
  * Add new gsasl files to POTFILES.in.
  * Add GNU SASL support for authentication.
  * Add mutt_socket_buffer_readln().
  * Merge branch 'stable'
  * simplify envelope subject handling code a little
  * Update de.po
  * Fix sidebar counters with $maildir_trash.
  * Improve the statusbar modified flag for $maildir_trash.
  * Ignore $delete when sync'ing with $maildir_trash set.
  * Fix unused variable warning.
  * Allow an empty To: address prompt.
  * Convert COLOR_DEFAULT constant to -1.
  * [Fix] poll to use PollFdsCount and no PollFdsLen
  * Add a few mutt variable configure dependency comments.
  * Fix color object case insensitive comparisons.
  * Correct multipart/alternative manual section slightly.
  * Add internal mutt_ctime() implementation.
  * Improve pattern compiler whitespace skipping.
  * Updated French translation.
  * Remove trailing slashes when opening maildir/mh mailboxes.
  * Note that IMAP mailboxes polling doesn't support flag counts.
  * Add $attach_save_charset_convert quadoption.
  * Remove unneeded type save/restores around mutt_decode_attachment().
  * Improve smime_verify_one() error handling and general flow.
  * Assert mutt_decode_attachment() doesn't modify body fields.
  * Don't use subtraction for qsort numeric value comparisons.
  * Fix alias menu multi-select documentation.
  * Implement &lt;select-entry&gt; as &lt;display-message&gt; in index menu.
  * Use km_error_key() in index only for OP_NULL.
  * Generate URLs with user/password as parsed.
  * Ensure embedded IMAP passwords are stored in context-&gt;path.
  * Updated French translation.
  * Fix yesorno help prompt printing of choice.
  * Add $compose_confirm_detach_first, default set.
  * Add a comment about msn_seqset generation and header cache holes.
  * Use cms utility for SMIME encryption/decryption.
  * Improve conststrings.c generation, mainly for GNU Autoconf 2.71.
  * Updated French translation.
  * Merge branch 'stable'
  * Update Esperanto translation.
  * Add robustness checks to file attach functions.
  * Prompt for password when using encrypted client certificate
  * Lazily update header colors after a thread-flag update.
  * Add $sort_thread_groups for top-level thread sorting.
  * Make index sort compare functions independent from config variables.
  * Improve generic menu type handling.
  * Break the menu OPS/funcs and keybindings into separate tables.
  * Enable nonl() mode for ncurses.  closes #362.
  * Revert "Silence strfcpy() warning in dotlock_deference_symlink()."
  * Use memccpy() in the strfcpy macro if it's available.
  * Fix typo in comment and function name: deference -&gt; dereference.
  * Silence strfcpy() warning in dotlock_deference_symlink().
  * Add dprint for a backtick expansion with non-0 exit code.
  * Use SEEK_SET and SEEK_END for fseek/fseeko whence parameter.
  * Rewrite mutt_apply_replace() to use buffers.
  * Increase scratch buf size in mutt_canonical_charset().
  * Change hdrline make_from(_addr) to use snprintf for from.
  * Silence compiler warning in _mutt_buffer_select_file().
  * Use memcpy in fseek_last_message() instead of strncpy.
  * Fix mutt_sasl buffer size to hold ip_port strings.
  * Silence imap_make_date() warning by switching to a BUFFER.
  * Silence compiler "may be uninitialized" warnings.
  * Updated French translation.
  * Add a help choice '?' to the yes or no prompt for quadoptions.
  * Filter out group delimiters for encrypt keylist generation.
  * contrib/markdown2html: properly deal with lead-ins
  * contrib/markdown2html: properly deal with missing context
  * contrib/markdown: fix bug when dealing with quotelead classes
  * Exit with a failure for any usage or version write error.
  * Really fix usage and version write error checking.
  * Fix usage and version write error checking.
  * Add usage and version write error checking.
  * Check stdout is a terminal in curses mode.
  * Add a hard redraw after oauth authentication.
  * Fix classic pgp decrypt_part() hard redraw on error.
  * Reset SIGPIPE signal handler in child process before exec().
  * Add $pager_skip_quoted_context option.
  * Updated French translation.
  * Suggested translation changes.
  * Directly add full mailbox to GPG search hints.
- Port patches mainly hunk offsets
  * aw.listreply.diff
  * mutt-1.10.1-imap.patch
  * mutt-1.13.3.dif
  * mutt-1.5.15-wrapcolumn.diff
  * mutt-1.5.20-sendgroupreplyto.diff
  * mutt-1.5.21-mailcap.diff
  * mutt-1.5.23-carriage-return.path
  * mutt-1.6.1-opennfs.dif
  * mutt-Fix-SIGQUIT-handling.patch
  * patch-1.5.24.vk.pgp_verbose_mime
  * widechar.sidebar.dif</changelog>
  <changelog author="dmueller@suse.com" date="1654344000">- update to 2.2.5:
  * fixing two issues with libgsasl authentication.
  * fixing some regressions with Maildir/mh mailbox path normalization that were
    added in 2.2.0. Please see the UPDATING file for more details.</changelog>
  <changelog author="dmueller@suse.com" date="1656158400">- update to 2.2.6:
  * This is a bug-fix release, fixing a variety of small issues</changelog>
  <changelog author="dmueller@suse.com" date="1660046400">- update to 2.2.7:
  * This is a bug-fix release, fixing a $edit_headers bug on MacOS, along with
    a few other small bugs. It also tightens the $query_command parser to
    accept a single tab between fields, and changes $pager to accept a %s
    expando.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1662552000">- enable optional verbose debugging at run-time (boo#1203184)</changelog>
  <changelog author="werner@suse.de" date="1662984000">- Refresh offsets of patches
  * aw.listreply.diff
  * mutt-1.10.1-imap.patch
  * mutt-1.5.15-wrapcolumn.diff
  * mutt-1.5.20-sendgroupreplyto.diff
  * mutt-1.6.1-opennfs.dif
  * patch-1.5.24.vk.pgp_verbose_mime</changelog>
  <changelog author="dmueller@suse.com" date="1670155200">- update to 2.2.9:
  * Document the &lt;1234&gt; key syntax for bind.
  * Fix non-printable keyname printing to use &lt;octal&gt; syntax.
  * Move AM_PATH_GPG_ERROR before AM_PATH_GPGME.
  * Update gpgme autoconf files to the latest versions.
  * Adjust manual concerning IMAP Fcc in batch mode.
  * Add explicit void to 0-parameter function definitions.</changelog>
  <changelog author="dmueller@suse.com" date="1680523200">- update to 2.2.10:
  * Bug fix release.
  * $message_id_format %r and %z expandos use a URL-safe Base64 encoding:
    '-' and '_' instead of '+' and '/'.</changelog>
  <changelog author="werner@suse.de" date="1681732800">- Use astrix instead of german u umlaut as point</changelog>
  <changelog author="werner@suse.de" date="1694520000">- Update to mutt 2.2.12 (bsc#1215189 for CVE-2023-4874,
  bsc#1215191 for CVE-2023-4875)
  * 2.2.12 (2023-09-09):
    Bug fix release.
  * 2.2.11 (2023-08-18):
    Bug fix release.</changelog>
  <changelog author="werner@suse.de" date="1695816000">- Submit latest mutt 2.2.12 to SLE-15-SP6 for jira#PED-5580
  * Drop patches for boo#1172906, boo#1172935, CVE-2020-14093,
    and CVE-2020-14154 now upstream
  - 3e88866dc60b5fa6aaba6fd7c1710c12c1c3cd01.patch
    + Prevent possible IMAP MITM via PREAUTH response.
  - mutt-1.10.1-backport-mutt_ssl_gnutls-1.14.3.dif
    to port mutt_ssl_gnutls.c from mutt 1.14.3 back
    + expired certs not properly rejected with GnuTLS
    + Side effect is support of TLSv1_3 is supported by gnutls
  * Drop patch for bsc#1173197 c547433cdf2e79191b15c6932c57f1472bfb5ff4.dif
    now upstream
  - Fix CVE-2020-14954: STARTTLS buffering issue allowing man
    in the middle attack of IMAP, SMTP and POP3
  * Drop patch for bsc#1179035, CVE-2020-28896.patch now upstream
  - incomplete connection termination could lead to sending
    credentials over unencrypted connections
  * Drop patch for bsc#1179113 and boo#1179461 nofreeze-c72f740a.patch
    now upstream
  - Avoid that message with a million tiny parts can freeze MUA
    for several minutes
  * Drop patch for bsc#1181221, CVE-2021-3181 mutt-colon.patch now
    upstream
  - recipient parsing memory leak. This patch combines three
    smaller commits
  * Drop patch for bsc#1198518, CVE-2022-1328 uudecode-e5ed080c.patch
  - fix a buffer overflow in uudecoder
  * Drop patches now upstream
  - CVE-2023-4874-part1.patch (bsc#1215189 for CVE-2023-4874)
  - CVE-2023-4874-part2.patch (bsc#1215189 for CVE-2023-4874)
  - CVE-2023-4875.patch (bsc#1215191 for CVE-2023-4875)</changelog>
  <changelog author="werner@suse.de" date="1696852800">- Require a smtp daemon at build and runtime to work around
  missing system /var/mail/ directory (boo#1216035)</changelog>
  <changelog author="werner@suse.de" date="1708430400">- Only suggest smtp daemon at runtime.  Nevertheless if not
  installed user will face a a warning.
- Move /etc/Muttrc to /usr/share/mutt/Muttrc</changelog>
  <changelog author="pgajdos@suse.com" date="1708689600">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="werner@suse.de" date="1717416000">- Update to mutt 2.2.13 (Bug fix release)
  * Fix smtp client to respect $use_envelope_from option. The code
    was only looking to see if $envelope_from_address had a value,
    not if $use_envelope_from was set.
    Add extra safety checks to make sure the mailbox value isn't NULL.
  * Fix smtp client $envelope_from_address possible dangling pointer.
    If the account-hook invoked by mutt_conn_find() modifies
    $envelope_from_address, envfrom could point no longer point to the
    address.
    Move the mutt_conn_find() before the code that determines the envelope
    from address.</changelog>
  <changelog author="werner@suse.de" date="1721044800">- Require some cyrus-sasl plugins to make the cyrus-sasl feature
  of mutt function (boo#1227731)</changelog>
  <changelog author="werner@suse.de" date="1721044801">- Remove patch aw.listreply.diff as it conflicts with builtin
  &lt;list-reply&gt; feature
- Build and install pdf doc</changelog>
  <changelog author="werner@suse.de" date="1747828800">- Update to mutt 2.2.14 (Bug fix release)
  * fixing a couple possible crashes, in GPGME and with IMAP when
    logging out
  * and correcting a small issue with unnecessary encoding of "."
    in attachment names (2231 encoding).
- Make doc info and hmtl file build without network
- Set default mail spool files</changelog>
  <changelog author="werner@suse.de" date="1754568000">- Exclude sample ca-bundle.crt as it is outdated (bsc#1246321)</changelog>
</package>
<package pkgid="05131917029f5ca0eebdb6f01c708236fb78aec21c49bd09721dca79d72bd690" name="mutt" arch="x86_64">
  <version epoch="0" ver="2.2.14" rel="150600.3.3.1"/>
  <changelog author="werner@suse.de" date="1644235200">- For iconv glibc-locale should be installed</changelog>
  <changelog author="werner@suse.de" date="1650369600">- Update to mutt 2.2.3 (bsc#1198518 for CVE-2022-1328)
  * Fix read past end of buf in is_mmnoask().
  * Fix strlen() assigns to be of type size_t where obvious.
  * Flush iconv() in mutt_convert_string().
  * Add convert_string() size check.
  * Fix integer overflow in mutt_convert_string().
  * Fix uudecode cleanup on unexpected eof.
  * Fix uudecode buffer overflow.
  * automatic post-release commit for mutt-2.2.2
  * Protect prompt completion memcpy() calls with a NULL check.
  * Fix mutt.man formatting.
  * Fix query menu tagging behavior.
  * Fix some mailbox prompts to use mailbox history ring.
  * automatic post-release commit for mutt-2.2.1
  * Fix ambiguity in translation
  * Update the Polish translation for Mutt 2.2.0
  * Improve Turkish translations
  * Fix mutt_paddstr() to properly filter unprintable chars.
  * Change mailto_allow to be exact match only.
  * Filter headers passed via the command line.
  * Fix mbox.man asctime(3) reference.
  * Clarify description of $local_date_header
  * Don't queue IMAP close commands.
  * Update Finnish translation.
  * Updated Catalan translation.
  * Updated Russian translation.
  * Updated Ukrainian translation.
  * Fix argc==0 handling.
  * Update de.po.
  * Update Turkish translations.
  * Update Czech translation for mutt-2.2.0
  * Update translation files copyright string.
  * Updated French translation.
  * Fix $status_format documentation of $sort_thread_groups expando.
  * Update source file copyright lines based on commit history.
  * Update manual and program copyright notices.
  * Updated French translation.
  * Add very basic cd path completion.
  * Simplify the mutt_select_file() call for MUTT_CMD completion.
  * Add memcpy on MUTT_CMD completion to invoke the file selector.
  * Enable $rfc2047_parameters by default.
  * Set environ for sendmail execvp() call.
  * Updated French translation.
  * Convert SMTP cyrus sasl to use buffers.
  * Move hard_redraw() after sendmail invocation.
  * Revert "Add $reply_prefix."
  * Add config.h dependency for keymap_defs.h generation.
  * Force resort_init if $reply_regexp changes.
  * Add $reply_prefix.
  * Localize $reply_regexp.
  * Fix $reply_regexp default value.
  * Fix manual generation string_unescape() of backslash values.
  * Improve Turkish translations
  * Add pager REDRAW_FLOW redraw flag when popping a menu.
  * Merge branch 'stable'
  * Add new gsasl files to POTFILES.in.
  * Add GNU SASL support for authentication.
  * Add mutt_socket_buffer_readln().
  * Merge branch 'stable'
  * simplify envelope subject handling code a little
  * Update de.po
  * Fix sidebar counters with $maildir_trash.
  * Improve the statusbar modified flag for $maildir_trash.
  * Ignore $delete when sync'ing with $maildir_trash set.
  * Fix unused variable warning.
  * Allow an empty To: address prompt.
  * Convert COLOR_DEFAULT constant to -1.
  * [Fix] poll to use PollFdsCount and no PollFdsLen
  * Add a few mutt variable configure dependency comments.
  * Fix color object case insensitive comparisons.
  * Correct multipart/alternative manual section slightly.
  * Add internal mutt_ctime() implementation.
  * Improve pattern compiler whitespace skipping.
  * Updated French translation.
  * Remove trailing slashes when opening maildir/mh mailboxes.
  * Note that IMAP mailboxes polling doesn't support flag counts.
  * Add $attach_save_charset_convert quadoption.
  * Remove unneeded type save/restores around mutt_decode_attachment().
  * Improve smime_verify_one() error handling and general flow.
  * Assert mutt_decode_attachment() doesn't modify body fields.
  * Don't use subtraction for qsort numeric value comparisons.
  * Fix alias menu multi-select documentation.
  * Implement &lt;select-entry&gt; as &lt;display-message&gt; in index menu.
  * Use km_error_key() in index only for OP_NULL.
  * Generate URLs with user/password as parsed.
  * Ensure embedded IMAP passwords are stored in context-&gt;path.
  * Updated French translation.
  * Fix yesorno help prompt printing of choice.
  * Add $compose_confirm_detach_first, default set.
  * Add a comment about msn_seqset generation and header cache holes.
  * Use cms utility for SMIME encryption/decryption.
  * Improve conststrings.c generation, mainly for GNU Autoconf 2.71.
  * Updated French translation.
  * Merge branch 'stable'
  * Update Esperanto translation.
  * Add robustness checks to file attach functions.
  * Prompt for password when using encrypted client certificate
  * Lazily update header colors after a thread-flag update.
  * Add $sort_thread_groups for top-level thread sorting.
  * Make index sort compare functions independent from config variables.
  * Improve generic menu type handling.
  * Break the menu OPS/funcs and keybindings into separate tables.
  * Enable nonl() mode for ncurses.  closes #362.
  * Revert "Silence strfcpy() warning in dotlock_deference_symlink()."
  * Use memccpy() in the strfcpy macro if it's available.
  * Fix typo in comment and function name: deference -&gt; dereference.
  * Silence strfcpy() warning in dotlock_deference_symlink().
  * Add dprint for a backtick expansion with non-0 exit code.
  * Use SEEK_SET and SEEK_END for fseek/fseeko whence parameter.
  * Rewrite mutt_apply_replace() to use buffers.
  * Increase scratch buf size in mutt_canonical_charset().
  * Change hdrline make_from(_addr) to use snprintf for from.
  * Silence compiler warning in _mutt_buffer_select_file().
  * Use memcpy in fseek_last_message() instead of strncpy.
  * Fix mutt_sasl buffer size to hold ip_port strings.
  * Silence imap_make_date() warning by switching to a BUFFER.
  * Silence compiler "may be uninitialized" warnings.
  * Updated French translation.
  * Add a help choice '?' to the yes or no prompt for quadoptions.
  * Filter out group delimiters for encrypt keylist generation.
  * contrib/markdown2html: properly deal with lead-ins
  * contrib/markdown2html: properly deal with missing context
  * contrib/markdown: fix bug when dealing with quotelead classes
  * Exit with a failure for any usage or version write error.
  * Really fix usage and version write error checking.
  * Fix usage and version write error checking.
  * Add usage and version write error checking.
  * Check stdout is a terminal in curses mode.
  * Add a hard redraw after oauth authentication.
  * Fix classic pgp decrypt_part() hard redraw on error.
  * Reset SIGPIPE signal handler in child process before exec().
  * Add $pager_skip_quoted_context option.
  * Updated French translation.
  * Suggested translation changes.
  * Directly add full mailbox to GPG search hints.
- Port patches mainly hunk offsets
  * aw.listreply.diff
  * mutt-1.10.1-imap.patch
  * mutt-1.13.3.dif
  * mutt-1.5.15-wrapcolumn.diff
  * mutt-1.5.20-sendgroupreplyto.diff
  * mutt-1.5.21-mailcap.diff
  * mutt-1.5.23-carriage-return.path
  * mutt-1.6.1-opennfs.dif
  * mutt-Fix-SIGQUIT-handling.patch
  * patch-1.5.24.vk.pgp_verbose_mime
  * widechar.sidebar.dif</changelog>
  <changelog author="dmueller@suse.com" date="1654344000">- update to 2.2.5:
  * fixing two issues with libgsasl authentication.
  * fixing some regressions with Maildir/mh mailbox path normalization that were
    added in 2.2.0. Please see the UPDATING file for more details.</changelog>
  <changelog author="dmueller@suse.com" date="1656158400">- update to 2.2.6:
  * This is a bug-fix release, fixing a variety of small issues</changelog>
  <changelog author="dmueller@suse.com" date="1660046400">- update to 2.2.7:
  * This is a bug-fix release, fixing a $edit_headers bug on MacOS, along with
    a few other small bugs. It also tightens the $query_command parser to
    accept a single tab between fields, and changes $pager to accept a %s
    expando.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1662552000">- enable optional verbose debugging at run-time (boo#1203184)</changelog>
  <changelog author="werner@suse.de" date="1662984000">- Refresh offsets of patches
  * aw.listreply.diff
  * mutt-1.10.1-imap.patch
  * mutt-1.5.15-wrapcolumn.diff
  * mutt-1.5.20-sendgroupreplyto.diff
  * mutt-1.6.1-opennfs.dif
  * patch-1.5.24.vk.pgp_verbose_mime</changelog>
  <changelog author="dmueller@suse.com" date="1670155200">- update to 2.2.9:
  * Document the &lt;1234&gt; key syntax for bind.
  * Fix non-printable keyname printing to use &lt;octal&gt; syntax.
  * Move AM_PATH_GPG_ERROR before AM_PATH_GPGME.
  * Update gpgme autoconf files to the latest versions.
  * Adjust manual concerning IMAP Fcc in batch mode.
  * Add explicit void to 0-parameter function definitions.</changelog>
  <changelog author="dmueller@suse.com" date="1680523200">- update to 2.2.10:
  * Bug fix release.
  * $message_id_format %r and %z expandos use a URL-safe Base64 encoding:
    '-' and '_' instead of '+' and '/'.</changelog>
  <changelog author="werner@suse.de" date="1681732800">- Use astrix instead of german u umlaut as point</changelog>
  <changelog author="werner@suse.de" date="1694520000">- Update to mutt 2.2.12 (bsc#1215189 for CVE-2023-4874,
  bsc#1215191 for CVE-2023-4875)
  * 2.2.12 (2023-09-09):
    Bug fix release.
  * 2.2.11 (2023-08-18):
    Bug fix release.</changelog>
  <changelog author="werner@suse.de" date="1695816000">- Submit latest mutt 2.2.12 to SLE-15-SP6 for jira#PED-5580
  * Drop patches for boo#1172906, boo#1172935, CVE-2020-14093,
    and CVE-2020-14154 now upstream
  - 3e88866dc60b5fa6aaba6fd7c1710c12c1c3cd01.patch
    + Prevent possible IMAP MITM via PREAUTH response.
  - mutt-1.10.1-backport-mutt_ssl_gnutls-1.14.3.dif
    to port mutt_ssl_gnutls.c from mutt 1.14.3 back
    + expired certs not properly rejected with GnuTLS
    + Side effect is support of TLSv1_3 is supported by gnutls
  * Drop patch for bsc#1173197 c547433cdf2e79191b15c6932c57f1472bfb5ff4.dif
    now upstream
  - Fix CVE-2020-14954: STARTTLS buffering issue allowing man
    in the middle attack of IMAP, SMTP and POP3
  * Drop patch for bsc#1179035, CVE-2020-28896.patch now upstream
  - incomplete connection termination could lead to sending
    credentials over unencrypted connections
  * Drop patch for bsc#1179113 and boo#1179461 nofreeze-c72f740a.patch
    now upstream
  - Avoid that message with a million tiny parts can freeze MUA
    for several minutes
  * Drop patch for bsc#1181221, CVE-2021-3181 mutt-colon.patch now
    upstream
  - recipient parsing memory leak. This patch combines three
    smaller commits
  * Drop patch for bsc#1198518, CVE-2022-1328 uudecode-e5ed080c.patch
  - fix a buffer overflow in uudecoder
  * Drop patches now upstream
  - CVE-2023-4874-part1.patch (bsc#1215189 for CVE-2023-4874)
  - CVE-2023-4874-part2.patch (bsc#1215189 for CVE-2023-4874)
  - CVE-2023-4875.patch (bsc#1215191 for CVE-2023-4875)</changelog>
  <changelog author="werner@suse.de" date="1696852800">- Require a smtp daemon at build and runtime to work around
  missing system /var/mail/ directory (boo#1216035)</changelog>
  <changelog author="werner@suse.de" date="1708430400">- Only suggest smtp daemon at runtime.  Nevertheless if not
  installed user will face a a warning.
- Move /etc/Muttrc to /usr/share/mutt/Muttrc</changelog>
  <changelog author="pgajdos@suse.com" date="1708689600">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="werner@suse.de" date="1717416000">- Update to mutt 2.2.13 (Bug fix release)
  * Fix smtp client to respect $use_envelope_from option. The code
    was only looking to see if $envelope_from_address had a value,
    not if $use_envelope_from was set.
    Add extra safety checks to make sure the mailbox value isn't NULL.
  * Fix smtp client $envelope_from_address possible dangling pointer.
    If the account-hook invoked by mutt_conn_find() modifies
    $envelope_from_address, envfrom could point no longer point to the
    address.
    Move the mutt_conn_find() before the code that determines the envelope
    from address.</changelog>
  <changelog author="werner@suse.de" date="1721044800">- Require some cyrus-sasl plugins to make the cyrus-sasl feature
  of mutt function (boo#1227731)</changelog>
  <changelog author="werner@suse.de" date="1721044801">- Remove patch aw.listreply.diff as it conflicts with builtin
  &lt;list-reply&gt; feature
- Build and install pdf doc</changelog>
  <changelog author="werner@suse.de" date="1747828800">- Update to mutt 2.2.14 (Bug fix release)
  * fixing a couple possible crashes, in GPGME and with IMAP when
    logging out
  * and correcting a small issue with unnecessary encoding of "."
    in attachment names (2231 encoding).
- Make doc info and hmtl file build without network
- Set default mail spool files</changelog>
  <changelog author="werner@suse.de" date="1754568000">- Exclude sample ca-bundle.crt as it is outdated (bsc#1246321)</changelog>
</package>
<package pkgid="09f5b029f1c145f0b87afe537a793d72eedb564f51df5f1ceee7bb364c9159e8" name="mutt-doc" arch="noarch">
  <version epoch="0" ver="2.2.14" rel="150600.3.3.1"/>
  <changelog author="werner@suse.de" date="1644235200">- For iconv glibc-locale should be installed</changelog>
  <changelog author="werner@suse.de" date="1650369600">- Update to mutt 2.2.3 (bsc#1198518 for CVE-2022-1328)
  * Fix read past end of buf in is_mmnoask().
  * Fix strlen() assigns to be of type size_t where obvious.
  * Flush iconv() in mutt_convert_string().
  * Add convert_string() size check.
  * Fix integer overflow in mutt_convert_string().
  * Fix uudecode cleanup on unexpected eof.
  * Fix uudecode buffer overflow.
  * automatic post-release commit for mutt-2.2.2
  * Protect prompt completion memcpy() calls with a NULL check.
  * Fix mutt.man formatting.
  * Fix query menu tagging behavior.
  * Fix some mailbox prompts to use mailbox history ring.
  * automatic post-release commit for mutt-2.2.1
  * Fix ambiguity in translation
  * Update the Polish translation for Mutt 2.2.0
  * Improve Turkish translations
  * Fix mutt_paddstr() to properly filter unprintable chars.
  * Change mailto_allow to be exact match only.
  * Filter headers passed via the command line.
  * Fix mbox.man asctime(3) reference.
  * Clarify description of $local_date_header
  * Don't queue IMAP close commands.
  * Update Finnish translation.
  * Updated Catalan translation.
  * Updated Russian translation.
  * Updated Ukrainian translation.
  * Fix argc==0 handling.
  * Update de.po.
  * Update Turkish translations.
  * Update Czech translation for mutt-2.2.0
  * Update translation files copyright string.
  * Updated French translation.
  * Fix $status_format documentation of $sort_thread_groups expando.
  * Update source file copyright lines based on commit history.
  * Update manual and program copyright notices.
  * Updated French translation.
  * Add very basic cd path completion.
  * Simplify the mutt_select_file() call for MUTT_CMD completion.
  * Add memcpy on MUTT_CMD completion to invoke the file selector.
  * Enable $rfc2047_parameters by default.
  * Set environ for sendmail execvp() call.
  * Updated French translation.
  * Convert SMTP cyrus sasl to use buffers.
  * Move hard_redraw() after sendmail invocation.
  * Revert "Add $reply_prefix."
  * Add config.h dependency for keymap_defs.h generation.
  * Force resort_init if $reply_regexp changes.
  * Add $reply_prefix.
  * Localize $reply_regexp.
  * Fix $reply_regexp default value.
  * Fix manual generation string_unescape() of backslash values.
  * Improve Turkish translations
  * Add pager REDRAW_FLOW redraw flag when popping a menu.
  * Merge branch 'stable'
  * Add new gsasl files to POTFILES.in.
  * Add GNU SASL support for authentication.
  * Add mutt_socket_buffer_readln().
  * Merge branch 'stable'
  * simplify envelope subject handling code a little
  * Update de.po
  * Fix sidebar counters with $maildir_trash.
  * Improve the statusbar modified flag for $maildir_trash.
  * Ignore $delete when sync'ing with $maildir_trash set.
  * Fix unused variable warning.
  * Allow an empty To: address prompt.
  * Convert COLOR_DEFAULT constant to -1.
  * [Fix] poll to use PollFdsCount and no PollFdsLen
  * Add a few mutt variable configure dependency comments.
  * Fix color object case insensitive comparisons.
  * Correct multipart/alternative manual section slightly.
  * Add internal mutt_ctime() implementation.
  * Improve pattern compiler whitespace skipping.
  * Updated French translation.
  * Remove trailing slashes when opening maildir/mh mailboxes.
  * Note that IMAP mailboxes polling doesn't support flag counts.
  * Add $attach_save_charset_convert quadoption.
  * Remove unneeded type save/restores around mutt_decode_attachment().
  * Improve smime_verify_one() error handling and general flow.
  * Assert mutt_decode_attachment() doesn't modify body fields.
  * Don't use subtraction for qsort numeric value comparisons.
  * Fix alias menu multi-select documentation.
  * Implement &lt;select-entry&gt; as &lt;display-message&gt; in index menu.
  * Use km_error_key() in index only for OP_NULL.
  * Generate URLs with user/password as parsed.
  * Ensure embedded IMAP passwords are stored in context-&gt;path.
  * Updated French translation.
  * Fix yesorno help prompt printing of choice.
  * Add $compose_confirm_detach_first, default set.
  * Add a comment about msn_seqset generation and header cache holes.
  * Use cms utility for SMIME encryption/decryption.
  * Improve conststrings.c generation, mainly for GNU Autoconf 2.71.
  * Updated French translation.
  * Merge branch 'stable'
  * Update Esperanto translation.
  * Add robustness checks to file attach functions.
  * Prompt for password when using encrypted client certificate
  * Lazily update header colors after a thread-flag update.
  * Add $sort_thread_groups for top-level thread sorting.
  * Make index sort compare functions independent from config variables.
  * Improve generic menu type handling.
  * Break the menu OPS/funcs and keybindings into separate tables.
  * Enable nonl() mode for ncurses.  closes #362.
  * Revert "Silence strfcpy() warning in dotlock_deference_symlink()."
  * Use memccpy() in the strfcpy macro if it's available.
  * Fix typo in comment and function name: deference -&gt; dereference.
  * Silence strfcpy() warning in dotlock_deference_symlink().
  * Add dprint for a backtick expansion with non-0 exit code.
  * Use SEEK_SET and SEEK_END for fseek/fseeko whence parameter.
  * Rewrite mutt_apply_replace() to use buffers.
  * Increase scratch buf size in mutt_canonical_charset().
  * Change hdrline make_from(_addr) to use snprintf for from.
  * Silence compiler warning in _mutt_buffer_select_file().
  * Use memcpy in fseek_last_message() instead of strncpy.
  * Fix mutt_sasl buffer size to hold ip_port strings.
  * Silence imap_make_date() warning by switching to a BUFFER.
  * Silence compiler "may be uninitialized" warnings.
  * Updated French translation.
  * Add a help choice '?' to the yes or no prompt for quadoptions.
  * Filter out group delimiters for encrypt keylist generation.
  * contrib/markdown2html: properly deal with lead-ins
  * contrib/markdown2html: properly deal with missing context
  * contrib/markdown: fix bug when dealing with quotelead classes
  * Exit with a failure for any usage or version write error.
  * Really fix usage and version write error checking.
  * Fix usage and version write error checking.
  * Add usage and version write error checking.
  * Check stdout is a terminal in curses mode.
  * Add a hard redraw after oauth authentication.
  * Fix classic pgp decrypt_part() hard redraw on error.
  * Reset SIGPIPE signal handler in child process before exec().
  * Add $pager_skip_quoted_context option.
  * Updated French translation.
  * Suggested translation changes.
  * Directly add full mailbox to GPG search hints.
- Port patches mainly hunk offsets
  * aw.listreply.diff
  * mutt-1.10.1-imap.patch
  * mutt-1.13.3.dif
  * mutt-1.5.15-wrapcolumn.diff
  * mutt-1.5.20-sendgroupreplyto.diff
  * mutt-1.5.21-mailcap.diff
  * mutt-1.5.23-carriage-return.path
  * mutt-1.6.1-opennfs.dif
  * mutt-Fix-SIGQUIT-handling.patch
  * patch-1.5.24.vk.pgp_verbose_mime
  * widechar.sidebar.dif</changelog>
  <changelog author="dmueller@suse.com" date="1654344000">- update to 2.2.5:
  * fixing two issues with libgsasl authentication.
  * fixing some regressions with Maildir/mh mailbox path normalization that were
    added in 2.2.0. Please see the UPDATING file for more details.</changelog>
  <changelog author="dmueller@suse.com" date="1656158400">- update to 2.2.6:
  * This is a bug-fix release, fixing a variety of small issues</changelog>
  <changelog author="dmueller@suse.com" date="1660046400">- update to 2.2.7:
  * This is a bug-fix release, fixing a $edit_headers bug on MacOS, along with
    a few other small bugs. It also tightens the $query_command parser to
    accept a single tab between fields, and changes $pager to accept a %s
    expando.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1662552000">- enable optional verbose debugging at run-time (boo#1203184)</changelog>
  <changelog author="werner@suse.de" date="1662984000">- Refresh offsets of patches
  * aw.listreply.diff
  * mutt-1.10.1-imap.patch
  * mutt-1.5.15-wrapcolumn.diff
  * mutt-1.5.20-sendgroupreplyto.diff
  * mutt-1.6.1-opennfs.dif
  * patch-1.5.24.vk.pgp_verbose_mime</changelog>
  <changelog author="dmueller@suse.com" date="1670155200">- update to 2.2.9:
  * Document the &lt;1234&gt; key syntax for bind.
  * Fix non-printable keyname printing to use &lt;octal&gt; syntax.
  * Move AM_PATH_GPG_ERROR before AM_PATH_GPGME.
  * Update gpgme autoconf files to the latest versions.
  * Adjust manual concerning IMAP Fcc in batch mode.
  * Add explicit void to 0-parameter function definitions.</changelog>
  <changelog author="dmueller@suse.com" date="1680523200">- update to 2.2.10:
  * Bug fix release.
  * $message_id_format %r and %z expandos use a URL-safe Base64 encoding:
    '-' and '_' instead of '+' and '/'.</changelog>
  <changelog author="werner@suse.de" date="1681732800">- Use astrix instead of german u umlaut as point</changelog>
  <changelog author="werner@suse.de" date="1694520000">- Update to mutt 2.2.12 (bsc#1215189 for CVE-2023-4874,
  bsc#1215191 for CVE-2023-4875)
  * 2.2.12 (2023-09-09):
    Bug fix release.
  * 2.2.11 (2023-08-18):
    Bug fix release.</changelog>
  <changelog author="werner@suse.de" date="1695816000">- Submit latest mutt 2.2.12 to SLE-15-SP6 for jira#PED-5580
  * Drop patches for boo#1172906, boo#1172935, CVE-2020-14093,
    and CVE-2020-14154 now upstream
  - 3e88866dc60b5fa6aaba6fd7c1710c12c1c3cd01.patch
    + Prevent possible IMAP MITM via PREAUTH response.
  - mutt-1.10.1-backport-mutt_ssl_gnutls-1.14.3.dif
    to port mutt_ssl_gnutls.c from mutt 1.14.3 back
    + expired certs not properly rejected with GnuTLS
    + Side effect is support of TLSv1_3 is supported by gnutls
  * Drop patch for bsc#1173197 c547433cdf2e79191b15c6932c57f1472bfb5ff4.dif
    now upstream
  - Fix CVE-2020-14954: STARTTLS buffering issue allowing man
    in the middle attack of IMAP, SMTP and POP3
  * Drop patch for bsc#1179035, CVE-2020-28896.patch now upstream
  - incomplete connection termination could lead to sending
    credentials over unencrypted connections
  * Drop patch for bsc#1179113 and boo#1179461 nofreeze-c72f740a.patch
    now upstream
  - Avoid that message with a million tiny parts can freeze MUA
    for several minutes
  * Drop patch for bsc#1181221, CVE-2021-3181 mutt-colon.patch now
    upstream
  - recipient parsing memory leak. This patch combines three
    smaller commits
  * Drop patch for bsc#1198518, CVE-2022-1328 uudecode-e5ed080c.patch
  - fix a buffer overflow in uudecoder
  * Drop patches now upstream
  - CVE-2023-4874-part1.patch (bsc#1215189 for CVE-2023-4874)
  - CVE-2023-4874-part2.patch (bsc#1215189 for CVE-2023-4874)
  - CVE-2023-4875.patch (bsc#1215191 for CVE-2023-4875)</changelog>
  <changelog author="werner@suse.de" date="1696852800">- Require a smtp daemon at build and runtime to work around
  missing system /var/mail/ directory (boo#1216035)</changelog>
  <changelog author="werner@suse.de" date="1708430400">- Only suggest smtp daemon at runtime.  Nevertheless if not
  installed user will face a a warning.
- Move /etc/Muttrc to /usr/share/mutt/Muttrc</changelog>
  <changelog author="pgajdos@suse.com" date="1708689600">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="werner@suse.de" date="1717416000">- Update to mutt 2.2.13 (Bug fix release)
  * Fix smtp client to respect $use_envelope_from option. The code
    was only looking to see if $envelope_from_address had a value,
    not if $use_envelope_from was set.
    Add extra safety checks to make sure the mailbox value isn't NULL.
  * Fix smtp client $envelope_from_address possible dangling pointer.
    If the account-hook invoked by mutt_conn_find() modifies
    $envelope_from_address, envfrom could point no longer point to the
    address.
    Move the mutt_conn_find() before the code that determines the envelope
    from address.</changelog>
  <changelog author="werner@suse.de" date="1721044800">- Require some cyrus-sasl plugins to make the cyrus-sasl feature
  of mutt function (boo#1227731)</changelog>
  <changelog author="werner@suse.de" date="1721044801">- Remove patch aw.listreply.diff as it conflicts with builtin
  &lt;list-reply&gt; feature
- Build and install pdf doc</changelog>
  <changelog author="werner@suse.de" date="1747828800">- Update to mutt 2.2.14 (Bug fix release)
  * fixing a couple possible crashes, in GPGME and with IMAP when
    logging out
  * and correcting a small issue with unnecessary encoding of "."
    in attachment names (2231 encoding).
- Make doc info and hmtl file build without network
- Set default mail spool files</changelog>
  <changelog author="werner@suse.de" date="1754568000">- Exclude sample ca-bundle.crt as it is outdated (bsc#1246321)</changelog>
</package>
<package pkgid="9b8b563c12f37d8a08b0423c3750e62a03463396ea2641d093d02926fe18b747" name="mutt-lang" arch="noarch">
  <version epoch="0" ver="2.2.14" rel="150600.3.3.1"/>
  <changelog author="werner@suse.de" date="1644235200">- For iconv glibc-locale should be installed</changelog>
  <changelog author="werner@suse.de" date="1650369600">- Update to mutt 2.2.3 (bsc#1198518 for CVE-2022-1328)
  * Fix read past end of buf in is_mmnoask().
  * Fix strlen() assigns to be of type size_t where obvious.
  * Flush iconv() in mutt_convert_string().
  * Add convert_string() size check.
  * Fix integer overflow in mutt_convert_string().
  * Fix uudecode cleanup on unexpected eof.
  * Fix uudecode buffer overflow.
  * automatic post-release commit for mutt-2.2.2
  * Protect prompt completion memcpy() calls with a NULL check.
  * Fix mutt.man formatting.
  * Fix query menu tagging behavior.
  * Fix some mailbox prompts to use mailbox history ring.
  * automatic post-release commit for mutt-2.2.1
  * Fix ambiguity in translation
  * Update the Polish translation for Mutt 2.2.0
  * Improve Turkish translations
  * Fix mutt_paddstr() to properly filter unprintable chars.
  * Change mailto_allow to be exact match only.
  * Filter headers passed via the command line.
  * Fix mbox.man asctime(3) reference.
  * Clarify description of $local_date_header
  * Don't queue IMAP close commands.
  * Update Finnish translation.
  * Updated Catalan translation.
  * Updated Russian translation.
  * Updated Ukrainian translation.
  * Fix argc==0 handling.
  * Update de.po.
  * Update Turkish translations.
  * Update Czech translation for mutt-2.2.0
  * Update translation files copyright string.
  * Updated French translation.
  * Fix $status_format documentation of $sort_thread_groups expando.
  * Update source file copyright lines based on commit history.
  * Update manual and program copyright notices.
  * Updated French translation.
  * Add very basic cd path completion.
  * Simplify the mutt_select_file() call for MUTT_CMD completion.
  * Add memcpy on MUTT_CMD completion to invoke the file selector.
  * Enable $rfc2047_parameters by default.
  * Set environ for sendmail execvp() call.
  * Updated French translation.
  * Convert SMTP cyrus sasl to use buffers.
  * Move hard_redraw() after sendmail invocation.
  * Revert "Add $reply_prefix."
  * Add config.h dependency for keymap_defs.h generation.
  * Force resort_init if $reply_regexp changes.
  * Add $reply_prefix.
  * Localize $reply_regexp.
  * Fix $reply_regexp default value.
  * Fix manual generation string_unescape() of backslash values.
  * Improve Turkish translations
  * Add pager REDRAW_FLOW redraw flag when popping a menu.
  * Merge branch 'stable'
  * Add new gsasl files to POTFILES.in.
  * Add GNU SASL support for authentication.
  * Add mutt_socket_buffer_readln().
  * Merge branch 'stable'
  * simplify envelope subject handling code a little
  * Update de.po
  * Fix sidebar counters with $maildir_trash.
  * Improve the statusbar modified flag for $maildir_trash.
  * Ignore $delete when sync'ing with $maildir_trash set.
  * Fix unused variable warning.
  * Allow an empty To: address prompt.
  * Convert COLOR_DEFAULT constant to -1.
  * [Fix] poll to use PollFdsCount and no PollFdsLen
  * Add a few mutt variable configure dependency comments.
  * Fix color object case insensitive comparisons.
  * Correct multipart/alternative manual section slightly.
  * Add internal mutt_ctime() implementation.
  * Improve pattern compiler whitespace skipping.
  * Updated French translation.
  * Remove trailing slashes when opening maildir/mh mailboxes.
  * Note that IMAP mailboxes polling doesn't support flag counts.
  * Add $attach_save_charset_convert quadoption.
  * Remove unneeded type save/restores around mutt_decode_attachment().
  * Improve smime_verify_one() error handling and general flow.
  * Assert mutt_decode_attachment() doesn't modify body fields.
  * Don't use subtraction for qsort numeric value comparisons.
  * Fix alias menu multi-select documentation.
  * Implement &lt;select-entry&gt; as &lt;display-message&gt; in index menu.
  * Use km_error_key() in index only for OP_NULL.
  * Generate URLs with user/password as parsed.
  * Ensure embedded IMAP passwords are stored in context-&gt;path.
  * Updated French translation.
  * Fix yesorno help prompt printing of choice.
  * Add $compose_confirm_detach_first, default set.
  * Add a comment about msn_seqset generation and header cache holes.
  * Use cms utility for SMIME encryption/decryption.
  * Improve conststrings.c generation, mainly for GNU Autoconf 2.71.
  * Updated French translation.
  * Merge branch 'stable'
  * Update Esperanto translation.
  * Add robustness checks to file attach functions.
  * Prompt for password when using encrypted client certificate
  * Lazily update header colors after a thread-flag update.
  * Add $sort_thread_groups for top-level thread sorting.
  * Make index sort compare functions independent from config variables.
  * Improve generic menu type handling.
  * Break the menu OPS/funcs and keybindings into separate tables.
  * Enable nonl() mode for ncurses.  closes #362.
  * Revert "Silence strfcpy() warning in dotlock_deference_symlink()."
  * Use memccpy() in the strfcpy macro if it's available.
  * Fix typo in comment and function name: deference -&gt; dereference.
  * Silence strfcpy() warning in dotlock_deference_symlink().
  * Add dprint for a backtick expansion with non-0 exit code.
  * Use SEEK_SET and SEEK_END for fseek/fseeko whence parameter.
  * Rewrite mutt_apply_replace() to use buffers.
  * Increase scratch buf size in mutt_canonical_charset().
  * Change hdrline make_from(_addr) to use snprintf for from.
  * Silence compiler warning in _mutt_buffer_select_file().
  * Use memcpy in fseek_last_message() instead of strncpy.
  * Fix mutt_sasl buffer size to hold ip_port strings.
  * Silence imap_make_date() warning by switching to a BUFFER.
  * Silence compiler "may be uninitialized" warnings.
  * Updated French translation.
  * Add a help choice '?' to the yes or no prompt for quadoptions.
  * Filter out group delimiters for encrypt keylist generation.
  * contrib/markdown2html: properly deal with lead-ins
  * contrib/markdown2html: properly deal with missing context
  * contrib/markdown: fix bug when dealing with quotelead classes
  * Exit with a failure for any usage or version write error.
  * Really fix usage and version write error checking.
  * Fix usage and version write error checking.
  * Add usage and version write error checking.
  * Check stdout is a terminal in curses mode.
  * Add a hard redraw after oauth authentication.
  * Fix classic pgp decrypt_part() hard redraw on error.
  * Reset SIGPIPE signal handler in child process before exec().
  * Add $pager_skip_quoted_context option.
  * Updated French translation.
  * Suggested translation changes.
  * Directly add full mailbox to GPG search hints.
- Port patches mainly hunk offsets
  * aw.listreply.diff
  * mutt-1.10.1-imap.patch
  * mutt-1.13.3.dif
  * mutt-1.5.15-wrapcolumn.diff
  * mutt-1.5.20-sendgroupreplyto.diff
  * mutt-1.5.21-mailcap.diff
  * mutt-1.5.23-carriage-return.path
  * mutt-1.6.1-opennfs.dif
  * mutt-Fix-SIGQUIT-handling.patch
  * patch-1.5.24.vk.pgp_verbose_mime
  * widechar.sidebar.dif</changelog>
  <changelog author="dmueller@suse.com" date="1654344000">- update to 2.2.5:
  * fixing two issues with libgsasl authentication.
  * fixing some regressions with Maildir/mh mailbox path normalization that were
    added in 2.2.0. Please see the UPDATING file for more details.</changelog>
  <changelog author="dmueller@suse.com" date="1656158400">- update to 2.2.6:
  * This is a bug-fix release, fixing a variety of small issues</changelog>
  <changelog author="dmueller@suse.com" date="1660046400">- update to 2.2.7:
  * This is a bug-fix release, fixing a $edit_headers bug on MacOS, along with
    a few other small bugs. It also tightens the $query_command parser to
    accept a single tab between fields, and changes $pager to accept a %s
    expando.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1662552000">- enable optional verbose debugging at run-time (boo#1203184)</changelog>
  <changelog author="werner@suse.de" date="1662984000">- Refresh offsets of patches
  * aw.listreply.diff
  * mutt-1.10.1-imap.patch
  * mutt-1.5.15-wrapcolumn.diff
  * mutt-1.5.20-sendgroupreplyto.diff
  * mutt-1.6.1-opennfs.dif
  * patch-1.5.24.vk.pgp_verbose_mime</changelog>
  <changelog author="dmueller@suse.com" date="1670155200">- update to 2.2.9:
  * Document the &lt;1234&gt; key syntax for bind.
  * Fix non-printable keyname printing to use &lt;octal&gt; syntax.
  * Move AM_PATH_GPG_ERROR before AM_PATH_GPGME.
  * Update gpgme autoconf files to the latest versions.
  * Adjust manual concerning IMAP Fcc in batch mode.
  * Add explicit void to 0-parameter function definitions.</changelog>
  <changelog author="dmueller@suse.com" date="1680523200">- update to 2.2.10:
  * Bug fix release.
  * $message_id_format %r and %z expandos use a URL-safe Base64 encoding:
    '-' and '_' instead of '+' and '/'.</changelog>
  <changelog author="werner@suse.de" date="1681732800">- Use astrix instead of german u umlaut as point</changelog>
  <changelog author="werner@suse.de" date="1694520000">- Update to mutt 2.2.12 (bsc#1215189 for CVE-2023-4874,
  bsc#1215191 for CVE-2023-4875)
  * 2.2.12 (2023-09-09):
    Bug fix release.
  * 2.2.11 (2023-08-18):
    Bug fix release.</changelog>
  <changelog author="werner@suse.de" date="1695816000">- Submit latest mutt 2.2.12 to SLE-15-SP6 for jira#PED-5580
  * Drop patches for boo#1172906, boo#1172935, CVE-2020-14093,
    and CVE-2020-14154 now upstream
  - 3e88866dc60b5fa6aaba6fd7c1710c12c1c3cd01.patch
    + Prevent possible IMAP MITM via PREAUTH response.
  - mutt-1.10.1-backport-mutt_ssl_gnutls-1.14.3.dif
    to port mutt_ssl_gnutls.c from mutt 1.14.3 back
    + expired certs not properly rejected with GnuTLS
    + Side effect is support of TLSv1_3 is supported by gnutls
  * Drop patch for bsc#1173197 c547433cdf2e79191b15c6932c57f1472bfb5ff4.dif
    now upstream
  - Fix CVE-2020-14954: STARTTLS buffering issue allowing man
    in the middle attack of IMAP, SMTP and POP3
  * Drop patch for bsc#1179035, CVE-2020-28896.patch now upstream
  - incomplete connection termination could lead to sending
    credentials over unencrypted connections
  * Drop patch for bsc#1179113 and boo#1179461 nofreeze-c72f740a.patch
    now upstream
  - Avoid that message with a million tiny parts can freeze MUA
    for several minutes
  * Drop patch for bsc#1181221, CVE-2021-3181 mutt-colon.patch now
    upstream
  - recipient parsing memory leak. This patch combines three
    smaller commits
  * Drop patch for bsc#1198518, CVE-2022-1328 uudecode-e5ed080c.patch
  - fix a buffer overflow in uudecoder
  * Drop patches now upstream
  - CVE-2023-4874-part1.patch (bsc#1215189 for CVE-2023-4874)
  - CVE-2023-4874-part2.patch (bsc#1215189 for CVE-2023-4874)
  - CVE-2023-4875.patch (bsc#1215191 for CVE-2023-4875)</changelog>
  <changelog author="werner@suse.de" date="1696852800">- Require a smtp daemon at build and runtime to work around
  missing system /var/mail/ directory (boo#1216035)</changelog>
  <changelog author="werner@suse.de" date="1708430400">- Only suggest smtp daemon at runtime.  Nevertheless if not
  installed user will face a a warning.
- Move /etc/Muttrc to /usr/share/mutt/Muttrc</changelog>
  <changelog author="pgajdos@suse.com" date="1708689600">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="werner@suse.de" date="1717416000">- Update to mutt 2.2.13 (Bug fix release)
  * Fix smtp client to respect $use_envelope_from option. The code
    was only looking to see if $envelope_from_address had a value,
    not if $use_envelope_from was set.
    Add extra safety checks to make sure the mailbox value isn't NULL.
  * Fix smtp client $envelope_from_address possible dangling pointer.
    If the account-hook invoked by mutt_conn_find() modifies
    $envelope_from_address, envfrom could point no longer point to the
    address.
    Move the mutt_conn_find() before the code that determines the envelope
    from address.</changelog>
  <changelog author="werner@suse.de" date="1721044800">- Require some cyrus-sasl plugins to make the cyrus-sasl feature
  of mutt function (boo#1227731)</changelog>
  <changelog author="werner@suse.de" date="1721044801">- Remove patch aw.listreply.diff as it conflicts with builtin
  &lt;list-reply&gt; feature
- Build and install pdf doc</changelog>
  <changelog author="werner@suse.de" date="1747828800">- Update to mutt 2.2.14 (Bug fix release)
  * fixing a couple possible crashes, in GPGME and with IMAP when
    logging out
  * and correcting a small issue with unnecessary encoding of "."
    in attachment names (2231 encoding).
- Make doc info and hmtl file build without network
- Set default mail spool files</changelog>
  <changelog author="werner@suse.de" date="1754568000">- Exclude sample ca-bundle.crt as it is outdated (bsc#1246321)</changelog>
</package>
<package pkgid="c1c227f47317627ca6832f3bf5d5a51f7efbb86670edacf862df2a8f565a81e1" name="ncurses" arch="src">
  <version epoch="0" ver="6.1" rel="150000.5.30.1"/>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()
    (bsc#1218014)</changelog>
  <changelog author="werner@suse.de" date="1708344000">- Add patch ncurses-6.1-bsc1220061.patch (bsc#1220061, CVE-2023-45918)
  * Backport from ncurses-6.4-20230615.patch
    improve checks in convert_string() for corrupt terminfo entry</changelog>
  <changelog author="werner@suse.de" date="1725969600">- Add patch ncurses-6.1-boo1229028.patch (boo#1229028)
  * Allow that terminal description based on static fallback
    entries can be freed.</changelog>
  <changelog author="werner@suse.de" date="1744200000">- Modify patch ncurses-5.9-ibm327x.dif
  * Backport sclp terminfo description entry if for s390 sclp terminal lines
  * Add a further sclp entry for qemu s390 based systems
  * Make use of dumb</changelog>
</package>
<package pkgid="57ccce5b11e773ec9a514a3b08b97a73f901ea073a35b47f31b53bab42ff2765" name="ncurses" arch="src">
  <version epoch="0" ver="6.1" rel="150000.5.33.1"/>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()
    (bsc#1218014)</changelog>
  <changelog author="werner@suse.de" date="1708344000">- Add patch ncurses-6.1-bsc1220061.patch (bsc#1220061, CVE-2023-45918)
  * Backport from ncurses-6.4-20230615.patch
    improve checks in convert_string() for corrupt terminfo entry</changelog>
  <changelog author="werner@suse.de" date="1725969600">- Add patch ncurses-6.1-boo1229028.patch (boo#1229028)
  * Allow that terminal description based on static fallback
    entries can be freed.</changelog>
  <changelog author="werner@suse.de" date="1744200000">- Modify patch ncurses-5.9-ibm327x.dif
  * Backport sclp terminfo description entry if for s390 sclp terminal lines
  * Add a further sclp entry for qemu s390 based systems
  * Make use of dumb</changelog>
  <changelog author="werner@suse.de" date="1776340800">- Add patch fix-bsc1259924.patch (bsc#1259924, CVE-2025-69720)
  * Backport from ncurses-6.5-20251213.patch</changelog>
</package>
<package pkgid="79b47834ca261101d3b5370c34a48639f208f7bb1fdc84a4654e014ddb3ef7fd" name="ncurses-devel" arch="x86_64">
  <version epoch="0" ver="6.1" rel="150000.5.30.1"/>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()
    (bsc#1218014)</changelog>
  <changelog author="werner@suse.de" date="1708344000">- Add patch ncurses-6.1-bsc1220061.patch (bsc#1220061, CVE-2023-45918)
  * Backport from ncurses-6.4-20230615.patch
    improve checks in convert_string() for corrupt terminfo entry</changelog>
  <changelog author="werner@suse.de" date="1725969600">- Add patch ncurses-6.1-boo1229028.patch (boo#1229028)
  * Allow that terminal description based on static fallback
    entries can be freed.</changelog>
  <changelog author="werner@suse.de" date="1744200000">- Modify patch ncurses-5.9-ibm327x.dif
  * Backport sclp terminfo description entry if for s390 sclp terminal lines
  * Add a further sclp entry for qemu s390 based systems
  * Make use of dumb</changelog>
</package>
<package pkgid="96dc95525537fafb2db1ed204f8bea4e5bf82f7e20cffed0ecdae12472f6ab23" name="ncurses-devel" arch="x86_64">
  <version epoch="0" ver="6.1" rel="150000.5.33.1"/>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()
    (bsc#1218014)</changelog>
  <changelog author="werner@suse.de" date="1708344000">- Add patch ncurses-6.1-bsc1220061.patch (bsc#1220061, CVE-2023-45918)
  * Backport from ncurses-6.4-20230615.patch
    improve checks in convert_string() for corrupt terminfo entry</changelog>
  <changelog author="werner@suse.de" date="1725969600">- Add patch ncurses-6.1-boo1229028.patch (boo#1229028)
  * Allow that terminal description based on static fallback
    entries can be freed.</changelog>
  <changelog author="werner@suse.de" date="1744200000">- Modify patch ncurses-5.9-ibm327x.dif
  * Backport sclp terminfo description entry if for s390 sclp terminal lines
  * Add a further sclp entry for qemu s390 based systems
  * Make use of dumb</changelog>
  <changelog author="werner@suse.de" date="1776340800">- Add patch fix-bsc1259924.patch (bsc#1259924, CVE-2025-69720)
  * Backport from ncurses-6.5-20251213.patch</changelog>
</package>
<package pkgid="e409fdc3388f168ac27a11b8ca48fb67049ab27117e3e3f19fa3878055f00533" name="ncurses-utils" arch="x86_64">
  <version epoch="0" ver="6.1" rel="150000.5.30.1"/>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()
    (bsc#1218014)</changelog>
  <changelog author="werner@suse.de" date="1708344000">- Add patch ncurses-6.1-bsc1220061.patch (bsc#1220061, CVE-2023-45918)
  * Backport from ncurses-6.4-20230615.patch
    improve checks in convert_string() for corrupt terminfo entry</changelog>
  <changelog author="werner@suse.de" date="1725969600">- Add patch ncurses-6.1-boo1229028.patch (boo#1229028)
  * Allow that terminal description based on static fallback
    entries can be freed.</changelog>
  <changelog author="werner@suse.de" date="1744200000">- Modify patch ncurses-5.9-ibm327x.dif
  * Backport sclp terminfo description entry if for s390 sclp terminal lines
  * Add a further sclp entry for qemu s390 based systems
  * Make use of dumb</changelog>
</package>
<package pkgid="6055832db94631cd21319f98b951077f564af11e88ee93edb2c3ea523839dfb7" name="ncurses-utils" arch="x86_64">
  <version epoch="0" ver="6.1" rel="150000.5.33.1"/>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()
    (bsc#1218014)</changelog>
  <changelog author="werner@suse.de" date="1708344000">- Add patch ncurses-6.1-bsc1220061.patch (bsc#1220061, CVE-2023-45918)
  * Backport from ncurses-6.4-20230615.patch
    improve checks in convert_string() for corrupt terminfo entry</changelog>
  <changelog author="werner@suse.de" date="1725969600">- Add patch ncurses-6.1-boo1229028.patch (boo#1229028)
  * Allow that terminal description based on static fallback
    entries can be freed.</changelog>
  <changelog author="werner@suse.de" date="1744200000">- Modify patch ncurses-5.9-ibm327x.dif
  * Backport sclp terminfo description entry if for s390 sclp terminal lines
  * Add a further sclp entry for qemu s390 based systems
  * Make use of dumb</changelog>
  <changelog author="werner@suse.de" date="1776340800">- Add patch fix-bsc1259924.patch (bsc#1259924, CVE-2025-69720)
  * Backport from ncurses-6.5-20251213.patch</changelog>
</package>
<package pkgid="3f65c43253fef86bf3c82d5b22752d4d2d81731d6cd7194523eb8ff4bc21949b" name="net-snmp" arch="src">
  <version epoch="0" ver="5.7.3" rel="150100.10.15.1"/>
  <changelog author="dimstar@opensuse.org" date="1463832000">- Fix build with perl 5.24.0:
  + Add net-snmp-5.7.3-Fix-Makefile.PL.patch: Fix build system
    recursiely loading Makefile.Pl and destroying its internas.
    See https://rt.perl.org/Public/Bug/Display.html?id=125907
  + net-snmp-5.7.3-Remove-U64-typedef.patch: The U64 typedef
    conflicts with a typedef in a Perl header file. Hence remove
    the U64 typedef from the Net-SNMP header files. Backported from
    upstream commit 477b4307ef1.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497355200">- Fix build with OpenSSL 1.1 (bsc#1042664):
  + Add net-snmp-5.7.3-build-with-openssl-1.1.patch, cumulated
    squash-patch from the following upstream commits:
    bbed6b86e70b5a3c54f14992696f2308a8d79511
    14bb72fd12bf5b68662893f7d8afbc4a8d52a6c8
    9641b472ef01208f92631016e91b0a4a518163f0
    e4c6937483d4a680570cec05388d2e4b291868a6
    b906c60c8a436d7360267a6d242526b33a9aaac8</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Add net-snmp-5.7.3-modern-rpm-api.patch: Supprt modern RPM (&gt;=
  4.6) API. In RPM 4.14, the RPM 4.4 compatibility APIs are being
  removed.</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Format with spec-cleaner
- Drop sle11 support as it fails to build anyway for ages
- Rename python packages to be python-%{name} with obsoletes
  * Use new singlespec macros
  * Add patch converting the py files to python3/2 compat mode
    net-snmp-python3.patch
- Run full autoreconf instead of partial
- Build with threads by building few targets first</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Take systemd service files from fedora to replace sysV scripts
- Also convert the sysconfig files to match fedora ones, they
  get bit more terse but it works seamlessly with systemd</changelog>
  <changelog author="tchvatal@suse.com" date="1516795200">- Add patch from Fedora to support natively systemd:
  * net-snmp-5.7.2-systemd.patch
- Drop the check phase as whole 90% of the tests fail it makes
  more sense to run them somewhere localy</changelog>
  <changelog author="tchvatal@suse.com" date="1516795201">- Properly conditionalize the py2 build</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Fix RPM group for shlib subpackage.</changelog>
  <changelog author="abergmann@suse.com" date="1523880000">- Remove executable flags from systemd service files (bsc#1089295).</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Fix permissions on unit files wrt bsc#1087977
- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1529323200">- Create /var/agentx via systemd tmpfiles in case of rollback,
  snapshots and transactional updates [bsc#1098032]</changelog>
  <changelog author="abergmann@suse.com" date="1539086400">- Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065)
  Add net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
- swintst_rpm: Protect against unspecified Group name (bsc#1102775)
  Add net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
- Add tsm and tlstm MIBs and the USM security module. (bsc#1081164)
- Fix agentx freezing on timeout (bsc#1027353)
  Add net-snmp-fix-agentx-freezing-on-timeout.patch</changelog>
  <changelog author="abergmann@suse.com" date="1562328000">- Add Lustre filesystem support (bsc#1140341, jsc#SLE-6120).
  Add net-snmp-5.7.3-add-lustre-fs-support.patch
- Add info about the original agent which triggered the trap.
  When the trap is forwarded there was no info about the original
  agent (bsc#1116807).
  Add net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
- Fix missing sysconfig files creation (bsc#1108471).</changelog>
  <changelog author="abergmann@suse.com" date="1639742400">- Make extended MIB read-only (bsc#1174961, CVE-2020-15862).
  Add net-snmp-5.7.3-make-extended-mib-read-only.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640001600">- Fix output for high memTotalReal RAM values (bsc#1152968).
  Add net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640174400">- Fix hrStorage autofs objects timeout problems (bsc#1179699, bsc#1145864).
  Add net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  Add net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
- Fix NSS mounted volumes in hrStorageDescr (bsc#1100146).
  Add net-snmp-5.7.3-recognize-nss-pools-and-nss-volumes-oes.patch
- Fix subagent crash at save_set_var() (bsc#1178021).
  Add net-snmp-5.7.3-subagent-set-response.patch
- Fix subagent data corruption (bsc#1178351, bsc#1179009).
  Add net-snmp-5.7.3-fix-subagent-data-corruption.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640260800">- Fix LFH violation during v3 user creation (bsc#1181591).
  Add net-snmp-5.7.3-fix-create-v3-user-outfile.patch</changelog>
  <changelog author="abergmann@suse.com" date="1646827200">- Decouple snmp-mibs from net-snmp version to allow major version
  upgrade (bsc#1196955).</changelog>
  <changelog author="abergmann@suse.com" date="1767960000">- Fix snmptrapd buffer overflow (bsc#1255491, CVE-2025-68615).
  Add net-snmp-5.7.3-fix-out-of-bounds-trapOid-access.patch</changelog>
</package>
<package pkgid="8e6777d5273c1ddcf6d9ca285ff1e0f17fe647302494f97c0a5f9d1258878f95" name="net-snmp" arch="src">
  <version epoch="0" ver="5.9.4" rel="150600.24.10.1"/>
  <changelog author="tchvatal@suse.com" date="1516622400">- Take systemd service files from fedora to replace sysV scripts
- Also convert the sysconfig files to match fedora ones, they
  get bit more terse but it works seamlessly with systemd</changelog>
  <changelog author="tchvatal@suse.com" date="1516795200">- Add patch from Fedora to support natively systemd:
  * net-snmp-5.7.2-systemd.patch
- Drop the check phase as whole 90% of the tests fail it makes
  more sense to run them somewhere localy</changelog>
  <changelog author="tchvatal@suse.com" date="1516795201">- Properly conditionalize the py2 build</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Fix RPM group for shlib subpackage.</changelog>
  <changelog author="abergmann@suse.com" date="1523880000">- Remove executable flags from systemd service files (bsc#1089295).</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Fix permissions on unit files wrt bsc#1087977
- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1529323200">- Create /var/agentx via systemd tmpfiles in case of rollback,
  snapshots and transactional updates [bsc#1098032]</changelog>
  <changelog author="abergmann@suse.com" date="1539086400">- Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065)
  Add net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
- swintst_rpm: Protect against unspecified Group name (bsc#1102775)
  Add net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
- Add tsm and tlstm MIBs and the USM security module. (bsc#1081164)
- Fix agentx freezing on timeout (bsc#1027353)
  Add net-snmp-fix-agentx-freezing-on-timeout.patch</changelog>
  <changelog author="abergmann@suse.com" date="1562328000">- Add Lustre filesystem support (bsc#1140341, jsc#SLE-6120).
  Add net-snmp-5.7.3-add-lustre-fs-support.patch
- Add info about the original agent which triggered the trap.
  When the trap is forwarded there was no info about the original
  agent (bsc#1116807).
  Add net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
- Fix missing sysconfig files creation (bsc#1108471).</changelog>
  <changelog author="abergmann@suse.com" date="1639742400">- Make extended MIB read-only (bsc#1174961, CVE-2020-15862).
  Add net-snmp-5.7.3-make-extended-mib-read-only.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640001600">- Fix output for high memTotalReal RAM values (bsc#1152968).
  Add net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640174400">- Fix hrStorage autofs objects timeout problems (bsc#1179699, bsc#1145864).
  Add net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  Add net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
- Fix NSS mounted volumes in hrStorageDescr (bsc#1100146).
  Add net-snmp-5.7.3-recognize-nss-pools-and-nss-volumes-oes.patch
- Fix subagent crash at save_set_var() (bsc#1178021).
  Add net-snmp-5.7.3-subagent-set-response.patch
- Fix subagent data corruption (bsc#1178351, bsc#1179009).
  Add net-snmp-5.7.3-fix-subagent-data-corruption.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640260800">- Fix LFH violation during v3 user creation (bsc#1181591).
  Add net-snmp-5.7.3-fix-create-v3-user-outfile.patch</changelog>
  <changelog author="abergmann@suse.com" date="1646827200">- Decouple snmp-mibs from net-snmp version to allow major version
  upgrade (bsc#1196955).</changelog>
  <changelog author="abergmann@suse.com" date="1665057600">- update to 5.9.3 (bsc#1201103, jsc#SLE-11203):
  - security:
  - These two CVEs can be exploited by a user with read-only credentials:
  - CVE-2022-24805 A buffer overflow in the handling of the INDEX of
    NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
  - CVE-2022-24809 A malformed OID in a GET-NEXT to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - These CVEs can be exploited by a user with read-write credentials:
  - CVE-2022-24806 Improper Input Validation when SETing malformed
    OIDs in master agent and subagent simultaneously
  - CVE-2022-24807 A malformed OID in a SET request to
    SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an
    out-of-bounds memory access.
  - CVE-2022-24808 A malformed OID in a SET request to
    NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
  - CVE-2022-24810 A malformed OID in a SET to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - Fixed library versioning bug found in 5.9.2.
  - Library version change to libsnmp40.
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Fixed python2 backward compability.
  add:
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Change to use systemd service files directly from net-snmp package.
  add:
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch
  remove:
  * snmpd.service
  * snmptrapd.service
  * harden_snmpd.service.patch
  * harden_snmptrapd.service.patch
- Refactor and remove obsolete patches to work with version number 5.9.3:
  add:
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  remove:
  * net-snmp-5.9.1-pie.patch
  * net-snmp-5.9.1-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-add-lustre-fs-support.patch
  * net-snmp-5.7.3-Fix-Makefile.PL.patch
  * net-snmp-5.7.3-modern-rpm-api.patch
  * net-snmp-5.7.3-net-snmp-config-headercheck.patch
  * net-snmp-5.7.3-perl-tk-warning.patch
  * net-snmp-5.7.3-snmpstatus-suppress-output.patch
  * net-snmp-5.7.3-socket-path.patch
  * net-snmp-5.7.3-subagent-set-response.patch
  * net-snmp-5.7.3-testing-empty-arptable.patch
  * net-snmp-5.7.3-velocity-mib.patch
  * net-snmp-5.7.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-pie.patch
  * net-snmp-4.7.2-systemd.patch
  * net-snmp-5.7.3-build-with-openssl-1.1.patch
  * net-snmp-5.7.3-fix-agentx-freezing-on-timeout.patch
  * net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
  * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch
  * net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch
  * net-snmp-5.7.3-fix-subagent-data-corruption.patch
  * net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
  * net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  * net-snmp-5.7.3-make-extended-mib-read-only.patch
  * net-snmp-5.7.3-netgroups.patch
  * net-snmp-5.7.3-Remove-U64-typedef.patch
  * net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
  * net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
  * net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch
  * net-snmp-python3.patch</changelog>
  <changelog author="abergmann@suse.com" date="1672920000">- Fixed NULL pointer exception issue when handling ipDefaultTTL or
  pv6IpForwarding (bsc#1205148, CVE-2022-44793, bsc#1205150, CVE-2022-44792).
  add:
  * net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch
- Enable AES-192 and AES-256 privacy protocol (bsc#1206828).</changelog>
  <changelog author="abergmann@suse.com" date="1673265600">- Hardening systemd services setting "ProtectHome=true" caused home directory
  size and allocation to be listed incorrectly (bsc#1206044).
  add:
  * net-snmp-5.9.3-harden_snmpd.service.patch
  * net-snmp-5.9.3-harden_snmptrapd.service.patch
  delete:
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch</changelog>
  <changelog author="abergmann@suse.com" date="1697544000">- Update to net-snmp-5.9.4 (bsc#1214364).
  add (rename):
  * net-snmp-5.9.4-add-lustre-fs-support.patch
  * net-snmp-5.9.4-add-netgroups-functionality.patch
  * net-snmp-5.9.4-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.4-fixed-python2-bindings.patch
  * net-snmp-5.9.4-fix-Makefile.PL.patch
  * net-snmp-5.9.4-modern-rpm-api.patch
  * net-snmp-5.9.4-net-snmp-config-headercheck.patch
  * net-snmp-5.9.4-perl-tk-warning.patch
  * net-snmp-5.9.4-pie.patch
  * net-snmp-5.9.4-snmpstatus-suppress-output.patch
  * net-snmp-5.9.4-socket-path.patch
  * net-snmp-5.9.4-subagent-set-response.patch
  * net-snmp-5.9.4-suse-systemd-service-files.patch
  * net-snmp-5.9.4-testing-empty-arptable.patch
  delete (now part of v5.9.4):
  * net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch
  delete (rename):
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Removing legacy MIBs used by Velocity Software (jira#PED-6416).
- Re-add support for hostname netgroups that was removed accidentally and
  previously added with FATE#316305 (bsc#1207697).
  '@hostgroup' can be specified for multiple hosts
- Hardening systemd services setting "ProtectHome=true" caused home directory
  size and allocation to be listed incorrectly (bsc#1206044).
  add (rename):
  * net-snmp-5.9.4-harden_snmpd.service.patch
  * net-snmp-5.9.4-harden_snmptrapd.service.patch
  delete (rename):
  * net-snmp-5.9.3-harden_snmpd.service.patch
  * net-snmp-5.9.3-harden_snmptrapd.service.patch</changelog>
  <changelog author="tabraham@suse.com" date="1731326400">- logrotate should use reload instead of restart (bsc#1232030)</changelog>
  <changelog author="abergmann@suse.com" date="1768219200">- Fix snmptrapd buffer overflow (bsc#1255491, CVE-2025-68615).
  Add net-snmp-5.9.4-fix-out-of-bounds-trapOid-access.patch</changelog>
</package>
<package pkgid="4650c6abece2ab23cafeb0c95662b58ccc3f89efc529a7154fdc0eb91a5ced16" name="net-snmp" arch="x86_64">
  <version epoch="0" ver="5.9.4" rel="150600.24.10.1"/>
  <changelog author="tchvatal@suse.com" date="1516622400">- Take systemd service files from fedora to replace sysV scripts
- Also convert the sysconfig files to match fedora ones, they
  get bit more terse but it works seamlessly with systemd</changelog>
  <changelog author="tchvatal@suse.com" date="1516795200">- Add patch from Fedora to support natively systemd:
  * net-snmp-5.7.2-systemd.patch
- Drop the check phase as whole 90% of the tests fail it makes
  more sense to run them somewhere localy</changelog>
  <changelog author="tchvatal@suse.com" date="1516795201">- Properly conditionalize the py2 build</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Fix RPM group for shlib subpackage.</changelog>
  <changelog author="abergmann@suse.com" date="1523880000">- Remove executable flags from systemd service files (bsc#1089295).</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Fix permissions on unit files wrt bsc#1087977
- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1529323200">- Create /var/agentx via systemd tmpfiles in case of rollback,
  snapshots and transactional updates [bsc#1098032]</changelog>
  <changelog author="abergmann@suse.com" date="1539086400">- Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065)
  Add net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
- swintst_rpm: Protect against unspecified Group name (bsc#1102775)
  Add net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
- Add tsm and tlstm MIBs and the USM security module. (bsc#1081164)
- Fix agentx freezing on timeout (bsc#1027353)
  Add net-snmp-fix-agentx-freezing-on-timeout.patch</changelog>
  <changelog author="abergmann@suse.com" date="1562328000">- Add Lustre filesystem support (bsc#1140341, jsc#SLE-6120).
  Add net-snmp-5.7.3-add-lustre-fs-support.patch
- Add info about the original agent which triggered the trap.
  When the trap is forwarded there was no info about the original
  agent (bsc#1116807).
  Add net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
- Fix missing sysconfig files creation (bsc#1108471).</changelog>
  <changelog author="abergmann@suse.com" date="1639742400">- Make extended MIB read-only (bsc#1174961, CVE-2020-15862).
  Add net-snmp-5.7.3-make-extended-mib-read-only.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640001600">- Fix output for high memTotalReal RAM values (bsc#1152968).
  Add net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640174400">- Fix hrStorage autofs objects timeout problems (bsc#1179699, bsc#1145864).
  Add net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  Add net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
- Fix NSS mounted volumes in hrStorageDescr (bsc#1100146).
  Add net-snmp-5.7.3-recognize-nss-pools-and-nss-volumes-oes.patch
- Fix subagent crash at save_set_var() (bsc#1178021).
  Add net-snmp-5.7.3-subagent-set-response.patch
- Fix subagent data corruption (bsc#1178351, bsc#1179009).
  Add net-snmp-5.7.3-fix-subagent-data-corruption.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640260800">- Fix LFH violation during v3 user creation (bsc#1181591).
  Add net-snmp-5.7.3-fix-create-v3-user-outfile.patch</changelog>
  <changelog author="abergmann@suse.com" date="1646827200">- Decouple snmp-mibs from net-snmp version to allow major version
  upgrade (bsc#1196955).</changelog>
  <changelog author="abergmann@suse.com" date="1665057600">- update to 5.9.3 (bsc#1201103, jsc#SLE-11203):
  - security:
  - These two CVEs can be exploited by a user with read-only credentials:
  - CVE-2022-24805 A buffer overflow in the handling of the INDEX of
    NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
  - CVE-2022-24809 A malformed OID in a GET-NEXT to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - These CVEs can be exploited by a user with read-write credentials:
  - CVE-2022-24806 Improper Input Validation when SETing malformed
    OIDs in master agent and subagent simultaneously
  - CVE-2022-24807 A malformed OID in a SET request to
    SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an
    out-of-bounds memory access.
  - CVE-2022-24808 A malformed OID in a SET request to
    NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
  - CVE-2022-24810 A malformed OID in a SET to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - Fixed library versioning bug found in 5.9.2.
  - Library version change to libsnmp40.
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Fixed python2 backward compability.
  add:
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Change to use systemd service files directly from net-snmp package.
  add:
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch
  remove:
  * snmpd.service
  * snmptrapd.service
  * harden_snmpd.service.patch
  * harden_snmptrapd.service.patch
- Refactor and remove obsolete patches to work with version number 5.9.3:
  add:
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  remove:
  * net-snmp-5.9.1-pie.patch
  * net-snmp-5.9.1-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-add-lustre-fs-support.patch
  * net-snmp-5.7.3-Fix-Makefile.PL.patch
  * net-snmp-5.7.3-modern-rpm-api.patch
  * net-snmp-5.7.3-net-snmp-config-headercheck.patch
  * net-snmp-5.7.3-perl-tk-warning.patch
  * net-snmp-5.7.3-snmpstatus-suppress-output.patch
  * net-snmp-5.7.3-socket-path.patch
  * net-snmp-5.7.3-subagent-set-response.patch
  * net-snmp-5.7.3-testing-empty-arptable.patch
  * net-snmp-5.7.3-velocity-mib.patch
  * net-snmp-5.7.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-pie.patch
  * net-snmp-4.7.2-systemd.patch
  * net-snmp-5.7.3-build-with-openssl-1.1.patch
  * net-snmp-5.7.3-fix-agentx-freezing-on-timeout.patch
  * net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
  * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch
  * net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch
  * net-snmp-5.7.3-fix-subagent-data-corruption.patch
  * net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
  * net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  * net-snmp-5.7.3-make-extended-mib-read-only.patch
  * net-snmp-5.7.3-netgroups.patch
  * net-snmp-5.7.3-Remove-U64-typedef.patch
  * net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
  * net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
  * net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch
  * net-snmp-python3.patch</changelog>
  <changelog author="abergmann@suse.com" date="1672920000">- Fixed NULL pointer exception issue when handling ipDefaultTTL or
  pv6IpForwarding (bsc#1205148, CVE-2022-44793, bsc#1205150, CVE-2022-44792).
  add:
  * net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch
- Enable AES-192 and AES-256 privacy protocol (bsc#1206828).</changelog>
  <changelog author="abergmann@suse.com" date="1673265600">- Hardening systemd services setting "ProtectHome=true" caused home directory
  size and allocation to be listed incorrectly (bsc#1206044).
  add:
  * net-snmp-5.9.3-harden_snmpd.service.patch
  * net-snmp-5.9.3-harden_snmptrapd.service.patch
  delete:
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch</changelog>
  <changelog author="abergmann@suse.com" date="1697544000">- Update to net-snmp-5.9.4 (bsc#1214364).
  add (rename):
  * net-snmp-5.9.4-add-lustre-fs-support.patch
  * net-snmp-5.9.4-add-netgroups-functionality.patch
  * net-snmp-5.9.4-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.4-fixed-python2-bindings.patch
  * net-snmp-5.9.4-fix-Makefile.PL.patch
  * net-snmp-5.9.4-modern-rpm-api.patch
  * net-snmp-5.9.4-net-snmp-config-headercheck.patch
  * net-snmp-5.9.4-perl-tk-warning.patch
  * net-snmp-5.9.4-pie.patch
  * net-snmp-5.9.4-snmpstatus-suppress-output.patch
  * net-snmp-5.9.4-socket-path.patch
  * net-snmp-5.9.4-subagent-set-response.patch
  * net-snmp-5.9.4-suse-systemd-service-files.patch
  * net-snmp-5.9.4-testing-empty-arptable.patch
  delete (now part of v5.9.4):
  * net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch
  delete (rename):
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Removing legacy MIBs used by Velocity Software (jira#PED-6416).
- Re-add support for hostname netgroups that was removed accidentally and
  previously added with FATE#316305 (bsc#1207697).
  '@hostgroup' can be specified for multiple hosts
- Hardening systemd services setting "ProtectHome=true" caused home directory
  size and allocation to be listed incorrectly (bsc#1206044).
  add (rename):
  * net-snmp-5.9.4-harden_snmpd.service.patch
  * net-snmp-5.9.4-harden_snmptrapd.service.patch
  delete (rename):
  * net-snmp-5.9.3-harden_snmpd.service.patch
  * net-snmp-5.9.3-harden_snmptrapd.service.patch</changelog>
  <changelog author="tabraham@suse.com" date="1731326400">- logrotate should use reload instead of restart (bsc#1232030)</changelog>
  <changelog author="abergmann@suse.com" date="1768219200">- Fix snmptrapd buffer overflow (bsc#1255491, CVE-2025-68615).
  Add net-snmp-5.9.4-fix-out-of-bounds-trapOid-access.patch</changelog>
</package>
<package pkgid="2cae47e9dd25c5c167d9ced15d6cb30b3303ff0ed6973c8475002ac559f2b422" name="net-snmp-devel" arch="x86_64">
  <version epoch="0" ver="5.9.4" rel="150600.24.10.1"/>
  <changelog author="tchvatal@suse.com" date="1516622400">- Take systemd service files from fedora to replace sysV scripts
- Also convert the sysconfig files to match fedora ones, they
  get bit more terse but it works seamlessly with systemd</changelog>
  <changelog author="tchvatal@suse.com" date="1516795200">- Add patch from Fedora to support natively systemd:
  * net-snmp-5.7.2-systemd.patch
- Drop the check phase as whole 90% of the tests fail it makes
  more sense to run them somewhere localy</changelog>
  <changelog author="tchvatal@suse.com" date="1516795201">- Properly conditionalize the py2 build</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Fix RPM group for shlib subpackage.</changelog>
  <changelog author="abergmann@suse.com" date="1523880000">- Remove executable flags from systemd service files (bsc#1089295).</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Fix permissions on unit files wrt bsc#1087977
- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1529323200">- Create /var/agentx via systemd tmpfiles in case of rollback,
  snapshots and transactional updates [bsc#1098032]</changelog>
  <changelog author="abergmann@suse.com" date="1539086400">- Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065)
  Add net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
- swintst_rpm: Protect against unspecified Group name (bsc#1102775)
  Add net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
- Add tsm and tlstm MIBs and the USM security module. (bsc#1081164)
- Fix agentx freezing on timeout (bsc#1027353)
  Add net-snmp-fix-agentx-freezing-on-timeout.patch</changelog>
  <changelog author="abergmann@suse.com" date="1562328000">- Add Lustre filesystem support (bsc#1140341, jsc#SLE-6120).
  Add net-snmp-5.7.3-add-lustre-fs-support.patch
- Add info about the original agent which triggered the trap.
  When the trap is forwarded there was no info about the original
  agent (bsc#1116807).
  Add net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
- Fix missing sysconfig files creation (bsc#1108471).</changelog>
  <changelog author="abergmann@suse.com" date="1639742400">- Make extended MIB read-only (bsc#1174961, CVE-2020-15862).
  Add net-snmp-5.7.3-make-extended-mib-read-only.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640001600">- Fix output for high memTotalReal RAM values (bsc#1152968).
  Add net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640174400">- Fix hrStorage autofs objects timeout problems (bsc#1179699, bsc#1145864).
  Add net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  Add net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
- Fix NSS mounted volumes in hrStorageDescr (bsc#1100146).
  Add net-snmp-5.7.3-recognize-nss-pools-and-nss-volumes-oes.patch
- Fix subagent crash at save_set_var() (bsc#1178021).
  Add net-snmp-5.7.3-subagent-set-response.patch
- Fix subagent data corruption (bsc#1178351, bsc#1179009).
  Add net-snmp-5.7.3-fix-subagent-data-corruption.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640260800">- Fix LFH violation during v3 user creation (bsc#1181591).
  Add net-snmp-5.7.3-fix-create-v3-user-outfile.patch</changelog>
  <changelog author="abergmann@suse.com" date="1646827200">- Decouple snmp-mibs from net-snmp version to allow major version
  upgrade (bsc#1196955).</changelog>
  <changelog author="abergmann@suse.com" date="1665057600">- update to 5.9.3 (bsc#1201103, jsc#SLE-11203):
  - security:
  - These two CVEs can be exploited by a user with read-only credentials:
  - CVE-2022-24805 A buffer overflow in the handling of the INDEX of
    NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
  - CVE-2022-24809 A malformed OID in a GET-NEXT to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - These CVEs can be exploited by a user with read-write credentials:
  - CVE-2022-24806 Improper Input Validation when SETing malformed
    OIDs in master agent and subagent simultaneously
  - CVE-2022-24807 A malformed OID in a SET request to
    SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an
    out-of-bounds memory access.
  - CVE-2022-24808 A malformed OID in a SET request to
    NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
  - CVE-2022-24810 A malformed OID in a SET to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - Fixed library versioning bug found in 5.9.2.
  - Library version change to libsnmp40.
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Fixed python2 backward compability.
  add:
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Change to use systemd service files directly from net-snmp package.
  add:
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch
  remove:
  * snmpd.service
  * snmptrapd.service
  * harden_snmpd.service.patch
  * harden_snmptrapd.service.patch
- Refactor and remove obsolete patches to work with version number 5.9.3:
  add:
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  remove:
  * net-snmp-5.9.1-pie.patch
  * net-snmp-5.9.1-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-add-lustre-fs-support.patch
  * net-snmp-5.7.3-Fix-Makefile.PL.patch
  * net-snmp-5.7.3-modern-rpm-api.patch
  * net-snmp-5.7.3-net-snmp-config-headercheck.patch
  * net-snmp-5.7.3-perl-tk-warning.patch
  * net-snmp-5.7.3-snmpstatus-suppress-output.patch
  * net-snmp-5.7.3-socket-path.patch
  * net-snmp-5.7.3-subagent-set-response.patch
  * net-snmp-5.7.3-testing-empty-arptable.patch
  * net-snmp-5.7.3-velocity-mib.patch
  * net-snmp-5.7.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-pie.patch
  * net-snmp-4.7.2-systemd.patch
  * net-snmp-5.7.3-build-with-openssl-1.1.patch
  * net-snmp-5.7.3-fix-agentx-freezing-on-timeout.patch
  * net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
  * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch
  * net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch
  * net-snmp-5.7.3-fix-subagent-data-corruption.patch
  * net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
  * net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  * net-snmp-5.7.3-make-extended-mib-read-only.patch
  * net-snmp-5.7.3-netgroups.patch
  * net-snmp-5.7.3-Remove-U64-typedef.patch
  * net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
  * net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
  * net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch
  * net-snmp-python3.patch</changelog>
  <changelog author="abergmann@suse.com" date="1672920000">- Fixed NULL pointer exception issue when handling ipDefaultTTL or
  pv6IpForwarding (bsc#1205148, CVE-2022-44793, bsc#1205150, CVE-2022-44792).
  add:
  * net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch
- Enable AES-192 and AES-256 privacy protocol (bsc#1206828).</changelog>
  <changelog author="abergmann@suse.com" date="1673265600">- Hardening systemd services setting "ProtectHome=true" caused home directory
  size and allocation to be listed incorrectly (bsc#1206044).
  add:
  * net-snmp-5.9.3-harden_snmpd.service.patch
  * net-snmp-5.9.3-harden_snmptrapd.service.patch
  delete:
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch</changelog>
  <changelog author="abergmann@suse.com" date="1697544000">- Update to net-snmp-5.9.4 (bsc#1214364).
  add (rename):
  * net-snmp-5.9.4-add-lustre-fs-support.patch
  * net-snmp-5.9.4-add-netgroups-functionality.patch
  * net-snmp-5.9.4-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.4-fixed-python2-bindings.patch
  * net-snmp-5.9.4-fix-Makefile.PL.patch
  * net-snmp-5.9.4-modern-rpm-api.patch
  * net-snmp-5.9.4-net-snmp-config-headercheck.patch
  * net-snmp-5.9.4-perl-tk-warning.patch
  * net-snmp-5.9.4-pie.patch
  * net-snmp-5.9.4-snmpstatus-suppress-output.patch
  * net-snmp-5.9.4-socket-path.patch
  * net-snmp-5.9.4-subagent-set-response.patch
  * net-snmp-5.9.4-suse-systemd-service-files.patch
  * net-snmp-5.9.4-testing-empty-arptable.patch
  delete (now part of v5.9.4):
  * net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch
  delete (rename):
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Removing legacy MIBs used by Velocity Software (jira#PED-6416).
- Re-add support for hostname netgroups that was removed accidentally and
  previously added with FATE#316305 (bsc#1207697).
  '@hostgroup' can be specified for multiple hosts
- Hardening systemd services setting "ProtectHome=true" caused home directory
  size and allocation to be listed incorrectly (bsc#1206044).
  add (rename):
  * net-snmp-5.9.4-harden_snmpd.service.patch
  * net-snmp-5.9.4-harden_snmptrapd.service.patch
  delete (rename):
  * net-snmp-5.9.3-harden_snmpd.service.patch
  * net-snmp-5.9.3-harden_snmptrapd.service.patch</changelog>
  <changelog author="tabraham@suse.com" date="1731326400">- logrotate should use reload instead of restart (bsc#1232030)</changelog>
  <changelog author="abergmann@suse.com" date="1768219200">- Fix snmptrapd buffer overflow (bsc#1255491, CVE-2025-68615).
  Add net-snmp-5.9.4-fix-out-of-bounds-trapOid-access.patch</changelog>
</package>
<package pkgid="bba357b4fcae1d94c2bf2bee73b449185fe7d6f2a1066832184289e4d8502783" name="net-tools" arch="src">
  <version epoch="0" ver="2.0+git20170221.479bb4a" rel="150000.5.13.1"/>
  <changelog author="jengelh@inai.de" date="1427630400">- ipmaddr and iptunnel are obsolete too, move them to subpackage.
  (Superseded by `ip maddr` and `ip tunnel`)
- remove redundant %clean section</changelog>
  <changelog author="dgutu@suse.com" date="1432641600">- Added patches to past change log entry</changelog>
  <changelog author="gber@opensuse.org" date="1433937600">- Remove hostname, domainname, dnsdomainname and require the
  separate hostname package instead</changelog>
  <changelog author="pwieczorkiewicz@suse.com" date="1463486400">- Add net-tools-1.60-hostname-s.patch:
  This changes the hostname behavior to match other systems and its
  own documentation. Namely, that -s just parses the result of the
  active gethostname() and does not attempt any network/DNS traffic.
  upstream: https://sourceforge.net/p/net-tools/bugs/14/
  commit#452f8e (boo#872264).</changelog>
  <changelog author="schwab@suse.de" date="1476705600">- net-tools-1.60-fix-header-conflict.patch: use kernel headers to avoid
  conflict with user-space headers</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1478001600">- add COPYING
- net-tools-1.60-use-gai.patch:
  use getaddrinfo instead of gethostbyname</changelog>
  <changelog author="tchvatal@suse.com" date="1497700800">- Cleanup a bit with spec-cleaner and remove sle11 conditions
- Drop the patch net-tools-1.60-obsolete.diff
  * If restored it is in the VCS and it silences all the rpm warnings</changelog>
  <changelog author="tchvatal@suse.com" date="1497700801">- Remove all the manpage altering patches as they are from 2002 and
  older while it changed and touching different languages for
  rebasing is not bright idea, the same applies for translations
  as upstream updated the translations we will pretend their
  strings win
- Switch to git service repacking so we don't have to carry all
  the patches ourselves
- Update to version 2.0+git20170221.479bb4a:
  * slattach/plipconfig: add a config knob to control them
  * Fixed trailing whitespace issue with a and i flags (#7)
  * iptunnel: drop netinet/ip.h include
  * iptunnel: fix building w/older linux headers
  * build: respect standard $(LDLIBS) variable
  * netstat: improve ROSE support
  * AX.25: Rename all references to axattach to kissattach.
  * Update all instances of my email address.
  * Fix conversion of some ROSE addresses.
  * Fix incorrect ARP output
- Merge patch net-tools-1.60-miioff.diff in the main config patch
- Rename net-tools-1.60.dif to net-tools-configure.patch in order
  to reflect what it actually does
- Drop nstrcmp.c as VCS contains newer version
- Drop patches that were either merged upstream or fixed bit differently:
  * manpages.diff
  * net-tools-1.60-arp-unaligned-access.patch
  * net-tools-1.60-compoundstatement.diff
  * net-tools-1.60-cont-buff.patch
  * net-tools-1.60-cs_CZ.bnc715580.diff
  * net-tools-1.60-doc.dif
  * net-tools-1.60-errors.patch
  * net-tools-1.60-fclose.diff
  * net-tools-1.60-fix-header-conflict.patch
  * net-tools-1.60-hostname-ipv6.patch
  * net-tools-1.60-hostname-s.patch
  * net-tools-1.60-hostname-space.patch
  * net-tools-1.60-ifconfig-SIOCSIFNETMASK.diff
  * net-tools-1.60-ifconfig.8.diff
  * net-tools-1.60-ifindex.diff
  * net-tools-1.60-infiniband.diff
  * net-tools-1.60-ipv6-statistics.diff
  * net-tools-1.60-krn26.dif
  * net-tools-1.60-long_to_int.diff
  * net-tools-1.60-multilinestr.diff
  * net-tools-1.60-nameif.diff
  * net-tools-1.60-netstat-ci.diff
  * net-tools-1.60-netstat-output.patch
  * net-tools-1.60-netstat-p.patch
  * net-tools-1.60-netstat.8.diff
  * net-tools-1.60-netstat_retval.diff
  * net-tools-1.60-numericstuff.diff
  * net-tools-1.60-plipconfig-ecode.patch
  * net-tools-1.60-plipconfig-manpage.patch
  * net-tools-1.60-plipconfig-usage.patch
  * net-tools-1.60-printval-conversion.patch
  * net-tools-1.60-sctp-quiet
  * net-tools-1.60-sctp.patch
  * net-tools-1.60-snmp-counter-overflow.patch
  * net-tools-1.60-sockios-SIOCGMIIPHY.diff
  * net-tools-1.60-strictaliasing.diff
  * net-tools-1.60-tcp-recvq-listen.patch
  * netstat-trunc.dif
  * net-tools-1.60-if_tr.diff
  * net-tools-1.60-interface_mtu.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1497700802">- Move binaries to sbindir and bindir respectively
- Switch from generating filelists to actually state them within
  the spec-file, now it is quite readable
- Move ifconfig and route to %{_bindir} as upstream does
  (and debian/rh/... do too)</changelog>
  <changelog author="tchvatal@suse.com" date="1497700803">- Disable removed binaries for build rather than on install
  * Refresh patch net-tools-configure.patch
- Make sure we respect optflags
- Add patch 0001-Add-ether-wake-binary.patch replacing standalone
  ether-wake code in the archive
- Add patch 0002-Do-not-warn-about-interface-socket-not-binded.patch
  replacing net-tools-1.60-interface_socket.diff
- Add patch 0003-Add-support-for-EiB-in-interface.c.patch enabling
  EiB support in interfaces
- Add patch 0004-By-default-do-not-fopen-anything-in-netrom_gr.patch
  relpacing net-tools-1.60-netrom-fopen.diff
- Add patch 0005-Add-support-for-interface-rename-in-nameif.patch
  replacing nameif-rename.patch
- Add patch 0006-Allow-interface-stacking.patch
  replacing net-tools-1.60-interface_stack.patch
- Add patch 0007-Introduce-T-notrim-option-in-netstat.patch
  replacing net-tools-1.60-dont-trim-foreign-addr6.diff
  and also net-tools-1.60-notrim.diff
- Drop net-tools-1.60-use-gai.patch as it should be upstreamed first
  and it does not apply clearly at all now</changelog>
  <changelog author="tchvatal@suse.com" date="1497787200">- Provide compat symlink to /bin and /sbin to be on safe side
  if someone hardcoded them in scripts (most distros switched
  7 years ago)</changelog>
  <changelog author="tchvatal@suse.com" date="1497787201">- Drop netstat xinetd service as we are phasing xinetd out
  There is probably no need to replace it here as netstat was
  deprecated and now users should favor 'ss' command from
  iproute2</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Update descriptions to better reflect the contents of both packages
  and mention the deprecation of the tools (bsc#1067937)</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1752148800">- Perform bound checks when parsing interface labels in
  /proc/net/dev (bsc#1243581, CVE-2025-46836, GHSA-pfwf-h6m3-63wf,
  net-tools-CVE-2025-46836.patch,
  net-tools-CVE-2025-46836-regression.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1754308800">- Fix a regression in net-tools-CVE-2025-46836.patch (bsc#1246608).</changelog>
  <changelog author="sbrabec@suse.com" date="1754913600">- Provide more readable error for interface name size checking
  introduced by net-tools-CVE-2025-46836.patch
  (bsc#1243581, net-tools-CVE-2025-46836-error-reporting.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1756382400">- Drop old Fedora patch 0006-Allow-interface-stacking.patch. It
  provided a fix for CVE-2025-46836 (bsc#142461), but it was fixes
  by the upstream in 2025 in a different way. Revert interferring
  net-tools-CVE-2025-46836.patch back to the upstream version.
- Fix stack buffer overflow in parse_hex (bsc#1248687,
  GHSA-h667-qrp8-gj58, net-tools-parse_hex-stack-overflow.patch).
- Fix stack-based buffer overflow in proc_gen_fmt (bsc#1248687,
  GHSA-w7jq-cmw2-cq59,
  net-tools-proc_gen_fmt-buffer-overflow.patch).
- Avoid unsafe memcpy in ifconfig (bsc#1248687,
  net-tools-ifconfig-avoid-unsafe-memcpy.patch).
- Prevent overflow in ax25 and netrom (bsc#1248687,
  net-tools-ax25+netrom-overflow-1.patch,
  net-tools-ax25+netrom-overflow-2.patch).
- Keep possibility to enter long interface names, even if they are
  not accepted by the kernel, because it was always possible up to
  CVE-2025-46836 fix. But issue a warning about an interface name
  concatenation (bsc#1248410,
  net-tools-ifconfig-long-name-warning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1757160000">- Drop 0004-By-default-do-not-fopen-anything-in-netrom_gr.patch. It
  was net-tools-1.60 specific leak fix and breaks netrom in
  net-tools-2.10 (bnc#544339#c2).</changelog>
  <changelog author="sbrabec@suse.com" date="1757332800">- Drop 0002-Do-not-warn-about-interface-socket-not-binded.patch. It
  worked around a net-tools-1.60 specific problem, that does not
  happen in net-tools-2.10. It is more harmful than useful, as it
  can hide real problems. (bsc#430864#c15,
  https://github.com/ecki/net-tools/issues/32#issuecomment-3265471116).</changelog>
</package>
<package pkgid="e0a86b97aae975cf82b14dcedd2042e0716bd6515c663aa5bdf1dcd06a753498" name="net-tools" arch="x86_64">
  <version epoch="0" ver="2.0+git20170221.479bb4a" rel="150000.5.13.1"/>
  <changelog author="jengelh@inai.de" date="1427630400">- ipmaddr and iptunnel are obsolete too, move them to subpackage.
  (Superseded by `ip maddr` and `ip tunnel`)
- remove redundant %clean section</changelog>
  <changelog author="dgutu@suse.com" date="1432641600">- Added patches to past change log entry</changelog>
  <changelog author="gber@opensuse.org" date="1433937600">- Remove hostname, domainname, dnsdomainname and require the
  separate hostname package instead</changelog>
  <changelog author="pwieczorkiewicz@suse.com" date="1463486400">- Add net-tools-1.60-hostname-s.patch:
  This changes the hostname behavior to match other systems and its
  own documentation. Namely, that -s just parses the result of the
  active gethostname() and does not attempt any network/DNS traffic.
  upstream: https://sourceforge.net/p/net-tools/bugs/14/
  commit#452f8e (boo#872264).</changelog>
  <changelog author="schwab@suse.de" date="1476705600">- net-tools-1.60-fix-header-conflict.patch: use kernel headers to avoid
  conflict with user-space headers</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1478001600">- add COPYING
- net-tools-1.60-use-gai.patch:
  use getaddrinfo instead of gethostbyname</changelog>
  <changelog author="tchvatal@suse.com" date="1497700800">- Cleanup a bit with spec-cleaner and remove sle11 conditions
- Drop the patch net-tools-1.60-obsolete.diff
  * If restored it is in the VCS and it silences all the rpm warnings</changelog>
  <changelog author="tchvatal@suse.com" date="1497700801">- Remove all the manpage altering patches as they are from 2002 and
  older while it changed and touching different languages for
  rebasing is not bright idea, the same applies for translations
  as upstream updated the translations we will pretend their
  strings win
- Switch to git service repacking so we don't have to carry all
  the patches ourselves
- Update to version 2.0+git20170221.479bb4a:
  * slattach/plipconfig: add a config knob to control them
  * Fixed trailing whitespace issue with a and i flags (#7)
  * iptunnel: drop netinet/ip.h include
  * iptunnel: fix building w/older linux headers
  * build: respect standard $(LDLIBS) variable
  * netstat: improve ROSE support
  * AX.25: Rename all references to axattach to kissattach.
  * Update all instances of my email address.
  * Fix conversion of some ROSE addresses.
  * Fix incorrect ARP output
- Merge patch net-tools-1.60-miioff.diff in the main config patch
- Rename net-tools-1.60.dif to net-tools-configure.patch in order
  to reflect what it actually does
- Drop nstrcmp.c as VCS contains newer version
- Drop patches that were either merged upstream or fixed bit differently:
  * manpages.diff
  * net-tools-1.60-arp-unaligned-access.patch
  * net-tools-1.60-compoundstatement.diff
  * net-tools-1.60-cont-buff.patch
  * net-tools-1.60-cs_CZ.bnc715580.diff
  * net-tools-1.60-doc.dif
  * net-tools-1.60-errors.patch
  * net-tools-1.60-fclose.diff
  * net-tools-1.60-fix-header-conflict.patch
  * net-tools-1.60-hostname-ipv6.patch
  * net-tools-1.60-hostname-s.patch
  * net-tools-1.60-hostname-space.patch
  * net-tools-1.60-ifconfig-SIOCSIFNETMASK.diff
  * net-tools-1.60-ifconfig.8.diff
  * net-tools-1.60-ifindex.diff
  * net-tools-1.60-infiniband.diff
  * net-tools-1.60-ipv6-statistics.diff
  * net-tools-1.60-krn26.dif
  * net-tools-1.60-long_to_int.diff
  * net-tools-1.60-multilinestr.diff
  * net-tools-1.60-nameif.diff
  * net-tools-1.60-netstat-ci.diff
  * net-tools-1.60-netstat-output.patch
  * net-tools-1.60-netstat-p.patch
  * net-tools-1.60-netstat.8.diff
  * net-tools-1.60-netstat_retval.diff
  * net-tools-1.60-numericstuff.diff
  * net-tools-1.60-plipconfig-ecode.patch
  * net-tools-1.60-plipconfig-manpage.patch
  * net-tools-1.60-plipconfig-usage.patch
  * net-tools-1.60-printval-conversion.patch
  * net-tools-1.60-sctp-quiet
  * net-tools-1.60-sctp.patch
  * net-tools-1.60-snmp-counter-overflow.patch
  * net-tools-1.60-sockios-SIOCGMIIPHY.diff
  * net-tools-1.60-strictaliasing.diff
  * net-tools-1.60-tcp-recvq-listen.patch
  * netstat-trunc.dif
  * net-tools-1.60-if_tr.diff
  * net-tools-1.60-interface_mtu.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1497700802">- Move binaries to sbindir and bindir respectively
- Switch from generating filelists to actually state them within
  the spec-file, now it is quite readable
- Move ifconfig and route to %{_bindir} as upstream does
  (and debian/rh/... do too)</changelog>
  <changelog author="tchvatal@suse.com" date="1497700803">- Disable removed binaries for build rather than on install
  * Refresh patch net-tools-configure.patch
- Make sure we respect optflags
- Add patch 0001-Add-ether-wake-binary.patch replacing standalone
  ether-wake code in the archive
- Add patch 0002-Do-not-warn-about-interface-socket-not-binded.patch
  replacing net-tools-1.60-interface_socket.diff
- Add patch 0003-Add-support-for-EiB-in-interface.c.patch enabling
  EiB support in interfaces
- Add patch 0004-By-default-do-not-fopen-anything-in-netrom_gr.patch
  relpacing net-tools-1.60-netrom-fopen.diff
- Add patch 0005-Add-support-for-interface-rename-in-nameif.patch
  replacing nameif-rename.patch
- Add patch 0006-Allow-interface-stacking.patch
  replacing net-tools-1.60-interface_stack.patch
- Add patch 0007-Introduce-T-notrim-option-in-netstat.patch
  replacing net-tools-1.60-dont-trim-foreign-addr6.diff
  and also net-tools-1.60-notrim.diff
- Drop net-tools-1.60-use-gai.patch as it should be upstreamed first
  and it does not apply clearly at all now</changelog>
  <changelog author="tchvatal@suse.com" date="1497787200">- Provide compat symlink to /bin and /sbin to be on safe side
  if someone hardcoded them in scripts (most distros switched
  7 years ago)</changelog>
  <changelog author="tchvatal@suse.com" date="1497787201">- Drop netstat xinetd service as we are phasing xinetd out
  There is probably no need to replace it here as netstat was
  deprecated and now users should favor 'ss' command from
  iproute2</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Update descriptions to better reflect the contents of both packages
  and mention the deprecation of the tools (bsc#1067937)</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1752148800">- Perform bound checks when parsing interface labels in
  /proc/net/dev (bsc#1243581, CVE-2025-46836, GHSA-pfwf-h6m3-63wf,
  net-tools-CVE-2025-46836.patch,
  net-tools-CVE-2025-46836-regression.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1754308800">- Fix a regression in net-tools-CVE-2025-46836.patch (bsc#1246608).</changelog>
  <changelog author="sbrabec@suse.com" date="1754913600">- Provide more readable error for interface name size checking
  introduced by net-tools-CVE-2025-46836.patch
  (bsc#1243581, net-tools-CVE-2025-46836-error-reporting.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1756382400">- Drop old Fedora patch 0006-Allow-interface-stacking.patch. It
  provided a fix for CVE-2025-46836 (bsc#142461), but it was fixes
  by the upstream in 2025 in a different way. Revert interferring
  net-tools-CVE-2025-46836.patch back to the upstream version.
- Fix stack buffer overflow in parse_hex (bsc#1248687,
  GHSA-h667-qrp8-gj58, net-tools-parse_hex-stack-overflow.patch).
- Fix stack-based buffer overflow in proc_gen_fmt (bsc#1248687,
  GHSA-w7jq-cmw2-cq59,
  net-tools-proc_gen_fmt-buffer-overflow.patch).
- Avoid unsafe memcpy in ifconfig (bsc#1248687,
  net-tools-ifconfig-avoid-unsafe-memcpy.patch).
- Prevent overflow in ax25 and netrom (bsc#1248687,
  net-tools-ax25+netrom-overflow-1.patch,
  net-tools-ax25+netrom-overflow-2.patch).
- Keep possibility to enter long interface names, even if they are
  not accepted by the kernel, because it was always possible up to
  CVE-2025-46836 fix. But issue a warning about an interface name
  concatenation (bsc#1248410,
  net-tools-ifconfig-long-name-warning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1757160000">- Drop 0004-By-default-do-not-fopen-anything-in-netrom_gr.patch. It
  was net-tools-1.60 specific leak fix and breaks netrom in
  net-tools-2.10 (bnc#544339#c2).</changelog>
  <changelog author="sbrabec@suse.com" date="1757332800">- Drop 0002-Do-not-warn-about-interface-socket-not-binded.patch. It
  worked around a net-tools-1.60 specific problem, that does not
  happen in net-tools-2.10. It is more harmful than useful, as it
  can hide real problems. (bsc#430864#c15,
  https://github.com/ecki/net-tools/issues/32#issuecomment-3265471116).</changelog>
</package>
<package pkgid="e35cadd3fd01c83c29b34f7d58765d98b68d914cef432bc4ad3bde402cdf73f7" name="net-tools-lang" arch="noarch">
  <version epoch="0" ver="2.0+git20170221.479bb4a" rel="150000.5.13.1"/>
  <changelog author="jengelh@inai.de" date="1427630400">- ipmaddr and iptunnel are obsolete too, move them to subpackage.
  (Superseded by `ip maddr` and `ip tunnel`)
- remove redundant %clean section</changelog>
  <changelog author="dgutu@suse.com" date="1432641600">- Added patches to past change log entry</changelog>
  <changelog author="gber@opensuse.org" date="1433937600">- Remove hostname, domainname, dnsdomainname and require the
  separate hostname package instead</changelog>
  <changelog author="pwieczorkiewicz@suse.com" date="1463486400">- Add net-tools-1.60-hostname-s.patch:
  This changes the hostname behavior to match other systems and its
  own documentation. Namely, that -s just parses the result of the
  active gethostname() and does not attempt any network/DNS traffic.
  upstream: https://sourceforge.net/p/net-tools/bugs/14/
  commit#452f8e (boo#872264).</changelog>
  <changelog author="schwab@suse.de" date="1476705600">- net-tools-1.60-fix-header-conflict.patch: use kernel headers to avoid
  conflict with user-space headers</changelog>
  <changelog author="giecrilj@stegny.2a.pl" date="1478001600">- add COPYING
- net-tools-1.60-use-gai.patch:
  use getaddrinfo instead of gethostbyname</changelog>
  <changelog author="tchvatal@suse.com" date="1497700800">- Cleanup a bit with spec-cleaner and remove sle11 conditions
- Drop the patch net-tools-1.60-obsolete.diff
  * If restored it is in the VCS and it silences all the rpm warnings</changelog>
  <changelog author="tchvatal@suse.com" date="1497700801">- Remove all the manpage altering patches as they are from 2002 and
  older while it changed and touching different languages for
  rebasing is not bright idea, the same applies for translations
  as upstream updated the translations we will pretend their
  strings win
- Switch to git service repacking so we don't have to carry all
  the patches ourselves
- Update to version 2.0+git20170221.479bb4a:
  * slattach/plipconfig: add a config knob to control them
  * Fixed trailing whitespace issue with a and i flags (#7)
  * iptunnel: drop netinet/ip.h include
  * iptunnel: fix building w/older linux headers
  * build: respect standard $(LDLIBS) variable
  * netstat: improve ROSE support
  * AX.25: Rename all references to axattach to kissattach.
  * Update all instances of my email address.
  * Fix conversion of some ROSE addresses.
  * Fix incorrect ARP output
- Merge patch net-tools-1.60-miioff.diff in the main config patch
- Rename net-tools-1.60.dif to net-tools-configure.patch in order
  to reflect what it actually does
- Drop nstrcmp.c as VCS contains newer version
- Drop patches that were either merged upstream or fixed bit differently:
  * manpages.diff
  * net-tools-1.60-arp-unaligned-access.patch
  * net-tools-1.60-compoundstatement.diff
  * net-tools-1.60-cont-buff.patch
  * net-tools-1.60-cs_CZ.bnc715580.diff
  * net-tools-1.60-doc.dif
  * net-tools-1.60-errors.patch
  * net-tools-1.60-fclose.diff
  * net-tools-1.60-fix-header-conflict.patch
  * net-tools-1.60-hostname-ipv6.patch
  * net-tools-1.60-hostname-s.patch
  * net-tools-1.60-hostname-space.patch
  * net-tools-1.60-ifconfig-SIOCSIFNETMASK.diff
  * net-tools-1.60-ifconfig.8.diff
  * net-tools-1.60-ifindex.diff
  * net-tools-1.60-infiniband.diff
  * net-tools-1.60-ipv6-statistics.diff
  * net-tools-1.60-krn26.dif
  * net-tools-1.60-long_to_int.diff
  * net-tools-1.60-multilinestr.diff
  * net-tools-1.60-nameif.diff
  * net-tools-1.60-netstat-ci.diff
  * net-tools-1.60-netstat-output.patch
  * net-tools-1.60-netstat-p.patch
  * net-tools-1.60-netstat.8.diff
  * net-tools-1.60-netstat_retval.diff
  * net-tools-1.60-numericstuff.diff
  * net-tools-1.60-plipconfig-ecode.patch
  * net-tools-1.60-plipconfig-manpage.patch
  * net-tools-1.60-plipconfig-usage.patch
  * net-tools-1.60-printval-conversion.patch
  * net-tools-1.60-sctp-quiet
  * net-tools-1.60-sctp.patch
  * net-tools-1.60-snmp-counter-overflow.patch
  * net-tools-1.60-sockios-SIOCGMIIPHY.diff
  * net-tools-1.60-strictaliasing.diff
  * net-tools-1.60-tcp-recvq-listen.patch
  * netstat-trunc.dif
  * net-tools-1.60-if_tr.diff
  * net-tools-1.60-interface_mtu.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1497700802">- Move binaries to sbindir and bindir respectively
- Switch from generating filelists to actually state them within
  the spec-file, now it is quite readable
- Move ifconfig and route to %{_bindir} as upstream does
  (and debian/rh/... do too)</changelog>
  <changelog author="tchvatal@suse.com" date="1497700803">- Disable removed binaries for build rather than on install
  * Refresh patch net-tools-configure.patch
- Make sure we respect optflags
- Add patch 0001-Add-ether-wake-binary.patch replacing standalone
  ether-wake code in the archive
- Add patch 0002-Do-not-warn-about-interface-socket-not-binded.patch
  replacing net-tools-1.60-interface_socket.diff
- Add patch 0003-Add-support-for-EiB-in-interface.c.patch enabling
  EiB support in interfaces
- Add patch 0004-By-default-do-not-fopen-anything-in-netrom_gr.patch
  relpacing net-tools-1.60-netrom-fopen.diff
- Add patch 0005-Add-support-for-interface-rename-in-nameif.patch
  replacing nameif-rename.patch
- Add patch 0006-Allow-interface-stacking.patch
  replacing net-tools-1.60-interface_stack.patch
- Add patch 0007-Introduce-T-notrim-option-in-netstat.patch
  replacing net-tools-1.60-dont-trim-foreign-addr6.diff
  and also net-tools-1.60-notrim.diff
- Drop net-tools-1.60-use-gai.patch as it should be upstreamed first
  and it does not apply clearly at all now</changelog>
  <changelog author="tchvatal@suse.com" date="1497787200">- Provide compat symlink to /bin and /sbin to be on safe side
  if someone hardcoded them in scripts (most distros switched
  7 years ago)</changelog>
  <changelog author="tchvatal@suse.com" date="1497787201">- Drop netstat xinetd service as we are phasing xinetd out
  There is probably no need to replace it here as netstat was
  deprecated and now users should favor 'ss' command from
  iproute2</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Update descriptions to better reflect the contents of both packages
  and mention the deprecation of the tools (bsc#1067937)</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1752148800">- Perform bound checks when parsing interface labels in
  /proc/net/dev (bsc#1243581, CVE-2025-46836, GHSA-pfwf-h6m3-63wf,
  net-tools-CVE-2025-46836.patch,
  net-tools-CVE-2025-46836-regression.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1754308800">- Fix a regression in net-tools-CVE-2025-46836.patch (bsc#1246608).</changelog>
  <changelog author="sbrabec@suse.com" date="1754913600">- Provide more readable error for interface name size checking
  introduced by net-tools-CVE-2025-46836.patch
  (bsc#1243581, net-tools-CVE-2025-46836-error-reporting.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1756382400">- Drop old Fedora patch 0006-Allow-interface-stacking.patch. It
  provided a fix for CVE-2025-46836 (bsc#142461), but it was fixes
  by the upstream in 2025 in a different way. Revert interferring
  net-tools-CVE-2025-46836.patch back to the upstream version.
- Fix stack buffer overflow in parse_hex (bsc#1248687,
  GHSA-h667-qrp8-gj58, net-tools-parse_hex-stack-overflow.patch).
- Fix stack-based buffer overflow in proc_gen_fmt (bsc#1248687,
  GHSA-w7jq-cmw2-cq59,
  net-tools-proc_gen_fmt-buffer-overflow.patch).
- Avoid unsafe memcpy in ifconfig (bsc#1248687,
  net-tools-ifconfig-avoid-unsafe-memcpy.patch).
- Prevent overflow in ax25 and netrom (bsc#1248687,
  net-tools-ax25+netrom-overflow-1.patch,
  net-tools-ax25+netrom-overflow-2.patch).
- Keep possibility to enter long interface names, even if they are
  not accepted by the kernel, because it was always possible up to
  CVE-2025-46836 fix. But issue a warning about an interface name
  concatenation (bsc#1248410,
  net-tools-ifconfig-long-name-warning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1757160000">- Drop 0004-By-default-do-not-fopen-anything-in-netrom_gr.patch. It
  was net-tools-1.60 specific leak fix and breaks netrom in
  net-tools-2.10 (bnc#544339#c2).</changelog>
  <changelog author="sbrabec@suse.com" date="1757332800">- Drop 0002-Do-not-warn-about-interface-socket-not-binded.patch. It
  worked around a net-tools-1.60 specific problem, that does not
  happen in net-tools-2.10. It is more harmful than useful, as it
  can hide real problems. (bsc#430864#c15,
  https://github.com/ecki/net-tools/issues/32#issuecomment-3265471116).</changelog>
</package>
<package pkgid="bad881936a7cd1b9cd88a3faa71cff1da52db4637bcd5246efaa9843283d1604" name="nfs-client" arch="x86_64">
  <version epoch="0" ver="2.6.4" rel="150600.28.12.1"/>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
  <changelog author="nfbrown@suse.com" date="1648123200">- Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
  Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch
  Ensure "sloppy" is added correctly for newer kernels.  Particularly
  required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels.
  (boo#1197297)</changelog>
  <changelog author="nfbrown@suse.com" date="1648814400">- Add 0023-cache.c-removed-a-couple-warning.patch
  Fix compilation with new glibc (SLE15-SP4)
  (bsc#1197788)</changelog>
  <changelog author="nfbrown@suse.com" date="1655208000">- 0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)</changelog>
  <changelog author="nfbrown@suse.com" date="1662379200">- add 0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
  Fix nfsdcltrack bug that affected non-x86 archs.
  (bsc#1202627)</changelog>
  <changelog author="nfbrown@suse.com" date="1673697600">- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Avoid modprobe errors when sysctl is not installed.
  (bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
  config.
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
  <changelog author="nfbrown@suse.com" date="1680091200">- Add 0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
  boo#1157881
- Add 0029-nfsd.man-fix-typo-in-section-on-scope.patch
  bsc#1209859
- Allow scope to be set in sysconfig: NFSD_SCOPE</changelog>
  <changelog author="nfbrown@suse.com" date="1686052800">- Add 0030-systemd-use-correct-modprobe-d-directory
  SLE15-SP5 an earlier don't use /usr/lib/modprobe.d
  (bsc#1200710)
- Add 0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
  Avoid unhelpful warning if rpcsec_gss_krb5.ko not installed</changelog>
  <changelog author="nfbrown@suse.com" date="1687867200">- Add 0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
  Inconsistencies in /etc/exports shouldn't be fatal.
  (bsc#1212594)</changelog>
  <changelog author="nfbrown@suse.com" date="1709726400">- Update to 2.6.4, to get many improvements, particularly
  got NFS-over-TLS support
  (bsc#1220075)
  Patches removed because that have been included upstream:
    nsm-headers.patch
    0001-conffile-ignore-empty-environment-variables.patch
    0002-mount-call-setgroups-before-setuid.patch
    0003-nfs-server-generator-handle-noauto-mounts-correctly.patch
    0002-Let-systemd-know-when-rpc.statd-is-needed.patch
    0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
    0007-statd-user-from-sm
    0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
    0009-Convert-remaining-python-scripts-to-python3.patch
    0010-gssd-Fix-locking-for-machine-principal-list.patch
    0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
    0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
    0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
    0014-mountd-update-man-page.patch
    0015-mountd-add-logging-for-authentication-results-for-ac.patch
    0016-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
    0017-mountd-make-default-ttl-settable-by-option.patch
    0018-Replace-all-var-run-with-run.patch
    0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
    0020-mountd-Initialize-logging-early.patch
    0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
    0022-mount.nfs-Fix-the-sloppy-option-processing.patch
    0023-cache.c-removed-a-couple-warning.patch
    0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
    0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
    0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
    0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
    0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
    0029-nfsd.man-fix-typo-in-section-on-scope.patch
    0030-systemd-use-correct-modprobe-d-directory
    0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
    0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
  Patches added from upstream, or to fix build errors:
    0001-exportfs-remove-warning-if-neither-subtree_check-or-.patch
    0002-conffile-don-t-report-error-from-conf_init_file.patch
    0003-conffile-allow-usr-etc-to-provide-any-config-files-e.patch
    0004-fsidd-call-anonymous-sockets-by-their-name-only-don-.patch
    buildfix.patch</changelog>
  <changelog author="nfbrown@suse.com" date="1722427200">- Include source for libnfsidmap 0.26 and build that.
  This is needed for compatability with SLE15-SP5 and earlier
  (bsc#1228159)
  Copied from old nfsidmap package:
    libnfsidmap-0.26.tar.bz2
    idmap-fix-prototype.patch
    idmap-libnfsidmap-export-symbols.patch
    idmap-0001-libnfsidmap-add-options-to-aid-id-mapping-in-multi-d.patch
    idmap-0002-nss_gss_princ_to_ids-and-nss_gss_princ_to_grouplist-.patch
    idmap-0001-Removed-some-unused-and-set-but-not-used-warnings.patch
    idmap-0002-Handle-NULL-names-better.patch
    idmap-0003-Strip-newlines-out-of-IDMAP_LOG-messages.patch
    idmap-0004-onf_parse_line-Ignore-whitespace-at-the-beginning-of.patch
    idmap-0005-nss.c-wrong-check-of-return-value.patch
    idmap-0006-Fixed-a-memory-leak-nss_name_to_gid.patch</changelog>
  <changelog author="ailiop@suse.com" date="1729080000">- nfsd: Revert "nfsd: Remove the ability to enable NFS v2."
  (bsc#1230914)
  - add 0005-Revert-nfsd-Remove-the-ability-to-enable-NFS-v2.patch
- mount.nfs: Revert "mount: Remove NFS v2 support from mount.nfs"
  (bsc#1230914)
  - add 0006-Revert-mount-Remove-NFS-v2-support-from-mount.nfs.patch</changelog>
  <changelog author="ailiop@suse.com" date="1741089600">- enable ldap support for nfsidmap (bsc#1226533)</changelog>
  <changelog author="ailiop@suse.com" date="1741608000">- rpc.idmapd: nfsopen() failures should not be fatal (bsc#1239165)
  - add 0007-rpc.idmapd-nfsopen-failures-should-not-be-fatal.patch</changelog>
  <changelog author="ailiop@suse.com" date="1744372800">- gssd: add support for an "allowed-enctypes" option in nfs.conf
  (bsc#1240899)
  - add 0008-gssd-add-support-for-an-allowed-enctypes-option-in-n.patch</changelog>
</package>
<package pkgid="f1d34ed9d2dfa2ba1c87a6b99eb926743868516b5ff3f6529095703c2ac5467d" name="nfs-client" arch="x86_64">
  <version epoch="0" ver="2.6.4" rel="150600.28.19.1"/>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
  <changelog author="nfbrown@suse.com" date="1648123200">- Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
  Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch
  Ensure "sloppy" is added correctly for newer kernels.  Particularly
  required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels.
  (boo#1197297)</changelog>
  <changelog author="nfbrown@suse.com" date="1648814400">- Add 0023-cache.c-removed-a-couple-warning.patch
  Fix compilation with new glibc (SLE15-SP4)
  (bsc#1197788)</changelog>
  <changelog author="nfbrown@suse.com" date="1655208000">- 0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)</changelog>
  <changelog author="nfbrown@suse.com" date="1662379200">- add 0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
  Fix nfsdcltrack bug that affected non-x86 archs.
  (bsc#1202627)</changelog>
  <changelog author="nfbrown@suse.com" date="1673697600">- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Avoid modprobe errors when sysctl is not installed.
  (bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
  config.
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
  <changelog author="nfbrown@suse.com" date="1680091200">- Add 0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
  boo#1157881
- Add 0029-nfsd.man-fix-typo-in-section-on-scope.patch
  bsc#1209859
- Allow scope to be set in sysconfig: NFSD_SCOPE</changelog>
  <changelog author="nfbrown@suse.com" date="1686052800">- Add 0030-systemd-use-correct-modprobe-d-directory
  SLE15-SP5 an earlier don't use /usr/lib/modprobe.d
  (bsc#1200710)
- Add 0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
  Avoid unhelpful warning if rpcsec_gss_krb5.ko not installed</changelog>
  <changelog author="nfbrown@suse.com" date="1687867200">- Add 0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
  Inconsistencies in /etc/exports shouldn't be fatal.
  (bsc#1212594)</changelog>
  <changelog author="nfbrown@suse.com" date="1709726400">- Update to 2.6.4, to get many improvements, particularly
  got NFS-over-TLS support
  (bsc#1220075)
  Patches removed because that have been included upstream:
    nsm-headers.patch
    0001-conffile-ignore-empty-environment-variables.patch
    0002-mount-call-setgroups-before-setuid.patch
    0003-nfs-server-generator-handle-noauto-mounts-correctly.patch
    0002-Let-systemd-know-when-rpc.statd-is-needed.patch
    0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
    0007-statd-user-from-sm
    0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
    0009-Convert-remaining-python-scripts-to-python3.patch
    0010-gssd-Fix-locking-for-machine-principal-list.patch
    0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
    0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
    0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
    0014-mountd-update-man-page.patch
    0015-mountd-add-logging-for-authentication-results-for-ac.patch
    0016-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
    0017-mountd-make-default-ttl-settable-by-option.patch
    0018-Replace-all-var-run-with-run.patch
    0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
    0020-mountd-Initialize-logging-early.patch
    0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
    0022-mount.nfs-Fix-the-sloppy-option-processing.patch
    0023-cache.c-removed-a-couple-warning.patch
    0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
    0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
    0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
    0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
    0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
    0029-nfsd.man-fix-typo-in-section-on-scope.patch
    0030-systemd-use-correct-modprobe-d-directory
    0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
    0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
  Patches added from upstream, or to fix build errors:
    0001-exportfs-remove-warning-if-neither-subtree_check-or-.patch
    0002-conffile-don-t-report-error-from-conf_init_file.patch
    0003-conffile-allow-usr-etc-to-provide-any-config-files-e.patch
    0004-fsidd-call-anonymous-sockets-by-their-name-only-don-.patch
    buildfix.patch</changelog>
  <changelog author="nfbrown@suse.com" date="1722427200">- Include source for libnfsidmap 0.26 and build that.
  This is needed for compatability with SLE15-SP5 and earlier
  (bsc#1228159)
  Copied from old nfsidmap package:
    libnfsidmap-0.26.tar.bz2
    idmap-fix-prototype.patch
    idmap-libnfsidmap-export-symbols.patch
    idmap-0001-libnfsidmap-add-options-to-aid-id-mapping-in-multi-d.patch
    idmap-0002-nss_gss_princ_to_ids-and-nss_gss_princ_to_grouplist-.patch
    idmap-0001-Removed-some-unused-and-set-but-not-used-warnings.patch
    idmap-0002-Handle-NULL-names-better.patch
    idmap-0003-Strip-newlines-out-of-IDMAP_LOG-messages.patch
    idmap-0004-onf_parse_line-Ignore-whitespace-at-the-beginning-of.patch
    idmap-0005-nss.c-wrong-check-of-return-value.patch
    idmap-0006-Fixed-a-memory-leak-nss_name_to_gid.patch</changelog>
  <changelog author="ailiop@suse.com" date="1729080000">- nfsd: Revert "nfsd: Remove the ability to enable NFS v2."
  (bsc#1230914)
  - add 0005-Revert-nfsd-Remove-the-ability-to-enable-NFS-v2.patch
- mount.nfs: Revert "mount: Remove NFS v2 support from mount.nfs"
  (bsc#1230914)
  - add 0006-Revert-mount-Remove-NFS-v2-support-from-mount.nfs.patch</changelog>
  <changelog author="ailiop@suse.com" date="1741089600">- enable ldap support for nfsidmap (bsc#1226533)</changelog>
  <changelog author="ailiop@suse.com" date="1741608000">- rpc.idmapd: nfsopen() failures should not be fatal (bsc#1239165)
  - add 0007-rpc.idmapd-nfsopen-failures-should-not-be-fatal.patch</changelog>
  <changelog author="ailiop@suse.com" date="1744372800">- gssd: add support for an "allowed-enctypes" option in nfs.conf
  (bsc#1240899)
  - add 0008-gssd-add-support-for-an-allowed-enctypes-option-in-n.patch</changelog>
  <changelog author="scabrero@suse.de" date="1752494400">- Split legacy libnfsidmap0 into a separate spec file (bsc#1246505)</changelog>
  <changelog author="ailiop@suse.com" date="1773230400">- Fix access checks when mounting subdirectories in NFSv3
  (CVE-2025-12801 bsc#1259204)
  - add Fix-access-checks-when-mounting-subdirectories-in-NFSv3.patch
  - add NFS-export-symlink-vulnerability-fix.patch
  - add configure-check-for-rpc_gss_seccreate.patch
  - add mountd-Minor-refactor-of-get_rootfh.patch
  - add mountd-Separate-lookup-of-the-exported-directory-and-the-m.patch
  - add support-Add-a-mini-library-to-extract-and-apply-RPC-creden.patch</changelog>
</package>
<package pkgid="8ef95538317baea751f468f589dec165f22c6bee28c33a01f3069304ae1c870a" name="nfs-doc" arch="x86_64">
  <version epoch="0" ver="2.6.4" rel="150600.28.12.1"/>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
  <changelog author="nfbrown@suse.com" date="1648123200">- Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
  Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch
  Ensure "sloppy" is added correctly for newer kernels.  Particularly
  required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels.
  (boo#1197297)</changelog>
  <changelog author="nfbrown@suse.com" date="1648814400">- Add 0023-cache.c-removed-a-couple-warning.patch
  Fix compilation with new glibc (SLE15-SP4)
  (bsc#1197788)</changelog>
  <changelog author="nfbrown@suse.com" date="1655208000">- 0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)</changelog>
  <changelog author="nfbrown@suse.com" date="1662379200">- add 0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
  Fix nfsdcltrack bug that affected non-x86 archs.
  (bsc#1202627)</changelog>
  <changelog author="nfbrown@suse.com" date="1673697600">- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Avoid modprobe errors when sysctl is not installed.
  (bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
  config.
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
  <changelog author="nfbrown@suse.com" date="1680091200">- Add 0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
  boo#1157881
- Add 0029-nfsd.man-fix-typo-in-section-on-scope.patch
  bsc#1209859
- Allow scope to be set in sysconfig: NFSD_SCOPE</changelog>
  <changelog author="nfbrown@suse.com" date="1686052800">- Add 0030-systemd-use-correct-modprobe-d-directory
  SLE15-SP5 an earlier don't use /usr/lib/modprobe.d
  (bsc#1200710)
- Add 0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
  Avoid unhelpful warning if rpcsec_gss_krb5.ko not installed</changelog>
  <changelog author="nfbrown@suse.com" date="1687867200">- Add 0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
  Inconsistencies in /etc/exports shouldn't be fatal.
  (bsc#1212594)</changelog>
  <changelog author="nfbrown@suse.com" date="1709726400">- Update to 2.6.4, to get many improvements, particularly
  got NFS-over-TLS support
  (bsc#1220075)
  Patches removed because that have been included upstream:
    nsm-headers.patch
    0001-conffile-ignore-empty-environment-variables.patch
    0002-mount-call-setgroups-before-setuid.patch
    0003-nfs-server-generator-handle-noauto-mounts-correctly.patch
    0002-Let-systemd-know-when-rpc.statd-is-needed.patch
    0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
    0007-statd-user-from-sm
    0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
    0009-Convert-remaining-python-scripts-to-python3.patch
    0010-gssd-Fix-locking-for-machine-principal-list.patch
    0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
    0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
    0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
    0014-mountd-update-man-page.patch
    0015-mountd-add-logging-for-authentication-results-for-ac.patch
    0016-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
    0017-mountd-make-default-ttl-settable-by-option.patch
    0018-Replace-all-var-run-with-run.patch
    0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
    0020-mountd-Initialize-logging-early.patch
    0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
    0022-mount.nfs-Fix-the-sloppy-option-processing.patch
    0023-cache.c-removed-a-couple-warning.patch
    0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
    0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
    0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
    0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
    0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
    0029-nfsd.man-fix-typo-in-section-on-scope.patch
    0030-systemd-use-correct-modprobe-d-directory
    0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
    0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
  Patches added from upstream, or to fix build errors:
    0001-exportfs-remove-warning-if-neither-subtree_check-or-.patch
    0002-conffile-don-t-report-error-from-conf_init_file.patch
    0003-conffile-allow-usr-etc-to-provide-any-config-files-e.patch
    0004-fsidd-call-anonymous-sockets-by-their-name-only-don-.patch
    buildfix.patch</changelog>
  <changelog author="nfbrown@suse.com" date="1722427200">- Include source for libnfsidmap 0.26 and build that.
  This is needed for compatability with SLE15-SP5 and earlier
  (bsc#1228159)
  Copied from old nfsidmap package:
    libnfsidmap-0.26.tar.bz2
    idmap-fix-prototype.patch
    idmap-libnfsidmap-export-symbols.patch
    idmap-0001-libnfsidmap-add-options-to-aid-id-mapping-in-multi-d.patch
    idmap-0002-nss_gss_princ_to_ids-and-nss_gss_princ_to_grouplist-.patch
    idmap-0001-Removed-some-unused-and-set-but-not-used-warnings.patch
    idmap-0002-Handle-NULL-names-better.patch
    idmap-0003-Strip-newlines-out-of-IDMAP_LOG-messages.patch
    idmap-0004-onf_parse_line-Ignore-whitespace-at-the-beginning-of.patch
    idmap-0005-nss.c-wrong-check-of-return-value.patch
    idmap-0006-Fixed-a-memory-leak-nss_name_to_gid.patch</changelog>
  <changelog author="ailiop@suse.com" date="1729080000">- nfsd: Revert "nfsd: Remove the ability to enable NFS v2."
  (bsc#1230914)
  - add 0005-Revert-nfsd-Remove-the-ability-to-enable-NFS-v2.patch
- mount.nfs: Revert "mount: Remove NFS v2 support from mount.nfs"
  (bsc#1230914)
  - add 0006-Revert-mount-Remove-NFS-v2-support-from-mount.nfs.patch</changelog>
  <changelog author="ailiop@suse.com" date="1741089600">- enable ldap support for nfsidmap (bsc#1226533)</changelog>
  <changelog author="ailiop@suse.com" date="1741608000">- rpc.idmapd: nfsopen() failures should not be fatal (bsc#1239165)
  - add 0007-rpc.idmapd-nfsopen-failures-should-not-be-fatal.patch</changelog>
  <changelog author="ailiop@suse.com" date="1744372800">- gssd: add support for an "allowed-enctypes" option in nfs.conf
  (bsc#1240899)
  - add 0008-gssd-add-support-for-an-allowed-enctypes-option-in-n.patch</changelog>
</package>
<package pkgid="5780e6c3d0cb0469b2d2b3640b18db7e38a4786750b6f010a942702f2a371ebb" name="nfs-doc" arch="x86_64">
  <version epoch="0" ver="2.6.4" rel="150600.28.19.1"/>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
  <changelog author="nfbrown@suse.com" date="1648123200">- Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
  Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch
  Ensure "sloppy" is added correctly for newer kernels.  Particularly
  required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels.
  (boo#1197297)</changelog>
  <changelog author="nfbrown@suse.com" date="1648814400">- Add 0023-cache.c-removed-a-couple-warning.patch
  Fix compilation with new glibc (SLE15-SP4)
  (bsc#1197788)</changelog>
  <changelog author="nfbrown@suse.com" date="1655208000">- 0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)</changelog>
  <changelog author="nfbrown@suse.com" date="1662379200">- add 0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
  Fix nfsdcltrack bug that affected non-x86 archs.
  (bsc#1202627)</changelog>
  <changelog author="nfbrown@suse.com" date="1673697600">- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Avoid modprobe errors when sysctl is not installed.
  (bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
  config.
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
  <changelog author="nfbrown@suse.com" date="1680091200">- Add 0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
  boo#1157881
- Add 0029-nfsd.man-fix-typo-in-section-on-scope.patch
  bsc#1209859
- Allow scope to be set in sysconfig: NFSD_SCOPE</changelog>
  <changelog author="nfbrown@suse.com" date="1686052800">- Add 0030-systemd-use-correct-modprobe-d-directory
  SLE15-SP5 an earlier don't use /usr/lib/modprobe.d
  (bsc#1200710)
- Add 0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
  Avoid unhelpful warning if rpcsec_gss_krb5.ko not installed</changelog>
  <changelog author="nfbrown@suse.com" date="1687867200">- Add 0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
  Inconsistencies in /etc/exports shouldn't be fatal.
  (bsc#1212594)</changelog>
  <changelog author="nfbrown@suse.com" date="1709726400">- Update to 2.6.4, to get many improvements, particularly
  got NFS-over-TLS support
  (bsc#1220075)
  Patches removed because that have been included upstream:
    nsm-headers.patch
    0001-conffile-ignore-empty-environment-variables.patch
    0002-mount-call-setgroups-before-setuid.patch
    0003-nfs-server-generator-handle-noauto-mounts-correctly.patch
    0002-Let-systemd-know-when-rpc.statd-is-needed.patch
    0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
    0007-statd-user-from-sm
    0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
    0009-Convert-remaining-python-scripts-to-python3.patch
    0010-gssd-Fix-locking-for-machine-principal-list.patch
    0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
    0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
    0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
    0014-mountd-update-man-page.patch
    0015-mountd-add-logging-for-authentication-results-for-ac.patch
    0016-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
    0017-mountd-make-default-ttl-settable-by-option.patch
    0018-Replace-all-var-run-with-run.patch
    0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
    0020-mountd-Initialize-logging-early.patch
    0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
    0022-mount.nfs-Fix-the-sloppy-option-processing.patch
    0023-cache.c-removed-a-couple-warning.patch
    0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
    0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
    0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
    0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
    0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
    0029-nfsd.man-fix-typo-in-section-on-scope.patch
    0030-systemd-use-correct-modprobe-d-directory
    0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
    0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
  Patches added from upstream, or to fix build errors:
    0001-exportfs-remove-warning-if-neither-subtree_check-or-.patch
    0002-conffile-don-t-report-error-from-conf_init_file.patch
    0003-conffile-allow-usr-etc-to-provide-any-config-files-e.patch
    0004-fsidd-call-anonymous-sockets-by-their-name-only-don-.patch
    buildfix.patch</changelog>
  <changelog author="nfbrown@suse.com" date="1722427200">- Include source for libnfsidmap 0.26 and build that.
  This is needed for compatability with SLE15-SP5 and earlier
  (bsc#1228159)
  Copied from old nfsidmap package:
    libnfsidmap-0.26.tar.bz2
    idmap-fix-prototype.patch
    idmap-libnfsidmap-export-symbols.patch
    idmap-0001-libnfsidmap-add-options-to-aid-id-mapping-in-multi-d.patch
    idmap-0002-nss_gss_princ_to_ids-and-nss_gss_princ_to_grouplist-.patch
    idmap-0001-Removed-some-unused-and-set-but-not-used-warnings.patch
    idmap-0002-Handle-NULL-names-better.patch
    idmap-0003-Strip-newlines-out-of-IDMAP_LOG-messages.patch
    idmap-0004-onf_parse_line-Ignore-whitespace-at-the-beginning-of.patch
    idmap-0005-nss.c-wrong-check-of-return-value.patch
    idmap-0006-Fixed-a-memory-leak-nss_name_to_gid.patch</changelog>
  <changelog author="ailiop@suse.com" date="1729080000">- nfsd: Revert "nfsd: Remove the ability to enable NFS v2."
  (bsc#1230914)
  - add 0005-Revert-nfsd-Remove-the-ability-to-enable-NFS-v2.patch
- mount.nfs: Revert "mount: Remove NFS v2 support from mount.nfs"
  (bsc#1230914)
  - add 0006-Revert-mount-Remove-NFS-v2-support-from-mount.nfs.patch</changelog>
  <changelog author="ailiop@suse.com" date="1741089600">- enable ldap support for nfsidmap (bsc#1226533)</changelog>
  <changelog author="ailiop@suse.com" date="1741608000">- rpc.idmapd: nfsopen() failures should not be fatal (bsc#1239165)
  - add 0007-rpc.idmapd-nfsopen-failures-should-not-be-fatal.patch</changelog>
  <changelog author="ailiop@suse.com" date="1744372800">- gssd: add support for an "allowed-enctypes" option in nfs.conf
  (bsc#1240899)
  - add 0008-gssd-add-support-for-an-allowed-enctypes-option-in-n.patch</changelog>
  <changelog author="scabrero@suse.de" date="1752494400">- Split legacy libnfsidmap0 into a separate spec file (bsc#1246505)</changelog>
  <changelog author="ailiop@suse.com" date="1773230400">- Fix access checks when mounting subdirectories in NFSv3
  (CVE-2025-12801 bsc#1259204)
  - add Fix-access-checks-when-mounting-subdirectories-in-NFSv3.patch
  - add NFS-export-symlink-vulnerability-fix.patch
  - add configure-check-for-rpc_gss_seccreate.patch
  - add mountd-Minor-refactor-of-get_rootfh.patch
  - add mountd-Separate-lookup-of-the-exported-directory-and-the-m.patch
  - add support-Add-a-mini-library-to-extract-and-apply-RPC-creden.patch</changelog>
</package>
<package pkgid="696c3315aa397ca10a2593fdd46d0f4ad464da76a050599648c29302e1e1ed8b" name="nfs-kernel-server" arch="x86_64">
  <version epoch="0" ver="2.6.4" rel="150600.28.12.1"/>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
  <changelog author="nfbrown@suse.com" date="1648123200">- Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
  Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch
  Ensure "sloppy" is added correctly for newer kernels.  Particularly
  required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels.
  (boo#1197297)</changelog>
  <changelog author="nfbrown@suse.com" date="1648814400">- Add 0023-cache.c-removed-a-couple-warning.patch
  Fix compilation with new glibc (SLE15-SP4)
  (bsc#1197788)</changelog>
  <changelog author="nfbrown@suse.com" date="1655208000">- 0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)</changelog>
  <changelog author="nfbrown@suse.com" date="1662379200">- add 0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
  Fix nfsdcltrack bug that affected non-x86 archs.
  (bsc#1202627)</changelog>
  <changelog author="nfbrown@suse.com" date="1673697600">- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Avoid modprobe errors when sysctl is not installed.
  (bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
  config.
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
  <changelog author="nfbrown@suse.com" date="1680091200">- Add 0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
  boo#1157881
- Add 0029-nfsd.man-fix-typo-in-section-on-scope.patch
  bsc#1209859
- Allow scope to be set in sysconfig: NFSD_SCOPE</changelog>
  <changelog author="nfbrown@suse.com" date="1686052800">- Add 0030-systemd-use-correct-modprobe-d-directory
  SLE15-SP5 an earlier don't use /usr/lib/modprobe.d
  (bsc#1200710)
- Add 0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
  Avoid unhelpful warning if rpcsec_gss_krb5.ko not installed</changelog>
  <changelog author="nfbrown@suse.com" date="1687867200">- Add 0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
  Inconsistencies in /etc/exports shouldn't be fatal.
  (bsc#1212594)</changelog>
  <changelog author="nfbrown@suse.com" date="1709726400">- Update to 2.6.4, to get many improvements, particularly
  got NFS-over-TLS support
  (bsc#1220075)
  Patches removed because that have been included upstream:
    nsm-headers.patch
    0001-conffile-ignore-empty-environment-variables.patch
    0002-mount-call-setgroups-before-setuid.patch
    0003-nfs-server-generator-handle-noauto-mounts-correctly.patch
    0002-Let-systemd-know-when-rpc.statd-is-needed.patch
    0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
    0007-statd-user-from-sm
    0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
    0009-Convert-remaining-python-scripts-to-python3.patch
    0010-gssd-Fix-locking-for-machine-principal-list.patch
    0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
    0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
    0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
    0014-mountd-update-man-page.patch
    0015-mountd-add-logging-for-authentication-results-for-ac.patch
    0016-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
    0017-mountd-make-default-ttl-settable-by-option.patch
    0018-Replace-all-var-run-with-run.patch
    0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
    0020-mountd-Initialize-logging-early.patch
    0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
    0022-mount.nfs-Fix-the-sloppy-option-processing.patch
    0023-cache.c-removed-a-couple-warning.patch
    0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
    0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
    0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
    0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
    0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
    0029-nfsd.man-fix-typo-in-section-on-scope.patch
    0030-systemd-use-correct-modprobe-d-directory
    0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
    0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
  Patches added from upstream, or to fix build errors:
    0001-exportfs-remove-warning-if-neither-subtree_check-or-.patch
    0002-conffile-don-t-report-error-from-conf_init_file.patch
    0003-conffile-allow-usr-etc-to-provide-any-config-files-e.patch
    0004-fsidd-call-anonymous-sockets-by-their-name-only-don-.patch
    buildfix.patch</changelog>
  <changelog author="nfbrown@suse.com" date="1722427200">- Include source for libnfsidmap 0.26 and build that.
  This is needed for compatability with SLE15-SP5 and earlier
  (bsc#1228159)
  Copied from old nfsidmap package:
    libnfsidmap-0.26.tar.bz2
    idmap-fix-prototype.patch
    idmap-libnfsidmap-export-symbols.patch
    idmap-0001-libnfsidmap-add-options-to-aid-id-mapping-in-multi-d.patch
    idmap-0002-nss_gss_princ_to_ids-and-nss_gss_princ_to_grouplist-.patch
    idmap-0001-Removed-some-unused-and-set-but-not-used-warnings.patch
    idmap-0002-Handle-NULL-names-better.patch
    idmap-0003-Strip-newlines-out-of-IDMAP_LOG-messages.patch
    idmap-0004-onf_parse_line-Ignore-whitespace-at-the-beginning-of.patch
    idmap-0005-nss.c-wrong-check-of-return-value.patch
    idmap-0006-Fixed-a-memory-leak-nss_name_to_gid.patch</changelog>
  <changelog author="ailiop@suse.com" date="1729080000">- nfsd: Revert "nfsd: Remove the ability to enable NFS v2."
  (bsc#1230914)
  - add 0005-Revert-nfsd-Remove-the-ability-to-enable-NFS-v2.patch
- mount.nfs: Revert "mount: Remove NFS v2 support from mount.nfs"
  (bsc#1230914)
  - add 0006-Revert-mount-Remove-NFS-v2-support-from-mount.nfs.patch</changelog>
  <changelog author="ailiop@suse.com" date="1741089600">- enable ldap support for nfsidmap (bsc#1226533)</changelog>
  <changelog author="ailiop@suse.com" date="1741608000">- rpc.idmapd: nfsopen() failures should not be fatal (bsc#1239165)
  - add 0007-rpc.idmapd-nfsopen-failures-should-not-be-fatal.patch</changelog>
  <changelog author="ailiop@suse.com" date="1744372800">- gssd: add support for an "allowed-enctypes" option in nfs.conf
  (bsc#1240899)
  - add 0008-gssd-add-support-for-an-allowed-enctypes-option-in-n.patch</changelog>
</package>
<package pkgid="d6096e08cb85694bcbaac5158dcabaf836541bfa498f709394dddede9a95e096" name="nfs-kernel-server" arch="x86_64">
  <version epoch="0" ver="2.6.4" rel="150600.28.19.1"/>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
  <changelog author="nfbrown@suse.com" date="1648123200">- Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
  Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch
  Ensure "sloppy" is added correctly for newer kernels.  Particularly
  required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels.
  (boo#1197297)</changelog>
  <changelog author="nfbrown@suse.com" date="1648814400">- Add 0023-cache.c-removed-a-couple-warning.patch
  Fix compilation with new glibc (SLE15-SP4)
  (bsc#1197788)</changelog>
  <changelog author="nfbrown@suse.com" date="1655208000">- 0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)</changelog>
  <changelog author="nfbrown@suse.com" date="1662379200">- add 0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
  Fix nfsdcltrack bug that affected non-x86 archs.
  (bsc#1202627)</changelog>
  <changelog author="nfbrown@suse.com" date="1673697600">- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Avoid modprobe errors when sysctl is not installed.
  (bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
  config.
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
  <changelog author="nfbrown@suse.com" date="1680091200">- Add 0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
  boo#1157881
- Add 0029-nfsd.man-fix-typo-in-section-on-scope.patch
  bsc#1209859
- Allow scope to be set in sysconfig: NFSD_SCOPE</changelog>
  <changelog author="nfbrown@suse.com" date="1686052800">- Add 0030-systemd-use-correct-modprobe-d-directory
  SLE15-SP5 an earlier don't use /usr/lib/modprobe.d
  (bsc#1200710)
- Add 0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
  Avoid unhelpful warning if rpcsec_gss_krb5.ko not installed</changelog>
  <changelog author="nfbrown@suse.com" date="1687867200">- Add 0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
  Inconsistencies in /etc/exports shouldn't be fatal.
  (bsc#1212594)</changelog>
  <changelog author="nfbrown@suse.com" date="1709726400">- Update to 2.6.4, to get many improvements, particularly
  got NFS-over-TLS support
  (bsc#1220075)
  Patches removed because that have been included upstream:
    nsm-headers.patch
    0001-conffile-ignore-empty-environment-variables.patch
    0002-mount-call-setgroups-before-setuid.patch
    0003-nfs-server-generator-handle-noauto-mounts-correctly.patch
    0002-Let-systemd-know-when-rpc.statd-is-needed.patch
    0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
    0007-statd-user-from-sm
    0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
    0009-Convert-remaining-python-scripts-to-python3.patch
    0010-gssd-Fix-locking-for-machine-principal-list.patch
    0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
    0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
    0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
    0014-mountd-update-man-page.patch
    0015-mountd-add-logging-for-authentication-results-for-ac.patch
    0016-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
    0017-mountd-make-default-ttl-settable-by-option.patch
    0018-Replace-all-var-run-with-run.patch
    0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
    0020-mountd-Initialize-logging-early.patch
    0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
    0022-mount.nfs-Fix-the-sloppy-option-processing.patch
    0023-cache.c-removed-a-couple-warning.patch
    0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
    0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
    0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
    0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
    0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
    0029-nfsd.man-fix-typo-in-section-on-scope.patch
    0030-systemd-use-correct-modprobe-d-directory
    0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
    0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
  Patches added from upstream, or to fix build errors:
    0001-exportfs-remove-warning-if-neither-subtree_check-or-.patch
    0002-conffile-don-t-report-error-from-conf_init_file.patch
    0003-conffile-allow-usr-etc-to-provide-any-config-files-e.patch
    0004-fsidd-call-anonymous-sockets-by-their-name-only-don-.patch
    buildfix.patch</changelog>
  <changelog author="nfbrown@suse.com" date="1722427200">- Include source for libnfsidmap 0.26 and build that.
  This is needed for compatability with SLE15-SP5 and earlier
  (bsc#1228159)
  Copied from old nfsidmap package:
    libnfsidmap-0.26.tar.bz2
    idmap-fix-prototype.patch
    idmap-libnfsidmap-export-symbols.patch
    idmap-0001-libnfsidmap-add-options-to-aid-id-mapping-in-multi-d.patch
    idmap-0002-nss_gss_princ_to_ids-and-nss_gss_princ_to_grouplist-.patch
    idmap-0001-Removed-some-unused-and-set-but-not-used-warnings.patch
    idmap-0002-Handle-NULL-names-better.patch
    idmap-0003-Strip-newlines-out-of-IDMAP_LOG-messages.patch
    idmap-0004-onf_parse_line-Ignore-whitespace-at-the-beginning-of.patch
    idmap-0005-nss.c-wrong-check-of-return-value.patch
    idmap-0006-Fixed-a-memory-leak-nss_name_to_gid.patch</changelog>
  <changelog author="ailiop@suse.com" date="1729080000">- nfsd: Revert "nfsd: Remove the ability to enable NFS v2."
  (bsc#1230914)
  - add 0005-Revert-nfsd-Remove-the-ability-to-enable-NFS-v2.patch
- mount.nfs: Revert "mount: Remove NFS v2 support from mount.nfs"
  (bsc#1230914)
  - add 0006-Revert-mount-Remove-NFS-v2-support-from-mount.nfs.patch</changelog>
  <changelog author="ailiop@suse.com" date="1741089600">- enable ldap support for nfsidmap (bsc#1226533)</changelog>
  <changelog author="ailiop@suse.com" date="1741608000">- rpc.idmapd: nfsopen() failures should not be fatal (bsc#1239165)
  - add 0007-rpc.idmapd-nfsopen-failures-should-not-be-fatal.patch</changelog>
  <changelog author="ailiop@suse.com" date="1744372800">- gssd: add support for an "allowed-enctypes" option in nfs.conf
  (bsc#1240899)
  - add 0008-gssd-add-support-for-an-allowed-enctypes-option-in-n.patch</changelog>
  <changelog author="scabrero@suse.de" date="1752494400">- Split legacy libnfsidmap0 into a separate spec file (bsc#1246505)</changelog>
  <changelog author="ailiop@suse.com" date="1773230400">- Fix access checks when mounting subdirectories in NFSv3
  (CVE-2025-12801 bsc#1259204)
  - add Fix-access-checks-when-mounting-subdirectories-in-NFSv3.patch
  - add NFS-export-symlink-vulnerability-fix.patch
  - add configure-check-for-rpc_gss_seccreate.patch
  - add mountd-Minor-refactor-of-get_rootfh.patch
  - add mountd-Separate-lookup-of-the-exported-directory-and-the-m.patch
  - add support-Add-a-mini-library-to-extract-and-apply-RPC-creden.patch</changelog>
</package>
<package pkgid="3c10a18fddd51ef7b726119de1db7de4d0070928cd301ed0ac1e3827aed13147" name="nfs-utils" arch="src">
  <version epoch="0" ver="2.6.4" rel="150600.28.12.1"/>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
  <changelog author="nfbrown@suse.com" date="1648123200">- Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
  Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch
  Ensure "sloppy" is added correctly for newer kernels.  Particularly
  required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels.
  (boo#1197297)</changelog>
  <changelog author="nfbrown@suse.com" date="1648814400">- Add 0023-cache.c-removed-a-couple-warning.patch
  Fix compilation with new glibc (SLE15-SP4)
  (bsc#1197788)</changelog>
  <changelog author="nfbrown@suse.com" date="1655208000">- 0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)</changelog>
  <changelog author="nfbrown@suse.com" date="1662379200">- add 0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
  Fix nfsdcltrack bug that affected non-x86 archs.
  (bsc#1202627)</changelog>
  <changelog author="nfbrown@suse.com" date="1673697600">- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Avoid modprobe errors when sysctl is not installed.
  (bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
  config.
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
  <changelog author="nfbrown@suse.com" date="1680091200">- Add 0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
  boo#1157881
- Add 0029-nfsd.man-fix-typo-in-section-on-scope.patch
  bsc#1209859
- Allow scope to be set in sysconfig: NFSD_SCOPE</changelog>
  <changelog author="nfbrown@suse.com" date="1686052800">- Add 0030-systemd-use-correct-modprobe-d-directory
  SLE15-SP5 an earlier don't use /usr/lib/modprobe.d
  (bsc#1200710)
- Add 0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
  Avoid unhelpful warning if rpcsec_gss_krb5.ko not installed</changelog>
  <changelog author="nfbrown@suse.com" date="1687867200">- Add 0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
  Inconsistencies in /etc/exports shouldn't be fatal.
  (bsc#1212594)</changelog>
  <changelog author="nfbrown@suse.com" date="1709726400">- Update to 2.6.4, to get many improvements, particularly
  got NFS-over-TLS support
  (bsc#1220075)
  Patches removed because that have been included upstream:
    nsm-headers.patch
    0001-conffile-ignore-empty-environment-variables.patch
    0002-mount-call-setgroups-before-setuid.patch
    0003-nfs-server-generator-handle-noauto-mounts-correctly.patch
    0002-Let-systemd-know-when-rpc.statd-is-needed.patch
    0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
    0007-statd-user-from-sm
    0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
    0009-Convert-remaining-python-scripts-to-python3.patch
    0010-gssd-Fix-locking-for-machine-principal-list.patch
    0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
    0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
    0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
    0014-mountd-update-man-page.patch
    0015-mountd-add-logging-for-authentication-results-for-ac.patch
    0016-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
    0017-mountd-make-default-ttl-settable-by-option.patch
    0018-Replace-all-var-run-with-run.patch
    0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
    0020-mountd-Initialize-logging-early.patch
    0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
    0022-mount.nfs-Fix-the-sloppy-option-processing.patch
    0023-cache.c-removed-a-couple-warning.patch
    0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
    0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
    0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
    0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
    0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
    0029-nfsd.man-fix-typo-in-section-on-scope.patch
    0030-systemd-use-correct-modprobe-d-directory
    0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
    0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
  Patches added from upstream, or to fix build errors:
    0001-exportfs-remove-warning-if-neither-subtree_check-or-.patch
    0002-conffile-don-t-report-error-from-conf_init_file.patch
    0003-conffile-allow-usr-etc-to-provide-any-config-files-e.patch
    0004-fsidd-call-anonymous-sockets-by-their-name-only-don-.patch
    buildfix.patch</changelog>
  <changelog author="nfbrown@suse.com" date="1722427200">- Include source for libnfsidmap 0.26 and build that.
  This is needed for compatability with SLE15-SP5 and earlier
  (bsc#1228159)
  Copied from old nfsidmap package:
    libnfsidmap-0.26.tar.bz2
    idmap-fix-prototype.patch
    idmap-libnfsidmap-export-symbols.patch
    idmap-0001-libnfsidmap-add-options-to-aid-id-mapping-in-multi-d.patch
    idmap-0002-nss_gss_princ_to_ids-and-nss_gss_princ_to_grouplist-.patch
    idmap-0001-Removed-some-unused-and-set-but-not-used-warnings.patch
    idmap-0002-Handle-NULL-names-better.patch
    idmap-0003-Strip-newlines-out-of-IDMAP_LOG-messages.patch
    idmap-0004-onf_parse_line-Ignore-whitespace-at-the-beginning-of.patch
    idmap-0005-nss.c-wrong-check-of-return-value.patch
    idmap-0006-Fixed-a-memory-leak-nss_name_to_gid.patch</changelog>
  <changelog author="ailiop@suse.com" date="1729080000">- nfsd: Revert "nfsd: Remove the ability to enable NFS v2."
  (bsc#1230914)
  - add 0005-Revert-nfsd-Remove-the-ability-to-enable-NFS-v2.patch
- mount.nfs: Revert "mount: Remove NFS v2 support from mount.nfs"
  (bsc#1230914)
  - add 0006-Revert-mount-Remove-NFS-v2-support-from-mount.nfs.patch</changelog>
  <changelog author="ailiop@suse.com" date="1741089600">- enable ldap support for nfsidmap (bsc#1226533)</changelog>
  <changelog author="ailiop@suse.com" date="1741608000">- rpc.idmapd: nfsopen() failures should not be fatal (bsc#1239165)
  - add 0007-rpc.idmapd-nfsopen-failures-should-not-be-fatal.patch</changelog>
  <changelog author="ailiop@suse.com" date="1744372800">- gssd: add support for an "allowed-enctypes" option in nfs.conf
  (bsc#1240899)
  - add 0008-gssd-add-support-for-an-allowed-enctypes-option-in-n.patch</changelog>
</package>
<package pkgid="ebedc7b426a213d1ae40b725ff03780ee2c89ac08d5d3e57566d7529cbbcd375" name="nfs-utils" arch="src">
  <version epoch="0" ver="2.6.4" rel="150600.28.19.1"/>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
  <changelog author="nfbrown@suse.com" date="1648123200">- Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
  Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch
  Ensure "sloppy" is added correctly for newer kernels.  Particularly
  required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels.
  (boo#1197297)</changelog>
  <changelog author="nfbrown@suse.com" date="1648814400">- Add 0023-cache.c-removed-a-couple-warning.patch
  Fix compilation with new glibc (SLE15-SP4)
  (bsc#1197788)</changelog>
  <changelog author="nfbrown@suse.com" date="1655208000">- 0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)</changelog>
  <changelog author="nfbrown@suse.com" date="1662379200">- add 0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
  Fix nfsdcltrack bug that affected non-x86 archs.
  (bsc#1202627)</changelog>
  <changelog author="nfbrown@suse.com" date="1673697600">- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Avoid modprobe errors when sysctl is not installed.
  (bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
  config.
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
  <changelog author="nfbrown@suse.com" date="1680091200">- Add 0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
  boo#1157881
- Add 0029-nfsd.man-fix-typo-in-section-on-scope.patch
  bsc#1209859
- Allow scope to be set in sysconfig: NFSD_SCOPE</changelog>
  <changelog author="nfbrown@suse.com" date="1686052800">- Add 0030-systemd-use-correct-modprobe-d-directory
  SLE15-SP5 an earlier don't use /usr/lib/modprobe.d
  (bsc#1200710)
- Add 0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
  Avoid unhelpful warning if rpcsec_gss_krb5.ko not installed</changelog>
  <changelog author="nfbrown@suse.com" date="1687867200">- Add 0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
  Inconsistencies in /etc/exports shouldn't be fatal.
  (bsc#1212594)</changelog>
  <changelog author="nfbrown@suse.com" date="1709726400">- Update to 2.6.4, to get many improvements, particularly
  got NFS-over-TLS support
  (bsc#1220075)
  Patches removed because that have been included upstream:
    nsm-headers.patch
    0001-conffile-ignore-empty-environment-variables.patch
    0002-mount-call-setgroups-before-setuid.patch
    0003-nfs-server-generator-handle-noauto-mounts-correctly.patch
    0002-Let-systemd-know-when-rpc.statd-is-needed.patch
    0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
    0007-statd-user-from-sm
    0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
    0009-Convert-remaining-python-scripts-to-python3.patch
    0010-gssd-Fix-locking-for-machine-principal-list.patch
    0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
    0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
    0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
    0014-mountd-update-man-page.patch
    0015-mountd-add-logging-for-authentication-results-for-ac.patch
    0016-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
    0017-mountd-make-default-ttl-settable-by-option.patch
    0018-Replace-all-var-run-with-run.patch
    0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
    0020-mountd-Initialize-logging-early.patch
    0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
    0022-mount.nfs-Fix-the-sloppy-option-processing.patch
    0023-cache.c-removed-a-couple-warning.patch
    0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
    0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
    0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
    0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
    0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
    0029-nfsd.man-fix-typo-in-section-on-scope.patch
    0030-systemd-use-correct-modprobe-d-directory
    0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
    0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
  Patches added from upstream, or to fix build errors:
    0001-exportfs-remove-warning-if-neither-subtree_check-or-.patch
    0002-conffile-don-t-report-error-from-conf_init_file.patch
    0003-conffile-allow-usr-etc-to-provide-any-config-files-e.patch
    0004-fsidd-call-anonymous-sockets-by-their-name-only-don-.patch
    buildfix.patch</changelog>
  <changelog author="nfbrown@suse.com" date="1722427200">- Include source for libnfsidmap 0.26 and build that.
  This is needed for compatability with SLE15-SP5 and earlier
  (bsc#1228159)
  Copied from old nfsidmap package:
    libnfsidmap-0.26.tar.bz2
    idmap-fix-prototype.patch
    idmap-libnfsidmap-export-symbols.patch
    idmap-0001-libnfsidmap-add-options-to-aid-id-mapping-in-multi-d.patch
    idmap-0002-nss_gss_princ_to_ids-and-nss_gss_princ_to_grouplist-.patch
    idmap-0001-Removed-some-unused-and-set-but-not-used-warnings.patch
    idmap-0002-Handle-NULL-names-better.patch
    idmap-0003-Strip-newlines-out-of-IDMAP_LOG-messages.patch
    idmap-0004-onf_parse_line-Ignore-whitespace-at-the-beginning-of.patch
    idmap-0005-nss.c-wrong-check-of-return-value.patch
    idmap-0006-Fixed-a-memory-leak-nss_name_to_gid.patch</changelog>
  <changelog author="ailiop@suse.com" date="1729080000">- nfsd: Revert "nfsd: Remove the ability to enable NFS v2."
  (bsc#1230914)
  - add 0005-Revert-nfsd-Remove-the-ability-to-enable-NFS-v2.patch
- mount.nfs: Revert "mount: Remove NFS v2 support from mount.nfs"
  (bsc#1230914)
  - add 0006-Revert-mount-Remove-NFS-v2-support-from-mount.nfs.patch</changelog>
  <changelog author="ailiop@suse.com" date="1741089600">- enable ldap support for nfsidmap (bsc#1226533)</changelog>
  <changelog author="ailiop@suse.com" date="1741608000">- rpc.idmapd: nfsopen() failures should not be fatal (bsc#1239165)
  - add 0007-rpc.idmapd-nfsopen-failures-should-not-be-fatal.patch</changelog>
  <changelog author="ailiop@suse.com" date="1744372800">- gssd: add support for an "allowed-enctypes" option in nfs.conf
  (bsc#1240899)
  - add 0008-gssd-add-support-for-an-allowed-enctypes-option-in-n.patch</changelog>
  <changelog author="scabrero@suse.de" date="1752494400">- Split legacy libnfsidmap0 into a separate spec file (bsc#1246505)</changelog>
  <changelog author="ailiop@suse.com" date="1773230400">- Fix access checks when mounting subdirectories in NFSv3
  (CVE-2025-12801 bsc#1259204)
  - add Fix-access-checks-when-mounting-subdirectories-in-NFSv3.patch
  - add NFS-export-symlink-vulnerability-fix.patch
  - add configure-check-for-rpc_gss_seccreate.patch
  - add mountd-Minor-refactor-of-get_rootfh.patch
  - add mountd-Separate-lookup-of-the-exported-directory-and-the-m.patch
  - add support-Add-a-mini-library-to-extract-and-apply-RPC-creden.patch</changelog>
</package>
<package pkgid="220abf0420059c2e6fbed790b7ecdb83c8a7d5c56f991f48438728259a0fd80f" name="nfsidmap-devel" arch="x86_64">
  <version epoch="0" ver="1.0" rel="150600.28.12.1"/>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
  <changelog author="nfbrown@suse.com" date="1648123200">- Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
  Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch
  Ensure "sloppy" is added correctly for newer kernels.  Particularly
  required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels.
  (boo#1197297)</changelog>
  <changelog author="nfbrown@suse.com" date="1648814400">- Add 0023-cache.c-removed-a-couple-warning.patch
  Fix compilation with new glibc (SLE15-SP4)
  (bsc#1197788)</changelog>
  <changelog author="nfbrown@suse.com" date="1655208000">- 0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)</changelog>
  <changelog author="nfbrown@suse.com" date="1662379200">- add 0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
  Fix nfsdcltrack bug that affected non-x86 archs.
  (bsc#1202627)</changelog>
  <changelog author="nfbrown@suse.com" date="1673697600">- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Avoid modprobe errors when sysctl is not installed.
  (bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
  config.
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
  <changelog author="nfbrown@suse.com" date="1680091200">- Add 0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
  boo#1157881
- Add 0029-nfsd.man-fix-typo-in-section-on-scope.patch
  bsc#1209859
- Allow scope to be set in sysconfig: NFSD_SCOPE</changelog>
  <changelog author="nfbrown@suse.com" date="1686052800">- Add 0030-systemd-use-correct-modprobe-d-directory
  SLE15-SP5 an earlier don't use /usr/lib/modprobe.d
  (bsc#1200710)
- Add 0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
  Avoid unhelpful warning if rpcsec_gss_krb5.ko not installed</changelog>
  <changelog author="nfbrown@suse.com" date="1687867200">- Add 0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
  Inconsistencies in /etc/exports shouldn't be fatal.
  (bsc#1212594)</changelog>
  <changelog author="nfbrown@suse.com" date="1709726400">- Update to 2.6.4, to get many improvements, particularly
  got NFS-over-TLS support
  (bsc#1220075)
  Patches removed because that have been included upstream:
    nsm-headers.patch
    0001-conffile-ignore-empty-environment-variables.patch
    0002-mount-call-setgroups-before-setuid.patch
    0003-nfs-server-generator-handle-noauto-mounts-correctly.patch
    0002-Let-systemd-know-when-rpc.statd-is-needed.patch
    0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
    0007-statd-user-from-sm
    0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
    0009-Convert-remaining-python-scripts-to-python3.patch
    0010-gssd-Fix-locking-for-machine-principal-list.patch
    0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
    0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
    0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
    0014-mountd-update-man-page.patch
    0015-mountd-add-logging-for-authentication-results-for-ac.patch
    0016-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
    0017-mountd-make-default-ttl-settable-by-option.patch
    0018-Replace-all-var-run-with-run.patch
    0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
    0020-mountd-Initialize-logging-early.patch
    0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
    0022-mount.nfs-Fix-the-sloppy-option-processing.patch
    0023-cache.c-removed-a-couple-warning.patch
    0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
    0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
    0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
    0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
    0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
    0029-nfsd.man-fix-typo-in-section-on-scope.patch
    0030-systemd-use-correct-modprobe-d-directory
    0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
    0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
  Patches added from upstream, or to fix build errors:
    0001-exportfs-remove-warning-if-neither-subtree_check-or-.patch
    0002-conffile-don-t-report-error-from-conf_init_file.patch
    0003-conffile-allow-usr-etc-to-provide-any-config-files-e.patch
    0004-fsidd-call-anonymous-sockets-by-their-name-only-don-.patch
    buildfix.patch</changelog>
  <changelog author="nfbrown@suse.com" date="1722427200">- Include source for libnfsidmap 0.26 and build that.
  This is needed for compatability with SLE15-SP5 and earlier
  (bsc#1228159)
  Copied from old nfsidmap package:
    libnfsidmap-0.26.tar.bz2
    idmap-fix-prototype.patch
    idmap-libnfsidmap-export-symbols.patch
    idmap-0001-libnfsidmap-add-options-to-aid-id-mapping-in-multi-d.patch
    idmap-0002-nss_gss_princ_to_ids-and-nss_gss_princ_to_grouplist-.patch
    idmap-0001-Removed-some-unused-and-set-but-not-used-warnings.patch
    idmap-0002-Handle-NULL-names-better.patch
    idmap-0003-Strip-newlines-out-of-IDMAP_LOG-messages.patch
    idmap-0004-onf_parse_line-Ignore-whitespace-at-the-beginning-of.patch
    idmap-0005-nss.c-wrong-check-of-return-value.patch
    idmap-0006-Fixed-a-memory-leak-nss_name_to_gid.patch</changelog>
  <changelog author="ailiop@suse.com" date="1729080000">- nfsd: Revert "nfsd: Remove the ability to enable NFS v2."
  (bsc#1230914)
  - add 0005-Revert-nfsd-Remove-the-ability-to-enable-NFS-v2.patch
- mount.nfs: Revert "mount: Remove NFS v2 support from mount.nfs"
  (bsc#1230914)
  - add 0006-Revert-mount-Remove-NFS-v2-support-from-mount.nfs.patch</changelog>
  <changelog author="ailiop@suse.com" date="1741089600">- enable ldap support for nfsidmap (bsc#1226533)</changelog>
  <changelog author="ailiop@suse.com" date="1741608000">- rpc.idmapd: nfsopen() failures should not be fatal (bsc#1239165)
  - add 0007-rpc.idmapd-nfsopen-failures-should-not-be-fatal.patch</changelog>
  <changelog author="ailiop@suse.com" date="1744372800">- gssd: add support for an "allowed-enctypes" option in nfs.conf
  (bsc#1240899)
  - add 0008-gssd-add-support-for-an-allowed-enctypes-option-in-n.patch</changelog>
</package>
<package pkgid="e459063e917bf09962c330f6892d8a7f0afe9c9e6f087497a0abec33ba443847" name="nfsidmap-devel" arch="x86_64">
  <version epoch="0" ver="1.0" rel="150600.28.19.1"/>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
  <changelog author="nfbrown@suse.com" date="1648123200">- Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
  Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch
  Ensure "sloppy" is added correctly for newer kernels.  Particularly
  required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels.
  (boo#1197297)</changelog>
  <changelog author="nfbrown@suse.com" date="1648814400">- Add 0023-cache.c-removed-a-couple-warning.patch
  Fix compilation with new glibc (SLE15-SP4)
  (bsc#1197788)</changelog>
  <changelog author="nfbrown@suse.com" date="1655208000">- 0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)</changelog>
  <changelog author="nfbrown@suse.com" date="1662379200">- add 0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
  Fix nfsdcltrack bug that affected non-x86 archs.
  (bsc#1202627)</changelog>
  <changelog author="nfbrown@suse.com" date="1673697600">- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Avoid modprobe errors when sysctl is not installed.
  (bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
  config.
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
  <changelog author="nfbrown@suse.com" date="1680091200">- Add 0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
  boo#1157881
- Add 0029-nfsd.man-fix-typo-in-section-on-scope.patch
  bsc#1209859
- Allow scope to be set in sysconfig: NFSD_SCOPE</changelog>
  <changelog author="nfbrown@suse.com" date="1686052800">- Add 0030-systemd-use-correct-modprobe-d-directory
  SLE15-SP5 an earlier don't use /usr/lib/modprobe.d
  (bsc#1200710)
- Add 0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
  Avoid unhelpful warning if rpcsec_gss_krb5.ko not installed</changelog>
  <changelog author="nfbrown@suse.com" date="1687867200">- Add 0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
  Inconsistencies in /etc/exports shouldn't be fatal.
  (bsc#1212594)</changelog>
  <changelog author="nfbrown@suse.com" date="1709726400">- Update to 2.6.4, to get many improvements, particularly
  got NFS-over-TLS support
  (bsc#1220075)
  Patches removed because that have been included upstream:
    nsm-headers.patch
    0001-conffile-ignore-empty-environment-variables.patch
    0002-mount-call-setgroups-before-setuid.patch
    0003-nfs-server-generator-handle-noauto-mounts-correctly.patch
    0002-Let-systemd-know-when-rpc.statd-is-needed.patch
    0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
    0007-statd-user-from-sm
    0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
    0009-Convert-remaining-python-scripts-to-python3.patch
    0010-gssd-Fix-locking-for-machine-principal-list.patch
    0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
    0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
    0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
    0014-mountd-update-man-page.patch
    0015-mountd-add-logging-for-authentication-results-for-ac.patch
    0016-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
    0017-mountd-make-default-ttl-settable-by-option.patch
    0018-Replace-all-var-run-with-run.patch
    0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
    0020-mountd-Initialize-logging-early.patch
    0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
    0022-mount.nfs-Fix-the-sloppy-option-processing.patch
    0023-cache.c-removed-a-couple-warning.patch
    0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
    0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
    0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
    0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
    0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
    0029-nfsd.man-fix-typo-in-section-on-scope.patch
    0030-systemd-use-correct-modprobe-d-directory
    0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
    0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
  Patches added from upstream, or to fix build errors:
    0001-exportfs-remove-warning-if-neither-subtree_check-or-.patch
    0002-conffile-don-t-report-error-from-conf_init_file.patch
    0003-conffile-allow-usr-etc-to-provide-any-config-files-e.patch
    0004-fsidd-call-anonymous-sockets-by-their-name-only-don-.patch
    buildfix.patch</changelog>
  <changelog author="nfbrown@suse.com" date="1722427200">- Include source for libnfsidmap 0.26 and build that.
  This is needed for compatability with SLE15-SP5 and earlier
  (bsc#1228159)
  Copied from old nfsidmap package:
    libnfsidmap-0.26.tar.bz2
    idmap-fix-prototype.patch
    idmap-libnfsidmap-export-symbols.patch
    idmap-0001-libnfsidmap-add-options-to-aid-id-mapping-in-multi-d.patch
    idmap-0002-nss_gss_princ_to_ids-and-nss_gss_princ_to_grouplist-.patch
    idmap-0001-Removed-some-unused-and-set-but-not-used-warnings.patch
    idmap-0002-Handle-NULL-names-better.patch
    idmap-0003-Strip-newlines-out-of-IDMAP_LOG-messages.patch
    idmap-0004-onf_parse_line-Ignore-whitespace-at-the-beginning-of.patch
    idmap-0005-nss.c-wrong-check-of-return-value.patch
    idmap-0006-Fixed-a-memory-leak-nss_name_to_gid.patch</changelog>
  <changelog author="ailiop@suse.com" date="1729080000">- nfsd: Revert "nfsd: Remove the ability to enable NFS v2."
  (bsc#1230914)
  - add 0005-Revert-nfsd-Remove-the-ability-to-enable-NFS-v2.patch
- mount.nfs: Revert "mount: Remove NFS v2 support from mount.nfs"
  (bsc#1230914)
  - add 0006-Revert-mount-Remove-NFS-v2-support-from-mount.nfs.patch</changelog>
  <changelog author="ailiop@suse.com" date="1741089600">- enable ldap support for nfsidmap (bsc#1226533)</changelog>
  <changelog author="ailiop@suse.com" date="1741608000">- rpc.idmapd: nfsopen() failures should not be fatal (bsc#1239165)
  - add 0007-rpc.idmapd-nfsopen-failures-should-not-be-fatal.patch</changelog>
  <changelog author="ailiop@suse.com" date="1744372800">- gssd: add support for an "allowed-enctypes" option in nfs.conf
  (bsc#1240899)
  - add 0008-gssd-add-support-for-an-allowed-enctypes-option-in-n.patch</changelog>
  <changelog author="scabrero@suse.de" date="1752494400">- Split legacy libnfsidmap0 into a separate spec file (bsc#1246505)</changelog>
  <changelog author="ailiop@suse.com" date="1773230400">- Fix access checks when mounting subdirectories in NFSv3
  (CVE-2025-12801 bsc#1259204)
  - add Fix-access-checks-when-mounting-subdirectories-in-NFSv3.patch
  - add NFS-export-symlink-vulnerability-fix.patch
  - add configure-check-for-rpc_gss_seccreate.patch
  - add mountd-Minor-refactor-of-get_rootfh.patch
  - add mountd-Separate-lookup-of-the-exported-directory-and-the-m.patch
  - add support-Add-a-mini-library-to-extract-and-apply-RPC-creden.patch</changelog>
</package>
<package pkgid="03a25fa5af419fcd9d8551f91c4d36aac0e9bee8ed3cbeed24bbde2f422f761a" name="nfsidmap0-devel" arch="x86_64">
  <version epoch="0" ver="0.26" rel="150600.28.12.1"/>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
  <changelog author="nfbrown@suse.com" date="1648123200">- Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
  Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch
  Ensure "sloppy" is added correctly for newer kernels.  Particularly
  required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels.
  (boo#1197297)</changelog>
  <changelog author="nfbrown@suse.com" date="1648814400">- Add 0023-cache.c-removed-a-couple-warning.patch
  Fix compilation with new glibc (SLE15-SP4)
  (bsc#1197788)</changelog>
  <changelog author="nfbrown@suse.com" date="1655208000">- 0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)</changelog>
  <changelog author="nfbrown@suse.com" date="1662379200">- add 0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
  Fix nfsdcltrack bug that affected non-x86 archs.
  (bsc#1202627)</changelog>
  <changelog author="nfbrown@suse.com" date="1673697600">- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Avoid modprobe errors when sysctl is not installed.
  (bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
  config.
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
  <changelog author="nfbrown@suse.com" date="1680091200">- Add 0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
  boo#1157881
- Add 0029-nfsd.man-fix-typo-in-section-on-scope.patch
  bsc#1209859
- Allow scope to be set in sysconfig: NFSD_SCOPE</changelog>
  <changelog author="nfbrown@suse.com" date="1686052800">- Add 0030-systemd-use-correct-modprobe-d-directory
  SLE15-SP5 an earlier don't use /usr/lib/modprobe.d
  (bsc#1200710)
- Add 0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
  Avoid unhelpful warning if rpcsec_gss_krb5.ko not installed</changelog>
  <changelog author="nfbrown@suse.com" date="1687867200">- Add 0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
  Inconsistencies in /etc/exports shouldn't be fatal.
  (bsc#1212594)</changelog>
  <changelog author="nfbrown@suse.com" date="1709726400">- Update to 2.6.4, to get many improvements, particularly
  got NFS-over-TLS support
  (bsc#1220075)
  Patches removed because that have been included upstream:
    nsm-headers.patch
    0001-conffile-ignore-empty-environment-variables.patch
    0002-mount-call-setgroups-before-setuid.patch
    0003-nfs-server-generator-handle-noauto-mounts-correctly.patch
    0002-Let-systemd-know-when-rpc.statd-is-needed.patch
    0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
    0007-statd-user-from-sm
    0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
    0009-Convert-remaining-python-scripts-to-python3.patch
    0010-gssd-Fix-locking-for-machine-principal-list.patch
    0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
    0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
    0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
    0014-mountd-update-man-page.patch
    0015-mountd-add-logging-for-authentication-results-for-ac.patch
    0016-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
    0017-mountd-make-default-ttl-settable-by-option.patch
    0018-Replace-all-var-run-with-run.patch
    0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
    0020-mountd-Initialize-logging-early.patch
    0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
    0022-mount.nfs-Fix-the-sloppy-option-processing.patch
    0023-cache.c-removed-a-couple-warning.patch
    0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
    0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
    0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
    0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
    0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
    0029-nfsd.man-fix-typo-in-section-on-scope.patch
    0030-systemd-use-correct-modprobe-d-directory
    0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
    0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
  Patches added from upstream, or to fix build errors:
    0001-exportfs-remove-warning-if-neither-subtree_check-or-.patch
    0002-conffile-don-t-report-error-from-conf_init_file.patch
    0003-conffile-allow-usr-etc-to-provide-any-config-files-e.patch
    0004-fsidd-call-anonymous-sockets-by-their-name-only-don-.patch
    buildfix.patch</changelog>
  <changelog author="nfbrown@suse.com" date="1722427200">- Include source for libnfsidmap 0.26 and build that.
  This is needed for compatability with SLE15-SP5 and earlier
  (bsc#1228159)
  Copied from old nfsidmap package:
    libnfsidmap-0.26.tar.bz2
    idmap-fix-prototype.patch
    idmap-libnfsidmap-export-symbols.patch
    idmap-0001-libnfsidmap-add-options-to-aid-id-mapping-in-multi-d.patch
    idmap-0002-nss_gss_princ_to_ids-and-nss_gss_princ_to_grouplist-.patch
    idmap-0001-Removed-some-unused-and-set-but-not-used-warnings.patch
    idmap-0002-Handle-NULL-names-better.patch
    idmap-0003-Strip-newlines-out-of-IDMAP_LOG-messages.patch
    idmap-0004-onf_parse_line-Ignore-whitespace-at-the-beginning-of.patch
    idmap-0005-nss.c-wrong-check-of-return-value.patch
    idmap-0006-Fixed-a-memory-leak-nss_name_to_gid.patch</changelog>
  <changelog author="ailiop@suse.com" date="1729080000">- nfsd: Revert "nfsd: Remove the ability to enable NFS v2."
  (bsc#1230914)
  - add 0005-Revert-nfsd-Remove-the-ability-to-enable-NFS-v2.patch
- mount.nfs: Revert "mount: Remove NFS v2 support from mount.nfs"
  (bsc#1230914)
  - add 0006-Revert-mount-Remove-NFS-v2-support-from-mount.nfs.patch</changelog>
  <changelog author="ailiop@suse.com" date="1741089600">- enable ldap support for nfsidmap (bsc#1226533)</changelog>
  <changelog author="ailiop@suse.com" date="1741608000">- rpc.idmapd: nfsopen() failures should not be fatal (bsc#1239165)
  - add 0007-rpc.idmapd-nfsopen-failures-should-not-be-fatal.patch</changelog>
  <changelog author="ailiop@suse.com" date="1744372800">- gssd: add support for an "allowed-enctypes" option in nfs.conf
  (bsc#1240899)
  - add 0008-gssd-add-support-for-an-allowed-enctypes-option-in-n.patch</changelog>
</package>
<package pkgid="238c0484b31bc2eb3a5360e45eccf5d22852243a7944a271e7d2c91fa00e1043" name="nfsidmap0-devel" arch="x86_64">
  <version epoch="0" ver="0.26" rel="150600.28.19.1"/>
  <changelog author="scabrero@suse.de" date="1752494400">- Split from nfs-utils into its own spec and changelog file
  (bsc#1246505)</changelog>
</package>
<package pkgid="90072686efe624a778f024405a88ed1f4cdc8444cee5174ee6055164f7de2b45" name="nghttp2" arch="src">
  <version epoch="0" ver="1.40.0" rel="150600.25.5.1"/>
  <changelog author="tchvatal@suse.com" date="1523275200">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 “Data Dribble” and CVE-2019-9513
  “Resource Loop” vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695729600">- Fixes memory leak that happens when PUSH_PROMISE or HEADERS frame cannot be
  sent, and nghttp2_on_stream_close_callback fails with a fatal error.
  [CVE-2023-35945 bsc#1215713]
  + nghttp2-CVE-2023-35945.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1697716800">- security update
- added patches
  fix CVE-2023-44487 [bsc#1216123], HTTP/2 Rapid Reset Attack
  + nghttp2-CVE-2023-44487.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- security update
- added patches
  fix CVE-2024-28182 [bsc#1221399], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + nghttp2-CVE-2024-28182-1.patch
  fix CVE-2024-28182-2 [bsc#1221399], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + nghttp2-CVE-2024-28182-2.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1774008000">- added patches
  CVE-2026-27135: assertion failure due to missing state validation can lead to DoS (bsc#1259845)
  * nghttp2-CVE-2026-27135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1774872000">- added patches
  https://github.com/nghttp2/nghttp2/commit/61caf66f1b002105e5603fba030de57d445330a8
  * nghttp2-TZ-fix-test-failure.patch</changelog>
</package>
<package pkgid="de098fe1163b9b471fa4af3cdc592dd7e688d7a609831fc539c6b8906f92b72e" name="nghttp2" arch="src">
  <version epoch="0" ver="1.64.0" rel="150700.3.3.1"/>
  <changelog author="dmueller@suse.com" date="1661169600">- update to 1.49.0:
  * https://nghttp2.org/blog/2022/08/22/nghttp2-v1-49-0/</changelog>
  <changelog author="dmueller@suse.com" date="1663934400">- disable asio by default as it is deprecated by upstream and
  will be removed in the next release</changelog>
  <changelog author="dmueller@suse.com" date="1664020800">- update to 1.50.0:
  * https://nghttp2.org/blog/2022/09/21/nghttp2-v1-50-0/
  This release adds
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation which disables
  checking leading and trailing white spaces against HTTP field value.</changelog>
  <changelog author="dmueller@suse.com" date="1668686400">- update to 1.51.0:
  * https://nghttp2.org/blog/2022/11/13/nghttp2-v1-51-0/
  This release fixes affinity-cookie-stickiness parameter handling.</changelog>
  <changelog author="dmueller@suse.com" date="1678795200">- update to 1.52.0:
  * https://nghttp2.org/blog/2023/02/13/nghttp2-v1-52-0/
  * sphinx_rtd_theme has been removed from the repository
    and archive.
  * The deprecated Python bindings has been removed.
  * The deprecated libnghttp2_asio has been removed.
  * llhttp and neverbleed have been updated.
  * This release fixes the bug that stalls TLS connection.
  * This release adds more http3 integration tests.
- drop nghttp2-remove-python-build.patch: obsolete as the code got removed</changelog>
  <changelog author="mpluskal@suse.com" date="1684411200">- Update to version 1.53.0:
  * https://nghttp2.org/blog/2023/05/10/nghttp2-v1-53-0/</changelog>
  <changelog author="dmueller@suse.com" date="1687262400">- update to 1.54.0:
  * nghttpx: Consistent error handling and use of high-level API
  * h2load: Fix http3 upload stall
  * h2load: Use std::chrono::steady_clock for quic timestamp</changelog>
  <changelog author="dmueller@suse.com" date="1689422400">- update to 1.55.1:
  * Fix memory leak (bsc#1215713)
    This commit fixes memory leak that happens when
    PUSH_PROMISE or HEADERS frame cannot be sent, and
    nghttp2_on_stream_close_callback fails with a fatal error.
    For example, if GOAWAY frame has been received, a
    HEADERS frame that opens new stream cannot be sent.
    This issue has already been made public via CVE-2023-35945
    by envoyproxy/envoy project.  During embargo period, the
    patch to fix this bug was accidentally submitted to
    nghttp2/nghttp2 repository [2]. And they decided to
    disclose CVE early.  I was notified just 1.5 hours
    before disclosure.  I had no time to respond.
    PoC described in [1] is quite simple, but I think it is
    not enough to trigger this bug.  While it is true that
    receiving GOAWAY prevents a client from opening new stream,
    and nghttp2 enters error handling branch, in order to cause
    the memory leak, nghttp2_session_close_stream function
    must return a fatal error.
    NGHTTP2_ERR_NOMEM, as its name suggests, indicates out of
    memory.  It is unlikely that a process gets short of
    memory with this simple PoC scenario unless application
    does something memory heavy processing.
  * NGHTTP2_ERR_CALLBACK_FAILURE is returned from application
    defined callback function (nghttp2_on_stream_close_callback, in
    this case), which indicates something fatal happened inside a
    callback, and a connection must be closed immediately without
    any further action.  As nghttp2_on_stream_close_error_callback
    documentation says, any error code other than 0 or
    NGHTTP2_ERR_CALLBACK_FAILURE is treated as fatal
    error code.  More specifically, it is treated as if
    NGHTTP2_ERR_CALLBACK_FAILURE is returned.  I guess that
    envoy returns
    NGHTTP2_ERR_CALLBACK_FAILURE or other error code which is
    translated into NGHTTP2_ERR_CALLBACK_FAILURE.
    https://github.com/envoyproxy/envoy/security/advisories/GHSA-
    jfxv-29pc-x22r</changelog>
  <changelog author="pgajdos@suse.com" date="1697457600">- version update to 1.57.0 [bsc#1216174]
  1.57.0
  * Fixes CVE-2023-44487 (bsc#1216123)
  * Bump ngtcp2 by @tatsuhiro-t in #1944
  * Add dependabot to update actions by @tatsuhiro-t in #1946
  * Bump golang.org/x/net to v0.15.0 by @tatsuhiro-t in #1950
  * Bump actions/setup-go from 3 to 4 by @dependabot in #1948
  * Bump actions/checkout from 3 to 4 by @dependabot in #1949
  * Bump actions/upload-artifact from 1 to 3 by @dependabot in #1947
  * docker: Bump base image to debian 12 by @tatsuhiro-t in #1951
  * nghttpx: Header field name must be lowercase by @tatsuhiro-t in #1953
  * Bump quictls by @tatsuhiro-t in #1945
  * Apps fix by @tatsuhiro-t in #1957
  * nghttpx: Fix bug that --single-process does not work by @tatsuhiro-t in #1958
  * Fix clang-format by @tatsuhiro-t in #1959
  * Rework session management by @tatsuhiro-t in #1961
  1.56.0
  * doc: Bump boringssl by @tatsuhiro-t in #1928
  * Fix memory leak by @tatsuhiro-t in #1930
  * Return void by @tatsuhiro-t in #1931
  * nghttpx: Rework sending and receiving ECN bits by @tatsuhiro-t in #1934
  * CMSG_DATA does not necessarily return an aligned pointer by @tatsuhiro-t in #1935
  * Bump quictls by @tatsuhiro-t in #1937
  * Bump ngtcp2 and its dependencies by @tatsuhiro-t in #1939
  * nghttpx: Simplify std::unique_ptr get and release by @tatsuhiro-t in #1940
  * Bump llhttp to 926c982942eb53a13f01c1e9e6b19bd3b196e7dd by @tatsuhiro-t in #1941
  * Bump libbpf to v1.2.2 by @tatsuhiro-t in #1942
  * Update Dockerfile by @tatsuhiro-t in #1943</changelog>
  <changelog author="dmueller@suse.com" date="1699358400">- add keyring for gpg validation
- spec file cleanups</changelog>
  <changelog author="dmueller@suse.com" date="1700568000">- fix unversioned provides to be in sync with nghttp3</changelog>
  <changelog author="dmueller@suse.com" date="1700913600">- update to 1.58.0:
  * Update manual pages
  * Bump neverbleed
  * Bump ngtcp2
  * Prefer clock_gettime if __CYGWIN__ defined
  * Do not require strict c++ mode
  * nghttpx: Stricter transfer-encoding checks
  * Refactor character comparison
  * Integration servertester h3
  * integration: Enable http3 test with cmake</changelog>
  <changelog author="dmueller@suse.com" date="1706443200">- update to 1.59.0:
  * Update bash_completion
  * h2load: Fix bug that ttfb is not recorded if h3 stream
    has no data
  * h2load: Consider all h2 HEADERS when counting bytes and
    recording ttfb
  * h2load: Ignore 1xx status code
  * nghttpd: Free SSL_CTX on exit
  * nghttpx: OpenSSL needs SSL_CTX_set_recv_max_early_data
  * nghttpx: OpenSSL needs SSL_CTX_set_recv_max_early_data
  * cmake: Require OpenSSL &gt;= 1.1.1
  * Add nghttp2_select_alpn and deprecate
    nghttp2_select_next_protocol
  * nghttpx: Add --alpn-list and deprecate --npn-list
  * h2load: Add --alpn-list and deprecate --npn-list
  * Remove NPN
  * src: Support building with aws-lc
  * Avoid detecting OpenSSL 3.2 as quictls
  * Use nghttp3_pri_parse_priority added since nghttp3 v1.1.0
  * h2load: Fix IPv6 address in :authority
  * h2load: Fix IPv6 address in :authority
  * nghttpx: Propagate stream priority from backend to
    frontend
  * nghttpx: Propagate stream priority from backend to
    frontend
  * Merge pull request #1991 from nghttp2/get-and-parse-
    extpri
  * Add API to get and parse RFC 9218 priority
  * nghttpx: Prefer __FILE_NAME__ if defined</changelog>
  <changelog author="pgajdos@suse.com" date="1710763200">- version update to 1.60.0
  * makerelease.sh: Speed up git submodule
  * Speed up git clone
  * build(deps): bump actions/cache from 3 to 4
  * Fixing the build and install trees
  * build(deps): bump microsoft/setup-msbuild from 1 to 2
  * nghttpx: Set ocsp response to SSL in case of boringssl
  * Run with python3
  * src: Certificate Compression with boringssl
  * Fix missing newline
  * Switch to aws lc
  * Libbrotli fixup
  * Deprecate RFC 7540 priorities (aka stream dependencies)
  * Let dependabot manage go modules
  * build(deps): bump golang.org/x/net from 0.20.0 to 0.21.0
  * integration-tests: Omit unused parameters
  * Munit
  * Introduce nghttp2_ssize API
  * Move deprecated warning upfront
  * Describe RFC 7540 priorities deprecation plan
  * Apps migrate nghttp2 ssize
  * src: Remove unused functions
  * Reconsider ssize t usage in src
  * Use GitHub private vulnerability reporting
  * Move security policy to GitHub standard location
  * Bump mruby to 3.3.0
  * Bump llhttp to 48588093ca4219b5f689acfc9ebea9e4c8c37663
  * h2load: Add --sni option
  * Bump ngtcp2 dependencies
  * mruby: Adopt deprecation of mrbc_ prefix
  * neverbleed: Define _GNU_SOURCE for pthread_setaffinity_np
  * bpf: Pre-expand aes key
  * mruby: Exclude mrdb gem which causes nghttpx to crash
  * nghttpx: Reuse EVP_CIPHER_CTX for QUIC connection ID encryption
  * Run apt-get update before install
  * src: Deal with the case that send_quantum &lt; max_udp_payload_size
  * nghttpx: Remove SHRPX_QUIC_MAX_UDP_PAYLOAD_SIZE
  * Fix build when AI_NUMERICSERV is undefined
- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang_path macro, [bsc#1212476]</changelog>
  <changelog author="mpluskal@suse.com" date="1710763201">- Update keyring with current key</changelog>
  <changelog author="adam.majer@suse.de" date="1712145600">- gcc7.patch: Fix compilation for SLE-15 (jsc#PED-8206)</changelog>
  <changelog author="pgajdos@suse.com" date="1712232000">- version update to 1.61.0
  * Fixes CVE-2024-28182 [bsc#1221399]
  * nghttpx: Shutdown h3 stream read with trailer as well by @tatsuhiro-t in #2087
  * Checkout with submodules by @jonaski in #2093
  * Respect BUILD_STATIC_LIBS and add option for tests by @jonaski in #2092
  * build(deps): bump golang.org/x/net from 0.21.0 to 0.22.0 by @dependabot in #2097
  * Workaround llvm issue on github ubuntu runner by @tatsuhiro-t in #2098
  * docker: Use copy --link by @tatsuhiro-t in #2099
  * Nghttpx header idle timeout by @tatsuhiro-t in #2100
  * nghttpx: Fix frontend-header-timeout does not work in config file by @tatsuhiro-t in #2101
  * Rewrite hexdump by @tatsuhiro-t in #2102
  * Switch to distroless/base-nossl by @tatsuhiro-t in #2103
  * Bump ngtcp2 by @tatsuhiro-t in #2105
  * nghttpx: Simplify quic connection close handling by @tatsuhiro-t in #2106
  * build(deps): bump github.com/quic-go/quic-go from 0.41.0 to 0.42.0 by @dependabot in #2107
  * autotools: Use tar-ustar automake option by @tatsuhiro-t in #2108
  * Automate release process by @tatsuhiro-t in #2109
  * autotools: Switch to tar-pax by @tatsuhiro-t in #2110
  * nghttpx: Drop a UDP datagram from well-known port by @tatsuhiro-t in #2111
  * nghttpx: Fix port byte order by @tatsuhiro-t in #2112
  * h2load: Allow host header to be overridden by @tatsuhiro-t in #2113
  * nghttpx: Rework QUIC stateless reset packet size by @tatsuhiro-t in #2114
  * nghttpx: More QUIC prohibited ports by @tatsuhiro-t in #2115
  * Add actions/stale by @tatsuhiro-t in #2116
  * nghttpx: Discard UDP datagram that is too short to be a valid QUIC packet by @tatsuhiro-t in #2117
  * nghttp: Support SSLKEYLOGFILE by @tatsuhiro-t in #2119
  * No rfc7540 priority fix by @tatsuhiro-t in #2120
  * Further reduce Stateless reset emission by @tatsuhiro-t in #2122
  * nghttpx: Rework Connection ID construction by @tatsuhiro-t in #2124
  * Nghttpx faster worker lookup by @tatsuhiro-t in #2125
  * nghttpx: Split thread into worker_process and thread by @tatsuhiro-t in #2126
  * bpf: Drop bad QUIC packet by @tatsuhiro-t in #2127
  * cmake: check SSL_provide_quic_data when ENABLE_HTTP3 is ON by @jimmy-park in #2128
  * nghttpx: Allocate 3 bits for QUIC configuration in Connection ID by @tatsuhiro-t in #2129
  * nghttpx: Migrate to ares_getaddrinfo by @tatsuhiro-t in #2132
  * Bump munit by @tatsuhiro-t in #2131
  * nghttpx: Fix error message by @tatsuhiro-t in #2133
  * nghttpd: Fix read stall by @tatsuhiro-t in #2134</changelog>
  <changelog author="dmueller@suse.com" date="1718625600">- update to 1.62.1:
  * nghttpx: Fix batch UDP QUIC packet dropped on GRO read
- update to 1.62.0:
  * nghttpx: Fix QUIC stateless reset stack buffer overflow
  * Require c-ares &gt;= 1.16.0 for ares_getaddrinfo
  * Require C++20 compiler
  * Adopt std::to_array and remove make_array
  * nghttpx: Define APIEndpoints separately
  * nghttpx: Do not send error/status body when method is HEAD
  * nghttpx: Fix alignment issues in BlockAllocator
  * nghttpx: Simplify parameter declaration for ipc_fd functions
  * nghttpx: Add extent to ipc_fd explicitly
  * Make make_byte_ref return std::span
  * Make util::decode_hex return std::span
  * Rewrite util::parse_uint
  * Let base64::decode return std::span
  * Refactor StringRef
  * Stringref refactor c str and str
  * Add StringRef literal operator and remove StringRef::from_lit
  * Make StringRef(const std::string&amp;) implicit
  * Add http2::make_field family functions
  * Remove std::string conversion operator from StringRef
  * Optimize StringRef comparisons against c-string
  * Pack more quic pkt
  * nghttpx: Dynamic GSO failover
  * Refactor ImmutableString
  * nghttpx: Refactor QUIC data path
  * nghttpx: Fix inherited TCP port comparison
  * make_websocket_accept_token: Lesser conversions
  * Add http3::make_field family functions
  * Remove unnecessary namespace qualifications
  * Refactor http utils
  * Refactor streq
  * Remove util::streq and let StringRef operator== deal with it
  * Update the link for the Prefix.pdf document. fix #2178
  * Introduce typed nghttp2_min and nghttp2_max
- drop gcc7.patch (obsolete, we require C++20 now)</changelog>
  <changelog author="pgajdos@suse.com" date="1731412800">- version update to 1.64.0
  1.64.0
  * Change clang-format options by @tatsuhiro-t in #2240
  * build(deps): bump github.com/quic-go/quic-go from 0.46.0 to 0.47.0 by @dependabot in #2243
  * build(deps): bump golang.org/x/net from 0.28.0 to 0.29.0 by @dependabot in #2244
  * nghttp2_map: Port ngtcp2 changes by @tatsuhiro-t in #2245
  * h2load: Fix UDP datagram send/recv metric by @tatsuhiro-t in #2248
  * build(deps): bump golang.org/x/net from 0.29.0 to 0.30.0 by @dependabot in #2252
  * fix race condition on h1 connection close by @TuxInvader in #2249
  * Gha ubuntu 24.04 by @tatsuhiro-t in #2254
  * GHA: Run tests for i686-w64-mingw32 host by @tatsuhiro-t in #2255
  * cmake: Fix c-ares v1.34.0 version detection failure by @tatsuhiro-t in #2256
  * fix: -Wextra-semi errors in nghttp2_helper.h by @codebytere in #2258
  * clang-format macros that do not need semicolon at the end by @tatsuhiro-t in #2259
  * Remove extra semicolons by @tatsuhiro-t in #2260
  * Bump ngtcp2 and its dependencies by @tatsuhiro-t in #2261
  * Do not allow '@' in :authority or host field values by @tatsuhiro-t in #2262
  * h2load: GRO buffer size should be 64KiB by @tatsuhiro-t in #2263
  * Bump libbpf to v1.4.6 by @tatsuhiro-t in #2264
  * Update nghttp2_check_authority doc by @tatsuhiro-t in #2265
  1.63.0
  * Bump libbpf to v1.4.2 by @tatsuhiro-t in #2191
  * build(deps): bump golang.org/x/net from 0.24.0 to 0.25.0 by @dependabot in #2193
  * nghttpx: Fix batch UDP QUIC packet dropped on GRO read by @tatsuhiro-t in #2196
  * CMakeLists.txt: allow to compile the C only lib without CXX compiler by @ThomasDevoogdt in #2200
  * build(deps): bump github.com/quic-go/quic-go from 0.43.1 to 0.44.0 by @dependabot in #2197
  * Fix compiler versions in readme by @ryandesign in #2203
  * build(deps): bump golang.org/x/net from 0.25.0 to 0.26.0 by @dependabot in #2205
  * build(deps): bump github.com/quic-go/quic-go from 0.44.0 to 0.45.0 by @dependabot in #2206
  * Bump ngtcp2 and its dependencies by @tatsuhiro-t in #2207
  * build(deps): bump docker/build-push-action from 5 to 6 by @dependabot in #2208
  * Add wolfSSL support by @tatsuhiro-t in #2209
  * Append --shallow-submodules to git clone --recursive by @tatsuhiro-t in #2210
  * Always append options to extra options by @tatsuhiro-t in #2211
  * build(deps): bump github.com/quic-go/quic-go from 0.45.0 to 0.45.1 by @dependabot in #2213
  * Disable dependency tracking by @tatsuhiro-t in #2214
  * Fix Dockerfile.android build failure by @tatsuhiro-t in #2215
  * Fix UDP_GRO struct cmsghdr data type by @tatsuhiro-t in #2216
  * GHA: Suppress warnings by @tatsuhiro-t in #2217
  * Fix levenshtein initialization by @tatsuhiro-t in #2218
  * build(deps): bump golang.org/x/net from 0.26.0 to 0.27.0 by @dependabot in #2220
  * Undefine NGHTTP2_NO_SSIZE_T if BUILDING_NGHTTP2 is defined by @tatsuhiro-t in #2224
  * Bump clang format by @tatsuhiro-t in #2226
  * Suppress old compiler error by @tatsuhiro-t in #2228
  * build(deps): bump github.com/quic-go/quic-go from 0.45.1 to 0.45.2 by @dependabot in #2229
  * build(deps): bump golang.org/x/net from 0.27.0 to 0.28.0 by @dependabot in #2231
  * build(deps): bump github.com/quic-go/quic-go from 0.45.2 to 0.46.0 by @dependabot in #2232
  * Bump ngtcp2 and its dependencies by @tatsuhiro-t in #2236
  * Bump libbpf to v1.4.5 by @tatsuhiro-t in #2237
  * Update go by @tatsuhiro-t in #2238
  * levenshtein: Use size_t by @tatsuhiro-t in #2239</changelog>
  <changelog author="pgajdos@suse.com" date="1774008000">- added patches
  CVE-2026-27135: assertion failure due to missing state validation can lead to DoS (bsc#1259845)
  * nghttp2-CVE-2026-27135.patch</changelog>
</package>
<package pkgid="c7745ca6f1a418c8273bbe062e2aaf21db9bef4c8934fdede79ac30ef3fbbe65" name="nscd" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.32.1"/>
  <changelog author="schwab@suse.de" date="1711022400">- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
  [#30945])
- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
  sched_getcpu (BZ #31479)</changelog>
  <changelog author="schwab@suse.de" date="1712145600">- Add workaround for invalid use of libc_nonshared.a with non-SUSE libc
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
</package>
<package pkgid="2588234019b8c4b22c4a21454c85094cfea52da85bf89dbb0f7a32786ad6985f" name="nscd" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.37.1"/>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
</package>
<package pkgid="643f7aebc6a5a53778697c507fdd3351e18b4a3dba0055e634eb35b19ee60acc" name="nscd" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.40.1"/>
  <changelog author="giuliano.belinassi@suse.com" date="1714564800">- glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
  nscd: Stack-based buffer overflow in netgroup cache
  (CVE-2024-33599, bsc#1223423, BZ #31677)
- glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
  nscd: Avoid null pointer crashes after notfound response
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
  nscd: Do not send missing not-found response in addgetnetgrentX
  (CVE-2024-33600, bsc#1223424, BZ #31678)
- glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
  netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
  CVE-2024-33602, bsc#1223425, BZ #31680)</changelog>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1768824000">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256437, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
</package>
<package pkgid="a3665174a09094420e68348d6a496a63d4d8808442cc6cc1eaead8612e4ee91e" name="nscd" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.43.1"/>
  <changelog author="schwab@suse.de" date="1715083200">- nscd-netgroup-cache-timeout.patch: Use time_t for return type of
  addgetnetgrentX (CVE-2024-33602, bsc#1223425)
- Also add libc_nonshared.a workaround to 32-bit x86 compat package
  (bsc#1221482)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1768824000">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256437, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
  <changelog author="schwab@suse.de" date="1771329600">- nss-missing-checks.patch: nss: Missing checks in __nss_configure_lookup,
  __nss_database_get (bsc#1258319, BZ #28940)</changelog>
</package>
<package pkgid="7937a17f17eede9c95df6c5fd49b19f9b98d52a311fdadd5402672db52c70102" name="nscd" arch="x86_64">
  <version epoch="0" ver="2.38" rel="150600.14.46.1"/>
  <changelog author="giuliano.belinassi@suse.com" date="1715169600">- ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
  for _start routine (bsc#1221940)</changelog>
  <changelog author="schwab@suse.de" date="1716465600">- Also include stat64 in the 32-bit libc_nonshared.a workaround
  (bsc#1221482)</changelog>
  <changelog author="schwab@suse.de" date="1716984000">- Fix typo in last change</changelog>
  <changelog author="schwab@suse.de" date="1721304000">- s390x-wcsncmp.patch: s390x: Fix segfault in wcsncmp (bsc#1228042, BZ
  [#31934])</changelog>
  <changelog author="schwab@suse.de" date="1726660800">- Use nss-systemd by default also in SLE (bsc#1230638)</changelog>
  <changelog author="schwab@suse.de" date="1728475200">- Apply libc_nonshared.a workaround also on s390x and ppc64le (bsc#1231051)</changelog>
  <changelog author="schwab@suse.de" date="1733140800">- Remove nss-systemd from default nsswitch.conf (bsc#1233699)</changelog>
  <changelog author="schwab@suse.de" date="1736251200">- Correctly determine livepatching support</changelog>
  <changelog author="schwab@suse.de" date="1736424000">- prctl-syscall-wrapper.patch: Linux: Switch back to assembly syscall
  wrapper for prctl (bsc#1234665, BZ #29770)</changelog>
  <changelog author="schwab@suse.de" date="1737633600">- assert-message-allocation.patch: Fix underallocation of abort_msg_s
  struct (CVE-2025-0395, bsc#1236282, BZ #32582))</changelog>
  <changelog author="schwab@suse.de" date="1742385600">- Bump minimal kernel version to 4.3 to enable use of direct socketcalls
  on x86-32 and s390x (bsc#1234713)</changelog>
  <changelog author="schwab@suse.de" date="1742817600">- Mark functions in libc_nonshared.a as hidden (bsc#1239883)</changelog>
  <changelog author="schwab@suse.de" date="1743681600">- pthread-wakeup.patch: pthreads NPTL: lost wakeup fix 2 (bsc#1234128, BZ
  [#25847])</changelog>
  <changelog author="schwab@suse.de" date="1744891200">- Add support for userspace livepatching for ppc64le (jsc#PED-11850)</changelog>
  <changelog author="schwab@suse.de" date="1747656000">- static-setuid-ld-library-path.patch: elf: Ignore LD_LIBRARY_PATH and
  debug env var for setuid for static (CVE-2025-4802, bsc#1243317)</changelog>
  <changelog author="schwab@suse.de" date="1752753600">- nscd-gethst-race.patch: Reduce chance of crash when using nscd GETFDHST
  (bsc#1240058)</changelog>
  <changelog author="schwab@suse.de" date="1753358400">- regcomp-double-free.patch: posix: Fix double-free after allocation
  failure in regcomp (CVE-2025-8058, bsc#1246965, BZ #33185)</changelog>
  <changelog author="schwab@suse.de" date="1768824000">- memalign-overflow-check.patch: memalign: reinstate alignment overflow
  check (CVE-2026-0861, bsc#1256766, BZ #33796)
- nss-dns-getnetbyaddr.patch: resolv: Fix NSS DNS backend for getnetbyaddr
  (CVE-2026-0915, bsc#1256822, BZ #33802)
- nptl-optimize-trylock.patch: nptl: Optimize trylock for high cache
  contention workloads (bsc#1256437, BZ #33704)
- wordexp-wrde-reuse.patch: posix: Reset wordexp_t fields with WRDE_REUSE
  (CVE-2025-15281, bsc#1257005, BZ #33814)</changelog>
  <changelog author="schwab@suse.de" date="1771329600">- nss-missing-checks.patch: nss: Missing checks in __nss_configure_lookup,
  __nss_database_get (bsc#1258319, BZ #28940)</changelog>
  <changelog author="schwab@suse.de" date="1774872000">- resolv-count-resource-records.patch: resolv: Count records correctly
  (CVE-2026-4437, bsc#1260078, BZ #34014)
- resolv-check-hostname.patch: resolv: Check hostname for validity
  (CVE-2026-4438, bsc#1260082, BZ #34015)</changelog>
</package>
<package pkgid="8f2237a8557d924c951db68681b4884d355393feb2e5c6c0fbe9834597ac4162" name="ntfs-3g" arch="x86_64">
  <version epoch="0" ver="2022.5.17" rel="150000.3.24.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1416312000">- Enable ACL support
- Buildrequire libuuid-devel and hwinfo-devel, silences build warning
  about the need of that libraries.</changelog>
  <changelog author="meissner@suse.com" date="1420113600">- build with PIE</changelog>
  <changelog author="Greg.Freemyer@gmail.com" date="1423742400">- remove buildall.sh file and spec file reference
    It is a remnant from a previous maintainer and is well out of date</changelog>
  <changelog author="idonmez@suse.com" date="1433246400">- Update to STABLE Version 2015.3.14 (March 31, 2015)
    ntfs-3g: Fixed inserting a new ACL after wiping out by chkdsk
    ntfs-3g: Fixed Windows-type inheritance
    ntfs-3g: Fixed ignoring the umask mount option when permissions are used
    ntfs-3g: Fixed checking permissions when Posix ACLs are compiled in but not enabled
    ntfs-3g: Disabled option remove_hiberfile on read-only mounts
    ntfs-3g: Implemented an extended attribute to get/set EAs
    ntfs-3g: Avoid full runlist updating in more situations
    ntfs-3g: Update ctime after setting an ACL
    ntfs-3g: Use MFT record 15 for the first extent to MFT:DATA
    ntfs-3g: Ignore the sloppy mount option (-s)
    ntfs-3g: Implemented FITRIM (fstrim) ioctl
    ntfs-3g: Reengineered the compression algorithm
    ntfsprogs: Added manuals for ntfsdecrypt, ntfswipe, ntfstruncate and ntfsfallocate</changelog>
  <changelog author="Greg.Freemyer@gmail.com" date="1458561600">- change soname to 87
- add "--enable-extras" arg to configure
  Start including the extra programs: ntfswipe, ntfstruncate, ntfsrecover
- add "--enable-crypto" arg to configure
  Start including the optional program: ntfsdecrypt
- add "--enable-quarantined" arg to configure
  Start including the optional programs: ntfsck, ntfsdump_logfile, ntfsfallocate, ntfsmftalloc, ntfsmove
  Put these "quarantined" applications in a new -extra sub-project
- add specfile updates to support the above new program builds
- create a -extra sub-package to hold the "quarantined" utilities.
- update to stable Versions 2016.2.22 (Mar 21, 2016 release date)
  Changes to NTFS-3G driver:
  – Write as much data as possible in compressed attribute pwrite
  – Fixed getting space for making an index non resident
  – Alleviated constraints relative to reparse points
  – Fixed special case of decompressing a runlist
  – Fixed returning the trimming count to fstrim()
  – Fixed the range of valid subauthority counts in a SID
  – Updated the read-only flag even when the security attribute was cached
  – Defended against reusing data from an invalid MFT record
  – Simplified NTFS ACLs when group same as owner and same permission as world
  – Packed/unpacked st_rdev transported as 32-bits on Solaris 64-bits
  – Zero uninitialized bytes before writing compressed data
  – Clear the environment when starting mount or umount
  – Implemented rewinding a directory in lowntfs-3g
  – Use incremental offsets when reading a directory in lowntfs-3g
  Changes to mkntfs:
  – Make installing mkntfs /sbin symlinks dependent on ENABLE_MOUNT_HELPER
  – Mention the starting sector when it overflows in mkntfs
  – Upgraded the upper-case table to same as Windows 7, 8 and 10
  Changes to ntfsresize:
  – Fixed relocating the MFT runlists
  – Decode the full list of bad clusters
  – Fixed resizing an extended bad cluster list
  Changes to ntfsclone:
  – Decoded the full list of bad clusters
  Changes to ntfsinfo:
  – Displayed reparse point information
  Changes to ntfsdecrypt:
  – Fixed DESX decryption
  Changes to ntfswipe:
  – Added clarifications about several options to the manual
  New ntfsprogs tool:
  – Included ntfsrecover to recover the updates committed by Windows (experimental)
  Overall:
  – Made a general cleanup of endianness types for easier checks</changelog>
  <changelog author="Greg.Freemyer@gmail.com" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zenitur@ya.ru" date="1491048000">- Fix SLES 11 build.</changelog>
  <changelog author="qzheng@suse.com" date="1554206400">- Add CVE-2019-9755.patch to fix a heap-based buffer overflow
  issue (CVE-2019-9755, boo#1130165).</changelog>
  <changelog author="mgorse@suse.com" date="1630497600">- Update to version 2021.8.22 (boo#1189720):
  * Fixed compile error when building with libfuse &lt; 2.8.0
  * Fixed obsolete macros in configure.ac
  * Signalled support of UTIME_OMIT to external libfuse2
  * Fixed an improper macro usage in ntfscp.c
  * Updated the repository change in the README
  * Fixed vulnerability threats caused by maliciously tampered
    NTFS partitions
  * Security fixes: CVE-2021-33285, CVE-2021-33286, CVE-2021-33287,
    CVE-2021-33289, CVE-2021-35266, CVE-2021-35267, CVE-2021-35268,
    CVE-2021-35269, CVE-2021-39251, CVE-2021-39252, CVE-2021-39253,
    CVE_2021-39254, CVE-2021-39255, CVE-2021-39256, CVE-2021-39257,
    CVE-2021-39258, CVE-2021-39259, CVE-2021-39260, CVE-2021-39261,
    CVE-2021-39262, CVE-2021-39263.
- Sover is now 89
  * Changes in version 2017.3.23
  * Delegated processing of special reparse points to external plugins
  * Allowed kernel cacheing by lowntfs-3g when not using Posix ACLs
  * Enabled fallback to read-only mount when the volume is hibernated
  * Made a full check for whether an extended attribute is allowed
  * Moved secaudit and usermap to ntfsprogs (now ntfssecaudit and ntfsusermap)
  * Enabled encoding broken UTF-16 into broken UTF-8
  * Autoconfigured selecting &lt;sys/sysmacros.h&gt; vs &lt;sys/mkdev&gt;
  * Allowed using the full library API on systems without extended attributes support
  * Fixed DISABLE_PLUGINS as the condition for not using plugins
  * Corrected validation of multi sector transfer protected records
  * Denied creating/removing files from $Extend
  * Returned the size of locale encoded target as the size of symlinks
- Update URL.
- Drop CVE-2019-9755.patch: included upstream.
- Add ntfs-3g-old-api.patch: back out potentially API-incompatible
  changes.
- Add ntfs-3g-old-prognames.patch: rename ntfsusermap and
  ntfssecaudit to their old names.
- Add libtool to BuildRequires, and regenerate configure and
  Makefile.in..</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- update to 2022.5.17 (bsc#1199978):
  * Improved defence against maliciously tampered NTFS partitions
  * Improved defence against improper use of options
  * Updated the documentation
  * CVE-2022-30783, CVE-2022-30785, CVE-2022-30787
  * CVE-2021-46790, CVE-2022-30784, CVE-2022-30786,
  * CVE-2022-30788, CVE-2022-30789
- Rebase ntfs-3g-old-api.patch and ntfs-3g-old-prognames.patch.</changelog>
  <changelog author="yfjiang@suse.com" date="1666872000">- Add patches to fix CVE-2022-40284 (bsc#1204734):
  * ntfs-3g-CVE-2022-40284-0001-Rejected-zero-sized-runs.patch
  * ntfs-3g-CVE-2022-40284-0002-Avoided-merging-runlists-with-no-runs.patch</changelog>
  <changelog author="mgorse@suse.com" date="1718020800">- Add ntfs3g-unistr-use-after-free.patch: fix a use after free in
  ntfs_uppercase_mbs (boo#1226007 CVE-2023-52890).</changelog>
  <changelog author="sreeves@suse.com" date="1776427200">- Add ntfs3g-heap-overflow.patch: bsc#1262216 CVE-2026-40706.</changelog>
</package>
<package pkgid="b41e876b0cc9202075b46d32824b283a134cdc97bc04465cf6f25d57bb6109b1" name="ntfs-3g_ntfsprogs" arch="src">
  <version epoch="0" ver="2022.5.17" rel="150000.3.24.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1329393600">- Libraries back to %{_libdir}, /usr merge project.</changelog>
  <changelog author="jengelh@inai.de" date="1338033600">- Remove redundant tags/sections from specfile
- Parallel build with %_smp_mflags</changelog>
  <changelog author="jengelh@inai.de" date="1348401600">- Avoid static and internal libraries - use system libfuse instead
- Avoid %makeinstall to fix installation on non-SUSE</changelog>
  <changelog author="badshah400@gmail.com" date="1359633600">- Add ntfs-3g_ntfsprogs-use-caution-with-fastboot.patch to
  prevent partitions with metadata cached in Windows (when
  FastBoot is enabled) from being mounted; patch taken from
  upstream git and rebased (bnc#798337 / rh#859373).</changelog>
  <changelog author="idonmez@suse.com" date="1366027200">- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="Greg.Freemyer@gmail.com" date="1369051200">- Upgrade to STABLE Version 2013.1.13 (January 14, 2013)
    ntfs-3g: fixed returned files types in readdir()
    ntfs-3g: force option ‘ro’ when mounting a read-only device
    ntfs-3g: keep the name of a deleted file in place for easier undeletion
    ntfs-3g: accept multiple read-only mounts
    ntfs-3g: improved Windows-type ACL inheritance, as needed by Windows 8
    ntfs-3g: avoid unnecessary runlist update when appending data to a file
    ntfs-3g: added inheritance of the set-group-id flag
    ntfs-3g: deny mounting when fast restart mode of Windows 8 is detected
    ntfs-3g: reject getting/setting DOS names on hard linked files
    ntfsclone: fixed wiping user data when creating metadata images
    ntfsclone: implemented a new option to set a new serial number
    ntfsfix: implemented fixing the backup boot sector
    ntfsfix: fixed clearing the bad cluster list
    ntfsinfo: added allocation data to the volume parameters summary
    ntfsinfo: output the numbers of runs and fragments for the selected file
    ntfslabel: implemented a new option to set a new serial number
    ntfswipe: added optional wiping of file tails and undelete data
    mkntfs: insert an $Info stream in $UpCase to comply with Windows 8
    openindianas: merged OpenIndiana requirements into the driver and fuse-lite
- remove ntfs-3g_ntfsprogs-use-caution-with-fastboot.patch, now in upstream</changelog>
  <changelog author="tabraham@suse.com" date="1398168000">- Upgrade to STABLE Version 2014.2.15 (February 23, 2014)
    libntfs: added use of hd library to get the legacy BIOS geometry
    libntfs: switched to /proc/mounts for checking existing mounts
    libntfs: fixed usa checking by ntfsck on 4K sector disks
    libntfs: fixed processing compressed data beyond file size (Windows 8 compliance)
    libntfs: fixed expanding a resident attribute without inserting holes
    libntfs: allow DACLs to not have any ACE
    libntfs: ignore unmapped regions when checking whether sparse
    libntfs: upgraded the Win32 interface for use with ntfsprogs
    ntfsresize: enabled relocating the MFT when shrinking a volume
    ntfsresize: fixed trying to update the MFT and Bitmap on a test run
    ntfsresize: fixed updating all the MFT runs in a relocated MFT
    ntfsresize: set the backup boot sector when the size is reliable
    ntfsresize: reserved a single sector for the backup boot sector
    ntfsundelete: output the modification time when scanning files
    ntfsundelete: ported to Windows
    ntfsclone: fixed wiping fragmented metadata when creating a metadata image
    ntfsclone: allowed cloning a file system despite allocation errors
    ntfsclone: fixed bad copying of the backup boot sector
    ntfsclone: ported to Windows
    ntfsdecrypt: made compatible with libgrypt-1.6</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1416312000">- Enable ACL support
- Buildrequire libuuid-devel and hwinfo-devel, silences build warning
  about the need of that libraries.</changelog>
  <changelog author="meissner@suse.com" date="1420113600">- build with PIE</changelog>
  <changelog author="Greg.Freemyer@gmail.com" date="1423742400">- remove buildall.sh file and spec file reference
    It is a remnant from a previous maintainer and is well out of date</changelog>
  <changelog author="idonmez@suse.com" date="1433246400">- Update to STABLE Version 2015.3.14 (March 31, 2015)
    ntfs-3g: Fixed inserting a new ACL after wiping out by chkdsk
    ntfs-3g: Fixed Windows-type inheritance
    ntfs-3g: Fixed ignoring the umask mount option when permissions are used
    ntfs-3g: Fixed checking permissions when Posix ACLs are compiled in but not enabled
    ntfs-3g: Disabled option remove_hiberfile on read-only mounts
    ntfs-3g: Implemented an extended attribute to get/set EAs
    ntfs-3g: Avoid full runlist updating in more situations
    ntfs-3g: Update ctime after setting an ACL
    ntfs-3g: Use MFT record 15 for the first extent to MFT:DATA
    ntfs-3g: Ignore the sloppy mount option (-s)
    ntfs-3g: Implemented FITRIM (fstrim) ioctl
    ntfs-3g: Reengineered the compression algorithm
    ntfsprogs: Added manuals for ntfsdecrypt, ntfswipe, ntfstruncate and ntfsfallocate</changelog>
  <changelog author="Greg.Freemyer@gmail.com" date="1458561600">- change soname to 87
- add "--enable-extras" arg to configure
  Start including the extra programs: ntfswipe, ntfstruncate, ntfsrecover
- add "--enable-crypto" arg to configure
  Start including the optional program: ntfsdecrypt
- add "--enable-quarantined" arg to configure
  Start including the optional programs: ntfsck, ntfsdump_logfile, ntfsfallocate, ntfsmftalloc, ntfsmove
  Put these "quarantined" applications in a new -extra sub-project
- add specfile updates to support the above new program builds
- create a -extra sub-package to hold the "quarantined" utilities.
- update to stable Versions 2016.2.22 (Mar 21, 2016 release date)
  Changes to NTFS-3G driver:
  – Write as much data as possible in compressed attribute pwrite
  – Fixed getting space for making an index non resident
  – Alleviated constraints relative to reparse points
  – Fixed special case of decompressing a runlist
  – Fixed returning the trimming count to fstrim()
  – Fixed the range of valid subauthority counts in a SID
  – Updated the read-only flag even when the security attribute was cached
  – Defended against reusing data from an invalid MFT record
  – Simplified NTFS ACLs when group same as owner and same permission as world
  – Packed/unpacked st_rdev transported as 32-bits on Solaris 64-bits
  – Zero uninitialized bytes before writing compressed data
  – Clear the environment when starting mount or umount
  – Implemented rewinding a directory in lowntfs-3g
  – Use incremental offsets when reading a directory in lowntfs-3g
  Changes to mkntfs:
  – Make installing mkntfs /sbin symlinks dependent on ENABLE_MOUNT_HELPER
  – Mention the starting sector when it overflows in mkntfs
  – Upgraded the upper-case table to same as Windows 7, 8 and 10
  Changes to ntfsresize:
  – Fixed relocating the MFT runlists
  – Decode the full list of bad clusters
  – Fixed resizing an extended bad cluster list
  Changes to ntfsclone:
  – Decoded the full list of bad clusters
  Changes to ntfsinfo:
  – Displayed reparse point information
  Changes to ntfsdecrypt:
  – Fixed DESX decryption
  Changes to ntfswipe:
  – Added clarifications about several options to the manual
  New ntfsprogs tool:
  – Included ntfsrecover to recover the updates committed by Windows (experimental)
  Overall:
  – Made a general cleanup of endianness types for easier checks</changelog>
  <changelog author="Greg.Freemyer@gmail.com" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zenitur@ya.ru" date="1491048000">- Fix SLES 11 build.</changelog>
  <changelog author="qzheng@suse.com" date="1554206400">- Add CVE-2019-9755.patch to fix a heap-based buffer overflow
  issue (CVE-2019-9755, boo#1130165).</changelog>
  <changelog author="mgorse@suse.com" date="1630497600">- Update to version 2021.8.22 (boo#1189720):
  * Fixed compile error when building with libfuse &lt; 2.8.0
  * Fixed obsolete macros in configure.ac
  * Signalled support of UTIME_OMIT to external libfuse2
  * Fixed an improper macro usage in ntfscp.c
  * Updated the repository change in the README
  * Fixed vulnerability threats caused by maliciously tampered
    NTFS partitions
  * Security fixes: CVE-2021-33285, CVE-2021-33286, CVE-2021-33287,
    CVE-2021-33289, CVE-2021-35266, CVE-2021-35267, CVE-2021-35268,
    CVE-2021-35269, CVE-2021-39251, CVE-2021-39252, CVE-2021-39253,
    CVE_2021-39254, CVE-2021-39255, CVE-2021-39256, CVE-2021-39257,
    CVE-2021-39258, CVE-2021-39259, CVE-2021-39260, CVE-2021-39261,
    CVE-2021-39262, CVE-2021-39263.
- Sover is now 89
  * Changes in version 2017.3.23
  * Delegated processing of special reparse points to external plugins
  * Allowed kernel cacheing by lowntfs-3g when not using Posix ACLs
  * Enabled fallback to read-only mount when the volume is hibernated
  * Made a full check for whether an extended attribute is allowed
  * Moved secaudit and usermap to ntfsprogs (now ntfssecaudit and ntfsusermap)
  * Enabled encoding broken UTF-16 into broken UTF-8
  * Autoconfigured selecting &lt;sys/sysmacros.h&gt; vs &lt;sys/mkdev&gt;
  * Allowed using the full library API on systems without extended attributes support
  * Fixed DISABLE_PLUGINS as the condition for not using plugins
  * Corrected validation of multi sector transfer protected records
  * Denied creating/removing files from $Extend
  * Returned the size of locale encoded target as the size of symlinks
- Update URL.
- Drop CVE-2019-9755.patch: included upstream.
- Add ntfs-3g-old-api.patch: back out potentially API-incompatible
  changes.
- Add ntfs-3g-old-prognames.patch: rename ntfsusermap and
  ntfssecaudit to their old names.
- Add libtool to BuildRequires, and regenerate configure and
  Makefile.in..</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- update to 2022.5.17 (bsc#1199978):
  * Improved defence against maliciously tampered NTFS partitions
  * Improved defence against improper use of options
  * Updated the documentation
  * CVE-2022-30783, CVE-2022-30785, CVE-2022-30787
  * CVE-2021-46790, CVE-2022-30784, CVE-2022-30786,
  * CVE-2022-30788, CVE-2022-30789
- Rebase ntfs-3g-old-api.patch and ntfs-3g-old-prognames.patch.</changelog>
  <changelog author="yfjiang@suse.com" date="1666872000">- Add patches to fix CVE-2022-40284 (bsc#1204734):
  * ntfs-3g-CVE-2022-40284-0001-Rejected-zero-sized-runs.patch
  * ntfs-3g-CVE-2022-40284-0002-Avoided-merging-runlists-with-no-runs.patch</changelog>
  <changelog author="mgorse@suse.com" date="1718020800">- Add ntfs3g-unistr-use-after-free.patch: fix a use after free in
  ntfs_uppercase_mbs (boo#1226007 CVE-2023-52890).</changelog>
  <changelog author="sreeves@suse.com" date="1776427200">- Add ntfs3g-heap-overflow.patch: bsc#1262216 CVE-2026-40706.</changelog>
</package>
<package pkgid="4de47443f15a5264d97c0c3475b46b272cbcb835b08a36375809c9af768a6a60" name="ntfsprogs" arch="x86_64">
  <version epoch="0" ver="2022.5.17" rel="150000.3.24.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1416312000">- Enable ACL support
- Buildrequire libuuid-devel and hwinfo-devel, silences build warning
  about the need of that libraries.</changelog>
  <changelog author="meissner@suse.com" date="1420113600">- build with PIE</changelog>
  <changelog author="Greg.Freemyer@gmail.com" date="1423742400">- remove buildall.sh file and spec file reference
    It is a remnant from a previous maintainer and is well out of date</changelog>
  <changelog author="idonmez@suse.com" date="1433246400">- Update to STABLE Version 2015.3.14 (March 31, 2015)
    ntfs-3g: Fixed inserting a new ACL after wiping out by chkdsk
    ntfs-3g: Fixed Windows-type inheritance
    ntfs-3g: Fixed ignoring the umask mount option when permissions are used
    ntfs-3g: Fixed checking permissions when Posix ACLs are compiled in but not enabled
    ntfs-3g: Disabled option remove_hiberfile on read-only mounts
    ntfs-3g: Implemented an extended attribute to get/set EAs
    ntfs-3g: Avoid full runlist updating in more situations
    ntfs-3g: Update ctime after setting an ACL
    ntfs-3g: Use MFT record 15 for the first extent to MFT:DATA
    ntfs-3g: Ignore the sloppy mount option (-s)
    ntfs-3g: Implemented FITRIM (fstrim) ioctl
    ntfs-3g: Reengineered the compression algorithm
    ntfsprogs: Added manuals for ntfsdecrypt, ntfswipe, ntfstruncate and ntfsfallocate</changelog>
  <changelog author="Greg.Freemyer@gmail.com" date="1458561600">- change soname to 87
- add "--enable-extras" arg to configure
  Start including the extra programs: ntfswipe, ntfstruncate, ntfsrecover
- add "--enable-crypto" arg to configure
  Start including the optional program: ntfsdecrypt
- add "--enable-quarantined" arg to configure
  Start including the optional programs: ntfsck, ntfsdump_logfile, ntfsfallocate, ntfsmftalloc, ntfsmove
  Put these "quarantined" applications in a new -extra sub-project
- add specfile updates to support the above new program builds
- create a -extra sub-package to hold the "quarantined" utilities.
- update to stable Versions 2016.2.22 (Mar 21, 2016 release date)
  Changes to NTFS-3G driver:
  – Write as much data as possible in compressed attribute pwrite
  – Fixed getting space for making an index non resident
  – Alleviated constraints relative to reparse points
  – Fixed special case of decompressing a runlist
  – Fixed returning the trimming count to fstrim()
  – Fixed the range of valid subauthority counts in a SID
  – Updated the read-only flag even when the security attribute was cached
  – Defended against reusing data from an invalid MFT record
  – Simplified NTFS ACLs when group same as owner and same permission as world
  – Packed/unpacked st_rdev transported as 32-bits on Solaris 64-bits
  – Zero uninitialized bytes before writing compressed data
  – Clear the environment when starting mount or umount
  – Implemented rewinding a directory in lowntfs-3g
  – Use incremental offsets when reading a directory in lowntfs-3g
  Changes to mkntfs:
  – Make installing mkntfs /sbin symlinks dependent on ENABLE_MOUNT_HELPER
  – Mention the starting sector when it overflows in mkntfs
  – Upgraded the upper-case table to same as Windows 7, 8 and 10
  Changes to ntfsresize:
  – Fixed relocating the MFT runlists
  – Decode the full list of bad clusters
  – Fixed resizing an extended bad cluster list
  Changes to ntfsclone:
  – Decoded the full list of bad clusters
  Changes to ntfsinfo:
  – Displayed reparse point information
  Changes to ntfsdecrypt:
  – Fixed DESX decryption
  Changes to ntfswipe:
  – Added clarifications about several options to the manual
  New ntfsprogs tool:
  – Included ntfsrecover to recover the updates committed by Windows (experimental)
  Overall:
  – Made a general cleanup of endianness types for easier checks</changelog>
  <changelog author="Greg.Freemyer@gmail.com" date="1470916800">- Fix update-alternatives usage.</changelog>
  <changelog author="zenitur@ya.ru" date="1491048000">- Fix SLES 11 build.</changelog>
  <changelog author="qzheng@suse.com" date="1554206400">- Add CVE-2019-9755.patch to fix a heap-based buffer overflow
  issue (CVE-2019-9755, boo#1130165).</changelog>
  <changelog author="mgorse@suse.com" date="1630497600">- Update to version 2021.8.22 (boo#1189720):
  * Fixed compile error when building with libfuse &lt; 2.8.0
  * Fixed obsolete macros in configure.ac
  * Signalled support of UTIME_OMIT to external libfuse2
  * Fixed an improper macro usage in ntfscp.c
  * Updated the repository change in the README
  * Fixed vulnerability threats caused by maliciously tampered
    NTFS partitions
  * Security fixes: CVE-2021-33285, CVE-2021-33286, CVE-2021-33287,
    CVE-2021-33289, CVE-2021-35266, CVE-2021-35267, CVE-2021-35268,
    CVE-2021-35269, CVE-2021-39251, CVE-2021-39252, CVE-2021-39253,
    CVE_2021-39254, CVE-2021-39255, CVE-2021-39256, CVE-2021-39257,
    CVE-2021-39258, CVE-2021-39259, CVE-2021-39260, CVE-2021-39261,
    CVE-2021-39262, CVE-2021-39263.
- Sover is now 89
  * Changes in version 2017.3.23
  * Delegated processing of special reparse points to external plugins
  * Allowed kernel cacheing by lowntfs-3g when not using Posix ACLs
  * Enabled fallback to read-only mount when the volume is hibernated
  * Made a full check for whether an extended attribute is allowed
  * Moved secaudit and usermap to ntfsprogs (now ntfssecaudit and ntfsusermap)
  * Enabled encoding broken UTF-16 into broken UTF-8
  * Autoconfigured selecting &lt;sys/sysmacros.h&gt; vs &lt;sys/mkdev&gt;
  * Allowed using the full library API on systems without extended attributes support
  * Fixed DISABLE_PLUGINS as the condition for not using plugins
  * Corrected validation of multi sector transfer protected records
  * Denied creating/removing files from $Extend
  * Returned the size of locale encoded target as the size of symlinks
- Update URL.
- Drop CVE-2019-9755.patch: included upstream.
- Add ntfs-3g-old-api.patch: back out potentially API-incompatible
  changes.
- Add ntfs-3g-old-prognames.patch: rename ntfsusermap and
  ntfssecaudit to their old names.
- Add libtool to BuildRequires, and regenerate configure and
  Makefile.in..</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- update to 2022.5.17 (bsc#1199978):
  * Improved defence against maliciously tampered NTFS partitions
  * Improved defence against improper use of options
  * Updated the documentation
  * CVE-2022-30783, CVE-2022-30785, CVE-2022-30787
  * CVE-2021-46790, CVE-2022-30784, CVE-2022-30786,
  * CVE-2022-30788, CVE-2022-30789
- Rebase ntfs-3g-old-api.patch and ntfs-3g-old-prognames.patch.</changelog>
  <changelog author="yfjiang@suse.com" date="1666872000">- Add patches to fix CVE-2022-40284 (bsc#1204734):
  * ntfs-3g-CVE-2022-40284-0001-Rejected-zero-sized-runs.patch
  * ntfs-3g-CVE-2022-40284-0002-Avoided-merging-runlists-with-no-runs.patch</changelog>
  <changelog author="mgorse@suse.com" date="1718020800">- Add ntfs3g-unistr-use-after-free.patch: fix a use after free in
  ntfs_uppercase_mbs (boo#1226007 CVE-2023-52890).</changelog>
  <changelog author="sreeves@suse.com" date="1776427200">- Add ntfs3g-heap-overflow.patch: bsc#1262216 CVE-2026-40706.</changelog>
</package>
<package pkgid="59a002d790d07926329066c13e43904203c12fd64fdb26509c0eff133a3e0230" name="numa-preplace" arch="src">
  <version epoch="0" ver="0.1" rel="150700.15.3.1"/>
  <changelog author="dfaggioli@suse.com" date="1748606400">- Initial import of the project</changelog>
</package>
<package pkgid="ae1d774f10b2eccc0b6277eae3322424a061541f8409ab4f4dfe6cd64bbce214" name="numa-preplace" arch="x86_64">
  <version epoch="0" ver="0.1" rel="150700.15.3.1"/>
  <changelog author="dfaggioli@suse.com" date="1748606400">- Initial import of the project</changelog>
</package>
<package pkgid="9fcd52436ff3f7895267c999b1605a22b1ff611620232b6d71734739497a013a" name="numatop" arch="src">
  <version epoch="0" ver="2.5.1" rel="150700.3.3.2"/>
  <changelog author="vbabka@suse.com" date="1376568000">- Initial package</changelog>
  <changelog author="vbabka@suse.com" date="1376827200">- Restrict to x86_64 due to Intel CPU requirement and missing deps
  on x86.</changelog>
  <changelog author="p.drouand@gmail.com" date="1425643200">- Update to version 1.0.3
  * Add Haswell supporting</changelog>
  <changelog author="mpluskal@suse.com" date="1458993600">- Update to version 1.0.4
  * Add BDW-EP/EX support</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1542628800">- numatop-ncursesw.patch: Switch to ncursesw6</changelog>
  <changelog author="vbabka@suse.com" date="1543838400">- update to version 2.1
  * Add ppc64le support
  * New autotools-based build system</changelog>
  <changelog author="vbabka@suse.com" date="1637841600">- update to version 2.2
  * Support ICX processors (jsc#SLE-19499)
  * Sources downloaded from git tag, no proper upstream release.
  * Needs autoreconf.</changelog>
  <changelog author="vbabka@suse.com" date="1668772800">- update to version 2.3
  * Add support for SPR CPUs (jsc#PED-2015)</changelog>
  <changelog author="vbabka@suse.com" date="1705406400">- update to version 2.4
  * Support EMR processors (jsc#PED-6059, jsc#PED-6038)
  * Support Power10 processors (jsc#PED-5450, jsc#PED-5667)
  * Support Zen3, Zen4 processors</changelog>
  <changelog author="vbabka@suse.com" date="1728993600">- numatop-fix-missing-fields.patch: Fix building with recent gcc
- numatop-power11.patch: Support Power11 processors (jsc#PED-9887,
  jsc#PED-10899)</changelog>
  <changelog author="vbabka@suse.com" date="1733918400">- update to version 2.5
  * Support GNR processors (jsc#PED-10182, jsc#PED-10575)
  * Support SRF processors (jsc#PED-10588)
- remove numatop-fix-missing-fields.patch: upstream
- remove numatop-power11.patch: upstream</changelog>
  <changelog author="dmueller@suse.com" date="1739016000">- update to 2.5.1:
  * no changes</changelog>
  <changelog author="vbabka@suse.com" date="1760616000">- common-Ignore-samples-for-exiting-tasks.patch: segfault fix
  (bsc#1248317)
- 01-Fix-upper-bound-for-nodes.patch
  02-Fix-upper-bound-for-CPUs-per-node.patch
  03-Resolve-max-count-of-nodes-at-runtime.patch
  04-Resolve-max-count-of-CPUs-at-runtime.patch
  05-Resolve-max-count-of-CPUs-per-node-at-runtime.patch
  06-Remove-unused-NPROCS_NAX.patch: fix &gt;256 CPUs per NUMA
  node (bsc#1247358)</changelog>
</package>
<package pkgid="b25466ff8e7973e77e0f3148f0397d162a7fd053f0834426b664a818ec83b979" name="numatop" arch="x86_64">
  <version epoch="0" ver="2.5.1" rel="150700.3.3.2"/>
  <changelog author="p.drouand@gmail.com" date="1425643200">- Update to version 1.0.3
  * Add Haswell supporting</changelog>
  <changelog author="mpluskal@suse.com" date="1458993600">- Update to version 1.0.4
  * Add BDW-EP/EX support</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1542628800">- numatop-ncursesw.patch: Switch to ncursesw6</changelog>
  <changelog author="vbabka@suse.com" date="1543838400">- update to version 2.1
  * Add ppc64le support
  * New autotools-based build system</changelog>
  <changelog author="vbabka@suse.com" date="1637841600">- update to version 2.2
  * Support ICX processors (jsc#SLE-19499)
  * Sources downloaded from git tag, no proper upstream release.
  * Needs autoreconf.</changelog>
  <changelog author="vbabka@suse.com" date="1668772800">- update to version 2.3
  * Add support for SPR CPUs (jsc#PED-2015)</changelog>
  <changelog author="vbabka@suse.com" date="1705406400">- update to version 2.4
  * Support EMR processors (jsc#PED-6059, jsc#PED-6038)
  * Support Power10 processors (jsc#PED-5450, jsc#PED-5667)
  * Support Zen3, Zen4 processors</changelog>
  <changelog author="vbabka@suse.com" date="1728993600">- numatop-fix-missing-fields.patch: Fix building with recent gcc
- numatop-power11.patch: Support Power11 processors (jsc#PED-9887,
  jsc#PED-10899)</changelog>
  <changelog author="vbabka@suse.com" date="1733918400">- update to version 2.5
  * Support GNR processors (jsc#PED-10182, jsc#PED-10575)
  * Support SRF processors (jsc#PED-10588)
- remove numatop-fix-missing-fields.patch: upstream
- remove numatop-power11.patch: upstream</changelog>
  <changelog author="dmueller@suse.com" date="1739016000">- update to 2.5.1:
  * no changes</changelog>
  <changelog author="vbabka@suse.com" date="1760616000">- common-Ignore-samples-for-exiting-tasks.patch: segfault fix
  (bsc#1248317)
- 01-Fix-upper-bound-for-nodes.patch
  02-Fix-upper-bound-for-CPUs-per-node.patch
  03-Resolve-max-count-of-nodes-at-runtime.patch
  04-Resolve-max-count-of-CPUs-at-runtime.patch
  05-Resolve-max-count-of-CPUs-per-node-at-runtime.patch
  06-Remove-unused-NPROCS_NAX.patch: fix &gt;256 CPUs per NUMA
  node (bsc#1247358)</changelog>
</package>
<package pkgid="5ff544f08fc60dfad5feb3f6fc8f40fbe2b51de45697db4c7f03a7da95488159" name="nv-prefer-signed-open-driver" arch="x86_64">
  <version epoch="0" ver="570.133.20" rel="150700.3.3.1"/>
  <changelog author="sndirsch@suse.com" date="1736856000">- Update to 550.144.03 (bsc#1235461, boo#1235871)
  * fixes CVE-2024-0131, CVE-2024-0147, CVE-2024-0149,
    CVE-2024-0150, CVE-2024-53869</changelog>
  <changelog author="sndirsch@suse.com" date="1737547200">- preamble: let -cuda KMP conflict with no-cuda variants &lt; 550.135
  (bsc#1236191)</changelog>
  <changelog author="sndirsch@suse.com" date="1737979200">- Update to 565.77
- non-CUDA variant:
  * get rid of modproee.d and dracut.cd files and udev magic;
    instead require nvidia-common-G06
  * Supplements: switch to really supported devices; not only the
    initially supported ones without graphical output
- update non-CUDA and CUDA variant to 570.86.15</changelog>
  <changelog author="sndirsch@suse.com" date="1738065600">- update non-CUDA variant to 570.86.16 (boo#1236658)
- supersedes aarch64-TW-buildfix.patch
- supersedes set-FOP_UNSIGNED_OFFSET-for-nv_drm_fops.fop_flags.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1738584000">- fixed version of 'Provides: nvidia-open-signed-kmp = &lt;version&gt;'
  of nvidia-open-signed-cuda-kmp in preamble file
- fixed
  warning: File listed twice: /usr/src/kernel-modules/nvidia-570.86.16-default</changelog>
  <changelog author="sndirsch@suse.com" date="1738584001">- no longer try to patch %post/%postun; no changes needed any longer
- trigger script needs to be triggered now by nvidia-common-G06,
  which replaced kernel-firmware-nvidia-gspx-G06{,-cuda} packages</changelog>
  <changelog author="sndirsch@suse.com" date="1738584002">- fixed build against openSUSE:Factory by defining %_builddir
  if needed (boo#1236746)</changelog>
  <changelog author="eich@suse.com" date="1738670400">- Add a directory identifying the KMP and its version to the module
  install path - i.e.:
  &lt;kernel_version&gt;/nvidia-open-driver-G06-signed-&lt;version&gt;/updates
  instead of:
  &lt;kernel_version&gt;/updates
  This avoids conflicts when a new version is built against the
  same kernel release.</changelog>
  <changelog author="eich@suse.com" date="1739880000">- In the module install path revert the order of the 'updates'
  subdirectory and the package name &amp; version. This satisfies
  the kmp dependency checker (boo#1237308).</changelog>
  <changelog author="rfrohl@suse.com" date="1740312000">- explicitly enable KMP for kernel-longterm: this will be needed
  for the transition period, until all KMPs are enabled</changelog>
  <changelog author="sndirsch@suse.com" date="1740398400">- update non-CUDA variant to 570.124.02 (boo#1237585)</changelog>
  <changelog author="sndirsch@suse.com" date="1740484800">- update non-CUDA variant to 570.124.04 (boo#1237585)</changelog>
  <changelog author="sndirsch@suse.com" date="1741089600">- update CUDA variant to 570.124.06</changelog>
  <changelog author="sndirsch@suse.com" date="1741435200">- removed obsolete kernel-firmware-nvidia-gspx-G06-cuda; firmware
  has moved to nvidia-common-G06 and
  kernel-firmware-nvidia-gspx-G06 is no longer available either
  (boo#1239139)</changelog>
  <changelog author="sndirsch@suse.com" date="1742040000">- update non-CUDA variant to 570.133.07 (bsc#1239653)</changelog>
  <changelog author="sndirsch@suse.com" date="1743422400">- limit build of -azure flavor to SP6</changelog>
  <changelog author="sndirsch@suse.com" date="1744718400">- update non-CUDA variant to 570.144 (boo#1241231)</changelog>
  <changelog author="sndirsch@suse.com" date="1744977600">- update CUDA variant to 570.133.20</changelog>
  <changelog author="sndirsch@suse.com" date="1746187200">- disabled unsupported -rt flavor (bsc#1242054)</changelog>
  <changelog author="sndirsch@suse.com" date="1747224000">- update non-CUDA variant to 570.153.02 (boo#1243192)</changelog>
</package>
<package pkgid="41a58b706ba7581186a8cea57a75e1466bb344cbfa4172ca8ff781d7bbc614cc" name="nv-prefer-signed-open-driver" arch="x86_64">
  <version epoch="0" ver="575.57.08" rel="150700.3.14.2"/>
  <changelog author="eich@suse.com" date="1738670400">- Add a directory identifying the KMP and its version to the module
  install path - i.e.:
  &lt;kernel_version&gt;/nvidia-open-driver-G06-signed-&lt;version&gt;/updates
  instead of:
  &lt;kernel_version&gt;/updates
  This avoids conflicts when a new version is built against the
  same kernel release.</changelog>
  <changelog author="eich@suse.com" date="1739880000">- In the module install path revert the order of the 'updates'
  subdirectory and the package name &amp; version. This satisfies
  the kmp dependency checker (boo#1237308).</changelog>
  <changelog author="rfrohl@suse.com" date="1740312000">- explicitly enable KMP for kernel-longterm: this will be needed
  for the transition period, until all KMPs are enabled</changelog>
  <changelog author="sndirsch@suse.com" date="1740398400">- update non-CUDA variant to 570.124.02 (boo#1237585)</changelog>
  <changelog author="sndirsch@suse.com" date="1740484800">- update non-CUDA variant to 570.124.04 (boo#1237585)</changelog>
  <changelog author="sndirsch@suse.com" date="1741089600">- update CUDA variant to 570.124.06</changelog>
  <changelog author="sndirsch@suse.com" date="1741435200">- removed obsolete kernel-firmware-nvidia-gspx-G06-cuda; firmware
  has moved to nvidia-common-G06 and
  kernel-firmware-nvidia-gspx-G06 is no longer available either
  (boo#1239139)</changelog>
  <changelog author="sndirsch@suse.com" date="1742040000">- update non-CUDA variant to 570.133.07 (bsc#1239653)</changelog>
  <changelog author="sndirsch@suse.com" date="1743422400">- limit build of -azure flavor to SP6</changelog>
  <changelog author="sndirsch@suse.com" date="1744718400">- update non-CUDA variant to 570.144 (boo#1241231)</changelog>
  <changelog author="sndirsch@suse.com" date="1744977600">- update CUDA variant to 570.133.20</changelog>
  <changelog author="sndirsch@suse.com" date="1746187200">- disabled unsupported -rt flavor (bsc#1242054)</changelog>
  <changelog author="sndirsch@suse.com" date="1747224000">- update non-CUDA variant to 570.153.02 (boo#1243192)</changelog>
  <changelog author="sndirsch@suse.com" date="1749211200">- update CUDA variant to 575.57.08
- supersedes persistent-nvidia-id-string.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1749470400">- Drop persistent-nvidia-id-string.patch - solved via make params instead</changelog>
  <changelog author="sndirsch@suse.com" date="1749643200">- 60-nvidia-$flavor.conf
  * Don't try to load the driver if config and GSP firmware files are
    not available. Otherwise let the default install rule
    'install nvidia-drm /sbin/modprobe --ignore-install nvidia-drm' of
    50-nvidia.conf win, which comes together with config and GSP
    firmware files (package nvidia-common-G06).</changelog>
  <changelog author="sndirsch@suse.com" date="1749988800">- update non-CUDA variant to 570.169 (boo#1244614)</changelog>
  <changelog author="sndirsch@suse.com" date="1750766400">- 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
  * buildfixes against Kernel 6.16 picked up from
    https://github.com/CachyOS/CachyOS-PKGBUILDS.git
  - -&gt; nvidia/nvidia-utils</changelog>
  <changelog author="sndirsch@suse.com" date="1751889600">- empty pci_ids-570.169; PCI ID hardware Supplements get moved to
  gfx repository to package nvidia-open-driver-G06-signed-kmp-meta
  (boo#1246010)
- remove 60-nvidia-$flavor.conf, since driver no longer gets
  autoselected without gfx/cuda repositories present and so we no
  longer need to disable it by default (boo#1246010)</changelog>
  <changelog author="sndirsch@suse.com" date="1752235200">- update non-CUDA variant to 570.172.08 (boo#1246327)
- supersedes
  * 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  * 0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
- update pci_ids-supported</changelog>
</package>
<package pkgid="f519deb5552003315252342022ba5c439da0f25d1af169109ac19c007260994d" name="nv-prefer-signed-open-driver" arch="x86_64">
  <version epoch="0" ver="575.57.08" rel="150700.3.8.2"/>
  <changelog author="sndirsch@suse.com" date="1738584000">- fixed version of 'Provides: nvidia-open-signed-kmp = &lt;version&gt;'
  of nvidia-open-signed-cuda-kmp in preamble file
- fixed
  warning: File listed twice: /usr/src/kernel-modules/nvidia-570.86.16-default</changelog>
  <changelog author="sndirsch@suse.com" date="1738584001">- no longer try to patch %post/%postun; no changes needed any longer
- trigger script needs to be triggered now by nvidia-common-G06,
  which replaced kernel-firmware-nvidia-gspx-G06{,-cuda} packages</changelog>
  <changelog author="sndirsch@suse.com" date="1738584002">- fixed build against openSUSE:Factory by defining %_builddir
  if needed (boo#1236746)</changelog>
  <changelog author="eich@suse.com" date="1738670400">- Add a directory identifying the KMP and its version to the module
  install path - i.e.:
  &lt;kernel_version&gt;/nvidia-open-driver-G06-signed-&lt;version&gt;/updates
  instead of:
  &lt;kernel_version&gt;/updates
  This avoids conflicts when a new version is built against the
  same kernel release.</changelog>
  <changelog author="eich@suse.com" date="1739880000">- In the module install path revert the order of the 'updates'
  subdirectory and the package name &amp; version. This satisfies
  the kmp dependency checker (boo#1237308).</changelog>
  <changelog author="rfrohl@suse.com" date="1740312000">- explicitly enable KMP for kernel-longterm: this will be needed
  for the transition period, until all KMPs are enabled</changelog>
  <changelog author="sndirsch@suse.com" date="1740398400">- update non-CUDA variant to 570.124.02 (boo#1237585)</changelog>
  <changelog author="sndirsch@suse.com" date="1740484800">- update non-CUDA variant to 570.124.04 (boo#1237585)</changelog>
  <changelog author="sndirsch@suse.com" date="1741089600">- update CUDA variant to 570.124.06</changelog>
  <changelog author="sndirsch@suse.com" date="1741435200">- removed obsolete kernel-firmware-nvidia-gspx-G06-cuda; firmware
  has moved to nvidia-common-G06 and
  kernel-firmware-nvidia-gspx-G06 is no longer available either
  (boo#1239139)</changelog>
  <changelog author="sndirsch@suse.com" date="1742040000">- update non-CUDA variant to 570.133.07 (bsc#1239653)</changelog>
  <changelog author="sndirsch@suse.com" date="1743422400">- limit build of -azure flavor to SP6</changelog>
  <changelog author="sndirsch@suse.com" date="1744718400">- update non-CUDA variant to 570.144 (boo#1241231)</changelog>
  <changelog author="sndirsch@suse.com" date="1744977600">- update CUDA variant to 570.133.20</changelog>
  <changelog author="sndirsch@suse.com" date="1746187200">- disabled unsupported -rt flavor (bsc#1242054)</changelog>
  <changelog author="sndirsch@suse.com" date="1747224000">- update non-CUDA variant to 570.153.02 (boo#1243192)</changelog>
  <changelog author="sndirsch@suse.com" date="1749211200">- update CUDA variant to 575.57.08
- supersedes persistent-nvidia-id-string.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1749470400">- Drop persistent-nvidia-id-string.patch - solved via make params instead</changelog>
  <changelog author="sndirsch@suse.com" date="1749643200">- 60-nvidia-$flavor.conf
  * Don't try to load the driver if config and GSP firmware files are
    not available. Otherwise let the default install rule
    'install nvidia-drm /sbin/modprobe --ignore-install nvidia-drm' of
    50-nvidia.conf win, which comes together with config and GSP
    firmware files (package nvidia-common-G06).</changelog>
  <changelog author="sndirsch@suse.com" date="1749988800">- update non-CUDA variant to 570.169 (boo#1244614)</changelog>
</package>
<package pkgid="2117895ff7f8351f040aad68dc7b7efb5a463cbceec0c9116a5b873b127deb69" name="nv-prefer-signed-open-driver" arch="x86_64">
  <version epoch="0" ver="580.105.08" rel="150700.3.34.2"/>
  <changelog author="sndirsch@suse.com" date="1753704000">- update CUDA variant to 580.65.06, which addresses various security
  issues:
  * CVE-2025-23277 (bsc#1247528)
  * CVE-2025-23278 (bsc#1247529)
  * CVE-2025-23286 (bsc#1247530)
  * CVE-2025-23283 (bsc#1247531)
  * CVE-2025-23279 (bsc#1247532)</changelog>
  <changelog author="sndirsch@suse.com" date="1754395200">- added Requires
  * nvidia-modprobe &gt;= %version
  * nvidia-persitenced &gt;= %version
  * nvidia-modprobe-cuda-lt-sp6
  * nvidia-persitenced-cuda-lt-sp6
  to be provided by special versions of nvidia-modprobe and
  nvidia-persitenced built against SP4 (bsc#1237208, jsc#PED-13295)</changelog>
  <changelog author="sndirsch@suse.com" date="1754740800">- make sure these Requires right below are not added on Tumbleweed</changelog>
  <changelog author="sndirsch@suse.com" date="1754913600">- update non-CUDA variant to 580.76.05 (boo#1247907)
- get rid of rule of older KMPs not to load nvidia_drm module,
  which are still installed in parallel and therefore still
  active (boo#1247923)</changelog>
  <changelog author="sndirsch@suse.com" date="1755172800">- make sure Requires to nvidia packages are not added for SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1757160000">- update CUDA variant to 580.82.07</changelog>
  <changelog author="sndirsch@suse.com" date="1757246400">- update non-CUDA variant to 580.82.07 (boo#1249235)</changelog>
  <changelog author="sndirsch@suse.com" date="1757332800">- let conflict CUDA and non-CUDA -devel packages; this is needed
  if both have the same version</changelog>
  <changelog author="sndirsch@suse.com" date="1758110400">- pesign-spec-macros: added definition for %__kernel_supplements,
  which replaced %__kmp_supplements with latest RPM used on TW now,
  in order to fix PCI HW Supplements for TW (boo#1249814)</changelog>
  <changelog author="sndirsch@suse.com" date="1758628800">- get rid of multiversion for the KMPs, since it only brought/brings
  us trouble and no benefit at all (jsc#PED-12049)
  * remove any ^Conflicts and ^Provides: multiversion from
    /usr/lib/rpm/kernel-module-subpackage
  * set INSTALL_MOD_DIR back to %{kernel_module_package_moddir}, i.e.
    updates/ subdir</changelog>
  <changelog author="sndirsch@suse.com" date="1758801600">- update to version 580.95.05 (boo#1250536)</changelog>
  <changelog author="sndirsch@suse.com" date="1759320000">- fixed 'osc service run download_files'</changelog>
  <changelog author="sndirsch@suse.com" date="1759752000">- update CUDA variant to 580.95.05</changelog>
  <changelog author="sndirsch@suse.com" date="1759924800">- Check4WrongSupplements.sh
  * check for wrong Supplements in generated KMPs after build by
    misusing %post of a dummy "check" subpackage</changelog>
  <changelog author="sndirsch@suse.com" date="1760443200">- changed Requires to
  * nvidia-modprobe = %version
  * nvidia-persitenced = %version
  it has been &gt;= before ...</changelog>
  <changelog author="sndirsch@suse.com" date="1760616000">- renamed check to %name-check package</changelog>
  <changelog author="sndirsch@suse.com" date="1761998400">- update non-CUDA variant to version 580.105.08 (boo#1252978)</changelog>
  <changelog author="sndirsch@suse.com" date="1762257600">- back to 580.95.05 on aarch64, since userspace drivers have not
  been updated for this platform</changelog>
  <changelog author="sndirsch@suse.com" date="1763035200">- update CUDA variant to 580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1763035201">- introduced extra %gfx_aarch64_version and appropriate
  tarball/pci_id file in the hope that build service will no
  longer complain</changelog>
</package>
<package pkgid="1e9b5ea7d4dc86b7439970005ed400c39635a4e30bb2b032e759248ded1ea93d" name="nv-prefer-signed-open-driver" arch="x86_64">
  <version epoch="0" ver="580.105.08" rel="150700.3.37.1"/>
  <changelog author="sndirsch@suse.com" date="1754913600">- update non-CUDA variant to 580.76.05 (boo#1247907)
- get rid of rule of older KMPs not to load nvidia_drm module,
  which are still installed in parallel and therefore still
  active (boo#1247923)</changelog>
  <changelog author="sndirsch@suse.com" date="1755172800">- make sure Requires to nvidia packages are not added for SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1757160000">- update CUDA variant to 580.82.07</changelog>
  <changelog author="sndirsch@suse.com" date="1757246400">- update non-CUDA variant to 580.82.07 (boo#1249235)</changelog>
  <changelog author="sndirsch@suse.com" date="1757332800">- let conflict CUDA and non-CUDA -devel packages; this is needed
  if both have the same version</changelog>
  <changelog author="sndirsch@suse.com" date="1758110400">- pesign-spec-macros: added definition for %__kernel_supplements,
  which replaced %__kmp_supplements with latest RPM used on TW now,
  in order to fix PCI HW Supplements for TW (boo#1249814)</changelog>
  <changelog author="sndirsch@suse.com" date="1758628800">- get rid of multiversion for the KMPs, since it only brought/brings
  us trouble and no benefit at all (jsc#PED-12049)
  * remove any ^Conflicts and ^Provides: multiversion from
    /usr/lib/rpm/kernel-module-subpackage
  * set INSTALL_MOD_DIR back to %{kernel_module_package_moddir}, i.e.
    updates/ subdir</changelog>
  <changelog author="sndirsch@suse.com" date="1758801600">- update to version 580.95.05 (boo#1250536)</changelog>
  <changelog author="sndirsch@suse.com" date="1759320000">- fixed 'osc service run download_files'</changelog>
  <changelog author="sndirsch@suse.com" date="1759752000">- update CUDA variant to 580.95.05</changelog>
  <changelog author="sndirsch@suse.com" date="1759924800">- Check4WrongSupplements.sh
  * check for wrong Supplements in generated KMPs after build by
    misusing %post of a dummy "check" subpackage</changelog>
  <changelog author="sndirsch@suse.com" date="1760443200">- changed Requires to
  * nvidia-modprobe = %version
  * nvidia-persitenced = %version
  it has been &gt;= before ...</changelog>
  <changelog author="sndirsch@suse.com" date="1760616000">- renamed check to %name-check package</changelog>
  <changelog author="sndirsch@suse.com" date="1761998400">- update non-CUDA variant to version 580.105.08 (boo#1252978)</changelog>
  <changelog author="sndirsch@suse.com" date="1762257600">- back to 580.95.05 on aarch64, since userspace drivers have not
  been updated for this platform</changelog>
  <changelog author="sndirsch@suse.com" date="1763035200">- update CUDA variant to 580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1763035201">- introduced extra %gfx_aarch64_version and appropriate
  tarball/pci_id file in the hope that build service will no
  longer complain</changelog>
  <changelog author="sndirsch@suse.com" date="1764763200">- kernel-6.18.patch
  * fixed build against kernel 6.18</changelog>
  <changelog author="sndirsch@suse.com" date="1765454400">- update non-CUDA variant to version 580.119.02 (boo#1254801)</changelog>
  <changelog author="sndirsch@suse.com" date="1765454401">- readded kernel-6.18.patch still needed for cuda driver version
  580.105.08</changelog>
</package>
<package pkgid="d596d7cd1b5a959d30915de6b604b1dd27f35ae66aacbbdf30e189ff06306746" name="nv-prefer-signed-open-driver" arch="x86_64">
  <version epoch="0" ver="580.105.08" rel="150700.3.40.1"/>
  <changelog author="sndirsch@suse.com" date="1757160000">- update CUDA variant to 580.82.07</changelog>
  <changelog author="sndirsch@suse.com" date="1757246400">- update non-CUDA variant to 580.82.07 (boo#1249235)</changelog>
  <changelog author="sndirsch@suse.com" date="1757332800">- let conflict CUDA and non-CUDA -devel packages; this is needed
  if both have the same version</changelog>
  <changelog author="sndirsch@suse.com" date="1758110400">- pesign-spec-macros: added definition for %__kernel_supplements,
  which replaced %__kmp_supplements with latest RPM used on TW now,
  in order to fix PCI HW Supplements for TW (boo#1249814)</changelog>
  <changelog author="sndirsch@suse.com" date="1758628800">- get rid of multiversion for the KMPs, since it only brought/brings
  us trouble and no benefit at all (jsc#PED-12049)
  * remove any ^Conflicts and ^Provides: multiversion from
    /usr/lib/rpm/kernel-module-subpackage
  * set INSTALL_MOD_DIR back to %{kernel_module_package_moddir}, i.e.
    updates/ subdir</changelog>
  <changelog author="sndirsch@suse.com" date="1758801600">- update to version 580.95.05 (boo#1250536)</changelog>
  <changelog author="sndirsch@suse.com" date="1759320000">- fixed 'osc service run download_files'</changelog>
  <changelog author="sndirsch@suse.com" date="1759752000">- update CUDA variant to 580.95.05</changelog>
  <changelog author="sndirsch@suse.com" date="1759924800">- Check4WrongSupplements.sh
  * check for wrong Supplements in generated KMPs after build by
    misusing %post of a dummy "check" subpackage</changelog>
  <changelog author="sndirsch@suse.com" date="1760443200">- changed Requires to
  * nvidia-modprobe = %version
  * nvidia-persitenced = %version
  it has been &gt;= before ...</changelog>
  <changelog author="sndirsch@suse.com" date="1760616000">- renamed check to %name-check package</changelog>
  <changelog author="sndirsch@suse.com" date="1761998400">- update non-CUDA variant to version 580.105.08 (boo#1252978)</changelog>
  <changelog author="sndirsch@suse.com" date="1762257600">- back to 580.95.05 on aarch64, since userspace drivers have not
  been updated for this platform</changelog>
  <changelog author="sndirsch@suse.com" date="1763035200">- update CUDA variant to 580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1763035201">- introduced extra %gfx_aarch64_version and appropriate
  tarball/pci_id file in the hope that build service will no
  longer complain</changelog>
  <changelog author="sndirsch@suse.com" date="1764763200">- kernel-6.18.patch
  * fixed build against kernel 6.18</changelog>
  <changelog author="sndirsch@suse.com" date="1765454400">- update non-CUDA variant to version 580.119.02 (boo#1254801)</changelog>
  <changelog author="sndirsch@suse.com" date="1765454401">- readded kernel-6.18.patch still needed for cuda driver version
  580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1767441600">- update non-CUDA variant to version 580.126.09 (boo#1255858)</changelog>
  <changelog author="sndirsch@suse.com" date="1768305600">- kernel-5.14.patch
  * fixes build for sle15-sp4</changelog>
</package>
<package pkgid="f65ed8aaa7901e556db3a479465a167c132d23d9a2bf6962589d59cc68950863" name="nv-prefer-signed-open-driver" arch="x86_64">
  <version epoch="0" ver="580.126.20" rel="150700.3.45.1"/>
  <changelog author="sndirsch@suse.com" date="1758801600">- update to version 580.95.05 (boo#1250536)</changelog>
  <changelog author="sndirsch@suse.com" date="1759320000">- fixed 'osc service run download_files'</changelog>
  <changelog author="sndirsch@suse.com" date="1759752000">- update CUDA variant to 580.95.05</changelog>
  <changelog author="sndirsch@suse.com" date="1759924800">- Check4WrongSupplements.sh
  * check for wrong Supplements in generated KMPs after build by
    misusing %post of a dummy "check" subpackage</changelog>
  <changelog author="sndirsch@suse.com" date="1760443200">- changed Requires to
  * nvidia-modprobe = %version
  * nvidia-persitenced = %version
  it has been &gt;= before ...</changelog>
  <changelog author="sndirsch@suse.com" date="1760616000">- renamed check to %name-check package</changelog>
  <changelog author="sndirsch@suse.com" date="1761998400">- update non-CUDA variant to version 580.105.08 (boo#1252978)</changelog>
  <changelog author="sndirsch@suse.com" date="1762257600">- back to 580.95.05 on aarch64, since userspace drivers have not
  been updated for this platform</changelog>
  <changelog author="sndirsch@suse.com" date="1763035200">- update CUDA variant to 580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1763035201">- introduced extra %gfx_aarch64_version and appropriate
  tarball/pci_id file in the hope that build service will no
  longer complain</changelog>
  <changelog author="sndirsch@suse.com" date="1764763200">- kernel-6.18.patch
  * fixed build against kernel 6.18</changelog>
  <changelog author="sndirsch@suse.com" date="1765454400">- update non-CUDA variant to version 580.119.02 (boo#1254801)</changelog>
  <changelog author="sndirsch@suse.com" date="1765454401">- readded kernel-6.18.patch still needed for cuda driver version
  580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1767441600">- update non-CUDA variant to version 580.126.09 (boo#1255858)</changelog>
  <changelog author="sndirsch@suse.com" date="1768305600">- kernel-5.14.patch
  * fixes build for sle15-sp4</changelog>
  <changelog author="sndirsch@suse.com" date="1768910400">- updated CUDA variant to version 580.126.09
- supersedes kernel-6.18.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1769688000">- apply kernel-5.14.patch also on sle15-sp5 in order to fix build
  and adjusted it to sle15-sp5 kernel</changelog>
  <changelog author="sndirsch@suse.com" date="1770724800">- kernel-6.19.patch: fixes build against kernel 6.19</changelog>
  <changelog author="sndirsch@suse.com" date="1770897600">- update non-CUDA variant to version 580.126.18 (boo#1258154)
- updated CUDA variant to version 580.126.16</changelog>
  <changelog author="sndirsch@suse.com" date="1772107200">- updated CUDA variant to version 580.126.20
- supersedes kernel-6.19.patch</changelog>
</package>
<package pkgid="cd7a8d34e389efd6c57ad3bc5c8f3ad7290fa1ec80b3f96ecf0d72463b0ad668" name="nv-prefer-signed-open-driver" arch="x86_64">
  <version epoch="0" ver="580.159.03" rel="150700.3.48.1"/>
  <changelog author="sndirsch@suse.com" date="1763035200">- update CUDA variant to 580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1763035201">- introduced extra %gfx_aarch64_version and appropriate
  tarball/pci_id file in the hope that build service will no
  longer complain</changelog>
  <changelog author="sndirsch@suse.com" date="1764763200">- kernel-6.18.patch
  * fixed build against kernel 6.18</changelog>
  <changelog author="sndirsch@suse.com" date="1765454400">- update non-CUDA variant to version 580.119.02 (boo#1254801)</changelog>
  <changelog author="sndirsch@suse.com" date="1765454401">- readded kernel-6.18.patch still needed for cuda driver version
  580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1767441600">- update non-CUDA variant to version 580.126.09 (boo#1255858)</changelog>
  <changelog author="sndirsch@suse.com" date="1768305600">- kernel-5.14.patch
  * fixes build for sle15-sp4</changelog>
  <changelog author="sndirsch@suse.com" date="1768910400">- updated CUDA variant to version 580.126.09
- supersedes kernel-6.18.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1769688000">- apply kernel-5.14.patch also on sle15-sp5 in order to fix build
  and adjusted it to sle15-sp5 kernel</changelog>
  <changelog author="sndirsch@suse.com" date="1770724800">- kernel-6.19.patch: fixes build against kernel 6.19</changelog>
  <changelog author="sndirsch@suse.com" date="1770897600">- update non-CUDA variant to version 580.126.18 (boo#1258154)
- updated CUDA variant to version 580.126.16</changelog>
  <changelog author="sndirsch@suse.com" date="1772107200">- updated CUDA variant to version 580.126.20
- supersedes kernel-6.19.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1772712000">- adjusted logic for %suse_version bump with SLE16.1 Beta2 (jsc#PED-15826)</changelog>
  <changelog author="sndirsch@suse.com" date="1773662400">- add 'Provides: open-driver-non-cuda-variant = %version' for
  non-CUDA variant to be able to distinguish between both variants;
  to be used by nvidia-open-driver-G06-signed-kmp-meta for TW ...
  (boo#1259740)</changelog>
  <changelog author="sndirsch@suse.com" date="1773835200">- do not set ExclusiveArch in order to fix RPM description for -cuda
  variant (bsc#1259719)
- improved RPM description for -cuda and non-cuda variant</changelog>
  <changelog author="sndirsch@suse.com" date="1774440000">- adding 'ExcludeArch:    %ix86 s390x ppc64le' to no longer get
  autoclines by buildservice hoping that this wont't break RPM
  descriptions for -cuda variant again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1776945600">- disable-objtool-override.patch
  * get rid of confusing objtool warnings (boo#1212841)
  - -&gt; from https://github.com/joanbm/nvidia-470xx-linux-mainline</changelog>
  <changelog author="sndirsch@suse.com" date="1777032000">- update non-CUDA variant to 580.159.03 (boo#1262749)</changelog>
  <changelog author="sndirsch@suse.com" date="1777377600">- update CUDA variant to 580.159.03</changelog>
  <changelog author="sndirsch@suse.com" date="1777809600">- fix-objtool-warnings.patch (not applied on aarch64)
  * Get rid of "'naked' return found in MITIGATION_RETHUNK build"
    objtool warnings (boo#1212841, boo#1263834)
- remove again disable-objtool-override.patch</changelog>
</package>
<package pkgid="7f122a99d2835dc30812c8f36a5ac35641d29e45ff1bd2502a6b3bec39e4d528" name="nv-prefer-signed-open-driver" arch="x86_64">
  <version epoch="0" ver="580.82.07" rel="150700.3.21.1"/>
  <changelog author="sndirsch@suse.com" date="1743422400">- limit build of -azure flavor to SP6</changelog>
  <changelog author="sndirsch@suse.com" date="1744718400">- update non-CUDA variant to 570.144 (boo#1241231)</changelog>
  <changelog author="sndirsch@suse.com" date="1744977600">- update CUDA variant to 570.133.20</changelog>
  <changelog author="sndirsch@suse.com" date="1746187200">- disabled unsupported -rt flavor (bsc#1242054)</changelog>
  <changelog author="sndirsch@suse.com" date="1747224000">- update non-CUDA variant to 570.153.02 (boo#1243192)</changelog>
  <changelog author="sndirsch@suse.com" date="1749211200">- update CUDA variant to 575.57.08
- supersedes persistent-nvidia-id-string.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1749470400">- Drop persistent-nvidia-id-string.patch - solved via make params instead</changelog>
  <changelog author="sndirsch@suse.com" date="1749643200">- 60-nvidia-$flavor.conf
  * Don't try to load the driver if config and GSP firmware files are
    not available. Otherwise let the default install rule
    'install nvidia-drm /sbin/modprobe --ignore-install nvidia-drm' of
    50-nvidia.conf win, which comes together with config and GSP
    firmware files (package nvidia-common-G06).</changelog>
  <changelog author="sndirsch@suse.com" date="1749988800">- update non-CUDA variant to 570.169 (boo#1244614)</changelog>
  <changelog author="sndirsch@suse.com" date="1750766400">- 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
  * buildfixes against Kernel 6.16 picked up from
    https://github.com/CachyOS/CachyOS-PKGBUILDS.git
  - -&gt; nvidia/nvidia-utils</changelog>
  <changelog author="sndirsch@suse.com" date="1751889600">- empty pci_ids-570.169; PCI ID hardware Supplements get moved to
  gfx repository to package nvidia-open-driver-G06-signed-kmp-meta
  (boo#1246010)
- remove 60-nvidia-$flavor.conf, since driver no longer gets
  autoselected without gfx/cuda repositories present and so we no
  longer need to disable it by default (boo#1246010)</changelog>
  <changelog author="sndirsch@suse.com" date="1752235200">- update non-CUDA variant to 570.172.08 (boo#1246327)
- supersedes
  * 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  * 0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
- update pci_ids-supported</changelog>
  <changelog author="sndirsch@suse.com" date="1753704000">- update CUDA variant to 580.65.06, which addresses various security
  issues:
  * CVE-2025-23277 (bsc#1247528)
  * CVE-2025-23278 (bsc#1247529)
  * CVE-2025-23286 (bsc#1247530)
  * CVE-2025-23283 (bsc#1247531)
  * CVE-2025-23279 (bsc#1247532)</changelog>
  <changelog author="sndirsch@suse.com" date="1754395200">- added Requires
  * nvidia-modprobe &gt;= %version
  * nvidia-persitenced &gt;= %version
  * nvidia-modprobe-cuda-lt-sp6
  * nvidia-persitenced-cuda-lt-sp6
  to be provided by special versions of nvidia-modprobe and
  nvidia-persitenced built against SP4 (bsc#1237208, jsc#PED-13295)</changelog>
  <changelog author="sndirsch@suse.com" date="1754740800">- make sure these Requires right below are not added on Tumbleweed</changelog>
  <changelog author="sndirsch@suse.com" date="1754913600">- update non-CUDA variant to 580.76.05 (boo#1247907)
- get rid of rule of older KMPs not to load nvidia_drm module,
  which are still installed in parallel and therefore still
  active (boo#1247923)</changelog>
  <changelog author="sndirsch@suse.com" date="1755172800">- make sure Requires to nvidia packages are not added for SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1757160000">- update CUDA variant to 580.82.07</changelog>
  <changelog author="sndirsch@suse.com" date="1757246400">- update non-CUDA variant to 580.82.07 (boo#1249235)</changelog>
  <changelog author="sndirsch@suse.com" date="1757332800">- let conflict CUDA and non-CUDA -devel packages; this is needed
  if both have the same version</changelog>
</package>
<package pkgid="a6fd4cc8893960eb3693b037ce50881bcf98e6692c66297a9ddfe657a245a7c0" name="nv-prefer-signed-open-driver" arch="x86_64">
  <version epoch="0" ver="580.82.07" rel="150700.3.24.1"/>
  <changelog author="sndirsch@suse.com" date="1746187200">- disabled unsupported -rt flavor (bsc#1242054)</changelog>
  <changelog author="sndirsch@suse.com" date="1747224000">- update non-CUDA variant to 570.153.02 (boo#1243192)</changelog>
  <changelog author="sndirsch@suse.com" date="1749211200">- update CUDA variant to 575.57.08
- supersedes persistent-nvidia-id-string.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1749470400">- Drop persistent-nvidia-id-string.patch - solved via make params instead</changelog>
  <changelog author="sndirsch@suse.com" date="1749643200">- 60-nvidia-$flavor.conf
  * Don't try to load the driver if config and GSP firmware files are
    not available. Otherwise let the default install rule
    'install nvidia-drm /sbin/modprobe --ignore-install nvidia-drm' of
    50-nvidia.conf win, which comes together with config and GSP
    firmware files (package nvidia-common-G06).</changelog>
  <changelog author="sndirsch@suse.com" date="1749988800">- update non-CUDA variant to 570.169 (boo#1244614)</changelog>
  <changelog author="sndirsch@suse.com" date="1750766400">- 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
  * buildfixes against Kernel 6.16 picked up from
    https://github.com/CachyOS/CachyOS-PKGBUILDS.git
  - -&gt; nvidia/nvidia-utils</changelog>
  <changelog author="sndirsch@suse.com" date="1751889600">- empty pci_ids-570.169; PCI ID hardware Supplements get moved to
  gfx repository to package nvidia-open-driver-G06-signed-kmp-meta
  (boo#1246010)
- remove 60-nvidia-$flavor.conf, since driver no longer gets
  autoselected without gfx/cuda repositories present and so we no
  longer need to disable it by default (boo#1246010)</changelog>
  <changelog author="sndirsch@suse.com" date="1752235200">- update non-CUDA variant to 570.172.08 (boo#1246327)
- supersedes
  * 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  * 0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
- update pci_ids-supported</changelog>
  <changelog author="sndirsch@suse.com" date="1753704000">- update CUDA variant to 580.65.06, which addresses various security
  issues:
  * CVE-2025-23277 (bsc#1247528)
  * CVE-2025-23278 (bsc#1247529)
  * CVE-2025-23286 (bsc#1247530)
  * CVE-2025-23283 (bsc#1247531)
  * CVE-2025-23279 (bsc#1247532)</changelog>
  <changelog author="sndirsch@suse.com" date="1754395200">- added Requires
  * nvidia-modprobe &gt;= %version
  * nvidia-persitenced &gt;= %version
  * nvidia-modprobe-cuda-lt-sp6
  * nvidia-persitenced-cuda-lt-sp6
  to be provided by special versions of nvidia-modprobe and
  nvidia-persitenced built against SP4 (bsc#1237208, jsc#PED-13295)</changelog>
  <changelog author="sndirsch@suse.com" date="1754740800">- make sure these Requires right below are not added on Tumbleweed</changelog>
  <changelog author="sndirsch@suse.com" date="1754913600">- update non-CUDA variant to 580.76.05 (boo#1247907)
- get rid of rule of older KMPs not to load nvidia_drm module,
  which are still installed in parallel and therefore still
  active (boo#1247923)</changelog>
  <changelog author="sndirsch@suse.com" date="1755172800">- make sure Requires to nvidia packages are not added for SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1757160000">- update CUDA variant to 580.82.07</changelog>
  <changelog author="sndirsch@suse.com" date="1757246400">- update non-CUDA variant to 580.82.07 (boo#1249235)</changelog>
  <changelog author="sndirsch@suse.com" date="1757332800">- let conflict CUDA and non-CUDA -devel packages; this is needed
  if both have the same version</changelog>
  <changelog author="sndirsch@suse.com" date="1758110400">- pesign-spec-macros: added definition for %__kernel_supplements,
  which replaced %__kmp_supplements with latest RPM used on TW now,
  in order to fix PCI HW Supplements for TW (boo#1249814)</changelog>
  <changelog author="sndirsch@suse.com" date="1758628800">- get rid of multiversion for the KMPs, since it only brought/brings
  us trouble and no benefit at all (jsc#PED-12049)
  * remove any ^Conflicts and ^Provides: multiversion from
    /usr/lib/rpm/kernel-module-subpackage
  * set INSTALL_MOD_DIR back to %{kernel_module_package_moddir}, i.e.
    updates/ subdir</changelog>
  <changelog author="sndirsch@suse.com" date="1758801600">- update to version 580.95.05 (boo#1250536)</changelog>
</package>
<package pkgid="898473259b6978e72e92d511a94e2de6fd53ded724806a4b1f2706f0aec7af47" name="nv-prefer-signed-open-driver" arch="x86_64">
  <version epoch="0" ver="580.95.05" rel="150700.3.27.2"/>
  <changelog author="sndirsch@suse.com" date="1749988800">- update non-CUDA variant to 570.169 (boo#1244614)</changelog>
  <changelog author="sndirsch@suse.com" date="1750766400">- 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
  * buildfixes against Kernel 6.16 picked up from
    https://github.com/CachyOS/CachyOS-PKGBUILDS.git
  - -&gt; nvidia/nvidia-utils</changelog>
  <changelog author="sndirsch@suse.com" date="1751889600">- empty pci_ids-570.169; PCI ID hardware Supplements get moved to
  gfx repository to package nvidia-open-driver-G06-signed-kmp-meta
  (boo#1246010)
- remove 60-nvidia-$flavor.conf, since driver no longer gets
  autoselected without gfx/cuda repositories present and so we no
  longer need to disable it by default (boo#1246010)</changelog>
  <changelog author="sndirsch@suse.com" date="1752235200">- update non-CUDA variant to 570.172.08 (boo#1246327)
- supersedes
  * 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  * 0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
- update pci_ids-supported</changelog>
  <changelog author="sndirsch@suse.com" date="1753704000">- update CUDA variant to 580.65.06, which addresses various security
  issues:
  * CVE-2025-23277 (bsc#1247528)
  * CVE-2025-23278 (bsc#1247529)
  * CVE-2025-23286 (bsc#1247530)
  * CVE-2025-23283 (bsc#1247531)
  * CVE-2025-23279 (bsc#1247532)</changelog>
  <changelog author="sndirsch@suse.com" date="1754395200">- added Requires
  * nvidia-modprobe &gt;= %version
  * nvidia-persitenced &gt;= %version
  * nvidia-modprobe-cuda-lt-sp6
  * nvidia-persitenced-cuda-lt-sp6
  to be provided by special versions of nvidia-modprobe and
  nvidia-persitenced built against SP4 (bsc#1237208, jsc#PED-13295)</changelog>
  <changelog author="sndirsch@suse.com" date="1754740800">- make sure these Requires right below are not added on Tumbleweed</changelog>
  <changelog author="sndirsch@suse.com" date="1754913600">- update non-CUDA variant to 580.76.05 (boo#1247907)
- get rid of rule of older KMPs not to load nvidia_drm module,
  which are still installed in parallel and therefore still
  active (boo#1247923)</changelog>
  <changelog author="sndirsch@suse.com" date="1755172800">- make sure Requires to nvidia packages are not added for SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1757160000">- update CUDA variant to 580.82.07</changelog>
  <changelog author="sndirsch@suse.com" date="1757246400">- update non-CUDA variant to 580.82.07 (boo#1249235)</changelog>
  <changelog author="sndirsch@suse.com" date="1757332800">- let conflict CUDA and non-CUDA -devel packages; this is needed
  if both have the same version</changelog>
  <changelog author="sndirsch@suse.com" date="1758110400">- pesign-spec-macros: added definition for %__kernel_supplements,
  which replaced %__kmp_supplements with latest RPM used on TW now,
  in order to fix PCI HW Supplements for TW (boo#1249814)</changelog>
  <changelog author="sndirsch@suse.com" date="1758628800">- get rid of multiversion for the KMPs, since it only brought/brings
  us trouble and no benefit at all (jsc#PED-12049)
  * remove any ^Conflicts and ^Provides: multiversion from
    /usr/lib/rpm/kernel-module-subpackage
  * set INSTALL_MOD_DIR back to %{kernel_module_package_moddir}, i.e.
    updates/ subdir</changelog>
  <changelog author="sndirsch@suse.com" date="1758801600">- update to version 580.95.05 (boo#1250536)</changelog>
  <changelog author="sndirsch@suse.com" date="1759320000">- fixed 'osc service run download_files'</changelog>
  <changelog author="sndirsch@suse.com" date="1759752000">- update CUDA variant to 580.95.05</changelog>
  <changelog author="sndirsch@suse.com" date="1759924800">- Check4WrongSupplements.sh
  * check for wrong Supplements in generated KMPs after build by
    misusing %post of a dummy "check" subpackage</changelog>
  <changelog author="sndirsch@suse.com" date="1760443200">- changed Requires to
  * nvidia-modprobe = %version
  * nvidia-persitenced = %version
  it has been &gt;= before ...</changelog>
  <changelog author="sndirsch@suse.com" date="1760616000">- renamed check to %name-check package</changelog>
</package>
<package pkgid="fb6724cd5d26f2560ae76558a8cd348a9d7c6e7380f107c112c2081744656a0b" name="nv-prefer-signed-open-driver-G07" arch="x86_64">
  <version epoch="0" ver="595.58.03" rel="150700.16.5.1"/>
  <changelog author="sndirsch@suse.com" date="1760616000">- renamed check to %name-check package</changelog>
  <changelog author="sndirsch@suse.com" date="1761998400">- update non-CUDA variant to version 580.105.08 (boo#1252978)</changelog>
  <changelog author="sndirsch@suse.com" date="1762257600">- back to 580.95.05 on aarch64, since userspace drivers have not
  been updated for this platform</changelog>
  <changelog author="sndirsch@suse.com" date="1763035200">- update CUDA variant to 580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1763035201">- introduced extra %gfx_aarch64_version and appropriate
  tarball/pci_id file in the hope that build service will no
  longer complain</changelog>
  <changelog author="sndirsch@suse.com" date="1764763200">- kernel-6.18.patch
  * trying to fix build against kernel 6.18</changelog>
  <changelog author="sndirsch@suse.com" date="1765195200">- update to G07 version 590.44.01</changelog>
  <changelog author="sndirsch@suse.com" date="1765540800">- removed Obsoletes to nvidia-open-driver-G06-signed-kmp, because
  zypper dup apparently handles Obsoletes the same way as Provides,
  which we don't want (at least not now) (boo#1254887)</changelog>
  <changelog author="sndirsch@suse.com" date="1765540801">- preamble: let G07 KMPs conflict with G06 KMPs due to file conflicts</changelog>
  <changelog author="sndirsch@suse.com" date="1765800000">- let G07 packages supplement via packageand(G06) so G06 packages
  get uninstalled if G07 packages get installed</changelog>
  <changelog author="sndirsch@suse.com" date="1766491200">- update to G07 version 590.48.01</changelog>
  <changelog author="sndirsch@suse.com" date="1770724800">- kernel-6.19.patch: fixes build against kernel 6.19</changelog>
  <changelog author="sndirsch@suse.com" date="1771934400">- update non-CUDA version to 595.45.04 (boo#1258797)
- adjusted logic for %suse_version bump with SLE16.1 Beta2 (jsc#PED-15826)</changelog>
  <changelog author="sndirsch@suse.com" date="1772712000">- kernel-5.14.patch: fixed build of 595.45.04 driver on SP4</changelog>
  <changelog author="sndirsch@suse.com" date="1773057600">- update CUDA variant to 595.45.04
- supersedes kernel-6.19.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1773662400">- add 'Provides: open-driver-non-cuda-variant = %version' for
  non-CUDA variant to be able to distinguish between both variants;
  to be used by nvidia-open-driver-G07-signed-kmp-meta for TW ...</changelog>
  <changelog author="sndirsch@suse.com" date="1773835200">- do not set ExclusiveArch in order to fix RPM description for -cuda
  variant (bsc#1259719)
- improved RPM description for -cuda and non-cuda variant</changelog>
  <changelog author="sndirsch@suse.com" date="1774180800">- update non-CUDA version to 595.58.03 (boo#1260044)</changelog>
  <changelog author="sndirsch@suse.com" date="1774353600">- update CUDA variant to 595.58.03</changelog>
  <changelog author="sndirsch@suse.com" date="1774353601">- adding 'ExcludeArch:    %ix86 s390x ppc64le' to no longer get
  autoclines by buildservice hoping that this wont't break RPM
  descriptions for -cuda variant again ...</changelog>
</package>
<package pkgid="37ccc7a2b53d96bbdd991853b65958de875464559ac72508538f704cf6bd7626" name="nv-prefer-signed-open-driver-G07" arch="x86_64">
  <version epoch="0" ver="595.71.05" rel="150700.16.8.1"/>
  <changelog author="sndirsch@suse.com" date="1763035200">- update CUDA variant to 580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1763035201">- introduced extra %gfx_aarch64_version and appropriate
  tarball/pci_id file in the hope that build service will no
  longer complain</changelog>
  <changelog author="sndirsch@suse.com" date="1764763200">- kernel-6.18.patch
  * trying to fix build against kernel 6.18</changelog>
  <changelog author="sndirsch@suse.com" date="1765195200">- update to G07 version 590.44.01</changelog>
  <changelog author="sndirsch@suse.com" date="1765540800">- removed Obsoletes to nvidia-open-driver-G06-signed-kmp, because
  zypper dup apparently handles Obsoletes the same way as Provides,
  which we don't want (at least not now) (boo#1254887)</changelog>
  <changelog author="sndirsch@suse.com" date="1765540801">- preamble: let G07 KMPs conflict with G06 KMPs due to file conflicts</changelog>
  <changelog author="sndirsch@suse.com" date="1765800000">- let G07 packages supplement via packageand(G06) so G06 packages
  get uninstalled if G07 packages get installed</changelog>
  <changelog author="sndirsch@suse.com" date="1766491200">- update to G07 version 590.48.01</changelog>
  <changelog author="sndirsch@suse.com" date="1770724800">- kernel-6.19.patch: fixes build against kernel 6.19</changelog>
  <changelog author="sndirsch@suse.com" date="1771934400">- update non-CUDA version to 595.45.04 (boo#1258797)
- adjusted logic for %suse_version bump with SLE16.1 Beta2 (jsc#PED-15826)</changelog>
  <changelog author="sndirsch@suse.com" date="1772712000">- kernel-5.14.patch: fixed build of 595.45.04 driver on SP4</changelog>
  <changelog author="sndirsch@suse.com" date="1773057600">- update CUDA variant to 595.45.04
- supersedes kernel-6.19.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1773662400">- add 'Provides: open-driver-non-cuda-variant = %version' for
  non-CUDA variant to be able to distinguish between both variants;
  to be used by nvidia-open-driver-G07-signed-kmp-meta for TW ...</changelog>
  <changelog author="sndirsch@suse.com" date="1773835200">- do not set ExclusiveArch in order to fix RPM description for -cuda
  variant (bsc#1259719)
- improved RPM description for -cuda and non-cuda variant</changelog>
  <changelog author="sndirsch@suse.com" date="1774180800">- update non-CUDA version to 595.58.03 (boo#1260044)</changelog>
  <changelog author="sndirsch@suse.com" date="1774353600">- update CUDA variant to 595.58.03</changelog>
  <changelog author="sndirsch@suse.com" date="1774353601">- adding 'ExcludeArch:    %ix86 s390x ppc64le' to no longer get
  autoclines by buildservice hoping that this wont't break RPM
  descriptions for -cuda variant again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1776859200">- update non-CUDA variant to 595.71.05 (boo#1262574)
- disable-objtool-override.patch
  * get rid of confusing objtool warnings (boo#1212841)
  - -&gt; from https://github.com/joanbm/nvidia-470xx-linux-mainline</changelog>
  <changelog author="sndirsch@suse.com" date="1777377600">- update CUDA variant to 595.71.05</changelog>
  <changelog author="sndirsch@suse.com" date="1777809600">- fix-objtool-warnings.patch (not applied on aarch64)
  * Get rid of "'naked' return found in MITIGATION_RETHUNK build"
    objtool warnings (boo#1212841, boo#1263834)
- remove again disable-objtool-override.patch</changelog>
</package>
<package pkgid="8194b579601c3f3eb3dc0dd341d250dd06be4796c6b64cca8d6aac6a816d13b6" name="nvidia-modprobe" arch="src">
  <version epoch="0" ver="580.82.07" rel="150400.9.3.1"/>
  <changelog author="sndirsch@suse.com" date="1752667200">- created package for CUDA repository</changelog>
  <changelog author="sndirsch@suse.com" date="1752667201">- update to 575.57.08
- add 'nvidia-modprobe-cuda-lt-sp6' Povides to be required by
  nvidia-open-driver-G06-signed built against SLE &lt; SP6 (bsc#1237208,
  jsc#PED-13295)</changelog>
  <changelog author="sndirsch@suse.com" date="1754395200">- update to 580.65.06</changelog>
  <changelog author="sndirsch@suse.com" date="1755691200">- get rid of rpmlintrc and extra persmissions file (boo#1246776)
- set Group to System/X11/Utilities</changelog>
  <changelog author="sndirsch@suse.com" date="1757160000">- update to 580.82.07</changelog>
</package>
<package pkgid="099c06baaa61c98c56ee9c0ea51c0b6b51546673534a59b8bc02a6aec09b7233" name="nvidia-modprobe" arch="x86_64">
  <version epoch="0" ver="580.82.07" rel="150400.9.3.1"/>
  <changelog author="sndirsch@suse.com" date="1752667200">- created package for CUDA repository</changelog>
  <changelog author="sndirsch@suse.com" date="1752667201">- update to 575.57.08
- add 'nvidia-modprobe-cuda-lt-sp6' Povides to be required by
  nvidia-open-driver-G06-signed built against SLE &lt; SP6 (bsc#1237208,
  jsc#PED-13295)</changelog>
  <changelog author="sndirsch@suse.com" date="1754395200">- update to 580.65.06</changelog>
  <changelog author="sndirsch@suse.com" date="1755691200">- get rid of rpmlintrc and extra persmissions file (boo#1246776)
- set Group to System/X11/Utilities</changelog>
  <changelog author="sndirsch@suse.com" date="1757160000">- update to 580.82.07</changelog>
</package>
<package pkgid="34d066c802a6ccfe8e533f3fdeb5a73f959b062da987d68db8b0227d27c115a8" name="nvidia-open-driver-G06-signed" arch="src">
  <version epoch="0" ver="570.153.02" rel="150700.3.3.1"/>
  <changelog author="sndirsch@suse.com" date="1736856000">- Update to 550.144.03 (bsc#1235461, boo#1235871)
  * fixes CVE-2024-0131, CVE-2024-0147, CVE-2024-0149,
    CVE-2024-0150, CVE-2024-53869</changelog>
  <changelog author="sndirsch@suse.com" date="1737547200">- preamble: let -cuda KMP conflict with no-cuda variants &lt; 550.135
  (bsc#1236191)</changelog>
  <changelog author="sndirsch@suse.com" date="1737979200">- Update to 565.77
- non-CUDA variant:
  * get rid of modproee.d and dracut.cd files and udev magic;
    instead require nvidia-common-G06
  * Supplements: switch to really supported devices; not only the
    initially supported ones without graphical output
- update non-CUDA and CUDA variant to 570.86.15</changelog>
  <changelog author="sndirsch@suse.com" date="1738065600">- update non-CUDA variant to 570.86.16 (boo#1236658)
- supersedes aarch64-TW-buildfix.patch
- supersedes set-FOP_UNSIGNED_OFFSET-for-nv_drm_fops.fop_flags.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1738584000">- fixed version of 'Provides: nvidia-open-signed-kmp = &lt;version&gt;'
  of nvidia-open-signed-cuda-kmp in preamble file
- fixed
  warning: File listed twice: /usr/src/kernel-modules/nvidia-570.86.16-default</changelog>
  <changelog author="sndirsch@suse.com" date="1738584001">- no longer try to patch %post/%postun; no changes needed any longer
- trigger script needs to be triggered now by nvidia-common-G06,
  which replaced kernel-firmware-nvidia-gspx-G06{,-cuda} packages</changelog>
  <changelog author="sndirsch@suse.com" date="1738584002">- fixed build against openSUSE:Factory by defining %_builddir
  if needed (boo#1236746)</changelog>
  <changelog author="eich@suse.com" date="1738670400">- Add a directory identifying the KMP and its version to the module
  install path - i.e.:
  &lt;kernel_version&gt;/nvidia-open-driver-G06-signed-&lt;version&gt;/updates
  instead of:
  &lt;kernel_version&gt;/updates
  This avoids conflicts when a new version is built against the
  same kernel release.</changelog>
  <changelog author="eich@suse.com" date="1739880000">- In the module install path revert the order of the 'updates'
  subdirectory and the package name &amp; version. This satisfies
  the kmp dependency checker (boo#1237308).</changelog>
  <changelog author="rfrohl@suse.com" date="1740312000">- explicitly enable KMP for kernel-longterm: this will be needed
  for the transition period, until all KMPs are enabled</changelog>
  <changelog author="sndirsch@suse.com" date="1740398400">- update non-CUDA variant to 570.124.02 (boo#1237585)</changelog>
  <changelog author="sndirsch@suse.com" date="1740484800">- update non-CUDA variant to 570.124.04 (boo#1237585)</changelog>
  <changelog author="sndirsch@suse.com" date="1741089600">- update CUDA variant to 570.124.06</changelog>
  <changelog author="sndirsch@suse.com" date="1741435200">- removed obsolete kernel-firmware-nvidia-gspx-G06-cuda; firmware
  has moved to nvidia-common-G06 and
  kernel-firmware-nvidia-gspx-G06 is no longer available either
  (boo#1239139)</changelog>
  <changelog author="sndirsch@suse.com" date="1742040000">- update non-CUDA variant to 570.133.07 (bsc#1239653)</changelog>
  <changelog author="sndirsch@suse.com" date="1743422400">- limit build of -azure flavor to SP6</changelog>
  <changelog author="sndirsch@suse.com" date="1744718400">- update non-CUDA variant to 570.144 (boo#1241231)</changelog>
  <changelog author="sndirsch@suse.com" date="1744977600">- update CUDA variant to 570.133.20</changelog>
  <changelog author="sndirsch@suse.com" date="1746187200">- disabled unsupported -rt flavor (bsc#1242054)</changelog>
  <changelog author="sndirsch@suse.com" date="1747224000">- update non-CUDA variant to 570.153.02 (boo#1243192)</changelog>
</package>
<package pkgid="34a2c663136c53f4e8400642bf4dd1f413860a00a2c2d7435789149ef8c6a163" name="nvidia-open-driver-G06-signed" arch="src">
  <version epoch="0" ver="570.169" rel="150700.3.8.2"/>
  <changelog author="sndirsch@suse.com" date="1738584000">- fixed version of 'Provides: nvidia-open-signed-kmp = &lt;version&gt;'
  of nvidia-open-signed-cuda-kmp in preamble file
- fixed
  warning: File listed twice: /usr/src/kernel-modules/nvidia-570.86.16-default</changelog>
  <changelog author="sndirsch@suse.com" date="1738584001">- no longer try to patch %post/%postun; no changes needed any longer
- trigger script needs to be triggered now by nvidia-common-G06,
  which replaced kernel-firmware-nvidia-gspx-G06{,-cuda} packages</changelog>
  <changelog author="sndirsch@suse.com" date="1738584002">- fixed build against openSUSE:Factory by defining %_builddir
  if needed (boo#1236746)</changelog>
  <changelog author="eich@suse.com" date="1738670400">- Add a directory identifying the KMP and its version to the module
  install path - i.e.:
  &lt;kernel_version&gt;/nvidia-open-driver-G06-signed-&lt;version&gt;/updates
  instead of:
  &lt;kernel_version&gt;/updates
  This avoids conflicts when a new version is built against the
  same kernel release.</changelog>
  <changelog author="eich@suse.com" date="1739880000">- In the module install path revert the order of the 'updates'
  subdirectory and the package name &amp; version. This satisfies
  the kmp dependency checker (boo#1237308).</changelog>
  <changelog author="rfrohl@suse.com" date="1740312000">- explicitly enable KMP for kernel-longterm: this will be needed
  for the transition period, until all KMPs are enabled</changelog>
  <changelog author="sndirsch@suse.com" date="1740398400">- update non-CUDA variant to 570.124.02 (boo#1237585)</changelog>
  <changelog author="sndirsch@suse.com" date="1740484800">- update non-CUDA variant to 570.124.04 (boo#1237585)</changelog>
  <changelog author="sndirsch@suse.com" date="1741089600">- update CUDA variant to 570.124.06</changelog>
  <changelog author="sndirsch@suse.com" date="1741435200">- removed obsolete kernel-firmware-nvidia-gspx-G06-cuda; firmware
  has moved to nvidia-common-G06 and
  kernel-firmware-nvidia-gspx-G06 is no longer available either
  (boo#1239139)</changelog>
  <changelog author="sndirsch@suse.com" date="1742040000">- update non-CUDA variant to 570.133.07 (bsc#1239653)</changelog>
  <changelog author="sndirsch@suse.com" date="1743422400">- limit build of -azure flavor to SP6</changelog>
  <changelog author="sndirsch@suse.com" date="1744718400">- update non-CUDA variant to 570.144 (boo#1241231)</changelog>
  <changelog author="sndirsch@suse.com" date="1744977600">- update CUDA variant to 570.133.20</changelog>
  <changelog author="sndirsch@suse.com" date="1746187200">- disabled unsupported -rt flavor (bsc#1242054)</changelog>
  <changelog author="sndirsch@suse.com" date="1747224000">- update non-CUDA variant to 570.153.02 (boo#1243192)</changelog>
  <changelog author="sndirsch@suse.com" date="1749211200">- update CUDA variant to 575.57.08
- supersedes persistent-nvidia-id-string.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1749470400">- Drop persistent-nvidia-id-string.patch - solved via make params instead</changelog>
  <changelog author="sndirsch@suse.com" date="1749643200">- 60-nvidia-$flavor.conf
  * Don't try to load the driver if config and GSP firmware files are
    not available. Otherwise let the default install rule
    'install nvidia-drm /sbin/modprobe --ignore-install nvidia-drm' of
    50-nvidia.conf win, which comes together with config and GSP
    firmware files (package nvidia-common-G06).</changelog>
  <changelog author="sndirsch@suse.com" date="1749988800">- update non-CUDA variant to 570.169 (boo#1244614)</changelog>
</package>
<package pkgid="149a1aae00e598fdf18ac6cdcb4ea39e95481a9cb7f482515b1166f43ddedee1" name="nvidia-open-driver-G06-signed" arch="src">
  <version epoch="0" ver="570.172.08" rel="150700.3.14.2"/>
  <changelog author="eich@suse.com" date="1738670400">- Add a directory identifying the KMP and its version to the module
  install path - i.e.:
  &lt;kernel_version&gt;/nvidia-open-driver-G06-signed-&lt;version&gt;/updates
  instead of:
  &lt;kernel_version&gt;/updates
  This avoids conflicts when a new version is built against the
  same kernel release.</changelog>
  <changelog author="eich@suse.com" date="1739880000">- In the module install path revert the order of the 'updates'
  subdirectory and the package name &amp; version. This satisfies
  the kmp dependency checker (boo#1237308).</changelog>
  <changelog author="rfrohl@suse.com" date="1740312000">- explicitly enable KMP for kernel-longterm: this will be needed
  for the transition period, until all KMPs are enabled</changelog>
  <changelog author="sndirsch@suse.com" date="1740398400">- update non-CUDA variant to 570.124.02 (boo#1237585)</changelog>
  <changelog author="sndirsch@suse.com" date="1740484800">- update non-CUDA variant to 570.124.04 (boo#1237585)</changelog>
  <changelog author="sndirsch@suse.com" date="1741089600">- update CUDA variant to 570.124.06</changelog>
  <changelog author="sndirsch@suse.com" date="1741435200">- removed obsolete kernel-firmware-nvidia-gspx-G06-cuda; firmware
  has moved to nvidia-common-G06 and
  kernel-firmware-nvidia-gspx-G06 is no longer available either
  (boo#1239139)</changelog>
  <changelog author="sndirsch@suse.com" date="1742040000">- update non-CUDA variant to 570.133.07 (bsc#1239653)</changelog>
  <changelog author="sndirsch@suse.com" date="1743422400">- limit build of -azure flavor to SP6</changelog>
  <changelog author="sndirsch@suse.com" date="1744718400">- update non-CUDA variant to 570.144 (boo#1241231)</changelog>
  <changelog author="sndirsch@suse.com" date="1744977600">- update CUDA variant to 570.133.20</changelog>
  <changelog author="sndirsch@suse.com" date="1746187200">- disabled unsupported -rt flavor (bsc#1242054)</changelog>
  <changelog author="sndirsch@suse.com" date="1747224000">- update non-CUDA variant to 570.153.02 (boo#1243192)</changelog>
  <changelog author="sndirsch@suse.com" date="1749211200">- update CUDA variant to 575.57.08
- supersedes persistent-nvidia-id-string.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1749470400">- Drop persistent-nvidia-id-string.patch - solved via make params instead</changelog>
  <changelog author="sndirsch@suse.com" date="1749643200">- 60-nvidia-$flavor.conf
  * Don't try to load the driver if config and GSP firmware files are
    not available. Otherwise let the default install rule
    'install nvidia-drm /sbin/modprobe --ignore-install nvidia-drm' of
    50-nvidia.conf win, which comes together with config and GSP
    firmware files (package nvidia-common-G06).</changelog>
  <changelog author="sndirsch@suse.com" date="1749988800">- update non-CUDA variant to 570.169 (boo#1244614)</changelog>
  <changelog author="sndirsch@suse.com" date="1750766400">- 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
  * buildfixes against Kernel 6.16 picked up from
    https://github.com/CachyOS/CachyOS-PKGBUILDS.git
  - -&gt; nvidia/nvidia-utils</changelog>
  <changelog author="sndirsch@suse.com" date="1751889600">- empty pci_ids-570.169; PCI ID hardware Supplements get moved to
  gfx repository to package nvidia-open-driver-G06-signed-kmp-meta
  (boo#1246010)
- remove 60-nvidia-$flavor.conf, since driver no longer gets
  autoselected without gfx/cuda repositories present and so we no
  longer need to disable it by default (boo#1246010)</changelog>
  <changelog author="sndirsch@suse.com" date="1752235200">- update non-CUDA variant to 570.172.08 (boo#1246327)
- supersedes
  * 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  * 0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
- update pci_ids-supported</changelog>
</package>
<package pkgid="d0600cbb2e18ac3ce1068774bec4ee9be7b1ae773b198375cea3226925ea10dd" name="nvidia-open-driver-G06-signed" arch="src">
  <version epoch="0" ver="580.105.08" rel="150700.3.34.2"/>
  <changelog author="sndirsch@suse.com" date="1753704000">- update CUDA variant to 580.65.06, which addresses various security
  issues:
  * CVE-2025-23277 (bsc#1247528)
  * CVE-2025-23278 (bsc#1247529)
  * CVE-2025-23286 (bsc#1247530)
  * CVE-2025-23283 (bsc#1247531)
  * CVE-2025-23279 (bsc#1247532)</changelog>
  <changelog author="sndirsch@suse.com" date="1754395200">- added Requires
  * nvidia-modprobe &gt;= %version
  * nvidia-persitenced &gt;= %version
  * nvidia-modprobe-cuda-lt-sp6
  * nvidia-persitenced-cuda-lt-sp6
  to be provided by special versions of nvidia-modprobe and
  nvidia-persitenced built against SP4 (bsc#1237208, jsc#PED-13295)</changelog>
  <changelog author="sndirsch@suse.com" date="1754740800">- make sure these Requires right below are not added on Tumbleweed</changelog>
  <changelog author="sndirsch@suse.com" date="1754913600">- update non-CUDA variant to 580.76.05 (boo#1247907)
- get rid of rule of older KMPs not to load nvidia_drm module,
  which are still installed in parallel and therefore still
  active (boo#1247923)</changelog>
  <changelog author="sndirsch@suse.com" date="1755172800">- make sure Requires to nvidia packages are not added for SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1757160000">- update CUDA variant to 580.82.07</changelog>
  <changelog author="sndirsch@suse.com" date="1757246400">- update non-CUDA variant to 580.82.07 (boo#1249235)</changelog>
  <changelog author="sndirsch@suse.com" date="1757332800">- let conflict CUDA and non-CUDA -devel packages; this is needed
  if both have the same version</changelog>
  <changelog author="sndirsch@suse.com" date="1758110400">- pesign-spec-macros: added definition for %__kernel_supplements,
  which replaced %__kmp_supplements with latest RPM used on TW now,
  in order to fix PCI HW Supplements for TW (boo#1249814)</changelog>
  <changelog author="sndirsch@suse.com" date="1758628800">- get rid of multiversion for the KMPs, since it only brought/brings
  us trouble and no benefit at all (jsc#PED-12049)
  * remove any ^Conflicts and ^Provides: multiversion from
    /usr/lib/rpm/kernel-module-subpackage
  * set INSTALL_MOD_DIR back to %{kernel_module_package_moddir}, i.e.
    updates/ subdir</changelog>
  <changelog author="sndirsch@suse.com" date="1758801600">- update to version 580.95.05 (boo#1250536)</changelog>
  <changelog author="sndirsch@suse.com" date="1759320000">- fixed 'osc service run download_files'</changelog>
  <changelog author="sndirsch@suse.com" date="1759752000">- update CUDA variant to 580.95.05</changelog>
  <changelog author="sndirsch@suse.com" date="1759924800">- Check4WrongSupplements.sh
  * check for wrong Supplements in generated KMPs after build by
    misusing %post of a dummy "check" subpackage</changelog>
  <changelog author="sndirsch@suse.com" date="1760443200">- changed Requires to
  * nvidia-modprobe = %version
  * nvidia-persitenced = %version
  it has been &gt;= before ...</changelog>
  <changelog author="sndirsch@suse.com" date="1760616000">- renamed check to %name-check package</changelog>
  <changelog author="sndirsch@suse.com" date="1761998400">- update non-CUDA variant to version 580.105.08 (boo#1252978)</changelog>
  <changelog author="sndirsch@suse.com" date="1762257600">- back to 580.95.05 on aarch64, since userspace drivers have not
  been updated for this platform</changelog>
  <changelog author="sndirsch@suse.com" date="1763035200">- update CUDA variant to 580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1763035201">- introduced extra %gfx_aarch64_version and appropriate
  tarball/pci_id file in the hope that build service will no
  longer complain</changelog>
</package>
<package pkgid="98ed05f4e3d9e3a21395eefead1feeed5ced6be19f6a7e7deb6e6f92741127d0" name="nvidia-open-driver-G06-signed" arch="src">
  <version epoch="0" ver="580.119.02" rel="150700.3.37.1"/>
  <changelog author="sndirsch@suse.com" date="1754913600">- update non-CUDA variant to 580.76.05 (boo#1247907)
- get rid of rule of older KMPs not to load nvidia_drm module,
  which are still installed in parallel and therefore still
  active (boo#1247923)</changelog>
  <changelog author="sndirsch@suse.com" date="1755172800">- make sure Requires to nvidia packages are not added for SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1757160000">- update CUDA variant to 580.82.07</changelog>
  <changelog author="sndirsch@suse.com" date="1757246400">- update non-CUDA variant to 580.82.07 (boo#1249235)</changelog>
  <changelog author="sndirsch@suse.com" date="1757332800">- let conflict CUDA and non-CUDA -devel packages; this is needed
  if both have the same version</changelog>
  <changelog author="sndirsch@suse.com" date="1758110400">- pesign-spec-macros: added definition for %__kernel_supplements,
  which replaced %__kmp_supplements with latest RPM used on TW now,
  in order to fix PCI HW Supplements for TW (boo#1249814)</changelog>
  <changelog author="sndirsch@suse.com" date="1758628800">- get rid of multiversion for the KMPs, since it only brought/brings
  us trouble and no benefit at all (jsc#PED-12049)
  * remove any ^Conflicts and ^Provides: multiversion from
    /usr/lib/rpm/kernel-module-subpackage
  * set INSTALL_MOD_DIR back to %{kernel_module_package_moddir}, i.e.
    updates/ subdir</changelog>
  <changelog author="sndirsch@suse.com" date="1758801600">- update to version 580.95.05 (boo#1250536)</changelog>
  <changelog author="sndirsch@suse.com" date="1759320000">- fixed 'osc service run download_files'</changelog>
  <changelog author="sndirsch@suse.com" date="1759752000">- update CUDA variant to 580.95.05</changelog>
  <changelog author="sndirsch@suse.com" date="1759924800">- Check4WrongSupplements.sh
  * check for wrong Supplements in generated KMPs after build by
    misusing %post of a dummy "check" subpackage</changelog>
  <changelog author="sndirsch@suse.com" date="1760443200">- changed Requires to
  * nvidia-modprobe = %version
  * nvidia-persitenced = %version
  it has been &gt;= before ...</changelog>
  <changelog author="sndirsch@suse.com" date="1760616000">- renamed check to %name-check package</changelog>
  <changelog author="sndirsch@suse.com" date="1761998400">- update non-CUDA variant to version 580.105.08 (boo#1252978)</changelog>
  <changelog author="sndirsch@suse.com" date="1762257600">- back to 580.95.05 on aarch64, since userspace drivers have not
  been updated for this platform</changelog>
  <changelog author="sndirsch@suse.com" date="1763035200">- update CUDA variant to 580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1763035201">- introduced extra %gfx_aarch64_version and appropriate
  tarball/pci_id file in the hope that build service will no
  longer complain</changelog>
  <changelog author="sndirsch@suse.com" date="1764763200">- kernel-6.18.patch
  * fixed build against kernel 6.18</changelog>
  <changelog author="sndirsch@suse.com" date="1765454400">- update non-CUDA variant to version 580.119.02 (boo#1254801)</changelog>
  <changelog author="sndirsch@suse.com" date="1765454401">- readded kernel-6.18.patch still needed for cuda driver version
  580.105.08</changelog>
</package>
<package pkgid="84a22e864fd45085f52262a5dd13c7a91bfc7a27839ee89119f8387420c52d87" name="nvidia-open-driver-G06-signed" arch="src">
  <version epoch="0" ver="580.126.09" rel="150700.3.40.1"/>
  <changelog author="sndirsch@suse.com" date="1757160000">- update CUDA variant to 580.82.07</changelog>
  <changelog author="sndirsch@suse.com" date="1757246400">- update non-CUDA variant to 580.82.07 (boo#1249235)</changelog>
  <changelog author="sndirsch@suse.com" date="1757332800">- let conflict CUDA and non-CUDA -devel packages; this is needed
  if both have the same version</changelog>
  <changelog author="sndirsch@suse.com" date="1758110400">- pesign-spec-macros: added definition for %__kernel_supplements,
  which replaced %__kmp_supplements with latest RPM used on TW now,
  in order to fix PCI HW Supplements for TW (boo#1249814)</changelog>
  <changelog author="sndirsch@suse.com" date="1758628800">- get rid of multiversion for the KMPs, since it only brought/brings
  us trouble and no benefit at all (jsc#PED-12049)
  * remove any ^Conflicts and ^Provides: multiversion from
    /usr/lib/rpm/kernel-module-subpackage
  * set INSTALL_MOD_DIR back to %{kernel_module_package_moddir}, i.e.
    updates/ subdir</changelog>
  <changelog author="sndirsch@suse.com" date="1758801600">- update to version 580.95.05 (boo#1250536)</changelog>
  <changelog author="sndirsch@suse.com" date="1759320000">- fixed 'osc service run download_files'</changelog>
  <changelog author="sndirsch@suse.com" date="1759752000">- update CUDA variant to 580.95.05</changelog>
  <changelog author="sndirsch@suse.com" date="1759924800">- Check4WrongSupplements.sh
  * check for wrong Supplements in generated KMPs after build by
    misusing %post of a dummy "check" subpackage</changelog>
  <changelog author="sndirsch@suse.com" date="1760443200">- changed Requires to
  * nvidia-modprobe = %version
  * nvidia-persitenced = %version
  it has been &gt;= before ...</changelog>
  <changelog author="sndirsch@suse.com" date="1760616000">- renamed check to %name-check package</changelog>
  <changelog author="sndirsch@suse.com" date="1761998400">- update non-CUDA variant to version 580.105.08 (boo#1252978)</changelog>
  <changelog author="sndirsch@suse.com" date="1762257600">- back to 580.95.05 on aarch64, since userspace drivers have not
  been updated for this platform</changelog>
  <changelog author="sndirsch@suse.com" date="1763035200">- update CUDA variant to 580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1763035201">- introduced extra %gfx_aarch64_version and appropriate
  tarball/pci_id file in the hope that build service will no
  longer complain</changelog>
  <changelog author="sndirsch@suse.com" date="1764763200">- kernel-6.18.patch
  * fixed build against kernel 6.18</changelog>
  <changelog author="sndirsch@suse.com" date="1765454400">- update non-CUDA variant to version 580.119.02 (boo#1254801)</changelog>
  <changelog author="sndirsch@suse.com" date="1765454401">- readded kernel-6.18.patch still needed for cuda driver version
  580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1767441600">- update non-CUDA variant to version 580.126.09 (boo#1255858)</changelog>
  <changelog author="sndirsch@suse.com" date="1768305600">- kernel-5.14.patch
  * fixes build for sle15-sp4</changelog>
</package>
<package pkgid="1e50fd6da34c1eba09c56352a9f8982d690d93274d9c0f12b2e3614bc0223623" name="nvidia-open-driver-G06-signed" arch="src">
  <version epoch="0" ver="580.126.18" rel="150700.3.45.1"/>
  <changelog author="sndirsch@suse.com" date="1758801600">- update to version 580.95.05 (boo#1250536)</changelog>
  <changelog author="sndirsch@suse.com" date="1759320000">- fixed 'osc service run download_files'</changelog>
  <changelog author="sndirsch@suse.com" date="1759752000">- update CUDA variant to 580.95.05</changelog>
  <changelog author="sndirsch@suse.com" date="1759924800">- Check4WrongSupplements.sh
  * check for wrong Supplements in generated KMPs after build by
    misusing %post of a dummy "check" subpackage</changelog>
  <changelog author="sndirsch@suse.com" date="1760443200">- changed Requires to
  * nvidia-modprobe = %version
  * nvidia-persitenced = %version
  it has been &gt;= before ...</changelog>
  <changelog author="sndirsch@suse.com" date="1760616000">- renamed check to %name-check package</changelog>
  <changelog author="sndirsch@suse.com" date="1761998400">- update non-CUDA variant to version 580.105.08 (boo#1252978)</changelog>
  <changelog author="sndirsch@suse.com" date="1762257600">- back to 580.95.05 on aarch64, since userspace drivers have not
  been updated for this platform</changelog>
  <changelog author="sndirsch@suse.com" date="1763035200">- update CUDA variant to 580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1763035201">- introduced extra %gfx_aarch64_version and appropriate
  tarball/pci_id file in the hope that build service will no
  longer complain</changelog>
  <changelog author="sndirsch@suse.com" date="1764763200">- kernel-6.18.patch
  * fixed build against kernel 6.18</changelog>
  <changelog author="sndirsch@suse.com" date="1765454400">- update non-CUDA variant to version 580.119.02 (boo#1254801)</changelog>
  <changelog author="sndirsch@suse.com" date="1765454401">- readded kernel-6.18.patch still needed for cuda driver version
  580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1767441600">- update non-CUDA variant to version 580.126.09 (boo#1255858)</changelog>
  <changelog author="sndirsch@suse.com" date="1768305600">- kernel-5.14.patch
  * fixes build for sle15-sp4</changelog>
  <changelog author="sndirsch@suse.com" date="1768910400">- updated CUDA variant to version 580.126.09
- supersedes kernel-6.18.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1769688000">- apply kernel-5.14.patch also on sle15-sp5 in order to fix build
  and adjusted it to sle15-sp5 kernel</changelog>
  <changelog author="sndirsch@suse.com" date="1770724800">- kernel-6.19.patch: fixes build against kernel 6.19</changelog>
  <changelog author="sndirsch@suse.com" date="1770897600">- update non-CUDA variant to version 580.126.18 (boo#1258154)
- updated CUDA variant to version 580.126.16</changelog>
  <changelog author="sndirsch@suse.com" date="1772107200">- updated CUDA variant to version 580.126.20
- supersedes kernel-6.19.patch</changelog>
</package>
<package pkgid="cac1b93c70a84cd9f4e7423d2c6f2704fcb26c4a1aa126fd5988296c2eaa27e9" name="nvidia-open-driver-G06-signed" arch="src">
  <version epoch="0" ver="580.159.03" rel="150700.3.48.1"/>
  <changelog author="sndirsch@suse.com" date="1763035200">- update CUDA variant to 580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1763035201">- introduced extra %gfx_aarch64_version and appropriate
  tarball/pci_id file in the hope that build service will no
  longer complain</changelog>
  <changelog author="sndirsch@suse.com" date="1764763200">- kernel-6.18.patch
  * fixed build against kernel 6.18</changelog>
  <changelog author="sndirsch@suse.com" date="1765454400">- update non-CUDA variant to version 580.119.02 (boo#1254801)</changelog>
  <changelog author="sndirsch@suse.com" date="1765454401">- readded kernel-6.18.patch still needed for cuda driver version
  580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1767441600">- update non-CUDA variant to version 580.126.09 (boo#1255858)</changelog>
  <changelog author="sndirsch@suse.com" date="1768305600">- kernel-5.14.patch
  * fixes build for sle15-sp4</changelog>
  <changelog author="sndirsch@suse.com" date="1768910400">- updated CUDA variant to version 580.126.09
- supersedes kernel-6.18.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1769688000">- apply kernel-5.14.patch also on sle15-sp5 in order to fix build
  and adjusted it to sle15-sp5 kernel</changelog>
  <changelog author="sndirsch@suse.com" date="1770724800">- kernel-6.19.patch: fixes build against kernel 6.19</changelog>
  <changelog author="sndirsch@suse.com" date="1770897600">- update non-CUDA variant to version 580.126.18 (boo#1258154)
- updated CUDA variant to version 580.126.16</changelog>
  <changelog author="sndirsch@suse.com" date="1772107200">- updated CUDA variant to version 580.126.20
- supersedes kernel-6.19.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1772712000">- adjusted logic for %suse_version bump with SLE16.1 Beta2 (jsc#PED-15826)</changelog>
  <changelog author="sndirsch@suse.com" date="1773662400">- add 'Provides: open-driver-non-cuda-variant = %version' for
  non-CUDA variant to be able to distinguish between both variants;
  to be used by nvidia-open-driver-G06-signed-kmp-meta for TW ...
  (boo#1259740)</changelog>
  <changelog author="sndirsch@suse.com" date="1773835200">- do not set ExclusiveArch in order to fix RPM description for -cuda
  variant (bsc#1259719)
- improved RPM description for -cuda and non-cuda variant</changelog>
  <changelog author="sndirsch@suse.com" date="1774440000">- adding 'ExcludeArch:    %ix86 s390x ppc64le' to no longer get
  autoclines by buildservice hoping that this wont't break RPM
  descriptions for -cuda variant again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1776945600">- disable-objtool-override.patch
  * get rid of confusing objtool warnings (boo#1212841)
  - -&gt; from https://github.com/joanbm/nvidia-470xx-linux-mainline</changelog>
  <changelog author="sndirsch@suse.com" date="1777032000">- update non-CUDA variant to 580.159.03 (boo#1262749)</changelog>
  <changelog author="sndirsch@suse.com" date="1777377600">- update CUDA variant to 580.159.03</changelog>
  <changelog author="sndirsch@suse.com" date="1777809600">- fix-objtool-warnings.patch (not applied on aarch64)
  * Get rid of "'naked' return found in MITIGATION_RETHUNK build"
    objtool warnings (boo#1212841, boo#1263834)
- remove again disable-objtool-override.patch</changelog>
</package>
<package pkgid="8b22d380d2da0c4ce7a7806f1191831d4f0490ea99558b4d68f9c5482c684bbe" name="nvidia-open-driver-G06-signed" arch="src">
  <version epoch="0" ver="580.82.07" rel="150700.3.21.1"/>
  <changelog author="sndirsch@suse.com" date="1743422400">- limit build of -azure flavor to SP6</changelog>
  <changelog author="sndirsch@suse.com" date="1744718400">- update non-CUDA variant to 570.144 (boo#1241231)</changelog>
  <changelog author="sndirsch@suse.com" date="1744977600">- update CUDA variant to 570.133.20</changelog>
  <changelog author="sndirsch@suse.com" date="1746187200">- disabled unsupported -rt flavor (bsc#1242054)</changelog>
  <changelog author="sndirsch@suse.com" date="1747224000">- update non-CUDA variant to 570.153.02 (boo#1243192)</changelog>
  <changelog author="sndirsch@suse.com" date="1749211200">- update CUDA variant to 575.57.08
- supersedes persistent-nvidia-id-string.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1749470400">- Drop persistent-nvidia-id-string.patch - solved via make params instead</changelog>
  <changelog author="sndirsch@suse.com" date="1749643200">- 60-nvidia-$flavor.conf
  * Don't try to load the driver if config and GSP firmware files are
    not available. Otherwise let the default install rule
    'install nvidia-drm /sbin/modprobe --ignore-install nvidia-drm' of
    50-nvidia.conf win, which comes together with config and GSP
    firmware files (package nvidia-common-G06).</changelog>
  <changelog author="sndirsch@suse.com" date="1749988800">- update non-CUDA variant to 570.169 (boo#1244614)</changelog>
  <changelog author="sndirsch@suse.com" date="1750766400">- 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
  * buildfixes against Kernel 6.16 picked up from
    https://github.com/CachyOS/CachyOS-PKGBUILDS.git
  - -&gt; nvidia/nvidia-utils</changelog>
  <changelog author="sndirsch@suse.com" date="1751889600">- empty pci_ids-570.169; PCI ID hardware Supplements get moved to
  gfx repository to package nvidia-open-driver-G06-signed-kmp-meta
  (boo#1246010)
- remove 60-nvidia-$flavor.conf, since driver no longer gets
  autoselected without gfx/cuda repositories present and so we no
  longer need to disable it by default (boo#1246010)</changelog>
  <changelog author="sndirsch@suse.com" date="1752235200">- update non-CUDA variant to 570.172.08 (boo#1246327)
- supersedes
  * 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  * 0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
- update pci_ids-supported</changelog>
  <changelog author="sndirsch@suse.com" date="1753704000">- update CUDA variant to 580.65.06, which addresses various security
  issues:
  * CVE-2025-23277 (bsc#1247528)
  * CVE-2025-23278 (bsc#1247529)
  * CVE-2025-23286 (bsc#1247530)
  * CVE-2025-23283 (bsc#1247531)
  * CVE-2025-23279 (bsc#1247532)</changelog>
  <changelog author="sndirsch@suse.com" date="1754395200">- added Requires
  * nvidia-modprobe &gt;= %version
  * nvidia-persitenced &gt;= %version
  * nvidia-modprobe-cuda-lt-sp6
  * nvidia-persitenced-cuda-lt-sp6
  to be provided by special versions of nvidia-modprobe and
  nvidia-persitenced built against SP4 (bsc#1237208, jsc#PED-13295)</changelog>
  <changelog author="sndirsch@suse.com" date="1754740800">- make sure these Requires right below are not added on Tumbleweed</changelog>
  <changelog author="sndirsch@suse.com" date="1754913600">- update non-CUDA variant to 580.76.05 (boo#1247907)
- get rid of rule of older KMPs not to load nvidia_drm module,
  which are still installed in parallel and therefore still
  active (boo#1247923)</changelog>
  <changelog author="sndirsch@suse.com" date="1755172800">- make sure Requires to nvidia packages are not added for SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1757160000">- update CUDA variant to 580.82.07</changelog>
  <changelog author="sndirsch@suse.com" date="1757246400">- update non-CUDA variant to 580.82.07 (boo#1249235)</changelog>
  <changelog author="sndirsch@suse.com" date="1757332800">- let conflict CUDA and non-CUDA -devel packages; this is needed
  if both have the same version</changelog>
</package>
<package pkgid="ca883f947226f16d29fc4e0e4df5623c20fee294f9c93ce6112c8d260e339d42" name="nvidia-open-driver-G06-signed" arch="src">
  <version epoch="0" ver="580.95.05" rel="150700.3.24.1"/>
  <changelog author="sndirsch@suse.com" date="1746187200">- disabled unsupported -rt flavor (bsc#1242054)</changelog>
  <changelog author="sndirsch@suse.com" date="1747224000">- update non-CUDA variant to 570.153.02 (boo#1243192)</changelog>
  <changelog author="sndirsch@suse.com" date="1749211200">- update CUDA variant to 575.57.08
- supersedes persistent-nvidia-id-string.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1749470400">- Drop persistent-nvidia-id-string.patch - solved via make params instead</changelog>
  <changelog author="sndirsch@suse.com" date="1749643200">- 60-nvidia-$flavor.conf
  * Don't try to load the driver if config and GSP firmware files are
    not available. Otherwise let the default install rule
    'install nvidia-drm /sbin/modprobe --ignore-install nvidia-drm' of
    50-nvidia.conf win, which comes together with config and GSP
    firmware files (package nvidia-common-G06).</changelog>
  <changelog author="sndirsch@suse.com" date="1749988800">- update non-CUDA variant to 570.169 (boo#1244614)</changelog>
  <changelog author="sndirsch@suse.com" date="1750766400">- 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
  * buildfixes against Kernel 6.16 picked up from
    https://github.com/CachyOS/CachyOS-PKGBUILDS.git
  - -&gt; nvidia/nvidia-utils</changelog>
  <changelog author="sndirsch@suse.com" date="1751889600">- empty pci_ids-570.169; PCI ID hardware Supplements get moved to
  gfx repository to package nvidia-open-driver-G06-signed-kmp-meta
  (boo#1246010)
- remove 60-nvidia-$flavor.conf, since driver no longer gets
  autoselected without gfx/cuda repositories present and so we no
  longer need to disable it by default (boo#1246010)</changelog>
  <changelog author="sndirsch@suse.com" date="1752235200">- update non-CUDA variant to 570.172.08 (boo#1246327)
- supersedes
  * 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  * 0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
- update pci_ids-supported</changelog>
  <changelog author="sndirsch@suse.com" date="1753704000">- update CUDA variant to 580.65.06, which addresses various security
  issues:
  * CVE-2025-23277 (bsc#1247528)
  * CVE-2025-23278 (bsc#1247529)
  * CVE-2025-23286 (bsc#1247530)
  * CVE-2025-23283 (bsc#1247531)
  * CVE-2025-23279 (bsc#1247532)</changelog>
  <changelog author="sndirsch@suse.com" date="1754395200">- added Requires
  * nvidia-modprobe &gt;= %version
  * nvidia-persitenced &gt;= %version
  * nvidia-modprobe-cuda-lt-sp6
  * nvidia-persitenced-cuda-lt-sp6
  to be provided by special versions of nvidia-modprobe and
  nvidia-persitenced built against SP4 (bsc#1237208, jsc#PED-13295)</changelog>
  <changelog author="sndirsch@suse.com" date="1754740800">- make sure these Requires right below are not added on Tumbleweed</changelog>
  <changelog author="sndirsch@suse.com" date="1754913600">- update non-CUDA variant to 580.76.05 (boo#1247907)
- get rid of rule of older KMPs not to load nvidia_drm module,
  which are still installed in parallel and therefore still
  active (boo#1247923)</changelog>
  <changelog author="sndirsch@suse.com" date="1755172800">- make sure Requires to nvidia packages are not added for SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1757160000">- update CUDA variant to 580.82.07</changelog>
  <changelog author="sndirsch@suse.com" date="1757246400">- update non-CUDA variant to 580.82.07 (boo#1249235)</changelog>
  <changelog author="sndirsch@suse.com" date="1757332800">- let conflict CUDA and non-CUDA -devel packages; this is needed
  if both have the same version</changelog>
  <changelog author="sndirsch@suse.com" date="1758110400">- pesign-spec-macros: added definition for %__kernel_supplements,
  which replaced %__kmp_supplements with latest RPM used on TW now,
  in order to fix PCI HW Supplements for TW (boo#1249814)</changelog>
  <changelog author="sndirsch@suse.com" date="1758628800">- get rid of multiversion for the KMPs, since it only brought/brings
  us trouble and no benefit at all (jsc#PED-12049)
  * remove any ^Conflicts and ^Provides: multiversion from
    /usr/lib/rpm/kernel-module-subpackage
  * set INSTALL_MOD_DIR back to %{kernel_module_package_moddir}, i.e.
    updates/ subdir</changelog>
  <changelog author="sndirsch@suse.com" date="1758801600">- update to version 580.95.05 (boo#1250536)</changelog>
</package>
<package pkgid="a31c092296f4b02e8824632269df24935c9f694560bd882a811d18ab9fef09d0" name="nvidia-open-driver-G06-signed" arch="src">
  <version epoch="0" ver="580.95.05" rel="150700.3.27.2"/>
  <changelog author="sndirsch@suse.com" date="1749988800">- update non-CUDA variant to 570.169 (boo#1244614)</changelog>
  <changelog author="sndirsch@suse.com" date="1750766400">- 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
  * buildfixes against Kernel 6.16 picked up from
    https://github.com/CachyOS/CachyOS-PKGBUILDS.git
  - -&gt; nvidia/nvidia-utils</changelog>
  <changelog author="sndirsch@suse.com" date="1751889600">- empty pci_ids-570.169; PCI ID hardware Supplements get moved to
  gfx repository to package nvidia-open-driver-G06-signed-kmp-meta
  (boo#1246010)
- remove 60-nvidia-$flavor.conf, since driver no longer gets
  autoselected without gfx/cuda repositories present and so we no
  longer need to disable it by default (boo#1246010)</changelog>
  <changelog author="sndirsch@suse.com" date="1752235200">- update non-CUDA variant to 570.172.08 (boo#1246327)
- supersedes
  * 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  * 0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
- update pci_ids-supported</changelog>
  <changelog author="sndirsch@suse.com" date="1753704000">- update CUDA variant to 580.65.06, which addresses various security
  issues:
  * CVE-2025-23277 (bsc#1247528)
  * CVE-2025-23278 (bsc#1247529)
  * CVE-2025-23286 (bsc#1247530)
  * CVE-2025-23283 (bsc#1247531)
  * CVE-2025-23279 (bsc#1247532)</changelog>
  <changelog author="sndirsch@suse.com" date="1754395200">- added Requires
  * nvidia-modprobe &gt;= %version
  * nvidia-persitenced &gt;= %version
  * nvidia-modprobe-cuda-lt-sp6
  * nvidia-persitenced-cuda-lt-sp6
  to be provided by special versions of nvidia-modprobe and
  nvidia-persitenced built against SP4 (bsc#1237208, jsc#PED-13295)</changelog>
  <changelog author="sndirsch@suse.com" date="1754740800">- make sure these Requires right below are not added on Tumbleweed</changelog>
  <changelog author="sndirsch@suse.com" date="1754913600">- update non-CUDA variant to 580.76.05 (boo#1247907)
- get rid of rule of older KMPs not to load nvidia_drm module,
  which are still installed in parallel and therefore still
  active (boo#1247923)</changelog>
  <changelog author="sndirsch@suse.com" date="1755172800">- make sure Requires to nvidia packages are not added for SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1757160000">- update CUDA variant to 580.82.07</changelog>
  <changelog author="sndirsch@suse.com" date="1757246400">- update non-CUDA variant to 580.82.07 (boo#1249235)</changelog>
  <changelog author="sndirsch@suse.com" date="1757332800">- let conflict CUDA and non-CUDA -devel packages; this is needed
  if both have the same version</changelog>
  <changelog author="sndirsch@suse.com" date="1758110400">- pesign-spec-macros: added definition for %__kernel_supplements,
  which replaced %__kmp_supplements with latest RPM used on TW now,
  in order to fix PCI HW Supplements for TW (boo#1249814)</changelog>
  <changelog author="sndirsch@suse.com" date="1758628800">- get rid of multiversion for the KMPs, since it only brought/brings
  us trouble and no benefit at all (jsc#PED-12049)
  * remove any ^Conflicts and ^Provides: multiversion from
    /usr/lib/rpm/kernel-module-subpackage
  * set INSTALL_MOD_DIR back to %{kernel_module_package_moddir}, i.e.
    updates/ subdir</changelog>
  <changelog author="sndirsch@suse.com" date="1758801600">- update to version 580.95.05 (boo#1250536)</changelog>
  <changelog author="sndirsch@suse.com" date="1759320000">- fixed 'osc service run download_files'</changelog>
  <changelog author="sndirsch@suse.com" date="1759752000">- update CUDA variant to 580.95.05</changelog>
  <changelog author="sndirsch@suse.com" date="1759924800">- Check4WrongSupplements.sh
  * check for wrong Supplements in generated KMPs after build by
    misusing %post of a dummy "check" subpackage</changelog>
  <changelog author="sndirsch@suse.com" date="1760443200">- changed Requires to
  * nvidia-modprobe = %version
  * nvidia-persitenced = %version
  it has been &gt;= before ...</changelog>
  <changelog author="sndirsch@suse.com" date="1760616000">- renamed check to %name-check package</changelog>
</package>
<package pkgid="554a32d71600420e281b3741101ba7d1b91259a1fad8a064e89f6590a105478f" name="nvidia-open-driver-G06-signed-cuda" arch="src">
  <version epoch="0" ver="570.133.20" rel="150700.3.3.1"/>
  <changelog author="sndirsch@suse.com" date="1736856000">- Update to 550.144.03 (bsc#1235461, boo#1235871)
  * fixes CVE-2024-0131, CVE-2024-0147, CVE-2024-0149,
    CVE-2024-0150, CVE-2024-53869</changelog>
  <changelog author="sndirsch@suse.com" date="1737547200">- preamble: let -cuda KMP conflict with no-cuda variants &lt; 550.135
  (bsc#1236191)</changelog>
  <changelog author="sndirsch@suse.com" date="1737979200">- Update to 565.77
- non-CUDA variant:
  * get rid of modproee.d and dracut.cd files and udev magic;
    instead require nvidia-common-G06
  * Supplements: switch to really supported devices; not only the
    initially supported ones without graphical output
- update non-CUDA and CUDA variant to 570.86.15</changelog>
  <changelog author="sndirsch@suse.com" date="1738065600">- update non-CUDA variant to 570.86.16 (boo#1236658)
- supersedes aarch64-TW-buildfix.patch
- supersedes set-FOP_UNSIGNED_OFFSET-for-nv_drm_fops.fop_flags.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1738584000">- fixed version of 'Provides: nvidia-open-signed-kmp = &lt;version&gt;'
  of nvidia-open-signed-cuda-kmp in preamble file
- fixed
  warning: File listed twice: /usr/src/kernel-modules/nvidia-570.86.16-default</changelog>
  <changelog author="sndirsch@suse.com" date="1738584001">- no longer try to patch %post/%postun; no changes needed any longer
- trigger script needs to be triggered now by nvidia-common-G06,
  which replaced kernel-firmware-nvidia-gspx-G06{,-cuda} packages</changelog>
  <changelog author="sndirsch@suse.com" date="1738584002">- fixed build against openSUSE:Factory by defining %_builddir
  if needed (boo#1236746)</changelog>
  <changelog author="eich@suse.com" date="1738670400">- Add a directory identifying the KMP and its version to the module
  install path - i.e.:
  &lt;kernel_version&gt;/nvidia-open-driver-G06-signed-&lt;version&gt;/updates
  instead of:
  &lt;kernel_version&gt;/updates
  This avoids conflicts when a new version is built against the
  same kernel release.</changelog>
  <changelog author="eich@suse.com" date="1739880000">- In the module install path revert the order of the 'updates'
  subdirectory and the package name &amp; version. This satisfies
  the kmp dependency checker (boo#1237308).</changelog>
  <changelog author="rfrohl@suse.com" date="1740312000">- explicitly enable KMP for kernel-longterm: this will be needed
  for the transition period, until all KMPs are enabled</changelog>
  <changelog author="sndirsch@suse.com" date="1740398400">- update non-CUDA variant to 570.124.02 (boo#1237585)</changelog>
  <changelog author="sndirsch@suse.com" date="1740484800">- update non-CUDA variant to 570.124.04 (boo#1237585)</changelog>
  <changelog author="sndirsch@suse.com" date="1741089600">- update CUDA variant to 570.124.06</changelog>
  <changelog author="sndirsch@suse.com" date="1741435200">- removed obsolete kernel-firmware-nvidia-gspx-G06-cuda; firmware
  has moved to nvidia-common-G06 and
  kernel-firmware-nvidia-gspx-G06 is no longer available either
  (boo#1239139)</changelog>
  <changelog author="sndirsch@suse.com" date="1742040000">- update non-CUDA variant to 570.133.07 (bsc#1239653)</changelog>
  <changelog author="sndirsch@suse.com" date="1743422400">- limit build of -azure flavor to SP6</changelog>
  <changelog author="sndirsch@suse.com" date="1744718400">- update non-CUDA variant to 570.144 (boo#1241231)</changelog>
  <changelog author="sndirsch@suse.com" date="1744977600">- update CUDA variant to 570.133.20</changelog>
  <changelog author="sndirsch@suse.com" date="1746187200">- disabled unsupported -rt flavor (bsc#1242054)</changelog>
  <changelog author="sndirsch@suse.com" date="1747224000">- update non-CUDA variant to 570.153.02 (boo#1243192)</changelog>
</package>
<package pkgid="2ff03171c564e19fb764524b2e662469a23384240332aadbad16206d45fe4ccc" name="nvidia-open-driver-G06-signed-cuda" arch="src">
  <version epoch="0" ver="575.57.08" rel="150700.3.14.2"/>
  <changelog author="eich@suse.com" date="1738670400">- Add a directory identifying the KMP and its version to the module
  install path - i.e.:
  &lt;kernel_version&gt;/nvidia-open-driver-G06-signed-&lt;version&gt;/updates
  instead of:
  &lt;kernel_version&gt;/updates
  This avoids conflicts when a new version is built against the
  same kernel release.</changelog>
  <changelog author="eich@suse.com" date="1739880000">- In the module install path revert the order of the 'updates'
  subdirectory and the package name &amp; version. This satisfies
  the kmp dependency checker (boo#1237308).</changelog>
  <changelog author="rfrohl@suse.com" date="1740312000">- explicitly enable KMP for kernel-longterm: this will be needed
  for the transition period, until all KMPs are enabled</changelog>
  <changelog author="sndirsch@suse.com" date="1740398400">- update non-CUDA variant to 570.124.02 (boo#1237585)</changelog>
  <changelog author="sndirsch@suse.com" date="1740484800">- update non-CUDA variant to 570.124.04 (boo#1237585)</changelog>
  <changelog author="sndirsch@suse.com" date="1741089600">- update CUDA variant to 570.124.06</changelog>
  <changelog author="sndirsch@suse.com" date="1741435200">- removed obsolete kernel-firmware-nvidia-gspx-G06-cuda; firmware
  has moved to nvidia-common-G06 and
  kernel-firmware-nvidia-gspx-G06 is no longer available either
  (boo#1239139)</changelog>
  <changelog author="sndirsch@suse.com" date="1742040000">- update non-CUDA variant to 570.133.07 (bsc#1239653)</changelog>
  <changelog author="sndirsch@suse.com" date="1743422400">- limit build of -azure flavor to SP6</changelog>
  <changelog author="sndirsch@suse.com" date="1744718400">- update non-CUDA variant to 570.144 (boo#1241231)</changelog>
  <changelog author="sndirsch@suse.com" date="1744977600">- update CUDA variant to 570.133.20</changelog>
  <changelog author="sndirsch@suse.com" date="1746187200">- disabled unsupported -rt flavor (bsc#1242054)</changelog>
  <changelog author="sndirsch@suse.com" date="1747224000">- update non-CUDA variant to 570.153.02 (boo#1243192)</changelog>
  <changelog author="sndirsch@suse.com" date="1749211200">- update CUDA variant to 575.57.08
- supersedes persistent-nvidia-id-string.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1749470400">- Drop persistent-nvidia-id-string.patch - solved via make params instead</changelog>
  <changelog author="sndirsch@suse.com" date="1749643200">- 60-nvidia-$flavor.conf
  * Don't try to load the driver if config and GSP firmware files are
    not available. Otherwise let the default install rule
    'install nvidia-drm /sbin/modprobe --ignore-install nvidia-drm' of
    50-nvidia.conf win, which comes together with config and GSP
    firmware files (package nvidia-common-G06).</changelog>
  <changelog author="sndirsch@suse.com" date="1749988800">- update non-CUDA variant to 570.169 (boo#1244614)</changelog>
  <changelog author="sndirsch@suse.com" date="1750766400">- 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
  * buildfixes against Kernel 6.16 picked up from
    https://github.com/CachyOS/CachyOS-PKGBUILDS.git
  - -&gt; nvidia/nvidia-utils</changelog>
  <changelog author="sndirsch@suse.com" date="1751889600">- empty pci_ids-570.169; PCI ID hardware Supplements get moved to
  gfx repository to package nvidia-open-driver-G06-signed-kmp-meta
  (boo#1246010)
- remove 60-nvidia-$flavor.conf, since driver no longer gets
  autoselected without gfx/cuda repositories present and so we no
  longer need to disable it by default (boo#1246010)</changelog>
  <changelog author="sndirsch@suse.com" date="1752235200">- update non-CUDA variant to 570.172.08 (boo#1246327)
- supersedes
  * 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  * 0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
- update pci_ids-supported</changelog>
</package>
<package pkgid="02b732d811cdd33b92bcc4a70cd58f807ae0893e9356db09ec057fe299d64fb2" name="nvidia-open-driver-G06-signed-cuda" arch="src">
  <version epoch="0" ver="575.57.08" rel="150700.3.8.2"/>
  <changelog author="sndirsch@suse.com" date="1738584000">- fixed version of 'Provides: nvidia-open-signed-kmp = &lt;version&gt;'
  of nvidia-open-signed-cuda-kmp in preamble file
- fixed
  warning: File listed twice: /usr/src/kernel-modules/nvidia-570.86.16-default</changelog>
  <changelog author="sndirsch@suse.com" date="1738584001">- no longer try to patch %post/%postun; no changes needed any longer
- trigger script needs to be triggered now by nvidia-common-G06,
  which replaced kernel-firmware-nvidia-gspx-G06{,-cuda} packages</changelog>
  <changelog author="sndirsch@suse.com" date="1738584002">- fixed build against openSUSE:Factory by defining %_builddir
  if needed (boo#1236746)</changelog>
  <changelog author="eich@suse.com" date="1738670400">- Add a directory identifying the KMP and its version to the module
  install path - i.e.:
  &lt;kernel_version&gt;/nvidia-open-driver-G06-signed-&lt;version&gt;/updates
  instead of:
  &lt;kernel_version&gt;/updates
  This avoids conflicts when a new version is built against the
  same kernel release.</changelog>
  <changelog author="eich@suse.com" date="1739880000">- In the module install path revert the order of the 'updates'
  subdirectory and the package name &amp; version. This satisfies
  the kmp dependency checker (boo#1237308).</changelog>
  <changelog author="rfrohl@suse.com" date="1740312000">- explicitly enable KMP for kernel-longterm: this will be needed
  for the transition period, until all KMPs are enabled</changelog>
  <changelog author="sndirsch@suse.com" date="1740398400">- update non-CUDA variant to 570.124.02 (boo#1237585)</changelog>
  <changelog author="sndirsch@suse.com" date="1740484800">- update non-CUDA variant to 570.124.04 (boo#1237585)</changelog>
  <changelog author="sndirsch@suse.com" date="1741089600">- update CUDA variant to 570.124.06</changelog>
  <changelog author="sndirsch@suse.com" date="1741435200">- removed obsolete kernel-firmware-nvidia-gspx-G06-cuda; firmware
  has moved to nvidia-common-G06 and
  kernel-firmware-nvidia-gspx-G06 is no longer available either
  (boo#1239139)</changelog>
  <changelog author="sndirsch@suse.com" date="1742040000">- update non-CUDA variant to 570.133.07 (bsc#1239653)</changelog>
  <changelog author="sndirsch@suse.com" date="1743422400">- limit build of -azure flavor to SP6</changelog>
  <changelog author="sndirsch@suse.com" date="1744718400">- update non-CUDA variant to 570.144 (boo#1241231)</changelog>
  <changelog author="sndirsch@suse.com" date="1744977600">- update CUDA variant to 570.133.20</changelog>
  <changelog author="sndirsch@suse.com" date="1746187200">- disabled unsupported -rt flavor (bsc#1242054)</changelog>
  <changelog author="sndirsch@suse.com" date="1747224000">- update non-CUDA variant to 570.153.02 (boo#1243192)</changelog>
  <changelog author="sndirsch@suse.com" date="1749211200">- update CUDA variant to 575.57.08
- supersedes persistent-nvidia-id-string.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1749470400">- Drop persistent-nvidia-id-string.patch - solved via make params instead</changelog>
  <changelog author="sndirsch@suse.com" date="1749643200">- 60-nvidia-$flavor.conf
  * Don't try to load the driver if config and GSP firmware files are
    not available. Otherwise let the default install rule
    'install nvidia-drm /sbin/modprobe --ignore-install nvidia-drm' of
    50-nvidia.conf win, which comes together with config and GSP
    firmware files (package nvidia-common-G06).</changelog>
  <changelog author="sndirsch@suse.com" date="1749988800">- update non-CUDA variant to 570.169 (boo#1244614)</changelog>
</package>
<package pkgid="0013cae4375de640032025f6d515092ed26cabcca70287fbcbc5ddc3d05fc51c" name="nvidia-open-driver-G06-signed-cuda" arch="src">
  <version epoch="0" ver="580.105.08" rel="150700.3.34.2"/>
  <changelog author="sndirsch@suse.com" date="1753704000">- update CUDA variant to 580.65.06, which addresses various security
  issues:
  * CVE-2025-23277 (bsc#1247528)
  * CVE-2025-23278 (bsc#1247529)
  * CVE-2025-23286 (bsc#1247530)
  * CVE-2025-23283 (bsc#1247531)
  * CVE-2025-23279 (bsc#1247532)</changelog>
  <changelog author="sndirsch@suse.com" date="1754395200">- added Requires
  * nvidia-modprobe &gt;= %version
  * nvidia-persitenced &gt;= %version
  * nvidia-modprobe-cuda-lt-sp6
  * nvidia-persitenced-cuda-lt-sp6
  to be provided by special versions of nvidia-modprobe and
  nvidia-persitenced built against SP4 (bsc#1237208, jsc#PED-13295)</changelog>
  <changelog author="sndirsch@suse.com" date="1754740800">- make sure these Requires right below are not added on Tumbleweed</changelog>
  <changelog author="sndirsch@suse.com" date="1754913600">- update non-CUDA variant to 580.76.05 (boo#1247907)
- get rid of rule of older KMPs not to load nvidia_drm module,
  which are still installed in parallel and therefore still
  active (boo#1247923)</changelog>
  <changelog author="sndirsch@suse.com" date="1755172800">- make sure Requires to nvidia packages are not added for SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1757160000">- update CUDA variant to 580.82.07</changelog>
  <changelog author="sndirsch@suse.com" date="1757246400">- update non-CUDA variant to 580.82.07 (boo#1249235)</changelog>
  <changelog author="sndirsch@suse.com" date="1757332800">- let conflict CUDA and non-CUDA -devel packages; this is needed
  if both have the same version</changelog>
  <changelog author="sndirsch@suse.com" date="1758110400">- pesign-spec-macros: added definition for %__kernel_supplements,
  which replaced %__kmp_supplements with latest RPM used on TW now,
  in order to fix PCI HW Supplements for TW (boo#1249814)</changelog>
  <changelog author="sndirsch@suse.com" date="1758628800">- get rid of multiversion for the KMPs, since it only brought/brings
  us trouble and no benefit at all (jsc#PED-12049)
  * remove any ^Conflicts and ^Provides: multiversion from
    /usr/lib/rpm/kernel-module-subpackage
  * set INSTALL_MOD_DIR back to %{kernel_module_package_moddir}, i.e.
    updates/ subdir</changelog>
  <changelog author="sndirsch@suse.com" date="1758801600">- update to version 580.95.05 (boo#1250536)</changelog>
  <changelog author="sndirsch@suse.com" date="1759320000">- fixed 'osc service run download_files'</changelog>
  <changelog author="sndirsch@suse.com" date="1759752000">- update CUDA variant to 580.95.05</changelog>
  <changelog author="sndirsch@suse.com" date="1759924800">- Check4WrongSupplements.sh
  * check for wrong Supplements in generated KMPs after build by
    misusing %post of a dummy "check" subpackage</changelog>
  <changelog author="sndirsch@suse.com" date="1760443200">- changed Requires to
  * nvidia-modprobe = %version
  * nvidia-persitenced = %version
  it has been &gt;= before ...</changelog>
  <changelog author="sndirsch@suse.com" date="1760616000">- renamed check to %name-check package</changelog>
  <changelog author="sndirsch@suse.com" date="1761998400">- update non-CUDA variant to version 580.105.08 (boo#1252978)</changelog>
  <changelog author="sndirsch@suse.com" date="1762257600">- back to 580.95.05 on aarch64, since userspace drivers have not
  been updated for this platform</changelog>
  <changelog author="sndirsch@suse.com" date="1763035200">- update CUDA variant to 580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1763035201">- introduced extra %gfx_aarch64_version and appropriate
  tarball/pci_id file in the hope that build service will no
  longer complain</changelog>
</package>
<package pkgid="827cb65bff949c1cb6b4edbe3275b57af309538e5dec10edd9979aad43c57429" name="nvidia-open-driver-G06-signed-cuda" arch="src">
  <version epoch="0" ver="580.105.08" rel="150700.3.37.1"/>
  <changelog author="sndirsch@suse.com" date="1754913600">- update non-CUDA variant to 580.76.05 (boo#1247907)
- get rid of rule of older KMPs not to load nvidia_drm module,
  which are still installed in parallel and therefore still
  active (boo#1247923)</changelog>
  <changelog author="sndirsch@suse.com" date="1755172800">- make sure Requires to nvidia packages are not added for SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1757160000">- update CUDA variant to 580.82.07</changelog>
  <changelog author="sndirsch@suse.com" date="1757246400">- update non-CUDA variant to 580.82.07 (boo#1249235)</changelog>
  <changelog author="sndirsch@suse.com" date="1757332800">- let conflict CUDA and non-CUDA -devel packages; this is needed
  if both have the same version</changelog>
  <changelog author="sndirsch@suse.com" date="1758110400">- pesign-spec-macros: added definition for %__kernel_supplements,
  which replaced %__kmp_supplements with latest RPM used on TW now,
  in order to fix PCI HW Supplements for TW (boo#1249814)</changelog>
  <changelog author="sndirsch@suse.com" date="1758628800">- get rid of multiversion for the KMPs, since it only brought/brings
  us trouble and no benefit at all (jsc#PED-12049)
  * remove any ^Conflicts and ^Provides: multiversion from
    /usr/lib/rpm/kernel-module-subpackage
  * set INSTALL_MOD_DIR back to %{kernel_module_package_moddir}, i.e.
    updates/ subdir</changelog>
  <changelog author="sndirsch@suse.com" date="1758801600">- update to version 580.95.05 (boo#1250536)</changelog>
  <changelog author="sndirsch@suse.com" date="1759320000">- fixed 'osc service run download_files'</changelog>
  <changelog author="sndirsch@suse.com" date="1759752000">- update CUDA variant to 580.95.05</changelog>
  <changelog author="sndirsch@suse.com" date="1759924800">- Check4WrongSupplements.sh
  * check for wrong Supplements in generated KMPs after build by
    misusing %post of a dummy "check" subpackage</changelog>
  <changelog author="sndirsch@suse.com" date="1760443200">- changed Requires to
  * nvidia-modprobe = %version
  * nvidia-persitenced = %version
  it has been &gt;= before ...</changelog>
  <changelog author="sndirsch@suse.com" date="1760616000">- renamed check to %name-check package</changelog>
  <changelog author="sndirsch@suse.com" date="1761998400">- update non-CUDA variant to version 580.105.08 (boo#1252978)</changelog>
  <changelog author="sndirsch@suse.com" date="1762257600">- back to 580.95.05 on aarch64, since userspace drivers have not
  been updated for this platform</changelog>
  <changelog author="sndirsch@suse.com" date="1763035200">- update CUDA variant to 580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1763035201">- introduced extra %gfx_aarch64_version and appropriate
  tarball/pci_id file in the hope that build service will no
  longer complain</changelog>
  <changelog author="sndirsch@suse.com" date="1764763200">- kernel-6.18.patch
  * fixed build against kernel 6.18</changelog>
  <changelog author="sndirsch@suse.com" date="1765454400">- update non-CUDA variant to version 580.119.02 (boo#1254801)</changelog>
  <changelog author="sndirsch@suse.com" date="1765454401">- readded kernel-6.18.patch still needed for cuda driver version
  580.105.08</changelog>
</package>
<package pkgid="b693803356510847ec15d838558e090e50734b3264465dbd1aabe44e83c3f8c4" name="nvidia-open-driver-G06-signed-cuda" arch="src">
  <version epoch="0" ver="580.105.08" rel="150700.3.40.1"/>
  <changelog author="sndirsch@suse.com" date="1757160000">- update CUDA variant to 580.82.07</changelog>
  <changelog author="sndirsch@suse.com" date="1757246400">- update non-CUDA variant to 580.82.07 (boo#1249235)</changelog>
  <changelog author="sndirsch@suse.com" date="1757332800">- let conflict CUDA and non-CUDA -devel packages; this is needed
  if both have the same version</changelog>
  <changelog author="sndirsch@suse.com" date="1758110400">- pesign-spec-macros: added definition for %__kernel_supplements,
  which replaced %__kmp_supplements with latest RPM used on TW now,
  in order to fix PCI HW Supplements for TW (boo#1249814)</changelog>
  <changelog author="sndirsch@suse.com" date="1758628800">- get rid of multiversion for the KMPs, since it only brought/brings
  us trouble and no benefit at all (jsc#PED-12049)
  * remove any ^Conflicts and ^Provides: multiversion from
    /usr/lib/rpm/kernel-module-subpackage
  * set INSTALL_MOD_DIR back to %{kernel_module_package_moddir}, i.e.
    updates/ subdir</changelog>
  <changelog author="sndirsch@suse.com" date="1758801600">- update to version 580.95.05 (boo#1250536)</changelog>
  <changelog author="sndirsch@suse.com" date="1759320000">- fixed 'osc service run download_files'</changelog>
  <changelog author="sndirsch@suse.com" date="1759752000">- update CUDA variant to 580.95.05</changelog>
  <changelog author="sndirsch@suse.com" date="1759924800">- Check4WrongSupplements.sh
  * check for wrong Supplements in generated KMPs after build by
    misusing %post of a dummy "check" subpackage</changelog>
  <changelog author="sndirsch@suse.com" date="1760443200">- changed Requires to
  * nvidia-modprobe = %version
  * nvidia-persitenced = %version
  it has been &gt;= before ...</changelog>
  <changelog author="sndirsch@suse.com" date="1760616000">- renamed check to %name-check package</changelog>
  <changelog author="sndirsch@suse.com" date="1761998400">- update non-CUDA variant to version 580.105.08 (boo#1252978)</changelog>
  <changelog author="sndirsch@suse.com" date="1762257600">- back to 580.95.05 on aarch64, since userspace drivers have not
  been updated for this platform</changelog>
  <changelog author="sndirsch@suse.com" date="1763035200">- update CUDA variant to 580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1763035201">- introduced extra %gfx_aarch64_version and appropriate
  tarball/pci_id file in the hope that build service will no
  longer complain</changelog>
  <changelog author="sndirsch@suse.com" date="1764763200">- kernel-6.18.patch
  * fixed build against kernel 6.18</changelog>
  <changelog author="sndirsch@suse.com" date="1765454400">- update non-CUDA variant to version 580.119.02 (boo#1254801)</changelog>
  <changelog author="sndirsch@suse.com" date="1765454401">- readded kernel-6.18.patch still needed for cuda driver version
  580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1767441600">- update non-CUDA variant to version 580.126.09 (boo#1255858)</changelog>
  <changelog author="sndirsch@suse.com" date="1768305600">- kernel-5.14.patch
  * fixes build for sle15-sp4</changelog>
</package>
<package pkgid="73ffa3bd7b0d495f3d03b3398b286e3d1010b20d7970e6c1bdf0360cae1cb90c" name="nvidia-open-driver-G06-signed-cuda" arch="src">
  <version epoch="0" ver="580.126.20" rel="150700.3.45.1"/>
  <changelog author="sndirsch@suse.com" date="1758801600">- update to version 580.95.05 (boo#1250536)</changelog>
  <changelog author="sndirsch@suse.com" date="1759320000">- fixed 'osc service run download_files'</changelog>
  <changelog author="sndirsch@suse.com" date="1759752000">- update CUDA variant to 580.95.05</changelog>
  <changelog author="sndirsch@suse.com" date="1759924800">- Check4WrongSupplements.sh
  * check for wrong Supplements in generated KMPs after build by
    misusing %post of a dummy "check" subpackage</changelog>
  <changelog author="sndirsch@suse.com" date="1760443200">- changed Requires to
  * nvidia-modprobe = %version
  * nvidia-persitenced = %version
  it has been &gt;= before ...</changelog>
  <changelog author="sndirsch@suse.com" date="1760616000">- renamed check to %name-check package</changelog>
  <changelog author="sndirsch@suse.com" date="1761998400">- update non-CUDA variant to version 580.105.08 (boo#1252978)</changelog>
  <changelog author="sndirsch@suse.com" date="1762257600">- back to 580.95.05 on aarch64, since userspace drivers have not
  been updated for this platform</changelog>
  <changelog author="sndirsch@suse.com" date="1763035200">- update CUDA variant to 580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1763035201">- introduced extra %gfx_aarch64_version and appropriate
  tarball/pci_id file in the hope that build service will no
  longer complain</changelog>
  <changelog author="sndirsch@suse.com" date="1764763200">- kernel-6.18.patch
  * fixed build against kernel 6.18</changelog>
  <changelog author="sndirsch@suse.com" date="1765454400">- update non-CUDA variant to version 580.119.02 (boo#1254801)</changelog>
  <changelog author="sndirsch@suse.com" date="1765454401">- readded kernel-6.18.patch still needed for cuda driver version
  580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1767441600">- update non-CUDA variant to version 580.126.09 (boo#1255858)</changelog>
  <changelog author="sndirsch@suse.com" date="1768305600">- kernel-5.14.patch
  * fixes build for sle15-sp4</changelog>
  <changelog author="sndirsch@suse.com" date="1768910400">- updated CUDA variant to version 580.126.09
- supersedes kernel-6.18.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1769688000">- apply kernel-5.14.patch also on sle15-sp5 in order to fix build
  and adjusted it to sle15-sp5 kernel</changelog>
  <changelog author="sndirsch@suse.com" date="1770724800">- kernel-6.19.patch: fixes build against kernel 6.19</changelog>
  <changelog author="sndirsch@suse.com" date="1770897600">- update non-CUDA variant to version 580.126.18 (boo#1258154)
- updated CUDA variant to version 580.126.16</changelog>
  <changelog author="sndirsch@suse.com" date="1772107200">- updated CUDA variant to version 580.126.20
- supersedes kernel-6.19.patch</changelog>
</package>
<package pkgid="69da532e1390350c0817d1705f9d3992b9db86a65f4e4953ccc401b8dbd951ab" name="nvidia-open-driver-G06-signed-cuda" arch="src">
  <version epoch="0" ver="580.159.03" rel="150700.3.48.1"/>
  <changelog author="sndirsch@suse.com" date="1763035200">- update CUDA variant to 580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1763035201">- introduced extra %gfx_aarch64_version and appropriate
  tarball/pci_id file in the hope that build service will no
  longer complain</changelog>
  <changelog author="sndirsch@suse.com" date="1764763200">- kernel-6.18.patch
  * fixed build against kernel 6.18</changelog>
  <changelog author="sndirsch@suse.com" date="1765454400">- update non-CUDA variant to version 580.119.02 (boo#1254801)</changelog>
  <changelog author="sndirsch@suse.com" date="1765454401">- readded kernel-6.18.patch still needed for cuda driver version
  580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1767441600">- update non-CUDA variant to version 580.126.09 (boo#1255858)</changelog>
  <changelog author="sndirsch@suse.com" date="1768305600">- kernel-5.14.patch
  * fixes build for sle15-sp4</changelog>
  <changelog author="sndirsch@suse.com" date="1768910400">- updated CUDA variant to version 580.126.09
- supersedes kernel-6.18.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1769688000">- apply kernel-5.14.patch also on sle15-sp5 in order to fix build
  and adjusted it to sle15-sp5 kernel</changelog>
  <changelog author="sndirsch@suse.com" date="1770724800">- kernel-6.19.patch: fixes build against kernel 6.19</changelog>
  <changelog author="sndirsch@suse.com" date="1770897600">- update non-CUDA variant to version 580.126.18 (boo#1258154)
- updated CUDA variant to version 580.126.16</changelog>
  <changelog author="sndirsch@suse.com" date="1772107200">- updated CUDA variant to version 580.126.20
- supersedes kernel-6.19.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1772712000">- adjusted logic for %suse_version bump with SLE16.1 Beta2 (jsc#PED-15826)</changelog>
  <changelog author="sndirsch@suse.com" date="1773662400">- add 'Provides: open-driver-non-cuda-variant = %version' for
  non-CUDA variant to be able to distinguish between both variants;
  to be used by nvidia-open-driver-G06-signed-kmp-meta for TW ...
  (boo#1259740)</changelog>
  <changelog author="sndirsch@suse.com" date="1773835200">- do not set ExclusiveArch in order to fix RPM description for -cuda
  variant (bsc#1259719)
- improved RPM description for -cuda and non-cuda variant</changelog>
  <changelog author="sndirsch@suse.com" date="1774440000">- adding 'ExcludeArch:    %ix86 s390x ppc64le' to no longer get
  autoclines by buildservice hoping that this wont't break RPM
  descriptions for -cuda variant again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1776945600">- disable-objtool-override.patch
  * get rid of confusing objtool warnings (boo#1212841)
  - -&gt; from https://github.com/joanbm/nvidia-470xx-linux-mainline</changelog>
  <changelog author="sndirsch@suse.com" date="1777032000">- update non-CUDA variant to 580.159.03 (boo#1262749)</changelog>
  <changelog author="sndirsch@suse.com" date="1777377600">- update CUDA variant to 580.159.03</changelog>
  <changelog author="sndirsch@suse.com" date="1777809600">- fix-objtool-warnings.patch (not applied on aarch64)
  * Get rid of "'naked' return found in MITIGATION_RETHUNK build"
    objtool warnings (boo#1212841, boo#1263834)
- remove again disable-objtool-override.patch</changelog>
</package>
<package pkgid="23a1141bcb0f4519cb89fd1baadd13528fc20da30a2519da2b82329de40cbd11" name="nvidia-open-driver-G06-signed-cuda" arch="src">
  <version epoch="0" ver="580.82.07" rel="150700.3.21.1"/>
  <changelog author="sndirsch@suse.com" date="1743422400">- limit build of -azure flavor to SP6</changelog>
  <changelog author="sndirsch@suse.com" date="1744718400">- update non-CUDA variant to 570.144 (boo#1241231)</changelog>
  <changelog author="sndirsch@suse.com" date="1744977600">- update CUDA variant to 570.133.20</changelog>
  <changelog author="sndirsch@suse.com" date="1746187200">- disabled unsupported -rt flavor (bsc#1242054)</changelog>
  <changelog author="sndirsch@suse.com" date="1747224000">- update non-CUDA variant to 570.153.02 (boo#1243192)</changelog>
  <changelog author="sndirsch@suse.com" date="1749211200">- update CUDA variant to 575.57.08
- supersedes persistent-nvidia-id-string.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1749470400">- Drop persistent-nvidia-id-string.patch - solved via make params instead</changelog>
  <changelog author="sndirsch@suse.com" date="1749643200">- 60-nvidia-$flavor.conf
  * Don't try to load the driver if config and GSP firmware files are
    not available. Otherwise let the default install rule
    'install nvidia-drm /sbin/modprobe --ignore-install nvidia-drm' of
    50-nvidia.conf win, which comes together with config and GSP
    firmware files (package nvidia-common-G06).</changelog>
  <changelog author="sndirsch@suse.com" date="1749988800">- update non-CUDA variant to 570.169 (boo#1244614)</changelog>
  <changelog author="sndirsch@suse.com" date="1750766400">- 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
  * buildfixes against Kernel 6.16 picked up from
    https://github.com/CachyOS/CachyOS-PKGBUILDS.git
  - -&gt; nvidia/nvidia-utils</changelog>
  <changelog author="sndirsch@suse.com" date="1751889600">- empty pci_ids-570.169; PCI ID hardware Supplements get moved to
  gfx repository to package nvidia-open-driver-G06-signed-kmp-meta
  (boo#1246010)
- remove 60-nvidia-$flavor.conf, since driver no longer gets
  autoselected without gfx/cuda repositories present and so we no
  longer need to disable it by default (boo#1246010)</changelog>
  <changelog author="sndirsch@suse.com" date="1752235200">- update non-CUDA variant to 570.172.08 (boo#1246327)
- supersedes
  * 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  * 0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
- update pci_ids-supported</changelog>
  <changelog author="sndirsch@suse.com" date="1753704000">- update CUDA variant to 580.65.06, which addresses various security
  issues:
  * CVE-2025-23277 (bsc#1247528)
  * CVE-2025-23278 (bsc#1247529)
  * CVE-2025-23286 (bsc#1247530)
  * CVE-2025-23283 (bsc#1247531)
  * CVE-2025-23279 (bsc#1247532)</changelog>
  <changelog author="sndirsch@suse.com" date="1754395200">- added Requires
  * nvidia-modprobe &gt;= %version
  * nvidia-persitenced &gt;= %version
  * nvidia-modprobe-cuda-lt-sp6
  * nvidia-persitenced-cuda-lt-sp6
  to be provided by special versions of nvidia-modprobe and
  nvidia-persitenced built against SP4 (bsc#1237208, jsc#PED-13295)</changelog>
  <changelog author="sndirsch@suse.com" date="1754740800">- make sure these Requires right below are not added on Tumbleweed</changelog>
  <changelog author="sndirsch@suse.com" date="1754913600">- update non-CUDA variant to 580.76.05 (boo#1247907)
- get rid of rule of older KMPs not to load nvidia_drm module,
  which are still installed in parallel and therefore still
  active (boo#1247923)</changelog>
  <changelog author="sndirsch@suse.com" date="1755172800">- make sure Requires to nvidia packages are not added for SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1757160000">- update CUDA variant to 580.82.07</changelog>
  <changelog author="sndirsch@suse.com" date="1757246400">- update non-CUDA variant to 580.82.07 (boo#1249235)</changelog>
  <changelog author="sndirsch@suse.com" date="1757332800">- let conflict CUDA and non-CUDA -devel packages; this is needed
  if both have the same version</changelog>
</package>
<package pkgid="cffc018d344d1913a418f7035345d898bcdc438acfcdf5b623e55ec50b53714c" name="nvidia-open-driver-G06-signed-cuda" arch="src">
  <version epoch="0" ver="580.82.07" rel="150700.3.24.1"/>
  <changelog author="sndirsch@suse.com" date="1746187200">- disabled unsupported -rt flavor (bsc#1242054)</changelog>
  <changelog author="sndirsch@suse.com" date="1747224000">- update non-CUDA variant to 570.153.02 (boo#1243192)</changelog>
  <changelog author="sndirsch@suse.com" date="1749211200">- update CUDA variant to 575.57.08
- supersedes persistent-nvidia-id-string.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1749470400">- Drop persistent-nvidia-id-string.patch - solved via make params instead</changelog>
  <changelog author="sndirsch@suse.com" date="1749643200">- 60-nvidia-$flavor.conf
  * Don't try to load the driver if config and GSP firmware files are
    not available. Otherwise let the default install rule
    'install nvidia-drm /sbin/modprobe --ignore-install nvidia-drm' of
    50-nvidia.conf win, which comes together with config and GSP
    firmware files (package nvidia-common-G06).</changelog>
  <changelog author="sndirsch@suse.com" date="1749988800">- update non-CUDA variant to 570.169 (boo#1244614)</changelog>
  <changelog author="sndirsch@suse.com" date="1750766400">- 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
  * buildfixes against Kernel 6.16 picked up from
    https://github.com/CachyOS/CachyOS-PKGBUILDS.git
  - -&gt; nvidia/nvidia-utils</changelog>
  <changelog author="sndirsch@suse.com" date="1751889600">- empty pci_ids-570.169; PCI ID hardware Supplements get moved to
  gfx repository to package nvidia-open-driver-G06-signed-kmp-meta
  (boo#1246010)
- remove 60-nvidia-$flavor.conf, since driver no longer gets
  autoselected without gfx/cuda repositories present and so we no
  longer need to disable it by default (boo#1246010)</changelog>
  <changelog author="sndirsch@suse.com" date="1752235200">- update non-CUDA variant to 570.172.08 (boo#1246327)
- supersedes
  * 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  * 0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
- update pci_ids-supported</changelog>
  <changelog author="sndirsch@suse.com" date="1753704000">- update CUDA variant to 580.65.06, which addresses various security
  issues:
  * CVE-2025-23277 (bsc#1247528)
  * CVE-2025-23278 (bsc#1247529)
  * CVE-2025-23286 (bsc#1247530)
  * CVE-2025-23283 (bsc#1247531)
  * CVE-2025-23279 (bsc#1247532)</changelog>
  <changelog author="sndirsch@suse.com" date="1754395200">- added Requires
  * nvidia-modprobe &gt;= %version
  * nvidia-persitenced &gt;= %version
  * nvidia-modprobe-cuda-lt-sp6
  * nvidia-persitenced-cuda-lt-sp6
  to be provided by special versions of nvidia-modprobe and
  nvidia-persitenced built against SP4 (bsc#1237208, jsc#PED-13295)</changelog>
  <changelog author="sndirsch@suse.com" date="1754740800">- make sure these Requires right below are not added on Tumbleweed</changelog>
  <changelog author="sndirsch@suse.com" date="1754913600">- update non-CUDA variant to 580.76.05 (boo#1247907)
- get rid of rule of older KMPs not to load nvidia_drm module,
  which are still installed in parallel and therefore still
  active (boo#1247923)</changelog>
  <changelog author="sndirsch@suse.com" date="1755172800">- make sure Requires to nvidia packages are not added for SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1757160000">- update CUDA variant to 580.82.07</changelog>
  <changelog author="sndirsch@suse.com" date="1757246400">- update non-CUDA variant to 580.82.07 (boo#1249235)</changelog>
  <changelog author="sndirsch@suse.com" date="1757332800">- let conflict CUDA and non-CUDA -devel packages; this is needed
  if both have the same version</changelog>
  <changelog author="sndirsch@suse.com" date="1758110400">- pesign-spec-macros: added definition for %__kernel_supplements,
  which replaced %__kmp_supplements with latest RPM used on TW now,
  in order to fix PCI HW Supplements for TW (boo#1249814)</changelog>
  <changelog author="sndirsch@suse.com" date="1758628800">- get rid of multiversion for the KMPs, since it only brought/brings
  us trouble and no benefit at all (jsc#PED-12049)
  * remove any ^Conflicts and ^Provides: multiversion from
    /usr/lib/rpm/kernel-module-subpackage
  * set INSTALL_MOD_DIR back to %{kernel_module_package_moddir}, i.e.
    updates/ subdir</changelog>
  <changelog author="sndirsch@suse.com" date="1758801600">- update to version 580.95.05 (boo#1250536)</changelog>
</package>
<package pkgid="beb96ecee413670c0df6094f976d75578d83a660140a2c77e221afede1ad4b1a" name="nvidia-open-driver-G06-signed-cuda" arch="src">
  <version epoch="0" ver="580.95.05" rel="150700.3.27.2"/>
  <changelog author="sndirsch@suse.com" date="1749988800">- update non-CUDA variant to 570.169 (boo#1244614)</changelog>
  <changelog author="sndirsch@suse.com" date="1750766400">- 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
  * buildfixes against Kernel 6.16 picked up from
    https://github.com/CachyOS/CachyOS-PKGBUILDS.git
  - -&gt; nvidia/nvidia-utils</changelog>
  <changelog author="sndirsch@suse.com" date="1751889600">- empty pci_ids-570.169; PCI ID hardware Supplements get moved to
  gfx repository to package nvidia-open-driver-G06-signed-kmp-meta
  (boo#1246010)
- remove 60-nvidia-$flavor.conf, since driver no longer gets
  autoselected without gfx/cuda repositories present and so we no
  longer need to disable it by default (boo#1246010)</changelog>
  <changelog author="sndirsch@suse.com" date="1752235200">- update non-CUDA variant to 570.172.08 (boo#1246327)
- supersedes
  * 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  * 0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
- update pci_ids-supported</changelog>
  <changelog author="sndirsch@suse.com" date="1753704000">- update CUDA variant to 580.65.06, which addresses various security
  issues:
  * CVE-2025-23277 (bsc#1247528)
  * CVE-2025-23278 (bsc#1247529)
  * CVE-2025-23286 (bsc#1247530)
  * CVE-2025-23283 (bsc#1247531)
  * CVE-2025-23279 (bsc#1247532)</changelog>
  <changelog author="sndirsch@suse.com" date="1754395200">- added Requires
  * nvidia-modprobe &gt;= %version
  * nvidia-persitenced &gt;= %version
  * nvidia-modprobe-cuda-lt-sp6
  * nvidia-persitenced-cuda-lt-sp6
  to be provided by special versions of nvidia-modprobe and
  nvidia-persitenced built against SP4 (bsc#1237208, jsc#PED-13295)</changelog>
  <changelog author="sndirsch@suse.com" date="1754740800">- make sure these Requires right below are not added on Tumbleweed</changelog>
  <changelog author="sndirsch@suse.com" date="1754913600">- update non-CUDA variant to 580.76.05 (boo#1247907)
- get rid of rule of older KMPs not to load nvidia_drm module,
  which are still installed in parallel and therefore still
  active (boo#1247923)</changelog>
  <changelog author="sndirsch@suse.com" date="1755172800">- make sure Requires to nvidia packages are not added for SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1757160000">- update CUDA variant to 580.82.07</changelog>
  <changelog author="sndirsch@suse.com" date="1757246400">- update non-CUDA variant to 580.82.07 (boo#1249235)</changelog>
  <changelog author="sndirsch@suse.com" date="1757332800">- let conflict CUDA and non-CUDA -devel packages; this is needed
  if both have the same version</changelog>
  <changelog author="sndirsch@suse.com" date="1758110400">- pesign-spec-macros: added definition for %__kernel_supplements,
  which replaced %__kmp_supplements with latest RPM used on TW now,
  in order to fix PCI HW Supplements for TW (boo#1249814)</changelog>
  <changelog author="sndirsch@suse.com" date="1758628800">- get rid of multiversion for the KMPs, since it only brought/brings
  us trouble and no benefit at all (jsc#PED-12049)
  * remove any ^Conflicts and ^Provides: multiversion from
    /usr/lib/rpm/kernel-module-subpackage
  * set INSTALL_MOD_DIR back to %{kernel_module_package_moddir}, i.e.
    updates/ subdir</changelog>
  <changelog author="sndirsch@suse.com" date="1758801600">- update to version 580.95.05 (boo#1250536)</changelog>
  <changelog author="sndirsch@suse.com" date="1759320000">- fixed 'osc service run download_files'</changelog>
  <changelog author="sndirsch@suse.com" date="1759752000">- update CUDA variant to 580.95.05</changelog>
  <changelog author="sndirsch@suse.com" date="1759924800">- Check4WrongSupplements.sh
  * check for wrong Supplements in generated KMPs after build by
    misusing %post of a dummy "check" subpackage</changelog>
  <changelog author="sndirsch@suse.com" date="1760443200">- changed Requires to
  * nvidia-modprobe = %version
  * nvidia-persitenced = %version
  it has been &gt;= before ...</changelog>
  <changelog author="sndirsch@suse.com" date="1760616000">- renamed check to %name-check package</changelog>
</package>
<package pkgid="f7817975fc825efdf222e7880a9082a42daeea7e3becbdaef0050e793d678e9e" name="nvidia-open-driver-G06-signed-cuda-default-devel" arch="x86_64">
  <version epoch="0" ver="570.133.20" rel="150700.3.3.1"/>
  <changelog author="sndirsch@suse.com" date="1736856000">- Update to 550.144.03 (bsc#1235461, boo#1235871)
  * fixes CVE-2024-0131, CVE-2024-0147, CVE-2024-0149,
    CVE-2024-0150, CVE-2024-53869</changelog>
  <changelog author="sndirsch@suse.com" date="1737547200">- preamble: let -cuda KMP conflict with no-cuda variants &lt; 550.135
  (bsc#1236191)</changelog>
  <changelog author="sndirsch@suse.com" date="1737979200">- Update to 565.77
- non-CUDA variant:
  * get rid of modproee.d and dracut.cd files and udev magic;
    instead require nvidia-common-G06
  * Supplements: switch to really supported devices; not only the
    initially supported ones without graphical output
- update non-CUDA and CUDA variant to 570.86.15</changelog>
  <changelog author="sndirsch@suse.com" date="1738065600">- update non-CUDA variant to 570.86.16 (boo#1236658)
- supersedes aarch64-TW-buildfix.patch
- supersedes set-FOP_UNSIGNED_OFFSET-for-nv_drm_fops.fop_flags.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1738584000">- fixed version of 'Provides: nvidia-open-signed-kmp = &lt;version&gt;'
  of nvidia-open-signed-cuda-kmp in preamble file
- fixed
  warning: File listed twice: /usr/src/kernel-modules/nvidia-570.86.16-default</changelog>
  <changelog author="sndirsch@suse.com" date="1738584001">- no longer try to patch %post/%postun; no changes needed any longer
- trigger script needs to be triggered now by nvidia-common-G06,
  which replaced kernel-firmware-nvidia-gspx-G06{,-cuda} packages</changelog>
  <changelog author="sndirsch@suse.com" date="1738584002">- fixed build against openSUSE:Factory by defining %_builddir
  if needed (boo#1236746)</changelog>
  <changelog author="eich@suse.com" date="1738670400">- Add a directory identifying the KMP and its version to the module
  install path - i.e.:
  &lt;kernel_version&gt;/nvidia-open-driver-G06-signed-&lt;version&gt;/updates
  instead of:
  &lt;kernel_version&gt;/updates
  This avoids conflicts when a new version is built against the
  same kernel release.</changelog>
  <changelog author="eich@suse.com" date="1739880000">- In the module install path revert the order of the 'updates'
  subdirectory and the package name &amp; version. This satisfies
  the kmp dependency checker (boo#1237308).</changelog>
  <changelog author="rfrohl@suse.com" date="1740312000">- explicitly enable KMP for kernel-longterm: this will be needed
  for the transition period, until all KMPs are enabled</changelog>
  <changelog author="sndirsch@suse.com" date="1740398400">- update non-CUDA variant to 570.124.02 (boo#1237585)</changelog>
  <changelog author="sndirsch@suse.com" date="1740484800">- update non-CUDA variant to 570.124.04 (boo#1237585)</changelog>
  <changelog author="sndirsch@suse.com" date="1741089600">- update CUDA variant to 570.124.06</changelog>
  <changelog author="sndirsch@suse.com" date="1741435200">- removed obsolete kernel-firmware-nvidia-gspx-G06-cuda; firmware
  has moved to nvidia-common-G06 and
  kernel-firmware-nvidia-gspx-G06 is no longer available either
  (boo#1239139)</changelog>
  <changelog author="sndirsch@suse.com" date="1742040000">- update non-CUDA variant to 570.133.07 (bsc#1239653)</changelog>
  <changelog author="sndirsch@suse.com" date="1743422400">- limit build of -azure flavor to SP6</changelog>
  <changelog author="sndirsch@suse.com" date="1744718400">- update non-CUDA variant to 570.144 (boo#1241231)</changelog>
  <changelog author="sndirsch@suse.com" date="1744977600">- update CUDA variant to 570.133.20</changelog>
  <changelog author="sndirsch@suse.com" date="1746187200">- disabled unsupported -rt flavor (bsc#1242054)</changelog>
  <changelog author="sndirsch@suse.com" date="1747224000">- update non-CUDA variant to 570.153.02 (boo#1243192)</changelog>
</package>
<package pkgid="b41894424af9a4ec806f62f4c68e4b30117a86a6092ca6f2321c7665712f77bf" name="nvidia-open-driver-G06-signed-cuda-default-devel" arch="x86_64">
  <version epoch="0" ver="575.57.08" rel="150700.3.14.2"/>
  <changelog author="eich@suse.com" date="1738670400">- Add a directory identifying the KMP and its version to the module
  install path - i.e.:
  &lt;kernel_version&gt;/nvidia-open-driver-G06-signed-&lt;version&gt;/updates
  instead of:
  &lt;kernel_version&gt;/updates
  This avoids conflicts when a new version is built against the
  same kernel release.</changelog>
  <changelog author="eich@suse.com" date="1739880000">- In the module install path revert the order of the 'updates'
  subdirectory and the package name &amp; version. This satisfies
  the kmp dependency checker (boo#1237308).</changelog>
  <changelog author="rfrohl@suse.com" date="1740312000">- explicitly enable KMP for kernel-longterm: this will be needed
  for the transition period, until all KMPs are enabled</changelog>
  <changelog author="sndirsch@suse.com" date="1740398400">- update non-CUDA variant to 570.124.02 (boo#1237585)</changelog>
  <changelog author="sndirsch@suse.com" date="1740484800">- update non-CUDA variant to 570.124.04 (boo#1237585)</changelog>
  <changelog author="sndirsch@suse.com" date="1741089600">- update CUDA variant to 570.124.06</changelog>
  <changelog author="sndirsch@suse.com" date="1741435200">- removed obsolete kernel-firmware-nvidia-gspx-G06-cuda; firmware
  has moved to nvidia-common-G06 and
  kernel-firmware-nvidia-gspx-G06 is no longer available either
  (boo#1239139)</changelog>
  <changelog author="sndirsch@suse.com" date="1742040000">- update non-CUDA variant to 570.133.07 (bsc#1239653)</changelog>
  <changelog author="sndirsch@suse.com" date="1743422400">- limit build of -azure flavor to SP6</changelog>
  <changelog author="sndirsch@suse.com" date="1744718400">- update non-CUDA variant to 570.144 (boo#1241231)</changelog>
  <changelog author="sndirsch@suse.com" date="1744977600">- update CUDA variant to 570.133.20</changelog>
  <changelog author="sndirsch@suse.com" date="1746187200">- disabled unsupported -rt flavor (bsc#1242054)</changelog>
  <changelog author="sndirsch@suse.com" date="1747224000">- update non-CUDA variant to 570.153.02 (boo#1243192)</changelog>
  <changelog author="sndirsch@suse.com" date="1749211200">- update CUDA variant to 575.57.08
- supersedes persistent-nvidia-id-string.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1749470400">- Drop persistent-nvidia-id-string.patch - solved via make params instead</changelog>
  <changelog author="sndirsch@suse.com" date="1749643200">- 60-nvidia-$flavor.conf
  * Don't try to load the driver if config and GSP firmware files are
    not available. Otherwise let the default install rule
    'install nvidia-drm /sbin/modprobe --ignore-install nvidia-drm' of
    50-nvidia.conf win, which comes together with config and GSP
    firmware files (package nvidia-common-G06).</changelog>
  <changelog author="sndirsch@suse.com" date="1749988800">- update non-CUDA variant to 570.169 (boo#1244614)</changelog>
  <changelog author="sndirsch@suse.com" date="1750766400">- 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
  * buildfixes against Kernel 6.16 picked up from
    https://github.com/CachyOS/CachyOS-PKGBUILDS.git
  - -&gt; nvidia/nvidia-utils</changelog>
  <changelog author="sndirsch@suse.com" date="1751889600">- empty pci_ids-570.169; PCI ID hardware Supplements get moved to
  gfx repository to package nvidia-open-driver-G06-signed-kmp-meta
  (boo#1246010)
- remove 60-nvidia-$flavor.conf, since driver no longer gets
  autoselected without gfx/cuda repositories present and so we no
  longer need to disable it by default (boo#1246010)</changelog>
  <changelog author="sndirsch@suse.com" date="1752235200">- update non-CUDA variant to 570.172.08 (boo#1246327)
- supersedes
  * 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  * 0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
- update pci_ids-supported</changelog>
</package>
<package pkgid="2ea7f2268fb92885567b3bce5faff5d800cd129b7d4c1a5adb535f8bf747e22c" name="nvidia-open-driver-G06-signed-cuda-default-devel" arch="x86_64">
  <version epoch="0" ver="575.57.08" rel="150700.3.8.2"/>
  <changelog author="sndirsch@suse.com" date="1738584000">- fixed version of 'Provides: nvidia-open-signed-kmp = &lt;version&gt;'
  of nvidia-open-signed-cuda-kmp in preamble file
- fixed
  warning: File listed twice: /usr/src/kernel-modules/nvidia-570.86.16-default</changelog>
  <changelog author="sndirsch@suse.com" date="1738584001">- no longer try to patch %post/%postun; no changes needed any longer
- trigger script needs to be triggered now by nvidia-common-G06,
  which replaced kernel-firmware-nvidia-gspx-G06{,-cuda} packages</changelog>
  <changelog author="sndirsch@suse.com" date="1738584002">- fixed build against openSUSE:Factory by defining %_builddir
  if needed (boo#1236746)</changelog>
  <changelog author="eich@suse.com" date="1738670400">- Add a directory identifying the KMP and its version to the module
  install path - i.e.:
  &lt;kernel_version&gt;/nvidia-open-driver-G06-signed-&lt;version&gt;/updates
  instead of:
  &lt;kernel_version&gt;/updates
  This avoids conflicts when a new version is built against the
  same kernel release.</changelog>
  <changelog author="eich@suse.com" date="1739880000">- In the module install path revert the order of the 'updates'
  subdirectory and the package name &amp; version. This satisfies
  the kmp dependency checker (boo#1237308).</changelog>
  <changelog author="rfrohl@suse.com" date="1740312000">- explicitly enable KMP for kernel-longterm: this will be needed
  for the transition period, until all KMPs are enabled</changelog>
  <changelog author="sndirsch@suse.com" date="1740398400">- update non-CUDA variant to 570.124.02 (boo#1237585)</changelog>
  <changelog author="sndirsch@suse.com" date="1740484800">- update non-CUDA variant to 570.124.04 (boo#1237585)</changelog>
  <changelog author="sndirsch@suse.com" date="1741089600">- update CUDA variant to 570.124.06</changelog>
  <changelog author="sndirsch@suse.com" date="1741435200">- removed obsolete kernel-firmware-nvidia-gspx-G06-cuda; firmware
  has moved to nvidia-common-G06 and
  kernel-firmware-nvidia-gspx-G06 is no longer available either
  (boo#1239139)</changelog>
  <changelog author="sndirsch@suse.com" date="1742040000">- update non-CUDA variant to 570.133.07 (bsc#1239653)</changelog>
  <changelog author="sndirsch@suse.com" date="1743422400">- limit build of -azure flavor to SP6</changelog>
  <changelog author="sndirsch@suse.com" date="1744718400">- update non-CUDA variant to 570.144 (boo#1241231)</changelog>
  <changelog author="sndirsch@suse.com" date="1744977600">- update CUDA variant to 570.133.20</changelog>
  <changelog author="sndirsch@suse.com" date="1746187200">- disabled unsupported -rt flavor (bsc#1242054)</changelog>
  <changelog author="sndirsch@suse.com" date="1747224000">- update non-CUDA variant to 570.153.02 (boo#1243192)</changelog>
  <changelog author="sndirsch@suse.com" date="1749211200">- update CUDA variant to 575.57.08
- supersedes persistent-nvidia-id-string.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1749470400">- Drop persistent-nvidia-id-string.patch - solved via make params instead</changelog>
  <changelog author="sndirsch@suse.com" date="1749643200">- 60-nvidia-$flavor.conf
  * Don't try to load the driver if config and GSP firmware files are
    not available. Otherwise let the default install rule
    'install nvidia-drm /sbin/modprobe --ignore-install nvidia-drm' of
    50-nvidia.conf win, which comes together with config and GSP
    firmware files (package nvidia-common-G06).</changelog>
  <changelog author="sndirsch@suse.com" date="1749988800">- update non-CUDA variant to 570.169 (boo#1244614)</changelog>
</package>
<package pkgid="fd42873ea32d96aaf0939d6edbe136d540e54a06ee66f311d293480da4522478" name="nvidia-open-driver-G06-signed-cuda-default-devel" arch="x86_64">
  <version epoch="0" ver="580.105.08" rel="150700.3.34.2"/>
  <changelog author="sndirsch@suse.com" date="1753704000">- update CUDA variant to 580.65.06, which addresses various security
  issues:
  * CVE-2025-23277 (bsc#1247528)
  * CVE-2025-23278 (bsc#1247529)
  * CVE-2025-23286 (bsc#1247530)
  * CVE-2025-23283 (bsc#1247531)
  * CVE-2025-23279 (bsc#1247532)</changelog>
  <changelog author="sndirsch@suse.com" date="1754395200">- added Requires
  * nvidia-modprobe &gt;= %version
  * nvidia-persitenced &gt;= %version
  * nvidia-modprobe-cuda-lt-sp6
  * nvidia-persitenced-cuda-lt-sp6
  to be provided by special versions of nvidia-modprobe and
  nvidia-persitenced built against SP4 (bsc#1237208, jsc#PED-13295)</changelog>
  <changelog author="sndirsch@suse.com" date="1754740800">- make sure these Requires right below are not added on Tumbleweed</changelog>
  <changelog author="sndirsch@suse.com" date="1754913600">- update non-CUDA variant to 580.76.05 (boo#1247907)
- get rid of rule of older KMPs not to load nvidia_drm module,
  which are still installed in parallel and therefore still
  active (boo#1247923)</changelog>
  <changelog author="sndirsch@suse.com" date="1755172800">- make sure Requires to nvidia packages are not added for SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1757160000">- update CUDA variant to 580.82.07</changelog>
  <changelog author="sndirsch@suse.com" date="1757246400">- update non-CUDA variant to 580.82.07 (boo#1249235)</changelog>
  <changelog author="sndirsch@suse.com" date="1757332800">- let conflict CUDA and non-CUDA -devel packages; this is needed
  if both have the same version</changelog>
  <changelog author="sndirsch@suse.com" date="1758110400">- pesign-spec-macros: added definition for %__kernel_supplements,
  which replaced %__kmp_supplements with latest RPM used on TW now,
  in order to fix PCI HW Supplements for TW (boo#1249814)</changelog>
  <changelog author="sndirsch@suse.com" date="1758628800">- get rid of multiversion for the KMPs, since it only brought/brings
  us trouble and no benefit at all (jsc#PED-12049)
  * remove any ^Conflicts and ^Provides: multiversion from
    /usr/lib/rpm/kernel-module-subpackage
  * set INSTALL_MOD_DIR back to %{kernel_module_package_moddir}, i.e.
    updates/ subdir</changelog>
  <changelog author="sndirsch@suse.com" date="1758801600">- update to version 580.95.05 (boo#1250536)</changelog>
  <changelog author="sndirsch@suse.com" date="1759320000">- fixed 'osc service run download_files'</changelog>
  <changelog author="sndirsch@suse.com" date="1759752000">- update CUDA variant to 580.95.05</changelog>
  <changelog author="sndirsch@suse.com" date="1759924800">- Check4WrongSupplements.sh
  * check for wrong Supplements in generated KMPs after build by
    misusing %post of a dummy "check" subpackage</changelog>
  <changelog author="sndirsch@suse.com" date="1760443200">- changed Requires to
  * nvidia-modprobe = %version
  * nvidia-persitenced = %version
  it has been &gt;= before ...</changelog>
  <changelog author="sndirsch@suse.com" date="1760616000">- renamed check to %name-check package</changelog>
  <changelog author="sndirsch@suse.com" date="1761998400">- update non-CUDA variant to version 580.105.08 (boo#1252978)</changelog>
  <changelog author="sndirsch@suse.com" date="1762257600">- back to 580.95.05 on aarch64, since userspace drivers have not
  been updated for this platform</changelog>
  <changelog author="sndirsch@suse.com" date="1763035200">- update CUDA variant to 580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1763035201">- introduced extra %gfx_aarch64_version and appropriate
  tarball/pci_id file in the hope that build service will no
  longer complain</changelog>
</package>
<package pkgid="904495ceff1f4f8c4c3fa2fb3fd3fd6d2dafdda475161ffb15a75e91dd4cc9a5" name="nvidia-open-driver-G06-signed-cuda-default-devel" arch="x86_64">
  <version epoch="0" ver="580.105.08" rel="150700.3.37.1"/>
  <changelog author="sndirsch@suse.com" date="1754913600">- update non-CUDA variant to 580.76.05 (boo#1247907)
- get rid of rule of older KMPs not to load nvidia_drm module,
  which are still installed in parallel and therefore still
  active (boo#1247923)</changelog>
  <changelog author="sndirsch@suse.com" date="1755172800">- make sure Requires to nvidia packages are not added for SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1757160000">- update CUDA variant to 580.82.07</changelog>
  <changelog author="sndirsch@suse.com" date="1757246400">- update non-CUDA variant to 580.82.07 (boo#1249235)</changelog>
  <changelog author="sndirsch@suse.com" date="1757332800">- let conflict CUDA and non-CUDA -devel packages; this is needed
  if both have the same version</changelog>
  <changelog author="sndirsch@suse.com" date="1758110400">- pesign-spec-macros: added definition for %__kernel_supplements,
  which replaced %__kmp_supplements with latest RPM used on TW now,
  in order to fix PCI HW Supplements for TW (boo#1249814)</changelog>
  <changelog author="sndirsch@suse.com" date="1758628800">- get rid of multiversion for the KMPs, since it only brought/brings
  us trouble and no benefit at all (jsc#PED-12049)
  * remove any ^Conflicts and ^Provides: multiversion from
    /usr/lib/rpm/kernel-module-subpackage
  * set INSTALL_MOD_DIR back to %{kernel_module_package_moddir}, i.e.
    updates/ subdir</changelog>
  <changelog author="sndirsch@suse.com" date="1758801600">- update to version 580.95.05 (boo#1250536)</changelog>
  <changelog author="sndirsch@suse.com" date="1759320000">- fixed 'osc service run download_files'</changelog>
  <changelog author="sndirsch@suse.com" date="1759752000">- update CUDA variant to 580.95.05</changelog>
  <changelog author="sndirsch@suse.com" date="1759924800">- Check4WrongSupplements.sh
  * check for wrong Supplements in generated KMPs after build by
    misusing %post of a dummy "check" subpackage</changelog>
  <changelog author="sndirsch@suse.com" date="1760443200">- changed Requires to
  * nvidia-modprobe = %version
  * nvidia-persitenced = %version
  it has been &gt;= before ...</changelog>
  <changelog author="sndirsch@suse.com" date="1760616000">- renamed check to %name-check package</changelog>
  <changelog author="sndirsch@suse.com" date="1761998400">- update non-CUDA variant to version 580.105.08 (boo#1252978)</changelog>
  <changelog author="sndirsch@suse.com" date="1762257600">- back to 580.95.05 on aarch64, since userspace drivers have not
  been updated for this platform</changelog>
  <changelog author="sndirsch@suse.com" date="1763035200">- update CUDA variant to 580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1763035201">- introduced extra %gfx_aarch64_version and appropriate
  tarball/pci_id file in the hope that build service will no
  longer complain</changelog>
  <changelog author="sndirsch@suse.com" date="1764763200">- kernel-6.18.patch
  * fixed build against kernel 6.18</changelog>
  <changelog author="sndirsch@suse.com" date="1765454400">- update non-CUDA variant to version 580.119.02 (boo#1254801)</changelog>
  <changelog author="sndirsch@suse.com" date="1765454401">- readded kernel-6.18.patch still needed for cuda driver version
  580.105.08</changelog>
</package>
<package pkgid="90693eaeefd84dc33195f65638525ae1b97dfba163cedb86cfea33f35b749857" name="nvidia-open-driver-G06-signed-cuda-default-devel" arch="x86_64">
  <version epoch="0" ver="580.105.08" rel="150700.3.40.1"/>
  <changelog author="sndirsch@suse.com" date="1757160000">- update CUDA variant to 580.82.07</changelog>
  <changelog author="sndirsch@suse.com" date="1757246400">- update non-CUDA variant to 580.82.07 (boo#1249235)</changelog>
  <changelog author="sndirsch@suse.com" date="1757332800">- let conflict CUDA and non-CUDA -devel packages; this is needed
  if both have the same version</changelog>
  <changelog author="sndirsch@suse.com" date="1758110400">- pesign-spec-macros: added definition for %__kernel_supplements,
  which replaced %__kmp_supplements with latest RPM used on TW now,
  in order to fix PCI HW Supplements for TW (boo#1249814)</changelog>
  <changelog author="sndirsch@suse.com" date="1758628800">- get rid of multiversion for the KMPs, since it only brought/brings
  us trouble and no benefit at all (jsc#PED-12049)
  * remove any ^Conflicts and ^Provides: multiversion from
    /usr/lib/rpm/kernel-module-subpackage
  * set INSTALL_MOD_DIR back to %{kernel_module_package_moddir}, i.e.
    updates/ subdir</changelog>
  <changelog author="sndirsch@suse.com" date="1758801600">- update to version 580.95.05 (boo#1250536)</changelog>
  <changelog author="sndirsch@suse.com" date="1759320000">- fixed 'osc service run download_files'</changelog>
  <changelog author="sndirsch@suse.com" date="1759752000">- update CUDA variant to 580.95.05</changelog>
  <changelog author="sndirsch@suse.com" date="1759924800">- Check4WrongSupplements.sh
  * check for wrong Supplements in generated KMPs after build by
    misusing %post of a dummy "check" subpackage</changelog>
  <changelog author="sndirsch@suse.com" date="1760443200">- changed Requires to
  * nvidia-modprobe = %version
  * nvidia-persitenced = %version
  it has been &gt;= before ...</changelog>
  <changelog author="sndirsch@suse.com" date="1760616000">- renamed check to %name-check package</changelog>
  <changelog author="sndirsch@suse.com" date="1761998400">- update non-CUDA variant to version 580.105.08 (boo#1252978)</changelog>
  <changelog author="sndirsch@suse.com" date="1762257600">- back to 580.95.05 on aarch64, since userspace drivers have not
  been updated for this platform</changelog>
  <changelog author="sndirsch@suse.com" date="1763035200">- update CUDA variant to 580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1763035201">- introduced extra %gfx_aarch64_version and appropriate
  tarball/pci_id file in the hope that build service will no
  longer complain</changelog>
  <changelog author="sndirsch@suse.com" date="1764763200">- kernel-6.18.patch
  * fixed build against kernel 6.18</changelog>
  <changelog author="sndirsch@suse.com" date="1765454400">- update non-CUDA variant to version 580.119.02 (boo#1254801)</changelog>
  <changelog author="sndirsch@suse.com" date="1765454401">- readded kernel-6.18.patch still needed for cuda driver version
  580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1767441600">- update non-CUDA variant to version 580.126.09 (boo#1255858)</changelog>
  <changelog author="sndirsch@suse.com" date="1768305600">- kernel-5.14.patch
  * fixes build for sle15-sp4</changelog>
</package>
<package pkgid="18fce4f2ce9c7558e96aa0705be3ed20616b43e049a6a540bb025038ac23b161" name="nvidia-open-driver-G06-signed-cuda-default-devel" arch="x86_64">
  <version epoch="0" ver="580.126.20" rel="150700.3.45.1"/>
  <changelog author="sndirsch@suse.com" date="1758801600">- update to version 580.95.05 (boo#1250536)</changelog>
  <changelog author="sndirsch@suse.com" date="1759320000">- fixed 'osc service run download_files'</changelog>
  <changelog author="sndirsch@suse.com" date="1759752000">- update CUDA variant to 580.95.05</changelog>
  <changelog author="sndirsch@suse.com" date="1759924800">- Check4WrongSupplements.sh
  * check for wrong Supplements in generated KMPs after build by
    misusing %post of a dummy "check" subpackage</changelog>
  <changelog author="sndirsch@suse.com" date="1760443200">- changed Requires to
  * nvidia-modprobe = %version
  * nvidia-persitenced = %version
  it has been &gt;= before ...</changelog>
  <changelog author="sndirsch@suse.com" date="1760616000">- renamed check to %name-check package</changelog>
  <changelog author="sndirsch@suse.com" date="1761998400">- update non-CUDA variant to version 580.105.08 (boo#1252978)</changelog>
  <changelog author="sndirsch@suse.com" date="1762257600">- back to 580.95.05 on aarch64, since userspace drivers have not
  been updated for this platform</changelog>
  <changelog author="sndirsch@suse.com" date="1763035200">- update CUDA variant to 580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1763035201">- introduced extra %gfx_aarch64_version and appropriate
  tarball/pci_id file in the hope that build service will no
  longer complain</changelog>
  <changelog author="sndirsch@suse.com" date="1764763200">- kernel-6.18.patch
  * fixed build against kernel 6.18</changelog>
  <changelog author="sndirsch@suse.com" date="1765454400">- update non-CUDA variant to version 580.119.02 (boo#1254801)</changelog>
  <changelog author="sndirsch@suse.com" date="1765454401">- readded kernel-6.18.patch still needed for cuda driver version
  580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1767441600">- update non-CUDA variant to version 580.126.09 (boo#1255858)</changelog>
  <changelog author="sndirsch@suse.com" date="1768305600">- kernel-5.14.patch
  * fixes build for sle15-sp4</changelog>
  <changelog author="sndirsch@suse.com" date="1768910400">- updated CUDA variant to version 580.126.09
- supersedes kernel-6.18.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1769688000">- apply kernel-5.14.patch also on sle15-sp5 in order to fix build
  and adjusted it to sle15-sp5 kernel</changelog>
  <changelog author="sndirsch@suse.com" date="1770724800">- kernel-6.19.patch: fixes build against kernel 6.19</changelog>
  <changelog author="sndirsch@suse.com" date="1770897600">- update non-CUDA variant to version 580.126.18 (boo#1258154)
- updated CUDA variant to version 580.126.16</changelog>
  <changelog author="sndirsch@suse.com" date="1772107200">- updated CUDA variant to version 580.126.20
- supersedes kernel-6.19.patch</changelog>
</package>
<package pkgid="412b4bcdff167d11de1bcb6f36e0846e6703fb2f4575b339f65dae7f499955bd" name="nvidia-open-driver-G06-signed-cuda-default-devel" arch="x86_64">
  <version epoch="0" ver="580.159.03" rel="150700.3.48.1"/>
  <changelog author="sndirsch@suse.com" date="1763035200">- update CUDA variant to 580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1763035201">- introduced extra %gfx_aarch64_version and appropriate
  tarball/pci_id file in the hope that build service will no
  longer complain</changelog>
  <changelog author="sndirsch@suse.com" date="1764763200">- kernel-6.18.patch
  * fixed build against kernel 6.18</changelog>
  <changelog author="sndirsch@suse.com" date="1765454400">- update non-CUDA variant to version 580.119.02 (boo#1254801)</changelog>
  <changelog author="sndirsch@suse.com" date="1765454401">- readded kernel-6.18.patch still needed for cuda driver version
  580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1767441600">- update non-CUDA variant to version 580.126.09 (boo#1255858)</changelog>
  <changelog author="sndirsch@suse.com" date="1768305600">- kernel-5.14.patch
  * fixes build for sle15-sp4</changelog>
  <changelog author="sndirsch@suse.com" date="1768910400">- updated CUDA variant to version 580.126.09
- supersedes kernel-6.18.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1769688000">- apply kernel-5.14.patch also on sle15-sp5 in order to fix build
  and adjusted it to sle15-sp5 kernel</changelog>
  <changelog author="sndirsch@suse.com" date="1770724800">- kernel-6.19.patch: fixes build against kernel 6.19</changelog>
  <changelog author="sndirsch@suse.com" date="1770897600">- update non-CUDA variant to version 580.126.18 (boo#1258154)
- updated CUDA variant to version 580.126.16</changelog>
  <changelog author="sndirsch@suse.com" date="1772107200">- updated CUDA variant to version 580.126.20
- supersedes kernel-6.19.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1772712000">- adjusted logic for %suse_version bump with SLE16.1 Beta2 (jsc#PED-15826)</changelog>
  <changelog author="sndirsch@suse.com" date="1773662400">- add 'Provides: open-driver-non-cuda-variant = %version' for
  non-CUDA variant to be able to distinguish between both variants;
  to be used by nvidia-open-driver-G06-signed-kmp-meta for TW ...
  (boo#1259740)</changelog>
  <changelog author="sndirsch@suse.com" date="1773835200">- do not set ExclusiveArch in order to fix RPM description for -cuda
  variant (bsc#1259719)
- improved RPM description for -cuda and non-cuda variant</changelog>
  <changelog author="sndirsch@suse.com" date="1774440000">- adding 'ExcludeArch:    %ix86 s390x ppc64le' to no longer get
  autoclines by buildservice hoping that this wont't break RPM
  descriptions for -cuda variant again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1776945600">- disable-objtool-override.patch
  * get rid of confusing objtool warnings (boo#1212841)
  - -&gt; from https://github.com/joanbm/nvidia-470xx-linux-mainline</changelog>
  <changelog author="sndirsch@suse.com" date="1777032000">- update non-CUDA variant to 580.159.03 (boo#1262749)</changelog>
  <changelog author="sndirsch@suse.com" date="1777377600">- update CUDA variant to 580.159.03</changelog>
  <changelog author="sndirsch@suse.com" date="1777809600">- fix-objtool-warnings.patch (not applied on aarch64)
  * Get rid of "'naked' return found in MITIGATION_RETHUNK build"
    objtool warnings (boo#1212841, boo#1263834)
- remove again disable-objtool-override.patch</changelog>
</package>
<package pkgid="be37624a6095410640a80fe3e783b83fd275cf2c5ac8c925a3f833ea164bf36d" name="nvidia-open-driver-G06-signed-cuda-default-devel" arch="x86_64">
  <version epoch="0" ver="580.82.07" rel="150700.3.21.1"/>
  <changelog author="sndirsch@suse.com" date="1743422400">- limit build of -azure flavor to SP6</changelog>
  <changelog author="sndirsch@suse.com" date="1744718400">- update non-CUDA variant to 570.144 (boo#1241231)</changelog>
  <changelog author="sndirsch@suse.com" date="1744977600">- update CUDA variant to 570.133.20</changelog>
  <changelog author="sndirsch@suse.com" date="1746187200">- disabled unsupported -rt flavor (bsc#1242054)</changelog>
  <changelog author="sndirsch@suse.com" date="1747224000">- update non-CUDA variant to 570.153.02 (boo#1243192)</changelog>
  <changelog author="sndirsch@suse.com" date="1749211200">- update CUDA variant to 575.57.08
- supersedes persistent-nvidia-id-string.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1749470400">- Drop persistent-nvidia-id-string.patch - solved via make params instead</changelog>
  <changelog author="sndirsch@suse.com" date="1749643200">- 60-nvidia-$flavor.conf
  * Don't try to load the driver if config and GSP firmware files are
    not available. Otherwise let the default install rule
    'install nvidia-drm /sbin/modprobe --ignore-install nvidia-drm' of
    50-nvidia.conf win, which comes together with config and GSP
    firmware files (package nvidia-common-G06).</changelog>
  <changelog author="sndirsch@suse.com" date="1749988800">- update non-CUDA variant to 570.169 (boo#1244614)</changelog>
  <changelog author="sndirsch@suse.com" date="1750766400">- 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
  * buildfixes against Kernel 6.16 picked up from
    https://github.com/CachyOS/CachyOS-PKGBUILDS.git
  - -&gt; nvidia/nvidia-utils</changelog>
  <changelog author="sndirsch@suse.com" date="1751889600">- empty pci_ids-570.169; PCI ID hardware Supplements get moved to
  gfx repository to package nvidia-open-driver-G06-signed-kmp-meta
  (boo#1246010)
- remove 60-nvidia-$flavor.conf, since driver no longer gets
  autoselected without gfx/cuda repositories present and so we no
  longer need to disable it by default (boo#1246010)</changelog>
  <changelog author="sndirsch@suse.com" date="1752235200">- update non-CUDA variant to 570.172.08 (boo#1246327)
- supersedes
  * 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  * 0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
- update pci_ids-supported</changelog>
  <changelog author="sndirsch@suse.com" date="1753704000">- update CUDA variant to 580.65.06, which addresses various security
  issues:
  * CVE-2025-23277 (bsc#1247528)
  * CVE-2025-23278 (bsc#1247529)
  * CVE-2025-23286 (bsc#1247530)
  * CVE-2025-23283 (bsc#1247531)
  * CVE-2025-23279 (bsc#1247532)</changelog>
  <changelog author="sndirsch@suse.com" date="1754395200">- added Requires
  * nvidia-modprobe &gt;= %version
  * nvidia-persitenced &gt;= %version
  * nvidia-modprobe-cuda-lt-sp6
  * nvidia-persitenced-cuda-lt-sp6
  to be provided by special versions of nvidia-modprobe and
  nvidia-persitenced built against SP4 (bsc#1237208, jsc#PED-13295)</changelog>
  <changelog author="sndirsch@suse.com" date="1754740800">- make sure these Requires right below are not added on Tumbleweed</changelog>
  <changelog author="sndirsch@suse.com" date="1754913600">- update non-CUDA variant to 580.76.05 (boo#1247907)
- get rid of rule of older KMPs not to load nvidia_drm module,
  which are still installed in parallel and therefore still
  active (boo#1247923)</changelog>
  <changelog author="sndirsch@suse.com" date="1755172800">- make sure Requires to nvidia packages are not added for SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1757160000">- update CUDA variant to 580.82.07</changelog>
  <changelog author="sndirsch@suse.com" date="1757246400">- update non-CUDA variant to 580.82.07 (boo#1249235)</changelog>
  <changelog author="sndirsch@suse.com" date="1757332800">- let conflict CUDA and non-CUDA -devel packages; this is needed
  if both have the same version</changelog>
</package>
<package pkgid="582d5e07ed80653137fb442e4a198d56e2607b9adf9a6ec5fb066d83572e3421" name="nvidia-open-driver-G06-signed-cuda-default-devel" arch="x86_64">
  <version epoch="0" ver="580.82.07" rel="150700.3.24.1"/>
  <changelog author="sndirsch@suse.com" date="1746187200">- disabled unsupported -rt flavor (bsc#1242054)</changelog>
  <changelog author="sndirsch@suse.com" date="1747224000">- update non-CUDA variant to 570.153.02 (boo#1243192)</changelog>
  <changelog author="sndirsch@suse.com" date="1749211200">- update CUDA variant to 575.57.08
- supersedes persistent-nvidia-id-string.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1749470400">- Drop persistent-nvidia-id-string.patch - solved via make params instead</changelog>
  <changelog author="sndirsch@suse.com" date="1749643200">- 60-nvidia-$flavor.conf
  * Don't try to load the driver if config and GSP firmware files are
    not available. Otherwise let the default install rule
    'install nvidia-drm /sbin/modprobe --ignore-install nvidia-drm' of
    50-nvidia.conf win, which comes together with config and GSP
    firmware files (package nvidia-common-G06).</changelog>
  <changelog author="sndirsch@suse.com" date="1749988800">- update non-CUDA variant to 570.169 (boo#1244614)</changelog>
  <changelog author="sndirsch@suse.com" date="1750766400">- 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
  * buildfixes against Kernel 6.16 picked up from
    https://github.com/CachyOS/CachyOS-PKGBUILDS.git
  - -&gt; nvidia/nvidia-utils</changelog>
  <changelog author="sndirsch@suse.com" date="1751889600">- empty pci_ids-570.169; PCI ID hardware Supplements get moved to
  gfx repository to package nvidia-open-driver-G06-signed-kmp-meta
  (boo#1246010)
- remove 60-nvidia-$flavor.conf, since driver no longer gets
  autoselected without gfx/cuda repositories present and so we no
  longer need to disable it by default (boo#1246010)</changelog>
  <changelog author="sndirsch@suse.com" date="1752235200">- update non-CUDA variant to 570.172.08 (boo#1246327)
- supersedes
  * 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  * 0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
- update pci_ids-supported</changelog>
  <changelog author="sndirsch@suse.com" date="1753704000">- update CUDA variant to 580.65.06, which addresses various security
  issues:
  * CVE-2025-23277 (bsc#1247528)
  * CVE-2025-23278 (bsc#1247529)
  * CVE-2025-23286 (bsc#1247530)
  * CVE-2025-23283 (bsc#1247531)
  * CVE-2025-23279 (bsc#1247532)</changelog>
  <changelog author="sndirsch@suse.com" date="1754395200">- added Requires
  * nvidia-modprobe &gt;= %version
  * nvidia-persitenced &gt;= %version
  * nvidia-modprobe-cuda-lt-sp6
  * nvidia-persitenced-cuda-lt-sp6
  to be provided by special versions of nvidia-modprobe and
  nvidia-persitenced built against SP4 (bsc#1237208, jsc#PED-13295)</changelog>
  <changelog author="sndirsch@suse.com" date="1754740800">- make sure these Requires right below are not added on Tumbleweed</changelog>
  <changelog author="sndirsch@suse.com" date="1754913600">- update non-CUDA variant to 580.76.05 (boo#1247907)
- get rid of rule of older KMPs not to load nvidia_drm module,
  which are still installed in parallel and therefore still
  active (boo#1247923)</changelog>
  <changelog author="sndirsch@suse.com" date="1755172800">- make sure Requires to nvidia packages are not added for SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1757160000">- update CUDA variant to 580.82.07</changelog>
  <changelog author="sndirsch@suse.com" date="1757246400">- update non-CUDA variant to 580.82.07 (boo#1249235)</changelog>
  <changelog author="sndirsch@suse.com" date="1757332800">- let conflict CUDA and non-CUDA -devel packages; this is needed
  if both have the same version</changelog>
  <changelog author="sndirsch@suse.com" date="1758110400">- pesign-spec-macros: added definition for %__kernel_supplements,
  which replaced %__kmp_supplements with latest RPM used on TW now,
  in order to fix PCI HW Supplements for TW (boo#1249814)</changelog>
  <changelog author="sndirsch@suse.com" date="1758628800">- get rid of multiversion for the KMPs, since it only brought/brings
  us trouble and no benefit at all (jsc#PED-12049)
  * remove any ^Conflicts and ^Provides: multiversion from
    /usr/lib/rpm/kernel-module-subpackage
  * set INSTALL_MOD_DIR back to %{kernel_module_package_moddir}, i.e.
    updates/ subdir</changelog>
  <changelog author="sndirsch@suse.com" date="1758801600">- update to version 580.95.05 (boo#1250536)</changelog>
</package>
<package pkgid="88c89e97d187f438b6394fd7f60f48d2c18d508e2c62b4ddc6beeae1b146eaeb" name="nvidia-open-driver-G06-signed-cuda-default-devel" arch="x86_64">
  <version epoch="0" ver="580.95.05" rel="150700.3.27.2"/>
  <changelog author="sndirsch@suse.com" date="1749988800">- update non-CUDA variant to 570.169 (boo#1244614)</changelog>
  <changelog author="sndirsch@suse.com" date="1750766400">- 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
  * buildfixes against Kernel 6.16 picked up from
    https://github.com/CachyOS/CachyOS-PKGBUILDS.git
  - -&gt; nvidia/nvidia-utils</changelog>
  <changelog author="sndirsch@suse.com" date="1751889600">- empty pci_ids-570.169; PCI ID hardware Supplements get moved to
  gfx repository to package nvidia-open-driver-G06-signed-kmp-meta
  (boo#1246010)
- remove 60-nvidia-$flavor.conf, since driver no longer gets
  autoselected without gfx/cuda repositories present and so we no
  longer need to disable it by default (boo#1246010)</changelog>
  <changelog author="sndirsch@suse.com" date="1752235200">- update non-CUDA variant to 570.172.08 (boo#1246327)
- supersedes
  * 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  * 0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
- update pci_ids-supported</changelog>
  <changelog author="sndirsch@suse.com" date="1753704000">- update CUDA variant to 580.65.06, which addresses various security
  issues:
  * CVE-2025-23277 (bsc#1247528)
  * CVE-2025-23278 (bsc#1247529)
  * CVE-2025-23286 (bsc#1247530)
  * CVE-2025-23283 (bsc#1247531)
  * CVE-2025-23279 (bsc#1247532)</changelog>
  <changelog author="sndirsch@suse.com" date="1754395200">- added Requires
  * nvidia-modprobe &gt;= %version
  * nvidia-persitenced &gt;= %version
  * nvidia-modprobe-cuda-lt-sp6
  * nvidia-persitenced-cuda-lt-sp6
  to be provided by special versions of nvidia-modprobe and
  nvidia-persitenced built against SP4 (bsc#1237208, jsc#PED-13295)</changelog>
  <changelog author="sndirsch@suse.com" date="1754740800">- make sure these Requires right below are not added on Tumbleweed</changelog>
  <changelog author="sndirsch@suse.com" date="1754913600">- update non-CUDA variant to 580.76.05 (boo#1247907)
- get rid of rule of older KMPs not to load nvidia_drm module,
  which are still installed in parallel and therefore still
  active (boo#1247923)</changelog>
  <changelog author="sndirsch@suse.com" date="1755172800">- make sure Requires to nvidia packages are not added for SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1757160000">- update CUDA variant to 580.82.07</changelog>
  <changelog author="sndirsch@suse.com" date="1757246400">- update non-CUDA variant to 580.82.07 (boo#1249235)</changelog>
  <changelog author="sndirsch@suse.com" date="1757332800">- let conflict CUDA and non-CUDA -devel packages; this is needed
  if both have the same version</changelog>
  <changelog author="sndirsch@suse.com" date="1758110400">- pesign-spec-macros: added definition for %__kernel_supplements,
  which replaced %__kmp_supplements with latest RPM used on TW now,
  in order to fix PCI HW Supplements for TW (boo#1249814)</changelog>
  <changelog author="sndirsch@suse.com" date="1758628800">- get rid of multiversion for the KMPs, since it only brought/brings
  us trouble and no benefit at all (jsc#PED-12049)
  * remove any ^Conflicts and ^Provides: multiversion from
    /usr/lib/rpm/kernel-module-subpackage
  * set INSTALL_MOD_DIR back to %{kernel_module_package_moddir}, i.e.
    updates/ subdir</changelog>
  <changelog author="sndirsch@suse.com" date="1758801600">- update to version 580.95.05 (boo#1250536)</changelog>
  <changelog author="sndirsch@suse.com" date="1759320000">- fixed 'osc service run download_files'</changelog>
  <changelog author="sndirsch@suse.com" date="1759752000">- update CUDA variant to 580.95.05</changelog>
  <changelog author="sndirsch@suse.com" date="1759924800">- Check4WrongSupplements.sh
  * check for wrong Supplements in generated KMPs after build by
    misusing %post of a dummy "check" subpackage</changelog>
  <changelog author="sndirsch@suse.com" date="1760443200">- changed Requires to
  * nvidia-modprobe = %version
  * nvidia-persitenced = %version
  it has been &gt;= before ...</changelog>
  <changelog author="sndirsch@suse.com" date="1760616000">- renamed check to %name-check package</changelog>
</package>
<package pkgid="956339a284954d0126beb5486c1f3abec40f729337fb8702bd0927994b8ff480" name="nvidia-open-driver-G06-signed-cuda-kmp-default" arch="x86_64">
  <version epoch="0" ver="570.133.20_k6.4.0_150700.51" rel="150700.3.3.1"/>
  <changelog author="sndirsch@suse.com" date="1736856000">- Update to 550.144.03 (bsc#1235461, boo#1235871)
  * fixes CVE-2024-0131, CVE-2024-0147, CVE-2024-0149,
    CVE-2024-0150, CVE-2024-53869</changelog>
  <changelog author="sndirsch@suse.com" date="1737547200">- preamble: let -cuda KMP conflict with no-cuda variants &lt; 550.135
  (bsc#1236191)</changelog>
  <changelog author="sndirsch@suse.com" date="1737979200">- Update to 565.77
- non-CUDA variant:
  * get rid of modproee.d and dracut.cd files and udev magic;
    instead require nvidia-common-G06
  * Supplements: switch to really supported devices; not only the
    initially supported ones without graphical output
- update non-CUDA and CUDA variant to 570.86.15</changelog>
  <changelog author="sndirsch@suse.com" date="1738065600">- update non-CUDA variant to 570.86.16 (boo#1236658)
- supersedes aarch64-TW-buildfix.patch
- supersedes set-FOP_UNSIGNED_OFFSET-for-nv_drm_fops.fop_flags.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1738584000">- fixed version of 'Provides: nvidia-open-signed-kmp = &lt;version&gt;'
  of nvidia-open-signed-cuda-kmp in preamble file
- fixed
  warning: File listed twice: /usr/src/kernel-modules/nvidia-570.86.16-default</changelog>
  <changelog author="sndirsch@suse.com" date="1738584001">- no longer try to patch %post/%postun; no changes needed any longer
- trigger script needs to be triggered now by nvidia-common-G06,
  which replaced kernel-firmware-nvidia-gspx-G06{,-cuda} packages</changelog>
  <changelog author="sndirsch@suse.com" date="1738584002">- fixed build against openSUSE:Factory by defining %_builddir
  if needed (boo#1236746)</changelog>
  <changelog author="eich@suse.com" date="1738670400">- Add a directory identifying the KMP and its version to the module
  install path - i.e.:
  &lt;kernel_version&gt;/nvidia-open-driver-G06-signed-&lt;version&gt;/updates
  instead of:
  &lt;kernel_version&gt;/updates
  This avoids conflicts when a new version is built against the
  same kernel release.</changelog>
  <changelog author="eich@suse.com" date="1739880000">- In the module install path revert the order of the 'updates'
  subdirectory and the package name &amp; version. This satisfies
  the kmp dependency checker (boo#1237308).</changelog>
  <changelog author="rfrohl@suse.com" date="1740312000">- explicitly enable KMP for kernel-longterm: this will be needed
  for the transition period, until all KMPs are enabled</changelog>
  <changelog author="sndirsch@suse.com" date="1740398400">- update non-CUDA variant to 570.124.02 (boo#1237585)</changelog>
  <changelog author="sndirsch@suse.com" date="1740484800">- update non-CUDA variant to 570.124.04 (boo#1237585)</changelog>
  <changelog author="sndirsch@suse.com" date="1741089600">- update CUDA variant to 570.124.06</changelog>
  <changelog author="sndirsch@suse.com" date="1741435200">- removed obsolete kernel-firmware-nvidia-gspx-G06-cuda; firmware
  has moved to nvidia-common-G06 and
  kernel-firmware-nvidia-gspx-G06 is no longer available either
  (boo#1239139)</changelog>
  <changelog author="sndirsch@suse.com" date="1742040000">- update non-CUDA variant to 570.133.07 (bsc#1239653)</changelog>
  <changelog author="sndirsch@suse.com" date="1743422400">- limit build of -azure flavor to SP6</changelog>
  <changelog author="sndirsch@suse.com" date="1744718400">- update non-CUDA variant to 570.144 (boo#1241231)</changelog>
  <changelog author="sndirsch@suse.com" date="1744977600">- update CUDA variant to 570.133.20</changelog>
  <changelog author="sndirsch@suse.com" date="1746187200">- disabled unsupported -rt flavor (bsc#1242054)</changelog>
  <changelog author="sndirsch@suse.com" date="1747224000">- update non-CUDA variant to 570.153.02 (boo#1243192)</changelog>
</package>
<package pkgid="ac1b9a1bc0f11c8df69259212a205f4cb98b64ab763d65a4eb3c834459022b34" name="nvidia-open-driver-G06-signed-cuda-kmp-default" arch="x86_64">
  <version epoch="0" ver="575.57.08_k6.4.0_150700.51" rel="150700.3.14.2"/>
  <changelog author="eich@suse.com" date="1738670400">- Add a directory identifying the KMP and its version to the module
  install path - i.e.:
  &lt;kernel_version&gt;/nvidia-open-driver-G06-signed-&lt;version&gt;/updates
  instead of:
  &lt;kernel_version&gt;/updates
  This avoids conflicts when a new version is built against the
  same kernel release.</changelog>
  <changelog author="eich@suse.com" date="1739880000">- In the module install path revert the order of the 'updates'
  subdirectory and the package name &amp; version. This satisfies
  the kmp dependency checker (boo#1237308).</changelog>
  <changelog author="rfrohl@suse.com" date="1740312000">- explicitly enable KMP for kernel-longterm: this will be needed
  for the transition period, until all KMPs are enabled</changelog>
  <changelog author="sndirsch@suse.com" date="1740398400">- update non-CUDA variant to 570.124.02 (boo#1237585)</changelog>
  <changelog author="sndirsch@suse.com" date="1740484800">- update non-CUDA variant to 570.124.04 (boo#1237585)</changelog>
  <changelog author="sndirsch@suse.com" date="1741089600">- update CUDA variant to 570.124.06</changelog>
  <changelog author="sndirsch@suse.com" date="1741435200">- removed obsolete kernel-firmware-nvidia-gspx-G06-cuda; firmware
  has moved to nvidia-common-G06 and
  kernel-firmware-nvidia-gspx-G06 is no longer available either
  (boo#1239139)</changelog>
  <changelog author="sndirsch@suse.com" date="1742040000">- update non-CUDA variant to 570.133.07 (bsc#1239653)</changelog>
  <changelog author="sndirsch@suse.com" date="1743422400">- limit build of -azure flavor to SP6</changelog>
  <changelog author="sndirsch@suse.com" date="1744718400">- update non-CUDA variant to 570.144 (boo#1241231)</changelog>
  <changelog author="sndirsch@suse.com" date="1744977600">- update CUDA variant to 570.133.20</changelog>
  <changelog author="sndirsch@suse.com" date="1746187200">- disabled unsupported -rt flavor (bsc#1242054)</changelog>
  <changelog author="sndirsch@suse.com" date="1747224000">- update non-CUDA variant to 570.153.02 (boo#1243192)</changelog>
  <changelog author="sndirsch@suse.com" date="1749211200">- update CUDA variant to 575.57.08
- supersedes persistent-nvidia-id-string.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1749470400">- Drop persistent-nvidia-id-string.patch - solved via make params instead</changelog>
  <changelog author="sndirsch@suse.com" date="1749643200">- 60-nvidia-$flavor.conf
  * Don't try to load the driver if config and GSP firmware files are
    not available. Otherwise let the default install rule
    'install nvidia-drm /sbin/modprobe --ignore-install nvidia-drm' of
    50-nvidia.conf win, which comes together with config and GSP
    firmware files (package nvidia-common-G06).</changelog>
  <changelog author="sndirsch@suse.com" date="1749988800">- update non-CUDA variant to 570.169 (boo#1244614)</changelog>
  <changelog author="sndirsch@suse.com" date="1750766400">- 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
  * buildfixes against Kernel 6.16 picked up from
    https://github.com/CachyOS/CachyOS-PKGBUILDS.git
  - -&gt; nvidia/nvidia-utils</changelog>
  <changelog author="sndirsch@suse.com" date="1751889600">- empty pci_ids-570.169; PCI ID hardware Supplements get moved to
  gfx repository to package nvidia-open-driver-G06-signed-kmp-meta
  (boo#1246010)
- remove 60-nvidia-$flavor.conf, since driver no longer gets
  autoselected without gfx/cuda repositories present and so we no
  longer need to disable it by default (boo#1246010)</changelog>
  <changelog author="sndirsch@suse.com" date="1752235200">- update non-CUDA variant to 570.172.08 (boo#1246327)
- supersedes
  * 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  * 0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
- update pci_ids-supported</changelog>
</package>
<package pkgid="45baaac9f07c7d83e3c125b25e5f51c394fe837a648012212d827b4bb1b847c9" name="nvidia-open-driver-G06-signed-cuda-kmp-default" arch="x86_64">
  <version epoch="0" ver="575.57.08_k6.4.0_150700.51" rel="150700.3.8.2"/>
  <changelog author="sndirsch@suse.com" date="1738584000">- fixed version of 'Provides: nvidia-open-signed-kmp = &lt;version&gt;'
  of nvidia-open-signed-cuda-kmp in preamble file
- fixed
  warning: File listed twice: /usr/src/kernel-modules/nvidia-570.86.16-default</changelog>
  <changelog author="sndirsch@suse.com" date="1738584001">- no longer try to patch %post/%postun; no changes needed any longer
- trigger script needs to be triggered now by nvidia-common-G06,
  which replaced kernel-firmware-nvidia-gspx-G06{,-cuda} packages</changelog>
  <changelog author="sndirsch@suse.com" date="1738584002">- fixed build against openSUSE:Factory by defining %_builddir
  if needed (boo#1236746)</changelog>
  <changelog author="eich@suse.com" date="1738670400">- Add a directory identifying the KMP and its version to the module
  install path - i.e.:
  &lt;kernel_version&gt;/nvidia-open-driver-G06-signed-&lt;version&gt;/updates
  instead of:
  &lt;kernel_version&gt;/updates
  This avoids conflicts when a new version is built against the
  same kernel release.</changelog>
  <changelog author="eich@suse.com" date="1739880000">- In the module install path revert the order of the 'updates'
  subdirectory and the package name &amp; version. This satisfies
  the kmp dependency checker (boo#1237308).</changelog>
  <changelog author="rfrohl@suse.com" date="1740312000">- explicitly enable KMP for kernel-longterm: this will be needed
  for the transition period, until all KMPs are enabled</changelog>
  <changelog author="sndirsch@suse.com" date="1740398400">- update non-CUDA variant to 570.124.02 (boo#1237585)</changelog>
  <changelog author="sndirsch@suse.com" date="1740484800">- update non-CUDA variant to 570.124.04 (boo#1237585)</changelog>
  <changelog author="sndirsch@suse.com" date="1741089600">- update CUDA variant to 570.124.06</changelog>
  <changelog author="sndirsch@suse.com" date="1741435200">- removed obsolete kernel-firmware-nvidia-gspx-G06-cuda; firmware
  has moved to nvidia-common-G06 and
  kernel-firmware-nvidia-gspx-G06 is no longer available either
  (boo#1239139)</changelog>
  <changelog author="sndirsch@suse.com" date="1742040000">- update non-CUDA variant to 570.133.07 (bsc#1239653)</changelog>
  <changelog author="sndirsch@suse.com" date="1743422400">- limit build of -azure flavor to SP6</changelog>
  <changelog author="sndirsch@suse.com" date="1744718400">- update non-CUDA variant to 570.144 (boo#1241231)</changelog>
  <changelog author="sndirsch@suse.com" date="1744977600">- update CUDA variant to 570.133.20</changelog>
  <changelog author="sndirsch@suse.com" date="1746187200">- disabled unsupported -rt flavor (bsc#1242054)</changelog>
  <changelog author="sndirsch@suse.com" date="1747224000">- update non-CUDA variant to 570.153.02 (boo#1243192)</changelog>
  <changelog author="sndirsch@suse.com" date="1749211200">- update CUDA variant to 575.57.08
- supersedes persistent-nvidia-id-string.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1749470400">- Drop persistent-nvidia-id-string.patch - solved via make params instead</changelog>
  <changelog author="sndirsch@suse.com" date="1749643200">- 60-nvidia-$flavor.conf
  * Don't try to load the driver if config and GSP firmware files are
    not available. Otherwise let the default install rule
    'install nvidia-drm /sbin/modprobe --ignore-install nvidia-drm' of
    50-nvidia.conf win, which comes together with config and GSP
    firmware files (package nvidia-common-G06).</changelog>
  <changelog author="sndirsch@suse.com" date="1749988800">- update non-CUDA variant to 570.169 (boo#1244614)</changelog>
</package>
<package pkgid="d5e41fdfa34f93f018f81ff9fbb0a0f950480e5da4d60d45b331f604f5a26949" name="nvidia-open-driver-G06-signed-cuda-kmp-default" arch="x86_64">
  <version epoch="0" ver="580.105.08_k6.4.0_150700.53.22" rel="150700.3.34.2"/>
  <changelog author="sndirsch@suse.com" date="1753704000">- update CUDA variant to 580.65.06, which addresses various security
  issues:
  * CVE-2025-23277 (bsc#1247528)
  * CVE-2025-23278 (bsc#1247529)
  * CVE-2025-23286 (bsc#1247530)
  * CVE-2025-23283 (bsc#1247531)
  * CVE-2025-23279 (bsc#1247532)</changelog>
  <changelog author="sndirsch@suse.com" date="1754395200">- added Requires
  * nvidia-modprobe &gt;= %version
  * nvidia-persitenced &gt;= %version
  * nvidia-modprobe-cuda-lt-sp6
  * nvidia-persitenced-cuda-lt-sp6
  to be provided by special versions of nvidia-modprobe and
  nvidia-persitenced built against SP4 (bsc#1237208, jsc#PED-13295)</changelog>
  <changelog author="sndirsch@suse.com" date="1754740800">- make sure these Requires right below are not added on Tumbleweed</changelog>
  <changelog author="sndirsch@suse.com" date="1754913600">- update non-CUDA variant to 580.76.05 (boo#1247907)
- get rid of rule of older KMPs not to load nvidia_drm module,
  which are still installed in parallel and therefore still
  active (boo#1247923)</changelog>
  <changelog author="sndirsch@suse.com" date="1755172800">- make sure Requires to nvidia packages are not added for SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1757160000">- update CUDA variant to 580.82.07</changelog>
  <changelog author="sndirsch@suse.com" date="1757246400">- update non-CUDA variant to 580.82.07 (boo#1249235)</changelog>
  <changelog author="sndirsch@suse.com" date="1757332800">- let conflict CUDA and non-CUDA -devel packages; this is needed
  if both have the same version</changelog>
  <changelog author="sndirsch@suse.com" date="1758110400">- pesign-spec-macros: added definition for %__kernel_supplements,
  which replaced %__kmp_supplements with latest RPM used on TW now,
  in order to fix PCI HW Supplements for TW (boo#1249814)</changelog>
  <changelog author="sndirsch@suse.com" date="1758628800">- get rid of multiversion for the KMPs, since it only brought/brings
  us trouble and no benefit at all (jsc#PED-12049)
  * remove any ^Conflicts and ^Provides: multiversion from
    /usr/lib/rpm/kernel-module-subpackage
  * set INSTALL_MOD_DIR back to %{kernel_module_package_moddir}, i.e.
    updates/ subdir</changelog>
  <changelog author="sndirsch@suse.com" date="1758801600">- update to version 580.95.05 (boo#1250536)</changelog>
  <changelog author="sndirsch@suse.com" date="1759320000">- fixed 'osc service run download_files'</changelog>
  <changelog author="sndirsch@suse.com" date="1759752000">- update CUDA variant to 580.95.05</changelog>
  <changelog author="sndirsch@suse.com" date="1759924800">- Check4WrongSupplements.sh
  * check for wrong Supplements in generated KMPs after build by
    misusing %post of a dummy "check" subpackage</changelog>
  <changelog author="sndirsch@suse.com" date="1760443200">- changed Requires to
  * nvidia-modprobe = %version
  * nvidia-persitenced = %version
  it has been &gt;= before ...</changelog>
  <changelog author="sndirsch@suse.com" date="1760616000">- renamed check to %name-check package</changelog>
  <changelog author="sndirsch@suse.com" date="1761998400">- update non-CUDA variant to version 580.105.08 (boo#1252978)</changelog>
  <changelog author="sndirsch@suse.com" date="1762257600">- back to 580.95.05 on aarch64, since userspace drivers have not
  been updated for this platform</changelog>
  <changelog author="sndirsch@suse.com" date="1763035200">- update CUDA variant to 580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1763035201">- introduced extra %gfx_aarch64_version and appropriate
  tarball/pci_id file in the hope that build service will no
  longer complain</changelog>
</package>
<package pkgid="ded135d1e0f530e5c628285c412fbd5e9b6050b348dbcbc49696654fb16d1254" name="nvidia-open-driver-G06-signed-cuda-kmp-default" arch="x86_64">
  <version epoch="0" ver="580.105.08_k6.4.0_150700.53.22" rel="150700.3.37.1"/>
  <changelog author="sndirsch@suse.com" date="1754913600">- update non-CUDA variant to 580.76.05 (boo#1247907)
- get rid of rule of older KMPs not to load nvidia_drm module,
  which are still installed in parallel and therefore still
  active (boo#1247923)</changelog>
  <changelog author="sndirsch@suse.com" date="1755172800">- make sure Requires to nvidia packages are not added for SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1757160000">- update CUDA variant to 580.82.07</changelog>
  <changelog author="sndirsch@suse.com" date="1757246400">- update non-CUDA variant to 580.82.07 (boo#1249235)</changelog>
  <changelog author="sndirsch@suse.com" date="1757332800">- let conflict CUDA and non-CUDA -devel packages; this is needed
  if both have the same version</changelog>
  <changelog author="sndirsch@suse.com" date="1758110400">- pesign-spec-macros: added definition for %__kernel_supplements,
  which replaced %__kmp_supplements with latest RPM used on TW now,
  in order to fix PCI HW Supplements for TW (boo#1249814)</changelog>
  <changelog author="sndirsch@suse.com" date="1758628800">- get rid of multiversion for the KMPs, since it only brought/brings
  us trouble and no benefit at all (jsc#PED-12049)
  * remove any ^Conflicts and ^Provides: multiversion from
    /usr/lib/rpm/kernel-module-subpackage
  * set INSTALL_MOD_DIR back to %{kernel_module_package_moddir}, i.e.
    updates/ subdir</changelog>
  <changelog author="sndirsch@suse.com" date="1758801600">- update to version 580.95.05 (boo#1250536)</changelog>
  <changelog author="sndirsch@suse.com" date="1759320000">- fixed 'osc service run download_files'</changelog>
  <changelog author="sndirsch@suse.com" date="1759752000">- update CUDA variant to 580.95.05</changelog>
  <changelog author="sndirsch@suse.com" date="1759924800">- Check4WrongSupplements.sh
  * check for wrong Supplements in generated KMPs after build by
    misusing %post of a dummy "check" subpackage</changelog>
  <changelog author="sndirsch@suse.com" date="1760443200">- changed Requires to
  * nvidia-modprobe = %version
  * nvidia-persitenced = %version
  it has been &gt;= before ...</changelog>
  <changelog author="sndirsch@suse.com" date="1760616000">- renamed check to %name-check package</changelog>
  <changelog author="sndirsch@suse.com" date="1761998400">- update non-CUDA variant to version 580.105.08 (boo#1252978)</changelog>
  <changelog author="sndirsch@suse.com" date="1762257600">- back to 580.95.05 on aarch64, since userspace drivers have not
  been updated for this platform</changelog>
  <changelog author="sndirsch@suse.com" date="1763035200">- update CUDA variant to 580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1763035201">- introduced extra %gfx_aarch64_version and appropriate
  tarball/pci_id file in the hope that build service will no
  longer complain</changelog>
  <changelog author="sndirsch@suse.com" date="1764763200">- kernel-6.18.patch
  * fixed build against kernel 6.18</changelog>
  <changelog author="sndirsch@suse.com" date="1765454400">- update non-CUDA variant to version 580.119.02 (boo#1254801)</changelog>
  <changelog author="sndirsch@suse.com" date="1765454401">- readded kernel-6.18.patch still needed for cuda driver version
  580.105.08</changelog>
</package>
<package pkgid="b6454c9a3ea2d11f2e586950a715a0e2cf486d123222f680fe5700cc2fd85da8" name="nvidia-open-driver-G06-signed-cuda-kmp-default" arch="x86_64">
  <version epoch="0" ver="580.105.08_k6.4.0_150700.53.25" rel="150700.3.40.1"/>
  <changelog author="sndirsch@suse.com" date="1757160000">- update CUDA variant to 580.82.07</changelog>
  <changelog author="sndirsch@suse.com" date="1757246400">- update non-CUDA variant to 580.82.07 (boo#1249235)</changelog>
  <changelog author="sndirsch@suse.com" date="1757332800">- let conflict CUDA and non-CUDA -devel packages; this is needed
  if both have the same version</changelog>
  <changelog author="sndirsch@suse.com" date="1758110400">- pesign-spec-macros: added definition for %__kernel_supplements,
  which replaced %__kmp_supplements with latest RPM used on TW now,
  in order to fix PCI HW Supplements for TW (boo#1249814)</changelog>
  <changelog author="sndirsch@suse.com" date="1758628800">- get rid of multiversion for the KMPs, since it only brought/brings
  us trouble and no benefit at all (jsc#PED-12049)
  * remove any ^Conflicts and ^Provides: multiversion from
    /usr/lib/rpm/kernel-module-subpackage
  * set INSTALL_MOD_DIR back to %{kernel_module_package_moddir}, i.e.
    updates/ subdir</changelog>
  <changelog author="sndirsch@suse.com" date="1758801600">- update to version 580.95.05 (boo#1250536)</changelog>
  <changelog author="sndirsch@suse.com" date="1759320000">- fixed 'osc service run download_files'</changelog>
  <changelog author="sndirsch@suse.com" date="1759752000">- update CUDA variant to 580.95.05</changelog>
  <changelog author="sndirsch@suse.com" date="1759924800">- Check4WrongSupplements.sh
  * check for wrong Supplements in generated KMPs after build by
    misusing %post of a dummy "check" subpackage</changelog>
  <changelog author="sndirsch@suse.com" date="1760443200">- changed Requires to
  * nvidia-modprobe = %version
  * nvidia-persitenced = %version
  it has been &gt;= before ...</changelog>
  <changelog author="sndirsch@suse.com" date="1760616000">- renamed check to %name-check package</changelog>
  <changelog author="sndirsch@suse.com" date="1761998400">- update non-CUDA variant to version 580.105.08 (boo#1252978)</changelog>
  <changelog author="sndirsch@suse.com" date="1762257600">- back to 580.95.05 on aarch64, since userspace drivers have not
  been updated for this platform</changelog>
  <changelog author="sndirsch@suse.com" date="1763035200">- update CUDA variant to 580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1763035201">- introduced extra %gfx_aarch64_version and appropriate
  tarball/pci_id file in the hope that build service will no
  longer complain</changelog>
  <changelog author="sndirsch@suse.com" date="1764763200">- kernel-6.18.patch
  * fixed build against kernel 6.18</changelog>
  <changelog author="sndirsch@suse.com" date="1765454400">- update non-CUDA variant to version 580.119.02 (boo#1254801)</changelog>
  <changelog author="sndirsch@suse.com" date="1765454401">- readded kernel-6.18.patch still needed for cuda driver version
  580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1767441600">- update non-CUDA variant to version 580.126.09 (boo#1255858)</changelog>
  <changelog author="sndirsch@suse.com" date="1768305600">- kernel-5.14.patch
  * fixes build for sle15-sp4</changelog>
</package>
<package pkgid="245c24bde2feee1479196635561c3542b6423acb80986d74cce473f3cc848ee5" name="nvidia-open-driver-G06-signed-cuda-kmp-default" arch="x86_64">
  <version epoch="0" ver="580.126.20_k6.4.0_150700.53.31" rel="150700.3.45.1"/>
  <changelog author="sndirsch@suse.com" date="1758801600">- update to version 580.95.05 (boo#1250536)</changelog>
  <changelog author="sndirsch@suse.com" date="1759320000">- fixed 'osc service run download_files'</changelog>
  <changelog author="sndirsch@suse.com" date="1759752000">- update CUDA variant to 580.95.05</changelog>
  <changelog author="sndirsch@suse.com" date="1759924800">- Check4WrongSupplements.sh
  * check for wrong Supplements in generated KMPs after build by
    misusing %post of a dummy "check" subpackage</changelog>
  <changelog author="sndirsch@suse.com" date="1760443200">- changed Requires to
  * nvidia-modprobe = %version
  * nvidia-persitenced = %version
  it has been &gt;= before ...</changelog>
  <changelog author="sndirsch@suse.com" date="1760616000">- renamed check to %name-check package</changelog>
  <changelog author="sndirsch@suse.com" date="1761998400">- update non-CUDA variant to version 580.105.08 (boo#1252978)</changelog>
  <changelog author="sndirsch@suse.com" date="1762257600">- back to 580.95.05 on aarch64, since userspace drivers have not
  been updated for this platform</changelog>
  <changelog author="sndirsch@suse.com" date="1763035200">- update CUDA variant to 580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1763035201">- introduced extra %gfx_aarch64_version and appropriate
  tarball/pci_id file in the hope that build service will no
  longer complain</changelog>
  <changelog author="sndirsch@suse.com" date="1764763200">- kernel-6.18.patch
  * fixed build against kernel 6.18</changelog>
  <changelog author="sndirsch@suse.com" date="1765454400">- update non-CUDA variant to version 580.119.02 (boo#1254801)</changelog>
  <changelog author="sndirsch@suse.com" date="1765454401">- readded kernel-6.18.patch still needed for cuda driver version
  580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1767441600">- update non-CUDA variant to version 580.126.09 (boo#1255858)</changelog>
  <changelog author="sndirsch@suse.com" date="1768305600">- kernel-5.14.patch
  * fixes build for sle15-sp4</changelog>
  <changelog author="sndirsch@suse.com" date="1768910400">- updated CUDA variant to version 580.126.09
- supersedes kernel-6.18.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1769688000">- apply kernel-5.14.patch also on sle15-sp5 in order to fix build
  and adjusted it to sle15-sp5 kernel</changelog>
  <changelog author="sndirsch@suse.com" date="1770724800">- kernel-6.19.patch: fixes build against kernel 6.19</changelog>
  <changelog author="sndirsch@suse.com" date="1770897600">- update non-CUDA variant to version 580.126.18 (boo#1258154)
- updated CUDA variant to version 580.126.16</changelog>
  <changelog author="sndirsch@suse.com" date="1772107200">- updated CUDA variant to version 580.126.20
- supersedes kernel-6.19.patch</changelog>
</package>
<package pkgid="1ed3d1c00fc62e718198b56008d4e80666f7ae1eae63dd4f534ebfc4378a5bb6" name="nvidia-open-driver-G06-signed-cuda-kmp-default" arch="x86_64">
  <version epoch="0" ver="580.159.03_k6.4.0_150700.53.40" rel="150700.3.48.1"/>
  <changelog author="sndirsch@suse.com" date="1763035200">- update CUDA variant to 580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1763035201">- introduced extra %gfx_aarch64_version and appropriate
  tarball/pci_id file in the hope that build service will no
  longer complain</changelog>
  <changelog author="sndirsch@suse.com" date="1764763200">- kernel-6.18.patch
  * fixed build against kernel 6.18</changelog>
  <changelog author="sndirsch@suse.com" date="1765454400">- update non-CUDA variant to version 580.119.02 (boo#1254801)</changelog>
  <changelog author="sndirsch@suse.com" date="1765454401">- readded kernel-6.18.patch still needed for cuda driver version
  580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1767441600">- update non-CUDA variant to version 580.126.09 (boo#1255858)</changelog>
  <changelog author="sndirsch@suse.com" date="1768305600">- kernel-5.14.patch
  * fixes build for sle15-sp4</changelog>
  <changelog author="sndirsch@suse.com" date="1768910400">- updated CUDA variant to version 580.126.09
- supersedes kernel-6.18.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1769688000">- apply kernel-5.14.patch also on sle15-sp5 in order to fix build
  and adjusted it to sle15-sp5 kernel</changelog>
  <changelog author="sndirsch@suse.com" date="1770724800">- kernel-6.19.patch: fixes build against kernel 6.19</changelog>
  <changelog author="sndirsch@suse.com" date="1770897600">- update non-CUDA variant to version 580.126.18 (boo#1258154)
- updated CUDA variant to version 580.126.16</changelog>
  <changelog author="sndirsch@suse.com" date="1772107200">- updated CUDA variant to version 580.126.20
- supersedes kernel-6.19.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1772712000">- adjusted logic for %suse_version bump with SLE16.1 Beta2 (jsc#PED-15826)</changelog>
  <changelog author="sndirsch@suse.com" date="1773662400">- add 'Provides: open-driver-non-cuda-variant = %version' for
  non-CUDA variant to be able to distinguish between both variants;
  to be used by nvidia-open-driver-G06-signed-kmp-meta for TW ...
  (boo#1259740)</changelog>
  <changelog author="sndirsch@suse.com" date="1773835200">- do not set ExclusiveArch in order to fix RPM description for -cuda
  variant (bsc#1259719)
- improved RPM description for -cuda and non-cuda variant</changelog>
  <changelog author="sndirsch@suse.com" date="1774440000">- adding 'ExcludeArch:    %ix86 s390x ppc64le' to no longer get
  autoclines by buildservice hoping that this wont't break RPM
  descriptions for -cuda variant again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1776945600">- disable-objtool-override.patch
  * get rid of confusing objtool warnings (boo#1212841)
  - -&gt; from https://github.com/joanbm/nvidia-470xx-linux-mainline</changelog>
  <changelog author="sndirsch@suse.com" date="1777032000">- update non-CUDA variant to 580.159.03 (boo#1262749)</changelog>
  <changelog author="sndirsch@suse.com" date="1777377600">- update CUDA variant to 580.159.03</changelog>
  <changelog author="sndirsch@suse.com" date="1777809600">- fix-objtool-warnings.patch (not applied on aarch64)
  * Get rid of "'naked' return found in MITIGATION_RETHUNK build"
    objtool warnings (boo#1212841, boo#1263834)
- remove again disable-objtool-override.patch</changelog>
</package>
<package pkgid="9b2b61c62f0091f90d8dcf9821ec64a11bcc6ebc0a48bbb9655860ea926496f3" name="nvidia-open-driver-G06-signed-cuda-kmp-default" arch="x86_64">
  <version epoch="0" ver="580.82.07_k6.4.0_150700.53.11" rel="150700.3.21.1"/>
  <changelog author="sndirsch@suse.com" date="1743422400">- limit build of -azure flavor to SP6</changelog>
  <changelog author="sndirsch@suse.com" date="1744718400">- update non-CUDA variant to 570.144 (boo#1241231)</changelog>
  <changelog author="sndirsch@suse.com" date="1744977600">- update CUDA variant to 570.133.20</changelog>
  <changelog author="sndirsch@suse.com" date="1746187200">- disabled unsupported -rt flavor (bsc#1242054)</changelog>
  <changelog author="sndirsch@suse.com" date="1747224000">- update non-CUDA variant to 570.153.02 (boo#1243192)</changelog>
  <changelog author="sndirsch@suse.com" date="1749211200">- update CUDA variant to 575.57.08
- supersedes persistent-nvidia-id-string.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1749470400">- Drop persistent-nvidia-id-string.patch - solved via make params instead</changelog>
  <changelog author="sndirsch@suse.com" date="1749643200">- 60-nvidia-$flavor.conf
  * Don't try to load the driver if config and GSP firmware files are
    not available. Otherwise let the default install rule
    'install nvidia-drm /sbin/modprobe --ignore-install nvidia-drm' of
    50-nvidia.conf win, which comes together with config and GSP
    firmware files (package nvidia-common-G06).</changelog>
  <changelog author="sndirsch@suse.com" date="1749988800">- update non-CUDA variant to 570.169 (boo#1244614)</changelog>
  <changelog author="sndirsch@suse.com" date="1750766400">- 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
  * buildfixes against Kernel 6.16 picked up from
    https://github.com/CachyOS/CachyOS-PKGBUILDS.git
  - -&gt; nvidia/nvidia-utils</changelog>
  <changelog author="sndirsch@suse.com" date="1751889600">- empty pci_ids-570.169; PCI ID hardware Supplements get moved to
  gfx repository to package nvidia-open-driver-G06-signed-kmp-meta
  (boo#1246010)
- remove 60-nvidia-$flavor.conf, since driver no longer gets
  autoselected without gfx/cuda repositories present and so we no
  longer need to disable it by default (boo#1246010)</changelog>
  <changelog author="sndirsch@suse.com" date="1752235200">- update non-CUDA variant to 570.172.08 (boo#1246327)
- supersedes
  * 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  * 0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
- update pci_ids-supported</changelog>
  <changelog author="sndirsch@suse.com" date="1753704000">- update CUDA variant to 580.65.06, which addresses various security
  issues:
  * CVE-2025-23277 (bsc#1247528)
  * CVE-2025-23278 (bsc#1247529)
  * CVE-2025-23286 (bsc#1247530)
  * CVE-2025-23283 (bsc#1247531)
  * CVE-2025-23279 (bsc#1247532)</changelog>
  <changelog author="sndirsch@suse.com" date="1754395200">- added Requires
  * nvidia-modprobe &gt;= %version
  * nvidia-persitenced &gt;= %version
  * nvidia-modprobe-cuda-lt-sp6
  * nvidia-persitenced-cuda-lt-sp6
  to be provided by special versions of nvidia-modprobe and
  nvidia-persitenced built against SP4 (bsc#1237208, jsc#PED-13295)</changelog>
  <changelog author="sndirsch@suse.com" date="1754740800">- make sure these Requires right below are not added on Tumbleweed</changelog>
  <changelog author="sndirsch@suse.com" date="1754913600">- update non-CUDA variant to 580.76.05 (boo#1247907)
- get rid of rule of older KMPs not to load nvidia_drm module,
  which are still installed in parallel and therefore still
  active (boo#1247923)</changelog>
  <changelog author="sndirsch@suse.com" date="1755172800">- make sure Requires to nvidia packages are not added for SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1757160000">- update CUDA variant to 580.82.07</changelog>
  <changelog author="sndirsch@suse.com" date="1757246400">- update non-CUDA variant to 580.82.07 (boo#1249235)</changelog>
  <changelog author="sndirsch@suse.com" date="1757332800">- let conflict CUDA and non-CUDA -devel packages; this is needed
  if both have the same version</changelog>
</package>
<package pkgid="9f7a81c55207566c07ea14d476219a6def0b6133f685033e9649e283ed6688f8" name="nvidia-open-driver-G06-signed-cuda-kmp-default" arch="x86_64">
  <version epoch="0" ver="580.82.07_k6.4.0_150700.53.16" rel="150700.3.24.1"/>
  <changelog author="sndirsch@suse.com" date="1746187200">- disabled unsupported -rt flavor (bsc#1242054)</changelog>
  <changelog author="sndirsch@suse.com" date="1747224000">- update non-CUDA variant to 570.153.02 (boo#1243192)</changelog>
  <changelog author="sndirsch@suse.com" date="1749211200">- update CUDA variant to 575.57.08
- supersedes persistent-nvidia-id-string.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1749470400">- Drop persistent-nvidia-id-string.patch - solved via make params instead</changelog>
  <changelog author="sndirsch@suse.com" date="1749643200">- 60-nvidia-$flavor.conf
  * Don't try to load the driver if config and GSP firmware files are
    not available. Otherwise let the default install rule
    'install nvidia-drm /sbin/modprobe --ignore-install nvidia-drm' of
    50-nvidia.conf win, which comes together with config and GSP
    firmware files (package nvidia-common-G06).</changelog>
  <changelog author="sndirsch@suse.com" date="1749988800">- update non-CUDA variant to 570.169 (boo#1244614)</changelog>
  <changelog author="sndirsch@suse.com" date="1750766400">- 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
  * buildfixes against Kernel 6.16 picked up from
    https://github.com/CachyOS/CachyOS-PKGBUILDS.git
  - -&gt; nvidia/nvidia-utils</changelog>
  <changelog author="sndirsch@suse.com" date="1751889600">- empty pci_ids-570.169; PCI ID hardware Supplements get moved to
  gfx repository to package nvidia-open-driver-G06-signed-kmp-meta
  (boo#1246010)
- remove 60-nvidia-$flavor.conf, since driver no longer gets
  autoselected without gfx/cuda repositories present and so we no
  longer need to disable it by default (boo#1246010)</changelog>
  <changelog author="sndirsch@suse.com" date="1752235200">- update non-CUDA variant to 570.172.08 (boo#1246327)
- supersedes
  * 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  * 0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
- update pci_ids-supported</changelog>
  <changelog author="sndirsch@suse.com" date="1753704000">- update CUDA variant to 580.65.06, which addresses various security
  issues:
  * CVE-2025-23277 (bsc#1247528)
  * CVE-2025-23278 (bsc#1247529)
  * CVE-2025-23286 (bsc#1247530)
  * CVE-2025-23283 (bsc#1247531)
  * CVE-2025-23279 (bsc#1247532)</changelog>
  <changelog author="sndirsch@suse.com" date="1754395200">- added Requires
  * nvidia-modprobe &gt;= %version
  * nvidia-persitenced &gt;= %version
  * nvidia-modprobe-cuda-lt-sp6
  * nvidia-persitenced-cuda-lt-sp6
  to be provided by special versions of nvidia-modprobe and
  nvidia-persitenced built against SP4 (bsc#1237208, jsc#PED-13295)</changelog>
  <changelog author="sndirsch@suse.com" date="1754740800">- make sure these Requires right below are not added on Tumbleweed</changelog>
  <changelog author="sndirsch@suse.com" date="1754913600">- update non-CUDA variant to 580.76.05 (boo#1247907)
- get rid of rule of older KMPs not to load nvidia_drm module,
  which are still installed in parallel and therefore still
  active (boo#1247923)</changelog>
  <changelog author="sndirsch@suse.com" date="1755172800">- make sure Requires to nvidia packages are not added for SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1757160000">- update CUDA variant to 580.82.07</changelog>
  <changelog author="sndirsch@suse.com" date="1757246400">- update non-CUDA variant to 580.82.07 (boo#1249235)</changelog>
  <changelog author="sndirsch@suse.com" date="1757332800">- let conflict CUDA and non-CUDA -devel packages; this is needed
  if both have the same version</changelog>
  <changelog author="sndirsch@suse.com" date="1758110400">- pesign-spec-macros: added definition for %__kernel_supplements,
  which replaced %__kmp_supplements with latest RPM used on TW now,
  in order to fix PCI HW Supplements for TW (boo#1249814)</changelog>
  <changelog author="sndirsch@suse.com" date="1758628800">- get rid of multiversion for the KMPs, since it only brought/brings
  us trouble and no benefit at all (jsc#PED-12049)
  * remove any ^Conflicts and ^Provides: multiversion from
    /usr/lib/rpm/kernel-module-subpackage
  * set INSTALL_MOD_DIR back to %{kernel_module_package_moddir}, i.e.
    updates/ subdir</changelog>
  <changelog author="sndirsch@suse.com" date="1758801600">- update to version 580.95.05 (boo#1250536)</changelog>
</package>
<package pkgid="191b258c5a6d97155165996703de87e4805fd52dafaf1fd16caa569e0570ffc2" name="nvidia-open-driver-G06-signed-cuda-kmp-default" arch="x86_64">
  <version epoch="0" ver="580.95.05_k6.4.0_150700.53.19" rel="150700.3.27.2"/>
  <changelog author="sndirsch@suse.com" date="1749988800">- update non-CUDA variant to 570.169 (boo#1244614)</changelog>
  <changelog author="sndirsch@suse.com" date="1750766400">- 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
  * buildfixes against Kernel 6.16 picked up from
    https://github.com/CachyOS/CachyOS-PKGBUILDS.git
  - -&gt; nvidia/nvidia-utils</changelog>
  <changelog author="sndirsch@suse.com" date="1751889600">- empty pci_ids-570.169; PCI ID hardware Supplements get moved to
  gfx repository to package nvidia-open-driver-G06-signed-kmp-meta
  (boo#1246010)
- remove 60-nvidia-$flavor.conf, since driver no longer gets
  autoselected without gfx/cuda repositories present and so we no
  longer need to disable it by default (boo#1246010)</changelog>
  <changelog author="sndirsch@suse.com" date="1752235200">- update non-CUDA variant to 570.172.08 (boo#1246327)
- supersedes
  * 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  * 0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
- update pci_ids-supported</changelog>
  <changelog author="sndirsch@suse.com" date="1753704000">- update CUDA variant to 580.65.06, which addresses various security
  issues:
  * CVE-2025-23277 (bsc#1247528)
  * CVE-2025-23278 (bsc#1247529)
  * CVE-2025-23286 (bsc#1247530)
  * CVE-2025-23283 (bsc#1247531)
  * CVE-2025-23279 (bsc#1247532)</changelog>
  <changelog author="sndirsch@suse.com" date="1754395200">- added Requires
  * nvidia-modprobe &gt;= %version
  * nvidia-persitenced &gt;= %version
  * nvidia-modprobe-cuda-lt-sp6
  * nvidia-persitenced-cuda-lt-sp6
  to be provided by special versions of nvidia-modprobe and
  nvidia-persitenced built against SP4 (bsc#1237208, jsc#PED-13295)</changelog>
  <changelog author="sndirsch@suse.com" date="1754740800">- make sure these Requires right below are not added on Tumbleweed</changelog>
  <changelog author="sndirsch@suse.com" date="1754913600">- update non-CUDA variant to 580.76.05 (boo#1247907)
- get rid of rule of older KMPs not to load nvidia_drm module,
  which are still installed in parallel and therefore still
  active (boo#1247923)</changelog>
  <changelog author="sndirsch@suse.com" date="1755172800">- make sure Requires to nvidia packages are not added for SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1757160000">- update CUDA variant to 580.82.07</changelog>
  <changelog author="sndirsch@suse.com" date="1757246400">- update non-CUDA variant to 580.82.07 (boo#1249235)</changelog>
  <changelog author="sndirsch@suse.com" date="1757332800">- let conflict CUDA and non-CUDA -devel packages; this is needed
  if both have the same version</changelog>
  <changelog author="sndirsch@suse.com" date="1758110400">- pesign-spec-macros: added definition for %__kernel_supplements,
  which replaced %__kmp_supplements with latest RPM used on TW now,
  in order to fix PCI HW Supplements for TW (boo#1249814)</changelog>
  <changelog author="sndirsch@suse.com" date="1758628800">- get rid of multiversion for the KMPs, since it only brought/brings
  us trouble and no benefit at all (jsc#PED-12049)
  * remove any ^Conflicts and ^Provides: multiversion from
    /usr/lib/rpm/kernel-module-subpackage
  * set INSTALL_MOD_DIR back to %{kernel_module_package_moddir}, i.e.
    updates/ subdir</changelog>
  <changelog author="sndirsch@suse.com" date="1758801600">- update to version 580.95.05 (boo#1250536)</changelog>
  <changelog author="sndirsch@suse.com" date="1759320000">- fixed 'osc service run download_files'</changelog>
  <changelog author="sndirsch@suse.com" date="1759752000">- update CUDA variant to 580.95.05</changelog>
  <changelog author="sndirsch@suse.com" date="1759924800">- Check4WrongSupplements.sh
  * check for wrong Supplements in generated KMPs after build by
    misusing %post of a dummy "check" subpackage</changelog>
  <changelog author="sndirsch@suse.com" date="1760443200">- changed Requires to
  * nvidia-modprobe = %version
  * nvidia-persitenced = %version
  it has been &gt;= before ...</changelog>
  <changelog author="sndirsch@suse.com" date="1760616000">- renamed check to %name-check package</changelog>
</package>
<package pkgid="f576d89c97cad731e8602346b08360ab7c304e4f7545c5067712ee209fa7d2fa" name="nvidia-open-driver-G06-signed-default-devel" arch="x86_64">
  <version epoch="0" ver="570.153.02" rel="150700.3.3.1"/>
  <changelog author="sndirsch@suse.com" date="1736856000">- Update to 550.144.03 (bsc#1235461, boo#1235871)
  * fixes CVE-2024-0131, CVE-2024-0147, CVE-2024-0149,
    CVE-2024-0150, CVE-2024-53869</changelog>
  <changelog author="sndirsch@suse.com" date="1737547200">- preamble: let -cuda KMP conflict with no-cuda variants &lt; 550.135
  (bsc#1236191)</changelog>
  <changelog author="sndirsch@suse.com" date="1737979200">- Update to 565.77
- non-CUDA variant:
  * get rid of modproee.d and dracut.cd files and udev magic;
    instead require nvidia-common-G06
  * Supplements: switch to really supported devices; not only the
    initially supported ones without graphical output
- update non-CUDA and CUDA variant to 570.86.15</changelog>
  <changelog author="sndirsch@suse.com" date="1738065600">- update non-CUDA variant to 570.86.16 (boo#1236658)
- supersedes aarch64-TW-buildfix.patch
- supersedes set-FOP_UNSIGNED_OFFSET-for-nv_drm_fops.fop_flags.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1738584000">- fixed version of 'Provides: nvidia-open-signed-kmp = &lt;version&gt;'
  of nvidia-open-signed-cuda-kmp in preamble file
- fixed
  warning: File listed twice: /usr/src/kernel-modules/nvidia-570.86.16-default</changelog>
  <changelog author="sndirsch@suse.com" date="1738584001">- no longer try to patch %post/%postun; no changes needed any longer
- trigger script needs to be triggered now by nvidia-common-G06,
  which replaced kernel-firmware-nvidia-gspx-G06{,-cuda} packages</changelog>
  <changelog author="sndirsch@suse.com" date="1738584002">- fixed build against openSUSE:Factory by defining %_builddir
  if needed (boo#1236746)</changelog>
  <changelog author="eich@suse.com" date="1738670400">- Add a directory identifying the KMP and its version to the module
  install path - i.e.:
  &lt;kernel_version&gt;/nvidia-open-driver-G06-signed-&lt;version&gt;/updates
  instead of:
  &lt;kernel_version&gt;/updates
  This avoids conflicts when a new version is built against the
  same kernel release.</changelog>
  <changelog author="eich@suse.com" date="1739880000">- In the module install path revert the order of the 'updates'
  subdirectory and the package name &amp; version. This satisfies
  the kmp dependency checker (boo#1237308).</changelog>
  <changelog author="rfrohl@suse.com" date="1740312000">- explicitly enable KMP for kernel-longterm: this will be needed
  for the transition period, until all KMPs are enabled</changelog>
  <changelog author="sndirsch@suse.com" date="1740398400">- update non-CUDA variant to 570.124.02 (boo#1237585)</changelog>
  <changelog author="sndirsch@suse.com" date="1740484800">- update non-CUDA variant to 570.124.04 (boo#1237585)</changelog>
  <changelog author="sndirsch@suse.com" date="1741089600">- update CUDA variant to 570.124.06</changelog>
  <changelog author="sndirsch@suse.com" date="1741435200">- removed obsolete kernel-firmware-nvidia-gspx-G06-cuda; firmware
  has moved to nvidia-common-G06 and
  kernel-firmware-nvidia-gspx-G06 is no longer available either
  (boo#1239139)</changelog>
  <changelog author="sndirsch@suse.com" date="1742040000">- update non-CUDA variant to 570.133.07 (bsc#1239653)</changelog>
  <changelog author="sndirsch@suse.com" date="1743422400">- limit build of -azure flavor to SP6</changelog>
  <changelog author="sndirsch@suse.com" date="1744718400">- update non-CUDA variant to 570.144 (boo#1241231)</changelog>
  <changelog author="sndirsch@suse.com" date="1744977600">- update CUDA variant to 570.133.20</changelog>
  <changelog author="sndirsch@suse.com" date="1746187200">- disabled unsupported -rt flavor (bsc#1242054)</changelog>
  <changelog author="sndirsch@suse.com" date="1747224000">- update non-CUDA variant to 570.153.02 (boo#1243192)</changelog>
</package>
<package pkgid="48a96b2c5d8318733ba46dde47d583e22fc1a0bc51c1f1da81da71259a0c81fb" name="nvidia-open-driver-G06-signed-default-devel" arch="x86_64">
  <version epoch="0" ver="570.169" rel="150700.3.8.2"/>
  <changelog author="sndirsch@suse.com" date="1738584000">- fixed version of 'Provides: nvidia-open-signed-kmp = &lt;version&gt;'
  of nvidia-open-signed-cuda-kmp in preamble file
- fixed
  warning: File listed twice: /usr/src/kernel-modules/nvidia-570.86.16-default</changelog>
  <changelog author="sndirsch@suse.com" date="1738584001">- no longer try to patch %post/%postun; no changes needed any longer
- trigger script needs to be triggered now by nvidia-common-G06,
  which replaced kernel-firmware-nvidia-gspx-G06{,-cuda} packages</changelog>
  <changelog author="sndirsch@suse.com" date="1738584002">- fixed build against openSUSE:Factory by defining %_builddir
  if needed (boo#1236746)</changelog>
  <changelog author="eich@suse.com" date="1738670400">- Add a directory identifying the KMP and its version to the module
  install path - i.e.:
  &lt;kernel_version&gt;/nvidia-open-driver-G06-signed-&lt;version&gt;/updates
  instead of:
  &lt;kernel_version&gt;/updates
  This avoids conflicts when a new version is built against the
  same kernel release.</changelog>
  <changelog author="eich@suse.com" date="1739880000">- In the module install path revert the order of the 'updates'
  subdirectory and the package name &amp; version. This satisfies
  the kmp dependency checker (boo#1237308).</changelog>
  <changelog author="rfrohl@suse.com" date="1740312000">- explicitly enable KMP for kernel-longterm: this will be needed
  for the transition period, until all KMPs are enabled</changelog>
  <changelog author="sndirsch@suse.com" date="1740398400">- update non-CUDA variant to 570.124.02 (boo#1237585)</changelog>
  <changelog author="sndirsch@suse.com" date="1740484800">- update non-CUDA variant to 570.124.04 (boo#1237585)</changelog>
  <changelog author="sndirsch@suse.com" date="1741089600">- update CUDA variant to 570.124.06</changelog>
  <changelog author="sndirsch@suse.com" date="1741435200">- removed obsolete kernel-firmware-nvidia-gspx-G06-cuda; firmware
  has moved to nvidia-common-G06 and
  kernel-firmware-nvidia-gspx-G06 is no longer available either
  (boo#1239139)</changelog>
  <changelog author="sndirsch@suse.com" date="1742040000">- update non-CUDA variant to 570.133.07 (bsc#1239653)</changelog>
  <changelog author="sndirsch@suse.com" date="1743422400">- limit build of -azure flavor to SP6</changelog>
  <changelog author="sndirsch@suse.com" date="1744718400">- update non-CUDA variant to 570.144 (boo#1241231)</changelog>
  <changelog author="sndirsch@suse.com" date="1744977600">- update CUDA variant to 570.133.20</changelog>
  <changelog author="sndirsch@suse.com" date="1746187200">- disabled unsupported -rt flavor (bsc#1242054)</changelog>
  <changelog author="sndirsch@suse.com" date="1747224000">- update non-CUDA variant to 570.153.02 (boo#1243192)</changelog>
  <changelog author="sndirsch@suse.com" date="1749211200">- update CUDA variant to 575.57.08
- supersedes persistent-nvidia-id-string.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1749470400">- Drop persistent-nvidia-id-string.patch - solved via make params instead</changelog>
  <changelog author="sndirsch@suse.com" date="1749643200">- 60-nvidia-$flavor.conf
  * Don't try to load the driver if config and GSP firmware files are
    not available. Otherwise let the default install rule
    'install nvidia-drm /sbin/modprobe --ignore-install nvidia-drm' of
    50-nvidia.conf win, which comes together with config and GSP
    firmware files (package nvidia-common-G06).</changelog>
  <changelog author="sndirsch@suse.com" date="1749988800">- update non-CUDA variant to 570.169 (boo#1244614)</changelog>
</package>
<package pkgid="440c8d790259de1a0771afa392c885d5f85cb0210920fbcb5f1674c3f1cada8c" name="nvidia-open-driver-G06-signed-default-devel" arch="x86_64">
  <version epoch="0" ver="570.172.08" rel="150700.3.14.2"/>
  <changelog author="eich@suse.com" date="1738670400">- Add a directory identifying the KMP and its version to the module
  install path - i.e.:
  &lt;kernel_version&gt;/nvidia-open-driver-G06-signed-&lt;version&gt;/updates
  instead of:
  &lt;kernel_version&gt;/updates
  This avoids conflicts when a new version is built against the
  same kernel release.</changelog>
  <changelog author="eich@suse.com" date="1739880000">- In the module install path revert the order of the 'updates'
  subdirectory and the package name &amp; version. This satisfies
  the kmp dependency checker (boo#1237308).</changelog>
  <changelog author="rfrohl@suse.com" date="1740312000">- explicitly enable KMP for kernel-longterm: this will be needed
  for the transition period, until all KMPs are enabled</changelog>
  <changelog author="sndirsch@suse.com" date="1740398400">- update non-CUDA variant to 570.124.02 (boo#1237585)</changelog>
  <changelog author="sndirsch@suse.com" date="1740484800">- update non-CUDA variant to 570.124.04 (boo#1237585)</changelog>
  <changelog author="sndirsch@suse.com" date="1741089600">- update CUDA variant to 570.124.06</changelog>
  <changelog author="sndirsch@suse.com" date="1741435200">- removed obsolete kernel-firmware-nvidia-gspx-G06-cuda; firmware
  has moved to nvidia-common-G06 and
  kernel-firmware-nvidia-gspx-G06 is no longer available either
  (boo#1239139)</changelog>
  <changelog author="sndirsch@suse.com" date="1742040000">- update non-CUDA variant to 570.133.07 (bsc#1239653)</changelog>
  <changelog author="sndirsch@suse.com" date="1743422400">- limit build of -azure flavor to SP6</changelog>
  <changelog author="sndirsch@suse.com" date="1744718400">- update non-CUDA variant to 570.144 (boo#1241231)</changelog>
  <changelog author="sndirsch@suse.com" date="1744977600">- update CUDA variant to 570.133.20</changelog>
  <changelog author="sndirsch@suse.com" date="1746187200">- disabled unsupported -rt flavor (bsc#1242054)</changelog>
  <changelog author="sndirsch@suse.com" date="1747224000">- update non-CUDA variant to 570.153.02 (boo#1243192)</changelog>
  <changelog author="sndirsch@suse.com" date="1749211200">- update CUDA variant to 575.57.08
- supersedes persistent-nvidia-id-string.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1749470400">- Drop persistent-nvidia-id-string.patch - solved via make params instead</changelog>
  <changelog author="sndirsch@suse.com" date="1749643200">- 60-nvidia-$flavor.conf
  * Don't try to load the driver if config and GSP firmware files are
    not available. Otherwise let the default install rule
    'install nvidia-drm /sbin/modprobe --ignore-install nvidia-drm' of
    50-nvidia.conf win, which comes together with config and GSP
    firmware files (package nvidia-common-G06).</changelog>
  <changelog author="sndirsch@suse.com" date="1749988800">- update non-CUDA variant to 570.169 (boo#1244614)</changelog>
  <changelog author="sndirsch@suse.com" date="1750766400">- 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
  * buildfixes against Kernel 6.16 picked up from
    https://github.com/CachyOS/CachyOS-PKGBUILDS.git
  - -&gt; nvidia/nvidia-utils</changelog>
  <changelog author="sndirsch@suse.com" date="1751889600">- empty pci_ids-570.169; PCI ID hardware Supplements get moved to
  gfx repository to package nvidia-open-driver-G06-signed-kmp-meta
  (boo#1246010)
- remove 60-nvidia-$flavor.conf, since driver no longer gets
  autoselected without gfx/cuda repositories present and so we no
  longer need to disable it by default (boo#1246010)</changelog>
  <changelog author="sndirsch@suse.com" date="1752235200">- update non-CUDA variant to 570.172.08 (boo#1246327)
- supersedes
  * 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  * 0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
- update pci_ids-supported</changelog>
</package>
<package pkgid="f62f0c0ce045edd756a80dcaa41f77729c9e227427492d7fdc69bdab2d3de967" name="nvidia-open-driver-G06-signed-default-devel" arch="x86_64">
  <version epoch="0" ver="580.105.08" rel="150700.3.34.2"/>
  <changelog author="sndirsch@suse.com" date="1753704000">- update CUDA variant to 580.65.06, which addresses various security
  issues:
  * CVE-2025-23277 (bsc#1247528)
  * CVE-2025-23278 (bsc#1247529)
  * CVE-2025-23286 (bsc#1247530)
  * CVE-2025-23283 (bsc#1247531)
  * CVE-2025-23279 (bsc#1247532)</changelog>
  <changelog author="sndirsch@suse.com" date="1754395200">- added Requires
  * nvidia-modprobe &gt;= %version
  * nvidia-persitenced &gt;= %version
  * nvidia-modprobe-cuda-lt-sp6
  * nvidia-persitenced-cuda-lt-sp6
  to be provided by special versions of nvidia-modprobe and
  nvidia-persitenced built against SP4 (bsc#1237208, jsc#PED-13295)</changelog>
  <changelog author="sndirsch@suse.com" date="1754740800">- make sure these Requires right below are not added on Tumbleweed</changelog>
  <changelog author="sndirsch@suse.com" date="1754913600">- update non-CUDA variant to 580.76.05 (boo#1247907)
- get rid of rule of older KMPs not to load nvidia_drm module,
  which are still installed in parallel and therefore still
  active (boo#1247923)</changelog>
  <changelog author="sndirsch@suse.com" date="1755172800">- make sure Requires to nvidia packages are not added for SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1757160000">- update CUDA variant to 580.82.07</changelog>
  <changelog author="sndirsch@suse.com" date="1757246400">- update non-CUDA variant to 580.82.07 (boo#1249235)</changelog>
  <changelog author="sndirsch@suse.com" date="1757332800">- let conflict CUDA and non-CUDA -devel packages; this is needed
  if both have the same version</changelog>
  <changelog author="sndirsch@suse.com" date="1758110400">- pesign-spec-macros: added definition for %__kernel_supplements,
  which replaced %__kmp_supplements with latest RPM used on TW now,
  in order to fix PCI HW Supplements for TW (boo#1249814)</changelog>
  <changelog author="sndirsch@suse.com" date="1758628800">- get rid of multiversion for the KMPs, since it only brought/brings
  us trouble and no benefit at all (jsc#PED-12049)
  * remove any ^Conflicts and ^Provides: multiversion from
    /usr/lib/rpm/kernel-module-subpackage
  * set INSTALL_MOD_DIR back to %{kernel_module_package_moddir}, i.e.
    updates/ subdir</changelog>
  <changelog author="sndirsch@suse.com" date="1758801600">- update to version 580.95.05 (boo#1250536)</changelog>
  <changelog author="sndirsch@suse.com" date="1759320000">- fixed 'osc service run download_files'</changelog>
  <changelog author="sndirsch@suse.com" date="1759752000">- update CUDA variant to 580.95.05</changelog>
  <changelog author="sndirsch@suse.com" date="1759924800">- Check4WrongSupplements.sh
  * check for wrong Supplements in generated KMPs after build by
    misusing %post of a dummy "check" subpackage</changelog>
  <changelog author="sndirsch@suse.com" date="1760443200">- changed Requires to
  * nvidia-modprobe = %version
  * nvidia-persitenced = %version
  it has been &gt;= before ...</changelog>
  <changelog author="sndirsch@suse.com" date="1760616000">- renamed check to %name-check package</changelog>
  <changelog author="sndirsch@suse.com" date="1761998400">- update non-CUDA variant to version 580.105.08 (boo#1252978)</changelog>
  <changelog author="sndirsch@suse.com" date="1762257600">- back to 580.95.05 on aarch64, since userspace drivers have not
  been updated for this platform</changelog>
  <changelog author="sndirsch@suse.com" date="1763035200">- update CUDA variant to 580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1763035201">- introduced extra %gfx_aarch64_version and appropriate
  tarball/pci_id file in the hope that build service will no
  longer complain</changelog>
</package>
<package pkgid="2cd8d3b246f1ac724bdd21bdd003515ff00fe4fab99914ad40e6a529f7d34b9c" name="nvidia-open-driver-G06-signed-default-devel" arch="x86_64">
  <version epoch="0" ver="580.119.02" rel="150700.3.37.1"/>
  <changelog author="sndirsch@suse.com" date="1754913600">- update non-CUDA variant to 580.76.05 (boo#1247907)
- get rid of rule of older KMPs not to load nvidia_drm module,
  which are still installed in parallel and therefore still
  active (boo#1247923)</changelog>
  <changelog author="sndirsch@suse.com" date="1755172800">- make sure Requires to nvidia packages are not added for SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1757160000">- update CUDA variant to 580.82.07</changelog>
  <changelog author="sndirsch@suse.com" date="1757246400">- update non-CUDA variant to 580.82.07 (boo#1249235)</changelog>
  <changelog author="sndirsch@suse.com" date="1757332800">- let conflict CUDA and non-CUDA -devel packages; this is needed
  if both have the same version</changelog>
  <changelog author="sndirsch@suse.com" date="1758110400">- pesign-spec-macros: added definition for %__kernel_supplements,
  which replaced %__kmp_supplements with latest RPM used on TW now,
  in order to fix PCI HW Supplements for TW (boo#1249814)</changelog>
  <changelog author="sndirsch@suse.com" date="1758628800">- get rid of multiversion for the KMPs, since it only brought/brings
  us trouble and no benefit at all (jsc#PED-12049)
  * remove any ^Conflicts and ^Provides: multiversion from
    /usr/lib/rpm/kernel-module-subpackage
  * set INSTALL_MOD_DIR back to %{kernel_module_package_moddir}, i.e.
    updates/ subdir</changelog>
  <changelog author="sndirsch@suse.com" date="1758801600">- update to version 580.95.05 (boo#1250536)</changelog>
  <changelog author="sndirsch@suse.com" date="1759320000">- fixed 'osc service run download_files'</changelog>
  <changelog author="sndirsch@suse.com" date="1759752000">- update CUDA variant to 580.95.05</changelog>
  <changelog author="sndirsch@suse.com" date="1759924800">- Check4WrongSupplements.sh
  * check for wrong Supplements in generated KMPs after build by
    misusing %post of a dummy "check" subpackage</changelog>
  <changelog author="sndirsch@suse.com" date="1760443200">- changed Requires to
  * nvidia-modprobe = %version
  * nvidia-persitenced = %version
  it has been &gt;= before ...</changelog>
  <changelog author="sndirsch@suse.com" date="1760616000">- renamed check to %name-check package</changelog>
  <changelog author="sndirsch@suse.com" date="1761998400">- update non-CUDA variant to version 580.105.08 (boo#1252978)</changelog>
  <changelog author="sndirsch@suse.com" date="1762257600">- back to 580.95.05 on aarch64, since userspace drivers have not
  been updated for this platform</changelog>
  <changelog author="sndirsch@suse.com" date="1763035200">- update CUDA variant to 580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1763035201">- introduced extra %gfx_aarch64_version and appropriate
  tarball/pci_id file in the hope that build service will no
  longer complain</changelog>
  <changelog author="sndirsch@suse.com" date="1764763200">- kernel-6.18.patch
  * fixed build against kernel 6.18</changelog>
  <changelog author="sndirsch@suse.com" date="1765454400">- update non-CUDA variant to version 580.119.02 (boo#1254801)</changelog>
  <changelog author="sndirsch@suse.com" date="1765454401">- readded kernel-6.18.patch still needed for cuda driver version
  580.105.08</changelog>
</package>
<package pkgid="c161f396781325a04b2882f6d1e86df1d85bce2fc27f48adaaeb4426c6339808" name="nvidia-open-driver-G06-signed-default-devel" arch="x86_64">
  <version epoch="0" ver="580.126.09" rel="150700.3.40.1"/>
  <changelog author="sndirsch@suse.com" date="1757160000">- update CUDA variant to 580.82.07</changelog>
  <changelog author="sndirsch@suse.com" date="1757246400">- update non-CUDA variant to 580.82.07 (boo#1249235)</changelog>
  <changelog author="sndirsch@suse.com" date="1757332800">- let conflict CUDA and non-CUDA -devel packages; this is needed
  if both have the same version</changelog>
  <changelog author="sndirsch@suse.com" date="1758110400">- pesign-spec-macros: added definition for %__kernel_supplements,
  which replaced %__kmp_supplements with latest RPM used on TW now,
  in order to fix PCI HW Supplements for TW (boo#1249814)</changelog>
  <changelog author="sndirsch@suse.com" date="1758628800">- get rid of multiversion for the KMPs, since it only brought/brings
  us trouble and no benefit at all (jsc#PED-12049)
  * remove any ^Conflicts and ^Provides: multiversion from
    /usr/lib/rpm/kernel-module-subpackage
  * set INSTALL_MOD_DIR back to %{kernel_module_package_moddir}, i.e.
    updates/ subdir</changelog>
  <changelog author="sndirsch@suse.com" date="1758801600">- update to version 580.95.05 (boo#1250536)</changelog>
  <changelog author="sndirsch@suse.com" date="1759320000">- fixed 'osc service run download_files'</changelog>
  <changelog author="sndirsch@suse.com" date="1759752000">- update CUDA variant to 580.95.05</changelog>
  <changelog author="sndirsch@suse.com" date="1759924800">- Check4WrongSupplements.sh
  * check for wrong Supplements in generated KMPs after build by
    misusing %post of a dummy "check" subpackage</changelog>
  <changelog author="sndirsch@suse.com" date="1760443200">- changed Requires to
  * nvidia-modprobe = %version
  * nvidia-persitenced = %version
  it has been &gt;= before ...</changelog>
  <changelog author="sndirsch@suse.com" date="1760616000">- renamed check to %name-check package</changelog>
  <changelog author="sndirsch@suse.com" date="1761998400">- update non-CUDA variant to version 580.105.08 (boo#1252978)</changelog>
  <changelog author="sndirsch@suse.com" date="1762257600">- back to 580.95.05 on aarch64, since userspace drivers have not
  been updated for this platform</changelog>
  <changelog author="sndirsch@suse.com" date="1763035200">- update CUDA variant to 580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1763035201">- introduced extra %gfx_aarch64_version and appropriate
  tarball/pci_id file in the hope that build service will no
  longer complain</changelog>
  <changelog author="sndirsch@suse.com" date="1764763200">- kernel-6.18.patch
  * fixed build against kernel 6.18</changelog>
  <changelog author="sndirsch@suse.com" date="1765454400">- update non-CUDA variant to version 580.119.02 (boo#1254801)</changelog>
  <changelog author="sndirsch@suse.com" date="1765454401">- readded kernel-6.18.patch still needed for cuda driver version
  580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1767441600">- update non-CUDA variant to version 580.126.09 (boo#1255858)</changelog>
  <changelog author="sndirsch@suse.com" date="1768305600">- kernel-5.14.patch
  * fixes build for sle15-sp4</changelog>
</package>
<package pkgid="b51e62827e6c1a3e3922cb5544c7c4312d391767d494ca1a1e54a5569de14739" name="nvidia-open-driver-G06-signed-default-devel" arch="x86_64">
  <version epoch="0" ver="580.126.18" rel="150700.3.45.1"/>
  <changelog author="sndirsch@suse.com" date="1758801600">- update to version 580.95.05 (boo#1250536)</changelog>
  <changelog author="sndirsch@suse.com" date="1759320000">- fixed 'osc service run download_files'</changelog>
  <changelog author="sndirsch@suse.com" date="1759752000">- update CUDA variant to 580.95.05</changelog>
  <changelog author="sndirsch@suse.com" date="1759924800">- Check4WrongSupplements.sh
  * check for wrong Supplements in generated KMPs after build by
    misusing %post of a dummy "check" subpackage</changelog>
  <changelog author="sndirsch@suse.com" date="1760443200">- changed Requires to
  * nvidia-modprobe = %version
  * nvidia-persitenced = %version
  it has been &gt;= before ...</changelog>
  <changelog author="sndirsch@suse.com" date="1760616000">- renamed check to %name-check package</changelog>
  <changelog author="sndirsch@suse.com" date="1761998400">- update non-CUDA variant to version 580.105.08 (boo#1252978)</changelog>
  <changelog author="sndirsch@suse.com" date="1762257600">- back to 580.95.05 on aarch64, since userspace drivers have not
  been updated for this platform</changelog>
  <changelog author="sndirsch@suse.com" date="1763035200">- update CUDA variant to 580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1763035201">- introduced extra %gfx_aarch64_version and appropriate
  tarball/pci_id file in the hope that build service will no
  longer complain</changelog>
  <changelog author="sndirsch@suse.com" date="1764763200">- kernel-6.18.patch
  * fixed build against kernel 6.18</changelog>
  <changelog author="sndirsch@suse.com" date="1765454400">- update non-CUDA variant to version 580.119.02 (boo#1254801)</changelog>
  <changelog author="sndirsch@suse.com" date="1765454401">- readded kernel-6.18.patch still needed for cuda driver version
  580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1767441600">- update non-CUDA variant to version 580.126.09 (boo#1255858)</changelog>
  <changelog author="sndirsch@suse.com" date="1768305600">- kernel-5.14.patch
  * fixes build for sle15-sp4</changelog>
  <changelog author="sndirsch@suse.com" date="1768910400">- updated CUDA variant to version 580.126.09
- supersedes kernel-6.18.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1769688000">- apply kernel-5.14.patch also on sle15-sp5 in order to fix build
  and adjusted it to sle15-sp5 kernel</changelog>
  <changelog author="sndirsch@suse.com" date="1770724800">- kernel-6.19.patch: fixes build against kernel 6.19</changelog>
  <changelog author="sndirsch@suse.com" date="1770897600">- update non-CUDA variant to version 580.126.18 (boo#1258154)
- updated CUDA variant to version 580.126.16</changelog>
  <changelog author="sndirsch@suse.com" date="1772107200">- updated CUDA variant to version 580.126.20
- supersedes kernel-6.19.patch</changelog>
</package>
<package pkgid="2995c7c9bb6db43688bb938594c8e2c21d82e823d20ca1b1b2f45718fbd24584" name="nvidia-open-driver-G06-signed-default-devel" arch="x86_64">
  <version epoch="0" ver="580.159.03" rel="150700.3.48.1"/>
  <changelog author="sndirsch@suse.com" date="1763035200">- update CUDA variant to 580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1763035201">- introduced extra %gfx_aarch64_version and appropriate
  tarball/pci_id file in the hope that build service will no
  longer complain</changelog>
  <changelog author="sndirsch@suse.com" date="1764763200">- kernel-6.18.patch
  * fixed build against kernel 6.18</changelog>
  <changelog author="sndirsch@suse.com" date="1765454400">- update non-CUDA variant to version 580.119.02 (boo#1254801)</changelog>
  <changelog author="sndirsch@suse.com" date="1765454401">- readded kernel-6.18.patch still needed for cuda driver version
  580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1767441600">- update non-CUDA variant to version 580.126.09 (boo#1255858)</changelog>
  <changelog author="sndirsch@suse.com" date="1768305600">- kernel-5.14.patch
  * fixes build for sle15-sp4</changelog>
  <changelog author="sndirsch@suse.com" date="1768910400">- updated CUDA variant to version 580.126.09
- supersedes kernel-6.18.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1769688000">- apply kernel-5.14.patch also on sle15-sp5 in order to fix build
  and adjusted it to sle15-sp5 kernel</changelog>
  <changelog author="sndirsch@suse.com" date="1770724800">- kernel-6.19.patch: fixes build against kernel 6.19</changelog>
  <changelog author="sndirsch@suse.com" date="1770897600">- update non-CUDA variant to version 580.126.18 (boo#1258154)
- updated CUDA variant to version 580.126.16</changelog>
  <changelog author="sndirsch@suse.com" date="1772107200">- updated CUDA variant to version 580.126.20
- supersedes kernel-6.19.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1772712000">- adjusted logic for %suse_version bump with SLE16.1 Beta2 (jsc#PED-15826)</changelog>
  <changelog author="sndirsch@suse.com" date="1773662400">- add 'Provides: open-driver-non-cuda-variant = %version' for
  non-CUDA variant to be able to distinguish between both variants;
  to be used by nvidia-open-driver-G06-signed-kmp-meta for TW ...
  (boo#1259740)</changelog>
  <changelog author="sndirsch@suse.com" date="1773835200">- do not set ExclusiveArch in order to fix RPM description for -cuda
  variant (bsc#1259719)
- improved RPM description for -cuda and non-cuda variant</changelog>
  <changelog author="sndirsch@suse.com" date="1774440000">- adding 'ExcludeArch:    %ix86 s390x ppc64le' to no longer get
  autoclines by buildservice hoping that this wont't break RPM
  descriptions for -cuda variant again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1776945600">- disable-objtool-override.patch
  * get rid of confusing objtool warnings (boo#1212841)
  - -&gt; from https://github.com/joanbm/nvidia-470xx-linux-mainline</changelog>
  <changelog author="sndirsch@suse.com" date="1777032000">- update non-CUDA variant to 580.159.03 (boo#1262749)</changelog>
  <changelog author="sndirsch@suse.com" date="1777377600">- update CUDA variant to 580.159.03</changelog>
  <changelog author="sndirsch@suse.com" date="1777809600">- fix-objtool-warnings.patch (not applied on aarch64)
  * Get rid of "'naked' return found in MITIGATION_RETHUNK build"
    objtool warnings (boo#1212841, boo#1263834)
- remove again disable-objtool-override.patch</changelog>
</package>
<package pkgid="c9b3be3cd5b532c9c87e34a2ae221569f167414e1077f2f1d319683061e6001b" name="nvidia-open-driver-G06-signed-default-devel" arch="x86_64">
  <version epoch="0" ver="580.82.07" rel="150700.3.21.1"/>
  <changelog author="sndirsch@suse.com" date="1743422400">- limit build of -azure flavor to SP6</changelog>
  <changelog author="sndirsch@suse.com" date="1744718400">- update non-CUDA variant to 570.144 (boo#1241231)</changelog>
  <changelog author="sndirsch@suse.com" date="1744977600">- update CUDA variant to 570.133.20</changelog>
  <changelog author="sndirsch@suse.com" date="1746187200">- disabled unsupported -rt flavor (bsc#1242054)</changelog>
  <changelog author="sndirsch@suse.com" date="1747224000">- update non-CUDA variant to 570.153.02 (boo#1243192)</changelog>
  <changelog author="sndirsch@suse.com" date="1749211200">- update CUDA variant to 575.57.08
- supersedes persistent-nvidia-id-string.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1749470400">- Drop persistent-nvidia-id-string.patch - solved via make params instead</changelog>
  <changelog author="sndirsch@suse.com" date="1749643200">- 60-nvidia-$flavor.conf
  * Don't try to load the driver if config and GSP firmware files are
    not available. Otherwise let the default install rule
    'install nvidia-drm /sbin/modprobe --ignore-install nvidia-drm' of
    50-nvidia.conf win, which comes together with config and GSP
    firmware files (package nvidia-common-G06).</changelog>
  <changelog author="sndirsch@suse.com" date="1749988800">- update non-CUDA variant to 570.169 (boo#1244614)</changelog>
  <changelog author="sndirsch@suse.com" date="1750766400">- 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
  * buildfixes against Kernel 6.16 picked up from
    https://github.com/CachyOS/CachyOS-PKGBUILDS.git
  - -&gt; nvidia/nvidia-utils</changelog>
  <changelog author="sndirsch@suse.com" date="1751889600">- empty pci_ids-570.169; PCI ID hardware Supplements get moved to
  gfx repository to package nvidia-open-driver-G06-signed-kmp-meta
  (boo#1246010)
- remove 60-nvidia-$flavor.conf, since driver no longer gets
  autoselected without gfx/cuda repositories present and so we no
  longer need to disable it by default (boo#1246010)</changelog>
  <changelog author="sndirsch@suse.com" date="1752235200">- update non-CUDA variant to 570.172.08 (boo#1246327)
- supersedes
  * 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  * 0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
- update pci_ids-supported</changelog>
  <changelog author="sndirsch@suse.com" date="1753704000">- update CUDA variant to 580.65.06, which addresses various security
  issues:
  * CVE-2025-23277 (bsc#1247528)
  * CVE-2025-23278 (bsc#1247529)
  * CVE-2025-23286 (bsc#1247530)
  * CVE-2025-23283 (bsc#1247531)
  * CVE-2025-23279 (bsc#1247532)</changelog>
  <changelog author="sndirsch@suse.com" date="1754395200">- added Requires
  * nvidia-modprobe &gt;= %version
  * nvidia-persitenced &gt;= %version
  * nvidia-modprobe-cuda-lt-sp6
  * nvidia-persitenced-cuda-lt-sp6
  to be provided by special versions of nvidia-modprobe and
  nvidia-persitenced built against SP4 (bsc#1237208, jsc#PED-13295)</changelog>
  <changelog author="sndirsch@suse.com" date="1754740800">- make sure these Requires right below are not added on Tumbleweed</changelog>
  <changelog author="sndirsch@suse.com" date="1754913600">- update non-CUDA variant to 580.76.05 (boo#1247907)
- get rid of rule of older KMPs not to load nvidia_drm module,
  which are still installed in parallel and therefore still
  active (boo#1247923)</changelog>
  <changelog author="sndirsch@suse.com" date="1755172800">- make sure Requires to nvidia packages are not added for SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1757160000">- update CUDA variant to 580.82.07</changelog>
  <changelog author="sndirsch@suse.com" date="1757246400">- update non-CUDA variant to 580.82.07 (boo#1249235)</changelog>
  <changelog author="sndirsch@suse.com" date="1757332800">- let conflict CUDA and non-CUDA -devel packages; this is needed
  if both have the same version</changelog>
</package>
<package pkgid="0cc5b0ccd413ea35d47f83abb123bf78cbf938fffd3e13028657349df411d3e7" name="nvidia-open-driver-G06-signed-default-devel" arch="x86_64">
  <version epoch="0" ver="580.95.05" rel="150700.3.24.1"/>
  <changelog author="sndirsch@suse.com" date="1746187200">- disabled unsupported -rt flavor (bsc#1242054)</changelog>
  <changelog author="sndirsch@suse.com" date="1747224000">- update non-CUDA variant to 570.153.02 (boo#1243192)</changelog>
  <changelog author="sndirsch@suse.com" date="1749211200">- update CUDA variant to 575.57.08
- supersedes persistent-nvidia-id-string.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1749470400">- Drop persistent-nvidia-id-string.patch - solved via make params instead</changelog>
  <changelog author="sndirsch@suse.com" date="1749643200">- 60-nvidia-$flavor.conf
  * Don't try to load the driver if config and GSP firmware files are
    not available. Otherwise let the default install rule
    'install nvidia-drm /sbin/modprobe --ignore-install nvidia-drm' of
    50-nvidia.conf win, which comes together with config and GSP
    firmware files (package nvidia-common-G06).</changelog>
  <changelog author="sndirsch@suse.com" date="1749988800">- update non-CUDA variant to 570.169 (boo#1244614)</changelog>
  <changelog author="sndirsch@suse.com" date="1750766400">- 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
  * buildfixes against Kernel 6.16 picked up from
    https://github.com/CachyOS/CachyOS-PKGBUILDS.git
  - -&gt; nvidia/nvidia-utils</changelog>
  <changelog author="sndirsch@suse.com" date="1751889600">- empty pci_ids-570.169; PCI ID hardware Supplements get moved to
  gfx repository to package nvidia-open-driver-G06-signed-kmp-meta
  (boo#1246010)
- remove 60-nvidia-$flavor.conf, since driver no longer gets
  autoselected without gfx/cuda repositories present and so we no
  longer need to disable it by default (boo#1246010)</changelog>
  <changelog author="sndirsch@suse.com" date="1752235200">- update non-CUDA variant to 570.172.08 (boo#1246327)
- supersedes
  * 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  * 0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
- update pci_ids-supported</changelog>
  <changelog author="sndirsch@suse.com" date="1753704000">- update CUDA variant to 580.65.06, which addresses various security
  issues:
  * CVE-2025-23277 (bsc#1247528)
  * CVE-2025-23278 (bsc#1247529)
  * CVE-2025-23286 (bsc#1247530)
  * CVE-2025-23283 (bsc#1247531)
  * CVE-2025-23279 (bsc#1247532)</changelog>
  <changelog author="sndirsch@suse.com" date="1754395200">- added Requires
  * nvidia-modprobe &gt;= %version
  * nvidia-persitenced &gt;= %version
  * nvidia-modprobe-cuda-lt-sp6
  * nvidia-persitenced-cuda-lt-sp6
  to be provided by special versions of nvidia-modprobe and
  nvidia-persitenced built against SP4 (bsc#1237208, jsc#PED-13295)</changelog>
  <changelog author="sndirsch@suse.com" date="1754740800">- make sure these Requires right below are not added on Tumbleweed</changelog>
  <changelog author="sndirsch@suse.com" date="1754913600">- update non-CUDA variant to 580.76.05 (boo#1247907)
- get rid of rule of older KMPs not to load nvidia_drm module,
  which are still installed in parallel and therefore still
  active (boo#1247923)</changelog>
  <changelog author="sndirsch@suse.com" date="1755172800">- make sure Requires to nvidia packages are not added for SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1757160000">- update CUDA variant to 580.82.07</changelog>
  <changelog author="sndirsch@suse.com" date="1757246400">- update non-CUDA variant to 580.82.07 (boo#1249235)</changelog>
  <changelog author="sndirsch@suse.com" date="1757332800">- let conflict CUDA and non-CUDA -devel packages; this is needed
  if both have the same version</changelog>
  <changelog author="sndirsch@suse.com" date="1758110400">- pesign-spec-macros: added definition for %__kernel_supplements,
  which replaced %__kmp_supplements with latest RPM used on TW now,
  in order to fix PCI HW Supplements for TW (boo#1249814)</changelog>
  <changelog author="sndirsch@suse.com" date="1758628800">- get rid of multiversion for the KMPs, since it only brought/brings
  us trouble and no benefit at all (jsc#PED-12049)
  * remove any ^Conflicts and ^Provides: multiversion from
    /usr/lib/rpm/kernel-module-subpackage
  * set INSTALL_MOD_DIR back to %{kernel_module_package_moddir}, i.e.
    updates/ subdir</changelog>
  <changelog author="sndirsch@suse.com" date="1758801600">- update to version 580.95.05 (boo#1250536)</changelog>
</package>
<package pkgid="b122c0e492625d2b103779af523b095a436c34c8d4567e5069f49dc60b48ecda" name="nvidia-open-driver-G06-signed-default-devel" arch="x86_64">
  <version epoch="0" ver="580.95.05" rel="150700.3.27.2"/>
  <changelog author="sndirsch@suse.com" date="1749988800">- update non-CUDA variant to 570.169 (boo#1244614)</changelog>
  <changelog author="sndirsch@suse.com" date="1750766400">- 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
  * buildfixes against Kernel 6.16 picked up from
    https://github.com/CachyOS/CachyOS-PKGBUILDS.git
  - -&gt; nvidia/nvidia-utils</changelog>
  <changelog author="sndirsch@suse.com" date="1751889600">- empty pci_ids-570.169; PCI ID hardware Supplements get moved to
  gfx repository to package nvidia-open-driver-G06-signed-kmp-meta
  (boo#1246010)
- remove 60-nvidia-$flavor.conf, since driver no longer gets
  autoselected without gfx/cuda repositories present and so we no
  longer need to disable it by default (boo#1246010)</changelog>
  <changelog author="sndirsch@suse.com" date="1752235200">- update non-CUDA variant to 570.172.08 (boo#1246327)
- supersedes
  * 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  * 0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
- update pci_ids-supported</changelog>
  <changelog author="sndirsch@suse.com" date="1753704000">- update CUDA variant to 580.65.06, which addresses various security
  issues:
  * CVE-2025-23277 (bsc#1247528)
  * CVE-2025-23278 (bsc#1247529)
  * CVE-2025-23286 (bsc#1247530)
  * CVE-2025-23283 (bsc#1247531)
  * CVE-2025-23279 (bsc#1247532)</changelog>
  <changelog author="sndirsch@suse.com" date="1754395200">- added Requires
  * nvidia-modprobe &gt;= %version
  * nvidia-persitenced &gt;= %version
  * nvidia-modprobe-cuda-lt-sp6
  * nvidia-persitenced-cuda-lt-sp6
  to be provided by special versions of nvidia-modprobe and
  nvidia-persitenced built against SP4 (bsc#1237208, jsc#PED-13295)</changelog>
  <changelog author="sndirsch@suse.com" date="1754740800">- make sure these Requires right below are not added on Tumbleweed</changelog>
  <changelog author="sndirsch@suse.com" date="1754913600">- update non-CUDA variant to 580.76.05 (boo#1247907)
- get rid of rule of older KMPs not to load nvidia_drm module,
  which are still installed in parallel and therefore still
  active (boo#1247923)</changelog>
  <changelog author="sndirsch@suse.com" date="1755172800">- make sure Requires to nvidia packages are not added for SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1757160000">- update CUDA variant to 580.82.07</changelog>
  <changelog author="sndirsch@suse.com" date="1757246400">- update non-CUDA variant to 580.82.07 (boo#1249235)</changelog>
  <changelog author="sndirsch@suse.com" date="1757332800">- let conflict CUDA and non-CUDA -devel packages; this is needed
  if both have the same version</changelog>
  <changelog author="sndirsch@suse.com" date="1758110400">- pesign-spec-macros: added definition for %__kernel_supplements,
  which replaced %__kmp_supplements with latest RPM used on TW now,
  in order to fix PCI HW Supplements for TW (boo#1249814)</changelog>
  <changelog author="sndirsch@suse.com" date="1758628800">- get rid of multiversion for the KMPs, since it only brought/brings
  us trouble and no benefit at all (jsc#PED-12049)
  * remove any ^Conflicts and ^Provides: multiversion from
    /usr/lib/rpm/kernel-module-subpackage
  * set INSTALL_MOD_DIR back to %{kernel_module_package_moddir}, i.e.
    updates/ subdir</changelog>
  <changelog author="sndirsch@suse.com" date="1758801600">- update to version 580.95.05 (boo#1250536)</changelog>
  <changelog author="sndirsch@suse.com" date="1759320000">- fixed 'osc service run download_files'</changelog>
  <changelog author="sndirsch@suse.com" date="1759752000">- update CUDA variant to 580.95.05</changelog>
  <changelog author="sndirsch@suse.com" date="1759924800">- Check4WrongSupplements.sh
  * check for wrong Supplements in generated KMPs after build by
    misusing %post of a dummy "check" subpackage</changelog>
  <changelog author="sndirsch@suse.com" date="1760443200">- changed Requires to
  * nvidia-modprobe = %version
  * nvidia-persitenced = %version
  it has been &gt;= before ...</changelog>
  <changelog author="sndirsch@suse.com" date="1760616000">- renamed check to %name-check package</changelog>
</package>
<package pkgid="6c9770ce73002222eb0ead51127215fcf187e52174651fc9d3423f16081a764f" name="nvidia-open-driver-G06-signed-kmp-default" arch="x86_64">
  <version epoch="0" ver="570.153.02_k6.4.0_150700.51" rel="150700.3.3.1"/>
  <changelog author="sndirsch@suse.com" date="1736856000">- Update to 550.144.03 (bsc#1235461, boo#1235871)
  * fixes CVE-2024-0131, CVE-2024-0147, CVE-2024-0149,
    CVE-2024-0150, CVE-2024-53869</changelog>
  <changelog author="sndirsch@suse.com" date="1737547200">- preamble: let -cuda KMP conflict with no-cuda variants &lt; 550.135
  (bsc#1236191)</changelog>
  <changelog author="sndirsch@suse.com" date="1737979200">- Update to 565.77
- non-CUDA variant:
  * get rid of modproee.d and dracut.cd files and udev magic;
    instead require nvidia-common-G06
  * Supplements: switch to really supported devices; not only the
    initially supported ones without graphical output
- update non-CUDA and CUDA variant to 570.86.15</changelog>
  <changelog author="sndirsch@suse.com" date="1738065600">- update non-CUDA variant to 570.86.16 (boo#1236658)
- supersedes aarch64-TW-buildfix.patch
- supersedes set-FOP_UNSIGNED_OFFSET-for-nv_drm_fops.fop_flags.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1738584000">- fixed version of 'Provides: nvidia-open-signed-kmp = &lt;version&gt;'
  of nvidia-open-signed-cuda-kmp in preamble file
- fixed
  warning: File listed twice: /usr/src/kernel-modules/nvidia-570.86.16-default</changelog>
  <changelog author="sndirsch@suse.com" date="1738584001">- no longer try to patch %post/%postun; no changes needed any longer
- trigger script needs to be triggered now by nvidia-common-G06,
  which replaced kernel-firmware-nvidia-gspx-G06{,-cuda} packages</changelog>
  <changelog author="sndirsch@suse.com" date="1738584002">- fixed build against openSUSE:Factory by defining %_builddir
  if needed (boo#1236746)</changelog>
  <changelog author="eich@suse.com" date="1738670400">- Add a directory identifying the KMP and its version to the module
  install path - i.e.:
  &lt;kernel_version&gt;/nvidia-open-driver-G06-signed-&lt;version&gt;/updates
  instead of:
  &lt;kernel_version&gt;/updates
  This avoids conflicts when a new version is built against the
  same kernel release.</changelog>
  <changelog author="eich@suse.com" date="1739880000">- In the module install path revert the order of the 'updates'
  subdirectory and the package name &amp; version. This satisfies
  the kmp dependency checker (boo#1237308).</changelog>
  <changelog author="rfrohl@suse.com" date="1740312000">- explicitly enable KMP for kernel-longterm: this will be needed
  for the transition period, until all KMPs are enabled</changelog>
  <changelog author="sndirsch@suse.com" date="1740398400">- update non-CUDA variant to 570.124.02 (boo#1237585)</changelog>
  <changelog author="sndirsch@suse.com" date="1740484800">- update non-CUDA variant to 570.124.04 (boo#1237585)</changelog>
  <changelog author="sndirsch@suse.com" date="1741089600">- update CUDA variant to 570.124.06</changelog>
  <changelog author="sndirsch@suse.com" date="1741435200">- removed obsolete kernel-firmware-nvidia-gspx-G06-cuda; firmware
  has moved to nvidia-common-G06 and
  kernel-firmware-nvidia-gspx-G06 is no longer available either
  (boo#1239139)</changelog>
  <changelog author="sndirsch@suse.com" date="1742040000">- update non-CUDA variant to 570.133.07 (bsc#1239653)</changelog>
  <changelog author="sndirsch@suse.com" date="1743422400">- limit build of -azure flavor to SP6</changelog>
  <changelog author="sndirsch@suse.com" date="1744718400">- update non-CUDA variant to 570.144 (boo#1241231)</changelog>
  <changelog author="sndirsch@suse.com" date="1744977600">- update CUDA variant to 570.133.20</changelog>
  <changelog author="sndirsch@suse.com" date="1746187200">- disabled unsupported -rt flavor (bsc#1242054)</changelog>
  <changelog author="sndirsch@suse.com" date="1747224000">- update non-CUDA variant to 570.153.02 (boo#1243192)</changelog>
</package>
<package pkgid="084d227effbfe49d8a9ade5e1d6edb254fbdd2a9877e1955bf187696e8856bb3" name="nvidia-open-driver-G06-signed-kmp-default" arch="x86_64">
  <version epoch="0" ver="570.169_k6.4.0_150700.51" rel="150700.3.8.2"/>
  <changelog author="sndirsch@suse.com" date="1738584000">- fixed version of 'Provides: nvidia-open-signed-kmp = &lt;version&gt;'
  of nvidia-open-signed-cuda-kmp in preamble file
- fixed
  warning: File listed twice: /usr/src/kernel-modules/nvidia-570.86.16-default</changelog>
  <changelog author="sndirsch@suse.com" date="1738584001">- no longer try to patch %post/%postun; no changes needed any longer
- trigger script needs to be triggered now by nvidia-common-G06,
  which replaced kernel-firmware-nvidia-gspx-G06{,-cuda} packages</changelog>
  <changelog author="sndirsch@suse.com" date="1738584002">- fixed build against openSUSE:Factory by defining %_builddir
  if needed (boo#1236746)</changelog>
  <changelog author="eich@suse.com" date="1738670400">- Add a directory identifying the KMP and its version to the module
  install path - i.e.:
  &lt;kernel_version&gt;/nvidia-open-driver-G06-signed-&lt;version&gt;/updates
  instead of:
  &lt;kernel_version&gt;/updates
  This avoids conflicts when a new version is built against the
  same kernel release.</changelog>
  <changelog author="eich@suse.com" date="1739880000">- In the module install path revert the order of the 'updates'
  subdirectory and the package name &amp; version. This satisfies
  the kmp dependency checker (boo#1237308).</changelog>
  <changelog author="rfrohl@suse.com" date="1740312000">- explicitly enable KMP for kernel-longterm: this will be needed
  for the transition period, until all KMPs are enabled</changelog>
  <changelog author="sndirsch@suse.com" date="1740398400">- update non-CUDA variant to 570.124.02 (boo#1237585)</changelog>
  <changelog author="sndirsch@suse.com" date="1740484800">- update non-CUDA variant to 570.124.04 (boo#1237585)</changelog>
  <changelog author="sndirsch@suse.com" date="1741089600">- update CUDA variant to 570.124.06</changelog>
  <changelog author="sndirsch@suse.com" date="1741435200">- removed obsolete kernel-firmware-nvidia-gspx-G06-cuda; firmware
  has moved to nvidia-common-G06 and
  kernel-firmware-nvidia-gspx-G06 is no longer available either
  (boo#1239139)</changelog>
  <changelog author="sndirsch@suse.com" date="1742040000">- update non-CUDA variant to 570.133.07 (bsc#1239653)</changelog>
  <changelog author="sndirsch@suse.com" date="1743422400">- limit build of -azure flavor to SP6</changelog>
  <changelog author="sndirsch@suse.com" date="1744718400">- update non-CUDA variant to 570.144 (boo#1241231)</changelog>
  <changelog author="sndirsch@suse.com" date="1744977600">- update CUDA variant to 570.133.20</changelog>
  <changelog author="sndirsch@suse.com" date="1746187200">- disabled unsupported -rt flavor (bsc#1242054)</changelog>
  <changelog author="sndirsch@suse.com" date="1747224000">- update non-CUDA variant to 570.153.02 (boo#1243192)</changelog>
  <changelog author="sndirsch@suse.com" date="1749211200">- update CUDA variant to 575.57.08
- supersedes persistent-nvidia-id-string.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1749470400">- Drop persistent-nvidia-id-string.patch - solved via make params instead</changelog>
  <changelog author="sndirsch@suse.com" date="1749643200">- 60-nvidia-$flavor.conf
  * Don't try to load the driver if config and GSP firmware files are
    not available. Otherwise let the default install rule
    'install nvidia-drm /sbin/modprobe --ignore-install nvidia-drm' of
    50-nvidia.conf win, which comes together with config and GSP
    firmware files (package nvidia-common-G06).</changelog>
  <changelog author="sndirsch@suse.com" date="1749988800">- update non-CUDA variant to 570.169 (boo#1244614)</changelog>
</package>
<package pkgid="31b052fde7a8211d007d6155259a947e3b917feac97d90187e76ca42d244e15e" name="nvidia-open-driver-G06-signed-kmp-default" arch="x86_64">
  <version epoch="0" ver="570.172.08_k6.4.0_150700.51" rel="150700.3.14.2"/>
  <changelog author="eich@suse.com" date="1738670400">- Add a directory identifying the KMP and its version to the module
  install path - i.e.:
  &lt;kernel_version&gt;/nvidia-open-driver-G06-signed-&lt;version&gt;/updates
  instead of:
  &lt;kernel_version&gt;/updates
  This avoids conflicts when a new version is built against the
  same kernel release.</changelog>
  <changelog author="eich@suse.com" date="1739880000">- In the module install path revert the order of the 'updates'
  subdirectory and the package name &amp; version. This satisfies
  the kmp dependency checker (boo#1237308).</changelog>
  <changelog author="rfrohl@suse.com" date="1740312000">- explicitly enable KMP for kernel-longterm: this will be needed
  for the transition period, until all KMPs are enabled</changelog>
  <changelog author="sndirsch@suse.com" date="1740398400">- update non-CUDA variant to 570.124.02 (boo#1237585)</changelog>
  <changelog author="sndirsch@suse.com" date="1740484800">- update non-CUDA variant to 570.124.04 (boo#1237585)</changelog>
  <changelog author="sndirsch@suse.com" date="1741089600">- update CUDA variant to 570.124.06</changelog>
  <changelog author="sndirsch@suse.com" date="1741435200">- removed obsolete kernel-firmware-nvidia-gspx-G06-cuda; firmware
  has moved to nvidia-common-G06 and
  kernel-firmware-nvidia-gspx-G06 is no longer available either
  (boo#1239139)</changelog>
  <changelog author="sndirsch@suse.com" date="1742040000">- update non-CUDA variant to 570.133.07 (bsc#1239653)</changelog>
  <changelog author="sndirsch@suse.com" date="1743422400">- limit build of -azure flavor to SP6</changelog>
  <changelog author="sndirsch@suse.com" date="1744718400">- update non-CUDA variant to 570.144 (boo#1241231)</changelog>
  <changelog author="sndirsch@suse.com" date="1744977600">- update CUDA variant to 570.133.20</changelog>
  <changelog author="sndirsch@suse.com" date="1746187200">- disabled unsupported -rt flavor (bsc#1242054)</changelog>
  <changelog author="sndirsch@suse.com" date="1747224000">- update non-CUDA variant to 570.153.02 (boo#1243192)</changelog>
  <changelog author="sndirsch@suse.com" date="1749211200">- update CUDA variant to 575.57.08
- supersedes persistent-nvidia-id-string.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1749470400">- Drop persistent-nvidia-id-string.patch - solved via make params instead</changelog>
  <changelog author="sndirsch@suse.com" date="1749643200">- 60-nvidia-$flavor.conf
  * Don't try to load the driver if config and GSP firmware files are
    not available. Otherwise let the default install rule
    'install nvidia-drm /sbin/modprobe --ignore-install nvidia-drm' of
    50-nvidia.conf win, which comes together with config and GSP
    firmware files (package nvidia-common-G06).</changelog>
  <changelog author="sndirsch@suse.com" date="1749988800">- update non-CUDA variant to 570.169 (boo#1244614)</changelog>
  <changelog author="sndirsch@suse.com" date="1750766400">- 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
  * buildfixes against Kernel 6.16 picked up from
    https://github.com/CachyOS/CachyOS-PKGBUILDS.git
  - -&gt; nvidia/nvidia-utils</changelog>
  <changelog author="sndirsch@suse.com" date="1751889600">- empty pci_ids-570.169; PCI ID hardware Supplements get moved to
  gfx repository to package nvidia-open-driver-G06-signed-kmp-meta
  (boo#1246010)
- remove 60-nvidia-$flavor.conf, since driver no longer gets
  autoselected without gfx/cuda repositories present and so we no
  longer need to disable it by default (boo#1246010)</changelog>
  <changelog author="sndirsch@suse.com" date="1752235200">- update non-CUDA variant to 570.172.08 (boo#1246327)
- supersedes
  * 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  * 0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
- update pci_ids-supported</changelog>
</package>
<package pkgid="86671b42fb105fcac6c2eb0c685960c0504e14ed732574d624ac2c8246916543" name="nvidia-open-driver-G06-signed-kmp-default" arch="x86_64">
  <version epoch="0" ver="580.105.08_k6.4.0_150700.53.22" rel="150700.3.34.2"/>
  <changelog author="sndirsch@suse.com" date="1753704000">- update CUDA variant to 580.65.06, which addresses various security
  issues:
  * CVE-2025-23277 (bsc#1247528)
  * CVE-2025-23278 (bsc#1247529)
  * CVE-2025-23286 (bsc#1247530)
  * CVE-2025-23283 (bsc#1247531)
  * CVE-2025-23279 (bsc#1247532)</changelog>
  <changelog author="sndirsch@suse.com" date="1754395200">- added Requires
  * nvidia-modprobe &gt;= %version
  * nvidia-persitenced &gt;= %version
  * nvidia-modprobe-cuda-lt-sp6
  * nvidia-persitenced-cuda-lt-sp6
  to be provided by special versions of nvidia-modprobe and
  nvidia-persitenced built against SP4 (bsc#1237208, jsc#PED-13295)</changelog>
  <changelog author="sndirsch@suse.com" date="1754740800">- make sure these Requires right below are not added on Tumbleweed</changelog>
  <changelog author="sndirsch@suse.com" date="1754913600">- update non-CUDA variant to 580.76.05 (boo#1247907)
- get rid of rule of older KMPs not to load nvidia_drm module,
  which are still installed in parallel and therefore still
  active (boo#1247923)</changelog>
  <changelog author="sndirsch@suse.com" date="1755172800">- make sure Requires to nvidia packages are not added for SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1757160000">- update CUDA variant to 580.82.07</changelog>
  <changelog author="sndirsch@suse.com" date="1757246400">- update non-CUDA variant to 580.82.07 (boo#1249235)</changelog>
  <changelog author="sndirsch@suse.com" date="1757332800">- let conflict CUDA and non-CUDA -devel packages; this is needed
  if both have the same version</changelog>
  <changelog author="sndirsch@suse.com" date="1758110400">- pesign-spec-macros: added definition for %__kernel_supplements,
  which replaced %__kmp_supplements with latest RPM used on TW now,
  in order to fix PCI HW Supplements for TW (boo#1249814)</changelog>
  <changelog author="sndirsch@suse.com" date="1758628800">- get rid of multiversion for the KMPs, since it only brought/brings
  us trouble and no benefit at all (jsc#PED-12049)
  * remove any ^Conflicts and ^Provides: multiversion from
    /usr/lib/rpm/kernel-module-subpackage
  * set INSTALL_MOD_DIR back to %{kernel_module_package_moddir}, i.e.
    updates/ subdir</changelog>
  <changelog author="sndirsch@suse.com" date="1758801600">- update to version 580.95.05 (boo#1250536)</changelog>
  <changelog author="sndirsch@suse.com" date="1759320000">- fixed 'osc service run download_files'</changelog>
  <changelog author="sndirsch@suse.com" date="1759752000">- update CUDA variant to 580.95.05</changelog>
  <changelog author="sndirsch@suse.com" date="1759924800">- Check4WrongSupplements.sh
  * check for wrong Supplements in generated KMPs after build by
    misusing %post of a dummy "check" subpackage</changelog>
  <changelog author="sndirsch@suse.com" date="1760443200">- changed Requires to
  * nvidia-modprobe = %version
  * nvidia-persitenced = %version
  it has been &gt;= before ...</changelog>
  <changelog author="sndirsch@suse.com" date="1760616000">- renamed check to %name-check package</changelog>
  <changelog author="sndirsch@suse.com" date="1761998400">- update non-CUDA variant to version 580.105.08 (boo#1252978)</changelog>
  <changelog author="sndirsch@suse.com" date="1762257600">- back to 580.95.05 on aarch64, since userspace drivers have not
  been updated for this platform</changelog>
  <changelog author="sndirsch@suse.com" date="1763035200">- update CUDA variant to 580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1763035201">- introduced extra %gfx_aarch64_version and appropriate
  tarball/pci_id file in the hope that build service will no
  longer complain</changelog>
</package>
<package pkgid="3e69f3a5a847a8fdcb7fed531c15b1ee3bf2e1446aab34bb9a1c5cd89a0e99e2" name="nvidia-open-driver-G06-signed-kmp-default" arch="x86_64">
  <version epoch="0" ver="580.119.02_k6.4.0_150700.53.22" rel="150700.3.37.1"/>
  <changelog author="sndirsch@suse.com" date="1754913600">- update non-CUDA variant to 580.76.05 (boo#1247907)
- get rid of rule of older KMPs not to load nvidia_drm module,
  which are still installed in parallel and therefore still
  active (boo#1247923)</changelog>
  <changelog author="sndirsch@suse.com" date="1755172800">- make sure Requires to nvidia packages are not added for SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1757160000">- update CUDA variant to 580.82.07</changelog>
  <changelog author="sndirsch@suse.com" date="1757246400">- update non-CUDA variant to 580.82.07 (boo#1249235)</changelog>
  <changelog author="sndirsch@suse.com" date="1757332800">- let conflict CUDA and non-CUDA -devel packages; this is needed
  if both have the same version</changelog>
  <changelog author="sndirsch@suse.com" date="1758110400">- pesign-spec-macros: added definition for %__kernel_supplements,
  which replaced %__kmp_supplements with latest RPM used on TW now,
  in order to fix PCI HW Supplements for TW (boo#1249814)</changelog>
  <changelog author="sndirsch@suse.com" date="1758628800">- get rid of multiversion for the KMPs, since it only brought/brings
  us trouble and no benefit at all (jsc#PED-12049)
  * remove any ^Conflicts and ^Provides: multiversion from
    /usr/lib/rpm/kernel-module-subpackage
  * set INSTALL_MOD_DIR back to %{kernel_module_package_moddir}, i.e.
    updates/ subdir</changelog>
  <changelog author="sndirsch@suse.com" date="1758801600">- update to version 580.95.05 (boo#1250536)</changelog>
  <changelog author="sndirsch@suse.com" date="1759320000">- fixed 'osc service run download_files'</changelog>
  <changelog author="sndirsch@suse.com" date="1759752000">- update CUDA variant to 580.95.05</changelog>
  <changelog author="sndirsch@suse.com" date="1759924800">- Check4WrongSupplements.sh
  * check for wrong Supplements in generated KMPs after build by
    misusing %post of a dummy "check" subpackage</changelog>
  <changelog author="sndirsch@suse.com" date="1760443200">- changed Requires to
  * nvidia-modprobe = %version
  * nvidia-persitenced = %version
  it has been &gt;= before ...</changelog>
  <changelog author="sndirsch@suse.com" date="1760616000">- renamed check to %name-check package</changelog>
  <changelog author="sndirsch@suse.com" date="1761998400">- update non-CUDA variant to version 580.105.08 (boo#1252978)</changelog>
  <changelog author="sndirsch@suse.com" date="1762257600">- back to 580.95.05 on aarch64, since userspace drivers have not
  been updated for this platform</changelog>
  <changelog author="sndirsch@suse.com" date="1763035200">- update CUDA variant to 580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1763035201">- introduced extra %gfx_aarch64_version and appropriate
  tarball/pci_id file in the hope that build service will no
  longer complain</changelog>
  <changelog author="sndirsch@suse.com" date="1764763200">- kernel-6.18.patch
  * fixed build against kernel 6.18</changelog>
  <changelog author="sndirsch@suse.com" date="1765454400">- update non-CUDA variant to version 580.119.02 (boo#1254801)</changelog>
  <changelog author="sndirsch@suse.com" date="1765454401">- readded kernel-6.18.patch still needed for cuda driver version
  580.105.08</changelog>
</package>
<package pkgid="91e6c8fdb539dd83603f80793279fe6fb7f1688e693d2263711dacb6711f8343" name="nvidia-open-driver-G06-signed-kmp-default" arch="x86_64">
  <version epoch="0" ver="580.126.09_k6.4.0_150700.53.25" rel="150700.3.40.1"/>
  <changelog author="sndirsch@suse.com" date="1757160000">- update CUDA variant to 580.82.07</changelog>
  <changelog author="sndirsch@suse.com" date="1757246400">- update non-CUDA variant to 580.82.07 (boo#1249235)</changelog>
  <changelog author="sndirsch@suse.com" date="1757332800">- let conflict CUDA and non-CUDA -devel packages; this is needed
  if both have the same version</changelog>
  <changelog author="sndirsch@suse.com" date="1758110400">- pesign-spec-macros: added definition for %__kernel_supplements,
  which replaced %__kmp_supplements with latest RPM used on TW now,
  in order to fix PCI HW Supplements for TW (boo#1249814)</changelog>
  <changelog author="sndirsch@suse.com" date="1758628800">- get rid of multiversion for the KMPs, since it only brought/brings
  us trouble and no benefit at all (jsc#PED-12049)
  * remove any ^Conflicts and ^Provides: multiversion from
    /usr/lib/rpm/kernel-module-subpackage
  * set INSTALL_MOD_DIR back to %{kernel_module_package_moddir}, i.e.
    updates/ subdir</changelog>
  <changelog author="sndirsch@suse.com" date="1758801600">- update to version 580.95.05 (boo#1250536)</changelog>
  <changelog author="sndirsch@suse.com" date="1759320000">- fixed 'osc service run download_files'</changelog>
  <changelog author="sndirsch@suse.com" date="1759752000">- update CUDA variant to 580.95.05</changelog>
  <changelog author="sndirsch@suse.com" date="1759924800">- Check4WrongSupplements.sh
  * check for wrong Supplements in generated KMPs after build by
    misusing %post of a dummy "check" subpackage</changelog>
  <changelog author="sndirsch@suse.com" date="1760443200">- changed Requires to
  * nvidia-modprobe = %version
  * nvidia-persitenced = %version
  it has been &gt;= before ...</changelog>
  <changelog author="sndirsch@suse.com" date="1760616000">- renamed check to %name-check package</changelog>
  <changelog author="sndirsch@suse.com" date="1761998400">- update non-CUDA variant to version 580.105.08 (boo#1252978)</changelog>
  <changelog author="sndirsch@suse.com" date="1762257600">- back to 580.95.05 on aarch64, since userspace drivers have not
  been updated for this platform</changelog>
  <changelog author="sndirsch@suse.com" date="1763035200">- update CUDA variant to 580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1763035201">- introduced extra %gfx_aarch64_version and appropriate
  tarball/pci_id file in the hope that build service will no
  longer complain</changelog>
  <changelog author="sndirsch@suse.com" date="1764763200">- kernel-6.18.patch
  * fixed build against kernel 6.18</changelog>
  <changelog author="sndirsch@suse.com" date="1765454400">- update non-CUDA variant to version 580.119.02 (boo#1254801)</changelog>
  <changelog author="sndirsch@suse.com" date="1765454401">- readded kernel-6.18.patch still needed for cuda driver version
  580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1767441600">- update non-CUDA variant to version 580.126.09 (boo#1255858)</changelog>
  <changelog author="sndirsch@suse.com" date="1768305600">- kernel-5.14.patch
  * fixes build for sle15-sp4</changelog>
</package>
<package pkgid="dae197e26bd202b988ac2420ea98f9eaf5ee4c08359a2154100e5b2ed21a3efe" name="nvidia-open-driver-G06-signed-kmp-default" arch="x86_64">
  <version epoch="0" ver="580.126.18_k6.4.0_150700.53.31" rel="150700.3.45.1"/>
  <changelog author="sndirsch@suse.com" date="1758801600">- update to version 580.95.05 (boo#1250536)</changelog>
  <changelog author="sndirsch@suse.com" date="1759320000">- fixed 'osc service run download_files'</changelog>
  <changelog author="sndirsch@suse.com" date="1759752000">- update CUDA variant to 580.95.05</changelog>
  <changelog author="sndirsch@suse.com" date="1759924800">- Check4WrongSupplements.sh
  * check for wrong Supplements in generated KMPs after build by
    misusing %post of a dummy "check" subpackage</changelog>
  <changelog author="sndirsch@suse.com" date="1760443200">- changed Requires to
  * nvidia-modprobe = %version
  * nvidia-persitenced = %version
  it has been &gt;= before ...</changelog>
  <changelog author="sndirsch@suse.com" date="1760616000">- renamed check to %name-check package</changelog>
  <changelog author="sndirsch@suse.com" date="1761998400">- update non-CUDA variant to version 580.105.08 (boo#1252978)</changelog>
  <changelog author="sndirsch@suse.com" date="1762257600">- back to 580.95.05 on aarch64, since userspace drivers have not
  been updated for this platform</changelog>
  <changelog author="sndirsch@suse.com" date="1763035200">- update CUDA variant to 580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1763035201">- introduced extra %gfx_aarch64_version and appropriate
  tarball/pci_id file in the hope that build service will no
  longer complain</changelog>
  <changelog author="sndirsch@suse.com" date="1764763200">- kernel-6.18.patch
  * fixed build against kernel 6.18</changelog>
  <changelog author="sndirsch@suse.com" date="1765454400">- update non-CUDA variant to version 580.119.02 (boo#1254801)</changelog>
  <changelog author="sndirsch@suse.com" date="1765454401">- readded kernel-6.18.patch still needed for cuda driver version
  580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1767441600">- update non-CUDA variant to version 580.126.09 (boo#1255858)</changelog>
  <changelog author="sndirsch@suse.com" date="1768305600">- kernel-5.14.patch
  * fixes build for sle15-sp4</changelog>
  <changelog author="sndirsch@suse.com" date="1768910400">- updated CUDA variant to version 580.126.09
- supersedes kernel-6.18.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1769688000">- apply kernel-5.14.patch also on sle15-sp5 in order to fix build
  and adjusted it to sle15-sp5 kernel</changelog>
  <changelog author="sndirsch@suse.com" date="1770724800">- kernel-6.19.patch: fixes build against kernel 6.19</changelog>
  <changelog author="sndirsch@suse.com" date="1770897600">- update non-CUDA variant to version 580.126.18 (boo#1258154)
- updated CUDA variant to version 580.126.16</changelog>
  <changelog author="sndirsch@suse.com" date="1772107200">- updated CUDA variant to version 580.126.20
- supersedes kernel-6.19.patch</changelog>
</package>
<package pkgid="eaaedc278fca6f38d1b8ca7bc8a38a564c8b787594c975e7dcb3d2be158d4d6b" name="nvidia-open-driver-G06-signed-kmp-default" arch="x86_64">
  <version epoch="0" ver="580.159.03_k6.4.0_150700.53.40" rel="150700.3.48.1"/>
  <changelog author="sndirsch@suse.com" date="1763035200">- update CUDA variant to 580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1763035201">- introduced extra %gfx_aarch64_version and appropriate
  tarball/pci_id file in the hope that build service will no
  longer complain</changelog>
  <changelog author="sndirsch@suse.com" date="1764763200">- kernel-6.18.patch
  * fixed build against kernel 6.18</changelog>
  <changelog author="sndirsch@suse.com" date="1765454400">- update non-CUDA variant to version 580.119.02 (boo#1254801)</changelog>
  <changelog author="sndirsch@suse.com" date="1765454401">- readded kernel-6.18.patch still needed for cuda driver version
  580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1767441600">- update non-CUDA variant to version 580.126.09 (boo#1255858)</changelog>
  <changelog author="sndirsch@suse.com" date="1768305600">- kernel-5.14.patch
  * fixes build for sle15-sp4</changelog>
  <changelog author="sndirsch@suse.com" date="1768910400">- updated CUDA variant to version 580.126.09
- supersedes kernel-6.18.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1769688000">- apply kernel-5.14.patch also on sle15-sp5 in order to fix build
  and adjusted it to sle15-sp5 kernel</changelog>
  <changelog author="sndirsch@suse.com" date="1770724800">- kernel-6.19.patch: fixes build against kernel 6.19</changelog>
  <changelog author="sndirsch@suse.com" date="1770897600">- update non-CUDA variant to version 580.126.18 (boo#1258154)
- updated CUDA variant to version 580.126.16</changelog>
  <changelog author="sndirsch@suse.com" date="1772107200">- updated CUDA variant to version 580.126.20
- supersedes kernel-6.19.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1772712000">- adjusted logic for %suse_version bump with SLE16.1 Beta2 (jsc#PED-15826)</changelog>
  <changelog author="sndirsch@suse.com" date="1773662400">- add 'Provides: open-driver-non-cuda-variant = %version' for
  non-CUDA variant to be able to distinguish between both variants;
  to be used by nvidia-open-driver-G06-signed-kmp-meta for TW ...
  (boo#1259740)</changelog>
  <changelog author="sndirsch@suse.com" date="1773835200">- do not set ExclusiveArch in order to fix RPM description for -cuda
  variant (bsc#1259719)
- improved RPM description for -cuda and non-cuda variant</changelog>
  <changelog author="sndirsch@suse.com" date="1774440000">- adding 'ExcludeArch:    %ix86 s390x ppc64le' to no longer get
  autoclines by buildservice hoping that this wont't break RPM
  descriptions for -cuda variant again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1776945600">- disable-objtool-override.patch
  * get rid of confusing objtool warnings (boo#1212841)
  - -&gt; from https://github.com/joanbm/nvidia-470xx-linux-mainline</changelog>
  <changelog author="sndirsch@suse.com" date="1777032000">- update non-CUDA variant to 580.159.03 (boo#1262749)</changelog>
  <changelog author="sndirsch@suse.com" date="1777377600">- update CUDA variant to 580.159.03</changelog>
  <changelog author="sndirsch@suse.com" date="1777809600">- fix-objtool-warnings.patch (not applied on aarch64)
  * Get rid of "'naked' return found in MITIGATION_RETHUNK build"
    objtool warnings (boo#1212841, boo#1263834)
- remove again disable-objtool-override.patch</changelog>
</package>
<package pkgid="f2633dfc9787719993b4fdc199a4109250b23be3f4d65d6ede10d4a9c2b72544" name="nvidia-open-driver-G06-signed-kmp-default" arch="x86_64">
  <version epoch="0" ver="580.82.07_k6.4.0_150700.53.11" rel="150700.3.21.1"/>
  <changelog author="sndirsch@suse.com" date="1743422400">- limit build of -azure flavor to SP6</changelog>
  <changelog author="sndirsch@suse.com" date="1744718400">- update non-CUDA variant to 570.144 (boo#1241231)</changelog>
  <changelog author="sndirsch@suse.com" date="1744977600">- update CUDA variant to 570.133.20</changelog>
  <changelog author="sndirsch@suse.com" date="1746187200">- disabled unsupported -rt flavor (bsc#1242054)</changelog>
  <changelog author="sndirsch@suse.com" date="1747224000">- update non-CUDA variant to 570.153.02 (boo#1243192)</changelog>
  <changelog author="sndirsch@suse.com" date="1749211200">- update CUDA variant to 575.57.08
- supersedes persistent-nvidia-id-string.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1749470400">- Drop persistent-nvidia-id-string.patch - solved via make params instead</changelog>
  <changelog author="sndirsch@suse.com" date="1749643200">- 60-nvidia-$flavor.conf
  * Don't try to load the driver if config and GSP firmware files are
    not available. Otherwise let the default install rule
    'install nvidia-drm /sbin/modprobe --ignore-install nvidia-drm' of
    50-nvidia.conf win, which comes together with config and GSP
    firmware files (package nvidia-common-G06).</changelog>
  <changelog author="sndirsch@suse.com" date="1749988800">- update non-CUDA variant to 570.169 (boo#1244614)</changelog>
  <changelog author="sndirsch@suse.com" date="1750766400">- 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
  * buildfixes against Kernel 6.16 picked up from
    https://github.com/CachyOS/CachyOS-PKGBUILDS.git
  - -&gt; nvidia/nvidia-utils</changelog>
  <changelog author="sndirsch@suse.com" date="1751889600">- empty pci_ids-570.169; PCI ID hardware Supplements get moved to
  gfx repository to package nvidia-open-driver-G06-signed-kmp-meta
  (boo#1246010)
- remove 60-nvidia-$flavor.conf, since driver no longer gets
  autoselected without gfx/cuda repositories present and so we no
  longer need to disable it by default (boo#1246010)</changelog>
  <changelog author="sndirsch@suse.com" date="1752235200">- update non-CUDA variant to 570.172.08 (boo#1246327)
- supersedes
  * 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  * 0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
- update pci_ids-supported</changelog>
  <changelog author="sndirsch@suse.com" date="1753704000">- update CUDA variant to 580.65.06, which addresses various security
  issues:
  * CVE-2025-23277 (bsc#1247528)
  * CVE-2025-23278 (bsc#1247529)
  * CVE-2025-23286 (bsc#1247530)
  * CVE-2025-23283 (bsc#1247531)
  * CVE-2025-23279 (bsc#1247532)</changelog>
  <changelog author="sndirsch@suse.com" date="1754395200">- added Requires
  * nvidia-modprobe &gt;= %version
  * nvidia-persitenced &gt;= %version
  * nvidia-modprobe-cuda-lt-sp6
  * nvidia-persitenced-cuda-lt-sp6
  to be provided by special versions of nvidia-modprobe and
  nvidia-persitenced built against SP4 (bsc#1237208, jsc#PED-13295)</changelog>
  <changelog author="sndirsch@suse.com" date="1754740800">- make sure these Requires right below are not added on Tumbleweed</changelog>
  <changelog author="sndirsch@suse.com" date="1754913600">- update non-CUDA variant to 580.76.05 (boo#1247907)
- get rid of rule of older KMPs not to load nvidia_drm module,
  which are still installed in parallel and therefore still
  active (boo#1247923)</changelog>
  <changelog author="sndirsch@suse.com" date="1755172800">- make sure Requires to nvidia packages are not added for SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1757160000">- update CUDA variant to 580.82.07</changelog>
  <changelog author="sndirsch@suse.com" date="1757246400">- update non-CUDA variant to 580.82.07 (boo#1249235)</changelog>
  <changelog author="sndirsch@suse.com" date="1757332800">- let conflict CUDA and non-CUDA -devel packages; this is needed
  if both have the same version</changelog>
</package>
<package pkgid="3b6c149a94d6a7bc9965e5ea0f83a9c23f2f58283fac6d59ad860219e65fc4ec" name="nvidia-open-driver-G06-signed-kmp-default" arch="x86_64">
  <version epoch="0" ver="580.95.05_k6.4.0_150700.53.16" rel="150700.3.24.1"/>
  <changelog author="sndirsch@suse.com" date="1746187200">- disabled unsupported -rt flavor (bsc#1242054)</changelog>
  <changelog author="sndirsch@suse.com" date="1747224000">- update non-CUDA variant to 570.153.02 (boo#1243192)</changelog>
  <changelog author="sndirsch@suse.com" date="1749211200">- update CUDA variant to 575.57.08
- supersedes persistent-nvidia-id-string.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1749470400">- Drop persistent-nvidia-id-string.patch - solved via make params instead</changelog>
  <changelog author="sndirsch@suse.com" date="1749643200">- 60-nvidia-$flavor.conf
  * Don't try to load the driver if config and GSP firmware files are
    not available. Otherwise let the default install rule
    'install nvidia-drm /sbin/modprobe --ignore-install nvidia-drm' of
    50-nvidia.conf win, which comes together with config and GSP
    firmware files (package nvidia-common-G06).</changelog>
  <changelog author="sndirsch@suse.com" date="1749988800">- update non-CUDA variant to 570.169 (boo#1244614)</changelog>
  <changelog author="sndirsch@suse.com" date="1750766400">- 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
  * buildfixes against Kernel 6.16 picked up from
    https://github.com/CachyOS/CachyOS-PKGBUILDS.git
  - -&gt; nvidia/nvidia-utils</changelog>
  <changelog author="sndirsch@suse.com" date="1751889600">- empty pci_ids-570.169; PCI ID hardware Supplements get moved to
  gfx repository to package nvidia-open-driver-G06-signed-kmp-meta
  (boo#1246010)
- remove 60-nvidia-$flavor.conf, since driver no longer gets
  autoselected without gfx/cuda repositories present and so we no
  longer need to disable it by default (boo#1246010)</changelog>
  <changelog author="sndirsch@suse.com" date="1752235200">- update non-CUDA variant to 570.172.08 (boo#1246327)
- supersedes
  * 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  * 0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
- update pci_ids-supported</changelog>
  <changelog author="sndirsch@suse.com" date="1753704000">- update CUDA variant to 580.65.06, which addresses various security
  issues:
  * CVE-2025-23277 (bsc#1247528)
  * CVE-2025-23278 (bsc#1247529)
  * CVE-2025-23286 (bsc#1247530)
  * CVE-2025-23283 (bsc#1247531)
  * CVE-2025-23279 (bsc#1247532)</changelog>
  <changelog author="sndirsch@suse.com" date="1754395200">- added Requires
  * nvidia-modprobe &gt;= %version
  * nvidia-persitenced &gt;= %version
  * nvidia-modprobe-cuda-lt-sp6
  * nvidia-persitenced-cuda-lt-sp6
  to be provided by special versions of nvidia-modprobe and
  nvidia-persitenced built against SP4 (bsc#1237208, jsc#PED-13295)</changelog>
  <changelog author="sndirsch@suse.com" date="1754740800">- make sure these Requires right below are not added on Tumbleweed</changelog>
  <changelog author="sndirsch@suse.com" date="1754913600">- update non-CUDA variant to 580.76.05 (boo#1247907)
- get rid of rule of older KMPs not to load nvidia_drm module,
  which are still installed in parallel and therefore still
  active (boo#1247923)</changelog>
  <changelog author="sndirsch@suse.com" date="1755172800">- make sure Requires to nvidia packages are not added for SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1757160000">- update CUDA variant to 580.82.07</changelog>
  <changelog author="sndirsch@suse.com" date="1757246400">- update non-CUDA variant to 580.82.07 (boo#1249235)</changelog>
  <changelog author="sndirsch@suse.com" date="1757332800">- let conflict CUDA and non-CUDA -devel packages; this is needed
  if both have the same version</changelog>
  <changelog author="sndirsch@suse.com" date="1758110400">- pesign-spec-macros: added definition for %__kernel_supplements,
  which replaced %__kmp_supplements with latest RPM used on TW now,
  in order to fix PCI HW Supplements for TW (boo#1249814)</changelog>
  <changelog author="sndirsch@suse.com" date="1758628800">- get rid of multiversion for the KMPs, since it only brought/brings
  us trouble and no benefit at all (jsc#PED-12049)
  * remove any ^Conflicts and ^Provides: multiversion from
    /usr/lib/rpm/kernel-module-subpackage
  * set INSTALL_MOD_DIR back to %{kernel_module_package_moddir}, i.e.
    updates/ subdir</changelog>
  <changelog author="sndirsch@suse.com" date="1758801600">- update to version 580.95.05 (boo#1250536)</changelog>
</package>
<package pkgid="07a6b557692232915bcacadb3912cc5ff0163b2dfe8d7ebcd8f89424f633b88a" name="nvidia-open-driver-G06-signed-kmp-default" arch="x86_64">
  <version epoch="0" ver="580.95.05_k6.4.0_150700.53.19" rel="150700.3.27.2"/>
  <changelog author="sndirsch@suse.com" date="1749988800">- update non-CUDA variant to 570.169 (boo#1244614)</changelog>
  <changelog author="sndirsch@suse.com" date="1750766400">- 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
  * buildfixes against Kernel 6.16 picked up from
    https://github.com/CachyOS/CachyOS-PKGBUILDS.git
  - -&gt; nvidia/nvidia-utils</changelog>
  <changelog author="sndirsch@suse.com" date="1751889600">- empty pci_ids-570.169; PCI ID hardware Supplements get moved to
  gfx repository to package nvidia-open-driver-G06-signed-kmp-meta
  (boo#1246010)
- remove 60-nvidia-$flavor.conf, since driver no longer gets
  autoselected without gfx/cuda repositories present and so we no
  longer need to disable it by default (boo#1246010)</changelog>
  <changelog author="sndirsch@suse.com" date="1752235200">- update non-CUDA variant to 570.172.08 (boo#1246327)
- supersedes
  * 0003-nv-dmabuf-Inline-dma_buf_attachment_is_dynamic.patch
  * 0004-nvidia-uvm-Disable-SVA-support-for-6.16.patch
- update pci_ids-supported</changelog>
  <changelog author="sndirsch@suse.com" date="1753704000">- update CUDA variant to 580.65.06, which addresses various security
  issues:
  * CVE-2025-23277 (bsc#1247528)
  * CVE-2025-23278 (bsc#1247529)
  * CVE-2025-23286 (bsc#1247530)
  * CVE-2025-23283 (bsc#1247531)
  * CVE-2025-23279 (bsc#1247532)</changelog>
  <changelog author="sndirsch@suse.com" date="1754395200">- added Requires
  * nvidia-modprobe &gt;= %version
  * nvidia-persitenced &gt;= %version
  * nvidia-modprobe-cuda-lt-sp6
  * nvidia-persitenced-cuda-lt-sp6
  to be provided by special versions of nvidia-modprobe and
  nvidia-persitenced built against SP4 (bsc#1237208, jsc#PED-13295)</changelog>
  <changelog author="sndirsch@suse.com" date="1754740800">- make sure these Requires right below are not added on Tumbleweed</changelog>
  <changelog author="sndirsch@suse.com" date="1754913600">- update non-CUDA variant to 580.76.05 (boo#1247907)
- get rid of rule of older KMPs not to load nvidia_drm module,
  which are still installed in parallel and therefore still
  active (boo#1247923)</changelog>
  <changelog author="sndirsch@suse.com" date="1755172800">- make sure Requires to nvidia packages are not added for SLE16</changelog>
  <changelog author="sndirsch@suse.com" date="1757160000">- update CUDA variant to 580.82.07</changelog>
  <changelog author="sndirsch@suse.com" date="1757246400">- update non-CUDA variant to 580.82.07 (boo#1249235)</changelog>
  <changelog author="sndirsch@suse.com" date="1757332800">- let conflict CUDA and non-CUDA -devel packages; this is needed
  if both have the same version</changelog>
  <changelog author="sndirsch@suse.com" date="1758110400">- pesign-spec-macros: added definition for %__kernel_supplements,
  which replaced %__kmp_supplements with latest RPM used on TW now,
  in order to fix PCI HW Supplements for TW (boo#1249814)</changelog>
  <changelog author="sndirsch@suse.com" date="1758628800">- get rid of multiversion for the KMPs, since it only brought/brings
  us trouble and no benefit at all (jsc#PED-12049)
  * remove any ^Conflicts and ^Provides: multiversion from
    /usr/lib/rpm/kernel-module-subpackage
  * set INSTALL_MOD_DIR back to %{kernel_module_package_moddir}, i.e.
    updates/ subdir</changelog>
  <changelog author="sndirsch@suse.com" date="1758801600">- update to version 580.95.05 (boo#1250536)</changelog>
  <changelog author="sndirsch@suse.com" date="1759320000">- fixed 'osc service run download_files'</changelog>
  <changelog author="sndirsch@suse.com" date="1759752000">- update CUDA variant to 580.95.05</changelog>
  <changelog author="sndirsch@suse.com" date="1759924800">- Check4WrongSupplements.sh
  * check for wrong Supplements in generated KMPs after build by
    misusing %post of a dummy "check" subpackage</changelog>
  <changelog author="sndirsch@suse.com" date="1760443200">- changed Requires to
  * nvidia-modprobe = %version
  * nvidia-persitenced = %version
  it has been &gt;= before ...</changelog>
  <changelog author="sndirsch@suse.com" date="1760616000">- renamed check to %name-check package</changelog>
</package>
<package pkgid="948230e71ec62c22116e46cad85a30dc4daebdcf5de02a7cc88db98bbccbaf0c" name="nvidia-open-driver-G07-signed" arch="src">
  <version epoch="0" ver="595.58.03" rel="150700.16.5.1"/>
  <changelog author="sndirsch@suse.com" date="1760616000">- renamed check to %name-check package</changelog>
  <changelog author="sndirsch@suse.com" date="1761998400">- update non-CUDA variant to version 580.105.08 (boo#1252978)</changelog>
  <changelog author="sndirsch@suse.com" date="1762257600">- back to 580.95.05 on aarch64, since userspace drivers have not
  been updated for this platform</changelog>
  <changelog author="sndirsch@suse.com" date="1763035200">- update CUDA variant to 580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1763035201">- introduced extra %gfx_aarch64_version and appropriate
  tarball/pci_id file in the hope that build service will no
  longer complain</changelog>
  <changelog author="sndirsch@suse.com" date="1764763200">- kernel-6.18.patch
  * trying to fix build against kernel 6.18</changelog>
  <changelog author="sndirsch@suse.com" date="1765195200">- update to G07 version 590.44.01</changelog>
  <changelog author="sndirsch@suse.com" date="1765540800">- removed Obsoletes to nvidia-open-driver-G06-signed-kmp, because
  zypper dup apparently handles Obsoletes the same way as Provides,
  which we don't want (at least not now) (boo#1254887)</changelog>
  <changelog author="sndirsch@suse.com" date="1765540801">- preamble: let G07 KMPs conflict with G06 KMPs due to file conflicts</changelog>
  <changelog author="sndirsch@suse.com" date="1765800000">- let G07 packages supplement via packageand(G06) so G06 packages
  get uninstalled if G07 packages get installed</changelog>
  <changelog author="sndirsch@suse.com" date="1766491200">- update to G07 version 590.48.01</changelog>
  <changelog author="sndirsch@suse.com" date="1770724800">- kernel-6.19.patch: fixes build against kernel 6.19</changelog>
  <changelog author="sndirsch@suse.com" date="1771934400">- update non-CUDA version to 595.45.04 (boo#1258797)
- adjusted logic for %suse_version bump with SLE16.1 Beta2 (jsc#PED-15826)</changelog>
  <changelog author="sndirsch@suse.com" date="1772712000">- kernel-5.14.patch: fixed build of 595.45.04 driver on SP4</changelog>
  <changelog author="sndirsch@suse.com" date="1773057600">- update CUDA variant to 595.45.04
- supersedes kernel-6.19.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1773662400">- add 'Provides: open-driver-non-cuda-variant = %version' for
  non-CUDA variant to be able to distinguish between both variants;
  to be used by nvidia-open-driver-G07-signed-kmp-meta for TW ...</changelog>
  <changelog author="sndirsch@suse.com" date="1773835200">- do not set ExclusiveArch in order to fix RPM description for -cuda
  variant (bsc#1259719)
- improved RPM description for -cuda and non-cuda variant</changelog>
  <changelog author="sndirsch@suse.com" date="1774180800">- update non-CUDA version to 595.58.03 (boo#1260044)</changelog>
  <changelog author="sndirsch@suse.com" date="1774353600">- update CUDA variant to 595.58.03</changelog>
  <changelog author="sndirsch@suse.com" date="1774353601">- adding 'ExcludeArch:    %ix86 s390x ppc64le' to no longer get
  autoclines by buildservice hoping that this wont't break RPM
  descriptions for -cuda variant again ...</changelog>
</package>
<package pkgid="987d64e7329fc6fa588395adacf5af39f66c7f2264a06f0f031a75649c6cff98" name="nvidia-open-driver-G07-signed" arch="src">
  <version epoch="0" ver="595.71.05" rel="150700.16.8.1"/>
  <changelog author="sndirsch@suse.com" date="1763035200">- update CUDA variant to 580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1763035201">- introduced extra %gfx_aarch64_version and appropriate
  tarball/pci_id file in the hope that build service will no
  longer complain</changelog>
  <changelog author="sndirsch@suse.com" date="1764763200">- kernel-6.18.patch
  * trying to fix build against kernel 6.18</changelog>
  <changelog author="sndirsch@suse.com" date="1765195200">- update to G07 version 590.44.01</changelog>
  <changelog author="sndirsch@suse.com" date="1765540800">- removed Obsoletes to nvidia-open-driver-G06-signed-kmp, because
  zypper dup apparently handles Obsoletes the same way as Provides,
  which we don't want (at least not now) (boo#1254887)</changelog>
  <changelog author="sndirsch@suse.com" date="1765540801">- preamble: let G07 KMPs conflict with G06 KMPs due to file conflicts</changelog>
  <changelog author="sndirsch@suse.com" date="1765800000">- let G07 packages supplement via packageand(G06) so G06 packages
  get uninstalled if G07 packages get installed</changelog>
  <changelog author="sndirsch@suse.com" date="1766491200">- update to G07 version 590.48.01</changelog>
  <changelog author="sndirsch@suse.com" date="1770724800">- kernel-6.19.patch: fixes build against kernel 6.19</changelog>
  <changelog author="sndirsch@suse.com" date="1771934400">- update non-CUDA version to 595.45.04 (boo#1258797)
- adjusted logic for %suse_version bump with SLE16.1 Beta2 (jsc#PED-15826)</changelog>
  <changelog author="sndirsch@suse.com" date="1772712000">- kernel-5.14.patch: fixed build of 595.45.04 driver on SP4</changelog>
  <changelog author="sndirsch@suse.com" date="1773057600">- update CUDA variant to 595.45.04
- supersedes kernel-6.19.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1773662400">- add 'Provides: open-driver-non-cuda-variant = %version' for
  non-CUDA variant to be able to distinguish between both variants;
  to be used by nvidia-open-driver-G07-signed-kmp-meta for TW ...</changelog>
  <changelog author="sndirsch@suse.com" date="1773835200">- do not set ExclusiveArch in order to fix RPM description for -cuda
  variant (bsc#1259719)
- improved RPM description for -cuda and non-cuda variant</changelog>
  <changelog author="sndirsch@suse.com" date="1774180800">- update non-CUDA version to 595.58.03 (boo#1260044)</changelog>
  <changelog author="sndirsch@suse.com" date="1774353600">- update CUDA variant to 595.58.03</changelog>
  <changelog author="sndirsch@suse.com" date="1774353601">- adding 'ExcludeArch:    %ix86 s390x ppc64le' to no longer get
  autoclines by buildservice hoping that this wont't break RPM
  descriptions for -cuda variant again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1776859200">- update non-CUDA variant to 595.71.05 (boo#1262574)
- disable-objtool-override.patch
  * get rid of confusing objtool warnings (boo#1212841)
  - -&gt; from https://github.com/joanbm/nvidia-470xx-linux-mainline</changelog>
  <changelog author="sndirsch@suse.com" date="1777377600">- update CUDA variant to 595.71.05</changelog>
  <changelog author="sndirsch@suse.com" date="1777809600">- fix-objtool-warnings.patch (not applied on aarch64)
  * Get rid of "'naked' return found in MITIGATION_RETHUNK build"
    objtool warnings (boo#1212841, boo#1263834)
- remove again disable-objtool-override.patch</changelog>
</package>
<package pkgid="e8cc88ccfdd7867352263c234c9f846e061ee390f8aa231bad204370e672f6b9" name="nvidia-open-driver-G07-signed-cuda" arch="src">
  <version epoch="0" ver="595.58.03" rel="150700.16.5.1"/>
  <changelog author="sndirsch@suse.com" date="1760616000">- renamed check to %name-check package</changelog>
  <changelog author="sndirsch@suse.com" date="1761998400">- update non-CUDA variant to version 580.105.08 (boo#1252978)</changelog>
  <changelog author="sndirsch@suse.com" date="1762257600">- back to 580.95.05 on aarch64, since userspace drivers have not
  been updated for this platform</changelog>
  <changelog author="sndirsch@suse.com" date="1763035200">- update CUDA variant to 580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1763035201">- introduced extra %gfx_aarch64_version and appropriate
  tarball/pci_id file in the hope that build service will no
  longer complain</changelog>
  <changelog author="sndirsch@suse.com" date="1764763200">- kernel-6.18.patch
  * trying to fix build against kernel 6.18</changelog>
  <changelog author="sndirsch@suse.com" date="1765195200">- update to G07 version 590.44.01</changelog>
  <changelog author="sndirsch@suse.com" date="1765540800">- removed Obsoletes to nvidia-open-driver-G06-signed-kmp, because
  zypper dup apparently handles Obsoletes the same way as Provides,
  which we don't want (at least not now) (boo#1254887)</changelog>
  <changelog author="sndirsch@suse.com" date="1765540801">- preamble: let G07 KMPs conflict with G06 KMPs due to file conflicts</changelog>
  <changelog author="sndirsch@suse.com" date="1765800000">- let G07 packages supplement via packageand(G06) so G06 packages
  get uninstalled if G07 packages get installed</changelog>
  <changelog author="sndirsch@suse.com" date="1766491200">- update to G07 version 590.48.01</changelog>
  <changelog author="sndirsch@suse.com" date="1770724800">- kernel-6.19.patch: fixes build against kernel 6.19</changelog>
  <changelog author="sndirsch@suse.com" date="1771934400">- update non-CUDA version to 595.45.04 (boo#1258797)
- adjusted logic for %suse_version bump with SLE16.1 Beta2 (jsc#PED-15826)</changelog>
  <changelog author="sndirsch@suse.com" date="1772712000">- kernel-5.14.patch: fixed build of 595.45.04 driver on SP4</changelog>
  <changelog author="sndirsch@suse.com" date="1773057600">- update CUDA variant to 595.45.04
- supersedes kernel-6.19.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1773662400">- add 'Provides: open-driver-non-cuda-variant = %version' for
  non-CUDA variant to be able to distinguish between both variants;
  to be used by nvidia-open-driver-G07-signed-kmp-meta for TW ...</changelog>
  <changelog author="sndirsch@suse.com" date="1773835200">- do not set ExclusiveArch in order to fix RPM description for -cuda
  variant (bsc#1259719)
- improved RPM description for -cuda and non-cuda variant</changelog>
  <changelog author="sndirsch@suse.com" date="1774180800">- update non-CUDA version to 595.58.03 (boo#1260044)</changelog>
  <changelog author="sndirsch@suse.com" date="1774353600">- update CUDA variant to 595.58.03</changelog>
  <changelog author="sndirsch@suse.com" date="1774353601">- adding 'ExcludeArch:    %ix86 s390x ppc64le' to no longer get
  autoclines by buildservice hoping that this wont't break RPM
  descriptions for -cuda variant again ...</changelog>
</package>
<package pkgid="7be501d23789bfb9d25a57f4f8cdc20a4349d59ac2d4d704f549828e62af3b1e" name="nvidia-open-driver-G07-signed-cuda" arch="src">
  <version epoch="0" ver="595.71.05" rel="150700.16.8.1"/>
  <changelog author="sndirsch@suse.com" date="1763035200">- update CUDA variant to 580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1763035201">- introduced extra %gfx_aarch64_version and appropriate
  tarball/pci_id file in the hope that build service will no
  longer complain</changelog>
  <changelog author="sndirsch@suse.com" date="1764763200">- kernel-6.18.patch
  * trying to fix build against kernel 6.18</changelog>
  <changelog author="sndirsch@suse.com" date="1765195200">- update to G07 version 590.44.01</changelog>
  <changelog author="sndirsch@suse.com" date="1765540800">- removed Obsoletes to nvidia-open-driver-G06-signed-kmp, because
  zypper dup apparently handles Obsoletes the same way as Provides,
  which we don't want (at least not now) (boo#1254887)</changelog>
  <changelog author="sndirsch@suse.com" date="1765540801">- preamble: let G07 KMPs conflict with G06 KMPs due to file conflicts</changelog>
  <changelog author="sndirsch@suse.com" date="1765800000">- let G07 packages supplement via packageand(G06) so G06 packages
  get uninstalled if G07 packages get installed</changelog>
  <changelog author="sndirsch@suse.com" date="1766491200">- update to G07 version 590.48.01</changelog>
  <changelog author="sndirsch@suse.com" date="1770724800">- kernel-6.19.patch: fixes build against kernel 6.19</changelog>
  <changelog author="sndirsch@suse.com" date="1771934400">- update non-CUDA version to 595.45.04 (boo#1258797)
- adjusted logic for %suse_version bump with SLE16.1 Beta2 (jsc#PED-15826)</changelog>
  <changelog author="sndirsch@suse.com" date="1772712000">- kernel-5.14.patch: fixed build of 595.45.04 driver on SP4</changelog>
  <changelog author="sndirsch@suse.com" date="1773057600">- update CUDA variant to 595.45.04
- supersedes kernel-6.19.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1773662400">- add 'Provides: open-driver-non-cuda-variant = %version' for
  non-CUDA variant to be able to distinguish between both variants;
  to be used by nvidia-open-driver-G07-signed-kmp-meta for TW ...</changelog>
  <changelog author="sndirsch@suse.com" date="1773835200">- do not set ExclusiveArch in order to fix RPM description for -cuda
  variant (bsc#1259719)
- improved RPM description for -cuda and non-cuda variant</changelog>
  <changelog author="sndirsch@suse.com" date="1774180800">- update non-CUDA version to 595.58.03 (boo#1260044)</changelog>
  <changelog author="sndirsch@suse.com" date="1774353600">- update CUDA variant to 595.58.03</changelog>
  <changelog author="sndirsch@suse.com" date="1774353601">- adding 'ExcludeArch:    %ix86 s390x ppc64le' to no longer get
  autoclines by buildservice hoping that this wont't break RPM
  descriptions for -cuda variant again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1776859200">- update non-CUDA variant to 595.71.05 (boo#1262574)
- disable-objtool-override.patch
  * get rid of confusing objtool warnings (boo#1212841)
  - -&gt; from https://github.com/joanbm/nvidia-470xx-linux-mainline</changelog>
  <changelog author="sndirsch@suse.com" date="1777377600">- update CUDA variant to 595.71.05</changelog>
  <changelog author="sndirsch@suse.com" date="1777809600">- fix-objtool-warnings.patch (not applied on aarch64)
  * Get rid of "'naked' return found in MITIGATION_RETHUNK build"
    objtool warnings (boo#1212841, boo#1263834)
- remove again disable-objtool-override.patch</changelog>
</package>
<package pkgid="ec2e27c87fa5502c017a9b287524d1465092c2362c694b3450ccbc9df2fd33a5" name="nvidia-open-driver-G07-signed-cuda-default-devel" arch="x86_64">
  <version epoch="0" ver="595.58.03" rel="150700.16.5.1"/>
  <changelog author="sndirsch@suse.com" date="1760616000">- renamed check to %name-check package</changelog>
  <changelog author="sndirsch@suse.com" date="1761998400">- update non-CUDA variant to version 580.105.08 (boo#1252978)</changelog>
  <changelog author="sndirsch@suse.com" date="1762257600">- back to 580.95.05 on aarch64, since userspace drivers have not
  been updated for this platform</changelog>
  <changelog author="sndirsch@suse.com" date="1763035200">- update CUDA variant to 580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1763035201">- introduced extra %gfx_aarch64_version and appropriate
  tarball/pci_id file in the hope that build service will no
  longer complain</changelog>
  <changelog author="sndirsch@suse.com" date="1764763200">- kernel-6.18.patch
  * trying to fix build against kernel 6.18</changelog>
  <changelog author="sndirsch@suse.com" date="1765195200">- update to G07 version 590.44.01</changelog>
  <changelog author="sndirsch@suse.com" date="1765540800">- removed Obsoletes to nvidia-open-driver-G06-signed-kmp, because
  zypper dup apparently handles Obsoletes the same way as Provides,
  which we don't want (at least not now) (boo#1254887)</changelog>
  <changelog author="sndirsch@suse.com" date="1765540801">- preamble: let G07 KMPs conflict with G06 KMPs due to file conflicts</changelog>
  <changelog author="sndirsch@suse.com" date="1765800000">- let G07 packages supplement via packageand(G06) so G06 packages
  get uninstalled if G07 packages get installed</changelog>
  <changelog author="sndirsch@suse.com" date="1766491200">- update to G07 version 590.48.01</changelog>
  <changelog author="sndirsch@suse.com" date="1770724800">- kernel-6.19.patch: fixes build against kernel 6.19</changelog>
  <changelog author="sndirsch@suse.com" date="1771934400">- update non-CUDA version to 595.45.04 (boo#1258797)
- adjusted logic for %suse_version bump with SLE16.1 Beta2 (jsc#PED-15826)</changelog>
  <changelog author="sndirsch@suse.com" date="1772712000">- kernel-5.14.patch: fixed build of 595.45.04 driver on SP4</changelog>
  <changelog author="sndirsch@suse.com" date="1773057600">- update CUDA variant to 595.45.04
- supersedes kernel-6.19.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1773662400">- add 'Provides: open-driver-non-cuda-variant = %version' for
  non-CUDA variant to be able to distinguish between both variants;
  to be used by nvidia-open-driver-G07-signed-kmp-meta for TW ...</changelog>
  <changelog author="sndirsch@suse.com" date="1773835200">- do not set ExclusiveArch in order to fix RPM description for -cuda
  variant (bsc#1259719)
- improved RPM description for -cuda and non-cuda variant</changelog>
  <changelog author="sndirsch@suse.com" date="1774180800">- update non-CUDA version to 595.58.03 (boo#1260044)</changelog>
  <changelog author="sndirsch@suse.com" date="1774353600">- update CUDA variant to 595.58.03</changelog>
  <changelog author="sndirsch@suse.com" date="1774353601">- adding 'ExcludeArch:    %ix86 s390x ppc64le' to no longer get
  autoclines by buildservice hoping that this wont't break RPM
  descriptions for -cuda variant again ...</changelog>
</package>
<package pkgid="edf8ca20ed1e3d7d06ea30b26d8d985352706b6d282871bd89ce0cc060ff458a" name="nvidia-open-driver-G07-signed-cuda-default-devel" arch="x86_64">
  <version epoch="0" ver="595.71.05" rel="150700.16.8.1"/>
  <changelog author="sndirsch@suse.com" date="1763035200">- update CUDA variant to 580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1763035201">- introduced extra %gfx_aarch64_version and appropriate
  tarball/pci_id file in the hope that build service will no
  longer complain</changelog>
  <changelog author="sndirsch@suse.com" date="1764763200">- kernel-6.18.patch
  * trying to fix build against kernel 6.18</changelog>
  <changelog author="sndirsch@suse.com" date="1765195200">- update to G07 version 590.44.01</changelog>
  <changelog author="sndirsch@suse.com" date="1765540800">- removed Obsoletes to nvidia-open-driver-G06-signed-kmp, because
  zypper dup apparently handles Obsoletes the same way as Provides,
  which we don't want (at least not now) (boo#1254887)</changelog>
  <changelog author="sndirsch@suse.com" date="1765540801">- preamble: let G07 KMPs conflict with G06 KMPs due to file conflicts</changelog>
  <changelog author="sndirsch@suse.com" date="1765800000">- let G07 packages supplement via packageand(G06) so G06 packages
  get uninstalled if G07 packages get installed</changelog>
  <changelog author="sndirsch@suse.com" date="1766491200">- update to G07 version 590.48.01</changelog>
  <changelog author="sndirsch@suse.com" date="1770724800">- kernel-6.19.patch: fixes build against kernel 6.19</changelog>
  <changelog author="sndirsch@suse.com" date="1771934400">- update non-CUDA version to 595.45.04 (boo#1258797)
- adjusted logic for %suse_version bump with SLE16.1 Beta2 (jsc#PED-15826)</changelog>
  <changelog author="sndirsch@suse.com" date="1772712000">- kernel-5.14.patch: fixed build of 595.45.04 driver on SP4</changelog>
  <changelog author="sndirsch@suse.com" date="1773057600">- update CUDA variant to 595.45.04
- supersedes kernel-6.19.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1773662400">- add 'Provides: open-driver-non-cuda-variant = %version' for
  non-CUDA variant to be able to distinguish between both variants;
  to be used by nvidia-open-driver-G07-signed-kmp-meta for TW ...</changelog>
  <changelog author="sndirsch@suse.com" date="1773835200">- do not set ExclusiveArch in order to fix RPM description for -cuda
  variant (bsc#1259719)
- improved RPM description for -cuda and non-cuda variant</changelog>
  <changelog author="sndirsch@suse.com" date="1774180800">- update non-CUDA version to 595.58.03 (boo#1260044)</changelog>
  <changelog author="sndirsch@suse.com" date="1774353600">- update CUDA variant to 595.58.03</changelog>
  <changelog author="sndirsch@suse.com" date="1774353601">- adding 'ExcludeArch:    %ix86 s390x ppc64le' to no longer get
  autoclines by buildservice hoping that this wont't break RPM
  descriptions for -cuda variant again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1776859200">- update non-CUDA variant to 595.71.05 (boo#1262574)
- disable-objtool-override.patch
  * get rid of confusing objtool warnings (boo#1212841)
  - -&gt; from https://github.com/joanbm/nvidia-470xx-linux-mainline</changelog>
  <changelog author="sndirsch@suse.com" date="1777377600">- update CUDA variant to 595.71.05</changelog>
  <changelog author="sndirsch@suse.com" date="1777809600">- fix-objtool-warnings.patch (not applied on aarch64)
  * Get rid of "'naked' return found in MITIGATION_RETHUNK build"
    objtool warnings (boo#1212841, boo#1263834)
- remove again disable-objtool-override.patch</changelog>
</package>
<package pkgid="adfd3897d7f46192c39c2d8cf3497f82f4467466633487d6ef20cf38910f9e8f" name="nvidia-open-driver-G07-signed-cuda-kmp-default" arch="x86_64">
  <version epoch="0" ver="595.58.03_k6.4.0_150700.53.34" rel="150700.16.5.1"/>
  <changelog author="sndirsch@suse.com" date="1760616000">- renamed check to %name-check package</changelog>
  <changelog author="sndirsch@suse.com" date="1761998400">- update non-CUDA variant to version 580.105.08 (boo#1252978)</changelog>
  <changelog author="sndirsch@suse.com" date="1762257600">- back to 580.95.05 on aarch64, since userspace drivers have not
  been updated for this platform</changelog>
  <changelog author="sndirsch@suse.com" date="1763035200">- update CUDA variant to 580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1763035201">- introduced extra %gfx_aarch64_version and appropriate
  tarball/pci_id file in the hope that build service will no
  longer complain</changelog>
  <changelog author="sndirsch@suse.com" date="1764763200">- kernel-6.18.patch
  * trying to fix build against kernel 6.18</changelog>
  <changelog author="sndirsch@suse.com" date="1765195200">- update to G07 version 590.44.01</changelog>
  <changelog author="sndirsch@suse.com" date="1765540800">- removed Obsoletes to nvidia-open-driver-G06-signed-kmp, because
  zypper dup apparently handles Obsoletes the same way as Provides,
  which we don't want (at least not now) (boo#1254887)</changelog>
  <changelog author="sndirsch@suse.com" date="1765540801">- preamble: let G07 KMPs conflict with G06 KMPs due to file conflicts</changelog>
  <changelog author="sndirsch@suse.com" date="1765800000">- let G07 packages supplement via packageand(G06) so G06 packages
  get uninstalled if G07 packages get installed</changelog>
  <changelog author="sndirsch@suse.com" date="1766491200">- update to G07 version 590.48.01</changelog>
  <changelog author="sndirsch@suse.com" date="1770724800">- kernel-6.19.patch: fixes build against kernel 6.19</changelog>
  <changelog author="sndirsch@suse.com" date="1771934400">- update non-CUDA version to 595.45.04 (boo#1258797)
- adjusted logic for %suse_version bump with SLE16.1 Beta2 (jsc#PED-15826)</changelog>
  <changelog author="sndirsch@suse.com" date="1772712000">- kernel-5.14.patch: fixed build of 595.45.04 driver on SP4</changelog>
  <changelog author="sndirsch@suse.com" date="1773057600">- update CUDA variant to 595.45.04
- supersedes kernel-6.19.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1773662400">- add 'Provides: open-driver-non-cuda-variant = %version' for
  non-CUDA variant to be able to distinguish between both variants;
  to be used by nvidia-open-driver-G07-signed-kmp-meta for TW ...</changelog>
  <changelog author="sndirsch@suse.com" date="1773835200">- do not set ExclusiveArch in order to fix RPM description for -cuda
  variant (bsc#1259719)
- improved RPM description for -cuda and non-cuda variant</changelog>
  <changelog author="sndirsch@suse.com" date="1774180800">- update non-CUDA version to 595.58.03 (boo#1260044)</changelog>
  <changelog author="sndirsch@suse.com" date="1774353600">- update CUDA variant to 595.58.03</changelog>
  <changelog author="sndirsch@suse.com" date="1774353601">- adding 'ExcludeArch:    %ix86 s390x ppc64le' to no longer get
  autoclines by buildservice hoping that this wont't break RPM
  descriptions for -cuda variant again ...</changelog>
</package>
<package pkgid="9c8744b6199d882e03422a3d3ff65149c4ee500604f2aa692ff8987d54e92b8b" name="nvidia-open-driver-G07-signed-cuda-kmp-default" arch="x86_64">
  <version epoch="0" ver="595.71.05_k6.4.0_150700.53.40" rel="150700.16.8.1"/>
  <changelog author="sndirsch@suse.com" date="1763035200">- update CUDA variant to 580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1763035201">- introduced extra %gfx_aarch64_version and appropriate
  tarball/pci_id file in the hope that build service will no
  longer complain</changelog>
  <changelog author="sndirsch@suse.com" date="1764763200">- kernel-6.18.patch
  * trying to fix build against kernel 6.18</changelog>
  <changelog author="sndirsch@suse.com" date="1765195200">- update to G07 version 590.44.01</changelog>
  <changelog author="sndirsch@suse.com" date="1765540800">- removed Obsoletes to nvidia-open-driver-G06-signed-kmp, because
  zypper dup apparently handles Obsoletes the same way as Provides,
  which we don't want (at least not now) (boo#1254887)</changelog>
  <changelog author="sndirsch@suse.com" date="1765540801">- preamble: let G07 KMPs conflict with G06 KMPs due to file conflicts</changelog>
  <changelog author="sndirsch@suse.com" date="1765800000">- let G07 packages supplement via packageand(G06) so G06 packages
  get uninstalled if G07 packages get installed</changelog>
  <changelog author="sndirsch@suse.com" date="1766491200">- update to G07 version 590.48.01</changelog>
  <changelog author="sndirsch@suse.com" date="1770724800">- kernel-6.19.patch: fixes build against kernel 6.19</changelog>
  <changelog author="sndirsch@suse.com" date="1771934400">- update non-CUDA version to 595.45.04 (boo#1258797)
- adjusted logic for %suse_version bump with SLE16.1 Beta2 (jsc#PED-15826)</changelog>
  <changelog author="sndirsch@suse.com" date="1772712000">- kernel-5.14.patch: fixed build of 595.45.04 driver on SP4</changelog>
  <changelog author="sndirsch@suse.com" date="1773057600">- update CUDA variant to 595.45.04
- supersedes kernel-6.19.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1773662400">- add 'Provides: open-driver-non-cuda-variant = %version' for
  non-CUDA variant to be able to distinguish between both variants;
  to be used by nvidia-open-driver-G07-signed-kmp-meta for TW ...</changelog>
  <changelog author="sndirsch@suse.com" date="1773835200">- do not set ExclusiveArch in order to fix RPM description for -cuda
  variant (bsc#1259719)
- improved RPM description for -cuda and non-cuda variant</changelog>
  <changelog author="sndirsch@suse.com" date="1774180800">- update non-CUDA version to 595.58.03 (boo#1260044)</changelog>
  <changelog author="sndirsch@suse.com" date="1774353600">- update CUDA variant to 595.58.03</changelog>
  <changelog author="sndirsch@suse.com" date="1774353601">- adding 'ExcludeArch:    %ix86 s390x ppc64le' to no longer get
  autoclines by buildservice hoping that this wont't break RPM
  descriptions for -cuda variant again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1776859200">- update non-CUDA variant to 595.71.05 (boo#1262574)
- disable-objtool-override.patch
  * get rid of confusing objtool warnings (boo#1212841)
  - -&gt; from https://github.com/joanbm/nvidia-470xx-linux-mainline</changelog>
  <changelog author="sndirsch@suse.com" date="1777377600">- update CUDA variant to 595.71.05</changelog>
  <changelog author="sndirsch@suse.com" date="1777809600">- fix-objtool-warnings.patch (not applied on aarch64)
  * Get rid of "'naked' return found in MITIGATION_RETHUNK build"
    objtool warnings (boo#1212841, boo#1263834)
- remove again disable-objtool-override.patch</changelog>
</package>
<package pkgid="918f3dc579d87027412f7949cc20436a7698ae80d056fe0968f5c4da5140dc3f" name="nvidia-open-driver-G07-signed-default-devel" arch="x86_64">
  <version epoch="0" ver="595.58.03" rel="150700.16.5.1"/>
  <changelog author="sndirsch@suse.com" date="1760616000">- renamed check to %name-check package</changelog>
  <changelog author="sndirsch@suse.com" date="1761998400">- update non-CUDA variant to version 580.105.08 (boo#1252978)</changelog>
  <changelog author="sndirsch@suse.com" date="1762257600">- back to 580.95.05 on aarch64, since userspace drivers have not
  been updated for this platform</changelog>
  <changelog author="sndirsch@suse.com" date="1763035200">- update CUDA variant to 580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1763035201">- introduced extra %gfx_aarch64_version and appropriate
  tarball/pci_id file in the hope that build service will no
  longer complain</changelog>
  <changelog author="sndirsch@suse.com" date="1764763200">- kernel-6.18.patch
  * trying to fix build against kernel 6.18</changelog>
  <changelog author="sndirsch@suse.com" date="1765195200">- update to G07 version 590.44.01</changelog>
  <changelog author="sndirsch@suse.com" date="1765540800">- removed Obsoletes to nvidia-open-driver-G06-signed-kmp, because
  zypper dup apparently handles Obsoletes the same way as Provides,
  which we don't want (at least not now) (boo#1254887)</changelog>
  <changelog author="sndirsch@suse.com" date="1765540801">- preamble: let G07 KMPs conflict with G06 KMPs due to file conflicts</changelog>
  <changelog author="sndirsch@suse.com" date="1765800000">- let G07 packages supplement via packageand(G06) so G06 packages
  get uninstalled if G07 packages get installed</changelog>
  <changelog author="sndirsch@suse.com" date="1766491200">- update to G07 version 590.48.01</changelog>
  <changelog author="sndirsch@suse.com" date="1770724800">- kernel-6.19.patch: fixes build against kernel 6.19</changelog>
  <changelog author="sndirsch@suse.com" date="1771934400">- update non-CUDA version to 595.45.04 (boo#1258797)
- adjusted logic for %suse_version bump with SLE16.1 Beta2 (jsc#PED-15826)</changelog>
  <changelog author="sndirsch@suse.com" date="1772712000">- kernel-5.14.patch: fixed build of 595.45.04 driver on SP4</changelog>
  <changelog author="sndirsch@suse.com" date="1773057600">- update CUDA variant to 595.45.04
- supersedes kernel-6.19.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1773662400">- add 'Provides: open-driver-non-cuda-variant = %version' for
  non-CUDA variant to be able to distinguish between both variants;
  to be used by nvidia-open-driver-G07-signed-kmp-meta for TW ...</changelog>
  <changelog author="sndirsch@suse.com" date="1773835200">- do not set ExclusiveArch in order to fix RPM description for -cuda
  variant (bsc#1259719)
- improved RPM description for -cuda and non-cuda variant</changelog>
  <changelog author="sndirsch@suse.com" date="1774180800">- update non-CUDA version to 595.58.03 (boo#1260044)</changelog>
  <changelog author="sndirsch@suse.com" date="1774353600">- update CUDA variant to 595.58.03</changelog>
  <changelog author="sndirsch@suse.com" date="1774353601">- adding 'ExcludeArch:    %ix86 s390x ppc64le' to no longer get
  autoclines by buildservice hoping that this wont't break RPM
  descriptions for -cuda variant again ...</changelog>
</package>
<package pkgid="08d6cce61089e61c800c276b0ea8abbd24d3642a33276ac8cdba70a202661b6f" name="nvidia-open-driver-G07-signed-default-devel" arch="x86_64">
  <version epoch="0" ver="595.71.05" rel="150700.16.8.1"/>
  <changelog author="sndirsch@suse.com" date="1763035200">- update CUDA variant to 580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1763035201">- introduced extra %gfx_aarch64_version and appropriate
  tarball/pci_id file in the hope that build service will no
  longer complain</changelog>
  <changelog author="sndirsch@suse.com" date="1764763200">- kernel-6.18.patch
  * trying to fix build against kernel 6.18</changelog>
  <changelog author="sndirsch@suse.com" date="1765195200">- update to G07 version 590.44.01</changelog>
  <changelog author="sndirsch@suse.com" date="1765540800">- removed Obsoletes to nvidia-open-driver-G06-signed-kmp, because
  zypper dup apparently handles Obsoletes the same way as Provides,
  which we don't want (at least not now) (boo#1254887)</changelog>
  <changelog author="sndirsch@suse.com" date="1765540801">- preamble: let G07 KMPs conflict with G06 KMPs due to file conflicts</changelog>
  <changelog author="sndirsch@suse.com" date="1765800000">- let G07 packages supplement via packageand(G06) so G06 packages
  get uninstalled if G07 packages get installed</changelog>
  <changelog author="sndirsch@suse.com" date="1766491200">- update to G07 version 590.48.01</changelog>
  <changelog author="sndirsch@suse.com" date="1770724800">- kernel-6.19.patch: fixes build against kernel 6.19</changelog>
  <changelog author="sndirsch@suse.com" date="1771934400">- update non-CUDA version to 595.45.04 (boo#1258797)
- adjusted logic for %suse_version bump with SLE16.1 Beta2 (jsc#PED-15826)</changelog>
  <changelog author="sndirsch@suse.com" date="1772712000">- kernel-5.14.patch: fixed build of 595.45.04 driver on SP4</changelog>
  <changelog author="sndirsch@suse.com" date="1773057600">- update CUDA variant to 595.45.04
- supersedes kernel-6.19.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1773662400">- add 'Provides: open-driver-non-cuda-variant = %version' for
  non-CUDA variant to be able to distinguish between both variants;
  to be used by nvidia-open-driver-G07-signed-kmp-meta for TW ...</changelog>
  <changelog author="sndirsch@suse.com" date="1773835200">- do not set ExclusiveArch in order to fix RPM description for -cuda
  variant (bsc#1259719)
- improved RPM description for -cuda and non-cuda variant</changelog>
  <changelog author="sndirsch@suse.com" date="1774180800">- update non-CUDA version to 595.58.03 (boo#1260044)</changelog>
  <changelog author="sndirsch@suse.com" date="1774353600">- update CUDA variant to 595.58.03</changelog>
  <changelog author="sndirsch@suse.com" date="1774353601">- adding 'ExcludeArch:    %ix86 s390x ppc64le' to no longer get
  autoclines by buildservice hoping that this wont't break RPM
  descriptions for -cuda variant again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1776859200">- update non-CUDA variant to 595.71.05 (boo#1262574)
- disable-objtool-override.patch
  * get rid of confusing objtool warnings (boo#1212841)
  - -&gt; from https://github.com/joanbm/nvidia-470xx-linux-mainline</changelog>
  <changelog author="sndirsch@suse.com" date="1777377600">- update CUDA variant to 595.71.05</changelog>
  <changelog author="sndirsch@suse.com" date="1777809600">- fix-objtool-warnings.patch (not applied on aarch64)
  * Get rid of "'naked' return found in MITIGATION_RETHUNK build"
    objtool warnings (boo#1212841, boo#1263834)
- remove again disable-objtool-override.patch</changelog>
</package>
<package pkgid="2724b8f34c9db15e61a3238f7891542290e02480a023e628bc8e2bb0bf23f76e" name="nvidia-open-driver-G07-signed-kmp-default" arch="x86_64">
  <version epoch="0" ver="595.58.03_k6.4.0_150700.53.34" rel="150700.16.5.1"/>
  <changelog author="sndirsch@suse.com" date="1760616000">- renamed check to %name-check package</changelog>
  <changelog author="sndirsch@suse.com" date="1761998400">- update non-CUDA variant to version 580.105.08 (boo#1252978)</changelog>
  <changelog author="sndirsch@suse.com" date="1762257600">- back to 580.95.05 on aarch64, since userspace drivers have not
  been updated for this platform</changelog>
  <changelog author="sndirsch@suse.com" date="1763035200">- update CUDA variant to 580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1763035201">- introduced extra %gfx_aarch64_version and appropriate
  tarball/pci_id file in the hope that build service will no
  longer complain</changelog>
  <changelog author="sndirsch@suse.com" date="1764763200">- kernel-6.18.patch
  * trying to fix build against kernel 6.18</changelog>
  <changelog author="sndirsch@suse.com" date="1765195200">- update to G07 version 590.44.01</changelog>
  <changelog author="sndirsch@suse.com" date="1765540800">- removed Obsoletes to nvidia-open-driver-G06-signed-kmp, because
  zypper dup apparently handles Obsoletes the same way as Provides,
  which we don't want (at least not now) (boo#1254887)</changelog>
  <changelog author="sndirsch@suse.com" date="1765540801">- preamble: let G07 KMPs conflict with G06 KMPs due to file conflicts</changelog>
  <changelog author="sndirsch@suse.com" date="1765800000">- let G07 packages supplement via packageand(G06) so G06 packages
  get uninstalled if G07 packages get installed</changelog>
  <changelog author="sndirsch@suse.com" date="1766491200">- update to G07 version 590.48.01</changelog>
  <changelog author="sndirsch@suse.com" date="1770724800">- kernel-6.19.patch: fixes build against kernel 6.19</changelog>
  <changelog author="sndirsch@suse.com" date="1771934400">- update non-CUDA version to 595.45.04 (boo#1258797)
- adjusted logic for %suse_version bump with SLE16.1 Beta2 (jsc#PED-15826)</changelog>
  <changelog author="sndirsch@suse.com" date="1772712000">- kernel-5.14.patch: fixed build of 595.45.04 driver on SP4</changelog>
  <changelog author="sndirsch@suse.com" date="1773057600">- update CUDA variant to 595.45.04
- supersedes kernel-6.19.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1773662400">- add 'Provides: open-driver-non-cuda-variant = %version' for
  non-CUDA variant to be able to distinguish between both variants;
  to be used by nvidia-open-driver-G07-signed-kmp-meta for TW ...</changelog>
  <changelog author="sndirsch@suse.com" date="1773835200">- do not set ExclusiveArch in order to fix RPM description for -cuda
  variant (bsc#1259719)
- improved RPM description for -cuda and non-cuda variant</changelog>
  <changelog author="sndirsch@suse.com" date="1774180800">- update non-CUDA version to 595.58.03 (boo#1260044)</changelog>
  <changelog author="sndirsch@suse.com" date="1774353600">- update CUDA variant to 595.58.03</changelog>
  <changelog author="sndirsch@suse.com" date="1774353601">- adding 'ExcludeArch:    %ix86 s390x ppc64le' to no longer get
  autoclines by buildservice hoping that this wont't break RPM
  descriptions for -cuda variant again ...</changelog>
</package>
<package pkgid="1a539ddc49c7c28509802c4df3060d4428c9bb7d034fb5fc191ce14e9959608f" name="nvidia-open-driver-G07-signed-kmp-default" arch="x86_64">
  <version epoch="0" ver="595.71.05_k6.4.0_150700.53.40" rel="150700.16.8.1"/>
  <changelog author="sndirsch@suse.com" date="1763035200">- update CUDA variant to 580.105.08</changelog>
  <changelog author="sndirsch@suse.com" date="1763035201">- introduced extra %gfx_aarch64_version and appropriate
  tarball/pci_id file in the hope that build service will no
  longer complain</changelog>
  <changelog author="sndirsch@suse.com" date="1764763200">- kernel-6.18.patch
  * trying to fix build against kernel 6.18</changelog>
  <changelog author="sndirsch@suse.com" date="1765195200">- update to G07 version 590.44.01</changelog>
  <changelog author="sndirsch@suse.com" date="1765540800">- removed Obsoletes to nvidia-open-driver-G06-signed-kmp, because
  zypper dup apparently handles Obsoletes the same way as Provides,
  which we don't want (at least not now) (boo#1254887)</changelog>
  <changelog author="sndirsch@suse.com" date="1765540801">- preamble: let G07 KMPs conflict with G06 KMPs due to file conflicts</changelog>
  <changelog author="sndirsch@suse.com" date="1765800000">- let G07 packages supplement via packageand(G06) so G06 packages
  get uninstalled if G07 packages get installed</changelog>
  <changelog author="sndirsch@suse.com" date="1766491200">- update to G07 version 590.48.01</changelog>
  <changelog author="sndirsch@suse.com" date="1770724800">- kernel-6.19.patch: fixes build against kernel 6.19</changelog>
  <changelog author="sndirsch@suse.com" date="1771934400">- update non-CUDA version to 595.45.04 (boo#1258797)
- adjusted logic for %suse_version bump with SLE16.1 Beta2 (jsc#PED-15826)</changelog>
  <changelog author="sndirsch@suse.com" date="1772712000">- kernel-5.14.patch: fixed build of 595.45.04 driver on SP4</changelog>
  <changelog author="sndirsch@suse.com" date="1773057600">- update CUDA variant to 595.45.04
- supersedes kernel-6.19.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1773662400">- add 'Provides: open-driver-non-cuda-variant = %version' for
  non-CUDA variant to be able to distinguish between both variants;
  to be used by nvidia-open-driver-G07-signed-kmp-meta for TW ...</changelog>
  <changelog author="sndirsch@suse.com" date="1773835200">- do not set ExclusiveArch in order to fix RPM description for -cuda
  variant (bsc#1259719)
- improved RPM description for -cuda and non-cuda variant</changelog>
  <changelog author="sndirsch@suse.com" date="1774180800">- update non-CUDA version to 595.58.03 (boo#1260044)</changelog>
  <changelog author="sndirsch@suse.com" date="1774353600">- update CUDA variant to 595.58.03</changelog>
  <changelog author="sndirsch@suse.com" date="1774353601">- adding 'ExcludeArch:    %ix86 s390x ppc64le' to no longer get
  autoclines by buildservice hoping that this wont't break RPM
  descriptions for -cuda variant again ...</changelog>
  <changelog author="sndirsch@suse.com" date="1776859200">- update non-CUDA variant to 595.71.05 (boo#1262574)
- disable-objtool-override.patch
  * get rid of confusing objtool warnings (boo#1212841)
  - -&gt; from https://github.com/joanbm/nvidia-470xx-linux-mainline</changelog>
  <changelog author="sndirsch@suse.com" date="1777377600">- update CUDA variant to 595.71.05</changelog>
  <changelog author="sndirsch@suse.com" date="1777809600">- fix-objtool-warnings.patch (not applied on aarch64)
  * Get rid of "'naked' return found in MITIGATION_RETHUNK build"
    objtool warnings (boo#1212841, boo#1263834)
- remove again disable-objtool-override.patch</changelog>
</package>
<package pkgid="49260f6a5381c77a5fa7734316a0c7994834e4178105b72c0c9cf2be4ef362d7" name="nvidia-persistenced" arch="src">
  <version epoch="0" ver="580.82.07" rel="150400.9.3.1"/>
  <changelog author="sndirsch@suse.com" date="1752667200">- created packages for CUDA repository</changelog>
  <changelog author="sndirsch@suse.com" date="1752667201">- update to 575.57.08
- add 'nvidia-persitenced-cuda-lt-sp6' Povides to be required by
  nvidia-open-driver-G06-signed built against SLE &lt; SP6 (bsc#1237208,
  jsc#PED-13295)</changelog>
  <changelog author="sndirsch@suse.com" date="1752753600">- fixed typo in nvidia-persistenced-cuda-lt-sp6 Provides</changelog>
  <changelog author="sndirsch@suse.com" date="1754395200">- update to 580.65.06</changelog>
  <changelog author="sndirsch@suse.com" date="1757160000">- update to 580.82.07</changelog>
</package>
<package pkgid="bae43e5758f80fa13d9914fb9dcc4606778f30c56ea71681b9472e4b360b0e23" name="nvidia-persistenced" arch="x86_64">
  <version epoch="0" ver="580.82.07" rel="150400.9.3.1"/>
  <changelog author="sndirsch@suse.com" date="1752667200">- created packages for CUDA repository</changelog>
  <changelog author="sndirsch@suse.com" date="1752667201">- update to 575.57.08
- add 'nvidia-persitenced-cuda-lt-sp6' Povides to be required by
  nvidia-open-driver-G06-signed built against SLE &lt; SP6 (bsc#1237208,
  jsc#PED-13295)</changelog>
  <changelog author="sndirsch@suse.com" date="1752753600">- fixed typo in nvidia-persistenced-cuda-lt-sp6 Provides</changelog>
  <changelog author="sndirsch@suse.com" date="1754395200">- update to 580.65.06</changelog>
  <changelog author="sndirsch@suse.com" date="1757160000">- update to 580.82.07</changelog>
</package>
<package pkgid="f745f48e0c8a32e09d4c2ea65eebf8df5a8e5e69ce7340e2995f40eb71a2548b" name="nvme-cli" arch="src">
  <version epoch="0" ver="2.11+22.gd31b1a01" rel="150700.3.3.2"/>
  <changelog author="daniel.wagner@suse.com" date="1659355200">- Update to version v2.1:
  * nvme: Do not print error message in collect_effects_log helper
  * fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * nvme-print: sanitize the get-feature async event config output
  * nvme: Set default rae value for nvme_get_nsid_log users
  * fabrics: Avoid nvme_scan_ctrl when disconnecting
  * print: Fix nvme_id_uuid_list
  * fabrics: Already connected uses a different error code (bsc#1199994)
  * fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)</changelog>
  <changelog author="dmueller@suse.com" date="1659528000">- Update to version 2.1.1:
  * build: Update version to v2.1.1
  * build: Extend release script to support micro version releases
  * build: Add minimum build requirement on libnvme
  * wrapper: Add weak nvme_init_copy_range_f1 symbol
  * build: Update version before regenerating docs
  * build: Update release version rules</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- Update to version 2.1.2:
  * build: Update version to v2.1.2
  * wrapper: Update SPDIX license
  * wrapper: Call library version of nvme_init_copy_range_f1
  * Revert "udev: re-read the discovery log page when a discovery controller reconnected"
  * nvme: Simplify ns list identify
  * meson: we don't need a c++ compiler
  * plugins/ocp: drop unused fd argument
  * plugins/wdc: remove fd argument from print functions
  * plugins/wdc: fix memset() on the address of a pointer
  * plugins/solidigm: fix return value on format parse failure
  * plugins/wdc: prevent duplicate close on NVMe device</changelog>
  <changelog author="daniel.wagner@suse.com" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- Mark no binaries rpms as noarch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 2.2.1:
  * Added parsing for Solidigm telemetry observable data.
  * add item ddr_ecc_err_cnt in smart-log-add
  * build: Drop dependency on libuuid
  * build: Fix endian check for cross build
  * build: Remove unused uuid.wrap file
  * build: Remove unusned uuid.h include
  * completions: Add show-topology tab completion
  * fabrics: Honor JSON config file in connect-all command (bsc#1199504)
  * fabrics: Trigger auto connect if config.json exists
  * fabrics: fix 'persistent' handling during connect-all with JSON file
  * fabrics: nvme config --modify depends on -n and -t argument
  * fabrics: re-read the discovery log page when a discovery controller reconnected
  * json: Support uint64 types serialization for older json-c versions
  * nvme, plugins: fix __u64 -&gt; unsigned long long assumptions
  * nvme-print: Add missing values in id-ctrl for JSON output
  * nvme-print: Handle NULL hostid in JSON output
  * nvme-print: Output 128bit values as uint128 type instead of double
  * nvme-print: Print fguid as a UUID
  * nvme-print: Use uint128 JSON function for media_units_written
  * nvme-print: decode MI status values
  * nvme-print: decode status types
  * nvme-print: fix wrong json key
  * nvme: Add helper function to parse 16-bit comma separated list
  * nvme: Add nvme_cmd wrapper for get_features
  * nvme: Add show-topology command
  * nvme: Add wrapper for Format NVM
  * nvme: Add wrapper for Sanitize NVM
  * nvme: Add wrappers for Get Log page helpers
  * nvme: Add wrappers for Identify controller lists
  * nvme: Add wrappers for NS attach/detach
  * nvme: Add wrappers for NS management functions
  * nvme: Add wrappers for basic NS identify
  * nvme: Add wrappers for firmware commands
  * nvme: Fix set feature command to get feature identifier 0Dh length as zero
  * nvme: Introduce a union in struct nvme_dev for different transport types
  * nvme: Introduce nvme_cli_ wrappers, wrap identify and identify_ctrl
  * nvme: Make static nvme_dev private to open_dev(), use locals elsewhere
  * nvme: Masks SSTAT in sanize-log output
  * nvme: Remove static nvme_dev, allocate on open instead
  * nvme: Use correct print format specifier for sizeof arguments
  * nvme: Use local struct nvme_dev for show_registers &amp; map_registers
  * nvme: check if cfg.metadata is NULL before passing it to strlen()
  * nvme: use helpers for checking status types
  * plugins/innogrit: Include timer.h
  * plugins/innogrit: add smart items for smart-log-add
  * plugins/micron-nvme: Use correct print format specifier for sizeof arguments
  * plugins/ocp: Include timer.h
  * plugins/ocp: Output 128bit values as uint128 type instead of double
  * plugins/ocp: pass struct nvme_dev to internal functions
  * plugins/seagate: Add support for OCP
  * plugins/toshiba: pass struct nvme_dev rather than fd + name
  * plugins/virtium: Output 128bit values as uint128 type instead of double
  * plugins/wdc: Add support for SN660 drive
  * plugins/wdc: Add type case for feature id
  * plugins/wdc: Output 128bit values as uint128 type instead of double
  * plugins/wdc: pass a struct nvme_dev around rather than a fd
  * plugins/wdc: pass struct nvme_dev rather than using global nvme_dev
  * plugins/ytmc: pass struct nvme_dev rather than fd + name
  * plugins: Use PRIu64 format specifier for 64bit types
  * print: Add Controller Ready Timeout Exceeded HW error code
  * solidgm: fix initialization warning
  * solidigm: Added parsing for telemetry customer screenable data
  * solidigm: Fix printf format for size_t variable
  * solidigm: Updated Telemetry parsing code to MIT license.
  * subprojects/libnvme: update for MI admin command coverage
  * tests: Update license to GPL-2.0-or-later
  * tree: Add NVMe-MI support
  * tree: Add dev_fd() helper
  * tree: Change nvme_dev from global to static
  * tree: Combine NVMe file descriptor into struct nvme_dev
  * tree: Move global device info to a single struct
  * tree: fail on non-negative return values from parse_and_open
  * udev: Add HOST_IFACE to udev rule (bsc#1208001)
  * util/json.h: Add json_object_get_uint64 fallback implementation
  * util/json: Add 128 bit JSON helpers
  * util/types: Add 128 bit conversion helpers
  * util: Fix le128_to_cpu on big-endian
  * util: Fix le128_to_cpu on little-endian
  * util: Move common type conversion helpers into util section
  * utils/json: Add json_object_new_uint64 for json-c &lt; 0.14
  * utils: Fix uint128_t usage
  * wdc:  OCP Log page updates and fixes
  * zns.c: report zones should be started after retrieved zone
- Handle suse-missing-rclink lint warnings by providing the symlinks
- Drop rpmlintrc as it is not needed anymore</changelog>
  <changelog author="daniel.wagner@suse.com" date="1675080000">- Update to version 2.3:
  * Added support for Flexible Data Placement (TP4146)
  * Added Persistent Discovery Controller support (TP8013/TP8014)
  * nvme-mi: support for firmware downloads
  * nvme device-self-test learned the --wait command line argument
    which makes nvme-cli to wait (incl. progress bar) in foreground
    until the test has finished.
  * A lot of bug fixes all over the place
- Update spec file
  * Project depends on meson &gt;= 0.50.0
  * make build dependency dropped</changelog>
  <changelog author="daniel.wagner@suse.com" date="1680264000">- Update to version 2.4 (jsc#PED-553 jsc#PED-3884):
  * plugins/ocp: Add SMART cloud log to solidigm plugin
  * nvme-print: Unify number base format for nsid
  * nvme-(discover,connect,connect-all): enable options '--keyring' and '--tls_key'
  * nvme-connect: enable option '--tls'
  * nvme-check-tls-key: add options to derive a 'retained' TLS key
  * nvme-gen-tls-key: add options to derive a TLS key
  * plugins/ocp: Move SMART cloud log methods to separate file for reusability
  * nvme: validate storage tag size correctly
  * nvme-print-json: Add json output status function
  * util: Cleanup argconfig parse function
  * nvme: Fix format command function indentation errors
  * util: Use argconfig commandline options pointer directly
  * nvme-print: Fix nvme show status function indentation errors
  * nvme: Check fw-commit command support MUD
  * print: print csi and opcode in error log (TP4113)
  * plugins/inspur: Cast vendor specific smart log value
  * nvme: Use correct ABORT type for self abort test
  * plugins/solidigm: Do not overwrite previously initialized variable
  * nvme-print: sanitize supported-log-pages output (bsc#1209550)
  * nvme: Enforce length to a multiple of 4 in get_log_page
  * nvme: fix block count and data size logic (bsc#1209564)
  * util: Introduce argconfig simple helper to check seen condition
  * plugins/ocp: Add set feature EOL/PLP failure mode no-uuid option
  * plugins/ocp: Refactor to clear feature identifier C1h and C3h
  * plugins/ocp: Add support for clear PCIe correctable error counters feature
  * nvme-doc: update man page for supported-log-pages (bsc#1209550)
  * plugins/ocp: OCP 2.0 field updates for SMART cloud log
  * nvme: Fix parameter limit range
  * fdp: Fix wrong Reclaim Unit Handle Status size
  * plugins/ocp: Add support for EOL/PLP failure mode feature
  * nvme-print: Fix printing of u32 values
  * nvme: Fix invalid memory access in show_registers
  * util: Add argconfig seen flag parameter to check if feature NSID set
  * nvme-print: fix segfault in supported-log-pages json output
  * fabrics: Fix ordering for auto connect services (bsc#1208075)
  * nvme.c: Check Firmware Update Granularity in fwdl
  * log: high latency timestamp issue
  * nvme: Align get feature data buffer length by page size to allocate
  * nvme: Continue get feature on invalid NS error to get multiple feature ids
  * plugins/ocp: SMART cloud log bug fixes.
  * Made temperature readouts in line with the SI.
  * Changed 'Kelvin' to 'kelvin', as recommended by the BIPM.
  * plugins/ocp: Fix whitespace and style issues
  * util: Revert JSON output to plain numbers
  * nvme: Add rae argument to telemetry-log command
  * nvme: Refactor get telemetry log page helper
  * nvme: Factor out parse telemetry log da element
  * nvme: Fix type in error message
  * unit: Add test-argconfig-parse
  * nvme: Use chunked read in get_log()
  * nvme: Use fprintf for error message logging in get_log()
  * nvme: fix /dev/spkd/ typo
  * doc: --storage-tag-check doesn't take any arguments
  * fabrics: Ensure host-traddr/iface consistency for "connect-all"
  * nvme-print: print the nvme generic name in json output as well
  * plugins/innogrit: modify command opcode for eventlog and cdump
  * completion: fix typo, add missing args
  * plugins/wdc: Fix data Formatting for Latency Monitor Log Page
  * nvme: Make json-c optional again
  * nvme-print: Move JSON printing function into a new file
  * plugins/solidigm: Use json_create_object wrapper
  * plugins/solidigm: Use struct json_object instead of typedef
  * fabrics: No need to sanitize trsvcid and traddr
  * docs: Fixed typos and missing options
  * util: Numbers without any suffix are also valid
  * util: Update suffix_binary_parse API
  * util: Reimplement suffix_si_parse
  * nvme: Filter out status flags for get feature command
  * util: Add crc32 implementation
  * nvme-print: Use attrs_info as key for Zone Attributes Information
  * nvme: Support effects-log for fabrics ctrl
  * plugins/solidigm: Add uuid index resolution
  * plugins/ocp: Use network byte order for OCP UUID value
  * json_discovery_log: avoid buffer overrun (bsc#1207435)
  * Fix connect nbft regressions (bsc#1209905)
  * Fix auto connect conditions (bsc#1210105)
  * Fix auto boot for NBFT connections (bsc#1211647)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1695988800">- Update to version 2.6 (jsc#PED-3610 jsc#PED-4879 jsc#PED-5061):
  * nvme: allocate payload buffer in create-ns command
  * nvme-print-stdout: Add CAP.CPS and CAP.NSSS human readable outputs
  * nvme: Add output-format default option instead of argconfig json option
  * nvme: fw-download offset only describes FW offset, not file offset
  * unit: add locale number test
  * util: handle utf-8 thousend separators correctly
  * nvme: Change to use NVME_ARGS verbose default option from OPT_ARGS
  * fabrics: Fix NVMF_ARGS macro to use parameter n correctly
  * nvme: Add verbose default option to show command debug output
  * util: Fix to set argconfig output format json option correctly
  * util: Split argconfig output format json function to set and get
  * nvme: Spport Phy Rx Eye Opening Measurement Log
  * nvme: Introduce nvme_realloc function
  * nvme: Fix for fdpa reserved field printing
  * completion: add 'version' and 'help' to list
  * udev-rule: apply round-robin iopolicy on i/o subsystems alone (bsc#1215994) (bsc#1219086)
  * nvme: Add support for the OAQD ID controller field
  * plugins/solidigm: use static log macro to calc bitmask
  * plugins/ocp: Rename FW activation history command
  * nvme: auto free nvme_dev resource
  * nvme: allocate aligned payloads for all nvme commands
  * nvme: introduce alloc helper with alignment support
  * util: add cleanup function for generic memory allocations
  * nvme: append huge to nvme_{alloc|free} function
  * nvme: fw_download use nvme_alloc only
  * fabrics: Removing duplicate code and moving to libnvme
  * nvme-print: omit size of protection information
  * tree: Modify label name close_fd to close_dev
  * fabrics: For TCP/RDMA, compare IP addresses with nvme_ipaddrs_eq() (bsc#1213768)
  * fabrics: lookup_discovery_ctrl() must look under host and not root (bsc#1213768)
  * nvme: Do not map status to errno codes
  * completions: Add bash completion for DSSD Power state feature(FID: C7h)
  * Documentation: Add document for DSSD Power state feature(FID: C7h)
  * plugins/ocp: Add DSSD Power state feature(FID: C7h)
  * avoid casting pointer arguments to argconfig functions
  * nvme-print: Add support for EGFEAT, Domain Identifier, TEGCAP and UEGCAP
  * nvme-print: Fix endurance_log whitespace changes
  * nvme: Fix retrieval of telemetry log up to specified data area.
  * nvme: Update list secondary command
  * wdc: Add support for SN861 drive
  * util: Set errno to 0 before strtol/stroul call
  * nvme: Revert passthru and submit_io to print status to stderr from stdout
  * plugins/zns: Fix offset in report zones
  * nvme-rpmb: Fix nvme_show_id_ctrl_rpmbs() definition error
  * fabrics: Use corresponding hostid when hostnqn is generated
  * json: fix seg. fault converting NULL to JSON string (bsc#1213762)
  * nvme-cli: fix extended metadata size calculation
  * nvme-print: Show subsystem iopolicy (bsc#1124564)
  * nvme-print-stdout: Do not show non reachable ns in namespace topology (bsc#1212598)
  * nvme-print: Fix show-topolocy for ctrls
  * doc: Fix typo in documentation
  * nvme-print-stdout: fix storage tag size label
  * nvme-print-stdout: List only ctrls which are part of ns (bsc#1212598)
  * nvme-print-stdout: Support subsys reachable from several hosts (bsc#1212598)
  * ccan: Add htable, strset and dependencies (bsc#1212598)
  * ccan: Remove unused documentation (bsc#1212598)
  * nvme-print: Split max power flags
  * nvme-print: fix counter while looping through uuid_list (bsc#1212598)
  * fabrics: only look for matching ctrl on same host (bsc#1213768)
  * README: Correct hugetlbfs spelling error
  * util: Delete unused CFG_BOOL argconfig type as duplicated with CFG_FLAG
  * util: Set LC_ALL=C as default if -H option is not used
  * nvme: Add support for create-ns command endg-id option parameter
  * nvme-print: fix argument order for show functions
  * plugins/solidigm: Added Marketing Name Log support for Solidigm.
  * nvme-print: Remove left overs from refactoring
  * nvme-print: Move num argument parsing into callbacks
  * nvme-print: Fix typo in callback definition
  * scripts: Make release script project neutral
  * scripts: Update update-docs.sh scripts
  * scripts: Execute the scripts from toplevel directory
  * scripts: Move helper scripts to a central place
  * docs: Update file modes
  * doc: Add information on --context
  * nvmf-autoconnect: Annotate the context to autoconnect
  * fabrics: Add support for volatile configuration
  * plugins/solidigm: Formated log page directory table consistently with "nvme list" format.
  * plugins/solidigm: Added Identify controller VU extensions parsing.
  * nvme-print-json: Print PCI pysical slot number for controller
  * nvme-print-stdout: Print PCI physical slot number for controller
  * libnvme.wrap: Bump to 42ac453
  * plugins/nbft: Use common code to parse print flags
  * fabrics: Do not print device on connect per default
  * fabrics: Revert 'fabrics: prevent 'nvme connect' to well-known discovery NQN'
  * nvme-print: fix wrong list-subsys output when ns are attached to different ctrls
  * plugins/micron: Correct NULL pointer checking error
  * plugins/innogrit: Add vendor command get-eventlog and get-cdump
  * nvme: Use correct data buffer size
  * nvme: Fix quoted string split across lines to use quoted newline
  * plugins/zns: Fix zns.c linux kernel check patch errors and warnings
  * plugins/ymtc: Fix ymtc-nvme.c linux kernel check patch warning
  * plugins/ymtc: Fix ymtc-nvme.c space indentation to tab indentation
  * plugins/virtium: Fix virtium-nvme.c linux kernel check patch errors and warnings
  * plugins/transcend: Fix transcend-nvme.c linux kernel check patch errors and warnings
  * plugins/solidigm: Fix linux kernel check patch errors and warnings
  * plugins/shannon: Fix shannon-nvme.c linux kernel check patch errors and warnings
  * plugins/seagate: Fix seagate-nvme.c linux kernel check patch warnings
  * plugins/scaleflux: Fix sfx-nvme.c linux kernel check patch errors and warnings
  * plugins/netapp: Fix netapp-nvme.c linux kernel check patch errors and warnings
  * plugins/nbft: Fix nbft-plugin.c linux kernel check patch warnings
  * plugins/micron: Fix micron-nvme.c linux kernel check patch errors and warnings
  * plugins/micron: Fix micron-nvme.c space indentation to tab indentation
  * plugins/memblaze: Fix memblaze-nvme.c linux kernel check patch errors and warnings
  * plugins/memblaze: Fix memblaze-utils.h space indentation to tab indentation
  * plugins/memblaze: Fix memblaze-nvme.c space indentation to tab indentation
  * plugins/intel: Fix intel-nvme.c linux kernel check patch errors and warnings
  * plugins/inspur: Fix inspur-nvme.c linux kernel check patch warnings
  * plugins/inspur: Fix inspur-nvme.c space indentation to tab indentation
  * plugins/innogrit: Fix innogrit-nvme.c linux kernel check patch errors
  * plugins/huawei: Fix huawei-nvme.c linux kernel check patch errors and warnings
  * plugins/fdb: Fix fdb.c linux kernel check patch warnings
  * plugins/dera: Fix dera-nvme.c linux kernel check patch errors and warnings
  * plugins/amzn: Fix amzn-nvme.c linux kernel check patch error and warnings
  * plugins/wdc: Fix wdc-utils.c linux kernel check patch errors and warnings
  * plugins/wdc: Refactor wdc-nvme.c for linux kernel check patch errors and warnings
  * util: Move falltrhough feature check to meson.builds
  * ocp: Add eol plp failure mode json outputs
  * nvme-print: Add nvme show result function
  * nvme-print-json: Add json output result function
  * nvme-print: Fix nvme_show_error() to call va_end() for json output format
  * nvme: Fix nvme format block-size option handling
  * Revert "nvme: Masks SSTAT in sanize-log output"
  * fabrics: Fix NVMF_ARGS macro indentation error
  * Documentation: Add document for OCP Device capability(LID: 0xC4) log page
  * completions: Add bash completion for OCP Device capability(LID: 0xC4) log page
  * plugins/ocp: Add Device capability(LID: 0xC4) log page
  * udev: fix warning reported by udevadm verify
  * fabrics: fix conditions in nvmf-autoconnect.service
  * fabrics: Change NVMF_OPTS as NVMF_ARGS to fix linux kernel check patch error
  * nvme: Split passthru commands read output
  * nvme: Fix io-passthru command read metadata output
  * plugin/ocp: Added implementation for 0xC1 log page
  * util: Fix suffix_si_parse to parse no decimal point but suffix value correctly
  * completions: Add zsh option values handling for sanitize command action
  * completions: Add ocp sub commands zsh completion
  * completions: Add ocp commands zsh completion
  * completions: Add ocp commands bash completion
  * nvmf-autoconnect: restart service to avoid dropping AEN
  * solidigm: Reduce memory usage in supported log pages feature
  * solidigm: Changes to supported log pages feature requested by review
  * solidigm: Add supported log pages log feature to Solidigm plugin
  * plugins/ocp: Added ocp unsupported requirements log page
  * completions: Add bash option values handling for sanitize command action
  * doc: Correct nvme-show-hostnqn command NAME description
  * completions: Add missing zsh commands descriptions
  * plugins/wdc: Extend SN530 support.
  * Fix incorrect article 'an' as 'a' to use for descriptions and message
  * nvme: Set effects-log command csi option help message string
  * completions: bash: Delete unsupported id-iocs command options
  * completions: bash: Add id-domain command
  * completions: Fix nvm-id-ns-lba-format command zsh definition
  * completions: Add json command option
  * nvme: Fix get-feature command sel parameter check to allow value 8
  * util: Delete unnecessary argconfig definitions OPT_VAL and CFG_VAL
  * util: Delete argconfig value type to add option value as va lists instead
  * util: Split to set argconfig option value
  * util: Delete argconfig value length to calcurate instead
  * nvme: Change sanitize command action option to use argconfig parse value
  * util: Add argconfig parse value function
  * util: Delete unused argconfig subopts type
  * util: Delete unused argconfig file types
  * util: Delete unused argconfig help function
  * nvme-wrap: do_admin_args_op should not clear args timeout
  * nvme: Fix linux kernel check patch warnings
  * nvme: Fix linux kernel check patch errors
  * plugins/ocp: Add telemetry-log command to OCP plugin
  * plugins/ocp: Add OCP set latency monitor feature command
  * plugins/ocp: Fix endianness in Latency Monitor Log output
  * plugins/ocp: Add missing fields in Latency Monitor Log
  * plugins/ocp: Fix typos in Latency Monitor Log
  * plugins/ocp: Reorganize OCP plugin source code
  * tests: Add tests for controller reset
  * plugin/solidigm: Added vs-internal-log command.
  * nvme: Add nvme_show_perror to use instead of perror for json output
  * nvme-print-json: Use vasprintf instead of vsnprintf to allocate string
  * nvme: fix rnlpt to_string() values.
  * nvme: fix io_mgmt args parse error
  * fdp: set-events feature is saveable
  * fabrics: Return errno value as negative
  * fabrics: Fix linux kernel check patch errors and warnings
  * nbft: add the nbft show plugin
  * nbft: added NBFT v1.0 table support (jsc#PED-1449)
  * nbft: make lookup_ctrl function public
  * nvme: Fix indentation errors around nvme show error API
  * nvme: Check validate output format err value instead of flags
  * nvme: Use nvme show error API to outptu stderr messages for json format
  * util: Check output format json for json error message output
  * nvme-printf: Add show error function for nvme list command json output
  * nvme: Add zns specfic field for create ns
  * nvme: Add ns-mgmt host software specified fields
  * nvme: Add dtype, dspec on write-zeroes, write-uncor
  * nvme-print: Add new fields print on id directive
  * nvme-print: Add VWCNP on NSFEAT of id-ns
  * nvme: Fix format command to skip to reread NSID all block device
  * plugins/solidigm: Fixes and clean-up of Telemetry parse code. Fixed parsing of 64 bit values. Fixed COD field name. Fixed compilation warnings when compiling for 32 bit. Added missing free(). Consolidated single entry function to telemetry parser. Consolidated use of integer types.
  * doc: Documentations maintenance changes
  * doc: Add nvme-mi-send command documentation
  * doc: Add nvme-mi-recv command documentation
  * doc: Add clear-pcie-correctable-error-counters command documentation
  * doc: Add eol-plp-failure-mode command documentation
  * plugins/solidigm: Add firmware activation history log to Solidigm plugin
  * plugins/ocp: Add firmware activation history log to OCP plugin
  * nvme-print: Use enum nvme_print_flags for nvme_show_id_ctrl
  * nvme: Add support for NVMe-MI send command
  * nvme: Use stdout for passthru and submit_io commands success messages
  * nvme: Fix passthru command function indentation errors
  * nvme: Add support for NVMe-MI receive command
  * fabrics: fix fc config JSON file handling (bsc#1210089)
  Refresh 0100-harden_nvmf-connect@.service.patch
- Fix install path for nvme-regress script</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420800">- Enable test during build (bsc#1207686)
- Drop minimum version meson dependency
- Add asciidoc dependency
- Build documentation when requested</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696852800">- Use fixed timestamps for documentation allowing reproducable builds
- Announce nvmeof-boot-support support via Provides
- Filter rpmlint warnings for systemd-service-without-service_ macros
- Add missing service files for NBFT feature
  * add 0001-fabrics-autoconnect-add-service-unit-for-connecting-.patch
  * add 0002-fabrics-add-udev-rule-to-avoid-renaming-nbft-interfa.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1697112000">- Add missing jsc# and bsc# tracking entries in change log.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1702987200">- Update to version 2.7:
  * nvme-print-json: include vs for identify namespace
  * nvme-print-stdout: enhance connect message (bsc#1219086)
  * fabrics: fix connect error if hostid file does not exist (bsc#1219086)
  * fabrics: fix invalid output format error during nvme connect (bsc#1219086)
  * wdc: Fix vs-smart-add-log Command for SN650 and SN655
  * nvme: restric hmac options for gen-tls-key (bsc#1219086)
  * wdc: Fix UUID index fallback mechanism
  * plugins/ocp: Add OCP Telemetry String log page, Telemetry log page
  * completions: Add bash completions for telemetry string log page
  * plugins/solidigm: Added OCP 2.0 compatibility version command
  * plugins/solidigm: Added OCP 2.0 vs-drive-info command.
  * plugins/ocp: Fix printing order of various Latency Monitor Log buckets
  * nvme: validate output format split status from flag return value
  * nvme: simplify cleanup_nvme_dev()
  * cleanup: remove unused cleanup_charp()
  * wdc: Add support for SN861 2nd pci device id
  * nvme: replace libhugetlbfs with mmap and madvise
  * util/mem: move alloc helper to util section
  * nvme: auto cleanup filedescriptors
  * nvme: auto cleanup buffers
  * nvme: return error code in get_persistent_event_log
  * nvme: sanitize nvme-gen-tls-key
  * nvme: print out the resulting TLS identity for 'nvme check-tls-key'
  * nvme: Add version '1' identifier for nvme-gen-tls-key
  * subprojects/libnvme: update wrapper for TP8018
  * plugins/solidigm: Added re_sku_count smart atrribute
  * doc: Fix nvme-connect manpage --application option string
  * plugins/ocp: changed command clear-pcie-correctable-error-counters to match OCP 2.0 spec.
  * plugins/solidigm: Added command to clear PCIe Correctable Error Counters according to OCP 2.0
  * plugins/ocp: Reorganized clear feature code for better reuse
  * nvme: fixup length calculation for 'nvme gen-tls-key --secret'
  * doc: remove invalid hostkey info for --dhchap-secret
  * nvme-print-json: use human helper everywhere
  * nvme-print-json: remove obj_print helper
  * plugins/ocp: update nvme_show_select_result call
  * mailmap: only show contributer's name
  * nvme-print-json: Change to report status and message in array
  * nvme-print-json: Change to report feature select in array
  * nvme-print-json: Change to report error and data in array
  * nvme-print-json: Add show_init/finish calls to report features in array
  * nvme-print: Add nvme_show_error_status() to merge error message and status
  * nvme-print-json: Use r instead of root and use obj_add_***(r, ..., ...)
  * nvme-print-json: Delete static const char string global variables
  * nvme-print-json: Add remaining controller registers readable format
  * nvme-print-json: Add readable format cap, vs, cc, csts, nssr and crto registers
  * nvme-print-json: Combine duplicated json key and val string variables
  * nvme-print-json: Replase json_array_add_value_string() to array_add_str()
  * nvme-print-json: Replase json_object_add_value_uint128() to obj/root_add_uint128()
  * nvme-print-json: Replase json_object_add_value_object() to obj/root_add_obj()
  * nvme-print-json: Replase json_array_add_value_object() to array_add_obj()
  * nvme-print-json: Replase json_object_add_value_array() to obj/root_add_array()
  * nvme-print-json: Replase json_object_add_value_uint() to obj/root_add_uint()
  * nvme-print-json: Replase json_object_add_value_int() to obj/root_add_int()
  * nvme-print-json: Replase json_object_add_value_uint64() to obj/root_add_uint64()
  * nvme-print-json: Replase json_object_add_value_string() to obj/root_add_str()
  * nvme-print-json: Update feature_show_fields_*** to use root/obj_add_***()
  * nvme-print-json: Update lba_status_log to use root_add_***() and obj_add_***()
  * nvme-print-json: Replace lba_status_log printf() to root_add_result()
  * nvme-print-json: Add list_item print function
  * nvme-print-json: Add lba_status_info print function
  * nvme-print-json: Add lba_range print function
  * nvme-print-json: Add id_ctrl_rpmbs print function
  * nvme-print-json: Unify json_list and jroot object names to root
  * nvme-print-json: Add json_zns_changed print function
  * nvme-print-json: Add root_add_result() to output result message
  * nvme-print-json: Split persistent_event_log print function
  * nvme-print-json: Remove unnecessary string newline code
  * nvme-print-json: Replace effects_log_list print to use json_print()
  * nvme-print-json: Print persistent_event_log no log data result correctly
  * nvme-print-json: Add static "result" and "erorr" strings variables
  * nvme-print-json: Add single_property printf function
  * nvme: Replace get feature command stderr output to nvme_show_error()
  * nvme-print-json: Change d() output to use d_json()
  * nvme: Fix get-feature command mixed stdout and json outputs
  * nvme-print-json: Add remaining feature fields print functions
  * nvme-print-json: Update formatting and codying style
  * build: Add -std=c99 to CFLAGS for muon on CentOS 7
  * fabrics: add udev rule to avoid renaming nbft interfaces
  * fabrics: autoconnect: add service unit for connecting NBFT subsystems
  * fabrics: autoconnect: explicitly express module dependency
  * Updates to codeql config
  * libnvme-wrap: exit on VOID_FN lookup failure
  * plugins/ocp:Added the ocp C6h feature api
  * plugin/ocp_fid_c6h:Added the ocp C6h feature api
  * nvme-copy: support cross-namespace copy
  * nvme/plugins: fix mismatch operator
  * nvme: fix overflow possiblity
  * nvme: reduce identify cmd issue
  * nvme: allow set-features to take input from stdin
  * Fix common misspellings from codespell project
  * nvme-print: Correct to print correct ascii character string length
  * print-stdout: print Host Behavior Support correctly
  * build: Bump libnvme wrap
  * plugins/solidigm: Added support for temperature statistics log page
  * Add support for codeql sweeps
  * doc: Add virt-mgmt command
  * doc: Add id-uuid command
  * doc: Add list-secondary command
  * doc: Add id-ns-granularity command
  * doc: Add nvme commands --output-format and --verbose options
  * completions: Add nvme-mi-recv nad nvme-mi-send commands completions
  * completions: Change short option -o and -v duplicated to upper case
  * doc: Change short option -o and -v duplicated to upper case
  * nvme: Change short option -o and -v duplicated to upper case
  * nvme: Change phy-rx-eom-log command to use NVME_ARGS instead
  * plugins/memblaze: Add smart-log-add and latency-feature functions
  * plugins/solidigm: internal-logs Telemetry auto detect last data area.
  * nvme: Change to use NVME_FLBAS_META_EXT() macro to check flbas value
  * nvme-print-json: Add host memory buffer and timestamp features print functions
  * nvme-print-json: Add feature fields print functions
  * nvme-print-json: Add TMPTH feature print function
  * nvme-print-json: Add show_feature_fields print function
  * nvme-print-json: Add select_result print function
  * nvme-print-json: Use json_print to print and free object
  * nvme-print-json: Add lba_status print function
  * nvme-print-json: Combine variable definition and setting value
  * nvme-print-json: Add id_iocs print function
  * nvme-print-stdout: Fix coding style errors
  * nvme-print-json: Add directive print function
  * nvme: Fixed segmentation fault when getting host initiated telemetry
  * plugins/wdc: enhanced SN861 device support
  * plugins/wdc: cleanup line lengths
  * nvme: do not include meta data for PRACT=1 and MD=8
  * nvme: use block-count arg if provided
  * build: bump libnvme to disable tests option
  * build: Add static build on CI target
  * nvme-print: Add nvme_zns_start_zone_list() API function
  * nvme-print: Add nvme_zns_finish_zone_list() API function
  * nvme-print-binary: Set list function to NULL if unimplemented
  * nvme-print-json: Change order list functions and set NULL if unimplemented
  * nvme-print-stdout: Fix to set stdout_list_item print function missed
  * plugins/solidigm: log page name extraction using nvme_log_to_string function
  * nvme-print: Added missing logpage names in nvme_log_to_string function
  * udev-rules: rename netapp udev rule (bsc#1219086)
  * udev-rules: set ctrl_loss_tmo to -1 for ONTAP NVMe/TCP (bsc#1219086)
- Remove upstreamed patches
  * remove 0001-fabrics-autoconnect-add-service-unit-for-connecting-.patch
  * remove 0002-fabrics-add-udev-rule-to-avoid-renaming-nbft-interfa.patch
- Update spec file
  * remove libhugetblfs depedency
  * update NetApp udev rule file name</changelog>
  <changelog author="daniel.wagner@suse.com" date="1703160000">- Update to version 2.7.1:
  * nvme-print-json: Revert field name changes (bsc#1218306)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1707912000">- Update to version 2.8:
  * nvme-print-json: append array object in json_support_log
  * sed: Add plugin for basic SED Opal operations (jsc#PED-5061)
  * don't include newlines in already wrapped text
  * nvme: do not include meta data for PRACT=1 and MD=8 (version 2)
  * create-ns: align the namespaces to 1Mib boundaries when using SI suffixes
  * doc: Fix config-schema.json's URL
  * plugins/solidigm: Compressing vs-internal-log log files into zip file.
  * nbft: do not issue an error if ACPI tables are missing
  * nbft: fixup include for libnvme
  * doc: Fix short option name for cfg-file
  * completions: added Solidigm plugin to autocomplete scripts
  * nvme: Remove unused cfg argument from NVME_ARGS() macro
  * nvme: fix directive receive identify offsets
  * nvme-fabrics: enable option 'concat'
  * build: Update libnvme wrap
  * plugins/wdc: Add Debug Log Collection Support
  * nbft: fix tcp/dhcp address fallback retry (bsc#1218873)
  * nvme: use correct telemetry log size
  * nvme-print: fix typo in list verbose output (bsc#1219086)
  * nvme: print inserted tls key for check-tls-key (bsc#1219086)
  * plugins/wdc: Plugin fixes and updates
  * fabrics: move hostid/hostnqn warnings to verbose level (bsc#1219086)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737600">- Update to version 2.9:
  * nvme-print: expand the maximum field length to prevent misalignment
  * plugins/spdk: plugin to list SPDK subsystems
  * nvme-print: check if controller belong to SPDK
  * plugins/spdk: plugin to list SPDK controllers
  * nvme-print-stdout: fix ASQB, ACQB and BMBBA prints
  * build: bump libnvme wrap
  * nvmf-autoconnect: fix string encoding
  * nvme: identify primary ctrl do not accept nsid
  * nvme-wrap: remove unused nvme_cli_get_log_ana_groups()
  * nvme-print-json: use admin queue attributes definitions
  * nvme-print-json: use CSTS definitions
  * nvme-print-stdout: use POWER_OF_TWO macro
  * nvme-print-json: use controller configuration definitions
  * nvme-print-json, nvme-print-stdout: add tertiary version number
  * nvme-print-json: use NVME_MAJOR and NVME_MINOR definitions
  * nvme-print-json: use NVME_BOOT_PARTITION_INFO field definitions
  * nvme-print-json: add support telemetry log create event in PEL
  * nvme-print-json: add support set feature event in PEL
  * nvme-print-json: add obj_d() function
  * nvme-print-json: add obj_add_uint_0nx() function
  * meson.build: Fix spelling of sed-opal.h filename
  * sed_opal: Only build when we really have sed_opal headers
  * nvme: fix error path if write() fails in get_telemetry_log()
  * plugins/solidigm: Additional LID for temperature statistics.
  * plugins/solidigm: Improved Solidigm UUID index detection.
  * nvme-print-stdout: Add CSTS.ST register stdout print
  * nvme-print-stdout: Use NVME_CMIC definitions
  * nvme-print: Use NVME_UNIT definitions
  * nvme-print-stdout: Use NVME_CMBMSC/STS/EBS/SWTP definitions
  * plugins/ssstc: add a new plugin for SSSTC driver
  * nvmf-connect: systemd hardening effort
  * plugins/ocp: Adjusted variable type size carrying UUID index to 8 bit.
  * nvme: fix security buffer allocation size
  * nvme: Change fw-download xfer initialization to set 0
  * nvme: Add fw-download warning message for FWUG alignment error
  * plugins/ocp: Split ocp_get_uuid_index() into find and get functions.
  * nvme: fix mem leak in multiple key related functions (bsc#1223331)
  * fabrics: fix mem leak in nvmf_check_hostid_and_hostnqn() (bsc#1223331)
  * nvme-print-stdout: Use NVME_BPRSEL definitions
  * nvme-print-stdout: Use NVME_BPINFO definitions
  * nvme-print-stdout: Use NVME_CMBSZ definitions
  * nvme-print-stdout: Use NVME_CMBLOC definitions
  * Revert "logging: fix error handling for ioctl passthru wrappers"
  * fabrics: align identify command payload
  * ocp: Unify line start spacing as tabs
  * ocp: support OCP DSSD Async Event Config feature
  * nvme: Add support for get-reg and set-reg commands
  * nvme-print-json: Add register print functions
  * nvme-print-stdout: Add register print functions
  * nvme-print: Add register print functions
  * nvme: Refactor mmap_registers to add writable parameter
  * nvme-print: Change PMRSZU string function as unit string
  * nvme-print: Refactor CMBLOC and PMRSTS registers function
  * logging: fix error handling for ioctl passthru wrappers
  * nbft: Fix scandir() error check
  * nbft: Refactor connection attempt out
  * nvme-print: Use EOM optional data present macros changed
  * nvme-print: Print cntlid number for controller (bsc#1224024)
  * nvme: check-tls-key fails despite having hostnqn file (bsc#1223331)
  * nvme: print retained key for gen-tls-key's -i option too (bsc#1223331)
  * fabrics : allow host to create duplicate connections to target
  * fabrics: Fix fast_io_fail_tmo option
  * nvme-print-stdout: use admin queue attributes definitions
  * nvme-print-stdout: use CSTS definitions
  * nvme-print-stdout: use controller configuration definitions
  * nvme-print-stdout: use NVME_MAJOR and NVME_MINOR definitions
  * nvme-print-stdout: use FDP configuration attributes definitions
  * nvme: add new function 'tls_key' (bsc#1226197)
  * nvme: use library functions for importing and exporting TLS keys (bsc#1216982)
  * nvme: extend error message for ns scan failures
  * nvme-print-json: Bugfix status json key of sanitize-log
  * sed: update SED password when initalizing (bsc#1222168)
  * plugins/memblaze: add performance stats
  * plugins/memblaze: fix code mis-type error
  * plugins/memblaze: code refactor on applying __packed on more structs
  * plugins/memblaze: code refactor on using cleanup_nvme_dev
  * nvme: Fix to cleanup free raw_secret memory allocated
  * plugins/memblaze: code-format on leading indent and align
  * plugins/wdc: Fix narrow index variable type in for loop to __u32
  * plugins/wdc: Whitespace changes
  * nvme: Delete unused nvme root scanned
  * ocp: support OCP 2.5 Set Telemetry Profile feature
  * nvme: Don't seg fault if given device is not char/block device
  * nbft: Include SSNS index in error messages (bsc#1222026)
  * nbft: Pause logging for expected connection failures (bsc#1222026)
  * nbft: Silence connection failures for unavailable SSNS (bsc#1222026)
  * nbft: Fix 'verbose' argument type (bsc#1222026)
  * plugins/nbft: Implement verbose logging
  * plugins/nbft: Print the new SSNS flags
  * nbft: Fix uninitialized variable
  * plugins/nbft: Fix uninitialized variables
  * plugins/sed: Fix uninitialized variable
  * nvme-print-stdout: Fix uninitialized variable
  * nvme-print-json: Fix uninitialized variable
  * build: Switch default meson buildtype to 'debugoptimized'
  * nvme: do not scan topology when mmaping registers
  * nvme-print-stdout: Use NVME_BOOT_PARTITION_INFO field definitions
  * nvme-print-stdout: Use NVME_GET for MI commands supported and effects CSP
  * nvme-print-stdout: Use NVME_GET for FID supported and effects FSP
  * nvme-print-stdout: Use NVME_SET_FEAT_EVENT register definitions
  * nvme-print: Add PEL EHAI port identifier type printf function
  * build: bump libnvme wrap
  * ocp: fix for power-state argument checking
  * nvme: do not issue warning when nvme_core module is not loaded
  * wdc: Review changes and build fixes
  * wdc:  Fix timestamp displayed by vs-firmware-activate-history command
  * logging: Split to output ioctl latency by log info level (bsc#1231668)
  * nvme-print-stdout: Change hexadecimal value 0x prefix to use %#x
  * nvme-print-stdout: Fix LBA status DSLBA output as hexadecimal
  * nvme-print-stdout: Split line length exceeded 100 columns
  * nvme-print-stdout: Use NVME_PMRMSC register definitions to print
  * nvme-print-stdout: Use NVME_PMRSWTP register definitions to print
  * nvme-print-stdout: Use NVME_PMREBS register definitions to print
  * nvme-print-stdout: Use NVME_PMRSTS register definitions to print
  * nvme-print-stdout: Use NVME_PMRCTL_EN register definition to print
  * nvme-print-stdout: Use NVME_PMRCAP register definition to print
  * doc: Fix admin and io passthru cdw parameters description
  * doc: Add get-feature cdw11 and set-feature cdw12 parameters
  * micron-nvme: Unuse stat() to check if strMainDirName exists
  * doc: Fix get-property and set-property offset and value descriptions
  * doc: Fix documentation file mode 100755 to 100644
  * nvme-print-stdout: Fix channel configuration descriptors pointer
  * nvme-print-stdout: Check sscanf return value
  * nvme-print-stdout: Fix linux kernel check patch errors
  * nvme: Delete unusual fallthrough for cases have no body
  * nvme: Delete duplicated semicolon
  * nvme-print, common: Fix for whitespace change
  * logging: output ioctl debugging info (bsc#1231668)
  * nvme: track verbose level (bsc#1231668)
  * logging: track log level globally
  * logging: move logging code to a new file
  * nvme: update include for libnvme
  * nvme: remove unused declaration
  * build: bump libnvme wrap
  * nvme-netapp: add nspath tlv handling (bsc#1220971)
  * rpm: Add missing rule and service files
  * nvme-print-json, nvme-print-stdout: Use CHAR_BIT definition
  * nvme-print-stdout: Delete duplicated if condition checking line
  * ocp: Fix timestamp displayed by fw-activate-history command
  * wdc: Add support for the get-drive-status command to SN861
  * nvme-print: Fix nvme_host_metadata_type_to_string() indentation errors
  * nvme-print: Add PEL RCI port identifier type printf function
  * nvme-print-stdout: Use persistent event log RCI definitions
  * build: bump libnvme wrap
  * nvme: Add show-regs and get-property commands NSSD print outputs
  * nvme-print: print more details in ns-descs verbose output (bsc#1223331)
  * Revert "nvme-print-json: remove obj_print helper"
  * sed: Confirm entered password before initialization.
- drop systemd service harden file, upstream ships this patch.
  * remove 0100-harden_nvmf-connect@.service.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737601">- Update to version 2.9.1:
  * plugins/spdk: drop the plugin</changelog>
  <changelog author="daniel.wagner@suse.com" date="1722600000">- Update to version 2.10:
  * sed: Fix parsing of Discovery0 features
  * fabrics: avoid potential segfault in nvmf_dim() (bsc#1231668)
  * nvme: avoid segfault in show-topology (bsc#1226197)
  * fabrics: do not leak nvme_ctrl_t object on connect
  * nvme: extend help message when mmap regs fails
  * nvme: return -ENXIO value to open device if errno not set
  * wdc: OCP 2.5 Log Page Updates
  * fabrics: drop --quiet alias -S
  * fabrics: drop --disable-sqflow alias -d
  * fabrics: check if json config is existing (bsc#1231668)
  * plugins/ocp: fix UAF when printing telemetry log
  * nvme-print-stdout: fix persistent-event-log set feature event output
  * fabrics: do not report error when no modules are loaded when disconnecting
  * fabrics: use cleanup helper where possible
  * fabrics: print an error for ENOENT too
  * plugins/virtium: use time_t for time_stamp values
  * completions: add ocp set-error-injection command
  * doc: add ocp set-error-injection command
  * ocp: add set-error-injection command
  * nvme: use argconfig_parse_seen to check conditions
  * nvme: use proper mask to get correct lbafu value
  * utils: fix print formatting option
  * utils: cleanup includes in utils.h
  * utils: add missing header
  * nvme-print: Added print for two new fields for HMB feature
  * plugins/micron: Move OCP internal log parsing from Micron to OCP Plugin.
  * fabrics: remove unused _discover_from_json_config_file() argument
  * nvme: avoid unnecessary dup() + close() in io_mgmt_send()
  * util: remove unnecessary NULL check in cleanup_nvme_root()
  * nvme: use argconfig_parse_comma_sep_array_u16() in attach-ns
  * util: avoid duplication in argconfig_parse_comma_sep_array*()
  * util: remove redundant loop condition in argconfig_parse()
  * util: introduce is_null_or_empty() to avoid strlen()
  * util: reduce allocation sizes in argconfig_parse()
  * util: consolidate call paths to argconfig_parse_type()
  * util: reduce complexity of argconfig_parse_val()
  * util: reduce arguments passed to argconfig_parse_type()
  * util: remove empty default case in argconfig functions
  * util: remove unnecessary parentheses in argconfig_parse_type()
  * util: remove redundant cast in argconfig_parse_type()
  * util: inline argconfig_parse_byte()
  * util: remove redundant NULL check in argconfig_print_help()
  * util: use cleanup to avoid goto in argconfig_parse()
  * util: make argconfig_set_opt_val() a void function
  * util: remove argconfig_parse_val() declaration
  * util: remove argconfig CFG_SIZE type
  * wdc: Update and refactor the C0h log page parsing
  * ccan: Add freed pointer checking to delete strset member
  * fabrics: connect all hosts in config.json (bsc#1226216)
  * fabrics: refactore discover from json config (bsc#1226216)
  * fabrics: first read config before topology scanning (bsc#1226216)
  * fabrics: use helper to lookup default hostnqn/hostid (bsc#1226216)
  * fabrics: extend already connected message (bsc#1226216)
  * fabrics: use cleanup helper to free nvme root object
  * nvme: check MD size with PI size when PRACT set to 1
  * nvme-print: add new field added in TP4090
  * nvme-print-binary: add effects-log command output missed
  * completions: add ocp get-error-injection command
  * doc: add ocp get-error-injection command
  * ocp: add get-error-injection command
  * ocp: fix eol-plp-failure-mode command sel option value
  * doc: fix ocp eol-plp-failure-mode select short option
  * ocp: set UUID index for eol-plp-failure-mode command to get
  * nvme: fix verbose logging (bsc#1231668)
  * doc: fix micron ocp telemetry log parse title
  * nvme-rpmb: send RPMB_REQ_READ_RESULT for authentication key programming
  * plugins/micron: Add support for OCP telemetry log parsing
  * ocp: Update Plugin Version
  * nvme: fix lbaf inuse to use 6:5 bits
  * ocp: use NVME_ARGS macro definition by eol-plp-failure-mode command
  * nvme: extern NVME_ARGS macro definition
  * nvme: use _cleanup_free_ type buffer for get-feature command
  * plugins/ocp: Update telemetry string log page (C9h)
  * nvme-print-json: add get-feature command fahrenheit temperature output
  * nvme: add get-feature and id-ctrl commands fahrenheit outputs
  * nvme: delete smart-log command fahrenheit option
  * nvme-print: check locale to use temperatures in degrees fahrenheit
  * completion: add support for tls-key (bsc#1226197)
  * doc: add tls-key --revoke documentation (bsc#1226197)
  * doc: fix tls-key --keyfile shorthand (bsc#1226197)
  * nvme: add support to revoke TLS key (bsc#1226197)
  * nvme: return error code/message for TLS commands (bsc#1226197)
  * nvme: factor out import key function (bsc#1226197)
  * nvme: use cleanup helper to close file descriptor (bsc#1226216)
  * nvme-rpmb: use cleanup helper for STREAM objects
  * fabrics: use cleanup helper for STREAM objects
  * nvme: use cleanup helper for STREAM objects (bsc#1226216)
  * nvme: strip newline when parsing TLS key files (bsc#1226197)
  * nvme: use stdout for exporting TLS keys (bsc#1226197)
  * nvme: change _cleanup_file_ to _cleanup_fd_ (bsc#1226197)
  * common.h: Avoid using unsupported load/store instructions in arm64 VMs
  * ocp: OCP 2.5 Telemetry DA 1 and 2 Parsing Updates
  * nvme-print-stdout: refactor subsys config (bsc#1231668)
  * wdc: Fix compiler warning.
  * nvme: add flags type nvme_print_flags_t
  * nvme-print: Use 'unsigned int' instead of 'unsigned'
  * nvme: update parse_args() return value handling
  * nvme-print: Fix nvme_show_smart_log indentation error
  * nvme-print-stdout: Fix stdout_smart_log indentation error
  * nvme-print-binary: Fix binary_smart_log indentation error
  * completions: add smart-log command fahrenheit option
  * doc: Add smart-log command fahrenheit option
  * nvme: Add smart-log command fahrenheit option
  * nvme-print: add PEL vendor specific and TCG defined events strings
  * nvme-print: Print PEL reserved event string
  * completions: Add timeout option bash completions
  * completions: Add timeout option zsh completions
  * completions: Add io-mgmt-recv/send commands zsh completions
  * completions: Add /dev/nvme argument missed
  * completions: Change fw-activate command name to fw-commit
  * completions: Fix _nvme indentation errors (bsc#1226197)
  * completions: Fix bash-nvme-completion.sh indentation errors (bsc#1226197)
  * doc: Add nvme commands timeout option
  * nvme: Add support for delete-ns command timeout option
  * nvme: Change NVME_DEFAULT_IOCTL_TIMEOUT to use nvme_cfg timeout
  * nvme: Add nvme_cfg timeout default option
  * nvme: Add nvme_cfg global variable for NVME_ARGS default options
  * nvme: add helper function to get pif and sts value
  * nvme: choose PIF from QPIF if QPIFS supports and PIF is QTYPE
  * nvme: use libnvme's atomic ANA log page fetch
  * nvme: fix maximum ANA log page length calculation
  * nvme-print-json: add missing va_end()
  * fabrics: skip namespace scan for fabric commands
  * nvme-print: print the new fields added in TP4141a
  * plugins/ocp: underflow + index fixes for telemetry
  * plugins/ocp: Add ocp TCG Configuration Log Page
  * nvme-print-stdout: Add helper function to print PIF in string form
  * doc: fix format command info
  * nvme: telemetry: report the correct error if the ioctl() fails.
  * nvme-print: add the cancel opcode to the nvme_cmd_to_string() list
  * doc: fix ocp format issues
  * nbft: Reuse existing discovery controller
  * nbft: Skip SSNS records pointing to well-known discovery NQN
  * nbft: Perform actual discovery
  * util/cleanup: Add cleanup for struct nvme_fabrics_uri
  * fabrics: Make some symbols public (bsc#1226216)
  * nvme-print-stdout: fix format index in stdout_nvm_id_ns
  * plugins/solidigm: Added workload-tracker command
  * plugins/solidigm: Added extra VU fields to id-ctrl
  * nvme-print-stdout: print MEM bit of CTRATT field
  * nvme-print-stdout: fix to print the log line by line
  * fabrics: Always pass hostid and hostnqn (bsc#1226216)
  * plugins/ssstc: Replace __uint16_t with uint16_t
  * plugins/solidigm: Added log pages to vs-internal-logs
  * sed: perform a tper revert after lsp revert
  * plugins/nbft: Use default library logging
  * docs: Add missing OCP plugin docs to meson
  * ocp: Switch OCP plugin to use semantic versioning
  * nvme: fix fw-commit MUD result message
  * sed: only re-read partition table after unlock.
  * nvme-print-json: Fix LBA status DSLBA output as hexadecimal
  * nvme-print-json: Use NVME_PMRxxx register definitions to print
  * nvme-print-stdout: Fix PMRWBM register name
  * nvme-print-json: Fix channel configuration descriptors pointer
  * nvme-print-json: Fix linux kernel check patch errors
  * nvme-print: Added "Command and Feature Lockdown" string to LID 0x14
  * plugins/innogrit: `u_char` -&gt; `unsigned char`
  * nvme: Use C99 types for uint32_t
  * nvme-print-stdout: print frl1/2/3 values for zns id-ns
  * solidigm: Eliminate &lt;linux/limits.h&gt;
  * nvme: remove double free in persistent-event-log
  * ocp: Add Get DSSD Power State Feature (FID: C7h)
  * nvme: initialize default library logging
  * nvme: use cleanup helper for nvme_root_t objects (bsc#1226197)
  * doc: add nvme connet ctrl-loss-tmo description
  * plugins/solidigm: Automatic enabling Data Area 4 when retrieving Telemetry.
- always build the docs
  * add 0001-docs-rename-ocp-unsupported-req-log-file.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1730376000">- Update to version 2.11:
  * docs: update check-tls-key arguments
  * nvme: add support to append TLS PSK to keyfile for check-tls-key
  * nvme: return correct error code in append_keyfile
  * docs: nvme-id-doman: dom{ia =&gt; ai}n
  * ocp: fix latency monitoring data structure entry endian
  * ocp: fix TCG configuration log endian
  * ocp: fix firmware activation history entry endian
  * docs: update gen-tls-key arguments
  * nvme: add support to add derive TLS PSK to keyfile
  * nvme: rename identity to version
  * nvme: set file permission for keyfile to owner only
  * nvme: export tls keys honoring version and hmac
  * nvmf-keys: add udev rule to import tls keys
  * docs: update TLS options
  * fabrics: add support to connect to accept a PSK command line
  * fabrics: add support to connect to accept a configuration
  * nvme: use unsigned char for hmac and identity
  * nvme-print: Add Sanitize Media Verification Event in PEL log
  * netapp-ontapdev: add err msg for no ontapdevices
  * netapp-smdev: add err msg for no smdevices
  * doc: Add sanitize command emvs option
  * ocp: combine to use GUID length definitions
  * nvme: update tls_key() handling
  * nvme-print-stdout: print VERS bit of SANICAP field
  * nvme: add EMVS support to sanitize command
  * ocp: remove callback function cast
  * doc: added commit conventions to contribution guidelines
  * ocp: fix ocp-print-stdout.c indentation error
  * ocp: fix ocp-nvme.c indentation errors
  * ocp: build ocp-nvme.c and ocp-telemetry-decode.c without json
  * ocp: split TCG configuration log print codes
  * ocp: split telemetry string log print codes
  * ocp: split device capabilities log print codes
  * ocp: split error recovery log print codes
  * ocp: split unsupported requirement log print codes
  * ocp: split latency monitor log print codes
  * ocp: move ocp telemetry log print function into ocp-print
  * ocp: split smart extended log print codes
  * ocp: split ocp-fw-activation-history print codes
  * plugins: update meson.build file to always build ocp plugin
  * ocp-print: move json code into separate files
  * nvme-print-json: display only verbose output
  * ocp-nvme: ocp plugin version update
  * nvme-print: print KV command set page header
  * doc: show where self-test results can be found
  * plugins/memblaze: fix a wrong id on smart-log-add
  * plugins/dapustor: smart-log-add fix
  * plugins/sed: add sid password change (bsc#1229677)
  * plugins/solidigm: Automatic retry smaller log chunk size.
  * ocp-nvme: Add LMDATA-37 for Latency Monitor Log
  * ocp-nvme: remove ocp log page version checking
  * wdc: Fix for Reading WDC C2 Vendor Unique Log Page
  * ocp: Fixes for OCP 2.5 Telemetry DA1 FIFO Event Parsing
  * nvme-print-json: update JSON verbose output for nvm-id-ctrl (bsc#1231668)
  * wdc: Add Support for SN5100S
  * nvme: Support show-regs for nvmeof
  * ocp: fix option handling in internal-log
  * Documentation: Added solidigm plugin commands
  * wdc: add support for SNTMP drive
  * nvme-print: print NSSES field of CAP register
  * ocp: fix GUID output
  * nvme-print-json: print controller register values in offset order
  * nvme-print-json: print CMBEBS and CMBSWTP in json format
  * nvme-print-stdout: update changed-ns-list-log output (bsc#1231668)
  * nvme: fix uninitialized value in error-log (bsc#1231668)
  * nvme: fix to convert metadata size to native byte order
  * nvme-print: fix error information log page endianness error
  * completions: add get-feature command changed option
  * doc: add get-feature command changed option
  * nvme: separate get NVME_GET_FEATURES_SEL_CHANGED definition
  * nvme: use NVME_GET_FEATURES_SEL definitions
  * nvme-print-stdout: use NVME_CTRL_OAES definitions
  * completion: add ocp set-telemetry-profile to zsh
  * completion: add solidgm work-tracker binding
  * plugins/solidigm: Added Workload Tracker Triggers and Wall Time
  * ocp: include util/types.h to use nvme_uint128_t
  * ocp: fix to set log data pointer allocated
  * nvme: use NVME_CHECK() to check get features select field value
  * ocp: split ocp-hwcomp log
  * completions: add ocp hardware-component-log command
  * doc: add ocp hardware-component-log command
  * ocp: add hwcomp log json output
  * ocp: add hwcomp log command list option
  * ocp: add hwcomp log command comp-id option
  * ocp: add hwcomp dummy definition
  * ocp: add support for hwcomp log page
  * nvme: use NVME_CTRL_FNA definitions
  * netapp-smdevices: print single device output too (bsc#1231668)
  * netapp-smdevices: segregate print routines (bsc#1231668)
  * Add Support for new SN655 PCI Device ID
  * nvme-print-json: extern json object add functions
  * ocp: add SMART / health information extended log page version 4
  * ocp: add error recovery log page version 3
  * ocp: add get-enable-ieee1667-silo command
  * fabrics: fix incorrect access filename check (bsc#1231668)
  * nvme: use NVME_GET_FEATURES_SEL_SUPPORTED definition
  * nvme-print-json: use _cleanup_free_
  * plugins/solidigm: fix use after free.
  * ocp: fix ocp-nvme.c coding style errors
  * ocp: Change C9 function names to use c9 instead
  * ocp: fix to return c9 log page data error to open file
  * ocp: fix to set return value to get c9 log page data
  * nvme: update nvme_insert_tls_key_versioned() return handling (bsc#1231668)
  * nvme-print-stdout: add print_array function
  * logging: add print_info function
  * util: extern uint128_t_to_double() function
  * nvme-print: sanitize error-log output (bsc#1231668)
  * plugins/solidigm : Fixing vs-internal-log to generate identify per allocated namespace.
  * nvme-print: added new fields for nvm_id_ns
  * plugins/fdp: bugfix error check to validate output format
  * plugins/wdc: fix json output for vs-nand-stats
  * nvme-print-stdout: use NVME_FEAT util definitions
  * nvme-print: update subsys verbose outputs (bsc#1231668)
  * nvme-print: add subsystype to the list-subsys output (bsc#1231668)
  * netapp: print output for single device too (bsc#1231668)
  * netapp: segregate the print routines (bsc#1231668)
  * netapp: fix uninitialized value from heap error (bsc#1231668)
  * nvme-print: print the new fields added in TP4142
  * plugins/innogrit: modify for project tacoma
  * wdc: Add Support for new SN-861 PCI device id
  * nvme-print: use LC_MEASUREMENT to check fahrenheit temperature
  * nvme-print: use Completion Condition enum
  * completions: add the zsh completion of the dapustor plugin
  * nvme-print: print the new fields added in TP4165
  * plugins/dapustor: dapustor smart-log-add update
  * nvme-print-stdout: Added print for new field CSER (TP4167)
  * plugins: Add a new DapuStor plugin and the smart-log-add command
  * docs: rename ocp-unsupported-req-log file
- Drop build fix patch
  * remove 0001-docs-rename-ocp-unsupported-req-log-file.patch
- Install 70-nvmf-keys.rules to the default udev rules directory</changelog>
  <changelog author="dwagner@suse.de" date="1741089600">- Update to version 2.11+17.g6e09119:
  * nvme: check for valid output format (bsc#1237275)
  * nvme: make get-feature JSON output print everything (bsc#1237275)
  * nvme: make -v output consistent with -H output for nvme get-feature (bsc#1237275)
  * nvme: make -v output consistent with -H output for nvme get-property (bsc#1237275)
  * nvme-print-stdout: add details in list-ns verbose output (bsc#1237275)
  * nvme-print-stdout: add descriptions for nsze, ncap &amp; nuse (bsc#1237275)
  * netapp-ontapdev: correct the basestr header (bsc#1237275)
  * netapp-smdev: update err msg for no smdevices (bsc#1237275)
  * netapp-ontapdev: update err msg for no ontapdevices (bsc#1237275)
  * netapp-smdev: update basestr header in verbose output (bsc#1237275)</changelog>
  <changelog author="dwagner@suse.de" date="1745323200">- Update to version 2.11+22.gd31b1a01:
  * nvme-print: display fw-rev in list-subsys output (bsc#1240518)
  * nvme-print: display model in list-subsys output (bsc#1240518)
  * netapp-ontapdev: add subsysname to regular output (bsc#1240518)
  * netapp-ontapdev: add subsysname to the verbose output (bsc#1240518)
  * Revert "nvme-print-json: display only verbose output"</changelog>
</package>
<package pkgid="1184dcf4b971dd5c7276543540bbc530e6603c97e02effac20b516f189f43afc" name="nvme-cli" arch="x86_64">
  <version epoch="0" ver="2.11+22.gd31b1a01" rel="150700.3.3.2"/>
  <changelog author="daniel.wagner@suse.com" date="1659355200">- Update to version v2.1:
  * nvme: Do not print error message in collect_effects_log helper
  * fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * nvme-print: sanitize the get-feature async event config output
  * nvme: Set default rae value for nvme_get_nsid_log users
  * fabrics: Avoid nvme_scan_ctrl when disconnecting
  * print: Fix nvme_id_uuid_list
  * fabrics: Already connected uses a different error code (bsc#1199994)
  * fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)</changelog>
  <changelog author="dmueller@suse.com" date="1659528000">- Update to version 2.1.1:
  * build: Update version to v2.1.1
  * build: Extend release script to support micro version releases
  * build: Add minimum build requirement on libnvme
  * wrapper: Add weak nvme_init_copy_range_f1 symbol
  * build: Update version before regenerating docs
  * build: Update release version rules</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- Update to version 2.1.2:
  * build: Update version to v2.1.2
  * wrapper: Update SPDIX license
  * wrapper: Call library version of nvme_init_copy_range_f1
  * Revert "udev: re-read the discovery log page when a discovery controller reconnected"
  * nvme: Simplify ns list identify
  * meson: we don't need a c++ compiler
  * plugins/ocp: drop unused fd argument
  * plugins/wdc: remove fd argument from print functions
  * plugins/wdc: fix memset() on the address of a pointer
  * plugins/solidigm: fix return value on format parse failure
  * plugins/wdc: prevent duplicate close on NVMe device</changelog>
  <changelog author="daniel.wagner@suse.com" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- Mark no binaries rpms as noarch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 2.2.1:
  * Added parsing for Solidigm telemetry observable data.
  * add item ddr_ecc_err_cnt in smart-log-add
  * build: Drop dependency on libuuid
  * build: Fix endian check for cross build
  * build: Remove unused uuid.wrap file
  * build: Remove unusned uuid.h include
  * completions: Add show-topology tab completion
  * fabrics: Honor JSON config file in connect-all command (bsc#1199504)
  * fabrics: Trigger auto connect if config.json exists
  * fabrics: fix 'persistent' handling during connect-all with JSON file
  * fabrics: nvme config --modify depends on -n and -t argument
  * fabrics: re-read the discovery log page when a discovery controller reconnected
  * json: Support uint64 types serialization for older json-c versions
  * nvme, plugins: fix __u64 -&gt; unsigned long long assumptions
  * nvme-print: Add missing values in id-ctrl for JSON output
  * nvme-print: Handle NULL hostid in JSON output
  * nvme-print: Output 128bit values as uint128 type instead of double
  * nvme-print: Print fguid as a UUID
  * nvme-print: Use uint128 JSON function for media_units_written
  * nvme-print: decode MI status values
  * nvme-print: decode status types
  * nvme-print: fix wrong json key
  * nvme: Add helper function to parse 16-bit comma separated list
  * nvme: Add nvme_cmd wrapper for get_features
  * nvme: Add show-topology command
  * nvme: Add wrapper for Format NVM
  * nvme: Add wrapper for Sanitize NVM
  * nvme: Add wrappers for Get Log page helpers
  * nvme: Add wrappers for Identify controller lists
  * nvme: Add wrappers for NS attach/detach
  * nvme: Add wrappers for NS management functions
  * nvme: Add wrappers for basic NS identify
  * nvme: Add wrappers for firmware commands
  * nvme: Fix set feature command to get feature identifier 0Dh length as zero
  * nvme: Introduce a union in struct nvme_dev for different transport types
  * nvme: Introduce nvme_cli_ wrappers, wrap identify and identify_ctrl
  * nvme: Make static nvme_dev private to open_dev(), use locals elsewhere
  * nvme: Masks SSTAT in sanize-log output
  * nvme: Remove static nvme_dev, allocate on open instead
  * nvme: Use correct print format specifier for sizeof arguments
  * nvme: Use local struct nvme_dev for show_registers &amp; map_registers
  * nvme: check if cfg.metadata is NULL before passing it to strlen()
  * nvme: use helpers for checking status types
  * plugins/innogrit: Include timer.h
  * plugins/innogrit: add smart items for smart-log-add
  * plugins/micron-nvme: Use correct print format specifier for sizeof arguments
  * plugins/ocp: Include timer.h
  * plugins/ocp: Output 128bit values as uint128 type instead of double
  * plugins/ocp: pass struct nvme_dev to internal functions
  * plugins/seagate: Add support for OCP
  * plugins/toshiba: pass struct nvme_dev rather than fd + name
  * plugins/virtium: Output 128bit values as uint128 type instead of double
  * plugins/wdc: Add support for SN660 drive
  * plugins/wdc: Add type case for feature id
  * plugins/wdc: Output 128bit values as uint128 type instead of double
  * plugins/wdc: pass a struct nvme_dev around rather than a fd
  * plugins/wdc: pass struct nvme_dev rather than using global nvme_dev
  * plugins/ytmc: pass struct nvme_dev rather than fd + name
  * plugins: Use PRIu64 format specifier for 64bit types
  * print: Add Controller Ready Timeout Exceeded HW error code
  * solidgm: fix initialization warning
  * solidigm: Added parsing for telemetry customer screenable data
  * solidigm: Fix printf format for size_t variable
  * solidigm: Updated Telemetry parsing code to MIT license.
  * subprojects/libnvme: update for MI admin command coverage
  * tests: Update license to GPL-2.0-or-later
  * tree: Add NVMe-MI support
  * tree: Add dev_fd() helper
  * tree: Change nvme_dev from global to static
  * tree: Combine NVMe file descriptor into struct nvme_dev
  * tree: Move global device info to a single struct
  * tree: fail on non-negative return values from parse_and_open
  * udev: Add HOST_IFACE to udev rule (bsc#1208001)
  * util/json.h: Add json_object_get_uint64 fallback implementation
  * util/json: Add 128 bit JSON helpers
  * util/types: Add 128 bit conversion helpers
  * util: Fix le128_to_cpu on big-endian
  * util: Fix le128_to_cpu on little-endian
  * util: Move common type conversion helpers into util section
  * utils/json: Add json_object_new_uint64 for json-c &lt; 0.14
  * utils: Fix uint128_t usage
  * wdc:  OCP Log page updates and fixes
  * zns.c: report zones should be started after retrieved zone
- Handle suse-missing-rclink lint warnings by providing the symlinks
- Drop rpmlintrc as it is not needed anymore</changelog>
  <changelog author="daniel.wagner@suse.com" date="1675080000">- Update to version 2.3:
  * Added support for Flexible Data Placement (TP4146)
  * Added Persistent Discovery Controller support (TP8013/TP8014)
  * nvme-mi: support for firmware downloads
  * nvme device-self-test learned the --wait command line argument
    which makes nvme-cli to wait (incl. progress bar) in foreground
    until the test has finished.
  * A lot of bug fixes all over the place
- Update spec file
  * Project depends on meson &gt;= 0.50.0
  * make build dependency dropped</changelog>
  <changelog author="daniel.wagner@suse.com" date="1680264000">- Update to version 2.4 (jsc#PED-553 jsc#PED-3884):
  * plugins/ocp: Add SMART cloud log to solidigm plugin
  * nvme-print: Unify number base format for nsid
  * nvme-(discover,connect,connect-all): enable options '--keyring' and '--tls_key'
  * nvme-connect: enable option '--tls'
  * nvme-check-tls-key: add options to derive a 'retained' TLS key
  * nvme-gen-tls-key: add options to derive a TLS key
  * plugins/ocp: Move SMART cloud log methods to separate file for reusability
  * nvme: validate storage tag size correctly
  * nvme-print-json: Add json output status function
  * util: Cleanup argconfig parse function
  * nvme: Fix format command function indentation errors
  * util: Use argconfig commandline options pointer directly
  * nvme-print: Fix nvme show status function indentation errors
  * nvme: Check fw-commit command support MUD
  * print: print csi and opcode in error log (TP4113)
  * plugins/inspur: Cast vendor specific smart log value
  * nvme: Use correct ABORT type for self abort test
  * plugins/solidigm: Do not overwrite previously initialized variable
  * nvme-print: sanitize supported-log-pages output (bsc#1209550)
  * nvme: Enforce length to a multiple of 4 in get_log_page
  * nvme: fix block count and data size logic (bsc#1209564)
  * util: Introduce argconfig simple helper to check seen condition
  * plugins/ocp: Add set feature EOL/PLP failure mode no-uuid option
  * plugins/ocp: Refactor to clear feature identifier C1h and C3h
  * plugins/ocp: Add support for clear PCIe correctable error counters feature
  * nvme-doc: update man page for supported-log-pages (bsc#1209550)
  * plugins/ocp: OCP 2.0 field updates for SMART cloud log
  * nvme: Fix parameter limit range
  * fdp: Fix wrong Reclaim Unit Handle Status size
  * plugins/ocp: Add support for EOL/PLP failure mode feature
  * nvme-print: Fix printing of u32 values
  * nvme: Fix invalid memory access in show_registers
  * util: Add argconfig seen flag parameter to check if feature NSID set
  * nvme-print: fix segfault in supported-log-pages json output
  * fabrics: Fix ordering for auto connect services (bsc#1208075)
  * nvme.c: Check Firmware Update Granularity in fwdl
  * log: high latency timestamp issue
  * nvme: Align get feature data buffer length by page size to allocate
  * nvme: Continue get feature on invalid NS error to get multiple feature ids
  * plugins/ocp: SMART cloud log bug fixes.
  * Made temperature readouts in line with the SI.
  * Changed 'Kelvin' to 'kelvin', as recommended by the BIPM.
  * plugins/ocp: Fix whitespace and style issues
  * util: Revert JSON output to plain numbers
  * nvme: Add rae argument to telemetry-log command
  * nvme: Refactor get telemetry log page helper
  * nvme: Factor out parse telemetry log da element
  * nvme: Fix type in error message
  * unit: Add test-argconfig-parse
  * nvme: Use chunked read in get_log()
  * nvme: Use fprintf for error message logging in get_log()
  * nvme: fix /dev/spkd/ typo
  * doc: --storage-tag-check doesn't take any arguments
  * fabrics: Ensure host-traddr/iface consistency for "connect-all"
  * nvme-print: print the nvme generic name in json output as well
  * plugins/innogrit: modify command opcode for eventlog and cdump
  * completion: fix typo, add missing args
  * plugins/wdc: Fix data Formatting for Latency Monitor Log Page
  * nvme: Make json-c optional again
  * nvme-print: Move JSON printing function into a new file
  * plugins/solidigm: Use json_create_object wrapper
  * plugins/solidigm: Use struct json_object instead of typedef
  * fabrics: No need to sanitize trsvcid and traddr
  * docs: Fixed typos and missing options
  * util: Numbers without any suffix are also valid
  * util: Update suffix_binary_parse API
  * util: Reimplement suffix_si_parse
  * nvme: Filter out status flags for get feature command
  * util: Add crc32 implementation
  * nvme-print: Use attrs_info as key for Zone Attributes Information
  * nvme: Support effects-log for fabrics ctrl
  * plugins/solidigm: Add uuid index resolution
  * plugins/ocp: Use network byte order for OCP UUID value
  * json_discovery_log: avoid buffer overrun (bsc#1207435)
  * Fix connect nbft regressions (bsc#1209905)
  * Fix auto connect conditions (bsc#1210105)
  * Fix auto boot for NBFT connections (bsc#1211647)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1695988800">- Update to version 2.6 (jsc#PED-3610 jsc#PED-4879 jsc#PED-5061):
  * nvme: allocate payload buffer in create-ns command
  * nvme-print-stdout: Add CAP.CPS and CAP.NSSS human readable outputs
  * nvme: Add output-format default option instead of argconfig json option
  * nvme: fw-download offset only describes FW offset, not file offset
  * unit: add locale number test
  * util: handle utf-8 thousend separators correctly
  * nvme: Change to use NVME_ARGS verbose default option from OPT_ARGS
  * fabrics: Fix NVMF_ARGS macro to use parameter n correctly
  * nvme: Add verbose default option to show command debug output
  * util: Fix to set argconfig output format json option correctly
  * util: Split argconfig output format json function to set and get
  * nvme: Spport Phy Rx Eye Opening Measurement Log
  * nvme: Introduce nvme_realloc function
  * nvme: Fix for fdpa reserved field printing
  * completion: add 'version' and 'help' to list
  * udev-rule: apply round-robin iopolicy on i/o subsystems alone (bsc#1215994) (bsc#1219086)
  * nvme: Add support for the OAQD ID controller field
  * plugins/solidigm: use static log macro to calc bitmask
  * plugins/ocp: Rename FW activation history command
  * nvme: auto free nvme_dev resource
  * nvme: allocate aligned payloads for all nvme commands
  * nvme: introduce alloc helper with alignment support
  * util: add cleanup function for generic memory allocations
  * nvme: append huge to nvme_{alloc|free} function
  * nvme: fw_download use nvme_alloc only
  * fabrics: Removing duplicate code and moving to libnvme
  * nvme-print: omit size of protection information
  * tree: Modify label name close_fd to close_dev
  * fabrics: For TCP/RDMA, compare IP addresses with nvme_ipaddrs_eq() (bsc#1213768)
  * fabrics: lookup_discovery_ctrl() must look under host and not root (bsc#1213768)
  * nvme: Do not map status to errno codes
  * completions: Add bash completion for DSSD Power state feature(FID: C7h)
  * Documentation: Add document for DSSD Power state feature(FID: C7h)
  * plugins/ocp: Add DSSD Power state feature(FID: C7h)
  * avoid casting pointer arguments to argconfig functions
  * nvme-print: Add support for EGFEAT, Domain Identifier, TEGCAP and UEGCAP
  * nvme-print: Fix endurance_log whitespace changes
  * nvme: Fix retrieval of telemetry log up to specified data area.
  * nvme: Update list secondary command
  * wdc: Add support for SN861 drive
  * util: Set errno to 0 before strtol/stroul call
  * nvme: Revert passthru and submit_io to print status to stderr from stdout
  * plugins/zns: Fix offset in report zones
  * nvme-rpmb: Fix nvme_show_id_ctrl_rpmbs() definition error
  * fabrics: Use corresponding hostid when hostnqn is generated
  * json: fix seg. fault converting NULL to JSON string (bsc#1213762)
  * nvme-cli: fix extended metadata size calculation
  * nvme-print: Show subsystem iopolicy (bsc#1124564)
  * nvme-print-stdout: Do not show non reachable ns in namespace topology (bsc#1212598)
  * nvme-print: Fix show-topolocy for ctrls
  * doc: Fix typo in documentation
  * nvme-print-stdout: fix storage tag size label
  * nvme-print-stdout: List only ctrls which are part of ns (bsc#1212598)
  * nvme-print-stdout: Support subsys reachable from several hosts (bsc#1212598)
  * ccan: Add htable, strset and dependencies (bsc#1212598)
  * ccan: Remove unused documentation (bsc#1212598)
  * nvme-print: Split max power flags
  * nvme-print: fix counter while looping through uuid_list (bsc#1212598)
  * fabrics: only look for matching ctrl on same host (bsc#1213768)
  * README: Correct hugetlbfs spelling error
  * util: Delete unused CFG_BOOL argconfig type as duplicated with CFG_FLAG
  * util: Set LC_ALL=C as default if -H option is not used
  * nvme: Add support for create-ns command endg-id option parameter
  * nvme-print: fix argument order for show functions
  * plugins/solidigm: Added Marketing Name Log support for Solidigm.
  * nvme-print: Remove left overs from refactoring
  * nvme-print: Move num argument parsing into callbacks
  * nvme-print: Fix typo in callback definition
  * scripts: Make release script project neutral
  * scripts: Update update-docs.sh scripts
  * scripts: Execute the scripts from toplevel directory
  * scripts: Move helper scripts to a central place
  * docs: Update file modes
  * doc: Add information on --context
  * nvmf-autoconnect: Annotate the context to autoconnect
  * fabrics: Add support for volatile configuration
  * plugins/solidigm: Formated log page directory table consistently with "nvme list" format.
  * plugins/solidigm: Added Identify controller VU extensions parsing.
  * nvme-print-json: Print PCI pysical slot number for controller
  * nvme-print-stdout: Print PCI physical slot number for controller
  * libnvme.wrap: Bump to 42ac453
  * plugins/nbft: Use common code to parse print flags
  * fabrics: Do not print device on connect per default
  * fabrics: Revert 'fabrics: prevent 'nvme connect' to well-known discovery NQN'
  * nvme-print: fix wrong list-subsys output when ns are attached to different ctrls
  * plugins/micron: Correct NULL pointer checking error
  * plugins/innogrit: Add vendor command get-eventlog and get-cdump
  * nvme: Use correct data buffer size
  * nvme: Fix quoted string split across lines to use quoted newline
  * plugins/zns: Fix zns.c linux kernel check patch errors and warnings
  * plugins/ymtc: Fix ymtc-nvme.c linux kernel check patch warning
  * plugins/ymtc: Fix ymtc-nvme.c space indentation to tab indentation
  * plugins/virtium: Fix virtium-nvme.c linux kernel check patch errors and warnings
  * plugins/transcend: Fix transcend-nvme.c linux kernel check patch errors and warnings
  * plugins/solidigm: Fix linux kernel check patch errors and warnings
  * plugins/shannon: Fix shannon-nvme.c linux kernel check patch errors and warnings
  * plugins/seagate: Fix seagate-nvme.c linux kernel check patch warnings
  * plugins/scaleflux: Fix sfx-nvme.c linux kernel check patch errors and warnings
  * plugins/netapp: Fix netapp-nvme.c linux kernel check patch errors and warnings
  * plugins/nbft: Fix nbft-plugin.c linux kernel check patch warnings
  * plugins/micron: Fix micron-nvme.c linux kernel check patch errors and warnings
  * plugins/micron: Fix micron-nvme.c space indentation to tab indentation
  * plugins/memblaze: Fix memblaze-nvme.c linux kernel check patch errors and warnings
  * plugins/memblaze: Fix memblaze-utils.h space indentation to tab indentation
  * plugins/memblaze: Fix memblaze-nvme.c space indentation to tab indentation
  * plugins/intel: Fix intel-nvme.c linux kernel check patch errors and warnings
  * plugins/inspur: Fix inspur-nvme.c linux kernel check patch warnings
  * plugins/inspur: Fix inspur-nvme.c space indentation to tab indentation
  * plugins/innogrit: Fix innogrit-nvme.c linux kernel check patch errors
  * plugins/huawei: Fix huawei-nvme.c linux kernel check patch errors and warnings
  * plugins/fdb: Fix fdb.c linux kernel check patch warnings
  * plugins/dera: Fix dera-nvme.c linux kernel check patch errors and warnings
  * plugins/amzn: Fix amzn-nvme.c linux kernel check patch error and warnings
  * plugins/wdc: Fix wdc-utils.c linux kernel check patch errors and warnings
  * plugins/wdc: Refactor wdc-nvme.c for linux kernel check patch errors and warnings
  * util: Move falltrhough feature check to meson.builds
  * ocp: Add eol plp failure mode json outputs
  * nvme-print: Add nvme show result function
  * nvme-print-json: Add json output result function
  * nvme-print: Fix nvme_show_error() to call va_end() for json output format
  * nvme: Fix nvme format block-size option handling
  * Revert "nvme: Masks SSTAT in sanize-log output"
  * fabrics: Fix NVMF_ARGS macro indentation error
  * Documentation: Add document for OCP Device capability(LID: 0xC4) log page
  * completions: Add bash completion for OCP Device capability(LID: 0xC4) log page
  * plugins/ocp: Add Device capability(LID: 0xC4) log page
  * udev: fix warning reported by udevadm verify
  * fabrics: fix conditions in nvmf-autoconnect.service
  * fabrics: Change NVMF_OPTS as NVMF_ARGS to fix linux kernel check patch error
  * nvme: Split passthru commands read output
  * nvme: Fix io-passthru command read metadata output
  * plugin/ocp: Added implementation for 0xC1 log page
  * util: Fix suffix_si_parse to parse no decimal point but suffix value correctly
  * completions: Add zsh option values handling for sanitize command action
  * completions: Add ocp sub commands zsh completion
  * completions: Add ocp commands zsh completion
  * completions: Add ocp commands bash completion
  * nvmf-autoconnect: restart service to avoid dropping AEN
  * solidigm: Reduce memory usage in supported log pages feature
  * solidigm: Changes to supported log pages feature requested by review
  * solidigm: Add supported log pages log feature to Solidigm plugin
  * plugins/ocp: Added ocp unsupported requirements log page
  * completions: Add bash option values handling for sanitize command action
  * doc: Correct nvme-show-hostnqn command NAME description
  * completions: Add missing zsh commands descriptions
  * plugins/wdc: Extend SN530 support.
  * Fix incorrect article 'an' as 'a' to use for descriptions and message
  * nvme: Set effects-log command csi option help message string
  * completions: bash: Delete unsupported id-iocs command options
  * completions: bash: Add id-domain command
  * completions: Fix nvm-id-ns-lba-format command zsh definition
  * completions: Add json command option
  * nvme: Fix get-feature command sel parameter check to allow value 8
  * util: Delete unnecessary argconfig definitions OPT_VAL and CFG_VAL
  * util: Delete argconfig value type to add option value as va lists instead
  * util: Split to set argconfig option value
  * util: Delete argconfig value length to calcurate instead
  * nvme: Change sanitize command action option to use argconfig parse value
  * util: Add argconfig parse value function
  * util: Delete unused argconfig subopts type
  * util: Delete unused argconfig file types
  * util: Delete unused argconfig help function
  * nvme-wrap: do_admin_args_op should not clear args timeout
  * nvme: Fix linux kernel check patch warnings
  * nvme: Fix linux kernel check patch errors
  * plugins/ocp: Add telemetry-log command to OCP plugin
  * plugins/ocp: Add OCP set latency monitor feature command
  * plugins/ocp: Fix endianness in Latency Monitor Log output
  * plugins/ocp: Add missing fields in Latency Monitor Log
  * plugins/ocp: Fix typos in Latency Monitor Log
  * plugins/ocp: Reorganize OCP plugin source code
  * tests: Add tests for controller reset
  * plugin/solidigm: Added vs-internal-log command.
  * nvme: Add nvme_show_perror to use instead of perror for json output
  * nvme-print-json: Use vasprintf instead of vsnprintf to allocate string
  * nvme: fix rnlpt to_string() values.
  * nvme: fix io_mgmt args parse error
  * fdp: set-events feature is saveable
  * fabrics: Return errno value as negative
  * fabrics: Fix linux kernel check patch errors and warnings
  * nbft: add the nbft show plugin
  * nbft: added NBFT v1.0 table support (jsc#PED-1449)
  * nbft: make lookup_ctrl function public
  * nvme: Fix indentation errors around nvme show error API
  * nvme: Check validate output format err value instead of flags
  * nvme: Use nvme show error API to outptu stderr messages for json format
  * util: Check output format json for json error message output
  * nvme-printf: Add show error function for nvme list command json output
  * nvme: Add zns specfic field for create ns
  * nvme: Add ns-mgmt host software specified fields
  * nvme: Add dtype, dspec on write-zeroes, write-uncor
  * nvme-print: Add new fields print on id directive
  * nvme-print: Add VWCNP on NSFEAT of id-ns
  * nvme: Fix format command to skip to reread NSID all block device
  * plugins/solidigm: Fixes and clean-up of Telemetry parse code. Fixed parsing of 64 bit values. Fixed COD field name. Fixed compilation warnings when compiling for 32 bit. Added missing free(). Consolidated single entry function to telemetry parser. Consolidated use of integer types.
  * doc: Documentations maintenance changes
  * doc: Add nvme-mi-send command documentation
  * doc: Add nvme-mi-recv command documentation
  * doc: Add clear-pcie-correctable-error-counters command documentation
  * doc: Add eol-plp-failure-mode command documentation
  * plugins/solidigm: Add firmware activation history log to Solidigm plugin
  * plugins/ocp: Add firmware activation history log to OCP plugin
  * nvme-print: Use enum nvme_print_flags for nvme_show_id_ctrl
  * nvme: Add support for NVMe-MI send command
  * nvme: Use stdout for passthru and submit_io commands success messages
  * nvme: Fix passthru command function indentation errors
  * nvme: Add support for NVMe-MI receive command
  * fabrics: fix fc config JSON file handling (bsc#1210089)
  Refresh 0100-harden_nvmf-connect@.service.patch
- Fix install path for nvme-regress script</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420800">- Enable test during build (bsc#1207686)
- Drop minimum version meson dependency
- Add asciidoc dependency
- Build documentation when requested</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696852800">- Use fixed timestamps for documentation allowing reproducable builds
- Announce nvmeof-boot-support support via Provides
- Filter rpmlint warnings for systemd-service-without-service_ macros
- Add missing service files for NBFT feature
  * add 0001-fabrics-autoconnect-add-service-unit-for-connecting-.patch
  * add 0002-fabrics-add-udev-rule-to-avoid-renaming-nbft-interfa.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1697112000">- Add missing jsc# and bsc# tracking entries in change log.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1702987200">- Update to version 2.7:
  * nvme-print-json: include vs for identify namespace
  * nvme-print-stdout: enhance connect message (bsc#1219086)
  * fabrics: fix connect error if hostid file does not exist (bsc#1219086)
  * fabrics: fix invalid output format error during nvme connect (bsc#1219086)
  * wdc: Fix vs-smart-add-log Command for SN650 and SN655
  * nvme: restric hmac options for gen-tls-key (bsc#1219086)
  * wdc: Fix UUID index fallback mechanism
  * plugins/ocp: Add OCP Telemetry String log page, Telemetry log page
  * completions: Add bash completions for telemetry string log page
  * plugins/solidigm: Added OCP 2.0 compatibility version command
  * plugins/solidigm: Added OCP 2.0 vs-drive-info command.
  * plugins/ocp: Fix printing order of various Latency Monitor Log buckets
  * nvme: validate output format split status from flag return value
  * nvme: simplify cleanup_nvme_dev()
  * cleanup: remove unused cleanup_charp()
  * wdc: Add support for SN861 2nd pci device id
  * nvme: replace libhugetlbfs with mmap and madvise
  * util/mem: move alloc helper to util section
  * nvme: auto cleanup filedescriptors
  * nvme: auto cleanup buffers
  * nvme: return error code in get_persistent_event_log
  * nvme: sanitize nvme-gen-tls-key
  * nvme: print out the resulting TLS identity for 'nvme check-tls-key'
  * nvme: Add version '1' identifier for nvme-gen-tls-key
  * subprojects/libnvme: update wrapper for TP8018
  * plugins/solidigm: Added re_sku_count smart atrribute
  * doc: Fix nvme-connect manpage --application option string
  * plugins/ocp: changed command clear-pcie-correctable-error-counters to match OCP 2.0 spec.
  * plugins/solidigm: Added command to clear PCIe Correctable Error Counters according to OCP 2.0
  * plugins/ocp: Reorganized clear feature code for better reuse
  * nvme: fixup length calculation for 'nvme gen-tls-key --secret'
  * doc: remove invalid hostkey info for --dhchap-secret
  * nvme-print-json: use human helper everywhere
  * nvme-print-json: remove obj_print helper
  * plugins/ocp: update nvme_show_select_result call
  * mailmap: only show contributer's name
  * nvme-print-json: Change to report status and message in array
  * nvme-print-json: Change to report feature select in array
  * nvme-print-json: Change to report error and data in array
  * nvme-print-json: Add show_init/finish calls to report features in array
  * nvme-print: Add nvme_show_error_status() to merge error message and status
  * nvme-print-json: Use r instead of root and use obj_add_***(r, ..., ...)
  * nvme-print-json: Delete static const char string global variables
  * nvme-print-json: Add remaining controller registers readable format
  * nvme-print-json: Add readable format cap, vs, cc, csts, nssr and crto registers
  * nvme-print-json: Combine duplicated json key and val string variables
  * nvme-print-json: Replase json_array_add_value_string() to array_add_str()
  * nvme-print-json: Replase json_object_add_value_uint128() to obj/root_add_uint128()
  * nvme-print-json: Replase json_object_add_value_object() to obj/root_add_obj()
  * nvme-print-json: Replase json_array_add_value_object() to array_add_obj()
  * nvme-print-json: Replase json_object_add_value_array() to obj/root_add_array()
  * nvme-print-json: Replase json_object_add_value_uint() to obj/root_add_uint()
  * nvme-print-json: Replase json_object_add_value_int() to obj/root_add_int()
  * nvme-print-json: Replase json_object_add_value_uint64() to obj/root_add_uint64()
  * nvme-print-json: Replase json_object_add_value_string() to obj/root_add_str()
  * nvme-print-json: Update feature_show_fields_*** to use root/obj_add_***()
  * nvme-print-json: Update lba_status_log to use root_add_***() and obj_add_***()
  * nvme-print-json: Replace lba_status_log printf() to root_add_result()
  * nvme-print-json: Add list_item print function
  * nvme-print-json: Add lba_status_info print function
  * nvme-print-json: Add lba_range print function
  * nvme-print-json: Add id_ctrl_rpmbs print function
  * nvme-print-json: Unify json_list and jroot object names to root
  * nvme-print-json: Add json_zns_changed print function
  * nvme-print-json: Add root_add_result() to output result message
  * nvme-print-json: Split persistent_event_log print function
  * nvme-print-json: Remove unnecessary string newline code
  * nvme-print-json: Replace effects_log_list print to use json_print()
  * nvme-print-json: Print persistent_event_log no log data result correctly
  * nvme-print-json: Add static "result" and "erorr" strings variables
  * nvme-print-json: Add single_property printf function
  * nvme: Replace get feature command stderr output to nvme_show_error()
  * nvme-print-json: Change d() output to use d_json()
  * nvme: Fix get-feature command mixed stdout and json outputs
  * nvme-print-json: Add remaining feature fields print functions
  * nvme-print-json: Update formatting and codying style
  * build: Add -std=c99 to CFLAGS for muon on CentOS 7
  * fabrics: add udev rule to avoid renaming nbft interfaces
  * fabrics: autoconnect: add service unit for connecting NBFT subsystems
  * fabrics: autoconnect: explicitly express module dependency
  * Updates to codeql config
  * libnvme-wrap: exit on VOID_FN lookup failure
  * plugins/ocp:Added the ocp C6h feature api
  * plugin/ocp_fid_c6h:Added the ocp C6h feature api
  * nvme-copy: support cross-namespace copy
  * nvme/plugins: fix mismatch operator
  * nvme: fix overflow possiblity
  * nvme: reduce identify cmd issue
  * nvme: allow set-features to take input from stdin
  * Fix common misspellings from codespell project
  * nvme-print: Correct to print correct ascii character string length
  * print-stdout: print Host Behavior Support correctly
  * build: Bump libnvme wrap
  * plugins/solidigm: Added support for temperature statistics log page
  * Add support for codeql sweeps
  * doc: Add virt-mgmt command
  * doc: Add id-uuid command
  * doc: Add list-secondary command
  * doc: Add id-ns-granularity command
  * doc: Add nvme commands --output-format and --verbose options
  * completions: Add nvme-mi-recv nad nvme-mi-send commands completions
  * completions: Change short option -o and -v duplicated to upper case
  * doc: Change short option -o and -v duplicated to upper case
  * nvme: Change short option -o and -v duplicated to upper case
  * nvme: Change phy-rx-eom-log command to use NVME_ARGS instead
  * plugins/memblaze: Add smart-log-add and latency-feature functions
  * plugins/solidigm: internal-logs Telemetry auto detect last data area.
  * nvme: Change to use NVME_FLBAS_META_EXT() macro to check flbas value
  * nvme-print-json: Add host memory buffer and timestamp features print functions
  * nvme-print-json: Add feature fields print functions
  * nvme-print-json: Add TMPTH feature print function
  * nvme-print-json: Add show_feature_fields print function
  * nvme-print-json: Add select_result print function
  * nvme-print-json: Use json_print to print and free object
  * nvme-print-json: Add lba_status print function
  * nvme-print-json: Combine variable definition and setting value
  * nvme-print-json: Add id_iocs print function
  * nvme-print-stdout: Fix coding style errors
  * nvme-print-json: Add directive print function
  * nvme: Fixed segmentation fault when getting host initiated telemetry
  * plugins/wdc: enhanced SN861 device support
  * plugins/wdc: cleanup line lengths
  * nvme: do not include meta data for PRACT=1 and MD=8
  * nvme: use block-count arg if provided
  * build: bump libnvme to disable tests option
  * build: Add static build on CI target
  * nvme-print: Add nvme_zns_start_zone_list() API function
  * nvme-print: Add nvme_zns_finish_zone_list() API function
  * nvme-print-binary: Set list function to NULL if unimplemented
  * nvme-print-json: Change order list functions and set NULL if unimplemented
  * nvme-print-stdout: Fix to set stdout_list_item print function missed
  * plugins/solidigm: log page name extraction using nvme_log_to_string function
  * nvme-print: Added missing logpage names in nvme_log_to_string function
  * udev-rules: rename netapp udev rule (bsc#1219086)
  * udev-rules: set ctrl_loss_tmo to -1 for ONTAP NVMe/TCP (bsc#1219086)
- Remove upstreamed patches
  * remove 0001-fabrics-autoconnect-add-service-unit-for-connecting-.patch
  * remove 0002-fabrics-add-udev-rule-to-avoid-renaming-nbft-interfa.patch
- Update spec file
  * remove libhugetblfs depedency
  * update NetApp udev rule file name</changelog>
  <changelog author="daniel.wagner@suse.com" date="1703160000">- Update to version 2.7.1:
  * nvme-print-json: Revert field name changes (bsc#1218306)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1707912000">- Update to version 2.8:
  * nvme-print-json: append array object in json_support_log
  * sed: Add plugin for basic SED Opal operations (jsc#PED-5061)
  * don't include newlines in already wrapped text
  * nvme: do not include meta data for PRACT=1 and MD=8 (version 2)
  * create-ns: align the namespaces to 1Mib boundaries when using SI suffixes
  * doc: Fix config-schema.json's URL
  * plugins/solidigm: Compressing vs-internal-log log files into zip file.
  * nbft: do not issue an error if ACPI tables are missing
  * nbft: fixup include for libnvme
  * doc: Fix short option name for cfg-file
  * completions: added Solidigm plugin to autocomplete scripts
  * nvme: Remove unused cfg argument from NVME_ARGS() macro
  * nvme: fix directive receive identify offsets
  * nvme-fabrics: enable option 'concat'
  * build: Update libnvme wrap
  * plugins/wdc: Add Debug Log Collection Support
  * nbft: fix tcp/dhcp address fallback retry (bsc#1218873)
  * nvme: use correct telemetry log size
  * nvme-print: fix typo in list verbose output (bsc#1219086)
  * nvme: print inserted tls key for check-tls-key (bsc#1219086)
  * plugins/wdc: Plugin fixes and updates
  * fabrics: move hostid/hostnqn warnings to verbose level (bsc#1219086)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737600">- Update to version 2.9:
  * nvme-print: expand the maximum field length to prevent misalignment
  * plugins/spdk: plugin to list SPDK subsystems
  * nvme-print: check if controller belong to SPDK
  * plugins/spdk: plugin to list SPDK controllers
  * nvme-print-stdout: fix ASQB, ACQB and BMBBA prints
  * build: bump libnvme wrap
  * nvmf-autoconnect: fix string encoding
  * nvme: identify primary ctrl do not accept nsid
  * nvme-wrap: remove unused nvme_cli_get_log_ana_groups()
  * nvme-print-json: use admin queue attributes definitions
  * nvme-print-json: use CSTS definitions
  * nvme-print-stdout: use POWER_OF_TWO macro
  * nvme-print-json: use controller configuration definitions
  * nvme-print-json, nvme-print-stdout: add tertiary version number
  * nvme-print-json: use NVME_MAJOR and NVME_MINOR definitions
  * nvme-print-json: use NVME_BOOT_PARTITION_INFO field definitions
  * nvme-print-json: add support telemetry log create event in PEL
  * nvme-print-json: add support set feature event in PEL
  * nvme-print-json: add obj_d() function
  * nvme-print-json: add obj_add_uint_0nx() function
  * meson.build: Fix spelling of sed-opal.h filename
  * sed_opal: Only build when we really have sed_opal headers
  * nvme: fix error path if write() fails in get_telemetry_log()
  * plugins/solidigm: Additional LID for temperature statistics.
  * plugins/solidigm: Improved Solidigm UUID index detection.
  * nvme-print-stdout: Add CSTS.ST register stdout print
  * nvme-print-stdout: Use NVME_CMIC definitions
  * nvme-print: Use NVME_UNIT definitions
  * nvme-print-stdout: Use NVME_CMBMSC/STS/EBS/SWTP definitions
  * plugins/ssstc: add a new plugin for SSSTC driver
  * nvmf-connect: systemd hardening effort
  * plugins/ocp: Adjusted variable type size carrying UUID index to 8 bit.
  * nvme: fix security buffer allocation size
  * nvme: Change fw-download xfer initialization to set 0
  * nvme: Add fw-download warning message for FWUG alignment error
  * plugins/ocp: Split ocp_get_uuid_index() into find and get functions.
  * nvme: fix mem leak in multiple key related functions (bsc#1223331)
  * fabrics: fix mem leak in nvmf_check_hostid_and_hostnqn() (bsc#1223331)
  * nvme-print-stdout: Use NVME_BPRSEL definitions
  * nvme-print-stdout: Use NVME_BPINFO definitions
  * nvme-print-stdout: Use NVME_CMBSZ definitions
  * nvme-print-stdout: Use NVME_CMBLOC definitions
  * Revert "logging: fix error handling for ioctl passthru wrappers"
  * fabrics: align identify command payload
  * ocp: Unify line start spacing as tabs
  * ocp: support OCP DSSD Async Event Config feature
  * nvme: Add support for get-reg and set-reg commands
  * nvme-print-json: Add register print functions
  * nvme-print-stdout: Add register print functions
  * nvme-print: Add register print functions
  * nvme: Refactor mmap_registers to add writable parameter
  * nvme-print: Change PMRSZU string function as unit string
  * nvme-print: Refactor CMBLOC and PMRSTS registers function
  * logging: fix error handling for ioctl passthru wrappers
  * nbft: Fix scandir() error check
  * nbft: Refactor connection attempt out
  * nvme-print: Use EOM optional data present macros changed
  * nvme-print: Print cntlid number for controller (bsc#1224024)
  * nvme: check-tls-key fails despite having hostnqn file (bsc#1223331)
  * nvme: print retained key for gen-tls-key's -i option too (bsc#1223331)
  * fabrics : allow host to create duplicate connections to target
  * fabrics: Fix fast_io_fail_tmo option
  * nvme-print-stdout: use admin queue attributes definitions
  * nvme-print-stdout: use CSTS definitions
  * nvme-print-stdout: use controller configuration definitions
  * nvme-print-stdout: use NVME_MAJOR and NVME_MINOR definitions
  * nvme-print-stdout: use FDP configuration attributes definitions
  * nvme: add new function 'tls_key' (bsc#1226197)
  * nvme: use library functions for importing and exporting TLS keys (bsc#1216982)
  * nvme: extend error message for ns scan failures
  * nvme-print-json: Bugfix status json key of sanitize-log
  * sed: update SED password when initalizing (bsc#1222168)
  * plugins/memblaze: add performance stats
  * plugins/memblaze: fix code mis-type error
  * plugins/memblaze: code refactor on applying __packed on more structs
  * plugins/memblaze: code refactor on using cleanup_nvme_dev
  * nvme: Fix to cleanup free raw_secret memory allocated
  * plugins/memblaze: code-format on leading indent and align
  * plugins/wdc: Fix narrow index variable type in for loop to __u32
  * plugins/wdc: Whitespace changes
  * nvme: Delete unused nvme root scanned
  * ocp: support OCP 2.5 Set Telemetry Profile feature
  * nvme: Don't seg fault if given device is not char/block device
  * nbft: Include SSNS index in error messages (bsc#1222026)
  * nbft: Pause logging for expected connection failures (bsc#1222026)
  * nbft: Silence connection failures for unavailable SSNS (bsc#1222026)
  * nbft: Fix 'verbose' argument type (bsc#1222026)
  * plugins/nbft: Implement verbose logging
  * plugins/nbft: Print the new SSNS flags
  * nbft: Fix uninitialized variable
  * plugins/nbft: Fix uninitialized variables
  * plugins/sed: Fix uninitialized variable
  * nvme-print-stdout: Fix uninitialized variable
  * nvme-print-json: Fix uninitialized variable
  * build: Switch default meson buildtype to 'debugoptimized'
  * nvme: do not scan topology when mmaping registers
  * nvme-print-stdout: Use NVME_BOOT_PARTITION_INFO field definitions
  * nvme-print-stdout: Use NVME_GET for MI commands supported and effects CSP
  * nvme-print-stdout: Use NVME_GET for FID supported and effects FSP
  * nvme-print-stdout: Use NVME_SET_FEAT_EVENT register definitions
  * nvme-print: Add PEL EHAI port identifier type printf function
  * build: bump libnvme wrap
  * ocp: fix for power-state argument checking
  * nvme: do not issue warning when nvme_core module is not loaded
  * wdc: Review changes and build fixes
  * wdc:  Fix timestamp displayed by vs-firmware-activate-history command
  * logging: Split to output ioctl latency by log info level (bsc#1231668)
  * nvme-print-stdout: Change hexadecimal value 0x prefix to use %#x
  * nvme-print-stdout: Fix LBA status DSLBA output as hexadecimal
  * nvme-print-stdout: Split line length exceeded 100 columns
  * nvme-print-stdout: Use NVME_PMRMSC register definitions to print
  * nvme-print-stdout: Use NVME_PMRSWTP register definitions to print
  * nvme-print-stdout: Use NVME_PMREBS register definitions to print
  * nvme-print-stdout: Use NVME_PMRSTS register definitions to print
  * nvme-print-stdout: Use NVME_PMRCTL_EN register definition to print
  * nvme-print-stdout: Use NVME_PMRCAP register definition to print
  * doc: Fix admin and io passthru cdw parameters description
  * doc: Add get-feature cdw11 and set-feature cdw12 parameters
  * micron-nvme: Unuse stat() to check if strMainDirName exists
  * doc: Fix get-property and set-property offset and value descriptions
  * doc: Fix documentation file mode 100755 to 100644
  * nvme-print-stdout: Fix channel configuration descriptors pointer
  * nvme-print-stdout: Check sscanf return value
  * nvme-print-stdout: Fix linux kernel check patch errors
  * nvme: Delete unusual fallthrough for cases have no body
  * nvme: Delete duplicated semicolon
  * nvme-print, common: Fix for whitespace change
  * logging: output ioctl debugging info (bsc#1231668)
  * nvme: track verbose level (bsc#1231668)
  * logging: track log level globally
  * logging: move logging code to a new file
  * nvme: update include for libnvme
  * nvme: remove unused declaration
  * build: bump libnvme wrap
  * nvme-netapp: add nspath tlv handling (bsc#1220971)
  * rpm: Add missing rule and service files
  * nvme-print-json, nvme-print-stdout: Use CHAR_BIT definition
  * nvme-print-stdout: Delete duplicated if condition checking line
  * ocp: Fix timestamp displayed by fw-activate-history command
  * wdc: Add support for the get-drive-status command to SN861
  * nvme-print: Fix nvme_host_metadata_type_to_string() indentation errors
  * nvme-print: Add PEL RCI port identifier type printf function
  * nvme-print-stdout: Use persistent event log RCI definitions
  * build: bump libnvme wrap
  * nvme: Add show-regs and get-property commands NSSD print outputs
  * nvme-print: print more details in ns-descs verbose output (bsc#1223331)
  * Revert "nvme-print-json: remove obj_print helper"
  * sed: Confirm entered password before initialization.
- drop systemd service harden file, upstream ships this patch.
  * remove 0100-harden_nvmf-connect@.service.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737601">- Update to version 2.9.1:
  * plugins/spdk: drop the plugin</changelog>
  <changelog author="daniel.wagner@suse.com" date="1722600000">- Update to version 2.10:
  * sed: Fix parsing of Discovery0 features
  * fabrics: avoid potential segfault in nvmf_dim() (bsc#1231668)
  * nvme: avoid segfault in show-topology (bsc#1226197)
  * fabrics: do not leak nvme_ctrl_t object on connect
  * nvme: extend help message when mmap regs fails
  * nvme: return -ENXIO value to open device if errno not set
  * wdc: OCP 2.5 Log Page Updates
  * fabrics: drop --quiet alias -S
  * fabrics: drop --disable-sqflow alias -d
  * fabrics: check if json config is existing (bsc#1231668)
  * plugins/ocp: fix UAF when printing telemetry log
  * nvme-print-stdout: fix persistent-event-log set feature event output
  * fabrics: do not report error when no modules are loaded when disconnecting
  * fabrics: use cleanup helper where possible
  * fabrics: print an error for ENOENT too
  * plugins/virtium: use time_t for time_stamp values
  * completions: add ocp set-error-injection command
  * doc: add ocp set-error-injection command
  * ocp: add set-error-injection command
  * nvme: use argconfig_parse_seen to check conditions
  * nvme: use proper mask to get correct lbafu value
  * utils: fix print formatting option
  * utils: cleanup includes in utils.h
  * utils: add missing header
  * nvme-print: Added print for two new fields for HMB feature
  * plugins/micron: Move OCP internal log parsing from Micron to OCP Plugin.
  * fabrics: remove unused _discover_from_json_config_file() argument
  * nvme: avoid unnecessary dup() + close() in io_mgmt_send()
  * util: remove unnecessary NULL check in cleanup_nvme_root()
  * nvme: use argconfig_parse_comma_sep_array_u16() in attach-ns
  * util: avoid duplication in argconfig_parse_comma_sep_array*()
  * util: remove redundant loop condition in argconfig_parse()
  * util: introduce is_null_or_empty() to avoid strlen()
  * util: reduce allocation sizes in argconfig_parse()
  * util: consolidate call paths to argconfig_parse_type()
  * util: reduce complexity of argconfig_parse_val()
  * util: reduce arguments passed to argconfig_parse_type()
  * util: remove empty default case in argconfig functions
  * util: remove unnecessary parentheses in argconfig_parse_type()
  * util: remove redundant cast in argconfig_parse_type()
  * util: inline argconfig_parse_byte()
  * util: remove redundant NULL check in argconfig_print_help()
  * util: use cleanup to avoid goto in argconfig_parse()
  * util: make argconfig_set_opt_val() a void function
  * util: remove argconfig_parse_val() declaration
  * util: remove argconfig CFG_SIZE type
  * wdc: Update and refactor the C0h log page parsing
  * ccan: Add freed pointer checking to delete strset member
  * fabrics: connect all hosts in config.json (bsc#1226216)
  * fabrics: refactore discover from json config (bsc#1226216)
  * fabrics: first read config before topology scanning (bsc#1226216)
  * fabrics: use helper to lookup default hostnqn/hostid (bsc#1226216)
  * fabrics: extend already connected message (bsc#1226216)
  * fabrics: use cleanup helper to free nvme root object
  * nvme: check MD size with PI size when PRACT set to 1
  * nvme-print: add new field added in TP4090
  * nvme-print-binary: add effects-log command output missed
  * completions: add ocp get-error-injection command
  * doc: add ocp get-error-injection command
  * ocp: add get-error-injection command
  * ocp: fix eol-plp-failure-mode command sel option value
  * doc: fix ocp eol-plp-failure-mode select short option
  * ocp: set UUID index for eol-plp-failure-mode command to get
  * nvme: fix verbose logging (bsc#1231668)
  * doc: fix micron ocp telemetry log parse title
  * nvme-rpmb: send RPMB_REQ_READ_RESULT for authentication key programming
  * plugins/micron: Add support for OCP telemetry log parsing
  * ocp: Update Plugin Version
  * nvme: fix lbaf inuse to use 6:5 bits
  * ocp: use NVME_ARGS macro definition by eol-plp-failure-mode command
  * nvme: extern NVME_ARGS macro definition
  * nvme: use _cleanup_free_ type buffer for get-feature command
  * plugins/ocp: Update telemetry string log page (C9h)
  * nvme-print-json: add get-feature command fahrenheit temperature output
  * nvme: add get-feature and id-ctrl commands fahrenheit outputs
  * nvme: delete smart-log command fahrenheit option
  * nvme-print: check locale to use temperatures in degrees fahrenheit
  * completion: add support for tls-key (bsc#1226197)
  * doc: add tls-key --revoke documentation (bsc#1226197)
  * doc: fix tls-key --keyfile shorthand (bsc#1226197)
  * nvme: add support to revoke TLS key (bsc#1226197)
  * nvme: return error code/message for TLS commands (bsc#1226197)
  * nvme: factor out import key function (bsc#1226197)
  * nvme: use cleanup helper to close file descriptor (bsc#1226216)
  * nvme-rpmb: use cleanup helper for STREAM objects
  * fabrics: use cleanup helper for STREAM objects
  * nvme: use cleanup helper for STREAM objects (bsc#1226216)
  * nvme: strip newline when parsing TLS key files (bsc#1226197)
  * nvme: use stdout for exporting TLS keys (bsc#1226197)
  * nvme: change _cleanup_file_ to _cleanup_fd_ (bsc#1226197)
  * common.h: Avoid using unsupported load/store instructions in arm64 VMs
  * ocp: OCP 2.5 Telemetry DA 1 and 2 Parsing Updates
  * nvme-print-stdout: refactor subsys config (bsc#1231668)
  * wdc: Fix compiler warning.
  * nvme: add flags type nvme_print_flags_t
  * nvme-print: Use 'unsigned int' instead of 'unsigned'
  * nvme: update parse_args() return value handling
  * nvme-print: Fix nvme_show_smart_log indentation error
  * nvme-print-stdout: Fix stdout_smart_log indentation error
  * nvme-print-binary: Fix binary_smart_log indentation error
  * completions: add smart-log command fahrenheit option
  * doc: Add smart-log command fahrenheit option
  * nvme: Add smart-log command fahrenheit option
  * nvme-print: add PEL vendor specific and TCG defined events strings
  * nvme-print: Print PEL reserved event string
  * completions: Add timeout option bash completions
  * completions: Add timeout option zsh completions
  * completions: Add io-mgmt-recv/send commands zsh completions
  * completions: Add /dev/nvme argument missed
  * completions: Change fw-activate command name to fw-commit
  * completions: Fix _nvme indentation errors (bsc#1226197)
  * completions: Fix bash-nvme-completion.sh indentation errors (bsc#1226197)
  * doc: Add nvme commands timeout option
  * nvme: Add support for delete-ns command timeout option
  * nvme: Change NVME_DEFAULT_IOCTL_TIMEOUT to use nvme_cfg timeout
  * nvme: Add nvme_cfg timeout default option
  * nvme: Add nvme_cfg global variable for NVME_ARGS default options
  * nvme: add helper function to get pif and sts value
  * nvme: choose PIF from QPIF if QPIFS supports and PIF is QTYPE
  * nvme: use libnvme's atomic ANA log page fetch
  * nvme: fix maximum ANA log page length calculation
  * nvme-print-json: add missing va_end()
  * fabrics: skip namespace scan for fabric commands
  * nvme-print: print the new fields added in TP4141a
  * plugins/ocp: underflow + index fixes for telemetry
  * plugins/ocp: Add ocp TCG Configuration Log Page
  * nvme-print-stdout: Add helper function to print PIF in string form
  * doc: fix format command info
  * nvme: telemetry: report the correct error if the ioctl() fails.
  * nvme-print: add the cancel opcode to the nvme_cmd_to_string() list
  * doc: fix ocp format issues
  * nbft: Reuse existing discovery controller
  * nbft: Skip SSNS records pointing to well-known discovery NQN
  * nbft: Perform actual discovery
  * util/cleanup: Add cleanup for struct nvme_fabrics_uri
  * fabrics: Make some symbols public (bsc#1226216)
  * nvme-print-stdout: fix format index in stdout_nvm_id_ns
  * plugins/solidigm: Added workload-tracker command
  * plugins/solidigm: Added extra VU fields to id-ctrl
  * nvme-print-stdout: print MEM bit of CTRATT field
  * nvme-print-stdout: fix to print the log line by line
  * fabrics: Always pass hostid and hostnqn (bsc#1226216)
  * plugins/ssstc: Replace __uint16_t with uint16_t
  * plugins/solidigm: Added log pages to vs-internal-logs
  * sed: perform a tper revert after lsp revert
  * plugins/nbft: Use default library logging
  * docs: Add missing OCP plugin docs to meson
  * ocp: Switch OCP plugin to use semantic versioning
  * nvme: fix fw-commit MUD result message
  * sed: only re-read partition table after unlock.
  * nvme-print-json: Fix LBA status DSLBA output as hexadecimal
  * nvme-print-json: Use NVME_PMRxxx register definitions to print
  * nvme-print-stdout: Fix PMRWBM register name
  * nvme-print-json: Fix channel configuration descriptors pointer
  * nvme-print-json: Fix linux kernel check patch errors
  * nvme-print: Added "Command and Feature Lockdown" string to LID 0x14
  * plugins/innogrit: `u_char` -&gt; `unsigned char`
  * nvme: Use C99 types for uint32_t
  * nvme-print-stdout: print frl1/2/3 values for zns id-ns
  * solidigm: Eliminate &lt;linux/limits.h&gt;
  * nvme: remove double free in persistent-event-log
  * ocp: Add Get DSSD Power State Feature (FID: C7h)
  * nvme: initialize default library logging
  * nvme: use cleanup helper for nvme_root_t objects (bsc#1226197)
  * doc: add nvme connet ctrl-loss-tmo description
  * plugins/solidigm: Automatic enabling Data Area 4 when retrieving Telemetry.
- always build the docs
  * add 0001-docs-rename-ocp-unsupported-req-log-file.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1730376000">- Update to version 2.11:
  * docs: update check-tls-key arguments
  * nvme: add support to append TLS PSK to keyfile for check-tls-key
  * nvme: return correct error code in append_keyfile
  * docs: nvme-id-doman: dom{ia =&gt; ai}n
  * ocp: fix latency monitoring data structure entry endian
  * ocp: fix TCG configuration log endian
  * ocp: fix firmware activation history entry endian
  * docs: update gen-tls-key arguments
  * nvme: add support to add derive TLS PSK to keyfile
  * nvme: rename identity to version
  * nvme: set file permission for keyfile to owner only
  * nvme: export tls keys honoring version and hmac
  * nvmf-keys: add udev rule to import tls keys
  * docs: update TLS options
  * fabrics: add support to connect to accept a PSK command line
  * fabrics: add support to connect to accept a configuration
  * nvme: use unsigned char for hmac and identity
  * nvme-print: Add Sanitize Media Verification Event in PEL log
  * netapp-ontapdev: add err msg for no ontapdevices
  * netapp-smdev: add err msg for no smdevices
  * doc: Add sanitize command emvs option
  * ocp: combine to use GUID length definitions
  * nvme: update tls_key() handling
  * nvme-print-stdout: print VERS bit of SANICAP field
  * nvme: add EMVS support to sanitize command
  * ocp: remove callback function cast
  * doc: added commit conventions to contribution guidelines
  * ocp: fix ocp-print-stdout.c indentation error
  * ocp: fix ocp-nvme.c indentation errors
  * ocp: build ocp-nvme.c and ocp-telemetry-decode.c without json
  * ocp: split TCG configuration log print codes
  * ocp: split telemetry string log print codes
  * ocp: split device capabilities log print codes
  * ocp: split error recovery log print codes
  * ocp: split unsupported requirement log print codes
  * ocp: split latency monitor log print codes
  * ocp: move ocp telemetry log print function into ocp-print
  * ocp: split smart extended log print codes
  * ocp: split ocp-fw-activation-history print codes
  * plugins: update meson.build file to always build ocp plugin
  * ocp-print: move json code into separate files
  * nvme-print-json: display only verbose output
  * ocp-nvme: ocp plugin version update
  * nvme-print: print KV command set page header
  * doc: show where self-test results can be found
  * plugins/memblaze: fix a wrong id on smart-log-add
  * plugins/dapustor: smart-log-add fix
  * plugins/sed: add sid password change (bsc#1229677)
  * plugins/solidigm: Automatic retry smaller log chunk size.
  * ocp-nvme: Add LMDATA-37 for Latency Monitor Log
  * ocp-nvme: remove ocp log page version checking
  * wdc: Fix for Reading WDC C2 Vendor Unique Log Page
  * ocp: Fixes for OCP 2.5 Telemetry DA1 FIFO Event Parsing
  * nvme-print-json: update JSON verbose output for nvm-id-ctrl (bsc#1231668)
  * wdc: Add Support for SN5100S
  * nvme: Support show-regs for nvmeof
  * ocp: fix option handling in internal-log
  * Documentation: Added solidigm plugin commands
  * wdc: add support for SNTMP drive
  * nvme-print: print NSSES field of CAP register
  * ocp: fix GUID output
  * nvme-print-json: print controller register values in offset order
  * nvme-print-json: print CMBEBS and CMBSWTP in json format
  * nvme-print-stdout: update changed-ns-list-log output (bsc#1231668)
  * nvme: fix uninitialized value in error-log (bsc#1231668)
  * nvme: fix to convert metadata size to native byte order
  * nvme-print: fix error information log page endianness error
  * completions: add get-feature command changed option
  * doc: add get-feature command changed option
  * nvme: separate get NVME_GET_FEATURES_SEL_CHANGED definition
  * nvme: use NVME_GET_FEATURES_SEL definitions
  * nvme-print-stdout: use NVME_CTRL_OAES definitions
  * completion: add ocp set-telemetry-profile to zsh
  * completion: add solidgm work-tracker binding
  * plugins/solidigm: Added Workload Tracker Triggers and Wall Time
  * ocp: include util/types.h to use nvme_uint128_t
  * ocp: fix to set log data pointer allocated
  * nvme: use NVME_CHECK() to check get features select field value
  * ocp: split ocp-hwcomp log
  * completions: add ocp hardware-component-log command
  * doc: add ocp hardware-component-log command
  * ocp: add hwcomp log json output
  * ocp: add hwcomp log command list option
  * ocp: add hwcomp log command comp-id option
  * ocp: add hwcomp dummy definition
  * ocp: add support for hwcomp log page
  * nvme: use NVME_CTRL_FNA definitions
  * netapp-smdevices: print single device output too (bsc#1231668)
  * netapp-smdevices: segregate print routines (bsc#1231668)
  * Add Support for new SN655 PCI Device ID
  * nvme-print-json: extern json object add functions
  * ocp: add SMART / health information extended log page version 4
  * ocp: add error recovery log page version 3
  * ocp: add get-enable-ieee1667-silo command
  * fabrics: fix incorrect access filename check (bsc#1231668)
  * nvme: use NVME_GET_FEATURES_SEL_SUPPORTED definition
  * nvme-print-json: use _cleanup_free_
  * plugins/solidigm: fix use after free.
  * ocp: fix ocp-nvme.c coding style errors
  * ocp: Change C9 function names to use c9 instead
  * ocp: fix to return c9 log page data error to open file
  * ocp: fix to set return value to get c9 log page data
  * nvme: update nvme_insert_tls_key_versioned() return handling (bsc#1231668)
  * nvme-print-stdout: add print_array function
  * logging: add print_info function
  * util: extern uint128_t_to_double() function
  * nvme-print: sanitize error-log output (bsc#1231668)
  * plugins/solidigm : Fixing vs-internal-log to generate identify per allocated namespace.
  * nvme-print: added new fields for nvm_id_ns
  * plugins/fdp: bugfix error check to validate output format
  * plugins/wdc: fix json output for vs-nand-stats
  * nvme-print-stdout: use NVME_FEAT util definitions
  * nvme-print: update subsys verbose outputs (bsc#1231668)
  * nvme-print: add subsystype to the list-subsys output (bsc#1231668)
  * netapp: print output for single device too (bsc#1231668)
  * netapp: segregate the print routines (bsc#1231668)
  * netapp: fix uninitialized value from heap error (bsc#1231668)
  * nvme-print: print the new fields added in TP4142
  * plugins/innogrit: modify for project tacoma
  * wdc: Add Support for new SN-861 PCI device id
  * nvme-print: use LC_MEASUREMENT to check fahrenheit temperature
  * nvme-print: use Completion Condition enum
  * completions: add the zsh completion of the dapustor plugin
  * nvme-print: print the new fields added in TP4165
  * plugins/dapustor: dapustor smart-log-add update
  * nvme-print-stdout: Added print for new field CSER (TP4167)
  * plugins: Add a new DapuStor plugin and the smart-log-add command
  * docs: rename ocp-unsupported-req-log file
- Drop build fix patch
  * remove 0001-docs-rename-ocp-unsupported-req-log-file.patch
- Install 70-nvmf-keys.rules to the default udev rules directory</changelog>
  <changelog author="dwagner@suse.de" date="1741089600">- Update to version 2.11+17.g6e09119:
  * nvme: check for valid output format (bsc#1237275)
  * nvme: make get-feature JSON output print everything (bsc#1237275)
  * nvme: make -v output consistent with -H output for nvme get-feature (bsc#1237275)
  * nvme: make -v output consistent with -H output for nvme get-property (bsc#1237275)
  * nvme-print-stdout: add details in list-ns verbose output (bsc#1237275)
  * nvme-print-stdout: add descriptions for nsze, ncap &amp; nuse (bsc#1237275)
  * netapp-ontapdev: correct the basestr header (bsc#1237275)
  * netapp-smdev: update err msg for no smdevices (bsc#1237275)
  * netapp-ontapdev: update err msg for no ontapdevices (bsc#1237275)
  * netapp-smdev: update basestr header in verbose output (bsc#1237275)</changelog>
  <changelog author="dwagner@suse.de" date="1745323200">- Update to version 2.11+22.gd31b1a01:
  * nvme-print: display fw-rev in list-subsys output (bsc#1240518)
  * nvme-print: display model in list-subsys output (bsc#1240518)
  * netapp-ontapdev: add subsysname to regular output (bsc#1240518)
  * netapp-ontapdev: add subsysname to the verbose output (bsc#1240518)
  * Revert "nvme-print-json: display only verbose output"</changelog>
</package>
<package pkgid="d36e9c8a531dfbb22912d7d41e495622714da2703b7d886a20e0c017efad2c2f" name="nvme-cli" arch="src">
  <version epoch="0" ver="2.11+26.gfbd2b4f4" rel="150700.3.6.2"/>
  <changelog author="dmueller@suse.com" date="1659528000">- Update to version 2.1.1:
  * build: Update version to v2.1.1
  * build: Extend release script to support micro version releases
  * build: Add minimum build requirement on libnvme
  * wrapper: Add weak nvme_init_copy_range_f1 symbol
  * build: Update version before regenerating docs
  * build: Update release version rules</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- Update to version 2.1.2:
  * build: Update version to v2.1.2
  * wrapper: Update SPDIX license
  * wrapper: Call library version of nvme_init_copy_range_f1
  * Revert "udev: re-read the discovery log page when a discovery controller reconnected"
  * nvme: Simplify ns list identify
  * meson: we don't need a c++ compiler
  * plugins/ocp: drop unused fd argument
  * plugins/wdc: remove fd argument from print functions
  * plugins/wdc: fix memset() on the address of a pointer
  * plugins/solidigm: fix return value on format parse failure
  * plugins/wdc: prevent duplicate close on NVMe device</changelog>
  <changelog author="daniel.wagner@suse.com" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- Mark no binaries rpms as noarch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 2.2.1:
  * Added parsing for Solidigm telemetry observable data.
  * add item ddr_ecc_err_cnt in smart-log-add
  * build: Drop dependency on libuuid
  * build: Fix endian check for cross build
  * build: Remove unused uuid.wrap file
  * build: Remove unusned uuid.h include
  * completions: Add show-topology tab completion
  * fabrics: Honor JSON config file in connect-all command (bsc#1199504)
  * fabrics: Trigger auto connect if config.json exists
  * fabrics: fix 'persistent' handling during connect-all with JSON file
  * fabrics: nvme config --modify depends on -n and -t argument
  * fabrics: re-read the discovery log page when a discovery controller reconnected
  * json: Support uint64 types serialization for older json-c versions
  * nvme, plugins: fix __u64 -&gt; unsigned long long assumptions
  * nvme-print: Add missing values in id-ctrl for JSON output
  * nvme-print: Handle NULL hostid in JSON output
  * nvme-print: Output 128bit values as uint128 type instead of double
  * nvme-print: Print fguid as a UUID
  * nvme-print: Use uint128 JSON function for media_units_written
  * nvme-print: decode MI status values
  * nvme-print: decode status types
  * nvme-print: fix wrong json key
  * nvme: Add helper function to parse 16-bit comma separated list
  * nvme: Add nvme_cmd wrapper for get_features
  * nvme: Add show-topology command
  * nvme: Add wrapper for Format NVM
  * nvme: Add wrapper for Sanitize NVM
  * nvme: Add wrappers for Get Log page helpers
  * nvme: Add wrappers for Identify controller lists
  * nvme: Add wrappers for NS attach/detach
  * nvme: Add wrappers for NS management functions
  * nvme: Add wrappers for basic NS identify
  * nvme: Add wrappers for firmware commands
  * nvme: Fix set feature command to get feature identifier 0Dh length as zero
  * nvme: Introduce a union in struct nvme_dev for different transport types
  * nvme: Introduce nvme_cli_ wrappers, wrap identify and identify_ctrl
  * nvme: Make static nvme_dev private to open_dev(), use locals elsewhere
  * nvme: Masks SSTAT in sanize-log output
  * nvme: Remove static nvme_dev, allocate on open instead
  * nvme: Use correct print format specifier for sizeof arguments
  * nvme: Use local struct nvme_dev for show_registers &amp; map_registers
  * nvme: check if cfg.metadata is NULL before passing it to strlen()
  * nvme: use helpers for checking status types
  * plugins/innogrit: Include timer.h
  * plugins/innogrit: add smart items for smart-log-add
  * plugins/micron-nvme: Use correct print format specifier for sizeof arguments
  * plugins/ocp: Include timer.h
  * plugins/ocp: Output 128bit values as uint128 type instead of double
  * plugins/ocp: pass struct nvme_dev to internal functions
  * plugins/seagate: Add support for OCP
  * plugins/toshiba: pass struct nvme_dev rather than fd + name
  * plugins/virtium: Output 128bit values as uint128 type instead of double
  * plugins/wdc: Add support for SN660 drive
  * plugins/wdc: Add type case for feature id
  * plugins/wdc: Output 128bit values as uint128 type instead of double
  * plugins/wdc: pass a struct nvme_dev around rather than a fd
  * plugins/wdc: pass struct nvme_dev rather than using global nvme_dev
  * plugins/ytmc: pass struct nvme_dev rather than fd + name
  * plugins: Use PRIu64 format specifier for 64bit types
  * print: Add Controller Ready Timeout Exceeded HW error code
  * solidgm: fix initialization warning
  * solidigm: Added parsing for telemetry customer screenable data
  * solidigm: Fix printf format for size_t variable
  * solidigm: Updated Telemetry parsing code to MIT license.
  * subprojects/libnvme: update for MI admin command coverage
  * tests: Update license to GPL-2.0-or-later
  * tree: Add NVMe-MI support
  * tree: Add dev_fd() helper
  * tree: Change nvme_dev from global to static
  * tree: Combine NVMe file descriptor into struct nvme_dev
  * tree: Move global device info to a single struct
  * tree: fail on non-negative return values from parse_and_open
  * udev: Add HOST_IFACE to udev rule (bsc#1208001)
  * util/json.h: Add json_object_get_uint64 fallback implementation
  * util/json: Add 128 bit JSON helpers
  * util/types: Add 128 bit conversion helpers
  * util: Fix le128_to_cpu on big-endian
  * util: Fix le128_to_cpu on little-endian
  * util: Move common type conversion helpers into util section
  * utils/json: Add json_object_new_uint64 for json-c &lt; 0.14
  * utils: Fix uint128_t usage
  * wdc:  OCP Log page updates and fixes
  * zns.c: report zones should be started after retrieved zone
- Handle suse-missing-rclink lint warnings by providing the symlinks
- Drop rpmlintrc as it is not needed anymore</changelog>
  <changelog author="daniel.wagner@suse.com" date="1675080000">- Update to version 2.3:
  * Added support for Flexible Data Placement (TP4146)
  * Added Persistent Discovery Controller support (TP8013/TP8014)
  * nvme-mi: support for firmware downloads
  * nvme device-self-test learned the --wait command line argument
    which makes nvme-cli to wait (incl. progress bar) in foreground
    until the test has finished.
  * A lot of bug fixes all over the place
- Update spec file
  * Project depends on meson &gt;= 0.50.0
  * make build dependency dropped</changelog>
  <changelog author="daniel.wagner@suse.com" date="1680264000">- Update to version 2.4 (jsc#PED-553 jsc#PED-3884):
  * plugins/ocp: Add SMART cloud log to solidigm plugin
  * nvme-print: Unify number base format for nsid
  * nvme-(discover,connect,connect-all): enable options '--keyring' and '--tls_key'
  * nvme-connect: enable option '--tls'
  * nvme-check-tls-key: add options to derive a 'retained' TLS key
  * nvme-gen-tls-key: add options to derive a TLS key
  * plugins/ocp: Move SMART cloud log methods to separate file for reusability
  * nvme: validate storage tag size correctly
  * nvme-print-json: Add json output status function
  * util: Cleanup argconfig parse function
  * nvme: Fix format command function indentation errors
  * util: Use argconfig commandline options pointer directly
  * nvme-print: Fix nvme show status function indentation errors
  * nvme: Check fw-commit command support MUD
  * print: print csi and opcode in error log (TP4113)
  * plugins/inspur: Cast vendor specific smart log value
  * nvme: Use correct ABORT type for self abort test
  * plugins/solidigm: Do not overwrite previously initialized variable
  * nvme-print: sanitize supported-log-pages output (bsc#1209550)
  * nvme: Enforce length to a multiple of 4 in get_log_page
  * nvme: fix block count and data size logic (bsc#1209564)
  * util: Introduce argconfig simple helper to check seen condition
  * plugins/ocp: Add set feature EOL/PLP failure mode no-uuid option
  * plugins/ocp: Refactor to clear feature identifier C1h and C3h
  * plugins/ocp: Add support for clear PCIe correctable error counters feature
  * nvme-doc: update man page for supported-log-pages (bsc#1209550)
  * plugins/ocp: OCP 2.0 field updates for SMART cloud log
  * nvme: Fix parameter limit range
  * fdp: Fix wrong Reclaim Unit Handle Status size
  * plugins/ocp: Add support for EOL/PLP failure mode feature
  * nvme-print: Fix printing of u32 values
  * nvme: Fix invalid memory access in show_registers
  * util: Add argconfig seen flag parameter to check if feature NSID set
  * nvme-print: fix segfault in supported-log-pages json output
  * fabrics: Fix ordering for auto connect services (bsc#1208075)
  * nvme.c: Check Firmware Update Granularity in fwdl
  * log: high latency timestamp issue
  * nvme: Align get feature data buffer length by page size to allocate
  * nvme: Continue get feature on invalid NS error to get multiple feature ids
  * plugins/ocp: SMART cloud log bug fixes.
  * Made temperature readouts in line with the SI.
  * Changed 'Kelvin' to 'kelvin', as recommended by the BIPM.
  * plugins/ocp: Fix whitespace and style issues
  * util: Revert JSON output to plain numbers
  * nvme: Add rae argument to telemetry-log command
  * nvme: Refactor get telemetry log page helper
  * nvme: Factor out parse telemetry log da element
  * nvme: Fix type in error message
  * unit: Add test-argconfig-parse
  * nvme: Use chunked read in get_log()
  * nvme: Use fprintf for error message logging in get_log()
  * nvme: fix /dev/spkd/ typo
  * doc: --storage-tag-check doesn't take any arguments
  * fabrics: Ensure host-traddr/iface consistency for "connect-all"
  * nvme-print: print the nvme generic name in json output as well
  * plugins/innogrit: modify command opcode for eventlog and cdump
  * completion: fix typo, add missing args
  * plugins/wdc: Fix data Formatting for Latency Monitor Log Page
  * nvme: Make json-c optional again
  * nvme-print: Move JSON printing function into a new file
  * plugins/solidigm: Use json_create_object wrapper
  * plugins/solidigm: Use struct json_object instead of typedef
  * fabrics: No need to sanitize trsvcid and traddr
  * docs: Fixed typos and missing options
  * util: Numbers without any suffix are also valid
  * util: Update suffix_binary_parse API
  * util: Reimplement suffix_si_parse
  * nvme: Filter out status flags for get feature command
  * util: Add crc32 implementation
  * nvme-print: Use attrs_info as key for Zone Attributes Information
  * nvme: Support effects-log for fabrics ctrl
  * plugins/solidigm: Add uuid index resolution
  * plugins/ocp: Use network byte order for OCP UUID value
  * json_discovery_log: avoid buffer overrun (bsc#1207435)
  * Fix connect nbft regressions (bsc#1209905)
  * Fix auto connect conditions (bsc#1210105)
  * Fix auto boot for NBFT connections (bsc#1211647)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1695988800">- Update to version 2.6 (jsc#PED-3610 jsc#PED-4879 jsc#PED-5061):
  * nvme: allocate payload buffer in create-ns command
  * nvme-print-stdout: Add CAP.CPS and CAP.NSSS human readable outputs
  * nvme: Add output-format default option instead of argconfig json option
  * nvme: fw-download offset only describes FW offset, not file offset
  * unit: add locale number test
  * util: handle utf-8 thousend separators correctly
  * nvme: Change to use NVME_ARGS verbose default option from OPT_ARGS
  * fabrics: Fix NVMF_ARGS macro to use parameter n correctly
  * nvme: Add verbose default option to show command debug output
  * util: Fix to set argconfig output format json option correctly
  * util: Split argconfig output format json function to set and get
  * nvme: Spport Phy Rx Eye Opening Measurement Log
  * nvme: Introduce nvme_realloc function
  * nvme: Fix for fdpa reserved field printing
  * completion: add 'version' and 'help' to list
  * udev-rule: apply round-robin iopolicy on i/o subsystems alone (bsc#1215994) (bsc#1219086)
  * nvme: Add support for the OAQD ID controller field
  * plugins/solidigm: use static log macro to calc bitmask
  * plugins/ocp: Rename FW activation history command
  * nvme: auto free nvme_dev resource
  * nvme: allocate aligned payloads for all nvme commands
  * nvme: introduce alloc helper with alignment support
  * util: add cleanup function for generic memory allocations
  * nvme: append huge to nvme_{alloc|free} function
  * nvme: fw_download use nvme_alloc only
  * fabrics: Removing duplicate code and moving to libnvme
  * nvme-print: omit size of protection information
  * tree: Modify label name close_fd to close_dev
  * fabrics: For TCP/RDMA, compare IP addresses with nvme_ipaddrs_eq() (bsc#1213768)
  * fabrics: lookup_discovery_ctrl() must look under host and not root (bsc#1213768)
  * nvme: Do not map status to errno codes
  * completions: Add bash completion for DSSD Power state feature(FID: C7h)
  * Documentation: Add document for DSSD Power state feature(FID: C7h)
  * plugins/ocp: Add DSSD Power state feature(FID: C7h)
  * avoid casting pointer arguments to argconfig functions
  * nvme-print: Add support for EGFEAT, Domain Identifier, TEGCAP and UEGCAP
  * nvme-print: Fix endurance_log whitespace changes
  * nvme: Fix retrieval of telemetry log up to specified data area.
  * nvme: Update list secondary command
  * wdc: Add support for SN861 drive
  * util: Set errno to 0 before strtol/stroul call
  * nvme: Revert passthru and submit_io to print status to stderr from stdout
  * plugins/zns: Fix offset in report zones
  * nvme-rpmb: Fix nvme_show_id_ctrl_rpmbs() definition error
  * fabrics: Use corresponding hostid when hostnqn is generated
  * json: fix seg. fault converting NULL to JSON string (bsc#1213762)
  * nvme-cli: fix extended metadata size calculation
  * nvme-print: Show subsystem iopolicy (bsc#1124564)
  * nvme-print-stdout: Do not show non reachable ns in namespace topology (bsc#1212598)
  * nvme-print: Fix show-topolocy for ctrls
  * doc: Fix typo in documentation
  * nvme-print-stdout: fix storage tag size label
  * nvme-print-stdout: List only ctrls which are part of ns (bsc#1212598)
  * nvme-print-stdout: Support subsys reachable from several hosts (bsc#1212598)
  * ccan: Add htable, strset and dependencies (bsc#1212598)
  * ccan: Remove unused documentation (bsc#1212598)
  * nvme-print: Split max power flags
  * nvme-print: fix counter while looping through uuid_list (bsc#1212598)
  * fabrics: only look for matching ctrl on same host (bsc#1213768)
  * README: Correct hugetlbfs spelling error
  * util: Delete unused CFG_BOOL argconfig type as duplicated with CFG_FLAG
  * util: Set LC_ALL=C as default if -H option is not used
  * nvme: Add support for create-ns command endg-id option parameter
  * nvme-print: fix argument order for show functions
  * plugins/solidigm: Added Marketing Name Log support for Solidigm.
  * nvme-print: Remove left overs from refactoring
  * nvme-print: Move num argument parsing into callbacks
  * nvme-print: Fix typo in callback definition
  * scripts: Make release script project neutral
  * scripts: Update update-docs.sh scripts
  * scripts: Execute the scripts from toplevel directory
  * scripts: Move helper scripts to a central place
  * docs: Update file modes
  * doc: Add information on --context
  * nvmf-autoconnect: Annotate the context to autoconnect
  * fabrics: Add support for volatile configuration
  * plugins/solidigm: Formated log page directory table consistently with "nvme list" format.
  * plugins/solidigm: Added Identify controller VU extensions parsing.
  * nvme-print-json: Print PCI pysical slot number for controller
  * nvme-print-stdout: Print PCI physical slot number for controller
  * libnvme.wrap: Bump to 42ac453
  * plugins/nbft: Use common code to parse print flags
  * fabrics: Do not print device on connect per default
  * fabrics: Revert 'fabrics: prevent 'nvme connect' to well-known discovery NQN'
  * nvme-print: fix wrong list-subsys output when ns are attached to different ctrls
  * plugins/micron: Correct NULL pointer checking error
  * plugins/innogrit: Add vendor command get-eventlog and get-cdump
  * nvme: Use correct data buffer size
  * nvme: Fix quoted string split across lines to use quoted newline
  * plugins/zns: Fix zns.c linux kernel check patch errors and warnings
  * plugins/ymtc: Fix ymtc-nvme.c linux kernel check patch warning
  * plugins/ymtc: Fix ymtc-nvme.c space indentation to tab indentation
  * plugins/virtium: Fix virtium-nvme.c linux kernel check patch errors and warnings
  * plugins/transcend: Fix transcend-nvme.c linux kernel check patch errors and warnings
  * plugins/solidigm: Fix linux kernel check patch errors and warnings
  * plugins/shannon: Fix shannon-nvme.c linux kernel check patch errors and warnings
  * plugins/seagate: Fix seagate-nvme.c linux kernel check patch warnings
  * plugins/scaleflux: Fix sfx-nvme.c linux kernel check patch errors and warnings
  * plugins/netapp: Fix netapp-nvme.c linux kernel check patch errors and warnings
  * plugins/nbft: Fix nbft-plugin.c linux kernel check patch warnings
  * plugins/micron: Fix micron-nvme.c linux kernel check patch errors and warnings
  * plugins/micron: Fix micron-nvme.c space indentation to tab indentation
  * plugins/memblaze: Fix memblaze-nvme.c linux kernel check patch errors and warnings
  * plugins/memblaze: Fix memblaze-utils.h space indentation to tab indentation
  * plugins/memblaze: Fix memblaze-nvme.c space indentation to tab indentation
  * plugins/intel: Fix intel-nvme.c linux kernel check patch errors and warnings
  * plugins/inspur: Fix inspur-nvme.c linux kernel check patch warnings
  * plugins/inspur: Fix inspur-nvme.c space indentation to tab indentation
  * plugins/innogrit: Fix innogrit-nvme.c linux kernel check patch errors
  * plugins/huawei: Fix huawei-nvme.c linux kernel check patch errors and warnings
  * plugins/fdb: Fix fdb.c linux kernel check patch warnings
  * plugins/dera: Fix dera-nvme.c linux kernel check patch errors and warnings
  * plugins/amzn: Fix amzn-nvme.c linux kernel check patch error and warnings
  * plugins/wdc: Fix wdc-utils.c linux kernel check patch errors and warnings
  * plugins/wdc: Refactor wdc-nvme.c for linux kernel check patch errors and warnings
  * util: Move falltrhough feature check to meson.builds
  * ocp: Add eol plp failure mode json outputs
  * nvme-print: Add nvme show result function
  * nvme-print-json: Add json output result function
  * nvme-print: Fix nvme_show_error() to call va_end() for json output format
  * nvme: Fix nvme format block-size option handling
  * Revert "nvme: Masks SSTAT in sanize-log output"
  * fabrics: Fix NVMF_ARGS macro indentation error
  * Documentation: Add document for OCP Device capability(LID: 0xC4) log page
  * completions: Add bash completion for OCP Device capability(LID: 0xC4) log page
  * plugins/ocp: Add Device capability(LID: 0xC4) log page
  * udev: fix warning reported by udevadm verify
  * fabrics: fix conditions in nvmf-autoconnect.service
  * fabrics: Change NVMF_OPTS as NVMF_ARGS to fix linux kernel check patch error
  * nvme: Split passthru commands read output
  * nvme: Fix io-passthru command read metadata output
  * plugin/ocp: Added implementation for 0xC1 log page
  * util: Fix suffix_si_parse to parse no decimal point but suffix value correctly
  * completions: Add zsh option values handling for sanitize command action
  * completions: Add ocp sub commands zsh completion
  * completions: Add ocp commands zsh completion
  * completions: Add ocp commands bash completion
  * nvmf-autoconnect: restart service to avoid dropping AEN
  * solidigm: Reduce memory usage in supported log pages feature
  * solidigm: Changes to supported log pages feature requested by review
  * solidigm: Add supported log pages log feature to Solidigm plugin
  * plugins/ocp: Added ocp unsupported requirements log page
  * completions: Add bash option values handling for sanitize command action
  * doc: Correct nvme-show-hostnqn command NAME description
  * completions: Add missing zsh commands descriptions
  * plugins/wdc: Extend SN530 support.
  * Fix incorrect article 'an' as 'a' to use for descriptions and message
  * nvme: Set effects-log command csi option help message string
  * completions: bash: Delete unsupported id-iocs command options
  * completions: bash: Add id-domain command
  * completions: Fix nvm-id-ns-lba-format command zsh definition
  * completions: Add json command option
  * nvme: Fix get-feature command sel parameter check to allow value 8
  * util: Delete unnecessary argconfig definitions OPT_VAL and CFG_VAL
  * util: Delete argconfig value type to add option value as va lists instead
  * util: Split to set argconfig option value
  * util: Delete argconfig value length to calcurate instead
  * nvme: Change sanitize command action option to use argconfig parse value
  * util: Add argconfig parse value function
  * util: Delete unused argconfig subopts type
  * util: Delete unused argconfig file types
  * util: Delete unused argconfig help function
  * nvme-wrap: do_admin_args_op should not clear args timeout
  * nvme: Fix linux kernel check patch warnings
  * nvme: Fix linux kernel check patch errors
  * plugins/ocp: Add telemetry-log command to OCP plugin
  * plugins/ocp: Add OCP set latency monitor feature command
  * plugins/ocp: Fix endianness in Latency Monitor Log output
  * plugins/ocp: Add missing fields in Latency Monitor Log
  * plugins/ocp: Fix typos in Latency Monitor Log
  * plugins/ocp: Reorganize OCP plugin source code
  * tests: Add tests for controller reset
  * plugin/solidigm: Added vs-internal-log command.
  * nvme: Add nvme_show_perror to use instead of perror for json output
  * nvme-print-json: Use vasprintf instead of vsnprintf to allocate string
  * nvme: fix rnlpt to_string() values.
  * nvme: fix io_mgmt args parse error
  * fdp: set-events feature is saveable
  * fabrics: Return errno value as negative
  * fabrics: Fix linux kernel check patch errors and warnings
  * nbft: add the nbft show plugin
  * nbft: added NBFT v1.0 table support (jsc#PED-1449)
  * nbft: make lookup_ctrl function public
  * nvme: Fix indentation errors around nvme show error API
  * nvme: Check validate output format err value instead of flags
  * nvme: Use nvme show error API to outptu stderr messages for json format
  * util: Check output format json for json error message output
  * nvme-printf: Add show error function for nvme list command json output
  * nvme: Add zns specfic field for create ns
  * nvme: Add ns-mgmt host software specified fields
  * nvme: Add dtype, dspec on write-zeroes, write-uncor
  * nvme-print: Add new fields print on id directive
  * nvme-print: Add VWCNP on NSFEAT of id-ns
  * nvme: Fix format command to skip to reread NSID all block device
  * plugins/solidigm: Fixes and clean-up of Telemetry parse code. Fixed parsing of 64 bit values. Fixed COD field name. Fixed compilation warnings when compiling for 32 bit. Added missing free(). Consolidated single entry function to telemetry parser. Consolidated use of integer types.
  * doc: Documentations maintenance changes
  * doc: Add nvme-mi-send command documentation
  * doc: Add nvme-mi-recv command documentation
  * doc: Add clear-pcie-correctable-error-counters command documentation
  * doc: Add eol-plp-failure-mode command documentation
  * plugins/solidigm: Add firmware activation history log to Solidigm plugin
  * plugins/ocp: Add firmware activation history log to OCP plugin
  * nvme-print: Use enum nvme_print_flags for nvme_show_id_ctrl
  * nvme: Add support for NVMe-MI send command
  * nvme: Use stdout for passthru and submit_io commands success messages
  * nvme: Fix passthru command function indentation errors
  * nvme: Add support for NVMe-MI receive command
  * fabrics: fix fc config JSON file handling (bsc#1210089)
  Refresh 0100-harden_nvmf-connect@.service.patch
- Fix install path for nvme-regress script</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420800">- Enable test during build (bsc#1207686)
- Drop minimum version meson dependency
- Add asciidoc dependency
- Build documentation when requested</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696852800">- Use fixed timestamps for documentation allowing reproducable builds
- Announce nvmeof-boot-support support via Provides
- Filter rpmlint warnings for systemd-service-without-service_ macros
- Add missing service files for NBFT feature
  * add 0001-fabrics-autoconnect-add-service-unit-for-connecting-.patch
  * add 0002-fabrics-add-udev-rule-to-avoid-renaming-nbft-interfa.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1697112000">- Add missing jsc# and bsc# tracking entries in change log.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1702987200">- Update to version 2.7:
  * nvme-print-json: include vs for identify namespace
  * nvme-print-stdout: enhance connect message (bsc#1219086)
  * fabrics: fix connect error if hostid file does not exist (bsc#1219086)
  * fabrics: fix invalid output format error during nvme connect (bsc#1219086)
  * wdc: Fix vs-smart-add-log Command for SN650 and SN655
  * nvme: restric hmac options for gen-tls-key (bsc#1219086)
  * wdc: Fix UUID index fallback mechanism
  * plugins/ocp: Add OCP Telemetry String log page, Telemetry log page
  * completions: Add bash completions for telemetry string log page
  * plugins/solidigm: Added OCP 2.0 compatibility version command
  * plugins/solidigm: Added OCP 2.0 vs-drive-info command.
  * plugins/ocp: Fix printing order of various Latency Monitor Log buckets
  * nvme: validate output format split status from flag return value
  * nvme: simplify cleanup_nvme_dev()
  * cleanup: remove unused cleanup_charp()
  * wdc: Add support for SN861 2nd pci device id
  * nvme: replace libhugetlbfs with mmap and madvise
  * util/mem: move alloc helper to util section
  * nvme: auto cleanup filedescriptors
  * nvme: auto cleanup buffers
  * nvme: return error code in get_persistent_event_log
  * nvme: sanitize nvme-gen-tls-key
  * nvme: print out the resulting TLS identity for 'nvme check-tls-key'
  * nvme: Add version '1' identifier for nvme-gen-tls-key
  * subprojects/libnvme: update wrapper for TP8018
  * plugins/solidigm: Added re_sku_count smart atrribute
  * doc: Fix nvme-connect manpage --application option string
  * plugins/ocp: changed command clear-pcie-correctable-error-counters to match OCP 2.0 spec.
  * plugins/solidigm: Added command to clear PCIe Correctable Error Counters according to OCP 2.0
  * plugins/ocp: Reorganized clear feature code for better reuse
  * nvme: fixup length calculation for 'nvme gen-tls-key --secret'
  * doc: remove invalid hostkey info for --dhchap-secret
  * nvme-print-json: use human helper everywhere
  * nvme-print-json: remove obj_print helper
  * plugins/ocp: update nvme_show_select_result call
  * mailmap: only show contributer's name
  * nvme-print-json: Change to report status and message in array
  * nvme-print-json: Change to report feature select in array
  * nvme-print-json: Change to report error and data in array
  * nvme-print-json: Add show_init/finish calls to report features in array
  * nvme-print: Add nvme_show_error_status() to merge error message and status
  * nvme-print-json: Use r instead of root and use obj_add_***(r, ..., ...)
  * nvme-print-json: Delete static const char string global variables
  * nvme-print-json: Add remaining controller registers readable format
  * nvme-print-json: Add readable format cap, vs, cc, csts, nssr and crto registers
  * nvme-print-json: Combine duplicated json key and val string variables
  * nvme-print-json: Replase json_array_add_value_string() to array_add_str()
  * nvme-print-json: Replase json_object_add_value_uint128() to obj/root_add_uint128()
  * nvme-print-json: Replase json_object_add_value_object() to obj/root_add_obj()
  * nvme-print-json: Replase json_array_add_value_object() to array_add_obj()
  * nvme-print-json: Replase json_object_add_value_array() to obj/root_add_array()
  * nvme-print-json: Replase json_object_add_value_uint() to obj/root_add_uint()
  * nvme-print-json: Replase json_object_add_value_int() to obj/root_add_int()
  * nvme-print-json: Replase json_object_add_value_uint64() to obj/root_add_uint64()
  * nvme-print-json: Replase json_object_add_value_string() to obj/root_add_str()
  * nvme-print-json: Update feature_show_fields_*** to use root/obj_add_***()
  * nvme-print-json: Update lba_status_log to use root_add_***() and obj_add_***()
  * nvme-print-json: Replace lba_status_log printf() to root_add_result()
  * nvme-print-json: Add list_item print function
  * nvme-print-json: Add lba_status_info print function
  * nvme-print-json: Add lba_range print function
  * nvme-print-json: Add id_ctrl_rpmbs print function
  * nvme-print-json: Unify json_list and jroot object names to root
  * nvme-print-json: Add json_zns_changed print function
  * nvme-print-json: Add root_add_result() to output result message
  * nvme-print-json: Split persistent_event_log print function
  * nvme-print-json: Remove unnecessary string newline code
  * nvme-print-json: Replace effects_log_list print to use json_print()
  * nvme-print-json: Print persistent_event_log no log data result correctly
  * nvme-print-json: Add static "result" and "erorr" strings variables
  * nvme-print-json: Add single_property printf function
  * nvme: Replace get feature command stderr output to nvme_show_error()
  * nvme-print-json: Change d() output to use d_json()
  * nvme: Fix get-feature command mixed stdout and json outputs
  * nvme-print-json: Add remaining feature fields print functions
  * nvme-print-json: Update formatting and codying style
  * build: Add -std=c99 to CFLAGS for muon on CentOS 7
  * fabrics: add udev rule to avoid renaming nbft interfaces
  * fabrics: autoconnect: add service unit for connecting NBFT subsystems
  * fabrics: autoconnect: explicitly express module dependency
  * Updates to codeql config
  * libnvme-wrap: exit on VOID_FN lookup failure
  * plugins/ocp:Added the ocp C6h feature api
  * plugin/ocp_fid_c6h:Added the ocp C6h feature api
  * nvme-copy: support cross-namespace copy
  * nvme/plugins: fix mismatch operator
  * nvme: fix overflow possiblity
  * nvme: reduce identify cmd issue
  * nvme: allow set-features to take input from stdin
  * Fix common misspellings from codespell project
  * nvme-print: Correct to print correct ascii character string length
  * print-stdout: print Host Behavior Support correctly
  * build: Bump libnvme wrap
  * plugins/solidigm: Added support for temperature statistics log page
  * Add support for codeql sweeps
  * doc: Add virt-mgmt command
  * doc: Add id-uuid command
  * doc: Add list-secondary command
  * doc: Add id-ns-granularity command
  * doc: Add nvme commands --output-format and --verbose options
  * completions: Add nvme-mi-recv nad nvme-mi-send commands completions
  * completions: Change short option -o and -v duplicated to upper case
  * doc: Change short option -o and -v duplicated to upper case
  * nvme: Change short option -o and -v duplicated to upper case
  * nvme: Change phy-rx-eom-log command to use NVME_ARGS instead
  * plugins/memblaze: Add smart-log-add and latency-feature functions
  * plugins/solidigm: internal-logs Telemetry auto detect last data area.
  * nvme: Change to use NVME_FLBAS_META_EXT() macro to check flbas value
  * nvme-print-json: Add host memory buffer and timestamp features print functions
  * nvme-print-json: Add feature fields print functions
  * nvme-print-json: Add TMPTH feature print function
  * nvme-print-json: Add show_feature_fields print function
  * nvme-print-json: Add select_result print function
  * nvme-print-json: Use json_print to print and free object
  * nvme-print-json: Add lba_status print function
  * nvme-print-json: Combine variable definition and setting value
  * nvme-print-json: Add id_iocs print function
  * nvme-print-stdout: Fix coding style errors
  * nvme-print-json: Add directive print function
  * nvme: Fixed segmentation fault when getting host initiated telemetry
  * plugins/wdc: enhanced SN861 device support
  * plugins/wdc: cleanup line lengths
  * nvme: do not include meta data for PRACT=1 and MD=8
  * nvme: use block-count arg if provided
  * build: bump libnvme to disable tests option
  * build: Add static build on CI target
  * nvme-print: Add nvme_zns_start_zone_list() API function
  * nvme-print: Add nvme_zns_finish_zone_list() API function
  * nvme-print-binary: Set list function to NULL if unimplemented
  * nvme-print-json: Change order list functions and set NULL if unimplemented
  * nvme-print-stdout: Fix to set stdout_list_item print function missed
  * plugins/solidigm: log page name extraction using nvme_log_to_string function
  * nvme-print: Added missing logpage names in nvme_log_to_string function
  * udev-rules: rename netapp udev rule (bsc#1219086)
  * udev-rules: set ctrl_loss_tmo to -1 for ONTAP NVMe/TCP (bsc#1219086)
- Remove upstreamed patches
  * remove 0001-fabrics-autoconnect-add-service-unit-for-connecting-.patch
  * remove 0002-fabrics-add-udev-rule-to-avoid-renaming-nbft-interfa.patch
- Update spec file
  * remove libhugetblfs depedency
  * update NetApp udev rule file name</changelog>
  <changelog author="daniel.wagner@suse.com" date="1703160000">- Update to version 2.7.1:
  * nvme-print-json: Revert field name changes (bsc#1218306)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1707912000">- Update to version 2.8:
  * nvme-print-json: append array object in json_support_log
  * sed: Add plugin for basic SED Opal operations (jsc#PED-5061)
  * don't include newlines in already wrapped text
  * nvme: do not include meta data for PRACT=1 and MD=8 (version 2)
  * create-ns: align the namespaces to 1Mib boundaries when using SI suffixes
  * doc: Fix config-schema.json's URL
  * plugins/solidigm: Compressing vs-internal-log log files into zip file.
  * nbft: do not issue an error if ACPI tables are missing
  * nbft: fixup include for libnvme
  * doc: Fix short option name for cfg-file
  * completions: added Solidigm plugin to autocomplete scripts
  * nvme: Remove unused cfg argument from NVME_ARGS() macro
  * nvme: fix directive receive identify offsets
  * nvme-fabrics: enable option 'concat'
  * build: Update libnvme wrap
  * plugins/wdc: Add Debug Log Collection Support
  * nbft: fix tcp/dhcp address fallback retry (bsc#1218873)
  * nvme: use correct telemetry log size
  * nvme-print: fix typo in list verbose output (bsc#1219086)
  * nvme: print inserted tls key for check-tls-key (bsc#1219086)
  * plugins/wdc: Plugin fixes and updates
  * fabrics: move hostid/hostnqn warnings to verbose level (bsc#1219086)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737600">- Update to version 2.9:
  * nvme-print: expand the maximum field length to prevent misalignment
  * plugins/spdk: plugin to list SPDK subsystems
  * nvme-print: check if controller belong to SPDK
  * plugins/spdk: plugin to list SPDK controllers
  * nvme-print-stdout: fix ASQB, ACQB and BMBBA prints
  * build: bump libnvme wrap
  * nvmf-autoconnect: fix string encoding
  * nvme: identify primary ctrl do not accept nsid
  * nvme-wrap: remove unused nvme_cli_get_log_ana_groups()
  * nvme-print-json: use admin queue attributes definitions
  * nvme-print-json: use CSTS definitions
  * nvme-print-stdout: use POWER_OF_TWO macro
  * nvme-print-json: use controller configuration definitions
  * nvme-print-json, nvme-print-stdout: add tertiary version number
  * nvme-print-json: use NVME_MAJOR and NVME_MINOR definitions
  * nvme-print-json: use NVME_BOOT_PARTITION_INFO field definitions
  * nvme-print-json: add support telemetry log create event in PEL
  * nvme-print-json: add support set feature event in PEL
  * nvme-print-json: add obj_d() function
  * nvme-print-json: add obj_add_uint_0nx() function
  * meson.build: Fix spelling of sed-opal.h filename
  * sed_opal: Only build when we really have sed_opal headers
  * nvme: fix error path if write() fails in get_telemetry_log()
  * plugins/solidigm: Additional LID for temperature statistics.
  * plugins/solidigm: Improved Solidigm UUID index detection.
  * nvme-print-stdout: Add CSTS.ST register stdout print
  * nvme-print-stdout: Use NVME_CMIC definitions
  * nvme-print: Use NVME_UNIT definitions
  * nvme-print-stdout: Use NVME_CMBMSC/STS/EBS/SWTP definitions
  * plugins/ssstc: add a new plugin for SSSTC driver
  * nvmf-connect: systemd hardening effort
  * plugins/ocp: Adjusted variable type size carrying UUID index to 8 bit.
  * nvme: fix security buffer allocation size
  * nvme: Change fw-download xfer initialization to set 0
  * nvme: Add fw-download warning message for FWUG alignment error
  * plugins/ocp: Split ocp_get_uuid_index() into find and get functions.
  * nvme: fix mem leak in multiple key related functions (bsc#1223331)
  * fabrics: fix mem leak in nvmf_check_hostid_and_hostnqn() (bsc#1223331)
  * nvme-print-stdout: Use NVME_BPRSEL definitions
  * nvme-print-stdout: Use NVME_BPINFO definitions
  * nvme-print-stdout: Use NVME_CMBSZ definitions
  * nvme-print-stdout: Use NVME_CMBLOC definitions
  * Revert "logging: fix error handling for ioctl passthru wrappers"
  * fabrics: align identify command payload
  * ocp: Unify line start spacing as tabs
  * ocp: support OCP DSSD Async Event Config feature
  * nvme: Add support for get-reg and set-reg commands
  * nvme-print-json: Add register print functions
  * nvme-print-stdout: Add register print functions
  * nvme-print: Add register print functions
  * nvme: Refactor mmap_registers to add writable parameter
  * nvme-print: Change PMRSZU string function as unit string
  * nvme-print: Refactor CMBLOC and PMRSTS registers function
  * logging: fix error handling for ioctl passthru wrappers
  * nbft: Fix scandir() error check
  * nbft: Refactor connection attempt out
  * nvme-print: Use EOM optional data present macros changed
  * nvme-print: Print cntlid number for controller (bsc#1224024)
  * nvme: check-tls-key fails despite having hostnqn file (bsc#1223331)
  * nvme: print retained key for gen-tls-key's -i option too (bsc#1223331)
  * fabrics : allow host to create duplicate connections to target
  * fabrics: Fix fast_io_fail_tmo option
  * nvme-print-stdout: use admin queue attributes definitions
  * nvme-print-stdout: use CSTS definitions
  * nvme-print-stdout: use controller configuration definitions
  * nvme-print-stdout: use NVME_MAJOR and NVME_MINOR definitions
  * nvme-print-stdout: use FDP configuration attributes definitions
  * nvme: add new function 'tls_key' (bsc#1226197)
  * nvme: use library functions for importing and exporting TLS keys (bsc#1216982)
  * nvme: extend error message for ns scan failures
  * nvme-print-json: Bugfix status json key of sanitize-log
  * sed: update SED password when initalizing (bsc#1222168)
  * plugins/memblaze: add performance stats
  * plugins/memblaze: fix code mis-type error
  * plugins/memblaze: code refactor on applying __packed on more structs
  * plugins/memblaze: code refactor on using cleanup_nvme_dev
  * nvme: Fix to cleanup free raw_secret memory allocated
  * plugins/memblaze: code-format on leading indent and align
  * plugins/wdc: Fix narrow index variable type in for loop to __u32
  * plugins/wdc: Whitespace changes
  * nvme: Delete unused nvme root scanned
  * ocp: support OCP 2.5 Set Telemetry Profile feature
  * nvme: Don't seg fault if given device is not char/block device
  * nbft: Include SSNS index in error messages (bsc#1222026)
  * nbft: Pause logging for expected connection failures (bsc#1222026)
  * nbft: Silence connection failures for unavailable SSNS (bsc#1222026)
  * nbft: Fix 'verbose' argument type (bsc#1222026)
  * plugins/nbft: Implement verbose logging
  * plugins/nbft: Print the new SSNS flags
  * nbft: Fix uninitialized variable
  * plugins/nbft: Fix uninitialized variables
  * plugins/sed: Fix uninitialized variable
  * nvme-print-stdout: Fix uninitialized variable
  * nvme-print-json: Fix uninitialized variable
  * build: Switch default meson buildtype to 'debugoptimized'
  * nvme: do not scan topology when mmaping registers
  * nvme-print-stdout: Use NVME_BOOT_PARTITION_INFO field definitions
  * nvme-print-stdout: Use NVME_GET for MI commands supported and effects CSP
  * nvme-print-stdout: Use NVME_GET for FID supported and effects FSP
  * nvme-print-stdout: Use NVME_SET_FEAT_EVENT register definitions
  * nvme-print: Add PEL EHAI port identifier type printf function
  * build: bump libnvme wrap
  * ocp: fix for power-state argument checking
  * nvme: do not issue warning when nvme_core module is not loaded
  * wdc: Review changes and build fixes
  * wdc:  Fix timestamp displayed by vs-firmware-activate-history command
  * logging: Split to output ioctl latency by log info level (bsc#1231668)
  * nvme-print-stdout: Change hexadecimal value 0x prefix to use %#x
  * nvme-print-stdout: Fix LBA status DSLBA output as hexadecimal
  * nvme-print-stdout: Split line length exceeded 100 columns
  * nvme-print-stdout: Use NVME_PMRMSC register definitions to print
  * nvme-print-stdout: Use NVME_PMRSWTP register definitions to print
  * nvme-print-stdout: Use NVME_PMREBS register definitions to print
  * nvme-print-stdout: Use NVME_PMRSTS register definitions to print
  * nvme-print-stdout: Use NVME_PMRCTL_EN register definition to print
  * nvme-print-stdout: Use NVME_PMRCAP register definition to print
  * doc: Fix admin and io passthru cdw parameters description
  * doc: Add get-feature cdw11 and set-feature cdw12 parameters
  * micron-nvme: Unuse stat() to check if strMainDirName exists
  * doc: Fix get-property and set-property offset and value descriptions
  * doc: Fix documentation file mode 100755 to 100644
  * nvme-print-stdout: Fix channel configuration descriptors pointer
  * nvme-print-stdout: Check sscanf return value
  * nvme-print-stdout: Fix linux kernel check patch errors
  * nvme: Delete unusual fallthrough for cases have no body
  * nvme: Delete duplicated semicolon
  * nvme-print, common: Fix for whitespace change
  * logging: output ioctl debugging info (bsc#1231668)
  * nvme: track verbose level (bsc#1231668)
  * logging: track log level globally
  * logging: move logging code to a new file
  * nvme: update include for libnvme
  * nvme: remove unused declaration
  * build: bump libnvme wrap
  * nvme-netapp: add nspath tlv handling (bsc#1220971)
  * rpm: Add missing rule and service files
  * nvme-print-json, nvme-print-stdout: Use CHAR_BIT definition
  * nvme-print-stdout: Delete duplicated if condition checking line
  * ocp: Fix timestamp displayed by fw-activate-history command
  * wdc: Add support for the get-drive-status command to SN861
  * nvme-print: Fix nvme_host_metadata_type_to_string() indentation errors
  * nvme-print: Add PEL RCI port identifier type printf function
  * nvme-print-stdout: Use persistent event log RCI definitions
  * build: bump libnvme wrap
  * nvme: Add show-regs and get-property commands NSSD print outputs
  * nvme-print: print more details in ns-descs verbose output (bsc#1223331)
  * Revert "nvme-print-json: remove obj_print helper"
  * sed: Confirm entered password before initialization.
- drop systemd service harden file, upstream ships this patch.
  * remove 0100-harden_nvmf-connect@.service.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737601">- Update to version 2.9.1:
  * plugins/spdk: drop the plugin</changelog>
  <changelog author="daniel.wagner@suse.com" date="1722600000">- Update to version 2.10:
  * sed: Fix parsing of Discovery0 features
  * fabrics: avoid potential segfault in nvmf_dim() (bsc#1231668)
  * nvme: avoid segfault in show-topology (bsc#1226197)
  * fabrics: do not leak nvme_ctrl_t object on connect
  * nvme: extend help message when mmap regs fails
  * nvme: return -ENXIO value to open device if errno not set
  * wdc: OCP 2.5 Log Page Updates
  * fabrics: drop --quiet alias -S
  * fabrics: drop --disable-sqflow alias -d
  * fabrics: check if json config is existing (bsc#1231668)
  * plugins/ocp: fix UAF when printing telemetry log
  * nvme-print-stdout: fix persistent-event-log set feature event output
  * fabrics: do not report error when no modules are loaded when disconnecting
  * fabrics: use cleanup helper where possible
  * fabrics: print an error for ENOENT too
  * plugins/virtium: use time_t for time_stamp values
  * completions: add ocp set-error-injection command
  * doc: add ocp set-error-injection command
  * ocp: add set-error-injection command
  * nvme: use argconfig_parse_seen to check conditions
  * nvme: use proper mask to get correct lbafu value
  * utils: fix print formatting option
  * utils: cleanup includes in utils.h
  * utils: add missing header
  * nvme-print: Added print for two new fields for HMB feature
  * plugins/micron: Move OCP internal log parsing from Micron to OCP Plugin.
  * fabrics: remove unused _discover_from_json_config_file() argument
  * nvme: avoid unnecessary dup() + close() in io_mgmt_send()
  * util: remove unnecessary NULL check in cleanup_nvme_root()
  * nvme: use argconfig_parse_comma_sep_array_u16() in attach-ns
  * util: avoid duplication in argconfig_parse_comma_sep_array*()
  * util: remove redundant loop condition in argconfig_parse()
  * util: introduce is_null_or_empty() to avoid strlen()
  * util: reduce allocation sizes in argconfig_parse()
  * util: consolidate call paths to argconfig_parse_type()
  * util: reduce complexity of argconfig_parse_val()
  * util: reduce arguments passed to argconfig_parse_type()
  * util: remove empty default case in argconfig functions
  * util: remove unnecessary parentheses in argconfig_parse_type()
  * util: remove redundant cast in argconfig_parse_type()
  * util: inline argconfig_parse_byte()
  * util: remove redundant NULL check in argconfig_print_help()
  * util: use cleanup to avoid goto in argconfig_parse()
  * util: make argconfig_set_opt_val() a void function
  * util: remove argconfig_parse_val() declaration
  * util: remove argconfig CFG_SIZE type
  * wdc: Update and refactor the C0h log page parsing
  * ccan: Add freed pointer checking to delete strset member
  * fabrics: connect all hosts in config.json (bsc#1226216)
  * fabrics: refactore discover from json config (bsc#1226216)
  * fabrics: first read config before topology scanning (bsc#1226216)
  * fabrics: use helper to lookup default hostnqn/hostid (bsc#1226216)
  * fabrics: extend already connected message (bsc#1226216)
  * fabrics: use cleanup helper to free nvme root object
  * nvme: check MD size with PI size when PRACT set to 1
  * nvme-print: add new field added in TP4090
  * nvme-print-binary: add effects-log command output missed
  * completions: add ocp get-error-injection command
  * doc: add ocp get-error-injection command
  * ocp: add get-error-injection command
  * ocp: fix eol-plp-failure-mode command sel option value
  * doc: fix ocp eol-plp-failure-mode select short option
  * ocp: set UUID index for eol-plp-failure-mode command to get
  * nvme: fix verbose logging (bsc#1231668)
  * doc: fix micron ocp telemetry log parse title
  * nvme-rpmb: send RPMB_REQ_READ_RESULT for authentication key programming
  * plugins/micron: Add support for OCP telemetry log parsing
  * ocp: Update Plugin Version
  * nvme: fix lbaf inuse to use 6:5 bits
  * ocp: use NVME_ARGS macro definition by eol-plp-failure-mode command
  * nvme: extern NVME_ARGS macro definition
  * nvme: use _cleanup_free_ type buffer for get-feature command
  * plugins/ocp: Update telemetry string log page (C9h)
  * nvme-print-json: add get-feature command fahrenheit temperature output
  * nvme: add get-feature and id-ctrl commands fahrenheit outputs
  * nvme: delete smart-log command fahrenheit option
  * nvme-print: check locale to use temperatures in degrees fahrenheit
  * completion: add support for tls-key (bsc#1226197)
  * doc: add tls-key --revoke documentation (bsc#1226197)
  * doc: fix tls-key --keyfile shorthand (bsc#1226197)
  * nvme: add support to revoke TLS key (bsc#1226197)
  * nvme: return error code/message for TLS commands (bsc#1226197)
  * nvme: factor out import key function (bsc#1226197)
  * nvme: use cleanup helper to close file descriptor (bsc#1226216)
  * nvme-rpmb: use cleanup helper for STREAM objects
  * fabrics: use cleanup helper for STREAM objects
  * nvme: use cleanup helper for STREAM objects (bsc#1226216)
  * nvme: strip newline when parsing TLS key files (bsc#1226197)
  * nvme: use stdout for exporting TLS keys (bsc#1226197)
  * nvme: change _cleanup_file_ to _cleanup_fd_ (bsc#1226197)
  * common.h: Avoid using unsupported load/store instructions in arm64 VMs
  * ocp: OCP 2.5 Telemetry DA 1 and 2 Parsing Updates
  * nvme-print-stdout: refactor subsys config (bsc#1231668)
  * wdc: Fix compiler warning.
  * nvme: add flags type nvme_print_flags_t
  * nvme-print: Use 'unsigned int' instead of 'unsigned'
  * nvme: update parse_args() return value handling
  * nvme-print: Fix nvme_show_smart_log indentation error
  * nvme-print-stdout: Fix stdout_smart_log indentation error
  * nvme-print-binary: Fix binary_smart_log indentation error
  * completions: add smart-log command fahrenheit option
  * doc: Add smart-log command fahrenheit option
  * nvme: Add smart-log command fahrenheit option
  * nvme-print: add PEL vendor specific and TCG defined events strings
  * nvme-print: Print PEL reserved event string
  * completions: Add timeout option bash completions
  * completions: Add timeout option zsh completions
  * completions: Add io-mgmt-recv/send commands zsh completions
  * completions: Add /dev/nvme argument missed
  * completions: Change fw-activate command name to fw-commit
  * completions: Fix _nvme indentation errors (bsc#1226197)
  * completions: Fix bash-nvme-completion.sh indentation errors (bsc#1226197)
  * doc: Add nvme commands timeout option
  * nvme: Add support for delete-ns command timeout option
  * nvme: Change NVME_DEFAULT_IOCTL_TIMEOUT to use nvme_cfg timeout
  * nvme: Add nvme_cfg timeout default option
  * nvme: Add nvme_cfg global variable for NVME_ARGS default options
  * nvme: add helper function to get pif and sts value
  * nvme: choose PIF from QPIF if QPIFS supports and PIF is QTYPE
  * nvme: use libnvme's atomic ANA log page fetch
  * nvme: fix maximum ANA log page length calculation
  * nvme-print-json: add missing va_end()
  * fabrics: skip namespace scan for fabric commands
  * nvme-print: print the new fields added in TP4141a
  * plugins/ocp: underflow + index fixes for telemetry
  * plugins/ocp: Add ocp TCG Configuration Log Page
  * nvme-print-stdout: Add helper function to print PIF in string form
  * doc: fix format command info
  * nvme: telemetry: report the correct error if the ioctl() fails.
  * nvme-print: add the cancel opcode to the nvme_cmd_to_string() list
  * doc: fix ocp format issues
  * nbft: Reuse existing discovery controller
  * nbft: Skip SSNS records pointing to well-known discovery NQN
  * nbft: Perform actual discovery
  * util/cleanup: Add cleanup for struct nvme_fabrics_uri
  * fabrics: Make some symbols public (bsc#1226216)
  * nvme-print-stdout: fix format index in stdout_nvm_id_ns
  * plugins/solidigm: Added workload-tracker command
  * plugins/solidigm: Added extra VU fields to id-ctrl
  * nvme-print-stdout: print MEM bit of CTRATT field
  * nvme-print-stdout: fix to print the log line by line
  * fabrics: Always pass hostid and hostnqn (bsc#1226216)
  * plugins/ssstc: Replace __uint16_t with uint16_t
  * plugins/solidigm: Added log pages to vs-internal-logs
  * sed: perform a tper revert after lsp revert
  * plugins/nbft: Use default library logging
  * docs: Add missing OCP plugin docs to meson
  * ocp: Switch OCP plugin to use semantic versioning
  * nvme: fix fw-commit MUD result message
  * sed: only re-read partition table after unlock.
  * nvme-print-json: Fix LBA status DSLBA output as hexadecimal
  * nvme-print-json: Use NVME_PMRxxx register definitions to print
  * nvme-print-stdout: Fix PMRWBM register name
  * nvme-print-json: Fix channel configuration descriptors pointer
  * nvme-print-json: Fix linux kernel check patch errors
  * nvme-print: Added "Command and Feature Lockdown" string to LID 0x14
  * plugins/innogrit: `u_char` -&gt; `unsigned char`
  * nvme: Use C99 types for uint32_t
  * nvme-print-stdout: print frl1/2/3 values for zns id-ns
  * solidigm: Eliminate &lt;linux/limits.h&gt;
  * nvme: remove double free in persistent-event-log
  * ocp: Add Get DSSD Power State Feature (FID: C7h)
  * nvme: initialize default library logging
  * nvme: use cleanup helper for nvme_root_t objects (bsc#1226197)
  * doc: add nvme connet ctrl-loss-tmo description
  * plugins/solidigm: Automatic enabling Data Area 4 when retrieving Telemetry.
- always build the docs
  * add 0001-docs-rename-ocp-unsupported-req-log-file.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1730376000">- Update to version 2.11:
  * docs: update check-tls-key arguments
  * nvme: add support to append TLS PSK to keyfile for check-tls-key
  * nvme: return correct error code in append_keyfile
  * docs: nvme-id-doman: dom{ia =&gt; ai}n
  * ocp: fix latency monitoring data structure entry endian
  * ocp: fix TCG configuration log endian
  * ocp: fix firmware activation history entry endian
  * docs: update gen-tls-key arguments
  * nvme: add support to add derive TLS PSK to keyfile
  * nvme: rename identity to version
  * nvme: set file permission for keyfile to owner only
  * nvme: export tls keys honoring version and hmac
  * nvmf-keys: add udev rule to import tls keys
  * docs: update TLS options
  * fabrics: add support to connect to accept a PSK command line
  * fabrics: add support to connect to accept a configuration
  * nvme: use unsigned char for hmac and identity
  * nvme-print: Add Sanitize Media Verification Event in PEL log
  * netapp-ontapdev: add err msg for no ontapdevices
  * netapp-smdev: add err msg for no smdevices
  * doc: Add sanitize command emvs option
  * ocp: combine to use GUID length definitions
  * nvme: update tls_key() handling
  * nvme-print-stdout: print VERS bit of SANICAP field
  * nvme: add EMVS support to sanitize command
  * ocp: remove callback function cast
  * doc: added commit conventions to contribution guidelines
  * ocp: fix ocp-print-stdout.c indentation error
  * ocp: fix ocp-nvme.c indentation errors
  * ocp: build ocp-nvme.c and ocp-telemetry-decode.c without json
  * ocp: split TCG configuration log print codes
  * ocp: split telemetry string log print codes
  * ocp: split device capabilities log print codes
  * ocp: split error recovery log print codes
  * ocp: split unsupported requirement log print codes
  * ocp: split latency monitor log print codes
  * ocp: move ocp telemetry log print function into ocp-print
  * ocp: split smart extended log print codes
  * ocp: split ocp-fw-activation-history print codes
  * plugins: update meson.build file to always build ocp plugin
  * ocp-print: move json code into separate files
  * nvme-print-json: display only verbose output
  * ocp-nvme: ocp plugin version update
  * nvme-print: print KV command set page header
  * doc: show where self-test results can be found
  * plugins/memblaze: fix a wrong id on smart-log-add
  * plugins/dapustor: smart-log-add fix
  * plugins/sed: add sid password change (bsc#1229677)
  * plugins/solidigm: Automatic retry smaller log chunk size.
  * ocp-nvme: Add LMDATA-37 for Latency Monitor Log
  * ocp-nvme: remove ocp log page version checking
  * wdc: Fix for Reading WDC C2 Vendor Unique Log Page
  * ocp: Fixes for OCP 2.5 Telemetry DA1 FIFO Event Parsing
  * nvme-print-json: update JSON verbose output for nvm-id-ctrl (bsc#1231668)
  * wdc: Add Support for SN5100S
  * nvme: Support show-regs for nvmeof
  * ocp: fix option handling in internal-log
  * Documentation: Added solidigm plugin commands
  * wdc: add support for SNTMP drive
  * nvme-print: print NSSES field of CAP register
  * ocp: fix GUID output
  * nvme-print-json: print controller register values in offset order
  * nvme-print-json: print CMBEBS and CMBSWTP in json format
  * nvme-print-stdout: update changed-ns-list-log output (bsc#1231668)
  * nvme: fix uninitialized value in error-log (bsc#1231668)
  * nvme: fix to convert metadata size to native byte order
  * nvme-print: fix error information log page endianness error
  * completions: add get-feature command changed option
  * doc: add get-feature command changed option
  * nvme: separate get NVME_GET_FEATURES_SEL_CHANGED definition
  * nvme: use NVME_GET_FEATURES_SEL definitions
  * nvme-print-stdout: use NVME_CTRL_OAES definitions
  * completion: add ocp set-telemetry-profile to zsh
  * completion: add solidgm work-tracker binding
  * plugins/solidigm: Added Workload Tracker Triggers and Wall Time
  * ocp: include util/types.h to use nvme_uint128_t
  * ocp: fix to set log data pointer allocated
  * nvme: use NVME_CHECK() to check get features select field value
  * ocp: split ocp-hwcomp log
  * completions: add ocp hardware-component-log command
  * doc: add ocp hardware-component-log command
  * ocp: add hwcomp log json output
  * ocp: add hwcomp log command list option
  * ocp: add hwcomp log command comp-id option
  * ocp: add hwcomp dummy definition
  * ocp: add support for hwcomp log page
  * nvme: use NVME_CTRL_FNA definitions
  * netapp-smdevices: print single device output too (bsc#1231668)
  * netapp-smdevices: segregate print routines (bsc#1231668)
  * Add Support for new SN655 PCI Device ID
  * nvme-print-json: extern json object add functions
  * ocp: add SMART / health information extended log page version 4
  * ocp: add error recovery log page version 3
  * ocp: add get-enable-ieee1667-silo command
  * fabrics: fix incorrect access filename check (bsc#1231668)
  * nvme: use NVME_GET_FEATURES_SEL_SUPPORTED definition
  * nvme-print-json: use _cleanup_free_
  * plugins/solidigm: fix use after free.
  * ocp: fix ocp-nvme.c coding style errors
  * ocp: Change C9 function names to use c9 instead
  * ocp: fix to return c9 log page data error to open file
  * ocp: fix to set return value to get c9 log page data
  * nvme: update nvme_insert_tls_key_versioned() return handling (bsc#1231668)
  * nvme-print-stdout: add print_array function
  * logging: add print_info function
  * util: extern uint128_t_to_double() function
  * nvme-print: sanitize error-log output (bsc#1231668)
  * plugins/solidigm : Fixing vs-internal-log to generate identify per allocated namespace.
  * nvme-print: added new fields for nvm_id_ns
  * plugins/fdp: bugfix error check to validate output format
  * plugins/wdc: fix json output for vs-nand-stats
  * nvme-print-stdout: use NVME_FEAT util definitions
  * nvme-print: update subsys verbose outputs (bsc#1231668)
  * nvme-print: add subsystype to the list-subsys output (bsc#1231668)
  * netapp: print output for single device too (bsc#1231668)
  * netapp: segregate the print routines (bsc#1231668)
  * netapp: fix uninitialized value from heap error (bsc#1231668)
  * nvme-print: print the new fields added in TP4142
  * plugins/innogrit: modify for project tacoma
  * wdc: Add Support for new SN-861 PCI device id
  * nvme-print: use LC_MEASUREMENT to check fahrenheit temperature
  * nvme-print: use Completion Condition enum
  * completions: add the zsh completion of the dapustor plugin
  * nvme-print: print the new fields added in TP4165
  * plugins/dapustor: dapustor smart-log-add update
  * nvme-print-stdout: Added print for new field CSER (TP4167)
  * plugins: Add a new DapuStor plugin and the smart-log-add command
  * docs: rename ocp-unsupported-req-log file
- Drop build fix patch
  * remove 0001-docs-rename-ocp-unsupported-req-log-file.patch
- Install 70-nvmf-keys.rules to the default udev rules directory</changelog>
  <changelog author="dwagner@suse.de" date="1741089600">- Update to version 2.11+17.g6e09119:
  * nvme: check for valid output format (bsc#1237275)
  * nvme: make get-feature JSON output print everything (bsc#1237275)
  * nvme: make -v output consistent with -H output for nvme get-feature (bsc#1237275)
  * nvme: make -v output consistent with -H output for nvme get-property (bsc#1237275)
  * nvme-print-stdout: add details in list-ns verbose output (bsc#1237275)
  * nvme-print-stdout: add descriptions for nsze, ncap &amp; nuse (bsc#1237275)
  * netapp-ontapdev: correct the basestr header (bsc#1237275)
  * netapp-smdev: update err msg for no smdevices (bsc#1237275)
  * netapp-ontapdev: update err msg for no ontapdevices (bsc#1237275)
  * netapp-smdev: update basestr header in verbose output (bsc#1237275)</changelog>
  <changelog author="dwagner@suse.de" date="1745323200">- Update to version 2.11+22.gd31b1a01:
  * nvme-print: display fw-rev in list-subsys output (bsc#1240518)
  * nvme-print: display model in list-subsys output (bsc#1240518)
  * netapp-ontapdev: add subsysname to regular output (bsc#1240518)
  * netapp-ontapdev: add subsysname to the verbose output (bsc#1240518)
  * Revert "nvme-print-json: display only verbose output"</changelog>
  <changelog author="dwagner@suse.de" date="1753185600">- Update to version 2.11+26.gfbd2b4f4:
  * nvme: fix mem leak in nvme copy (bsc#1243716)
  * nvme-print: suppress output when no ctrl is present for list-subsys (bsc#1243716)
  * nvme: extend filter to match device name (bsc#1243716)
  * udev-rules-ontap: switch to queue-depth iopolicy (bsc#1246599)</changelog>
</package>
<package pkgid="137fa2f10921d2a3bfcfebb8a521598aa202ac889bcb57cfa2ae78030fa8573f" name="nvme-cli" arch="x86_64">
  <version epoch="0" ver="2.11+26.gfbd2b4f4" rel="150700.3.6.2"/>
  <changelog author="dmueller@suse.com" date="1659528000">- Update to version 2.1.1:
  * build: Update version to v2.1.1
  * build: Extend release script to support micro version releases
  * build: Add minimum build requirement on libnvme
  * wrapper: Add weak nvme_init_copy_range_f1 symbol
  * build: Update version before regenerating docs
  * build: Update release version rules</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- Update to version 2.1.2:
  * build: Update version to v2.1.2
  * wrapper: Update SPDIX license
  * wrapper: Call library version of nvme_init_copy_range_f1
  * Revert "udev: re-read the discovery log page when a discovery controller reconnected"
  * nvme: Simplify ns list identify
  * meson: we don't need a c++ compiler
  * plugins/ocp: drop unused fd argument
  * plugins/wdc: remove fd argument from print functions
  * plugins/wdc: fix memset() on the address of a pointer
  * plugins/solidigm: fix return value on format parse failure
  * plugins/wdc: prevent duplicate close on NVMe device</changelog>
  <changelog author="daniel.wagner@suse.com" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- Mark no binaries rpms as noarch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 2.2.1:
  * Added parsing for Solidigm telemetry observable data.
  * add item ddr_ecc_err_cnt in smart-log-add
  * build: Drop dependency on libuuid
  * build: Fix endian check for cross build
  * build: Remove unused uuid.wrap file
  * build: Remove unusned uuid.h include
  * completions: Add show-topology tab completion
  * fabrics: Honor JSON config file in connect-all command (bsc#1199504)
  * fabrics: Trigger auto connect if config.json exists
  * fabrics: fix 'persistent' handling during connect-all with JSON file
  * fabrics: nvme config --modify depends on -n and -t argument
  * fabrics: re-read the discovery log page when a discovery controller reconnected
  * json: Support uint64 types serialization for older json-c versions
  * nvme, plugins: fix __u64 -&gt; unsigned long long assumptions
  * nvme-print: Add missing values in id-ctrl for JSON output
  * nvme-print: Handle NULL hostid in JSON output
  * nvme-print: Output 128bit values as uint128 type instead of double
  * nvme-print: Print fguid as a UUID
  * nvme-print: Use uint128 JSON function for media_units_written
  * nvme-print: decode MI status values
  * nvme-print: decode status types
  * nvme-print: fix wrong json key
  * nvme: Add helper function to parse 16-bit comma separated list
  * nvme: Add nvme_cmd wrapper for get_features
  * nvme: Add show-topology command
  * nvme: Add wrapper for Format NVM
  * nvme: Add wrapper for Sanitize NVM
  * nvme: Add wrappers for Get Log page helpers
  * nvme: Add wrappers for Identify controller lists
  * nvme: Add wrappers for NS attach/detach
  * nvme: Add wrappers for NS management functions
  * nvme: Add wrappers for basic NS identify
  * nvme: Add wrappers for firmware commands
  * nvme: Fix set feature command to get feature identifier 0Dh length as zero
  * nvme: Introduce a union in struct nvme_dev for different transport types
  * nvme: Introduce nvme_cli_ wrappers, wrap identify and identify_ctrl
  * nvme: Make static nvme_dev private to open_dev(), use locals elsewhere
  * nvme: Masks SSTAT in sanize-log output
  * nvme: Remove static nvme_dev, allocate on open instead
  * nvme: Use correct print format specifier for sizeof arguments
  * nvme: Use local struct nvme_dev for show_registers &amp; map_registers
  * nvme: check if cfg.metadata is NULL before passing it to strlen()
  * nvme: use helpers for checking status types
  * plugins/innogrit: Include timer.h
  * plugins/innogrit: add smart items for smart-log-add
  * plugins/micron-nvme: Use correct print format specifier for sizeof arguments
  * plugins/ocp: Include timer.h
  * plugins/ocp: Output 128bit values as uint128 type instead of double
  * plugins/ocp: pass struct nvme_dev to internal functions
  * plugins/seagate: Add support for OCP
  * plugins/toshiba: pass struct nvme_dev rather than fd + name
  * plugins/virtium: Output 128bit values as uint128 type instead of double
  * plugins/wdc: Add support for SN660 drive
  * plugins/wdc: Add type case for feature id
  * plugins/wdc: Output 128bit values as uint128 type instead of double
  * plugins/wdc: pass a struct nvme_dev around rather than a fd
  * plugins/wdc: pass struct nvme_dev rather than using global nvme_dev
  * plugins/ytmc: pass struct nvme_dev rather than fd + name
  * plugins: Use PRIu64 format specifier for 64bit types
  * print: Add Controller Ready Timeout Exceeded HW error code
  * solidgm: fix initialization warning
  * solidigm: Added parsing for telemetry customer screenable data
  * solidigm: Fix printf format for size_t variable
  * solidigm: Updated Telemetry parsing code to MIT license.
  * subprojects/libnvme: update for MI admin command coverage
  * tests: Update license to GPL-2.0-or-later
  * tree: Add NVMe-MI support
  * tree: Add dev_fd() helper
  * tree: Change nvme_dev from global to static
  * tree: Combine NVMe file descriptor into struct nvme_dev
  * tree: Move global device info to a single struct
  * tree: fail on non-negative return values from parse_and_open
  * udev: Add HOST_IFACE to udev rule (bsc#1208001)
  * util/json.h: Add json_object_get_uint64 fallback implementation
  * util/json: Add 128 bit JSON helpers
  * util/types: Add 128 bit conversion helpers
  * util: Fix le128_to_cpu on big-endian
  * util: Fix le128_to_cpu on little-endian
  * util: Move common type conversion helpers into util section
  * utils/json: Add json_object_new_uint64 for json-c &lt; 0.14
  * utils: Fix uint128_t usage
  * wdc:  OCP Log page updates and fixes
  * zns.c: report zones should be started after retrieved zone
- Handle suse-missing-rclink lint warnings by providing the symlinks
- Drop rpmlintrc as it is not needed anymore</changelog>
  <changelog author="daniel.wagner@suse.com" date="1675080000">- Update to version 2.3:
  * Added support for Flexible Data Placement (TP4146)
  * Added Persistent Discovery Controller support (TP8013/TP8014)
  * nvme-mi: support for firmware downloads
  * nvme device-self-test learned the --wait command line argument
    which makes nvme-cli to wait (incl. progress bar) in foreground
    until the test has finished.
  * A lot of bug fixes all over the place
- Update spec file
  * Project depends on meson &gt;= 0.50.0
  * make build dependency dropped</changelog>
  <changelog author="daniel.wagner@suse.com" date="1680264000">- Update to version 2.4 (jsc#PED-553 jsc#PED-3884):
  * plugins/ocp: Add SMART cloud log to solidigm plugin
  * nvme-print: Unify number base format for nsid
  * nvme-(discover,connect,connect-all): enable options '--keyring' and '--tls_key'
  * nvme-connect: enable option '--tls'
  * nvme-check-tls-key: add options to derive a 'retained' TLS key
  * nvme-gen-tls-key: add options to derive a TLS key
  * plugins/ocp: Move SMART cloud log methods to separate file for reusability
  * nvme: validate storage tag size correctly
  * nvme-print-json: Add json output status function
  * util: Cleanup argconfig parse function
  * nvme: Fix format command function indentation errors
  * util: Use argconfig commandline options pointer directly
  * nvme-print: Fix nvme show status function indentation errors
  * nvme: Check fw-commit command support MUD
  * print: print csi and opcode in error log (TP4113)
  * plugins/inspur: Cast vendor specific smart log value
  * nvme: Use correct ABORT type for self abort test
  * plugins/solidigm: Do not overwrite previously initialized variable
  * nvme-print: sanitize supported-log-pages output (bsc#1209550)
  * nvme: Enforce length to a multiple of 4 in get_log_page
  * nvme: fix block count and data size logic (bsc#1209564)
  * util: Introduce argconfig simple helper to check seen condition
  * plugins/ocp: Add set feature EOL/PLP failure mode no-uuid option
  * plugins/ocp: Refactor to clear feature identifier C1h and C3h
  * plugins/ocp: Add support for clear PCIe correctable error counters feature
  * nvme-doc: update man page for supported-log-pages (bsc#1209550)
  * plugins/ocp: OCP 2.0 field updates for SMART cloud log
  * nvme: Fix parameter limit range
  * fdp: Fix wrong Reclaim Unit Handle Status size
  * plugins/ocp: Add support for EOL/PLP failure mode feature
  * nvme-print: Fix printing of u32 values
  * nvme: Fix invalid memory access in show_registers
  * util: Add argconfig seen flag parameter to check if feature NSID set
  * nvme-print: fix segfault in supported-log-pages json output
  * fabrics: Fix ordering for auto connect services (bsc#1208075)
  * nvme.c: Check Firmware Update Granularity in fwdl
  * log: high latency timestamp issue
  * nvme: Align get feature data buffer length by page size to allocate
  * nvme: Continue get feature on invalid NS error to get multiple feature ids
  * plugins/ocp: SMART cloud log bug fixes.
  * Made temperature readouts in line with the SI.
  * Changed 'Kelvin' to 'kelvin', as recommended by the BIPM.
  * plugins/ocp: Fix whitespace and style issues
  * util: Revert JSON output to plain numbers
  * nvme: Add rae argument to telemetry-log command
  * nvme: Refactor get telemetry log page helper
  * nvme: Factor out parse telemetry log da element
  * nvme: Fix type in error message
  * unit: Add test-argconfig-parse
  * nvme: Use chunked read in get_log()
  * nvme: Use fprintf for error message logging in get_log()
  * nvme: fix /dev/spkd/ typo
  * doc: --storage-tag-check doesn't take any arguments
  * fabrics: Ensure host-traddr/iface consistency for "connect-all"
  * nvme-print: print the nvme generic name in json output as well
  * plugins/innogrit: modify command opcode for eventlog and cdump
  * completion: fix typo, add missing args
  * plugins/wdc: Fix data Formatting for Latency Monitor Log Page
  * nvme: Make json-c optional again
  * nvme-print: Move JSON printing function into a new file
  * plugins/solidigm: Use json_create_object wrapper
  * plugins/solidigm: Use struct json_object instead of typedef
  * fabrics: No need to sanitize trsvcid and traddr
  * docs: Fixed typos and missing options
  * util: Numbers without any suffix are also valid
  * util: Update suffix_binary_parse API
  * util: Reimplement suffix_si_parse
  * nvme: Filter out status flags for get feature command
  * util: Add crc32 implementation
  * nvme-print: Use attrs_info as key for Zone Attributes Information
  * nvme: Support effects-log for fabrics ctrl
  * plugins/solidigm: Add uuid index resolution
  * plugins/ocp: Use network byte order for OCP UUID value
  * json_discovery_log: avoid buffer overrun (bsc#1207435)
  * Fix connect nbft regressions (bsc#1209905)
  * Fix auto connect conditions (bsc#1210105)
  * Fix auto boot for NBFT connections (bsc#1211647)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1695988800">- Update to version 2.6 (jsc#PED-3610 jsc#PED-4879 jsc#PED-5061):
  * nvme: allocate payload buffer in create-ns command
  * nvme-print-stdout: Add CAP.CPS and CAP.NSSS human readable outputs
  * nvme: Add output-format default option instead of argconfig json option
  * nvme: fw-download offset only describes FW offset, not file offset
  * unit: add locale number test
  * util: handle utf-8 thousend separators correctly
  * nvme: Change to use NVME_ARGS verbose default option from OPT_ARGS
  * fabrics: Fix NVMF_ARGS macro to use parameter n correctly
  * nvme: Add verbose default option to show command debug output
  * util: Fix to set argconfig output format json option correctly
  * util: Split argconfig output format json function to set and get
  * nvme: Spport Phy Rx Eye Opening Measurement Log
  * nvme: Introduce nvme_realloc function
  * nvme: Fix for fdpa reserved field printing
  * completion: add 'version' and 'help' to list
  * udev-rule: apply round-robin iopolicy on i/o subsystems alone (bsc#1215994) (bsc#1219086)
  * nvme: Add support for the OAQD ID controller field
  * plugins/solidigm: use static log macro to calc bitmask
  * plugins/ocp: Rename FW activation history command
  * nvme: auto free nvme_dev resource
  * nvme: allocate aligned payloads for all nvme commands
  * nvme: introduce alloc helper with alignment support
  * util: add cleanup function for generic memory allocations
  * nvme: append huge to nvme_{alloc|free} function
  * nvme: fw_download use nvme_alloc only
  * fabrics: Removing duplicate code and moving to libnvme
  * nvme-print: omit size of protection information
  * tree: Modify label name close_fd to close_dev
  * fabrics: For TCP/RDMA, compare IP addresses with nvme_ipaddrs_eq() (bsc#1213768)
  * fabrics: lookup_discovery_ctrl() must look under host and not root (bsc#1213768)
  * nvme: Do not map status to errno codes
  * completions: Add bash completion for DSSD Power state feature(FID: C7h)
  * Documentation: Add document for DSSD Power state feature(FID: C7h)
  * plugins/ocp: Add DSSD Power state feature(FID: C7h)
  * avoid casting pointer arguments to argconfig functions
  * nvme-print: Add support for EGFEAT, Domain Identifier, TEGCAP and UEGCAP
  * nvme-print: Fix endurance_log whitespace changes
  * nvme: Fix retrieval of telemetry log up to specified data area.
  * nvme: Update list secondary command
  * wdc: Add support for SN861 drive
  * util: Set errno to 0 before strtol/stroul call
  * nvme: Revert passthru and submit_io to print status to stderr from stdout
  * plugins/zns: Fix offset in report zones
  * nvme-rpmb: Fix nvme_show_id_ctrl_rpmbs() definition error
  * fabrics: Use corresponding hostid when hostnqn is generated
  * json: fix seg. fault converting NULL to JSON string (bsc#1213762)
  * nvme-cli: fix extended metadata size calculation
  * nvme-print: Show subsystem iopolicy (bsc#1124564)
  * nvme-print-stdout: Do not show non reachable ns in namespace topology (bsc#1212598)
  * nvme-print: Fix show-topolocy for ctrls
  * doc: Fix typo in documentation
  * nvme-print-stdout: fix storage tag size label
  * nvme-print-stdout: List only ctrls which are part of ns (bsc#1212598)
  * nvme-print-stdout: Support subsys reachable from several hosts (bsc#1212598)
  * ccan: Add htable, strset and dependencies (bsc#1212598)
  * ccan: Remove unused documentation (bsc#1212598)
  * nvme-print: Split max power flags
  * nvme-print: fix counter while looping through uuid_list (bsc#1212598)
  * fabrics: only look for matching ctrl on same host (bsc#1213768)
  * README: Correct hugetlbfs spelling error
  * util: Delete unused CFG_BOOL argconfig type as duplicated with CFG_FLAG
  * util: Set LC_ALL=C as default if -H option is not used
  * nvme: Add support for create-ns command endg-id option parameter
  * nvme-print: fix argument order for show functions
  * plugins/solidigm: Added Marketing Name Log support for Solidigm.
  * nvme-print: Remove left overs from refactoring
  * nvme-print: Move num argument parsing into callbacks
  * nvme-print: Fix typo in callback definition
  * scripts: Make release script project neutral
  * scripts: Update update-docs.sh scripts
  * scripts: Execute the scripts from toplevel directory
  * scripts: Move helper scripts to a central place
  * docs: Update file modes
  * doc: Add information on --context
  * nvmf-autoconnect: Annotate the context to autoconnect
  * fabrics: Add support for volatile configuration
  * plugins/solidigm: Formated log page directory table consistently with "nvme list" format.
  * plugins/solidigm: Added Identify controller VU extensions parsing.
  * nvme-print-json: Print PCI pysical slot number for controller
  * nvme-print-stdout: Print PCI physical slot number for controller
  * libnvme.wrap: Bump to 42ac453
  * plugins/nbft: Use common code to parse print flags
  * fabrics: Do not print device on connect per default
  * fabrics: Revert 'fabrics: prevent 'nvme connect' to well-known discovery NQN'
  * nvme-print: fix wrong list-subsys output when ns are attached to different ctrls
  * plugins/micron: Correct NULL pointer checking error
  * plugins/innogrit: Add vendor command get-eventlog and get-cdump
  * nvme: Use correct data buffer size
  * nvme: Fix quoted string split across lines to use quoted newline
  * plugins/zns: Fix zns.c linux kernel check patch errors and warnings
  * plugins/ymtc: Fix ymtc-nvme.c linux kernel check patch warning
  * plugins/ymtc: Fix ymtc-nvme.c space indentation to tab indentation
  * plugins/virtium: Fix virtium-nvme.c linux kernel check patch errors and warnings
  * plugins/transcend: Fix transcend-nvme.c linux kernel check patch errors and warnings
  * plugins/solidigm: Fix linux kernel check patch errors and warnings
  * plugins/shannon: Fix shannon-nvme.c linux kernel check patch errors and warnings
  * plugins/seagate: Fix seagate-nvme.c linux kernel check patch warnings
  * plugins/scaleflux: Fix sfx-nvme.c linux kernel check patch errors and warnings
  * plugins/netapp: Fix netapp-nvme.c linux kernel check patch errors and warnings
  * plugins/nbft: Fix nbft-plugin.c linux kernel check patch warnings
  * plugins/micron: Fix micron-nvme.c linux kernel check patch errors and warnings
  * plugins/micron: Fix micron-nvme.c space indentation to tab indentation
  * plugins/memblaze: Fix memblaze-nvme.c linux kernel check patch errors and warnings
  * plugins/memblaze: Fix memblaze-utils.h space indentation to tab indentation
  * plugins/memblaze: Fix memblaze-nvme.c space indentation to tab indentation
  * plugins/intel: Fix intel-nvme.c linux kernel check patch errors and warnings
  * plugins/inspur: Fix inspur-nvme.c linux kernel check patch warnings
  * plugins/inspur: Fix inspur-nvme.c space indentation to tab indentation
  * plugins/innogrit: Fix innogrit-nvme.c linux kernel check patch errors
  * plugins/huawei: Fix huawei-nvme.c linux kernel check patch errors and warnings
  * plugins/fdb: Fix fdb.c linux kernel check patch warnings
  * plugins/dera: Fix dera-nvme.c linux kernel check patch errors and warnings
  * plugins/amzn: Fix amzn-nvme.c linux kernel check patch error and warnings
  * plugins/wdc: Fix wdc-utils.c linux kernel check patch errors and warnings
  * plugins/wdc: Refactor wdc-nvme.c for linux kernel check patch errors and warnings
  * util: Move falltrhough feature check to meson.builds
  * ocp: Add eol plp failure mode json outputs
  * nvme-print: Add nvme show result function
  * nvme-print-json: Add json output result function
  * nvme-print: Fix nvme_show_error() to call va_end() for json output format
  * nvme: Fix nvme format block-size option handling
  * Revert "nvme: Masks SSTAT in sanize-log output"
  * fabrics: Fix NVMF_ARGS macro indentation error
  * Documentation: Add document for OCP Device capability(LID: 0xC4) log page
  * completions: Add bash completion for OCP Device capability(LID: 0xC4) log page
  * plugins/ocp: Add Device capability(LID: 0xC4) log page
  * udev: fix warning reported by udevadm verify
  * fabrics: fix conditions in nvmf-autoconnect.service
  * fabrics: Change NVMF_OPTS as NVMF_ARGS to fix linux kernel check patch error
  * nvme: Split passthru commands read output
  * nvme: Fix io-passthru command read metadata output
  * plugin/ocp: Added implementation for 0xC1 log page
  * util: Fix suffix_si_parse to parse no decimal point but suffix value correctly
  * completions: Add zsh option values handling for sanitize command action
  * completions: Add ocp sub commands zsh completion
  * completions: Add ocp commands zsh completion
  * completions: Add ocp commands bash completion
  * nvmf-autoconnect: restart service to avoid dropping AEN
  * solidigm: Reduce memory usage in supported log pages feature
  * solidigm: Changes to supported log pages feature requested by review
  * solidigm: Add supported log pages log feature to Solidigm plugin
  * plugins/ocp: Added ocp unsupported requirements log page
  * completions: Add bash option values handling for sanitize command action
  * doc: Correct nvme-show-hostnqn command NAME description
  * completions: Add missing zsh commands descriptions
  * plugins/wdc: Extend SN530 support.
  * Fix incorrect article 'an' as 'a' to use for descriptions and message
  * nvme: Set effects-log command csi option help message string
  * completions: bash: Delete unsupported id-iocs command options
  * completions: bash: Add id-domain command
  * completions: Fix nvm-id-ns-lba-format command zsh definition
  * completions: Add json command option
  * nvme: Fix get-feature command sel parameter check to allow value 8
  * util: Delete unnecessary argconfig definitions OPT_VAL and CFG_VAL
  * util: Delete argconfig value type to add option value as va lists instead
  * util: Split to set argconfig option value
  * util: Delete argconfig value length to calcurate instead
  * nvme: Change sanitize command action option to use argconfig parse value
  * util: Add argconfig parse value function
  * util: Delete unused argconfig subopts type
  * util: Delete unused argconfig file types
  * util: Delete unused argconfig help function
  * nvme-wrap: do_admin_args_op should not clear args timeout
  * nvme: Fix linux kernel check patch warnings
  * nvme: Fix linux kernel check patch errors
  * plugins/ocp: Add telemetry-log command to OCP plugin
  * plugins/ocp: Add OCP set latency monitor feature command
  * plugins/ocp: Fix endianness in Latency Monitor Log output
  * plugins/ocp: Add missing fields in Latency Monitor Log
  * plugins/ocp: Fix typos in Latency Monitor Log
  * plugins/ocp: Reorganize OCP plugin source code
  * tests: Add tests for controller reset
  * plugin/solidigm: Added vs-internal-log command.
  * nvme: Add nvme_show_perror to use instead of perror for json output
  * nvme-print-json: Use vasprintf instead of vsnprintf to allocate string
  * nvme: fix rnlpt to_string() values.
  * nvme: fix io_mgmt args parse error
  * fdp: set-events feature is saveable
  * fabrics: Return errno value as negative
  * fabrics: Fix linux kernel check patch errors and warnings
  * nbft: add the nbft show plugin
  * nbft: added NBFT v1.0 table support (jsc#PED-1449)
  * nbft: make lookup_ctrl function public
  * nvme: Fix indentation errors around nvme show error API
  * nvme: Check validate output format err value instead of flags
  * nvme: Use nvme show error API to outptu stderr messages for json format
  * util: Check output format json for json error message output
  * nvme-printf: Add show error function for nvme list command json output
  * nvme: Add zns specfic field for create ns
  * nvme: Add ns-mgmt host software specified fields
  * nvme: Add dtype, dspec on write-zeroes, write-uncor
  * nvme-print: Add new fields print on id directive
  * nvme-print: Add VWCNP on NSFEAT of id-ns
  * nvme: Fix format command to skip to reread NSID all block device
  * plugins/solidigm: Fixes and clean-up of Telemetry parse code. Fixed parsing of 64 bit values. Fixed COD field name. Fixed compilation warnings when compiling for 32 bit. Added missing free(). Consolidated single entry function to telemetry parser. Consolidated use of integer types.
  * doc: Documentations maintenance changes
  * doc: Add nvme-mi-send command documentation
  * doc: Add nvme-mi-recv command documentation
  * doc: Add clear-pcie-correctable-error-counters command documentation
  * doc: Add eol-plp-failure-mode command documentation
  * plugins/solidigm: Add firmware activation history log to Solidigm plugin
  * plugins/ocp: Add firmware activation history log to OCP plugin
  * nvme-print: Use enum nvme_print_flags for nvme_show_id_ctrl
  * nvme: Add support for NVMe-MI send command
  * nvme: Use stdout for passthru and submit_io commands success messages
  * nvme: Fix passthru command function indentation errors
  * nvme: Add support for NVMe-MI receive command
  * fabrics: fix fc config JSON file handling (bsc#1210089)
  Refresh 0100-harden_nvmf-connect@.service.patch
- Fix install path for nvme-regress script</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420800">- Enable test during build (bsc#1207686)
- Drop minimum version meson dependency
- Add asciidoc dependency
- Build documentation when requested</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696852800">- Use fixed timestamps for documentation allowing reproducable builds
- Announce nvmeof-boot-support support via Provides
- Filter rpmlint warnings for systemd-service-without-service_ macros
- Add missing service files for NBFT feature
  * add 0001-fabrics-autoconnect-add-service-unit-for-connecting-.patch
  * add 0002-fabrics-add-udev-rule-to-avoid-renaming-nbft-interfa.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1697112000">- Add missing jsc# and bsc# tracking entries in change log.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1702987200">- Update to version 2.7:
  * nvme-print-json: include vs for identify namespace
  * nvme-print-stdout: enhance connect message (bsc#1219086)
  * fabrics: fix connect error if hostid file does not exist (bsc#1219086)
  * fabrics: fix invalid output format error during nvme connect (bsc#1219086)
  * wdc: Fix vs-smart-add-log Command for SN650 and SN655
  * nvme: restric hmac options for gen-tls-key (bsc#1219086)
  * wdc: Fix UUID index fallback mechanism
  * plugins/ocp: Add OCP Telemetry String log page, Telemetry log page
  * completions: Add bash completions for telemetry string log page
  * plugins/solidigm: Added OCP 2.0 compatibility version command
  * plugins/solidigm: Added OCP 2.0 vs-drive-info command.
  * plugins/ocp: Fix printing order of various Latency Monitor Log buckets
  * nvme: validate output format split status from flag return value
  * nvme: simplify cleanup_nvme_dev()
  * cleanup: remove unused cleanup_charp()
  * wdc: Add support for SN861 2nd pci device id
  * nvme: replace libhugetlbfs with mmap and madvise
  * util/mem: move alloc helper to util section
  * nvme: auto cleanup filedescriptors
  * nvme: auto cleanup buffers
  * nvme: return error code in get_persistent_event_log
  * nvme: sanitize nvme-gen-tls-key
  * nvme: print out the resulting TLS identity for 'nvme check-tls-key'
  * nvme: Add version '1' identifier for nvme-gen-tls-key
  * subprojects/libnvme: update wrapper for TP8018
  * plugins/solidigm: Added re_sku_count smart atrribute
  * doc: Fix nvme-connect manpage --application option string
  * plugins/ocp: changed command clear-pcie-correctable-error-counters to match OCP 2.0 spec.
  * plugins/solidigm: Added command to clear PCIe Correctable Error Counters according to OCP 2.0
  * plugins/ocp: Reorganized clear feature code for better reuse
  * nvme: fixup length calculation for 'nvme gen-tls-key --secret'
  * doc: remove invalid hostkey info for --dhchap-secret
  * nvme-print-json: use human helper everywhere
  * nvme-print-json: remove obj_print helper
  * plugins/ocp: update nvme_show_select_result call
  * mailmap: only show contributer's name
  * nvme-print-json: Change to report status and message in array
  * nvme-print-json: Change to report feature select in array
  * nvme-print-json: Change to report error and data in array
  * nvme-print-json: Add show_init/finish calls to report features in array
  * nvme-print: Add nvme_show_error_status() to merge error message and status
  * nvme-print-json: Use r instead of root and use obj_add_***(r, ..., ...)
  * nvme-print-json: Delete static const char string global variables
  * nvme-print-json: Add remaining controller registers readable format
  * nvme-print-json: Add readable format cap, vs, cc, csts, nssr and crto registers
  * nvme-print-json: Combine duplicated json key and val string variables
  * nvme-print-json: Replase json_array_add_value_string() to array_add_str()
  * nvme-print-json: Replase json_object_add_value_uint128() to obj/root_add_uint128()
  * nvme-print-json: Replase json_object_add_value_object() to obj/root_add_obj()
  * nvme-print-json: Replase json_array_add_value_object() to array_add_obj()
  * nvme-print-json: Replase json_object_add_value_array() to obj/root_add_array()
  * nvme-print-json: Replase json_object_add_value_uint() to obj/root_add_uint()
  * nvme-print-json: Replase json_object_add_value_int() to obj/root_add_int()
  * nvme-print-json: Replase json_object_add_value_uint64() to obj/root_add_uint64()
  * nvme-print-json: Replase json_object_add_value_string() to obj/root_add_str()
  * nvme-print-json: Update feature_show_fields_*** to use root/obj_add_***()
  * nvme-print-json: Update lba_status_log to use root_add_***() and obj_add_***()
  * nvme-print-json: Replace lba_status_log printf() to root_add_result()
  * nvme-print-json: Add list_item print function
  * nvme-print-json: Add lba_status_info print function
  * nvme-print-json: Add lba_range print function
  * nvme-print-json: Add id_ctrl_rpmbs print function
  * nvme-print-json: Unify json_list and jroot object names to root
  * nvme-print-json: Add json_zns_changed print function
  * nvme-print-json: Add root_add_result() to output result message
  * nvme-print-json: Split persistent_event_log print function
  * nvme-print-json: Remove unnecessary string newline code
  * nvme-print-json: Replace effects_log_list print to use json_print()
  * nvme-print-json: Print persistent_event_log no log data result correctly
  * nvme-print-json: Add static "result" and "erorr" strings variables
  * nvme-print-json: Add single_property printf function
  * nvme: Replace get feature command stderr output to nvme_show_error()
  * nvme-print-json: Change d() output to use d_json()
  * nvme: Fix get-feature command mixed stdout and json outputs
  * nvme-print-json: Add remaining feature fields print functions
  * nvme-print-json: Update formatting and codying style
  * build: Add -std=c99 to CFLAGS for muon on CentOS 7
  * fabrics: add udev rule to avoid renaming nbft interfaces
  * fabrics: autoconnect: add service unit for connecting NBFT subsystems
  * fabrics: autoconnect: explicitly express module dependency
  * Updates to codeql config
  * libnvme-wrap: exit on VOID_FN lookup failure
  * plugins/ocp:Added the ocp C6h feature api
  * plugin/ocp_fid_c6h:Added the ocp C6h feature api
  * nvme-copy: support cross-namespace copy
  * nvme/plugins: fix mismatch operator
  * nvme: fix overflow possiblity
  * nvme: reduce identify cmd issue
  * nvme: allow set-features to take input from stdin
  * Fix common misspellings from codespell project
  * nvme-print: Correct to print correct ascii character string length
  * print-stdout: print Host Behavior Support correctly
  * build: Bump libnvme wrap
  * plugins/solidigm: Added support for temperature statistics log page
  * Add support for codeql sweeps
  * doc: Add virt-mgmt command
  * doc: Add id-uuid command
  * doc: Add list-secondary command
  * doc: Add id-ns-granularity command
  * doc: Add nvme commands --output-format and --verbose options
  * completions: Add nvme-mi-recv nad nvme-mi-send commands completions
  * completions: Change short option -o and -v duplicated to upper case
  * doc: Change short option -o and -v duplicated to upper case
  * nvme: Change short option -o and -v duplicated to upper case
  * nvme: Change phy-rx-eom-log command to use NVME_ARGS instead
  * plugins/memblaze: Add smart-log-add and latency-feature functions
  * plugins/solidigm: internal-logs Telemetry auto detect last data area.
  * nvme: Change to use NVME_FLBAS_META_EXT() macro to check flbas value
  * nvme-print-json: Add host memory buffer and timestamp features print functions
  * nvme-print-json: Add feature fields print functions
  * nvme-print-json: Add TMPTH feature print function
  * nvme-print-json: Add show_feature_fields print function
  * nvme-print-json: Add select_result print function
  * nvme-print-json: Use json_print to print and free object
  * nvme-print-json: Add lba_status print function
  * nvme-print-json: Combine variable definition and setting value
  * nvme-print-json: Add id_iocs print function
  * nvme-print-stdout: Fix coding style errors
  * nvme-print-json: Add directive print function
  * nvme: Fixed segmentation fault when getting host initiated telemetry
  * plugins/wdc: enhanced SN861 device support
  * plugins/wdc: cleanup line lengths
  * nvme: do not include meta data for PRACT=1 and MD=8
  * nvme: use block-count arg if provided
  * build: bump libnvme to disable tests option
  * build: Add static build on CI target
  * nvme-print: Add nvme_zns_start_zone_list() API function
  * nvme-print: Add nvme_zns_finish_zone_list() API function
  * nvme-print-binary: Set list function to NULL if unimplemented
  * nvme-print-json: Change order list functions and set NULL if unimplemented
  * nvme-print-stdout: Fix to set stdout_list_item print function missed
  * plugins/solidigm: log page name extraction using nvme_log_to_string function
  * nvme-print: Added missing logpage names in nvme_log_to_string function
  * udev-rules: rename netapp udev rule (bsc#1219086)
  * udev-rules: set ctrl_loss_tmo to -1 for ONTAP NVMe/TCP (bsc#1219086)
- Remove upstreamed patches
  * remove 0001-fabrics-autoconnect-add-service-unit-for-connecting-.patch
  * remove 0002-fabrics-add-udev-rule-to-avoid-renaming-nbft-interfa.patch
- Update spec file
  * remove libhugetblfs depedency
  * update NetApp udev rule file name</changelog>
  <changelog author="daniel.wagner@suse.com" date="1703160000">- Update to version 2.7.1:
  * nvme-print-json: Revert field name changes (bsc#1218306)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1707912000">- Update to version 2.8:
  * nvme-print-json: append array object in json_support_log
  * sed: Add plugin for basic SED Opal operations (jsc#PED-5061)
  * don't include newlines in already wrapped text
  * nvme: do not include meta data for PRACT=1 and MD=8 (version 2)
  * create-ns: align the namespaces to 1Mib boundaries when using SI suffixes
  * doc: Fix config-schema.json's URL
  * plugins/solidigm: Compressing vs-internal-log log files into zip file.
  * nbft: do not issue an error if ACPI tables are missing
  * nbft: fixup include for libnvme
  * doc: Fix short option name for cfg-file
  * completions: added Solidigm plugin to autocomplete scripts
  * nvme: Remove unused cfg argument from NVME_ARGS() macro
  * nvme: fix directive receive identify offsets
  * nvme-fabrics: enable option 'concat'
  * build: Update libnvme wrap
  * plugins/wdc: Add Debug Log Collection Support
  * nbft: fix tcp/dhcp address fallback retry (bsc#1218873)
  * nvme: use correct telemetry log size
  * nvme-print: fix typo in list verbose output (bsc#1219086)
  * nvme: print inserted tls key for check-tls-key (bsc#1219086)
  * plugins/wdc: Plugin fixes and updates
  * fabrics: move hostid/hostnqn warnings to verbose level (bsc#1219086)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737600">- Update to version 2.9:
  * nvme-print: expand the maximum field length to prevent misalignment
  * plugins/spdk: plugin to list SPDK subsystems
  * nvme-print: check if controller belong to SPDK
  * plugins/spdk: plugin to list SPDK controllers
  * nvme-print-stdout: fix ASQB, ACQB and BMBBA prints
  * build: bump libnvme wrap
  * nvmf-autoconnect: fix string encoding
  * nvme: identify primary ctrl do not accept nsid
  * nvme-wrap: remove unused nvme_cli_get_log_ana_groups()
  * nvme-print-json: use admin queue attributes definitions
  * nvme-print-json: use CSTS definitions
  * nvme-print-stdout: use POWER_OF_TWO macro
  * nvme-print-json: use controller configuration definitions
  * nvme-print-json, nvme-print-stdout: add tertiary version number
  * nvme-print-json: use NVME_MAJOR and NVME_MINOR definitions
  * nvme-print-json: use NVME_BOOT_PARTITION_INFO field definitions
  * nvme-print-json: add support telemetry log create event in PEL
  * nvme-print-json: add support set feature event in PEL
  * nvme-print-json: add obj_d() function
  * nvme-print-json: add obj_add_uint_0nx() function
  * meson.build: Fix spelling of sed-opal.h filename
  * sed_opal: Only build when we really have sed_opal headers
  * nvme: fix error path if write() fails in get_telemetry_log()
  * plugins/solidigm: Additional LID for temperature statistics.
  * plugins/solidigm: Improved Solidigm UUID index detection.
  * nvme-print-stdout: Add CSTS.ST register stdout print
  * nvme-print-stdout: Use NVME_CMIC definitions
  * nvme-print: Use NVME_UNIT definitions
  * nvme-print-stdout: Use NVME_CMBMSC/STS/EBS/SWTP definitions
  * plugins/ssstc: add a new plugin for SSSTC driver
  * nvmf-connect: systemd hardening effort
  * plugins/ocp: Adjusted variable type size carrying UUID index to 8 bit.
  * nvme: fix security buffer allocation size
  * nvme: Change fw-download xfer initialization to set 0
  * nvme: Add fw-download warning message for FWUG alignment error
  * plugins/ocp: Split ocp_get_uuid_index() into find and get functions.
  * nvme: fix mem leak in multiple key related functions (bsc#1223331)
  * fabrics: fix mem leak in nvmf_check_hostid_and_hostnqn() (bsc#1223331)
  * nvme-print-stdout: Use NVME_BPRSEL definitions
  * nvme-print-stdout: Use NVME_BPINFO definitions
  * nvme-print-stdout: Use NVME_CMBSZ definitions
  * nvme-print-stdout: Use NVME_CMBLOC definitions
  * Revert "logging: fix error handling for ioctl passthru wrappers"
  * fabrics: align identify command payload
  * ocp: Unify line start spacing as tabs
  * ocp: support OCP DSSD Async Event Config feature
  * nvme: Add support for get-reg and set-reg commands
  * nvme-print-json: Add register print functions
  * nvme-print-stdout: Add register print functions
  * nvme-print: Add register print functions
  * nvme: Refactor mmap_registers to add writable parameter
  * nvme-print: Change PMRSZU string function as unit string
  * nvme-print: Refactor CMBLOC and PMRSTS registers function
  * logging: fix error handling for ioctl passthru wrappers
  * nbft: Fix scandir() error check
  * nbft: Refactor connection attempt out
  * nvme-print: Use EOM optional data present macros changed
  * nvme-print: Print cntlid number for controller (bsc#1224024)
  * nvme: check-tls-key fails despite having hostnqn file (bsc#1223331)
  * nvme: print retained key for gen-tls-key's -i option too (bsc#1223331)
  * fabrics : allow host to create duplicate connections to target
  * fabrics: Fix fast_io_fail_tmo option
  * nvme-print-stdout: use admin queue attributes definitions
  * nvme-print-stdout: use CSTS definitions
  * nvme-print-stdout: use controller configuration definitions
  * nvme-print-stdout: use NVME_MAJOR and NVME_MINOR definitions
  * nvme-print-stdout: use FDP configuration attributes definitions
  * nvme: add new function 'tls_key' (bsc#1226197)
  * nvme: use library functions for importing and exporting TLS keys (bsc#1216982)
  * nvme: extend error message for ns scan failures
  * nvme-print-json: Bugfix status json key of sanitize-log
  * sed: update SED password when initalizing (bsc#1222168)
  * plugins/memblaze: add performance stats
  * plugins/memblaze: fix code mis-type error
  * plugins/memblaze: code refactor on applying __packed on more structs
  * plugins/memblaze: code refactor on using cleanup_nvme_dev
  * nvme: Fix to cleanup free raw_secret memory allocated
  * plugins/memblaze: code-format on leading indent and align
  * plugins/wdc: Fix narrow index variable type in for loop to __u32
  * plugins/wdc: Whitespace changes
  * nvme: Delete unused nvme root scanned
  * ocp: support OCP 2.5 Set Telemetry Profile feature
  * nvme: Don't seg fault if given device is not char/block device
  * nbft: Include SSNS index in error messages (bsc#1222026)
  * nbft: Pause logging for expected connection failures (bsc#1222026)
  * nbft: Silence connection failures for unavailable SSNS (bsc#1222026)
  * nbft: Fix 'verbose' argument type (bsc#1222026)
  * plugins/nbft: Implement verbose logging
  * plugins/nbft: Print the new SSNS flags
  * nbft: Fix uninitialized variable
  * plugins/nbft: Fix uninitialized variables
  * plugins/sed: Fix uninitialized variable
  * nvme-print-stdout: Fix uninitialized variable
  * nvme-print-json: Fix uninitialized variable
  * build: Switch default meson buildtype to 'debugoptimized'
  * nvme: do not scan topology when mmaping registers
  * nvme-print-stdout: Use NVME_BOOT_PARTITION_INFO field definitions
  * nvme-print-stdout: Use NVME_GET for MI commands supported and effects CSP
  * nvme-print-stdout: Use NVME_GET for FID supported and effects FSP
  * nvme-print-stdout: Use NVME_SET_FEAT_EVENT register definitions
  * nvme-print: Add PEL EHAI port identifier type printf function
  * build: bump libnvme wrap
  * ocp: fix for power-state argument checking
  * nvme: do not issue warning when nvme_core module is not loaded
  * wdc: Review changes and build fixes
  * wdc:  Fix timestamp displayed by vs-firmware-activate-history command
  * logging: Split to output ioctl latency by log info level (bsc#1231668)
  * nvme-print-stdout: Change hexadecimal value 0x prefix to use %#x
  * nvme-print-stdout: Fix LBA status DSLBA output as hexadecimal
  * nvme-print-stdout: Split line length exceeded 100 columns
  * nvme-print-stdout: Use NVME_PMRMSC register definitions to print
  * nvme-print-stdout: Use NVME_PMRSWTP register definitions to print
  * nvme-print-stdout: Use NVME_PMREBS register definitions to print
  * nvme-print-stdout: Use NVME_PMRSTS register definitions to print
  * nvme-print-stdout: Use NVME_PMRCTL_EN register definition to print
  * nvme-print-stdout: Use NVME_PMRCAP register definition to print
  * doc: Fix admin and io passthru cdw parameters description
  * doc: Add get-feature cdw11 and set-feature cdw12 parameters
  * micron-nvme: Unuse stat() to check if strMainDirName exists
  * doc: Fix get-property and set-property offset and value descriptions
  * doc: Fix documentation file mode 100755 to 100644
  * nvme-print-stdout: Fix channel configuration descriptors pointer
  * nvme-print-stdout: Check sscanf return value
  * nvme-print-stdout: Fix linux kernel check patch errors
  * nvme: Delete unusual fallthrough for cases have no body
  * nvme: Delete duplicated semicolon
  * nvme-print, common: Fix for whitespace change
  * logging: output ioctl debugging info (bsc#1231668)
  * nvme: track verbose level (bsc#1231668)
  * logging: track log level globally
  * logging: move logging code to a new file
  * nvme: update include for libnvme
  * nvme: remove unused declaration
  * build: bump libnvme wrap
  * nvme-netapp: add nspath tlv handling (bsc#1220971)
  * rpm: Add missing rule and service files
  * nvme-print-json, nvme-print-stdout: Use CHAR_BIT definition
  * nvme-print-stdout: Delete duplicated if condition checking line
  * ocp: Fix timestamp displayed by fw-activate-history command
  * wdc: Add support for the get-drive-status command to SN861
  * nvme-print: Fix nvme_host_metadata_type_to_string() indentation errors
  * nvme-print: Add PEL RCI port identifier type printf function
  * nvme-print-stdout: Use persistent event log RCI definitions
  * build: bump libnvme wrap
  * nvme: Add show-regs and get-property commands NSSD print outputs
  * nvme-print: print more details in ns-descs verbose output (bsc#1223331)
  * Revert "nvme-print-json: remove obj_print helper"
  * sed: Confirm entered password before initialization.
- drop systemd service harden file, upstream ships this patch.
  * remove 0100-harden_nvmf-connect@.service.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737601">- Update to version 2.9.1:
  * plugins/spdk: drop the plugin</changelog>
  <changelog author="daniel.wagner@suse.com" date="1722600000">- Update to version 2.10:
  * sed: Fix parsing of Discovery0 features
  * fabrics: avoid potential segfault in nvmf_dim() (bsc#1231668)
  * nvme: avoid segfault in show-topology (bsc#1226197)
  * fabrics: do not leak nvme_ctrl_t object on connect
  * nvme: extend help message when mmap regs fails
  * nvme: return -ENXIO value to open device if errno not set
  * wdc: OCP 2.5 Log Page Updates
  * fabrics: drop --quiet alias -S
  * fabrics: drop --disable-sqflow alias -d
  * fabrics: check if json config is existing (bsc#1231668)
  * plugins/ocp: fix UAF when printing telemetry log
  * nvme-print-stdout: fix persistent-event-log set feature event output
  * fabrics: do not report error when no modules are loaded when disconnecting
  * fabrics: use cleanup helper where possible
  * fabrics: print an error for ENOENT too
  * plugins/virtium: use time_t for time_stamp values
  * completions: add ocp set-error-injection command
  * doc: add ocp set-error-injection command
  * ocp: add set-error-injection command
  * nvme: use argconfig_parse_seen to check conditions
  * nvme: use proper mask to get correct lbafu value
  * utils: fix print formatting option
  * utils: cleanup includes in utils.h
  * utils: add missing header
  * nvme-print: Added print for two new fields for HMB feature
  * plugins/micron: Move OCP internal log parsing from Micron to OCP Plugin.
  * fabrics: remove unused _discover_from_json_config_file() argument
  * nvme: avoid unnecessary dup() + close() in io_mgmt_send()
  * util: remove unnecessary NULL check in cleanup_nvme_root()
  * nvme: use argconfig_parse_comma_sep_array_u16() in attach-ns
  * util: avoid duplication in argconfig_parse_comma_sep_array*()
  * util: remove redundant loop condition in argconfig_parse()
  * util: introduce is_null_or_empty() to avoid strlen()
  * util: reduce allocation sizes in argconfig_parse()
  * util: consolidate call paths to argconfig_parse_type()
  * util: reduce complexity of argconfig_parse_val()
  * util: reduce arguments passed to argconfig_parse_type()
  * util: remove empty default case in argconfig functions
  * util: remove unnecessary parentheses in argconfig_parse_type()
  * util: remove redundant cast in argconfig_parse_type()
  * util: inline argconfig_parse_byte()
  * util: remove redundant NULL check in argconfig_print_help()
  * util: use cleanup to avoid goto in argconfig_parse()
  * util: make argconfig_set_opt_val() a void function
  * util: remove argconfig_parse_val() declaration
  * util: remove argconfig CFG_SIZE type
  * wdc: Update and refactor the C0h log page parsing
  * ccan: Add freed pointer checking to delete strset member
  * fabrics: connect all hosts in config.json (bsc#1226216)
  * fabrics: refactore discover from json config (bsc#1226216)
  * fabrics: first read config before topology scanning (bsc#1226216)
  * fabrics: use helper to lookup default hostnqn/hostid (bsc#1226216)
  * fabrics: extend already connected message (bsc#1226216)
  * fabrics: use cleanup helper to free nvme root object
  * nvme: check MD size with PI size when PRACT set to 1
  * nvme-print: add new field added in TP4090
  * nvme-print-binary: add effects-log command output missed
  * completions: add ocp get-error-injection command
  * doc: add ocp get-error-injection command
  * ocp: add get-error-injection command
  * ocp: fix eol-plp-failure-mode command sel option value
  * doc: fix ocp eol-plp-failure-mode select short option
  * ocp: set UUID index for eol-plp-failure-mode command to get
  * nvme: fix verbose logging (bsc#1231668)
  * doc: fix micron ocp telemetry log parse title
  * nvme-rpmb: send RPMB_REQ_READ_RESULT for authentication key programming
  * plugins/micron: Add support for OCP telemetry log parsing
  * ocp: Update Plugin Version
  * nvme: fix lbaf inuse to use 6:5 bits
  * ocp: use NVME_ARGS macro definition by eol-plp-failure-mode command
  * nvme: extern NVME_ARGS macro definition
  * nvme: use _cleanup_free_ type buffer for get-feature command
  * plugins/ocp: Update telemetry string log page (C9h)
  * nvme-print-json: add get-feature command fahrenheit temperature output
  * nvme: add get-feature and id-ctrl commands fahrenheit outputs
  * nvme: delete smart-log command fahrenheit option
  * nvme-print: check locale to use temperatures in degrees fahrenheit
  * completion: add support for tls-key (bsc#1226197)
  * doc: add tls-key --revoke documentation (bsc#1226197)
  * doc: fix tls-key --keyfile shorthand (bsc#1226197)
  * nvme: add support to revoke TLS key (bsc#1226197)
  * nvme: return error code/message for TLS commands (bsc#1226197)
  * nvme: factor out import key function (bsc#1226197)
  * nvme: use cleanup helper to close file descriptor (bsc#1226216)
  * nvme-rpmb: use cleanup helper for STREAM objects
  * fabrics: use cleanup helper for STREAM objects
  * nvme: use cleanup helper for STREAM objects (bsc#1226216)
  * nvme: strip newline when parsing TLS key files (bsc#1226197)
  * nvme: use stdout for exporting TLS keys (bsc#1226197)
  * nvme: change _cleanup_file_ to _cleanup_fd_ (bsc#1226197)
  * common.h: Avoid using unsupported load/store instructions in arm64 VMs
  * ocp: OCP 2.5 Telemetry DA 1 and 2 Parsing Updates
  * nvme-print-stdout: refactor subsys config (bsc#1231668)
  * wdc: Fix compiler warning.
  * nvme: add flags type nvme_print_flags_t
  * nvme-print: Use 'unsigned int' instead of 'unsigned'
  * nvme: update parse_args() return value handling
  * nvme-print: Fix nvme_show_smart_log indentation error
  * nvme-print-stdout: Fix stdout_smart_log indentation error
  * nvme-print-binary: Fix binary_smart_log indentation error
  * completions: add smart-log command fahrenheit option
  * doc: Add smart-log command fahrenheit option
  * nvme: Add smart-log command fahrenheit option
  * nvme-print: add PEL vendor specific and TCG defined events strings
  * nvme-print: Print PEL reserved event string
  * completions: Add timeout option bash completions
  * completions: Add timeout option zsh completions
  * completions: Add io-mgmt-recv/send commands zsh completions
  * completions: Add /dev/nvme argument missed
  * completions: Change fw-activate command name to fw-commit
  * completions: Fix _nvme indentation errors (bsc#1226197)
  * completions: Fix bash-nvme-completion.sh indentation errors (bsc#1226197)
  * doc: Add nvme commands timeout option
  * nvme: Add support for delete-ns command timeout option
  * nvme: Change NVME_DEFAULT_IOCTL_TIMEOUT to use nvme_cfg timeout
  * nvme: Add nvme_cfg timeout default option
  * nvme: Add nvme_cfg global variable for NVME_ARGS default options
  * nvme: add helper function to get pif and sts value
  * nvme: choose PIF from QPIF if QPIFS supports and PIF is QTYPE
  * nvme: use libnvme's atomic ANA log page fetch
  * nvme: fix maximum ANA log page length calculation
  * nvme-print-json: add missing va_end()
  * fabrics: skip namespace scan for fabric commands
  * nvme-print: print the new fields added in TP4141a
  * plugins/ocp: underflow + index fixes for telemetry
  * plugins/ocp: Add ocp TCG Configuration Log Page
  * nvme-print-stdout: Add helper function to print PIF in string form
  * doc: fix format command info
  * nvme: telemetry: report the correct error if the ioctl() fails.
  * nvme-print: add the cancel opcode to the nvme_cmd_to_string() list
  * doc: fix ocp format issues
  * nbft: Reuse existing discovery controller
  * nbft: Skip SSNS records pointing to well-known discovery NQN
  * nbft: Perform actual discovery
  * util/cleanup: Add cleanup for struct nvme_fabrics_uri
  * fabrics: Make some symbols public (bsc#1226216)
  * nvme-print-stdout: fix format index in stdout_nvm_id_ns
  * plugins/solidigm: Added workload-tracker command
  * plugins/solidigm: Added extra VU fields to id-ctrl
  * nvme-print-stdout: print MEM bit of CTRATT field
  * nvme-print-stdout: fix to print the log line by line
  * fabrics: Always pass hostid and hostnqn (bsc#1226216)
  * plugins/ssstc: Replace __uint16_t with uint16_t
  * plugins/solidigm: Added log pages to vs-internal-logs
  * sed: perform a tper revert after lsp revert
  * plugins/nbft: Use default library logging
  * docs: Add missing OCP plugin docs to meson
  * ocp: Switch OCP plugin to use semantic versioning
  * nvme: fix fw-commit MUD result message
  * sed: only re-read partition table after unlock.
  * nvme-print-json: Fix LBA status DSLBA output as hexadecimal
  * nvme-print-json: Use NVME_PMRxxx register definitions to print
  * nvme-print-stdout: Fix PMRWBM register name
  * nvme-print-json: Fix channel configuration descriptors pointer
  * nvme-print-json: Fix linux kernel check patch errors
  * nvme-print: Added "Command and Feature Lockdown" string to LID 0x14
  * plugins/innogrit: `u_char` -&gt; `unsigned char`
  * nvme: Use C99 types for uint32_t
  * nvme-print-stdout: print frl1/2/3 values for zns id-ns
  * solidigm: Eliminate &lt;linux/limits.h&gt;
  * nvme: remove double free in persistent-event-log
  * ocp: Add Get DSSD Power State Feature (FID: C7h)
  * nvme: initialize default library logging
  * nvme: use cleanup helper for nvme_root_t objects (bsc#1226197)
  * doc: add nvme connet ctrl-loss-tmo description
  * plugins/solidigm: Automatic enabling Data Area 4 when retrieving Telemetry.
- always build the docs
  * add 0001-docs-rename-ocp-unsupported-req-log-file.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1730376000">- Update to version 2.11:
  * docs: update check-tls-key arguments
  * nvme: add support to append TLS PSK to keyfile for check-tls-key
  * nvme: return correct error code in append_keyfile
  * docs: nvme-id-doman: dom{ia =&gt; ai}n
  * ocp: fix latency monitoring data structure entry endian
  * ocp: fix TCG configuration log endian
  * ocp: fix firmware activation history entry endian
  * docs: update gen-tls-key arguments
  * nvme: add support to add derive TLS PSK to keyfile
  * nvme: rename identity to version
  * nvme: set file permission for keyfile to owner only
  * nvme: export tls keys honoring version and hmac
  * nvmf-keys: add udev rule to import tls keys
  * docs: update TLS options
  * fabrics: add support to connect to accept a PSK command line
  * fabrics: add support to connect to accept a configuration
  * nvme: use unsigned char for hmac and identity
  * nvme-print: Add Sanitize Media Verification Event in PEL log
  * netapp-ontapdev: add err msg for no ontapdevices
  * netapp-smdev: add err msg for no smdevices
  * doc: Add sanitize command emvs option
  * ocp: combine to use GUID length definitions
  * nvme: update tls_key() handling
  * nvme-print-stdout: print VERS bit of SANICAP field
  * nvme: add EMVS support to sanitize command
  * ocp: remove callback function cast
  * doc: added commit conventions to contribution guidelines
  * ocp: fix ocp-print-stdout.c indentation error
  * ocp: fix ocp-nvme.c indentation errors
  * ocp: build ocp-nvme.c and ocp-telemetry-decode.c without json
  * ocp: split TCG configuration log print codes
  * ocp: split telemetry string log print codes
  * ocp: split device capabilities log print codes
  * ocp: split error recovery log print codes
  * ocp: split unsupported requirement log print codes
  * ocp: split latency monitor log print codes
  * ocp: move ocp telemetry log print function into ocp-print
  * ocp: split smart extended log print codes
  * ocp: split ocp-fw-activation-history print codes
  * plugins: update meson.build file to always build ocp plugin
  * ocp-print: move json code into separate files
  * nvme-print-json: display only verbose output
  * ocp-nvme: ocp plugin version update
  * nvme-print: print KV command set page header
  * doc: show where self-test results can be found
  * plugins/memblaze: fix a wrong id on smart-log-add
  * plugins/dapustor: smart-log-add fix
  * plugins/sed: add sid password change (bsc#1229677)
  * plugins/solidigm: Automatic retry smaller log chunk size.
  * ocp-nvme: Add LMDATA-37 for Latency Monitor Log
  * ocp-nvme: remove ocp log page version checking
  * wdc: Fix for Reading WDC C2 Vendor Unique Log Page
  * ocp: Fixes for OCP 2.5 Telemetry DA1 FIFO Event Parsing
  * nvme-print-json: update JSON verbose output for nvm-id-ctrl (bsc#1231668)
  * wdc: Add Support for SN5100S
  * nvme: Support show-regs for nvmeof
  * ocp: fix option handling in internal-log
  * Documentation: Added solidigm plugin commands
  * wdc: add support for SNTMP drive
  * nvme-print: print NSSES field of CAP register
  * ocp: fix GUID output
  * nvme-print-json: print controller register values in offset order
  * nvme-print-json: print CMBEBS and CMBSWTP in json format
  * nvme-print-stdout: update changed-ns-list-log output (bsc#1231668)
  * nvme: fix uninitialized value in error-log (bsc#1231668)
  * nvme: fix to convert metadata size to native byte order
  * nvme-print: fix error information log page endianness error
  * completions: add get-feature command changed option
  * doc: add get-feature command changed option
  * nvme: separate get NVME_GET_FEATURES_SEL_CHANGED definition
  * nvme: use NVME_GET_FEATURES_SEL definitions
  * nvme-print-stdout: use NVME_CTRL_OAES definitions
  * completion: add ocp set-telemetry-profile to zsh
  * completion: add solidgm work-tracker binding
  * plugins/solidigm: Added Workload Tracker Triggers and Wall Time
  * ocp: include util/types.h to use nvme_uint128_t
  * ocp: fix to set log data pointer allocated
  * nvme: use NVME_CHECK() to check get features select field value
  * ocp: split ocp-hwcomp log
  * completions: add ocp hardware-component-log command
  * doc: add ocp hardware-component-log command
  * ocp: add hwcomp log json output
  * ocp: add hwcomp log command list option
  * ocp: add hwcomp log command comp-id option
  * ocp: add hwcomp dummy definition
  * ocp: add support for hwcomp log page
  * nvme: use NVME_CTRL_FNA definitions
  * netapp-smdevices: print single device output too (bsc#1231668)
  * netapp-smdevices: segregate print routines (bsc#1231668)
  * Add Support for new SN655 PCI Device ID
  * nvme-print-json: extern json object add functions
  * ocp: add SMART / health information extended log page version 4
  * ocp: add error recovery log page version 3
  * ocp: add get-enable-ieee1667-silo command
  * fabrics: fix incorrect access filename check (bsc#1231668)
  * nvme: use NVME_GET_FEATURES_SEL_SUPPORTED definition
  * nvme-print-json: use _cleanup_free_
  * plugins/solidigm: fix use after free.
  * ocp: fix ocp-nvme.c coding style errors
  * ocp: Change C9 function names to use c9 instead
  * ocp: fix to return c9 log page data error to open file
  * ocp: fix to set return value to get c9 log page data
  * nvme: update nvme_insert_tls_key_versioned() return handling (bsc#1231668)
  * nvme-print-stdout: add print_array function
  * logging: add print_info function
  * util: extern uint128_t_to_double() function
  * nvme-print: sanitize error-log output (bsc#1231668)
  * plugins/solidigm : Fixing vs-internal-log to generate identify per allocated namespace.
  * nvme-print: added new fields for nvm_id_ns
  * plugins/fdp: bugfix error check to validate output format
  * plugins/wdc: fix json output for vs-nand-stats
  * nvme-print-stdout: use NVME_FEAT util definitions
  * nvme-print: update subsys verbose outputs (bsc#1231668)
  * nvme-print: add subsystype to the list-subsys output (bsc#1231668)
  * netapp: print output for single device too (bsc#1231668)
  * netapp: segregate the print routines (bsc#1231668)
  * netapp: fix uninitialized value from heap error (bsc#1231668)
  * nvme-print: print the new fields added in TP4142
  * plugins/innogrit: modify for project tacoma
  * wdc: Add Support for new SN-861 PCI device id
  * nvme-print: use LC_MEASUREMENT to check fahrenheit temperature
  * nvme-print: use Completion Condition enum
  * completions: add the zsh completion of the dapustor plugin
  * nvme-print: print the new fields added in TP4165
  * plugins/dapustor: dapustor smart-log-add update
  * nvme-print-stdout: Added print for new field CSER (TP4167)
  * plugins: Add a new DapuStor plugin and the smart-log-add command
  * docs: rename ocp-unsupported-req-log file
- Drop build fix patch
  * remove 0001-docs-rename-ocp-unsupported-req-log-file.patch
- Install 70-nvmf-keys.rules to the default udev rules directory</changelog>
  <changelog author="dwagner@suse.de" date="1741089600">- Update to version 2.11+17.g6e09119:
  * nvme: check for valid output format (bsc#1237275)
  * nvme: make get-feature JSON output print everything (bsc#1237275)
  * nvme: make -v output consistent with -H output for nvme get-feature (bsc#1237275)
  * nvme: make -v output consistent with -H output for nvme get-property (bsc#1237275)
  * nvme-print-stdout: add details in list-ns verbose output (bsc#1237275)
  * nvme-print-stdout: add descriptions for nsze, ncap &amp; nuse (bsc#1237275)
  * netapp-ontapdev: correct the basestr header (bsc#1237275)
  * netapp-smdev: update err msg for no smdevices (bsc#1237275)
  * netapp-ontapdev: update err msg for no ontapdevices (bsc#1237275)
  * netapp-smdev: update basestr header in verbose output (bsc#1237275)</changelog>
  <changelog author="dwagner@suse.de" date="1745323200">- Update to version 2.11+22.gd31b1a01:
  * nvme-print: display fw-rev in list-subsys output (bsc#1240518)
  * nvme-print: display model in list-subsys output (bsc#1240518)
  * netapp-ontapdev: add subsysname to regular output (bsc#1240518)
  * netapp-ontapdev: add subsysname to the verbose output (bsc#1240518)
  * Revert "nvme-print-json: display only verbose output"</changelog>
  <changelog author="dwagner@suse.de" date="1753185600">- Update to version 2.11+26.gfbd2b4f4:
  * nvme: fix mem leak in nvme copy (bsc#1243716)
  * nvme-print: suppress output when no ctrl is present for list-subsys (bsc#1243716)
  * nvme: extend filter to match device name (bsc#1243716)
  * udev-rules-ontap: switch to queue-depth iopolicy (bsc#1246599)</changelog>
</package>
<package pkgid="71f2d27d7b5e3d062ec1db07a5dacd25f254c25b4cc46ebc01375170b9f49c3c" name="nvme-cli" arch="src">
  <version epoch="0" ver="2.11+28.g2fc67685" rel="150700.3.9.1"/>
  <changelog author="dmueller@suse.com" date="1660737600">- Update to version 2.1.2:
  * build: Update version to v2.1.2
  * wrapper: Update SPDIX license
  * wrapper: Call library version of nvme_init_copy_range_f1
  * Revert "udev: re-read the discovery log page when a discovery controller reconnected"
  * nvme: Simplify ns list identify
  * meson: we don't need a c++ compiler
  * plugins/ocp: drop unused fd argument
  * plugins/wdc: remove fd argument from print functions
  * plugins/wdc: fix memset() on the address of a pointer
  * plugins/solidigm: fix return value on format parse failure
  * plugins/wdc: prevent duplicate close on NVMe device</changelog>
  <changelog author="daniel.wagner@suse.com" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- Mark no binaries rpms as noarch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 2.2.1:
  * Added parsing for Solidigm telemetry observable data.
  * add item ddr_ecc_err_cnt in smart-log-add
  * build: Drop dependency on libuuid
  * build: Fix endian check for cross build
  * build: Remove unused uuid.wrap file
  * build: Remove unusned uuid.h include
  * completions: Add show-topology tab completion
  * fabrics: Honor JSON config file in connect-all command (bsc#1199504)
  * fabrics: Trigger auto connect if config.json exists
  * fabrics: fix 'persistent' handling during connect-all with JSON file
  * fabrics: nvme config --modify depends on -n and -t argument
  * fabrics: re-read the discovery log page when a discovery controller reconnected
  * json: Support uint64 types serialization for older json-c versions
  * nvme, plugins: fix __u64 -&gt; unsigned long long assumptions
  * nvme-print: Add missing values in id-ctrl for JSON output
  * nvme-print: Handle NULL hostid in JSON output
  * nvme-print: Output 128bit values as uint128 type instead of double
  * nvme-print: Print fguid as a UUID
  * nvme-print: Use uint128 JSON function for media_units_written
  * nvme-print: decode MI status values
  * nvme-print: decode status types
  * nvme-print: fix wrong json key
  * nvme: Add helper function to parse 16-bit comma separated list
  * nvme: Add nvme_cmd wrapper for get_features
  * nvme: Add show-topology command
  * nvme: Add wrapper for Format NVM
  * nvme: Add wrapper for Sanitize NVM
  * nvme: Add wrappers for Get Log page helpers
  * nvme: Add wrappers for Identify controller lists
  * nvme: Add wrappers for NS attach/detach
  * nvme: Add wrappers for NS management functions
  * nvme: Add wrappers for basic NS identify
  * nvme: Add wrappers for firmware commands
  * nvme: Fix set feature command to get feature identifier 0Dh length as zero
  * nvme: Introduce a union in struct nvme_dev for different transport types
  * nvme: Introduce nvme_cli_ wrappers, wrap identify and identify_ctrl
  * nvme: Make static nvme_dev private to open_dev(), use locals elsewhere
  * nvme: Masks SSTAT in sanize-log output
  * nvme: Remove static nvme_dev, allocate on open instead
  * nvme: Use correct print format specifier for sizeof arguments
  * nvme: Use local struct nvme_dev for show_registers &amp; map_registers
  * nvme: check if cfg.metadata is NULL before passing it to strlen()
  * nvme: use helpers for checking status types
  * plugins/innogrit: Include timer.h
  * plugins/innogrit: add smart items for smart-log-add
  * plugins/micron-nvme: Use correct print format specifier for sizeof arguments
  * plugins/ocp: Include timer.h
  * plugins/ocp: Output 128bit values as uint128 type instead of double
  * plugins/ocp: pass struct nvme_dev to internal functions
  * plugins/seagate: Add support for OCP
  * plugins/toshiba: pass struct nvme_dev rather than fd + name
  * plugins/virtium: Output 128bit values as uint128 type instead of double
  * plugins/wdc: Add support for SN660 drive
  * plugins/wdc: Add type case for feature id
  * plugins/wdc: Output 128bit values as uint128 type instead of double
  * plugins/wdc: pass a struct nvme_dev around rather than a fd
  * plugins/wdc: pass struct nvme_dev rather than using global nvme_dev
  * plugins/ytmc: pass struct nvme_dev rather than fd + name
  * plugins: Use PRIu64 format specifier for 64bit types
  * print: Add Controller Ready Timeout Exceeded HW error code
  * solidgm: fix initialization warning
  * solidigm: Added parsing for telemetry customer screenable data
  * solidigm: Fix printf format for size_t variable
  * solidigm: Updated Telemetry parsing code to MIT license.
  * subprojects/libnvme: update for MI admin command coverage
  * tests: Update license to GPL-2.0-or-later
  * tree: Add NVMe-MI support
  * tree: Add dev_fd() helper
  * tree: Change nvme_dev from global to static
  * tree: Combine NVMe file descriptor into struct nvme_dev
  * tree: Move global device info to a single struct
  * tree: fail on non-negative return values from parse_and_open
  * udev: Add HOST_IFACE to udev rule (bsc#1208001)
  * util/json.h: Add json_object_get_uint64 fallback implementation
  * util/json: Add 128 bit JSON helpers
  * util/types: Add 128 bit conversion helpers
  * util: Fix le128_to_cpu on big-endian
  * util: Fix le128_to_cpu on little-endian
  * util: Move common type conversion helpers into util section
  * utils/json: Add json_object_new_uint64 for json-c &lt; 0.14
  * utils: Fix uint128_t usage
  * wdc:  OCP Log page updates and fixes
  * zns.c: report zones should be started after retrieved zone
- Handle suse-missing-rclink lint warnings by providing the symlinks
- Drop rpmlintrc as it is not needed anymore</changelog>
  <changelog author="daniel.wagner@suse.com" date="1675080000">- Update to version 2.3:
  * Added support for Flexible Data Placement (TP4146)
  * Added Persistent Discovery Controller support (TP8013/TP8014)
  * nvme-mi: support for firmware downloads
  * nvme device-self-test learned the --wait command line argument
    which makes nvme-cli to wait (incl. progress bar) in foreground
    until the test has finished.
  * A lot of bug fixes all over the place
- Update spec file
  * Project depends on meson &gt;= 0.50.0
  * make build dependency dropped</changelog>
  <changelog author="daniel.wagner@suse.com" date="1680264000">- Update to version 2.4 (jsc#PED-553 jsc#PED-3884):
  * plugins/ocp: Add SMART cloud log to solidigm plugin
  * nvme-print: Unify number base format for nsid
  * nvme-(discover,connect,connect-all): enable options '--keyring' and '--tls_key'
  * nvme-connect: enable option '--tls'
  * nvme-check-tls-key: add options to derive a 'retained' TLS key
  * nvme-gen-tls-key: add options to derive a TLS key
  * plugins/ocp: Move SMART cloud log methods to separate file for reusability
  * nvme: validate storage tag size correctly
  * nvme-print-json: Add json output status function
  * util: Cleanup argconfig parse function
  * nvme: Fix format command function indentation errors
  * util: Use argconfig commandline options pointer directly
  * nvme-print: Fix nvme show status function indentation errors
  * nvme: Check fw-commit command support MUD
  * print: print csi and opcode in error log (TP4113)
  * plugins/inspur: Cast vendor specific smart log value
  * nvme: Use correct ABORT type for self abort test
  * plugins/solidigm: Do not overwrite previously initialized variable
  * nvme-print: sanitize supported-log-pages output (bsc#1209550)
  * nvme: Enforce length to a multiple of 4 in get_log_page
  * nvme: fix block count and data size logic (bsc#1209564)
  * util: Introduce argconfig simple helper to check seen condition
  * plugins/ocp: Add set feature EOL/PLP failure mode no-uuid option
  * plugins/ocp: Refactor to clear feature identifier C1h and C3h
  * plugins/ocp: Add support for clear PCIe correctable error counters feature
  * nvme-doc: update man page for supported-log-pages (bsc#1209550)
  * plugins/ocp: OCP 2.0 field updates for SMART cloud log
  * nvme: Fix parameter limit range
  * fdp: Fix wrong Reclaim Unit Handle Status size
  * plugins/ocp: Add support for EOL/PLP failure mode feature
  * nvme-print: Fix printing of u32 values
  * nvme: Fix invalid memory access in show_registers
  * util: Add argconfig seen flag parameter to check if feature NSID set
  * nvme-print: fix segfault in supported-log-pages json output
  * fabrics: Fix ordering for auto connect services (bsc#1208075)
  * nvme.c: Check Firmware Update Granularity in fwdl
  * log: high latency timestamp issue
  * nvme: Align get feature data buffer length by page size to allocate
  * nvme: Continue get feature on invalid NS error to get multiple feature ids
  * plugins/ocp: SMART cloud log bug fixes.
  * Made temperature readouts in line with the SI.
  * Changed 'Kelvin' to 'kelvin', as recommended by the BIPM.
  * plugins/ocp: Fix whitespace and style issues
  * util: Revert JSON output to plain numbers
  * nvme: Add rae argument to telemetry-log command
  * nvme: Refactor get telemetry log page helper
  * nvme: Factor out parse telemetry log da element
  * nvme: Fix type in error message
  * unit: Add test-argconfig-parse
  * nvme: Use chunked read in get_log()
  * nvme: Use fprintf for error message logging in get_log()
  * nvme: fix /dev/spkd/ typo
  * doc: --storage-tag-check doesn't take any arguments
  * fabrics: Ensure host-traddr/iface consistency for "connect-all"
  * nvme-print: print the nvme generic name in json output as well
  * plugins/innogrit: modify command opcode for eventlog and cdump
  * completion: fix typo, add missing args
  * plugins/wdc: Fix data Formatting for Latency Monitor Log Page
  * nvme: Make json-c optional again
  * nvme-print: Move JSON printing function into a new file
  * plugins/solidigm: Use json_create_object wrapper
  * plugins/solidigm: Use struct json_object instead of typedef
  * fabrics: No need to sanitize trsvcid and traddr
  * docs: Fixed typos and missing options
  * util: Numbers without any suffix are also valid
  * util: Update suffix_binary_parse API
  * util: Reimplement suffix_si_parse
  * nvme: Filter out status flags for get feature command
  * util: Add crc32 implementation
  * nvme-print: Use attrs_info as key for Zone Attributes Information
  * nvme: Support effects-log for fabrics ctrl
  * plugins/solidigm: Add uuid index resolution
  * plugins/ocp: Use network byte order for OCP UUID value
  * json_discovery_log: avoid buffer overrun (bsc#1207435)
  * Fix connect nbft regressions (bsc#1209905)
  * Fix auto connect conditions (bsc#1210105)
  * Fix auto boot for NBFT connections (bsc#1211647)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1695988800">- Update to version 2.6 (jsc#PED-3610 jsc#PED-4879 jsc#PED-5061):
  * nvme: allocate payload buffer in create-ns command
  * nvme-print-stdout: Add CAP.CPS and CAP.NSSS human readable outputs
  * nvme: Add output-format default option instead of argconfig json option
  * nvme: fw-download offset only describes FW offset, not file offset
  * unit: add locale number test
  * util: handle utf-8 thousend separators correctly
  * nvme: Change to use NVME_ARGS verbose default option from OPT_ARGS
  * fabrics: Fix NVMF_ARGS macro to use parameter n correctly
  * nvme: Add verbose default option to show command debug output
  * util: Fix to set argconfig output format json option correctly
  * util: Split argconfig output format json function to set and get
  * nvme: Spport Phy Rx Eye Opening Measurement Log
  * nvme: Introduce nvme_realloc function
  * nvme: Fix for fdpa reserved field printing
  * completion: add 'version' and 'help' to list
  * udev-rule: apply round-robin iopolicy on i/o subsystems alone (bsc#1215994) (bsc#1219086)
  * nvme: Add support for the OAQD ID controller field
  * plugins/solidigm: use static log macro to calc bitmask
  * plugins/ocp: Rename FW activation history command
  * nvme: auto free nvme_dev resource
  * nvme: allocate aligned payloads for all nvme commands
  * nvme: introduce alloc helper with alignment support
  * util: add cleanup function for generic memory allocations
  * nvme: append huge to nvme_{alloc|free} function
  * nvme: fw_download use nvme_alloc only
  * fabrics: Removing duplicate code and moving to libnvme
  * nvme-print: omit size of protection information
  * tree: Modify label name close_fd to close_dev
  * fabrics: For TCP/RDMA, compare IP addresses with nvme_ipaddrs_eq() (bsc#1213768)
  * fabrics: lookup_discovery_ctrl() must look under host and not root (bsc#1213768)
  * nvme: Do not map status to errno codes
  * completions: Add bash completion for DSSD Power state feature(FID: C7h)
  * Documentation: Add document for DSSD Power state feature(FID: C7h)
  * plugins/ocp: Add DSSD Power state feature(FID: C7h)
  * avoid casting pointer arguments to argconfig functions
  * nvme-print: Add support for EGFEAT, Domain Identifier, TEGCAP and UEGCAP
  * nvme-print: Fix endurance_log whitespace changes
  * nvme: Fix retrieval of telemetry log up to specified data area.
  * nvme: Update list secondary command
  * wdc: Add support for SN861 drive
  * util: Set errno to 0 before strtol/stroul call
  * nvme: Revert passthru and submit_io to print status to stderr from stdout
  * plugins/zns: Fix offset in report zones
  * nvme-rpmb: Fix nvme_show_id_ctrl_rpmbs() definition error
  * fabrics: Use corresponding hostid when hostnqn is generated
  * json: fix seg. fault converting NULL to JSON string (bsc#1213762)
  * nvme-cli: fix extended metadata size calculation
  * nvme-print: Show subsystem iopolicy (bsc#1124564)
  * nvme-print-stdout: Do not show non reachable ns in namespace topology (bsc#1212598)
  * nvme-print: Fix show-topolocy for ctrls
  * doc: Fix typo in documentation
  * nvme-print-stdout: fix storage tag size label
  * nvme-print-stdout: List only ctrls which are part of ns (bsc#1212598)
  * nvme-print-stdout: Support subsys reachable from several hosts (bsc#1212598)
  * ccan: Add htable, strset and dependencies (bsc#1212598)
  * ccan: Remove unused documentation (bsc#1212598)
  * nvme-print: Split max power flags
  * nvme-print: fix counter while looping through uuid_list (bsc#1212598)
  * fabrics: only look for matching ctrl on same host (bsc#1213768)
  * README: Correct hugetlbfs spelling error
  * util: Delete unused CFG_BOOL argconfig type as duplicated with CFG_FLAG
  * util: Set LC_ALL=C as default if -H option is not used
  * nvme: Add support for create-ns command endg-id option parameter
  * nvme-print: fix argument order for show functions
  * plugins/solidigm: Added Marketing Name Log support for Solidigm.
  * nvme-print: Remove left overs from refactoring
  * nvme-print: Move num argument parsing into callbacks
  * nvme-print: Fix typo in callback definition
  * scripts: Make release script project neutral
  * scripts: Update update-docs.sh scripts
  * scripts: Execute the scripts from toplevel directory
  * scripts: Move helper scripts to a central place
  * docs: Update file modes
  * doc: Add information on --context
  * nvmf-autoconnect: Annotate the context to autoconnect
  * fabrics: Add support for volatile configuration
  * plugins/solidigm: Formated log page directory table consistently with "nvme list" format.
  * plugins/solidigm: Added Identify controller VU extensions parsing.
  * nvme-print-json: Print PCI pysical slot number for controller
  * nvme-print-stdout: Print PCI physical slot number for controller
  * libnvme.wrap: Bump to 42ac453
  * plugins/nbft: Use common code to parse print flags
  * fabrics: Do not print device on connect per default
  * fabrics: Revert 'fabrics: prevent 'nvme connect' to well-known discovery NQN'
  * nvme-print: fix wrong list-subsys output when ns are attached to different ctrls
  * plugins/micron: Correct NULL pointer checking error
  * plugins/innogrit: Add vendor command get-eventlog and get-cdump
  * nvme: Use correct data buffer size
  * nvme: Fix quoted string split across lines to use quoted newline
  * plugins/zns: Fix zns.c linux kernel check patch errors and warnings
  * plugins/ymtc: Fix ymtc-nvme.c linux kernel check patch warning
  * plugins/ymtc: Fix ymtc-nvme.c space indentation to tab indentation
  * plugins/virtium: Fix virtium-nvme.c linux kernel check patch errors and warnings
  * plugins/transcend: Fix transcend-nvme.c linux kernel check patch errors and warnings
  * plugins/solidigm: Fix linux kernel check patch errors and warnings
  * plugins/shannon: Fix shannon-nvme.c linux kernel check patch errors and warnings
  * plugins/seagate: Fix seagate-nvme.c linux kernel check patch warnings
  * plugins/scaleflux: Fix sfx-nvme.c linux kernel check patch errors and warnings
  * plugins/netapp: Fix netapp-nvme.c linux kernel check patch errors and warnings
  * plugins/nbft: Fix nbft-plugin.c linux kernel check patch warnings
  * plugins/micron: Fix micron-nvme.c linux kernel check patch errors and warnings
  * plugins/micron: Fix micron-nvme.c space indentation to tab indentation
  * plugins/memblaze: Fix memblaze-nvme.c linux kernel check patch errors and warnings
  * plugins/memblaze: Fix memblaze-utils.h space indentation to tab indentation
  * plugins/memblaze: Fix memblaze-nvme.c space indentation to tab indentation
  * plugins/intel: Fix intel-nvme.c linux kernel check patch errors and warnings
  * plugins/inspur: Fix inspur-nvme.c linux kernel check patch warnings
  * plugins/inspur: Fix inspur-nvme.c space indentation to tab indentation
  * plugins/innogrit: Fix innogrit-nvme.c linux kernel check patch errors
  * plugins/huawei: Fix huawei-nvme.c linux kernel check patch errors and warnings
  * plugins/fdb: Fix fdb.c linux kernel check patch warnings
  * plugins/dera: Fix dera-nvme.c linux kernel check patch errors and warnings
  * plugins/amzn: Fix amzn-nvme.c linux kernel check patch error and warnings
  * plugins/wdc: Fix wdc-utils.c linux kernel check patch errors and warnings
  * plugins/wdc: Refactor wdc-nvme.c for linux kernel check patch errors and warnings
  * util: Move falltrhough feature check to meson.builds
  * ocp: Add eol plp failure mode json outputs
  * nvme-print: Add nvme show result function
  * nvme-print-json: Add json output result function
  * nvme-print: Fix nvme_show_error() to call va_end() for json output format
  * nvme: Fix nvme format block-size option handling
  * Revert "nvme: Masks SSTAT in sanize-log output"
  * fabrics: Fix NVMF_ARGS macro indentation error
  * Documentation: Add document for OCP Device capability(LID: 0xC4) log page
  * completions: Add bash completion for OCP Device capability(LID: 0xC4) log page
  * plugins/ocp: Add Device capability(LID: 0xC4) log page
  * udev: fix warning reported by udevadm verify
  * fabrics: fix conditions in nvmf-autoconnect.service
  * fabrics: Change NVMF_OPTS as NVMF_ARGS to fix linux kernel check patch error
  * nvme: Split passthru commands read output
  * nvme: Fix io-passthru command read metadata output
  * plugin/ocp: Added implementation for 0xC1 log page
  * util: Fix suffix_si_parse to parse no decimal point but suffix value correctly
  * completions: Add zsh option values handling for sanitize command action
  * completions: Add ocp sub commands zsh completion
  * completions: Add ocp commands zsh completion
  * completions: Add ocp commands bash completion
  * nvmf-autoconnect: restart service to avoid dropping AEN
  * solidigm: Reduce memory usage in supported log pages feature
  * solidigm: Changes to supported log pages feature requested by review
  * solidigm: Add supported log pages log feature to Solidigm plugin
  * plugins/ocp: Added ocp unsupported requirements log page
  * completions: Add bash option values handling for sanitize command action
  * doc: Correct nvme-show-hostnqn command NAME description
  * completions: Add missing zsh commands descriptions
  * plugins/wdc: Extend SN530 support.
  * Fix incorrect article 'an' as 'a' to use for descriptions and message
  * nvme: Set effects-log command csi option help message string
  * completions: bash: Delete unsupported id-iocs command options
  * completions: bash: Add id-domain command
  * completions: Fix nvm-id-ns-lba-format command zsh definition
  * completions: Add json command option
  * nvme: Fix get-feature command sel parameter check to allow value 8
  * util: Delete unnecessary argconfig definitions OPT_VAL and CFG_VAL
  * util: Delete argconfig value type to add option value as va lists instead
  * util: Split to set argconfig option value
  * util: Delete argconfig value length to calcurate instead
  * nvme: Change sanitize command action option to use argconfig parse value
  * util: Add argconfig parse value function
  * util: Delete unused argconfig subopts type
  * util: Delete unused argconfig file types
  * util: Delete unused argconfig help function
  * nvme-wrap: do_admin_args_op should not clear args timeout
  * nvme: Fix linux kernel check patch warnings
  * nvme: Fix linux kernel check patch errors
  * plugins/ocp: Add telemetry-log command to OCP plugin
  * plugins/ocp: Add OCP set latency monitor feature command
  * plugins/ocp: Fix endianness in Latency Monitor Log output
  * plugins/ocp: Add missing fields in Latency Monitor Log
  * plugins/ocp: Fix typos in Latency Monitor Log
  * plugins/ocp: Reorganize OCP plugin source code
  * tests: Add tests for controller reset
  * plugin/solidigm: Added vs-internal-log command.
  * nvme: Add nvme_show_perror to use instead of perror for json output
  * nvme-print-json: Use vasprintf instead of vsnprintf to allocate string
  * nvme: fix rnlpt to_string() values.
  * nvme: fix io_mgmt args parse error
  * fdp: set-events feature is saveable
  * fabrics: Return errno value as negative
  * fabrics: Fix linux kernel check patch errors and warnings
  * nbft: add the nbft show plugin
  * nbft: added NBFT v1.0 table support (jsc#PED-1449)
  * nbft: make lookup_ctrl function public
  * nvme: Fix indentation errors around nvme show error API
  * nvme: Check validate output format err value instead of flags
  * nvme: Use nvme show error API to outptu stderr messages for json format
  * util: Check output format json for json error message output
  * nvme-printf: Add show error function for nvme list command json output
  * nvme: Add zns specfic field for create ns
  * nvme: Add ns-mgmt host software specified fields
  * nvme: Add dtype, dspec on write-zeroes, write-uncor
  * nvme-print: Add new fields print on id directive
  * nvme-print: Add VWCNP on NSFEAT of id-ns
  * nvme: Fix format command to skip to reread NSID all block device
  * plugins/solidigm: Fixes and clean-up of Telemetry parse code. Fixed parsing of 64 bit values. Fixed COD field name. Fixed compilation warnings when compiling for 32 bit. Added missing free(). Consolidated single entry function to telemetry parser. Consolidated use of integer types.
  * doc: Documentations maintenance changes
  * doc: Add nvme-mi-send command documentation
  * doc: Add nvme-mi-recv command documentation
  * doc: Add clear-pcie-correctable-error-counters command documentation
  * doc: Add eol-plp-failure-mode command documentation
  * plugins/solidigm: Add firmware activation history log to Solidigm plugin
  * plugins/ocp: Add firmware activation history log to OCP plugin
  * nvme-print: Use enum nvme_print_flags for nvme_show_id_ctrl
  * nvme: Add support for NVMe-MI send command
  * nvme: Use stdout for passthru and submit_io commands success messages
  * nvme: Fix passthru command function indentation errors
  * nvme: Add support for NVMe-MI receive command
  * fabrics: fix fc config JSON file handling (bsc#1210089)
  Refresh 0100-harden_nvmf-connect@.service.patch
- Fix install path for nvme-regress script</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420800">- Enable test during build (bsc#1207686)
- Drop minimum version meson dependency
- Add asciidoc dependency
- Build documentation when requested</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696852800">- Use fixed timestamps for documentation allowing reproducable builds
- Announce nvmeof-boot-support support via Provides
- Filter rpmlint warnings for systemd-service-without-service_ macros
- Add missing service files for NBFT feature
  * add 0001-fabrics-autoconnect-add-service-unit-for-connecting-.patch
  * add 0002-fabrics-add-udev-rule-to-avoid-renaming-nbft-interfa.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1697112000">- Add missing jsc# and bsc# tracking entries in change log.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1702987200">- Update to version 2.7:
  * nvme-print-json: include vs for identify namespace
  * nvme-print-stdout: enhance connect message (bsc#1219086)
  * fabrics: fix connect error if hostid file does not exist (bsc#1219086)
  * fabrics: fix invalid output format error during nvme connect (bsc#1219086)
  * wdc: Fix vs-smart-add-log Command for SN650 and SN655
  * nvme: restric hmac options for gen-tls-key (bsc#1219086)
  * wdc: Fix UUID index fallback mechanism
  * plugins/ocp: Add OCP Telemetry String log page, Telemetry log page
  * completions: Add bash completions for telemetry string log page
  * plugins/solidigm: Added OCP 2.0 compatibility version command
  * plugins/solidigm: Added OCP 2.0 vs-drive-info command.
  * plugins/ocp: Fix printing order of various Latency Monitor Log buckets
  * nvme: validate output format split status from flag return value
  * nvme: simplify cleanup_nvme_dev()
  * cleanup: remove unused cleanup_charp()
  * wdc: Add support for SN861 2nd pci device id
  * nvme: replace libhugetlbfs with mmap and madvise
  * util/mem: move alloc helper to util section
  * nvme: auto cleanup filedescriptors
  * nvme: auto cleanup buffers
  * nvme: return error code in get_persistent_event_log
  * nvme: sanitize nvme-gen-tls-key
  * nvme: print out the resulting TLS identity for 'nvme check-tls-key'
  * nvme: Add version '1' identifier for nvme-gen-tls-key
  * subprojects/libnvme: update wrapper for TP8018
  * plugins/solidigm: Added re_sku_count smart atrribute
  * doc: Fix nvme-connect manpage --application option string
  * plugins/ocp: changed command clear-pcie-correctable-error-counters to match OCP 2.0 spec.
  * plugins/solidigm: Added command to clear PCIe Correctable Error Counters according to OCP 2.0
  * plugins/ocp: Reorganized clear feature code for better reuse
  * nvme: fixup length calculation for 'nvme gen-tls-key --secret'
  * doc: remove invalid hostkey info for --dhchap-secret
  * nvme-print-json: use human helper everywhere
  * nvme-print-json: remove obj_print helper
  * plugins/ocp: update nvme_show_select_result call
  * mailmap: only show contributer's name
  * nvme-print-json: Change to report status and message in array
  * nvme-print-json: Change to report feature select in array
  * nvme-print-json: Change to report error and data in array
  * nvme-print-json: Add show_init/finish calls to report features in array
  * nvme-print: Add nvme_show_error_status() to merge error message and status
  * nvme-print-json: Use r instead of root and use obj_add_***(r, ..., ...)
  * nvme-print-json: Delete static const char string global variables
  * nvme-print-json: Add remaining controller registers readable format
  * nvme-print-json: Add readable format cap, vs, cc, csts, nssr and crto registers
  * nvme-print-json: Combine duplicated json key and val string variables
  * nvme-print-json: Replase json_array_add_value_string() to array_add_str()
  * nvme-print-json: Replase json_object_add_value_uint128() to obj/root_add_uint128()
  * nvme-print-json: Replase json_object_add_value_object() to obj/root_add_obj()
  * nvme-print-json: Replase json_array_add_value_object() to array_add_obj()
  * nvme-print-json: Replase json_object_add_value_array() to obj/root_add_array()
  * nvme-print-json: Replase json_object_add_value_uint() to obj/root_add_uint()
  * nvme-print-json: Replase json_object_add_value_int() to obj/root_add_int()
  * nvme-print-json: Replase json_object_add_value_uint64() to obj/root_add_uint64()
  * nvme-print-json: Replase json_object_add_value_string() to obj/root_add_str()
  * nvme-print-json: Update feature_show_fields_*** to use root/obj_add_***()
  * nvme-print-json: Update lba_status_log to use root_add_***() and obj_add_***()
  * nvme-print-json: Replace lba_status_log printf() to root_add_result()
  * nvme-print-json: Add list_item print function
  * nvme-print-json: Add lba_status_info print function
  * nvme-print-json: Add lba_range print function
  * nvme-print-json: Add id_ctrl_rpmbs print function
  * nvme-print-json: Unify json_list and jroot object names to root
  * nvme-print-json: Add json_zns_changed print function
  * nvme-print-json: Add root_add_result() to output result message
  * nvme-print-json: Split persistent_event_log print function
  * nvme-print-json: Remove unnecessary string newline code
  * nvme-print-json: Replace effects_log_list print to use json_print()
  * nvme-print-json: Print persistent_event_log no log data result correctly
  * nvme-print-json: Add static "result" and "erorr" strings variables
  * nvme-print-json: Add single_property printf function
  * nvme: Replace get feature command stderr output to nvme_show_error()
  * nvme-print-json: Change d() output to use d_json()
  * nvme: Fix get-feature command mixed stdout and json outputs
  * nvme-print-json: Add remaining feature fields print functions
  * nvme-print-json: Update formatting and codying style
  * build: Add -std=c99 to CFLAGS for muon on CentOS 7
  * fabrics: add udev rule to avoid renaming nbft interfaces
  * fabrics: autoconnect: add service unit for connecting NBFT subsystems
  * fabrics: autoconnect: explicitly express module dependency
  * Updates to codeql config
  * libnvme-wrap: exit on VOID_FN lookup failure
  * plugins/ocp:Added the ocp C6h feature api
  * plugin/ocp_fid_c6h:Added the ocp C6h feature api
  * nvme-copy: support cross-namespace copy
  * nvme/plugins: fix mismatch operator
  * nvme: fix overflow possiblity
  * nvme: reduce identify cmd issue
  * nvme: allow set-features to take input from stdin
  * Fix common misspellings from codespell project
  * nvme-print: Correct to print correct ascii character string length
  * print-stdout: print Host Behavior Support correctly
  * build: Bump libnvme wrap
  * plugins/solidigm: Added support for temperature statistics log page
  * Add support for codeql sweeps
  * doc: Add virt-mgmt command
  * doc: Add id-uuid command
  * doc: Add list-secondary command
  * doc: Add id-ns-granularity command
  * doc: Add nvme commands --output-format and --verbose options
  * completions: Add nvme-mi-recv nad nvme-mi-send commands completions
  * completions: Change short option -o and -v duplicated to upper case
  * doc: Change short option -o and -v duplicated to upper case
  * nvme: Change short option -o and -v duplicated to upper case
  * nvme: Change phy-rx-eom-log command to use NVME_ARGS instead
  * plugins/memblaze: Add smart-log-add and latency-feature functions
  * plugins/solidigm: internal-logs Telemetry auto detect last data area.
  * nvme: Change to use NVME_FLBAS_META_EXT() macro to check flbas value
  * nvme-print-json: Add host memory buffer and timestamp features print functions
  * nvme-print-json: Add feature fields print functions
  * nvme-print-json: Add TMPTH feature print function
  * nvme-print-json: Add show_feature_fields print function
  * nvme-print-json: Add select_result print function
  * nvme-print-json: Use json_print to print and free object
  * nvme-print-json: Add lba_status print function
  * nvme-print-json: Combine variable definition and setting value
  * nvme-print-json: Add id_iocs print function
  * nvme-print-stdout: Fix coding style errors
  * nvme-print-json: Add directive print function
  * nvme: Fixed segmentation fault when getting host initiated telemetry
  * plugins/wdc: enhanced SN861 device support
  * plugins/wdc: cleanup line lengths
  * nvme: do not include meta data for PRACT=1 and MD=8
  * nvme: use block-count arg if provided
  * build: bump libnvme to disable tests option
  * build: Add static build on CI target
  * nvme-print: Add nvme_zns_start_zone_list() API function
  * nvme-print: Add nvme_zns_finish_zone_list() API function
  * nvme-print-binary: Set list function to NULL if unimplemented
  * nvme-print-json: Change order list functions and set NULL if unimplemented
  * nvme-print-stdout: Fix to set stdout_list_item print function missed
  * plugins/solidigm: log page name extraction using nvme_log_to_string function
  * nvme-print: Added missing logpage names in nvme_log_to_string function
  * udev-rules: rename netapp udev rule (bsc#1219086)
  * udev-rules: set ctrl_loss_tmo to -1 for ONTAP NVMe/TCP (bsc#1219086)
- Remove upstreamed patches
  * remove 0001-fabrics-autoconnect-add-service-unit-for-connecting-.patch
  * remove 0002-fabrics-add-udev-rule-to-avoid-renaming-nbft-interfa.patch
- Update spec file
  * remove libhugetblfs depedency
  * update NetApp udev rule file name</changelog>
  <changelog author="daniel.wagner@suse.com" date="1703160000">- Update to version 2.7.1:
  * nvme-print-json: Revert field name changes (bsc#1218306)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1707912000">- Update to version 2.8:
  * nvme-print-json: append array object in json_support_log
  * sed: Add plugin for basic SED Opal operations (jsc#PED-5061)
  * don't include newlines in already wrapped text
  * nvme: do not include meta data for PRACT=1 and MD=8 (version 2)
  * create-ns: align the namespaces to 1Mib boundaries when using SI suffixes
  * doc: Fix config-schema.json's URL
  * plugins/solidigm: Compressing vs-internal-log log files into zip file.
  * nbft: do not issue an error if ACPI tables are missing
  * nbft: fixup include for libnvme
  * doc: Fix short option name for cfg-file
  * completions: added Solidigm plugin to autocomplete scripts
  * nvme: Remove unused cfg argument from NVME_ARGS() macro
  * nvme: fix directive receive identify offsets
  * nvme-fabrics: enable option 'concat'
  * build: Update libnvme wrap
  * plugins/wdc: Add Debug Log Collection Support
  * nbft: fix tcp/dhcp address fallback retry (bsc#1218873)
  * nvme: use correct telemetry log size
  * nvme-print: fix typo in list verbose output (bsc#1219086)
  * nvme: print inserted tls key for check-tls-key (bsc#1219086)
  * plugins/wdc: Plugin fixes and updates
  * fabrics: move hostid/hostnqn warnings to verbose level (bsc#1219086)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737600">- Update to version 2.9:
  * nvme-print: expand the maximum field length to prevent misalignment
  * plugins/spdk: plugin to list SPDK subsystems
  * nvme-print: check if controller belong to SPDK
  * plugins/spdk: plugin to list SPDK controllers
  * nvme-print-stdout: fix ASQB, ACQB and BMBBA prints
  * build: bump libnvme wrap
  * nvmf-autoconnect: fix string encoding
  * nvme: identify primary ctrl do not accept nsid
  * nvme-wrap: remove unused nvme_cli_get_log_ana_groups()
  * nvme-print-json: use admin queue attributes definitions
  * nvme-print-json: use CSTS definitions
  * nvme-print-stdout: use POWER_OF_TWO macro
  * nvme-print-json: use controller configuration definitions
  * nvme-print-json, nvme-print-stdout: add tertiary version number
  * nvme-print-json: use NVME_MAJOR and NVME_MINOR definitions
  * nvme-print-json: use NVME_BOOT_PARTITION_INFO field definitions
  * nvme-print-json: add support telemetry log create event in PEL
  * nvme-print-json: add support set feature event in PEL
  * nvme-print-json: add obj_d() function
  * nvme-print-json: add obj_add_uint_0nx() function
  * meson.build: Fix spelling of sed-opal.h filename
  * sed_opal: Only build when we really have sed_opal headers
  * nvme: fix error path if write() fails in get_telemetry_log()
  * plugins/solidigm: Additional LID for temperature statistics.
  * plugins/solidigm: Improved Solidigm UUID index detection.
  * nvme-print-stdout: Add CSTS.ST register stdout print
  * nvme-print-stdout: Use NVME_CMIC definitions
  * nvme-print: Use NVME_UNIT definitions
  * nvme-print-stdout: Use NVME_CMBMSC/STS/EBS/SWTP definitions
  * plugins/ssstc: add a new plugin for SSSTC driver
  * nvmf-connect: systemd hardening effort
  * plugins/ocp: Adjusted variable type size carrying UUID index to 8 bit.
  * nvme: fix security buffer allocation size
  * nvme: Change fw-download xfer initialization to set 0
  * nvme: Add fw-download warning message for FWUG alignment error
  * plugins/ocp: Split ocp_get_uuid_index() into find and get functions.
  * nvme: fix mem leak in multiple key related functions (bsc#1223331)
  * fabrics: fix mem leak in nvmf_check_hostid_and_hostnqn() (bsc#1223331)
  * nvme-print-stdout: Use NVME_BPRSEL definitions
  * nvme-print-stdout: Use NVME_BPINFO definitions
  * nvme-print-stdout: Use NVME_CMBSZ definitions
  * nvme-print-stdout: Use NVME_CMBLOC definitions
  * Revert "logging: fix error handling for ioctl passthru wrappers"
  * fabrics: align identify command payload
  * ocp: Unify line start spacing as tabs
  * ocp: support OCP DSSD Async Event Config feature
  * nvme: Add support for get-reg and set-reg commands
  * nvme-print-json: Add register print functions
  * nvme-print-stdout: Add register print functions
  * nvme-print: Add register print functions
  * nvme: Refactor mmap_registers to add writable parameter
  * nvme-print: Change PMRSZU string function as unit string
  * nvme-print: Refactor CMBLOC and PMRSTS registers function
  * logging: fix error handling for ioctl passthru wrappers
  * nbft: Fix scandir() error check
  * nbft: Refactor connection attempt out
  * nvme-print: Use EOM optional data present macros changed
  * nvme-print: Print cntlid number for controller (bsc#1224024)
  * nvme: check-tls-key fails despite having hostnqn file (bsc#1223331)
  * nvme: print retained key for gen-tls-key's -i option too (bsc#1223331)
  * fabrics : allow host to create duplicate connections to target
  * fabrics: Fix fast_io_fail_tmo option
  * nvme-print-stdout: use admin queue attributes definitions
  * nvme-print-stdout: use CSTS definitions
  * nvme-print-stdout: use controller configuration definitions
  * nvme-print-stdout: use NVME_MAJOR and NVME_MINOR definitions
  * nvme-print-stdout: use FDP configuration attributes definitions
  * nvme: add new function 'tls_key' (bsc#1226197)
  * nvme: use library functions for importing and exporting TLS keys (bsc#1216982)
  * nvme: extend error message for ns scan failures
  * nvme-print-json: Bugfix status json key of sanitize-log
  * sed: update SED password when initalizing (bsc#1222168)
  * plugins/memblaze: add performance stats
  * plugins/memblaze: fix code mis-type error
  * plugins/memblaze: code refactor on applying __packed on more structs
  * plugins/memblaze: code refactor on using cleanup_nvme_dev
  * nvme: Fix to cleanup free raw_secret memory allocated
  * plugins/memblaze: code-format on leading indent and align
  * plugins/wdc: Fix narrow index variable type in for loop to __u32
  * plugins/wdc: Whitespace changes
  * nvme: Delete unused nvme root scanned
  * ocp: support OCP 2.5 Set Telemetry Profile feature
  * nvme: Don't seg fault if given device is not char/block device
  * nbft: Include SSNS index in error messages (bsc#1222026)
  * nbft: Pause logging for expected connection failures (bsc#1222026)
  * nbft: Silence connection failures for unavailable SSNS (bsc#1222026)
  * nbft: Fix 'verbose' argument type (bsc#1222026)
  * plugins/nbft: Implement verbose logging
  * plugins/nbft: Print the new SSNS flags
  * nbft: Fix uninitialized variable
  * plugins/nbft: Fix uninitialized variables
  * plugins/sed: Fix uninitialized variable
  * nvme-print-stdout: Fix uninitialized variable
  * nvme-print-json: Fix uninitialized variable
  * build: Switch default meson buildtype to 'debugoptimized'
  * nvme: do not scan topology when mmaping registers
  * nvme-print-stdout: Use NVME_BOOT_PARTITION_INFO field definitions
  * nvme-print-stdout: Use NVME_GET for MI commands supported and effects CSP
  * nvme-print-stdout: Use NVME_GET for FID supported and effects FSP
  * nvme-print-stdout: Use NVME_SET_FEAT_EVENT register definitions
  * nvme-print: Add PEL EHAI port identifier type printf function
  * build: bump libnvme wrap
  * ocp: fix for power-state argument checking
  * nvme: do not issue warning when nvme_core module is not loaded
  * wdc: Review changes and build fixes
  * wdc:  Fix timestamp displayed by vs-firmware-activate-history command
  * logging: Split to output ioctl latency by log info level (bsc#1231668)
  * nvme-print-stdout: Change hexadecimal value 0x prefix to use %#x
  * nvme-print-stdout: Fix LBA status DSLBA output as hexadecimal
  * nvme-print-stdout: Split line length exceeded 100 columns
  * nvme-print-stdout: Use NVME_PMRMSC register definitions to print
  * nvme-print-stdout: Use NVME_PMRSWTP register definitions to print
  * nvme-print-stdout: Use NVME_PMREBS register definitions to print
  * nvme-print-stdout: Use NVME_PMRSTS register definitions to print
  * nvme-print-stdout: Use NVME_PMRCTL_EN register definition to print
  * nvme-print-stdout: Use NVME_PMRCAP register definition to print
  * doc: Fix admin and io passthru cdw parameters description
  * doc: Add get-feature cdw11 and set-feature cdw12 parameters
  * micron-nvme: Unuse stat() to check if strMainDirName exists
  * doc: Fix get-property and set-property offset and value descriptions
  * doc: Fix documentation file mode 100755 to 100644
  * nvme-print-stdout: Fix channel configuration descriptors pointer
  * nvme-print-stdout: Check sscanf return value
  * nvme-print-stdout: Fix linux kernel check patch errors
  * nvme: Delete unusual fallthrough for cases have no body
  * nvme: Delete duplicated semicolon
  * nvme-print, common: Fix for whitespace change
  * logging: output ioctl debugging info (bsc#1231668)
  * nvme: track verbose level (bsc#1231668)
  * logging: track log level globally
  * logging: move logging code to a new file
  * nvme: update include for libnvme
  * nvme: remove unused declaration
  * build: bump libnvme wrap
  * nvme-netapp: add nspath tlv handling (bsc#1220971)
  * rpm: Add missing rule and service files
  * nvme-print-json, nvme-print-stdout: Use CHAR_BIT definition
  * nvme-print-stdout: Delete duplicated if condition checking line
  * ocp: Fix timestamp displayed by fw-activate-history command
  * wdc: Add support for the get-drive-status command to SN861
  * nvme-print: Fix nvme_host_metadata_type_to_string() indentation errors
  * nvme-print: Add PEL RCI port identifier type printf function
  * nvme-print-stdout: Use persistent event log RCI definitions
  * build: bump libnvme wrap
  * nvme: Add show-regs and get-property commands NSSD print outputs
  * nvme-print: print more details in ns-descs verbose output (bsc#1223331)
  * Revert "nvme-print-json: remove obj_print helper"
  * sed: Confirm entered password before initialization.
- drop systemd service harden file, upstream ships this patch.
  * remove 0100-harden_nvmf-connect@.service.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737601">- Update to version 2.9.1:
  * plugins/spdk: drop the plugin</changelog>
  <changelog author="daniel.wagner@suse.com" date="1722600000">- Update to version 2.10:
  * sed: Fix parsing of Discovery0 features
  * fabrics: avoid potential segfault in nvmf_dim() (bsc#1231668)
  * nvme: avoid segfault in show-topology (bsc#1226197)
  * fabrics: do not leak nvme_ctrl_t object on connect
  * nvme: extend help message when mmap regs fails
  * nvme: return -ENXIO value to open device if errno not set
  * wdc: OCP 2.5 Log Page Updates
  * fabrics: drop --quiet alias -S
  * fabrics: drop --disable-sqflow alias -d
  * fabrics: check if json config is existing (bsc#1231668)
  * plugins/ocp: fix UAF when printing telemetry log
  * nvme-print-stdout: fix persistent-event-log set feature event output
  * fabrics: do not report error when no modules are loaded when disconnecting
  * fabrics: use cleanup helper where possible
  * fabrics: print an error for ENOENT too
  * plugins/virtium: use time_t for time_stamp values
  * completions: add ocp set-error-injection command
  * doc: add ocp set-error-injection command
  * ocp: add set-error-injection command
  * nvme: use argconfig_parse_seen to check conditions
  * nvme: use proper mask to get correct lbafu value
  * utils: fix print formatting option
  * utils: cleanup includes in utils.h
  * utils: add missing header
  * nvme-print: Added print for two new fields for HMB feature
  * plugins/micron: Move OCP internal log parsing from Micron to OCP Plugin.
  * fabrics: remove unused _discover_from_json_config_file() argument
  * nvme: avoid unnecessary dup() + close() in io_mgmt_send()
  * util: remove unnecessary NULL check in cleanup_nvme_root()
  * nvme: use argconfig_parse_comma_sep_array_u16() in attach-ns
  * util: avoid duplication in argconfig_parse_comma_sep_array*()
  * util: remove redundant loop condition in argconfig_parse()
  * util: introduce is_null_or_empty() to avoid strlen()
  * util: reduce allocation sizes in argconfig_parse()
  * util: consolidate call paths to argconfig_parse_type()
  * util: reduce complexity of argconfig_parse_val()
  * util: reduce arguments passed to argconfig_parse_type()
  * util: remove empty default case in argconfig functions
  * util: remove unnecessary parentheses in argconfig_parse_type()
  * util: remove redundant cast in argconfig_parse_type()
  * util: inline argconfig_parse_byte()
  * util: remove redundant NULL check in argconfig_print_help()
  * util: use cleanup to avoid goto in argconfig_parse()
  * util: make argconfig_set_opt_val() a void function
  * util: remove argconfig_parse_val() declaration
  * util: remove argconfig CFG_SIZE type
  * wdc: Update and refactor the C0h log page parsing
  * ccan: Add freed pointer checking to delete strset member
  * fabrics: connect all hosts in config.json (bsc#1226216)
  * fabrics: refactore discover from json config (bsc#1226216)
  * fabrics: first read config before topology scanning (bsc#1226216)
  * fabrics: use helper to lookup default hostnqn/hostid (bsc#1226216)
  * fabrics: extend already connected message (bsc#1226216)
  * fabrics: use cleanup helper to free nvme root object
  * nvme: check MD size with PI size when PRACT set to 1
  * nvme-print: add new field added in TP4090
  * nvme-print-binary: add effects-log command output missed
  * completions: add ocp get-error-injection command
  * doc: add ocp get-error-injection command
  * ocp: add get-error-injection command
  * ocp: fix eol-plp-failure-mode command sel option value
  * doc: fix ocp eol-plp-failure-mode select short option
  * ocp: set UUID index for eol-plp-failure-mode command to get
  * nvme: fix verbose logging (bsc#1231668)
  * doc: fix micron ocp telemetry log parse title
  * nvme-rpmb: send RPMB_REQ_READ_RESULT for authentication key programming
  * plugins/micron: Add support for OCP telemetry log parsing
  * ocp: Update Plugin Version
  * nvme: fix lbaf inuse to use 6:5 bits
  * ocp: use NVME_ARGS macro definition by eol-plp-failure-mode command
  * nvme: extern NVME_ARGS macro definition
  * nvme: use _cleanup_free_ type buffer for get-feature command
  * plugins/ocp: Update telemetry string log page (C9h)
  * nvme-print-json: add get-feature command fahrenheit temperature output
  * nvme: add get-feature and id-ctrl commands fahrenheit outputs
  * nvme: delete smart-log command fahrenheit option
  * nvme-print: check locale to use temperatures in degrees fahrenheit
  * completion: add support for tls-key (bsc#1226197)
  * doc: add tls-key --revoke documentation (bsc#1226197)
  * doc: fix tls-key --keyfile shorthand (bsc#1226197)
  * nvme: add support to revoke TLS key (bsc#1226197)
  * nvme: return error code/message for TLS commands (bsc#1226197)
  * nvme: factor out import key function (bsc#1226197)
  * nvme: use cleanup helper to close file descriptor (bsc#1226216)
  * nvme-rpmb: use cleanup helper for STREAM objects
  * fabrics: use cleanup helper for STREAM objects
  * nvme: use cleanup helper for STREAM objects (bsc#1226216)
  * nvme: strip newline when parsing TLS key files (bsc#1226197)
  * nvme: use stdout for exporting TLS keys (bsc#1226197)
  * nvme: change _cleanup_file_ to _cleanup_fd_ (bsc#1226197)
  * common.h: Avoid using unsupported load/store instructions in arm64 VMs
  * ocp: OCP 2.5 Telemetry DA 1 and 2 Parsing Updates
  * nvme-print-stdout: refactor subsys config (bsc#1231668)
  * wdc: Fix compiler warning.
  * nvme: add flags type nvme_print_flags_t
  * nvme-print: Use 'unsigned int' instead of 'unsigned'
  * nvme: update parse_args() return value handling
  * nvme-print: Fix nvme_show_smart_log indentation error
  * nvme-print-stdout: Fix stdout_smart_log indentation error
  * nvme-print-binary: Fix binary_smart_log indentation error
  * completions: add smart-log command fahrenheit option
  * doc: Add smart-log command fahrenheit option
  * nvme: Add smart-log command fahrenheit option
  * nvme-print: add PEL vendor specific and TCG defined events strings
  * nvme-print: Print PEL reserved event string
  * completions: Add timeout option bash completions
  * completions: Add timeout option zsh completions
  * completions: Add io-mgmt-recv/send commands zsh completions
  * completions: Add /dev/nvme argument missed
  * completions: Change fw-activate command name to fw-commit
  * completions: Fix _nvme indentation errors (bsc#1226197)
  * completions: Fix bash-nvme-completion.sh indentation errors (bsc#1226197)
  * doc: Add nvme commands timeout option
  * nvme: Add support for delete-ns command timeout option
  * nvme: Change NVME_DEFAULT_IOCTL_TIMEOUT to use nvme_cfg timeout
  * nvme: Add nvme_cfg timeout default option
  * nvme: Add nvme_cfg global variable for NVME_ARGS default options
  * nvme: add helper function to get pif and sts value
  * nvme: choose PIF from QPIF if QPIFS supports and PIF is QTYPE
  * nvme: use libnvme's atomic ANA log page fetch
  * nvme: fix maximum ANA log page length calculation
  * nvme-print-json: add missing va_end()
  * fabrics: skip namespace scan for fabric commands
  * nvme-print: print the new fields added in TP4141a
  * plugins/ocp: underflow + index fixes for telemetry
  * plugins/ocp: Add ocp TCG Configuration Log Page
  * nvme-print-stdout: Add helper function to print PIF in string form
  * doc: fix format command info
  * nvme: telemetry: report the correct error if the ioctl() fails.
  * nvme-print: add the cancel opcode to the nvme_cmd_to_string() list
  * doc: fix ocp format issues
  * nbft: Reuse existing discovery controller
  * nbft: Skip SSNS records pointing to well-known discovery NQN
  * nbft: Perform actual discovery
  * util/cleanup: Add cleanup for struct nvme_fabrics_uri
  * fabrics: Make some symbols public (bsc#1226216)
  * nvme-print-stdout: fix format index in stdout_nvm_id_ns
  * plugins/solidigm: Added workload-tracker command
  * plugins/solidigm: Added extra VU fields to id-ctrl
  * nvme-print-stdout: print MEM bit of CTRATT field
  * nvme-print-stdout: fix to print the log line by line
  * fabrics: Always pass hostid and hostnqn (bsc#1226216)
  * plugins/ssstc: Replace __uint16_t with uint16_t
  * plugins/solidigm: Added log pages to vs-internal-logs
  * sed: perform a tper revert after lsp revert
  * plugins/nbft: Use default library logging
  * docs: Add missing OCP plugin docs to meson
  * ocp: Switch OCP plugin to use semantic versioning
  * nvme: fix fw-commit MUD result message
  * sed: only re-read partition table after unlock.
  * nvme-print-json: Fix LBA status DSLBA output as hexadecimal
  * nvme-print-json: Use NVME_PMRxxx register definitions to print
  * nvme-print-stdout: Fix PMRWBM register name
  * nvme-print-json: Fix channel configuration descriptors pointer
  * nvme-print-json: Fix linux kernel check patch errors
  * nvme-print: Added "Command and Feature Lockdown" string to LID 0x14
  * plugins/innogrit: `u_char` -&gt; `unsigned char`
  * nvme: Use C99 types for uint32_t
  * nvme-print-stdout: print frl1/2/3 values for zns id-ns
  * solidigm: Eliminate &lt;linux/limits.h&gt;
  * nvme: remove double free in persistent-event-log
  * ocp: Add Get DSSD Power State Feature (FID: C7h)
  * nvme: initialize default library logging
  * nvme: use cleanup helper for nvme_root_t objects (bsc#1226197)
  * doc: add nvme connet ctrl-loss-tmo description
  * plugins/solidigm: Automatic enabling Data Area 4 when retrieving Telemetry.
- always build the docs
  * add 0001-docs-rename-ocp-unsupported-req-log-file.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1730376000">- Update to version 2.11:
  * docs: update check-tls-key arguments
  * nvme: add support to append TLS PSK to keyfile for check-tls-key
  * nvme: return correct error code in append_keyfile
  * docs: nvme-id-doman: dom{ia =&gt; ai}n
  * ocp: fix latency monitoring data structure entry endian
  * ocp: fix TCG configuration log endian
  * ocp: fix firmware activation history entry endian
  * docs: update gen-tls-key arguments
  * nvme: add support to add derive TLS PSK to keyfile
  * nvme: rename identity to version
  * nvme: set file permission for keyfile to owner only
  * nvme: export tls keys honoring version and hmac
  * nvmf-keys: add udev rule to import tls keys
  * docs: update TLS options
  * fabrics: add support to connect to accept a PSK command line
  * fabrics: add support to connect to accept a configuration
  * nvme: use unsigned char for hmac and identity
  * nvme-print: Add Sanitize Media Verification Event in PEL log
  * netapp-ontapdev: add err msg for no ontapdevices
  * netapp-smdev: add err msg for no smdevices
  * doc: Add sanitize command emvs option
  * ocp: combine to use GUID length definitions
  * nvme: update tls_key() handling
  * nvme-print-stdout: print VERS bit of SANICAP field
  * nvme: add EMVS support to sanitize command
  * ocp: remove callback function cast
  * doc: added commit conventions to contribution guidelines
  * ocp: fix ocp-print-stdout.c indentation error
  * ocp: fix ocp-nvme.c indentation errors
  * ocp: build ocp-nvme.c and ocp-telemetry-decode.c without json
  * ocp: split TCG configuration log print codes
  * ocp: split telemetry string log print codes
  * ocp: split device capabilities log print codes
  * ocp: split error recovery log print codes
  * ocp: split unsupported requirement log print codes
  * ocp: split latency monitor log print codes
  * ocp: move ocp telemetry log print function into ocp-print
  * ocp: split smart extended log print codes
  * ocp: split ocp-fw-activation-history print codes
  * plugins: update meson.build file to always build ocp plugin
  * ocp-print: move json code into separate files
  * nvme-print-json: display only verbose output
  * ocp-nvme: ocp plugin version update
  * nvme-print: print KV command set page header
  * doc: show where self-test results can be found
  * plugins/memblaze: fix a wrong id on smart-log-add
  * plugins/dapustor: smart-log-add fix
  * plugins/sed: add sid password change (bsc#1229677)
  * plugins/solidigm: Automatic retry smaller log chunk size.
  * ocp-nvme: Add LMDATA-37 for Latency Monitor Log
  * ocp-nvme: remove ocp log page version checking
  * wdc: Fix for Reading WDC C2 Vendor Unique Log Page
  * ocp: Fixes for OCP 2.5 Telemetry DA1 FIFO Event Parsing
  * nvme-print-json: update JSON verbose output for nvm-id-ctrl (bsc#1231668)
  * wdc: Add Support for SN5100S
  * nvme: Support show-regs for nvmeof
  * ocp: fix option handling in internal-log
  * Documentation: Added solidigm plugin commands
  * wdc: add support for SNTMP drive
  * nvme-print: print NSSES field of CAP register
  * ocp: fix GUID output
  * nvme-print-json: print controller register values in offset order
  * nvme-print-json: print CMBEBS and CMBSWTP in json format
  * nvme-print-stdout: update changed-ns-list-log output (bsc#1231668)
  * nvme: fix uninitialized value in error-log (bsc#1231668)
  * nvme: fix to convert metadata size to native byte order
  * nvme-print: fix error information log page endianness error
  * completions: add get-feature command changed option
  * doc: add get-feature command changed option
  * nvme: separate get NVME_GET_FEATURES_SEL_CHANGED definition
  * nvme: use NVME_GET_FEATURES_SEL definitions
  * nvme-print-stdout: use NVME_CTRL_OAES definitions
  * completion: add ocp set-telemetry-profile to zsh
  * completion: add solidgm work-tracker binding
  * plugins/solidigm: Added Workload Tracker Triggers and Wall Time
  * ocp: include util/types.h to use nvme_uint128_t
  * ocp: fix to set log data pointer allocated
  * nvme: use NVME_CHECK() to check get features select field value
  * ocp: split ocp-hwcomp log
  * completions: add ocp hardware-component-log command
  * doc: add ocp hardware-component-log command
  * ocp: add hwcomp log json output
  * ocp: add hwcomp log command list option
  * ocp: add hwcomp log command comp-id option
  * ocp: add hwcomp dummy definition
  * ocp: add support for hwcomp log page
  * nvme: use NVME_CTRL_FNA definitions
  * netapp-smdevices: print single device output too (bsc#1231668)
  * netapp-smdevices: segregate print routines (bsc#1231668)
  * Add Support for new SN655 PCI Device ID
  * nvme-print-json: extern json object add functions
  * ocp: add SMART / health information extended log page version 4
  * ocp: add error recovery log page version 3
  * ocp: add get-enable-ieee1667-silo command
  * fabrics: fix incorrect access filename check (bsc#1231668)
  * nvme: use NVME_GET_FEATURES_SEL_SUPPORTED definition
  * nvme-print-json: use _cleanup_free_
  * plugins/solidigm: fix use after free.
  * ocp: fix ocp-nvme.c coding style errors
  * ocp: Change C9 function names to use c9 instead
  * ocp: fix to return c9 log page data error to open file
  * ocp: fix to set return value to get c9 log page data
  * nvme: update nvme_insert_tls_key_versioned() return handling (bsc#1231668)
  * nvme-print-stdout: add print_array function
  * logging: add print_info function
  * util: extern uint128_t_to_double() function
  * nvme-print: sanitize error-log output (bsc#1231668)
  * plugins/solidigm : Fixing vs-internal-log to generate identify per allocated namespace.
  * nvme-print: added new fields for nvm_id_ns
  * plugins/fdp: bugfix error check to validate output format
  * plugins/wdc: fix json output for vs-nand-stats
  * nvme-print-stdout: use NVME_FEAT util definitions
  * nvme-print: update subsys verbose outputs (bsc#1231668)
  * nvme-print: add subsystype to the list-subsys output (bsc#1231668)
  * netapp: print output for single device too (bsc#1231668)
  * netapp: segregate the print routines (bsc#1231668)
  * netapp: fix uninitialized value from heap error (bsc#1231668)
  * nvme-print: print the new fields added in TP4142
  * plugins/innogrit: modify for project tacoma
  * wdc: Add Support for new SN-861 PCI device id
  * nvme-print: use LC_MEASUREMENT to check fahrenheit temperature
  * nvme-print: use Completion Condition enum
  * completions: add the zsh completion of the dapustor plugin
  * nvme-print: print the new fields added in TP4165
  * plugins/dapustor: dapustor smart-log-add update
  * nvme-print-stdout: Added print for new field CSER (TP4167)
  * plugins: Add a new DapuStor plugin and the smart-log-add command
  * docs: rename ocp-unsupported-req-log file
- Drop build fix patch
  * remove 0001-docs-rename-ocp-unsupported-req-log-file.patch
- Install 70-nvmf-keys.rules to the default udev rules directory</changelog>
  <changelog author="dwagner@suse.de" date="1741089600">- Update to version 2.11+17.g6e09119:
  * nvme: check for valid output format (bsc#1237275)
  * nvme: make get-feature JSON output print everything (bsc#1237275)
  * nvme: make -v output consistent with -H output for nvme get-feature (bsc#1237275)
  * nvme: make -v output consistent with -H output for nvme get-property (bsc#1237275)
  * nvme-print-stdout: add details in list-ns verbose output (bsc#1237275)
  * nvme-print-stdout: add descriptions for nsze, ncap &amp; nuse (bsc#1237275)
  * netapp-ontapdev: correct the basestr header (bsc#1237275)
  * netapp-smdev: update err msg for no smdevices (bsc#1237275)
  * netapp-ontapdev: update err msg for no ontapdevices (bsc#1237275)
  * netapp-smdev: update basestr header in verbose output (bsc#1237275)</changelog>
  <changelog author="dwagner@suse.de" date="1745323200">- Update to version 2.11+22.gd31b1a01:
  * nvme-print: display fw-rev in list-subsys output (bsc#1240518)
  * nvme-print: display model in list-subsys output (bsc#1240518)
  * netapp-ontapdev: add subsysname to regular output (bsc#1240518)
  * netapp-ontapdev: add subsysname to the verbose output (bsc#1240518)
  * Revert "nvme-print-json: display only verbose output"</changelog>
  <changelog author="dwagner@suse.de" date="1753185600">- Update to version 2.11+26.gfbd2b4f4:
  * nvme: fix mem leak in nvme copy (bsc#1243716)
  * nvme-print: suppress output when no ctrl is present for list-subsys (bsc#1243716)
  * nvme: extend filter to match device name (bsc#1243716)
  * udev-rules-ontap: switch to queue-depth iopolicy (bsc#1246599)</changelog>
  <changelog author="dwagner@suse.de" date="1757419200">- Update to version 2.11+28.g2fc67685:
  * netapp-ontapdev: update invalid device handling (bsc#1247017)
  * netapp-smdev: update invalid device handling (bsc#1247017)</changelog>
</package>
<package pkgid="e4a0168e472a2118f54b5a464a15e20f53b72daaa9ee9930a35785021b385d9a" name="nvme-cli" arch="x86_64">
  <version epoch="0" ver="2.11+28.g2fc67685" rel="150700.3.9.1"/>
  <changelog author="dmueller@suse.com" date="1660737600">- Update to version 2.1.2:
  * build: Update version to v2.1.2
  * wrapper: Update SPDIX license
  * wrapper: Call library version of nvme_init_copy_range_f1
  * Revert "udev: re-read the discovery log page when a discovery controller reconnected"
  * nvme: Simplify ns list identify
  * meson: we don't need a c++ compiler
  * plugins/ocp: drop unused fd argument
  * plugins/wdc: remove fd argument from print functions
  * plugins/wdc: fix memset() on the address of a pointer
  * plugins/solidigm: fix return value on format parse failure
  * plugins/wdc: prevent duplicate close on NVMe device</changelog>
  <changelog author="daniel.wagner@suse.com" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- Mark no binaries rpms as noarch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 2.2.1:
  * Added parsing for Solidigm telemetry observable data.
  * add item ddr_ecc_err_cnt in smart-log-add
  * build: Drop dependency on libuuid
  * build: Fix endian check for cross build
  * build: Remove unused uuid.wrap file
  * build: Remove unusned uuid.h include
  * completions: Add show-topology tab completion
  * fabrics: Honor JSON config file in connect-all command (bsc#1199504)
  * fabrics: Trigger auto connect if config.json exists
  * fabrics: fix 'persistent' handling during connect-all with JSON file
  * fabrics: nvme config --modify depends on -n and -t argument
  * fabrics: re-read the discovery log page when a discovery controller reconnected
  * json: Support uint64 types serialization for older json-c versions
  * nvme, plugins: fix __u64 -&gt; unsigned long long assumptions
  * nvme-print: Add missing values in id-ctrl for JSON output
  * nvme-print: Handle NULL hostid in JSON output
  * nvme-print: Output 128bit values as uint128 type instead of double
  * nvme-print: Print fguid as a UUID
  * nvme-print: Use uint128 JSON function for media_units_written
  * nvme-print: decode MI status values
  * nvme-print: decode status types
  * nvme-print: fix wrong json key
  * nvme: Add helper function to parse 16-bit comma separated list
  * nvme: Add nvme_cmd wrapper for get_features
  * nvme: Add show-topology command
  * nvme: Add wrapper for Format NVM
  * nvme: Add wrapper for Sanitize NVM
  * nvme: Add wrappers for Get Log page helpers
  * nvme: Add wrappers for Identify controller lists
  * nvme: Add wrappers for NS attach/detach
  * nvme: Add wrappers for NS management functions
  * nvme: Add wrappers for basic NS identify
  * nvme: Add wrappers for firmware commands
  * nvme: Fix set feature command to get feature identifier 0Dh length as zero
  * nvme: Introduce a union in struct nvme_dev for different transport types
  * nvme: Introduce nvme_cli_ wrappers, wrap identify and identify_ctrl
  * nvme: Make static nvme_dev private to open_dev(), use locals elsewhere
  * nvme: Masks SSTAT in sanize-log output
  * nvme: Remove static nvme_dev, allocate on open instead
  * nvme: Use correct print format specifier for sizeof arguments
  * nvme: Use local struct nvme_dev for show_registers &amp; map_registers
  * nvme: check if cfg.metadata is NULL before passing it to strlen()
  * nvme: use helpers for checking status types
  * plugins/innogrit: Include timer.h
  * plugins/innogrit: add smart items for smart-log-add
  * plugins/micron-nvme: Use correct print format specifier for sizeof arguments
  * plugins/ocp: Include timer.h
  * plugins/ocp: Output 128bit values as uint128 type instead of double
  * plugins/ocp: pass struct nvme_dev to internal functions
  * plugins/seagate: Add support for OCP
  * plugins/toshiba: pass struct nvme_dev rather than fd + name
  * plugins/virtium: Output 128bit values as uint128 type instead of double
  * plugins/wdc: Add support for SN660 drive
  * plugins/wdc: Add type case for feature id
  * plugins/wdc: Output 128bit values as uint128 type instead of double
  * plugins/wdc: pass a struct nvme_dev around rather than a fd
  * plugins/wdc: pass struct nvme_dev rather than using global nvme_dev
  * plugins/ytmc: pass struct nvme_dev rather than fd + name
  * plugins: Use PRIu64 format specifier for 64bit types
  * print: Add Controller Ready Timeout Exceeded HW error code
  * solidgm: fix initialization warning
  * solidigm: Added parsing for telemetry customer screenable data
  * solidigm: Fix printf format for size_t variable
  * solidigm: Updated Telemetry parsing code to MIT license.
  * subprojects/libnvme: update for MI admin command coverage
  * tests: Update license to GPL-2.0-or-later
  * tree: Add NVMe-MI support
  * tree: Add dev_fd() helper
  * tree: Change nvme_dev from global to static
  * tree: Combine NVMe file descriptor into struct nvme_dev
  * tree: Move global device info to a single struct
  * tree: fail on non-negative return values from parse_and_open
  * udev: Add HOST_IFACE to udev rule (bsc#1208001)
  * util/json.h: Add json_object_get_uint64 fallback implementation
  * util/json: Add 128 bit JSON helpers
  * util/types: Add 128 bit conversion helpers
  * util: Fix le128_to_cpu on big-endian
  * util: Fix le128_to_cpu on little-endian
  * util: Move common type conversion helpers into util section
  * utils/json: Add json_object_new_uint64 for json-c &lt; 0.14
  * utils: Fix uint128_t usage
  * wdc:  OCP Log page updates and fixes
  * zns.c: report zones should be started after retrieved zone
- Handle suse-missing-rclink lint warnings by providing the symlinks
- Drop rpmlintrc as it is not needed anymore</changelog>
  <changelog author="daniel.wagner@suse.com" date="1675080000">- Update to version 2.3:
  * Added support for Flexible Data Placement (TP4146)
  * Added Persistent Discovery Controller support (TP8013/TP8014)
  * nvme-mi: support for firmware downloads
  * nvme device-self-test learned the --wait command line argument
    which makes nvme-cli to wait (incl. progress bar) in foreground
    until the test has finished.
  * A lot of bug fixes all over the place
- Update spec file
  * Project depends on meson &gt;= 0.50.0
  * make build dependency dropped</changelog>
  <changelog author="daniel.wagner@suse.com" date="1680264000">- Update to version 2.4 (jsc#PED-553 jsc#PED-3884):
  * plugins/ocp: Add SMART cloud log to solidigm plugin
  * nvme-print: Unify number base format for nsid
  * nvme-(discover,connect,connect-all): enable options '--keyring' and '--tls_key'
  * nvme-connect: enable option '--tls'
  * nvme-check-tls-key: add options to derive a 'retained' TLS key
  * nvme-gen-tls-key: add options to derive a TLS key
  * plugins/ocp: Move SMART cloud log methods to separate file for reusability
  * nvme: validate storage tag size correctly
  * nvme-print-json: Add json output status function
  * util: Cleanup argconfig parse function
  * nvme: Fix format command function indentation errors
  * util: Use argconfig commandline options pointer directly
  * nvme-print: Fix nvme show status function indentation errors
  * nvme: Check fw-commit command support MUD
  * print: print csi and opcode in error log (TP4113)
  * plugins/inspur: Cast vendor specific smart log value
  * nvme: Use correct ABORT type for self abort test
  * plugins/solidigm: Do not overwrite previously initialized variable
  * nvme-print: sanitize supported-log-pages output (bsc#1209550)
  * nvme: Enforce length to a multiple of 4 in get_log_page
  * nvme: fix block count and data size logic (bsc#1209564)
  * util: Introduce argconfig simple helper to check seen condition
  * plugins/ocp: Add set feature EOL/PLP failure mode no-uuid option
  * plugins/ocp: Refactor to clear feature identifier C1h and C3h
  * plugins/ocp: Add support for clear PCIe correctable error counters feature
  * nvme-doc: update man page for supported-log-pages (bsc#1209550)
  * plugins/ocp: OCP 2.0 field updates for SMART cloud log
  * nvme: Fix parameter limit range
  * fdp: Fix wrong Reclaim Unit Handle Status size
  * plugins/ocp: Add support for EOL/PLP failure mode feature
  * nvme-print: Fix printing of u32 values
  * nvme: Fix invalid memory access in show_registers
  * util: Add argconfig seen flag parameter to check if feature NSID set
  * nvme-print: fix segfault in supported-log-pages json output
  * fabrics: Fix ordering for auto connect services (bsc#1208075)
  * nvme.c: Check Firmware Update Granularity in fwdl
  * log: high latency timestamp issue
  * nvme: Align get feature data buffer length by page size to allocate
  * nvme: Continue get feature on invalid NS error to get multiple feature ids
  * plugins/ocp: SMART cloud log bug fixes.
  * Made temperature readouts in line with the SI.
  * Changed 'Kelvin' to 'kelvin', as recommended by the BIPM.
  * plugins/ocp: Fix whitespace and style issues
  * util: Revert JSON output to plain numbers
  * nvme: Add rae argument to telemetry-log command
  * nvme: Refactor get telemetry log page helper
  * nvme: Factor out parse telemetry log da element
  * nvme: Fix type in error message
  * unit: Add test-argconfig-parse
  * nvme: Use chunked read in get_log()
  * nvme: Use fprintf for error message logging in get_log()
  * nvme: fix /dev/spkd/ typo
  * doc: --storage-tag-check doesn't take any arguments
  * fabrics: Ensure host-traddr/iface consistency for "connect-all"
  * nvme-print: print the nvme generic name in json output as well
  * plugins/innogrit: modify command opcode for eventlog and cdump
  * completion: fix typo, add missing args
  * plugins/wdc: Fix data Formatting for Latency Monitor Log Page
  * nvme: Make json-c optional again
  * nvme-print: Move JSON printing function into a new file
  * plugins/solidigm: Use json_create_object wrapper
  * plugins/solidigm: Use struct json_object instead of typedef
  * fabrics: No need to sanitize trsvcid and traddr
  * docs: Fixed typos and missing options
  * util: Numbers without any suffix are also valid
  * util: Update suffix_binary_parse API
  * util: Reimplement suffix_si_parse
  * nvme: Filter out status flags for get feature command
  * util: Add crc32 implementation
  * nvme-print: Use attrs_info as key for Zone Attributes Information
  * nvme: Support effects-log for fabrics ctrl
  * plugins/solidigm: Add uuid index resolution
  * plugins/ocp: Use network byte order for OCP UUID value
  * json_discovery_log: avoid buffer overrun (bsc#1207435)
  * Fix connect nbft regressions (bsc#1209905)
  * Fix auto connect conditions (bsc#1210105)
  * Fix auto boot for NBFT connections (bsc#1211647)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1695988800">- Update to version 2.6 (jsc#PED-3610 jsc#PED-4879 jsc#PED-5061):
  * nvme: allocate payload buffer in create-ns command
  * nvme-print-stdout: Add CAP.CPS and CAP.NSSS human readable outputs
  * nvme: Add output-format default option instead of argconfig json option
  * nvme: fw-download offset only describes FW offset, not file offset
  * unit: add locale number test
  * util: handle utf-8 thousend separators correctly
  * nvme: Change to use NVME_ARGS verbose default option from OPT_ARGS
  * fabrics: Fix NVMF_ARGS macro to use parameter n correctly
  * nvme: Add verbose default option to show command debug output
  * util: Fix to set argconfig output format json option correctly
  * util: Split argconfig output format json function to set and get
  * nvme: Spport Phy Rx Eye Opening Measurement Log
  * nvme: Introduce nvme_realloc function
  * nvme: Fix for fdpa reserved field printing
  * completion: add 'version' and 'help' to list
  * udev-rule: apply round-robin iopolicy on i/o subsystems alone (bsc#1215994) (bsc#1219086)
  * nvme: Add support for the OAQD ID controller field
  * plugins/solidigm: use static log macro to calc bitmask
  * plugins/ocp: Rename FW activation history command
  * nvme: auto free nvme_dev resource
  * nvme: allocate aligned payloads for all nvme commands
  * nvme: introduce alloc helper with alignment support
  * util: add cleanup function for generic memory allocations
  * nvme: append huge to nvme_{alloc|free} function
  * nvme: fw_download use nvme_alloc only
  * fabrics: Removing duplicate code and moving to libnvme
  * nvme-print: omit size of protection information
  * tree: Modify label name close_fd to close_dev
  * fabrics: For TCP/RDMA, compare IP addresses with nvme_ipaddrs_eq() (bsc#1213768)
  * fabrics: lookup_discovery_ctrl() must look under host and not root (bsc#1213768)
  * nvme: Do not map status to errno codes
  * completions: Add bash completion for DSSD Power state feature(FID: C7h)
  * Documentation: Add document for DSSD Power state feature(FID: C7h)
  * plugins/ocp: Add DSSD Power state feature(FID: C7h)
  * avoid casting pointer arguments to argconfig functions
  * nvme-print: Add support for EGFEAT, Domain Identifier, TEGCAP and UEGCAP
  * nvme-print: Fix endurance_log whitespace changes
  * nvme: Fix retrieval of telemetry log up to specified data area.
  * nvme: Update list secondary command
  * wdc: Add support for SN861 drive
  * util: Set errno to 0 before strtol/stroul call
  * nvme: Revert passthru and submit_io to print status to stderr from stdout
  * plugins/zns: Fix offset in report zones
  * nvme-rpmb: Fix nvme_show_id_ctrl_rpmbs() definition error
  * fabrics: Use corresponding hostid when hostnqn is generated
  * json: fix seg. fault converting NULL to JSON string (bsc#1213762)
  * nvme-cli: fix extended metadata size calculation
  * nvme-print: Show subsystem iopolicy (bsc#1124564)
  * nvme-print-stdout: Do not show non reachable ns in namespace topology (bsc#1212598)
  * nvme-print: Fix show-topolocy for ctrls
  * doc: Fix typo in documentation
  * nvme-print-stdout: fix storage tag size label
  * nvme-print-stdout: List only ctrls which are part of ns (bsc#1212598)
  * nvme-print-stdout: Support subsys reachable from several hosts (bsc#1212598)
  * ccan: Add htable, strset and dependencies (bsc#1212598)
  * ccan: Remove unused documentation (bsc#1212598)
  * nvme-print: Split max power flags
  * nvme-print: fix counter while looping through uuid_list (bsc#1212598)
  * fabrics: only look for matching ctrl on same host (bsc#1213768)
  * README: Correct hugetlbfs spelling error
  * util: Delete unused CFG_BOOL argconfig type as duplicated with CFG_FLAG
  * util: Set LC_ALL=C as default if -H option is not used
  * nvme: Add support for create-ns command endg-id option parameter
  * nvme-print: fix argument order for show functions
  * plugins/solidigm: Added Marketing Name Log support for Solidigm.
  * nvme-print: Remove left overs from refactoring
  * nvme-print: Move num argument parsing into callbacks
  * nvme-print: Fix typo in callback definition
  * scripts: Make release script project neutral
  * scripts: Update update-docs.sh scripts
  * scripts: Execute the scripts from toplevel directory
  * scripts: Move helper scripts to a central place
  * docs: Update file modes
  * doc: Add information on --context
  * nvmf-autoconnect: Annotate the context to autoconnect
  * fabrics: Add support for volatile configuration
  * plugins/solidigm: Formated log page directory table consistently with "nvme list" format.
  * plugins/solidigm: Added Identify controller VU extensions parsing.
  * nvme-print-json: Print PCI pysical slot number for controller
  * nvme-print-stdout: Print PCI physical slot number for controller
  * libnvme.wrap: Bump to 42ac453
  * plugins/nbft: Use common code to parse print flags
  * fabrics: Do not print device on connect per default
  * fabrics: Revert 'fabrics: prevent 'nvme connect' to well-known discovery NQN'
  * nvme-print: fix wrong list-subsys output when ns are attached to different ctrls
  * plugins/micron: Correct NULL pointer checking error
  * plugins/innogrit: Add vendor command get-eventlog and get-cdump
  * nvme: Use correct data buffer size
  * nvme: Fix quoted string split across lines to use quoted newline
  * plugins/zns: Fix zns.c linux kernel check patch errors and warnings
  * plugins/ymtc: Fix ymtc-nvme.c linux kernel check patch warning
  * plugins/ymtc: Fix ymtc-nvme.c space indentation to tab indentation
  * plugins/virtium: Fix virtium-nvme.c linux kernel check patch errors and warnings
  * plugins/transcend: Fix transcend-nvme.c linux kernel check patch errors and warnings
  * plugins/solidigm: Fix linux kernel check patch errors and warnings
  * plugins/shannon: Fix shannon-nvme.c linux kernel check patch errors and warnings
  * plugins/seagate: Fix seagate-nvme.c linux kernel check patch warnings
  * plugins/scaleflux: Fix sfx-nvme.c linux kernel check patch errors and warnings
  * plugins/netapp: Fix netapp-nvme.c linux kernel check patch errors and warnings
  * plugins/nbft: Fix nbft-plugin.c linux kernel check patch warnings
  * plugins/micron: Fix micron-nvme.c linux kernel check patch errors and warnings
  * plugins/micron: Fix micron-nvme.c space indentation to tab indentation
  * plugins/memblaze: Fix memblaze-nvme.c linux kernel check patch errors and warnings
  * plugins/memblaze: Fix memblaze-utils.h space indentation to tab indentation
  * plugins/memblaze: Fix memblaze-nvme.c space indentation to tab indentation
  * plugins/intel: Fix intel-nvme.c linux kernel check patch errors and warnings
  * plugins/inspur: Fix inspur-nvme.c linux kernel check patch warnings
  * plugins/inspur: Fix inspur-nvme.c space indentation to tab indentation
  * plugins/innogrit: Fix innogrit-nvme.c linux kernel check patch errors
  * plugins/huawei: Fix huawei-nvme.c linux kernel check patch errors and warnings
  * plugins/fdb: Fix fdb.c linux kernel check patch warnings
  * plugins/dera: Fix dera-nvme.c linux kernel check patch errors and warnings
  * plugins/amzn: Fix amzn-nvme.c linux kernel check patch error and warnings
  * plugins/wdc: Fix wdc-utils.c linux kernel check patch errors and warnings
  * plugins/wdc: Refactor wdc-nvme.c for linux kernel check patch errors and warnings
  * util: Move falltrhough feature check to meson.builds
  * ocp: Add eol plp failure mode json outputs
  * nvme-print: Add nvme show result function
  * nvme-print-json: Add json output result function
  * nvme-print: Fix nvme_show_error() to call va_end() for json output format
  * nvme: Fix nvme format block-size option handling
  * Revert "nvme: Masks SSTAT in sanize-log output"
  * fabrics: Fix NVMF_ARGS macro indentation error
  * Documentation: Add document for OCP Device capability(LID: 0xC4) log page
  * completions: Add bash completion for OCP Device capability(LID: 0xC4) log page
  * plugins/ocp: Add Device capability(LID: 0xC4) log page
  * udev: fix warning reported by udevadm verify
  * fabrics: fix conditions in nvmf-autoconnect.service
  * fabrics: Change NVMF_OPTS as NVMF_ARGS to fix linux kernel check patch error
  * nvme: Split passthru commands read output
  * nvme: Fix io-passthru command read metadata output
  * plugin/ocp: Added implementation for 0xC1 log page
  * util: Fix suffix_si_parse to parse no decimal point but suffix value correctly
  * completions: Add zsh option values handling for sanitize command action
  * completions: Add ocp sub commands zsh completion
  * completions: Add ocp commands zsh completion
  * completions: Add ocp commands bash completion
  * nvmf-autoconnect: restart service to avoid dropping AEN
  * solidigm: Reduce memory usage in supported log pages feature
  * solidigm: Changes to supported log pages feature requested by review
  * solidigm: Add supported log pages log feature to Solidigm plugin
  * plugins/ocp: Added ocp unsupported requirements log page
  * completions: Add bash option values handling for sanitize command action
  * doc: Correct nvme-show-hostnqn command NAME description
  * completions: Add missing zsh commands descriptions
  * plugins/wdc: Extend SN530 support.
  * Fix incorrect article 'an' as 'a' to use for descriptions and message
  * nvme: Set effects-log command csi option help message string
  * completions: bash: Delete unsupported id-iocs command options
  * completions: bash: Add id-domain command
  * completions: Fix nvm-id-ns-lba-format command zsh definition
  * completions: Add json command option
  * nvme: Fix get-feature command sel parameter check to allow value 8
  * util: Delete unnecessary argconfig definitions OPT_VAL and CFG_VAL
  * util: Delete argconfig value type to add option value as va lists instead
  * util: Split to set argconfig option value
  * util: Delete argconfig value length to calcurate instead
  * nvme: Change sanitize command action option to use argconfig parse value
  * util: Add argconfig parse value function
  * util: Delete unused argconfig subopts type
  * util: Delete unused argconfig file types
  * util: Delete unused argconfig help function
  * nvme-wrap: do_admin_args_op should not clear args timeout
  * nvme: Fix linux kernel check patch warnings
  * nvme: Fix linux kernel check patch errors
  * plugins/ocp: Add telemetry-log command to OCP plugin
  * plugins/ocp: Add OCP set latency monitor feature command
  * plugins/ocp: Fix endianness in Latency Monitor Log output
  * plugins/ocp: Add missing fields in Latency Monitor Log
  * plugins/ocp: Fix typos in Latency Monitor Log
  * plugins/ocp: Reorganize OCP plugin source code
  * tests: Add tests for controller reset
  * plugin/solidigm: Added vs-internal-log command.
  * nvme: Add nvme_show_perror to use instead of perror for json output
  * nvme-print-json: Use vasprintf instead of vsnprintf to allocate string
  * nvme: fix rnlpt to_string() values.
  * nvme: fix io_mgmt args parse error
  * fdp: set-events feature is saveable
  * fabrics: Return errno value as negative
  * fabrics: Fix linux kernel check patch errors and warnings
  * nbft: add the nbft show plugin
  * nbft: added NBFT v1.0 table support (jsc#PED-1449)
  * nbft: make lookup_ctrl function public
  * nvme: Fix indentation errors around nvme show error API
  * nvme: Check validate output format err value instead of flags
  * nvme: Use nvme show error API to outptu stderr messages for json format
  * util: Check output format json for json error message output
  * nvme-printf: Add show error function for nvme list command json output
  * nvme: Add zns specfic field for create ns
  * nvme: Add ns-mgmt host software specified fields
  * nvme: Add dtype, dspec on write-zeroes, write-uncor
  * nvme-print: Add new fields print on id directive
  * nvme-print: Add VWCNP on NSFEAT of id-ns
  * nvme: Fix format command to skip to reread NSID all block device
  * plugins/solidigm: Fixes and clean-up of Telemetry parse code. Fixed parsing of 64 bit values. Fixed COD field name. Fixed compilation warnings when compiling for 32 bit. Added missing free(). Consolidated single entry function to telemetry parser. Consolidated use of integer types.
  * doc: Documentations maintenance changes
  * doc: Add nvme-mi-send command documentation
  * doc: Add nvme-mi-recv command documentation
  * doc: Add clear-pcie-correctable-error-counters command documentation
  * doc: Add eol-plp-failure-mode command documentation
  * plugins/solidigm: Add firmware activation history log to Solidigm plugin
  * plugins/ocp: Add firmware activation history log to OCP plugin
  * nvme-print: Use enum nvme_print_flags for nvme_show_id_ctrl
  * nvme: Add support for NVMe-MI send command
  * nvme: Use stdout for passthru and submit_io commands success messages
  * nvme: Fix passthru command function indentation errors
  * nvme: Add support for NVMe-MI receive command
  * fabrics: fix fc config JSON file handling (bsc#1210089)
  Refresh 0100-harden_nvmf-connect@.service.patch
- Fix install path for nvme-regress script</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420800">- Enable test during build (bsc#1207686)
- Drop minimum version meson dependency
- Add asciidoc dependency
- Build documentation when requested</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696852800">- Use fixed timestamps for documentation allowing reproducable builds
- Announce nvmeof-boot-support support via Provides
- Filter rpmlint warnings for systemd-service-without-service_ macros
- Add missing service files for NBFT feature
  * add 0001-fabrics-autoconnect-add-service-unit-for-connecting-.patch
  * add 0002-fabrics-add-udev-rule-to-avoid-renaming-nbft-interfa.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1697112000">- Add missing jsc# and bsc# tracking entries in change log.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1702987200">- Update to version 2.7:
  * nvme-print-json: include vs for identify namespace
  * nvme-print-stdout: enhance connect message (bsc#1219086)
  * fabrics: fix connect error if hostid file does not exist (bsc#1219086)
  * fabrics: fix invalid output format error during nvme connect (bsc#1219086)
  * wdc: Fix vs-smart-add-log Command for SN650 and SN655
  * nvme: restric hmac options for gen-tls-key (bsc#1219086)
  * wdc: Fix UUID index fallback mechanism
  * plugins/ocp: Add OCP Telemetry String log page, Telemetry log page
  * completions: Add bash completions for telemetry string log page
  * plugins/solidigm: Added OCP 2.0 compatibility version command
  * plugins/solidigm: Added OCP 2.0 vs-drive-info command.
  * plugins/ocp: Fix printing order of various Latency Monitor Log buckets
  * nvme: validate output format split status from flag return value
  * nvme: simplify cleanup_nvme_dev()
  * cleanup: remove unused cleanup_charp()
  * wdc: Add support for SN861 2nd pci device id
  * nvme: replace libhugetlbfs with mmap and madvise
  * util/mem: move alloc helper to util section
  * nvme: auto cleanup filedescriptors
  * nvme: auto cleanup buffers
  * nvme: return error code in get_persistent_event_log
  * nvme: sanitize nvme-gen-tls-key
  * nvme: print out the resulting TLS identity for 'nvme check-tls-key'
  * nvme: Add version '1' identifier for nvme-gen-tls-key
  * subprojects/libnvme: update wrapper for TP8018
  * plugins/solidigm: Added re_sku_count smart atrribute
  * doc: Fix nvme-connect manpage --application option string
  * plugins/ocp: changed command clear-pcie-correctable-error-counters to match OCP 2.0 spec.
  * plugins/solidigm: Added command to clear PCIe Correctable Error Counters according to OCP 2.0
  * plugins/ocp: Reorganized clear feature code for better reuse
  * nvme: fixup length calculation for 'nvme gen-tls-key --secret'
  * doc: remove invalid hostkey info for --dhchap-secret
  * nvme-print-json: use human helper everywhere
  * nvme-print-json: remove obj_print helper
  * plugins/ocp: update nvme_show_select_result call
  * mailmap: only show contributer's name
  * nvme-print-json: Change to report status and message in array
  * nvme-print-json: Change to report feature select in array
  * nvme-print-json: Change to report error and data in array
  * nvme-print-json: Add show_init/finish calls to report features in array
  * nvme-print: Add nvme_show_error_status() to merge error message and status
  * nvme-print-json: Use r instead of root and use obj_add_***(r, ..., ...)
  * nvme-print-json: Delete static const char string global variables
  * nvme-print-json: Add remaining controller registers readable format
  * nvme-print-json: Add readable format cap, vs, cc, csts, nssr and crto registers
  * nvme-print-json: Combine duplicated json key and val string variables
  * nvme-print-json: Replase json_array_add_value_string() to array_add_str()
  * nvme-print-json: Replase json_object_add_value_uint128() to obj/root_add_uint128()
  * nvme-print-json: Replase json_object_add_value_object() to obj/root_add_obj()
  * nvme-print-json: Replase json_array_add_value_object() to array_add_obj()
  * nvme-print-json: Replase json_object_add_value_array() to obj/root_add_array()
  * nvme-print-json: Replase json_object_add_value_uint() to obj/root_add_uint()
  * nvme-print-json: Replase json_object_add_value_int() to obj/root_add_int()
  * nvme-print-json: Replase json_object_add_value_uint64() to obj/root_add_uint64()
  * nvme-print-json: Replase json_object_add_value_string() to obj/root_add_str()
  * nvme-print-json: Update feature_show_fields_*** to use root/obj_add_***()
  * nvme-print-json: Update lba_status_log to use root_add_***() and obj_add_***()
  * nvme-print-json: Replace lba_status_log printf() to root_add_result()
  * nvme-print-json: Add list_item print function
  * nvme-print-json: Add lba_status_info print function
  * nvme-print-json: Add lba_range print function
  * nvme-print-json: Add id_ctrl_rpmbs print function
  * nvme-print-json: Unify json_list and jroot object names to root
  * nvme-print-json: Add json_zns_changed print function
  * nvme-print-json: Add root_add_result() to output result message
  * nvme-print-json: Split persistent_event_log print function
  * nvme-print-json: Remove unnecessary string newline code
  * nvme-print-json: Replace effects_log_list print to use json_print()
  * nvme-print-json: Print persistent_event_log no log data result correctly
  * nvme-print-json: Add static "result" and "erorr" strings variables
  * nvme-print-json: Add single_property printf function
  * nvme: Replace get feature command stderr output to nvme_show_error()
  * nvme-print-json: Change d() output to use d_json()
  * nvme: Fix get-feature command mixed stdout and json outputs
  * nvme-print-json: Add remaining feature fields print functions
  * nvme-print-json: Update formatting and codying style
  * build: Add -std=c99 to CFLAGS for muon on CentOS 7
  * fabrics: add udev rule to avoid renaming nbft interfaces
  * fabrics: autoconnect: add service unit for connecting NBFT subsystems
  * fabrics: autoconnect: explicitly express module dependency
  * Updates to codeql config
  * libnvme-wrap: exit on VOID_FN lookup failure
  * plugins/ocp:Added the ocp C6h feature api
  * plugin/ocp_fid_c6h:Added the ocp C6h feature api
  * nvme-copy: support cross-namespace copy
  * nvme/plugins: fix mismatch operator
  * nvme: fix overflow possiblity
  * nvme: reduce identify cmd issue
  * nvme: allow set-features to take input from stdin
  * Fix common misspellings from codespell project
  * nvme-print: Correct to print correct ascii character string length
  * print-stdout: print Host Behavior Support correctly
  * build: Bump libnvme wrap
  * plugins/solidigm: Added support for temperature statistics log page
  * Add support for codeql sweeps
  * doc: Add virt-mgmt command
  * doc: Add id-uuid command
  * doc: Add list-secondary command
  * doc: Add id-ns-granularity command
  * doc: Add nvme commands --output-format and --verbose options
  * completions: Add nvme-mi-recv nad nvme-mi-send commands completions
  * completions: Change short option -o and -v duplicated to upper case
  * doc: Change short option -o and -v duplicated to upper case
  * nvme: Change short option -o and -v duplicated to upper case
  * nvme: Change phy-rx-eom-log command to use NVME_ARGS instead
  * plugins/memblaze: Add smart-log-add and latency-feature functions
  * plugins/solidigm: internal-logs Telemetry auto detect last data area.
  * nvme: Change to use NVME_FLBAS_META_EXT() macro to check flbas value
  * nvme-print-json: Add host memory buffer and timestamp features print functions
  * nvme-print-json: Add feature fields print functions
  * nvme-print-json: Add TMPTH feature print function
  * nvme-print-json: Add show_feature_fields print function
  * nvme-print-json: Add select_result print function
  * nvme-print-json: Use json_print to print and free object
  * nvme-print-json: Add lba_status print function
  * nvme-print-json: Combine variable definition and setting value
  * nvme-print-json: Add id_iocs print function
  * nvme-print-stdout: Fix coding style errors
  * nvme-print-json: Add directive print function
  * nvme: Fixed segmentation fault when getting host initiated telemetry
  * plugins/wdc: enhanced SN861 device support
  * plugins/wdc: cleanup line lengths
  * nvme: do not include meta data for PRACT=1 and MD=8
  * nvme: use block-count arg if provided
  * build: bump libnvme to disable tests option
  * build: Add static build on CI target
  * nvme-print: Add nvme_zns_start_zone_list() API function
  * nvme-print: Add nvme_zns_finish_zone_list() API function
  * nvme-print-binary: Set list function to NULL if unimplemented
  * nvme-print-json: Change order list functions and set NULL if unimplemented
  * nvme-print-stdout: Fix to set stdout_list_item print function missed
  * plugins/solidigm: log page name extraction using nvme_log_to_string function
  * nvme-print: Added missing logpage names in nvme_log_to_string function
  * udev-rules: rename netapp udev rule (bsc#1219086)
  * udev-rules: set ctrl_loss_tmo to -1 for ONTAP NVMe/TCP (bsc#1219086)
- Remove upstreamed patches
  * remove 0001-fabrics-autoconnect-add-service-unit-for-connecting-.patch
  * remove 0002-fabrics-add-udev-rule-to-avoid-renaming-nbft-interfa.patch
- Update spec file
  * remove libhugetblfs depedency
  * update NetApp udev rule file name</changelog>
  <changelog author="daniel.wagner@suse.com" date="1703160000">- Update to version 2.7.1:
  * nvme-print-json: Revert field name changes (bsc#1218306)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1707912000">- Update to version 2.8:
  * nvme-print-json: append array object in json_support_log
  * sed: Add plugin for basic SED Opal operations (jsc#PED-5061)
  * don't include newlines in already wrapped text
  * nvme: do not include meta data for PRACT=1 and MD=8 (version 2)
  * create-ns: align the namespaces to 1Mib boundaries when using SI suffixes
  * doc: Fix config-schema.json's URL
  * plugins/solidigm: Compressing vs-internal-log log files into zip file.
  * nbft: do not issue an error if ACPI tables are missing
  * nbft: fixup include for libnvme
  * doc: Fix short option name for cfg-file
  * completions: added Solidigm plugin to autocomplete scripts
  * nvme: Remove unused cfg argument from NVME_ARGS() macro
  * nvme: fix directive receive identify offsets
  * nvme-fabrics: enable option 'concat'
  * build: Update libnvme wrap
  * plugins/wdc: Add Debug Log Collection Support
  * nbft: fix tcp/dhcp address fallback retry (bsc#1218873)
  * nvme: use correct telemetry log size
  * nvme-print: fix typo in list verbose output (bsc#1219086)
  * nvme: print inserted tls key for check-tls-key (bsc#1219086)
  * plugins/wdc: Plugin fixes and updates
  * fabrics: move hostid/hostnqn warnings to verbose level (bsc#1219086)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737600">- Update to version 2.9:
  * nvme-print: expand the maximum field length to prevent misalignment
  * plugins/spdk: plugin to list SPDK subsystems
  * nvme-print: check if controller belong to SPDK
  * plugins/spdk: plugin to list SPDK controllers
  * nvme-print-stdout: fix ASQB, ACQB and BMBBA prints
  * build: bump libnvme wrap
  * nvmf-autoconnect: fix string encoding
  * nvme: identify primary ctrl do not accept nsid
  * nvme-wrap: remove unused nvme_cli_get_log_ana_groups()
  * nvme-print-json: use admin queue attributes definitions
  * nvme-print-json: use CSTS definitions
  * nvme-print-stdout: use POWER_OF_TWO macro
  * nvme-print-json: use controller configuration definitions
  * nvme-print-json, nvme-print-stdout: add tertiary version number
  * nvme-print-json: use NVME_MAJOR and NVME_MINOR definitions
  * nvme-print-json: use NVME_BOOT_PARTITION_INFO field definitions
  * nvme-print-json: add support telemetry log create event in PEL
  * nvme-print-json: add support set feature event in PEL
  * nvme-print-json: add obj_d() function
  * nvme-print-json: add obj_add_uint_0nx() function
  * meson.build: Fix spelling of sed-opal.h filename
  * sed_opal: Only build when we really have sed_opal headers
  * nvme: fix error path if write() fails in get_telemetry_log()
  * plugins/solidigm: Additional LID for temperature statistics.
  * plugins/solidigm: Improved Solidigm UUID index detection.
  * nvme-print-stdout: Add CSTS.ST register stdout print
  * nvme-print-stdout: Use NVME_CMIC definitions
  * nvme-print: Use NVME_UNIT definitions
  * nvme-print-stdout: Use NVME_CMBMSC/STS/EBS/SWTP definitions
  * plugins/ssstc: add a new plugin for SSSTC driver
  * nvmf-connect: systemd hardening effort
  * plugins/ocp: Adjusted variable type size carrying UUID index to 8 bit.
  * nvme: fix security buffer allocation size
  * nvme: Change fw-download xfer initialization to set 0
  * nvme: Add fw-download warning message for FWUG alignment error
  * plugins/ocp: Split ocp_get_uuid_index() into find and get functions.
  * nvme: fix mem leak in multiple key related functions (bsc#1223331)
  * fabrics: fix mem leak in nvmf_check_hostid_and_hostnqn() (bsc#1223331)
  * nvme-print-stdout: Use NVME_BPRSEL definitions
  * nvme-print-stdout: Use NVME_BPINFO definitions
  * nvme-print-stdout: Use NVME_CMBSZ definitions
  * nvme-print-stdout: Use NVME_CMBLOC definitions
  * Revert "logging: fix error handling for ioctl passthru wrappers"
  * fabrics: align identify command payload
  * ocp: Unify line start spacing as tabs
  * ocp: support OCP DSSD Async Event Config feature
  * nvme: Add support for get-reg and set-reg commands
  * nvme-print-json: Add register print functions
  * nvme-print-stdout: Add register print functions
  * nvme-print: Add register print functions
  * nvme: Refactor mmap_registers to add writable parameter
  * nvme-print: Change PMRSZU string function as unit string
  * nvme-print: Refactor CMBLOC and PMRSTS registers function
  * logging: fix error handling for ioctl passthru wrappers
  * nbft: Fix scandir() error check
  * nbft: Refactor connection attempt out
  * nvme-print: Use EOM optional data present macros changed
  * nvme-print: Print cntlid number for controller (bsc#1224024)
  * nvme: check-tls-key fails despite having hostnqn file (bsc#1223331)
  * nvme: print retained key for gen-tls-key's -i option too (bsc#1223331)
  * fabrics : allow host to create duplicate connections to target
  * fabrics: Fix fast_io_fail_tmo option
  * nvme-print-stdout: use admin queue attributes definitions
  * nvme-print-stdout: use CSTS definitions
  * nvme-print-stdout: use controller configuration definitions
  * nvme-print-stdout: use NVME_MAJOR and NVME_MINOR definitions
  * nvme-print-stdout: use FDP configuration attributes definitions
  * nvme: add new function 'tls_key' (bsc#1226197)
  * nvme: use library functions for importing and exporting TLS keys (bsc#1216982)
  * nvme: extend error message for ns scan failures
  * nvme-print-json: Bugfix status json key of sanitize-log
  * sed: update SED password when initalizing (bsc#1222168)
  * plugins/memblaze: add performance stats
  * plugins/memblaze: fix code mis-type error
  * plugins/memblaze: code refactor on applying __packed on more structs
  * plugins/memblaze: code refactor on using cleanup_nvme_dev
  * nvme: Fix to cleanup free raw_secret memory allocated
  * plugins/memblaze: code-format on leading indent and align
  * plugins/wdc: Fix narrow index variable type in for loop to __u32
  * plugins/wdc: Whitespace changes
  * nvme: Delete unused nvme root scanned
  * ocp: support OCP 2.5 Set Telemetry Profile feature
  * nvme: Don't seg fault if given device is not char/block device
  * nbft: Include SSNS index in error messages (bsc#1222026)
  * nbft: Pause logging for expected connection failures (bsc#1222026)
  * nbft: Silence connection failures for unavailable SSNS (bsc#1222026)
  * nbft: Fix 'verbose' argument type (bsc#1222026)
  * plugins/nbft: Implement verbose logging
  * plugins/nbft: Print the new SSNS flags
  * nbft: Fix uninitialized variable
  * plugins/nbft: Fix uninitialized variables
  * plugins/sed: Fix uninitialized variable
  * nvme-print-stdout: Fix uninitialized variable
  * nvme-print-json: Fix uninitialized variable
  * build: Switch default meson buildtype to 'debugoptimized'
  * nvme: do not scan topology when mmaping registers
  * nvme-print-stdout: Use NVME_BOOT_PARTITION_INFO field definitions
  * nvme-print-stdout: Use NVME_GET for MI commands supported and effects CSP
  * nvme-print-stdout: Use NVME_GET for FID supported and effects FSP
  * nvme-print-stdout: Use NVME_SET_FEAT_EVENT register definitions
  * nvme-print: Add PEL EHAI port identifier type printf function
  * build: bump libnvme wrap
  * ocp: fix for power-state argument checking
  * nvme: do not issue warning when nvme_core module is not loaded
  * wdc: Review changes and build fixes
  * wdc:  Fix timestamp displayed by vs-firmware-activate-history command
  * logging: Split to output ioctl latency by log info level (bsc#1231668)
  * nvme-print-stdout: Change hexadecimal value 0x prefix to use %#x
  * nvme-print-stdout: Fix LBA status DSLBA output as hexadecimal
  * nvme-print-stdout: Split line length exceeded 100 columns
  * nvme-print-stdout: Use NVME_PMRMSC register definitions to print
  * nvme-print-stdout: Use NVME_PMRSWTP register definitions to print
  * nvme-print-stdout: Use NVME_PMREBS register definitions to print
  * nvme-print-stdout: Use NVME_PMRSTS register definitions to print
  * nvme-print-stdout: Use NVME_PMRCTL_EN register definition to print
  * nvme-print-stdout: Use NVME_PMRCAP register definition to print
  * doc: Fix admin and io passthru cdw parameters description
  * doc: Add get-feature cdw11 and set-feature cdw12 parameters
  * micron-nvme: Unuse stat() to check if strMainDirName exists
  * doc: Fix get-property and set-property offset and value descriptions
  * doc: Fix documentation file mode 100755 to 100644
  * nvme-print-stdout: Fix channel configuration descriptors pointer
  * nvme-print-stdout: Check sscanf return value
  * nvme-print-stdout: Fix linux kernel check patch errors
  * nvme: Delete unusual fallthrough for cases have no body
  * nvme: Delete duplicated semicolon
  * nvme-print, common: Fix for whitespace change
  * logging: output ioctl debugging info (bsc#1231668)
  * nvme: track verbose level (bsc#1231668)
  * logging: track log level globally
  * logging: move logging code to a new file
  * nvme: update include for libnvme
  * nvme: remove unused declaration
  * build: bump libnvme wrap
  * nvme-netapp: add nspath tlv handling (bsc#1220971)
  * rpm: Add missing rule and service files
  * nvme-print-json, nvme-print-stdout: Use CHAR_BIT definition
  * nvme-print-stdout: Delete duplicated if condition checking line
  * ocp: Fix timestamp displayed by fw-activate-history command
  * wdc: Add support for the get-drive-status command to SN861
  * nvme-print: Fix nvme_host_metadata_type_to_string() indentation errors
  * nvme-print: Add PEL RCI port identifier type printf function
  * nvme-print-stdout: Use persistent event log RCI definitions
  * build: bump libnvme wrap
  * nvme: Add show-regs and get-property commands NSSD print outputs
  * nvme-print: print more details in ns-descs verbose output (bsc#1223331)
  * Revert "nvme-print-json: remove obj_print helper"
  * sed: Confirm entered password before initialization.
- drop systemd service harden file, upstream ships this patch.
  * remove 0100-harden_nvmf-connect@.service.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737601">- Update to version 2.9.1:
  * plugins/spdk: drop the plugin</changelog>
  <changelog author="daniel.wagner@suse.com" date="1722600000">- Update to version 2.10:
  * sed: Fix parsing of Discovery0 features
  * fabrics: avoid potential segfault in nvmf_dim() (bsc#1231668)
  * nvme: avoid segfault in show-topology (bsc#1226197)
  * fabrics: do not leak nvme_ctrl_t object on connect
  * nvme: extend help message when mmap regs fails
  * nvme: return -ENXIO value to open device if errno not set
  * wdc: OCP 2.5 Log Page Updates
  * fabrics: drop --quiet alias -S
  * fabrics: drop --disable-sqflow alias -d
  * fabrics: check if json config is existing (bsc#1231668)
  * plugins/ocp: fix UAF when printing telemetry log
  * nvme-print-stdout: fix persistent-event-log set feature event output
  * fabrics: do not report error when no modules are loaded when disconnecting
  * fabrics: use cleanup helper where possible
  * fabrics: print an error for ENOENT too
  * plugins/virtium: use time_t for time_stamp values
  * completions: add ocp set-error-injection command
  * doc: add ocp set-error-injection command
  * ocp: add set-error-injection command
  * nvme: use argconfig_parse_seen to check conditions
  * nvme: use proper mask to get correct lbafu value
  * utils: fix print formatting option
  * utils: cleanup includes in utils.h
  * utils: add missing header
  * nvme-print: Added print for two new fields for HMB feature
  * plugins/micron: Move OCP internal log parsing from Micron to OCP Plugin.
  * fabrics: remove unused _discover_from_json_config_file() argument
  * nvme: avoid unnecessary dup() + close() in io_mgmt_send()
  * util: remove unnecessary NULL check in cleanup_nvme_root()
  * nvme: use argconfig_parse_comma_sep_array_u16() in attach-ns
  * util: avoid duplication in argconfig_parse_comma_sep_array*()
  * util: remove redundant loop condition in argconfig_parse()
  * util: introduce is_null_or_empty() to avoid strlen()
  * util: reduce allocation sizes in argconfig_parse()
  * util: consolidate call paths to argconfig_parse_type()
  * util: reduce complexity of argconfig_parse_val()
  * util: reduce arguments passed to argconfig_parse_type()
  * util: remove empty default case in argconfig functions
  * util: remove unnecessary parentheses in argconfig_parse_type()
  * util: remove redundant cast in argconfig_parse_type()
  * util: inline argconfig_parse_byte()
  * util: remove redundant NULL check in argconfig_print_help()
  * util: use cleanup to avoid goto in argconfig_parse()
  * util: make argconfig_set_opt_val() a void function
  * util: remove argconfig_parse_val() declaration
  * util: remove argconfig CFG_SIZE type
  * wdc: Update and refactor the C0h log page parsing
  * ccan: Add freed pointer checking to delete strset member
  * fabrics: connect all hosts in config.json (bsc#1226216)
  * fabrics: refactore discover from json config (bsc#1226216)
  * fabrics: first read config before topology scanning (bsc#1226216)
  * fabrics: use helper to lookup default hostnqn/hostid (bsc#1226216)
  * fabrics: extend already connected message (bsc#1226216)
  * fabrics: use cleanup helper to free nvme root object
  * nvme: check MD size with PI size when PRACT set to 1
  * nvme-print: add new field added in TP4090
  * nvme-print-binary: add effects-log command output missed
  * completions: add ocp get-error-injection command
  * doc: add ocp get-error-injection command
  * ocp: add get-error-injection command
  * ocp: fix eol-plp-failure-mode command sel option value
  * doc: fix ocp eol-plp-failure-mode select short option
  * ocp: set UUID index for eol-plp-failure-mode command to get
  * nvme: fix verbose logging (bsc#1231668)
  * doc: fix micron ocp telemetry log parse title
  * nvme-rpmb: send RPMB_REQ_READ_RESULT for authentication key programming
  * plugins/micron: Add support for OCP telemetry log parsing
  * ocp: Update Plugin Version
  * nvme: fix lbaf inuse to use 6:5 bits
  * ocp: use NVME_ARGS macro definition by eol-plp-failure-mode command
  * nvme: extern NVME_ARGS macro definition
  * nvme: use _cleanup_free_ type buffer for get-feature command
  * plugins/ocp: Update telemetry string log page (C9h)
  * nvme-print-json: add get-feature command fahrenheit temperature output
  * nvme: add get-feature and id-ctrl commands fahrenheit outputs
  * nvme: delete smart-log command fahrenheit option
  * nvme-print: check locale to use temperatures in degrees fahrenheit
  * completion: add support for tls-key (bsc#1226197)
  * doc: add tls-key --revoke documentation (bsc#1226197)
  * doc: fix tls-key --keyfile shorthand (bsc#1226197)
  * nvme: add support to revoke TLS key (bsc#1226197)
  * nvme: return error code/message for TLS commands (bsc#1226197)
  * nvme: factor out import key function (bsc#1226197)
  * nvme: use cleanup helper to close file descriptor (bsc#1226216)
  * nvme-rpmb: use cleanup helper for STREAM objects
  * fabrics: use cleanup helper for STREAM objects
  * nvme: use cleanup helper for STREAM objects (bsc#1226216)
  * nvme: strip newline when parsing TLS key files (bsc#1226197)
  * nvme: use stdout for exporting TLS keys (bsc#1226197)
  * nvme: change _cleanup_file_ to _cleanup_fd_ (bsc#1226197)
  * common.h: Avoid using unsupported load/store instructions in arm64 VMs
  * ocp: OCP 2.5 Telemetry DA 1 and 2 Parsing Updates
  * nvme-print-stdout: refactor subsys config (bsc#1231668)
  * wdc: Fix compiler warning.
  * nvme: add flags type nvme_print_flags_t
  * nvme-print: Use 'unsigned int' instead of 'unsigned'
  * nvme: update parse_args() return value handling
  * nvme-print: Fix nvme_show_smart_log indentation error
  * nvme-print-stdout: Fix stdout_smart_log indentation error
  * nvme-print-binary: Fix binary_smart_log indentation error
  * completions: add smart-log command fahrenheit option
  * doc: Add smart-log command fahrenheit option
  * nvme: Add smart-log command fahrenheit option
  * nvme-print: add PEL vendor specific and TCG defined events strings
  * nvme-print: Print PEL reserved event string
  * completions: Add timeout option bash completions
  * completions: Add timeout option zsh completions
  * completions: Add io-mgmt-recv/send commands zsh completions
  * completions: Add /dev/nvme argument missed
  * completions: Change fw-activate command name to fw-commit
  * completions: Fix _nvme indentation errors (bsc#1226197)
  * completions: Fix bash-nvme-completion.sh indentation errors (bsc#1226197)
  * doc: Add nvme commands timeout option
  * nvme: Add support for delete-ns command timeout option
  * nvme: Change NVME_DEFAULT_IOCTL_TIMEOUT to use nvme_cfg timeout
  * nvme: Add nvme_cfg timeout default option
  * nvme: Add nvme_cfg global variable for NVME_ARGS default options
  * nvme: add helper function to get pif and sts value
  * nvme: choose PIF from QPIF if QPIFS supports and PIF is QTYPE
  * nvme: use libnvme's atomic ANA log page fetch
  * nvme: fix maximum ANA log page length calculation
  * nvme-print-json: add missing va_end()
  * fabrics: skip namespace scan for fabric commands
  * nvme-print: print the new fields added in TP4141a
  * plugins/ocp: underflow + index fixes for telemetry
  * plugins/ocp: Add ocp TCG Configuration Log Page
  * nvme-print-stdout: Add helper function to print PIF in string form
  * doc: fix format command info
  * nvme: telemetry: report the correct error if the ioctl() fails.
  * nvme-print: add the cancel opcode to the nvme_cmd_to_string() list
  * doc: fix ocp format issues
  * nbft: Reuse existing discovery controller
  * nbft: Skip SSNS records pointing to well-known discovery NQN
  * nbft: Perform actual discovery
  * util/cleanup: Add cleanup for struct nvme_fabrics_uri
  * fabrics: Make some symbols public (bsc#1226216)
  * nvme-print-stdout: fix format index in stdout_nvm_id_ns
  * plugins/solidigm: Added workload-tracker command
  * plugins/solidigm: Added extra VU fields to id-ctrl
  * nvme-print-stdout: print MEM bit of CTRATT field
  * nvme-print-stdout: fix to print the log line by line
  * fabrics: Always pass hostid and hostnqn (bsc#1226216)
  * plugins/ssstc: Replace __uint16_t with uint16_t
  * plugins/solidigm: Added log pages to vs-internal-logs
  * sed: perform a tper revert after lsp revert
  * plugins/nbft: Use default library logging
  * docs: Add missing OCP plugin docs to meson
  * ocp: Switch OCP plugin to use semantic versioning
  * nvme: fix fw-commit MUD result message
  * sed: only re-read partition table after unlock.
  * nvme-print-json: Fix LBA status DSLBA output as hexadecimal
  * nvme-print-json: Use NVME_PMRxxx register definitions to print
  * nvme-print-stdout: Fix PMRWBM register name
  * nvme-print-json: Fix channel configuration descriptors pointer
  * nvme-print-json: Fix linux kernel check patch errors
  * nvme-print: Added "Command and Feature Lockdown" string to LID 0x14
  * plugins/innogrit: `u_char` -&gt; `unsigned char`
  * nvme: Use C99 types for uint32_t
  * nvme-print-stdout: print frl1/2/3 values for zns id-ns
  * solidigm: Eliminate &lt;linux/limits.h&gt;
  * nvme: remove double free in persistent-event-log
  * ocp: Add Get DSSD Power State Feature (FID: C7h)
  * nvme: initialize default library logging
  * nvme: use cleanup helper for nvme_root_t objects (bsc#1226197)
  * doc: add nvme connet ctrl-loss-tmo description
  * plugins/solidigm: Automatic enabling Data Area 4 when retrieving Telemetry.
- always build the docs
  * add 0001-docs-rename-ocp-unsupported-req-log-file.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1730376000">- Update to version 2.11:
  * docs: update check-tls-key arguments
  * nvme: add support to append TLS PSK to keyfile for check-tls-key
  * nvme: return correct error code in append_keyfile
  * docs: nvme-id-doman: dom{ia =&gt; ai}n
  * ocp: fix latency monitoring data structure entry endian
  * ocp: fix TCG configuration log endian
  * ocp: fix firmware activation history entry endian
  * docs: update gen-tls-key arguments
  * nvme: add support to add derive TLS PSK to keyfile
  * nvme: rename identity to version
  * nvme: set file permission for keyfile to owner only
  * nvme: export tls keys honoring version and hmac
  * nvmf-keys: add udev rule to import tls keys
  * docs: update TLS options
  * fabrics: add support to connect to accept a PSK command line
  * fabrics: add support to connect to accept a configuration
  * nvme: use unsigned char for hmac and identity
  * nvme-print: Add Sanitize Media Verification Event in PEL log
  * netapp-ontapdev: add err msg for no ontapdevices
  * netapp-smdev: add err msg for no smdevices
  * doc: Add sanitize command emvs option
  * ocp: combine to use GUID length definitions
  * nvme: update tls_key() handling
  * nvme-print-stdout: print VERS bit of SANICAP field
  * nvme: add EMVS support to sanitize command
  * ocp: remove callback function cast
  * doc: added commit conventions to contribution guidelines
  * ocp: fix ocp-print-stdout.c indentation error
  * ocp: fix ocp-nvme.c indentation errors
  * ocp: build ocp-nvme.c and ocp-telemetry-decode.c without json
  * ocp: split TCG configuration log print codes
  * ocp: split telemetry string log print codes
  * ocp: split device capabilities log print codes
  * ocp: split error recovery log print codes
  * ocp: split unsupported requirement log print codes
  * ocp: split latency monitor log print codes
  * ocp: move ocp telemetry log print function into ocp-print
  * ocp: split smart extended log print codes
  * ocp: split ocp-fw-activation-history print codes
  * plugins: update meson.build file to always build ocp plugin
  * ocp-print: move json code into separate files
  * nvme-print-json: display only verbose output
  * ocp-nvme: ocp plugin version update
  * nvme-print: print KV command set page header
  * doc: show where self-test results can be found
  * plugins/memblaze: fix a wrong id on smart-log-add
  * plugins/dapustor: smart-log-add fix
  * plugins/sed: add sid password change (bsc#1229677)
  * plugins/solidigm: Automatic retry smaller log chunk size.
  * ocp-nvme: Add LMDATA-37 for Latency Monitor Log
  * ocp-nvme: remove ocp log page version checking
  * wdc: Fix for Reading WDC C2 Vendor Unique Log Page
  * ocp: Fixes for OCP 2.5 Telemetry DA1 FIFO Event Parsing
  * nvme-print-json: update JSON verbose output for nvm-id-ctrl (bsc#1231668)
  * wdc: Add Support for SN5100S
  * nvme: Support show-regs for nvmeof
  * ocp: fix option handling in internal-log
  * Documentation: Added solidigm plugin commands
  * wdc: add support for SNTMP drive
  * nvme-print: print NSSES field of CAP register
  * ocp: fix GUID output
  * nvme-print-json: print controller register values in offset order
  * nvme-print-json: print CMBEBS and CMBSWTP in json format
  * nvme-print-stdout: update changed-ns-list-log output (bsc#1231668)
  * nvme: fix uninitialized value in error-log (bsc#1231668)
  * nvme: fix to convert metadata size to native byte order
  * nvme-print: fix error information log page endianness error
  * completions: add get-feature command changed option
  * doc: add get-feature command changed option
  * nvme: separate get NVME_GET_FEATURES_SEL_CHANGED definition
  * nvme: use NVME_GET_FEATURES_SEL definitions
  * nvme-print-stdout: use NVME_CTRL_OAES definitions
  * completion: add ocp set-telemetry-profile to zsh
  * completion: add solidgm work-tracker binding
  * plugins/solidigm: Added Workload Tracker Triggers and Wall Time
  * ocp: include util/types.h to use nvme_uint128_t
  * ocp: fix to set log data pointer allocated
  * nvme: use NVME_CHECK() to check get features select field value
  * ocp: split ocp-hwcomp log
  * completions: add ocp hardware-component-log command
  * doc: add ocp hardware-component-log command
  * ocp: add hwcomp log json output
  * ocp: add hwcomp log command list option
  * ocp: add hwcomp log command comp-id option
  * ocp: add hwcomp dummy definition
  * ocp: add support for hwcomp log page
  * nvme: use NVME_CTRL_FNA definitions
  * netapp-smdevices: print single device output too (bsc#1231668)
  * netapp-smdevices: segregate print routines (bsc#1231668)
  * Add Support for new SN655 PCI Device ID
  * nvme-print-json: extern json object add functions
  * ocp: add SMART / health information extended log page version 4
  * ocp: add error recovery log page version 3
  * ocp: add get-enable-ieee1667-silo command
  * fabrics: fix incorrect access filename check (bsc#1231668)
  * nvme: use NVME_GET_FEATURES_SEL_SUPPORTED definition
  * nvme-print-json: use _cleanup_free_
  * plugins/solidigm: fix use after free.
  * ocp: fix ocp-nvme.c coding style errors
  * ocp: Change C9 function names to use c9 instead
  * ocp: fix to return c9 log page data error to open file
  * ocp: fix to set return value to get c9 log page data
  * nvme: update nvme_insert_tls_key_versioned() return handling (bsc#1231668)
  * nvme-print-stdout: add print_array function
  * logging: add print_info function
  * util: extern uint128_t_to_double() function
  * nvme-print: sanitize error-log output (bsc#1231668)
  * plugins/solidigm : Fixing vs-internal-log to generate identify per allocated namespace.
  * nvme-print: added new fields for nvm_id_ns
  * plugins/fdp: bugfix error check to validate output format
  * plugins/wdc: fix json output for vs-nand-stats
  * nvme-print-stdout: use NVME_FEAT util definitions
  * nvme-print: update subsys verbose outputs (bsc#1231668)
  * nvme-print: add subsystype to the list-subsys output (bsc#1231668)
  * netapp: print output for single device too (bsc#1231668)
  * netapp: segregate the print routines (bsc#1231668)
  * netapp: fix uninitialized value from heap error (bsc#1231668)
  * nvme-print: print the new fields added in TP4142
  * plugins/innogrit: modify for project tacoma
  * wdc: Add Support for new SN-861 PCI device id
  * nvme-print: use LC_MEASUREMENT to check fahrenheit temperature
  * nvme-print: use Completion Condition enum
  * completions: add the zsh completion of the dapustor plugin
  * nvme-print: print the new fields added in TP4165
  * plugins/dapustor: dapustor smart-log-add update
  * nvme-print-stdout: Added print for new field CSER (TP4167)
  * plugins: Add a new DapuStor plugin and the smart-log-add command
  * docs: rename ocp-unsupported-req-log file
- Drop build fix patch
  * remove 0001-docs-rename-ocp-unsupported-req-log-file.patch
- Install 70-nvmf-keys.rules to the default udev rules directory</changelog>
  <changelog author="dwagner@suse.de" date="1741089600">- Update to version 2.11+17.g6e09119:
  * nvme: check for valid output format (bsc#1237275)
  * nvme: make get-feature JSON output print everything (bsc#1237275)
  * nvme: make -v output consistent with -H output for nvme get-feature (bsc#1237275)
  * nvme: make -v output consistent with -H output for nvme get-property (bsc#1237275)
  * nvme-print-stdout: add details in list-ns verbose output (bsc#1237275)
  * nvme-print-stdout: add descriptions for nsze, ncap &amp; nuse (bsc#1237275)
  * netapp-ontapdev: correct the basestr header (bsc#1237275)
  * netapp-smdev: update err msg for no smdevices (bsc#1237275)
  * netapp-ontapdev: update err msg for no ontapdevices (bsc#1237275)
  * netapp-smdev: update basestr header in verbose output (bsc#1237275)</changelog>
  <changelog author="dwagner@suse.de" date="1745323200">- Update to version 2.11+22.gd31b1a01:
  * nvme-print: display fw-rev in list-subsys output (bsc#1240518)
  * nvme-print: display model in list-subsys output (bsc#1240518)
  * netapp-ontapdev: add subsysname to regular output (bsc#1240518)
  * netapp-ontapdev: add subsysname to the verbose output (bsc#1240518)
  * Revert "nvme-print-json: display only verbose output"</changelog>
  <changelog author="dwagner@suse.de" date="1753185600">- Update to version 2.11+26.gfbd2b4f4:
  * nvme: fix mem leak in nvme copy (bsc#1243716)
  * nvme-print: suppress output when no ctrl is present for list-subsys (bsc#1243716)
  * nvme: extend filter to match device name (bsc#1243716)
  * udev-rules-ontap: switch to queue-depth iopolicy (bsc#1246599)</changelog>
  <changelog author="dwagner@suse.de" date="1757419200">- Update to version 2.11+28.g2fc67685:
  * netapp-ontapdev: update invalid device handling (bsc#1247017)
  * netapp-smdev: update invalid device handling (bsc#1247017)</changelog>
</package>
<package pkgid="81dfe6792ccd164633d1c7b74785a38641fc3c168a9ec8d1da5398cd882831a9" name="nvme-cli" arch="src">
  <version epoch="0" ver="2.11+29.g61f8d34b" rel="150700.3.12.1"/>
  <changelog author="daniel.wagner@suse.com" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- Mark no binaries rpms as noarch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 2.2.1:
  * Added parsing for Solidigm telemetry observable data.
  * add item ddr_ecc_err_cnt in smart-log-add
  * build: Drop dependency on libuuid
  * build: Fix endian check for cross build
  * build: Remove unused uuid.wrap file
  * build: Remove unusned uuid.h include
  * completions: Add show-topology tab completion
  * fabrics: Honor JSON config file in connect-all command (bsc#1199504)
  * fabrics: Trigger auto connect if config.json exists
  * fabrics: fix 'persistent' handling during connect-all with JSON file
  * fabrics: nvme config --modify depends on -n and -t argument
  * fabrics: re-read the discovery log page when a discovery controller reconnected
  * json: Support uint64 types serialization for older json-c versions
  * nvme, plugins: fix __u64 -&gt; unsigned long long assumptions
  * nvme-print: Add missing values in id-ctrl for JSON output
  * nvme-print: Handle NULL hostid in JSON output
  * nvme-print: Output 128bit values as uint128 type instead of double
  * nvme-print: Print fguid as a UUID
  * nvme-print: Use uint128 JSON function for media_units_written
  * nvme-print: decode MI status values
  * nvme-print: decode status types
  * nvme-print: fix wrong json key
  * nvme: Add helper function to parse 16-bit comma separated list
  * nvme: Add nvme_cmd wrapper for get_features
  * nvme: Add show-topology command
  * nvme: Add wrapper for Format NVM
  * nvme: Add wrapper for Sanitize NVM
  * nvme: Add wrappers for Get Log page helpers
  * nvme: Add wrappers for Identify controller lists
  * nvme: Add wrappers for NS attach/detach
  * nvme: Add wrappers for NS management functions
  * nvme: Add wrappers for basic NS identify
  * nvme: Add wrappers for firmware commands
  * nvme: Fix set feature command to get feature identifier 0Dh length as zero
  * nvme: Introduce a union in struct nvme_dev for different transport types
  * nvme: Introduce nvme_cli_ wrappers, wrap identify and identify_ctrl
  * nvme: Make static nvme_dev private to open_dev(), use locals elsewhere
  * nvme: Masks SSTAT in sanize-log output
  * nvme: Remove static nvme_dev, allocate on open instead
  * nvme: Use correct print format specifier for sizeof arguments
  * nvme: Use local struct nvme_dev for show_registers &amp; map_registers
  * nvme: check if cfg.metadata is NULL before passing it to strlen()
  * nvme: use helpers for checking status types
  * plugins/innogrit: Include timer.h
  * plugins/innogrit: add smart items for smart-log-add
  * plugins/micron-nvme: Use correct print format specifier for sizeof arguments
  * plugins/ocp: Include timer.h
  * plugins/ocp: Output 128bit values as uint128 type instead of double
  * plugins/ocp: pass struct nvme_dev to internal functions
  * plugins/seagate: Add support for OCP
  * plugins/toshiba: pass struct nvme_dev rather than fd + name
  * plugins/virtium: Output 128bit values as uint128 type instead of double
  * plugins/wdc: Add support for SN660 drive
  * plugins/wdc: Add type case for feature id
  * plugins/wdc: Output 128bit values as uint128 type instead of double
  * plugins/wdc: pass a struct nvme_dev around rather than a fd
  * plugins/wdc: pass struct nvme_dev rather than using global nvme_dev
  * plugins/ytmc: pass struct nvme_dev rather than fd + name
  * plugins: Use PRIu64 format specifier for 64bit types
  * print: Add Controller Ready Timeout Exceeded HW error code
  * solidgm: fix initialization warning
  * solidigm: Added parsing for telemetry customer screenable data
  * solidigm: Fix printf format for size_t variable
  * solidigm: Updated Telemetry parsing code to MIT license.
  * subprojects/libnvme: update for MI admin command coverage
  * tests: Update license to GPL-2.0-or-later
  * tree: Add NVMe-MI support
  * tree: Add dev_fd() helper
  * tree: Change nvme_dev from global to static
  * tree: Combine NVMe file descriptor into struct nvme_dev
  * tree: Move global device info to a single struct
  * tree: fail on non-negative return values from parse_and_open
  * udev: Add HOST_IFACE to udev rule (bsc#1208001)
  * util/json.h: Add json_object_get_uint64 fallback implementation
  * util/json: Add 128 bit JSON helpers
  * util/types: Add 128 bit conversion helpers
  * util: Fix le128_to_cpu on big-endian
  * util: Fix le128_to_cpu on little-endian
  * util: Move common type conversion helpers into util section
  * utils/json: Add json_object_new_uint64 for json-c &lt; 0.14
  * utils: Fix uint128_t usage
  * wdc:  OCP Log page updates and fixes
  * zns.c: report zones should be started after retrieved zone
- Handle suse-missing-rclink lint warnings by providing the symlinks
- Drop rpmlintrc as it is not needed anymore</changelog>
  <changelog author="daniel.wagner@suse.com" date="1675080000">- Update to version 2.3:
  * Added support for Flexible Data Placement (TP4146)
  * Added Persistent Discovery Controller support (TP8013/TP8014)
  * nvme-mi: support for firmware downloads
  * nvme device-self-test learned the --wait command line argument
    which makes nvme-cli to wait (incl. progress bar) in foreground
    until the test has finished.
  * A lot of bug fixes all over the place
- Update spec file
  * Project depends on meson &gt;= 0.50.0
  * make build dependency dropped</changelog>
  <changelog author="daniel.wagner@suse.com" date="1680264000">- Update to version 2.4 (jsc#PED-553 jsc#PED-3884):
  * plugins/ocp: Add SMART cloud log to solidigm plugin
  * nvme-print: Unify number base format for nsid
  * nvme-(discover,connect,connect-all): enable options '--keyring' and '--tls_key'
  * nvme-connect: enable option '--tls'
  * nvme-check-tls-key: add options to derive a 'retained' TLS key
  * nvme-gen-tls-key: add options to derive a TLS key
  * plugins/ocp: Move SMART cloud log methods to separate file for reusability
  * nvme: validate storage tag size correctly
  * nvme-print-json: Add json output status function
  * util: Cleanup argconfig parse function
  * nvme: Fix format command function indentation errors
  * util: Use argconfig commandline options pointer directly
  * nvme-print: Fix nvme show status function indentation errors
  * nvme: Check fw-commit command support MUD
  * print: print csi and opcode in error log (TP4113)
  * plugins/inspur: Cast vendor specific smart log value
  * nvme: Use correct ABORT type for self abort test
  * plugins/solidigm: Do not overwrite previously initialized variable
  * nvme-print: sanitize supported-log-pages output (bsc#1209550)
  * nvme: Enforce length to a multiple of 4 in get_log_page
  * nvme: fix block count and data size logic (bsc#1209564)
  * util: Introduce argconfig simple helper to check seen condition
  * plugins/ocp: Add set feature EOL/PLP failure mode no-uuid option
  * plugins/ocp: Refactor to clear feature identifier C1h and C3h
  * plugins/ocp: Add support for clear PCIe correctable error counters feature
  * nvme-doc: update man page for supported-log-pages (bsc#1209550)
  * plugins/ocp: OCP 2.0 field updates for SMART cloud log
  * nvme: Fix parameter limit range
  * fdp: Fix wrong Reclaim Unit Handle Status size
  * plugins/ocp: Add support for EOL/PLP failure mode feature
  * nvme-print: Fix printing of u32 values
  * nvme: Fix invalid memory access in show_registers
  * util: Add argconfig seen flag parameter to check if feature NSID set
  * nvme-print: fix segfault in supported-log-pages json output
  * fabrics: Fix ordering for auto connect services (bsc#1208075)
  * nvme.c: Check Firmware Update Granularity in fwdl
  * log: high latency timestamp issue
  * nvme: Align get feature data buffer length by page size to allocate
  * nvme: Continue get feature on invalid NS error to get multiple feature ids
  * plugins/ocp: SMART cloud log bug fixes.
  * Made temperature readouts in line with the SI.
  * Changed 'Kelvin' to 'kelvin', as recommended by the BIPM.
  * plugins/ocp: Fix whitespace and style issues
  * util: Revert JSON output to plain numbers
  * nvme: Add rae argument to telemetry-log command
  * nvme: Refactor get telemetry log page helper
  * nvme: Factor out parse telemetry log da element
  * nvme: Fix type in error message
  * unit: Add test-argconfig-parse
  * nvme: Use chunked read in get_log()
  * nvme: Use fprintf for error message logging in get_log()
  * nvme: fix /dev/spkd/ typo
  * doc: --storage-tag-check doesn't take any arguments
  * fabrics: Ensure host-traddr/iface consistency for "connect-all"
  * nvme-print: print the nvme generic name in json output as well
  * plugins/innogrit: modify command opcode for eventlog and cdump
  * completion: fix typo, add missing args
  * plugins/wdc: Fix data Formatting for Latency Monitor Log Page
  * nvme: Make json-c optional again
  * nvme-print: Move JSON printing function into a new file
  * plugins/solidigm: Use json_create_object wrapper
  * plugins/solidigm: Use struct json_object instead of typedef
  * fabrics: No need to sanitize trsvcid and traddr
  * docs: Fixed typos and missing options
  * util: Numbers without any suffix are also valid
  * util: Update suffix_binary_parse API
  * util: Reimplement suffix_si_parse
  * nvme: Filter out status flags for get feature command
  * util: Add crc32 implementation
  * nvme-print: Use attrs_info as key for Zone Attributes Information
  * nvme: Support effects-log for fabrics ctrl
  * plugins/solidigm: Add uuid index resolution
  * plugins/ocp: Use network byte order for OCP UUID value
  * json_discovery_log: avoid buffer overrun (bsc#1207435)
  * Fix connect nbft regressions (bsc#1209905)
  * Fix auto connect conditions (bsc#1210105)
  * Fix auto boot for NBFT connections (bsc#1211647)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1695988800">- Update to version 2.6 (jsc#PED-3610 jsc#PED-4879 jsc#PED-5061):
  * nvme: allocate payload buffer in create-ns command
  * nvme-print-stdout: Add CAP.CPS and CAP.NSSS human readable outputs
  * nvme: Add output-format default option instead of argconfig json option
  * nvme: fw-download offset only describes FW offset, not file offset
  * unit: add locale number test
  * util: handle utf-8 thousend separators correctly
  * nvme: Change to use NVME_ARGS verbose default option from OPT_ARGS
  * fabrics: Fix NVMF_ARGS macro to use parameter n correctly
  * nvme: Add verbose default option to show command debug output
  * util: Fix to set argconfig output format json option correctly
  * util: Split argconfig output format json function to set and get
  * nvme: Spport Phy Rx Eye Opening Measurement Log
  * nvme: Introduce nvme_realloc function
  * nvme: Fix for fdpa reserved field printing
  * completion: add 'version' and 'help' to list
  * udev-rule: apply round-robin iopolicy on i/o subsystems alone (bsc#1215994) (bsc#1219086)
  * nvme: Add support for the OAQD ID controller field
  * plugins/solidigm: use static log macro to calc bitmask
  * plugins/ocp: Rename FW activation history command
  * nvme: auto free nvme_dev resource
  * nvme: allocate aligned payloads for all nvme commands
  * nvme: introduce alloc helper with alignment support
  * util: add cleanup function for generic memory allocations
  * nvme: append huge to nvme_{alloc|free} function
  * nvme: fw_download use nvme_alloc only
  * fabrics: Removing duplicate code and moving to libnvme
  * nvme-print: omit size of protection information
  * tree: Modify label name close_fd to close_dev
  * fabrics: For TCP/RDMA, compare IP addresses with nvme_ipaddrs_eq() (bsc#1213768)
  * fabrics: lookup_discovery_ctrl() must look under host and not root (bsc#1213768)
  * nvme: Do not map status to errno codes
  * completions: Add bash completion for DSSD Power state feature(FID: C7h)
  * Documentation: Add document for DSSD Power state feature(FID: C7h)
  * plugins/ocp: Add DSSD Power state feature(FID: C7h)
  * avoid casting pointer arguments to argconfig functions
  * nvme-print: Add support for EGFEAT, Domain Identifier, TEGCAP and UEGCAP
  * nvme-print: Fix endurance_log whitespace changes
  * nvme: Fix retrieval of telemetry log up to specified data area.
  * nvme: Update list secondary command
  * wdc: Add support for SN861 drive
  * util: Set errno to 0 before strtol/stroul call
  * nvme: Revert passthru and submit_io to print status to stderr from stdout
  * plugins/zns: Fix offset in report zones
  * nvme-rpmb: Fix nvme_show_id_ctrl_rpmbs() definition error
  * fabrics: Use corresponding hostid when hostnqn is generated
  * json: fix seg. fault converting NULL to JSON string (bsc#1213762)
  * nvme-cli: fix extended metadata size calculation
  * nvme-print: Show subsystem iopolicy (bsc#1124564)
  * nvme-print-stdout: Do not show non reachable ns in namespace topology (bsc#1212598)
  * nvme-print: Fix show-topolocy for ctrls
  * doc: Fix typo in documentation
  * nvme-print-stdout: fix storage tag size label
  * nvme-print-stdout: List only ctrls which are part of ns (bsc#1212598)
  * nvme-print-stdout: Support subsys reachable from several hosts (bsc#1212598)
  * ccan: Add htable, strset and dependencies (bsc#1212598)
  * ccan: Remove unused documentation (bsc#1212598)
  * nvme-print: Split max power flags
  * nvme-print: fix counter while looping through uuid_list (bsc#1212598)
  * fabrics: only look for matching ctrl on same host (bsc#1213768)
  * README: Correct hugetlbfs spelling error
  * util: Delete unused CFG_BOOL argconfig type as duplicated with CFG_FLAG
  * util: Set LC_ALL=C as default if -H option is not used
  * nvme: Add support for create-ns command endg-id option parameter
  * nvme-print: fix argument order for show functions
  * plugins/solidigm: Added Marketing Name Log support for Solidigm.
  * nvme-print: Remove left overs from refactoring
  * nvme-print: Move num argument parsing into callbacks
  * nvme-print: Fix typo in callback definition
  * scripts: Make release script project neutral
  * scripts: Update update-docs.sh scripts
  * scripts: Execute the scripts from toplevel directory
  * scripts: Move helper scripts to a central place
  * docs: Update file modes
  * doc: Add information on --context
  * nvmf-autoconnect: Annotate the context to autoconnect
  * fabrics: Add support for volatile configuration
  * plugins/solidigm: Formated log page directory table consistently with "nvme list" format.
  * plugins/solidigm: Added Identify controller VU extensions parsing.
  * nvme-print-json: Print PCI pysical slot number for controller
  * nvme-print-stdout: Print PCI physical slot number for controller
  * libnvme.wrap: Bump to 42ac453
  * plugins/nbft: Use common code to parse print flags
  * fabrics: Do not print device on connect per default
  * fabrics: Revert 'fabrics: prevent 'nvme connect' to well-known discovery NQN'
  * nvme-print: fix wrong list-subsys output when ns are attached to different ctrls
  * plugins/micron: Correct NULL pointer checking error
  * plugins/innogrit: Add vendor command get-eventlog and get-cdump
  * nvme: Use correct data buffer size
  * nvme: Fix quoted string split across lines to use quoted newline
  * plugins/zns: Fix zns.c linux kernel check patch errors and warnings
  * plugins/ymtc: Fix ymtc-nvme.c linux kernel check patch warning
  * plugins/ymtc: Fix ymtc-nvme.c space indentation to tab indentation
  * plugins/virtium: Fix virtium-nvme.c linux kernel check patch errors and warnings
  * plugins/transcend: Fix transcend-nvme.c linux kernel check patch errors and warnings
  * plugins/solidigm: Fix linux kernel check patch errors and warnings
  * plugins/shannon: Fix shannon-nvme.c linux kernel check patch errors and warnings
  * plugins/seagate: Fix seagate-nvme.c linux kernel check patch warnings
  * plugins/scaleflux: Fix sfx-nvme.c linux kernel check patch errors and warnings
  * plugins/netapp: Fix netapp-nvme.c linux kernel check patch errors and warnings
  * plugins/nbft: Fix nbft-plugin.c linux kernel check patch warnings
  * plugins/micron: Fix micron-nvme.c linux kernel check patch errors and warnings
  * plugins/micron: Fix micron-nvme.c space indentation to tab indentation
  * plugins/memblaze: Fix memblaze-nvme.c linux kernel check patch errors and warnings
  * plugins/memblaze: Fix memblaze-utils.h space indentation to tab indentation
  * plugins/memblaze: Fix memblaze-nvme.c space indentation to tab indentation
  * plugins/intel: Fix intel-nvme.c linux kernel check patch errors and warnings
  * plugins/inspur: Fix inspur-nvme.c linux kernel check patch warnings
  * plugins/inspur: Fix inspur-nvme.c space indentation to tab indentation
  * plugins/innogrit: Fix innogrit-nvme.c linux kernel check patch errors
  * plugins/huawei: Fix huawei-nvme.c linux kernel check patch errors and warnings
  * plugins/fdb: Fix fdb.c linux kernel check patch warnings
  * plugins/dera: Fix dera-nvme.c linux kernel check patch errors and warnings
  * plugins/amzn: Fix amzn-nvme.c linux kernel check patch error and warnings
  * plugins/wdc: Fix wdc-utils.c linux kernel check patch errors and warnings
  * plugins/wdc: Refactor wdc-nvme.c for linux kernel check patch errors and warnings
  * util: Move falltrhough feature check to meson.builds
  * ocp: Add eol plp failure mode json outputs
  * nvme-print: Add nvme show result function
  * nvme-print-json: Add json output result function
  * nvme-print: Fix nvme_show_error() to call va_end() for json output format
  * nvme: Fix nvme format block-size option handling
  * Revert "nvme: Masks SSTAT in sanize-log output"
  * fabrics: Fix NVMF_ARGS macro indentation error
  * Documentation: Add document for OCP Device capability(LID: 0xC4) log page
  * completions: Add bash completion for OCP Device capability(LID: 0xC4) log page
  * plugins/ocp: Add Device capability(LID: 0xC4) log page
  * udev: fix warning reported by udevadm verify
  * fabrics: fix conditions in nvmf-autoconnect.service
  * fabrics: Change NVMF_OPTS as NVMF_ARGS to fix linux kernel check patch error
  * nvme: Split passthru commands read output
  * nvme: Fix io-passthru command read metadata output
  * plugin/ocp: Added implementation for 0xC1 log page
  * util: Fix suffix_si_parse to parse no decimal point but suffix value correctly
  * completions: Add zsh option values handling for sanitize command action
  * completions: Add ocp sub commands zsh completion
  * completions: Add ocp commands zsh completion
  * completions: Add ocp commands bash completion
  * nvmf-autoconnect: restart service to avoid dropping AEN
  * solidigm: Reduce memory usage in supported log pages feature
  * solidigm: Changes to supported log pages feature requested by review
  * solidigm: Add supported log pages log feature to Solidigm plugin
  * plugins/ocp: Added ocp unsupported requirements log page
  * completions: Add bash option values handling for sanitize command action
  * doc: Correct nvme-show-hostnqn command NAME description
  * completions: Add missing zsh commands descriptions
  * plugins/wdc: Extend SN530 support.
  * Fix incorrect article 'an' as 'a' to use for descriptions and message
  * nvme: Set effects-log command csi option help message string
  * completions: bash: Delete unsupported id-iocs command options
  * completions: bash: Add id-domain command
  * completions: Fix nvm-id-ns-lba-format command zsh definition
  * completions: Add json command option
  * nvme: Fix get-feature command sel parameter check to allow value 8
  * util: Delete unnecessary argconfig definitions OPT_VAL and CFG_VAL
  * util: Delete argconfig value type to add option value as va lists instead
  * util: Split to set argconfig option value
  * util: Delete argconfig value length to calcurate instead
  * nvme: Change sanitize command action option to use argconfig parse value
  * util: Add argconfig parse value function
  * util: Delete unused argconfig subopts type
  * util: Delete unused argconfig file types
  * util: Delete unused argconfig help function
  * nvme-wrap: do_admin_args_op should not clear args timeout
  * nvme: Fix linux kernel check patch warnings
  * nvme: Fix linux kernel check patch errors
  * plugins/ocp: Add telemetry-log command to OCP plugin
  * plugins/ocp: Add OCP set latency monitor feature command
  * plugins/ocp: Fix endianness in Latency Monitor Log output
  * plugins/ocp: Add missing fields in Latency Monitor Log
  * plugins/ocp: Fix typos in Latency Monitor Log
  * plugins/ocp: Reorganize OCP plugin source code
  * tests: Add tests for controller reset
  * plugin/solidigm: Added vs-internal-log command.
  * nvme: Add nvme_show_perror to use instead of perror for json output
  * nvme-print-json: Use vasprintf instead of vsnprintf to allocate string
  * nvme: fix rnlpt to_string() values.
  * nvme: fix io_mgmt args parse error
  * fdp: set-events feature is saveable
  * fabrics: Return errno value as negative
  * fabrics: Fix linux kernel check patch errors and warnings
  * nbft: add the nbft show plugin
  * nbft: added NBFT v1.0 table support (jsc#PED-1449)
  * nbft: make lookup_ctrl function public
  * nvme: Fix indentation errors around nvme show error API
  * nvme: Check validate output format err value instead of flags
  * nvme: Use nvme show error API to outptu stderr messages for json format
  * util: Check output format json for json error message output
  * nvme-printf: Add show error function for nvme list command json output
  * nvme: Add zns specfic field for create ns
  * nvme: Add ns-mgmt host software specified fields
  * nvme: Add dtype, dspec on write-zeroes, write-uncor
  * nvme-print: Add new fields print on id directive
  * nvme-print: Add VWCNP on NSFEAT of id-ns
  * nvme: Fix format command to skip to reread NSID all block device
  * plugins/solidigm: Fixes and clean-up of Telemetry parse code. Fixed parsing of 64 bit values. Fixed COD field name. Fixed compilation warnings when compiling for 32 bit. Added missing free(). Consolidated single entry function to telemetry parser. Consolidated use of integer types.
  * doc: Documentations maintenance changes
  * doc: Add nvme-mi-send command documentation
  * doc: Add nvme-mi-recv command documentation
  * doc: Add clear-pcie-correctable-error-counters command documentation
  * doc: Add eol-plp-failure-mode command documentation
  * plugins/solidigm: Add firmware activation history log to Solidigm plugin
  * plugins/ocp: Add firmware activation history log to OCP plugin
  * nvme-print: Use enum nvme_print_flags for nvme_show_id_ctrl
  * nvme: Add support for NVMe-MI send command
  * nvme: Use stdout for passthru and submit_io commands success messages
  * nvme: Fix passthru command function indentation errors
  * nvme: Add support for NVMe-MI receive command
  * fabrics: fix fc config JSON file handling (bsc#1210089)
  Refresh 0100-harden_nvmf-connect@.service.patch
- Fix install path for nvme-regress script</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420800">- Enable test during build (bsc#1207686)
- Drop minimum version meson dependency
- Add asciidoc dependency
- Build documentation when requested</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696852800">- Use fixed timestamps for documentation allowing reproducable builds
- Announce nvmeof-boot-support support via Provides
- Filter rpmlint warnings for systemd-service-without-service_ macros
- Add missing service files for NBFT feature
  * add 0001-fabrics-autoconnect-add-service-unit-for-connecting-.patch
  * add 0002-fabrics-add-udev-rule-to-avoid-renaming-nbft-interfa.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1697112000">- Add missing jsc# and bsc# tracking entries in change log.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1702987200">- Update to version 2.7:
  * nvme-print-json: include vs for identify namespace
  * nvme-print-stdout: enhance connect message (bsc#1219086)
  * fabrics: fix connect error if hostid file does not exist (bsc#1219086)
  * fabrics: fix invalid output format error during nvme connect (bsc#1219086)
  * wdc: Fix vs-smart-add-log Command for SN650 and SN655
  * nvme: restric hmac options for gen-tls-key (bsc#1219086)
  * wdc: Fix UUID index fallback mechanism
  * plugins/ocp: Add OCP Telemetry String log page, Telemetry log page
  * completions: Add bash completions for telemetry string log page
  * plugins/solidigm: Added OCP 2.0 compatibility version command
  * plugins/solidigm: Added OCP 2.0 vs-drive-info command.
  * plugins/ocp: Fix printing order of various Latency Monitor Log buckets
  * nvme: validate output format split status from flag return value
  * nvme: simplify cleanup_nvme_dev()
  * cleanup: remove unused cleanup_charp()
  * wdc: Add support for SN861 2nd pci device id
  * nvme: replace libhugetlbfs with mmap and madvise
  * util/mem: move alloc helper to util section
  * nvme: auto cleanup filedescriptors
  * nvme: auto cleanup buffers
  * nvme: return error code in get_persistent_event_log
  * nvme: sanitize nvme-gen-tls-key
  * nvme: print out the resulting TLS identity for 'nvme check-tls-key'
  * nvme: Add version '1' identifier for nvme-gen-tls-key
  * subprojects/libnvme: update wrapper for TP8018
  * plugins/solidigm: Added re_sku_count smart atrribute
  * doc: Fix nvme-connect manpage --application option string
  * plugins/ocp: changed command clear-pcie-correctable-error-counters to match OCP 2.0 spec.
  * plugins/solidigm: Added command to clear PCIe Correctable Error Counters according to OCP 2.0
  * plugins/ocp: Reorganized clear feature code for better reuse
  * nvme: fixup length calculation for 'nvme gen-tls-key --secret'
  * doc: remove invalid hostkey info for --dhchap-secret
  * nvme-print-json: use human helper everywhere
  * nvme-print-json: remove obj_print helper
  * plugins/ocp: update nvme_show_select_result call
  * mailmap: only show contributer's name
  * nvme-print-json: Change to report status and message in array
  * nvme-print-json: Change to report feature select in array
  * nvme-print-json: Change to report error and data in array
  * nvme-print-json: Add show_init/finish calls to report features in array
  * nvme-print: Add nvme_show_error_status() to merge error message and status
  * nvme-print-json: Use r instead of root and use obj_add_***(r, ..., ...)
  * nvme-print-json: Delete static const char string global variables
  * nvme-print-json: Add remaining controller registers readable format
  * nvme-print-json: Add readable format cap, vs, cc, csts, nssr and crto registers
  * nvme-print-json: Combine duplicated json key and val string variables
  * nvme-print-json: Replase json_array_add_value_string() to array_add_str()
  * nvme-print-json: Replase json_object_add_value_uint128() to obj/root_add_uint128()
  * nvme-print-json: Replase json_object_add_value_object() to obj/root_add_obj()
  * nvme-print-json: Replase json_array_add_value_object() to array_add_obj()
  * nvme-print-json: Replase json_object_add_value_array() to obj/root_add_array()
  * nvme-print-json: Replase json_object_add_value_uint() to obj/root_add_uint()
  * nvme-print-json: Replase json_object_add_value_int() to obj/root_add_int()
  * nvme-print-json: Replase json_object_add_value_uint64() to obj/root_add_uint64()
  * nvme-print-json: Replase json_object_add_value_string() to obj/root_add_str()
  * nvme-print-json: Update feature_show_fields_*** to use root/obj_add_***()
  * nvme-print-json: Update lba_status_log to use root_add_***() and obj_add_***()
  * nvme-print-json: Replace lba_status_log printf() to root_add_result()
  * nvme-print-json: Add list_item print function
  * nvme-print-json: Add lba_status_info print function
  * nvme-print-json: Add lba_range print function
  * nvme-print-json: Add id_ctrl_rpmbs print function
  * nvme-print-json: Unify json_list and jroot object names to root
  * nvme-print-json: Add json_zns_changed print function
  * nvme-print-json: Add root_add_result() to output result message
  * nvme-print-json: Split persistent_event_log print function
  * nvme-print-json: Remove unnecessary string newline code
  * nvme-print-json: Replace effects_log_list print to use json_print()
  * nvme-print-json: Print persistent_event_log no log data result correctly
  * nvme-print-json: Add static "result" and "erorr" strings variables
  * nvme-print-json: Add single_property printf function
  * nvme: Replace get feature command stderr output to nvme_show_error()
  * nvme-print-json: Change d() output to use d_json()
  * nvme: Fix get-feature command mixed stdout and json outputs
  * nvme-print-json: Add remaining feature fields print functions
  * nvme-print-json: Update formatting and codying style
  * build: Add -std=c99 to CFLAGS for muon on CentOS 7
  * fabrics: add udev rule to avoid renaming nbft interfaces
  * fabrics: autoconnect: add service unit for connecting NBFT subsystems
  * fabrics: autoconnect: explicitly express module dependency
  * Updates to codeql config
  * libnvme-wrap: exit on VOID_FN lookup failure
  * plugins/ocp:Added the ocp C6h feature api
  * plugin/ocp_fid_c6h:Added the ocp C6h feature api
  * nvme-copy: support cross-namespace copy
  * nvme/plugins: fix mismatch operator
  * nvme: fix overflow possiblity
  * nvme: reduce identify cmd issue
  * nvme: allow set-features to take input from stdin
  * Fix common misspellings from codespell project
  * nvme-print: Correct to print correct ascii character string length
  * print-stdout: print Host Behavior Support correctly
  * build: Bump libnvme wrap
  * plugins/solidigm: Added support for temperature statistics log page
  * Add support for codeql sweeps
  * doc: Add virt-mgmt command
  * doc: Add id-uuid command
  * doc: Add list-secondary command
  * doc: Add id-ns-granularity command
  * doc: Add nvme commands --output-format and --verbose options
  * completions: Add nvme-mi-recv nad nvme-mi-send commands completions
  * completions: Change short option -o and -v duplicated to upper case
  * doc: Change short option -o and -v duplicated to upper case
  * nvme: Change short option -o and -v duplicated to upper case
  * nvme: Change phy-rx-eom-log command to use NVME_ARGS instead
  * plugins/memblaze: Add smart-log-add and latency-feature functions
  * plugins/solidigm: internal-logs Telemetry auto detect last data area.
  * nvme: Change to use NVME_FLBAS_META_EXT() macro to check flbas value
  * nvme-print-json: Add host memory buffer and timestamp features print functions
  * nvme-print-json: Add feature fields print functions
  * nvme-print-json: Add TMPTH feature print function
  * nvme-print-json: Add show_feature_fields print function
  * nvme-print-json: Add select_result print function
  * nvme-print-json: Use json_print to print and free object
  * nvme-print-json: Add lba_status print function
  * nvme-print-json: Combine variable definition and setting value
  * nvme-print-json: Add id_iocs print function
  * nvme-print-stdout: Fix coding style errors
  * nvme-print-json: Add directive print function
  * nvme: Fixed segmentation fault when getting host initiated telemetry
  * plugins/wdc: enhanced SN861 device support
  * plugins/wdc: cleanup line lengths
  * nvme: do not include meta data for PRACT=1 and MD=8
  * nvme: use block-count arg if provided
  * build: bump libnvme to disable tests option
  * build: Add static build on CI target
  * nvme-print: Add nvme_zns_start_zone_list() API function
  * nvme-print: Add nvme_zns_finish_zone_list() API function
  * nvme-print-binary: Set list function to NULL if unimplemented
  * nvme-print-json: Change order list functions and set NULL if unimplemented
  * nvme-print-stdout: Fix to set stdout_list_item print function missed
  * plugins/solidigm: log page name extraction using nvme_log_to_string function
  * nvme-print: Added missing logpage names in nvme_log_to_string function
  * udev-rules: rename netapp udev rule (bsc#1219086)
  * udev-rules: set ctrl_loss_tmo to -1 for ONTAP NVMe/TCP (bsc#1219086)
- Remove upstreamed patches
  * remove 0001-fabrics-autoconnect-add-service-unit-for-connecting-.patch
  * remove 0002-fabrics-add-udev-rule-to-avoid-renaming-nbft-interfa.patch
- Update spec file
  * remove libhugetblfs depedency
  * update NetApp udev rule file name</changelog>
  <changelog author="daniel.wagner@suse.com" date="1703160000">- Update to version 2.7.1:
  * nvme-print-json: Revert field name changes (bsc#1218306)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1707912000">- Update to version 2.8:
  * nvme-print-json: append array object in json_support_log
  * sed: Add plugin for basic SED Opal operations (jsc#PED-5061)
  * don't include newlines in already wrapped text
  * nvme: do not include meta data for PRACT=1 and MD=8 (version 2)
  * create-ns: align the namespaces to 1Mib boundaries when using SI suffixes
  * doc: Fix config-schema.json's URL
  * plugins/solidigm: Compressing vs-internal-log log files into zip file.
  * nbft: do not issue an error if ACPI tables are missing
  * nbft: fixup include for libnvme
  * doc: Fix short option name for cfg-file
  * completions: added Solidigm plugin to autocomplete scripts
  * nvme: Remove unused cfg argument from NVME_ARGS() macro
  * nvme: fix directive receive identify offsets
  * nvme-fabrics: enable option 'concat'
  * build: Update libnvme wrap
  * plugins/wdc: Add Debug Log Collection Support
  * nbft: fix tcp/dhcp address fallback retry (bsc#1218873)
  * nvme: use correct telemetry log size
  * nvme-print: fix typo in list verbose output (bsc#1219086)
  * nvme: print inserted tls key for check-tls-key (bsc#1219086)
  * plugins/wdc: Plugin fixes and updates
  * fabrics: move hostid/hostnqn warnings to verbose level (bsc#1219086)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737600">- Update to version 2.9:
  * nvme-print: expand the maximum field length to prevent misalignment
  * plugins/spdk: plugin to list SPDK subsystems
  * nvme-print: check if controller belong to SPDK
  * plugins/spdk: plugin to list SPDK controllers
  * nvme-print-stdout: fix ASQB, ACQB and BMBBA prints
  * build: bump libnvme wrap
  * nvmf-autoconnect: fix string encoding
  * nvme: identify primary ctrl do not accept nsid
  * nvme-wrap: remove unused nvme_cli_get_log_ana_groups()
  * nvme-print-json: use admin queue attributes definitions
  * nvme-print-json: use CSTS definitions
  * nvme-print-stdout: use POWER_OF_TWO macro
  * nvme-print-json: use controller configuration definitions
  * nvme-print-json, nvme-print-stdout: add tertiary version number
  * nvme-print-json: use NVME_MAJOR and NVME_MINOR definitions
  * nvme-print-json: use NVME_BOOT_PARTITION_INFO field definitions
  * nvme-print-json: add support telemetry log create event in PEL
  * nvme-print-json: add support set feature event in PEL
  * nvme-print-json: add obj_d() function
  * nvme-print-json: add obj_add_uint_0nx() function
  * meson.build: Fix spelling of sed-opal.h filename
  * sed_opal: Only build when we really have sed_opal headers
  * nvme: fix error path if write() fails in get_telemetry_log()
  * plugins/solidigm: Additional LID for temperature statistics.
  * plugins/solidigm: Improved Solidigm UUID index detection.
  * nvme-print-stdout: Add CSTS.ST register stdout print
  * nvme-print-stdout: Use NVME_CMIC definitions
  * nvme-print: Use NVME_UNIT definitions
  * nvme-print-stdout: Use NVME_CMBMSC/STS/EBS/SWTP definitions
  * plugins/ssstc: add a new plugin for SSSTC driver
  * nvmf-connect: systemd hardening effort
  * plugins/ocp: Adjusted variable type size carrying UUID index to 8 bit.
  * nvme: fix security buffer allocation size
  * nvme: Change fw-download xfer initialization to set 0
  * nvme: Add fw-download warning message for FWUG alignment error
  * plugins/ocp: Split ocp_get_uuid_index() into find and get functions.
  * nvme: fix mem leak in multiple key related functions (bsc#1223331)
  * fabrics: fix mem leak in nvmf_check_hostid_and_hostnqn() (bsc#1223331)
  * nvme-print-stdout: Use NVME_BPRSEL definitions
  * nvme-print-stdout: Use NVME_BPINFO definitions
  * nvme-print-stdout: Use NVME_CMBSZ definitions
  * nvme-print-stdout: Use NVME_CMBLOC definitions
  * Revert "logging: fix error handling for ioctl passthru wrappers"
  * fabrics: align identify command payload
  * ocp: Unify line start spacing as tabs
  * ocp: support OCP DSSD Async Event Config feature
  * nvme: Add support for get-reg and set-reg commands
  * nvme-print-json: Add register print functions
  * nvme-print-stdout: Add register print functions
  * nvme-print: Add register print functions
  * nvme: Refactor mmap_registers to add writable parameter
  * nvme-print: Change PMRSZU string function as unit string
  * nvme-print: Refactor CMBLOC and PMRSTS registers function
  * logging: fix error handling for ioctl passthru wrappers
  * nbft: Fix scandir() error check
  * nbft: Refactor connection attempt out
  * nvme-print: Use EOM optional data present macros changed
  * nvme-print: Print cntlid number for controller (bsc#1224024)
  * nvme: check-tls-key fails despite having hostnqn file (bsc#1223331)
  * nvme: print retained key for gen-tls-key's -i option too (bsc#1223331)
  * fabrics : allow host to create duplicate connections to target
  * fabrics: Fix fast_io_fail_tmo option
  * nvme-print-stdout: use admin queue attributes definitions
  * nvme-print-stdout: use CSTS definitions
  * nvme-print-stdout: use controller configuration definitions
  * nvme-print-stdout: use NVME_MAJOR and NVME_MINOR definitions
  * nvme-print-stdout: use FDP configuration attributes definitions
  * nvme: add new function 'tls_key' (bsc#1226197)
  * nvme: use library functions for importing and exporting TLS keys (bsc#1216982)
  * nvme: extend error message for ns scan failures
  * nvme-print-json: Bugfix status json key of sanitize-log
  * sed: update SED password when initalizing (bsc#1222168)
  * plugins/memblaze: add performance stats
  * plugins/memblaze: fix code mis-type error
  * plugins/memblaze: code refactor on applying __packed on more structs
  * plugins/memblaze: code refactor on using cleanup_nvme_dev
  * nvme: Fix to cleanup free raw_secret memory allocated
  * plugins/memblaze: code-format on leading indent and align
  * plugins/wdc: Fix narrow index variable type in for loop to __u32
  * plugins/wdc: Whitespace changes
  * nvme: Delete unused nvme root scanned
  * ocp: support OCP 2.5 Set Telemetry Profile feature
  * nvme: Don't seg fault if given device is not char/block device
  * nbft: Include SSNS index in error messages (bsc#1222026)
  * nbft: Pause logging for expected connection failures (bsc#1222026)
  * nbft: Silence connection failures for unavailable SSNS (bsc#1222026)
  * nbft: Fix 'verbose' argument type (bsc#1222026)
  * plugins/nbft: Implement verbose logging
  * plugins/nbft: Print the new SSNS flags
  * nbft: Fix uninitialized variable
  * plugins/nbft: Fix uninitialized variables
  * plugins/sed: Fix uninitialized variable
  * nvme-print-stdout: Fix uninitialized variable
  * nvme-print-json: Fix uninitialized variable
  * build: Switch default meson buildtype to 'debugoptimized'
  * nvme: do not scan topology when mmaping registers
  * nvme-print-stdout: Use NVME_BOOT_PARTITION_INFO field definitions
  * nvme-print-stdout: Use NVME_GET for MI commands supported and effects CSP
  * nvme-print-stdout: Use NVME_GET for FID supported and effects FSP
  * nvme-print-stdout: Use NVME_SET_FEAT_EVENT register definitions
  * nvme-print: Add PEL EHAI port identifier type printf function
  * build: bump libnvme wrap
  * ocp: fix for power-state argument checking
  * nvme: do not issue warning when nvme_core module is not loaded
  * wdc: Review changes and build fixes
  * wdc:  Fix timestamp displayed by vs-firmware-activate-history command
  * logging: Split to output ioctl latency by log info level (bsc#1231668)
  * nvme-print-stdout: Change hexadecimal value 0x prefix to use %#x
  * nvme-print-stdout: Fix LBA status DSLBA output as hexadecimal
  * nvme-print-stdout: Split line length exceeded 100 columns
  * nvme-print-stdout: Use NVME_PMRMSC register definitions to print
  * nvme-print-stdout: Use NVME_PMRSWTP register definitions to print
  * nvme-print-stdout: Use NVME_PMREBS register definitions to print
  * nvme-print-stdout: Use NVME_PMRSTS register definitions to print
  * nvme-print-stdout: Use NVME_PMRCTL_EN register definition to print
  * nvme-print-stdout: Use NVME_PMRCAP register definition to print
  * doc: Fix admin and io passthru cdw parameters description
  * doc: Add get-feature cdw11 and set-feature cdw12 parameters
  * micron-nvme: Unuse stat() to check if strMainDirName exists
  * doc: Fix get-property and set-property offset and value descriptions
  * doc: Fix documentation file mode 100755 to 100644
  * nvme-print-stdout: Fix channel configuration descriptors pointer
  * nvme-print-stdout: Check sscanf return value
  * nvme-print-stdout: Fix linux kernel check patch errors
  * nvme: Delete unusual fallthrough for cases have no body
  * nvme: Delete duplicated semicolon
  * nvme-print, common: Fix for whitespace change
  * logging: output ioctl debugging info (bsc#1231668)
  * nvme: track verbose level (bsc#1231668)
  * logging: track log level globally
  * logging: move logging code to a new file
  * nvme: update include for libnvme
  * nvme: remove unused declaration
  * build: bump libnvme wrap
  * nvme-netapp: add nspath tlv handling (bsc#1220971)
  * rpm: Add missing rule and service files
  * nvme-print-json, nvme-print-stdout: Use CHAR_BIT definition
  * nvme-print-stdout: Delete duplicated if condition checking line
  * ocp: Fix timestamp displayed by fw-activate-history command
  * wdc: Add support for the get-drive-status command to SN861
  * nvme-print: Fix nvme_host_metadata_type_to_string() indentation errors
  * nvme-print: Add PEL RCI port identifier type printf function
  * nvme-print-stdout: Use persistent event log RCI definitions
  * build: bump libnvme wrap
  * nvme: Add show-regs and get-property commands NSSD print outputs
  * nvme-print: print more details in ns-descs verbose output (bsc#1223331)
  * Revert "nvme-print-json: remove obj_print helper"
  * sed: Confirm entered password before initialization.
- drop systemd service harden file, upstream ships this patch.
  * remove 0100-harden_nvmf-connect@.service.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737601">- Update to version 2.9.1:
  * plugins/spdk: drop the plugin</changelog>
  <changelog author="daniel.wagner@suse.com" date="1722600000">- Update to version 2.10:
  * sed: Fix parsing of Discovery0 features
  * fabrics: avoid potential segfault in nvmf_dim() (bsc#1231668)
  * nvme: avoid segfault in show-topology (bsc#1226197)
  * fabrics: do not leak nvme_ctrl_t object on connect
  * nvme: extend help message when mmap regs fails
  * nvme: return -ENXIO value to open device if errno not set
  * wdc: OCP 2.5 Log Page Updates
  * fabrics: drop --quiet alias -S
  * fabrics: drop --disable-sqflow alias -d
  * fabrics: check if json config is existing (bsc#1231668)
  * plugins/ocp: fix UAF when printing telemetry log
  * nvme-print-stdout: fix persistent-event-log set feature event output
  * fabrics: do not report error when no modules are loaded when disconnecting
  * fabrics: use cleanup helper where possible
  * fabrics: print an error for ENOENT too
  * plugins/virtium: use time_t for time_stamp values
  * completions: add ocp set-error-injection command
  * doc: add ocp set-error-injection command
  * ocp: add set-error-injection command
  * nvme: use argconfig_parse_seen to check conditions
  * nvme: use proper mask to get correct lbafu value
  * utils: fix print formatting option
  * utils: cleanup includes in utils.h
  * utils: add missing header
  * nvme-print: Added print for two new fields for HMB feature
  * plugins/micron: Move OCP internal log parsing from Micron to OCP Plugin.
  * fabrics: remove unused _discover_from_json_config_file() argument
  * nvme: avoid unnecessary dup() + close() in io_mgmt_send()
  * util: remove unnecessary NULL check in cleanup_nvme_root()
  * nvme: use argconfig_parse_comma_sep_array_u16() in attach-ns
  * util: avoid duplication in argconfig_parse_comma_sep_array*()
  * util: remove redundant loop condition in argconfig_parse()
  * util: introduce is_null_or_empty() to avoid strlen()
  * util: reduce allocation sizes in argconfig_parse()
  * util: consolidate call paths to argconfig_parse_type()
  * util: reduce complexity of argconfig_parse_val()
  * util: reduce arguments passed to argconfig_parse_type()
  * util: remove empty default case in argconfig functions
  * util: remove unnecessary parentheses in argconfig_parse_type()
  * util: remove redundant cast in argconfig_parse_type()
  * util: inline argconfig_parse_byte()
  * util: remove redundant NULL check in argconfig_print_help()
  * util: use cleanup to avoid goto in argconfig_parse()
  * util: make argconfig_set_opt_val() a void function
  * util: remove argconfig_parse_val() declaration
  * util: remove argconfig CFG_SIZE type
  * wdc: Update and refactor the C0h log page parsing
  * ccan: Add freed pointer checking to delete strset member
  * fabrics: connect all hosts in config.json (bsc#1226216)
  * fabrics: refactore discover from json config (bsc#1226216)
  * fabrics: first read config before topology scanning (bsc#1226216)
  * fabrics: use helper to lookup default hostnqn/hostid (bsc#1226216)
  * fabrics: extend already connected message (bsc#1226216)
  * fabrics: use cleanup helper to free nvme root object
  * nvme: check MD size with PI size when PRACT set to 1
  * nvme-print: add new field added in TP4090
  * nvme-print-binary: add effects-log command output missed
  * completions: add ocp get-error-injection command
  * doc: add ocp get-error-injection command
  * ocp: add get-error-injection command
  * ocp: fix eol-plp-failure-mode command sel option value
  * doc: fix ocp eol-plp-failure-mode select short option
  * ocp: set UUID index for eol-plp-failure-mode command to get
  * nvme: fix verbose logging (bsc#1231668)
  * doc: fix micron ocp telemetry log parse title
  * nvme-rpmb: send RPMB_REQ_READ_RESULT for authentication key programming
  * plugins/micron: Add support for OCP telemetry log parsing
  * ocp: Update Plugin Version
  * nvme: fix lbaf inuse to use 6:5 bits
  * ocp: use NVME_ARGS macro definition by eol-plp-failure-mode command
  * nvme: extern NVME_ARGS macro definition
  * nvme: use _cleanup_free_ type buffer for get-feature command
  * plugins/ocp: Update telemetry string log page (C9h)
  * nvme-print-json: add get-feature command fahrenheit temperature output
  * nvme: add get-feature and id-ctrl commands fahrenheit outputs
  * nvme: delete smart-log command fahrenheit option
  * nvme-print: check locale to use temperatures in degrees fahrenheit
  * completion: add support for tls-key (bsc#1226197)
  * doc: add tls-key --revoke documentation (bsc#1226197)
  * doc: fix tls-key --keyfile shorthand (bsc#1226197)
  * nvme: add support to revoke TLS key (bsc#1226197)
  * nvme: return error code/message for TLS commands (bsc#1226197)
  * nvme: factor out import key function (bsc#1226197)
  * nvme: use cleanup helper to close file descriptor (bsc#1226216)
  * nvme-rpmb: use cleanup helper for STREAM objects
  * fabrics: use cleanup helper for STREAM objects
  * nvme: use cleanup helper for STREAM objects (bsc#1226216)
  * nvme: strip newline when parsing TLS key files (bsc#1226197)
  * nvme: use stdout for exporting TLS keys (bsc#1226197)
  * nvme: change _cleanup_file_ to _cleanup_fd_ (bsc#1226197)
  * common.h: Avoid using unsupported load/store instructions in arm64 VMs
  * ocp: OCP 2.5 Telemetry DA 1 and 2 Parsing Updates
  * nvme-print-stdout: refactor subsys config (bsc#1231668)
  * wdc: Fix compiler warning.
  * nvme: add flags type nvme_print_flags_t
  * nvme-print: Use 'unsigned int' instead of 'unsigned'
  * nvme: update parse_args() return value handling
  * nvme-print: Fix nvme_show_smart_log indentation error
  * nvme-print-stdout: Fix stdout_smart_log indentation error
  * nvme-print-binary: Fix binary_smart_log indentation error
  * completions: add smart-log command fahrenheit option
  * doc: Add smart-log command fahrenheit option
  * nvme: Add smart-log command fahrenheit option
  * nvme-print: add PEL vendor specific and TCG defined events strings
  * nvme-print: Print PEL reserved event string
  * completions: Add timeout option bash completions
  * completions: Add timeout option zsh completions
  * completions: Add io-mgmt-recv/send commands zsh completions
  * completions: Add /dev/nvme argument missed
  * completions: Change fw-activate command name to fw-commit
  * completions: Fix _nvme indentation errors (bsc#1226197)
  * completions: Fix bash-nvme-completion.sh indentation errors (bsc#1226197)
  * doc: Add nvme commands timeout option
  * nvme: Add support for delete-ns command timeout option
  * nvme: Change NVME_DEFAULT_IOCTL_TIMEOUT to use nvme_cfg timeout
  * nvme: Add nvme_cfg timeout default option
  * nvme: Add nvme_cfg global variable for NVME_ARGS default options
  * nvme: add helper function to get pif and sts value
  * nvme: choose PIF from QPIF if QPIFS supports and PIF is QTYPE
  * nvme: use libnvme's atomic ANA log page fetch
  * nvme: fix maximum ANA log page length calculation
  * nvme-print-json: add missing va_end()
  * fabrics: skip namespace scan for fabric commands
  * nvme-print: print the new fields added in TP4141a
  * plugins/ocp: underflow + index fixes for telemetry
  * plugins/ocp: Add ocp TCG Configuration Log Page
  * nvme-print-stdout: Add helper function to print PIF in string form
  * doc: fix format command info
  * nvme: telemetry: report the correct error if the ioctl() fails.
  * nvme-print: add the cancel opcode to the nvme_cmd_to_string() list
  * doc: fix ocp format issues
  * nbft: Reuse existing discovery controller
  * nbft: Skip SSNS records pointing to well-known discovery NQN
  * nbft: Perform actual discovery
  * util/cleanup: Add cleanup for struct nvme_fabrics_uri
  * fabrics: Make some symbols public (bsc#1226216)
  * nvme-print-stdout: fix format index in stdout_nvm_id_ns
  * plugins/solidigm: Added workload-tracker command
  * plugins/solidigm: Added extra VU fields to id-ctrl
  * nvme-print-stdout: print MEM bit of CTRATT field
  * nvme-print-stdout: fix to print the log line by line
  * fabrics: Always pass hostid and hostnqn (bsc#1226216)
  * plugins/ssstc: Replace __uint16_t with uint16_t
  * plugins/solidigm: Added log pages to vs-internal-logs
  * sed: perform a tper revert after lsp revert
  * plugins/nbft: Use default library logging
  * docs: Add missing OCP plugin docs to meson
  * ocp: Switch OCP plugin to use semantic versioning
  * nvme: fix fw-commit MUD result message
  * sed: only re-read partition table after unlock.
  * nvme-print-json: Fix LBA status DSLBA output as hexadecimal
  * nvme-print-json: Use NVME_PMRxxx register definitions to print
  * nvme-print-stdout: Fix PMRWBM register name
  * nvme-print-json: Fix channel configuration descriptors pointer
  * nvme-print-json: Fix linux kernel check patch errors
  * nvme-print: Added "Command and Feature Lockdown" string to LID 0x14
  * plugins/innogrit: `u_char` -&gt; `unsigned char`
  * nvme: Use C99 types for uint32_t
  * nvme-print-stdout: print frl1/2/3 values for zns id-ns
  * solidigm: Eliminate &lt;linux/limits.h&gt;
  * nvme: remove double free in persistent-event-log
  * ocp: Add Get DSSD Power State Feature (FID: C7h)
  * nvme: initialize default library logging
  * nvme: use cleanup helper for nvme_root_t objects (bsc#1226197)
  * doc: add nvme connet ctrl-loss-tmo description
  * plugins/solidigm: Automatic enabling Data Area 4 when retrieving Telemetry.
- always build the docs
  * add 0001-docs-rename-ocp-unsupported-req-log-file.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1730376000">- Update to version 2.11:
  * docs: update check-tls-key arguments
  * nvme: add support to append TLS PSK to keyfile for check-tls-key
  * nvme: return correct error code in append_keyfile
  * docs: nvme-id-doman: dom{ia =&gt; ai}n
  * ocp: fix latency monitoring data structure entry endian
  * ocp: fix TCG configuration log endian
  * ocp: fix firmware activation history entry endian
  * docs: update gen-tls-key arguments
  * nvme: add support to add derive TLS PSK to keyfile
  * nvme: rename identity to version
  * nvme: set file permission for keyfile to owner only
  * nvme: export tls keys honoring version and hmac
  * nvmf-keys: add udev rule to import tls keys
  * docs: update TLS options
  * fabrics: add support to connect to accept a PSK command line
  * fabrics: add support to connect to accept a configuration
  * nvme: use unsigned char for hmac and identity
  * nvme-print: Add Sanitize Media Verification Event in PEL log
  * netapp-ontapdev: add err msg for no ontapdevices
  * netapp-smdev: add err msg for no smdevices
  * doc: Add sanitize command emvs option
  * ocp: combine to use GUID length definitions
  * nvme: update tls_key() handling
  * nvme-print-stdout: print VERS bit of SANICAP field
  * nvme: add EMVS support to sanitize command
  * ocp: remove callback function cast
  * doc: added commit conventions to contribution guidelines
  * ocp: fix ocp-print-stdout.c indentation error
  * ocp: fix ocp-nvme.c indentation errors
  * ocp: build ocp-nvme.c and ocp-telemetry-decode.c without json
  * ocp: split TCG configuration log print codes
  * ocp: split telemetry string log print codes
  * ocp: split device capabilities log print codes
  * ocp: split error recovery log print codes
  * ocp: split unsupported requirement log print codes
  * ocp: split latency monitor log print codes
  * ocp: move ocp telemetry log print function into ocp-print
  * ocp: split smart extended log print codes
  * ocp: split ocp-fw-activation-history print codes
  * plugins: update meson.build file to always build ocp plugin
  * ocp-print: move json code into separate files
  * nvme-print-json: display only verbose output
  * ocp-nvme: ocp plugin version update
  * nvme-print: print KV command set page header
  * doc: show where self-test results can be found
  * plugins/memblaze: fix a wrong id on smart-log-add
  * plugins/dapustor: smart-log-add fix
  * plugins/sed: add sid password change (bsc#1229677)
  * plugins/solidigm: Automatic retry smaller log chunk size.
  * ocp-nvme: Add LMDATA-37 for Latency Monitor Log
  * ocp-nvme: remove ocp log page version checking
  * wdc: Fix for Reading WDC C2 Vendor Unique Log Page
  * ocp: Fixes for OCP 2.5 Telemetry DA1 FIFO Event Parsing
  * nvme-print-json: update JSON verbose output for nvm-id-ctrl (bsc#1231668)
  * wdc: Add Support for SN5100S
  * nvme: Support show-regs for nvmeof
  * ocp: fix option handling in internal-log
  * Documentation: Added solidigm plugin commands
  * wdc: add support for SNTMP drive
  * nvme-print: print NSSES field of CAP register
  * ocp: fix GUID output
  * nvme-print-json: print controller register values in offset order
  * nvme-print-json: print CMBEBS and CMBSWTP in json format
  * nvme-print-stdout: update changed-ns-list-log output (bsc#1231668)
  * nvme: fix uninitialized value in error-log (bsc#1231668)
  * nvme: fix to convert metadata size to native byte order
  * nvme-print: fix error information log page endianness error
  * completions: add get-feature command changed option
  * doc: add get-feature command changed option
  * nvme: separate get NVME_GET_FEATURES_SEL_CHANGED definition
  * nvme: use NVME_GET_FEATURES_SEL definitions
  * nvme-print-stdout: use NVME_CTRL_OAES definitions
  * completion: add ocp set-telemetry-profile to zsh
  * completion: add solidgm work-tracker binding
  * plugins/solidigm: Added Workload Tracker Triggers and Wall Time
  * ocp: include util/types.h to use nvme_uint128_t
  * ocp: fix to set log data pointer allocated
  * nvme: use NVME_CHECK() to check get features select field value
  * ocp: split ocp-hwcomp log
  * completions: add ocp hardware-component-log command
  * doc: add ocp hardware-component-log command
  * ocp: add hwcomp log json output
  * ocp: add hwcomp log command list option
  * ocp: add hwcomp log command comp-id option
  * ocp: add hwcomp dummy definition
  * ocp: add support for hwcomp log page
  * nvme: use NVME_CTRL_FNA definitions
  * netapp-smdevices: print single device output too (bsc#1231668)
  * netapp-smdevices: segregate print routines (bsc#1231668)
  * Add Support for new SN655 PCI Device ID
  * nvme-print-json: extern json object add functions
  * ocp: add SMART / health information extended log page version 4
  * ocp: add error recovery log page version 3
  * ocp: add get-enable-ieee1667-silo command
  * fabrics: fix incorrect access filename check (bsc#1231668)
  * nvme: use NVME_GET_FEATURES_SEL_SUPPORTED definition
  * nvme-print-json: use _cleanup_free_
  * plugins/solidigm: fix use after free.
  * ocp: fix ocp-nvme.c coding style errors
  * ocp: Change C9 function names to use c9 instead
  * ocp: fix to return c9 log page data error to open file
  * ocp: fix to set return value to get c9 log page data
  * nvme: update nvme_insert_tls_key_versioned() return handling (bsc#1231668)
  * nvme-print-stdout: add print_array function
  * logging: add print_info function
  * util: extern uint128_t_to_double() function
  * nvme-print: sanitize error-log output (bsc#1231668)
  * plugins/solidigm : Fixing vs-internal-log to generate identify per allocated namespace.
  * nvme-print: added new fields for nvm_id_ns
  * plugins/fdp: bugfix error check to validate output format
  * plugins/wdc: fix json output for vs-nand-stats
  * nvme-print-stdout: use NVME_FEAT util definitions
  * nvme-print: update subsys verbose outputs (bsc#1231668)
  * nvme-print: add subsystype to the list-subsys output (bsc#1231668)
  * netapp: print output for single device too (bsc#1231668)
  * netapp: segregate the print routines (bsc#1231668)
  * netapp: fix uninitialized value from heap error (bsc#1231668)
  * nvme-print: print the new fields added in TP4142
  * plugins/innogrit: modify for project tacoma
  * wdc: Add Support for new SN-861 PCI device id
  * nvme-print: use LC_MEASUREMENT to check fahrenheit temperature
  * nvme-print: use Completion Condition enum
  * completions: add the zsh completion of the dapustor plugin
  * nvme-print: print the new fields added in TP4165
  * plugins/dapustor: dapustor smart-log-add update
  * nvme-print-stdout: Added print for new field CSER (TP4167)
  * plugins: Add a new DapuStor plugin and the smart-log-add command
  * docs: rename ocp-unsupported-req-log file
- Drop build fix patch
  * remove 0001-docs-rename-ocp-unsupported-req-log-file.patch
- Install 70-nvmf-keys.rules to the default udev rules directory</changelog>
  <changelog author="dwagner@suse.de" date="1741089600">- Update to version 2.11+17.g6e09119:
  * nvme: check for valid output format (bsc#1237275)
  * nvme: make get-feature JSON output print everything (bsc#1237275)
  * nvme: make -v output consistent with -H output for nvme get-feature (bsc#1237275)
  * nvme: make -v output consistent with -H output for nvme get-property (bsc#1237275)
  * nvme-print-stdout: add details in list-ns verbose output (bsc#1237275)
  * nvme-print-stdout: add descriptions for nsze, ncap &amp; nuse (bsc#1237275)
  * netapp-ontapdev: correct the basestr header (bsc#1237275)
  * netapp-smdev: update err msg for no smdevices (bsc#1237275)
  * netapp-ontapdev: update err msg for no ontapdevices (bsc#1237275)
  * netapp-smdev: update basestr header in verbose output (bsc#1237275)</changelog>
  <changelog author="dwagner@suse.de" date="1745323200">- Update to version 2.11+22.gd31b1a01:
  * nvme-print: display fw-rev in list-subsys output (bsc#1240518)
  * nvme-print: display model in list-subsys output (bsc#1240518)
  * netapp-ontapdev: add subsysname to regular output (bsc#1240518)
  * netapp-ontapdev: add subsysname to the verbose output (bsc#1240518)
  * Revert "nvme-print-json: display only verbose output"</changelog>
  <changelog author="dwagner@suse.de" date="1753185600">- Update to version 2.11+26.gfbd2b4f4:
  * nvme: fix mem leak in nvme copy (bsc#1243716)
  * nvme-print: suppress output when no ctrl is present for list-subsys (bsc#1243716)
  * nvme: extend filter to match device name (bsc#1243716)
  * udev-rules-ontap: switch to queue-depth iopolicy (bsc#1246599)</changelog>
  <changelog author="dwagner@suse.de" date="1757419200">- Update to version 2.11+28.g2fc67685:
  * netapp-ontapdev: update invalid device handling (bsc#1247017)
  * netapp-smdev: update invalid device handling (bsc#1247017)</changelog>
  <changelog author="dwagner@suse.de" date="1758196800">- Update to version 2.11+29.g61f8d34b:
  * nvme: add --compat flag for 'gen-tls-key' and 'check-tls-key' (bsc#1246914)</changelog>
</package>
<package pkgid="ee7167554eaf1b6d74d41b03484e990e737a28900694d4bea112442f82cabc63" name="nvme-cli" arch="x86_64">
  <version epoch="0" ver="2.11+29.g61f8d34b" rel="150700.3.12.1"/>
  <changelog author="daniel.wagner@suse.com" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- Mark no binaries rpms as noarch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 2.2.1:
  * Added parsing for Solidigm telemetry observable data.
  * add item ddr_ecc_err_cnt in smart-log-add
  * build: Drop dependency on libuuid
  * build: Fix endian check for cross build
  * build: Remove unused uuid.wrap file
  * build: Remove unusned uuid.h include
  * completions: Add show-topology tab completion
  * fabrics: Honor JSON config file in connect-all command (bsc#1199504)
  * fabrics: Trigger auto connect if config.json exists
  * fabrics: fix 'persistent' handling during connect-all with JSON file
  * fabrics: nvme config --modify depends on -n and -t argument
  * fabrics: re-read the discovery log page when a discovery controller reconnected
  * json: Support uint64 types serialization for older json-c versions
  * nvme, plugins: fix __u64 -&gt; unsigned long long assumptions
  * nvme-print: Add missing values in id-ctrl for JSON output
  * nvme-print: Handle NULL hostid in JSON output
  * nvme-print: Output 128bit values as uint128 type instead of double
  * nvme-print: Print fguid as a UUID
  * nvme-print: Use uint128 JSON function for media_units_written
  * nvme-print: decode MI status values
  * nvme-print: decode status types
  * nvme-print: fix wrong json key
  * nvme: Add helper function to parse 16-bit comma separated list
  * nvme: Add nvme_cmd wrapper for get_features
  * nvme: Add show-topology command
  * nvme: Add wrapper for Format NVM
  * nvme: Add wrapper for Sanitize NVM
  * nvme: Add wrappers for Get Log page helpers
  * nvme: Add wrappers for Identify controller lists
  * nvme: Add wrappers for NS attach/detach
  * nvme: Add wrappers for NS management functions
  * nvme: Add wrappers for basic NS identify
  * nvme: Add wrappers for firmware commands
  * nvme: Fix set feature command to get feature identifier 0Dh length as zero
  * nvme: Introduce a union in struct nvme_dev for different transport types
  * nvme: Introduce nvme_cli_ wrappers, wrap identify and identify_ctrl
  * nvme: Make static nvme_dev private to open_dev(), use locals elsewhere
  * nvme: Masks SSTAT in sanize-log output
  * nvme: Remove static nvme_dev, allocate on open instead
  * nvme: Use correct print format specifier for sizeof arguments
  * nvme: Use local struct nvme_dev for show_registers &amp; map_registers
  * nvme: check if cfg.metadata is NULL before passing it to strlen()
  * nvme: use helpers for checking status types
  * plugins/innogrit: Include timer.h
  * plugins/innogrit: add smart items for smart-log-add
  * plugins/micron-nvme: Use correct print format specifier for sizeof arguments
  * plugins/ocp: Include timer.h
  * plugins/ocp: Output 128bit values as uint128 type instead of double
  * plugins/ocp: pass struct nvme_dev to internal functions
  * plugins/seagate: Add support for OCP
  * plugins/toshiba: pass struct nvme_dev rather than fd + name
  * plugins/virtium: Output 128bit values as uint128 type instead of double
  * plugins/wdc: Add support for SN660 drive
  * plugins/wdc: Add type case for feature id
  * plugins/wdc: Output 128bit values as uint128 type instead of double
  * plugins/wdc: pass a struct nvme_dev around rather than a fd
  * plugins/wdc: pass struct nvme_dev rather than using global nvme_dev
  * plugins/ytmc: pass struct nvme_dev rather than fd + name
  * plugins: Use PRIu64 format specifier for 64bit types
  * print: Add Controller Ready Timeout Exceeded HW error code
  * solidgm: fix initialization warning
  * solidigm: Added parsing for telemetry customer screenable data
  * solidigm: Fix printf format for size_t variable
  * solidigm: Updated Telemetry parsing code to MIT license.
  * subprojects/libnvme: update for MI admin command coverage
  * tests: Update license to GPL-2.0-or-later
  * tree: Add NVMe-MI support
  * tree: Add dev_fd() helper
  * tree: Change nvme_dev from global to static
  * tree: Combine NVMe file descriptor into struct nvme_dev
  * tree: Move global device info to a single struct
  * tree: fail on non-negative return values from parse_and_open
  * udev: Add HOST_IFACE to udev rule (bsc#1208001)
  * util/json.h: Add json_object_get_uint64 fallback implementation
  * util/json: Add 128 bit JSON helpers
  * util/types: Add 128 bit conversion helpers
  * util: Fix le128_to_cpu on big-endian
  * util: Fix le128_to_cpu on little-endian
  * util: Move common type conversion helpers into util section
  * utils/json: Add json_object_new_uint64 for json-c &lt; 0.14
  * utils: Fix uint128_t usage
  * wdc:  OCP Log page updates and fixes
  * zns.c: report zones should be started after retrieved zone
- Handle suse-missing-rclink lint warnings by providing the symlinks
- Drop rpmlintrc as it is not needed anymore</changelog>
  <changelog author="daniel.wagner@suse.com" date="1675080000">- Update to version 2.3:
  * Added support for Flexible Data Placement (TP4146)
  * Added Persistent Discovery Controller support (TP8013/TP8014)
  * nvme-mi: support for firmware downloads
  * nvme device-self-test learned the --wait command line argument
    which makes nvme-cli to wait (incl. progress bar) in foreground
    until the test has finished.
  * A lot of bug fixes all over the place
- Update spec file
  * Project depends on meson &gt;= 0.50.0
  * make build dependency dropped</changelog>
  <changelog author="daniel.wagner@suse.com" date="1680264000">- Update to version 2.4 (jsc#PED-553 jsc#PED-3884):
  * plugins/ocp: Add SMART cloud log to solidigm plugin
  * nvme-print: Unify number base format for nsid
  * nvme-(discover,connect,connect-all): enable options '--keyring' and '--tls_key'
  * nvme-connect: enable option '--tls'
  * nvme-check-tls-key: add options to derive a 'retained' TLS key
  * nvme-gen-tls-key: add options to derive a TLS key
  * plugins/ocp: Move SMART cloud log methods to separate file for reusability
  * nvme: validate storage tag size correctly
  * nvme-print-json: Add json output status function
  * util: Cleanup argconfig parse function
  * nvme: Fix format command function indentation errors
  * util: Use argconfig commandline options pointer directly
  * nvme-print: Fix nvme show status function indentation errors
  * nvme: Check fw-commit command support MUD
  * print: print csi and opcode in error log (TP4113)
  * plugins/inspur: Cast vendor specific smart log value
  * nvme: Use correct ABORT type for self abort test
  * plugins/solidigm: Do not overwrite previously initialized variable
  * nvme-print: sanitize supported-log-pages output (bsc#1209550)
  * nvme: Enforce length to a multiple of 4 in get_log_page
  * nvme: fix block count and data size logic (bsc#1209564)
  * util: Introduce argconfig simple helper to check seen condition
  * plugins/ocp: Add set feature EOL/PLP failure mode no-uuid option
  * plugins/ocp: Refactor to clear feature identifier C1h and C3h
  * plugins/ocp: Add support for clear PCIe correctable error counters feature
  * nvme-doc: update man page for supported-log-pages (bsc#1209550)
  * plugins/ocp: OCP 2.0 field updates for SMART cloud log
  * nvme: Fix parameter limit range
  * fdp: Fix wrong Reclaim Unit Handle Status size
  * plugins/ocp: Add support for EOL/PLP failure mode feature
  * nvme-print: Fix printing of u32 values
  * nvme: Fix invalid memory access in show_registers
  * util: Add argconfig seen flag parameter to check if feature NSID set
  * nvme-print: fix segfault in supported-log-pages json output
  * fabrics: Fix ordering for auto connect services (bsc#1208075)
  * nvme.c: Check Firmware Update Granularity in fwdl
  * log: high latency timestamp issue
  * nvme: Align get feature data buffer length by page size to allocate
  * nvme: Continue get feature on invalid NS error to get multiple feature ids
  * plugins/ocp: SMART cloud log bug fixes.
  * Made temperature readouts in line with the SI.
  * Changed 'Kelvin' to 'kelvin', as recommended by the BIPM.
  * plugins/ocp: Fix whitespace and style issues
  * util: Revert JSON output to plain numbers
  * nvme: Add rae argument to telemetry-log command
  * nvme: Refactor get telemetry log page helper
  * nvme: Factor out parse telemetry log da element
  * nvme: Fix type in error message
  * unit: Add test-argconfig-parse
  * nvme: Use chunked read in get_log()
  * nvme: Use fprintf for error message logging in get_log()
  * nvme: fix /dev/spkd/ typo
  * doc: --storage-tag-check doesn't take any arguments
  * fabrics: Ensure host-traddr/iface consistency for "connect-all"
  * nvme-print: print the nvme generic name in json output as well
  * plugins/innogrit: modify command opcode for eventlog and cdump
  * completion: fix typo, add missing args
  * plugins/wdc: Fix data Formatting for Latency Monitor Log Page
  * nvme: Make json-c optional again
  * nvme-print: Move JSON printing function into a new file
  * plugins/solidigm: Use json_create_object wrapper
  * plugins/solidigm: Use struct json_object instead of typedef
  * fabrics: No need to sanitize trsvcid and traddr
  * docs: Fixed typos and missing options
  * util: Numbers without any suffix are also valid
  * util: Update suffix_binary_parse API
  * util: Reimplement suffix_si_parse
  * nvme: Filter out status flags for get feature command
  * util: Add crc32 implementation
  * nvme-print: Use attrs_info as key for Zone Attributes Information
  * nvme: Support effects-log for fabrics ctrl
  * plugins/solidigm: Add uuid index resolution
  * plugins/ocp: Use network byte order for OCP UUID value
  * json_discovery_log: avoid buffer overrun (bsc#1207435)
  * Fix connect nbft regressions (bsc#1209905)
  * Fix auto connect conditions (bsc#1210105)
  * Fix auto boot for NBFT connections (bsc#1211647)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1695988800">- Update to version 2.6 (jsc#PED-3610 jsc#PED-4879 jsc#PED-5061):
  * nvme: allocate payload buffer in create-ns command
  * nvme-print-stdout: Add CAP.CPS and CAP.NSSS human readable outputs
  * nvme: Add output-format default option instead of argconfig json option
  * nvme: fw-download offset only describes FW offset, not file offset
  * unit: add locale number test
  * util: handle utf-8 thousend separators correctly
  * nvme: Change to use NVME_ARGS verbose default option from OPT_ARGS
  * fabrics: Fix NVMF_ARGS macro to use parameter n correctly
  * nvme: Add verbose default option to show command debug output
  * util: Fix to set argconfig output format json option correctly
  * util: Split argconfig output format json function to set and get
  * nvme: Spport Phy Rx Eye Opening Measurement Log
  * nvme: Introduce nvme_realloc function
  * nvme: Fix for fdpa reserved field printing
  * completion: add 'version' and 'help' to list
  * udev-rule: apply round-robin iopolicy on i/o subsystems alone (bsc#1215994) (bsc#1219086)
  * nvme: Add support for the OAQD ID controller field
  * plugins/solidigm: use static log macro to calc bitmask
  * plugins/ocp: Rename FW activation history command
  * nvme: auto free nvme_dev resource
  * nvme: allocate aligned payloads for all nvme commands
  * nvme: introduce alloc helper with alignment support
  * util: add cleanup function for generic memory allocations
  * nvme: append huge to nvme_{alloc|free} function
  * nvme: fw_download use nvme_alloc only
  * fabrics: Removing duplicate code and moving to libnvme
  * nvme-print: omit size of protection information
  * tree: Modify label name close_fd to close_dev
  * fabrics: For TCP/RDMA, compare IP addresses with nvme_ipaddrs_eq() (bsc#1213768)
  * fabrics: lookup_discovery_ctrl() must look under host and not root (bsc#1213768)
  * nvme: Do not map status to errno codes
  * completions: Add bash completion for DSSD Power state feature(FID: C7h)
  * Documentation: Add document for DSSD Power state feature(FID: C7h)
  * plugins/ocp: Add DSSD Power state feature(FID: C7h)
  * avoid casting pointer arguments to argconfig functions
  * nvme-print: Add support for EGFEAT, Domain Identifier, TEGCAP and UEGCAP
  * nvme-print: Fix endurance_log whitespace changes
  * nvme: Fix retrieval of telemetry log up to specified data area.
  * nvme: Update list secondary command
  * wdc: Add support for SN861 drive
  * util: Set errno to 0 before strtol/stroul call
  * nvme: Revert passthru and submit_io to print status to stderr from stdout
  * plugins/zns: Fix offset in report zones
  * nvme-rpmb: Fix nvme_show_id_ctrl_rpmbs() definition error
  * fabrics: Use corresponding hostid when hostnqn is generated
  * json: fix seg. fault converting NULL to JSON string (bsc#1213762)
  * nvme-cli: fix extended metadata size calculation
  * nvme-print: Show subsystem iopolicy (bsc#1124564)
  * nvme-print-stdout: Do not show non reachable ns in namespace topology (bsc#1212598)
  * nvme-print: Fix show-topolocy for ctrls
  * doc: Fix typo in documentation
  * nvme-print-stdout: fix storage tag size label
  * nvme-print-stdout: List only ctrls which are part of ns (bsc#1212598)
  * nvme-print-stdout: Support subsys reachable from several hosts (bsc#1212598)
  * ccan: Add htable, strset and dependencies (bsc#1212598)
  * ccan: Remove unused documentation (bsc#1212598)
  * nvme-print: Split max power flags
  * nvme-print: fix counter while looping through uuid_list (bsc#1212598)
  * fabrics: only look for matching ctrl on same host (bsc#1213768)
  * README: Correct hugetlbfs spelling error
  * util: Delete unused CFG_BOOL argconfig type as duplicated with CFG_FLAG
  * util: Set LC_ALL=C as default if -H option is not used
  * nvme: Add support for create-ns command endg-id option parameter
  * nvme-print: fix argument order for show functions
  * plugins/solidigm: Added Marketing Name Log support for Solidigm.
  * nvme-print: Remove left overs from refactoring
  * nvme-print: Move num argument parsing into callbacks
  * nvme-print: Fix typo in callback definition
  * scripts: Make release script project neutral
  * scripts: Update update-docs.sh scripts
  * scripts: Execute the scripts from toplevel directory
  * scripts: Move helper scripts to a central place
  * docs: Update file modes
  * doc: Add information on --context
  * nvmf-autoconnect: Annotate the context to autoconnect
  * fabrics: Add support for volatile configuration
  * plugins/solidigm: Formated log page directory table consistently with "nvme list" format.
  * plugins/solidigm: Added Identify controller VU extensions parsing.
  * nvme-print-json: Print PCI pysical slot number for controller
  * nvme-print-stdout: Print PCI physical slot number for controller
  * libnvme.wrap: Bump to 42ac453
  * plugins/nbft: Use common code to parse print flags
  * fabrics: Do not print device on connect per default
  * fabrics: Revert 'fabrics: prevent 'nvme connect' to well-known discovery NQN'
  * nvme-print: fix wrong list-subsys output when ns are attached to different ctrls
  * plugins/micron: Correct NULL pointer checking error
  * plugins/innogrit: Add vendor command get-eventlog and get-cdump
  * nvme: Use correct data buffer size
  * nvme: Fix quoted string split across lines to use quoted newline
  * plugins/zns: Fix zns.c linux kernel check patch errors and warnings
  * plugins/ymtc: Fix ymtc-nvme.c linux kernel check patch warning
  * plugins/ymtc: Fix ymtc-nvme.c space indentation to tab indentation
  * plugins/virtium: Fix virtium-nvme.c linux kernel check patch errors and warnings
  * plugins/transcend: Fix transcend-nvme.c linux kernel check patch errors and warnings
  * plugins/solidigm: Fix linux kernel check patch errors and warnings
  * plugins/shannon: Fix shannon-nvme.c linux kernel check patch errors and warnings
  * plugins/seagate: Fix seagate-nvme.c linux kernel check patch warnings
  * plugins/scaleflux: Fix sfx-nvme.c linux kernel check patch errors and warnings
  * plugins/netapp: Fix netapp-nvme.c linux kernel check patch errors and warnings
  * plugins/nbft: Fix nbft-plugin.c linux kernel check patch warnings
  * plugins/micron: Fix micron-nvme.c linux kernel check patch errors and warnings
  * plugins/micron: Fix micron-nvme.c space indentation to tab indentation
  * plugins/memblaze: Fix memblaze-nvme.c linux kernel check patch errors and warnings
  * plugins/memblaze: Fix memblaze-utils.h space indentation to tab indentation
  * plugins/memblaze: Fix memblaze-nvme.c space indentation to tab indentation
  * plugins/intel: Fix intel-nvme.c linux kernel check patch errors and warnings
  * plugins/inspur: Fix inspur-nvme.c linux kernel check patch warnings
  * plugins/inspur: Fix inspur-nvme.c space indentation to tab indentation
  * plugins/innogrit: Fix innogrit-nvme.c linux kernel check patch errors
  * plugins/huawei: Fix huawei-nvme.c linux kernel check patch errors and warnings
  * plugins/fdb: Fix fdb.c linux kernel check patch warnings
  * plugins/dera: Fix dera-nvme.c linux kernel check patch errors and warnings
  * plugins/amzn: Fix amzn-nvme.c linux kernel check patch error and warnings
  * plugins/wdc: Fix wdc-utils.c linux kernel check patch errors and warnings
  * plugins/wdc: Refactor wdc-nvme.c for linux kernel check patch errors and warnings
  * util: Move falltrhough feature check to meson.builds
  * ocp: Add eol plp failure mode json outputs
  * nvme-print: Add nvme show result function
  * nvme-print-json: Add json output result function
  * nvme-print: Fix nvme_show_error() to call va_end() for json output format
  * nvme: Fix nvme format block-size option handling
  * Revert "nvme: Masks SSTAT in sanize-log output"
  * fabrics: Fix NVMF_ARGS macro indentation error
  * Documentation: Add document for OCP Device capability(LID: 0xC4) log page
  * completions: Add bash completion for OCP Device capability(LID: 0xC4) log page
  * plugins/ocp: Add Device capability(LID: 0xC4) log page
  * udev: fix warning reported by udevadm verify
  * fabrics: fix conditions in nvmf-autoconnect.service
  * fabrics: Change NVMF_OPTS as NVMF_ARGS to fix linux kernel check patch error
  * nvme: Split passthru commands read output
  * nvme: Fix io-passthru command read metadata output
  * plugin/ocp: Added implementation for 0xC1 log page
  * util: Fix suffix_si_parse to parse no decimal point but suffix value correctly
  * completions: Add zsh option values handling for sanitize command action
  * completions: Add ocp sub commands zsh completion
  * completions: Add ocp commands zsh completion
  * completions: Add ocp commands bash completion
  * nvmf-autoconnect: restart service to avoid dropping AEN
  * solidigm: Reduce memory usage in supported log pages feature
  * solidigm: Changes to supported log pages feature requested by review
  * solidigm: Add supported log pages log feature to Solidigm plugin
  * plugins/ocp: Added ocp unsupported requirements log page
  * completions: Add bash option values handling for sanitize command action
  * doc: Correct nvme-show-hostnqn command NAME description
  * completions: Add missing zsh commands descriptions
  * plugins/wdc: Extend SN530 support.
  * Fix incorrect article 'an' as 'a' to use for descriptions and message
  * nvme: Set effects-log command csi option help message string
  * completions: bash: Delete unsupported id-iocs command options
  * completions: bash: Add id-domain command
  * completions: Fix nvm-id-ns-lba-format command zsh definition
  * completions: Add json command option
  * nvme: Fix get-feature command sel parameter check to allow value 8
  * util: Delete unnecessary argconfig definitions OPT_VAL and CFG_VAL
  * util: Delete argconfig value type to add option value as va lists instead
  * util: Split to set argconfig option value
  * util: Delete argconfig value length to calcurate instead
  * nvme: Change sanitize command action option to use argconfig parse value
  * util: Add argconfig parse value function
  * util: Delete unused argconfig subopts type
  * util: Delete unused argconfig file types
  * util: Delete unused argconfig help function
  * nvme-wrap: do_admin_args_op should not clear args timeout
  * nvme: Fix linux kernel check patch warnings
  * nvme: Fix linux kernel check patch errors
  * plugins/ocp: Add telemetry-log command to OCP plugin
  * plugins/ocp: Add OCP set latency monitor feature command
  * plugins/ocp: Fix endianness in Latency Monitor Log output
  * plugins/ocp: Add missing fields in Latency Monitor Log
  * plugins/ocp: Fix typos in Latency Monitor Log
  * plugins/ocp: Reorganize OCP plugin source code
  * tests: Add tests for controller reset
  * plugin/solidigm: Added vs-internal-log command.
  * nvme: Add nvme_show_perror to use instead of perror for json output
  * nvme-print-json: Use vasprintf instead of vsnprintf to allocate string
  * nvme: fix rnlpt to_string() values.
  * nvme: fix io_mgmt args parse error
  * fdp: set-events feature is saveable
  * fabrics: Return errno value as negative
  * fabrics: Fix linux kernel check patch errors and warnings
  * nbft: add the nbft show plugin
  * nbft: added NBFT v1.0 table support (jsc#PED-1449)
  * nbft: make lookup_ctrl function public
  * nvme: Fix indentation errors around nvme show error API
  * nvme: Check validate output format err value instead of flags
  * nvme: Use nvme show error API to outptu stderr messages for json format
  * util: Check output format json for json error message output
  * nvme-printf: Add show error function for nvme list command json output
  * nvme: Add zns specfic field for create ns
  * nvme: Add ns-mgmt host software specified fields
  * nvme: Add dtype, dspec on write-zeroes, write-uncor
  * nvme-print: Add new fields print on id directive
  * nvme-print: Add VWCNP on NSFEAT of id-ns
  * nvme: Fix format command to skip to reread NSID all block device
  * plugins/solidigm: Fixes and clean-up of Telemetry parse code. Fixed parsing of 64 bit values. Fixed COD field name. Fixed compilation warnings when compiling for 32 bit. Added missing free(). Consolidated single entry function to telemetry parser. Consolidated use of integer types.
  * doc: Documentations maintenance changes
  * doc: Add nvme-mi-send command documentation
  * doc: Add nvme-mi-recv command documentation
  * doc: Add clear-pcie-correctable-error-counters command documentation
  * doc: Add eol-plp-failure-mode command documentation
  * plugins/solidigm: Add firmware activation history log to Solidigm plugin
  * plugins/ocp: Add firmware activation history log to OCP plugin
  * nvme-print: Use enum nvme_print_flags for nvme_show_id_ctrl
  * nvme: Add support for NVMe-MI send command
  * nvme: Use stdout for passthru and submit_io commands success messages
  * nvme: Fix passthru command function indentation errors
  * nvme: Add support for NVMe-MI receive command
  * fabrics: fix fc config JSON file handling (bsc#1210089)
  Refresh 0100-harden_nvmf-connect@.service.patch
- Fix install path for nvme-regress script</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420800">- Enable test during build (bsc#1207686)
- Drop minimum version meson dependency
- Add asciidoc dependency
- Build documentation when requested</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696852800">- Use fixed timestamps for documentation allowing reproducable builds
- Announce nvmeof-boot-support support via Provides
- Filter rpmlint warnings for systemd-service-without-service_ macros
- Add missing service files for NBFT feature
  * add 0001-fabrics-autoconnect-add-service-unit-for-connecting-.patch
  * add 0002-fabrics-add-udev-rule-to-avoid-renaming-nbft-interfa.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1697112000">- Add missing jsc# and bsc# tracking entries in change log.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1702987200">- Update to version 2.7:
  * nvme-print-json: include vs for identify namespace
  * nvme-print-stdout: enhance connect message (bsc#1219086)
  * fabrics: fix connect error if hostid file does not exist (bsc#1219086)
  * fabrics: fix invalid output format error during nvme connect (bsc#1219086)
  * wdc: Fix vs-smart-add-log Command for SN650 and SN655
  * nvme: restric hmac options for gen-tls-key (bsc#1219086)
  * wdc: Fix UUID index fallback mechanism
  * plugins/ocp: Add OCP Telemetry String log page, Telemetry log page
  * completions: Add bash completions for telemetry string log page
  * plugins/solidigm: Added OCP 2.0 compatibility version command
  * plugins/solidigm: Added OCP 2.0 vs-drive-info command.
  * plugins/ocp: Fix printing order of various Latency Monitor Log buckets
  * nvme: validate output format split status from flag return value
  * nvme: simplify cleanup_nvme_dev()
  * cleanup: remove unused cleanup_charp()
  * wdc: Add support for SN861 2nd pci device id
  * nvme: replace libhugetlbfs with mmap and madvise
  * util/mem: move alloc helper to util section
  * nvme: auto cleanup filedescriptors
  * nvme: auto cleanup buffers
  * nvme: return error code in get_persistent_event_log
  * nvme: sanitize nvme-gen-tls-key
  * nvme: print out the resulting TLS identity for 'nvme check-tls-key'
  * nvme: Add version '1' identifier for nvme-gen-tls-key
  * subprojects/libnvme: update wrapper for TP8018
  * plugins/solidigm: Added re_sku_count smart atrribute
  * doc: Fix nvme-connect manpage --application option string
  * plugins/ocp: changed command clear-pcie-correctable-error-counters to match OCP 2.0 spec.
  * plugins/solidigm: Added command to clear PCIe Correctable Error Counters according to OCP 2.0
  * plugins/ocp: Reorganized clear feature code for better reuse
  * nvme: fixup length calculation for 'nvme gen-tls-key --secret'
  * doc: remove invalid hostkey info for --dhchap-secret
  * nvme-print-json: use human helper everywhere
  * nvme-print-json: remove obj_print helper
  * plugins/ocp: update nvme_show_select_result call
  * mailmap: only show contributer's name
  * nvme-print-json: Change to report status and message in array
  * nvme-print-json: Change to report feature select in array
  * nvme-print-json: Change to report error and data in array
  * nvme-print-json: Add show_init/finish calls to report features in array
  * nvme-print: Add nvme_show_error_status() to merge error message and status
  * nvme-print-json: Use r instead of root and use obj_add_***(r, ..., ...)
  * nvme-print-json: Delete static const char string global variables
  * nvme-print-json: Add remaining controller registers readable format
  * nvme-print-json: Add readable format cap, vs, cc, csts, nssr and crto registers
  * nvme-print-json: Combine duplicated json key and val string variables
  * nvme-print-json: Replase json_array_add_value_string() to array_add_str()
  * nvme-print-json: Replase json_object_add_value_uint128() to obj/root_add_uint128()
  * nvme-print-json: Replase json_object_add_value_object() to obj/root_add_obj()
  * nvme-print-json: Replase json_array_add_value_object() to array_add_obj()
  * nvme-print-json: Replase json_object_add_value_array() to obj/root_add_array()
  * nvme-print-json: Replase json_object_add_value_uint() to obj/root_add_uint()
  * nvme-print-json: Replase json_object_add_value_int() to obj/root_add_int()
  * nvme-print-json: Replase json_object_add_value_uint64() to obj/root_add_uint64()
  * nvme-print-json: Replase json_object_add_value_string() to obj/root_add_str()
  * nvme-print-json: Update feature_show_fields_*** to use root/obj_add_***()
  * nvme-print-json: Update lba_status_log to use root_add_***() and obj_add_***()
  * nvme-print-json: Replace lba_status_log printf() to root_add_result()
  * nvme-print-json: Add list_item print function
  * nvme-print-json: Add lba_status_info print function
  * nvme-print-json: Add lba_range print function
  * nvme-print-json: Add id_ctrl_rpmbs print function
  * nvme-print-json: Unify json_list and jroot object names to root
  * nvme-print-json: Add json_zns_changed print function
  * nvme-print-json: Add root_add_result() to output result message
  * nvme-print-json: Split persistent_event_log print function
  * nvme-print-json: Remove unnecessary string newline code
  * nvme-print-json: Replace effects_log_list print to use json_print()
  * nvme-print-json: Print persistent_event_log no log data result correctly
  * nvme-print-json: Add static "result" and "erorr" strings variables
  * nvme-print-json: Add single_property printf function
  * nvme: Replace get feature command stderr output to nvme_show_error()
  * nvme-print-json: Change d() output to use d_json()
  * nvme: Fix get-feature command mixed stdout and json outputs
  * nvme-print-json: Add remaining feature fields print functions
  * nvme-print-json: Update formatting and codying style
  * build: Add -std=c99 to CFLAGS for muon on CentOS 7
  * fabrics: add udev rule to avoid renaming nbft interfaces
  * fabrics: autoconnect: add service unit for connecting NBFT subsystems
  * fabrics: autoconnect: explicitly express module dependency
  * Updates to codeql config
  * libnvme-wrap: exit on VOID_FN lookup failure
  * plugins/ocp:Added the ocp C6h feature api
  * plugin/ocp_fid_c6h:Added the ocp C6h feature api
  * nvme-copy: support cross-namespace copy
  * nvme/plugins: fix mismatch operator
  * nvme: fix overflow possiblity
  * nvme: reduce identify cmd issue
  * nvme: allow set-features to take input from stdin
  * Fix common misspellings from codespell project
  * nvme-print: Correct to print correct ascii character string length
  * print-stdout: print Host Behavior Support correctly
  * build: Bump libnvme wrap
  * plugins/solidigm: Added support for temperature statistics log page
  * Add support for codeql sweeps
  * doc: Add virt-mgmt command
  * doc: Add id-uuid command
  * doc: Add list-secondary command
  * doc: Add id-ns-granularity command
  * doc: Add nvme commands --output-format and --verbose options
  * completions: Add nvme-mi-recv nad nvme-mi-send commands completions
  * completions: Change short option -o and -v duplicated to upper case
  * doc: Change short option -o and -v duplicated to upper case
  * nvme: Change short option -o and -v duplicated to upper case
  * nvme: Change phy-rx-eom-log command to use NVME_ARGS instead
  * plugins/memblaze: Add smart-log-add and latency-feature functions
  * plugins/solidigm: internal-logs Telemetry auto detect last data area.
  * nvme: Change to use NVME_FLBAS_META_EXT() macro to check flbas value
  * nvme-print-json: Add host memory buffer and timestamp features print functions
  * nvme-print-json: Add feature fields print functions
  * nvme-print-json: Add TMPTH feature print function
  * nvme-print-json: Add show_feature_fields print function
  * nvme-print-json: Add select_result print function
  * nvme-print-json: Use json_print to print and free object
  * nvme-print-json: Add lba_status print function
  * nvme-print-json: Combine variable definition and setting value
  * nvme-print-json: Add id_iocs print function
  * nvme-print-stdout: Fix coding style errors
  * nvme-print-json: Add directive print function
  * nvme: Fixed segmentation fault when getting host initiated telemetry
  * plugins/wdc: enhanced SN861 device support
  * plugins/wdc: cleanup line lengths
  * nvme: do not include meta data for PRACT=1 and MD=8
  * nvme: use block-count arg if provided
  * build: bump libnvme to disable tests option
  * build: Add static build on CI target
  * nvme-print: Add nvme_zns_start_zone_list() API function
  * nvme-print: Add nvme_zns_finish_zone_list() API function
  * nvme-print-binary: Set list function to NULL if unimplemented
  * nvme-print-json: Change order list functions and set NULL if unimplemented
  * nvme-print-stdout: Fix to set stdout_list_item print function missed
  * plugins/solidigm: log page name extraction using nvme_log_to_string function
  * nvme-print: Added missing logpage names in nvme_log_to_string function
  * udev-rules: rename netapp udev rule (bsc#1219086)
  * udev-rules: set ctrl_loss_tmo to -1 for ONTAP NVMe/TCP (bsc#1219086)
- Remove upstreamed patches
  * remove 0001-fabrics-autoconnect-add-service-unit-for-connecting-.patch
  * remove 0002-fabrics-add-udev-rule-to-avoid-renaming-nbft-interfa.patch
- Update spec file
  * remove libhugetblfs depedency
  * update NetApp udev rule file name</changelog>
  <changelog author="daniel.wagner@suse.com" date="1703160000">- Update to version 2.7.1:
  * nvme-print-json: Revert field name changes (bsc#1218306)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1707912000">- Update to version 2.8:
  * nvme-print-json: append array object in json_support_log
  * sed: Add plugin for basic SED Opal operations (jsc#PED-5061)
  * don't include newlines in already wrapped text
  * nvme: do not include meta data for PRACT=1 and MD=8 (version 2)
  * create-ns: align the namespaces to 1Mib boundaries when using SI suffixes
  * doc: Fix config-schema.json's URL
  * plugins/solidigm: Compressing vs-internal-log log files into zip file.
  * nbft: do not issue an error if ACPI tables are missing
  * nbft: fixup include for libnvme
  * doc: Fix short option name for cfg-file
  * completions: added Solidigm plugin to autocomplete scripts
  * nvme: Remove unused cfg argument from NVME_ARGS() macro
  * nvme: fix directive receive identify offsets
  * nvme-fabrics: enable option 'concat'
  * build: Update libnvme wrap
  * plugins/wdc: Add Debug Log Collection Support
  * nbft: fix tcp/dhcp address fallback retry (bsc#1218873)
  * nvme: use correct telemetry log size
  * nvme-print: fix typo in list verbose output (bsc#1219086)
  * nvme: print inserted tls key for check-tls-key (bsc#1219086)
  * plugins/wdc: Plugin fixes and updates
  * fabrics: move hostid/hostnqn warnings to verbose level (bsc#1219086)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737600">- Update to version 2.9:
  * nvme-print: expand the maximum field length to prevent misalignment
  * plugins/spdk: plugin to list SPDK subsystems
  * nvme-print: check if controller belong to SPDK
  * plugins/spdk: plugin to list SPDK controllers
  * nvme-print-stdout: fix ASQB, ACQB and BMBBA prints
  * build: bump libnvme wrap
  * nvmf-autoconnect: fix string encoding
  * nvme: identify primary ctrl do not accept nsid
  * nvme-wrap: remove unused nvme_cli_get_log_ana_groups()
  * nvme-print-json: use admin queue attributes definitions
  * nvme-print-json: use CSTS definitions
  * nvme-print-stdout: use POWER_OF_TWO macro
  * nvme-print-json: use controller configuration definitions
  * nvme-print-json, nvme-print-stdout: add tertiary version number
  * nvme-print-json: use NVME_MAJOR and NVME_MINOR definitions
  * nvme-print-json: use NVME_BOOT_PARTITION_INFO field definitions
  * nvme-print-json: add support telemetry log create event in PEL
  * nvme-print-json: add support set feature event in PEL
  * nvme-print-json: add obj_d() function
  * nvme-print-json: add obj_add_uint_0nx() function
  * meson.build: Fix spelling of sed-opal.h filename
  * sed_opal: Only build when we really have sed_opal headers
  * nvme: fix error path if write() fails in get_telemetry_log()
  * plugins/solidigm: Additional LID for temperature statistics.
  * plugins/solidigm: Improved Solidigm UUID index detection.
  * nvme-print-stdout: Add CSTS.ST register stdout print
  * nvme-print-stdout: Use NVME_CMIC definitions
  * nvme-print: Use NVME_UNIT definitions
  * nvme-print-stdout: Use NVME_CMBMSC/STS/EBS/SWTP definitions
  * plugins/ssstc: add a new plugin for SSSTC driver
  * nvmf-connect: systemd hardening effort
  * plugins/ocp: Adjusted variable type size carrying UUID index to 8 bit.
  * nvme: fix security buffer allocation size
  * nvme: Change fw-download xfer initialization to set 0
  * nvme: Add fw-download warning message for FWUG alignment error
  * plugins/ocp: Split ocp_get_uuid_index() into find and get functions.
  * nvme: fix mem leak in multiple key related functions (bsc#1223331)
  * fabrics: fix mem leak in nvmf_check_hostid_and_hostnqn() (bsc#1223331)
  * nvme-print-stdout: Use NVME_BPRSEL definitions
  * nvme-print-stdout: Use NVME_BPINFO definitions
  * nvme-print-stdout: Use NVME_CMBSZ definitions
  * nvme-print-stdout: Use NVME_CMBLOC definitions
  * Revert "logging: fix error handling for ioctl passthru wrappers"
  * fabrics: align identify command payload
  * ocp: Unify line start spacing as tabs
  * ocp: support OCP DSSD Async Event Config feature
  * nvme: Add support for get-reg and set-reg commands
  * nvme-print-json: Add register print functions
  * nvme-print-stdout: Add register print functions
  * nvme-print: Add register print functions
  * nvme: Refactor mmap_registers to add writable parameter
  * nvme-print: Change PMRSZU string function as unit string
  * nvme-print: Refactor CMBLOC and PMRSTS registers function
  * logging: fix error handling for ioctl passthru wrappers
  * nbft: Fix scandir() error check
  * nbft: Refactor connection attempt out
  * nvme-print: Use EOM optional data present macros changed
  * nvme-print: Print cntlid number for controller (bsc#1224024)
  * nvme: check-tls-key fails despite having hostnqn file (bsc#1223331)
  * nvme: print retained key for gen-tls-key's -i option too (bsc#1223331)
  * fabrics : allow host to create duplicate connections to target
  * fabrics: Fix fast_io_fail_tmo option
  * nvme-print-stdout: use admin queue attributes definitions
  * nvme-print-stdout: use CSTS definitions
  * nvme-print-stdout: use controller configuration definitions
  * nvme-print-stdout: use NVME_MAJOR and NVME_MINOR definitions
  * nvme-print-stdout: use FDP configuration attributes definitions
  * nvme: add new function 'tls_key' (bsc#1226197)
  * nvme: use library functions for importing and exporting TLS keys (bsc#1216982)
  * nvme: extend error message for ns scan failures
  * nvme-print-json: Bugfix status json key of sanitize-log
  * sed: update SED password when initalizing (bsc#1222168)
  * plugins/memblaze: add performance stats
  * plugins/memblaze: fix code mis-type error
  * plugins/memblaze: code refactor on applying __packed on more structs
  * plugins/memblaze: code refactor on using cleanup_nvme_dev
  * nvme: Fix to cleanup free raw_secret memory allocated
  * plugins/memblaze: code-format on leading indent and align
  * plugins/wdc: Fix narrow index variable type in for loop to __u32
  * plugins/wdc: Whitespace changes
  * nvme: Delete unused nvme root scanned
  * ocp: support OCP 2.5 Set Telemetry Profile feature
  * nvme: Don't seg fault if given device is not char/block device
  * nbft: Include SSNS index in error messages (bsc#1222026)
  * nbft: Pause logging for expected connection failures (bsc#1222026)
  * nbft: Silence connection failures for unavailable SSNS (bsc#1222026)
  * nbft: Fix 'verbose' argument type (bsc#1222026)
  * plugins/nbft: Implement verbose logging
  * plugins/nbft: Print the new SSNS flags
  * nbft: Fix uninitialized variable
  * plugins/nbft: Fix uninitialized variables
  * plugins/sed: Fix uninitialized variable
  * nvme-print-stdout: Fix uninitialized variable
  * nvme-print-json: Fix uninitialized variable
  * build: Switch default meson buildtype to 'debugoptimized'
  * nvme: do not scan topology when mmaping registers
  * nvme-print-stdout: Use NVME_BOOT_PARTITION_INFO field definitions
  * nvme-print-stdout: Use NVME_GET for MI commands supported and effects CSP
  * nvme-print-stdout: Use NVME_GET for FID supported and effects FSP
  * nvme-print-stdout: Use NVME_SET_FEAT_EVENT register definitions
  * nvme-print: Add PEL EHAI port identifier type printf function
  * build: bump libnvme wrap
  * ocp: fix for power-state argument checking
  * nvme: do not issue warning when nvme_core module is not loaded
  * wdc: Review changes and build fixes
  * wdc:  Fix timestamp displayed by vs-firmware-activate-history command
  * logging: Split to output ioctl latency by log info level (bsc#1231668)
  * nvme-print-stdout: Change hexadecimal value 0x prefix to use %#x
  * nvme-print-stdout: Fix LBA status DSLBA output as hexadecimal
  * nvme-print-stdout: Split line length exceeded 100 columns
  * nvme-print-stdout: Use NVME_PMRMSC register definitions to print
  * nvme-print-stdout: Use NVME_PMRSWTP register definitions to print
  * nvme-print-stdout: Use NVME_PMREBS register definitions to print
  * nvme-print-stdout: Use NVME_PMRSTS register definitions to print
  * nvme-print-stdout: Use NVME_PMRCTL_EN register definition to print
  * nvme-print-stdout: Use NVME_PMRCAP register definition to print
  * doc: Fix admin and io passthru cdw parameters description
  * doc: Add get-feature cdw11 and set-feature cdw12 parameters
  * micron-nvme: Unuse stat() to check if strMainDirName exists
  * doc: Fix get-property and set-property offset and value descriptions
  * doc: Fix documentation file mode 100755 to 100644
  * nvme-print-stdout: Fix channel configuration descriptors pointer
  * nvme-print-stdout: Check sscanf return value
  * nvme-print-stdout: Fix linux kernel check patch errors
  * nvme: Delete unusual fallthrough for cases have no body
  * nvme: Delete duplicated semicolon
  * nvme-print, common: Fix for whitespace change
  * logging: output ioctl debugging info (bsc#1231668)
  * nvme: track verbose level (bsc#1231668)
  * logging: track log level globally
  * logging: move logging code to a new file
  * nvme: update include for libnvme
  * nvme: remove unused declaration
  * build: bump libnvme wrap
  * nvme-netapp: add nspath tlv handling (bsc#1220971)
  * rpm: Add missing rule and service files
  * nvme-print-json, nvme-print-stdout: Use CHAR_BIT definition
  * nvme-print-stdout: Delete duplicated if condition checking line
  * ocp: Fix timestamp displayed by fw-activate-history command
  * wdc: Add support for the get-drive-status command to SN861
  * nvme-print: Fix nvme_host_metadata_type_to_string() indentation errors
  * nvme-print: Add PEL RCI port identifier type printf function
  * nvme-print-stdout: Use persistent event log RCI definitions
  * build: bump libnvme wrap
  * nvme: Add show-regs and get-property commands NSSD print outputs
  * nvme-print: print more details in ns-descs verbose output (bsc#1223331)
  * Revert "nvme-print-json: remove obj_print helper"
  * sed: Confirm entered password before initialization.
- drop systemd service harden file, upstream ships this patch.
  * remove 0100-harden_nvmf-connect@.service.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737601">- Update to version 2.9.1:
  * plugins/spdk: drop the plugin</changelog>
  <changelog author="daniel.wagner@suse.com" date="1722600000">- Update to version 2.10:
  * sed: Fix parsing of Discovery0 features
  * fabrics: avoid potential segfault in nvmf_dim() (bsc#1231668)
  * nvme: avoid segfault in show-topology (bsc#1226197)
  * fabrics: do not leak nvme_ctrl_t object on connect
  * nvme: extend help message when mmap regs fails
  * nvme: return -ENXIO value to open device if errno not set
  * wdc: OCP 2.5 Log Page Updates
  * fabrics: drop --quiet alias -S
  * fabrics: drop --disable-sqflow alias -d
  * fabrics: check if json config is existing (bsc#1231668)
  * plugins/ocp: fix UAF when printing telemetry log
  * nvme-print-stdout: fix persistent-event-log set feature event output
  * fabrics: do not report error when no modules are loaded when disconnecting
  * fabrics: use cleanup helper where possible
  * fabrics: print an error for ENOENT too
  * plugins/virtium: use time_t for time_stamp values
  * completions: add ocp set-error-injection command
  * doc: add ocp set-error-injection command
  * ocp: add set-error-injection command
  * nvme: use argconfig_parse_seen to check conditions
  * nvme: use proper mask to get correct lbafu value
  * utils: fix print formatting option
  * utils: cleanup includes in utils.h
  * utils: add missing header
  * nvme-print: Added print for two new fields for HMB feature
  * plugins/micron: Move OCP internal log parsing from Micron to OCP Plugin.
  * fabrics: remove unused _discover_from_json_config_file() argument
  * nvme: avoid unnecessary dup() + close() in io_mgmt_send()
  * util: remove unnecessary NULL check in cleanup_nvme_root()
  * nvme: use argconfig_parse_comma_sep_array_u16() in attach-ns
  * util: avoid duplication in argconfig_parse_comma_sep_array*()
  * util: remove redundant loop condition in argconfig_parse()
  * util: introduce is_null_or_empty() to avoid strlen()
  * util: reduce allocation sizes in argconfig_parse()
  * util: consolidate call paths to argconfig_parse_type()
  * util: reduce complexity of argconfig_parse_val()
  * util: reduce arguments passed to argconfig_parse_type()
  * util: remove empty default case in argconfig functions
  * util: remove unnecessary parentheses in argconfig_parse_type()
  * util: remove redundant cast in argconfig_parse_type()
  * util: inline argconfig_parse_byte()
  * util: remove redundant NULL check in argconfig_print_help()
  * util: use cleanup to avoid goto in argconfig_parse()
  * util: make argconfig_set_opt_val() a void function
  * util: remove argconfig_parse_val() declaration
  * util: remove argconfig CFG_SIZE type
  * wdc: Update and refactor the C0h log page parsing
  * ccan: Add freed pointer checking to delete strset member
  * fabrics: connect all hosts in config.json (bsc#1226216)
  * fabrics: refactore discover from json config (bsc#1226216)
  * fabrics: first read config before topology scanning (bsc#1226216)
  * fabrics: use helper to lookup default hostnqn/hostid (bsc#1226216)
  * fabrics: extend already connected message (bsc#1226216)
  * fabrics: use cleanup helper to free nvme root object
  * nvme: check MD size with PI size when PRACT set to 1
  * nvme-print: add new field added in TP4090
  * nvme-print-binary: add effects-log command output missed
  * completions: add ocp get-error-injection command
  * doc: add ocp get-error-injection command
  * ocp: add get-error-injection command
  * ocp: fix eol-plp-failure-mode command sel option value
  * doc: fix ocp eol-plp-failure-mode select short option
  * ocp: set UUID index for eol-plp-failure-mode command to get
  * nvme: fix verbose logging (bsc#1231668)
  * doc: fix micron ocp telemetry log parse title
  * nvme-rpmb: send RPMB_REQ_READ_RESULT for authentication key programming
  * plugins/micron: Add support for OCP telemetry log parsing
  * ocp: Update Plugin Version
  * nvme: fix lbaf inuse to use 6:5 bits
  * ocp: use NVME_ARGS macro definition by eol-plp-failure-mode command
  * nvme: extern NVME_ARGS macro definition
  * nvme: use _cleanup_free_ type buffer for get-feature command
  * plugins/ocp: Update telemetry string log page (C9h)
  * nvme-print-json: add get-feature command fahrenheit temperature output
  * nvme: add get-feature and id-ctrl commands fahrenheit outputs
  * nvme: delete smart-log command fahrenheit option
  * nvme-print: check locale to use temperatures in degrees fahrenheit
  * completion: add support for tls-key (bsc#1226197)
  * doc: add tls-key --revoke documentation (bsc#1226197)
  * doc: fix tls-key --keyfile shorthand (bsc#1226197)
  * nvme: add support to revoke TLS key (bsc#1226197)
  * nvme: return error code/message for TLS commands (bsc#1226197)
  * nvme: factor out import key function (bsc#1226197)
  * nvme: use cleanup helper to close file descriptor (bsc#1226216)
  * nvme-rpmb: use cleanup helper for STREAM objects
  * fabrics: use cleanup helper for STREAM objects
  * nvme: use cleanup helper for STREAM objects (bsc#1226216)
  * nvme: strip newline when parsing TLS key files (bsc#1226197)
  * nvme: use stdout for exporting TLS keys (bsc#1226197)
  * nvme: change _cleanup_file_ to _cleanup_fd_ (bsc#1226197)
  * common.h: Avoid using unsupported load/store instructions in arm64 VMs
  * ocp: OCP 2.5 Telemetry DA 1 and 2 Parsing Updates
  * nvme-print-stdout: refactor subsys config (bsc#1231668)
  * wdc: Fix compiler warning.
  * nvme: add flags type nvme_print_flags_t
  * nvme-print: Use 'unsigned int' instead of 'unsigned'
  * nvme: update parse_args() return value handling
  * nvme-print: Fix nvme_show_smart_log indentation error
  * nvme-print-stdout: Fix stdout_smart_log indentation error
  * nvme-print-binary: Fix binary_smart_log indentation error
  * completions: add smart-log command fahrenheit option
  * doc: Add smart-log command fahrenheit option
  * nvme: Add smart-log command fahrenheit option
  * nvme-print: add PEL vendor specific and TCG defined events strings
  * nvme-print: Print PEL reserved event string
  * completions: Add timeout option bash completions
  * completions: Add timeout option zsh completions
  * completions: Add io-mgmt-recv/send commands zsh completions
  * completions: Add /dev/nvme argument missed
  * completions: Change fw-activate command name to fw-commit
  * completions: Fix _nvme indentation errors (bsc#1226197)
  * completions: Fix bash-nvme-completion.sh indentation errors (bsc#1226197)
  * doc: Add nvme commands timeout option
  * nvme: Add support for delete-ns command timeout option
  * nvme: Change NVME_DEFAULT_IOCTL_TIMEOUT to use nvme_cfg timeout
  * nvme: Add nvme_cfg timeout default option
  * nvme: Add nvme_cfg global variable for NVME_ARGS default options
  * nvme: add helper function to get pif and sts value
  * nvme: choose PIF from QPIF if QPIFS supports and PIF is QTYPE
  * nvme: use libnvme's atomic ANA log page fetch
  * nvme: fix maximum ANA log page length calculation
  * nvme-print-json: add missing va_end()
  * fabrics: skip namespace scan for fabric commands
  * nvme-print: print the new fields added in TP4141a
  * plugins/ocp: underflow + index fixes for telemetry
  * plugins/ocp: Add ocp TCG Configuration Log Page
  * nvme-print-stdout: Add helper function to print PIF in string form
  * doc: fix format command info
  * nvme: telemetry: report the correct error if the ioctl() fails.
  * nvme-print: add the cancel opcode to the nvme_cmd_to_string() list
  * doc: fix ocp format issues
  * nbft: Reuse existing discovery controller
  * nbft: Skip SSNS records pointing to well-known discovery NQN
  * nbft: Perform actual discovery
  * util/cleanup: Add cleanup for struct nvme_fabrics_uri
  * fabrics: Make some symbols public (bsc#1226216)
  * nvme-print-stdout: fix format index in stdout_nvm_id_ns
  * plugins/solidigm: Added workload-tracker command
  * plugins/solidigm: Added extra VU fields to id-ctrl
  * nvme-print-stdout: print MEM bit of CTRATT field
  * nvme-print-stdout: fix to print the log line by line
  * fabrics: Always pass hostid and hostnqn (bsc#1226216)
  * plugins/ssstc: Replace __uint16_t with uint16_t
  * plugins/solidigm: Added log pages to vs-internal-logs
  * sed: perform a tper revert after lsp revert
  * plugins/nbft: Use default library logging
  * docs: Add missing OCP plugin docs to meson
  * ocp: Switch OCP plugin to use semantic versioning
  * nvme: fix fw-commit MUD result message
  * sed: only re-read partition table after unlock.
  * nvme-print-json: Fix LBA status DSLBA output as hexadecimal
  * nvme-print-json: Use NVME_PMRxxx register definitions to print
  * nvme-print-stdout: Fix PMRWBM register name
  * nvme-print-json: Fix channel configuration descriptors pointer
  * nvme-print-json: Fix linux kernel check patch errors
  * nvme-print: Added "Command and Feature Lockdown" string to LID 0x14
  * plugins/innogrit: `u_char` -&gt; `unsigned char`
  * nvme: Use C99 types for uint32_t
  * nvme-print-stdout: print frl1/2/3 values for zns id-ns
  * solidigm: Eliminate &lt;linux/limits.h&gt;
  * nvme: remove double free in persistent-event-log
  * ocp: Add Get DSSD Power State Feature (FID: C7h)
  * nvme: initialize default library logging
  * nvme: use cleanup helper for nvme_root_t objects (bsc#1226197)
  * doc: add nvme connet ctrl-loss-tmo description
  * plugins/solidigm: Automatic enabling Data Area 4 when retrieving Telemetry.
- always build the docs
  * add 0001-docs-rename-ocp-unsupported-req-log-file.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1730376000">- Update to version 2.11:
  * docs: update check-tls-key arguments
  * nvme: add support to append TLS PSK to keyfile for check-tls-key
  * nvme: return correct error code in append_keyfile
  * docs: nvme-id-doman: dom{ia =&gt; ai}n
  * ocp: fix latency monitoring data structure entry endian
  * ocp: fix TCG configuration log endian
  * ocp: fix firmware activation history entry endian
  * docs: update gen-tls-key arguments
  * nvme: add support to add derive TLS PSK to keyfile
  * nvme: rename identity to version
  * nvme: set file permission for keyfile to owner only
  * nvme: export tls keys honoring version and hmac
  * nvmf-keys: add udev rule to import tls keys
  * docs: update TLS options
  * fabrics: add support to connect to accept a PSK command line
  * fabrics: add support to connect to accept a configuration
  * nvme: use unsigned char for hmac and identity
  * nvme-print: Add Sanitize Media Verification Event in PEL log
  * netapp-ontapdev: add err msg for no ontapdevices
  * netapp-smdev: add err msg for no smdevices
  * doc: Add sanitize command emvs option
  * ocp: combine to use GUID length definitions
  * nvme: update tls_key() handling
  * nvme-print-stdout: print VERS bit of SANICAP field
  * nvme: add EMVS support to sanitize command
  * ocp: remove callback function cast
  * doc: added commit conventions to contribution guidelines
  * ocp: fix ocp-print-stdout.c indentation error
  * ocp: fix ocp-nvme.c indentation errors
  * ocp: build ocp-nvme.c and ocp-telemetry-decode.c without json
  * ocp: split TCG configuration log print codes
  * ocp: split telemetry string log print codes
  * ocp: split device capabilities log print codes
  * ocp: split error recovery log print codes
  * ocp: split unsupported requirement log print codes
  * ocp: split latency monitor log print codes
  * ocp: move ocp telemetry log print function into ocp-print
  * ocp: split smart extended log print codes
  * ocp: split ocp-fw-activation-history print codes
  * plugins: update meson.build file to always build ocp plugin
  * ocp-print: move json code into separate files
  * nvme-print-json: display only verbose output
  * ocp-nvme: ocp plugin version update
  * nvme-print: print KV command set page header
  * doc: show where self-test results can be found
  * plugins/memblaze: fix a wrong id on smart-log-add
  * plugins/dapustor: smart-log-add fix
  * plugins/sed: add sid password change (bsc#1229677)
  * plugins/solidigm: Automatic retry smaller log chunk size.
  * ocp-nvme: Add LMDATA-37 for Latency Monitor Log
  * ocp-nvme: remove ocp log page version checking
  * wdc: Fix for Reading WDC C2 Vendor Unique Log Page
  * ocp: Fixes for OCP 2.5 Telemetry DA1 FIFO Event Parsing
  * nvme-print-json: update JSON verbose output for nvm-id-ctrl (bsc#1231668)
  * wdc: Add Support for SN5100S
  * nvme: Support show-regs for nvmeof
  * ocp: fix option handling in internal-log
  * Documentation: Added solidigm plugin commands
  * wdc: add support for SNTMP drive
  * nvme-print: print NSSES field of CAP register
  * ocp: fix GUID output
  * nvme-print-json: print controller register values in offset order
  * nvme-print-json: print CMBEBS and CMBSWTP in json format
  * nvme-print-stdout: update changed-ns-list-log output (bsc#1231668)
  * nvme: fix uninitialized value in error-log (bsc#1231668)
  * nvme: fix to convert metadata size to native byte order
  * nvme-print: fix error information log page endianness error
  * completions: add get-feature command changed option
  * doc: add get-feature command changed option
  * nvme: separate get NVME_GET_FEATURES_SEL_CHANGED definition
  * nvme: use NVME_GET_FEATURES_SEL definitions
  * nvme-print-stdout: use NVME_CTRL_OAES definitions
  * completion: add ocp set-telemetry-profile to zsh
  * completion: add solidgm work-tracker binding
  * plugins/solidigm: Added Workload Tracker Triggers and Wall Time
  * ocp: include util/types.h to use nvme_uint128_t
  * ocp: fix to set log data pointer allocated
  * nvme: use NVME_CHECK() to check get features select field value
  * ocp: split ocp-hwcomp log
  * completions: add ocp hardware-component-log command
  * doc: add ocp hardware-component-log command
  * ocp: add hwcomp log json output
  * ocp: add hwcomp log command list option
  * ocp: add hwcomp log command comp-id option
  * ocp: add hwcomp dummy definition
  * ocp: add support for hwcomp log page
  * nvme: use NVME_CTRL_FNA definitions
  * netapp-smdevices: print single device output too (bsc#1231668)
  * netapp-smdevices: segregate print routines (bsc#1231668)
  * Add Support for new SN655 PCI Device ID
  * nvme-print-json: extern json object add functions
  * ocp: add SMART / health information extended log page version 4
  * ocp: add error recovery log page version 3
  * ocp: add get-enable-ieee1667-silo command
  * fabrics: fix incorrect access filename check (bsc#1231668)
  * nvme: use NVME_GET_FEATURES_SEL_SUPPORTED definition
  * nvme-print-json: use _cleanup_free_
  * plugins/solidigm: fix use after free.
  * ocp: fix ocp-nvme.c coding style errors
  * ocp: Change C9 function names to use c9 instead
  * ocp: fix to return c9 log page data error to open file
  * ocp: fix to set return value to get c9 log page data
  * nvme: update nvme_insert_tls_key_versioned() return handling (bsc#1231668)
  * nvme-print-stdout: add print_array function
  * logging: add print_info function
  * util: extern uint128_t_to_double() function
  * nvme-print: sanitize error-log output (bsc#1231668)
  * plugins/solidigm : Fixing vs-internal-log to generate identify per allocated namespace.
  * nvme-print: added new fields for nvm_id_ns
  * plugins/fdp: bugfix error check to validate output format
  * plugins/wdc: fix json output for vs-nand-stats
  * nvme-print-stdout: use NVME_FEAT util definitions
  * nvme-print: update subsys verbose outputs (bsc#1231668)
  * nvme-print: add subsystype to the list-subsys output (bsc#1231668)
  * netapp: print output for single device too (bsc#1231668)
  * netapp: segregate the print routines (bsc#1231668)
  * netapp: fix uninitialized value from heap error (bsc#1231668)
  * nvme-print: print the new fields added in TP4142
  * plugins/innogrit: modify for project tacoma
  * wdc: Add Support for new SN-861 PCI device id
  * nvme-print: use LC_MEASUREMENT to check fahrenheit temperature
  * nvme-print: use Completion Condition enum
  * completions: add the zsh completion of the dapustor plugin
  * nvme-print: print the new fields added in TP4165
  * plugins/dapustor: dapustor smart-log-add update
  * nvme-print-stdout: Added print for new field CSER (TP4167)
  * plugins: Add a new DapuStor plugin and the smart-log-add command
  * docs: rename ocp-unsupported-req-log file
- Drop build fix patch
  * remove 0001-docs-rename-ocp-unsupported-req-log-file.patch
- Install 70-nvmf-keys.rules to the default udev rules directory</changelog>
  <changelog author="dwagner@suse.de" date="1741089600">- Update to version 2.11+17.g6e09119:
  * nvme: check for valid output format (bsc#1237275)
  * nvme: make get-feature JSON output print everything (bsc#1237275)
  * nvme: make -v output consistent with -H output for nvme get-feature (bsc#1237275)
  * nvme: make -v output consistent with -H output for nvme get-property (bsc#1237275)
  * nvme-print-stdout: add details in list-ns verbose output (bsc#1237275)
  * nvme-print-stdout: add descriptions for nsze, ncap &amp; nuse (bsc#1237275)
  * netapp-ontapdev: correct the basestr header (bsc#1237275)
  * netapp-smdev: update err msg for no smdevices (bsc#1237275)
  * netapp-ontapdev: update err msg for no ontapdevices (bsc#1237275)
  * netapp-smdev: update basestr header in verbose output (bsc#1237275)</changelog>
  <changelog author="dwagner@suse.de" date="1745323200">- Update to version 2.11+22.gd31b1a01:
  * nvme-print: display fw-rev in list-subsys output (bsc#1240518)
  * nvme-print: display model in list-subsys output (bsc#1240518)
  * netapp-ontapdev: add subsysname to regular output (bsc#1240518)
  * netapp-ontapdev: add subsysname to the verbose output (bsc#1240518)
  * Revert "nvme-print-json: display only verbose output"</changelog>
  <changelog author="dwagner@suse.de" date="1753185600">- Update to version 2.11+26.gfbd2b4f4:
  * nvme: fix mem leak in nvme copy (bsc#1243716)
  * nvme-print: suppress output when no ctrl is present for list-subsys (bsc#1243716)
  * nvme: extend filter to match device name (bsc#1243716)
  * udev-rules-ontap: switch to queue-depth iopolicy (bsc#1246599)</changelog>
  <changelog author="dwagner@suse.de" date="1757419200">- Update to version 2.11+28.g2fc67685:
  * netapp-ontapdev: update invalid device handling (bsc#1247017)
  * netapp-smdev: update invalid device handling (bsc#1247017)</changelog>
  <changelog author="dwagner@suse.de" date="1758196800">- Update to version 2.11+29.g61f8d34b:
  * nvme: add --compat flag for 'gen-tls-key' and 'check-tls-key' (bsc#1246914)</changelog>
</package>
<package pkgid="de1472b891809b680f954899c0dc9e08487efa76118de728147356d70bda3a8d" name="nvme-cli-bash-completion" arch="noarch">
  <version epoch="0" ver="2.11+22.gd31b1a01" rel="150700.3.3.2"/>
  <changelog author="daniel.wagner@suse.com" date="1659355200">- Update to version v2.1:
  * nvme: Do not print error message in collect_effects_log helper
  * fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * nvme-print: sanitize the get-feature async event config output
  * nvme: Set default rae value for nvme_get_nsid_log users
  * fabrics: Avoid nvme_scan_ctrl when disconnecting
  * print: Fix nvme_id_uuid_list
  * fabrics: Already connected uses a different error code (bsc#1199994)
  * fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)</changelog>
  <changelog author="dmueller@suse.com" date="1659528000">- Update to version 2.1.1:
  * build: Update version to v2.1.1
  * build: Extend release script to support micro version releases
  * build: Add minimum build requirement on libnvme
  * wrapper: Add weak nvme_init_copy_range_f1 symbol
  * build: Update version before regenerating docs
  * build: Update release version rules</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- Update to version 2.1.2:
  * build: Update version to v2.1.2
  * wrapper: Update SPDIX license
  * wrapper: Call library version of nvme_init_copy_range_f1
  * Revert "udev: re-read the discovery log page when a discovery controller reconnected"
  * nvme: Simplify ns list identify
  * meson: we don't need a c++ compiler
  * plugins/ocp: drop unused fd argument
  * plugins/wdc: remove fd argument from print functions
  * plugins/wdc: fix memset() on the address of a pointer
  * plugins/solidigm: fix return value on format parse failure
  * plugins/wdc: prevent duplicate close on NVMe device</changelog>
  <changelog author="daniel.wagner@suse.com" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- Mark no binaries rpms as noarch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 2.2.1:
  * Added parsing for Solidigm telemetry observable data.
  * add item ddr_ecc_err_cnt in smart-log-add
  * build: Drop dependency on libuuid
  * build: Fix endian check for cross build
  * build: Remove unused uuid.wrap file
  * build: Remove unusned uuid.h include
  * completions: Add show-topology tab completion
  * fabrics: Honor JSON config file in connect-all command (bsc#1199504)
  * fabrics: Trigger auto connect if config.json exists
  * fabrics: fix 'persistent' handling during connect-all with JSON file
  * fabrics: nvme config --modify depends on -n and -t argument
  * fabrics: re-read the discovery log page when a discovery controller reconnected
  * json: Support uint64 types serialization for older json-c versions
  * nvme, plugins: fix __u64 -&gt; unsigned long long assumptions
  * nvme-print: Add missing values in id-ctrl for JSON output
  * nvme-print: Handle NULL hostid in JSON output
  * nvme-print: Output 128bit values as uint128 type instead of double
  * nvme-print: Print fguid as a UUID
  * nvme-print: Use uint128 JSON function for media_units_written
  * nvme-print: decode MI status values
  * nvme-print: decode status types
  * nvme-print: fix wrong json key
  * nvme: Add helper function to parse 16-bit comma separated list
  * nvme: Add nvme_cmd wrapper for get_features
  * nvme: Add show-topology command
  * nvme: Add wrapper for Format NVM
  * nvme: Add wrapper for Sanitize NVM
  * nvme: Add wrappers for Get Log page helpers
  * nvme: Add wrappers for Identify controller lists
  * nvme: Add wrappers for NS attach/detach
  * nvme: Add wrappers for NS management functions
  * nvme: Add wrappers for basic NS identify
  * nvme: Add wrappers for firmware commands
  * nvme: Fix set feature command to get feature identifier 0Dh length as zero
  * nvme: Introduce a union in struct nvme_dev for different transport types
  * nvme: Introduce nvme_cli_ wrappers, wrap identify and identify_ctrl
  * nvme: Make static nvme_dev private to open_dev(), use locals elsewhere
  * nvme: Masks SSTAT in sanize-log output
  * nvme: Remove static nvme_dev, allocate on open instead
  * nvme: Use correct print format specifier for sizeof arguments
  * nvme: Use local struct nvme_dev for show_registers &amp; map_registers
  * nvme: check if cfg.metadata is NULL before passing it to strlen()
  * nvme: use helpers for checking status types
  * plugins/innogrit: Include timer.h
  * plugins/innogrit: add smart items for smart-log-add
  * plugins/micron-nvme: Use correct print format specifier for sizeof arguments
  * plugins/ocp: Include timer.h
  * plugins/ocp: Output 128bit values as uint128 type instead of double
  * plugins/ocp: pass struct nvme_dev to internal functions
  * plugins/seagate: Add support for OCP
  * plugins/toshiba: pass struct nvme_dev rather than fd + name
  * plugins/virtium: Output 128bit values as uint128 type instead of double
  * plugins/wdc: Add support for SN660 drive
  * plugins/wdc: Add type case for feature id
  * plugins/wdc: Output 128bit values as uint128 type instead of double
  * plugins/wdc: pass a struct nvme_dev around rather than a fd
  * plugins/wdc: pass struct nvme_dev rather than using global nvme_dev
  * plugins/ytmc: pass struct nvme_dev rather than fd + name
  * plugins: Use PRIu64 format specifier for 64bit types
  * print: Add Controller Ready Timeout Exceeded HW error code
  * solidgm: fix initialization warning
  * solidigm: Added parsing for telemetry customer screenable data
  * solidigm: Fix printf format for size_t variable
  * solidigm: Updated Telemetry parsing code to MIT license.
  * subprojects/libnvme: update for MI admin command coverage
  * tests: Update license to GPL-2.0-or-later
  * tree: Add NVMe-MI support
  * tree: Add dev_fd() helper
  * tree: Change nvme_dev from global to static
  * tree: Combine NVMe file descriptor into struct nvme_dev
  * tree: Move global device info to a single struct
  * tree: fail on non-negative return values from parse_and_open
  * udev: Add HOST_IFACE to udev rule (bsc#1208001)
  * util/json.h: Add json_object_get_uint64 fallback implementation
  * util/json: Add 128 bit JSON helpers
  * util/types: Add 128 bit conversion helpers
  * util: Fix le128_to_cpu on big-endian
  * util: Fix le128_to_cpu on little-endian
  * util: Move common type conversion helpers into util section
  * utils/json: Add json_object_new_uint64 for json-c &lt; 0.14
  * utils: Fix uint128_t usage
  * wdc:  OCP Log page updates and fixes
  * zns.c: report zones should be started after retrieved zone
- Handle suse-missing-rclink lint warnings by providing the symlinks
- Drop rpmlintrc as it is not needed anymore</changelog>
  <changelog author="daniel.wagner@suse.com" date="1675080000">- Update to version 2.3:
  * Added support for Flexible Data Placement (TP4146)
  * Added Persistent Discovery Controller support (TP8013/TP8014)
  * nvme-mi: support for firmware downloads
  * nvme device-self-test learned the --wait command line argument
    which makes nvme-cli to wait (incl. progress bar) in foreground
    until the test has finished.
  * A lot of bug fixes all over the place
- Update spec file
  * Project depends on meson &gt;= 0.50.0
  * make build dependency dropped</changelog>
  <changelog author="daniel.wagner@suse.com" date="1680264000">- Update to version 2.4 (jsc#PED-553 jsc#PED-3884):
  * plugins/ocp: Add SMART cloud log to solidigm plugin
  * nvme-print: Unify number base format for nsid
  * nvme-(discover,connect,connect-all): enable options '--keyring' and '--tls_key'
  * nvme-connect: enable option '--tls'
  * nvme-check-tls-key: add options to derive a 'retained' TLS key
  * nvme-gen-tls-key: add options to derive a TLS key
  * plugins/ocp: Move SMART cloud log methods to separate file for reusability
  * nvme: validate storage tag size correctly
  * nvme-print-json: Add json output status function
  * util: Cleanup argconfig parse function
  * nvme: Fix format command function indentation errors
  * util: Use argconfig commandline options pointer directly
  * nvme-print: Fix nvme show status function indentation errors
  * nvme: Check fw-commit command support MUD
  * print: print csi and opcode in error log (TP4113)
  * plugins/inspur: Cast vendor specific smart log value
  * nvme: Use correct ABORT type for self abort test
  * plugins/solidigm: Do not overwrite previously initialized variable
  * nvme-print: sanitize supported-log-pages output (bsc#1209550)
  * nvme: Enforce length to a multiple of 4 in get_log_page
  * nvme: fix block count and data size logic (bsc#1209564)
  * util: Introduce argconfig simple helper to check seen condition
  * plugins/ocp: Add set feature EOL/PLP failure mode no-uuid option
  * plugins/ocp: Refactor to clear feature identifier C1h and C3h
  * plugins/ocp: Add support for clear PCIe correctable error counters feature
  * nvme-doc: update man page for supported-log-pages (bsc#1209550)
  * plugins/ocp: OCP 2.0 field updates for SMART cloud log
  * nvme: Fix parameter limit range
  * fdp: Fix wrong Reclaim Unit Handle Status size
  * plugins/ocp: Add support for EOL/PLP failure mode feature
  * nvme-print: Fix printing of u32 values
  * nvme: Fix invalid memory access in show_registers
  * util: Add argconfig seen flag parameter to check if feature NSID set
  * nvme-print: fix segfault in supported-log-pages json output
  * fabrics: Fix ordering for auto connect services (bsc#1208075)
  * nvme.c: Check Firmware Update Granularity in fwdl
  * log: high latency timestamp issue
  * nvme: Align get feature data buffer length by page size to allocate
  * nvme: Continue get feature on invalid NS error to get multiple feature ids
  * plugins/ocp: SMART cloud log bug fixes.
  * Made temperature readouts in line with the SI.
  * Changed 'Kelvin' to 'kelvin', as recommended by the BIPM.
  * plugins/ocp: Fix whitespace and style issues
  * util: Revert JSON output to plain numbers
  * nvme: Add rae argument to telemetry-log command
  * nvme: Refactor get telemetry log page helper
  * nvme: Factor out parse telemetry log da element
  * nvme: Fix type in error message
  * unit: Add test-argconfig-parse
  * nvme: Use chunked read in get_log()
  * nvme: Use fprintf for error message logging in get_log()
  * nvme: fix /dev/spkd/ typo
  * doc: --storage-tag-check doesn't take any arguments
  * fabrics: Ensure host-traddr/iface consistency for "connect-all"
  * nvme-print: print the nvme generic name in json output as well
  * plugins/innogrit: modify command opcode for eventlog and cdump
  * completion: fix typo, add missing args
  * plugins/wdc: Fix data Formatting for Latency Monitor Log Page
  * nvme: Make json-c optional again
  * nvme-print: Move JSON printing function into a new file
  * plugins/solidigm: Use json_create_object wrapper
  * plugins/solidigm: Use struct json_object instead of typedef
  * fabrics: No need to sanitize trsvcid and traddr
  * docs: Fixed typos and missing options
  * util: Numbers without any suffix are also valid
  * util: Update suffix_binary_parse API
  * util: Reimplement suffix_si_parse
  * nvme: Filter out status flags for get feature command
  * util: Add crc32 implementation
  * nvme-print: Use attrs_info as key for Zone Attributes Information
  * nvme: Support effects-log for fabrics ctrl
  * plugins/solidigm: Add uuid index resolution
  * plugins/ocp: Use network byte order for OCP UUID value
  * json_discovery_log: avoid buffer overrun (bsc#1207435)
  * Fix connect nbft regressions (bsc#1209905)
  * Fix auto connect conditions (bsc#1210105)
  * Fix auto boot for NBFT connections (bsc#1211647)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1695988800">- Update to version 2.6 (jsc#PED-3610 jsc#PED-4879 jsc#PED-5061):
  * nvme: allocate payload buffer in create-ns command
  * nvme-print-stdout: Add CAP.CPS and CAP.NSSS human readable outputs
  * nvme: Add output-format default option instead of argconfig json option
  * nvme: fw-download offset only describes FW offset, not file offset
  * unit: add locale number test
  * util: handle utf-8 thousend separators correctly
  * nvme: Change to use NVME_ARGS verbose default option from OPT_ARGS
  * fabrics: Fix NVMF_ARGS macro to use parameter n correctly
  * nvme: Add verbose default option to show command debug output
  * util: Fix to set argconfig output format json option correctly
  * util: Split argconfig output format json function to set and get
  * nvme: Spport Phy Rx Eye Opening Measurement Log
  * nvme: Introduce nvme_realloc function
  * nvme: Fix for fdpa reserved field printing
  * completion: add 'version' and 'help' to list
  * udev-rule: apply round-robin iopolicy on i/o subsystems alone (bsc#1215994) (bsc#1219086)
  * nvme: Add support for the OAQD ID controller field
  * plugins/solidigm: use static log macro to calc bitmask
  * plugins/ocp: Rename FW activation history command
  * nvme: auto free nvme_dev resource
  * nvme: allocate aligned payloads for all nvme commands
  * nvme: introduce alloc helper with alignment support
  * util: add cleanup function for generic memory allocations
  * nvme: append huge to nvme_{alloc|free} function
  * nvme: fw_download use nvme_alloc only
  * fabrics: Removing duplicate code and moving to libnvme
  * nvme-print: omit size of protection information
  * tree: Modify label name close_fd to close_dev
  * fabrics: For TCP/RDMA, compare IP addresses with nvme_ipaddrs_eq() (bsc#1213768)
  * fabrics: lookup_discovery_ctrl() must look under host and not root (bsc#1213768)
  * nvme: Do not map status to errno codes
  * completions: Add bash completion for DSSD Power state feature(FID: C7h)
  * Documentation: Add document for DSSD Power state feature(FID: C7h)
  * plugins/ocp: Add DSSD Power state feature(FID: C7h)
  * avoid casting pointer arguments to argconfig functions
  * nvme-print: Add support for EGFEAT, Domain Identifier, TEGCAP and UEGCAP
  * nvme-print: Fix endurance_log whitespace changes
  * nvme: Fix retrieval of telemetry log up to specified data area.
  * nvme: Update list secondary command
  * wdc: Add support for SN861 drive
  * util: Set errno to 0 before strtol/stroul call
  * nvme: Revert passthru and submit_io to print status to stderr from stdout
  * plugins/zns: Fix offset in report zones
  * nvme-rpmb: Fix nvme_show_id_ctrl_rpmbs() definition error
  * fabrics: Use corresponding hostid when hostnqn is generated
  * json: fix seg. fault converting NULL to JSON string (bsc#1213762)
  * nvme-cli: fix extended metadata size calculation
  * nvme-print: Show subsystem iopolicy (bsc#1124564)
  * nvme-print-stdout: Do not show non reachable ns in namespace topology (bsc#1212598)
  * nvme-print: Fix show-topolocy for ctrls
  * doc: Fix typo in documentation
  * nvme-print-stdout: fix storage tag size label
  * nvme-print-stdout: List only ctrls which are part of ns (bsc#1212598)
  * nvme-print-stdout: Support subsys reachable from several hosts (bsc#1212598)
  * ccan: Add htable, strset and dependencies (bsc#1212598)
  * ccan: Remove unused documentation (bsc#1212598)
  * nvme-print: Split max power flags
  * nvme-print: fix counter while looping through uuid_list (bsc#1212598)
  * fabrics: only look for matching ctrl on same host (bsc#1213768)
  * README: Correct hugetlbfs spelling error
  * util: Delete unused CFG_BOOL argconfig type as duplicated with CFG_FLAG
  * util: Set LC_ALL=C as default if -H option is not used
  * nvme: Add support for create-ns command endg-id option parameter
  * nvme-print: fix argument order for show functions
  * plugins/solidigm: Added Marketing Name Log support for Solidigm.
  * nvme-print: Remove left overs from refactoring
  * nvme-print: Move num argument parsing into callbacks
  * nvme-print: Fix typo in callback definition
  * scripts: Make release script project neutral
  * scripts: Update update-docs.sh scripts
  * scripts: Execute the scripts from toplevel directory
  * scripts: Move helper scripts to a central place
  * docs: Update file modes
  * doc: Add information on --context
  * nvmf-autoconnect: Annotate the context to autoconnect
  * fabrics: Add support for volatile configuration
  * plugins/solidigm: Formated log page directory table consistently with "nvme list" format.
  * plugins/solidigm: Added Identify controller VU extensions parsing.
  * nvme-print-json: Print PCI pysical slot number for controller
  * nvme-print-stdout: Print PCI physical slot number for controller
  * libnvme.wrap: Bump to 42ac453
  * plugins/nbft: Use common code to parse print flags
  * fabrics: Do not print device on connect per default
  * fabrics: Revert 'fabrics: prevent 'nvme connect' to well-known discovery NQN'
  * nvme-print: fix wrong list-subsys output when ns are attached to different ctrls
  * plugins/micron: Correct NULL pointer checking error
  * plugins/innogrit: Add vendor command get-eventlog and get-cdump
  * nvme: Use correct data buffer size
  * nvme: Fix quoted string split across lines to use quoted newline
  * plugins/zns: Fix zns.c linux kernel check patch errors and warnings
  * plugins/ymtc: Fix ymtc-nvme.c linux kernel check patch warning
  * plugins/ymtc: Fix ymtc-nvme.c space indentation to tab indentation
  * plugins/virtium: Fix virtium-nvme.c linux kernel check patch errors and warnings
  * plugins/transcend: Fix transcend-nvme.c linux kernel check patch errors and warnings
  * plugins/solidigm: Fix linux kernel check patch errors and warnings
  * plugins/shannon: Fix shannon-nvme.c linux kernel check patch errors and warnings
  * plugins/seagate: Fix seagate-nvme.c linux kernel check patch warnings
  * plugins/scaleflux: Fix sfx-nvme.c linux kernel check patch errors and warnings
  * plugins/netapp: Fix netapp-nvme.c linux kernel check patch errors and warnings
  * plugins/nbft: Fix nbft-plugin.c linux kernel check patch warnings
  * plugins/micron: Fix micron-nvme.c linux kernel check patch errors and warnings
  * plugins/micron: Fix micron-nvme.c space indentation to tab indentation
  * plugins/memblaze: Fix memblaze-nvme.c linux kernel check patch errors and warnings
  * plugins/memblaze: Fix memblaze-utils.h space indentation to tab indentation
  * plugins/memblaze: Fix memblaze-nvme.c space indentation to tab indentation
  * plugins/intel: Fix intel-nvme.c linux kernel check patch errors and warnings
  * plugins/inspur: Fix inspur-nvme.c linux kernel check patch warnings
  * plugins/inspur: Fix inspur-nvme.c space indentation to tab indentation
  * plugins/innogrit: Fix innogrit-nvme.c linux kernel check patch errors
  * plugins/huawei: Fix huawei-nvme.c linux kernel check patch errors and warnings
  * plugins/fdb: Fix fdb.c linux kernel check patch warnings
  * plugins/dera: Fix dera-nvme.c linux kernel check patch errors and warnings
  * plugins/amzn: Fix amzn-nvme.c linux kernel check patch error and warnings
  * plugins/wdc: Fix wdc-utils.c linux kernel check patch errors and warnings
  * plugins/wdc: Refactor wdc-nvme.c for linux kernel check patch errors and warnings
  * util: Move falltrhough feature check to meson.builds
  * ocp: Add eol plp failure mode json outputs
  * nvme-print: Add nvme show result function
  * nvme-print-json: Add json output result function
  * nvme-print: Fix nvme_show_error() to call va_end() for json output format
  * nvme: Fix nvme format block-size option handling
  * Revert "nvme: Masks SSTAT in sanize-log output"
  * fabrics: Fix NVMF_ARGS macro indentation error
  * Documentation: Add document for OCP Device capability(LID: 0xC4) log page
  * completions: Add bash completion for OCP Device capability(LID: 0xC4) log page
  * plugins/ocp: Add Device capability(LID: 0xC4) log page
  * udev: fix warning reported by udevadm verify
  * fabrics: fix conditions in nvmf-autoconnect.service
  * fabrics: Change NVMF_OPTS as NVMF_ARGS to fix linux kernel check patch error
  * nvme: Split passthru commands read output
  * nvme: Fix io-passthru command read metadata output
  * plugin/ocp: Added implementation for 0xC1 log page
  * util: Fix suffix_si_parse to parse no decimal point but suffix value correctly
  * completions: Add zsh option values handling for sanitize command action
  * completions: Add ocp sub commands zsh completion
  * completions: Add ocp commands zsh completion
  * completions: Add ocp commands bash completion
  * nvmf-autoconnect: restart service to avoid dropping AEN
  * solidigm: Reduce memory usage in supported log pages feature
  * solidigm: Changes to supported log pages feature requested by review
  * solidigm: Add supported log pages log feature to Solidigm plugin
  * plugins/ocp: Added ocp unsupported requirements log page
  * completions: Add bash option values handling for sanitize command action
  * doc: Correct nvme-show-hostnqn command NAME description
  * completions: Add missing zsh commands descriptions
  * plugins/wdc: Extend SN530 support.
  * Fix incorrect article 'an' as 'a' to use for descriptions and message
  * nvme: Set effects-log command csi option help message string
  * completions: bash: Delete unsupported id-iocs command options
  * completions: bash: Add id-domain command
  * completions: Fix nvm-id-ns-lba-format command zsh definition
  * completions: Add json command option
  * nvme: Fix get-feature command sel parameter check to allow value 8
  * util: Delete unnecessary argconfig definitions OPT_VAL and CFG_VAL
  * util: Delete argconfig value type to add option value as va lists instead
  * util: Split to set argconfig option value
  * util: Delete argconfig value length to calcurate instead
  * nvme: Change sanitize command action option to use argconfig parse value
  * util: Add argconfig parse value function
  * util: Delete unused argconfig subopts type
  * util: Delete unused argconfig file types
  * util: Delete unused argconfig help function
  * nvme-wrap: do_admin_args_op should not clear args timeout
  * nvme: Fix linux kernel check patch warnings
  * nvme: Fix linux kernel check patch errors
  * plugins/ocp: Add telemetry-log command to OCP plugin
  * plugins/ocp: Add OCP set latency monitor feature command
  * plugins/ocp: Fix endianness in Latency Monitor Log output
  * plugins/ocp: Add missing fields in Latency Monitor Log
  * plugins/ocp: Fix typos in Latency Monitor Log
  * plugins/ocp: Reorganize OCP plugin source code
  * tests: Add tests for controller reset
  * plugin/solidigm: Added vs-internal-log command.
  * nvme: Add nvme_show_perror to use instead of perror for json output
  * nvme-print-json: Use vasprintf instead of vsnprintf to allocate string
  * nvme: fix rnlpt to_string() values.
  * nvme: fix io_mgmt args parse error
  * fdp: set-events feature is saveable
  * fabrics: Return errno value as negative
  * fabrics: Fix linux kernel check patch errors and warnings
  * nbft: add the nbft show plugin
  * nbft: added NBFT v1.0 table support (jsc#PED-1449)
  * nbft: make lookup_ctrl function public
  * nvme: Fix indentation errors around nvme show error API
  * nvme: Check validate output format err value instead of flags
  * nvme: Use nvme show error API to outptu stderr messages for json format
  * util: Check output format json for json error message output
  * nvme-printf: Add show error function for nvme list command json output
  * nvme: Add zns specfic field for create ns
  * nvme: Add ns-mgmt host software specified fields
  * nvme: Add dtype, dspec on write-zeroes, write-uncor
  * nvme-print: Add new fields print on id directive
  * nvme-print: Add VWCNP on NSFEAT of id-ns
  * nvme: Fix format command to skip to reread NSID all block device
  * plugins/solidigm: Fixes and clean-up of Telemetry parse code. Fixed parsing of 64 bit values. Fixed COD field name. Fixed compilation warnings when compiling for 32 bit. Added missing free(). Consolidated single entry function to telemetry parser. Consolidated use of integer types.
  * doc: Documentations maintenance changes
  * doc: Add nvme-mi-send command documentation
  * doc: Add nvme-mi-recv command documentation
  * doc: Add clear-pcie-correctable-error-counters command documentation
  * doc: Add eol-plp-failure-mode command documentation
  * plugins/solidigm: Add firmware activation history log to Solidigm plugin
  * plugins/ocp: Add firmware activation history log to OCP plugin
  * nvme-print: Use enum nvme_print_flags for nvme_show_id_ctrl
  * nvme: Add support for NVMe-MI send command
  * nvme: Use stdout for passthru and submit_io commands success messages
  * nvme: Fix passthru command function indentation errors
  * nvme: Add support for NVMe-MI receive command
  * fabrics: fix fc config JSON file handling (bsc#1210089)
  Refresh 0100-harden_nvmf-connect@.service.patch
- Fix install path for nvme-regress script</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420800">- Enable test during build (bsc#1207686)
- Drop minimum version meson dependency
- Add asciidoc dependency
- Build documentation when requested</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696852800">- Use fixed timestamps for documentation allowing reproducable builds
- Announce nvmeof-boot-support support via Provides
- Filter rpmlint warnings for systemd-service-without-service_ macros
- Add missing service files for NBFT feature
  * add 0001-fabrics-autoconnect-add-service-unit-for-connecting-.patch
  * add 0002-fabrics-add-udev-rule-to-avoid-renaming-nbft-interfa.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1697112000">- Add missing jsc# and bsc# tracking entries in change log.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1702987200">- Update to version 2.7:
  * nvme-print-json: include vs for identify namespace
  * nvme-print-stdout: enhance connect message (bsc#1219086)
  * fabrics: fix connect error if hostid file does not exist (bsc#1219086)
  * fabrics: fix invalid output format error during nvme connect (bsc#1219086)
  * wdc: Fix vs-smart-add-log Command for SN650 and SN655
  * nvme: restric hmac options for gen-tls-key (bsc#1219086)
  * wdc: Fix UUID index fallback mechanism
  * plugins/ocp: Add OCP Telemetry String log page, Telemetry log page
  * completions: Add bash completions for telemetry string log page
  * plugins/solidigm: Added OCP 2.0 compatibility version command
  * plugins/solidigm: Added OCP 2.0 vs-drive-info command.
  * plugins/ocp: Fix printing order of various Latency Monitor Log buckets
  * nvme: validate output format split status from flag return value
  * nvme: simplify cleanup_nvme_dev()
  * cleanup: remove unused cleanup_charp()
  * wdc: Add support for SN861 2nd pci device id
  * nvme: replace libhugetlbfs with mmap and madvise
  * util/mem: move alloc helper to util section
  * nvme: auto cleanup filedescriptors
  * nvme: auto cleanup buffers
  * nvme: return error code in get_persistent_event_log
  * nvme: sanitize nvme-gen-tls-key
  * nvme: print out the resulting TLS identity for 'nvme check-tls-key'
  * nvme: Add version '1' identifier for nvme-gen-tls-key
  * subprojects/libnvme: update wrapper for TP8018
  * plugins/solidigm: Added re_sku_count smart atrribute
  * doc: Fix nvme-connect manpage --application option string
  * plugins/ocp: changed command clear-pcie-correctable-error-counters to match OCP 2.0 spec.
  * plugins/solidigm: Added command to clear PCIe Correctable Error Counters according to OCP 2.0
  * plugins/ocp: Reorganized clear feature code for better reuse
  * nvme: fixup length calculation for 'nvme gen-tls-key --secret'
  * doc: remove invalid hostkey info for --dhchap-secret
  * nvme-print-json: use human helper everywhere
  * nvme-print-json: remove obj_print helper
  * plugins/ocp: update nvme_show_select_result call
  * mailmap: only show contributer's name
  * nvme-print-json: Change to report status and message in array
  * nvme-print-json: Change to report feature select in array
  * nvme-print-json: Change to report error and data in array
  * nvme-print-json: Add show_init/finish calls to report features in array
  * nvme-print: Add nvme_show_error_status() to merge error message and status
  * nvme-print-json: Use r instead of root and use obj_add_***(r, ..., ...)
  * nvme-print-json: Delete static const char string global variables
  * nvme-print-json: Add remaining controller registers readable format
  * nvme-print-json: Add readable format cap, vs, cc, csts, nssr and crto registers
  * nvme-print-json: Combine duplicated json key and val string variables
  * nvme-print-json: Replase json_array_add_value_string() to array_add_str()
  * nvme-print-json: Replase json_object_add_value_uint128() to obj/root_add_uint128()
  * nvme-print-json: Replase json_object_add_value_object() to obj/root_add_obj()
  * nvme-print-json: Replase json_array_add_value_object() to array_add_obj()
  * nvme-print-json: Replase json_object_add_value_array() to obj/root_add_array()
  * nvme-print-json: Replase json_object_add_value_uint() to obj/root_add_uint()
  * nvme-print-json: Replase json_object_add_value_int() to obj/root_add_int()
  * nvme-print-json: Replase json_object_add_value_uint64() to obj/root_add_uint64()
  * nvme-print-json: Replase json_object_add_value_string() to obj/root_add_str()
  * nvme-print-json: Update feature_show_fields_*** to use root/obj_add_***()
  * nvme-print-json: Update lba_status_log to use root_add_***() and obj_add_***()
  * nvme-print-json: Replace lba_status_log printf() to root_add_result()
  * nvme-print-json: Add list_item print function
  * nvme-print-json: Add lba_status_info print function
  * nvme-print-json: Add lba_range print function
  * nvme-print-json: Add id_ctrl_rpmbs print function
  * nvme-print-json: Unify json_list and jroot object names to root
  * nvme-print-json: Add json_zns_changed print function
  * nvme-print-json: Add root_add_result() to output result message
  * nvme-print-json: Split persistent_event_log print function
  * nvme-print-json: Remove unnecessary string newline code
  * nvme-print-json: Replace effects_log_list print to use json_print()
  * nvme-print-json: Print persistent_event_log no log data result correctly
  * nvme-print-json: Add static "result" and "erorr" strings variables
  * nvme-print-json: Add single_property printf function
  * nvme: Replace get feature command stderr output to nvme_show_error()
  * nvme-print-json: Change d() output to use d_json()
  * nvme: Fix get-feature command mixed stdout and json outputs
  * nvme-print-json: Add remaining feature fields print functions
  * nvme-print-json: Update formatting and codying style
  * build: Add -std=c99 to CFLAGS for muon on CentOS 7
  * fabrics: add udev rule to avoid renaming nbft interfaces
  * fabrics: autoconnect: add service unit for connecting NBFT subsystems
  * fabrics: autoconnect: explicitly express module dependency
  * Updates to codeql config
  * libnvme-wrap: exit on VOID_FN lookup failure
  * plugins/ocp:Added the ocp C6h feature api
  * plugin/ocp_fid_c6h:Added the ocp C6h feature api
  * nvme-copy: support cross-namespace copy
  * nvme/plugins: fix mismatch operator
  * nvme: fix overflow possiblity
  * nvme: reduce identify cmd issue
  * nvme: allow set-features to take input from stdin
  * Fix common misspellings from codespell project
  * nvme-print: Correct to print correct ascii character string length
  * print-stdout: print Host Behavior Support correctly
  * build: Bump libnvme wrap
  * plugins/solidigm: Added support for temperature statistics log page
  * Add support for codeql sweeps
  * doc: Add virt-mgmt command
  * doc: Add id-uuid command
  * doc: Add list-secondary command
  * doc: Add id-ns-granularity command
  * doc: Add nvme commands --output-format and --verbose options
  * completions: Add nvme-mi-recv nad nvme-mi-send commands completions
  * completions: Change short option -o and -v duplicated to upper case
  * doc: Change short option -o and -v duplicated to upper case
  * nvme: Change short option -o and -v duplicated to upper case
  * nvme: Change phy-rx-eom-log command to use NVME_ARGS instead
  * plugins/memblaze: Add smart-log-add and latency-feature functions
  * plugins/solidigm: internal-logs Telemetry auto detect last data area.
  * nvme: Change to use NVME_FLBAS_META_EXT() macro to check flbas value
  * nvme-print-json: Add host memory buffer and timestamp features print functions
  * nvme-print-json: Add feature fields print functions
  * nvme-print-json: Add TMPTH feature print function
  * nvme-print-json: Add show_feature_fields print function
  * nvme-print-json: Add select_result print function
  * nvme-print-json: Use json_print to print and free object
  * nvme-print-json: Add lba_status print function
  * nvme-print-json: Combine variable definition and setting value
  * nvme-print-json: Add id_iocs print function
  * nvme-print-stdout: Fix coding style errors
  * nvme-print-json: Add directive print function
  * nvme: Fixed segmentation fault when getting host initiated telemetry
  * plugins/wdc: enhanced SN861 device support
  * plugins/wdc: cleanup line lengths
  * nvme: do not include meta data for PRACT=1 and MD=8
  * nvme: use block-count arg if provided
  * build: bump libnvme to disable tests option
  * build: Add static build on CI target
  * nvme-print: Add nvme_zns_start_zone_list() API function
  * nvme-print: Add nvme_zns_finish_zone_list() API function
  * nvme-print-binary: Set list function to NULL if unimplemented
  * nvme-print-json: Change order list functions and set NULL if unimplemented
  * nvme-print-stdout: Fix to set stdout_list_item print function missed
  * plugins/solidigm: log page name extraction using nvme_log_to_string function
  * nvme-print: Added missing logpage names in nvme_log_to_string function
  * udev-rules: rename netapp udev rule (bsc#1219086)
  * udev-rules: set ctrl_loss_tmo to -1 for ONTAP NVMe/TCP (bsc#1219086)
- Remove upstreamed patches
  * remove 0001-fabrics-autoconnect-add-service-unit-for-connecting-.patch
  * remove 0002-fabrics-add-udev-rule-to-avoid-renaming-nbft-interfa.patch
- Update spec file
  * remove libhugetblfs depedency
  * update NetApp udev rule file name</changelog>
  <changelog author="daniel.wagner@suse.com" date="1703160000">- Update to version 2.7.1:
  * nvme-print-json: Revert field name changes (bsc#1218306)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1707912000">- Update to version 2.8:
  * nvme-print-json: append array object in json_support_log
  * sed: Add plugin for basic SED Opal operations (jsc#PED-5061)
  * don't include newlines in already wrapped text
  * nvme: do not include meta data for PRACT=1 and MD=8 (version 2)
  * create-ns: align the namespaces to 1Mib boundaries when using SI suffixes
  * doc: Fix config-schema.json's URL
  * plugins/solidigm: Compressing vs-internal-log log files into zip file.
  * nbft: do not issue an error if ACPI tables are missing
  * nbft: fixup include for libnvme
  * doc: Fix short option name for cfg-file
  * completions: added Solidigm plugin to autocomplete scripts
  * nvme: Remove unused cfg argument from NVME_ARGS() macro
  * nvme: fix directive receive identify offsets
  * nvme-fabrics: enable option 'concat'
  * build: Update libnvme wrap
  * plugins/wdc: Add Debug Log Collection Support
  * nbft: fix tcp/dhcp address fallback retry (bsc#1218873)
  * nvme: use correct telemetry log size
  * nvme-print: fix typo in list verbose output (bsc#1219086)
  * nvme: print inserted tls key for check-tls-key (bsc#1219086)
  * plugins/wdc: Plugin fixes and updates
  * fabrics: move hostid/hostnqn warnings to verbose level (bsc#1219086)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737600">- Update to version 2.9:
  * nvme-print: expand the maximum field length to prevent misalignment
  * plugins/spdk: plugin to list SPDK subsystems
  * nvme-print: check if controller belong to SPDK
  * plugins/spdk: plugin to list SPDK controllers
  * nvme-print-stdout: fix ASQB, ACQB and BMBBA prints
  * build: bump libnvme wrap
  * nvmf-autoconnect: fix string encoding
  * nvme: identify primary ctrl do not accept nsid
  * nvme-wrap: remove unused nvme_cli_get_log_ana_groups()
  * nvme-print-json: use admin queue attributes definitions
  * nvme-print-json: use CSTS definitions
  * nvme-print-stdout: use POWER_OF_TWO macro
  * nvme-print-json: use controller configuration definitions
  * nvme-print-json, nvme-print-stdout: add tertiary version number
  * nvme-print-json: use NVME_MAJOR and NVME_MINOR definitions
  * nvme-print-json: use NVME_BOOT_PARTITION_INFO field definitions
  * nvme-print-json: add support telemetry log create event in PEL
  * nvme-print-json: add support set feature event in PEL
  * nvme-print-json: add obj_d() function
  * nvme-print-json: add obj_add_uint_0nx() function
  * meson.build: Fix spelling of sed-opal.h filename
  * sed_opal: Only build when we really have sed_opal headers
  * nvme: fix error path if write() fails in get_telemetry_log()
  * plugins/solidigm: Additional LID for temperature statistics.
  * plugins/solidigm: Improved Solidigm UUID index detection.
  * nvme-print-stdout: Add CSTS.ST register stdout print
  * nvme-print-stdout: Use NVME_CMIC definitions
  * nvme-print: Use NVME_UNIT definitions
  * nvme-print-stdout: Use NVME_CMBMSC/STS/EBS/SWTP definitions
  * plugins/ssstc: add a new plugin for SSSTC driver
  * nvmf-connect: systemd hardening effort
  * plugins/ocp: Adjusted variable type size carrying UUID index to 8 bit.
  * nvme: fix security buffer allocation size
  * nvme: Change fw-download xfer initialization to set 0
  * nvme: Add fw-download warning message for FWUG alignment error
  * plugins/ocp: Split ocp_get_uuid_index() into find and get functions.
  * nvme: fix mem leak in multiple key related functions (bsc#1223331)
  * fabrics: fix mem leak in nvmf_check_hostid_and_hostnqn() (bsc#1223331)
  * nvme-print-stdout: Use NVME_BPRSEL definitions
  * nvme-print-stdout: Use NVME_BPINFO definitions
  * nvme-print-stdout: Use NVME_CMBSZ definitions
  * nvme-print-stdout: Use NVME_CMBLOC definitions
  * Revert "logging: fix error handling for ioctl passthru wrappers"
  * fabrics: align identify command payload
  * ocp: Unify line start spacing as tabs
  * ocp: support OCP DSSD Async Event Config feature
  * nvme: Add support for get-reg and set-reg commands
  * nvme-print-json: Add register print functions
  * nvme-print-stdout: Add register print functions
  * nvme-print: Add register print functions
  * nvme: Refactor mmap_registers to add writable parameter
  * nvme-print: Change PMRSZU string function as unit string
  * nvme-print: Refactor CMBLOC and PMRSTS registers function
  * logging: fix error handling for ioctl passthru wrappers
  * nbft: Fix scandir() error check
  * nbft: Refactor connection attempt out
  * nvme-print: Use EOM optional data present macros changed
  * nvme-print: Print cntlid number for controller (bsc#1224024)
  * nvme: check-tls-key fails despite having hostnqn file (bsc#1223331)
  * nvme: print retained key for gen-tls-key's -i option too (bsc#1223331)
  * fabrics : allow host to create duplicate connections to target
  * fabrics: Fix fast_io_fail_tmo option
  * nvme-print-stdout: use admin queue attributes definitions
  * nvme-print-stdout: use CSTS definitions
  * nvme-print-stdout: use controller configuration definitions
  * nvme-print-stdout: use NVME_MAJOR and NVME_MINOR definitions
  * nvme-print-stdout: use FDP configuration attributes definitions
  * nvme: add new function 'tls_key' (bsc#1226197)
  * nvme: use library functions for importing and exporting TLS keys (bsc#1216982)
  * nvme: extend error message for ns scan failures
  * nvme-print-json: Bugfix status json key of sanitize-log
  * sed: update SED password when initalizing (bsc#1222168)
  * plugins/memblaze: add performance stats
  * plugins/memblaze: fix code mis-type error
  * plugins/memblaze: code refactor on applying __packed on more structs
  * plugins/memblaze: code refactor on using cleanup_nvme_dev
  * nvme: Fix to cleanup free raw_secret memory allocated
  * plugins/memblaze: code-format on leading indent and align
  * plugins/wdc: Fix narrow index variable type in for loop to __u32
  * plugins/wdc: Whitespace changes
  * nvme: Delete unused nvme root scanned
  * ocp: support OCP 2.5 Set Telemetry Profile feature
  * nvme: Don't seg fault if given device is not char/block device
  * nbft: Include SSNS index in error messages (bsc#1222026)
  * nbft: Pause logging for expected connection failures (bsc#1222026)
  * nbft: Silence connection failures for unavailable SSNS (bsc#1222026)
  * nbft: Fix 'verbose' argument type (bsc#1222026)
  * plugins/nbft: Implement verbose logging
  * plugins/nbft: Print the new SSNS flags
  * nbft: Fix uninitialized variable
  * plugins/nbft: Fix uninitialized variables
  * plugins/sed: Fix uninitialized variable
  * nvme-print-stdout: Fix uninitialized variable
  * nvme-print-json: Fix uninitialized variable
  * build: Switch default meson buildtype to 'debugoptimized'
  * nvme: do not scan topology when mmaping registers
  * nvme-print-stdout: Use NVME_BOOT_PARTITION_INFO field definitions
  * nvme-print-stdout: Use NVME_GET for MI commands supported and effects CSP
  * nvme-print-stdout: Use NVME_GET for FID supported and effects FSP
  * nvme-print-stdout: Use NVME_SET_FEAT_EVENT register definitions
  * nvme-print: Add PEL EHAI port identifier type printf function
  * build: bump libnvme wrap
  * ocp: fix for power-state argument checking
  * nvme: do not issue warning when nvme_core module is not loaded
  * wdc: Review changes and build fixes
  * wdc:  Fix timestamp displayed by vs-firmware-activate-history command
  * logging: Split to output ioctl latency by log info level (bsc#1231668)
  * nvme-print-stdout: Change hexadecimal value 0x prefix to use %#x
  * nvme-print-stdout: Fix LBA status DSLBA output as hexadecimal
  * nvme-print-stdout: Split line length exceeded 100 columns
  * nvme-print-stdout: Use NVME_PMRMSC register definitions to print
  * nvme-print-stdout: Use NVME_PMRSWTP register definitions to print
  * nvme-print-stdout: Use NVME_PMREBS register definitions to print
  * nvme-print-stdout: Use NVME_PMRSTS register definitions to print
  * nvme-print-stdout: Use NVME_PMRCTL_EN register definition to print
  * nvme-print-stdout: Use NVME_PMRCAP register definition to print
  * doc: Fix admin and io passthru cdw parameters description
  * doc: Add get-feature cdw11 and set-feature cdw12 parameters
  * micron-nvme: Unuse stat() to check if strMainDirName exists
  * doc: Fix get-property and set-property offset and value descriptions
  * doc: Fix documentation file mode 100755 to 100644
  * nvme-print-stdout: Fix channel configuration descriptors pointer
  * nvme-print-stdout: Check sscanf return value
  * nvme-print-stdout: Fix linux kernel check patch errors
  * nvme: Delete unusual fallthrough for cases have no body
  * nvme: Delete duplicated semicolon
  * nvme-print, common: Fix for whitespace change
  * logging: output ioctl debugging info (bsc#1231668)
  * nvme: track verbose level (bsc#1231668)
  * logging: track log level globally
  * logging: move logging code to a new file
  * nvme: update include for libnvme
  * nvme: remove unused declaration
  * build: bump libnvme wrap
  * nvme-netapp: add nspath tlv handling (bsc#1220971)
  * rpm: Add missing rule and service files
  * nvme-print-json, nvme-print-stdout: Use CHAR_BIT definition
  * nvme-print-stdout: Delete duplicated if condition checking line
  * ocp: Fix timestamp displayed by fw-activate-history command
  * wdc: Add support for the get-drive-status command to SN861
  * nvme-print: Fix nvme_host_metadata_type_to_string() indentation errors
  * nvme-print: Add PEL RCI port identifier type printf function
  * nvme-print-stdout: Use persistent event log RCI definitions
  * build: bump libnvme wrap
  * nvme: Add show-regs and get-property commands NSSD print outputs
  * nvme-print: print more details in ns-descs verbose output (bsc#1223331)
  * Revert "nvme-print-json: remove obj_print helper"
  * sed: Confirm entered password before initialization.
- drop systemd service harden file, upstream ships this patch.
  * remove 0100-harden_nvmf-connect@.service.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737601">- Update to version 2.9.1:
  * plugins/spdk: drop the plugin</changelog>
  <changelog author="daniel.wagner@suse.com" date="1722600000">- Update to version 2.10:
  * sed: Fix parsing of Discovery0 features
  * fabrics: avoid potential segfault in nvmf_dim() (bsc#1231668)
  * nvme: avoid segfault in show-topology (bsc#1226197)
  * fabrics: do not leak nvme_ctrl_t object on connect
  * nvme: extend help message when mmap regs fails
  * nvme: return -ENXIO value to open device if errno not set
  * wdc: OCP 2.5 Log Page Updates
  * fabrics: drop --quiet alias -S
  * fabrics: drop --disable-sqflow alias -d
  * fabrics: check if json config is existing (bsc#1231668)
  * plugins/ocp: fix UAF when printing telemetry log
  * nvme-print-stdout: fix persistent-event-log set feature event output
  * fabrics: do not report error when no modules are loaded when disconnecting
  * fabrics: use cleanup helper where possible
  * fabrics: print an error for ENOENT too
  * plugins/virtium: use time_t for time_stamp values
  * completions: add ocp set-error-injection command
  * doc: add ocp set-error-injection command
  * ocp: add set-error-injection command
  * nvme: use argconfig_parse_seen to check conditions
  * nvme: use proper mask to get correct lbafu value
  * utils: fix print formatting option
  * utils: cleanup includes in utils.h
  * utils: add missing header
  * nvme-print: Added print for two new fields for HMB feature
  * plugins/micron: Move OCP internal log parsing from Micron to OCP Plugin.
  * fabrics: remove unused _discover_from_json_config_file() argument
  * nvme: avoid unnecessary dup() + close() in io_mgmt_send()
  * util: remove unnecessary NULL check in cleanup_nvme_root()
  * nvme: use argconfig_parse_comma_sep_array_u16() in attach-ns
  * util: avoid duplication in argconfig_parse_comma_sep_array*()
  * util: remove redundant loop condition in argconfig_parse()
  * util: introduce is_null_or_empty() to avoid strlen()
  * util: reduce allocation sizes in argconfig_parse()
  * util: consolidate call paths to argconfig_parse_type()
  * util: reduce complexity of argconfig_parse_val()
  * util: reduce arguments passed to argconfig_parse_type()
  * util: remove empty default case in argconfig functions
  * util: remove unnecessary parentheses in argconfig_parse_type()
  * util: remove redundant cast in argconfig_parse_type()
  * util: inline argconfig_parse_byte()
  * util: remove redundant NULL check in argconfig_print_help()
  * util: use cleanup to avoid goto in argconfig_parse()
  * util: make argconfig_set_opt_val() a void function
  * util: remove argconfig_parse_val() declaration
  * util: remove argconfig CFG_SIZE type
  * wdc: Update and refactor the C0h log page parsing
  * ccan: Add freed pointer checking to delete strset member
  * fabrics: connect all hosts in config.json (bsc#1226216)
  * fabrics: refactore discover from json config (bsc#1226216)
  * fabrics: first read config before topology scanning (bsc#1226216)
  * fabrics: use helper to lookup default hostnqn/hostid (bsc#1226216)
  * fabrics: extend already connected message (bsc#1226216)
  * fabrics: use cleanup helper to free nvme root object
  * nvme: check MD size with PI size when PRACT set to 1
  * nvme-print: add new field added in TP4090
  * nvme-print-binary: add effects-log command output missed
  * completions: add ocp get-error-injection command
  * doc: add ocp get-error-injection command
  * ocp: add get-error-injection command
  * ocp: fix eol-plp-failure-mode command sel option value
  * doc: fix ocp eol-plp-failure-mode select short option
  * ocp: set UUID index for eol-plp-failure-mode command to get
  * nvme: fix verbose logging (bsc#1231668)
  * doc: fix micron ocp telemetry log parse title
  * nvme-rpmb: send RPMB_REQ_READ_RESULT for authentication key programming
  * plugins/micron: Add support for OCP telemetry log parsing
  * ocp: Update Plugin Version
  * nvme: fix lbaf inuse to use 6:5 bits
  * ocp: use NVME_ARGS macro definition by eol-plp-failure-mode command
  * nvme: extern NVME_ARGS macro definition
  * nvme: use _cleanup_free_ type buffer for get-feature command
  * plugins/ocp: Update telemetry string log page (C9h)
  * nvme-print-json: add get-feature command fahrenheit temperature output
  * nvme: add get-feature and id-ctrl commands fahrenheit outputs
  * nvme: delete smart-log command fahrenheit option
  * nvme-print: check locale to use temperatures in degrees fahrenheit
  * completion: add support for tls-key (bsc#1226197)
  * doc: add tls-key --revoke documentation (bsc#1226197)
  * doc: fix tls-key --keyfile shorthand (bsc#1226197)
  * nvme: add support to revoke TLS key (bsc#1226197)
  * nvme: return error code/message for TLS commands (bsc#1226197)
  * nvme: factor out import key function (bsc#1226197)
  * nvme: use cleanup helper to close file descriptor (bsc#1226216)
  * nvme-rpmb: use cleanup helper for STREAM objects
  * fabrics: use cleanup helper for STREAM objects
  * nvme: use cleanup helper for STREAM objects (bsc#1226216)
  * nvme: strip newline when parsing TLS key files (bsc#1226197)
  * nvme: use stdout for exporting TLS keys (bsc#1226197)
  * nvme: change _cleanup_file_ to _cleanup_fd_ (bsc#1226197)
  * common.h: Avoid using unsupported load/store instructions in arm64 VMs
  * ocp: OCP 2.5 Telemetry DA 1 and 2 Parsing Updates
  * nvme-print-stdout: refactor subsys config (bsc#1231668)
  * wdc: Fix compiler warning.
  * nvme: add flags type nvme_print_flags_t
  * nvme-print: Use 'unsigned int' instead of 'unsigned'
  * nvme: update parse_args() return value handling
  * nvme-print: Fix nvme_show_smart_log indentation error
  * nvme-print-stdout: Fix stdout_smart_log indentation error
  * nvme-print-binary: Fix binary_smart_log indentation error
  * completions: add smart-log command fahrenheit option
  * doc: Add smart-log command fahrenheit option
  * nvme: Add smart-log command fahrenheit option
  * nvme-print: add PEL vendor specific and TCG defined events strings
  * nvme-print: Print PEL reserved event string
  * completions: Add timeout option bash completions
  * completions: Add timeout option zsh completions
  * completions: Add io-mgmt-recv/send commands zsh completions
  * completions: Add /dev/nvme argument missed
  * completions: Change fw-activate command name to fw-commit
  * completions: Fix _nvme indentation errors (bsc#1226197)
  * completions: Fix bash-nvme-completion.sh indentation errors (bsc#1226197)
  * doc: Add nvme commands timeout option
  * nvme: Add support for delete-ns command timeout option
  * nvme: Change NVME_DEFAULT_IOCTL_TIMEOUT to use nvme_cfg timeout
  * nvme: Add nvme_cfg timeout default option
  * nvme: Add nvme_cfg global variable for NVME_ARGS default options
  * nvme: add helper function to get pif and sts value
  * nvme: choose PIF from QPIF if QPIFS supports and PIF is QTYPE
  * nvme: use libnvme's atomic ANA log page fetch
  * nvme: fix maximum ANA log page length calculation
  * nvme-print-json: add missing va_end()
  * fabrics: skip namespace scan for fabric commands
  * nvme-print: print the new fields added in TP4141a
  * plugins/ocp: underflow + index fixes for telemetry
  * plugins/ocp: Add ocp TCG Configuration Log Page
  * nvme-print-stdout: Add helper function to print PIF in string form
  * doc: fix format command info
  * nvme: telemetry: report the correct error if the ioctl() fails.
  * nvme-print: add the cancel opcode to the nvme_cmd_to_string() list
  * doc: fix ocp format issues
  * nbft: Reuse existing discovery controller
  * nbft: Skip SSNS records pointing to well-known discovery NQN
  * nbft: Perform actual discovery
  * util/cleanup: Add cleanup for struct nvme_fabrics_uri
  * fabrics: Make some symbols public (bsc#1226216)
  * nvme-print-stdout: fix format index in stdout_nvm_id_ns
  * plugins/solidigm: Added workload-tracker command
  * plugins/solidigm: Added extra VU fields to id-ctrl
  * nvme-print-stdout: print MEM bit of CTRATT field
  * nvme-print-stdout: fix to print the log line by line
  * fabrics: Always pass hostid and hostnqn (bsc#1226216)
  * plugins/ssstc: Replace __uint16_t with uint16_t
  * plugins/solidigm: Added log pages to vs-internal-logs
  * sed: perform a tper revert after lsp revert
  * plugins/nbft: Use default library logging
  * docs: Add missing OCP plugin docs to meson
  * ocp: Switch OCP plugin to use semantic versioning
  * nvme: fix fw-commit MUD result message
  * sed: only re-read partition table after unlock.
  * nvme-print-json: Fix LBA status DSLBA output as hexadecimal
  * nvme-print-json: Use NVME_PMRxxx register definitions to print
  * nvme-print-stdout: Fix PMRWBM register name
  * nvme-print-json: Fix channel configuration descriptors pointer
  * nvme-print-json: Fix linux kernel check patch errors
  * nvme-print: Added "Command and Feature Lockdown" string to LID 0x14
  * plugins/innogrit: `u_char` -&gt; `unsigned char`
  * nvme: Use C99 types for uint32_t
  * nvme-print-stdout: print frl1/2/3 values for zns id-ns
  * solidigm: Eliminate &lt;linux/limits.h&gt;
  * nvme: remove double free in persistent-event-log
  * ocp: Add Get DSSD Power State Feature (FID: C7h)
  * nvme: initialize default library logging
  * nvme: use cleanup helper for nvme_root_t objects (bsc#1226197)
  * doc: add nvme connet ctrl-loss-tmo description
  * plugins/solidigm: Automatic enabling Data Area 4 when retrieving Telemetry.
- always build the docs
  * add 0001-docs-rename-ocp-unsupported-req-log-file.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1730376000">- Update to version 2.11:
  * docs: update check-tls-key arguments
  * nvme: add support to append TLS PSK to keyfile for check-tls-key
  * nvme: return correct error code in append_keyfile
  * docs: nvme-id-doman: dom{ia =&gt; ai}n
  * ocp: fix latency monitoring data structure entry endian
  * ocp: fix TCG configuration log endian
  * ocp: fix firmware activation history entry endian
  * docs: update gen-tls-key arguments
  * nvme: add support to add derive TLS PSK to keyfile
  * nvme: rename identity to version
  * nvme: set file permission for keyfile to owner only
  * nvme: export tls keys honoring version and hmac
  * nvmf-keys: add udev rule to import tls keys
  * docs: update TLS options
  * fabrics: add support to connect to accept a PSK command line
  * fabrics: add support to connect to accept a configuration
  * nvme: use unsigned char for hmac and identity
  * nvme-print: Add Sanitize Media Verification Event in PEL log
  * netapp-ontapdev: add err msg for no ontapdevices
  * netapp-smdev: add err msg for no smdevices
  * doc: Add sanitize command emvs option
  * ocp: combine to use GUID length definitions
  * nvme: update tls_key() handling
  * nvme-print-stdout: print VERS bit of SANICAP field
  * nvme: add EMVS support to sanitize command
  * ocp: remove callback function cast
  * doc: added commit conventions to contribution guidelines
  * ocp: fix ocp-print-stdout.c indentation error
  * ocp: fix ocp-nvme.c indentation errors
  * ocp: build ocp-nvme.c and ocp-telemetry-decode.c without json
  * ocp: split TCG configuration log print codes
  * ocp: split telemetry string log print codes
  * ocp: split device capabilities log print codes
  * ocp: split error recovery log print codes
  * ocp: split unsupported requirement log print codes
  * ocp: split latency monitor log print codes
  * ocp: move ocp telemetry log print function into ocp-print
  * ocp: split smart extended log print codes
  * ocp: split ocp-fw-activation-history print codes
  * plugins: update meson.build file to always build ocp plugin
  * ocp-print: move json code into separate files
  * nvme-print-json: display only verbose output
  * ocp-nvme: ocp plugin version update
  * nvme-print: print KV command set page header
  * doc: show where self-test results can be found
  * plugins/memblaze: fix a wrong id on smart-log-add
  * plugins/dapustor: smart-log-add fix
  * plugins/sed: add sid password change (bsc#1229677)
  * plugins/solidigm: Automatic retry smaller log chunk size.
  * ocp-nvme: Add LMDATA-37 for Latency Monitor Log
  * ocp-nvme: remove ocp log page version checking
  * wdc: Fix for Reading WDC C2 Vendor Unique Log Page
  * ocp: Fixes for OCP 2.5 Telemetry DA1 FIFO Event Parsing
  * nvme-print-json: update JSON verbose output for nvm-id-ctrl (bsc#1231668)
  * wdc: Add Support for SN5100S
  * nvme: Support show-regs for nvmeof
  * ocp: fix option handling in internal-log
  * Documentation: Added solidigm plugin commands
  * wdc: add support for SNTMP drive
  * nvme-print: print NSSES field of CAP register
  * ocp: fix GUID output
  * nvme-print-json: print controller register values in offset order
  * nvme-print-json: print CMBEBS and CMBSWTP in json format
  * nvme-print-stdout: update changed-ns-list-log output (bsc#1231668)
  * nvme: fix uninitialized value in error-log (bsc#1231668)
  * nvme: fix to convert metadata size to native byte order
  * nvme-print: fix error information log page endianness error
  * completions: add get-feature command changed option
  * doc: add get-feature command changed option
  * nvme: separate get NVME_GET_FEATURES_SEL_CHANGED definition
  * nvme: use NVME_GET_FEATURES_SEL definitions
  * nvme-print-stdout: use NVME_CTRL_OAES definitions
  * completion: add ocp set-telemetry-profile to zsh
  * completion: add solidgm work-tracker binding
  * plugins/solidigm: Added Workload Tracker Triggers and Wall Time
  * ocp: include util/types.h to use nvme_uint128_t
  * ocp: fix to set log data pointer allocated
  * nvme: use NVME_CHECK() to check get features select field value
  * ocp: split ocp-hwcomp log
  * completions: add ocp hardware-component-log command
  * doc: add ocp hardware-component-log command
  * ocp: add hwcomp log json output
  * ocp: add hwcomp log command list option
  * ocp: add hwcomp log command comp-id option
  * ocp: add hwcomp dummy definition
  * ocp: add support for hwcomp log page
  * nvme: use NVME_CTRL_FNA definitions
  * netapp-smdevices: print single device output too (bsc#1231668)
  * netapp-smdevices: segregate print routines (bsc#1231668)
  * Add Support for new SN655 PCI Device ID
  * nvme-print-json: extern json object add functions
  * ocp: add SMART / health information extended log page version 4
  * ocp: add error recovery log page version 3
  * ocp: add get-enable-ieee1667-silo command
  * fabrics: fix incorrect access filename check (bsc#1231668)
  * nvme: use NVME_GET_FEATURES_SEL_SUPPORTED definition
  * nvme-print-json: use _cleanup_free_
  * plugins/solidigm: fix use after free.
  * ocp: fix ocp-nvme.c coding style errors
  * ocp: Change C9 function names to use c9 instead
  * ocp: fix to return c9 log page data error to open file
  * ocp: fix to set return value to get c9 log page data
  * nvme: update nvme_insert_tls_key_versioned() return handling (bsc#1231668)
  * nvme-print-stdout: add print_array function
  * logging: add print_info function
  * util: extern uint128_t_to_double() function
  * nvme-print: sanitize error-log output (bsc#1231668)
  * plugins/solidigm : Fixing vs-internal-log to generate identify per allocated namespace.
  * nvme-print: added new fields for nvm_id_ns
  * plugins/fdp: bugfix error check to validate output format
  * plugins/wdc: fix json output for vs-nand-stats
  * nvme-print-stdout: use NVME_FEAT util definitions
  * nvme-print: update subsys verbose outputs (bsc#1231668)
  * nvme-print: add subsystype to the list-subsys output (bsc#1231668)
  * netapp: print output for single device too (bsc#1231668)
  * netapp: segregate the print routines (bsc#1231668)
  * netapp: fix uninitialized value from heap error (bsc#1231668)
  * nvme-print: print the new fields added in TP4142
  * plugins/innogrit: modify for project tacoma
  * wdc: Add Support for new SN-861 PCI device id
  * nvme-print: use LC_MEASUREMENT to check fahrenheit temperature
  * nvme-print: use Completion Condition enum
  * completions: add the zsh completion of the dapustor plugin
  * nvme-print: print the new fields added in TP4165
  * plugins/dapustor: dapustor smart-log-add update
  * nvme-print-stdout: Added print for new field CSER (TP4167)
  * plugins: Add a new DapuStor plugin and the smart-log-add command
  * docs: rename ocp-unsupported-req-log file
- Drop build fix patch
  * remove 0001-docs-rename-ocp-unsupported-req-log-file.patch
- Install 70-nvmf-keys.rules to the default udev rules directory</changelog>
  <changelog author="dwagner@suse.de" date="1741089600">- Update to version 2.11+17.g6e09119:
  * nvme: check for valid output format (bsc#1237275)
  * nvme: make get-feature JSON output print everything (bsc#1237275)
  * nvme: make -v output consistent with -H output for nvme get-feature (bsc#1237275)
  * nvme: make -v output consistent with -H output for nvme get-property (bsc#1237275)
  * nvme-print-stdout: add details in list-ns verbose output (bsc#1237275)
  * nvme-print-stdout: add descriptions for nsze, ncap &amp; nuse (bsc#1237275)
  * netapp-ontapdev: correct the basestr header (bsc#1237275)
  * netapp-smdev: update err msg for no smdevices (bsc#1237275)
  * netapp-ontapdev: update err msg for no ontapdevices (bsc#1237275)
  * netapp-smdev: update basestr header in verbose output (bsc#1237275)</changelog>
  <changelog author="dwagner@suse.de" date="1745323200">- Update to version 2.11+22.gd31b1a01:
  * nvme-print: display fw-rev in list-subsys output (bsc#1240518)
  * nvme-print: display model in list-subsys output (bsc#1240518)
  * netapp-ontapdev: add subsysname to regular output (bsc#1240518)
  * netapp-ontapdev: add subsysname to the verbose output (bsc#1240518)
  * Revert "nvme-print-json: display only verbose output"</changelog>
</package>
<package pkgid="9cb1ff55449d09c95c85a355c9161d7a5b3f380f42e8e457f40e59ffbbe59af4" name="nvme-cli-bash-completion" arch="noarch">
  <version epoch="0" ver="2.11+26.gfbd2b4f4" rel="150700.3.6.2"/>
  <changelog author="dmueller@suse.com" date="1659528000">- Update to version 2.1.1:
  * build: Update version to v2.1.1
  * build: Extend release script to support micro version releases
  * build: Add minimum build requirement on libnvme
  * wrapper: Add weak nvme_init_copy_range_f1 symbol
  * build: Update version before regenerating docs
  * build: Update release version rules</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- Update to version 2.1.2:
  * build: Update version to v2.1.2
  * wrapper: Update SPDIX license
  * wrapper: Call library version of nvme_init_copy_range_f1
  * Revert "udev: re-read the discovery log page when a discovery controller reconnected"
  * nvme: Simplify ns list identify
  * meson: we don't need a c++ compiler
  * plugins/ocp: drop unused fd argument
  * plugins/wdc: remove fd argument from print functions
  * plugins/wdc: fix memset() on the address of a pointer
  * plugins/solidigm: fix return value on format parse failure
  * plugins/wdc: prevent duplicate close on NVMe device</changelog>
  <changelog author="daniel.wagner@suse.com" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- Mark no binaries rpms as noarch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 2.2.1:
  * Added parsing for Solidigm telemetry observable data.
  * add item ddr_ecc_err_cnt in smart-log-add
  * build: Drop dependency on libuuid
  * build: Fix endian check for cross build
  * build: Remove unused uuid.wrap file
  * build: Remove unusned uuid.h include
  * completions: Add show-topology tab completion
  * fabrics: Honor JSON config file in connect-all command (bsc#1199504)
  * fabrics: Trigger auto connect if config.json exists
  * fabrics: fix 'persistent' handling during connect-all with JSON file
  * fabrics: nvme config --modify depends on -n and -t argument
  * fabrics: re-read the discovery log page when a discovery controller reconnected
  * json: Support uint64 types serialization for older json-c versions
  * nvme, plugins: fix __u64 -&gt; unsigned long long assumptions
  * nvme-print: Add missing values in id-ctrl for JSON output
  * nvme-print: Handle NULL hostid in JSON output
  * nvme-print: Output 128bit values as uint128 type instead of double
  * nvme-print: Print fguid as a UUID
  * nvme-print: Use uint128 JSON function for media_units_written
  * nvme-print: decode MI status values
  * nvme-print: decode status types
  * nvme-print: fix wrong json key
  * nvme: Add helper function to parse 16-bit comma separated list
  * nvme: Add nvme_cmd wrapper for get_features
  * nvme: Add show-topology command
  * nvme: Add wrapper for Format NVM
  * nvme: Add wrapper for Sanitize NVM
  * nvme: Add wrappers for Get Log page helpers
  * nvme: Add wrappers for Identify controller lists
  * nvme: Add wrappers for NS attach/detach
  * nvme: Add wrappers for NS management functions
  * nvme: Add wrappers for basic NS identify
  * nvme: Add wrappers for firmware commands
  * nvme: Fix set feature command to get feature identifier 0Dh length as zero
  * nvme: Introduce a union in struct nvme_dev for different transport types
  * nvme: Introduce nvme_cli_ wrappers, wrap identify and identify_ctrl
  * nvme: Make static nvme_dev private to open_dev(), use locals elsewhere
  * nvme: Masks SSTAT in sanize-log output
  * nvme: Remove static nvme_dev, allocate on open instead
  * nvme: Use correct print format specifier for sizeof arguments
  * nvme: Use local struct nvme_dev for show_registers &amp; map_registers
  * nvme: check if cfg.metadata is NULL before passing it to strlen()
  * nvme: use helpers for checking status types
  * plugins/innogrit: Include timer.h
  * plugins/innogrit: add smart items for smart-log-add
  * plugins/micron-nvme: Use correct print format specifier for sizeof arguments
  * plugins/ocp: Include timer.h
  * plugins/ocp: Output 128bit values as uint128 type instead of double
  * plugins/ocp: pass struct nvme_dev to internal functions
  * plugins/seagate: Add support for OCP
  * plugins/toshiba: pass struct nvme_dev rather than fd + name
  * plugins/virtium: Output 128bit values as uint128 type instead of double
  * plugins/wdc: Add support for SN660 drive
  * plugins/wdc: Add type case for feature id
  * plugins/wdc: Output 128bit values as uint128 type instead of double
  * plugins/wdc: pass a struct nvme_dev around rather than a fd
  * plugins/wdc: pass struct nvme_dev rather than using global nvme_dev
  * plugins/ytmc: pass struct nvme_dev rather than fd + name
  * plugins: Use PRIu64 format specifier for 64bit types
  * print: Add Controller Ready Timeout Exceeded HW error code
  * solidgm: fix initialization warning
  * solidigm: Added parsing for telemetry customer screenable data
  * solidigm: Fix printf format for size_t variable
  * solidigm: Updated Telemetry parsing code to MIT license.
  * subprojects/libnvme: update for MI admin command coverage
  * tests: Update license to GPL-2.0-or-later
  * tree: Add NVMe-MI support
  * tree: Add dev_fd() helper
  * tree: Change nvme_dev from global to static
  * tree: Combine NVMe file descriptor into struct nvme_dev
  * tree: Move global device info to a single struct
  * tree: fail on non-negative return values from parse_and_open
  * udev: Add HOST_IFACE to udev rule (bsc#1208001)
  * util/json.h: Add json_object_get_uint64 fallback implementation
  * util/json: Add 128 bit JSON helpers
  * util/types: Add 128 bit conversion helpers
  * util: Fix le128_to_cpu on big-endian
  * util: Fix le128_to_cpu on little-endian
  * util: Move common type conversion helpers into util section
  * utils/json: Add json_object_new_uint64 for json-c &lt; 0.14
  * utils: Fix uint128_t usage
  * wdc:  OCP Log page updates and fixes
  * zns.c: report zones should be started after retrieved zone
- Handle suse-missing-rclink lint warnings by providing the symlinks
- Drop rpmlintrc as it is not needed anymore</changelog>
  <changelog author="daniel.wagner@suse.com" date="1675080000">- Update to version 2.3:
  * Added support for Flexible Data Placement (TP4146)
  * Added Persistent Discovery Controller support (TP8013/TP8014)
  * nvme-mi: support for firmware downloads
  * nvme device-self-test learned the --wait command line argument
    which makes nvme-cli to wait (incl. progress bar) in foreground
    until the test has finished.
  * A lot of bug fixes all over the place
- Update spec file
  * Project depends on meson &gt;= 0.50.0
  * make build dependency dropped</changelog>
  <changelog author="daniel.wagner@suse.com" date="1680264000">- Update to version 2.4 (jsc#PED-553 jsc#PED-3884):
  * plugins/ocp: Add SMART cloud log to solidigm plugin
  * nvme-print: Unify number base format for nsid
  * nvme-(discover,connect,connect-all): enable options '--keyring' and '--tls_key'
  * nvme-connect: enable option '--tls'
  * nvme-check-tls-key: add options to derive a 'retained' TLS key
  * nvme-gen-tls-key: add options to derive a TLS key
  * plugins/ocp: Move SMART cloud log methods to separate file for reusability
  * nvme: validate storage tag size correctly
  * nvme-print-json: Add json output status function
  * util: Cleanup argconfig parse function
  * nvme: Fix format command function indentation errors
  * util: Use argconfig commandline options pointer directly
  * nvme-print: Fix nvme show status function indentation errors
  * nvme: Check fw-commit command support MUD
  * print: print csi and opcode in error log (TP4113)
  * plugins/inspur: Cast vendor specific smart log value
  * nvme: Use correct ABORT type for self abort test
  * plugins/solidigm: Do not overwrite previously initialized variable
  * nvme-print: sanitize supported-log-pages output (bsc#1209550)
  * nvme: Enforce length to a multiple of 4 in get_log_page
  * nvme: fix block count and data size logic (bsc#1209564)
  * util: Introduce argconfig simple helper to check seen condition
  * plugins/ocp: Add set feature EOL/PLP failure mode no-uuid option
  * plugins/ocp: Refactor to clear feature identifier C1h and C3h
  * plugins/ocp: Add support for clear PCIe correctable error counters feature
  * nvme-doc: update man page for supported-log-pages (bsc#1209550)
  * plugins/ocp: OCP 2.0 field updates for SMART cloud log
  * nvme: Fix parameter limit range
  * fdp: Fix wrong Reclaim Unit Handle Status size
  * plugins/ocp: Add support for EOL/PLP failure mode feature
  * nvme-print: Fix printing of u32 values
  * nvme: Fix invalid memory access in show_registers
  * util: Add argconfig seen flag parameter to check if feature NSID set
  * nvme-print: fix segfault in supported-log-pages json output
  * fabrics: Fix ordering for auto connect services (bsc#1208075)
  * nvme.c: Check Firmware Update Granularity in fwdl
  * log: high latency timestamp issue
  * nvme: Align get feature data buffer length by page size to allocate
  * nvme: Continue get feature on invalid NS error to get multiple feature ids
  * plugins/ocp: SMART cloud log bug fixes.
  * Made temperature readouts in line with the SI.
  * Changed 'Kelvin' to 'kelvin', as recommended by the BIPM.
  * plugins/ocp: Fix whitespace and style issues
  * util: Revert JSON output to plain numbers
  * nvme: Add rae argument to telemetry-log command
  * nvme: Refactor get telemetry log page helper
  * nvme: Factor out parse telemetry log da element
  * nvme: Fix type in error message
  * unit: Add test-argconfig-parse
  * nvme: Use chunked read in get_log()
  * nvme: Use fprintf for error message logging in get_log()
  * nvme: fix /dev/spkd/ typo
  * doc: --storage-tag-check doesn't take any arguments
  * fabrics: Ensure host-traddr/iface consistency for "connect-all"
  * nvme-print: print the nvme generic name in json output as well
  * plugins/innogrit: modify command opcode for eventlog and cdump
  * completion: fix typo, add missing args
  * plugins/wdc: Fix data Formatting for Latency Monitor Log Page
  * nvme: Make json-c optional again
  * nvme-print: Move JSON printing function into a new file
  * plugins/solidigm: Use json_create_object wrapper
  * plugins/solidigm: Use struct json_object instead of typedef
  * fabrics: No need to sanitize trsvcid and traddr
  * docs: Fixed typos and missing options
  * util: Numbers without any suffix are also valid
  * util: Update suffix_binary_parse API
  * util: Reimplement suffix_si_parse
  * nvme: Filter out status flags for get feature command
  * util: Add crc32 implementation
  * nvme-print: Use attrs_info as key for Zone Attributes Information
  * nvme: Support effects-log for fabrics ctrl
  * plugins/solidigm: Add uuid index resolution
  * plugins/ocp: Use network byte order for OCP UUID value
  * json_discovery_log: avoid buffer overrun (bsc#1207435)
  * Fix connect nbft regressions (bsc#1209905)
  * Fix auto connect conditions (bsc#1210105)
  * Fix auto boot for NBFT connections (bsc#1211647)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1695988800">- Update to version 2.6 (jsc#PED-3610 jsc#PED-4879 jsc#PED-5061):
  * nvme: allocate payload buffer in create-ns command
  * nvme-print-stdout: Add CAP.CPS and CAP.NSSS human readable outputs
  * nvme: Add output-format default option instead of argconfig json option
  * nvme: fw-download offset only describes FW offset, not file offset
  * unit: add locale number test
  * util: handle utf-8 thousend separators correctly
  * nvme: Change to use NVME_ARGS verbose default option from OPT_ARGS
  * fabrics: Fix NVMF_ARGS macro to use parameter n correctly
  * nvme: Add verbose default option to show command debug output
  * util: Fix to set argconfig output format json option correctly
  * util: Split argconfig output format json function to set and get
  * nvme: Spport Phy Rx Eye Opening Measurement Log
  * nvme: Introduce nvme_realloc function
  * nvme: Fix for fdpa reserved field printing
  * completion: add 'version' and 'help' to list
  * udev-rule: apply round-robin iopolicy on i/o subsystems alone (bsc#1215994) (bsc#1219086)
  * nvme: Add support for the OAQD ID controller field
  * plugins/solidigm: use static log macro to calc bitmask
  * plugins/ocp: Rename FW activation history command
  * nvme: auto free nvme_dev resource
  * nvme: allocate aligned payloads for all nvme commands
  * nvme: introduce alloc helper with alignment support
  * util: add cleanup function for generic memory allocations
  * nvme: append huge to nvme_{alloc|free} function
  * nvme: fw_download use nvme_alloc only
  * fabrics: Removing duplicate code and moving to libnvme
  * nvme-print: omit size of protection information
  * tree: Modify label name close_fd to close_dev
  * fabrics: For TCP/RDMA, compare IP addresses with nvme_ipaddrs_eq() (bsc#1213768)
  * fabrics: lookup_discovery_ctrl() must look under host and not root (bsc#1213768)
  * nvme: Do not map status to errno codes
  * completions: Add bash completion for DSSD Power state feature(FID: C7h)
  * Documentation: Add document for DSSD Power state feature(FID: C7h)
  * plugins/ocp: Add DSSD Power state feature(FID: C7h)
  * avoid casting pointer arguments to argconfig functions
  * nvme-print: Add support for EGFEAT, Domain Identifier, TEGCAP and UEGCAP
  * nvme-print: Fix endurance_log whitespace changes
  * nvme: Fix retrieval of telemetry log up to specified data area.
  * nvme: Update list secondary command
  * wdc: Add support for SN861 drive
  * util: Set errno to 0 before strtol/stroul call
  * nvme: Revert passthru and submit_io to print status to stderr from stdout
  * plugins/zns: Fix offset in report zones
  * nvme-rpmb: Fix nvme_show_id_ctrl_rpmbs() definition error
  * fabrics: Use corresponding hostid when hostnqn is generated
  * json: fix seg. fault converting NULL to JSON string (bsc#1213762)
  * nvme-cli: fix extended metadata size calculation
  * nvme-print: Show subsystem iopolicy (bsc#1124564)
  * nvme-print-stdout: Do not show non reachable ns in namespace topology (bsc#1212598)
  * nvme-print: Fix show-topolocy for ctrls
  * doc: Fix typo in documentation
  * nvme-print-stdout: fix storage tag size label
  * nvme-print-stdout: List only ctrls which are part of ns (bsc#1212598)
  * nvme-print-stdout: Support subsys reachable from several hosts (bsc#1212598)
  * ccan: Add htable, strset and dependencies (bsc#1212598)
  * ccan: Remove unused documentation (bsc#1212598)
  * nvme-print: Split max power flags
  * nvme-print: fix counter while looping through uuid_list (bsc#1212598)
  * fabrics: only look for matching ctrl on same host (bsc#1213768)
  * README: Correct hugetlbfs spelling error
  * util: Delete unused CFG_BOOL argconfig type as duplicated with CFG_FLAG
  * util: Set LC_ALL=C as default if -H option is not used
  * nvme: Add support for create-ns command endg-id option parameter
  * nvme-print: fix argument order for show functions
  * plugins/solidigm: Added Marketing Name Log support for Solidigm.
  * nvme-print: Remove left overs from refactoring
  * nvme-print: Move num argument parsing into callbacks
  * nvme-print: Fix typo in callback definition
  * scripts: Make release script project neutral
  * scripts: Update update-docs.sh scripts
  * scripts: Execute the scripts from toplevel directory
  * scripts: Move helper scripts to a central place
  * docs: Update file modes
  * doc: Add information on --context
  * nvmf-autoconnect: Annotate the context to autoconnect
  * fabrics: Add support for volatile configuration
  * plugins/solidigm: Formated log page directory table consistently with "nvme list" format.
  * plugins/solidigm: Added Identify controller VU extensions parsing.
  * nvme-print-json: Print PCI pysical slot number for controller
  * nvme-print-stdout: Print PCI physical slot number for controller
  * libnvme.wrap: Bump to 42ac453
  * plugins/nbft: Use common code to parse print flags
  * fabrics: Do not print device on connect per default
  * fabrics: Revert 'fabrics: prevent 'nvme connect' to well-known discovery NQN'
  * nvme-print: fix wrong list-subsys output when ns are attached to different ctrls
  * plugins/micron: Correct NULL pointer checking error
  * plugins/innogrit: Add vendor command get-eventlog and get-cdump
  * nvme: Use correct data buffer size
  * nvme: Fix quoted string split across lines to use quoted newline
  * plugins/zns: Fix zns.c linux kernel check patch errors and warnings
  * plugins/ymtc: Fix ymtc-nvme.c linux kernel check patch warning
  * plugins/ymtc: Fix ymtc-nvme.c space indentation to tab indentation
  * plugins/virtium: Fix virtium-nvme.c linux kernel check patch errors and warnings
  * plugins/transcend: Fix transcend-nvme.c linux kernel check patch errors and warnings
  * plugins/solidigm: Fix linux kernel check patch errors and warnings
  * plugins/shannon: Fix shannon-nvme.c linux kernel check patch errors and warnings
  * plugins/seagate: Fix seagate-nvme.c linux kernel check patch warnings
  * plugins/scaleflux: Fix sfx-nvme.c linux kernel check patch errors and warnings
  * plugins/netapp: Fix netapp-nvme.c linux kernel check patch errors and warnings
  * plugins/nbft: Fix nbft-plugin.c linux kernel check patch warnings
  * plugins/micron: Fix micron-nvme.c linux kernel check patch errors and warnings
  * plugins/micron: Fix micron-nvme.c space indentation to tab indentation
  * plugins/memblaze: Fix memblaze-nvme.c linux kernel check patch errors and warnings
  * plugins/memblaze: Fix memblaze-utils.h space indentation to tab indentation
  * plugins/memblaze: Fix memblaze-nvme.c space indentation to tab indentation
  * plugins/intel: Fix intel-nvme.c linux kernel check patch errors and warnings
  * plugins/inspur: Fix inspur-nvme.c linux kernel check patch warnings
  * plugins/inspur: Fix inspur-nvme.c space indentation to tab indentation
  * plugins/innogrit: Fix innogrit-nvme.c linux kernel check patch errors
  * plugins/huawei: Fix huawei-nvme.c linux kernel check patch errors and warnings
  * plugins/fdb: Fix fdb.c linux kernel check patch warnings
  * plugins/dera: Fix dera-nvme.c linux kernel check patch errors and warnings
  * plugins/amzn: Fix amzn-nvme.c linux kernel check patch error and warnings
  * plugins/wdc: Fix wdc-utils.c linux kernel check patch errors and warnings
  * plugins/wdc: Refactor wdc-nvme.c for linux kernel check patch errors and warnings
  * util: Move falltrhough feature check to meson.builds
  * ocp: Add eol plp failure mode json outputs
  * nvme-print: Add nvme show result function
  * nvme-print-json: Add json output result function
  * nvme-print: Fix nvme_show_error() to call va_end() for json output format
  * nvme: Fix nvme format block-size option handling
  * Revert "nvme: Masks SSTAT in sanize-log output"
  * fabrics: Fix NVMF_ARGS macro indentation error
  * Documentation: Add document for OCP Device capability(LID: 0xC4) log page
  * completions: Add bash completion for OCP Device capability(LID: 0xC4) log page
  * plugins/ocp: Add Device capability(LID: 0xC4) log page
  * udev: fix warning reported by udevadm verify
  * fabrics: fix conditions in nvmf-autoconnect.service
  * fabrics: Change NVMF_OPTS as NVMF_ARGS to fix linux kernel check patch error
  * nvme: Split passthru commands read output
  * nvme: Fix io-passthru command read metadata output
  * plugin/ocp: Added implementation for 0xC1 log page
  * util: Fix suffix_si_parse to parse no decimal point but suffix value correctly
  * completions: Add zsh option values handling for sanitize command action
  * completions: Add ocp sub commands zsh completion
  * completions: Add ocp commands zsh completion
  * completions: Add ocp commands bash completion
  * nvmf-autoconnect: restart service to avoid dropping AEN
  * solidigm: Reduce memory usage in supported log pages feature
  * solidigm: Changes to supported log pages feature requested by review
  * solidigm: Add supported log pages log feature to Solidigm plugin
  * plugins/ocp: Added ocp unsupported requirements log page
  * completions: Add bash option values handling for sanitize command action
  * doc: Correct nvme-show-hostnqn command NAME description
  * completions: Add missing zsh commands descriptions
  * plugins/wdc: Extend SN530 support.
  * Fix incorrect article 'an' as 'a' to use for descriptions and message
  * nvme: Set effects-log command csi option help message string
  * completions: bash: Delete unsupported id-iocs command options
  * completions: bash: Add id-domain command
  * completions: Fix nvm-id-ns-lba-format command zsh definition
  * completions: Add json command option
  * nvme: Fix get-feature command sel parameter check to allow value 8
  * util: Delete unnecessary argconfig definitions OPT_VAL and CFG_VAL
  * util: Delete argconfig value type to add option value as va lists instead
  * util: Split to set argconfig option value
  * util: Delete argconfig value length to calcurate instead
  * nvme: Change sanitize command action option to use argconfig parse value
  * util: Add argconfig parse value function
  * util: Delete unused argconfig subopts type
  * util: Delete unused argconfig file types
  * util: Delete unused argconfig help function
  * nvme-wrap: do_admin_args_op should not clear args timeout
  * nvme: Fix linux kernel check patch warnings
  * nvme: Fix linux kernel check patch errors
  * plugins/ocp: Add telemetry-log command to OCP plugin
  * plugins/ocp: Add OCP set latency monitor feature command
  * plugins/ocp: Fix endianness in Latency Monitor Log output
  * plugins/ocp: Add missing fields in Latency Monitor Log
  * plugins/ocp: Fix typos in Latency Monitor Log
  * plugins/ocp: Reorganize OCP plugin source code
  * tests: Add tests for controller reset
  * plugin/solidigm: Added vs-internal-log command.
  * nvme: Add nvme_show_perror to use instead of perror for json output
  * nvme-print-json: Use vasprintf instead of vsnprintf to allocate string
  * nvme: fix rnlpt to_string() values.
  * nvme: fix io_mgmt args parse error
  * fdp: set-events feature is saveable
  * fabrics: Return errno value as negative
  * fabrics: Fix linux kernel check patch errors and warnings
  * nbft: add the nbft show plugin
  * nbft: added NBFT v1.0 table support (jsc#PED-1449)
  * nbft: make lookup_ctrl function public
  * nvme: Fix indentation errors around nvme show error API
  * nvme: Check validate output format err value instead of flags
  * nvme: Use nvme show error API to outptu stderr messages for json format
  * util: Check output format json for json error message output
  * nvme-printf: Add show error function for nvme list command json output
  * nvme: Add zns specfic field for create ns
  * nvme: Add ns-mgmt host software specified fields
  * nvme: Add dtype, dspec on write-zeroes, write-uncor
  * nvme-print: Add new fields print on id directive
  * nvme-print: Add VWCNP on NSFEAT of id-ns
  * nvme: Fix format command to skip to reread NSID all block device
  * plugins/solidigm: Fixes and clean-up of Telemetry parse code. Fixed parsing of 64 bit values. Fixed COD field name. Fixed compilation warnings when compiling for 32 bit. Added missing free(). Consolidated single entry function to telemetry parser. Consolidated use of integer types.
  * doc: Documentations maintenance changes
  * doc: Add nvme-mi-send command documentation
  * doc: Add nvme-mi-recv command documentation
  * doc: Add clear-pcie-correctable-error-counters command documentation
  * doc: Add eol-plp-failure-mode command documentation
  * plugins/solidigm: Add firmware activation history log to Solidigm plugin
  * plugins/ocp: Add firmware activation history log to OCP plugin
  * nvme-print: Use enum nvme_print_flags for nvme_show_id_ctrl
  * nvme: Add support for NVMe-MI send command
  * nvme: Use stdout for passthru and submit_io commands success messages
  * nvme: Fix passthru command function indentation errors
  * nvme: Add support for NVMe-MI receive command
  * fabrics: fix fc config JSON file handling (bsc#1210089)
  Refresh 0100-harden_nvmf-connect@.service.patch
- Fix install path for nvme-regress script</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420800">- Enable test during build (bsc#1207686)
- Drop minimum version meson dependency
- Add asciidoc dependency
- Build documentation when requested</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696852800">- Use fixed timestamps for documentation allowing reproducable builds
- Announce nvmeof-boot-support support via Provides
- Filter rpmlint warnings for systemd-service-without-service_ macros
- Add missing service files for NBFT feature
  * add 0001-fabrics-autoconnect-add-service-unit-for-connecting-.patch
  * add 0002-fabrics-add-udev-rule-to-avoid-renaming-nbft-interfa.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1697112000">- Add missing jsc# and bsc# tracking entries in change log.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1702987200">- Update to version 2.7:
  * nvme-print-json: include vs for identify namespace
  * nvme-print-stdout: enhance connect message (bsc#1219086)
  * fabrics: fix connect error if hostid file does not exist (bsc#1219086)
  * fabrics: fix invalid output format error during nvme connect (bsc#1219086)
  * wdc: Fix vs-smart-add-log Command for SN650 and SN655
  * nvme: restric hmac options for gen-tls-key (bsc#1219086)
  * wdc: Fix UUID index fallback mechanism
  * plugins/ocp: Add OCP Telemetry String log page, Telemetry log page
  * completions: Add bash completions for telemetry string log page
  * plugins/solidigm: Added OCP 2.0 compatibility version command
  * plugins/solidigm: Added OCP 2.0 vs-drive-info command.
  * plugins/ocp: Fix printing order of various Latency Monitor Log buckets
  * nvme: validate output format split status from flag return value
  * nvme: simplify cleanup_nvme_dev()
  * cleanup: remove unused cleanup_charp()
  * wdc: Add support for SN861 2nd pci device id
  * nvme: replace libhugetlbfs with mmap and madvise
  * util/mem: move alloc helper to util section
  * nvme: auto cleanup filedescriptors
  * nvme: auto cleanup buffers
  * nvme: return error code in get_persistent_event_log
  * nvme: sanitize nvme-gen-tls-key
  * nvme: print out the resulting TLS identity for 'nvme check-tls-key'
  * nvme: Add version '1' identifier for nvme-gen-tls-key
  * subprojects/libnvme: update wrapper for TP8018
  * plugins/solidigm: Added re_sku_count smart atrribute
  * doc: Fix nvme-connect manpage --application option string
  * plugins/ocp: changed command clear-pcie-correctable-error-counters to match OCP 2.0 spec.
  * plugins/solidigm: Added command to clear PCIe Correctable Error Counters according to OCP 2.0
  * plugins/ocp: Reorganized clear feature code for better reuse
  * nvme: fixup length calculation for 'nvme gen-tls-key --secret'
  * doc: remove invalid hostkey info for --dhchap-secret
  * nvme-print-json: use human helper everywhere
  * nvme-print-json: remove obj_print helper
  * plugins/ocp: update nvme_show_select_result call
  * mailmap: only show contributer's name
  * nvme-print-json: Change to report status and message in array
  * nvme-print-json: Change to report feature select in array
  * nvme-print-json: Change to report error and data in array
  * nvme-print-json: Add show_init/finish calls to report features in array
  * nvme-print: Add nvme_show_error_status() to merge error message and status
  * nvme-print-json: Use r instead of root and use obj_add_***(r, ..., ...)
  * nvme-print-json: Delete static const char string global variables
  * nvme-print-json: Add remaining controller registers readable format
  * nvme-print-json: Add readable format cap, vs, cc, csts, nssr and crto registers
  * nvme-print-json: Combine duplicated json key and val string variables
  * nvme-print-json: Replase json_array_add_value_string() to array_add_str()
  * nvme-print-json: Replase json_object_add_value_uint128() to obj/root_add_uint128()
  * nvme-print-json: Replase json_object_add_value_object() to obj/root_add_obj()
  * nvme-print-json: Replase json_array_add_value_object() to array_add_obj()
  * nvme-print-json: Replase json_object_add_value_array() to obj/root_add_array()
  * nvme-print-json: Replase json_object_add_value_uint() to obj/root_add_uint()
  * nvme-print-json: Replase json_object_add_value_int() to obj/root_add_int()
  * nvme-print-json: Replase json_object_add_value_uint64() to obj/root_add_uint64()
  * nvme-print-json: Replase json_object_add_value_string() to obj/root_add_str()
  * nvme-print-json: Update feature_show_fields_*** to use root/obj_add_***()
  * nvme-print-json: Update lba_status_log to use root_add_***() and obj_add_***()
  * nvme-print-json: Replace lba_status_log printf() to root_add_result()
  * nvme-print-json: Add list_item print function
  * nvme-print-json: Add lba_status_info print function
  * nvme-print-json: Add lba_range print function
  * nvme-print-json: Add id_ctrl_rpmbs print function
  * nvme-print-json: Unify json_list and jroot object names to root
  * nvme-print-json: Add json_zns_changed print function
  * nvme-print-json: Add root_add_result() to output result message
  * nvme-print-json: Split persistent_event_log print function
  * nvme-print-json: Remove unnecessary string newline code
  * nvme-print-json: Replace effects_log_list print to use json_print()
  * nvme-print-json: Print persistent_event_log no log data result correctly
  * nvme-print-json: Add static "result" and "erorr" strings variables
  * nvme-print-json: Add single_property printf function
  * nvme: Replace get feature command stderr output to nvme_show_error()
  * nvme-print-json: Change d() output to use d_json()
  * nvme: Fix get-feature command mixed stdout and json outputs
  * nvme-print-json: Add remaining feature fields print functions
  * nvme-print-json: Update formatting and codying style
  * build: Add -std=c99 to CFLAGS for muon on CentOS 7
  * fabrics: add udev rule to avoid renaming nbft interfaces
  * fabrics: autoconnect: add service unit for connecting NBFT subsystems
  * fabrics: autoconnect: explicitly express module dependency
  * Updates to codeql config
  * libnvme-wrap: exit on VOID_FN lookup failure
  * plugins/ocp:Added the ocp C6h feature api
  * plugin/ocp_fid_c6h:Added the ocp C6h feature api
  * nvme-copy: support cross-namespace copy
  * nvme/plugins: fix mismatch operator
  * nvme: fix overflow possiblity
  * nvme: reduce identify cmd issue
  * nvme: allow set-features to take input from stdin
  * Fix common misspellings from codespell project
  * nvme-print: Correct to print correct ascii character string length
  * print-stdout: print Host Behavior Support correctly
  * build: Bump libnvme wrap
  * plugins/solidigm: Added support for temperature statistics log page
  * Add support for codeql sweeps
  * doc: Add virt-mgmt command
  * doc: Add id-uuid command
  * doc: Add list-secondary command
  * doc: Add id-ns-granularity command
  * doc: Add nvme commands --output-format and --verbose options
  * completions: Add nvme-mi-recv nad nvme-mi-send commands completions
  * completions: Change short option -o and -v duplicated to upper case
  * doc: Change short option -o and -v duplicated to upper case
  * nvme: Change short option -o and -v duplicated to upper case
  * nvme: Change phy-rx-eom-log command to use NVME_ARGS instead
  * plugins/memblaze: Add smart-log-add and latency-feature functions
  * plugins/solidigm: internal-logs Telemetry auto detect last data area.
  * nvme: Change to use NVME_FLBAS_META_EXT() macro to check flbas value
  * nvme-print-json: Add host memory buffer and timestamp features print functions
  * nvme-print-json: Add feature fields print functions
  * nvme-print-json: Add TMPTH feature print function
  * nvme-print-json: Add show_feature_fields print function
  * nvme-print-json: Add select_result print function
  * nvme-print-json: Use json_print to print and free object
  * nvme-print-json: Add lba_status print function
  * nvme-print-json: Combine variable definition and setting value
  * nvme-print-json: Add id_iocs print function
  * nvme-print-stdout: Fix coding style errors
  * nvme-print-json: Add directive print function
  * nvme: Fixed segmentation fault when getting host initiated telemetry
  * plugins/wdc: enhanced SN861 device support
  * plugins/wdc: cleanup line lengths
  * nvme: do not include meta data for PRACT=1 and MD=8
  * nvme: use block-count arg if provided
  * build: bump libnvme to disable tests option
  * build: Add static build on CI target
  * nvme-print: Add nvme_zns_start_zone_list() API function
  * nvme-print: Add nvme_zns_finish_zone_list() API function
  * nvme-print-binary: Set list function to NULL if unimplemented
  * nvme-print-json: Change order list functions and set NULL if unimplemented
  * nvme-print-stdout: Fix to set stdout_list_item print function missed
  * plugins/solidigm: log page name extraction using nvme_log_to_string function
  * nvme-print: Added missing logpage names in nvme_log_to_string function
  * udev-rules: rename netapp udev rule (bsc#1219086)
  * udev-rules: set ctrl_loss_tmo to -1 for ONTAP NVMe/TCP (bsc#1219086)
- Remove upstreamed patches
  * remove 0001-fabrics-autoconnect-add-service-unit-for-connecting-.patch
  * remove 0002-fabrics-add-udev-rule-to-avoid-renaming-nbft-interfa.patch
- Update spec file
  * remove libhugetblfs depedency
  * update NetApp udev rule file name</changelog>
  <changelog author="daniel.wagner@suse.com" date="1703160000">- Update to version 2.7.1:
  * nvme-print-json: Revert field name changes (bsc#1218306)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1707912000">- Update to version 2.8:
  * nvme-print-json: append array object in json_support_log
  * sed: Add plugin for basic SED Opal operations (jsc#PED-5061)
  * don't include newlines in already wrapped text
  * nvme: do not include meta data for PRACT=1 and MD=8 (version 2)
  * create-ns: align the namespaces to 1Mib boundaries when using SI suffixes
  * doc: Fix config-schema.json's URL
  * plugins/solidigm: Compressing vs-internal-log log files into zip file.
  * nbft: do not issue an error if ACPI tables are missing
  * nbft: fixup include for libnvme
  * doc: Fix short option name for cfg-file
  * completions: added Solidigm plugin to autocomplete scripts
  * nvme: Remove unused cfg argument from NVME_ARGS() macro
  * nvme: fix directive receive identify offsets
  * nvme-fabrics: enable option 'concat'
  * build: Update libnvme wrap
  * plugins/wdc: Add Debug Log Collection Support
  * nbft: fix tcp/dhcp address fallback retry (bsc#1218873)
  * nvme: use correct telemetry log size
  * nvme-print: fix typo in list verbose output (bsc#1219086)
  * nvme: print inserted tls key for check-tls-key (bsc#1219086)
  * plugins/wdc: Plugin fixes and updates
  * fabrics: move hostid/hostnqn warnings to verbose level (bsc#1219086)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737600">- Update to version 2.9:
  * nvme-print: expand the maximum field length to prevent misalignment
  * plugins/spdk: plugin to list SPDK subsystems
  * nvme-print: check if controller belong to SPDK
  * plugins/spdk: plugin to list SPDK controllers
  * nvme-print-stdout: fix ASQB, ACQB and BMBBA prints
  * build: bump libnvme wrap
  * nvmf-autoconnect: fix string encoding
  * nvme: identify primary ctrl do not accept nsid
  * nvme-wrap: remove unused nvme_cli_get_log_ana_groups()
  * nvme-print-json: use admin queue attributes definitions
  * nvme-print-json: use CSTS definitions
  * nvme-print-stdout: use POWER_OF_TWO macro
  * nvme-print-json: use controller configuration definitions
  * nvme-print-json, nvme-print-stdout: add tertiary version number
  * nvme-print-json: use NVME_MAJOR and NVME_MINOR definitions
  * nvme-print-json: use NVME_BOOT_PARTITION_INFO field definitions
  * nvme-print-json: add support telemetry log create event in PEL
  * nvme-print-json: add support set feature event in PEL
  * nvme-print-json: add obj_d() function
  * nvme-print-json: add obj_add_uint_0nx() function
  * meson.build: Fix spelling of sed-opal.h filename
  * sed_opal: Only build when we really have sed_opal headers
  * nvme: fix error path if write() fails in get_telemetry_log()
  * plugins/solidigm: Additional LID for temperature statistics.
  * plugins/solidigm: Improved Solidigm UUID index detection.
  * nvme-print-stdout: Add CSTS.ST register stdout print
  * nvme-print-stdout: Use NVME_CMIC definitions
  * nvme-print: Use NVME_UNIT definitions
  * nvme-print-stdout: Use NVME_CMBMSC/STS/EBS/SWTP definitions
  * plugins/ssstc: add a new plugin for SSSTC driver
  * nvmf-connect: systemd hardening effort
  * plugins/ocp: Adjusted variable type size carrying UUID index to 8 bit.
  * nvme: fix security buffer allocation size
  * nvme: Change fw-download xfer initialization to set 0
  * nvme: Add fw-download warning message for FWUG alignment error
  * plugins/ocp: Split ocp_get_uuid_index() into find and get functions.
  * nvme: fix mem leak in multiple key related functions (bsc#1223331)
  * fabrics: fix mem leak in nvmf_check_hostid_and_hostnqn() (bsc#1223331)
  * nvme-print-stdout: Use NVME_BPRSEL definitions
  * nvme-print-stdout: Use NVME_BPINFO definitions
  * nvme-print-stdout: Use NVME_CMBSZ definitions
  * nvme-print-stdout: Use NVME_CMBLOC definitions
  * Revert "logging: fix error handling for ioctl passthru wrappers"
  * fabrics: align identify command payload
  * ocp: Unify line start spacing as tabs
  * ocp: support OCP DSSD Async Event Config feature
  * nvme: Add support for get-reg and set-reg commands
  * nvme-print-json: Add register print functions
  * nvme-print-stdout: Add register print functions
  * nvme-print: Add register print functions
  * nvme: Refactor mmap_registers to add writable parameter
  * nvme-print: Change PMRSZU string function as unit string
  * nvme-print: Refactor CMBLOC and PMRSTS registers function
  * logging: fix error handling for ioctl passthru wrappers
  * nbft: Fix scandir() error check
  * nbft: Refactor connection attempt out
  * nvme-print: Use EOM optional data present macros changed
  * nvme-print: Print cntlid number for controller (bsc#1224024)
  * nvme: check-tls-key fails despite having hostnqn file (bsc#1223331)
  * nvme: print retained key for gen-tls-key's -i option too (bsc#1223331)
  * fabrics : allow host to create duplicate connections to target
  * fabrics: Fix fast_io_fail_tmo option
  * nvme-print-stdout: use admin queue attributes definitions
  * nvme-print-stdout: use CSTS definitions
  * nvme-print-stdout: use controller configuration definitions
  * nvme-print-stdout: use NVME_MAJOR and NVME_MINOR definitions
  * nvme-print-stdout: use FDP configuration attributes definitions
  * nvme: add new function 'tls_key' (bsc#1226197)
  * nvme: use library functions for importing and exporting TLS keys (bsc#1216982)
  * nvme: extend error message for ns scan failures
  * nvme-print-json: Bugfix status json key of sanitize-log
  * sed: update SED password when initalizing (bsc#1222168)
  * plugins/memblaze: add performance stats
  * plugins/memblaze: fix code mis-type error
  * plugins/memblaze: code refactor on applying __packed on more structs
  * plugins/memblaze: code refactor on using cleanup_nvme_dev
  * nvme: Fix to cleanup free raw_secret memory allocated
  * plugins/memblaze: code-format on leading indent and align
  * plugins/wdc: Fix narrow index variable type in for loop to __u32
  * plugins/wdc: Whitespace changes
  * nvme: Delete unused nvme root scanned
  * ocp: support OCP 2.5 Set Telemetry Profile feature
  * nvme: Don't seg fault if given device is not char/block device
  * nbft: Include SSNS index in error messages (bsc#1222026)
  * nbft: Pause logging for expected connection failures (bsc#1222026)
  * nbft: Silence connection failures for unavailable SSNS (bsc#1222026)
  * nbft: Fix 'verbose' argument type (bsc#1222026)
  * plugins/nbft: Implement verbose logging
  * plugins/nbft: Print the new SSNS flags
  * nbft: Fix uninitialized variable
  * plugins/nbft: Fix uninitialized variables
  * plugins/sed: Fix uninitialized variable
  * nvme-print-stdout: Fix uninitialized variable
  * nvme-print-json: Fix uninitialized variable
  * build: Switch default meson buildtype to 'debugoptimized'
  * nvme: do not scan topology when mmaping registers
  * nvme-print-stdout: Use NVME_BOOT_PARTITION_INFO field definitions
  * nvme-print-stdout: Use NVME_GET for MI commands supported and effects CSP
  * nvme-print-stdout: Use NVME_GET for FID supported and effects FSP
  * nvme-print-stdout: Use NVME_SET_FEAT_EVENT register definitions
  * nvme-print: Add PEL EHAI port identifier type printf function
  * build: bump libnvme wrap
  * ocp: fix for power-state argument checking
  * nvme: do not issue warning when nvme_core module is not loaded
  * wdc: Review changes and build fixes
  * wdc:  Fix timestamp displayed by vs-firmware-activate-history command
  * logging: Split to output ioctl latency by log info level (bsc#1231668)
  * nvme-print-stdout: Change hexadecimal value 0x prefix to use %#x
  * nvme-print-stdout: Fix LBA status DSLBA output as hexadecimal
  * nvme-print-stdout: Split line length exceeded 100 columns
  * nvme-print-stdout: Use NVME_PMRMSC register definitions to print
  * nvme-print-stdout: Use NVME_PMRSWTP register definitions to print
  * nvme-print-stdout: Use NVME_PMREBS register definitions to print
  * nvme-print-stdout: Use NVME_PMRSTS register definitions to print
  * nvme-print-stdout: Use NVME_PMRCTL_EN register definition to print
  * nvme-print-stdout: Use NVME_PMRCAP register definition to print
  * doc: Fix admin and io passthru cdw parameters description
  * doc: Add get-feature cdw11 and set-feature cdw12 parameters
  * micron-nvme: Unuse stat() to check if strMainDirName exists
  * doc: Fix get-property and set-property offset and value descriptions
  * doc: Fix documentation file mode 100755 to 100644
  * nvme-print-stdout: Fix channel configuration descriptors pointer
  * nvme-print-stdout: Check sscanf return value
  * nvme-print-stdout: Fix linux kernel check patch errors
  * nvme: Delete unusual fallthrough for cases have no body
  * nvme: Delete duplicated semicolon
  * nvme-print, common: Fix for whitespace change
  * logging: output ioctl debugging info (bsc#1231668)
  * nvme: track verbose level (bsc#1231668)
  * logging: track log level globally
  * logging: move logging code to a new file
  * nvme: update include for libnvme
  * nvme: remove unused declaration
  * build: bump libnvme wrap
  * nvme-netapp: add nspath tlv handling (bsc#1220971)
  * rpm: Add missing rule and service files
  * nvme-print-json, nvme-print-stdout: Use CHAR_BIT definition
  * nvme-print-stdout: Delete duplicated if condition checking line
  * ocp: Fix timestamp displayed by fw-activate-history command
  * wdc: Add support for the get-drive-status command to SN861
  * nvme-print: Fix nvme_host_metadata_type_to_string() indentation errors
  * nvme-print: Add PEL RCI port identifier type printf function
  * nvme-print-stdout: Use persistent event log RCI definitions
  * build: bump libnvme wrap
  * nvme: Add show-regs and get-property commands NSSD print outputs
  * nvme-print: print more details in ns-descs verbose output (bsc#1223331)
  * Revert "nvme-print-json: remove obj_print helper"
  * sed: Confirm entered password before initialization.
- drop systemd service harden file, upstream ships this patch.
  * remove 0100-harden_nvmf-connect@.service.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737601">- Update to version 2.9.1:
  * plugins/spdk: drop the plugin</changelog>
  <changelog author="daniel.wagner@suse.com" date="1722600000">- Update to version 2.10:
  * sed: Fix parsing of Discovery0 features
  * fabrics: avoid potential segfault in nvmf_dim() (bsc#1231668)
  * nvme: avoid segfault in show-topology (bsc#1226197)
  * fabrics: do not leak nvme_ctrl_t object on connect
  * nvme: extend help message when mmap regs fails
  * nvme: return -ENXIO value to open device if errno not set
  * wdc: OCP 2.5 Log Page Updates
  * fabrics: drop --quiet alias -S
  * fabrics: drop --disable-sqflow alias -d
  * fabrics: check if json config is existing (bsc#1231668)
  * plugins/ocp: fix UAF when printing telemetry log
  * nvme-print-stdout: fix persistent-event-log set feature event output
  * fabrics: do not report error when no modules are loaded when disconnecting
  * fabrics: use cleanup helper where possible
  * fabrics: print an error for ENOENT too
  * plugins/virtium: use time_t for time_stamp values
  * completions: add ocp set-error-injection command
  * doc: add ocp set-error-injection command
  * ocp: add set-error-injection command
  * nvme: use argconfig_parse_seen to check conditions
  * nvme: use proper mask to get correct lbafu value
  * utils: fix print formatting option
  * utils: cleanup includes in utils.h
  * utils: add missing header
  * nvme-print: Added print for two new fields for HMB feature
  * plugins/micron: Move OCP internal log parsing from Micron to OCP Plugin.
  * fabrics: remove unused _discover_from_json_config_file() argument
  * nvme: avoid unnecessary dup() + close() in io_mgmt_send()
  * util: remove unnecessary NULL check in cleanup_nvme_root()
  * nvme: use argconfig_parse_comma_sep_array_u16() in attach-ns
  * util: avoid duplication in argconfig_parse_comma_sep_array*()
  * util: remove redundant loop condition in argconfig_parse()
  * util: introduce is_null_or_empty() to avoid strlen()
  * util: reduce allocation sizes in argconfig_parse()
  * util: consolidate call paths to argconfig_parse_type()
  * util: reduce complexity of argconfig_parse_val()
  * util: reduce arguments passed to argconfig_parse_type()
  * util: remove empty default case in argconfig functions
  * util: remove unnecessary parentheses in argconfig_parse_type()
  * util: remove redundant cast in argconfig_parse_type()
  * util: inline argconfig_parse_byte()
  * util: remove redundant NULL check in argconfig_print_help()
  * util: use cleanup to avoid goto in argconfig_parse()
  * util: make argconfig_set_opt_val() a void function
  * util: remove argconfig_parse_val() declaration
  * util: remove argconfig CFG_SIZE type
  * wdc: Update and refactor the C0h log page parsing
  * ccan: Add freed pointer checking to delete strset member
  * fabrics: connect all hosts in config.json (bsc#1226216)
  * fabrics: refactore discover from json config (bsc#1226216)
  * fabrics: first read config before topology scanning (bsc#1226216)
  * fabrics: use helper to lookup default hostnqn/hostid (bsc#1226216)
  * fabrics: extend already connected message (bsc#1226216)
  * fabrics: use cleanup helper to free nvme root object
  * nvme: check MD size with PI size when PRACT set to 1
  * nvme-print: add new field added in TP4090
  * nvme-print-binary: add effects-log command output missed
  * completions: add ocp get-error-injection command
  * doc: add ocp get-error-injection command
  * ocp: add get-error-injection command
  * ocp: fix eol-plp-failure-mode command sel option value
  * doc: fix ocp eol-plp-failure-mode select short option
  * ocp: set UUID index for eol-plp-failure-mode command to get
  * nvme: fix verbose logging (bsc#1231668)
  * doc: fix micron ocp telemetry log parse title
  * nvme-rpmb: send RPMB_REQ_READ_RESULT for authentication key programming
  * plugins/micron: Add support for OCP telemetry log parsing
  * ocp: Update Plugin Version
  * nvme: fix lbaf inuse to use 6:5 bits
  * ocp: use NVME_ARGS macro definition by eol-plp-failure-mode command
  * nvme: extern NVME_ARGS macro definition
  * nvme: use _cleanup_free_ type buffer for get-feature command
  * plugins/ocp: Update telemetry string log page (C9h)
  * nvme-print-json: add get-feature command fahrenheit temperature output
  * nvme: add get-feature and id-ctrl commands fahrenheit outputs
  * nvme: delete smart-log command fahrenheit option
  * nvme-print: check locale to use temperatures in degrees fahrenheit
  * completion: add support for tls-key (bsc#1226197)
  * doc: add tls-key --revoke documentation (bsc#1226197)
  * doc: fix tls-key --keyfile shorthand (bsc#1226197)
  * nvme: add support to revoke TLS key (bsc#1226197)
  * nvme: return error code/message for TLS commands (bsc#1226197)
  * nvme: factor out import key function (bsc#1226197)
  * nvme: use cleanup helper to close file descriptor (bsc#1226216)
  * nvme-rpmb: use cleanup helper for STREAM objects
  * fabrics: use cleanup helper for STREAM objects
  * nvme: use cleanup helper for STREAM objects (bsc#1226216)
  * nvme: strip newline when parsing TLS key files (bsc#1226197)
  * nvme: use stdout for exporting TLS keys (bsc#1226197)
  * nvme: change _cleanup_file_ to _cleanup_fd_ (bsc#1226197)
  * common.h: Avoid using unsupported load/store instructions in arm64 VMs
  * ocp: OCP 2.5 Telemetry DA 1 and 2 Parsing Updates
  * nvme-print-stdout: refactor subsys config (bsc#1231668)
  * wdc: Fix compiler warning.
  * nvme: add flags type nvme_print_flags_t
  * nvme-print: Use 'unsigned int' instead of 'unsigned'
  * nvme: update parse_args() return value handling
  * nvme-print: Fix nvme_show_smart_log indentation error
  * nvme-print-stdout: Fix stdout_smart_log indentation error
  * nvme-print-binary: Fix binary_smart_log indentation error
  * completions: add smart-log command fahrenheit option
  * doc: Add smart-log command fahrenheit option
  * nvme: Add smart-log command fahrenheit option
  * nvme-print: add PEL vendor specific and TCG defined events strings
  * nvme-print: Print PEL reserved event string
  * completions: Add timeout option bash completions
  * completions: Add timeout option zsh completions
  * completions: Add io-mgmt-recv/send commands zsh completions
  * completions: Add /dev/nvme argument missed
  * completions: Change fw-activate command name to fw-commit
  * completions: Fix _nvme indentation errors (bsc#1226197)
  * completions: Fix bash-nvme-completion.sh indentation errors (bsc#1226197)
  * doc: Add nvme commands timeout option
  * nvme: Add support for delete-ns command timeout option
  * nvme: Change NVME_DEFAULT_IOCTL_TIMEOUT to use nvme_cfg timeout
  * nvme: Add nvme_cfg timeout default option
  * nvme: Add nvme_cfg global variable for NVME_ARGS default options
  * nvme: add helper function to get pif and sts value
  * nvme: choose PIF from QPIF if QPIFS supports and PIF is QTYPE
  * nvme: use libnvme's atomic ANA log page fetch
  * nvme: fix maximum ANA log page length calculation
  * nvme-print-json: add missing va_end()
  * fabrics: skip namespace scan for fabric commands
  * nvme-print: print the new fields added in TP4141a
  * plugins/ocp: underflow + index fixes for telemetry
  * plugins/ocp: Add ocp TCG Configuration Log Page
  * nvme-print-stdout: Add helper function to print PIF in string form
  * doc: fix format command info
  * nvme: telemetry: report the correct error if the ioctl() fails.
  * nvme-print: add the cancel opcode to the nvme_cmd_to_string() list
  * doc: fix ocp format issues
  * nbft: Reuse existing discovery controller
  * nbft: Skip SSNS records pointing to well-known discovery NQN
  * nbft: Perform actual discovery
  * util/cleanup: Add cleanup for struct nvme_fabrics_uri
  * fabrics: Make some symbols public (bsc#1226216)
  * nvme-print-stdout: fix format index in stdout_nvm_id_ns
  * plugins/solidigm: Added workload-tracker command
  * plugins/solidigm: Added extra VU fields to id-ctrl
  * nvme-print-stdout: print MEM bit of CTRATT field
  * nvme-print-stdout: fix to print the log line by line
  * fabrics: Always pass hostid and hostnqn (bsc#1226216)
  * plugins/ssstc: Replace __uint16_t with uint16_t
  * plugins/solidigm: Added log pages to vs-internal-logs
  * sed: perform a tper revert after lsp revert
  * plugins/nbft: Use default library logging
  * docs: Add missing OCP plugin docs to meson
  * ocp: Switch OCP plugin to use semantic versioning
  * nvme: fix fw-commit MUD result message
  * sed: only re-read partition table after unlock.
  * nvme-print-json: Fix LBA status DSLBA output as hexadecimal
  * nvme-print-json: Use NVME_PMRxxx register definitions to print
  * nvme-print-stdout: Fix PMRWBM register name
  * nvme-print-json: Fix channel configuration descriptors pointer
  * nvme-print-json: Fix linux kernel check patch errors
  * nvme-print: Added "Command and Feature Lockdown" string to LID 0x14
  * plugins/innogrit: `u_char` -&gt; `unsigned char`
  * nvme: Use C99 types for uint32_t
  * nvme-print-stdout: print frl1/2/3 values for zns id-ns
  * solidigm: Eliminate &lt;linux/limits.h&gt;
  * nvme: remove double free in persistent-event-log
  * ocp: Add Get DSSD Power State Feature (FID: C7h)
  * nvme: initialize default library logging
  * nvme: use cleanup helper for nvme_root_t objects (bsc#1226197)
  * doc: add nvme connet ctrl-loss-tmo description
  * plugins/solidigm: Automatic enabling Data Area 4 when retrieving Telemetry.
- always build the docs
  * add 0001-docs-rename-ocp-unsupported-req-log-file.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1730376000">- Update to version 2.11:
  * docs: update check-tls-key arguments
  * nvme: add support to append TLS PSK to keyfile for check-tls-key
  * nvme: return correct error code in append_keyfile
  * docs: nvme-id-doman: dom{ia =&gt; ai}n
  * ocp: fix latency monitoring data structure entry endian
  * ocp: fix TCG configuration log endian
  * ocp: fix firmware activation history entry endian
  * docs: update gen-tls-key arguments
  * nvme: add support to add derive TLS PSK to keyfile
  * nvme: rename identity to version
  * nvme: set file permission for keyfile to owner only
  * nvme: export tls keys honoring version and hmac
  * nvmf-keys: add udev rule to import tls keys
  * docs: update TLS options
  * fabrics: add support to connect to accept a PSK command line
  * fabrics: add support to connect to accept a configuration
  * nvme: use unsigned char for hmac and identity
  * nvme-print: Add Sanitize Media Verification Event in PEL log
  * netapp-ontapdev: add err msg for no ontapdevices
  * netapp-smdev: add err msg for no smdevices
  * doc: Add sanitize command emvs option
  * ocp: combine to use GUID length definitions
  * nvme: update tls_key() handling
  * nvme-print-stdout: print VERS bit of SANICAP field
  * nvme: add EMVS support to sanitize command
  * ocp: remove callback function cast
  * doc: added commit conventions to contribution guidelines
  * ocp: fix ocp-print-stdout.c indentation error
  * ocp: fix ocp-nvme.c indentation errors
  * ocp: build ocp-nvme.c and ocp-telemetry-decode.c without json
  * ocp: split TCG configuration log print codes
  * ocp: split telemetry string log print codes
  * ocp: split device capabilities log print codes
  * ocp: split error recovery log print codes
  * ocp: split unsupported requirement log print codes
  * ocp: split latency monitor log print codes
  * ocp: move ocp telemetry log print function into ocp-print
  * ocp: split smart extended log print codes
  * ocp: split ocp-fw-activation-history print codes
  * plugins: update meson.build file to always build ocp plugin
  * ocp-print: move json code into separate files
  * nvme-print-json: display only verbose output
  * ocp-nvme: ocp plugin version update
  * nvme-print: print KV command set page header
  * doc: show where self-test results can be found
  * plugins/memblaze: fix a wrong id on smart-log-add
  * plugins/dapustor: smart-log-add fix
  * plugins/sed: add sid password change (bsc#1229677)
  * plugins/solidigm: Automatic retry smaller log chunk size.
  * ocp-nvme: Add LMDATA-37 for Latency Monitor Log
  * ocp-nvme: remove ocp log page version checking
  * wdc: Fix for Reading WDC C2 Vendor Unique Log Page
  * ocp: Fixes for OCP 2.5 Telemetry DA1 FIFO Event Parsing
  * nvme-print-json: update JSON verbose output for nvm-id-ctrl (bsc#1231668)
  * wdc: Add Support for SN5100S
  * nvme: Support show-regs for nvmeof
  * ocp: fix option handling in internal-log
  * Documentation: Added solidigm plugin commands
  * wdc: add support for SNTMP drive
  * nvme-print: print NSSES field of CAP register
  * ocp: fix GUID output
  * nvme-print-json: print controller register values in offset order
  * nvme-print-json: print CMBEBS and CMBSWTP in json format
  * nvme-print-stdout: update changed-ns-list-log output (bsc#1231668)
  * nvme: fix uninitialized value in error-log (bsc#1231668)
  * nvme: fix to convert metadata size to native byte order
  * nvme-print: fix error information log page endianness error
  * completions: add get-feature command changed option
  * doc: add get-feature command changed option
  * nvme: separate get NVME_GET_FEATURES_SEL_CHANGED definition
  * nvme: use NVME_GET_FEATURES_SEL definitions
  * nvme-print-stdout: use NVME_CTRL_OAES definitions
  * completion: add ocp set-telemetry-profile to zsh
  * completion: add solidgm work-tracker binding
  * plugins/solidigm: Added Workload Tracker Triggers and Wall Time
  * ocp: include util/types.h to use nvme_uint128_t
  * ocp: fix to set log data pointer allocated
  * nvme: use NVME_CHECK() to check get features select field value
  * ocp: split ocp-hwcomp log
  * completions: add ocp hardware-component-log command
  * doc: add ocp hardware-component-log command
  * ocp: add hwcomp log json output
  * ocp: add hwcomp log command list option
  * ocp: add hwcomp log command comp-id option
  * ocp: add hwcomp dummy definition
  * ocp: add support for hwcomp log page
  * nvme: use NVME_CTRL_FNA definitions
  * netapp-smdevices: print single device output too (bsc#1231668)
  * netapp-smdevices: segregate print routines (bsc#1231668)
  * Add Support for new SN655 PCI Device ID
  * nvme-print-json: extern json object add functions
  * ocp: add SMART / health information extended log page version 4
  * ocp: add error recovery log page version 3
  * ocp: add get-enable-ieee1667-silo command
  * fabrics: fix incorrect access filename check (bsc#1231668)
  * nvme: use NVME_GET_FEATURES_SEL_SUPPORTED definition
  * nvme-print-json: use _cleanup_free_
  * plugins/solidigm: fix use after free.
  * ocp: fix ocp-nvme.c coding style errors
  * ocp: Change C9 function names to use c9 instead
  * ocp: fix to return c9 log page data error to open file
  * ocp: fix to set return value to get c9 log page data
  * nvme: update nvme_insert_tls_key_versioned() return handling (bsc#1231668)
  * nvme-print-stdout: add print_array function
  * logging: add print_info function
  * util: extern uint128_t_to_double() function
  * nvme-print: sanitize error-log output (bsc#1231668)
  * plugins/solidigm : Fixing vs-internal-log to generate identify per allocated namespace.
  * nvme-print: added new fields for nvm_id_ns
  * plugins/fdp: bugfix error check to validate output format
  * plugins/wdc: fix json output for vs-nand-stats
  * nvme-print-stdout: use NVME_FEAT util definitions
  * nvme-print: update subsys verbose outputs (bsc#1231668)
  * nvme-print: add subsystype to the list-subsys output (bsc#1231668)
  * netapp: print output for single device too (bsc#1231668)
  * netapp: segregate the print routines (bsc#1231668)
  * netapp: fix uninitialized value from heap error (bsc#1231668)
  * nvme-print: print the new fields added in TP4142
  * plugins/innogrit: modify for project tacoma
  * wdc: Add Support for new SN-861 PCI device id
  * nvme-print: use LC_MEASUREMENT to check fahrenheit temperature
  * nvme-print: use Completion Condition enum
  * completions: add the zsh completion of the dapustor plugin
  * nvme-print: print the new fields added in TP4165
  * plugins/dapustor: dapustor smart-log-add update
  * nvme-print-stdout: Added print for new field CSER (TP4167)
  * plugins: Add a new DapuStor plugin and the smart-log-add command
  * docs: rename ocp-unsupported-req-log file
- Drop build fix patch
  * remove 0001-docs-rename-ocp-unsupported-req-log-file.patch
- Install 70-nvmf-keys.rules to the default udev rules directory</changelog>
  <changelog author="dwagner@suse.de" date="1741089600">- Update to version 2.11+17.g6e09119:
  * nvme: check for valid output format (bsc#1237275)
  * nvme: make get-feature JSON output print everything (bsc#1237275)
  * nvme: make -v output consistent with -H output for nvme get-feature (bsc#1237275)
  * nvme: make -v output consistent with -H output for nvme get-property (bsc#1237275)
  * nvme-print-stdout: add details in list-ns verbose output (bsc#1237275)
  * nvme-print-stdout: add descriptions for nsze, ncap &amp; nuse (bsc#1237275)
  * netapp-ontapdev: correct the basestr header (bsc#1237275)
  * netapp-smdev: update err msg for no smdevices (bsc#1237275)
  * netapp-ontapdev: update err msg for no ontapdevices (bsc#1237275)
  * netapp-smdev: update basestr header in verbose output (bsc#1237275)</changelog>
  <changelog author="dwagner@suse.de" date="1745323200">- Update to version 2.11+22.gd31b1a01:
  * nvme-print: display fw-rev in list-subsys output (bsc#1240518)
  * nvme-print: display model in list-subsys output (bsc#1240518)
  * netapp-ontapdev: add subsysname to regular output (bsc#1240518)
  * netapp-ontapdev: add subsysname to the verbose output (bsc#1240518)
  * Revert "nvme-print-json: display only verbose output"</changelog>
  <changelog author="dwagner@suse.de" date="1753185600">- Update to version 2.11+26.gfbd2b4f4:
  * nvme: fix mem leak in nvme copy (bsc#1243716)
  * nvme-print: suppress output when no ctrl is present for list-subsys (bsc#1243716)
  * nvme: extend filter to match device name (bsc#1243716)
  * udev-rules-ontap: switch to queue-depth iopolicy (bsc#1246599)</changelog>
</package>
<package pkgid="aba55e6c318ee8bdf2bf7fa6607bcf075cb0f11c8355a30ea8b468d7cd9a5f9d" name="nvme-cli-bash-completion" arch="noarch">
  <version epoch="0" ver="2.11+28.g2fc67685" rel="150700.3.9.1"/>
  <changelog author="dmueller@suse.com" date="1660737600">- Update to version 2.1.2:
  * build: Update version to v2.1.2
  * wrapper: Update SPDIX license
  * wrapper: Call library version of nvme_init_copy_range_f1
  * Revert "udev: re-read the discovery log page when a discovery controller reconnected"
  * nvme: Simplify ns list identify
  * meson: we don't need a c++ compiler
  * plugins/ocp: drop unused fd argument
  * plugins/wdc: remove fd argument from print functions
  * plugins/wdc: fix memset() on the address of a pointer
  * plugins/solidigm: fix return value on format parse failure
  * plugins/wdc: prevent duplicate close on NVMe device</changelog>
  <changelog author="daniel.wagner@suse.com" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- Mark no binaries rpms as noarch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 2.2.1:
  * Added parsing for Solidigm telemetry observable data.
  * add item ddr_ecc_err_cnt in smart-log-add
  * build: Drop dependency on libuuid
  * build: Fix endian check for cross build
  * build: Remove unused uuid.wrap file
  * build: Remove unusned uuid.h include
  * completions: Add show-topology tab completion
  * fabrics: Honor JSON config file in connect-all command (bsc#1199504)
  * fabrics: Trigger auto connect if config.json exists
  * fabrics: fix 'persistent' handling during connect-all with JSON file
  * fabrics: nvme config --modify depends on -n and -t argument
  * fabrics: re-read the discovery log page when a discovery controller reconnected
  * json: Support uint64 types serialization for older json-c versions
  * nvme, plugins: fix __u64 -&gt; unsigned long long assumptions
  * nvme-print: Add missing values in id-ctrl for JSON output
  * nvme-print: Handle NULL hostid in JSON output
  * nvme-print: Output 128bit values as uint128 type instead of double
  * nvme-print: Print fguid as a UUID
  * nvme-print: Use uint128 JSON function for media_units_written
  * nvme-print: decode MI status values
  * nvme-print: decode status types
  * nvme-print: fix wrong json key
  * nvme: Add helper function to parse 16-bit comma separated list
  * nvme: Add nvme_cmd wrapper for get_features
  * nvme: Add show-topology command
  * nvme: Add wrapper for Format NVM
  * nvme: Add wrapper for Sanitize NVM
  * nvme: Add wrappers for Get Log page helpers
  * nvme: Add wrappers for Identify controller lists
  * nvme: Add wrappers for NS attach/detach
  * nvme: Add wrappers for NS management functions
  * nvme: Add wrappers for basic NS identify
  * nvme: Add wrappers for firmware commands
  * nvme: Fix set feature command to get feature identifier 0Dh length as zero
  * nvme: Introduce a union in struct nvme_dev for different transport types
  * nvme: Introduce nvme_cli_ wrappers, wrap identify and identify_ctrl
  * nvme: Make static nvme_dev private to open_dev(), use locals elsewhere
  * nvme: Masks SSTAT in sanize-log output
  * nvme: Remove static nvme_dev, allocate on open instead
  * nvme: Use correct print format specifier for sizeof arguments
  * nvme: Use local struct nvme_dev for show_registers &amp; map_registers
  * nvme: check if cfg.metadata is NULL before passing it to strlen()
  * nvme: use helpers for checking status types
  * plugins/innogrit: Include timer.h
  * plugins/innogrit: add smart items for smart-log-add
  * plugins/micron-nvme: Use correct print format specifier for sizeof arguments
  * plugins/ocp: Include timer.h
  * plugins/ocp: Output 128bit values as uint128 type instead of double
  * plugins/ocp: pass struct nvme_dev to internal functions
  * plugins/seagate: Add support for OCP
  * plugins/toshiba: pass struct nvme_dev rather than fd + name
  * plugins/virtium: Output 128bit values as uint128 type instead of double
  * plugins/wdc: Add support for SN660 drive
  * plugins/wdc: Add type case for feature id
  * plugins/wdc: Output 128bit values as uint128 type instead of double
  * plugins/wdc: pass a struct nvme_dev around rather than a fd
  * plugins/wdc: pass struct nvme_dev rather than using global nvme_dev
  * plugins/ytmc: pass struct nvme_dev rather than fd + name
  * plugins: Use PRIu64 format specifier for 64bit types
  * print: Add Controller Ready Timeout Exceeded HW error code
  * solidgm: fix initialization warning
  * solidigm: Added parsing for telemetry customer screenable data
  * solidigm: Fix printf format for size_t variable
  * solidigm: Updated Telemetry parsing code to MIT license.
  * subprojects/libnvme: update for MI admin command coverage
  * tests: Update license to GPL-2.0-or-later
  * tree: Add NVMe-MI support
  * tree: Add dev_fd() helper
  * tree: Change nvme_dev from global to static
  * tree: Combine NVMe file descriptor into struct nvme_dev
  * tree: Move global device info to a single struct
  * tree: fail on non-negative return values from parse_and_open
  * udev: Add HOST_IFACE to udev rule (bsc#1208001)
  * util/json.h: Add json_object_get_uint64 fallback implementation
  * util/json: Add 128 bit JSON helpers
  * util/types: Add 128 bit conversion helpers
  * util: Fix le128_to_cpu on big-endian
  * util: Fix le128_to_cpu on little-endian
  * util: Move common type conversion helpers into util section
  * utils/json: Add json_object_new_uint64 for json-c &lt; 0.14
  * utils: Fix uint128_t usage
  * wdc:  OCP Log page updates and fixes
  * zns.c: report zones should be started after retrieved zone
- Handle suse-missing-rclink lint warnings by providing the symlinks
- Drop rpmlintrc as it is not needed anymore</changelog>
  <changelog author="daniel.wagner@suse.com" date="1675080000">- Update to version 2.3:
  * Added support for Flexible Data Placement (TP4146)
  * Added Persistent Discovery Controller support (TP8013/TP8014)
  * nvme-mi: support for firmware downloads
  * nvme device-self-test learned the --wait command line argument
    which makes nvme-cli to wait (incl. progress bar) in foreground
    until the test has finished.
  * A lot of bug fixes all over the place
- Update spec file
  * Project depends on meson &gt;= 0.50.0
  * make build dependency dropped</changelog>
  <changelog author="daniel.wagner@suse.com" date="1680264000">- Update to version 2.4 (jsc#PED-553 jsc#PED-3884):
  * plugins/ocp: Add SMART cloud log to solidigm plugin
  * nvme-print: Unify number base format for nsid
  * nvme-(discover,connect,connect-all): enable options '--keyring' and '--tls_key'
  * nvme-connect: enable option '--tls'
  * nvme-check-tls-key: add options to derive a 'retained' TLS key
  * nvme-gen-tls-key: add options to derive a TLS key
  * plugins/ocp: Move SMART cloud log methods to separate file for reusability
  * nvme: validate storage tag size correctly
  * nvme-print-json: Add json output status function
  * util: Cleanup argconfig parse function
  * nvme: Fix format command function indentation errors
  * util: Use argconfig commandline options pointer directly
  * nvme-print: Fix nvme show status function indentation errors
  * nvme: Check fw-commit command support MUD
  * print: print csi and opcode in error log (TP4113)
  * plugins/inspur: Cast vendor specific smart log value
  * nvme: Use correct ABORT type for self abort test
  * plugins/solidigm: Do not overwrite previously initialized variable
  * nvme-print: sanitize supported-log-pages output (bsc#1209550)
  * nvme: Enforce length to a multiple of 4 in get_log_page
  * nvme: fix block count and data size logic (bsc#1209564)
  * util: Introduce argconfig simple helper to check seen condition
  * plugins/ocp: Add set feature EOL/PLP failure mode no-uuid option
  * plugins/ocp: Refactor to clear feature identifier C1h and C3h
  * plugins/ocp: Add support for clear PCIe correctable error counters feature
  * nvme-doc: update man page for supported-log-pages (bsc#1209550)
  * plugins/ocp: OCP 2.0 field updates for SMART cloud log
  * nvme: Fix parameter limit range
  * fdp: Fix wrong Reclaim Unit Handle Status size
  * plugins/ocp: Add support for EOL/PLP failure mode feature
  * nvme-print: Fix printing of u32 values
  * nvme: Fix invalid memory access in show_registers
  * util: Add argconfig seen flag parameter to check if feature NSID set
  * nvme-print: fix segfault in supported-log-pages json output
  * fabrics: Fix ordering for auto connect services (bsc#1208075)
  * nvme.c: Check Firmware Update Granularity in fwdl
  * log: high latency timestamp issue
  * nvme: Align get feature data buffer length by page size to allocate
  * nvme: Continue get feature on invalid NS error to get multiple feature ids
  * plugins/ocp: SMART cloud log bug fixes.
  * Made temperature readouts in line with the SI.
  * Changed 'Kelvin' to 'kelvin', as recommended by the BIPM.
  * plugins/ocp: Fix whitespace and style issues
  * util: Revert JSON output to plain numbers
  * nvme: Add rae argument to telemetry-log command
  * nvme: Refactor get telemetry log page helper
  * nvme: Factor out parse telemetry log da element
  * nvme: Fix type in error message
  * unit: Add test-argconfig-parse
  * nvme: Use chunked read in get_log()
  * nvme: Use fprintf for error message logging in get_log()
  * nvme: fix /dev/spkd/ typo
  * doc: --storage-tag-check doesn't take any arguments
  * fabrics: Ensure host-traddr/iface consistency for "connect-all"
  * nvme-print: print the nvme generic name in json output as well
  * plugins/innogrit: modify command opcode for eventlog and cdump
  * completion: fix typo, add missing args
  * plugins/wdc: Fix data Formatting for Latency Monitor Log Page
  * nvme: Make json-c optional again
  * nvme-print: Move JSON printing function into a new file
  * plugins/solidigm: Use json_create_object wrapper
  * plugins/solidigm: Use struct json_object instead of typedef
  * fabrics: No need to sanitize trsvcid and traddr
  * docs: Fixed typos and missing options
  * util: Numbers without any suffix are also valid
  * util: Update suffix_binary_parse API
  * util: Reimplement suffix_si_parse
  * nvme: Filter out status flags for get feature command
  * util: Add crc32 implementation
  * nvme-print: Use attrs_info as key for Zone Attributes Information
  * nvme: Support effects-log for fabrics ctrl
  * plugins/solidigm: Add uuid index resolution
  * plugins/ocp: Use network byte order for OCP UUID value
  * json_discovery_log: avoid buffer overrun (bsc#1207435)
  * Fix connect nbft regressions (bsc#1209905)
  * Fix auto connect conditions (bsc#1210105)
  * Fix auto boot for NBFT connections (bsc#1211647)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1695988800">- Update to version 2.6 (jsc#PED-3610 jsc#PED-4879 jsc#PED-5061):
  * nvme: allocate payload buffer in create-ns command
  * nvme-print-stdout: Add CAP.CPS and CAP.NSSS human readable outputs
  * nvme: Add output-format default option instead of argconfig json option
  * nvme: fw-download offset only describes FW offset, not file offset
  * unit: add locale number test
  * util: handle utf-8 thousend separators correctly
  * nvme: Change to use NVME_ARGS verbose default option from OPT_ARGS
  * fabrics: Fix NVMF_ARGS macro to use parameter n correctly
  * nvme: Add verbose default option to show command debug output
  * util: Fix to set argconfig output format json option correctly
  * util: Split argconfig output format json function to set and get
  * nvme: Spport Phy Rx Eye Opening Measurement Log
  * nvme: Introduce nvme_realloc function
  * nvme: Fix for fdpa reserved field printing
  * completion: add 'version' and 'help' to list
  * udev-rule: apply round-robin iopolicy on i/o subsystems alone (bsc#1215994) (bsc#1219086)
  * nvme: Add support for the OAQD ID controller field
  * plugins/solidigm: use static log macro to calc bitmask
  * plugins/ocp: Rename FW activation history command
  * nvme: auto free nvme_dev resource
  * nvme: allocate aligned payloads for all nvme commands
  * nvme: introduce alloc helper with alignment support
  * util: add cleanup function for generic memory allocations
  * nvme: append huge to nvme_{alloc|free} function
  * nvme: fw_download use nvme_alloc only
  * fabrics: Removing duplicate code and moving to libnvme
  * nvme-print: omit size of protection information
  * tree: Modify label name close_fd to close_dev
  * fabrics: For TCP/RDMA, compare IP addresses with nvme_ipaddrs_eq() (bsc#1213768)
  * fabrics: lookup_discovery_ctrl() must look under host and not root (bsc#1213768)
  * nvme: Do not map status to errno codes
  * completions: Add bash completion for DSSD Power state feature(FID: C7h)
  * Documentation: Add document for DSSD Power state feature(FID: C7h)
  * plugins/ocp: Add DSSD Power state feature(FID: C7h)
  * avoid casting pointer arguments to argconfig functions
  * nvme-print: Add support for EGFEAT, Domain Identifier, TEGCAP and UEGCAP
  * nvme-print: Fix endurance_log whitespace changes
  * nvme: Fix retrieval of telemetry log up to specified data area.
  * nvme: Update list secondary command
  * wdc: Add support for SN861 drive
  * util: Set errno to 0 before strtol/stroul call
  * nvme: Revert passthru and submit_io to print status to stderr from stdout
  * plugins/zns: Fix offset in report zones
  * nvme-rpmb: Fix nvme_show_id_ctrl_rpmbs() definition error
  * fabrics: Use corresponding hostid when hostnqn is generated
  * json: fix seg. fault converting NULL to JSON string (bsc#1213762)
  * nvme-cli: fix extended metadata size calculation
  * nvme-print: Show subsystem iopolicy (bsc#1124564)
  * nvme-print-stdout: Do not show non reachable ns in namespace topology (bsc#1212598)
  * nvme-print: Fix show-topolocy for ctrls
  * doc: Fix typo in documentation
  * nvme-print-stdout: fix storage tag size label
  * nvme-print-stdout: List only ctrls which are part of ns (bsc#1212598)
  * nvme-print-stdout: Support subsys reachable from several hosts (bsc#1212598)
  * ccan: Add htable, strset and dependencies (bsc#1212598)
  * ccan: Remove unused documentation (bsc#1212598)
  * nvme-print: Split max power flags
  * nvme-print: fix counter while looping through uuid_list (bsc#1212598)
  * fabrics: only look for matching ctrl on same host (bsc#1213768)
  * README: Correct hugetlbfs spelling error
  * util: Delete unused CFG_BOOL argconfig type as duplicated with CFG_FLAG
  * util: Set LC_ALL=C as default if -H option is not used
  * nvme: Add support for create-ns command endg-id option parameter
  * nvme-print: fix argument order for show functions
  * plugins/solidigm: Added Marketing Name Log support for Solidigm.
  * nvme-print: Remove left overs from refactoring
  * nvme-print: Move num argument parsing into callbacks
  * nvme-print: Fix typo in callback definition
  * scripts: Make release script project neutral
  * scripts: Update update-docs.sh scripts
  * scripts: Execute the scripts from toplevel directory
  * scripts: Move helper scripts to a central place
  * docs: Update file modes
  * doc: Add information on --context
  * nvmf-autoconnect: Annotate the context to autoconnect
  * fabrics: Add support for volatile configuration
  * plugins/solidigm: Formated log page directory table consistently with "nvme list" format.
  * plugins/solidigm: Added Identify controller VU extensions parsing.
  * nvme-print-json: Print PCI pysical slot number for controller
  * nvme-print-stdout: Print PCI physical slot number for controller
  * libnvme.wrap: Bump to 42ac453
  * plugins/nbft: Use common code to parse print flags
  * fabrics: Do not print device on connect per default
  * fabrics: Revert 'fabrics: prevent 'nvme connect' to well-known discovery NQN'
  * nvme-print: fix wrong list-subsys output when ns are attached to different ctrls
  * plugins/micron: Correct NULL pointer checking error
  * plugins/innogrit: Add vendor command get-eventlog and get-cdump
  * nvme: Use correct data buffer size
  * nvme: Fix quoted string split across lines to use quoted newline
  * plugins/zns: Fix zns.c linux kernel check patch errors and warnings
  * plugins/ymtc: Fix ymtc-nvme.c linux kernel check patch warning
  * plugins/ymtc: Fix ymtc-nvme.c space indentation to tab indentation
  * plugins/virtium: Fix virtium-nvme.c linux kernel check patch errors and warnings
  * plugins/transcend: Fix transcend-nvme.c linux kernel check patch errors and warnings
  * plugins/solidigm: Fix linux kernel check patch errors and warnings
  * plugins/shannon: Fix shannon-nvme.c linux kernel check patch errors and warnings
  * plugins/seagate: Fix seagate-nvme.c linux kernel check patch warnings
  * plugins/scaleflux: Fix sfx-nvme.c linux kernel check patch errors and warnings
  * plugins/netapp: Fix netapp-nvme.c linux kernel check patch errors and warnings
  * plugins/nbft: Fix nbft-plugin.c linux kernel check patch warnings
  * plugins/micron: Fix micron-nvme.c linux kernel check patch errors and warnings
  * plugins/micron: Fix micron-nvme.c space indentation to tab indentation
  * plugins/memblaze: Fix memblaze-nvme.c linux kernel check patch errors and warnings
  * plugins/memblaze: Fix memblaze-utils.h space indentation to tab indentation
  * plugins/memblaze: Fix memblaze-nvme.c space indentation to tab indentation
  * plugins/intel: Fix intel-nvme.c linux kernel check patch errors and warnings
  * plugins/inspur: Fix inspur-nvme.c linux kernel check patch warnings
  * plugins/inspur: Fix inspur-nvme.c space indentation to tab indentation
  * plugins/innogrit: Fix innogrit-nvme.c linux kernel check patch errors
  * plugins/huawei: Fix huawei-nvme.c linux kernel check patch errors and warnings
  * plugins/fdb: Fix fdb.c linux kernel check patch warnings
  * plugins/dera: Fix dera-nvme.c linux kernel check patch errors and warnings
  * plugins/amzn: Fix amzn-nvme.c linux kernel check patch error and warnings
  * plugins/wdc: Fix wdc-utils.c linux kernel check patch errors and warnings
  * plugins/wdc: Refactor wdc-nvme.c for linux kernel check patch errors and warnings
  * util: Move falltrhough feature check to meson.builds
  * ocp: Add eol plp failure mode json outputs
  * nvme-print: Add nvme show result function
  * nvme-print-json: Add json output result function
  * nvme-print: Fix nvme_show_error() to call va_end() for json output format
  * nvme: Fix nvme format block-size option handling
  * Revert "nvme: Masks SSTAT in sanize-log output"
  * fabrics: Fix NVMF_ARGS macro indentation error
  * Documentation: Add document for OCP Device capability(LID: 0xC4) log page
  * completions: Add bash completion for OCP Device capability(LID: 0xC4) log page
  * plugins/ocp: Add Device capability(LID: 0xC4) log page
  * udev: fix warning reported by udevadm verify
  * fabrics: fix conditions in nvmf-autoconnect.service
  * fabrics: Change NVMF_OPTS as NVMF_ARGS to fix linux kernel check patch error
  * nvme: Split passthru commands read output
  * nvme: Fix io-passthru command read metadata output
  * plugin/ocp: Added implementation for 0xC1 log page
  * util: Fix suffix_si_parse to parse no decimal point but suffix value correctly
  * completions: Add zsh option values handling for sanitize command action
  * completions: Add ocp sub commands zsh completion
  * completions: Add ocp commands zsh completion
  * completions: Add ocp commands bash completion
  * nvmf-autoconnect: restart service to avoid dropping AEN
  * solidigm: Reduce memory usage in supported log pages feature
  * solidigm: Changes to supported log pages feature requested by review
  * solidigm: Add supported log pages log feature to Solidigm plugin
  * plugins/ocp: Added ocp unsupported requirements log page
  * completions: Add bash option values handling for sanitize command action
  * doc: Correct nvme-show-hostnqn command NAME description
  * completions: Add missing zsh commands descriptions
  * plugins/wdc: Extend SN530 support.
  * Fix incorrect article 'an' as 'a' to use for descriptions and message
  * nvme: Set effects-log command csi option help message string
  * completions: bash: Delete unsupported id-iocs command options
  * completions: bash: Add id-domain command
  * completions: Fix nvm-id-ns-lba-format command zsh definition
  * completions: Add json command option
  * nvme: Fix get-feature command sel parameter check to allow value 8
  * util: Delete unnecessary argconfig definitions OPT_VAL and CFG_VAL
  * util: Delete argconfig value type to add option value as va lists instead
  * util: Split to set argconfig option value
  * util: Delete argconfig value length to calcurate instead
  * nvme: Change sanitize command action option to use argconfig parse value
  * util: Add argconfig parse value function
  * util: Delete unused argconfig subopts type
  * util: Delete unused argconfig file types
  * util: Delete unused argconfig help function
  * nvme-wrap: do_admin_args_op should not clear args timeout
  * nvme: Fix linux kernel check patch warnings
  * nvme: Fix linux kernel check patch errors
  * plugins/ocp: Add telemetry-log command to OCP plugin
  * plugins/ocp: Add OCP set latency monitor feature command
  * plugins/ocp: Fix endianness in Latency Monitor Log output
  * plugins/ocp: Add missing fields in Latency Monitor Log
  * plugins/ocp: Fix typos in Latency Monitor Log
  * plugins/ocp: Reorganize OCP plugin source code
  * tests: Add tests for controller reset
  * plugin/solidigm: Added vs-internal-log command.
  * nvme: Add nvme_show_perror to use instead of perror for json output
  * nvme-print-json: Use vasprintf instead of vsnprintf to allocate string
  * nvme: fix rnlpt to_string() values.
  * nvme: fix io_mgmt args parse error
  * fdp: set-events feature is saveable
  * fabrics: Return errno value as negative
  * fabrics: Fix linux kernel check patch errors and warnings
  * nbft: add the nbft show plugin
  * nbft: added NBFT v1.0 table support (jsc#PED-1449)
  * nbft: make lookup_ctrl function public
  * nvme: Fix indentation errors around nvme show error API
  * nvme: Check validate output format err value instead of flags
  * nvme: Use nvme show error API to outptu stderr messages for json format
  * util: Check output format json for json error message output
  * nvme-printf: Add show error function for nvme list command json output
  * nvme: Add zns specfic field for create ns
  * nvme: Add ns-mgmt host software specified fields
  * nvme: Add dtype, dspec on write-zeroes, write-uncor
  * nvme-print: Add new fields print on id directive
  * nvme-print: Add VWCNP on NSFEAT of id-ns
  * nvme: Fix format command to skip to reread NSID all block device
  * plugins/solidigm: Fixes and clean-up of Telemetry parse code. Fixed parsing of 64 bit values. Fixed COD field name. Fixed compilation warnings when compiling for 32 bit. Added missing free(). Consolidated single entry function to telemetry parser. Consolidated use of integer types.
  * doc: Documentations maintenance changes
  * doc: Add nvme-mi-send command documentation
  * doc: Add nvme-mi-recv command documentation
  * doc: Add clear-pcie-correctable-error-counters command documentation
  * doc: Add eol-plp-failure-mode command documentation
  * plugins/solidigm: Add firmware activation history log to Solidigm plugin
  * plugins/ocp: Add firmware activation history log to OCP plugin
  * nvme-print: Use enum nvme_print_flags for nvme_show_id_ctrl
  * nvme: Add support for NVMe-MI send command
  * nvme: Use stdout for passthru and submit_io commands success messages
  * nvme: Fix passthru command function indentation errors
  * nvme: Add support for NVMe-MI receive command
  * fabrics: fix fc config JSON file handling (bsc#1210089)
  Refresh 0100-harden_nvmf-connect@.service.patch
- Fix install path for nvme-regress script</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420800">- Enable test during build (bsc#1207686)
- Drop minimum version meson dependency
- Add asciidoc dependency
- Build documentation when requested</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696852800">- Use fixed timestamps for documentation allowing reproducable builds
- Announce nvmeof-boot-support support via Provides
- Filter rpmlint warnings for systemd-service-without-service_ macros
- Add missing service files for NBFT feature
  * add 0001-fabrics-autoconnect-add-service-unit-for-connecting-.patch
  * add 0002-fabrics-add-udev-rule-to-avoid-renaming-nbft-interfa.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1697112000">- Add missing jsc# and bsc# tracking entries in change log.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1702987200">- Update to version 2.7:
  * nvme-print-json: include vs for identify namespace
  * nvme-print-stdout: enhance connect message (bsc#1219086)
  * fabrics: fix connect error if hostid file does not exist (bsc#1219086)
  * fabrics: fix invalid output format error during nvme connect (bsc#1219086)
  * wdc: Fix vs-smart-add-log Command for SN650 and SN655
  * nvme: restric hmac options for gen-tls-key (bsc#1219086)
  * wdc: Fix UUID index fallback mechanism
  * plugins/ocp: Add OCP Telemetry String log page, Telemetry log page
  * completions: Add bash completions for telemetry string log page
  * plugins/solidigm: Added OCP 2.0 compatibility version command
  * plugins/solidigm: Added OCP 2.0 vs-drive-info command.
  * plugins/ocp: Fix printing order of various Latency Monitor Log buckets
  * nvme: validate output format split status from flag return value
  * nvme: simplify cleanup_nvme_dev()
  * cleanup: remove unused cleanup_charp()
  * wdc: Add support for SN861 2nd pci device id
  * nvme: replace libhugetlbfs with mmap and madvise
  * util/mem: move alloc helper to util section
  * nvme: auto cleanup filedescriptors
  * nvme: auto cleanup buffers
  * nvme: return error code in get_persistent_event_log
  * nvme: sanitize nvme-gen-tls-key
  * nvme: print out the resulting TLS identity for 'nvme check-tls-key'
  * nvme: Add version '1' identifier for nvme-gen-tls-key
  * subprojects/libnvme: update wrapper for TP8018
  * plugins/solidigm: Added re_sku_count smart atrribute
  * doc: Fix nvme-connect manpage --application option string
  * plugins/ocp: changed command clear-pcie-correctable-error-counters to match OCP 2.0 spec.
  * plugins/solidigm: Added command to clear PCIe Correctable Error Counters according to OCP 2.0
  * plugins/ocp: Reorganized clear feature code for better reuse
  * nvme: fixup length calculation for 'nvme gen-tls-key --secret'
  * doc: remove invalid hostkey info for --dhchap-secret
  * nvme-print-json: use human helper everywhere
  * nvme-print-json: remove obj_print helper
  * plugins/ocp: update nvme_show_select_result call
  * mailmap: only show contributer's name
  * nvme-print-json: Change to report status and message in array
  * nvme-print-json: Change to report feature select in array
  * nvme-print-json: Change to report error and data in array
  * nvme-print-json: Add show_init/finish calls to report features in array
  * nvme-print: Add nvme_show_error_status() to merge error message and status
  * nvme-print-json: Use r instead of root and use obj_add_***(r, ..., ...)
  * nvme-print-json: Delete static const char string global variables
  * nvme-print-json: Add remaining controller registers readable format
  * nvme-print-json: Add readable format cap, vs, cc, csts, nssr and crto registers
  * nvme-print-json: Combine duplicated json key and val string variables
  * nvme-print-json: Replase json_array_add_value_string() to array_add_str()
  * nvme-print-json: Replase json_object_add_value_uint128() to obj/root_add_uint128()
  * nvme-print-json: Replase json_object_add_value_object() to obj/root_add_obj()
  * nvme-print-json: Replase json_array_add_value_object() to array_add_obj()
  * nvme-print-json: Replase json_object_add_value_array() to obj/root_add_array()
  * nvme-print-json: Replase json_object_add_value_uint() to obj/root_add_uint()
  * nvme-print-json: Replase json_object_add_value_int() to obj/root_add_int()
  * nvme-print-json: Replase json_object_add_value_uint64() to obj/root_add_uint64()
  * nvme-print-json: Replase json_object_add_value_string() to obj/root_add_str()
  * nvme-print-json: Update feature_show_fields_*** to use root/obj_add_***()
  * nvme-print-json: Update lba_status_log to use root_add_***() and obj_add_***()
  * nvme-print-json: Replace lba_status_log printf() to root_add_result()
  * nvme-print-json: Add list_item print function
  * nvme-print-json: Add lba_status_info print function
  * nvme-print-json: Add lba_range print function
  * nvme-print-json: Add id_ctrl_rpmbs print function
  * nvme-print-json: Unify json_list and jroot object names to root
  * nvme-print-json: Add json_zns_changed print function
  * nvme-print-json: Add root_add_result() to output result message
  * nvme-print-json: Split persistent_event_log print function
  * nvme-print-json: Remove unnecessary string newline code
  * nvme-print-json: Replace effects_log_list print to use json_print()
  * nvme-print-json: Print persistent_event_log no log data result correctly
  * nvme-print-json: Add static "result" and "erorr" strings variables
  * nvme-print-json: Add single_property printf function
  * nvme: Replace get feature command stderr output to nvme_show_error()
  * nvme-print-json: Change d() output to use d_json()
  * nvme: Fix get-feature command mixed stdout and json outputs
  * nvme-print-json: Add remaining feature fields print functions
  * nvme-print-json: Update formatting and codying style
  * build: Add -std=c99 to CFLAGS for muon on CentOS 7
  * fabrics: add udev rule to avoid renaming nbft interfaces
  * fabrics: autoconnect: add service unit for connecting NBFT subsystems
  * fabrics: autoconnect: explicitly express module dependency
  * Updates to codeql config
  * libnvme-wrap: exit on VOID_FN lookup failure
  * plugins/ocp:Added the ocp C6h feature api
  * plugin/ocp_fid_c6h:Added the ocp C6h feature api
  * nvme-copy: support cross-namespace copy
  * nvme/plugins: fix mismatch operator
  * nvme: fix overflow possiblity
  * nvme: reduce identify cmd issue
  * nvme: allow set-features to take input from stdin
  * Fix common misspellings from codespell project
  * nvme-print: Correct to print correct ascii character string length
  * print-stdout: print Host Behavior Support correctly
  * build: Bump libnvme wrap
  * plugins/solidigm: Added support for temperature statistics log page
  * Add support for codeql sweeps
  * doc: Add virt-mgmt command
  * doc: Add id-uuid command
  * doc: Add list-secondary command
  * doc: Add id-ns-granularity command
  * doc: Add nvme commands --output-format and --verbose options
  * completions: Add nvme-mi-recv nad nvme-mi-send commands completions
  * completions: Change short option -o and -v duplicated to upper case
  * doc: Change short option -o and -v duplicated to upper case
  * nvme: Change short option -o and -v duplicated to upper case
  * nvme: Change phy-rx-eom-log command to use NVME_ARGS instead
  * plugins/memblaze: Add smart-log-add and latency-feature functions
  * plugins/solidigm: internal-logs Telemetry auto detect last data area.
  * nvme: Change to use NVME_FLBAS_META_EXT() macro to check flbas value
  * nvme-print-json: Add host memory buffer and timestamp features print functions
  * nvme-print-json: Add feature fields print functions
  * nvme-print-json: Add TMPTH feature print function
  * nvme-print-json: Add show_feature_fields print function
  * nvme-print-json: Add select_result print function
  * nvme-print-json: Use json_print to print and free object
  * nvme-print-json: Add lba_status print function
  * nvme-print-json: Combine variable definition and setting value
  * nvme-print-json: Add id_iocs print function
  * nvme-print-stdout: Fix coding style errors
  * nvme-print-json: Add directive print function
  * nvme: Fixed segmentation fault when getting host initiated telemetry
  * plugins/wdc: enhanced SN861 device support
  * plugins/wdc: cleanup line lengths
  * nvme: do not include meta data for PRACT=1 and MD=8
  * nvme: use block-count arg if provided
  * build: bump libnvme to disable tests option
  * build: Add static build on CI target
  * nvme-print: Add nvme_zns_start_zone_list() API function
  * nvme-print: Add nvme_zns_finish_zone_list() API function
  * nvme-print-binary: Set list function to NULL if unimplemented
  * nvme-print-json: Change order list functions and set NULL if unimplemented
  * nvme-print-stdout: Fix to set stdout_list_item print function missed
  * plugins/solidigm: log page name extraction using nvme_log_to_string function
  * nvme-print: Added missing logpage names in nvme_log_to_string function
  * udev-rules: rename netapp udev rule (bsc#1219086)
  * udev-rules: set ctrl_loss_tmo to -1 for ONTAP NVMe/TCP (bsc#1219086)
- Remove upstreamed patches
  * remove 0001-fabrics-autoconnect-add-service-unit-for-connecting-.patch
  * remove 0002-fabrics-add-udev-rule-to-avoid-renaming-nbft-interfa.patch
- Update spec file
  * remove libhugetblfs depedency
  * update NetApp udev rule file name</changelog>
  <changelog author="daniel.wagner@suse.com" date="1703160000">- Update to version 2.7.1:
  * nvme-print-json: Revert field name changes (bsc#1218306)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1707912000">- Update to version 2.8:
  * nvme-print-json: append array object in json_support_log
  * sed: Add plugin for basic SED Opal operations (jsc#PED-5061)
  * don't include newlines in already wrapped text
  * nvme: do not include meta data for PRACT=1 and MD=8 (version 2)
  * create-ns: align the namespaces to 1Mib boundaries when using SI suffixes
  * doc: Fix config-schema.json's URL
  * plugins/solidigm: Compressing vs-internal-log log files into zip file.
  * nbft: do not issue an error if ACPI tables are missing
  * nbft: fixup include for libnvme
  * doc: Fix short option name for cfg-file
  * completions: added Solidigm plugin to autocomplete scripts
  * nvme: Remove unused cfg argument from NVME_ARGS() macro
  * nvme: fix directive receive identify offsets
  * nvme-fabrics: enable option 'concat'
  * build: Update libnvme wrap
  * plugins/wdc: Add Debug Log Collection Support
  * nbft: fix tcp/dhcp address fallback retry (bsc#1218873)
  * nvme: use correct telemetry log size
  * nvme-print: fix typo in list verbose output (bsc#1219086)
  * nvme: print inserted tls key for check-tls-key (bsc#1219086)
  * plugins/wdc: Plugin fixes and updates
  * fabrics: move hostid/hostnqn warnings to verbose level (bsc#1219086)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737600">- Update to version 2.9:
  * nvme-print: expand the maximum field length to prevent misalignment
  * plugins/spdk: plugin to list SPDK subsystems
  * nvme-print: check if controller belong to SPDK
  * plugins/spdk: plugin to list SPDK controllers
  * nvme-print-stdout: fix ASQB, ACQB and BMBBA prints
  * build: bump libnvme wrap
  * nvmf-autoconnect: fix string encoding
  * nvme: identify primary ctrl do not accept nsid
  * nvme-wrap: remove unused nvme_cli_get_log_ana_groups()
  * nvme-print-json: use admin queue attributes definitions
  * nvme-print-json: use CSTS definitions
  * nvme-print-stdout: use POWER_OF_TWO macro
  * nvme-print-json: use controller configuration definitions
  * nvme-print-json, nvme-print-stdout: add tertiary version number
  * nvme-print-json: use NVME_MAJOR and NVME_MINOR definitions
  * nvme-print-json: use NVME_BOOT_PARTITION_INFO field definitions
  * nvme-print-json: add support telemetry log create event in PEL
  * nvme-print-json: add support set feature event in PEL
  * nvme-print-json: add obj_d() function
  * nvme-print-json: add obj_add_uint_0nx() function
  * meson.build: Fix spelling of sed-opal.h filename
  * sed_opal: Only build when we really have sed_opal headers
  * nvme: fix error path if write() fails in get_telemetry_log()
  * plugins/solidigm: Additional LID for temperature statistics.
  * plugins/solidigm: Improved Solidigm UUID index detection.
  * nvme-print-stdout: Add CSTS.ST register stdout print
  * nvme-print-stdout: Use NVME_CMIC definitions
  * nvme-print: Use NVME_UNIT definitions
  * nvme-print-stdout: Use NVME_CMBMSC/STS/EBS/SWTP definitions
  * plugins/ssstc: add a new plugin for SSSTC driver
  * nvmf-connect: systemd hardening effort
  * plugins/ocp: Adjusted variable type size carrying UUID index to 8 bit.
  * nvme: fix security buffer allocation size
  * nvme: Change fw-download xfer initialization to set 0
  * nvme: Add fw-download warning message for FWUG alignment error
  * plugins/ocp: Split ocp_get_uuid_index() into find and get functions.
  * nvme: fix mem leak in multiple key related functions (bsc#1223331)
  * fabrics: fix mem leak in nvmf_check_hostid_and_hostnqn() (bsc#1223331)
  * nvme-print-stdout: Use NVME_BPRSEL definitions
  * nvme-print-stdout: Use NVME_BPINFO definitions
  * nvme-print-stdout: Use NVME_CMBSZ definitions
  * nvme-print-stdout: Use NVME_CMBLOC definitions
  * Revert "logging: fix error handling for ioctl passthru wrappers"
  * fabrics: align identify command payload
  * ocp: Unify line start spacing as tabs
  * ocp: support OCP DSSD Async Event Config feature
  * nvme: Add support for get-reg and set-reg commands
  * nvme-print-json: Add register print functions
  * nvme-print-stdout: Add register print functions
  * nvme-print: Add register print functions
  * nvme: Refactor mmap_registers to add writable parameter
  * nvme-print: Change PMRSZU string function as unit string
  * nvme-print: Refactor CMBLOC and PMRSTS registers function
  * logging: fix error handling for ioctl passthru wrappers
  * nbft: Fix scandir() error check
  * nbft: Refactor connection attempt out
  * nvme-print: Use EOM optional data present macros changed
  * nvme-print: Print cntlid number for controller (bsc#1224024)
  * nvme: check-tls-key fails despite having hostnqn file (bsc#1223331)
  * nvme: print retained key for gen-tls-key's -i option too (bsc#1223331)
  * fabrics : allow host to create duplicate connections to target
  * fabrics: Fix fast_io_fail_tmo option
  * nvme-print-stdout: use admin queue attributes definitions
  * nvme-print-stdout: use CSTS definitions
  * nvme-print-stdout: use controller configuration definitions
  * nvme-print-stdout: use NVME_MAJOR and NVME_MINOR definitions
  * nvme-print-stdout: use FDP configuration attributes definitions
  * nvme: add new function 'tls_key' (bsc#1226197)
  * nvme: use library functions for importing and exporting TLS keys (bsc#1216982)
  * nvme: extend error message for ns scan failures
  * nvme-print-json: Bugfix status json key of sanitize-log
  * sed: update SED password when initalizing (bsc#1222168)
  * plugins/memblaze: add performance stats
  * plugins/memblaze: fix code mis-type error
  * plugins/memblaze: code refactor on applying __packed on more structs
  * plugins/memblaze: code refactor on using cleanup_nvme_dev
  * nvme: Fix to cleanup free raw_secret memory allocated
  * plugins/memblaze: code-format on leading indent and align
  * plugins/wdc: Fix narrow index variable type in for loop to __u32
  * plugins/wdc: Whitespace changes
  * nvme: Delete unused nvme root scanned
  * ocp: support OCP 2.5 Set Telemetry Profile feature
  * nvme: Don't seg fault if given device is not char/block device
  * nbft: Include SSNS index in error messages (bsc#1222026)
  * nbft: Pause logging for expected connection failures (bsc#1222026)
  * nbft: Silence connection failures for unavailable SSNS (bsc#1222026)
  * nbft: Fix 'verbose' argument type (bsc#1222026)
  * plugins/nbft: Implement verbose logging
  * plugins/nbft: Print the new SSNS flags
  * nbft: Fix uninitialized variable
  * plugins/nbft: Fix uninitialized variables
  * plugins/sed: Fix uninitialized variable
  * nvme-print-stdout: Fix uninitialized variable
  * nvme-print-json: Fix uninitialized variable
  * build: Switch default meson buildtype to 'debugoptimized'
  * nvme: do not scan topology when mmaping registers
  * nvme-print-stdout: Use NVME_BOOT_PARTITION_INFO field definitions
  * nvme-print-stdout: Use NVME_GET for MI commands supported and effects CSP
  * nvme-print-stdout: Use NVME_GET for FID supported and effects FSP
  * nvme-print-stdout: Use NVME_SET_FEAT_EVENT register definitions
  * nvme-print: Add PEL EHAI port identifier type printf function
  * build: bump libnvme wrap
  * ocp: fix for power-state argument checking
  * nvme: do not issue warning when nvme_core module is not loaded
  * wdc: Review changes and build fixes
  * wdc:  Fix timestamp displayed by vs-firmware-activate-history command
  * logging: Split to output ioctl latency by log info level (bsc#1231668)
  * nvme-print-stdout: Change hexadecimal value 0x prefix to use %#x
  * nvme-print-stdout: Fix LBA status DSLBA output as hexadecimal
  * nvme-print-stdout: Split line length exceeded 100 columns
  * nvme-print-stdout: Use NVME_PMRMSC register definitions to print
  * nvme-print-stdout: Use NVME_PMRSWTP register definitions to print
  * nvme-print-stdout: Use NVME_PMREBS register definitions to print
  * nvme-print-stdout: Use NVME_PMRSTS register definitions to print
  * nvme-print-stdout: Use NVME_PMRCTL_EN register definition to print
  * nvme-print-stdout: Use NVME_PMRCAP register definition to print
  * doc: Fix admin and io passthru cdw parameters description
  * doc: Add get-feature cdw11 and set-feature cdw12 parameters
  * micron-nvme: Unuse stat() to check if strMainDirName exists
  * doc: Fix get-property and set-property offset and value descriptions
  * doc: Fix documentation file mode 100755 to 100644
  * nvme-print-stdout: Fix channel configuration descriptors pointer
  * nvme-print-stdout: Check sscanf return value
  * nvme-print-stdout: Fix linux kernel check patch errors
  * nvme: Delete unusual fallthrough for cases have no body
  * nvme: Delete duplicated semicolon
  * nvme-print, common: Fix for whitespace change
  * logging: output ioctl debugging info (bsc#1231668)
  * nvme: track verbose level (bsc#1231668)
  * logging: track log level globally
  * logging: move logging code to a new file
  * nvme: update include for libnvme
  * nvme: remove unused declaration
  * build: bump libnvme wrap
  * nvme-netapp: add nspath tlv handling (bsc#1220971)
  * rpm: Add missing rule and service files
  * nvme-print-json, nvme-print-stdout: Use CHAR_BIT definition
  * nvme-print-stdout: Delete duplicated if condition checking line
  * ocp: Fix timestamp displayed by fw-activate-history command
  * wdc: Add support for the get-drive-status command to SN861
  * nvme-print: Fix nvme_host_metadata_type_to_string() indentation errors
  * nvme-print: Add PEL RCI port identifier type printf function
  * nvme-print-stdout: Use persistent event log RCI definitions
  * build: bump libnvme wrap
  * nvme: Add show-regs and get-property commands NSSD print outputs
  * nvme-print: print more details in ns-descs verbose output (bsc#1223331)
  * Revert "nvme-print-json: remove obj_print helper"
  * sed: Confirm entered password before initialization.
- drop systemd service harden file, upstream ships this patch.
  * remove 0100-harden_nvmf-connect@.service.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737601">- Update to version 2.9.1:
  * plugins/spdk: drop the plugin</changelog>
  <changelog author="daniel.wagner@suse.com" date="1722600000">- Update to version 2.10:
  * sed: Fix parsing of Discovery0 features
  * fabrics: avoid potential segfault in nvmf_dim() (bsc#1231668)
  * nvme: avoid segfault in show-topology (bsc#1226197)
  * fabrics: do not leak nvme_ctrl_t object on connect
  * nvme: extend help message when mmap regs fails
  * nvme: return -ENXIO value to open device if errno not set
  * wdc: OCP 2.5 Log Page Updates
  * fabrics: drop --quiet alias -S
  * fabrics: drop --disable-sqflow alias -d
  * fabrics: check if json config is existing (bsc#1231668)
  * plugins/ocp: fix UAF when printing telemetry log
  * nvme-print-stdout: fix persistent-event-log set feature event output
  * fabrics: do not report error when no modules are loaded when disconnecting
  * fabrics: use cleanup helper where possible
  * fabrics: print an error for ENOENT too
  * plugins/virtium: use time_t for time_stamp values
  * completions: add ocp set-error-injection command
  * doc: add ocp set-error-injection command
  * ocp: add set-error-injection command
  * nvme: use argconfig_parse_seen to check conditions
  * nvme: use proper mask to get correct lbafu value
  * utils: fix print formatting option
  * utils: cleanup includes in utils.h
  * utils: add missing header
  * nvme-print: Added print for two new fields for HMB feature
  * plugins/micron: Move OCP internal log parsing from Micron to OCP Plugin.
  * fabrics: remove unused _discover_from_json_config_file() argument
  * nvme: avoid unnecessary dup() + close() in io_mgmt_send()
  * util: remove unnecessary NULL check in cleanup_nvme_root()
  * nvme: use argconfig_parse_comma_sep_array_u16() in attach-ns
  * util: avoid duplication in argconfig_parse_comma_sep_array*()
  * util: remove redundant loop condition in argconfig_parse()
  * util: introduce is_null_or_empty() to avoid strlen()
  * util: reduce allocation sizes in argconfig_parse()
  * util: consolidate call paths to argconfig_parse_type()
  * util: reduce complexity of argconfig_parse_val()
  * util: reduce arguments passed to argconfig_parse_type()
  * util: remove empty default case in argconfig functions
  * util: remove unnecessary parentheses in argconfig_parse_type()
  * util: remove redundant cast in argconfig_parse_type()
  * util: inline argconfig_parse_byte()
  * util: remove redundant NULL check in argconfig_print_help()
  * util: use cleanup to avoid goto in argconfig_parse()
  * util: make argconfig_set_opt_val() a void function
  * util: remove argconfig_parse_val() declaration
  * util: remove argconfig CFG_SIZE type
  * wdc: Update and refactor the C0h log page parsing
  * ccan: Add freed pointer checking to delete strset member
  * fabrics: connect all hosts in config.json (bsc#1226216)
  * fabrics: refactore discover from json config (bsc#1226216)
  * fabrics: first read config before topology scanning (bsc#1226216)
  * fabrics: use helper to lookup default hostnqn/hostid (bsc#1226216)
  * fabrics: extend already connected message (bsc#1226216)
  * fabrics: use cleanup helper to free nvme root object
  * nvme: check MD size with PI size when PRACT set to 1
  * nvme-print: add new field added in TP4090
  * nvme-print-binary: add effects-log command output missed
  * completions: add ocp get-error-injection command
  * doc: add ocp get-error-injection command
  * ocp: add get-error-injection command
  * ocp: fix eol-plp-failure-mode command sel option value
  * doc: fix ocp eol-plp-failure-mode select short option
  * ocp: set UUID index for eol-plp-failure-mode command to get
  * nvme: fix verbose logging (bsc#1231668)
  * doc: fix micron ocp telemetry log parse title
  * nvme-rpmb: send RPMB_REQ_READ_RESULT for authentication key programming
  * plugins/micron: Add support for OCP telemetry log parsing
  * ocp: Update Plugin Version
  * nvme: fix lbaf inuse to use 6:5 bits
  * ocp: use NVME_ARGS macro definition by eol-plp-failure-mode command
  * nvme: extern NVME_ARGS macro definition
  * nvme: use _cleanup_free_ type buffer for get-feature command
  * plugins/ocp: Update telemetry string log page (C9h)
  * nvme-print-json: add get-feature command fahrenheit temperature output
  * nvme: add get-feature and id-ctrl commands fahrenheit outputs
  * nvme: delete smart-log command fahrenheit option
  * nvme-print: check locale to use temperatures in degrees fahrenheit
  * completion: add support for tls-key (bsc#1226197)
  * doc: add tls-key --revoke documentation (bsc#1226197)
  * doc: fix tls-key --keyfile shorthand (bsc#1226197)
  * nvme: add support to revoke TLS key (bsc#1226197)
  * nvme: return error code/message for TLS commands (bsc#1226197)
  * nvme: factor out import key function (bsc#1226197)
  * nvme: use cleanup helper to close file descriptor (bsc#1226216)
  * nvme-rpmb: use cleanup helper for STREAM objects
  * fabrics: use cleanup helper for STREAM objects
  * nvme: use cleanup helper for STREAM objects (bsc#1226216)
  * nvme: strip newline when parsing TLS key files (bsc#1226197)
  * nvme: use stdout for exporting TLS keys (bsc#1226197)
  * nvme: change _cleanup_file_ to _cleanup_fd_ (bsc#1226197)
  * common.h: Avoid using unsupported load/store instructions in arm64 VMs
  * ocp: OCP 2.5 Telemetry DA 1 and 2 Parsing Updates
  * nvme-print-stdout: refactor subsys config (bsc#1231668)
  * wdc: Fix compiler warning.
  * nvme: add flags type nvme_print_flags_t
  * nvme-print: Use 'unsigned int' instead of 'unsigned'
  * nvme: update parse_args() return value handling
  * nvme-print: Fix nvme_show_smart_log indentation error
  * nvme-print-stdout: Fix stdout_smart_log indentation error
  * nvme-print-binary: Fix binary_smart_log indentation error
  * completions: add smart-log command fahrenheit option
  * doc: Add smart-log command fahrenheit option
  * nvme: Add smart-log command fahrenheit option
  * nvme-print: add PEL vendor specific and TCG defined events strings
  * nvme-print: Print PEL reserved event string
  * completions: Add timeout option bash completions
  * completions: Add timeout option zsh completions
  * completions: Add io-mgmt-recv/send commands zsh completions
  * completions: Add /dev/nvme argument missed
  * completions: Change fw-activate command name to fw-commit
  * completions: Fix _nvme indentation errors (bsc#1226197)
  * completions: Fix bash-nvme-completion.sh indentation errors (bsc#1226197)
  * doc: Add nvme commands timeout option
  * nvme: Add support for delete-ns command timeout option
  * nvme: Change NVME_DEFAULT_IOCTL_TIMEOUT to use nvme_cfg timeout
  * nvme: Add nvme_cfg timeout default option
  * nvme: Add nvme_cfg global variable for NVME_ARGS default options
  * nvme: add helper function to get pif and sts value
  * nvme: choose PIF from QPIF if QPIFS supports and PIF is QTYPE
  * nvme: use libnvme's atomic ANA log page fetch
  * nvme: fix maximum ANA log page length calculation
  * nvme-print-json: add missing va_end()
  * fabrics: skip namespace scan for fabric commands
  * nvme-print: print the new fields added in TP4141a
  * plugins/ocp: underflow + index fixes for telemetry
  * plugins/ocp: Add ocp TCG Configuration Log Page
  * nvme-print-stdout: Add helper function to print PIF in string form
  * doc: fix format command info
  * nvme: telemetry: report the correct error if the ioctl() fails.
  * nvme-print: add the cancel opcode to the nvme_cmd_to_string() list
  * doc: fix ocp format issues
  * nbft: Reuse existing discovery controller
  * nbft: Skip SSNS records pointing to well-known discovery NQN
  * nbft: Perform actual discovery
  * util/cleanup: Add cleanup for struct nvme_fabrics_uri
  * fabrics: Make some symbols public (bsc#1226216)
  * nvme-print-stdout: fix format index in stdout_nvm_id_ns
  * plugins/solidigm: Added workload-tracker command
  * plugins/solidigm: Added extra VU fields to id-ctrl
  * nvme-print-stdout: print MEM bit of CTRATT field
  * nvme-print-stdout: fix to print the log line by line
  * fabrics: Always pass hostid and hostnqn (bsc#1226216)
  * plugins/ssstc: Replace __uint16_t with uint16_t
  * plugins/solidigm: Added log pages to vs-internal-logs
  * sed: perform a tper revert after lsp revert
  * plugins/nbft: Use default library logging
  * docs: Add missing OCP plugin docs to meson
  * ocp: Switch OCP plugin to use semantic versioning
  * nvme: fix fw-commit MUD result message
  * sed: only re-read partition table after unlock.
  * nvme-print-json: Fix LBA status DSLBA output as hexadecimal
  * nvme-print-json: Use NVME_PMRxxx register definitions to print
  * nvme-print-stdout: Fix PMRWBM register name
  * nvme-print-json: Fix channel configuration descriptors pointer
  * nvme-print-json: Fix linux kernel check patch errors
  * nvme-print: Added "Command and Feature Lockdown" string to LID 0x14
  * plugins/innogrit: `u_char` -&gt; `unsigned char`
  * nvme: Use C99 types for uint32_t
  * nvme-print-stdout: print frl1/2/3 values for zns id-ns
  * solidigm: Eliminate &lt;linux/limits.h&gt;
  * nvme: remove double free in persistent-event-log
  * ocp: Add Get DSSD Power State Feature (FID: C7h)
  * nvme: initialize default library logging
  * nvme: use cleanup helper for nvme_root_t objects (bsc#1226197)
  * doc: add nvme connet ctrl-loss-tmo description
  * plugins/solidigm: Automatic enabling Data Area 4 when retrieving Telemetry.
- always build the docs
  * add 0001-docs-rename-ocp-unsupported-req-log-file.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1730376000">- Update to version 2.11:
  * docs: update check-tls-key arguments
  * nvme: add support to append TLS PSK to keyfile for check-tls-key
  * nvme: return correct error code in append_keyfile
  * docs: nvme-id-doman: dom{ia =&gt; ai}n
  * ocp: fix latency monitoring data structure entry endian
  * ocp: fix TCG configuration log endian
  * ocp: fix firmware activation history entry endian
  * docs: update gen-tls-key arguments
  * nvme: add support to add derive TLS PSK to keyfile
  * nvme: rename identity to version
  * nvme: set file permission for keyfile to owner only
  * nvme: export tls keys honoring version and hmac
  * nvmf-keys: add udev rule to import tls keys
  * docs: update TLS options
  * fabrics: add support to connect to accept a PSK command line
  * fabrics: add support to connect to accept a configuration
  * nvme: use unsigned char for hmac and identity
  * nvme-print: Add Sanitize Media Verification Event in PEL log
  * netapp-ontapdev: add err msg for no ontapdevices
  * netapp-smdev: add err msg for no smdevices
  * doc: Add sanitize command emvs option
  * ocp: combine to use GUID length definitions
  * nvme: update tls_key() handling
  * nvme-print-stdout: print VERS bit of SANICAP field
  * nvme: add EMVS support to sanitize command
  * ocp: remove callback function cast
  * doc: added commit conventions to contribution guidelines
  * ocp: fix ocp-print-stdout.c indentation error
  * ocp: fix ocp-nvme.c indentation errors
  * ocp: build ocp-nvme.c and ocp-telemetry-decode.c without json
  * ocp: split TCG configuration log print codes
  * ocp: split telemetry string log print codes
  * ocp: split device capabilities log print codes
  * ocp: split error recovery log print codes
  * ocp: split unsupported requirement log print codes
  * ocp: split latency monitor log print codes
  * ocp: move ocp telemetry log print function into ocp-print
  * ocp: split smart extended log print codes
  * ocp: split ocp-fw-activation-history print codes
  * plugins: update meson.build file to always build ocp plugin
  * ocp-print: move json code into separate files
  * nvme-print-json: display only verbose output
  * ocp-nvme: ocp plugin version update
  * nvme-print: print KV command set page header
  * doc: show where self-test results can be found
  * plugins/memblaze: fix a wrong id on smart-log-add
  * plugins/dapustor: smart-log-add fix
  * plugins/sed: add sid password change (bsc#1229677)
  * plugins/solidigm: Automatic retry smaller log chunk size.
  * ocp-nvme: Add LMDATA-37 for Latency Monitor Log
  * ocp-nvme: remove ocp log page version checking
  * wdc: Fix for Reading WDC C2 Vendor Unique Log Page
  * ocp: Fixes for OCP 2.5 Telemetry DA1 FIFO Event Parsing
  * nvme-print-json: update JSON verbose output for nvm-id-ctrl (bsc#1231668)
  * wdc: Add Support for SN5100S
  * nvme: Support show-regs for nvmeof
  * ocp: fix option handling in internal-log
  * Documentation: Added solidigm plugin commands
  * wdc: add support for SNTMP drive
  * nvme-print: print NSSES field of CAP register
  * ocp: fix GUID output
  * nvme-print-json: print controller register values in offset order
  * nvme-print-json: print CMBEBS and CMBSWTP in json format
  * nvme-print-stdout: update changed-ns-list-log output (bsc#1231668)
  * nvme: fix uninitialized value in error-log (bsc#1231668)
  * nvme: fix to convert metadata size to native byte order
  * nvme-print: fix error information log page endianness error
  * completions: add get-feature command changed option
  * doc: add get-feature command changed option
  * nvme: separate get NVME_GET_FEATURES_SEL_CHANGED definition
  * nvme: use NVME_GET_FEATURES_SEL definitions
  * nvme-print-stdout: use NVME_CTRL_OAES definitions
  * completion: add ocp set-telemetry-profile to zsh
  * completion: add solidgm work-tracker binding
  * plugins/solidigm: Added Workload Tracker Triggers and Wall Time
  * ocp: include util/types.h to use nvme_uint128_t
  * ocp: fix to set log data pointer allocated
  * nvme: use NVME_CHECK() to check get features select field value
  * ocp: split ocp-hwcomp log
  * completions: add ocp hardware-component-log command
  * doc: add ocp hardware-component-log command
  * ocp: add hwcomp log json output
  * ocp: add hwcomp log command list option
  * ocp: add hwcomp log command comp-id option
  * ocp: add hwcomp dummy definition
  * ocp: add support for hwcomp log page
  * nvme: use NVME_CTRL_FNA definitions
  * netapp-smdevices: print single device output too (bsc#1231668)
  * netapp-smdevices: segregate print routines (bsc#1231668)
  * Add Support for new SN655 PCI Device ID
  * nvme-print-json: extern json object add functions
  * ocp: add SMART / health information extended log page version 4
  * ocp: add error recovery log page version 3
  * ocp: add get-enable-ieee1667-silo command
  * fabrics: fix incorrect access filename check (bsc#1231668)
  * nvme: use NVME_GET_FEATURES_SEL_SUPPORTED definition
  * nvme-print-json: use _cleanup_free_
  * plugins/solidigm: fix use after free.
  * ocp: fix ocp-nvme.c coding style errors
  * ocp: Change C9 function names to use c9 instead
  * ocp: fix to return c9 log page data error to open file
  * ocp: fix to set return value to get c9 log page data
  * nvme: update nvme_insert_tls_key_versioned() return handling (bsc#1231668)
  * nvme-print-stdout: add print_array function
  * logging: add print_info function
  * util: extern uint128_t_to_double() function
  * nvme-print: sanitize error-log output (bsc#1231668)
  * plugins/solidigm : Fixing vs-internal-log to generate identify per allocated namespace.
  * nvme-print: added new fields for nvm_id_ns
  * plugins/fdp: bugfix error check to validate output format
  * plugins/wdc: fix json output for vs-nand-stats
  * nvme-print-stdout: use NVME_FEAT util definitions
  * nvme-print: update subsys verbose outputs (bsc#1231668)
  * nvme-print: add subsystype to the list-subsys output (bsc#1231668)
  * netapp: print output for single device too (bsc#1231668)
  * netapp: segregate the print routines (bsc#1231668)
  * netapp: fix uninitialized value from heap error (bsc#1231668)
  * nvme-print: print the new fields added in TP4142
  * plugins/innogrit: modify for project tacoma
  * wdc: Add Support for new SN-861 PCI device id
  * nvme-print: use LC_MEASUREMENT to check fahrenheit temperature
  * nvme-print: use Completion Condition enum
  * completions: add the zsh completion of the dapustor plugin
  * nvme-print: print the new fields added in TP4165
  * plugins/dapustor: dapustor smart-log-add update
  * nvme-print-stdout: Added print for new field CSER (TP4167)
  * plugins: Add a new DapuStor plugin and the smart-log-add command
  * docs: rename ocp-unsupported-req-log file
- Drop build fix patch
  * remove 0001-docs-rename-ocp-unsupported-req-log-file.patch
- Install 70-nvmf-keys.rules to the default udev rules directory</changelog>
  <changelog author="dwagner@suse.de" date="1741089600">- Update to version 2.11+17.g6e09119:
  * nvme: check for valid output format (bsc#1237275)
  * nvme: make get-feature JSON output print everything (bsc#1237275)
  * nvme: make -v output consistent with -H output for nvme get-feature (bsc#1237275)
  * nvme: make -v output consistent with -H output for nvme get-property (bsc#1237275)
  * nvme-print-stdout: add details in list-ns verbose output (bsc#1237275)
  * nvme-print-stdout: add descriptions for nsze, ncap &amp; nuse (bsc#1237275)
  * netapp-ontapdev: correct the basestr header (bsc#1237275)
  * netapp-smdev: update err msg for no smdevices (bsc#1237275)
  * netapp-ontapdev: update err msg for no ontapdevices (bsc#1237275)
  * netapp-smdev: update basestr header in verbose output (bsc#1237275)</changelog>
  <changelog author="dwagner@suse.de" date="1745323200">- Update to version 2.11+22.gd31b1a01:
  * nvme-print: display fw-rev in list-subsys output (bsc#1240518)
  * nvme-print: display model in list-subsys output (bsc#1240518)
  * netapp-ontapdev: add subsysname to regular output (bsc#1240518)
  * netapp-ontapdev: add subsysname to the verbose output (bsc#1240518)
  * Revert "nvme-print-json: display only verbose output"</changelog>
  <changelog author="dwagner@suse.de" date="1753185600">- Update to version 2.11+26.gfbd2b4f4:
  * nvme: fix mem leak in nvme copy (bsc#1243716)
  * nvme-print: suppress output when no ctrl is present for list-subsys (bsc#1243716)
  * nvme: extend filter to match device name (bsc#1243716)
  * udev-rules-ontap: switch to queue-depth iopolicy (bsc#1246599)</changelog>
  <changelog author="dwagner@suse.de" date="1757419200">- Update to version 2.11+28.g2fc67685:
  * netapp-ontapdev: update invalid device handling (bsc#1247017)
  * netapp-smdev: update invalid device handling (bsc#1247017)</changelog>
</package>
<package pkgid="cffb2dc2c76abe2ccce551eb9152e79b0e0af09302d1e1d7f0915fea6c330163" name="nvme-cli-bash-completion" arch="noarch">
  <version epoch="0" ver="2.11+29.g61f8d34b" rel="150700.3.12.1"/>
  <changelog author="daniel.wagner@suse.com" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- Mark no binaries rpms as noarch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 2.2.1:
  * Added parsing for Solidigm telemetry observable data.
  * add item ddr_ecc_err_cnt in smart-log-add
  * build: Drop dependency on libuuid
  * build: Fix endian check for cross build
  * build: Remove unused uuid.wrap file
  * build: Remove unusned uuid.h include
  * completions: Add show-topology tab completion
  * fabrics: Honor JSON config file in connect-all command (bsc#1199504)
  * fabrics: Trigger auto connect if config.json exists
  * fabrics: fix 'persistent' handling during connect-all with JSON file
  * fabrics: nvme config --modify depends on -n and -t argument
  * fabrics: re-read the discovery log page when a discovery controller reconnected
  * json: Support uint64 types serialization for older json-c versions
  * nvme, plugins: fix __u64 -&gt; unsigned long long assumptions
  * nvme-print: Add missing values in id-ctrl for JSON output
  * nvme-print: Handle NULL hostid in JSON output
  * nvme-print: Output 128bit values as uint128 type instead of double
  * nvme-print: Print fguid as a UUID
  * nvme-print: Use uint128 JSON function for media_units_written
  * nvme-print: decode MI status values
  * nvme-print: decode status types
  * nvme-print: fix wrong json key
  * nvme: Add helper function to parse 16-bit comma separated list
  * nvme: Add nvme_cmd wrapper for get_features
  * nvme: Add show-topology command
  * nvme: Add wrapper for Format NVM
  * nvme: Add wrapper for Sanitize NVM
  * nvme: Add wrappers for Get Log page helpers
  * nvme: Add wrappers for Identify controller lists
  * nvme: Add wrappers for NS attach/detach
  * nvme: Add wrappers for NS management functions
  * nvme: Add wrappers for basic NS identify
  * nvme: Add wrappers for firmware commands
  * nvme: Fix set feature command to get feature identifier 0Dh length as zero
  * nvme: Introduce a union in struct nvme_dev for different transport types
  * nvme: Introduce nvme_cli_ wrappers, wrap identify and identify_ctrl
  * nvme: Make static nvme_dev private to open_dev(), use locals elsewhere
  * nvme: Masks SSTAT in sanize-log output
  * nvme: Remove static nvme_dev, allocate on open instead
  * nvme: Use correct print format specifier for sizeof arguments
  * nvme: Use local struct nvme_dev for show_registers &amp; map_registers
  * nvme: check if cfg.metadata is NULL before passing it to strlen()
  * nvme: use helpers for checking status types
  * plugins/innogrit: Include timer.h
  * plugins/innogrit: add smart items for smart-log-add
  * plugins/micron-nvme: Use correct print format specifier for sizeof arguments
  * plugins/ocp: Include timer.h
  * plugins/ocp: Output 128bit values as uint128 type instead of double
  * plugins/ocp: pass struct nvme_dev to internal functions
  * plugins/seagate: Add support for OCP
  * plugins/toshiba: pass struct nvme_dev rather than fd + name
  * plugins/virtium: Output 128bit values as uint128 type instead of double
  * plugins/wdc: Add support for SN660 drive
  * plugins/wdc: Add type case for feature id
  * plugins/wdc: Output 128bit values as uint128 type instead of double
  * plugins/wdc: pass a struct nvme_dev around rather than a fd
  * plugins/wdc: pass struct nvme_dev rather than using global nvme_dev
  * plugins/ytmc: pass struct nvme_dev rather than fd + name
  * plugins: Use PRIu64 format specifier for 64bit types
  * print: Add Controller Ready Timeout Exceeded HW error code
  * solidgm: fix initialization warning
  * solidigm: Added parsing for telemetry customer screenable data
  * solidigm: Fix printf format for size_t variable
  * solidigm: Updated Telemetry parsing code to MIT license.
  * subprojects/libnvme: update for MI admin command coverage
  * tests: Update license to GPL-2.0-or-later
  * tree: Add NVMe-MI support
  * tree: Add dev_fd() helper
  * tree: Change nvme_dev from global to static
  * tree: Combine NVMe file descriptor into struct nvme_dev
  * tree: Move global device info to a single struct
  * tree: fail on non-negative return values from parse_and_open
  * udev: Add HOST_IFACE to udev rule (bsc#1208001)
  * util/json.h: Add json_object_get_uint64 fallback implementation
  * util/json: Add 128 bit JSON helpers
  * util/types: Add 128 bit conversion helpers
  * util: Fix le128_to_cpu on big-endian
  * util: Fix le128_to_cpu on little-endian
  * util: Move common type conversion helpers into util section
  * utils/json: Add json_object_new_uint64 for json-c &lt; 0.14
  * utils: Fix uint128_t usage
  * wdc:  OCP Log page updates and fixes
  * zns.c: report zones should be started after retrieved zone
- Handle suse-missing-rclink lint warnings by providing the symlinks
- Drop rpmlintrc as it is not needed anymore</changelog>
  <changelog author="daniel.wagner@suse.com" date="1675080000">- Update to version 2.3:
  * Added support for Flexible Data Placement (TP4146)
  * Added Persistent Discovery Controller support (TP8013/TP8014)
  * nvme-mi: support for firmware downloads
  * nvme device-self-test learned the --wait command line argument
    which makes nvme-cli to wait (incl. progress bar) in foreground
    until the test has finished.
  * A lot of bug fixes all over the place
- Update spec file
  * Project depends on meson &gt;= 0.50.0
  * make build dependency dropped</changelog>
  <changelog author="daniel.wagner@suse.com" date="1680264000">- Update to version 2.4 (jsc#PED-553 jsc#PED-3884):
  * plugins/ocp: Add SMART cloud log to solidigm plugin
  * nvme-print: Unify number base format for nsid
  * nvme-(discover,connect,connect-all): enable options '--keyring' and '--tls_key'
  * nvme-connect: enable option '--tls'
  * nvme-check-tls-key: add options to derive a 'retained' TLS key
  * nvme-gen-tls-key: add options to derive a TLS key
  * plugins/ocp: Move SMART cloud log methods to separate file for reusability
  * nvme: validate storage tag size correctly
  * nvme-print-json: Add json output status function
  * util: Cleanup argconfig parse function
  * nvme: Fix format command function indentation errors
  * util: Use argconfig commandline options pointer directly
  * nvme-print: Fix nvme show status function indentation errors
  * nvme: Check fw-commit command support MUD
  * print: print csi and opcode in error log (TP4113)
  * plugins/inspur: Cast vendor specific smart log value
  * nvme: Use correct ABORT type for self abort test
  * plugins/solidigm: Do not overwrite previously initialized variable
  * nvme-print: sanitize supported-log-pages output (bsc#1209550)
  * nvme: Enforce length to a multiple of 4 in get_log_page
  * nvme: fix block count and data size logic (bsc#1209564)
  * util: Introduce argconfig simple helper to check seen condition
  * plugins/ocp: Add set feature EOL/PLP failure mode no-uuid option
  * plugins/ocp: Refactor to clear feature identifier C1h and C3h
  * plugins/ocp: Add support for clear PCIe correctable error counters feature
  * nvme-doc: update man page for supported-log-pages (bsc#1209550)
  * plugins/ocp: OCP 2.0 field updates for SMART cloud log
  * nvme: Fix parameter limit range
  * fdp: Fix wrong Reclaim Unit Handle Status size
  * plugins/ocp: Add support for EOL/PLP failure mode feature
  * nvme-print: Fix printing of u32 values
  * nvme: Fix invalid memory access in show_registers
  * util: Add argconfig seen flag parameter to check if feature NSID set
  * nvme-print: fix segfault in supported-log-pages json output
  * fabrics: Fix ordering for auto connect services (bsc#1208075)
  * nvme.c: Check Firmware Update Granularity in fwdl
  * log: high latency timestamp issue
  * nvme: Align get feature data buffer length by page size to allocate
  * nvme: Continue get feature on invalid NS error to get multiple feature ids
  * plugins/ocp: SMART cloud log bug fixes.
  * Made temperature readouts in line with the SI.
  * Changed 'Kelvin' to 'kelvin', as recommended by the BIPM.
  * plugins/ocp: Fix whitespace and style issues
  * util: Revert JSON output to plain numbers
  * nvme: Add rae argument to telemetry-log command
  * nvme: Refactor get telemetry log page helper
  * nvme: Factor out parse telemetry log da element
  * nvme: Fix type in error message
  * unit: Add test-argconfig-parse
  * nvme: Use chunked read in get_log()
  * nvme: Use fprintf for error message logging in get_log()
  * nvme: fix /dev/spkd/ typo
  * doc: --storage-tag-check doesn't take any arguments
  * fabrics: Ensure host-traddr/iface consistency for "connect-all"
  * nvme-print: print the nvme generic name in json output as well
  * plugins/innogrit: modify command opcode for eventlog and cdump
  * completion: fix typo, add missing args
  * plugins/wdc: Fix data Formatting for Latency Monitor Log Page
  * nvme: Make json-c optional again
  * nvme-print: Move JSON printing function into a new file
  * plugins/solidigm: Use json_create_object wrapper
  * plugins/solidigm: Use struct json_object instead of typedef
  * fabrics: No need to sanitize trsvcid and traddr
  * docs: Fixed typos and missing options
  * util: Numbers without any suffix are also valid
  * util: Update suffix_binary_parse API
  * util: Reimplement suffix_si_parse
  * nvme: Filter out status flags for get feature command
  * util: Add crc32 implementation
  * nvme-print: Use attrs_info as key for Zone Attributes Information
  * nvme: Support effects-log for fabrics ctrl
  * plugins/solidigm: Add uuid index resolution
  * plugins/ocp: Use network byte order for OCP UUID value
  * json_discovery_log: avoid buffer overrun (bsc#1207435)
  * Fix connect nbft regressions (bsc#1209905)
  * Fix auto connect conditions (bsc#1210105)
  * Fix auto boot for NBFT connections (bsc#1211647)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1695988800">- Update to version 2.6 (jsc#PED-3610 jsc#PED-4879 jsc#PED-5061):
  * nvme: allocate payload buffer in create-ns command
  * nvme-print-stdout: Add CAP.CPS and CAP.NSSS human readable outputs
  * nvme: Add output-format default option instead of argconfig json option
  * nvme: fw-download offset only describes FW offset, not file offset
  * unit: add locale number test
  * util: handle utf-8 thousend separators correctly
  * nvme: Change to use NVME_ARGS verbose default option from OPT_ARGS
  * fabrics: Fix NVMF_ARGS macro to use parameter n correctly
  * nvme: Add verbose default option to show command debug output
  * util: Fix to set argconfig output format json option correctly
  * util: Split argconfig output format json function to set and get
  * nvme: Spport Phy Rx Eye Opening Measurement Log
  * nvme: Introduce nvme_realloc function
  * nvme: Fix for fdpa reserved field printing
  * completion: add 'version' and 'help' to list
  * udev-rule: apply round-robin iopolicy on i/o subsystems alone (bsc#1215994) (bsc#1219086)
  * nvme: Add support for the OAQD ID controller field
  * plugins/solidigm: use static log macro to calc bitmask
  * plugins/ocp: Rename FW activation history command
  * nvme: auto free nvme_dev resource
  * nvme: allocate aligned payloads for all nvme commands
  * nvme: introduce alloc helper with alignment support
  * util: add cleanup function for generic memory allocations
  * nvme: append huge to nvme_{alloc|free} function
  * nvme: fw_download use nvme_alloc only
  * fabrics: Removing duplicate code and moving to libnvme
  * nvme-print: omit size of protection information
  * tree: Modify label name close_fd to close_dev
  * fabrics: For TCP/RDMA, compare IP addresses with nvme_ipaddrs_eq() (bsc#1213768)
  * fabrics: lookup_discovery_ctrl() must look under host and not root (bsc#1213768)
  * nvme: Do not map status to errno codes
  * completions: Add bash completion for DSSD Power state feature(FID: C7h)
  * Documentation: Add document for DSSD Power state feature(FID: C7h)
  * plugins/ocp: Add DSSD Power state feature(FID: C7h)
  * avoid casting pointer arguments to argconfig functions
  * nvme-print: Add support for EGFEAT, Domain Identifier, TEGCAP and UEGCAP
  * nvme-print: Fix endurance_log whitespace changes
  * nvme: Fix retrieval of telemetry log up to specified data area.
  * nvme: Update list secondary command
  * wdc: Add support for SN861 drive
  * util: Set errno to 0 before strtol/stroul call
  * nvme: Revert passthru and submit_io to print status to stderr from stdout
  * plugins/zns: Fix offset in report zones
  * nvme-rpmb: Fix nvme_show_id_ctrl_rpmbs() definition error
  * fabrics: Use corresponding hostid when hostnqn is generated
  * json: fix seg. fault converting NULL to JSON string (bsc#1213762)
  * nvme-cli: fix extended metadata size calculation
  * nvme-print: Show subsystem iopolicy (bsc#1124564)
  * nvme-print-stdout: Do not show non reachable ns in namespace topology (bsc#1212598)
  * nvme-print: Fix show-topolocy for ctrls
  * doc: Fix typo in documentation
  * nvme-print-stdout: fix storage tag size label
  * nvme-print-stdout: List only ctrls which are part of ns (bsc#1212598)
  * nvme-print-stdout: Support subsys reachable from several hosts (bsc#1212598)
  * ccan: Add htable, strset and dependencies (bsc#1212598)
  * ccan: Remove unused documentation (bsc#1212598)
  * nvme-print: Split max power flags
  * nvme-print: fix counter while looping through uuid_list (bsc#1212598)
  * fabrics: only look for matching ctrl on same host (bsc#1213768)
  * README: Correct hugetlbfs spelling error
  * util: Delete unused CFG_BOOL argconfig type as duplicated with CFG_FLAG
  * util: Set LC_ALL=C as default if -H option is not used
  * nvme: Add support for create-ns command endg-id option parameter
  * nvme-print: fix argument order for show functions
  * plugins/solidigm: Added Marketing Name Log support for Solidigm.
  * nvme-print: Remove left overs from refactoring
  * nvme-print: Move num argument parsing into callbacks
  * nvme-print: Fix typo in callback definition
  * scripts: Make release script project neutral
  * scripts: Update update-docs.sh scripts
  * scripts: Execute the scripts from toplevel directory
  * scripts: Move helper scripts to a central place
  * docs: Update file modes
  * doc: Add information on --context
  * nvmf-autoconnect: Annotate the context to autoconnect
  * fabrics: Add support for volatile configuration
  * plugins/solidigm: Formated log page directory table consistently with "nvme list" format.
  * plugins/solidigm: Added Identify controller VU extensions parsing.
  * nvme-print-json: Print PCI pysical slot number for controller
  * nvme-print-stdout: Print PCI physical slot number for controller
  * libnvme.wrap: Bump to 42ac453
  * plugins/nbft: Use common code to parse print flags
  * fabrics: Do not print device on connect per default
  * fabrics: Revert 'fabrics: prevent 'nvme connect' to well-known discovery NQN'
  * nvme-print: fix wrong list-subsys output when ns are attached to different ctrls
  * plugins/micron: Correct NULL pointer checking error
  * plugins/innogrit: Add vendor command get-eventlog and get-cdump
  * nvme: Use correct data buffer size
  * nvme: Fix quoted string split across lines to use quoted newline
  * plugins/zns: Fix zns.c linux kernel check patch errors and warnings
  * plugins/ymtc: Fix ymtc-nvme.c linux kernel check patch warning
  * plugins/ymtc: Fix ymtc-nvme.c space indentation to tab indentation
  * plugins/virtium: Fix virtium-nvme.c linux kernel check patch errors and warnings
  * plugins/transcend: Fix transcend-nvme.c linux kernel check patch errors and warnings
  * plugins/solidigm: Fix linux kernel check patch errors and warnings
  * plugins/shannon: Fix shannon-nvme.c linux kernel check patch errors and warnings
  * plugins/seagate: Fix seagate-nvme.c linux kernel check patch warnings
  * plugins/scaleflux: Fix sfx-nvme.c linux kernel check patch errors and warnings
  * plugins/netapp: Fix netapp-nvme.c linux kernel check patch errors and warnings
  * plugins/nbft: Fix nbft-plugin.c linux kernel check patch warnings
  * plugins/micron: Fix micron-nvme.c linux kernel check patch errors and warnings
  * plugins/micron: Fix micron-nvme.c space indentation to tab indentation
  * plugins/memblaze: Fix memblaze-nvme.c linux kernel check patch errors and warnings
  * plugins/memblaze: Fix memblaze-utils.h space indentation to tab indentation
  * plugins/memblaze: Fix memblaze-nvme.c space indentation to tab indentation
  * plugins/intel: Fix intel-nvme.c linux kernel check patch errors and warnings
  * plugins/inspur: Fix inspur-nvme.c linux kernel check patch warnings
  * plugins/inspur: Fix inspur-nvme.c space indentation to tab indentation
  * plugins/innogrit: Fix innogrit-nvme.c linux kernel check patch errors
  * plugins/huawei: Fix huawei-nvme.c linux kernel check patch errors and warnings
  * plugins/fdb: Fix fdb.c linux kernel check patch warnings
  * plugins/dera: Fix dera-nvme.c linux kernel check patch errors and warnings
  * plugins/amzn: Fix amzn-nvme.c linux kernel check patch error and warnings
  * plugins/wdc: Fix wdc-utils.c linux kernel check patch errors and warnings
  * plugins/wdc: Refactor wdc-nvme.c for linux kernel check patch errors and warnings
  * util: Move falltrhough feature check to meson.builds
  * ocp: Add eol plp failure mode json outputs
  * nvme-print: Add nvme show result function
  * nvme-print-json: Add json output result function
  * nvme-print: Fix nvme_show_error() to call va_end() for json output format
  * nvme: Fix nvme format block-size option handling
  * Revert "nvme: Masks SSTAT in sanize-log output"
  * fabrics: Fix NVMF_ARGS macro indentation error
  * Documentation: Add document for OCP Device capability(LID: 0xC4) log page
  * completions: Add bash completion for OCP Device capability(LID: 0xC4) log page
  * plugins/ocp: Add Device capability(LID: 0xC4) log page
  * udev: fix warning reported by udevadm verify
  * fabrics: fix conditions in nvmf-autoconnect.service
  * fabrics: Change NVMF_OPTS as NVMF_ARGS to fix linux kernel check patch error
  * nvme: Split passthru commands read output
  * nvme: Fix io-passthru command read metadata output
  * plugin/ocp: Added implementation for 0xC1 log page
  * util: Fix suffix_si_parse to parse no decimal point but suffix value correctly
  * completions: Add zsh option values handling for sanitize command action
  * completions: Add ocp sub commands zsh completion
  * completions: Add ocp commands zsh completion
  * completions: Add ocp commands bash completion
  * nvmf-autoconnect: restart service to avoid dropping AEN
  * solidigm: Reduce memory usage in supported log pages feature
  * solidigm: Changes to supported log pages feature requested by review
  * solidigm: Add supported log pages log feature to Solidigm plugin
  * plugins/ocp: Added ocp unsupported requirements log page
  * completions: Add bash option values handling for sanitize command action
  * doc: Correct nvme-show-hostnqn command NAME description
  * completions: Add missing zsh commands descriptions
  * plugins/wdc: Extend SN530 support.
  * Fix incorrect article 'an' as 'a' to use for descriptions and message
  * nvme: Set effects-log command csi option help message string
  * completions: bash: Delete unsupported id-iocs command options
  * completions: bash: Add id-domain command
  * completions: Fix nvm-id-ns-lba-format command zsh definition
  * completions: Add json command option
  * nvme: Fix get-feature command sel parameter check to allow value 8
  * util: Delete unnecessary argconfig definitions OPT_VAL and CFG_VAL
  * util: Delete argconfig value type to add option value as va lists instead
  * util: Split to set argconfig option value
  * util: Delete argconfig value length to calcurate instead
  * nvme: Change sanitize command action option to use argconfig parse value
  * util: Add argconfig parse value function
  * util: Delete unused argconfig subopts type
  * util: Delete unused argconfig file types
  * util: Delete unused argconfig help function
  * nvme-wrap: do_admin_args_op should not clear args timeout
  * nvme: Fix linux kernel check patch warnings
  * nvme: Fix linux kernel check patch errors
  * plugins/ocp: Add telemetry-log command to OCP plugin
  * plugins/ocp: Add OCP set latency monitor feature command
  * plugins/ocp: Fix endianness in Latency Monitor Log output
  * plugins/ocp: Add missing fields in Latency Monitor Log
  * plugins/ocp: Fix typos in Latency Monitor Log
  * plugins/ocp: Reorganize OCP plugin source code
  * tests: Add tests for controller reset
  * plugin/solidigm: Added vs-internal-log command.
  * nvme: Add nvme_show_perror to use instead of perror for json output
  * nvme-print-json: Use vasprintf instead of vsnprintf to allocate string
  * nvme: fix rnlpt to_string() values.
  * nvme: fix io_mgmt args parse error
  * fdp: set-events feature is saveable
  * fabrics: Return errno value as negative
  * fabrics: Fix linux kernel check patch errors and warnings
  * nbft: add the nbft show plugin
  * nbft: added NBFT v1.0 table support (jsc#PED-1449)
  * nbft: make lookup_ctrl function public
  * nvme: Fix indentation errors around nvme show error API
  * nvme: Check validate output format err value instead of flags
  * nvme: Use nvme show error API to outptu stderr messages for json format
  * util: Check output format json for json error message output
  * nvme-printf: Add show error function for nvme list command json output
  * nvme: Add zns specfic field for create ns
  * nvme: Add ns-mgmt host software specified fields
  * nvme: Add dtype, dspec on write-zeroes, write-uncor
  * nvme-print: Add new fields print on id directive
  * nvme-print: Add VWCNP on NSFEAT of id-ns
  * nvme: Fix format command to skip to reread NSID all block device
  * plugins/solidigm: Fixes and clean-up of Telemetry parse code. Fixed parsing of 64 bit values. Fixed COD field name. Fixed compilation warnings when compiling for 32 bit. Added missing free(). Consolidated single entry function to telemetry parser. Consolidated use of integer types.
  * doc: Documentations maintenance changes
  * doc: Add nvme-mi-send command documentation
  * doc: Add nvme-mi-recv command documentation
  * doc: Add clear-pcie-correctable-error-counters command documentation
  * doc: Add eol-plp-failure-mode command documentation
  * plugins/solidigm: Add firmware activation history log to Solidigm plugin
  * plugins/ocp: Add firmware activation history log to OCP plugin
  * nvme-print: Use enum nvme_print_flags for nvme_show_id_ctrl
  * nvme: Add support for NVMe-MI send command
  * nvme: Use stdout for passthru and submit_io commands success messages
  * nvme: Fix passthru command function indentation errors
  * nvme: Add support for NVMe-MI receive command
  * fabrics: fix fc config JSON file handling (bsc#1210089)
  Refresh 0100-harden_nvmf-connect@.service.patch
- Fix install path for nvme-regress script</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420800">- Enable test during build (bsc#1207686)
- Drop minimum version meson dependency
- Add asciidoc dependency
- Build documentation when requested</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696852800">- Use fixed timestamps for documentation allowing reproducable builds
- Announce nvmeof-boot-support support via Provides
- Filter rpmlint warnings for systemd-service-without-service_ macros
- Add missing service files for NBFT feature
  * add 0001-fabrics-autoconnect-add-service-unit-for-connecting-.patch
  * add 0002-fabrics-add-udev-rule-to-avoid-renaming-nbft-interfa.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1697112000">- Add missing jsc# and bsc# tracking entries in change log.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1702987200">- Update to version 2.7:
  * nvme-print-json: include vs for identify namespace
  * nvme-print-stdout: enhance connect message (bsc#1219086)
  * fabrics: fix connect error if hostid file does not exist (bsc#1219086)
  * fabrics: fix invalid output format error during nvme connect (bsc#1219086)
  * wdc: Fix vs-smart-add-log Command for SN650 and SN655
  * nvme: restric hmac options for gen-tls-key (bsc#1219086)
  * wdc: Fix UUID index fallback mechanism
  * plugins/ocp: Add OCP Telemetry String log page, Telemetry log page
  * completions: Add bash completions for telemetry string log page
  * plugins/solidigm: Added OCP 2.0 compatibility version command
  * plugins/solidigm: Added OCP 2.0 vs-drive-info command.
  * plugins/ocp: Fix printing order of various Latency Monitor Log buckets
  * nvme: validate output format split status from flag return value
  * nvme: simplify cleanup_nvme_dev()
  * cleanup: remove unused cleanup_charp()
  * wdc: Add support for SN861 2nd pci device id
  * nvme: replace libhugetlbfs with mmap and madvise
  * util/mem: move alloc helper to util section
  * nvme: auto cleanup filedescriptors
  * nvme: auto cleanup buffers
  * nvme: return error code in get_persistent_event_log
  * nvme: sanitize nvme-gen-tls-key
  * nvme: print out the resulting TLS identity for 'nvme check-tls-key'
  * nvme: Add version '1' identifier for nvme-gen-tls-key
  * subprojects/libnvme: update wrapper for TP8018
  * plugins/solidigm: Added re_sku_count smart atrribute
  * doc: Fix nvme-connect manpage --application option string
  * plugins/ocp: changed command clear-pcie-correctable-error-counters to match OCP 2.0 spec.
  * plugins/solidigm: Added command to clear PCIe Correctable Error Counters according to OCP 2.0
  * plugins/ocp: Reorganized clear feature code for better reuse
  * nvme: fixup length calculation for 'nvme gen-tls-key --secret'
  * doc: remove invalid hostkey info for --dhchap-secret
  * nvme-print-json: use human helper everywhere
  * nvme-print-json: remove obj_print helper
  * plugins/ocp: update nvme_show_select_result call
  * mailmap: only show contributer's name
  * nvme-print-json: Change to report status and message in array
  * nvme-print-json: Change to report feature select in array
  * nvme-print-json: Change to report error and data in array
  * nvme-print-json: Add show_init/finish calls to report features in array
  * nvme-print: Add nvme_show_error_status() to merge error message and status
  * nvme-print-json: Use r instead of root and use obj_add_***(r, ..., ...)
  * nvme-print-json: Delete static const char string global variables
  * nvme-print-json: Add remaining controller registers readable format
  * nvme-print-json: Add readable format cap, vs, cc, csts, nssr and crto registers
  * nvme-print-json: Combine duplicated json key and val string variables
  * nvme-print-json: Replase json_array_add_value_string() to array_add_str()
  * nvme-print-json: Replase json_object_add_value_uint128() to obj/root_add_uint128()
  * nvme-print-json: Replase json_object_add_value_object() to obj/root_add_obj()
  * nvme-print-json: Replase json_array_add_value_object() to array_add_obj()
  * nvme-print-json: Replase json_object_add_value_array() to obj/root_add_array()
  * nvme-print-json: Replase json_object_add_value_uint() to obj/root_add_uint()
  * nvme-print-json: Replase json_object_add_value_int() to obj/root_add_int()
  * nvme-print-json: Replase json_object_add_value_uint64() to obj/root_add_uint64()
  * nvme-print-json: Replase json_object_add_value_string() to obj/root_add_str()
  * nvme-print-json: Update feature_show_fields_*** to use root/obj_add_***()
  * nvme-print-json: Update lba_status_log to use root_add_***() and obj_add_***()
  * nvme-print-json: Replace lba_status_log printf() to root_add_result()
  * nvme-print-json: Add list_item print function
  * nvme-print-json: Add lba_status_info print function
  * nvme-print-json: Add lba_range print function
  * nvme-print-json: Add id_ctrl_rpmbs print function
  * nvme-print-json: Unify json_list and jroot object names to root
  * nvme-print-json: Add json_zns_changed print function
  * nvme-print-json: Add root_add_result() to output result message
  * nvme-print-json: Split persistent_event_log print function
  * nvme-print-json: Remove unnecessary string newline code
  * nvme-print-json: Replace effects_log_list print to use json_print()
  * nvme-print-json: Print persistent_event_log no log data result correctly
  * nvme-print-json: Add static "result" and "erorr" strings variables
  * nvme-print-json: Add single_property printf function
  * nvme: Replace get feature command stderr output to nvme_show_error()
  * nvme-print-json: Change d() output to use d_json()
  * nvme: Fix get-feature command mixed stdout and json outputs
  * nvme-print-json: Add remaining feature fields print functions
  * nvme-print-json: Update formatting and codying style
  * build: Add -std=c99 to CFLAGS for muon on CentOS 7
  * fabrics: add udev rule to avoid renaming nbft interfaces
  * fabrics: autoconnect: add service unit for connecting NBFT subsystems
  * fabrics: autoconnect: explicitly express module dependency
  * Updates to codeql config
  * libnvme-wrap: exit on VOID_FN lookup failure
  * plugins/ocp:Added the ocp C6h feature api
  * plugin/ocp_fid_c6h:Added the ocp C6h feature api
  * nvme-copy: support cross-namespace copy
  * nvme/plugins: fix mismatch operator
  * nvme: fix overflow possiblity
  * nvme: reduce identify cmd issue
  * nvme: allow set-features to take input from stdin
  * Fix common misspellings from codespell project
  * nvme-print: Correct to print correct ascii character string length
  * print-stdout: print Host Behavior Support correctly
  * build: Bump libnvme wrap
  * plugins/solidigm: Added support for temperature statistics log page
  * Add support for codeql sweeps
  * doc: Add virt-mgmt command
  * doc: Add id-uuid command
  * doc: Add list-secondary command
  * doc: Add id-ns-granularity command
  * doc: Add nvme commands --output-format and --verbose options
  * completions: Add nvme-mi-recv nad nvme-mi-send commands completions
  * completions: Change short option -o and -v duplicated to upper case
  * doc: Change short option -o and -v duplicated to upper case
  * nvme: Change short option -o and -v duplicated to upper case
  * nvme: Change phy-rx-eom-log command to use NVME_ARGS instead
  * plugins/memblaze: Add smart-log-add and latency-feature functions
  * plugins/solidigm: internal-logs Telemetry auto detect last data area.
  * nvme: Change to use NVME_FLBAS_META_EXT() macro to check flbas value
  * nvme-print-json: Add host memory buffer and timestamp features print functions
  * nvme-print-json: Add feature fields print functions
  * nvme-print-json: Add TMPTH feature print function
  * nvme-print-json: Add show_feature_fields print function
  * nvme-print-json: Add select_result print function
  * nvme-print-json: Use json_print to print and free object
  * nvme-print-json: Add lba_status print function
  * nvme-print-json: Combine variable definition and setting value
  * nvme-print-json: Add id_iocs print function
  * nvme-print-stdout: Fix coding style errors
  * nvme-print-json: Add directive print function
  * nvme: Fixed segmentation fault when getting host initiated telemetry
  * plugins/wdc: enhanced SN861 device support
  * plugins/wdc: cleanup line lengths
  * nvme: do not include meta data for PRACT=1 and MD=8
  * nvme: use block-count arg if provided
  * build: bump libnvme to disable tests option
  * build: Add static build on CI target
  * nvme-print: Add nvme_zns_start_zone_list() API function
  * nvme-print: Add nvme_zns_finish_zone_list() API function
  * nvme-print-binary: Set list function to NULL if unimplemented
  * nvme-print-json: Change order list functions and set NULL if unimplemented
  * nvme-print-stdout: Fix to set stdout_list_item print function missed
  * plugins/solidigm: log page name extraction using nvme_log_to_string function
  * nvme-print: Added missing logpage names in nvme_log_to_string function
  * udev-rules: rename netapp udev rule (bsc#1219086)
  * udev-rules: set ctrl_loss_tmo to -1 for ONTAP NVMe/TCP (bsc#1219086)
- Remove upstreamed patches
  * remove 0001-fabrics-autoconnect-add-service-unit-for-connecting-.patch
  * remove 0002-fabrics-add-udev-rule-to-avoid-renaming-nbft-interfa.patch
- Update spec file
  * remove libhugetblfs depedency
  * update NetApp udev rule file name</changelog>
  <changelog author="daniel.wagner@suse.com" date="1703160000">- Update to version 2.7.1:
  * nvme-print-json: Revert field name changes (bsc#1218306)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1707912000">- Update to version 2.8:
  * nvme-print-json: append array object in json_support_log
  * sed: Add plugin for basic SED Opal operations (jsc#PED-5061)
  * don't include newlines in already wrapped text
  * nvme: do not include meta data for PRACT=1 and MD=8 (version 2)
  * create-ns: align the namespaces to 1Mib boundaries when using SI suffixes
  * doc: Fix config-schema.json's URL
  * plugins/solidigm: Compressing vs-internal-log log files into zip file.
  * nbft: do not issue an error if ACPI tables are missing
  * nbft: fixup include for libnvme
  * doc: Fix short option name for cfg-file
  * completions: added Solidigm plugin to autocomplete scripts
  * nvme: Remove unused cfg argument from NVME_ARGS() macro
  * nvme: fix directive receive identify offsets
  * nvme-fabrics: enable option 'concat'
  * build: Update libnvme wrap
  * plugins/wdc: Add Debug Log Collection Support
  * nbft: fix tcp/dhcp address fallback retry (bsc#1218873)
  * nvme: use correct telemetry log size
  * nvme-print: fix typo in list verbose output (bsc#1219086)
  * nvme: print inserted tls key for check-tls-key (bsc#1219086)
  * plugins/wdc: Plugin fixes and updates
  * fabrics: move hostid/hostnqn warnings to verbose level (bsc#1219086)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737600">- Update to version 2.9:
  * nvme-print: expand the maximum field length to prevent misalignment
  * plugins/spdk: plugin to list SPDK subsystems
  * nvme-print: check if controller belong to SPDK
  * plugins/spdk: plugin to list SPDK controllers
  * nvme-print-stdout: fix ASQB, ACQB and BMBBA prints
  * build: bump libnvme wrap
  * nvmf-autoconnect: fix string encoding
  * nvme: identify primary ctrl do not accept nsid
  * nvme-wrap: remove unused nvme_cli_get_log_ana_groups()
  * nvme-print-json: use admin queue attributes definitions
  * nvme-print-json: use CSTS definitions
  * nvme-print-stdout: use POWER_OF_TWO macro
  * nvme-print-json: use controller configuration definitions
  * nvme-print-json, nvme-print-stdout: add tertiary version number
  * nvme-print-json: use NVME_MAJOR and NVME_MINOR definitions
  * nvme-print-json: use NVME_BOOT_PARTITION_INFO field definitions
  * nvme-print-json: add support telemetry log create event in PEL
  * nvme-print-json: add support set feature event in PEL
  * nvme-print-json: add obj_d() function
  * nvme-print-json: add obj_add_uint_0nx() function
  * meson.build: Fix spelling of sed-opal.h filename
  * sed_opal: Only build when we really have sed_opal headers
  * nvme: fix error path if write() fails in get_telemetry_log()
  * plugins/solidigm: Additional LID for temperature statistics.
  * plugins/solidigm: Improved Solidigm UUID index detection.
  * nvme-print-stdout: Add CSTS.ST register stdout print
  * nvme-print-stdout: Use NVME_CMIC definitions
  * nvme-print: Use NVME_UNIT definitions
  * nvme-print-stdout: Use NVME_CMBMSC/STS/EBS/SWTP definitions
  * plugins/ssstc: add a new plugin for SSSTC driver
  * nvmf-connect: systemd hardening effort
  * plugins/ocp: Adjusted variable type size carrying UUID index to 8 bit.
  * nvme: fix security buffer allocation size
  * nvme: Change fw-download xfer initialization to set 0
  * nvme: Add fw-download warning message for FWUG alignment error
  * plugins/ocp: Split ocp_get_uuid_index() into find and get functions.
  * nvme: fix mem leak in multiple key related functions (bsc#1223331)
  * fabrics: fix mem leak in nvmf_check_hostid_and_hostnqn() (bsc#1223331)
  * nvme-print-stdout: Use NVME_BPRSEL definitions
  * nvme-print-stdout: Use NVME_BPINFO definitions
  * nvme-print-stdout: Use NVME_CMBSZ definitions
  * nvme-print-stdout: Use NVME_CMBLOC definitions
  * Revert "logging: fix error handling for ioctl passthru wrappers"
  * fabrics: align identify command payload
  * ocp: Unify line start spacing as tabs
  * ocp: support OCP DSSD Async Event Config feature
  * nvme: Add support for get-reg and set-reg commands
  * nvme-print-json: Add register print functions
  * nvme-print-stdout: Add register print functions
  * nvme-print: Add register print functions
  * nvme: Refactor mmap_registers to add writable parameter
  * nvme-print: Change PMRSZU string function as unit string
  * nvme-print: Refactor CMBLOC and PMRSTS registers function
  * logging: fix error handling for ioctl passthru wrappers
  * nbft: Fix scandir() error check
  * nbft: Refactor connection attempt out
  * nvme-print: Use EOM optional data present macros changed
  * nvme-print: Print cntlid number for controller (bsc#1224024)
  * nvme: check-tls-key fails despite having hostnqn file (bsc#1223331)
  * nvme: print retained key for gen-tls-key's -i option too (bsc#1223331)
  * fabrics : allow host to create duplicate connections to target
  * fabrics: Fix fast_io_fail_tmo option
  * nvme-print-stdout: use admin queue attributes definitions
  * nvme-print-stdout: use CSTS definitions
  * nvme-print-stdout: use controller configuration definitions
  * nvme-print-stdout: use NVME_MAJOR and NVME_MINOR definitions
  * nvme-print-stdout: use FDP configuration attributes definitions
  * nvme: add new function 'tls_key' (bsc#1226197)
  * nvme: use library functions for importing and exporting TLS keys (bsc#1216982)
  * nvme: extend error message for ns scan failures
  * nvme-print-json: Bugfix status json key of sanitize-log
  * sed: update SED password when initalizing (bsc#1222168)
  * plugins/memblaze: add performance stats
  * plugins/memblaze: fix code mis-type error
  * plugins/memblaze: code refactor on applying __packed on more structs
  * plugins/memblaze: code refactor on using cleanup_nvme_dev
  * nvme: Fix to cleanup free raw_secret memory allocated
  * plugins/memblaze: code-format on leading indent and align
  * plugins/wdc: Fix narrow index variable type in for loop to __u32
  * plugins/wdc: Whitespace changes
  * nvme: Delete unused nvme root scanned
  * ocp: support OCP 2.5 Set Telemetry Profile feature
  * nvme: Don't seg fault if given device is not char/block device
  * nbft: Include SSNS index in error messages (bsc#1222026)
  * nbft: Pause logging for expected connection failures (bsc#1222026)
  * nbft: Silence connection failures for unavailable SSNS (bsc#1222026)
  * nbft: Fix 'verbose' argument type (bsc#1222026)
  * plugins/nbft: Implement verbose logging
  * plugins/nbft: Print the new SSNS flags
  * nbft: Fix uninitialized variable
  * plugins/nbft: Fix uninitialized variables
  * plugins/sed: Fix uninitialized variable
  * nvme-print-stdout: Fix uninitialized variable
  * nvme-print-json: Fix uninitialized variable
  * build: Switch default meson buildtype to 'debugoptimized'
  * nvme: do not scan topology when mmaping registers
  * nvme-print-stdout: Use NVME_BOOT_PARTITION_INFO field definitions
  * nvme-print-stdout: Use NVME_GET for MI commands supported and effects CSP
  * nvme-print-stdout: Use NVME_GET for FID supported and effects FSP
  * nvme-print-stdout: Use NVME_SET_FEAT_EVENT register definitions
  * nvme-print: Add PEL EHAI port identifier type printf function
  * build: bump libnvme wrap
  * ocp: fix for power-state argument checking
  * nvme: do not issue warning when nvme_core module is not loaded
  * wdc: Review changes and build fixes
  * wdc:  Fix timestamp displayed by vs-firmware-activate-history command
  * logging: Split to output ioctl latency by log info level (bsc#1231668)
  * nvme-print-stdout: Change hexadecimal value 0x prefix to use %#x
  * nvme-print-stdout: Fix LBA status DSLBA output as hexadecimal
  * nvme-print-stdout: Split line length exceeded 100 columns
  * nvme-print-stdout: Use NVME_PMRMSC register definitions to print
  * nvme-print-stdout: Use NVME_PMRSWTP register definitions to print
  * nvme-print-stdout: Use NVME_PMREBS register definitions to print
  * nvme-print-stdout: Use NVME_PMRSTS register definitions to print
  * nvme-print-stdout: Use NVME_PMRCTL_EN register definition to print
  * nvme-print-stdout: Use NVME_PMRCAP register definition to print
  * doc: Fix admin and io passthru cdw parameters description
  * doc: Add get-feature cdw11 and set-feature cdw12 parameters
  * micron-nvme: Unuse stat() to check if strMainDirName exists
  * doc: Fix get-property and set-property offset and value descriptions
  * doc: Fix documentation file mode 100755 to 100644
  * nvme-print-stdout: Fix channel configuration descriptors pointer
  * nvme-print-stdout: Check sscanf return value
  * nvme-print-stdout: Fix linux kernel check patch errors
  * nvme: Delete unusual fallthrough for cases have no body
  * nvme: Delete duplicated semicolon
  * nvme-print, common: Fix for whitespace change
  * logging: output ioctl debugging info (bsc#1231668)
  * nvme: track verbose level (bsc#1231668)
  * logging: track log level globally
  * logging: move logging code to a new file
  * nvme: update include for libnvme
  * nvme: remove unused declaration
  * build: bump libnvme wrap
  * nvme-netapp: add nspath tlv handling (bsc#1220971)
  * rpm: Add missing rule and service files
  * nvme-print-json, nvme-print-stdout: Use CHAR_BIT definition
  * nvme-print-stdout: Delete duplicated if condition checking line
  * ocp: Fix timestamp displayed by fw-activate-history command
  * wdc: Add support for the get-drive-status command to SN861
  * nvme-print: Fix nvme_host_metadata_type_to_string() indentation errors
  * nvme-print: Add PEL RCI port identifier type printf function
  * nvme-print-stdout: Use persistent event log RCI definitions
  * build: bump libnvme wrap
  * nvme: Add show-regs and get-property commands NSSD print outputs
  * nvme-print: print more details in ns-descs verbose output (bsc#1223331)
  * Revert "nvme-print-json: remove obj_print helper"
  * sed: Confirm entered password before initialization.
- drop systemd service harden file, upstream ships this patch.
  * remove 0100-harden_nvmf-connect@.service.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737601">- Update to version 2.9.1:
  * plugins/spdk: drop the plugin</changelog>
  <changelog author="daniel.wagner@suse.com" date="1722600000">- Update to version 2.10:
  * sed: Fix parsing of Discovery0 features
  * fabrics: avoid potential segfault in nvmf_dim() (bsc#1231668)
  * nvme: avoid segfault in show-topology (bsc#1226197)
  * fabrics: do not leak nvme_ctrl_t object on connect
  * nvme: extend help message when mmap regs fails
  * nvme: return -ENXIO value to open device if errno not set
  * wdc: OCP 2.5 Log Page Updates
  * fabrics: drop --quiet alias -S
  * fabrics: drop --disable-sqflow alias -d
  * fabrics: check if json config is existing (bsc#1231668)
  * plugins/ocp: fix UAF when printing telemetry log
  * nvme-print-stdout: fix persistent-event-log set feature event output
  * fabrics: do not report error when no modules are loaded when disconnecting
  * fabrics: use cleanup helper where possible
  * fabrics: print an error for ENOENT too
  * plugins/virtium: use time_t for time_stamp values
  * completions: add ocp set-error-injection command
  * doc: add ocp set-error-injection command
  * ocp: add set-error-injection command
  * nvme: use argconfig_parse_seen to check conditions
  * nvme: use proper mask to get correct lbafu value
  * utils: fix print formatting option
  * utils: cleanup includes in utils.h
  * utils: add missing header
  * nvme-print: Added print for two new fields for HMB feature
  * plugins/micron: Move OCP internal log parsing from Micron to OCP Plugin.
  * fabrics: remove unused _discover_from_json_config_file() argument
  * nvme: avoid unnecessary dup() + close() in io_mgmt_send()
  * util: remove unnecessary NULL check in cleanup_nvme_root()
  * nvme: use argconfig_parse_comma_sep_array_u16() in attach-ns
  * util: avoid duplication in argconfig_parse_comma_sep_array*()
  * util: remove redundant loop condition in argconfig_parse()
  * util: introduce is_null_or_empty() to avoid strlen()
  * util: reduce allocation sizes in argconfig_parse()
  * util: consolidate call paths to argconfig_parse_type()
  * util: reduce complexity of argconfig_parse_val()
  * util: reduce arguments passed to argconfig_parse_type()
  * util: remove empty default case in argconfig functions
  * util: remove unnecessary parentheses in argconfig_parse_type()
  * util: remove redundant cast in argconfig_parse_type()
  * util: inline argconfig_parse_byte()
  * util: remove redundant NULL check in argconfig_print_help()
  * util: use cleanup to avoid goto in argconfig_parse()
  * util: make argconfig_set_opt_val() a void function
  * util: remove argconfig_parse_val() declaration
  * util: remove argconfig CFG_SIZE type
  * wdc: Update and refactor the C0h log page parsing
  * ccan: Add freed pointer checking to delete strset member
  * fabrics: connect all hosts in config.json (bsc#1226216)
  * fabrics: refactore discover from json config (bsc#1226216)
  * fabrics: first read config before topology scanning (bsc#1226216)
  * fabrics: use helper to lookup default hostnqn/hostid (bsc#1226216)
  * fabrics: extend already connected message (bsc#1226216)
  * fabrics: use cleanup helper to free nvme root object
  * nvme: check MD size with PI size when PRACT set to 1
  * nvme-print: add new field added in TP4090
  * nvme-print-binary: add effects-log command output missed
  * completions: add ocp get-error-injection command
  * doc: add ocp get-error-injection command
  * ocp: add get-error-injection command
  * ocp: fix eol-plp-failure-mode command sel option value
  * doc: fix ocp eol-plp-failure-mode select short option
  * ocp: set UUID index for eol-plp-failure-mode command to get
  * nvme: fix verbose logging (bsc#1231668)
  * doc: fix micron ocp telemetry log parse title
  * nvme-rpmb: send RPMB_REQ_READ_RESULT for authentication key programming
  * plugins/micron: Add support for OCP telemetry log parsing
  * ocp: Update Plugin Version
  * nvme: fix lbaf inuse to use 6:5 bits
  * ocp: use NVME_ARGS macro definition by eol-plp-failure-mode command
  * nvme: extern NVME_ARGS macro definition
  * nvme: use _cleanup_free_ type buffer for get-feature command
  * plugins/ocp: Update telemetry string log page (C9h)
  * nvme-print-json: add get-feature command fahrenheit temperature output
  * nvme: add get-feature and id-ctrl commands fahrenheit outputs
  * nvme: delete smart-log command fahrenheit option
  * nvme-print: check locale to use temperatures in degrees fahrenheit
  * completion: add support for tls-key (bsc#1226197)
  * doc: add tls-key --revoke documentation (bsc#1226197)
  * doc: fix tls-key --keyfile shorthand (bsc#1226197)
  * nvme: add support to revoke TLS key (bsc#1226197)
  * nvme: return error code/message for TLS commands (bsc#1226197)
  * nvme: factor out import key function (bsc#1226197)
  * nvme: use cleanup helper to close file descriptor (bsc#1226216)
  * nvme-rpmb: use cleanup helper for STREAM objects
  * fabrics: use cleanup helper for STREAM objects
  * nvme: use cleanup helper for STREAM objects (bsc#1226216)
  * nvme: strip newline when parsing TLS key files (bsc#1226197)
  * nvme: use stdout for exporting TLS keys (bsc#1226197)
  * nvme: change _cleanup_file_ to _cleanup_fd_ (bsc#1226197)
  * common.h: Avoid using unsupported load/store instructions in arm64 VMs
  * ocp: OCP 2.5 Telemetry DA 1 and 2 Parsing Updates
  * nvme-print-stdout: refactor subsys config (bsc#1231668)
  * wdc: Fix compiler warning.
  * nvme: add flags type nvme_print_flags_t
  * nvme-print: Use 'unsigned int' instead of 'unsigned'
  * nvme: update parse_args() return value handling
  * nvme-print: Fix nvme_show_smart_log indentation error
  * nvme-print-stdout: Fix stdout_smart_log indentation error
  * nvme-print-binary: Fix binary_smart_log indentation error
  * completions: add smart-log command fahrenheit option
  * doc: Add smart-log command fahrenheit option
  * nvme: Add smart-log command fahrenheit option
  * nvme-print: add PEL vendor specific and TCG defined events strings
  * nvme-print: Print PEL reserved event string
  * completions: Add timeout option bash completions
  * completions: Add timeout option zsh completions
  * completions: Add io-mgmt-recv/send commands zsh completions
  * completions: Add /dev/nvme argument missed
  * completions: Change fw-activate command name to fw-commit
  * completions: Fix _nvme indentation errors (bsc#1226197)
  * completions: Fix bash-nvme-completion.sh indentation errors (bsc#1226197)
  * doc: Add nvme commands timeout option
  * nvme: Add support for delete-ns command timeout option
  * nvme: Change NVME_DEFAULT_IOCTL_TIMEOUT to use nvme_cfg timeout
  * nvme: Add nvme_cfg timeout default option
  * nvme: Add nvme_cfg global variable for NVME_ARGS default options
  * nvme: add helper function to get pif and sts value
  * nvme: choose PIF from QPIF if QPIFS supports and PIF is QTYPE
  * nvme: use libnvme's atomic ANA log page fetch
  * nvme: fix maximum ANA log page length calculation
  * nvme-print-json: add missing va_end()
  * fabrics: skip namespace scan for fabric commands
  * nvme-print: print the new fields added in TP4141a
  * plugins/ocp: underflow + index fixes for telemetry
  * plugins/ocp: Add ocp TCG Configuration Log Page
  * nvme-print-stdout: Add helper function to print PIF in string form
  * doc: fix format command info
  * nvme: telemetry: report the correct error if the ioctl() fails.
  * nvme-print: add the cancel opcode to the nvme_cmd_to_string() list
  * doc: fix ocp format issues
  * nbft: Reuse existing discovery controller
  * nbft: Skip SSNS records pointing to well-known discovery NQN
  * nbft: Perform actual discovery
  * util/cleanup: Add cleanup for struct nvme_fabrics_uri
  * fabrics: Make some symbols public (bsc#1226216)
  * nvme-print-stdout: fix format index in stdout_nvm_id_ns
  * plugins/solidigm: Added workload-tracker command
  * plugins/solidigm: Added extra VU fields to id-ctrl
  * nvme-print-stdout: print MEM bit of CTRATT field
  * nvme-print-stdout: fix to print the log line by line
  * fabrics: Always pass hostid and hostnqn (bsc#1226216)
  * plugins/ssstc: Replace __uint16_t with uint16_t
  * plugins/solidigm: Added log pages to vs-internal-logs
  * sed: perform a tper revert after lsp revert
  * plugins/nbft: Use default library logging
  * docs: Add missing OCP plugin docs to meson
  * ocp: Switch OCP plugin to use semantic versioning
  * nvme: fix fw-commit MUD result message
  * sed: only re-read partition table after unlock.
  * nvme-print-json: Fix LBA status DSLBA output as hexadecimal
  * nvme-print-json: Use NVME_PMRxxx register definitions to print
  * nvme-print-stdout: Fix PMRWBM register name
  * nvme-print-json: Fix channel configuration descriptors pointer
  * nvme-print-json: Fix linux kernel check patch errors
  * nvme-print: Added "Command and Feature Lockdown" string to LID 0x14
  * plugins/innogrit: `u_char` -&gt; `unsigned char`
  * nvme: Use C99 types for uint32_t
  * nvme-print-stdout: print frl1/2/3 values for zns id-ns
  * solidigm: Eliminate &lt;linux/limits.h&gt;
  * nvme: remove double free in persistent-event-log
  * ocp: Add Get DSSD Power State Feature (FID: C7h)
  * nvme: initialize default library logging
  * nvme: use cleanup helper for nvme_root_t objects (bsc#1226197)
  * doc: add nvme connet ctrl-loss-tmo description
  * plugins/solidigm: Automatic enabling Data Area 4 when retrieving Telemetry.
- always build the docs
  * add 0001-docs-rename-ocp-unsupported-req-log-file.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1730376000">- Update to version 2.11:
  * docs: update check-tls-key arguments
  * nvme: add support to append TLS PSK to keyfile for check-tls-key
  * nvme: return correct error code in append_keyfile
  * docs: nvme-id-doman: dom{ia =&gt; ai}n
  * ocp: fix latency monitoring data structure entry endian
  * ocp: fix TCG configuration log endian
  * ocp: fix firmware activation history entry endian
  * docs: update gen-tls-key arguments
  * nvme: add support to add derive TLS PSK to keyfile
  * nvme: rename identity to version
  * nvme: set file permission for keyfile to owner only
  * nvme: export tls keys honoring version and hmac
  * nvmf-keys: add udev rule to import tls keys
  * docs: update TLS options
  * fabrics: add support to connect to accept a PSK command line
  * fabrics: add support to connect to accept a configuration
  * nvme: use unsigned char for hmac and identity
  * nvme-print: Add Sanitize Media Verification Event in PEL log
  * netapp-ontapdev: add err msg for no ontapdevices
  * netapp-smdev: add err msg for no smdevices
  * doc: Add sanitize command emvs option
  * ocp: combine to use GUID length definitions
  * nvme: update tls_key() handling
  * nvme-print-stdout: print VERS bit of SANICAP field
  * nvme: add EMVS support to sanitize command
  * ocp: remove callback function cast
  * doc: added commit conventions to contribution guidelines
  * ocp: fix ocp-print-stdout.c indentation error
  * ocp: fix ocp-nvme.c indentation errors
  * ocp: build ocp-nvme.c and ocp-telemetry-decode.c without json
  * ocp: split TCG configuration log print codes
  * ocp: split telemetry string log print codes
  * ocp: split device capabilities log print codes
  * ocp: split error recovery log print codes
  * ocp: split unsupported requirement log print codes
  * ocp: split latency monitor log print codes
  * ocp: move ocp telemetry log print function into ocp-print
  * ocp: split smart extended log print codes
  * ocp: split ocp-fw-activation-history print codes
  * plugins: update meson.build file to always build ocp plugin
  * ocp-print: move json code into separate files
  * nvme-print-json: display only verbose output
  * ocp-nvme: ocp plugin version update
  * nvme-print: print KV command set page header
  * doc: show where self-test results can be found
  * plugins/memblaze: fix a wrong id on smart-log-add
  * plugins/dapustor: smart-log-add fix
  * plugins/sed: add sid password change (bsc#1229677)
  * plugins/solidigm: Automatic retry smaller log chunk size.
  * ocp-nvme: Add LMDATA-37 for Latency Monitor Log
  * ocp-nvme: remove ocp log page version checking
  * wdc: Fix for Reading WDC C2 Vendor Unique Log Page
  * ocp: Fixes for OCP 2.5 Telemetry DA1 FIFO Event Parsing
  * nvme-print-json: update JSON verbose output for nvm-id-ctrl (bsc#1231668)
  * wdc: Add Support for SN5100S
  * nvme: Support show-regs for nvmeof
  * ocp: fix option handling in internal-log
  * Documentation: Added solidigm plugin commands
  * wdc: add support for SNTMP drive
  * nvme-print: print NSSES field of CAP register
  * ocp: fix GUID output
  * nvme-print-json: print controller register values in offset order
  * nvme-print-json: print CMBEBS and CMBSWTP in json format
  * nvme-print-stdout: update changed-ns-list-log output (bsc#1231668)
  * nvme: fix uninitialized value in error-log (bsc#1231668)
  * nvme: fix to convert metadata size to native byte order
  * nvme-print: fix error information log page endianness error
  * completions: add get-feature command changed option
  * doc: add get-feature command changed option
  * nvme: separate get NVME_GET_FEATURES_SEL_CHANGED definition
  * nvme: use NVME_GET_FEATURES_SEL definitions
  * nvme-print-stdout: use NVME_CTRL_OAES definitions
  * completion: add ocp set-telemetry-profile to zsh
  * completion: add solidgm work-tracker binding
  * plugins/solidigm: Added Workload Tracker Triggers and Wall Time
  * ocp: include util/types.h to use nvme_uint128_t
  * ocp: fix to set log data pointer allocated
  * nvme: use NVME_CHECK() to check get features select field value
  * ocp: split ocp-hwcomp log
  * completions: add ocp hardware-component-log command
  * doc: add ocp hardware-component-log command
  * ocp: add hwcomp log json output
  * ocp: add hwcomp log command list option
  * ocp: add hwcomp log command comp-id option
  * ocp: add hwcomp dummy definition
  * ocp: add support for hwcomp log page
  * nvme: use NVME_CTRL_FNA definitions
  * netapp-smdevices: print single device output too (bsc#1231668)
  * netapp-smdevices: segregate print routines (bsc#1231668)
  * Add Support for new SN655 PCI Device ID
  * nvme-print-json: extern json object add functions
  * ocp: add SMART / health information extended log page version 4
  * ocp: add error recovery log page version 3
  * ocp: add get-enable-ieee1667-silo command
  * fabrics: fix incorrect access filename check (bsc#1231668)
  * nvme: use NVME_GET_FEATURES_SEL_SUPPORTED definition
  * nvme-print-json: use _cleanup_free_
  * plugins/solidigm: fix use after free.
  * ocp: fix ocp-nvme.c coding style errors
  * ocp: Change C9 function names to use c9 instead
  * ocp: fix to return c9 log page data error to open file
  * ocp: fix to set return value to get c9 log page data
  * nvme: update nvme_insert_tls_key_versioned() return handling (bsc#1231668)
  * nvme-print-stdout: add print_array function
  * logging: add print_info function
  * util: extern uint128_t_to_double() function
  * nvme-print: sanitize error-log output (bsc#1231668)
  * plugins/solidigm : Fixing vs-internal-log to generate identify per allocated namespace.
  * nvme-print: added new fields for nvm_id_ns
  * plugins/fdp: bugfix error check to validate output format
  * plugins/wdc: fix json output for vs-nand-stats
  * nvme-print-stdout: use NVME_FEAT util definitions
  * nvme-print: update subsys verbose outputs (bsc#1231668)
  * nvme-print: add subsystype to the list-subsys output (bsc#1231668)
  * netapp: print output for single device too (bsc#1231668)
  * netapp: segregate the print routines (bsc#1231668)
  * netapp: fix uninitialized value from heap error (bsc#1231668)
  * nvme-print: print the new fields added in TP4142
  * plugins/innogrit: modify for project tacoma
  * wdc: Add Support for new SN-861 PCI device id
  * nvme-print: use LC_MEASUREMENT to check fahrenheit temperature
  * nvme-print: use Completion Condition enum
  * completions: add the zsh completion of the dapustor plugin
  * nvme-print: print the new fields added in TP4165
  * plugins/dapustor: dapustor smart-log-add update
  * nvme-print-stdout: Added print for new field CSER (TP4167)
  * plugins: Add a new DapuStor plugin and the smart-log-add command
  * docs: rename ocp-unsupported-req-log file
- Drop build fix patch
  * remove 0001-docs-rename-ocp-unsupported-req-log-file.patch
- Install 70-nvmf-keys.rules to the default udev rules directory</changelog>
  <changelog author="dwagner@suse.de" date="1741089600">- Update to version 2.11+17.g6e09119:
  * nvme: check for valid output format (bsc#1237275)
  * nvme: make get-feature JSON output print everything (bsc#1237275)
  * nvme: make -v output consistent with -H output for nvme get-feature (bsc#1237275)
  * nvme: make -v output consistent with -H output for nvme get-property (bsc#1237275)
  * nvme-print-stdout: add details in list-ns verbose output (bsc#1237275)
  * nvme-print-stdout: add descriptions for nsze, ncap &amp; nuse (bsc#1237275)
  * netapp-ontapdev: correct the basestr header (bsc#1237275)
  * netapp-smdev: update err msg for no smdevices (bsc#1237275)
  * netapp-ontapdev: update err msg for no ontapdevices (bsc#1237275)
  * netapp-smdev: update basestr header in verbose output (bsc#1237275)</changelog>
  <changelog author="dwagner@suse.de" date="1745323200">- Update to version 2.11+22.gd31b1a01:
  * nvme-print: display fw-rev in list-subsys output (bsc#1240518)
  * nvme-print: display model in list-subsys output (bsc#1240518)
  * netapp-ontapdev: add subsysname to regular output (bsc#1240518)
  * netapp-ontapdev: add subsysname to the verbose output (bsc#1240518)
  * Revert "nvme-print-json: display only verbose output"</changelog>
  <changelog author="dwagner@suse.de" date="1753185600">- Update to version 2.11+26.gfbd2b4f4:
  * nvme: fix mem leak in nvme copy (bsc#1243716)
  * nvme-print: suppress output when no ctrl is present for list-subsys (bsc#1243716)
  * nvme: extend filter to match device name (bsc#1243716)
  * udev-rules-ontap: switch to queue-depth iopolicy (bsc#1246599)</changelog>
  <changelog author="dwagner@suse.de" date="1757419200">- Update to version 2.11+28.g2fc67685:
  * netapp-ontapdev: update invalid device handling (bsc#1247017)
  * netapp-smdev: update invalid device handling (bsc#1247017)</changelog>
  <changelog author="dwagner@suse.de" date="1758196800">- Update to version 2.11+29.g61f8d34b:
  * nvme: add --compat flag for 'gen-tls-key' and 'check-tls-key' (bsc#1246914)</changelog>
</package>
<package pkgid="4555eee85c5a24e3df61daa8316f48c9918cb1f57265319f724b21f367be22d3" name="nvme-cli-zsh-completion" arch="noarch">
  <version epoch="0" ver="2.11+22.gd31b1a01" rel="150700.3.3.2"/>
  <changelog author="daniel.wagner@suse.com" date="1659355200">- Update to version v2.1:
  * nvme: Do not print error message in collect_effects_log helper
  * fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * nvme-print: sanitize the get-feature async event config output
  * nvme: Set default rae value for nvme_get_nsid_log users
  * fabrics: Avoid nvme_scan_ctrl when disconnecting
  * print: Fix nvme_id_uuid_list
  * fabrics: Already connected uses a different error code (bsc#1199994)
  * fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)</changelog>
  <changelog author="dmueller@suse.com" date="1659528000">- Update to version 2.1.1:
  * build: Update version to v2.1.1
  * build: Extend release script to support micro version releases
  * build: Add minimum build requirement on libnvme
  * wrapper: Add weak nvme_init_copy_range_f1 symbol
  * build: Update version before regenerating docs
  * build: Update release version rules</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- Update to version 2.1.2:
  * build: Update version to v2.1.2
  * wrapper: Update SPDIX license
  * wrapper: Call library version of nvme_init_copy_range_f1
  * Revert "udev: re-read the discovery log page when a discovery controller reconnected"
  * nvme: Simplify ns list identify
  * meson: we don't need a c++ compiler
  * plugins/ocp: drop unused fd argument
  * plugins/wdc: remove fd argument from print functions
  * plugins/wdc: fix memset() on the address of a pointer
  * plugins/solidigm: fix return value on format parse failure
  * plugins/wdc: prevent duplicate close on NVMe device</changelog>
  <changelog author="daniel.wagner@suse.com" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- Mark no binaries rpms as noarch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 2.2.1:
  * Added parsing for Solidigm telemetry observable data.
  * add item ddr_ecc_err_cnt in smart-log-add
  * build: Drop dependency on libuuid
  * build: Fix endian check for cross build
  * build: Remove unused uuid.wrap file
  * build: Remove unusned uuid.h include
  * completions: Add show-topology tab completion
  * fabrics: Honor JSON config file in connect-all command (bsc#1199504)
  * fabrics: Trigger auto connect if config.json exists
  * fabrics: fix 'persistent' handling during connect-all with JSON file
  * fabrics: nvme config --modify depends on -n and -t argument
  * fabrics: re-read the discovery log page when a discovery controller reconnected
  * json: Support uint64 types serialization for older json-c versions
  * nvme, plugins: fix __u64 -&gt; unsigned long long assumptions
  * nvme-print: Add missing values in id-ctrl for JSON output
  * nvme-print: Handle NULL hostid in JSON output
  * nvme-print: Output 128bit values as uint128 type instead of double
  * nvme-print: Print fguid as a UUID
  * nvme-print: Use uint128 JSON function for media_units_written
  * nvme-print: decode MI status values
  * nvme-print: decode status types
  * nvme-print: fix wrong json key
  * nvme: Add helper function to parse 16-bit comma separated list
  * nvme: Add nvme_cmd wrapper for get_features
  * nvme: Add show-topology command
  * nvme: Add wrapper for Format NVM
  * nvme: Add wrapper for Sanitize NVM
  * nvme: Add wrappers for Get Log page helpers
  * nvme: Add wrappers for Identify controller lists
  * nvme: Add wrappers for NS attach/detach
  * nvme: Add wrappers for NS management functions
  * nvme: Add wrappers for basic NS identify
  * nvme: Add wrappers for firmware commands
  * nvme: Fix set feature command to get feature identifier 0Dh length as zero
  * nvme: Introduce a union in struct nvme_dev for different transport types
  * nvme: Introduce nvme_cli_ wrappers, wrap identify and identify_ctrl
  * nvme: Make static nvme_dev private to open_dev(), use locals elsewhere
  * nvme: Masks SSTAT in sanize-log output
  * nvme: Remove static nvme_dev, allocate on open instead
  * nvme: Use correct print format specifier for sizeof arguments
  * nvme: Use local struct nvme_dev for show_registers &amp; map_registers
  * nvme: check if cfg.metadata is NULL before passing it to strlen()
  * nvme: use helpers for checking status types
  * plugins/innogrit: Include timer.h
  * plugins/innogrit: add smart items for smart-log-add
  * plugins/micron-nvme: Use correct print format specifier for sizeof arguments
  * plugins/ocp: Include timer.h
  * plugins/ocp: Output 128bit values as uint128 type instead of double
  * plugins/ocp: pass struct nvme_dev to internal functions
  * plugins/seagate: Add support for OCP
  * plugins/toshiba: pass struct nvme_dev rather than fd + name
  * plugins/virtium: Output 128bit values as uint128 type instead of double
  * plugins/wdc: Add support for SN660 drive
  * plugins/wdc: Add type case for feature id
  * plugins/wdc: Output 128bit values as uint128 type instead of double
  * plugins/wdc: pass a struct nvme_dev around rather than a fd
  * plugins/wdc: pass struct nvme_dev rather than using global nvme_dev
  * plugins/ytmc: pass struct nvme_dev rather than fd + name
  * plugins: Use PRIu64 format specifier for 64bit types
  * print: Add Controller Ready Timeout Exceeded HW error code
  * solidgm: fix initialization warning
  * solidigm: Added parsing for telemetry customer screenable data
  * solidigm: Fix printf format for size_t variable
  * solidigm: Updated Telemetry parsing code to MIT license.
  * subprojects/libnvme: update for MI admin command coverage
  * tests: Update license to GPL-2.0-or-later
  * tree: Add NVMe-MI support
  * tree: Add dev_fd() helper
  * tree: Change nvme_dev from global to static
  * tree: Combine NVMe file descriptor into struct nvme_dev
  * tree: Move global device info to a single struct
  * tree: fail on non-negative return values from parse_and_open
  * udev: Add HOST_IFACE to udev rule (bsc#1208001)
  * util/json.h: Add json_object_get_uint64 fallback implementation
  * util/json: Add 128 bit JSON helpers
  * util/types: Add 128 bit conversion helpers
  * util: Fix le128_to_cpu on big-endian
  * util: Fix le128_to_cpu on little-endian
  * util: Move common type conversion helpers into util section
  * utils/json: Add json_object_new_uint64 for json-c &lt; 0.14
  * utils: Fix uint128_t usage
  * wdc:  OCP Log page updates and fixes
  * zns.c: report zones should be started after retrieved zone
- Handle suse-missing-rclink lint warnings by providing the symlinks
- Drop rpmlintrc as it is not needed anymore</changelog>
  <changelog author="daniel.wagner@suse.com" date="1675080000">- Update to version 2.3:
  * Added support for Flexible Data Placement (TP4146)
  * Added Persistent Discovery Controller support (TP8013/TP8014)
  * nvme-mi: support for firmware downloads
  * nvme device-self-test learned the --wait command line argument
    which makes nvme-cli to wait (incl. progress bar) in foreground
    until the test has finished.
  * A lot of bug fixes all over the place
- Update spec file
  * Project depends on meson &gt;= 0.50.0
  * make build dependency dropped</changelog>
  <changelog author="daniel.wagner@suse.com" date="1680264000">- Update to version 2.4 (jsc#PED-553 jsc#PED-3884):
  * plugins/ocp: Add SMART cloud log to solidigm plugin
  * nvme-print: Unify number base format for nsid
  * nvme-(discover,connect,connect-all): enable options '--keyring' and '--tls_key'
  * nvme-connect: enable option '--tls'
  * nvme-check-tls-key: add options to derive a 'retained' TLS key
  * nvme-gen-tls-key: add options to derive a TLS key
  * plugins/ocp: Move SMART cloud log methods to separate file for reusability
  * nvme: validate storage tag size correctly
  * nvme-print-json: Add json output status function
  * util: Cleanup argconfig parse function
  * nvme: Fix format command function indentation errors
  * util: Use argconfig commandline options pointer directly
  * nvme-print: Fix nvme show status function indentation errors
  * nvme: Check fw-commit command support MUD
  * print: print csi and opcode in error log (TP4113)
  * plugins/inspur: Cast vendor specific smart log value
  * nvme: Use correct ABORT type for self abort test
  * plugins/solidigm: Do not overwrite previously initialized variable
  * nvme-print: sanitize supported-log-pages output (bsc#1209550)
  * nvme: Enforce length to a multiple of 4 in get_log_page
  * nvme: fix block count and data size logic (bsc#1209564)
  * util: Introduce argconfig simple helper to check seen condition
  * plugins/ocp: Add set feature EOL/PLP failure mode no-uuid option
  * plugins/ocp: Refactor to clear feature identifier C1h and C3h
  * plugins/ocp: Add support for clear PCIe correctable error counters feature
  * nvme-doc: update man page for supported-log-pages (bsc#1209550)
  * plugins/ocp: OCP 2.0 field updates for SMART cloud log
  * nvme: Fix parameter limit range
  * fdp: Fix wrong Reclaim Unit Handle Status size
  * plugins/ocp: Add support for EOL/PLP failure mode feature
  * nvme-print: Fix printing of u32 values
  * nvme: Fix invalid memory access in show_registers
  * util: Add argconfig seen flag parameter to check if feature NSID set
  * nvme-print: fix segfault in supported-log-pages json output
  * fabrics: Fix ordering for auto connect services (bsc#1208075)
  * nvme.c: Check Firmware Update Granularity in fwdl
  * log: high latency timestamp issue
  * nvme: Align get feature data buffer length by page size to allocate
  * nvme: Continue get feature on invalid NS error to get multiple feature ids
  * plugins/ocp: SMART cloud log bug fixes.
  * Made temperature readouts in line with the SI.
  * Changed 'Kelvin' to 'kelvin', as recommended by the BIPM.
  * plugins/ocp: Fix whitespace and style issues
  * util: Revert JSON output to plain numbers
  * nvme: Add rae argument to telemetry-log command
  * nvme: Refactor get telemetry log page helper
  * nvme: Factor out parse telemetry log da element
  * nvme: Fix type in error message
  * unit: Add test-argconfig-parse
  * nvme: Use chunked read in get_log()
  * nvme: Use fprintf for error message logging in get_log()
  * nvme: fix /dev/spkd/ typo
  * doc: --storage-tag-check doesn't take any arguments
  * fabrics: Ensure host-traddr/iface consistency for "connect-all"
  * nvme-print: print the nvme generic name in json output as well
  * plugins/innogrit: modify command opcode for eventlog and cdump
  * completion: fix typo, add missing args
  * plugins/wdc: Fix data Formatting for Latency Monitor Log Page
  * nvme: Make json-c optional again
  * nvme-print: Move JSON printing function into a new file
  * plugins/solidigm: Use json_create_object wrapper
  * plugins/solidigm: Use struct json_object instead of typedef
  * fabrics: No need to sanitize trsvcid and traddr
  * docs: Fixed typos and missing options
  * util: Numbers without any suffix are also valid
  * util: Update suffix_binary_parse API
  * util: Reimplement suffix_si_parse
  * nvme: Filter out status flags for get feature command
  * util: Add crc32 implementation
  * nvme-print: Use attrs_info as key for Zone Attributes Information
  * nvme: Support effects-log for fabrics ctrl
  * plugins/solidigm: Add uuid index resolution
  * plugins/ocp: Use network byte order for OCP UUID value
  * json_discovery_log: avoid buffer overrun (bsc#1207435)
  * Fix connect nbft regressions (bsc#1209905)
  * Fix auto connect conditions (bsc#1210105)
  * Fix auto boot for NBFT connections (bsc#1211647)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1695988800">- Update to version 2.6 (jsc#PED-3610 jsc#PED-4879 jsc#PED-5061):
  * nvme: allocate payload buffer in create-ns command
  * nvme-print-stdout: Add CAP.CPS and CAP.NSSS human readable outputs
  * nvme: Add output-format default option instead of argconfig json option
  * nvme: fw-download offset only describes FW offset, not file offset
  * unit: add locale number test
  * util: handle utf-8 thousend separators correctly
  * nvme: Change to use NVME_ARGS verbose default option from OPT_ARGS
  * fabrics: Fix NVMF_ARGS macro to use parameter n correctly
  * nvme: Add verbose default option to show command debug output
  * util: Fix to set argconfig output format json option correctly
  * util: Split argconfig output format json function to set and get
  * nvme: Spport Phy Rx Eye Opening Measurement Log
  * nvme: Introduce nvme_realloc function
  * nvme: Fix for fdpa reserved field printing
  * completion: add 'version' and 'help' to list
  * udev-rule: apply round-robin iopolicy on i/o subsystems alone (bsc#1215994) (bsc#1219086)
  * nvme: Add support for the OAQD ID controller field
  * plugins/solidigm: use static log macro to calc bitmask
  * plugins/ocp: Rename FW activation history command
  * nvme: auto free nvme_dev resource
  * nvme: allocate aligned payloads for all nvme commands
  * nvme: introduce alloc helper with alignment support
  * util: add cleanup function for generic memory allocations
  * nvme: append huge to nvme_{alloc|free} function
  * nvme: fw_download use nvme_alloc only
  * fabrics: Removing duplicate code and moving to libnvme
  * nvme-print: omit size of protection information
  * tree: Modify label name close_fd to close_dev
  * fabrics: For TCP/RDMA, compare IP addresses with nvme_ipaddrs_eq() (bsc#1213768)
  * fabrics: lookup_discovery_ctrl() must look under host and not root (bsc#1213768)
  * nvme: Do not map status to errno codes
  * completions: Add bash completion for DSSD Power state feature(FID: C7h)
  * Documentation: Add document for DSSD Power state feature(FID: C7h)
  * plugins/ocp: Add DSSD Power state feature(FID: C7h)
  * avoid casting pointer arguments to argconfig functions
  * nvme-print: Add support for EGFEAT, Domain Identifier, TEGCAP and UEGCAP
  * nvme-print: Fix endurance_log whitespace changes
  * nvme: Fix retrieval of telemetry log up to specified data area.
  * nvme: Update list secondary command
  * wdc: Add support for SN861 drive
  * util: Set errno to 0 before strtol/stroul call
  * nvme: Revert passthru and submit_io to print status to stderr from stdout
  * plugins/zns: Fix offset in report zones
  * nvme-rpmb: Fix nvme_show_id_ctrl_rpmbs() definition error
  * fabrics: Use corresponding hostid when hostnqn is generated
  * json: fix seg. fault converting NULL to JSON string (bsc#1213762)
  * nvme-cli: fix extended metadata size calculation
  * nvme-print: Show subsystem iopolicy (bsc#1124564)
  * nvme-print-stdout: Do not show non reachable ns in namespace topology (bsc#1212598)
  * nvme-print: Fix show-topolocy for ctrls
  * doc: Fix typo in documentation
  * nvme-print-stdout: fix storage tag size label
  * nvme-print-stdout: List only ctrls which are part of ns (bsc#1212598)
  * nvme-print-stdout: Support subsys reachable from several hosts (bsc#1212598)
  * ccan: Add htable, strset and dependencies (bsc#1212598)
  * ccan: Remove unused documentation (bsc#1212598)
  * nvme-print: Split max power flags
  * nvme-print: fix counter while looping through uuid_list (bsc#1212598)
  * fabrics: only look for matching ctrl on same host (bsc#1213768)
  * README: Correct hugetlbfs spelling error
  * util: Delete unused CFG_BOOL argconfig type as duplicated with CFG_FLAG
  * util: Set LC_ALL=C as default if -H option is not used
  * nvme: Add support for create-ns command endg-id option parameter
  * nvme-print: fix argument order for show functions
  * plugins/solidigm: Added Marketing Name Log support for Solidigm.
  * nvme-print: Remove left overs from refactoring
  * nvme-print: Move num argument parsing into callbacks
  * nvme-print: Fix typo in callback definition
  * scripts: Make release script project neutral
  * scripts: Update update-docs.sh scripts
  * scripts: Execute the scripts from toplevel directory
  * scripts: Move helper scripts to a central place
  * docs: Update file modes
  * doc: Add information on --context
  * nvmf-autoconnect: Annotate the context to autoconnect
  * fabrics: Add support for volatile configuration
  * plugins/solidigm: Formated log page directory table consistently with "nvme list" format.
  * plugins/solidigm: Added Identify controller VU extensions parsing.
  * nvme-print-json: Print PCI pysical slot number for controller
  * nvme-print-stdout: Print PCI physical slot number for controller
  * libnvme.wrap: Bump to 42ac453
  * plugins/nbft: Use common code to parse print flags
  * fabrics: Do not print device on connect per default
  * fabrics: Revert 'fabrics: prevent 'nvme connect' to well-known discovery NQN'
  * nvme-print: fix wrong list-subsys output when ns are attached to different ctrls
  * plugins/micron: Correct NULL pointer checking error
  * plugins/innogrit: Add vendor command get-eventlog and get-cdump
  * nvme: Use correct data buffer size
  * nvme: Fix quoted string split across lines to use quoted newline
  * plugins/zns: Fix zns.c linux kernel check patch errors and warnings
  * plugins/ymtc: Fix ymtc-nvme.c linux kernel check patch warning
  * plugins/ymtc: Fix ymtc-nvme.c space indentation to tab indentation
  * plugins/virtium: Fix virtium-nvme.c linux kernel check patch errors and warnings
  * plugins/transcend: Fix transcend-nvme.c linux kernel check patch errors and warnings
  * plugins/solidigm: Fix linux kernel check patch errors and warnings
  * plugins/shannon: Fix shannon-nvme.c linux kernel check patch errors and warnings
  * plugins/seagate: Fix seagate-nvme.c linux kernel check patch warnings
  * plugins/scaleflux: Fix sfx-nvme.c linux kernel check patch errors and warnings
  * plugins/netapp: Fix netapp-nvme.c linux kernel check patch errors and warnings
  * plugins/nbft: Fix nbft-plugin.c linux kernel check patch warnings
  * plugins/micron: Fix micron-nvme.c linux kernel check patch errors and warnings
  * plugins/micron: Fix micron-nvme.c space indentation to tab indentation
  * plugins/memblaze: Fix memblaze-nvme.c linux kernel check patch errors and warnings
  * plugins/memblaze: Fix memblaze-utils.h space indentation to tab indentation
  * plugins/memblaze: Fix memblaze-nvme.c space indentation to tab indentation
  * plugins/intel: Fix intel-nvme.c linux kernel check patch errors and warnings
  * plugins/inspur: Fix inspur-nvme.c linux kernel check patch warnings
  * plugins/inspur: Fix inspur-nvme.c space indentation to tab indentation
  * plugins/innogrit: Fix innogrit-nvme.c linux kernel check patch errors
  * plugins/huawei: Fix huawei-nvme.c linux kernel check patch errors and warnings
  * plugins/fdb: Fix fdb.c linux kernel check patch warnings
  * plugins/dera: Fix dera-nvme.c linux kernel check patch errors and warnings
  * plugins/amzn: Fix amzn-nvme.c linux kernel check patch error and warnings
  * plugins/wdc: Fix wdc-utils.c linux kernel check patch errors and warnings
  * plugins/wdc: Refactor wdc-nvme.c for linux kernel check patch errors and warnings
  * util: Move falltrhough feature check to meson.builds
  * ocp: Add eol plp failure mode json outputs
  * nvme-print: Add nvme show result function
  * nvme-print-json: Add json output result function
  * nvme-print: Fix nvme_show_error() to call va_end() for json output format
  * nvme: Fix nvme format block-size option handling
  * Revert "nvme: Masks SSTAT in sanize-log output"
  * fabrics: Fix NVMF_ARGS macro indentation error
  * Documentation: Add document for OCP Device capability(LID: 0xC4) log page
  * completions: Add bash completion for OCP Device capability(LID: 0xC4) log page
  * plugins/ocp: Add Device capability(LID: 0xC4) log page
  * udev: fix warning reported by udevadm verify
  * fabrics: fix conditions in nvmf-autoconnect.service
  * fabrics: Change NVMF_OPTS as NVMF_ARGS to fix linux kernel check patch error
  * nvme: Split passthru commands read output
  * nvme: Fix io-passthru command read metadata output
  * plugin/ocp: Added implementation for 0xC1 log page
  * util: Fix suffix_si_parse to parse no decimal point but suffix value correctly
  * completions: Add zsh option values handling for sanitize command action
  * completions: Add ocp sub commands zsh completion
  * completions: Add ocp commands zsh completion
  * completions: Add ocp commands bash completion
  * nvmf-autoconnect: restart service to avoid dropping AEN
  * solidigm: Reduce memory usage in supported log pages feature
  * solidigm: Changes to supported log pages feature requested by review
  * solidigm: Add supported log pages log feature to Solidigm plugin
  * plugins/ocp: Added ocp unsupported requirements log page
  * completions: Add bash option values handling for sanitize command action
  * doc: Correct nvme-show-hostnqn command NAME description
  * completions: Add missing zsh commands descriptions
  * plugins/wdc: Extend SN530 support.
  * Fix incorrect article 'an' as 'a' to use for descriptions and message
  * nvme: Set effects-log command csi option help message string
  * completions: bash: Delete unsupported id-iocs command options
  * completions: bash: Add id-domain command
  * completions: Fix nvm-id-ns-lba-format command zsh definition
  * completions: Add json command option
  * nvme: Fix get-feature command sel parameter check to allow value 8
  * util: Delete unnecessary argconfig definitions OPT_VAL and CFG_VAL
  * util: Delete argconfig value type to add option value as va lists instead
  * util: Split to set argconfig option value
  * util: Delete argconfig value length to calcurate instead
  * nvme: Change sanitize command action option to use argconfig parse value
  * util: Add argconfig parse value function
  * util: Delete unused argconfig subopts type
  * util: Delete unused argconfig file types
  * util: Delete unused argconfig help function
  * nvme-wrap: do_admin_args_op should not clear args timeout
  * nvme: Fix linux kernel check patch warnings
  * nvme: Fix linux kernel check patch errors
  * plugins/ocp: Add telemetry-log command to OCP plugin
  * plugins/ocp: Add OCP set latency monitor feature command
  * plugins/ocp: Fix endianness in Latency Monitor Log output
  * plugins/ocp: Add missing fields in Latency Monitor Log
  * plugins/ocp: Fix typos in Latency Monitor Log
  * plugins/ocp: Reorganize OCP plugin source code
  * tests: Add tests for controller reset
  * plugin/solidigm: Added vs-internal-log command.
  * nvme: Add nvme_show_perror to use instead of perror for json output
  * nvme-print-json: Use vasprintf instead of vsnprintf to allocate string
  * nvme: fix rnlpt to_string() values.
  * nvme: fix io_mgmt args parse error
  * fdp: set-events feature is saveable
  * fabrics: Return errno value as negative
  * fabrics: Fix linux kernel check patch errors and warnings
  * nbft: add the nbft show plugin
  * nbft: added NBFT v1.0 table support (jsc#PED-1449)
  * nbft: make lookup_ctrl function public
  * nvme: Fix indentation errors around nvme show error API
  * nvme: Check validate output format err value instead of flags
  * nvme: Use nvme show error API to outptu stderr messages for json format
  * util: Check output format json for json error message output
  * nvme-printf: Add show error function for nvme list command json output
  * nvme: Add zns specfic field for create ns
  * nvme: Add ns-mgmt host software specified fields
  * nvme: Add dtype, dspec on write-zeroes, write-uncor
  * nvme-print: Add new fields print on id directive
  * nvme-print: Add VWCNP on NSFEAT of id-ns
  * nvme: Fix format command to skip to reread NSID all block device
  * plugins/solidigm: Fixes and clean-up of Telemetry parse code. Fixed parsing of 64 bit values. Fixed COD field name. Fixed compilation warnings when compiling for 32 bit. Added missing free(). Consolidated single entry function to telemetry parser. Consolidated use of integer types.
  * doc: Documentations maintenance changes
  * doc: Add nvme-mi-send command documentation
  * doc: Add nvme-mi-recv command documentation
  * doc: Add clear-pcie-correctable-error-counters command documentation
  * doc: Add eol-plp-failure-mode command documentation
  * plugins/solidigm: Add firmware activation history log to Solidigm plugin
  * plugins/ocp: Add firmware activation history log to OCP plugin
  * nvme-print: Use enum nvme_print_flags for nvme_show_id_ctrl
  * nvme: Add support for NVMe-MI send command
  * nvme: Use stdout for passthru and submit_io commands success messages
  * nvme: Fix passthru command function indentation errors
  * nvme: Add support for NVMe-MI receive command
  * fabrics: fix fc config JSON file handling (bsc#1210089)
  Refresh 0100-harden_nvmf-connect@.service.patch
- Fix install path for nvme-regress script</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420800">- Enable test during build (bsc#1207686)
- Drop minimum version meson dependency
- Add asciidoc dependency
- Build documentation when requested</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696852800">- Use fixed timestamps for documentation allowing reproducable builds
- Announce nvmeof-boot-support support via Provides
- Filter rpmlint warnings for systemd-service-without-service_ macros
- Add missing service files for NBFT feature
  * add 0001-fabrics-autoconnect-add-service-unit-for-connecting-.patch
  * add 0002-fabrics-add-udev-rule-to-avoid-renaming-nbft-interfa.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1697112000">- Add missing jsc# and bsc# tracking entries in change log.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1702987200">- Update to version 2.7:
  * nvme-print-json: include vs for identify namespace
  * nvme-print-stdout: enhance connect message (bsc#1219086)
  * fabrics: fix connect error if hostid file does not exist (bsc#1219086)
  * fabrics: fix invalid output format error during nvme connect (bsc#1219086)
  * wdc: Fix vs-smart-add-log Command for SN650 and SN655
  * nvme: restric hmac options for gen-tls-key (bsc#1219086)
  * wdc: Fix UUID index fallback mechanism
  * plugins/ocp: Add OCP Telemetry String log page, Telemetry log page
  * completions: Add bash completions for telemetry string log page
  * plugins/solidigm: Added OCP 2.0 compatibility version command
  * plugins/solidigm: Added OCP 2.0 vs-drive-info command.
  * plugins/ocp: Fix printing order of various Latency Monitor Log buckets
  * nvme: validate output format split status from flag return value
  * nvme: simplify cleanup_nvme_dev()
  * cleanup: remove unused cleanup_charp()
  * wdc: Add support for SN861 2nd pci device id
  * nvme: replace libhugetlbfs with mmap and madvise
  * util/mem: move alloc helper to util section
  * nvme: auto cleanup filedescriptors
  * nvme: auto cleanup buffers
  * nvme: return error code in get_persistent_event_log
  * nvme: sanitize nvme-gen-tls-key
  * nvme: print out the resulting TLS identity for 'nvme check-tls-key'
  * nvme: Add version '1' identifier for nvme-gen-tls-key
  * subprojects/libnvme: update wrapper for TP8018
  * plugins/solidigm: Added re_sku_count smart atrribute
  * doc: Fix nvme-connect manpage --application option string
  * plugins/ocp: changed command clear-pcie-correctable-error-counters to match OCP 2.0 spec.
  * plugins/solidigm: Added command to clear PCIe Correctable Error Counters according to OCP 2.0
  * plugins/ocp: Reorganized clear feature code for better reuse
  * nvme: fixup length calculation for 'nvme gen-tls-key --secret'
  * doc: remove invalid hostkey info for --dhchap-secret
  * nvme-print-json: use human helper everywhere
  * nvme-print-json: remove obj_print helper
  * plugins/ocp: update nvme_show_select_result call
  * mailmap: only show contributer's name
  * nvme-print-json: Change to report status and message in array
  * nvme-print-json: Change to report feature select in array
  * nvme-print-json: Change to report error and data in array
  * nvme-print-json: Add show_init/finish calls to report features in array
  * nvme-print: Add nvme_show_error_status() to merge error message and status
  * nvme-print-json: Use r instead of root and use obj_add_***(r, ..., ...)
  * nvme-print-json: Delete static const char string global variables
  * nvme-print-json: Add remaining controller registers readable format
  * nvme-print-json: Add readable format cap, vs, cc, csts, nssr and crto registers
  * nvme-print-json: Combine duplicated json key and val string variables
  * nvme-print-json: Replase json_array_add_value_string() to array_add_str()
  * nvme-print-json: Replase json_object_add_value_uint128() to obj/root_add_uint128()
  * nvme-print-json: Replase json_object_add_value_object() to obj/root_add_obj()
  * nvme-print-json: Replase json_array_add_value_object() to array_add_obj()
  * nvme-print-json: Replase json_object_add_value_array() to obj/root_add_array()
  * nvme-print-json: Replase json_object_add_value_uint() to obj/root_add_uint()
  * nvme-print-json: Replase json_object_add_value_int() to obj/root_add_int()
  * nvme-print-json: Replase json_object_add_value_uint64() to obj/root_add_uint64()
  * nvme-print-json: Replase json_object_add_value_string() to obj/root_add_str()
  * nvme-print-json: Update feature_show_fields_*** to use root/obj_add_***()
  * nvme-print-json: Update lba_status_log to use root_add_***() and obj_add_***()
  * nvme-print-json: Replace lba_status_log printf() to root_add_result()
  * nvme-print-json: Add list_item print function
  * nvme-print-json: Add lba_status_info print function
  * nvme-print-json: Add lba_range print function
  * nvme-print-json: Add id_ctrl_rpmbs print function
  * nvme-print-json: Unify json_list and jroot object names to root
  * nvme-print-json: Add json_zns_changed print function
  * nvme-print-json: Add root_add_result() to output result message
  * nvme-print-json: Split persistent_event_log print function
  * nvme-print-json: Remove unnecessary string newline code
  * nvme-print-json: Replace effects_log_list print to use json_print()
  * nvme-print-json: Print persistent_event_log no log data result correctly
  * nvme-print-json: Add static "result" and "erorr" strings variables
  * nvme-print-json: Add single_property printf function
  * nvme: Replace get feature command stderr output to nvme_show_error()
  * nvme-print-json: Change d() output to use d_json()
  * nvme: Fix get-feature command mixed stdout and json outputs
  * nvme-print-json: Add remaining feature fields print functions
  * nvme-print-json: Update formatting and codying style
  * build: Add -std=c99 to CFLAGS for muon on CentOS 7
  * fabrics: add udev rule to avoid renaming nbft interfaces
  * fabrics: autoconnect: add service unit for connecting NBFT subsystems
  * fabrics: autoconnect: explicitly express module dependency
  * Updates to codeql config
  * libnvme-wrap: exit on VOID_FN lookup failure
  * plugins/ocp:Added the ocp C6h feature api
  * plugin/ocp_fid_c6h:Added the ocp C6h feature api
  * nvme-copy: support cross-namespace copy
  * nvme/plugins: fix mismatch operator
  * nvme: fix overflow possiblity
  * nvme: reduce identify cmd issue
  * nvme: allow set-features to take input from stdin
  * Fix common misspellings from codespell project
  * nvme-print: Correct to print correct ascii character string length
  * print-stdout: print Host Behavior Support correctly
  * build: Bump libnvme wrap
  * plugins/solidigm: Added support for temperature statistics log page
  * Add support for codeql sweeps
  * doc: Add virt-mgmt command
  * doc: Add id-uuid command
  * doc: Add list-secondary command
  * doc: Add id-ns-granularity command
  * doc: Add nvme commands --output-format and --verbose options
  * completions: Add nvme-mi-recv nad nvme-mi-send commands completions
  * completions: Change short option -o and -v duplicated to upper case
  * doc: Change short option -o and -v duplicated to upper case
  * nvme: Change short option -o and -v duplicated to upper case
  * nvme: Change phy-rx-eom-log command to use NVME_ARGS instead
  * plugins/memblaze: Add smart-log-add and latency-feature functions
  * plugins/solidigm: internal-logs Telemetry auto detect last data area.
  * nvme: Change to use NVME_FLBAS_META_EXT() macro to check flbas value
  * nvme-print-json: Add host memory buffer and timestamp features print functions
  * nvme-print-json: Add feature fields print functions
  * nvme-print-json: Add TMPTH feature print function
  * nvme-print-json: Add show_feature_fields print function
  * nvme-print-json: Add select_result print function
  * nvme-print-json: Use json_print to print and free object
  * nvme-print-json: Add lba_status print function
  * nvme-print-json: Combine variable definition and setting value
  * nvme-print-json: Add id_iocs print function
  * nvme-print-stdout: Fix coding style errors
  * nvme-print-json: Add directive print function
  * nvme: Fixed segmentation fault when getting host initiated telemetry
  * plugins/wdc: enhanced SN861 device support
  * plugins/wdc: cleanup line lengths
  * nvme: do not include meta data for PRACT=1 and MD=8
  * nvme: use block-count arg if provided
  * build: bump libnvme to disable tests option
  * build: Add static build on CI target
  * nvme-print: Add nvme_zns_start_zone_list() API function
  * nvme-print: Add nvme_zns_finish_zone_list() API function
  * nvme-print-binary: Set list function to NULL if unimplemented
  * nvme-print-json: Change order list functions and set NULL if unimplemented
  * nvme-print-stdout: Fix to set stdout_list_item print function missed
  * plugins/solidigm: log page name extraction using nvme_log_to_string function
  * nvme-print: Added missing logpage names in nvme_log_to_string function
  * udev-rules: rename netapp udev rule (bsc#1219086)
  * udev-rules: set ctrl_loss_tmo to -1 for ONTAP NVMe/TCP (bsc#1219086)
- Remove upstreamed patches
  * remove 0001-fabrics-autoconnect-add-service-unit-for-connecting-.patch
  * remove 0002-fabrics-add-udev-rule-to-avoid-renaming-nbft-interfa.patch
- Update spec file
  * remove libhugetblfs depedency
  * update NetApp udev rule file name</changelog>
  <changelog author="daniel.wagner@suse.com" date="1703160000">- Update to version 2.7.1:
  * nvme-print-json: Revert field name changes (bsc#1218306)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1707912000">- Update to version 2.8:
  * nvme-print-json: append array object in json_support_log
  * sed: Add plugin for basic SED Opal operations (jsc#PED-5061)
  * don't include newlines in already wrapped text
  * nvme: do not include meta data for PRACT=1 and MD=8 (version 2)
  * create-ns: align the namespaces to 1Mib boundaries when using SI suffixes
  * doc: Fix config-schema.json's URL
  * plugins/solidigm: Compressing vs-internal-log log files into zip file.
  * nbft: do not issue an error if ACPI tables are missing
  * nbft: fixup include for libnvme
  * doc: Fix short option name for cfg-file
  * completions: added Solidigm plugin to autocomplete scripts
  * nvme: Remove unused cfg argument from NVME_ARGS() macro
  * nvme: fix directive receive identify offsets
  * nvme-fabrics: enable option 'concat'
  * build: Update libnvme wrap
  * plugins/wdc: Add Debug Log Collection Support
  * nbft: fix tcp/dhcp address fallback retry (bsc#1218873)
  * nvme: use correct telemetry log size
  * nvme-print: fix typo in list verbose output (bsc#1219086)
  * nvme: print inserted tls key for check-tls-key (bsc#1219086)
  * plugins/wdc: Plugin fixes and updates
  * fabrics: move hostid/hostnqn warnings to verbose level (bsc#1219086)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737600">- Update to version 2.9:
  * nvme-print: expand the maximum field length to prevent misalignment
  * plugins/spdk: plugin to list SPDK subsystems
  * nvme-print: check if controller belong to SPDK
  * plugins/spdk: plugin to list SPDK controllers
  * nvme-print-stdout: fix ASQB, ACQB and BMBBA prints
  * build: bump libnvme wrap
  * nvmf-autoconnect: fix string encoding
  * nvme: identify primary ctrl do not accept nsid
  * nvme-wrap: remove unused nvme_cli_get_log_ana_groups()
  * nvme-print-json: use admin queue attributes definitions
  * nvme-print-json: use CSTS definitions
  * nvme-print-stdout: use POWER_OF_TWO macro
  * nvme-print-json: use controller configuration definitions
  * nvme-print-json, nvme-print-stdout: add tertiary version number
  * nvme-print-json: use NVME_MAJOR and NVME_MINOR definitions
  * nvme-print-json: use NVME_BOOT_PARTITION_INFO field definitions
  * nvme-print-json: add support telemetry log create event in PEL
  * nvme-print-json: add support set feature event in PEL
  * nvme-print-json: add obj_d() function
  * nvme-print-json: add obj_add_uint_0nx() function
  * meson.build: Fix spelling of sed-opal.h filename
  * sed_opal: Only build when we really have sed_opal headers
  * nvme: fix error path if write() fails in get_telemetry_log()
  * plugins/solidigm: Additional LID for temperature statistics.
  * plugins/solidigm: Improved Solidigm UUID index detection.
  * nvme-print-stdout: Add CSTS.ST register stdout print
  * nvme-print-stdout: Use NVME_CMIC definitions
  * nvme-print: Use NVME_UNIT definitions
  * nvme-print-stdout: Use NVME_CMBMSC/STS/EBS/SWTP definitions
  * plugins/ssstc: add a new plugin for SSSTC driver
  * nvmf-connect: systemd hardening effort
  * plugins/ocp: Adjusted variable type size carrying UUID index to 8 bit.
  * nvme: fix security buffer allocation size
  * nvme: Change fw-download xfer initialization to set 0
  * nvme: Add fw-download warning message for FWUG alignment error
  * plugins/ocp: Split ocp_get_uuid_index() into find and get functions.
  * nvme: fix mem leak in multiple key related functions (bsc#1223331)
  * fabrics: fix mem leak in nvmf_check_hostid_and_hostnqn() (bsc#1223331)
  * nvme-print-stdout: Use NVME_BPRSEL definitions
  * nvme-print-stdout: Use NVME_BPINFO definitions
  * nvme-print-stdout: Use NVME_CMBSZ definitions
  * nvme-print-stdout: Use NVME_CMBLOC definitions
  * Revert "logging: fix error handling for ioctl passthru wrappers"
  * fabrics: align identify command payload
  * ocp: Unify line start spacing as tabs
  * ocp: support OCP DSSD Async Event Config feature
  * nvme: Add support for get-reg and set-reg commands
  * nvme-print-json: Add register print functions
  * nvme-print-stdout: Add register print functions
  * nvme-print: Add register print functions
  * nvme: Refactor mmap_registers to add writable parameter
  * nvme-print: Change PMRSZU string function as unit string
  * nvme-print: Refactor CMBLOC and PMRSTS registers function
  * logging: fix error handling for ioctl passthru wrappers
  * nbft: Fix scandir() error check
  * nbft: Refactor connection attempt out
  * nvme-print: Use EOM optional data present macros changed
  * nvme-print: Print cntlid number for controller (bsc#1224024)
  * nvme: check-tls-key fails despite having hostnqn file (bsc#1223331)
  * nvme: print retained key for gen-tls-key's -i option too (bsc#1223331)
  * fabrics : allow host to create duplicate connections to target
  * fabrics: Fix fast_io_fail_tmo option
  * nvme-print-stdout: use admin queue attributes definitions
  * nvme-print-stdout: use CSTS definitions
  * nvme-print-stdout: use controller configuration definitions
  * nvme-print-stdout: use NVME_MAJOR and NVME_MINOR definitions
  * nvme-print-stdout: use FDP configuration attributes definitions
  * nvme: add new function 'tls_key' (bsc#1226197)
  * nvme: use library functions for importing and exporting TLS keys (bsc#1216982)
  * nvme: extend error message for ns scan failures
  * nvme-print-json: Bugfix status json key of sanitize-log
  * sed: update SED password when initalizing (bsc#1222168)
  * plugins/memblaze: add performance stats
  * plugins/memblaze: fix code mis-type error
  * plugins/memblaze: code refactor on applying __packed on more structs
  * plugins/memblaze: code refactor on using cleanup_nvme_dev
  * nvme: Fix to cleanup free raw_secret memory allocated
  * plugins/memblaze: code-format on leading indent and align
  * plugins/wdc: Fix narrow index variable type in for loop to __u32
  * plugins/wdc: Whitespace changes
  * nvme: Delete unused nvme root scanned
  * ocp: support OCP 2.5 Set Telemetry Profile feature
  * nvme: Don't seg fault if given device is not char/block device
  * nbft: Include SSNS index in error messages (bsc#1222026)
  * nbft: Pause logging for expected connection failures (bsc#1222026)
  * nbft: Silence connection failures for unavailable SSNS (bsc#1222026)
  * nbft: Fix 'verbose' argument type (bsc#1222026)
  * plugins/nbft: Implement verbose logging
  * plugins/nbft: Print the new SSNS flags
  * nbft: Fix uninitialized variable
  * plugins/nbft: Fix uninitialized variables
  * plugins/sed: Fix uninitialized variable
  * nvme-print-stdout: Fix uninitialized variable
  * nvme-print-json: Fix uninitialized variable
  * build: Switch default meson buildtype to 'debugoptimized'
  * nvme: do not scan topology when mmaping registers
  * nvme-print-stdout: Use NVME_BOOT_PARTITION_INFO field definitions
  * nvme-print-stdout: Use NVME_GET for MI commands supported and effects CSP
  * nvme-print-stdout: Use NVME_GET for FID supported and effects FSP
  * nvme-print-stdout: Use NVME_SET_FEAT_EVENT register definitions
  * nvme-print: Add PEL EHAI port identifier type printf function
  * build: bump libnvme wrap
  * ocp: fix for power-state argument checking
  * nvme: do not issue warning when nvme_core module is not loaded
  * wdc: Review changes and build fixes
  * wdc:  Fix timestamp displayed by vs-firmware-activate-history command
  * logging: Split to output ioctl latency by log info level (bsc#1231668)
  * nvme-print-stdout: Change hexadecimal value 0x prefix to use %#x
  * nvme-print-stdout: Fix LBA status DSLBA output as hexadecimal
  * nvme-print-stdout: Split line length exceeded 100 columns
  * nvme-print-stdout: Use NVME_PMRMSC register definitions to print
  * nvme-print-stdout: Use NVME_PMRSWTP register definitions to print
  * nvme-print-stdout: Use NVME_PMREBS register definitions to print
  * nvme-print-stdout: Use NVME_PMRSTS register definitions to print
  * nvme-print-stdout: Use NVME_PMRCTL_EN register definition to print
  * nvme-print-stdout: Use NVME_PMRCAP register definition to print
  * doc: Fix admin and io passthru cdw parameters description
  * doc: Add get-feature cdw11 and set-feature cdw12 parameters
  * micron-nvme: Unuse stat() to check if strMainDirName exists
  * doc: Fix get-property and set-property offset and value descriptions
  * doc: Fix documentation file mode 100755 to 100644
  * nvme-print-stdout: Fix channel configuration descriptors pointer
  * nvme-print-stdout: Check sscanf return value
  * nvme-print-stdout: Fix linux kernel check patch errors
  * nvme: Delete unusual fallthrough for cases have no body
  * nvme: Delete duplicated semicolon
  * nvme-print, common: Fix for whitespace change
  * logging: output ioctl debugging info (bsc#1231668)
  * nvme: track verbose level (bsc#1231668)
  * logging: track log level globally
  * logging: move logging code to a new file
  * nvme: update include for libnvme
  * nvme: remove unused declaration
  * build: bump libnvme wrap
  * nvme-netapp: add nspath tlv handling (bsc#1220971)
  * rpm: Add missing rule and service files
  * nvme-print-json, nvme-print-stdout: Use CHAR_BIT definition
  * nvme-print-stdout: Delete duplicated if condition checking line
  * ocp: Fix timestamp displayed by fw-activate-history command
  * wdc: Add support for the get-drive-status command to SN861
  * nvme-print: Fix nvme_host_metadata_type_to_string() indentation errors
  * nvme-print: Add PEL RCI port identifier type printf function
  * nvme-print-stdout: Use persistent event log RCI definitions
  * build: bump libnvme wrap
  * nvme: Add show-regs and get-property commands NSSD print outputs
  * nvme-print: print more details in ns-descs verbose output (bsc#1223331)
  * Revert "nvme-print-json: remove obj_print helper"
  * sed: Confirm entered password before initialization.
- drop systemd service harden file, upstream ships this patch.
  * remove 0100-harden_nvmf-connect@.service.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737601">- Update to version 2.9.1:
  * plugins/spdk: drop the plugin</changelog>
  <changelog author="daniel.wagner@suse.com" date="1722600000">- Update to version 2.10:
  * sed: Fix parsing of Discovery0 features
  * fabrics: avoid potential segfault in nvmf_dim() (bsc#1231668)
  * nvme: avoid segfault in show-topology (bsc#1226197)
  * fabrics: do not leak nvme_ctrl_t object on connect
  * nvme: extend help message when mmap regs fails
  * nvme: return -ENXIO value to open device if errno not set
  * wdc: OCP 2.5 Log Page Updates
  * fabrics: drop --quiet alias -S
  * fabrics: drop --disable-sqflow alias -d
  * fabrics: check if json config is existing (bsc#1231668)
  * plugins/ocp: fix UAF when printing telemetry log
  * nvme-print-stdout: fix persistent-event-log set feature event output
  * fabrics: do not report error when no modules are loaded when disconnecting
  * fabrics: use cleanup helper where possible
  * fabrics: print an error for ENOENT too
  * plugins/virtium: use time_t for time_stamp values
  * completions: add ocp set-error-injection command
  * doc: add ocp set-error-injection command
  * ocp: add set-error-injection command
  * nvme: use argconfig_parse_seen to check conditions
  * nvme: use proper mask to get correct lbafu value
  * utils: fix print formatting option
  * utils: cleanup includes in utils.h
  * utils: add missing header
  * nvme-print: Added print for two new fields for HMB feature
  * plugins/micron: Move OCP internal log parsing from Micron to OCP Plugin.
  * fabrics: remove unused _discover_from_json_config_file() argument
  * nvme: avoid unnecessary dup() + close() in io_mgmt_send()
  * util: remove unnecessary NULL check in cleanup_nvme_root()
  * nvme: use argconfig_parse_comma_sep_array_u16() in attach-ns
  * util: avoid duplication in argconfig_parse_comma_sep_array*()
  * util: remove redundant loop condition in argconfig_parse()
  * util: introduce is_null_or_empty() to avoid strlen()
  * util: reduce allocation sizes in argconfig_parse()
  * util: consolidate call paths to argconfig_parse_type()
  * util: reduce complexity of argconfig_parse_val()
  * util: reduce arguments passed to argconfig_parse_type()
  * util: remove empty default case in argconfig functions
  * util: remove unnecessary parentheses in argconfig_parse_type()
  * util: remove redundant cast in argconfig_parse_type()
  * util: inline argconfig_parse_byte()
  * util: remove redundant NULL check in argconfig_print_help()
  * util: use cleanup to avoid goto in argconfig_parse()
  * util: make argconfig_set_opt_val() a void function
  * util: remove argconfig_parse_val() declaration
  * util: remove argconfig CFG_SIZE type
  * wdc: Update and refactor the C0h log page parsing
  * ccan: Add freed pointer checking to delete strset member
  * fabrics: connect all hosts in config.json (bsc#1226216)
  * fabrics: refactore discover from json config (bsc#1226216)
  * fabrics: first read config before topology scanning (bsc#1226216)
  * fabrics: use helper to lookup default hostnqn/hostid (bsc#1226216)
  * fabrics: extend already connected message (bsc#1226216)
  * fabrics: use cleanup helper to free nvme root object
  * nvme: check MD size with PI size when PRACT set to 1
  * nvme-print: add new field added in TP4090
  * nvme-print-binary: add effects-log command output missed
  * completions: add ocp get-error-injection command
  * doc: add ocp get-error-injection command
  * ocp: add get-error-injection command
  * ocp: fix eol-plp-failure-mode command sel option value
  * doc: fix ocp eol-plp-failure-mode select short option
  * ocp: set UUID index for eol-plp-failure-mode command to get
  * nvme: fix verbose logging (bsc#1231668)
  * doc: fix micron ocp telemetry log parse title
  * nvme-rpmb: send RPMB_REQ_READ_RESULT for authentication key programming
  * plugins/micron: Add support for OCP telemetry log parsing
  * ocp: Update Plugin Version
  * nvme: fix lbaf inuse to use 6:5 bits
  * ocp: use NVME_ARGS macro definition by eol-plp-failure-mode command
  * nvme: extern NVME_ARGS macro definition
  * nvme: use _cleanup_free_ type buffer for get-feature command
  * plugins/ocp: Update telemetry string log page (C9h)
  * nvme-print-json: add get-feature command fahrenheit temperature output
  * nvme: add get-feature and id-ctrl commands fahrenheit outputs
  * nvme: delete smart-log command fahrenheit option
  * nvme-print: check locale to use temperatures in degrees fahrenheit
  * completion: add support for tls-key (bsc#1226197)
  * doc: add tls-key --revoke documentation (bsc#1226197)
  * doc: fix tls-key --keyfile shorthand (bsc#1226197)
  * nvme: add support to revoke TLS key (bsc#1226197)
  * nvme: return error code/message for TLS commands (bsc#1226197)
  * nvme: factor out import key function (bsc#1226197)
  * nvme: use cleanup helper to close file descriptor (bsc#1226216)
  * nvme-rpmb: use cleanup helper for STREAM objects
  * fabrics: use cleanup helper for STREAM objects
  * nvme: use cleanup helper for STREAM objects (bsc#1226216)
  * nvme: strip newline when parsing TLS key files (bsc#1226197)
  * nvme: use stdout for exporting TLS keys (bsc#1226197)
  * nvme: change _cleanup_file_ to _cleanup_fd_ (bsc#1226197)
  * common.h: Avoid using unsupported load/store instructions in arm64 VMs
  * ocp: OCP 2.5 Telemetry DA 1 and 2 Parsing Updates
  * nvme-print-stdout: refactor subsys config (bsc#1231668)
  * wdc: Fix compiler warning.
  * nvme: add flags type nvme_print_flags_t
  * nvme-print: Use 'unsigned int' instead of 'unsigned'
  * nvme: update parse_args() return value handling
  * nvme-print: Fix nvme_show_smart_log indentation error
  * nvme-print-stdout: Fix stdout_smart_log indentation error
  * nvme-print-binary: Fix binary_smart_log indentation error
  * completions: add smart-log command fahrenheit option
  * doc: Add smart-log command fahrenheit option
  * nvme: Add smart-log command fahrenheit option
  * nvme-print: add PEL vendor specific and TCG defined events strings
  * nvme-print: Print PEL reserved event string
  * completions: Add timeout option bash completions
  * completions: Add timeout option zsh completions
  * completions: Add io-mgmt-recv/send commands zsh completions
  * completions: Add /dev/nvme argument missed
  * completions: Change fw-activate command name to fw-commit
  * completions: Fix _nvme indentation errors (bsc#1226197)
  * completions: Fix bash-nvme-completion.sh indentation errors (bsc#1226197)
  * doc: Add nvme commands timeout option
  * nvme: Add support for delete-ns command timeout option
  * nvme: Change NVME_DEFAULT_IOCTL_TIMEOUT to use nvme_cfg timeout
  * nvme: Add nvme_cfg timeout default option
  * nvme: Add nvme_cfg global variable for NVME_ARGS default options
  * nvme: add helper function to get pif and sts value
  * nvme: choose PIF from QPIF if QPIFS supports and PIF is QTYPE
  * nvme: use libnvme's atomic ANA log page fetch
  * nvme: fix maximum ANA log page length calculation
  * nvme-print-json: add missing va_end()
  * fabrics: skip namespace scan for fabric commands
  * nvme-print: print the new fields added in TP4141a
  * plugins/ocp: underflow + index fixes for telemetry
  * plugins/ocp: Add ocp TCG Configuration Log Page
  * nvme-print-stdout: Add helper function to print PIF in string form
  * doc: fix format command info
  * nvme: telemetry: report the correct error if the ioctl() fails.
  * nvme-print: add the cancel opcode to the nvme_cmd_to_string() list
  * doc: fix ocp format issues
  * nbft: Reuse existing discovery controller
  * nbft: Skip SSNS records pointing to well-known discovery NQN
  * nbft: Perform actual discovery
  * util/cleanup: Add cleanup for struct nvme_fabrics_uri
  * fabrics: Make some symbols public (bsc#1226216)
  * nvme-print-stdout: fix format index in stdout_nvm_id_ns
  * plugins/solidigm: Added workload-tracker command
  * plugins/solidigm: Added extra VU fields to id-ctrl
  * nvme-print-stdout: print MEM bit of CTRATT field
  * nvme-print-stdout: fix to print the log line by line
  * fabrics: Always pass hostid and hostnqn (bsc#1226216)
  * plugins/ssstc: Replace __uint16_t with uint16_t
  * plugins/solidigm: Added log pages to vs-internal-logs
  * sed: perform a tper revert after lsp revert
  * plugins/nbft: Use default library logging
  * docs: Add missing OCP plugin docs to meson
  * ocp: Switch OCP plugin to use semantic versioning
  * nvme: fix fw-commit MUD result message
  * sed: only re-read partition table after unlock.
  * nvme-print-json: Fix LBA status DSLBA output as hexadecimal
  * nvme-print-json: Use NVME_PMRxxx register definitions to print
  * nvme-print-stdout: Fix PMRWBM register name
  * nvme-print-json: Fix channel configuration descriptors pointer
  * nvme-print-json: Fix linux kernel check patch errors
  * nvme-print: Added "Command and Feature Lockdown" string to LID 0x14
  * plugins/innogrit: `u_char` -&gt; `unsigned char`
  * nvme: Use C99 types for uint32_t
  * nvme-print-stdout: print frl1/2/3 values for zns id-ns
  * solidigm: Eliminate &lt;linux/limits.h&gt;
  * nvme: remove double free in persistent-event-log
  * ocp: Add Get DSSD Power State Feature (FID: C7h)
  * nvme: initialize default library logging
  * nvme: use cleanup helper for nvme_root_t objects (bsc#1226197)
  * doc: add nvme connet ctrl-loss-tmo description
  * plugins/solidigm: Automatic enabling Data Area 4 when retrieving Telemetry.
- always build the docs
  * add 0001-docs-rename-ocp-unsupported-req-log-file.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1730376000">- Update to version 2.11:
  * docs: update check-tls-key arguments
  * nvme: add support to append TLS PSK to keyfile for check-tls-key
  * nvme: return correct error code in append_keyfile
  * docs: nvme-id-doman: dom{ia =&gt; ai}n
  * ocp: fix latency monitoring data structure entry endian
  * ocp: fix TCG configuration log endian
  * ocp: fix firmware activation history entry endian
  * docs: update gen-tls-key arguments
  * nvme: add support to add derive TLS PSK to keyfile
  * nvme: rename identity to version
  * nvme: set file permission for keyfile to owner only
  * nvme: export tls keys honoring version and hmac
  * nvmf-keys: add udev rule to import tls keys
  * docs: update TLS options
  * fabrics: add support to connect to accept a PSK command line
  * fabrics: add support to connect to accept a configuration
  * nvme: use unsigned char for hmac and identity
  * nvme-print: Add Sanitize Media Verification Event in PEL log
  * netapp-ontapdev: add err msg for no ontapdevices
  * netapp-smdev: add err msg for no smdevices
  * doc: Add sanitize command emvs option
  * ocp: combine to use GUID length definitions
  * nvme: update tls_key() handling
  * nvme-print-stdout: print VERS bit of SANICAP field
  * nvme: add EMVS support to sanitize command
  * ocp: remove callback function cast
  * doc: added commit conventions to contribution guidelines
  * ocp: fix ocp-print-stdout.c indentation error
  * ocp: fix ocp-nvme.c indentation errors
  * ocp: build ocp-nvme.c and ocp-telemetry-decode.c without json
  * ocp: split TCG configuration log print codes
  * ocp: split telemetry string log print codes
  * ocp: split device capabilities log print codes
  * ocp: split error recovery log print codes
  * ocp: split unsupported requirement log print codes
  * ocp: split latency monitor log print codes
  * ocp: move ocp telemetry log print function into ocp-print
  * ocp: split smart extended log print codes
  * ocp: split ocp-fw-activation-history print codes
  * plugins: update meson.build file to always build ocp plugin
  * ocp-print: move json code into separate files
  * nvme-print-json: display only verbose output
  * ocp-nvme: ocp plugin version update
  * nvme-print: print KV command set page header
  * doc: show where self-test results can be found
  * plugins/memblaze: fix a wrong id on smart-log-add
  * plugins/dapustor: smart-log-add fix
  * plugins/sed: add sid password change (bsc#1229677)
  * plugins/solidigm: Automatic retry smaller log chunk size.
  * ocp-nvme: Add LMDATA-37 for Latency Monitor Log
  * ocp-nvme: remove ocp log page version checking
  * wdc: Fix for Reading WDC C2 Vendor Unique Log Page
  * ocp: Fixes for OCP 2.5 Telemetry DA1 FIFO Event Parsing
  * nvme-print-json: update JSON verbose output for nvm-id-ctrl (bsc#1231668)
  * wdc: Add Support for SN5100S
  * nvme: Support show-regs for nvmeof
  * ocp: fix option handling in internal-log
  * Documentation: Added solidigm plugin commands
  * wdc: add support for SNTMP drive
  * nvme-print: print NSSES field of CAP register
  * ocp: fix GUID output
  * nvme-print-json: print controller register values in offset order
  * nvme-print-json: print CMBEBS and CMBSWTP in json format
  * nvme-print-stdout: update changed-ns-list-log output (bsc#1231668)
  * nvme: fix uninitialized value in error-log (bsc#1231668)
  * nvme: fix to convert metadata size to native byte order
  * nvme-print: fix error information log page endianness error
  * completions: add get-feature command changed option
  * doc: add get-feature command changed option
  * nvme: separate get NVME_GET_FEATURES_SEL_CHANGED definition
  * nvme: use NVME_GET_FEATURES_SEL definitions
  * nvme-print-stdout: use NVME_CTRL_OAES definitions
  * completion: add ocp set-telemetry-profile to zsh
  * completion: add solidgm work-tracker binding
  * plugins/solidigm: Added Workload Tracker Triggers and Wall Time
  * ocp: include util/types.h to use nvme_uint128_t
  * ocp: fix to set log data pointer allocated
  * nvme: use NVME_CHECK() to check get features select field value
  * ocp: split ocp-hwcomp log
  * completions: add ocp hardware-component-log command
  * doc: add ocp hardware-component-log command
  * ocp: add hwcomp log json output
  * ocp: add hwcomp log command list option
  * ocp: add hwcomp log command comp-id option
  * ocp: add hwcomp dummy definition
  * ocp: add support for hwcomp log page
  * nvme: use NVME_CTRL_FNA definitions
  * netapp-smdevices: print single device output too (bsc#1231668)
  * netapp-smdevices: segregate print routines (bsc#1231668)
  * Add Support for new SN655 PCI Device ID
  * nvme-print-json: extern json object add functions
  * ocp: add SMART / health information extended log page version 4
  * ocp: add error recovery log page version 3
  * ocp: add get-enable-ieee1667-silo command
  * fabrics: fix incorrect access filename check (bsc#1231668)
  * nvme: use NVME_GET_FEATURES_SEL_SUPPORTED definition
  * nvme-print-json: use _cleanup_free_
  * plugins/solidigm: fix use after free.
  * ocp: fix ocp-nvme.c coding style errors
  * ocp: Change C9 function names to use c9 instead
  * ocp: fix to return c9 log page data error to open file
  * ocp: fix to set return value to get c9 log page data
  * nvme: update nvme_insert_tls_key_versioned() return handling (bsc#1231668)
  * nvme-print-stdout: add print_array function
  * logging: add print_info function
  * util: extern uint128_t_to_double() function
  * nvme-print: sanitize error-log output (bsc#1231668)
  * plugins/solidigm : Fixing vs-internal-log to generate identify per allocated namespace.
  * nvme-print: added new fields for nvm_id_ns
  * plugins/fdp: bugfix error check to validate output format
  * plugins/wdc: fix json output for vs-nand-stats
  * nvme-print-stdout: use NVME_FEAT util definitions
  * nvme-print: update subsys verbose outputs (bsc#1231668)
  * nvme-print: add subsystype to the list-subsys output (bsc#1231668)
  * netapp: print output for single device too (bsc#1231668)
  * netapp: segregate the print routines (bsc#1231668)
  * netapp: fix uninitialized value from heap error (bsc#1231668)
  * nvme-print: print the new fields added in TP4142
  * plugins/innogrit: modify for project tacoma
  * wdc: Add Support for new SN-861 PCI device id
  * nvme-print: use LC_MEASUREMENT to check fahrenheit temperature
  * nvme-print: use Completion Condition enum
  * completions: add the zsh completion of the dapustor plugin
  * nvme-print: print the new fields added in TP4165
  * plugins/dapustor: dapustor smart-log-add update
  * nvme-print-stdout: Added print for new field CSER (TP4167)
  * plugins: Add a new DapuStor plugin and the smart-log-add command
  * docs: rename ocp-unsupported-req-log file
- Drop build fix patch
  * remove 0001-docs-rename-ocp-unsupported-req-log-file.patch
- Install 70-nvmf-keys.rules to the default udev rules directory</changelog>
  <changelog author="dwagner@suse.de" date="1741089600">- Update to version 2.11+17.g6e09119:
  * nvme: check for valid output format (bsc#1237275)
  * nvme: make get-feature JSON output print everything (bsc#1237275)
  * nvme: make -v output consistent with -H output for nvme get-feature (bsc#1237275)
  * nvme: make -v output consistent with -H output for nvme get-property (bsc#1237275)
  * nvme-print-stdout: add details in list-ns verbose output (bsc#1237275)
  * nvme-print-stdout: add descriptions for nsze, ncap &amp; nuse (bsc#1237275)
  * netapp-ontapdev: correct the basestr header (bsc#1237275)
  * netapp-smdev: update err msg for no smdevices (bsc#1237275)
  * netapp-ontapdev: update err msg for no ontapdevices (bsc#1237275)
  * netapp-smdev: update basestr header in verbose output (bsc#1237275)</changelog>
  <changelog author="dwagner@suse.de" date="1745323200">- Update to version 2.11+22.gd31b1a01:
  * nvme-print: display fw-rev in list-subsys output (bsc#1240518)
  * nvme-print: display model in list-subsys output (bsc#1240518)
  * netapp-ontapdev: add subsysname to regular output (bsc#1240518)
  * netapp-ontapdev: add subsysname to the verbose output (bsc#1240518)
  * Revert "nvme-print-json: display only verbose output"</changelog>
</package>
<package pkgid="69a7908acc30b60f9f688a512d37c70215533429f1206a3e1a2d01f8bdeedd88" name="nvme-cli-zsh-completion" arch="noarch">
  <version epoch="0" ver="2.11+26.gfbd2b4f4" rel="150700.3.6.2"/>
  <changelog author="dmueller@suse.com" date="1659528000">- Update to version 2.1.1:
  * build: Update version to v2.1.1
  * build: Extend release script to support micro version releases
  * build: Add minimum build requirement on libnvme
  * wrapper: Add weak nvme_init_copy_range_f1 symbol
  * build: Update version before regenerating docs
  * build: Update release version rules</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- Update to version 2.1.2:
  * build: Update version to v2.1.2
  * wrapper: Update SPDIX license
  * wrapper: Call library version of nvme_init_copy_range_f1
  * Revert "udev: re-read the discovery log page when a discovery controller reconnected"
  * nvme: Simplify ns list identify
  * meson: we don't need a c++ compiler
  * plugins/ocp: drop unused fd argument
  * plugins/wdc: remove fd argument from print functions
  * plugins/wdc: fix memset() on the address of a pointer
  * plugins/solidigm: fix return value on format parse failure
  * plugins/wdc: prevent duplicate close on NVMe device</changelog>
  <changelog author="daniel.wagner@suse.com" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- Mark no binaries rpms as noarch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 2.2.1:
  * Added parsing for Solidigm telemetry observable data.
  * add item ddr_ecc_err_cnt in smart-log-add
  * build: Drop dependency on libuuid
  * build: Fix endian check for cross build
  * build: Remove unused uuid.wrap file
  * build: Remove unusned uuid.h include
  * completions: Add show-topology tab completion
  * fabrics: Honor JSON config file in connect-all command (bsc#1199504)
  * fabrics: Trigger auto connect if config.json exists
  * fabrics: fix 'persistent' handling during connect-all with JSON file
  * fabrics: nvme config --modify depends on -n and -t argument
  * fabrics: re-read the discovery log page when a discovery controller reconnected
  * json: Support uint64 types serialization for older json-c versions
  * nvme, plugins: fix __u64 -&gt; unsigned long long assumptions
  * nvme-print: Add missing values in id-ctrl for JSON output
  * nvme-print: Handle NULL hostid in JSON output
  * nvme-print: Output 128bit values as uint128 type instead of double
  * nvme-print: Print fguid as a UUID
  * nvme-print: Use uint128 JSON function for media_units_written
  * nvme-print: decode MI status values
  * nvme-print: decode status types
  * nvme-print: fix wrong json key
  * nvme: Add helper function to parse 16-bit comma separated list
  * nvme: Add nvme_cmd wrapper for get_features
  * nvme: Add show-topology command
  * nvme: Add wrapper for Format NVM
  * nvme: Add wrapper for Sanitize NVM
  * nvme: Add wrappers for Get Log page helpers
  * nvme: Add wrappers for Identify controller lists
  * nvme: Add wrappers for NS attach/detach
  * nvme: Add wrappers for NS management functions
  * nvme: Add wrappers for basic NS identify
  * nvme: Add wrappers for firmware commands
  * nvme: Fix set feature command to get feature identifier 0Dh length as zero
  * nvme: Introduce a union in struct nvme_dev for different transport types
  * nvme: Introduce nvme_cli_ wrappers, wrap identify and identify_ctrl
  * nvme: Make static nvme_dev private to open_dev(), use locals elsewhere
  * nvme: Masks SSTAT in sanize-log output
  * nvme: Remove static nvme_dev, allocate on open instead
  * nvme: Use correct print format specifier for sizeof arguments
  * nvme: Use local struct nvme_dev for show_registers &amp; map_registers
  * nvme: check if cfg.metadata is NULL before passing it to strlen()
  * nvme: use helpers for checking status types
  * plugins/innogrit: Include timer.h
  * plugins/innogrit: add smart items for smart-log-add
  * plugins/micron-nvme: Use correct print format specifier for sizeof arguments
  * plugins/ocp: Include timer.h
  * plugins/ocp: Output 128bit values as uint128 type instead of double
  * plugins/ocp: pass struct nvme_dev to internal functions
  * plugins/seagate: Add support for OCP
  * plugins/toshiba: pass struct nvme_dev rather than fd + name
  * plugins/virtium: Output 128bit values as uint128 type instead of double
  * plugins/wdc: Add support for SN660 drive
  * plugins/wdc: Add type case for feature id
  * plugins/wdc: Output 128bit values as uint128 type instead of double
  * plugins/wdc: pass a struct nvme_dev around rather than a fd
  * plugins/wdc: pass struct nvme_dev rather than using global nvme_dev
  * plugins/ytmc: pass struct nvme_dev rather than fd + name
  * plugins: Use PRIu64 format specifier for 64bit types
  * print: Add Controller Ready Timeout Exceeded HW error code
  * solidgm: fix initialization warning
  * solidigm: Added parsing for telemetry customer screenable data
  * solidigm: Fix printf format for size_t variable
  * solidigm: Updated Telemetry parsing code to MIT license.
  * subprojects/libnvme: update for MI admin command coverage
  * tests: Update license to GPL-2.0-or-later
  * tree: Add NVMe-MI support
  * tree: Add dev_fd() helper
  * tree: Change nvme_dev from global to static
  * tree: Combine NVMe file descriptor into struct nvme_dev
  * tree: Move global device info to a single struct
  * tree: fail on non-negative return values from parse_and_open
  * udev: Add HOST_IFACE to udev rule (bsc#1208001)
  * util/json.h: Add json_object_get_uint64 fallback implementation
  * util/json: Add 128 bit JSON helpers
  * util/types: Add 128 bit conversion helpers
  * util: Fix le128_to_cpu on big-endian
  * util: Fix le128_to_cpu on little-endian
  * util: Move common type conversion helpers into util section
  * utils/json: Add json_object_new_uint64 for json-c &lt; 0.14
  * utils: Fix uint128_t usage
  * wdc:  OCP Log page updates and fixes
  * zns.c: report zones should be started after retrieved zone
- Handle suse-missing-rclink lint warnings by providing the symlinks
- Drop rpmlintrc as it is not needed anymore</changelog>
  <changelog author="daniel.wagner@suse.com" date="1675080000">- Update to version 2.3:
  * Added support for Flexible Data Placement (TP4146)
  * Added Persistent Discovery Controller support (TP8013/TP8014)
  * nvme-mi: support for firmware downloads
  * nvme device-self-test learned the --wait command line argument
    which makes nvme-cli to wait (incl. progress bar) in foreground
    until the test has finished.
  * A lot of bug fixes all over the place
- Update spec file
  * Project depends on meson &gt;= 0.50.0
  * make build dependency dropped</changelog>
  <changelog author="daniel.wagner@suse.com" date="1680264000">- Update to version 2.4 (jsc#PED-553 jsc#PED-3884):
  * plugins/ocp: Add SMART cloud log to solidigm plugin
  * nvme-print: Unify number base format for nsid
  * nvme-(discover,connect,connect-all): enable options '--keyring' and '--tls_key'
  * nvme-connect: enable option '--tls'
  * nvme-check-tls-key: add options to derive a 'retained' TLS key
  * nvme-gen-tls-key: add options to derive a TLS key
  * plugins/ocp: Move SMART cloud log methods to separate file for reusability
  * nvme: validate storage tag size correctly
  * nvme-print-json: Add json output status function
  * util: Cleanup argconfig parse function
  * nvme: Fix format command function indentation errors
  * util: Use argconfig commandline options pointer directly
  * nvme-print: Fix nvme show status function indentation errors
  * nvme: Check fw-commit command support MUD
  * print: print csi and opcode in error log (TP4113)
  * plugins/inspur: Cast vendor specific smart log value
  * nvme: Use correct ABORT type for self abort test
  * plugins/solidigm: Do not overwrite previously initialized variable
  * nvme-print: sanitize supported-log-pages output (bsc#1209550)
  * nvme: Enforce length to a multiple of 4 in get_log_page
  * nvme: fix block count and data size logic (bsc#1209564)
  * util: Introduce argconfig simple helper to check seen condition
  * plugins/ocp: Add set feature EOL/PLP failure mode no-uuid option
  * plugins/ocp: Refactor to clear feature identifier C1h and C3h
  * plugins/ocp: Add support for clear PCIe correctable error counters feature
  * nvme-doc: update man page for supported-log-pages (bsc#1209550)
  * plugins/ocp: OCP 2.0 field updates for SMART cloud log
  * nvme: Fix parameter limit range
  * fdp: Fix wrong Reclaim Unit Handle Status size
  * plugins/ocp: Add support for EOL/PLP failure mode feature
  * nvme-print: Fix printing of u32 values
  * nvme: Fix invalid memory access in show_registers
  * util: Add argconfig seen flag parameter to check if feature NSID set
  * nvme-print: fix segfault in supported-log-pages json output
  * fabrics: Fix ordering for auto connect services (bsc#1208075)
  * nvme.c: Check Firmware Update Granularity in fwdl
  * log: high latency timestamp issue
  * nvme: Align get feature data buffer length by page size to allocate
  * nvme: Continue get feature on invalid NS error to get multiple feature ids
  * plugins/ocp: SMART cloud log bug fixes.
  * Made temperature readouts in line with the SI.
  * Changed 'Kelvin' to 'kelvin', as recommended by the BIPM.
  * plugins/ocp: Fix whitespace and style issues
  * util: Revert JSON output to plain numbers
  * nvme: Add rae argument to telemetry-log command
  * nvme: Refactor get telemetry log page helper
  * nvme: Factor out parse telemetry log da element
  * nvme: Fix type in error message
  * unit: Add test-argconfig-parse
  * nvme: Use chunked read in get_log()
  * nvme: Use fprintf for error message logging in get_log()
  * nvme: fix /dev/spkd/ typo
  * doc: --storage-tag-check doesn't take any arguments
  * fabrics: Ensure host-traddr/iface consistency for "connect-all"
  * nvme-print: print the nvme generic name in json output as well
  * plugins/innogrit: modify command opcode for eventlog and cdump
  * completion: fix typo, add missing args
  * plugins/wdc: Fix data Formatting for Latency Monitor Log Page
  * nvme: Make json-c optional again
  * nvme-print: Move JSON printing function into a new file
  * plugins/solidigm: Use json_create_object wrapper
  * plugins/solidigm: Use struct json_object instead of typedef
  * fabrics: No need to sanitize trsvcid and traddr
  * docs: Fixed typos and missing options
  * util: Numbers without any suffix are also valid
  * util: Update suffix_binary_parse API
  * util: Reimplement suffix_si_parse
  * nvme: Filter out status flags for get feature command
  * util: Add crc32 implementation
  * nvme-print: Use attrs_info as key for Zone Attributes Information
  * nvme: Support effects-log for fabrics ctrl
  * plugins/solidigm: Add uuid index resolution
  * plugins/ocp: Use network byte order for OCP UUID value
  * json_discovery_log: avoid buffer overrun (bsc#1207435)
  * Fix connect nbft regressions (bsc#1209905)
  * Fix auto connect conditions (bsc#1210105)
  * Fix auto boot for NBFT connections (bsc#1211647)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1695988800">- Update to version 2.6 (jsc#PED-3610 jsc#PED-4879 jsc#PED-5061):
  * nvme: allocate payload buffer in create-ns command
  * nvme-print-stdout: Add CAP.CPS and CAP.NSSS human readable outputs
  * nvme: Add output-format default option instead of argconfig json option
  * nvme: fw-download offset only describes FW offset, not file offset
  * unit: add locale number test
  * util: handle utf-8 thousend separators correctly
  * nvme: Change to use NVME_ARGS verbose default option from OPT_ARGS
  * fabrics: Fix NVMF_ARGS macro to use parameter n correctly
  * nvme: Add verbose default option to show command debug output
  * util: Fix to set argconfig output format json option correctly
  * util: Split argconfig output format json function to set and get
  * nvme: Spport Phy Rx Eye Opening Measurement Log
  * nvme: Introduce nvme_realloc function
  * nvme: Fix for fdpa reserved field printing
  * completion: add 'version' and 'help' to list
  * udev-rule: apply round-robin iopolicy on i/o subsystems alone (bsc#1215994) (bsc#1219086)
  * nvme: Add support for the OAQD ID controller field
  * plugins/solidigm: use static log macro to calc bitmask
  * plugins/ocp: Rename FW activation history command
  * nvme: auto free nvme_dev resource
  * nvme: allocate aligned payloads for all nvme commands
  * nvme: introduce alloc helper with alignment support
  * util: add cleanup function for generic memory allocations
  * nvme: append huge to nvme_{alloc|free} function
  * nvme: fw_download use nvme_alloc only
  * fabrics: Removing duplicate code and moving to libnvme
  * nvme-print: omit size of protection information
  * tree: Modify label name close_fd to close_dev
  * fabrics: For TCP/RDMA, compare IP addresses with nvme_ipaddrs_eq() (bsc#1213768)
  * fabrics: lookup_discovery_ctrl() must look under host and not root (bsc#1213768)
  * nvme: Do not map status to errno codes
  * completions: Add bash completion for DSSD Power state feature(FID: C7h)
  * Documentation: Add document for DSSD Power state feature(FID: C7h)
  * plugins/ocp: Add DSSD Power state feature(FID: C7h)
  * avoid casting pointer arguments to argconfig functions
  * nvme-print: Add support for EGFEAT, Domain Identifier, TEGCAP and UEGCAP
  * nvme-print: Fix endurance_log whitespace changes
  * nvme: Fix retrieval of telemetry log up to specified data area.
  * nvme: Update list secondary command
  * wdc: Add support for SN861 drive
  * util: Set errno to 0 before strtol/stroul call
  * nvme: Revert passthru and submit_io to print status to stderr from stdout
  * plugins/zns: Fix offset in report zones
  * nvme-rpmb: Fix nvme_show_id_ctrl_rpmbs() definition error
  * fabrics: Use corresponding hostid when hostnqn is generated
  * json: fix seg. fault converting NULL to JSON string (bsc#1213762)
  * nvme-cli: fix extended metadata size calculation
  * nvme-print: Show subsystem iopolicy (bsc#1124564)
  * nvme-print-stdout: Do not show non reachable ns in namespace topology (bsc#1212598)
  * nvme-print: Fix show-topolocy for ctrls
  * doc: Fix typo in documentation
  * nvme-print-stdout: fix storage tag size label
  * nvme-print-stdout: List only ctrls which are part of ns (bsc#1212598)
  * nvme-print-stdout: Support subsys reachable from several hosts (bsc#1212598)
  * ccan: Add htable, strset and dependencies (bsc#1212598)
  * ccan: Remove unused documentation (bsc#1212598)
  * nvme-print: Split max power flags
  * nvme-print: fix counter while looping through uuid_list (bsc#1212598)
  * fabrics: only look for matching ctrl on same host (bsc#1213768)
  * README: Correct hugetlbfs spelling error
  * util: Delete unused CFG_BOOL argconfig type as duplicated with CFG_FLAG
  * util: Set LC_ALL=C as default if -H option is not used
  * nvme: Add support for create-ns command endg-id option parameter
  * nvme-print: fix argument order for show functions
  * plugins/solidigm: Added Marketing Name Log support for Solidigm.
  * nvme-print: Remove left overs from refactoring
  * nvme-print: Move num argument parsing into callbacks
  * nvme-print: Fix typo in callback definition
  * scripts: Make release script project neutral
  * scripts: Update update-docs.sh scripts
  * scripts: Execute the scripts from toplevel directory
  * scripts: Move helper scripts to a central place
  * docs: Update file modes
  * doc: Add information on --context
  * nvmf-autoconnect: Annotate the context to autoconnect
  * fabrics: Add support for volatile configuration
  * plugins/solidigm: Formated log page directory table consistently with "nvme list" format.
  * plugins/solidigm: Added Identify controller VU extensions parsing.
  * nvme-print-json: Print PCI pysical slot number for controller
  * nvme-print-stdout: Print PCI physical slot number for controller
  * libnvme.wrap: Bump to 42ac453
  * plugins/nbft: Use common code to parse print flags
  * fabrics: Do not print device on connect per default
  * fabrics: Revert 'fabrics: prevent 'nvme connect' to well-known discovery NQN'
  * nvme-print: fix wrong list-subsys output when ns are attached to different ctrls
  * plugins/micron: Correct NULL pointer checking error
  * plugins/innogrit: Add vendor command get-eventlog and get-cdump
  * nvme: Use correct data buffer size
  * nvme: Fix quoted string split across lines to use quoted newline
  * plugins/zns: Fix zns.c linux kernel check patch errors and warnings
  * plugins/ymtc: Fix ymtc-nvme.c linux kernel check patch warning
  * plugins/ymtc: Fix ymtc-nvme.c space indentation to tab indentation
  * plugins/virtium: Fix virtium-nvme.c linux kernel check patch errors and warnings
  * plugins/transcend: Fix transcend-nvme.c linux kernel check patch errors and warnings
  * plugins/solidigm: Fix linux kernel check patch errors and warnings
  * plugins/shannon: Fix shannon-nvme.c linux kernel check patch errors and warnings
  * plugins/seagate: Fix seagate-nvme.c linux kernel check patch warnings
  * plugins/scaleflux: Fix sfx-nvme.c linux kernel check patch errors and warnings
  * plugins/netapp: Fix netapp-nvme.c linux kernel check patch errors and warnings
  * plugins/nbft: Fix nbft-plugin.c linux kernel check patch warnings
  * plugins/micron: Fix micron-nvme.c linux kernel check patch errors and warnings
  * plugins/micron: Fix micron-nvme.c space indentation to tab indentation
  * plugins/memblaze: Fix memblaze-nvme.c linux kernel check patch errors and warnings
  * plugins/memblaze: Fix memblaze-utils.h space indentation to tab indentation
  * plugins/memblaze: Fix memblaze-nvme.c space indentation to tab indentation
  * plugins/intel: Fix intel-nvme.c linux kernel check patch errors and warnings
  * plugins/inspur: Fix inspur-nvme.c linux kernel check patch warnings
  * plugins/inspur: Fix inspur-nvme.c space indentation to tab indentation
  * plugins/innogrit: Fix innogrit-nvme.c linux kernel check patch errors
  * plugins/huawei: Fix huawei-nvme.c linux kernel check patch errors and warnings
  * plugins/fdb: Fix fdb.c linux kernel check patch warnings
  * plugins/dera: Fix dera-nvme.c linux kernel check patch errors and warnings
  * plugins/amzn: Fix amzn-nvme.c linux kernel check patch error and warnings
  * plugins/wdc: Fix wdc-utils.c linux kernel check patch errors and warnings
  * plugins/wdc: Refactor wdc-nvme.c for linux kernel check patch errors and warnings
  * util: Move falltrhough feature check to meson.builds
  * ocp: Add eol plp failure mode json outputs
  * nvme-print: Add nvme show result function
  * nvme-print-json: Add json output result function
  * nvme-print: Fix nvme_show_error() to call va_end() for json output format
  * nvme: Fix nvme format block-size option handling
  * Revert "nvme: Masks SSTAT in sanize-log output"
  * fabrics: Fix NVMF_ARGS macro indentation error
  * Documentation: Add document for OCP Device capability(LID: 0xC4) log page
  * completions: Add bash completion for OCP Device capability(LID: 0xC4) log page
  * plugins/ocp: Add Device capability(LID: 0xC4) log page
  * udev: fix warning reported by udevadm verify
  * fabrics: fix conditions in nvmf-autoconnect.service
  * fabrics: Change NVMF_OPTS as NVMF_ARGS to fix linux kernel check patch error
  * nvme: Split passthru commands read output
  * nvme: Fix io-passthru command read metadata output
  * plugin/ocp: Added implementation for 0xC1 log page
  * util: Fix suffix_si_parse to parse no decimal point but suffix value correctly
  * completions: Add zsh option values handling for sanitize command action
  * completions: Add ocp sub commands zsh completion
  * completions: Add ocp commands zsh completion
  * completions: Add ocp commands bash completion
  * nvmf-autoconnect: restart service to avoid dropping AEN
  * solidigm: Reduce memory usage in supported log pages feature
  * solidigm: Changes to supported log pages feature requested by review
  * solidigm: Add supported log pages log feature to Solidigm plugin
  * plugins/ocp: Added ocp unsupported requirements log page
  * completions: Add bash option values handling for sanitize command action
  * doc: Correct nvme-show-hostnqn command NAME description
  * completions: Add missing zsh commands descriptions
  * plugins/wdc: Extend SN530 support.
  * Fix incorrect article 'an' as 'a' to use for descriptions and message
  * nvme: Set effects-log command csi option help message string
  * completions: bash: Delete unsupported id-iocs command options
  * completions: bash: Add id-domain command
  * completions: Fix nvm-id-ns-lba-format command zsh definition
  * completions: Add json command option
  * nvme: Fix get-feature command sel parameter check to allow value 8
  * util: Delete unnecessary argconfig definitions OPT_VAL and CFG_VAL
  * util: Delete argconfig value type to add option value as va lists instead
  * util: Split to set argconfig option value
  * util: Delete argconfig value length to calcurate instead
  * nvme: Change sanitize command action option to use argconfig parse value
  * util: Add argconfig parse value function
  * util: Delete unused argconfig subopts type
  * util: Delete unused argconfig file types
  * util: Delete unused argconfig help function
  * nvme-wrap: do_admin_args_op should not clear args timeout
  * nvme: Fix linux kernel check patch warnings
  * nvme: Fix linux kernel check patch errors
  * plugins/ocp: Add telemetry-log command to OCP plugin
  * plugins/ocp: Add OCP set latency monitor feature command
  * plugins/ocp: Fix endianness in Latency Monitor Log output
  * plugins/ocp: Add missing fields in Latency Monitor Log
  * plugins/ocp: Fix typos in Latency Monitor Log
  * plugins/ocp: Reorganize OCP plugin source code
  * tests: Add tests for controller reset
  * plugin/solidigm: Added vs-internal-log command.
  * nvme: Add nvme_show_perror to use instead of perror for json output
  * nvme-print-json: Use vasprintf instead of vsnprintf to allocate string
  * nvme: fix rnlpt to_string() values.
  * nvme: fix io_mgmt args parse error
  * fdp: set-events feature is saveable
  * fabrics: Return errno value as negative
  * fabrics: Fix linux kernel check patch errors and warnings
  * nbft: add the nbft show plugin
  * nbft: added NBFT v1.0 table support (jsc#PED-1449)
  * nbft: make lookup_ctrl function public
  * nvme: Fix indentation errors around nvme show error API
  * nvme: Check validate output format err value instead of flags
  * nvme: Use nvme show error API to outptu stderr messages for json format
  * util: Check output format json for json error message output
  * nvme-printf: Add show error function for nvme list command json output
  * nvme: Add zns specfic field for create ns
  * nvme: Add ns-mgmt host software specified fields
  * nvme: Add dtype, dspec on write-zeroes, write-uncor
  * nvme-print: Add new fields print on id directive
  * nvme-print: Add VWCNP on NSFEAT of id-ns
  * nvme: Fix format command to skip to reread NSID all block device
  * plugins/solidigm: Fixes and clean-up of Telemetry parse code. Fixed parsing of 64 bit values. Fixed COD field name. Fixed compilation warnings when compiling for 32 bit. Added missing free(). Consolidated single entry function to telemetry parser. Consolidated use of integer types.
  * doc: Documentations maintenance changes
  * doc: Add nvme-mi-send command documentation
  * doc: Add nvme-mi-recv command documentation
  * doc: Add clear-pcie-correctable-error-counters command documentation
  * doc: Add eol-plp-failure-mode command documentation
  * plugins/solidigm: Add firmware activation history log to Solidigm plugin
  * plugins/ocp: Add firmware activation history log to OCP plugin
  * nvme-print: Use enum nvme_print_flags for nvme_show_id_ctrl
  * nvme: Add support for NVMe-MI send command
  * nvme: Use stdout for passthru and submit_io commands success messages
  * nvme: Fix passthru command function indentation errors
  * nvme: Add support for NVMe-MI receive command
  * fabrics: fix fc config JSON file handling (bsc#1210089)
  Refresh 0100-harden_nvmf-connect@.service.patch
- Fix install path for nvme-regress script</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420800">- Enable test during build (bsc#1207686)
- Drop minimum version meson dependency
- Add asciidoc dependency
- Build documentation when requested</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696852800">- Use fixed timestamps for documentation allowing reproducable builds
- Announce nvmeof-boot-support support via Provides
- Filter rpmlint warnings for systemd-service-without-service_ macros
- Add missing service files for NBFT feature
  * add 0001-fabrics-autoconnect-add-service-unit-for-connecting-.patch
  * add 0002-fabrics-add-udev-rule-to-avoid-renaming-nbft-interfa.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1697112000">- Add missing jsc# and bsc# tracking entries in change log.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1702987200">- Update to version 2.7:
  * nvme-print-json: include vs for identify namespace
  * nvme-print-stdout: enhance connect message (bsc#1219086)
  * fabrics: fix connect error if hostid file does not exist (bsc#1219086)
  * fabrics: fix invalid output format error during nvme connect (bsc#1219086)
  * wdc: Fix vs-smart-add-log Command for SN650 and SN655
  * nvme: restric hmac options for gen-tls-key (bsc#1219086)
  * wdc: Fix UUID index fallback mechanism
  * plugins/ocp: Add OCP Telemetry String log page, Telemetry log page
  * completions: Add bash completions for telemetry string log page
  * plugins/solidigm: Added OCP 2.0 compatibility version command
  * plugins/solidigm: Added OCP 2.0 vs-drive-info command.
  * plugins/ocp: Fix printing order of various Latency Monitor Log buckets
  * nvme: validate output format split status from flag return value
  * nvme: simplify cleanup_nvme_dev()
  * cleanup: remove unused cleanup_charp()
  * wdc: Add support for SN861 2nd pci device id
  * nvme: replace libhugetlbfs with mmap and madvise
  * util/mem: move alloc helper to util section
  * nvme: auto cleanup filedescriptors
  * nvme: auto cleanup buffers
  * nvme: return error code in get_persistent_event_log
  * nvme: sanitize nvme-gen-tls-key
  * nvme: print out the resulting TLS identity for 'nvme check-tls-key'
  * nvme: Add version '1' identifier for nvme-gen-tls-key
  * subprojects/libnvme: update wrapper for TP8018
  * plugins/solidigm: Added re_sku_count smart atrribute
  * doc: Fix nvme-connect manpage --application option string
  * plugins/ocp: changed command clear-pcie-correctable-error-counters to match OCP 2.0 spec.
  * plugins/solidigm: Added command to clear PCIe Correctable Error Counters according to OCP 2.0
  * plugins/ocp: Reorganized clear feature code for better reuse
  * nvme: fixup length calculation for 'nvme gen-tls-key --secret'
  * doc: remove invalid hostkey info for --dhchap-secret
  * nvme-print-json: use human helper everywhere
  * nvme-print-json: remove obj_print helper
  * plugins/ocp: update nvme_show_select_result call
  * mailmap: only show contributer's name
  * nvme-print-json: Change to report status and message in array
  * nvme-print-json: Change to report feature select in array
  * nvme-print-json: Change to report error and data in array
  * nvme-print-json: Add show_init/finish calls to report features in array
  * nvme-print: Add nvme_show_error_status() to merge error message and status
  * nvme-print-json: Use r instead of root and use obj_add_***(r, ..., ...)
  * nvme-print-json: Delete static const char string global variables
  * nvme-print-json: Add remaining controller registers readable format
  * nvme-print-json: Add readable format cap, vs, cc, csts, nssr and crto registers
  * nvme-print-json: Combine duplicated json key and val string variables
  * nvme-print-json: Replase json_array_add_value_string() to array_add_str()
  * nvme-print-json: Replase json_object_add_value_uint128() to obj/root_add_uint128()
  * nvme-print-json: Replase json_object_add_value_object() to obj/root_add_obj()
  * nvme-print-json: Replase json_array_add_value_object() to array_add_obj()
  * nvme-print-json: Replase json_object_add_value_array() to obj/root_add_array()
  * nvme-print-json: Replase json_object_add_value_uint() to obj/root_add_uint()
  * nvme-print-json: Replase json_object_add_value_int() to obj/root_add_int()
  * nvme-print-json: Replase json_object_add_value_uint64() to obj/root_add_uint64()
  * nvme-print-json: Replase json_object_add_value_string() to obj/root_add_str()
  * nvme-print-json: Update feature_show_fields_*** to use root/obj_add_***()
  * nvme-print-json: Update lba_status_log to use root_add_***() and obj_add_***()
  * nvme-print-json: Replace lba_status_log printf() to root_add_result()
  * nvme-print-json: Add list_item print function
  * nvme-print-json: Add lba_status_info print function
  * nvme-print-json: Add lba_range print function
  * nvme-print-json: Add id_ctrl_rpmbs print function
  * nvme-print-json: Unify json_list and jroot object names to root
  * nvme-print-json: Add json_zns_changed print function
  * nvme-print-json: Add root_add_result() to output result message
  * nvme-print-json: Split persistent_event_log print function
  * nvme-print-json: Remove unnecessary string newline code
  * nvme-print-json: Replace effects_log_list print to use json_print()
  * nvme-print-json: Print persistent_event_log no log data result correctly
  * nvme-print-json: Add static "result" and "erorr" strings variables
  * nvme-print-json: Add single_property printf function
  * nvme: Replace get feature command stderr output to nvme_show_error()
  * nvme-print-json: Change d() output to use d_json()
  * nvme: Fix get-feature command mixed stdout and json outputs
  * nvme-print-json: Add remaining feature fields print functions
  * nvme-print-json: Update formatting and codying style
  * build: Add -std=c99 to CFLAGS for muon on CentOS 7
  * fabrics: add udev rule to avoid renaming nbft interfaces
  * fabrics: autoconnect: add service unit for connecting NBFT subsystems
  * fabrics: autoconnect: explicitly express module dependency
  * Updates to codeql config
  * libnvme-wrap: exit on VOID_FN lookup failure
  * plugins/ocp:Added the ocp C6h feature api
  * plugin/ocp_fid_c6h:Added the ocp C6h feature api
  * nvme-copy: support cross-namespace copy
  * nvme/plugins: fix mismatch operator
  * nvme: fix overflow possiblity
  * nvme: reduce identify cmd issue
  * nvme: allow set-features to take input from stdin
  * Fix common misspellings from codespell project
  * nvme-print: Correct to print correct ascii character string length
  * print-stdout: print Host Behavior Support correctly
  * build: Bump libnvme wrap
  * plugins/solidigm: Added support for temperature statistics log page
  * Add support for codeql sweeps
  * doc: Add virt-mgmt command
  * doc: Add id-uuid command
  * doc: Add list-secondary command
  * doc: Add id-ns-granularity command
  * doc: Add nvme commands --output-format and --verbose options
  * completions: Add nvme-mi-recv nad nvme-mi-send commands completions
  * completions: Change short option -o and -v duplicated to upper case
  * doc: Change short option -o and -v duplicated to upper case
  * nvme: Change short option -o and -v duplicated to upper case
  * nvme: Change phy-rx-eom-log command to use NVME_ARGS instead
  * plugins/memblaze: Add smart-log-add and latency-feature functions
  * plugins/solidigm: internal-logs Telemetry auto detect last data area.
  * nvme: Change to use NVME_FLBAS_META_EXT() macro to check flbas value
  * nvme-print-json: Add host memory buffer and timestamp features print functions
  * nvme-print-json: Add feature fields print functions
  * nvme-print-json: Add TMPTH feature print function
  * nvme-print-json: Add show_feature_fields print function
  * nvme-print-json: Add select_result print function
  * nvme-print-json: Use json_print to print and free object
  * nvme-print-json: Add lba_status print function
  * nvme-print-json: Combine variable definition and setting value
  * nvme-print-json: Add id_iocs print function
  * nvme-print-stdout: Fix coding style errors
  * nvme-print-json: Add directive print function
  * nvme: Fixed segmentation fault when getting host initiated telemetry
  * plugins/wdc: enhanced SN861 device support
  * plugins/wdc: cleanup line lengths
  * nvme: do not include meta data for PRACT=1 and MD=8
  * nvme: use block-count arg if provided
  * build: bump libnvme to disable tests option
  * build: Add static build on CI target
  * nvme-print: Add nvme_zns_start_zone_list() API function
  * nvme-print: Add nvme_zns_finish_zone_list() API function
  * nvme-print-binary: Set list function to NULL if unimplemented
  * nvme-print-json: Change order list functions and set NULL if unimplemented
  * nvme-print-stdout: Fix to set stdout_list_item print function missed
  * plugins/solidigm: log page name extraction using nvme_log_to_string function
  * nvme-print: Added missing logpage names in nvme_log_to_string function
  * udev-rules: rename netapp udev rule (bsc#1219086)
  * udev-rules: set ctrl_loss_tmo to -1 for ONTAP NVMe/TCP (bsc#1219086)
- Remove upstreamed patches
  * remove 0001-fabrics-autoconnect-add-service-unit-for-connecting-.patch
  * remove 0002-fabrics-add-udev-rule-to-avoid-renaming-nbft-interfa.patch
- Update spec file
  * remove libhugetblfs depedency
  * update NetApp udev rule file name</changelog>
  <changelog author="daniel.wagner@suse.com" date="1703160000">- Update to version 2.7.1:
  * nvme-print-json: Revert field name changes (bsc#1218306)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1707912000">- Update to version 2.8:
  * nvme-print-json: append array object in json_support_log
  * sed: Add plugin for basic SED Opal operations (jsc#PED-5061)
  * don't include newlines in already wrapped text
  * nvme: do not include meta data for PRACT=1 and MD=8 (version 2)
  * create-ns: align the namespaces to 1Mib boundaries when using SI suffixes
  * doc: Fix config-schema.json's URL
  * plugins/solidigm: Compressing vs-internal-log log files into zip file.
  * nbft: do not issue an error if ACPI tables are missing
  * nbft: fixup include for libnvme
  * doc: Fix short option name for cfg-file
  * completions: added Solidigm plugin to autocomplete scripts
  * nvme: Remove unused cfg argument from NVME_ARGS() macro
  * nvme: fix directive receive identify offsets
  * nvme-fabrics: enable option 'concat'
  * build: Update libnvme wrap
  * plugins/wdc: Add Debug Log Collection Support
  * nbft: fix tcp/dhcp address fallback retry (bsc#1218873)
  * nvme: use correct telemetry log size
  * nvme-print: fix typo in list verbose output (bsc#1219086)
  * nvme: print inserted tls key for check-tls-key (bsc#1219086)
  * plugins/wdc: Plugin fixes and updates
  * fabrics: move hostid/hostnqn warnings to verbose level (bsc#1219086)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737600">- Update to version 2.9:
  * nvme-print: expand the maximum field length to prevent misalignment
  * plugins/spdk: plugin to list SPDK subsystems
  * nvme-print: check if controller belong to SPDK
  * plugins/spdk: plugin to list SPDK controllers
  * nvme-print-stdout: fix ASQB, ACQB and BMBBA prints
  * build: bump libnvme wrap
  * nvmf-autoconnect: fix string encoding
  * nvme: identify primary ctrl do not accept nsid
  * nvme-wrap: remove unused nvme_cli_get_log_ana_groups()
  * nvme-print-json: use admin queue attributes definitions
  * nvme-print-json: use CSTS definitions
  * nvme-print-stdout: use POWER_OF_TWO macro
  * nvme-print-json: use controller configuration definitions
  * nvme-print-json, nvme-print-stdout: add tertiary version number
  * nvme-print-json: use NVME_MAJOR and NVME_MINOR definitions
  * nvme-print-json: use NVME_BOOT_PARTITION_INFO field definitions
  * nvme-print-json: add support telemetry log create event in PEL
  * nvme-print-json: add support set feature event in PEL
  * nvme-print-json: add obj_d() function
  * nvme-print-json: add obj_add_uint_0nx() function
  * meson.build: Fix spelling of sed-opal.h filename
  * sed_opal: Only build when we really have sed_opal headers
  * nvme: fix error path if write() fails in get_telemetry_log()
  * plugins/solidigm: Additional LID for temperature statistics.
  * plugins/solidigm: Improved Solidigm UUID index detection.
  * nvme-print-stdout: Add CSTS.ST register stdout print
  * nvme-print-stdout: Use NVME_CMIC definitions
  * nvme-print: Use NVME_UNIT definitions
  * nvme-print-stdout: Use NVME_CMBMSC/STS/EBS/SWTP definitions
  * plugins/ssstc: add a new plugin for SSSTC driver
  * nvmf-connect: systemd hardening effort
  * plugins/ocp: Adjusted variable type size carrying UUID index to 8 bit.
  * nvme: fix security buffer allocation size
  * nvme: Change fw-download xfer initialization to set 0
  * nvme: Add fw-download warning message for FWUG alignment error
  * plugins/ocp: Split ocp_get_uuid_index() into find and get functions.
  * nvme: fix mem leak in multiple key related functions (bsc#1223331)
  * fabrics: fix mem leak in nvmf_check_hostid_and_hostnqn() (bsc#1223331)
  * nvme-print-stdout: Use NVME_BPRSEL definitions
  * nvme-print-stdout: Use NVME_BPINFO definitions
  * nvme-print-stdout: Use NVME_CMBSZ definitions
  * nvme-print-stdout: Use NVME_CMBLOC definitions
  * Revert "logging: fix error handling for ioctl passthru wrappers"
  * fabrics: align identify command payload
  * ocp: Unify line start spacing as tabs
  * ocp: support OCP DSSD Async Event Config feature
  * nvme: Add support for get-reg and set-reg commands
  * nvme-print-json: Add register print functions
  * nvme-print-stdout: Add register print functions
  * nvme-print: Add register print functions
  * nvme: Refactor mmap_registers to add writable parameter
  * nvme-print: Change PMRSZU string function as unit string
  * nvme-print: Refactor CMBLOC and PMRSTS registers function
  * logging: fix error handling for ioctl passthru wrappers
  * nbft: Fix scandir() error check
  * nbft: Refactor connection attempt out
  * nvme-print: Use EOM optional data present macros changed
  * nvme-print: Print cntlid number for controller (bsc#1224024)
  * nvme: check-tls-key fails despite having hostnqn file (bsc#1223331)
  * nvme: print retained key for gen-tls-key's -i option too (bsc#1223331)
  * fabrics : allow host to create duplicate connections to target
  * fabrics: Fix fast_io_fail_tmo option
  * nvme-print-stdout: use admin queue attributes definitions
  * nvme-print-stdout: use CSTS definitions
  * nvme-print-stdout: use controller configuration definitions
  * nvme-print-stdout: use NVME_MAJOR and NVME_MINOR definitions
  * nvme-print-stdout: use FDP configuration attributes definitions
  * nvme: add new function 'tls_key' (bsc#1226197)
  * nvme: use library functions for importing and exporting TLS keys (bsc#1216982)
  * nvme: extend error message for ns scan failures
  * nvme-print-json: Bugfix status json key of sanitize-log
  * sed: update SED password when initalizing (bsc#1222168)
  * plugins/memblaze: add performance stats
  * plugins/memblaze: fix code mis-type error
  * plugins/memblaze: code refactor on applying __packed on more structs
  * plugins/memblaze: code refactor on using cleanup_nvme_dev
  * nvme: Fix to cleanup free raw_secret memory allocated
  * plugins/memblaze: code-format on leading indent and align
  * plugins/wdc: Fix narrow index variable type in for loop to __u32
  * plugins/wdc: Whitespace changes
  * nvme: Delete unused nvme root scanned
  * ocp: support OCP 2.5 Set Telemetry Profile feature
  * nvme: Don't seg fault if given device is not char/block device
  * nbft: Include SSNS index in error messages (bsc#1222026)
  * nbft: Pause logging for expected connection failures (bsc#1222026)
  * nbft: Silence connection failures for unavailable SSNS (bsc#1222026)
  * nbft: Fix 'verbose' argument type (bsc#1222026)
  * plugins/nbft: Implement verbose logging
  * plugins/nbft: Print the new SSNS flags
  * nbft: Fix uninitialized variable
  * plugins/nbft: Fix uninitialized variables
  * plugins/sed: Fix uninitialized variable
  * nvme-print-stdout: Fix uninitialized variable
  * nvme-print-json: Fix uninitialized variable
  * build: Switch default meson buildtype to 'debugoptimized'
  * nvme: do not scan topology when mmaping registers
  * nvme-print-stdout: Use NVME_BOOT_PARTITION_INFO field definitions
  * nvme-print-stdout: Use NVME_GET for MI commands supported and effects CSP
  * nvme-print-stdout: Use NVME_GET for FID supported and effects FSP
  * nvme-print-stdout: Use NVME_SET_FEAT_EVENT register definitions
  * nvme-print: Add PEL EHAI port identifier type printf function
  * build: bump libnvme wrap
  * ocp: fix for power-state argument checking
  * nvme: do not issue warning when nvme_core module is not loaded
  * wdc: Review changes and build fixes
  * wdc:  Fix timestamp displayed by vs-firmware-activate-history command
  * logging: Split to output ioctl latency by log info level (bsc#1231668)
  * nvme-print-stdout: Change hexadecimal value 0x prefix to use %#x
  * nvme-print-stdout: Fix LBA status DSLBA output as hexadecimal
  * nvme-print-stdout: Split line length exceeded 100 columns
  * nvme-print-stdout: Use NVME_PMRMSC register definitions to print
  * nvme-print-stdout: Use NVME_PMRSWTP register definitions to print
  * nvme-print-stdout: Use NVME_PMREBS register definitions to print
  * nvme-print-stdout: Use NVME_PMRSTS register definitions to print
  * nvme-print-stdout: Use NVME_PMRCTL_EN register definition to print
  * nvme-print-stdout: Use NVME_PMRCAP register definition to print
  * doc: Fix admin and io passthru cdw parameters description
  * doc: Add get-feature cdw11 and set-feature cdw12 parameters
  * micron-nvme: Unuse stat() to check if strMainDirName exists
  * doc: Fix get-property and set-property offset and value descriptions
  * doc: Fix documentation file mode 100755 to 100644
  * nvme-print-stdout: Fix channel configuration descriptors pointer
  * nvme-print-stdout: Check sscanf return value
  * nvme-print-stdout: Fix linux kernel check patch errors
  * nvme: Delete unusual fallthrough for cases have no body
  * nvme: Delete duplicated semicolon
  * nvme-print, common: Fix for whitespace change
  * logging: output ioctl debugging info (bsc#1231668)
  * nvme: track verbose level (bsc#1231668)
  * logging: track log level globally
  * logging: move logging code to a new file
  * nvme: update include for libnvme
  * nvme: remove unused declaration
  * build: bump libnvme wrap
  * nvme-netapp: add nspath tlv handling (bsc#1220971)
  * rpm: Add missing rule and service files
  * nvme-print-json, nvme-print-stdout: Use CHAR_BIT definition
  * nvme-print-stdout: Delete duplicated if condition checking line
  * ocp: Fix timestamp displayed by fw-activate-history command
  * wdc: Add support for the get-drive-status command to SN861
  * nvme-print: Fix nvme_host_metadata_type_to_string() indentation errors
  * nvme-print: Add PEL RCI port identifier type printf function
  * nvme-print-stdout: Use persistent event log RCI definitions
  * build: bump libnvme wrap
  * nvme: Add show-regs and get-property commands NSSD print outputs
  * nvme-print: print more details in ns-descs verbose output (bsc#1223331)
  * Revert "nvme-print-json: remove obj_print helper"
  * sed: Confirm entered password before initialization.
- drop systemd service harden file, upstream ships this patch.
  * remove 0100-harden_nvmf-connect@.service.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737601">- Update to version 2.9.1:
  * plugins/spdk: drop the plugin</changelog>
  <changelog author="daniel.wagner@suse.com" date="1722600000">- Update to version 2.10:
  * sed: Fix parsing of Discovery0 features
  * fabrics: avoid potential segfault in nvmf_dim() (bsc#1231668)
  * nvme: avoid segfault in show-topology (bsc#1226197)
  * fabrics: do not leak nvme_ctrl_t object on connect
  * nvme: extend help message when mmap regs fails
  * nvme: return -ENXIO value to open device if errno not set
  * wdc: OCP 2.5 Log Page Updates
  * fabrics: drop --quiet alias -S
  * fabrics: drop --disable-sqflow alias -d
  * fabrics: check if json config is existing (bsc#1231668)
  * plugins/ocp: fix UAF when printing telemetry log
  * nvme-print-stdout: fix persistent-event-log set feature event output
  * fabrics: do not report error when no modules are loaded when disconnecting
  * fabrics: use cleanup helper where possible
  * fabrics: print an error for ENOENT too
  * plugins/virtium: use time_t for time_stamp values
  * completions: add ocp set-error-injection command
  * doc: add ocp set-error-injection command
  * ocp: add set-error-injection command
  * nvme: use argconfig_parse_seen to check conditions
  * nvme: use proper mask to get correct lbafu value
  * utils: fix print formatting option
  * utils: cleanup includes in utils.h
  * utils: add missing header
  * nvme-print: Added print for two new fields for HMB feature
  * plugins/micron: Move OCP internal log parsing from Micron to OCP Plugin.
  * fabrics: remove unused _discover_from_json_config_file() argument
  * nvme: avoid unnecessary dup() + close() in io_mgmt_send()
  * util: remove unnecessary NULL check in cleanup_nvme_root()
  * nvme: use argconfig_parse_comma_sep_array_u16() in attach-ns
  * util: avoid duplication in argconfig_parse_comma_sep_array*()
  * util: remove redundant loop condition in argconfig_parse()
  * util: introduce is_null_or_empty() to avoid strlen()
  * util: reduce allocation sizes in argconfig_parse()
  * util: consolidate call paths to argconfig_parse_type()
  * util: reduce complexity of argconfig_parse_val()
  * util: reduce arguments passed to argconfig_parse_type()
  * util: remove empty default case in argconfig functions
  * util: remove unnecessary parentheses in argconfig_parse_type()
  * util: remove redundant cast in argconfig_parse_type()
  * util: inline argconfig_parse_byte()
  * util: remove redundant NULL check in argconfig_print_help()
  * util: use cleanup to avoid goto in argconfig_parse()
  * util: make argconfig_set_opt_val() a void function
  * util: remove argconfig_parse_val() declaration
  * util: remove argconfig CFG_SIZE type
  * wdc: Update and refactor the C0h log page parsing
  * ccan: Add freed pointer checking to delete strset member
  * fabrics: connect all hosts in config.json (bsc#1226216)
  * fabrics: refactore discover from json config (bsc#1226216)
  * fabrics: first read config before topology scanning (bsc#1226216)
  * fabrics: use helper to lookup default hostnqn/hostid (bsc#1226216)
  * fabrics: extend already connected message (bsc#1226216)
  * fabrics: use cleanup helper to free nvme root object
  * nvme: check MD size with PI size when PRACT set to 1
  * nvme-print: add new field added in TP4090
  * nvme-print-binary: add effects-log command output missed
  * completions: add ocp get-error-injection command
  * doc: add ocp get-error-injection command
  * ocp: add get-error-injection command
  * ocp: fix eol-plp-failure-mode command sel option value
  * doc: fix ocp eol-plp-failure-mode select short option
  * ocp: set UUID index for eol-plp-failure-mode command to get
  * nvme: fix verbose logging (bsc#1231668)
  * doc: fix micron ocp telemetry log parse title
  * nvme-rpmb: send RPMB_REQ_READ_RESULT for authentication key programming
  * plugins/micron: Add support for OCP telemetry log parsing
  * ocp: Update Plugin Version
  * nvme: fix lbaf inuse to use 6:5 bits
  * ocp: use NVME_ARGS macro definition by eol-plp-failure-mode command
  * nvme: extern NVME_ARGS macro definition
  * nvme: use _cleanup_free_ type buffer for get-feature command
  * plugins/ocp: Update telemetry string log page (C9h)
  * nvme-print-json: add get-feature command fahrenheit temperature output
  * nvme: add get-feature and id-ctrl commands fahrenheit outputs
  * nvme: delete smart-log command fahrenheit option
  * nvme-print: check locale to use temperatures in degrees fahrenheit
  * completion: add support for tls-key (bsc#1226197)
  * doc: add tls-key --revoke documentation (bsc#1226197)
  * doc: fix tls-key --keyfile shorthand (bsc#1226197)
  * nvme: add support to revoke TLS key (bsc#1226197)
  * nvme: return error code/message for TLS commands (bsc#1226197)
  * nvme: factor out import key function (bsc#1226197)
  * nvme: use cleanup helper to close file descriptor (bsc#1226216)
  * nvme-rpmb: use cleanup helper for STREAM objects
  * fabrics: use cleanup helper for STREAM objects
  * nvme: use cleanup helper for STREAM objects (bsc#1226216)
  * nvme: strip newline when parsing TLS key files (bsc#1226197)
  * nvme: use stdout for exporting TLS keys (bsc#1226197)
  * nvme: change _cleanup_file_ to _cleanup_fd_ (bsc#1226197)
  * common.h: Avoid using unsupported load/store instructions in arm64 VMs
  * ocp: OCP 2.5 Telemetry DA 1 and 2 Parsing Updates
  * nvme-print-stdout: refactor subsys config (bsc#1231668)
  * wdc: Fix compiler warning.
  * nvme: add flags type nvme_print_flags_t
  * nvme-print: Use 'unsigned int' instead of 'unsigned'
  * nvme: update parse_args() return value handling
  * nvme-print: Fix nvme_show_smart_log indentation error
  * nvme-print-stdout: Fix stdout_smart_log indentation error
  * nvme-print-binary: Fix binary_smart_log indentation error
  * completions: add smart-log command fahrenheit option
  * doc: Add smart-log command fahrenheit option
  * nvme: Add smart-log command fahrenheit option
  * nvme-print: add PEL vendor specific and TCG defined events strings
  * nvme-print: Print PEL reserved event string
  * completions: Add timeout option bash completions
  * completions: Add timeout option zsh completions
  * completions: Add io-mgmt-recv/send commands zsh completions
  * completions: Add /dev/nvme argument missed
  * completions: Change fw-activate command name to fw-commit
  * completions: Fix _nvme indentation errors (bsc#1226197)
  * completions: Fix bash-nvme-completion.sh indentation errors (bsc#1226197)
  * doc: Add nvme commands timeout option
  * nvme: Add support for delete-ns command timeout option
  * nvme: Change NVME_DEFAULT_IOCTL_TIMEOUT to use nvme_cfg timeout
  * nvme: Add nvme_cfg timeout default option
  * nvme: Add nvme_cfg global variable for NVME_ARGS default options
  * nvme: add helper function to get pif and sts value
  * nvme: choose PIF from QPIF if QPIFS supports and PIF is QTYPE
  * nvme: use libnvme's atomic ANA log page fetch
  * nvme: fix maximum ANA log page length calculation
  * nvme-print-json: add missing va_end()
  * fabrics: skip namespace scan for fabric commands
  * nvme-print: print the new fields added in TP4141a
  * plugins/ocp: underflow + index fixes for telemetry
  * plugins/ocp: Add ocp TCG Configuration Log Page
  * nvme-print-stdout: Add helper function to print PIF in string form
  * doc: fix format command info
  * nvme: telemetry: report the correct error if the ioctl() fails.
  * nvme-print: add the cancel opcode to the nvme_cmd_to_string() list
  * doc: fix ocp format issues
  * nbft: Reuse existing discovery controller
  * nbft: Skip SSNS records pointing to well-known discovery NQN
  * nbft: Perform actual discovery
  * util/cleanup: Add cleanup for struct nvme_fabrics_uri
  * fabrics: Make some symbols public (bsc#1226216)
  * nvme-print-stdout: fix format index in stdout_nvm_id_ns
  * plugins/solidigm: Added workload-tracker command
  * plugins/solidigm: Added extra VU fields to id-ctrl
  * nvme-print-stdout: print MEM bit of CTRATT field
  * nvme-print-stdout: fix to print the log line by line
  * fabrics: Always pass hostid and hostnqn (bsc#1226216)
  * plugins/ssstc: Replace __uint16_t with uint16_t
  * plugins/solidigm: Added log pages to vs-internal-logs
  * sed: perform a tper revert after lsp revert
  * plugins/nbft: Use default library logging
  * docs: Add missing OCP plugin docs to meson
  * ocp: Switch OCP plugin to use semantic versioning
  * nvme: fix fw-commit MUD result message
  * sed: only re-read partition table after unlock.
  * nvme-print-json: Fix LBA status DSLBA output as hexadecimal
  * nvme-print-json: Use NVME_PMRxxx register definitions to print
  * nvme-print-stdout: Fix PMRWBM register name
  * nvme-print-json: Fix channel configuration descriptors pointer
  * nvme-print-json: Fix linux kernel check patch errors
  * nvme-print: Added "Command and Feature Lockdown" string to LID 0x14
  * plugins/innogrit: `u_char` -&gt; `unsigned char`
  * nvme: Use C99 types for uint32_t
  * nvme-print-stdout: print frl1/2/3 values for zns id-ns
  * solidigm: Eliminate &lt;linux/limits.h&gt;
  * nvme: remove double free in persistent-event-log
  * ocp: Add Get DSSD Power State Feature (FID: C7h)
  * nvme: initialize default library logging
  * nvme: use cleanup helper for nvme_root_t objects (bsc#1226197)
  * doc: add nvme connet ctrl-loss-tmo description
  * plugins/solidigm: Automatic enabling Data Area 4 when retrieving Telemetry.
- always build the docs
  * add 0001-docs-rename-ocp-unsupported-req-log-file.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1730376000">- Update to version 2.11:
  * docs: update check-tls-key arguments
  * nvme: add support to append TLS PSK to keyfile for check-tls-key
  * nvme: return correct error code in append_keyfile
  * docs: nvme-id-doman: dom{ia =&gt; ai}n
  * ocp: fix latency monitoring data structure entry endian
  * ocp: fix TCG configuration log endian
  * ocp: fix firmware activation history entry endian
  * docs: update gen-tls-key arguments
  * nvme: add support to add derive TLS PSK to keyfile
  * nvme: rename identity to version
  * nvme: set file permission for keyfile to owner only
  * nvme: export tls keys honoring version and hmac
  * nvmf-keys: add udev rule to import tls keys
  * docs: update TLS options
  * fabrics: add support to connect to accept a PSK command line
  * fabrics: add support to connect to accept a configuration
  * nvme: use unsigned char for hmac and identity
  * nvme-print: Add Sanitize Media Verification Event in PEL log
  * netapp-ontapdev: add err msg for no ontapdevices
  * netapp-smdev: add err msg for no smdevices
  * doc: Add sanitize command emvs option
  * ocp: combine to use GUID length definitions
  * nvme: update tls_key() handling
  * nvme-print-stdout: print VERS bit of SANICAP field
  * nvme: add EMVS support to sanitize command
  * ocp: remove callback function cast
  * doc: added commit conventions to contribution guidelines
  * ocp: fix ocp-print-stdout.c indentation error
  * ocp: fix ocp-nvme.c indentation errors
  * ocp: build ocp-nvme.c and ocp-telemetry-decode.c without json
  * ocp: split TCG configuration log print codes
  * ocp: split telemetry string log print codes
  * ocp: split device capabilities log print codes
  * ocp: split error recovery log print codes
  * ocp: split unsupported requirement log print codes
  * ocp: split latency monitor log print codes
  * ocp: move ocp telemetry log print function into ocp-print
  * ocp: split smart extended log print codes
  * ocp: split ocp-fw-activation-history print codes
  * plugins: update meson.build file to always build ocp plugin
  * ocp-print: move json code into separate files
  * nvme-print-json: display only verbose output
  * ocp-nvme: ocp plugin version update
  * nvme-print: print KV command set page header
  * doc: show where self-test results can be found
  * plugins/memblaze: fix a wrong id on smart-log-add
  * plugins/dapustor: smart-log-add fix
  * plugins/sed: add sid password change (bsc#1229677)
  * plugins/solidigm: Automatic retry smaller log chunk size.
  * ocp-nvme: Add LMDATA-37 for Latency Monitor Log
  * ocp-nvme: remove ocp log page version checking
  * wdc: Fix for Reading WDC C2 Vendor Unique Log Page
  * ocp: Fixes for OCP 2.5 Telemetry DA1 FIFO Event Parsing
  * nvme-print-json: update JSON verbose output for nvm-id-ctrl (bsc#1231668)
  * wdc: Add Support for SN5100S
  * nvme: Support show-regs for nvmeof
  * ocp: fix option handling in internal-log
  * Documentation: Added solidigm plugin commands
  * wdc: add support for SNTMP drive
  * nvme-print: print NSSES field of CAP register
  * ocp: fix GUID output
  * nvme-print-json: print controller register values in offset order
  * nvme-print-json: print CMBEBS and CMBSWTP in json format
  * nvme-print-stdout: update changed-ns-list-log output (bsc#1231668)
  * nvme: fix uninitialized value in error-log (bsc#1231668)
  * nvme: fix to convert metadata size to native byte order
  * nvme-print: fix error information log page endianness error
  * completions: add get-feature command changed option
  * doc: add get-feature command changed option
  * nvme: separate get NVME_GET_FEATURES_SEL_CHANGED definition
  * nvme: use NVME_GET_FEATURES_SEL definitions
  * nvme-print-stdout: use NVME_CTRL_OAES definitions
  * completion: add ocp set-telemetry-profile to zsh
  * completion: add solidgm work-tracker binding
  * plugins/solidigm: Added Workload Tracker Triggers and Wall Time
  * ocp: include util/types.h to use nvme_uint128_t
  * ocp: fix to set log data pointer allocated
  * nvme: use NVME_CHECK() to check get features select field value
  * ocp: split ocp-hwcomp log
  * completions: add ocp hardware-component-log command
  * doc: add ocp hardware-component-log command
  * ocp: add hwcomp log json output
  * ocp: add hwcomp log command list option
  * ocp: add hwcomp log command comp-id option
  * ocp: add hwcomp dummy definition
  * ocp: add support for hwcomp log page
  * nvme: use NVME_CTRL_FNA definitions
  * netapp-smdevices: print single device output too (bsc#1231668)
  * netapp-smdevices: segregate print routines (bsc#1231668)
  * Add Support for new SN655 PCI Device ID
  * nvme-print-json: extern json object add functions
  * ocp: add SMART / health information extended log page version 4
  * ocp: add error recovery log page version 3
  * ocp: add get-enable-ieee1667-silo command
  * fabrics: fix incorrect access filename check (bsc#1231668)
  * nvme: use NVME_GET_FEATURES_SEL_SUPPORTED definition
  * nvme-print-json: use _cleanup_free_
  * plugins/solidigm: fix use after free.
  * ocp: fix ocp-nvme.c coding style errors
  * ocp: Change C9 function names to use c9 instead
  * ocp: fix to return c9 log page data error to open file
  * ocp: fix to set return value to get c9 log page data
  * nvme: update nvme_insert_tls_key_versioned() return handling (bsc#1231668)
  * nvme-print-stdout: add print_array function
  * logging: add print_info function
  * util: extern uint128_t_to_double() function
  * nvme-print: sanitize error-log output (bsc#1231668)
  * plugins/solidigm : Fixing vs-internal-log to generate identify per allocated namespace.
  * nvme-print: added new fields for nvm_id_ns
  * plugins/fdp: bugfix error check to validate output format
  * plugins/wdc: fix json output for vs-nand-stats
  * nvme-print-stdout: use NVME_FEAT util definitions
  * nvme-print: update subsys verbose outputs (bsc#1231668)
  * nvme-print: add subsystype to the list-subsys output (bsc#1231668)
  * netapp: print output for single device too (bsc#1231668)
  * netapp: segregate the print routines (bsc#1231668)
  * netapp: fix uninitialized value from heap error (bsc#1231668)
  * nvme-print: print the new fields added in TP4142
  * plugins/innogrit: modify for project tacoma
  * wdc: Add Support for new SN-861 PCI device id
  * nvme-print: use LC_MEASUREMENT to check fahrenheit temperature
  * nvme-print: use Completion Condition enum
  * completions: add the zsh completion of the dapustor plugin
  * nvme-print: print the new fields added in TP4165
  * plugins/dapustor: dapustor smart-log-add update
  * nvme-print-stdout: Added print for new field CSER (TP4167)
  * plugins: Add a new DapuStor plugin and the smart-log-add command
  * docs: rename ocp-unsupported-req-log file
- Drop build fix patch
  * remove 0001-docs-rename-ocp-unsupported-req-log-file.patch
- Install 70-nvmf-keys.rules to the default udev rules directory</changelog>
  <changelog author="dwagner@suse.de" date="1741089600">- Update to version 2.11+17.g6e09119:
  * nvme: check for valid output format (bsc#1237275)
  * nvme: make get-feature JSON output print everything (bsc#1237275)
  * nvme: make -v output consistent with -H output for nvme get-feature (bsc#1237275)
  * nvme: make -v output consistent with -H output for nvme get-property (bsc#1237275)
  * nvme-print-stdout: add details in list-ns verbose output (bsc#1237275)
  * nvme-print-stdout: add descriptions for nsze, ncap &amp; nuse (bsc#1237275)
  * netapp-ontapdev: correct the basestr header (bsc#1237275)
  * netapp-smdev: update err msg for no smdevices (bsc#1237275)
  * netapp-ontapdev: update err msg for no ontapdevices (bsc#1237275)
  * netapp-smdev: update basestr header in verbose output (bsc#1237275)</changelog>
  <changelog author="dwagner@suse.de" date="1745323200">- Update to version 2.11+22.gd31b1a01:
  * nvme-print: display fw-rev in list-subsys output (bsc#1240518)
  * nvme-print: display model in list-subsys output (bsc#1240518)
  * netapp-ontapdev: add subsysname to regular output (bsc#1240518)
  * netapp-ontapdev: add subsysname to the verbose output (bsc#1240518)
  * Revert "nvme-print-json: display only verbose output"</changelog>
  <changelog author="dwagner@suse.de" date="1753185600">- Update to version 2.11+26.gfbd2b4f4:
  * nvme: fix mem leak in nvme copy (bsc#1243716)
  * nvme-print: suppress output when no ctrl is present for list-subsys (bsc#1243716)
  * nvme: extend filter to match device name (bsc#1243716)
  * udev-rules-ontap: switch to queue-depth iopolicy (bsc#1246599)</changelog>
</package>
<package pkgid="e4054a97a9de3cd6a6dc058d0b0a4ed073cceecb674edc6577204e9ca3ae2806" name="nvme-cli-zsh-completion" arch="noarch">
  <version epoch="0" ver="2.11+28.g2fc67685" rel="150700.3.9.1"/>
  <changelog author="dmueller@suse.com" date="1660737600">- Update to version 2.1.2:
  * build: Update version to v2.1.2
  * wrapper: Update SPDIX license
  * wrapper: Call library version of nvme_init_copy_range_f1
  * Revert "udev: re-read the discovery log page when a discovery controller reconnected"
  * nvme: Simplify ns list identify
  * meson: we don't need a c++ compiler
  * plugins/ocp: drop unused fd argument
  * plugins/wdc: remove fd argument from print functions
  * plugins/wdc: fix memset() on the address of a pointer
  * plugins/solidigm: fix return value on format parse failure
  * plugins/wdc: prevent duplicate close on NVMe device</changelog>
  <changelog author="daniel.wagner@suse.com" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- Mark no binaries rpms as noarch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 2.2.1:
  * Added parsing for Solidigm telemetry observable data.
  * add item ddr_ecc_err_cnt in smart-log-add
  * build: Drop dependency on libuuid
  * build: Fix endian check for cross build
  * build: Remove unused uuid.wrap file
  * build: Remove unusned uuid.h include
  * completions: Add show-topology tab completion
  * fabrics: Honor JSON config file in connect-all command (bsc#1199504)
  * fabrics: Trigger auto connect if config.json exists
  * fabrics: fix 'persistent' handling during connect-all with JSON file
  * fabrics: nvme config --modify depends on -n and -t argument
  * fabrics: re-read the discovery log page when a discovery controller reconnected
  * json: Support uint64 types serialization for older json-c versions
  * nvme, plugins: fix __u64 -&gt; unsigned long long assumptions
  * nvme-print: Add missing values in id-ctrl for JSON output
  * nvme-print: Handle NULL hostid in JSON output
  * nvme-print: Output 128bit values as uint128 type instead of double
  * nvme-print: Print fguid as a UUID
  * nvme-print: Use uint128 JSON function for media_units_written
  * nvme-print: decode MI status values
  * nvme-print: decode status types
  * nvme-print: fix wrong json key
  * nvme: Add helper function to parse 16-bit comma separated list
  * nvme: Add nvme_cmd wrapper for get_features
  * nvme: Add show-topology command
  * nvme: Add wrapper for Format NVM
  * nvme: Add wrapper for Sanitize NVM
  * nvme: Add wrappers for Get Log page helpers
  * nvme: Add wrappers for Identify controller lists
  * nvme: Add wrappers for NS attach/detach
  * nvme: Add wrappers for NS management functions
  * nvme: Add wrappers for basic NS identify
  * nvme: Add wrappers for firmware commands
  * nvme: Fix set feature command to get feature identifier 0Dh length as zero
  * nvme: Introduce a union in struct nvme_dev for different transport types
  * nvme: Introduce nvme_cli_ wrappers, wrap identify and identify_ctrl
  * nvme: Make static nvme_dev private to open_dev(), use locals elsewhere
  * nvme: Masks SSTAT in sanize-log output
  * nvme: Remove static nvme_dev, allocate on open instead
  * nvme: Use correct print format specifier for sizeof arguments
  * nvme: Use local struct nvme_dev for show_registers &amp; map_registers
  * nvme: check if cfg.metadata is NULL before passing it to strlen()
  * nvme: use helpers for checking status types
  * plugins/innogrit: Include timer.h
  * plugins/innogrit: add smart items for smart-log-add
  * plugins/micron-nvme: Use correct print format specifier for sizeof arguments
  * plugins/ocp: Include timer.h
  * plugins/ocp: Output 128bit values as uint128 type instead of double
  * plugins/ocp: pass struct nvme_dev to internal functions
  * plugins/seagate: Add support for OCP
  * plugins/toshiba: pass struct nvme_dev rather than fd + name
  * plugins/virtium: Output 128bit values as uint128 type instead of double
  * plugins/wdc: Add support for SN660 drive
  * plugins/wdc: Add type case for feature id
  * plugins/wdc: Output 128bit values as uint128 type instead of double
  * plugins/wdc: pass a struct nvme_dev around rather than a fd
  * plugins/wdc: pass struct nvme_dev rather than using global nvme_dev
  * plugins/ytmc: pass struct nvme_dev rather than fd + name
  * plugins: Use PRIu64 format specifier for 64bit types
  * print: Add Controller Ready Timeout Exceeded HW error code
  * solidgm: fix initialization warning
  * solidigm: Added parsing for telemetry customer screenable data
  * solidigm: Fix printf format for size_t variable
  * solidigm: Updated Telemetry parsing code to MIT license.
  * subprojects/libnvme: update for MI admin command coverage
  * tests: Update license to GPL-2.0-or-later
  * tree: Add NVMe-MI support
  * tree: Add dev_fd() helper
  * tree: Change nvme_dev from global to static
  * tree: Combine NVMe file descriptor into struct nvme_dev
  * tree: Move global device info to a single struct
  * tree: fail on non-negative return values from parse_and_open
  * udev: Add HOST_IFACE to udev rule (bsc#1208001)
  * util/json.h: Add json_object_get_uint64 fallback implementation
  * util/json: Add 128 bit JSON helpers
  * util/types: Add 128 bit conversion helpers
  * util: Fix le128_to_cpu on big-endian
  * util: Fix le128_to_cpu on little-endian
  * util: Move common type conversion helpers into util section
  * utils/json: Add json_object_new_uint64 for json-c &lt; 0.14
  * utils: Fix uint128_t usage
  * wdc:  OCP Log page updates and fixes
  * zns.c: report zones should be started after retrieved zone
- Handle suse-missing-rclink lint warnings by providing the symlinks
- Drop rpmlintrc as it is not needed anymore</changelog>
  <changelog author="daniel.wagner@suse.com" date="1675080000">- Update to version 2.3:
  * Added support for Flexible Data Placement (TP4146)
  * Added Persistent Discovery Controller support (TP8013/TP8014)
  * nvme-mi: support for firmware downloads
  * nvme device-self-test learned the --wait command line argument
    which makes nvme-cli to wait (incl. progress bar) in foreground
    until the test has finished.
  * A lot of bug fixes all over the place
- Update spec file
  * Project depends on meson &gt;= 0.50.0
  * make build dependency dropped</changelog>
  <changelog author="daniel.wagner@suse.com" date="1680264000">- Update to version 2.4 (jsc#PED-553 jsc#PED-3884):
  * plugins/ocp: Add SMART cloud log to solidigm plugin
  * nvme-print: Unify number base format for nsid
  * nvme-(discover,connect,connect-all): enable options '--keyring' and '--tls_key'
  * nvme-connect: enable option '--tls'
  * nvme-check-tls-key: add options to derive a 'retained' TLS key
  * nvme-gen-tls-key: add options to derive a TLS key
  * plugins/ocp: Move SMART cloud log methods to separate file for reusability
  * nvme: validate storage tag size correctly
  * nvme-print-json: Add json output status function
  * util: Cleanup argconfig parse function
  * nvme: Fix format command function indentation errors
  * util: Use argconfig commandline options pointer directly
  * nvme-print: Fix nvme show status function indentation errors
  * nvme: Check fw-commit command support MUD
  * print: print csi and opcode in error log (TP4113)
  * plugins/inspur: Cast vendor specific smart log value
  * nvme: Use correct ABORT type for self abort test
  * plugins/solidigm: Do not overwrite previously initialized variable
  * nvme-print: sanitize supported-log-pages output (bsc#1209550)
  * nvme: Enforce length to a multiple of 4 in get_log_page
  * nvme: fix block count and data size logic (bsc#1209564)
  * util: Introduce argconfig simple helper to check seen condition
  * plugins/ocp: Add set feature EOL/PLP failure mode no-uuid option
  * plugins/ocp: Refactor to clear feature identifier C1h and C3h
  * plugins/ocp: Add support for clear PCIe correctable error counters feature
  * nvme-doc: update man page for supported-log-pages (bsc#1209550)
  * plugins/ocp: OCP 2.0 field updates for SMART cloud log
  * nvme: Fix parameter limit range
  * fdp: Fix wrong Reclaim Unit Handle Status size
  * plugins/ocp: Add support for EOL/PLP failure mode feature
  * nvme-print: Fix printing of u32 values
  * nvme: Fix invalid memory access in show_registers
  * util: Add argconfig seen flag parameter to check if feature NSID set
  * nvme-print: fix segfault in supported-log-pages json output
  * fabrics: Fix ordering for auto connect services (bsc#1208075)
  * nvme.c: Check Firmware Update Granularity in fwdl
  * log: high latency timestamp issue
  * nvme: Align get feature data buffer length by page size to allocate
  * nvme: Continue get feature on invalid NS error to get multiple feature ids
  * plugins/ocp: SMART cloud log bug fixes.
  * Made temperature readouts in line with the SI.
  * Changed 'Kelvin' to 'kelvin', as recommended by the BIPM.
  * plugins/ocp: Fix whitespace and style issues
  * util: Revert JSON output to plain numbers
  * nvme: Add rae argument to telemetry-log command
  * nvme: Refactor get telemetry log page helper
  * nvme: Factor out parse telemetry log da element
  * nvme: Fix type in error message
  * unit: Add test-argconfig-parse
  * nvme: Use chunked read in get_log()
  * nvme: Use fprintf for error message logging in get_log()
  * nvme: fix /dev/spkd/ typo
  * doc: --storage-tag-check doesn't take any arguments
  * fabrics: Ensure host-traddr/iface consistency for "connect-all"
  * nvme-print: print the nvme generic name in json output as well
  * plugins/innogrit: modify command opcode for eventlog and cdump
  * completion: fix typo, add missing args
  * plugins/wdc: Fix data Formatting for Latency Monitor Log Page
  * nvme: Make json-c optional again
  * nvme-print: Move JSON printing function into a new file
  * plugins/solidigm: Use json_create_object wrapper
  * plugins/solidigm: Use struct json_object instead of typedef
  * fabrics: No need to sanitize trsvcid and traddr
  * docs: Fixed typos and missing options
  * util: Numbers without any suffix are also valid
  * util: Update suffix_binary_parse API
  * util: Reimplement suffix_si_parse
  * nvme: Filter out status flags for get feature command
  * util: Add crc32 implementation
  * nvme-print: Use attrs_info as key for Zone Attributes Information
  * nvme: Support effects-log for fabrics ctrl
  * plugins/solidigm: Add uuid index resolution
  * plugins/ocp: Use network byte order for OCP UUID value
  * json_discovery_log: avoid buffer overrun (bsc#1207435)
  * Fix connect nbft regressions (bsc#1209905)
  * Fix auto connect conditions (bsc#1210105)
  * Fix auto boot for NBFT connections (bsc#1211647)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1695988800">- Update to version 2.6 (jsc#PED-3610 jsc#PED-4879 jsc#PED-5061):
  * nvme: allocate payload buffer in create-ns command
  * nvme-print-stdout: Add CAP.CPS and CAP.NSSS human readable outputs
  * nvme: Add output-format default option instead of argconfig json option
  * nvme: fw-download offset only describes FW offset, not file offset
  * unit: add locale number test
  * util: handle utf-8 thousend separators correctly
  * nvme: Change to use NVME_ARGS verbose default option from OPT_ARGS
  * fabrics: Fix NVMF_ARGS macro to use parameter n correctly
  * nvme: Add verbose default option to show command debug output
  * util: Fix to set argconfig output format json option correctly
  * util: Split argconfig output format json function to set and get
  * nvme: Spport Phy Rx Eye Opening Measurement Log
  * nvme: Introduce nvme_realloc function
  * nvme: Fix for fdpa reserved field printing
  * completion: add 'version' and 'help' to list
  * udev-rule: apply round-robin iopolicy on i/o subsystems alone (bsc#1215994) (bsc#1219086)
  * nvme: Add support for the OAQD ID controller field
  * plugins/solidigm: use static log macro to calc bitmask
  * plugins/ocp: Rename FW activation history command
  * nvme: auto free nvme_dev resource
  * nvme: allocate aligned payloads for all nvme commands
  * nvme: introduce alloc helper with alignment support
  * util: add cleanup function for generic memory allocations
  * nvme: append huge to nvme_{alloc|free} function
  * nvme: fw_download use nvme_alloc only
  * fabrics: Removing duplicate code and moving to libnvme
  * nvme-print: omit size of protection information
  * tree: Modify label name close_fd to close_dev
  * fabrics: For TCP/RDMA, compare IP addresses with nvme_ipaddrs_eq() (bsc#1213768)
  * fabrics: lookup_discovery_ctrl() must look under host and not root (bsc#1213768)
  * nvme: Do not map status to errno codes
  * completions: Add bash completion for DSSD Power state feature(FID: C7h)
  * Documentation: Add document for DSSD Power state feature(FID: C7h)
  * plugins/ocp: Add DSSD Power state feature(FID: C7h)
  * avoid casting pointer arguments to argconfig functions
  * nvme-print: Add support for EGFEAT, Domain Identifier, TEGCAP and UEGCAP
  * nvme-print: Fix endurance_log whitespace changes
  * nvme: Fix retrieval of telemetry log up to specified data area.
  * nvme: Update list secondary command
  * wdc: Add support for SN861 drive
  * util: Set errno to 0 before strtol/stroul call
  * nvme: Revert passthru and submit_io to print status to stderr from stdout
  * plugins/zns: Fix offset in report zones
  * nvme-rpmb: Fix nvme_show_id_ctrl_rpmbs() definition error
  * fabrics: Use corresponding hostid when hostnqn is generated
  * json: fix seg. fault converting NULL to JSON string (bsc#1213762)
  * nvme-cli: fix extended metadata size calculation
  * nvme-print: Show subsystem iopolicy (bsc#1124564)
  * nvme-print-stdout: Do not show non reachable ns in namespace topology (bsc#1212598)
  * nvme-print: Fix show-topolocy for ctrls
  * doc: Fix typo in documentation
  * nvme-print-stdout: fix storage tag size label
  * nvme-print-stdout: List only ctrls which are part of ns (bsc#1212598)
  * nvme-print-stdout: Support subsys reachable from several hosts (bsc#1212598)
  * ccan: Add htable, strset and dependencies (bsc#1212598)
  * ccan: Remove unused documentation (bsc#1212598)
  * nvme-print: Split max power flags
  * nvme-print: fix counter while looping through uuid_list (bsc#1212598)
  * fabrics: only look for matching ctrl on same host (bsc#1213768)
  * README: Correct hugetlbfs spelling error
  * util: Delete unused CFG_BOOL argconfig type as duplicated with CFG_FLAG
  * util: Set LC_ALL=C as default if -H option is not used
  * nvme: Add support for create-ns command endg-id option parameter
  * nvme-print: fix argument order for show functions
  * plugins/solidigm: Added Marketing Name Log support for Solidigm.
  * nvme-print: Remove left overs from refactoring
  * nvme-print: Move num argument parsing into callbacks
  * nvme-print: Fix typo in callback definition
  * scripts: Make release script project neutral
  * scripts: Update update-docs.sh scripts
  * scripts: Execute the scripts from toplevel directory
  * scripts: Move helper scripts to a central place
  * docs: Update file modes
  * doc: Add information on --context
  * nvmf-autoconnect: Annotate the context to autoconnect
  * fabrics: Add support for volatile configuration
  * plugins/solidigm: Formated log page directory table consistently with "nvme list" format.
  * plugins/solidigm: Added Identify controller VU extensions parsing.
  * nvme-print-json: Print PCI pysical slot number for controller
  * nvme-print-stdout: Print PCI physical slot number for controller
  * libnvme.wrap: Bump to 42ac453
  * plugins/nbft: Use common code to parse print flags
  * fabrics: Do not print device on connect per default
  * fabrics: Revert 'fabrics: prevent 'nvme connect' to well-known discovery NQN'
  * nvme-print: fix wrong list-subsys output when ns are attached to different ctrls
  * plugins/micron: Correct NULL pointer checking error
  * plugins/innogrit: Add vendor command get-eventlog and get-cdump
  * nvme: Use correct data buffer size
  * nvme: Fix quoted string split across lines to use quoted newline
  * plugins/zns: Fix zns.c linux kernel check patch errors and warnings
  * plugins/ymtc: Fix ymtc-nvme.c linux kernel check patch warning
  * plugins/ymtc: Fix ymtc-nvme.c space indentation to tab indentation
  * plugins/virtium: Fix virtium-nvme.c linux kernel check patch errors and warnings
  * plugins/transcend: Fix transcend-nvme.c linux kernel check patch errors and warnings
  * plugins/solidigm: Fix linux kernel check patch errors and warnings
  * plugins/shannon: Fix shannon-nvme.c linux kernel check patch errors and warnings
  * plugins/seagate: Fix seagate-nvme.c linux kernel check patch warnings
  * plugins/scaleflux: Fix sfx-nvme.c linux kernel check patch errors and warnings
  * plugins/netapp: Fix netapp-nvme.c linux kernel check patch errors and warnings
  * plugins/nbft: Fix nbft-plugin.c linux kernel check patch warnings
  * plugins/micron: Fix micron-nvme.c linux kernel check patch errors and warnings
  * plugins/micron: Fix micron-nvme.c space indentation to tab indentation
  * plugins/memblaze: Fix memblaze-nvme.c linux kernel check patch errors and warnings
  * plugins/memblaze: Fix memblaze-utils.h space indentation to tab indentation
  * plugins/memblaze: Fix memblaze-nvme.c space indentation to tab indentation
  * plugins/intel: Fix intel-nvme.c linux kernel check patch errors and warnings
  * plugins/inspur: Fix inspur-nvme.c linux kernel check patch warnings
  * plugins/inspur: Fix inspur-nvme.c space indentation to tab indentation
  * plugins/innogrit: Fix innogrit-nvme.c linux kernel check patch errors
  * plugins/huawei: Fix huawei-nvme.c linux kernel check patch errors and warnings
  * plugins/fdb: Fix fdb.c linux kernel check patch warnings
  * plugins/dera: Fix dera-nvme.c linux kernel check patch errors and warnings
  * plugins/amzn: Fix amzn-nvme.c linux kernel check patch error and warnings
  * plugins/wdc: Fix wdc-utils.c linux kernel check patch errors and warnings
  * plugins/wdc: Refactor wdc-nvme.c for linux kernel check patch errors and warnings
  * util: Move falltrhough feature check to meson.builds
  * ocp: Add eol plp failure mode json outputs
  * nvme-print: Add nvme show result function
  * nvme-print-json: Add json output result function
  * nvme-print: Fix nvme_show_error() to call va_end() for json output format
  * nvme: Fix nvme format block-size option handling
  * Revert "nvme: Masks SSTAT in sanize-log output"
  * fabrics: Fix NVMF_ARGS macro indentation error
  * Documentation: Add document for OCP Device capability(LID: 0xC4) log page
  * completions: Add bash completion for OCP Device capability(LID: 0xC4) log page
  * plugins/ocp: Add Device capability(LID: 0xC4) log page
  * udev: fix warning reported by udevadm verify
  * fabrics: fix conditions in nvmf-autoconnect.service
  * fabrics: Change NVMF_OPTS as NVMF_ARGS to fix linux kernel check patch error
  * nvme: Split passthru commands read output
  * nvme: Fix io-passthru command read metadata output
  * plugin/ocp: Added implementation for 0xC1 log page
  * util: Fix suffix_si_parse to parse no decimal point but suffix value correctly
  * completions: Add zsh option values handling for sanitize command action
  * completions: Add ocp sub commands zsh completion
  * completions: Add ocp commands zsh completion
  * completions: Add ocp commands bash completion
  * nvmf-autoconnect: restart service to avoid dropping AEN
  * solidigm: Reduce memory usage in supported log pages feature
  * solidigm: Changes to supported log pages feature requested by review
  * solidigm: Add supported log pages log feature to Solidigm plugin
  * plugins/ocp: Added ocp unsupported requirements log page
  * completions: Add bash option values handling for sanitize command action
  * doc: Correct nvme-show-hostnqn command NAME description
  * completions: Add missing zsh commands descriptions
  * plugins/wdc: Extend SN530 support.
  * Fix incorrect article 'an' as 'a' to use for descriptions and message
  * nvme: Set effects-log command csi option help message string
  * completions: bash: Delete unsupported id-iocs command options
  * completions: bash: Add id-domain command
  * completions: Fix nvm-id-ns-lba-format command zsh definition
  * completions: Add json command option
  * nvme: Fix get-feature command sel parameter check to allow value 8
  * util: Delete unnecessary argconfig definitions OPT_VAL and CFG_VAL
  * util: Delete argconfig value type to add option value as va lists instead
  * util: Split to set argconfig option value
  * util: Delete argconfig value length to calcurate instead
  * nvme: Change sanitize command action option to use argconfig parse value
  * util: Add argconfig parse value function
  * util: Delete unused argconfig subopts type
  * util: Delete unused argconfig file types
  * util: Delete unused argconfig help function
  * nvme-wrap: do_admin_args_op should not clear args timeout
  * nvme: Fix linux kernel check patch warnings
  * nvme: Fix linux kernel check patch errors
  * plugins/ocp: Add telemetry-log command to OCP plugin
  * plugins/ocp: Add OCP set latency monitor feature command
  * plugins/ocp: Fix endianness in Latency Monitor Log output
  * plugins/ocp: Add missing fields in Latency Monitor Log
  * plugins/ocp: Fix typos in Latency Monitor Log
  * plugins/ocp: Reorganize OCP plugin source code
  * tests: Add tests for controller reset
  * plugin/solidigm: Added vs-internal-log command.
  * nvme: Add nvme_show_perror to use instead of perror for json output
  * nvme-print-json: Use vasprintf instead of vsnprintf to allocate string
  * nvme: fix rnlpt to_string() values.
  * nvme: fix io_mgmt args parse error
  * fdp: set-events feature is saveable
  * fabrics: Return errno value as negative
  * fabrics: Fix linux kernel check patch errors and warnings
  * nbft: add the nbft show plugin
  * nbft: added NBFT v1.0 table support (jsc#PED-1449)
  * nbft: make lookup_ctrl function public
  * nvme: Fix indentation errors around nvme show error API
  * nvme: Check validate output format err value instead of flags
  * nvme: Use nvme show error API to outptu stderr messages for json format
  * util: Check output format json for json error message output
  * nvme-printf: Add show error function for nvme list command json output
  * nvme: Add zns specfic field for create ns
  * nvme: Add ns-mgmt host software specified fields
  * nvme: Add dtype, dspec on write-zeroes, write-uncor
  * nvme-print: Add new fields print on id directive
  * nvme-print: Add VWCNP on NSFEAT of id-ns
  * nvme: Fix format command to skip to reread NSID all block device
  * plugins/solidigm: Fixes and clean-up of Telemetry parse code. Fixed parsing of 64 bit values. Fixed COD field name. Fixed compilation warnings when compiling for 32 bit. Added missing free(). Consolidated single entry function to telemetry parser. Consolidated use of integer types.
  * doc: Documentations maintenance changes
  * doc: Add nvme-mi-send command documentation
  * doc: Add nvme-mi-recv command documentation
  * doc: Add clear-pcie-correctable-error-counters command documentation
  * doc: Add eol-plp-failure-mode command documentation
  * plugins/solidigm: Add firmware activation history log to Solidigm plugin
  * plugins/ocp: Add firmware activation history log to OCP plugin
  * nvme-print: Use enum nvme_print_flags for nvme_show_id_ctrl
  * nvme: Add support for NVMe-MI send command
  * nvme: Use stdout for passthru and submit_io commands success messages
  * nvme: Fix passthru command function indentation errors
  * nvme: Add support for NVMe-MI receive command
  * fabrics: fix fc config JSON file handling (bsc#1210089)
  Refresh 0100-harden_nvmf-connect@.service.patch
- Fix install path for nvme-regress script</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420800">- Enable test during build (bsc#1207686)
- Drop minimum version meson dependency
- Add asciidoc dependency
- Build documentation when requested</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696852800">- Use fixed timestamps for documentation allowing reproducable builds
- Announce nvmeof-boot-support support via Provides
- Filter rpmlint warnings for systemd-service-without-service_ macros
- Add missing service files for NBFT feature
  * add 0001-fabrics-autoconnect-add-service-unit-for-connecting-.patch
  * add 0002-fabrics-add-udev-rule-to-avoid-renaming-nbft-interfa.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1697112000">- Add missing jsc# and bsc# tracking entries in change log.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1702987200">- Update to version 2.7:
  * nvme-print-json: include vs for identify namespace
  * nvme-print-stdout: enhance connect message (bsc#1219086)
  * fabrics: fix connect error if hostid file does not exist (bsc#1219086)
  * fabrics: fix invalid output format error during nvme connect (bsc#1219086)
  * wdc: Fix vs-smart-add-log Command for SN650 and SN655
  * nvme: restric hmac options for gen-tls-key (bsc#1219086)
  * wdc: Fix UUID index fallback mechanism
  * plugins/ocp: Add OCP Telemetry String log page, Telemetry log page
  * completions: Add bash completions for telemetry string log page
  * plugins/solidigm: Added OCP 2.0 compatibility version command
  * plugins/solidigm: Added OCP 2.0 vs-drive-info command.
  * plugins/ocp: Fix printing order of various Latency Monitor Log buckets
  * nvme: validate output format split status from flag return value
  * nvme: simplify cleanup_nvme_dev()
  * cleanup: remove unused cleanup_charp()
  * wdc: Add support for SN861 2nd pci device id
  * nvme: replace libhugetlbfs with mmap and madvise
  * util/mem: move alloc helper to util section
  * nvme: auto cleanup filedescriptors
  * nvme: auto cleanup buffers
  * nvme: return error code in get_persistent_event_log
  * nvme: sanitize nvme-gen-tls-key
  * nvme: print out the resulting TLS identity for 'nvme check-tls-key'
  * nvme: Add version '1' identifier for nvme-gen-tls-key
  * subprojects/libnvme: update wrapper for TP8018
  * plugins/solidigm: Added re_sku_count smart atrribute
  * doc: Fix nvme-connect manpage --application option string
  * plugins/ocp: changed command clear-pcie-correctable-error-counters to match OCP 2.0 spec.
  * plugins/solidigm: Added command to clear PCIe Correctable Error Counters according to OCP 2.0
  * plugins/ocp: Reorganized clear feature code for better reuse
  * nvme: fixup length calculation for 'nvme gen-tls-key --secret'
  * doc: remove invalid hostkey info for --dhchap-secret
  * nvme-print-json: use human helper everywhere
  * nvme-print-json: remove obj_print helper
  * plugins/ocp: update nvme_show_select_result call
  * mailmap: only show contributer's name
  * nvme-print-json: Change to report status and message in array
  * nvme-print-json: Change to report feature select in array
  * nvme-print-json: Change to report error and data in array
  * nvme-print-json: Add show_init/finish calls to report features in array
  * nvme-print: Add nvme_show_error_status() to merge error message and status
  * nvme-print-json: Use r instead of root and use obj_add_***(r, ..., ...)
  * nvme-print-json: Delete static const char string global variables
  * nvme-print-json: Add remaining controller registers readable format
  * nvme-print-json: Add readable format cap, vs, cc, csts, nssr and crto registers
  * nvme-print-json: Combine duplicated json key and val string variables
  * nvme-print-json: Replase json_array_add_value_string() to array_add_str()
  * nvme-print-json: Replase json_object_add_value_uint128() to obj/root_add_uint128()
  * nvme-print-json: Replase json_object_add_value_object() to obj/root_add_obj()
  * nvme-print-json: Replase json_array_add_value_object() to array_add_obj()
  * nvme-print-json: Replase json_object_add_value_array() to obj/root_add_array()
  * nvme-print-json: Replase json_object_add_value_uint() to obj/root_add_uint()
  * nvme-print-json: Replase json_object_add_value_int() to obj/root_add_int()
  * nvme-print-json: Replase json_object_add_value_uint64() to obj/root_add_uint64()
  * nvme-print-json: Replase json_object_add_value_string() to obj/root_add_str()
  * nvme-print-json: Update feature_show_fields_*** to use root/obj_add_***()
  * nvme-print-json: Update lba_status_log to use root_add_***() and obj_add_***()
  * nvme-print-json: Replace lba_status_log printf() to root_add_result()
  * nvme-print-json: Add list_item print function
  * nvme-print-json: Add lba_status_info print function
  * nvme-print-json: Add lba_range print function
  * nvme-print-json: Add id_ctrl_rpmbs print function
  * nvme-print-json: Unify json_list and jroot object names to root
  * nvme-print-json: Add json_zns_changed print function
  * nvme-print-json: Add root_add_result() to output result message
  * nvme-print-json: Split persistent_event_log print function
  * nvme-print-json: Remove unnecessary string newline code
  * nvme-print-json: Replace effects_log_list print to use json_print()
  * nvme-print-json: Print persistent_event_log no log data result correctly
  * nvme-print-json: Add static "result" and "erorr" strings variables
  * nvme-print-json: Add single_property printf function
  * nvme: Replace get feature command stderr output to nvme_show_error()
  * nvme-print-json: Change d() output to use d_json()
  * nvme: Fix get-feature command mixed stdout and json outputs
  * nvme-print-json: Add remaining feature fields print functions
  * nvme-print-json: Update formatting and codying style
  * build: Add -std=c99 to CFLAGS for muon on CentOS 7
  * fabrics: add udev rule to avoid renaming nbft interfaces
  * fabrics: autoconnect: add service unit for connecting NBFT subsystems
  * fabrics: autoconnect: explicitly express module dependency
  * Updates to codeql config
  * libnvme-wrap: exit on VOID_FN lookup failure
  * plugins/ocp:Added the ocp C6h feature api
  * plugin/ocp_fid_c6h:Added the ocp C6h feature api
  * nvme-copy: support cross-namespace copy
  * nvme/plugins: fix mismatch operator
  * nvme: fix overflow possiblity
  * nvme: reduce identify cmd issue
  * nvme: allow set-features to take input from stdin
  * Fix common misspellings from codespell project
  * nvme-print: Correct to print correct ascii character string length
  * print-stdout: print Host Behavior Support correctly
  * build: Bump libnvme wrap
  * plugins/solidigm: Added support for temperature statistics log page
  * Add support for codeql sweeps
  * doc: Add virt-mgmt command
  * doc: Add id-uuid command
  * doc: Add list-secondary command
  * doc: Add id-ns-granularity command
  * doc: Add nvme commands --output-format and --verbose options
  * completions: Add nvme-mi-recv nad nvme-mi-send commands completions
  * completions: Change short option -o and -v duplicated to upper case
  * doc: Change short option -o and -v duplicated to upper case
  * nvme: Change short option -o and -v duplicated to upper case
  * nvme: Change phy-rx-eom-log command to use NVME_ARGS instead
  * plugins/memblaze: Add smart-log-add and latency-feature functions
  * plugins/solidigm: internal-logs Telemetry auto detect last data area.
  * nvme: Change to use NVME_FLBAS_META_EXT() macro to check flbas value
  * nvme-print-json: Add host memory buffer and timestamp features print functions
  * nvme-print-json: Add feature fields print functions
  * nvme-print-json: Add TMPTH feature print function
  * nvme-print-json: Add show_feature_fields print function
  * nvme-print-json: Add select_result print function
  * nvme-print-json: Use json_print to print and free object
  * nvme-print-json: Add lba_status print function
  * nvme-print-json: Combine variable definition and setting value
  * nvme-print-json: Add id_iocs print function
  * nvme-print-stdout: Fix coding style errors
  * nvme-print-json: Add directive print function
  * nvme: Fixed segmentation fault when getting host initiated telemetry
  * plugins/wdc: enhanced SN861 device support
  * plugins/wdc: cleanup line lengths
  * nvme: do not include meta data for PRACT=1 and MD=8
  * nvme: use block-count arg if provided
  * build: bump libnvme to disable tests option
  * build: Add static build on CI target
  * nvme-print: Add nvme_zns_start_zone_list() API function
  * nvme-print: Add nvme_zns_finish_zone_list() API function
  * nvme-print-binary: Set list function to NULL if unimplemented
  * nvme-print-json: Change order list functions and set NULL if unimplemented
  * nvme-print-stdout: Fix to set stdout_list_item print function missed
  * plugins/solidigm: log page name extraction using nvme_log_to_string function
  * nvme-print: Added missing logpage names in nvme_log_to_string function
  * udev-rules: rename netapp udev rule (bsc#1219086)
  * udev-rules: set ctrl_loss_tmo to -1 for ONTAP NVMe/TCP (bsc#1219086)
- Remove upstreamed patches
  * remove 0001-fabrics-autoconnect-add-service-unit-for-connecting-.patch
  * remove 0002-fabrics-add-udev-rule-to-avoid-renaming-nbft-interfa.patch
- Update spec file
  * remove libhugetblfs depedency
  * update NetApp udev rule file name</changelog>
  <changelog author="daniel.wagner@suse.com" date="1703160000">- Update to version 2.7.1:
  * nvme-print-json: Revert field name changes (bsc#1218306)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1707912000">- Update to version 2.8:
  * nvme-print-json: append array object in json_support_log
  * sed: Add plugin for basic SED Opal operations (jsc#PED-5061)
  * don't include newlines in already wrapped text
  * nvme: do not include meta data for PRACT=1 and MD=8 (version 2)
  * create-ns: align the namespaces to 1Mib boundaries when using SI suffixes
  * doc: Fix config-schema.json's URL
  * plugins/solidigm: Compressing vs-internal-log log files into zip file.
  * nbft: do not issue an error if ACPI tables are missing
  * nbft: fixup include for libnvme
  * doc: Fix short option name for cfg-file
  * completions: added Solidigm plugin to autocomplete scripts
  * nvme: Remove unused cfg argument from NVME_ARGS() macro
  * nvme: fix directive receive identify offsets
  * nvme-fabrics: enable option 'concat'
  * build: Update libnvme wrap
  * plugins/wdc: Add Debug Log Collection Support
  * nbft: fix tcp/dhcp address fallback retry (bsc#1218873)
  * nvme: use correct telemetry log size
  * nvme-print: fix typo in list verbose output (bsc#1219086)
  * nvme: print inserted tls key for check-tls-key (bsc#1219086)
  * plugins/wdc: Plugin fixes and updates
  * fabrics: move hostid/hostnqn warnings to verbose level (bsc#1219086)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737600">- Update to version 2.9:
  * nvme-print: expand the maximum field length to prevent misalignment
  * plugins/spdk: plugin to list SPDK subsystems
  * nvme-print: check if controller belong to SPDK
  * plugins/spdk: plugin to list SPDK controllers
  * nvme-print-stdout: fix ASQB, ACQB and BMBBA prints
  * build: bump libnvme wrap
  * nvmf-autoconnect: fix string encoding
  * nvme: identify primary ctrl do not accept nsid
  * nvme-wrap: remove unused nvme_cli_get_log_ana_groups()
  * nvme-print-json: use admin queue attributes definitions
  * nvme-print-json: use CSTS definitions
  * nvme-print-stdout: use POWER_OF_TWO macro
  * nvme-print-json: use controller configuration definitions
  * nvme-print-json, nvme-print-stdout: add tertiary version number
  * nvme-print-json: use NVME_MAJOR and NVME_MINOR definitions
  * nvme-print-json: use NVME_BOOT_PARTITION_INFO field definitions
  * nvme-print-json: add support telemetry log create event in PEL
  * nvme-print-json: add support set feature event in PEL
  * nvme-print-json: add obj_d() function
  * nvme-print-json: add obj_add_uint_0nx() function
  * meson.build: Fix spelling of sed-opal.h filename
  * sed_opal: Only build when we really have sed_opal headers
  * nvme: fix error path if write() fails in get_telemetry_log()
  * plugins/solidigm: Additional LID for temperature statistics.
  * plugins/solidigm: Improved Solidigm UUID index detection.
  * nvme-print-stdout: Add CSTS.ST register stdout print
  * nvme-print-stdout: Use NVME_CMIC definitions
  * nvme-print: Use NVME_UNIT definitions
  * nvme-print-stdout: Use NVME_CMBMSC/STS/EBS/SWTP definitions
  * plugins/ssstc: add a new plugin for SSSTC driver
  * nvmf-connect: systemd hardening effort
  * plugins/ocp: Adjusted variable type size carrying UUID index to 8 bit.
  * nvme: fix security buffer allocation size
  * nvme: Change fw-download xfer initialization to set 0
  * nvme: Add fw-download warning message for FWUG alignment error
  * plugins/ocp: Split ocp_get_uuid_index() into find and get functions.
  * nvme: fix mem leak in multiple key related functions (bsc#1223331)
  * fabrics: fix mem leak in nvmf_check_hostid_and_hostnqn() (bsc#1223331)
  * nvme-print-stdout: Use NVME_BPRSEL definitions
  * nvme-print-stdout: Use NVME_BPINFO definitions
  * nvme-print-stdout: Use NVME_CMBSZ definitions
  * nvme-print-stdout: Use NVME_CMBLOC definitions
  * Revert "logging: fix error handling for ioctl passthru wrappers"
  * fabrics: align identify command payload
  * ocp: Unify line start spacing as tabs
  * ocp: support OCP DSSD Async Event Config feature
  * nvme: Add support for get-reg and set-reg commands
  * nvme-print-json: Add register print functions
  * nvme-print-stdout: Add register print functions
  * nvme-print: Add register print functions
  * nvme: Refactor mmap_registers to add writable parameter
  * nvme-print: Change PMRSZU string function as unit string
  * nvme-print: Refactor CMBLOC and PMRSTS registers function
  * logging: fix error handling for ioctl passthru wrappers
  * nbft: Fix scandir() error check
  * nbft: Refactor connection attempt out
  * nvme-print: Use EOM optional data present macros changed
  * nvme-print: Print cntlid number for controller (bsc#1224024)
  * nvme: check-tls-key fails despite having hostnqn file (bsc#1223331)
  * nvme: print retained key for gen-tls-key's -i option too (bsc#1223331)
  * fabrics : allow host to create duplicate connections to target
  * fabrics: Fix fast_io_fail_tmo option
  * nvme-print-stdout: use admin queue attributes definitions
  * nvme-print-stdout: use CSTS definitions
  * nvme-print-stdout: use controller configuration definitions
  * nvme-print-stdout: use NVME_MAJOR and NVME_MINOR definitions
  * nvme-print-stdout: use FDP configuration attributes definitions
  * nvme: add new function 'tls_key' (bsc#1226197)
  * nvme: use library functions for importing and exporting TLS keys (bsc#1216982)
  * nvme: extend error message for ns scan failures
  * nvme-print-json: Bugfix status json key of sanitize-log
  * sed: update SED password when initalizing (bsc#1222168)
  * plugins/memblaze: add performance stats
  * plugins/memblaze: fix code mis-type error
  * plugins/memblaze: code refactor on applying __packed on more structs
  * plugins/memblaze: code refactor on using cleanup_nvme_dev
  * nvme: Fix to cleanup free raw_secret memory allocated
  * plugins/memblaze: code-format on leading indent and align
  * plugins/wdc: Fix narrow index variable type in for loop to __u32
  * plugins/wdc: Whitespace changes
  * nvme: Delete unused nvme root scanned
  * ocp: support OCP 2.5 Set Telemetry Profile feature
  * nvme: Don't seg fault if given device is not char/block device
  * nbft: Include SSNS index in error messages (bsc#1222026)
  * nbft: Pause logging for expected connection failures (bsc#1222026)
  * nbft: Silence connection failures for unavailable SSNS (bsc#1222026)
  * nbft: Fix 'verbose' argument type (bsc#1222026)
  * plugins/nbft: Implement verbose logging
  * plugins/nbft: Print the new SSNS flags
  * nbft: Fix uninitialized variable
  * plugins/nbft: Fix uninitialized variables
  * plugins/sed: Fix uninitialized variable
  * nvme-print-stdout: Fix uninitialized variable
  * nvme-print-json: Fix uninitialized variable
  * build: Switch default meson buildtype to 'debugoptimized'
  * nvme: do not scan topology when mmaping registers
  * nvme-print-stdout: Use NVME_BOOT_PARTITION_INFO field definitions
  * nvme-print-stdout: Use NVME_GET for MI commands supported and effects CSP
  * nvme-print-stdout: Use NVME_GET for FID supported and effects FSP
  * nvme-print-stdout: Use NVME_SET_FEAT_EVENT register definitions
  * nvme-print: Add PEL EHAI port identifier type printf function
  * build: bump libnvme wrap
  * ocp: fix for power-state argument checking
  * nvme: do not issue warning when nvme_core module is not loaded
  * wdc: Review changes and build fixes
  * wdc:  Fix timestamp displayed by vs-firmware-activate-history command
  * logging: Split to output ioctl latency by log info level (bsc#1231668)
  * nvme-print-stdout: Change hexadecimal value 0x prefix to use %#x
  * nvme-print-stdout: Fix LBA status DSLBA output as hexadecimal
  * nvme-print-stdout: Split line length exceeded 100 columns
  * nvme-print-stdout: Use NVME_PMRMSC register definitions to print
  * nvme-print-stdout: Use NVME_PMRSWTP register definitions to print
  * nvme-print-stdout: Use NVME_PMREBS register definitions to print
  * nvme-print-stdout: Use NVME_PMRSTS register definitions to print
  * nvme-print-stdout: Use NVME_PMRCTL_EN register definition to print
  * nvme-print-stdout: Use NVME_PMRCAP register definition to print
  * doc: Fix admin and io passthru cdw parameters description
  * doc: Add get-feature cdw11 and set-feature cdw12 parameters
  * micron-nvme: Unuse stat() to check if strMainDirName exists
  * doc: Fix get-property and set-property offset and value descriptions
  * doc: Fix documentation file mode 100755 to 100644
  * nvme-print-stdout: Fix channel configuration descriptors pointer
  * nvme-print-stdout: Check sscanf return value
  * nvme-print-stdout: Fix linux kernel check patch errors
  * nvme: Delete unusual fallthrough for cases have no body
  * nvme: Delete duplicated semicolon
  * nvme-print, common: Fix for whitespace change
  * logging: output ioctl debugging info (bsc#1231668)
  * nvme: track verbose level (bsc#1231668)
  * logging: track log level globally
  * logging: move logging code to a new file
  * nvme: update include for libnvme
  * nvme: remove unused declaration
  * build: bump libnvme wrap
  * nvme-netapp: add nspath tlv handling (bsc#1220971)
  * rpm: Add missing rule and service files
  * nvme-print-json, nvme-print-stdout: Use CHAR_BIT definition
  * nvme-print-stdout: Delete duplicated if condition checking line
  * ocp: Fix timestamp displayed by fw-activate-history command
  * wdc: Add support for the get-drive-status command to SN861
  * nvme-print: Fix nvme_host_metadata_type_to_string() indentation errors
  * nvme-print: Add PEL RCI port identifier type printf function
  * nvme-print-stdout: Use persistent event log RCI definitions
  * build: bump libnvme wrap
  * nvme: Add show-regs and get-property commands NSSD print outputs
  * nvme-print: print more details in ns-descs verbose output (bsc#1223331)
  * Revert "nvme-print-json: remove obj_print helper"
  * sed: Confirm entered password before initialization.
- drop systemd service harden file, upstream ships this patch.
  * remove 0100-harden_nvmf-connect@.service.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737601">- Update to version 2.9.1:
  * plugins/spdk: drop the plugin</changelog>
  <changelog author="daniel.wagner@suse.com" date="1722600000">- Update to version 2.10:
  * sed: Fix parsing of Discovery0 features
  * fabrics: avoid potential segfault in nvmf_dim() (bsc#1231668)
  * nvme: avoid segfault in show-topology (bsc#1226197)
  * fabrics: do not leak nvme_ctrl_t object on connect
  * nvme: extend help message when mmap regs fails
  * nvme: return -ENXIO value to open device if errno not set
  * wdc: OCP 2.5 Log Page Updates
  * fabrics: drop --quiet alias -S
  * fabrics: drop --disable-sqflow alias -d
  * fabrics: check if json config is existing (bsc#1231668)
  * plugins/ocp: fix UAF when printing telemetry log
  * nvme-print-stdout: fix persistent-event-log set feature event output
  * fabrics: do not report error when no modules are loaded when disconnecting
  * fabrics: use cleanup helper where possible
  * fabrics: print an error for ENOENT too
  * plugins/virtium: use time_t for time_stamp values
  * completions: add ocp set-error-injection command
  * doc: add ocp set-error-injection command
  * ocp: add set-error-injection command
  * nvme: use argconfig_parse_seen to check conditions
  * nvme: use proper mask to get correct lbafu value
  * utils: fix print formatting option
  * utils: cleanup includes in utils.h
  * utils: add missing header
  * nvme-print: Added print for two new fields for HMB feature
  * plugins/micron: Move OCP internal log parsing from Micron to OCP Plugin.
  * fabrics: remove unused _discover_from_json_config_file() argument
  * nvme: avoid unnecessary dup() + close() in io_mgmt_send()
  * util: remove unnecessary NULL check in cleanup_nvme_root()
  * nvme: use argconfig_parse_comma_sep_array_u16() in attach-ns
  * util: avoid duplication in argconfig_parse_comma_sep_array*()
  * util: remove redundant loop condition in argconfig_parse()
  * util: introduce is_null_or_empty() to avoid strlen()
  * util: reduce allocation sizes in argconfig_parse()
  * util: consolidate call paths to argconfig_parse_type()
  * util: reduce complexity of argconfig_parse_val()
  * util: reduce arguments passed to argconfig_parse_type()
  * util: remove empty default case in argconfig functions
  * util: remove unnecessary parentheses in argconfig_parse_type()
  * util: remove redundant cast in argconfig_parse_type()
  * util: inline argconfig_parse_byte()
  * util: remove redundant NULL check in argconfig_print_help()
  * util: use cleanup to avoid goto in argconfig_parse()
  * util: make argconfig_set_opt_val() a void function
  * util: remove argconfig_parse_val() declaration
  * util: remove argconfig CFG_SIZE type
  * wdc: Update and refactor the C0h log page parsing
  * ccan: Add freed pointer checking to delete strset member
  * fabrics: connect all hosts in config.json (bsc#1226216)
  * fabrics: refactore discover from json config (bsc#1226216)
  * fabrics: first read config before topology scanning (bsc#1226216)
  * fabrics: use helper to lookup default hostnqn/hostid (bsc#1226216)
  * fabrics: extend already connected message (bsc#1226216)
  * fabrics: use cleanup helper to free nvme root object
  * nvme: check MD size with PI size when PRACT set to 1
  * nvme-print: add new field added in TP4090
  * nvme-print-binary: add effects-log command output missed
  * completions: add ocp get-error-injection command
  * doc: add ocp get-error-injection command
  * ocp: add get-error-injection command
  * ocp: fix eol-plp-failure-mode command sel option value
  * doc: fix ocp eol-plp-failure-mode select short option
  * ocp: set UUID index for eol-plp-failure-mode command to get
  * nvme: fix verbose logging (bsc#1231668)
  * doc: fix micron ocp telemetry log parse title
  * nvme-rpmb: send RPMB_REQ_READ_RESULT for authentication key programming
  * plugins/micron: Add support for OCP telemetry log parsing
  * ocp: Update Plugin Version
  * nvme: fix lbaf inuse to use 6:5 bits
  * ocp: use NVME_ARGS macro definition by eol-plp-failure-mode command
  * nvme: extern NVME_ARGS macro definition
  * nvme: use _cleanup_free_ type buffer for get-feature command
  * plugins/ocp: Update telemetry string log page (C9h)
  * nvme-print-json: add get-feature command fahrenheit temperature output
  * nvme: add get-feature and id-ctrl commands fahrenheit outputs
  * nvme: delete smart-log command fahrenheit option
  * nvme-print: check locale to use temperatures in degrees fahrenheit
  * completion: add support for tls-key (bsc#1226197)
  * doc: add tls-key --revoke documentation (bsc#1226197)
  * doc: fix tls-key --keyfile shorthand (bsc#1226197)
  * nvme: add support to revoke TLS key (bsc#1226197)
  * nvme: return error code/message for TLS commands (bsc#1226197)
  * nvme: factor out import key function (bsc#1226197)
  * nvme: use cleanup helper to close file descriptor (bsc#1226216)
  * nvme-rpmb: use cleanup helper for STREAM objects
  * fabrics: use cleanup helper for STREAM objects
  * nvme: use cleanup helper for STREAM objects (bsc#1226216)
  * nvme: strip newline when parsing TLS key files (bsc#1226197)
  * nvme: use stdout for exporting TLS keys (bsc#1226197)
  * nvme: change _cleanup_file_ to _cleanup_fd_ (bsc#1226197)
  * common.h: Avoid using unsupported load/store instructions in arm64 VMs
  * ocp: OCP 2.5 Telemetry DA 1 and 2 Parsing Updates
  * nvme-print-stdout: refactor subsys config (bsc#1231668)
  * wdc: Fix compiler warning.
  * nvme: add flags type nvme_print_flags_t
  * nvme-print: Use 'unsigned int' instead of 'unsigned'
  * nvme: update parse_args() return value handling
  * nvme-print: Fix nvme_show_smart_log indentation error
  * nvme-print-stdout: Fix stdout_smart_log indentation error
  * nvme-print-binary: Fix binary_smart_log indentation error
  * completions: add smart-log command fahrenheit option
  * doc: Add smart-log command fahrenheit option
  * nvme: Add smart-log command fahrenheit option
  * nvme-print: add PEL vendor specific and TCG defined events strings
  * nvme-print: Print PEL reserved event string
  * completions: Add timeout option bash completions
  * completions: Add timeout option zsh completions
  * completions: Add io-mgmt-recv/send commands zsh completions
  * completions: Add /dev/nvme argument missed
  * completions: Change fw-activate command name to fw-commit
  * completions: Fix _nvme indentation errors (bsc#1226197)
  * completions: Fix bash-nvme-completion.sh indentation errors (bsc#1226197)
  * doc: Add nvme commands timeout option
  * nvme: Add support for delete-ns command timeout option
  * nvme: Change NVME_DEFAULT_IOCTL_TIMEOUT to use nvme_cfg timeout
  * nvme: Add nvme_cfg timeout default option
  * nvme: Add nvme_cfg global variable for NVME_ARGS default options
  * nvme: add helper function to get pif and sts value
  * nvme: choose PIF from QPIF if QPIFS supports and PIF is QTYPE
  * nvme: use libnvme's atomic ANA log page fetch
  * nvme: fix maximum ANA log page length calculation
  * nvme-print-json: add missing va_end()
  * fabrics: skip namespace scan for fabric commands
  * nvme-print: print the new fields added in TP4141a
  * plugins/ocp: underflow + index fixes for telemetry
  * plugins/ocp: Add ocp TCG Configuration Log Page
  * nvme-print-stdout: Add helper function to print PIF in string form
  * doc: fix format command info
  * nvme: telemetry: report the correct error if the ioctl() fails.
  * nvme-print: add the cancel opcode to the nvme_cmd_to_string() list
  * doc: fix ocp format issues
  * nbft: Reuse existing discovery controller
  * nbft: Skip SSNS records pointing to well-known discovery NQN
  * nbft: Perform actual discovery
  * util/cleanup: Add cleanup for struct nvme_fabrics_uri
  * fabrics: Make some symbols public (bsc#1226216)
  * nvme-print-stdout: fix format index in stdout_nvm_id_ns
  * plugins/solidigm: Added workload-tracker command
  * plugins/solidigm: Added extra VU fields to id-ctrl
  * nvme-print-stdout: print MEM bit of CTRATT field
  * nvme-print-stdout: fix to print the log line by line
  * fabrics: Always pass hostid and hostnqn (bsc#1226216)
  * plugins/ssstc: Replace __uint16_t with uint16_t
  * plugins/solidigm: Added log pages to vs-internal-logs
  * sed: perform a tper revert after lsp revert
  * plugins/nbft: Use default library logging
  * docs: Add missing OCP plugin docs to meson
  * ocp: Switch OCP plugin to use semantic versioning
  * nvme: fix fw-commit MUD result message
  * sed: only re-read partition table after unlock.
  * nvme-print-json: Fix LBA status DSLBA output as hexadecimal
  * nvme-print-json: Use NVME_PMRxxx register definitions to print
  * nvme-print-stdout: Fix PMRWBM register name
  * nvme-print-json: Fix channel configuration descriptors pointer
  * nvme-print-json: Fix linux kernel check patch errors
  * nvme-print: Added "Command and Feature Lockdown" string to LID 0x14
  * plugins/innogrit: `u_char` -&gt; `unsigned char`
  * nvme: Use C99 types for uint32_t
  * nvme-print-stdout: print frl1/2/3 values for zns id-ns
  * solidigm: Eliminate &lt;linux/limits.h&gt;
  * nvme: remove double free in persistent-event-log
  * ocp: Add Get DSSD Power State Feature (FID: C7h)
  * nvme: initialize default library logging
  * nvme: use cleanup helper for nvme_root_t objects (bsc#1226197)
  * doc: add nvme connet ctrl-loss-tmo description
  * plugins/solidigm: Automatic enabling Data Area 4 when retrieving Telemetry.
- always build the docs
  * add 0001-docs-rename-ocp-unsupported-req-log-file.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1730376000">- Update to version 2.11:
  * docs: update check-tls-key arguments
  * nvme: add support to append TLS PSK to keyfile for check-tls-key
  * nvme: return correct error code in append_keyfile
  * docs: nvme-id-doman: dom{ia =&gt; ai}n
  * ocp: fix latency monitoring data structure entry endian
  * ocp: fix TCG configuration log endian
  * ocp: fix firmware activation history entry endian
  * docs: update gen-tls-key arguments
  * nvme: add support to add derive TLS PSK to keyfile
  * nvme: rename identity to version
  * nvme: set file permission for keyfile to owner only
  * nvme: export tls keys honoring version and hmac
  * nvmf-keys: add udev rule to import tls keys
  * docs: update TLS options
  * fabrics: add support to connect to accept a PSK command line
  * fabrics: add support to connect to accept a configuration
  * nvme: use unsigned char for hmac and identity
  * nvme-print: Add Sanitize Media Verification Event in PEL log
  * netapp-ontapdev: add err msg for no ontapdevices
  * netapp-smdev: add err msg for no smdevices
  * doc: Add sanitize command emvs option
  * ocp: combine to use GUID length definitions
  * nvme: update tls_key() handling
  * nvme-print-stdout: print VERS bit of SANICAP field
  * nvme: add EMVS support to sanitize command
  * ocp: remove callback function cast
  * doc: added commit conventions to contribution guidelines
  * ocp: fix ocp-print-stdout.c indentation error
  * ocp: fix ocp-nvme.c indentation errors
  * ocp: build ocp-nvme.c and ocp-telemetry-decode.c without json
  * ocp: split TCG configuration log print codes
  * ocp: split telemetry string log print codes
  * ocp: split device capabilities log print codes
  * ocp: split error recovery log print codes
  * ocp: split unsupported requirement log print codes
  * ocp: split latency monitor log print codes
  * ocp: move ocp telemetry log print function into ocp-print
  * ocp: split smart extended log print codes
  * ocp: split ocp-fw-activation-history print codes
  * plugins: update meson.build file to always build ocp plugin
  * ocp-print: move json code into separate files
  * nvme-print-json: display only verbose output
  * ocp-nvme: ocp plugin version update
  * nvme-print: print KV command set page header
  * doc: show where self-test results can be found
  * plugins/memblaze: fix a wrong id on smart-log-add
  * plugins/dapustor: smart-log-add fix
  * plugins/sed: add sid password change (bsc#1229677)
  * plugins/solidigm: Automatic retry smaller log chunk size.
  * ocp-nvme: Add LMDATA-37 for Latency Monitor Log
  * ocp-nvme: remove ocp log page version checking
  * wdc: Fix for Reading WDC C2 Vendor Unique Log Page
  * ocp: Fixes for OCP 2.5 Telemetry DA1 FIFO Event Parsing
  * nvme-print-json: update JSON verbose output for nvm-id-ctrl (bsc#1231668)
  * wdc: Add Support for SN5100S
  * nvme: Support show-regs for nvmeof
  * ocp: fix option handling in internal-log
  * Documentation: Added solidigm plugin commands
  * wdc: add support for SNTMP drive
  * nvme-print: print NSSES field of CAP register
  * ocp: fix GUID output
  * nvme-print-json: print controller register values in offset order
  * nvme-print-json: print CMBEBS and CMBSWTP in json format
  * nvme-print-stdout: update changed-ns-list-log output (bsc#1231668)
  * nvme: fix uninitialized value in error-log (bsc#1231668)
  * nvme: fix to convert metadata size to native byte order
  * nvme-print: fix error information log page endianness error
  * completions: add get-feature command changed option
  * doc: add get-feature command changed option
  * nvme: separate get NVME_GET_FEATURES_SEL_CHANGED definition
  * nvme: use NVME_GET_FEATURES_SEL definitions
  * nvme-print-stdout: use NVME_CTRL_OAES definitions
  * completion: add ocp set-telemetry-profile to zsh
  * completion: add solidgm work-tracker binding
  * plugins/solidigm: Added Workload Tracker Triggers and Wall Time
  * ocp: include util/types.h to use nvme_uint128_t
  * ocp: fix to set log data pointer allocated
  * nvme: use NVME_CHECK() to check get features select field value
  * ocp: split ocp-hwcomp log
  * completions: add ocp hardware-component-log command
  * doc: add ocp hardware-component-log command
  * ocp: add hwcomp log json output
  * ocp: add hwcomp log command list option
  * ocp: add hwcomp log command comp-id option
  * ocp: add hwcomp dummy definition
  * ocp: add support for hwcomp log page
  * nvme: use NVME_CTRL_FNA definitions
  * netapp-smdevices: print single device output too (bsc#1231668)
  * netapp-smdevices: segregate print routines (bsc#1231668)
  * Add Support for new SN655 PCI Device ID
  * nvme-print-json: extern json object add functions
  * ocp: add SMART / health information extended log page version 4
  * ocp: add error recovery log page version 3
  * ocp: add get-enable-ieee1667-silo command
  * fabrics: fix incorrect access filename check (bsc#1231668)
  * nvme: use NVME_GET_FEATURES_SEL_SUPPORTED definition
  * nvme-print-json: use _cleanup_free_
  * plugins/solidigm: fix use after free.
  * ocp: fix ocp-nvme.c coding style errors
  * ocp: Change C9 function names to use c9 instead
  * ocp: fix to return c9 log page data error to open file
  * ocp: fix to set return value to get c9 log page data
  * nvme: update nvme_insert_tls_key_versioned() return handling (bsc#1231668)
  * nvme-print-stdout: add print_array function
  * logging: add print_info function
  * util: extern uint128_t_to_double() function
  * nvme-print: sanitize error-log output (bsc#1231668)
  * plugins/solidigm : Fixing vs-internal-log to generate identify per allocated namespace.
  * nvme-print: added new fields for nvm_id_ns
  * plugins/fdp: bugfix error check to validate output format
  * plugins/wdc: fix json output for vs-nand-stats
  * nvme-print-stdout: use NVME_FEAT util definitions
  * nvme-print: update subsys verbose outputs (bsc#1231668)
  * nvme-print: add subsystype to the list-subsys output (bsc#1231668)
  * netapp: print output for single device too (bsc#1231668)
  * netapp: segregate the print routines (bsc#1231668)
  * netapp: fix uninitialized value from heap error (bsc#1231668)
  * nvme-print: print the new fields added in TP4142
  * plugins/innogrit: modify for project tacoma
  * wdc: Add Support for new SN-861 PCI device id
  * nvme-print: use LC_MEASUREMENT to check fahrenheit temperature
  * nvme-print: use Completion Condition enum
  * completions: add the zsh completion of the dapustor plugin
  * nvme-print: print the new fields added in TP4165
  * plugins/dapustor: dapustor smart-log-add update
  * nvme-print-stdout: Added print for new field CSER (TP4167)
  * plugins: Add a new DapuStor plugin and the smart-log-add command
  * docs: rename ocp-unsupported-req-log file
- Drop build fix patch
  * remove 0001-docs-rename-ocp-unsupported-req-log-file.patch
- Install 70-nvmf-keys.rules to the default udev rules directory</changelog>
  <changelog author="dwagner@suse.de" date="1741089600">- Update to version 2.11+17.g6e09119:
  * nvme: check for valid output format (bsc#1237275)
  * nvme: make get-feature JSON output print everything (bsc#1237275)
  * nvme: make -v output consistent with -H output for nvme get-feature (bsc#1237275)
  * nvme: make -v output consistent with -H output for nvme get-property (bsc#1237275)
  * nvme-print-stdout: add details in list-ns verbose output (bsc#1237275)
  * nvme-print-stdout: add descriptions for nsze, ncap &amp; nuse (bsc#1237275)
  * netapp-ontapdev: correct the basestr header (bsc#1237275)
  * netapp-smdev: update err msg for no smdevices (bsc#1237275)
  * netapp-ontapdev: update err msg for no ontapdevices (bsc#1237275)
  * netapp-smdev: update basestr header in verbose output (bsc#1237275)</changelog>
  <changelog author="dwagner@suse.de" date="1745323200">- Update to version 2.11+22.gd31b1a01:
  * nvme-print: display fw-rev in list-subsys output (bsc#1240518)
  * nvme-print: display model in list-subsys output (bsc#1240518)
  * netapp-ontapdev: add subsysname to regular output (bsc#1240518)
  * netapp-ontapdev: add subsysname to the verbose output (bsc#1240518)
  * Revert "nvme-print-json: display only verbose output"</changelog>
  <changelog author="dwagner@suse.de" date="1753185600">- Update to version 2.11+26.gfbd2b4f4:
  * nvme: fix mem leak in nvme copy (bsc#1243716)
  * nvme-print: suppress output when no ctrl is present for list-subsys (bsc#1243716)
  * nvme: extend filter to match device name (bsc#1243716)
  * udev-rules-ontap: switch to queue-depth iopolicy (bsc#1246599)</changelog>
  <changelog author="dwagner@suse.de" date="1757419200">- Update to version 2.11+28.g2fc67685:
  * netapp-ontapdev: update invalid device handling (bsc#1247017)
  * netapp-smdev: update invalid device handling (bsc#1247017)</changelog>
</package>
<package pkgid="d6fe71b68814f4d72353cd4b9fc03186cd7e4d40c1627ed5af3e01b75993567d" name="nvme-cli-zsh-completion" arch="noarch">
  <version epoch="0" ver="2.11+29.g61f8d34b" rel="150700.3.12.1"/>
  <changelog author="daniel.wagner@suse.com" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- Mark no binaries rpms as noarch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 2.2.1:
  * Added parsing for Solidigm telemetry observable data.
  * add item ddr_ecc_err_cnt in smart-log-add
  * build: Drop dependency on libuuid
  * build: Fix endian check for cross build
  * build: Remove unused uuid.wrap file
  * build: Remove unusned uuid.h include
  * completions: Add show-topology tab completion
  * fabrics: Honor JSON config file in connect-all command (bsc#1199504)
  * fabrics: Trigger auto connect if config.json exists
  * fabrics: fix 'persistent' handling during connect-all with JSON file
  * fabrics: nvme config --modify depends on -n and -t argument
  * fabrics: re-read the discovery log page when a discovery controller reconnected
  * json: Support uint64 types serialization for older json-c versions
  * nvme, plugins: fix __u64 -&gt; unsigned long long assumptions
  * nvme-print: Add missing values in id-ctrl for JSON output
  * nvme-print: Handle NULL hostid in JSON output
  * nvme-print: Output 128bit values as uint128 type instead of double
  * nvme-print: Print fguid as a UUID
  * nvme-print: Use uint128 JSON function for media_units_written
  * nvme-print: decode MI status values
  * nvme-print: decode status types
  * nvme-print: fix wrong json key
  * nvme: Add helper function to parse 16-bit comma separated list
  * nvme: Add nvme_cmd wrapper for get_features
  * nvme: Add show-topology command
  * nvme: Add wrapper for Format NVM
  * nvme: Add wrapper for Sanitize NVM
  * nvme: Add wrappers for Get Log page helpers
  * nvme: Add wrappers for Identify controller lists
  * nvme: Add wrappers for NS attach/detach
  * nvme: Add wrappers for NS management functions
  * nvme: Add wrappers for basic NS identify
  * nvme: Add wrappers for firmware commands
  * nvme: Fix set feature command to get feature identifier 0Dh length as zero
  * nvme: Introduce a union in struct nvme_dev for different transport types
  * nvme: Introduce nvme_cli_ wrappers, wrap identify and identify_ctrl
  * nvme: Make static nvme_dev private to open_dev(), use locals elsewhere
  * nvme: Masks SSTAT in sanize-log output
  * nvme: Remove static nvme_dev, allocate on open instead
  * nvme: Use correct print format specifier for sizeof arguments
  * nvme: Use local struct nvme_dev for show_registers &amp; map_registers
  * nvme: check if cfg.metadata is NULL before passing it to strlen()
  * nvme: use helpers for checking status types
  * plugins/innogrit: Include timer.h
  * plugins/innogrit: add smart items for smart-log-add
  * plugins/micron-nvme: Use correct print format specifier for sizeof arguments
  * plugins/ocp: Include timer.h
  * plugins/ocp: Output 128bit values as uint128 type instead of double
  * plugins/ocp: pass struct nvme_dev to internal functions
  * plugins/seagate: Add support for OCP
  * plugins/toshiba: pass struct nvme_dev rather than fd + name
  * plugins/virtium: Output 128bit values as uint128 type instead of double
  * plugins/wdc: Add support for SN660 drive
  * plugins/wdc: Add type case for feature id
  * plugins/wdc: Output 128bit values as uint128 type instead of double
  * plugins/wdc: pass a struct nvme_dev around rather than a fd
  * plugins/wdc: pass struct nvme_dev rather than using global nvme_dev
  * plugins/ytmc: pass struct nvme_dev rather than fd + name
  * plugins: Use PRIu64 format specifier for 64bit types
  * print: Add Controller Ready Timeout Exceeded HW error code
  * solidgm: fix initialization warning
  * solidigm: Added parsing for telemetry customer screenable data
  * solidigm: Fix printf format for size_t variable
  * solidigm: Updated Telemetry parsing code to MIT license.
  * subprojects/libnvme: update for MI admin command coverage
  * tests: Update license to GPL-2.0-or-later
  * tree: Add NVMe-MI support
  * tree: Add dev_fd() helper
  * tree: Change nvme_dev from global to static
  * tree: Combine NVMe file descriptor into struct nvme_dev
  * tree: Move global device info to a single struct
  * tree: fail on non-negative return values from parse_and_open
  * udev: Add HOST_IFACE to udev rule (bsc#1208001)
  * util/json.h: Add json_object_get_uint64 fallback implementation
  * util/json: Add 128 bit JSON helpers
  * util/types: Add 128 bit conversion helpers
  * util: Fix le128_to_cpu on big-endian
  * util: Fix le128_to_cpu on little-endian
  * util: Move common type conversion helpers into util section
  * utils/json: Add json_object_new_uint64 for json-c &lt; 0.14
  * utils: Fix uint128_t usage
  * wdc:  OCP Log page updates and fixes
  * zns.c: report zones should be started after retrieved zone
- Handle suse-missing-rclink lint warnings by providing the symlinks
- Drop rpmlintrc as it is not needed anymore</changelog>
  <changelog author="daniel.wagner@suse.com" date="1675080000">- Update to version 2.3:
  * Added support for Flexible Data Placement (TP4146)
  * Added Persistent Discovery Controller support (TP8013/TP8014)
  * nvme-mi: support for firmware downloads
  * nvme device-self-test learned the --wait command line argument
    which makes nvme-cli to wait (incl. progress bar) in foreground
    until the test has finished.
  * A lot of bug fixes all over the place
- Update spec file
  * Project depends on meson &gt;= 0.50.0
  * make build dependency dropped</changelog>
  <changelog author="daniel.wagner@suse.com" date="1680264000">- Update to version 2.4 (jsc#PED-553 jsc#PED-3884):
  * plugins/ocp: Add SMART cloud log to solidigm plugin
  * nvme-print: Unify number base format for nsid
  * nvme-(discover,connect,connect-all): enable options '--keyring' and '--tls_key'
  * nvme-connect: enable option '--tls'
  * nvme-check-tls-key: add options to derive a 'retained' TLS key
  * nvme-gen-tls-key: add options to derive a TLS key
  * plugins/ocp: Move SMART cloud log methods to separate file for reusability
  * nvme: validate storage tag size correctly
  * nvme-print-json: Add json output status function
  * util: Cleanup argconfig parse function
  * nvme: Fix format command function indentation errors
  * util: Use argconfig commandline options pointer directly
  * nvme-print: Fix nvme show status function indentation errors
  * nvme: Check fw-commit command support MUD
  * print: print csi and opcode in error log (TP4113)
  * plugins/inspur: Cast vendor specific smart log value
  * nvme: Use correct ABORT type for self abort test
  * plugins/solidigm: Do not overwrite previously initialized variable
  * nvme-print: sanitize supported-log-pages output (bsc#1209550)
  * nvme: Enforce length to a multiple of 4 in get_log_page
  * nvme: fix block count and data size logic (bsc#1209564)
  * util: Introduce argconfig simple helper to check seen condition
  * plugins/ocp: Add set feature EOL/PLP failure mode no-uuid option
  * plugins/ocp: Refactor to clear feature identifier C1h and C3h
  * plugins/ocp: Add support for clear PCIe correctable error counters feature
  * nvme-doc: update man page for supported-log-pages (bsc#1209550)
  * plugins/ocp: OCP 2.0 field updates for SMART cloud log
  * nvme: Fix parameter limit range
  * fdp: Fix wrong Reclaim Unit Handle Status size
  * plugins/ocp: Add support for EOL/PLP failure mode feature
  * nvme-print: Fix printing of u32 values
  * nvme: Fix invalid memory access in show_registers
  * util: Add argconfig seen flag parameter to check if feature NSID set
  * nvme-print: fix segfault in supported-log-pages json output
  * fabrics: Fix ordering for auto connect services (bsc#1208075)
  * nvme.c: Check Firmware Update Granularity in fwdl
  * log: high latency timestamp issue
  * nvme: Align get feature data buffer length by page size to allocate
  * nvme: Continue get feature on invalid NS error to get multiple feature ids
  * plugins/ocp: SMART cloud log bug fixes.
  * Made temperature readouts in line with the SI.
  * Changed 'Kelvin' to 'kelvin', as recommended by the BIPM.
  * plugins/ocp: Fix whitespace and style issues
  * util: Revert JSON output to plain numbers
  * nvme: Add rae argument to telemetry-log command
  * nvme: Refactor get telemetry log page helper
  * nvme: Factor out parse telemetry log da element
  * nvme: Fix type in error message
  * unit: Add test-argconfig-parse
  * nvme: Use chunked read in get_log()
  * nvme: Use fprintf for error message logging in get_log()
  * nvme: fix /dev/spkd/ typo
  * doc: --storage-tag-check doesn't take any arguments
  * fabrics: Ensure host-traddr/iface consistency for "connect-all"
  * nvme-print: print the nvme generic name in json output as well
  * plugins/innogrit: modify command opcode for eventlog and cdump
  * completion: fix typo, add missing args
  * plugins/wdc: Fix data Formatting for Latency Monitor Log Page
  * nvme: Make json-c optional again
  * nvme-print: Move JSON printing function into a new file
  * plugins/solidigm: Use json_create_object wrapper
  * plugins/solidigm: Use struct json_object instead of typedef
  * fabrics: No need to sanitize trsvcid and traddr
  * docs: Fixed typos and missing options
  * util: Numbers without any suffix are also valid
  * util: Update suffix_binary_parse API
  * util: Reimplement suffix_si_parse
  * nvme: Filter out status flags for get feature command
  * util: Add crc32 implementation
  * nvme-print: Use attrs_info as key for Zone Attributes Information
  * nvme: Support effects-log for fabrics ctrl
  * plugins/solidigm: Add uuid index resolution
  * plugins/ocp: Use network byte order for OCP UUID value
  * json_discovery_log: avoid buffer overrun (bsc#1207435)
  * Fix connect nbft regressions (bsc#1209905)
  * Fix auto connect conditions (bsc#1210105)
  * Fix auto boot for NBFT connections (bsc#1211647)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1695988800">- Update to version 2.6 (jsc#PED-3610 jsc#PED-4879 jsc#PED-5061):
  * nvme: allocate payload buffer in create-ns command
  * nvme-print-stdout: Add CAP.CPS and CAP.NSSS human readable outputs
  * nvme: Add output-format default option instead of argconfig json option
  * nvme: fw-download offset only describes FW offset, not file offset
  * unit: add locale number test
  * util: handle utf-8 thousend separators correctly
  * nvme: Change to use NVME_ARGS verbose default option from OPT_ARGS
  * fabrics: Fix NVMF_ARGS macro to use parameter n correctly
  * nvme: Add verbose default option to show command debug output
  * util: Fix to set argconfig output format json option correctly
  * util: Split argconfig output format json function to set and get
  * nvme: Spport Phy Rx Eye Opening Measurement Log
  * nvme: Introduce nvme_realloc function
  * nvme: Fix for fdpa reserved field printing
  * completion: add 'version' and 'help' to list
  * udev-rule: apply round-robin iopolicy on i/o subsystems alone (bsc#1215994) (bsc#1219086)
  * nvme: Add support for the OAQD ID controller field
  * plugins/solidigm: use static log macro to calc bitmask
  * plugins/ocp: Rename FW activation history command
  * nvme: auto free nvme_dev resource
  * nvme: allocate aligned payloads for all nvme commands
  * nvme: introduce alloc helper with alignment support
  * util: add cleanup function for generic memory allocations
  * nvme: append huge to nvme_{alloc|free} function
  * nvme: fw_download use nvme_alloc only
  * fabrics: Removing duplicate code and moving to libnvme
  * nvme-print: omit size of protection information
  * tree: Modify label name close_fd to close_dev
  * fabrics: For TCP/RDMA, compare IP addresses with nvme_ipaddrs_eq() (bsc#1213768)
  * fabrics: lookup_discovery_ctrl() must look under host and not root (bsc#1213768)
  * nvme: Do not map status to errno codes
  * completions: Add bash completion for DSSD Power state feature(FID: C7h)
  * Documentation: Add document for DSSD Power state feature(FID: C7h)
  * plugins/ocp: Add DSSD Power state feature(FID: C7h)
  * avoid casting pointer arguments to argconfig functions
  * nvme-print: Add support for EGFEAT, Domain Identifier, TEGCAP and UEGCAP
  * nvme-print: Fix endurance_log whitespace changes
  * nvme: Fix retrieval of telemetry log up to specified data area.
  * nvme: Update list secondary command
  * wdc: Add support for SN861 drive
  * util: Set errno to 0 before strtol/stroul call
  * nvme: Revert passthru and submit_io to print status to stderr from stdout
  * plugins/zns: Fix offset in report zones
  * nvme-rpmb: Fix nvme_show_id_ctrl_rpmbs() definition error
  * fabrics: Use corresponding hostid when hostnqn is generated
  * json: fix seg. fault converting NULL to JSON string (bsc#1213762)
  * nvme-cli: fix extended metadata size calculation
  * nvme-print: Show subsystem iopolicy (bsc#1124564)
  * nvme-print-stdout: Do not show non reachable ns in namespace topology (bsc#1212598)
  * nvme-print: Fix show-topolocy for ctrls
  * doc: Fix typo in documentation
  * nvme-print-stdout: fix storage tag size label
  * nvme-print-stdout: List only ctrls which are part of ns (bsc#1212598)
  * nvme-print-stdout: Support subsys reachable from several hosts (bsc#1212598)
  * ccan: Add htable, strset and dependencies (bsc#1212598)
  * ccan: Remove unused documentation (bsc#1212598)
  * nvme-print: Split max power flags
  * nvme-print: fix counter while looping through uuid_list (bsc#1212598)
  * fabrics: only look for matching ctrl on same host (bsc#1213768)
  * README: Correct hugetlbfs spelling error
  * util: Delete unused CFG_BOOL argconfig type as duplicated with CFG_FLAG
  * util: Set LC_ALL=C as default if -H option is not used
  * nvme: Add support for create-ns command endg-id option parameter
  * nvme-print: fix argument order for show functions
  * plugins/solidigm: Added Marketing Name Log support for Solidigm.
  * nvme-print: Remove left overs from refactoring
  * nvme-print: Move num argument parsing into callbacks
  * nvme-print: Fix typo in callback definition
  * scripts: Make release script project neutral
  * scripts: Update update-docs.sh scripts
  * scripts: Execute the scripts from toplevel directory
  * scripts: Move helper scripts to a central place
  * docs: Update file modes
  * doc: Add information on --context
  * nvmf-autoconnect: Annotate the context to autoconnect
  * fabrics: Add support for volatile configuration
  * plugins/solidigm: Formated log page directory table consistently with "nvme list" format.
  * plugins/solidigm: Added Identify controller VU extensions parsing.
  * nvme-print-json: Print PCI pysical slot number for controller
  * nvme-print-stdout: Print PCI physical slot number for controller
  * libnvme.wrap: Bump to 42ac453
  * plugins/nbft: Use common code to parse print flags
  * fabrics: Do not print device on connect per default
  * fabrics: Revert 'fabrics: prevent 'nvme connect' to well-known discovery NQN'
  * nvme-print: fix wrong list-subsys output when ns are attached to different ctrls
  * plugins/micron: Correct NULL pointer checking error
  * plugins/innogrit: Add vendor command get-eventlog and get-cdump
  * nvme: Use correct data buffer size
  * nvme: Fix quoted string split across lines to use quoted newline
  * plugins/zns: Fix zns.c linux kernel check patch errors and warnings
  * plugins/ymtc: Fix ymtc-nvme.c linux kernel check patch warning
  * plugins/ymtc: Fix ymtc-nvme.c space indentation to tab indentation
  * plugins/virtium: Fix virtium-nvme.c linux kernel check patch errors and warnings
  * plugins/transcend: Fix transcend-nvme.c linux kernel check patch errors and warnings
  * plugins/solidigm: Fix linux kernel check patch errors and warnings
  * plugins/shannon: Fix shannon-nvme.c linux kernel check patch errors and warnings
  * plugins/seagate: Fix seagate-nvme.c linux kernel check patch warnings
  * plugins/scaleflux: Fix sfx-nvme.c linux kernel check patch errors and warnings
  * plugins/netapp: Fix netapp-nvme.c linux kernel check patch errors and warnings
  * plugins/nbft: Fix nbft-plugin.c linux kernel check patch warnings
  * plugins/micron: Fix micron-nvme.c linux kernel check patch errors and warnings
  * plugins/micron: Fix micron-nvme.c space indentation to tab indentation
  * plugins/memblaze: Fix memblaze-nvme.c linux kernel check patch errors and warnings
  * plugins/memblaze: Fix memblaze-utils.h space indentation to tab indentation
  * plugins/memblaze: Fix memblaze-nvme.c space indentation to tab indentation
  * plugins/intel: Fix intel-nvme.c linux kernel check patch errors and warnings
  * plugins/inspur: Fix inspur-nvme.c linux kernel check patch warnings
  * plugins/inspur: Fix inspur-nvme.c space indentation to tab indentation
  * plugins/innogrit: Fix innogrit-nvme.c linux kernel check patch errors
  * plugins/huawei: Fix huawei-nvme.c linux kernel check patch errors and warnings
  * plugins/fdb: Fix fdb.c linux kernel check patch warnings
  * plugins/dera: Fix dera-nvme.c linux kernel check patch errors and warnings
  * plugins/amzn: Fix amzn-nvme.c linux kernel check patch error and warnings
  * plugins/wdc: Fix wdc-utils.c linux kernel check patch errors and warnings
  * plugins/wdc: Refactor wdc-nvme.c for linux kernel check patch errors and warnings
  * util: Move falltrhough feature check to meson.builds
  * ocp: Add eol plp failure mode json outputs
  * nvme-print: Add nvme show result function
  * nvme-print-json: Add json output result function
  * nvme-print: Fix nvme_show_error() to call va_end() for json output format
  * nvme: Fix nvme format block-size option handling
  * Revert "nvme: Masks SSTAT in sanize-log output"
  * fabrics: Fix NVMF_ARGS macro indentation error
  * Documentation: Add document for OCP Device capability(LID: 0xC4) log page
  * completions: Add bash completion for OCP Device capability(LID: 0xC4) log page
  * plugins/ocp: Add Device capability(LID: 0xC4) log page
  * udev: fix warning reported by udevadm verify
  * fabrics: fix conditions in nvmf-autoconnect.service
  * fabrics: Change NVMF_OPTS as NVMF_ARGS to fix linux kernel check patch error
  * nvme: Split passthru commands read output
  * nvme: Fix io-passthru command read metadata output
  * plugin/ocp: Added implementation for 0xC1 log page
  * util: Fix suffix_si_parse to parse no decimal point but suffix value correctly
  * completions: Add zsh option values handling for sanitize command action
  * completions: Add ocp sub commands zsh completion
  * completions: Add ocp commands zsh completion
  * completions: Add ocp commands bash completion
  * nvmf-autoconnect: restart service to avoid dropping AEN
  * solidigm: Reduce memory usage in supported log pages feature
  * solidigm: Changes to supported log pages feature requested by review
  * solidigm: Add supported log pages log feature to Solidigm plugin
  * plugins/ocp: Added ocp unsupported requirements log page
  * completions: Add bash option values handling for sanitize command action
  * doc: Correct nvme-show-hostnqn command NAME description
  * completions: Add missing zsh commands descriptions
  * plugins/wdc: Extend SN530 support.
  * Fix incorrect article 'an' as 'a' to use for descriptions and message
  * nvme: Set effects-log command csi option help message string
  * completions: bash: Delete unsupported id-iocs command options
  * completions: bash: Add id-domain command
  * completions: Fix nvm-id-ns-lba-format command zsh definition
  * completions: Add json command option
  * nvme: Fix get-feature command sel parameter check to allow value 8
  * util: Delete unnecessary argconfig definitions OPT_VAL and CFG_VAL
  * util: Delete argconfig value type to add option value as va lists instead
  * util: Split to set argconfig option value
  * util: Delete argconfig value length to calcurate instead
  * nvme: Change sanitize command action option to use argconfig parse value
  * util: Add argconfig parse value function
  * util: Delete unused argconfig subopts type
  * util: Delete unused argconfig file types
  * util: Delete unused argconfig help function
  * nvme-wrap: do_admin_args_op should not clear args timeout
  * nvme: Fix linux kernel check patch warnings
  * nvme: Fix linux kernel check patch errors
  * plugins/ocp: Add telemetry-log command to OCP plugin
  * plugins/ocp: Add OCP set latency monitor feature command
  * plugins/ocp: Fix endianness in Latency Monitor Log output
  * plugins/ocp: Add missing fields in Latency Monitor Log
  * plugins/ocp: Fix typos in Latency Monitor Log
  * plugins/ocp: Reorganize OCP plugin source code
  * tests: Add tests for controller reset
  * plugin/solidigm: Added vs-internal-log command.
  * nvme: Add nvme_show_perror to use instead of perror for json output
  * nvme-print-json: Use vasprintf instead of vsnprintf to allocate string
  * nvme: fix rnlpt to_string() values.
  * nvme: fix io_mgmt args parse error
  * fdp: set-events feature is saveable
  * fabrics: Return errno value as negative
  * fabrics: Fix linux kernel check patch errors and warnings
  * nbft: add the nbft show plugin
  * nbft: added NBFT v1.0 table support (jsc#PED-1449)
  * nbft: make lookup_ctrl function public
  * nvme: Fix indentation errors around nvme show error API
  * nvme: Check validate output format err value instead of flags
  * nvme: Use nvme show error API to outptu stderr messages for json format
  * util: Check output format json for json error message output
  * nvme-printf: Add show error function for nvme list command json output
  * nvme: Add zns specfic field for create ns
  * nvme: Add ns-mgmt host software specified fields
  * nvme: Add dtype, dspec on write-zeroes, write-uncor
  * nvme-print: Add new fields print on id directive
  * nvme-print: Add VWCNP on NSFEAT of id-ns
  * nvme: Fix format command to skip to reread NSID all block device
  * plugins/solidigm: Fixes and clean-up of Telemetry parse code. Fixed parsing of 64 bit values. Fixed COD field name. Fixed compilation warnings when compiling for 32 bit. Added missing free(). Consolidated single entry function to telemetry parser. Consolidated use of integer types.
  * doc: Documentations maintenance changes
  * doc: Add nvme-mi-send command documentation
  * doc: Add nvme-mi-recv command documentation
  * doc: Add clear-pcie-correctable-error-counters command documentation
  * doc: Add eol-plp-failure-mode command documentation
  * plugins/solidigm: Add firmware activation history log to Solidigm plugin
  * plugins/ocp: Add firmware activation history log to OCP plugin
  * nvme-print: Use enum nvme_print_flags for nvme_show_id_ctrl
  * nvme: Add support for NVMe-MI send command
  * nvme: Use stdout for passthru and submit_io commands success messages
  * nvme: Fix passthru command function indentation errors
  * nvme: Add support for NVMe-MI receive command
  * fabrics: fix fc config JSON file handling (bsc#1210089)
  Refresh 0100-harden_nvmf-connect@.service.patch
- Fix install path for nvme-regress script</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696420800">- Enable test during build (bsc#1207686)
- Drop minimum version meson dependency
- Add asciidoc dependency
- Build documentation when requested</changelog>
  <changelog author="daniel.wagner@suse.com" date="1696852800">- Use fixed timestamps for documentation allowing reproducable builds
- Announce nvmeof-boot-support support via Provides
- Filter rpmlint warnings for systemd-service-without-service_ macros
- Add missing service files for NBFT feature
  * add 0001-fabrics-autoconnect-add-service-unit-for-connecting-.patch
  * add 0002-fabrics-add-udev-rule-to-avoid-renaming-nbft-interfa.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1697112000">- Add missing jsc# and bsc# tracking entries in change log.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1702987200">- Update to version 2.7:
  * nvme-print-json: include vs for identify namespace
  * nvme-print-stdout: enhance connect message (bsc#1219086)
  * fabrics: fix connect error if hostid file does not exist (bsc#1219086)
  * fabrics: fix invalid output format error during nvme connect (bsc#1219086)
  * wdc: Fix vs-smart-add-log Command for SN650 and SN655
  * nvme: restric hmac options for gen-tls-key (bsc#1219086)
  * wdc: Fix UUID index fallback mechanism
  * plugins/ocp: Add OCP Telemetry String log page, Telemetry log page
  * completions: Add bash completions for telemetry string log page
  * plugins/solidigm: Added OCP 2.0 compatibility version command
  * plugins/solidigm: Added OCP 2.0 vs-drive-info command.
  * plugins/ocp: Fix printing order of various Latency Monitor Log buckets
  * nvme: validate output format split status from flag return value
  * nvme: simplify cleanup_nvme_dev()
  * cleanup: remove unused cleanup_charp()
  * wdc: Add support for SN861 2nd pci device id
  * nvme: replace libhugetlbfs with mmap and madvise
  * util/mem: move alloc helper to util section
  * nvme: auto cleanup filedescriptors
  * nvme: auto cleanup buffers
  * nvme: return error code in get_persistent_event_log
  * nvme: sanitize nvme-gen-tls-key
  * nvme: print out the resulting TLS identity for 'nvme check-tls-key'
  * nvme: Add version '1' identifier for nvme-gen-tls-key
  * subprojects/libnvme: update wrapper for TP8018
  * plugins/solidigm: Added re_sku_count smart atrribute
  * doc: Fix nvme-connect manpage --application option string
  * plugins/ocp: changed command clear-pcie-correctable-error-counters to match OCP 2.0 spec.
  * plugins/solidigm: Added command to clear PCIe Correctable Error Counters according to OCP 2.0
  * plugins/ocp: Reorganized clear feature code for better reuse
  * nvme: fixup length calculation for 'nvme gen-tls-key --secret'
  * doc: remove invalid hostkey info for --dhchap-secret
  * nvme-print-json: use human helper everywhere
  * nvme-print-json: remove obj_print helper
  * plugins/ocp: update nvme_show_select_result call
  * mailmap: only show contributer's name
  * nvme-print-json: Change to report status and message in array
  * nvme-print-json: Change to report feature select in array
  * nvme-print-json: Change to report error and data in array
  * nvme-print-json: Add show_init/finish calls to report features in array
  * nvme-print: Add nvme_show_error_status() to merge error message and status
  * nvme-print-json: Use r instead of root and use obj_add_***(r, ..., ...)
  * nvme-print-json: Delete static const char string global variables
  * nvme-print-json: Add remaining controller registers readable format
  * nvme-print-json: Add readable format cap, vs, cc, csts, nssr and crto registers
  * nvme-print-json: Combine duplicated json key and val string variables
  * nvme-print-json: Replase json_array_add_value_string() to array_add_str()
  * nvme-print-json: Replase json_object_add_value_uint128() to obj/root_add_uint128()
  * nvme-print-json: Replase json_object_add_value_object() to obj/root_add_obj()
  * nvme-print-json: Replase json_array_add_value_object() to array_add_obj()
  * nvme-print-json: Replase json_object_add_value_array() to obj/root_add_array()
  * nvme-print-json: Replase json_object_add_value_uint() to obj/root_add_uint()
  * nvme-print-json: Replase json_object_add_value_int() to obj/root_add_int()
  * nvme-print-json: Replase json_object_add_value_uint64() to obj/root_add_uint64()
  * nvme-print-json: Replase json_object_add_value_string() to obj/root_add_str()
  * nvme-print-json: Update feature_show_fields_*** to use root/obj_add_***()
  * nvme-print-json: Update lba_status_log to use root_add_***() and obj_add_***()
  * nvme-print-json: Replace lba_status_log printf() to root_add_result()
  * nvme-print-json: Add list_item print function
  * nvme-print-json: Add lba_status_info print function
  * nvme-print-json: Add lba_range print function
  * nvme-print-json: Add id_ctrl_rpmbs print function
  * nvme-print-json: Unify json_list and jroot object names to root
  * nvme-print-json: Add json_zns_changed print function
  * nvme-print-json: Add root_add_result() to output result message
  * nvme-print-json: Split persistent_event_log print function
  * nvme-print-json: Remove unnecessary string newline code
  * nvme-print-json: Replace effects_log_list print to use json_print()
  * nvme-print-json: Print persistent_event_log no log data result correctly
  * nvme-print-json: Add static "result" and "erorr" strings variables
  * nvme-print-json: Add single_property printf function
  * nvme: Replace get feature command stderr output to nvme_show_error()
  * nvme-print-json: Change d() output to use d_json()
  * nvme: Fix get-feature command mixed stdout and json outputs
  * nvme-print-json: Add remaining feature fields print functions
  * nvme-print-json: Update formatting and codying style
  * build: Add -std=c99 to CFLAGS for muon on CentOS 7
  * fabrics: add udev rule to avoid renaming nbft interfaces
  * fabrics: autoconnect: add service unit for connecting NBFT subsystems
  * fabrics: autoconnect: explicitly express module dependency
  * Updates to codeql config
  * libnvme-wrap: exit on VOID_FN lookup failure
  * plugins/ocp:Added the ocp C6h feature api
  * plugin/ocp_fid_c6h:Added the ocp C6h feature api
  * nvme-copy: support cross-namespace copy
  * nvme/plugins: fix mismatch operator
  * nvme: fix overflow possiblity
  * nvme: reduce identify cmd issue
  * nvme: allow set-features to take input from stdin
  * Fix common misspellings from codespell project
  * nvme-print: Correct to print correct ascii character string length
  * print-stdout: print Host Behavior Support correctly
  * build: Bump libnvme wrap
  * plugins/solidigm: Added support for temperature statistics log page
  * Add support for codeql sweeps
  * doc: Add virt-mgmt command
  * doc: Add id-uuid command
  * doc: Add list-secondary command
  * doc: Add id-ns-granularity command
  * doc: Add nvme commands --output-format and --verbose options
  * completions: Add nvme-mi-recv nad nvme-mi-send commands completions
  * completions: Change short option -o and -v duplicated to upper case
  * doc: Change short option -o and -v duplicated to upper case
  * nvme: Change short option -o and -v duplicated to upper case
  * nvme: Change phy-rx-eom-log command to use NVME_ARGS instead
  * plugins/memblaze: Add smart-log-add and latency-feature functions
  * plugins/solidigm: internal-logs Telemetry auto detect last data area.
  * nvme: Change to use NVME_FLBAS_META_EXT() macro to check flbas value
  * nvme-print-json: Add host memory buffer and timestamp features print functions
  * nvme-print-json: Add feature fields print functions
  * nvme-print-json: Add TMPTH feature print function
  * nvme-print-json: Add show_feature_fields print function
  * nvme-print-json: Add select_result print function
  * nvme-print-json: Use json_print to print and free object
  * nvme-print-json: Add lba_status print function
  * nvme-print-json: Combine variable definition and setting value
  * nvme-print-json: Add id_iocs print function
  * nvme-print-stdout: Fix coding style errors
  * nvme-print-json: Add directive print function
  * nvme: Fixed segmentation fault when getting host initiated telemetry
  * plugins/wdc: enhanced SN861 device support
  * plugins/wdc: cleanup line lengths
  * nvme: do not include meta data for PRACT=1 and MD=8
  * nvme: use block-count arg if provided
  * build: bump libnvme to disable tests option
  * build: Add static build on CI target
  * nvme-print: Add nvme_zns_start_zone_list() API function
  * nvme-print: Add nvme_zns_finish_zone_list() API function
  * nvme-print-binary: Set list function to NULL if unimplemented
  * nvme-print-json: Change order list functions and set NULL if unimplemented
  * nvme-print-stdout: Fix to set stdout_list_item print function missed
  * plugins/solidigm: log page name extraction using nvme_log_to_string function
  * nvme-print: Added missing logpage names in nvme_log_to_string function
  * udev-rules: rename netapp udev rule (bsc#1219086)
  * udev-rules: set ctrl_loss_tmo to -1 for ONTAP NVMe/TCP (bsc#1219086)
- Remove upstreamed patches
  * remove 0001-fabrics-autoconnect-add-service-unit-for-connecting-.patch
  * remove 0002-fabrics-add-udev-rule-to-avoid-renaming-nbft-interfa.patch
- Update spec file
  * remove libhugetblfs depedency
  * update NetApp udev rule file name</changelog>
  <changelog author="daniel.wagner@suse.com" date="1703160000">- Update to version 2.7.1:
  * nvme-print-json: Revert field name changes (bsc#1218306)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1707912000">- Update to version 2.8:
  * nvme-print-json: append array object in json_support_log
  * sed: Add plugin for basic SED Opal operations (jsc#PED-5061)
  * don't include newlines in already wrapped text
  * nvme: do not include meta data for PRACT=1 and MD=8 (version 2)
  * create-ns: align the namespaces to 1Mib boundaries when using SI suffixes
  * doc: Fix config-schema.json's URL
  * plugins/solidigm: Compressing vs-internal-log log files into zip file.
  * nbft: do not issue an error if ACPI tables are missing
  * nbft: fixup include for libnvme
  * doc: Fix short option name for cfg-file
  * completions: added Solidigm plugin to autocomplete scripts
  * nvme: Remove unused cfg argument from NVME_ARGS() macro
  * nvme: fix directive receive identify offsets
  * nvme-fabrics: enable option 'concat'
  * build: Update libnvme wrap
  * plugins/wdc: Add Debug Log Collection Support
  * nbft: fix tcp/dhcp address fallback retry (bsc#1218873)
  * nvme: use correct telemetry log size
  * nvme-print: fix typo in list verbose output (bsc#1219086)
  * nvme: print inserted tls key for check-tls-key (bsc#1219086)
  * plugins/wdc: Plugin fixes and updates
  * fabrics: move hostid/hostnqn warnings to verbose level (bsc#1219086)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737600">- Update to version 2.9:
  * nvme-print: expand the maximum field length to prevent misalignment
  * plugins/spdk: plugin to list SPDK subsystems
  * nvme-print: check if controller belong to SPDK
  * plugins/spdk: plugin to list SPDK controllers
  * nvme-print-stdout: fix ASQB, ACQB and BMBBA prints
  * build: bump libnvme wrap
  * nvmf-autoconnect: fix string encoding
  * nvme: identify primary ctrl do not accept nsid
  * nvme-wrap: remove unused nvme_cli_get_log_ana_groups()
  * nvme-print-json: use admin queue attributes definitions
  * nvme-print-json: use CSTS definitions
  * nvme-print-stdout: use POWER_OF_TWO macro
  * nvme-print-json: use controller configuration definitions
  * nvme-print-json, nvme-print-stdout: add tertiary version number
  * nvme-print-json: use NVME_MAJOR and NVME_MINOR definitions
  * nvme-print-json: use NVME_BOOT_PARTITION_INFO field definitions
  * nvme-print-json: add support telemetry log create event in PEL
  * nvme-print-json: add support set feature event in PEL
  * nvme-print-json: add obj_d() function
  * nvme-print-json: add obj_add_uint_0nx() function
  * meson.build: Fix spelling of sed-opal.h filename
  * sed_opal: Only build when we really have sed_opal headers
  * nvme: fix error path if write() fails in get_telemetry_log()
  * plugins/solidigm: Additional LID for temperature statistics.
  * plugins/solidigm: Improved Solidigm UUID index detection.
  * nvme-print-stdout: Add CSTS.ST register stdout print
  * nvme-print-stdout: Use NVME_CMIC definitions
  * nvme-print: Use NVME_UNIT definitions
  * nvme-print-stdout: Use NVME_CMBMSC/STS/EBS/SWTP definitions
  * plugins/ssstc: add a new plugin for SSSTC driver
  * nvmf-connect: systemd hardening effort
  * plugins/ocp: Adjusted variable type size carrying UUID index to 8 bit.
  * nvme: fix security buffer allocation size
  * nvme: Change fw-download xfer initialization to set 0
  * nvme: Add fw-download warning message for FWUG alignment error
  * plugins/ocp: Split ocp_get_uuid_index() into find and get functions.
  * nvme: fix mem leak in multiple key related functions (bsc#1223331)
  * fabrics: fix mem leak in nvmf_check_hostid_and_hostnqn() (bsc#1223331)
  * nvme-print-stdout: Use NVME_BPRSEL definitions
  * nvme-print-stdout: Use NVME_BPINFO definitions
  * nvme-print-stdout: Use NVME_CMBSZ definitions
  * nvme-print-stdout: Use NVME_CMBLOC definitions
  * Revert "logging: fix error handling for ioctl passthru wrappers"
  * fabrics: align identify command payload
  * ocp: Unify line start spacing as tabs
  * ocp: support OCP DSSD Async Event Config feature
  * nvme: Add support for get-reg and set-reg commands
  * nvme-print-json: Add register print functions
  * nvme-print-stdout: Add register print functions
  * nvme-print: Add register print functions
  * nvme: Refactor mmap_registers to add writable parameter
  * nvme-print: Change PMRSZU string function as unit string
  * nvme-print: Refactor CMBLOC and PMRSTS registers function
  * logging: fix error handling for ioctl passthru wrappers
  * nbft: Fix scandir() error check
  * nbft: Refactor connection attempt out
  * nvme-print: Use EOM optional data present macros changed
  * nvme-print: Print cntlid number for controller (bsc#1224024)
  * nvme: check-tls-key fails despite having hostnqn file (bsc#1223331)
  * nvme: print retained key for gen-tls-key's -i option too (bsc#1223331)
  * fabrics : allow host to create duplicate connections to target
  * fabrics: Fix fast_io_fail_tmo option
  * nvme-print-stdout: use admin queue attributes definitions
  * nvme-print-stdout: use CSTS definitions
  * nvme-print-stdout: use controller configuration definitions
  * nvme-print-stdout: use NVME_MAJOR and NVME_MINOR definitions
  * nvme-print-stdout: use FDP configuration attributes definitions
  * nvme: add new function 'tls_key' (bsc#1226197)
  * nvme: use library functions for importing and exporting TLS keys (bsc#1216982)
  * nvme: extend error message for ns scan failures
  * nvme-print-json: Bugfix status json key of sanitize-log
  * sed: update SED password when initalizing (bsc#1222168)
  * plugins/memblaze: add performance stats
  * plugins/memblaze: fix code mis-type error
  * plugins/memblaze: code refactor on applying __packed on more structs
  * plugins/memblaze: code refactor on using cleanup_nvme_dev
  * nvme: Fix to cleanup free raw_secret memory allocated
  * plugins/memblaze: code-format on leading indent and align
  * plugins/wdc: Fix narrow index variable type in for loop to __u32
  * plugins/wdc: Whitespace changes
  * nvme: Delete unused nvme root scanned
  * ocp: support OCP 2.5 Set Telemetry Profile feature
  * nvme: Don't seg fault if given device is not char/block device
  * nbft: Include SSNS index in error messages (bsc#1222026)
  * nbft: Pause logging for expected connection failures (bsc#1222026)
  * nbft: Silence connection failures for unavailable SSNS (bsc#1222026)
  * nbft: Fix 'verbose' argument type (bsc#1222026)
  * plugins/nbft: Implement verbose logging
  * plugins/nbft: Print the new SSNS flags
  * nbft: Fix uninitialized variable
  * plugins/nbft: Fix uninitialized variables
  * plugins/sed: Fix uninitialized variable
  * nvme-print-stdout: Fix uninitialized variable
  * nvme-print-json: Fix uninitialized variable
  * build: Switch default meson buildtype to 'debugoptimized'
  * nvme: do not scan topology when mmaping registers
  * nvme-print-stdout: Use NVME_BOOT_PARTITION_INFO field definitions
  * nvme-print-stdout: Use NVME_GET for MI commands supported and effects CSP
  * nvme-print-stdout: Use NVME_GET for FID supported and effects FSP
  * nvme-print-stdout: Use NVME_SET_FEAT_EVENT register definitions
  * nvme-print: Add PEL EHAI port identifier type printf function
  * build: bump libnvme wrap
  * ocp: fix for power-state argument checking
  * nvme: do not issue warning when nvme_core module is not loaded
  * wdc: Review changes and build fixes
  * wdc:  Fix timestamp displayed by vs-firmware-activate-history command
  * logging: Split to output ioctl latency by log info level (bsc#1231668)
  * nvme-print-stdout: Change hexadecimal value 0x prefix to use %#x
  * nvme-print-stdout: Fix LBA status DSLBA output as hexadecimal
  * nvme-print-stdout: Split line length exceeded 100 columns
  * nvme-print-stdout: Use NVME_PMRMSC register definitions to print
  * nvme-print-stdout: Use NVME_PMRSWTP register definitions to print
  * nvme-print-stdout: Use NVME_PMREBS register definitions to print
  * nvme-print-stdout: Use NVME_PMRSTS register definitions to print
  * nvme-print-stdout: Use NVME_PMRCTL_EN register definition to print
  * nvme-print-stdout: Use NVME_PMRCAP register definition to print
  * doc: Fix admin and io passthru cdw parameters description
  * doc: Add get-feature cdw11 and set-feature cdw12 parameters
  * micron-nvme: Unuse stat() to check if strMainDirName exists
  * doc: Fix get-property and set-property offset and value descriptions
  * doc: Fix documentation file mode 100755 to 100644
  * nvme-print-stdout: Fix channel configuration descriptors pointer
  * nvme-print-stdout: Check sscanf return value
  * nvme-print-stdout: Fix linux kernel check patch errors
  * nvme: Delete unusual fallthrough for cases have no body
  * nvme: Delete duplicated semicolon
  * nvme-print, common: Fix for whitespace change
  * logging: output ioctl debugging info (bsc#1231668)
  * nvme: track verbose level (bsc#1231668)
  * logging: track log level globally
  * logging: move logging code to a new file
  * nvme: update include for libnvme
  * nvme: remove unused declaration
  * build: bump libnvme wrap
  * nvme-netapp: add nspath tlv handling (bsc#1220971)
  * rpm: Add missing rule and service files
  * nvme-print-json, nvme-print-stdout: Use CHAR_BIT definition
  * nvme-print-stdout: Delete duplicated if condition checking line
  * ocp: Fix timestamp displayed by fw-activate-history command
  * wdc: Add support for the get-drive-status command to SN861
  * nvme-print: Fix nvme_host_metadata_type_to_string() indentation errors
  * nvme-print: Add PEL RCI port identifier type printf function
  * nvme-print-stdout: Use persistent event log RCI definitions
  * build: bump libnvme wrap
  * nvme: Add show-regs and get-property commands NSSD print outputs
  * nvme-print: print more details in ns-descs verbose output (bsc#1223331)
  * Revert "nvme-print-json: remove obj_print helper"
  * sed: Confirm entered password before initialization.
- drop systemd service harden file, upstream ships this patch.
  * remove 0100-harden_nvmf-connect@.service.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1714737601">- Update to version 2.9.1:
  * plugins/spdk: drop the plugin</changelog>
  <changelog author="daniel.wagner@suse.com" date="1722600000">- Update to version 2.10:
  * sed: Fix parsing of Discovery0 features
  * fabrics: avoid potential segfault in nvmf_dim() (bsc#1231668)
  * nvme: avoid segfault in show-topology (bsc#1226197)
  * fabrics: do not leak nvme_ctrl_t object on connect
  * nvme: extend help message when mmap regs fails
  * nvme: return -ENXIO value to open device if errno not set
  * wdc: OCP 2.5 Log Page Updates
  * fabrics: drop --quiet alias -S
  * fabrics: drop --disable-sqflow alias -d
  * fabrics: check if json config is existing (bsc#1231668)
  * plugins/ocp: fix UAF when printing telemetry log
  * nvme-print-stdout: fix persistent-event-log set feature event output
  * fabrics: do not report error when no modules are loaded when disconnecting
  * fabrics: use cleanup helper where possible
  * fabrics: print an error for ENOENT too
  * plugins/virtium: use time_t for time_stamp values
  * completions: add ocp set-error-injection command
  * doc: add ocp set-error-injection command
  * ocp: add set-error-injection command
  * nvme: use argconfig_parse_seen to check conditions
  * nvme: use proper mask to get correct lbafu value
  * utils: fix print formatting option
  * utils: cleanup includes in utils.h
  * utils: add missing header
  * nvme-print: Added print for two new fields for HMB feature
  * plugins/micron: Move OCP internal log parsing from Micron to OCP Plugin.
  * fabrics: remove unused _discover_from_json_config_file() argument
  * nvme: avoid unnecessary dup() + close() in io_mgmt_send()
  * util: remove unnecessary NULL check in cleanup_nvme_root()
  * nvme: use argconfig_parse_comma_sep_array_u16() in attach-ns
  * util: avoid duplication in argconfig_parse_comma_sep_array*()
  * util: remove redundant loop condition in argconfig_parse()
  * util: introduce is_null_or_empty() to avoid strlen()
  * util: reduce allocation sizes in argconfig_parse()
  * util: consolidate call paths to argconfig_parse_type()
  * util: reduce complexity of argconfig_parse_val()
  * util: reduce arguments passed to argconfig_parse_type()
  * util: remove empty default case in argconfig functions
  * util: remove unnecessary parentheses in argconfig_parse_type()
  * util: remove redundant cast in argconfig_parse_type()
  * util: inline argconfig_parse_byte()
  * util: remove redundant NULL check in argconfig_print_help()
  * util: use cleanup to avoid goto in argconfig_parse()
  * util: make argconfig_set_opt_val() a void function
  * util: remove argconfig_parse_val() declaration
  * util: remove argconfig CFG_SIZE type
  * wdc: Update and refactor the C0h log page parsing
  * ccan: Add freed pointer checking to delete strset member
  * fabrics: connect all hosts in config.json (bsc#1226216)
  * fabrics: refactore discover from json config (bsc#1226216)
  * fabrics: first read config before topology scanning (bsc#1226216)
  * fabrics: use helper to lookup default hostnqn/hostid (bsc#1226216)
  * fabrics: extend already connected message (bsc#1226216)
  * fabrics: use cleanup helper to free nvme root object
  * nvme: check MD size with PI size when PRACT set to 1
  * nvme-print: add new field added in TP4090
  * nvme-print-binary: add effects-log command output missed
  * completions: add ocp get-error-injection command
  * doc: add ocp get-error-injection command
  * ocp: add get-error-injection command
  * ocp: fix eol-plp-failure-mode command sel option value
  * doc: fix ocp eol-plp-failure-mode select short option
  * ocp: set UUID index for eol-plp-failure-mode command to get
  * nvme: fix verbose logging (bsc#1231668)
  * doc: fix micron ocp telemetry log parse title
  * nvme-rpmb: send RPMB_REQ_READ_RESULT for authentication key programming
  * plugins/micron: Add support for OCP telemetry log parsing
  * ocp: Update Plugin Version
  * nvme: fix lbaf inuse to use 6:5 bits
  * ocp: use NVME_ARGS macro definition by eol-plp-failure-mode command
  * nvme: extern NVME_ARGS macro definition
  * nvme: use _cleanup_free_ type buffer for get-feature command
  * plugins/ocp: Update telemetry string log page (C9h)
  * nvme-print-json: add get-feature command fahrenheit temperature output
  * nvme: add get-feature and id-ctrl commands fahrenheit outputs
  * nvme: delete smart-log command fahrenheit option
  * nvme-print: check locale to use temperatures in degrees fahrenheit
  * completion: add support for tls-key (bsc#1226197)
  * doc: add tls-key --revoke documentation (bsc#1226197)
  * doc: fix tls-key --keyfile shorthand (bsc#1226197)
  * nvme: add support to revoke TLS key (bsc#1226197)
  * nvme: return error code/message for TLS commands (bsc#1226197)
  * nvme: factor out import key function (bsc#1226197)
  * nvme: use cleanup helper to close file descriptor (bsc#1226216)
  * nvme-rpmb: use cleanup helper for STREAM objects
  * fabrics: use cleanup helper for STREAM objects
  * nvme: use cleanup helper for STREAM objects (bsc#1226216)
  * nvme: strip newline when parsing TLS key files (bsc#1226197)
  * nvme: use stdout for exporting TLS keys (bsc#1226197)
  * nvme: change _cleanup_file_ to _cleanup_fd_ (bsc#1226197)
  * common.h: Avoid using unsupported load/store instructions in arm64 VMs
  * ocp: OCP 2.5 Telemetry DA 1 and 2 Parsing Updates
  * nvme-print-stdout: refactor subsys config (bsc#1231668)
  * wdc: Fix compiler warning.
  * nvme: add flags type nvme_print_flags_t
  * nvme-print: Use 'unsigned int' instead of 'unsigned'
  * nvme: update parse_args() return value handling
  * nvme-print: Fix nvme_show_smart_log indentation error
  * nvme-print-stdout: Fix stdout_smart_log indentation error
  * nvme-print-binary: Fix binary_smart_log indentation error
  * completions: add smart-log command fahrenheit option
  * doc: Add smart-log command fahrenheit option
  * nvme: Add smart-log command fahrenheit option
  * nvme-print: add PEL vendor specific and TCG defined events strings
  * nvme-print: Print PEL reserved event string
  * completions: Add timeout option bash completions
  * completions: Add timeout option zsh completions
  * completions: Add io-mgmt-recv/send commands zsh completions
  * completions: Add /dev/nvme argument missed
  * completions: Change fw-activate command name to fw-commit
  * completions: Fix _nvme indentation errors (bsc#1226197)
  * completions: Fix bash-nvme-completion.sh indentation errors (bsc#1226197)
  * doc: Add nvme commands timeout option
  * nvme: Add support for delete-ns command timeout option
  * nvme: Change NVME_DEFAULT_IOCTL_TIMEOUT to use nvme_cfg timeout
  * nvme: Add nvme_cfg timeout default option
  * nvme: Add nvme_cfg global variable for NVME_ARGS default options
  * nvme: add helper function to get pif and sts value
  * nvme: choose PIF from QPIF if QPIFS supports and PIF is QTYPE
  * nvme: use libnvme's atomic ANA log page fetch
  * nvme: fix maximum ANA log page length calculation
  * nvme-print-json: add missing va_end()
  * fabrics: skip namespace scan for fabric commands
  * nvme-print: print the new fields added in TP4141a
  * plugins/ocp: underflow + index fixes for telemetry
  * plugins/ocp: Add ocp TCG Configuration Log Page
  * nvme-print-stdout: Add helper function to print PIF in string form
  * doc: fix format command info
  * nvme: telemetry: report the correct error if the ioctl() fails.
  * nvme-print: add the cancel opcode to the nvme_cmd_to_string() list
  * doc: fix ocp format issues
  * nbft: Reuse existing discovery controller
  * nbft: Skip SSNS records pointing to well-known discovery NQN
  * nbft: Perform actual discovery
  * util/cleanup: Add cleanup for struct nvme_fabrics_uri
  * fabrics: Make some symbols public (bsc#1226216)
  * nvme-print-stdout: fix format index in stdout_nvm_id_ns
  * plugins/solidigm: Added workload-tracker command
  * plugins/solidigm: Added extra VU fields to id-ctrl
  * nvme-print-stdout: print MEM bit of CTRATT field
  * nvme-print-stdout: fix to print the log line by line
  * fabrics: Always pass hostid and hostnqn (bsc#1226216)
  * plugins/ssstc: Replace __uint16_t with uint16_t
  * plugins/solidigm: Added log pages to vs-internal-logs
  * sed: perform a tper revert after lsp revert
  * plugins/nbft: Use default library logging
  * docs: Add missing OCP plugin docs to meson
  * ocp: Switch OCP plugin to use semantic versioning
  * nvme: fix fw-commit MUD result message
  * sed: only re-read partition table after unlock.
  * nvme-print-json: Fix LBA status DSLBA output as hexadecimal
  * nvme-print-json: Use NVME_PMRxxx register definitions to print
  * nvme-print-stdout: Fix PMRWBM register name
  * nvme-print-json: Fix channel configuration descriptors pointer
  * nvme-print-json: Fix linux kernel check patch errors
  * nvme-print: Added "Command and Feature Lockdown" string to LID 0x14
  * plugins/innogrit: `u_char` -&gt; `unsigned char`
  * nvme: Use C99 types for uint32_t
  * nvme-print-stdout: print frl1/2/3 values for zns id-ns
  * solidigm: Eliminate &lt;linux/limits.h&gt;
  * nvme: remove double free in persistent-event-log
  * ocp: Add Get DSSD Power State Feature (FID: C7h)
  * nvme: initialize default library logging
  * nvme: use cleanup helper for nvme_root_t objects (bsc#1226197)
  * doc: add nvme connet ctrl-loss-tmo description
  * plugins/solidigm: Automatic enabling Data Area 4 when retrieving Telemetry.
- always build the docs
  * add 0001-docs-rename-ocp-unsupported-req-log-file.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1730376000">- Update to version 2.11:
  * docs: update check-tls-key arguments
  * nvme: add support to append TLS PSK to keyfile for check-tls-key
  * nvme: return correct error code in append_keyfile
  * docs: nvme-id-doman: dom{ia =&gt; ai}n
  * ocp: fix latency monitoring data structure entry endian
  * ocp: fix TCG configuration log endian
  * ocp: fix firmware activation history entry endian
  * docs: update gen-tls-key arguments
  * nvme: add support to add derive TLS PSK to keyfile
  * nvme: rename identity to version
  * nvme: set file permission for keyfile to owner only
  * nvme: export tls keys honoring version and hmac
  * nvmf-keys: add udev rule to import tls keys
  * docs: update TLS options
  * fabrics: add support to connect to accept a PSK command line
  * fabrics: add support to connect to accept a configuration
  * nvme: use unsigned char for hmac and identity
  * nvme-print: Add Sanitize Media Verification Event in PEL log
  * netapp-ontapdev: add err msg for no ontapdevices
  * netapp-smdev: add err msg for no smdevices
  * doc: Add sanitize command emvs option
  * ocp: combine to use GUID length definitions
  * nvme: update tls_key() handling
  * nvme-print-stdout: print VERS bit of SANICAP field
  * nvme: add EMVS support to sanitize command
  * ocp: remove callback function cast
  * doc: added commit conventions to contribution guidelines
  * ocp: fix ocp-print-stdout.c indentation error
  * ocp: fix ocp-nvme.c indentation errors
  * ocp: build ocp-nvme.c and ocp-telemetry-decode.c without json
  * ocp: split TCG configuration log print codes
  * ocp: split telemetry string log print codes
  * ocp: split device capabilities log print codes
  * ocp: split error recovery log print codes
  * ocp: split unsupported requirement log print codes
  * ocp: split latency monitor log print codes
  * ocp: move ocp telemetry log print function into ocp-print
  * ocp: split smart extended log print codes
  * ocp: split ocp-fw-activation-history print codes
  * plugins: update meson.build file to always build ocp plugin
  * ocp-print: move json code into separate files
  * nvme-print-json: display only verbose output
  * ocp-nvme: ocp plugin version update
  * nvme-print: print KV command set page header
  * doc: show where self-test results can be found
  * plugins/memblaze: fix a wrong id on smart-log-add
  * plugins/dapustor: smart-log-add fix
  * plugins/sed: add sid password change (bsc#1229677)
  * plugins/solidigm: Automatic retry smaller log chunk size.
  * ocp-nvme: Add LMDATA-37 for Latency Monitor Log
  * ocp-nvme: remove ocp log page version checking
  * wdc: Fix for Reading WDC C2 Vendor Unique Log Page
  * ocp: Fixes for OCP 2.5 Telemetry DA1 FIFO Event Parsing
  * nvme-print-json: update JSON verbose output for nvm-id-ctrl (bsc#1231668)
  * wdc: Add Support for SN5100S
  * nvme: Support show-regs for nvmeof
  * ocp: fix option handling in internal-log
  * Documentation: Added solidigm plugin commands
  * wdc: add support for SNTMP drive
  * nvme-print: print NSSES field of CAP register
  * ocp: fix GUID output
  * nvme-print-json: print controller register values in offset order
  * nvme-print-json: print CMBEBS and CMBSWTP in json format
  * nvme-print-stdout: update changed-ns-list-log output (bsc#1231668)
  * nvme: fix uninitialized value in error-log (bsc#1231668)
  * nvme: fix to convert metadata size to native byte order
  * nvme-print: fix error information log page endianness error
  * completions: add get-feature command changed option
  * doc: add get-feature command changed option
  * nvme: separate get NVME_GET_FEATURES_SEL_CHANGED definition
  * nvme: use NVME_GET_FEATURES_SEL definitions
  * nvme-print-stdout: use NVME_CTRL_OAES definitions
  * completion: add ocp set-telemetry-profile to zsh
  * completion: add solidgm work-tracker binding
  * plugins/solidigm: Added Workload Tracker Triggers and Wall Time
  * ocp: include util/types.h to use nvme_uint128_t
  * ocp: fix to set log data pointer allocated
  * nvme: use NVME_CHECK() to check get features select field value
  * ocp: split ocp-hwcomp log
  * completions: add ocp hardware-component-log command
  * doc: add ocp hardware-component-log command
  * ocp: add hwcomp log json output
  * ocp: add hwcomp log command list option
  * ocp: add hwcomp log command comp-id option
  * ocp: add hwcomp dummy definition
  * ocp: add support for hwcomp log page
  * nvme: use NVME_CTRL_FNA definitions
  * netapp-smdevices: print single device output too (bsc#1231668)
  * netapp-smdevices: segregate print routines (bsc#1231668)
  * Add Support for new SN655 PCI Device ID
  * nvme-print-json: extern json object add functions
  * ocp: add SMART / health information extended log page version 4
  * ocp: add error recovery log page version 3
  * ocp: add get-enable-ieee1667-silo command
  * fabrics: fix incorrect access filename check (bsc#1231668)
  * nvme: use NVME_GET_FEATURES_SEL_SUPPORTED definition
  * nvme-print-json: use _cleanup_free_
  * plugins/solidigm: fix use after free.
  * ocp: fix ocp-nvme.c coding style errors
  * ocp: Change C9 function names to use c9 instead
  * ocp: fix to return c9 log page data error to open file
  * ocp: fix to set return value to get c9 log page data
  * nvme: update nvme_insert_tls_key_versioned() return handling (bsc#1231668)
  * nvme-print-stdout: add print_array function
  * logging: add print_info function
  * util: extern uint128_t_to_double() function
  * nvme-print: sanitize error-log output (bsc#1231668)
  * plugins/solidigm : Fixing vs-internal-log to generate identify per allocated namespace.
  * nvme-print: added new fields for nvm_id_ns
  * plugins/fdp: bugfix error check to validate output format
  * plugins/wdc: fix json output for vs-nand-stats
  * nvme-print-stdout: use NVME_FEAT util definitions
  * nvme-print: update subsys verbose outputs (bsc#1231668)
  * nvme-print: add subsystype to the list-subsys output (bsc#1231668)
  * netapp: print output for single device too (bsc#1231668)
  * netapp: segregate the print routines (bsc#1231668)
  * netapp: fix uninitialized value from heap error (bsc#1231668)
  * nvme-print: print the new fields added in TP4142
  * plugins/innogrit: modify for project tacoma
  * wdc: Add Support for new SN-861 PCI device id
  * nvme-print: use LC_MEASUREMENT to check fahrenheit temperature
  * nvme-print: use Completion Condition enum
  * completions: add the zsh completion of the dapustor plugin
  * nvme-print: print the new fields added in TP4165
  * plugins/dapustor: dapustor smart-log-add update
  * nvme-print-stdout: Added print for new field CSER (TP4167)
  * plugins: Add a new DapuStor plugin and the smart-log-add command
  * docs: rename ocp-unsupported-req-log file
- Drop build fix patch
  * remove 0001-docs-rename-ocp-unsupported-req-log-file.patch
- Install 70-nvmf-keys.rules to the default udev rules directory</changelog>
  <changelog author="dwagner@suse.de" date="1741089600">- Update to version 2.11+17.g6e09119:
  * nvme: check for valid output format (bsc#1237275)
  * nvme: make get-feature JSON output print everything (bsc#1237275)
  * nvme: make -v output consistent with -H output for nvme get-feature (bsc#1237275)
  * nvme: make -v output consistent with -H output for nvme get-property (bsc#1237275)
  * nvme-print-stdout: add details in list-ns verbose output (bsc#1237275)
  * nvme-print-stdout: add descriptions for nsze, ncap &amp; nuse (bsc#1237275)
  * netapp-ontapdev: correct the basestr header (bsc#1237275)
  * netapp-smdev: update err msg for no smdevices (bsc#1237275)
  * netapp-ontapdev: update err msg for no ontapdevices (bsc#1237275)
  * netapp-smdev: update basestr header in verbose output (bsc#1237275)</changelog>
  <changelog author="dwagner@suse.de" date="1745323200">- Update to version 2.11+22.gd31b1a01:
  * nvme-print: display fw-rev in list-subsys output (bsc#1240518)
  * nvme-print: display model in list-subsys output (bsc#1240518)
  * netapp-ontapdev: add subsysname to regular output (bsc#1240518)
  * netapp-ontapdev: add subsysname to the verbose output (bsc#1240518)
  * Revert "nvme-print-json: display only verbose output"</changelog>
  <changelog author="dwagner@suse.de" date="1753185600">- Update to version 2.11+26.gfbd2b4f4:
  * nvme: fix mem leak in nvme copy (bsc#1243716)
  * nvme-print: suppress output when no ctrl is present for list-subsys (bsc#1243716)
  * nvme: extend filter to match device name (bsc#1243716)
  * udev-rules-ontap: switch to queue-depth iopolicy (bsc#1246599)</changelog>
  <changelog author="dwagner@suse.de" date="1757419200">- Update to version 2.11+28.g2fc67685:
  * netapp-ontapdev: update invalid device handling (bsc#1247017)
  * netapp-smdev: update invalid device handling (bsc#1247017)</changelog>
  <changelog author="dwagner@suse.de" date="1758196800">- Update to version 2.11+29.g61f8d34b:
  * nvme: add --compat flag for 'gen-tls-key' and 'check-tls-key' (bsc#1246914)</changelog>
</package>
<package pkgid="7b9dcbe65d1b34b23494d4a51b47296b8c11d2eede2633365e3da8de5b48336e" name="oath-toolkit" arch="src">
  <version epoch="0" ver="2.6.2" rel="150000.3.7.1"/>
  <changelog author="cristian.rodriguez@opensuse.org" date="1296907200">- Initial version</changelog>
  <changelog author="cristian.rodriguez@opensuse.org" date="1296907201">- Use libgcrypt for crypto</changelog>
  <changelog author="cristian.rodriguez@opensuse.org" date="1297425600">- Update to version 1.4.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1371297600">- Update to version 2.0.2</changelog>
  <changelog author="vuntz@opensuse.org" date="1382529600">- Update to version 2.4.0:
  + liboath: Add new API methods for validating TOTP OTPs
- Changes from version 2.2.0:
  + libpskc: Add functions for setting PSKC data.
  + liboath: Permit different passwords for different tokens for
    the same user.
  + liboath: Make header file usable from C++ (extern "C" guard).
  + build: Improve building from git with most recent automake and
    gengetopt.
  + build: Valgrind is not enabled by default.
- Fix license: libraries are LGPL-2.1+ and everything else is
  GPL-3.0+. Also properly package the COPYING files.
- Prepare build libpskc, hidden under a %{build_pskc} define:
  + Add libxml2-devel and pkgconfig(xmlsec1) BuildRequires.
  + Create libpskc0 and libpskc-devel subpackages.
  + Define %{build_pskc} to 0 since we don't have libxmlsec1 yet.
- Rework summaries and descriptions.</changelog>
  <changelog author="darin@darins.net" date="1405080000">- Ran through spec-cleaner</changelog>
  <changelog author="mardnh@gmx.de" date="1422100800">- Update to version 2.4.1:
  + liboath: Fix usersfile bug that caused it to update the wrong line.
    When an usersfile contain multiple lines for the same user but with an
    unparseable token type (e.g., HOTP vs TOTP), the code would update the
    wrong line of the file.  Since the then updated line could be a
    commented out line, this can lead to the same OTP being accepted
    multiple times which is a security vulnerability.  Reported by Bas van
    Schaik &lt;bas@sj-vs.net&gt; and patch provided by Ilkka Virta
    &lt;itvirta@iki.fi&gt;.  CVE-2013-7322</changelog>
  <changelog author="t.gruner@katodev.de" date="1441800000">- Update to Version 2.6.1 (released 2015-07-31)
  - liboath: Fix 'make check' on 32-bit systems.
- Version 2.6.0 (released 2015-05-19)
  - liboath: Support TOTP with HMAC-SHA256 and HMAC-SHA512.
    This adds new APIs oath_totp_generate2, oath_totp_validate4 and
    oath_totp_validate4_callback.
  - oathtool: The --totp parameter now take an optional argument to specify MAC.
    For example use --totp=sha256 to use HMAC-SHA256.  When --totp is used
    the default HMAC-SHA1 is used, as before.
  - pam_oath: Mention in README that you shouldn't use insecure keys.
  - pam_oath: Check return value from strdup.
  - The files 'gdoc' and 'expect.oath' are now included in the tarball.</changelog>
  <changelog author="mardnh@gmx.de" date="1472472000">- Update to Version 2.6.2
  - no changes in upstream code
- Fix RPM groups for -devel packages
- build with libpskc on supported suse-versions
- Add patch:
  - 0001-Fix-no-return-in-nonvoid-function-errors-reported-by.patch</changelog>
  <changelog author="dmarcoux@posteo.de" date="1516104000">- Add patch (last commit which changed source, not released in 2.6.2):
  - 0002-update_gnulibs_files.patch</changelog>
  <changelog author="ncutler@suse.com" date="1523448000">- use %license instead of %doc to package license-related files</changelog>
  <changelog author="ncutler@suse.com" date="1523448001">- bring License line into closer accordance with actual licenses
  mentioned in the tarball
- split off xml/pskc/ directory/files from liboath0 into a separate
  "oath-toolkit-xml" subpackage to prevent conflicts if two versions of the
  liboath library were ever installed at the same time</changelog>
  <changelog author="mpluskal@suse.com" date="1523620800">- Run spe-cleaner
- Drop useless conditions</changelog>
  <changelog author="pgajdos@suse.com" date="1649851200">- fix [bsc#1197790] -- FTBFS: oath-toolkit won't compile on SP4
- added patches
  part of https://gitlab.com/oath-toolkit/oath-toolkit/-/commit/9b54ca84f92f4747751449aa645f07737b7bc7ea
  + 0003-update_gnulibs_files-fseeko.c.patch</changelog>
</package>
<package pkgid="df6a7870c5a9c2b83f216c0c9a83d041c2c461d97a33c5959eb0cdcd842c0535" name="oath-toolkit-xml" arch="noarch">
  <version epoch="0" ver="2.6.2" rel="150000.3.7.1"/>
  <changelog author="vuntz@opensuse.org" date="1382529600">- Update to version 2.4.0:
  + liboath: Add new API methods for validating TOTP OTPs
- Changes from version 2.2.0:
  + libpskc: Add functions for setting PSKC data.
  + liboath: Permit different passwords for different tokens for
    the same user.
  + liboath: Make header file usable from C++ (extern "C" guard).
  + build: Improve building from git with most recent automake and
    gengetopt.
  + build: Valgrind is not enabled by default.
- Fix license: libraries are LGPL-2.1+ and everything else is
  GPL-3.0+. Also properly package the COPYING files.
- Prepare build libpskc, hidden under a %{build_pskc} define:
  + Add libxml2-devel and pkgconfig(xmlsec1) BuildRequires.
  + Create libpskc0 and libpskc-devel subpackages.
  + Define %{build_pskc} to 0 since we don't have libxmlsec1 yet.
- Rework summaries and descriptions.</changelog>
  <changelog author="darin@darins.net" date="1405080000">- Ran through spec-cleaner</changelog>
  <changelog author="mardnh@gmx.de" date="1422100800">- Update to version 2.4.1:
  + liboath: Fix usersfile bug that caused it to update the wrong line.
    When an usersfile contain multiple lines for the same user but with an
    unparseable token type (e.g., HOTP vs TOTP), the code would update the
    wrong line of the file.  Since the then updated line could be a
    commented out line, this can lead to the same OTP being accepted
    multiple times which is a security vulnerability.  Reported by Bas van
    Schaik &lt;bas@sj-vs.net&gt; and patch provided by Ilkka Virta
    &lt;itvirta@iki.fi&gt;.  CVE-2013-7322</changelog>
  <changelog author="t.gruner@katodev.de" date="1441800000">- Update to Version 2.6.1 (released 2015-07-31)
  - liboath: Fix 'make check' on 32-bit systems.
- Version 2.6.0 (released 2015-05-19)
  - liboath: Support TOTP with HMAC-SHA256 and HMAC-SHA512.
    This adds new APIs oath_totp_generate2, oath_totp_validate4 and
    oath_totp_validate4_callback.
  - oathtool: The --totp parameter now take an optional argument to specify MAC.
    For example use --totp=sha256 to use HMAC-SHA256.  When --totp is used
    the default HMAC-SHA1 is used, as before.
  - pam_oath: Mention in README that you shouldn't use insecure keys.
  - pam_oath: Check return value from strdup.
  - The files 'gdoc' and 'expect.oath' are now included in the tarball.</changelog>
  <changelog author="mardnh@gmx.de" date="1472472000">- Update to Version 2.6.2
  - no changes in upstream code
- Fix RPM groups for -devel packages
- build with libpskc on supported suse-versions
- Add patch:
  - 0001-Fix-no-return-in-nonvoid-function-errors-reported-by.patch</changelog>
  <changelog author="dmarcoux@posteo.de" date="1516104000">- Add patch (last commit which changed source, not released in 2.6.2):
  - 0002-update_gnulibs_files.patch</changelog>
  <changelog author="ncutler@suse.com" date="1523448000">- use %license instead of %doc to package license-related files</changelog>
  <changelog author="ncutler@suse.com" date="1523448001">- bring License line into closer accordance with actual licenses
  mentioned in the tarball
- split off xml/pskc/ directory/files from liboath0 into a separate
  "oath-toolkit-xml" subpackage to prevent conflicts if two versions of the
  liboath library were ever installed at the same time</changelog>
  <changelog author="mpluskal@suse.com" date="1523620800">- Run spe-cleaner
- Drop useless conditions</changelog>
  <changelog author="pgajdos@suse.com" date="1649851200">- fix [bsc#1197790] -- FTBFS: oath-toolkit won't compile on SP4
- added patches
  part of https://gitlab.com/oath-toolkit/oath-toolkit/-/commit/9b54ca84f92f4747751449aa645f07737b7bc7ea
  + 0003-update_gnulibs_files-fseeko.c.patch</changelog>
</package>
<package pkgid="b9ae33fb2090618be9a3617c4b64c9820b40d7e3a9046e47f5d4d616247518e1" name="objectweb-asm" arch="noarch">
  <version epoch="0" ver="9.7" rel="150200.3.17.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="dziolkowski@suse.com" date="1495195200">- New build dependency: javapackages-local
- cleaned spec using spec-cleaner
- remove "section free" macro
- get rid of %if 0 blocks</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel
- Specify java source and target level 1.6 to allow building with
  jdk9
- Added patch:
  * asm-3.3.1-sourcetarget.patch
    + Don't hardcode the source and target levels, allow specifying
    them on command-line</changelog>
  <changelog author="fstrba@suse.com" date="1526472000">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Added patch:
  * asm-3.3.1-jdk9.patch
    + Since JDK9, "_" is reserved keyword</changelog>
  <changelog author="fstrba@suse.com" date="1544529600">- Upgrade to version 6.0, the last version buildable with ant
- Removed patches:
  * asm-3.3.1-jdk9.patch
  * asm-3.3.1-sourcetarget.patch
  * objectweb-asm-no-classpath-in-manifest.patch
    + Not corresponding any more to the current state of code
- Added patches:
  * objectweb-asm-6.0-no_bnd.patch
    + Don't use bnd (which we don't have) to create bundles
  * objectweb-asm-6.0-no_retrofit.patch
    + Don't retrofit bytecode, since we build with target &gt; 1.5
  * objectweb-asm-6.0-sourcetarget.patch
    + Build with source/target 8
  * objectweb-asm-6.0-uberjar.patch
    + Bring back the uberjars (asm-all.jar and asm-debug-all.jar)
    since some packages might still depend on them</changelog>
  <changelog author="jengelh@inai.de" date="1544529601">- Update RPM groups</changelog>
  <changelog author="fstrba@suse.com" date="1551873600">- Upgrade to version 6.2.1
- Generate and customize the ant build system to be able to build
  without gradle
- Removed patches:
  * objectweb-asm-6.0-no_bnd.patch
  * objectweb-asm-6.0-no_retrofit.patch
  * objectweb-asm-6.0-sourcetarget.patch
  * objectweb-asm-6.0-uberjar.patch
    + not needed in this version</changelog>
  <changelog author="fstrba@suse.com" date="1574683200">- Upgrade to version 7.2
  * Upstream dropped asm-xml submodule</changelog>
  <changelog author="fstrba@suse.com" date="1634731200">- Upgrade to version 9.2
  * Up to JDK 18 support
  * ClassReader.readStream() performance improvements
  * Add some input validations in ClassReader
  * Replace -debug flag in Printer with -nodebug (-debug continues
    to work)
  * new V15 constant
  * experimental support for PermittedSubtypes and RecordComponent
  * Javadoc fixes
  * bug fixes
    + 317942: ClassCheckAdaptor output represents reference arrays
    as only their "root" component type
    + 317921: Make Analyzer not require correct maxs or calculate
    maxs fast
    + 317922: InstructionAdapter shall throw consistent exceptions
    + 317923: Incorrect documentation on ClassReader's use of
    AnnotationVisitor
    + 317929: ClassRemapper doesn't remap annotation values
    + 317930: Can CheckClassAdapter.checkTypeRef throw a more
    specific exception?
    + 317931: Shall CheckMethodAdapter.Method.visitLabel throw
    IllegalStateException?
    + Tests that requires preview features should only run if the
    preview features of the right JDK are enabled
    + 317897: AdviceAdapter incorrectly emits onMethodEnter from a
    try-catch block in a constructor
    + 317900: Javadoc of ClassVisitor does not specify order of
    visitRecordComponent
    + 317904: Bug with constructors in AdviceAdapter
    + 317910: Iterating over a InsnList with an iterator traverses
    the list twice
    + 317898: ASM 8 does not support writing of empty records
    + 317896: Performance degradation when using dynamic constants
    as a static paramet to another InDy/ConDy
    + 317885: SKIP_DEBUG now skips MethodParameters attributes</changelog>
  <changelog author="fstrba@suse.com" date="1646222400">- Build asm as modular jar files to be used as such by java &gt;= 9
- Leave asm-all.jar as a non-modular jar</changelog>
  <changelog author="david.anes@suse.com" date="1650456000">- Upgrade to version 9.3
  * new Opcodes.V19 constant for Java 19
  * new size() method in ByteVector
  * checkDataFlow option in CheckClassAdapter can now be used
    without valid maxStack and maxLocals values
  * new Maven BOM
  * bug fixes
    + 317949: fix javadoc errors
    + remap invokedynamic field handles properly
    + add missing left curly brace in ASMifier output of visitModule</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1674993600">- Upgrade to version 9.4
  * new Opcodes.V20 constant for Java 20
  * more checks in CheckClassAdapter
  * Javadoc improvements and fixes
  * module-info classes can be built without Gradle and Bnd
  * parent POM updated to org.ow2:ow2:1.5.1
  * bug fixes
    + 317977: CheckClassAdapter is no longer transparent for MAXLOCALS
    + 317981: Add public getDelegate method to all visitor classes
    + Analyzer does not compute optimal maxLocals for static methods
    + Fix SignatureWriter when a generic type has a depth over 30
    + Skip remap inner class name if not changed in Remapper</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1680436800">- Upgrade to version 9.5
  * new Opcodes.V21 constant for Java 21
  * new readBytecodeInstructionOffset hook in ClassReader
  * more detailed exception messages
  * Javadoc improvements and fixes
  * bug fixes
    + 317989: Silent removal of zero-valued entries from the
    line-number table</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1697544000">- Upgrade to version 9.6
  * new Opcodes.V22 constant for Java 22
  * bug fixes
    + 317991: Analyzer produces frames that have different locals
    than those detected by JRE bytecode verifier
    + 317995: Invalid stackmap generated when the instruction
    stream has new instruction after invokespecial to &lt;init&gt;
    + 317998: Analyzer can fail to catch thrown exceptions
    + 318002: asm-analysis Frame allocates an array unnecessarily
    inside executeInvokeInsn
    + bug in CheckFrameAnalyzer with static methods</changelog>
  <changelog author="fstrba@suse.com" date="1715774400">- Upgrade to version 9.7
  * new Opcodes.V23 constant for Java 23
  * bug fixes
    + 318009: Unit test regression in dex2jar.
    + 318007: 'ClassNode#outerClass' has incorrect JavaDocs.
    + 318006: asm-bom packaging should be 'pom'.
    + 318003: The Textifier prints a supplementary space at the end
    of each method that throws at least one exception.</changelog>
</package>
<package pkgid="8eb27d49edf1f526e0ff76df1743907e7f92d294763dc201d9bc9785d6a1ef82" name="objectweb-asm" arch="src">
  <version epoch="0" ver="9.7" rel="150200.3.17.1"/>
  <changelog author="mvyskocil@suse.cz" date="1243944000">- Initial SUSE packaging of objectweb-asm (from jpp 5.0)</changelog>
  <changelog author="nlminhtl@gmail.com" date="1324209600">- 3.3.1 release
  * added new InstructionAdapter class, TryCatchBlockSorter (provided by Adrian Sampson)
  * improved extensibility of analysis package (patch from Markus Heiden)
  * 314119 Provide read access to uninitializedTypes in AnalyzerAdapter
  * 313804 Improve analysis results
  * a lot of bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="mvyskocil@suse.com" date="1378900800">- use add_maven_depmap from javapackages-tools</changelog>
  <changelog author="mvyskocil@suse.com" date="1380110400">- Build with gcc-java as openjdk7 (1.7.0_40) fails to build it
- Disable javadoc package</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="dziolkowski@suse.com" date="1495195200">- New build dependency: javapackages-local
- cleaned spec using spec-cleaner
- remove "section free" macro
- get rid of %if 0 blocks</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel
- Specify java source and target level 1.6 to allow building with
  jdk9
- Added patch:
  * asm-3.3.1-sourcetarget.patch
    + Don't hardcode the source and target levels, allow specifying
    them on command-line</changelog>
  <changelog author="fstrba@suse.com" date="1526472000">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Added patch:
  * asm-3.3.1-jdk9.patch
    + Since JDK9, "_" is reserved keyword</changelog>
  <changelog author="fstrba@suse.com" date="1544529600">- Upgrade to version 6.0, the last version buildable with ant
- Removed patches:
  * asm-3.3.1-jdk9.patch
  * asm-3.3.1-sourcetarget.patch
  * objectweb-asm-no-classpath-in-manifest.patch
    + Not corresponding any more to the current state of code
- Added patches:
  * objectweb-asm-6.0-no_bnd.patch
    + Don't use bnd (which we don't have) to create bundles
  * objectweb-asm-6.0-no_retrofit.patch
    + Don't retrofit bytecode, since we build with target &gt; 1.5
  * objectweb-asm-6.0-sourcetarget.patch
    + Build with source/target 8
  * objectweb-asm-6.0-uberjar.patch
    + Bring back the uberjars (asm-all.jar and asm-debug-all.jar)
    since some packages might still depend on them</changelog>
  <changelog author="jengelh@inai.de" date="1544529601">- Update RPM groups</changelog>
  <changelog author="fstrba@suse.com" date="1551873600">- Upgrade to version 6.2.1
- Generate and customize the ant build system to be able to build
  without gradle
- Removed patches:
  * objectweb-asm-6.0-no_bnd.patch
  * objectweb-asm-6.0-no_retrofit.patch
  * objectweb-asm-6.0-sourcetarget.patch
  * objectweb-asm-6.0-uberjar.patch
    + not needed in this version</changelog>
  <changelog author="fstrba@suse.com" date="1574683200">- Upgrade to version 7.2
  * Upstream dropped asm-xml submodule</changelog>
  <changelog author="fstrba@suse.com" date="1634731200">- Upgrade to version 9.2
  * Up to JDK 18 support
  * ClassReader.readStream() performance improvements
  * Add some input validations in ClassReader
  * Replace -debug flag in Printer with -nodebug (-debug continues
    to work)
  * new V15 constant
  * experimental support for PermittedSubtypes and RecordComponent
  * Javadoc fixes
  * bug fixes
    + 317942: ClassCheckAdaptor output represents reference arrays
    as only their "root" component type
    + 317921: Make Analyzer not require correct maxs or calculate
    maxs fast
    + 317922: InstructionAdapter shall throw consistent exceptions
    + 317923: Incorrect documentation on ClassReader's use of
    AnnotationVisitor
    + 317929: ClassRemapper doesn't remap annotation values
    + 317930: Can CheckClassAdapter.checkTypeRef throw a more
    specific exception?
    + 317931: Shall CheckMethodAdapter.Method.visitLabel throw
    IllegalStateException?
    + Tests that requires preview features should only run if the
    preview features of the right JDK are enabled
    + 317897: AdviceAdapter incorrectly emits onMethodEnter from a
    try-catch block in a constructor
    + 317900: Javadoc of ClassVisitor does not specify order of
    visitRecordComponent
    + 317904: Bug with constructors in AdviceAdapter
    + 317910: Iterating over a InsnList with an iterator traverses
    the list twice
    + 317898: ASM 8 does not support writing of empty records
    + 317896: Performance degradation when using dynamic constants
    as a static paramet to another InDy/ConDy
    + 317885: SKIP_DEBUG now skips MethodParameters attributes</changelog>
  <changelog author="fstrba@suse.com" date="1646222400">- Build asm as modular jar files to be used as such by java &gt;= 9
- Leave asm-all.jar as a non-modular jar</changelog>
  <changelog author="david.anes@suse.com" date="1650456000">- Upgrade to version 9.3
  * new Opcodes.V19 constant for Java 19
  * new size() method in ByteVector
  * checkDataFlow option in CheckClassAdapter can now be used
    without valid maxStack and maxLocals values
  * new Maven BOM
  * bug fixes
    + 317949: fix javadoc errors
    + remap invokedynamic field handles properly
    + add missing left curly brace in ASMifier output of visitModule</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1674993600">- Upgrade to version 9.4
  * new Opcodes.V20 constant for Java 20
  * more checks in CheckClassAdapter
  * Javadoc improvements and fixes
  * module-info classes can be built without Gradle and Bnd
  * parent POM updated to org.ow2:ow2:1.5.1
  * bug fixes
    + 317977: CheckClassAdapter is no longer transparent for MAXLOCALS
    + 317981: Add public getDelegate method to all visitor classes
    + Analyzer does not compute optimal maxLocals for static methods
    + Fix SignatureWriter when a generic type has a depth over 30
    + Skip remap inner class name if not changed in Remapper</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1680436800">- Upgrade to version 9.5
  * new Opcodes.V21 constant for Java 21
  * new readBytecodeInstructionOffset hook in ClassReader
  * more detailed exception messages
  * Javadoc improvements and fixes
  * bug fixes
    + 317989: Silent removal of zero-valued entries from the
    line-number table</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1697544000">- Upgrade to version 9.6
  * new Opcodes.V22 constant for Java 22
  * bug fixes
    + 317991: Analyzer produces frames that have different locals
    than those detected by JRE bytecode verifier
    + 317995: Invalid stackmap generated when the instruction
    stream has new instruction after invokespecial to &lt;init&gt;
    + 317998: Analyzer can fail to catch thrown exceptions
    + 318002: asm-analysis Frame allocates an array unnecessarily
    inside executeInvokeInsn
    + bug in CheckFrameAnalyzer with static methods</changelog>
  <changelog author="fstrba@suse.com" date="1715774400">- Upgrade to version 9.7
  * new Opcodes.V23 constant for Java 23
  * bug fixes
    + 318009: Unit test regression in dex2jar.
    + 318007: 'ClassNode#outerClass' has incorrect JavaDocs.
    + 318006: asm-bom packaging should be 'pom'.
    + 318003: The Textifier prints a supplementary space at the end
    of each method that throws at least one exception.</changelog>
</package>
<package pkgid="ebee3fd682fa1f94b45d345bf9407433fbeb35472df77098844c8a4221297da3" name="ocl-icd" arch="src">
  <version epoch="0" ver="2.3.1" rel="150100.8.19.1"/>
  <changelog author="sndirsch@suse.com" date="1547380800">- sle15/Leap15 and newer: switch to usage of update-alternatives,
  so the package no longer conflicts with nvidia packages
  (boo#1108304)</changelog>
  <changelog author="sndirsch@suse.com" date="1547467200">- limit usage of update-alernatives to sle15-sp1/Leap 15.1 and newer</changelog>
  <changelog author="mardnh@gmx.de" date="1547899200">- Add missing Requires(post): update-alternatives</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1565006400">- Update to version 2.2.12:
  * Switched khronos headers to OpenCL 2.2.
  * Added OpenCL 2.2 support.
- Update URL to GitHub repository since previous URL is not
  accessible anymore.
- Only suggest pocl instead of recommending it.
- Add check section.</changelog>
  <changelog author="tchvatal@suse.com" date="1582718400">- Remove condition for SLE11 build as it is unresolvable anyway
- Require update-alternatives only where really needed
- Require opencl-headers in the develpackage as otherwise all
  those that pull the devel would need to do it on their own.</changelog>
  <changelog author="meissner@suse.com" date="1590840000">- add baselibs.conf to build 32bit binaries for Wine (bsc#1172303)</changelog>
  <changelog author="dimstar@opensuse.org" date="1591185600">- Add ocl-icd-gcc10.patch: Fix build with gcc10 (boo#1172436).</changelog>
  <changelog author="sndirsch@suse.com" date="1592481600">- switch to /usr/etc/OpenCL/vendors for vendor specific .icd files
  (boo#1173005); currently I'm only aware of Mesa using it (taking
  care about adjusting this myself); NVIDIA is using its own
  libOpenCL ...</changelog>
  <changelog author="sndirsch@suse.com" date="1592913600">- switch from /usr/etc/OpenCL/vendors to /usr/share/OpenCL/vendors
  for vendor specific .icd files (boo#1173005)</changelog>
  <changelog author="sndirsch@suse.com" date="1598097600">- n_UsrShare.patch
  * first try /etc/OpenCL/vendors, then /usr/share/OpenCL/vendors
  (boo#1173005, comment#8)
- supersedes configure option --enable-custom-vendordir</changelog>
  <changelog author="sndirsch@suse.com" date="1598875200">- added patch markups to specfile for better documentation</changelog>
  <changelog author="mardnh@gmx.de" date="1603540800">- Update to version 2.2.13
  * Removed warnings and use uniform warning suppression
  * Switched Khornos Headers to OpenCL3.0
  * Added OpenCL 3.0 support
  * Fix warning in gcc10
  * Updated loader and headers to support
    clSetContextDestructorCallback.
  * Call clGetDeviceIDs directly through the dispatch table
- Drop patch:
  * ocl-icd-gcc10.patch (fixed upstream)</changelog>
  <changelog author="mardnh@gmx.de" date="1607774400">- Update to version 2.2.14
  * Added experimental support for layers</changelog>
  <changelog author="mardnh@gmx.de" date="1617192000">- Update to version 2.3.0
  * Change OCL_ICD_LAYERS to OPENCL_LAYERS to conform to
    upecification
  * Updated layer support around official CL/cl_layer.h
  * Updated OpenCL Headers
  * Fixed typo in manpage</changelog>
  <changelog author="christophe@krop.fr" date="1623758400">- Add upstream change to fix build:
  * 0001-Updated-to-support-latest-Khronos-headers.patch</changelog>
  <changelog author="meissner@suse.com" date="1629201600">- overwrite the libopenCL.so.1 link in %post of baselibs. (bsc#1189433)</changelog>
  <changelog author="mardnh@gmx.de" date="1629460800">- Update to version 2.3.1
  * Khronos Header Compatibility
- Remove patch (included upstream):
  * 0001-Updated-to-support-latest-Khronos-headers.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1684324800">- Fix build against recent opencl: pass
  - -enable-official-khronos-headers to configure.</changelog>
  <changelog author="sndirsch@suse.com" date="1731067200">- get rid of update-alternatives; it's no longer needed because with
  upcoming G06 production driver, the nvidia packages will rely on
  this implementation (JIRA#PED-11444)
- added conflicts to packages for legacy nvidia drivers (G04,G05)</changelog>
  <changelog author="sndirsch@suse.com" date="1731326400">- nvidia-compute-G06: fixed conflicts to nvidia-compute-G06;
  the requires to libOpenCL1 is already in since 550.120; so do
  the conflicts for anything &lt; 550.120 (boo#1233169)</changelog>
</package>
<package pkgid="4947febcf93a202c4cd9d598ee6c38a3a89d59656443173d9cf566b3bf8c5bea" name="ocl-icd-devel" arch="x86_64">
  <version epoch="0" ver="2.3.1" rel="150100.8.19.1"/>
  <changelog author="sndirsch@suse.com" date="1547380800">- sle15/Leap15 and newer: switch to usage of update-alternatives,
  so the package no longer conflicts with nvidia packages
  (boo#1108304)</changelog>
  <changelog author="sndirsch@suse.com" date="1547467200">- limit usage of update-alernatives to sle15-sp1/Leap 15.1 and newer</changelog>
  <changelog author="mardnh@gmx.de" date="1547899200">- Add missing Requires(post): update-alternatives</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1565006400">- Update to version 2.2.12:
  * Switched khronos headers to OpenCL 2.2.
  * Added OpenCL 2.2 support.
- Update URL to GitHub repository since previous URL is not
  accessible anymore.
- Only suggest pocl instead of recommending it.
- Add check section.</changelog>
  <changelog author="tchvatal@suse.com" date="1582718400">- Remove condition for SLE11 build as it is unresolvable anyway
- Require update-alternatives only where really needed
- Require opencl-headers in the develpackage as otherwise all
  those that pull the devel would need to do it on their own.</changelog>
  <changelog author="meissner@suse.com" date="1590840000">- add baselibs.conf to build 32bit binaries for Wine (bsc#1172303)</changelog>
  <changelog author="dimstar@opensuse.org" date="1591185600">- Add ocl-icd-gcc10.patch: Fix build with gcc10 (boo#1172436).</changelog>
  <changelog author="sndirsch@suse.com" date="1592481600">- switch to /usr/etc/OpenCL/vendors for vendor specific .icd files
  (boo#1173005); currently I'm only aware of Mesa using it (taking
  care about adjusting this myself); NVIDIA is using its own
  libOpenCL ...</changelog>
  <changelog author="sndirsch@suse.com" date="1592913600">- switch from /usr/etc/OpenCL/vendors to /usr/share/OpenCL/vendors
  for vendor specific .icd files (boo#1173005)</changelog>
  <changelog author="sndirsch@suse.com" date="1598097600">- n_UsrShare.patch
  * first try /etc/OpenCL/vendors, then /usr/share/OpenCL/vendors
  (boo#1173005, comment#8)
- supersedes configure option --enable-custom-vendordir</changelog>
  <changelog author="sndirsch@suse.com" date="1598875200">- added patch markups to specfile for better documentation</changelog>
  <changelog author="mardnh@gmx.de" date="1603540800">- Update to version 2.2.13
  * Removed warnings and use uniform warning suppression
  * Switched Khornos Headers to OpenCL3.0
  * Added OpenCL 3.0 support
  * Fix warning in gcc10
  * Updated loader and headers to support
    clSetContextDestructorCallback.
  * Call clGetDeviceIDs directly through the dispatch table
- Drop patch:
  * ocl-icd-gcc10.patch (fixed upstream)</changelog>
  <changelog author="mardnh@gmx.de" date="1607774400">- Update to version 2.2.14
  * Added experimental support for layers</changelog>
  <changelog author="mardnh@gmx.de" date="1617192000">- Update to version 2.3.0
  * Change OCL_ICD_LAYERS to OPENCL_LAYERS to conform to
    upecification
  * Updated layer support around official CL/cl_layer.h
  * Updated OpenCL Headers
  * Fixed typo in manpage</changelog>
  <changelog author="christophe@krop.fr" date="1623758400">- Add upstream change to fix build:
  * 0001-Updated-to-support-latest-Khronos-headers.patch</changelog>
  <changelog author="meissner@suse.com" date="1629201600">- overwrite the libopenCL.so.1 link in %post of baselibs. (bsc#1189433)</changelog>
  <changelog author="mardnh@gmx.de" date="1629460800">- Update to version 2.3.1
  * Khronos Header Compatibility
- Remove patch (included upstream):
  * 0001-Updated-to-support-latest-Khronos-headers.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1684324800">- Fix build against recent opencl: pass
  - -enable-official-khronos-headers to configure.</changelog>
  <changelog author="sndirsch@suse.com" date="1731067200">- get rid of update-alternatives; it's no longer needed because with
  upcoming G06 production driver, the nvidia packages will rely on
  this implementation (JIRA#PED-11444)
- added conflicts to packages for legacy nvidia drivers (G04,G05)</changelog>
  <changelog author="sndirsch@suse.com" date="1731326400">- nvidia-compute-G06: fixed conflicts to nvidia-compute-G06;
  the requires to libOpenCL1 is already in since 550.120; so do
  the conflicts for anything &lt; 550.120 (boo#1233169)</changelog>
</package>
<package pkgid="39ac27e8690ce0c5ec2a2f6c385170c269d8d78e8632c9985442ce47183049e6" name="open-iscsi" arch="src">
  <version epoch="0" ver="2.1.11" rel="150700.57.3.1"/>
  <changelog author="lduncan@suse.com" date="1652443200">- Set initiatorname in %post (at end of install), for cases
  where root is read-only at startup time (bsc#1198457)</changelog>
  <changelog author="lduncan@suse.com" date="1655467200">- For Tumbleweed, moved logrotate files from user-specific
  directory /etc/logrotate.d to vendor-specific
  /usr/etc/logrotate.d
  (for Stefan Schubert &lt;schubi@suse.com&gt;)</changelog>
  <changelog author="lduncan@suse.com" date="1657108800">- Modify SPEC file so systemd unit files are mode 644 (not 755)
  (bsc#1200570)</changelog>
  <changelog author="lduncan@suse.com" date="1664193600">- Update to upstream version 2.1.8, which includes some bug fixes,
  and adds the ability to build using meson. The SPEC file was
  updated to use meson.
  Also, some files have moved:
  * the "lock" file has moved from /etc/iscsi to /var/lock/iscsi
  * the "database files" have moved from /etc/iscsi to
    /var/lib/iscsi</changelog>
  <changelog author="lduncan@suse.com" date="1668600000">- Updated to latest upstream. Changes:
  * iscsid/iscsiuio: fix OOM adjustment (github issue #377)</changelog>
  <changelog author="lduncan@suse.com" date="1670414400">- Moving DB files from /etc/iscsi/* to /var/lib/iscsi/* for
  SLE-15-SP5 and forward, as is done in Tumbleweed.
- Added /etc/iscsi/README.DB-files-moved, and added SPEC file
  changes to support this, including a post-install script to
  move the DB files, only installed if DB files are moved.
- Renamed shared library from libopeniscsiusr0_2_0 to
  libopeniscsiusr0, to correctly match SONAME in library.</changelog>
  <changelog author="lduncan@suse.com" date="1671451200">- Updated SPEC file dependencies for libopeniscsiusr to avoid
  conflicting package installation.</changelog>
  <changelog author="lduncan@suse.com" date="1671624000">- Update iscsid.service so it starts iscsid.socket, if needed
  (bsc#1206132).</changelog>
  <changelog author="lduncan@suse.com" date="1677326400">- Build system: meson builds were ignoring optflags, and other
  passed in compiler options.</changelog>
  <changelog author="lduncan@suse.com" date="1681732800">- Remove "--strip" in SPEC file for meson build, so that
  debuginfo is generated. (from mwilck) (bsc#1210536)</changelog>
  <changelog author="lduncan@suse.com" date="1686830400">- Upgrade to upstream version 2.1.9 with tag "2.1.9-suse"
  (bsc#1210514), replacing open-iscsi-2.1.8-suse.tar.bz2 with
  open-iscsi-2.1.9-suse.tar.bz2, and resetting
  open-iscsi-SUSE-latest.diff.bz2. A summary from the ChangeLog
  file:
  * Fix discoveryd compiler warning
  * Sync iscsi_if.h with kernel
  * Handle old DB records correctly
  * Make IQN configuration for iscsi-iname
  * remove OFFLOAD_BOOT_SUPPORTED, which is always true
  * Use UUID for IPC, not "root"
  * do not support SHA3 for libressl
  * build meson cleanups, including changing default DB home
  * Updated README about NOPs
  * Remove "BindTo" in systemd service file
  * Some iscsiuio fixes, including licensing and memory leaks
    (bsc#1210514)
  * Small netlink fixes
  * Fix OOM adjustment
  * Some error recovery fixes
  * Some spelling fixes</changelog>
  <changelog author="lduncan@suse.com" date="1687262400">- Fix iscsiuio build version by updating iscsiuio/meson.build
  and RPM SPEC file (bsc#1210514), updating
  open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1698235200">- Updated to latest upstream, which includes (bsc#1210514):
  * several fixes to harden iscsiuio, including:
  - logging now uses syslog
  - shutdown now waits for helper threads to complete
  - netlink socket cleanup
  * some minor bug fixes, some helping builds on musl
  This updates iscsiuio version to 0.7.8.8.
  This updates open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1703073600">- Updated to latest upstream: two small changes, with no known
  functional changes:
  * Incorrect documentation for `iscsiadm -m session` print level
    (upstream issue #432)
  * Stop using deprecated inet_aton and inet_ntoa (upstream issue
    [#435])
- Also, stopped using pre-prepared tarballs for the build, instead
  now using a service file to get latest SUSE srouces directly.
  This removed these two files:
  * open-iscsi-2.1.9-suse.tar.bz2, and
  * open-iscsi-SUSE-latest.diff.bz2
  whcih were both created by a shell script, and added a service-
  file-generated file of the form:
  * open-iscsi-2.1.9.suse+TAG_OFFSET.tar.xz
  where TAG_OFFSET is of the form "COMMIT_COUNT.HASH", where
  COMMIT_COUNT is the count of commits since 2.1.9-suse (in this
  case), and HASH is the git commit hash being used.</changelog>
  <changelog author="lduncan@suse.com" date="1727697600">- Update to version 2.1.10.suse+51.fea0fde82ed1:
  * Incudes upstream version 2.1.10 plus some fixes
  * Fix firmware targets startup to always be "onboot" (#482)
    (bsc#1228084)
  * Change a discovery function to void return type (#481)
  * Fix gcc issues (#480)
  * Bugfix read specific sysfs value "off" of session attribute (#466)
  * Fix bug where abort_tmo read failures were ignored. (#467)
  * grammar nitpicks (#464)
  * Fix memory leak in iscsi_check_session_use_count (#465)
  * improve the comments in idbm_lock() (#458)
  * Make it visible when memory allocation failure (#457)
  * Better handle multiple iscsiadm commands (#453)
  * iscsiadm: allow hostnames in node-mode commands (#451)
  * Modify how workqueue priority is set (#445)
  * Fix authmethod check by printing a warning message when CHAP used and authmethod=None (#443)
  * iscsid: Rescan devices on relogin (#444)
  * Adds missing characters in README. (#440)
  * Turn off iSCSI NOP-Outs, by default.
  * fix: add usr/iscsid_req.h missinig underline (#431) (#436)</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="lduncan@suse.com" date="1744027200">- Update to version 2.1.11.suse+65.65365e1cdedb:
  * doc: fixup iscsiadm man page option for -r (#501)
  * Modify log function to print session id (#498)
  * Fix minor typo ("authenticaton") (#500)
  * Preparing for version 2.1.11 (#499)
  * iscsid: Rate limit session reopen log messages (#492)
  * IPv6 support for iBFT iSCSI boot (#493)
  * Improve iscsiadm command line parsing messages (#494)
  * More testing cleanup, and fix dprint test usage (#491)
  * Fix a typo in test/README (#486)
  * iscsid: Fix hang during login with scan=manual (#485)
  * fix 4 issues which are finded when building with clang 17 (#478)</changelog>
  <changelog author="lduncan@suse.com" date="1744027201">- Change SPEC file so that open-iscsi lock files always go
  in /run/lock/iscsi (bsc#1239107)</changelog>
  <changelog author="lduncan@suse.com" date="1744804800">- Update to version 2.1.11.suse+66.13c070123738:
  * Fix iscsid.conf NOP configuration (bsc#1240541)</changelog>
  <changelog author="lduncan@suse.com" date="1752408000">- Update to version 2.1.11.suse+73.1723affc61eb:
  * README for rpm build directory
  * Fix issue with IPv6 adapter interfaces (#508, bsc#1240969)
  * fwparam_ppc.c: Fix the calloc-transposed-args issue (#504)
  * Makefile: fix "No rule to make target 'iscsiuio/Makefile.in" issue (#506)
  * Fix typo in initiator.c (#507)
- Fixed some issues in this changes file
  * One date had incorrect format from 2014
  * Two separator lines were formatted incrrectly</changelog>
</package>
<package pkgid="a90d1adeef318e37598eccacfb8cd4bc7e53d1b68c1897d590b1ee1602fa855e" name="open-iscsi" arch="x86_64">
  <version epoch="0" ver="2.1.11" rel="150700.57.3.1"/>
  <changelog author="lduncan@suse.com" date="1652443200">- Set initiatorname in %post (at end of install), for cases
  where root is read-only at startup time (bsc#1198457)</changelog>
  <changelog author="lduncan@suse.com" date="1655467200">- For Tumbleweed, moved logrotate files from user-specific
  directory /etc/logrotate.d to vendor-specific
  /usr/etc/logrotate.d
  (for Stefan Schubert &lt;schubi@suse.com&gt;)</changelog>
  <changelog author="lduncan@suse.com" date="1657108800">- Modify SPEC file so systemd unit files are mode 644 (not 755)
  (bsc#1200570)</changelog>
  <changelog author="lduncan@suse.com" date="1664193600">- Update to upstream version 2.1.8, which includes some bug fixes,
  and adds the ability to build using meson. The SPEC file was
  updated to use meson.
  Also, some files have moved:
  * the "lock" file has moved from /etc/iscsi to /var/lock/iscsi
  * the "database files" have moved from /etc/iscsi to
    /var/lib/iscsi</changelog>
  <changelog author="lduncan@suse.com" date="1668600000">- Updated to latest upstream. Changes:
  * iscsid/iscsiuio: fix OOM adjustment (github issue #377)</changelog>
  <changelog author="lduncan@suse.com" date="1670414400">- Moving DB files from /etc/iscsi/* to /var/lib/iscsi/* for
  SLE-15-SP5 and forward, as is done in Tumbleweed.
- Added /etc/iscsi/README.DB-files-moved, and added SPEC file
  changes to support this, including a post-install script to
  move the DB files, only installed if DB files are moved.
- Renamed shared library from libopeniscsiusr0_2_0 to
  libopeniscsiusr0, to correctly match SONAME in library.</changelog>
  <changelog author="lduncan@suse.com" date="1671451200">- Updated SPEC file dependencies for libopeniscsiusr to avoid
  conflicting package installation.</changelog>
  <changelog author="lduncan@suse.com" date="1671624000">- Update iscsid.service so it starts iscsid.socket, if needed
  (bsc#1206132).</changelog>
  <changelog author="lduncan@suse.com" date="1677326400">- Build system: meson builds were ignoring optflags, and other
  passed in compiler options.</changelog>
  <changelog author="lduncan@suse.com" date="1681732800">- Remove "--strip" in SPEC file for meson build, so that
  debuginfo is generated. (from mwilck) (bsc#1210536)</changelog>
  <changelog author="lduncan@suse.com" date="1686830400">- Upgrade to upstream version 2.1.9 with tag "2.1.9-suse"
  (bsc#1210514), replacing open-iscsi-2.1.8-suse.tar.bz2 with
  open-iscsi-2.1.9-suse.tar.bz2, and resetting
  open-iscsi-SUSE-latest.diff.bz2. A summary from the ChangeLog
  file:
  * Fix discoveryd compiler warning
  * Sync iscsi_if.h with kernel
  * Handle old DB records correctly
  * Make IQN configuration for iscsi-iname
  * remove OFFLOAD_BOOT_SUPPORTED, which is always true
  * Use UUID for IPC, not "root"
  * do not support SHA3 for libressl
  * build meson cleanups, including changing default DB home
  * Updated README about NOPs
  * Remove "BindTo" in systemd service file
  * Some iscsiuio fixes, including licensing and memory leaks
    (bsc#1210514)
  * Small netlink fixes
  * Fix OOM adjustment
  * Some error recovery fixes
  * Some spelling fixes</changelog>
  <changelog author="lduncan@suse.com" date="1687262400">- Fix iscsiuio build version by updating iscsiuio/meson.build
  and RPM SPEC file (bsc#1210514), updating
  open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1698235200">- Updated to latest upstream, which includes (bsc#1210514):
  * several fixes to harden iscsiuio, including:
  - logging now uses syslog
  - shutdown now waits for helper threads to complete
  - netlink socket cleanup
  * some minor bug fixes, some helping builds on musl
  This updates iscsiuio version to 0.7.8.8.
  This updates open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1703073600">- Updated to latest upstream: two small changes, with no known
  functional changes:
  * Incorrect documentation for `iscsiadm -m session` print level
    (upstream issue #432)
  * Stop using deprecated inet_aton and inet_ntoa (upstream issue
    [#435])
- Also, stopped using pre-prepared tarballs for the build, instead
  now using a service file to get latest SUSE srouces directly.
  This removed these two files:
  * open-iscsi-2.1.9-suse.tar.bz2, and
  * open-iscsi-SUSE-latest.diff.bz2
  whcih were both created by a shell script, and added a service-
  file-generated file of the form:
  * open-iscsi-2.1.9.suse+TAG_OFFSET.tar.xz
  where TAG_OFFSET is of the form "COMMIT_COUNT.HASH", where
  COMMIT_COUNT is the count of commits since 2.1.9-suse (in this
  case), and HASH is the git commit hash being used.</changelog>
  <changelog author="lduncan@suse.com" date="1727697600">- Update to version 2.1.10.suse+51.fea0fde82ed1:
  * Incudes upstream version 2.1.10 plus some fixes
  * Fix firmware targets startup to always be "onboot" (#482)
    (bsc#1228084)
  * Change a discovery function to void return type (#481)
  * Fix gcc issues (#480)
  * Bugfix read specific sysfs value "off" of session attribute (#466)
  * Fix bug where abort_tmo read failures were ignored. (#467)
  * grammar nitpicks (#464)
  * Fix memory leak in iscsi_check_session_use_count (#465)
  * improve the comments in idbm_lock() (#458)
  * Make it visible when memory allocation failure (#457)
  * Better handle multiple iscsiadm commands (#453)
  * iscsiadm: allow hostnames in node-mode commands (#451)
  * Modify how workqueue priority is set (#445)
  * Fix authmethod check by printing a warning message when CHAP used and authmethod=None (#443)
  * iscsid: Rescan devices on relogin (#444)
  * Adds missing characters in README. (#440)
  * Turn off iSCSI NOP-Outs, by default.
  * fix: add usr/iscsid_req.h missinig underline (#431) (#436)</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="lduncan@suse.com" date="1744027200">- Update to version 2.1.11.suse+65.65365e1cdedb:
  * doc: fixup iscsiadm man page option for -r (#501)
  * Modify log function to print session id (#498)
  * Fix minor typo ("authenticaton") (#500)
  * Preparing for version 2.1.11 (#499)
  * iscsid: Rate limit session reopen log messages (#492)
  * IPv6 support for iBFT iSCSI boot (#493)
  * Improve iscsiadm command line parsing messages (#494)
  * More testing cleanup, and fix dprint test usage (#491)
  * Fix a typo in test/README (#486)
  * iscsid: Fix hang during login with scan=manual (#485)
  * fix 4 issues which are finded when building with clang 17 (#478)</changelog>
  <changelog author="lduncan@suse.com" date="1744027201">- Change SPEC file so that open-iscsi lock files always go
  in /run/lock/iscsi (bsc#1239107)</changelog>
  <changelog author="lduncan@suse.com" date="1744804800">- Update to version 2.1.11.suse+66.13c070123738:
  * Fix iscsid.conf NOP configuration (bsc#1240541)</changelog>
  <changelog author="lduncan@suse.com" date="1752408000">- Update to version 2.1.11.suse+73.1723affc61eb:
  * README for rpm build directory
  * Fix issue with IPv6 adapter interfaces (#508, bsc#1240969)
  * fwparam_ppc.c: Fix the calloc-transposed-args issue (#504)
  * Makefile: fix "No rule to make target 'iscsiuio/Makefile.in" issue (#506)
  * Fix typo in initiator.c (#507)
- Fixed some issues in this changes file
  * One date had incorrect format from 2014
  * Two separator lines were formatted incrrectly</changelog>
</package>
<package pkgid="960c38eaf1294e112750bbd4f7bf25c7e5070ae6d8db2497d3a5687a2f98d165" name="open-iscsi-devel" arch="x86_64">
  <version epoch="0" ver="2.1.11" rel="150700.57.3.1"/>
  <changelog author="lduncan@suse.com" date="1652443200">- Set initiatorname in %post (at end of install), for cases
  where root is read-only at startup time (bsc#1198457)</changelog>
  <changelog author="lduncan@suse.com" date="1655467200">- For Tumbleweed, moved logrotate files from user-specific
  directory /etc/logrotate.d to vendor-specific
  /usr/etc/logrotate.d
  (for Stefan Schubert &lt;schubi@suse.com&gt;)</changelog>
  <changelog author="lduncan@suse.com" date="1657108800">- Modify SPEC file so systemd unit files are mode 644 (not 755)
  (bsc#1200570)</changelog>
  <changelog author="lduncan@suse.com" date="1664193600">- Update to upstream version 2.1.8, which includes some bug fixes,
  and adds the ability to build using meson. The SPEC file was
  updated to use meson.
  Also, some files have moved:
  * the "lock" file has moved from /etc/iscsi to /var/lock/iscsi
  * the "database files" have moved from /etc/iscsi to
    /var/lib/iscsi</changelog>
  <changelog author="lduncan@suse.com" date="1668600000">- Updated to latest upstream. Changes:
  * iscsid/iscsiuio: fix OOM adjustment (github issue #377)</changelog>
  <changelog author="lduncan@suse.com" date="1670414400">- Moving DB files from /etc/iscsi/* to /var/lib/iscsi/* for
  SLE-15-SP5 and forward, as is done in Tumbleweed.
- Added /etc/iscsi/README.DB-files-moved, and added SPEC file
  changes to support this, including a post-install script to
  move the DB files, only installed if DB files are moved.
- Renamed shared library from libopeniscsiusr0_2_0 to
  libopeniscsiusr0, to correctly match SONAME in library.</changelog>
  <changelog author="lduncan@suse.com" date="1671451200">- Updated SPEC file dependencies for libopeniscsiusr to avoid
  conflicting package installation.</changelog>
  <changelog author="lduncan@suse.com" date="1671624000">- Update iscsid.service so it starts iscsid.socket, if needed
  (bsc#1206132).</changelog>
  <changelog author="lduncan@suse.com" date="1677326400">- Build system: meson builds were ignoring optflags, and other
  passed in compiler options.</changelog>
  <changelog author="lduncan@suse.com" date="1681732800">- Remove "--strip" in SPEC file for meson build, so that
  debuginfo is generated. (from mwilck) (bsc#1210536)</changelog>
  <changelog author="lduncan@suse.com" date="1686830400">- Upgrade to upstream version 2.1.9 with tag "2.1.9-suse"
  (bsc#1210514), replacing open-iscsi-2.1.8-suse.tar.bz2 with
  open-iscsi-2.1.9-suse.tar.bz2, and resetting
  open-iscsi-SUSE-latest.diff.bz2. A summary from the ChangeLog
  file:
  * Fix discoveryd compiler warning
  * Sync iscsi_if.h with kernel
  * Handle old DB records correctly
  * Make IQN configuration for iscsi-iname
  * remove OFFLOAD_BOOT_SUPPORTED, which is always true
  * Use UUID for IPC, not "root"
  * do not support SHA3 for libressl
  * build meson cleanups, including changing default DB home
  * Updated README about NOPs
  * Remove "BindTo" in systemd service file
  * Some iscsiuio fixes, including licensing and memory leaks
    (bsc#1210514)
  * Small netlink fixes
  * Fix OOM adjustment
  * Some error recovery fixes
  * Some spelling fixes</changelog>
  <changelog author="lduncan@suse.com" date="1687262400">- Fix iscsiuio build version by updating iscsiuio/meson.build
  and RPM SPEC file (bsc#1210514), updating
  open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1698235200">- Updated to latest upstream, which includes (bsc#1210514):
  * several fixes to harden iscsiuio, including:
  - logging now uses syslog
  - shutdown now waits for helper threads to complete
  - netlink socket cleanup
  * some minor bug fixes, some helping builds on musl
  This updates iscsiuio version to 0.7.8.8.
  This updates open-iscsi-SUSE-latest.diff.bz2</changelog>
  <changelog author="lduncan@suse.com" date="1703073600">- Updated to latest upstream: two small changes, with no known
  functional changes:
  * Incorrect documentation for `iscsiadm -m session` print level
    (upstream issue #432)
  * Stop using deprecated inet_aton and inet_ntoa (upstream issue
    [#435])
- Also, stopped using pre-prepared tarballs for the build, instead
  now using a service file to get latest SUSE srouces directly.
  This removed these two files:
  * open-iscsi-2.1.9-suse.tar.bz2, and
  * open-iscsi-SUSE-latest.diff.bz2
  whcih were both created by a shell script, and added a service-
  file-generated file of the form:
  * open-iscsi-2.1.9.suse+TAG_OFFSET.tar.xz
  where TAG_OFFSET is of the form "COMMIT_COUNT.HASH", where
  COMMIT_COUNT is the count of commits since 2.1.9-suse (in this
  case), and HASH is the git commit hash being used.</changelog>
  <changelog author="lduncan@suse.com" date="1727697600">- Update to version 2.1.10.suse+51.fea0fde82ed1:
  * Incudes upstream version 2.1.10 plus some fixes
  * Fix firmware targets startup to always be "onboot" (#482)
    (bsc#1228084)
  * Change a discovery function to void return type (#481)
  * Fix gcc issues (#480)
  * Bugfix read specific sysfs value "off" of session attribute (#466)
  * Fix bug where abort_tmo read failures were ignored. (#467)
  * grammar nitpicks (#464)
  * Fix memory leak in iscsi_check_session_use_count (#465)
  * improve the comments in idbm_lock() (#458)
  * Make it visible when memory allocation failure (#457)
  * Better handle multiple iscsiadm commands (#453)
  * iscsiadm: allow hostnames in node-mode commands (#451)
  * Modify how workqueue priority is set (#445)
  * Fix authmethod check by printing a warning message when CHAP used and authmethod=None (#443)
  * iscsid: Rescan devices on relogin (#444)
  * Adds missing characters in README. (#440)
  * Turn off iSCSI NOP-Outs, by default.
  * fix: add usr/iscsid_req.h missinig underline (#431) (#436)</changelog>
  <changelog author="dimstar@opensuse.org" date="1737547200">- Drop rcFOO symlinks for CODE16 (PED-266).</changelog>
  <changelog author="lduncan@suse.com" date="1744027200">- Update to version 2.1.11.suse+65.65365e1cdedb:
  * doc: fixup iscsiadm man page option for -r (#501)
  * Modify log function to print session id (#498)
  * Fix minor typo ("authenticaton") (#500)
  * Preparing for version 2.1.11 (#499)
  * iscsid: Rate limit session reopen log messages (#492)
  * IPv6 support for iBFT iSCSI boot (#493)
  * Improve iscsiadm command line parsing messages (#494)
  * More testing cleanup, and fix dprint test usage (#491)
  * Fix a typo in test/README (#486)
  * iscsid: Fix hang during login with scan=manual (#485)
  * fix 4 issues which are finded when building with clang 17 (#478)</changelog>
  <changelog author="lduncan@suse.com" date="1744027201">- Change SPEC file so that open-iscsi lock files always go
  in /run/lock/iscsi (bsc#1239107)</changelog>
  <changelog author="lduncan@suse.com" date="1744804800">- Update to version 2.1.11.suse+66.13c070123738:
  * Fix iscsid.conf NOP configuration (bsc#1240541)</changelog>
  <changelog author="lduncan@suse.com" date="1752408000">- Update to version 2.1.11.suse+73.1723affc61eb:
  * README for rpm build directory
  * Fix issue with IPv6 adapter interfaces (#508, bsc#1240969)
  * fwparam_ppc.c: Fix the calloc-transposed-args issue (#504)
  * Makefile: fix "No rule to make target 'iscsiuio/Makefile.in" issue (#506)
  * Fix typo in initiator.c (#507)
- Fixed some issues in this changes file
  * One date had incorrect format from 2014
  * Two separator lines were formatted incrrectly</changelog>
</package>
<package pkgid="de4123984bbe15b9c9c050498f822ab1eb4b3f31477dc78ff02d6fab72e51139" name="open-vm-tools" arch="src">
  <version epoch="0" ver="12.5.2" rel="150600.3.12.1"/>
  <changelog author="kallan@suse.com" date="1694001600">- Update to 12.3.0 (build 22234872) (boo#1214850)
  - There are no new features in the open-vm-tools 12.3.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release integrates CVE-2023-20900 without the need for a patch.
    For more information on this vulnerability and its impact on VMware
    products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0019.html.
  - A tools.conf configuration setting is available to temporaily direct
    Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
    of ignoring file systems already frozen.
  - Building of the VMware Guest Authentication Service (VGAuth) using
    "xml-security-c" and "xerces-c" is being deprecated.
  - A number of Coverity reported issues have been addressed.
  - A number of GitHub issues and pull requests have been handled.
    Please see the Resolves Issues section of the Release Notes.
  - For issues resolved in this release, see the Resolved Issues section
    of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.0 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog
- Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests
- jsc-PED-1344 - reinable building containerinfo plugin for SLES 15 SP4.
- Drop patch now contained in 12.3.0:
  + 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch
  + 0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  + 2023-20867-Remove-some-dead-code.patch
  + CVE-20230-20900.patch</changelog>
  <changelog author="meissner@suse.com" date="1695297600">- open-vm-tools is built with containerinfo plugin from 15 sp3 onwards</changelog>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697976000">- Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer
  needed, nor used (since 12.3.0 release).</changelog>
  <changelog author="kallan@suse.com" date="1698667200">- Update to 12.3.5 (build 22544099) (boo#1216670)
  - There are no new features in the open-vm-tools 12.3.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release resolves CVE-2023-34058. For more information on this
    vulnerability and its impact on VMware products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0024.html.
  - This release resolves CVE-2023-34059 which only affects open-vm-tools.
    For more information on this vulnerability, please see the Resolved
    Issues section of the Release Notes.
  - A GitHub issue has been handled. Please see the Resolved Issues section
    of the Release Notes.
  - An update to the deployPkg plugin to coordinate with recent releases
    of cloud-init for improvement for guest VM customization.
  - For issues resolved in this release, see the Resolved Issues
    &lt;https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#resolved-issues&gt;
    section of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.5 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/ChangeLog
- Drop patch now contained in 12.3.5:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="kallan@suse.com" date="1702296000">- Fix (bsc#1217796) - Fix outdated libxmlsec1 dependency version.
  Updates to open-vm-tools for SLES 12 SP4 and SP5 are now being built
  againt against libxmlsec1-1-1.2.37. Update the spec file to now require
  libxmlsec1-openssl1 &gt;= 1.2.37.</changelog>
  <changelog author="dimstar@opensuse.org" date="1703073600">- Own %{_modulesloaddir}: used to be present via udev-mini -&gt; kmod
  - &gt; suse-module-tools dependency before.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1711195200">- update to 12.4.0:
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/open-vm-tools/ChangeLog
  There are no new features in the open-vm-tools 12.4.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been handled. Please see the Resolved
    Issues section of the Release Notes.
  * A number of issues flagged by Coverity have been addressed.
  * For issues resolved in this release, see the Resolved Issues
    section of the Release Notes.</changelog>
  <changelog author="kallan@suse.com" date="1711540800">- Remove protobuf &lt; 22 dependency from spec file (bsc#1217478)
  Required linking with additional absl libraries for sle_version &gt; 150400.
- Use (boo#1222089) for updating open-vm-tools to version 12.4.0.</changelog>
  <changelog author="kallan@suse.com" date="1719835200">- Update to 12.4.5 (build 23787635) (boo#1227181)
  - There are no new features in the open-vm-tools 12.4.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - A Github pull request and associated issue has been handled. Please
    see the Resolved Issues section of the Release Notes.
  - A number of issues flagged by Coverity and ShellCheck have been
    addressed.
  - A vmtoolsd process hang related to nested logging from an RPC Channel
    error has been fixed.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see: https://github.com/vmware/open-vm-tools/releases/tag/stable-12.4.5
  Release Notes are available at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/ReleaseNotes.md
  The granular changes that have gone into the 12.4.5 release are in the ChangeLog at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/open-vm-tools/ChangeLog</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1728648000">- convert to obs_scm
- update to 12.5.0 (boo#1231826):
  There are no new features in the open-vm-tools 12.5.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been integrated. Please see the
    Resolved Issues section of the Release Notes.
  * For a more complete list of issues resolved in this release,
    see the Resolved Issues section of the Release Notes.
  For complete details, see:
  https://github.com/vmware/open-vm-tools/releases/tag/stable-12.5.0
  Release Notes are available at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/ReleaseNotes.md
  The granular changes that have gone into the 12.5.0 release are
  in the ChangeLog at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/open-vm-tools/ChangeLog</changelog>
  <changelog author="kallan@suse.com" date="1740052800">- (bsc#1237180): Ensure vmtoolsd.service, vgauthd.service, and
  vmblock-fuse.service are set to enabled by default.</changelog>
  <changelog author="kallan@suse.com" date="1740484800">- Revert previous change (Thu Feb 20 23:08:43 UTC 2025).  The proposed
  solutions was non-standard.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742472000">- remove unused pcre build dependency</changelog>
  <changelog author="kallan@suse.com" date="1743076800">- (bsc#1237180): Ensure vmtoolsd.service and vgauthd.service
  are set to enabled by default. Do this by removing vmblock-fuse.service
  from the %pre section in the spec file.  vmblock-fuse.service still
  remains in the %pre desktop section.</changelog>
  <changelog author="kallan@suse.com" date="1744804800">- (bsc#1237147): Newer version of containerd do not have the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/api.
  Update detect-suse-location.patch to point to the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/vendor/github.com/containerd/containerd/api
  to find the needed files and update the tasks.proto file to import from
  github.com/containerd/containerd/vendor/github.com/containerd/containerd/api</changelog>
  <changelog author="hsk17@mail.de" date="1746273600">- Add open-vm-tools-12.5.0-gcc15.patch from upstream to fix
  gcc15 compile time error (boo#1241938)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1747137600">- update to 12.5.2 (bsc#1243106):
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/open-vm-tools/ChangeLog
  This release resolves CVE-2025-22247. For more information on this
  vulnerability and its impact on Broadcom products, see
  VMSA-2025-0007
  https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683</changelog>
</package>
<package pkgid="8bcc3208f4f36e2f5ff1e37a0fd1b1d5a185b0d953df83a65ff1dd8614f6f88f" name="open-vm-tools" arch="x86_64">
  <version epoch="0" ver="12.5.2" rel="150600.3.12.1"/>
  <changelog author="kallan@suse.com" date="1694001600">- Update to 12.3.0 (build 22234872) (boo#1214850)
  - There are no new features in the open-vm-tools 12.3.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release integrates CVE-2023-20900 without the need for a patch.
    For more information on this vulnerability and its impact on VMware
    products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0019.html.
  - A tools.conf configuration setting is available to temporaily direct
    Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
    of ignoring file systems already frozen.
  - Building of the VMware Guest Authentication Service (VGAuth) using
    "xml-security-c" and "xerces-c" is being deprecated.
  - A number of Coverity reported issues have been addressed.
  - A number of GitHub issues and pull requests have been handled.
    Please see the Resolves Issues section of the Release Notes.
  - For issues resolved in this release, see the Resolved Issues section
    of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.0 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog
- Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests
- jsc-PED-1344 - reinable building containerinfo plugin for SLES 15 SP4.
- Drop patch now contained in 12.3.0:
  + 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch
  + 0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  + 2023-20867-Remove-some-dead-code.patch
  + CVE-20230-20900.patch</changelog>
  <changelog author="meissner@suse.com" date="1695297600">- open-vm-tools is built with containerinfo plugin from 15 sp3 onwards</changelog>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697976000">- Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer
  needed, nor used (since 12.3.0 release).</changelog>
  <changelog author="kallan@suse.com" date="1698667200">- Update to 12.3.5 (build 22544099) (boo#1216670)
  - There are no new features in the open-vm-tools 12.3.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release resolves CVE-2023-34058. For more information on this
    vulnerability and its impact on VMware products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0024.html.
  - This release resolves CVE-2023-34059 which only affects open-vm-tools.
    For more information on this vulnerability, please see the Resolved
    Issues section of the Release Notes.
  - A GitHub issue has been handled. Please see the Resolved Issues section
    of the Release Notes.
  - An update to the deployPkg plugin to coordinate with recent releases
    of cloud-init for improvement for guest VM customization.
  - For issues resolved in this release, see the Resolved Issues
    &lt;https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#resolved-issues&gt;
    section of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.5 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/ChangeLog
- Drop patch now contained in 12.3.5:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="kallan@suse.com" date="1702296000">- Fix (bsc#1217796) - Fix outdated libxmlsec1 dependency version.
  Updates to open-vm-tools for SLES 12 SP4 and SP5 are now being built
  againt against libxmlsec1-1-1.2.37. Update the spec file to now require
  libxmlsec1-openssl1 &gt;= 1.2.37.</changelog>
  <changelog author="dimstar@opensuse.org" date="1703073600">- Own %{_modulesloaddir}: used to be present via udev-mini -&gt; kmod
  - &gt; suse-module-tools dependency before.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1711195200">- update to 12.4.0:
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/open-vm-tools/ChangeLog
  There are no new features in the open-vm-tools 12.4.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been handled. Please see the Resolved
    Issues section of the Release Notes.
  * A number of issues flagged by Coverity have been addressed.
  * For issues resolved in this release, see the Resolved Issues
    section of the Release Notes.</changelog>
  <changelog author="kallan@suse.com" date="1711540800">- Remove protobuf &lt; 22 dependency from spec file (bsc#1217478)
  Required linking with additional absl libraries for sle_version &gt; 150400.
- Use (boo#1222089) for updating open-vm-tools to version 12.4.0.</changelog>
  <changelog author="kallan@suse.com" date="1719835200">- Update to 12.4.5 (build 23787635) (boo#1227181)
  - There are no new features in the open-vm-tools 12.4.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - A Github pull request and associated issue has been handled. Please
    see the Resolved Issues section of the Release Notes.
  - A number of issues flagged by Coverity and ShellCheck have been
    addressed.
  - A vmtoolsd process hang related to nested logging from an RPC Channel
    error has been fixed.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see: https://github.com/vmware/open-vm-tools/releases/tag/stable-12.4.5
  Release Notes are available at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/ReleaseNotes.md
  The granular changes that have gone into the 12.4.5 release are in the ChangeLog at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/open-vm-tools/ChangeLog</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1728648000">- convert to obs_scm
- update to 12.5.0 (boo#1231826):
  There are no new features in the open-vm-tools 12.5.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been integrated. Please see the
    Resolved Issues section of the Release Notes.
  * For a more complete list of issues resolved in this release,
    see the Resolved Issues section of the Release Notes.
  For complete details, see:
  https://github.com/vmware/open-vm-tools/releases/tag/stable-12.5.0
  Release Notes are available at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/ReleaseNotes.md
  The granular changes that have gone into the 12.5.0 release are
  in the ChangeLog at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/open-vm-tools/ChangeLog</changelog>
  <changelog author="kallan@suse.com" date="1740052800">- (bsc#1237180): Ensure vmtoolsd.service, vgauthd.service, and
  vmblock-fuse.service are set to enabled by default.</changelog>
  <changelog author="kallan@suse.com" date="1740484800">- Revert previous change (Thu Feb 20 23:08:43 UTC 2025).  The proposed
  solutions was non-standard.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742472000">- remove unused pcre build dependency</changelog>
  <changelog author="kallan@suse.com" date="1743076800">- (bsc#1237180): Ensure vmtoolsd.service and vgauthd.service
  are set to enabled by default. Do this by removing vmblock-fuse.service
  from the %pre section in the spec file.  vmblock-fuse.service still
  remains in the %pre desktop section.</changelog>
  <changelog author="kallan@suse.com" date="1744804800">- (bsc#1237147): Newer version of containerd do not have the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/api.
  Update detect-suse-location.patch to point to the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/vendor/github.com/containerd/containerd/api
  to find the needed files and update the tasks.proto file to import from
  github.com/containerd/containerd/vendor/github.com/containerd/containerd/api</changelog>
  <changelog author="hsk17@mail.de" date="1746273600">- Add open-vm-tools-12.5.0-gcc15.patch from upstream to fix
  gcc15 compile time error (boo#1241938)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1747137600">- update to 12.5.2 (bsc#1243106):
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/open-vm-tools/ChangeLog
  This release resolves CVE-2025-22247. For more information on this
  vulnerability and its impact on Broadcom products, see
  VMSA-2025-0007
  https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683</changelog>
</package>
<package pkgid="5a1ad88b44a9645bfcf24b621a9e94a7e43ab7d582c712c8a25f2588873fd4d3" name="open-vm-tools" arch="src">
  <version epoch="0" ver="13.0.0" rel="150600.3.15.1"/>
  <changelog author="meissner@suse.com" date="1695297600">- open-vm-tools is built with containerinfo plugin from 15 sp3 onwards</changelog>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697976000">- Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer
  needed, nor used (since 12.3.0 release).</changelog>
  <changelog author="kallan@suse.com" date="1698667200">- Update to 12.3.5 (build 22544099) (boo#1216670)
  - There are no new features in the open-vm-tools 12.3.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release resolves CVE-2023-34058. For more information on this
    vulnerability and its impact on VMware products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0024.html.
  - This release resolves CVE-2023-34059 which only affects open-vm-tools.
    For more information on this vulnerability, please see the Resolved
    Issues section of the Release Notes.
  - A GitHub issue has been handled. Please see the Resolved Issues section
    of the Release Notes.
  - An update to the deployPkg plugin to coordinate with recent releases
    of cloud-init for improvement for guest VM customization.
  - For issues resolved in this release, see the Resolved Issues
    &lt;https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#resolved-issues&gt;
    section of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.5 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/ChangeLog
- Drop patch now contained in 12.3.5:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="kallan@suse.com" date="1702296000">- Fix (bsc#1217796) - Fix outdated libxmlsec1 dependency version.
  Updates to open-vm-tools for SLES 12 SP4 and SP5 are now being built
  againt against libxmlsec1-1-1.2.37. Update the spec file to now require
  libxmlsec1-openssl1 &gt;= 1.2.37.</changelog>
  <changelog author="dimstar@opensuse.org" date="1703073600">- Own %{_modulesloaddir}: used to be present via udev-mini -&gt; kmod
  - &gt; suse-module-tools dependency before.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1711195200">- update to 12.4.0:
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/open-vm-tools/ChangeLog
  There are no new features in the open-vm-tools 12.4.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been handled. Please see the Resolved
    Issues section of the Release Notes.
  * A number of issues flagged by Coverity have been addressed.
  * For issues resolved in this release, see the Resolved Issues
    section of the Release Notes.</changelog>
  <changelog author="kallan@suse.com" date="1711540800">- Remove protobuf &lt; 22 dependency from spec file (bsc#1217478)
  Required linking with additional absl libraries for sle_version &gt; 150400.
- Use (boo#1222089) for updating open-vm-tools to version 12.4.0.</changelog>
  <changelog author="kallan@suse.com" date="1719835200">- Update to 12.4.5 (build 23787635) (boo#1227181)
  - There are no new features in the open-vm-tools 12.4.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - A Github pull request and associated issue has been handled. Please
    see the Resolved Issues section of the Release Notes.
  - A number of issues flagged by Coverity and ShellCheck have been
    addressed.
  - A vmtoolsd process hang related to nested logging from an RPC Channel
    error has been fixed.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see: https://github.com/vmware/open-vm-tools/releases/tag/stable-12.4.5
  Release Notes are available at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/ReleaseNotes.md
  The granular changes that have gone into the 12.4.5 release are in the ChangeLog at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/open-vm-tools/ChangeLog</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1728648000">- convert to obs_scm
- update to 12.5.0 (boo#1231826):
  There are no new features in the open-vm-tools 12.5.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been integrated. Please see the
    Resolved Issues section of the Release Notes.
  * For a more complete list of issues resolved in this release,
    see the Resolved Issues section of the Release Notes.
  For complete details, see:
  https://github.com/vmware/open-vm-tools/releases/tag/stable-12.5.0
  Release Notes are available at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/ReleaseNotes.md
  The granular changes that have gone into the 12.5.0 release are
  in the ChangeLog at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/open-vm-tools/ChangeLog</changelog>
  <changelog author="kallan@suse.com" date="1740052800">- (bsc#1237180): Ensure vmtoolsd.service, vgauthd.service, and
  vmblock-fuse.service are set to enabled by default.</changelog>
  <changelog author="kallan@suse.com" date="1740484800">- Revert previous change (Thu Feb 20 23:08:43 UTC 2025).  The proposed
  solutions was non-standard.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742472000">- remove unused pcre build dependency</changelog>
  <changelog author="kallan@suse.com" date="1743076800">- (bsc#1237180): Ensure vmtoolsd.service and vgauthd.service
  are set to enabled by default. Do this by removing vmblock-fuse.service
  from the %pre section in the spec file.  vmblock-fuse.service still
  remains in the %pre desktop section.</changelog>
  <changelog author="kallan@suse.com" date="1744804800">- (bsc#1237147): Newer version of containerd do not have the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/api.
  Update detect-suse-location.patch to point to the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/vendor/github.com/containerd/containerd/api
  to find the needed files and update the tasks.proto file to import from
  github.com/containerd/containerd/vendor/github.com/containerd/containerd/api</changelog>
  <changelog author="hsk17@mail.de" date="1746273600">- Add open-vm-tools-12.5.0-gcc15.patch from upstream to fix
  gcc15 compile time error (boo#1241938)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1747137600">- update to 12.5.2 (bsc#1243106):
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/open-vm-tools/ChangeLog
  This release resolves CVE-2025-22247. For more information on this
  vulnerability and its impact on Broadcom products, see
  VMSA-2025-0007
  https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683</changelog>
  <changelog author="kallan@suse.com" date="1750420800">- Update to open-vm-tools 13.0.0 based on build 24696409. (boo#1245169):
  There are no new features in the open-vm-tools 13.0.0 release.  This is
  primarily a maintenance release that addresses a few issues, including:
  - The vm-support script has been updated to collect the open-vm-tools log
    files from the Linux guest and information from the systemd journal.
  - Github pull requests has been integrated and issues fixed.  Please see
    the Resolved Issues section of the Release Notes.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-13.0.0
  Release Notes are available at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/ReleaseNotes.md
  The granular changes that have gone into the 13.0.0 release are in the
  ChangeLog at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/open-vm-tools/ChangeLog
- Add patch:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  Currently the "telinit 6" command is used to reboot a Linux VM
  following Guest OS Customization.  As the classic Linux init system,
  SysVinit, is deprecated in favor of a newer init system, systemd,
  the telinit command may not be available on the base Linux OS.
  This change adds support to Guest OS Customization for the systemd init
  system.  If the modern init system, systemd, is available, then a
  "systemctl reboot" command will be used to trigger reboot.  Otherwise,
  the "telinit 6" command will be used assuming the traditional init
  system, SysVinit, is still available.
- Drop patch now contained in 13.0.0:
  open-vm-tools-12.5.0-gcc15.patch
- Ran /usr/lib/obs/service/source_validators/helpers/fix_changelog to fix changes
  file where source validator was failing.</changelog>
</package>
<package pkgid="53d411038d89f629e62dfaf5e4a3023eea7111930388af3eefcc0cdf5412f668" name="open-vm-tools" arch="x86_64">
  <version epoch="0" ver="13.0.0" rel="150600.3.15.1"/>
  <changelog author="meissner@suse.com" date="1695297600">- open-vm-tools is built with containerinfo plugin from 15 sp3 onwards</changelog>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697976000">- Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer
  needed, nor used (since 12.3.0 release).</changelog>
  <changelog author="kallan@suse.com" date="1698667200">- Update to 12.3.5 (build 22544099) (boo#1216670)
  - There are no new features in the open-vm-tools 12.3.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release resolves CVE-2023-34058. For more information on this
    vulnerability and its impact on VMware products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0024.html.
  - This release resolves CVE-2023-34059 which only affects open-vm-tools.
    For more information on this vulnerability, please see the Resolved
    Issues section of the Release Notes.
  - A GitHub issue has been handled. Please see the Resolved Issues section
    of the Release Notes.
  - An update to the deployPkg plugin to coordinate with recent releases
    of cloud-init for improvement for guest VM customization.
  - For issues resolved in this release, see the Resolved Issues
    &lt;https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#resolved-issues&gt;
    section of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.5 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/ChangeLog
- Drop patch now contained in 12.3.5:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="kallan@suse.com" date="1702296000">- Fix (bsc#1217796) - Fix outdated libxmlsec1 dependency version.
  Updates to open-vm-tools for SLES 12 SP4 and SP5 are now being built
  againt against libxmlsec1-1-1.2.37. Update the spec file to now require
  libxmlsec1-openssl1 &gt;= 1.2.37.</changelog>
  <changelog author="dimstar@opensuse.org" date="1703073600">- Own %{_modulesloaddir}: used to be present via udev-mini -&gt; kmod
  - &gt; suse-module-tools dependency before.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1711195200">- update to 12.4.0:
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/open-vm-tools/ChangeLog
  There are no new features in the open-vm-tools 12.4.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been handled. Please see the Resolved
    Issues section of the Release Notes.
  * A number of issues flagged by Coverity have been addressed.
  * For issues resolved in this release, see the Resolved Issues
    section of the Release Notes.</changelog>
  <changelog author="kallan@suse.com" date="1711540800">- Remove protobuf &lt; 22 dependency from spec file (bsc#1217478)
  Required linking with additional absl libraries for sle_version &gt; 150400.
- Use (boo#1222089) for updating open-vm-tools to version 12.4.0.</changelog>
  <changelog author="kallan@suse.com" date="1719835200">- Update to 12.4.5 (build 23787635) (boo#1227181)
  - There are no new features in the open-vm-tools 12.4.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - A Github pull request and associated issue has been handled. Please
    see the Resolved Issues section of the Release Notes.
  - A number of issues flagged by Coverity and ShellCheck have been
    addressed.
  - A vmtoolsd process hang related to nested logging from an RPC Channel
    error has been fixed.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see: https://github.com/vmware/open-vm-tools/releases/tag/stable-12.4.5
  Release Notes are available at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/ReleaseNotes.md
  The granular changes that have gone into the 12.4.5 release are in the ChangeLog at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/open-vm-tools/ChangeLog</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1728648000">- convert to obs_scm
- update to 12.5.0 (boo#1231826):
  There are no new features in the open-vm-tools 12.5.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been integrated. Please see the
    Resolved Issues section of the Release Notes.
  * For a more complete list of issues resolved in this release,
    see the Resolved Issues section of the Release Notes.
  For complete details, see:
  https://github.com/vmware/open-vm-tools/releases/tag/stable-12.5.0
  Release Notes are available at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/ReleaseNotes.md
  The granular changes that have gone into the 12.5.0 release are
  in the ChangeLog at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/open-vm-tools/ChangeLog</changelog>
  <changelog author="kallan@suse.com" date="1740052800">- (bsc#1237180): Ensure vmtoolsd.service, vgauthd.service, and
  vmblock-fuse.service are set to enabled by default.</changelog>
  <changelog author="kallan@suse.com" date="1740484800">- Revert previous change (Thu Feb 20 23:08:43 UTC 2025).  The proposed
  solutions was non-standard.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742472000">- remove unused pcre build dependency</changelog>
  <changelog author="kallan@suse.com" date="1743076800">- (bsc#1237180): Ensure vmtoolsd.service and vgauthd.service
  are set to enabled by default. Do this by removing vmblock-fuse.service
  from the %pre section in the spec file.  vmblock-fuse.service still
  remains in the %pre desktop section.</changelog>
  <changelog author="kallan@suse.com" date="1744804800">- (bsc#1237147): Newer version of containerd do not have the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/api.
  Update detect-suse-location.patch to point to the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/vendor/github.com/containerd/containerd/api
  to find the needed files and update the tasks.proto file to import from
  github.com/containerd/containerd/vendor/github.com/containerd/containerd/api</changelog>
  <changelog author="hsk17@mail.de" date="1746273600">- Add open-vm-tools-12.5.0-gcc15.patch from upstream to fix
  gcc15 compile time error (boo#1241938)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1747137600">- update to 12.5.2 (bsc#1243106):
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/open-vm-tools/ChangeLog
  This release resolves CVE-2025-22247. For more information on this
  vulnerability and its impact on Broadcom products, see
  VMSA-2025-0007
  https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683</changelog>
  <changelog author="kallan@suse.com" date="1750420800">- Update to open-vm-tools 13.0.0 based on build 24696409. (boo#1245169):
  There are no new features in the open-vm-tools 13.0.0 release.  This is
  primarily a maintenance release that addresses a few issues, including:
  - The vm-support script has been updated to collect the open-vm-tools log
    files from the Linux guest and information from the systemd journal.
  - Github pull requests has been integrated and issues fixed.  Please see
    the Resolved Issues section of the Release Notes.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-13.0.0
  Release Notes are available at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/ReleaseNotes.md
  The granular changes that have gone into the 13.0.0 release are in the
  ChangeLog at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/open-vm-tools/ChangeLog
- Add patch:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  Currently the "telinit 6" command is used to reboot a Linux VM
  following Guest OS Customization.  As the classic Linux init system,
  SysVinit, is deprecated in favor of a newer init system, systemd,
  the telinit command may not be available on the base Linux OS.
  This change adds support to Guest OS Customization for the systemd init
  system.  If the modern init system, systemd, is available, then a
  "systemctl reboot" command will be used to trigger reboot.  Otherwise,
  the "telinit 6" command will be used assuming the traditional init
  system, SysVinit, is still available.
- Drop patch now contained in 13.0.0:
  open-vm-tools-12.5.0-gcc15.patch
- Ran /usr/lib/obs/service/source_validators/helpers/fix_changelog to fix changes
  file where source validator was failing.</changelog>
</package>
<package pkgid="a8930ba1b39dd00b2219f57eb4e9895ee5134ff2c0a137982b7a959173ecfb3d" name="open-vm-tools" arch="src">
  <version epoch="0" ver="13.0.0" rel="150600.3.18.1"/>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697976000">- Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer
  needed, nor used (since 12.3.0 release).</changelog>
  <changelog author="kallan@suse.com" date="1698667200">- Update to 12.3.5 (build 22544099) (boo#1216670)
  - There are no new features in the open-vm-tools 12.3.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release resolves CVE-2023-34058. For more information on this
    vulnerability and its impact on VMware products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0024.html.
  - This release resolves CVE-2023-34059 which only affects open-vm-tools.
    For more information on this vulnerability, please see the Resolved
    Issues section of the Release Notes.
  - A GitHub issue has been handled. Please see the Resolved Issues section
    of the Release Notes.
  - An update to the deployPkg plugin to coordinate with recent releases
    of cloud-init for improvement for guest VM customization.
  - For issues resolved in this release, see the Resolved Issues
    &lt;https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#resolved-issues&gt;
    section of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.5 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/ChangeLog
- Drop patch now contained in 12.3.5:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="kallan@suse.com" date="1702296000">- Fix (bsc#1217796) - Fix outdated libxmlsec1 dependency version.
  Updates to open-vm-tools for SLES 12 SP4 and SP5 are now being built
  againt against libxmlsec1-1-1.2.37. Update the spec file to now require
  libxmlsec1-openssl1 &gt;= 1.2.37.</changelog>
  <changelog author="dimstar@opensuse.org" date="1703073600">- Own %{_modulesloaddir}: used to be present via udev-mini -&gt; kmod
  - &gt; suse-module-tools dependency before.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1711195200">- update to 12.4.0:
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/open-vm-tools/ChangeLog
  There are no new features in the open-vm-tools 12.4.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been handled. Please see the Resolved
    Issues section of the Release Notes.
  * A number of issues flagged by Coverity have been addressed.
  * For issues resolved in this release, see the Resolved Issues
    section of the Release Notes.</changelog>
  <changelog author="kallan@suse.com" date="1711540800">- Remove protobuf &lt; 22 dependency from spec file (bsc#1217478)
  Required linking with additional absl libraries for sle_version &gt; 150400.
- Use (boo#1222089) for updating open-vm-tools to version 12.4.0.</changelog>
  <changelog author="kallan@suse.com" date="1719835200">- Update to 12.4.5 (build 23787635) (boo#1227181)
  - There are no new features in the open-vm-tools 12.4.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - A Github pull request and associated issue has been handled. Please
    see the Resolved Issues section of the Release Notes.
  - A number of issues flagged by Coverity and ShellCheck have been
    addressed.
  - A vmtoolsd process hang related to nested logging from an RPC Channel
    error has been fixed.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see: https://github.com/vmware/open-vm-tools/releases/tag/stable-12.4.5
  Release Notes are available at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/ReleaseNotes.md
  The granular changes that have gone into the 12.4.5 release are in the ChangeLog at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/open-vm-tools/ChangeLog</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1728648000">- convert to obs_scm
- update to 12.5.0 (boo#1231826):
  There are no new features in the open-vm-tools 12.5.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been integrated. Please see the
    Resolved Issues section of the Release Notes.
  * For a more complete list of issues resolved in this release,
    see the Resolved Issues section of the Release Notes.
  For complete details, see:
  https://github.com/vmware/open-vm-tools/releases/tag/stable-12.5.0
  Release Notes are available at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/ReleaseNotes.md
  The granular changes that have gone into the 12.5.0 release are
  in the ChangeLog at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/open-vm-tools/ChangeLog</changelog>
  <changelog author="kallan@suse.com" date="1740052800">- (bsc#1237180): Ensure vmtoolsd.service, vgauthd.service, and
  vmblock-fuse.service are set to enabled by default.</changelog>
  <changelog author="kallan@suse.com" date="1740484800">- Revert previous change (Thu Feb 20 23:08:43 UTC 2025).  The proposed
  solutions was non-standard.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742472000">- remove unused pcre build dependency</changelog>
  <changelog author="kallan@suse.com" date="1743076800">- (bsc#1237180): Ensure vmtoolsd.service and vgauthd.service
  are set to enabled by default. Do this by removing vmblock-fuse.service
  from the %pre section in the spec file.  vmblock-fuse.service still
  remains in the %pre desktop section.</changelog>
  <changelog author="kallan@suse.com" date="1744804800">- (bsc#1237147): Newer version of containerd do not have the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/api.
  Update detect-suse-location.patch to point to the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/vendor/github.com/containerd/containerd/api
  to find the needed files and update the tasks.proto file to import from
  github.com/containerd/containerd/vendor/github.com/containerd/containerd/api</changelog>
  <changelog author="hsk17@mail.de" date="1746273600">- Add open-vm-tools-12.5.0-gcc15.patch from upstream to fix
  gcc15 compile time error (boo#1241938)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1747137600">- update to 12.5.2 (bsc#1243106):
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/open-vm-tools/ChangeLog
  This release resolves CVE-2025-22247. For more information on this
  vulnerability and its impact on Broadcom products, see
  VMSA-2025-0007
  https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683</changelog>
  <changelog author="kallan@suse.com" date="1750420800">- Update to open-vm-tools 13.0.0 based on build 24696409. (boo#1245169):
  There are no new features in the open-vm-tools 13.0.0 release.  This is
  primarily a maintenance release that addresses a few issues, including:
  - The vm-support script has been updated to collect the open-vm-tools log
    files from the Linux guest and information from the systemd journal.
  - Github pull requests has been integrated and issues fixed.  Please see
    the Resolved Issues section of the Release Notes.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-13.0.0
  Release Notes are available at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/ReleaseNotes.md
  The granular changes that have gone into the 13.0.0 release are in the
  ChangeLog at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/open-vm-tools/ChangeLog
- Add patch:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  Currently the "telinit 6" command is used to reboot a Linux VM
  following Guest OS Customization.  As the classic Linux init system,
  SysVinit, is deprecated in favor of a newer init system, systemd,
  the telinit command may not be available on the base Linux OS.
  This change adds support to Guest OS Customization for the systemd init
  system.  If the modern init system, systemd, is available, then a
  "systemctl reboot" command will be used to trigger reboot.  Otherwise,
  the "telinit 6" command will be used assuming the traditional init
  system, SysVinit, is still available.
- Drop patch now contained in 13.0.0:
  open-vm-tools-12.5.0-gcc15.patch
- Ran /usr/lib/obs/service/source_validators/helpers/fix_changelog to fix changes
  file where source validator was failing.</changelog>
  <changelog author="kallan@suse.com" date="1758628800">- Fix (bsc#1250373 (CVE-2025-41244) - VUL-0: contains a local privilege
  escalation vulnerability.
  + Add patch:
  - CVE-2025-41244-1240-1300-SDMP.patch</changelog>
</package>
<package pkgid="07bd9b108257c2be00d04bcad8d2fa7952df41a0a0dab9b3f9e24679d6b18386" name="open-vm-tools" arch="x86_64">
  <version epoch="0" ver="13.0.0" rel="150600.3.18.1"/>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697976000">- Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer
  needed, nor used (since 12.3.0 release).</changelog>
  <changelog author="kallan@suse.com" date="1698667200">- Update to 12.3.5 (build 22544099) (boo#1216670)
  - There are no new features in the open-vm-tools 12.3.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release resolves CVE-2023-34058. For more information on this
    vulnerability and its impact on VMware products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0024.html.
  - This release resolves CVE-2023-34059 which only affects open-vm-tools.
    For more information on this vulnerability, please see the Resolved
    Issues section of the Release Notes.
  - A GitHub issue has been handled. Please see the Resolved Issues section
    of the Release Notes.
  - An update to the deployPkg plugin to coordinate with recent releases
    of cloud-init for improvement for guest VM customization.
  - For issues resolved in this release, see the Resolved Issues
    &lt;https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#resolved-issues&gt;
    section of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.5 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/ChangeLog
- Drop patch now contained in 12.3.5:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="kallan@suse.com" date="1702296000">- Fix (bsc#1217796) - Fix outdated libxmlsec1 dependency version.
  Updates to open-vm-tools for SLES 12 SP4 and SP5 are now being built
  againt against libxmlsec1-1-1.2.37. Update the spec file to now require
  libxmlsec1-openssl1 &gt;= 1.2.37.</changelog>
  <changelog author="dimstar@opensuse.org" date="1703073600">- Own %{_modulesloaddir}: used to be present via udev-mini -&gt; kmod
  - &gt; suse-module-tools dependency before.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1711195200">- update to 12.4.0:
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/open-vm-tools/ChangeLog
  There are no new features in the open-vm-tools 12.4.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been handled. Please see the Resolved
    Issues section of the Release Notes.
  * A number of issues flagged by Coverity have been addressed.
  * For issues resolved in this release, see the Resolved Issues
    section of the Release Notes.</changelog>
  <changelog author="kallan@suse.com" date="1711540800">- Remove protobuf &lt; 22 dependency from spec file (bsc#1217478)
  Required linking with additional absl libraries for sle_version &gt; 150400.
- Use (boo#1222089) for updating open-vm-tools to version 12.4.0.</changelog>
  <changelog author="kallan@suse.com" date="1719835200">- Update to 12.4.5 (build 23787635) (boo#1227181)
  - There are no new features in the open-vm-tools 12.4.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - A Github pull request and associated issue has been handled. Please
    see the Resolved Issues section of the Release Notes.
  - A number of issues flagged by Coverity and ShellCheck have been
    addressed.
  - A vmtoolsd process hang related to nested logging from an RPC Channel
    error has been fixed.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see: https://github.com/vmware/open-vm-tools/releases/tag/stable-12.4.5
  Release Notes are available at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/ReleaseNotes.md
  The granular changes that have gone into the 12.4.5 release are in the ChangeLog at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/open-vm-tools/ChangeLog</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1728648000">- convert to obs_scm
- update to 12.5.0 (boo#1231826):
  There are no new features in the open-vm-tools 12.5.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been integrated. Please see the
    Resolved Issues section of the Release Notes.
  * For a more complete list of issues resolved in this release,
    see the Resolved Issues section of the Release Notes.
  For complete details, see:
  https://github.com/vmware/open-vm-tools/releases/tag/stable-12.5.0
  Release Notes are available at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/ReleaseNotes.md
  The granular changes that have gone into the 12.5.0 release are
  in the ChangeLog at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/open-vm-tools/ChangeLog</changelog>
  <changelog author="kallan@suse.com" date="1740052800">- (bsc#1237180): Ensure vmtoolsd.service, vgauthd.service, and
  vmblock-fuse.service are set to enabled by default.</changelog>
  <changelog author="kallan@suse.com" date="1740484800">- Revert previous change (Thu Feb 20 23:08:43 UTC 2025).  The proposed
  solutions was non-standard.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742472000">- remove unused pcre build dependency</changelog>
  <changelog author="kallan@suse.com" date="1743076800">- (bsc#1237180): Ensure vmtoolsd.service and vgauthd.service
  are set to enabled by default. Do this by removing vmblock-fuse.service
  from the %pre section in the spec file.  vmblock-fuse.service still
  remains in the %pre desktop section.</changelog>
  <changelog author="kallan@suse.com" date="1744804800">- (bsc#1237147): Newer version of containerd do not have the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/api.
  Update detect-suse-location.patch to point to the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/vendor/github.com/containerd/containerd/api
  to find the needed files and update the tasks.proto file to import from
  github.com/containerd/containerd/vendor/github.com/containerd/containerd/api</changelog>
  <changelog author="hsk17@mail.de" date="1746273600">- Add open-vm-tools-12.5.0-gcc15.patch from upstream to fix
  gcc15 compile time error (boo#1241938)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1747137600">- update to 12.5.2 (bsc#1243106):
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/open-vm-tools/ChangeLog
  This release resolves CVE-2025-22247. For more information on this
  vulnerability and its impact on Broadcom products, see
  VMSA-2025-0007
  https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683</changelog>
  <changelog author="kallan@suse.com" date="1750420800">- Update to open-vm-tools 13.0.0 based on build 24696409. (boo#1245169):
  There are no new features in the open-vm-tools 13.0.0 release.  This is
  primarily a maintenance release that addresses a few issues, including:
  - The vm-support script has been updated to collect the open-vm-tools log
    files from the Linux guest and information from the systemd journal.
  - Github pull requests has been integrated and issues fixed.  Please see
    the Resolved Issues section of the Release Notes.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-13.0.0
  Release Notes are available at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/ReleaseNotes.md
  The granular changes that have gone into the 13.0.0 release are in the
  ChangeLog at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/open-vm-tools/ChangeLog
- Add patch:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  Currently the "telinit 6" command is used to reboot a Linux VM
  following Guest OS Customization.  As the classic Linux init system,
  SysVinit, is deprecated in favor of a newer init system, systemd,
  the telinit command may not be available on the base Linux OS.
  This change adds support to Guest OS Customization for the systemd init
  system.  If the modern init system, systemd, is available, then a
  "systemctl reboot" command will be used to trigger reboot.  Otherwise,
  the "telinit 6" command will be used assuming the traditional init
  system, SysVinit, is still available.
- Drop patch now contained in 13.0.0:
  open-vm-tools-12.5.0-gcc15.patch
- Ran /usr/lib/obs/service/source_validators/helpers/fix_changelog to fix changes
  file where source validator was failing.</changelog>
  <changelog author="kallan@suse.com" date="1758628800">- Fix (bsc#1250373 (CVE-2025-41244) - VUL-0: contains a local privilege
  escalation vulnerability.
  + Add patch:
  - CVE-2025-41244-1240-1300-SDMP.patch</changelog>
</package>
<package pkgid="3cf2b46e6242464ee414feab51cb58f496dc8e70a400282b5c7863966f3f9f53" name="open-vm-tools" arch="src">
  <version epoch="0" ver="13.0.10" rel="150600.3.24.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1697976000">- Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer
  needed, nor used (since 12.3.0 release).</changelog>
  <changelog author="kallan@suse.com" date="1698667200">- Update to 12.3.5 (build 22544099) (boo#1216670)
  - There are no new features in the open-vm-tools 12.3.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release resolves CVE-2023-34058. For more information on this
    vulnerability and its impact on VMware products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0024.html.
  - This release resolves CVE-2023-34059 which only affects open-vm-tools.
    For more information on this vulnerability, please see the Resolved
    Issues section of the Release Notes.
  - A GitHub issue has been handled. Please see the Resolved Issues section
    of the Release Notes.
  - An update to the deployPkg plugin to coordinate with recent releases
    of cloud-init for improvement for guest VM customization.
  - For issues resolved in this release, see the Resolved Issues
    &lt;https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#resolved-issues&gt;
    section of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.5 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/ChangeLog
- Drop patch now contained in 12.3.5:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="kallan@suse.com" date="1702296000">- Fix (bsc#1217796) - Fix outdated libxmlsec1 dependency version.
  Updates to open-vm-tools for SLES 12 SP4 and SP5 are now being built
  againt against libxmlsec1-1-1.2.37. Update the spec file to now require
  libxmlsec1-openssl1 &gt;= 1.2.37.</changelog>
  <changelog author="dimstar@opensuse.org" date="1703073600">- Own %{_modulesloaddir}: used to be present via udev-mini -&gt; kmod
  - &gt; suse-module-tools dependency before.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1711195200">- update to 12.4.0:
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/open-vm-tools/ChangeLog
  There are no new features in the open-vm-tools 12.4.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been handled. Please see the Resolved
    Issues section of the Release Notes.
  * A number of issues flagged by Coverity have been addressed.
  * For issues resolved in this release, see the Resolved Issues
    section of the Release Notes.</changelog>
  <changelog author="kallan@suse.com" date="1711540800">- Remove protobuf &lt; 22 dependency from spec file (bsc#1217478)
  Required linking with additional absl libraries for sle_version &gt; 150400.
- Use (boo#1222089) for updating open-vm-tools to version 12.4.0.</changelog>
  <changelog author="kallan@suse.com" date="1719835200">- Update to 12.4.5 (build 23787635) (boo#1227181)
  - There are no new features in the open-vm-tools 12.4.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - A Github pull request and associated issue has been handled. Please
    see the Resolved Issues section of the Release Notes.
  - A number of issues flagged by Coverity and ShellCheck have been
    addressed.
  - A vmtoolsd process hang related to nested logging from an RPC Channel
    error has been fixed.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see: https://github.com/vmware/open-vm-tools/releases/tag/stable-12.4.5
  Release Notes are available at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/ReleaseNotes.md
  The granular changes that have gone into the 12.4.5 release are in the ChangeLog at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/open-vm-tools/ChangeLog</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1728648000">- convert to obs_scm
- update to 12.5.0 (boo#1231826):
  There are no new features in the open-vm-tools 12.5.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been integrated. Please see the
    Resolved Issues section of the Release Notes.
  * For a more complete list of issues resolved in this release,
    see the Resolved Issues section of the Release Notes.
  For complete details, see:
  https://github.com/vmware/open-vm-tools/releases/tag/stable-12.5.0
  Release Notes are available at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/ReleaseNotes.md
  The granular changes that have gone into the 12.5.0 release are
  in the ChangeLog at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/open-vm-tools/ChangeLog</changelog>
  <changelog author="kallan@suse.com" date="1740052800">- (bsc#1237180): Ensure vmtoolsd.service, vgauthd.service, and
  vmblock-fuse.service are set to enabled by default.</changelog>
  <changelog author="kallan@suse.com" date="1740484800">- Revert previous change (Thu Feb 20 23:08:43 UTC 2025).  The proposed
  solutions was non-standard.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742472000">- remove unused pcre build dependency</changelog>
  <changelog author="kallan@suse.com" date="1743076800">- (bsc#1237180): Ensure vmtoolsd.service and vgauthd.service
  are set to enabled by default. Do this by removing vmblock-fuse.service
  from the %pre section in the spec file.  vmblock-fuse.service still
  remains in the %pre desktop section.</changelog>
  <changelog author="kallan@suse.com" date="1744804800">- (bsc#1237147): Newer version of containerd do not have the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/api.
  Update detect-suse-location.patch to point to the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/vendor/github.com/containerd/containerd/api
  to find the needed files and update the tasks.proto file to import from
  github.com/containerd/containerd/vendor/github.com/containerd/containerd/api</changelog>
  <changelog author="hsk17@mail.de" date="1746273600">- Add open-vm-tools-12.5.0-gcc15.patch from upstream to fix
  gcc15 compile time error (boo#1241938)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1747137600">- update to 12.5.2 (bsc#1243106):
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/open-vm-tools/ChangeLog
  This release resolves CVE-2025-22247. For more information on this
  vulnerability and its impact on Broadcom products, see
  VMSA-2025-0007
  https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683</changelog>
  <changelog author="kallan@suse.com" date="1750420800">- Update to open-vm-tools 13.0.0 based on build 24696409. (boo#1245169):
  There are no new features in the open-vm-tools 13.0.0 release.  This is
  primarily a maintenance release that addresses a few issues, including:
  - The vm-support script has been updated to collect the open-vm-tools log
    files from the Linux guest and information from the systemd journal.
  - Github pull requests has been integrated and issues fixed.  Please see
    the Resolved Issues section of the Release Notes.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-13.0.0
  Release Notes are available at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/ReleaseNotes.md
  The granular changes that have gone into the 13.0.0 release are in the
  ChangeLog at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/open-vm-tools/ChangeLog
- Add patch:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  Currently the "telinit 6" command is used to reboot a Linux VM
  following Guest OS Customization.  As the classic Linux init system,
  SysVinit, is deprecated in favor of a newer init system, systemd,
  the telinit command may not be available on the base Linux OS.
  This change adds support to Guest OS Customization for the systemd init
  system.  If the modern init system, systemd, is available, then a
  "systemctl reboot" command will be used to trigger reboot.  Otherwise,
  the "telinit 6" command will be used assuming the traditional init
  system, SysVinit, is still available.
- Drop patch now contained in 13.0.0:
  open-vm-tools-12.5.0-gcc15.patch
- Ran /usr/lib/obs/service/source_validators/helpers/fix_changelog to fix changes
  file where source validator was failing.</changelog>
  <changelog author="kallan@suse.com" date="1758628800">- Fix (bsc#1250373 (CVE-2025-41244) - VUL-0: contains a local privilege
  escalation vulnerability.
  + Add patch:
  - CVE-2025-41244-1240-1300-SDMP.patch</changelog>
  <changelog author="kallan@suse.com" date="1759320000">- Update to open-vm-tools 13.0.5 based on build 24915695. (boo#1250692):
  Please refer to the Release Notes at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/ReleaseNotes.md.
  The granular changes that have gone into the open-vm-tools 13.0.5 release
  are in the ChangeLog at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/open-vm-tools/ChangeLog.
  There are no new features in the open-vm-tools 13.0.5 release. This is
  primarily a maintenance release that addresses a security issue.
  This release resolves and includes the patch for CVE-2025-41244. For more
  information on this vulnerability and its impact on Broadcom products,
  see VMSA-2025-0015.
  A patch to address CVE-2025-41244 on earlier open-vm-tools releases is
  provided to the Linux community at CVE-2025-41244.patch.
  A minor enhancement has been made for Guest OS Customization. The
  DeployPkg plugin has been updated to use "systemctl reboot", if available.
  For a more complete list of issues addressed in this release, see the
  What's New and Resolved Issues section of the Release Notes.
- Drop patch now contained in 13.0.5:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  CVE-2025-41244-1240-1300-SDMP.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1769515200">- update to 13.0.10 based on build 25056151: (boo#1257357):
  Please refer to the Release Notes at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.10/ReleaseNotes.md.
  The granular changes that have gone into the open-vm-tools
  13.0.10 release are in the ChangeLog at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.10/open-vm-tools/ChangeLog.
  There are no new features in the open-vm-tools 13.0.10 release.
  This is primarily a maintenance release that addresses a fix.
  A minor enhancement has been made for Guest OS Customization. The
  DeployPkg plugin has been updated to handle a new cloud-init
  error code that signals a recoverable error and allow cloud-init
  to finish running.
  For a more complete description of what's new in this release,
  see the What's New and Resolved Issues sections of the Release
  Notes.</changelog>
</package>
<package pkgid="0ccf304f32eb60f3eee58cf705528c889a1f7643aaad63d553e411a913313964" name="open-vm-tools" arch="x86_64">
  <version epoch="0" ver="13.0.10" rel="150600.3.24.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1697976000">- Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer
  needed, nor used (since 12.3.0 release).</changelog>
  <changelog author="kallan@suse.com" date="1698667200">- Update to 12.3.5 (build 22544099) (boo#1216670)
  - There are no new features in the open-vm-tools 12.3.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release resolves CVE-2023-34058. For more information on this
    vulnerability and its impact on VMware products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0024.html.
  - This release resolves CVE-2023-34059 which only affects open-vm-tools.
    For more information on this vulnerability, please see the Resolved
    Issues section of the Release Notes.
  - A GitHub issue has been handled. Please see the Resolved Issues section
    of the Release Notes.
  - An update to the deployPkg plugin to coordinate with recent releases
    of cloud-init for improvement for guest VM customization.
  - For issues resolved in this release, see the Resolved Issues
    &lt;https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#resolved-issues&gt;
    section of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.5 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/ChangeLog
- Drop patch now contained in 12.3.5:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="kallan@suse.com" date="1702296000">- Fix (bsc#1217796) - Fix outdated libxmlsec1 dependency version.
  Updates to open-vm-tools for SLES 12 SP4 and SP5 are now being built
  againt against libxmlsec1-1-1.2.37. Update the spec file to now require
  libxmlsec1-openssl1 &gt;= 1.2.37.</changelog>
  <changelog author="dimstar@opensuse.org" date="1703073600">- Own %{_modulesloaddir}: used to be present via udev-mini -&gt; kmod
  - &gt; suse-module-tools dependency before.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1711195200">- update to 12.4.0:
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/open-vm-tools/ChangeLog
  There are no new features in the open-vm-tools 12.4.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been handled. Please see the Resolved
    Issues section of the Release Notes.
  * A number of issues flagged by Coverity have been addressed.
  * For issues resolved in this release, see the Resolved Issues
    section of the Release Notes.</changelog>
  <changelog author="kallan@suse.com" date="1711540800">- Remove protobuf &lt; 22 dependency from spec file (bsc#1217478)
  Required linking with additional absl libraries for sle_version &gt; 150400.
- Use (boo#1222089) for updating open-vm-tools to version 12.4.0.</changelog>
  <changelog author="kallan@suse.com" date="1719835200">- Update to 12.4.5 (build 23787635) (boo#1227181)
  - There are no new features in the open-vm-tools 12.4.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - A Github pull request and associated issue has been handled. Please
    see the Resolved Issues section of the Release Notes.
  - A number of issues flagged by Coverity and ShellCheck have been
    addressed.
  - A vmtoolsd process hang related to nested logging from an RPC Channel
    error has been fixed.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see: https://github.com/vmware/open-vm-tools/releases/tag/stable-12.4.5
  Release Notes are available at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/ReleaseNotes.md
  The granular changes that have gone into the 12.4.5 release are in the ChangeLog at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/open-vm-tools/ChangeLog</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1728648000">- convert to obs_scm
- update to 12.5.0 (boo#1231826):
  There are no new features in the open-vm-tools 12.5.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been integrated. Please see the
    Resolved Issues section of the Release Notes.
  * For a more complete list of issues resolved in this release,
    see the Resolved Issues section of the Release Notes.
  For complete details, see:
  https://github.com/vmware/open-vm-tools/releases/tag/stable-12.5.0
  Release Notes are available at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/ReleaseNotes.md
  The granular changes that have gone into the 12.5.0 release are
  in the ChangeLog at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/open-vm-tools/ChangeLog</changelog>
  <changelog author="kallan@suse.com" date="1740052800">- (bsc#1237180): Ensure vmtoolsd.service, vgauthd.service, and
  vmblock-fuse.service are set to enabled by default.</changelog>
  <changelog author="kallan@suse.com" date="1740484800">- Revert previous change (Thu Feb 20 23:08:43 UTC 2025).  The proposed
  solutions was non-standard.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742472000">- remove unused pcre build dependency</changelog>
  <changelog author="kallan@suse.com" date="1743076800">- (bsc#1237180): Ensure vmtoolsd.service and vgauthd.service
  are set to enabled by default. Do this by removing vmblock-fuse.service
  from the %pre section in the spec file.  vmblock-fuse.service still
  remains in the %pre desktop section.</changelog>
  <changelog author="kallan@suse.com" date="1744804800">- (bsc#1237147): Newer version of containerd do not have the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/api.
  Update detect-suse-location.patch to point to the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/vendor/github.com/containerd/containerd/api
  to find the needed files and update the tasks.proto file to import from
  github.com/containerd/containerd/vendor/github.com/containerd/containerd/api</changelog>
  <changelog author="hsk17@mail.de" date="1746273600">- Add open-vm-tools-12.5.0-gcc15.patch from upstream to fix
  gcc15 compile time error (boo#1241938)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1747137600">- update to 12.5.2 (bsc#1243106):
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/open-vm-tools/ChangeLog
  This release resolves CVE-2025-22247. For more information on this
  vulnerability and its impact on Broadcom products, see
  VMSA-2025-0007
  https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683</changelog>
  <changelog author="kallan@suse.com" date="1750420800">- Update to open-vm-tools 13.0.0 based on build 24696409. (boo#1245169):
  There are no new features in the open-vm-tools 13.0.0 release.  This is
  primarily a maintenance release that addresses a few issues, including:
  - The vm-support script has been updated to collect the open-vm-tools log
    files from the Linux guest and information from the systemd journal.
  - Github pull requests has been integrated and issues fixed.  Please see
    the Resolved Issues section of the Release Notes.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-13.0.0
  Release Notes are available at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/ReleaseNotes.md
  The granular changes that have gone into the 13.0.0 release are in the
  ChangeLog at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/open-vm-tools/ChangeLog
- Add patch:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  Currently the "telinit 6" command is used to reboot a Linux VM
  following Guest OS Customization.  As the classic Linux init system,
  SysVinit, is deprecated in favor of a newer init system, systemd,
  the telinit command may not be available on the base Linux OS.
  This change adds support to Guest OS Customization for the systemd init
  system.  If the modern init system, systemd, is available, then a
  "systemctl reboot" command will be used to trigger reboot.  Otherwise,
  the "telinit 6" command will be used assuming the traditional init
  system, SysVinit, is still available.
- Drop patch now contained in 13.0.0:
  open-vm-tools-12.5.0-gcc15.patch
- Ran /usr/lib/obs/service/source_validators/helpers/fix_changelog to fix changes
  file where source validator was failing.</changelog>
  <changelog author="kallan@suse.com" date="1758628800">- Fix (bsc#1250373 (CVE-2025-41244) - VUL-0: contains a local privilege
  escalation vulnerability.
  + Add patch:
  - CVE-2025-41244-1240-1300-SDMP.patch</changelog>
  <changelog author="kallan@suse.com" date="1759320000">- Update to open-vm-tools 13.0.5 based on build 24915695. (boo#1250692):
  Please refer to the Release Notes at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/ReleaseNotes.md.
  The granular changes that have gone into the open-vm-tools 13.0.5 release
  are in the ChangeLog at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/open-vm-tools/ChangeLog.
  There are no new features in the open-vm-tools 13.0.5 release. This is
  primarily a maintenance release that addresses a security issue.
  This release resolves and includes the patch for CVE-2025-41244. For more
  information on this vulnerability and its impact on Broadcom products,
  see VMSA-2025-0015.
  A patch to address CVE-2025-41244 on earlier open-vm-tools releases is
  provided to the Linux community at CVE-2025-41244.patch.
  A minor enhancement has been made for Guest OS Customization. The
  DeployPkg plugin has been updated to use "systemctl reboot", if available.
  For a more complete list of issues addressed in this release, see the
  What's New and Resolved Issues section of the Release Notes.
- Drop patch now contained in 13.0.5:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  CVE-2025-41244-1240-1300-SDMP.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1769515200">- update to 13.0.10 based on build 25056151: (boo#1257357):
  Please refer to the Release Notes at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.10/ReleaseNotes.md.
  The granular changes that have gone into the open-vm-tools
  13.0.10 release are in the ChangeLog at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.10/open-vm-tools/ChangeLog.
  There are no new features in the open-vm-tools 13.0.10 release.
  This is primarily a maintenance release that addresses a fix.
  A minor enhancement has been made for Guest OS Customization. The
  DeployPkg plugin has been updated to handle a new cloud-init
  error code that signals a recoverable error and allow cloud-init
  to finish running.
  For a more complete description of what's new in this release,
  see the What's New and Resolved Issues sections of the Release
  Notes.</changelog>
</package>
<package pkgid="f3d22929a9e71fd5555e5d1acce3d88472656d37d7525f76bcdd705240788d2e" name="open-vm-tools" arch="src">
  <version epoch="0" ver="13.0.5" rel="150600.3.21.1"/>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697976000">- Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer
  needed, nor used (since 12.3.0 release).</changelog>
  <changelog author="kallan@suse.com" date="1698667200">- Update to 12.3.5 (build 22544099) (boo#1216670)
  - There are no new features in the open-vm-tools 12.3.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release resolves CVE-2023-34058. For more information on this
    vulnerability and its impact on VMware products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0024.html.
  - This release resolves CVE-2023-34059 which only affects open-vm-tools.
    For more information on this vulnerability, please see the Resolved
    Issues section of the Release Notes.
  - A GitHub issue has been handled. Please see the Resolved Issues section
    of the Release Notes.
  - An update to the deployPkg plugin to coordinate with recent releases
    of cloud-init for improvement for guest VM customization.
  - For issues resolved in this release, see the Resolved Issues
    &lt;https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#resolved-issues&gt;
    section of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.5 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/ChangeLog
- Drop patch now contained in 12.3.5:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="kallan@suse.com" date="1702296000">- Fix (bsc#1217796) - Fix outdated libxmlsec1 dependency version.
  Updates to open-vm-tools for SLES 12 SP4 and SP5 are now being built
  againt against libxmlsec1-1-1.2.37. Update the spec file to now require
  libxmlsec1-openssl1 &gt;= 1.2.37.</changelog>
  <changelog author="dimstar@opensuse.org" date="1703073600">- Own %{_modulesloaddir}: used to be present via udev-mini -&gt; kmod
  - &gt; suse-module-tools dependency before.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1711195200">- update to 12.4.0:
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/open-vm-tools/ChangeLog
  There are no new features in the open-vm-tools 12.4.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been handled. Please see the Resolved
    Issues section of the Release Notes.
  * A number of issues flagged by Coverity have been addressed.
  * For issues resolved in this release, see the Resolved Issues
    section of the Release Notes.</changelog>
  <changelog author="kallan@suse.com" date="1711540800">- Remove protobuf &lt; 22 dependency from spec file (bsc#1217478)
  Required linking with additional absl libraries for sle_version &gt; 150400.
- Use (boo#1222089) for updating open-vm-tools to version 12.4.0.</changelog>
  <changelog author="kallan@suse.com" date="1719835200">- Update to 12.4.5 (build 23787635) (boo#1227181)
  - There are no new features in the open-vm-tools 12.4.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - A Github pull request and associated issue has been handled. Please
    see the Resolved Issues section of the Release Notes.
  - A number of issues flagged by Coverity and ShellCheck have been
    addressed.
  - A vmtoolsd process hang related to nested logging from an RPC Channel
    error has been fixed.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see: https://github.com/vmware/open-vm-tools/releases/tag/stable-12.4.5
  Release Notes are available at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/ReleaseNotes.md
  The granular changes that have gone into the 12.4.5 release are in the ChangeLog at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/open-vm-tools/ChangeLog</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1728648000">- convert to obs_scm
- update to 12.5.0 (boo#1231826):
  There are no new features in the open-vm-tools 12.5.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been integrated. Please see the
    Resolved Issues section of the Release Notes.
  * For a more complete list of issues resolved in this release,
    see the Resolved Issues section of the Release Notes.
  For complete details, see:
  https://github.com/vmware/open-vm-tools/releases/tag/stable-12.5.0
  Release Notes are available at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/ReleaseNotes.md
  The granular changes that have gone into the 12.5.0 release are
  in the ChangeLog at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/open-vm-tools/ChangeLog</changelog>
  <changelog author="kallan@suse.com" date="1740052800">- (bsc#1237180): Ensure vmtoolsd.service, vgauthd.service, and
  vmblock-fuse.service are set to enabled by default.</changelog>
  <changelog author="kallan@suse.com" date="1740484800">- Revert previous change (Thu Feb 20 23:08:43 UTC 2025).  The proposed
  solutions was non-standard.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742472000">- remove unused pcre build dependency</changelog>
  <changelog author="kallan@suse.com" date="1743076800">- (bsc#1237180): Ensure vmtoolsd.service and vgauthd.service
  are set to enabled by default. Do this by removing vmblock-fuse.service
  from the %pre section in the spec file.  vmblock-fuse.service still
  remains in the %pre desktop section.</changelog>
  <changelog author="kallan@suse.com" date="1744804800">- (bsc#1237147): Newer version of containerd do not have the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/api.
  Update detect-suse-location.patch to point to the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/vendor/github.com/containerd/containerd/api
  to find the needed files and update the tasks.proto file to import from
  github.com/containerd/containerd/vendor/github.com/containerd/containerd/api</changelog>
  <changelog author="hsk17@mail.de" date="1746273600">- Add open-vm-tools-12.5.0-gcc15.patch from upstream to fix
  gcc15 compile time error (boo#1241938)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1747137600">- update to 12.5.2 (bsc#1243106):
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/open-vm-tools/ChangeLog
  This release resolves CVE-2025-22247. For more information on this
  vulnerability and its impact on Broadcom products, see
  VMSA-2025-0007
  https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683</changelog>
  <changelog author="kallan@suse.com" date="1750420800">- Update to open-vm-tools 13.0.0 based on build 24696409. (boo#1245169):
  There are no new features in the open-vm-tools 13.0.0 release.  This is
  primarily a maintenance release that addresses a few issues, including:
  - The vm-support script has been updated to collect the open-vm-tools log
    files from the Linux guest and information from the systemd journal.
  - Github pull requests has been integrated and issues fixed.  Please see
    the Resolved Issues section of the Release Notes.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-13.0.0
  Release Notes are available at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/ReleaseNotes.md
  The granular changes that have gone into the 13.0.0 release are in the
  ChangeLog at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/open-vm-tools/ChangeLog
- Add patch:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  Currently the "telinit 6" command is used to reboot a Linux VM
  following Guest OS Customization.  As the classic Linux init system,
  SysVinit, is deprecated in favor of a newer init system, systemd,
  the telinit command may not be available on the base Linux OS.
  This change adds support to Guest OS Customization for the systemd init
  system.  If the modern init system, systemd, is available, then a
  "systemctl reboot" command will be used to trigger reboot.  Otherwise,
  the "telinit 6" command will be used assuming the traditional init
  system, SysVinit, is still available.
- Drop patch now contained in 13.0.0:
  open-vm-tools-12.5.0-gcc15.patch
- Ran /usr/lib/obs/service/source_validators/helpers/fix_changelog to fix changes
  file where source validator was failing.</changelog>
  <changelog author="kallan@suse.com" date="1758628800">- Fix (bsc#1250373 (CVE-2025-41244) - VUL-0: contains a local privilege
  escalation vulnerability.
  + Add patch:
  - CVE-2025-41244-1240-1300-SDMP.patch</changelog>
  <changelog author="kallan@suse.com" date="1759320000">- Update to open-vm-tools 13.0.5 based on build 24915695. (boo#1250692):
  Please refer to the Release Notes at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/ReleaseNotes.md.
  The granular changes that have gone into the open-vm-tools 13.0.5 release
  are in the ChangeLog at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/open-vm-tools/ChangeLog.
  There are no new features in the open-vm-tools 13.0.5 release. This is
  primarily a maintenance release that addresses a security issue.
  This release resolves and includes the patch for CVE-2025-41244. For more
  information on this vulnerability and its impact on Broadcom products,
  see VMSA-2025-0015.
  A patch to address CVE-2025-41244 on earlier open-vm-tools releases is
  provided to the Linux community at CVE-2025-41244.patch.
  A minor enhancement has been made for Guest OS Customization. The
  DeployPkg plugin has been updated to use "systemctl reboot", if available.
  For a more complete list of issues addressed in this release, see the
  What's New and Resolved Issues section of the Release Notes.
- Drop patch now contained in 13.0.5:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  CVE-2025-41244-1240-1300-SDMP.patch</changelog>
</package>
<package pkgid="2a5c1bef0b173892cd420fea6676f521ea8047cc686e1fad674d207f0b361849" name="open-vm-tools" arch="x86_64">
  <version epoch="0" ver="13.0.5" rel="150600.3.21.1"/>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697976000">- Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer
  needed, nor used (since 12.3.0 release).</changelog>
  <changelog author="kallan@suse.com" date="1698667200">- Update to 12.3.5 (build 22544099) (boo#1216670)
  - There are no new features in the open-vm-tools 12.3.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release resolves CVE-2023-34058. For more information on this
    vulnerability and its impact on VMware products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0024.html.
  - This release resolves CVE-2023-34059 which only affects open-vm-tools.
    For more information on this vulnerability, please see the Resolved
    Issues section of the Release Notes.
  - A GitHub issue has been handled. Please see the Resolved Issues section
    of the Release Notes.
  - An update to the deployPkg plugin to coordinate with recent releases
    of cloud-init for improvement for guest VM customization.
  - For issues resolved in this release, see the Resolved Issues
    &lt;https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#resolved-issues&gt;
    section of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.5 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/ChangeLog
- Drop patch now contained in 12.3.5:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="kallan@suse.com" date="1702296000">- Fix (bsc#1217796) - Fix outdated libxmlsec1 dependency version.
  Updates to open-vm-tools for SLES 12 SP4 and SP5 are now being built
  againt against libxmlsec1-1-1.2.37. Update the spec file to now require
  libxmlsec1-openssl1 &gt;= 1.2.37.</changelog>
  <changelog author="dimstar@opensuse.org" date="1703073600">- Own %{_modulesloaddir}: used to be present via udev-mini -&gt; kmod
  - &gt; suse-module-tools dependency before.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1711195200">- update to 12.4.0:
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/open-vm-tools/ChangeLog
  There are no new features in the open-vm-tools 12.4.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been handled. Please see the Resolved
    Issues section of the Release Notes.
  * A number of issues flagged by Coverity have been addressed.
  * For issues resolved in this release, see the Resolved Issues
    section of the Release Notes.</changelog>
  <changelog author="kallan@suse.com" date="1711540800">- Remove protobuf &lt; 22 dependency from spec file (bsc#1217478)
  Required linking with additional absl libraries for sle_version &gt; 150400.
- Use (boo#1222089) for updating open-vm-tools to version 12.4.0.</changelog>
  <changelog author="kallan@suse.com" date="1719835200">- Update to 12.4.5 (build 23787635) (boo#1227181)
  - There are no new features in the open-vm-tools 12.4.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - A Github pull request and associated issue has been handled. Please
    see the Resolved Issues section of the Release Notes.
  - A number of issues flagged by Coverity and ShellCheck have been
    addressed.
  - A vmtoolsd process hang related to nested logging from an RPC Channel
    error has been fixed.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see: https://github.com/vmware/open-vm-tools/releases/tag/stable-12.4.5
  Release Notes are available at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/ReleaseNotes.md
  The granular changes that have gone into the 12.4.5 release are in the ChangeLog at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/open-vm-tools/ChangeLog</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1728648000">- convert to obs_scm
- update to 12.5.0 (boo#1231826):
  There are no new features in the open-vm-tools 12.5.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been integrated. Please see the
    Resolved Issues section of the Release Notes.
  * For a more complete list of issues resolved in this release,
    see the Resolved Issues section of the Release Notes.
  For complete details, see:
  https://github.com/vmware/open-vm-tools/releases/tag/stable-12.5.0
  Release Notes are available at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/ReleaseNotes.md
  The granular changes that have gone into the 12.5.0 release are
  in the ChangeLog at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/open-vm-tools/ChangeLog</changelog>
  <changelog author="kallan@suse.com" date="1740052800">- (bsc#1237180): Ensure vmtoolsd.service, vgauthd.service, and
  vmblock-fuse.service are set to enabled by default.</changelog>
  <changelog author="kallan@suse.com" date="1740484800">- Revert previous change (Thu Feb 20 23:08:43 UTC 2025).  The proposed
  solutions was non-standard.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742472000">- remove unused pcre build dependency</changelog>
  <changelog author="kallan@suse.com" date="1743076800">- (bsc#1237180): Ensure vmtoolsd.service and vgauthd.service
  are set to enabled by default. Do this by removing vmblock-fuse.service
  from the %pre section in the spec file.  vmblock-fuse.service still
  remains in the %pre desktop section.</changelog>
  <changelog author="kallan@suse.com" date="1744804800">- (bsc#1237147): Newer version of containerd do not have the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/api.
  Update detect-suse-location.patch to point to the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/vendor/github.com/containerd/containerd/api
  to find the needed files and update the tasks.proto file to import from
  github.com/containerd/containerd/vendor/github.com/containerd/containerd/api</changelog>
  <changelog author="hsk17@mail.de" date="1746273600">- Add open-vm-tools-12.5.0-gcc15.patch from upstream to fix
  gcc15 compile time error (boo#1241938)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1747137600">- update to 12.5.2 (bsc#1243106):
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/open-vm-tools/ChangeLog
  This release resolves CVE-2025-22247. For more information on this
  vulnerability and its impact on Broadcom products, see
  VMSA-2025-0007
  https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683</changelog>
  <changelog author="kallan@suse.com" date="1750420800">- Update to open-vm-tools 13.0.0 based on build 24696409. (boo#1245169):
  There are no new features in the open-vm-tools 13.0.0 release.  This is
  primarily a maintenance release that addresses a few issues, including:
  - The vm-support script has been updated to collect the open-vm-tools log
    files from the Linux guest and information from the systemd journal.
  - Github pull requests has been integrated and issues fixed.  Please see
    the Resolved Issues section of the Release Notes.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-13.0.0
  Release Notes are available at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/ReleaseNotes.md
  The granular changes that have gone into the 13.0.0 release are in the
  ChangeLog at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/open-vm-tools/ChangeLog
- Add patch:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  Currently the "telinit 6" command is used to reboot a Linux VM
  following Guest OS Customization.  As the classic Linux init system,
  SysVinit, is deprecated in favor of a newer init system, systemd,
  the telinit command may not be available on the base Linux OS.
  This change adds support to Guest OS Customization for the systemd init
  system.  If the modern init system, systemd, is available, then a
  "systemctl reboot" command will be used to trigger reboot.  Otherwise,
  the "telinit 6" command will be used assuming the traditional init
  system, SysVinit, is still available.
- Drop patch now contained in 13.0.0:
  open-vm-tools-12.5.0-gcc15.patch
- Ran /usr/lib/obs/service/source_validators/helpers/fix_changelog to fix changes
  file where source validator was failing.</changelog>
  <changelog author="kallan@suse.com" date="1758628800">- Fix (bsc#1250373 (CVE-2025-41244) - VUL-0: contains a local privilege
  escalation vulnerability.
  + Add patch:
  - CVE-2025-41244-1240-1300-SDMP.patch</changelog>
  <changelog author="kallan@suse.com" date="1759320000">- Update to open-vm-tools 13.0.5 based on build 24915695. (boo#1250692):
  Please refer to the Release Notes at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/ReleaseNotes.md.
  The granular changes that have gone into the open-vm-tools 13.0.5 release
  are in the ChangeLog at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/open-vm-tools/ChangeLog.
  There are no new features in the open-vm-tools 13.0.5 release. This is
  primarily a maintenance release that addresses a security issue.
  This release resolves and includes the patch for CVE-2025-41244. For more
  information on this vulnerability and its impact on Broadcom products,
  see VMSA-2025-0015.
  A patch to address CVE-2025-41244 on earlier open-vm-tools releases is
  provided to the Linux community at CVE-2025-41244.patch.
  A minor enhancement has been made for Guest OS Customization. The
  DeployPkg plugin has been updated to use "systemctl reboot", if available.
  For a more complete list of issues addressed in this release, see the
  What's New and Resolved Issues section of the Release Notes.
- Drop patch now contained in 13.0.5:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  CVE-2025-41244-1240-1300-SDMP.patch</changelog>
</package>
<package pkgid="ac36163b03337e159fbeea0aaf1cf06c1a2ad5b7afcb3fea12bc735f4fd26b7d" name="open-vm-tools" arch="src">
  <version epoch="0" ver="13.1.0" rel="150600.3.27.1"/>
  <changelog author="kallan@suse.com" date="1702296000">- Fix (bsc#1217796) - Fix outdated libxmlsec1 dependency version.
  Updates to open-vm-tools for SLES 12 SP4 and SP5 are now being built
  againt against libxmlsec1-1-1.2.37. Update the spec file to now require
  libxmlsec1-openssl1 &gt;= 1.2.37.</changelog>
  <changelog author="dimstar@opensuse.org" date="1703073600">- Own %{_modulesloaddir}: used to be present via udev-mini -&gt; kmod
  - &gt; suse-module-tools dependency before.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1711195200">- update to 12.4.0:
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/open-vm-tools/ChangeLog
  There are no new features in the open-vm-tools 12.4.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been handled. Please see the Resolved
    Issues section of the Release Notes.
  * A number of issues flagged by Coverity have been addressed.
  * For issues resolved in this release, see the Resolved Issues
    section of the Release Notes.</changelog>
  <changelog author="kallan@suse.com" date="1711540800">- Remove protobuf &lt; 22 dependency from spec file (bsc#1217478)
  Required linking with additional absl libraries for sle_version &gt; 150400.
- Use (boo#1222089) for updating open-vm-tools to version 12.4.0.</changelog>
  <changelog author="kallan@suse.com" date="1719835200">- Update to 12.4.5 (build 23787635) (boo#1227181)
  - There are no new features in the open-vm-tools 12.4.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - A Github pull request and associated issue has been handled. Please
    see the Resolved Issues section of the Release Notes.
  - A number of issues flagged by Coverity and ShellCheck have been
    addressed.
  - A vmtoolsd process hang related to nested logging from an RPC Channel
    error has been fixed.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see: https://github.com/vmware/open-vm-tools/releases/tag/stable-12.4.5
  Release Notes are available at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/ReleaseNotes.md
  The granular changes that have gone into the 12.4.5 release are in the ChangeLog at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/open-vm-tools/ChangeLog</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1728648000">- convert to obs_scm
- update to 12.5.0 (boo#1231826):
  There are no new features in the open-vm-tools 12.5.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been integrated. Please see the
    Resolved Issues section of the Release Notes.
  * For a more complete list of issues resolved in this release,
    see the Resolved Issues section of the Release Notes.
  For complete details, see:
  https://github.com/vmware/open-vm-tools/releases/tag/stable-12.5.0
  Release Notes are available at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/ReleaseNotes.md
  The granular changes that have gone into the 12.5.0 release are
  in the ChangeLog at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/open-vm-tools/ChangeLog</changelog>
  <changelog author="kallan@suse.com" date="1740052800">- (bsc#1237180): Ensure vmtoolsd.service, vgauthd.service, and
  vmblock-fuse.service are set to enabled by default.</changelog>
  <changelog author="kallan@suse.com" date="1740484800">- Revert previous change (Thu Feb 20 23:08:43 UTC 2025).  The proposed
  solutions was non-standard.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742472000">- remove unused pcre build dependency</changelog>
  <changelog author="kallan@suse.com" date="1743076800">- (bsc#1237180): Ensure vmtoolsd.service and vgauthd.service
  are set to enabled by default. Do this by removing vmblock-fuse.service
  from the %pre section in the spec file.  vmblock-fuse.service still
  remains in the %pre desktop section.</changelog>
  <changelog author="kallan@suse.com" date="1744804800">- (bsc#1237147): Newer version of containerd do not have the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/api.
  Update detect-suse-location.patch to point to the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/vendor/github.com/containerd/containerd/api
  to find the needed files and update the tasks.proto file to import from
  github.com/containerd/containerd/vendor/github.com/containerd/containerd/api</changelog>
  <changelog author="hsk17@mail.de" date="1746273600">- Add open-vm-tools-12.5.0-gcc15.patch from upstream to fix
  gcc15 compile time error (boo#1241938)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1747137600">- update to 12.5.2 (bsc#1243106):
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/open-vm-tools/ChangeLog
  This release resolves CVE-2025-22247. For more information on this
  vulnerability and its impact on Broadcom products, see
  VMSA-2025-0007
  https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683</changelog>
  <changelog author="kallan@suse.com" date="1750420800">- Update to open-vm-tools 13.0.0 based on build 24696409. (boo#1245169):
  There are no new features in the open-vm-tools 13.0.0 release.  This is
  primarily a maintenance release that addresses a few issues, including:
  - The vm-support script has been updated to collect the open-vm-tools log
    files from the Linux guest and information from the systemd journal.
  - Github pull requests has been integrated and issues fixed.  Please see
    the Resolved Issues section of the Release Notes.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-13.0.0
  Release Notes are available at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/ReleaseNotes.md
  The granular changes that have gone into the 13.0.0 release are in the
  ChangeLog at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/open-vm-tools/ChangeLog
- Add patch:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  Currently the "telinit 6" command is used to reboot a Linux VM
  following Guest OS Customization.  As the classic Linux init system,
  SysVinit, is deprecated in favor of a newer init system, systemd,
  the telinit command may not be available on the base Linux OS.
  This change adds support to Guest OS Customization for the systemd init
  system.  If the modern init system, systemd, is available, then a
  "systemctl reboot" command will be used to trigger reboot.  Otherwise,
  the "telinit 6" command will be used assuming the traditional init
  system, SysVinit, is still available.
- Drop patch now contained in 13.0.0:
  open-vm-tools-12.5.0-gcc15.patch
- Ran /usr/lib/obs/service/source_validators/helpers/fix_changelog to fix changes
  file where source validator was failing.</changelog>
  <changelog author="kallan@suse.com" date="1758628800">- Fix (bsc#1250373 (CVE-2025-41244) - VUL-0: contains a local privilege
  escalation vulnerability.
  + Add patch:
  - CVE-2025-41244-1240-1300-SDMP.patch</changelog>
  <changelog author="kallan@suse.com" date="1759320000">- Update to open-vm-tools 13.0.5 based on build 24915695. (boo#1250692):
  Please refer to the Release Notes at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/ReleaseNotes.md.
  The granular changes that have gone into the open-vm-tools 13.0.5 release
  are in the ChangeLog at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/open-vm-tools/ChangeLog.
  There are no new features in the open-vm-tools 13.0.5 release. This is
  primarily a maintenance release that addresses a security issue.
  This release resolves and includes the patch for CVE-2025-41244. For more
  information on this vulnerability and its impact on Broadcom products,
  see VMSA-2025-0015.
  A patch to address CVE-2025-41244 on earlier open-vm-tools releases is
  provided to the Linux community at CVE-2025-41244.patch.
  A minor enhancement has been made for Guest OS Customization. The
  DeployPkg plugin has been updated to use "systemctl reboot", if available.
  For a more complete list of issues addressed in this release, see the
  What's New and Resolved Issues section of the Release Notes.
- Drop patch now contained in 13.0.5:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  CVE-2025-41244-1240-1300-SDMP.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1769515200">- update to 13.0.10 based on build 25056151: (boo#1257357):
  Please refer to the Release Notes at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.10/ReleaseNotes.md.
  The granular changes that have gone into the open-vm-tools
  13.0.10 release are in the ChangeLog at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.10/open-vm-tools/ChangeLog.
  There are no new features in the open-vm-tools 13.0.10 release.
  This is primarily a maintenance release that addresses a fix.
  A minor enhancement has been made for Guest OS Customization. The
  DeployPkg plugin has been updated to handle a new cloud-init
  error code that signals a recoverable error and allow cloud-init
  to finish running.
  For a more complete description of what's new in this release,
  see the What's New and Resolved Issues sections of the Release
  Notes.</changelog>
  <changelog author="josef.melcr@suse.com" date="1777291200">- Fix build with glibc 2.43 (boo#1257312)
  + Add patch:
  - glibc243.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1778846400">- update to 13.1.0 release based on build 25218885: (boo#1265304)
  Please refer to the Release Notes at
  https://github.com/vmware/open-vm-tools/blob/stable-13.1.0/ReleaseNotes.md.
  Support for GNOME Toolkit version 4.
  This release of open-vm-tools supports building with either the
  GNOME Toolkit version 4 (GTK4) or to continue using version 3
  (GTK3). The configure script will accept options to restrict the
  build to either GTK3 or GTK4. If no restriction is applied, the
  latest version for which the required development package(s) are
  installed will be used. Please see the What's New section of the
  Release Notes for details.
  The following github issues have been resolved:
  - issue #707
  - issue #763
  The granular changes that have gone into the open-vm-tools 13.1.0
  release are in the ChangeLog at
  https://github.com/vmware/open-vm-tools/blob/stable-13.1.0/open-vm-tools/ChangeLog.
  For a more complete description of what is new in this release,
  see the What's New and Resolved Issues sections of the Release
  Notes.
  https://github.com/vmware/open-vm-tools/blob/stable-13.1.0/ReleaseNotes.md#whatsnew
  https://github.com/vmware/open-vm-tools/blob/stable-13.1.0/ReleaseNotes.md#resolved-issues</changelog>
</package>
<package pkgid="002f09c23e20db6888910c0de79243ee7421ef93abb15a29569ed4e22de6b8a2" name="open-vm-tools" arch="x86_64">
  <version epoch="0" ver="13.1.0" rel="150600.3.27.1"/>
  <changelog author="kallan@suse.com" date="1702296000">- Fix (bsc#1217796) - Fix outdated libxmlsec1 dependency version.
  Updates to open-vm-tools for SLES 12 SP4 and SP5 are now being built
  againt against libxmlsec1-1-1.2.37. Update the spec file to now require
  libxmlsec1-openssl1 &gt;= 1.2.37.</changelog>
  <changelog author="dimstar@opensuse.org" date="1703073600">- Own %{_modulesloaddir}: used to be present via udev-mini -&gt; kmod
  - &gt; suse-module-tools dependency before.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1711195200">- update to 12.4.0:
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/open-vm-tools/ChangeLog
  There are no new features in the open-vm-tools 12.4.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been handled. Please see the Resolved
    Issues section of the Release Notes.
  * A number of issues flagged by Coverity have been addressed.
  * For issues resolved in this release, see the Resolved Issues
    section of the Release Notes.</changelog>
  <changelog author="kallan@suse.com" date="1711540800">- Remove protobuf &lt; 22 dependency from spec file (bsc#1217478)
  Required linking with additional absl libraries for sle_version &gt; 150400.
- Use (boo#1222089) for updating open-vm-tools to version 12.4.0.</changelog>
  <changelog author="kallan@suse.com" date="1719835200">- Update to 12.4.5 (build 23787635) (boo#1227181)
  - There are no new features in the open-vm-tools 12.4.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - A Github pull request and associated issue has been handled. Please
    see the Resolved Issues section of the Release Notes.
  - A number of issues flagged by Coverity and ShellCheck have been
    addressed.
  - A vmtoolsd process hang related to nested logging from an RPC Channel
    error has been fixed.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see: https://github.com/vmware/open-vm-tools/releases/tag/stable-12.4.5
  Release Notes are available at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/ReleaseNotes.md
  The granular changes that have gone into the 12.4.5 release are in the ChangeLog at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/open-vm-tools/ChangeLog</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1728648000">- convert to obs_scm
- update to 12.5.0 (boo#1231826):
  There are no new features in the open-vm-tools 12.5.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been integrated. Please see the
    Resolved Issues section of the Release Notes.
  * For a more complete list of issues resolved in this release,
    see the Resolved Issues section of the Release Notes.
  For complete details, see:
  https://github.com/vmware/open-vm-tools/releases/tag/stable-12.5.0
  Release Notes are available at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/ReleaseNotes.md
  The granular changes that have gone into the 12.5.0 release are
  in the ChangeLog at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/open-vm-tools/ChangeLog</changelog>
  <changelog author="kallan@suse.com" date="1740052800">- (bsc#1237180): Ensure vmtoolsd.service, vgauthd.service, and
  vmblock-fuse.service are set to enabled by default.</changelog>
  <changelog author="kallan@suse.com" date="1740484800">- Revert previous change (Thu Feb 20 23:08:43 UTC 2025).  The proposed
  solutions was non-standard.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742472000">- remove unused pcre build dependency</changelog>
  <changelog author="kallan@suse.com" date="1743076800">- (bsc#1237180): Ensure vmtoolsd.service and vgauthd.service
  are set to enabled by default. Do this by removing vmblock-fuse.service
  from the %pre section in the spec file.  vmblock-fuse.service still
  remains in the %pre desktop section.</changelog>
  <changelog author="kallan@suse.com" date="1744804800">- (bsc#1237147): Newer version of containerd do not have the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/api.
  Update detect-suse-location.patch to point to the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/vendor/github.com/containerd/containerd/api
  to find the needed files and update the tasks.proto file to import from
  github.com/containerd/containerd/vendor/github.com/containerd/containerd/api</changelog>
  <changelog author="hsk17@mail.de" date="1746273600">- Add open-vm-tools-12.5.0-gcc15.patch from upstream to fix
  gcc15 compile time error (boo#1241938)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1747137600">- update to 12.5.2 (bsc#1243106):
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/open-vm-tools/ChangeLog
  This release resolves CVE-2025-22247. For more information on this
  vulnerability and its impact on Broadcom products, see
  VMSA-2025-0007
  https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683</changelog>
  <changelog author="kallan@suse.com" date="1750420800">- Update to open-vm-tools 13.0.0 based on build 24696409. (boo#1245169):
  There are no new features in the open-vm-tools 13.0.0 release.  This is
  primarily a maintenance release that addresses a few issues, including:
  - The vm-support script has been updated to collect the open-vm-tools log
    files from the Linux guest and information from the systemd journal.
  - Github pull requests has been integrated and issues fixed.  Please see
    the Resolved Issues section of the Release Notes.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-13.0.0
  Release Notes are available at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/ReleaseNotes.md
  The granular changes that have gone into the 13.0.0 release are in the
  ChangeLog at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/open-vm-tools/ChangeLog
- Add patch:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  Currently the "telinit 6" command is used to reboot a Linux VM
  following Guest OS Customization.  As the classic Linux init system,
  SysVinit, is deprecated in favor of a newer init system, systemd,
  the telinit command may not be available on the base Linux OS.
  This change adds support to Guest OS Customization for the systemd init
  system.  If the modern init system, systemd, is available, then a
  "systemctl reboot" command will be used to trigger reboot.  Otherwise,
  the "telinit 6" command will be used assuming the traditional init
  system, SysVinit, is still available.
- Drop patch now contained in 13.0.0:
  open-vm-tools-12.5.0-gcc15.patch
- Ran /usr/lib/obs/service/source_validators/helpers/fix_changelog to fix changes
  file where source validator was failing.</changelog>
  <changelog author="kallan@suse.com" date="1758628800">- Fix (bsc#1250373 (CVE-2025-41244) - VUL-0: contains a local privilege
  escalation vulnerability.
  + Add patch:
  - CVE-2025-41244-1240-1300-SDMP.patch</changelog>
  <changelog author="kallan@suse.com" date="1759320000">- Update to open-vm-tools 13.0.5 based on build 24915695. (boo#1250692):
  Please refer to the Release Notes at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/ReleaseNotes.md.
  The granular changes that have gone into the open-vm-tools 13.0.5 release
  are in the ChangeLog at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/open-vm-tools/ChangeLog.
  There are no new features in the open-vm-tools 13.0.5 release. This is
  primarily a maintenance release that addresses a security issue.
  This release resolves and includes the patch for CVE-2025-41244. For more
  information on this vulnerability and its impact on Broadcom products,
  see VMSA-2025-0015.
  A patch to address CVE-2025-41244 on earlier open-vm-tools releases is
  provided to the Linux community at CVE-2025-41244.patch.
  A minor enhancement has been made for Guest OS Customization. The
  DeployPkg plugin has been updated to use "systemctl reboot", if available.
  For a more complete list of issues addressed in this release, see the
  What's New and Resolved Issues section of the Release Notes.
- Drop patch now contained in 13.0.5:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  CVE-2025-41244-1240-1300-SDMP.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1769515200">- update to 13.0.10 based on build 25056151: (boo#1257357):
  Please refer to the Release Notes at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.10/ReleaseNotes.md.
  The granular changes that have gone into the open-vm-tools
  13.0.10 release are in the ChangeLog at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.10/open-vm-tools/ChangeLog.
  There are no new features in the open-vm-tools 13.0.10 release.
  This is primarily a maintenance release that addresses a fix.
  A minor enhancement has been made for Guest OS Customization. The
  DeployPkg plugin has been updated to handle a new cloud-init
  error code that signals a recoverable error and allow cloud-init
  to finish running.
  For a more complete description of what's new in this release,
  see the What's New and Resolved Issues sections of the Release
  Notes.</changelog>
  <changelog author="josef.melcr@suse.com" date="1777291200">- Fix build with glibc 2.43 (boo#1257312)
  + Add patch:
  - glibc243.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1778846400">- update to 13.1.0 release based on build 25218885: (boo#1265304)
  Please refer to the Release Notes at
  https://github.com/vmware/open-vm-tools/blob/stable-13.1.0/ReleaseNotes.md.
  Support for GNOME Toolkit version 4.
  This release of open-vm-tools supports building with either the
  GNOME Toolkit version 4 (GTK4) or to continue using version 3
  (GTK3). The configure script will accept options to restrict the
  build to either GTK3 or GTK4. If no restriction is applied, the
  latest version for which the required development package(s) are
  installed will be used. Please see the What's New section of the
  Release Notes for details.
  The following github issues have been resolved:
  - issue #707
  - issue #763
  The granular changes that have gone into the open-vm-tools 13.1.0
  release are in the ChangeLog at
  https://github.com/vmware/open-vm-tools/blob/stable-13.1.0/open-vm-tools/ChangeLog.
  For a more complete description of what is new in this release,
  see the What's New and Resolved Issues sections of the Release
  Notes.
  https://github.com/vmware/open-vm-tools/blob/stable-13.1.0/ReleaseNotes.md#whatsnew
  https://github.com/vmware/open-vm-tools/blob/stable-13.1.0/ReleaseNotes.md#resolved-issues</changelog>
</package>
<package pkgid="3fccb19fa316aee53f04020aeb9f4d8eb14de3088cd682bde226b12e06231543" name="open-vm-tools-salt-minion" arch="x86_64">
  <version epoch="0" ver="12.5.2" rel="150600.3.12.1"/>
  <changelog author="kallan@suse.com" date="1694001600">- Update to 12.3.0 (build 22234872) (boo#1214850)
  - There are no new features in the open-vm-tools 12.3.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release integrates CVE-2023-20900 without the need for a patch.
    For more information on this vulnerability and its impact on VMware
    products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0019.html.
  - A tools.conf configuration setting is available to temporaily direct
    Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
    of ignoring file systems already frozen.
  - Building of the VMware Guest Authentication Service (VGAuth) using
    "xml-security-c" and "xerces-c" is being deprecated.
  - A number of Coverity reported issues have been addressed.
  - A number of GitHub issues and pull requests have been handled.
    Please see the Resolves Issues section of the Release Notes.
  - For issues resolved in this release, see the Resolved Issues section
    of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.0 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog
- Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests
- jsc-PED-1344 - reinable building containerinfo plugin for SLES 15 SP4.
- Drop patch now contained in 12.3.0:
  + 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch
  + 0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  + 2023-20867-Remove-some-dead-code.patch
  + CVE-20230-20900.patch</changelog>
  <changelog author="meissner@suse.com" date="1695297600">- open-vm-tools is built with containerinfo plugin from 15 sp3 onwards</changelog>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697976000">- Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer
  needed, nor used (since 12.3.0 release).</changelog>
  <changelog author="kallan@suse.com" date="1698667200">- Update to 12.3.5 (build 22544099) (boo#1216670)
  - There are no new features in the open-vm-tools 12.3.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release resolves CVE-2023-34058. For more information on this
    vulnerability and its impact on VMware products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0024.html.
  - This release resolves CVE-2023-34059 which only affects open-vm-tools.
    For more information on this vulnerability, please see the Resolved
    Issues section of the Release Notes.
  - A GitHub issue has been handled. Please see the Resolved Issues section
    of the Release Notes.
  - An update to the deployPkg plugin to coordinate with recent releases
    of cloud-init for improvement for guest VM customization.
  - For issues resolved in this release, see the Resolved Issues
    &lt;https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#resolved-issues&gt;
    section of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.5 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/ChangeLog
- Drop patch now contained in 12.3.5:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="kallan@suse.com" date="1702296000">- Fix (bsc#1217796) - Fix outdated libxmlsec1 dependency version.
  Updates to open-vm-tools for SLES 12 SP4 and SP5 are now being built
  againt against libxmlsec1-1-1.2.37. Update the spec file to now require
  libxmlsec1-openssl1 &gt;= 1.2.37.</changelog>
  <changelog author="dimstar@opensuse.org" date="1703073600">- Own %{_modulesloaddir}: used to be present via udev-mini -&gt; kmod
  - &gt; suse-module-tools dependency before.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1711195200">- update to 12.4.0:
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/open-vm-tools/ChangeLog
  There are no new features in the open-vm-tools 12.4.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been handled. Please see the Resolved
    Issues section of the Release Notes.
  * A number of issues flagged by Coverity have been addressed.
  * For issues resolved in this release, see the Resolved Issues
    section of the Release Notes.</changelog>
  <changelog author="kallan@suse.com" date="1711540800">- Remove protobuf &lt; 22 dependency from spec file (bsc#1217478)
  Required linking with additional absl libraries for sle_version &gt; 150400.
- Use (boo#1222089) for updating open-vm-tools to version 12.4.0.</changelog>
  <changelog author="kallan@suse.com" date="1719835200">- Update to 12.4.5 (build 23787635) (boo#1227181)
  - There are no new features in the open-vm-tools 12.4.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - A Github pull request and associated issue has been handled. Please
    see the Resolved Issues section of the Release Notes.
  - A number of issues flagged by Coverity and ShellCheck have been
    addressed.
  - A vmtoolsd process hang related to nested logging from an RPC Channel
    error has been fixed.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see: https://github.com/vmware/open-vm-tools/releases/tag/stable-12.4.5
  Release Notes are available at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/ReleaseNotes.md
  The granular changes that have gone into the 12.4.5 release are in the ChangeLog at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/open-vm-tools/ChangeLog</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1728648000">- convert to obs_scm
- update to 12.5.0 (boo#1231826):
  There are no new features in the open-vm-tools 12.5.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been integrated. Please see the
    Resolved Issues section of the Release Notes.
  * For a more complete list of issues resolved in this release,
    see the Resolved Issues section of the Release Notes.
  For complete details, see:
  https://github.com/vmware/open-vm-tools/releases/tag/stable-12.5.0
  Release Notes are available at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/ReleaseNotes.md
  The granular changes that have gone into the 12.5.0 release are
  in the ChangeLog at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/open-vm-tools/ChangeLog</changelog>
  <changelog author="kallan@suse.com" date="1740052800">- (bsc#1237180): Ensure vmtoolsd.service, vgauthd.service, and
  vmblock-fuse.service are set to enabled by default.</changelog>
  <changelog author="kallan@suse.com" date="1740484800">- Revert previous change (Thu Feb 20 23:08:43 UTC 2025).  The proposed
  solutions was non-standard.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742472000">- remove unused pcre build dependency</changelog>
  <changelog author="kallan@suse.com" date="1743076800">- (bsc#1237180): Ensure vmtoolsd.service and vgauthd.service
  are set to enabled by default. Do this by removing vmblock-fuse.service
  from the %pre section in the spec file.  vmblock-fuse.service still
  remains in the %pre desktop section.</changelog>
  <changelog author="kallan@suse.com" date="1744804800">- (bsc#1237147): Newer version of containerd do not have the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/api.
  Update detect-suse-location.patch to point to the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/vendor/github.com/containerd/containerd/api
  to find the needed files and update the tasks.proto file to import from
  github.com/containerd/containerd/vendor/github.com/containerd/containerd/api</changelog>
  <changelog author="hsk17@mail.de" date="1746273600">- Add open-vm-tools-12.5.0-gcc15.patch from upstream to fix
  gcc15 compile time error (boo#1241938)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1747137600">- update to 12.5.2 (bsc#1243106):
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/open-vm-tools/ChangeLog
  This release resolves CVE-2025-22247. For more information on this
  vulnerability and its impact on Broadcom products, see
  VMSA-2025-0007
  https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683</changelog>
</package>
<package pkgid="04a77cc359114911160c69fe808fc4914fbe5d64256cfe68fbfb8a326c4288fd" name="open-vm-tools-salt-minion" arch="x86_64">
  <version epoch="0" ver="13.0.0" rel="150600.3.15.1"/>
  <changelog author="meissner@suse.com" date="1695297600">- open-vm-tools is built with containerinfo plugin from 15 sp3 onwards</changelog>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697976000">- Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer
  needed, nor used (since 12.3.0 release).</changelog>
  <changelog author="kallan@suse.com" date="1698667200">- Update to 12.3.5 (build 22544099) (boo#1216670)
  - There are no new features in the open-vm-tools 12.3.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release resolves CVE-2023-34058. For more information on this
    vulnerability and its impact on VMware products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0024.html.
  - This release resolves CVE-2023-34059 which only affects open-vm-tools.
    For more information on this vulnerability, please see the Resolved
    Issues section of the Release Notes.
  - A GitHub issue has been handled. Please see the Resolved Issues section
    of the Release Notes.
  - An update to the deployPkg plugin to coordinate with recent releases
    of cloud-init for improvement for guest VM customization.
  - For issues resolved in this release, see the Resolved Issues
    &lt;https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#resolved-issues&gt;
    section of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.5 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/ChangeLog
- Drop patch now contained in 12.3.5:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="kallan@suse.com" date="1702296000">- Fix (bsc#1217796) - Fix outdated libxmlsec1 dependency version.
  Updates to open-vm-tools for SLES 12 SP4 and SP5 are now being built
  againt against libxmlsec1-1-1.2.37. Update the spec file to now require
  libxmlsec1-openssl1 &gt;= 1.2.37.</changelog>
  <changelog author="dimstar@opensuse.org" date="1703073600">- Own %{_modulesloaddir}: used to be present via udev-mini -&gt; kmod
  - &gt; suse-module-tools dependency before.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1711195200">- update to 12.4.0:
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/open-vm-tools/ChangeLog
  There are no new features in the open-vm-tools 12.4.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been handled. Please see the Resolved
    Issues section of the Release Notes.
  * A number of issues flagged by Coverity have been addressed.
  * For issues resolved in this release, see the Resolved Issues
    section of the Release Notes.</changelog>
  <changelog author="kallan@suse.com" date="1711540800">- Remove protobuf &lt; 22 dependency from spec file (bsc#1217478)
  Required linking with additional absl libraries for sle_version &gt; 150400.
- Use (boo#1222089) for updating open-vm-tools to version 12.4.0.</changelog>
  <changelog author="kallan@suse.com" date="1719835200">- Update to 12.4.5 (build 23787635) (boo#1227181)
  - There are no new features in the open-vm-tools 12.4.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - A Github pull request and associated issue has been handled. Please
    see the Resolved Issues section of the Release Notes.
  - A number of issues flagged by Coverity and ShellCheck have been
    addressed.
  - A vmtoolsd process hang related to nested logging from an RPC Channel
    error has been fixed.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see: https://github.com/vmware/open-vm-tools/releases/tag/stable-12.4.5
  Release Notes are available at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/ReleaseNotes.md
  The granular changes that have gone into the 12.4.5 release are in the ChangeLog at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/open-vm-tools/ChangeLog</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1728648000">- convert to obs_scm
- update to 12.5.0 (boo#1231826):
  There are no new features in the open-vm-tools 12.5.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been integrated. Please see the
    Resolved Issues section of the Release Notes.
  * For a more complete list of issues resolved in this release,
    see the Resolved Issues section of the Release Notes.
  For complete details, see:
  https://github.com/vmware/open-vm-tools/releases/tag/stable-12.5.0
  Release Notes are available at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/ReleaseNotes.md
  The granular changes that have gone into the 12.5.0 release are
  in the ChangeLog at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/open-vm-tools/ChangeLog</changelog>
  <changelog author="kallan@suse.com" date="1740052800">- (bsc#1237180): Ensure vmtoolsd.service, vgauthd.service, and
  vmblock-fuse.service are set to enabled by default.</changelog>
  <changelog author="kallan@suse.com" date="1740484800">- Revert previous change (Thu Feb 20 23:08:43 UTC 2025).  The proposed
  solutions was non-standard.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742472000">- remove unused pcre build dependency</changelog>
  <changelog author="kallan@suse.com" date="1743076800">- (bsc#1237180): Ensure vmtoolsd.service and vgauthd.service
  are set to enabled by default. Do this by removing vmblock-fuse.service
  from the %pre section in the spec file.  vmblock-fuse.service still
  remains in the %pre desktop section.</changelog>
  <changelog author="kallan@suse.com" date="1744804800">- (bsc#1237147): Newer version of containerd do not have the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/api.
  Update detect-suse-location.patch to point to the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/vendor/github.com/containerd/containerd/api
  to find the needed files and update the tasks.proto file to import from
  github.com/containerd/containerd/vendor/github.com/containerd/containerd/api</changelog>
  <changelog author="hsk17@mail.de" date="1746273600">- Add open-vm-tools-12.5.0-gcc15.patch from upstream to fix
  gcc15 compile time error (boo#1241938)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1747137600">- update to 12.5.2 (bsc#1243106):
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/open-vm-tools/ChangeLog
  This release resolves CVE-2025-22247. For more information on this
  vulnerability and its impact on Broadcom products, see
  VMSA-2025-0007
  https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683</changelog>
  <changelog author="kallan@suse.com" date="1750420800">- Update to open-vm-tools 13.0.0 based on build 24696409. (boo#1245169):
  There are no new features in the open-vm-tools 13.0.0 release.  This is
  primarily a maintenance release that addresses a few issues, including:
  - The vm-support script has been updated to collect the open-vm-tools log
    files from the Linux guest and information from the systemd journal.
  - Github pull requests has been integrated and issues fixed.  Please see
    the Resolved Issues section of the Release Notes.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-13.0.0
  Release Notes are available at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/ReleaseNotes.md
  The granular changes that have gone into the 13.0.0 release are in the
  ChangeLog at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/open-vm-tools/ChangeLog
- Add patch:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  Currently the "telinit 6" command is used to reboot a Linux VM
  following Guest OS Customization.  As the classic Linux init system,
  SysVinit, is deprecated in favor of a newer init system, systemd,
  the telinit command may not be available on the base Linux OS.
  This change adds support to Guest OS Customization for the systemd init
  system.  If the modern init system, systemd, is available, then a
  "systemctl reboot" command will be used to trigger reboot.  Otherwise,
  the "telinit 6" command will be used assuming the traditional init
  system, SysVinit, is still available.
- Drop patch now contained in 13.0.0:
  open-vm-tools-12.5.0-gcc15.patch
- Ran /usr/lib/obs/service/source_validators/helpers/fix_changelog to fix changes
  file where source validator was failing.</changelog>
</package>
<package pkgid="e31df564cb2b99992020ff94d6ea4a2bf465407ed9f1aefc0b80e8ace5c791a1" name="open-vm-tools-salt-minion" arch="x86_64">
  <version epoch="0" ver="13.0.0" rel="150600.3.18.1"/>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697976000">- Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer
  needed, nor used (since 12.3.0 release).</changelog>
  <changelog author="kallan@suse.com" date="1698667200">- Update to 12.3.5 (build 22544099) (boo#1216670)
  - There are no new features in the open-vm-tools 12.3.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release resolves CVE-2023-34058. For more information on this
    vulnerability and its impact on VMware products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0024.html.
  - This release resolves CVE-2023-34059 which only affects open-vm-tools.
    For more information on this vulnerability, please see the Resolved
    Issues section of the Release Notes.
  - A GitHub issue has been handled. Please see the Resolved Issues section
    of the Release Notes.
  - An update to the deployPkg plugin to coordinate with recent releases
    of cloud-init for improvement for guest VM customization.
  - For issues resolved in this release, see the Resolved Issues
    &lt;https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#resolved-issues&gt;
    section of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.5 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/ChangeLog
- Drop patch now contained in 12.3.5:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="kallan@suse.com" date="1702296000">- Fix (bsc#1217796) - Fix outdated libxmlsec1 dependency version.
  Updates to open-vm-tools for SLES 12 SP4 and SP5 are now being built
  againt against libxmlsec1-1-1.2.37. Update the spec file to now require
  libxmlsec1-openssl1 &gt;= 1.2.37.</changelog>
  <changelog author="dimstar@opensuse.org" date="1703073600">- Own %{_modulesloaddir}: used to be present via udev-mini -&gt; kmod
  - &gt; suse-module-tools dependency before.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1711195200">- update to 12.4.0:
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/open-vm-tools/ChangeLog
  There are no new features in the open-vm-tools 12.4.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been handled. Please see the Resolved
    Issues section of the Release Notes.
  * A number of issues flagged by Coverity have been addressed.
  * For issues resolved in this release, see the Resolved Issues
    section of the Release Notes.</changelog>
  <changelog author="kallan@suse.com" date="1711540800">- Remove protobuf &lt; 22 dependency from spec file (bsc#1217478)
  Required linking with additional absl libraries for sle_version &gt; 150400.
- Use (boo#1222089) for updating open-vm-tools to version 12.4.0.</changelog>
  <changelog author="kallan@suse.com" date="1719835200">- Update to 12.4.5 (build 23787635) (boo#1227181)
  - There are no new features in the open-vm-tools 12.4.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - A Github pull request and associated issue has been handled. Please
    see the Resolved Issues section of the Release Notes.
  - A number of issues flagged by Coverity and ShellCheck have been
    addressed.
  - A vmtoolsd process hang related to nested logging from an RPC Channel
    error has been fixed.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see: https://github.com/vmware/open-vm-tools/releases/tag/stable-12.4.5
  Release Notes are available at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/ReleaseNotes.md
  The granular changes that have gone into the 12.4.5 release are in the ChangeLog at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/open-vm-tools/ChangeLog</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1728648000">- convert to obs_scm
- update to 12.5.0 (boo#1231826):
  There are no new features in the open-vm-tools 12.5.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been integrated. Please see the
    Resolved Issues section of the Release Notes.
  * For a more complete list of issues resolved in this release,
    see the Resolved Issues section of the Release Notes.
  For complete details, see:
  https://github.com/vmware/open-vm-tools/releases/tag/stable-12.5.0
  Release Notes are available at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/ReleaseNotes.md
  The granular changes that have gone into the 12.5.0 release are
  in the ChangeLog at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/open-vm-tools/ChangeLog</changelog>
  <changelog author="kallan@suse.com" date="1740052800">- (bsc#1237180): Ensure vmtoolsd.service, vgauthd.service, and
  vmblock-fuse.service are set to enabled by default.</changelog>
  <changelog author="kallan@suse.com" date="1740484800">- Revert previous change (Thu Feb 20 23:08:43 UTC 2025).  The proposed
  solutions was non-standard.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742472000">- remove unused pcre build dependency</changelog>
  <changelog author="kallan@suse.com" date="1743076800">- (bsc#1237180): Ensure vmtoolsd.service and vgauthd.service
  are set to enabled by default. Do this by removing vmblock-fuse.service
  from the %pre section in the spec file.  vmblock-fuse.service still
  remains in the %pre desktop section.</changelog>
  <changelog author="kallan@suse.com" date="1744804800">- (bsc#1237147): Newer version of containerd do not have the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/api.
  Update detect-suse-location.patch to point to the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/vendor/github.com/containerd/containerd/api
  to find the needed files and update the tasks.proto file to import from
  github.com/containerd/containerd/vendor/github.com/containerd/containerd/api</changelog>
  <changelog author="hsk17@mail.de" date="1746273600">- Add open-vm-tools-12.5.0-gcc15.patch from upstream to fix
  gcc15 compile time error (boo#1241938)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1747137600">- update to 12.5.2 (bsc#1243106):
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/open-vm-tools/ChangeLog
  This release resolves CVE-2025-22247. For more information on this
  vulnerability and its impact on Broadcom products, see
  VMSA-2025-0007
  https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683</changelog>
  <changelog author="kallan@suse.com" date="1750420800">- Update to open-vm-tools 13.0.0 based on build 24696409. (boo#1245169):
  There are no new features in the open-vm-tools 13.0.0 release.  This is
  primarily a maintenance release that addresses a few issues, including:
  - The vm-support script has been updated to collect the open-vm-tools log
    files from the Linux guest and information from the systemd journal.
  - Github pull requests has been integrated and issues fixed.  Please see
    the Resolved Issues section of the Release Notes.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-13.0.0
  Release Notes are available at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/ReleaseNotes.md
  The granular changes that have gone into the 13.0.0 release are in the
  ChangeLog at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/open-vm-tools/ChangeLog
- Add patch:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  Currently the "telinit 6" command is used to reboot a Linux VM
  following Guest OS Customization.  As the classic Linux init system,
  SysVinit, is deprecated in favor of a newer init system, systemd,
  the telinit command may not be available on the base Linux OS.
  This change adds support to Guest OS Customization for the systemd init
  system.  If the modern init system, systemd, is available, then a
  "systemctl reboot" command will be used to trigger reboot.  Otherwise,
  the "telinit 6" command will be used assuming the traditional init
  system, SysVinit, is still available.
- Drop patch now contained in 13.0.0:
  open-vm-tools-12.5.0-gcc15.patch
- Ran /usr/lib/obs/service/source_validators/helpers/fix_changelog to fix changes
  file where source validator was failing.</changelog>
  <changelog author="kallan@suse.com" date="1758628800">- Fix (bsc#1250373 (CVE-2025-41244) - VUL-0: contains a local privilege
  escalation vulnerability.
  + Add patch:
  - CVE-2025-41244-1240-1300-SDMP.patch</changelog>
</package>
<package pkgid="dca8d34ec6489e29dda12c51e9ede8dc65c6a6c527dd9e4892d9986bddc51d4c" name="open-vm-tools-salt-minion" arch="x86_64">
  <version epoch="0" ver="13.0.10" rel="150600.3.24.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1697976000">- Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer
  needed, nor used (since 12.3.0 release).</changelog>
  <changelog author="kallan@suse.com" date="1698667200">- Update to 12.3.5 (build 22544099) (boo#1216670)
  - There are no new features in the open-vm-tools 12.3.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release resolves CVE-2023-34058. For more information on this
    vulnerability and its impact on VMware products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0024.html.
  - This release resolves CVE-2023-34059 which only affects open-vm-tools.
    For more information on this vulnerability, please see the Resolved
    Issues section of the Release Notes.
  - A GitHub issue has been handled. Please see the Resolved Issues section
    of the Release Notes.
  - An update to the deployPkg plugin to coordinate with recent releases
    of cloud-init for improvement for guest VM customization.
  - For issues resolved in this release, see the Resolved Issues
    &lt;https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#resolved-issues&gt;
    section of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.5 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/ChangeLog
- Drop patch now contained in 12.3.5:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="kallan@suse.com" date="1702296000">- Fix (bsc#1217796) - Fix outdated libxmlsec1 dependency version.
  Updates to open-vm-tools for SLES 12 SP4 and SP5 are now being built
  againt against libxmlsec1-1-1.2.37. Update the spec file to now require
  libxmlsec1-openssl1 &gt;= 1.2.37.</changelog>
  <changelog author="dimstar@opensuse.org" date="1703073600">- Own %{_modulesloaddir}: used to be present via udev-mini -&gt; kmod
  - &gt; suse-module-tools dependency before.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1711195200">- update to 12.4.0:
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/open-vm-tools/ChangeLog
  There are no new features in the open-vm-tools 12.4.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been handled. Please see the Resolved
    Issues section of the Release Notes.
  * A number of issues flagged by Coverity have been addressed.
  * For issues resolved in this release, see the Resolved Issues
    section of the Release Notes.</changelog>
  <changelog author="kallan@suse.com" date="1711540800">- Remove protobuf &lt; 22 dependency from spec file (bsc#1217478)
  Required linking with additional absl libraries for sle_version &gt; 150400.
- Use (boo#1222089) for updating open-vm-tools to version 12.4.0.</changelog>
  <changelog author="kallan@suse.com" date="1719835200">- Update to 12.4.5 (build 23787635) (boo#1227181)
  - There are no new features in the open-vm-tools 12.4.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - A Github pull request and associated issue has been handled. Please
    see the Resolved Issues section of the Release Notes.
  - A number of issues flagged by Coverity and ShellCheck have been
    addressed.
  - A vmtoolsd process hang related to nested logging from an RPC Channel
    error has been fixed.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see: https://github.com/vmware/open-vm-tools/releases/tag/stable-12.4.5
  Release Notes are available at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/ReleaseNotes.md
  The granular changes that have gone into the 12.4.5 release are in the ChangeLog at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/open-vm-tools/ChangeLog</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1728648000">- convert to obs_scm
- update to 12.5.0 (boo#1231826):
  There are no new features in the open-vm-tools 12.5.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been integrated. Please see the
    Resolved Issues section of the Release Notes.
  * For a more complete list of issues resolved in this release,
    see the Resolved Issues section of the Release Notes.
  For complete details, see:
  https://github.com/vmware/open-vm-tools/releases/tag/stable-12.5.0
  Release Notes are available at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/ReleaseNotes.md
  The granular changes that have gone into the 12.5.0 release are
  in the ChangeLog at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/open-vm-tools/ChangeLog</changelog>
  <changelog author="kallan@suse.com" date="1740052800">- (bsc#1237180): Ensure vmtoolsd.service, vgauthd.service, and
  vmblock-fuse.service are set to enabled by default.</changelog>
  <changelog author="kallan@suse.com" date="1740484800">- Revert previous change (Thu Feb 20 23:08:43 UTC 2025).  The proposed
  solutions was non-standard.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742472000">- remove unused pcre build dependency</changelog>
  <changelog author="kallan@suse.com" date="1743076800">- (bsc#1237180): Ensure vmtoolsd.service and vgauthd.service
  are set to enabled by default. Do this by removing vmblock-fuse.service
  from the %pre section in the spec file.  vmblock-fuse.service still
  remains in the %pre desktop section.</changelog>
  <changelog author="kallan@suse.com" date="1744804800">- (bsc#1237147): Newer version of containerd do not have the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/api.
  Update detect-suse-location.patch to point to the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/vendor/github.com/containerd/containerd/api
  to find the needed files and update the tasks.proto file to import from
  github.com/containerd/containerd/vendor/github.com/containerd/containerd/api</changelog>
  <changelog author="hsk17@mail.de" date="1746273600">- Add open-vm-tools-12.5.0-gcc15.patch from upstream to fix
  gcc15 compile time error (boo#1241938)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1747137600">- update to 12.5.2 (bsc#1243106):
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/open-vm-tools/ChangeLog
  This release resolves CVE-2025-22247. For more information on this
  vulnerability and its impact on Broadcom products, see
  VMSA-2025-0007
  https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683</changelog>
  <changelog author="kallan@suse.com" date="1750420800">- Update to open-vm-tools 13.0.0 based on build 24696409. (boo#1245169):
  There are no new features in the open-vm-tools 13.0.0 release.  This is
  primarily a maintenance release that addresses a few issues, including:
  - The vm-support script has been updated to collect the open-vm-tools log
    files from the Linux guest and information from the systemd journal.
  - Github pull requests has been integrated and issues fixed.  Please see
    the Resolved Issues section of the Release Notes.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-13.0.0
  Release Notes are available at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/ReleaseNotes.md
  The granular changes that have gone into the 13.0.0 release are in the
  ChangeLog at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/open-vm-tools/ChangeLog
- Add patch:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  Currently the "telinit 6" command is used to reboot a Linux VM
  following Guest OS Customization.  As the classic Linux init system,
  SysVinit, is deprecated in favor of a newer init system, systemd,
  the telinit command may not be available on the base Linux OS.
  This change adds support to Guest OS Customization for the systemd init
  system.  If the modern init system, systemd, is available, then a
  "systemctl reboot" command will be used to trigger reboot.  Otherwise,
  the "telinit 6" command will be used assuming the traditional init
  system, SysVinit, is still available.
- Drop patch now contained in 13.0.0:
  open-vm-tools-12.5.0-gcc15.patch
- Ran /usr/lib/obs/service/source_validators/helpers/fix_changelog to fix changes
  file where source validator was failing.</changelog>
  <changelog author="kallan@suse.com" date="1758628800">- Fix (bsc#1250373 (CVE-2025-41244) - VUL-0: contains a local privilege
  escalation vulnerability.
  + Add patch:
  - CVE-2025-41244-1240-1300-SDMP.patch</changelog>
  <changelog author="kallan@suse.com" date="1759320000">- Update to open-vm-tools 13.0.5 based on build 24915695. (boo#1250692):
  Please refer to the Release Notes at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/ReleaseNotes.md.
  The granular changes that have gone into the open-vm-tools 13.0.5 release
  are in the ChangeLog at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/open-vm-tools/ChangeLog.
  There are no new features in the open-vm-tools 13.0.5 release. This is
  primarily a maintenance release that addresses a security issue.
  This release resolves and includes the patch for CVE-2025-41244. For more
  information on this vulnerability and its impact on Broadcom products,
  see VMSA-2025-0015.
  A patch to address CVE-2025-41244 on earlier open-vm-tools releases is
  provided to the Linux community at CVE-2025-41244.patch.
  A minor enhancement has been made for Guest OS Customization. The
  DeployPkg plugin has been updated to use "systemctl reboot", if available.
  For a more complete list of issues addressed in this release, see the
  What's New and Resolved Issues section of the Release Notes.
- Drop patch now contained in 13.0.5:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  CVE-2025-41244-1240-1300-SDMP.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1769515200">- update to 13.0.10 based on build 25056151: (boo#1257357):
  Please refer to the Release Notes at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.10/ReleaseNotes.md.
  The granular changes that have gone into the open-vm-tools
  13.0.10 release are in the ChangeLog at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.10/open-vm-tools/ChangeLog.
  There are no new features in the open-vm-tools 13.0.10 release.
  This is primarily a maintenance release that addresses a fix.
  A minor enhancement has been made for Guest OS Customization. The
  DeployPkg plugin has been updated to handle a new cloud-init
  error code that signals a recoverable error and allow cloud-init
  to finish running.
  For a more complete description of what's new in this release,
  see the What's New and Resolved Issues sections of the Release
  Notes.</changelog>
</package>
<package pkgid="b3be42c11d88a6351e87513c85fb06cebc3343df15159beab6d6bd731e80bcdb" name="open-vm-tools-salt-minion" arch="x86_64">
  <version epoch="0" ver="13.0.5" rel="150600.3.21.1"/>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697976000">- Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer
  needed, nor used (since 12.3.0 release).</changelog>
  <changelog author="kallan@suse.com" date="1698667200">- Update to 12.3.5 (build 22544099) (boo#1216670)
  - There are no new features in the open-vm-tools 12.3.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release resolves CVE-2023-34058. For more information on this
    vulnerability and its impact on VMware products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0024.html.
  - This release resolves CVE-2023-34059 which only affects open-vm-tools.
    For more information on this vulnerability, please see the Resolved
    Issues section of the Release Notes.
  - A GitHub issue has been handled. Please see the Resolved Issues section
    of the Release Notes.
  - An update to the deployPkg plugin to coordinate with recent releases
    of cloud-init for improvement for guest VM customization.
  - For issues resolved in this release, see the Resolved Issues
    &lt;https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#resolved-issues&gt;
    section of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.5 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/ChangeLog
- Drop patch now contained in 12.3.5:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="kallan@suse.com" date="1702296000">- Fix (bsc#1217796) - Fix outdated libxmlsec1 dependency version.
  Updates to open-vm-tools for SLES 12 SP4 and SP5 are now being built
  againt against libxmlsec1-1-1.2.37. Update the spec file to now require
  libxmlsec1-openssl1 &gt;= 1.2.37.</changelog>
  <changelog author="dimstar@opensuse.org" date="1703073600">- Own %{_modulesloaddir}: used to be present via udev-mini -&gt; kmod
  - &gt; suse-module-tools dependency before.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1711195200">- update to 12.4.0:
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/open-vm-tools/ChangeLog
  There are no new features in the open-vm-tools 12.4.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been handled. Please see the Resolved
    Issues section of the Release Notes.
  * A number of issues flagged by Coverity have been addressed.
  * For issues resolved in this release, see the Resolved Issues
    section of the Release Notes.</changelog>
  <changelog author="kallan@suse.com" date="1711540800">- Remove protobuf &lt; 22 dependency from spec file (bsc#1217478)
  Required linking with additional absl libraries for sle_version &gt; 150400.
- Use (boo#1222089) for updating open-vm-tools to version 12.4.0.</changelog>
  <changelog author="kallan@suse.com" date="1719835200">- Update to 12.4.5 (build 23787635) (boo#1227181)
  - There are no new features in the open-vm-tools 12.4.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - A Github pull request and associated issue has been handled. Please
    see the Resolved Issues section of the Release Notes.
  - A number of issues flagged by Coverity and ShellCheck have been
    addressed.
  - A vmtoolsd process hang related to nested logging from an RPC Channel
    error has been fixed.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see: https://github.com/vmware/open-vm-tools/releases/tag/stable-12.4.5
  Release Notes are available at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/ReleaseNotes.md
  The granular changes that have gone into the 12.4.5 release are in the ChangeLog at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/open-vm-tools/ChangeLog</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1728648000">- convert to obs_scm
- update to 12.5.0 (boo#1231826):
  There are no new features in the open-vm-tools 12.5.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been integrated. Please see the
    Resolved Issues section of the Release Notes.
  * For a more complete list of issues resolved in this release,
    see the Resolved Issues section of the Release Notes.
  For complete details, see:
  https://github.com/vmware/open-vm-tools/releases/tag/stable-12.5.0
  Release Notes are available at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/ReleaseNotes.md
  The granular changes that have gone into the 12.5.0 release are
  in the ChangeLog at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/open-vm-tools/ChangeLog</changelog>
  <changelog author="kallan@suse.com" date="1740052800">- (bsc#1237180): Ensure vmtoolsd.service, vgauthd.service, and
  vmblock-fuse.service are set to enabled by default.</changelog>
  <changelog author="kallan@suse.com" date="1740484800">- Revert previous change (Thu Feb 20 23:08:43 UTC 2025).  The proposed
  solutions was non-standard.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742472000">- remove unused pcre build dependency</changelog>
  <changelog author="kallan@suse.com" date="1743076800">- (bsc#1237180): Ensure vmtoolsd.service and vgauthd.service
  are set to enabled by default. Do this by removing vmblock-fuse.service
  from the %pre section in the spec file.  vmblock-fuse.service still
  remains in the %pre desktop section.</changelog>
  <changelog author="kallan@suse.com" date="1744804800">- (bsc#1237147): Newer version of containerd do not have the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/api.
  Update detect-suse-location.patch to point to the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/vendor/github.com/containerd/containerd/api
  to find the needed files and update the tasks.proto file to import from
  github.com/containerd/containerd/vendor/github.com/containerd/containerd/api</changelog>
  <changelog author="hsk17@mail.de" date="1746273600">- Add open-vm-tools-12.5.0-gcc15.patch from upstream to fix
  gcc15 compile time error (boo#1241938)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1747137600">- update to 12.5.2 (bsc#1243106):
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/open-vm-tools/ChangeLog
  This release resolves CVE-2025-22247. For more information on this
  vulnerability and its impact on Broadcom products, see
  VMSA-2025-0007
  https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683</changelog>
  <changelog author="kallan@suse.com" date="1750420800">- Update to open-vm-tools 13.0.0 based on build 24696409. (boo#1245169):
  There are no new features in the open-vm-tools 13.0.0 release.  This is
  primarily a maintenance release that addresses a few issues, including:
  - The vm-support script has been updated to collect the open-vm-tools log
    files from the Linux guest and information from the systemd journal.
  - Github pull requests has been integrated and issues fixed.  Please see
    the Resolved Issues section of the Release Notes.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-13.0.0
  Release Notes are available at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/ReleaseNotes.md
  The granular changes that have gone into the 13.0.0 release are in the
  ChangeLog at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/open-vm-tools/ChangeLog
- Add patch:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  Currently the "telinit 6" command is used to reboot a Linux VM
  following Guest OS Customization.  As the classic Linux init system,
  SysVinit, is deprecated in favor of a newer init system, systemd,
  the telinit command may not be available on the base Linux OS.
  This change adds support to Guest OS Customization for the systemd init
  system.  If the modern init system, systemd, is available, then a
  "systemctl reboot" command will be used to trigger reboot.  Otherwise,
  the "telinit 6" command will be used assuming the traditional init
  system, SysVinit, is still available.
- Drop patch now contained in 13.0.0:
  open-vm-tools-12.5.0-gcc15.patch
- Ran /usr/lib/obs/service/source_validators/helpers/fix_changelog to fix changes
  file where source validator was failing.</changelog>
  <changelog author="kallan@suse.com" date="1758628800">- Fix (bsc#1250373 (CVE-2025-41244) - VUL-0: contains a local privilege
  escalation vulnerability.
  + Add patch:
  - CVE-2025-41244-1240-1300-SDMP.patch</changelog>
  <changelog author="kallan@suse.com" date="1759320000">- Update to open-vm-tools 13.0.5 based on build 24915695. (boo#1250692):
  Please refer to the Release Notes at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/ReleaseNotes.md.
  The granular changes that have gone into the open-vm-tools 13.0.5 release
  are in the ChangeLog at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/open-vm-tools/ChangeLog.
  There are no new features in the open-vm-tools 13.0.5 release. This is
  primarily a maintenance release that addresses a security issue.
  This release resolves and includes the patch for CVE-2025-41244. For more
  information on this vulnerability and its impact on Broadcom products,
  see VMSA-2025-0015.
  A patch to address CVE-2025-41244 on earlier open-vm-tools releases is
  provided to the Linux community at CVE-2025-41244.patch.
  A minor enhancement has been made for Guest OS Customization. The
  DeployPkg plugin has been updated to use "systemctl reboot", if available.
  For a more complete list of issues addressed in this release, see the
  What's New and Resolved Issues section of the Release Notes.
- Drop patch now contained in 13.0.5:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  CVE-2025-41244-1240-1300-SDMP.patch</changelog>
</package>
<package pkgid="10717f26e39c0becf820fd2ff3f4f5cb8ee866080da4a6324a7207688f2024d3" name="open-vm-tools-salt-minion" arch="x86_64">
  <version epoch="0" ver="13.1.0" rel="150600.3.27.1"/>
  <changelog author="kallan@suse.com" date="1702296000">- Fix (bsc#1217796) - Fix outdated libxmlsec1 dependency version.
  Updates to open-vm-tools for SLES 12 SP4 and SP5 are now being built
  againt against libxmlsec1-1-1.2.37. Update the spec file to now require
  libxmlsec1-openssl1 &gt;= 1.2.37.</changelog>
  <changelog author="dimstar@opensuse.org" date="1703073600">- Own %{_modulesloaddir}: used to be present via udev-mini -&gt; kmod
  - &gt; suse-module-tools dependency before.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1711195200">- update to 12.4.0:
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/open-vm-tools/ChangeLog
  There are no new features in the open-vm-tools 12.4.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been handled. Please see the Resolved
    Issues section of the Release Notes.
  * A number of issues flagged by Coverity have been addressed.
  * For issues resolved in this release, see the Resolved Issues
    section of the Release Notes.</changelog>
  <changelog author="kallan@suse.com" date="1711540800">- Remove protobuf &lt; 22 dependency from spec file (bsc#1217478)
  Required linking with additional absl libraries for sle_version &gt; 150400.
- Use (boo#1222089) for updating open-vm-tools to version 12.4.0.</changelog>
  <changelog author="kallan@suse.com" date="1719835200">- Update to 12.4.5 (build 23787635) (boo#1227181)
  - There are no new features in the open-vm-tools 12.4.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - A Github pull request and associated issue has been handled. Please
    see the Resolved Issues section of the Release Notes.
  - A number of issues flagged by Coverity and ShellCheck have been
    addressed.
  - A vmtoolsd process hang related to nested logging from an RPC Channel
    error has been fixed.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see: https://github.com/vmware/open-vm-tools/releases/tag/stable-12.4.5
  Release Notes are available at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/ReleaseNotes.md
  The granular changes that have gone into the 12.4.5 release are in the ChangeLog at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/open-vm-tools/ChangeLog</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1728648000">- convert to obs_scm
- update to 12.5.0 (boo#1231826):
  There are no new features in the open-vm-tools 12.5.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been integrated. Please see the
    Resolved Issues section of the Release Notes.
  * For a more complete list of issues resolved in this release,
    see the Resolved Issues section of the Release Notes.
  For complete details, see:
  https://github.com/vmware/open-vm-tools/releases/tag/stable-12.5.0
  Release Notes are available at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/ReleaseNotes.md
  The granular changes that have gone into the 12.5.0 release are
  in the ChangeLog at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/open-vm-tools/ChangeLog</changelog>
  <changelog author="kallan@suse.com" date="1740052800">- (bsc#1237180): Ensure vmtoolsd.service, vgauthd.service, and
  vmblock-fuse.service are set to enabled by default.</changelog>
  <changelog author="kallan@suse.com" date="1740484800">- Revert previous change (Thu Feb 20 23:08:43 UTC 2025).  The proposed
  solutions was non-standard.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742472000">- remove unused pcre build dependency</changelog>
  <changelog author="kallan@suse.com" date="1743076800">- (bsc#1237180): Ensure vmtoolsd.service and vgauthd.service
  are set to enabled by default. Do this by removing vmblock-fuse.service
  from the %pre section in the spec file.  vmblock-fuse.service still
  remains in the %pre desktop section.</changelog>
  <changelog author="kallan@suse.com" date="1744804800">- (bsc#1237147): Newer version of containerd do not have the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/api.
  Update detect-suse-location.patch to point to the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/vendor/github.com/containerd/containerd/api
  to find the needed files and update the tasks.proto file to import from
  github.com/containerd/containerd/vendor/github.com/containerd/containerd/api</changelog>
  <changelog author="hsk17@mail.de" date="1746273600">- Add open-vm-tools-12.5.0-gcc15.patch from upstream to fix
  gcc15 compile time error (boo#1241938)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1747137600">- update to 12.5.2 (bsc#1243106):
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/open-vm-tools/ChangeLog
  This release resolves CVE-2025-22247. For more information on this
  vulnerability and its impact on Broadcom products, see
  VMSA-2025-0007
  https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683</changelog>
  <changelog author="kallan@suse.com" date="1750420800">- Update to open-vm-tools 13.0.0 based on build 24696409. (boo#1245169):
  There are no new features in the open-vm-tools 13.0.0 release.  This is
  primarily a maintenance release that addresses a few issues, including:
  - The vm-support script has been updated to collect the open-vm-tools log
    files from the Linux guest and information from the systemd journal.
  - Github pull requests has been integrated and issues fixed.  Please see
    the Resolved Issues section of the Release Notes.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-13.0.0
  Release Notes are available at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/ReleaseNotes.md
  The granular changes that have gone into the 13.0.0 release are in the
  ChangeLog at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/open-vm-tools/ChangeLog
- Add patch:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  Currently the "telinit 6" command is used to reboot a Linux VM
  following Guest OS Customization.  As the classic Linux init system,
  SysVinit, is deprecated in favor of a newer init system, systemd,
  the telinit command may not be available on the base Linux OS.
  This change adds support to Guest OS Customization for the systemd init
  system.  If the modern init system, systemd, is available, then a
  "systemctl reboot" command will be used to trigger reboot.  Otherwise,
  the "telinit 6" command will be used assuming the traditional init
  system, SysVinit, is still available.
- Drop patch now contained in 13.0.0:
  open-vm-tools-12.5.0-gcc15.patch
- Ran /usr/lib/obs/service/source_validators/helpers/fix_changelog to fix changes
  file where source validator was failing.</changelog>
  <changelog author="kallan@suse.com" date="1758628800">- Fix (bsc#1250373 (CVE-2025-41244) - VUL-0: contains a local privilege
  escalation vulnerability.
  + Add patch:
  - CVE-2025-41244-1240-1300-SDMP.patch</changelog>
  <changelog author="kallan@suse.com" date="1759320000">- Update to open-vm-tools 13.0.5 based on build 24915695. (boo#1250692):
  Please refer to the Release Notes at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/ReleaseNotes.md.
  The granular changes that have gone into the open-vm-tools 13.0.5 release
  are in the ChangeLog at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/open-vm-tools/ChangeLog.
  There are no new features in the open-vm-tools 13.0.5 release. This is
  primarily a maintenance release that addresses a security issue.
  This release resolves and includes the patch for CVE-2025-41244. For more
  information on this vulnerability and its impact on Broadcom products,
  see VMSA-2025-0015.
  A patch to address CVE-2025-41244 on earlier open-vm-tools releases is
  provided to the Linux community at CVE-2025-41244.patch.
  A minor enhancement has been made for Guest OS Customization. The
  DeployPkg plugin has been updated to use "systemctl reboot", if available.
  For a more complete list of issues addressed in this release, see the
  What's New and Resolved Issues section of the Release Notes.
- Drop patch now contained in 13.0.5:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  CVE-2025-41244-1240-1300-SDMP.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1769515200">- update to 13.0.10 based on build 25056151: (boo#1257357):
  Please refer to the Release Notes at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.10/ReleaseNotes.md.
  The granular changes that have gone into the open-vm-tools
  13.0.10 release are in the ChangeLog at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.10/open-vm-tools/ChangeLog.
  There are no new features in the open-vm-tools 13.0.10 release.
  This is primarily a maintenance release that addresses a fix.
  A minor enhancement has been made for Guest OS Customization. The
  DeployPkg plugin has been updated to handle a new cloud-init
  error code that signals a recoverable error and allow cloud-init
  to finish running.
  For a more complete description of what's new in this release,
  see the What's New and Resolved Issues sections of the Release
  Notes.</changelog>
  <changelog author="josef.melcr@suse.com" date="1777291200">- Fix build with glibc 2.43 (boo#1257312)
  + Add patch:
  - glibc243.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1778846400">- update to 13.1.0 release based on build 25218885: (boo#1265304)
  Please refer to the Release Notes at
  https://github.com/vmware/open-vm-tools/blob/stable-13.1.0/ReleaseNotes.md.
  Support for GNOME Toolkit version 4.
  This release of open-vm-tools supports building with either the
  GNOME Toolkit version 4 (GTK4) or to continue using version 3
  (GTK3). The configure script will accept options to restrict the
  build to either GTK3 or GTK4. If no restriction is applied, the
  latest version for which the required development package(s) are
  installed will be used. Please see the What's New section of the
  Release Notes for details.
  The following github issues have been resolved:
  - issue #707
  - issue #763
  The granular changes that have gone into the open-vm-tools 13.1.0
  release are in the ChangeLog at
  https://github.com/vmware/open-vm-tools/blob/stable-13.1.0/open-vm-tools/ChangeLog.
  For a more complete description of what is new in this release,
  see the What's New and Resolved Issues sections of the Release
  Notes.
  https://github.com/vmware/open-vm-tools/blob/stable-13.1.0/ReleaseNotes.md#whatsnew
  https://github.com/vmware/open-vm-tools/blob/stable-13.1.0/ReleaseNotes.md#resolved-issues</changelog>
</package>
<package pkgid="e9e61597cae512b4c420bebffae7fb877304f6da0b70341187ced092bc4708f1" name="open-vm-tools-sdmp" arch="x86_64">
  <version epoch="0" ver="12.5.2" rel="150600.3.12.1"/>
  <changelog author="kallan@suse.com" date="1694001600">- Update to 12.3.0 (build 22234872) (boo#1214850)
  - There are no new features in the open-vm-tools 12.3.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release integrates CVE-2023-20900 without the need for a patch.
    For more information on this vulnerability and its impact on VMware
    products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0019.html.
  - A tools.conf configuration setting is available to temporaily direct
    Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
    of ignoring file systems already frozen.
  - Building of the VMware Guest Authentication Service (VGAuth) using
    "xml-security-c" and "xerces-c" is being deprecated.
  - A number of Coverity reported issues have been addressed.
  - A number of GitHub issues and pull requests have been handled.
    Please see the Resolves Issues section of the Release Notes.
  - For issues resolved in this release, see the Resolved Issues section
    of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.0 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog
- Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests
- jsc-PED-1344 - reinable building containerinfo plugin for SLES 15 SP4.
- Drop patch now contained in 12.3.0:
  + 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch
  + 0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  + 2023-20867-Remove-some-dead-code.patch
  + CVE-20230-20900.patch</changelog>
  <changelog author="meissner@suse.com" date="1695297600">- open-vm-tools is built with containerinfo plugin from 15 sp3 onwards</changelog>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697976000">- Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer
  needed, nor used (since 12.3.0 release).</changelog>
  <changelog author="kallan@suse.com" date="1698667200">- Update to 12.3.5 (build 22544099) (boo#1216670)
  - There are no new features in the open-vm-tools 12.3.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release resolves CVE-2023-34058. For more information on this
    vulnerability and its impact on VMware products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0024.html.
  - This release resolves CVE-2023-34059 which only affects open-vm-tools.
    For more information on this vulnerability, please see the Resolved
    Issues section of the Release Notes.
  - A GitHub issue has been handled. Please see the Resolved Issues section
    of the Release Notes.
  - An update to the deployPkg plugin to coordinate with recent releases
    of cloud-init for improvement for guest VM customization.
  - For issues resolved in this release, see the Resolved Issues
    &lt;https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#resolved-issues&gt;
    section of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.5 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/ChangeLog
- Drop patch now contained in 12.3.5:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="kallan@suse.com" date="1702296000">- Fix (bsc#1217796) - Fix outdated libxmlsec1 dependency version.
  Updates to open-vm-tools for SLES 12 SP4 and SP5 are now being built
  againt against libxmlsec1-1-1.2.37. Update the spec file to now require
  libxmlsec1-openssl1 &gt;= 1.2.37.</changelog>
  <changelog author="dimstar@opensuse.org" date="1703073600">- Own %{_modulesloaddir}: used to be present via udev-mini -&gt; kmod
  - &gt; suse-module-tools dependency before.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1711195200">- update to 12.4.0:
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/open-vm-tools/ChangeLog
  There are no new features in the open-vm-tools 12.4.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been handled. Please see the Resolved
    Issues section of the Release Notes.
  * A number of issues flagged by Coverity have been addressed.
  * For issues resolved in this release, see the Resolved Issues
    section of the Release Notes.</changelog>
  <changelog author="kallan@suse.com" date="1711540800">- Remove protobuf &lt; 22 dependency from spec file (bsc#1217478)
  Required linking with additional absl libraries for sle_version &gt; 150400.
- Use (boo#1222089) for updating open-vm-tools to version 12.4.0.</changelog>
  <changelog author="kallan@suse.com" date="1719835200">- Update to 12.4.5 (build 23787635) (boo#1227181)
  - There are no new features in the open-vm-tools 12.4.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - A Github pull request and associated issue has been handled. Please
    see the Resolved Issues section of the Release Notes.
  - A number of issues flagged by Coverity and ShellCheck have been
    addressed.
  - A vmtoolsd process hang related to nested logging from an RPC Channel
    error has been fixed.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see: https://github.com/vmware/open-vm-tools/releases/tag/stable-12.4.5
  Release Notes are available at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/ReleaseNotes.md
  The granular changes that have gone into the 12.4.5 release are in the ChangeLog at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/open-vm-tools/ChangeLog</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1728648000">- convert to obs_scm
- update to 12.5.0 (boo#1231826):
  There are no new features in the open-vm-tools 12.5.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been integrated. Please see the
    Resolved Issues section of the Release Notes.
  * For a more complete list of issues resolved in this release,
    see the Resolved Issues section of the Release Notes.
  For complete details, see:
  https://github.com/vmware/open-vm-tools/releases/tag/stable-12.5.0
  Release Notes are available at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/ReleaseNotes.md
  The granular changes that have gone into the 12.5.0 release are
  in the ChangeLog at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/open-vm-tools/ChangeLog</changelog>
  <changelog author="kallan@suse.com" date="1740052800">- (bsc#1237180): Ensure vmtoolsd.service, vgauthd.service, and
  vmblock-fuse.service are set to enabled by default.</changelog>
  <changelog author="kallan@suse.com" date="1740484800">- Revert previous change (Thu Feb 20 23:08:43 UTC 2025).  The proposed
  solutions was non-standard.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742472000">- remove unused pcre build dependency</changelog>
  <changelog author="kallan@suse.com" date="1743076800">- (bsc#1237180): Ensure vmtoolsd.service and vgauthd.service
  are set to enabled by default. Do this by removing vmblock-fuse.service
  from the %pre section in the spec file.  vmblock-fuse.service still
  remains in the %pre desktop section.</changelog>
  <changelog author="kallan@suse.com" date="1744804800">- (bsc#1237147): Newer version of containerd do not have the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/api.
  Update detect-suse-location.patch to point to the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/vendor/github.com/containerd/containerd/api
  to find the needed files and update the tasks.proto file to import from
  github.com/containerd/containerd/vendor/github.com/containerd/containerd/api</changelog>
  <changelog author="hsk17@mail.de" date="1746273600">- Add open-vm-tools-12.5.0-gcc15.patch from upstream to fix
  gcc15 compile time error (boo#1241938)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1747137600">- update to 12.5.2 (bsc#1243106):
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/open-vm-tools/ChangeLog
  This release resolves CVE-2025-22247. For more information on this
  vulnerability and its impact on Broadcom products, see
  VMSA-2025-0007
  https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683</changelog>
</package>
<package pkgid="9a01aaed5f48512d67c0578b0391f72b7b16c7600e36dc2361cc09afa97fdd08" name="open-vm-tools-sdmp" arch="x86_64">
  <version epoch="0" ver="13.0.0" rel="150600.3.15.1"/>
  <changelog author="meissner@suse.com" date="1695297600">- open-vm-tools is built with containerinfo plugin from 15 sp3 onwards</changelog>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697976000">- Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer
  needed, nor used (since 12.3.0 release).</changelog>
  <changelog author="kallan@suse.com" date="1698667200">- Update to 12.3.5 (build 22544099) (boo#1216670)
  - There are no new features in the open-vm-tools 12.3.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release resolves CVE-2023-34058. For more information on this
    vulnerability and its impact on VMware products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0024.html.
  - This release resolves CVE-2023-34059 which only affects open-vm-tools.
    For more information on this vulnerability, please see the Resolved
    Issues section of the Release Notes.
  - A GitHub issue has been handled. Please see the Resolved Issues section
    of the Release Notes.
  - An update to the deployPkg plugin to coordinate with recent releases
    of cloud-init for improvement for guest VM customization.
  - For issues resolved in this release, see the Resolved Issues
    &lt;https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#resolved-issues&gt;
    section of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.5 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/ChangeLog
- Drop patch now contained in 12.3.5:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="kallan@suse.com" date="1702296000">- Fix (bsc#1217796) - Fix outdated libxmlsec1 dependency version.
  Updates to open-vm-tools for SLES 12 SP4 and SP5 are now being built
  againt against libxmlsec1-1-1.2.37. Update the spec file to now require
  libxmlsec1-openssl1 &gt;= 1.2.37.</changelog>
  <changelog author="dimstar@opensuse.org" date="1703073600">- Own %{_modulesloaddir}: used to be present via udev-mini -&gt; kmod
  - &gt; suse-module-tools dependency before.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1711195200">- update to 12.4.0:
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/open-vm-tools/ChangeLog
  There are no new features in the open-vm-tools 12.4.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been handled. Please see the Resolved
    Issues section of the Release Notes.
  * A number of issues flagged by Coverity have been addressed.
  * For issues resolved in this release, see the Resolved Issues
    section of the Release Notes.</changelog>
  <changelog author="kallan@suse.com" date="1711540800">- Remove protobuf &lt; 22 dependency from spec file (bsc#1217478)
  Required linking with additional absl libraries for sle_version &gt; 150400.
- Use (boo#1222089) for updating open-vm-tools to version 12.4.0.</changelog>
  <changelog author="kallan@suse.com" date="1719835200">- Update to 12.4.5 (build 23787635) (boo#1227181)
  - There are no new features in the open-vm-tools 12.4.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - A Github pull request and associated issue has been handled. Please
    see the Resolved Issues section of the Release Notes.
  - A number of issues flagged by Coverity and ShellCheck have been
    addressed.
  - A vmtoolsd process hang related to nested logging from an RPC Channel
    error has been fixed.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see: https://github.com/vmware/open-vm-tools/releases/tag/stable-12.4.5
  Release Notes are available at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/ReleaseNotes.md
  The granular changes that have gone into the 12.4.5 release are in the ChangeLog at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/open-vm-tools/ChangeLog</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1728648000">- convert to obs_scm
- update to 12.5.0 (boo#1231826):
  There are no new features in the open-vm-tools 12.5.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been integrated. Please see the
    Resolved Issues section of the Release Notes.
  * For a more complete list of issues resolved in this release,
    see the Resolved Issues section of the Release Notes.
  For complete details, see:
  https://github.com/vmware/open-vm-tools/releases/tag/stable-12.5.0
  Release Notes are available at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/ReleaseNotes.md
  The granular changes that have gone into the 12.5.0 release are
  in the ChangeLog at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/open-vm-tools/ChangeLog</changelog>
  <changelog author="kallan@suse.com" date="1740052800">- (bsc#1237180): Ensure vmtoolsd.service, vgauthd.service, and
  vmblock-fuse.service are set to enabled by default.</changelog>
  <changelog author="kallan@suse.com" date="1740484800">- Revert previous change (Thu Feb 20 23:08:43 UTC 2025).  The proposed
  solutions was non-standard.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742472000">- remove unused pcre build dependency</changelog>
  <changelog author="kallan@suse.com" date="1743076800">- (bsc#1237180): Ensure vmtoolsd.service and vgauthd.service
  are set to enabled by default. Do this by removing vmblock-fuse.service
  from the %pre section in the spec file.  vmblock-fuse.service still
  remains in the %pre desktop section.</changelog>
  <changelog author="kallan@suse.com" date="1744804800">- (bsc#1237147): Newer version of containerd do not have the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/api.
  Update detect-suse-location.patch to point to the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/vendor/github.com/containerd/containerd/api
  to find the needed files and update the tasks.proto file to import from
  github.com/containerd/containerd/vendor/github.com/containerd/containerd/api</changelog>
  <changelog author="hsk17@mail.de" date="1746273600">- Add open-vm-tools-12.5.0-gcc15.patch from upstream to fix
  gcc15 compile time error (boo#1241938)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1747137600">- update to 12.5.2 (bsc#1243106):
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/open-vm-tools/ChangeLog
  This release resolves CVE-2025-22247. For more information on this
  vulnerability and its impact on Broadcom products, see
  VMSA-2025-0007
  https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683</changelog>
  <changelog author="kallan@suse.com" date="1750420800">- Update to open-vm-tools 13.0.0 based on build 24696409. (boo#1245169):
  There are no new features in the open-vm-tools 13.0.0 release.  This is
  primarily a maintenance release that addresses a few issues, including:
  - The vm-support script has been updated to collect the open-vm-tools log
    files from the Linux guest and information from the systemd journal.
  - Github pull requests has been integrated and issues fixed.  Please see
    the Resolved Issues section of the Release Notes.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-13.0.0
  Release Notes are available at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/ReleaseNotes.md
  The granular changes that have gone into the 13.0.0 release are in the
  ChangeLog at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/open-vm-tools/ChangeLog
- Add patch:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  Currently the "telinit 6" command is used to reboot a Linux VM
  following Guest OS Customization.  As the classic Linux init system,
  SysVinit, is deprecated in favor of a newer init system, systemd,
  the telinit command may not be available on the base Linux OS.
  This change adds support to Guest OS Customization for the systemd init
  system.  If the modern init system, systemd, is available, then a
  "systemctl reboot" command will be used to trigger reboot.  Otherwise,
  the "telinit 6" command will be used assuming the traditional init
  system, SysVinit, is still available.
- Drop patch now contained in 13.0.0:
  open-vm-tools-12.5.0-gcc15.patch
- Ran /usr/lib/obs/service/source_validators/helpers/fix_changelog to fix changes
  file where source validator was failing.</changelog>
</package>
<package pkgid="01f45431c06248ddaa8afc60d386c40c1239316c9b727ad7b37c7b9dcad8fd45" name="open-vm-tools-sdmp" arch="x86_64">
  <version epoch="0" ver="13.0.0" rel="150600.3.18.1"/>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697976000">- Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer
  needed, nor used (since 12.3.0 release).</changelog>
  <changelog author="kallan@suse.com" date="1698667200">- Update to 12.3.5 (build 22544099) (boo#1216670)
  - There are no new features in the open-vm-tools 12.3.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release resolves CVE-2023-34058. For more information on this
    vulnerability and its impact on VMware products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0024.html.
  - This release resolves CVE-2023-34059 which only affects open-vm-tools.
    For more information on this vulnerability, please see the Resolved
    Issues section of the Release Notes.
  - A GitHub issue has been handled. Please see the Resolved Issues section
    of the Release Notes.
  - An update to the deployPkg plugin to coordinate with recent releases
    of cloud-init for improvement for guest VM customization.
  - For issues resolved in this release, see the Resolved Issues
    &lt;https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#resolved-issues&gt;
    section of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.5 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/ChangeLog
- Drop patch now contained in 12.3.5:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="kallan@suse.com" date="1702296000">- Fix (bsc#1217796) - Fix outdated libxmlsec1 dependency version.
  Updates to open-vm-tools for SLES 12 SP4 and SP5 are now being built
  againt against libxmlsec1-1-1.2.37. Update the spec file to now require
  libxmlsec1-openssl1 &gt;= 1.2.37.</changelog>
  <changelog author="dimstar@opensuse.org" date="1703073600">- Own %{_modulesloaddir}: used to be present via udev-mini -&gt; kmod
  - &gt; suse-module-tools dependency before.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1711195200">- update to 12.4.0:
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/open-vm-tools/ChangeLog
  There are no new features in the open-vm-tools 12.4.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been handled. Please see the Resolved
    Issues section of the Release Notes.
  * A number of issues flagged by Coverity have been addressed.
  * For issues resolved in this release, see the Resolved Issues
    section of the Release Notes.</changelog>
  <changelog author="kallan@suse.com" date="1711540800">- Remove protobuf &lt; 22 dependency from spec file (bsc#1217478)
  Required linking with additional absl libraries for sle_version &gt; 150400.
- Use (boo#1222089) for updating open-vm-tools to version 12.4.0.</changelog>
  <changelog author="kallan@suse.com" date="1719835200">- Update to 12.4.5 (build 23787635) (boo#1227181)
  - There are no new features in the open-vm-tools 12.4.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - A Github pull request and associated issue has been handled. Please
    see the Resolved Issues section of the Release Notes.
  - A number of issues flagged by Coverity and ShellCheck have been
    addressed.
  - A vmtoolsd process hang related to nested logging from an RPC Channel
    error has been fixed.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see: https://github.com/vmware/open-vm-tools/releases/tag/stable-12.4.5
  Release Notes are available at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/ReleaseNotes.md
  The granular changes that have gone into the 12.4.5 release are in the ChangeLog at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/open-vm-tools/ChangeLog</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1728648000">- convert to obs_scm
- update to 12.5.0 (boo#1231826):
  There are no new features in the open-vm-tools 12.5.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been integrated. Please see the
    Resolved Issues section of the Release Notes.
  * For a more complete list of issues resolved in this release,
    see the Resolved Issues section of the Release Notes.
  For complete details, see:
  https://github.com/vmware/open-vm-tools/releases/tag/stable-12.5.0
  Release Notes are available at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/ReleaseNotes.md
  The granular changes that have gone into the 12.5.0 release are
  in the ChangeLog at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/open-vm-tools/ChangeLog</changelog>
  <changelog author="kallan@suse.com" date="1740052800">- (bsc#1237180): Ensure vmtoolsd.service, vgauthd.service, and
  vmblock-fuse.service are set to enabled by default.</changelog>
  <changelog author="kallan@suse.com" date="1740484800">- Revert previous change (Thu Feb 20 23:08:43 UTC 2025).  The proposed
  solutions was non-standard.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742472000">- remove unused pcre build dependency</changelog>
  <changelog author="kallan@suse.com" date="1743076800">- (bsc#1237180): Ensure vmtoolsd.service and vgauthd.service
  are set to enabled by default. Do this by removing vmblock-fuse.service
  from the %pre section in the spec file.  vmblock-fuse.service still
  remains in the %pre desktop section.</changelog>
  <changelog author="kallan@suse.com" date="1744804800">- (bsc#1237147): Newer version of containerd do not have the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/api.
  Update detect-suse-location.patch to point to the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/vendor/github.com/containerd/containerd/api
  to find the needed files and update the tasks.proto file to import from
  github.com/containerd/containerd/vendor/github.com/containerd/containerd/api</changelog>
  <changelog author="hsk17@mail.de" date="1746273600">- Add open-vm-tools-12.5.0-gcc15.patch from upstream to fix
  gcc15 compile time error (boo#1241938)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1747137600">- update to 12.5.2 (bsc#1243106):
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/open-vm-tools/ChangeLog
  This release resolves CVE-2025-22247. For more information on this
  vulnerability and its impact on Broadcom products, see
  VMSA-2025-0007
  https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683</changelog>
  <changelog author="kallan@suse.com" date="1750420800">- Update to open-vm-tools 13.0.0 based on build 24696409. (boo#1245169):
  There are no new features in the open-vm-tools 13.0.0 release.  This is
  primarily a maintenance release that addresses a few issues, including:
  - The vm-support script has been updated to collect the open-vm-tools log
    files from the Linux guest and information from the systemd journal.
  - Github pull requests has been integrated and issues fixed.  Please see
    the Resolved Issues section of the Release Notes.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-13.0.0
  Release Notes are available at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/ReleaseNotes.md
  The granular changes that have gone into the 13.0.0 release are in the
  ChangeLog at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/open-vm-tools/ChangeLog
- Add patch:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  Currently the "telinit 6" command is used to reboot a Linux VM
  following Guest OS Customization.  As the classic Linux init system,
  SysVinit, is deprecated in favor of a newer init system, systemd,
  the telinit command may not be available on the base Linux OS.
  This change adds support to Guest OS Customization for the systemd init
  system.  If the modern init system, systemd, is available, then a
  "systemctl reboot" command will be used to trigger reboot.  Otherwise,
  the "telinit 6" command will be used assuming the traditional init
  system, SysVinit, is still available.
- Drop patch now contained in 13.0.0:
  open-vm-tools-12.5.0-gcc15.patch
- Ran /usr/lib/obs/service/source_validators/helpers/fix_changelog to fix changes
  file where source validator was failing.</changelog>
  <changelog author="kallan@suse.com" date="1758628800">- Fix (bsc#1250373 (CVE-2025-41244) - VUL-0: contains a local privilege
  escalation vulnerability.
  + Add patch:
  - CVE-2025-41244-1240-1300-SDMP.patch</changelog>
</package>
<package pkgid="e1b6c7319496d9c19af8ff5aa6432b4a731063c0a385a172d5ba7972c1f27938" name="open-vm-tools-sdmp" arch="x86_64">
  <version epoch="0" ver="13.0.10" rel="150600.3.24.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1697976000">- Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer
  needed, nor used (since 12.3.0 release).</changelog>
  <changelog author="kallan@suse.com" date="1698667200">- Update to 12.3.5 (build 22544099) (boo#1216670)
  - There are no new features in the open-vm-tools 12.3.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release resolves CVE-2023-34058. For more information on this
    vulnerability and its impact on VMware products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0024.html.
  - This release resolves CVE-2023-34059 which only affects open-vm-tools.
    For more information on this vulnerability, please see the Resolved
    Issues section of the Release Notes.
  - A GitHub issue has been handled. Please see the Resolved Issues section
    of the Release Notes.
  - An update to the deployPkg plugin to coordinate with recent releases
    of cloud-init for improvement for guest VM customization.
  - For issues resolved in this release, see the Resolved Issues
    &lt;https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#resolved-issues&gt;
    section of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.5 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/ChangeLog
- Drop patch now contained in 12.3.5:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="kallan@suse.com" date="1702296000">- Fix (bsc#1217796) - Fix outdated libxmlsec1 dependency version.
  Updates to open-vm-tools for SLES 12 SP4 and SP5 are now being built
  againt against libxmlsec1-1-1.2.37. Update the spec file to now require
  libxmlsec1-openssl1 &gt;= 1.2.37.</changelog>
  <changelog author="dimstar@opensuse.org" date="1703073600">- Own %{_modulesloaddir}: used to be present via udev-mini -&gt; kmod
  - &gt; suse-module-tools dependency before.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1711195200">- update to 12.4.0:
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/open-vm-tools/ChangeLog
  There are no new features in the open-vm-tools 12.4.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been handled. Please see the Resolved
    Issues section of the Release Notes.
  * A number of issues flagged by Coverity have been addressed.
  * For issues resolved in this release, see the Resolved Issues
    section of the Release Notes.</changelog>
  <changelog author="kallan@suse.com" date="1711540800">- Remove protobuf &lt; 22 dependency from spec file (bsc#1217478)
  Required linking with additional absl libraries for sle_version &gt; 150400.
- Use (boo#1222089) for updating open-vm-tools to version 12.4.0.</changelog>
  <changelog author="kallan@suse.com" date="1719835200">- Update to 12.4.5 (build 23787635) (boo#1227181)
  - There are no new features in the open-vm-tools 12.4.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - A Github pull request and associated issue has been handled. Please
    see the Resolved Issues section of the Release Notes.
  - A number of issues flagged by Coverity and ShellCheck have been
    addressed.
  - A vmtoolsd process hang related to nested logging from an RPC Channel
    error has been fixed.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see: https://github.com/vmware/open-vm-tools/releases/tag/stable-12.4.5
  Release Notes are available at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/ReleaseNotes.md
  The granular changes that have gone into the 12.4.5 release are in the ChangeLog at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/open-vm-tools/ChangeLog</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1728648000">- convert to obs_scm
- update to 12.5.0 (boo#1231826):
  There are no new features in the open-vm-tools 12.5.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been integrated. Please see the
    Resolved Issues section of the Release Notes.
  * For a more complete list of issues resolved in this release,
    see the Resolved Issues section of the Release Notes.
  For complete details, see:
  https://github.com/vmware/open-vm-tools/releases/tag/stable-12.5.0
  Release Notes are available at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/ReleaseNotes.md
  The granular changes that have gone into the 12.5.0 release are
  in the ChangeLog at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/open-vm-tools/ChangeLog</changelog>
  <changelog author="kallan@suse.com" date="1740052800">- (bsc#1237180): Ensure vmtoolsd.service, vgauthd.service, and
  vmblock-fuse.service are set to enabled by default.</changelog>
  <changelog author="kallan@suse.com" date="1740484800">- Revert previous change (Thu Feb 20 23:08:43 UTC 2025).  The proposed
  solutions was non-standard.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742472000">- remove unused pcre build dependency</changelog>
  <changelog author="kallan@suse.com" date="1743076800">- (bsc#1237180): Ensure vmtoolsd.service and vgauthd.service
  are set to enabled by default. Do this by removing vmblock-fuse.service
  from the %pre section in the spec file.  vmblock-fuse.service still
  remains in the %pre desktop section.</changelog>
  <changelog author="kallan@suse.com" date="1744804800">- (bsc#1237147): Newer version of containerd do not have the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/api.
  Update detect-suse-location.patch to point to the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/vendor/github.com/containerd/containerd/api
  to find the needed files and update the tasks.proto file to import from
  github.com/containerd/containerd/vendor/github.com/containerd/containerd/api</changelog>
  <changelog author="hsk17@mail.de" date="1746273600">- Add open-vm-tools-12.5.0-gcc15.patch from upstream to fix
  gcc15 compile time error (boo#1241938)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1747137600">- update to 12.5.2 (bsc#1243106):
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/open-vm-tools/ChangeLog
  This release resolves CVE-2025-22247. For more information on this
  vulnerability and its impact on Broadcom products, see
  VMSA-2025-0007
  https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683</changelog>
  <changelog author="kallan@suse.com" date="1750420800">- Update to open-vm-tools 13.0.0 based on build 24696409. (boo#1245169):
  There are no new features in the open-vm-tools 13.0.0 release.  This is
  primarily a maintenance release that addresses a few issues, including:
  - The vm-support script has been updated to collect the open-vm-tools log
    files from the Linux guest and information from the systemd journal.
  - Github pull requests has been integrated and issues fixed.  Please see
    the Resolved Issues section of the Release Notes.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-13.0.0
  Release Notes are available at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/ReleaseNotes.md
  The granular changes that have gone into the 13.0.0 release are in the
  ChangeLog at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/open-vm-tools/ChangeLog
- Add patch:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  Currently the "telinit 6" command is used to reboot a Linux VM
  following Guest OS Customization.  As the classic Linux init system,
  SysVinit, is deprecated in favor of a newer init system, systemd,
  the telinit command may not be available on the base Linux OS.
  This change adds support to Guest OS Customization for the systemd init
  system.  If the modern init system, systemd, is available, then a
  "systemctl reboot" command will be used to trigger reboot.  Otherwise,
  the "telinit 6" command will be used assuming the traditional init
  system, SysVinit, is still available.
- Drop patch now contained in 13.0.0:
  open-vm-tools-12.5.0-gcc15.patch
- Ran /usr/lib/obs/service/source_validators/helpers/fix_changelog to fix changes
  file where source validator was failing.</changelog>
  <changelog author="kallan@suse.com" date="1758628800">- Fix (bsc#1250373 (CVE-2025-41244) - VUL-0: contains a local privilege
  escalation vulnerability.
  + Add patch:
  - CVE-2025-41244-1240-1300-SDMP.patch</changelog>
  <changelog author="kallan@suse.com" date="1759320000">- Update to open-vm-tools 13.0.5 based on build 24915695. (boo#1250692):
  Please refer to the Release Notes at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/ReleaseNotes.md.
  The granular changes that have gone into the open-vm-tools 13.0.5 release
  are in the ChangeLog at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/open-vm-tools/ChangeLog.
  There are no new features in the open-vm-tools 13.0.5 release. This is
  primarily a maintenance release that addresses a security issue.
  This release resolves and includes the patch for CVE-2025-41244. For more
  information on this vulnerability and its impact on Broadcom products,
  see VMSA-2025-0015.
  A patch to address CVE-2025-41244 on earlier open-vm-tools releases is
  provided to the Linux community at CVE-2025-41244.patch.
  A minor enhancement has been made for Guest OS Customization. The
  DeployPkg plugin has been updated to use "systemctl reboot", if available.
  For a more complete list of issues addressed in this release, see the
  What's New and Resolved Issues section of the Release Notes.
- Drop patch now contained in 13.0.5:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  CVE-2025-41244-1240-1300-SDMP.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1769515200">- update to 13.0.10 based on build 25056151: (boo#1257357):
  Please refer to the Release Notes at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.10/ReleaseNotes.md.
  The granular changes that have gone into the open-vm-tools
  13.0.10 release are in the ChangeLog at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.10/open-vm-tools/ChangeLog.
  There are no new features in the open-vm-tools 13.0.10 release.
  This is primarily a maintenance release that addresses a fix.
  A minor enhancement has been made for Guest OS Customization. The
  DeployPkg plugin has been updated to handle a new cloud-init
  error code that signals a recoverable error and allow cloud-init
  to finish running.
  For a more complete description of what's new in this release,
  see the What's New and Resolved Issues sections of the Release
  Notes.</changelog>
</package>
<package pkgid="8390e1eeddd7211473d3b4f5dd0b714151505c51b20dabaef6651d2aabde5d3d" name="open-vm-tools-sdmp" arch="x86_64">
  <version epoch="0" ver="13.0.5" rel="150600.3.21.1"/>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697976000">- Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer
  needed, nor used (since 12.3.0 release).</changelog>
  <changelog author="kallan@suse.com" date="1698667200">- Update to 12.3.5 (build 22544099) (boo#1216670)
  - There are no new features in the open-vm-tools 12.3.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release resolves CVE-2023-34058. For more information on this
    vulnerability and its impact on VMware products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0024.html.
  - This release resolves CVE-2023-34059 which only affects open-vm-tools.
    For more information on this vulnerability, please see the Resolved
    Issues section of the Release Notes.
  - A GitHub issue has been handled. Please see the Resolved Issues section
    of the Release Notes.
  - An update to the deployPkg plugin to coordinate with recent releases
    of cloud-init for improvement for guest VM customization.
  - For issues resolved in this release, see the Resolved Issues
    &lt;https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#resolved-issues&gt;
    section of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.5 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/ChangeLog
- Drop patch now contained in 12.3.5:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="kallan@suse.com" date="1702296000">- Fix (bsc#1217796) - Fix outdated libxmlsec1 dependency version.
  Updates to open-vm-tools for SLES 12 SP4 and SP5 are now being built
  againt against libxmlsec1-1-1.2.37. Update the spec file to now require
  libxmlsec1-openssl1 &gt;= 1.2.37.</changelog>
  <changelog author="dimstar@opensuse.org" date="1703073600">- Own %{_modulesloaddir}: used to be present via udev-mini -&gt; kmod
  - &gt; suse-module-tools dependency before.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1711195200">- update to 12.4.0:
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/open-vm-tools/ChangeLog
  There are no new features in the open-vm-tools 12.4.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been handled. Please see the Resolved
    Issues section of the Release Notes.
  * A number of issues flagged by Coverity have been addressed.
  * For issues resolved in this release, see the Resolved Issues
    section of the Release Notes.</changelog>
  <changelog author="kallan@suse.com" date="1711540800">- Remove protobuf &lt; 22 dependency from spec file (bsc#1217478)
  Required linking with additional absl libraries for sle_version &gt; 150400.
- Use (boo#1222089) for updating open-vm-tools to version 12.4.0.</changelog>
  <changelog author="kallan@suse.com" date="1719835200">- Update to 12.4.5 (build 23787635) (boo#1227181)
  - There are no new features in the open-vm-tools 12.4.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - A Github pull request and associated issue has been handled. Please
    see the Resolved Issues section of the Release Notes.
  - A number of issues flagged by Coverity and ShellCheck have been
    addressed.
  - A vmtoolsd process hang related to nested logging from an RPC Channel
    error has been fixed.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see: https://github.com/vmware/open-vm-tools/releases/tag/stable-12.4.5
  Release Notes are available at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/ReleaseNotes.md
  The granular changes that have gone into the 12.4.5 release are in the ChangeLog at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/open-vm-tools/ChangeLog</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1728648000">- convert to obs_scm
- update to 12.5.0 (boo#1231826):
  There are no new features in the open-vm-tools 12.5.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been integrated. Please see the
    Resolved Issues section of the Release Notes.
  * For a more complete list of issues resolved in this release,
    see the Resolved Issues section of the Release Notes.
  For complete details, see:
  https://github.com/vmware/open-vm-tools/releases/tag/stable-12.5.0
  Release Notes are available at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/ReleaseNotes.md
  The granular changes that have gone into the 12.5.0 release are
  in the ChangeLog at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/open-vm-tools/ChangeLog</changelog>
  <changelog author="kallan@suse.com" date="1740052800">- (bsc#1237180): Ensure vmtoolsd.service, vgauthd.service, and
  vmblock-fuse.service are set to enabled by default.</changelog>
  <changelog author="kallan@suse.com" date="1740484800">- Revert previous change (Thu Feb 20 23:08:43 UTC 2025).  The proposed
  solutions was non-standard.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742472000">- remove unused pcre build dependency</changelog>
  <changelog author="kallan@suse.com" date="1743076800">- (bsc#1237180): Ensure vmtoolsd.service and vgauthd.service
  are set to enabled by default. Do this by removing vmblock-fuse.service
  from the %pre section in the spec file.  vmblock-fuse.service still
  remains in the %pre desktop section.</changelog>
  <changelog author="kallan@suse.com" date="1744804800">- (bsc#1237147): Newer version of containerd do not have the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/api.
  Update detect-suse-location.patch to point to the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/vendor/github.com/containerd/containerd/api
  to find the needed files and update the tasks.proto file to import from
  github.com/containerd/containerd/vendor/github.com/containerd/containerd/api</changelog>
  <changelog author="hsk17@mail.de" date="1746273600">- Add open-vm-tools-12.5.0-gcc15.patch from upstream to fix
  gcc15 compile time error (boo#1241938)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1747137600">- update to 12.5.2 (bsc#1243106):
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/open-vm-tools/ChangeLog
  This release resolves CVE-2025-22247. For more information on this
  vulnerability and its impact on Broadcom products, see
  VMSA-2025-0007
  https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683</changelog>
  <changelog author="kallan@suse.com" date="1750420800">- Update to open-vm-tools 13.0.0 based on build 24696409. (boo#1245169):
  There are no new features in the open-vm-tools 13.0.0 release.  This is
  primarily a maintenance release that addresses a few issues, including:
  - The vm-support script has been updated to collect the open-vm-tools log
    files from the Linux guest and information from the systemd journal.
  - Github pull requests has been integrated and issues fixed.  Please see
    the Resolved Issues section of the Release Notes.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-13.0.0
  Release Notes are available at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/ReleaseNotes.md
  The granular changes that have gone into the 13.0.0 release are in the
  ChangeLog at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/open-vm-tools/ChangeLog
- Add patch:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  Currently the "telinit 6" command is used to reboot a Linux VM
  following Guest OS Customization.  As the classic Linux init system,
  SysVinit, is deprecated in favor of a newer init system, systemd,
  the telinit command may not be available on the base Linux OS.
  This change adds support to Guest OS Customization for the systemd init
  system.  If the modern init system, systemd, is available, then a
  "systemctl reboot" command will be used to trigger reboot.  Otherwise,
  the "telinit 6" command will be used assuming the traditional init
  system, SysVinit, is still available.
- Drop patch now contained in 13.0.0:
  open-vm-tools-12.5.0-gcc15.patch
- Ran /usr/lib/obs/service/source_validators/helpers/fix_changelog to fix changes
  file where source validator was failing.</changelog>
  <changelog author="kallan@suse.com" date="1758628800">- Fix (bsc#1250373 (CVE-2025-41244) - VUL-0: contains a local privilege
  escalation vulnerability.
  + Add patch:
  - CVE-2025-41244-1240-1300-SDMP.patch</changelog>
  <changelog author="kallan@suse.com" date="1759320000">- Update to open-vm-tools 13.0.5 based on build 24915695. (boo#1250692):
  Please refer to the Release Notes at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/ReleaseNotes.md.
  The granular changes that have gone into the open-vm-tools 13.0.5 release
  are in the ChangeLog at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/open-vm-tools/ChangeLog.
  There are no new features in the open-vm-tools 13.0.5 release. This is
  primarily a maintenance release that addresses a security issue.
  This release resolves and includes the patch for CVE-2025-41244. For more
  information on this vulnerability and its impact on Broadcom products,
  see VMSA-2025-0015.
  A patch to address CVE-2025-41244 on earlier open-vm-tools releases is
  provided to the Linux community at CVE-2025-41244.patch.
  A minor enhancement has been made for Guest OS Customization. The
  DeployPkg plugin has been updated to use "systemctl reboot", if available.
  For a more complete list of issues addressed in this release, see the
  What's New and Resolved Issues section of the Release Notes.
- Drop patch now contained in 13.0.5:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  CVE-2025-41244-1240-1300-SDMP.patch</changelog>
</package>
<package pkgid="8cd1689561b932a576641dea571ff6c75d55093c27a38347a088b8d2b0f3187b" name="open-vm-tools-sdmp" arch="x86_64">
  <version epoch="0" ver="13.1.0" rel="150600.3.27.1"/>
  <changelog author="kallan@suse.com" date="1702296000">- Fix (bsc#1217796) - Fix outdated libxmlsec1 dependency version.
  Updates to open-vm-tools for SLES 12 SP4 and SP5 are now being built
  againt against libxmlsec1-1-1.2.37. Update the spec file to now require
  libxmlsec1-openssl1 &gt;= 1.2.37.</changelog>
  <changelog author="dimstar@opensuse.org" date="1703073600">- Own %{_modulesloaddir}: used to be present via udev-mini -&gt; kmod
  - &gt; suse-module-tools dependency before.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1711195200">- update to 12.4.0:
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/open-vm-tools/ChangeLog
  There are no new features in the open-vm-tools 12.4.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been handled. Please see the Resolved
    Issues section of the Release Notes.
  * A number of issues flagged by Coverity have been addressed.
  * For issues resolved in this release, see the Resolved Issues
    section of the Release Notes.</changelog>
  <changelog author="kallan@suse.com" date="1711540800">- Remove protobuf &lt; 22 dependency from spec file (bsc#1217478)
  Required linking with additional absl libraries for sle_version &gt; 150400.
- Use (boo#1222089) for updating open-vm-tools to version 12.4.0.</changelog>
  <changelog author="kallan@suse.com" date="1719835200">- Update to 12.4.5 (build 23787635) (boo#1227181)
  - There are no new features in the open-vm-tools 12.4.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - A Github pull request and associated issue has been handled. Please
    see the Resolved Issues section of the Release Notes.
  - A number of issues flagged by Coverity and ShellCheck have been
    addressed.
  - A vmtoolsd process hang related to nested logging from an RPC Channel
    error has been fixed.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see: https://github.com/vmware/open-vm-tools/releases/tag/stable-12.4.5
  Release Notes are available at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/ReleaseNotes.md
  The granular changes that have gone into the 12.4.5 release are in the ChangeLog at: https://github.com/vmware/open-vm-tools/blob/stable-12.4.5/open-vm-tools/ChangeLog</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1728648000">- convert to obs_scm
- update to 12.5.0 (boo#1231826):
  There are no new features in the open-vm-tools 12.5.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been integrated. Please see the
    Resolved Issues section of the Release Notes.
  * For a more complete list of issues resolved in this release,
    see the Resolved Issues section of the Release Notes.
  For complete details, see:
  https://github.com/vmware/open-vm-tools/releases/tag/stable-12.5.0
  Release Notes are available at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/ReleaseNotes.md
  The granular changes that have gone into the 12.5.0 release are
  in the ChangeLog at:
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/open-vm-tools/ChangeLog</changelog>
  <changelog author="kallan@suse.com" date="1740052800">- (bsc#1237180): Ensure vmtoolsd.service, vgauthd.service, and
  vmblock-fuse.service are set to enabled by default.</changelog>
  <changelog author="kallan@suse.com" date="1740484800">- Revert previous change (Thu Feb 20 23:08:43 UTC 2025).  The proposed
  solutions was non-standard.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1742472000">- remove unused pcre build dependency</changelog>
  <changelog author="kallan@suse.com" date="1743076800">- (bsc#1237180): Ensure vmtoolsd.service and vgauthd.service
  are set to enabled by default. Do this by removing vmblock-fuse.service
  from the %pre section in the spec file.  vmblock-fuse.service still
  remains in the %pre desktop section.</changelog>
  <changelog author="kallan@suse.com" date="1744804800">- (bsc#1237147): Newer version of containerd do not have the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/api.
  Update detect-suse-location.patch to point to the directory
  /usr/share/go/1.x/contrib/src/github.com/containerd/containerd/vendor/github.com/containerd/containerd/api
  to find the needed files and update the tasks.proto file to import from
  github.com/containerd/containerd/vendor/github.com/containerd/containerd/api</changelog>
  <changelog author="hsk17@mail.de" date="1746273600">- Add open-vm-tools-12.5.0-gcc15.patch from upstream to fix
  gcc15 compile time error (boo#1241938)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1747137600">- update to 12.5.2 (bsc#1243106):
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.5.2/open-vm-tools/ChangeLog
  This release resolves CVE-2025-22247. For more information on this
  vulnerability and its impact on Broadcom products, see
  VMSA-2025-0007
  https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25683</changelog>
  <changelog author="kallan@suse.com" date="1750420800">- Update to open-vm-tools 13.0.0 based on build 24696409. (boo#1245169):
  There are no new features in the open-vm-tools 13.0.0 release.  This is
  primarily a maintenance release that addresses a few issues, including:
  - The vm-support script has been updated to collect the open-vm-tools log
    files from the Linux guest and information from the systemd journal.
  - Github pull requests has been integrated and issues fixed.  Please see
    the Resolved Issues section of the Release Notes.
  For a more complete list of issues resolved in this release, see the
  Resolved Issues section of the Release Notes.
  For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-13.0.0
  Release Notes are available at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/ReleaseNotes.md
  The granular changes that have gone into the 13.0.0 release are in the
  ChangeLog at:
    https://github.com/vmware/open-vm-tools/blob/stable-13.0.0/open-vm-tools/ChangeLog
- Add patch:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  Currently the "telinit 6" command is used to reboot a Linux VM
  following Guest OS Customization.  As the classic Linux init system,
  SysVinit, is deprecated in favor of a newer init system, systemd,
  the telinit command may not be available on the base Linux OS.
  This change adds support to Guest OS Customization for the systemd init
  system.  If the modern init system, systemd, is available, then a
  "systemctl reboot" command will be used to trigger reboot.  Otherwise,
  the "telinit 6" command will be used assuming the traditional init
  system, SysVinit, is still available.
- Drop patch now contained in 13.0.0:
  open-vm-tools-12.5.0-gcc15.patch
- Ran /usr/lib/obs/service/source_validators/helpers/fix_changelog to fix changes
  file where source validator was failing.</changelog>
  <changelog author="kallan@suse.com" date="1758628800">- Fix (bsc#1250373 (CVE-2025-41244) - VUL-0: contains a local privilege
  escalation vulnerability.
  + Add patch:
  - CVE-2025-41244-1240-1300-SDMP.patch</changelog>
  <changelog author="kallan@suse.com" date="1759320000">- Update to open-vm-tools 13.0.5 based on build 24915695. (boo#1250692):
  Please refer to the Release Notes at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/ReleaseNotes.md.
  The granular changes that have gone into the open-vm-tools 13.0.5 release
  are in the ChangeLog at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/open-vm-tools/ChangeLog.
  There are no new features in the open-vm-tools 13.0.5 release. This is
  primarily a maintenance release that addresses a security issue.
  This release resolves and includes the patch for CVE-2025-41244. For more
  information on this vulnerability and its impact on Broadcom products,
  see VMSA-2025-0015.
  A patch to address CVE-2025-41244 on earlier open-vm-tools releases is
  provided to the Linux community at CVE-2025-41244.patch.
  A minor enhancement has been made for Guest OS Customization. The
  DeployPkg plugin has been updated to use "systemctl reboot", if available.
  For a more complete list of issues addressed in this release, see the
  What's New and Resolved Issues section of the Release Notes.
- Drop patch now contained in 13.0.5:
  0001-GOSC-Update-Guest-OS-Customization-to-utilize-system.patch
  CVE-2025-41244-1240-1300-SDMP.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1769515200">- update to 13.0.10 based on build 25056151: (boo#1257357):
  Please refer to the Release Notes at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.10/ReleaseNotes.md.
  The granular changes that have gone into the open-vm-tools
  13.0.10 release are in the ChangeLog at
  https://github.com/vmware/open-vm-tools/blob/stable-13.0.10/open-vm-tools/ChangeLog.
  There are no new features in the open-vm-tools 13.0.10 release.
  This is primarily a maintenance release that addresses a fix.
  A minor enhancement has been made for Guest OS Customization. The
  DeployPkg plugin has been updated to handle a new cloud-init
  error code that signals a recoverable error and allow cloud-init
  to finish running.
  For a more complete description of what's new in this release,
  see the What's New and Resolved Issues sections of the Release
  Notes.</changelog>
  <changelog author="josef.melcr@suse.com" date="1777291200">- Fix build with glibc 2.43 (boo#1257312)
  + Add patch:
  - glibc243.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1778846400">- update to 13.1.0 release based on build 25218885: (boo#1265304)
  Please refer to the Release Notes at
  https://github.com/vmware/open-vm-tools/blob/stable-13.1.0/ReleaseNotes.md.
  Support for GNOME Toolkit version 4.
  This release of open-vm-tools supports building with either the
  GNOME Toolkit version 4 (GTK4) or to continue using version 3
  (GTK3). The configure script will accept options to restrict the
  build to either GTK3 or GTK4. If no restriction is applied, the
  latest version for which the required development package(s) are
  installed will be used. Please see the What's New section of the
  Release Notes for details.
  The following github issues have been resolved:
  - issue #707
  - issue #763
  The granular changes that have gone into the open-vm-tools 13.1.0
  release are in the ChangeLog at
  https://github.com/vmware/open-vm-tools/blob/stable-13.1.0/open-vm-tools/ChangeLog.
  For a more complete description of what is new in this release,
  see the What's New and Resolved Issues sections of the Release
  Notes.
  https://github.com/vmware/open-vm-tools/blob/stable-13.1.0/ReleaseNotes.md#whatsnew
  https://github.com/vmware/open-vm-tools/blob/stable-13.1.0/ReleaseNotes.md#resolved-issues</changelog>
</package>
<package pkgid="3727f49a567440e330ef75b555f6d6af5b42deab059324bb848a6074728bbf50" name="openjpeg2" arch="src">
  <version epoch="0" ver="2.3.0" rel="150000.3.21.1"/>
  <changelog author="gber@opensuse.org" date="1384257600">- cleanup
  - improve group, summary, description
  - fix license
  - fix build dependencies
  - use optflags, don't mess with debug symbols
  - fix library install path
  - create main package containing codec tools
  - build doxygen documentaion
  - fix %post/un scriptlets for the libopenjp2-6 subpackage
  - add baselibs</changelog>
  <changelog author="gber@opensuse.org" date="1384344000">- remove bogus dependency on libgeotiff-devel and depend on
  libtiff-devel
- ensure no bundled libraries are used</changelog>
  <changelog author="gber@opensuse.org" date="1385294400">- use pkgconfig macros
- let openjpeg2-devel only recommend openjpeg2</changelog>
  <changelog author="mrdocs@opensuse.org" date="1385467200">- add explicit libjpeg-devel to fix build on SLE 11</changelog>
  <changelog author="gber@opensuse.org" date="1385467201">- remove bogus dependency on libjpeg-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1392724800">- add libopenjp2.pc (demand introduced by ImageMagick 6.8.8-5)</changelog>
  <changelog author="hpj@urpla.net" date="1399550400">- version 2.0.1
  - New Features:
  * Digital Cinema profiles have been fixed and updated
  * New option to disable MCT if needed
  * extended RAW support: it is now possible to input raw images
    with subsampled color components (422, 420, etc)
  - API/ABI modifications: (see abi_compat_report_2.0.1.html in dev-utils/scripts)
  * No changes, API/ABI fully compatible with 2.0.0
  - Misc:
  * OpenJPEG is now officialy conformant with JPEG 2000 Part-1
    and will soon become official reference software at the
    JPEG committee.
  * Huge amount of bug fixes. See CHANGES for details.
- adjust library name</changelog>
  <changelog author="opensuse@dstoecker.de" date="1401192000">- update to version 2.1.0
  New Features:
  * Digital Cinema profiles have been fixed and updated
  * New option to disable MCT if needed
  * extended RAW support: it is now possible to input raw images
    with subsampled color components (422, 420, etc)
  * New way to deal with profiles
  API/ABI modifications: (see abi_compat_report in dev-utils/scripts)
  * Removed deprecated functions
  - opj_stream_create_default_file_stream(FILE*,...)
  - opj_stream_create_file_stream(FILE*,...)
  - opj_stream_set_user_data (opj_stream_t* p_stream, void * p_data)
  * Added
  - opj_stream_create_default_file_stream(char*,...)
  - opj_stream_create_file_stream(char*,...)
  - opj_stream_destroy(opj_stream_t*)
  - opj_stream_set_user_data (opj_stream_t* p_stream, void * p_data,
    ... opj_stream_free_user_data_fn p_function)
  - JPEG 2000 profiles and Part-2 extensions defined through '#define'
  * Changed
  - 'alpha' field added to 'opj_image_comp' structure
  - 'OPJ_CLRSPC_EYCC' added to enum COLOR_SPACE
  - 'OPJ_CLRSPC_CMYK' added to enum COLOR_SPACE
  - 'OPJ_CODEC_JPP' and 'OPJ_CODEC_JPX' added to CODEC_FORMAT
    (not yet used in use)
  - 'max_cs_size' and 'rsiz' fields added to opj_cparameters_t
  Misc:
  * OpenJPEG is now officialy conformant with JPEG 2000 Part-1
    and will soon become official reference software at the
    JPEG committee.
  * Huge amount of bug fixes. See CHANGES for details.</changelog>
  <changelog author="coolo@suse.com" date="1401537600">- pimp up the previous changelog</changelog>
  <changelog author="mpluskal@suse.com" date="1441368000">- Use cmake macro
- Remove baselibs.conf (it was broken anyways for months)
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1445256000">- Re-add baselibs.conf, needed by poppler and leptonica</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Add a pkg-config dependency; expand pkgconfig</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1482148800">- update to version 2.1.2
  Bug fixes including security fixes among which:
  CVE-2016-8332 CVE-2016-7163
  CVE-2016-5139 CVE-2016-5159
  CVE-2016-5158 (not listed but solved different way)
  Huge amount of critical bugfixes
  Speed improvements
  No API/ABI break compared to v2.1.1/v2.1
- some doc files now have '.md' suffix (like README.md)
- CVE-2016-5152 with new 0018-tcd_get_decoded_tile_size.patch</changelog>
  <changelog author="hpj@suse.com" date="1505217600">- Add security fixes:
  openjpeg2-CVE-2016-10504.patch (CVE-2016-10504, bsc#1056351),
  openjpeg2-CVE-2016-10505.patch (CVE-2016-10505, bsc#1056363),
  openjpeg2-CVE-2016-10506.patch (CVE-2016-10506, bsc#1056396),
  openjpeg2-CVE-2017-12982.patch (CVE-2017-12982, bsc#1054696),
  openjpeg2-CVE-2017-14039.patch (CVE-2017-14039, CVE-2017-14164,
  bsc#1056622, bsc#1057511),
  openjpeg2-CVE-2017-14040.patch (CVE-2017-14040, bsc#1056621),
  openjpeg2-CVE-2017-14041.patch (CVE-2017-14041, bsc#1056562),
  openjpeg2-CVE-2017-14151.patch (CVE-2017-14151, bsc#1057336),
  openjpeg2-CVE-2017-14152.patch (CVE-2017-14152, bsc#1057335),
  most of which are critical, including heap and stack overwrites,
  over-reads and division by zero errors.</changelog>
  <changelog author="idonmez@suse.com" date="1508760000">- Update to version 2.3.0
- Drop upstream patches:
  * 0018-tcd_get_decoded_tile_size.patch
  * openjpeg2-CVE-2016-10504.patch
  * openjpeg2-CVE-2016-10505.patch
  * openjpeg2-CVE-2016-10506.patch
  * openjpeg2-CVE-2017-12982.patch
  * openjpeg2-CVE-2017-14039.patch
  * openjpeg2-CVE-2017-14040.patch
  * openjpeg2-CVE-2017-14041.patch
  * openjpeg2-CVE-2017-14151.patch
  * openjpeg2-CVE-2017-14152.patch
- Add install-fix.patch from upstream to fix library installation.</changelog>
  <changelog author="hpj@suse.com" date="1648814400">- Add security fixes:
  openjpeg2-CVE-2018-5727.patch (CVE-2018-5727, bsc#1076314),
  openjpeg2-CVE-2018-5785.patch (CVE-2018-5785, bsc#1076967),
  openjpeg2-CVE-2018-6616.patch (CVE-2018-6616, bsc#1079845),
  openjpeg2-CVE-2018-14423.patch (CVE-2018-14423, bsc#1102016),
  openjpeg2-CVE-2018-16375.patch (CVE-2018-16375, bsc#1106882),
  openjpeg2-CVE-2018-16376.patch (CVE-2018-16376, bsc#1106881),
  openjpeg2-CVE-2018-20845.patch (CVE-2018-20845, bsc#1140130),
  openjpeg2-CVE-2020-6851.patch (CVE-2020-6851, bsc#1160782),
  openjpeg2-CVE-2020-8112.patch (CVE-2020-8112, bsc#1162090),
  openjpeg2-CVE-2020-15389.patch (CVE-2020-15389, bsc#1173578),
  openjpeg2-CVE-2020-27823.patch (CVE-2020-27823, bsc#1180457),
  openjpeg2-CVE-2021-29338.patch (CVE-2021-29338, bsc#1184774),
  openjpeg2-CVE-2022-1122.patch (CVE-2022-1122, bsc#1197738).</changelog>
  <changelog author="hp.jansen@suse.com" date="1660046400">- openjpeg2-devel requires openjpeg, some cmake targets may fail
  without the base package installed. Fixes boo#1201799</changelog>
  <changelog author="hpj@suse.com" date="1666612800">- Add security fixes:
  openjpeg2-CVE-2018-20846.patch (CVE-2018-20846, bsc#1140205),
  openjpeg2-CVE-2018-21010.patch (CVE-2018-21010, bsc#1149789),
  openjpeg2-CVE-2020-27814.patch (CVE-2020-27814, bsc#1179594),
  openjpeg2-CVE-2020-27824.patch (CVE-2020-27824, bsc#1179821),
  openjpeg2-CVE-2020-27841.patch (CVE-2020-27841, bsc#1180042),
  openjpeg2-CVE-2020-27842.patch (CVE-2020-27842, bsc#1180043),
  openjpeg2-CVE-2020-27843.patch (CVE-2020-27843, bsc#1180044),
  openjpeg2-CVE-2020-27845.patch (CVE-2020-27845, bsc#1180046).</changelog>
  <changelog author="pgajdos@suse.com" date="1735905600">- security update
- added patches
  fix CVE-2024-56826 [bsc#1235029], heap buffer overflow in bin/common/color.c
  + openjpeg2-CVE-2024-56826.patch</changelog>
  <changelog author="hpj@suse.com" date="1752494400">- Add security fix:
  openjpeg2-CVE-2018-18088.patch (CVE-2018-18088, bsc#1111638).</changelog>
</package>
<package pkgid="65e0d195681b9b96674caf184fbb7e9d978f997a5226e4a948699eb2fad3c65a" name="openjpeg2" arch="x86_64">
  <version epoch="0" ver="2.3.0" rel="150000.3.21.1"/>
  <changelog author="mpluskal@suse.com" date="1441368000">- Use cmake macro
- Remove baselibs.conf (it was broken anyways for months)
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1445256000">- Re-add baselibs.conf, needed by poppler and leptonica</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Add a pkg-config dependency; expand pkgconfig</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1482148800">- update to version 2.1.2
  Bug fixes including security fixes among which:
  CVE-2016-8332 CVE-2016-7163
  CVE-2016-5139 CVE-2016-5159
  CVE-2016-5158 (not listed but solved different way)
  Huge amount of critical bugfixes
  Speed improvements
  No API/ABI break compared to v2.1.1/v2.1
- some doc files now have '.md' suffix (like README.md)
- CVE-2016-5152 with new 0018-tcd_get_decoded_tile_size.patch</changelog>
  <changelog author="hpj@suse.com" date="1505217600">- Add security fixes:
  openjpeg2-CVE-2016-10504.patch (CVE-2016-10504, bsc#1056351),
  openjpeg2-CVE-2016-10505.patch (CVE-2016-10505, bsc#1056363),
  openjpeg2-CVE-2016-10506.patch (CVE-2016-10506, bsc#1056396),
  openjpeg2-CVE-2017-12982.patch (CVE-2017-12982, bsc#1054696),
  openjpeg2-CVE-2017-14039.patch (CVE-2017-14039, CVE-2017-14164,
  bsc#1056622, bsc#1057511),
  openjpeg2-CVE-2017-14040.patch (CVE-2017-14040, bsc#1056621),
  openjpeg2-CVE-2017-14041.patch (CVE-2017-14041, bsc#1056562),
  openjpeg2-CVE-2017-14151.patch (CVE-2017-14151, bsc#1057336),
  openjpeg2-CVE-2017-14152.patch (CVE-2017-14152, bsc#1057335),
  most of which are critical, including heap and stack overwrites,
  over-reads and division by zero errors.</changelog>
  <changelog author="idonmez@suse.com" date="1508760000">- Update to version 2.3.0
- Drop upstream patches:
  * 0018-tcd_get_decoded_tile_size.patch
  * openjpeg2-CVE-2016-10504.patch
  * openjpeg2-CVE-2016-10505.patch
  * openjpeg2-CVE-2016-10506.patch
  * openjpeg2-CVE-2017-12982.patch
  * openjpeg2-CVE-2017-14039.patch
  * openjpeg2-CVE-2017-14040.patch
  * openjpeg2-CVE-2017-14041.patch
  * openjpeg2-CVE-2017-14151.patch
  * openjpeg2-CVE-2017-14152.patch
- Add install-fix.patch from upstream to fix library installation.</changelog>
  <changelog author="hpj@suse.com" date="1648814400">- Add security fixes:
  openjpeg2-CVE-2018-5727.patch (CVE-2018-5727, bsc#1076314),
  openjpeg2-CVE-2018-5785.patch (CVE-2018-5785, bsc#1076967),
  openjpeg2-CVE-2018-6616.patch (CVE-2018-6616, bsc#1079845),
  openjpeg2-CVE-2018-14423.patch (CVE-2018-14423, bsc#1102016),
  openjpeg2-CVE-2018-16375.patch (CVE-2018-16375, bsc#1106882),
  openjpeg2-CVE-2018-16376.patch (CVE-2018-16376, bsc#1106881),
  openjpeg2-CVE-2018-20845.patch (CVE-2018-20845, bsc#1140130),
  openjpeg2-CVE-2020-6851.patch (CVE-2020-6851, bsc#1160782),
  openjpeg2-CVE-2020-8112.patch (CVE-2020-8112, bsc#1162090),
  openjpeg2-CVE-2020-15389.patch (CVE-2020-15389, bsc#1173578),
  openjpeg2-CVE-2020-27823.patch (CVE-2020-27823, bsc#1180457),
  openjpeg2-CVE-2021-29338.patch (CVE-2021-29338, bsc#1184774),
  openjpeg2-CVE-2022-1122.patch (CVE-2022-1122, bsc#1197738).</changelog>
  <changelog author="hp.jansen@suse.com" date="1660046400">- openjpeg2-devel requires openjpeg, some cmake targets may fail
  without the base package installed. Fixes boo#1201799</changelog>
  <changelog author="hpj@suse.com" date="1666612800">- Add security fixes:
  openjpeg2-CVE-2018-20846.patch (CVE-2018-20846, bsc#1140205),
  openjpeg2-CVE-2018-21010.patch (CVE-2018-21010, bsc#1149789),
  openjpeg2-CVE-2020-27814.patch (CVE-2020-27814, bsc#1179594),
  openjpeg2-CVE-2020-27824.patch (CVE-2020-27824, bsc#1179821),
  openjpeg2-CVE-2020-27841.patch (CVE-2020-27841, bsc#1180042),
  openjpeg2-CVE-2020-27842.patch (CVE-2020-27842, bsc#1180043),
  openjpeg2-CVE-2020-27843.patch (CVE-2020-27843, bsc#1180044),
  openjpeg2-CVE-2020-27845.patch (CVE-2020-27845, bsc#1180046).</changelog>
  <changelog author="pgajdos@suse.com" date="1735905600">- security update
- added patches
  fix CVE-2024-56826 [bsc#1235029], heap buffer overflow in bin/common/color.c
  + openjpeg2-CVE-2024-56826.patch</changelog>
  <changelog author="hpj@suse.com" date="1752494400">- Add security fix:
  openjpeg2-CVE-2018-18088.patch (CVE-2018-18088, bsc#1111638).</changelog>
</package>
<package pkgid="4f0e4fb1375caa830ecf22852ab5389414857f9743f650c86af719a36e572429" name="openjpeg2" arch="src">
  <version epoch="0" ver="2.3.0" rel="150000.3.24.1"/>
  <changelog author="gber@opensuse.org" date="1384344000">- remove bogus dependency on libgeotiff-devel and depend on
  libtiff-devel
- ensure no bundled libraries are used</changelog>
  <changelog author="gber@opensuse.org" date="1385294400">- use pkgconfig macros
- let openjpeg2-devel only recommend openjpeg2</changelog>
  <changelog author="mrdocs@opensuse.org" date="1385467200">- add explicit libjpeg-devel to fix build on SLE 11</changelog>
  <changelog author="gber@opensuse.org" date="1385467201">- remove bogus dependency on libjpeg-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1392724800">- add libopenjp2.pc (demand introduced by ImageMagick 6.8.8-5)</changelog>
  <changelog author="hpj@urpla.net" date="1399550400">- version 2.0.1
  - New Features:
  * Digital Cinema profiles have been fixed and updated
  * New option to disable MCT if needed
  * extended RAW support: it is now possible to input raw images
    with subsampled color components (422, 420, etc)
  - API/ABI modifications: (see abi_compat_report_2.0.1.html in dev-utils/scripts)
  * No changes, API/ABI fully compatible with 2.0.0
  - Misc:
  * OpenJPEG is now officialy conformant with JPEG 2000 Part-1
    and will soon become official reference software at the
    JPEG committee.
  * Huge amount of bug fixes. See CHANGES for details.
- adjust library name</changelog>
  <changelog author="opensuse@dstoecker.de" date="1401192000">- update to version 2.1.0
  New Features:
  * Digital Cinema profiles have been fixed and updated
  * New option to disable MCT if needed
  * extended RAW support: it is now possible to input raw images
    with subsampled color components (422, 420, etc)
  * New way to deal with profiles
  API/ABI modifications: (see abi_compat_report in dev-utils/scripts)
  * Removed deprecated functions
  - opj_stream_create_default_file_stream(FILE*,...)
  - opj_stream_create_file_stream(FILE*,...)
  - opj_stream_set_user_data (opj_stream_t* p_stream, void * p_data)
  * Added
  - opj_stream_create_default_file_stream(char*,...)
  - opj_stream_create_file_stream(char*,...)
  - opj_stream_destroy(opj_stream_t*)
  - opj_stream_set_user_data (opj_stream_t* p_stream, void * p_data,
    ... opj_stream_free_user_data_fn p_function)
  - JPEG 2000 profiles and Part-2 extensions defined through '#define'
  * Changed
  - 'alpha' field added to 'opj_image_comp' structure
  - 'OPJ_CLRSPC_EYCC' added to enum COLOR_SPACE
  - 'OPJ_CLRSPC_CMYK' added to enum COLOR_SPACE
  - 'OPJ_CODEC_JPP' and 'OPJ_CODEC_JPX' added to CODEC_FORMAT
    (not yet used in use)
  - 'max_cs_size' and 'rsiz' fields added to opj_cparameters_t
  Misc:
  * OpenJPEG is now officialy conformant with JPEG 2000 Part-1
    and will soon become official reference software at the
    JPEG committee.
  * Huge amount of bug fixes. See CHANGES for details.</changelog>
  <changelog author="coolo@suse.com" date="1401537600">- pimp up the previous changelog</changelog>
  <changelog author="mpluskal@suse.com" date="1441368000">- Use cmake macro
- Remove baselibs.conf (it was broken anyways for months)
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1445256000">- Re-add baselibs.conf, needed by poppler and leptonica</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Add a pkg-config dependency; expand pkgconfig</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1482148800">- update to version 2.1.2
  Bug fixes including security fixes among which:
  CVE-2016-8332 CVE-2016-7163
  CVE-2016-5139 CVE-2016-5159
  CVE-2016-5158 (not listed but solved different way)
  Huge amount of critical bugfixes
  Speed improvements
  No API/ABI break compared to v2.1.1/v2.1
- some doc files now have '.md' suffix (like README.md)
- CVE-2016-5152 with new 0018-tcd_get_decoded_tile_size.patch</changelog>
  <changelog author="hpj@suse.com" date="1505217600">- Add security fixes:
  openjpeg2-CVE-2016-10504.patch (CVE-2016-10504, bsc#1056351),
  openjpeg2-CVE-2016-10505.patch (CVE-2016-10505, bsc#1056363),
  openjpeg2-CVE-2016-10506.patch (CVE-2016-10506, bsc#1056396),
  openjpeg2-CVE-2017-12982.patch (CVE-2017-12982, bsc#1054696),
  openjpeg2-CVE-2017-14039.patch (CVE-2017-14039, CVE-2017-14164,
  bsc#1056622, bsc#1057511),
  openjpeg2-CVE-2017-14040.patch (CVE-2017-14040, bsc#1056621),
  openjpeg2-CVE-2017-14041.patch (CVE-2017-14041, bsc#1056562),
  openjpeg2-CVE-2017-14151.patch (CVE-2017-14151, bsc#1057336),
  openjpeg2-CVE-2017-14152.patch (CVE-2017-14152, bsc#1057335),
  most of which are critical, including heap and stack overwrites,
  over-reads and division by zero errors.</changelog>
  <changelog author="idonmez@suse.com" date="1508760000">- Update to version 2.3.0
- Drop upstream patches:
  * 0018-tcd_get_decoded_tile_size.patch
  * openjpeg2-CVE-2016-10504.patch
  * openjpeg2-CVE-2016-10505.patch
  * openjpeg2-CVE-2016-10506.patch
  * openjpeg2-CVE-2017-12982.patch
  * openjpeg2-CVE-2017-14039.patch
  * openjpeg2-CVE-2017-14040.patch
  * openjpeg2-CVE-2017-14041.patch
  * openjpeg2-CVE-2017-14151.patch
  * openjpeg2-CVE-2017-14152.patch
- Add install-fix.patch from upstream to fix library installation.</changelog>
  <changelog author="hpj@suse.com" date="1648814400">- Add security fixes:
  openjpeg2-CVE-2018-5727.patch (CVE-2018-5727, bsc#1076314),
  openjpeg2-CVE-2018-5785.patch (CVE-2018-5785, bsc#1076967),
  openjpeg2-CVE-2018-6616.patch (CVE-2018-6616, bsc#1079845),
  openjpeg2-CVE-2018-14423.patch (CVE-2018-14423, bsc#1102016),
  openjpeg2-CVE-2018-16375.patch (CVE-2018-16375, bsc#1106882),
  openjpeg2-CVE-2018-16376.patch (CVE-2018-16376, bsc#1106881),
  openjpeg2-CVE-2018-20845.patch (CVE-2018-20845, bsc#1140130),
  openjpeg2-CVE-2020-6851.patch (CVE-2020-6851, bsc#1160782),
  openjpeg2-CVE-2020-8112.patch (CVE-2020-8112, bsc#1162090),
  openjpeg2-CVE-2020-15389.patch (CVE-2020-15389, bsc#1173578),
  openjpeg2-CVE-2020-27823.patch (CVE-2020-27823, bsc#1180457),
  openjpeg2-CVE-2021-29338.patch (CVE-2021-29338, bsc#1184774),
  openjpeg2-CVE-2022-1122.patch (CVE-2022-1122, bsc#1197738).</changelog>
  <changelog author="hp.jansen@suse.com" date="1660046400">- openjpeg2-devel requires openjpeg, some cmake targets may fail
  without the base package installed. Fixes boo#1201799</changelog>
  <changelog author="hpj@suse.com" date="1666612800">- Add security fixes:
  openjpeg2-CVE-2018-20846.patch (CVE-2018-20846, bsc#1140205),
  openjpeg2-CVE-2018-21010.patch (CVE-2018-21010, bsc#1149789),
  openjpeg2-CVE-2020-27814.patch (CVE-2020-27814, bsc#1179594),
  openjpeg2-CVE-2020-27824.patch (CVE-2020-27824, bsc#1179821),
  openjpeg2-CVE-2020-27841.patch (CVE-2020-27841, bsc#1180042),
  openjpeg2-CVE-2020-27842.patch (CVE-2020-27842, bsc#1180043),
  openjpeg2-CVE-2020-27843.patch (CVE-2020-27843, bsc#1180044),
  openjpeg2-CVE-2020-27845.patch (CVE-2020-27845, bsc#1180046).</changelog>
  <changelog author="pgajdos@suse.com" date="1735905600">- security update
- added patches
  fix CVE-2024-56826 [bsc#1235029], heap buffer overflow in bin/common/color.c
  + openjpeg2-CVE-2024-56826.patch</changelog>
  <changelog author="hpj@suse.com" date="1752494400">- Add security fix:
  openjpeg2-CVE-2018-18088.patch (CVE-2018-18088, bsc#1111638).</changelog>
  <changelog author="hpj@suse.com" date="1769169600">- Add openjpeg2-CVE-2023-39327.patch (CVE-2023-39327, bsc#1227412).
- Add openjpeg2-require-eph-when-specified.patch (bsc#1227412).</changelog>
</package>
<package pkgid="68d420ca3a769b4c9707c1541cb821c4f3728e177ed9016468768d4ab57f8411" name="openjpeg2" arch="x86_64">
  <version epoch="0" ver="2.3.0" rel="150000.3.24.1"/>
  <changelog author="mpluskal@suse.com" date="1441368000">- Use cmake macro
- Remove baselibs.conf (it was broken anyways for months)
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1445256000">- Re-add baselibs.conf, needed by poppler and leptonica</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Add a pkg-config dependency; expand pkgconfig</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1482148800">- update to version 2.1.2
  Bug fixes including security fixes among which:
  CVE-2016-8332 CVE-2016-7163
  CVE-2016-5139 CVE-2016-5159
  CVE-2016-5158 (not listed but solved different way)
  Huge amount of critical bugfixes
  Speed improvements
  No API/ABI break compared to v2.1.1/v2.1
- some doc files now have '.md' suffix (like README.md)
- CVE-2016-5152 with new 0018-tcd_get_decoded_tile_size.patch</changelog>
  <changelog author="hpj@suse.com" date="1505217600">- Add security fixes:
  openjpeg2-CVE-2016-10504.patch (CVE-2016-10504, bsc#1056351),
  openjpeg2-CVE-2016-10505.patch (CVE-2016-10505, bsc#1056363),
  openjpeg2-CVE-2016-10506.patch (CVE-2016-10506, bsc#1056396),
  openjpeg2-CVE-2017-12982.patch (CVE-2017-12982, bsc#1054696),
  openjpeg2-CVE-2017-14039.patch (CVE-2017-14039, CVE-2017-14164,
  bsc#1056622, bsc#1057511),
  openjpeg2-CVE-2017-14040.patch (CVE-2017-14040, bsc#1056621),
  openjpeg2-CVE-2017-14041.patch (CVE-2017-14041, bsc#1056562),
  openjpeg2-CVE-2017-14151.patch (CVE-2017-14151, bsc#1057336),
  openjpeg2-CVE-2017-14152.patch (CVE-2017-14152, bsc#1057335),
  most of which are critical, including heap and stack overwrites,
  over-reads and division by zero errors.</changelog>
  <changelog author="idonmez@suse.com" date="1508760000">- Update to version 2.3.0
- Drop upstream patches:
  * 0018-tcd_get_decoded_tile_size.patch
  * openjpeg2-CVE-2016-10504.patch
  * openjpeg2-CVE-2016-10505.patch
  * openjpeg2-CVE-2016-10506.patch
  * openjpeg2-CVE-2017-12982.patch
  * openjpeg2-CVE-2017-14039.patch
  * openjpeg2-CVE-2017-14040.patch
  * openjpeg2-CVE-2017-14041.patch
  * openjpeg2-CVE-2017-14151.patch
  * openjpeg2-CVE-2017-14152.patch
- Add install-fix.patch from upstream to fix library installation.</changelog>
  <changelog author="hpj@suse.com" date="1648814400">- Add security fixes:
  openjpeg2-CVE-2018-5727.patch (CVE-2018-5727, bsc#1076314),
  openjpeg2-CVE-2018-5785.patch (CVE-2018-5785, bsc#1076967),
  openjpeg2-CVE-2018-6616.patch (CVE-2018-6616, bsc#1079845),
  openjpeg2-CVE-2018-14423.patch (CVE-2018-14423, bsc#1102016),
  openjpeg2-CVE-2018-16375.patch (CVE-2018-16375, bsc#1106882),
  openjpeg2-CVE-2018-16376.patch (CVE-2018-16376, bsc#1106881),
  openjpeg2-CVE-2018-20845.patch (CVE-2018-20845, bsc#1140130),
  openjpeg2-CVE-2020-6851.patch (CVE-2020-6851, bsc#1160782),
  openjpeg2-CVE-2020-8112.patch (CVE-2020-8112, bsc#1162090),
  openjpeg2-CVE-2020-15389.patch (CVE-2020-15389, bsc#1173578),
  openjpeg2-CVE-2020-27823.patch (CVE-2020-27823, bsc#1180457),
  openjpeg2-CVE-2021-29338.patch (CVE-2021-29338, bsc#1184774),
  openjpeg2-CVE-2022-1122.patch (CVE-2022-1122, bsc#1197738).</changelog>
  <changelog author="hp.jansen@suse.com" date="1660046400">- openjpeg2-devel requires openjpeg, some cmake targets may fail
  without the base package installed. Fixes boo#1201799</changelog>
  <changelog author="hpj@suse.com" date="1666612800">- Add security fixes:
  openjpeg2-CVE-2018-20846.patch (CVE-2018-20846, bsc#1140205),
  openjpeg2-CVE-2018-21010.patch (CVE-2018-21010, bsc#1149789),
  openjpeg2-CVE-2020-27814.patch (CVE-2020-27814, bsc#1179594),
  openjpeg2-CVE-2020-27824.patch (CVE-2020-27824, bsc#1179821),
  openjpeg2-CVE-2020-27841.patch (CVE-2020-27841, bsc#1180042),
  openjpeg2-CVE-2020-27842.patch (CVE-2020-27842, bsc#1180043),
  openjpeg2-CVE-2020-27843.patch (CVE-2020-27843, bsc#1180044),
  openjpeg2-CVE-2020-27845.patch (CVE-2020-27845, bsc#1180046).</changelog>
  <changelog author="pgajdos@suse.com" date="1735905600">- security update
- added patches
  fix CVE-2024-56826 [bsc#1235029], heap buffer overflow in bin/common/color.c
  + openjpeg2-CVE-2024-56826.patch</changelog>
  <changelog author="hpj@suse.com" date="1752494400">- Add security fix:
  openjpeg2-CVE-2018-18088.patch (CVE-2018-18088, bsc#1111638).</changelog>
  <changelog author="hpj@suse.com" date="1769169600">- Add openjpeg2-CVE-2023-39327.patch (CVE-2023-39327, bsc#1227412).
- Add openjpeg2-require-eph-when-specified.patch (bsc#1227412).</changelog>
</package>
<package pkgid="c0fff5464b1d3efa3d804b77db8683c31c77a4b9db41ec8ca0e20e405a3cb0be" name="openjpeg2-devel" arch="x86_64">
  <version epoch="0" ver="2.3.0" rel="150000.3.21.1"/>
  <changelog author="mpluskal@suse.com" date="1441368000">- Use cmake macro
- Remove baselibs.conf (it was broken anyways for months)
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1445256000">- Re-add baselibs.conf, needed by poppler and leptonica</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Add a pkg-config dependency; expand pkgconfig</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1482148800">- update to version 2.1.2
  Bug fixes including security fixes among which:
  CVE-2016-8332 CVE-2016-7163
  CVE-2016-5139 CVE-2016-5159
  CVE-2016-5158 (not listed but solved different way)
  Huge amount of critical bugfixes
  Speed improvements
  No API/ABI break compared to v2.1.1/v2.1
- some doc files now have '.md' suffix (like README.md)
- CVE-2016-5152 with new 0018-tcd_get_decoded_tile_size.patch</changelog>
  <changelog author="hpj@suse.com" date="1505217600">- Add security fixes:
  openjpeg2-CVE-2016-10504.patch (CVE-2016-10504, bsc#1056351),
  openjpeg2-CVE-2016-10505.patch (CVE-2016-10505, bsc#1056363),
  openjpeg2-CVE-2016-10506.patch (CVE-2016-10506, bsc#1056396),
  openjpeg2-CVE-2017-12982.patch (CVE-2017-12982, bsc#1054696),
  openjpeg2-CVE-2017-14039.patch (CVE-2017-14039, CVE-2017-14164,
  bsc#1056622, bsc#1057511),
  openjpeg2-CVE-2017-14040.patch (CVE-2017-14040, bsc#1056621),
  openjpeg2-CVE-2017-14041.patch (CVE-2017-14041, bsc#1056562),
  openjpeg2-CVE-2017-14151.patch (CVE-2017-14151, bsc#1057336),
  openjpeg2-CVE-2017-14152.patch (CVE-2017-14152, bsc#1057335),
  most of which are critical, including heap and stack overwrites,
  over-reads and division by zero errors.</changelog>
  <changelog author="idonmez@suse.com" date="1508760000">- Update to version 2.3.0
- Drop upstream patches:
  * 0018-tcd_get_decoded_tile_size.patch
  * openjpeg2-CVE-2016-10504.patch
  * openjpeg2-CVE-2016-10505.patch
  * openjpeg2-CVE-2016-10506.patch
  * openjpeg2-CVE-2017-12982.patch
  * openjpeg2-CVE-2017-14039.patch
  * openjpeg2-CVE-2017-14040.patch
  * openjpeg2-CVE-2017-14041.patch
  * openjpeg2-CVE-2017-14151.patch
  * openjpeg2-CVE-2017-14152.patch
- Add install-fix.patch from upstream to fix library installation.</changelog>
  <changelog author="hpj@suse.com" date="1648814400">- Add security fixes:
  openjpeg2-CVE-2018-5727.patch (CVE-2018-5727, bsc#1076314),
  openjpeg2-CVE-2018-5785.patch (CVE-2018-5785, bsc#1076967),
  openjpeg2-CVE-2018-6616.patch (CVE-2018-6616, bsc#1079845),
  openjpeg2-CVE-2018-14423.patch (CVE-2018-14423, bsc#1102016),
  openjpeg2-CVE-2018-16375.patch (CVE-2018-16375, bsc#1106882),
  openjpeg2-CVE-2018-16376.patch (CVE-2018-16376, bsc#1106881),
  openjpeg2-CVE-2018-20845.patch (CVE-2018-20845, bsc#1140130),
  openjpeg2-CVE-2020-6851.patch (CVE-2020-6851, bsc#1160782),
  openjpeg2-CVE-2020-8112.patch (CVE-2020-8112, bsc#1162090),
  openjpeg2-CVE-2020-15389.patch (CVE-2020-15389, bsc#1173578),
  openjpeg2-CVE-2020-27823.patch (CVE-2020-27823, bsc#1180457),
  openjpeg2-CVE-2021-29338.patch (CVE-2021-29338, bsc#1184774),
  openjpeg2-CVE-2022-1122.patch (CVE-2022-1122, bsc#1197738).</changelog>
  <changelog author="hp.jansen@suse.com" date="1660046400">- openjpeg2-devel requires openjpeg, some cmake targets may fail
  without the base package installed. Fixes boo#1201799</changelog>
  <changelog author="hpj@suse.com" date="1666612800">- Add security fixes:
  openjpeg2-CVE-2018-20846.patch (CVE-2018-20846, bsc#1140205),
  openjpeg2-CVE-2018-21010.patch (CVE-2018-21010, bsc#1149789),
  openjpeg2-CVE-2020-27814.patch (CVE-2020-27814, bsc#1179594),
  openjpeg2-CVE-2020-27824.patch (CVE-2020-27824, bsc#1179821),
  openjpeg2-CVE-2020-27841.patch (CVE-2020-27841, bsc#1180042),
  openjpeg2-CVE-2020-27842.patch (CVE-2020-27842, bsc#1180043),
  openjpeg2-CVE-2020-27843.patch (CVE-2020-27843, bsc#1180044),
  openjpeg2-CVE-2020-27845.patch (CVE-2020-27845, bsc#1180046).</changelog>
  <changelog author="pgajdos@suse.com" date="1735905600">- security update
- added patches
  fix CVE-2024-56826 [bsc#1235029], heap buffer overflow in bin/common/color.c
  + openjpeg2-CVE-2024-56826.patch</changelog>
  <changelog author="hpj@suse.com" date="1752494400">- Add security fix:
  openjpeg2-CVE-2018-18088.patch (CVE-2018-18088, bsc#1111638).</changelog>
</package>
<package pkgid="2b44881f29405f29ff9fb517bd2e3317f019fa1c6512e0e964b277082b7e54c0" name="openjpeg2-devel" arch="x86_64">
  <version epoch="0" ver="2.3.0" rel="150000.3.24.1"/>
  <changelog author="mpluskal@suse.com" date="1441368000">- Use cmake macro
- Remove baselibs.conf (it was broken anyways for months)
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1445256000">- Re-add baselibs.conf, needed by poppler and leptonica</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Add a pkg-config dependency; expand pkgconfig</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1482148800">- update to version 2.1.2
  Bug fixes including security fixes among which:
  CVE-2016-8332 CVE-2016-7163
  CVE-2016-5139 CVE-2016-5159
  CVE-2016-5158 (not listed but solved different way)
  Huge amount of critical bugfixes
  Speed improvements
  No API/ABI break compared to v2.1.1/v2.1
- some doc files now have '.md' suffix (like README.md)
- CVE-2016-5152 with new 0018-tcd_get_decoded_tile_size.patch</changelog>
  <changelog author="hpj@suse.com" date="1505217600">- Add security fixes:
  openjpeg2-CVE-2016-10504.patch (CVE-2016-10504, bsc#1056351),
  openjpeg2-CVE-2016-10505.patch (CVE-2016-10505, bsc#1056363),
  openjpeg2-CVE-2016-10506.patch (CVE-2016-10506, bsc#1056396),
  openjpeg2-CVE-2017-12982.patch (CVE-2017-12982, bsc#1054696),
  openjpeg2-CVE-2017-14039.patch (CVE-2017-14039, CVE-2017-14164,
  bsc#1056622, bsc#1057511),
  openjpeg2-CVE-2017-14040.patch (CVE-2017-14040, bsc#1056621),
  openjpeg2-CVE-2017-14041.patch (CVE-2017-14041, bsc#1056562),
  openjpeg2-CVE-2017-14151.patch (CVE-2017-14151, bsc#1057336),
  openjpeg2-CVE-2017-14152.patch (CVE-2017-14152, bsc#1057335),
  most of which are critical, including heap and stack overwrites,
  over-reads and division by zero errors.</changelog>
  <changelog author="idonmez@suse.com" date="1508760000">- Update to version 2.3.0
- Drop upstream patches:
  * 0018-tcd_get_decoded_tile_size.patch
  * openjpeg2-CVE-2016-10504.patch
  * openjpeg2-CVE-2016-10505.patch
  * openjpeg2-CVE-2016-10506.patch
  * openjpeg2-CVE-2017-12982.patch
  * openjpeg2-CVE-2017-14039.patch
  * openjpeg2-CVE-2017-14040.patch
  * openjpeg2-CVE-2017-14041.patch
  * openjpeg2-CVE-2017-14151.patch
  * openjpeg2-CVE-2017-14152.patch
- Add install-fix.patch from upstream to fix library installation.</changelog>
  <changelog author="hpj@suse.com" date="1648814400">- Add security fixes:
  openjpeg2-CVE-2018-5727.patch (CVE-2018-5727, bsc#1076314),
  openjpeg2-CVE-2018-5785.patch (CVE-2018-5785, bsc#1076967),
  openjpeg2-CVE-2018-6616.patch (CVE-2018-6616, bsc#1079845),
  openjpeg2-CVE-2018-14423.patch (CVE-2018-14423, bsc#1102016),
  openjpeg2-CVE-2018-16375.patch (CVE-2018-16375, bsc#1106882),
  openjpeg2-CVE-2018-16376.patch (CVE-2018-16376, bsc#1106881),
  openjpeg2-CVE-2018-20845.patch (CVE-2018-20845, bsc#1140130),
  openjpeg2-CVE-2020-6851.patch (CVE-2020-6851, bsc#1160782),
  openjpeg2-CVE-2020-8112.patch (CVE-2020-8112, bsc#1162090),
  openjpeg2-CVE-2020-15389.patch (CVE-2020-15389, bsc#1173578),
  openjpeg2-CVE-2020-27823.patch (CVE-2020-27823, bsc#1180457),
  openjpeg2-CVE-2021-29338.patch (CVE-2021-29338, bsc#1184774),
  openjpeg2-CVE-2022-1122.patch (CVE-2022-1122, bsc#1197738).</changelog>
  <changelog author="hp.jansen@suse.com" date="1660046400">- openjpeg2-devel requires openjpeg, some cmake targets may fail
  without the base package installed. Fixes boo#1201799</changelog>
  <changelog author="hpj@suse.com" date="1666612800">- Add security fixes:
  openjpeg2-CVE-2018-20846.patch (CVE-2018-20846, bsc#1140205),
  openjpeg2-CVE-2018-21010.patch (CVE-2018-21010, bsc#1149789),
  openjpeg2-CVE-2020-27814.patch (CVE-2020-27814, bsc#1179594),
  openjpeg2-CVE-2020-27824.patch (CVE-2020-27824, bsc#1179821),
  openjpeg2-CVE-2020-27841.patch (CVE-2020-27841, bsc#1180042),
  openjpeg2-CVE-2020-27842.patch (CVE-2020-27842, bsc#1180043),
  openjpeg2-CVE-2020-27843.patch (CVE-2020-27843, bsc#1180044),
  openjpeg2-CVE-2020-27845.patch (CVE-2020-27845, bsc#1180046).</changelog>
  <changelog author="pgajdos@suse.com" date="1735905600">- security update
- added patches
  fix CVE-2024-56826 [bsc#1235029], heap buffer overflow in bin/common/color.c
  + openjpeg2-CVE-2024-56826.patch</changelog>
  <changelog author="hpj@suse.com" date="1752494400">- Add security fix:
  openjpeg2-CVE-2018-18088.patch (CVE-2018-18088, bsc#1111638).</changelog>
  <changelog author="hpj@suse.com" date="1769169600">- Add openjpeg2-CVE-2023-39327.patch (CVE-2023-39327, bsc#1227412).
- Add openjpeg2-require-eph-when-specified.patch (bsc#1227412).</changelog>
</package>
<package pkgid="e63b0aa91b0f488e97f8045670ab6bc57ad37c3e9366235124cdbf493a7c446a" name="openldap2" arch="src">
  <version epoch="0" ver="2.4.46" rel="150600.25.3.1"/>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
  <changelog author="william.brown@suse.com" date="1686657600">- bsc#1212260 - crash in libldap when non-ldap data responds
  * 0245-ITS-9803-Drop-connection-when-receiving-non-LDAP-dat.patch</changelog>
  <changelog author="william.brown@suse.com" date="1772280000">- jsc#PED-15735 - expose ldap_log.h in -devel
  * 0246-Include-ldap_log.h-in-devel.patch
- retcon .changes to satisfy source validator</changelog>
</package>
<package pkgid="0c97a293cd8c177ab837d6fa8314d60eff5880135bd139433629a59677558168" name="openldap2-client" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="150600.25.3.1"/>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
  <changelog author="william.brown@suse.com" date="1686657600">- bsc#1212260 - crash in libldap when non-ldap data responds
  * 0245-ITS-9803-Drop-connection-when-receiving-non-LDAP-dat.patch</changelog>
  <changelog author="william.brown@suse.com" date="1772280000">- jsc#PED-15735 - expose ldap_log.h in -devel
  * 0246-Include-ldap_log.h-in-devel.patch
- retcon .changes to satisfy source validator</changelog>
</package>
<package pkgid="173678421da1080f946c3f754b4222724823b7b0b54f1273b823203f2b6ddeaf" name="openldap2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="150600.25.3.1"/>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
  <changelog author="william.brown@suse.com" date="1686657600">- bsc#1212260 - crash in libldap when non-ldap data responds
  * 0245-ITS-9803-Drop-connection-when-receiving-non-LDAP-dat.patch</changelog>
  <changelog author="william.brown@suse.com" date="1772280000">- jsc#PED-15735 - expose ldap_log.h in -devel
  * 0246-Include-ldap_log.h-in-devel.patch
- retcon .changes to satisfy source validator</changelog>
</package>
<package pkgid="e588882d9a10d512ccce24d9bd5f46a352b453f1b9da221f9ff74942a4b9e757" name="openldap2-devel-static" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="150600.25.3.1"/>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
  <changelog author="william.brown@suse.com" date="1686657600">- bsc#1212260 - crash in libldap when non-ldap data responds
  * 0245-ITS-9803-Drop-connection-when-receiving-non-LDAP-dat.patch</changelog>
  <changelog author="william.brown@suse.com" date="1772280000">- jsc#PED-15735 - expose ldap_log.h in -devel
  * 0246-Include-ldap_log.h-in-devel.patch
- retcon .changes to satisfy source validator</changelog>
</package>
<package pkgid="e31efc2c6b7ea9d134f463781c8fa7202a0c7c4526d9a63235e91266a489b9f7" name="openldap2_5" arch="src">
  <version epoch="0" ver="2.5.20+10" rel="150500.11.35.1"/>
  <changelog author="william.brown@suse.com" date="1715774400">- Add initial OpenLDAP2_5 version 2.5.17+50, see:
  * jsc#PED-7178
  * jsc#PED-7240
- Apply SUSE Hardening Patches
  * Change malloc to use calloc to prevent memory reuse corruption
  * [PATCH] Use OpenSSL API to verify host</changelog>
  <changelog author="william.brown@suse.com" date="1729080000">- bsc#1231335 - Update openldap2.conf for tmpfiles to create
  and manage /run/slapd
- Update to upstream patch/stabilty fix version 2.5.18+31
  * https://www.openldap.org/software/release/changes_lts.html</changelog>
  <changelog author="william.brown@suse.com" date="1729080001">- bsc#1231335 - Update openldap2.conf for tmpfiles to create
  and manage /run/slapd
- Update to upstream patch/stabilty fix version 2.5.18+31</changelog>
  <changelog author="william.brown@suse.com" date="1730894400">- bsc#1232783 - Enable sasl passthrough authentication</changelog>
  <changelog author="william.brown@suse.com" date="1741780800">- bsc#1238217 - add admin guide.html</changelog>
  <changelog author="william.brown@suse.com" date="1741953600">- bsc#1239557 - Set default ldapi path to be consistent for SUSE</changelog>
  <changelog author="william.brown@suse.com" date="1742990400">- bsc#1240017 - Enable argon2id</changelog>
  <changelog author="william.brown@suse.com" date="1743768000">- Update to version 2.5.18+34:
  * bsc#1239787 - prevent double free in info rewrite</changelog>
  <changelog author="william.brown@suse.com" date="1745582400">- Update to upstream version 2.5.19
  * bsc#1241901 - upstream patch rollup</changelog>
  <changelog author="william.brown@suse.com" date="1749902400">- bsc#1241889 - resolve syncprov crash
- Update to version 2.5.19+8:
  * Clear after free
  * prevent double free
  * liblber calloc</changelog>
  <changelog author="william.brown@suse.com" date="1751457600">- bsc#1241210 - resolve syncprov hang after online configuration (see ITS#10327)
- Update to version 2.5.19+47:
  * Return to RE
  * Prep for release
  * ITS#10331
  * ITS#10331 Add helpful error messages for usage errors
  * ITS#10328
  * ITS#10328 librewrite: fix substitution cleanup
  * ITS#10327
  * ITS#10327 Allow lockless config_back_search() during server pause
  * ITS#10323
  * ITS#10323 Apply olcBkLloadStartTLS runtime changes directly
  * ITS#10320
  * ITS#10320 autogroup: mark internal searches
  * ITS#9934
  * ITS#9934 slapd-config(5) add new TLS cert/key settings
  * ITS#10020
  * ITS#10020 slapo-dynlist(5) note static objectclasses can only be used once
  * ITS#10270
  * ITS#10270 slapo-pcache: negative cache entries are not loaded when pcachePersist is on
  * ITS#10270 slapo-pcache: queries with ttr/x-refresh are not loaded when pcachePersist is on
  * ITS#10270 slapo-pcache: ttr was not being applied to negatively cached entries
  * Add missing olcFrontendConfig to example
  * ITS#10309
  * ITS#10309 Check for strdup allocation failures
  * ITS#10279
  * ITS#10279 Let client notify when LDAP_DEBUG is disabled but -d specified
  * ITS#10307
  * ITS#10307 Initialise last if we use it later
  * ITS#10226
  * ITS#10226 - Fix ldap.conf(5) formatting issues
  * Return to release engineering</changelog>
  <changelog author="william.brown@suse.com" date="1762430400">- Update to version 2.5.20+10:
  * jsc#PED-13741 - Import ppolicy-check-password module</changelog>
</package>
<package pkgid="a7881f4aecd009c362998ee76bc0a922140e9bc6dcf3fa07c6ea1f1c806b5e32" name="openldap2_5" arch="src">
  <version epoch="0" ver="2.5.20+11" rel="150500.11.38.1"/>
  <changelog author="william.brown@suse.com" date="1715774400">- Add initial OpenLDAP2_5 version 2.5.17+50, see:
  * jsc#PED-7178
  * jsc#PED-7240
- Apply SUSE Hardening Patches
  * Change malloc to use calloc to prevent memory reuse corruption
  * [PATCH] Use OpenSSL API to verify host</changelog>
  <changelog author="william.brown@suse.com" date="1729080000">- bsc#1231335 - Update openldap2.conf for tmpfiles to create
  and manage /run/slapd
- Update to upstream patch/stabilty fix version 2.5.18+31
  * https://www.openldap.org/software/release/changes_lts.html</changelog>
  <changelog author="william.brown@suse.com" date="1729080001">- bsc#1231335 - Update openldap2.conf for tmpfiles to create
  and manage /run/slapd
- Update to upstream patch/stabilty fix version 2.5.18+31</changelog>
  <changelog author="william.brown@suse.com" date="1730894400">- bsc#1232783 - Enable sasl passthrough authentication</changelog>
  <changelog author="william.brown@suse.com" date="1741780800">- bsc#1238217 - add admin guide.html</changelog>
  <changelog author="william.brown@suse.com" date="1741953600">- bsc#1239557 - Set default ldapi path to be consistent for SUSE</changelog>
  <changelog author="william.brown@suse.com" date="1742990400">- bsc#1240017 - Enable argon2id</changelog>
  <changelog author="william.brown@suse.com" date="1743768000">- Update to version 2.5.18+34:
  * bsc#1239787 - prevent double free in info rewrite</changelog>
  <changelog author="william.brown@suse.com" date="1745582400">- Update to upstream version 2.5.19
  * bsc#1241901 - upstream patch rollup</changelog>
  <changelog author="william.brown@suse.com" date="1749902400">- bsc#1241889 - resolve syncprov crash
- Update to version 2.5.19+8:
  * Clear after free
  * prevent double free
  * liblber calloc</changelog>
  <changelog author="william.brown@suse.com" date="1751457600">- bsc#1241210 - resolve syncprov hang after online configuration (see ITS#10327)
- Update to version 2.5.19+47:
  * Return to RE
  * Prep for release
  * ITS#10331
  * ITS#10331 Add helpful error messages for usage errors
  * ITS#10328
  * ITS#10328 librewrite: fix substitution cleanup
  * ITS#10327
  * ITS#10327 Allow lockless config_back_search() during server pause
  * ITS#10323
  * ITS#10323 Apply olcBkLloadStartTLS runtime changes directly
  * ITS#10320
  * ITS#10320 autogroup: mark internal searches
  * ITS#9934
  * ITS#9934 slapd-config(5) add new TLS cert/key settings
  * ITS#10020
  * ITS#10020 slapo-dynlist(5) note static objectclasses can only be used once
  * ITS#10270
  * ITS#10270 slapo-pcache: negative cache entries are not loaded when pcachePersist is on
  * ITS#10270 slapo-pcache: queries with ttr/x-refresh are not loaded when pcachePersist is on
  * ITS#10270 slapo-pcache: ttr was not being applied to negatively cached entries
  * Add missing olcFrontendConfig to example
  * ITS#10309
  * ITS#10309 Check for strdup allocation failures
  * ITS#10279
  * ITS#10279 Let client notify when LDAP_DEBUG is disabled but -d specified
  * ITS#10307
  * ITS#10307 Initialise last if we use it later
  * ITS#10226
  * ITS#10226 - Fix ldap.conf(5) formatting issues
  * Return to release engineering</changelog>
  <changelog author="william.brown@suse.com" date="1762430400">- Update to version 2.5.20+10:
  * jsc#PED-13741 - Import ppolicy-check-password module</changelog>
  <changelog author="william.brown@suse.com" date="1768305600">- bsc#1256297 - CVE-2026-22185 - possible crash in malicious DB
- Update to version 2.5.20+11:
  * ITS#10421 mdb_load: check for malicious input</changelog>
</package>
<package pkgid="7481307a53c55b2540d9155c820c780321db3fb5875e72a452ec3776eaf0e3b9" name="openldap2_5-client" arch="x86_64">
  <version epoch="0" ver="2.5.20+10" rel="150500.11.35.1"/>
  <changelog author="william.brown@suse.com" date="1715774400">- Add initial OpenLDAP2_5 version 2.5.17+50, see:
  * jsc#PED-7178
  * jsc#PED-7240
- Apply SUSE Hardening Patches
  * Change malloc to use calloc to prevent memory reuse corruption
  * [PATCH] Use OpenSSL API to verify host</changelog>
  <changelog author="william.brown@suse.com" date="1729080000">- bsc#1231335 - Update openldap2.conf for tmpfiles to create
  and manage /run/slapd
- Update to upstream patch/stabilty fix version 2.5.18+31
  * https://www.openldap.org/software/release/changes_lts.html</changelog>
  <changelog author="william.brown@suse.com" date="1729080001">- bsc#1231335 - Update openldap2.conf for tmpfiles to create
  and manage /run/slapd
- Update to upstream patch/stabilty fix version 2.5.18+31</changelog>
  <changelog author="william.brown@suse.com" date="1730894400">- bsc#1232783 - Enable sasl passthrough authentication</changelog>
  <changelog author="william.brown@suse.com" date="1741780800">- bsc#1238217 - add admin guide.html</changelog>
  <changelog author="william.brown@suse.com" date="1741953600">- bsc#1239557 - Set default ldapi path to be consistent for SUSE</changelog>
  <changelog author="william.brown@suse.com" date="1742990400">- bsc#1240017 - Enable argon2id</changelog>
  <changelog author="william.brown@suse.com" date="1743768000">- Update to version 2.5.18+34:
  * bsc#1239787 - prevent double free in info rewrite</changelog>
  <changelog author="william.brown@suse.com" date="1745582400">- Update to upstream version 2.5.19
  * bsc#1241901 - upstream patch rollup</changelog>
  <changelog author="william.brown@suse.com" date="1749902400">- bsc#1241889 - resolve syncprov crash
- Update to version 2.5.19+8:
  * Clear after free
  * prevent double free
  * liblber calloc</changelog>
  <changelog author="william.brown@suse.com" date="1751457600">- bsc#1241210 - resolve syncprov hang after online configuration (see ITS#10327)
- Update to version 2.5.19+47:
  * Return to RE
  * Prep for release
  * ITS#10331
  * ITS#10331 Add helpful error messages for usage errors
  * ITS#10328
  * ITS#10328 librewrite: fix substitution cleanup
  * ITS#10327
  * ITS#10327 Allow lockless config_back_search() during server pause
  * ITS#10323
  * ITS#10323 Apply olcBkLloadStartTLS runtime changes directly
  * ITS#10320
  * ITS#10320 autogroup: mark internal searches
  * ITS#9934
  * ITS#9934 slapd-config(5) add new TLS cert/key settings
  * ITS#10020
  * ITS#10020 slapo-dynlist(5) note static objectclasses can only be used once
  * ITS#10270
  * ITS#10270 slapo-pcache: negative cache entries are not loaded when pcachePersist is on
  * ITS#10270 slapo-pcache: queries with ttr/x-refresh are not loaded when pcachePersist is on
  * ITS#10270 slapo-pcache: ttr was not being applied to negatively cached entries
  * Add missing olcFrontendConfig to example
  * ITS#10309
  * ITS#10309 Check for strdup allocation failures
  * ITS#10279
  * ITS#10279 Let client notify when LDAP_DEBUG is disabled but -d specified
  * ITS#10307
  * ITS#10307 Initialise last if we use it later
  * ITS#10226
  * ITS#10226 - Fix ldap.conf(5) formatting issues
  * Return to release engineering</changelog>
  <changelog author="william.brown@suse.com" date="1762430400">- Update to version 2.5.20+10:
  * jsc#PED-13741 - Import ppolicy-check-password module</changelog>
</package>
<package pkgid="88e3cf4e854e88dba746982ff1ce02252622097ed17bdbdd722946262bafee67" name="openldap2_5-client" arch="x86_64">
  <version epoch="0" ver="2.5.20+11" rel="150500.11.38.1"/>
  <changelog author="william.brown@suse.com" date="1715774400">- Add initial OpenLDAP2_5 version 2.5.17+50, see:
  * jsc#PED-7178
  * jsc#PED-7240
- Apply SUSE Hardening Patches
  * Change malloc to use calloc to prevent memory reuse corruption
  * [PATCH] Use OpenSSL API to verify host</changelog>
  <changelog author="william.brown@suse.com" date="1729080000">- bsc#1231335 - Update openldap2.conf for tmpfiles to create
  and manage /run/slapd
- Update to upstream patch/stabilty fix version 2.5.18+31
  * https://www.openldap.org/software/release/changes_lts.html</changelog>
  <changelog author="william.brown@suse.com" date="1729080001">- bsc#1231335 - Update openldap2.conf for tmpfiles to create
  and manage /run/slapd
- Update to upstream patch/stabilty fix version 2.5.18+31</changelog>
  <changelog author="william.brown@suse.com" date="1730894400">- bsc#1232783 - Enable sasl passthrough authentication</changelog>
  <changelog author="william.brown@suse.com" date="1741780800">- bsc#1238217 - add admin guide.html</changelog>
  <changelog author="william.brown@suse.com" date="1741953600">- bsc#1239557 - Set default ldapi path to be consistent for SUSE</changelog>
  <changelog author="william.brown@suse.com" date="1742990400">- bsc#1240017 - Enable argon2id</changelog>
  <changelog author="william.brown@suse.com" date="1743768000">- Update to version 2.5.18+34:
  * bsc#1239787 - prevent double free in info rewrite</changelog>
  <changelog author="william.brown@suse.com" date="1745582400">- Update to upstream version 2.5.19
  * bsc#1241901 - upstream patch rollup</changelog>
  <changelog author="william.brown@suse.com" date="1749902400">- bsc#1241889 - resolve syncprov crash
- Update to version 2.5.19+8:
  * Clear after free
  * prevent double free
  * liblber calloc</changelog>
  <changelog author="william.brown@suse.com" date="1751457600">- bsc#1241210 - resolve syncprov hang after online configuration (see ITS#10327)
- Update to version 2.5.19+47:
  * Return to RE
  * Prep for release
  * ITS#10331
  * ITS#10331 Add helpful error messages for usage errors
  * ITS#10328
  * ITS#10328 librewrite: fix substitution cleanup
  * ITS#10327
  * ITS#10327 Allow lockless config_back_search() during server pause
  * ITS#10323
  * ITS#10323 Apply olcBkLloadStartTLS runtime changes directly
  * ITS#10320
  * ITS#10320 autogroup: mark internal searches
  * ITS#9934
  * ITS#9934 slapd-config(5) add new TLS cert/key settings
  * ITS#10020
  * ITS#10020 slapo-dynlist(5) note static objectclasses can only be used once
  * ITS#10270
  * ITS#10270 slapo-pcache: negative cache entries are not loaded when pcachePersist is on
  * ITS#10270 slapo-pcache: queries with ttr/x-refresh are not loaded when pcachePersist is on
  * ITS#10270 slapo-pcache: ttr was not being applied to negatively cached entries
  * Add missing olcFrontendConfig to example
  * ITS#10309
  * ITS#10309 Check for strdup allocation failures
  * ITS#10279
  * ITS#10279 Let client notify when LDAP_DEBUG is disabled but -d specified
  * ITS#10307
  * ITS#10307 Initialise last if we use it later
  * ITS#10226
  * ITS#10226 - Fix ldap.conf(5) formatting issues
  * Return to release engineering</changelog>
  <changelog author="william.brown@suse.com" date="1762430400">- Update to version 2.5.20+10:
  * jsc#PED-13741 - Import ppolicy-check-password module</changelog>
  <changelog author="william.brown@suse.com" date="1768305600">- bsc#1256297 - CVE-2026-22185 - possible crash in malicious DB
- Update to version 2.5.20+11:
  * ITS#10421 mdb_load: check for malicious input</changelog>
</package>
<package pkgid="4ceaa2b5f5cfad9767f8d0c886131fd1a6ec80768eae91fcecc880f20b83208f" name="openldap2_5-devel" arch="x86_64">
  <version epoch="0" ver="2.5.20+10" rel="150500.11.35.1"/>
  <changelog author="william.brown@suse.com" date="1715774400">- Add initial OpenLDAP2_5 version 2.5.17+50, see:
  * jsc#PED-7178
  * jsc#PED-7240
- Apply SUSE Hardening Patches
  * Change malloc to use calloc to prevent memory reuse corruption
  * [PATCH] Use OpenSSL API to verify host</changelog>
  <changelog author="william.brown@suse.com" date="1729080000">- bsc#1231335 - Update openldap2.conf for tmpfiles to create
  and manage /run/slapd
- Update to upstream patch/stabilty fix version 2.5.18+31
  * https://www.openldap.org/software/release/changes_lts.html</changelog>
  <changelog author="william.brown@suse.com" date="1729080001">- bsc#1231335 - Update openldap2.conf for tmpfiles to create
  and manage /run/slapd
- Update to upstream patch/stabilty fix version 2.5.18+31</changelog>
  <changelog author="william.brown@suse.com" date="1730894400">- bsc#1232783 - Enable sasl passthrough authentication</changelog>
  <changelog author="william.brown@suse.com" date="1741780800">- bsc#1238217 - add admin guide.html</changelog>
  <changelog author="william.brown@suse.com" date="1741953600">- bsc#1239557 - Set default ldapi path to be consistent for SUSE</changelog>
  <changelog author="william.brown@suse.com" date="1742990400">- bsc#1240017 - Enable argon2id</changelog>
  <changelog author="william.brown@suse.com" date="1743768000">- Update to version 2.5.18+34:
  * bsc#1239787 - prevent double free in info rewrite</changelog>
  <changelog author="william.brown@suse.com" date="1745582400">- Update to upstream version 2.5.19
  * bsc#1241901 - upstream patch rollup</changelog>
  <changelog author="william.brown@suse.com" date="1749902400">- bsc#1241889 - resolve syncprov crash
- Update to version 2.5.19+8:
  * Clear after free
  * prevent double free
  * liblber calloc</changelog>
  <changelog author="william.brown@suse.com" date="1751457600">- bsc#1241210 - resolve syncprov hang after online configuration (see ITS#10327)
- Update to version 2.5.19+47:
  * Return to RE
  * Prep for release
  * ITS#10331
  * ITS#10331 Add helpful error messages for usage errors
  * ITS#10328
  * ITS#10328 librewrite: fix substitution cleanup
  * ITS#10327
  * ITS#10327 Allow lockless config_back_search() during server pause
  * ITS#10323
  * ITS#10323 Apply olcBkLloadStartTLS runtime changes directly
  * ITS#10320
  * ITS#10320 autogroup: mark internal searches
  * ITS#9934
  * ITS#9934 slapd-config(5) add new TLS cert/key settings
  * ITS#10020
  * ITS#10020 slapo-dynlist(5) note static objectclasses can only be used once
  * ITS#10270
  * ITS#10270 slapo-pcache: negative cache entries are not loaded when pcachePersist is on
  * ITS#10270 slapo-pcache: queries with ttr/x-refresh are not loaded when pcachePersist is on
  * ITS#10270 slapo-pcache: ttr was not being applied to negatively cached entries
  * Add missing olcFrontendConfig to example
  * ITS#10309
  * ITS#10309 Check for strdup allocation failures
  * ITS#10279
  * ITS#10279 Let client notify when LDAP_DEBUG is disabled but -d specified
  * ITS#10307
  * ITS#10307 Initialise last if we use it later
  * ITS#10226
  * ITS#10226 - Fix ldap.conf(5) formatting issues
  * Return to release engineering</changelog>
  <changelog author="william.brown@suse.com" date="1762430400">- Update to version 2.5.20+10:
  * jsc#PED-13741 - Import ppolicy-check-password module</changelog>
</package>
<package pkgid="4c0a0d2a94d735e6b1105e7758d5768eb94e5dbb2c40ff393d17acf57605f2d4" name="openldap2_5-devel" arch="x86_64">
  <version epoch="0" ver="2.5.20+11" rel="150500.11.38.1"/>
  <changelog author="william.brown@suse.com" date="1715774400">- Add initial OpenLDAP2_5 version 2.5.17+50, see:
  * jsc#PED-7178
  * jsc#PED-7240
- Apply SUSE Hardening Patches
  * Change malloc to use calloc to prevent memory reuse corruption
  * [PATCH] Use OpenSSL API to verify host</changelog>
  <changelog author="william.brown@suse.com" date="1729080000">- bsc#1231335 - Update openldap2.conf for tmpfiles to create
  and manage /run/slapd
- Update to upstream patch/stabilty fix version 2.5.18+31
  * https://www.openldap.org/software/release/changes_lts.html</changelog>
  <changelog author="william.brown@suse.com" date="1729080001">- bsc#1231335 - Update openldap2.conf for tmpfiles to create
  and manage /run/slapd
- Update to upstream patch/stabilty fix version 2.5.18+31</changelog>
  <changelog author="william.brown@suse.com" date="1730894400">- bsc#1232783 - Enable sasl passthrough authentication</changelog>
  <changelog author="william.brown@suse.com" date="1741780800">- bsc#1238217 - add admin guide.html</changelog>
  <changelog author="william.brown@suse.com" date="1741953600">- bsc#1239557 - Set default ldapi path to be consistent for SUSE</changelog>
  <changelog author="william.brown@suse.com" date="1742990400">- bsc#1240017 - Enable argon2id</changelog>
  <changelog author="william.brown@suse.com" date="1743768000">- Update to version 2.5.18+34:
  * bsc#1239787 - prevent double free in info rewrite</changelog>
  <changelog author="william.brown@suse.com" date="1745582400">- Update to upstream version 2.5.19
  * bsc#1241901 - upstream patch rollup</changelog>
  <changelog author="william.brown@suse.com" date="1749902400">- bsc#1241889 - resolve syncprov crash
- Update to version 2.5.19+8:
  * Clear after free
  * prevent double free
  * liblber calloc</changelog>
  <changelog author="william.brown@suse.com" date="1751457600">- bsc#1241210 - resolve syncprov hang after online configuration (see ITS#10327)
- Update to version 2.5.19+47:
  * Return to RE
  * Prep for release
  * ITS#10331
  * ITS#10331 Add helpful error messages for usage errors
  * ITS#10328
  * ITS#10328 librewrite: fix substitution cleanup
  * ITS#10327
  * ITS#10327 Allow lockless config_back_search() during server pause
  * ITS#10323
  * ITS#10323 Apply olcBkLloadStartTLS runtime changes directly
  * ITS#10320
  * ITS#10320 autogroup: mark internal searches
  * ITS#9934
  * ITS#9934 slapd-config(5) add new TLS cert/key settings
  * ITS#10020
  * ITS#10020 slapo-dynlist(5) note static objectclasses can only be used once
  * ITS#10270
  * ITS#10270 slapo-pcache: negative cache entries are not loaded when pcachePersist is on
  * ITS#10270 slapo-pcache: queries with ttr/x-refresh are not loaded when pcachePersist is on
  * ITS#10270 slapo-pcache: ttr was not being applied to negatively cached entries
  * Add missing olcFrontendConfig to example
  * ITS#10309
  * ITS#10309 Check for strdup allocation failures
  * ITS#10279
  * ITS#10279 Let client notify when LDAP_DEBUG is disabled but -d specified
  * ITS#10307
  * ITS#10307 Initialise last if we use it later
  * ITS#10226
  * ITS#10226 - Fix ldap.conf(5) formatting issues
  * Return to release engineering</changelog>
  <changelog author="william.brown@suse.com" date="1762430400">- Update to version 2.5.20+10:
  * jsc#PED-13741 - Import ppolicy-check-password module</changelog>
  <changelog author="william.brown@suse.com" date="1768305600">- bsc#1256297 - CVE-2026-22185 - possible crash in malicious DB
- Update to version 2.5.20+11:
  * ITS#10421 mdb_load: check for malicious input</changelog>
</package>
<package pkgid="0736d8314aaef8d7d0559537cec08aa61c770e0389b21647402f86dd96d498c4" name="openldap2_5-doc" arch="noarch">
  <version epoch="0" ver="2.5.20+10" rel="150500.11.35.1"/>
  <changelog author="william.brown@suse.com" date="1715774400">- Add initial OpenLDAP2_5 version 2.5.17+50, see:
  * jsc#PED-7178
  * jsc#PED-7240
- Apply SUSE Hardening Patches
  * Change malloc to use calloc to prevent memory reuse corruption
  * [PATCH] Use OpenSSL API to verify host</changelog>
  <changelog author="william.brown@suse.com" date="1729080000">- bsc#1231335 - Update openldap2.conf for tmpfiles to create
  and manage /run/slapd
- Update to upstream patch/stabilty fix version 2.5.18+31
  * https://www.openldap.org/software/release/changes_lts.html</changelog>
  <changelog author="william.brown@suse.com" date="1729080001">- bsc#1231335 - Update openldap2.conf for tmpfiles to create
  and manage /run/slapd
- Update to upstream patch/stabilty fix version 2.5.18+31</changelog>
  <changelog author="william.brown@suse.com" date="1730894400">- bsc#1232783 - Enable sasl passthrough authentication</changelog>
  <changelog author="william.brown@suse.com" date="1741780800">- bsc#1238217 - add admin guide.html</changelog>
  <changelog author="william.brown@suse.com" date="1741953600">- bsc#1239557 - Set default ldapi path to be consistent for SUSE</changelog>
  <changelog author="william.brown@suse.com" date="1742990400">- bsc#1240017 - Enable argon2id</changelog>
  <changelog author="william.brown@suse.com" date="1743768000">- Update to version 2.5.18+34:
  * bsc#1239787 - prevent double free in info rewrite</changelog>
  <changelog author="william.brown@suse.com" date="1745582400">- Update to upstream version 2.5.19
  * bsc#1241901 - upstream patch rollup</changelog>
  <changelog author="william.brown@suse.com" date="1749902400">- bsc#1241889 - resolve syncprov crash
- Update to version 2.5.19+8:
  * Clear after free
  * prevent double free
  * liblber calloc</changelog>
  <changelog author="william.brown@suse.com" date="1751457600">- bsc#1241210 - resolve syncprov hang after online configuration (see ITS#10327)
- Update to version 2.5.19+47:
  * Return to RE
  * Prep for release
  * ITS#10331
  * ITS#10331 Add helpful error messages for usage errors
  * ITS#10328
  * ITS#10328 librewrite: fix substitution cleanup
  * ITS#10327
  * ITS#10327 Allow lockless config_back_search() during server pause
  * ITS#10323
  * ITS#10323 Apply olcBkLloadStartTLS runtime changes directly
  * ITS#10320
  * ITS#10320 autogroup: mark internal searches
  * ITS#9934
  * ITS#9934 slapd-config(5) add new TLS cert/key settings
  * ITS#10020
  * ITS#10020 slapo-dynlist(5) note static objectclasses can only be used once
  * ITS#10270
  * ITS#10270 slapo-pcache: negative cache entries are not loaded when pcachePersist is on
  * ITS#10270 slapo-pcache: queries with ttr/x-refresh are not loaded when pcachePersist is on
  * ITS#10270 slapo-pcache: ttr was not being applied to negatively cached entries
  * Add missing olcFrontendConfig to example
  * ITS#10309
  * ITS#10309 Check for strdup allocation failures
  * ITS#10279
  * ITS#10279 Let client notify when LDAP_DEBUG is disabled but -d specified
  * ITS#10307
  * ITS#10307 Initialise last if we use it later
  * ITS#10226
  * ITS#10226 - Fix ldap.conf(5) formatting issues
  * Return to release engineering</changelog>
  <changelog author="william.brown@suse.com" date="1762430400">- Update to version 2.5.20+10:
  * jsc#PED-13741 - Import ppolicy-check-password module</changelog>
</package>
<package pkgid="a0b13bbaf3bcbfc90cbf727ffbac7b85db6a466d59475b3bce6f723f5a3b2a4d" name="openldap2_5-doc" arch="noarch">
  <version epoch="0" ver="2.5.20+11" rel="150500.11.38.1"/>
  <changelog author="william.brown@suse.com" date="1715774400">- Add initial OpenLDAP2_5 version 2.5.17+50, see:
  * jsc#PED-7178
  * jsc#PED-7240
- Apply SUSE Hardening Patches
  * Change malloc to use calloc to prevent memory reuse corruption
  * [PATCH] Use OpenSSL API to verify host</changelog>
  <changelog author="william.brown@suse.com" date="1729080000">- bsc#1231335 - Update openldap2.conf for tmpfiles to create
  and manage /run/slapd
- Update to upstream patch/stabilty fix version 2.5.18+31
  * https://www.openldap.org/software/release/changes_lts.html</changelog>
  <changelog author="william.brown@suse.com" date="1729080001">- bsc#1231335 - Update openldap2.conf for tmpfiles to create
  and manage /run/slapd
- Update to upstream patch/stabilty fix version 2.5.18+31</changelog>
  <changelog author="william.brown@suse.com" date="1730894400">- bsc#1232783 - Enable sasl passthrough authentication</changelog>
  <changelog author="william.brown@suse.com" date="1741780800">- bsc#1238217 - add admin guide.html</changelog>
  <changelog author="william.brown@suse.com" date="1741953600">- bsc#1239557 - Set default ldapi path to be consistent for SUSE</changelog>
  <changelog author="william.brown@suse.com" date="1742990400">- bsc#1240017 - Enable argon2id</changelog>
  <changelog author="william.brown@suse.com" date="1743768000">- Update to version 2.5.18+34:
  * bsc#1239787 - prevent double free in info rewrite</changelog>
  <changelog author="william.brown@suse.com" date="1745582400">- Update to upstream version 2.5.19
  * bsc#1241901 - upstream patch rollup</changelog>
  <changelog author="william.brown@suse.com" date="1749902400">- bsc#1241889 - resolve syncprov crash
- Update to version 2.5.19+8:
  * Clear after free
  * prevent double free
  * liblber calloc</changelog>
  <changelog author="william.brown@suse.com" date="1751457600">- bsc#1241210 - resolve syncprov hang after online configuration (see ITS#10327)
- Update to version 2.5.19+47:
  * Return to RE
  * Prep for release
  * ITS#10331
  * ITS#10331 Add helpful error messages for usage errors
  * ITS#10328
  * ITS#10328 librewrite: fix substitution cleanup
  * ITS#10327
  * ITS#10327 Allow lockless config_back_search() during server pause
  * ITS#10323
  * ITS#10323 Apply olcBkLloadStartTLS runtime changes directly
  * ITS#10320
  * ITS#10320 autogroup: mark internal searches
  * ITS#9934
  * ITS#9934 slapd-config(5) add new TLS cert/key settings
  * ITS#10020
  * ITS#10020 slapo-dynlist(5) note static objectclasses can only be used once
  * ITS#10270
  * ITS#10270 slapo-pcache: negative cache entries are not loaded when pcachePersist is on
  * ITS#10270 slapo-pcache: queries with ttr/x-refresh are not loaded when pcachePersist is on
  * ITS#10270 slapo-pcache: ttr was not being applied to negatively cached entries
  * Add missing olcFrontendConfig to example
  * ITS#10309
  * ITS#10309 Check for strdup allocation failures
  * ITS#10279
  * ITS#10279 Let client notify when LDAP_DEBUG is disabled but -d specified
  * ITS#10307
  * ITS#10307 Initialise last if we use it later
  * ITS#10226
  * ITS#10226 - Fix ldap.conf(5) formatting issues
  * Return to release engineering</changelog>
  <changelog author="william.brown@suse.com" date="1762430400">- Update to version 2.5.20+10:
  * jsc#PED-13741 - Import ppolicy-check-password module</changelog>
  <changelog author="william.brown@suse.com" date="1768305600">- bsc#1256297 - CVE-2026-22185 - possible crash in malicious DB
- Update to version 2.5.20+11:
  * ITS#10421 mdb_load: check for malicious input</changelog>
</package>
<package pkgid="8d4d836f69e632ce2c70fb23fc123fe27e6ee47623621db217e618319635142e" name="opensc" arch="src">
  <version epoch="0" ver="0.22.0" rel="150600.11.6.1"/>
  <changelog author="t.gruner@katodev.de" date="1467720000">- update to version 0.16.0
- remove fix (issue 505)
- clean up spec-file</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Add baselibs.conf to provide 32-bit PKCS11 plugins (bsc#996047).
- Drop opensc-ADVISORIES. There is no new advisory since 2009.</changelog>
  <changelog author="tchvatal@suse.com" date="1500379200">- Switch to tarball fetching from github
- Few small cleanups</changelog>
  <changelog author="michael@stroeder.com" date="1514808000">- update to version 0.17.0:
  * support for new cards
  * PIN support enhancemets
  * added .pc file
  * builds with OpenSSL 1.1.0 (1074799)
  * See /usr/share/doc/packages/opensc/NEWS for complete list.</changelog>
  <changelog author="sbrabec@suse.com" date="1531224000">- Update to version 0.18.0:
  * Further improvements of PIN support.
  * Large number of improvements and fixes
    (boo#1097951, boo#1100501).
  * See /usr/share/doc/packages/opensc/NEWS for complete list.
- Add opensc-desktop.patch, opensc-desktop2.patch and
  opensc-bash-completions.patch.</changelog>
  <changelog author="kbabioch@suse.com" date="1536840000">- Update to version 0.19.0
  * Fixed multiple security problems (out of bound writes/reads):
  * bsc#1104812
  * CVE-2018-16391 (bsc#1106998)
  * CVE-2018-16392 (bsc#1106999)
  * CVE-2018-16393 (bsc#1108318)
  * CVE-2018-16418 (bsc#1107039)
  * CVE-2018-16419 (bsc#1107107)
  * CVE-2018-16420 (bsc#1107097)
  * CVE-2018-16421 (bsc#1107049)
  * CVE-2018-16422 (bsc#1107038)
  * CVE-2018-16423 (bsc#1107037)
  * CVE-2018-16424 (bsc#1107036)
  * CVE-2018-16425 (bsc#1107035)
  * CVE-2018-16426 (bsc#1107034)
  * CVE-2018-16427 (bsc#1107033)
  * Workaround cards returning short signatures without leading zeroes
  * Distribute minimal opensc.conf
  * `pkcs11_enable_InitToken made` global configuration option
  * Modify behavior of `OPENSC_DRIVER` environment variable to restrict driver
    list instead of forcing one driver and skipping vital parts of
    configuration
  * Removed configuration options `zero_ckaid_for_ca_certs`,
    `force_card_driver`, `reopen_debug_file`, `paranoid-memory`
  * Generalized configuration option `ignored_readers`
  * If card initialization fails, continue card detection with other card
    drivers
  * reader-pcsc: allow fixing the length of a PIN
  * fixed crash during `C_WaitForSlotEvent`
  * Allow cancelling the PIN pad prompt before starting the reader transaction.
    Whether to start the transaction immediately or not is user-configurable
    for each application
  * opensc-notify
  * add Exit button to tray icon
  * User better description (GenericName) and a generic application icon
  * Do not display in the application list
- Removed patches included upstream now:
  * opensc-desktop.patch
  * opensc-desktop2.patch
  * opensc-bash-completions.patch
- Applied spec-cleaner</changelog>
  <changelog author="code@bnavigator.de" date="1563883200">- add explicit BuildRequires: zlib-devel</changelog>
  <changelog author="jsikes@suse.de" date="1564488000">- added opensc-0.19.0-rsa-pss.patch
  * Fixes the pkcs11-tool example
  * Added missing CKM_SHA224_RSA_PKCS_PSS
  * Add support for PSS padding to RSA signatures
  * Support for signature verification in pkcs11-tool
  * Switch cleanup steps to avoid segfaults on errors and more sanity checking
- added opensc-0.19.0-redundant_logging.patch
  * Remove redundant debug output</changelog>
  <changelog author="jsikes@suse.com" date="1566129600">- added opensc-0.19.0-piv_card_matching.patch
  * Improve Card Matching for Dual CAC/PIV and PIVKEY cards.
  * sourced from https://github.com/OpenSC/OpenSC/pull/1549</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606478400">- OpenSC 0.21.0:
  * CVE-2020-26571: stack-based buffer overflow in the gemsafe GPK
    smart card software driver (boo#1177380)
  * CVE-2020-26572: stack-based buffer overflow in the TCOS smart
    card software driver (boo#1177378)
  * CVE-2020-26570: heap-based buffer overflow in the Oberthur
    smart card software driver (boo#1177364)
  * CardOS 5.x support boo#1179291
  * Support for OAEP encryption, make SHA256 default
  * New separate debug level for PIN commands
  * Fix handling of card/reader insertion/removal events in pcscd
  * Fixes of removed readers handling
  * Fix Firefox crash because of invalid pcsc context
  * PKCS#11: Return CKR_TOKEN_NOT_RECOGNIZED for not recognized cards
  * Propagate ignore_user_content to PKCS#11 layer not to confuse applications
  * Minidriver: Fix check of ATR length (2-to 33 characters inclusive)
  * pkcs11-tool: allow using SW tokens
  * opensc-explorer asn1 accepts offsets and decode records
  * opensc-explorer cat accepts records
  * OpenPGP: Add new ec curves supported by GNUK
  * First steps supporting OpenPGP 3.4
  * OpenPGP: Add support for EC key import
  * Rutoken: Add ATR for Rutoken ECP SC NFC
  * Improve detection of various CardOS 5 configurations
  * DNIe: Add new DNIe CA structure for the secure channel
  * ePass2003: Improve ECC support
  * ePass2003: Fix erase sequence
  * IAS-ECC: Fix support for Idemia Cosmo cards
  * IAS-ECC: PIN padding settings are now used from PKCS#15 info when available
  * IAS-ECC: Added PIN-pad support for PIN unblock
  * New driver for Gemalto IDPrime (only some types)
  * eDo: New driver with initial support for Polish eID card (e-dowód, eDO)
  * MCRD: Remove unused and broken RSA EstEID support
  * TCOS: Add missing encryption certificates
  * PIV: Add ATR of DOD Yubikey
  * fixed PIV global pin bug
  * CAC1: Support changing PIN with CAC Alt tokens
- includes changes from 0.20.0
  * CVE-2019-6502: memory leak in libopensc (boo#1122756)
  * CVE-2019-15946: out-of-bounds access of an ASN.1 Octet string (boo#1149747)
  * CVE-2019-15945: out-of-bounds access of an ASN.1 Bitstring (boo#1149746)
  * CVE-2019-19479: incorrect read operation during parsing of a SETCOS file attribute (boo#1158256)
  * CVE-2019-19480: improper free operation in sc_pkcs15_decode_prkdf_entry (boo#1158307)
  * CVE-2019-20792: double free in coolkey_free_private_dat (bsc#1170809)
  * Support RSA-PSS signature mechanisms using RSA-RAW
  * Added memory locking for secrets
  * added support for terminal colors
  * PC/SC driver: Fixed error handling in case of changing or removing the card reader
  * rename md_read_only to read_only and use it for PKCS#11 and Minidriver
  * allow global use of ignore_private_certificate
  * PKCS#11: Implement write protection (CKF_WRITE_PROTECTED) based on the card profile
  * PKCS#11: Add C_WrapKey and C_UnwrapKey implementations
  * PKCS#11: Handle CKA_ALWAYS_AUTHENTICATE when creating key objects
  * PKCS#11: Truncate long PKCS#11 labels with ...
  * PKCS#11: Fixed recognition of a token when being unplugged and reinserted
  * Minidriver: Register for CardOS5 cards
  * Minidriver: Add support for RSA-PSS
  * tools: Harmonize the use of option -r/--reader
  * goid-tool: GoID personalization with fingerprint
  * openpgp-tool: replace the options -L/--key-length with -t/--key-type
  * openpgp-tool: add options -C/--card-info and -K/--key-info
  * opensc-explorer: add command pin_info, extend random
  * pkcs11-register: Auto-configuration of applications for use of OpenSC PKCS#11
  * pkcd11-register: Autostart
  * opensc-tool: Show ATR also for cards not recognized by OpenSC
  * pkcs11-spy: parse CKM_AES_GCM, EC Derive parameters
  * pkcs11-spy: Add support for CKA_OTP_* and CKM_*_PSS values
  * pkcs11-tool: Support for signature verification via --verify
  * pkcs11-tool: Add object type secrkey for --type option
  * pkcs11-tool: Implement Secret Key write object
  * pkcs11-tool: Add GOSTR3410-2012 support
  * pkcs11-tool: Add support for testing CKM_RSA_PKCS_OAEP
  * pkcs11-tool: Add extractable option to key import
  * pkcs11-tool: list more key access flags when listing keys
  * pkcs11-tool: Add support for CKA_ALLOWED_MECHANISMS when creating new objects and listing keys
  * pkcs15-crypt: *Handle keys with user consent
  * New separate CAC1 driver using the old CAC specification (#1502)
  * CardOS: Add support for 4K RSA keys in CardOS 5
  * CardOS: Fixed decryption with CardOS 5
  * Enable CoolKey driver to handle 2048-bit keys
  * EstEID: add support for a minimalistic, small and fast card profile based on IAS-ECC issued since December 2018
  * GIDS Decipher fix (#1881)
  * GIDS: Allow RSA 4K support
  * MICARDO: Remove long expired EstEID 1.0/1.1 card support
  * MyEID: Add support for unwrapping a secret key with an RSA key or secret key
  * MyEID Add support for wrapping a secret key with a secret key
  * Support for MyEID 4K RSA
  * Support for OsEID
  * Gemalto GemSafe: add new PTeID ATRs, add support for 4K RSA keys
  * OpenPGP Card v3 ECC support
  * Add Rutoken ECP SC
  * Add Rutoken Lite
  * Add SmartCard-HSM 4K ATR
  * Add missing secp384r1 curve parameter
  * Stacros: Fix decipher with 2.3
  * Stacros: Add ATR for 2nd gen. eGK
  * Stacros: Add new ATR for 3.5
  * Stacros: Detect and allow Globalplatform PIN encoding
  * Fix TCOS IDKey support
  * TCOS: add encryption certificate for IDKey
  * Infocamere, Postecert, Cnipa: Remove profiles
  * Remove incomplete acos5 driver
- drop patches now upstream:
  * opensc-0.19.0-piv_card_matching.patch
  * opensc-0.19.0-redundant_logging.patch
  * opensc-0.19.0-rsa-pss.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move licenses to licensedir</changelog>
  <changelog author="predivan@mts.rs" date="1624795200">- Fix build on GCC11
  * Add opensc-gcc11.patch from Fedora
    (https://github.com/OpenSC/OpenSC/pull/2241/)</changelog>
  <changelog author="daniel.donisa@suse.com" date="1633348800">- Update to OpenSC 0.22.0:
  * Removed changes in opensc-gcc11.patch already present in upstream.
  - See https://github.com/OpenSC/OpenSC/pull/2241/commits/e549e9c62eb4fcd2260800e2665071e4dd9bbbda
  * Removed some false positives from the openrc-rpmlintrc file.
  * Use standard paths for file cache on Linux (#2148) and OSX (#2214)
  * Various issues of memory/buffer handling in legacy drivers mostly reported by oss-fuzz and coverity (tcos, oberthur, isoapplet, iasecc, westcos, gpk, flex, dnie, mcrd, authentic, belpic)
  * Add threading test to `pkcs11-tool` (#2067)
  * Add support to generate generic secret keys (#2140)
  * `opensc-explorer`: Print information about LCS (Life cycle status byte) (#2195)
  * Add support for Apple's arm64 (M1) binaries, removed TokenD. A seperate installer with TokenD (and without arm64 binaries) will be available (#2179).
  * Support for gcc11 and its new strict aliasing rules (#2241, #2260)
  * Initial support for building with OpenSSL 3.0 (#2343)
  * pkcs15-tool: Write data objects in binary mode (#2324)
  * Avoid limited size of log messages (#2352)
  * Support for ECDSA verification (#2211)
  * Support for ECDSA with different SHA hashes (#2190)
  * Prevent issues in p11-kit by not returning unexpected return codes (#2207)
  * Add support for PKCS#11 3.0: The new interfaces, profile objects and functions (#2096, #2293)
  * Standardize the version 2 on 2.20 in the code (#2096)
  * Fix CKA_MODIFIABLE and CKA_EXTRACTABLE  (#2176)
  * Copy arguments of C_Initialize (#2350)
  * Fix RSA-PSS signing (#2234)
  * Fix DO deletion (#2215)
  * Add support for (X)EdDSA keys (#1960)
  * Add support for applet version 3 and fix RSA-PSS mechanisms (#2205)
  * Add support for applet version 4 (#2332)
  * New configuration option for opensc.conf to disable pkcs1_padding (#2193)
  * Add support for ECDSA with different hashes (#2190)
  * Enable more mechanisms (#2178)
  * Fixed asking for a user pin when formatting a card (#1737)
  * Added support for French CPx Healthcare cards (#2217)
  * Added ATR for new CardOS 5.4 version (#2296)
  * Fixes security issues:
  * tcos: use after return (bsc#1192005, CVE-2021-42780)
  * oberthur: use after free (bsc#1191992, CVE-2021-42779)
  * oberthur: multiple heap buffer overflows (bsc#1192000,
    CVE-2021-42781)
  * multiple stack buffer overflow issues (bsc#1191957,
    CVE-2021-42782)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685620800">- Security Fix: [CVE-2023-2977, bsc#1211894]
  * opensc: out of bounds read in pkcs15 cardos_have_verifyrc_package()
  * Add opensc-CVE-2023-2977.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Security Fix: [CVE-2023-40660, bsc#1215762]
  * opensc: PIN bypass when card tracks its own login state
  * Add patches:
  - patches/opensc-0_22_0-CVE-2023-40660-1of2.patch
  - patches/opensc-0_22_0-CVE-2023-40660-2of2.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696593600">- Security Fix: [CVE-2023-40661, bsc#1215761]
  * opensc: multiple memory issues with pkcs15-init (enrollment tool)
  * Add patches:
  - opensc-CVE-2023-40661-1of12.patch
  - opensc-CVE-2023-40661-2of12.patch
  - opensc-CVE-2023-40661-3of12.patch
  - opensc-CVE-2023-40661-4of12.patch
  - opensc-CVE-2023-40661-5of12.patch
  - opensc-CVE-2023-40661-6of12.patch
  - opensc-CVE-2023-40661-7of12.patch
  - opensc-CVE-2023-40661-8of12.patch
  - opensc-CVE-2023-40661-9of12.patch
  - opensc-CVE-2023-40661-10of12.patch
  - opensc-CVE-2023-40661-11of12.patch
  - opensc-CVE-2023-40661-12of12.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1705579200">- Disable deprecated declaration warnings caused by OpenSSL 3
  (bsc#1217722)</changelog>
  <changelog author="angel.yankov@suse.com" date="1726142400">- Security fix: [CVE-2024-8443, bsc#1230364]
  * opensc: heap buffer overflow in OpenPGP driver when generating key
  * Added patch: opensc-CVE-2024-8443.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1726228800">- Security fix: [opensc-CVE-2024-45620, bsc#1230076]
- Security fix: [opensc-CVE-2024-45619, bsc#1230075]
- Security fix: [opensc-CVE-2024-45618, bsc#1230074]
- Security fix: [opensc-CVE-2024-45617, bsc#1230073]
- Security fix: [opensc-CVE-2024-45616, bsc#1230072]
- Security fix: [opensc-CVE-2024-45615, bsc#1230071]
  * opensc: pkcs15init: Usage of uninitialized values in libopensc and pkcs15init
  * opensc: Uninitialized values after incorrect check or usage of APDU response values in libopensc
  * opensc: Uninitialized values after incorrect or missing checking return values of functions in libopensc
  * opensc: Uninitialized values after incorrect or missing checking return values of functions in pkcs15init
  * opensc: Incorrect handling length of buffers or files in libopensc
  * opensc: Incorrect handling of the length of buffers or files in pkcs15init
  * Added patches:
  - opensc-CVE-2024-45615.patch
  - opensc-CVE-2024-45616.patch
  - opensc-CVE-2024-45617.patch
  - opensc-CVE-2024-45618.patch
  - opensc-CVE-2024-45619.patch
  - opensc-CVE-2024-45620.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1750766400">- Security fix: [CVE-2023-5992, bsc#1219386]
  * Add patch:
  - opensc-CVE-2023-5992.patch</changelog>
</package>
<package pkgid="ec0a45f881bbba8518e3c7cac239ee85c5a5ee2164aae307eee12135dc618250" name="opensc" arch="x86_64">
  <version epoch="0" ver="0.22.0" rel="150600.11.6.1"/>
  <changelog author="t.gruner@katodev.de" date="1467720000">- update to version 0.16.0
- remove fix (issue 505)
- clean up spec-file</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Add baselibs.conf to provide 32-bit PKCS11 plugins (bsc#996047).
- Drop opensc-ADVISORIES. There is no new advisory since 2009.</changelog>
  <changelog author="tchvatal@suse.com" date="1500379200">- Switch to tarball fetching from github
- Few small cleanups</changelog>
  <changelog author="michael@stroeder.com" date="1514808000">- update to version 0.17.0:
  * support for new cards
  * PIN support enhancemets
  * added .pc file
  * builds with OpenSSL 1.1.0 (1074799)
  * See /usr/share/doc/packages/opensc/NEWS for complete list.</changelog>
  <changelog author="sbrabec@suse.com" date="1531224000">- Update to version 0.18.0:
  * Further improvements of PIN support.
  * Large number of improvements and fixes
    (boo#1097951, boo#1100501).
  * See /usr/share/doc/packages/opensc/NEWS for complete list.
- Add opensc-desktop.patch, opensc-desktop2.patch and
  opensc-bash-completions.patch.</changelog>
  <changelog author="kbabioch@suse.com" date="1536840000">- Update to version 0.19.0
  * Fixed multiple security problems (out of bound writes/reads):
  * bsc#1104812
  * CVE-2018-16391 (bsc#1106998)
  * CVE-2018-16392 (bsc#1106999)
  * CVE-2018-16393 (bsc#1108318)
  * CVE-2018-16418 (bsc#1107039)
  * CVE-2018-16419 (bsc#1107107)
  * CVE-2018-16420 (bsc#1107097)
  * CVE-2018-16421 (bsc#1107049)
  * CVE-2018-16422 (bsc#1107038)
  * CVE-2018-16423 (bsc#1107037)
  * CVE-2018-16424 (bsc#1107036)
  * CVE-2018-16425 (bsc#1107035)
  * CVE-2018-16426 (bsc#1107034)
  * CVE-2018-16427 (bsc#1107033)
  * Workaround cards returning short signatures without leading zeroes
  * Distribute minimal opensc.conf
  * `pkcs11_enable_InitToken made` global configuration option
  * Modify behavior of `OPENSC_DRIVER` environment variable to restrict driver
    list instead of forcing one driver and skipping vital parts of
    configuration
  * Removed configuration options `zero_ckaid_for_ca_certs`,
    `force_card_driver`, `reopen_debug_file`, `paranoid-memory`
  * Generalized configuration option `ignored_readers`
  * If card initialization fails, continue card detection with other card
    drivers
  * reader-pcsc: allow fixing the length of a PIN
  * fixed crash during `C_WaitForSlotEvent`
  * Allow cancelling the PIN pad prompt before starting the reader transaction.
    Whether to start the transaction immediately or not is user-configurable
    for each application
  * opensc-notify
  * add Exit button to tray icon
  * User better description (GenericName) and a generic application icon
  * Do not display in the application list
- Removed patches included upstream now:
  * opensc-desktop.patch
  * opensc-desktop2.patch
  * opensc-bash-completions.patch
- Applied spec-cleaner</changelog>
  <changelog author="code@bnavigator.de" date="1563883200">- add explicit BuildRequires: zlib-devel</changelog>
  <changelog author="jsikes@suse.de" date="1564488000">- added opensc-0.19.0-rsa-pss.patch
  * Fixes the pkcs11-tool example
  * Added missing CKM_SHA224_RSA_PKCS_PSS
  * Add support for PSS padding to RSA signatures
  * Support for signature verification in pkcs11-tool
  * Switch cleanup steps to avoid segfaults on errors and more sanity checking
- added opensc-0.19.0-redundant_logging.patch
  * Remove redundant debug output</changelog>
  <changelog author="jsikes@suse.com" date="1566129600">- added opensc-0.19.0-piv_card_matching.patch
  * Improve Card Matching for Dual CAC/PIV and PIVKEY cards.
  * sourced from https://github.com/OpenSC/OpenSC/pull/1549</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606478400">- OpenSC 0.21.0:
  * CVE-2020-26571: stack-based buffer overflow in the gemsafe GPK
    smart card software driver (boo#1177380)
  * CVE-2020-26572: stack-based buffer overflow in the TCOS smart
    card software driver (boo#1177378)
  * CVE-2020-26570: heap-based buffer overflow in the Oberthur
    smart card software driver (boo#1177364)
  * CardOS 5.x support boo#1179291
  * Support for OAEP encryption, make SHA256 default
  * New separate debug level for PIN commands
  * Fix handling of card/reader insertion/removal events in pcscd
  * Fixes of removed readers handling
  * Fix Firefox crash because of invalid pcsc context
  * PKCS#11: Return CKR_TOKEN_NOT_RECOGNIZED for not recognized cards
  * Propagate ignore_user_content to PKCS#11 layer not to confuse applications
  * Minidriver: Fix check of ATR length (2-to 33 characters inclusive)
  * pkcs11-tool: allow using SW tokens
  * opensc-explorer asn1 accepts offsets and decode records
  * opensc-explorer cat accepts records
  * OpenPGP: Add new ec curves supported by GNUK
  * First steps supporting OpenPGP 3.4
  * OpenPGP: Add support for EC key import
  * Rutoken: Add ATR for Rutoken ECP SC NFC
  * Improve detection of various CardOS 5 configurations
  * DNIe: Add new DNIe CA structure for the secure channel
  * ePass2003: Improve ECC support
  * ePass2003: Fix erase sequence
  * IAS-ECC: Fix support for Idemia Cosmo cards
  * IAS-ECC: PIN padding settings are now used from PKCS#15 info when available
  * IAS-ECC: Added PIN-pad support for PIN unblock
  * New driver for Gemalto IDPrime (only some types)
  * eDo: New driver with initial support for Polish eID card (e-dowód, eDO)
  * MCRD: Remove unused and broken RSA EstEID support
  * TCOS: Add missing encryption certificates
  * PIV: Add ATR of DOD Yubikey
  * fixed PIV global pin bug
  * CAC1: Support changing PIN with CAC Alt tokens
- includes changes from 0.20.0
  * CVE-2019-6502: memory leak in libopensc (boo#1122756)
  * CVE-2019-15946: out-of-bounds access of an ASN.1 Octet string (boo#1149747)
  * CVE-2019-15945: out-of-bounds access of an ASN.1 Bitstring (boo#1149746)
  * CVE-2019-19479: incorrect read operation during parsing of a SETCOS file attribute (boo#1158256)
  * CVE-2019-19480: improper free operation in sc_pkcs15_decode_prkdf_entry (boo#1158307)
  * CVE-2019-20792: double free in coolkey_free_private_dat (bsc#1170809)
  * Support RSA-PSS signature mechanisms using RSA-RAW
  * Added memory locking for secrets
  * added support for terminal colors
  * PC/SC driver: Fixed error handling in case of changing or removing the card reader
  * rename md_read_only to read_only and use it for PKCS#11 and Minidriver
  * allow global use of ignore_private_certificate
  * PKCS#11: Implement write protection (CKF_WRITE_PROTECTED) based on the card profile
  * PKCS#11: Add C_WrapKey and C_UnwrapKey implementations
  * PKCS#11: Handle CKA_ALWAYS_AUTHENTICATE when creating key objects
  * PKCS#11: Truncate long PKCS#11 labels with ...
  * PKCS#11: Fixed recognition of a token when being unplugged and reinserted
  * Minidriver: Register for CardOS5 cards
  * Minidriver: Add support for RSA-PSS
  * tools: Harmonize the use of option -r/--reader
  * goid-tool: GoID personalization with fingerprint
  * openpgp-tool: replace the options -L/--key-length with -t/--key-type
  * openpgp-tool: add options -C/--card-info and -K/--key-info
  * opensc-explorer: add command pin_info, extend random
  * pkcs11-register: Auto-configuration of applications for use of OpenSC PKCS#11
  * pkcd11-register: Autostart
  * opensc-tool: Show ATR also for cards not recognized by OpenSC
  * pkcs11-spy: parse CKM_AES_GCM, EC Derive parameters
  * pkcs11-spy: Add support for CKA_OTP_* and CKM_*_PSS values
  * pkcs11-tool: Support for signature verification via --verify
  * pkcs11-tool: Add object type secrkey for --type option
  * pkcs11-tool: Implement Secret Key write object
  * pkcs11-tool: Add GOSTR3410-2012 support
  * pkcs11-tool: Add support for testing CKM_RSA_PKCS_OAEP
  * pkcs11-tool: Add extractable option to key import
  * pkcs11-tool: list more key access flags when listing keys
  * pkcs11-tool: Add support for CKA_ALLOWED_MECHANISMS when creating new objects and listing keys
  * pkcs15-crypt: *Handle keys with user consent
  * New separate CAC1 driver using the old CAC specification (#1502)
  * CardOS: Add support for 4K RSA keys in CardOS 5
  * CardOS: Fixed decryption with CardOS 5
  * Enable CoolKey driver to handle 2048-bit keys
  * EstEID: add support for a minimalistic, small and fast card profile based on IAS-ECC issued since December 2018
  * GIDS Decipher fix (#1881)
  * GIDS: Allow RSA 4K support
  * MICARDO: Remove long expired EstEID 1.0/1.1 card support
  * MyEID: Add support for unwrapping a secret key with an RSA key or secret key
  * MyEID Add support for wrapping a secret key with a secret key
  * Support for MyEID 4K RSA
  * Support for OsEID
  * Gemalto GemSafe: add new PTeID ATRs, add support for 4K RSA keys
  * OpenPGP Card v3 ECC support
  * Add Rutoken ECP SC
  * Add Rutoken Lite
  * Add SmartCard-HSM 4K ATR
  * Add missing secp384r1 curve parameter
  * Stacros: Fix decipher with 2.3
  * Stacros: Add ATR for 2nd gen. eGK
  * Stacros: Add new ATR for 3.5
  * Stacros: Detect and allow Globalplatform PIN encoding
  * Fix TCOS IDKey support
  * TCOS: add encryption certificate for IDKey
  * Infocamere, Postecert, Cnipa: Remove profiles
  * Remove incomplete acos5 driver
- drop patches now upstream:
  * opensc-0.19.0-piv_card_matching.patch
  * opensc-0.19.0-redundant_logging.patch
  * opensc-0.19.0-rsa-pss.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move licenses to licensedir</changelog>
  <changelog author="predivan@mts.rs" date="1624795200">- Fix build on GCC11
  * Add opensc-gcc11.patch from Fedora
    (https://github.com/OpenSC/OpenSC/pull/2241/)</changelog>
  <changelog author="daniel.donisa@suse.com" date="1633348800">- Update to OpenSC 0.22.0:
  * Removed changes in opensc-gcc11.patch already present in upstream.
  - See https://github.com/OpenSC/OpenSC/pull/2241/commits/e549e9c62eb4fcd2260800e2665071e4dd9bbbda
  * Removed some false positives from the openrc-rpmlintrc file.
  * Use standard paths for file cache on Linux (#2148) and OSX (#2214)
  * Various issues of memory/buffer handling in legacy drivers mostly reported by oss-fuzz and coverity (tcos, oberthur, isoapplet, iasecc, westcos, gpk, flex, dnie, mcrd, authentic, belpic)
  * Add threading test to `pkcs11-tool` (#2067)
  * Add support to generate generic secret keys (#2140)
  * `opensc-explorer`: Print information about LCS (Life cycle status byte) (#2195)
  * Add support for Apple's arm64 (M1) binaries, removed TokenD. A seperate installer with TokenD (and without arm64 binaries) will be available (#2179).
  * Support for gcc11 and its new strict aliasing rules (#2241, #2260)
  * Initial support for building with OpenSSL 3.0 (#2343)
  * pkcs15-tool: Write data objects in binary mode (#2324)
  * Avoid limited size of log messages (#2352)
  * Support for ECDSA verification (#2211)
  * Support for ECDSA with different SHA hashes (#2190)
  * Prevent issues in p11-kit by not returning unexpected return codes (#2207)
  * Add support for PKCS#11 3.0: The new interfaces, profile objects and functions (#2096, #2293)
  * Standardize the version 2 on 2.20 in the code (#2096)
  * Fix CKA_MODIFIABLE and CKA_EXTRACTABLE  (#2176)
  * Copy arguments of C_Initialize (#2350)
  * Fix RSA-PSS signing (#2234)
  * Fix DO deletion (#2215)
  * Add support for (X)EdDSA keys (#1960)
  * Add support for applet version 3 and fix RSA-PSS mechanisms (#2205)
  * Add support for applet version 4 (#2332)
  * New configuration option for opensc.conf to disable pkcs1_padding (#2193)
  * Add support for ECDSA with different hashes (#2190)
  * Enable more mechanisms (#2178)
  * Fixed asking for a user pin when formatting a card (#1737)
  * Added support for French CPx Healthcare cards (#2217)
  * Added ATR for new CardOS 5.4 version (#2296)
  * Fixes security issues:
  * tcos: use after return (bsc#1192005, CVE-2021-42780)
  * oberthur: use after free (bsc#1191992, CVE-2021-42779)
  * oberthur: multiple heap buffer overflows (bsc#1192000,
    CVE-2021-42781)
  * multiple stack buffer overflow issues (bsc#1191957,
    CVE-2021-42782)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685620800">- Security Fix: [CVE-2023-2977, bsc#1211894]
  * opensc: out of bounds read in pkcs15 cardos_have_verifyrc_package()
  * Add opensc-CVE-2023-2977.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Security Fix: [CVE-2023-40660, bsc#1215762]
  * opensc: PIN bypass when card tracks its own login state
  * Add patches:
  - patches/opensc-0_22_0-CVE-2023-40660-1of2.patch
  - patches/opensc-0_22_0-CVE-2023-40660-2of2.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696593600">- Security Fix: [CVE-2023-40661, bsc#1215761]
  * opensc: multiple memory issues with pkcs15-init (enrollment tool)
  * Add patches:
  - opensc-CVE-2023-40661-1of12.patch
  - opensc-CVE-2023-40661-2of12.patch
  - opensc-CVE-2023-40661-3of12.patch
  - opensc-CVE-2023-40661-4of12.patch
  - opensc-CVE-2023-40661-5of12.patch
  - opensc-CVE-2023-40661-6of12.patch
  - opensc-CVE-2023-40661-7of12.patch
  - opensc-CVE-2023-40661-8of12.patch
  - opensc-CVE-2023-40661-9of12.patch
  - opensc-CVE-2023-40661-10of12.patch
  - opensc-CVE-2023-40661-11of12.patch
  - opensc-CVE-2023-40661-12of12.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1705579200">- Disable deprecated declaration warnings caused by OpenSSL 3
  (bsc#1217722)</changelog>
  <changelog author="angel.yankov@suse.com" date="1726142400">- Security fix: [CVE-2024-8443, bsc#1230364]
  * opensc: heap buffer overflow in OpenPGP driver when generating key
  * Added patch: opensc-CVE-2024-8443.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1726228800">- Security fix: [opensc-CVE-2024-45620, bsc#1230076]
- Security fix: [opensc-CVE-2024-45619, bsc#1230075]
- Security fix: [opensc-CVE-2024-45618, bsc#1230074]
- Security fix: [opensc-CVE-2024-45617, bsc#1230073]
- Security fix: [opensc-CVE-2024-45616, bsc#1230072]
- Security fix: [opensc-CVE-2024-45615, bsc#1230071]
  * opensc: pkcs15init: Usage of uninitialized values in libopensc and pkcs15init
  * opensc: Uninitialized values after incorrect check or usage of APDU response values in libopensc
  * opensc: Uninitialized values after incorrect or missing checking return values of functions in libopensc
  * opensc: Uninitialized values after incorrect or missing checking return values of functions in pkcs15init
  * opensc: Incorrect handling length of buffers or files in libopensc
  * opensc: Incorrect handling of the length of buffers or files in pkcs15init
  * Added patches:
  - opensc-CVE-2024-45615.patch
  - opensc-CVE-2024-45616.patch
  - opensc-CVE-2024-45617.patch
  - opensc-CVE-2024-45618.patch
  - opensc-CVE-2024-45619.patch
  - opensc-CVE-2024-45620.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1750766400">- Security fix: [CVE-2023-5992, bsc#1219386]
  * Add patch:
  - opensc-CVE-2023-5992.patch</changelog>
</package>
<package pkgid="ed947e080df4783ad252e32ebb84fc3852fb9f91a7024235972431490eab76bc" name="openssh" arch="src">
  <version epoch="0" ver="9.6p1" rel="150600.6.26.1"/>
  <changelog author="hpj@suse.com" date="1700827200">- Merge updates from openSUSE. Existing patches were rebased.
- Remove openssh-7.6p1-audit_race_condition.patch: Merged with
  audit patch.
- Remove openssh-CVE-2021-28041-agent-double-free.patch: Fixed
  upstream.
- Remove openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch:
  Fixed upstream.
- Remove openssh-CVE-2023-38408-PKCS11-execution.patch: Fixed
  upstream.
- Add cb4ed12f.patch from upstream, allowing newer versions of
  zlib to be used.
- Add logind_set_tty.patch by Thorsten Kukuk. This informs
  systemd-logind of the login TTY and prevents having to parse utmp,
  which is deprecated by glibc.</changelog>
  <changelog author="alarrosa@suse.com" date="1710244800">- Uncomment %sysuser_requires in openssh-server which was commented
  by mistake and is needed by the pre script installed with
  %sysusers_generate_pre (bsc#1220802).</changelog>
  <changelog author="alarrosa@suse.com" date="1712059200">- Use %config(noreplace) for sshd_config . In any case, it's
  recommended to drop a file in sshd_config.d instead of editing
  sshd_config (bsc#1221063)
- Add patches from obs package that were also in SP3/SP4/SP5:
  * Fri Nov  3 10:44:14 UTC 2023 - Johannes Segitz &lt;jsegitz@suse.com&gt;
  - Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712059201">- Rebase openssh-7.7p1-fips.patch (bsc#1221928)
  Remove OPENSSL_HAVE_EVPGCM-ifdef, which is no longer supported by upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1712577600">- Update to openssh 9.6p1:
  = Security
  * ssh(1), sshd(8): implement protocol extensions to thwart the
    so-called "Terrapin attack" discovered by Fabian Bäumer, Marcus
    Brinkmann and Jörg Schwenk. This attack allows a MITM to effect a
    limited break of the integrity of the early encrypted SSH transport
    protocol by sending extra messages prior to the commencement of
    encryption, and deleting an equal number of consecutive messages
    immediately after encryption starts. A peer SSH client/server
    would not be able to detect that messages were deleted
    (bsc#1217950, CVE-2023-48795).
  * ssh-agent(1): when adding PKCS#11-hosted private keys while
    specifying destination constraints, if the PKCS#11 token returned
    multiple keys then only the first key had the constraints applied.
    Use of regular private keys, FIDO tokens and unconstrained keys
    are unaffected.
  * ssh(1): if an invalid user or hostname that contained shell
    metacharacters was passed to ssh(1), and a ProxyCommand,
    LocalCommand directive or "match exec" predicate referenced the
    user or hostname via %u, %h or similar expansion token, then
    an attacker who could supply arbitrary user/hostnames to ssh(1)
    could potentially perform command injection depending on what
    quoting was present in the user-supplied ssh_config(5) directive
    (bsc#1218215, CVE-2023-51385).
  = Potentially incompatible changes
  * ssh(1), sshd(8): the RFC4254 connection/channels protocol provides
    a TCP-like window mechanism that limits the amount of data that
    can be sent without acceptance from the peer. In cases where this
    limit was exceeded by a non-conforming peer SSH implementation,
    ssh(1)/sshd(8) previously discarded the extra data. From OpenSSH
    9.6, ssh(1)/sshd(8) will now terminate the connection if a peer
    exceeds the window limit by more than a small grace factor. This
    change should have no effect of SSH implementations that follow
    the specification.
  = New features
  * ssh(1): add a %j token that expands to the configured ProxyJump
    hostname (or the empty string if this option is not being used)
    that can be used in a number of ssh_config(5) keywords. bz3610
  * ssh(1): add ChannelTimeout support to the client, mirroring the
    same option in the server and allowing ssh(1) to terminate
    quiescent channels.
  * ssh(1), sshd(8), ssh-add(1), ssh-keygen(1): add support for
    reading ED25519 private keys in PEM PKCS8 format. Previously
    only the OpenSSH private key format was supported.
  * ssh(1), sshd(8): introduce a protocol extension to allow
    renegotiation of acceptable signature algorithms for public key
    authentication after the server has learned the username being
    used for authentication. This allows varying sshd_config(5)
    PubkeyAcceptedAlgorithms in a "Match user" block.
  * ssh-add(1), ssh-agent(1): add an agent protocol extension to allow
    specifying certificates when loading PKCS#11 keys. This allows the
    use of certificates backed by PKCS#11 private keys in all OpenSSH
    tools that support ssh-agent(1). Previously only ssh(1) supported
    this use-case.
  = Bugfixes
  * ssh(1): when deciding whether to enable the keystroke timing
    obfuscation, enable it only if a channel with a TTY is active.
  * ssh(1): switch mainloop from poll(3) to ppoll(3) and mask signals
    before checking flags set in signal handler. Avoids potential
    race condition between signaling ssh to exit and polling. bz3531
  * ssh(1): when connecting to a destination with both the
    AddressFamily and CanonicalizeHostname directives in use,
    the AddressFamily directive could be ignored. bz5326
  * sftp(1): correct handling of the limits@openssh.com option when
    the server returned an unexpected message.
  * A number of fixes to the PuTTY and Dropbear regress/integration
    tests.
  * ssh(1): release GSS OIDs only at end of authentication, avoiding
    unnecessary init/cleanup cycles. bz2982
  * ssh_config(5): mention "none" is a valid argument to IdentityFile
    in the manual. bz3080
  * scp(1): improved debugging for paths from the server rejected for
    not matching the client's glob(3) pattern in old SCP/RCP protocol
    mode.
  * ssh-agent(1): refuse signing operations on destination-constrained
    keys if a previous session-bind operation has failed. This may
    prevent a fail-open situation in future if a user uses a mismatched
    ssh(1) client and ssh-agent(1) where the client supports a key type
    that the agent does not support.
- Update to openssh 9.5p1:
  = Potentially incompatible changes
  * ssh-keygen(1): generate Ed25519 keys by default. Ed25519 public keys
    are very convenient due to their small size. Ed25519 keys are
    specified in RFC 8709 and OpenSSH has supported them since version 6.5
    (January 2014).
  * sshd(8): the Subsystem directive now accurately preserves quoting of
    subsystem commands and arguments. This may change behaviour for exotic
    configurations, but the most common subsystem configuration
    (sftp-server) is unlikely to be affected.
  = New features
  * ssh(1): add keystroke timing obfuscation to the client. This attempts
    to hide inter-keystroke timings by sending interactive traffic at
    fixed intervals (default: every 20ms) when there is only a small
    amount of data being sent. It also sends fake "chaff" keystrokes for
    a random interval after the last real keystroke. These are
    controlled by a new ssh_config ObscureKeystrokeTiming keyword.
  * ssh(1), sshd(8): Introduce a transport-level ping facility. This adds
    a pair of SSH transport protocol messages SSH2_MSG_PING/PONG to
    implement a ping capability. These messages use numbers in the "local
    extensions" number space and are advertised using a "ping@openssh.com"
    ext-info message with a string version number of "0".
  * sshd(8): allow override of Subsystem directives in sshd Match blocks.
  = Bugfixes
  * scp(1): fix scp in SFTP mode recursive upload and download of
    directories that contain symlinks to other directories. In scp mode,
    the links would be followed, but in SFTP mode they were not. bz3611
  * ssh-keygen(1): handle cr+lf (instead of just cr) line endings in
    sshsig signature files.
  * ssh(1): interactive mode for ControlPersist sessions if they
    originally requested a tty.
  * sshd(8): make PerSourceMaxStartups first-match-wins
  * sshd(8): limit artificial login delay to a reasonable maximum (5s)
    and don't delay at all for the "none" authentication mechanism.
    bz3602
  * sshd(8): Log errors in kex_exchange_identification() with level
    verbose instead of error to reduce preauth log spam. All of those
    get logged with a more generic error message by sshpkt_fatal().
  * sshd(8): correct math for ClientAliveInterval that caused the probes
    to be sent less frequently than configured.
  * ssh(1): fix regression in OpenSSH 9.4 (mux.c r1.99) that caused
    multiplexed sessions to ignore SIGINT under some circumstances.
- Update to openssh 9.4p1:
  = Potentially incompatible changes
  * This release removes support for older versions of libcrypto.
    OpenSSH now requires LibreSSL &gt;= 3.1.0 or OpenSSL &gt;= 1.1.1.
    Note that these versions are already deprecated by their upstream
    vendors.
  * ssh-agent(1): PKCS#11 modules must now be specified by their full
    paths. Previously dlopen(3) could search for them in system
    library directories.
  = New features
  * ssh(1): allow forwarding Unix Domain sockets via ssh -W.
  * ssh(1): add support for configuration tags to ssh(1).
    This adds a ssh_config(5) "Tag" directive and corresponding
    "Match tag" predicate that may be used to select blocks of
    configuration similar to the pf.conf(5) keywords of the same
    name.
  * ssh(1): add a "match localnetwork" predicate. This allows matching
    on the addresses of available network interfaces and may be used to
    vary the effective client configuration based on network location.
  * ssh(1), sshd(8), ssh-keygen(1): infrastructure support for KRL
    extensions.  This defines wire formats for optional KRL extensions
    and implements parsing of the new submessages. No actual extensions
    are supported at this point.
  * sshd(8): AuthorizedPrincipalsCommand and AuthorizedKeysCommand now
    accept two additional %-expansion sequences: %D which expands to
    the routing domain of the connected session and %C which expands
    to the addresses and port numbers for the source and destination
    of the connection.
  * ssh-keygen(1): increase the default work factor (rounds) for the
    bcrypt KDF used to derive symmetric encryption keys for passphrase
    protected key files by 50%.
  = Bugfixes
  * ssh-agent(1): improve isolation between loaded PKCS#11 modules
    by running separate ssh-pkcs11-helpers for each loaded provider.
  * ssh(1): make -f (fork after authentication) work correctly with
    multiplexed connections, including ControlPersist. bz3589 bz3589
  * ssh(1): make ConnectTimeout apply to multiplexing sockets and not
    just to network connections.
  * ssh-agent(1), ssh(1): improve defences against invalid PKCS#11
    modules being loaded by checking that the requested module
    contains the required symbol before loading it.
  * sshd(8): fix AuthorizedPrincipalsCommand when AuthorizedKeysCommand
    appears before it in sshd_config. Since OpenSSH 8.7 the
    AuthorizedPrincipalsCommand directive was incorrectly ignored in
    this situation. bz3574
  * sshd(8), ssh(1), ssh-keygen(1): remove vestigal support for KRL
    signatures When the KRL format was originally defined, it included
    support for signing of KRL objects. However, the code to sign KRLs
    and verify KRL signatues was never completed in OpenSSH. This
    release removes the partially-implemented code to verify KRLs.
    All OpenSSH tools now ignore KRL_SECTION_SIGNATURE sections in
    KRL files.
  * All: fix a number of memory leaks and unreachable/harmless integer
    overflows.
  * ssh-agent(1), ssh(1): don't truncate strings logged from PKCS#11
    modules; GHPR406
  * sshd(8), ssh(1): better validate CASignatureAlgorithms in
    ssh_config and sshd_config. Previously this directive would accept
    certificate algorithm names, but these were unusable in practice as
    OpenSSH does not support CA chains. bz3577
  * ssh(1): make `ssh -Q CASignatureAlgorithms` only list signature
    algorithms that are valid for CA signing. Previous behaviour was
    to list all signing algorithms, including certificate algorithms.
  * ssh-keyscan(1): gracefully handle systems where rlimits or the
    maximum number of open files is larger than INT_MAX; bz3581
  * ssh-keygen(1): fix "no comment" not showing on when running
    `ssh-keygen -l` on multiple keys where one has a comment and other
    following keys do not. bz3580
  * scp(1), sftp(1): adjust ftruncate() logic to handle servers that
    reorder requests. Previously, if the server reordered requests then
    the resultant file would be erroneously truncated.
  * ssh(1): don't incorrectly disable hostname canonicalization when
    CanonicalizeHostname=yes and ProxyJump was expicitly set to
    "none". bz3567
  * scp(1): when copying local-&gt;remote, check that the source file
    exists before opening an SFTP connection to the server. Based on
    GHPR#370
- Dropped patches:
  * cb4ed12f.patch - implemented upstream.
- Rebased patches:
  * openssh-7.7p1-fips.patch
  * openssh-7.8p1-role-mls.patch
  * openssh-8.0p1-gssapi-keyex.patch
- Add patches from obs:
  * Mon Mar  4 09:57:06 UTC 2024 - Pedro Monreal &lt;pmonreal@suse.com&gt;
- Add crypto-policies support [bsc#1211301]
  * Add patches:
  - openssh-9.6p1-crypto-policies.patch
  - openssh-9.6p1-crypto-policies-man.patch</changelog>
  <changelog author="opensuse@arnavion.dev" date="1712836800">- Fix duplicate loading of dropins. (boo#1222467)</changelog>
  <changelog author="alarrosa@suse.com" date="1712923200">- Make openssh-server recommend the openssh-server-config-rootlogin
  package in SLE in order to keep the same behaviour of previous
  SPs where the PermitRootLogin default was set to yes
  (bsc#1221005).
- Fix crypto-policies requirement to be set by openssh-server, not
  the config-rootlogin subpackage.
- Add back %config(noreplace) tag for more config files that were
  already set like this in previous SPs.</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- openssh-8.0p1-gssapi-keyex.patch: Added missing struct initializer,
  added missing parameter (bsc#1222840)</changelog>
  <changelog author="alarrosa@suse.com" date="1715601600">- Only for SLE15, restore the patch file removed in
  Thu Feb 18 13:54:44 UTC 2021 to restore the previous behaviour
  from SP5 of having root password login allowed by default
  (fixes bsc#1223486, related to bsc#1173067):
  * openssh-7.7p1-allow_root_password_login.patch
- Since the default value for this config option is now set to
  permit root to use password logins in SLE15, the
  openssh-server-config-rootlogin subpackage isn't useful there so
  we now create an openssh-server-config-disallow-rootlogin
  subpackage that sets the configuration the other way around
  than openssh-server-config-rootlogin.</changelog>
  <changelog author="alarrosa@suse.com" date="1715688000">- Add a warning in %post of openssh-clients, openssh-server and
  openssh-server-config-disallow-rootlogin to warn the user if
  the /etc/ssh/(ssh_config.d|sshd_config.d) directories are not
  being used (bsc#1223486).</changelog>
  <changelog author="alarrosa@suse.com" date="1719835200">- Add patch to fix a race condition in a signal handler by removing
  the async-signal-unsafe code (CVE-2024-6387, bsc#1226642):
  * fix-CVE-2024-6387.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720008000">- Add obsoletes for openssh-server-config-rootlogin since that
  package existed for a brief period of time during SLE 15 SP6/
  Leap 15.6 development but even if it was removed from the
  repositories before GM, some users might have it in their
  systems from having tried a beta/RC release (boo#1227350).
- Add #include &lt;stdlib.h&gt; in some files added by the ldap patch to
  fix build with gcc14 (boo#1225904).
  * openssh-7.7p1-ldap.patch
- Remove the recommendation for openssh-server-config-rootlogin
  from openssh-server. Since the default for that config option
  was changed in SLE it's not needed anymore in SLE nor in TW
  (boo#1224392).</changelog>
  <changelog author="alarrosa@suse.com" date="1720180800">- Add patch from upstream to fix proxy multiplexing mode:
  * 0001-upstream-fix-proxy-multiplexing-mode_-broken-when-keystroke.patch
- Add patch from upstream to restore correctly sigprocmask
  * 0001-upstream-correctly-restore-sigprocmask-around-ppoll.patch
- Add patch from upstream to fix a logic error in
  ObscureKeystrokeTiming that rendered this feature ineffective,
  allowing a passive observer to detect which network packets
  contained real keystrokes (bsc#1227318, CVE-2024-39894):
  * 0001-upstream-when-sending-ObscureKeystrokeTiming-chaff-packets_.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720612800">- Remove empty line at the end of sshd-sle.pamd (bsc#1227456)</changelog>
  <changelog author="alarrosa@suse.com" date="1728648000">- Add a patch to fix a regression introduced in 9.6 that makes X11
  forwarding very slow. Submitted to upstream in
  https://bugzilla.mindrot.org/show_bug.cgi?id=3655#c4 . Fixes
  bsc#1229449:
  * fix-x11-regression-bsc1229449.patch
- Add a openssl11 bcond to the spec file for the SLE12 case
  instead of checking suse_version in different parts.
- Move conditional patches to a number &gt;= 1000.
- Several spec file fixes so the package builds and can be
  installed in SLE 15 SP5 and SLE 12 SP5
- Drop most of openssh-6.6p1-keycat.patch (actually, it was just
  commented out). The keycat binary isn't really installed nor
  supported, so we can drop it, except for the code that is used
  by other SELinux patches, which is what I kept from that patch
  (boo#1229072).
- Add patch submitted to upstream to fix RFC4256 implementation
  so that keyboard-interactive authentication method can send
  instructions and sshd shows them to users even before a prompt
  is requested. This fixes MFA push notifications (boo#1229010).
  * 0001-auth-pam-Immediately-report-instructions-to-clients-and-fix-handling-in-ssh-client.patch
- Fix a dbus connection leaked in the logind patch that was
  missing a sd_bus_unref call (found by Matthias Gerstner):
  * logind_set_tty.patch
- Add a patch that fixes a small memory leak when parsing the
  subsystem configuration option:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1728907200">- Use %{with ...} instead of 0%{with ...}</changelog>
  <changelog author="alarrosa@suse.com" date="1739448000">- Fix a MitM attack against OpenSSH's VerifyHostKeyDNS-enabled
  client and a DoS attack against OpenSSH's client and server
  (bsc#1237040, CVE-2025-26465, bsc#1237041, CVE-2025-26466):
  * fix-CVE-2025-26465-and-CVE-2025-26466.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1739880000">- Fix ssh client segfault with GSSAPIKeyExchange=yes in ssh_kex2
  due to gssapi proposal not being correctly initialized
  (bsc#1236826). The problem was introduced in the rebase of
  the patch for 9.6p1:
  * openssh-8.0p1-gssapi-keyex.patch
- Rebase patch and apply it:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="hpj@suse.com" date="1746532800">- Added openssh-cve-2025-32728.patch (bsc#1241012, CVE-2025-32728).
  This fixes an upstream logic error handling the DisableForwarding
  option.</changelog>
  <changelog author="alarrosa@suse.com" date="1747137600">- Enable --with-logind to call the SetTTY dbus method in systemd.
  This allows "wall" to print messages in ssh ttys (bsc#1239671)
- Small fixes to unref the dbus session when any error occurs:
  * logind_set_tty.patch</changelog>
</package>
<package pkgid="247c7734b7c54d827c106e3520f5efe8bed9badfdf46f1841f091be67d702357" name="openssh" arch="x86_64">
  <version epoch="0" ver="9.6p1" rel="150600.6.26.1"/>
  <changelog author="hpj@suse.com" date="1700827200">- Merge updates from openSUSE. Existing patches were rebased.
- Remove openssh-7.6p1-audit_race_condition.patch: Merged with
  audit patch.
- Remove openssh-CVE-2021-28041-agent-double-free.patch: Fixed
  upstream.
- Remove openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch:
  Fixed upstream.
- Remove openssh-CVE-2023-38408-PKCS11-execution.patch: Fixed
  upstream.
- Add cb4ed12f.patch from upstream, allowing newer versions of
  zlib to be used.
- Add logind_set_tty.patch by Thorsten Kukuk. This informs
  systemd-logind of the login TTY and prevents having to parse utmp,
  which is deprecated by glibc.</changelog>
  <changelog author="alarrosa@suse.com" date="1710244800">- Uncomment %sysuser_requires in openssh-server which was commented
  by mistake and is needed by the pre script installed with
  %sysusers_generate_pre (bsc#1220802).</changelog>
  <changelog author="alarrosa@suse.com" date="1712059200">- Use %config(noreplace) for sshd_config . In any case, it's
  recommended to drop a file in sshd_config.d instead of editing
  sshd_config (bsc#1221063)
- Add patches from obs package that were also in SP3/SP4/SP5:
  * Fri Nov  3 10:44:14 UTC 2023 - Johannes Segitz &lt;jsegitz@suse.com&gt;
  - Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712059201">- Rebase openssh-7.7p1-fips.patch (bsc#1221928)
  Remove OPENSSL_HAVE_EVPGCM-ifdef, which is no longer supported by upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1712577600">- Update to openssh 9.6p1:
  = Security
  * ssh(1), sshd(8): implement protocol extensions to thwart the
    so-called "Terrapin attack" discovered by Fabian Bäumer, Marcus
    Brinkmann and Jörg Schwenk. This attack allows a MITM to effect a
    limited break of the integrity of the early encrypted SSH transport
    protocol by sending extra messages prior to the commencement of
    encryption, and deleting an equal number of consecutive messages
    immediately after encryption starts. A peer SSH client/server
    would not be able to detect that messages were deleted
    (bsc#1217950, CVE-2023-48795).
  * ssh-agent(1): when adding PKCS#11-hosted private keys while
    specifying destination constraints, if the PKCS#11 token returned
    multiple keys then only the first key had the constraints applied.
    Use of regular private keys, FIDO tokens and unconstrained keys
    are unaffected.
  * ssh(1): if an invalid user or hostname that contained shell
    metacharacters was passed to ssh(1), and a ProxyCommand,
    LocalCommand directive or "match exec" predicate referenced the
    user or hostname via %u, %h or similar expansion token, then
    an attacker who could supply arbitrary user/hostnames to ssh(1)
    could potentially perform command injection depending on what
    quoting was present in the user-supplied ssh_config(5) directive
    (bsc#1218215, CVE-2023-51385).
  = Potentially incompatible changes
  * ssh(1), sshd(8): the RFC4254 connection/channels protocol provides
    a TCP-like window mechanism that limits the amount of data that
    can be sent without acceptance from the peer. In cases where this
    limit was exceeded by a non-conforming peer SSH implementation,
    ssh(1)/sshd(8) previously discarded the extra data. From OpenSSH
    9.6, ssh(1)/sshd(8) will now terminate the connection if a peer
    exceeds the window limit by more than a small grace factor. This
    change should have no effect of SSH implementations that follow
    the specification.
  = New features
  * ssh(1): add a %j token that expands to the configured ProxyJump
    hostname (or the empty string if this option is not being used)
    that can be used in a number of ssh_config(5) keywords. bz3610
  * ssh(1): add ChannelTimeout support to the client, mirroring the
    same option in the server and allowing ssh(1) to terminate
    quiescent channels.
  * ssh(1), sshd(8), ssh-add(1), ssh-keygen(1): add support for
    reading ED25519 private keys in PEM PKCS8 format. Previously
    only the OpenSSH private key format was supported.
  * ssh(1), sshd(8): introduce a protocol extension to allow
    renegotiation of acceptable signature algorithms for public key
    authentication after the server has learned the username being
    used for authentication. This allows varying sshd_config(5)
    PubkeyAcceptedAlgorithms in a "Match user" block.
  * ssh-add(1), ssh-agent(1): add an agent protocol extension to allow
    specifying certificates when loading PKCS#11 keys. This allows the
    use of certificates backed by PKCS#11 private keys in all OpenSSH
    tools that support ssh-agent(1). Previously only ssh(1) supported
    this use-case.
  = Bugfixes
  * ssh(1): when deciding whether to enable the keystroke timing
    obfuscation, enable it only if a channel with a TTY is active.
  * ssh(1): switch mainloop from poll(3) to ppoll(3) and mask signals
    before checking flags set in signal handler. Avoids potential
    race condition between signaling ssh to exit and polling. bz3531
  * ssh(1): when connecting to a destination with both the
    AddressFamily and CanonicalizeHostname directives in use,
    the AddressFamily directive could be ignored. bz5326
  * sftp(1): correct handling of the limits@openssh.com option when
    the server returned an unexpected message.
  * A number of fixes to the PuTTY and Dropbear regress/integration
    tests.
  * ssh(1): release GSS OIDs only at end of authentication, avoiding
    unnecessary init/cleanup cycles. bz2982
  * ssh_config(5): mention "none" is a valid argument to IdentityFile
    in the manual. bz3080
  * scp(1): improved debugging for paths from the server rejected for
    not matching the client's glob(3) pattern in old SCP/RCP protocol
    mode.
  * ssh-agent(1): refuse signing operations on destination-constrained
    keys if a previous session-bind operation has failed. This may
    prevent a fail-open situation in future if a user uses a mismatched
    ssh(1) client and ssh-agent(1) where the client supports a key type
    that the agent does not support.
- Update to openssh 9.5p1:
  = Potentially incompatible changes
  * ssh-keygen(1): generate Ed25519 keys by default. Ed25519 public keys
    are very convenient due to their small size. Ed25519 keys are
    specified in RFC 8709 and OpenSSH has supported them since version 6.5
    (January 2014).
  * sshd(8): the Subsystem directive now accurately preserves quoting of
    subsystem commands and arguments. This may change behaviour for exotic
    configurations, but the most common subsystem configuration
    (sftp-server) is unlikely to be affected.
  = New features
  * ssh(1): add keystroke timing obfuscation to the client. This attempts
    to hide inter-keystroke timings by sending interactive traffic at
    fixed intervals (default: every 20ms) when there is only a small
    amount of data being sent. It also sends fake "chaff" keystrokes for
    a random interval after the last real keystroke. These are
    controlled by a new ssh_config ObscureKeystrokeTiming keyword.
  * ssh(1), sshd(8): Introduce a transport-level ping facility. This adds
    a pair of SSH transport protocol messages SSH2_MSG_PING/PONG to
    implement a ping capability. These messages use numbers in the "local
    extensions" number space and are advertised using a "ping@openssh.com"
    ext-info message with a string version number of "0".
  * sshd(8): allow override of Subsystem directives in sshd Match blocks.
  = Bugfixes
  * scp(1): fix scp in SFTP mode recursive upload and download of
    directories that contain symlinks to other directories. In scp mode,
    the links would be followed, but in SFTP mode they were not. bz3611
  * ssh-keygen(1): handle cr+lf (instead of just cr) line endings in
    sshsig signature files.
  * ssh(1): interactive mode for ControlPersist sessions if they
    originally requested a tty.
  * sshd(8): make PerSourceMaxStartups first-match-wins
  * sshd(8): limit artificial login delay to a reasonable maximum (5s)
    and don't delay at all for the "none" authentication mechanism.
    bz3602
  * sshd(8): Log errors in kex_exchange_identification() with level
    verbose instead of error to reduce preauth log spam. All of those
    get logged with a more generic error message by sshpkt_fatal().
  * sshd(8): correct math for ClientAliveInterval that caused the probes
    to be sent less frequently than configured.
  * ssh(1): fix regression in OpenSSH 9.4 (mux.c r1.99) that caused
    multiplexed sessions to ignore SIGINT under some circumstances.
- Update to openssh 9.4p1:
  = Potentially incompatible changes
  * This release removes support for older versions of libcrypto.
    OpenSSH now requires LibreSSL &gt;= 3.1.0 or OpenSSL &gt;= 1.1.1.
    Note that these versions are already deprecated by their upstream
    vendors.
  * ssh-agent(1): PKCS#11 modules must now be specified by their full
    paths. Previously dlopen(3) could search for them in system
    library directories.
  = New features
  * ssh(1): allow forwarding Unix Domain sockets via ssh -W.
  * ssh(1): add support for configuration tags to ssh(1).
    This adds a ssh_config(5) "Tag" directive and corresponding
    "Match tag" predicate that may be used to select blocks of
    configuration similar to the pf.conf(5) keywords of the same
    name.
  * ssh(1): add a "match localnetwork" predicate. This allows matching
    on the addresses of available network interfaces and may be used to
    vary the effective client configuration based on network location.
  * ssh(1), sshd(8), ssh-keygen(1): infrastructure support for KRL
    extensions.  This defines wire formats for optional KRL extensions
    and implements parsing of the new submessages. No actual extensions
    are supported at this point.
  * sshd(8): AuthorizedPrincipalsCommand and AuthorizedKeysCommand now
    accept two additional %-expansion sequences: %D which expands to
    the routing domain of the connected session and %C which expands
    to the addresses and port numbers for the source and destination
    of the connection.
  * ssh-keygen(1): increase the default work factor (rounds) for the
    bcrypt KDF used to derive symmetric encryption keys for passphrase
    protected key files by 50%.
  = Bugfixes
  * ssh-agent(1): improve isolation between loaded PKCS#11 modules
    by running separate ssh-pkcs11-helpers for each loaded provider.
  * ssh(1): make -f (fork after authentication) work correctly with
    multiplexed connections, including ControlPersist. bz3589 bz3589
  * ssh(1): make ConnectTimeout apply to multiplexing sockets and not
    just to network connections.
  * ssh-agent(1), ssh(1): improve defences against invalid PKCS#11
    modules being loaded by checking that the requested module
    contains the required symbol before loading it.
  * sshd(8): fix AuthorizedPrincipalsCommand when AuthorizedKeysCommand
    appears before it in sshd_config. Since OpenSSH 8.7 the
    AuthorizedPrincipalsCommand directive was incorrectly ignored in
    this situation. bz3574
  * sshd(8), ssh(1), ssh-keygen(1): remove vestigal support for KRL
    signatures When the KRL format was originally defined, it included
    support for signing of KRL objects. However, the code to sign KRLs
    and verify KRL signatues was never completed in OpenSSH. This
    release removes the partially-implemented code to verify KRLs.
    All OpenSSH tools now ignore KRL_SECTION_SIGNATURE sections in
    KRL files.
  * All: fix a number of memory leaks and unreachable/harmless integer
    overflows.
  * ssh-agent(1), ssh(1): don't truncate strings logged from PKCS#11
    modules; GHPR406
  * sshd(8), ssh(1): better validate CASignatureAlgorithms in
    ssh_config and sshd_config. Previously this directive would accept
    certificate algorithm names, but these were unusable in practice as
    OpenSSH does not support CA chains. bz3577
  * ssh(1): make `ssh -Q CASignatureAlgorithms` only list signature
    algorithms that are valid for CA signing. Previous behaviour was
    to list all signing algorithms, including certificate algorithms.
  * ssh-keyscan(1): gracefully handle systems where rlimits or the
    maximum number of open files is larger than INT_MAX; bz3581
  * ssh-keygen(1): fix "no comment" not showing on when running
    `ssh-keygen -l` on multiple keys where one has a comment and other
    following keys do not. bz3580
  * scp(1), sftp(1): adjust ftruncate() logic to handle servers that
    reorder requests. Previously, if the server reordered requests then
    the resultant file would be erroneously truncated.
  * ssh(1): don't incorrectly disable hostname canonicalization when
    CanonicalizeHostname=yes and ProxyJump was expicitly set to
    "none". bz3567
  * scp(1): when copying local-&gt;remote, check that the source file
    exists before opening an SFTP connection to the server. Based on
    GHPR#370
- Dropped patches:
  * cb4ed12f.patch - implemented upstream.
- Rebased patches:
  * openssh-7.7p1-fips.patch
  * openssh-7.8p1-role-mls.patch
  * openssh-8.0p1-gssapi-keyex.patch
- Add patches from obs:
  * Mon Mar  4 09:57:06 UTC 2024 - Pedro Monreal &lt;pmonreal@suse.com&gt;
- Add crypto-policies support [bsc#1211301]
  * Add patches:
  - openssh-9.6p1-crypto-policies.patch
  - openssh-9.6p1-crypto-policies-man.patch</changelog>
  <changelog author="opensuse@arnavion.dev" date="1712836800">- Fix duplicate loading of dropins. (boo#1222467)</changelog>
  <changelog author="alarrosa@suse.com" date="1712923200">- Make openssh-server recommend the openssh-server-config-rootlogin
  package in SLE in order to keep the same behaviour of previous
  SPs where the PermitRootLogin default was set to yes
  (bsc#1221005).
- Fix crypto-policies requirement to be set by openssh-server, not
  the config-rootlogin subpackage.
- Add back %config(noreplace) tag for more config files that were
  already set like this in previous SPs.</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- openssh-8.0p1-gssapi-keyex.patch: Added missing struct initializer,
  added missing parameter (bsc#1222840)</changelog>
  <changelog author="alarrosa@suse.com" date="1715601600">- Only for SLE15, restore the patch file removed in
  Thu Feb 18 13:54:44 UTC 2021 to restore the previous behaviour
  from SP5 of having root password login allowed by default
  (fixes bsc#1223486, related to bsc#1173067):
  * openssh-7.7p1-allow_root_password_login.patch
- Since the default value for this config option is now set to
  permit root to use password logins in SLE15, the
  openssh-server-config-rootlogin subpackage isn't useful there so
  we now create an openssh-server-config-disallow-rootlogin
  subpackage that sets the configuration the other way around
  than openssh-server-config-rootlogin.</changelog>
  <changelog author="alarrosa@suse.com" date="1715688000">- Add a warning in %post of openssh-clients, openssh-server and
  openssh-server-config-disallow-rootlogin to warn the user if
  the /etc/ssh/(ssh_config.d|sshd_config.d) directories are not
  being used (bsc#1223486).</changelog>
  <changelog author="alarrosa@suse.com" date="1719835200">- Add patch to fix a race condition in a signal handler by removing
  the async-signal-unsafe code (CVE-2024-6387, bsc#1226642):
  * fix-CVE-2024-6387.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720008000">- Add obsoletes for openssh-server-config-rootlogin since that
  package existed for a brief period of time during SLE 15 SP6/
  Leap 15.6 development but even if it was removed from the
  repositories before GM, some users might have it in their
  systems from having tried a beta/RC release (boo#1227350).
- Add #include &lt;stdlib.h&gt; in some files added by the ldap patch to
  fix build with gcc14 (boo#1225904).
  * openssh-7.7p1-ldap.patch
- Remove the recommendation for openssh-server-config-rootlogin
  from openssh-server. Since the default for that config option
  was changed in SLE it's not needed anymore in SLE nor in TW
  (boo#1224392).</changelog>
  <changelog author="alarrosa@suse.com" date="1720180800">- Add patch from upstream to fix proxy multiplexing mode:
  * 0001-upstream-fix-proxy-multiplexing-mode_-broken-when-keystroke.patch
- Add patch from upstream to restore correctly sigprocmask
  * 0001-upstream-correctly-restore-sigprocmask-around-ppoll.patch
- Add patch from upstream to fix a logic error in
  ObscureKeystrokeTiming that rendered this feature ineffective,
  allowing a passive observer to detect which network packets
  contained real keystrokes (bsc#1227318, CVE-2024-39894):
  * 0001-upstream-when-sending-ObscureKeystrokeTiming-chaff-packets_.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720612800">- Remove empty line at the end of sshd-sle.pamd (bsc#1227456)</changelog>
  <changelog author="alarrosa@suse.com" date="1728648000">- Add a patch to fix a regression introduced in 9.6 that makes X11
  forwarding very slow. Submitted to upstream in
  https://bugzilla.mindrot.org/show_bug.cgi?id=3655#c4 . Fixes
  bsc#1229449:
  * fix-x11-regression-bsc1229449.patch
- Add a openssl11 bcond to the spec file for the SLE12 case
  instead of checking suse_version in different parts.
- Move conditional patches to a number &gt;= 1000.
- Several spec file fixes so the package builds and can be
  installed in SLE 15 SP5 and SLE 12 SP5
- Drop most of openssh-6.6p1-keycat.patch (actually, it was just
  commented out). The keycat binary isn't really installed nor
  supported, so we can drop it, except for the code that is used
  by other SELinux patches, which is what I kept from that patch
  (boo#1229072).
- Add patch submitted to upstream to fix RFC4256 implementation
  so that keyboard-interactive authentication method can send
  instructions and sshd shows them to users even before a prompt
  is requested. This fixes MFA push notifications (boo#1229010).
  * 0001-auth-pam-Immediately-report-instructions-to-clients-and-fix-handling-in-ssh-client.patch
- Fix a dbus connection leaked in the logind patch that was
  missing a sd_bus_unref call (found by Matthias Gerstner):
  * logind_set_tty.patch
- Add a patch that fixes a small memory leak when parsing the
  subsystem configuration option:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1728907200">- Use %{with ...} instead of 0%{with ...}</changelog>
  <changelog author="alarrosa@suse.com" date="1739448000">- Fix a MitM attack against OpenSSH's VerifyHostKeyDNS-enabled
  client and a DoS attack against OpenSSH's client and server
  (bsc#1237040, CVE-2025-26465, bsc#1237041, CVE-2025-26466):
  * fix-CVE-2025-26465-and-CVE-2025-26466.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1739880000">- Fix ssh client segfault with GSSAPIKeyExchange=yes in ssh_kex2
  due to gssapi proposal not being correctly initialized
  (bsc#1236826). The problem was introduced in the rebase of
  the patch for 9.6p1:
  * openssh-8.0p1-gssapi-keyex.patch
- Rebase patch and apply it:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="hpj@suse.com" date="1746532800">- Added openssh-cve-2025-32728.patch (bsc#1241012, CVE-2025-32728).
  This fixes an upstream logic error handling the DisableForwarding
  option.</changelog>
  <changelog author="alarrosa@suse.com" date="1747137600">- Enable --with-logind to call the SetTTY dbus method in systemd.
  This allows "wall" to print messages in ssh ttys (bsc#1239671)
- Small fixes to unref the dbus session when any error occurs:
  * logind_set_tty.patch</changelog>
</package>
<package pkgid="3047f8b2f85e0d0ab50ebbdbc45ed00ebd2cca1ea3795446fe25ca0532f66e46" name="openssh" arch="src">
  <version epoch="0" ver="9.6p1" rel="150600.6.29.2"/>
  <changelog author="alarrosa@suse.com" date="1710244800">- Uncomment %sysuser_requires in openssh-server which was commented
  by mistake and is needed by the pre script installed with
  %sysusers_generate_pre (bsc#1220802).</changelog>
  <changelog author="alarrosa@suse.com" date="1712059200">- Use %config(noreplace) for sshd_config . In any case, it's
  recommended to drop a file in sshd_config.d instead of editing
  sshd_config (bsc#1221063)
- Add patches from obs package that were also in SP3/SP4/SP5:
  * Fri Nov  3 10:44:14 UTC 2023 - Johannes Segitz &lt;jsegitz@suse.com&gt;
  - Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712059201">- Rebase openssh-7.7p1-fips.patch (bsc#1221928)
  Remove OPENSSL_HAVE_EVPGCM-ifdef, which is no longer supported by upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1712577600">- Update to openssh 9.6p1:
  = Security
  * ssh(1), sshd(8): implement protocol extensions to thwart the
    so-called "Terrapin attack" discovered by Fabian Bäumer, Marcus
    Brinkmann and Jörg Schwenk. This attack allows a MITM to effect a
    limited break of the integrity of the early encrypted SSH transport
    protocol by sending extra messages prior to the commencement of
    encryption, and deleting an equal number of consecutive messages
    immediately after encryption starts. A peer SSH client/server
    would not be able to detect that messages were deleted
    (bsc#1217950, CVE-2023-48795).
  * ssh-agent(1): when adding PKCS#11-hosted private keys while
    specifying destination constraints, if the PKCS#11 token returned
    multiple keys then only the first key had the constraints applied.
    Use of regular private keys, FIDO tokens and unconstrained keys
    are unaffected.
  * ssh(1): if an invalid user or hostname that contained shell
    metacharacters was passed to ssh(1), and a ProxyCommand,
    LocalCommand directive or "match exec" predicate referenced the
    user or hostname via %u, %h or similar expansion token, then
    an attacker who could supply arbitrary user/hostnames to ssh(1)
    could potentially perform command injection depending on what
    quoting was present in the user-supplied ssh_config(5) directive
    (bsc#1218215, CVE-2023-51385).
  = Potentially incompatible changes
  * ssh(1), sshd(8): the RFC4254 connection/channels protocol provides
    a TCP-like window mechanism that limits the amount of data that
    can be sent without acceptance from the peer. In cases where this
    limit was exceeded by a non-conforming peer SSH implementation,
    ssh(1)/sshd(8) previously discarded the extra data. From OpenSSH
    9.6, ssh(1)/sshd(8) will now terminate the connection if a peer
    exceeds the window limit by more than a small grace factor. This
    change should have no effect of SSH implementations that follow
    the specification.
  = New features
  * ssh(1): add a %j token that expands to the configured ProxyJump
    hostname (or the empty string if this option is not being used)
    that can be used in a number of ssh_config(5) keywords. bz3610
  * ssh(1): add ChannelTimeout support to the client, mirroring the
    same option in the server and allowing ssh(1) to terminate
    quiescent channels.
  * ssh(1), sshd(8), ssh-add(1), ssh-keygen(1): add support for
    reading ED25519 private keys in PEM PKCS8 format. Previously
    only the OpenSSH private key format was supported.
  * ssh(1), sshd(8): introduce a protocol extension to allow
    renegotiation of acceptable signature algorithms for public key
    authentication after the server has learned the username being
    used for authentication. This allows varying sshd_config(5)
    PubkeyAcceptedAlgorithms in a "Match user" block.
  * ssh-add(1), ssh-agent(1): add an agent protocol extension to allow
    specifying certificates when loading PKCS#11 keys. This allows the
    use of certificates backed by PKCS#11 private keys in all OpenSSH
    tools that support ssh-agent(1). Previously only ssh(1) supported
    this use-case.
  = Bugfixes
  * ssh(1): when deciding whether to enable the keystroke timing
    obfuscation, enable it only if a channel with a TTY is active.
  * ssh(1): switch mainloop from poll(3) to ppoll(3) and mask signals
    before checking flags set in signal handler. Avoids potential
    race condition between signaling ssh to exit and polling. bz3531
  * ssh(1): when connecting to a destination with both the
    AddressFamily and CanonicalizeHostname directives in use,
    the AddressFamily directive could be ignored. bz5326
  * sftp(1): correct handling of the limits@openssh.com option when
    the server returned an unexpected message.
  * A number of fixes to the PuTTY and Dropbear regress/integration
    tests.
  * ssh(1): release GSS OIDs only at end of authentication, avoiding
    unnecessary init/cleanup cycles. bz2982
  * ssh_config(5): mention "none" is a valid argument to IdentityFile
    in the manual. bz3080
  * scp(1): improved debugging for paths from the server rejected for
    not matching the client's glob(3) pattern in old SCP/RCP protocol
    mode.
  * ssh-agent(1): refuse signing operations on destination-constrained
    keys if a previous session-bind operation has failed. This may
    prevent a fail-open situation in future if a user uses a mismatched
    ssh(1) client and ssh-agent(1) where the client supports a key type
    that the agent does not support.
- Update to openssh 9.5p1:
  = Potentially incompatible changes
  * ssh-keygen(1): generate Ed25519 keys by default. Ed25519 public keys
    are very convenient due to their small size. Ed25519 keys are
    specified in RFC 8709 and OpenSSH has supported them since version 6.5
    (January 2014).
  * sshd(8): the Subsystem directive now accurately preserves quoting of
    subsystem commands and arguments. This may change behaviour for exotic
    configurations, but the most common subsystem configuration
    (sftp-server) is unlikely to be affected.
  = New features
  * ssh(1): add keystroke timing obfuscation to the client. This attempts
    to hide inter-keystroke timings by sending interactive traffic at
    fixed intervals (default: every 20ms) when there is only a small
    amount of data being sent. It also sends fake "chaff" keystrokes for
    a random interval after the last real keystroke. These are
    controlled by a new ssh_config ObscureKeystrokeTiming keyword.
  * ssh(1), sshd(8): Introduce a transport-level ping facility. This adds
    a pair of SSH transport protocol messages SSH2_MSG_PING/PONG to
    implement a ping capability. These messages use numbers in the "local
    extensions" number space and are advertised using a "ping@openssh.com"
    ext-info message with a string version number of "0".
  * sshd(8): allow override of Subsystem directives in sshd Match blocks.
  = Bugfixes
  * scp(1): fix scp in SFTP mode recursive upload and download of
    directories that contain symlinks to other directories. In scp mode,
    the links would be followed, but in SFTP mode they were not. bz3611
  * ssh-keygen(1): handle cr+lf (instead of just cr) line endings in
    sshsig signature files.
  * ssh(1): interactive mode for ControlPersist sessions if they
    originally requested a tty.
  * sshd(8): make PerSourceMaxStartups first-match-wins
  * sshd(8): limit artificial login delay to a reasonable maximum (5s)
    and don't delay at all for the "none" authentication mechanism.
    bz3602
  * sshd(8): Log errors in kex_exchange_identification() with level
    verbose instead of error to reduce preauth log spam. All of those
    get logged with a more generic error message by sshpkt_fatal().
  * sshd(8): correct math for ClientAliveInterval that caused the probes
    to be sent less frequently than configured.
  * ssh(1): fix regression in OpenSSH 9.4 (mux.c r1.99) that caused
    multiplexed sessions to ignore SIGINT under some circumstances.
- Update to openssh 9.4p1:
  = Potentially incompatible changes
  * This release removes support for older versions of libcrypto.
    OpenSSH now requires LibreSSL &gt;= 3.1.0 or OpenSSL &gt;= 1.1.1.
    Note that these versions are already deprecated by their upstream
    vendors.
  * ssh-agent(1): PKCS#11 modules must now be specified by their full
    paths. Previously dlopen(3) could search for them in system
    library directories.
  = New features
  * ssh(1): allow forwarding Unix Domain sockets via ssh -W.
  * ssh(1): add support for configuration tags to ssh(1).
    This adds a ssh_config(5) "Tag" directive and corresponding
    "Match tag" predicate that may be used to select blocks of
    configuration similar to the pf.conf(5) keywords of the same
    name.
  * ssh(1): add a "match localnetwork" predicate. This allows matching
    on the addresses of available network interfaces and may be used to
    vary the effective client configuration based on network location.
  * ssh(1), sshd(8), ssh-keygen(1): infrastructure support for KRL
    extensions.  This defines wire formats for optional KRL extensions
    and implements parsing of the new submessages. No actual extensions
    are supported at this point.
  * sshd(8): AuthorizedPrincipalsCommand and AuthorizedKeysCommand now
    accept two additional %-expansion sequences: %D which expands to
    the routing domain of the connected session and %C which expands
    to the addresses and port numbers for the source and destination
    of the connection.
  * ssh-keygen(1): increase the default work factor (rounds) for the
    bcrypt KDF used to derive symmetric encryption keys for passphrase
    protected key files by 50%.
  = Bugfixes
  * ssh-agent(1): improve isolation between loaded PKCS#11 modules
    by running separate ssh-pkcs11-helpers for each loaded provider.
  * ssh(1): make -f (fork after authentication) work correctly with
    multiplexed connections, including ControlPersist. bz3589 bz3589
  * ssh(1): make ConnectTimeout apply to multiplexing sockets and not
    just to network connections.
  * ssh-agent(1), ssh(1): improve defences against invalid PKCS#11
    modules being loaded by checking that the requested module
    contains the required symbol before loading it.
  * sshd(8): fix AuthorizedPrincipalsCommand when AuthorizedKeysCommand
    appears before it in sshd_config. Since OpenSSH 8.7 the
    AuthorizedPrincipalsCommand directive was incorrectly ignored in
    this situation. bz3574
  * sshd(8), ssh(1), ssh-keygen(1): remove vestigal support for KRL
    signatures When the KRL format was originally defined, it included
    support for signing of KRL objects. However, the code to sign KRLs
    and verify KRL signatues was never completed in OpenSSH. This
    release removes the partially-implemented code to verify KRLs.
    All OpenSSH tools now ignore KRL_SECTION_SIGNATURE sections in
    KRL files.
  * All: fix a number of memory leaks and unreachable/harmless integer
    overflows.
  * ssh-agent(1), ssh(1): don't truncate strings logged from PKCS#11
    modules; GHPR406
  * sshd(8), ssh(1): better validate CASignatureAlgorithms in
    ssh_config and sshd_config. Previously this directive would accept
    certificate algorithm names, but these were unusable in practice as
    OpenSSH does not support CA chains. bz3577
  * ssh(1): make `ssh -Q CASignatureAlgorithms` only list signature
    algorithms that are valid for CA signing. Previous behaviour was
    to list all signing algorithms, including certificate algorithms.
  * ssh-keyscan(1): gracefully handle systems where rlimits or the
    maximum number of open files is larger than INT_MAX; bz3581
  * ssh-keygen(1): fix "no comment" not showing on when running
    `ssh-keygen -l` on multiple keys where one has a comment and other
    following keys do not. bz3580
  * scp(1), sftp(1): adjust ftruncate() logic to handle servers that
    reorder requests. Previously, if the server reordered requests then
    the resultant file would be erroneously truncated.
  * ssh(1): don't incorrectly disable hostname canonicalization when
    CanonicalizeHostname=yes and ProxyJump was expicitly set to
    "none". bz3567
  * scp(1): when copying local-&gt;remote, check that the source file
    exists before opening an SFTP connection to the server. Based on
    GHPR#370
- Dropped patches:
  * cb4ed12f.patch - implemented upstream.
- Rebased patches:
  * openssh-7.7p1-fips.patch
  * openssh-7.8p1-role-mls.patch
  * openssh-8.0p1-gssapi-keyex.patch
- Add patches from obs:
  * Mon Mar  4 09:57:06 UTC 2024 - Pedro Monreal &lt;pmonreal@suse.com&gt;
- Add crypto-policies support [bsc#1211301]
  * Add patches:
  - openssh-9.6p1-crypto-policies.patch
  - openssh-9.6p1-crypto-policies-man.patch</changelog>
  <changelog author="opensuse@arnavion.dev" date="1712836800">- Fix duplicate loading of dropins. (boo#1222467)</changelog>
  <changelog author="alarrosa@suse.com" date="1712923200">- Make openssh-server recommend the openssh-server-config-rootlogin
  package in SLE in order to keep the same behaviour of previous
  SPs where the PermitRootLogin default was set to yes
  (bsc#1221005).
- Fix crypto-policies requirement to be set by openssh-server, not
  the config-rootlogin subpackage.
- Add back %config(noreplace) tag for more config files that were
  already set like this in previous SPs.</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- openssh-8.0p1-gssapi-keyex.patch: Added missing struct initializer,
  added missing parameter (bsc#1222840)</changelog>
  <changelog author="alarrosa@suse.com" date="1715601600">- Only for SLE15, restore the patch file removed in
  Thu Feb 18 13:54:44 UTC 2021 to restore the previous behaviour
  from SP5 of having root password login allowed by default
  (fixes bsc#1223486, related to bsc#1173067):
  * openssh-7.7p1-allow_root_password_login.patch
- Since the default value for this config option is now set to
  permit root to use password logins in SLE15, the
  openssh-server-config-rootlogin subpackage isn't useful there so
  we now create an openssh-server-config-disallow-rootlogin
  subpackage that sets the configuration the other way around
  than openssh-server-config-rootlogin.</changelog>
  <changelog author="alarrosa@suse.com" date="1715688000">- Add a warning in %post of openssh-clients, openssh-server and
  openssh-server-config-disallow-rootlogin to warn the user if
  the /etc/ssh/(ssh_config.d|sshd_config.d) directories are not
  being used (bsc#1223486).</changelog>
  <changelog author="alarrosa@suse.com" date="1719835200">- Add patch to fix a race condition in a signal handler by removing
  the async-signal-unsafe code (CVE-2024-6387, bsc#1226642):
  * fix-CVE-2024-6387.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720008000">- Add obsoletes for openssh-server-config-rootlogin since that
  package existed for a brief period of time during SLE 15 SP6/
  Leap 15.6 development but even if it was removed from the
  repositories before GM, some users might have it in their
  systems from having tried a beta/RC release (boo#1227350).
- Add #include &lt;stdlib.h&gt; in some files added by the ldap patch to
  fix build with gcc14 (boo#1225904).
  * openssh-7.7p1-ldap.patch
- Remove the recommendation for openssh-server-config-rootlogin
  from openssh-server. Since the default for that config option
  was changed in SLE it's not needed anymore in SLE nor in TW
  (boo#1224392).</changelog>
  <changelog author="alarrosa@suse.com" date="1720180800">- Add patch from upstream to fix proxy multiplexing mode:
  * 0001-upstream-fix-proxy-multiplexing-mode_-broken-when-keystroke.patch
- Add patch from upstream to restore correctly sigprocmask
  * 0001-upstream-correctly-restore-sigprocmask-around-ppoll.patch
- Add patch from upstream to fix a logic error in
  ObscureKeystrokeTiming that rendered this feature ineffective,
  allowing a passive observer to detect which network packets
  contained real keystrokes (bsc#1227318, CVE-2024-39894):
  * 0001-upstream-when-sending-ObscureKeystrokeTiming-chaff-packets_.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720612800">- Remove empty line at the end of sshd-sle.pamd (bsc#1227456)</changelog>
  <changelog author="alarrosa@suse.com" date="1728648000">- Add a patch to fix a regression introduced in 9.6 that makes X11
  forwarding very slow. Submitted to upstream in
  https://bugzilla.mindrot.org/show_bug.cgi?id=3655#c4 . Fixes
  bsc#1229449:
  * fix-x11-regression-bsc1229449.patch
- Add a openssl11 bcond to the spec file for the SLE12 case
  instead of checking suse_version in different parts.
- Move conditional patches to a number &gt;= 1000.
- Several spec file fixes so the package builds and can be
  installed in SLE 15 SP5 and SLE 12 SP5
- Drop most of openssh-6.6p1-keycat.patch (actually, it was just
  commented out). The keycat binary isn't really installed nor
  supported, so we can drop it, except for the code that is used
  by other SELinux patches, which is what I kept from that patch
  (boo#1229072).
- Add patch submitted to upstream to fix RFC4256 implementation
  so that keyboard-interactive authentication method can send
  instructions and sshd shows them to users even before a prompt
  is requested. This fixes MFA push notifications (boo#1229010).
  * 0001-auth-pam-Immediately-report-instructions-to-clients-and-fix-handling-in-ssh-client.patch
- Fix a dbus connection leaked in the logind patch that was
  missing a sd_bus_unref call (found by Matthias Gerstner):
  * logind_set_tty.patch
- Add a patch that fixes a small memory leak when parsing the
  subsystem configuration option:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1728907200">- Use %{with ...} instead of 0%{with ...}</changelog>
  <changelog author="alarrosa@suse.com" date="1739448000">- Fix a MitM attack against OpenSSH's VerifyHostKeyDNS-enabled
  client and a DoS attack against OpenSSH's client and server
  (bsc#1237040, CVE-2025-26465, bsc#1237041, CVE-2025-26466):
  * fix-CVE-2025-26465-and-CVE-2025-26466.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1739880000">- Fix ssh client segfault with GSSAPIKeyExchange=yes in ssh_kex2
  due to gssapi proposal not being correctly initialized
  (bsc#1236826). The problem was introduced in the rebase of
  the patch for 9.6p1:
  * openssh-8.0p1-gssapi-keyex.patch
- Rebase patch and apply it:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="hpj@suse.com" date="1746532800">- Added openssh-cve-2025-32728.patch (bsc#1241012, CVE-2025-32728).
  This fixes an upstream logic error handling the DisableForwarding
  option.</changelog>
  <changelog author="alarrosa@suse.com" date="1747137600">- Enable --with-logind to call the SetTTY dbus method in systemd.
  This allows "wall" to print messages in ssh ttys (bsc#1239671)
- Small fixes to unref the dbus session when any error occurs:
  * logind_set_tty.patch</changelog>
  <changelog author="hpj@suse.com" date="1748952000">- Add openssh-scp-umask-preserve-permissions.patch (bsc#1241667).</changelog>
</package>
<package pkgid="acae507f2186c3e7d6f4c5c3d1c090efd1359890e5bd900a902bb52dc4389aaf" name="openssh" arch="x86_64">
  <version epoch="0" ver="9.6p1" rel="150600.6.29.2"/>
  <changelog author="alarrosa@suse.com" date="1710244800">- Uncomment %sysuser_requires in openssh-server which was commented
  by mistake and is needed by the pre script installed with
  %sysusers_generate_pre (bsc#1220802).</changelog>
  <changelog author="alarrosa@suse.com" date="1712059200">- Use %config(noreplace) for sshd_config . In any case, it's
  recommended to drop a file in sshd_config.d instead of editing
  sshd_config (bsc#1221063)
- Add patches from obs package that were also in SP3/SP4/SP5:
  * Fri Nov  3 10:44:14 UTC 2023 - Johannes Segitz &lt;jsegitz@suse.com&gt;
  - Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712059201">- Rebase openssh-7.7p1-fips.patch (bsc#1221928)
  Remove OPENSSL_HAVE_EVPGCM-ifdef, which is no longer supported by upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1712577600">- Update to openssh 9.6p1:
  = Security
  * ssh(1), sshd(8): implement protocol extensions to thwart the
    so-called "Terrapin attack" discovered by Fabian Bäumer, Marcus
    Brinkmann and Jörg Schwenk. This attack allows a MITM to effect a
    limited break of the integrity of the early encrypted SSH transport
    protocol by sending extra messages prior to the commencement of
    encryption, and deleting an equal number of consecutive messages
    immediately after encryption starts. A peer SSH client/server
    would not be able to detect that messages were deleted
    (bsc#1217950, CVE-2023-48795).
  * ssh-agent(1): when adding PKCS#11-hosted private keys while
    specifying destination constraints, if the PKCS#11 token returned
    multiple keys then only the first key had the constraints applied.
    Use of regular private keys, FIDO tokens and unconstrained keys
    are unaffected.
  * ssh(1): if an invalid user or hostname that contained shell
    metacharacters was passed to ssh(1), and a ProxyCommand,
    LocalCommand directive or "match exec" predicate referenced the
    user or hostname via %u, %h or similar expansion token, then
    an attacker who could supply arbitrary user/hostnames to ssh(1)
    could potentially perform command injection depending on what
    quoting was present in the user-supplied ssh_config(5) directive
    (bsc#1218215, CVE-2023-51385).
  = Potentially incompatible changes
  * ssh(1), sshd(8): the RFC4254 connection/channels protocol provides
    a TCP-like window mechanism that limits the amount of data that
    can be sent without acceptance from the peer. In cases where this
    limit was exceeded by a non-conforming peer SSH implementation,
    ssh(1)/sshd(8) previously discarded the extra data. From OpenSSH
    9.6, ssh(1)/sshd(8) will now terminate the connection if a peer
    exceeds the window limit by more than a small grace factor. This
    change should have no effect of SSH implementations that follow
    the specification.
  = New features
  * ssh(1): add a %j token that expands to the configured ProxyJump
    hostname (or the empty string if this option is not being used)
    that can be used in a number of ssh_config(5) keywords. bz3610
  * ssh(1): add ChannelTimeout support to the client, mirroring the
    same option in the server and allowing ssh(1) to terminate
    quiescent channels.
  * ssh(1), sshd(8), ssh-add(1), ssh-keygen(1): add support for
    reading ED25519 private keys in PEM PKCS8 format. Previously
    only the OpenSSH private key format was supported.
  * ssh(1), sshd(8): introduce a protocol extension to allow
    renegotiation of acceptable signature algorithms for public key
    authentication after the server has learned the username being
    used for authentication. This allows varying sshd_config(5)
    PubkeyAcceptedAlgorithms in a "Match user" block.
  * ssh-add(1), ssh-agent(1): add an agent protocol extension to allow
    specifying certificates when loading PKCS#11 keys. This allows the
    use of certificates backed by PKCS#11 private keys in all OpenSSH
    tools that support ssh-agent(1). Previously only ssh(1) supported
    this use-case.
  = Bugfixes
  * ssh(1): when deciding whether to enable the keystroke timing
    obfuscation, enable it only if a channel with a TTY is active.
  * ssh(1): switch mainloop from poll(3) to ppoll(3) and mask signals
    before checking flags set in signal handler. Avoids potential
    race condition between signaling ssh to exit and polling. bz3531
  * ssh(1): when connecting to a destination with both the
    AddressFamily and CanonicalizeHostname directives in use,
    the AddressFamily directive could be ignored. bz5326
  * sftp(1): correct handling of the limits@openssh.com option when
    the server returned an unexpected message.
  * A number of fixes to the PuTTY and Dropbear regress/integration
    tests.
  * ssh(1): release GSS OIDs only at end of authentication, avoiding
    unnecessary init/cleanup cycles. bz2982
  * ssh_config(5): mention "none" is a valid argument to IdentityFile
    in the manual. bz3080
  * scp(1): improved debugging for paths from the server rejected for
    not matching the client's glob(3) pattern in old SCP/RCP protocol
    mode.
  * ssh-agent(1): refuse signing operations on destination-constrained
    keys if a previous session-bind operation has failed. This may
    prevent a fail-open situation in future if a user uses a mismatched
    ssh(1) client and ssh-agent(1) where the client supports a key type
    that the agent does not support.
- Update to openssh 9.5p1:
  = Potentially incompatible changes
  * ssh-keygen(1): generate Ed25519 keys by default. Ed25519 public keys
    are very convenient due to their small size. Ed25519 keys are
    specified in RFC 8709 and OpenSSH has supported them since version 6.5
    (January 2014).
  * sshd(8): the Subsystem directive now accurately preserves quoting of
    subsystem commands and arguments. This may change behaviour for exotic
    configurations, but the most common subsystem configuration
    (sftp-server) is unlikely to be affected.
  = New features
  * ssh(1): add keystroke timing obfuscation to the client. This attempts
    to hide inter-keystroke timings by sending interactive traffic at
    fixed intervals (default: every 20ms) when there is only a small
    amount of data being sent. It also sends fake "chaff" keystrokes for
    a random interval after the last real keystroke. These are
    controlled by a new ssh_config ObscureKeystrokeTiming keyword.
  * ssh(1), sshd(8): Introduce a transport-level ping facility. This adds
    a pair of SSH transport protocol messages SSH2_MSG_PING/PONG to
    implement a ping capability. These messages use numbers in the "local
    extensions" number space and are advertised using a "ping@openssh.com"
    ext-info message with a string version number of "0".
  * sshd(8): allow override of Subsystem directives in sshd Match blocks.
  = Bugfixes
  * scp(1): fix scp in SFTP mode recursive upload and download of
    directories that contain symlinks to other directories. In scp mode,
    the links would be followed, but in SFTP mode they were not. bz3611
  * ssh-keygen(1): handle cr+lf (instead of just cr) line endings in
    sshsig signature files.
  * ssh(1): interactive mode for ControlPersist sessions if they
    originally requested a tty.
  * sshd(8): make PerSourceMaxStartups first-match-wins
  * sshd(8): limit artificial login delay to a reasonable maximum (5s)
    and don't delay at all for the "none" authentication mechanism.
    bz3602
  * sshd(8): Log errors in kex_exchange_identification() with level
    verbose instead of error to reduce preauth log spam. All of those
    get logged with a more generic error message by sshpkt_fatal().
  * sshd(8): correct math for ClientAliveInterval that caused the probes
    to be sent less frequently than configured.
  * ssh(1): fix regression in OpenSSH 9.4 (mux.c r1.99) that caused
    multiplexed sessions to ignore SIGINT under some circumstances.
- Update to openssh 9.4p1:
  = Potentially incompatible changes
  * This release removes support for older versions of libcrypto.
    OpenSSH now requires LibreSSL &gt;= 3.1.0 or OpenSSL &gt;= 1.1.1.
    Note that these versions are already deprecated by their upstream
    vendors.
  * ssh-agent(1): PKCS#11 modules must now be specified by their full
    paths. Previously dlopen(3) could search for them in system
    library directories.
  = New features
  * ssh(1): allow forwarding Unix Domain sockets via ssh -W.
  * ssh(1): add support for configuration tags to ssh(1).
    This adds a ssh_config(5) "Tag" directive and corresponding
    "Match tag" predicate that may be used to select blocks of
    configuration similar to the pf.conf(5) keywords of the same
    name.
  * ssh(1): add a "match localnetwork" predicate. This allows matching
    on the addresses of available network interfaces and may be used to
    vary the effective client configuration based on network location.
  * ssh(1), sshd(8), ssh-keygen(1): infrastructure support for KRL
    extensions.  This defines wire formats for optional KRL extensions
    and implements parsing of the new submessages. No actual extensions
    are supported at this point.
  * sshd(8): AuthorizedPrincipalsCommand and AuthorizedKeysCommand now
    accept two additional %-expansion sequences: %D which expands to
    the routing domain of the connected session and %C which expands
    to the addresses and port numbers for the source and destination
    of the connection.
  * ssh-keygen(1): increase the default work factor (rounds) for the
    bcrypt KDF used to derive symmetric encryption keys for passphrase
    protected key files by 50%.
  = Bugfixes
  * ssh-agent(1): improve isolation between loaded PKCS#11 modules
    by running separate ssh-pkcs11-helpers for each loaded provider.
  * ssh(1): make -f (fork after authentication) work correctly with
    multiplexed connections, including ControlPersist. bz3589 bz3589
  * ssh(1): make ConnectTimeout apply to multiplexing sockets and not
    just to network connections.
  * ssh-agent(1), ssh(1): improve defences against invalid PKCS#11
    modules being loaded by checking that the requested module
    contains the required symbol before loading it.
  * sshd(8): fix AuthorizedPrincipalsCommand when AuthorizedKeysCommand
    appears before it in sshd_config. Since OpenSSH 8.7 the
    AuthorizedPrincipalsCommand directive was incorrectly ignored in
    this situation. bz3574
  * sshd(8), ssh(1), ssh-keygen(1): remove vestigal support for KRL
    signatures When the KRL format was originally defined, it included
    support for signing of KRL objects. However, the code to sign KRLs
    and verify KRL signatues was never completed in OpenSSH. This
    release removes the partially-implemented code to verify KRLs.
    All OpenSSH tools now ignore KRL_SECTION_SIGNATURE sections in
    KRL files.
  * All: fix a number of memory leaks and unreachable/harmless integer
    overflows.
  * ssh-agent(1), ssh(1): don't truncate strings logged from PKCS#11
    modules; GHPR406
  * sshd(8), ssh(1): better validate CASignatureAlgorithms in
    ssh_config and sshd_config. Previously this directive would accept
    certificate algorithm names, but these were unusable in practice as
    OpenSSH does not support CA chains. bz3577
  * ssh(1): make `ssh -Q CASignatureAlgorithms` only list signature
    algorithms that are valid for CA signing. Previous behaviour was
    to list all signing algorithms, including certificate algorithms.
  * ssh-keyscan(1): gracefully handle systems where rlimits or the
    maximum number of open files is larger than INT_MAX; bz3581
  * ssh-keygen(1): fix "no comment" not showing on when running
    `ssh-keygen -l` on multiple keys where one has a comment and other
    following keys do not. bz3580
  * scp(1), sftp(1): adjust ftruncate() logic to handle servers that
    reorder requests. Previously, if the server reordered requests then
    the resultant file would be erroneously truncated.
  * ssh(1): don't incorrectly disable hostname canonicalization when
    CanonicalizeHostname=yes and ProxyJump was expicitly set to
    "none". bz3567
  * scp(1): when copying local-&gt;remote, check that the source file
    exists before opening an SFTP connection to the server. Based on
    GHPR#370
- Dropped patches:
  * cb4ed12f.patch - implemented upstream.
- Rebased patches:
  * openssh-7.7p1-fips.patch
  * openssh-7.8p1-role-mls.patch
  * openssh-8.0p1-gssapi-keyex.patch
- Add patches from obs:
  * Mon Mar  4 09:57:06 UTC 2024 - Pedro Monreal &lt;pmonreal@suse.com&gt;
- Add crypto-policies support [bsc#1211301]
  * Add patches:
  - openssh-9.6p1-crypto-policies.patch
  - openssh-9.6p1-crypto-policies-man.patch</changelog>
  <changelog author="opensuse@arnavion.dev" date="1712836800">- Fix duplicate loading of dropins. (boo#1222467)</changelog>
  <changelog author="alarrosa@suse.com" date="1712923200">- Make openssh-server recommend the openssh-server-config-rootlogin
  package in SLE in order to keep the same behaviour of previous
  SPs where the PermitRootLogin default was set to yes
  (bsc#1221005).
- Fix crypto-policies requirement to be set by openssh-server, not
  the config-rootlogin subpackage.
- Add back %config(noreplace) tag for more config files that were
  already set like this in previous SPs.</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- openssh-8.0p1-gssapi-keyex.patch: Added missing struct initializer,
  added missing parameter (bsc#1222840)</changelog>
  <changelog author="alarrosa@suse.com" date="1715601600">- Only for SLE15, restore the patch file removed in
  Thu Feb 18 13:54:44 UTC 2021 to restore the previous behaviour
  from SP5 of having root password login allowed by default
  (fixes bsc#1223486, related to bsc#1173067):
  * openssh-7.7p1-allow_root_password_login.patch
- Since the default value for this config option is now set to
  permit root to use password logins in SLE15, the
  openssh-server-config-rootlogin subpackage isn't useful there so
  we now create an openssh-server-config-disallow-rootlogin
  subpackage that sets the configuration the other way around
  than openssh-server-config-rootlogin.</changelog>
  <changelog author="alarrosa@suse.com" date="1715688000">- Add a warning in %post of openssh-clients, openssh-server and
  openssh-server-config-disallow-rootlogin to warn the user if
  the /etc/ssh/(ssh_config.d|sshd_config.d) directories are not
  being used (bsc#1223486).</changelog>
  <changelog author="alarrosa@suse.com" date="1719835200">- Add patch to fix a race condition in a signal handler by removing
  the async-signal-unsafe code (CVE-2024-6387, bsc#1226642):
  * fix-CVE-2024-6387.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720008000">- Add obsoletes for openssh-server-config-rootlogin since that
  package existed for a brief period of time during SLE 15 SP6/
  Leap 15.6 development but even if it was removed from the
  repositories before GM, some users might have it in their
  systems from having tried a beta/RC release (boo#1227350).
- Add #include &lt;stdlib.h&gt; in some files added by the ldap patch to
  fix build with gcc14 (boo#1225904).
  * openssh-7.7p1-ldap.patch
- Remove the recommendation for openssh-server-config-rootlogin
  from openssh-server. Since the default for that config option
  was changed in SLE it's not needed anymore in SLE nor in TW
  (boo#1224392).</changelog>
  <changelog author="alarrosa@suse.com" date="1720180800">- Add patch from upstream to fix proxy multiplexing mode:
  * 0001-upstream-fix-proxy-multiplexing-mode_-broken-when-keystroke.patch
- Add patch from upstream to restore correctly sigprocmask
  * 0001-upstream-correctly-restore-sigprocmask-around-ppoll.patch
- Add patch from upstream to fix a logic error in
  ObscureKeystrokeTiming that rendered this feature ineffective,
  allowing a passive observer to detect which network packets
  contained real keystrokes (bsc#1227318, CVE-2024-39894):
  * 0001-upstream-when-sending-ObscureKeystrokeTiming-chaff-packets_.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720612800">- Remove empty line at the end of sshd-sle.pamd (bsc#1227456)</changelog>
  <changelog author="alarrosa@suse.com" date="1728648000">- Add a patch to fix a regression introduced in 9.6 that makes X11
  forwarding very slow. Submitted to upstream in
  https://bugzilla.mindrot.org/show_bug.cgi?id=3655#c4 . Fixes
  bsc#1229449:
  * fix-x11-regression-bsc1229449.patch
- Add a openssl11 bcond to the spec file for the SLE12 case
  instead of checking suse_version in different parts.
- Move conditional patches to a number &gt;= 1000.
- Several spec file fixes so the package builds and can be
  installed in SLE 15 SP5 and SLE 12 SP5
- Drop most of openssh-6.6p1-keycat.patch (actually, it was just
  commented out). The keycat binary isn't really installed nor
  supported, so we can drop it, except for the code that is used
  by other SELinux patches, which is what I kept from that patch
  (boo#1229072).
- Add patch submitted to upstream to fix RFC4256 implementation
  so that keyboard-interactive authentication method can send
  instructions and sshd shows them to users even before a prompt
  is requested. This fixes MFA push notifications (boo#1229010).
  * 0001-auth-pam-Immediately-report-instructions-to-clients-and-fix-handling-in-ssh-client.patch
- Fix a dbus connection leaked in the logind patch that was
  missing a sd_bus_unref call (found by Matthias Gerstner):
  * logind_set_tty.patch
- Add a patch that fixes a small memory leak when parsing the
  subsystem configuration option:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1728907200">- Use %{with ...} instead of 0%{with ...}</changelog>
  <changelog author="alarrosa@suse.com" date="1739448000">- Fix a MitM attack against OpenSSH's VerifyHostKeyDNS-enabled
  client and a DoS attack against OpenSSH's client and server
  (bsc#1237040, CVE-2025-26465, bsc#1237041, CVE-2025-26466):
  * fix-CVE-2025-26465-and-CVE-2025-26466.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1739880000">- Fix ssh client segfault with GSSAPIKeyExchange=yes in ssh_kex2
  due to gssapi proposal not being correctly initialized
  (bsc#1236826). The problem was introduced in the rebase of
  the patch for 9.6p1:
  * openssh-8.0p1-gssapi-keyex.patch
- Rebase patch and apply it:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="hpj@suse.com" date="1746532800">- Added openssh-cve-2025-32728.patch (bsc#1241012, CVE-2025-32728).
  This fixes an upstream logic error handling the DisableForwarding
  option.</changelog>
  <changelog author="alarrosa@suse.com" date="1747137600">- Enable --with-logind to call the SetTTY dbus method in systemd.
  This allows "wall" to print messages in ssh ttys (bsc#1239671)
- Small fixes to unref the dbus session when any error occurs:
  * logind_set_tty.patch</changelog>
  <changelog author="hpj@suse.com" date="1748952000">- Add openssh-scp-umask-preserve-permissions.patch (bsc#1241667).</changelog>
</package>
<package pkgid="6ae974a0bffb0fee42da96925dde50d7f7eaa2c486600ec67c8a9a24fdc03f46" name="openssh" arch="src">
  <version epoch="0" ver="9.6p1" rel="150600.6.34.1"/>
  <changelog author="alarrosa@suse.com" date="1712059200">- Use %config(noreplace) for sshd_config . In any case, it's
  recommended to drop a file in sshd_config.d instead of editing
  sshd_config (bsc#1221063)
- Add patches from obs package that were also in SP3/SP4/SP5:
  * Fri Nov  3 10:44:14 UTC 2023 - Johannes Segitz &lt;jsegitz@suse.com&gt;
  - Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712059201">- Rebase openssh-7.7p1-fips.patch (bsc#1221928)
  Remove OPENSSL_HAVE_EVPGCM-ifdef, which is no longer supported by upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1712577600">- Update to openssh 9.6p1:
  = Security
  * ssh(1), sshd(8): implement protocol extensions to thwart the
    so-called "Terrapin attack" discovered by Fabian Bäumer, Marcus
    Brinkmann and Jörg Schwenk. This attack allows a MITM to effect a
    limited break of the integrity of the early encrypted SSH transport
    protocol by sending extra messages prior to the commencement of
    encryption, and deleting an equal number of consecutive messages
    immediately after encryption starts. A peer SSH client/server
    would not be able to detect that messages were deleted
    (bsc#1217950, CVE-2023-48795).
  * ssh-agent(1): when adding PKCS#11-hosted private keys while
    specifying destination constraints, if the PKCS#11 token returned
    multiple keys then only the first key had the constraints applied.
    Use of regular private keys, FIDO tokens and unconstrained keys
    are unaffected.
  * ssh(1): if an invalid user or hostname that contained shell
    metacharacters was passed to ssh(1), and a ProxyCommand,
    LocalCommand directive or "match exec" predicate referenced the
    user or hostname via %u, %h or similar expansion token, then
    an attacker who could supply arbitrary user/hostnames to ssh(1)
    could potentially perform command injection depending on what
    quoting was present in the user-supplied ssh_config(5) directive
    (bsc#1218215, CVE-2023-51385).
  = Potentially incompatible changes
  * ssh(1), sshd(8): the RFC4254 connection/channels protocol provides
    a TCP-like window mechanism that limits the amount of data that
    can be sent without acceptance from the peer. In cases where this
    limit was exceeded by a non-conforming peer SSH implementation,
    ssh(1)/sshd(8) previously discarded the extra data. From OpenSSH
    9.6, ssh(1)/sshd(8) will now terminate the connection if a peer
    exceeds the window limit by more than a small grace factor. This
    change should have no effect of SSH implementations that follow
    the specification.
  = New features
  * ssh(1): add a %j token that expands to the configured ProxyJump
    hostname (or the empty string if this option is not being used)
    that can be used in a number of ssh_config(5) keywords. bz3610
  * ssh(1): add ChannelTimeout support to the client, mirroring the
    same option in the server and allowing ssh(1) to terminate
    quiescent channels.
  * ssh(1), sshd(8), ssh-add(1), ssh-keygen(1): add support for
    reading ED25519 private keys in PEM PKCS8 format. Previously
    only the OpenSSH private key format was supported.
  * ssh(1), sshd(8): introduce a protocol extension to allow
    renegotiation of acceptable signature algorithms for public key
    authentication after the server has learned the username being
    used for authentication. This allows varying sshd_config(5)
    PubkeyAcceptedAlgorithms in a "Match user" block.
  * ssh-add(1), ssh-agent(1): add an agent protocol extension to allow
    specifying certificates when loading PKCS#11 keys. This allows the
    use of certificates backed by PKCS#11 private keys in all OpenSSH
    tools that support ssh-agent(1). Previously only ssh(1) supported
    this use-case.
  = Bugfixes
  * ssh(1): when deciding whether to enable the keystroke timing
    obfuscation, enable it only if a channel with a TTY is active.
  * ssh(1): switch mainloop from poll(3) to ppoll(3) and mask signals
    before checking flags set in signal handler. Avoids potential
    race condition between signaling ssh to exit and polling. bz3531
  * ssh(1): when connecting to a destination with both the
    AddressFamily and CanonicalizeHostname directives in use,
    the AddressFamily directive could be ignored. bz5326
  * sftp(1): correct handling of the limits@openssh.com option when
    the server returned an unexpected message.
  * A number of fixes to the PuTTY and Dropbear regress/integration
    tests.
  * ssh(1): release GSS OIDs only at end of authentication, avoiding
    unnecessary init/cleanup cycles. bz2982
  * ssh_config(5): mention "none" is a valid argument to IdentityFile
    in the manual. bz3080
  * scp(1): improved debugging for paths from the server rejected for
    not matching the client's glob(3) pattern in old SCP/RCP protocol
    mode.
  * ssh-agent(1): refuse signing operations on destination-constrained
    keys if a previous session-bind operation has failed. This may
    prevent a fail-open situation in future if a user uses a mismatched
    ssh(1) client and ssh-agent(1) where the client supports a key type
    that the agent does not support.
- Update to openssh 9.5p1:
  = Potentially incompatible changes
  * ssh-keygen(1): generate Ed25519 keys by default. Ed25519 public keys
    are very convenient due to their small size. Ed25519 keys are
    specified in RFC 8709 and OpenSSH has supported them since version 6.5
    (January 2014).
  * sshd(8): the Subsystem directive now accurately preserves quoting of
    subsystem commands and arguments. This may change behaviour for exotic
    configurations, but the most common subsystem configuration
    (sftp-server) is unlikely to be affected.
  = New features
  * ssh(1): add keystroke timing obfuscation to the client. This attempts
    to hide inter-keystroke timings by sending interactive traffic at
    fixed intervals (default: every 20ms) when there is only a small
    amount of data being sent. It also sends fake "chaff" keystrokes for
    a random interval after the last real keystroke. These are
    controlled by a new ssh_config ObscureKeystrokeTiming keyword.
  * ssh(1), sshd(8): Introduce a transport-level ping facility. This adds
    a pair of SSH transport protocol messages SSH2_MSG_PING/PONG to
    implement a ping capability. These messages use numbers in the "local
    extensions" number space and are advertised using a "ping@openssh.com"
    ext-info message with a string version number of "0".
  * sshd(8): allow override of Subsystem directives in sshd Match blocks.
  = Bugfixes
  * scp(1): fix scp in SFTP mode recursive upload and download of
    directories that contain symlinks to other directories. In scp mode,
    the links would be followed, but in SFTP mode they were not. bz3611
  * ssh-keygen(1): handle cr+lf (instead of just cr) line endings in
    sshsig signature files.
  * ssh(1): interactive mode for ControlPersist sessions if they
    originally requested a tty.
  * sshd(8): make PerSourceMaxStartups first-match-wins
  * sshd(8): limit artificial login delay to a reasonable maximum (5s)
    and don't delay at all for the "none" authentication mechanism.
    bz3602
  * sshd(8): Log errors in kex_exchange_identification() with level
    verbose instead of error to reduce preauth log spam. All of those
    get logged with a more generic error message by sshpkt_fatal().
  * sshd(8): correct math for ClientAliveInterval that caused the probes
    to be sent less frequently than configured.
  * ssh(1): fix regression in OpenSSH 9.4 (mux.c r1.99) that caused
    multiplexed sessions to ignore SIGINT under some circumstances.
- Update to openssh 9.4p1:
  = Potentially incompatible changes
  * This release removes support for older versions of libcrypto.
    OpenSSH now requires LibreSSL &gt;= 3.1.0 or OpenSSL &gt;= 1.1.1.
    Note that these versions are already deprecated by their upstream
    vendors.
  * ssh-agent(1): PKCS#11 modules must now be specified by their full
    paths. Previously dlopen(3) could search for them in system
    library directories.
  = New features
  * ssh(1): allow forwarding Unix Domain sockets via ssh -W.
  * ssh(1): add support for configuration tags to ssh(1).
    This adds a ssh_config(5) "Tag" directive and corresponding
    "Match tag" predicate that may be used to select blocks of
    configuration similar to the pf.conf(5) keywords of the same
    name.
  * ssh(1): add a "match localnetwork" predicate. This allows matching
    on the addresses of available network interfaces and may be used to
    vary the effective client configuration based on network location.
  * ssh(1), sshd(8), ssh-keygen(1): infrastructure support for KRL
    extensions.  This defines wire formats for optional KRL extensions
    and implements parsing of the new submessages. No actual extensions
    are supported at this point.
  * sshd(8): AuthorizedPrincipalsCommand and AuthorizedKeysCommand now
    accept two additional %-expansion sequences: %D which expands to
    the routing domain of the connected session and %C which expands
    to the addresses and port numbers for the source and destination
    of the connection.
  * ssh-keygen(1): increase the default work factor (rounds) for the
    bcrypt KDF used to derive symmetric encryption keys for passphrase
    protected key files by 50%.
  = Bugfixes
  * ssh-agent(1): improve isolation between loaded PKCS#11 modules
    by running separate ssh-pkcs11-helpers for each loaded provider.
  * ssh(1): make -f (fork after authentication) work correctly with
    multiplexed connections, including ControlPersist. bz3589 bz3589
  * ssh(1): make ConnectTimeout apply to multiplexing sockets and not
    just to network connections.
  * ssh-agent(1), ssh(1): improve defences against invalid PKCS#11
    modules being loaded by checking that the requested module
    contains the required symbol before loading it.
  * sshd(8): fix AuthorizedPrincipalsCommand when AuthorizedKeysCommand
    appears before it in sshd_config. Since OpenSSH 8.7 the
    AuthorizedPrincipalsCommand directive was incorrectly ignored in
    this situation. bz3574
  * sshd(8), ssh(1), ssh-keygen(1): remove vestigal support for KRL
    signatures When the KRL format was originally defined, it included
    support for signing of KRL objects. However, the code to sign KRLs
    and verify KRL signatues was never completed in OpenSSH. This
    release removes the partially-implemented code to verify KRLs.
    All OpenSSH tools now ignore KRL_SECTION_SIGNATURE sections in
    KRL files.
  * All: fix a number of memory leaks and unreachable/harmless integer
    overflows.
  * ssh-agent(1), ssh(1): don't truncate strings logged from PKCS#11
    modules; GHPR406
  * sshd(8), ssh(1): better validate CASignatureAlgorithms in
    ssh_config and sshd_config. Previously this directive would accept
    certificate algorithm names, but these were unusable in practice as
    OpenSSH does not support CA chains. bz3577
  * ssh(1): make `ssh -Q CASignatureAlgorithms` only list signature
    algorithms that are valid for CA signing. Previous behaviour was
    to list all signing algorithms, including certificate algorithms.
  * ssh-keyscan(1): gracefully handle systems where rlimits or the
    maximum number of open files is larger than INT_MAX; bz3581
  * ssh-keygen(1): fix "no comment" not showing on when running
    `ssh-keygen -l` on multiple keys where one has a comment and other
    following keys do not. bz3580
  * scp(1), sftp(1): adjust ftruncate() logic to handle servers that
    reorder requests. Previously, if the server reordered requests then
    the resultant file would be erroneously truncated.
  * ssh(1): don't incorrectly disable hostname canonicalization when
    CanonicalizeHostname=yes and ProxyJump was expicitly set to
    "none". bz3567
  * scp(1): when copying local-&gt;remote, check that the source file
    exists before opening an SFTP connection to the server. Based on
    GHPR#370
- Dropped patches:
  * cb4ed12f.patch - implemented upstream.
- Rebased patches:
  * openssh-7.7p1-fips.patch
  * openssh-7.8p1-role-mls.patch
  * openssh-8.0p1-gssapi-keyex.patch
- Add patches from obs:
  * Mon Mar  4 09:57:06 UTC 2024 - Pedro Monreal &lt;pmonreal@suse.com&gt;
- Add crypto-policies support [bsc#1211301]
  * Add patches:
  - openssh-9.6p1-crypto-policies.patch
  - openssh-9.6p1-crypto-policies-man.patch</changelog>
  <changelog author="opensuse@arnavion.dev" date="1712836800">- Fix duplicate loading of dropins. (boo#1222467)</changelog>
  <changelog author="alarrosa@suse.com" date="1712923200">- Make openssh-server recommend the openssh-server-config-rootlogin
  package in SLE in order to keep the same behaviour of previous
  SPs where the PermitRootLogin default was set to yes
  (bsc#1221005).
- Fix crypto-policies requirement to be set by openssh-server, not
  the config-rootlogin subpackage.
- Add back %config(noreplace) tag for more config files that were
  already set like this in previous SPs.</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- openssh-8.0p1-gssapi-keyex.patch: Added missing struct initializer,
  added missing parameter (bsc#1222840)</changelog>
  <changelog author="alarrosa@suse.com" date="1715601600">- Only for SLE15, restore the patch file removed in
  Thu Feb 18 13:54:44 UTC 2021 to restore the previous behaviour
  from SP5 of having root password login allowed by default
  (fixes bsc#1223486, related to bsc#1173067):
  * openssh-7.7p1-allow_root_password_login.patch
- Since the default value for this config option is now set to
  permit root to use password logins in SLE15, the
  openssh-server-config-rootlogin subpackage isn't useful there so
  we now create an openssh-server-config-disallow-rootlogin
  subpackage that sets the configuration the other way around
  than openssh-server-config-rootlogin.</changelog>
  <changelog author="alarrosa@suse.com" date="1715688000">- Add a warning in %post of openssh-clients, openssh-server and
  openssh-server-config-disallow-rootlogin to warn the user if
  the /etc/ssh/(ssh_config.d|sshd_config.d) directories are not
  being used (bsc#1223486).</changelog>
  <changelog author="alarrosa@suse.com" date="1719835200">- Add patch to fix a race condition in a signal handler by removing
  the async-signal-unsafe code (CVE-2024-6387, bsc#1226642):
  * fix-CVE-2024-6387.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720008000">- Add obsoletes for openssh-server-config-rootlogin since that
  package existed for a brief period of time during SLE 15 SP6/
  Leap 15.6 development but even if it was removed from the
  repositories before GM, some users might have it in their
  systems from having tried a beta/RC release (boo#1227350).
- Add #include &lt;stdlib.h&gt; in some files added by the ldap patch to
  fix build with gcc14 (boo#1225904).
  * openssh-7.7p1-ldap.patch
- Remove the recommendation for openssh-server-config-rootlogin
  from openssh-server. Since the default for that config option
  was changed in SLE it's not needed anymore in SLE nor in TW
  (boo#1224392).</changelog>
  <changelog author="alarrosa@suse.com" date="1720180800">- Add patch from upstream to fix proxy multiplexing mode:
  * 0001-upstream-fix-proxy-multiplexing-mode_-broken-when-keystroke.patch
- Add patch from upstream to restore correctly sigprocmask
  * 0001-upstream-correctly-restore-sigprocmask-around-ppoll.patch
- Add patch from upstream to fix a logic error in
  ObscureKeystrokeTiming that rendered this feature ineffective,
  allowing a passive observer to detect which network packets
  contained real keystrokes (bsc#1227318, CVE-2024-39894):
  * 0001-upstream-when-sending-ObscureKeystrokeTiming-chaff-packets_.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720612800">- Remove empty line at the end of sshd-sle.pamd (bsc#1227456)</changelog>
  <changelog author="alarrosa@suse.com" date="1728648000">- Add a patch to fix a regression introduced in 9.6 that makes X11
  forwarding very slow. Submitted to upstream in
  https://bugzilla.mindrot.org/show_bug.cgi?id=3655#c4 . Fixes
  bsc#1229449:
  * fix-x11-regression-bsc1229449.patch
- Add a openssl11 bcond to the spec file for the SLE12 case
  instead of checking suse_version in different parts.
- Move conditional patches to a number &gt;= 1000.
- Several spec file fixes so the package builds and can be
  installed in SLE 15 SP5 and SLE 12 SP5
- Drop most of openssh-6.6p1-keycat.patch (actually, it was just
  commented out). The keycat binary isn't really installed nor
  supported, so we can drop it, except for the code that is used
  by other SELinux patches, which is what I kept from that patch
  (boo#1229072).
- Add patch submitted to upstream to fix RFC4256 implementation
  so that keyboard-interactive authentication method can send
  instructions and sshd shows them to users even before a prompt
  is requested. This fixes MFA push notifications (boo#1229010).
  * 0001-auth-pam-Immediately-report-instructions-to-clients-and-fix-handling-in-ssh-client.patch
- Fix a dbus connection leaked in the logind patch that was
  missing a sd_bus_unref call (found by Matthias Gerstner):
  * logind_set_tty.patch
- Add a patch that fixes a small memory leak when parsing the
  subsystem configuration option:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1728907200">- Use %{with ...} instead of 0%{with ...}</changelog>
  <changelog author="alarrosa@suse.com" date="1739448000">- Fix a MitM attack against OpenSSH's VerifyHostKeyDNS-enabled
  client and a DoS attack against OpenSSH's client and server
  (bsc#1237040, CVE-2025-26465, bsc#1237041, CVE-2025-26466):
  * fix-CVE-2025-26465-and-CVE-2025-26466.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1739880000">- Fix ssh client segfault with GSSAPIKeyExchange=yes in ssh_kex2
  due to gssapi proposal not being correctly initialized
  (bsc#1236826). The problem was introduced in the rebase of
  the patch for 9.6p1:
  * openssh-8.0p1-gssapi-keyex.patch
- Rebase patch and apply it:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="hpj@suse.com" date="1746532800">- Added openssh-cve-2025-32728.patch (bsc#1241012, CVE-2025-32728).
  This fixes an upstream logic error handling the DisableForwarding
  option.</changelog>
  <changelog author="alarrosa@suse.com" date="1747137600">- Enable --with-logind to call the SetTTY dbus method in systemd.
  This allows "wall" to print messages in ssh ttys (bsc#1239671)
- Small fixes to unref the dbus session when any error occurs:
  * logind_set_tty.patch</changelog>
  <changelog author="hpj@suse.com" date="1748952000">- Add openssh-scp-umask-preserve-permissions.patch (bsc#1241667).</changelog>
  <changelog author="hpj@suse.com" date="1762516800">- Add openssh-cve-2025-61984-username-validation.patch
  (bsc#1251198, CVE-2025-61984).
- Add openssh-cve-2025-61985-nul-url-encode.patch
  (bsc#1251199, CVE-2025-61985).</changelog>
</package>
<package pkgid="4945dbb9262c2db18bc6d4e62b3e4a65e141781e7045ee8ff6d843696f3273bc" name="openssh" arch="x86_64">
  <version epoch="0" ver="9.6p1" rel="150600.6.34.1"/>
  <changelog author="alarrosa@suse.com" date="1712059200">- Use %config(noreplace) for sshd_config . In any case, it's
  recommended to drop a file in sshd_config.d instead of editing
  sshd_config (bsc#1221063)
- Add patches from obs package that were also in SP3/SP4/SP5:
  * Fri Nov  3 10:44:14 UTC 2023 - Johannes Segitz &lt;jsegitz@suse.com&gt;
  - Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712059201">- Rebase openssh-7.7p1-fips.patch (bsc#1221928)
  Remove OPENSSL_HAVE_EVPGCM-ifdef, which is no longer supported by upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1712577600">- Update to openssh 9.6p1:
  = Security
  * ssh(1), sshd(8): implement protocol extensions to thwart the
    so-called "Terrapin attack" discovered by Fabian Bäumer, Marcus
    Brinkmann and Jörg Schwenk. This attack allows a MITM to effect a
    limited break of the integrity of the early encrypted SSH transport
    protocol by sending extra messages prior to the commencement of
    encryption, and deleting an equal number of consecutive messages
    immediately after encryption starts. A peer SSH client/server
    would not be able to detect that messages were deleted
    (bsc#1217950, CVE-2023-48795).
  * ssh-agent(1): when adding PKCS#11-hosted private keys while
    specifying destination constraints, if the PKCS#11 token returned
    multiple keys then only the first key had the constraints applied.
    Use of regular private keys, FIDO tokens and unconstrained keys
    are unaffected.
  * ssh(1): if an invalid user or hostname that contained shell
    metacharacters was passed to ssh(1), and a ProxyCommand,
    LocalCommand directive or "match exec" predicate referenced the
    user or hostname via %u, %h or similar expansion token, then
    an attacker who could supply arbitrary user/hostnames to ssh(1)
    could potentially perform command injection depending on what
    quoting was present in the user-supplied ssh_config(5) directive
    (bsc#1218215, CVE-2023-51385).
  = Potentially incompatible changes
  * ssh(1), sshd(8): the RFC4254 connection/channels protocol provides
    a TCP-like window mechanism that limits the amount of data that
    can be sent without acceptance from the peer. In cases where this
    limit was exceeded by a non-conforming peer SSH implementation,
    ssh(1)/sshd(8) previously discarded the extra data. From OpenSSH
    9.6, ssh(1)/sshd(8) will now terminate the connection if a peer
    exceeds the window limit by more than a small grace factor. This
    change should have no effect of SSH implementations that follow
    the specification.
  = New features
  * ssh(1): add a %j token that expands to the configured ProxyJump
    hostname (or the empty string if this option is not being used)
    that can be used in a number of ssh_config(5) keywords. bz3610
  * ssh(1): add ChannelTimeout support to the client, mirroring the
    same option in the server and allowing ssh(1) to terminate
    quiescent channels.
  * ssh(1), sshd(8), ssh-add(1), ssh-keygen(1): add support for
    reading ED25519 private keys in PEM PKCS8 format. Previously
    only the OpenSSH private key format was supported.
  * ssh(1), sshd(8): introduce a protocol extension to allow
    renegotiation of acceptable signature algorithms for public key
    authentication after the server has learned the username being
    used for authentication. This allows varying sshd_config(5)
    PubkeyAcceptedAlgorithms in a "Match user" block.
  * ssh-add(1), ssh-agent(1): add an agent protocol extension to allow
    specifying certificates when loading PKCS#11 keys. This allows the
    use of certificates backed by PKCS#11 private keys in all OpenSSH
    tools that support ssh-agent(1). Previously only ssh(1) supported
    this use-case.
  = Bugfixes
  * ssh(1): when deciding whether to enable the keystroke timing
    obfuscation, enable it only if a channel with a TTY is active.
  * ssh(1): switch mainloop from poll(3) to ppoll(3) and mask signals
    before checking flags set in signal handler. Avoids potential
    race condition between signaling ssh to exit and polling. bz3531
  * ssh(1): when connecting to a destination with both the
    AddressFamily and CanonicalizeHostname directives in use,
    the AddressFamily directive could be ignored. bz5326
  * sftp(1): correct handling of the limits@openssh.com option when
    the server returned an unexpected message.
  * A number of fixes to the PuTTY and Dropbear regress/integration
    tests.
  * ssh(1): release GSS OIDs only at end of authentication, avoiding
    unnecessary init/cleanup cycles. bz2982
  * ssh_config(5): mention "none" is a valid argument to IdentityFile
    in the manual. bz3080
  * scp(1): improved debugging for paths from the server rejected for
    not matching the client's glob(3) pattern in old SCP/RCP protocol
    mode.
  * ssh-agent(1): refuse signing operations on destination-constrained
    keys if a previous session-bind operation has failed. This may
    prevent a fail-open situation in future if a user uses a mismatched
    ssh(1) client and ssh-agent(1) where the client supports a key type
    that the agent does not support.
- Update to openssh 9.5p1:
  = Potentially incompatible changes
  * ssh-keygen(1): generate Ed25519 keys by default. Ed25519 public keys
    are very convenient due to their small size. Ed25519 keys are
    specified in RFC 8709 and OpenSSH has supported them since version 6.5
    (January 2014).
  * sshd(8): the Subsystem directive now accurately preserves quoting of
    subsystem commands and arguments. This may change behaviour for exotic
    configurations, but the most common subsystem configuration
    (sftp-server) is unlikely to be affected.
  = New features
  * ssh(1): add keystroke timing obfuscation to the client. This attempts
    to hide inter-keystroke timings by sending interactive traffic at
    fixed intervals (default: every 20ms) when there is only a small
    amount of data being sent. It also sends fake "chaff" keystrokes for
    a random interval after the last real keystroke. These are
    controlled by a new ssh_config ObscureKeystrokeTiming keyword.
  * ssh(1), sshd(8): Introduce a transport-level ping facility. This adds
    a pair of SSH transport protocol messages SSH2_MSG_PING/PONG to
    implement a ping capability. These messages use numbers in the "local
    extensions" number space and are advertised using a "ping@openssh.com"
    ext-info message with a string version number of "0".
  * sshd(8): allow override of Subsystem directives in sshd Match blocks.
  = Bugfixes
  * scp(1): fix scp in SFTP mode recursive upload and download of
    directories that contain symlinks to other directories. In scp mode,
    the links would be followed, but in SFTP mode they were not. bz3611
  * ssh-keygen(1): handle cr+lf (instead of just cr) line endings in
    sshsig signature files.
  * ssh(1): interactive mode for ControlPersist sessions if they
    originally requested a tty.
  * sshd(8): make PerSourceMaxStartups first-match-wins
  * sshd(8): limit artificial login delay to a reasonable maximum (5s)
    and don't delay at all for the "none" authentication mechanism.
    bz3602
  * sshd(8): Log errors in kex_exchange_identification() with level
    verbose instead of error to reduce preauth log spam. All of those
    get logged with a more generic error message by sshpkt_fatal().
  * sshd(8): correct math for ClientAliveInterval that caused the probes
    to be sent less frequently than configured.
  * ssh(1): fix regression in OpenSSH 9.4 (mux.c r1.99) that caused
    multiplexed sessions to ignore SIGINT under some circumstances.
- Update to openssh 9.4p1:
  = Potentially incompatible changes
  * This release removes support for older versions of libcrypto.
    OpenSSH now requires LibreSSL &gt;= 3.1.0 or OpenSSL &gt;= 1.1.1.
    Note that these versions are already deprecated by their upstream
    vendors.
  * ssh-agent(1): PKCS#11 modules must now be specified by their full
    paths. Previously dlopen(3) could search for them in system
    library directories.
  = New features
  * ssh(1): allow forwarding Unix Domain sockets via ssh -W.
  * ssh(1): add support for configuration tags to ssh(1).
    This adds a ssh_config(5) "Tag" directive and corresponding
    "Match tag" predicate that may be used to select blocks of
    configuration similar to the pf.conf(5) keywords of the same
    name.
  * ssh(1): add a "match localnetwork" predicate. This allows matching
    on the addresses of available network interfaces and may be used to
    vary the effective client configuration based on network location.
  * ssh(1), sshd(8), ssh-keygen(1): infrastructure support for KRL
    extensions.  This defines wire formats for optional KRL extensions
    and implements parsing of the new submessages. No actual extensions
    are supported at this point.
  * sshd(8): AuthorizedPrincipalsCommand and AuthorizedKeysCommand now
    accept two additional %-expansion sequences: %D which expands to
    the routing domain of the connected session and %C which expands
    to the addresses and port numbers for the source and destination
    of the connection.
  * ssh-keygen(1): increase the default work factor (rounds) for the
    bcrypt KDF used to derive symmetric encryption keys for passphrase
    protected key files by 50%.
  = Bugfixes
  * ssh-agent(1): improve isolation between loaded PKCS#11 modules
    by running separate ssh-pkcs11-helpers for each loaded provider.
  * ssh(1): make -f (fork after authentication) work correctly with
    multiplexed connections, including ControlPersist. bz3589 bz3589
  * ssh(1): make ConnectTimeout apply to multiplexing sockets and not
    just to network connections.
  * ssh-agent(1), ssh(1): improve defences against invalid PKCS#11
    modules being loaded by checking that the requested module
    contains the required symbol before loading it.
  * sshd(8): fix AuthorizedPrincipalsCommand when AuthorizedKeysCommand
    appears before it in sshd_config. Since OpenSSH 8.7 the
    AuthorizedPrincipalsCommand directive was incorrectly ignored in
    this situation. bz3574
  * sshd(8), ssh(1), ssh-keygen(1): remove vestigal support for KRL
    signatures When the KRL format was originally defined, it included
    support for signing of KRL objects. However, the code to sign KRLs
    and verify KRL signatues was never completed in OpenSSH. This
    release removes the partially-implemented code to verify KRLs.
    All OpenSSH tools now ignore KRL_SECTION_SIGNATURE sections in
    KRL files.
  * All: fix a number of memory leaks and unreachable/harmless integer
    overflows.
  * ssh-agent(1), ssh(1): don't truncate strings logged from PKCS#11
    modules; GHPR406
  * sshd(8), ssh(1): better validate CASignatureAlgorithms in
    ssh_config and sshd_config. Previously this directive would accept
    certificate algorithm names, but these were unusable in practice as
    OpenSSH does not support CA chains. bz3577
  * ssh(1): make `ssh -Q CASignatureAlgorithms` only list signature
    algorithms that are valid for CA signing. Previous behaviour was
    to list all signing algorithms, including certificate algorithms.
  * ssh-keyscan(1): gracefully handle systems where rlimits or the
    maximum number of open files is larger than INT_MAX; bz3581
  * ssh-keygen(1): fix "no comment" not showing on when running
    `ssh-keygen -l` on multiple keys where one has a comment and other
    following keys do not. bz3580
  * scp(1), sftp(1): adjust ftruncate() logic to handle servers that
    reorder requests. Previously, if the server reordered requests then
    the resultant file would be erroneously truncated.
  * ssh(1): don't incorrectly disable hostname canonicalization when
    CanonicalizeHostname=yes and ProxyJump was expicitly set to
    "none". bz3567
  * scp(1): when copying local-&gt;remote, check that the source file
    exists before opening an SFTP connection to the server. Based on
    GHPR#370
- Dropped patches:
  * cb4ed12f.patch - implemented upstream.
- Rebased patches:
  * openssh-7.7p1-fips.patch
  * openssh-7.8p1-role-mls.patch
  * openssh-8.0p1-gssapi-keyex.patch
- Add patches from obs:
  * Mon Mar  4 09:57:06 UTC 2024 - Pedro Monreal &lt;pmonreal@suse.com&gt;
- Add crypto-policies support [bsc#1211301]
  * Add patches:
  - openssh-9.6p1-crypto-policies.patch
  - openssh-9.6p1-crypto-policies-man.patch</changelog>
  <changelog author="opensuse@arnavion.dev" date="1712836800">- Fix duplicate loading of dropins. (boo#1222467)</changelog>
  <changelog author="alarrosa@suse.com" date="1712923200">- Make openssh-server recommend the openssh-server-config-rootlogin
  package in SLE in order to keep the same behaviour of previous
  SPs where the PermitRootLogin default was set to yes
  (bsc#1221005).
- Fix crypto-policies requirement to be set by openssh-server, not
  the config-rootlogin subpackage.
- Add back %config(noreplace) tag for more config files that were
  already set like this in previous SPs.</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- openssh-8.0p1-gssapi-keyex.patch: Added missing struct initializer,
  added missing parameter (bsc#1222840)</changelog>
  <changelog author="alarrosa@suse.com" date="1715601600">- Only for SLE15, restore the patch file removed in
  Thu Feb 18 13:54:44 UTC 2021 to restore the previous behaviour
  from SP5 of having root password login allowed by default
  (fixes bsc#1223486, related to bsc#1173067):
  * openssh-7.7p1-allow_root_password_login.patch
- Since the default value for this config option is now set to
  permit root to use password logins in SLE15, the
  openssh-server-config-rootlogin subpackage isn't useful there so
  we now create an openssh-server-config-disallow-rootlogin
  subpackage that sets the configuration the other way around
  than openssh-server-config-rootlogin.</changelog>
  <changelog author="alarrosa@suse.com" date="1715688000">- Add a warning in %post of openssh-clients, openssh-server and
  openssh-server-config-disallow-rootlogin to warn the user if
  the /etc/ssh/(ssh_config.d|sshd_config.d) directories are not
  being used (bsc#1223486).</changelog>
  <changelog author="alarrosa@suse.com" date="1719835200">- Add patch to fix a race condition in a signal handler by removing
  the async-signal-unsafe code (CVE-2024-6387, bsc#1226642):
  * fix-CVE-2024-6387.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720008000">- Add obsoletes for openssh-server-config-rootlogin since that
  package existed for a brief period of time during SLE 15 SP6/
  Leap 15.6 development but even if it was removed from the
  repositories before GM, some users might have it in their
  systems from having tried a beta/RC release (boo#1227350).
- Add #include &lt;stdlib.h&gt; in some files added by the ldap patch to
  fix build with gcc14 (boo#1225904).
  * openssh-7.7p1-ldap.patch
- Remove the recommendation for openssh-server-config-rootlogin
  from openssh-server. Since the default for that config option
  was changed in SLE it's not needed anymore in SLE nor in TW
  (boo#1224392).</changelog>
  <changelog author="alarrosa@suse.com" date="1720180800">- Add patch from upstream to fix proxy multiplexing mode:
  * 0001-upstream-fix-proxy-multiplexing-mode_-broken-when-keystroke.patch
- Add patch from upstream to restore correctly sigprocmask
  * 0001-upstream-correctly-restore-sigprocmask-around-ppoll.patch
- Add patch from upstream to fix a logic error in
  ObscureKeystrokeTiming that rendered this feature ineffective,
  allowing a passive observer to detect which network packets
  contained real keystrokes (bsc#1227318, CVE-2024-39894):
  * 0001-upstream-when-sending-ObscureKeystrokeTiming-chaff-packets_.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720612800">- Remove empty line at the end of sshd-sle.pamd (bsc#1227456)</changelog>
  <changelog author="alarrosa@suse.com" date="1728648000">- Add a patch to fix a regression introduced in 9.6 that makes X11
  forwarding very slow. Submitted to upstream in
  https://bugzilla.mindrot.org/show_bug.cgi?id=3655#c4 . Fixes
  bsc#1229449:
  * fix-x11-regression-bsc1229449.patch
- Add a openssl11 bcond to the spec file for the SLE12 case
  instead of checking suse_version in different parts.
- Move conditional patches to a number &gt;= 1000.
- Several spec file fixes so the package builds and can be
  installed in SLE 15 SP5 and SLE 12 SP5
- Drop most of openssh-6.6p1-keycat.patch (actually, it was just
  commented out). The keycat binary isn't really installed nor
  supported, so we can drop it, except for the code that is used
  by other SELinux patches, which is what I kept from that patch
  (boo#1229072).
- Add patch submitted to upstream to fix RFC4256 implementation
  so that keyboard-interactive authentication method can send
  instructions and sshd shows them to users even before a prompt
  is requested. This fixes MFA push notifications (boo#1229010).
  * 0001-auth-pam-Immediately-report-instructions-to-clients-and-fix-handling-in-ssh-client.patch
- Fix a dbus connection leaked in the logind patch that was
  missing a sd_bus_unref call (found by Matthias Gerstner):
  * logind_set_tty.patch
- Add a patch that fixes a small memory leak when parsing the
  subsystem configuration option:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1728907200">- Use %{with ...} instead of 0%{with ...}</changelog>
  <changelog author="alarrosa@suse.com" date="1739448000">- Fix a MitM attack against OpenSSH's VerifyHostKeyDNS-enabled
  client and a DoS attack against OpenSSH's client and server
  (bsc#1237040, CVE-2025-26465, bsc#1237041, CVE-2025-26466):
  * fix-CVE-2025-26465-and-CVE-2025-26466.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1739880000">- Fix ssh client segfault with GSSAPIKeyExchange=yes in ssh_kex2
  due to gssapi proposal not being correctly initialized
  (bsc#1236826). The problem was introduced in the rebase of
  the patch for 9.6p1:
  * openssh-8.0p1-gssapi-keyex.patch
- Rebase patch and apply it:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="hpj@suse.com" date="1746532800">- Added openssh-cve-2025-32728.patch (bsc#1241012, CVE-2025-32728).
  This fixes an upstream logic error handling the DisableForwarding
  option.</changelog>
  <changelog author="alarrosa@suse.com" date="1747137600">- Enable --with-logind to call the SetTTY dbus method in systemd.
  This allows "wall" to print messages in ssh ttys (bsc#1239671)
- Small fixes to unref the dbus session when any error occurs:
  * logind_set_tty.patch</changelog>
  <changelog author="hpj@suse.com" date="1748952000">- Add openssh-scp-umask-preserve-permissions.patch (bsc#1241667).</changelog>
  <changelog author="hpj@suse.com" date="1762516800">- Add openssh-cve-2025-61984-username-validation.patch
  (bsc#1251198, CVE-2025-61984).
- Add openssh-cve-2025-61985-nul-url-encode.patch
  (bsc#1251199, CVE-2025-61985).</changelog>
</package>
<package pkgid="48265604b54dd873c0025a9007fbd65581176decc6836a45f884e4ef76e0ff05" name="openssh" arch="src">
  <version epoch="0" ver="9.6p1" rel="150600.6.37.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1712059200">- Rebase openssh-7.7p1-fips.patch (bsc#1221928)
  Remove OPENSSL_HAVE_EVPGCM-ifdef, which is no longer supported by upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1712577600">- Update to openssh 9.6p1:
  = Security
  * ssh(1), sshd(8): implement protocol extensions to thwart the
    so-called "Terrapin attack" discovered by Fabian Bäumer, Marcus
    Brinkmann and Jörg Schwenk. This attack allows a MITM to effect a
    limited break of the integrity of the early encrypted SSH transport
    protocol by sending extra messages prior to the commencement of
    encryption, and deleting an equal number of consecutive messages
    immediately after encryption starts. A peer SSH client/server
    would not be able to detect that messages were deleted
    (bsc#1217950, CVE-2023-48795).
  * ssh-agent(1): when adding PKCS#11-hosted private keys while
    specifying destination constraints, if the PKCS#11 token returned
    multiple keys then only the first key had the constraints applied.
    Use of regular private keys, FIDO tokens and unconstrained keys
    are unaffected.
  * ssh(1): if an invalid user or hostname that contained shell
    metacharacters was passed to ssh(1), and a ProxyCommand,
    LocalCommand directive or "match exec" predicate referenced the
    user or hostname via %u, %h or similar expansion token, then
    an attacker who could supply arbitrary user/hostnames to ssh(1)
    could potentially perform command injection depending on what
    quoting was present in the user-supplied ssh_config(5) directive
    (bsc#1218215, CVE-2023-51385).
  = Potentially incompatible changes
  * ssh(1), sshd(8): the RFC4254 connection/channels protocol provides
    a TCP-like window mechanism that limits the amount of data that
    can be sent without acceptance from the peer. In cases where this
    limit was exceeded by a non-conforming peer SSH implementation,
    ssh(1)/sshd(8) previously discarded the extra data. From OpenSSH
    9.6, ssh(1)/sshd(8) will now terminate the connection if a peer
    exceeds the window limit by more than a small grace factor. This
    change should have no effect of SSH implementations that follow
    the specification.
  = New features
  * ssh(1): add a %j token that expands to the configured ProxyJump
    hostname (or the empty string if this option is not being used)
    that can be used in a number of ssh_config(5) keywords. bz3610
  * ssh(1): add ChannelTimeout support to the client, mirroring the
    same option in the server and allowing ssh(1) to terminate
    quiescent channels.
  * ssh(1), sshd(8), ssh-add(1), ssh-keygen(1): add support for
    reading ED25519 private keys in PEM PKCS8 format. Previously
    only the OpenSSH private key format was supported.
  * ssh(1), sshd(8): introduce a protocol extension to allow
    renegotiation of acceptable signature algorithms for public key
    authentication after the server has learned the username being
    used for authentication. This allows varying sshd_config(5)
    PubkeyAcceptedAlgorithms in a "Match user" block.
  * ssh-add(1), ssh-agent(1): add an agent protocol extension to allow
    specifying certificates when loading PKCS#11 keys. This allows the
    use of certificates backed by PKCS#11 private keys in all OpenSSH
    tools that support ssh-agent(1). Previously only ssh(1) supported
    this use-case.
  = Bugfixes
  * ssh(1): when deciding whether to enable the keystroke timing
    obfuscation, enable it only if a channel with a TTY is active.
  * ssh(1): switch mainloop from poll(3) to ppoll(3) and mask signals
    before checking flags set in signal handler. Avoids potential
    race condition between signaling ssh to exit and polling. bz3531
  * ssh(1): when connecting to a destination with both the
    AddressFamily and CanonicalizeHostname directives in use,
    the AddressFamily directive could be ignored. bz5326
  * sftp(1): correct handling of the limits@openssh.com option when
    the server returned an unexpected message.
  * A number of fixes to the PuTTY and Dropbear regress/integration
    tests.
  * ssh(1): release GSS OIDs only at end of authentication, avoiding
    unnecessary init/cleanup cycles. bz2982
  * ssh_config(5): mention "none" is a valid argument to IdentityFile
    in the manual. bz3080
  * scp(1): improved debugging for paths from the server rejected for
    not matching the client's glob(3) pattern in old SCP/RCP protocol
    mode.
  * ssh-agent(1): refuse signing operations on destination-constrained
    keys if a previous session-bind operation has failed. This may
    prevent a fail-open situation in future if a user uses a mismatched
    ssh(1) client and ssh-agent(1) where the client supports a key type
    that the agent does not support.
- Update to openssh 9.5p1:
  = Potentially incompatible changes
  * ssh-keygen(1): generate Ed25519 keys by default. Ed25519 public keys
    are very convenient due to their small size. Ed25519 keys are
    specified in RFC 8709 and OpenSSH has supported them since version 6.5
    (January 2014).
  * sshd(8): the Subsystem directive now accurately preserves quoting of
    subsystem commands and arguments. This may change behaviour for exotic
    configurations, but the most common subsystem configuration
    (sftp-server) is unlikely to be affected.
  = New features
  * ssh(1): add keystroke timing obfuscation to the client. This attempts
    to hide inter-keystroke timings by sending interactive traffic at
    fixed intervals (default: every 20ms) when there is only a small
    amount of data being sent. It also sends fake "chaff" keystrokes for
    a random interval after the last real keystroke. These are
    controlled by a new ssh_config ObscureKeystrokeTiming keyword.
  * ssh(1), sshd(8): Introduce a transport-level ping facility. This adds
    a pair of SSH transport protocol messages SSH2_MSG_PING/PONG to
    implement a ping capability. These messages use numbers in the "local
    extensions" number space and are advertised using a "ping@openssh.com"
    ext-info message with a string version number of "0".
  * sshd(8): allow override of Subsystem directives in sshd Match blocks.
  = Bugfixes
  * scp(1): fix scp in SFTP mode recursive upload and download of
    directories that contain symlinks to other directories. In scp mode,
    the links would be followed, but in SFTP mode they were not. bz3611
  * ssh-keygen(1): handle cr+lf (instead of just cr) line endings in
    sshsig signature files.
  * ssh(1): interactive mode for ControlPersist sessions if they
    originally requested a tty.
  * sshd(8): make PerSourceMaxStartups first-match-wins
  * sshd(8): limit artificial login delay to a reasonable maximum (5s)
    and don't delay at all for the "none" authentication mechanism.
    bz3602
  * sshd(8): Log errors in kex_exchange_identification() with level
    verbose instead of error to reduce preauth log spam. All of those
    get logged with a more generic error message by sshpkt_fatal().
  * sshd(8): correct math for ClientAliveInterval that caused the probes
    to be sent less frequently than configured.
  * ssh(1): fix regression in OpenSSH 9.4 (mux.c r1.99) that caused
    multiplexed sessions to ignore SIGINT under some circumstances.
- Update to openssh 9.4p1:
  = Potentially incompatible changes
  * This release removes support for older versions of libcrypto.
    OpenSSH now requires LibreSSL &gt;= 3.1.0 or OpenSSL &gt;= 1.1.1.
    Note that these versions are already deprecated by their upstream
    vendors.
  * ssh-agent(1): PKCS#11 modules must now be specified by their full
    paths. Previously dlopen(3) could search for them in system
    library directories.
  = New features
  * ssh(1): allow forwarding Unix Domain sockets via ssh -W.
  * ssh(1): add support for configuration tags to ssh(1).
    This adds a ssh_config(5) "Tag" directive and corresponding
    "Match tag" predicate that may be used to select blocks of
    configuration similar to the pf.conf(5) keywords of the same
    name.
  * ssh(1): add a "match localnetwork" predicate. This allows matching
    on the addresses of available network interfaces and may be used to
    vary the effective client configuration based on network location.
  * ssh(1), sshd(8), ssh-keygen(1): infrastructure support for KRL
    extensions.  This defines wire formats for optional KRL extensions
    and implements parsing of the new submessages. No actual extensions
    are supported at this point.
  * sshd(8): AuthorizedPrincipalsCommand and AuthorizedKeysCommand now
    accept two additional %-expansion sequences: %D which expands to
    the routing domain of the connected session and %C which expands
    to the addresses and port numbers for the source and destination
    of the connection.
  * ssh-keygen(1): increase the default work factor (rounds) for the
    bcrypt KDF used to derive symmetric encryption keys for passphrase
    protected key files by 50%.
  = Bugfixes
  * ssh-agent(1): improve isolation between loaded PKCS#11 modules
    by running separate ssh-pkcs11-helpers for each loaded provider.
  * ssh(1): make -f (fork after authentication) work correctly with
    multiplexed connections, including ControlPersist. bz3589 bz3589
  * ssh(1): make ConnectTimeout apply to multiplexing sockets and not
    just to network connections.
  * ssh-agent(1), ssh(1): improve defences against invalid PKCS#11
    modules being loaded by checking that the requested module
    contains the required symbol before loading it.
  * sshd(8): fix AuthorizedPrincipalsCommand when AuthorizedKeysCommand
    appears before it in sshd_config. Since OpenSSH 8.7 the
    AuthorizedPrincipalsCommand directive was incorrectly ignored in
    this situation. bz3574
  * sshd(8), ssh(1), ssh-keygen(1): remove vestigal support for KRL
    signatures When the KRL format was originally defined, it included
    support for signing of KRL objects. However, the code to sign KRLs
    and verify KRL signatues was never completed in OpenSSH. This
    release removes the partially-implemented code to verify KRLs.
    All OpenSSH tools now ignore KRL_SECTION_SIGNATURE sections in
    KRL files.
  * All: fix a number of memory leaks and unreachable/harmless integer
    overflows.
  * ssh-agent(1), ssh(1): don't truncate strings logged from PKCS#11
    modules; GHPR406
  * sshd(8), ssh(1): better validate CASignatureAlgorithms in
    ssh_config and sshd_config. Previously this directive would accept
    certificate algorithm names, but these were unusable in practice as
    OpenSSH does not support CA chains. bz3577
  * ssh(1): make `ssh -Q CASignatureAlgorithms` only list signature
    algorithms that are valid for CA signing. Previous behaviour was
    to list all signing algorithms, including certificate algorithms.
  * ssh-keyscan(1): gracefully handle systems where rlimits or the
    maximum number of open files is larger than INT_MAX; bz3581
  * ssh-keygen(1): fix "no comment" not showing on when running
    `ssh-keygen -l` on multiple keys where one has a comment and other
    following keys do not. bz3580
  * scp(1), sftp(1): adjust ftruncate() logic to handle servers that
    reorder requests. Previously, if the server reordered requests then
    the resultant file would be erroneously truncated.
  * ssh(1): don't incorrectly disable hostname canonicalization when
    CanonicalizeHostname=yes and ProxyJump was expicitly set to
    "none". bz3567
  * scp(1): when copying local-&gt;remote, check that the source file
    exists before opening an SFTP connection to the server. Based on
    GHPR#370
- Dropped patches:
  * cb4ed12f.patch - implemented upstream.
- Rebased patches:
  * openssh-7.7p1-fips.patch
  * openssh-7.8p1-role-mls.patch
  * openssh-8.0p1-gssapi-keyex.patch
- Add patches from obs:
  * Mon Mar  4 09:57:06 UTC 2024 - Pedro Monreal &lt;pmonreal@suse.com&gt;
- Add crypto-policies support [bsc#1211301]
  * Add patches:
  - openssh-9.6p1-crypto-policies.patch
  - openssh-9.6p1-crypto-policies-man.patch</changelog>
  <changelog author="opensuse@arnavion.dev" date="1712836800">- Fix duplicate loading of dropins. (boo#1222467)</changelog>
  <changelog author="alarrosa@suse.com" date="1712923200">- Make openssh-server recommend the openssh-server-config-rootlogin
  package in SLE in order to keep the same behaviour of previous
  SPs where the PermitRootLogin default was set to yes
  (bsc#1221005).
- Fix crypto-policies requirement to be set by openssh-server, not
  the config-rootlogin subpackage.
- Add back %config(noreplace) tag for more config files that were
  already set like this in previous SPs.</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- openssh-8.0p1-gssapi-keyex.patch: Added missing struct initializer,
  added missing parameter (bsc#1222840)</changelog>
  <changelog author="alarrosa@suse.com" date="1715601600">- Only for SLE15, restore the patch file removed in
  Thu Feb 18 13:54:44 UTC 2021 to restore the previous behaviour
  from SP5 of having root password login allowed by default
  (fixes bsc#1223486, related to bsc#1173067):
  * openssh-7.7p1-allow_root_password_login.patch
- Since the default value for this config option is now set to
  permit root to use password logins in SLE15, the
  openssh-server-config-rootlogin subpackage isn't useful there so
  we now create an openssh-server-config-disallow-rootlogin
  subpackage that sets the configuration the other way around
  than openssh-server-config-rootlogin.</changelog>
  <changelog author="alarrosa@suse.com" date="1715688000">- Add a warning in %post of openssh-clients, openssh-server and
  openssh-server-config-disallow-rootlogin to warn the user if
  the /etc/ssh/(ssh_config.d|sshd_config.d) directories are not
  being used (bsc#1223486).</changelog>
  <changelog author="alarrosa@suse.com" date="1719835200">- Add patch to fix a race condition in a signal handler by removing
  the async-signal-unsafe code (CVE-2024-6387, bsc#1226642):
  * fix-CVE-2024-6387.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720008000">- Add obsoletes for openssh-server-config-rootlogin since that
  package existed for a brief period of time during SLE 15 SP6/
  Leap 15.6 development but even if it was removed from the
  repositories before GM, some users might have it in their
  systems from having tried a beta/RC release (boo#1227350).
- Add #include &lt;stdlib.h&gt; in some files added by the ldap patch to
  fix build with gcc14 (boo#1225904).
  * openssh-7.7p1-ldap.patch
- Remove the recommendation for openssh-server-config-rootlogin
  from openssh-server. Since the default for that config option
  was changed in SLE it's not needed anymore in SLE nor in TW
  (boo#1224392).</changelog>
  <changelog author="alarrosa@suse.com" date="1720180800">- Add patch from upstream to fix proxy multiplexing mode:
  * 0001-upstream-fix-proxy-multiplexing-mode_-broken-when-keystroke.patch
- Add patch from upstream to restore correctly sigprocmask
  * 0001-upstream-correctly-restore-sigprocmask-around-ppoll.patch
- Add patch from upstream to fix a logic error in
  ObscureKeystrokeTiming that rendered this feature ineffective,
  allowing a passive observer to detect which network packets
  contained real keystrokes (bsc#1227318, CVE-2024-39894):
  * 0001-upstream-when-sending-ObscureKeystrokeTiming-chaff-packets_.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720612800">- Remove empty line at the end of sshd-sle.pamd (bsc#1227456)</changelog>
  <changelog author="alarrosa@suse.com" date="1728648000">- Add a patch to fix a regression introduced in 9.6 that makes X11
  forwarding very slow. Submitted to upstream in
  https://bugzilla.mindrot.org/show_bug.cgi?id=3655#c4 . Fixes
  bsc#1229449:
  * fix-x11-regression-bsc1229449.patch
- Add a openssl11 bcond to the spec file for the SLE12 case
  instead of checking suse_version in different parts.
- Move conditional patches to a number &gt;= 1000.
- Several spec file fixes so the package builds and can be
  installed in SLE 15 SP5 and SLE 12 SP5
- Drop most of openssh-6.6p1-keycat.patch (actually, it was just
  commented out). The keycat binary isn't really installed nor
  supported, so we can drop it, except for the code that is used
  by other SELinux patches, which is what I kept from that patch
  (boo#1229072).
- Add patch submitted to upstream to fix RFC4256 implementation
  so that keyboard-interactive authentication method can send
  instructions and sshd shows them to users even before a prompt
  is requested. This fixes MFA push notifications (boo#1229010).
  * 0001-auth-pam-Immediately-report-instructions-to-clients-and-fix-handling-in-ssh-client.patch
- Fix a dbus connection leaked in the logind patch that was
  missing a sd_bus_unref call (found by Matthias Gerstner):
  * logind_set_tty.patch
- Add a patch that fixes a small memory leak when parsing the
  subsystem configuration option:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1728907200">- Use %{with ...} instead of 0%{with ...}</changelog>
  <changelog author="alarrosa@suse.com" date="1739448000">- Fix a MitM attack against OpenSSH's VerifyHostKeyDNS-enabled
  client and a DoS attack against OpenSSH's client and server
  (bsc#1237040, CVE-2025-26465, bsc#1237041, CVE-2025-26466):
  * fix-CVE-2025-26465-and-CVE-2025-26466.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1739880000">- Fix ssh client segfault with GSSAPIKeyExchange=yes in ssh_kex2
  due to gssapi proposal not being correctly initialized
  (bsc#1236826). The problem was introduced in the rebase of
  the patch for 9.6p1:
  * openssh-8.0p1-gssapi-keyex.patch
- Rebase patch and apply it:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="hpj@suse.com" date="1746532800">- Added openssh-cve-2025-32728.patch (bsc#1241012, CVE-2025-32728).
  This fixes an upstream logic error handling the DisableForwarding
  option.</changelog>
  <changelog author="alarrosa@suse.com" date="1747137600">- Enable --with-logind to call the SetTTY dbus method in systemd.
  This allows "wall" to print messages in ssh ttys (bsc#1239671)
- Small fixes to unref the dbus session when any error occurs:
  * logind_set_tty.patch</changelog>
  <changelog author="hpj@suse.com" date="1748952000">- Add openssh-scp-umask-preserve-permissions.patch (bsc#1241667).</changelog>
  <changelog author="hpj@suse.com" date="1762516800">- Add openssh-cve-2025-61984-username-validation.patch
  (bsc#1251198, CVE-2025-61984).
- Add openssh-cve-2025-61985-nul-url-encode.patch
  (bsc#1251199, CVE-2025-61985).</changelog>
  <changelog author="hpj@suse.com" date="1778241600">- Added openssh-cve-2026-35385-scp-setuid-modes.patch (bsc#1261427),
  ensuring setuid bits default to being masked out by scp.
- Added openssh-cve-2026-35414-mishandled-ca-commas.patch
  (bsc#1261430), fixing mishandling of comma characters in CA in
  certain situations.</changelog>
</package>
<package pkgid="e63ba7ad4132ca5a33480ec561f4a02ed64572a32b38112194f06646459838fc" name="openssh" arch="x86_64">
  <version epoch="0" ver="9.6p1" rel="150600.6.37.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1712059200">- Rebase openssh-7.7p1-fips.patch (bsc#1221928)
  Remove OPENSSL_HAVE_EVPGCM-ifdef, which is no longer supported by upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1712577600">- Update to openssh 9.6p1:
  = Security
  * ssh(1), sshd(8): implement protocol extensions to thwart the
    so-called "Terrapin attack" discovered by Fabian Bäumer, Marcus
    Brinkmann and Jörg Schwenk. This attack allows a MITM to effect a
    limited break of the integrity of the early encrypted SSH transport
    protocol by sending extra messages prior to the commencement of
    encryption, and deleting an equal number of consecutive messages
    immediately after encryption starts. A peer SSH client/server
    would not be able to detect that messages were deleted
    (bsc#1217950, CVE-2023-48795).
  * ssh-agent(1): when adding PKCS#11-hosted private keys while
    specifying destination constraints, if the PKCS#11 token returned
    multiple keys then only the first key had the constraints applied.
    Use of regular private keys, FIDO tokens and unconstrained keys
    are unaffected.
  * ssh(1): if an invalid user or hostname that contained shell
    metacharacters was passed to ssh(1), and a ProxyCommand,
    LocalCommand directive or "match exec" predicate referenced the
    user or hostname via %u, %h or similar expansion token, then
    an attacker who could supply arbitrary user/hostnames to ssh(1)
    could potentially perform command injection depending on what
    quoting was present in the user-supplied ssh_config(5) directive
    (bsc#1218215, CVE-2023-51385).
  = Potentially incompatible changes
  * ssh(1), sshd(8): the RFC4254 connection/channels protocol provides
    a TCP-like window mechanism that limits the amount of data that
    can be sent without acceptance from the peer. In cases where this
    limit was exceeded by a non-conforming peer SSH implementation,
    ssh(1)/sshd(8) previously discarded the extra data. From OpenSSH
    9.6, ssh(1)/sshd(8) will now terminate the connection if a peer
    exceeds the window limit by more than a small grace factor. This
    change should have no effect of SSH implementations that follow
    the specification.
  = New features
  * ssh(1): add a %j token that expands to the configured ProxyJump
    hostname (or the empty string if this option is not being used)
    that can be used in a number of ssh_config(5) keywords. bz3610
  * ssh(1): add ChannelTimeout support to the client, mirroring the
    same option in the server and allowing ssh(1) to terminate
    quiescent channels.
  * ssh(1), sshd(8), ssh-add(1), ssh-keygen(1): add support for
    reading ED25519 private keys in PEM PKCS8 format. Previously
    only the OpenSSH private key format was supported.
  * ssh(1), sshd(8): introduce a protocol extension to allow
    renegotiation of acceptable signature algorithms for public key
    authentication after the server has learned the username being
    used for authentication. This allows varying sshd_config(5)
    PubkeyAcceptedAlgorithms in a "Match user" block.
  * ssh-add(1), ssh-agent(1): add an agent protocol extension to allow
    specifying certificates when loading PKCS#11 keys. This allows the
    use of certificates backed by PKCS#11 private keys in all OpenSSH
    tools that support ssh-agent(1). Previously only ssh(1) supported
    this use-case.
  = Bugfixes
  * ssh(1): when deciding whether to enable the keystroke timing
    obfuscation, enable it only if a channel with a TTY is active.
  * ssh(1): switch mainloop from poll(3) to ppoll(3) and mask signals
    before checking flags set in signal handler. Avoids potential
    race condition between signaling ssh to exit and polling. bz3531
  * ssh(1): when connecting to a destination with both the
    AddressFamily and CanonicalizeHostname directives in use,
    the AddressFamily directive could be ignored. bz5326
  * sftp(1): correct handling of the limits@openssh.com option when
    the server returned an unexpected message.
  * A number of fixes to the PuTTY and Dropbear regress/integration
    tests.
  * ssh(1): release GSS OIDs only at end of authentication, avoiding
    unnecessary init/cleanup cycles. bz2982
  * ssh_config(5): mention "none" is a valid argument to IdentityFile
    in the manual. bz3080
  * scp(1): improved debugging for paths from the server rejected for
    not matching the client's glob(3) pattern in old SCP/RCP protocol
    mode.
  * ssh-agent(1): refuse signing operations on destination-constrained
    keys if a previous session-bind operation has failed. This may
    prevent a fail-open situation in future if a user uses a mismatched
    ssh(1) client and ssh-agent(1) where the client supports a key type
    that the agent does not support.
- Update to openssh 9.5p1:
  = Potentially incompatible changes
  * ssh-keygen(1): generate Ed25519 keys by default. Ed25519 public keys
    are very convenient due to their small size. Ed25519 keys are
    specified in RFC 8709 and OpenSSH has supported them since version 6.5
    (January 2014).
  * sshd(8): the Subsystem directive now accurately preserves quoting of
    subsystem commands and arguments. This may change behaviour for exotic
    configurations, but the most common subsystem configuration
    (sftp-server) is unlikely to be affected.
  = New features
  * ssh(1): add keystroke timing obfuscation to the client. This attempts
    to hide inter-keystroke timings by sending interactive traffic at
    fixed intervals (default: every 20ms) when there is only a small
    amount of data being sent. It also sends fake "chaff" keystrokes for
    a random interval after the last real keystroke. These are
    controlled by a new ssh_config ObscureKeystrokeTiming keyword.
  * ssh(1), sshd(8): Introduce a transport-level ping facility. This adds
    a pair of SSH transport protocol messages SSH2_MSG_PING/PONG to
    implement a ping capability. These messages use numbers in the "local
    extensions" number space and are advertised using a "ping@openssh.com"
    ext-info message with a string version number of "0".
  * sshd(8): allow override of Subsystem directives in sshd Match blocks.
  = Bugfixes
  * scp(1): fix scp in SFTP mode recursive upload and download of
    directories that contain symlinks to other directories. In scp mode,
    the links would be followed, but in SFTP mode they were not. bz3611
  * ssh-keygen(1): handle cr+lf (instead of just cr) line endings in
    sshsig signature files.
  * ssh(1): interactive mode for ControlPersist sessions if they
    originally requested a tty.
  * sshd(8): make PerSourceMaxStartups first-match-wins
  * sshd(8): limit artificial login delay to a reasonable maximum (5s)
    and don't delay at all for the "none" authentication mechanism.
    bz3602
  * sshd(8): Log errors in kex_exchange_identification() with level
    verbose instead of error to reduce preauth log spam. All of those
    get logged with a more generic error message by sshpkt_fatal().
  * sshd(8): correct math for ClientAliveInterval that caused the probes
    to be sent less frequently than configured.
  * ssh(1): fix regression in OpenSSH 9.4 (mux.c r1.99) that caused
    multiplexed sessions to ignore SIGINT under some circumstances.
- Update to openssh 9.4p1:
  = Potentially incompatible changes
  * This release removes support for older versions of libcrypto.
    OpenSSH now requires LibreSSL &gt;= 3.1.0 or OpenSSL &gt;= 1.1.1.
    Note that these versions are already deprecated by their upstream
    vendors.
  * ssh-agent(1): PKCS#11 modules must now be specified by their full
    paths. Previously dlopen(3) could search for them in system
    library directories.
  = New features
  * ssh(1): allow forwarding Unix Domain sockets via ssh -W.
  * ssh(1): add support for configuration tags to ssh(1).
    This adds a ssh_config(5) "Tag" directive and corresponding
    "Match tag" predicate that may be used to select blocks of
    configuration similar to the pf.conf(5) keywords of the same
    name.
  * ssh(1): add a "match localnetwork" predicate. This allows matching
    on the addresses of available network interfaces and may be used to
    vary the effective client configuration based on network location.
  * ssh(1), sshd(8), ssh-keygen(1): infrastructure support for KRL
    extensions.  This defines wire formats for optional KRL extensions
    and implements parsing of the new submessages. No actual extensions
    are supported at this point.
  * sshd(8): AuthorizedPrincipalsCommand and AuthorizedKeysCommand now
    accept two additional %-expansion sequences: %D which expands to
    the routing domain of the connected session and %C which expands
    to the addresses and port numbers for the source and destination
    of the connection.
  * ssh-keygen(1): increase the default work factor (rounds) for the
    bcrypt KDF used to derive symmetric encryption keys for passphrase
    protected key files by 50%.
  = Bugfixes
  * ssh-agent(1): improve isolation between loaded PKCS#11 modules
    by running separate ssh-pkcs11-helpers for each loaded provider.
  * ssh(1): make -f (fork after authentication) work correctly with
    multiplexed connections, including ControlPersist. bz3589 bz3589
  * ssh(1): make ConnectTimeout apply to multiplexing sockets and not
    just to network connections.
  * ssh-agent(1), ssh(1): improve defences against invalid PKCS#11
    modules being loaded by checking that the requested module
    contains the required symbol before loading it.
  * sshd(8): fix AuthorizedPrincipalsCommand when AuthorizedKeysCommand
    appears before it in sshd_config. Since OpenSSH 8.7 the
    AuthorizedPrincipalsCommand directive was incorrectly ignored in
    this situation. bz3574
  * sshd(8), ssh(1), ssh-keygen(1): remove vestigal support for KRL
    signatures When the KRL format was originally defined, it included
    support for signing of KRL objects. However, the code to sign KRLs
    and verify KRL signatues was never completed in OpenSSH. This
    release removes the partially-implemented code to verify KRLs.
    All OpenSSH tools now ignore KRL_SECTION_SIGNATURE sections in
    KRL files.
  * All: fix a number of memory leaks and unreachable/harmless integer
    overflows.
  * ssh-agent(1), ssh(1): don't truncate strings logged from PKCS#11
    modules; GHPR406
  * sshd(8), ssh(1): better validate CASignatureAlgorithms in
    ssh_config and sshd_config. Previously this directive would accept
    certificate algorithm names, but these were unusable in practice as
    OpenSSH does not support CA chains. bz3577
  * ssh(1): make `ssh -Q CASignatureAlgorithms` only list signature
    algorithms that are valid for CA signing. Previous behaviour was
    to list all signing algorithms, including certificate algorithms.
  * ssh-keyscan(1): gracefully handle systems where rlimits or the
    maximum number of open files is larger than INT_MAX; bz3581
  * ssh-keygen(1): fix "no comment" not showing on when running
    `ssh-keygen -l` on multiple keys where one has a comment and other
    following keys do not. bz3580
  * scp(1), sftp(1): adjust ftruncate() logic to handle servers that
    reorder requests. Previously, if the server reordered requests then
    the resultant file would be erroneously truncated.
  * ssh(1): don't incorrectly disable hostname canonicalization when
    CanonicalizeHostname=yes and ProxyJump was expicitly set to
    "none". bz3567
  * scp(1): when copying local-&gt;remote, check that the source file
    exists before opening an SFTP connection to the server. Based on
    GHPR#370
- Dropped patches:
  * cb4ed12f.patch - implemented upstream.
- Rebased patches:
  * openssh-7.7p1-fips.patch
  * openssh-7.8p1-role-mls.patch
  * openssh-8.0p1-gssapi-keyex.patch
- Add patches from obs:
  * Mon Mar  4 09:57:06 UTC 2024 - Pedro Monreal &lt;pmonreal@suse.com&gt;
- Add crypto-policies support [bsc#1211301]
  * Add patches:
  - openssh-9.6p1-crypto-policies.patch
  - openssh-9.6p1-crypto-policies-man.patch</changelog>
  <changelog author="opensuse@arnavion.dev" date="1712836800">- Fix duplicate loading of dropins. (boo#1222467)</changelog>
  <changelog author="alarrosa@suse.com" date="1712923200">- Make openssh-server recommend the openssh-server-config-rootlogin
  package in SLE in order to keep the same behaviour of previous
  SPs where the PermitRootLogin default was set to yes
  (bsc#1221005).
- Fix crypto-policies requirement to be set by openssh-server, not
  the config-rootlogin subpackage.
- Add back %config(noreplace) tag for more config files that were
  already set like this in previous SPs.</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- openssh-8.0p1-gssapi-keyex.patch: Added missing struct initializer,
  added missing parameter (bsc#1222840)</changelog>
  <changelog author="alarrosa@suse.com" date="1715601600">- Only for SLE15, restore the patch file removed in
  Thu Feb 18 13:54:44 UTC 2021 to restore the previous behaviour
  from SP5 of having root password login allowed by default
  (fixes bsc#1223486, related to bsc#1173067):
  * openssh-7.7p1-allow_root_password_login.patch
- Since the default value for this config option is now set to
  permit root to use password logins in SLE15, the
  openssh-server-config-rootlogin subpackage isn't useful there so
  we now create an openssh-server-config-disallow-rootlogin
  subpackage that sets the configuration the other way around
  than openssh-server-config-rootlogin.</changelog>
  <changelog author="alarrosa@suse.com" date="1715688000">- Add a warning in %post of openssh-clients, openssh-server and
  openssh-server-config-disallow-rootlogin to warn the user if
  the /etc/ssh/(ssh_config.d|sshd_config.d) directories are not
  being used (bsc#1223486).</changelog>
  <changelog author="alarrosa@suse.com" date="1719835200">- Add patch to fix a race condition in a signal handler by removing
  the async-signal-unsafe code (CVE-2024-6387, bsc#1226642):
  * fix-CVE-2024-6387.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720008000">- Add obsoletes for openssh-server-config-rootlogin since that
  package existed for a brief period of time during SLE 15 SP6/
  Leap 15.6 development but even if it was removed from the
  repositories before GM, some users might have it in their
  systems from having tried a beta/RC release (boo#1227350).
- Add #include &lt;stdlib.h&gt; in some files added by the ldap patch to
  fix build with gcc14 (boo#1225904).
  * openssh-7.7p1-ldap.patch
- Remove the recommendation for openssh-server-config-rootlogin
  from openssh-server. Since the default for that config option
  was changed in SLE it's not needed anymore in SLE nor in TW
  (boo#1224392).</changelog>
  <changelog author="alarrosa@suse.com" date="1720180800">- Add patch from upstream to fix proxy multiplexing mode:
  * 0001-upstream-fix-proxy-multiplexing-mode_-broken-when-keystroke.patch
- Add patch from upstream to restore correctly sigprocmask
  * 0001-upstream-correctly-restore-sigprocmask-around-ppoll.patch
- Add patch from upstream to fix a logic error in
  ObscureKeystrokeTiming that rendered this feature ineffective,
  allowing a passive observer to detect which network packets
  contained real keystrokes (bsc#1227318, CVE-2024-39894):
  * 0001-upstream-when-sending-ObscureKeystrokeTiming-chaff-packets_.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720612800">- Remove empty line at the end of sshd-sle.pamd (bsc#1227456)</changelog>
  <changelog author="alarrosa@suse.com" date="1728648000">- Add a patch to fix a regression introduced in 9.6 that makes X11
  forwarding very slow. Submitted to upstream in
  https://bugzilla.mindrot.org/show_bug.cgi?id=3655#c4 . Fixes
  bsc#1229449:
  * fix-x11-regression-bsc1229449.patch
- Add a openssl11 bcond to the spec file for the SLE12 case
  instead of checking suse_version in different parts.
- Move conditional patches to a number &gt;= 1000.
- Several spec file fixes so the package builds and can be
  installed in SLE 15 SP5 and SLE 12 SP5
- Drop most of openssh-6.6p1-keycat.patch (actually, it was just
  commented out). The keycat binary isn't really installed nor
  supported, so we can drop it, except for the code that is used
  by other SELinux patches, which is what I kept from that patch
  (boo#1229072).
- Add patch submitted to upstream to fix RFC4256 implementation
  so that keyboard-interactive authentication method can send
  instructions and sshd shows them to users even before a prompt
  is requested. This fixes MFA push notifications (boo#1229010).
  * 0001-auth-pam-Immediately-report-instructions-to-clients-and-fix-handling-in-ssh-client.patch
- Fix a dbus connection leaked in the logind patch that was
  missing a sd_bus_unref call (found by Matthias Gerstner):
  * logind_set_tty.patch
- Add a patch that fixes a small memory leak when parsing the
  subsystem configuration option:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1728907200">- Use %{with ...} instead of 0%{with ...}</changelog>
  <changelog author="alarrosa@suse.com" date="1739448000">- Fix a MitM attack against OpenSSH's VerifyHostKeyDNS-enabled
  client and a DoS attack against OpenSSH's client and server
  (bsc#1237040, CVE-2025-26465, bsc#1237041, CVE-2025-26466):
  * fix-CVE-2025-26465-and-CVE-2025-26466.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1739880000">- Fix ssh client segfault with GSSAPIKeyExchange=yes in ssh_kex2
  due to gssapi proposal not being correctly initialized
  (bsc#1236826). The problem was introduced in the rebase of
  the patch for 9.6p1:
  * openssh-8.0p1-gssapi-keyex.patch
- Rebase patch and apply it:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="hpj@suse.com" date="1746532800">- Added openssh-cve-2025-32728.patch (bsc#1241012, CVE-2025-32728).
  This fixes an upstream logic error handling the DisableForwarding
  option.</changelog>
  <changelog author="alarrosa@suse.com" date="1747137600">- Enable --with-logind to call the SetTTY dbus method in systemd.
  This allows "wall" to print messages in ssh ttys (bsc#1239671)
- Small fixes to unref the dbus session when any error occurs:
  * logind_set_tty.patch</changelog>
  <changelog author="hpj@suse.com" date="1748952000">- Add openssh-scp-umask-preserve-permissions.patch (bsc#1241667).</changelog>
  <changelog author="hpj@suse.com" date="1762516800">- Add openssh-cve-2025-61984-username-validation.patch
  (bsc#1251198, CVE-2025-61984).
- Add openssh-cve-2025-61985-nul-url-encode.patch
  (bsc#1251199, CVE-2025-61985).</changelog>
  <changelog author="hpj@suse.com" date="1778241600">- Added openssh-cve-2026-35385-scp-setuid-modes.patch (bsc#1261427),
  ensuring setuid bits default to being masked out by scp.
- Added openssh-cve-2026-35414-mishandled-ca-commas.patch
  (bsc#1261430), fixing mishandling of comma characters in CA in
  certain situations.</changelog>
</package>
<package pkgid="9c2aa047d757aadae239285f82ed725b09cc0eb81233e824fbf4bfd34fa6885a" name="openssh-clients" arch="x86_64">
  <version epoch="0" ver="9.6p1" rel="150600.6.26.1"/>
  <changelog author="hpj@suse.com" date="1700827200">- Merge updates from openSUSE. Existing patches were rebased.
- Remove openssh-7.6p1-audit_race_condition.patch: Merged with
  audit patch.
- Remove openssh-CVE-2021-28041-agent-double-free.patch: Fixed
  upstream.
- Remove openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch:
  Fixed upstream.
- Remove openssh-CVE-2023-38408-PKCS11-execution.patch: Fixed
  upstream.
- Add cb4ed12f.patch from upstream, allowing newer versions of
  zlib to be used.
- Add logind_set_tty.patch by Thorsten Kukuk. This informs
  systemd-logind of the login TTY and prevents having to parse utmp,
  which is deprecated by glibc.</changelog>
  <changelog author="alarrosa@suse.com" date="1710244800">- Uncomment %sysuser_requires in openssh-server which was commented
  by mistake and is needed by the pre script installed with
  %sysusers_generate_pre (bsc#1220802).</changelog>
  <changelog author="alarrosa@suse.com" date="1712059200">- Use %config(noreplace) for sshd_config . In any case, it's
  recommended to drop a file in sshd_config.d instead of editing
  sshd_config (bsc#1221063)
- Add patches from obs package that were also in SP3/SP4/SP5:
  * Fri Nov  3 10:44:14 UTC 2023 - Johannes Segitz &lt;jsegitz@suse.com&gt;
  - Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712059201">- Rebase openssh-7.7p1-fips.patch (bsc#1221928)
  Remove OPENSSL_HAVE_EVPGCM-ifdef, which is no longer supported by upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1712577600">- Update to openssh 9.6p1:
  = Security
  * ssh(1), sshd(8): implement protocol extensions to thwart the
    so-called "Terrapin attack" discovered by Fabian Bäumer, Marcus
    Brinkmann and Jörg Schwenk. This attack allows a MITM to effect a
    limited break of the integrity of the early encrypted SSH transport
    protocol by sending extra messages prior to the commencement of
    encryption, and deleting an equal number of consecutive messages
    immediately after encryption starts. A peer SSH client/server
    would not be able to detect that messages were deleted
    (bsc#1217950, CVE-2023-48795).
  * ssh-agent(1): when adding PKCS#11-hosted private keys while
    specifying destination constraints, if the PKCS#11 token returned
    multiple keys then only the first key had the constraints applied.
    Use of regular private keys, FIDO tokens and unconstrained keys
    are unaffected.
  * ssh(1): if an invalid user or hostname that contained shell
    metacharacters was passed to ssh(1), and a ProxyCommand,
    LocalCommand directive or "match exec" predicate referenced the
    user or hostname via %u, %h or similar expansion token, then
    an attacker who could supply arbitrary user/hostnames to ssh(1)
    could potentially perform command injection depending on what
    quoting was present in the user-supplied ssh_config(5) directive
    (bsc#1218215, CVE-2023-51385).
  = Potentially incompatible changes
  * ssh(1), sshd(8): the RFC4254 connection/channels protocol provides
    a TCP-like window mechanism that limits the amount of data that
    can be sent without acceptance from the peer. In cases where this
    limit was exceeded by a non-conforming peer SSH implementation,
    ssh(1)/sshd(8) previously discarded the extra data. From OpenSSH
    9.6, ssh(1)/sshd(8) will now terminate the connection if a peer
    exceeds the window limit by more than a small grace factor. This
    change should have no effect of SSH implementations that follow
    the specification.
  = New features
  * ssh(1): add a %j token that expands to the configured ProxyJump
    hostname (or the empty string if this option is not being used)
    that can be used in a number of ssh_config(5) keywords. bz3610
  * ssh(1): add ChannelTimeout support to the client, mirroring the
    same option in the server and allowing ssh(1) to terminate
    quiescent channels.
  * ssh(1), sshd(8), ssh-add(1), ssh-keygen(1): add support for
    reading ED25519 private keys in PEM PKCS8 format. Previously
    only the OpenSSH private key format was supported.
  * ssh(1), sshd(8): introduce a protocol extension to allow
    renegotiation of acceptable signature algorithms for public key
    authentication after the server has learned the username being
    used for authentication. This allows varying sshd_config(5)
    PubkeyAcceptedAlgorithms in a "Match user" block.
  * ssh-add(1), ssh-agent(1): add an agent protocol extension to allow
    specifying certificates when loading PKCS#11 keys. This allows the
    use of certificates backed by PKCS#11 private keys in all OpenSSH
    tools that support ssh-agent(1). Previously only ssh(1) supported
    this use-case.
  = Bugfixes
  * ssh(1): when deciding whether to enable the keystroke timing
    obfuscation, enable it only if a channel with a TTY is active.
  * ssh(1): switch mainloop from poll(3) to ppoll(3) and mask signals
    before checking flags set in signal handler. Avoids potential
    race condition between signaling ssh to exit and polling. bz3531
  * ssh(1): when connecting to a destination with both the
    AddressFamily and CanonicalizeHostname directives in use,
    the AddressFamily directive could be ignored. bz5326
  * sftp(1): correct handling of the limits@openssh.com option when
    the server returned an unexpected message.
  * A number of fixes to the PuTTY and Dropbear regress/integration
    tests.
  * ssh(1): release GSS OIDs only at end of authentication, avoiding
    unnecessary init/cleanup cycles. bz2982
  * ssh_config(5): mention "none" is a valid argument to IdentityFile
    in the manual. bz3080
  * scp(1): improved debugging for paths from the server rejected for
    not matching the client's glob(3) pattern in old SCP/RCP protocol
    mode.
  * ssh-agent(1): refuse signing operations on destination-constrained
    keys if a previous session-bind operation has failed. This may
    prevent a fail-open situation in future if a user uses a mismatched
    ssh(1) client and ssh-agent(1) where the client supports a key type
    that the agent does not support.
- Update to openssh 9.5p1:
  = Potentially incompatible changes
  * ssh-keygen(1): generate Ed25519 keys by default. Ed25519 public keys
    are very convenient due to their small size. Ed25519 keys are
    specified in RFC 8709 and OpenSSH has supported them since version 6.5
    (January 2014).
  * sshd(8): the Subsystem directive now accurately preserves quoting of
    subsystem commands and arguments. This may change behaviour for exotic
    configurations, but the most common subsystem configuration
    (sftp-server) is unlikely to be affected.
  = New features
  * ssh(1): add keystroke timing obfuscation to the client. This attempts
    to hide inter-keystroke timings by sending interactive traffic at
    fixed intervals (default: every 20ms) when there is only a small
    amount of data being sent. It also sends fake "chaff" keystrokes for
    a random interval after the last real keystroke. These are
    controlled by a new ssh_config ObscureKeystrokeTiming keyword.
  * ssh(1), sshd(8): Introduce a transport-level ping facility. This adds
    a pair of SSH transport protocol messages SSH2_MSG_PING/PONG to
    implement a ping capability. These messages use numbers in the "local
    extensions" number space and are advertised using a "ping@openssh.com"
    ext-info message with a string version number of "0".
  * sshd(8): allow override of Subsystem directives in sshd Match blocks.
  = Bugfixes
  * scp(1): fix scp in SFTP mode recursive upload and download of
    directories that contain symlinks to other directories. In scp mode,
    the links would be followed, but in SFTP mode they were not. bz3611
  * ssh-keygen(1): handle cr+lf (instead of just cr) line endings in
    sshsig signature files.
  * ssh(1): interactive mode for ControlPersist sessions if they
    originally requested a tty.
  * sshd(8): make PerSourceMaxStartups first-match-wins
  * sshd(8): limit artificial login delay to a reasonable maximum (5s)
    and don't delay at all for the "none" authentication mechanism.
    bz3602
  * sshd(8): Log errors in kex_exchange_identification() with level
    verbose instead of error to reduce preauth log spam. All of those
    get logged with a more generic error message by sshpkt_fatal().
  * sshd(8): correct math for ClientAliveInterval that caused the probes
    to be sent less frequently than configured.
  * ssh(1): fix regression in OpenSSH 9.4 (mux.c r1.99) that caused
    multiplexed sessions to ignore SIGINT under some circumstances.
- Update to openssh 9.4p1:
  = Potentially incompatible changes
  * This release removes support for older versions of libcrypto.
    OpenSSH now requires LibreSSL &gt;= 3.1.0 or OpenSSL &gt;= 1.1.1.
    Note that these versions are already deprecated by their upstream
    vendors.
  * ssh-agent(1): PKCS#11 modules must now be specified by their full
    paths. Previously dlopen(3) could search for them in system
    library directories.
  = New features
  * ssh(1): allow forwarding Unix Domain sockets via ssh -W.
  * ssh(1): add support for configuration tags to ssh(1).
    This adds a ssh_config(5) "Tag" directive and corresponding
    "Match tag" predicate that may be used to select blocks of
    configuration similar to the pf.conf(5) keywords of the same
    name.
  * ssh(1): add a "match localnetwork" predicate. This allows matching
    on the addresses of available network interfaces and may be used to
    vary the effective client configuration based on network location.
  * ssh(1), sshd(8), ssh-keygen(1): infrastructure support for KRL
    extensions.  This defines wire formats for optional KRL extensions
    and implements parsing of the new submessages. No actual extensions
    are supported at this point.
  * sshd(8): AuthorizedPrincipalsCommand and AuthorizedKeysCommand now
    accept two additional %-expansion sequences: %D which expands to
    the routing domain of the connected session and %C which expands
    to the addresses and port numbers for the source and destination
    of the connection.
  * ssh-keygen(1): increase the default work factor (rounds) for the
    bcrypt KDF used to derive symmetric encryption keys for passphrase
    protected key files by 50%.
  = Bugfixes
  * ssh-agent(1): improve isolation between loaded PKCS#11 modules
    by running separate ssh-pkcs11-helpers for each loaded provider.
  * ssh(1): make -f (fork after authentication) work correctly with
    multiplexed connections, including ControlPersist. bz3589 bz3589
  * ssh(1): make ConnectTimeout apply to multiplexing sockets and not
    just to network connections.
  * ssh-agent(1), ssh(1): improve defences against invalid PKCS#11
    modules being loaded by checking that the requested module
    contains the required symbol before loading it.
  * sshd(8): fix AuthorizedPrincipalsCommand when AuthorizedKeysCommand
    appears before it in sshd_config. Since OpenSSH 8.7 the
    AuthorizedPrincipalsCommand directive was incorrectly ignored in
    this situation. bz3574
  * sshd(8), ssh(1), ssh-keygen(1): remove vestigal support for KRL
    signatures When the KRL format was originally defined, it included
    support for signing of KRL objects. However, the code to sign KRLs
    and verify KRL signatues was never completed in OpenSSH. This
    release removes the partially-implemented code to verify KRLs.
    All OpenSSH tools now ignore KRL_SECTION_SIGNATURE sections in
    KRL files.
  * All: fix a number of memory leaks and unreachable/harmless integer
    overflows.
  * ssh-agent(1), ssh(1): don't truncate strings logged from PKCS#11
    modules; GHPR406
  * sshd(8), ssh(1): better validate CASignatureAlgorithms in
    ssh_config and sshd_config. Previously this directive would accept
    certificate algorithm names, but these were unusable in practice as
    OpenSSH does not support CA chains. bz3577
  * ssh(1): make `ssh -Q CASignatureAlgorithms` only list signature
    algorithms that are valid for CA signing. Previous behaviour was
    to list all signing algorithms, including certificate algorithms.
  * ssh-keyscan(1): gracefully handle systems where rlimits or the
    maximum number of open files is larger than INT_MAX; bz3581
  * ssh-keygen(1): fix "no comment" not showing on when running
    `ssh-keygen -l` on multiple keys where one has a comment and other
    following keys do not. bz3580
  * scp(1), sftp(1): adjust ftruncate() logic to handle servers that
    reorder requests. Previously, if the server reordered requests then
    the resultant file would be erroneously truncated.
  * ssh(1): don't incorrectly disable hostname canonicalization when
    CanonicalizeHostname=yes and ProxyJump was expicitly set to
    "none". bz3567
  * scp(1): when copying local-&gt;remote, check that the source file
    exists before opening an SFTP connection to the server. Based on
    GHPR#370
- Dropped patches:
  * cb4ed12f.patch - implemented upstream.
- Rebased patches:
  * openssh-7.7p1-fips.patch
  * openssh-7.8p1-role-mls.patch
  * openssh-8.0p1-gssapi-keyex.patch
- Add patches from obs:
  * Mon Mar  4 09:57:06 UTC 2024 - Pedro Monreal &lt;pmonreal@suse.com&gt;
- Add crypto-policies support [bsc#1211301]
  * Add patches:
  - openssh-9.6p1-crypto-policies.patch
  - openssh-9.6p1-crypto-policies-man.patch</changelog>
  <changelog author="opensuse@arnavion.dev" date="1712836800">- Fix duplicate loading of dropins. (boo#1222467)</changelog>
  <changelog author="alarrosa@suse.com" date="1712923200">- Make openssh-server recommend the openssh-server-config-rootlogin
  package in SLE in order to keep the same behaviour of previous
  SPs where the PermitRootLogin default was set to yes
  (bsc#1221005).
- Fix crypto-policies requirement to be set by openssh-server, not
  the config-rootlogin subpackage.
- Add back %config(noreplace) tag for more config files that were
  already set like this in previous SPs.</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- openssh-8.0p1-gssapi-keyex.patch: Added missing struct initializer,
  added missing parameter (bsc#1222840)</changelog>
  <changelog author="alarrosa@suse.com" date="1715601600">- Only for SLE15, restore the patch file removed in
  Thu Feb 18 13:54:44 UTC 2021 to restore the previous behaviour
  from SP5 of having root password login allowed by default
  (fixes bsc#1223486, related to bsc#1173067):
  * openssh-7.7p1-allow_root_password_login.patch
- Since the default value for this config option is now set to
  permit root to use password logins in SLE15, the
  openssh-server-config-rootlogin subpackage isn't useful there so
  we now create an openssh-server-config-disallow-rootlogin
  subpackage that sets the configuration the other way around
  than openssh-server-config-rootlogin.</changelog>
  <changelog author="alarrosa@suse.com" date="1715688000">- Add a warning in %post of openssh-clients, openssh-server and
  openssh-server-config-disallow-rootlogin to warn the user if
  the /etc/ssh/(ssh_config.d|sshd_config.d) directories are not
  being used (bsc#1223486).</changelog>
  <changelog author="alarrosa@suse.com" date="1719835200">- Add patch to fix a race condition in a signal handler by removing
  the async-signal-unsafe code (CVE-2024-6387, bsc#1226642):
  * fix-CVE-2024-6387.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720008000">- Add obsoletes for openssh-server-config-rootlogin since that
  package existed for a brief period of time during SLE 15 SP6/
  Leap 15.6 development but even if it was removed from the
  repositories before GM, some users might have it in their
  systems from having tried a beta/RC release (boo#1227350).
- Add #include &lt;stdlib.h&gt; in some files added by the ldap patch to
  fix build with gcc14 (boo#1225904).
  * openssh-7.7p1-ldap.patch
- Remove the recommendation for openssh-server-config-rootlogin
  from openssh-server. Since the default for that config option
  was changed in SLE it's not needed anymore in SLE nor in TW
  (boo#1224392).</changelog>
  <changelog author="alarrosa@suse.com" date="1720180800">- Add patch from upstream to fix proxy multiplexing mode:
  * 0001-upstream-fix-proxy-multiplexing-mode_-broken-when-keystroke.patch
- Add patch from upstream to restore correctly sigprocmask
  * 0001-upstream-correctly-restore-sigprocmask-around-ppoll.patch
- Add patch from upstream to fix a logic error in
  ObscureKeystrokeTiming that rendered this feature ineffective,
  allowing a passive observer to detect which network packets
  contained real keystrokes (bsc#1227318, CVE-2024-39894):
  * 0001-upstream-when-sending-ObscureKeystrokeTiming-chaff-packets_.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720612800">- Remove empty line at the end of sshd-sle.pamd (bsc#1227456)</changelog>
  <changelog author="alarrosa@suse.com" date="1728648000">- Add a patch to fix a regression introduced in 9.6 that makes X11
  forwarding very slow. Submitted to upstream in
  https://bugzilla.mindrot.org/show_bug.cgi?id=3655#c4 . Fixes
  bsc#1229449:
  * fix-x11-regression-bsc1229449.patch
- Add a openssl11 bcond to the spec file for the SLE12 case
  instead of checking suse_version in different parts.
- Move conditional patches to a number &gt;= 1000.
- Several spec file fixes so the package builds and can be
  installed in SLE 15 SP5 and SLE 12 SP5
- Drop most of openssh-6.6p1-keycat.patch (actually, it was just
  commented out). The keycat binary isn't really installed nor
  supported, so we can drop it, except for the code that is used
  by other SELinux patches, which is what I kept from that patch
  (boo#1229072).
- Add patch submitted to upstream to fix RFC4256 implementation
  so that keyboard-interactive authentication method can send
  instructions and sshd shows them to users even before a prompt
  is requested. This fixes MFA push notifications (boo#1229010).
  * 0001-auth-pam-Immediately-report-instructions-to-clients-and-fix-handling-in-ssh-client.patch
- Fix a dbus connection leaked in the logind patch that was
  missing a sd_bus_unref call (found by Matthias Gerstner):
  * logind_set_tty.patch
- Add a patch that fixes a small memory leak when parsing the
  subsystem configuration option:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1728907200">- Use %{with ...} instead of 0%{with ...}</changelog>
  <changelog author="alarrosa@suse.com" date="1739448000">- Fix a MitM attack against OpenSSH's VerifyHostKeyDNS-enabled
  client and a DoS attack against OpenSSH's client and server
  (bsc#1237040, CVE-2025-26465, bsc#1237041, CVE-2025-26466):
  * fix-CVE-2025-26465-and-CVE-2025-26466.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1739880000">- Fix ssh client segfault with GSSAPIKeyExchange=yes in ssh_kex2
  due to gssapi proposal not being correctly initialized
  (bsc#1236826). The problem was introduced in the rebase of
  the patch for 9.6p1:
  * openssh-8.0p1-gssapi-keyex.patch
- Rebase patch and apply it:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="hpj@suse.com" date="1746532800">- Added openssh-cve-2025-32728.patch (bsc#1241012, CVE-2025-32728).
  This fixes an upstream logic error handling the DisableForwarding
  option.</changelog>
  <changelog author="alarrosa@suse.com" date="1747137600">- Enable --with-logind to call the SetTTY dbus method in systemd.
  This allows "wall" to print messages in ssh ttys (bsc#1239671)
- Small fixes to unref the dbus session when any error occurs:
  * logind_set_tty.patch</changelog>
</package>
<package pkgid="31e04a68b49d3a87ef359e6e924397c7c87a49f8155ab716de757e4f62851fc8" name="openssh-clients" arch="x86_64">
  <version epoch="0" ver="9.6p1" rel="150600.6.29.2"/>
  <changelog author="alarrosa@suse.com" date="1710244800">- Uncomment %sysuser_requires in openssh-server which was commented
  by mistake and is needed by the pre script installed with
  %sysusers_generate_pre (bsc#1220802).</changelog>
  <changelog author="alarrosa@suse.com" date="1712059200">- Use %config(noreplace) for sshd_config . In any case, it's
  recommended to drop a file in sshd_config.d instead of editing
  sshd_config (bsc#1221063)
- Add patches from obs package that were also in SP3/SP4/SP5:
  * Fri Nov  3 10:44:14 UTC 2023 - Johannes Segitz &lt;jsegitz@suse.com&gt;
  - Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712059201">- Rebase openssh-7.7p1-fips.patch (bsc#1221928)
  Remove OPENSSL_HAVE_EVPGCM-ifdef, which is no longer supported by upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1712577600">- Update to openssh 9.6p1:
  = Security
  * ssh(1), sshd(8): implement protocol extensions to thwart the
    so-called "Terrapin attack" discovered by Fabian Bäumer, Marcus
    Brinkmann and Jörg Schwenk. This attack allows a MITM to effect a
    limited break of the integrity of the early encrypted SSH transport
    protocol by sending extra messages prior to the commencement of
    encryption, and deleting an equal number of consecutive messages
    immediately after encryption starts. A peer SSH client/server
    would not be able to detect that messages were deleted
    (bsc#1217950, CVE-2023-48795).
  * ssh-agent(1): when adding PKCS#11-hosted private keys while
    specifying destination constraints, if the PKCS#11 token returned
    multiple keys then only the first key had the constraints applied.
    Use of regular private keys, FIDO tokens and unconstrained keys
    are unaffected.
  * ssh(1): if an invalid user or hostname that contained shell
    metacharacters was passed to ssh(1), and a ProxyCommand,
    LocalCommand directive or "match exec" predicate referenced the
    user or hostname via %u, %h or similar expansion token, then
    an attacker who could supply arbitrary user/hostnames to ssh(1)
    could potentially perform command injection depending on what
    quoting was present in the user-supplied ssh_config(5) directive
    (bsc#1218215, CVE-2023-51385).
  = Potentially incompatible changes
  * ssh(1), sshd(8): the RFC4254 connection/channels protocol provides
    a TCP-like window mechanism that limits the amount of data that
    can be sent without acceptance from the peer. In cases where this
    limit was exceeded by a non-conforming peer SSH implementation,
    ssh(1)/sshd(8) previously discarded the extra data. From OpenSSH
    9.6, ssh(1)/sshd(8) will now terminate the connection if a peer
    exceeds the window limit by more than a small grace factor. This
    change should have no effect of SSH implementations that follow
    the specification.
  = New features
  * ssh(1): add a %j token that expands to the configured ProxyJump
    hostname (or the empty string if this option is not being used)
    that can be used in a number of ssh_config(5) keywords. bz3610
  * ssh(1): add ChannelTimeout support to the client, mirroring the
    same option in the server and allowing ssh(1) to terminate
    quiescent channels.
  * ssh(1), sshd(8), ssh-add(1), ssh-keygen(1): add support for
    reading ED25519 private keys in PEM PKCS8 format. Previously
    only the OpenSSH private key format was supported.
  * ssh(1), sshd(8): introduce a protocol extension to allow
    renegotiation of acceptable signature algorithms for public key
    authentication after the server has learned the username being
    used for authentication. This allows varying sshd_config(5)
    PubkeyAcceptedAlgorithms in a "Match user" block.
  * ssh-add(1), ssh-agent(1): add an agent protocol extension to allow
    specifying certificates when loading PKCS#11 keys. This allows the
    use of certificates backed by PKCS#11 private keys in all OpenSSH
    tools that support ssh-agent(1). Previously only ssh(1) supported
    this use-case.
  = Bugfixes
  * ssh(1): when deciding whether to enable the keystroke timing
    obfuscation, enable it only if a channel with a TTY is active.
  * ssh(1): switch mainloop from poll(3) to ppoll(3) and mask signals
    before checking flags set in signal handler. Avoids potential
    race condition between signaling ssh to exit and polling. bz3531
  * ssh(1): when connecting to a destination with both the
    AddressFamily and CanonicalizeHostname directives in use,
    the AddressFamily directive could be ignored. bz5326
  * sftp(1): correct handling of the limits@openssh.com option when
    the server returned an unexpected message.
  * A number of fixes to the PuTTY and Dropbear regress/integration
    tests.
  * ssh(1): release GSS OIDs only at end of authentication, avoiding
    unnecessary init/cleanup cycles. bz2982
  * ssh_config(5): mention "none" is a valid argument to IdentityFile
    in the manual. bz3080
  * scp(1): improved debugging for paths from the server rejected for
    not matching the client's glob(3) pattern in old SCP/RCP protocol
    mode.
  * ssh-agent(1): refuse signing operations on destination-constrained
    keys if a previous session-bind operation has failed. This may
    prevent a fail-open situation in future if a user uses a mismatched
    ssh(1) client and ssh-agent(1) where the client supports a key type
    that the agent does not support.
- Update to openssh 9.5p1:
  = Potentially incompatible changes
  * ssh-keygen(1): generate Ed25519 keys by default. Ed25519 public keys
    are very convenient due to their small size. Ed25519 keys are
    specified in RFC 8709 and OpenSSH has supported them since version 6.5
    (January 2014).
  * sshd(8): the Subsystem directive now accurately preserves quoting of
    subsystem commands and arguments. This may change behaviour for exotic
    configurations, but the most common subsystem configuration
    (sftp-server) is unlikely to be affected.
  = New features
  * ssh(1): add keystroke timing obfuscation to the client. This attempts
    to hide inter-keystroke timings by sending interactive traffic at
    fixed intervals (default: every 20ms) when there is only a small
    amount of data being sent. It also sends fake "chaff" keystrokes for
    a random interval after the last real keystroke. These are
    controlled by a new ssh_config ObscureKeystrokeTiming keyword.
  * ssh(1), sshd(8): Introduce a transport-level ping facility. This adds
    a pair of SSH transport protocol messages SSH2_MSG_PING/PONG to
    implement a ping capability. These messages use numbers in the "local
    extensions" number space and are advertised using a "ping@openssh.com"
    ext-info message with a string version number of "0".
  * sshd(8): allow override of Subsystem directives in sshd Match blocks.
  = Bugfixes
  * scp(1): fix scp in SFTP mode recursive upload and download of
    directories that contain symlinks to other directories. In scp mode,
    the links would be followed, but in SFTP mode they were not. bz3611
  * ssh-keygen(1): handle cr+lf (instead of just cr) line endings in
    sshsig signature files.
  * ssh(1): interactive mode for ControlPersist sessions if they
    originally requested a tty.
  * sshd(8): make PerSourceMaxStartups first-match-wins
  * sshd(8): limit artificial login delay to a reasonable maximum (5s)
    and don't delay at all for the "none" authentication mechanism.
    bz3602
  * sshd(8): Log errors in kex_exchange_identification() with level
    verbose instead of error to reduce preauth log spam. All of those
    get logged with a more generic error message by sshpkt_fatal().
  * sshd(8): correct math for ClientAliveInterval that caused the probes
    to be sent less frequently than configured.
  * ssh(1): fix regression in OpenSSH 9.4 (mux.c r1.99) that caused
    multiplexed sessions to ignore SIGINT under some circumstances.
- Update to openssh 9.4p1:
  = Potentially incompatible changes
  * This release removes support for older versions of libcrypto.
    OpenSSH now requires LibreSSL &gt;= 3.1.0 or OpenSSL &gt;= 1.1.1.
    Note that these versions are already deprecated by their upstream
    vendors.
  * ssh-agent(1): PKCS#11 modules must now be specified by their full
    paths. Previously dlopen(3) could search for them in system
    library directories.
  = New features
  * ssh(1): allow forwarding Unix Domain sockets via ssh -W.
  * ssh(1): add support for configuration tags to ssh(1).
    This adds a ssh_config(5) "Tag" directive and corresponding
    "Match tag" predicate that may be used to select blocks of
    configuration similar to the pf.conf(5) keywords of the same
    name.
  * ssh(1): add a "match localnetwork" predicate. This allows matching
    on the addresses of available network interfaces and may be used to
    vary the effective client configuration based on network location.
  * ssh(1), sshd(8), ssh-keygen(1): infrastructure support for KRL
    extensions.  This defines wire formats for optional KRL extensions
    and implements parsing of the new submessages. No actual extensions
    are supported at this point.
  * sshd(8): AuthorizedPrincipalsCommand and AuthorizedKeysCommand now
    accept two additional %-expansion sequences: %D which expands to
    the routing domain of the connected session and %C which expands
    to the addresses and port numbers for the source and destination
    of the connection.
  * ssh-keygen(1): increase the default work factor (rounds) for the
    bcrypt KDF used to derive symmetric encryption keys for passphrase
    protected key files by 50%.
  = Bugfixes
  * ssh-agent(1): improve isolation between loaded PKCS#11 modules
    by running separate ssh-pkcs11-helpers for each loaded provider.
  * ssh(1): make -f (fork after authentication) work correctly with
    multiplexed connections, including ControlPersist. bz3589 bz3589
  * ssh(1): make ConnectTimeout apply to multiplexing sockets and not
    just to network connections.
  * ssh-agent(1), ssh(1): improve defences against invalid PKCS#11
    modules being loaded by checking that the requested module
    contains the required symbol before loading it.
  * sshd(8): fix AuthorizedPrincipalsCommand when AuthorizedKeysCommand
    appears before it in sshd_config. Since OpenSSH 8.7 the
    AuthorizedPrincipalsCommand directive was incorrectly ignored in
    this situation. bz3574
  * sshd(8), ssh(1), ssh-keygen(1): remove vestigal support for KRL
    signatures When the KRL format was originally defined, it included
    support for signing of KRL objects. However, the code to sign KRLs
    and verify KRL signatues was never completed in OpenSSH. This
    release removes the partially-implemented code to verify KRLs.
    All OpenSSH tools now ignore KRL_SECTION_SIGNATURE sections in
    KRL files.
  * All: fix a number of memory leaks and unreachable/harmless integer
    overflows.
  * ssh-agent(1), ssh(1): don't truncate strings logged from PKCS#11
    modules; GHPR406
  * sshd(8), ssh(1): better validate CASignatureAlgorithms in
    ssh_config and sshd_config. Previously this directive would accept
    certificate algorithm names, but these were unusable in practice as
    OpenSSH does not support CA chains. bz3577
  * ssh(1): make `ssh -Q CASignatureAlgorithms` only list signature
    algorithms that are valid for CA signing. Previous behaviour was
    to list all signing algorithms, including certificate algorithms.
  * ssh-keyscan(1): gracefully handle systems where rlimits or the
    maximum number of open files is larger than INT_MAX; bz3581
  * ssh-keygen(1): fix "no comment" not showing on when running
    `ssh-keygen -l` on multiple keys where one has a comment and other
    following keys do not. bz3580
  * scp(1), sftp(1): adjust ftruncate() logic to handle servers that
    reorder requests. Previously, if the server reordered requests then
    the resultant file would be erroneously truncated.
  * ssh(1): don't incorrectly disable hostname canonicalization when
    CanonicalizeHostname=yes and ProxyJump was expicitly set to
    "none". bz3567
  * scp(1): when copying local-&gt;remote, check that the source file
    exists before opening an SFTP connection to the server. Based on
    GHPR#370
- Dropped patches:
  * cb4ed12f.patch - implemented upstream.
- Rebased patches:
  * openssh-7.7p1-fips.patch
  * openssh-7.8p1-role-mls.patch
  * openssh-8.0p1-gssapi-keyex.patch
- Add patches from obs:
  * Mon Mar  4 09:57:06 UTC 2024 - Pedro Monreal &lt;pmonreal@suse.com&gt;
- Add crypto-policies support [bsc#1211301]
  * Add patches:
  - openssh-9.6p1-crypto-policies.patch
  - openssh-9.6p1-crypto-policies-man.patch</changelog>
  <changelog author="opensuse@arnavion.dev" date="1712836800">- Fix duplicate loading of dropins. (boo#1222467)</changelog>
  <changelog author="alarrosa@suse.com" date="1712923200">- Make openssh-server recommend the openssh-server-config-rootlogin
  package in SLE in order to keep the same behaviour of previous
  SPs where the PermitRootLogin default was set to yes
  (bsc#1221005).
- Fix crypto-policies requirement to be set by openssh-server, not
  the config-rootlogin subpackage.
- Add back %config(noreplace) tag for more config files that were
  already set like this in previous SPs.</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- openssh-8.0p1-gssapi-keyex.patch: Added missing struct initializer,
  added missing parameter (bsc#1222840)</changelog>
  <changelog author="alarrosa@suse.com" date="1715601600">- Only for SLE15, restore the patch file removed in
  Thu Feb 18 13:54:44 UTC 2021 to restore the previous behaviour
  from SP5 of having root password login allowed by default
  (fixes bsc#1223486, related to bsc#1173067):
  * openssh-7.7p1-allow_root_password_login.patch
- Since the default value for this config option is now set to
  permit root to use password logins in SLE15, the
  openssh-server-config-rootlogin subpackage isn't useful there so
  we now create an openssh-server-config-disallow-rootlogin
  subpackage that sets the configuration the other way around
  than openssh-server-config-rootlogin.</changelog>
  <changelog author="alarrosa@suse.com" date="1715688000">- Add a warning in %post of openssh-clients, openssh-server and
  openssh-server-config-disallow-rootlogin to warn the user if
  the /etc/ssh/(ssh_config.d|sshd_config.d) directories are not
  being used (bsc#1223486).</changelog>
  <changelog author="alarrosa@suse.com" date="1719835200">- Add patch to fix a race condition in a signal handler by removing
  the async-signal-unsafe code (CVE-2024-6387, bsc#1226642):
  * fix-CVE-2024-6387.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720008000">- Add obsoletes for openssh-server-config-rootlogin since that
  package existed for a brief period of time during SLE 15 SP6/
  Leap 15.6 development but even if it was removed from the
  repositories before GM, some users might have it in their
  systems from having tried a beta/RC release (boo#1227350).
- Add #include &lt;stdlib.h&gt; in some files added by the ldap patch to
  fix build with gcc14 (boo#1225904).
  * openssh-7.7p1-ldap.patch
- Remove the recommendation for openssh-server-config-rootlogin
  from openssh-server. Since the default for that config option
  was changed in SLE it's not needed anymore in SLE nor in TW
  (boo#1224392).</changelog>
  <changelog author="alarrosa@suse.com" date="1720180800">- Add patch from upstream to fix proxy multiplexing mode:
  * 0001-upstream-fix-proxy-multiplexing-mode_-broken-when-keystroke.patch
- Add patch from upstream to restore correctly sigprocmask
  * 0001-upstream-correctly-restore-sigprocmask-around-ppoll.patch
- Add patch from upstream to fix a logic error in
  ObscureKeystrokeTiming that rendered this feature ineffective,
  allowing a passive observer to detect which network packets
  contained real keystrokes (bsc#1227318, CVE-2024-39894):
  * 0001-upstream-when-sending-ObscureKeystrokeTiming-chaff-packets_.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720612800">- Remove empty line at the end of sshd-sle.pamd (bsc#1227456)</changelog>
  <changelog author="alarrosa@suse.com" date="1728648000">- Add a patch to fix a regression introduced in 9.6 that makes X11
  forwarding very slow. Submitted to upstream in
  https://bugzilla.mindrot.org/show_bug.cgi?id=3655#c4 . Fixes
  bsc#1229449:
  * fix-x11-regression-bsc1229449.patch
- Add a openssl11 bcond to the spec file for the SLE12 case
  instead of checking suse_version in different parts.
- Move conditional patches to a number &gt;= 1000.
- Several spec file fixes so the package builds and can be
  installed in SLE 15 SP5 and SLE 12 SP5
- Drop most of openssh-6.6p1-keycat.patch (actually, it was just
  commented out). The keycat binary isn't really installed nor
  supported, so we can drop it, except for the code that is used
  by other SELinux patches, which is what I kept from that patch
  (boo#1229072).
- Add patch submitted to upstream to fix RFC4256 implementation
  so that keyboard-interactive authentication method can send
  instructions and sshd shows them to users even before a prompt
  is requested. This fixes MFA push notifications (boo#1229010).
  * 0001-auth-pam-Immediately-report-instructions-to-clients-and-fix-handling-in-ssh-client.patch
- Fix a dbus connection leaked in the logind patch that was
  missing a sd_bus_unref call (found by Matthias Gerstner):
  * logind_set_tty.patch
- Add a patch that fixes a small memory leak when parsing the
  subsystem configuration option:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1728907200">- Use %{with ...} instead of 0%{with ...}</changelog>
  <changelog author="alarrosa@suse.com" date="1739448000">- Fix a MitM attack against OpenSSH's VerifyHostKeyDNS-enabled
  client and a DoS attack against OpenSSH's client and server
  (bsc#1237040, CVE-2025-26465, bsc#1237041, CVE-2025-26466):
  * fix-CVE-2025-26465-and-CVE-2025-26466.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1739880000">- Fix ssh client segfault with GSSAPIKeyExchange=yes in ssh_kex2
  due to gssapi proposal not being correctly initialized
  (bsc#1236826). The problem was introduced in the rebase of
  the patch for 9.6p1:
  * openssh-8.0p1-gssapi-keyex.patch
- Rebase patch and apply it:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="hpj@suse.com" date="1746532800">- Added openssh-cve-2025-32728.patch (bsc#1241012, CVE-2025-32728).
  This fixes an upstream logic error handling the DisableForwarding
  option.</changelog>
  <changelog author="alarrosa@suse.com" date="1747137600">- Enable --with-logind to call the SetTTY dbus method in systemd.
  This allows "wall" to print messages in ssh ttys (bsc#1239671)
- Small fixes to unref the dbus session when any error occurs:
  * logind_set_tty.patch</changelog>
  <changelog author="hpj@suse.com" date="1748952000">- Add openssh-scp-umask-preserve-permissions.patch (bsc#1241667).</changelog>
</package>
<package pkgid="4c3bc601e442eb4f18611ee9c5e60a3472d5291df8a8e77e4379327630a2afe7" name="openssh-clients" arch="x86_64">
  <version epoch="0" ver="9.6p1" rel="150600.6.34.1"/>
  <changelog author="alarrosa@suse.com" date="1712059200">- Use %config(noreplace) for sshd_config . In any case, it's
  recommended to drop a file in sshd_config.d instead of editing
  sshd_config (bsc#1221063)
- Add patches from obs package that were also in SP3/SP4/SP5:
  * Fri Nov  3 10:44:14 UTC 2023 - Johannes Segitz &lt;jsegitz@suse.com&gt;
  - Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712059201">- Rebase openssh-7.7p1-fips.patch (bsc#1221928)
  Remove OPENSSL_HAVE_EVPGCM-ifdef, which is no longer supported by upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1712577600">- Update to openssh 9.6p1:
  = Security
  * ssh(1), sshd(8): implement protocol extensions to thwart the
    so-called "Terrapin attack" discovered by Fabian Bäumer, Marcus
    Brinkmann and Jörg Schwenk. This attack allows a MITM to effect a
    limited break of the integrity of the early encrypted SSH transport
    protocol by sending extra messages prior to the commencement of
    encryption, and deleting an equal number of consecutive messages
    immediately after encryption starts. A peer SSH client/server
    would not be able to detect that messages were deleted
    (bsc#1217950, CVE-2023-48795).
  * ssh-agent(1): when adding PKCS#11-hosted private keys while
    specifying destination constraints, if the PKCS#11 token returned
    multiple keys then only the first key had the constraints applied.
    Use of regular private keys, FIDO tokens and unconstrained keys
    are unaffected.
  * ssh(1): if an invalid user or hostname that contained shell
    metacharacters was passed to ssh(1), and a ProxyCommand,
    LocalCommand directive or "match exec" predicate referenced the
    user or hostname via %u, %h or similar expansion token, then
    an attacker who could supply arbitrary user/hostnames to ssh(1)
    could potentially perform command injection depending on what
    quoting was present in the user-supplied ssh_config(5) directive
    (bsc#1218215, CVE-2023-51385).
  = Potentially incompatible changes
  * ssh(1), sshd(8): the RFC4254 connection/channels protocol provides
    a TCP-like window mechanism that limits the amount of data that
    can be sent without acceptance from the peer. In cases where this
    limit was exceeded by a non-conforming peer SSH implementation,
    ssh(1)/sshd(8) previously discarded the extra data. From OpenSSH
    9.6, ssh(1)/sshd(8) will now terminate the connection if a peer
    exceeds the window limit by more than a small grace factor. This
    change should have no effect of SSH implementations that follow
    the specification.
  = New features
  * ssh(1): add a %j token that expands to the configured ProxyJump
    hostname (or the empty string if this option is not being used)
    that can be used in a number of ssh_config(5) keywords. bz3610
  * ssh(1): add ChannelTimeout support to the client, mirroring the
    same option in the server and allowing ssh(1) to terminate
    quiescent channels.
  * ssh(1), sshd(8), ssh-add(1), ssh-keygen(1): add support for
    reading ED25519 private keys in PEM PKCS8 format. Previously
    only the OpenSSH private key format was supported.
  * ssh(1), sshd(8): introduce a protocol extension to allow
    renegotiation of acceptable signature algorithms for public key
    authentication after the server has learned the username being
    used for authentication. This allows varying sshd_config(5)
    PubkeyAcceptedAlgorithms in a "Match user" block.
  * ssh-add(1), ssh-agent(1): add an agent protocol extension to allow
    specifying certificates when loading PKCS#11 keys. This allows the
    use of certificates backed by PKCS#11 private keys in all OpenSSH
    tools that support ssh-agent(1). Previously only ssh(1) supported
    this use-case.
  = Bugfixes
  * ssh(1): when deciding whether to enable the keystroke timing
    obfuscation, enable it only if a channel with a TTY is active.
  * ssh(1): switch mainloop from poll(3) to ppoll(3) and mask signals
    before checking flags set in signal handler. Avoids potential
    race condition between signaling ssh to exit and polling. bz3531
  * ssh(1): when connecting to a destination with both the
    AddressFamily and CanonicalizeHostname directives in use,
    the AddressFamily directive could be ignored. bz5326
  * sftp(1): correct handling of the limits@openssh.com option when
    the server returned an unexpected message.
  * A number of fixes to the PuTTY and Dropbear regress/integration
    tests.
  * ssh(1): release GSS OIDs only at end of authentication, avoiding
    unnecessary init/cleanup cycles. bz2982
  * ssh_config(5): mention "none" is a valid argument to IdentityFile
    in the manual. bz3080
  * scp(1): improved debugging for paths from the server rejected for
    not matching the client's glob(3) pattern in old SCP/RCP protocol
    mode.
  * ssh-agent(1): refuse signing operations on destination-constrained
    keys if a previous session-bind operation has failed. This may
    prevent a fail-open situation in future if a user uses a mismatched
    ssh(1) client and ssh-agent(1) where the client supports a key type
    that the agent does not support.
- Update to openssh 9.5p1:
  = Potentially incompatible changes
  * ssh-keygen(1): generate Ed25519 keys by default. Ed25519 public keys
    are very convenient due to their small size. Ed25519 keys are
    specified in RFC 8709 and OpenSSH has supported them since version 6.5
    (January 2014).
  * sshd(8): the Subsystem directive now accurately preserves quoting of
    subsystem commands and arguments. This may change behaviour for exotic
    configurations, but the most common subsystem configuration
    (sftp-server) is unlikely to be affected.
  = New features
  * ssh(1): add keystroke timing obfuscation to the client. This attempts
    to hide inter-keystroke timings by sending interactive traffic at
    fixed intervals (default: every 20ms) when there is only a small
    amount of data being sent. It also sends fake "chaff" keystrokes for
    a random interval after the last real keystroke. These are
    controlled by a new ssh_config ObscureKeystrokeTiming keyword.
  * ssh(1), sshd(8): Introduce a transport-level ping facility. This adds
    a pair of SSH transport protocol messages SSH2_MSG_PING/PONG to
    implement a ping capability. These messages use numbers in the "local
    extensions" number space and are advertised using a "ping@openssh.com"
    ext-info message with a string version number of "0".
  * sshd(8): allow override of Subsystem directives in sshd Match blocks.
  = Bugfixes
  * scp(1): fix scp in SFTP mode recursive upload and download of
    directories that contain symlinks to other directories. In scp mode,
    the links would be followed, but in SFTP mode they were not. bz3611
  * ssh-keygen(1): handle cr+lf (instead of just cr) line endings in
    sshsig signature files.
  * ssh(1): interactive mode for ControlPersist sessions if they
    originally requested a tty.
  * sshd(8): make PerSourceMaxStartups first-match-wins
  * sshd(8): limit artificial login delay to a reasonable maximum (5s)
    and don't delay at all for the "none" authentication mechanism.
    bz3602
  * sshd(8): Log errors in kex_exchange_identification() with level
    verbose instead of error to reduce preauth log spam. All of those
    get logged with a more generic error message by sshpkt_fatal().
  * sshd(8): correct math for ClientAliveInterval that caused the probes
    to be sent less frequently than configured.
  * ssh(1): fix regression in OpenSSH 9.4 (mux.c r1.99) that caused
    multiplexed sessions to ignore SIGINT under some circumstances.
- Update to openssh 9.4p1:
  = Potentially incompatible changes
  * This release removes support for older versions of libcrypto.
    OpenSSH now requires LibreSSL &gt;= 3.1.0 or OpenSSL &gt;= 1.1.1.
    Note that these versions are already deprecated by their upstream
    vendors.
  * ssh-agent(1): PKCS#11 modules must now be specified by their full
    paths. Previously dlopen(3) could search for them in system
    library directories.
  = New features
  * ssh(1): allow forwarding Unix Domain sockets via ssh -W.
  * ssh(1): add support for configuration tags to ssh(1).
    This adds a ssh_config(5) "Tag" directive and corresponding
    "Match tag" predicate that may be used to select blocks of
    configuration similar to the pf.conf(5) keywords of the same
    name.
  * ssh(1): add a "match localnetwork" predicate. This allows matching
    on the addresses of available network interfaces and may be used to
    vary the effective client configuration based on network location.
  * ssh(1), sshd(8), ssh-keygen(1): infrastructure support for KRL
    extensions.  This defines wire formats for optional KRL extensions
    and implements parsing of the new submessages. No actual extensions
    are supported at this point.
  * sshd(8): AuthorizedPrincipalsCommand and AuthorizedKeysCommand now
    accept two additional %-expansion sequences: %D which expands to
    the routing domain of the connected session and %C which expands
    to the addresses and port numbers for the source and destination
    of the connection.
  * ssh-keygen(1): increase the default work factor (rounds) for the
    bcrypt KDF used to derive symmetric encryption keys for passphrase
    protected key files by 50%.
  = Bugfixes
  * ssh-agent(1): improve isolation between loaded PKCS#11 modules
    by running separate ssh-pkcs11-helpers for each loaded provider.
  * ssh(1): make -f (fork after authentication) work correctly with
    multiplexed connections, including ControlPersist. bz3589 bz3589
  * ssh(1): make ConnectTimeout apply to multiplexing sockets and not
    just to network connections.
  * ssh-agent(1), ssh(1): improve defences against invalid PKCS#11
    modules being loaded by checking that the requested module
    contains the required symbol before loading it.
  * sshd(8): fix AuthorizedPrincipalsCommand when AuthorizedKeysCommand
    appears before it in sshd_config. Since OpenSSH 8.7 the
    AuthorizedPrincipalsCommand directive was incorrectly ignored in
    this situation. bz3574
  * sshd(8), ssh(1), ssh-keygen(1): remove vestigal support for KRL
    signatures When the KRL format was originally defined, it included
    support for signing of KRL objects. However, the code to sign KRLs
    and verify KRL signatues was never completed in OpenSSH. This
    release removes the partially-implemented code to verify KRLs.
    All OpenSSH tools now ignore KRL_SECTION_SIGNATURE sections in
    KRL files.
  * All: fix a number of memory leaks and unreachable/harmless integer
    overflows.
  * ssh-agent(1), ssh(1): don't truncate strings logged from PKCS#11
    modules; GHPR406
  * sshd(8), ssh(1): better validate CASignatureAlgorithms in
    ssh_config and sshd_config. Previously this directive would accept
    certificate algorithm names, but these were unusable in practice as
    OpenSSH does not support CA chains. bz3577
  * ssh(1): make `ssh -Q CASignatureAlgorithms` only list signature
    algorithms that are valid for CA signing. Previous behaviour was
    to list all signing algorithms, including certificate algorithms.
  * ssh-keyscan(1): gracefully handle systems where rlimits or the
    maximum number of open files is larger than INT_MAX; bz3581
  * ssh-keygen(1): fix "no comment" not showing on when running
    `ssh-keygen -l` on multiple keys where one has a comment and other
    following keys do not. bz3580
  * scp(1), sftp(1): adjust ftruncate() logic to handle servers that
    reorder requests. Previously, if the server reordered requests then
    the resultant file would be erroneously truncated.
  * ssh(1): don't incorrectly disable hostname canonicalization when
    CanonicalizeHostname=yes and ProxyJump was expicitly set to
    "none". bz3567
  * scp(1): when copying local-&gt;remote, check that the source file
    exists before opening an SFTP connection to the server. Based on
    GHPR#370
- Dropped patches:
  * cb4ed12f.patch - implemented upstream.
- Rebased patches:
  * openssh-7.7p1-fips.patch
  * openssh-7.8p1-role-mls.patch
  * openssh-8.0p1-gssapi-keyex.patch
- Add patches from obs:
  * Mon Mar  4 09:57:06 UTC 2024 - Pedro Monreal &lt;pmonreal@suse.com&gt;
- Add crypto-policies support [bsc#1211301]
  * Add patches:
  - openssh-9.6p1-crypto-policies.patch
  - openssh-9.6p1-crypto-policies-man.patch</changelog>
  <changelog author="opensuse@arnavion.dev" date="1712836800">- Fix duplicate loading of dropins. (boo#1222467)</changelog>
  <changelog author="alarrosa@suse.com" date="1712923200">- Make openssh-server recommend the openssh-server-config-rootlogin
  package in SLE in order to keep the same behaviour of previous
  SPs where the PermitRootLogin default was set to yes
  (bsc#1221005).
- Fix crypto-policies requirement to be set by openssh-server, not
  the config-rootlogin subpackage.
- Add back %config(noreplace) tag for more config files that were
  already set like this in previous SPs.</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- openssh-8.0p1-gssapi-keyex.patch: Added missing struct initializer,
  added missing parameter (bsc#1222840)</changelog>
  <changelog author="alarrosa@suse.com" date="1715601600">- Only for SLE15, restore the patch file removed in
  Thu Feb 18 13:54:44 UTC 2021 to restore the previous behaviour
  from SP5 of having root password login allowed by default
  (fixes bsc#1223486, related to bsc#1173067):
  * openssh-7.7p1-allow_root_password_login.patch
- Since the default value for this config option is now set to
  permit root to use password logins in SLE15, the
  openssh-server-config-rootlogin subpackage isn't useful there so
  we now create an openssh-server-config-disallow-rootlogin
  subpackage that sets the configuration the other way around
  than openssh-server-config-rootlogin.</changelog>
  <changelog author="alarrosa@suse.com" date="1715688000">- Add a warning in %post of openssh-clients, openssh-server and
  openssh-server-config-disallow-rootlogin to warn the user if
  the /etc/ssh/(ssh_config.d|sshd_config.d) directories are not
  being used (bsc#1223486).</changelog>
  <changelog author="alarrosa@suse.com" date="1719835200">- Add patch to fix a race condition in a signal handler by removing
  the async-signal-unsafe code (CVE-2024-6387, bsc#1226642):
  * fix-CVE-2024-6387.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720008000">- Add obsoletes for openssh-server-config-rootlogin since that
  package existed for a brief period of time during SLE 15 SP6/
  Leap 15.6 development but even if it was removed from the
  repositories before GM, some users might have it in their
  systems from having tried a beta/RC release (boo#1227350).
- Add #include &lt;stdlib.h&gt; in some files added by the ldap patch to
  fix build with gcc14 (boo#1225904).
  * openssh-7.7p1-ldap.patch
- Remove the recommendation for openssh-server-config-rootlogin
  from openssh-server. Since the default for that config option
  was changed in SLE it's not needed anymore in SLE nor in TW
  (boo#1224392).</changelog>
  <changelog author="alarrosa@suse.com" date="1720180800">- Add patch from upstream to fix proxy multiplexing mode:
  * 0001-upstream-fix-proxy-multiplexing-mode_-broken-when-keystroke.patch
- Add patch from upstream to restore correctly sigprocmask
  * 0001-upstream-correctly-restore-sigprocmask-around-ppoll.patch
- Add patch from upstream to fix a logic error in
  ObscureKeystrokeTiming that rendered this feature ineffective,
  allowing a passive observer to detect which network packets
  contained real keystrokes (bsc#1227318, CVE-2024-39894):
  * 0001-upstream-when-sending-ObscureKeystrokeTiming-chaff-packets_.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720612800">- Remove empty line at the end of sshd-sle.pamd (bsc#1227456)</changelog>
  <changelog author="alarrosa@suse.com" date="1728648000">- Add a patch to fix a regression introduced in 9.6 that makes X11
  forwarding very slow. Submitted to upstream in
  https://bugzilla.mindrot.org/show_bug.cgi?id=3655#c4 . Fixes
  bsc#1229449:
  * fix-x11-regression-bsc1229449.patch
- Add a openssl11 bcond to the spec file for the SLE12 case
  instead of checking suse_version in different parts.
- Move conditional patches to a number &gt;= 1000.
- Several spec file fixes so the package builds and can be
  installed in SLE 15 SP5 and SLE 12 SP5
- Drop most of openssh-6.6p1-keycat.patch (actually, it was just
  commented out). The keycat binary isn't really installed nor
  supported, so we can drop it, except for the code that is used
  by other SELinux patches, which is what I kept from that patch
  (boo#1229072).
- Add patch submitted to upstream to fix RFC4256 implementation
  so that keyboard-interactive authentication method can send
  instructions and sshd shows them to users even before a prompt
  is requested. This fixes MFA push notifications (boo#1229010).
  * 0001-auth-pam-Immediately-report-instructions-to-clients-and-fix-handling-in-ssh-client.patch
- Fix a dbus connection leaked in the logind patch that was
  missing a sd_bus_unref call (found by Matthias Gerstner):
  * logind_set_tty.patch
- Add a patch that fixes a small memory leak when parsing the
  subsystem configuration option:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1728907200">- Use %{with ...} instead of 0%{with ...}</changelog>
  <changelog author="alarrosa@suse.com" date="1739448000">- Fix a MitM attack against OpenSSH's VerifyHostKeyDNS-enabled
  client and a DoS attack against OpenSSH's client and server
  (bsc#1237040, CVE-2025-26465, bsc#1237041, CVE-2025-26466):
  * fix-CVE-2025-26465-and-CVE-2025-26466.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1739880000">- Fix ssh client segfault with GSSAPIKeyExchange=yes in ssh_kex2
  due to gssapi proposal not being correctly initialized
  (bsc#1236826). The problem was introduced in the rebase of
  the patch for 9.6p1:
  * openssh-8.0p1-gssapi-keyex.patch
- Rebase patch and apply it:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="hpj@suse.com" date="1746532800">- Added openssh-cve-2025-32728.patch (bsc#1241012, CVE-2025-32728).
  This fixes an upstream logic error handling the DisableForwarding
  option.</changelog>
  <changelog author="alarrosa@suse.com" date="1747137600">- Enable --with-logind to call the SetTTY dbus method in systemd.
  This allows "wall" to print messages in ssh ttys (bsc#1239671)
- Small fixes to unref the dbus session when any error occurs:
  * logind_set_tty.patch</changelog>
  <changelog author="hpj@suse.com" date="1748952000">- Add openssh-scp-umask-preserve-permissions.patch (bsc#1241667).</changelog>
  <changelog author="hpj@suse.com" date="1762516800">- Add openssh-cve-2025-61984-username-validation.patch
  (bsc#1251198, CVE-2025-61984).
- Add openssh-cve-2025-61985-nul-url-encode.patch
  (bsc#1251199, CVE-2025-61985).</changelog>
</package>
<package pkgid="44918a4e2f29ad55e778bc63fe221801d2be79e00a840cf52a519434ba8b37e6" name="openssh-clients" arch="x86_64">
  <version epoch="0" ver="9.6p1" rel="150600.6.37.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1712059200">- Rebase openssh-7.7p1-fips.patch (bsc#1221928)
  Remove OPENSSL_HAVE_EVPGCM-ifdef, which is no longer supported by upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1712577600">- Update to openssh 9.6p1:
  = Security
  * ssh(1), sshd(8): implement protocol extensions to thwart the
    so-called "Terrapin attack" discovered by Fabian Bäumer, Marcus
    Brinkmann and Jörg Schwenk. This attack allows a MITM to effect a
    limited break of the integrity of the early encrypted SSH transport
    protocol by sending extra messages prior to the commencement of
    encryption, and deleting an equal number of consecutive messages
    immediately after encryption starts. A peer SSH client/server
    would not be able to detect that messages were deleted
    (bsc#1217950, CVE-2023-48795).
  * ssh-agent(1): when adding PKCS#11-hosted private keys while
    specifying destination constraints, if the PKCS#11 token returned
    multiple keys then only the first key had the constraints applied.
    Use of regular private keys, FIDO tokens and unconstrained keys
    are unaffected.
  * ssh(1): if an invalid user or hostname that contained shell
    metacharacters was passed to ssh(1), and a ProxyCommand,
    LocalCommand directive or "match exec" predicate referenced the
    user or hostname via %u, %h or similar expansion token, then
    an attacker who could supply arbitrary user/hostnames to ssh(1)
    could potentially perform command injection depending on what
    quoting was present in the user-supplied ssh_config(5) directive
    (bsc#1218215, CVE-2023-51385).
  = Potentially incompatible changes
  * ssh(1), sshd(8): the RFC4254 connection/channels protocol provides
    a TCP-like window mechanism that limits the amount of data that
    can be sent without acceptance from the peer. In cases where this
    limit was exceeded by a non-conforming peer SSH implementation,
    ssh(1)/sshd(8) previously discarded the extra data. From OpenSSH
    9.6, ssh(1)/sshd(8) will now terminate the connection if a peer
    exceeds the window limit by more than a small grace factor. This
    change should have no effect of SSH implementations that follow
    the specification.
  = New features
  * ssh(1): add a %j token that expands to the configured ProxyJump
    hostname (or the empty string if this option is not being used)
    that can be used in a number of ssh_config(5) keywords. bz3610
  * ssh(1): add ChannelTimeout support to the client, mirroring the
    same option in the server and allowing ssh(1) to terminate
    quiescent channels.
  * ssh(1), sshd(8), ssh-add(1), ssh-keygen(1): add support for
    reading ED25519 private keys in PEM PKCS8 format. Previously
    only the OpenSSH private key format was supported.
  * ssh(1), sshd(8): introduce a protocol extension to allow
    renegotiation of acceptable signature algorithms for public key
    authentication after the server has learned the username being
    used for authentication. This allows varying sshd_config(5)
    PubkeyAcceptedAlgorithms in a "Match user" block.
  * ssh-add(1), ssh-agent(1): add an agent protocol extension to allow
    specifying certificates when loading PKCS#11 keys. This allows the
    use of certificates backed by PKCS#11 private keys in all OpenSSH
    tools that support ssh-agent(1). Previously only ssh(1) supported
    this use-case.
  = Bugfixes
  * ssh(1): when deciding whether to enable the keystroke timing
    obfuscation, enable it only if a channel with a TTY is active.
  * ssh(1): switch mainloop from poll(3) to ppoll(3) and mask signals
    before checking flags set in signal handler. Avoids potential
    race condition between signaling ssh to exit and polling. bz3531
  * ssh(1): when connecting to a destination with both the
    AddressFamily and CanonicalizeHostname directives in use,
    the AddressFamily directive could be ignored. bz5326
  * sftp(1): correct handling of the limits@openssh.com option when
    the server returned an unexpected message.
  * A number of fixes to the PuTTY and Dropbear regress/integration
    tests.
  * ssh(1): release GSS OIDs only at end of authentication, avoiding
    unnecessary init/cleanup cycles. bz2982
  * ssh_config(5): mention "none" is a valid argument to IdentityFile
    in the manual. bz3080
  * scp(1): improved debugging for paths from the server rejected for
    not matching the client's glob(3) pattern in old SCP/RCP protocol
    mode.
  * ssh-agent(1): refuse signing operations on destination-constrained
    keys if a previous session-bind operation has failed. This may
    prevent a fail-open situation in future if a user uses a mismatched
    ssh(1) client and ssh-agent(1) where the client supports a key type
    that the agent does not support.
- Update to openssh 9.5p1:
  = Potentially incompatible changes
  * ssh-keygen(1): generate Ed25519 keys by default. Ed25519 public keys
    are very convenient due to their small size. Ed25519 keys are
    specified in RFC 8709 and OpenSSH has supported them since version 6.5
    (January 2014).
  * sshd(8): the Subsystem directive now accurately preserves quoting of
    subsystem commands and arguments. This may change behaviour for exotic
    configurations, but the most common subsystem configuration
    (sftp-server) is unlikely to be affected.
  = New features
  * ssh(1): add keystroke timing obfuscation to the client. This attempts
    to hide inter-keystroke timings by sending interactive traffic at
    fixed intervals (default: every 20ms) when there is only a small
    amount of data being sent. It also sends fake "chaff" keystrokes for
    a random interval after the last real keystroke. These are
    controlled by a new ssh_config ObscureKeystrokeTiming keyword.
  * ssh(1), sshd(8): Introduce a transport-level ping facility. This adds
    a pair of SSH transport protocol messages SSH2_MSG_PING/PONG to
    implement a ping capability. These messages use numbers in the "local
    extensions" number space and are advertised using a "ping@openssh.com"
    ext-info message with a string version number of "0".
  * sshd(8): allow override of Subsystem directives in sshd Match blocks.
  = Bugfixes
  * scp(1): fix scp in SFTP mode recursive upload and download of
    directories that contain symlinks to other directories. In scp mode,
    the links would be followed, but in SFTP mode they were not. bz3611
  * ssh-keygen(1): handle cr+lf (instead of just cr) line endings in
    sshsig signature files.
  * ssh(1): interactive mode for ControlPersist sessions if they
    originally requested a tty.
  * sshd(8): make PerSourceMaxStartups first-match-wins
  * sshd(8): limit artificial login delay to a reasonable maximum (5s)
    and don't delay at all for the "none" authentication mechanism.
    bz3602
  * sshd(8): Log errors in kex_exchange_identification() with level
    verbose instead of error to reduce preauth log spam. All of those
    get logged with a more generic error message by sshpkt_fatal().
  * sshd(8): correct math for ClientAliveInterval that caused the probes
    to be sent less frequently than configured.
  * ssh(1): fix regression in OpenSSH 9.4 (mux.c r1.99) that caused
    multiplexed sessions to ignore SIGINT under some circumstances.
- Update to openssh 9.4p1:
  = Potentially incompatible changes
  * This release removes support for older versions of libcrypto.
    OpenSSH now requires LibreSSL &gt;= 3.1.0 or OpenSSL &gt;= 1.1.1.
    Note that these versions are already deprecated by their upstream
    vendors.
  * ssh-agent(1): PKCS#11 modules must now be specified by their full
    paths. Previously dlopen(3) could search for them in system
    library directories.
  = New features
  * ssh(1): allow forwarding Unix Domain sockets via ssh -W.
  * ssh(1): add support for configuration tags to ssh(1).
    This adds a ssh_config(5) "Tag" directive and corresponding
    "Match tag" predicate that may be used to select blocks of
    configuration similar to the pf.conf(5) keywords of the same
    name.
  * ssh(1): add a "match localnetwork" predicate. This allows matching
    on the addresses of available network interfaces and may be used to
    vary the effective client configuration based on network location.
  * ssh(1), sshd(8), ssh-keygen(1): infrastructure support for KRL
    extensions.  This defines wire formats for optional KRL extensions
    and implements parsing of the new submessages. No actual extensions
    are supported at this point.
  * sshd(8): AuthorizedPrincipalsCommand and AuthorizedKeysCommand now
    accept two additional %-expansion sequences: %D which expands to
    the routing domain of the connected session and %C which expands
    to the addresses and port numbers for the source and destination
    of the connection.
  * ssh-keygen(1): increase the default work factor (rounds) for the
    bcrypt KDF used to derive symmetric encryption keys for passphrase
    protected key files by 50%.
  = Bugfixes
  * ssh-agent(1): improve isolation between loaded PKCS#11 modules
    by running separate ssh-pkcs11-helpers for each loaded provider.
  * ssh(1): make -f (fork after authentication) work correctly with
    multiplexed connections, including ControlPersist. bz3589 bz3589
  * ssh(1): make ConnectTimeout apply to multiplexing sockets and not
    just to network connections.
  * ssh-agent(1), ssh(1): improve defences against invalid PKCS#11
    modules being loaded by checking that the requested module
    contains the required symbol before loading it.
  * sshd(8): fix AuthorizedPrincipalsCommand when AuthorizedKeysCommand
    appears before it in sshd_config. Since OpenSSH 8.7 the
    AuthorizedPrincipalsCommand directive was incorrectly ignored in
    this situation. bz3574
  * sshd(8), ssh(1), ssh-keygen(1): remove vestigal support for KRL
    signatures When the KRL format was originally defined, it included
    support for signing of KRL objects. However, the code to sign KRLs
    and verify KRL signatues was never completed in OpenSSH. This
    release removes the partially-implemented code to verify KRLs.
    All OpenSSH tools now ignore KRL_SECTION_SIGNATURE sections in
    KRL files.
  * All: fix a number of memory leaks and unreachable/harmless integer
    overflows.
  * ssh-agent(1), ssh(1): don't truncate strings logged from PKCS#11
    modules; GHPR406
  * sshd(8), ssh(1): better validate CASignatureAlgorithms in
    ssh_config and sshd_config. Previously this directive would accept
    certificate algorithm names, but these were unusable in practice as
    OpenSSH does not support CA chains. bz3577
  * ssh(1): make `ssh -Q CASignatureAlgorithms` only list signature
    algorithms that are valid for CA signing. Previous behaviour was
    to list all signing algorithms, including certificate algorithms.
  * ssh-keyscan(1): gracefully handle systems where rlimits or the
    maximum number of open files is larger than INT_MAX; bz3581
  * ssh-keygen(1): fix "no comment" not showing on when running
    `ssh-keygen -l` on multiple keys where one has a comment and other
    following keys do not. bz3580
  * scp(1), sftp(1): adjust ftruncate() logic to handle servers that
    reorder requests. Previously, if the server reordered requests then
    the resultant file would be erroneously truncated.
  * ssh(1): don't incorrectly disable hostname canonicalization when
    CanonicalizeHostname=yes and ProxyJump was expicitly set to
    "none". bz3567
  * scp(1): when copying local-&gt;remote, check that the source file
    exists before opening an SFTP connection to the server. Based on
    GHPR#370
- Dropped patches:
  * cb4ed12f.patch - implemented upstream.
- Rebased patches:
  * openssh-7.7p1-fips.patch
  * openssh-7.8p1-role-mls.patch
  * openssh-8.0p1-gssapi-keyex.patch
- Add patches from obs:
  * Mon Mar  4 09:57:06 UTC 2024 - Pedro Monreal &lt;pmonreal@suse.com&gt;
- Add crypto-policies support [bsc#1211301]
  * Add patches:
  - openssh-9.6p1-crypto-policies.patch
  - openssh-9.6p1-crypto-policies-man.patch</changelog>
  <changelog author="opensuse@arnavion.dev" date="1712836800">- Fix duplicate loading of dropins. (boo#1222467)</changelog>
  <changelog author="alarrosa@suse.com" date="1712923200">- Make openssh-server recommend the openssh-server-config-rootlogin
  package in SLE in order to keep the same behaviour of previous
  SPs where the PermitRootLogin default was set to yes
  (bsc#1221005).
- Fix crypto-policies requirement to be set by openssh-server, not
  the config-rootlogin subpackage.
- Add back %config(noreplace) tag for more config files that were
  already set like this in previous SPs.</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- openssh-8.0p1-gssapi-keyex.patch: Added missing struct initializer,
  added missing parameter (bsc#1222840)</changelog>
  <changelog author="alarrosa@suse.com" date="1715601600">- Only for SLE15, restore the patch file removed in
  Thu Feb 18 13:54:44 UTC 2021 to restore the previous behaviour
  from SP5 of having root password login allowed by default
  (fixes bsc#1223486, related to bsc#1173067):
  * openssh-7.7p1-allow_root_password_login.patch
- Since the default value for this config option is now set to
  permit root to use password logins in SLE15, the
  openssh-server-config-rootlogin subpackage isn't useful there so
  we now create an openssh-server-config-disallow-rootlogin
  subpackage that sets the configuration the other way around
  than openssh-server-config-rootlogin.</changelog>
  <changelog author="alarrosa@suse.com" date="1715688000">- Add a warning in %post of openssh-clients, openssh-server and
  openssh-server-config-disallow-rootlogin to warn the user if
  the /etc/ssh/(ssh_config.d|sshd_config.d) directories are not
  being used (bsc#1223486).</changelog>
  <changelog author="alarrosa@suse.com" date="1719835200">- Add patch to fix a race condition in a signal handler by removing
  the async-signal-unsafe code (CVE-2024-6387, bsc#1226642):
  * fix-CVE-2024-6387.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720008000">- Add obsoletes for openssh-server-config-rootlogin since that
  package existed for a brief period of time during SLE 15 SP6/
  Leap 15.6 development but even if it was removed from the
  repositories before GM, some users might have it in their
  systems from having tried a beta/RC release (boo#1227350).
- Add #include &lt;stdlib.h&gt; in some files added by the ldap patch to
  fix build with gcc14 (boo#1225904).
  * openssh-7.7p1-ldap.patch
- Remove the recommendation for openssh-server-config-rootlogin
  from openssh-server. Since the default for that config option
  was changed in SLE it's not needed anymore in SLE nor in TW
  (boo#1224392).</changelog>
  <changelog author="alarrosa@suse.com" date="1720180800">- Add patch from upstream to fix proxy multiplexing mode:
  * 0001-upstream-fix-proxy-multiplexing-mode_-broken-when-keystroke.patch
- Add patch from upstream to restore correctly sigprocmask
  * 0001-upstream-correctly-restore-sigprocmask-around-ppoll.patch
- Add patch from upstream to fix a logic error in
  ObscureKeystrokeTiming that rendered this feature ineffective,
  allowing a passive observer to detect which network packets
  contained real keystrokes (bsc#1227318, CVE-2024-39894):
  * 0001-upstream-when-sending-ObscureKeystrokeTiming-chaff-packets_.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720612800">- Remove empty line at the end of sshd-sle.pamd (bsc#1227456)</changelog>
  <changelog author="alarrosa@suse.com" date="1728648000">- Add a patch to fix a regression introduced in 9.6 that makes X11
  forwarding very slow. Submitted to upstream in
  https://bugzilla.mindrot.org/show_bug.cgi?id=3655#c4 . Fixes
  bsc#1229449:
  * fix-x11-regression-bsc1229449.patch
- Add a openssl11 bcond to the spec file for the SLE12 case
  instead of checking suse_version in different parts.
- Move conditional patches to a number &gt;= 1000.
- Several spec file fixes so the package builds and can be
  installed in SLE 15 SP5 and SLE 12 SP5
- Drop most of openssh-6.6p1-keycat.patch (actually, it was just
  commented out). The keycat binary isn't really installed nor
  supported, so we can drop it, except for the code that is used
  by other SELinux patches, which is what I kept from that patch
  (boo#1229072).
- Add patch submitted to upstream to fix RFC4256 implementation
  so that keyboard-interactive authentication method can send
  instructions and sshd shows them to users even before a prompt
  is requested. This fixes MFA push notifications (boo#1229010).
  * 0001-auth-pam-Immediately-report-instructions-to-clients-and-fix-handling-in-ssh-client.patch
- Fix a dbus connection leaked in the logind patch that was
  missing a sd_bus_unref call (found by Matthias Gerstner):
  * logind_set_tty.patch
- Add a patch that fixes a small memory leak when parsing the
  subsystem configuration option:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1728907200">- Use %{with ...} instead of 0%{with ...}</changelog>
  <changelog author="alarrosa@suse.com" date="1739448000">- Fix a MitM attack against OpenSSH's VerifyHostKeyDNS-enabled
  client and a DoS attack against OpenSSH's client and server
  (bsc#1237040, CVE-2025-26465, bsc#1237041, CVE-2025-26466):
  * fix-CVE-2025-26465-and-CVE-2025-26466.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1739880000">- Fix ssh client segfault with GSSAPIKeyExchange=yes in ssh_kex2
  due to gssapi proposal not being correctly initialized
  (bsc#1236826). The problem was introduced in the rebase of
  the patch for 9.6p1:
  * openssh-8.0p1-gssapi-keyex.patch
- Rebase patch and apply it:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="hpj@suse.com" date="1746532800">- Added openssh-cve-2025-32728.patch (bsc#1241012, CVE-2025-32728).
  This fixes an upstream logic error handling the DisableForwarding
  option.</changelog>
  <changelog author="alarrosa@suse.com" date="1747137600">- Enable --with-logind to call the SetTTY dbus method in systemd.
  This allows "wall" to print messages in ssh ttys (bsc#1239671)
- Small fixes to unref the dbus session when any error occurs:
  * logind_set_tty.patch</changelog>
  <changelog author="hpj@suse.com" date="1748952000">- Add openssh-scp-umask-preserve-permissions.patch (bsc#1241667).</changelog>
  <changelog author="hpj@suse.com" date="1762516800">- Add openssh-cve-2025-61984-username-validation.patch
  (bsc#1251198, CVE-2025-61984).
- Add openssh-cve-2025-61985-nul-url-encode.patch
  (bsc#1251199, CVE-2025-61985).</changelog>
  <changelog author="hpj@suse.com" date="1778241600">- Added openssh-cve-2026-35385-scp-setuid-modes.patch (bsc#1261427),
  ensuring setuid bits default to being masked out by scp.
- Added openssh-cve-2026-35414-mishandled-ca-commas.patch
  (bsc#1261430), fixing mishandling of comma characters in CA in
  certain situations.</changelog>
</package>
<package pkgid="938f437502c9c718b8b690ded2e93645810f492c106cfc151cf30c5b2968e879" name="openssh-common" arch="x86_64">
  <version epoch="0" ver="9.6p1" rel="150600.6.26.1"/>
  <changelog author="hpj@suse.com" date="1700827200">- Merge updates from openSUSE. Existing patches were rebased.
- Remove openssh-7.6p1-audit_race_condition.patch: Merged with
  audit patch.
- Remove openssh-CVE-2021-28041-agent-double-free.patch: Fixed
  upstream.
- Remove openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch:
  Fixed upstream.
- Remove openssh-CVE-2023-38408-PKCS11-execution.patch: Fixed
  upstream.
- Add cb4ed12f.patch from upstream, allowing newer versions of
  zlib to be used.
- Add logind_set_tty.patch by Thorsten Kukuk. This informs
  systemd-logind of the login TTY and prevents having to parse utmp,
  which is deprecated by glibc.</changelog>
  <changelog author="alarrosa@suse.com" date="1710244800">- Uncomment %sysuser_requires in openssh-server which was commented
  by mistake and is needed by the pre script installed with
  %sysusers_generate_pre (bsc#1220802).</changelog>
  <changelog author="alarrosa@suse.com" date="1712059200">- Use %config(noreplace) for sshd_config . In any case, it's
  recommended to drop a file in sshd_config.d instead of editing
  sshd_config (bsc#1221063)
- Add patches from obs package that were also in SP3/SP4/SP5:
  * Fri Nov  3 10:44:14 UTC 2023 - Johannes Segitz &lt;jsegitz@suse.com&gt;
  - Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712059201">- Rebase openssh-7.7p1-fips.patch (bsc#1221928)
  Remove OPENSSL_HAVE_EVPGCM-ifdef, which is no longer supported by upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1712577600">- Update to openssh 9.6p1:
  = Security
  * ssh(1), sshd(8): implement protocol extensions to thwart the
    so-called "Terrapin attack" discovered by Fabian Bäumer, Marcus
    Brinkmann and Jörg Schwenk. This attack allows a MITM to effect a
    limited break of the integrity of the early encrypted SSH transport
    protocol by sending extra messages prior to the commencement of
    encryption, and deleting an equal number of consecutive messages
    immediately after encryption starts. A peer SSH client/server
    would not be able to detect that messages were deleted
    (bsc#1217950, CVE-2023-48795).
  * ssh-agent(1): when adding PKCS#11-hosted private keys while
    specifying destination constraints, if the PKCS#11 token returned
    multiple keys then only the first key had the constraints applied.
    Use of regular private keys, FIDO tokens and unconstrained keys
    are unaffected.
  * ssh(1): if an invalid user or hostname that contained shell
    metacharacters was passed to ssh(1), and a ProxyCommand,
    LocalCommand directive or "match exec" predicate referenced the
    user or hostname via %u, %h or similar expansion token, then
    an attacker who could supply arbitrary user/hostnames to ssh(1)
    could potentially perform command injection depending on what
    quoting was present in the user-supplied ssh_config(5) directive
    (bsc#1218215, CVE-2023-51385).
  = Potentially incompatible changes
  * ssh(1), sshd(8): the RFC4254 connection/channels protocol provides
    a TCP-like window mechanism that limits the amount of data that
    can be sent without acceptance from the peer. In cases where this
    limit was exceeded by a non-conforming peer SSH implementation,
    ssh(1)/sshd(8) previously discarded the extra data. From OpenSSH
    9.6, ssh(1)/sshd(8) will now terminate the connection if a peer
    exceeds the window limit by more than a small grace factor. This
    change should have no effect of SSH implementations that follow
    the specification.
  = New features
  * ssh(1): add a %j token that expands to the configured ProxyJump
    hostname (or the empty string if this option is not being used)
    that can be used in a number of ssh_config(5) keywords. bz3610
  * ssh(1): add ChannelTimeout support to the client, mirroring the
    same option in the server and allowing ssh(1) to terminate
    quiescent channels.
  * ssh(1), sshd(8), ssh-add(1), ssh-keygen(1): add support for
    reading ED25519 private keys in PEM PKCS8 format. Previously
    only the OpenSSH private key format was supported.
  * ssh(1), sshd(8): introduce a protocol extension to allow
    renegotiation of acceptable signature algorithms for public key
    authentication after the server has learned the username being
    used for authentication. This allows varying sshd_config(5)
    PubkeyAcceptedAlgorithms in a "Match user" block.
  * ssh-add(1), ssh-agent(1): add an agent protocol extension to allow
    specifying certificates when loading PKCS#11 keys. This allows the
    use of certificates backed by PKCS#11 private keys in all OpenSSH
    tools that support ssh-agent(1). Previously only ssh(1) supported
    this use-case.
  = Bugfixes
  * ssh(1): when deciding whether to enable the keystroke timing
    obfuscation, enable it only if a channel with a TTY is active.
  * ssh(1): switch mainloop from poll(3) to ppoll(3) and mask signals
    before checking flags set in signal handler. Avoids potential
    race condition between signaling ssh to exit and polling. bz3531
  * ssh(1): when connecting to a destination with both the
    AddressFamily and CanonicalizeHostname directives in use,
    the AddressFamily directive could be ignored. bz5326
  * sftp(1): correct handling of the limits@openssh.com option when
    the server returned an unexpected message.
  * A number of fixes to the PuTTY and Dropbear regress/integration
    tests.
  * ssh(1): release GSS OIDs only at end of authentication, avoiding
    unnecessary init/cleanup cycles. bz2982
  * ssh_config(5): mention "none" is a valid argument to IdentityFile
    in the manual. bz3080
  * scp(1): improved debugging for paths from the server rejected for
    not matching the client's glob(3) pattern in old SCP/RCP protocol
    mode.
  * ssh-agent(1): refuse signing operations on destination-constrained
    keys if a previous session-bind operation has failed. This may
    prevent a fail-open situation in future if a user uses a mismatched
    ssh(1) client and ssh-agent(1) where the client supports a key type
    that the agent does not support.
- Update to openssh 9.5p1:
  = Potentially incompatible changes
  * ssh-keygen(1): generate Ed25519 keys by default. Ed25519 public keys
    are very convenient due to their small size. Ed25519 keys are
    specified in RFC 8709 and OpenSSH has supported them since version 6.5
    (January 2014).
  * sshd(8): the Subsystem directive now accurately preserves quoting of
    subsystem commands and arguments. This may change behaviour for exotic
    configurations, but the most common subsystem configuration
    (sftp-server) is unlikely to be affected.
  = New features
  * ssh(1): add keystroke timing obfuscation to the client. This attempts
    to hide inter-keystroke timings by sending interactive traffic at
    fixed intervals (default: every 20ms) when there is only a small
    amount of data being sent. It also sends fake "chaff" keystrokes for
    a random interval after the last real keystroke. These are
    controlled by a new ssh_config ObscureKeystrokeTiming keyword.
  * ssh(1), sshd(8): Introduce a transport-level ping facility. This adds
    a pair of SSH transport protocol messages SSH2_MSG_PING/PONG to
    implement a ping capability. These messages use numbers in the "local
    extensions" number space and are advertised using a "ping@openssh.com"
    ext-info message with a string version number of "0".
  * sshd(8): allow override of Subsystem directives in sshd Match blocks.
  = Bugfixes
  * scp(1): fix scp in SFTP mode recursive upload and download of
    directories that contain symlinks to other directories. In scp mode,
    the links would be followed, but in SFTP mode they were not. bz3611
  * ssh-keygen(1): handle cr+lf (instead of just cr) line endings in
    sshsig signature files.
  * ssh(1): interactive mode for ControlPersist sessions if they
    originally requested a tty.
  * sshd(8): make PerSourceMaxStartups first-match-wins
  * sshd(8): limit artificial login delay to a reasonable maximum (5s)
    and don't delay at all for the "none" authentication mechanism.
    bz3602
  * sshd(8): Log errors in kex_exchange_identification() with level
    verbose instead of error to reduce preauth log spam. All of those
    get logged with a more generic error message by sshpkt_fatal().
  * sshd(8): correct math for ClientAliveInterval that caused the probes
    to be sent less frequently than configured.
  * ssh(1): fix regression in OpenSSH 9.4 (mux.c r1.99) that caused
    multiplexed sessions to ignore SIGINT under some circumstances.
- Update to openssh 9.4p1:
  = Potentially incompatible changes
  * This release removes support for older versions of libcrypto.
    OpenSSH now requires LibreSSL &gt;= 3.1.0 or OpenSSL &gt;= 1.1.1.
    Note that these versions are already deprecated by their upstream
    vendors.
  * ssh-agent(1): PKCS#11 modules must now be specified by their full
    paths. Previously dlopen(3) could search for them in system
    library directories.
  = New features
  * ssh(1): allow forwarding Unix Domain sockets via ssh -W.
  * ssh(1): add support for configuration tags to ssh(1).
    This adds a ssh_config(5) "Tag" directive and corresponding
    "Match tag" predicate that may be used to select blocks of
    configuration similar to the pf.conf(5) keywords of the same
    name.
  * ssh(1): add a "match localnetwork" predicate. This allows matching
    on the addresses of available network interfaces and may be used to
    vary the effective client configuration based on network location.
  * ssh(1), sshd(8), ssh-keygen(1): infrastructure support for KRL
    extensions.  This defines wire formats for optional KRL extensions
    and implements parsing of the new submessages. No actual extensions
    are supported at this point.
  * sshd(8): AuthorizedPrincipalsCommand and AuthorizedKeysCommand now
    accept two additional %-expansion sequences: %D which expands to
    the routing domain of the connected session and %C which expands
    to the addresses and port numbers for the source and destination
    of the connection.
  * ssh-keygen(1): increase the default work factor (rounds) for the
    bcrypt KDF used to derive symmetric encryption keys for passphrase
    protected key files by 50%.
  = Bugfixes
  * ssh-agent(1): improve isolation between loaded PKCS#11 modules
    by running separate ssh-pkcs11-helpers for each loaded provider.
  * ssh(1): make -f (fork after authentication) work correctly with
    multiplexed connections, including ControlPersist. bz3589 bz3589
  * ssh(1): make ConnectTimeout apply to multiplexing sockets and not
    just to network connections.
  * ssh-agent(1), ssh(1): improve defences against invalid PKCS#11
    modules being loaded by checking that the requested module
    contains the required symbol before loading it.
  * sshd(8): fix AuthorizedPrincipalsCommand when AuthorizedKeysCommand
    appears before it in sshd_config. Since OpenSSH 8.7 the
    AuthorizedPrincipalsCommand directive was incorrectly ignored in
    this situation. bz3574
  * sshd(8), ssh(1), ssh-keygen(1): remove vestigal support for KRL
    signatures When the KRL format was originally defined, it included
    support for signing of KRL objects. However, the code to sign KRLs
    and verify KRL signatues was never completed in OpenSSH. This
    release removes the partially-implemented code to verify KRLs.
    All OpenSSH tools now ignore KRL_SECTION_SIGNATURE sections in
    KRL files.
  * All: fix a number of memory leaks and unreachable/harmless integer
    overflows.
  * ssh-agent(1), ssh(1): don't truncate strings logged from PKCS#11
    modules; GHPR406
  * sshd(8), ssh(1): better validate CASignatureAlgorithms in
    ssh_config and sshd_config. Previously this directive would accept
    certificate algorithm names, but these were unusable in practice as
    OpenSSH does not support CA chains. bz3577
  * ssh(1): make `ssh -Q CASignatureAlgorithms` only list signature
    algorithms that are valid for CA signing. Previous behaviour was
    to list all signing algorithms, including certificate algorithms.
  * ssh-keyscan(1): gracefully handle systems where rlimits or the
    maximum number of open files is larger than INT_MAX; bz3581
  * ssh-keygen(1): fix "no comment" not showing on when running
    `ssh-keygen -l` on multiple keys where one has a comment and other
    following keys do not. bz3580
  * scp(1), sftp(1): adjust ftruncate() logic to handle servers that
    reorder requests. Previously, if the server reordered requests then
    the resultant file would be erroneously truncated.
  * ssh(1): don't incorrectly disable hostname canonicalization when
    CanonicalizeHostname=yes and ProxyJump was expicitly set to
    "none". bz3567
  * scp(1): when copying local-&gt;remote, check that the source file
    exists before opening an SFTP connection to the server. Based on
    GHPR#370
- Dropped patches:
  * cb4ed12f.patch - implemented upstream.
- Rebased patches:
  * openssh-7.7p1-fips.patch
  * openssh-7.8p1-role-mls.patch
  * openssh-8.0p1-gssapi-keyex.patch
- Add patches from obs:
  * Mon Mar  4 09:57:06 UTC 2024 - Pedro Monreal &lt;pmonreal@suse.com&gt;
- Add crypto-policies support [bsc#1211301]
  * Add patches:
  - openssh-9.6p1-crypto-policies.patch
  - openssh-9.6p1-crypto-policies-man.patch</changelog>
  <changelog author="opensuse@arnavion.dev" date="1712836800">- Fix duplicate loading of dropins. (boo#1222467)</changelog>
  <changelog author="alarrosa@suse.com" date="1712923200">- Make openssh-server recommend the openssh-server-config-rootlogin
  package in SLE in order to keep the same behaviour of previous
  SPs where the PermitRootLogin default was set to yes
  (bsc#1221005).
- Fix crypto-policies requirement to be set by openssh-server, not
  the config-rootlogin subpackage.
- Add back %config(noreplace) tag for more config files that were
  already set like this in previous SPs.</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- openssh-8.0p1-gssapi-keyex.patch: Added missing struct initializer,
  added missing parameter (bsc#1222840)</changelog>
  <changelog author="alarrosa@suse.com" date="1715601600">- Only for SLE15, restore the patch file removed in
  Thu Feb 18 13:54:44 UTC 2021 to restore the previous behaviour
  from SP5 of having root password login allowed by default
  (fixes bsc#1223486, related to bsc#1173067):
  * openssh-7.7p1-allow_root_password_login.patch
- Since the default value for this config option is now set to
  permit root to use password logins in SLE15, the
  openssh-server-config-rootlogin subpackage isn't useful there so
  we now create an openssh-server-config-disallow-rootlogin
  subpackage that sets the configuration the other way around
  than openssh-server-config-rootlogin.</changelog>
  <changelog author="alarrosa@suse.com" date="1715688000">- Add a warning in %post of openssh-clients, openssh-server and
  openssh-server-config-disallow-rootlogin to warn the user if
  the /etc/ssh/(ssh_config.d|sshd_config.d) directories are not
  being used (bsc#1223486).</changelog>
  <changelog author="alarrosa@suse.com" date="1719835200">- Add patch to fix a race condition in a signal handler by removing
  the async-signal-unsafe code (CVE-2024-6387, bsc#1226642):
  * fix-CVE-2024-6387.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720008000">- Add obsoletes for openssh-server-config-rootlogin since that
  package existed for a brief period of time during SLE 15 SP6/
  Leap 15.6 development but even if it was removed from the
  repositories before GM, some users might have it in their
  systems from having tried a beta/RC release (boo#1227350).
- Add #include &lt;stdlib.h&gt; in some files added by the ldap patch to
  fix build with gcc14 (boo#1225904).
  * openssh-7.7p1-ldap.patch
- Remove the recommendation for openssh-server-config-rootlogin
  from openssh-server. Since the default for that config option
  was changed in SLE it's not needed anymore in SLE nor in TW
  (boo#1224392).</changelog>
  <changelog author="alarrosa@suse.com" date="1720180800">- Add patch from upstream to fix proxy multiplexing mode:
  * 0001-upstream-fix-proxy-multiplexing-mode_-broken-when-keystroke.patch
- Add patch from upstream to restore correctly sigprocmask
  * 0001-upstream-correctly-restore-sigprocmask-around-ppoll.patch
- Add patch from upstream to fix a logic error in
  ObscureKeystrokeTiming that rendered this feature ineffective,
  allowing a passive observer to detect which network packets
  contained real keystrokes (bsc#1227318, CVE-2024-39894):
  * 0001-upstream-when-sending-ObscureKeystrokeTiming-chaff-packets_.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720612800">- Remove empty line at the end of sshd-sle.pamd (bsc#1227456)</changelog>
  <changelog author="alarrosa@suse.com" date="1728648000">- Add a patch to fix a regression introduced in 9.6 that makes X11
  forwarding very slow. Submitted to upstream in
  https://bugzilla.mindrot.org/show_bug.cgi?id=3655#c4 . Fixes
  bsc#1229449:
  * fix-x11-regression-bsc1229449.patch
- Add a openssl11 bcond to the spec file for the SLE12 case
  instead of checking suse_version in different parts.
- Move conditional patches to a number &gt;= 1000.
- Several spec file fixes so the package builds and can be
  installed in SLE 15 SP5 and SLE 12 SP5
- Drop most of openssh-6.6p1-keycat.patch (actually, it was just
  commented out). The keycat binary isn't really installed nor
  supported, so we can drop it, except for the code that is used
  by other SELinux patches, which is what I kept from that patch
  (boo#1229072).
- Add patch submitted to upstream to fix RFC4256 implementation
  so that keyboard-interactive authentication method can send
  instructions and sshd shows them to users even before a prompt
  is requested. This fixes MFA push notifications (boo#1229010).
  * 0001-auth-pam-Immediately-report-instructions-to-clients-and-fix-handling-in-ssh-client.patch
- Fix a dbus connection leaked in the logind patch that was
  missing a sd_bus_unref call (found by Matthias Gerstner):
  * logind_set_tty.patch
- Add a patch that fixes a small memory leak when parsing the
  subsystem configuration option:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1728907200">- Use %{with ...} instead of 0%{with ...}</changelog>
  <changelog author="alarrosa@suse.com" date="1739448000">- Fix a MitM attack against OpenSSH's VerifyHostKeyDNS-enabled
  client and a DoS attack against OpenSSH's client and server
  (bsc#1237040, CVE-2025-26465, bsc#1237041, CVE-2025-26466):
  * fix-CVE-2025-26465-and-CVE-2025-26466.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1739880000">- Fix ssh client segfault with GSSAPIKeyExchange=yes in ssh_kex2
  due to gssapi proposal not being correctly initialized
  (bsc#1236826). The problem was introduced in the rebase of
  the patch for 9.6p1:
  * openssh-8.0p1-gssapi-keyex.patch
- Rebase patch and apply it:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="hpj@suse.com" date="1746532800">- Added openssh-cve-2025-32728.patch (bsc#1241012, CVE-2025-32728).
  This fixes an upstream logic error handling the DisableForwarding
  option.</changelog>
  <changelog author="alarrosa@suse.com" date="1747137600">- Enable --with-logind to call the SetTTY dbus method in systemd.
  This allows "wall" to print messages in ssh ttys (bsc#1239671)
- Small fixes to unref the dbus session when any error occurs:
  * logind_set_tty.patch</changelog>
</package>
<package pkgid="bc915d48b872b92328dbdfa3584965b974840218781f07430ce612a7d5985bc0" name="openssh-common" arch="x86_64">
  <version epoch="0" ver="9.6p1" rel="150600.6.29.2"/>
  <changelog author="alarrosa@suse.com" date="1710244800">- Uncomment %sysuser_requires in openssh-server which was commented
  by mistake and is needed by the pre script installed with
  %sysusers_generate_pre (bsc#1220802).</changelog>
  <changelog author="alarrosa@suse.com" date="1712059200">- Use %config(noreplace) for sshd_config . In any case, it's
  recommended to drop a file in sshd_config.d instead of editing
  sshd_config (bsc#1221063)
- Add patches from obs package that were also in SP3/SP4/SP5:
  * Fri Nov  3 10:44:14 UTC 2023 - Johannes Segitz &lt;jsegitz@suse.com&gt;
  - Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712059201">- Rebase openssh-7.7p1-fips.patch (bsc#1221928)
  Remove OPENSSL_HAVE_EVPGCM-ifdef, which is no longer supported by upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1712577600">- Update to openssh 9.6p1:
  = Security
  * ssh(1), sshd(8): implement protocol extensions to thwart the
    so-called "Terrapin attack" discovered by Fabian Bäumer, Marcus
    Brinkmann and Jörg Schwenk. This attack allows a MITM to effect a
    limited break of the integrity of the early encrypted SSH transport
    protocol by sending extra messages prior to the commencement of
    encryption, and deleting an equal number of consecutive messages
    immediately after encryption starts. A peer SSH client/server
    would not be able to detect that messages were deleted
    (bsc#1217950, CVE-2023-48795).
  * ssh-agent(1): when adding PKCS#11-hosted private keys while
    specifying destination constraints, if the PKCS#11 token returned
    multiple keys then only the first key had the constraints applied.
    Use of regular private keys, FIDO tokens and unconstrained keys
    are unaffected.
  * ssh(1): if an invalid user or hostname that contained shell
    metacharacters was passed to ssh(1), and a ProxyCommand,
    LocalCommand directive or "match exec" predicate referenced the
    user or hostname via %u, %h or similar expansion token, then
    an attacker who could supply arbitrary user/hostnames to ssh(1)
    could potentially perform command injection depending on what
    quoting was present in the user-supplied ssh_config(5) directive
    (bsc#1218215, CVE-2023-51385).
  = Potentially incompatible changes
  * ssh(1), sshd(8): the RFC4254 connection/channels protocol provides
    a TCP-like window mechanism that limits the amount of data that
    can be sent without acceptance from the peer. In cases where this
    limit was exceeded by a non-conforming peer SSH implementation,
    ssh(1)/sshd(8) previously discarded the extra data. From OpenSSH
    9.6, ssh(1)/sshd(8) will now terminate the connection if a peer
    exceeds the window limit by more than a small grace factor. This
    change should have no effect of SSH implementations that follow
    the specification.
  = New features
  * ssh(1): add a %j token that expands to the configured ProxyJump
    hostname (or the empty string if this option is not being used)
    that can be used in a number of ssh_config(5) keywords. bz3610
  * ssh(1): add ChannelTimeout support to the client, mirroring the
    same option in the server and allowing ssh(1) to terminate
    quiescent channels.
  * ssh(1), sshd(8), ssh-add(1), ssh-keygen(1): add support for
    reading ED25519 private keys in PEM PKCS8 format. Previously
    only the OpenSSH private key format was supported.
  * ssh(1), sshd(8): introduce a protocol extension to allow
    renegotiation of acceptable signature algorithms for public key
    authentication after the server has learned the username being
    used for authentication. This allows varying sshd_config(5)
    PubkeyAcceptedAlgorithms in a "Match user" block.
  * ssh-add(1), ssh-agent(1): add an agent protocol extension to allow
    specifying certificates when loading PKCS#11 keys. This allows the
    use of certificates backed by PKCS#11 private keys in all OpenSSH
    tools that support ssh-agent(1). Previously only ssh(1) supported
    this use-case.
  = Bugfixes
  * ssh(1): when deciding whether to enable the keystroke timing
    obfuscation, enable it only if a channel with a TTY is active.
  * ssh(1): switch mainloop from poll(3) to ppoll(3) and mask signals
    before checking flags set in signal handler. Avoids potential
    race condition between signaling ssh to exit and polling. bz3531
  * ssh(1): when connecting to a destination with both the
    AddressFamily and CanonicalizeHostname directives in use,
    the AddressFamily directive could be ignored. bz5326
  * sftp(1): correct handling of the limits@openssh.com option when
    the server returned an unexpected message.
  * A number of fixes to the PuTTY and Dropbear regress/integration
    tests.
  * ssh(1): release GSS OIDs only at end of authentication, avoiding
    unnecessary init/cleanup cycles. bz2982
  * ssh_config(5): mention "none" is a valid argument to IdentityFile
    in the manual. bz3080
  * scp(1): improved debugging for paths from the server rejected for
    not matching the client's glob(3) pattern in old SCP/RCP protocol
    mode.
  * ssh-agent(1): refuse signing operations on destination-constrained
    keys if a previous session-bind operation has failed. This may
    prevent a fail-open situation in future if a user uses a mismatched
    ssh(1) client and ssh-agent(1) where the client supports a key type
    that the agent does not support.
- Update to openssh 9.5p1:
  = Potentially incompatible changes
  * ssh-keygen(1): generate Ed25519 keys by default. Ed25519 public keys
    are very convenient due to their small size. Ed25519 keys are
    specified in RFC 8709 and OpenSSH has supported them since version 6.5
    (January 2014).
  * sshd(8): the Subsystem directive now accurately preserves quoting of
    subsystem commands and arguments. This may change behaviour for exotic
    configurations, but the most common subsystem configuration
    (sftp-server) is unlikely to be affected.
  = New features
  * ssh(1): add keystroke timing obfuscation to the client. This attempts
    to hide inter-keystroke timings by sending interactive traffic at
    fixed intervals (default: every 20ms) when there is only a small
    amount of data being sent. It also sends fake "chaff" keystrokes for
    a random interval after the last real keystroke. These are
    controlled by a new ssh_config ObscureKeystrokeTiming keyword.
  * ssh(1), sshd(8): Introduce a transport-level ping facility. This adds
    a pair of SSH transport protocol messages SSH2_MSG_PING/PONG to
    implement a ping capability. These messages use numbers in the "local
    extensions" number space and are advertised using a "ping@openssh.com"
    ext-info message with a string version number of "0".
  * sshd(8): allow override of Subsystem directives in sshd Match blocks.
  = Bugfixes
  * scp(1): fix scp in SFTP mode recursive upload and download of
    directories that contain symlinks to other directories. In scp mode,
    the links would be followed, but in SFTP mode they were not. bz3611
  * ssh-keygen(1): handle cr+lf (instead of just cr) line endings in
    sshsig signature files.
  * ssh(1): interactive mode for ControlPersist sessions if they
    originally requested a tty.
  * sshd(8): make PerSourceMaxStartups first-match-wins
  * sshd(8): limit artificial login delay to a reasonable maximum (5s)
    and don't delay at all for the "none" authentication mechanism.
    bz3602
  * sshd(8): Log errors in kex_exchange_identification() with level
    verbose instead of error to reduce preauth log spam. All of those
    get logged with a more generic error message by sshpkt_fatal().
  * sshd(8): correct math for ClientAliveInterval that caused the probes
    to be sent less frequently than configured.
  * ssh(1): fix regression in OpenSSH 9.4 (mux.c r1.99) that caused
    multiplexed sessions to ignore SIGINT under some circumstances.
- Update to openssh 9.4p1:
  = Potentially incompatible changes
  * This release removes support for older versions of libcrypto.
    OpenSSH now requires LibreSSL &gt;= 3.1.0 or OpenSSL &gt;= 1.1.1.
    Note that these versions are already deprecated by their upstream
    vendors.
  * ssh-agent(1): PKCS#11 modules must now be specified by their full
    paths. Previously dlopen(3) could search for them in system
    library directories.
  = New features
  * ssh(1): allow forwarding Unix Domain sockets via ssh -W.
  * ssh(1): add support for configuration tags to ssh(1).
    This adds a ssh_config(5) "Tag" directive and corresponding
    "Match tag" predicate that may be used to select blocks of
    configuration similar to the pf.conf(5) keywords of the same
    name.
  * ssh(1): add a "match localnetwork" predicate. This allows matching
    on the addresses of available network interfaces and may be used to
    vary the effective client configuration based on network location.
  * ssh(1), sshd(8), ssh-keygen(1): infrastructure support for KRL
    extensions.  This defines wire formats for optional KRL extensions
    and implements parsing of the new submessages. No actual extensions
    are supported at this point.
  * sshd(8): AuthorizedPrincipalsCommand and AuthorizedKeysCommand now
    accept two additional %-expansion sequences: %D which expands to
    the routing domain of the connected session and %C which expands
    to the addresses and port numbers for the source and destination
    of the connection.
  * ssh-keygen(1): increase the default work factor (rounds) for the
    bcrypt KDF used to derive symmetric encryption keys for passphrase
    protected key files by 50%.
  = Bugfixes
  * ssh-agent(1): improve isolation between loaded PKCS#11 modules
    by running separate ssh-pkcs11-helpers for each loaded provider.
  * ssh(1): make -f (fork after authentication) work correctly with
    multiplexed connections, including ControlPersist. bz3589 bz3589
  * ssh(1): make ConnectTimeout apply to multiplexing sockets and not
    just to network connections.
  * ssh-agent(1), ssh(1): improve defences against invalid PKCS#11
    modules being loaded by checking that the requested module
    contains the required symbol before loading it.
  * sshd(8): fix AuthorizedPrincipalsCommand when AuthorizedKeysCommand
    appears before it in sshd_config. Since OpenSSH 8.7 the
    AuthorizedPrincipalsCommand directive was incorrectly ignored in
    this situation. bz3574
  * sshd(8), ssh(1), ssh-keygen(1): remove vestigal support for KRL
    signatures When the KRL format was originally defined, it included
    support for signing of KRL objects. However, the code to sign KRLs
    and verify KRL signatues was never completed in OpenSSH. This
    release removes the partially-implemented code to verify KRLs.
    All OpenSSH tools now ignore KRL_SECTION_SIGNATURE sections in
    KRL files.
  * All: fix a number of memory leaks and unreachable/harmless integer
    overflows.
  * ssh-agent(1), ssh(1): don't truncate strings logged from PKCS#11
    modules; GHPR406
  * sshd(8), ssh(1): better validate CASignatureAlgorithms in
    ssh_config and sshd_config. Previously this directive would accept
    certificate algorithm names, but these were unusable in practice as
    OpenSSH does not support CA chains. bz3577
  * ssh(1): make `ssh -Q CASignatureAlgorithms` only list signature
    algorithms that are valid for CA signing. Previous behaviour was
    to list all signing algorithms, including certificate algorithms.
  * ssh-keyscan(1): gracefully handle systems where rlimits or the
    maximum number of open files is larger than INT_MAX; bz3581
  * ssh-keygen(1): fix "no comment" not showing on when running
    `ssh-keygen -l` on multiple keys where one has a comment and other
    following keys do not. bz3580
  * scp(1), sftp(1): adjust ftruncate() logic to handle servers that
    reorder requests. Previously, if the server reordered requests then
    the resultant file would be erroneously truncated.
  * ssh(1): don't incorrectly disable hostname canonicalization when
    CanonicalizeHostname=yes and ProxyJump was expicitly set to
    "none". bz3567
  * scp(1): when copying local-&gt;remote, check that the source file
    exists before opening an SFTP connection to the server. Based on
    GHPR#370
- Dropped patches:
  * cb4ed12f.patch - implemented upstream.
- Rebased patches:
  * openssh-7.7p1-fips.patch
  * openssh-7.8p1-role-mls.patch
  * openssh-8.0p1-gssapi-keyex.patch
- Add patches from obs:
  * Mon Mar  4 09:57:06 UTC 2024 - Pedro Monreal &lt;pmonreal@suse.com&gt;
- Add crypto-policies support [bsc#1211301]
  * Add patches:
  - openssh-9.6p1-crypto-policies.patch
  - openssh-9.6p1-crypto-policies-man.patch</changelog>
  <changelog author="opensuse@arnavion.dev" date="1712836800">- Fix duplicate loading of dropins. (boo#1222467)</changelog>
  <changelog author="alarrosa@suse.com" date="1712923200">- Make openssh-server recommend the openssh-server-config-rootlogin
  package in SLE in order to keep the same behaviour of previous
  SPs where the PermitRootLogin default was set to yes
  (bsc#1221005).
- Fix crypto-policies requirement to be set by openssh-server, not
  the config-rootlogin subpackage.
- Add back %config(noreplace) tag for more config files that were
  already set like this in previous SPs.</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- openssh-8.0p1-gssapi-keyex.patch: Added missing struct initializer,
  added missing parameter (bsc#1222840)</changelog>
  <changelog author="alarrosa@suse.com" date="1715601600">- Only for SLE15, restore the patch file removed in
  Thu Feb 18 13:54:44 UTC 2021 to restore the previous behaviour
  from SP5 of having root password login allowed by default
  (fixes bsc#1223486, related to bsc#1173067):
  * openssh-7.7p1-allow_root_password_login.patch
- Since the default value for this config option is now set to
  permit root to use password logins in SLE15, the
  openssh-server-config-rootlogin subpackage isn't useful there so
  we now create an openssh-server-config-disallow-rootlogin
  subpackage that sets the configuration the other way around
  than openssh-server-config-rootlogin.</changelog>
  <changelog author="alarrosa@suse.com" date="1715688000">- Add a warning in %post of openssh-clients, openssh-server and
  openssh-server-config-disallow-rootlogin to warn the user if
  the /etc/ssh/(ssh_config.d|sshd_config.d) directories are not
  being used (bsc#1223486).</changelog>
  <changelog author="alarrosa@suse.com" date="1719835200">- Add patch to fix a race condition in a signal handler by removing
  the async-signal-unsafe code (CVE-2024-6387, bsc#1226642):
  * fix-CVE-2024-6387.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720008000">- Add obsoletes for openssh-server-config-rootlogin since that
  package existed for a brief period of time during SLE 15 SP6/
  Leap 15.6 development but even if it was removed from the
  repositories before GM, some users might have it in their
  systems from having tried a beta/RC release (boo#1227350).
- Add #include &lt;stdlib.h&gt; in some files added by the ldap patch to
  fix build with gcc14 (boo#1225904).
  * openssh-7.7p1-ldap.patch
- Remove the recommendation for openssh-server-config-rootlogin
  from openssh-server. Since the default for that config option
  was changed in SLE it's not needed anymore in SLE nor in TW
  (boo#1224392).</changelog>
  <changelog author="alarrosa@suse.com" date="1720180800">- Add patch from upstream to fix proxy multiplexing mode:
  * 0001-upstream-fix-proxy-multiplexing-mode_-broken-when-keystroke.patch
- Add patch from upstream to restore correctly sigprocmask
  * 0001-upstream-correctly-restore-sigprocmask-around-ppoll.patch
- Add patch from upstream to fix a logic error in
  ObscureKeystrokeTiming that rendered this feature ineffective,
  allowing a passive observer to detect which network packets
  contained real keystrokes (bsc#1227318, CVE-2024-39894):
  * 0001-upstream-when-sending-ObscureKeystrokeTiming-chaff-packets_.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720612800">- Remove empty line at the end of sshd-sle.pamd (bsc#1227456)</changelog>
  <changelog author="alarrosa@suse.com" date="1728648000">- Add a patch to fix a regression introduced in 9.6 that makes X11
  forwarding very slow. Submitted to upstream in
  https://bugzilla.mindrot.org/show_bug.cgi?id=3655#c4 . Fixes
  bsc#1229449:
  * fix-x11-regression-bsc1229449.patch
- Add a openssl11 bcond to the spec file for the SLE12 case
  instead of checking suse_version in different parts.
- Move conditional patches to a number &gt;= 1000.
- Several spec file fixes so the package builds and can be
  installed in SLE 15 SP5 and SLE 12 SP5
- Drop most of openssh-6.6p1-keycat.patch (actually, it was just
  commented out). The keycat binary isn't really installed nor
  supported, so we can drop it, except for the code that is used
  by other SELinux patches, which is what I kept from that patch
  (boo#1229072).
- Add patch submitted to upstream to fix RFC4256 implementation
  so that keyboard-interactive authentication method can send
  instructions and sshd shows them to users even before a prompt
  is requested. This fixes MFA push notifications (boo#1229010).
  * 0001-auth-pam-Immediately-report-instructions-to-clients-and-fix-handling-in-ssh-client.patch
- Fix a dbus connection leaked in the logind patch that was
  missing a sd_bus_unref call (found by Matthias Gerstner):
  * logind_set_tty.patch
- Add a patch that fixes a small memory leak when parsing the
  subsystem configuration option:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1728907200">- Use %{with ...} instead of 0%{with ...}</changelog>
  <changelog author="alarrosa@suse.com" date="1739448000">- Fix a MitM attack against OpenSSH's VerifyHostKeyDNS-enabled
  client and a DoS attack against OpenSSH's client and server
  (bsc#1237040, CVE-2025-26465, bsc#1237041, CVE-2025-26466):
  * fix-CVE-2025-26465-and-CVE-2025-26466.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1739880000">- Fix ssh client segfault with GSSAPIKeyExchange=yes in ssh_kex2
  due to gssapi proposal not being correctly initialized
  (bsc#1236826). The problem was introduced in the rebase of
  the patch for 9.6p1:
  * openssh-8.0p1-gssapi-keyex.patch
- Rebase patch and apply it:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="hpj@suse.com" date="1746532800">- Added openssh-cve-2025-32728.patch (bsc#1241012, CVE-2025-32728).
  This fixes an upstream logic error handling the DisableForwarding
  option.</changelog>
  <changelog author="alarrosa@suse.com" date="1747137600">- Enable --with-logind to call the SetTTY dbus method in systemd.
  This allows "wall" to print messages in ssh ttys (bsc#1239671)
- Small fixes to unref the dbus session when any error occurs:
  * logind_set_tty.patch</changelog>
  <changelog author="hpj@suse.com" date="1748952000">- Add openssh-scp-umask-preserve-permissions.patch (bsc#1241667).</changelog>
</package>
<package pkgid="141ad78bbce23bc482b708cebb72837517400408740480c8874f8f44bd29130f" name="openssh-common" arch="x86_64">
  <version epoch="0" ver="9.6p1" rel="150600.6.34.1"/>
  <changelog author="alarrosa@suse.com" date="1712059200">- Use %config(noreplace) for sshd_config . In any case, it's
  recommended to drop a file in sshd_config.d instead of editing
  sshd_config (bsc#1221063)
- Add patches from obs package that were also in SP3/SP4/SP5:
  * Fri Nov  3 10:44:14 UTC 2023 - Johannes Segitz &lt;jsegitz@suse.com&gt;
  - Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712059201">- Rebase openssh-7.7p1-fips.patch (bsc#1221928)
  Remove OPENSSL_HAVE_EVPGCM-ifdef, which is no longer supported by upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1712577600">- Update to openssh 9.6p1:
  = Security
  * ssh(1), sshd(8): implement protocol extensions to thwart the
    so-called "Terrapin attack" discovered by Fabian Bäumer, Marcus
    Brinkmann and Jörg Schwenk. This attack allows a MITM to effect a
    limited break of the integrity of the early encrypted SSH transport
    protocol by sending extra messages prior to the commencement of
    encryption, and deleting an equal number of consecutive messages
    immediately after encryption starts. A peer SSH client/server
    would not be able to detect that messages were deleted
    (bsc#1217950, CVE-2023-48795).
  * ssh-agent(1): when adding PKCS#11-hosted private keys while
    specifying destination constraints, if the PKCS#11 token returned
    multiple keys then only the first key had the constraints applied.
    Use of regular private keys, FIDO tokens and unconstrained keys
    are unaffected.
  * ssh(1): if an invalid user or hostname that contained shell
    metacharacters was passed to ssh(1), and a ProxyCommand,
    LocalCommand directive or "match exec" predicate referenced the
    user or hostname via %u, %h or similar expansion token, then
    an attacker who could supply arbitrary user/hostnames to ssh(1)
    could potentially perform command injection depending on what
    quoting was present in the user-supplied ssh_config(5) directive
    (bsc#1218215, CVE-2023-51385).
  = Potentially incompatible changes
  * ssh(1), sshd(8): the RFC4254 connection/channels protocol provides
    a TCP-like window mechanism that limits the amount of data that
    can be sent without acceptance from the peer. In cases where this
    limit was exceeded by a non-conforming peer SSH implementation,
    ssh(1)/sshd(8) previously discarded the extra data. From OpenSSH
    9.6, ssh(1)/sshd(8) will now terminate the connection if a peer
    exceeds the window limit by more than a small grace factor. This
    change should have no effect of SSH implementations that follow
    the specification.
  = New features
  * ssh(1): add a %j token that expands to the configured ProxyJump
    hostname (or the empty string if this option is not being used)
    that can be used in a number of ssh_config(5) keywords. bz3610
  * ssh(1): add ChannelTimeout support to the client, mirroring the
    same option in the server and allowing ssh(1) to terminate
    quiescent channels.
  * ssh(1), sshd(8), ssh-add(1), ssh-keygen(1): add support for
    reading ED25519 private keys in PEM PKCS8 format. Previously
    only the OpenSSH private key format was supported.
  * ssh(1), sshd(8): introduce a protocol extension to allow
    renegotiation of acceptable signature algorithms for public key
    authentication after the server has learned the username being
    used for authentication. This allows varying sshd_config(5)
    PubkeyAcceptedAlgorithms in a "Match user" block.
  * ssh-add(1), ssh-agent(1): add an agent protocol extension to allow
    specifying certificates when loading PKCS#11 keys. This allows the
    use of certificates backed by PKCS#11 private keys in all OpenSSH
    tools that support ssh-agent(1). Previously only ssh(1) supported
    this use-case.
  = Bugfixes
  * ssh(1): when deciding whether to enable the keystroke timing
    obfuscation, enable it only if a channel with a TTY is active.
  * ssh(1): switch mainloop from poll(3) to ppoll(3) and mask signals
    before checking flags set in signal handler. Avoids potential
    race condition between signaling ssh to exit and polling. bz3531
  * ssh(1): when connecting to a destination with both the
    AddressFamily and CanonicalizeHostname directives in use,
    the AddressFamily directive could be ignored. bz5326
  * sftp(1): correct handling of the limits@openssh.com option when
    the server returned an unexpected message.
  * A number of fixes to the PuTTY and Dropbear regress/integration
    tests.
  * ssh(1): release GSS OIDs only at end of authentication, avoiding
    unnecessary init/cleanup cycles. bz2982
  * ssh_config(5): mention "none" is a valid argument to IdentityFile
    in the manual. bz3080
  * scp(1): improved debugging for paths from the server rejected for
    not matching the client's glob(3) pattern in old SCP/RCP protocol
    mode.
  * ssh-agent(1): refuse signing operations on destination-constrained
    keys if a previous session-bind operation has failed. This may
    prevent a fail-open situation in future if a user uses a mismatched
    ssh(1) client and ssh-agent(1) where the client supports a key type
    that the agent does not support.
- Update to openssh 9.5p1:
  = Potentially incompatible changes
  * ssh-keygen(1): generate Ed25519 keys by default. Ed25519 public keys
    are very convenient due to their small size. Ed25519 keys are
    specified in RFC 8709 and OpenSSH has supported them since version 6.5
    (January 2014).
  * sshd(8): the Subsystem directive now accurately preserves quoting of
    subsystem commands and arguments. This may change behaviour for exotic
    configurations, but the most common subsystem configuration
    (sftp-server) is unlikely to be affected.
  = New features
  * ssh(1): add keystroke timing obfuscation to the client. This attempts
    to hide inter-keystroke timings by sending interactive traffic at
    fixed intervals (default: every 20ms) when there is only a small
    amount of data being sent. It also sends fake "chaff" keystrokes for
    a random interval after the last real keystroke. These are
    controlled by a new ssh_config ObscureKeystrokeTiming keyword.
  * ssh(1), sshd(8): Introduce a transport-level ping facility. This adds
    a pair of SSH transport protocol messages SSH2_MSG_PING/PONG to
    implement a ping capability. These messages use numbers in the "local
    extensions" number space and are advertised using a "ping@openssh.com"
    ext-info message with a string version number of "0".
  * sshd(8): allow override of Subsystem directives in sshd Match blocks.
  = Bugfixes
  * scp(1): fix scp in SFTP mode recursive upload and download of
    directories that contain symlinks to other directories. In scp mode,
    the links would be followed, but in SFTP mode they were not. bz3611
  * ssh-keygen(1): handle cr+lf (instead of just cr) line endings in
    sshsig signature files.
  * ssh(1): interactive mode for ControlPersist sessions if they
    originally requested a tty.
  * sshd(8): make PerSourceMaxStartups first-match-wins
  * sshd(8): limit artificial login delay to a reasonable maximum (5s)
    and don't delay at all for the "none" authentication mechanism.
    bz3602
  * sshd(8): Log errors in kex_exchange_identification() with level
    verbose instead of error to reduce preauth log spam. All of those
    get logged with a more generic error message by sshpkt_fatal().
  * sshd(8): correct math for ClientAliveInterval that caused the probes
    to be sent less frequently than configured.
  * ssh(1): fix regression in OpenSSH 9.4 (mux.c r1.99) that caused
    multiplexed sessions to ignore SIGINT under some circumstances.
- Update to openssh 9.4p1:
  = Potentially incompatible changes
  * This release removes support for older versions of libcrypto.
    OpenSSH now requires LibreSSL &gt;= 3.1.0 or OpenSSL &gt;= 1.1.1.
    Note that these versions are already deprecated by their upstream
    vendors.
  * ssh-agent(1): PKCS#11 modules must now be specified by their full
    paths. Previously dlopen(3) could search for them in system
    library directories.
  = New features
  * ssh(1): allow forwarding Unix Domain sockets via ssh -W.
  * ssh(1): add support for configuration tags to ssh(1).
    This adds a ssh_config(5) "Tag" directive and corresponding
    "Match tag" predicate that may be used to select blocks of
    configuration similar to the pf.conf(5) keywords of the same
    name.
  * ssh(1): add a "match localnetwork" predicate. This allows matching
    on the addresses of available network interfaces and may be used to
    vary the effective client configuration based on network location.
  * ssh(1), sshd(8), ssh-keygen(1): infrastructure support for KRL
    extensions.  This defines wire formats for optional KRL extensions
    and implements parsing of the new submessages. No actual extensions
    are supported at this point.
  * sshd(8): AuthorizedPrincipalsCommand and AuthorizedKeysCommand now
    accept two additional %-expansion sequences: %D which expands to
    the routing domain of the connected session and %C which expands
    to the addresses and port numbers for the source and destination
    of the connection.
  * ssh-keygen(1): increase the default work factor (rounds) for the
    bcrypt KDF used to derive symmetric encryption keys for passphrase
    protected key files by 50%.
  = Bugfixes
  * ssh-agent(1): improve isolation between loaded PKCS#11 modules
    by running separate ssh-pkcs11-helpers for each loaded provider.
  * ssh(1): make -f (fork after authentication) work correctly with
    multiplexed connections, including ControlPersist. bz3589 bz3589
  * ssh(1): make ConnectTimeout apply to multiplexing sockets and not
    just to network connections.
  * ssh-agent(1), ssh(1): improve defences against invalid PKCS#11
    modules being loaded by checking that the requested module
    contains the required symbol before loading it.
  * sshd(8): fix AuthorizedPrincipalsCommand when AuthorizedKeysCommand
    appears before it in sshd_config. Since OpenSSH 8.7 the
    AuthorizedPrincipalsCommand directive was incorrectly ignored in
    this situation. bz3574
  * sshd(8), ssh(1), ssh-keygen(1): remove vestigal support for KRL
    signatures When the KRL format was originally defined, it included
    support for signing of KRL objects. However, the code to sign KRLs
    and verify KRL signatues was never completed in OpenSSH. This
    release removes the partially-implemented code to verify KRLs.
    All OpenSSH tools now ignore KRL_SECTION_SIGNATURE sections in
    KRL files.
  * All: fix a number of memory leaks and unreachable/harmless integer
    overflows.
  * ssh-agent(1), ssh(1): don't truncate strings logged from PKCS#11
    modules; GHPR406
  * sshd(8), ssh(1): better validate CASignatureAlgorithms in
    ssh_config and sshd_config. Previously this directive would accept
    certificate algorithm names, but these were unusable in practice as
    OpenSSH does not support CA chains. bz3577
  * ssh(1): make `ssh -Q CASignatureAlgorithms` only list signature
    algorithms that are valid for CA signing. Previous behaviour was
    to list all signing algorithms, including certificate algorithms.
  * ssh-keyscan(1): gracefully handle systems where rlimits or the
    maximum number of open files is larger than INT_MAX; bz3581
  * ssh-keygen(1): fix "no comment" not showing on when running
    `ssh-keygen -l` on multiple keys where one has a comment and other
    following keys do not. bz3580
  * scp(1), sftp(1): adjust ftruncate() logic to handle servers that
    reorder requests. Previously, if the server reordered requests then
    the resultant file would be erroneously truncated.
  * ssh(1): don't incorrectly disable hostname canonicalization when
    CanonicalizeHostname=yes and ProxyJump was expicitly set to
    "none". bz3567
  * scp(1): when copying local-&gt;remote, check that the source file
    exists before opening an SFTP connection to the server. Based on
    GHPR#370
- Dropped patches:
  * cb4ed12f.patch - implemented upstream.
- Rebased patches:
  * openssh-7.7p1-fips.patch
  * openssh-7.8p1-role-mls.patch
  * openssh-8.0p1-gssapi-keyex.patch
- Add patches from obs:
  * Mon Mar  4 09:57:06 UTC 2024 - Pedro Monreal &lt;pmonreal@suse.com&gt;
- Add crypto-policies support [bsc#1211301]
  * Add patches:
  - openssh-9.6p1-crypto-policies.patch
  - openssh-9.6p1-crypto-policies-man.patch</changelog>
  <changelog author="opensuse@arnavion.dev" date="1712836800">- Fix duplicate loading of dropins. (boo#1222467)</changelog>
  <changelog author="alarrosa@suse.com" date="1712923200">- Make openssh-server recommend the openssh-server-config-rootlogin
  package in SLE in order to keep the same behaviour of previous
  SPs where the PermitRootLogin default was set to yes
  (bsc#1221005).
- Fix crypto-policies requirement to be set by openssh-server, not
  the config-rootlogin subpackage.
- Add back %config(noreplace) tag for more config files that were
  already set like this in previous SPs.</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- openssh-8.0p1-gssapi-keyex.patch: Added missing struct initializer,
  added missing parameter (bsc#1222840)</changelog>
  <changelog author="alarrosa@suse.com" date="1715601600">- Only for SLE15, restore the patch file removed in
  Thu Feb 18 13:54:44 UTC 2021 to restore the previous behaviour
  from SP5 of having root password login allowed by default
  (fixes bsc#1223486, related to bsc#1173067):
  * openssh-7.7p1-allow_root_password_login.patch
- Since the default value for this config option is now set to
  permit root to use password logins in SLE15, the
  openssh-server-config-rootlogin subpackage isn't useful there so
  we now create an openssh-server-config-disallow-rootlogin
  subpackage that sets the configuration the other way around
  than openssh-server-config-rootlogin.</changelog>
  <changelog author="alarrosa@suse.com" date="1715688000">- Add a warning in %post of openssh-clients, openssh-server and
  openssh-server-config-disallow-rootlogin to warn the user if
  the /etc/ssh/(ssh_config.d|sshd_config.d) directories are not
  being used (bsc#1223486).</changelog>
  <changelog author="alarrosa@suse.com" date="1719835200">- Add patch to fix a race condition in a signal handler by removing
  the async-signal-unsafe code (CVE-2024-6387, bsc#1226642):
  * fix-CVE-2024-6387.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720008000">- Add obsoletes for openssh-server-config-rootlogin since that
  package existed for a brief period of time during SLE 15 SP6/
  Leap 15.6 development but even if it was removed from the
  repositories before GM, some users might have it in their
  systems from having tried a beta/RC release (boo#1227350).
- Add #include &lt;stdlib.h&gt; in some files added by the ldap patch to
  fix build with gcc14 (boo#1225904).
  * openssh-7.7p1-ldap.patch
- Remove the recommendation for openssh-server-config-rootlogin
  from openssh-server. Since the default for that config option
  was changed in SLE it's not needed anymore in SLE nor in TW
  (boo#1224392).</changelog>
  <changelog author="alarrosa@suse.com" date="1720180800">- Add patch from upstream to fix proxy multiplexing mode:
  * 0001-upstream-fix-proxy-multiplexing-mode_-broken-when-keystroke.patch
- Add patch from upstream to restore correctly sigprocmask
  * 0001-upstream-correctly-restore-sigprocmask-around-ppoll.patch
- Add patch from upstream to fix a logic error in
  ObscureKeystrokeTiming that rendered this feature ineffective,
  allowing a passive observer to detect which network packets
  contained real keystrokes (bsc#1227318, CVE-2024-39894):
  * 0001-upstream-when-sending-ObscureKeystrokeTiming-chaff-packets_.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720612800">- Remove empty line at the end of sshd-sle.pamd (bsc#1227456)</changelog>
  <changelog author="alarrosa@suse.com" date="1728648000">- Add a patch to fix a regression introduced in 9.6 that makes X11
  forwarding very slow. Submitted to upstream in
  https://bugzilla.mindrot.org/show_bug.cgi?id=3655#c4 . Fixes
  bsc#1229449:
  * fix-x11-regression-bsc1229449.patch
- Add a openssl11 bcond to the spec file for the SLE12 case
  instead of checking suse_version in different parts.
- Move conditional patches to a number &gt;= 1000.
- Several spec file fixes so the package builds and can be
  installed in SLE 15 SP5 and SLE 12 SP5
- Drop most of openssh-6.6p1-keycat.patch (actually, it was just
  commented out). The keycat binary isn't really installed nor
  supported, so we can drop it, except for the code that is used
  by other SELinux patches, which is what I kept from that patch
  (boo#1229072).
- Add patch submitted to upstream to fix RFC4256 implementation
  so that keyboard-interactive authentication method can send
  instructions and sshd shows them to users even before a prompt
  is requested. This fixes MFA push notifications (boo#1229010).
  * 0001-auth-pam-Immediately-report-instructions-to-clients-and-fix-handling-in-ssh-client.patch
- Fix a dbus connection leaked in the logind patch that was
  missing a sd_bus_unref call (found by Matthias Gerstner):
  * logind_set_tty.patch
- Add a patch that fixes a small memory leak when parsing the
  subsystem configuration option:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1728907200">- Use %{with ...} instead of 0%{with ...}</changelog>
  <changelog author="alarrosa@suse.com" date="1739448000">- Fix a MitM attack against OpenSSH's VerifyHostKeyDNS-enabled
  client and a DoS attack against OpenSSH's client and server
  (bsc#1237040, CVE-2025-26465, bsc#1237041, CVE-2025-26466):
  * fix-CVE-2025-26465-and-CVE-2025-26466.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1739880000">- Fix ssh client segfault with GSSAPIKeyExchange=yes in ssh_kex2
  due to gssapi proposal not being correctly initialized
  (bsc#1236826). The problem was introduced in the rebase of
  the patch for 9.6p1:
  * openssh-8.0p1-gssapi-keyex.patch
- Rebase patch and apply it:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="hpj@suse.com" date="1746532800">- Added openssh-cve-2025-32728.patch (bsc#1241012, CVE-2025-32728).
  This fixes an upstream logic error handling the DisableForwarding
  option.</changelog>
  <changelog author="alarrosa@suse.com" date="1747137600">- Enable --with-logind to call the SetTTY dbus method in systemd.
  This allows "wall" to print messages in ssh ttys (bsc#1239671)
- Small fixes to unref the dbus session when any error occurs:
  * logind_set_tty.patch</changelog>
  <changelog author="hpj@suse.com" date="1748952000">- Add openssh-scp-umask-preserve-permissions.patch (bsc#1241667).</changelog>
  <changelog author="hpj@suse.com" date="1762516800">- Add openssh-cve-2025-61984-username-validation.patch
  (bsc#1251198, CVE-2025-61984).
- Add openssh-cve-2025-61985-nul-url-encode.patch
  (bsc#1251199, CVE-2025-61985).</changelog>
</package>
<package pkgid="b611b8ed2e43e926c34c11c30f34d09afad2afef5b54bdd0e98164546d49d40d" name="openssh-common" arch="x86_64">
  <version epoch="0" ver="9.6p1" rel="150600.6.37.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1712059200">- Rebase openssh-7.7p1-fips.patch (bsc#1221928)
  Remove OPENSSL_HAVE_EVPGCM-ifdef, which is no longer supported by upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1712577600">- Update to openssh 9.6p1:
  = Security
  * ssh(1), sshd(8): implement protocol extensions to thwart the
    so-called "Terrapin attack" discovered by Fabian Bäumer, Marcus
    Brinkmann and Jörg Schwenk. This attack allows a MITM to effect a
    limited break of the integrity of the early encrypted SSH transport
    protocol by sending extra messages prior to the commencement of
    encryption, and deleting an equal number of consecutive messages
    immediately after encryption starts. A peer SSH client/server
    would not be able to detect that messages were deleted
    (bsc#1217950, CVE-2023-48795).
  * ssh-agent(1): when adding PKCS#11-hosted private keys while
    specifying destination constraints, if the PKCS#11 token returned
    multiple keys then only the first key had the constraints applied.
    Use of regular private keys, FIDO tokens and unconstrained keys
    are unaffected.
  * ssh(1): if an invalid user or hostname that contained shell
    metacharacters was passed to ssh(1), and a ProxyCommand,
    LocalCommand directive or "match exec" predicate referenced the
    user or hostname via %u, %h or similar expansion token, then
    an attacker who could supply arbitrary user/hostnames to ssh(1)
    could potentially perform command injection depending on what
    quoting was present in the user-supplied ssh_config(5) directive
    (bsc#1218215, CVE-2023-51385).
  = Potentially incompatible changes
  * ssh(1), sshd(8): the RFC4254 connection/channels protocol provides
    a TCP-like window mechanism that limits the amount of data that
    can be sent without acceptance from the peer. In cases where this
    limit was exceeded by a non-conforming peer SSH implementation,
    ssh(1)/sshd(8) previously discarded the extra data. From OpenSSH
    9.6, ssh(1)/sshd(8) will now terminate the connection if a peer
    exceeds the window limit by more than a small grace factor. This
    change should have no effect of SSH implementations that follow
    the specification.
  = New features
  * ssh(1): add a %j token that expands to the configured ProxyJump
    hostname (or the empty string if this option is not being used)
    that can be used in a number of ssh_config(5) keywords. bz3610
  * ssh(1): add ChannelTimeout support to the client, mirroring the
    same option in the server and allowing ssh(1) to terminate
    quiescent channels.
  * ssh(1), sshd(8), ssh-add(1), ssh-keygen(1): add support for
    reading ED25519 private keys in PEM PKCS8 format. Previously
    only the OpenSSH private key format was supported.
  * ssh(1), sshd(8): introduce a protocol extension to allow
    renegotiation of acceptable signature algorithms for public key
    authentication after the server has learned the username being
    used for authentication. This allows varying sshd_config(5)
    PubkeyAcceptedAlgorithms in a "Match user" block.
  * ssh-add(1), ssh-agent(1): add an agent protocol extension to allow
    specifying certificates when loading PKCS#11 keys. This allows the
    use of certificates backed by PKCS#11 private keys in all OpenSSH
    tools that support ssh-agent(1). Previously only ssh(1) supported
    this use-case.
  = Bugfixes
  * ssh(1): when deciding whether to enable the keystroke timing
    obfuscation, enable it only if a channel with a TTY is active.
  * ssh(1): switch mainloop from poll(3) to ppoll(3) and mask signals
    before checking flags set in signal handler. Avoids potential
    race condition between signaling ssh to exit and polling. bz3531
  * ssh(1): when connecting to a destination with both the
    AddressFamily and CanonicalizeHostname directives in use,
    the AddressFamily directive could be ignored. bz5326
  * sftp(1): correct handling of the limits@openssh.com option when
    the server returned an unexpected message.
  * A number of fixes to the PuTTY and Dropbear regress/integration
    tests.
  * ssh(1): release GSS OIDs only at end of authentication, avoiding
    unnecessary init/cleanup cycles. bz2982
  * ssh_config(5): mention "none" is a valid argument to IdentityFile
    in the manual. bz3080
  * scp(1): improved debugging for paths from the server rejected for
    not matching the client's glob(3) pattern in old SCP/RCP protocol
    mode.
  * ssh-agent(1): refuse signing operations on destination-constrained
    keys if a previous session-bind operation has failed. This may
    prevent a fail-open situation in future if a user uses a mismatched
    ssh(1) client and ssh-agent(1) where the client supports a key type
    that the agent does not support.
- Update to openssh 9.5p1:
  = Potentially incompatible changes
  * ssh-keygen(1): generate Ed25519 keys by default. Ed25519 public keys
    are very convenient due to their small size. Ed25519 keys are
    specified in RFC 8709 and OpenSSH has supported them since version 6.5
    (January 2014).
  * sshd(8): the Subsystem directive now accurately preserves quoting of
    subsystem commands and arguments. This may change behaviour for exotic
    configurations, but the most common subsystem configuration
    (sftp-server) is unlikely to be affected.
  = New features
  * ssh(1): add keystroke timing obfuscation to the client. This attempts
    to hide inter-keystroke timings by sending interactive traffic at
    fixed intervals (default: every 20ms) when there is only a small
    amount of data being sent. It also sends fake "chaff" keystrokes for
    a random interval after the last real keystroke. These are
    controlled by a new ssh_config ObscureKeystrokeTiming keyword.
  * ssh(1), sshd(8): Introduce a transport-level ping facility. This adds
    a pair of SSH transport protocol messages SSH2_MSG_PING/PONG to
    implement a ping capability. These messages use numbers in the "local
    extensions" number space and are advertised using a "ping@openssh.com"
    ext-info message with a string version number of "0".
  * sshd(8): allow override of Subsystem directives in sshd Match blocks.
  = Bugfixes
  * scp(1): fix scp in SFTP mode recursive upload and download of
    directories that contain symlinks to other directories. In scp mode,
    the links would be followed, but in SFTP mode they were not. bz3611
  * ssh-keygen(1): handle cr+lf (instead of just cr) line endings in
    sshsig signature files.
  * ssh(1): interactive mode for ControlPersist sessions if they
    originally requested a tty.
  * sshd(8): make PerSourceMaxStartups first-match-wins
  * sshd(8): limit artificial login delay to a reasonable maximum (5s)
    and don't delay at all for the "none" authentication mechanism.
    bz3602
  * sshd(8): Log errors in kex_exchange_identification() with level
    verbose instead of error to reduce preauth log spam. All of those
    get logged with a more generic error message by sshpkt_fatal().
  * sshd(8): correct math for ClientAliveInterval that caused the probes
    to be sent less frequently than configured.
  * ssh(1): fix regression in OpenSSH 9.4 (mux.c r1.99) that caused
    multiplexed sessions to ignore SIGINT under some circumstances.
- Update to openssh 9.4p1:
  = Potentially incompatible changes
  * This release removes support for older versions of libcrypto.
    OpenSSH now requires LibreSSL &gt;= 3.1.0 or OpenSSL &gt;= 1.1.1.
    Note that these versions are already deprecated by their upstream
    vendors.
  * ssh-agent(1): PKCS#11 modules must now be specified by their full
    paths. Previously dlopen(3) could search for them in system
    library directories.
  = New features
  * ssh(1): allow forwarding Unix Domain sockets via ssh -W.
  * ssh(1): add support for configuration tags to ssh(1).
    This adds a ssh_config(5) "Tag" directive and corresponding
    "Match tag" predicate that may be used to select blocks of
    configuration similar to the pf.conf(5) keywords of the same
    name.
  * ssh(1): add a "match localnetwork" predicate. This allows matching
    on the addresses of available network interfaces and may be used to
    vary the effective client configuration based on network location.
  * ssh(1), sshd(8), ssh-keygen(1): infrastructure support for KRL
    extensions.  This defines wire formats for optional KRL extensions
    and implements parsing of the new submessages. No actual extensions
    are supported at this point.
  * sshd(8): AuthorizedPrincipalsCommand and AuthorizedKeysCommand now
    accept two additional %-expansion sequences: %D which expands to
    the routing domain of the connected session and %C which expands
    to the addresses and port numbers for the source and destination
    of the connection.
  * ssh-keygen(1): increase the default work factor (rounds) for the
    bcrypt KDF used to derive symmetric encryption keys for passphrase
    protected key files by 50%.
  = Bugfixes
  * ssh-agent(1): improve isolation between loaded PKCS#11 modules
    by running separate ssh-pkcs11-helpers for each loaded provider.
  * ssh(1): make -f (fork after authentication) work correctly with
    multiplexed connections, including ControlPersist. bz3589 bz3589
  * ssh(1): make ConnectTimeout apply to multiplexing sockets and not
    just to network connections.
  * ssh-agent(1), ssh(1): improve defences against invalid PKCS#11
    modules being loaded by checking that the requested module
    contains the required symbol before loading it.
  * sshd(8): fix AuthorizedPrincipalsCommand when AuthorizedKeysCommand
    appears before it in sshd_config. Since OpenSSH 8.7 the
    AuthorizedPrincipalsCommand directive was incorrectly ignored in
    this situation. bz3574
  * sshd(8), ssh(1), ssh-keygen(1): remove vestigal support for KRL
    signatures When the KRL format was originally defined, it included
    support for signing of KRL objects. However, the code to sign KRLs
    and verify KRL signatues was never completed in OpenSSH. This
    release removes the partially-implemented code to verify KRLs.
    All OpenSSH tools now ignore KRL_SECTION_SIGNATURE sections in
    KRL files.
  * All: fix a number of memory leaks and unreachable/harmless integer
    overflows.
  * ssh-agent(1), ssh(1): don't truncate strings logged from PKCS#11
    modules; GHPR406
  * sshd(8), ssh(1): better validate CASignatureAlgorithms in
    ssh_config and sshd_config. Previously this directive would accept
    certificate algorithm names, but these were unusable in practice as
    OpenSSH does not support CA chains. bz3577
  * ssh(1): make `ssh -Q CASignatureAlgorithms` only list signature
    algorithms that are valid for CA signing. Previous behaviour was
    to list all signing algorithms, including certificate algorithms.
  * ssh-keyscan(1): gracefully handle systems where rlimits or the
    maximum number of open files is larger than INT_MAX; bz3581
  * ssh-keygen(1): fix "no comment" not showing on when running
    `ssh-keygen -l` on multiple keys where one has a comment and other
    following keys do not. bz3580
  * scp(1), sftp(1): adjust ftruncate() logic to handle servers that
    reorder requests. Previously, if the server reordered requests then
    the resultant file would be erroneously truncated.
  * ssh(1): don't incorrectly disable hostname canonicalization when
    CanonicalizeHostname=yes and ProxyJump was expicitly set to
    "none". bz3567
  * scp(1): when copying local-&gt;remote, check that the source file
    exists before opening an SFTP connection to the server. Based on
    GHPR#370
- Dropped patches:
  * cb4ed12f.patch - implemented upstream.
- Rebased patches:
  * openssh-7.7p1-fips.patch
  * openssh-7.8p1-role-mls.patch
  * openssh-8.0p1-gssapi-keyex.patch
- Add patches from obs:
  * Mon Mar  4 09:57:06 UTC 2024 - Pedro Monreal &lt;pmonreal@suse.com&gt;
- Add crypto-policies support [bsc#1211301]
  * Add patches:
  - openssh-9.6p1-crypto-policies.patch
  - openssh-9.6p1-crypto-policies-man.patch</changelog>
  <changelog author="opensuse@arnavion.dev" date="1712836800">- Fix duplicate loading of dropins. (boo#1222467)</changelog>
  <changelog author="alarrosa@suse.com" date="1712923200">- Make openssh-server recommend the openssh-server-config-rootlogin
  package in SLE in order to keep the same behaviour of previous
  SPs where the PermitRootLogin default was set to yes
  (bsc#1221005).
- Fix crypto-policies requirement to be set by openssh-server, not
  the config-rootlogin subpackage.
- Add back %config(noreplace) tag for more config files that were
  already set like this in previous SPs.</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- openssh-8.0p1-gssapi-keyex.patch: Added missing struct initializer,
  added missing parameter (bsc#1222840)</changelog>
  <changelog author="alarrosa@suse.com" date="1715601600">- Only for SLE15, restore the patch file removed in
  Thu Feb 18 13:54:44 UTC 2021 to restore the previous behaviour
  from SP5 of having root password login allowed by default
  (fixes bsc#1223486, related to bsc#1173067):
  * openssh-7.7p1-allow_root_password_login.patch
- Since the default value for this config option is now set to
  permit root to use password logins in SLE15, the
  openssh-server-config-rootlogin subpackage isn't useful there so
  we now create an openssh-server-config-disallow-rootlogin
  subpackage that sets the configuration the other way around
  than openssh-server-config-rootlogin.</changelog>
  <changelog author="alarrosa@suse.com" date="1715688000">- Add a warning in %post of openssh-clients, openssh-server and
  openssh-server-config-disallow-rootlogin to warn the user if
  the /etc/ssh/(ssh_config.d|sshd_config.d) directories are not
  being used (bsc#1223486).</changelog>
  <changelog author="alarrosa@suse.com" date="1719835200">- Add patch to fix a race condition in a signal handler by removing
  the async-signal-unsafe code (CVE-2024-6387, bsc#1226642):
  * fix-CVE-2024-6387.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720008000">- Add obsoletes for openssh-server-config-rootlogin since that
  package existed for a brief period of time during SLE 15 SP6/
  Leap 15.6 development but even if it was removed from the
  repositories before GM, some users might have it in their
  systems from having tried a beta/RC release (boo#1227350).
- Add #include &lt;stdlib.h&gt; in some files added by the ldap patch to
  fix build with gcc14 (boo#1225904).
  * openssh-7.7p1-ldap.patch
- Remove the recommendation for openssh-server-config-rootlogin
  from openssh-server. Since the default for that config option
  was changed in SLE it's not needed anymore in SLE nor in TW
  (boo#1224392).</changelog>
  <changelog author="alarrosa@suse.com" date="1720180800">- Add patch from upstream to fix proxy multiplexing mode:
  * 0001-upstream-fix-proxy-multiplexing-mode_-broken-when-keystroke.patch
- Add patch from upstream to restore correctly sigprocmask
  * 0001-upstream-correctly-restore-sigprocmask-around-ppoll.patch
- Add patch from upstream to fix a logic error in
  ObscureKeystrokeTiming that rendered this feature ineffective,
  allowing a passive observer to detect which network packets
  contained real keystrokes (bsc#1227318, CVE-2024-39894):
  * 0001-upstream-when-sending-ObscureKeystrokeTiming-chaff-packets_.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720612800">- Remove empty line at the end of sshd-sle.pamd (bsc#1227456)</changelog>
  <changelog author="alarrosa@suse.com" date="1728648000">- Add a patch to fix a regression introduced in 9.6 that makes X11
  forwarding very slow. Submitted to upstream in
  https://bugzilla.mindrot.org/show_bug.cgi?id=3655#c4 . Fixes
  bsc#1229449:
  * fix-x11-regression-bsc1229449.patch
- Add a openssl11 bcond to the spec file for the SLE12 case
  instead of checking suse_version in different parts.
- Move conditional patches to a number &gt;= 1000.
- Several spec file fixes so the package builds and can be
  installed in SLE 15 SP5 and SLE 12 SP5
- Drop most of openssh-6.6p1-keycat.patch (actually, it was just
  commented out). The keycat binary isn't really installed nor
  supported, so we can drop it, except for the code that is used
  by other SELinux patches, which is what I kept from that patch
  (boo#1229072).
- Add patch submitted to upstream to fix RFC4256 implementation
  so that keyboard-interactive authentication method can send
  instructions and sshd shows them to users even before a prompt
  is requested. This fixes MFA push notifications (boo#1229010).
  * 0001-auth-pam-Immediately-report-instructions-to-clients-and-fix-handling-in-ssh-client.patch
- Fix a dbus connection leaked in the logind patch that was
  missing a sd_bus_unref call (found by Matthias Gerstner):
  * logind_set_tty.patch
- Add a patch that fixes a small memory leak when parsing the
  subsystem configuration option:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1728907200">- Use %{with ...} instead of 0%{with ...}</changelog>
  <changelog author="alarrosa@suse.com" date="1739448000">- Fix a MitM attack against OpenSSH's VerifyHostKeyDNS-enabled
  client and a DoS attack against OpenSSH's client and server
  (bsc#1237040, CVE-2025-26465, bsc#1237041, CVE-2025-26466):
  * fix-CVE-2025-26465-and-CVE-2025-26466.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1739880000">- Fix ssh client segfault with GSSAPIKeyExchange=yes in ssh_kex2
  due to gssapi proposal not being correctly initialized
  (bsc#1236826). The problem was introduced in the rebase of
  the patch for 9.6p1:
  * openssh-8.0p1-gssapi-keyex.patch
- Rebase patch and apply it:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="hpj@suse.com" date="1746532800">- Added openssh-cve-2025-32728.patch (bsc#1241012, CVE-2025-32728).
  This fixes an upstream logic error handling the DisableForwarding
  option.</changelog>
  <changelog author="alarrosa@suse.com" date="1747137600">- Enable --with-logind to call the SetTTY dbus method in systemd.
  This allows "wall" to print messages in ssh ttys (bsc#1239671)
- Small fixes to unref the dbus session when any error occurs:
  * logind_set_tty.patch</changelog>
  <changelog author="hpj@suse.com" date="1748952000">- Add openssh-scp-umask-preserve-permissions.patch (bsc#1241667).</changelog>
  <changelog author="hpj@suse.com" date="1762516800">- Add openssh-cve-2025-61984-username-validation.patch
  (bsc#1251198, CVE-2025-61984).
- Add openssh-cve-2025-61985-nul-url-encode.patch
  (bsc#1251199, CVE-2025-61985).</changelog>
  <changelog author="hpj@suse.com" date="1778241600">- Added openssh-cve-2026-35385-scp-setuid-modes.patch (bsc#1261427),
  ensuring setuid bits default to being masked out by scp.
- Added openssh-cve-2026-35414-mishandled-ca-commas.patch
  (bsc#1261430), fixing mishandling of comma characters in CA in
  certain situations.</changelog>
</package>
<package pkgid="ab8c9a58f606b26c0456b515502af8d1c6ffaa0184f6da3a292c4157b426d8e8" name="openssh-fips" arch="x86_64">
  <version epoch="0" ver="9.6p1" rel="150600.6.26.1"/>
  <changelog author="hpj@suse.com" date="1700827200">- Merge updates from openSUSE. Existing patches were rebased.
- Remove openssh-7.6p1-audit_race_condition.patch: Merged with
  audit patch.
- Remove openssh-CVE-2021-28041-agent-double-free.patch: Fixed
  upstream.
- Remove openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch:
  Fixed upstream.
- Remove openssh-CVE-2023-38408-PKCS11-execution.patch: Fixed
  upstream.
- Add cb4ed12f.patch from upstream, allowing newer versions of
  zlib to be used.
- Add logind_set_tty.patch by Thorsten Kukuk. This informs
  systemd-logind of the login TTY and prevents having to parse utmp,
  which is deprecated by glibc.</changelog>
  <changelog author="alarrosa@suse.com" date="1710244800">- Uncomment %sysuser_requires in openssh-server which was commented
  by mistake and is needed by the pre script installed with
  %sysusers_generate_pre (bsc#1220802).</changelog>
  <changelog author="alarrosa@suse.com" date="1712059200">- Use %config(noreplace) for sshd_config . In any case, it's
  recommended to drop a file in sshd_config.d instead of editing
  sshd_config (bsc#1221063)
- Add patches from obs package that were also in SP3/SP4/SP5:
  * Fri Nov  3 10:44:14 UTC 2023 - Johannes Segitz &lt;jsegitz@suse.com&gt;
  - Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712059201">- Rebase openssh-7.7p1-fips.patch (bsc#1221928)
  Remove OPENSSL_HAVE_EVPGCM-ifdef, which is no longer supported by upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1712577600">- Update to openssh 9.6p1:
  = Security
  * ssh(1), sshd(8): implement protocol extensions to thwart the
    so-called "Terrapin attack" discovered by Fabian Bäumer, Marcus
    Brinkmann and Jörg Schwenk. This attack allows a MITM to effect a
    limited break of the integrity of the early encrypted SSH transport
    protocol by sending extra messages prior to the commencement of
    encryption, and deleting an equal number of consecutive messages
    immediately after encryption starts. A peer SSH client/server
    would not be able to detect that messages were deleted
    (bsc#1217950, CVE-2023-48795).
  * ssh-agent(1): when adding PKCS#11-hosted private keys while
    specifying destination constraints, if the PKCS#11 token returned
    multiple keys then only the first key had the constraints applied.
    Use of regular private keys, FIDO tokens and unconstrained keys
    are unaffected.
  * ssh(1): if an invalid user or hostname that contained shell
    metacharacters was passed to ssh(1), and a ProxyCommand,
    LocalCommand directive or "match exec" predicate referenced the
    user or hostname via %u, %h or similar expansion token, then
    an attacker who could supply arbitrary user/hostnames to ssh(1)
    could potentially perform command injection depending on what
    quoting was present in the user-supplied ssh_config(5) directive
    (bsc#1218215, CVE-2023-51385).
  = Potentially incompatible changes
  * ssh(1), sshd(8): the RFC4254 connection/channels protocol provides
    a TCP-like window mechanism that limits the amount of data that
    can be sent without acceptance from the peer. In cases where this
    limit was exceeded by a non-conforming peer SSH implementation,
    ssh(1)/sshd(8) previously discarded the extra data. From OpenSSH
    9.6, ssh(1)/sshd(8) will now terminate the connection if a peer
    exceeds the window limit by more than a small grace factor. This
    change should have no effect of SSH implementations that follow
    the specification.
  = New features
  * ssh(1): add a %j token that expands to the configured ProxyJump
    hostname (or the empty string if this option is not being used)
    that can be used in a number of ssh_config(5) keywords. bz3610
  * ssh(1): add ChannelTimeout support to the client, mirroring the
    same option in the server and allowing ssh(1) to terminate
    quiescent channels.
  * ssh(1), sshd(8), ssh-add(1), ssh-keygen(1): add support for
    reading ED25519 private keys in PEM PKCS8 format. Previously
    only the OpenSSH private key format was supported.
  * ssh(1), sshd(8): introduce a protocol extension to allow
    renegotiation of acceptable signature algorithms for public key
    authentication after the server has learned the username being
    used for authentication. This allows varying sshd_config(5)
    PubkeyAcceptedAlgorithms in a "Match user" block.
  * ssh-add(1), ssh-agent(1): add an agent protocol extension to allow
    specifying certificates when loading PKCS#11 keys. This allows the
    use of certificates backed by PKCS#11 private keys in all OpenSSH
    tools that support ssh-agent(1). Previously only ssh(1) supported
    this use-case.
  = Bugfixes
  * ssh(1): when deciding whether to enable the keystroke timing
    obfuscation, enable it only if a channel with a TTY is active.
  * ssh(1): switch mainloop from poll(3) to ppoll(3) and mask signals
    before checking flags set in signal handler. Avoids potential
    race condition between signaling ssh to exit and polling. bz3531
  * ssh(1): when connecting to a destination with both the
    AddressFamily and CanonicalizeHostname directives in use,
    the AddressFamily directive could be ignored. bz5326
  * sftp(1): correct handling of the limits@openssh.com option when
    the server returned an unexpected message.
  * A number of fixes to the PuTTY and Dropbear regress/integration
    tests.
  * ssh(1): release GSS OIDs only at end of authentication, avoiding
    unnecessary init/cleanup cycles. bz2982
  * ssh_config(5): mention "none" is a valid argument to IdentityFile
    in the manual. bz3080
  * scp(1): improved debugging for paths from the server rejected for
    not matching the client's glob(3) pattern in old SCP/RCP protocol
    mode.
  * ssh-agent(1): refuse signing operations on destination-constrained
    keys if a previous session-bind operation has failed. This may
    prevent a fail-open situation in future if a user uses a mismatched
    ssh(1) client and ssh-agent(1) where the client supports a key type
    that the agent does not support.
- Update to openssh 9.5p1:
  = Potentially incompatible changes
  * ssh-keygen(1): generate Ed25519 keys by default. Ed25519 public keys
    are very convenient due to their small size. Ed25519 keys are
    specified in RFC 8709 and OpenSSH has supported them since version 6.5
    (January 2014).
  * sshd(8): the Subsystem directive now accurately preserves quoting of
    subsystem commands and arguments. This may change behaviour for exotic
    configurations, but the most common subsystem configuration
    (sftp-server) is unlikely to be affected.
  = New features
  * ssh(1): add keystroke timing obfuscation to the client. This attempts
    to hide inter-keystroke timings by sending interactive traffic at
    fixed intervals (default: every 20ms) when there is only a small
    amount of data being sent. It also sends fake "chaff" keystrokes for
    a random interval after the last real keystroke. These are
    controlled by a new ssh_config ObscureKeystrokeTiming keyword.
  * ssh(1), sshd(8): Introduce a transport-level ping facility. This adds
    a pair of SSH transport protocol messages SSH2_MSG_PING/PONG to
    implement a ping capability. These messages use numbers in the "local
    extensions" number space and are advertised using a "ping@openssh.com"
    ext-info message with a string version number of "0".
  * sshd(8): allow override of Subsystem directives in sshd Match blocks.
  = Bugfixes
  * scp(1): fix scp in SFTP mode recursive upload and download of
    directories that contain symlinks to other directories. In scp mode,
    the links would be followed, but in SFTP mode they were not. bz3611
  * ssh-keygen(1): handle cr+lf (instead of just cr) line endings in
    sshsig signature files.
  * ssh(1): interactive mode for ControlPersist sessions if they
    originally requested a tty.
  * sshd(8): make PerSourceMaxStartups first-match-wins
  * sshd(8): limit artificial login delay to a reasonable maximum (5s)
    and don't delay at all for the "none" authentication mechanism.
    bz3602
  * sshd(8): Log errors in kex_exchange_identification() with level
    verbose instead of error to reduce preauth log spam. All of those
    get logged with a more generic error message by sshpkt_fatal().
  * sshd(8): correct math for ClientAliveInterval that caused the probes
    to be sent less frequently than configured.
  * ssh(1): fix regression in OpenSSH 9.4 (mux.c r1.99) that caused
    multiplexed sessions to ignore SIGINT under some circumstances.
- Update to openssh 9.4p1:
  = Potentially incompatible changes
  * This release removes support for older versions of libcrypto.
    OpenSSH now requires LibreSSL &gt;= 3.1.0 or OpenSSL &gt;= 1.1.1.
    Note that these versions are already deprecated by their upstream
    vendors.
  * ssh-agent(1): PKCS#11 modules must now be specified by their full
    paths. Previously dlopen(3) could search for them in system
    library directories.
  = New features
  * ssh(1): allow forwarding Unix Domain sockets via ssh -W.
  * ssh(1): add support for configuration tags to ssh(1).
    This adds a ssh_config(5) "Tag" directive and corresponding
    "Match tag" predicate that may be used to select blocks of
    configuration similar to the pf.conf(5) keywords of the same
    name.
  * ssh(1): add a "match localnetwork" predicate. This allows matching
    on the addresses of available network interfaces and may be used to
    vary the effective client configuration based on network location.
  * ssh(1), sshd(8), ssh-keygen(1): infrastructure support for KRL
    extensions.  This defines wire formats for optional KRL extensions
    and implements parsing of the new submessages. No actual extensions
    are supported at this point.
  * sshd(8): AuthorizedPrincipalsCommand and AuthorizedKeysCommand now
    accept two additional %-expansion sequences: %D which expands to
    the routing domain of the connected session and %C which expands
    to the addresses and port numbers for the source and destination
    of the connection.
  * ssh-keygen(1): increase the default work factor (rounds) for the
    bcrypt KDF used to derive symmetric encryption keys for passphrase
    protected key files by 50%.
  = Bugfixes
  * ssh-agent(1): improve isolation between loaded PKCS#11 modules
    by running separate ssh-pkcs11-helpers for each loaded provider.
  * ssh(1): make -f (fork after authentication) work correctly with
    multiplexed connections, including ControlPersist. bz3589 bz3589
  * ssh(1): make ConnectTimeout apply to multiplexing sockets and not
    just to network connections.
  * ssh-agent(1), ssh(1): improve defences against invalid PKCS#11
    modules being loaded by checking that the requested module
    contains the required symbol before loading it.
  * sshd(8): fix AuthorizedPrincipalsCommand when AuthorizedKeysCommand
    appears before it in sshd_config. Since OpenSSH 8.7 the
    AuthorizedPrincipalsCommand directive was incorrectly ignored in
    this situation. bz3574
  * sshd(8), ssh(1), ssh-keygen(1): remove vestigal support for KRL
    signatures When the KRL format was originally defined, it included
    support for signing of KRL objects. However, the code to sign KRLs
    and verify KRL signatues was never completed in OpenSSH. This
    release removes the partially-implemented code to verify KRLs.
    All OpenSSH tools now ignore KRL_SECTION_SIGNATURE sections in
    KRL files.
  * All: fix a number of memory leaks and unreachable/harmless integer
    overflows.
  * ssh-agent(1), ssh(1): don't truncate strings logged from PKCS#11
    modules; GHPR406
  * sshd(8), ssh(1): better validate CASignatureAlgorithms in
    ssh_config and sshd_config. Previously this directive would accept
    certificate algorithm names, but these were unusable in practice as
    OpenSSH does not support CA chains. bz3577
  * ssh(1): make `ssh -Q CASignatureAlgorithms` only list signature
    algorithms that are valid for CA signing. Previous behaviour was
    to list all signing algorithms, including certificate algorithms.
  * ssh-keyscan(1): gracefully handle systems where rlimits or the
    maximum number of open files is larger than INT_MAX; bz3581
  * ssh-keygen(1): fix "no comment" not showing on when running
    `ssh-keygen -l` on multiple keys where one has a comment and other
    following keys do not. bz3580
  * scp(1), sftp(1): adjust ftruncate() logic to handle servers that
    reorder requests. Previously, if the server reordered requests then
    the resultant file would be erroneously truncated.
  * ssh(1): don't incorrectly disable hostname canonicalization when
    CanonicalizeHostname=yes and ProxyJump was expicitly set to
    "none". bz3567
  * scp(1): when copying local-&gt;remote, check that the source file
    exists before opening an SFTP connection to the server. Based on
    GHPR#370
- Dropped patches:
  * cb4ed12f.patch - implemented upstream.
- Rebased patches:
  * openssh-7.7p1-fips.patch
  * openssh-7.8p1-role-mls.patch
  * openssh-8.0p1-gssapi-keyex.patch
- Add patches from obs:
  * Mon Mar  4 09:57:06 UTC 2024 - Pedro Monreal &lt;pmonreal@suse.com&gt;
- Add crypto-policies support [bsc#1211301]
  * Add patches:
  - openssh-9.6p1-crypto-policies.patch
  - openssh-9.6p1-crypto-policies-man.patch</changelog>
  <changelog author="opensuse@arnavion.dev" date="1712836800">- Fix duplicate loading of dropins. (boo#1222467)</changelog>
  <changelog author="alarrosa@suse.com" date="1712923200">- Make openssh-server recommend the openssh-server-config-rootlogin
  package in SLE in order to keep the same behaviour of previous
  SPs where the PermitRootLogin default was set to yes
  (bsc#1221005).
- Fix crypto-policies requirement to be set by openssh-server, not
  the config-rootlogin subpackage.
- Add back %config(noreplace) tag for more config files that were
  already set like this in previous SPs.</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- openssh-8.0p1-gssapi-keyex.patch: Added missing struct initializer,
  added missing parameter (bsc#1222840)</changelog>
  <changelog author="alarrosa@suse.com" date="1715601600">- Only for SLE15, restore the patch file removed in
  Thu Feb 18 13:54:44 UTC 2021 to restore the previous behaviour
  from SP5 of having root password login allowed by default
  (fixes bsc#1223486, related to bsc#1173067):
  * openssh-7.7p1-allow_root_password_login.patch
- Since the default value for this config option is now set to
  permit root to use password logins in SLE15, the
  openssh-server-config-rootlogin subpackage isn't useful there so
  we now create an openssh-server-config-disallow-rootlogin
  subpackage that sets the configuration the other way around
  than openssh-server-config-rootlogin.</changelog>
  <changelog author="alarrosa@suse.com" date="1715688000">- Add a warning in %post of openssh-clients, openssh-server and
  openssh-server-config-disallow-rootlogin to warn the user if
  the /etc/ssh/(ssh_config.d|sshd_config.d) directories are not
  being used (bsc#1223486).</changelog>
  <changelog author="alarrosa@suse.com" date="1719835200">- Add patch to fix a race condition in a signal handler by removing
  the async-signal-unsafe code (CVE-2024-6387, bsc#1226642):
  * fix-CVE-2024-6387.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720008000">- Add obsoletes for openssh-server-config-rootlogin since that
  package existed for a brief period of time during SLE 15 SP6/
  Leap 15.6 development but even if it was removed from the
  repositories before GM, some users might have it in their
  systems from having tried a beta/RC release (boo#1227350).
- Add #include &lt;stdlib.h&gt; in some files added by the ldap patch to
  fix build with gcc14 (boo#1225904).
  * openssh-7.7p1-ldap.patch
- Remove the recommendation for openssh-server-config-rootlogin
  from openssh-server. Since the default for that config option
  was changed in SLE it's not needed anymore in SLE nor in TW
  (boo#1224392).</changelog>
  <changelog author="alarrosa@suse.com" date="1720180800">- Add patch from upstream to fix proxy multiplexing mode:
  * 0001-upstream-fix-proxy-multiplexing-mode_-broken-when-keystroke.patch
- Add patch from upstream to restore correctly sigprocmask
  * 0001-upstream-correctly-restore-sigprocmask-around-ppoll.patch
- Add patch from upstream to fix a logic error in
  ObscureKeystrokeTiming that rendered this feature ineffective,
  allowing a passive observer to detect which network packets
  contained real keystrokes (bsc#1227318, CVE-2024-39894):
  * 0001-upstream-when-sending-ObscureKeystrokeTiming-chaff-packets_.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720612800">- Remove empty line at the end of sshd-sle.pamd (bsc#1227456)</changelog>
  <changelog author="alarrosa@suse.com" date="1728648000">- Add a patch to fix a regression introduced in 9.6 that makes X11
  forwarding very slow. Submitted to upstream in
  https://bugzilla.mindrot.org/show_bug.cgi?id=3655#c4 . Fixes
  bsc#1229449:
  * fix-x11-regression-bsc1229449.patch
- Add a openssl11 bcond to the spec file for the SLE12 case
  instead of checking suse_version in different parts.
- Move conditional patches to a number &gt;= 1000.
- Several spec file fixes so the package builds and can be
  installed in SLE 15 SP5 and SLE 12 SP5
- Drop most of openssh-6.6p1-keycat.patch (actually, it was just
  commented out). The keycat binary isn't really installed nor
  supported, so we can drop it, except for the code that is used
  by other SELinux patches, which is what I kept from that patch
  (boo#1229072).
- Add patch submitted to upstream to fix RFC4256 implementation
  so that keyboard-interactive authentication method can send
  instructions and sshd shows them to users even before a prompt
  is requested. This fixes MFA push notifications (boo#1229010).
  * 0001-auth-pam-Immediately-report-instructions-to-clients-and-fix-handling-in-ssh-client.patch
- Fix a dbus connection leaked in the logind patch that was
  missing a sd_bus_unref call (found by Matthias Gerstner):
  * logind_set_tty.patch
- Add a patch that fixes a small memory leak when parsing the
  subsystem configuration option:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1728907200">- Use %{with ...} instead of 0%{with ...}</changelog>
  <changelog author="alarrosa@suse.com" date="1739448000">- Fix a MitM attack against OpenSSH's VerifyHostKeyDNS-enabled
  client and a DoS attack against OpenSSH's client and server
  (bsc#1237040, CVE-2025-26465, bsc#1237041, CVE-2025-26466):
  * fix-CVE-2025-26465-and-CVE-2025-26466.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1739880000">- Fix ssh client segfault with GSSAPIKeyExchange=yes in ssh_kex2
  due to gssapi proposal not being correctly initialized
  (bsc#1236826). The problem was introduced in the rebase of
  the patch for 9.6p1:
  * openssh-8.0p1-gssapi-keyex.patch
- Rebase patch and apply it:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="hpj@suse.com" date="1746532800">- Added openssh-cve-2025-32728.patch (bsc#1241012, CVE-2025-32728).
  This fixes an upstream logic error handling the DisableForwarding
  option.</changelog>
  <changelog author="alarrosa@suse.com" date="1747137600">- Enable --with-logind to call the SetTTY dbus method in systemd.
  This allows "wall" to print messages in ssh ttys (bsc#1239671)
- Small fixes to unref the dbus session when any error occurs:
  * logind_set_tty.patch</changelog>
</package>
<package pkgid="eb4fa7369e4ecf91316d04b11adaf404df227e39eb98c4d37bcbf6b06035c498" name="openssh-fips" arch="x86_64">
  <version epoch="0" ver="9.6p1" rel="150600.6.29.2"/>
  <changelog author="alarrosa@suse.com" date="1710244800">- Uncomment %sysuser_requires in openssh-server which was commented
  by mistake and is needed by the pre script installed with
  %sysusers_generate_pre (bsc#1220802).</changelog>
  <changelog author="alarrosa@suse.com" date="1712059200">- Use %config(noreplace) for sshd_config . In any case, it's
  recommended to drop a file in sshd_config.d instead of editing
  sshd_config (bsc#1221063)
- Add patches from obs package that were also in SP3/SP4/SP5:
  * Fri Nov  3 10:44:14 UTC 2023 - Johannes Segitz &lt;jsegitz@suse.com&gt;
  - Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712059201">- Rebase openssh-7.7p1-fips.patch (bsc#1221928)
  Remove OPENSSL_HAVE_EVPGCM-ifdef, which is no longer supported by upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1712577600">- Update to openssh 9.6p1:
  = Security
  * ssh(1), sshd(8): implement protocol extensions to thwart the
    so-called "Terrapin attack" discovered by Fabian Bäumer, Marcus
    Brinkmann and Jörg Schwenk. This attack allows a MITM to effect a
    limited break of the integrity of the early encrypted SSH transport
    protocol by sending extra messages prior to the commencement of
    encryption, and deleting an equal number of consecutive messages
    immediately after encryption starts. A peer SSH client/server
    would not be able to detect that messages were deleted
    (bsc#1217950, CVE-2023-48795).
  * ssh-agent(1): when adding PKCS#11-hosted private keys while
    specifying destination constraints, if the PKCS#11 token returned
    multiple keys then only the first key had the constraints applied.
    Use of regular private keys, FIDO tokens and unconstrained keys
    are unaffected.
  * ssh(1): if an invalid user or hostname that contained shell
    metacharacters was passed to ssh(1), and a ProxyCommand,
    LocalCommand directive or "match exec" predicate referenced the
    user or hostname via %u, %h or similar expansion token, then
    an attacker who could supply arbitrary user/hostnames to ssh(1)
    could potentially perform command injection depending on what
    quoting was present in the user-supplied ssh_config(5) directive
    (bsc#1218215, CVE-2023-51385).
  = Potentially incompatible changes
  * ssh(1), sshd(8): the RFC4254 connection/channels protocol provides
    a TCP-like window mechanism that limits the amount of data that
    can be sent without acceptance from the peer. In cases where this
    limit was exceeded by a non-conforming peer SSH implementation,
    ssh(1)/sshd(8) previously discarded the extra data. From OpenSSH
    9.6, ssh(1)/sshd(8) will now terminate the connection if a peer
    exceeds the window limit by more than a small grace factor. This
    change should have no effect of SSH implementations that follow
    the specification.
  = New features
  * ssh(1): add a %j token that expands to the configured ProxyJump
    hostname (or the empty string if this option is not being used)
    that can be used in a number of ssh_config(5) keywords. bz3610
  * ssh(1): add ChannelTimeout support to the client, mirroring the
    same option in the server and allowing ssh(1) to terminate
    quiescent channels.
  * ssh(1), sshd(8), ssh-add(1), ssh-keygen(1): add support for
    reading ED25519 private keys in PEM PKCS8 format. Previously
    only the OpenSSH private key format was supported.
  * ssh(1), sshd(8): introduce a protocol extension to allow
    renegotiation of acceptable signature algorithms for public key
    authentication after the server has learned the username being
    used for authentication. This allows varying sshd_config(5)
    PubkeyAcceptedAlgorithms in a "Match user" block.
  * ssh-add(1), ssh-agent(1): add an agent protocol extension to allow
    specifying certificates when loading PKCS#11 keys. This allows the
    use of certificates backed by PKCS#11 private keys in all OpenSSH
    tools that support ssh-agent(1). Previously only ssh(1) supported
    this use-case.
  = Bugfixes
  * ssh(1): when deciding whether to enable the keystroke timing
    obfuscation, enable it only if a channel with a TTY is active.
  * ssh(1): switch mainloop from poll(3) to ppoll(3) and mask signals
    before checking flags set in signal handler. Avoids potential
    race condition between signaling ssh to exit and polling. bz3531
  * ssh(1): when connecting to a destination with both the
    AddressFamily and CanonicalizeHostname directives in use,
    the AddressFamily directive could be ignored. bz5326
  * sftp(1): correct handling of the limits@openssh.com option when
    the server returned an unexpected message.
  * A number of fixes to the PuTTY and Dropbear regress/integration
    tests.
  * ssh(1): release GSS OIDs only at end of authentication, avoiding
    unnecessary init/cleanup cycles. bz2982
  * ssh_config(5): mention "none" is a valid argument to IdentityFile
    in the manual. bz3080
  * scp(1): improved debugging for paths from the server rejected for
    not matching the client's glob(3) pattern in old SCP/RCP protocol
    mode.
  * ssh-agent(1): refuse signing operations on destination-constrained
    keys if a previous session-bind operation has failed. This may
    prevent a fail-open situation in future if a user uses a mismatched
    ssh(1) client and ssh-agent(1) where the client supports a key type
    that the agent does not support.
- Update to openssh 9.5p1:
  = Potentially incompatible changes
  * ssh-keygen(1): generate Ed25519 keys by default. Ed25519 public keys
    are very convenient due to their small size. Ed25519 keys are
    specified in RFC 8709 and OpenSSH has supported them since version 6.5
    (January 2014).
  * sshd(8): the Subsystem directive now accurately preserves quoting of
    subsystem commands and arguments. This may change behaviour for exotic
    configurations, but the most common subsystem configuration
    (sftp-server) is unlikely to be affected.
  = New features
  * ssh(1): add keystroke timing obfuscation to the client. This attempts
    to hide inter-keystroke timings by sending interactive traffic at
    fixed intervals (default: every 20ms) when there is only a small
    amount of data being sent. It also sends fake "chaff" keystrokes for
    a random interval after the last real keystroke. These are
    controlled by a new ssh_config ObscureKeystrokeTiming keyword.
  * ssh(1), sshd(8): Introduce a transport-level ping facility. This adds
    a pair of SSH transport protocol messages SSH2_MSG_PING/PONG to
    implement a ping capability. These messages use numbers in the "local
    extensions" number space and are advertised using a "ping@openssh.com"
    ext-info message with a string version number of "0".
  * sshd(8): allow override of Subsystem directives in sshd Match blocks.
  = Bugfixes
  * scp(1): fix scp in SFTP mode recursive upload and download of
    directories that contain symlinks to other directories. In scp mode,
    the links would be followed, but in SFTP mode they were not. bz3611
  * ssh-keygen(1): handle cr+lf (instead of just cr) line endings in
    sshsig signature files.
  * ssh(1): interactive mode for ControlPersist sessions if they
    originally requested a tty.
  * sshd(8): make PerSourceMaxStartups first-match-wins
  * sshd(8): limit artificial login delay to a reasonable maximum (5s)
    and don't delay at all for the "none" authentication mechanism.
    bz3602
  * sshd(8): Log errors in kex_exchange_identification() with level
    verbose instead of error to reduce preauth log spam. All of those
    get logged with a more generic error message by sshpkt_fatal().
  * sshd(8): correct math for ClientAliveInterval that caused the probes
    to be sent less frequently than configured.
  * ssh(1): fix regression in OpenSSH 9.4 (mux.c r1.99) that caused
    multiplexed sessions to ignore SIGINT under some circumstances.
- Update to openssh 9.4p1:
  = Potentially incompatible changes
  * This release removes support for older versions of libcrypto.
    OpenSSH now requires LibreSSL &gt;= 3.1.0 or OpenSSL &gt;= 1.1.1.
    Note that these versions are already deprecated by their upstream
    vendors.
  * ssh-agent(1): PKCS#11 modules must now be specified by their full
    paths. Previously dlopen(3) could search for them in system
    library directories.
  = New features
  * ssh(1): allow forwarding Unix Domain sockets via ssh -W.
  * ssh(1): add support for configuration tags to ssh(1).
    This adds a ssh_config(5) "Tag" directive and corresponding
    "Match tag" predicate that may be used to select blocks of
    configuration similar to the pf.conf(5) keywords of the same
    name.
  * ssh(1): add a "match localnetwork" predicate. This allows matching
    on the addresses of available network interfaces and may be used to
    vary the effective client configuration based on network location.
  * ssh(1), sshd(8), ssh-keygen(1): infrastructure support for KRL
    extensions.  This defines wire formats for optional KRL extensions
    and implements parsing of the new submessages. No actual extensions
    are supported at this point.
  * sshd(8): AuthorizedPrincipalsCommand and AuthorizedKeysCommand now
    accept two additional %-expansion sequences: %D which expands to
    the routing domain of the connected session and %C which expands
    to the addresses and port numbers for the source and destination
    of the connection.
  * ssh-keygen(1): increase the default work factor (rounds) for the
    bcrypt KDF used to derive symmetric encryption keys for passphrase
    protected key files by 50%.
  = Bugfixes
  * ssh-agent(1): improve isolation between loaded PKCS#11 modules
    by running separate ssh-pkcs11-helpers for each loaded provider.
  * ssh(1): make -f (fork after authentication) work correctly with
    multiplexed connections, including ControlPersist. bz3589 bz3589
  * ssh(1): make ConnectTimeout apply to multiplexing sockets and not
    just to network connections.
  * ssh-agent(1), ssh(1): improve defences against invalid PKCS#11
    modules being loaded by checking that the requested module
    contains the required symbol before loading it.
  * sshd(8): fix AuthorizedPrincipalsCommand when AuthorizedKeysCommand
    appears before it in sshd_config. Since OpenSSH 8.7 the
    AuthorizedPrincipalsCommand directive was incorrectly ignored in
    this situation. bz3574
  * sshd(8), ssh(1), ssh-keygen(1): remove vestigal support for KRL
    signatures When the KRL format was originally defined, it included
    support for signing of KRL objects. However, the code to sign KRLs
    and verify KRL signatues was never completed in OpenSSH. This
    release removes the partially-implemented code to verify KRLs.
    All OpenSSH tools now ignore KRL_SECTION_SIGNATURE sections in
    KRL files.
  * All: fix a number of memory leaks and unreachable/harmless integer
    overflows.
  * ssh-agent(1), ssh(1): don't truncate strings logged from PKCS#11
    modules; GHPR406
  * sshd(8), ssh(1): better validate CASignatureAlgorithms in
    ssh_config and sshd_config. Previously this directive would accept
    certificate algorithm names, but these were unusable in practice as
    OpenSSH does not support CA chains. bz3577
  * ssh(1): make `ssh -Q CASignatureAlgorithms` only list signature
    algorithms that are valid for CA signing. Previous behaviour was
    to list all signing algorithms, including certificate algorithms.
  * ssh-keyscan(1): gracefully handle systems where rlimits or the
    maximum number of open files is larger than INT_MAX; bz3581
  * ssh-keygen(1): fix "no comment" not showing on when running
    `ssh-keygen -l` on multiple keys where one has a comment and other
    following keys do not. bz3580
  * scp(1), sftp(1): adjust ftruncate() logic to handle servers that
    reorder requests. Previously, if the server reordered requests then
    the resultant file would be erroneously truncated.
  * ssh(1): don't incorrectly disable hostname canonicalization when
    CanonicalizeHostname=yes and ProxyJump was expicitly set to
    "none". bz3567
  * scp(1): when copying local-&gt;remote, check that the source file
    exists before opening an SFTP connection to the server. Based on
    GHPR#370
- Dropped patches:
  * cb4ed12f.patch - implemented upstream.
- Rebased patches:
  * openssh-7.7p1-fips.patch
  * openssh-7.8p1-role-mls.patch
  * openssh-8.0p1-gssapi-keyex.patch
- Add patches from obs:
  * Mon Mar  4 09:57:06 UTC 2024 - Pedro Monreal &lt;pmonreal@suse.com&gt;
- Add crypto-policies support [bsc#1211301]
  * Add patches:
  - openssh-9.6p1-crypto-policies.patch
  - openssh-9.6p1-crypto-policies-man.patch</changelog>
  <changelog author="opensuse@arnavion.dev" date="1712836800">- Fix duplicate loading of dropins. (boo#1222467)</changelog>
  <changelog author="alarrosa@suse.com" date="1712923200">- Make openssh-server recommend the openssh-server-config-rootlogin
  package in SLE in order to keep the same behaviour of previous
  SPs where the PermitRootLogin default was set to yes
  (bsc#1221005).
- Fix crypto-policies requirement to be set by openssh-server, not
  the config-rootlogin subpackage.
- Add back %config(noreplace) tag for more config files that were
  already set like this in previous SPs.</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- openssh-8.0p1-gssapi-keyex.patch: Added missing struct initializer,
  added missing parameter (bsc#1222840)</changelog>
  <changelog author="alarrosa@suse.com" date="1715601600">- Only for SLE15, restore the patch file removed in
  Thu Feb 18 13:54:44 UTC 2021 to restore the previous behaviour
  from SP5 of having root password login allowed by default
  (fixes bsc#1223486, related to bsc#1173067):
  * openssh-7.7p1-allow_root_password_login.patch
- Since the default value for this config option is now set to
  permit root to use password logins in SLE15, the
  openssh-server-config-rootlogin subpackage isn't useful there so
  we now create an openssh-server-config-disallow-rootlogin
  subpackage that sets the configuration the other way around
  than openssh-server-config-rootlogin.</changelog>
  <changelog author="alarrosa@suse.com" date="1715688000">- Add a warning in %post of openssh-clients, openssh-server and
  openssh-server-config-disallow-rootlogin to warn the user if
  the /etc/ssh/(ssh_config.d|sshd_config.d) directories are not
  being used (bsc#1223486).</changelog>
  <changelog author="alarrosa@suse.com" date="1719835200">- Add patch to fix a race condition in a signal handler by removing
  the async-signal-unsafe code (CVE-2024-6387, bsc#1226642):
  * fix-CVE-2024-6387.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720008000">- Add obsoletes for openssh-server-config-rootlogin since that
  package existed for a brief period of time during SLE 15 SP6/
  Leap 15.6 development but even if it was removed from the
  repositories before GM, some users might have it in their
  systems from having tried a beta/RC release (boo#1227350).
- Add #include &lt;stdlib.h&gt; in some files added by the ldap patch to
  fix build with gcc14 (boo#1225904).
  * openssh-7.7p1-ldap.patch
- Remove the recommendation for openssh-server-config-rootlogin
  from openssh-server. Since the default for that config option
  was changed in SLE it's not needed anymore in SLE nor in TW
  (boo#1224392).</changelog>
  <changelog author="alarrosa@suse.com" date="1720180800">- Add patch from upstream to fix proxy multiplexing mode:
  * 0001-upstream-fix-proxy-multiplexing-mode_-broken-when-keystroke.patch
- Add patch from upstream to restore correctly sigprocmask
  * 0001-upstream-correctly-restore-sigprocmask-around-ppoll.patch
- Add patch from upstream to fix a logic error in
  ObscureKeystrokeTiming that rendered this feature ineffective,
  allowing a passive observer to detect which network packets
  contained real keystrokes (bsc#1227318, CVE-2024-39894):
  * 0001-upstream-when-sending-ObscureKeystrokeTiming-chaff-packets_.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720612800">- Remove empty line at the end of sshd-sle.pamd (bsc#1227456)</changelog>
  <changelog author="alarrosa@suse.com" date="1728648000">- Add a patch to fix a regression introduced in 9.6 that makes X11
  forwarding very slow. Submitted to upstream in
  https://bugzilla.mindrot.org/show_bug.cgi?id=3655#c4 . Fixes
  bsc#1229449:
  * fix-x11-regression-bsc1229449.patch
- Add a openssl11 bcond to the spec file for the SLE12 case
  instead of checking suse_version in different parts.
- Move conditional patches to a number &gt;= 1000.
- Several spec file fixes so the package builds and can be
  installed in SLE 15 SP5 and SLE 12 SP5
- Drop most of openssh-6.6p1-keycat.patch (actually, it was just
  commented out). The keycat binary isn't really installed nor
  supported, so we can drop it, except for the code that is used
  by other SELinux patches, which is what I kept from that patch
  (boo#1229072).
- Add patch submitted to upstream to fix RFC4256 implementation
  so that keyboard-interactive authentication method can send
  instructions and sshd shows them to users even before a prompt
  is requested. This fixes MFA push notifications (boo#1229010).
  * 0001-auth-pam-Immediately-report-instructions-to-clients-and-fix-handling-in-ssh-client.patch
- Fix a dbus connection leaked in the logind patch that was
  missing a sd_bus_unref call (found by Matthias Gerstner):
  * logind_set_tty.patch
- Add a patch that fixes a small memory leak when parsing the
  subsystem configuration option:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1728907200">- Use %{with ...} instead of 0%{with ...}</changelog>
  <changelog author="alarrosa@suse.com" date="1739448000">- Fix a MitM attack against OpenSSH's VerifyHostKeyDNS-enabled
  client and a DoS attack against OpenSSH's client and server
  (bsc#1237040, CVE-2025-26465, bsc#1237041, CVE-2025-26466):
  * fix-CVE-2025-26465-and-CVE-2025-26466.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1739880000">- Fix ssh client segfault with GSSAPIKeyExchange=yes in ssh_kex2
  due to gssapi proposal not being correctly initialized
  (bsc#1236826). The problem was introduced in the rebase of
  the patch for 9.6p1:
  * openssh-8.0p1-gssapi-keyex.patch
- Rebase patch and apply it:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="hpj@suse.com" date="1746532800">- Added openssh-cve-2025-32728.patch (bsc#1241012, CVE-2025-32728).
  This fixes an upstream logic error handling the DisableForwarding
  option.</changelog>
  <changelog author="alarrosa@suse.com" date="1747137600">- Enable --with-logind to call the SetTTY dbus method in systemd.
  This allows "wall" to print messages in ssh ttys (bsc#1239671)
- Small fixes to unref the dbus session when any error occurs:
  * logind_set_tty.patch</changelog>
  <changelog author="hpj@suse.com" date="1748952000">- Add openssh-scp-umask-preserve-permissions.patch (bsc#1241667).</changelog>
</package>
<package pkgid="e21d8785dedf2aa1415a985771cef2d357c80b846b64652bd01c1cc0a243a1d9" name="openssh-fips" arch="x86_64">
  <version epoch="0" ver="9.6p1" rel="150600.6.34.1"/>
  <changelog author="alarrosa@suse.com" date="1712059200">- Use %config(noreplace) for sshd_config . In any case, it's
  recommended to drop a file in sshd_config.d instead of editing
  sshd_config (bsc#1221063)
- Add patches from obs package that were also in SP3/SP4/SP5:
  * Fri Nov  3 10:44:14 UTC 2023 - Johannes Segitz &lt;jsegitz@suse.com&gt;
  - Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712059201">- Rebase openssh-7.7p1-fips.patch (bsc#1221928)
  Remove OPENSSL_HAVE_EVPGCM-ifdef, which is no longer supported by upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1712577600">- Update to openssh 9.6p1:
  = Security
  * ssh(1), sshd(8): implement protocol extensions to thwart the
    so-called "Terrapin attack" discovered by Fabian Bäumer, Marcus
    Brinkmann and Jörg Schwenk. This attack allows a MITM to effect a
    limited break of the integrity of the early encrypted SSH transport
    protocol by sending extra messages prior to the commencement of
    encryption, and deleting an equal number of consecutive messages
    immediately after encryption starts. A peer SSH client/server
    would not be able to detect that messages were deleted
    (bsc#1217950, CVE-2023-48795).
  * ssh-agent(1): when adding PKCS#11-hosted private keys while
    specifying destination constraints, if the PKCS#11 token returned
    multiple keys then only the first key had the constraints applied.
    Use of regular private keys, FIDO tokens and unconstrained keys
    are unaffected.
  * ssh(1): if an invalid user or hostname that contained shell
    metacharacters was passed to ssh(1), and a ProxyCommand,
    LocalCommand directive or "match exec" predicate referenced the
    user or hostname via %u, %h or similar expansion token, then
    an attacker who could supply arbitrary user/hostnames to ssh(1)
    could potentially perform command injection depending on what
    quoting was present in the user-supplied ssh_config(5) directive
    (bsc#1218215, CVE-2023-51385).
  = Potentially incompatible changes
  * ssh(1), sshd(8): the RFC4254 connection/channels protocol provides
    a TCP-like window mechanism that limits the amount of data that
    can be sent without acceptance from the peer. In cases where this
    limit was exceeded by a non-conforming peer SSH implementation,
    ssh(1)/sshd(8) previously discarded the extra data. From OpenSSH
    9.6, ssh(1)/sshd(8) will now terminate the connection if a peer
    exceeds the window limit by more than a small grace factor. This
    change should have no effect of SSH implementations that follow
    the specification.
  = New features
  * ssh(1): add a %j token that expands to the configured ProxyJump
    hostname (or the empty string if this option is not being used)
    that can be used in a number of ssh_config(5) keywords. bz3610
  * ssh(1): add ChannelTimeout support to the client, mirroring the
    same option in the server and allowing ssh(1) to terminate
    quiescent channels.
  * ssh(1), sshd(8), ssh-add(1), ssh-keygen(1): add support for
    reading ED25519 private keys in PEM PKCS8 format. Previously
    only the OpenSSH private key format was supported.
  * ssh(1), sshd(8): introduce a protocol extension to allow
    renegotiation of acceptable signature algorithms for public key
    authentication after the server has learned the username being
    used for authentication. This allows varying sshd_config(5)
    PubkeyAcceptedAlgorithms in a "Match user" block.
  * ssh-add(1), ssh-agent(1): add an agent protocol extension to allow
    specifying certificates when loading PKCS#11 keys. This allows the
    use of certificates backed by PKCS#11 private keys in all OpenSSH
    tools that support ssh-agent(1). Previously only ssh(1) supported
    this use-case.
  = Bugfixes
  * ssh(1): when deciding whether to enable the keystroke timing
    obfuscation, enable it only if a channel with a TTY is active.
  * ssh(1): switch mainloop from poll(3) to ppoll(3) and mask signals
    before checking flags set in signal handler. Avoids potential
    race condition between signaling ssh to exit and polling. bz3531
  * ssh(1): when connecting to a destination with both the
    AddressFamily and CanonicalizeHostname directives in use,
    the AddressFamily directive could be ignored. bz5326
  * sftp(1): correct handling of the limits@openssh.com option when
    the server returned an unexpected message.
  * A number of fixes to the PuTTY and Dropbear regress/integration
    tests.
  * ssh(1): release GSS OIDs only at end of authentication, avoiding
    unnecessary init/cleanup cycles. bz2982
  * ssh_config(5): mention "none" is a valid argument to IdentityFile
    in the manual. bz3080
  * scp(1): improved debugging for paths from the server rejected for
    not matching the client's glob(3) pattern in old SCP/RCP protocol
    mode.
  * ssh-agent(1): refuse signing operations on destination-constrained
    keys if a previous session-bind operation has failed. This may
    prevent a fail-open situation in future if a user uses a mismatched
    ssh(1) client and ssh-agent(1) where the client supports a key type
    that the agent does not support.
- Update to openssh 9.5p1:
  = Potentially incompatible changes
  * ssh-keygen(1): generate Ed25519 keys by default. Ed25519 public keys
    are very convenient due to their small size. Ed25519 keys are
    specified in RFC 8709 and OpenSSH has supported them since version 6.5
    (January 2014).
  * sshd(8): the Subsystem directive now accurately preserves quoting of
    subsystem commands and arguments. This may change behaviour for exotic
    configurations, but the most common subsystem configuration
    (sftp-server) is unlikely to be affected.
  = New features
  * ssh(1): add keystroke timing obfuscation to the client. This attempts
    to hide inter-keystroke timings by sending interactive traffic at
    fixed intervals (default: every 20ms) when there is only a small
    amount of data being sent. It also sends fake "chaff" keystrokes for
    a random interval after the last real keystroke. These are
    controlled by a new ssh_config ObscureKeystrokeTiming keyword.
  * ssh(1), sshd(8): Introduce a transport-level ping facility. This adds
    a pair of SSH transport protocol messages SSH2_MSG_PING/PONG to
    implement a ping capability. These messages use numbers in the "local
    extensions" number space and are advertised using a "ping@openssh.com"
    ext-info message with a string version number of "0".
  * sshd(8): allow override of Subsystem directives in sshd Match blocks.
  = Bugfixes
  * scp(1): fix scp in SFTP mode recursive upload and download of
    directories that contain symlinks to other directories. In scp mode,
    the links would be followed, but in SFTP mode they were not. bz3611
  * ssh-keygen(1): handle cr+lf (instead of just cr) line endings in
    sshsig signature files.
  * ssh(1): interactive mode for ControlPersist sessions if they
    originally requested a tty.
  * sshd(8): make PerSourceMaxStartups first-match-wins
  * sshd(8): limit artificial login delay to a reasonable maximum (5s)
    and don't delay at all for the "none" authentication mechanism.
    bz3602
  * sshd(8): Log errors in kex_exchange_identification() with level
    verbose instead of error to reduce preauth log spam. All of those
    get logged with a more generic error message by sshpkt_fatal().
  * sshd(8): correct math for ClientAliveInterval that caused the probes
    to be sent less frequently than configured.
  * ssh(1): fix regression in OpenSSH 9.4 (mux.c r1.99) that caused
    multiplexed sessions to ignore SIGINT under some circumstances.
- Update to openssh 9.4p1:
  = Potentially incompatible changes
  * This release removes support for older versions of libcrypto.
    OpenSSH now requires LibreSSL &gt;= 3.1.0 or OpenSSL &gt;= 1.1.1.
    Note that these versions are already deprecated by their upstream
    vendors.
  * ssh-agent(1): PKCS#11 modules must now be specified by their full
    paths. Previously dlopen(3) could search for them in system
    library directories.
  = New features
  * ssh(1): allow forwarding Unix Domain sockets via ssh -W.
  * ssh(1): add support for configuration tags to ssh(1).
    This adds a ssh_config(5) "Tag" directive and corresponding
    "Match tag" predicate that may be used to select blocks of
    configuration similar to the pf.conf(5) keywords of the same
    name.
  * ssh(1): add a "match localnetwork" predicate. This allows matching
    on the addresses of available network interfaces and may be used to
    vary the effective client configuration based on network location.
  * ssh(1), sshd(8), ssh-keygen(1): infrastructure support for KRL
    extensions.  This defines wire formats for optional KRL extensions
    and implements parsing of the new submessages. No actual extensions
    are supported at this point.
  * sshd(8): AuthorizedPrincipalsCommand and AuthorizedKeysCommand now
    accept two additional %-expansion sequences: %D which expands to
    the routing domain of the connected session and %C which expands
    to the addresses and port numbers for the source and destination
    of the connection.
  * ssh-keygen(1): increase the default work factor (rounds) for the
    bcrypt KDF used to derive symmetric encryption keys for passphrase
    protected key files by 50%.
  = Bugfixes
  * ssh-agent(1): improve isolation between loaded PKCS#11 modules
    by running separate ssh-pkcs11-helpers for each loaded provider.
  * ssh(1): make -f (fork after authentication) work correctly with
    multiplexed connections, including ControlPersist. bz3589 bz3589
  * ssh(1): make ConnectTimeout apply to multiplexing sockets and not
    just to network connections.
  * ssh-agent(1), ssh(1): improve defences against invalid PKCS#11
    modules being loaded by checking that the requested module
    contains the required symbol before loading it.
  * sshd(8): fix AuthorizedPrincipalsCommand when AuthorizedKeysCommand
    appears before it in sshd_config. Since OpenSSH 8.7 the
    AuthorizedPrincipalsCommand directive was incorrectly ignored in
    this situation. bz3574
  * sshd(8), ssh(1), ssh-keygen(1): remove vestigal support for KRL
    signatures When the KRL format was originally defined, it included
    support for signing of KRL objects. However, the code to sign KRLs
    and verify KRL signatues was never completed in OpenSSH. This
    release removes the partially-implemented code to verify KRLs.
    All OpenSSH tools now ignore KRL_SECTION_SIGNATURE sections in
    KRL files.
  * All: fix a number of memory leaks and unreachable/harmless integer
    overflows.
  * ssh-agent(1), ssh(1): don't truncate strings logged from PKCS#11
    modules; GHPR406
  * sshd(8), ssh(1): better validate CASignatureAlgorithms in
    ssh_config and sshd_config. Previously this directive would accept
    certificate algorithm names, but these were unusable in practice as
    OpenSSH does not support CA chains. bz3577
  * ssh(1): make `ssh -Q CASignatureAlgorithms` only list signature
    algorithms that are valid for CA signing. Previous behaviour was
    to list all signing algorithms, including certificate algorithms.
  * ssh-keyscan(1): gracefully handle systems where rlimits or the
    maximum number of open files is larger than INT_MAX; bz3581
  * ssh-keygen(1): fix "no comment" not showing on when running
    `ssh-keygen -l` on multiple keys where one has a comment and other
    following keys do not. bz3580
  * scp(1), sftp(1): adjust ftruncate() logic to handle servers that
    reorder requests. Previously, if the server reordered requests then
    the resultant file would be erroneously truncated.
  * ssh(1): don't incorrectly disable hostname canonicalization when
    CanonicalizeHostname=yes and ProxyJump was expicitly set to
    "none". bz3567
  * scp(1): when copying local-&gt;remote, check that the source file
    exists before opening an SFTP connection to the server. Based on
    GHPR#370
- Dropped patches:
  * cb4ed12f.patch - implemented upstream.
- Rebased patches:
  * openssh-7.7p1-fips.patch
  * openssh-7.8p1-role-mls.patch
  * openssh-8.0p1-gssapi-keyex.patch
- Add patches from obs:
  * Mon Mar  4 09:57:06 UTC 2024 - Pedro Monreal &lt;pmonreal@suse.com&gt;
- Add crypto-policies support [bsc#1211301]
  * Add patches:
  - openssh-9.6p1-crypto-policies.patch
  - openssh-9.6p1-crypto-policies-man.patch</changelog>
  <changelog author="opensuse@arnavion.dev" date="1712836800">- Fix duplicate loading of dropins. (boo#1222467)</changelog>
  <changelog author="alarrosa@suse.com" date="1712923200">- Make openssh-server recommend the openssh-server-config-rootlogin
  package in SLE in order to keep the same behaviour of previous
  SPs where the PermitRootLogin default was set to yes
  (bsc#1221005).
- Fix crypto-policies requirement to be set by openssh-server, not
  the config-rootlogin subpackage.
- Add back %config(noreplace) tag for more config files that were
  already set like this in previous SPs.</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- openssh-8.0p1-gssapi-keyex.patch: Added missing struct initializer,
  added missing parameter (bsc#1222840)</changelog>
  <changelog author="alarrosa@suse.com" date="1715601600">- Only for SLE15, restore the patch file removed in
  Thu Feb 18 13:54:44 UTC 2021 to restore the previous behaviour
  from SP5 of having root password login allowed by default
  (fixes bsc#1223486, related to bsc#1173067):
  * openssh-7.7p1-allow_root_password_login.patch
- Since the default value for this config option is now set to
  permit root to use password logins in SLE15, the
  openssh-server-config-rootlogin subpackage isn't useful there so
  we now create an openssh-server-config-disallow-rootlogin
  subpackage that sets the configuration the other way around
  than openssh-server-config-rootlogin.</changelog>
  <changelog author="alarrosa@suse.com" date="1715688000">- Add a warning in %post of openssh-clients, openssh-server and
  openssh-server-config-disallow-rootlogin to warn the user if
  the /etc/ssh/(ssh_config.d|sshd_config.d) directories are not
  being used (bsc#1223486).</changelog>
  <changelog author="alarrosa@suse.com" date="1719835200">- Add patch to fix a race condition in a signal handler by removing
  the async-signal-unsafe code (CVE-2024-6387, bsc#1226642):
  * fix-CVE-2024-6387.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720008000">- Add obsoletes for openssh-server-config-rootlogin since that
  package existed for a brief period of time during SLE 15 SP6/
  Leap 15.6 development but even if it was removed from the
  repositories before GM, some users might have it in their
  systems from having tried a beta/RC release (boo#1227350).
- Add #include &lt;stdlib.h&gt; in some files added by the ldap patch to
  fix build with gcc14 (boo#1225904).
  * openssh-7.7p1-ldap.patch
- Remove the recommendation for openssh-server-config-rootlogin
  from openssh-server. Since the default for that config option
  was changed in SLE it's not needed anymore in SLE nor in TW
  (boo#1224392).</changelog>
  <changelog author="alarrosa@suse.com" date="1720180800">- Add patch from upstream to fix proxy multiplexing mode:
  * 0001-upstream-fix-proxy-multiplexing-mode_-broken-when-keystroke.patch
- Add patch from upstream to restore correctly sigprocmask
  * 0001-upstream-correctly-restore-sigprocmask-around-ppoll.patch
- Add patch from upstream to fix a logic error in
  ObscureKeystrokeTiming that rendered this feature ineffective,
  allowing a passive observer to detect which network packets
  contained real keystrokes (bsc#1227318, CVE-2024-39894):
  * 0001-upstream-when-sending-ObscureKeystrokeTiming-chaff-packets_.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720612800">- Remove empty line at the end of sshd-sle.pamd (bsc#1227456)</changelog>
  <changelog author="alarrosa@suse.com" date="1728648000">- Add a patch to fix a regression introduced in 9.6 that makes X11
  forwarding very slow. Submitted to upstream in
  https://bugzilla.mindrot.org/show_bug.cgi?id=3655#c4 . Fixes
  bsc#1229449:
  * fix-x11-regression-bsc1229449.patch
- Add a openssl11 bcond to the spec file for the SLE12 case
  instead of checking suse_version in different parts.
- Move conditional patches to a number &gt;= 1000.
- Several spec file fixes so the package builds and can be
  installed in SLE 15 SP5 and SLE 12 SP5
- Drop most of openssh-6.6p1-keycat.patch (actually, it was just
  commented out). The keycat binary isn't really installed nor
  supported, so we can drop it, except for the code that is used
  by other SELinux patches, which is what I kept from that patch
  (boo#1229072).
- Add patch submitted to upstream to fix RFC4256 implementation
  so that keyboard-interactive authentication method can send
  instructions and sshd shows them to users even before a prompt
  is requested. This fixes MFA push notifications (boo#1229010).
  * 0001-auth-pam-Immediately-report-instructions-to-clients-and-fix-handling-in-ssh-client.patch
- Fix a dbus connection leaked in the logind patch that was
  missing a sd_bus_unref call (found by Matthias Gerstner):
  * logind_set_tty.patch
- Add a patch that fixes a small memory leak when parsing the
  subsystem configuration option:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1728907200">- Use %{with ...} instead of 0%{with ...}</changelog>
  <changelog author="alarrosa@suse.com" date="1739448000">- Fix a MitM attack against OpenSSH's VerifyHostKeyDNS-enabled
  client and a DoS attack against OpenSSH's client and server
  (bsc#1237040, CVE-2025-26465, bsc#1237041, CVE-2025-26466):
  * fix-CVE-2025-26465-and-CVE-2025-26466.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1739880000">- Fix ssh client segfault with GSSAPIKeyExchange=yes in ssh_kex2
  due to gssapi proposal not being correctly initialized
  (bsc#1236826). The problem was introduced in the rebase of
  the patch for 9.6p1:
  * openssh-8.0p1-gssapi-keyex.patch
- Rebase patch and apply it:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="hpj@suse.com" date="1746532800">- Added openssh-cve-2025-32728.patch (bsc#1241012, CVE-2025-32728).
  This fixes an upstream logic error handling the DisableForwarding
  option.</changelog>
  <changelog author="alarrosa@suse.com" date="1747137600">- Enable --with-logind to call the SetTTY dbus method in systemd.
  This allows "wall" to print messages in ssh ttys (bsc#1239671)
- Small fixes to unref the dbus session when any error occurs:
  * logind_set_tty.patch</changelog>
  <changelog author="hpj@suse.com" date="1748952000">- Add openssh-scp-umask-preserve-permissions.patch (bsc#1241667).</changelog>
  <changelog author="hpj@suse.com" date="1762516800">- Add openssh-cve-2025-61984-username-validation.patch
  (bsc#1251198, CVE-2025-61984).
- Add openssh-cve-2025-61985-nul-url-encode.patch
  (bsc#1251199, CVE-2025-61985).</changelog>
</package>
<package pkgid="8915c665574ae40344f1da962e275b4324f1a231f871796ca1c83d673551c5a6" name="openssh-fips" arch="x86_64">
  <version epoch="0" ver="9.6p1" rel="150600.6.37.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1712059200">- Rebase openssh-7.7p1-fips.patch (bsc#1221928)
  Remove OPENSSL_HAVE_EVPGCM-ifdef, which is no longer supported by upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1712577600">- Update to openssh 9.6p1:
  = Security
  * ssh(1), sshd(8): implement protocol extensions to thwart the
    so-called "Terrapin attack" discovered by Fabian Bäumer, Marcus
    Brinkmann and Jörg Schwenk. This attack allows a MITM to effect a
    limited break of the integrity of the early encrypted SSH transport
    protocol by sending extra messages prior to the commencement of
    encryption, and deleting an equal number of consecutive messages
    immediately after encryption starts. A peer SSH client/server
    would not be able to detect that messages were deleted
    (bsc#1217950, CVE-2023-48795).
  * ssh-agent(1): when adding PKCS#11-hosted private keys while
    specifying destination constraints, if the PKCS#11 token returned
    multiple keys then only the first key had the constraints applied.
    Use of regular private keys, FIDO tokens and unconstrained keys
    are unaffected.
  * ssh(1): if an invalid user or hostname that contained shell
    metacharacters was passed to ssh(1), and a ProxyCommand,
    LocalCommand directive or "match exec" predicate referenced the
    user or hostname via %u, %h or similar expansion token, then
    an attacker who could supply arbitrary user/hostnames to ssh(1)
    could potentially perform command injection depending on what
    quoting was present in the user-supplied ssh_config(5) directive
    (bsc#1218215, CVE-2023-51385).
  = Potentially incompatible changes
  * ssh(1), sshd(8): the RFC4254 connection/channels protocol provides
    a TCP-like window mechanism that limits the amount of data that
    can be sent without acceptance from the peer. In cases where this
    limit was exceeded by a non-conforming peer SSH implementation,
    ssh(1)/sshd(8) previously discarded the extra data. From OpenSSH
    9.6, ssh(1)/sshd(8) will now terminate the connection if a peer
    exceeds the window limit by more than a small grace factor. This
    change should have no effect of SSH implementations that follow
    the specification.
  = New features
  * ssh(1): add a %j token that expands to the configured ProxyJump
    hostname (or the empty string if this option is not being used)
    that can be used in a number of ssh_config(5) keywords. bz3610
  * ssh(1): add ChannelTimeout support to the client, mirroring the
    same option in the server and allowing ssh(1) to terminate
    quiescent channels.
  * ssh(1), sshd(8), ssh-add(1), ssh-keygen(1): add support for
    reading ED25519 private keys in PEM PKCS8 format. Previously
    only the OpenSSH private key format was supported.
  * ssh(1), sshd(8): introduce a protocol extension to allow
    renegotiation of acceptable signature algorithms for public key
    authentication after the server has learned the username being
    used for authentication. This allows varying sshd_config(5)
    PubkeyAcceptedAlgorithms in a "Match user" block.
  * ssh-add(1), ssh-agent(1): add an agent protocol extension to allow
    specifying certificates when loading PKCS#11 keys. This allows the
    use of certificates backed by PKCS#11 private keys in all OpenSSH
    tools that support ssh-agent(1). Previously only ssh(1) supported
    this use-case.
  = Bugfixes
  * ssh(1): when deciding whether to enable the keystroke timing
    obfuscation, enable it only if a channel with a TTY is active.
  * ssh(1): switch mainloop from poll(3) to ppoll(3) and mask signals
    before checking flags set in signal handler. Avoids potential
    race condition between signaling ssh to exit and polling. bz3531
  * ssh(1): when connecting to a destination with both the
    AddressFamily and CanonicalizeHostname directives in use,
    the AddressFamily directive could be ignored. bz5326
  * sftp(1): correct handling of the limits@openssh.com option when
    the server returned an unexpected message.
  * A number of fixes to the PuTTY and Dropbear regress/integration
    tests.
  * ssh(1): release GSS OIDs only at end of authentication, avoiding
    unnecessary init/cleanup cycles. bz2982
  * ssh_config(5): mention "none" is a valid argument to IdentityFile
    in the manual. bz3080
  * scp(1): improved debugging for paths from the server rejected for
    not matching the client's glob(3) pattern in old SCP/RCP protocol
    mode.
  * ssh-agent(1): refuse signing operations on destination-constrained
    keys if a previous session-bind operation has failed. This may
    prevent a fail-open situation in future if a user uses a mismatched
    ssh(1) client and ssh-agent(1) where the client supports a key type
    that the agent does not support.
- Update to openssh 9.5p1:
  = Potentially incompatible changes
  * ssh-keygen(1): generate Ed25519 keys by default. Ed25519 public keys
    are very convenient due to their small size. Ed25519 keys are
    specified in RFC 8709 and OpenSSH has supported them since version 6.5
    (January 2014).
  * sshd(8): the Subsystem directive now accurately preserves quoting of
    subsystem commands and arguments. This may change behaviour for exotic
    configurations, but the most common subsystem configuration
    (sftp-server) is unlikely to be affected.
  = New features
  * ssh(1): add keystroke timing obfuscation to the client. This attempts
    to hide inter-keystroke timings by sending interactive traffic at
    fixed intervals (default: every 20ms) when there is only a small
    amount of data being sent. It also sends fake "chaff" keystrokes for
    a random interval after the last real keystroke. These are
    controlled by a new ssh_config ObscureKeystrokeTiming keyword.
  * ssh(1), sshd(8): Introduce a transport-level ping facility. This adds
    a pair of SSH transport protocol messages SSH2_MSG_PING/PONG to
    implement a ping capability. These messages use numbers in the "local
    extensions" number space and are advertised using a "ping@openssh.com"
    ext-info message with a string version number of "0".
  * sshd(8): allow override of Subsystem directives in sshd Match blocks.
  = Bugfixes
  * scp(1): fix scp in SFTP mode recursive upload and download of
    directories that contain symlinks to other directories. In scp mode,
    the links would be followed, but in SFTP mode they were not. bz3611
  * ssh-keygen(1): handle cr+lf (instead of just cr) line endings in
    sshsig signature files.
  * ssh(1): interactive mode for ControlPersist sessions if they
    originally requested a tty.
  * sshd(8): make PerSourceMaxStartups first-match-wins
  * sshd(8): limit artificial login delay to a reasonable maximum (5s)
    and don't delay at all for the "none" authentication mechanism.
    bz3602
  * sshd(8): Log errors in kex_exchange_identification() with level
    verbose instead of error to reduce preauth log spam. All of those
    get logged with a more generic error message by sshpkt_fatal().
  * sshd(8): correct math for ClientAliveInterval that caused the probes
    to be sent less frequently than configured.
  * ssh(1): fix regression in OpenSSH 9.4 (mux.c r1.99) that caused
    multiplexed sessions to ignore SIGINT under some circumstances.
- Update to openssh 9.4p1:
  = Potentially incompatible changes
  * This release removes support for older versions of libcrypto.
    OpenSSH now requires LibreSSL &gt;= 3.1.0 or OpenSSL &gt;= 1.1.1.
    Note that these versions are already deprecated by their upstream
    vendors.
  * ssh-agent(1): PKCS#11 modules must now be specified by their full
    paths. Previously dlopen(3) could search for them in system
    library directories.
  = New features
  * ssh(1): allow forwarding Unix Domain sockets via ssh -W.
  * ssh(1): add support for configuration tags to ssh(1).
    This adds a ssh_config(5) "Tag" directive and corresponding
    "Match tag" predicate that may be used to select blocks of
    configuration similar to the pf.conf(5) keywords of the same
    name.
  * ssh(1): add a "match localnetwork" predicate. This allows matching
    on the addresses of available network interfaces and may be used to
    vary the effective client configuration based on network location.
  * ssh(1), sshd(8), ssh-keygen(1): infrastructure support for KRL
    extensions.  This defines wire formats for optional KRL extensions
    and implements parsing of the new submessages. No actual extensions
    are supported at this point.
  * sshd(8): AuthorizedPrincipalsCommand and AuthorizedKeysCommand now
    accept two additional %-expansion sequences: %D which expands to
    the routing domain of the connected session and %C which expands
    to the addresses and port numbers for the source and destination
    of the connection.
  * ssh-keygen(1): increase the default work factor (rounds) for the
    bcrypt KDF used to derive symmetric encryption keys for passphrase
    protected key files by 50%.
  = Bugfixes
  * ssh-agent(1): improve isolation between loaded PKCS#11 modules
    by running separate ssh-pkcs11-helpers for each loaded provider.
  * ssh(1): make -f (fork after authentication) work correctly with
    multiplexed connections, including ControlPersist. bz3589 bz3589
  * ssh(1): make ConnectTimeout apply to multiplexing sockets and not
    just to network connections.
  * ssh-agent(1), ssh(1): improve defences against invalid PKCS#11
    modules being loaded by checking that the requested module
    contains the required symbol before loading it.
  * sshd(8): fix AuthorizedPrincipalsCommand when AuthorizedKeysCommand
    appears before it in sshd_config. Since OpenSSH 8.7 the
    AuthorizedPrincipalsCommand directive was incorrectly ignored in
    this situation. bz3574
  * sshd(8), ssh(1), ssh-keygen(1): remove vestigal support for KRL
    signatures When the KRL format was originally defined, it included
    support for signing of KRL objects. However, the code to sign KRLs
    and verify KRL signatues was never completed in OpenSSH. This
    release removes the partially-implemented code to verify KRLs.
    All OpenSSH tools now ignore KRL_SECTION_SIGNATURE sections in
    KRL files.
  * All: fix a number of memory leaks and unreachable/harmless integer
    overflows.
  * ssh-agent(1), ssh(1): don't truncate strings logged from PKCS#11
    modules; GHPR406
  * sshd(8), ssh(1): better validate CASignatureAlgorithms in
    ssh_config and sshd_config. Previously this directive would accept
    certificate algorithm names, but these were unusable in practice as
    OpenSSH does not support CA chains. bz3577
  * ssh(1): make `ssh -Q CASignatureAlgorithms` only list signature
    algorithms that are valid for CA signing. Previous behaviour was
    to list all signing algorithms, including certificate algorithms.
  * ssh-keyscan(1): gracefully handle systems where rlimits or the
    maximum number of open files is larger than INT_MAX; bz3581
  * ssh-keygen(1): fix "no comment" not showing on when running
    `ssh-keygen -l` on multiple keys where one has a comment and other
    following keys do not. bz3580
  * scp(1), sftp(1): adjust ftruncate() logic to handle servers that
    reorder requests. Previously, if the server reordered requests then
    the resultant file would be erroneously truncated.
  * ssh(1): don't incorrectly disable hostname canonicalization when
    CanonicalizeHostname=yes and ProxyJump was expicitly set to
    "none". bz3567
  * scp(1): when copying local-&gt;remote, check that the source file
    exists before opening an SFTP connection to the server. Based on
    GHPR#370
- Dropped patches:
  * cb4ed12f.patch - implemented upstream.
- Rebased patches:
  * openssh-7.7p1-fips.patch
  * openssh-7.8p1-role-mls.patch
  * openssh-8.0p1-gssapi-keyex.patch
- Add patches from obs:
  * Mon Mar  4 09:57:06 UTC 2024 - Pedro Monreal &lt;pmonreal@suse.com&gt;
- Add crypto-policies support [bsc#1211301]
  * Add patches:
  - openssh-9.6p1-crypto-policies.patch
  - openssh-9.6p1-crypto-policies-man.patch</changelog>
  <changelog author="opensuse@arnavion.dev" date="1712836800">- Fix duplicate loading of dropins. (boo#1222467)</changelog>
  <changelog author="alarrosa@suse.com" date="1712923200">- Make openssh-server recommend the openssh-server-config-rootlogin
  package in SLE in order to keep the same behaviour of previous
  SPs where the PermitRootLogin default was set to yes
  (bsc#1221005).
- Fix crypto-policies requirement to be set by openssh-server, not
  the config-rootlogin subpackage.
- Add back %config(noreplace) tag for more config files that were
  already set like this in previous SPs.</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- openssh-8.0p1-gssapi-keyex.patch: Added missing struct initializer,
  added missing parameter (bsc#1222840)</changelog>
  <changelog author="alarrosa@suse.com" date="1715601600">- Only for SLE15, restore the patch file removed in
  Thu Feb 18 13:54:44 UTC 2021 to restore the previous behaviour
  from SP5 of having root password login allowed by default
  (fixes bsc#1223486, related to bsc#1173067):
  * openssh-7.7p1-allow_root_password_login.patch
- Since the default value for this config option is now set to
  permit root to use password logins in SLE15, the
  openssh-server-config-rootlogin subpackage isn't useful there so
  we now create an openssh-server-config-disallow-rootlogin
  subpackage that sets the configuration the other way around
  than openssh-server-config-rootlogin.</changelog>
  <changelog author="alarrosa@suse.com" date="1715688000">- Add a warning in %post of openssh-clients, openssh-server and
  openssh-server-config-disallow-rootlogin to warn the user if
  the /etc/ssh/(ssh_config.d|sshd_config.d) directories are not
  being used (bsc#1223486).</changelog>
  <changelog author="alarrosa@suse.com" date="1719835200">- Add patch to fix a race condition in a signal handler by removing
  the async-signal-unsafe code (CVE-2024-6387, bsc#1226642):
  * fix-CVE-2024-6387.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720008000">- Add obsoletes for openssh-server-config-rootlogin since that
  package existed for a brief period of time during SLE 15 SP6/
  Leap 15.6 development but even if it was removed from the
  repositories before GM, some users might have it in their
  systems from having tried a beta/RC release (boo#1227350).
- Add #include &lt;stdlib.h&gt; in some files added by the ldap patch to
  fix build with gcc14 (boo#1225904).
  * openssh-7.7p1-ldap.patch
- Remove the recommendation for openssh-server-config-rootlogin
  from openssh-server. Since the default for that config option
  was changed in SLE it's not needed anymore in SLE nor in TW
  (boo#1224392).</changelog>
  <changelog author="alarrosa@suse.com" date="1720180800">- Add patch from upstream to fix proxy multiplexing mode:
  * 0001-upstream-fix-proxy-multiplexing-mode_-broken-when-keystroke.patch
- Add patch from upstream to restore correctly sigprocmask
  * 0001-upstream-correctly-restore-sigprocmask-around-ppoll.patch
- Add patch from upstream to fix a logic error in
  ObscureKeystrokeTiming that rendered this feature ineffective,
  allowing a passive observer to detect which network packets
  contained real keystrokes (bsc#1227318, CVE-2024-39894):
  * 0001-upstream-when-sending-ObscureKeystrokeTiming-chaff-packets_.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720612800">- Remove empty line at the end of sshd-sle.pamd (bsc#1227456)</changelog>
  <changelog author="alarrosa@suse.com" date="1728648000">- Add a patch to fix a regression introduced in 9.6 that makes X11
  forwarding very slow. Submitted to upstream in
  https://bugzilla.mindrot.org/show_bug.cgi?id=3655#c4 . Fixes
  bsc#1229449:
  * fix-x11-regression-bsc1229449.patch
- Add a openssl11 bcond to the spec file for the SLE12 case
  instead of checking suse_version in different parts.
- Move conditional patches to a number &gt;= 1000.
- Several spec file fixes so the package builds and can be
  installed in SLE 15 SP5 and SLE 12 SP5
- Drop most of openssh-6.6p1-keycat.patch (actually, it was just
  commented out). The keycat binary isn't really installed nor
  supported, so we can drop it, except for the code that is used
  by other SELinux patches, which is what I kept from that patch
  (boo#1229072).
- Add patch submitted to upstream to fix RFC4256 implementation
  so that keyboard-interactive authentication method can send
  instructions and sshd shows them to users even before a prompt
  is requested. This fixes MFA push notifications (boo#1229010).
  * 0001-auth-pam-Immediately-report-instructions-to-clients-and-fix-handling-in-ssh-client.patch
- Fix a dbus connection leaked in the logind patch that was
  missing a sd_bus_unref call (found by Matthias Gerstner):
  * logind_set_tty.patch
- Add a patch that fixes a small memory leak when parsing the
  subsystem configuration option:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1728907200">- Use %{with ...} instead of 0%{with ...}</changelog>
  <changelog author="alarrosa@suse.com" date="1739448000">- Fix a MitM attack against OpenSSH's VerifyHostKeyDNS-enabled
  client and a DoS attack against OpenSSH's client and server
  (bsc#1237040, CVE-2025-26465, bsc#1237041, CVE-2025-26466):
  * fix-CVE-2025-26465-and-CVE-2025-26466.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1739880000">- Fix ssh client segfault with GSSAPIKeyExchange=yes in ssh_kex2
  due to gssapi proposal not being correctly initialized
  (bsc#1236826). The problem was introduced in the rebase of
  the patch for 9.6p1:
  * openssh-8.0p1-gssapi-keyex.patch
- Rebase patch and apply it:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="hpj@suse.com" date="1746532800">- Added openssh-cve-2025-32728.patch (bsc#1241012, CVE-2025-32728).
  This fixes an upstream logic error handling the DisableForwarding
  option.</changelog>
  <changelog author="alarrosa@suse.com" date="1747137600">- Enable --with-logind to call the SetTTY dbus method in systemd.
  This allows "wall" to print messages in ssh ttys (bsc#1239671)
- Small fixes to unref the dbus session when any error occurs:
  * logind_set_tty.patch</changelog>
  <changelog author="hpj@suse.com" date="1748952000">- Add openssh-scp-umask-preserve-permissions.patch (bsc#1241667).</changelog>
  <changelog author="hpj@suse.com" date="1762516800">- Add openssh-cve-2025-61984-username-validation.patch
  (bsc#1251198, CVE-2025-61984).
- Add openssh-cve-2025-61985-nul-url-encode.patch
  (bsc#1251199, CVE-2025-61985).</changelog>
  <changelog author="hpj@suse.com" date="1778241600">- Added openssh-cve-2026-35385-scp-setuid-modes.patch (bsc#1261427),
  ensuring setuid bits default to being masked out by scp.
- Added openssh-cve-2026-35414-mishandled-ca-commas.patch
  (bsc#1261430), fixing mishandling of comma characters in CA in
  certain situations.</changelog>
</package>
<package pkgid="11ade0325a6a2d83ab0523fd963abc2fe34a4c852dab71ba161dc287acb07e75" name="openssh-helpers" arch="x86_64">
  <version epoch="0" ver="9.6p1" rel="150600.6.26.1"/>
  <changelog author="hpj@suse.com" date="1700827200">- Merge updates from openSUSE. Existing patches were rebased.
- Remove openssh-7.6p1-audit_race_condition.patch: Merged with
  audit patch.
- Remove openssh-CVE-2021-28041-agent-double-free.patch: Fixed
  upstream.
- Remove openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch:
  Fixed upstream.
- Remove openssh-CVE-2023-38408-PKCS11-execution.patch: Fixed
  upstream.
- Add cb4ed12f.patch from upstream, allowing newer versions of
  zlib to be used.
- Add logind_set_tty.patch by Thorsten Kukuk. This informs
  systemd-logind of the login TTY and prevents having to parse utmp,
  which is deprecated by glibc.</changelog>
  <changelog author="alarrosa@suse.com" date="1710244800">- Uncomment %sysuser_requires in openssh-server which was commented
  by mistake and is needed by the pre script installed with
  %sysusers_generate_pre (bsc#1220802).</changelog>
  <changelog author="alarrosa@suse.com" date="1712059200">- Use %config(noreplace) for sshd_config . In any case, it's
  recommended to drop a file in sshd_config.d instead of editing
  sshd_config (bsc#1221063)
- Add patches from obs package that were also in SP3/SP4/SP5:
  * Fri Nov  3 10:44:14 UTC 2023 - Johannes Segitz &lt;jsegitz@suse.com&gt;
  - Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712059201">- Rebase openssh-7.7p1-fips.patch (bsc#1221928)
  Remove OPENSSL_HAVE_EVPGCM-ifdef, which is no longer supported by upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1712577600">- Update to openssh 9.6p1:
  = Security
  * ssh(1), sshd(8): implement protocol extensions to thwart the
    so-called "Terrapin attack" discovered by Fabian Bäumer, Marcus
    Brinkmann and Jörg Schwenk. This attack allows a MITM to effect a
    limited break of the integrity of the early encrypted SSH transport
    protocol by sending extra messages prior to the commencement of
    encryption, and deleting an equal number of consecutive messages
    immediately after encryption starts. A peer SSH client/server
    would not be able to detect that messages were deleted
    (bsc#1217950, CVE-2023-48795).
  * ssh-agent(1): when adding PKCS#11-hosted private keys while
    specifying destination constraints, if the PKCS#11 token returned
    multiple keys then only the first key had the constraints applied.
    Use of regular private keys, FIDO tokens and unconstrained keys
    are unaffected.
  * ssh(1): if an invalid user or hostname that contained shell
    metacharacters was passed to ssh(1), and a ProxyCommand,
    LocalCommand directive or "match exec" predicate referenced the
    user or hostname via %u, %h or similar expansion token, then
    an attacker who could supply arbitrary user/hostnames to ssh(1)
    could potentially perform command injection depending on what
    quoting was present in the user-supplied ssh_config(5) directive
    (bsc#1218215, CVE-2023-51385).
  = Potentially incompatible changes
  * ssh(1), sshd(8): the RFC4254 connection/channels protocol provides
    a TCP-like window mechanism that limits the amount of data that
    can be sent without acceptance from the peer. In cases where this
    limit was exceeded by a non-conforming peer SSH implementation,
    ssh(1)/sshd(8) previously discarded the extra data. From OpenSSH
    9.6, ssh(1)/sshd(8) will now terminate the connection if a peer
    exceeds the window limit by more than a small grace factor. This
    change should have no effect of SSH implementations that follow
    the specification.
  = New features
  * ssh(1): add a %j token that expands to the configured ProxyJump
    hostname (or the empty string if this option is not being used)
    that can be used in a number of ssh_config(5) keywords. bz3610
  * ssh(1): add ChannelTimeout support to the client, mirroring the
    same option in the server and allowing ssh(1) to terminate
    quiescent channels.
  * ssh(1), sshd(8), ssh-add(1), ssh-keygen(1): add support for
    reading ED25519 private keys in PEM PKCS8 format. Previously
    only the OpenSSH private key format was supported.
  * ssh(1), sshd(8): introduce a protocol extension to allow
    renegotiation of acceptable signature algorithms for public key
    authentication after the server has learned the username being
    used for authentication. This allows varying sshd_config(5)
    PubkeyAcceptedAlgorithms in a "Match user" block.
  * ssh-add(1), ssh-agent(1): add an agent protocol extension to allow
    specifying certificates when loading PKCS#11 keys. This allows the
    use of certificates backed by PKCS#11 private keys in all OpenSSH
    tools that support ssh-agent(1). Previously only ssh(1) supported
    this use-case.
  = Bugfixes
  * ssh(1): when deciding whether to enable the keystroke timing
    obfuscation, enable it only if a channel with a TTY is active.
  * ssh(1): switch mainloop from poll(3) to ppoll(3) and mask signals
    before checking flags set in signal handler. Avoids potential
    race condition between signaling ssh to exit and polling. bz3531
  * ssh(1): when connecting to a destination with both the
    AddressFamily and CanonicalizeHostname directives in use,
    the AddressFamily directive could be ignored. bz5326
  * sftp(1): correct handling of the limits@openssh.com option when
    the server returned an unexpected message.
  * A number of fixes to the PuTTY and Dropbear regress/integration
    tests.
  * ssh(1): release GSS OIDs only at end of authentication, avoiding
    unnecessary init/cleanup cycles. bz2982
  * ssh_config(5): mention "none" is a valid argument to IdentityFile
    in the manual. bz3080
  * scp(1): improved debugging for paths from the server rejected for
    not matching the client's glob(3) pattern in old SCP/RCP protocol
    mode.
  * ssh-agent(1): refuse signing operations on destination-constrained
    keys if a previous session-bind operation has failed. This may
    prevent a fail-open situation in future if a user uses a mismatched
    ssh(1) client and ssh-agent(1) where the client supports a key type
    that the agent does not support.
- Update to openssh 9.5p1:
  = Potentially incompatible changes
  * ssh-keygen(1): generate Ed25519 keys by default. Ed25519 public keys
    are very convenient due to their small size. Ed25519 keys are
    specified in RFC 8709 and OpenSSH has supported them since version 6.5
    (January 2014).
  * sshd(8): the Subsystem directive now accurately preserves quoting of
    subsystem commands and arguments. This may change behaviour for exotic
    configurations, but the most common subsystem configuration
    (sftp-server) is unlikely to be affected.
  = New features
  * ssh(1): add keystroke timing obfuscation to the client. This attempts
    to hide inter-keystroke timings by sending interactive traffic at
    fixed intervals (default: every 20ms) when there is only a small
    amount of data being sent. It also sends fake "chaff" keystrokes for
    a random interval after the last real keystroke. These are
    controlled by a new ssh_config ObscureKeystrokeTiming keyword.
  * ssh(1), sshd(8): Introduce a transport-level ping facility. This adds
    a pair of SSH transport protocol messages SSH2_MSG_PING/PONG to
    implement a ping capability. These messages use numbers in the "local
    extensions" number space and are advertised using a "ping@openssh.com"
    ext-info message with a string version number of "0".
  * sshd(8): allow override of Subsystem directives in sshd Match blocks.
  = Bugfixes
  * scp(1): fix scp in SFTP mode recursive upload and download of
    directories that contain symlinks to other directories. In scp mode,
    the links would be followed, but in SFTP mode they were not. bz3611
  * ssh-keygen(1): handle cr+lf (instead of just cr) line endings in
    sshsig signature files.
  * ssh(1): interactive mode for ControlPersist sessions if they
    originally requested a tty.
  * sshd(8): make PerSourceMaxStartups first-match-wins
  * sshd(8): limit artificial login delay to a reasonable maximum (5s)
    and don't delay at all for the "none" authentication mechanism.
    bz3602
  * sshd(8): Log errors in kex_exchange_identification() with level
    verbose instead of error to reduce preauth log spam. All of those
    get logged with a more generic error message by sshpkt_fatal().
  * sshd(8): correct math for ClientAliveInterval that caused the probes
    to be sent less frequently than configured.
  * ssh(1): fix regression in OpenSSH 9.4 (mux.c r1.99) that caused
    multiplexed sessions to ignore SIGINT under some circumstances.
- Update to openssh 9.4p1:
  = Potentially incompatible changes
  * This release removes support for older versions of libcrypto.
    OpenSSH now requires LibreSSL &gt;= 3.1.0 or OpenSSL &gt;= 1.1.1.
    Note that these versions are already deprecated by their upstream
    vendors.
  * ssh-agent(1): PKCS#11 modules must now be specified by their full
    paths. Previously dlopen(3) could search for them in system
    library directories.
  = New features
  * ssh(1): allow forwarding Unix Domain sockets via ssh -W.
  * ssh(1): add support for configuration tags to ssh(1).
    This adds a ssh_config(5) "Tag" directive and corresponding
    "Match tag" predicate that may be used to select blocks of
    configuration similar to the pf.conf(5) keywords of the same
    name.
  * ssh(1): add a "match localnetwork" predicate. This allows matching
    on the addresses of available network interfaces and may be used to
    vary the effective client configuration based on network location.
  * ssh(1), sshd(8), ssh-keygen(1): infrastructure support for KRL
    extensions.  This defines wire formats for optional KRL extensions
    and implements parsing of the new submessages. No actual extensions
    are supported at this point.
  * sshd(8): AuthorizedPrincipalsCommand and AuthorizedKeysCommand now
    accept two additional %-expansion sequences: %D which expands to
    the routing domain of the connected session and %C which expands
    to the addresses and port numbers for the source and destination
    of the connection.
  * ssh-keygen(1): increase the default work factor (rounds) for the
    bcrypt KDF used to derive symmetric encryption keys for passphrase
    protected key files by 50%.
  = Bugfixes
  * ssh-agent(1): improve isolation between loaded PKCS#11 modules
    by running separate ssh-pkcs11-helpers for each loaded provider.
  * ssh(1): make -f (fork after authentication) work correctly with
    multiplexed connections, including ControlPersist. bz3589 bz3589
  * ssh(1): make ConnectTimeout apply to multiplexing sockets and not
    just to network connections.
  * ssh-agent(1), ssh(1): improve defences against invalid PKCS#11
    modules being loaded by checking that the requested module
    contains the required symbol before loading it.
  * sshd(8): fix AuthorizedPrincipalsCommand when AuthorizedKeysCommand
    appears before it in sshd_config. Since OpenSSH 8.7 the
    AuthorizedPrincipalsCommand directive was incorrectly ignored in
    this situation. bz3574
  * sshd(8), ssh(1), ssh-keygen(1): remove vestigal support for KRL
    signatures When the KRL format was originally defined, it included
    support for signing of KRL objects. However, the code to sign KRLs
    and verify KRL signatues was never completed in OpenSSH. This
    release removes the partially-implemented code to verify KRLs.
    All OpenSSH tools now ignore KRL_SECTION_SIGNATURE sections in
    KRL files.
  * All: fix a number of memory leaks and unreachable/harmless integer
    overflows.
  * ssh-agent(1), ssh(1): don't truncate strings logged from PKCS#11
    modules; GHPR406
  * sshd(8), ssh(1): better validate CASignatureAlgorithms in
    ssh_config and sshd_config. Previously this directive would accept
    certificate algorithm names, but these were unusable in practice as
    OpenSSH does not support CA chains. bz3577
  * ssh(1): make `ssh -Q CASignatureAlgorithms` only list signature
    algorithms that are valid for CA signing. Previous behaviour was
    to list all signing algorithms, including certificate algorithms.
  * ssh-keyscan(1): gracefully handle systems where rlimits or the
    maximum number of open files is larger than INT_MAX; bz3581
  * ssh-keygen(1): fix "no comment" not showing on when running
    `ssh-keygen -l` on multiple keys where one has a comment and other
    following keys do not. bz3580
  * scp(1), sftp(1): adjust ftruncate() logic to handle servers that
    reorder requests. Previously, if the server reordered requests then
    the resultant file would be erroneously truncated.
  * ssh(1): don't incorrectly disable hostname canonicalization when
    CanonicalizeHostname=yes and ProxyJump was expicitly set to
    "none". bz3567
  * scp(1): when copying local-&gt;remote, check that the source file
    exists before opening an SFTP connection to the server. Based on
    GHPR#370
- Dropped patches:
  * cb4ed12f.patch - implemented upstream.
- Rebased patches:
  * openssh-7.7p1-fips.patch
  * openssh-7.8p1-role-mls.patch
  * openssh-8.0p1-gssapi-keyex.patch
- Add patches from obs:
  * Mon Mar  4 09:57:06 UTC 2024 - Pedro Monreal &lt;pmonreal@suse.com&gt;
- Add crypto-policies support [bsc#1211301]
  * Add patches:
  - openssh-9.6p1-crypto-policies.patch
  - openssh-9.6p1-crypto-policies-man.patch</changelog>
  <changelog author="opensuse@arnavion.dev" date="1712836800">- Fix duplicate loading of dropins. (boo#1222467)</changelog>
  <changelog author="alarrosa@suse.com" date="1712923200">- Make openssh-server recommend the openssh-server-config-rootlogin
  package in SLE in order to keep the same behaviour of previous
  SPs where the PermitRootLogin default was set to yes
  (bsc#1221005).
- Fix crypto-policies requirement to be set by openssh-server, not
  the config-rootlogin subpackage.
- Add back %config(noreplace) tag for more config files that were
  already set like this in previous SPs.</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- openssh-8.0p1-gssapi-keyex.patch: Added missing struct initializer,
  added missing parameter (bsc#1222840)</changelog>
  <changelog author="alarrosa@suse.com" date="1715601600">- Only for SLE15, restore the patch file removed in
  Thu Feb 18 13:54:44 UTC 2021 to restore the previous behaviour
  from SP5 of having root password login allowed by default
  (fixes bsc#1223486, related to bsc#1173067):
  * openssh-7.7p1-allow_root_password_login.patch
- Since the default value for this config option is now set to
  permit root to use password logins in SLE15, the
  openssh-server-config-rootlogin subpackage isn't useful there so
  we now create an openssh-server-config-disallow-rootlogin
  subpackage that sets the configuration the other way around
  than openssh-server-config-rootlogin.</changelog>
  <changelog author="alarrosa@suse.com" date="1715688000">- Add a warning in %post of openssh-clients, openssh-server and
  openssh-server-config-disallow-rootlogin to warn the user if
  the /etc/ssh/(ssh_config.d|sshd_config.d) directories are not
  being used (bsc#1223486).</changelog>
  <changelog author="alarrosa@suse.com" date="1719835200">- Add patch to fix a race condition in a signal handler by removing
  the async-signal-unsafe code (CVE-2024-6387, bsc#1226642):
  * fix-CVE-2024-6387.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720008000">- Add obsoletes for openssh-server-config-rootlogin since that
  package existed for a brief period of time during SLE 15 SP6/
  Leap 15.6 development but even if it was removed from the
  repositories before GM, some users might have it in their
  systems from having tried a beta/RC release (boo#1227350).
- Add #include &lt;stdlib.h&gt; in some files added by the ldap patch to
  fix build with gcc14 (boo#1225904).
  * openssh-7.7p1-ldap.patch
- Remove the recommendation for openssh-server-config-rootlogin
  from openssh-server. Since the default for that config option
  was changed in SLE it's not needed anymore in SLE nor in TW
  (boo#1224392).</changelog>
  <changelog author="alarrosa@suse.com" date="1720180800">- Add patch from upstream to fix proxy multiplexing mode:
  * 0001-upstream-fix-proxy-multiplexing-mode_-broken-when-keystroke.patch
- Add patch from upstream to restore correctly sigprocmask
  * 0001-upstream-correctly-restore-sigprocmask-around-ppoll.patch
- Add patch from upstream to fix a logic error in
  ObscureKeystrokeTiming that rendered this feature ineffective,
  allowing a passive observer to detect which network packets
  contained real keystrokes (bsc#1227318, CVE-2024-39894):
  * 0001-upstream-when-sending-ObscureKeystrokeTiming-chaff-packets_.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720612800">- Remove empty line at the end of sshd-sle.pamd (bsc#1227456)</changelog>
  <changelog author="alarrosa@suse.com" date="1728648000">- Add a patch to fix a regression introduced in 9.6 that makes X11
  forwarding very slow. Submitted to upstream in
  https://bugzilla.mindrot.org/show_bug.cgi?id=3655#c4 . Fixes
  bsc#1229449:
  * fix-x11-regression-bsc1229449.patch
- Add a openssl11 bcond to the spec file for the SLE12 case
  instead of checking suse_version in different parts.
- Move conditional patches to a number &gt;= 1000.
- Several spec file fixes so the package builds and can be
  installed in SLE 15 SP5 and SLE 12 SP5
- Drop most of openssh-6.6p1-keycat.patch (actually, it was just
  commented out). The keycat binary isn't really installed nor
  supported, so we can drop it, except for the code that is used
  by other SELinux patches, which is what I kept from that patch
  (boo#1229072).
- Add patch submitted to upstream to fix RFC4256 implementation
  so that keyboard-interactive authentication method can send
  instructions and sshd shows them to users even before a prompt
  is requested. This fixes MFA push notifications (boo#1229010).
  * 0001-auth-pam-Immediately-report-instructions-to-clients-and-fix-handling-in-ssh-client.patch
- Fix a dbus connection leaked in the logind patch that was
  missing a sd_bus_unref call (found by Matthias Gerstner):
  * logind_set_tty.patch
- Add a patch that fixes a small memory leak when parsing the
  subsystem configuration option:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1728907200">- Use %{with ...} instead of 0%{with ...}</changelog>
  <changelog author="alarrosa@suse.com" date="1739448000">- Fix a MitM attack against OpenSSH's VerifyHostKeyDNS-enabled
  client and a DoS attack against OpenSSH's client and server
  (bsc#1237040, CVE-2025-26465, bsc#1237041, CVE-2025-26466):
  * fix-CVE-2025-26465-and-CVE-2025-26466.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1739880000">- Fix ssh client segfault with GSSAPIKeyExchange=yes in ssh_kex2
  due to gssapi proposal not being correctly initialized
  (bsc#1236826). The problem was introduced in the rebase of
  the patch for 9.6p1:
  * openssh-8.0p1-gssapi-keyex.patch
- Rebase patch and apply it:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="hpj@suse.com" date="1746532800">- Added openssh-cve-2025-32728.patch (bsc#1241012, CVE-2025-32728).
  This fixes an upstream logic error handling the DisableForwarding
  option.</changelog>
  <changelog author="alarrosa@suse.com" date="1747137600">- Enable --with-logind to call the SetTTY dbus method in systemd.
  This allows "wall" to print messages in ssh ttys (bsc#1239671)
- Small fixes to unref the dbus session when any error occurs:
  * logind_set_tty.patch</changelog>
</package>
<package pkgid="5141d8b901f785528387815e393efb170c25d25eeed35849b8fd6099a54c91aa" name="openssh-helpers" arch="x86_64">
  <version epoch="0" ver="9.6p1" rel="150600.6.29.2"/>
  <changelog author="alarrosa@suse.com" date="1710244800">- Uncomment %sysuser_requires in openssh-server which was commented
  by mistake and is needed by the pre script installed with
  %sysusers_generate_pre (bsc#1220802).</changelog>
  <changelog author="alarrosa@suse.com" date="1712059200">- Use %config(noreplace) for sshd_config . In any case, it's
  recommended to drop a file in sshd_config.d instead of editing
  sshd_config (bsc#1221063)
- Add patches from obs package that were also in SP3/SP4/SP5:
  * Fri Nov  3 10:44:14 UTC 2023 - Johannes Segitz &lt;jsegitz@suse.com&gt;
  - Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712059201">- Rebase openssh-7.7p1-fips.patch (bsc#1221928)
  Remove OPENSSL_HAVE_EVPGCM-ifdef, which is no longer supported by upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1712577600">- Update to openssh 9.6p1:
  = Security
  * ssh(1), sshd(8): implement protocol extensions to thwart the
    so-called "Terrapin attack" discovered by Fabian Bäumer, Marcus
    Brinkmann and Jörg Schwenk. This attack allows a MITM to effect a
    limited break of the integrity of the early encrypted SSH transport
    protocol by sending extra messages prior to the commencement of
    encryption, and deleting an equal number of consecutive messages
    immediately after encryption starts. A peer SSH client/server
    would not be able to detect that messages were deleted
    (bsc#1217950, CVE-2023-48795).
  * ssh-agent(1): when adding PKCS#11-hosted private keys while
    specifying destination constraints, if the PKCS#11 token returned
    multiple keys then only the first key had the constraints applied.
    Use of regular private keys, FIDO tokens and unconstrained keys
    are unaffected.
  * ssh(1): if an invalid user or hostname that contained shell
    metacharacters was passed to ssh(1), and a ProxyCommand,
    LocalCommand directive or "match exec" predicate referenced the
    user or hostname via %u, %h or similar expansion token, then
    an attacker who could supply arbitrary user/hostnames to ssh(1)
    could potentially perform command injection depending on what
    quoting was present in the user-supplied ssh_config(5) directive
    (bsc#1218215, CVE-2023-51385).
  = Potentially incompatible changes
  * ssh(1), sshd(8): the RFC4254 connection/channels protocol provides
    a TCP-like window mechanism that limits the amount of data that
    can be sent without acceptance from the peer. In cases where this
    limit was exceeded by a non-conforming peer SSH implementation,
    ssh(1)/sshd(8) previously discarded the extra data. From OpenSSH
    9.6, ssh(1)/sshd(8) will now terminate the connection if a peer
    exceeds the window limit by more than a small grace factor. This
    change should have no effect of SSH implementations that follow
    the specification.
  = New features
  * ssh(1): add a %j token that expands to the configured ProxyJump
    hostname (or the empty string if this option is not being used)
    that can be used in a number of ssh_config(5) keywords. bz3610
  * ssh(1): add ChannelTimeout support to the client, mirroring the
    same option in the server and allowing ssh(1) to terminate
    quiescent channels.
  * ssh(1), sshd(8), ssh-add(1), ssh-keygen(1): add support for
    reading ED25519 private keys in PEM PKCS8 format. Previously
    only the OpenSSH private key format was supported.
  * ssh(1), sshd(8): introduce a protocol extension to allow
    renegotiation of acceptable signature algorithms for public key
    authentication after the server has learned the username being
    used for authentication. This allows varying sshd_config(5)
    PubkeyAcceptedAlgorithms in a "Match user" block.
  * ssh-add(1), ssh-agent(1): add an agent protocol extension to allow
    specifying certificates when loading PKCS#11 keys. This allows the
    use of certificates backed by PKCS#11 private keys in all OpenSSH
    tools that support ssh-agent(1). Previously only ssh(1) supported
    this use-case.
  = Bugfixes
  * ssh(1): when deciding whether to enable the keystroke timing
    obfuscation, enable it only if a channel with a TTY is active.
  * ssh(1): switch mainloop from poll(3) to ppoll(3) and mask signals
    before checking flags set in signal handler. Avoids potential
    race condition between signaling ssh to exit and polling. bz3531
  * ssh(1): when connecting to a destination with both the
    AddressFamily and CanonicalizeHostname directives in use,
    the AddressFamily directive could be ignored. bz5326
  * sftp(1): correct handling of the limits@openssh.com option when
    the server returned an unexpected message.
  * A number of fixes to the PuTTY and Dropbear regress/integration
    tests.
  * ssh(1): release GSS OIDs only at end of authentication, avoiding
    unnecessary init/cleanup cycles. bz2982
  * ssh_config(5): mention "none" is a valid argument to IdentityFile
    in the manual. bz3080
  * scp(1): improved debugging for paths from the server rejected for
    not matching the client's glob(3) pattern in old SCP/RCP protocol
    mode.
  * ssh-agent(1): refuse signing operations on destination-constrained
    keys if a previous session-bind operation has failed. This may
    prevent a fail-open situation in future if a user uses a mismatched
    ssh(1) client and ssh-agent(1) where the client supports a key type
    that the agent does not support.
- Update to openssh 9.5p1:
  = Potentially incompatible changes
  * ssh-keygen(1): generate Ed25519 keys by default. Ed25519 public keys
    are very convenient due to their small size. Ed25519 keys are
    specified in RFC 8709 and OpenSSH has supported them since version 6.5
    (January 2014).
  * sshd(8): the Subsystem directive now accurately preserves quoting of
    subsystem commands and arguments. This may change behaviour for exotic
    configurations, but the most common subsystem configuration
    (sftp-server) is unlikely to be affected.
  = New features
  * ssh(1): add keystroke timing obfuscation to the client. This attempts
    to hide inter-keystroke timings by sending interactive traffic at
    fixed intervals (default: every 20ms) when there is only a small
    amount of data being sent. It also sends fake "chaff" keystrokes for
    a random interval after the last real keystroke. These are
    controlled by a new ssh_config ObscureKeystrokeTiming keyword.
  * ssh(1), sshd(8): Introduce a transport-level ping facility. This adds
    a pair of SSH transport protocol messages SSH2_MSG_PING/PONG to
    implement a ping capability. These messages use numbers in the "local
    extensions" number space and are advertised using a "ping@openssh.com"
    ext-info message with a string version number of "0".
  * sshd(8): allow override of Subsystem directives in sshd Match blocks.
  = Bugfixes
  * scp(1): fix scp in SFTP mode recursive upload and download of
    directories that contain symlinks to other directories. In scp mode,
    the links would be followed, but in SFTP mode they were not. bz3611
  * ssh-keygen(1): handle cr+lf (instead of just cr) line endings in
    sshsig signature files.
  * ssh(1): interactive mode for ControlPersist sessions if they
    originally requested a tty.
  * sshd(8): make PerSourceMaxStartups first-match-wins
  * sshd(8): limit artificial login delay to a reasonable maximum (5s)
    and don't delay at all for the "none" authentication mechanism.
    bz3602
  * sshd(8): Log errors in kex_exchange_identification() with level
    verbose instead of error to reduce preauth log spam. All of those
    get logged with a more generic error message by sshpkt_fatal().
  * sshd(8): correct math for ClientAliveInterval that caused the probes
    to be sent less frequently than configured.
  * ssh(1): fix regression in OpenSSH 9.4 (mux.c r1.99) that caused
    multiplexed sessions to ignore SIGINT under some circumstances.
- Update to openssh 9.4p1:
  = Potentially incompatible changes
  * This release removes support for older versions of libcrypto.
    OpenSSH now requires LibreSSL &gt;= 3.1.0 or OpenSSL &gt;= 1.1.1.
    Note that these versions are already deprecated by their upstream
    vendors.
  * ssh-agent(1): PKCS#11 modules must now be specified by their full
    paths. Previously dlopen(3) could search for them in system
    library directories.
  = New features
  * ssh(1): allow forwarding Unix Domain sockets via ssh -W.
  * ssh(1): add support for configuration tags to ssh(1).
    This adds a ssh_config(5) "Tag" directive and corresponding
    "Match tag" predicate that may be used to select blocks of
    configuration similar to the pf.conf(5) keywords of the same
    name.
  * ssh(1): add a "match localnetwork" predicate. This allows matching
    on the addresses of available network interfaces and may be used to
    vary the effective client configuration based on network location.
  * ssh(1), sshd(8), ssh-keygen(1): infrastructure support for KRL
    extensions.  This defines wire formats for optional KRL extensions
    and implements parsing of the new submessages. No actual extensions
    are supported at this point.
  * sshd(8): AuthorizedPrincipalsCommand and AuthorizedKeysCommand now
    accept two additional %-expansion sequences: %D which expands to
    the routing domain of the connected session and %C which expands
    to the addresses and port numbers for the source and destination
    of the connection.
  * ssh-keygen(1): increase the default work factor (rounds) for the
    bcrypt KDF used to derive symmetric encryption keys for passphrase
    protected key files by 50%.
  = Bugfixes
  * ssh-agent(1): improve isolation between loaded PKCS#11 modules
    by running separate ssh-pkcs11-helpers for each loaded provider.
  * ssh(1): make -f (fork after authentication) work correctly with
    multiplexed connections, including ControlPersist. bz3589 bz3589
  * ssh(1): make ConnectTimeout apply to multiplexing sockets and not
    just to network connections.
  * ssh-agent(1), ssh(1): improve defences against invalid PKCS#11
    modules being loaded by checking that the requested module
    contains the required symbol before loading it.
  * sshd(8): fix AuthorizedPrincipalsCommand when AuthorizedKeysCommand
    appears before it in sshd_config. Since OpenSSH 8.7 the
    AuthorizedPrincipalsCommand directive was incorrectly ignored in
    this situation. bz3574
  * sshd(8), ssh(1), ssh-keygen(1): remove vestigal support for KRL
    signatures When the KRL format was originally defined, it included
    support for signing of KRL objects. However, the code to sign KRLs
    and verify KRL signatues was never completed in OpenSSH. This
    release removes the partially-implemented code to verify KRLs.
    All OpenSSH tools now ignore KRL_SECTION_SIGNATURE sections in
    KRL files.
  * All: fix a number of memory leaks and unreachable/harmless integer
    overflows.
  * ssh-agent(1), ssh(1): don't truncate strings logged from PKCS#11
    modules; GHPR406
  * sshd(8), ssh(1): better validate CASignatureAlgorithms in
    ssh_config and sshd_config. Previously this directive would accept
    certificate algorithm names, but these were unusable in practice as
    OpenSSH does not support CA chains. bz3577
  * ssh(1): make `ssh -Q CASignatureAlgorithms` only list signature
    algorithms that are valid for CA signing. Previous behaviour was
    to list all signing algorithms, including certificate algorithms.
  * ssh-keyscan(1): gracefully handle systems where rlimits or the
    maximum number of open files is larger than INT_MAX; bz3581
  * ssh-keygen(1): fix "no comment" not showing on when running
    `ssh-keygen -l` on multiple keys where one has a comment and other
    following keys do not. bz3580
  * scp(1), sftp(1): adjust ftruncate() logic to handle servers that
    reorder requests. Previously, if the server reordered requests then
    the resultant file would be erroneously truncated.
  * ssh(1): don't incorrectly disable hostname canonicalization when
    CanonicalizeHostname=yes and ProxyJump was expicitly set to
    "none". bz3567
  * scp(1): when copying local-&gt;remote, check that the source file
    exists before opening an SFTP connection to the server. Based on
    GHPR#370
- Dropped patches:
  * cb4ed12f.patch - implemented upstream.
- Rebased patches:
  * openssh-7.7p1-fips.patch
  * openssh-7.8p1-role-mls.patch
  * openssh-8.0p1-gssapi-keyex.patch
- Add patches from obs:
  * Mon Mar  4 09:57:06 UTC 2024 - Pedro Monreal &lt;pmonreal@suse.com&gt;
- Add crypto-policies support [bsc#1211301]
  * Add patches:
  - openssh-9.6p1-crypto-policies.patch
  - openssh-9.6p1-crypto-policies-man.patch</changelog>
  <changelog author="opensuse@arnavion.dev" date="1712836800">- Fix duplicate loading of dropins. (boo#1222467)</changelog>
  <changelog author="alarrosa@suse.com" date="1712923200">- Make openssh-server recommend the openssh-server-config-rootlogin
  package in SLE in order to keep the same behaviour of previous
  SPs where the PermitRootLogin default was set to yes
  (bsc#1221005).
- Fix crypto-policies requirement to be set by openssh-server, not
  the config-rootlogin subpackage.
- Add back %config(noreplace) tag for more config files that were
  already set like this in previous SPs.</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- openssh-8.0p1-gssapi-keyex.patch: Added missing struct initializer,
  added missing parameter (bsc#1222840)</changelog>
  <changelog author="alarrosa@suse.com" date="1715601600">- Only for SLE15, restore the patch file removed in
  Thu Feb 18 13:54:44 UTC 2021 to restore the previous behaviour
  from SP5 of having root password login allowed by default
  (fixes bsc#1223486, related to bsc#1173067):
  * openssh-7.7p1-allow_root_password_login.patch
- Since the default value for this config option is now set to
  permit root to use password logins in SLE15, the
  openssh-server-config-rootlogin subpackage isn't useful there so
  we now create an openssh-server-config-disallow-rootlogin
  subpackage that sets the configuration the other way around
  than openssh-server-config-rootlogin.</changelog>
  <changelog author="alarrosa@suse.com" date="1715688000">- Add a warning in %post of openssh-clients, openssh-server and
  openssh-server-config-disallow-rootlogin to warn the user if
  the /etc/ssh/(ssh_config.d|sshd_config.d) directories are not
  being used (bsc#1223486).</changelog>
  <changelog author="alarrosa@suse.com" date="1719835200">- Add patch to fix a race condition in a signal handler by removing
  the async-signal-unsafe code (CVE-2024-6387, bsc#1226642):
  * fix-CVE-2024-6387.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720008000">- Add obsoletes for openssh-server-config-rootlogin since that
  package existed for a brief period of time during SLE 15 SP6/
  Leap 15.6 development but even if it was removed from the
  repositories before GM, some users might have it in their
  systems from having tried a beta/RC release (boo#1227350).
- Add #include &lt;stdlib.h&gt; in some files added by the ldap patch to
  fix build with gcc14 (boo#1225904).
  * openssh-7.7p1-ldap.patch
- Remove the recommendation for openssh-server-config-rootlogin
  from openssh-server. Since the default for that config option
  was changed in SLE it's not needed anymore in SLE nor in TW
  (boo#1224392).</changelog>
  <changelog author="alarrosa@suse.com" date="1720180800">- Add patch from upstream to fix proxy multiplexing mode:
  * 0001-upstream-fix-proxy-multiplexing-mode_-broken-when-keystroke.patch
- Add patch from upstream to restore correctly sigprocmask
  * 0001-upstream-correctly-restore-sigprocmask-around-ppoll.patch
- Add patch from upstream to fix a logic error in
  ObscureKeystrokeTiming that rendered this feature ineffective,
  allowing a passive observer to detect which network packets
  contained real keystrokes (bsc#1227318, CVE-2024-39894):
  * 0001-upstream-when-sending-ObscureKeystrokeTiming-chaff-packets_.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720612800">- Remove empty line at the end of sshd-sle.pamd (bsc#1227456)</changelog>
  <changelog author="alarrosa@suse.com" date="1728648000">- Add a patch to fix a regression introduced in 9.6 that makes X11
  forwarding very slow. Submitted to upstream in
  https://bugzilla.mindrot.org/show_bug.cgi?id=3655#c4 . Fixes
  bsc#1229449:
  * fix-x11-regression-bsc1229449.patch
- Add a openssl11 bcond to the spec file for the SLE12 case
  instead of checking suse_version in different parts.
- Move conditional patches to a number &gt;= 1000.
- Several spec file fixes so the package builds and can be
  installed in SLE 15 SP5 and SLE 12 SP5
- Drop most of openssh-6.6p1-keycat.patch (actually, it was just
  commented out). The keycat binary isn't really installed nor
  supported, so we can drop it, except for the code that is used
  by other SELinux patches, which is what I kept from that patch
  (boo#1229072).
- Add patch submitted to upstream to fix RFC4256 implementation
  so that keyboard-interactive authentication method can send
  instructions and sshd shows them to users even before a prompt
  is requested. This fixes MFA push notifications (boo#1229010).
  * 0001-auth-pam-Immediately-report-instructions-to-clients-and-fix-handling-in-ssh-client.patch
- Fix a dbus connection leaked in the logind patch that was
  missing a sd_bus_unref call (found by Matthias Gerstner):
  * logind_set_tty.patch
- Add a patch that fixes a small memory leak when parsing the
  subsystem configuration option:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1728907200">- Use %{with ...} instead of 0%{with ...}</changelog>
  <changelog author="alarrosa@suse.com" date="1739448000">- Fix a MitM attack against OpenSSH's VerifyHostKeyDNS-enabled
  client and a DoS attack against OpenSSH's client and server
  (bsc#1237040, CVE-2025-26465, bsc#1237041, CVE-2025-26466):
  * fix-CVE-2025-26465-and-CVE-2025-26466.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1739880000">- Fix ssh client segfault with GSSAPIKeyExchange=yes in ssh_kex2
  due to gssapi proposal not being correctly initialized
  (bsc#1236826). The problem was introduced in the rebase of
  the patch for 9.6p1:
  * openssh-8.0p1-gssapi-keyex.patch
- Rebase patch and apply it:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="hpj@suse.com" date="1746532800">- Added openssh-cve-2025-32728.patch (bsc#1241012, CVE-2025-32728).
  This fixes an upstream logic error handling the DisableForwarding
  option.</changelog>
  <changelog author="alarrosa@suse.com" date="1747137600">- Enable --with-logind to call the SetTTY dbus method in systemd.
  This allows "wall" to print messages in ssh ttys (bsc#1239671)
- Small fixes to unref the dbus session when any error occurs:
  * logind_set_tty.patch</changelog>
  <changelog author="hpj@suse.com" date="1748952000">- Add openssh-scp-umask-preserve-permissions.patch (bsc#1241667).</changelog>
</package>
<package pkgid="b2f44695ade7b2196d0cc5407fd640ad64d0e1363f1f5e36c5ae10e5aaf82d70" name="openssh-helpers" arch="x86_64">
  <version epoch="0" ver="9.6p1" rel="150600.6.34.1"/>
  <changelog author="alarrosa@suse.com" date="1712059200">- Use %config(noreplace) for sshd_config . In any case, it's
  recommended to drop a file in sshd_config.d instead of editing
  sshd_config (bsc#1221063)
- Add patches from obs package that were also in SP3/SP4/SP5:
  * Fri Nov  3 10:44:14 UTC 2023 - Johannes Segitz &lt;jsegitz@suse.com&gt;
  - Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712059201">- Rebase openssh-7.7p1-fips.patch (bsc#1221928)
  Remove OPENSSL_HAVE_EVPGCM-ifdef, which is no longer supported by upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1712577600">- Update to openssh 9.6p1:
  = Security
  * ssh(1), sshd(8): implement protocol extensions to thwart the
    so-called "Terrapin attack" discovered by Fabian Bäumer, Marcus
    Brinkmann and Jörg Schwenk. This attack allows a MITM to effect a
    limited break of the integrity of the early encrypted SSH transport
    protocol by sending extra messages prior to the commencement of
    encryption, and deleting an equal number of consecutive messages
    immediately after encryption starts. A peer SSH client/server
    would not be able to detect that messages were deleted
    (bsc#1217950, CVE-2023-48795).
  * ssh-agent(1): when adding PKCS#11-hosted private keys while
    specifying destination constraints, if the PKCS#11 token returned
    multiple keys then only the first key had the constraints applied.
    Use of regular private keys, FIDO tokens and unconstrained keys
    are unaffected.
  * ssh(1): if an invalid user or hostname that contained shell
    metacharacters was passed to ssh(1), and a ProxyCommand,
    LocalCommand directive or "match exec" predicate referenced the
    user or hostname via %u, %h or similar expansion token, then
    an attacker who could supply arbitrary user/hostnames to ssh(1)
    could potentially perform command injection depending on what
    quoting was present in the user-supplied ssh_config(5) directive
    (bsc#1218215, CVE-2023-51385).
  = Potentially incompatible changes
  * ssh(1), sshd(8): the RFC4254 connection/channels protocol provides
    a TCP-like window mechanism that limits the amount of data that
    can be sent without acceptance from the peer. In cases where this
    limit was exceeded by a non-conforming peer SSH implementation,
    ssh(1)/sshd(8) previously discarded the extra data. From OpenSSH
    9.6, ssh(1)/sshd(8) will now terminate the connection if a peer
    exceeds the window limit by more than a small grace factor. This
    change should have no effect of SSH implementations that follow
    the specification.
  = New features
  * ssh(1): add a %j token that expands to the configured ProxyJump
    hostname (or the empty string if this option is not being used)
    that can be used in a number of ssh_config(5) keywords. bz3610
  * ssh(1): add ChannelTimeout support to the client, mirroring the
    same option in the server and allowing ssh(1) to terminate
    quiescent channels.
  * ssh(1), sshd(8), ssh-add(1), ssh-keygen(1): add support for
    reading ED25519 private keys in PEM PKCS8 format. Previously
    only the OpenSSH private key format was supported.
  * ssh(1), sshd(8): introduce a protocol extension to allow
    renegotiation of acceptable signature algorithms for public key
    authentication after the server has learned the username being
    used for authentication. This allows varying sshd_config(5)
    PubkeyAcceptedAlgorithms in a "Match user" block.
  * ssh-add(1), ssh-agent(1): add an agent protocol extension to allow
    specifying certificates when loading PKCS#11 keys. This allows the
    use of certificates backed by PKCS#11 private keys in all OpenSSH
    tools that support ssh-agent(1). Previously only ssh(1) supported
    this use-case.
  = Bugfixes
  * ssh(1): when deciding whether to enable the keystroke timing
    obfuscation, enable it only if a channel with a TTY is active.
  * ssh(1): switch mainloop from poll(3) to ppoll(3) and mask signals
    before checking flags set in signal handler. Avoids potential
    race condition between signaling ssh to exit and polling. bz3531
  * ssh(1): when connecting to a destination with both the
    AddressFamily and CanonicalizeHostname directives in use,
    the AddressFamily directive could be ignored. bz5326
  * sftp(1): correct handling of the limits@openssh.com option when
    the server returned an unexpected message.
  * A number of fixes to the PuTTY and Dropbear regress/integration
    tests.
  * ssh(1): release GSS OIDs only at end of authentication, avoiding
    unnecessary init/cleanup cycles. bz2982
  * ssh_config(5): mention "none" is a valid argument to IdentityFile
    in the manual. bz3080
  * scp(1): improved debugging for paths from the server rejected for
    not matching the client's glob(3) pattern in old SCP/RCP protocol
    mode.
  * ssh-agent(1): refuse signing operations on destination-constrained
    keys if a previous session-bind operation has failed. This may
    prevent a fail-open situation in future if a user uses a mismatched
    ssh(1) client and ssh-agent(1) where the client supports a key type
    that the agent does not support.
- Update to openssh 9.5p1:
  = Potentially incompatible changes
  * ssh-keygen(1): generate Ed25519 keys by default. Ed25519 public keys
    are very convenient due to their small size. Ed25519 keys are
    specified in RFC 8709 and OpenSSH has supported them since version 6.5
    (January 2014).
  * sshd(8): the Subsystem directive now accurately preserves quoting of
    subsystem commands and arguments. This may change behaviour for exotic
    configurations, but the most common subsystem configuration
    (sftp-server) is unlikely to be affected.
  = New features
  * ssh(1): add keystroke timing obfuscation to the client. This attempts
    to hide inter-keystroke timings by sending interactive traffic at
    fixed intervals (default: every 20ms) when there is only a small
    amount of data being sent. It also sends fake "chaff" keystrokes for
    a random interval after the last real keystroke. These are
    controlled by a new ssh_config ObscureKeystrokeTiming keyword.
  * ssh(1), sshd(8): Introduce a transport-level ping facility. This adds
    a pair of SSH transport protocol messages SSH2_MSG_PING/PONG to
    implement a ping capability. These messages use numbers in the "local
    extensions" number space and are advertised using a "ping@openssh.com"
    ext-info message with a string version number of "0".
  * sshd(8): allow override of Subsystem directives in sshd Match blocks.
  = Bugfixes
  * scp(1): fix scp in SFTP mode recursive upload and download of
    directories that contain symlinks to other directories. In scp mode,
    the links would be followed, but in SFTP mode they were not. bz3611
  * ssh-keygen(1): handle cr+lf (instead of just cr) line endings in
    sshsig signature files.
  * ssh(1): interactive mode for ControlPersist sessions if they
    originally requested a tty.
  * sshd(8): make PerSourceMaxStartups first-match-wins
  * sshd(8): limit artificial login delay to a reasonable maximum (5s)
    and don't delay at all for the "none" authentication mechanism.
    bz3602
  * sshd(8): Log errors in kex_exchange_identification() with level
    verbose instead of error to reduce preauth log spam. All of those
    get logged with a more generic error message by sshpkt_fatal().
  * sshd(8): correct math for ClientAliveInterval that caused the probes
    to be sent less frequently than configured.
  * ssh(1): fix regression in OpenSSH 9.4 (mux.c r1.99) that caused
    multiplexed sessions to ignore SIGINT under some circumstances.
- Update to openssh 9.4p1:
  = Potentially incompatible changes
  * This release removes support for older versions of libcrypto.
    OpenSSH now requires LibreSSL &gt;= 3.1.0 or OpenSSL &gt;= 1.1.1.
    Note that these versions are already deprecated by their upstream
    vendors.
  * ssh-agent(1): PKCS#11 modules must now be specified by their full
    paths. Previously dlopen(3) could search for them in system
    library directories.
  = New features
  * ssh(1): allow forwarding Unix Domain sockets via ssh -W.
  * ssh(1): add support for configuration tags to ssh(1).
    This adds a ssh_config(5) "Tag" directive and corresponding
    "Match tag" predicate that may be used to select blocks of
    configuration similar to the pf.conf(5) keywords of the same
    name.
  * ssh(1): add a "match localnetwork" predicate. This allows matching
    on the addresses of available network interfaces and may be used to
    vary the effective client configuration based on network location.
  * ssh(1), sshd(8), ssh-keygen(1): infrastructure support for KRL
    extensions.  This defines wire formats for optional KRL extensions
    and implements parsing of the new submessages. No actual extensions
    are supported at this point.
  * sshd(8): AuthorizedPrincipalsCommand and AuthorizedKeysCommand now
    accept two additional %-expansion sequences: %D which expands to
    the routing domain of the connected session and %C which expands
    to the addresses and port numbers for the source and destination
    of the connection.
  * ssh-keygen(1): increase the default work factor (rounds) for the
    bcrypt KDF used to derive symmetric encryption keys for passphrase
    protected key files by 50%.
  = Bugfixes
  * ssh-agent(1): improve isolation between loaded PKCS#11 modules
    by running separate ssh-pkcs11-helpers for each loaded provider.
  * ssh(1): make -f (fork after authentication) work correctly with
    multiplexed connections, including ControlPersist. bz3589 bz3589
  * ssh(1): make ConnectTimeout apply to multiplexing sockets and not
    just to network connections.
  * ssh-agent(1), ssh(1): improve defences against invalid PKCS#11
    modules being loaded by checking that the requested module
    contains the required symbol before loading it.
  * sshd(8): fix AuthorizedPrincipalsCommand when AuthorizedKeysCommand
    appears before it in sshd_config. Since OpenSSH 8.7 the
    AuthorizedPrincipalsCommand directive was incorrectly ignored in
    this situation. bz3574
  * sshd(8), ssh(1), ssh-keygen(1): remove vestigal support for KRL
    signatures When the KRL format was originally defined, it included
    support for signing of KRL objects. However, the code to sign KRLs
    and verify KRL signatues was never completed in OpenSSH. This
    release removes the partially-implemented code to verify KRLs.
    All OpenSSH tools now ignore KRL_SECTION_SIGNATURE sections in
    KRL files.
  * All: fix a number of memory leaks and unreachable/harmless integer
    overflows.
  * ssh-agent(1), ssh(1): don't truncate strings logged from PKCS#11
    modules; GHPR406
  * sshd(8), ssh(1): better validate CASignatureAlgorithms in
    ssh_config and sshd_config. Previously this directive would accept
    certificate algorithm names, but these were unusable in practice as
    OpenSSH does not support CA chains. bz3577
  * ssh(1): make `ssh -Q CASignatureAlgorithms` only list signature
    algorithms that are valid for CA signing. Previous behaviour was
    to list all signing algorithms, including certificate algorithms.
  * ssh-keyscan(1): gracefully handle systems where rlimits or the
    maximum number of open files is larger than INT_MAX; bz3581
  * ssh-keygen(1): fix "no comment" not showing on when running
    `ssh-keygen -l` on multiple keys where one has a comment and other
    following keys do not. bz3580
  * scp(1), sftp(1): adjust ftruncate() logic to handle servers that
    reorder requests. Previously, if the server reordered requests then
    the resultant file would be erroneously truncated.
  * ssh(1): don't incorrectly disable hostname canonicalization when
    CanonicalizeHostname=yes and ProxyJump was expicitly set to
    "none". bz3567
  * scp(1): when copying local-&gt;remote, check that the source file
    exists before opening an SFTP connection to the server. Based on
    GHPR#370
- Dropped patches:
  * cb4ed12f.patch - implemented upstream.
- Rebased patches:
  * openssh-7.7p1-fips.patch
  * openssh-7.8p1-role-mls.patch
  * openssh-8.0p1-gssapi-keyex.patch
- Add patches from obs:
  * Mon Mar  4 09:57:06 UTC 2024 - Pedro Monreal &lt;pmonreal@suse.com&gt;
- Add crypto-policies support [bsc#1211301]
  * Add patches:
  - openssh-9.6p1-crypto-policies.patch
  - openssh-9.6p1-crypto-policies-man.patch</changelog>
  <changelog author="opensuse@arnavion.dev" date="1712836800">- Fix duplicate loading of dropins. (boo#1222467)</changelog>
  <changelog author="alarrosa@suse.com" date="1712923200">- Make openssh-server recommend the openssh-server-config-rootlogin
  package in SLE in order to keep the same behaviour of previous
  SPs where the PermitRootLogin default was set to yes
  (bsc#1221005).
- Fix crypto-policies requirement to be set by openssh-server, not
  the config-rootlogin subpackage.
- Add back %config(noreplace) tag for more config files that were
  already set like this in previous SPs.</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- openssh-8.0p1-gssapi-keyex.patch: Added missing struct initializer,
  added missing parameter (bsc#1222840)</changelog>
  <changelog author="alarrosa@suse.com" date="1715601600">- Only for SLE15, restore the patch file removed in
  Thu Feb 18 13:54:44 UTC 2021 to restore the previous behaviour
  from SP5 of having root password login allowed by default
  (fixes bsc#1223486, related to bsc#1173067):
  * openssh-7.7p1-allow_root_password_login.patch
- Since the default value for this config option is now set to
  permit root to use password logins in SLE15, the
  openssh-server-config-rootlogin subpackage isn't useful there so
  we now create an openssh-server-config-disallow-rootlogin
  subpackage that sets the configuration the other way around
  than openssh-server-config-rootlogin.</changelog>
  <changelog author="alarrosa@suse.com" date="1715688000">- Add a warning in %post of openssh-clients, openssh-server and
  openssh-server-config-disallow-rootlogin to warn the user if
  the /etc/ssh/(ssh_config.d|sshd_config.d) directories are not
  being used (bsc#1223486).</changelog>
  <changelog author="alarrosa@suse.com" date="1719835200">- Add patch to fix a race condition in a signal handler by removing
  the async-signal-unsafe code (CVE-2024-6387, bsc#1226642):
  * fix-CVE-2024-6387.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720008000">- Add obsoletes for openssh-server-config-rootlogin since that
  package existed for a brief period of time during SLE 15 SP6/
  Leap 15.6 development but even if it was removed from the
  repositories before GM, some users might have it in their
  systems from having tried a beta/RC release (boo#1227350).
- Add #include &lt;stdlib.h&gt; in some files added by the ldap patch to
  fix build with gcc14 (boo#1225904).
  * openssh-7.7p1-ldap.patch
- Remove the recommendation for openssh-server-config-rootlogin
  from openssh-server. Since the default for that config option
  was changed in SLE it's not needed anymore in SLE nor in TW
  (boo#1224392).</changelog>
  <changelog author="alarrosa@suse.com" date="1720180800">- Add patch from upstream to fix proxy multiplexing mode:
  * 0001-upstream-fix-proxy-multiplexing-mode_-broken-when-keystroke.patch
- Add patch from upstream to restore correctly sigprocmask
  * 0001-upstream-correctly-restore-sigprocmask-around-ppoll.patch
- Add patch from upstream to fix a logic error in
  ObscureKeystrokeTiming that rendered this feature ineffective,
  allowing a passive observer to detect which network packets
  contained real keystrokes (bsc#1227318, CVE-2024-39894):
  * 0001-upstream-when-sending-ObscureKeystrokeTiming-chaff-packets_.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720612800">- Remove empty line at the end of sshd-sle.pamd (bsc#1227456)</changelog>
  <changelog author="alarrosa@suse.com" date="1728648000">- Add a patch to fix a regression introduced in 9.6 that makes X11
  forwarding very slow. Submitted to upstream in
  https://bugzilla.mindrot.org/show_bug.cgi?id=3655#c4 . Fixes
  bsc#1229449:
  * fix-x11-regression-bsc1229449.patch
- Add a openssl11 bcond to the spec file for the SLE12 case
  instead of checking suse_version in different parts.
- Move conditional patches to a number &gt;= 1000.
- Several spec file fixes so the package builds and can be
  installed in SLE 15 SP5 and SLE 12 SP5
- Drop most of openssh-6.6p1-keycat.patch (actually, it was just
  commented out). The keycat binary isn't really installed nor
  supported, so we can drop it, except for the code that is used
  by other SELinux patches, which is what I kept from that patch
  (boo#1229072).
- Add patch submitted to upstream to fix RFC4256 implementation
  so that keyboard-interactive authentication method can send
  instructions and sshd shows them to users even before a prompt
  is requested. This fixes MFA push notifications (boo#1229010).
  * 0001-auth-pam-Immediately-report-instructions-to-clients-and-fix-handling-in-ssh-client.patch
- Fix a dbus connection leaked in the logind patch that was
  missing a sd_bus_unref call (found by Matthias Gerstner):
  * logind_set_tty.patch
- Add a patch that fixes a small memory leak when parsing the
  subsystem configuration option:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1728907200">- Use %{with ...} instead of 0%{with ...}</changelog>
  <changelog author="alarrosa@suse.com" date="1739448000">- Fix a MitM attack against OpenSSH's VerifyHostKeyDNS-enabled
  client and a DoS attack against OpenSSH's client and server
  (bsc#1237040, CVE-2025-26465, bsc#1237041, CVE-2025-26466):
  * fix-CVE-2025-26465-and-CVE-2025-26466.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1739880000">- Fix ssh client segfault with GSSAPIKeyExchange=yes in ssh_kex2
  due to gssapi proposal not being correctly initialized
  (bsc#1236826). The problem was introduced in the rebase of
  the patch for 9.6p1:
  * openssh-8.0p1-gssapi-keyex.patch
- Rebase patch and apply it:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="hpj@suse.com" date="1746532800">- Added openssh-cve-2025-32728.patch (bsc#1241012, CVE-2025-32728).
  This fixes an upstream logic error handling the DisableForwarding
  option.</changelog>
  <changelog author="alarrosa@suse.com" date="1747137600">- Enable --with-logind to call the SetTTY dbus method in systemd.
  This allows "wall" to print messages in ssh ttys (bsc#1239671)
- Small fixes to unref the dbus session when any error occurs:
  * logind_set_tty.patch</changelog>
  <changelog author="hpj@suse.com" date="1748952000">- Add openssh-scp-umask-preserve-permissions.patch (bsc#1241667).</changelog>
  <changelog author="hpj@suse.com" date="1762516800">- Add openssh-cve-2025-61984-username-validation.patch
  (bsc#1251198, CVE-2025-61984).
- Add openssh-cve-2025-61985-nul-url-encode.patch
  (bsc#1251199, CVE-2025-61985).</changelog>
</package>
<package pkgid="580a75f377fd3a1d60f4aa2b25db8f42dcebc1896198c4837e6d424c217076db" name="openssh-helpers" arch="x86_64">
  <version epoch="0" ver="9.6p1" rel="150600.6.37.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1712059200">- Rebase openssh-7.7p1-fips.patch (bsc#1221928)
  Remove OPENSSL_HAVE_EVPGCM-ifdef, which is no longer supported by upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1712577600">- Update to openssh 9.6p1:
  = Security
  * ssh(1), sshd(8): implement protocol extensions to thwart the
    so-called "Terrapin attack" discovered by Fabian Bäumer, Marcus
    Brinkmann and Jörg Schwenk. This attack allows a MITM to effect a
    limited break of the integrity of the early encrypted SSH transport
    protocol by sending extra messages prior to the commencement of
    encryption, and deleting an equal number of consecutive messages
    immediately after encryption starts. A peer SSH client/server
    would not be able to detect that messages were deleted
    (bsc#1217950, CVE-2023-48795).
  * ssh-agent(1): when adding PKCS#11-hosted private keys while
    specifying destination constraints, if the PKCS#11 token returned
    multiple keys then only the first key had the constraints applied.
    Use of regular private keys, FIDO tokens and unconstrained keys
    are unaffected.
  * ssh(1): if an invalid user or hostname that contained shell
    metacharacters was passed to ssh(1), and a ProxyCommand,
    LocalCommand directive or "match exec" predicate referenced the
    user or hostname via %u, %h or similar expansion token, then
    an attacker who could supply arbitrary user/hostnames to ssh(1)
    could potentially perform command injection depending on what
    quoting was present in the user-supplied ssh_config(5) directive
    (bsc#1218215, CVE-2023-51385).
  = Potentially incompatible changes
  * ssh(1), sshd(8): the RFC4254 connection/channels protocol provides
    a TCP-like window mechanism that limits the amount of data that
    can be sent without acceptance from the peer. In cases where this
    limit was exceeded by a non-conforming peer SSH implementation,
    ssh(1)/sshd(8) previously discarded the extra data. From OpenSSH
    9.6, ssh(1)/sshd(8) will now terminate the connection if a peer
    exceeds the window limit by more than a small grace factor. This
    change should have no effect of SSH implementations that follow
    the specification.
  = New features
  * ssh(1): add a %j token that expands to the configured ProxyJump
    hostname (or the empty string if this option is not being used)
    that can be used in a number of ssh_config(5) keywords. bz3610
  * ssh(1): add ChannelTimeout support to the client, mirroring the
    same option in the server and allowing ssh(1) to terminate
    quiescent channels.
  * ssh(1), sshd(8), ssh-add(1), ssh-keygen(1): add support for
    reading ED25519 private keys in PEM PKCS8 format. Previously
    only the OpenSSH private key format was supported.
  * ssh(1), sshd(8): introduce a protocol extension to allow
    renegotiation of acceptable signature algorithms for public key
    authentication after the server has learned the username being
    used for authentication. This allows varying sshd_config(5)
    PubkeyAcceptedAlgorithms in a "Match user" block.
  * ssh-add(1), ssh-agent(1): add an agent protocol extension to allow
    specifying certificates when loading PKCS#11 keys. This allows the
    use of certificates backed by PKCS#11 private keys in all OpenSSH
    tools that support ssh-agent(1). Previously only ssh(1) supported
    this use-case.
  = Bugfixes
  * ssh(1): when deciding whether to enable the keystroke timing
    obfuscation, enable it only if a channel with a TTY is active.
  * ssh(1): switch mainloop from poll(3) to ppoll(3) and mask signals
    before checking flags set in signal handler. Avoids potential
    race condition between signaling ssh to exit and polling. bz3531
  * ssh(1): when connecting to a destination with both the
    AddressFamily and CanonicalizeHostname directives in use,
    the AddressFamily directive could be ignored. bz5326
  * sftp(1): correct handling of the limits@openssh.com option when
    the server returned an unexpected message.
  * A number of fixes to the PuTTY and Dropbear regress/integration
    tests.
  * ssh(1): release GSS OIDs only at end of authentication, avoiding
    unnecessary init/cleanup cycles. bz2982
  * ssh_config(5): mention "none" is a valid argument to IdentityFile
    in the manual. bz3080
  * scp(1): improved debugging for paths from the server rejected for
    not matching the client's glob(3) pattern in old SCP/RCP protocol
    mode.
  * ssh-agent(1): refuse signing operations on destination-constrained
    keys if a previous session-bind operation has failed. This may
    prevent a fail-open situation in future if a user uses a mismatched
    ssh(1) client and ssh-agent(1) where the client supports a key type
    that the agent does not support.
- Update to openssh 9.5p1:
  = Potentially incompatible changes
  * ssh-keygen(1): generate Ed25519 keys by default. Ed25519 public keys
    are very convenient due to their small size. Ed25519 keys are
    specified in RFC 8709 and OpenSSH has supported them since version 6.5
    (January 2014).
  * sshd(8): the Subsystem directive now accurately preserves quoting of
    subsystem commands and arguments. This may change behaviour for exotic
    configurations, but the most common subsystem configuration
    (sftp-server) is unlikely to be affected.
  = New features
  * ssh(1): add keystroke timing obfuscation to the client. This attempts
    to hide inter-keystroke timings by sending interactive traffic at
    fixed intervals (default: every 20ms) when there is only a small
    amount of data being sent. It also sends fake "chaff" keystrokes for
    a random interval after the last real keystroke. These are
    controlled by a new ssh_config ObscureKeystrokeTiming keyword.
  * ssh(1), sshd(8): Introduce a transport-level ping facility. This adds
    a pair of SSH transport protocol messages SSH2_MSG_PING/PONG to
    implement a ping capability. These messages use numbers in the "local
    extensions" number space and are advertised using a "ping@openssh.com"
    ext-info message with a string version number of "0".
  * sshd(8): allow override of Subsystem directives in sshd Match blocks.
  = Bugfixes
  * scp(1): fix scp in SFTP mode recursive upload and download of
    directories that contain symlinks to other directories. In scp mode,
    the links would be followed, but in SFTP mode they were not. bz3611
  * ssh-keygen(1): handle cr+lf (instead of just cr) line endings in
    sshsig signature files.
  * ssh(1): interactive mode for ControlPersist sessions if they
    originally requested a tty.
  * sshd(8): make PerSourceMaxStartups first-match-wins
  * sshd(8): limit artificial login delay to a reasonable maximum (5s)
    and don't delay at all for the "none" authentication mechanism.
    bz3602
  * sshd(8): Log errors in kex_exchange_identification() with level
    verbose instead of error to reduce preauth log spam. All of those
    get logged with a more generic error message by sshpkt_fatal().
  * sshd(8): correct math for ClientAliveInterval that caused the probes
    to be sent less frequently than configured.
  * ssh(1): fix regression in OpenSSH 9.4 (mux.c r1.99) that caused
    multiplexed sessions to ignore SIGINT under some circumstances.
- Update to openssh 9.4p1:
  = Potentially incompatible changes
  * This release removes support for older versions of libcrypto.
    OpenSSH now requires LibreSSL &gt;= 3.1.0 or OpenSSL &gt;= 1.1.1.
    Note that these versions are already deprecated by their upstream
    vendors.
  * ssh-agent(1): PKCS#11 modules must now be specified by their full
    paths. Previously dlopen(3) could search for them in system
    library directories.
  = New features
  * ssh(1): allow forwarding Unix Domain sockets via ssh -W.
  * ssh(1): add support for configuration tags to ssh(1).
    This adds a ssh_config(5) "Tag" directive and corresponding
    "Match tag" predicate that may be used to select blocks of
    configuration similar to the pf.conf(5) keywords of the same
    name.
  * ssh(1): add a "match localnetwork" predicate. This allows matching
    on the addresses of available network interfaces and may be used to
    vary the effective client configuration based on network location.
  * ssh(1), sshd(8), ssh-keygen(1): infrastructure support for KRL
    extensions.  This defines wire formats for optional KRL extensions
    and implements parsing of the new submessages. No actual extensions
    are supported at this point.
  * sshd(8): AuthorizedPrincipalsCommand and AuthorizedKeysCommand now
    accept two additional %-expansion sequences: %D which expands to
    the routing domain of the connected session and %C which expands
    to the addresses and port numbers for the source and destination
    of the connection.
  * ssh-keygen(1): increase the default work factor (rounds) for the
    bcrypt KDF used to derive symmetric encryption keys for passphrase
    protected key files by 50%.
  = Bugfixes
  * ssh-agent(1): improve isolation between loaded PKCS#11 modules
    by running separate ssh-pkcs11-helpers for each loaded provider.
  * ssh(1): make -f (fork after authentication) work correctly with
    multiplexed connections, including ControlPersist. bz3589 bz3589
  * ssh(1): make ConnectTimeout apply to multiplexing sockets and not
    just to network connections.
  * ssh-agent(1), ssh(1): improve defences against invalid PKCS#11
    modules being loaded by checking that the requested module
    contains the required symbol before loading it.
  * sshd(8): fix AuthorizedPrincipalsCommand when AuthorizedKeysCommand
    appears before it in sshd_config. Since OpenSSH 8.7 the
    AuthorizedPrincipalsCommand directive was incorrectly ignored in
    this situation. bz3574
  * sshd(8), ssh(1), ssh-keygen(1): remove vestigal support for KRL
    signatures When the KRL format was originally defined, it included
    support for signing of KRL objects. However, the code to sign KRLs
    and verify KRL signatues was never completed in OpenSSH. This
    release removes the partially-implemented code to verify KRLs.
    All OpenSSH tools now ignore KRL_SECTION_SIGNATURE sections in
    KRL files.
  * All: fix a number of memory leaks and unreachable/harmless integer
    overflows.
  * ssh-agent(1), ssh(1): don't truncate strings logged from PKCS#11
    modules; GHPR406
  * sshd(8), ssh(1): better validate CASignatureAlgorithms in
    ssh_config and sshd_config. Previously this directive would accept
    certificate algorithm names, but these were unusable in practice as
    OpenSSH does not support CA chains. bz3577
  * ssh(1): make `ssh -Q CASignatureAlgorithms` only list signature
    algorithms that are valid for CA signing. Previous behaviour was
    to list all signing algorithms, including certificate algorithms.
  * ssh-keyscan(1): gracefully handle systems where rlimits or the
    maximum number of open files is larger than INT_MAX; bz3581
  * ssh-keygen(1): fix "no comment" not showing on when running
    `ssh-keygen -l` on multiple keys where one has a comment and other
    following keys do not. bz3580
  * scp(1), sftp(1): adjust ftruncate() logic to handle servers that
    reorder requests. Previously, if the server reordered requests then
    the resultant file would be erroneously truncated.
  * ssh(1): don't incorrectly disable hostname canonicalization when
    CanonicalizeHostname=yes and ProxyJump was expicitly set to
    "none". bz3567
  * scp(1): when copying local-&gt;remote, check that the source file
    exists before opening an SFTP connection to the server. Based on
    GHPR#370
- Dropped patches:
  * cb4ed12f.patch - implemented upstream.
- Rebased patches:
  * openssh-7.7p1-fips.patch
  * openssh-7.8p1-role-mls.patch
  * openssh-8.0p1-gssapi-keyex.patch
- Add patches from obs:
  * Mon Mar  4 09:57:06 UTC 2024 - Pedro Monreal &lt;pmonreal@suse.com&gt;
- Add crypto-policies support [bsc#1211301]
  * Add patches:
  - openssh-9.6p1-crypto-policies.patch
  - openssh-9.6p1-crypto-policies-man.patch</changelog>
  <changelog author="opensuse@arnavion.dev" date="1712836800">- Fix duplicate loading of dropins. (boo#1222467)</changelog>
  <changelog author="alarrosa@suse.com" date="1712923200">- Make openssh-server recommend the openssh-server-config-rootlogin
  package in SLE in order to keep the same behaviour of previous
  SPs where the PermitRootLogin default was set to yes
  (bsc#1221005).
- Fix crypto-policies requirement to be set by openssh-server, not
  the config-rootlogin subpackage.
- Add back %config(noreplace) tag for more config files that were
  already set like this in previous SPs.</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- openssh-8.0p1-gssapi-keyex.patch: Added missing struct initializer,
  added missing parameter (bsc#1222840)</changelog>
  <changelog author="alarrosa@suse.com" date="1715601600">- Only for SLE15, restore the patch file removed in
  Thu Feb 18 13:54:44 UTC 2021 to restore the previous behaviour
  from SP5 of having root password login allowed by default
  (fixes bsc#1223486, related to bsc#1173067):
  * openssh-7.7p1-allow_root_password_login.patch
- Since the default value for this config option is now set to
  permit root to use password logins in SLE15, the
  openssh-server-config-rootlogin subpackage isn't useful there so
  we now create an openssh-server-config-disallow-rootlogin
  subpackage that sets the configuration the other way around
  than openssh-server-config-rootlogin.</changelog>
  <changelog author="alarrosa@suse.com" date="1715688000">- Add a warning in %post of openssh-clients, openssh-server and
  openssh-server-config-disallow-rootlogin to warn the user if
  the /etc/ssh/(ssh_config.d|sshd_config.d) directories are not
  being used (bsc#1223486).</changelog>
  <changelog author="alarrosa@suse.com" date="1719835200">- Add patch to fix a race condition in a signal handler by removing
  the async-signal-unsafe code (CVE-2024-6387, bsc#1226642):
  * fix-CVE-2024-6387.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720008000">- Add obsoletes for openssh-server-config-rootlogin since that
  package existed for a brief period of time during SLE 15 SP6/
  Leap 15.6 development but even if it was removed from the
  repositories before GM, some users might have it in their
  systems from having tried a beta/RC release (boo#1227350).
- Add #include &lt;stdlib.h&gt; in some files added by the ldap patch to
  fix build with gcc14 (boo#1225904).
  * openssh-7.7p1-ldap.patch
- Remove the recommendation for openssh-server-config-rootlogin
  from openssh-server. Since the default for that config option
  was changed in SLE it's not needed anymore in SLE nor in TW
  (boo#1224392).</changelog>
  <changelog author="alarrosa@suse.com" date="1720180800">- Add patch from upstream to fix proxy multiplexing mode:
  * 0001-upstream-fix-proxy-multiplexing-mode_-broken-when-keystroke.patch
- Add patch from upstream to restore correctly sigprocmask
  * 0001-upstream-correctly-restore-sigprocmask-around-ppoll.patch
- Add patch from upstream to fix a logic error in
  ObscureKeystrokeTiming that rendered this feature ineffective,
  allowing a passive observer to detect which network packets
  contained real keystrokes (bsc#1227318, CVE-2024-39894):
  * 0001-upstream-when-sending-ObscureKeystrokeTiming-chaff-packets_.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720612800">- Remove empty line at the end of sshd-sle.pamd (bsc#1227456)</changelog>
  <changelog author="alarrosa@suse.com" date="1728648000">- Add a patch to fix a regression introduced in 9.6 that makes X11
  forwarding very slow. Submitted to upstream in
  https://bugzilla.mindrot.org/show_bug.cgi?id=3655#c4 . Fixes
  bsc#1229449:
  * fix-x11-regression-bsc1229449.patch
- Add a openssl11 bcond to the spec file for the SLE12 case
  instead of checking suse_version in different parts.
- Move conditional patches to a number &gt;= 1000.
- Several spec file fixes so the package builds and can be
  installed in SLE 15 SP5 and SLE 12 SP5
- Drop most of openssh-6.6p1-keycat.patch (actually, it was just
  commented out). The keycat binary isn't really installed nor
  supported, so we can drop it, except for the code that is used
  by other SELinux patches, which is what I kept from that patch
  (boo#1229072).
- Add patch submitted to upstream to fix RFC4256 implementation
  so that keyboard-interactive authentication method can send
  instructions and sshd shows them to users even before a prompt
  is requested. This fixes MFA push notifications (boo#1229010).
  * 0001-auth-pam-Immediately-report-instructions-to-clients-and-fix-handling-in-ssh-client.patch
- Fix a dbus connection leaked in the logind patch that was
  missing a sd_bus_unref call (found by Matthias Gerstner):
  * logind_set_tty.patch
- Add a patch that fixes a small memory leak when parsing the
  subsystem configuration option:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1728907200">- Use %{with ...} instead of 0%{with ...}</changelog>
  <changelog author="alarrosa@suse.com" date="1739448000">- Fix a MitM attack against OpenSSH's VerifyHostKeyDNS-enabled
  client and a DoS attack against OpenSSH's client and server
  (bsc#1237040, CVE-2025-26465, bsc#1237041, CVE-2025-26466):
  * fix-CVE-2025-26465-and-CVE-2025-26466.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1739880000">- Fix ssh client segfault with GSSAPIKeyExchange=yes in ssh_kex2
  due to gssapi proposal not being correctly initialized
  (bsc#1236826). The problem was introduced in the rebase of
  the patch for 9.6p1:
  * openssh-8.0p1-gssapi-keyex.patch
- Rebase patch and apply it:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="hpj@suse.com" date="1746532800">- Added openssh-cve-2025-32728.patch (bsc#1241012, CVE-2025-32728).
  This fixes an upstream logic error handling the DisableForwarding
  option.</changelog>
  <changelog author="alarrosa@suse.com" date="1747137600">- Enable --with-logind to call the SetTTY dbus method in systemd.
  This allows "wall" to print messages in ssh ttys (bsc#1239671)
- Small fixes to unref the dbus session when any error occurs:
  * logind_set_tty.patch</changelog>
  <changelog author="hpj@suse.com" date="1748952000">- Add openssh-scp-umask-preserve-permissions.patch (bsc#1241667).</changelog>
  <changelog author="hpj@suse.com" date="1762516800">- Add openssh-cve-2025-61984-username-validation.patch
  (bsc#1251198, CVE-2025-61984).
- Add openssh-cve-2025-61985-nul-url-encode.patch
  (bsc#1251199, CVE-2025-61985).</changelog>
  <changelog author="hpj@suse.com" date="1778241600">- Added openssh-cve-2026-35385-scp-setuid-modes.patch (bsc#1261427),
  ensuring setuid bits default to being masked out by scp.
- Added openssh-cve-2026-35414-mishandled-ca-commas.patch
  (bsc#1261430), fixing mishandling of comma characters in CA in
  certain situations.</changelog>
</package>
<package pkgid="3dfaad6581db09537b26fc3e688459e35e97cf775e4fbc501879f1a48dfa1edc" name="openssh-server" arch="x86_64">
  <version epoch="0" ver="9.6p1" rel="150600.6.26.1"/>
  <changelog author="hpj@suse.com" date="1700827200">- Merge updates from openSUSE. Existing patches were rebased.
- Remove openssh-7.6p1-audit_race_condition.patch: Merged with
  audit patch.
- Remove openssh-CVE-2021-28041-agent-double-free.patch: Fixed
  upstream.
- Remove openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch:
  Fixed upstream.
- Remove openssh-CVE-2023-38408-PKCS11-execution.patch: Fixed
  upstream.
- Add cb4ed12f.patch from upstream, allowing newer versions of
  zlib to be used.
- Add logind_set_tty.patch by Thorsten Kukuk. This informs
  systemd-logind of the login TTY and prevents having to parse utmp,
  which is deprecated by glibc.</changelog>
  <changelog author="alarrosa@suse.com" date="1710244800">- Uncomment %sysuser_requires in openssh-server which was commented
  by mistake and is needed by the pre script installed with
  %sysusers_generate_pre (bsc#1220802).</changelog>
  <changelog author="alarrosa@suse.com" date="1712059200">- Use %config(noreplace) for sshd_config . In any case, it's
  recommended to drop a file in sshd_config.d instead of editing
  sshd_config (bsc#1221063)
- Add patches from obs package that were also in SP3/SP4/SP5:
  * Fri Nov  3 10:44:14 UTC 2023 - Johannes Segitz &lt;jsegitz@suse.com&gt;
  - Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712059201">- Rebase openssh-7.7p1-fips.patch (bsc#1221928)
  Remove OPENSSL_HAVE_EVPGCM-ifdef, which is no longer supported by upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1712577600">- Update to openssh 9.6p1:
  = Security
  * ssh(1), sshd(8): implement protocol extensions to thwart the
    so-called "Terrapin attack" discovered by Fabian Bäumer, Marcus
    Brinkmann and Jörg Schwenk. This attack allows a MITM to effect a
    limited break of the integrity of the early encrypted SSH transport
    protocol by sending extra messages prior to the commencement of
    encryption, and deleting an equal number of consecutive messages
    immediately after encryption starts. A peer SSH client/server
    would not be able to detect that messages were deleted
    (bsc#1217950, CVE-2023-48795).
  * ssh-agent(1): when adding PKCS#11-hosted private keys while
    specifying destination constraints, if the PKCS#11 token returned
    multiple keys then only the first key had the constraints applied.
    Use of regular private keys, FIDO tokens and unconstrained keys
    are unaffected.
  * ssh(1): if an invalid user or hostname that contained shell
    metacharacters was passed to ssh(1), and a ProxyCommand,
    LocalCommand directive or "match exec" predicate referenced the
    user or hostname via %u, %h or similar expansion token, then
    an attacker who could supply arbitrary user/hostnames to ssh(1)
    could potentially perform command injection depending on what
    quoting was present in the user-supplied ssh_config(5) directive
    (bsc#1218215, CVE-2023-51385).
  = Potentially incompatible changes
  * ssh(1), sshd(8): the RFC4254 connection/channels protocol provides
    a TCP-like window mechanism that limits the amount of data that
    can be sent without acceptance from the peer. In cases where this
    limit was exceeded by a non-conforming peer SSH implementation,
    ssh(1)/sshd(8) previously discarded the extra data. From OpenSSH
    9.6, ssh(1)/sshd(8) will now terminate the connection if a peer
    exceeds the window limit by more than a small grace factor. This
    change should have no effect of SSH implementations that follow
    the specification.
  = New features
  * ssh(1): add a %j token that expands to the configured ProxyJump
    hostname (or the empty string if this option is not being used)
    that can be used in a number of ssh_config(5) keywords. bz3610
  * ssh(1): add ChannelTimeout support to the client, mirroring the
    same option in the server and allowing ssh(1) to terminate
    quiescent channels.
  * ssh(1), sshd(8), ssh-add(1), ssh-keygen(1): add support for
    reading ED25519 private keys in PEM PKCS8 format. Previously
    only the OpenSSH private key format was supported.
  * ssh(1), sshd(8): introduce a protocol extension to allow
    renegotiation of acceptable signature algorithms for public key
    authentication after the server has learned the username being
    used for authentication. This allows varying sshd_config(5)
    PubkeyAcceptedAlgorithms in a "Match user" block.
  * ssh-add(1), ssh-agent(1): add an agent protocol extension to allow
    specifying certificates when loading PKCS#11 keys. This allows the
    use of certificates backed by PKCS#11 private keys in all OpenSSH
    tools that support ssh-agent(1). Previously only ssh(1) supported
    this use-case.
  = Bugfixes
  * ssh(1): when deciding whether to enable the keystroke timing
    obfuscation, enable it only if a channel with a TTY is active.
  * ssh(1): switch mainloop from poll(3) to ppoll(3) and mask signals
    before checking flags set in signal handler. Avoids potential
    race condition between signaling ssh to exit and polling. bz3531
  * ssh(1): when connecting to a destination with both the
    AddressFamily and CanonicalizeHostname directives in use,
    the AddressFamily directive could be ignored. bz5326
  * sftp(1): correct handling of the limits@openssh.com option when
    the server returned an unexpected message.
  * A number of fixes to the PuTTY and Dropbear regress/integration
    tests.
  * ssh(1): release GSS OIDs only at end of authentication, avoiding
    unnecessary init/cleanup cycles. bz2982
  * ssh_config(5): mention "none" is a valid argument to IdentityFile
    in the manual. bz3080
  * scp(1): improved debugging for paths from the server rejected for
    not matching the client's glob(3) pattern in old SCP/RCP protocol
    mode.
  * ssh-agent(1): refuse signing operations on destination-constrained
    keys if a previous session-bind operation has failed. This may
    prevent a fail-open situation in future if a user uses a mismatched
    ssh(1) client and ssh-agent(1) where the client supports a key type
    that the agent does not support.
- Update to openssh 9.5p1:
  = Potentially incompatible changes
  * ssh-keygen(1): generate Ed25519 keys by default. Ed25519 public keys
    are very convenient due to their small size. Ed25519 keys are
    specified in RFC 8709 and OpenSSH has supported them since version 6.5
    (January 2014).
  * sshd(8): the Subsystem directive now accurately preserves quoting of
    subsystem commands and arguments. This may change behaviour for exotic
    configurations, but the most common subsystem configuration
    (sftp-server) is unlikely to be affected.
  = New features
  * ssh(1): add keystroke timing obfuscation to the client. This attempts
    to hide inter-keystroke timings by sending interactive traffic at
    fixed intervals (default: every 20ms) when there is only a small
    amount of data being sent. It also sends fake "chaff" keystrokes for
    a random interval after the last real keystroke. These are
    controlled by a new ssh_config ObscureKeystrokeTiming keyword.
  * ssh(1), sshd(8): Introduce a transport-level ping facility. This adds
    a pair of SSH transport protocol messages SSH2_MSG_PING/PONG to
    implement a ping capability. These messages use numbers in the "local
    extensions" number space and are advertised using a "ping@openssh.com"
    ext-info message with a string version number of "0".
  * sshd(8): allow override of Subsystem directives in sshd Match blocks.
  = Bugfixes
  * scp(1): fix scp in SFTP mode recursive upload and download of
    directories that contain symlinks to other directories. In scp mode,
    the links would be followed, but in SFTP mode they were not. bz3611
  * ssh-keygen(1): handle cr+lf (instead of just cr) line endings in
    sshsig signature files.
  * ssh(1): interactive mode for ControlPersist sessions if they
    originally requested a tty.
  * sshd(8): make PerSourceMaxStartups first-match-wins
  * sshd(8): limit artificial login delay to a reasonable maximum (5s)
    and don't delay at all for the "none" authentication mechanism.
    bz3602
  * sshd(8): Log errors in kex_exchange_identification() with level
    verbose instead of error to reduce preauth log spam. All of those
    get logged with a more generic error message by sshpkt_fatal().
  * sshd(8): correct math for ClientAliveInterval that caused the probes
    to be sent less frequently than configured.
  * ssh(1): fix regression in OpenSSH 9.4 (mux.c r1.99) that caused
    multiplexed sessions to ignore SIGINT under some circumstances.
- Update to openssh 9.4p1:
  = Potentially incompatible changes
  * This release removes support for older versions of libcrypto.
    OpenSSH now requires LibreSSL &gt;= 3.1.0 or OpenSSL &gt;= 1.1.1.
    Note that these versions are already deprecated by their upstream
    vendors.
  * ssh-agent(1): PKCS#11 modules must now be specified by their full
    paths. Previously dlopen(3) could search for them in system
    library directories.
  = New features
  * ssh(1): allow forwarding Unix Domain sockets via ssh -W.
  * ssh(1): add support for configuration tags to ssh(1).
    This adds a ssh_config(5) "Tag" directive and corresponding
    "Match tag" predicate that may be used to select blocks of
    configuration similar to the pf.conf(5) keywords of the same
    name.
  * ssh(1): add a "match localnetwork" predicate. This allows matching
    on the addresses of available network interfaces and may be used to
    vary the effective client configuration based on network location.
  * ssh(1), sshd(8), ssh-keygen(1): infrastructure support for KRL
    extensions.  This defines wire formats for optional KRL extensions
    and implements parsing of the new submessages. No actual extensions
    are supported at this point.
  * sshd(8): AuthorizedPrincipalsCommand and AuthorizedKeysCommand now
    accept two additional %-expansion sequences: %D which expands to
    the routing domain of the connected session and %C which expands
    to the addresses and port numbers for the source and destination
    of the connection.
  * ssh-keygen(1): increase the default work factor (rounds) for the
    bcrypt KDF used to derive symmetric encryption keys for passphrase
    protected key files by 50%.
  = Bugfixes
  * ssh-agent(1): improve isolation between loaded PKCS#11 modules
    by running separate ssh-pkcs11-helpers for each loaded provider.
  * ssh(1): make -f (fork after authentication) work correctly with
    multiplexed connections, including ControlPersist. bz3589 bz3589
  * ssh(1): make ConnectTimeout apply to multiplexing sockets and not
    just to network connections.
  * ssh-agent(1), ssh(1): improve defences against invalid PKCS#11
    modules being loaded by checking that the requested module
    contains the required symbol before loading it.
  * sshd(8): fix AuthorizedPrincipalsCommand when AuthorizedKeysCommand
    appears before it in sshd_config. Since OpenSSH 8.7 the
    AuthorizedPrincipalsCommand directive was incorrectly ignored in
    this situation. bz3574
  * sshd(8), ssh(1), ssh-keygen(1): remove vestigal support for KRL
    signatures When the KRL format was originally defined, it included
    support for signing of KRL objects. However, the code to sign KRLs
    and verify KRL signatues was never completed in OpenSSH. This
    release removes the partially-implemented code to verify KRLs.
    All OpenSSH tools now ignore KRL_SECTION_SIGNATURE sections in
    KRL files.
  * All: fix a number of memory leaks and unreachable/harmless integer
    overflows.
  * ssh-agent(1), ssh(1): don't truncate strings logged from PKCS#11
    modules; GHPR406
  * sshd(8), ssh(1): better validate CASignatureAlgorithms in
    ssh_config and sshd_config. Previously this directive would accept
    certificate algorithm names, but these were unusable in practice as
    OpenSSH does not support CA chains. bz3577
  * ssh(1): make `ssh -Q CASignatureAlgorithms` only list signature
    algorithms that are valid for CA signing. Previous behaviour was
    to list all signing algorithms, including certificate algorithms.
  * ssh-keyscan(1): gracefully handle systems where rlimits or the
    maximum number of open files is larger than INT_MAX; bz3581
  * ssh-keygen(1): fix "no comment" not showing on when running
    `ssh-keygen -l` on multiple keys where one has a comment and other
    following keys do not. bz3580
  * scp(1), sftp(1): adjust ftruncate() logic to handle servers that
    reorder requests. Previously, if the server reordered requests then
    the resultant file would be erroneously truncated.
  * ssh(1): don't incorrectly disable hostname canonicalization when
    CanonicalizeHostname=yes and ProxyJump was expicitly set to
    "none". bz3567
  * scp(1): when copying local-&gt;remote, check that the source file
    exists before opening an SFTP connection to the server. Based on
    GHPR#370
- Dropped patches:
  * cb4ed12f.patch - implemented upstream.
- Rebased patches:
  * openssh-7.7p1-fips.patch
  * openssh-7.8p1-role-mls.patch
  * openssh-8.0p1-gssapi-keyex.patch
- Add patches from obs:
  * Mon Mar  4 09:57:06 UTC 2024 - Pedro Monreal &lt;pmonreal@suse.com&gt;
- Add crypto-policies support [bsc#1211301]
  * Add patches:
  - openssh-9.6p1-crypto-policies.patch
  - openssh-9.6p1-crypto-policies-man.patch</changelog>
  <changelog author="opensuse@arnavion.dev" date="1712836800">- Fix duplicate loading of dropins. (boo#1222467)</changelog>
  <changelog author="alarrosa@suse.com" date="1712923200">- Make openssh-server recommend the openssh-server-config-rootlogin
  package in SLE in order to keep the same behaviour of previous
  SPs where the PermitRootLogin default was set to yes
  (bsc#1221005).
- Fix crypto-policies requirement to be set by openssh-server, not
  the config-rootlogin subpackage.
- Add back %config(noreplace) tag for more config files that were
  already set like this in previous SPs.</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- openssh-8.0p1-gssapi-keyex.patch: Added missing struct initializer,
  added missing parameter (bsc#1222840)</changelog>
  <changelog author="alarrosa@suse.com" date="1715601600">- Only for SLE15, restore the patch file removed in
  Thu Feb 18 13:54:44 UTC 2021 to restore the previous behaviour
  from SP5 of having root password login allowed by default
  (fixes bsc#1223486, related to bsc#1173067):
  * openssh-7.7p1-allow_root_password_login.patch
- Since the default value for this config option is now set to
  permit root to use password logins in SLE15, the
  openssh-server-config-rootlogin subpackage isn't useful there so
  we now create an openssh-server-config-disallow-rootlogin
  subpackage that sets the configuration the other way around
  than openssh-server-config-rootlogin.</changelog>
  <changelog author="alarrosa@suse.com" date="1715688000">- Add a warning in %post of openssh-clients, openssh-server and
  openssh-server-config-disallow-rootlogin to warn the user if
  the /etc/ssh/(ssh_config.d|sshd_config.d) directories are not
  being used (bsc#1223486).</changelog>
  <changelog author="alarrosa@suse.com" date="1719835200">- Add patch to fix a race condition in a signal handler by removing
  the async-signal-unsafe code (CVE-2024-6387, bsc#1226642):
  * fix-CVE-2024-6387.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720008000">- Add obsoletes for openssh-server-config-rootlogin since that
  package existed for a brief period of time during SLE 15 SP6/
  Leap 15.6 development but even if it was removed from the
  repositories before GM, some users might have it in their
  systems from having tried a beta/RC release (boo#1227350).
- Add #include &lt;stdlib.h&gt; in some files added by the ldap patch to
  fix build with gcc14 (boo#1225904).
  * openssh-7.7p1-ldap.patch
- Remove the recommendation for openssh-server-config-rootlogin
  from openssh-server. Since the default for that config option
  was changed in SLE it's not needed anymore in SLE nor in TW
  (boo#1224392).</changelog>
  <changelog author="alarrosa@suse.com" date="1720180800">- Add patch from upstream to fix proxy multiplexing mode:
  * 0001-upstream-fix-proxy-multiplexing-mode_-broken-when-keystroke.patch
- Add patch from upstream to restore correctly sigprocmask
  * 0001-upstream-correctly-restore-sigprocmask-around-ppoll.patch
- Add patch from upstream to fix a logic error in
  ObscureKeystrokeTiming that rendered this feature ineffective,
  allowing a passive observer to detect which network packets
  contained real keystrokes (bsc#1227318, CVE-2024-39894):
  * 0001-upstream-when-sending-ObscureKeystrokeTiming-chaff-packets_.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720612800">- Remove empty line at the end of sshd-sle.pamd (bsc#1227456)</changelog>
  <changelog author="alarrosa@suse.com" date="1728648000">- Add a patch to fix a regression introduced in 9.6 that makes X11
  forwarding very slow. Submitted to upstream in
  https://bugzilla.mindrot.org/show_bug.cgi?id=3655#c4 . Fixes
  bsc#1229449:
  * fix-x11-regression-bsc1229449.patch
- Add a openssl11 bcond to the spec file for the SLE12 case
  instead of checking suse_version in different parts.
- Move conditional patches to a number &gt;= 1000.
- Several spec file fixes so the package builds and can be
  installed in SLE 15 SP5 and SLE 12 SP5
- Drop most of openssh-6.6p1-keycat.patch (actually, it was just
  commented out). The keycat binary isn't really installed nor
  supported, so we can drop it, except for the code that is used
  by other SELinux patches, which is what I kept from that patch
  (boo#1229072).
- Add patch submitted to upstream to fix RFC4256 implementation
  so that keyboard-interactive authentication method can send
  instructions and sshd shows them to users even before a prompt
  is requested. This fixes MFA push notifications (boo#1229010).
  * 0001-auth-pam-Immediately-report-instructions-to-clients-and-fix-handling-in-ssh-client.patch
- Fix a dbus connection leaked in the logind patch that was
  missing a sd_bus_unref call (found by Matthias Gerstner):
  * logind_set_tty.patch
- Add a patch that fixes a small memory leak when parsing the
  subsystem configuration option:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1728907200">- Use %{with ...} instead of 0%{with ...}</changelog>
  <changelog author="alarrosa@suse.com" date="1739448000">- Fix a MitM attack against OpenSSH's VerifyHostKeyDNS-enabled
  client and a DoS attack against OpenSSH's client and server
  (bsc#1237040, CVE-2025-26465, bsc#1237041, CVE-2025-26466):
  * fix-CVE-2025-26465-and-CVE-2025-26466.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1739880000">- Fix ssh client segfault with GSSAPIKeyExchange=yes in ssh_kex2
  due to gssapi proposal not being correctly initialized
  (bsc#1236826). The problem was introduced in the rebase of
  the patch for 9.6p1:
  * openssh-8.0p1-gssapi-keyex.patch
- Rebase patch and apply it:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="hpj@suse.com" date="1746532800">- Added openssh-cve-2025-32728.patch (bsc#1241012, CVE-2025-32728).
  This fixes an upstream logic error handling the DisableForwarding
  option.</changelog>
  <changelog author="alarrosa@suse.com" date="1747137600">- Enable --with-logind to call the SetTTY dbus method in systemd.
  This allows "wall" to print messages in ssh ttys (bsc#1239671)
- Small fixes to unref the dbus session when any error occurs:
  * logind_set_tty.patch</changelog>
</package>
<package pkgid="e90a51b5f2102b5d5304e2cf4837bea68e5c41043f6e6b1e5103fe932e8734b1" name="openssh-server" arch="x86_64">
  <version epoch="0" ver="9.6p1" rel="150600.6.29.2"/>
  <changelog author="alarrosa@suse.com" date="1710244800">- Uncomment %sysuser_requires in openssh-server which was commented
  by mistake and is needed by the pre script installed with
  %sysusers_generate_pre (bsc#1220802).</changelog>
  <changelog author="alarrosa@suse.com" date="1712059200">- Use %config(noreplace) for sshd_config . In any case, it's
  recommended to drop a file in sshd_config.d instead of editing
  sshd_config (bsc#1221063)
- Add patches from obs package that were also in SP3/SP4/SP5:
  * Fri Nov  3 10:44:14 UTC 2023 - Johannes Segitz &lt;jsegitz@suse.com&gt;
  - Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712059201">- Rebase openssh-7.7p1-fips.patch (bsc#1221928)
  Remove OPENSSL_HAVE_EVPGCM-ifdef, which is no longer supported by upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1712577600">- Update to openssh 9.6p1:
  = Security
  * ssh(1), sshd(8): implement protocol extensions to thwart the
    so-called "Terrapin attack" discovered by Fabian Bäumer, Marcus
    Brinkmann and Jörg Schwenk. This attack allows a MITM to effect a
    limited break of the integrity of the early encrypted SSH transport
    protocol by sending extra messages prior to the commencement of
    encryption, and deleting an equal number of consecutive messages
    immediately after encryption starts. A peer SSH client/server
    would not be able to detect that messages were deleted
    (bsc#1217950, CVE-2023-48795).
  * ssh-agent(1): when adding PKCS#11-hosted private keys while
    specifying destination constraints, if the PKCS#11 token returned
    multiple keys then only the first key had the constraints applied.
    Use of regular private keys, FIDO tokens and unconstrained keys
    are unaffected.
  * ssh(1): if an invalid user or hostname that contained shell
    metacharacters was passed to ssh(1), and a ProxyCommand,
    LocalCommand directive or "match exec" predicate referenced the
    user or hostname via %u, %h or similar expansion token, then
    an attacker who could supply arbitrary user/hostnames to ssh(1)
    could potentially perform command injection depending on what
    quoting was present in the user-supplied ssh_config(5) directive
    (bsc#1218215, CVE-2023-51385).
  = Potentially incompatible changes
  * ssh(1), sshd(8): the RFC4254 connection/channels protocol provides
    a TCP-like window mechanism that limits the amount of data that
    can be sent without acceptance from the peer. In cases where this
    limit was exceeded by a non-conforming peer SSH implementation,
    ssh(1)/sshd(8) previously discarded the extra data. From OpenSSH
    9.6, ssh(1)/sshd(8) will now terminate the connection if a peer
    exceeds the window limit by more than a small grace factor. This
    change should have no effect of SSH implementations that follow
    the specification.
  = New features
  * ssh(1): add a %j token that expands to the configured ProxyJump
    hostname (or the empty string if this option is not being used)
    that can be used in a number of ssh_config(5) keywords. bz3610
  * ssh(1): add ChannelTimeout support to the client, mirroring the
    same option in the server and allowing ssh(1) to terminate
    quiescent channels.
  * ssh(1), sshd(8), ssh-add(1), ssh-keygen(1): add support for
    reading ED25519 private keys in PEM PKCS8 format. Previously
    only the OpenSSH private key format was supported.
  * ssh(1), sshd(8): introduce a protocol extension to allow
    renegotiation of acceptable signature algorithms for public key
    authentication after the server has learned the username being
    used for authentication. This allows varying sshd_config(5)
    PubkeyAcceptedAlgorithms in a "Match user" block.
  * ssh-add(1), ssh-agent(1): add an agent protocol extension to allow
    specifying certificates when loading PKCS#11 keys. This allows the
    use of certificates backed by PKCS#11 private keys in all OpenSSH
    tools that support ssh-agent(1). Previously only ssh(1) supported
    this use-case.
  = Bugfixes
  * ssh(1): when deciding whether to enable the keystroke timing
    obfuscation, enable it only if a channel with a TTY is active.
  * ssh(1): switch mainloop from poll(3) to ppoll(3) and mask signals
    before checking flags set in signal handler. Avoids potential
    race condition between signaling ssh to exit and polling. bz3531
  * ssh(1): when connecting to a destination with both the
    AddressFamily and CanonicalizeHostname directives in use,
    the AddressFamily directive could be ignored. bz5326
  * sftp(1): correct handling of the limits@openssh.com option when
    the server returned an unexpected message.
  * A number of fixes to the PuTTY and Dropbear regress/integration
    tests.
  * ssh(1): release GSS OIDs only at end of authentication, avoiding
    unnecessary init/cleanup cycles. bz2982
  * ssh_config(5): mention "none" is a valid argument to IdentityFile
    in the manual. bz3080
  * scp(1): improved debugging for paths from the server rejected for
    not matching the client's glob(3) pattern in old SCP/RCP protocol
    mode.
  * ssh-agent(1): refuse signing operations on destination-constrained
    keys if a previous session-bind operation has failed. This may
    prevent a fail-open situation in future if a user uses a mismatched
    ssh(1) client and ssh-agent(1) where the client supports a key type
    that the agent does not support.
- Update to openssh 9.5p1:
  = Potentially incompatible changes
  * ssh-keygen(1): generate Ed25519 keys by default. Ed25519 public keys
    are very convenient due to their small size. Ed25519 keys are
    specified in RFC 8709 and OpenSSH has supported them since version 6.5
    (January 2014).
  * sshd(8): the Subsystem directive now accurately preserves quoting of
    subsystem commands and arguments. This may change behaviour for exotic
    configurations, but the most common subsystem configuration
    (sftp-server) is unlikely to be affected.
  = New features
  * ssh(1): add keystroke timing obfuscation to the client. This attempts
    to hide inter-keystroke timings by sending interactive traffic at
    fixed intervals (default: every 20ms) when there is only a small
    amount of data being sent. It also sends fake "chaff" keystrokes for
    a random interval after the last real keystroke. These are
    controlled by a new ssh_config ObscureKeystrokeTiming keyword.
  * ssh(1), sshd(8): Introduce a transport-level ping facility. This adds
    a pair of SSH transport protocol messages SSH2_MSG_PING/PONG to
    implement a ping capability. These messages use numbers in the "local
    extensions" number space and are advertised using a "ping@openssh.com"
    ext-info message with a string version number of "0".
  * sshd(8): allow override of Subsystem directives in sshd Match blocks.
  = Bugfixes
  * scp(1): fix scp in SFTP mode recursive upload and download of
    directories that contain symlinks to other directories. In scp mode,
    the links would be followed, but in SFTP mode they were not. bz3611
  * ssh-keygen(1): handle cr+lf (instead of just cr) line endings in
    sshsig signature files.
  * ssh(1): interactive mode for ControlPersist sessions if they
    originally requested a tty.
  * sshd(8): make PerSourceMaxStartups first-match-wins
  * sshd(8): limit artificial login delay to a reasonable maximum (5s)
    and don't delay at all for the "none" authentication mechanism.
    bz3602
  * sshd(8): Log errors in kex_exchange_identification() with level
    verbose instead of error to reduce preauth log spam. All of those
    get logged with a more generic error message by sshpkt_fatal().
  * sshd(8): correct math for ClientAliveInterval that caused the probes
    to be sent less frequently than configured.
  * ssh(1): fix regression in OpenSSH 9.4 (mux.c r1.99) that caused
    multiplexed sessions to ignore SIGINT under some circumstances.
- Update to openssh 9.4p1:
  = Potentially incompatible changes
  * This release removes support for older versions of libcrypto.
    OpenSSH now requires LibreSSL &gt;= 3.1.0 or OpenSSL &gt;= 1.1.1.
    Note that these versions are already deprecated by their upstream
    vendors.
  * ssh-agent(1): PKCS#11 modules must now be specified by their full
    paths. Previously dlopen(3) could search for them in system
    library directories.
  = New features
  * ssh(1): allow forwarding Unix Domain sockets via ssh -W.
  * ssh(1): add support for configuration tags to ssh(1).
    This adds a ssh_config(5) "Tag" directive and corresponding
    "Match tag" predicate that may be used to select blocks of
    configuration similar to the pf.conf(5) keywords of the same
    name.
  * ssh(1): add a "match localnetwork" predicate. This allows matching
    on the addresses of available network interfaces and may be used to
    vary the effective client configuration based on network location.
  * ssh(1), sshd(8), ssh-keygen(1): infrastructure support for KRL
    extensions.  This defines wire formats for optional KRL extensions
    and implements parsing of the new submessages. No actual extensions
    are supported at this point.
  * sshd(8): AuthorizedPrincipalsCommand and AuthorizedKeysCommand now
    accept two additional %-expansion sequences: %D which expands to
    the routing domain of the connected session and %C which expands
    to the addresses and port numbers for the source and destination
    of the connection.
  * ssh-keygen(1): increase the default work factor (rounds) for the
    bcrypt KDF used to derive symmetric encryption keys for passphrase
    protected key files by 50%.
  = Bugfixes
  * ssh-agent(1): improve isolation between loaded PKCS#11 modules
    by running separate ssh-pkcs11-helpers for each loaded provider.
  * ssh(1): make -f (fork after authentication) work correctly with
    multiplexed connections, including ControlPersist. bz3589 bz3589
  * ssh(1): make ConnectTimeout apply to multiplexing sockets and not
    just to network connections.
  * ssh-agent(1), ssh(1): improve defences against invalid PKCS#11
    modules being loaded by checking that the requested module
    contains the required symbol before loading it.
  * sshd(8): fix AuthorizedPrincipalsCommand when AuthorizedKeysCommand
    appears before it in sshd_config. Since OpenSSH 8.7 the
    AuthorizedPrincipalsCommand directive was incorrectly ignored in
    this situation. bz3574
  * sshd(8), ssh(1), ssh-keygen(1): remove vestigal support for KRL
    signatures When the KRL format was originally defined, it included
    support for signing of KRL objects. However, the code to sign KRLs
    and verify KRL signatues was never completed in OpenSSH. This
    release removes the partially-implemented code to verify KRLs.
    All OpenSSH tools now ignore KRL_SECTION_SIGNATURE sections in
    KRL files.
  * All: fix a number of memory leaks and unreachable/harmless integer
    overflows.
  * ssh-agent(1), ssh(1): don't truncate strings logged from PKCS#11
    modules; GHPR406
  * sshd(8), ssh(1): better validate CASignatureAlgorithms in
    ssh_config and sshd_config. Previously this directive would accept
    certificate algorithm names, but these were unusable in practice as
    OpenSSH does not support CA chains. bz3577
  * ssh(1): make `ssh -Q CASignatureAlgorithms` only list signature
    algorithms that are valid for CA signing. Previous behaviour was
    to list all signing algorithms, including certificate algorithms.
  * ssh-keyscan(1): gracefully handle systems where rlimits or the
    maximum number of open files is larger than INT_MAX; bz3581
  * ssh-keygen(1): fix "no comment" not showing on when running
    `ssh-keygen -l` on multiple keys where one has a comment and other
    following keys do not. bz3580
  * scp(1), sftp(1): adjust ftruncate() logic to handle servers that
    reorder requests. Previously, if the server reordered requests then
    the resultant file would be erroneously truncated.
  * ssh(1): don't incorrectly disable hostname canonicalization when
    CanonicalizeHostname=yes and ProxyJump was expicitly set to
    "none". bz3567
  * scp(1): when copying local-&gt;remote, check that the source file
    exists before opening an SFTP connection to the server. Based on
    GHPR#370
- Dropped patches:
  * cb4ed12f.patch - implemented upstream.
- Rebased patches:
  * openssh-7.7p1-fips.patch
  * openssh-7.8p1-role-mls.patch
  * openssh-8.0p1-gssapi-keyex.patch
- Add patches from obs:
  * Mon Mar  4 09:57:06 UTC 2024 - Pedro Monreal &lt;pmonreal@suse.com&gt;
- Add crypto-policies support [bsc#1211301]
  * Add patches:
  - openssh-9.6p1-crypto-policies.patch
  - openssh-9.6p1-crypto-policies-man.patch</changelog>
  <changelog author="opensuse@arnavion.dev" date="1712836800">- Fix duplicate loading of dropins. (boo#1222467)</changelog>
  <changelog author="alarrosa@suse.com" date="1712923200">- Make openssh-server recommend the openssh-server-config-rootlogin
  package in SLE in order to keep the same behaviour of previous
  SPs where the PermitRootLogin default was set to yes
  (bsc#1221005).
- Fix crypto-policies requirement to be set by openssh-server, not
  the config-rootlogin subpackage.
- Add back %config(noreplace) tag for more config files that were
  already set like this in previous SPs.</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- openssh-8.0p1-gssapi-keyex.patch: Added missing struct initializer,
  added missing parameter (bsc#1222840)</changelog>
  <changelog author="alarrosa@suse.com" date="1715601600">- Only for SLE15, restore the patch file removed in
  Thu Feb 18 13:54:44 UTC 2021 to restore the previous behaviour
  from SP5 of having root password login allowed by default
  (fixes bsc#1223486, related to bsc#1173067):
  * openssh-7.7p1-allow_root_password_login.patch
- Since the default value for this config option is now set to
  permit root to use password logins in SLE15, the
  openssh-server-config-rootlogin subpackage isn't useful there so
  we now create an openssh-server-config-disallow-rootlogin
  subpackage that sets the configuration the other way around
  than openssh-server-config-rootlogin.</changelog>
  <changelog author="alarrosa@suse.com" date="1715688000">- Add a warning in %post of openssh-clients, openssh-server and
  openssh-server-config-disallow-rootlogin to warn the user if
  the /etc/ssh/(ssh_config.d|sshd_config.d) directories are not
  being used (bsc#1223486).</changelog>
  <changelog author="alarrosa@suse.com" date="1719835200">- Add patch to fix a race condition in a signal handler by removing
  the async-signal-unsafe code (CVE-2024-6387, bsc#1226642):
  * fix-CVE-2024-6387.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720008000">- Add obsoletes for openssh-server-config-rootlogin since that
  package existed for a brief period of time during SLE 15 SP6/
  Leap 15.6 development but even if it was removed from the
  repositories before GM, some users might have it in their
  systems from having tried a beta/RC release (boo#1227350).
- Add #include &lt;stdlib.h&gt; in some files added by the ldap patch to
  fix build with gcc14 (boo#1225904).
  * openssh-7.7p1-ldap.patch
- Remove the recommendation for openssh-server-config-rootlogin
  from openssh-server. Since the default for that config option
  was changed in SLE it's not needed anymore in SLE nor in TW
  (boo#1224392).</changelog>
  <changelog author="alarrosa@suse.com" date="1720180800">- Add patch from upstream to fix proxy multiplexing mode:
  * 0001-upstream-fix-proxy-multiplexing-mode_-broken-when-keystroke.patch
- Add patch from upstream to restore correctly sigprocmask
  * 0001-upstream-correctly-restore-sigprocmask-around-ppoll.patch
- Add patch from upstream to fix a logic error in
  ObscureKeystrokeTiming that rendered this feature ineffective,
  allowing a passive observer to detect which network packets
  contained real keystrokes (bsc#1227318, CVE-2024-39894):
  * 0001-upstream-when-sending-ObscureKeystrokeTiming-chaff-packets_.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720612800">- Remove empty line at the end of sshd-sle.pamd (bsc#1227456)</changelog>
  <changelog author="alarrosa@suse.com" date="1728648000">- Add a patch to fix a regression introduced in 9.6 that makes X11
  forwarding very slow. Submitted to upstream in
  https://bugzilla.mindrot.org/show_bug.cgi?id=3655#c4 . Fixes
  bsc#1229449:
  * fix-x11-regression-bsc1229449.patch
- Add a openssl11 bcond to the spec file for the SLE12 case
  instead of checking suse_version in different parts.
- Move conditional patches to a number &gt;= 1000.
- Several spec file fixes so the package builds and can be
  installed in SLE 15 SP5 and SLE 12 SP5
- Drop most of openssh-6.6p1-keycat.patch (actually, it was just
  commented out). The keycat binary isn't really installed nor
  supported, so we can drop it, except for the code that is used
  by other SELinux patches, which is what I kept from that patch
  (boo#1229072).
- Add patch submitted to upstream to fix RFC4256 implementation
  so that keyboard-interactive authentication method can send
  instructions and sshd shows them to users even before a prompt
  is requested. This fixes MFA push notifications (boo#1229010).
  * 0001-auth-pam-Immediately-report-instructions-to-clients-and-fix-handling-in-ssh-client.patch
- Fix a dbus connection leaked in the logind patch that was
  missing a sd_bus_unref call (found by Matthias Gerstner):
  * logind_set_tty.patch
- Add a patch that fixes a small memory leak when parsing the
  subsystem configuration option:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1728907200">- Use %{with ...} instead of 0%{with ...}</changelog>
  <changelog author="alarrosa@suse.com" date="1739448000">- Fix a MitM attack against OpenSSH's VerifyHostKeyDNS-enabled
  client and a DoS attack against OpenSSH's client and server
  (bsc#1237040, CVE-2025-26465, bsc#1237041, CVE-2025-26466):
  * fix-CVE-2025-26465-and-CVE-2025-26466.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1739880000">- Fix ssh client segfault with GSSAPIKeyExchange=yes in ssh_kex2
  due to gssapi proposal not being correctly initialized
  (bsc#1236826). The problem was introduced in the rebase of
  the patch for 9.6p1:
  * openssh-8.0p1-gssapi-keyex.patch
- Rebase patch and apply it:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="hpj@suse.com" date="1746532800">- Added openssh-cve-2025-32728.patch (bsc#1241012, CVE-2025-32728).
  This fixes an upstream logic error handling the DisableForwarding
  option.</changelog>
  <changelog author="alarrosa@suse.com" date="1747137600">- Enable --with-logind to call the SetTTY dbus method in systemd.
  This allows "wall" to print messages in ssh ttys (bsc#1239671)
- Small fixes to unref the dbus session when any error occurs:
  * logind_set_tty.patch</changelog>
  <changelog author="hpj@suse.com" date="1748952000">- Add openssh-scp-umask-preserve-permissions.patch (bsc#1241667).</changelog>
</package>
<package pkgid="5ac964321261412d29d171f56fbd0a89d9ca88364b36dffed7f499545ea7c049" name="openssh-server" arch="x86_64">
  <version epoch="0" ver="9.6p1" rel="150600.6.34.1"/>
  <changelog author="alarrosa@suse.com" date="1712059200">- Use %config(noreplace) for sshd_config . In any case, it's
  recommended to drop a file in sshd_config.d instead of editing
  sshd_config (bsc#1221063)
- Add patches from obs package that were also in SP3/SP4/SP5:
  * Fri Nov  3 10:44:14 UTC 2023 - Johannes Segitz &lt;jsegitz@suse.com&gt;
  - Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712059201">- Rebase openssh-7.7p1-fips.patch (bsc#1221928)
  Remove OPENSSL_HAVE_EVPGCM-ifdef, which is no longer supported by upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1712577600">- Update to openssh 9.6p1:
  = Security
  * ssh(1), sshd(8): implement protocol extensions to thwart the
    so-called "Terrapin attack" discovered by Fabian Bäumer, Marcus
    Brinkmann and Jörg Schwenk. This attack allows a MITM to effect a
    limited break of the integrity of the early encrypted SSH transport
    protocol by sending extra messages prior to the commencement of
    encryption, and deleting an equal number of consecutive messages
    immediately after encryption starts. A peer SSH client/server
    would not be able to detect that messages were deleted
    (bsc#1217950, CVE-2023-48795).
  * ssh-agent(1): when adding PKCS#11-hosted private keys while
    specifying destination constraints, if the PKCS#11 token returned
    multiple keys then only the first key had the constraints applied.
    Use of regular private keys, FIDO tokens and unconstrained keys
    are unaffected.
  * ssh(1): if an invalid user or hostname that contained shell
    metacharacters was passed to ssh(1), and a ProxyCommand,
    LocalCommand directive or "match exec" predicate referenced the
    user or hostname via %u, %h or similar expansion token, then
    an attacker who could supply arbitrary user/hostnames to ssh(1)
    could potentially perform command injection depending on what
    quoting was present in the user-supplied ssh_config(5) directive
    (bsc#1218215, CVE-2023-51385).
  = Potentially incompatible changes
  * ssh(1), sshd(8): the RFC4254 connection/channels protocol provides
    a TCP-like window mechanism that limits the amount of data that
    can be sent without acceptance from the peer. In cases where this
    limit was exceeded by a non-conforming peer SSH implementation,
    ssh(1)/sshd(8) previously discarded the extra data. From OpenSSH
    9.6, ssh(1)/sshd(8) will now terminate the connection if a peer
    exceeds the window limit by more than a small grace factor. This
    change should have no effect of SSH implementations that follow
    the specification.
  = New features
  * ssh(1): add a %j token that expands to the configured ProxyJump
    hostname (or the empty string if this option is not being used)
    that can be used in a number of ssh_config(5) keywords. bz3610
  * ssh(1): add ChannelTimeout support to the client, mirroring the
    same option in the server and allowing ssh(1) to terminate
    quiescent channels.
  * ssh(1), sshd(8), ssh-add(1), ssh-keygen(1): add support for
    reading ED25519 private keys in PEM PKCS8 format. Previously
    only the OpenSSH private key format was supported.
  * ssh(1), sshd(8): introduce a protocol extension to allow
    renegotiation of acceptable signature algorithms for public key
    authentication after the server has learned the username being
    used for authentication. This allows varying sshd_config(5)
    PubkeyAcceptedAlgorithms in a "Match user" block.
  * ssh-add(1), ssh-agent(1): add an agent protocol extension to allow
    specifying certificates when loading PKCS#11 keys. This allows the
    use of certificates backed by PKCS#11 private keys in all OpenSSH
    tools that support ssh-agent(1). Previously only ssh(1) supported
    this use-case.
  = Bugfixes
  * ssh(1): when deciding whether to enable the keystroke timing
    obfuscation, enable it only if a channel with a TTY is active.
  * ssh(1): switch mainloop from poll(3) to ppoll(3) and mask signals
    before checking flags set in signal handler. Avoids potential
    race condition between signaling ssh to exit and polling. bz3531
  * ssh(1): when connecting to a destination with both the
    AddressFamily and CanonicalizeHostname directives in use,
    the AddressFamily directive could be ignored. bz5326
  * sftp(1): correct handling of the limits@openssh.com option when
    the server returned an unexpected message.
  * A number of fixes to the PuTTY and Dropbear regress/integration
    tests.
  * ssh(1): release GSS OIDs only at end of authentication, avoiding
    unnecessary init/cleanup cycles. bz2982
  * ssh_config(5): mention "none" is a valid argument to IdentityFile
    in the manual. bz3080
  * scp(1): improved debugging for paths from the server rejected for
    not matching the client's glob(3) pattern in old SCP/RCP protocol
    mode.
  * ssh-agent(1): refuse signing operations on destination-constrained
    keys if a previous session-bind operation has failed. This may
    prevent a fail-open situation in future if a user uses a mismatched
    ssh(1) client and ssh-agent(1) where the client supports a key type
    that the agent does not support.
- Update to openssh 9.5p1:
  = Potentially incompatible changes
  * ssh-keygen(1): generate Ed25519 keys by default. Ed25519 public keys
    are very convenient due to their small size. Ed25519 keys are
    specified in RFC 8709 and OpenSSH has supported them since version 6.5
    (January 2014).
  * sshd(8): the Subsystem directive now accurately preserves quoting of
    subsystem commands and arguments. This may change behaviour for exotic
    configurations, but the most common subsystem configuration
    (sftp-server) is unlikely to be affected.
  = New features
  * ssh(1): add keystroke timing obfuscation to the client. This attempts
    to hide inter-keystroke timings by sending interactive traffic at
    fixed intervals (default: every 20ms) when there is only a small
    amount of data being sent. It also sends fake "chaff" keystrokes for
    a random interval after the last real keystroke. These are
    controlled by a new ssh_config ObscureKeystrokeTiming keyword.
  * ssh(1), sshd(8): Introduce a transport-level ping facility. This adds
    a pair of SSH transport protocol messages SSH2_MSG_PING/PONG to
    implement a ping capability. These messages use numbers in the "local
    extensions" number space and are advertised using a "ping@openssh.com"
    ext-info message with a string version number of "0".
  * sshd(8): allow override of Subsystem directives in sshd Match blocks.
  = Bugfixes
  * scp(1): fix scp in SFTP mode recursive upload and download of
    directories that contain symlinks to other directories. In scp mode,
    the links would be followed, but in SFTP mode they were not. bz3611
  * ssh-keygen(1): handle cr+lf (instead of just cr) line endings in
    sshsig signature files.
  * ssh(1): interactive mode for ControlPersist sessions if they
    originally requested a tty.
  * sshd(8): make PerSourceMaxStartups first-match-wins
  * sshd(8): limit artificial login delay to a reasonable maximum (5s)
    and don't delay at all for the "none" authentication mechanism.
    bz3602
  * sshd(8): Log errors in kex_exchange_identification() with level
    verbose instead of error to reduce preauth log spam. All of those
    get logged with a more generic error message by sshpkt_fatal().
  * sshd(8): correct math for ClientAliveInterval that caused the probes
    to be sent less frequently than configured.
  * ssh(1): fix regression in OpenSSH 9.4 (mux.c r1.99) that caused
    multiplexed sessions to ignore SIGINT under some circumstances.
- Update to openssh 9.4p1:
  = Potentially incompatible changes
  * This release removes support for older versions of libcrypto.
    OpenSSH now requires LibreSSL &gt;= 3.1.0 or OpenSSL &gt;= 1.1.1.
    Note that these versions are already deprecated by their upstream
    vendors.
  * ssh-agent(1): PKCS#11 modules must now be specified by their full
    paths. Previously dlopen(3) could search for them in system
    library directories.
  = New features
  * ssh(1): allow forwarding Unix Domain sockets via ssh -W.
  * ssh(1): add support for configuration tags to ssh(1).
    This adds a ssh_config(5) "Tag" directive and corresponding
    "Match tag" predicate that may be used to select blocks of
    configuration similar to the pf.conf(5) keywords of the same
    name.
  * ssh(1): add a "match localnetwork" predicate. This allows matching
    on the addresses of available network interfaces and may be used to
    vary the effective client configuration based on network location.
  * ssh(1), sshd(8), ssh-keygen(1): infrastructure support for KRL
    extensions.  This defines wire formats for optional KRL extensions
    and implements parsing of the new submessages. No actual extensions
    are supported at this point.
  * sshd(8): AuthorizedPrincipalsCommand and AuthorizedKeysCommand now
    accept two additional %-expansion sequences: %D which expands to
    the routing domain of the connected session and %C which expands
    to the addresses and port numbers for the source and destination
    of the connection.
  * ssh-keygen(1): increase the default work factor (rounds) for the
    bcrypt KDF used to derive symmetric encryption keys for passphrase
    protected key files by 50%.
  = Bugfixes
  * ssh-agent(1): improve isolation between loaded PKCS#11 modules
    by running separate ssh-pkcs11-helpers for each loaded provider.
  * ssh(1): make -f (fork after authentication) work correctly with
    multiplexed connections, including ControlPersist. bz3589 bz3589
  * ssh(1): make ConnectTimeout apply to multiplexing sockets and not
    just to network connections.
  * ssh-agent(1), ssh(1): improve defences against invalid PKCS#11
    modules being loaded by checking that the requested module
    contains the required symbol before loading it.
  * sshd(8): fix AuthorizedPrincipalsCommand when AuthorizedKeysCommand
    appears before it in sshd_config. Since OpenSSH 8.7 the
    AuthorizedPrincipalsCommand directive was incorrectly ignored in
    this situation. bz3574
  * sshd(8), ssh(1), ssh-keygen(1): remove vestigal support for KRL
    signatures When the KRL format was originally defined, it included
    support for signing of KRL objects. However, the code to sign KRLs
    and verify KRL signatues was never completed in OpenSSH. This
    release removes the partially-implemented code to verify KRLs.
    All OpenSSH tools now ignore KRL_SECTION_SIGNATURE sections in
    KRL files.
  * All: fix a number of memory leaks and unreachable/harmless integer
    overflows.
  * ssh-agent(1), ssh(1): don't truncate strings logged from PKCS#11
    modules; GHPR406
  * sshd(8), ssh(1): better validate CASignatureAlgorithms in
    ssh_config and sshd_config. Previously this directive would accept
    certificate algorithm names, but these were unusable in practice as
    OpenSSH does not support CA chains. bz3577
  * ssh(1): make `ssh -Q CASignatureAlgorithms` only list signature
    algorithms that are valid for CA signing. Previous behaviour was
    to list all signing algorithms, including certificate algorithms.
  * ssh-keyscan(1): gracefully handle systems where rlimits or the
    maximum number of open files is larger than INT_MAX; bz3581
  * ssh-keygen(1): fix "no comment" not showing on when running
    `ssh-keygen -l` on multiple keys where one has a comment and other
    following keys do not. bz3580
  * scp(1), sftp(1): adjust ftruncate() logic to handle servers that
    reorder requests. Previously, if the server reordered requests then
    the resultant file would be erroneously truncated.
  * ssh(1): don't incorrectly disable hostname canonicalization when
    CanonicalizeHostname=yes and ProxyJump was expicitly set to
    "none". bz3567
  * scp(1): when copying local-&gt;remote, check that the source file
    exists before opening an SFTP connection to the server. Based on
    GHPR#370
- Dropped patches:
  * cb4ed12f.patch - implemented upstream.
- Rebased patches:
  * openssh-7.7p1-fips.patch
  * openssh-7.8p1-role-mls.patch
  * openssh-8.0p1-gssapi-keyex.patch
- Add patches from obs:
  * Mon Mar  4 09:57:06 UTC 2024 - Pedro Monreal &lt;pmonreal@suse.com&gt;
- Add crypto-policies support [bsc#1211301]
  * Add patches:
  - openssh-9.6p1-crypto-policies.patch
  - openssh-9.6p1-crypto-policies-man.patch</changelog>
  <changelog author="opensuse@arnavion.dev" date="1712836800">- Fix duplicate loading of dropins. (boo#1222467)</changelog>
  <changelog author="alarrosa@suse.com" date="1712923200">- Make openssh-server recommend the openssh-server-config-rootlogin
  package in SLE in order to keep the same behaviour of previous
  SPs where the PermitRootLogin default was set to yes
  (bsc#1221005).
- Fix crypto-policies requirement to be set by openssh-server, not
  the config-rootlogin subpackage.
- Add back %config(noreplace) tag for more config files that were
  already set like this in previous SPs.</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- openssh-8.0p1-gssapi-keyex.patch: Added missing struct initializer,
  added missing parameter (bsc#1222840)</changelog>
  <changelog author="alarrosa@suse.com" date="1715601600">- Only for SLE15, restore the patch file removed in
  Thu Feb 18 13:54:44 UTC 2021 to restore the previous behaviour
  from SP5 of having root password login allowed by default
  (fixes bsc#1223486, related to bsc#1173067):
  * openssh-7.7p1-allow_root_password_login.patch
- Since the default value for this config option is now set to
  permit root to use password logins in SLE15, the
  openssh-server-config-rootlogin subpackage isn't useful there so
  we now create an openssh-server-config-disallow-rootlogin
  subpackage that sets the configuration the other way around
  than openssh-server-config-rootlogin.</changelog>
  <changelog author="alarrosa@suse.com" date="1715688000">- Add a warning in %post of openssh-clients, openssh-server and
  openssh-server-config-disallow-rootlogin to warn the user if
  the /etc/ssh/(ssh_config.d|sshd_config.d) directories are not
  being used (bsc#1223486).</changelog>
  <changelog author="alarrosa@suse.com" date="1719835200">- Add patch to fix a race condition in a signal handler by removing
  the async-signal-unsafe code (CVE-2024-6387, bsc#1226642):
  * fix-CVE-2024-6387.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720008000">- Add obsoletes for openssh-server-config-rootlogin since that
  package existed for a brief period of time during SLE 15 SP6/
  Leap 15.6 development but even if it was removed from the
  repositories before GM, some users might have it in their
  systems from having tried a beta/RC release (boo#1227350).
- Add #include &lt;stdlib.h&gt; in some files added by the ldap patch to
  fix build with gcc14 (boo#1225904).
  * openssh-7.7p1-ldap.patch
- Remove the recommendation for openssh-server-config-rootlogin
  from openssh-server. Since the default for that config option
  was changed in SLE it's not needed anymore in SLE nor in TW
  (boo#1224392).</changelog>
  <changelog author="alarrosa@suse.com" date="1720180800">- Add patch from upstream to fix proxy multiplexing mode:
  * 0001-upstream-fix-proxy-multiplexing-mode_-broken-when-keystroke.patch
- Add patch from upstream to restore correctly sigprocmask
  * 0001-upstream-correctly-restore-sigprocmask-around-ppoll.patch
- Add patch from upstream to fix a logic error in
  ObscureKeystrokeTiming that rendered this feature ineffective,
  allowing a passive observer to detect which network packets
  contained real keystrokes (bsc#1227318, CVE-2024-39894):
  * 0001-upstream-when-sending-ObscureKeystrokeTiming-chaff-packets_.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720612800">- Remove empty line at the end of sshd-sle.pamd (bsc#1227456)</changelog>
  <changelog author="alarrosa@suse.com" date="1728648000">- Add a patch to fix a regression introduced in 9.6 that makes X11
  forwarding very slow. Submitted to upstream in
  https://bugzilla.mindrot.org/show_bug.cgi?id=3655#c4 . Fixes
  bsc#1229449:
  * fix-x11-regression-bsc1229449.patch
- Add a openssl11 bcond to the spec file for the SLE12 case
  instead of checking suse_version in different parts.
- Move conditional patches to a number &gt;= 1000.
- Several spec file fixes so the package builds and can be
  installed in SLE 15 SP5 and SLE 12 SP5
- Drop most of openssh-6.6p1-keycat.patch (actually, it was just
  commented out). The keycat binary isn't really installed nor
  supported, so we can drop it, except for the code that is used
  by other SELinux patches, which is what I kept from that patch
  (boo#1229072).
- Add patch submitted to upstream to fix RFC4256 implementation
  so that keyboard-interactive authentication method can send
  instructions and sshd shows them to users even before a prompt
  is requested. This fixes MFA push notifications (boo#1229010).
  * 0001-auth-pam-Immediately-report-instructions-to-clients-and-fix-handling-in-ssh-client.patch
- Fix a dbus connection leaked in the logind patch that was
  missing a sd_bus_unref call (found by Matthias Gerstner):
  * logind_set_tty.patch
- Add a patch that fixes a small memory leak when parsing the
  subsystem configuration option:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1728907200">- Use %{with ...} instead of 0%{with ...}</changelog>
  <changelog author="alarrosa@suse.com" date="1739448000">- Fix a MitM attack against OpenSSH's VerifyHostKeyDNS-enabled
  client and a DoS attack against OpenSSH's client and server
  (bsc#1237040, CVE-2025-26465, bsc#1237041, CVE-2025-26466):
  * fix-CVE-2025-26465-and-CVE-2025-26466.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1739880000">- Fix ssh client segfault with GSSAPIKeyExchange=yes in ssh_kex2
  due to gssapi proposal not being correctly initialized
  (bsc#1236826). The problem was introduced in the rebase of
  the patch for 9.6p1:
  * openssh-8.0p1-gssapi-keyex.patch
- Rebase patch and apply it:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="hpj@suse.com" date="1746532800">- Added openssh-cve-2025-32728.patch (bsc#1241012, CVE-2025-32728).
  This fixes an upstream logic error handling the DisableForwarding
  option.</changelog>
  <changelog author="alarrosa@suse.com" date="1747137600">- Enable --with-logind to call the SetTTY dbus method in systemd.
  This allows "wall" to print messages in ssh ttys (bsc#1239671)
- Small fixes to unref the dbus session when any error occurs:
  * logind_set_tty.patch</changelog>
  <changelog author="hpj@suse.com" date="1748952000">- Add openssh-scp-umask-preserve-permissions.patch (bsc#1241667).</changelog>
  <changelog author="hpj@suse.com" date="1762516800">- Add openssh-cve-2025-61984-username-validation.patch
  (bsc#1251198, CVE-2025-61984).
- Add openssh-cve-2025-61985-nul-url-encode.patch
  (bsc#1251199, CVE-2025-61985).</changelog>
</package>
<package pkgid="8ff5f098c38abd518515e0fff9f065298c8b59fee8d7f2c56e2398e3296acf80" name="openssh-server" arch="x86_64">
  <version epoch="0" ver="9.6p1" rel="150600.6.37.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1712059200">- Rebase openssh-7.7p1-fips.patch (bsc#1221928)
  Remove OPENSSL_HAVE_EVPGCM-ifdef, which is no longer supported by upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1712577600">- Update to openssh 9.6p1:
  = Security
  * ssh(1), sshd(8): implement protocol extensions to thwart the
    so-called "Terrapin attack" discovered by Fabian Bäumer, Marcus
    Brinkmann and Jörg Schwenk. This attack allows a MITM to effect a
    limited break of the integrity of the early encrypted SSH transport
    protocol by sending extra messages prior to the commencement of
    encryption, and deleting an equal number of consecutive messages
    immediately after encryption starts. A peer SSH client/server
    would not be able to detect that messages were deleted
    (bsc#1217950, CVE-2023-48795).
  * ssh-agent(1): when adding PKCS#11-hosted private keys while
    specifying destination constraints, if the PKCS#11 token returned
    multiple keys then only the first key had the constraints applied.
    Use of regular private keys, FIDO tokens and unconstrained keys
    are unaffected.
  * ssh(1): if an invalid user or hostname that contained shell
    metacharacters was passed to ssh(1), and a ProxyCommand,
    LocalCommand directive or "match exec" predicate referenced the
    user or hostname via %u, %h or similar expansion token, then
    an attacker who could supply arbitrary user/hostnames to ssh(1)
    could potentially perform command injection depending on what
    quoting was present in the user-supplied ssh_config(5) directive
    (bsc#1218215, CVE-2023-51385).
  = Potentially incompatible changes
  * ssh(1), sshd(8): the RFC4254 connection/channels protocol provides
    a TCP-like window mechanism that limits the amount of data that
    can be sent without acceptance from the peer. In cases where this
    limit was exceeded by a non-conforming peer SSH implementation,
    ssh(1)/sshd(8) previously discarded the extra data. From OpenSSH
    9.6, ssh(1)/sshd(8) will now terminate the connection if a peer
    exceeds the window limit by more than a small grace factor. This
    change should have no effect of SSH implementations that follow
    the specification.
  = New features
  * ssh(1): add a %j token that expands to the configured ProxyJump
    hostname (or the empty string if this option is not being used)
    that can be used in a number of ssh_config(5) keywords. bz3610
  * ssh(1): add ChannelTimeout support to the client, mirroring the
    same option in the server and allowing ssh(1) to terminate
    quiescent channels.
  * ssh(1), sshd(8), ssh-add(1), ssh-keygen(1): add support for
    reading ED25519 private keys in PEM PKCS8 format. Previously
    only the OpenSSH private key format was supported.
  * ssh(1), sshd(8): introduce a protocol extension to allow
    renegotiation of acceptable signature algorithms for public key
    authentication after the server has learned the username being
    used for authentication. This allows varying sshd_config(5)
    PubkeyAcceptedAlgorithms in a "Match user" block.
  * ssh-add(1), ssh-agent(1): add an agent protocol extension to allow
    specifying certificates when loading PKCS#11 keys. This allows the
    use of certificates backed by PKCS#11 private keys in all OpenSSH
    tools that support ssh-agent(1). Previously only ssh(1) supported
    this use-case.
  = Bugfixes
  * ssh(1): when deciding whether to enable the keystroke timing
    obfuscation, enable it only if a channel with a TTY is active.
  * ssh(1): switch mainloop from poll(3) to ppoll(3) and mask signals
    before checking flags set in signal handler. Avoids potential
    race condition between signaling ssh to exit and polling. bz3531
  * ssh(1): when connecting to a destination with both the
    AddressFamily and CanonicalizeHostname directives in use,
    the AddressFamily directive could be ignored. bz5326
  * sftp(1): correct handling of the limits@openssh.com option when
    the server returned an unexpected message.
  * A number of fixes to the PuTTY and Dropbear regress/integration
    tests.
  * ssh(1): release GSS OIDs only at end of authentication, avoiding
    unnecessary init/cleanup cycles. bz2982
  * ssh_config(5): mention "none" is a valid argument to IdentityFile
    in the manual. bz3080
  * scp(1): improved debugging for paths from the server rejected for
    not matching the client's glob(3) pattern in old SCP/RCP protocol
    mode.
  * ssh-agent(1): refuse signing operations on destination-constrained
    keys if a previous session-bind operation has failed. This may
    prevent a fail-open situation in future if a user uses a mismatched
    ssh(1) client and ssh-agent(1) where the client supports a key type
    that the agent does not support.
- Update to openssh 9.5p1:
  = Potentially incompatible changes
  * ssh-keygen(1): generate Ed25519 keys by default. Ed25519 public keys
    are very convenient due to their small size. Ed25519 keys are
    specified in RFC 8709 and OpenSSH has supported them since version 6.5
    (January 2014).
  * sshd(8): the Subsystem directive now accurately preserves quoting of
    subsystem commands and arguments. This may change behaviour for exotic
    configurations, but the most common subsystem configuration
    (sftp-server) is unlikely to be affected.
  = New features
  * ssh(1): add keystroke timing obfuscation to the client. This attempts
    to hide inter-keystroke timings by sending interactive traffic at
    fixed intervals (default: every 20ms) when there is only a small
    amount of data being sent. It also sends fake "chaff" keystrokes for
    a random interval after the last real keystroke. These are
    controlled by a new ssh_config ObscureKeystrokeTiming keyword.
  * ssh(1), sshd(8): Introduce a transport-level ping facility. This adds
    a pair of SSH transport protocol messages SSH2_MSG_PING/PONG to
    implement a ping capability. These messages use numbers in the "local
    extensions" number space and are advertised using a "ping@openssh.com"
    ext-info message with a string version number of "0".
  * sshd(8): allow override of Subsystem directives in sshd Match blocks.
  = Bugfixes
  * scp(1): fix scp in SFTP mode recursive upload and download of
    directories that contain symlinks to other directories. In scp mode,
    the links would be followed, but in SFTP mode they were not. bz3611
  * ssh-keygen(1): handle cr+lf (instead of just cr) line endings in
    sshsig signature files.
  * ssh(1): interactive mode for ControlPersist sessions if they
    originally requested a tty.
  * sshd(8): make PerSourceMaxStartups first-match-wins
  * sshd(8): limit artificial login delay to a reasonable maximum (5s)
    and don't delay at all for the "none" authentication mechanism.
    bz3602
  * sshd(8): Log errors in kex_exchange_identification() with level
    verbose instead of error to reduce preauth log spam. All of those
    get logged with a more generic error message by sshpkt_fatal().
  * sshd(8): correct math for ClientAliveInterval that caused the probes
    to be sent less frequently than configured.
  * ssh(1): fix regression in OpenSSH 9.4 (mux.c r1.99) that caused
    multiplexed sessions to ignore SIGINT under some circumstances.
- Update to openssh 9.4p1:
  = Potentially incompatible changes
  * This release removes support for older versions of libcrypto.
    OpenSSH now requires LibreSSL &gt;= 3.1.0 or OpenSSL &gt;= 1.1.1.
    Note that these versions are already deprecated by their upstream
    vendors.
  * ssh-agent(1): PKCS#11 modules must now be specified by their full
    paths. Previously dlopen(3) could search for them in system
    library directories.
  = New features
  * ssh(1): allow forwarding Unix Domain sockets via ssh -W.
  * ssh(1): add support for configuration tags to ssh(1).
    This adds a ssh_config(5) "Tag" directive and corresponding
    "Match tag" predicate that may be used to select blocks of
    configuration similar to the pf.conf(5) keywords of the same
    name.
  * ssh(1): add a "match localnetwork" predicate. This allows matching
    on the addresses of available network interfaces and may be used to
    vary the effective client configuration based on network location.
  * ssh(1), sshd(8), ssh-keygen(1): infrastructure support for KRL
    extensions.  This defines wire formats for optional KRL extensions
    and implements parsing of the new submessages. No actual extensions
    are supported at this point.
  * sshd(8): AuthorizedPrincipalsCommand and AuthorizedKeysCommand now
    accept two additional %-expansion sequences: %D which expands to
    the routing domain of the connected session and %C which expands
    to the addresses and port numbers for the source and destination
    of the connection.
  * ssh-keygen(1): increase the default work factor (rounds) for the
    bcrypt KDF used to derive symmetric encryption keys for passphrase
    protected key files by 50%.
  = Bugfixes
  * ssh-agent(1): improve isolation between loaded PKCS#11 modules
    by running separate ssh-pkcs11-helpers for each loaded provider.
  * ssh(1): make -f (fork after authentication) work correctly with
    multiplexed connections, including ControlPersist. bz3589 bz3589
  * ssh(1): make ConnectTimeout apply to multiplexing sockets and not
    just to network connections.
  * ssh-agent(1), ssh(1): improve defences against invalid PKCS#11
    modules being loaded by checking that the requested module
    contains the required symbol before loading it.
  * sshd(8): fix AuthorizedPrincipalsCommand when AuthorizedKeysCommand
    appears before it in sshd_config. Since OpenSSH 8.7 the
    AuthorizedPrincipalsCommand directive was incorrectly ignored in
    this situation. bz3574
  * sshd(8), ssh(1), ssh-keygen(1): remove vestigal support for KRL
    signatures When the KRL format was originally defined, it included
    support for signing of KRL objects. However, the code to sign KRLs
    and verify KRL signatues was never completed in OpenSSH. This
    release removes the partially-implemented code to verify KRLs.
    All OpenSSH tools now ignore KRL_SECTION_SIGNATURE sections in
    KRL files.
  * All: fix a number of memory leaks and unreachable/harmless integer
    overflows.
  * ssh-agent(1), ssh(1): don't truncate strings logged from PKCS#11
    modules; GHPR406
  * sshd(8), ssh(1): better validate CASignatureAlgorithms in
    ssh_config and sshd_config. Previously this directive would accept
    certificate algorithm names, but these were unusable in practice as
    OpenSSH does not support CA chains. bz3577
  * ssh(1): make `ssh -Q CASignatureAlgorithms` only list signature
    algorithms that are valid for CA signing. Previous behaviour was
    to list all signing algorithms, including certificate algorithms.
  * ssh-keyscan(1): gracefully handle systems where rlimits or the
    maximum number of open files is larger than INT_MAX; bz3581
  * ssh-keygen(1): fix "no comment" not showing on when running
    `ssh-keygen -l` on multiple keys where one has a comment and other
    following keys do not. bz3580
  * scp(1), sftp(1): adjust ftruncate() logic to handle servers that
    reorder requests. Previously, if the server reordered requests then
    the resultant file would be erroneously truncated.
  * ssh(1): don't incorrectly disable hostname canonicalization when
    CanonicalizeHostname=yes and ProxyJump was expicitly set to
    "none". bz3567
  * scp(1): when copying local-&gt;remote, check that the source file
    exists before opening an SFTP connection to the server. Based on
    GHPR#370
- Dropped patches:
  * cb4ed12f.patch - implemented upstream.
- Rebased patches:
  * openssh-7.7p1-fips.patch
  * openssh-7.8p1-role-mls.patch
  * openssh-8.0p1-gssapi-keyex.patch
- Add patches from obs:
  * Mon Mar  4 09:57:06 UTC 2024 - Pedro Monreal &lt;pmonreal@suse.com&gt;
- Add crypto-policies support [bsc#1211301]
  * Add patches:
  - openssh-9.6p1-crypto-policies.patch
  - openssh-9.6p1-crypto-policies-man.patch</changelog>
  <changelog author="opensuse@arnavion.dev" date="1712836800">- Fix duplicate loading of dropins. (boo#1222467)</changelog>
  <changelog author="alarrosa@suse.com" date="1712923200">- Make openssh-server recommend the openssh-server-config-rootlogin
  package in SLE in order to keep the same behaviour of previous
  SPs where the PermitRootLogin default was set to yes
  (bsc#1221005).
- Fix crypto-policies requirement to be set by openssh-server, not
  the config-rootlogin subpackage.
- Add back %config(noreplace) tag for more config files that were
  already set like this in previous SPs.</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- openssh-8.0p1-gssapi-keyex.patch: Added missing struct initializer,
  added missing parameter (bsc#1222840)</changelog>
  <changelog author="alarrosa@suse.com" date="1715601600">- Only for SLE15, restore the patch file removed in
  Thu Feb 18 13:54:44 UTC 2021 to restore the previous behaviour
  from SP5 of having root password login allowed by default
  (fixes bsc#1223486, related to bsc#1173067):
  * openssh-7.7p1-allow_root_password_login.patch
- Since the default value for this config option is now set to
  permit root to use password logins in SLE15, the
  openssh-server-config-rootlogin subpackage isn't useful there so
  we now create an openssh-server-config-disallow-rootlogin
  subpackage that sets the configuration the other way around
  than openssh-server-config-rootlogin.</changelog>
  <changelog author="alarrosa@suse.com" date="1715688000">- Add a warning in %post of openssh-clients, openssh-server and
  openssh-server-config-disallow-rootlogin to warn the user if
  the /etc/ssh/(ssh_config.d|sshd_config.d) directories are not
  being used (bsc#1223486).</changelog>
  <changelog author="alarrosa@suse.com" date="1719835200">- Add patch to fix a race condition in a signal handler by removing
  the async-signal-unsafe code (CVE-2024-6387, bsc#1226642):
  * fix-CVE-2024-6387.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720008000">- Add obsoletes for openssh-server-config-rootlogin since that
  package existed for a brief period of time during SLE 15 SP6/
  Leap 15.6 development but even if it was removed from the
  repositories before GM, some users might have it in their
  systems from having tried a beta/RC release (boo#1227350).
- Add #include &lt;stdlib.h&gt; in some files added by the ldap patch to
  fix build with gcc14 (boo#1225904).
  * openssh-7.7p1-ldap.patch
- Remove the recommendation for openssh-server-config-rootlogin
  from openssh-server. Since the default for that config option
  was changed in SLE it's not needed anymore in SLE nor in TW
  (boo#1224392).</changelog>
  <changelog author="alarrosa@suse.com" date="1720180800">- Add patch from upstream to fix proxy multiplexing mode:
  * 0001-upstream-fix-proxy-multiplexing-mode_-broken-when-keystroke.patch
- Add patch from upstream to restore correctly sigprocmask
  * 0001-upstream-correctly-restore-sigprocmask-around-ppoll.patch
- Add patch from upstream to fix a logic error in
  ObscureKeystrokeTiming that rendered this feature ineffective,
  allowing a passive observer to detect which network packets
  contained real keystrokes (bsc#1227318, CVE-2024-39894):
  * 0001-upstream-when-sending-ObscureKeystrokeTiming-chaff-packets_.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720612800">- Remove empty line at the end of sshd-sle.pamd (bsc#1227456)</changelog>
  <changelog author="alarrosa@suse.com" date="1728648000">- Add a patch to fix a regression introduced in 9.6 that makes X11
  forwarding very slow. Submitted to upstream in
  https://bugzilla.mindrot.org/show_bug.cgi?id=3655#c4 . Fixes
  bsc#1229449:
  * fix-x11-regression-bsc1229449.patch
- Add a openssl11 bcond to the spec file for the SLE12 case
  instead of checking suse_version in different parts.
- Move conditional patches to a number &gt;= 1000.
- Several spec file fixes so the package builds and can be
  installed in SLE 15 SP5 and SLE 12 SP5
- Drop most of openssh-6.6p1-keycat.patch (actually, it was just
  commented out). The keycat binary isn't really installed nor
  supported, so we can drop it, except for the code that is used
  by other SELinux patches, which is what I kept from that patch
  (boo#1229072).
- Add patch submitted to upstream to fix RFC4256 implementation
  so that keyboard-interactive authentication method can send
  instructions and sshd shows them to users even before a prompt
  is requested. This fixes MFA push notifications (boo#1229010).
  * 0001-auth-pam-Immediately-report-instructions-to-clients-and-fix-handling-in-ssh-client.patch
- Fix a dbus connection leaked in the logind patch that was
  missing a sd_bus_unref call (found by Matthias Gerstner):
  * logind_set_tty.patch
- Add a patch that fixes a small memory leak when parsing the
  subsystem configuration option:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1728907200">- Use %{with ...} instead of 0%{with ...}</changelog>
  <changelog author="alarrosa@suse.com" date="1739448000">- Fix a MitM attack against OpenSSH's VerifyHostKeyDNS-enabled
  client and a DoS attack against OpenSSH's client and server
  (bsc#1237040, CVE-2025-26465, bsc#1237041, CVE-2025-26466):
  * fix-CVE-2025-26465-and-CVE-2025-26466.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1739880000">- Fix ssh client segfault with GSSAPIKeyExchange=yes in ssh_kex2
  due to gssapi proposal not being correctly initialized
  (bsc#1236826). The problem was introduced in the rebase of
  the patch for 9.6p1:
  * openssh-8.0p1-gssapi-keyex.patch
- Rebase patch and apply it:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="hpj@suse.com" date="1746532800">- Added openssh-cve-2025-32728.patch (bsc#1241012, CVE-2025-32728).
  This fixes an upstream logic error handling the DisableForwarding
  option.</changelog>
  <changelog author="alarrosa@suse.com" date="1747137600">- Enable --with-logind to call the SetTTY dbus method in systemd.
  This allows "wall" to print messages in ssh ttys (bsc#1239671)
- Small fixes to unref the dbus session when any error occurs:
  * logind_set_tty.patch</changelog>
  <changelog author="hpj@suse.com" date="1748952000">- Add openssh-scp-umask-preserve-permissions.patch (bsc#1241667).</changelog>
  <changelog author="hpj@suse.com" date="1762516800">- Add openssh-cve-2025-61984-username-validation.patch
  (bsc#1251198, CVE-2025-61984).
- Add openssh-cve-2025-61985-nul-url-encode.patch
  (bsc#1251199, CVE-2025-61985).</changelog>
  <changelog author="hpj@suse.com" date="1778241600">- Added openssh-cve-2026-35385-scp-setuid-modes.patch (bsc#1261427),
  ensuring setuid bits default to being masked out by scp.
- Added openssh-cve-2026-35414-mishandled-ca-commas.patch
  (bsc#1261430), fixing mishandling of comma characters in CA in
  certain situations.</changelog>
</package>
<package pkgid="6d8074d0b09034bd386417594885477cca12fa210b885e2ede4934ca72c7b6c9" name="openssh-server-config-disallow-rootlogin" arch="x86_64">
  <version epoch="0" ver="9.6p1" rel="150600.6.26.1"/>
  <changelog author="hpj@suse.com" date="1700827200">- Merge updates from openSUSE. Existing patches were rebased.
- Remove openssh-7.6p1-audit_race_condition.patch: Merged with
  audit patch.
- Remove openssh-CVE-2021-28041-agent-double-free.patch: Fixed
  upstream.
- Remove openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch:
  Fixed upstream.
- Remove openssh-CVE-2023-38408-PKCS11-execution.patch: Fixed
  upstream.
- Add cb4ed12f.patch from upstream, allowing newer versions of
  zlib to be used.
- Add logind_set_tty.patch by Thorsten Kukuk. This informs
  systemd-logind of the login TTY and prevents having to parse utmp,
  which is deprecated by glibc.</changelog>
  <changelog author="alarrosa@suse.com" date="1710244800">- Uncomment %sysuser_requires in openssh-server which was commented
  by mistake and is needed by the pre script installed with
  %sysusers_generate_pre (bsc#1220802).</changelog>
  <changelog author="alarrosa@suse.com" date="1712059200">- Use %config(noreplace) for sshd_config . In any case, it's
  recommended to drop a file in sshd_config.d instead of editing
  sshd_config (bsc#1221063)
- Add patches from obs package that were also in SP3/SP4/SP5:
  * Fri Nov  3 10:44:14 UTC 2023 - Johannes Segitz &lt;jsegitz@suse.com&gt;
  - Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712059201">- Rebase openssh-7.7p1-fips.patch (bsc#1221928)
  Remove OPENSSL_HAVE_EVPGCM-ifdef, which is no longer supported by upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1712577600">- Update to openssh 9.6p1:
  = Security
  * ssh(1), sshd(8): implement protocol extensions to thwart the
    so-called "Terrapin attack" discovered by Fabian Bäumer, Marcus
    Brinkmann and Jörg Schwenk. This attack allows a MITM to effect a
    limited break of the integrity of the early encrypted SSH transport
    protocol by sending extra messages prior to the commencement of
    encryption, and deleting an equal number of consecutive messages
    immediately after encryption starts. A peer SSH client/server
    would not be able to detect that messages were deleted
    (bsc#1217950, CVE-2023-48795).
  * ssh-agent(1): when adding PKCS#11-hosted private keys while
    specifying destination constraints, if the PKCS#11 token returned
    multiple keys then only the first key had the constraints applied.
    Use of regular private keys, FIDO tokens and unconstrained keys
    are unaffected.
  * ssh(1): if an invalid user or hostname that contained shell
    metacharacters was passed to ssh(1), and a ProxyCommand,
    LocalCommand directive or "match exec" predicate referenced the
    user or hostname via %u, %h or similar expansion token, then
    an attacker who could supply arbitrary user/hostnames to ssh(1)
    could potentially perform command injection depending on what
    quoting was present in the user-supplied ssh_config(5) directive
    (bsc#1218215, CVE-2023-51385).
  = Potentially incompatible changes
  * ssh(1), sshd(8): the RFC4254 connection/channels protocol provides
    a TCP-like window mechanism that limits the amount of data that
    can be sent without acceptance from the peer. In cases where this
    limit was exceeded by a non-conforming peer SSH implementation,
    ssh(1)/sshd(8) previously discarded the extra data. From OpenSSH
    9.6, ssh(1)/sshd(8) will now terminate the connection if a peer
    exceeds the window limit by more than a small grace factor. This
    change should have no effect of SSH implementations that follow
    the specification.
  = New features
  * ssh(1): add a %j token that expands to the configured ProxyJump
    hostname (or the empty string if this option is not being used)
    that can be used in a number of ssh_config(5) keywords. bz3610
  * ssh(1): add ChannelTimeout support to the client, mirroring the
    same option in the server and allowing ssh(1) to terminate
    quiescent channels.
  * ssh(1), sshd(8), ssh-add(1), ssh-keygen(1): add support for
    reading ED25519 private keys in PEM PKCS8 format. Previously
    only the OpenSSH private key format was supported.
  * ssh(1), sshd(8): introduce a protocol extension to allow
    renegotiation of acceptable signature algorithms for public key
    authentication after the server has learned the username being
    used for authentication. This allows varying sshd_config(5)
    PubkeyAcceptedAlgorithms in a "Match user" block.
  * ssh-add(1), ssh-agent(1): add an agent protocol extension to allow
    specifying certificates when loading PKCS#11 keys. This allows the
    use of certificates backed by PKCS#11 private keys in all OpenSSH
    tools that support ssh-agent(1). Previously only ssh(1) supported
    this use-case.
  = Bugfixes
  * ssh(1): when deciding whether to enable the keystroke timing
    obfuscation, enable it only if a channel with a TTY is active.
  * ssh(1): switch mainloop from poll(3) to ppoll(3) and mask signals
    before checking flags set in signal handler. Avoids potential
    race condition between signaling ssh to exit and polling. bz3531
  * ssh(1): when connecting to a destination with both the
    AddressFamily and CanonicalizeHostname directives in use,
    the AddressFamily directive could be ignored. bz5326
  * sftp(1): correct handling of the limits@openssh.com option when
    the server returned an unexpected message.
  * A number of fixes to the PuTTY and Dropbear regress/integration
    tests.
  * ssh(1): release GSS OIDs only at end of authentication, avoiding
    unnecessary init/cleanup cycles. bz2982
  * ssh_config(5): mention "none" is a valid argument to IdentityFile
    in the manual. bz3080
  * scp(1): improved debugging for paths from the server rejected for
    not matching the client's glob(3) pattern in old SCP/RCP protocol
    mode.
  * ssh-agent(1): refuse signing operations on destination-constrained
    keys if a previous session-bind operation has failed. This may
    prevent a fail-open situation in future if a user uses a mismatched
    ssh(1) client and ssh-agent(1) where the client supports a key type
    that the agent does not support.
- Update to openssh 9.5p1:
  = Potentially incompatible changes
  * ssh-keygen(1): generate Ed25519 keys by default. Ed25519 public keys
    are very convenient due to their small size. Ed25519 keys are
    specified in RFC 8709 and OpenSSH has supported them since version 6.5
    (January 2014).
  * sshd(8): the Subsystem directive now accurately preserves quoting of
    subsystem commands and arguments. This may change behaviour for exotic
    configurations, but the most common subsystem configuration
    (sftp-server) is unlikely to be affected.
  = New features
  * ssh(1): add keystroke timing obfuscation to the client. This attempts
    to hide inter-keystroke timings by sending interactive traffic at
    fixed intervals (default: every 20ms) when there is only a small
    amount of data being sent. It also sends fake "chaff" keystrokes for
    a random interval after the last real keystroke. These are
    controlled by a new ssh_config ObscureKeystrokeTiming keyword.
  * ssh(1), sshd(8): Introduce a transport-level ping facility. This adds
    a pair of SSH transport protocol messages SSH2_MSG_PING/PONG to
    implement a ping capability. These messages use numbers in the "local
    extensions" number space and are advertised using a "ping@openssh.com"
    ext-info message with a string version number of "0".
  * sshd(8): allow override of Subsystem directives in sshd Match blocks.
  = Bugfixes
  * scp(1): fix scp in SFTP mode recursive upload and download of
    directories that contain symlinks to other directories. In scp mode,
    the links would be followed, but in SFTP mode they were not. bz3611
  * ssh-keygen(1): handle cr+lf (instead of just cr) line endings in
    sshsig signature files.
  * ssh(1): interactive mode for ControlPersist sessions if they
    originally requested a tty.
  * sshd(8): make PerSourceMaxStartups first-match-wins
  * sshd(8): limit artificial login delay to a reasonable maximum (5s)
    and don't delay at all for the "none" authentication mechanism.
    bz3602
  * sshd(8): Log errors in kex_exchange_identification() with level
    verbose instead of error to reduce preauth log spam. All of those
    get logged with a more generic error message by sshpkt_fatal().
  * sshd(8): correct math for ClientAliveInterval that caused the probes
    to be sent less frequently than configured.
  * ssh(1): fix regression in OpenSSH 9.4 (mux.c r1.99) that caused
    multiplexed sessions to ignore SIGINT under some circumstances.
- Update to openssh 9.4p1:
  = Potentially incompatible changes
  * This release removes support for older versions of libcrypto.
    OpenSSH now requires LibreSSL &gt;= 3.1.0 or OpenSSL &gt;= 1.1.1.
    Note that these versions are already deprecated by their upstream
    vendors.
  * ssh-agent(1): PKCS#11 modules must now be specified by their full
    paths. Previously dlopen(3) could search for them in system
    library directories.
  = New features
  * ssh(1): allow forwarding Unix Domain sockets via ssh -W.
  * ssh(1): add support for configuration tags to ssh(1).
    This adds a ssh_config(5) "Tag" directive and corresponding
    "Match tag" predicate that may be used to select blocks of
    configuration similar to the pf.conf(5) keywords of the same
    name.
  * ssh(1): add a "match localnetwork" predicate. This allows matching
    on the addresses of available network interfaces and may be used to
    vary the effective client configuration based on network location.
  * ssh(1), sshd(8), ssh-keygen(1): infrastructure support for KRL
    extensions.  This defines wire formats for optional KRL extensions
    and implements parsing of the new submessages. No actual extensions
    are supported at this point.
  * sshd(8): AuthorizedPrincipalsCommand and AuthorizedKeysCommand now
    accept two additional %-expansion sequences: %D which expands to
    the routing domain of the connected session and %C which expands
    to the addresses and port numbers for the source and destination
    of the connection.
  * ssh-keygen(1): increase the default work factor (rounds) for the
    bcrypt KDF used to derive symmetric encryption keys for passphrase
    protected key files by 50%.
  = Bugfixes
  * ssh-agent(1): improve isolation between loaded PKCS#11 modules
    by running separate ssh-pkcs11-helpers for each loaded provider.
  * ssh(1): make -f (fork after authentication) work correctly with
    multiplexed connections, including ControlPersist. bz3589 bz3589
  * ssh(1): make ConnectTimeout apply to multiplexing sockets and not
    just to network connections.
  * ssh-agent(1), ssh(1): improve defences against invalid PKCS#11
    modules being loaded by checking that the requested module
    contains the required symbol before loading it.
  * sshd(8): fix AuthorizedPrincipalsCommand when AuthorizedKeysCommand
    appears before it in sshd_config. Since OpenSSH 8.7 the
    AuthorizedPrincipalsCommand directive was incorrectly ignored in
    this situation. bz3574
  * sshd(8), ssh(1), ssh-keygen(1): remove vestigal support for KRL
    signatures When the KRL format was originally defined, it included
    support for signing of KRL objects. However, the code to sign KRLs
    and verify KRL signatues was never completed in OpenSSH. This
    release removes the partially-implemented code to verify KRLs.
    All OpenSSH tools now ignore KRL_SECTION_SIGNATURE sections in
    KRL files.
  * All: fix a number of memory leaks and unreachable/harmless integer
    overflows.
  * ssh-agent(1), ssh(1): don't truncate strings logged from PKCS#11
    modules; GHPR406
  * sshd(8), ssh(1): better validate CASignatureAlgorithms in
    ssh_config and sshd_config. Previously this directive would accept
    certificate algorithm names, but these were unusable in practice as
    OpenSSH does not support CA chains. bz3577
  * ssh(1): make `ssh -Q CASignatureAlgorithms` only list signature
    algorithms that are valid for CA signing. Previous behaviour was
    to list all signing algorithms, including certificate algorithms.
  * ssh-keyscan(1): gracefully handle systems where rlimits or the
    maximum number of open files is larger than INT_MAX; bz3581
  * ssh-keygen(1): fix "no comment" not showing on when running
    `ssh-keygen -l` on multiple keys where one has a comment and other
    following keys do not. bz3580
  * scp(1), sftp(1): adjust ftruncate() logic to handle servers that
    reorder requests. Previously, if the server reordered requests then
    the resultant file would be erroneously truncated.
  * ssh(1): don't incorrectly disable hostname canonicalization when
    CanonicalizeHostname=yes and ProxyJump was expicitly set to
    "none". bz3567
  * scp(1): when copying local-&gt;remote, check that the source file
    exists before opening an SFTP connection to the server. Based on
    GHPR#370
- Dropped patches:
  * cb4ed12f.patch - implemented upstream.
- Rebased patches:
  * openssh-7.7p1-fips.patch
  * openssh-7.8p1-role-mls.patch
  * openssh-8.0p1-gssapi-keyex.patch
- Add patches from obs:
  * Mon Mar  4 09:57:06 UTC 2024 - Pedro Monreal &lt;pmonreal@suse.com&gt;
- Add crypto-policies support [bsc#1211301]
  * Add patches:
  - openssh-9.6p1-crypto-policies.patch
  - openssh-9.6p1-crypto-policies-man.patch</changelog>
  <changelog author="opensuse@arnavion.dev" date="1712836800">- Fix duplicate loading of dropins. (boo#1222467)</changelog>
  <changelog author="alarrosa@suse.com" date="1712923200">- Make openssh-server recommend the openssh-server-config-rootlogin
  package in SLE in order to keep the same behaviour of previous
  SPs where the PermitRootLogin default was set to yes
  (bsc#1221005).
- Fix crypto-policies requirement to be set by openssh-server, not
  the config-rootlogin subpackage.
- Add back %config(noreplace) tag for more config files that were
  already set like this in previous SPs.</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- openssh-8.0p1-gssapi-keyex.patch: Added missing struct initializer,
  added missing parameter (bsc#1222840)</changelog>
  <changelog author="alarrosa@suse.com" date="1715601600">- Only for SLE15, restore the patch file removed in
  Thu Feb 18 13:54:44 UTC 2021 to restore the previous behaviour
  from SP5 of having root password login allowed by default
  (fixes bsc#1223486, related to bsc#1173067):
  * openssh-7.7p1-allow_root_password_login.patch
- Since the default value for this config option is now set to
  permit root to use password logins in SLE15, the
  openssh-server-config-rootlogin subpackage isn't useful there so
  we now create an openssh-server-config-disallow-rootlogin
  subpackage that sets the configuration the other way around
  than openssh-server-config-rootlogin.</changelog>
  <changelog author="alarrosa@suse.com" date="1715688000">- Add a warning in %post of openssh-clients, openssh-server and
  openssh-server-config-disallow-rootlogin to warn the user if
  the /etc/ssh/(ssh_config.d|sshd_config.d) directories are not
  being used (bsc#1223486).</changelog>
  <changelog author="alarrosa@suse.com" date="1719835200">- Add patch to fix a race condition in a signal handler by removing
  the async-signal-unsafe code (CVE-2024-6387, bsc#1226642):
  * fix-CVE-2024-6387.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720008000">- Add obsoletes for openssh-server-config-rootlogin since that
  package existed for a brief period of time during SLE 15 SP6/
  Leap 15.6 development but even if it was removed from the
  repositories before GM, some users might have it in their
  systems from having tried a beta/RC release (boo#1227350).
- Add #include &lt;stdlib.h&gt; in some files added by the ldap patch to
  fix build with gcc14 (boo#1225904).
  * openssh-7.7p1-ldap.patch
- Remove the recommendation for openssh-server-config-rootlogin
  from openssh-server. Since the default for that config option
  was changed in SLE it's not needed anymore in SLE nor in TW
  (boo#1224392).</changelog>
  <changelog author="alarrosa@suse.com" date="1720180800">- Add patch from upstream to fix proxy multiplexing mode:
  * 0001-upstream-fix-proxy-multiplexing-mode_-broken-when-keystroke.patch
- Add patch from upstream to restore correctly sigprocmask
  * 0001-upstream-correctly-restore-sigprocmask-around-ppoll.patch
- Add patch from upstream to fix a logic error in
  ObscureKeystrokeTiming that rendered this feature ineffective,
  allowing a passive observer to detect which network packets
  contained real keystrokes (bsc#1227318, CVE-2024-39894):
  * 0001-upstream-when-sending-ObscureKeystrokeTiming-chaff-packets_.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720612800">- Remove empty line at the end of sshd-sle.pamd (bsc#1227456)</changelog>
  <changelog author="alarrosa@suse.com" date="1728648000">- Add a patch to fix a regression introduced in 9.6 that makes X11
  forwarding very slow. Submitted to upstream in
  https://bugzilla.mindrot.org/show_bug.cgi?id=3655#c4 . Fixes
  bsc#1229449:
  * fix-x11-regression-bsc1229449.patch
- Add a openssl11 bcond to the spec file for the SLE12 case
  instead of checking suse_version in different parts.
- Move conditional patches to a number &gt;= 1000.
- Several spec file fixes so the package builds and can be
  installed in SLE 15 SP5 and SLE 12 SP5
- Drop most of openssh-6.6p1-keycat.patch (actually, it was just
  commented out). The keycat binary isn't really installed nor
  supported, so we can drop it, except for the code that is used
  by other SELinux patches, which is what I kept from that patch
  (boo#1229072).
- Add patch submitted to upstream to fix RFC4256 implementation
  so that keyboard-interactive authentication method can send
  instructions and sshd shows them to users even before a prompt
  is requested. This fixes MFA push notifications (boo#1229010).
  * 0001-auth-pam-Immediately-report-instructions-to-clients-and-fix-handling-in-ssh-client.patch
- Fix a dbus connection leaked in the logind patch that was
  missing a sd_bus_unref call (found by Matthias Gerstner):
  * logind_set_tty.patch
- Add a patch that fixes a small memory leak when parsing the
  subsystem configuration option:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1728907200">- Use %{with ...} instead of 0%{with ...}</changelog>
  <changelog author="alarrosa@suse.com" date="1739448000">- Fix a MitM attack against OpenSSH's VerifyHostKeyDNS-enabled
  client and a DoS attack against OpenSSH's client and server
  (bsc#1237040, CVE-2025-26465, bsc#1237041, CVE-2025-26466):
  * fix-CVE-2025-26465-and-CVE-2025-26466.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1739880000">- Fix ssh client segfault with GSSAPIKeyExchange=yes in ssh_kex2
  due to gssapi proposal not being correctly initialized
  (bsc#1236826). The problem was introduced in the rebase of
  the patch for 9.6p1:
  * openssh-8.0p1-gssapi-keyex.patch
- Rebase patch and apply it:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="hpj@suse.com" date="1746532800">- Added openssh-cve-2025-32728.patch (bsc#1241012, CVE-2025-32728).
  This fixes an upstream logic error handling the DisableForwarding
  option.</changelog>
  <changelog author="alarrosa@suse.com" date="1747137600">- Enable --with-logind to call the SetTTY dbus method in systemd.
  This allows "wall" to print messages in ssh ttys (bsc#1239671)
- Small fixes to unref the dbus session when any error occurs:
  * logind_set_tty.patch</changelog>
</package>
<package pkgid="82b3954afbfa7653978e8af5f233214f0a919e22de28d6327e703087c24a2cb5" name="openssh-server-config-disallow-rootlogin" arch="x86_64">
  <version epoch="0" ver="9.6p1" rel="150600.6.29.2"/>
  <changelog author="alarrosa@suse.com" date="1710244800">- Uncomment %sysuser_requires in openssh-server which was commented
  by mistake and is needed by the pre script installed with
  %sysusers_generate_pre (bsc#1220802).</changelog>
  <changelog author="alarrosa@suse.com" date="1712059200">- Use %config(noreplace) for sshd_config . In any case, it's
  recommended to drop a file in sshd_config.d instead of editing
  sshd_config (bsc#1221063)
- Add patches from obs package that were also in SP3/SP4/SP5:
  * Fri Nov  3 10:44:14 UTC 2023 - Johannes Segitz &lt;jsegitz@suse.com&gt;
  - Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712059201">- Rebase openssh-7.7p1-fips.patch (bsc#1221928)
  Remove OPENSSL_HAVE_EVPGCM-ifdef, which is no longer supported by upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1712577600">- Update to openssh 9.6p1:
  = Security
  * ssh(1), sshd(8): implement protocol extensions to thwart the
    so-called "Terrapin attack" discovered by Fabian Bäumer, Marcus
    Brinkmann and Jörg Schwenk. This attack allows a MITM to effect a
    limited break of the integrity of the early encrypted SSH transport
    protocol by sending extra messages prior to the commencement of
    encryption, and deleting an equal number of consecutive messages
    immediately after encryption starts. A peer SSH client/server
    would not be able to detect that messages were deleted
    (bsc#1217950, CVE-2023-48795).
  * ssh-agent(1): when adding PKCS#11-hosted private keys while
    specifying destination constraints, if the PKCS#11 token returned
    multiple keys then only the first key had the constraints applied.
    Use of regular private keys, FIDO tokens and unconstrained keys
    are unaffected.
  * ssh(1): if an invalid user or hostname that contained shell
    metacharacters was passed to ssh(1), and a ProxyCommand,
    LocalCommand directive or "match exec" predicate referenced the
    user or hostname via %u, %h or similar expansion token, then
    an attacker who could supply arbitrary user/hostnames to ssh(1)
    could potentially perform command injection depending on what
    quoting was present in the user-supplied ssh_config(5) directive
    (bsc#1218215, CVE-2023-51385).
  = Potentially incompatible changes
  * ssh(1), sshd(8): the RFC4254 connection/channels protocol provides
    a TCP-like window mechanism that limits the amount of data that
    can be sent without acceptance from the peer. In cases where this
    limit was exceeded by a non-conforming peer SSH implementation,
    ssh(1)/sshd(8) previously discarded the extra data. From OpenSSH
    9.6, ssh(1)/sshd(8) will now terminate the connection if a peer
    exceeds the window limit by more than a small grace factor. This
    change should have no effect of SSH implementations that follow
    the specification.
  = New features
  * ssh(1): add a %j token that expands to the configured ProxyJump
    hostname (or the empty string if this option is not being used)
    that can be used in a number of ssh_config(5) keywords. bz3610
  * ssh(1): add ChannelTimeout support to the client, mirroring the
    same option in the server and allowing ssh(1) to terminate
    quiescent channels.
  * ssh(1), sshd(8), ssh-add(1), ssh-keygen(1): add support for
    reading ED25519 private keys in PEM PKCS8 format. Previously
    only the OpenSSH private key format was supported.
  * ssh(1), sshd(8): introduce a protocol extension to allow
    renegotiation of acceptable signature algorithms for public key
    authentication after the server has learned the username being
    used for authentication. This allows varying sshd_config(5)
    PubkeyAcceptedAlgorithms in a "Match user" block.
  * ssh-add(1), ssh-agent(1): add an agent protocol extension to allow
    specifying certificates when loading PKCS#11 keys. This allows the
    use of certificates backed by PKCS#11 private keys in all OpenSSH
    tools that support ssh-agent(1). Previously only ssh(1) supported
    this use-case.
  = Bugfixes
  * ssh(1): when deciding whether to enable the keystroke timing
    obfuscation, enable it only if a channel with a TTY is active.
  * ssh(1): switch mainloop from poll(3) to ppoll(3) and mask signals
    before checking flags set in signal handler. Avoids potential
    race condition between signaling ssh to exit and polling. bz3531
  * ssh(1): when connecting to a destination with both the
    AddressFamily and CanonicalizeHostname directives in use,
    the AddressFamily directive could be ignored. bz5326
  * sftp(1): correct handling of the limits@openssh.com option when
    the server returned an unexpected message.
  * A number of fixes to the PuTTY and Dropbear regress/integration
    tests.
  * ssh(1): release GSS OIDs only at end of authentication, avoiding
    unnecessary init/cleanup cycles. bz2982
  * ssh_config(5): mention "none" is a valid argument to IdentityFile
    in the manual. bz3080
  * scp(1): improved debugging for paths from the server rejected for
    not matching the client's glob(3) pattern in old SCP/RCP protocol
    mode.
  * ssh-agent(1): refuse signing operations on destination-constrained
    keys if a previous session-bind operation has failed. This may
    prevent a fail-open situation in future if a user uses a mismatched
    ssh(1) client and ssh-agent(1) where the client supports a key type
    that the agent does not support.
- Update to openssh 9.5p1:
  = Potentially incompatible changes
  * ssh-keygen(1): generate Ed25519 keys by default. Ed25519 public keys
    are very convenient due to their small size. Ed25519 keys are
    specified in RFC 8709 and OpenSSH has supported them since version 6.5
    (January 2014).
  * sshd(8): the Subsystem directive now accurately preserves quoting of
    subsystem commands and arguments. This may change behaviour for exotic
    configurations, but the most common subsystem configuration
    (sftp-server) is unlikely to be affected.
  = New features
  * ssh(1): add keystroke timing obfuscation to the client. This attempts
    to hide inter-keystroke timings by sending interactive traffic at
    fixed intervals (default: every 20ms) when there is only a small
    amount of data being sent. It also sends fake "chaff" keystrokes for
    a random interval after the last real keystroke. These are
    controlled by a new ssh_config ObscureKeystrokeTiming keyword.
  * ssh(1), sshd(8): Introduce a transport-level ping facility. This adds
    a pair of SSH transport protocol messages SSH2_MSG_PING/PONG to
    implement a ping capability. These messages use numbers in the "local
    extensions" number space and are advertised using a "ping@openssh.com"
    ext-info message with a string version number of "0".
  * sshd(8): allow override of Subsystem directives in sshd Match blocks.
  = Bugfixes
  * scp(1): fix scp in SFTP mode recursive upload and download of
    directories that contain symlinks to other directories. In scp mode,
    the links would be followed, but in SFTP mode they were not. bz3611
  * ssh-keygen(1): handle cr+lf (instead of just cr) line endings in
    sshsig signature files.
  * ssh(1): interactive mode for ControlPersist sessions if they
    originally requested a tty.
  * sshd(8): make PerSourceMaxStartups first-match-wins
  * sshd(8): limit artificial login delay to a reasonable maximum (5s)
    and don't delay at all for the "none" authentication mechanism.
    bz3602
  * sshd(8): Log errors in kex_exchange_identification() with level
    verbose instead of error to reduce preauth log spam. All of those
    get logged with a more generic error message by sshpkt_fatal().
  * sshd(8): correct math for ClientAliveInterval that caused the probes
    to be sent less frequently than configured.
  * ssh(1): fix regression in OpenSSH 9.4 (mux.c r1.99) that caused
    multiplexed sessions to ignore SIGINT under some circumstances.
- Update to openssh 9.4p1:
  = Potentially incompatible changes
  * This release removes support for older versions of libcrypto.
    OpenSSH now requires LibreSSL &gt;= 3.1.0 or OpenSSL &gt;= 1.1.1.
    Note that these versions are already deprecated by their upstream
    vendors.
  * ssh-agent(1): PKCS#11 modules must now be specified by their full
    paths. Previously dlopen(3) could search for them in system
    library directories.
  = New features
  * ssh(1): allow forwarding Unix Domain sockets via ssh -W.
  * ssh(1): add support for configuration tags to ssh(1).
    This adds a ssh_config(5) "Tag" directive and corresponding
    "Match tag" predicate that may be used to select blocks of
    configuration similar to the pf.conf(5) keywords of the same
    name.
  * ssh(1): add a "match localnetwork" predicate. This allows matching
    on the addresses of available network interfaces and may be used to
    vary the effective client configuration based on network location.
  * ssh(1), sshd(8), ssh-keygen(1): infrastructure support for KRL
    extensions.  This defines wire formats for optional KRL extensions
    and implements parsing of the new submessages. No actual extensions
    are supported at this point.
  * sshd(8): AuthorizedPrincipalsCommand and AuthorizedKeysCommand now
    accept two additional %-expansion sequences: %D which expands to
    the routing domain of the connected session and %C which expands
    to the addresses and port numbers for the source and destination
    of the connection.
  * ssh-keygen(1): increase the default work factor (rounds) for the
    bcrypt KDF used to derive symmetric encryption keys for passphrase
    protected key files by 50%.
  = Bugfixes
  * ssh-agent(1): improve isolation between loaded PKCS#11 modules
    by running separate ssh-pkcs11-helpers for each loaded provider.
  * ssh(1): make -f (fork after authentication) work correctly with
    multiplexed connections, including ControlPersist. bz3589 bz3589
  * ssh(1): make ConnectTimeout apply to multiplexing sockets and not
    just to network connections.
  * ssh-agent(1), ssh(1): improve defences against invalid PKCS#11
    modules being loaded by checking that the requested module
    contains the required symbol before loading it.
  * sshd(8): fix AuthorizedPrincipalsCommand when AuthorizedKeysCommand
    appears before it in sshd_config. Since OpenSSH 8.7 the
    AuthorizedPrincipalsCommand directive was incorrectly ignored in
    this situation. bz3574
  * sshd(8), ssh(1), ssh-keygen(1): remove vestigal support for KRL
    signatures When the KRL format was originally defined, it included
    support for signing of KRL objects. However, the code to sign KRLs
    and verify KRL signatues was never completed in OpenSSH. This
    release removes the partially-implemented code to verify KRLs.
    All OpenSSH tools now ignore KRL_SECTION_SIGNATURE sections in
    KRL files.
  * All: fix a number of memory leaks and unreachable/harmless integer
    overflows.
  * ssh-agent(1), ssh(1): don't truncate strings logged from PKCS#11
    modules; GHPR406
  * sshd(8), ssh(1): better validate CASignatureAlgorithms in
    ssh_config and sshd_config. Previously this directive would accept
    certificate algorithm names, but these were unusable in practice as
    OpenSSH does not support CA chains. bz3577
  * ssh(1): make `ssh -Q CASignatureAlgorithms` only list signature
    algorithms that are valid for CA signing. Previous behaviour was
    to list all signing algorithms, including certificate algorithms.
  * ssh-keyscan(1): gracefully handle systems where rlimits or the
    maximum number of open files is larger than INT_MAX; bz3581
  * ssh-keygen(1): fix "no comment" not showing on when running
    `ssh-keygen -l` on multiple keys where one has a comment and other
    following keys do not. bz3580
  * scp(1), sftp(1): adjust ftruncate() logic to handle servers that
    reorder requests. Previously, if the server reordered requests then
    the resultant file would be erroneously truncated.
  * ssh(1): don't incorrectly disable hostname canonicalization when
    CanonicalizeHostname=yes and ProxyJump was expicitly set to
    "none". bz3567
  * scp(1): when copying local-&gt;remote, check that the source file
    exists before opening an SFTP connection to the server. Based on
    GHPR#370
- Dropped patches:
  * cb4ed12f.patch - implemented upstream.
- Rebased patches:
  * openssh-7.7p1-fips.patch
  * openssh-7.8p1-role-mls.patch
  * openssh-8.0p1-gssapi-keyex.patch
- Add patches from obs:
  * Mon Mar  4 09:57:06 UTC 2024 - Pedro Monreal &lt;pmonreal@suse.com&gt;
- Add crypto-policies support [bsc#1211301]
  * Add patches:
  - openssh-9.6p1-crypto-policies.patch
  - openssh-9.6p1-crypto-policies-man.patch</changelog>
  <changelog author="opensuse@arnavion.dev" date="1712836800">- Fix duplicate loading of dropins. (boo#1222467)</changelog>
  <changelog author="alarrosa@suse.com" date="1712923200">- Make openssh-server recommend the openssh-server-config-rootlogin
  package in SLE in order to keep the same behaviour of previous
  SPs where the PermitRootLogin default was set to yes
  (bsc#1221005).
- Fix crypto-policies requirement to be set by openssh-server, not
  the config-rootlogin subpackage.
- Add back %config(noreplace) tag for more config files that were
  already set like this in previous SPs.</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- openssh-8.0p1-gssapi-keyex.patch: Added missing struct initializer,
  added missing parameter (bsc#1222840)</changelog>
  <changelog author="alarrosa@suse.com" date="1715601600">- Only for SLE15, restore the patch file removed in
  Thu Feb 18 13:54:44 UTC 2021 to restore the previous behaviour
  from SP5 of having root password login allowed by default
  (fixes bsc#1223486, related to bsc#1173067):
  * openssh-7.7p1-allow_root_password_login.patch
- Since the default value for this config option is now set to
  permit root to use password logins in SLE15, the
  openssh-server-config-rootlogin subpackage isn't useful there so
  we now create an openssh-server-config-disallow-rootlogin
  subpackage that sets the configuration the other way around
  than openssh-server-config-rootlogin.</changelog>
  <changelog author="alarrosa@suse.com" date="1715688000">- Add a warning in %post of openssh-clients, openssh-server and
  openssh-server-config-disallow-rootlogin to warn the user if
  the /etc/ssh/(ssh_config.d|sshd_config.d) directories are not
  being used (bsc#1223486).</changelog>
  <changelog author="alarrosa@suse.com" date="1719835200">- Add patch to fix a race condition in a signal handler by removing
  the async-signal-unsafe code (CVE-2024-6387, bsc#1226642):
  * fix-CVE-2024-6387.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720008000">- Add obsoletes for openssh-server-config-rootlogin since that
  package existed for a brief period of time during SLE 15 SP6/
  Leap 15.6 development but even if it was removed from the
  repositories before GM, some users might have it in their
  systems from having tried a beta/RC release (boo#1227350).
- Add #include &lt;stdlib.h&gt; in some files added by the ldap patch to
  fix build with gcc14 (boo#1225904).
  * openssh-7.7p1-ldap.patch
- Remove the recommendation for openssh-server-config-rootlogin
  from openssh-server. Since the default for that config option
  was changed in SLE it's not needed anymore in SLE nor in TW
  (boo#1224392).</changelog>
  <changelog author="alarrosa@suse.com" date="1720180800">- Add patch from upstream to fix proxy multiplexing mode:
  * 0001-upstream-fix-proxy-multiplexing-mode_-broken-when-keystroke.patch
- Add patch from upstream to restore correctly sigprocmask
  * 0001-upstream-correctly-restore-sigprocmask-around-ppoll.patch
- Add patch from upstream to fix a logic error in
  ObscureKeystrokeTiming that rendered this feature ineffective,
  allowing a passive observer to detect which network packets
  contained real keystrokes (bsc#1227318, CVE-2024-39894):
  * 0001-upstream-when-sending-ObscureKeystrokeTiming-chaff-packets_.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720612800">- Remove empty line at the end of sshd-sle.pamd (bsc#1227456)</changelog>
  <changelog author="alarrosa@suse.com" date="1728648000">- Add a patch to fix a regression introduced in 9.6 that makes X11
  forwarding very slow. Submitted to upstream in
  https://bugzilla.mindrot.org/show_bug.cgi?id=3655#c4 . Fixes
  bsc#1229449:
  * fix-x11-regression-bsc1229449.patch
- Add a openssl11 bcond to the spec file for the SLE12 case
  instead of checking suse_version in different parts.
- Move conditional patches to a number &gt;= 1000.
- Several spec file fixes so the package builds and can be
  installed in SLE 15 SP5 and SLE 12 SP5
- Drop most of openssh-6.6p1-keycat.patch (actually, it was just
  commented out). The keycat binary isn't really installed nor
  supported, so we can drop it, except for the code that is used
  by other SELinux patches, which is what I kept from that patch
  (boo#1229072).
- Add patch submitted to upstream to fix RFC4256 implementation
  so that keyboard-interactive authentication method can send
  instructions and sshd shows them to users even before a prompt
  is requested. This fixes MFA push notifications (boo#1229010).
  * 0001-auth-pam-Immediately-report-instructions-to-clients-and-fix-handling-in-ssh-client.patch
- Fix a dbus connection leaked in the logind patch that was
  missing a sd_bus_unref call (found by Matthias Gerstner):
  * logind_set_tty.patch
- Add a patch that fixes a small memory leak when parsing the
  subsystem configuration option:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1728907200">- Use %{with ...} instead of 0%{with ...}</changelog>
  <changelog author="alarrosa@suse.com" date="1739448000">- Fix a MitM attack against OpenSSH's VerifyHostKeyDNS-enabled
  client and a DoS attack against OpenSSH's client and server
  (bsc#1237040, CVE-2025-26465, bsc#1237041, CVE-2025-26466):
  * fix-CVE-2025-26465-and-CVE-2025-26466.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1739880000">- Fix ssh client segfault with GSSAPIKeyExchange=yes in ssh_kex2
  due to gssapi proposal not being correctly initialized
  (bsc#1236826). The problem was introduced in the rebase of
  the patch for 9.6p1:
  * openssh-8.0p1-gssapi-keyex.patch
- Rebase patch and apply it:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="hpj@suse.com" date="1746532800">- Added openssh-cve-2025-32728.patch (bsc#1241012, CVE-2025-32728).
  This fixes an upstream logic error handling the DisableForwarding
  option.</changelog>
  <changelog author="alarrosa@suse.com" date="1747137600">- Enable --with-logind to call the SetTTY dbus method in systemd.
  This allows "wall" to print messages in ssh ttys (bsc#1239671)
- Small fixes to unref the dbus session when any error occurs:
  * logind_set_tty.patch</changelog>
  <changelog author="hpj@suse.com" date="1748952000">- Add openssh-scp-umask-preserve-permissions.patch (bsc#1241667).</changelog>
</package>
<package pkgid="4c271669dfe69697045f00811a20d61fbba6f517226a0e8ff8903aa1a12ee090" name="openssh-server-config-disallow-rootlogin" arch="x86_64">
  <version epoch="0" ver="9.6p1" rel="150600.6.34.1"/>
  <changelog author="alarrosa@suse.com" date="1712059200">- Use %config(noreplace) for sshd_config . In any case, it's
  recommended to drop a file in sshd_config.d instead of editing
  sshd_config (bsc#1221063)
- Add patches from obs package that were also in SP3/SP4/SP5:
  * Fri Nov  3 10:44:14 UTC 2023 - Johannes Segitz &lt;jsegitz@suse.com&gt;
  - Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712059201">- Rebase openssh-7.7p1-fips.patch (bsc#1221928)
  Remove OPENSSL_HAVE_EVPGCM-ifdef, which is no longer supported by upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1712577600">- Update to openssh 9.6p1:
  = Security
  * ssh(1), sshd(8): implement protocol extensions to thwart the
    so-called "Terrapin attack" discovered by Fabian Bäumer, Marcus
    Brinkmann and Jörg Schwenk. This attack allows a MITM to effect a
    limited break of the integrity of the early encrypted SSH transport
    protocol by sending extra messages prior to the commencement of
    encryption, and deleting an equal number of consecutive messages
    immediately after encryption starts. A peer SSH client/server
    would not be able to detect that messages were deleted
    (bsc#1217950, CVE-2023-48795).
  * ssh-agent(1): when adding PKCS#11-hosted private keys while
    specifying destination constraints, if the PKCS#11 token returned
    multiple keys then only the first key had the constraints applied.
    Use of regular private keys, FIDO tokens and unconstrained keys
    are unaffected.
  * ssh(1): if an invalid user or hostname that contained shell
    metacharacters was passed to ssh(1), and a ProxyCommand,
    LocalCommand directive or "match exec" predicate referenced the
    user or hostname via %u, %h or similar expansion token, then
    an attacker who could supply arbitrary user/hostnames to ssh(1)
    could potentially perform command injection depending on what
    quoting was present in the user-supplied ssh_config(5) directive
    (bsc#1218215, CVE-2023-51385).
  = Potentially incompatible changes
  * ssh(1), sshd(8): the RFC4254 connection/channels protocol provides
    a TCP-like window mechanism that limits the amount of data that
    can be sent without acceptance from the peer. In cases where this
    limit was exceeded by a non-conforming peer SSH implementation,
    ssh(1)/sshd(8) previously discarded the extra data. From OpenSSH
    9.6, ssh(1)/sshd(8) will now terminate the connection if a peer
    exceeds the window limit by more than a small grace factor. This
    change should have no effect of SSH implementations that follow
    the specification.
  = New features
  * ssh(1): add a %j token that expands to the configured ProxyJump
    hostname (or the empty string if this option is not being used)
    that can be used in a number of ssh_config(5) keywords. bz3610
  * ssh(1): add ChannelTimeout support to the client, mirroring the
    same option in the server and allowing ssh(1) to terminate
    quiescent channels.
  * ssh(1), sshd(8), ssh-add(1), ssh-keygen(1): add support for
    reading ED25519 private keys in PEM PKCS8 format. Previously
    only the OpenSSH private key format was supported.
  * ssh(1), sshd(8): introduce a protocol extension to allow
    renegotiation of acceptable signature algorithms for public key
    authentication after the server has learned the username being
    used for authentication. This allows varying sshd_config(5)
    PubkeyAcceptedAlgorithms in a "Match user" block.
  * ssh-add(1), ssh-agent(1): add an agent protocol extension to allow
    specifying certificates when loading PKCS#11 keys. This allows the
    use of certificates backed by PKCS#11 private keys in all OpenSSH
    tools that support ssh-agent(1). Previously only ssh(1) supported
    this use-case.
  = Bugfixes
  * ssh(1): when deciding whether to enable the keystroke timing
    obfuscation, enable it only if a channel with a TTY is active.
  * ssh(1): switch mainloop from poll(3) to ppoll(3) and mask signals
    before checking flags set in signal handler. Avoids potential
    race condition between signaling ssh to exit and polling. bz3531
  * ssh(1): when connecting to a destination with both the
    AddressFamily and CanonicalizeHostname directives in use,
    the AddressFamily directive could be ignored. bz5326
  * sftp(1): correct handling of the limits@openssh.com option when
    the server returned an unexpected message.
  * A number of fixes to the PuTTY and Dropbear regress/integration
    tests.
  * ssh(1): release GSS OIDs only at end of authentication, avoiding
    unnecessary init/cleanup cycles. bz2982
  * ssh_config(5): mention "none" is a valid argument to IdentityFile
    in the manual. bz3080
  * scp(1): improved debugging for paths from the server rejected for
    not matching the client's glob(3) pattern in old SCP/RCP protocol
    mode.
  * ssh-agent(1): refuse signing operations on destination-constrained
    keys if a previous session-bind operation has failed. This may
    prevent a fail-open situation in future if a user uses a mismatched
    ssh(1) client and ssh-agent(1) where the client supports a key type
    that the agent does not support.
- Update to openssh 9.5p1:
  = Potentially incompatible changes
  * ssh-keygen(1): generate Ed25519 keys by default. Ed25519 public keys
    are very convenient due to their small size. Ed25519 keys are
    specified in RFC 8709 and OpenSSH has supported them since version 6.5
    (January 2014).
  * sshd(8): the Subsystem directive now accurately preserves quoting of
    subsystem commands and arguments. This may change behaviour for exotic
    configurations, but the most common subsystem configuration
    (sftp-server) is unlikely to be affected.
  = New features
  * ssh(1): add keystroke timing obfuscation to the client. This attempts
    to hide inter-keystroke timings by sending interactive traffic at
    fixed intervals (default: every 20ms) when there is only a small
    amount of data being sent. It also sends fake "chaff" keystrokes for
    a random interval after the last real keystroke. These are
    controlled by a new ssh_config ObscureKeystrokeTiming keyword.
  * ssh(1), sshd(8): Introduce a transport-level ping facility. This adds
    a pair of SSH transport protocol messages SSH2_MSG_PING/PONG to
    implement a ping capability. These messages use numbers in the "local
    extensions" number space and are advertised using a "ping@openssh.com"
    ext-info message with a string version number of "0".
  * sshd(8): allow override of Subsystem directives in sshd Match blocks.
  = Bugfixes
  * scp(1): fix scp in SFTP mode recursive upload and download of
    directories that contain symlinks to other directories. In scp mode,
    the links would be followed, but in SFTP mode they were not. bz3611
  * ssh-keygen(1): handle cr+lf (instead of just cr) line endings in
    sshsig signature files.
  * ssh(1): interactive mode for ControlPersist sessions if they
    originally requested a tty.
  * sshd(8): make PerSourceMaxStartups first-match-wins
  * sshd(8): limit artificial login delay to a reasonable maximum (5s)
    and don't delay at all for the "none" authentication mechanism.
    bz3602
  * sshd(8): Log errors in kex_exchange_identification() with level
    verbose instead of error to reduce preauth log spam. All of those
    get logged with a more generic error message by sshpkt_fatal().
  * sshd(8): correct math for ClientAliveInterval that caused the probes
    to be sent less frequently than configured.
  * ssh(1): fix regression in OpenSSH 9.4 (mux.c r1.99) that caused
    multiplexed sessions to ignore SIGINT under some circumstances.
- Update to openssh 9.4p1:
  = Potentially incompatible changes
  * This release removes support for older versions of libcrypto.
    OpenSSH now requires LibreSSL &gt;= 3.1.0 or OpenSSL &gt;= 1.1.1.
    Note that these versions are already deprecated by their upstream
    vendors.
  * ssh-agent(1): PKCS#11 modules must now be specified by their full
    paths. Previously dlopen(3) could search for them in system
    library directories.
  = New features
  * ssh(1): allow forwarding Unix Domain sockets via ssh -W.
  * ssh(1): add support for configuration tags to ssh(1).
    This adds a ssh_config(5) "Tag" directive and corresponding
    "Match tag" predicate that may be used to select blocks of
    configuration similar to the pf.conf(5) keywords of the same
    name.
  * ssh(1): add a "match localnetwork" predicate. This allows matching
    on the addresses of available network interfaces and may be used to
    vary the effective client configuration based on network location.
  * ssh(1), sshd(8), ssh-keygen(1): infrastructure support for KRL
    extensions.  This defines wire formats for optional KRL extensions
    and implements parsing of the new submessages. No actual extensions
    are supported at this point.
  * sshd(8): AuthorizedPrincipalsCommand and AuthorizedKeysCommand now
    accept two additional %-expansion sequences: %D which expands to
    the routing domain of the connected session and %C which expands
    to the addresses and port numbers for the source and destination
    of the connection.
  * ssh-keygen(1): increase the default work factor (rounds) for the
    bcrypt KDF used to derive symmetric encryption keys for passphrase
    protected key files by 50%.
  = Bugfixes
  * ssh-agent(1): improve isolation between loaded PKCS#11 modules
    by running separate ssh-pkcs11-helpers for each loaded provider.
  * ssh(1): make -f (fork after authentication) work correctly with
    multiplexed connections, including ControlPersist. bz3589 bz3589
  * ssh(1): make ConnectTimeout apply to multiplexing sockets and not
    just to network connections.
  * ssh-agent(1), ssh(1): improve defences against invalid PKCS#11
    modules being loaded by checking that the requested module
    contains the required symbol before loading it.
  * sshd(8): fix AuthorizedPrincipalsCommand when AuthorizedKeysCommand
    appears before it in sshd_config. Since OpenSSH 8.7 the
    AuthorizedPrincipalsCommand directive was incorrectly ignored in
    this situation. bz3574
  * sshd(8), ssh(1), ssh-keygen(1): remove vestigal support for KRL
    signatures When the KRL format was originally defined, it included
    support for signing of KRL objects. However, the code to sign KRLs
    and verify KRL signatues was never completed in OpenSSH. This
    release removes the partially-implemented code to verify KRLs.
    All OpenSSH tools now ignore KRL_SECTION_SIGNATURE sections in
    KRL files.
  * All: fix a number of memory leaks and unreachable/harmless integer
    overflows.
  * ssh-agent(1), ssh(1): don't truncate strings logged from PKCS#11
    modules; GHPR406
  * sshd(8), ssh(1): better validate CASignatureAlgorithms in
    ssh_config and sshd_config. Previously this directive would accept
    certificate algorithm names, but these were unusable in practice as
    OpenSSH does not support CA chains. bz3577
  * ssh(1): make `ssh -Q CASignatureAlgorithms` only list signature
    algorithms that are valid for CA signing. Previous behaviour was
    to list all signing algorithms, including certificate algorithms.
  * ssh-keyscan(1): gracefully handle systems where rlimits or the
    maximum number of open files is larger than INT_MAX; bz3581
  * ssh-keygen(1): fix "no comment" not showing on when running
    `ssh-keygen -l` on multiple keys where one has a comment and other
    following keys do not. bz3580
  * scp(1), sftp(1): adjust ftruncate() logic to handle servers that
    reorder requests. Previously, if the server reordered requests then
    the resultant file would be erroneously truncated.
  * ssh(1): don't incorrectly disable hostname canonicalization when
    CanonicalizeHostname=yes and ProxyJump was expicitly set to
    "none". bz3567
  * scp(1): when copying local-&gt;remote, check that the source file
    exists before opening an SFTP connection to the server. Based on
    GHPR#370
- Dropped patches:
  * cb4ed12f.patch - implemented upstream.
- Rebased patches:
  * openssh-7.7p1-fips.patch
  * openssh-7.8p1-role-mls.patch
  * openssh-8.0p1-gssapi-keyex.patch
- Add patches from obs:
  * Mon Mar  4 09:57:06 UTC 2024 - Pedro Monreal &lt;pmonreal@suse.com&gt;
- Add crypto-policies support [bsc#1211301]
  * Add patches:
  - openssh-9.6p1-crypto-policies.patch
  - openssh-9.6p1-crypto-policies-man.patch</changelog>
  <changelog author="opensuse@arnavion.dev" date="1712836800">- Fix duplicate loading of dropins. (boo#1222467)</changelog>
  <changelog author="alarrosa@suse.com" date="1712923200">- Make openssh-server recommend the openssh-server-config-rootlogin
  package in SLE in order to keep the same behaviour of previous
  SPs where the PermitRootLogin default was set to yes
  (bsc#1221005).
- Fix crypto-policies requirement to be set by openssh-server, not
  the config-rootlogin subpackage.
- Add back %config(noreplace) tag for more config files that were
  already set like this in previous SPs.</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- openssh-8.0p1-gssapi-keyex.patch: Added missing struct initializer,
  added missing parameter (bsc#1222840)</changelog>
  <changelog author="alarrosa@suse.com" date="1715601600">- Only for SLE15, restore the patch file removed in
  Thu Feb 18 13:54:44 UTC 2021 to restore the previous behaviour
  from SP5 of having root password login allowed by default
  (fixes bsc#1223486, related to bsc#1173067):
  * openssh-7.7p1-allow_root_password_login.patch
- Since the default value for this config option is now set to
  permit root to use password logins in SLE15, the
  openssh-server-config-rootlogin subpackage isn't useful there so
  we now create an openssh-server-config-disallow-rootlogin
  subpackage that sets the configuration the other way around
  than openssh-server-config-rootlogin.</changelog>
  <changelog author="alarrosa@suse.com" date="1715688000">- Add a warning in %post of openssh-clients, openssh-server and
  openssh-server-config-disallow-rootlogin to warn the user if
  the /etc/ssh/(ssh_config.d|sshd_config.d) directories are not
  being used (bsc#1223486).</changelog>
  <changelog author="alarrosa@suse.com" date="1719835200">- Add patch to fix a race condition in a signal handler by removing
  the async-signal-unsafe code (CVE-2024-6387, bsc#1226642):
  * fix-CVE-2024-6387.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720008000">- Add obsoletes for openssh-server-config-rootlogin since that
  package existed for a brief period of time during SLE 15 SP6/
  Leap 15.6 development but even if it was removed from the
  repositories before GM, some users might have it in their
  systems from having tried a beta/RC release (boo#1227350).
- Add #include &lt;stdlib.h&gt; in some files added by the ldap patch to
  fix build with gcc14 (boo#1225904).
  * openssh-7.7p1-ldap.patch
- Remove the recommendation for openssh-server-config-rootlogin
  from openssh-server. Since the default for that config option
  was changed in SLE it's not needed anymore in SLE nor in TW
  (boo#1224392).</changelog>
  <changelog author="alarrosa@suse.com" date="1720180800">- Add patch from upstream to fix proxy multiplexing mode:
  * 0001-upstream-fix-proxy-multiplexing-mode_-broken-when-keystroke.patch
- Add patch from upstream to restore correctly sigprocmask
  * 0001-upstream-correctly-restore-sigprocmask-around-ppoll.patch
- Add patch from upstream to fix a logic error in
  ObscureKeystrokeTiming that rendered this feature ineffective,
  allowing a passive observer to detect which network packets
  contained real keystrokes (bsc#1227318, CVE-2024-39894):
  * 0001-upstream-when-sending-ObscureKeystrokeTiming-chaff-packets_.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720612800">- Remove empty line at the end of sshd-sle.pamd (bsc#1227456)</changelog>
  <changelog author="alarrosa@suse.com" date="1728648000">- Add a patch to fix a regression introduced in 9.6 that makes X11
  forwarding very slow. Submitted to upstream in
  https://bugzilla.mindrot.org/show_bug.cgi?id=3655#c4 . Fixes
  bsc#1229449:
  * fix-x11-regression-bsc1229449.patch
- Add a openssl11 bcond to the spec file for the SLE12 case
  instead of checking suse_version in different parts.
- Move conditional patches to a number &gt;= 1000.
- Several spec file fixes so the package builds and can be
  installed in SLE 15 SP5 and SLE 12 SP5
- Drop most of openssh-6.6p1-keycat.patch (actually, it was just
  commented out). The keycat binary isn't really installed nor
  supported, so we can drop it, except for the code that is used
  by other SELinux patches, which is what I kept from that patch
  (boo#1229072).
- Add patch submitted to upstream to fix RFC4256 implementation
  so that keyboard-interactive authentication method can send
  instructions and sshd shows them to users even before a prompt
  is requested. This fixes MFA push notifications (boo#1229010).
  * 0001-auth-pam-Immediately-report-instructions-to-clients-and-fix-handling-in-ssh-client.patch
- Fix a dbus connection leaked in the logind patch that was
  missing a sd_bus_unref call (found by Matthias Gerstner):
  * logind_set_tty.patch
- Add a patch that fixes a small memory leak when parsing the
  subsystem configuration option:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1728907200">- Use %{with ...} instead of 0%{with ...}</changelog>
  <changelog author="alarrosa@suse.com" date="1739448000">- Fix a MitM attack against OpenSSH's VerifyHostKeyDNS-enabled
  client and a DoS attack against OpenSSH's client and server
  (bsc#1237040, CVE-2025-26465, bsc#1237041, CVE-2025-26466):
  * fix-CVE-2025-26465-and-CVE-2025-26466.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1739880000">- Fix ssh client segfault with GSSAPIKeyExchange=yes in ssh_kex2
  due to gssapi proposal not being correctly initialized
  (bsc#1236826). The problem was introduced in the rebase of
  the patch for 9.6p1:
  * openssh-8.0p1-gssapi-keyex.patch
- Rebase patch and apply it:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="hpj@suse.com" date="1746532800">- Added openssh-cve-2025-32728.patch (bsc#1241012, CVE-2025-32728).
  This fixes an upstream logic error handling the DisableForwarding
  option.</changelog>
  <changelog author="alarrosa@suse.com" date="1747137600">- Enable --with-logind to call the SetTTY dbus method in systemd.
  This allows "wall" to print messages in ssh ttys (bsc#1239671)
- Small fixes to unref the dbus session when any error occurs:
  * logind_set_tty.patch</changelog>
  <changelog author="hpj@suse.com" date="1748952000">- Add openssh-scp-umask-preserve-permissions.patch (bsc#1241667).</changelog>
  <changelog author="hpj@suse.com" date="1762516800">- Add openssh-cve-2025-61984-username-validation.patch
  (bsc#1251198, CVE-2025-61984).
- Add openssh-cve-2025-61985-nul-url-encode.patch
  (bsc#1251199, CVE-2025-61985).</changelog>
</package>
<package pkgid="f98e80ad668611b9460a0604bf04b0f6a307d78e7f22034fcce4463c46412eda" name="openssh-server-config-disallow-rootlogin" arch="x86_64">
  <version epoch="0" ver="9.6p1" rel="150600.6.37.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1712059200">- Rebase openssh-7.7p1-fips.patch (bsc#1221928)
  Remove OPENSSL_HAVE_EVPGCM-ifdef, which is no longer supported by upstream</changelog>
  <changelog author="alarrosa@suse.com" date="1712577600">- Update to openssh 9.6p1:
  = Security
  * ssh(1), sshd(8): implement protocol extensions to thwart the
    so-called "Terrapin attack" discovered by Fabian Bäumer, Marcus
    Brinkmann and Jörg Schwenk. This attack allows a MITM to effect a
    limited break of the integrity of the early encrypted SSH transport
    protocol by sending extra messages prior to the commencement of
    encryption, and deleting an equal number of consecutive messages
    immediately after encryption starts. A peer SSH client/server
    would not be able to detect that messages were deleted
    (bsc#1217950, CVE-2023-48795).
  * ssh-agent(1): when adding PKCS#11-hosted private keys while
    specifying destination constraints, if the PKCS#11 token returned
    multiple keys then only the first key had the constraints applied.
    Use of regular private keys, FIDO tokens and unconstrained keys
    are unaffected.
  * ssh(1): if an invalid user or hostname that contained shell
    metacharacters was passed to ssh(1), and a ProxyCommand,
    LocalCommand directive or "match exec" predicate referenced the
    user or hostname via %u, %h or similar expansion token, then
    an attacker who could supply arbitrary user/hostnames to ssh(1)
    could potentially perform command injection depending on what
    quoting was present in the user-supplied ssh_config(5) directive
    (bsc#1218215, CVE-2023-51385).
  = Potentially incompatible changes
  * ssh(1), sshd(8): the RFC4254 connection/channels protocol provides
    a TCP-like window mechanism that limits the amount of data that
    can be sent without acceptance from the peer. In cases where this
    limit was exceeded by a non-conforming peer SSH implementation,
    ssh(1)/sshd(8) previously discarded the extra data. From OpenSSH
    9.6, ssh(1)/sshd(8) will now terminate the connection if a peer
    exceeds the window limit by more than a small grace factor. This
    change should have no effect of SSH implementations that follow
    the specification.
  = New features
  * ssh(1): add a %j token that expands to the configured ProxyJump
    hostname (or the empty string if this option is not being used)
    that can be used in a number of ssh_config(5) keywords. bz3610
  * ssh(1): add ChannelTimeout support to the client, mirroring the
    same option in the server and allowing ssh(1) to terminate
    quiescent channels.
  * ssh(1), sshd(8), ssh-add(1), ssh-keygen(1): add support for
    reading ED25519 private keys in PEM PKCS8 format. Previously
    only the OpenSSH private key format was supported.
  * ssh(1), sshd(8): introduce a protocol extension to allow
    renegotiation of acceptable signature algorithms for public key
    authentication after the server has learned the username being
    used for authentication. This allows varying sshd_config(5)
    PubkeyAcceptedAlgorithms in a "Match user" block.
  * ssh-add(1), ssh-agent(1): add an agent protocol extension to allow
    specifying certificates when loading PKCS#11 keys. This allows the
    use of certificates backed by PKCS#11 private keys in all OpenSSH
    tools that support ssh-agent(1). Previously only ssh(1) supported
    this use-case.
  = Bugfixes
  * ssh(1): when deciding whether to enable the keystroke timing
    obfuscation, enable it only if a channel with a TTY is active.
  * ssh(1): switch mainloop from poll(3) to ppoll(3) and mask signals
    before checking flags set in signal handler. Avoids potential
    race condition between signaling ssh to exit and polling. bz3531
  * ssh(1): when connecting to a destination with both the
    AddressFamily and CanonicalizeHostname directives in use,
    the AddressFamily directive could be ignored. bz5326
  * sftp(1): correct handling of the limits@openssh.com option when
    the server returned an unexpected message.
  * A number of fixes to the PuTTY and Dropbear regress/integration
    tests.
  * ssh(1): release GSS OIDs only at end of authentication, avoiding
    unnecessary init/cleanup cycles. bz2982
  * ssh_config(5): mention "none" is a valid argument to IdentityFile
    in the manual. bz3080
  * scp(1): improved debugging for paths from the server rejected for
    not matching the client's glob(3) pattern in old SCP/RCP protocol
    mode.
  * ssh-agent(1): refuse signing operations on destination-constrained
    keys if a previous session-bind operation has failed. This may
    prevent a fail-open situation in future if a user uses a mismatched
    ssh(1) client and ssh-agent(1) where the client supports a key type
    that the agent does not support.
- Update to openssh 9.5p1:
  = Potentially incompatible changes
  * ssh-keygen(1): generate Ed25519 keys by default. Ed25519 public keys
    are very convenient due to their small size. Ed25519 keys are
    specified in RFC 8709 and OpenSSH has supported them since version 6.5
    (January 2014).
  * sshd(8): the Subsystem directive now accurately preserves quoting of
    subsystem commands and arguments. This may change behaviour for exotic
    configurations, but the most common subsystem configuration
    (sftp-server) is unlikely to be affected.
  = New features
  * ssh(1): add keystroke timing obfuscation to the client. This attempts
    to hide inter-keystroke timings by sending interactive traffic at
    fixed intervals (default: every 20ms) when there is only a small
    amount of data being sent. It also sends fake "chaff" keystrokes for
    a random interval after the last real keystroke. These are
    controlled by a new ssh_config ObscureKeystrokeTiming keyword.
  * ssh(1), sshd(8): Introduce a transport-level ping facility. This adds
    a pair of SSH transport protocol messages SSH2_MSG_PING/PONG to
    implement a ping capability. These messages use numbers in the "local
    extensions" number space and are advertised using a "ping@openssh.com"
    ext-info message with a string version number of "0".
  * sshd(8): allow override of Subsystem directives in sshd Match blocks.
  = Bugfixes
  * scp(1): fix scp in SFTP mode recursive upload and download of
    directories that contain symlinks to other directories. In scp mode,
    the links would be followed, but in SFTP mode they were not. bz3611
  * ssh-keygen(1): handle cr+lf (instead of just cr) line endings in
    sshsig signature files.
  * ssh(1): interactive mode for ControlPersist sessions if they
    originally requested a tty.
  * sshd(8): make PerSourceMaxStartups first-match-wins
  * sshd(8): limit artificial login delay to a reasonable maximum (5s)
    and don't delay at all for the "none" authentication mechanism.
    bz3602
  * sshd(8): Log errors in kex_exchange_identification() with level
    verbose instead of error to reduce preauth log spam. All of those
    get logged with a more generic error message by sshpkt_fatal().
  * sshd(8): correct math for ClientAliveInterval that caused the probes
    to be sent less frequently than configured.
  * ssh(1): fix regression in OpenSSH 9.4 (mux.c r1.99) that caused
    multiplexed sessions to ignore SIGINT under some circumstances.
- Update to openssh 9.4p1:
  = Potentially incompatible changes
  * This release removes support for older versions of libcrypto.
    OpenSSH now requires LibreSSL &gt;= 3.1.0 or OpenSSL &gt;= 1.1.1.
    Note that these versions are already deprecated by their upstream
    vendors.
  * ssh-agent(1): PKCS#11 modules must now be specified by their full
    paths. Previously dlopen(3) could search for them in system
    library directories.
  = New features
  * ssh(1): allow forwarding Unix Domain sockets via ssh -W.
  * ssh(1): add support for configuration tags to ssh(1).
    This adds a ssh_config(5) "Tag" directive and corresponding
    "Match tag" predicate that may be used to select blocks of
    configuration similar to the pf.conf(5) keywords of the same
    name.
  * ssh(1): add a "match localnetwork" predicate. This allows matching
    on the addresses of available network interfaces and may be used to
    vary the effective client configuration based on network location.
  * ssh(1), sshd(8), ssh-keygen(1): infrastructure support for KRL
    extensions.  This defines wire formats for optional KRL extensions
    and implements parsing of the new submessages. No actual extensions
    are supported at this point.
  * sshd(8): AuthorizedPrincipalsCommand and AuthorizedKeysCommand now
    accept two additional %-expansion sequences: %D which expands to
    the routing domain of the connected session and %C which expands
    to the addresses and port numbers for the source and destination
    of the connection.
  * ssh-keygen(1): increase the default work factor (rounds) for the
    bcrypt KDF used to derive symmetric encryption keys for passphrase
    protected key files by 50%.
  = Bugfixes
  * ssh-agent(1): improve isolation between loaded PKCS#11 modules
    by running separate ssh-pkcs11-helpers for each loaded provider.
  * ssh(1): make -f (fork after authentication) work correctly with
    multiplexed connections, including ControlPersist. bz3589 bz3589
  * ssh(1): make ConnectTimeout apply to multiplexing sockets and not
    just to network connections.
  * ssh-agent(1), ssh(1): improve defences against invalid PKCS#11
    modules being loaded by checking that the requested module
    contains the required symbol before loading it.
  * sshd(8): fix AuthorizedPrincipalsCommand when AuthorizedKeysCommand
    appears before it in sshd_config. Since OpenSSH 8.7 the
    AuthorizedPrincipalsCommand directive was incorrectly ignored in
    this situation. bz3574
  * sshd(8), ssh(1), ssh-keygen(1): remove vestigal support for KRL
    signatures When the KRL format was originally defined, it included
    support for signing of KRL objects. However, the code to sign KRLs
    and verify KRL signatues was never completed in OpenSSH. This
    release removes the partially-implemented code to verify KRLs.
    All OpenSSH tools now ignore KRL_SECTION_SIGNATURE sections in
    KRL files.
  * All: fix a number of memory leaks and unreachable/harmless integer
    overflows.
  * ssh-agent(1), ssh(1): don't truncate strings logged from PKCS#11
    modules; GHPR406
  * sshd(8), ssh(1): better validate CASignatureAlgorithms in
    ssh_config and sshd_config. Previously this directive would accept
    certificate algorithm names, but these were unusable in practice as
    OpenSSH does not support CA chains. bz3577
  * ssh(1): make `ssh -Q CASignatureAlgorithms` only list signature
    algorithms that are valid for CA signing. Previous behaviour was
    to list all signing algorithms, including certificate algorithms.
  * ssh-keyscan(1): gracefully handle systems where rlimits or the
    maximum number of open files is larger than INT_MAX; bz3581
  * ssh-keygen(1): fix "no comment" not showing on when running
    `ssh-keygen -l` on multiple keys where one has a comment and other
    following keys do not. bz3580
  * scp(1), sftp(1): adjust ftruncate() logic to handle servers that
    reorder requests. Previously, if the server reordered requests then
    the resultant file would be erroneously truncated.
  * ssh(1): don't incorrectly disable hostname canonicalization when
    CanonicalizeHostname=yes and ProxyJump was expicitly set to
    "none". bz3567
  * scp(1): when copying local-&gt;remote, check that the source file
    exists before opening an SFTP connection to the server. Based on
    GHPR#370
- Dropped patches:
  * cb4ed12f.patch - implemented upstream.
- Rebased patches:
  * openssh-7.7p1-fips.patch
  * openssh-7.8p1-role-mls.patch
  * openssh-8.0p1-gssapi-keyex.patch
- Add patches from obs:
  * Mon Mar  4 09:57:06 UTC 2024 - Pedro Monreal &lt;pmonreal@suse.com&gt;
- Add crypto-policies support [bsc#1211301]
  * Add patches:
  - openssh-9.6p1-crypto-policies.patch
  - openssh-9.6p1-crypto-policies-man.patch</changelog>
  <changelog author="opensuse@arnavion.dev" date="1712836800">- Fix duplicate loading of dropins. (boo#1222467)</changelog>
  <changelog author="alarrosa@suse.com" date="1712923200">- Make openssh-server recommend the openssh-server-config-rootlogin
  package in SLE in order to keep the same behaviour of previous
  SPs where the PermitRootLogin default was set to yes
  (bsc#1221005).
- Fix crypto-policies requirement to be set by openssh-server, not
  the config-rootlogin subpackage.
- Add back %config(noreplace) tag for more config files that were
  already set like this in previous SPs.</changelog>
  <changelog author="meissner@suse.com" date="1713182400">- openssh-8.0p1-gssapi-keyex.patch: Added missing struct initializer,
  added missing parameter (bsc#1222840)</changelog>
  <changelog author="alarrosa@suse.com" date="1715601600">- Only for SLE15, restore the patch file removed in
  Thu Feb 18 13:54:44 UTC 2021 to restore the previous behaviour
  from SP5 of having root password login allowed by default
  (fixes bsc#1223486, related to bsc#1173067):
  * openssh-7.7p1-allow_root_password_login.patch
- Since the default value for this config option is now set to
  permit root to use password logins in SLE15, the
  openssh-server-config-rootlogin subpackage isn't useful there so
  we now create an openssh-server-config-disallow-rootlogin
  subpackage that sets the configuration the other way around
  than openssh-server-config-rootlogin.</changelog>
  <changelog author="alarrosa@suse.com" date="1715688000">- Add a warning in %post of openssh-clients, openssh-server and
  openssh-server-config-disallow-rootlogin to warn the user if
  the /etc/ssh/(ssh_config.d|sshd_config.d) directories are not
  being used (bsc#1223486).</changelog>
  <changelog author="alarrosa@suse.com" date="1719835200">- Add patch to fix a race condition in a signal handler by removing
  the async-signal-unsafe code (CVE-2024-6387, bsc#1226642):
  * fix-CVE-2024-6387.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720008000">- Add obsoletes for openssh-server-config-rootlogin since that
  package existed for a brief period of time during SLE 15 SP6/
  Leap 15.6 development but even if it was removed from the
  repositories before GM, some users might have it in their
  systems from having tried a beta/RC release (boo#1227350).
- Add #include &lt;stdlib.h&gt; in some files added by the ldap patch to
  fix build with gcc14 (boo#1225904).
  * openssh-7.7p1-ldap.patch
- Remove the recommendation for openssh-server-config-rootlogin
  from openssh-server. Since the default for that config option
  was changed in SLE it's not needed anymore in SLE nor in TW
  (boo#1224392).</changelog>
  <changelog author="alarrosa@suse.com" date="1720180800">- Add patch from upstream to fix proxy multiplexing mode:
  * 0001-upstream-fix-proxy-multiplexing-mode_-broken-when-keystroke.patch
- Add patch from upstream to restore correctly sigprocmask
  * 0001-upstream-correctly-restore-sigprocmask-around-ppoll.patch
- Add patch from upstream to fix a logic error in
  ObscureKeystrokeTiming that rendered this feature ineffective,
  allowing a passive observer to detect which network packets
  contained real keystrokes (bsc#1227318, CVE-2024-39894):
  * 0001-upstream-when-sending-ObscureKeystrokeTiming-chaff-packets_.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1720612800">- Remove empty line at the end of sshd-sle.pamd (bsc#1227456)</changelog>
  <changelog author="alarrosa@suse.com" date="1728648000">- Add a patch to fix a regression introduced in 9.6 that makes X11
  forwarding very slow. Submitted to upstream in
  https://bugzilla.mindrot.org/show_bug.cgi?id=3655#c4 . Fixes
  bsc#1229449:
  * fix-x11-regression-bsc1229449.patch
- Add a openssl11 bcond to the spec file for the SLE12 case
  instead of checking suse_version in different parts.
- Move conditional patches to a number &gt;= 1000.
- Several spec file fixes so the package builds and can be
  installed in SLE 15 SP5 and SLE 12 SP5
- Drop most of openssh-6.6p1-keycat.patch (actually, it was just
  commented out). The keycat binary isn't really installed nor
  supported, so we can drop it, except for the code that is used
  by other SELinux patches, which is what I kept from that patch
  (boo#1229072).
- Add patch submitted to upstream to fix RFC4256 implementation
  so that keyboard-interactive authentication method can send
  instructions and sshd shows them to users even before a prompt
  is requested. This fixes MFA push notifications (boo#1229010).
  * 0001-auth-pam-Immediately-report-instructions-to-clients-and-fix-handling-in-ssh-client.patch
- Fix a dbus connection leaked in the logind patch that was
  missing a sd_bus_unref call (found by Matthias Gerstner):
  * logind_set_tty.patch
- Add a patch that fixes a small memory leak when parsing the
  subsystem configuration option:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1728907200">- Use %{with ...} instead of 0%{with ...}</changelog>
  <changelog author="alarrosa@suse.com" date="1739448000">- Fix a MitM attack against OpenSSH's VerifyHostKeyDNS-enabled
  client and a DoS attack against OpenSSH's client and server
  (bsc#1237040, CVE-2025-26465, bsc#1237041, CVE-2025-26466):
  * fix-CVE-2025-26465-and-CVE-2025-26466.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1739880000">- Fix ssh client segfault with GSSAPIKeyExchange=yes in ssh_kex2
  due to gssapi proposal not being correctly initialized
  (bsc#1236826). The problem was introduced in the rebase of
  the patch for 9.6p1:
  * openssh-8.0p1-gssapi-keyex.patch
- Rebase patch and apply it:
  * fix-memleak-in-process_server_config_line_depth.patch</changelog>
  <changelog author="hpj@suse.com" date="1746532800">- Added openssh-cve-2025-32728.patch (bsc#1241012, CVE-2025-32728).
  This fixes an upstream logic error handling the DisableForwarding
  option.</changelog>
  <changelog author="alarrosa@suse.com" date="1747137600">- Enable --with-logind to call the SetTTY dbus method in systemd.
  This allows "wall" to print messages in ssh ttys (bsc#1239671)
- Small fixes to unref the dbus session when any error occurs:
  * logind_set_tty.patch</changelog>
  <changelog author="hpj@suse.com" date="1748952000">- Add openssh-scp-umask-preserve-permissions.patch (bsc#1241667).</changelog>
  <changelog author="hpj@suse.com" date="1762516800">- Add openssh-cve-2025-61984-username-validation.patch
  (bsc#1251198, CVE-2025-61984).
- Add openssh-cve-2025-61985-nul-url-encode.patch
  (bsc#1251199, CVE-2025-61985).</changelog>
  <changelog author="hpj@suse.com" date="1778241600">- Added openssh-cve-2026-35385-scp-setuid-modes.patch (bsc#1261427),
  ensuring setuid bits default to being masked out by scp.
- Added openssh-cve-2026-35414-mishandled-ca-commas.patch
  (bsc#1261430), fixing mishandling of comma characters in CA in
  certain situations.</changelog>
</package>
<package pkgid="523e6e9465fc1c5e6b6dad73c2b7355d8b03806cc56eaba09b76c977660ed291" name="openssl-1_1" arch="src">
  <version epoch="0" ver="1.1.1w" rel="150700.11.11.1"/>
  <changelog author="pmonreal@suse.com" date="1719576000">- FIPS: Disallow non-approved KDF types [bsc#1224267]
  * Add openssl-1_1-ossl-sli-011-SSHKDF.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1719576001">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1224265]
  * Add PCT in function crypto/dh/dh_key.c:generate_key() to meet
    assurance 5.6.2.1.4 of SP 800-56Arev3.
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1719576002">- FIPS: Remove not needed FIPS DRBG files [bsc#1224268]</changelog>
  <changelog author="pmonreal@suse.com" date="1721649600">- Security fix: [bsc#1227138, CVE-2024-5535]
  * SSL_select_next_proto buffer overread
  * Add openssl-CVE-2024-5535.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1721649601">- Build with no-afalgeng [bsc#1226463]</changelog>
  <changelog author="pmonreal@suse.com" date="1723809600">- FIPS: DH FIPS selftest and safe prime group [bsc#1224264]
  * Add openssl-1_1-ossl-sli-012-DH-selftest-and-safe-prime-group.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809601">- FIPS: Mark SHA1 as non-approved in the SLI [bsc#1224266]
  * Add openssl-1_1-ossl-sli-013-Mark-SHA1-unapproved.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809602">- FIPS: Disable PKCSv1.5 and shake in FIPS mode [bsc#1224271]
  * FIPS 186-5 Section 5.4 disallows RSA PKCSv1.5 signature
    operations with XOF.
  * Add openssl-1_1-ossl-sli-014-PKCSv1.5-and-shake.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809603">- FIPS: Mark sigGen and sigVer primitives as non-approved [bsc#1224272]
  * Add openssl-1_1-ossl-sli-015-sigver-hashing.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809604">- FIPS: Differentiate the PSS length requirements [bsc#1224275]
  * Add openssl-1_1-ossl-sli-016-PSS-length.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725364800">- FIPS: The X9.31 scheme is not approved for RSA signature
  operations in FIPS 186-5. [bsc#1224269]
  * Add openssl-1_1-ossl-sli-017-X9.31-sign.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1726228800">- FIPS: Mark HKDF and TLSv1.3 KDF as approved in the SLI [bsc#1228619]
  * Add openssl-1_1-ossl-sli-018-TLS13-HKDF.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1726488000">- FIPS: Enforce KDF in FIPS style [bsc#1224270]
  * Add openssl-1_1-ossl-sli-019-Enforce-KDF.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1726488001">- FIPS: Mark PBKDF2 and HKDF HMAC input keys with size &gt;= 112 bits
  as approved in the SLI. [bsc#1228623]
  * openssl-1_1-ossl-sli-020-PBKDF2-HMAC-size-SLI.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1728734400">- FIPS: AES GCM external IV implementation [bsc#1228618]
  * Mark the standalone AES-GCM encryption with external IV
    as non-approved in the SLI.
  * Add openssl-1_1-ossl-sli-021-AES-GCM-external-IV.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1220262, CVE-2023-50782]
  * Implicit rejection in PKCS#1 v1.5
  * Add openssl-CVE-2023-50782.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="pmonreal@suse.com" date="1753185600">- FIPS: Use the NID_X9_62_prime256v1 curve in ECDSA KAT test
  instead of NID_secp256k1. [bsc#1246697]
  * Add openssl-fips-ECDSA-KAT.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1759233600">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl3-CVE-2025-9230.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1769083200">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795], [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]</changelog>
</package>
<package pkgid="bfee6100461d2c6808df8dac9da784e244519744e1a3db2f7e0b9b7f6e1e1f0d" name="openssl-1_1" arch="src">
  <version epoch="0" ver="1.1.1w" rel="150700.11.16.1"/>
  <changelog author="pmonreal@suse.com" date="1719576000">- FIPS: Remove not needed FIPS DRBG files [bsc#1224268]</changelog>
  <changelog author="pmonreal@suse.com" date="1721649600">- Security fix: [bsc#1227138, CVE-2024-5535]
  * SSL_select_next_proto buffer overread
  * Add openssl-CVE-2024-5535.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1721649601">- Build with no-afalgeng [bsc#1226463]</changelog>
  <changelog author="pmonreal@suse.com" date="1723809600">- FIPS: DH FIPS selftest and safe prime group [bsc#1224264]
  * Add openssl-1_1-ossl-sli-012-DH-selftest-and-safe-prime-group.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809601">- FIPS: Mark SHA1 as non-approved in the SLI [bsc#1224266]
  * Add openssl-1_1-ossl-sli-013-Mark-SHA1-unapproved.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809602">- FIPS: Disable PKCSv1.5 and shake in FIPS mode [bsc#1224271]
  * FIPS 186-5 Section 5.4 disallows RSA PKCSv1.5 signature
    operations with XOF.
  * Add openssl-1_1-ossl-sli-014-PKCSv1.5-and-shake.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809603">- FIPS: Mark sigGen and sigVer primitives as non-approved [bsc#1224272]
  * Add openssl-1_1-ossl-sli-015-sigver-hashing.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809604">- FIPS: Differentiate the PSS length requirements [bsc#1224275]
  * Add openssl-1_1-ossl-sli-016-PSS-length.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725364800">- FIPS: The X9.31 scheme is not approved for RSA signature
  operations in FIPS 186-5. [bsc#1224269]
  * Add openssl-1_1-ossl-sli-017-X9.31-sign.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1726228800">- FIPS: Mark HKDF and TLSv1.3 KDF as approved in the SLI [bsc#1228619]
  * Add openssl-1_1-ossl-sli-018-TLS13-HKDF.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1726488000">- FIPS: Enforce KDF in FIPS style [bsc#1224270]
  * Add openssl-1_1-ossl-sli-019-Enforce-KDF.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1726488001">- FIPS: Mark PBKDF2 and HKDF HMAC input keys with size &gt;= 112 bits
  as approved in the SLI. [bsc#1228623]
  * openssl-1_1-ossl-sli-020-PBKDF2-HMAC-size-SLI.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1728734400">- FIPS: AES GCM external IV implementation [bsc#1228618]
  * Mark the standalone AES-GCM encryption with external IV
    as non-approved in the SLI.
  * Add openssl-1_1-ossl-sli-021-AES-GCM-external-IV.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1220262, CVE-2023-50782]
  * Implicit rejection in PKCS#1 v1.5
  * Add openssl-CVE-2023-50782.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="pmonreal@suse.com" date="1753185600">- FIPS: Use the NID_X9_62_prime256v1 curve in ECDSA KAT test
  instead of NID_secp256k1. [bsc#1246697]
  * Add openssl-fips-ECDSA-KAT.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1759233600">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl3-CVE-2025-9230.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1769083200">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795], [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]</changelog>
  <changelog author="pmonreal@suse.com" date="1774526400">- Security fixes:
  * CVE-2026-28387: Potential use-after-free in DANE client code
    (bsc#1260441)
  * CVE-2026-28388: NULL Pointer Dereference When Processing a
    Delta (bsc#1260442)
  * CVE-2026-28389: Possible NULL dereference when processing CMS
    KeyAgreeRecipientInfo (bsc#1260443)
  * CVE-2026-31789: Heap buffer overflow in hexadecimal conversion
    (bsc#1260444)
  * NULL pointer dereference when processing an
    OCSP response (bsc#1260446)
  * Add	patches:
    openssl-CVE-2026-28387.patch
    openssl-CVE-2026-28388.patch
    openssl-CVE-2026-28389.patch
    openssl-CVE-2026-31789.patch
    openssl-NULL-pointer-dereference-in-ocsp_find_signer_sk.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1775649600">- Security fix:
  * CVE-2026-28390: NULL pointer dereference during processing of a crafted
    CMS EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678)
  * Add openssl-CVE-2026-28390.patch</changelog>
</package>
<package pkgid="1e335e6d4ee1d9fe00ef97a912b01f13ef6a40f87d79f1241220c4f104d2b08c" name="openssl-1_1" arch="src">
  <version epoch="0" ver="1.1.1w" rel="150700.11.19.1"/>
  <changelog author="pmonreal@suse.com" date="1721649600">- Security fix: [bsc#1227138, CVE-2024-5535]
  * SSL_select_next_proto buffer overread
  * Add openssl-CVE-2024-5535.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1721649601">- Build with no-afalgeng [bsc#1226463]</changelog>
  <changelog author="pmonreal@suse.com" date="1723809600">- FIPS: DH FIPS selftest and safe prime group [bsc#1224264]
  * Add openssl-1_1-ossl-sli-012-DH-selftest-and-safe-prime-group.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809601">- FIPS: Mark SHA1 as non-approved in the SLI [bsc#1224266]
  * Add openssl-1_1-ossl-sli-013-Mark-SHA1-unapproved.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809602">- FIPS: Disable PKCSv1.5 and shake in FIPS mode [bsc#1224271]
  * FIPS 186-5 Section 5.4 disallows RSA PKCSv1.5 signature
    operations with XOF.
  * Add openssl-1_1-ossl-sli-014-PKCSv1.5-and-shake.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809603">- FIPS: Mark sigGen and sigVer primitives as non-approved [bsc#1224272]
  * Add openssl-1_1-ossl-sli-015-sigver-hashing.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809604">- FIPS: Differentiate the PSS length requirements [bsc#1224275]
  * Add openssl-1_1-ossl-sli-016-PSS-length.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725364800">- FIPS: The X9.31 scheme is not approved for RSA signature
  operations in FIPS 186-5. [bsc#1224269]
  * Add openssl-1_1-ossl-sli-017-X9.31-sign.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1726228800">- FIPS: Mark HKDF and TLSv1.3 KDF as approved in the SLI [bsc#1228619]
  * Add openssl-1_1-ossl-sli-018-TLS13-HKDF.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1726488000">- FIPS: Enforce KDF in FIPS style [bsc#1224270]
  * Add openssl-1_1-ossl-sli-019-Enforce-KDF.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1726488001">- FIPS: Mark PBKDF2 and HKDF HMAC input keys with size &gt;= 112 bits
  as approved in the SLI. [bsc#1228623]
  * openssl-1_1-ossl-sli-020-PBKDF2-HMAC-size-SLI.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1728734400">- FIPS: AES GCM external IV implementation [bsc#1228618]
  * Mark the standalone AES-GCM encryption with external IV
    as non-approved in the SLI.
  * Add openssl-1_1-ossl-sli-021-AES-GCM-external-IV.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1220262, CVE-2023-50782]
  * Implicit rejection in PKCS#1 v1.5
  * Add openssl-CVE-2023-50782.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="pmonreal@suse.com" date="1753185600">- FIPS: Use the NID_X9_62_prime256v1 curve in ECDSA KAT test
  instead of NID_secp256k1. [bsc#1246697]
  * Add openssl-fips-ECDSA-KAT.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1759233600">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl3-CVE-2025-9230.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1769083200">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795], [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]</changelog>
  <changelog author="pmonreal@suse.com" date="1774526400">- Security fixes:
  * CVE-2026-28387: Potential use-after-free in DANE client code
    (bsc#1260441)
  * CVE-2026-28388: NULL Pointer Dereference When Processing a
    Delta (bsc#1260442)
  * CVE-2026-28389: Possible NULL dereference when processing CMS
    KeyAgreeRecipientInfo (bsc#1260443)
  * CVE-2026-31789: Heap buffer overflow in hexadecimal conversion
    (bsc#1260444)
  * NULL pointer dereference when processing an
    OCSP response (bsc#1260446)
  * Add	patches:
    openssl-CVE-2026-28387.patch
    openssl-CVE-2026-28388.patch
    openssl-CVE-2026-28389.patch
    openssl-CVE-2026-31789.patch
    openssl-NULL-pointer-dereference-in-ocsp_find_signer_sk.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1775649600">- Security fix:
  * CVE-2026-28390: NULL pointer dereference during processing of a crafted
    CMS EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678)
  * Add openssl-CVE-2026-28390.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1776772800">- bsc#1250782 Fix 30-test_fips_sli.t fails intermittently on s390x
  Fix AES_GCM IV test sometimes failing on s390x.
  * Add openssl-fix-fips-slitest-s390x.patch</changelog>
</package>
<package pkgid="904701ce78c6e258e63e5f47a8882a8cb81151ef9de2362bee2693dc304e58cc" name="openssl-1_1" arch="src">
  <version epoch="0" ver="1.1.1w" rel="150700.11.3.1"/>
  <changelog author="pmonreal@suse.com" date="1719403200">- FIPS: DRBG component chaining [bsc#1224258]
  * Add prediction resistance and oversampling of the noise source.
  * Allow setting the FIPS error state if jitterentropy fails the
    health-tests.
  * Add patches:
  - openssl-1_1-FIPS-140-3-DRBG-prediction-resistance.patch
  - openssl-1_1-FIPS-140-3-DRBG-oversampling.patch
  - openssl-1_1-jitterentropy-error-state.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1719576000">- FIPS: Disallow RSA sigVer with 1024 and ECDSA sigVer/keyVer P-192 [bsc#1224273]
  * Add openssl-1_1-ossl-sli-009-RSA-sigver.patch
  * Add openssl-1_1-ossl-sli-010-ECDSA-sigver-keyver.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1719576001">- FIPS: Disallow non-approved KDF types [bsc#1224267]
  * Add openssl-1_1-ossl-sli-011-SSHKDF.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1719576002">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1224265]
  * Add PCT in function crypto/dh/dh_key.c:generate_key() to meet
    assurance 5.6.2.1.4 of SP 800-56Arev3.
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1719576003">- FIPS: Remove not needed FIPS DRBG files [bsc#1224268]</changelog>
  <changelog author="pmonreal@suse.com" date="1721649600">- Security fix: [bsc#1227138, CVE-2024-5535]
  * SSL_select_next_proto buffer overread
  * Add openssl-CVE-2024-5535.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1721649601">- Build with no-afalgeng [bsc#1226463]</changelog>
  <changelog author="pmonreal@suse.com" date="1723809600">- FIPS: DH FIPS selftest and safe prime group [bsc#1224264]
  * Add openssl-1_1-ossl-sli-012-DH-selftest-and-safe-prime-group.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809601">- FIPS: Mark SHA1 as non-approved in the SLI [bsc#1224266]
  * Add openssl-1_1-ossl-sli-013-Mark-SHA1-unapproved.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809602">- FIPS: Disable PKCSv1.5 and shake in FIPS mode [bsc#1224271]
  * FIPS 186-5 Section 5.4 disallows RSA PKCSv1.5 signature
    operations with XOF.
  * Add openssl-1_1-ossl-sli-014-PKCSv1.5-and-shake.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809603">- FIPS: Mark sigGen and sigVer primitives as non-approved [bsc#1224272]
  * Add openssl-1_1-ossl-sli-015-sigver-hashing.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809604">- FIPS: Differentiate the PSS length requirements [bsc#1224275]
  * Add openssl-1_1-ossl-sli-016-PSS-length.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725364800">- FIPS: The X9.31 scheme is not approved for RSA signature
  operations in FIPS 186-5. [bsc#1224269]
  * Add openssl-1_1-ossl-sli-017-X9.31-sign.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1726228800">- FIPS: Mark HKDF and TLSv1.3 KDF as approved in the SLI [bsc#1228619]
  * Add openssl-1_1-ossl-sli-018-TLS13-HKDF.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1726488000">- FIPS: Enforce KDF in FIPS style [bsc#1224270]
  * Add openssl-1_1-ossl-sli-019-Enforce-KDF.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1726488001">- FIPS: Mark PBKDF2 and HKDF HMAC input keys with size &gt;= 112 bits
  as approved in the SLI. [bsc#1228623]
  * openssl-1_1-ossl-sli-020-PBKDF2-HMAC-size-SLI.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1728734400">- FIPS: AES GCM external IV implementation [bsc#1228618]
  * Mark the standalone AES-GCM encryption with external IV
    as non-approved in the SLI.
  * Add openssl-1_1-ossl-sli-021-AES-GCM-external-IV.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1220262, CVE-2023-50782]
  * Implicit rejection in PKCS#1 v1.5
  * Add openssl-CVE-2023-50782.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="pmonreal@suse.com" date="1753185600">- FIPS: Use the NID_X9_62_prime256v1 curve in ECDSA KAT test
  instead of NID_secp256k1. [bsc#1246697]
  * Add openssl-fips-ECDSA-KAT.patch</changelog>
</package>
<package pkgid="6d4de19326d9cdddc61cbf7c8be7b0c49bc5c7e0161dcd0b320ef9540b707a66" name="openssl-1_1" arch="src">
  <version epoch="0" ver="1.1.1w" rel="150700.11.6.1"/>
  <changelog author="pmonreal@suse.com" date="1719576000">- FIPS: Disallow RSA sigVer with 1024 and ECDSA sigVer/keyVer P-192 [bsc#1224273]
  * Add openssl-1_1-ossl-sli-009-RSA-sigver.patch
  * Add openssl-1_1-ossl-sli-010-ECDSA-sigver-keyver.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1719576001">- FIPS: Disallow non-approved KDF types [bsc#1224267]
  * Add openssl-1_1-ossl-sli-011-SSHKDF.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1719576002">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1224265]
  * Add PCT in function crypto/dh/dh_key.c:generate_key() to meet
    assurance 5.6.2.1.4 of SP 800-56Arev3.
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1719576003">- FIPS: Remove not needed FIPS DRBG files [bsc#1224268]</changelog>
  <changelog author="pmonreal@suse.com" date="1721649600">- Security fix: [bsc#1227138, CVE-2024-5535]
  * SSL_select_next_proto buffer overread
  * Add openssl-CVE-2024-5535.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1721649601">- Build with no-afalgeng [bsc#1226463]</changelog>
  <changelog author="pmonreal@suse.com" date="1723809600">- FIPS: DH FIPS selftest and safe prime group [bsc#1224264]
  * Add openssl-1_1-ossl-sli-012-DH-selftest-and-safe-prime-group.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809601">- FIPS: Mark SHA1 as non-approved in the SLI [bsc#1224266]
  * Add openssl-1_1-ossl-sli-013-Mark-SHA1-unapproved.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809602">- FIPS: Disable PKCSv1.5 and shake in FIPS mode [bsc#1224271]
  * FIPS 186-5 Section 5.4 disallows RSA PKCSv1.5 signature
    operations with XOF.
  * Add openssl-1_1-ossl-sli-014-PKCSv1.5-and-shake.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809603">- FIPS: Mark sigGen and sigVer primitives as non-approved [bsc#1224272]
  * Add openssl-1_1-ossl-sli-015-sigver-hashing.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1723809604">- FIPS: Differentiate the PSS length requirements [bsc#1224275]
  * Add openssl-1_1-ossl-sli-016-PSS-length.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1725364800">- FIPS: The X9.31 scheme is not approved for RSA signature
  operations in FIPS 186-5. [bsc#1224269]
  * Add openssl-1_1-ossl-sli-017-X9.31-sign.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1726228800">- FIPS: Mark HKDF and TLSv1.3 KDF as approved in the SLI [bsc#1228619]
  * Add openssl-1_1-ossl-sli-018-TLS13-HKDF.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1726488000">- FIPS: Enforce KDF in FIPS style [bsc#1224270]
  * Add openssl-1_1-ossl-sli-019-Enforce-KDF.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1726488001">- FIPS: Mark PBKDF2 and HKDF HMAC input keys with size &gt;= 112 bits
  as approved in the SLI. [bsc#1228623]
  * openssl-1_1-ossl-sli-020-PBKDF2-HMAC-size-SLI.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1728734400">- FIPS: AES GCM external IV implementation [bsc#1228618]
  * Mark the standalone AES-GCM encryption with external IV
    as non-approved in the SLI.
  * Add openssl-1_1-ossl-sli-021-AES-GCM-external-IV.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1220262, CVE-2023-50782]
  * Implicit rejection in PKCS#1 v1.5
  * Add openssl-CVE-2023-50782.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="pmonreal@suse.com" date="1753185600">- FIPS: Use the NID_X9_62_prime256v1 curve in ECDSA KAT test
  instead of NID_secp256k1. [bsc#1246697]
  * Add openssl-fips-ECDSA-KAT.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1759233600">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl3-CVE-2025-9230.patch</changelog>
</package>
<package pkgid="24513e3b13bac8595dcb292975034251f0702bb33230a2fbf09c3020a7aef7cf" name="openssl-3" arch="src">
  <version epoch="0" ver="3.2.3" rel="150700.5.10.1"/>
  <changelog author="abergmann@suse.com" date="1724328000">- Security fix: [bsc#1229465, CVE-2024-6119]
  * possible denial of service in X.509 name checks
  * openssl-CVE-2024-6119.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1727265600">- Security fix: [bsc#1230698, CVE-2024-41996]
  * Validating the order of the public keys in the Diffie-Hellman
    Key Agreement Protocol, when an approved safe prime is used.
  * Added openssl-3-CVE-2024-41996.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1220262, CVE-2023-50782]
  * Implicit rejection in PKCS#1 v1.5
  * Add openssl-CVE-2023-50782.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166401">- Security fix: [bsc#1231741, CVE-2024-9143]
  * Low-level invalid GF(2^m) parameters lead to OOB memory access
  * Add openssl-CVE-2024-9143.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729512000">- Update to 3.1.7:
  * Major changes between OpenSSL 3.1.6 and OpenSSL 3.1.7 [3 Sep 2024]
  - Fixed possible denial of service in X.509 name checks (CVE-2024-6119)
  - Fixed possible buffer overread in SSL_select_next_proto()
    (CVE-2024-5535)
  * Major changes between OpenSSL 3.1.5 and OpenSSL 3.1.6 [4 Jun 2024]
  - Fixed potential use after free after SSL_free_buffers() is
    called (CVE-2024-4741)
  - Fixed an issue where checking excessively long DSA keys or
    parameters may be very slow (CVE-2024-4603)
  - Fixed unbounded memory growth with session handling in TLSv1.3
    (CVE-2024-2511)
  * Major changes between OpenSSL 3.1.4 and OpenSSL 3.1.5 [30 Jan 2024]
  - Fixed PKCS12 Decoding crashes (CVE-2024-0727)
  - Fixed Excessive time spent checking invalid RSA public keys
    [CVE-2023-6237)
  - Fixed POLY1305 MAC implementation corrupting vector registers
    on PowerPC CPUs which support PowerISA 2.07 (CVE-2023-6129)
  - Fix excessive time spent in DH check / generation with large
    Q parameter value (CVE-2023-5678)
  * Update openssl.keyring with BA5473A2B0587B07FB27CF2D216094DFD0CB81EF
  * Rebase patches:
  - openssl-Force-FIPS.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-CVE-2023-50782.patch
  * Remove patches fixed in the update:
  - openssl-Improve-performance-for-6x-unrolling-with-vpermxor-i.patch
  - openssl-CVE-2024-6119.patch openssl-CVE-2024-5535.patch
  - openssl-CVE-2024-4741.patch openssl-CVE-2024-4603.patch
  - openssl-CVE-2024-2511.patch openssl-CVE-2024-0727.patch
  - openssl-CVE-2023-6237.patch openssl-CVE-2023-6129.patch
  - openssl-CVE-2023-5678.patch openssl-3-CVE-2024-41996.patch
  - openssl-Enable-BTI-feature-for-md5-on-aarch64.patch
  - openssl-Fix-EVP_PKEY_CTX_add1_hkdf_info-behavior.patch
  - openssl-Handle-empty-param-in-EVP_PKEY_CTX_add1_hkdf_info.patch
  - reproducible.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729857600">- Update to 3.2.0:
  * Changes between 3.1.x and 3.2.0:
  - Fix excessive time spent in DH check/ generation with large Q parameter
    value. [CVE-2023-5678]
  - The BLAKE2b hash algorithm supports a configurable output length
    by setting the "size" parameter.
  - Added a function to delete objects from store by URI - OSSL_STORE_delete()
    and the corresponding provider-storemgmt API function OSSL_FUNC_store_delete().
  - Added OSSL_FUNC_store_open_ex() provider-storemgmt API function to pass
    a passphrase callback when opening a store.
  - Changed the default salt length used by PBES2 KDF's (PBKDF2 and scrypt)
    from 8 bytes to 16 bytes.
  - Changed the default value of the 'ess_cert_id_alg' configuration
    option which is used to calculate the TSA's public key certificate
    identifier. The default algorithm is updated to be sha256 instead of sha1.
  - Added optimization for SM2 algorithm on aarch64. A new configure option
    'no-sm2-precomp' has been added to disable the precomputed table.
  - Added client side support for QUIC
  - Added secp384r1 implementation using Solinas' reduction to improve
    speed of the NIST P-384 elliptic curve. To enable the implementation
    the build option 'enable-ec_nistp_64_gcc_128' must be used.
  - Improved RFC7468 compliance of the asn1parse command.
  - Added SHA256/192 algorithm support.
  - Added support for securely getting root CA certificate update in CMP.
  - Improved contention on global write locks by using more read locks where
    appropriate.
  - Improved performance of OSSL_PARAM lookups in performance critical
    provider functions.
  - Added the SSL_get0_group_name() function to provide access to the
    name of the group used for the TLS key exchange.
  - Provide a new configure option 'no-http' that can be used to disable the
    HTTP support. Provide new configure options 'no-apps' and 'no-docs' to
    disable building the openssl command line application and the documentation.
  - Provide a new configure option 'no-ecx' that can be used to disable the
    X25519, X448, and EdDSA support.
  - When multiple OSSL_KDF_PARAM_INFO parameters are passed to
    the EVP_KDF_CTX_set_params() function they are now concatenated not just
    for the HKDF algorithm but also for SSKDF and X9.63 KDF algorithms.
  - Added OSSL_FUNC_keymgmt_im/export_types_ex() provider functions that get
    the provider context as a parameter.
  - TLS round-trip time calculation was added by a Brigham Young University
    Capstone team partnering with Sandia National Laboratories. A new function
    in ssl_lib titled SSL_get_handshake_rtt will calculate and retrieve this
    value.
  - Added the "-quic" option to s_client to enable connectivity to QUIC servers.
    QUIC requires the use of ALPN, so this must be specified via the "-alpn"
    option. Use of the "advanced" s_client command command via the "-adv" option
    is recommended.
  - Added an "advanced" command mode to s_client. Use this with the "-adv" option.
  - Add Raw Public Key (RFC7250) support.
  - Added support for modular exponentiation and CRT offloading for the
    S390x architecture.
  - Added further assembler code for the RISC-V architecture.
  - Added EC_GROUP_to_params() which creates an OSSL_PARAM array
    from a given EC_GROUP.
  - Improved support for non-default library contexts and property queries
    when parsing PKCS#12 files.
  - Implemented support for all five instances of EdDSA from RFC8032:
    Ed25519, Ed25519ctx, Ed25519ph, Ed448, and Ed448ph.
    The streaming is not yet supported for the HashEdDSA variants
    (Ed25519ph and Ed448ph).
  - Added SM4 optimization for ARM processors using ASIMD and AES HW instructions.
  - Implemented SM4-XTS support.
  - Added platform-agnostic OSSL_sleep() function.
  - Implemented deterministic ECDSA signatures (RFC6979) support.
  - Implemented AES-GCM-SIV (RFC8452) support.
  - Added support for pluggable (provider-based) TLS signature algorithms.
    This enables TLS 1.3 authentication operations with algorithms embedded
    in providers not included by default in OpenSSL. In combination with
    the already available pluggable KEM and X.509 support, this enables
    for example suitable providers to deliver post-quantum or quantum-safe
    cryptography to OpenSSL users.
  - Added support for pluggable (provider-based) CMS signature algorithms.
    This enables CMS sign and verify operations with algorithms embedded
    in providers not included by default in OpenSSL.
  - Implemented HPKE DHKEM support in providers used by HPKE (RFC9180) API.
  - Add support for certificate compression (RFC8879), including
    library support for Brotli and Zstandard compression.
  - Add the ability to add custom attributes to PKCS12 files. Add a new API
    PKCS12_create_ex2, identical to the existing PKCS12_create_ex but allows
    for a user specified callback and optional argument.
    Added a new PKCS12_SAFEBAG_set0_attr, which allows for a new attr to be
    added to the existing STACK_OF attrs.
  - Major refactor of the libssl record layer.
  - Add a mac salt length option for the pkcs12 command.
  - Add more SRTP protection profiles from RFC8723 and RFC8269.
  - Extended Kernel TLS (KTLS) to support TLS 1.3 receive offload.
  - Add support for TCP Fast Open (RFC7413) to macOS, Linux, and FreeBSD where
    supported and enabled.
  - Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489)
    to the list of ciphersuites providing Perfect Forward Secrecy as
    required by SECLEVEL &gt;= 3.
  - Add new SSL APIs to aid in efficiently implementing TLS/SSL fingerprinting.
    The SSL_CTRL_GET_IANA_GROUPS control code, exposed as the
    SSL_get0_iana_groups() function-like macro, retrieves the list of
    supported groups sent by the peer.
  - Fixed PEM_write_bio_PKCS8PrivateKey() and PEM_write_bio_PKCS8PrivateKey_nid()
    to make it possible to use empty passphrase strings.
  - The PKCS12_parse() function now supports MAC-less PKCS12 files.
  - Added ASYNC_set_mem_functions() and ASYNC_get_mem_functions() calls to be able
    to change functions used for allocating the memory of asynchronous call stack.
  - Added support for signed BIGNUMs in the OSSL_PARAM APIs.
  - A failure exit code is returned when using the openssl x509 command to check
    certificate attributes and the checks fail.
  - The default SSL/TLS security level has been changed from 1 to 2. RSA,
    DSA and DH keys of 1024 bits and above and less than 2048 bits and ECC keys
    of 160 bits and above and less than 224 bits were previously accepted by
    default but are now no longer allowed. By default TLS compression was
    already disabled in previous OpenSSL versions. At security level 2 it cannot
    be enabled.
  - The SSL_CTX_set_cipher_list family functions now accept ciphers using their
    IANA standard names.
  - The PVK key derivation function has been moved from b2i_PVK_bio_ex() into
    the legacy crypto provider as an EVP_KDF. Applications requiring this KDF
    will need to load the legacy crypto provider.
  - CCM8 cipher suites in TLS have been downgraded to security level zero
    because they use a short authentication tag which lowers their strength.
  - Subject or issuer names in X.509 objects are now displayed as UTF-8 strings
    by default. Also spaces surrounding '=' in DN output are removed.
  - Add X.509 certificate codeSigning purpose and related checks on key usage and
    extended key usage of the leaf certificate according to the CA/Browser Forum.
  - The 'x509', 'ca', and 'req' apps now produce X.509 v3 certificates.
    The '-x509v1' option of 'req' prefers generation of X.509 v1 certificates.
    'X509_sign()' and 'X509_sign_ctx()' make sure that the certificate has
    X.509 version 3 if the certificate information includes X.509 extensions.
  - Fix and extend certificate handling and the apps 'x509', 'verify' etc.
    such as adding a trace facility for debugging certificate chain building.
  - Various fixes and extensions to the CMP+CRMF implementation and the 'cmp' app
    in particular supporting requests for central key generation, generalized
    polling, and various types of genm/genp exchanges defined in CMP Updates.
  - Fixes and extensions to the HTTP client and to the HTTP server in 'apps/'
    like correcting the TLS and proxy support and adding tracing for debugging.
  - Extended the CMS API for handling 'CMS_SignedData' and 'CMS_EnvelopedData'.
  - 'CMS_add0_cert()' and 'CMS_add1_cert()' no longer throw an error if
    a certificate to be added is already present. 'CMS_sign_ex()' and
    'CMS_sign()' now ignore any duplicate certificates in their 'certs' argument
    and no longer throw an error for them.
  - Added BIO_s_dgram_pair() and BIO_s_dgram_mem() that provide memory-based
    BIOs with datagram semantics and support for BIO_sendmmsg() and BIO_recvmmsg()
    calls. They can be used as the transport BIOs for QUIC.
  - Add new BIO_sendmmsg() and BIO_recvmmsg() BIO methods which allow
    sending and receiving multiple messages in a single call. An implementation
    is provided for BIO_dgram. For further details, see BIO_sendmmsg(3).
  - Support for loading root certificates from the Windows certificate store
    has been added.
  - Enable KTLS with the TLS 1.3 CCM mode ciphersuites. Note that some linux
    kernel versions that support KTLS have a known bug in CCM processing. That
    has been fixed in stable releases starting from 5.4.164, 5.10.84, 5.15.7,
    and all releases since 5.16. KTLS with CCM ciphersuites should be only used
    on these releases.
  - Added '-ktls' option to 's_server' and 's_client' commands to enable the
    KTLS support.
  - Zerocopy KTLS sendfile() support on Linux.
  - The OBJ_ calls are now thread safe using a global lock.
  - New parameter '-digest' for openssl cms command allowing signing
    pre-computed digests and new CMS API functions supporting that
    functionality.
  - OPENSSL_malloc() and other allocation functions now raise errors on
    allocation failures. The callers do not need to explicitly raise errors
    unless they want to for tracing purposes.
  - Added support for Brainpool curves in TLS-1.3.
  - Support for Argon2d, Argon2i, Argon2id KDFs has been added along with
    a basic thread pool implementation for select platforms.</changelog>
  <changelog author="pmonreal@suse.com" date="1729857601">- Update to 3.2.1:
  * Changes between 3.2.0 and 3.2.1:
  - A file in PKCS12 format can contain certificates and keys and may come from
    an untrusted source. The PKCS12 specification allows certain fields to be
    NULL, but OpenSSL did not correctly check for this case. [CVE-2024-0727]
  - When function EVP_PKEY_public_check() is called on RSA public keys,
    a computation is done to confirm that the RSA modulus, n, is composite.
    For valid RSA keys, n is a product of two or more large primes and this
    computation completes quickly. However, if n is an overly large prime,
    then this computation would take a long time. [CVE-2023-6237]
  - Restore the encoding of SM2 PrivateKeyInfo and SubjectPublicKeyInfo to
    have the contained AlgorithmIdentifier.algorithm set to id-ecPublicKey
    rather than SM2.
  - The POLY1305 MAC (message authentication code) implementation in OpenSSL
    for PowerPC CPUs saves the contents of vector registers in different
    order than they are restored. [CVE-2023-6129]
  - Disable building QUIC server utility when OpenSSL is configured with 'no-apps'.
  * The openssl-crypto-policies-support.patch has been merged into
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Rename openssl-Disable-default-provider-for-test-suite.patch and rebase to
    openssl-TESTS-Disable-default-provider-crypto-policies.patch
  * Patches removed in the update:
  - openssl-Add_support_for_Windows_CA_certificate_store.patch
  - openssl-ec-56-bit-Limb-Solinas-Strategy-for-secp384r1.patch
  - openssl-ec-Use-static-linkage-on-nistp521-felem_-square-mul-.patch
  - openssl-ec-powerpc64le-Add-asm-implementation-of-felem_-squa.patch
  - openssl-ecc-Remove-extraneous-parentheses-in-secp384r1.patch
  - openssl-powerpc-ecc-Fix-stack-allocation-secp384r1-asm.patch
  - openssl-CVE-2024-41996.patch
  - openssl-CVE-2023-50782.patch
  - openssl-CVE-2024-9143.patch
  * Patches rebased:
  - openssl-3-use-include-directive.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-DEFAULT_SUSE_cipher.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Force-FIPS.patch
  - openssl-load-legacy-provider.patch
  - openssl-no-html-docs.patch
  - openssl-pkgconfig.patch
  - openssl-ppc64-config.patch
  - openssl-truststore.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116800">- Remove the hardcoded DEFAULT_SUSE cipherlist selection.
  * Remove openssl-DEFAULT_SUSE_cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116801">- Update to 3.2.3:
  * Changes between 3.2.2 and 3.2.3:
  - Fixed possible denial of service in X.509 name checks. [CVE-2024-6119]
  - Fixed possible buffer overread in SSL_select_next_proto(). [CVE-2024-5535]
  * Changes between 3.2.1 and 3.2.2:
  - Fixed potential use after free after SSL_free_buffers() is called. [CVE-2024-4741]
  - Fixed an issue where checking excessively long DSA keys or parameters may
    be very slow. [CVE-2024-4603]
  - Improved EC/DSA nonce generation routines to avoid bias and timing
    side channel leaks.
  - Fixed an issue where some non-default TLS server configurations can cause
    unbounded memory growth when processing TLSv1.3 sessions. [CVE-2024-2511]
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded. This can be used on platforms
    where using atexit() from shared libraries causes crashes on exit.
  - Fixed bug where SSL_export_keying_material() could not be used with QUIC
    connections.
  * Add openssl-skip-quic-pairwise.patch to adapt the pairwise tests.
  * Merge openssl-FIPS-release_num_in_version_string.patch into
    openssl-FIPS-services-minimize.patch
  * Rebase patches:
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Remove-EC-curves.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-3-use-include-directive.patch
  * Remove not needed patches:
  - openssl-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  - openssl-3-FIPS-PCT_rsa_keygen.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730462400">- Support MSA 12 SHA3 on s390x [jsc#PED-10280]
  * Add openssl-3-add_EVP_DigestSqueeze_api.patch
  * Add openssl-3-support-multiple-sha3_squeeze_s390x.patch
  * Add openssl-3-add-xof-state-handling-s3_absorb.patch
  * Add openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  * Add openssl-3-fix-state-handling-sha3_final_s390x.patch
  * Add openssl-3-fix-state-handling-shake_final_s390x.patch
  * Add openssl-3-fix-state-handling-keccak_final_s390x.patch
  * Add openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  * Add openssl-3-add-defines-CPACF-funcs.patch
  * Add openssl-3-add-hw-acceleration-hmac.patch
  * Add openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  * Add openssl-3-fix-s390x_sha3_absorb.patch
  * Add openssl-3-fix-s390x_shake_squeeze.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808000">- Support MSA 10 XTS on s390x [jsc#PED-10273]
  * s390x: Add hardware acceleration for full AES-XTS
  * Add openssl-3-hw-acceleration-aes-xts-s390x.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808001">- Support MSA 11 HMAC on s390x [jsc#PED-10274]
  * Add openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  * Add openssl-3-fix-hmac-digest-detection-s390x.patch
  * Add openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730980800">- Add missing fixes for SHA3_squeeze and quic_multistream_test on
  pcc64 arch. [jsc#PED-10280]
  * Added openssl-3-fix-sha3-squeeze-ppc64.patch
  * Added openssl-3-fix-quic_multistream_test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1731412800">- Do not use HASHBANGPERL to avoid introducing a dependency on the
  perl-base package. [bsc#1233235]</changelog>
  <changelog author="pmonreal@suse.com" date="1734436800">- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
  - openssl-3-use-include-directive.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1738238400">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Security fix: [bsc#1236599, CVE-2024-12797]
  * RFC7250 handshakes with unauthenticated servers don't abort as
    expected.
  * Add openssl-CVE-2024-12797.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1746014400">- Security fix: [bsc#1240366, CVE-2025-27587]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
  <changelog author="mls@suse.de" date="1751371200">- Backport mdless cms signing support [jsc#PED-12895]
  * Add openssl-3-support-mdless-cms.patch</changelog>
</package>
<package pkgid="6a47e773e1622a168e27e3a9562cdb316734af0e009686f65e5832ed555a8279" name="openssl-3" arch="x86_64">
  <version epoch="0" ver="3.2.3" rel="150700.5.10.1"/>
  <changelog author="abergmann@suse.com" date="1724328000">- Security fix: [bsc#1229465, CVE-2024-6119]
  * possible denial of service in X.509 name checks
  * openssl-CVE-2024-6119.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1727265600">- Security fix: [bsc#1230698, CVE-2024-41996]
  * Validating the order of the public keys in the Diffie-Hellman
    Key Agreement Protocol, when an approved safe prime is used.
  * Added openssl-3-CVE-2024-41996.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1220262, CVE-2023-50782]
  * Implicit rejection in PKCS#1 v1.5
  * Add openssl-CVE-2023-50782.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166401">- Security fix: [bsc#1231741, CVE-2024-9143]
  * Low-level invalid GF(2^m) parameters lead to OOB memory access
  * Add openssl-CVE-2024-9143.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729512000">- Update to 3.1.7:
  * Major changes between OpenSSL 3.1.6 and OpenSSL 3.1.7 [3 Sep 2024]
  - Fixed possible denial of service in X.509 name checks (CVE-2024-6119)
  - Fixed possible buffer overread in SSL_select_next_proto()
    (CVE-2024-5535)
  * Major changes between OpenSSL 3.1.5 and OpenSSL 3.1.6 [4 Jun 2024]
  - Fixed potential use after free after SSL_free_buffers() is
    called (CVE-2024-4741)
  - Fixed an issue where checking excessively long DSA keys or
    parameters may be very slow (CVE-2024-4603)
  - Fixed unbounded memory growth with session handling in TLSv1.3
    (CVE-2024-2511)
  * Major changes between OpenSSL 3.1.4 and OpenSSL 3.1.5 [30 Jan 2024]
  - Fixed PKCS12 Decoding crashes (CVE-2024-0727)
  - Fixed Excessive time spent checking invalid RSA public keys
    [CVE-2023-6237)
  - Fixed POLY1305 MAC implementation corrupting vector registers
    on PowerPC CPUs which support PowerISA 2.07 (CVE-2023-6129)
  - Fix excessive time spent in DH check / generation with large
    Q parameter value (CVE-2023-5678)
  * Update openssl.keyring with BA5473A2B0587B07FB27CF2D216094DFD0CB81EF
  * Rebase patches:
  - openssl-Force-FIPS.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-CVE-2023-50782.patch
  * Remove patches fixed in the update:
  - openssl-Improve-performance-for-6x-unrolling-with-vpermxor-i.patch
  - openssl-CVE-2024-6119.patch openssl-CVE-2024-5535.patch
  - openssl-CVE-2024-4741.patch openssl-CVE-2024-4603.patch
  - openssl-CVE-2024-2511.patch openssl-CVE-2024-0727.patch
  - openssl-CVE-2023-6237.patch openssl-CVE-2023-6129.patch
  - openssl-CVE-2023-5678.patch openssl-3-CVE-2024-41996.patch
  - openssl-Enable-BTI-feature-for-md5-on-aarch64.patch
  - openssl-Fix-EVP_PKEY_CTX_add1_hkdf_info-behavior.patch
  - openssl-Handle-empty-param-in-EVP_PKEY_CTX_add1_hkdf_info.patch
  - reproducible.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729857600">- Update to 3.2.0:
  * Changes between 3.1.x and 3.2.0:
  - Fix excessive time spent in DH check/ generation with large Q parameter
    value. [CVE-2023-5678]
  - The BLAKE2b hash algorithm supports a configurable output length
    by setting the "size" parameter.
  - Added a function to delete objects from store by URI - OSSL_STORE_delete()
    and the corresponding provider-storemgmt API function OSSL_FUNC_store_delete().
  - Added OSSL_FUNC_store_open_ex() provider-storemgmt API function to pass
    a passphrase callback when opening a store.
  - Changed the default salt length used by PBES2 KDF's (PBKDF2 and scrypt)
    from 8 bytes to 16 bytes.
  - Changed the default value of the 'ess_cert_id_alg' configuration
    option which is used to calculate the TSA's public key certificate
    identifier. The default algorithm is updated to be sha256 instead of sha1.
  - Added optimization for SM2 algorithm on aarch64. A new configure option
    'no-sm2-precomp' has been added to disable the precomputed table.
  - Added client side support for QUIC
  - Added secp384r1 implementation using Solinas' reduction to improve
    speed of the NIST P-384 elliptic curve. To enable the implementation
    the build option 'enable-ec_nistp_64_gcc_128' must be used.
  - Improved RFC7468 compliance of the asn1parse command.
  - Added SHA256/192 algorithm support.
  - Added support for securely getting root CA certificate update in CMP.
  - Improved contention on global write locks by using more read locks where
    appropriate.
  - Improved performance of OSSL_PARAM lookups in performance critical
    provider functions.
  - Added the SSL_get0_group_name() function to provide access to the
    name of the group used for the TLS key exchange.
  - Provide a new configure option 'no-http' that can be used to disable the
    HTTP support. Provide new configure options 'no-apps' and 'no-docs' to
    disable building the openssl command line application and the documentation.
  - Provide a new configure option 'no-ecx' that can be used to disable the
    X25519, X448, and EdDSA support.
  - When multiple OSSL_KDF_PARAM_INFO parameters are passed to
    the EVP_KDF_CTX_set_params() function they are now concatenated not just
    for the HKDF algorithm but also for SSKDF and X9.63 KDF algorithms.
  - Added OSSL_FUNC_keymgmt_im/export_types_ex() provider functions that get
    the provider context as a parameter.
  - TLS round-trip time calculation was added by a Brigham Young University
    Capstone team partnering with Sandia National Laboratories. A new function
    in ssl_lib titled SSL_get_handshake_rtt will calculate and retrieve this
    value.
  - Added the "-quic" option to s_client to enable connectivity to QUIC servers.
    QUIC requires the use of ALPN, so this must be specified via the "-alpn"
    option. Use of the "advanced" s_client command command via the "-adv" option
    is recommended.
  - Added an "advanced" command mode to s_client. Use this with the "-adv" option.
  - Add Raw Public Key (RFC7250) support.
  - Added support for modular exponentiation and CRT offloading for the
    S390x architecture.
  - Added further assembler code for the RISC-V architecture.
  - Added EC_GROUP_to_params() which creates an OSSL_PARAM array
    from a given EC_GROUP.
  - Improved support for non-default library contexts and property queries
    when parsing PKCS#12 files.
  - Implemented support for all five instances of EdDSA from RFC8032:
    Ed25519, Ed25519ctx, Ed25519ph, Ed448, and Ed448ph.
    The streaming is not yet supported for the HashEdDSA variants
    (Ed25519ph and Ed448ph).
  - Added SM4 optimization for ARM processors using ASIMD and AES HW instructions.
  - Implemented SM4-XTS support.
  - Added platform-agnostic OSSL_sleep() function.
  - Implemented deterministic ECDSA signatures (RFC6979) support.
  - Implemented AES-GCM-SIV (RFC8452) support.
  - Added support for pluggable (provider-based) TLS signature algorithms.
    This enables TLS 1.3 authentication operations with algorithms embedded
    in providers not included by default in OpenSSL. In combination with
    the already available pluggable KEM and X.509 support, this enables
    for example suitable providers to deliver post-quantum or quantum-safe
    cryptography to OpenSSL users.
  - Added support for pluggable (provider-based) CMS signature algorithms.
    This enables CMS sign and verify operations with algorithms embedded
    in providers not included by default in OpenSSL.
  - Implemented HPKE DHKEM support in providers used by HPKE (RFC9180) API.
  - Add support for certificate compression (RFC8879), including
    library support for Brotli and Zstandard compression.
  - Add the ability to add custom attributes to PKCS12 files. Add a new API
    PKCS12_create_ex2, identical to the existing PKCS12_create_ex but allows
    for a user specified callback and optional argument.
    Added a new PKCS12_SAFEBAG_set0_attr, which allows for a new attr to be
    added to the existing STACK_OF attrs.
  - Major refactor of the libssl record layer.
  - Add a mac salt length option for the pkcs12 command.
  - Add more SRTP protection profiles from RFC8723 and RFC8269.
  - Extended Kernel TLS (KTLS) to support TLS 1.3 receive offload.
  - Add support for TCP Fast Open (RFC7413) to macOS, Linux, and FreeBSD where
    supported and enabled.
  - Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489)
    to the list of ciphersuites providing Perfect Forward Secrecy as
    required by SECLEVEL &gt;= 3.
  - Add new SSL APIs to aid in efficiently implementing TLS/SSL fingerprinting.
    The SSL_CTRL_GET_IANA_GROUPS control code, exposed as the
    SSL_get0_iana_groups() function-like macro, retrieves the list of
    supported groups sent by the peer.
  - Fixed PEM_write_bio_PKCS8PrivateKey() and PEM_write_bio_PKCS8PrivateKey_nid()
    to make it possible to use empty passphrase strings.
  - The PKCS12_parse() function now supports MAC-less PKCS12 files.
  - Added ASYNC_set_mem_functions() and ASYNC_get_mem_functions() calls to be able
    to change functions used for allocating the memory of asynchronous call stack.
  - Added support for signed BIGNUMs in the OSSL_PARAM APIs.
  - A failure exit code is returned when using the openssl x509 command to check
    certificate attributes and the checks fail.
  - The default SSL/TLS security level has been changed from 1 to 2. RSA,
    DSA and DH keys of 1024 bits and above and less than 2048 bits and ECC keys
    of 160 bits and above and less than 224 bits were previously accepted by
    default but are now no longer allowed. By default TLS compression was
    already disabled in previous OpenSSL versions. At security level 2 it cannot
    be enabled.
  - The SSL_CTX_set_cipher_list family functions now accept ciphers using their
    IANA standard names.
  - The PVK key derivation function has been moved from b2i_PVK_bio_ex() into
    the legacy crypto provider as an EVP_KDF. Applications requiring this KDF
    will need to load the legacy crypto provider.
  - CCM8 cipher suites in TLS have been downgraded to security level zero
    because they use a short authentication tag which lowers their strength.
  - Subject or issuer names in X.509 objects are now displayed as UTF-8 strings
    by default. Also spaces surrounding '=' in DN output are removed.
  - Add X.509 certificate codeSigning purpose and related checks on key usage and
    extended key usage of the leaf certificate according to the CA/Browser Forum.
  - The 'x509', 'ca', and 'req' apps now produce X.509 v3 certificates.
    The '-x509v1' option of 'req' prefers generation of X.509 v1 certificates.
    'X509_sign()' and 'X509_sign_ctx()' make sure that the certificate has
    X.509 version 3 if the certificate information includes X.509 extensions.
  - Fix and extend certificate handling and the apps 'x509', 'verify' etc.
    such as adding a trace facility for debugging certificate chain building.
  - Various fixes and extensions to the CMP+CRMF implementation and the 'cmp' app
    in particular supporting requests for central key generation, generalized
    polling, and various types of genm/genp exchanges defined in CMP Updates.
  - Fixes and extensions to the HTTP client and to the HTTP server in 'apps/'
    like correcting the TLS and proxy support and adding tracing for debugging.
  - Extended the CMS API for handling 'CMS_SignedData' and 'CMS_EnvelopedData'.
  - 'CMS_add0_cert()' and 'CMS_add1_cert()' no longer throw an error if
    a certificate to be added is already present. 'CMS_sign_ex()' and
    'CMS_sign()' now ignore any duplicate certificates in their 'certs' argument
    and no longer throw an error for them.
  - Added BIO_s_dgram_pair() and BIO_s_dgram_mem() that provide memory-based
    BIOs with datagram semantics and support for BIO_sendmmsg() and BIO_recvmmsg()
    calls. They can be used as the transport BIOs for QUIC.
  - Add new BIO_sendmmsg() and BIO_recvmmsg() BIO methods which allow
    sending and receiving multiple messages in a single call. An implementation
    is provided for BIO_dgram. For further details, see BIO_sendmmsg(3).
  - Support for loading root certificates from the Windows certificate store
    has been added.
  - Enable KTLS with the TLS 1.3 CCM mode ciphersuites. Note that some linux
    kernel versions that support KTLS have a known bug in CCM processing. That
    has been fixed in stable releases starting from 5.4.164, 5.10.84, 5.15.7,
    and all releases since 5.16. KTLS with CCM ciphersuites should be only used
    on these releases.
  - Added '-ktls' option to 's_server' and 's_client' commands to enable the
    KTLS support.
  - Zerocopy KTLS sendfile() support on Linux.
  - The OBJ_ calls are now thread safe using a global lock.
  - New parameter '-digest' for openssl cms command allowing signing
    pre-computed digests and new CMS API functions supporting that
    functionality.
  - OPENSSL_malloc() and other allocation functions now raise errors on
    allocation failures. The callers do not need to explicitly raise errors
    unless they want to for tracing purposes.
  - Added support for Brainpool curves in TLS-1.3.
  - Support for Argon2d, Argon2i, Argon2id KDFs has been added along with
    a basic thread pool implementation for select platforms.</changelog>
  <changelog author="pmonreal@suse.com" date="1729857601">- Update to 3.2.1:
  * Changes between 3.2.0 and 3.2.1:
  - A file in PKCS12 format can contain certificates and keys and may come from
    an untrusted source. The PKCS12 specification allows certain fields to be
    NULL, but OpenSSL did not correctly check for this case. [CVE-2024-0727]
  - When function EVP_PKEY_public_check() is called on RSA public keys,
    a computation is done to confirm that the RSA modulus, n, is composite.
    For valid RSA keys, n is a product of two or more large primes and this
    computation completes quickly. However, if n is an overly large prime,
    then this computation would take a long time. [CVE-2023-6237]
  - Restore the encoding of SM2 PrivateKeyInfo and SubjectPublicKeyInfo to
    have the contained AlgorithmIdentifier.algorithm set to id-ecPublicKey
    rather than SM2.
  - The POLY1305 MAC (message authentication code) implementation in OpenSSL
    for PowerPC CPUs saves the contents of vector registers in different
    order than they are restored. [CVE-2023-6129]
  - Disable building QUIC server utility when OpenSSL is configured with 'no-apps'.
  * The openssl-crypto-policies-support.patch has been merged into
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Rename openssl-Disable-default-provider-for-test-suite.patch and rebase to
    openssl-TESTS-Disable-default-provider-crypto-policies.patch
  * Patches removed in the update:
  - openssl-Add_support_for_Windows_CA_certificate_store.patch
  - openssl-ec-56-bit-Limb-Solinas-Strategy-for-secp384r1.patch
  - openssl-ec-Use-static-linkage-on-nistp521-felem_-square-mul-.patch
  - openssl-ec-powerpc64le-Add-asm-implementation-of-felem_-squa.patch
  - openssl-ecc-Remove-extraneous-parentheses-in-secp384r1.patch
  - openssl-powerpc-ecc-Fix-stack-allocation-secp384r1-asm.patch
  - openssl-CVE-2024-41996.patch
  - openssl-CVE-2023-50782.patch
  - openssl-CVE-2024-9143.patch
  * Patches rebased:
  - openssl-3-use-include-directive.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-DEFAULT_SUSE_cipher.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Force-FIPS.patch
  - openssl-load-legacy-provider.patch
  - openssl-no-html-docs.patch
  - openssl-pkgconfig.patch
  - openssl-ppc64-config.patch
  - openssl-truststore.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116800">- Remove the hardcoded DEFAULT_SUSE cipherlist selection.
  * Remove openssl-DEFAULT_SUSE_cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116801">- Update to 3.2.3:
  * Changes between 3.2.2 and 3.2.3:
  - Fixed possible denial of service in X.509 name checks. [CVE-2024-6119]
  - Fixed possible buffer overread in SSL_select_next_proto(). [CVE-2024-5535]
  * Changes between 3.2.1 and 3.2.2:
  - Fixed potential use after free after SSL_free_buffers() is called. [CVE-2024-4741]
  - Fixed an issue where checking excessively long DSA keys or parameters may
    be very slow. [CVE-2024-4603]
  - Improved EC/DSA nonce generation routines to avoid bias and timing
    side channel leaks.
  - Fixed an issue where some non-default TLS server configurations can cause
    unbounded memory growth when processing TLSv1.3 sessions. [CVE-2024-2511]
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded. This can be used on platforms
    where using atexit() from shared libraries causes crashes on exit.
  - Fixed bug where SSL_export_keying_material() could not be used with QUIC
    connections.
  * Add openssl-skip-quic-pairwise.patch to adapt the pairwise tests.
  * Merge openssl-FIPS-release_num_in_version_string.patch into
    openssl-FIPS-services-minimize.patch
  * Rebase patches:
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Remove-EC-curves.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-3-use-include-directive.patch
  * Remove not needed patches:
  - openssl-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  - openssl-3-FIPS-PCT_rsa_keygen.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730462400">- Support MSA 12 SHA3 on s390x [jsc#PED-10280]
  * Add openssl-3-add_EVP_DigestSqueeze_api.patch
  * Add openssl-3-support-multiple-sha3_squeeze_s390x.patch
  * Add openssl-3-add-xof-state-handling-s3_absorb.patch
  * Add openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  * Add openssl-3-fix-state-handling-sha3_final_s390x.patch
  * Add openssl-3-fix-state-handling-shake_final_s390x.patch
  * Add openssl-3-fix-state-handling-keccak_final_s390x.patch
  * Add openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  * Add openssl-3-add-defines-CPACF-funcs.patch
  * Add openssl-3-add-hw-acceleration-hmac.patch
  * Add openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  * Add openssl-3-fix-s390x_sha3_absorb.patch
  * Add openssl-3-fix-s390x_shake_squeeze.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808000">- Support MSA 10 XTS on s390x [jsc#PED-10273]
  * s390x: Add hardware acceleration for full AES-XTS
  * Add openssl-3-hw-acceleration-aes-xts-s390x.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808001">- Support MSA 11 HMAC on s390x [jsc#PED-10274]
  * Add openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  * Add openssl-3-fix-hmac-digest-detection-s390x.patch
  * Add openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730980800">- Add missing fixes for SHA3_squeeze and quic_multistream_test on
  pcc64 arch. [jsc#PED-10280]
  * Added openssl-3-fix-sha3-squeeze-ppc64.patch
  * Added openssl-3-fix-quic_multistream_test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1731412800">- Do not use HASHBANGPERL to avoid introducing a dependency on the
  perl-base package. [bsc#1233235]</changelog>
  <changelog author="pmonreal@suse.com" date="1734436800">- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
  - openssl-3-use-include-directive.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1738238400">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Security fix: [bsc#1236599, CVE-2024-12797]
  * RFC7250 handshakes with unauthenticated servers don't abort as
    expected.
  * Add openssl-CVE-2024-12797.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1746014400">- Security fix: [bsc#1240366, CVE-2025-27587]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
  <changelog author="mls@suse.de" date="1751371200">- Backport mdless cms signing support [jsc#PED-12895]
  * Add openssl-3-support-mdless-cms.patch</changelog>
</package>
<package pkgid="f8125ab009e5c384ed85d995b643466e3fe61de4e328c03ef5ec99a1e765ad16" name="openssl-3" arch="src">
  <version epoch="0" ver="3.2.3" rel="150700.5.15.1"/>
  <changelog author="angel.yankov@suse.com" date="1727265600">- Security fix: [bsc#1230698, CVE-2024-41996]
  * Validating the order of the public keys in the Diffie-Hellman
    Key Agreement Protocol, when an approved safe prime is used.
  * Added openssl-3-CVE-2024-41996.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1220262, CVE-2023-50782]
  * Implicit rejection in PKCS#1 v1.5
  * Add openssl-CVE-2023-50782.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166401">- Security fix: [bsc#1231741, CVE-2024-9143]
  * Low-level invalid GF(2^m) parameters lead to OOB memory access
  * Add openssl-CVE-2024-9143.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729512000">- Update to 3.1.7:
  * Major changes between OpenSSL 3.1.6 and OpenSSL 3.1.7 [3 Sep 2024]
  - Fixed possible denial of service in X.509 name checks (CVE-2024-6119)
  - Fixed possible buffer overread in SSL_select_next_proto()
    (CVE-2024-5535)
  * Major changes between OpenSSL 3.1.5 and OpenSSL 3.1.6 [4 Jun 2024]
  - Fixed potential use after free after SSL_free_buffers() is
    called (CVE-2024-4741)
  - Fixed an issue where checking excessively long DSA keys or
    parameters may be very slow (CVE-2024-4603)
  - Fixed unbounded memory growth with session handling in TLSv1.3
    (CVE-2024-2511)
  * Major changes between OpenSSL 3.1.4 and OpenSSL 3.1.5 [30 Jan 2024]
  - Fixed PKCS12 Decoding crashes (CVE-2024-0727)
  - Fixed Excessive time spent checking invalid RSA public keys
    [CVE-2023-6237)
  - Fixed POLY1305 MAC implementation corrupting vector registers
    on PowerPC CPUs which support PowerISA 2.07 (CVE-2023-6129)
  - Fix excessive time spent in DH check / generation with large
    Q parameter value (CVE-2023-5678)
  * Update openssl.keyring with BA5473A2B0587B07FB27CF2D216094DFD0CB81EF
  * Rebase patches:
  - openssl-Force-FIPS.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-CVE-2023-50782.patch
  * Remove patches fixed in the update:
  - openssl-Improve-performance-for-6x-unrolling-with-vpermxor-i.patch
  - openssl-CVE-2024-6119.patch openssl-CVE-2024-5535.patch
  - openssl-CVE-2024-4741.patch openssl-CVE-2024-4603.patch
  - openssl-CVE-2024-2511.patch openssl-CVE-2024-0727.patch
  - openssl-CVE-2023-6237.patch openssl-CVE-2023-6129.patch
  - openssl-CVE-2023-5678.patch openssl-3-CVE-2024-41996.patch
  - openssl-Enable-BTI-feature-for-md5-on-aarch64.patch
  - openssl-Fix-EVP_PKEY_CTX_add1_hkdf_info-behavior.patch
  - openssl-Handle-empty-param-in-EVP_PKEY_CTX_add1_hkdf_info.patch
  - reproducible.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729857600">- Update to 3.2.0:
  * Changes between 3.1.x and 3.2.0:
  - Fix excessive time spent in DH check/ generation with large Q parameter
    value. [CVE-2023-5678]
  - The BLAKE2b hash algorithm supports a configurable output length
    by setting the "size" parameter.
  - Added a function to delete objects from store by URI - OSSL_STORE_delete()
    and the corresponding provider-storemgmt API function OSSL_FUNC_store_delete().
  - Added OSSL_FUNC_store_open_ex() provider-storemgmt API function to pass
    a passphrase callback when opening a store.
  - Changed the default salt length used by PBES2 KDF's (PBKDF2 and scrypt)
    from 8 bytes to 16 bytes.
  - Changed the default value of the 'ess_cert_id_alg' configuration
    option which is used to calculate the TSA's public key certificate
    identifier. The default algorithm is updated to be sha256 instead of sha1.
  - Added optimization for SM2 algorithm on aarch64. A new configure option
    'no-sm2-precomp' has been added to disable the precomputed table.
  - Added client side support for QUIC
  - Added secp384r1 implementation using Solinas' reduction to improve
    speed of the NIST P-384 elliptic curve. To enable the implementation
    the build option 'enable-ec_nistp_64_gcc_128' must be used.
  - Improved RFC7468 compliance of the asn1parse command.
  - Added SHA256/192 algorithm support.
  - Added support for securely getting root CA certificate update in CMP.
  - Improved contention on global write locks by using more read locks where
    appropriate.
  - Improved performance of OSSL_PARAM lookups in performance critical
    provider functions.
  - Added the SSL_get0_group_name() function to provide access to the
    name of the group used for the TLS key exchange.
  - Provide a new configure option 'no-http' that can be used to disable the
    HTTP support. Provide new configure options 'no-apps' and 'no-docs' to
    disable building the openssl command line application and the documentation.
  - Provide a new configure option 'no-ecx' that can be used to disable the
    X25519, X448, and EdDSA support.
  - When multiple OSSL_KDF_PARAM_INFO parameters are passed to
    the EVP_KDF_CTX_set_params() function they are now concatenated not just
    for the HKDF algorithm but also for SSKDF and X9.63 KDF algorithms.
  - Added OSSL_FUNC_keymgmt_im/export_types_ex() provider functions that get
    the provider context as a parameter.
  - TLS round-trip time calculation was added by a Brigham Young University
    Capstone team partnering with Sandia National Laboratories. A new function
    in ssl_lib titled SSL_get_handshake_rtt will calculate and retrieve this
    value.
  - Added the "-quic" option to s_client to enable connectivity to QUIC servers.
    QUIC requires the use of ALPN, so this must be specified via the "-alpn"
    option. Use of the "advanced" s_client command command via the "-adv" option
    is recommended.
  - Added an "advanced" command mode to s_client. Use this with the "-adv" option.
  - Add Raw Public Key (RFC7250) support.
  - Added support for modular exponentiation and CRT offloading for the
    S390x architecture.
  - Added further assembler code for the RISC-V architecture.
  - Added EC_GROUP_to_params() which creates an OSSL_PARAM array
    from a given EC_GROUP.
  - Improved support for non-default library contexts and property queries
    when parsing PKCS#12 files.
  - Implemented support for all five instances of EdDSA from RFC8032:
    Ed25519, Ed25519ctx, Ed25519ph, Ed448, and Ed448ph.
    The streaming is not yet supported for the HashEdDSA variants
    (Ed25519ph and Ed448ph).
  - Added SM4 optimization for ARM processors using ASIMD and AES HW instructions.
  - Implemented SM4-XTS support.
  - Added platform-agnostic OSSL_sleep() function.
  - Implemented deterministic ECDSA signatures (RFC6979) support.
  - Implemented AES-GCM-SIV (RFC8452) support.
  - Added support for pluggable (provider-based) TLS signature algorithms.
    This enables TLS 1.3 authentication operations with algorithms embedded
    in providers not included by default in OpenSSL. In combination with
    the already available pluggable KEM and X.509 support, this enables
    for example suitable providers to deliver post-quantum or quantum-safe
    cryptography to OpenSSL users.
  - Added support for pluggable (provider-based) CMS signature algorithms.
    This enables CMS sign and verify operations with algorithms embedded
    in providers not included by default in OpenSSL.
  - Implemented HPKE DHKEM support in providers used by HPKE (RFC9180) API.
  - Add support for certificate compression (RFC8879), including
    library support for Brotli and Zstandard compression.
  - Add the ability to add custom attributes to PKCS12 files. Add a new API
    PKCS12_create_ex2, identical to the existing PKCS12_create_ex but allows
    for a user specified callback and optional argument.
    Added a new PKCS12_SAFEBAG_set0_attr, which allows for a new attr to be
    added to the existing STACK_OF attrs.
  - Major refactor of the libssl record layer.
  - Add a mac salt length option for the pkcs12 command.
  - Add more SRTP protection profiles from RFC8723 and RFC8269.
  - Extended Kernel TLS (KTLS) to support TLS 1.3 receive offload.
  - Add support for TCP Fast Open (RFC7413) to macOS, Linux, and FreeBSD where
    supported and enabled.
  - Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489)
    to the list of ciphersuites providing Perfect Forward Secrecy as
    required by SECLEVEL &gt;= 3.
  - Add new SSL APIs to aid in efficiently implementing TLS/SSL fingerprinting.
    The SSL_CTRL_GET_IANA_GROUPS control code, exposed as the
    SSL_get0_iana_groups() function-like macro, retrieves the list of
    supported groups sent by the peer.
  - Fixed PEM_write_bio_PKCS8PrivateKey() and PEM_write_bio_PKCS8PrivateKey_nid()
    to make it possible to use empty passphrase strings.
  - The PKCS12_parse() function now supports MAC-less PKCS12 files.
  - Added ASYNC_set_mem_functions() and ASYNC_get_mem_functions() calls to be able
    to change functions used for allocating the memory of asynchronous call stack.
  - Added support for signed BIGNUMs in the OSSL_PARAM APIs.
  - A failure exit code is returned when using the openssl x509 command to check
    certificate attributes and the checks fail.
  - The default SSL/TLS security level has been changed from 1 to 2. RSA,
    DSA and DH keys of 1024 bits and above and less than 2048 bits and ECC keys
    of 160 bits and above and less than 224 bits were previously accepted by
    default but are now no longer allowed. By default TLS compression was
    already disabled in previous OpenSSL versions. At security level 2 it cannot
    be enabled.
  - The SSL_CTX_set_cipher_list family functions now accept ciphers using their
    IANA standard names.
  - The PVK key derivation function has been moved from b2i_PVK_bio_ex() into
    the legacy crypto provider as an EVP_KDF. Applications requiring this KDF
    will need to load the legacy crypto provider.
  - CCM8 cipher suites in TLS have been downgraded to security level zero
    because they use a short authentication tag which lowers their strength.
  - Subject or issuer names in X.509 objects are now displayed as UTF-8 strings
    by default. Also spaces surrounding '=' in DN output are removed.
  - Add X.509 certificate codeSigning purpose and related checks on key usage and
    extended key usage of the leaf certificate according to the CA/Browser Forum.
  - The 'x509', 'ca', and 'req' apps now produce X.509 v3 certificates.
    The '-x509v1' option of 'req' prefers generation of X.509 v1 certificates.
    'X509_sign()' and 'X509_sign_ctx()' make sure that the certificate has
    X.509 version 3 if the certificate information includes X.509 extensions.
  - Fix and extend certificate handling and the apps 'x509', 'verify' etc.
    such as adding a trace facility for debugging certificate chain building.
  - Various fixes and extensions to the CMP+CRMF implementation and the 'cmp' app
    in particular supporting requests for central key generation, generalized
    polling, and various types of genm/genp exchanges defined in CMP Updates.
  - Fixes and extensions to the HTTP client and to the HTTP server in 'apps/'
    like correcting the TLS and proxy support and adding tracing for debugging.
  - Extended the CMS API for handling 'CMS_SignedData' and 'CMS_EnvelopedData'.
  - 'CMS_add0_cert()' and 'CMS_add1_cert()' no longer throw an error if
    a certificate to be added is already present. 'CMS_sign_ex()' and
    'CMS_sign()' now ignore any duplicate certificates in their 'certs' argument
    and no longer throw an error for them.
  - Added BIO_s_dgram_pair() and BIO_s_dgram_mem() that provide memory-based
    BIOs with datagram semantics and support for BIO_sendmmsg() and BIO_recvmmsg()
    calls. They can be used as the transport BIOs for QUIC.
  - Add new BIO_sendmmsg() and BIO_recvmmsg() BIO methods which allow
    sending and receiving multiple messages in a single call. An implementation
    is provided for BIO_dgram. For further details, see BIO_sendmmsg(3).
  - Support for loading root certificates from the Windows certificate store
    has been added.
  - Enable KTLS with the TLS 1.3 CCM mode ciphersuites. Note that some linux
    kernel versions that support KTLS have a known bug in CCM processing. That
    has been fixed in stable releases starting from 5.4.164, 5.10.84, 5.15.7,
    and all releases since 5.16. KTLS with CCM ciphersuites should be only used
    on these releases.
  - Added '-ktls' option to 's_server' and 's_client' commands to enable the
    KTLS support.
  - Zerocopy KTLS sendfile() support on Linux.
  - The OBJ_ calls are now thread safe using a global lock.
  - New parameter '-digest' for openssl cms command allowing signing
    pre-computed digests and new CMS API functions supporting that
    functionality.
  - OPENSSL_malloc() and other allocation functions now raise errors on
    allocation failures. The callers do not need to explicitly raise errors
    unless they want to for tracing purposes.
  - Added support for Brainpool curves in TLS-1.3.
  - Support for Argon2d, Argon2i, Argon2id KDFs has been added along with
    a basic thread pool implementation for select platforms.</changelog>
  <changelog author="pmonreal@suse.com" date="1729857601">- Update to 3.2.1:
  * Changes between 3.2.0 and 3.2.1:
  - A file in PKCS12 format can contain certificates and keys and may come from
    an untrusted source. The PKCS12 specification allows certain fields to be
    NULL, but OpenSSL did not correctly check for this case. [CVE-2024-0727]
  - When function EVP_PKEY_public_check() is called on RSA public keys,
    a computation is done to confirm that the RSA modulus, n, is composite.
    For valid RSA keys, n is a product of two or more large primes and this
    computation completes quickly. However, if n is an overly large prime,
    then this computation would take a long time. [CVE-2023-6237]
  - Restore the encoding of SM2 PrivateKeyInfo and SubjectPublicKeyInfo to
    have the contained AlgorithmIdentifier.algorithm set to id-ecPublicKey
    rather than SM2.
  - The POLY1305 MAC (message authentication code) implementation in OpenSSL
    for PowerPC CPUs saves the contents of vector registers in different
    order than they are restored. [CVE-2023-6129]
  - Disable building QUIC server utility when OpenSSL is configured with 'no-apps'.
  * The openssl-crypto-policies-support.patch has been merged into
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Rename openssl-Disable-default-provider-for-test-suite.patch and rebase to
    openssl-TESTS-Disable-default-provider-crypto-policies.patch
  * Patches removed in the update:
  - openssl-Add_support_for_Windows_CA_certificate_store.patch
  - openssl-ec-56-bit-Limb-Solinas-Strategy-for-secp384r1.patch
  - openssl-ec-Use-static-linkage-on-nistp521-felem_-square-mul-.patch
  - openssl-ec-powerpc64le-Add-asm-implementation-of-felem_-squa.patch
  - openssl-ecc-Remove-extraneous-parentheses-in-secp384r1.patch
  - openssl-powerpc-ecc-Fix-stack-allocation-secp384r1-asm.patch
  - openssl-CVE-2024-41996.patch
  - openssl-CVE-2023-50782.patch
  - openssl-CVE-2024-9143.patch
  * Patches rebased:
  - openssl-3-use-include-directive.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-DEFAULT_SUSE_cipher.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Force-FIPS.patch
  - openssl-load-legacy-provider.patch
  - openssl-no-html-docs.patch
  - openssl-pkgconfig.patch
  - openssl-ppc64-config.patch
  - openssl-truststore.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116800">- Remove the hardcoded DEFAULT_SUSE cipherlist selection.
  * Remove openssl-DEFAULT_SUSE_cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116801">- Update to 3.2.3:
  * Changes between 3.2.2 and 3.2.3:
  - Fixed possible denial of service in X.509 name checks. [CVE-2024-6119]
  - Fixed possible buffer overread in SSL_select_next_proto(). [CVE-2024-5535]
  * Changes between 3.2.1 and 3.2.2:
  - Fixed potential use after free after SSL_free_buffers() is called. [CVE-2024-4741]
  - Fixed an issue where checking excessively long DSA keys or parameters may
    be very slow. [CVE-2024-4603]
  - Improved EC/DSA nonce generation routines to avoid bias and timing
    side channel leaks.
  - Fixed an issue where some non-default TLS server configurations can cause
    unbounded memory growth when processing TLSv1.3 sessions. [CVE-2024-2511]
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded. This can be used on platforms
    where using atexit() from shared libraries causes crashes on exit.
  - Fixed bug where SSL_export_keying_material() could not be used with QUIC
    connections.
  * Add openssl-skip-quic-pairwise.patch to adapt the pairwise tests.
  * Merge openssl-FIPS-release_num_in_version_string.patch into
    openssl-FIPS-services-minimize.patch
  * Rebase patches:
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Remove-EC-curves.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-3-use-include-directive.patch
  * Remove not needed patches:
  - openssl-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  - openssl-3-FIPS-PCT_rsa_keygen.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730462400">- Support MSA 12 SHA3 on s390x [jsc#PED-10280]
  * Add openssl-3-add_EVP_DigestSqueeze_api.patch
  * Add openssl-3-support-multiple-sha3_squeeze_s390x.patch
  * Add openssl-3-add-xof-state-handling-s3_absorb.patch
  * Add openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  * Add openssl-3-fix-state-handling-sha3_final_s390x.patch
  * Add openssl-3-fix-state-handling-shake_final_s390x.patch
  * Add openssl-3-fix-state-handling-keccak_final_s390x.patch
  * Add openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  * Add openssl-3-add-defines-CPACF-funcs.patch
  * Add openssl-3-add-hw-acceleration-hmac.patch
  * Add openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  * Add openssl-3-fix-s390x_sha3_absorb.patch
  * Add openssl-3-fix-s390x_shake_squeeze.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808000">- Support MSA 10 XTS on s390x [jsc#PED-10273]
  * s390x: Add hardware acceleration for full AES-XTS
  * Add openssl-3-hw-acceleration-aes-xts-s390x.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808001">- Support MSA 11 HMAC on s390x [jsc#PED-10274]
  * Add openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  * Add openssl-3-fix-hmac-digest-detection-s390x.patch
  * Add openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730980800">- Add missing fixes for SHA3_squeeze and quic_multistream_test on
  pcc64 arch. [jsc#PED-10280]
  * Added openssl-3-fix-sha3-squeeze-ppc64.patch
  * Added openssl-3-fix-quic_multistream_test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1731412800">- Do not use HASHBANGPERL to avoid introducing a dependency on the
  perl-base package. [bsc#1233235]</changelog>
  <changelog author="pmonreal@suse.com" date="1734436800">- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
  - openssl-3-use-include-directive.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1738238400">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Security fix: [bsc#1236599, CVE-2024-12797]
  * RFC7250 handshakes with unauthenticated servers don't abort as
    expected.
  * Add openssl-CVE-2024-12797.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1746014400">- Security fix: [bsc#1240366, CVE-2025-27587]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
  <changelog author="mls@suse.de" date="1751371200">- Backport mdless cms signing support [jsc#PED-12895]
  * Add openssl-3-support-mdless-cms.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- FIPS: Fix EMS in crypto-policies FIPS:NO-ENFORCE-EMS
  * [bsc#1230959, bsc#1232326, bsc#1231748, bsc#1246428]
  * Add patch openssl-FIPS-fix-EMS-support.patch</changelog>
</package>
<package pkgid="a0c8651f4c68fd1642b0e9475d6a669f418ad66e940854355c92a875edbe0e14" name="openssl-3" arch="x86_64">
  <version epoch="0" ver="3.2.3" rel="150700.5.15.1"/>
  <changelog author="angel.yankov@suse.com" date="1727265600">- Security fix: [bsc#1230698, CVE-2024-41996]
  * Validating the order of the public keys in the Diffie-Hellman
    Key Agreement Protocol, when an approved safe prime is used.
  * Added openssl-3-CVE-2024-41996.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1220262, CVE-2023-50782]
  * Implicit rejection in PKCS#1 v1.5
  * Add openssl-CVE-2023-50782.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166401">- Security fix: [bsc#1231741, CVE-2024-9143]
  * Low-level invalid GF(2^m) parameters lead to OOB memory access
  * Add openssl-CVE-2024-9143.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729512000">- Update to 3.1.7:
  * Major changes between OpenSSL 3.1.6 and OpenSSL 3.1.7 [3 Sep 2024]
  - Fixed possible denial of service in X.509 name checks (CVE-2024-6119)
  - Fixed possible buffer overread in SSL_select_next_proto()
    (CVE-2024-5535)
  * Major changes between OpenSSL 3.1.5 and OpenSSL 3.1.6 [4 Jun 2024]
  - Fixed potential use after free after SSL_free_buffers() is
    called (CVE-2024-4741)
  - Fixed an issue where checking excessively long DSA keys or
    parameters may be very slow (CVE-2024-4603)
  - Fixed unbounded memory growth with session handling in TLSv1.3
    (CVE-2024-2511)
  * Major changes between OpenSSL 3.1.4 and OpenSSL 3.1.5 [30 Jan 2024]
  - Fixed PKCS12 Decoding crashes (CVE-2024-0727)
  - Fixed Excessive time spent checking invalid RSA public keys
    [CVE-2023-6237)
  - Fixed POLY1305 MAC implementation corrupting vector registers
    on PowerPC CPUs which support PowerISA 2.07 (CVE-2023-6129)
  - Fix excessive time spent in DH check / generation with large
    Q parameter value (CVE-2023-5678)
  * Update openssl.keyring with BA5473A2B0587B07FB27CF2D216094DFD0CB81EF
  * Rebase patches:
  - openssl-Force-FIPS.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-CVE-2023-50782.patch
  * Remove patches fixed in the update:
  - openssl-Improve-performance-for-6x-unrolling-with-vpermxor-i.patch
  - openssl-CVE-2024-6119.patch openssl-CVE-2024-5535.patch
  - openssl-CVE-2024-4741.patch openssl-CVE-2024-4603.patch
  - openssl-CVE-2024-2511.patch openssl-CVE-2024-0727.patch
  - openssl-CVE-2023-6237.patch openssl-CVE-2023-6129.patch
  - openssl-CVE-2023-5678.patch openssl-3-CVE-2024-41996.patch
  - openssl-Enable-BTI-feature-for-md5-on-aarch64.patch
  - openssl-Fix-EVP_PKEY_CTX_add1_hkdf_info-behavior.patch
  - openssl-Handle-empty-param-in-EVP_PKEY_CTX_add1_hkdf_info.patch
  - reproducible.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729857600">- Update to 3.2.0:
  * Changes between 3.1.x and 3.2.0:
  - Fix excessive time spent in DH check/ generation with large Q parameter
    value. [CVE-2023-5678]
  - The BLAKE2b hash algorithm supports a configurable output length
    by setting the "size" parameter.
  - Added a function to delete objects from store by URI - OSSL_STORE_delete()
    and the corresponding provider-storemgmt API function OSSL_FUNC_store_delete().
  - Added OSSL_FUNC_store_open_ex() provider-storemgmt API function to pass
    a passphrase callback when opening a store.
  - Changed the default salt length used by PBES2 KDF's (PBKDF2 and scrypt)
    from 8 bytes to 16 bytes.
  - Changed the default value of the 'ess_cert_id_alg' configuration
    option which is used to calculate the TSA's public key certificate
    identifier. The default algorithm is updated to be sha256 instead of sha1.
  - Added optimization for SM2 algorithm on aarch64. A new configure option
    'no-sm2-precomp' has been added to disable the precomputed table.
  - Added client side support for QUIC
  - Added secp384r1 implementation using Solinas' reduction to improve
    speed of the NIST P-384 elliptic curve. To enable the implementation
    the build option 'enable-ec_nistp_64_gcc_128' must be used.
  - Improved RFC7468 compliance of the asn1parse command.
  - Added SHA256/192 algorithm support.
  - Added support for securely getting root CA certificate update in CMP.
  - Improved contention on global write locks by using more read locks where
    appropriate.
  - Improved performance of OSSL_PARAM lookups in performance critical
    provider functions.
  - Added the SSL_get0_group_name() function to provide access to the
    name of the group used for the TLS key exchange.
  - Provide a new configure option 'no-http' that can be used to disable the
    HTTP support. Provide new configure options 'no-apps' and 'no-docs' to
    disable building the openssl command line application and the documentation.
  - Provide a new configure option 'no-ecx' that can be used to disable the
    X25519, X448, and EdDSA support.
  - When multiple OSSL_KDF_PARAM_INFO parameters are passed to
    the EVP_KDF_CTX_set_params() function they are now concatenated not just
    for the HKDF algorithm but also for SSKDF and X9.63 KDF algorithms.
  - Added OSSL_FUNC_keymgmt_im/export_types_ex() provider functions that get
    the provider context as a parameter.
  - TLS round-trip time calculation was added by a Brigham Young University
    Capstone team partnering with Sandia National Laboratories. A new function
    in ssl_lib titled SSL_get_handshake_rtt will calculate and retrieve this
    value.
  - Added the "-quic" option to s_client to enable connectivity to QUIC servers.
    QUIC requires the use of ALPN, so this must be specified via the "-alpn"
    option. Use of the "advanced" s_client command command via the "-adv" option
    is recommended.
  - Added an "advanced" command mode to s_client. Use this with the "-adv" option.
  - Add Raw Public Key (RFC7250) support.
  - Added support for modular exponentiation and CRT offloading for the
    S390x architecture.
  - Added further assembler code for the RISC-V architecture.
  - Added EC_GROUP_to_params() which creates an OSSL_PARAM array
    from a given EC_GROUP.
  - Improved support for non-default library contexts and property queries
    when parsing PKCS#12 files.
  - Implemented support for all five instances of EdDSA from RFC8032:
    Ed25519, Ed25519ctx, Ed25519ph, Ed448, and Ed448ph.
    The streaming is not yet supported for the HashEdDSA variants
    (Ed25519ph and Ed448ph).
  - Added SM4 optimization for ARM processors using ASIMD and AES HW instructions.
  - Implemented SM4-XTS support.
  - Added platform-agnostic OSSL_sleep() function.
  - Implemented deterministic ECDSA signatures (RFC6979) support.
  - Implemented AES-GCM-SIV (RFC8452) support.
  - Added support for pluggable (provider-based) TLS signature algorithms.
    This enables TLS 1.3 authentication operations with algorithms embedded
    in providers not included by default in OpenSSL. In combination with
    the already available pluggable KEM and X.509 support, this enables
    for example suitable providers to deliver post-quantum or quantum-safe
    cryptography to OpenSSL users.
  - Added support for pluggable (provider-based) CMS signature algorithms.
    This enables CMS sign and verify operations with algorithms embedded
    in providers not included by default in OpenSSL.
  - Implemented HPKE DHKEM support in providers used by HPKE (RFC9180) API.
  - Add support for certificate compression (RFC8879), including
    library support for Brotli and Zstandard compression.
  - Add the ability to add custom attributes to PKCS12 files. Add a new API
    PKCS12_create_ex2, identical to the existing PKCS12_create_ex but allows
    for a user specified callback and optional argument.
    Added a new PKCS12_SAFEBAG_set0_attr, which allows for a new attr to be
    added to the existing STACK_OF attrs.
  - Major refactor of the libssl record layer.
  - Add a mac salt length option for the pkcs12 command.
  - Add more SRTP protection profiles from RFC8723 and RFC8269.
  - Extended Kernel TLS (KTLS) to support TLS 1.3 receive offload.
  - Add support for TCP Fast Open (RFC7413) to macOS, Linux, and FreeBSD where
    supported and enabled.
  - Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489)
    to the list of ciphersuites providing Perfect Forward Secrecy as
    required by SECLEVEL &gt;= 3.
  - Add new SSL APIs to aid in efficiently implementing TLS/SSL fingerprinting.
    The SSL_CTRL_GET_IANA_GROUPS control code, exposed as the
    SSL_get0_iana_groups() function-like macro, retrieves the list of
    supported groups sent by the peer.
  - Fixed PEM_write_bio_PKCS8PrivateKey() and PEM_write_bio_PKCS8PrivateKey_nid()
    to make it possible to use empty passphrase strings.
  - The PKCS12_parse() function now supports MAC-less PKCS12 files.
  - Added ASYNC_set_mem_functions() and ASYNC_get_mem_functions() calls to be able
    to change functions used for allocating the memory of asynchronous call stack.
  - Added support for signed BIGNUMs in the OSSL_PARAM APIs.
  - A failure exit code is returned when using the openssl x509 command to check
    certificate attributes and the checks fail.
  - The default SSL/TLS security level has been changed from 1 to 2. RSA,
    DSA and DH keys of 1024 bits and above and less than 2048 bits and ECC keys
    of 160 bits and above and less than 224 bits were previously accepted by
    default but are now no longer allowed. By default TLS compression was
    already disabled in previous OpenSSL versions. At security level 2 it cannot
    be enabled.
  - The SSL_CTX_set_cipher_list family functions now accept ciphers using their
    IANA standard names.
  - The PVK key derivation function has been moved from b2i_PVK_bio_ex() into
    the legacy crypto provider as an EVP_KDF. Applications requiring this KDF
    will need to load the legacy crypto provider.
  - CCM8 cipher suites in TLS have been downgraded to security level zero
    because they use a short authentication tag which lowers their strength.
  - Subject or issuer names in X.509 objects are now displayed as UTF-8 strings
    by default. Also spaces surrounding '=' in DN output are removed.
  - Add X.509 certificate codeSigning purpose and related checks on key usage and
    extended key usage of the leaf certificate according to the CA/Browser Forum.
  - The 'x509', 'ca', and 'req' apps now produce X.509 v3 certificates.
    The '-x509v1' option of 'req' prefers generation of X.509 v1 certificates.
    'X509_sign()' and 'X509_sign_ctx()' make sure that the certificate has
    X.509 version 3 if the certificate information includes X.509 extensions.
  - Fix and extend certificate handling and the apps 'x509', 'verify' etc.
    such as adding a trace facility for debugging certificate chain building.
  - Various fixes and extensions to the CMP+CRMF implementation and the 'cmp' app
    in particular supporting requests for central key generation, generalized
    polling, and various types of genm/genp exchanges defined in CMP Updates.
  - Fixes and extensions to the HTTP client and to the HTTP server in 'apps/'
    like correcting the TLS and proxy support and adding tracing for debugging.
  - Extended the CMS API for handling 'CMS_SignedData' and 'CMS_EnvelopedData'.
  - 'CMS_add0_cert()' and 'CMS_add1_cert()' no longer throw an error if
    a certificate to be added is already present. 'CMS_sign_ex()' and
    'CMS_sign()' now ignore any duplicate certificates in their 'certs' argument
    and no longer throw an error for them.
  - Added BIO_s_dgram_pair() and BIO_s_dgram_mem() that provide memory-based
    BIOs with datagram semantics and support for BIO_sendmmsg() and BIO_recvmmsg()
    calls. They can be used as the transport BIOs for QUIC.
  - Add new BIO_sendmmsg() and BIO_recvmmsg() BIO methods which allow
    sending and receiving multiple messages in a single call. An implementation
    is provided for BIO_dgram. For further details, see BIO_sendmmsg(3).
  - Support for loading root certificates from the Windows certificate store
    has been added.
  - Enable KTLS with the TLS 1.3 CCM mode ciphersuites. Note that some linux
    kernel versions that support KTLS have a known bug in CCM processing. That
    has been fixed in stable releases starting from 5.4.164, 5.10.84, 5.15.7,
    and all releases since 5.16. KTLS with CCM ciphersuites should be only used
    on these releases.
  - Added '-ktls' option to 's_server' and 's_client' commands to enable the
    KTLS support.
  - Zerocopy KTLS sendfile() support on Linux.
  - The OBJ_ calls are now thread safe using a global lock.
  - New parameter '-digest' for openssl cms command allowing signing
    pre-computed digests and new CMS API functions supporting that
    functionality.
  - OPENSSL_malloc() and other allocation functions now raise errors on
    allocation failures. The callers do not need to explicitly raise errors
    unless they want to for tracing purposes.
  - Added support for Brainpool curves in TLS-1.3.
  - Support for Argon2d, Argon2i, Argon2id KDFs has been added along with
    a basic thread pool implementation for select platforms.</changelog>
  <changelog author="pmonreal@suse.com" date="1729857601">- Update to 3.2.1:
  * Changes between 3.2.0 and 3.2.1:
  - A file in PKCS12 format can contain certificates and keys and may come from
    an untrusted source. The PKCS12 specification allows certain fields to be
    NULL, but OpenSSL did not correctly check for this case. [CVE-2024-0727]
  - When function EVP_PKEY_public_check() is called on RSA public keys,
    a computation is done to confirm that the RSA modulus, n, is composite.
    For valid RSA keys, n is a product of two or more large primes and this
    computation completes quickly. However, if n is an overly large prime,
    then this computation would take a long time. [CVE-2023-6237]
  - Restore the encoding of SM2 PrivateKeyInfo and SubjectPublicKeyInfo to
    have the contained AlgorithmIdentifier.algorithm set to id-ecPublicKey
    rather than SM2.
  - The POLY1305 MAC (message authentication code) implementation in OpenSSL
    for PowerPC CPUs saves the contents of vector registers in different
    order than they are restored. [CVE-2023-6129]
  - Disable building QUIC server utility when OpenSSL is configured with 'no-apps'.
  * The openssl-crypto-policies-support.patch has been merged into
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Rename openssl-Disable-default-provider-for-test-suite.patch and rebase to
    openssl-TESTS-Disable-default-provider-crypto-policies.patch
  * Patches removed in the update:
  - openssl-Add_support_for_Windows_CA_certificate_store.patch
  - openssl-ec-56-bit-Limb-Solinas-Strategy-for-secp384r1.patch
  - openssl-ec-Use-static-linkage-on-nistp521-felem_-square-mul-.patch
  - openssl-ec-powerpc64le-Add-asm-implementation-of-felem_-squa.patch
  - openssl-ecc-Remove-extraneous-parentheses-in-secp384r1.patch
  - openssl-powerpc-ecc-Fix-stack-allocation-secp384r1-asm.patch
  - openssl-CVE-2024-41996.patch
  - openssl-CVE-2023-50782.patch
  - openssl-CVE-2024-9143.patch
  * Patches rebased:
  - openssl-3-use-include-directive.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-DEFAULT_SUSE_cipher.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Force-FIPS.patch
  - openssl-load-legacy-provider.patch
  - openssl-no-html-docs.patch
  - openssl-pkgconfig.patch
  - openssl-ppc64-config.patch
  - openssl-truststore.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116800">- Remove the hardcoded DEFAULT_SUSE cipherlist selection.
  * Remove openssl-DEFAULT_SUSE_cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116801">- Update to 3.2.3:
  * Changes between 3.2.2 and 3.2.3:
  - Fixed possible denial of service in X.509 name checks. [CVE-2024-6119]
  - Fixed possible buffer overread in SSL_select_next_proto(). [CVE-2024-5535]
  * Changes between 3.2.1 and 3.2.2:
  - Fixed potential use after free after SSL_free_buffers() is called. [CVE-2024-4741]
  - Fixed an issue where checking excessively long DSA keys or parameters may
    be very slow. [CVE-2024-4603]
  - Improved EC/DSA nonce generation routines to avoid bias and timing
    side channel leaks.
  - Fixed an issue where some non-default TLS server configurations can cause
    unbounded memory growth when processing TLSv1.3 sessions. [CVE-2024-2511]
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded. This can be used on platforms
    where using atexit() from shared libraries causes crashes on exit.
  - Fixed bug where SSL_export_keying_material() could not be used with QUIC
    connections.
  * Add openssl-skip-quic-pairwise.patch to adapt the pairwise tests.
  * Merge openssl-FIPS-release_num_in_version_string.patch into
    openssl-FIPS-services-minimize.patch
  * Rebase patches:
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Remove-EC-curves.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-3-use-include-directive.patch
  * Remove not needed patches:
  - openssl-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  - openssl-3-FIPS-PCT_rsa_keygen.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730462400">- Support MSA 12 SHA3 on s390x [jsc#PED-10280]
  * Add openssl-3-add_EVP_DigestSqueeze_api.patch
  * Add openssl-3-support-multiple-sha3_squeeze_s390x.patch
  * Add openssl-3-add-xof-state-handling-s3_absorb.patch
  * Add openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  * Add openssl-3-fix-state-handling-sha3_final_s390x.patch
  * Add openssl-3-fix-state-handling-shake_final_s390x.patch
  * Add openssl-3-fix-state-handling-keccak_final_s390x.patch
  * Add openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  * Add openssl-3-add-defines-CPACF-funcs.patch
  * Add openssl-3-add-hw-acceleration-hmac.patch
  * Add openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  * Add openssl-3-fix-s390x_sha3_absorb.patch
  * Add openssl-3-fix-s390x_shake_squeeze.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808000">- Support MSA 10 XTS on s390x [jsc#PED-10273]
  * s390x: Add hardware acceleration for full AES-XTS
  * Add openssl-3-hw-acceleration-aes-xts-s390x.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808001">- Support MSA 11 HMAC on s390x [jsc#PED-10274]
  * Add openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  * Add openssl-3-fix-hmac-digest-detection-s390x.patch
  * Add openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730980800">- Add missing fixes for SHA3_squeeze and quic_multistream_test on
  pcc64 arch. [jsc#PED-10280]
  * Added openssl-3-fix-sha3-squeeze-ppc64.patch
  * Added openssl-3-fix-quic_multistream_test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1731412800">- Do not use HASHBANGPERL to avoid introducing a dependency on the
  perl-base package. [bsc#1233235]</changelog>
  <changelog author="pmonreal@suse.com" date="1734436800">- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
  - openssl-3-use-include-directive.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1738238400">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Security fix: [bsc#1236599, CVE-2024-12797]
  * RFC7250 handshakes with unauthenticated servers don't abort as
    expected.
  * Add openssl-CVE-2024-12797.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1746014400">- Security fix: [bsc#1240366, CVE-2025-27587]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
  <changelog author="mls@suse.de" date="1751371200">- Backport mdless cms signing support [jsc#PED-12895]
  * Add openssl-3-support-mdless-cms.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- FIPS: Fix EMS in crypto-policies FIPS:NO-ENFORCE-EMS
  * [bsc#1230959, bsc#1232326, bsc#1231748, bsc#1246428]
  * Add patch openssl-FIPS-fix-EMS-support.patch</changelog>
</package>
<package pkgid="2bd6a5b1e129dbd87caadacfa16f51b416003ce1aae260beb04685a5c93e3010" name="openssl-3" arch="src">
  <version epoch="0" ver="3.2.3" rel="150700.5.18.1"/>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1220262, CVE-2023-50782]
  * Implicit rejection in PKCS#1 v1.5
  * Add openssl-CVE-2023-50782.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166401">- Security fix: [bsc#1231741, CVE-2024-9143]
  * Low-level invalid GF(2^m) parameters lead to OOB memory access
  * Add openssl-CVE-2024-9143.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729512000">- Update to 3.1.7:
  * Major changes between OpenSSL 3.1.6 and OpenSSL 3.1.7 [3 Sep 2024]
  - Fixed possible denial of service in X.509 name checks (CVE-2024-6119)
  - Fixed possible buffer overread in SSL_select_next_proto()
    (CVE-2024-5535)
  * Major changes between OpenSSL 3.1.5 and OpenSSL 3.1.6 [4 Jun 2024]
  - Fixed potential use after free after SSL_free_buffers() is
    called (CVE-2024-4741)
  - Fixed an issue where checking excessively long DSA keys or
    parameters may be very slow (CVE-2024-4603)
  - Fixed unbounded memory growth with session handling in TLSv1.3
    (CVE-2024-2511)
  * Major changes between OpenSSL 3.1.4 and OpenSSL 3.1.5 [30 Jan 2024]
  - Fixed PKCS12 Decoding crashes (CVE-2024-0727)
  - Fixed Excessive time spent checking invalid RSA public keys
    [CVE-2023-6237)
  - Fixed POLY1305 MAC implementation corrupting vector registers
    on PowerPC CPUs which support PowerISA 2.07 (CVE-2023-6129)
  - Fix excessive time spent in DH check / generation with large
    Q parameter value (CVE-2023-5678)
  * Update openssl.keyring with BA5473A2B0587B07FB27CF2D216094DFD0CB81EF
  * Rebase patches:
  - openssl-Force-FIPS.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-CVE-2023-50782.patch
  * Remove patches fixed in the update:
  - openssl-Improve-performance-for-6x-unrolling-with-vpermxor-i.patch
  - openssl-CVE-2024-6119.patch openssl-CVE-2024-5535.patch
  - openssl-CVE-2024-4741.patch openssl-CVE-2024-4603.patch
  - openssl-CVE-2024-2511.patch openssl-CVE-2024-0727.patch
  - openssl-CVE-2023-6237.patch openssl-CVE-2023-6129.patch
  - openssl-CVE-2023-5678.patch openssl-3-CVE-2024-41996.patch
  - openssl-Enable-BTI-feature-for-md5-on-aarch64.patch
  - openssl-Fix-EVP_PKEY_CTX_add1_hkdf_info-behavior.patch
  - openssl-Handle-empty-param-in-EVP_PKEY_CTX_add1_hkdf_info.patch
  - reproducible.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729857600">- Update to 3.2.0:
  * Changes between 3.1.x and 3.2.0:
  - Fix excessive time spent in DH check/ generation with large Q parameter
    value. [CVE-2023-5678]
  - The BLAKE2b hash algorithm supports a configurable output length
    by setting the "size" parameter.
  - Added a function to delete objects from store by URI - OSSL_STORE_delete()
    and the corresponding provider-storemgmt API function OSSL_FUNC_store_delete().
  - Added OSSL_FUNC_store_open_ex() provider-storemgmt API function to pass
    a passphrase callback when opening a store.
  - Changed the default salt length used by PBES2 KDF's (PBKDF2 and scrypt)
    from 8 bytes to 16 bytes.
  - Changed the default value of the 'ess_cert_id_alg' configuration
    option which is used to calculate the TSA's public key certificate
    identifier. The default algorithm is updated to be sha256 instead of sha1.
  - Added optimization for SM2 algorithm on aarch64. A new configure option
    'no-sm2-precomp' has been added to disable the precomputed table.
  - Added client side support for QUIC
  - Added secp384r1 implementation using Solinas' reduction to improve
    speed of the NIST P-384 elliptic curve. To enable the implementation
    the build option 'enable-ec_nistp_64_gcc_128' must be used.
  - Improved RFC7468 compliance of the asn1parse command.
  - Added SHA256/192 algorithm support.
  - Added support for securely getting root CA certificate update in CMP.
  - Improved contention on global write locks by using more read locks where
    appropriate.
  - Improved performance of OSSL_PARAM lookups in performance critical
    provider functions.
  - Added the SSL_get0_group_name() function to provide access to the
    name of the group used for the TLS key exchange.
  - Provide a new configure option 'no-http' that can be used to disable the
    HTTP support. Provide new configure options 'no-apps' and 'no-docs' to
    disable building the openssl command line application and the documentation.
  - Provide a new configure option 'no-ecx' that can be used to disable the
    X25519, X448, and EdDSA support.
  - When multiple OSSL_KDF_PARAM_INFO parameters are passed to
    the EVP_KDF_CTX_set_params() function they are now concatenated not just
    for the HKDF algorithm but also for SSKDF and X9.63 KDF algorithms.
  - Added OSSL_FUNC_keymgmt_im/export_types_ex() provider functions that get
    the provider context as a parameter.
  - TLS round-trip time calculation was added by a Brigham Young University
    Capstone team partnering with Sandia National Laboratories. A new function
    in ssl_lib titled SSL_get_handshake_rtt will calculate and retrieve this
    value.
  - Added the "-quic" option to s_client to enable connectivity to QUIC servers.
    QUIC requires the use of ALPN, so this must be specified via the "-alpn"
    option. Use of the "advanced" s_client command command via the "-adv" option
    is recommended.
  - Added an "advanced" command mode to s_client. Use this with the "-adv" option.
  - Add Raw Public Key (RFC7250) support.
  - Added support for modular exponentiation and CRT offloading for the
    S390x architecture.
  - Added further assembler code for the RISC-V architecture.
  - Added EC_GROUP_to_params() which creates an OSSL_PARAM array
    from a given EC_GROUP.
  - Improved support for non-default library contexts and property queries
    when parsing PKCS#12 files.
  - Implemented support for all five instances of EdDSA from RFC8032:
    Ed25519, Ed25519ctx, Ed25519ph, Ed448, and Ed448ph.
    The streaming is not yet supported for the HashEdDSA variants
    (Ed25519ph and Ed448ph).
  - Added SM4 optimization for ARM processors using ASIMD and AES HW instructions.
  - Implemented SM4-XTS support.
  - Added platform-agnostic OSSL_sleep() function.
  - Implemented deterministic ECDSA signatures (RFC6979) support.
  - Implemented AES-GCM-SIV (RFC8452) support.
  - Added support for pluggable (provider-based) TLS signature algorithms.
    This enables TLS 1.3 authentication operations with algorithms embedded
    in providers not included by default in OpenSSL. In combination with
    the already available pluggable KEM and X.509 support, this enables
    for example suitable providers to deliver post-quantum or quantum-safe
    cryptography to OpenSSL users.
  - Added support for pluggable (provider-based) CMS signature algorithms.
    This enables CMS sign and verify operations with algorithms embedded
    in providers not included by default in OpenSSL.
  - Implemented HPKE DHKEM support in providers used by HPKE (RFC9180) API.
  - Add support for certificate compression (RFC8879), including
    library support for Brotli and Zstandard compression.
  - Add the ability to add custom attributes to PKCS12 files. Add a new API
    PKCS12_create_ex2, identical to the existing PKCS12_create_ex but allows
    for a user specified callback and optional argument.
    Added a new PKCS12_SAFEBAG_set0_attr, which allows for a new attr to be
    added to the existing STACK_OF attrs.
  - Major refactor of the libssl record layer.
  - Add a mac salt length option for the pkcs12 command.
  - Add more SRTP protection profiles from RFC8723 and RFC8269.
  - Extended Kernel TLS (KTLS) to support TLS 1.3 receive offload.
  - Add support for TCP Fast Open (RFC7413) to macOS, Linux, and FreeBSD where
    supported and enabled.
  - Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489)
    to the list of ciphersuites providing Perfect Forward Secrecy as
    required by SECLEVEL &gt;= 3.
  - Add new SSL APIs to aid in efficiently implementing TLS/SSL fingerprinting.
    The SSL_CTRL_GET_IANA_GROUPS control code, exposed as the
    SSL_get0_iana_groups() function-like macro, retrieves the list of
    supported groups sent by the peer.
  - Fixed PEM_write_bio_PKCS8PrivateKey() and PEM_write_bio_PKCS8PrivateKey_nid()
    to make it possible to use empty passphrase strings.
  - The PKCS12_parse() function now supports MAC-less PKCS12 files.
  - Added ASYNC_set_mem_functions() and ASYNC_get_mem_functions() calls to be able
    to change functions used for allocating the memory of asynchronous call stack.
  - Added support for signed BIGNUMs in the OSSL_PARAM APIs.
  - A failure exit code is returned when using the openssl x509 command to check
    certificate attributes and the checks fail.
  - The default SSL/TLS security level has been changed from 1 to 2. RSA,
    DSA and DH keys of 1024 bits and above and less than 2048 bits and ECC keys
    of 160 bits and above and less than 224 bits were previously accepted by
    default but are now no longer allowed. By default TLS compression was
    already disabled in previous OpenSSL versions. At security level 2 it cannot
    be enabled.
  - The SSL_CTX_set_cipher_list family functions now accept ciphers using their
    IANA standard names.
  - The PVK key derivation function has been moved from b2i_PVK_bio_ex() into
    the legacy crypto provider as an EVP_KDF. Applications requiring this KDF
    will need to load the legacy crypto provider.
  - CCM8 cipher suites in TLS have been downgraded to security level zero
    because they use a short authentication tag which lowers their strength.
  - Subject or issuer names in X.509 objects are now displayed as UTF-8 strings
    by default. Also spaces surrounding '=' in DN output are removed.
  - Add X.509 certificate codeSigning purpose and related checks on key usage and
    extended key usage of the leaf certificate according to the CA/Browser Forum.
  - The 'x509', 'ca', and 'req' apps now produce X.509 v3 certificates.
    The '-x509v1' option of 'req' prefers generation of X.509 v1 certificates.
    'X509_sign()' and 'X509_sign_ctx()' make sure that the certificate has
    X.509 version 3 if the certificate information includes X.509 extensions.
  - Fix and extend certificate handling and the apps 'x509', 'verify' etc.
    such as adding a trace facility for debugging certificate chain building.
  - Various fixes and extensions to the CMP+CRMF implementation and the 'cmp' app
    in particular supporting requests for central key generation, generalized
    polling, and various types of genm/genp exchanges defined in CMP Updates.
  - Fixes and extensions to the HTTP client and to the HTTP server in 'apps/'
    like correcting the TLS and proxy support and adding tracing for debugging.
  - Extended the CMS API for handling 'CMS_SignedData' and 'CMS_EnvelopedData'.
  - 'CMS_add0_cert()' and 'CMS_add1_cert()' no longer throw an error if
    a certificate to be added is already present. 'CMS_sign_ex()' and
    'CMS_sign()' now ignore any duplicate certificates in their 'certs' argument
    and no longer throw an error for them.
  - Added BIO_s_dgram_pair() and BIO_s_dgram_mem() that provide memory-based
    BIOs with datagram semantics and support for BIO_sendmmsg() and BIO_recvmmsg()
    calls. They can be used as the transport BIOs for QUIC.
  - Add new BIO_sendmmsg() and BIO_recvmmsg() BIO methods which allow
    sending and receiving multiple messages in a single call. An implementation
    is provided for BIO_dgram. For further details, see BIO_sendmmsg(3).
  - Support for loading root certificates from the Windows certificate store
    has been added.
  - Enable KTLS with the TLS 1.3 CCM mode ciphersuites. Note that some linux
    kernel versions that support KTLS have a known bug in CCM processing. That
    has been fixed in stable releases starting from 5.4.164, 5.10.84, 5.15.7,
    and all releases since 5.16. KTLS with CCM ciphersuites should be only used
    on these releases.
  - Added '-ktls' option to 's_server' and 's_client' commands to enable the
    KTLS support.
  - Zerocopy KTLS sendfile() support on Linux.
  - The OBJ_ calls are now thread safe using a global lock.
  - New parameter '-digest' for openssl cms command allowing signing
    pre-computed digests and new CMS API functions supporting that
    functionality.
  - OPENSSL_malloc() and other allocation functions now raise errors on
    allocation failures. The callers do not need to explicitly raise errors
    unless they want to for tracing purposes.
  - Added support for Brainpool curves in TLS-1.3.
  - Support for Argon2d, Argon2i, Argon2id KDFs has been added along with
    a basic thread pool implementation for select platforms.</changelog>
  <changelog author="pmonreal@suse.com" date="1729857601">- Update to 3.2.1:
  * Changes between 3.2.0 and 3.2.1:
  - A file in PKCS12 format can contain certificates and keys and may come from
    an untrusted source. The PKCS12 specification allows certain fields to be
    NULL, but OpenSSL did not correctly check for this case. [CVE-2024-0727]
  - When function EVP_PKEY_public_check() is called on RSA public keys,
    a computation is done to confirm that the RSA modulus, n, is composite.
    For valid RSA keys, n is a product of two or more large primes and this
    computation completes quickly. However, if n is an overly large prime,
    then this computation would take a long time. [CVE-2023-6237]
  - Restore the encoding of SM2 PrivateKeyInfo and SubjectPublicKeyInfo to
    have the contained AlgorithmIdentifier.algorithm set to id-ecPublicKey
    rather than SM2.
  - The POLY1305 MAC (message authentication code) implementation in OpenSSL
    for PowerPC CPUs saves the contents of vector registers in different
    order than they are restored. [CVE-2023-6129]
  - Disable building QUIC server utility when OpenSSL is configured with 'no-apps'.
  * The openssl-crypto-policies-support.patch has been merged into
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Rename openssl-Disable-default-provider-for-test-suite.patch and rebase to
    openssl-TESTS-Disable-default-provider-crypto-policies.patch
  * Patches removed in the update:
  - openssl-Add_support_for_Windows_CA_certificate_store.patch
  - openssl-ec-56-bit-Limb-Solinas-Strategy-for-secp384r1.patch
  - openssl-ec-Use-static-linkage-on-nistp521-felem_-square-mul-.patch
  - openssl-ec-powerpc64le-Add-asm-implementation-of-felem_-squa.patch
  - openssl-ecc-Remove-extraneous-parentheses-in-secp384r1.patch
  - openssl-powerpc-ecc-Fix-stack-allocation-secp384r1-asm.patch
  - openssl-CVE-2024-41996.patch
  - openssl-CVE-2023-50782.patch
  - openssl-CVE-2024-9143.patch
  * Patches rebased:
  - openssl-3-use-include-directive.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-DEFAULT_SUSE_cipher.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Force-FIPS.patch
  - openssl-load-legacy-provider.patch
  - openssl-no-html-docs.patch
  - openssl-pkgconfig.patch
  - openssl-ppc64-config.patch
  - openssl-truststore.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116800">- Remove the hardcoded DEFAULT_SUSE cipherlist selection.
  * Remove openssl-DEFAULT_SUSE_cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116801">- Update to 3.2.3:
  * Changes between 3.2.2 and 3.2.3:
  - Fixed possible denial of service in X.509 name checks. [CVE-2024-6119]
  - Fixed possible buffer overread in SSL_select_next_proto(). [CVE-2024-5535]
  * Changes between 3.2.1 and 3.2.2:
  - Fixed potential use after free after SSL_free_buffers() is called. [CVE-2024-4741]
  - Fixed an issue where checking excessively long DSA keys or parameters may
    be very slow. [CVE-2024-4603]
  - Improved EC/DSA nonce generation routines to avoid bias and timing
    side channel leaks.
  - Fixed an issue where some non-default TLS server configurations can cause
    unbounded memory growth when processing TLSv1.3 sessions. [CVE-2024-2511]
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded. This can be used on platforms
    where using atexit() from shared libraries causes crashes on exit.
  - Fixed bug where SSL_export_keying_material() could not be used with QUIC
    connections.
  * Add openssl-skip-quic-pairwise.patch to adapt the pairwise tests.
  * Merge openssl-FIPS-release_num_in_version_string.patch into
    openssl-FIPS-services-minimize.patch
  * Rebase patches:
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Remove-EC-curves.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-3-use-include-directive.patch
  * Remove not needed patches:
  - openssl-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  - openssl-3-FIPS-PCT_rsa_keygen.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730462400">- Support MSA 12 SHA3 on s390x [jsc#PED-10280]
  * Add openssl-3-add_EVP_DigestSqueeze_api.patch
  * Add openssl-3-support-multiple-sha3_squeeze_s390x.patch
  * Add openssl-3-add-xof-state-handling-s3_absorb.patch
  * Add openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  * Add openssl-3-fix-state-handling-sha3_final_s390x.patch
  * Add openssl-3-fix-state-handling-shake_final_s390x.patch
  * Add openssl-3-fix-state-handling-keccak_final_s390x.patch
  * Add openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  * Add openssl-3-add-defines-CPACF-funcs.patch
  * Add openssl-3-add-hw-acceleration-hmac.patch
  * Add openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  * Add openssl-3-fix-s390x_sha3_absorb.patch
  * Add openssl-3-fix-s390x_shake_squeeze.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808000">- Support MSA 10 XTS on s390x [jsc#PED-10273]
  * s390x: Add hardware acceleration for full AES-XTS
  * Add openssl-3-hw-acceleration-aes-xts-s390x.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808001">- Support MSA 11 HMAC on s390x [jsc#PED-10274]
  * Add openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  * Add openssl-3-fix-hmac-digest-detection-s390x.patch
  * Add openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730980800">- Add missing fixes for SHA3_squeeze and quic_multistream_test on
  pcc64 arch. [jsc#PED-10280]
  * Added openssl-3-fix-sha3-squeeze-ppc64.patch
  * Added openssl-3-fix-quic_multistream_test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1731412800">- Do not use HASHBANGPERL to avoid introducing a dependency on the
  perl-base package. [bsc#1233235]</changelog>
  <changelog author="pmonreal@suse.com" date="1734436800">- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
  - openssl-3-use-include-directive.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1738238400">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Security fix: [bsc#1236599, CVE-2024-12797]
  * RFC7250 handshakes with unauthenticated servers don't abort as
    expected.
  * Add openssl-CVE-2024-12797.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1746014400">- Security fix: [bsc#1240366, CVE-2025-27587]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
  <changelog author="mls@suse.de" date="1751371200">- Backport mdless cms signing support [jsc#PED-12895]
  * Add openssl-3-support-mdless-cms.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- FIPS: Fix EMS in crypto-policies FIPS:NO-ENFORCE-EMS
  * [bsc#1230959, bsc#1232326, bsc#1231748, bsc#1246428]
  * Add patch openssl-FIPS-fix-EMS-support.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1753876800">- Increase limit for CRL download [bsc#1247148, bsc#1247144]
  * Add openssl-3-large-CRLs.patch</changelog>
</package>
<package pkgid="4af143ea36f65cc172b2169e02ff64a4bbfdfea5d5e6a1662e12e7532a8448b7" name="openssl-3" arch="x86_64">
  <version epoch="0" ver="3.2.3" rel="150700.5.18.1"/>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1220262, CVE-2023-50782]
  * Implicit rejection in PKCS#1 v1.5
  * Add openssl-CVE-2023-50782.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166401">- Security fix: [bsc#1231741, CVE-2024-9143]
  * Low-level invalid GF(2^m) parameters lead to OOB memory access
  * Add openssl-CVE-2024-9143.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729512000">- Update to 3.1.7:
  * Major changes between OpenSSL 3.1.6 and OpenSSL 3.1.7 [3 Sep 2024]
  - Fixed possible denial of service in X.509 name checks (CVE-2024-6119)
  - Fixed possible buffer overread in SSL_select_next_proto()
    (CVE-2024-5535)
  * Major changes between OpenSSL 3.1.5 and OpenSSL 3.1.6 [4 Jun 2024]
  - Fixed potential use after free after SSL_free_buffers() is
    called (CVE-2024-4741)
  - Fixed an issue where checking excessively long DSA keys or
    parameters may be very slow (CVE-2024-4603)
  - Fixed unbounded memory growth with session handling in TLSv1.3
    (CVE-2024-2511)
  * Major changes between OpenSSL 3.1.4 and OpenSSL 3.1.5 [30 Jan 2024]
  - Fixed PKCS12 Decoding crashes (CVE-2024-0727)
  - Fixed Excessive time spent checking invalid RSA public keys
    [CVE-2023-6237)
  - Fixed POLY1305 MAC implementation corrupting vector registers
    on PowerPC CPUs which support PowerISA 2.07 (CVE-2023-6129)
  - Fix excessive time spent in DH check / generation with large
    Q parameter value (CVE-2023-5678)
  * Update openssl.keyring with BA5473A2B0587B07FB27CF2D216094DFD0CB81EF
  * Rebase patches:
  - openssl-Force-FIPS.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-CVE-2023-50782.patch
  * Remove patches fixed in the update:
  - openssl-Improve-performance-for-6x-unrolling-with-vpermxor-i.patch
  - openssl-CVE-2024-6119.patch openssl-CVE-2024-5535.patch
  - openssl-CVE-2024-4741.patch openssl-CVE-2024-4603.patch
  - openssl-CVE-2024-2511.patch openssl-CVE-2024-0727.patch
  - openssl-CVE-2023-6237.patch openssl-CVE-2023-6129.patch
  - openssl-CVE-2023-5678.patch openssl-3-CVE-2024-41996.patch
  - openssl-Enable-BTI-feature-for-md5-on-aarch64.patch
  - openssl-Fix-EVP_PKEY_CTX_add1_hkdf_info-behavior.patch
  - openssl-Handle-empty-param-in-EVP_PKEY_CTX_add1_hkdf_info.patch
  - reproducible.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729857600">- Update to 3.2.0:
  * Changes between 3.1.x and 3.2.0:
  - Fix excessive time spent in DH check/ generation with large Q parameter
    value. [CVE-2023-5678]
  - The BLAKE2b hash algorithm supports a configurable output length
    by setting the "size" parameter.
  - Added a function to delete objects from store by URI - OSSL_STORE_delete()
    and the corresponding provider-storemgmt API function OSSL_FUNC_store_delete().
  - Added OSSL_FUNC_store_open_ex() provider-storemgmt API function to pass
    a passphrase callback when opening a store.
  - Changed the default salt length used by PBES2 KDF's (PBKDF2 and scrypt)
    from 8 bytes to 16 bytes.
  - Changed the default value of the 'ess_cert_id_alg' configuration
    option which is used to calculate the TSA's public key certificate
    identifier. The default algorithm is updated to be sha256 instead of sha1.
  - Added optimization for SM2 algorithm on aarch64. A new configure option
    'no-sm2-precomp' has been added to disable the precomputed table.
  - Added client side support for QUIC
  - Added secp384r1 implementation using Solinas' reduction to improve
    speed of the NIST P-384 elliptic curve. To enable the implementation
    the build option 'enable-ec_nistp_64_gcc_128' must be used.
  - Improved RFC7468 compliance of the asn1parse command.
  - Added SHA256/192 algorithm support.
  - Added support for securely getting root CA certificate update in CMP.
  - Improved contention on global write locks by using more read locks where
    appropriate.
  - Improved performance of OSSL_PARAM lookups in performance critical
    provider functions.
  - Added the SSL_get0_group_name() function to provide access to the
    name of the group used for the TLS key exchange.
  - Provide a new configure option 'no-http' that can be used to disable the
    HTTP support. Provide new configure options 'no-apps' and 'no-docs' to
    disable building the openssl command line application and the documentation.
  - Provide a new configure option 'no-ecx' that can be used to disable the
    X25519, X448, and EdDSA support.
  - When multiple OSSL_KDF_PARAM_INFO parameters are passed to
    the EVP_KDF_CTX_set_params() function they are now concatenated not just
    for the HKDF algorithm but also for SSKDF and X9.63 KDF algorithms.
  - Added OSSL_FUNC_keymgmt_im/export_types_ex() provider functions that get
    the provider context as a parameter.
  - TLS round-trip time calculation was added by a Brigham Young University
    Capstone team partnering with Sandia National Laboratories. A new function
    in ssl_lib titled SSL_get_handshake_rtt will calculate and retrieve this
    value.
  - Added the "-quic" option to s_client to enable connectivity to QUIC servers.
    QUIC requires the use of ALPN, so this must be specified via the "-alpn"
    option. Use of the "advanced" s_client command command via the "-adv" option
    is recommended.
  - Added an "advanced" command mode to s_client. Use this with the "-adv" option.
  - Add Raw Public Key (RFC7250) support.
  - Added support for modular exponentiation and CRT offloading for the
    S390x architecture.
  - Added further assembler code for the RISC-V architecture.
  - Added EC_GROUP_to_params() which creates an OSSL_PARAM array
    from a given EC_GROUP.
  - Improved support for non-default library contexts and property queries
    when parsing PKCS#12 files.
  - Implemented support for all five instances of EdDSA from RFC8032:
    Ed25519, Ed25519ctx, Ed25519ph, Ed448, and Ed448ph.
    The streaming is not yet supported for the HashEdDSA variants
    (Ed25519ph and Ed448ph).
  - Added SM4 optimization for ARM processors using ASIMD and AES HW instructions.
  - Implemented SM4-XTS support.
  - Added platform-agnostic OSSL_sleep() function.
  - Implemented deterministic ECDSA signatures (RFC6979) support.
  - Implemented AES-GCM-SIV (RFC8452) support.
  - Added support for pluggable (provider-based) TLS signature algorithms.
    This enables TLS 1.3 authentication operations with algorithms embedded
    in providers not included by default in OpenSSL. In combination with
    the already available pluggable KEM and X.509 support, this enables
    for example suitable providers to deliver post-quantum or quantum-safe
    cryptography to OpenSSL users.
  - Added support for pluggable (provider-based) CMS signature algorithms.
    This enables CMS sign and verify operations with algorithms embedded
    in providers not included by default in OpenSSL.
  - Implemented HPKE DHKEM support in providers used by HPKE (RFC9180) API.
  - Add support for certificate compression (RFC8879), including
    library support for Brotli and Zstandard compression.
  - Add the ability to add custom attributes to PKCS12 files. Add a new API
    PKCS12_create_ex2, identical to the existing PKCS12_create_ex but allows
    for a user specified callback and optional argument.
    Added a new PKCS12_SAFEBAG_set0_attr, which allows for a new attr to be
    added to the existing STACK_OF attrs.
  - Major refactor of the libssl record layer.
  - Add a mac salt length option for the pkcs12 command.
  - Add more SRTP protection profiles from RFC8723 and RFC8269.
  - Extended Kernel TLS (KTLS) to support TLS 1.3 receive offload.
  - Add support for TCP Fast Open (RFC7413) to macOS, Linux, and FreeBSD where
    supported and enabled.
  - Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489)
    to the list of ciphersuites providing Perfect Forward Secrecy as
    required by SECLEVEL &gt;= 3.
  - Add new SSL APIs to aid in efficiently implementing TLS/SSL fingerprinting.
    The SSL_CTRL_GET_IANA_GROUPS control code, exposed as the
    SSL_get0_iana_groups() function-like macro, retrieves the list of
    supported groups sent by the peer.
  - Fixed PEM_write_bio_PKCS8PrivateKey() and PEM_write_bio_PKCS8PrivateKey_nid()
    to make it possible to use empty passphrase strings.
  - The PKCS12_parse() function now supports MAC-less PKCS12 files.
  - Added ASYNC_set_mem_functions() and ASYNC_get_mem_functions() calls to be able
    to change functions used for allocating the memory of asynchronous call stack.
  - Added support for signed BIGNUMs in the OSSL_PARAM APIs.
  - A failure exit code is returned when using the openssl x509 command to check
    certificate attributes and the checks fail.
  - The default SSL/TLS security level has been changed from 1 to 2. RSA,
    DSA and DH keys of 1024 bits and above and less than 2048 bits and ECC keys
    of 160 bits and above and less than 224 bits were previously accepted by
    default but are now no longer allowed. By default TLS compression was
    already disabled in previous OpenSSL versions. At security level 2 it cannot
    be enabled.
  - The SSL_CTX_set_cipher_list family functions now accept ciphers using their
    IANA standard names.
  - The PVK key derivation function has been moved from b2i_PVK_bio_ex() into
    the legacy crypto provider as an EVP_KDF. Applications requiring this KDF
    will need to load the legacy crypto provider.
  - CCM8 cipher suites in TLS have been downgraded to security level zero
    because they use a short authentication tag which lowers their strength.
  - Subject or issuer names in X.509 objects are now displayed as UTF-8 strings
    by default. Also spaces surrounding '=' in DN output are removed.
  - Add X.509 certificate codeSigning purpose and related checks on key usage and
    extended key usage of the leaf certificate according to the CA/Browser Forum.
  - The 'x509', 'ca', and 'req' apps now produce X.509 v3 certificates.
    The '-x509v1' option of 'req' prefers generation of X.509 v1 certificates.
    'X509_sign()' and 'X509_sign_ctx()' make sure that the certificate has
    X.509 version 3 if the certificate information includes X.509 extensions.
  - Fix and extend certificate handling and the apps 'x509', 'verify' etc.
    such as adding a trace facility for debugging certificate chain building.
  - Various fixes and extensions to the CMP+CRMF implementation and the 'cmp' app
    in particular supporting requests for central key generation, generalized
    polling, and various types of genm/genp exchanges defined in CMP Updates.
  - Fixes and extensions to the HTTP client and to the HTTP server in 'apps/'
    like correcting the TLS and proxy support and adding tracing for debugging.
  - Extended the CMS API for handling 'CMS_SignedData' and 'CMS_EnvelopedData'.
  - 'CMS_add0_cert()' and 'CMS_add1_cert()' no longer throw an error if
    a certificate to be added is already present. 'CMS_sign_ex()' and
    'CMS_sign()' now ignore any duplicate certificates in their 'certs' argument
    and no longer throw an error for them.
  - Added BIO_s_dgram_pair() and BIO_s_dgram_mem() that provide memory-based
    BIOs with datagram semantics and support for BIO_sendmmsg() and BIO_recvmmsg()
    calls. They can be used as the transport BIOs for QUIC.
  - Add new BIO_sendmmsg() and BIO_recvmmsg() BIO methods which allow
    sending and receiving multiple messages in a single call. An implementation
    is provided for BIO_dgram. For further details, see BIO_sendmmsg(3).
  - Support for loading root certificates from the Windows certificate store
    has been added.
  - Enable KTLS with the TLS 1.3 CCM mode ciphersuites. Note that some linux
    kernel versions that support KTLS have a known bug in CCM processing. That
    has been fixed in stable releases starting from 5.4.164, 5.10.84, 5.15.7,
    and all releases since 5.16. KTLS with CCM ciphersuites should be only used
    on these releases.
  - Added '-ktls' option to 's_server' and 's_client' commands to enable the
    KTLS support.
  - Zerocopy KTLS sendfile() support on Linux.
  - The OBJ_ calls are now thread safe using a global lock.
  - New parameter '-digest' for openssl cms command allowing signing
    pre-computed digests and new CMS API functions supporting that
    functionality.
  - OPENSSL_malloc() and other allocation functions now raise errors on
    allocation failures. The callers do not need to explicitly raise errors
    unless they want to for tracing purposes.
  - Added support for Brainpool curves in TLS-1.3.
  - Support for Argon2d, Argon2i, Argon2id KDFs has been added along with
    a basic thread pool implementation for select platforms.</changelog>
  <changelog author="pmonreal@suse.com" date="1729857601">- Update to 3.2.1:
  * Changes between 3.2.0 and 3.2.1:
  - A file in PKCS12 format can contain certificates and keys and may come from
    an untrusted source. The PKCS12 specification allows certain fields to be
    NULL, but OpenSSL did not correctly check for this case. [CVE-2024-0727]
  - When function EVP_PKEY_public_check() is called on RSA public keys,
    a computation is done to confirm that the RSA modulus, n, is composite.
    For valid RSA keys, n is a product of two or more large primes and this
    computation completes quickly. However, if n is an overly large prime,
    then this computation would take a long time. [CVE-2023-6237]
  - Restore the encoding of SM2 PrivateKeyInfo and SubjectPublicKeyInfo to
    have the contained AlgorithmIdentifier.algorithm set to id-ecPublicKey
    rather than SM2.
  - The POLY1305 MAC (message authentication code) implementation in OpenSSL
    for PowerPC CPUs saves the contents of vector registers in different
    order than they are restored. [CVE-2023-6129]
  - Disable building QUIC server utility when OpenSSL is configured with 'no-apps'.
  * The openssl-crypto-policies-support.patch has been merged into
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Rename openssl-Disable-default-provider-for-test-suite.patch and rebase to
    openssl-TESTS-Disable-default-provider-crypto-policies.patch
  * Patches removed in the update:
  - openssl-Add_support_for_Windows_CA_certificate_store.patch
  - openssl-ec-56-bit-Limb-Solinas-Strategy-for-secp384r1.patch
  - openssl-ec-Use-static-linkage-on-nistp521-felem_-square-mul-.patch
  - openssl-ec-powerpc64le-Add-asm-implementation-of-felem_-squa.patch
  - openssl-ecc-Remove-extraneous-parentheses-in-secp384r1.patch
  - openssl-powerpc-ecc-Fix-stack-allocation-secp384r1-asm.patch
  - openssl-CVE-2024-41996.patch
  - openssl-CVE-2023-50782.patch
  - openssl-CVE-2024-9143.patch
  * Patches rebased:
  - openssl-3-use-include-directive.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-DEFAULT_SUSE_cipher.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Force-FIPS.patch
  - openssl-load-legacy-provider.patch
  - openssl-no-html-docs.patch
  - openssl-pkgconfig.patch
  - openssl-ppc64-config.patch
  - openssl-truststore.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116800">- Remove the hardcoded DEFAULT_SUSE cipherlist selection.
  * Remove openssl-DEFAULT_SUSE_cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116801">- Update to 3.2.3:
  * Changes between 3.2.2 and 3.2.3:
  - Fixed possible denial of service in X.509 name checks. [CVE-2024-6119]
  - Fixed possible buffer overread in SSL_select_next_proto(). [CVE-2024-5535]
  * Changes between 3.2.1 and 3.2.2:
  - Fixed potential use after free after SSL_free_buffers() is called. [CVE-2024-4741]
  - Fixed an issue where checking excessively long DSA keys or parameters may
    be very slow. [CVE-2024-4603]
  - Improved EC/DSA nonce generation routines to avoid bias and timing
    side channel leaks.
  - Fixed an issue where some non-default TLS server configurations can cause
    unbounded memory growth when processing TLSv1.3 sessions. [CVE-2024-2511]
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded. This can be used on platforms
    where using atexit() from shared libraries causes crashes on exit.
  - Fixed bug where SSL_export_keying_material() could not be used with QUIC
    connections.
  * Add openssl-skip-quic-pairwise.patch to adapt the pairwise tests.
  * Merge openssl-FIPS-release_num_in_version_string.patch into
    openssl-FIPS-services-minimize.patch
  * Rebase patches:
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Remove-EC-curves.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-3-use-include-directive.patch
  * Remove not needed patches:
  - openssl-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  - openssl-3-FIPS-PCT_rsa_keygen.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730462400">- Support MSA 12 SHA3 on s390x [jsc#PED-10280]
  * Add openssl-3-add_EVP_DigestSqueeze_api.patch
  * Add openssl-3-support-multiple-sha3_squeeze_s390x.patch
  * Add openssl-3-add-xof-state-handling-s3_absorb.patch
  * Add openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  * Add openssl-3-fix-state-handling-sha3_final_s390x.patch
  * Add openssl-3-fix-state-handling-shake_final_s390x.patch
  * Add openssl-3-fix-state-handling-keccak_final_s390x.patch
  * Add openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  * Add openssl-3-add-defines-CPACF-funcs.patch
  * Add openssl-3-add-hw-acceleration-hmac.patch
  * Add openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  * Add openssl-3-fix-s390x_sha3_absorb.patch
  * Add openssl-3-fix-s390x_shake_squeeze.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808000">- Support MSA 10 XTS on s390x [jsc#PED-10273]
  * s390x: Add hardware acceleration for full AES-XTS
  * Add openssl-3-hw-acceleration-aes-xts-s390x.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808001">- Support MSA 11 HMAC on s390x [jsc#PED-10274]
  * Add openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  * Add openssl-3-fix-hmac-digest-detection-s390x.patch
  * Add openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730980800">- Add missing fixes for SHA3_squeeze and quic_multistream_test on
  pcc64 arch. [jsc#PED-10280]
  * Added openssl-3-fix-sha3-squeeze-ppc64.patch
  * Added openssl-3-fix-quic_multistream_test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1731412800">- Do not use HASHBANGPERL to avoid introducing a dependency on the
  perl-base package. [bsc#1233235]</changelog>
  <changelog author="pmonreal@suse.com" date="1734436800">- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
  - openssl-3-use-include-directive.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1738238400">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Security fix: [bsc#1236599, CVE-2024-12797]
  * RFC7250 handshakes with unauthenticated servers don't abort as
    expected.
  * Add openssl-CVE-2024-12797.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1746014400">- Security fix: [bsc#1240366, CVE-2025-27587]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
  <changelog author="mls@suse.de" date="1751371200">- Backport mdless cms signing support [jsc#PED-12895]
  * Add openssl-3-support-mdless-cms.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- FIPS: Fix EMS in crypto-policies FIPS:NO-ENFORCE-EMS
  * [bsc#1230959, bsc#1232326, bsc#1231748, bsc#1246428]
  * Add patch openssl-FIPS-fix-EMS-support.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1753876800">- Increase limit for CRL download [bsc#1247148, bsc#1247144]
  * Add openssl-3-large-CRLs.patch</changelog>
</package>
<package pkgid="ce024698e2dd473ca05c0fe7f9433095494defb9b01a916fbcb6ec3379f3f2ca" name="openssl-3" arch="src">
  <version epoch="0" ver="3.2.3" rel="150700.5.21.1"/>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1231741, CVE-2024-9143]
  * Low-level invalid GF(2^m) parameters lead to OOB memory access
  * Add openssl-CVE-2024-9143.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729512000">- Update to 3.1.7:
  * Major changes between OpenSSL 3.1.6 and OpenSSL 3.1.7 [3 Sep 2024]
  - Fixed possible denial of service in X.509 name checks (CVE-2024-6119)
  - Fixed possible buffer overread in SSL_select_next_proto()
    (CVE-2024-5535)
  * Major changes between OpenSSL 3.1.5 and OpenSSL 3.1.6 [4 Jun 2024]
  - Fixed potential use after free after SSL_free_buffers() is
    called (CVE-2024-4741)
  - Fixed an issue where checking excessively long DSA keys or
    parameters may be very slow (CVE-2024-4603)
  - Fixed unbounded memory growth with session handling in TLSv1.3
    (CVE-2024-2511)
  * Major changes between OpenSSL 3.1.4 and OpenSSL 3.1.5 [30 Jan 2024]
  - Fixed PKCS12 Decoding crashes (CVE-2024-0727)
  - Fixed Excessive time spent checking invalid RSA public keys
    [CVE-2023-6237)
  - Fixed POLY1305 MAC implementation corrupting vector registers
    on PowerPC CPUs which support PowerISA 2.07 (CVE-2023-6129)
  - Fix excessive time spent in DH check / generation with large
    Q parameter value (CVE-2023-5678)
  * Update openssl.keyring with BA5473A2B0587B07FB27CF2D216094DFD0CB81EF
  * Rebase patches:
  - openssl-Force-FIPS.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-CVE-2023-50782.patch
  * Remove patches fixed in the update:
  - openssl-Improve-performance-for-6x-unrolling-with-vpermxor-i.patch
  - openssl-CVE-2024-6119.patch openssl-CVE-2024-5535.patch
  - openssl-CVE-2024-4741.patch openssl-CVE-2024-4603.patch
  - openssl-CVE-2024-2511.patch openssl-CVE-2024-0727.patch
  - openssl-CVE-2023-6237.patch openssl-CVE-2023-6129.patch
  - openssl-CVE-2023-5678.patch openssl-3-CVE-2024-41996.patch
  - openssl-Enable-BTI-feature-for-md5-on-aarch64.patch
  - openssl-Fix-EVP_PKEY_CTX_add1_hkdf_info-behavior.patch
  - openssl-Handle-empty-param-in-EVP_PKEY_CTX_add1_hkdf_info.patch
  - reproducible.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729857600">- Update to 3.2.0:
  * Changes between 3.1.x and 3.2.0:
  - Fix excessive time spent in DH check/ generation with large Q parameter
    value. [CVE-2023-5678]
  - The BLAKE2b hash algorithm supports a configurable output length
    by setting the "size" parameter.
  - Added a function to delete objects from store by URI - OSSL_STORE_delete()
    and the corresponding provider-storemgmt API function OSSL_FUNC_store_delete().
  - Added OSSL_FUNC_store_open_ex() provider-storemgmt API function to pass
    a passphrase callback when opening a store.
  - Changed the default salt length used by PBES2 KDF's (PBKDF2 and scrypt)
    from 8 bytes to 16 bytes.
  - Changed the default value of the 'ess_cert_id_alg' configuration
    option which is used to calculate the TSA's public key certificate
    identifier. The default algorithm is updated to be sha256 instead of sha1.
  - Added optimization for SM2 algorithm on aarch64. A new configure option
    'no-sm2-precomp' has been added to disable the precomputed table.
  - Added client side support for QUIC
  - Added secp384r1 implementation using Solinas' reduction to improve
    speed of the NIST P-384 elliptic curve. To enable the implementation
    the build option 'enable-ec_nistp_64_gcc_128' must be used.
  - Improved RFC7468 compliance of the asn1parse command.
  - Added SHA256/192 algorithm support.
  - Added support for securely getting root CA certificate update in CMP.
  - Improved contention on global write locks by using more read locks where
    appropriate.
  - Improved performance of OSSL_PARAM lookups in performance critical
    provider functions.
  - Added the SSL_get0_group_name() function to provide access to the
    name of the group used for the TLS key exchange.
  - Provide a new configure option 'no-http' that can be used to disable the
    HTTP support. Provide new configure options 'no-apps' and 'no-docs' to
    disable building the openssl command line application and the documentation.
  - Provide a new configure option 'no-ecx' that can be used to disable the
    X25519, X448, and EdDSA support.
  - When multiple OSSL_KDF_PARAM_INFO parameters are passed to
    the EVP_KDF_CTX_set_params() function they are now concatenated not just
    for the HKDF algorithm but also for SSKDF and X9.63 KDF algorithms.
  - Added OSSL_FUNC_keymgmt_im/export_types_ex() provider functions that get
    the provider context as a parameter.
  - TLS round-trip time calculation was added by a Brigham Young University
    Capstone team partnering with Sandia National Laboratories. A new function
    in ssl_lib titled SSL_get_handshake_rtt will calculate and retrieve this
    value.
  - Added the "-quic" option to s_client to enable connectivity to QUIC servers.
    QUIC requires the use of ALPN, so this must be specified via the "-alpn"
    option. Use of the "advanced" s_client command command via the "-adv" option
    is recommended.
  - Added an "advanced" command mode to s_client. Use this with the "-adv" option.
  - Add Raw Public Key (RFC7250) support.
  - Added support for modular exponentiation and CRT offloading for the
    S390x architecture.
  - Added further assembler code for the RISC-V architecture.
  - Added EC_GROUP_to_params() which creates an OSSL_PARAM array
    from a given EC_GROUP.
  - Improved support for non-default library contexts and property queries
    when parsing PKCS#12 files.
  - Implemented support for all five instances of EdDSA from RFC8032:
    Ed25519, Ed25519ctx, Ed25519ph, Ed448, and Ed448ph.
    The streaming is not yet supported for the HashEdDSA variants
    (Ed25519ph and Ed448ph).
  - Added SM4 optimization for ARM processors using ASIMD and AES HW instructions.
  - Implemented SM4-XTS support.
  - Added platform-agnostic OSSL_sleep() function.
  - Implemented deterministic ECDSA signatures (RFC6979) support.
  - Implemented AES-GCM-SIV (RFC8452) support.
  - Added support for pluggable (provider-based) TLS signature algorithms.
    This enables TLS 1.3 authentication operations with algorithms embedded
    in providers not included by default in OpenSSL. In combination with
    the already available pluggable KEM and X.509 support, this enables
    for example suitable providers to deliver post-quantum or quantum-safe
    cryptography to OpenSSL users.
  - Added support for pluggable (provider-based) CMS signature algorithms.
    This enables CMS sign and verify operations with algorithms embedded
    in providers not included by default in OpenSSL.
  - Implemented HPKE DHKEM support in providers used by HPKE (RFC9180) API.
  - Add support for certificate compression (RFC8879), including
    library support for Brotli and Zstandard compression.
  - Add the ability to add custom attributes to PKCS12 files. Add a new API
    PKCS12_create_ex2, identical to the existing PKCS12_create_ex but allows
    for a user specified callback and optional argument.
    Added a new PKCS12_SAFEBAG_set0_attr, which allows for a new attr to be
    added to the existing STACK_OF attrs.
  - Major refactor of the libssl record layer.
  - Add a mac salt length option for the pkcs12 command.
  - Add more SRTP protection profiles from RFC8723 and RFC8269.
  - Extended Kernel TLS (KTLS) to support TLS 1.3 receive offload.
  - Add support for TCP Fast Open (RFC7413) to macOS, Linux, and FreeBSD where
    supported and enabled.
  - Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489)
    to the list of ciphersuites providing Perfect Forward Secrecy as
    required by SECLEVEL &gt;= 3.
  - Add new SSL APIs to aid in efficiently implementing TLS/SSL fingerprinting.
    The SSL_CTRL_GET_IANA_GROUPS control code, exposed as the
    SSL_get0_iana_groups() function-like macro, retrieves the list of
    supported groups sent by the peer.
  - Fixed PEM_write_bio_PKCS8PrivateKey() and PEM_write_bio_PKCS8PrivateKey_nid()
    to make it possible to use empty passphrase strings.
  - The PKCS12_parse() function now supports MAC-less PKCS12 files.
  - Added ASYNC_set_mem_functions() and ASYNC_get_mem_functions() calls to be able
    to change functions used for allocating the memory of asynchronous call stack.
  - Added support for signed BIGNUMs in the OSSL_PARAM APIs.
  - A failure exit code is returned when using the openssl x509 command to check
    certificate attributes and the checks fail.
  - The default SSL/TLS security level has been changed from 1 to 2. RSA,
    DSA and DH keys of 1024 bits and above and less than 2048 bits and ECC keys
    of 160 bits and above and less than 224 bits were previously accepted by
    default but are now no longer allowed. By default TLS compression was
    already disabled in previous OpenSSL versions. At security level 2 it cannot
    be enabled.
  - The SSL_CTX_set_cipher_list family functions now accept ciphers using their
    IANA standard names.
  - The PVK key derivation function has been moved from b2i_PVK_bio_ex() into
    the legacy crypto provider as an EVP_KDF. Applications requiring this KDF
    will need to load the legacy crypto provider.
  - CCM8 cipher suites in TLS have been downgraded to security level zero
    because they use a short authentication tag which lowers their strength.
  - Subject or issuer names in X.509 objects are now displayed as UTF-8 strings
    by default. Also spaces surrounding '=' in DN output are removed.
  - Add X.509 certificate codeSigning purpose and related checks on key usage and
    extended key usage of the leaf certificate according to the CA/Browser Forum.
  - The 'x509', 'ca', and 'req' apps now produce X.509 v3 certificates.
    The '-x509v1' option of 'req' prefers generation of X.509 v1 certificates.
    'X509_sign()' and 'X509_sign_ctx()' make sure that the certificate has
    X.509 version 3 if the certificate information includes X.509 extensions.
  - Fix and extend certificate handling and the apps 'x509', 'verify' etc.
    such as adding a trace facility for debugging certificate chain building.
  - Various fixes and extensions to the CMP+CRMF implementation and the 'cmp' app
    in particular supporting requests for central key generation, generalized
    polling, and various types of genm/genp exchanges defined in CMP Updates.
  - Fixes and extensions to the HTTP client and to the HTTP server in 'apps/'
    like correcting the TLS and proxy support and adding tracing for debugging.
  - Extended the CMS API for handling 'CMS_SignedData' and 'CMS_EnvelopedData'.
  - 'CMS_add0_cert()' and 'CMS_add1_cert()' no longer throw an error if
    a certificate to be added is already present. 'CMS_sign_ex()' and
    'CMS_sign()' now ignore any duplicate certificates in their 'certs' argument
    and no longer throw an error for them.
  - Added BIO_s_dgram_pair() and BIO_s_dgram_mem() that provide memory-based
    BIOs with datagram semantics and support for BIO_sendmmsg() and BIO_recvmmsg()
    calls. They can be used as the transport BIOs for QUIC.
  - Add new BIO_sendmmsg() and BIO_recvmmsg() BIO methods which allow
    sending and receiving multiple messages in a single call. An implementation
    is provided for BIO_dgram. For further details, see BIO_sendmmsg(3).
  - Support for loading root certificates from the Windows certificate store
    has been added.
  - Enable KTLS with the TLS 1.3 CCM mode ciphersuites. Note that some linux
    kernel versions that support KTLS have a known bug in CCM processing. That
    has been fixed in stable releases starting from 5.4.164, 5.10.84, 5.15.7,
    and all releases since 5.16. KTLS with CCM ciphersuites should be only used
    on these releases.
  - Added '-ktls' option to 's_server' and 's_client' commands to enable the
    KTLS support.
  - Zerocopy KTLS sendfile() support on Linux.
  - The OBJ_ calls are now thread safe using a global lock.
  - New parameter '-digest' for openssl cms command allowing signing
    pre-computed digests and new CMS API functions supporting that
    functionality.
  - OPENSSL_malloc() and other allocation functions now raise errors on
    allocation failures. The callers do not need to explicitly raise errors
    unless they want to for tracing purposes.
  - Added support for Brainpool curves in TLS-1.3.
  - Support for Argon2d, Argon2i, Argon2id KDFs has been added along with
    a basic thread pool implementation for select platforms.</changelog>
  <changelog author="pmonreal@suse.com" date="1729857601">- Update to 3.2.1:
  * Changes between 3.2.0 and 3.2.1:
  - A file in PKCS12 format can contain certificates and keys and may come from
    an untrusted source. The PKCS12 specification allows certain fields to be
    NULL, but OpenSSL did not correctly check for this case. [CVE-2024-0727]
  - When function EVP_PKEY_public_check() is called on RSA public keys,
    a computation is done to confirm that the RSA modulus, n, is composite.
    For valid RSA keys, n is a product of two or more large primes and this
    computation completes quickly. However, if n is an overly large prime,
    then this computation would take a long time. [CVE-2023-6237]
  - Restore the encoding of SM2 PrivateKeyInfo and SubjectPublicKeyInfo to
    have the contained AlgorithmIdentifier.algorithm set to id-ecPublicKey
    rather than SM2.
  - The POLY1305 MAC (message authentication code) implementation in OpenSSL
    for PowerPC CPUs saves the contents of vector registers in different
    order than they are restored. [CVE-2023-6129]
  - Disable building QUIC server utility when OpenSSL is configured with 'no-apps'.
  * The openssl-crypto-policies-support.patch has been merged into
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Rename openssl-Disable-default-provider-for-test-suite.patch and rebase to
    openssl-TESTS-Disable-default-provider-crypto-policies.patch
  * Patches removed in the update:
  - openssl-Add_support_for_Windows_CA_certificate_store.patch
  - openssl-ec-56-bit-Limb-Solinas-Strategy-for-secp384r1.patch
  - openssl-ec-Use-static-linkage-on-nistp521-felem_-square-mul-.patch
  - openssl-ec-powerpc64le-Add-asm-implementation-of-felem_-squa.patch
  - openssl-ecc-Remove-extraneous-parentheses-in-secp384r1.patch
  - openssl-powerpc-ecc-Fix-stack-allocation-secp384r1-asm.patch
  - openssl-CVE-2024-41996.patch
  - openssl-CVE-2023-50782.patch
  - openssl-CVE-2024-9143.patch
  * Patches rebased:
  - openssl-3-use-include-directive.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-DEFAULT_SUSE_cipher.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Force-FIPS.patch
  - openssl-load-legacy-provider.patch
  - openssl-no-html-docs.patch
  - openssl-pkgconfig.patch
  - openssl-ppc64-config.patch
  - openssl-truststore.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116800">- Remove the hardcoded DEFAULT_SUSE cipherlist selection.
  * Remove openssl-DEFAULT_SUSE_cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116801">- Update to 3.2.3:
  * Changes between 3.2.2 and 3.2.3:
  - Fixed possible denial of service in X.509 name checks. [CVE-2024-6119]
  - Fixed possible buffer overread in SSL_select_next_proto(). [CVE-2024-5535]
  * Changes between 3.2.1 and 3.2.2:
  - Fixed potential use after free after SSL_free_buffers() is called. [CVE-2024-4741]
  - Fixed an issue where checking excessively long DSA keys or parameters may
    be very slow. [CVE-2024-4603]
  - Improved EC/DSA nonce generation routines to avoid bias and timing
    side channel leaks.
  - Fixed an issue where some non-default TLS server configurations can cause
    unbounded memory growth when processing TLSv1.3 sessions. [CVE-2024-2511]
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded. This can be used on platforms
    where using atexit() from shared libraries causes crashes on exit.
  - Fixed bug where SSL_export_keying_material() could not be used with QUIC
    connections.
  * Add openssl-skip-quic-pairwise.patch to adapt the pairwise tests.
  * Merge openssl-FIPS-release_num_in_version_string.patch into
    openssl-FIPS-services-minimize.patch
  * Rebase patches:
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Remove-EC-curves.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-3-use-include-directive.patch
  * Remove not needed patches:
  - openssl-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  - openssl-3-FIPS-PCT_rsa_keygen.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730462400">- Support MSA 12 SHA3 on s390x [jsc#PED-10280]
  * Add openssl-3-add_EVP_DigestSqueeze_api.patch
  * Add openssl-3-support-multiple-sha3_squeeze_s390x.patch
  * Add openssl-3-add-xof-state-handling-s3_absorb.patch
  * Add openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  * Add openssl-3-fix-state-handling-sha3_final_s390x.patch
  * Add openssl-3-fix-state-handling-shake_final_s390x.patch
  * Add openssl-3-fix-state-handling-keccak_final_s390x.patch
  * Add openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  * Add openssl-3-add-defines-CPACF-funcs.patch
  * Add openssl-3-add-hw-acceleration-hmac.patch
  * Add openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  * Add openssl-3-fix-s390x_sha3_absorb.patch
  * Add openssl-3-fix-s390x_shake_squeeze.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808000">- Support MSA 10 XTS on s390x [jsc#PED-10273]
  * s390x: Add hardware acceleration for full AES-XTS
  * Add openssl-3-hw-acceleration-aes-xts-s390x.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808001">- Support MSA 11 HMAC on s390x [jsc#PED-10274]
  * Add openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  * Add openssl-3-fix-hmac-digest-detection-s390x.patch
  * Add openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730980800">- Add missing fixes for SHA3_squeeze and quic_multistream_test on
  pcc64 arch. [jsc#PED-10280]
  * Added openssl-3-fix-sha3-squeeze-ppc64.patch
  * Added openssl-3-fix-quic_multistream_test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1731412800">- Do not use HASHBANGPERL to avoid introducing a dependency on the
  perl-base package. [bsc#1233235]</changelog>
  <changelog author="pmonreal@suse.com" date="1734436800">- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
  - openssl-3-use-include-directive.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1738238400">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Security fix: [bsc#1236599, CVE-2024-12797]
  * RFC7250 handshakes with unauthenticated servers don't abort as
    expected.
  * Add openssl-CVE-2024-12797.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1746014400">- Security fix: [bsc#1240366, CVE-2025-27587]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
  <changelog author="mls@suse.de" date="1751371200">- Backport mdless cms signing support [jsc#PED-12895]
  * Add openssl-3-support-mdless-cms.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- FIPS: Fix EMS in crypto-policies FIPS:NO-ENFORCE-EMS
  * [bsc#1230959, bsc#1232326, bsc#1231748, bsc#1246428]
  * Add patch openssl-FIPS-fix-EMS-support.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1753876800">- Increase limit for CRL download [bsc#1247148, bsc#1247144]
  * Add openssl-3-large-CRLs.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1759233600">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl3-CVE-2025-9230.patch</changelog>
</package>
<package pkgid="76f69fdc257d54fcbd4d69ef3180fa8ebc37d53f61c30373fbb05a8ba9ca59d2" name="openssl-3" arch="x86_64">
  <version epoch="0" ver="3.2.3" rel="150700.5.21.1"/>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1231741, CVE-2024-9143]
  * Low-level invalid GF(2^m) parameters lead to OOB memory access
  * Add openssl-CVE-2024-9143.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729512000">- Update to 3.1.7:
  * Major changes between OpenSSL 3.1.6 and OpenSSL 3.1.7 [3 Sep 2024]
  - Fixed possible denial of service in X.509 name checks (CVE-2024-6119)
  - Fixed possible buffer overread in SSL_select_next_proto()
    (CVE-2024-5535)
  * Major changes between OpenSSL 3.1.5 and OpenSSL 3.1.6 [4 Jun 2024]
  - Fixed potential use after free after SSL_free_buffers() is
    called (CVE-2024-4741)
  - Fixed an issue where checking excessively long DSA keys or
    parameters may be very slow (CVE-2024-4603)
  - Fixed unbounded memory growth with session handling in TLSv1.3
    (CVE-2024-2511)
  * Major changes between OpenSSL 3.1.4 and OpenSSL 3.1.5 [30 Jan 2024]
  - Fixed PKCS12 Decoding crashes (CVE-2024-0727)
  - Fixed Excessive time spent checking invalid RSA public keys
    [CVE-2023-6237)
  - Fixed POLY1305 MAC implementation corrupting vector registers
    on PowerPC CPUs which support PowerISA 2.07 (CVE-2023-6129)
  - Fix excessive time spent in DH check / generation with large
    Q parameter value (CVE-2023-5678)
  * Update openssl.keyring with BA5473A2B0587B07FB27CF2D216094DFD0CB81EF
  * Rebase patches:
  - openssl-Force-FIPS.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-CVE-2023-50782.patch
  * Remove patches fixed in the update:
  - openssl-Improve-performance-for-6x-unrolling-with-vpermxor-i.patch
  - openssl-CVE-2024-6119.patch openssl-CVE-2024-5535.patch
  - openssl-CVE-2024-4741.patch openssl-CVE-2024-4603.patch
  - openssl-CVE-2024-2511.patch openssl-CVE-2024-0727.patch
  - openssl-CVE-2023-6237.patch openssl-CVE-2023-6129.patch
  - openssl-CVE-2023-5678.patch openssl-3-CVE-2024-41996.patch
  - openssl-Enable-BTI-feature-for-md5-on-aarch64.patch
  - openssl-Fix-EVP_PKEY_CTX_add1_hkdf_info-behavior.patch
  - openssl-Handle-empty-param-in-EVP_PKEY_CTX_add1_hkdf_info.patch
  - reproducible.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729857600">- Update to 3.2.0:
  * Changes between 3.1.x and 3.2.0:
  - Fix excessive time spent in DH check/ generation with large Q parameter
    value. [CVE-2023-5678]
  - The BLAKE2b hash algorithm supports a configurable output length
    by setting the "size" parameter.
  - Added a function to delete objects from store by URI - OSSL_STORE_delete()
    and the corresponding provider-storemgmt API function OSSL_FUNC_store_delete().
  - Added OSSL_FUNC_store_open_ex() provider-storemgmt API function to pass
    a passphrase callback when opening a store.
  - Changed the default salt length used by PBES2 KDF's (PBKDF2 and scrypt)
    from 8 bytes to 16 bytes.
  - Changed the default value of the 'ess_cert_id_alg' configuration
    option which is used to calculate the TSA's public key certificate
    identifier. The default algorithm is updated to be sha256 instead of sha1.
  - Added optimization for SM2 algorithm on aarch64. A new configure option
    'no-sm2-precomp' has been added to disable the precomputed table.
  - Added client side support for QUIC
  - Added secp384r1 implementation using Solinas' reduction to improve
    speed of the NIST P-384 elliptic curve. To enable the implementation
    the build option 'enable-ec_nistp_64_gcc_128' must be used.
  - Improved RFC7468 compliance of the asn1parse command.
  - Added SHA256/192 algorithm support.
  - Added support for securely getting root CA certificate update in CMP.
  - Improved contention on global write locks by using more read locks where
    appropriate.
  - Improved performance of OSSL_PARAM lookups in performance critical
    provider functions.
  - Added the SSL_get0_group_name() function to provide access to the
    name of the group used for the TLS key exchange.
  - Provide a new configure option 'no-http' that can be used to disable the
    HTTP support. Provide new configure options 'no-apps' and 'no-docs' to
    disable building the openssl command line application and the documentation.
  - Provide a new configure option 'no-ecx' that can be used to disable the
    X25519, X448, and EdDSA support.
  - When multiple OSSL_KDF_PARAM_INFO parameters are passed to
    the EVP_KDF_CTX_set_params() function they are now concatenated not just
    for the HKDF algorithm but also for SSKDF and X9.63 KDF algorithms.
  - Added OSSL_FUNC_keymgmt_im/export_types_ex() provider functions that get
    the provider context as a parameter.
  - TLS round-trip time calculation was added by a Brigham Young University
    Capstone team partnering with Sandia National Laboratories. A new function
    in ssl_lib titled SSL_get_handshake_rtt will calculate and retrieve this
    value.
  - Added the "-quic" option to s_client to enable connectivity to QUIC servers.
    QUIC requires the use of ALPN, so this must be specified via the "-alpn"
    option. Use of the "advanced" s_client command command via the "-adv" option
    is recommended.
  - Added an "advanced" command mode to s_client. Use this with the "-adv" option.
  - Add Raw Public Key (RFC7250) support.
  - Added support for modular exponentiation and CRT offloading for the
    S390x architecture.
  - Added further assembler code for the RISC-V architecture.
  - Added EC_GROUP_to_params() which creates an OSSL_PARAM array
    from a given EC_GROUP.
  - Improved support for non-default library contexts and property queries
    when parsing PKCS#12 files.
  - Implemented support for all five instances of EdDSA from RFC8032:
    Ed25519, Ed25519ctx, Ed25519ph, Ed448, and Ed448ph.
    The streaming is not yet supported for the HashEdDSA variants
    (Ed25519ph and Ed448ph).
  - Added SM4 optimization for ARM processors using ASIMD and AES HW instructions.
  - Implemented SM4-XTS support.
  - Added platform-agnostic OSSL_sleep() function.
  - Implemented deterministic ECDSA signatures (RFC6979) support.
  - Implemented AES-GCM-SIV (RFC8452) support.
  - Added support for pluggable (provider-based) TLS signature algorithms.
    This enables TLS 1.3 authentication operations with algorithms embedded
    in providers not included by default in OpenSSL. In combination with
    the already available pluggable KEM and X.509 support, this enables
    for example suitable providers to deliver post-quantum or quantum-safe
    cryptography to OpenSSL users.
  - Added support for pluggable (provider-based) CMS signature algorithms.
    This enables CMS sign and verify operations with algorithms embedded
    in providers not included by default in OpenSSL.
  - Implemented HPKE DHKEM support in providers used by HPKE (RFC9180) API.
  - Add support for certificate compression (RFC8879), including
    library support for Brotli and Zstandard compression.
  - Add the ability to add custom attributes to PKCS12 files. Add a new API
    PKCS12_create_ex2, identical to the existing PKCS12_create_ex but allows
    for a user specified callback and optional argument.
    Added a new PKCS12_SAFEBAG_set0_attr, which allows for a new attr to be
    added to the existing STACK_OF attrs.
  - Major refactor of the libssl record layer.
  - Add a mac salt length option for the pkcs12 command.
  - Add more SRTP protection profiles from RFC8723 and RFC8269.
  - Extended Kernel TLS (KTLS) to support TLS 1.3 receive offload.
  - Add support for TCP Fast Open (RFC7413) to macOS, Linux, and FreeBSD where
    supported and enabled.
  - Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489)
    to the list of ciphersuites providing Perfect Forward Secrecy as
    required by SECLEVEL &gt;= 3.
  - Add new SSL APIs to aid in efficiently implementing TLS/SSL fingerprinting.
    The SSL_CTRL_GET_IANA_GROUPS control code, exposed as the
    SSL_get0_iana_groups() function-like macro, retrieves the list of
    supported groups sent by the peer.
  - Fixed PEM_write_bio_PKCS8PrivateKey() and PEM_write_bio_PKCS8PrivateKey_nid()
    to make it possible to use empty passphrase strings.
  - The PKCS12_parse() function now supports MAC-less PKCS12 files.
  - Added ASYNC_set_mem_functions() and ASYNC_get_mem_functions() calls to be able
    to change functions used for allocating the memory of asynchronous call stack.
  - Added support for signed BIGNUMs in the OSSL_PARAM APIs.
  - A failure exit code is returned when using the openssl x509 command to check
    certificate attributes and the checks fail.
  - The default SSL/TLS security level has been changed from 1 to 2. RSA,
    DSA and DH keys of 1024 bits and above and less than 2048 bits and ECC keys
    of 160 bits and above and less than 224 bits were previously accepted by
    default but are now no longer allowed. By default TLS compression was
    already disabled in previous OpenSSL versions. At security level 2 it cannot
    be enabled.
  - The SSL_CTX_set_cipher_list family functions now accept ciphers using their
    IANA standard names.
  - The PVK key derivation function has been moved from b2i_PVK_bio_ex() into
    the legacy crypto provider as an EVP_KDF. Applications requiring this KDF
    will need to load the legacy crypto provider.
  - CCM8 cipher suites in TLS have been downgraded to security level zero
    because they use a short authentication tag which lowers their strength.
  - Subject or issuer names in X.509 objects are now displayed as UTF-8 strings
    by default. Also spaces surrounding '=' in DN output are removed.
  - Add X.509 certificate codeSigning purpose and related checks on key usage and
    extended key usage of the leaf certificate according to the CA/Browser Forum.
  - The 'x509', 'ca', and 'req' apps now produce X.509 v3 certificates.
    The '-x509v1' option of 'req' prefers generation of X.509 v1 certificates.
    'X509_sign()' and 'X509_sign_ctx()' make sure that the certificate has
    X.509 version 3 if the certificate information includes X.509 extensions.
  - Fix and extend certificate handling and the apps 'x509', 'verify' etc.
    such as adding a trace facility for debugging certificate chain building.
  - Various fixes and extensions to the CMP+CRMF implementation and the 'cmp' app
    in particular supporting requests for central key generation, generalized
    polling, and various types of genm/genp exchanges defined in CMP Updates.
  - Fixes and extensions to the HTTP client and to the HTTP server in 'apps/'
    like correcting the TLS and proxy support and adding tracing for debugging.
  - Extended the CMS API for handling 'CMS_SignedData' and 'CMS_EnvelopedData'.
  - 'CMS_add0_cert()' and 'CMS_add1_cert()' no longer throw an error if
    a certificate to be added is already present. 'CMS_sign_ex()' and
    'CMS_sign()' now ignore any duplicate certificates in their 'certs' argument
    and no longer throw an error for them.
  - Added BIO_s_dgram_pair() and BIO_s_dgram_mem() that provide memory-based
    BIOs with datagram semantics and support for BIO_sendmmsg() and BIO_recvmmsg()
    calls. They can be used as the transport BIOs for QUIC.
  - Add new BIO_sendmmsg() and BIO_recvmmsg() BIO methods which allow
    sending and receiving multiple messages in a single call. An implementation
    is provided for BIO_dgram. For further details, see BIO_sendmmsg(3).
  - Support for loading root certificates from the Windows certificate store
    has been added.
  - Enable KTLS with the TLS 1.3 CCM mode ciphersuites. Note that some linux
    kernel versions that support KTLS have a known bug in CCM processing. That
    has been fixed in stable releases starting from 5.4.164, 5.10.84, 5.15.7,
    and all releases since 5.16. KTLS with CCM ciphersuites should be only used
    on these releases.
  - Added '-ktls' option to 's_server' and 's_client' commands to enable the
    KTLS support.
  - Zerocopy KTLS sendfile() support on Linux.
  - The OBJ_ calls are now thread safe using a global lock.
  - New parameter '-digest' for openssl cms command allowing signing
    pre-computed digests and new CMS API functions supporting that
    functionality.
  - OPENSSL_malloc() and other allocation functions now raise errors on
    allocation failures. The callers do not need to explicitly raise errors
    unless they want to for tracing purposes.
  - Added support for Brainpool curves in TLS-1.3.
  - Support for Argon2d, Argon2i, Argon2id KDFs has been added along with
    a basic thread pool implementation for select platforms.</changelog>
  <changelog author="pmonreal@suse.com" date="1729857601">- Update to 3.2.1:
  * Changes between 3.2.0 and 3.2.1:
  - A file in PKCS12 format can contain certificates and keys and may come from
    an untrusted source. The PKCS12 specification allows certain fields to be
    NULL, but OpenSSL did not correctly check for this case. [CVE-2024-0727]
  - When function EVP_PKEY_public_check() is called on RSA public keys,
    a computation is done to confirm that the RSA modulus, n, is composite.
    For valid RSA keys, n is a product of two or more large primes and this
    computation completes quickly. However, if n is an overly large prime,
    then this computation would take a long time. [CVE-2023-6237]
  - Restore the encoding of SM2 PrivateKeyInfo and SubjectPublicKeyInfo to
    have the contained AlgorithmIdentifier.algorithm set to id-ecPublicKey
    rather than SM2.
  - The POLY1305 MAC (message authentication code) implementation in OpenSSL
    for PowerPC CPUs saves the contents of vector registers in different
    order than they are restored. [CVE-2023-6129]
  - Disable building QUIC server utility when OpenSSL is configured with 'no-apps'.
  * The openssl-crypto-policies-support.patch has been merged into
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Rename openssl-Disable-default-provider-for-test-suite.patch and rebase to
    openssl-TESTS-Disable-default-provider-crypto-policies.patch
  * Patches removed in the update:
  - openssl-Add_support_for_Windows_CA_certificate_store.patch
  - openssl-ec-56-bit-Limb-Solinas-Strategy-for-secp384r1.patch
  - openssl-ec-Use-static-linkage-on-nistp521-felem_-square-mul-.patch
  - openssl-ec-powerpc64le-Add-asm-implementation-of-felem_-squa.patch
  - openssl-ecc-Remove-extraneous-parentheses-in-secp384r1.patch
  - openssl-powerpc-ecc-Fix-stack-allocation-secp384r1-asm.patch
  - openssl-CVE-2024-41996.patch
  - openssl-CVE-2023-50782.patch
  - openssl-CVE-2024-9143.patch
  * Patches rebased:
  - openssl-3-use-include-directive.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-DEFAULT_SUSE_cipher.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Force-FIPS.patch
  - openssl-load-legacy-provider.patch
  - openssl-no-html-docs.patch
  - openssl-pkgconfig.patch
  - openssl-ppc64-config.patch
  - openssl-truststore.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116800">- Remove the hardcoded DEFAULT_SUSE cipherlist selection.
  * Remove openssl-DEFAULT_SUSE_cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116801">- Update to 3.2.3:
  * Changes between 3.2.2 and 3.2.3:
  - Fixed possible denial of service in X.509 name checks. [CVE-2024-6119]
  - Fixed possible buffer overread in SSL_select_next_proto(). [CVE-2024-5535]
  * Changes between 3.2.1 and 3.2.2:
  - Fixed potential use after free after SSL_free_buffers() is called. [CVE-2024-4741]
  - Fixed an issue where checking excessively long DSA keys or parameters may
    be very slow. [CVE-2024-4603]
  - Improved EC/DSA nonce generation routines to avoid bias and timing
    side channel leaks.
  - Fixed an issue where some non-default TLS server configurations can cause
    unbounded memory growth when processing TLSv1.3 sessions. [CVE-2024-2511]
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded. This can be used on platforms
    where using atexit() from shared libraries causes crashes on exit.
  - Fixed bug where SSL_export_keying_material() could not be used with QUIC
    connections.
  * Add openssl-skip-quic-pairwise.patch to adapt the pairwise tests.
  * Merge openssl-FIPS-release_num_in_version_string.patch into
    openssl-FIPS-services-minimize.patch
  * Rebase patches:
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Remove-EC-curves.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-3-use-include-directive.patch
  * Remove not needed patches:
  - openssl-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  - openssl-3-FIPS-PCT_rsa_keygen.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730462400">- Support MSA 12 SHA3 on s390x [jsc#PED-10280]
  * Add openssl-3-add_EVP_DigestSqueeze_api.patch
  * Add openssl-3-support-multiple-sha3_squeeze_s390x.patch
  * Add openssl-3-add-xof-state-handling-s3_absorb.patch
  * Add openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  * Add openssl-3-fix-state-handling-sha3_final_s390x.patch
  * Add openssl-3-fix-state-handling-shake_final_s390x.patch
  * Add openssl-3-fix-state-handling-keccak_final_s390x.patch
  * Add openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  * Add openssl-3-add-defines-CPACF-funcs.patch
  * Add openssl-3-add-hw-acceleration-hmac.patch
  * Add openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  * Add openssl-3-fix-s390x_sha3_absorb.patch
  * Add openssl-3-fix-s390x_shake_squeeze.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808000">- Support MSA 10 XTS on s390x [jsc#PED-10273]
  * s390x: Add hardware acceleration for full AES-XTS
  * Add openssl-3-hw-acceleration-aes-xts-s390x.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808001">- Support MSA 11 HMAC on s390x [jsc#PED-10274]
  * Add openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  * Add openssl-3-fix-hmac-digest-detection-s390x.patch
  * Add openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730980800">- Add missing fixes for SHA3_squeeze and quic_multistream_test on
  pcc64 arch. [jsc#PED-10280]
  * Added openssl-3-fix-sha3-squeeze-ppc64.patch
  * Added openssl-3-fix-quic_multistream_test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1731412800">- Do not use HASHBANGPERL to avoid introducing a dependency on the
  perl-base package. [bsc#1233235]</changelog>
  <changelog author="pmonreal@suse.com" date="1734436800">- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
  - openssl-3-use-include-directive.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1738238400">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Security fix: [bsc#1236599, CVE-2024-12797]
  * RFC7250 handshakes with unauthenticated servers don't abort as
    expected.
  * Add openssl-CVE-2024-12797.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1746014400">- Security fix: [bsc#1240366, CVE-2025-27587]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
  <changelog author="mls@suse.de" date="1751371200">- Backport mdless cms signing support [jsc#PED-12895]
  * Add openssl-3-support-mdless-cms.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- FIPS: Fix EMS in crypto-policies FIPS:NO-ENFORCE-EMS
  * [bsc#1230959, bsc#1232326, bsc#1231748, bsc#1246428]
  * Add patch openssl-FIPS-fix-EMS-support.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1753876800">- Increase limit for CRL download [bsc#1247148, bsc#1247144]
  * Add openssl-3-large-CRLs.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1759233600">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl3-CVE-2025-9230.patch</changelog>
</package>
<package pkgid="bdfcf18131cb70149c948dd58b13aa3e23f4249c0f10adf85020f42141af0d24" name="openssl-3" arch="src">
  <version epoch="0" ver="3.2.3" rel="150700.5.24.1"/>
  <changelog author="pmonreal@suse.com" date="1729512000">- Update to 3.1.7:
  * Major changes between OpenSSL 3.1.6 and OpenSSL 3.1.7 [3 Sep 2024]
  - Fixed possible denial of service in X.509 name checks (CVE-2024-6119)
  - Fixed possible buffer overread in SSL_select_next_proto()
    (CVE-2024-5535)
  * Major changes between OpenSSL 3.1.5 and OpenSSL 3.1.6 [4 Jun 2024]
  - Fixed potential use after free after SSL_free_buffers() is
    called (CVE-2024-4741)
  - Fixed an issue where checking excessively long DSA keys or
    parameters may be very slow (CVE-2024-4603)
  - Fixed unbounded memory growth with session handling in TLSv1.3
    (CVE-2024-2511)
  * Major changes between OpenSSL 3.1.4 and OpenSSL 3.1.5 [30 Jan 2024]
  - Fixed PKCS12 Decoding crashes (CVE-2024-0727)
  - Fixed Excessive time spent checking invalid RSA public keys
    [CVE-2023-6237)
  - Fixed POLY1305 MAC implementation corrupting vector registers
    on PowerPC CPUs which support PowerISA 2.07 (CVE-2023-6129)
  - Fix excessive time spent in DH check / generation with large
    Q parameter value (CVE-2023-5678)
  * Update openssl.keyring with BA5473A2B0587B07FB27CF2D216094DFD0CB81EF
  * Rebase patches:
  - openssl-Force-FIPS.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-CVE-2023-50782.patch
  * Remove patches fixed in the update:
  - openssl-Improve-performance-for-6x-unrolling-with-vpermxor-i.patch
  - openssl-CVE-2024-6119.patch openssl-CVE-2024-5535.patch
  - openssl-CVE-2024-4741.patch openssl-CVE-2024-4603.patch
  - openssl-CVE-2024-2511.patch openssl-CVE-2024-0727.patch
  - openssl-CVE-2023-6237.patch openssl-CVE-2023-6129.patch
  - openssl-CVE-2023-5678.patch openssl-3-CVE-2024-41996.patch
  - openssl-Enable-BTI-feature-for-md5-on-aarch64.patch
  - openssl-Fix-EVP_PKEY_CTX_add1_hkdf_info-behavior.patch
  - openssl-Handle-empty-param-in-EVP_PKEY_CTX_add1_hkdf_info.patch
  - reproducible.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729857600">- Update to 3.2.0:
  * Changes between 3.1.x and 3.2.0:
  - Fix excessive time spent in DH check/ generation with large Q parameter
    value. [CVE-2023-5678]
  - The BLAKE2b hash algorithm supports a configurable output length
    by setting the "size" parameter.
  - Added a function to delete objects from store by URI - OSSL_STORE_delete()
    and the corresponding provider-storemgmt API function OSSL_FUNC_store_delete().
  - Added OSSL_FUNC_store_open_ex() provider-storemgmt API function to pass
    a passphrase callback when opening a store.
  - Changed the default salt length used by PBES2 KDF's (PBKDF2 and scrypt)
    from 8 bytes to 16 bytes.
  - Changed the default value of the 'ess_cert_id_alg' configuration
    option which is used to calculate the TSA's public key certificate
    identifier. The default algorithm is updated to be sha256 instead of sha1.
  - Added optimization for SM2 algorithm on aarch64. A new configure option
    'no-sm2-precomp' has been added to disable the precomputed table.
  - Added client side support for QUIC
  - Added secp384r1 implementation using Solinas' reduction to improve
    speed of the NIST P-384 elliptic curve. To enable the implementation
    the build option 'enable-ec_nistp_64_gcc_128' must be used.
  - Improved RFC7468 compliance of the asn1parse command.
  - Added SHA256/192 algorithm support.
  - Added support for securely getting root CA certificate update in CMP.
  - Improved contention on global write locks by using more read locks where
    appropriate.
  - Improved performance of OSSL_PARAM lookups in performance critical
    provider functions.
  - Added the SSL_get0_group_name() function to provide access to the
    name of the group used for the TLS key exchange.
  - Provide a new configure option 'no-http' that can be used to disable the
    HTTP support. Provide new configure options 'no-apps' and 'no-docs' to
    disable building the openssl command line application and the documentation.
  - Provide a new configure option 'no-ecx' that can be used to disable the
    X25519, X448, and EdDSA support.
  - When multiple OSSL_KDF_PARAM_INFO parameters are passed to
    the EVP_KDF_CTX_set_params() function they are now concatenated not just
    for the HKDF algorithm but also for SSKDF and X9.63 KDF algorithms.
  - Added OSSL_FUNC_keymgmt_im/export_types_ex() provider functions that get
    the provider context as a parameter.
  - TLS round-trip time calculation was added by a Brigham Young University
    Capstone team partnering with Sandia National Laboratories. A new function
    in ssl_lib titled SSL_get_handshake_rtt will calculate and retrieve this
    value.
  - Added the "-quic" option to s_client to enable connectivity to QUIC servers.
    QUIC requires the use of ALPN, so this must be specified via the "-alpn"
    option. Use of the "advanced" s_client command command via the "-adv" option
    is recommended.
  - Added an "advanced" command mode to s_client. Use this with the "-adv" option.
  - Add Raw Public Key (RFC7250) support.
  - Added support for modular exponentiation and CRT offloading for the
    S390x architecture.
  - Added further assembler code for the RISC-V architecture.
  - Added EC_GROUP_to_params() which creates an OSSL_PARAM array
    from a given EC_GROUP.
  - Improved support for non-default library contexts and property queries
    when parsing PKCS#12 files.
  - Implemented support for all five instances of EdDSA from RFC8032:
    Ed25519, Ed25519ctx, Ed25519ph, Ed448, and Ed448ph.
    The streaming is not yet supported for the HashEdDSA variants
    (Ed25519ph and Ed448ph).
  - Added SM4 optimization for ARM processors using ASIMD and AES HW instructions.
  - Implemented SM4-XTS support.
  - Added platform-agnostic OSSL_sleep() function.
  - Implemented deterministic ECDSA signatures (RFC6979) support.
  - Implemented AES-GCM-SIV (RFC8452) support.
  - Added support for pluggable (provider-based) TLS signature algorithms.
    This enables TLS 1.3 authentication operations with algorithms embedded
    in providers not included by default in OpenSSL. In combination with
    the already available pluggable KEM and X.509 support, this enables
    for example suitable providers to deliver post-quantum or quantum-safe
    cryptography to OpenSSL users.
  - Added support for pluggable (provider-based) CMS signature algorithms.
    This enables CMS sign and verify operations with algorithms embedded
    in providers not included by default in OpenSSL.
  - Implemented HPKE DHKEM support in providers used by HPKE (RFC9180) API.
  - Add support for certificate compression (RFC8879), including
    library support for Brotli and Zstandard compression.
  - Add the ability to add custom attributes to PKCS12 files. Add a new API
    PKCS12_create_ex2, identical to the existing PKCS12_create_ex but allows
    for a user specified callback and optional argument.
    Added a new PKCS12_SAFEBAG_set0_attr, which allows for a new attr to be
    added to the existing STACK_OF attrs.
  - Major refactor of the libssl record layer.
  - Add a mac salt length option for the pkcs12 command.
  - Add more SRTP protection profiles from RFC8723 and RFC8269.
  - Extended Kernel TLS (KTLS) to support TLS 1.3 receive offload.
  - Add support for TCP Fast Open (RFC7413) to macOS, Linux, and FreeBSD where
    supported and enabled.
  - Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489)
    to the list of ciphersuites providing Perfect Forward Secrecy as
    required by SECLEVEL &gt;= 3.
  - Add new SSL APIs to aid in efficiently implementing TLS/SSL fingerprinting.
    The SSL_CTRL_GET_IANA_GROUPS control code, exposed as the
    SSL_get0_iana_groups() function-like macro, retrieves the list of
    supported groups sent by the peer.
  - Fixed PEM_write_bio_PKCS8PrivateKey() and PEM_write_bio_PKCS8PrivateKey_nid()
    to make it possible to use empty passphrase strings.
  - The PKCS12_parse() function now supports MAC-less PKCS12 files.
  - Added ASYNC_set_mem_functions() and ASYNC_get_mem_functions() calls to be able
    to change functions used for allocating the memory of asynchronous call stack.
  - Added support for signed BIGNUMs in the OSSL_PARAM APIs.
  - A failure exit code is returned when using the openssl x509 command to check
    certificate attributes and the checks fail.
  - The default SSL/TLS security level has been changed from 1 to 2. RSA,
    DSA and DH keys of 1024 bits and above and less than 2048 bits and ECC keys
    of 160 bits and above and less than 224 bits were previously accepted by
    default but are now no longer allowed. By default TLS compression was
    already disabled in previous OpenSSL versions. At security level 2 it cannot
    be enabled.
  - The SSL_CTX_set_cipher_list family functions now accept ciphers using their
    IANA standard names.
  - The PVK key derivation function has been moved from b2i_PVK_bio_ex() into
    the legacy crypto provider as an EVP_KDF. Applications requiring this KDF
    will need to load the legacy crypto provider.
  - CCM8 cipher suites in TLS have been downgraded to security level zero
    because they use a short authentication tag which lowers their strength.
  - Subject or issuer names in X.509 objects are now displayed as UTF-8 strings
    by default. Also spaces surrounding '=' in DN output are removed.
  - Add X.509 certificate codeSigning purpose and related checks on key usage and
    extended key usage of the leaf certificate according to the CA/Browser Forum.
  - The 'x509', 'ca', and 'req' apps now produce X.509 v3 certificates.
    The '-x509v1' option of 'req' prefers generation of X.509 v1 certificates.
    'X509_sign()' and 'X509_sign_ctx()' make sure that the certificate has
    X.509 version 3 if the certificate information includes X.509 extensions.
  - Fix and extend certificate handling and the apps 'x509', 'verify' etc.
    such as adding a trace facility for debugging certificate chain building.
  - Various fixes and extensions to the CMP+CRMF implementation and the 'cmp' app
    in particular supporting requests for central key generation, generalized
    polling, and various types of genm/genp exchanges defined in CMP Updates.
  - Fixes and extensions to the HTTP client and to the HTTP server in 'apps/'
    like correcting the TLS and proxy support and adding tracing for debugging.
  - Extended the CMS API for handling 'CMS_SignedData' and 'CMS_EnvelopedData'.
  - 'CMS_add0_cert()' and 'CMS_add1_cert()' no longer throw an error if
    a certificate to be added is already present. 'CMS_sign_ex()' and
    'CMS_sign()' now ignore any duplicate certificates in their 'certs' argument
    and no longer throw an error for them.
  - Added BIO_s_dgram_pair() and BIO_s_dgram_mem() that provide memory-based
    BIOs with datagram semantics and support for BIO_sendmmsg() and BIO_recvmmsg()
    calls. They can be used as the transport BIOs for QUIC.
  - Add new BIO_sendmmsg() and BIO_recvmmsg() BIO methods which allow
    sending and receiving multiple messages in a single call. An implementation
    is provided for BIO_dgram. For further details, see BIO_sendmmsg(3).
  - Support for loading root certificates from the Windows certificate store
    has been added.
  - Enable KTLS with the TLS 1.3 CCM mode ciphersuites. Note that some linux
    kernel versions that support KTLS have a known bug in CCM processing. That
    has been fixed in stable releases starting from 5.4.164, 5.10.84, 5.15.7,
    and all releases since 5.16. KTLS with CCM ciphersuites should be only used
    on these releases.
  - Added '-ktls' option to 's_server' and 's_client' commands to enable the
    KTLS support.
  - Zerocopy KTLS sendfile() support on Linux.
  - The OBJ_ calls are now thread safe using a global lock.
  - New parameter '-digest' for openssl cms command allowing signing
    pre-computed digests and new CMS API functions supporting that
    functionality.
  - OPENSSL_malloc() and other allocation functions now raise errors on
    allocation failures. The callers do not need to explicitly raise errors
    unless they want to for tracing purposes.
  - Added support for Brainpool curves in TLS-1.3.
  - Support for Argon2d, Argon2i, Argon2id KDFs has been added along with
    a basic thread pool implementation for select platforms.</changelog>
  <changelog author="pmonreal@suse.com" date="1729857601">- Update to 3.2.1:
  * Changes between 3.2.0 and 3.2.1:
  - A file in PKCS12 format can contain certificates and keys and may come from
    an untrusted source. The PKCS12 specification allows certain fields to be
    NULL, but OpenSSL did not correctly check for this case. [CVE-2024-0727]
  - When function EVP_PKEY_public_check() is called on RSA public keys,
    a computation is done to confirm that the RSA modulus, n, is composite.
    For valid RSA keys, n is a product of two or more large primes and this
    computation completes quickly. However, if n is an overly large prime,
    then this computation would take a long time. [CVE-2023-6237]
  - Restore the encoding of SM2 PrivateKeyInfo and SubjectPublicKeyInfo to
    have the contained AlgorithmIdentifier.algorithm set to id-ecPublicKey
    rather than SM2.
  - The POLY1305 MAC (message authentication code) implementation in OpenSSL
    for PowerPC CPUs saves the contents of vector registers in different
    order than they are restored. [CVE-2023-6129]
  - Disable building QUIC server utility when OpenSSL is configured with 'no-apps'.
  * The openssl-crypto-policies-support.patch has been merged into
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Rename openssl-Disable-default-provider-for-test-suite.patch and rebase to
    openssl-TESTS-Disable-default-provider-crypto-policies.patch
  * Patches removed in the update:
  - openssl-Add_support_for_Windows_CA_certificate_store.patch
  - openssl-ec-56-bit-Limb-Solinas-Strategy-for-secp384r1.patch
  - openssl-ec-Use-static-linkage-on-nistp521-felem_-square-mul-.patch
  - openssl-ec-powerpc64le-Add-asm-implementation-of-felem_-squa.patch
  - openssl-ecc-Remove-extraneous-parentheses-in-secp384r1.patch
  - openssl-powerpc-ecc-Fix-stack-allocation-secp384r1-asm.patch
  - openssl-CVE-2024-41996.patch
  - openssl-CVE-2023-50782.patch
  - openssl-CVE-2024-9143.patch
  * Patches rebased:
  - openssl-3-use-include-directive.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-DEFAULT_SUSE_cipher.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Force-FIPS.patch
  - openssl-load-legacy-provider.patch
  - openssl-no-html-docs.patch
  - openssl-pkgconfig.patch
  - openssl-ppc64-config.patch
  - openssl-truststore.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116800">- Remove the hardcoded DEFAULT_SUSE cipherlist selection.
  * Remove openssl-DEFAULT_SUSE_cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116801">- Update to 3.2.3:
  * Changes between 3.2.2 and 3.2.3:
  - Fixed possible denial of service in X.509 name checks. [CVE-2024-6119]
  - Fixed possible buffer overread in SSL_select_next_proto(). [CVE-2024-5535]
  * Changes between 3.2.1 and 3.2.2:
  - Fixed potential use after free after SSL_free_buffers() is called. [CVE-2024-4741]
  - Fixed an issue where checking excessively long DSA keys or parameters may
    be very slow. [CVE-2024-4603]
  - Improved EC/DSA nonce generation routines to avoid bias and timing
    side channel leaks.
  - Fixed an issue where some non-default TLS server configurations can cause
    unbounded memory growth when processing TLSv1.3 sessions. [CVE-2024-2511]
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded. This can be used on platforms
    where using atexit() from shared libraries causes crashes on exit.
  - Fixed bug where SSL_export_keying_material() could not be used with QUIC
    connections.
  * Add openssl-skip-quic-pairwise.patch to adapt the pairwise tests.
  * Merge openssl-FIPS-release_num_in_version_string.patch into
    openssl-FIPS-services-minimize.patch
  * Rebase patches:
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Remove-EC-curves.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-3-use-include-directive.patch
  * Remove not needed patches:
  - openssl-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  - openssl-3-FIPS-PCT_rsa_keygen.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730462400">- Support MSA 12 SHA3 on s390x [jsc#PED-10280]
  * Add openssl-3-add_EVP_DigestSqueeze_api.patch
  * Add openssl-3-support-multiple-sha3_squeeze_s390x.patch
  * Add openssl-3-add-xof-state-handling-s3_absorb.patch
  * Add openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  * Add openssl-3-fix-state-handling-sha3_final_s390x.patch
  * Add openssl-3-fix-state-handling-shake_final_s390x.patch
  * Add openssl-3-fix-state-handling-keccak_final_s390x.patch
  * Add openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  * Add openssl-3-add-defines-CPACF-funcs.patch
  * Add openssl-3-add-hw-acceleration-hmac.patch
  * Add openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  * Add openssl-3-fix-s390x_sha3_absorb.patch
  * Add openssl-3-fix-s390x_shake_squeeze.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808000">- Support MSA 10 XTS on s390x [jsc#PED-10273]
  * s390x: Add hardware acceleration for full AES-XTS
  * Add openssl-3-hw-acceleration-aes-xts-s390x.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808001">- Support MSA 11 HMAC on s390x [jsc#PED-10274]
  * Add openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  * Add openssl-3-fix-hmac-digest-detection-s390x.patch
  * Add openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730980800">- Add missing fixes for SHA3_squeeze and quic_multistream_test on
  pcc64 arch. [jsc#PED-10280]
  * Added openssl-3-fix-sha3-squeeze-ppc64.patch
  * Added openssl-3-fix-quic_multistream_test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1731412800">- Do not use HASHBANGPERL to avoid introducing a dependency on the
  perl-base package. [bsc#1233235]</changelog>
  <changelog author="pmonreal@suse.com" date="1734436800">- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
  - openssl-3-use-include-directive.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1738238400">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Security fix: [bsc#1236599, CVE-2024-12797]
  * RFC7250 handshakes with unauthenticated servers don't abort as
    expected.
  * Add openssl-CVE-2024-12797.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1746014400">- Security fix: [bsc#1240366, CVE-2025-27587]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
  <changelog author="mls@suse.de" date="1751371200">- Backport mdless cms signing support [jsc#PED-12895]
  * Add openssl-3-support-mdless-cms.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- FIPS: Fix EMS in crypto-policies FIPS:NO-ENFORCE-EMS
  * [bsc#1230959, bsc#1232326, bsc#1231748, bsc#1246428]
  * Add patch openssl-FIPS-fix-EMS-support.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1753876800">- Increase limit for CRL download [bsc#1247148, bsc#1247144]
  * Add openssl-3-large-CRLs.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1759233600">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl3-CVE-2025-9230.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1768824000">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795]
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * Stack buffer overflow in CMS AuthEnvelopedData parsing
  - openssl-CVE-2025-15467.patch [bsc#1256830, CVE-2025-15467]
  - openssl-CVE-2025-15467-comments.patch
  - openssl-CVE-2025-15467-test.patch</changelog>
</package>
<package pkgid="2955197afa75d06e8b793302819d2e85ff56e3dd21e30284b5cf5dc11745efc5" name="openssl-3" arch="x86_64">
  <version epoch="0" ver="3.2.3" rel="150700.5.24.1"/>
  <changelog author="pmonreal@suse.com" date="1729512000">- Update to 3.1.7:
  * Major changes between OpenSSL 3.1.6 and OpenSSL 3.1.7 [3 Sep 2024]
  - Fixed possible denial of service in X.509 name checks (CVE-2024-6119)
  - Fixed possible buffer overread in SSL_select_next_proto()
    (CVE-2024-5535)
  * Major changes between OpenSSL 3.1.5 and OpenSSL 3.1.6 [4 Jun 2024]
  - Fixed potential use after free after SSL_free_buffers() is
    called (CVE-2024-4741)
  - Fixed an issue where checking excessively long DSA keys or
    parameters may be very slow (CVE-2024-4603)
  - Fixed unbounded memory growth with session handling in TLSv1.3
    (CVE-2024-2511)
  * Major changes between OpenSSL 3.1.4 and OpenSSL 3.1.5 [30 Jan 2024]
  - Fixed PKCS12 Decoding crashes (CVE-2024-0727)
  - Fixed Excessive time spent checking invalid RSA public keys
    [CVE-2023-6237)
  - Fixed POLY1305 MAC implementation corrupting vector registers
    on PowerPC CPUs which support PowerISA 2.07 (CVE-2023-6129)
  - Fix excessive time spent in DH check / generation with large
    Q parameter value (CVE-2023-5678)
  * Update openssl.keyring with BA5473A2B0587B07FB27CF2D216094DFD0CB81EF
  * Rebase patches:
  - openssl-Force-FIPS.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-CVE-2023-50782.patch
  * Remove patches fixed in the update:
  - openssl-Improve-performance-for-6x-unrolling-with-vpermxor-i.patch
  - openssl-CVE-2024-6119.patch openssl-CVE-2024-5535.patch
  - openssl-CVE-2024-4741.patch openssl-CVE-2024-4603.patch
  - openssl-CVE-2024-2511.patch openssl-CVE-2024-0727.patch
  - openssl-CVE-2023-6237.patch openssl-CVE-2023-6129.patch
  - openssl-CVE-2023-5678.patch openssl-3-CVE-2024-41996.patch
  - openssl-Enable-BTI-feature-for-md5-on-aarch64.patch
  - openssl-Fix-EVP_PKEY_CTX_add1_hkdf_info-behavior.patch
  - openssl-Handle-empty-param-in-EVP_PKEY_CTX_add1_hkdf_info.patch
  - reproducible.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729857600">- Update to 3.2.0:
  * Changes between 3.1.x and 3.2.0:
  - Fix excessive time spent in DH check/ generation with large Q parameter
    value. [CVE-2023-5678]
  - The BLAKE2b hash algorithm supports a configurable output length
    by setting the "size" parameter.
  - Added a function to delete objects from store by URI - OSSL_STORE_delete()
    and the corresponding provider-storemgmt API function OSSL_FUNC_store_delete().
  - Added OSSL_FUNC_store_open_ex() provider-storemgmt API function to pass
    a passphrase callback when opening a store.
  - Changed the default salt length used by PBES2 KDF's (PBKDF2 and scrypt)
    from 8 bytes to 16 bytes.
  - Changed the default value of the 'ess_cert_id_alg' configuration
    option which is used to calculate the TSA's public key certificate
    identifier. The default algorithm is updated to be sha256 instead of sha1.
  - Added optimization for SM2 algorithm on aarch64. A new configure option
    'no-sm2-precomp' has been added to disable the precomputed table.
  - Added client side support for QUIC
  - Added secp384r1 implementation using Solinas' reduction to improve
    speed of the NIST P-384 elliptic curve. To enable the implementation
    the build option 'enable-ec_nistp_64_gcc_128' must be used.
  - Improved RFC7468 compliance of the asn1parse command.
  - Added SHA256/192 algorithm support.
  - Added support for securely getting root CA certificate update in CMP.
  - Improved contention on global write locks by using more read locks where
    appropriate.
  - Improved performance of OSSL_PARAM lookups in performance critical
    provider functions.
  - Added the SSL_get0_group_name() function to provide access to the
    name of the group used for the TLS key exchange.
  - Provide a new configure option 'no-http' that can be used to disable the
    HTTP support. Provide new configure options 'no-apps' and 'no-docs' to
    disable building the openssl command line application and the documentation.
  - Provide a new configure option 'no-ecx' that can be used to disable the
    X25519, X448, and EdDSA support.
  - When multiple OSSL_KDF_PARAM_INFO parameters are passed to
    the EVP_KDF_CTX_set_params() function they are now concatenated not just
    for the HKDF algorithm but also for SSKDF and X9.63 KDF algorithms.
  - Added OSSL_FUNC_keymgmt_im/export_types_ex() provider functions that get
    the provider context as a parameter.
  - TLS round-trip time calculation was added by a Brigham Young University
    Capstone team partnering with Sandia National Laboratories. A new function
    in ssl_lib titled SSL_get_handshake_rtt will calculate and retrieve this
    value.
  - Added the "-quic" option to s_client to enable connectivity to QUIC servers.
    QUIC requires the use of ALPN, so this must be specified via the "-alpn"
    option. Use of the "advanced" s_client command command via the "-adv" option
    is recommended.
  - Added an "advanced" command mode to s_client. Use this with the "-adv" option.
  - Add Raw Public Key (RFC7250) support.
  - Added support for modular exponentiation and CRT offloading for the
    S390x architecture.
  - Added further assembler code for the RISC-V architecture.
  - Added EC_GROUP_to_params() which creates an OSSL_PARAM array
    from a given EC_GROUP.
  - Improved support for non-default library contexts and property queries
    when parsing PKCS#12 files.
  - Implemented support for all five instances of EdDSA from RFC8032:
    Ed25519, Ed25519ctx, Ed25519ph, Ed448, and Ed448ph.
    The streaming is not yet supported for the HashEdDSA variants
    (Ed25519ph and Ed448ph).
  - Added SM4 optimization for ARM processors using ASIMD and AES HW instructions.
  - Implemented SM4-XTS support.
  - Added platform-agnostic OSSL_sleep() function.
  - Implemented deterministic ECDSA signatures (RFC6979) support.
  - Implemented AES-GCM-SIV (RFC8452) support.
  - Added support for pluggable (provider-based) TLS signature algorithms.
    This enables TLS 1.3 authentication operations with algorithms embedded
    in providers not included by default in OpenSSL. In combination with
    the already available pluggable KEM and X.509 support, this enables
    for example suitable providers to deliver post-quantum or quantum-safe
    cryptography to OpenSSL users.
  - Added support for pluggable (provider-based) CMS signature algorithms.
    This enables CMS sign and verify operations with algorithms embedded
    in providers not included by default in OpenSSL.
  - Implemented HPKE DHKEM support in providers used by HPKE (RFC9180) API.
  - Add support for certificate compression (RFC8879), including
    library support for Brotli and Zstandard compression.
  - Add the ability to add custom attributes to PKCS12 files. Add a new API
    PKCS12_create_ex2, identical to the existing PKCS12_create_ex but allows
    for a user specified callback and optional argument.
    Added a new PKCS12_SAFEBAG_set0_attr, which allows for a new attr to be
    added to the existing STACK_OF attrs.
  - Major refactor of the libssl record layer.
  - Add a mac salt length option for the pkcs12 command.
  - Add more SRTP protection profiles from RFC8723 and RFC8269.
  - Extended Kernel TLS (KTLS) to support TLS 1.3 receive offload.
  - Add support for TCP Fast Open (RFC7413) to macOS, Linux, and FreeBSD where
    supported and enabled.
  - Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489)
    to the list of ciphersuites providing Perfect Forward Secrecy as
    required by SECLEVEL &gt;= 3.
  - Add new SSL APIs to aid in efficiently implementing TLS/SSL fingerprinting.
    The SSL_CTRL_GET_IANA_GROUPS control code, exposed as the
    SSL_get0_iana_groups() function-like macro, retrieves the list of
    supported groups sent by the peer.
  - Fixed PEM_write_bio_PKCS8PrivateKey() and PEM_write_bio_PKCS8PrivateKey_nid()
    to make it possible to use empty passphrase strings.
  - The PKCS12_parse() function now supports MAC-less PKCS12 files.
  - Added ASYNC_set_mem_functions() and ASYNC_get_mem_functions() calls to be able
    to change functions used for allocating the memory of asynchronous call stack.
  - Added support for signed BIGNUMs in the OSSL_PARAM APIs.
  - A failure exit code is returned when using the openssl x509 command to check
    certificate attributes and the checks fail.
  - The default SSL/TLS security level has been changed from 1 to 2. RSA,
    DSA and DH keys of 1024 bits and above and less than 2048 bits and ECC keys
    of 160 bits and above and less than 224 bits were previously accepted by
    default but are now no longer allowed. By default TLS compression was
    already disabled in previous OpenSSL versions. At security level 2 it cannot
    be enabled.
  - The SSL_CTX_set_cipher_list family functions now accept ciphers using their
    IANA standard names.
  - The PVK key derivation function has been moved from b2i_PVK_bio_ex() into
    the legacy crypto provider as an EVP_KDF. Applications requiring this KDF
    will need to load the legacy crypto provider.
  - CCM8 cipher suites in TLS have been downgraded to security level zero
    because they use a short authentication tag which lowers their strength.
  - Subject or issuer names in X.509 objects are now displayed as UTF-8 strings
    by default. Also spaces surrounding '=' in DN output are removed.
  - Add X.509 certificate codeSigning purpose and related checks on key usage and
    extended key usage of the leaf certificate according to the CA/Browser Forum.
  - The 'x509', 'ca', and 'req' apps now produce X.509 v3 certificates.
    The '-x509v1' option of 'req' prefers generation of X.509 v1 certificates.
    'X509_sign()' and 'X509_sign_ctx()' make sure that the certificate has
    X.509 version 3 if the certificate information includes X.509 extensions.
  - Fix and extend certificate handling and the apps 'x509', 'verify' etc.
    such as adding a trace facility for debugging certificate chain building.
  - Various fixes and extensions to the CMP+CRMF implementation and the 'cmp' app
    in particular supporting requests for central key generation, generalized
    polling, and various types of genm/genp exchanges defined in CMP Updates.
  - Fixes and extensions to the HTTP client and to the HTTP server in 'apps/'
    like correcting the TLS and proxy support and adding tracing for debugging.
  - Extended the CMS API for handling 'CMS_SignedData' and 'CMS_EnvelopedData'.
  - 'CMS_add0_cert()' and 'CMS_add1_cert()' no longer throw an error if
    a certificate to be added is already present. 'CMS_sign_ex()' and
    'CMS_sign()' now ignore any duplicate certificates in their 'certs' argument
    and no longer throw an error for them.
  - Added BIO_s_dgram_pair() and BIO_s_dgram_mem() that provide memory-based
    BIOs with datagram semantics and support for BIO_sendmmsg() and BIO_recvmmsg()
    calls. They can be used as the transport BIOs for QUIC.
  - Add new BIO_sendmmsg() and BIO_recvmmsg() BIO methods which allow
    sending and receiving multiple messages in a single call. An implementation
    is provided for BIO_dgram. For further details, see BIO_sendmmsg(3).
  - Support for loading root certificates from the Windows certificate store
    has been added.
  - Enable KTLS with the TLS 1.3 CCM mode ciphersuites. Note that some linux
    kernel versions that support KTLS have a known bug in CCM processing. That
    has been fixed in stable releases starting from 5.4.164, 5.10.84, 5.15.7,
    and all releases since 5.16. KTLS with CCM ciphersuites should be only used
    on these releases.
  - Added '-ktls' option to 's_server' and 's_client' commands to enable the
    KTLS support.
  - Zerocopy KTLS sendfile() support on Linux.
  - The OBJ_ calls are now thread safe using a global lock.
  - New parameter '-digest' for openssl cms command allowing signing
    pre-computed digests and new CMS API functions supporting that
    functionality.
  - OPENSSL_malloc() and other allocation functions now raise errors on
    allocation failures. The callers do not need to explicitly raise errors
    unless they want to for tracing purposes.
  - Added support for Brainpool curves in TLS-1.3.
  - Support for Argon2d, Argon2i, Argon2id KDFs has been added along with
    a basic thread pool implementation for select platforms.</changelog>
  <changelog author="pmonreal@suse.com" date="1729857601">- Update to 3.2.1:
  * Changes between 3.2.0 and 3.2.1:
  - A file in PKCS12 format can contain certificates and keys and may come from
    an untrusted source. The PKCS12 specification allows certain fields to be
    NULL, but OpenSSL did not correctly check for this case. [CVE-2024-0727]
  - When function EVP_PKEY_public_check() is called on RSA public keys,
    a computation is done to confirm that the RSA modulus, n, is composite.
    For valid RSA keys, n is a product of two or more large primes and this
    computation completes quickly. However, if n is an overly large prime,
    then this computation would take a long time. [CVE-2023-6237]
  - Restore the encoding of SM2 PrivateKeyInfo and SubjectPublicKeyInfo to
    have the contained AlgorithmIdentifier.algorithm set to id-ecPublicKey
    rather than SM2.
  - The POLY1305 MAC (message authentication code) implementation in OpenSSL
    for PowerPC CPUs saves the contents of vector registers in different
    order than they are restored. [CVE-2023-6129]
  - Disable building QUIC server utility when OpenSSL is configured with 'no-apps'.
  * The openssl-crypto-policies-support.patch has been merged into
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Rename openssl-Disable-default-provider-for-test-suite.patch and rebase to
    openssl-TESTS-Disable-default-provider-crypto-policies.patch
  * Patches removed in the update:
  - openssl-Add_support_for_Windows_CA_certificate_store.patch
  - openssl-ec-56-bit-Limb-Solinas-Strategy-for-secp384r1.patch
  - openssl-ec-Use-static-linkage-on-nistp521-felem_-square-mul-.patch
  - openssl-ec-powerpc64le-Add-asm-implementation-of-felem_-squa.patch
  - openssl-ecc-Remove-extraneous-parentheses-in-secp384r1.patch
  - openssl-powerpc-ecc-Fix-stack-allocation-secp384r1-asm.patch
  - openssl-CVE-2024-41996.patch
  - openssl-CVE-2023-50782.patch
  - openssl-CVE-2024-9143.patch
  * Patches rebased:
  - openssl-3-use-include-directive.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-DEFAULT_SUSE_cipher.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Force-FIPS.patch
  - openssl-load-legacy-provider.patch
  - openssl-no-html-docs.patch
  - openssl-pkgconfig.patch
  - openssl-ppc64-config.patch
  - openssl-truststore.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116800">- Remove the hardcoded DEFAULT_SUSE cipherlist selection.
  * Remove openssl-DEFAULT_SUSE_cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116801">- Update to 3.2.3:
  * Changes between 3.2.2 and 3.2.3:
  - Fixed possible denial of service in X.509 name checks. [CVE-2024-6119]
  - Fixed possible buffer overread in SSL_select_next_proto(). [CVE-2024-5535]
  * Changes between 3.2.1 and 3.2.2:
  - Fixed potential use after free after SSL_free_buffers() is called. [CVE-2024-4741]
  - Fixed an issue where checking excessively long DSA keys or parameters may
    be very slow. [CVE-2024-4603]
  - Improved EC/DSA nonce generation routines to avoid bias and timing
    side channel leaks.
  - Fixed an issue where some non-default TLS server configurations can cause
    unbounded memory growth when processing TLSv1.3 sessions. [CVE-2024-2511]
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded. This can be used on platforms
    where using atexit() from shared libraries causes crashes on exit.
  - Fixed bug where SSL_export_keying_material() could not be used with QUIC
    connections.
  * Add openssl-skip-quic-pairwise.patch to adapt the pairwise tests.
  * Merge openssl-FIPS-release_num_in_version_string.patch into
    openssl-FIPS-services-minimize.patch
  * Rebase patches:
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Remove-EC-curves.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-3-use-include-directive.patch
  * Remove not needed patches:
  - openssl-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  - openssl-3-FIPS-PCT_rsa_keygen.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730462400">- Support MSA 12 SHA3 on s390x [jsc#PED-10280]
  * Add openssl-3-add_EVP_DigestSqueeze_api.patch
  * Add openssl-3-support-multiple-sha3_squeeze_s390x.patch
  * Add openssl-3-add-xof-state-handling-s3_absorb.patch
  * Add openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  * Add openssl-3-fix-state-handling-sha3_final_s390x.patch
  * Add openssl-3-fix-state-handling-shake_final_s390x.patch
  * Add openssl-3-fix-state-handling-keccak_final_s390x.patch
  * Add openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  * Add openssl-3-add-defines-CPACF-funcs.patch
  * Add openssl-3-add-hw-acceleration-hmac.patch
  * Add openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  * Add openssl-3-fix-s390x_sha3_absorb.patch
  * Add openssl-3-fix-s390x_shake_squeeze.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808000">- Support MSA 10 XTS on s390x [jsc#PED-10273]
  * s390x: Add hardware acceleration for full AES-XTS
  * Add openssl-3-hw-acceleration-aes-xts-s390x.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808001">- Support MSA 11 HMAC on s390x [jsc#PED-10274]
  * Add openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  * Add openssl-3-fix-hmac-digest-detection-s390x.patch
  * Add openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730980800">- Add missing fixes for SHA3_squeeze and quic_multistream_test on
  pcc64 arch. [jsc#PED-10280]
  * Added openssl-3-fix-sha3-squeeze-ppc64.patch
  * Added openssl-3-fix-quic_multistream_test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1731412800">- Do not use HASHBANGPERL to avoid introducing a dependency on the
  perl-base package. [bsc#1233235]</changelog>
  <changelog author="pmonreal@suse.com" date="1734436800">- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
  - openssl-3-use-include-directive.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1738238400">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Security fix: [bsc#1236599, CVE-2024-12797]
  * RFC7250 handshakes with unauthenticated servers don't abort as
    expected.
  * Add openssl-CVE-2024-12797.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1746014400">- Security fix: [bsc#1240366, CVE-2025-27587]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
  <changelog author="mls@suse.de" date="1751371200">- Backport mdless cms signing support [jsc#PED-12895]
  * Add openssl-3-support-mdless-cms.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- FIPS: Fix EMS in crypto-policies FIPS:NO-ENFORCE-EMS
  * [bsc#1230959, bsc#1232326, bsc#1231748, bsc#1246428]
  * Add patch openssl-FIPS-fix-EMS-support.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1753876800">- Increase limit for CRL download [bsc#1247148, bsc#1247144]
  * Add openssl-3-large-CRLs.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1759233600">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl3-CVE-2025-9230.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1768824000">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795]
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * Stack buffer overflow in CMS AuthEnvelopedData parsing
  - openssl-CVE-2025-15467.patch [bsc#1256830, CVE-2025-15467]
  - openssl-CVE-2025-15467-comments.patch
  - openssl-CVE-2025-15467-test.patch</changelog>
</package>
<package pkgid="6c595a609feb6e683fe0efcf05ef815a308e312b02f3ec10f6325009629cdf32" name="openssl-3" arch="src">
  <version epoch="0" ver="3.2.3" rel="150700.5.31.1"/>
  <changelog author="pmonreal@suse.com" date="1730116800">- Remove the hardcoded DEFAULT_SUSE cipherlist selection.
  * Remove openssl-DEFAULT_SUSE_cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116801">- Update to 3.2.3:
  * Changes between 3.2.2 and 3.2.3:
  - Fixed possible denial of service in X.509 name checks. [CVE-2024-6119]
  - Fixed possible buffer overread in SSL_select_next_proto(). [CVE-2024-5535]
  * Changes between 3.2.1 and 3.2.2:
  - Fixed potential use after free after SSL_free_buffers() is called. [CVE-2024-4741]
  - Fixed an issue where checking excessively long DSA keys or parameters may
    be very slow. [CVE-2024-4603]
  - Improved EC/DSA nonce generation routines to avoid bias and timing
    side channel leaks.
  - Fixed an issue where some non-default TLS server configurations can cause
    unbounded memory growth when processing TLSv1.3 sessions. [CVE-2024-2511]
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded. This can be used on platforms
    where using atexit() from shared libraries causes crashes on exit.
  - Fixed bug where SSL_export_keying_material() could not be used with QUIC
    connections.
  * Add openssl-skip-quic-pairwise.patch to adapt the pairwise tests.
  * Merge openssl-FIPS-release_num_in_version_string.patch into
    openssl-FIPS-services-minimize.patch
  * Rebase patches:
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Remove-EC-curves.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-3-use-include-directive.patch
  * Remove not needed patches:
  - openssl-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  - openssl-3-FIPS-PCT_rsa_keygen.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730462400">- Support MSA 12 SHA3 on s390x [jsc#PED-10280]
  * Add openssl-3-add_EVP_DigestSqueeze_api.patch
  * Add openssl-3-support-multiple-sha3_squeeze_s390x.patch
  * Add openssl-3-add-xof-state-handling-s3_absorb.patch
  * Add openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  * Add openssl-3-fix-state-handling-sha3_final_s390x.patch
  * Add openssl-3-fix-state-handling-shake_final_s390x.patch
  * Add openssl-3-fix-state-handling-keccak_final_s390x.patch
  * Add openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  * Add openssl-3-add-defines-CPACF-funcs.patch
  * Add openssl-3-add-hw-acceleration-hmac.patch
  * Add openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  * Add openssl-3-fix-s390x_sha3_absorb.patch
  * Add openssl-3-fix-s390x_shake_squeeze.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808000">- Support MSA 10 XTS on s390x [jsc#PED-10273]
  * s390x: Add hardware acceleration for full AES-XTS
  * Add openssl-3-hw-acceleration-aes-xts-s390x.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808001">- Support MSA 11 HMAC on s390x [jsc#PED-10274]
  * Add openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  * Add openssl-3-fix-hmac-digest-detection-s390x.patch
  * Add openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730980800">- Add missing fixes for SHA3_squeeze and quic_multistream_test on
  pcc64 arch. [jsc#PED-10280]
  * Added openssl-3-fix-sha3-squeeze-ppc64.patch
  * Added openssl-3-fix-quic_multistream_test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1731412800">- Do not use HASHBANGPERL to avoid introducing a dependency on the
  perl-base package. [bsc#1233235]</changelog>
  <changelog author="pmonreal@suse.com" date="1734436800">- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
  - openssl-3-use-include-directive.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1738238400">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Security fix: [bsc#1236599, CVE-2024-12797]
  * RFC7250 handshakes with unauthenticated servers don't abort as
    expected.
  * Add openssl-CVE-2024-12797.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1746014400">- Security fix: [bsc#1240366, CVE-2025-27587]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
  <changelog author="mls@suse.de" date="1751371200">- Backport mdless cms signing support [jsc#PED-12895]
  * Add openssl-3-support-mdless-cms.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- FIPS: Fix EMS in crypto-policies FIPS:NO-ENFORCE-EMS
  * [bsc#1230959, bsc#1232326, bsc#1231748, bsc#1246428]
  * Add patch openssl-FIPS-fix-EMS-support.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1753876800">- Increase limit for CRL download [bsc#1247148, bsc#1247144]
  * Add openssl-3-large-CRLs.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1759233600">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl3-CVE-2025-9230.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1768824000">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795]
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * Stack buffer overflow in CMS AuthEnvelopedData parsing
  - openssl-CVE-2025-15467.patch [bsc#1256830, CVE-2025-15467]
  - openssl-CVE-2025-15467-comments.patch
  - openssl-CVE-2025-15467-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1774526400">- Security fixes:
  * CVE-2026-28387: Potential use-after-free in DANE client code
    (bsc#1260441)
  * CVE-2026-28388: NULL Pointer Dereference When Processing a
    Delta (bsc#1260442)
  * CVE-2026-28389: Possible NULL dereference when processing CMS
    KeyAgreeRecipientInfo (bsc#1260443)
  * CVE-2026-31789: Heap buffer overflow in hexadecimal conversion
    (bsc#1260444)
  * CVE-2026-31790: Incorrect failure handling in RSA KEM RSASVE
    encapsulation (bsc#1260445)
  * NULL pointer dereference when processing an OCSP response
    (bsc#1260446)
  * Add patches: openssl-CVE-2026-28387.patch
    openssl-CVE-2026-28388.patch openssl-CVE-2026-28388-tests.patch
    openssl-CVE-2026-28389.patch openssl-CVE-2026-31789.patch
    openssl-CVE-2026-31790.patch openssl-CVE-2026-31790-tests.patch
    openssl-NULL-pointer-dereference-in-ocsp_find_signer_sk.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1775649600">- Security fix:
  * CVE-2026-28390: NULL pointer dereference during processing of a crafted
    CMS EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678)
  * Add openssl-CVE-2026-28390.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1775822400">- Enable MD2 in legacy provider (jsc#PED-15724)</changelog>
</package>
<package pkgid="1899df9d9df6154c1031dad0b359867661ba838893933ed0b48732fdfaaa085e" name="openssl-3" arch="x86_64">
  <version epoch="0" ver="3.2.3" rel="150700.5.31.1"/>
  <changelog author="pmonreal@suse.com" date="1730116800">- Remove the hardcoded DEFAULT_SUSE cipherlist selection.
  * Remove openssl-DEFAULT_SUSE_cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116801">- Update to 3.2.3:
  * Changes between 3.2.2 and 3.2.3:
  - Fixed possible denial of service in X.509 name checks. [CVE-2024-6119]
  - Fixed possible buffer overread in SSL_select_next_proto(). [CVE-2024-5535]
  * Changes between 3.2.1 and 3.2.2:
  - Fixed potential use after free after SSL_free_buffers() is called. [CVE-2024-4741]
  - Fixed an issue where checking excessively long DSA keys or parameters may
    be very slow. [CVE-2024-4603]
  - Improved EC/DSA nonce generation routines to avoid bias and timing
    side channel leaks.
  - Fixed an issue where some non-default TLS server configurations can cause
    unbounded memory growth when processing TLSv1.3 sessions. [CVE-2024-2511]
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded. This can be used on platforms
    where using atexit() from shared libraries causes crashes on exit.
  - Fixed bug where SSL_export_keying_material() could not be used with QUIC
    connections.
  * Add openssl-skip-quic-pairwise.patch to adapt the pairwise tests.
  * Merge openssl-FIPS-release_num_in_version_string.patch into
    openssl-FIPS-services-minimize.patch
  * Rebase patches:
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Remove-EC-curves.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-3-use-include-directive.patch
  * Remove not needed patches:
  - openssl-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  - openssl-3-FIPS-PCT_rsa_keygen.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730462400">- Support MSA 12 SHA3 on s390x [jsc#PED-10280]
  * Add openssl-3-add_EVP_DigestSqueeze_api.patch
  * Add openssl-3-support-multiple-sha3_squeeze_s390x.patch
  * Add openssl-3-add-xof-state-handling-s3_absorb.patch
  * Add openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  * Add openssl-3-fix-state-handling-sha3_final_s390x.patch
  * Add openssl-3-fix-state-handling-shake_final_s390x.patch
  * Add openssl-3-fix-state-handling-keccak_final_s390x.patch
  * Add openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  * Add openssl-3-add-defines-CPACF-funcs.patch
  * Add openssl-3-add-hw-acceleration-hmac.patch
  * Add openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  * Add openssl-3-fix-s390x_sha3_absorb.patch
  * Add openssl-3-fix-s390x_shake_squeeze.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808000">- Support MSA 10 XTS on s390x [jsc#PED-10273]
  * s390x: Add hardware acceleration for full AES-XTS
  * Add openssl-3-hw-acceleration-aes-xts-s390x.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808001">- Support MSA 11 HMAC on s390x [jsc#PED-10274]
  * Add openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  * Add openssl-3-fix-hmac-digest-detection-s390x.patch
  * Add openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730980800">- Add missing fixes for SHA3_squeeze and quic_multistream_test on
  pcc64 arch. [jsc#PED-10280]
  * Added openssl-3-fix-sha3-squeeze-ppc64.patch
  * Added openssl-3-fix-quic_multistream_test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1731412800">- Do not use HASHBANGPERL to avoid introducing a dependency on the
  perl-base package. [bsc#1233235]</changelog>
  <changelog author="pmonreal@suse.com" date="1734436800">- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
  - openssl-3-use-include-directive.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1738238400">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Security fix: [bsc#1236599, CVE-2024-12797]
  * RFC7250 handshakes with unauthenticated servers don't abort as
    expected.
  * Add openssl-CVE-2024-12797.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1746014400">- Security fix: [bsc#1240366, CVE-2025-27587]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
  <changelog author="mls@suse.de" date="1751371200">- Backport mdless cms signing support [jsc#PED-12895]
  * Add openssl-3-support-mdless-cms.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1752494400">- FIPS: Fix EMS in crypto-policies FIPS:NO-ENFORCE-EMS
  * [bsc#1230959, bsc#1232326, bsc#1231748, bsc#1246428]
  * Add patch openssl-FIPS-fix-EMS-support.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1753876800">- Increase limit for CRL download [bsc#1247148, bsc#1247144]
  * Add openssl-3-large-CRLs.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1759233600">- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read &amp; write in RFC 3211 KEK unwrap
  * Add patch openssl3-CVE-2025-9230.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1768824000">- Security fixes:
  * Missing ASN1_TYPE validation in PKCS#12 parsing
  - openssl-CVE-2026-22795.patch [bsc#1256839, CVE-2026-22795]
  * ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
  - openssl-CVE-2026-22795.patch [bsc#1256840, CVE-2026-22796]
  * Missing ASN1_TYPE validation in TS_RESP_verify_response() function
  - openssl-CVE-2025-69420.patch [bsc#1256837, CVE-2025-69420]
  * NULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex function
  - openssl-CVE-2025-69421.patch [bsc#1256838, CVE-2025-69421]
  * Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
  - openssl-CVE-2025-69419.patch [bsc#1256836, CVE-2025-69419]
  * Heap out-of-bounds write in BIO_f_linebuffer on short writes
  - openssl-CVE-2025-68160.patch [bsc#1256834, CVE-2025-68160]
  * Unauthenticated/unencrypted trailing bytes with low-level OCB function calls
  - openssl-CVE-2025-69418.patch [bsc#1256835, CVE-2025-69418]
  * Stack buffer overflow in CMS AuthEnvelopedData parsing
  - openssl-CVE-2025-15467.patch [bsc#1256830, CVE-2025-15467]
  - openssl-CVE-2025-15467-comments.patch
  - openssl-CVE-2025-15467-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1774526400">- Security fixes:
  * CVE-2026-28387: Potential use-after-free in DANE client code
    (bsc#1260441)
  * CVE-2026-28388: NULL Pointer Dereference When Processing a
    Delta (bsc#1260442)
  * CVE-2026-28389: Possible NULL dereference when processing CMS
    KeyAgreeRecipientInfo (bsc#1260443)
  * CVE-2026-31789: Heap buffer overflow in hexadecimal conversion
    (bsc#1260444)
  * CVE-2026-31790: Incorrect failure handling in RSA KEM RSASVE
    encapsulation (bsc#1260445)
  * NULL pointer dereference when processing an OCSP response
    (bsc#1260446)
  * Add patches: openssl-CVE-2026-28387.patch
    openssl-CVE-2026-28388.patch openssl-CVE-2026-28388-tests.patch
    openssl-CVE-2026-28389.patch openssl-CVE-2026-31789.patch
    openssl-CVE-2026-31790.patch openssl-CVE-2026-31790-tests.patch
    openssl-NULL-pointer-dereference-in-ocsp_find_signer_sk.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1775649600">- Security fix:
  * CVE-2026-28390: NULL pointer dereference during processing of a crafted
    CMS EnvelopedData message with KeyTransportRecipientInfo (bsc#1261678)
  * Add openssl-CVE-2026-28390.patch</changelog>
  <changelog author="lucas.mulling@suse.com" date="1775822400">- Enable MD2 in legacy provider (jsc#PED-15724)</changelog>
</package>
<package pkgid="3c1352d33c8124ba5ea274c0e9b4e11791370dc205da5b721f7efe6c6e0b43ad" name="openssl-3" arch="src">
  <version epoch="0" ver="3.2.3" rel="150700.5.5.1"/>
  <changelog author="pmonreal@suse.com" date="1721649600">- Build with no-afalgeng [bsc#1226463]</changelog>
  <changelog author="abergmann@suse.com" date="1724328000">- Security fix: [bsc#1229465, CVE-2024-6119]
  * possible denial of service in X.509 name checks
  * openssl-CVE-2024-6119.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1727265600">- Security fix: [bsc#1230698, CVE-2024-41996]
  * Validating the order of the public keys in the Diffie-Hellman
    Key Agreement Protocol, when an approved safe prime is used.
  * Added openssl-3-CVE-2024-41996.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1220262, CVE-2023-50782]
  * Implicit rejection in PKCS#1 v1.5
  * Add openssl-CVE-2023-50782.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166401">- Security fix: [bsc#1231741, CVE-2024-9143]
  * Low-level invalid GF(2^m) parameters lead to OOB memory access
  * Add openssl-CVE-2024-9143.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729512000">- Update to 3.1.7:
  * Major changes between OpenSSL 3.1.6 and OpenSSL 3.1.7 [3 Sep 2024]
  - Fixed possible denial of service in X.509 name checks (CVE-2024-6119)
  - Fixed possible buffer overread in SSL_select_next_proto()
    (CVE-2024-5535)
  * Major changes between OpenSSL 3.1.5 and OpenSSL 3.1.6 [4 Jun 2024]
  - Fixed potential use after free after SSL_free_buffers() is
    called (CVE-2024-4741)
  - Fixed an issue where checking excessively long DSA keys or
    parameters may be very slow (CVE-2024-4603)
  - Fixed unbounded memory growth with session handling in TLSv1.3
    (CVE-2024-2511)
  * Major changes between OpenSSL 3.1.4 and OpenSSL 3.1.5 [30 Jan 2024]
  - Fixed PKCS12 Decoding crashes (CVE-2024-0727)
  - Fixed Excessive time spent checking invalid RSA public keys
    [CVE-2023-6237)
  - Fixed POLY1305 MAC implementation corrupting vector registers
    on PowerPC CPUs which support PowerISA 2.07 (CVE-2023-6129)
  - Fix excessive time spent in DH check / generation with large
    Q parameter value (CVE-2023-5678)
  * Update openssl.keyring with BA5473A2B0587B07FB27CF2D216094DFD0CB81EF
  * Rebase patches:
  - openssl-Force-FIPS.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-CVE-2023-50782.patch
  * Remove patches fixed in the update:
  - openssl-Improve-performance-for-6x-unrolling-with-vpermxor-i.patch
  - openssl-CVE-2024-6119.patch openssl-CVE-2024-5535.patch
  - openssl-CVE-2024-4741.patch openssl-CVE-2024-4603.patch
  - openssl-CVE-2024-2511.patch openssl-CVE-2024-0727.patch
  - openssl-CVE-2023-6237.patch openssl-CVE-2023-6129.patch
  - openssl-CVE-2023-5678.patch openssl-3-CVE-2024-41996.patch
  - openssl-Enable-BTI-feature-for-md5-on-aarch64.patch
  - openssl-Fix-EVP_PKEY_CTX_add1_hkdf_info-behavior.patch
  - openssl-Handle-empty-param-in-EVP_PKEY_CTX_add1_hkdf_info.patch
  - reproducible.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729857600">- Update to 3.2.0:
  * Changes between 3.1.x and 3.2.0:
  - Fix excessive time spent in DH check/ generation with large Q parameter
    value. [CVE-2023-5678]
  - The BLAKE2b hash algorithm supports a configurable output length
    by setting the "size" parameter.
  - Added a function to delete objects from store by URI - OSSL_STORE_delete()
    and the corresponding provider-storemgmt API function OSSL_FUNC_store_delete().
  - Added OSSL_FUNC_store_open_ex() provider-storemgmt API function to pass
    a passphrase callback when opening a store.
  - Changed the default salt length used by PBES2 KDF's (PBKDF2 and scrypt)
    from 8 bytes to 16 bytes.
  - Changed the default value of the 'ess_cert_id_alg' configuration
    option which is used to calculate the TSA's public key certificate
    identifier. The default algorithm is updated to be sha256 instead of sha1.
  - Added optimization for SM2 algorithm on aarch64. A new configure option
    'no-sm2-precomp' has been added to disable the precomputed table.
  - Added client side support for QUIC
  - Added secp384r1 implementation using Solinas' reduction to improve
    speed of the NIST P-384 elliptic curve. To enable the implementation
    the build option 'enable-ec_nistp_64_gcc_128' must be used.
  - Improved RFC7468 compliance of the asn1parse command.
  - Added SHA256/192 algorithm support.
  - Added support for securely getting root CA certificate update in CMP.
  - Improved contention on global write locks by using more read locks where
    appropriate.
  - Improved performance of OSSL_PARAM lookups in performance critical
    provider functions.
  - Added the SSL_get0_group_name() function to provide access to the
    name of the group used for the TLS key exchange.
  - Provide a new configure option 'no-http' that can be used to disable the
    HTTP support. Provide new configure options 'no-apps' and 'no-docs' to
    disable building the openssl command line application and the documentation.
  - Provide a new configure option 'no-ecx' that can be used to disable the
    X25519, X448, and EdDSA support.
  - When multiple OSSL_KDF_PARAM_INFO parameters are passed to
    the EVP_KDF_CTX_set_params() function they are now concatenated not just
    for the HKDF algorithm but also for SSKDF and X9.63 KDF algorithms.
  - Added OSSL_FUNC_keymgmt_im/export_types_ex() provider functions that get
    the provider context as a parameter.
  - TLS round-trip time calculation was added by a Brigham Young University
    Capstone team partnering with Sandia National Laboratories. A new function
    in ssl_lib titled SSL_get_handshake_rtt will calculate and retrieve this
    value.
  - Added the "-quic" option to s_client to enable connectivity to QUIC servers.
    QUIC requires the use of ALPN, so this must be specified via the "-alpn"
    option. Use of the "advanced" s_client command command via the "-adv" option
    is recommended.
  - Added an "advanced" command mode to s_client. Use this with the "-adv" option.
  - Add Raw Public Key (RFC7250) support.
  - Added support for modular exponentiation and CRT offloading for the
    S390x architecture.
  - Added further assembler code for the RISC-V architecture.
  - Added EC_GROUP_to_params() which creates an OSSL_PARAM array
    from a given EC_GROUP.
  - Improved support for non-default library contexts and property queries
    when parsing PKCS#12 files.
  - Implemented support for all five instances of EdDSA from RFC8032:
    Ed25519, Ed25519ctx, Ed25519ph, Ed448, and Ed448ph.
    The streaming is not yet supported for the HashEdDSA variants
    (Ed25519ph and Ed448ph).
  - Added SM4 optimization for ARM processors using ASIMD and AES HW instructions.
  - Implemented SM4-XTS support.
  - Added platform-agnostic OSSL_sleep() function.
  - Implemented deterministic ECDSA signatures (RFC6979) support.
  - Implemented AES-GCM-SIV (RFC8452) support.
  - Added support for pluggable (provider-based) TLS signature algorithms.
    This enables TLS 1.3 authentication operations with algorithms embedded
    in providers not included by default in OpenSSL. In combination with
    the already available pluggable KEM and X.509 support, this enables
    for example suitable providers to deliver post-quantum or quantum-safe
    cryptography to OpenSSL users.
  - Added support for pluggable (provider-based) CMS signature algorithms.
    This enables CMS sign and verify operations with algorithms embedded
    in providers not included by default in OpenSSL.
  - Implemented HPKE DHKEM support in providers used by HPKE (RFC9180) API.
  - Add support for certificate compression (RFC8879), including
    library support for Brotli and Zstandard compression.
  - Add the ability to add custom attributes to PKCS12 files. Add a new API
    PKCS12_create_ex2, identical to the existing PKCS12_create_ex but allows
    for a user specified callback and optional argument.
    Added a new PKCS12_SAFEBAG_set0_attr, which allows for a new attr to be
    added to the existing STACK_OF attrs.
  - Major refactor of the libssl record layer.
  - Add a mac salt length option for the pkcs12 command.
  - Add more SRTP protection profiles from RFC8723 and RFC8269.
  - Extended Kernel TLS (KTLS) to support TLS 1.3 receive offload.
  - Add support for TCP Fast Open (RFC7413) to macOS, Linux, and FreeBSD where
    supported and enabled.
  - Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489)
    to the list of ciphersuites providing Perfect Forward Secrecy as
    required by SECLEVEL &gt;= 3.
  - Add new SSL APIs to aid in efficiently implementing TLS/SSL fingerprinting.
    The SSL_CTRL_GET_IANA_GROUPS control code, exposed as the
    SSL_get0_iana_groups() function-like macro, retrieves the list of
    supported groups sent by the peer.
  - Fixed PEM_write_bio_PKCS8PrivateKey() and PEM_write_bio_PKCS8PrivateKey_nid()
    to make it possible to use empty passphrase strings.
  - The PKCS12_parse() function now supports MAC-less PKCS12 files.
  - Added ASYNC_set_mem_functions() and ASYNC_get_mem_functions() calls to be able
    to change functions used for allocating the memory of asynchronous call stack.
  - Added support for signed BIGNUMs in the OSSL_PARAM APIs.
  - A failure exit code is returned when using the openssl x509 command to check
    certificate attributes and the checks fail.
  - The default SSL/TLS security level has been changed from 1 to 2. RSA,
    DSA and DH keys of 1024 bits and above and less than 2048 bits and ECC keys
    of 160 bits and above and less than 224 bits were previously accepted by
    default but are now no longer allowed. By default TLS compression was
    already disabled in previous OpenSSL versions. At security level 2 it cannot
    be enabled.
  - The SSL_CTX_set_cipher_list family functions now accept ciphers using their
    IANA standard names.
  - The PVK key derivation function has been moved from b2i_PVK_bio_ex() into
    the legacy crypto provider as an EVP_KDF. Applications requiring this KDF
    will need to load the legacy crypto provider.
  - CCM8 cipher suites in TLS have been downgraded to security level zero
    because they use a short authentication tag which lowers their strength.
  - Subject or issuer names in X.509 objects are now displayed as UTF-8 strings
    by default. Also spaces surrounding '=' in DN output are removed.
  - Add X.509 certificate codeSigning purpose and related checks on key usage and
    extended key usage of the leaf certificate according to the CA/Browser Forum.
  - The 'x509', 'ca', and 'req' apps now produce X.509 v3 certificates.
    The '-x509v1' option of 'req' prefers generation of X.509 v1 certificates.
    'X509_sign()' and 'X509_sign_ctx()' make sure that the certificate has
    X.509 version 3 if the certificate information includes X.509 extensions.
  - Fix and extend certificate handling and the apps 'x509', 'verify' etc.
    such as adding a trace facility for debugging certificate chain building.
  - Various fixes and extensions to the CMP+CRMF implementation and the 'cmp' app
    in particular supporting requests for central key generation, generalized
    polling, and various types of genm/genp exchanges defined in CMP Updates.
  - Fixes and extensions to the HTTP client and to the HTTP server in 'apps/'
    like correcting the TLS and proxy support and adding tracing for debugging.
  - Extended the CMS API for handling 'CMS_SignedData' and 'CMS_EnvelopedData'.
  - 'CMS_add0_cert()' and 'CMS_add1_cert()' no longer throw an error if
    a certificate to be added is already present. 'CMS_sign_ex()' and
    'CMS_sign()' now ignore any duplicate certificates in their 'certs' argument
    and no longer throw an error for them.
  - Added BIO_s_dgram_pair() and BIO_s_dgram_mem() that provide memory-based
    BIOs with datagram semantics and support for BIO_sendmmsg() and BIO_recvmmsg()
    calls. They can be used as the transport BIOs for QUIC.
  - Add new BIO_sendmmsg() and BIO_recvmmsg() BIO methods which allow
    sending and receiving multiple messages in a single call. An implementation
    is provided for BIO_dgram. For further details, see BIO_sendmmsg(3).
  - Support for loading root certificates from the Windows certificate store
    has been added.
  - Enable KTLS with the TLS 1.3 CCM mode ciphersuites. Note that some linux
    kernel versions that support KTLS have a known bug in CCM processing. That
    has been fixed in stable releases starting from 5.4.164, 5.10.84, 5.15.7,
    and all releases since 5.16. KTLS with CCM ciphersuites should be only used
    on these releases.
  - Added '-ktls' option to 's_server' and 's_client' commands to enable the
    KTLS support.
  - Zerocopy KTLS sendfile() support on Linux.
  - The OBJ_ calls are now thread safe using a global lock.
  - New parameter '-digest' for openssl cms command allowing signing
    pre-computed digests and new CMS API functions supporting that
    functionality.
  - OPENSSL_malloc() and other allocation functions now raise errors on
    allocation failures. The callers do not need to explicitly raise errors
    unless they want to for tracing purposes.
  - Added support for Brainpool curves in TLS-1.3.
  - Support for Argon2d, Argon2i, Argon2id KDFs has been added along with
    a basic thread pool implementation for select platforms.</changelog>
  <changelog author="pmonreal@suse.com" date="1729857601">- Update to 3.2.1:
  * Changes between 3.2.0 and 3.2.1:
  - A file in PKCS12 format can contain certificates and keys and may come from
    an untrusted source. The PKCS12 specification allows certain fields to be
    NULL, but OpenSSL did not correctly check for this case. [CVE-2024-0727]
  - When function EVP_PKEY_public_check() is called on RSA public keys,
    a computation is done to confirm that the RSA modulus, n, is composite.
    For valid RSA keys, n is a product of two or more large primes and this
    computation completes quickly. However, if n is an overly large prime,
    then this computation would take a long time. [CVE-2023-6237]
  - Restore the encoding of SM2 PrivateKeyInfo and SubjectPublicKeyInfo to
    have the contained AlgorithmIdentifier.algorithm set to id-ecPublicKey
    rather than SM2.
  - The POLY1305 MAC (message authentication code) implementation in OpenSSL
    for PowerPC CPUs saves the contents of vector registers in different
    order than they are restored. [CVE-2023-6129]
  - Disable building QUIC server utility when OpenSSL is configured with 'no-apps'.
  * The openssl-crypto-policies-support.patch has been merged into
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Rename openssl-Disable-default-provider-for-test-suite.patch and rebase to
    openssl-TESTS-Disable-default-provider-crypto-policies.patch
  * Patches removed in the update:
  - openssl-Add_support_for_Windows_CA_certificate_store.patch
  - openssl-ec-56-bit-Limb-Solinas-Strategy-for-secp384r1.patch
  - openssl-ec-Use-static-linkage-on-nistp521-felem_-square-mul-.patch
  - openssl-ec-powerpc64le-Add-asm-implementation-of-felem_-squa.patch
  - openssl-ecc-Remove-extraneous-parentheses-in-secp384r1.patch
  - openssl-powerpc-ecc-Fix-stack-allocation-secp384r1-asm.patch
  - openssl-CVE-2024-41996.patch
  - openssl-CVE-2023-50782.patch
  - openssl-CVE-2024-9143.patch
  * Patches rebased:
  - openssl-3-use-include-directive.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-DEFAULT_SUSE_cipher.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Force-FIPS.patch
  - openssl-load-legacy-provider.patch
  - openssl-no-html-docs.patch
  - openssl-pkgconfig.patch
  - openssl-ppc64-config.patch
  - openssl-truststore.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116800">- Remove the hardcoded DEFAULT_SUSE cipherlist selection.
  * Remove openssl-DEFAULT_SUSE_cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116801">- Update to 3.2.3:
  * Changes between 3.2.2 and 3.2.3:
  - Fixed possible denial of service in X.509 name checks. [CVE-2024-6119]
  - Fixed possible buffer overread in SSL_select_next_proto(). [CVE-2024-5535]
  * Changes between 3.2.1 and 3.2.2:
  - Fixed potential use after free after SSL_free_buffers() is called. [CVE-2024-4741]
  - Fixed an issue where checking excessively long DSA keys or parameters may
    be very slow. [CVE-2024-4603]
  - Improved EC/DSA nonce generation routines to avoid bias and timing
    side channel leaks.
  - Fixed an issue where some non-default TLS server configurations can cause
    unbounded memory growth when processing TLSv1.3 sessions. [CVE-2024-2511]
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded. This can be used on platforms
    where using atexit() from shared libraries causes crashes on exit.
  - Fixed bug where SSL_export_keying_material() could not be used with QUIC
    connections.
  * Add openssl-skip-quic-pairwise.patch to adapt the pairwise tests.
  * Merge openssl-FIPS-release_num_in_version_string.patch into
    openssl-FIPS-services-minimize.patch
  * Rebase patches:
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Remove-EC-curves.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-3-use-include-directive.patch
  * Remove not needed patches:
  - openssl-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  - openssl-3-FIPS-PCT_rsa_keygen.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730462400">- Support MSA 12 SHA3 on s390x [jsc#PED-10280]
  * Add openssl-3-add_EVP_DigestSqueeze_api.patch
  * Add openssl-3-support-multiple-sha3_squeeze_s390x.patch
  * Add openssl-3-add-xof-state-handling-s3_absorb.patch
  * Add openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  * Add openssl-3-fix-state-handling-sha3_final_s390x.patch
  * Add openssl-3-fix-state-handling-shake_final_s390x.patch
  * Add openssl-3-fix-state-handling-keccak_final_s390x.patch
  * Add openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  * Add openssl-3-add-defines-CPACF-funcs.patch
  * Add openssl-3-add-hw-acceleration-hmac.patch
  * Add openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  * Add openssl-3-fix-s390x_sha3_absorb.patch
  * Add openssl-3-fix-s390x_shake_squeeze.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808000">- Support MSA 10 XTS on s390x [jsc#PED-10273]
  * s390x: Add hardware acceleration for full AES-XTS
  * Add openssl-3-hw-acceleration-aes-xts-s390x.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808001">- Support MSA 11 HMAC on s390x [jsc#PED-10274]
  * Add openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  * Add openssl-3-fix-hmac-digest-detection-s390x.patch
  * Add openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730980800">- Add missing fixes for SHA3_squeeze and quic_multistream_test on
  pcc64 arch. [jsc#PED-10280]
  * Added openssl-3-fix-sha3-squeeze-ppc64.patch
  * Added openssl-3-fix-quic_multistream_test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1731412800">- Do not use HASHBANGPERL to avoid introducing a dependency on the
  perl-base package. [bsc#1233235]</changelog>
  <changelog author="pmonreal@suse.com" date="1734436800">- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
  - openssl-3-use-include-directive.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1738238400">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Security fix: [bsc#1236599, CVE-2024-12797]
  * RFC7250 handshakes with unauthenticated servers don't abort as
    expected.
  * Add openssl-CVE-2024-12797.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1746014400">- Security fix: [bsc#1240366]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
</package>
<package pkgid="21e33163d05c9d7ad24bee80aa62abdb657928324cfe67a854629b7d339b0699" name="openssl-3" arch="x86_64">
  <version epoch="0" ver="3.2.3" rel="150700.5.5.1"/>
  <changelog author="pmonreal@suse.com" date="1721649600">- Build with no-afalgeng [bsc#1226463]</changelog>
  <changelog author="abergmann@suse.com" date="1724328000">- Security fix: [bsc#1229465, CVE-2024-6119]
  * possible denial of service in X.509 name checks
  * openssl-CVE-2024-6119.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1727265600">- Security fix: [bsc#1230698, CVE-2024-41996]
  * Validating the order of the public keys in the Diffie-Hellman
    Key Agreement Protocol, when an approved safe prime is used.
  * Added openssl-3-CVE-2024-41996.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166400">- Security fix: [bsc#1220262, CVE-2023-50782]
  * Implicit rejection in PKCS#1 v1.5
  * Add openssl-CVE-2023-50782.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729166401">- Security fix: [bsc#1231741, CVE-2024-9143]
  * Low-level invalid GF(2^m) parameters lead to OOB memory access
  * Add openssl-CVE-2024-9143.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729512000">- Update to 3.1.7:
  * Major changes between OpenSSL 3.1.6 and OpenSSL 3.1.7 [3 Sep 2024]
  - Fixed possible denial of service in X.509 name checks (CVE-2024-6119)
  - Fixed possible buffer overread in SSL_select_next_proto()
    (CVE-2024-5535)
  * Major changes between OpenSSL 3.1.5 and OpenSSL 3.1.6 [4 Jun 2024]
  - Fixed potential use after free after SSL_free_buffers() is
    called (CVE-2024-4741)
  - Fixed an issue where checking excessively long DSA keys or
    parameters may be very slow (CVE-2024-4603)
  - Fixed unbounded memory growth with session handling in TLSv1.3
    (CVE-2024-2511)
  * Major changes between OpenSSL 3.1.4 and OpenSSL 3.1.5 [30 Jan 2024]
  - Fixed PKCS12 Decoding crashes (CVE-2024-0727)
  - Fixed Excessive time spent checking invalid RSA public keys
    [CVE-2023-6237)
  - Fixed POLY1305 MAC implementation corrupting vector registers
    on PowerPC CPUs which support PowerISA 2.07 (CVE-2023-6129)
  - Fix excessive time spent in DH check / generation with large
    Q parameter value (CVE-2023-5678)
  * Update openssl.keyring with BA5473A2B0587B07FB27CF2D216094DFD0CB81EF
  * Rebase patches:
  - openssl-Force-FIPS.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-FIPS-services-minimize.patch
  - openssl-FIPS-RSA-disable-shake.patch
  - openssl-CVE-2023-50782.patch
  * Remove patches fixed in the update:
  - openssl-Improve-performance-for-6x-unrolling-with-vpermxor-i.patch
  - openssl-CVE-2024-6119.patch openssl-CVE-2024-5535.patch
  - openssl-CVE-2024-4741.patch openssl-CVE-2024-4603.patch
  - openssl-CVE-2024-2511.patch openssl-CVE-2024-0727.patch
  - openssl-CVE-2023-6237.patch openssl-CVE-2023-6129.patch
  - openssl-CVE-2023-5678.patch openssl-3-CVE-2024-41996.patch
  - openssl-Enable-BTI-feature-for-md5-on-aarch64.patch
  - openssl-Fix-EVP_PKEY_CTX_add1_hkdf_info-behavior.patch
  - openssl-Handle-empty-param-in-EVP_PKEY_CTX_add1_hkdf_info.patch
  - reproducible.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1729857600">- Update to 3.2.0:
  * Changes between 3.1.x and 3.2.0:
  - Fix excessive time spent in DH check/ generation with large Q parameter
    value. [CVE-2023-5678]
  - The BLAKE2b hash algorithm supports a configurable output length
    by setting the "size" parameter.
  - Added a function to delete objects from store by URI - OSSL_STORE_delete()
    and the corresponding provider-storemgmt API function OSSL_FUNC_store_delete().
  - Added OSSL_FUNC_store_open_ex() provider-storemgmt API function to pass
    a passphrase callback when opening a store.
  - Changed the default salt length used by PBES2 KDF's (PBKDF2 and scrypt)
    from 8 bytes to 16 bytes.
  - Changed the default value of the 'ess_cert_id_alg' configuration
    option which is used to calculate the TSA's public key certificate
    identifier. The default algorithm is updated to be sha256 instead of sha1.
  - Added optimization for SM2 algorithm on aarch64. A new configure option
    'no-sm2-precomp' has been added to disable the precomputed table.
  - Added client side support for QUIC
  - Added secp384r1 implementation using Solinas' reduction to improve
    speed of the NIST P-384 elliptic curve. To enable the implementation
    the build option 'enable-ec_nistp_64_gcc_128' must be used.
  - Improved RFC7468 compliance of the asn1parse command.
  - Added SHA256/192 algorithm support.
  - Added support for securely getting root CA certificate update in CMP.
  - Improved contention on global write locks by using more read locks where
    appropriate.
  - Improved performance of OSSL_PARAM lookups in performance critical
    provider functions.
  - Added the SSL_get0_group_name() function to provide access to the
    name of the group used for the TLS key exchange.
  - Provide a new configure option 'no-http' that can be used to disable the
    HTTP support. Provide new configure options 'no-apps' and 'no-docs' to
    disable building the openssl command line application and the documentation.
  - Provide a new configure option 'no-ecx' that can be used to disable the
    X25519, X448, and EdDSA support.
  - When multiple OSSL_KDF_PARAM_INFO parameters are passed to
    the EVP_KDF_CTX_set_params() function they are now concatenated not just
    for the HKDF algorithm but also for SSKDF and X9.63 KDF algorithms.
  - Added OSSL_FUNC_keymgmt_im/export_types_ex() provider functions that get
    the provider context as a parameter.
  - TLS round-trip time calculation was added by a Brigham Young University
    Capstone team partnering with Sandia National Laboratories. A new function
    in ssl_lib titled SSL_get_handshake_rtt will calculate and retrieve this
    value.
  - Added the "-quic" option to s_client to enable connectivity to QUIC servers.
    QUIC requires the use of ALPN, so this must be specified via the "-alpn"
    option. Use of the "advanced" s_client command command via the "-adv" option
    is recommended.
  - Added an "advanced" command mode to s_client. Use this with the "-adv" option.
  - Add Raw Public Key (RFC7250) support.
  - Added support for modular exponentiation and CRT offloading for the
    S390x architecture.
  - Added further assembler code for the RISC-V architecture.
  - Added EC_GROUP_to_params() which creates an OSSL_PARAM array
    from a given EC_GROUP.
  - Improved support for non-default library contexts and property queries
    when parsing PKCS#12 files.
  - Implemented support for all five instances of EdDSA from RFC8032:
    Ed25519, Ed25519ctx, Ed25519ph, Ed448, and Ed448ph.
    The streaming is not yet supported for the HashEdDSA variants
    (Ed25519ph and Ed448ph).
  - Added SM4 optimization for ARM processors using ASIMD and AES HW instructions.
  - Implemented SM4-XTS support.
  - Added platform-agnostic OSSL_sleep() function.
  - Implemented deterministic ECDSA signatures (RFC6979) support.
  - Implemented AES-GCM-SIV (RFC8452) support.
  - Added support for pluggable (provider-based) TLS signature algorithms.
    This enables TLS 1.3 authentication operations with algorithms embedded
    in providers not included by default in OpenSSL. In combination with
    the already available pluggable KEM and X.509 support, this enables
    for example suitable providers to deliver post-quantum or quantum-safe
    cryptography to OpenSSL users.
  - Added support for pluggable (provider-based) CMS signature algorithms.
    This enables CMS sign and verify operations with algorithms embedded
    in providers not included by default in OpenSSL.
  - Implemented HPKE DHKEM support in providers used by HPKE (RFC9180) API.
  - Add support for certificate compression (RFC8879), including
    library support for Brotli and Zstandard compression.
  - Add the ability to add custom attributes to PKCS12 files. Add a new API
    PKCS12_create_ex2, identical to the existing PKCS12_create_ex but allows
    for a user specified callback and optional argument.
    Added a new PKCS12_SAFEBAG_set0_attr, which allows for a new attr to be
    added to the existing STACK_OF attrs.
  - Major refactor of the libssl record layer.
  - Add a mac salt length option for the pkcs12 command.
  - Add more SRTP protection profiles from RFC8723 and RFC8269.
  - Extended Kernel TLS (KTLS) to support TLS 1.3 receive offload.
  - Add support for TCP Fast Open (RFC7413) to macOS, Linux, and FreeBSD where
    supported and enabled.
  - Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489)
    to the list of ciphersuites providing Perfect Forward Secrecy as
    required by SECLEVEL &gt;= 3.
  - Add new SSL APIs to aid in efficiently implementing TLS/SSL fingerprinting.
    The SSL_CTRL_GET_IANA_GROUPS control code, exposed as the
    SSL_get0_iana_groups() function-like macro, retrieves the list of
    supported groups sent by the peer.
  - Fixed PEM_write_bio_PKCS8PrivateKey() and PEM_write_bio_PKCS8PrivateKey_nid()
    to make it possible to use empty passphrase strings.
  - The PKCS12_parse() function now supports MAC-less PKCS12 files.
  - Added ASYNC_set_mem_functions() and ASYNC_get_mem_functions() calls to be able
    to change functions used for allocating the memory of asynchronous call stack.
  - Added support for signed BIGNUMs in the OSSL_PARAM APIs.
  - A failure exit code is returned when using the openssl x509 command to check
    certificate attributes and the checks fail.
  - The default SSL/TLS security level has been changed from 1 to 2. RSA,
    DSA and DH keys of 1024 bits and above and less than 2048 bits and ECC keys
    of 160 bits and above and less than 224 bits were previously accepted by
    default but are now no longer allowed. By default TLS compression was
    already disabled in previous OpenSSL versions. At security level 2 it cannot
    be enabled.
  - The SSL_CTX_set_cipher_list family functions now accept ciphers using their
    IANA standard names.
  - The PVK key derivation function has been moved from b2i_PVK_bio_ex() into
    the legacy crypto provider as an EVP_KDF. Applications requiring this KDF
    will need to load the legacy crypto provider.
  - CCM8 cipher suites in TLS have been downgraded to security level zero
    because they use a short authentication tag which lowers their strength.
  - Subject or issuer names in X.509 objects are now displayed as UTF-8 strings
    by default. Also spaces surrounding '=' in DN output are removed.
  - Add X.509 certificate codeSigning purpose and related checks on key usage and
    extended key usage of the leaf certificate according to the CA/Browser Forum.
  - The 'x509', 'ca', and 'req' apps now produce X.509 v3 certificates.
    The '-x509v1' option of 'req' prefers generation of X.509 v1 certificates.
    'X509_sign()' and 'X509_sign_ctx()' make sure that the certificate has
    X.509 version 3 if the certificate information includes X.509 extensions.
  - Fix and extend certificate handling and the apps 'x509', 'verify' etc.
    such as adding a trace facility for debugging certificate chain building.
  - Various fixes and extensions to the CMP+CRMF implementation and the 'cmp' app
    in particular supporting requests for central key generation, generalized
    polling, and various types of genm/genp exchanges defined in CMP Updates.
  - Fixes and extensions to the HTTP client and to the HTTP server in 'apps/'
    like correcting the TLS and proxy support and adding tracing for debugging.
  - Extended the CMS API for handling 'CMS_SignedData' and 'CMS_EnvelopedData'.
  - 'CMS_add0_cert()' and 'CMS_add1_cert()' no longer throw an error if
    a certificate to be added is already present. 'CMS_sign_ex()' and
    'CMS_sign()' now ignore any duplicate certificates in their 'certs' argument
    and no longer throw an error for them.
  - Added BIO_s_dgram_pair() and BIO_s_dgram_mem() that provide memory-based
    BIOs with datagram semantics and support for BIO_sendmmsg() and BIO_recvmmsg()
    calls. They can be used as the transport BIOs for QUIC.
  - Add new BIO_sendmmsg() and BIO_recvmmsg() BIO methods which allow
    sending and receiving multiple messages in a single call. An implementation
    is provided for BIO_dgram. For further details, see BIO_sendmmsg(3).
  - Support for loading root certificates from the Windows certificate store
    has been added.
  - Enable KTLS with the TLS 1.3 CCM mode ciphersuites. Note that some linux
    kernel versions that support KTLS have a known bug in CCM processing. That
    has been fixed in stable releases starting from 5.4.164, 5.10.84, 5.15.7,
    and all releases since 5.16. KTLS with CCM ciphersuites should be only used
    on these releases.
  - Added '-ktls' option to 's_server' and 's_client' commands to enable the
    KTLS support.
  - Zerocopy KTLS sendfile() support on Linux.
  - The OBJ_ calls are now thread safe using a global lock.
  - New parameter '-digest' for openssl cms command allowing signing
    pre-computed digests and new CMS API functions supporting that
    functionality.
  - OPENSSL_malloc() and other allocation functions now raise errors on
    allocation failures. The callers do not need to explicitly raise errors
    unless they want to for tracing purposes.
  - Added support for Brainpool curves in TLS-1.3.
  - Support for Argon2d, Argon2i, Argon2id KDFs has been added along with
    a basic thread pool implementation for select platforms.</changelog>
  <changelog author="pmonreal@suse.com" date="1729857601">- Update to 3.2.1:
  * Changes between 3.2.0 and 3.2.1:
  - A file in PKCS12 format can contain certificates and keys and may come from
    an untrusted source. The PKCS12 specification allows certain fields to be
    NULL, but OpenSSL did not correctly check for this case. [CVE-2024-0727]
  - When function EVP_PKEY_public_check() is called on RSA public keys,
    a computation is done to confirm that the RSA modulus, n, is composite.
    For valid RSA keys, n is a product of two or more large primes and this
    computation completes quickly. However, if n is an overly large prime,
    then this computation would take a long time. [CVE-2023-6237]
  - Restore the encoding of SM2 PrivateKeyInfo and SubjectPublicKeyInfo to
    have the contained AlgorithmIdentifier.algorithm set to id-ecPublicKey
    rather than SM2.
  - The POLY1305 MAC (message authentication code) implementation in OpenSSL
    for PowerPC CPUs saves the contents of vector registers in different
    order than they are restored. [CVE-2023-6129]
  - Disable building QUIC server utility when OpenSSL is configured with 'no-apps'.
  * The openssl-crypto-policies-support.patch has been merged into
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Rename openssl-Disable-default-provider-for-test-suite.patch and rebase to
    openssl-TESTS-Disable-default-provider-crypto-policies.patch
  * Patches removed in the update:
  - openssl-Add_support_for_Windows_CA_certificate_store.patch
  - openssl-ec-56-bit-Limb-Solinas-Strategy-for-secp384r1.patch
  - openssl-ec-Use-static-linkage-on-nistp521-felem_-square-mul-.patch
  - openssl-ec-powerpc64le-Add-asm-implementation-of-felem_-squa.patch
  - openssl-ecc-Remove-extraneous-parentheses-in-secp384r1.patch
  - openssl-powerpc-ecc-Fix-stack-allocation-secp384r1-asm.patch
  - openssl-CVE-2024-41996.patch
  - openssl-CVE-2023-50782.patch
  - openssl-CVE-2024-9143.patch
  * Patches rebased:
  - openssl-3-use-include-directive.patch
  - openssl-Add-Kernel-FIPS-mode-flag-support.patch
  - openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  - openssl-DEFAULT_SUSE_cipher.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Force-FIPS.patch
  - openssl-load-legacy-provider.patch
  - openssl-no-html-docs.patch
  - openssl-pkgconfig.patch
  - openssl-ppc64-config.patch
  - openssl-truststore.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116800">- Remove the hardcoded DEFAULT_SUSE cipherlist selection.
  * Remove openssl-DEFAULT_SUSE_cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1730116801">- Update to 3.2.3:
  * Changes between 3.2.2 and 3.2.3:
  - Fixed possible denial of service in X.509 name checks. [CVE-2024-6119]
  - Fixed possible buffer overread in SSL_select_next_proto(). [CVE-2024-5535]
  * Changes between 3.2.1 and 3.2.2:
  - Fixed potential use after free after SSL_free_buffers() is called. [CVE-2024-4741]
  - Fixed an issue where checking excessively long DSA keys or parameters may
    be very slow. [CVE-2024-4603]
  - Improved EC/DSA nonce generation routines to avoid bias and timing
    side channel leaks.
  - Fixed an issue where some non-default TLS server configurations can cause
    unbounded memory growth when processing TLSv1.3 sessions. [CVE-2024-2511]
  - New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded. This can be used on platforms
    where using atexit() from shared libraries causes crashes on exit.
  - Fixed bug where SSL_export_keying_material() could not be used with QUIC
    connections.
  * Add openssl-skip-quic-pairwise.patch to adapt the pairwise tests.
  * Merge openssl-FIPS-release_num_in_version_string.patch into
    openssl-FIPS-services-minimize.patch
  * Rebase patches:
  - openssl-Add-changes-to-ectest-and-eccurve.patch
  - openssl-FIPS-140-3-keychecks.patch
  - openssl-FIPS-embed-hmac.patch
  - openssl-Remove-EC-curves.patch
  - openssl-skipped-tests-EC-curves.patch
  - openssl-FIPS-early-KATS.patch
  - openssl-Allow-disabling-of-SHA1-signatures.patch
  - openssl-3-FIPS-Deny-SHA-1-sigver-in-FIPS-provider.patch
  - openssl-FIPS-limit-rsa-encrypt.patch
  - openssl-FIPS-Use-OAEP-in-KATs-support-fixed-OAEP-seed.patch
  - openssl-FIPS-Use-digest_sign-digest_verify-in-self-test.patch
  - openssl-FIPS-140-3-DRBG.patch
  - openssl-FIPS-140-3-zeroization.patch
  - openssl-Add-FIPS-indicator-parameter-to-HKDF.patch
  - openssl-FIPS-Remove-X9.31-padding-from-FIPS-prov.patch
  - openssl-FIPS-Add-explicit-indicator-for-key-length.patch
  - openssl-pbkdf2-Set-minimum-password-length-of-8-bytes.patch
  - openssl-FIPS-signature-Add-indicator-for-PSS-salt-length.patch
  - openssl-3-FIPS-GCM-Implement-explicit-indicator-for-IV-gen.patch
  - openssl-FIPS-enforce-EMS-support.patch
  - openssl-3-jitterentropy-3.4.0.patch
  - openssl-3-use-include-directive.patch
  * Remove not needed patches:
  - openssl-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch
  - openssl-3-FIPS-PCT_rsa_keygen.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730462400">- Support MSA 12 SHA3 on s390x [jsc#PED-10280]
  * Add openssl-3-add_EVP_DigestSqueeze_api.patch
  * Add openssl-3-support-multiple-sha3_squeeze_s390x.patch
  * Add openssl-3-add-xof-state-handling-s3_absorb.patch
  * Add openssl-3-fix-state-handling-sha3_absorb_s390x.patch
  * Add openssl-3-fix-state-handling-sha3_final_s390x.patch
  * Add openssl-3-fix-state-handling-shake_final_s390x.patch
  * Add openssl-3-fix-state-handling-keccak_final_s390x.patch
  * Add openssl-3-support-EVP_DigestSqueeze-in-digest-prov-s390x.patch
  * Add openssl-3-add-defines-CPACF-funcs.patch
  * Add openssl-3-add-hw-acceleration-hmac.patch
  * Add openssl-3-support-CPACF-sha3-shake-perf-improvement.patch
  * Add openssl-3-fix-s390x_sha3_absorb.patch
  * Add openssl-3-fix-s390x_shake_squeeze.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808000">- Support MSA 10 XTS on s390x [jsc#PED-10273]
  * s390x: Add hardware acceleration for full AES-XTS
  * Add openssl-3-hw-acceleration-aes-xts-s390x.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730808001">- Support MSA 11 HMAC on s390x [jsc#PED-10274]
  * Add openssl-3-disable-hmac-hw-acceleration-with-engine-digest.patch
  * Add openssl-3-fix-hmac-digest-detection-s390x.patch
  * Add openssl-3-fix-memleak-s390x_HMAC_CTX_copy.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1730980800">- Add missing fixes for SHA3_squeeze and quic_multistream_test on
  pcc64 arch. [jsc#PED-10280]
  * Added openssl-3-fix-sha3-squeeze-ppc64.patch
  * Added openssl-3-fix-quic_multistream_test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1731412800">- Do not use HASHBANGPERL to avoid introducing a dependency on the
  perl-base package. [bsc#1233235]</changelog>
  <changelog author="pmonreal@suse.com" date="1734436800">- Fix evp_properties section in the openssl.cnf file [bsc#1234647]
  * Rebase patches:
  - openssl-3-use-include-directive.patch
  - openssl-TESTS-Disable-default-provider-crypto-policies.patch</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1734955200">- Add support for userspace livepatching on ppc64le (jsc#PED-11850).
- Use gcc-13 for ppc64le.</changelog>
  <changelog author="lucas.mulling@suse.com" date="1738238400">- Security fix: [bsc#1236136, CVE-2024-13176]
  * Fix timing side-channel in ECDSA signature computation
  * Add openssl-CVE-2024-13176.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1739361600">- Security fix: [bsc#1236599, CVE-2024-12797]
  * RFC7250 handshakes with unauthenticated servers don't abort as
    expected.
  * Add openssl-CVE-2024-12797.patch</changelog>
  <changelog author="angel.yankov@suse.com" date="1746014400">- Security fix: [bsc#1240366]
  * Minerva side channel vulnerability in P-384 on PPC arch
  * Add openssl-3-p384-minerva-ppc.patch
  * Add openssl-3-p384-minerva-ppc-p9.patch</changelog>
</package>
<package pkgid="c3968a49d08321c2000a4036a29b260181d90b82310c1a37808366227b7933ea" name="openucx" arch="src">
  <version epoch="0" ver="1.17.0" rel="150700.4.2.7"/>
  <changelog author="jengelh@inai.de" date="1570190400">- Ensure /usr/lib/ucx is owned at all times.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1591272000">- Update to v1.8.0
  - Features:
  - Improved detection for DEVX support
  - Improved TCP scalability
  - Added support for ROCM to perftest
  - Added support for different source and target memory types to perftest
  - Added optimized memcpy for ROCM devices
  - Added hardware tag-matching for CUDA buffers
  - Added support for CUDA and ROCM managed memories
  - Added support for client/server disconnect protocol over rdma connection manager
  - Added support for striding receive queue for hardware tag-matching
  - Added XPMEM-based rendezvous protocol for shared memory
  - Added support shared memory communication between containers on same machine
  - Added support for multi-threaded RDMA memory registration for large regions
  - Added new test cases to Azure CI
  - Added support for multiple listening transports
  - Added UCT socket-based connection manager transport
  - Updated API for UCT component management
  - Added API to retrieve the listening port
  - Added UCP active message API
  - Removed deprecated API for querying UCT memory domains
  - Refactored server/client examples
  - Added support for dlopen interception in UCM
  - Added support for PCIe atomics
  - Updated Java API: added support for most of UCP layer operations
  - Updated support for Mellanox DevX API
  - Added multiple UCT/TCP transport performance optimizations
  - Optimized memcpy() for Intel platforms
  - Added protection from non-UCX socket based app connections
  - Improved search time for PKEY object
  - Enabled gtest over IPv6 interfaces
  - Updated Mellanox and Bull device IDs
  - Added support for CUDA_VISIBLE_DEVICES
  - Increased limits for CUDA IPC registration
  - Bugfixes:
  - Multiple fixes in JUCX
  - Fixes in UCP thread safety
  - Fixes for most recent versions GCC, PGI, and ICC
  - Fixes for CPU affinity on Azure instances
  - Fixes in XPMEM support on PPC64
  - Performance fixes in CUDA IPC
  - Fixes in RDMA CM flows
  - Multiple fixes in TCP transport
  - Multiple fixes in documentation
  - Fixes in transport lane selection logic
  - Fixes in Java jar build
  - Fixes in socket connection manager for Nvidia DGX-2 platform
  - Multiple fixes in UCP, UCT, UCM libraries
  - Multiple fixes for BSD and Mac OS systems
  - Fixes for Clang compiler
  - Fix CPU optimization configuration options
  - Fix JUCX build on GPU nodes
  - Fix in Azure release pipeline flow
  - Fix in CUDA memory hooks management
  - Fix in GPU memory peer direct gtest
  - Fix in TCP connection establishment flow
  - Fix in GPU IPC check
  - Fix in CUDA Jenkins test flow
  - Multiple fixes in CUDA IPC flow
  - Fix adding missing header files
  - Fix to prevent failures in presence of VPN enabled Ethernet interfaces
- Refresh openucx-s390x-support.patch against new version</changelog>
  <changelog author="jengelh@inai.de" date="1591358400">- Trim bias and filler wording from descriptions.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1594641600">- Update to v1.8.1
  - Features:
  - Added binary release pipeline in Azure CI
  - Bugfixes:
  - Multiple fixes in testing environment
  - Fixes in InfiniBand DEVX transport
  - Fixes in memory management for CUDA IPC transport
  - Fixes for binutils 2.34+
  - Fixes for AMD ROCM build environment</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1601899200">- Update to v1.9.0 (jsc#SLE-15163)
  - Features:
  - Added a new class of communication APIs '*_nbx' that enable API extendability while
  - preserving ABI backward compatibility
  - Added asynchronous event support to UCT/IB/DEVX
  - Added support for latest CUDA library version
  - Added NAK-based reliability protocol for UCT/IB/UD to optimize resends
  - Added new tests for ROCm
  - Added new configuration parameters for protocol selection
  - Added performance optimization for Fujitsu A64FX with InfiniBand
  - Added performance optimization for clear cache code aarch64
  - Added support for relaxed-order PCIe access in IB RDMA transports
  - Added new TCP connection manager
  - Added support for UCT/IB PKey with partial membership in IB transports
  - Added support for RoCE LAG
  - Added support for ROCm 3.7 and above
  - Added flow control for RDMA read operations
  - Improved endpoint flush implementation for UCT/IB
  - Improved UD timer to avoid interrupting the main thread when not in use
  - Improved latency estimation for network path with CUDA
  - Improved error reporting messages
  - Improved performance in active message flow (removed malloc call)
  - Improved performance in ptr_array flow
  - Improved performance in UCT/SM progress engine flow
  - Improved I/O demo code
  - Improved rendezvous protocol for CUDA
  - Updated examples code
  - Bugfixes:
  - Fixes for most resent versions of GCC, CLANG, ARMCLANG, PGI
  - Fixes in UCT/IB for strict order keys
  - Fixes in memory barrier code for aarch64
  - Fixes in UCT/IB/DEVX for fork system call
  - Fixes in UCT/IB for rand() call in rdma-core
  - Fixed in group rescheduling for UCT/IB/DC
  - Fixes in UCT/CUDA bandwidth reporting
  - Fixes in rkey_ptr protocol
  - Fixes in lane selection for rendezvous protocol based on get-zero-copy flow
  - Fixes for ROCm build
  - Fixes for XPMEM transport
  - Fixes in closing endpoint code
  - Fixes in RDMACM code
  - Fixes in memcpy selection for AMD
  - Fixed in UCT/UD endpoint flush functionality
  - Fixes in XPMEM detection
  - Fixes in rendezvous staging protocol
  - Fixes in ROCEv1 mlx5 UDP source port configuration
  - Multiple fixes in RPM spec file
  - Multiple fixes in UCP documentation
  - Multiple fixes in socket connection manager
  - Multiple fixes in gtest
  - Multiple fixes in JAVA API implementation
- Refresh openucx-s390x-support.patch against new version</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1614168000">- Update openucx-s390x-support.patch to fix mmap syscall on s390x (bsc#1182691)
  - Core:
  - Added support for UCX monitoring using virtual file system (VFS)/FUSE
  - Added support for applications with static CUDA runtime linking
  - Added support for a configuration file
  - Updated clang format configuration
  - UCP
  - Added rendezvous API for active messages
  - Added user-defined name to context, worker, and endpoint objects
  - Added flag to silence request leak check
  - Added API for endpoint performance evaluation
  - Added API - ucp_request_query
  - Added API - ucp_lib_query
  - Added bandwidth optimizations for new protocols multi-lane
  - Added support for multi-rail over lanes with BW ratio &gt;= 1/4
  - Added support for tracking outstanding requests and aborting those in case of connection failure
  - Refactored keep-alive protocol
  - Added device id to wireup protocol
  - Added support up to 128 transport layer resources in UCP context
  - Added support CUDA memory allocations with ucp_mem_map
  - Increased UCP_WORKER_MAX_EP_CONFIG to 64
  - Adjusted memory type zcopy threshold when UCX_ZCOPY_THRESH set
  - Refactored wireup protocols, rendezvous, get, zcopy protocols
  - Added put zcopy multi-rail
  - Improved logging for new protocols
  - Added system topology information
  - Added new protocols for eager offload protocols
  - UCT
  - Extended connection establishment API
  - Added active message AM alignment in iface params
  - Added active message short IOV API.
  - Added support for interface query by operation and memory type
  - Added API to get allocation base address and length
  - Added md_dereg_v2 API
  - UCS
  - Added log filter by source file name.
  - Added checking for last element in fraglist queue
  - Added a method to get IP address from sockaddr.
  - Added memory usage limits to registration cache
  - RDMA CORE (IB, ROCE, etc.)
  - Added report of QP info in case of completion with error
  - Refactored of FC send operations
  - Added support for  DevX unique QPN allocation
  - Optimized endpoint lookup for  DCI
  - Added support for RDMA sub-function (SF)
  - Added support for DCI via DEVX
  - Added DCI pool per LAG port
  - Added support  for RoCE IP reachability check using a subnet mask
  - Added active message short IOV for UD/DC/RC mlx, UD/RC verbs
  - Added endpoint keep alive check for UD
  - Suppressed warning if device can't be opened
  - Added support for multiple flush cancel without completion
  - Added ignore for devices with invalid GID
  - Added support for SRQ linked list reordering
  - Added flush by flow control on old devices
  - Added support for configurable rdma_resolve_addr/route timeout
  - Shared memory
  - Added active message short IOV support for posix, sysv, and self transports
  - TCP
  - Added support for peer failure in case of CONNECT_TO_EP
  - Added support for active message short IOV
  - See NEWS for a complete changelog and bug fixes
- Refresh openucx-s390x-support against latest sources</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1632398400">- Update to v1.11.1 (jsc#SLE-19260)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1642075200">- Fix UCM bistro support on non s390x archs
- Add ucm-fix-UCX_MEM_MALLOC_RELOC.patch to disable malloc relocations by default (bsc#1194369)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1664280000">- Update to v1.13.1 (jsc#PED-912)
  - Core
  - Added new objects to VFS: local and remote address of endpoint,
    statistics of ucp_ep_create success/failure, failed/destroyed endpoints
  - Added support for UCX static libraries
  - Added profiling for rkey management routines
  - PCIe relaxed order enabled by default for AMD CPUs
  - Fixed not deallocating memory from ucp_mem_unmap if no rcache
  - Fixed versioning infrastructure
  - Multiple code improvements: refactoring, debug prints and assertions, etc.
  - Multiple improvements in build, test and docs infrastructure
  - Added new objects to VFS (md, component, log_level, etc.)
  - Added configuration variable to specify which loadable modules are allowed
  - Added build-time configuration to disable sigaction overriding
  - UCP
  - Added API to pass pre-registered memory handle to UCP operations
  - Added implementation of AM rendezvous protocol
  - Added 2-stage pipeline rendezvous protocol for GPU
  - Added support for fragment mem_type for v1 pipeline proto, disabled by default
  - Added active message support for proto v2
  - Added UCP memory registration cache
  - Improved adaptive progress - deactivate iface when all p2p lanes are destroyed
  - Added support for user memh in proto_v1
  - Added support for selecting local address when creating a client endpoint
  - Added option to limit GPUDirectRDMA size in rendezvous protocol, UCX_RNDV_MEMTYPE_DIRECT_SIZE
  - Deprecated UCX_SOCKADDR_AUX_TLS configuration parameter
  - Resolving remote EP ID when creating local EP disabled by default
  - Added client_id to ucp_worker_create() and ucp_conn_request_query() APIs
  - Added ucp_worker_address_query() API
  - Updated ucp_ep_query() API for getting local and remote addresses
  - Added address versioning to correctly preserve wire compatibility starting from version 1.11.0
  - Added new client/server connection establishment packet header format
  - Enabled rendezvous and tag sync protocols when error handling is enabled on the endpoint
  - Added iov zcopy support to RMA operations
  - Reduced memory usage of unexpected messages by fitting receive buffer size to packet size
  - Added support for modifying UCT and UCS configs by ucp_config_modify() API
  - Optimized unpacked rkeys memory consumption
  - Added request flag to influence latency vs. bandwidth protocol
  - Reduced memory management overhead with new protocols
  - Improved performance calculations for new protocols
  - Added AMO support with GPU memory target using new protocols
  - Added put_zcopy, get_zcopy and pipeline based rendezvous in new protocols
  - Added support for user-defined alignment in Active Messages
  - Added support for offload tag sync in new protocols
  - Updated ucp_atomic_post() to use NBX flow
  - UCT
  - Introduced API uct_md_mkey_pack_v2
  - Introduced UCT iface features API
  - Introduced max_inflight_eps parameter in perf_attr API
  - Introduced UCT_SEND_FLAG_PEER_CHECK flag that forces checking connectivity to a peer
  - Introduced UCX_RCACHE_PURGE_ON_FORK to enable/disable cleaning regions when application is forking
  - Disabled PEER_FAILURE capability for XPMEM
  - Added API - uct_iface_is_reachable_v2()
  - Added IPv6 address support in TCP
  - Added latency estimation to uct_iface_estimate_perf()
  - Adjusted knem and cma overhead cost
  - Increased built-in TCP keep-alive interval to 2 seconds
  - RDMA CORE (IB, ROCE, etc.)
  - Introduced NDR autorecognition
  - Introduced CQE zipping support
  - Set the default MAX_RD_ATOMIC to maximum value supported by the hardware
  - Disabled mlx5 ifaces on verbs MD
  - Added detection of IB NDR devices
  - Added check for CQ overrun in assert mode
  - Added bitmap usage for releasing detached DCIs
  - Added configuration for requests ack frequency with DevX
  - Added remote QP info to tx error CQE traces
  - ROCM
  - Increased maximum number of HSA agents
  - UCS
  - Added topo module infrastructure
  - Added memtrack and rcache information to VFS
  - Added API for a per-process aggregate-sum statistics report
  - Added memory pool set data structure
  - Added new ptr_array API for bulk allocation
  - Added ucs_string_buffer_append_flags() for string buffer
  - Added ucs_ffs32()
  - Added ucs_vsnprintf_safe() which always adds '\0'
  - Added thread-safe put to ptr_map
  - Improved accuracy of the topology distance estimation
  - Added prints of leaked callbacks from the callback queue
  - Removed a diagnostic message when fuse thread is stopped
  - Added configurable limit for the memory consumed by rcache
  - Added configuration for VFS(FUSE) thread affinity
  - Added memory limit support to memtrack
  - Packaging
  - Added cmake config files for better integration with external cmake based projects
  - Tools
  - Added loop-back transport support in ucx_perftest
  - Split ucx_perftest into separate modules
  - Added process placement option for ucx_info
  - Extended parameters correctness check in ucx_perftest
- Backported UCS-DEBUG-replace-PTR-with-void.patch
  from upstream to fix compilation</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1664884800">- Update openucx-s390x-support.patch to add missing ucs_ffs32 on s390x
- Drop baselibs.conf as openucx only works on 64b systems</changelog>
  <changelog author="schwab@suse.de" date="1673870400">- openucx-s390x-support.patch: fix use of clz builtin for 64-bit value</changelog>
  <changelog author="mliska@suse.cz" date="1678104000">- Add upstream gcc13-fix.patch fix.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1679313600">- Update to v1.14.0
  - UCP
  - Added API for querying transport and device names on endpoint
  - Added API for querying datatype object
  - Added API for exporting and importing memory keys (no implementation yet)
  - Added support for non-persistent active message header
  - Added infrastructure to print protocols v2 performance
  - Multiple performance improvements for protocols v2
  - Added support for non-contiguous datatypes for rendezvous protocols v2
  - Added support for reset and abort request in protocols v2
  - Added support for user memory handles in RMA API
  - Added multi-rail support for RMA API in protocols v2
  - Added support for up to 16 different lanes per endpoint
  - Added support for dmabuf memory registration in protocols v2
  - Added strong fence mode for ucp_worker_fence() API
  - UCT
  - Added new uct_md_mem_attach() API to support exported memory handles
  - Added remote completion mode for endpoint flush (via new flag)
  - Added support for dmabuf registration
  - Added new uct_ep_connect_to_ep_v2() API
  - Added new uct_mem_reg_v2() API
  - Added new uct_md_query_v2() API
  - Added support for IPv6 loopback address in TCP transport
  - RDMA CORE (IB, ROCE, etc.)
  - Added ECE (enhanced connection establishment) support for RC and DC transports
  - Added support for hardware DCS in DC transport
  - Added UD interface and endpoint resource information to VFS
  - Added CQ creation via DEVX API
  - Removed support for accelerated IB transports over legacy experimental verbs
  - UCS
  - Added support for auto-correction of user environment variables
  - UCM
  - Implemented CUDA bistro hooks for aarch64 (to enable memory cache on this platform)
  - Added support for CUDA virtual/stream-ordered memory with cudaMallocAsync
  - Documentation
  - Added FAQ for using pkg-config tool to build applications with UCX
  - Tools
  - Added runtime library version to the 'ucx_info -v' output
  - Added support for memory types in ucx_info
  - Many bugfixes. See NEWS.
- Drop patch merged upstream:
  - UCS-DEBUG-replace-PTR-with-void.patch
  - gcc13-fix.patch
- Refresh openucx-s390x-support.patch</changelog>
  <changelog author="nicolas.morey@suse.com" date="1690286400">- Update to v1.14.1
  - Fixed ROCm to prevent the locking of host pinned memory
  - Added CUDA 12 based UCX builds to the release flow
  - Increased the maximal number of endpoint configurations
  - Fixed filter for a slow-lanes in selection logic
  - Fixed TCP transport bandwidth calculation
  - Fixed device detection for ROCM
  - Fixed compatibility with CUDA 12
  - Fixed rendezvous threshold for multi-path configurations
  - Fixed error message in case of static link
  - Fixed BlueField-3 detection
  - Multiple fixes for Azure CI pipeline</changelog>
  <changelog author="nicolas.morey@suse.com" date="1696248000">- Update to 1.15.0
  - UCP
  - Added 2-stage pipeline protocol in the new protocol infrastructure
  - Added reset and abort functionality of rendezvous protocols in the
    new infrastructure
  - Added zero-copy rendezvous data send protocol in the new infrastructure
  - Added support for user memory handle in the new protocol infrastructure
  - Added option to force ODP registration for certain memory types
  - Enabled lock free memory region deregistration
  - Updated allow/deny transport list feature to control auxiliary transport selection
  - Multiple performance improvements of the new protocol infrastructure
  - Multiple improvements in error and debug messages
  - Fixed assertion when sending from non-contiguous GPU buffer to managed buffer
  - Fixed the race condition on endpoint configurations
  - Fixed endpoint reconfiguration issues due to asymmetrical selection
  - Fixed endpoint reconfiguration error due to wrong locality detection
  - Fixed crash during connection manager cleanup
  - Fixed rkey index calculation for rendezvous protocol
  - Fixed rcache dump function
  - Removed logging from rkey unpack in release mode
  - Fixed dobule free of rkey in rendezvous protocol
  - Fixed rendezvous pipeline protocol error flow
  - Fixed error handling in rendezvous get zcopy protocol
  - Replay pending requests of wireup EP CM during connection establishment
    to prevent potential ordering issues and wrong configuration
  - Pass user-provided memory type to the function that checks whether the buffer
    can be sent inline or not
  - Avoid memory registration during UCP context initialization
  - Fixed CPU/device atomics selection in the new protocol infrastructure
  - Multiple fixes in the new protocol infrastructure information output
  - UCT
  - Split UCT_MD_MKEY_PACK_FLAG_INVALIDATE into two flags for RMA and AMO
  - Added put_zcopy and get_zcopy scheme support for self transport
  - Added base implementation of is_reachable_v2 API using intra/inter flag
  - Introduced MD capability for non-blocking registration memory types
  - Added check for dmabuf kernel support in ROCm memory domain
  - Fixed exported memh packing
  - Fixed an error in checking return status of multi-threaded memory
    registration function
  - RDMA CORE (IB, ROCE, etc.)
  - Added implementation of is_reachable_v2 routine to IB interface
  - Added option to control CQE zipping per CQ RX/TX direction
  - Added option to specify how DCI selects port under RoCE LAG
  - Added hw_dcs to the list of policies to select DCI by an endpoint
  - Removed implicit on-demand paging
  - Added option to set RoCE lag dct port for response under queue affinity mode
  - Improved IB memlock limit logging
  - Fixed dma-buf based memory region registration
  - Fixed memory handle data corruption when PCIe relaxed ordering is enabled
  - Fixed performance degradation when indirect atomic key is not supported
    by the hardware
  - Fixed remote access error to strict-order keys because of wrong offset
  - Added check for UAR support to memory domain opening
  - Fixed updating port counters for devx qp
  - Fixed ibv_create_cq error message on node without Infiniband
  - Fixed performance degradation due to using 2 paths on NDR400 by default
  - Removed unnecessary async lock which otherwise would block UD progress
  - UCS
  - Added ucs_string_buffer_rbrk() to split token
  - Fixed lane selection and added bandwidth estimation for Sapphire Rapids family
  - Fixed displaying wrong environment variable suggestions
  - Fixed VFS warning output
  - Fixed SEGV in ucs_debug_backtrace_next(), upon previous SEGV handling,
    due to ENOMEM situation
  - Fixed memory corruption when using UCX_MPOOL_FIFO=y
  - UCM
  - Fixed conditional jump patching
  - Fixed mremap() override
  - Tests
  - Added a rocm docker container for testing
  - Added option to send client_id in iodemo test
  - Added support for multiple connections to the same server in iodemo test
  - Added synchronization before exit to hello world examples
  - Fixed wrong usage of ep_close in examples
  - Tools
  - Added user-side memcpy option for AM benchmarks in ucx_perftest
  - Added wireshark LUA dissectors for some UCX protocols
  - Fixed memory access flags in perftest
  - Removed support for librte from perf
  - Fixed worker flush deadlock when using multiple workers in ucx_perftest
  - Build
  - Added support for binutils 2.40
  - Added versioned dependency to switch between packages with the same names
  - Added a separate xpmem deb subpackage
  - Added aarch64 support to the binary distribution pipeline
  - Removed dependency on libnuma
  - Documentation
  - Updated ucp_worker_release_address description
- Refresh openucx-s390x-support.patch against latest souces</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1719403200">- Update to 1.17.0
  - See NEWS for the complete CHANGELOG
- Refresh openucx-s390x-support.patch against the latest sources
- Add upstream fix UCS-TIME-Add-math.h-to-provide-INFINITY.patch
  to fix compilation on ppc64</changelog>
  <changelog author="schwab@suse.de" date="1719662400">- Enable build on riscv64</changelog>
  <changelog author="nicolas.morey@suse.com" date="1725710400">- Refresh openucx-s390x-support.patch to fix compilation on s390x</changelog>
  <changelog author="nicolas.morey@suse.com" date="1743508800">- Add UCT-IB-UD-Use-GRH-to-detect-address-family-on-non-Mellanox-hardware.patch
  to fix an UD init issue on non-Mellanox RDMA HW (bsc#1240204)</changelog>
</package>
<package pkgid="b1af5ec8963143e63cc7c1ecbe436ed1f225622488d3e8353762c2feddba4979" name="openucx-tools" arch="x86_64">
  <version epoch="0" ver="1.17.0" rel="150700.4.2.7"/>
  <changelog author="jengelh@inai.de" date="1570190400">- Ensure /usr/lib/ucx is owned at all times.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1591272000">- Update to v1.8.0
  - Features:
  - Improved detection for DEVX support
  - Improved TCP scalability
  - Added support for ROCM to perftest
  - Added support for different source and target memory types to perftest
  - Added optimized memcpy for ROCM devices
  - Added hardware tag-matching for CUDA buffers
  - Added support for CUDA and ROCM managed memories
  - Added support for client/server disconnect protocol over rdma connection manager
  - Added support for striding receive queue for hardware tag-matching
  - Added XPMEM-based rendezvous protocol for shared memory
  - Added support shared memory communication between containers on same machine
  - Added support for multi-threaded RDMA memory registration for large regions
  - Added new test cases to Azure CI
  - Added support for multiple listening transports
  - Added UCT socket-based connection manager transport
  - Updated API for UCT component management
  - Added API to retrieve the listening port
  - Added UCP active message API
  - Removed deprecated API for querying UCT memory domains
  - Refactored server/client examples
  - Added support for dlopen interception in UCM
  - Added support for PCIe atomics
  - Updated Java API: added support for most of UCP layer operations
  - Updated support for Mellanox DevX API
  - Added multiple UCT/TCP transport performance optimizations
  - Optimized memcpy() for Intel platforms
  - Added protection from non-UCX socket based app connections
  - Improved search time for PKEY object
  - Enabled gtest over IPv6 interfaces
  - Updated Mellanox and Bull device IDs
  - Added support for CUDA_VISIBLE_DEVICES
  - Increased limits for CUDA IPC registration
  - Bugfixes:
  - Multiple fixes in JUCX
  - Fixes in UCP thread safety
  - Fixes for most recent versions GCC, PGI, and ICC
  - Fixes for CPU affinity on Azure instances
  - Fixes in XPMEM support on PPC64
  - Performance fixes in CUDA IPC
  - Fixes in RDMA CM flows
  - Multiple fixes in TCP transport
  - Multiple fixes in documentation
  - Fixes in transport lane selection logic
  - Fixes in Java jar build
  - Fixes in socket connection manager for Nvidia DGX-2 platform
  - Multiple fixes in UCP, UCT, UCM libraries
  - Multiple fixes for BSD and Mac OS systems
  - Fixes for Clang compiler
  - Fix CPU optimization configuration options
  - Fix JUCX build on GPU nodes
  - Fix in Azure release pipeline flow
  - Fix in CUDA memory hooks management
  - Fix in GPU memory peer direct gtest
  - Fix in TCP connection establishment flow
  - Fix in GPU IPC check
  - Fix in CUDA Jenkins test flow
  - Multiple fixes in CUDA IPC flow
  - Fix adding missing header files
  - Fix to prevent failures in presence of VPN enabled Ethernet interfaces
- Refresh openucx-s390x-support.patch against new version</changelog>
  <changelog author="jengelh@inai.de" date="1591358400">- Trim bias and filler wording from descriptions.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1594641600">- Update to v1.8.1
  - Features:
  - Added binary release pipeline in Azure CI
  - Bugfixes:
  - Multiple fixes in testing environment
  - Fixes in InfiniBand DEVX transport
  - Fixes in memory management for CUDA IPC transport
  - Fixes for binutils 2.34+
  - Fixes for AMD ROCM build environment</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1601899200">- Update to v1.9.0 (jsc#SLE-15163)
  - Features:
  - Added a new class of communication APIs '*_nbx' that enable API extendability while
  - preserving ABI backward compatibility
  - Added asynchronous event support to UCT/IB/DEVX
  - Added support for latest CUDA library version
  - Added NAK-based reliability protocol for UCT/IB/UD to optimize resends
  - Added new tests for ROCm
  - Added new configuration parameters for protocol selection
  - Added performance optimization for Fujitsu A64FX with InfiniBand
  - Added performance optimization for clear cache code aarch64
  - Added support for relaxed-order PCIe access in IB RDMA transports
  - Added new TCP connection manager
  - Added support for UCT/IB PKey with partial membership in IB transports
  - Added support for RoCE LAG
  - Added support for ROCm 3.7 and above
  - Added flow control for RDMA read operations
  - Improved endpoint flush implementation for UCT/IB
  - Improved UD timer to avoid interrupting the main thread when not in use
  - Improved latency estimation for network path with CUDA
  - Improved error reporting messages
  - Improved performance in active message flow (removed malloc call)
  - Improved performance in ptr_array flow
  - Improved performance in UCT/SM progress engine flow
  - Improved I/O demo code
  - Improved rendezvous protocol for CUDA
  - Updated examples code
  - Bugfixes:
  - Fixes for most resent versions of GCC, CLANG, ARMCLANG, PGI
  - Fixes in UCT/IB for strict order keys
  - Fixes in memory barrier code for aarch64
  - Fixes in UCT/IB/DEVX for fork system call
  - Fixes in UCT/IB for rand() call in rdma-core
  - Fixed in group rescheduling for UCT/IB/DC
  - Fixes in UCT/CUDA bandwidth reporting
  - Fixes in rkey_ptr protocol
  - Fixes in lane selection for rendezvous protocol based on get-zero-copy flow
  - Fixes for ROCm build
  - Fixes for XPMEM transport
  - Fixes in closing endpoint code
  - Fixes in RDMACM code
  - Fixes in memcpy selection for AMD
  - Fixed in UCT/UD endpoint flush functionality
  - Fixes in XPMEM detection
  - Fixes in rendezvous staging protocol
  - Fixes in ROCEv1 mlx5 UDP source port configuration
  - Multiple fixes in RPM spec file
  - Multiple fixes in UCP documentation
  - Multiple fixes in socket connection manager
  - Multiple fixes in gtest
  - Multiple fixes in JAVA API implementation
- Refresh openucx-s390x-support.patch against new version</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1614168000">- Update openucx-s390x-support.patch to fix mmap syscall on s390x (bsc#1182691)
  - Core:
  - Added support for UCX monitoring using virtual file system (VFS)/FUSE
  - Added support for applications with static CUDA runtime linking
  - Added support for a configuration file
  - Updated clang format configuration
  - UCP
  - Added rendezvous API for active messages
  - Added user-defined name to context, worker, and endpoint objects
  - Added flag to silence request leak check
  - Added API for endpoint performance evaluation
  - Added API - ucp_request_query
  - Added API - ucp_lib_query
  - Added bandwidth optimizations for new protocols multi-lane
  - Added support for multi-rail over lanes with BW ratio &gt;= 1/4
  - Added support for tracking outstanding requests and aborting those in case of connection failure
  - Refactored keep-alive protocol
  - Added device id to wireup protocol
  - Added support up to 128 transport layer resources in UCP context
  - Added support CUDA memory allocations with ucp_mem_map
  - Increased UCP_WORKER_MAX_EP_CONFIG to 64
  - Adjusted memory type zcopy threshold when UCX_ZCOPY_THRESH set
  - Refactored wireup protocols, rendezvous, get, zcopy protocols
  - Added put zcopy multi-rail
  - Improved logging for new protocols
  - Added system topology information
  - Added new protocols for eager offload protocols
  - UCT
  - Extended connection establishment API
  - Added active message AM alignment in iface params
  - Added active message short IOV API.
  - Added support for interface query by operation and memory type
  - Added API to get allocation base address and length
  - Added md_dereg_v2 API
  - UCS
  - Added log filter by source file name.
  - Added checking for last element in fraglist queue
  - Added a method to get IP address from sockaddr.
  - Added memory usage limits to registration cache
  - RDMA CORE (IB, ROCE, etc.)
  - Added report of QP info in case of completion with error
  - Refactored of FC send operations
  - Added support for  DevX unique QPN allocation
  - Optimized endpoint lookup for  DCI
  - Added support for RDMA sub-function (SF)
  - Added support for DCI via DEVX
  - Added DCI pool per LAG port
  - Added support  for RoCE IP reachability check using a subnet mask
  - Added active message short IOV for UD/DC/RC mlx, UD/RC verbs
  - Added endpoint keep alive check for UD
  - Suppressed warning if device can't be opened
  - Added support for multiple flush cancel without completion
  - Added ignore for devices with invalid GID
  - Added support for SRQ linked list reordering
  - Added flush by flow control on old devices
  - Added support for configurable rdma_resolve_addr/route timeout
  - Shared memory
  - Added active message short IOV support for posix, sysv, and self transports
  - TCP
  - Added support for peer failure in case of CONNECT_TO_EP
  - Added support for active message short IOV
  - See NEWS for a complete changelog and bug fixes
- Refresh openucx-s390x-support against latest sources</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1632398400">- Update to v1.11.1 (jsc#SLE-19260)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1642075200">- Fix UCM bistro support on non s390x archs
- Add ucm-fix-UCX_MEM_MALLOC_RELOC.patch to disable malloc relocations by default (bsc#1194369)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1664280000">- Update to v1.13.1 (jsc#PED-912)
  - Core
  - Added new objects to VFS: local and remote address of endpoint,
    statistics of ucp_ep_create success/failure, failed/destroyed endpoints
  - Added support for UCX static libraries
  - Added profiling for rkey management routines
  - PCIe relaxed order enabled by default for AMD CPUs
  - Fixed not deallocating memory from ucp_mem_unmap if no rcache
  - Fixed versioning infrastructure
  - Multiple code improvements: refactoring, debug prints and assertions, etc.
  - Multiple improvements in build, test and docs infrastructure
  - Added new objects to VFS (md, component, log_level, etc.)
  - Added configuration variable to specify which loadable modules are allowed
  - Added build-time configuration to disable sigaction overriding
  - UCP
  - Added API to pass pre-registered memory handle to UCP operations
  - Added implementation of AM rendezvous protocol
  - Added 2-stage pipeline rendezvous protocol for GPU
  - Added support for fragment mem_type for v1 pipeline proto, disabled by default
  - Added active message support for proto v2
  - Added UCP memory registration cache
  - Improved adaptive progress - deactivate iface when all p2p lanes are destroyed
  - Added support for user memh in proto_v1
  - Added support for selecting local address when creating a client endpoint
  - Added option to limit GPUDirectRDMA size in rendezvous protocol, UCX_RNDV_MEMTYPE_DIRECT_SIZE
  - Deprecated UCX_SOCKADDR_AUX_TLS configuration parameter
  - Resolving remote EP ID when creating local EP disabled by default
  - Added client_id to ucp_worker_create() and ucp_conn_request_query() APIs
  - Added ucp_worker_address_query() API
  - Updated ucp_ep_query() API for getting local and remote addresses
  - Added address versioning to correctly preserve wire compatibility starting from version 1.11.0
  - Added new client/server connection establishment packet header format
  - Enabled rendezvous and tag sync protocols when error handling is enabled on the endpoint
  - Added iov zcopy support to RMA operations
  - Reduced memory usage of unexpected messages by fitting receive buffer size to packet size
  - Added support for modifying UCT and UCS configs by ucp_config_modify() API
  - Optimized unpacked rkeys memory consumption
  - Added request flag to influence latency vs. bandwidth protocol
  - Reduced memory management overhead with new protocols
  - Improved performance calculations for new protocols
  - Added AMO support with GPU memory target using new protocols
  - Added put_zcopy, get_zcopy and pipeline based rendezvous in new protocols
  - Added support for user-defined alignment in Active Messages
  - Added support for offload tag sync in new protocols
  - Updated ucp_atomic_post() to use NBX flow
  - UCT
  - Introduced API uct_md_mkey_pack_v2
  - Introduced UCT iface features API
  - Introduced max_inflight_eps parameter in perf_attr API
  - Introduced UCT_SEND_FLAG_PEER_CHECK flag that forces checking connectivity to a peer
  - Introduced UCX_RCACHE_PURGE_ON_FORK to enable/disable cleaning regions when application is forking
  - Disabled PEER_FAILURE capability for XPMEM
  - Added API - uct_iface_is_reachable_v2()
  - Added IPv6 address support in TCP
  - Added latency estimation to uct_iface_estimate_perf()
  - Adjusted knem and cma overhead cost
  - Increased built-in TCP keep-alive interval to 2 seconds
  - RDMA CORE (IB, ROCE, etc.)
  - Introduced NDR autorecognition
  - Introduced CQE zipping support
  - Set the default MAX_RD_ATOMIC to maximum value supported by the hardware
  - Disabled mlx5 ifaces on verbs MD
  - Added detection of IB NDR devices
  - Added check for CQ overrun in assert mode
  - Added bitmap usage for releasing detached DCIs
  - Added configuration for requests ack frequency with DevX
  - Added remote QP info to tx error CQE traces
  - ROCM
  - Increased maximum number of HSA agents
  - UCS
  - Added topo module infrastructure
  - Added memtrack and rcache information to VFS
  - Added API for a per-process aggregate-sum statistics report
  - Added memory pool set data structure
  - Added new ptr_array API for bulk allocation
  - Added ucs_string_buffer_append_flags() for string buffer
  - Added ucs_ffs32()
  - Added ucs_vsnprintf_safe() which always adds '\0'
  - Added thread-safe put to ptr_map
  - Improved accuracy of the topology distance estimation
  - Added prints of leaked callbacks from the callback queue
  - Removed a diagnostic message when fuse thread is stopped
  - Added configurable limit for the memory consumed by rcache
  - Added configuration for VFS(FUSE) thread affinity
  - Added memory limit support to memtrack
  - Packaging
  - Added cmake config files for better integration with external cmake based projects
  - Tools
  - Added loop-back transport support in ucx_perftest
  - Split ucx_perftest into separate modules
  - Added process placement option for ucx_info
  - Extended parameters correctness check in ucx_perftest
- Backported UCS-DEBUG-replace-PTR-with-void.patch
  from upstream to fix compilation</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1664884800">- Update openucx-s390x-support.patch to add missing ucs_ffs32 on s390x
- Drop baselibs.conf as openucx only works on 64b systems</changelog>
  <changelog author="schwab@suse.de" date="1673870400">- openucx-s390x-support.patch: fix use of clz builtin for 64-bit value</changelog>
  <changelog author="mliska@suse.cz" date="1678104000">- Add upstream gcc13-fix.patch fix.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1679313600">- Update to v1.14.0
  - UCP
  - Added API for querying transport and device names on endpoint
  - Added API for querying datatype object
  - Added API for exporting and importing memory keys (no implementation yet)
  - Added support for non-persistent active message header
  - Added infrastructure to print protocols v2 performance
  - Multiple performance improvements for protocols v2
  - Added support for non-contiguous datatypes for rendezvous protocols v2
  - Added support for reset and abort request in protocols v2
  - Added support for user memory handles in RMA API
  - Added multi-rail support for RMA API in protocols v2
  - Added support for up to 16 different lanes per endpoint
  - Added support for dmabuf memory registration in protocols v2
  - Added strong fence mode for ucp_worker_fence() API
  - UCT
  - Added new uct_md_mem_attach() API to support exported memory handles
  - Added remote completion mode for endpoint flush (via new flag)
  - Added support for dmabuf registration
  - Added new uct_ep_connect_to_ep_v2() API
  - Added new uct_mem_reg_v2() API
  - Added new uct_md_query_v2() API
  - Added support for IPv6 loopback address in TCP transport
  - RDMA CORE (IB, ROCE, etc.)
  - Added ECE (enhanced connection establishment) support for RC and DC transports
  - Added support for hardware DCS in DC transport
  - Added UD interface and endpoint resource information to VFS
  - Added CQ creation via DEVX API
  - Removed support for accelerated IB transports over legacy experimental verbs
  - UCS
  - Added support for auto-correction of user environment variables
  - UCM
  - Implemented CUDA bistro hooks for aarch64 (to enable memory cache on this platform)
  - Added support for CUDA virtual/stream-ordered memory with cudaMallocAsync
  - Documentation
  - Added FAQ for using pkg-config tool to build applications with UCX
  - Tools
  - Added runtime library version to the 'ucx_info -v' output
  - Added support for memory types in ucx_info
  - Many bugfixes. See NEWS.
- Drop patch merged upstream:
  - UCS-DEBUG-replace-PTR-with-void.patch
  - gcc13-fix.patch
- Refresh openucx-s390x-support.patch</changelog>
  <changelog author="nicolas.morey@suse.com" date="1690286400">- Update to v1.14.1
  - Fixed ROCm to prevent the locking of host pinned memory
  - Added CUDA 12 based UCX builds to the release flow
  - Increased the maximal number of endpoint configurations
  - Fixed filter for a slow-lanes in selection logic
  - Fixed TCP transport bandwidth calculation
  - Fixed device detection for ROCM
  - Fixed compatibility with CUDA 12
  - Fixed rendezvous threshold for multi-path configurations
  - Fixed error message in case of static link
  - Fixed BlueField-3 detection
  - Multiple fixes for Azure CI pipeline</changelog>
  <changelog author="nicolas.morey@suse.com" date="1696248000">- Update to 1.15.0
  - UCP
  - Added 2-stage pipeline protocol in the new protocol infrastructure
  - Added reset and abort functionality of rendezvous protocols in the
    new infrastructure
  - Added zero-copy rendezvous data send protocol in the new infrastructure
  - Added support for user memory handle in the new protocol infrastructure
  - Added option to force ODP registration for certain memory types
  - Enabled lock free memory region deregistration
  - Updated allow/deny transport list feature to control auxiliary transport selection
  - Multiple performance improvements of the new protocol infrastructure
  - Multiple improvements in error and debug messages
  - Fixed assertion when sending from non-contiguous GPU buffer to managed buffer
  - Fixed the race condition on endpoint configurations
  - Fixed endpoint reconfiguration issues due to asymmetrical selection
  - Fixed endpoint reconfiguration error due to wrong locality detection
  - Fixed crash during connection manager cleanup
  - Fixed rkey index calculation for rendezvous protocol
  - Fixed rcache dump function
  - Removed logging from rkey unpack in release mode
  - Fixed dobule free of rkey in rendezvous protocol
  - Fixed rendezvous pipeline protocol error flow
  - Fixed error handling in rendezvous get zcopy protocol
  - Replay pending requests of wireup EP CM during connection establishment
    to prevent potential ordering issues and wrong configuration
  - Pass user-provided memory type to the function that checks whether the buffer
    can be sent inline or not
  - Avoid memory registration during UCP context initialization
  - Fixed CPU/device atomics selection in the new protocol infrastructure
  - Multiple fixes in the new protocol infrastructure information output
  - UCT
  - Split UCT_MD_MKEY_PACK_FLAG_INVALIDATE into two flags for RMA and AMO
  - Added put_zcopy and get_zcopy scheme support for self transport
  - Added base implementation of is_reachable_v2 API using intra/inter flag
  - Introduced MD capability for non-blocking registration memory types
  - Added check for dmabuf kernel support in ROCm memory domain
  - Fixed exported memh packing
  - Fixed an error in checking return status of multi-threaded memory
    registration function
  - RDMA CORE (IB, ROCE, etc.)
  - Added implementation of is_reachable_v2 routine to IB interface
  - Added option to control CQE zipping per CQ RX/TX direction
  - Added option to specify how DCI selects port under RoCE LAG
  - Added hw_dcs to the list of policies to select DCI by an endpoint
  - Removed implicit on-demand paging
  - Added option to set RoCE lag dct port for response under queue affinity mode
  - Improved IB memlock limit logging
  - Fixed dma-buf based memory region registration
  - Fixed memory handle data corruption when PCIe relaxed ordering is enabled
  - Fixed performance degradation when indirect atomic key is not supported
    by the hardware
  - Fixed remote access error to strict-order keys because of wrong offset
  - Added check for UAR support to memory domain opening
  - Fixed updating port counters for devx qp
  - Fixed ibv_create_cq error message on node without Infiniband
  - Fixed performance degradation due to using 2 paths on NDR400 by default
  - Removed unnecessary async lock which otherwise would block UD progress
  - UCS
  - Added ucs_string_buffer_rbrk() to split token
  - Fixed lane selection and added bandwidth estimation for Sapphire Rapids family
  - Fixed displaying wrong environment variable suggestions
  - Fixed VFS warning output
  - Fixed SEGV in ucs_debug_backtrace_next(), upon previous SEGV handling,
    due to ENOMEM situation
  - Fixed memory corruption when using UCX_MPOOL_FIFO=y
  - UCM
  - Fixed conditional jump patching
  - Fixed mremap() override
  - Tests
  - Added a rocm docker container for testing
  - Added option to send client_id in iodemo test
  - Added support for multiple connections to the same server in iodemo test
  - Added synchronization before exit to hello world examples
  - Fixed wrong usage of ep_close in examples
  - Tools
  - Added user-side memcpy option for AM benchmarks in ucx_perftest
  - Added wireshark LUA dissectors for some UCX protocols
  - Fixed memory access flags in perftest
  - Removed support for librte from perf
  - Fixed worker flush deadlock when using multiple workers in ucx_perftest
  - Build
  - Added support for binutils 2.40
  - Added versioned dependency to switch between packages with the same names
  - Added a separate xpmem deb subpackage
  - Added aarch64 support to the binary distribution pipeline
  - Removed dependency on libnuma
  - Documentation
  - Updated ucp_worker_release_address description
- Refresh openucx-s390x-support.patch against latest souces</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="nicolas.morey@suse.com" date="1719403200">- Update to 1.17.0
  - See NEWS for the complete CHANGELOG
- Refresh openucx-s390x-support.patch against the latest sources
- Add upstream fix UCS-TIME-Add-math.h-to-provide-INFINITY.patch
  to fix compilation on ppc64</changelog>
  <changelog author="schwab@suse.de" date="1719662400">- Enable build on riscv64</changelog>
  <changelog author="nicolas.morey@suse.com" date="1725710400">- Refresh openucx-s390x-support.patch to fix compilation on s390x</changelog>
  <changelog author="nicolas.morey@suse.com" date="1743508800">- Add UCT-IB-UD-Use-GRH-to-detect-address-family-on-non-Mellanox-hardware.patch
  to fix an UD init issue on non-Mellanox RDMA HW (bsc#1240204)</changelog>
</package>
<package pkgid="080a65736359101e9ce69c87250408c807d86f7ebe4b5c2bf2e5db26c284f005" name="openvpn" arch="src">
  <version epoch="0" ver="2.6.10" rel="150600.3.20.1"/>
  <changelog author="suse-beta@cboltz.de" date="1619352000">- update 'rcopenvpn' to work without /etc/rc.status (boo#1185273)</changelog>
  <changelog author="dmueller@suse.com" date="1622462400">- update to 2.4.11 (bsc#1185279):
  * CVE-2020-15078 see https://community.openvpn.net/openvpn/wiki/SecurityAnnouncements
  * This bug allows - under very specific circumstances - to trick a server using
    delayed authentication (plugin or management) into returning a PUSH_REPLY
    before the AUTH_FAILED message, which can possibly be used to gather
    information about a VPN setup.
  * In combination with "--auth-gen-token" or an user-specific token auth
    solution it can be possible to get access to a VPN with an
    otherwise-invalid account.
  * Fix potential NULL ptr crash if compiled with DMALLOC
- drop sysv init support, it hasn't build successfully in ages
  and is build-disabled in devel project</changelog>
  <changelog author="max@suse.com" date="1628164800">- Update to 2.5.3:
  * Removal of BF-CBC support in default configuration
  * ** POSSIBLE INCOMPATIBILITY ***
    See section "DATA CHANNEL CIPHER NEGOTIATION" in openvpn(8).
  * Connections setup is now much faster
  * Support ChaCha20-Poly1305 cipher in the OpenVPN data channel
  * Improved TLS 1.3 support when using OpenSSL 1.1.1 or newer
  * Client-specific tls-crypt keys (--tls-crypt-v2)
  * Improved Data channel cipher negotiation
  * HMAC based auth-token support for seamless reconnects to
    standalone servers or a group of servers
  * Asynchronous (deferred) authentication support for auth-pam
    plugin
  * Asynchronous (deferred) support for client-connect scripts and
    plugins
  * Support IPv4 configs with /31 netmasks
  * 802.1q VLAN support on TAP servers
  * Support IPv6-only tunnels
  * New option --block-ipv6 to reject all IPv6 packets (ICMPv6)
  * Support Virtual Routing and Forwarding (VRF)
  * Netlink integration (OpenVPN no longer needs to execute
    ifconfig/route or ip commands)
  * Obsoletes openvpn-2.3.9-Fix-heap-overflow-on-getaddrinfo-result.patch
- bsc#1062157: The fix for bsc#934237 causes problems with the
  crypto self-test of newer openvpn versions.
  Remove openvpn-2.3.x-fixed-multiple-low-severity-issues.patch .</changelog>
  <changelog author="dmueller@suse.com" date="1634385600">- update to 2.5.4:
  * fix prompting for password on windows console if stderr redirection
    is in use - this breaks 2.5.x on Win11/ARM, and might also break
    on Win11/adm64 when released.
  * fix setting MAC address on TAP adapters (--lladdr) to use sitnl
    (was overlooked, and still used "ifconfig" calls)
  * various improvements for man page building (rst2man/rst2html etc)
  * minor bugfix with IN6_IS_ADDR_UNSPECIFIED() use (breaks build on
    at least one platform strictly checking this)
  * fix minor memory leak under certain conditions in add_route() and
    add_route_ipv6()
  * documentation improvements
  * copyright updates where needed
  * better error reporting when win32 console access fails</changelog>
  <changelog author="jengelh@inai.de" date="1638619200">- Avoid bashisms and use POSIX sh syntax.
- Use more efficient find commands.
- Trim marketing filler words from description.</changelog>
  <changelog author="max@suse.com" date="1638964800">- Drop 0001-preform-deferred-authentication-in-the-background.patch
  Upstream has meanwhile solved this differently and the two
  implementations interfere (boo#1193017).
- Obsoleted SLE patches up to this point:
  * openvpn-CVE-2020-15078.patch
  * openvpn-CVE-2020-11810.patch
  * openvpn-CVE-2018-7544.patch
  * openvpn-CVE-2018-9336.patch</changelog>
  <changelog author="dmueller@suse.com" date="1639569600">- update to 2.5.5:
  * SWEET32/64bit cipher deprecation change was postponed to 2.7
  * improve "make check" to notice if "openvpn --show-cipher" crashes
  * improve argv unit tests
  * ensure unit tests work with mbedTLS builds without BF-CBC ciphers
  * include "--push-remove" in the output of "openvpn --help"
  * fix error in iptables syntax in example firewall.sh script
  * fix "resolvconf -p" invocation in example "up" script
  * fix "common_name" environment for script calls when
    "--username-as-common-name" is in effect (Trac #1434)
  * move "push-peer-info" documentation from "server options" to "client"
  * correct "foreign_option_{n}" typo in manpage
  * README.down-root: fix plugin module name</changelog>
  <changelog author="max@suse.com" date="1644494400">- Fix license tag in spec file.</changelog>
  <changelog author="max@suse.com" date="1648036800">- update to 2.5.6:
  * bsc#1197341, CVE-2022-0547: possible authentication bypass in
    external authentication plug-in
  * Fix "--mtu-disc maybe|yes" on Linux
  * Fix $common_name variable passed to scripts when
    username-as-common-name is in effect.
  * Fix potential memory leaks in add_route() and add_route_ipv6().
  * Apply connect-retry backoff only to one side of the connection
    in p2p mode.
  * repair "--inactive" handling with a 'bytes' parameter larger
    than 2 Gbytes.
  * new plugin (sample-plugin/defer/multi-auth.c) to help testing
    with multiple parallel plugins that succeed/fail in
    direct/deferred mode.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1123557: --suppress-timestamps isn't needed by default.</changelog>
  <changelog author="mohd.saquib@suse.com" date="1674820800">- bsc#1202792: --enable-iproute2 added back as default option.</changelog>
  <changelog author="mohd.saquib@suse.com" date="1692187200">- update to 2.6.6 (jsc#PED-5763)
  * configure.ac: fix typ0 in LIBCAPNG_CFALGS
  * Avoid unused function warning/error on FreeBSD (and potientially others)
  * fix warning with gcc 12.2.0 (compiler bug?)
  * Fix CR_RESPONSE mangaement message using wrong key_id
  * Print a more user-friendly error when tls-crypt-v2 client auth fails
  * Ignore Ipv6 route delete request on Android and set ipv4 verbosity to 7
  * Revert commit 423ced962d
  * Implement using --peer-fingerprint without CA certificates
  * show extra info for OpenSSL errors
  * dist: add more missing files only used in the MSVC build
  * dist: Include all documentation in distribution
  * unit_tests: Add missing cert_data.h to source list for unit tests
  * test_tls_crypt: Improve mock() usage to be more portable
  * Remove old Travis CI related files
  * options: Do not hide variables from parent scope
  * pkcs11_openssl: Disable unused code
  * route: Fix overriding return value of add_route3
- Removed following patch because OpenVPN will now work with OpenSSL in FIPS
  mode. Note, no effort has been made to check or implement all the
  requirements/recommendation of FIPS 140-2. This just allows OpenVPN to be
  run on a system that be configured OpenSSL in FIPS mode.
  [- openvpn-fips140-2.3.2.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1700481600">- update to 2.6.8: (jsc#PED-5763 bsc#1217073)
  * SIGSEGV crash: Do not check key_state buffers that are in S_UNDEF
    state - the new sanity check function introduced in 2.6.7 sometimes
    tried to use a NULL pointer after an unsuccessful TLS handshake
  * CVE-2023-46850 OpenVPN versions between 2.6.0 and 2.6.6 incorrectly
    use a send buffer after it has been free()d in some circumstances,
    causing some free()d memory to be sent to the peer. All configurations
    using TLS (e.g. not using --secret) are affected by this issue.
  * CVE-2023-46849 OpenVPN versions between 2.6.0 and 2.6.6 incorrectly
    restore --fragment configuration in some circumstances, leading to a
    division by zero when --fragment is used. On platforms where division
    by zero is fatal, this will cause an OpenVPN crash.
  * DCO: warn if DATA_V1 packets are sent by the other side - this a hard
    incompatibility between a 2.6.x client connecting to a 2.4.0-2.4.4
    server, and the only fix is to use --disable-dco.
  * Remove OpenSSL Engine method for loading a key. This had to be removed
    because the original author did not agree to relicensing the code with
    the new linking exception added. This was a somewhat obsolete feature
    anyway as it only worked with OpenSSL 1.x, which is end-of-support.
  * add warning if p2p NCP client connects to a p2mp server - this is a
    combination that used to work without cipher negotiation (pre 2.6 on
    both ends), but would fail in non-obvious ways with 2.6 to 2.6.
  * add warning to --show-groups that not all supported groups are listed
    (this is due the internal enumeration in OpenSSL being a bit weird,
    omitting X448 and X25519 curves).
  * --dns: remove support for exclude-domains argument (this was a new 2.6
    option, with no backend support implemented yet on any platform, and it
    turns out that no platform supported it at all - so remove option again)
  * warn user if INFO control message too long, do not forward to management
    client (safeguard against protocol-violating server implementations)
  * DCO-WIN: get and log driver version (for easier debugging).
  * print "peer temporary key details" in TLS handshake
  * log OpenSSL errors on failure to set certificate, for example if the
    algorithms used are in acceptable to OpenSSL (misleading message would be
    printed in cryptoapi / pkcs11 scenarios)
  * add CMake build system for MinGW and MSVC builds
  * remove old MSVC build system
  * improve cmocka unit test building for Windows</changelog>
  <changelog author="rahul.jain@suse.com" date="1725451200">- Add openvpn-CVE-2024-28882:Fix multiple exit notifications from
  authenticated clients will extend the validity of a closing session(bsc#1227546 CVE-2024-28882)
  * Patchname:openvpn-CVE-2024-28882.patch</changelog>
  <changelog author="rahul.jain@suse.com" date="1734004800">- Creating Multibuild Environment for openvpn and openvpn-dco
  to support openVPN Data Channel Offload(#PED-8305)</changelog>
  <changelog author="rahul.jain@suse.com" date="1737547200">- FIX: VUL-0 CVE-2024-5594: openvpn: properly handle null bytes and
  invalid characters in control messages(bsc#1235147 CVE-2024-5594)
  Patchname:openvpn-CVE-2024-5594.patch</changelog>
  <changelog author="rahul.jain@suse.com" date="1744113600">- CVE-2025-2704:fix possible ASSERT() on OpenVPN servers using --tls-crypt-v2
  Patchname:openvpn-CVE-2025-2704.patch(bsc#1240392 CVE-2025-2704)</changelog>
  <changelog author="rahul.jain@suse.com" date="1772193600">-update to 2.6.10:
  * t_client.sh can now run pre-tests and skip a test block if needed
    (e.g. skip NTLM proxy tests if SSL library does not support MD4)
  * Compression: minor bugfix in checking option consistency vs.
    compiled-in algorithm support
  * systemd unit files: remove obsolete syslog.target</changelog>
  <changelog author="rahul.jain@suse.com" date="1772193601">-FIX:VUL-0:openvpn: Improper validation of
  source IP addresses in OpenVPN version 2.6.0 allows
  an attacker to open a session from a different IP address
  which did not initiate the connection resulting in a denial of service
  (bsc#1254486 CVE-2025-13086)
  * Patchname:openvpn-CVE-2025-13086.patch
  Remove Patch (already part of 2.6.10)
  * openvpn-CVE-2025-2704.patch(bsc#1240392 CVE-2025-2704)</changelog>
  <changelog author="rahul.jain@suse.com" date="1772452800">-update to 2.6.10:
  * t_client.sh can now run pre-tests and skip a test block if needed
    (e.g. skip NTLM proxy tests if SSL library does not support MD4)
  * Compression: minor bugfix in checking option consistency vs.
    compiled-in algorithm support
  * systemd unit files: remove obsolete syslog.target
  Patchname:openvpn-CVE-2025-13086.patch
  Remove Patch (already part of 2.6.10)
  * openvpn-CVE-2025-2704.patch(bsc#1240392 CVE-2025-2704)
  * FIX:VUL-0:openvpn: Improper validation of
  source IP addresses in OpenVPN version 2.6.0 allows
  an attacker to open a session from a different IP address
  which did not initiate the connection resulting in a denial of service
  (bsc#1254486 CVE-2025-13086)</changelog>
</package>
<package pkgid="0bff33809c39b794b7f741ff2616e5686904ab90c044ef4ac61f1974162b5ea1" name="openvpn" arch="x86_64">
  <version epoch="0" ver="2.6.10" rel="150600.3.20.1"/>
  <changelog author="suse-beta@cboltz.de" date="1619352000">- update 'rcopenvpn' to work without /etc/rc.status (boo#1185273)</changelog>
  <changelog author="dmueller@suse.com" date="1622462400">- update to 2.4.11 (bsc#1185279):
  * CVE-2020-15078 see https://community.openvpn.net/openvpn/wiki/SecurityAnnouncements
  * This bug allows - under very specific circumstances - to trick a server using
    delayed authentication (plugin or management) into returning a PUSH_REPLY
    before the AUTH_FAILED message, which can possibly be used to gather
    information about a VPN setup.
  * In combination with "--auth-gen-token" or an user-specific token auth
    solution it can be possible to get access to a VPN with an
    otherwise-invalid account.
  * Fix potential NULL ptr crash if compiled with DMALLOC
- drop sysv init support, it hasn't build successfully in ages
  and is build-disabled in devel project</changelog>
  <changelog author="max@suse.com" date="1628164800">- Update to 2.5.3:
  * Removal of BF-CBC support in default configuration
  * ** POSSIBLE INCOMPATIBILITY ***
    See section "DATA CHANNEL CIPHER NEGOTIATION" in openvpn(8).
  * Connections setup is now much faster
  * Support ChaCha20-Poly1305 cipher in the OpenVPN data channel
  * Improved TLS 1.3 support when using OpenSSL 1.1.1 or newer
  * Client-specific tls-crypt keys (--tls-crypt-v2)
  * Improved Data channel cipher negotiation
  * HMAC based auth-token support for seamless reconnects to
    standalone servers or a group of servers
  * Asynchronous (deferred) authentication support for auth-pam
    plugin
  * Asynchronous (deferred) support for client-connect scripts and
    plugins
  * Support IPv4 configs with /31 netmasks
  * 802.1q VLAN support on TAP servers
  * Support IPv6-only tunnels
  * New option --block-ipv6 to reject all IPv6 packets (ICMPv6)
  * Support Virtual Routing and Forwarding (VRF)
  * Netlink integration (OpenVPN no longer needs to execute
    ifconfig/route or ip commands)
  * Obsoletes openvpn-2.3.9-Fix-heap-overflow-on-getaddrinfo-result.patch
- bsc#1062157: The fix for bsc#934237 causes problems with the
  crypto self-test of newer openvpn versions.
  Remove openvpn-2.3.x-fixed-multiple-low-severity-issues.patch .</changelog>
  <changelog author="dmueller@suse.com" date="1634385600">- update to 2.5.4:
  * fix prompting for password on windows console if stderr redirection
    is in use - this breaks 2.5.x on Win11/ARM, and might also break
    on Win11/adm64 when released.
  * fix setting MAC address on TAP adapters (--lladdr) to use sitnl
    (was overlooked, and still used "ifconfig" calls)
  * various improvements for man page building (rst2man/rst2html etc)
  * minor bugfix with IN6_IS_ADDR_UNSPECIFIED() use (breaks build on
    at least one platform strictly checking this)
  * fix minor memory leak under certain conditions in add_route() and
    add_route_ipv6()
  * documentation improvements
  * copyright updates where needed
  * better error reporting when win32 console access fails</changelog>
  <changelog author="jengelh@inai.de" date="1638619200">- Avoid bashisms and use POSIX sh syntax.
- Use more efficient find commands.
- Trim marketing filler words from description.</changelog>
  <changelog author="max@suse.com" date="1638964800">- Drop 0001-preform-deferred-authentication-in-the-background.patch
  Upstream has meanwhile solved this differently and the two
  implementations interfere (boo#1193017).
- Obsoleted SLE patches up to this point:
  * openvpn-CVE-2020-15078.patch
  * openvpn-CVE-2020-11810.patch
  * openvpn-CVE-2018-7544.patch
  * openvpn-CVE-2018-9336.patch</changelog>
  <changelog author="dmueller@suse.com" date="1639569600">- update to 2.5.5:
  * SWEET32/64bit cipher deprecation change was postponed to 2.7
  * improve "make check" to notice if "openvpn --show-cipher" crashes
  * improve argv unit tests
  * ensure unit tests work with mbedTLS builds without BF-CBC ciphers
  * include "--push-remove" in the output of "openvpn --help"
  * fix error in iptables syntax in example firewall.sh script
  * fix "resolvconf -p" invocation in example "up" script
  * fix "common_name" environment for script calls when
    "--username-as-common-name" is in effect (Trac #1434)
  * move "push-peer-info" documentation from "server options" to "client"
  * correct "foreign_option_{n}" typo in manpage
  * README.down-root: fix plugin module name</changelog>
  <changelog author="max@suse.com" date="1644494400">- Fix license tag in spec file.</changelog>
  <changelog author="max@suse.com" date="1648036800">- update to 2.5.6:
  * bsc#1197341, CVE-2022-0547: possible authentication bypass in
    external authentication plug-in
  * Fix "--mtu-disc maybe|yes" on Linux
  * Fix $common_name variable passed to scripts when
    username-as-common-name is in effect.
  * Fix potential memory leaks in add_route() and add_route_ipv6().
  * Apply connect-retry backoff only to one side of the connection
    in p2p mode.
  * repair "--inactive" handling with a 'bytes' parameter larger
    than 2 Gbytes.
  * new plugin (sample-plugin/defer/multi-auth.c) to help testing
    with multiple parallel plugins that succeed/fail in
    direct/deferred mode.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1123557: --suppress-timestamps isn't needed by default.</changelog>
  <changelog author="mohd.saquib@suse.com" date="1674820800">- bsc#1202792: --enable-iproute2 added back as default option.</changelog>
  <changelog author="mohd.saquib@suse.com" date="1692187200">- update to 2.6.6 (jsc#PED-5763)
  * configure.ac: fix typ0 in LIBCAPNG_CFALGS
  * Avoid unused function warning/error on FreeBSD (and potientially others)
  * fix warning with gcc 12.2.0 (compiler bug?)
  * Fix CR_RESPONSE mangaement message using wrong key_id
  * Print a more user-friendly error when tls-crypt-v2 client auth fails
  * Ignore Ipv6 route delete request on Android and set ipv4 verbosity to 7
  * Revert commit 423ced962d
  * Implement using --peer-fingerprint without CA certificates
  * show extra info for OpenSSL errors
  * dist: add more missing files only used in the MSVC build
  * dist: Include all documentation in distribution
  * unit_tests: Add missing cert_data.h to source list for unit tests
  * test_tls_crypt: Improve mock() usage to be more portable
  * Remove old Travis CI related files
  * options: Do not hide variables from parent scope
  * pkcs11_openssl: Disable unused code
  * route: Fix overriding return value of add_route3
- Removed following patch because OpenVPN will now work with OpenSSL in FIPS
  mode. Note, no effort has been made to check or implement all the
  requirements/recommendation of FIPS 140-2. This just allows OpenVPN to be
  run on a system that be configured OpenSSL in FIPS mode.
  [- openvpn-fips140-2.3.2.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1700481600">- update to 2.6.8: (jsc#PED-5763 bsc#1217073)
  * SIGSEGV crash: Do not check key_state buffers that are in S_UNDEF
    state - the new sanity check function introduced in 2.6.7 sometimes
    tried to use a NULL pointer after an unsuccessful TLS handshake
  * CVE-2023-46850 OpenVPN versions between 2.6.0 and 2.6.6 incorrectly
    use a send buffer after it has been free()d in some circumstances,
    causing some free()d memory to be sent to the peer. All configurations
    using TLS (e.g. not using --secret) are affected by this issue.
  * CVE-2023-46849 OpenVPN versions between 2.6.0 and 2.6.6 incorrectly
    restore --fragment configuration in some circumstances, leading to a
    division by zero when --fragment is used. On platforms where division
    by zero is fatal, this will cause an OpenVPN crash.
  * DCO: warn if DATA_V1 packets are sent by the other side - this a hard
    incompatibility between a 2.6.x client connecting to a 2.4.0-2.4.4
    server, and the only fix is to use --disable-dco.
  * Remove OpenSSL Engine method for loading a key. This had to be removed
    because the original author did not agree to relicensing the code with
    the new linking exception added. This was a somewhat obsolete feature
    anyway as it only worked with OpenSSL 1.x, which is end-of-support.
  * add warning if p2p NCP client connects to a p2mp server - this is a
    combination that used to work without cipher negotiation (pre 2.6 on
    both ends), but would fail in non-obvious ways with 2.6 to 2.6.
  * add warning to --show-groups that not all supported groups are listed
    (this is due the internal enumeration in OpenSSL being a bit weird,
    omitting X448 and X25519 curves).
  * --dns: remove support for exclude-domains argument (this was a new 2.6
    option, with no backend support implemented yet on any platform, and it
    turns out that no platform supported it at all - so remove option again)
  * warn user if INFO control message too long, do not forward to management
    client (safeguard against protocol-violating server implementations)
  * DCO-WIN: get and log driver version (for easier debugging).
  * print "peer temporary key details" in TLS handshake
  * log OpenSSL errors on failure to set certificate, for example if the
    algorithms used are in acceptable to OpenSSL (misleading message would be
    printed in cryptoapi / pkcs11 scenarios)
  * add CMake build system for MinGW and MSVC builds
  * remove old MSVC build system
  * improve cmocka unit test building for Windows</changelog>
  <changelog author="rahul.jain@suse.com" date="1725451200">- Add openvpn-CVE-2024-28882:Fix multiple exit notifications from
  authenticated clients will extend the validity of a closing session(bsc#1227546 CVE-2024-28882)
  * Patchname:openvpn-CVE-2024-28882.patch</changelog>
  <changelog author="rahul.jain@suse.com" date="1734004800">- Creating Multibuild Environment for openvpn and openvpn-dco
  to support openVPN Data Channel Offload(#PED-8305)</changelog>
  <changelog author="rahul.jain@suse.com" date="1737547200">- FIX: VUL-0 CVE-2024-5594: openvpn: properly handle null bytes and
  invalid characters in control messages(bsc#1235147 CVE-2024-5594)
  Patchname:openvpn-CVE-2024-5594.patch</changelog>
  <changelog author="rahul.jain@suse.com" date="1744113600">- CVE-2025-2704:fix possible ASSERT() on OpenVPN servers using --tls-crypt-v2
  Patchname:openvpn-CVE-2025-2704.patch(bsc#1240392 CVE-2025-2704)</changelog>
  <changelog author="rahul.jain@suse.com" date="1772193600">-update to 2.6.10:
  * t_client.sh can now run pre-tests and skip a test block if needed
    (e.g. skip NTLM proxy tests if SSL library does not support MD4)
  * Compression: minor bugfix in checking option consistency vs.
    compiled-in algorithm support
  * systemd unit files: remove obsolete syslog.target</changelog>
  <changelog author="rahul.jain@suse.com" date="1772193601">-FIX:VUL-0:openvpn: Improper validation of
  source IP addresses in OpenVPN version 2.6.0 allows
  an attacker to open a session from a different IP address
  which did not initiate the connection resulting in a denial of service
  (bsc#1254486 CVE-2025-13086)
  * Patchname:openvpn-CVE-2025-13086.patch
  Remove Patch (already part of 2.6.10)
  * openvpn-CVE-2025-2704.patch(bsc#1240392 CVE-2025-2704)</changelog>
  <changelog author="rahul.jain@suse.com" date="1772452800">-update to 2.6.10:
  * t_client.sh can now run pre-tests and skip a test block if needed
    (e.g. skip NTLM proxy tests if SSL library does not support MD4)
  * Compression: minor bugfix in checking option consistency vs.
    compiled-in algorithm support
  * systemd unit files: remove obsolete syslog.target
  Patchname:openvpn-CVE-2025-13086.patch
  Remove Patch (already part of 2.6.10)
  * openvpn-CVE-2025-2704.patch(bsc#1240392 CVE-2025-2704)
  * FIX:VUL-0:openvpn: Improper validation of
  source IP addresses in OpenVPN version 2.6.0 allows
  an attacker to open a session from a different IP address
  which did not initiate the connection resulting in a denial of service
  (bsc#1254486 CVE-2025-13086)</changelog>
</package>
<package pkgid="75bdec9112998c84b325678b43502afd936264e85800ba9c08e7b0796671c587" name="openvpn" arch="src">
  <version epoch="0" ver="2.6.8" rel="150600.3.17.1"/>
  <changelog author="fbui@suse.com" date="1598443200">- Modernize openvpn.service
  * /var/run has been obsoleted since a long time.
  * on reload, send HUP signal directly rather than relying on
    killproc to look for the main process.</changelog>
  <changelog author="dmueller@suse.com" date="1599825600">- update to 2.4.9 (CVE-2020-11810, bsc#1169925O):
  * Allow unicode search string in --cryptoapicert option (Windows)
  * Skip expired certificates in Windows certificate store (Windows) (trac #966)
  * OpenSSL: Fix --crl-verify not loading multiple CRLs in one file (trac #623)
  * fix condition where a client's session could "float" to a new IP address that is not authorized ("fix illegal client float").
  This can be used to disrupt service to a freshly connected client (no session
  keys negotiated yet). It can not be used to inject or steal VPN traffic.
  CVE-2020-11810).
  * fix combination of async push (deferred auth) and NCP (trac #1259)
  * Fix OpenSSL 1.1.1 not using auto elliptic curve selection (trac #1228)
  * Fix OpenSSL error stack handling of tls_ctx_add_extra_certs
  * mbedTLS: Make sure TLS session survives move (trac #880)
  * Fix OpenSSL private key passphrase notices
  * Fix building with --enable-async-push in FreeBSD (trac #1256)
  * Fix broken fragmentation logic when using NCP (trac #1140)</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 2.4.10:
  - OpenVPN client will now announce the acceptable ciphers to the server
  (IV_CIPHER=...), so NCP cipher negotiation works better
  - Parse static challenge response in auth-pam plugin
  - Accept empty password and/or response in auth-pam plugin
  - Log serial number of revoked certificate
  - Fix tls_ctx_client/server_new leaving error on OpenSSL error stack
  - Fix auth-token not being updated if auth-nocache is set
  (this should fix all remaining client-side bugs for the combination
  "auth-nocache in client-config" + "auth-token in use on the server")
  - Fix stack overflow in OpenSolaris and *BSD NEXTADDR()
  - Fix error detection / abort in --inetd corner case (#350)
  - Fix TUNSETGROUP compatibility with very old Linux systems (#1152)
  - Fix handling of 'route remote_host' for IPv6 transport case
  (#1247 and #1332)
  - Fix --show-gateway for IPv6 on NetBSD/i386 (#734)
  - A number of documentation improvements / clarification fixes.
  - Fix line number reporting on config file errors after &lt;inline&gt; segments
  - Fix fatal error at switching remotes (#629)
  - socks.c: fix alen for DOMAIN type addresses, bump up buffer sizes (#848)
  - Switch "ks-&gt;authenticated" assertion failure to returning false (#1270)
- refresh 0001-preform-deferred-authentication-in-the-background.patch
  openvpn-2.3.x-fixed-multiple-low-severity-issues.patch against 2.4.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1619352000">- update 'rcopenvpn' to work without /etc/rc.status (boo#1185273)</changelog>
  <changelog author="dmueller@suse.com" date="1622462400">- update to 2.4.11 (bsc#1185279):
  * CVE-2020-15078 see https://community.openvpn.net/openvpn/wiki/SecurityAnnouncements
  * This bug allows - under very specific circumstances - to trick a server using
    delayed authentication (plugin or management) into returning a PUSH_REPLY
    before the AUTH_FAILED message, which can possibly be used to gather
    information about a VPN setup.
  * In combination with "--auth-gen-token" or an user-specific token auth
    solution it can be possible to get access to a VPN with an
    otherwise-invalid account.
  * Fix potential NULL ptr crash if compiled with DMALLOC
- drop sysv init support, it hasn't build successfully in ages
  and is build-disabled in devel project</changelog>
  <changelog author="max@suse.com" date="1628164800">- Update to 2.5.3:
  * Removal of BF-CBC support in default configuration
  * ** POSSIBLE INCOMPATIBILITY ***
    See section "DATA CHANNEL CIPHER NEGOTIATION" in openvpn(8).
  * Connections setup is now much faster
  * Support ChaCha20-Poly1305 cipher in the OpenVPN data channel
  * Improved TLS 1.3 support when using OpenSSL 1.1.1 or newer
  * Client-specific tls-crypt keys (--tls-crypt-v2)
  * Improved Data channel cipher negotiation
  * HMAC based auth-token support for seamless reconnects to
    standalone servers or a group of servers
  * Asynchronous (deferred) authentication support for auth-pam
    plugin
  * Asynchronous (deferred) support for client-connect scripts and
    plugins
  * Support IPv4 configs with /31 netmasks
  * 802.1q VLAN support on TAP servers
  * Support IPv6-only tunnels
  * New option --block-ipv6 to reject all IPv6 packets (ICMPv6)
  * Support Virtual Routing and Forwarding (VRF)
  * Netlink integration (OpenVPN no longer needs to execute
    ifconfig/route or ip commands)
  * Obsoletes openvpn-2.3.9-Fix-heap-overflow-on-getaddrinfo-result.patch
- bsc#1062157: The fix for bsc#934237 causes problems with the
  crypto self-test of newer openvpn versions.
  Remove openvpn-2.3.x-fixed-multiple-low-severity-issues.patch .</changelog>
  <changelog author="dmueller@suse.com" date="1634385600">- update to 2.5.4:
  * fix prompting for password on windows console if stderr redirection
    is in use - this breaks 2.5.x on Win11/ARM, and might also break
    on Win11/adm64 when released.
  * fix setting MAC address on TAP adapters (--lladdr) to use sitnl
    (was overlooked, and still used "ifconfig" calls)
  * various improvements for man page building (rst2man/rst2html etc)
  * minor bugfix with IN6_IS_ADDR_UNSPECIFIED() use (breaks build on
    at least one platform strictly checking this)
  * fix minor memory leak under certain conditions in add_route() and
    add_route_ipv6()
  * documentation improvements
  * copyright updates where needed
  * better error reporting when win32 console access fails</changelog>
  <changelog author="jengelh@inai.de" date="1638619200">- Avoid bashisms and use POSIX sh syntax.
- Use more efficient find commands.
- Trim marketing filler words from description.</changelog>
  <changelog author="max@suse.com" date="1638964800">- Drop 0001-preform-deferred-authentication-in-the-background.patch
  Upstream has meanwhile solved this differently and the two
  implementations interfere (boo#1193017).
- Obsoleted SLE patches up to this point:
  * openvpn-CVE-2020-15078.patch
  * openvpn-CVE-2020-11810.patch
  * openvpn-CVE-2018-7544.patch
  * openvpn-CVE-2018-9336.patch</changelog>
  <changelog author="dmueller@suse.com" date="1639569600">- update to 2.5.5:
  * SWEET32/64bit cipher deprecation change was postponed to 2.7
  * improve "make check" to notice if "openvpn --show-cipher" crashes
  * improve argv unit tests
  * ensure unit tests work with mbedTLS builds without BF-CBC ciphers
  * include "--push-remove" in the output of "openvpn --help"
  * fix error in iptables syntax in example firewall.sh script
  * fix "resolvconf -p" invocation in example "up" script
  * fix "common_name" environment for script calls when
    "--username-as-common-name" is in effect (Trac #1434)
  * move "push-peer-info" documentation from "server options" to "client"
  * correct "foreign_option_{n}" typo in manpage
  * README.down-root: fix plugin module name</changelog>
  <changelog author="max@suse.com" date="1644494400">- Fix license tag in spec file.</changelog>
  <changelog author="max@suse.com" date="1648036800">- update to 2.5.6:
  * bsc#1197341, CVE-2022-0547: possible authentication bypass in
    external authentication plug-in
  * Fix "--mtu-disc maybe|yes" on Linux
  * Fix $common_name variable passed to scripts when
    username-as-common-name is in effect.
  * Fix potential memory leaks in add_route() and add_route_ipv6().
  * Apply connect-retry backoff only to one side of the connection
    in p2p mode.
  * repair "--inactive" handling with a 'bytes' parameter larger
    than 2 Gbytes.
  * new plugin (sample-plugin/defer/multi-auth.c) to help testing
    with multiple parallel plugins that succeed/fail in
    direct/deferred mode.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1123557: --suppress-timestamps isn't needed by default.</changelog>
  <changelog author="mohd.saquib@suse.com" date="1674820800">- bsc#1202792: --enable-iproute2 added back as default option.</changelog>
  <changelog author="mohd.saquib@suse.com" date="1692187200">- update to 2.6.6 (jsc#PED-5763)
  * configure.ac: fix typ0 in LIBCAPNG_CFALGS
  * Avoid unused function warning/error on FreeBSD (and potientially others)
  * fix warning with gcc 12.2.0 (compiler bug?)
  * Fix CR_RESPONSE mangaement message using wrong key_id
  * Print a more user-friendly error when tls-crypt-v2 client auth fails
  * Ignore Ipv6 route delete request on Android and set ipv4 verbosity to 7
  * Revert commit 423ced962d
  * Implement using --peer-fingerprint without CA certificates
  * show extra info for OpenSSL errors
  * dist: add more missing files only used in the MSVC build
  * dist: Include all documentation in distribution
  * unit_tests: Add missing cert_data.h to source list for unit tests
  * test_tls_crypt: Improve mock() usage to be more portable
  * Remove old Travis CI related files
  * options: Do not hide variables from parent scope
  * pkcs11_openssl: Disable unused code
  * route: Fix overriding return value of add_route3
- Removed following patch because OpenVPN will now work with OpenSSL in FIPS
  mode. Note, no effort has been made to check or implement all the
  requirements/recommendation of FIPS 140-2. This just allows OpenVPN to be
  run on a system that be configured OpenSSL in FIPS mode.
  [- openvpn-fips140-2.3.2.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1700481600">- update to 2.6.8: (jsc#PED-5763 bsc#1217073)
  * SIGSEGV crash: Do not check key_state buffers that are in S_UNDEF
    state - the new sanity check function introduced in 2.6.7 sometimes
    tried to use a NULL pointer after an unsuccessful TLS handshake
  * CVE-2023-46850 OpenVPN versions between 2.6.0 and 2.6.6 incorrectly
    use a send buffer after it has been free()d in some circumstances,
    causing some free()d memory to be sent to the peer. All configurations
    using TLS (e.g. not using --secret) are affected by this issue.
  * CVE-2023-46849 OpenVPN versions between 2.6.0 and 2.6.6 incorrectly
    restore --fragment configuration in some circumstances, leading to a
    division by zero when --fragment is used. On platforms where division
    by zero is fatal, this will cause an OpenVPN crash.
  * DCO: warn if DATA_V1 packets are sent by the other side - this a hard
    incompatibility between a 2.6.x client connecting to a 2.4.0-2.4.4
    server, and the only fix is to use --disable-dco.
  * Remove OpenSSL Engine method for loading a key. This had to be removed
    because the original author did not agree to relicensing the code with
    the new linking exception added. This was a somewhat obsolete feature
    anyway as it only worked with OpenSSL 1.x, which is end-of-support.
  * add warning if p2p NCP client connects to a p2mp server - this is a
    combination that used to work without cipher negotiation (pre 2.6 on
    both ends), but would fail in non-obvious ways with 2.6 to 2.6.
  * add warning to --show-groups that not all supported groups are listed
    (this is due the internal enumeration in OpenSSL being a bit weird,
    omitting X448 and X25519 curves).
  * --dns: remove support for exclude-domains argument (this was a new 2.6
    option, with no backend support implemented yet on any platform, and it
    turns out that no platform supported it at all - so remove option again)
  * warn user if INFO control message too long, do not forward to management
    client (safeguard against protocol-violating server implementations)
  * DCO-WIN: get and log driver version (for easier debugging).
  * print "peer temporary key details" in TLS handshake
  * log OpenSSL errors on failure to set certificate, for example if the
    algorithms used are in acceptable to OpenSSL (misleading message would be
    printed in cryptoapi / pkcs11 scenarios)
  * add CMake build system for MinGW and MSVC builds
  * remove old MSVC build system
  * improve cmocka unit test building for Windows</changelog>
  <changelog author="rahul.jain@suse.com" date="1725451200">- Add openvpn-CVE-2024-28882:Fix multiple exit notifications from
  authenticated clients will extend the validity of a closing session(bsc#1227546 CVE-2024-28882)
  * Patchname:openvpn-CVE-2024-28882.patch</changelog>
  <changelog author="rahul.jain@suse.com" date="1734004800">- Creating Multibuild Environment for openvpn and openvpn-dco
  to support openVPN Data Channel Offload(#PED-8305)</changelog>
  <changelog author="rahul.jain@suse.com" date="1737547200">- FIX: VUL-0 CVE-2024-5594: openvpn: properly handle null bytes and
  invalid characters in control messages(bsc#1235147 CVE-2024-5594)
  Patchname:openvpn-CVE-2024-5594.patch</changelog>
  <changelog author="rahul.jain@suse.com" date="1744113600">- CVE-2025-2704:fix possible ASSERT() on OpenVPN servers using --tls-crypt-v2
  Patchname:openvpn-CVE-2025-2704.patch(bsc#1240392 CVE-2025-2704)</changelog>
</package>
<package pkgid="42f859be79e77de7c59b16b98e8d717f7b1527e4a6afaa1ff21e4c15a28a8f9e" name="openvpn" arch="x86_64">
  <version epoch="0" ver="2.6.8" rel="150600.3.17.1"/>
  <changelog author="fbui@suse.com" date="1598443200">- Modernize openvpn.service
  * /var/run has been obsoleted since a long time.
  * on reload, send HUP signal directly rather than relying on
    killproc to look for the main process.</changelog>
  <changelog author="dmueller@suse.com" date="1599825600">- update to 2.4.9 (CVE-2020-11810, bsc#1169925O):
  * Allow unicode search string in --cryptoapicert option (Windows)
  * Skip expired certificates in Windows certificate store (Windows) (trac #966)
  * OpenSSL: Fix --crl-verify not loading multiple CRLs in one file (trac #623)
  * fix condition where a client's session could "float" to a new IP address that is not authorized ("fix illegal client float").
  This can be used to disrupt service to a freshly connected client (no session
  keys negotiated yet). It can not be used to inject or steal VPN traffic.
  CVE-2020-11810).
  * fix combination of async push (deferred auth) and NCP (trac #1259)
  * Fix OpenSSL 1.1.1 not using auto elliptic curve selection (trac #1228)
  * Fix OpenSSL error stack handling of tls_ctx_add_extra_certs
  * mbedTLS: Make sure TLS session survives move (trac #880)
  * Fix OpenSSL private key passphrase notices
  * Fix building with --enable-async-push in FreeBSD (trac #1256)
  * Fix broken fragmentation logic when using NCP (trac #1140)</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 2.4.10:
  - OpenVPN client will now announce the acceptable ciphers to the server
  (IV_CIPHER=...), so NCP cipher negotiation works better
  - Parse static challenge response in auth-pam plugin
  - Accept empty password and/or response in auth-pam plugin
  - Log serial number of revoked certificate
  - Fix tls_ctx_client/server_new leaving error on OpenSSL error stack
  - Fix auth-token not being updated if auth-nocache is set
  (this should fix all remaining client-side bugs for the combination
  "auth-nocache in client-config" + "auth-token in use on the server")
  - Fix stack overflow in OpenSolaris and *BSD NEXTADDR()
  - Fix error detection / abort in --inetd corner case (#350)
  - Fix TUNSETGROUP compatibility with very old Linux systems (#1152)
  - Fix handling of 'route remote_host' for IPv6 transport case
  (#1247 and #1332)
  - Fix --show-gateway for IPv6 on NetBSD/i386 (#734)
  - A number of documentation improvements / clarification fixes.
  - Fix line number reporting on config file errors after &lt;inline&gt; segments
  - Fix fatal error at switching remotes (#629)
  - socks.c: fix alen for DOMAIN type addresses, bump up buffer sizes (#848)
  - Switch "ks-&gt;authenticated" assertion failure to returning false (#1270)
- refresh 0001-preform-deferred-authentication-in-the-background.patch
  openvpn-2.3.x-fixed-multiple-low-severity-issues.patch against 2.4.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1619352000">- update 'rcopenvpn' to work without /etc/rc.status (boo#1185273)</changelog>
  <changelog author="dmueller@suse.com" date="1622462400">- update to 2.4.11 (bsc#1185279):
  * CVE-2020-15078 see https://community.openvpn.net/openvpn/wiki/SecurityAnnouncements
  * This bug allows - under very specific circumstances - to trick a server using
    delayed authentication (plugin or management) into returning a PUSH_REPLY
    before the AUTH_FAILED message, which can possibly be used to gather
    information about a VPN setup.
  * In combination with "--auth-gen-token" or an user-specific token auth
    solution it can be possible to get access to a VPN with an
    otherwise-invalid account.
  * Fix potential NULL ptr crash if compiled with DMALLOC
- drop sysv init support, it hasn't build successfully in ages
  and is build-disabled in devel project</changelog>
  <changelog author="max@suse.com" date="1628164800">- Update to 2.5.3:
  * Removal of BF-CBC support in default configuration
  * ** POSSIBLE INCOMPATIBILITY ***
    See section "DATA CHANNEL CIPHER NEGOTIATION" in openvpn(8).
  * Connections setup is now much faster
  * Support ChaCha20-Poly1305 cipher in the OpenVPN data channel
  * Improved TLS 1.3 support when using OpenSSL 1.1.1 or newer
  * Client-specific tls-crypt keys (--tls-crypt-v2)
  * Improved Data channel cipher negotiation
  * HMAC based auth-token support for seamless reconnects to
    standalone servers or a group of servers
  * Asynchronous (deferred) authentication support for auth-pam
    plugin
  * Asynchronous (deferred) support for client-connect scripts and
    plugins
  * Support IPv4 configs with /31 netmasks
  * 802.1q VLAN support on TAP servers
  * Support IPv6-only tunnels
  * New option --block-ipv6 to reject all IPv6 packets (ICMPv6)
  * Support Virtual Routing and Forwarding (VRF)
  * Netlink integration (OpenVPN no longer needs to execute
    ifconfig/route or ip commands)
  * Obsoletes openvpn-2.3.9-Fix-heap-overflow-on-getaddrinfo-result.patch
- bsc#1062157: The fix for bsc#934237 causes problems with the
  crypto self-test of newer openvpn versions.
  Remove openvpn-2.3.x-fixed-multiple-low-severity-issues.patch .</changelog>
  <changelog author="dmueller@suse.com" date="1634385600">- update to 2.5.4:
  * fix prompting for password on windows console if stderr redirection
    is in use - this breaks 2.5.x on Win11/ARM, and might also break
    on Win11/adm64 when released.
  * fix setting MAC address on TAP adapters (--lladdr) to use sitnl
    (was overlooked, and still used "ifconfig" calls)
  * various improvements for man page building (rst2man/rst2html etc)
  * minor bugfix with IN6_IS_ADDR_UNSPECIFIED() use (breaks build on
    at least one platform strictly checking this)
  * fix minor memory leak under certain conditions in add_route() and
    add_route_ipv6()
  * documentation improvements
  * copyright updates where needed
  * better error reporting when win32 console access fails</changelog>
  <changelog author="jengelh@inai.de" date="1638619200">- Avoid bashisms and use POSIX sh syntax.
- Use more efficient find commands.
- Trim marketing filler words from description.</changelog>
  <changelog author="max@suse.com" date="1638964800">- Drop 0001-preform-deferred-authentication-in-the-background.patch
  Upstream has meanwhile solved this differently and the two
  implementations interfere (boo#1193017).
- Obsoleted SLE patches up to this point:
  * openvpn-CVE-2020-15078.patch
  * openvpn-CVE-2020-11810.patch
  * openvpn-CVE-2018-7544.patch
  * openvpn-CVE-2018-9336.patch</changelog>
  <changelog author="dmueller@suse.com" date="1639569600">- update to 2.5.5:
  * SWEET32/64bit cipher deprecation change was postponed to 2.7
  * improve "make check" to notice if "openvpn --show-cipher" crashes
  * improve argv unit tests
  * ensure unit tests work with mbedTLS builds without BF-CBC ciphers
  * include "--push-remove" in the output of "openvpn --help"
  * fix error in iptables syntax in example firewall.sh script
  * fix "resolvconf -p" invocation in example "up" script
  * fix "common_name" environment for script calls when
    "--username-as-common-name" is in effect (Trac #1434)
  * move "push-peer-info" documentation from "server options" to "client"
  * correct "foreign_option_{n}" typo in manpage
  * README.down-root: fix plugin module name</changelog>
  <changelog author="max@suse.com" date="1644494400">- Fix license tag in spec file.</changelog>
  <changelog author="max@suse.com" date="1648036800">- update to 2.5.6:
  * bsc#1197341, CVE-2022-0547: possible authentication bypass in
    external authentication plug-in
  * Fix "--mtu-disc maybe|yes" on Linux
  * Fix $common_name variable passed to scripts when
    username-as-common-name is in effect.
  * Fix potential memory leaks in add_route() and add_route_ipv6().
  * Apply connect-retry backoff only to one side of the connection
    in p2p mode.
  * repair "--inactive" handling with a 'bytes' parameter larger
    than 2 Gbytes.
  * new plugin (sample-plugin/defer/multi-auth.c) to help testing
    with multiple parallel plugins that succeed/fail in
    direct/deferred mode.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1123557: --suppress-timestamps isn't needed by default.</changelog>
  <changelog author="mohd.saquib@suse.com" date="1674820800">- bsc#1202792: --enable-iproute2 added back as default option.</changelog>
  <changelog author="mohd.saquib@suse.com" date="1692187200">- update to 2.6.6 (jsc#PED-5763)
  * configure.ac: fix typ0 in LIBCAPNG_CFALGS
  * Avoid unused function warning/error on FreeBSD (and potientially others)
  * fix warning with gcc 12.2.0 (compiler bug?)
  * Fix CR_RESPONSE mangaement message using wrong key_id
  * Print a more user-friendly error when tls-crypt-v2 client auth fails
  * Ignore Ipv6 route delete request on Android and set ipv4 verbosity to 7
  * Revert commit 423ced962d
  * Implement using --peer-fingerprint without CA certificates
  * show extra info for OpenSSL errors
  * dist: add more missing files only used in the MSVC build
  * dist: Include all documentation in distribution
  * unit_tests: Add missing cert_data.h to source list for unit tests
  * test_tls_crypt: Improve mock() usage to be more portable
  * Remove old Travis CI related files
  * options: Do not hide variables from parent scope
  * pkcs11_openssl: Disable unused code
  * route: Fix overriding return value of add_route3
- Removed following patch because OpenVPN will now work with OpenSSL in FIPS
  mode. Note, no effort has been made to check or implement all the
  requirements/recommendation of FIPS 140-2. This just allows OpenVPN to be
  run on a system that be configured OpenSSL in FIPS mode.
  [- openvpn-fips140-2.3.2.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1700481600">- update to 2.6.8: (jsc#PED-5763 bsc#1217073)
  * SIGSEGV crash: Do not check key_state buffers that are in S_UNDEF
    state - the new sanity check function introduced in 2.6.7 sometimes
    tried to use a NULL pointer after an unsuccessful TLS handshake
  * CVE-2023-46850 OpenVPN versions between 2.6.0 and 2.6.6 incorrectly
    use a send buffer after it has been free()d in some circumstances,
    causing some free()d memory to be sent to the peer. All configurations
    using TLS (e.g. not using --secret) are affected by this issue.
  * CVE-2023-46849 OpenVPN versions between 2.6.0 and 2.6.6 incorrectly
    restore --fragment configuration in some circumstances, leading to a
    division by zero when --fragment is used. On platforms where division
    by zero is fatal, this will cause an OpenVPN crash.
  * DCO: warn if DATA_V1 packets are sent by the other side - this a hard
    incompatibility between a 2.6.x client connecting to a 2.4.0-2.4.4
    server, and the only fix is to use --disable-dco.
  * Remove OpenSSL Engine method for loading a key. This had to be removed
    because the original author did not agree to relicensing the code with
    the new linking exception added. This was a somewhat obsolete feature
    anyway as it only worked with OpenSSL 1.x, which is end-of-support.
  * add warning if p2p NCP client connects to a p2mp server - this is a
    combination that used to work without cipher negotiation (pre 2.6 on
    both ends), but would fail in non-obvious ways with 2.6 to 2.6.
  * add warning to --show-groups that not all supported groups are listed
    (this is due the internal enumeration in OpenSSL being a bit weird,
    omitting X448 and X25519 curves).
  * --dns: remove support for exclude-domains argument (this was a new 2.6
    option, with no backend support implemented yet on any platform, and it
    turns out that no platform supported it at all - so remove option again)
  * warn user if INFO control message too long, do not forward to management
    client (safeguard against protocol-violating server implementations)
  * DCO-WIN: get and log driver version (for easier debugging).
  * print "peer temporary key details" in TLS handshake
  * log OpenSSL errors on failure to set certificate, for example if the
    algorithms used are in acceptable to OpenSSL (misleading message would be
    printed in cryptoapi / pkcs11 scenarios)
  * add CMake build system for MinGW and MSVC builds
  * remove old MSVC build system
  * improve cmocka unit test building for Windows</changelog>
  <changelog author="rahul.jain@suse.com" date="1725451200">- Add openvpn-CVE-2024-28882:Fix multiple exit notifications from
  authenticated clients will extend the validity of a closing session(bsc#1227546 CVE-2024-28882)
  * Patchname:openvpn-CVE-2024-28882.patch</changelog>
  <changelog author="rahul.jain@suse.com" date="1734004800">- Creating Multibuild Environment for openvpn and openvpn-dco
  to support openVPN Data Channel Offload(#PED-8305)</changelog>
  <changelog author="rahul.jain@suse.com" date="1737547200">- FIX: VUL-0 CVE-2024-5594: openvpn: properly handle null bytes and
  invalid characters in control messages(bsc#1235147 CVE-2024-5594)
  Patchname:openvpn-CVE-2024-5594.patch</changelog>
  <changelog author="rahul.jain@suse.com" date="1744113600">- CVE-2025-2704:fix possible ASSERT() on OpenVPN servers using --tls-crypt-v2
  Patchname:openvpn-CVE-2025-2704.patch(bsc#1240392 CVE-2025-2704)</changelog>
</package>
<package pkgid="14bef36aca86fbfb79407cc8dd4e443ff7e494712580e3b2f9fe43cb9a6298fa" name="openvpn-auth-pam-plugin" arch="x86_64">
  <version epoch="0" ver="2.6.10" rel="150600.3.20.1"/>
  <changelog author="suse-beta@cboltz.de" date="1619352000">- update 'rcopenvpn' to work without /etc/rc.status (boo#1185273)</changelog>
  <changelog author="dmueller@suse.com" date="1622462400">- update to 2.4.11 (bsc#1185279):
  * CVE-2020-15078 see https://community.openvpn.net/openvpn/wiki/SecurityAnnouncements
  * This bug allows - under very specific circumstances - to trick a server using
    delayed authentication (plugin or management) into returning a PUSH_REPLY
    before the AUTH_FAILED message, which can possibly be used to gather
    information about a VPN setup.
  * In combination with "--auth-gen-token" or an user-specific token auth
    solution it can be possible to get access to a VPN with an
    otherwise-invalid account.
  * Fix potential NULL ptr crash if compiled with DMALLOC
- drop sysv init support, it hasn't build successfully in ages
  and is build-disabled in devel project</changelog>
  <changelog author="max@suse.com" date="1628164800">- Update to 2.5.3:
  * Removal of BF-CBC support in default configuration
  * ** POSSIBLE INCOMPATIBILITY ***
    See section "DATA CHANNEL CIPHER NEGOTIATION" in openvpn(8).
  * Connections setup is now much faster
  * Support ChaCha20-Poly1305 cipher in the OpenVPN data channel
  * Improved TLS 1.3 support when using OpenSSL 1.1.1 or newer
  * Client-specific tls-crypt keys (--tls-crypt-v2)
  * Improved Data channel cipher negotiation
  * HMAC based auth-token support for seamless reconnects to
    standalone servers or a group of servers
  * Asynchronous (deferred) authentication support for auth-pam
    plugin
  * Asynchronous (deferred) support for client-connect scripts and
    plugins
  * Support IPv4 configs with /31 netmasks
  * 802.1q VLAN support on TAP servers
  * Support IPv6-only tunnels
  * New option --block-ipv6 to reject all IPv6 packets (ICMPv6)
  * Support Virtual Routing and Forwarding (VRF)
  * Netlink integration (OpenVPN no longer needs to execute
    ifconfig/route or ip commands)
  * Obsoletes openvpn-2.3.9-Fix-heap-overflow-on-getaddrinfo-result.patch
- bsc#1062157: The fix for bsc#934237 causes problems with the
  crypto self-test of newer openvpn versions.
  Remove openvpn-2.3.x-fixed-multiple-low-severity-issues.patch .</changelog>
  <changelog author="dmueller@suse.com" date="1634385600">- update to 2.5.4:
  * fix prompting for password on windows console if stderr redirection
    is in use - this breaks 2.5.x on Win11/ARM, and might also break
    on Win11/adm64 when released.
  * fix setting MAC address on TAP adapters (--lladdr) to use sitnl
    (was overlooked, and still used "ifconfig" calls)
  * various improvements for man page building (rst2man/rst2html etc)
  * minor bugfix with IN6_IS_ADDR_UNSPECIFIED() use (breaks build on
    at least one platform strictly checking this)
  * fix minor memory leak under certain conditions in add_route() and
    add_route_ipv6()
  * documentation improvements
  * copyright updates where needed
  * better error reporting when win32 console access fails</changelog>
  <changelog author="jengelh@inai.de" date="1638619200">- Avoid bashisms and use POSIX sh syntax.
- Use more efficient find commands.
- Trim marketing filler words from description.</changelog>
  <changelog author="max@suse.com" date="1638964800">- Drop 0001-preform-deferred-authentication-in-the-background.patch
  Upstream has meanwhile solved this differently and the two
  implementations interfere (boo#1193017).
- Obsoleted SLE patches up to this point:
  * openvpn-CVE-2020-15078.patch
  * openvpn-CVE-2020-11810.patch
  * openvpn-CVE-2018-7544.patch
  * openvpn-CVE-2018-9336.patch</changelog>
  <changelog author="dmueller@suse.com" date="1639569600">- update to 2.5.5:
  * SWEET32/64bit cipher deprecation change was postponed to 2.7
  * improve "make check" to notice if "openvpn --show-cipher" crashes
  * improve argv unit tests
  * ensure unit tests work with mbedTLS builds without BF-CBC ciphers
  * include "--push-remove" in the output of "openvpn --help"
  * fix error in iptables syntax in example firewall.sh script
  * fix "resolvconf -p" invocation in example "up" script
  * fix "common_name" environment for script calls when
    "--username-as-common-name" is in effect (Trac #1434)
  * move "push-peer-info" documentation from "server options" to "client"
  * correct "foreign_option_{n}" typo in manpage
  * README.down-root: fix plugin module name</changelog>
  <changelog author="max@suse.com" date="1644494400">- Fix license tag in spec file.</changelog>
  <changelog author="max@suse.com" date="1648036800">- update to 2.5.6:
  * bsc#1197341, CVE-2022-0547: possible authentication bypass in
    external authentication plug-in
  * Fix "--mtu-disc maybe|yes" on Linux
  * Fix $common_name variable passed to scripts when
    username-as-common-name is in effect.
  * Fix potential memory leaks in add_route() and add_route_ipv6().
  * Apply connect-retry backoff only to one side of the connection
    in p2p mode.
  * repair "--inactive" handling with a 'bytes' parameter larger
    than 2 Gbytes.
  * new plugin (sample-plugin/defer/multi-auth.c) to help testing
    with multiple parallel plugins that succeed/fail in
    direct/deferred mode.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1123557: --suppress-timestamps isn't needed by default.</changelog>
  <changelog author="mohd.saquib@suse.com" date="1674820800">- bsc#1202792: --enable-iproute2 added back as default option.</changelog>
  <changelog author="mohd.saquib@suse.com" date="1692187200">- update to 2.6.6 (jsc#PED-5763)
  * configure.ac: fix typ0 in LIBCAPNG_CFALGS
  * Avoid unused function warning/error on FreeBSD (and potientially others)
  * fix warning with gcc 12.2.0 (compiler bug?)
  * Fix CR_RESPONSE mangaement message using wrong key_id
  * Print a more user-friendly error when tls-crypt-v2 client auth fails
  * Ignore Ipv6 route delete request on Android and set ipv4 verbosity to 7
  * Revert commit 423ced962d
  * Implement using --peer-fingerprint without CA certificates
  * show extra info for OpenSSL errors
  * dist: add more missing files only used in the MSVC build
  * dist: Include all documentation in distribution
  * unit_tests: Add missing cert_data.h to source list for unit tests
  * test_tls_crypt: Improve mock() usage to be more portable
  * Remove old Travis CI related files
  * options: Do not hide variables from parent scope
  * pkcs11_openssl: Disable unused code
  * route: Fix overriding return value of add_route3
- Removed following patch because OpenVPN will now work with OpenSSL in FIPS
  mode. Note, no effort has been made to check or implement all the
  requirements/recommendation of FIPS 140-2. This just allows OpenVPN to be
  run on a system that be configured OpenSSL in FIPS mode.
  [- openvpn-fips140-2.3.2.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1700481600">- update to 2.6.8: (jsc#PED-5763 bsc#1217073)
  * SIGSEGV crash: Do not check key_state buffers that are in S_UNDEF
    state - the new sanity check function introduced in 2.6.7 sometimes
    tried to use a NULL pointer after an unsuccessful TLS handshake
  * CVE-2023-46850 OpenVPN versions between 2.6.0 and 2.6.6 incorrectly
    use a send buffer after it has been free()d in some circumstances,
    causing some free()d memory to be sent to the peer. All configurations
    using TLS (e.g. not using --secret) are affected by this issue.
  * CVE-2023-46849 OpenVPN versions between 2.6.0 and 2.6.6 incorrectly
    restore --fragment configuration in some circumstances, leading to a
    division by zero when --fragment is used. On platforms where division
    by zero is fatal, this will cause an OpenVPN crash.
  * DCO: warn if DATA_V1 packets are sent by the other side - this a hard
    incompatibility between a 2.6.x client connecting to a 2.4.0-2.4.4
    server, and the only fix is to use --disable-dco.
  * Remove OpenSSL Engine method for loading a key. This had to be removed
    because the original author did not agree to relicensing the code with
    the new linking exception added. This was a somewhat obsolete feature
    anyway as it only worked with OpenSSL 1.x, which is end-of-support.
  * add warning if p2p NCP client connects to a p2mp server - this is a
    combination that used to work without cipher negotiation (pre 2.6 on
    both ends), but would fail in non-obvious ways with 2.6 to 2.6.
  * add warning to --show-groups that not all supported groups are listed
    (this is due the internal enumeration in OpenSSL being a bit weird,
    omitting X448 and X25519 curves).
  * --dns: remove support for exclude-domains argument (this was a new 2.6
    option, with no backend support implemented yet on any platform, and it
    turns out that no platform supported it at all - so remove option again)
  * warn user if INFO control message too long, do not forward to management
    client (safeguard against protocol-violating server implementations)
  * DCO-WIN: get and log driver version (for easier debugging).
  * print "peer temporary key details" in TLS handshake
  * log OpenSSL errors on failure to set certificate, for example if the
    algorithms used are in acceptable to OpenSSL (misleading message would be
    printed in cryptoapi / pkcs11 scenarios)
  * add CMake build system for MinGW and MSVC builds
  * remove old MSVC build system
  * improve cmocka unit test building for Windows</changelog>
  <changelog author="rahul.jain@suse.com" date="1725451200">- Add openvpn-CVE-2024-28882:Fix multiple exit notifications from
  authenticated clients will extend the validity of a closing session(bsc#1227546 CVE-2024-28882)
  * Patchname:openvpn-CVE-2024-28882.patch</changelog>
  <changelog author="rahul.jain@suse.com" date="1734004800">- Creating Multibuild Environment for openvpn and openvpn-dco
  to support openVPN Data Channel Offload(#PED-8305)</changelog>
  <changelog author="rahul.jain@suse.com" date="1737547200">- FIX: VUL-0 CVE-2024-5594: openvpn: properly handle null bytes and
  invalid characters in control messages(bsc#1235147 CVE-2024-5594)
  Patchname:openvpn-CVE-2024-5594.patch</changelog>
  <changelog author="rahul.jain@suse.com" date="1744113600">- CVE-2025-2704:fix possible ASSERT() on OpenVPN servers using --tls-crypt-v2
  Patchname:openvpn-CVE-2025-2704.patch(bsc#1240392 CVE-2025-2704)</changelog>
  <changelog author="rahul.jain@suse.com" date="1772193600">-update to 2.6.10:
  * t_client.sh can now run pre-tests and skip a test block if needed
    (e.g. skip NTLM proxy tests if SSL library does not support MD4)
  * Compression: minor bugfix in checking option consistency vs.
    compiled-in algorithm support
  * systemd unit files: remove obsolete syslog.target</changelog>
  <changelog author="rahul.jain@suse.com" date="1772193601">-FIX:VUL-0:openvpn: Improper validation of
  source IP addresses in OpenVPN version 2.6.0 allows
  an attacker to open a session from a different IP address
  which did not initiate the connection resulting in a denial of service
  (bsc#1254486 CVE-2025-13086)
  * Patchname:openvpn-CVE-2025-13086.patch
  Remove Patch (already part of 2.6.10)
  * openvpn-CVE-2025-2704.patch(bsc#1240392 CVE-2025-2704)</changelog>
  <changelog author="rahul.jain@suse.com" date="1772452800">-update to 2.6.10:
  * t_client.sh can now run pre-tests and skip a test block if needed
    (e.g. skip NTLM proxy tests if SSL library does not support MD4)
  * Compression: minor bugfix in checking option consistency vs.
    compiled-in algorithm support
  * systemd unit files: remove obsolete syslog.target
  Patchname:openvpn-CVE-2025-13086.patch
  Remove Patch (already part of 2.6.10)
  * openvpn-CVE-2025-2704.patch(bsc#1240392 CVE-2025-2704)
  * FIX:VUL-0:openvpn: Improper validation of
  source IP addresses in OpenVPN version 2.6.0 allows
  an attacker to open a session from a different IP address
  which did not initiate the connection resulting in a denial of service
  (bsc#1254486 CVE-2025-13086)</changelog>
</package>
<package pkgid="147bfb1c9909b17d751dd7ebe1b65c029a9fe422b03d0b8293bbf4048b20f4b8" name="openvpn-auth-pam-plugin" arch="x86_64">
  <version epoch="0" ver="2.6.8" rel="150600.3.17.1"/>
  <changelog author="fbui@suse.com" date="1598443200">- Modernize openvpn.service
  * /var/run has been obsoleted since a long time.
  * on reload, send HUP signal directly rather than relying on
    killproc to look for the main process.</changelog>
  <changelog author="dmueller@suse.com" date="1599825600">- update to 2.4.9 (CVE-2020-11810, bsc#1169925O):
  * Allow unicode search string in --cryptoapicert option (Windows)
  * Skip expired certificates in Windows certificate store (Windows) (trac #966)
  * OpenSSL: Fix --crl-verify not loading multiple CRLs in one file (trac #623)
  * fix condition where a client's session could "float" to a new IP address that is not authorized ("fix illegal client float").
  This can be used to disrupt service to a freshly connected client (no session
  keys negotiated yet). It can not be used to inject or steal VPN traffic.
  CVE-2020-11810).
  * fix combination of async push (deferred auth) and NCP (trac #1259)
  * Fix OpenSSL 1.1.1 not using auto elliptic curve selection (trac #1228)
  * Fix OpenSSL error stack handling of tls_ctx_add_extra_certs
  * mbedTLS: Make sure TLS session survives move (trac #880)
  * Fix OpenSSL private key passphrase notices
  * Fix building with --enable-async-push in FreeBSD (trac #1256)
  * Fix broken fragmentation logic when using NCP (trac #1140)</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 2.4.10:
  - OpenVPN client will now announce the acceptable ciphers to the server
  (IV_CIPHER=...), so NCP cipher negotiation works better
  - Parse static challenge response in auth-pam plugin
  - Accept empty password and/or response in auth-pam plugin
  - Log serial number of revoked certificate
  - Fix tls_ctx_client/server_new leaving error on OpenSSL error stack
  - Fix auth-token not being updated if auth-nocache is set
  (this should fix all remaining client-side bugs for the combination
  "auth-nocache in client-config" + "auth-token in use on the server")
  - Fix stack overflow in OpenSolaris and *BSD NEXTADDR()
  - Fix error detection / abort in --inetd corner case (#350)
  - Fix TUNSETGROUP compatibility with very old Linux systems (#1152)
  - Fix handling of 'route remote_host' for IPv6 transport case
  (#1247 and #1332)
  - Fix --show-gateway for IPv6 on NetBSD/i386 (#734)
  - A number of documentation improvements / clarification fixes.
  - Fix line number reporting on config file errors after &lt;inline&gt; segments
  - Fix fatal error at switching remotes (#629)
  - socks.c: fix alen for DOMAIN type addresses, bump up buffer sizes (#848)
  - Switch "ks-&gt;authenticated" assertion failure to returning false (#1270)
- refresh 0001-preform-deferred-authentication-in-the-background.patch
  openvpn-2.3.x-fixed-multiple-low-severity-issues.patch against 2.4.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1619352000">- update 'rcopenvpn' to work without /etc/rc.status (boo#1185273)</changelog>
  <changelog author="dmueller@suse.com" date="1622462400">- update to 2.4.11 (bsc#1185279):
  * CVE-2020-15078 see https://community.openvpn.net/openvpn/wiki/SecurityAnnouncements
  * This bug allows - under very specific circumstances - to trick a server using
    delayed authentication (plugin or management) into returning a PUSH_REPLY
    before the AUTH_FAILED message, which can possibly be used to gather
    information about a VPN setup.
  * In combination with "--auth-gen-token" or an user-specific token auth
    solution it can be possible to get access to a VPN with an
    otherwise-invalid account.
  * Fix potential NULL ptr crash if compiled with DMALLOC
- drop sysv init support, it hasn't build successfully in ages
  and is build-disabled in devel project</changelog>
  <changelog author="max@suse.com" date="1628164800">- Update to 2.5.3:
  * Removal of BF-CBC support in default configuration
  * ** POSSIBLE INCOMPATIBILITY ***
    See section "DATA CHANNEL CIPHER NEGOTIATION" in openvpn(8).
  * Connections setup is now much faster
  * Support ChaCha20-Poly1305 cipher in the OpenVPN data channel
  * Improved TLS 1.3 support when using OpenSSL 1.1.1 or newer
  * Client-specific tls-crypt keys (--tls-crypt-v2)
  * Improved Data channel cipher negotiation
  * HMAC based auth-token support for seamless reconnects to
    standalone servers or a group of servers
  * Asynchronous (deferred) authentication support for auth-pam
    plugin
  * Asynchronous (deferred) support for client-connect scripts and
    plugins
  * Support IPv4 configs with /31 netmasks
  * 802.1q VLAN support on TAP servers
  * Support IPv6-only tunnels
  * New option --block-ipv6 to reject all IPv6 packets (ICMPv6)
  * Support Virtual Routing and Forwarding (VRF)
  * Netlink integration (OpenVPN no longer needs to execute
    ifconfig/route or ip commands)
  * Obsoletes openvpn-2.3.9-Fix-heap-overflow-on-getaddrinfo-result.patch
- bsc#1062157: The fix for bsc#934237 causes problems with the
  crypto self-test of newer openvpn versions.
  Remove openvpn-2.3.x-fixed-multiple-low-severity-issues.patch .</changelog>
  <changelog author="dmueller@suse.com" date="1634385600">- update to 2.5.4:
  * fix prompting for password on windows console if stderr redirection
    is in use - this breaks 2.5.x on Win11/ARM, and might also break
    on Win11/adm64 when released.
  * fix setting MAC address on TAP adapters (--lladdr) to use sitnl
    (was overlooked, and still used "ifconfig" calls)
  * various improvements for man page building (rst2man/rst2html etc)
  * minor bugfix with IN6_IS_ADDR_UNSPECIFIED() use (breaks build on
    at least one platform strictly checking this)
  * fix minor memory leak under certain conditions in add_route() and
    add_route_ipv6()
  * documentation improvements
  * copyright updates where needed
  * better error reporting when win32 console access fails</changelog>
  <changelog author="jengelh@inai.de" date="1638619200">- Avoid bashisms and use POSIX sh syntax.
- Use more efficient find commands.
- Trim marketing filler words from description.</changelog>
  <changelog author="max@suse.com" date="1638964800">- Drop 0001-preform-deferred-authentication-in-the-background.patch
  Upstream has meanwhile solved this differently and the two
  implementations interfere (boo#1193017).
- Obsoleted SLE patches up to this point:
  * openvpn-CVE-2020-15078.patch
  * openvpn-CVE-2020-11810.patch
  * openvpn-CVE-2018-7544.patch
  * openvpn-CVE-2018-9336.patch</changelog>
  <changelog author="dmueller@suse.com" date="1639569600">- update to 2.5.5:
  * SWEET32/64bit cipher deprecation change was postponed to 2.7
  * improve "make check" to notice if "openvpn --show-cipher" crashes
  * improve argv unit tests
  * ensure unit tests work with mbedTLS builds without BF-CBC ciphers
  * include "--push-remove" in the output of "openvpn --help"
  * fix error in iptables syntax in example firewall.sh script
  * fix "resolvconf -p" invocation in example "up" script
  * fix "common_name" environment for script calls when
    "--username-as-common-name" is in effect (Trac #1434)
  * move "push-peer-info" documentation from "server options" to "client"
  * correct "foreign_option_{n}" typo in manpage
  * README.down-root: fix plugin module name</changelog>
  <changelog author="max@suse.com" date="1644494400">- Fix license tag in spec file.</changelog>
  <changelog author="max@suse.com" date="1648036800">- update to 2.5.6:
  * bsc#1197341, CVE-2022-0547: possible authentication bypass in
    external authentication plug-in
  * Fix "--mtu-disc maybe|yes" on Linux
  * Fix $common_name variable passed to scripts when
    username-as-common-name is in effect.
  * Fix potential memory leaks in add_route() and add_route_ipv6().
  * Apply connect-retry backoff only to one side of the connection
    in p2p mode.
  * repair "--inactive" handling with a 'bytes' parameter larger
    than 2 Gbytes.
  * new plugin (sample-plugin/defer/multi-auth.c) to help testing
    with multiple parallel plugins that succeed/fail in
    direct/deferred mode.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1123557: --suppress-timestamps isn't needed by default.</changelog>
  <changelog author="mohd.saquib@suse.com" date="1674820800">- bsc#1202792: --enable-iproute2 added back as default option.</changelog>
  <changelog author="mohd.saquib@suse.com" date="1692187200">- update to 2.6.6 (jsc#PED-5763)
  * configure.ac: fix typ0 in LIBCAPNG_CFALGS
  * Avoid unused function warning/error on FreeBSD (and potientially others)
  * fix warning with gcc 12.2.0 (compiler bug?)
  * Fix CR_RESPONSE mangaement message using wrong key_id
  * Print a more user-friendly error when tls-crypt-v2 client auth fails
  * Ignore Ipv6 route delete request on Android and set ipv4 verbosity to 7
  * Revert commit 423ced962d
  * Implement using --peer-fingerprint without CA certificates
  * show extra info for OpenSSL errors
  * dist: add more missing files only used in the MSVC build
  * dist: Include all documentation in distribution
  * unit_tests: Add missing cert_data.h to source list for unit tests
  * test_tls_crypt: Improve mock() usage to be more portable
  * Remove old Travis CI related files
  * options: Do not hide variables from parent scope
  * pkcs11_openssl: Disable unused code
  * route: Fix overriding return value of add_route3
- Removed following patch because OpenVPN will now work with OpenSSL in FIPS
  mode. Note, no effort has been made to check or implement all the
  requirements/recommendation of FIPS 140-2. This just allows OpenVPN to be
  run on a system that be configured OpenSSL in FIPS mode.
  [- openvpn-fips140-2.3.2.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1700481600">- update to 2.6.8: (jsc#PED-5763 bsc#1217073)
  * SIGSEGV crash: Do not check key_state buffers that are in S_UNDEF
    state - the new sanity check function introduced in 2.6.7 sometimes
    tried to use a NULL pointer after an unsuccessful TLS handshake
  * CVE-2023-46850 OpenVPN versions between 2.6.0 and 2.6.6 incorrectly
    use a send buffer after it has been free()d in some circumstances,
    causing some free()d memory to be sent to the peer. All configurations
    using TLS (e.g. not using --secret) are affected by this issue.
  * CVE-2023-46849 OpenVPN versions between 2.6.0 and 2.6.6 incorrectly
    restore --fragment configuration in some circumstances, leading to a
    division by zero when --fragment is used. On platforms where division
    by zero is fatal, this will cause an OpenVPN crash.
  * DCO: warn if DATA_V1 packets are sent by the other side - this a hard
    incompatibility between a 2.6.x client connecting to a 2.4.0-2.4.4
    server, and the only fix is to use --disable-dco.
  * Remove OpenSSL Engine method for loading a key. This had to be removed
    because the original author did not agree to relicensing the code with
    the new linking exception added. This was a somewhat obsolete feature
    anyway as it only worked with OpenSSL 1.x, which is end-of-support.
  * add warning if p2p NCP client connects to a p2mp server - this is a
    combination that used to work without cipher negotiation (pre 2.6 on
    both ends), but would fail in non-obvious ways with 2.6 to 2.6.
  * add warning to --show-groups that not all supported groups are listed
    (this is due the internal enumeration in OpenSSL being a bit weird,
    omitting X448 and X25519 curves).
  * --dns: remove support for exclude-domains argument (this was a new 2.6
    option, with no backend support implemented yet on any platform, and it
    turns out that no platform supported it at all - so remove option again)
  * warn user if INFO control message too long, do not forward to management
    client (safeguard against protocol-violating server implementations)
  * DCO-WIN: get and log driver version (for easier debugging).
  * print "peer temporary key details" in TLS handshake
  * log OpenSSL errors on failure to set certificate, for example if the
    algorithms used are in acceptable to OpenSSL (misleading message would be
    printed in cryptoapi / pkcs11 scenarios)
  * add CMake build system for MinGW and MSVC builds
  * remove old MSVC build system
  * improve cmocka unit test building for Windows</changelog>
  <changelog author="rahul.jain@suse.com" date="1725451200">- Add openvpn-CVE-2024-28882:Fix multiple exit notifications from
  authenticated clients will extend the validity of a closing session(bsc#1227546 CVE-2024-28882)
  * Patchname:openvpn-CVE-2024-28882.patch</changelog>
  <changelog author="rahul.jain@suse.com" date="1734004800">- Creating Multibuild Environment for openvpn and openvpn-dco
  to support openVPN Data Channel Offload(#PED-8305)</changelog>
  <changelog author="rahul.jain@suse.com" date="1737547200">- FIX: VUL-0 CVE-2024-5594: openvpn: properly handle null bytes and
  invalid characters in control messages(bsc#1235147 CVE-2024-5594)
  Patchname:openvpn-CVE-2024-5594.patch</changelog>
  <changelog author="rahul.jain@suse.com" date="1744113600">- CVE-2025-2704:fix possible ASSERT() on OpenVPN servers using --tls-crypt-v2
  Patchname:openvpn-CVE-2025-2704.patch(bsc#1240392 CVE-2025-2704)</changelog>
</package>
<package pkgid="91de4a03297afe573aa428c8c4d9e54bb0cf26138522579a2d589beb758e4fc1" name="openvpn-dco" arch="src">
  <version epoch="0" ver="2.6.10" rel="150600.3.20.1"/>
  <changelog author="suse-beta@cboltz.de" date="1619352000">- update 'rcopenvpn' to work without /etc/rc.status (boo#1185273)</changelog>
  <changelog author="dmueller@suse.com" date="1622462400">- update to 2.4.11 (bsc#1185279):
  * CVE-2020-15078 see https://community.openvpn.net/openvpn/wiki/SecurityAnnouncements
  * This bug allows - under very specific circumstances - to trick a server using
    delayed authentication (plugin or management) into returning a PUSH_REPLY
    before the AUTH_FAILED message, which can possibly be used to gather
    information about a VPN setup.
  * In combination with "--auth-gen-token" or an user-specific token auth
    solution it can be possible to get access to a VPN with an
    otherwise-invalid account.
  * Fix potential NULL ptr crash if compiled with DMALLOC
- drop sysv init support, it hasn't build successfully in ages
  and is build-disabled in devel project</changelog>
  <changelog author="max@suse.com" date="1628164800">- Update to 2.5.3:
  * Removal of BF-CBC support in default configuration
  * ** POSSIBLE INCOMPATIBILITY ***
    See section "DATA CHANNEL CIPHER NEGOTIATION" in openvpn(8).
  * Connections setup is now much faster
  * Support ChaCha20-Poly1305 cipher in the OpenVPN data channel
  * Improved TLS 1.3 support when using OpenSSL 1.1.1 or newer
  * Client-specific tls-crypt keys (--tls-crypt-v2)
  * Improved Data channel cipher negotiation
  * HMAC based auth-token support for seamless reconnects to
    standalone servers or a group of servers
  * Asynchronous (deferred) authentication support for auth-pam
    plugin
  * Asynchronous (deferred) support for client-connect scripts and
    plugins
  * Support IPv4 configs with /31 netmasks
  * 802.1q VLAN support on TAP servers
  * Support IPv6-only tunnels
  * New option --block-ipv6 to reject all IPv6 packets (ICMPv6)
  * Support Virtual Routing and Forwarding (VRF)
  * Netlink integration (OpenVPN no longer needs to execute
    ifconfig/route or ip commands)
  * Obsoletes openvpn-2.3.9-Fix-heap-overflow-on-getaddrinfo-result.patch
- bsc#1062157: The fix for bsc#934237 causes problems with the
  crypto self-test of newer openvpn versions.
  Remove openvpn-2.3.x-fixed-multiple-low-severity-issues.patch .</changelog>
  <changelog author="dmueller@suse.com" date="1634385600">- update to 2.5.4:
  * fix prompting for password on windows console if stderr redirection
    is in use - this breaks 2.5.x on Win11/ARM, and might also break
    on Win11/adm64 when released.
  * fix setting MAC address on TAP adapters (--lladdr) to use sitnl
    (was overlooked, and still used "ifconfig" calls)
  * various improvements for man page building (rst2man/rst2html etc)
  * minor bugfix with IN6_IS_ADDR_UNSPECIFIED() use (breaks build on
    at least one platform strictly checking this)
  * fix minor memory leak under certain conditions in add_route() and
    add_route_ipv6()
  * documentation improvements
  * copyright updates where needed
  * better error reporting when win32 console access fails</changelog>
  <changelog author="jengelh@inai.de" date="1638619200">- Avoid bashisms and use POSIX sh syntax.
- Use more efficient find commands.
- Trim marketing filler words from description.</changelog>
  <changelog author="max@suse.com" date="1638964800">- Drop 0001-preform-deferred-authentication-in-the-background.patch
  Upstream has meanwhile solved this differently and the two
  implementations interfere (boo#1193017).
- Obsoleted SLE patches up to this point:
  * openvpn-CVE-2020-15078.patch
  * openvpn-CVE-2020-11810.patch
  * openvpn-CVE-2018-7544.patch
  * openvpn-CVE-2018-9336.patch</changelog>
  <changelog author="dmueller@suse.com" date="1639569600">- update to 2.5.5:
  * SWEET32/64bit cipher deprecation change was postponed to 2.7
  * improve "make check" to notice if "openvpn --show-cipher" crashes
  * improve argv unit tests
  * ensure unit tests work with mbedTLS builds without BF-CBC ciphers
  * include "--push-remove" in the output of "openvpn --help"
  * fix error in iptables syntax in example firewall.sh script
  * fix "resolvconf -p" invocation in example "up" script
  * fix "common_name" environment for script calls when
    "--username-as-common-name" is in effect (Trac #1434)
  * move "push-peer-info" documentation from "server options" to "client"
  * correct "foreign_option_{n}" typo in manpage
  * README.down-root: fix plugin module name</changelog>
  <changelog author="max@suse.com" date="1644494400">- Fix license tag in spec file.</changelog>
  <changelog author="max@suse.com" date="1648036800">- update to 2.5.6:
  * bsc#1197341, CVE-2022-0547: possible authentication bypass in
    external authentication plug-in
  * Fix "--mtu-disc maybe|yes" on Linux
  * Fix $common_name variable passed to scripts when
    username-as-common-name is in effect.
  * Fix potential memory leaks in add_route() and add_route_ipv6().
  * Apply connect-retry backoff only to one side of the connection
    in p2p mode.
  * repair "--inactive" handling with a 'bytes' parameter larger
    than 2 Gbytes.
  * new plugin (sample-plugin/defer/multi-auth.c) to help testing
    with multiple parallel plugins that succeed/fail in
    direct/deferred mode.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1123557: --suppress-timestamps isn't needed by default.</changelog>
  <changelog author="mohd.saquib@suse.com" date="1674820800">- bsc#1202792: --enable-iproute2 added back as default option.</changelog>
  <changelog author="mohd.saquib@suse.com" date="1692187200">- update to 2.6.6 (jsc#PED-5763)
  * configure.ac: fix typ0 in LIBCAPNG_CFALGS
  * Avoid unused function warning/error on FreeBSD (and potientially others)
  * fix warning with gcc 12.2.0 (compiler bug?)
  * Fix CR_RESPONSE mangaement message using wrong key_id
  * Print a more user-friendly error when tls-crypt-v2 client auth fails
  * Ignore Ipv6 route delete request on Android and set ipv4 verbosity to 7
  * Revert commit 423ced962d
  * Implement using --peer-fingerprint without CA certificates
  * show extra info for OpenSSL errors
  * dist: add more missing files only used in the MSVC build
  * dist: Include all documentation in distribution
  * unit_tests: Add missing cert_data.h to source list for unit tests
  * test_tls_crypt: Improve mock() usage to be more portable
  * Remove old Travis CI related files
  * options: Do not hide variables from parent scope
  * pkcs11_openssl: Disable unused code
  * route: Fix overriding return value of add_route3
- Removed following patch because OpenVPN will now work with OpenSSL in FIPS
  mode. Note, no effort has been made to check or implement all the
  requirements/recommendation of FIPS 140-2. This just allows OpenVPN to be
  run on a system that be configured OpenSSL in FIPS mode.
  [- openvpn-fips140-2.3.2.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1700481600">- update to 2.6.8: (jsc#PED-5763 bsc#1217073)
  * SIGSEGV crash: Do not check key_state buffers that are in S_UNDEF
    state - the new sanity check function introduced in 2.6.7 sometimes
    tried to use a NULL pointer after an unsuccessful TLS handshake
  * CVE-2023-46850 OpenVPN versions between 2.6.0 and 2.6.6 incorrectly
    use a send buffer after it has been free()d in some circumstances,
    causing some free()d memory to be sent to the peer. All configurations
    using TLS (e.g. not using --secret) are affected by this issue.
  * CVE-2023-46849 OpenVPN versions between 2.6.0 and 2.6.6 incorrectly
    restore --fragment configuration in some circumstances, leading to a
    division by zero when --fragment is used. On platforms where division
    by zero is fatal, this will cause an OpenVPN crash.
  * DCO: warn if DATA_V1 packets are sent by the other side - this a hard
    incompatibility between a 2.6.x client connecting to a 2.4.0-2.4.4
    server, and the only fix is to use --disable-dco.
  * Remove OpenSSL Engine method for loading a key. This had to be removed
    because the original author did not agree to relicensing the code with
    the new linking exception added. This was a somewhat obsolete feature
    anyway as it only worked with OpenSSL 1.x, which is end-of-support.
  * add warning if p2p NCP client connects to a p2mp server - this is a
    combination that used to work without cipher negotiation (pre 2.6 on
    both ends), but would fail in non-obvious ways with 2.6 to 2.6.
  * add warning to --show-groups that not all supported groups are listed
    (this is due the internal enumeration in OpenSSL being a bit weird,
    omitting X448 and X25519 curves).
  * --dns: remove support for exclude-domains argument (this was a new 2.6
    option, with no backend support implemented yet on any platform, and it
    turns out that no platform supported it at all - so remove option again)
  * warn user if INFO control message too long, do not forward to management
    client (safeguard against protocol-violating server implementations)
  * DCO-WIN: get and log driver version (for easier debugging).
  * print "peer temporary key details" in TLS handshake
  * log OpenSSL errors on failure to set certificate, for example if the
    algorithms used are in acceptable to OpenSSL (misleading message would be
    printed in cryptoapi / pkcs11 scenarios)
  * add CMake build system for MinGW and MSVC builds
  * remove old MSVC build system
  * improve cmocka unit test building for Windows</changelog>
  <changelog author="rahul.jain@suse.com" date="1725451200">- Add openvpn-CVE-2024-28882:Fix multiple exit notifications from
  authenticated clients will extend the validity of a closing session(bsc#1227546 CVE-2024-28882)
  * Patchname:openvpn-CVE-2024-28882.patch</changelog>
  <changelog author="rahul.jain@suse.com" date="1734004800">- Creating Multibuild Environment for openvpn and openvpn-dco
  to support openVPN Data Channel Offload(#PED-8305)</changelog>
  <changelog author="rahul.jain@suse.com" date="1737547200">- FIX: VUL-0 CVE-2024-5594: openvpn: properly handle null bytes and
  invalid characters in control messages(bsc#1235147 CVE-2024-5594)
  Patchname:openvpn-CVE-2024-5594.patch</changelog>
  <changelog author="rahul.jain@suse.com" date="1744113600">- CVE-2025-2704:fix possible ASSERT() on OpenVPN servers using --tls-crypt-v2
  Patchname:openvpn-CVE-2025-2704.patch(bsc#1240392 CVE-2025-2704)</changelog>
  <changelog author="rahul.jain@suse.com" date="1772193600">-update to 2.6.10:
  * t_client.sh can now run pre-tests and skip a test block if needed
    (e.g. skip NTLM proxy tests if SSL library does not support MD4)
  * Compression: minor bugfix in checking option consistency vs.
    compiled-in algorithm support
  * systemd unit files: remove obsolete syslog.target</changelog>
  <changelog author="rahul.jain@suse.com" date="1772193601">-FIX:VUL-0:openvpn: Improper validation of
  source IP addresses in OpenVPN version 2.6.0 allows
  an attacker to open a session from a different IP address
  which did not initiate the connection resulting in a denial of service
  (bsc#1254486 CVE-2025-13086)
  * Patchname:openvpn-CVE-2025-13086.patch
  Remove Patch (already part of 2.6.10)
  * openvpn-CVE-2025-2704.patch(bsc#1240392 CVE-2025-2704)</changelog>
  <changelog author="rahul.jain@suse.com" date="1772452800">-update to 2.6.10:
  * t_client.sh can now run pre-tests and skip a test block if needed
    (e.g. skip NTLM proxy tests if SSL library does not support MD4)
  * Compression: minor bugfix in checking option consistency vs.
    compiled-in algorithm support
  * systemd unit files: remove obsolete syslog.target
  Patchname:openvpn-CVE-2025-13086.patch
  Remove Patch (already part of 2.6.10)
  * openvpn-CVE-2025-2704.patch(bsc#1240392 CVE-2025-2704)
  * FIX:VUL-0:openvpn: Improper validation of
  source IP addresses in OpenVPN version 2.6.0 allows
  an attacker to open a session from a different IP address
  which did not initiate the connection resulting in a denial of service
  (bsc#1254486 CVE-2025-13086)</changelog>
</package>
<package pkgid="68d3ede417590dce1edbd2a376c22df75acd6ed8b78ecab972195bb9f074a5a0" name="openvpn-dco" arch="x86_64">
  <version epoch="0" ver="2.6.10" rel="150600.3.20.1"/>
  <changelog author="suse-beta@cboltz.de" date="1619352000">- update 'rcopenvpn' to work without /etc/rc.status (boo#1185273)</changelog>
  <changelog author="dmueller@suse.com" date="1622462400">- update to 2.4.11 (bsc#1185279):
  * CVE-2020-15078 see https://community.openvpn.net/openvpn/wiki/SecurityAnnouncements
  * This bug allows - under very specific circumstances - to trick a server using
    delayed authentication (plugin or management) into returning a PUSH_REPLY
    before the AUTH_FAILED message, which can possibly be used to gather
    information about a VPN setup.
  * In combination with "--auth-gen-token" or an user-specific token auth
    solution it can be possible to get access to a VPN with an
    otherwise-invalid account.
  * Fix potential NULL ptr crash if compiled with DMALLOC
- drop sysv init support, it hasn't build successfully in ages
  and is build-disabled in devel project</changelog>
  <changelog author="max@suse.com" date="1628164800">- Update to 2.5.3:
  * Removal of BF-CBC support in default configuration
  * ** POSSIBLE INCOMPATIBILITY ***
    See section "DATA CHANNEL CIPHER NEGOTIATION" in openvpn(8).
  * Connections setup is now much faster
  * Support ChaCha20-Poly1305 cipher in the OpenVPN data channel
  * Improved TLS 1.3 support when using OpenSSL 1.1.1 or newer
  * Client-specific tls-crypt keys (--tls-crypt-v2)
  * Improved Data channel cipher negotiation
  * HMAC based auth-token support for seamless reconnects to
    standalone servers or a group of servers
  * Asynchronous (deferred) authentication support for auth-pam
    plugin
  * Asynchronous (deferred) support for client-connect scripts and
    plugins
  * Support IPv4 configs with /31 netmasks
  * 802.1q VLAN support on TAP servers
  * Support IPv6-only tunnels
  * New option --block-ipv6 to reject all IPv6 packets (ICMPv6)
  * Support Virtual Routing and Forwarding (VRF)
  * Netlink integration (OpenVPN no longer needs to execute
    ifconfig/route or ip commands)
  * Obsoletes openvpn-2.3.9-Fix-heap-overflow-on-getaddrinfo-result.patch
- bsc#1062157: The fix for bsc#934237 causes problems with the
  crypto self-test of newer openvpn versions.
  Remove openvpn-2.3.x-fixed-multiple-low-severity-issues.patch .</changelog>
  <changelog author="dmueller@suse.com" date="1634385600">- update to 2.5.4:
  * fix prompting for password on windows console if stderr redirection
    is in use - this breaks 2.5.x on Win11/ARM, and might also break
    on Win11/adm64 when released.
  * fix setting MAC address on TAP adapters (--lladdr) to use sitnl
    (was overlooked, and still used "ifconfig" calls)
  * various improvements for man page building (rst2man/rst2html etc)
  * minor bugfix with IN6_IS_ADDR_UNSPECIFIED() use (breaks build on
    at least one platform strictly checking this)
  * fix minor memory leak under certain conditions in add_route() and
    add_route_ipv6()
  * documentation improvements
  * copyright updates where needed
  * better error reporting when win32 console access fails</changelog>
  <changelog author="jengelh@inai.de" date="1638619200">- Avoid bashisms and use POSIX sh syntax.
- Use more efficient find commands.
- Trim marketing filler words from description.</changelog>
  <changelog author="max@suse.com" date="1638964800">- Drop 0001-preform-deferred-authentication-in-the-background.patch
  Upstream has meanwhile solved this differently and the two
  implementations interfere (boo#1193017).
- Obsoleted SLE patches up to this point:
  * openvpn-CVE-2020-15078.patch
  * openvpn-CVE-2020-11810.patch
  * openvpn-CVE-2018-7544.patch
  * openvpn-CVE-2018-9336.patch</changelog>
  <changelog author="dmueller@suse.com" date="1639569600">- update to 2.5.5:
  * SWEET32/64bit cipher deprecation change was postponed to 2.7
  * improve "make check" to notice if "openvpn --show-cipher" crashes
  * improve argv unit tests
  * ensure unit tests work with mbedTLS builds without BF-CBC ciphers
  * include "--push-remove" in the output of "openvpn --help"
  * fix error in iptables syntax in example firewall.sh script
  * fix "resolvconf -p" invocation in example "up" script
  * fix "common_name" environment for script calls when
    "--username-as-common-name" is in effect (Trac #1434)
  * move "push-peer-info" documentation from "server options" to "client"
  * correct "foreign_option_{n}" typo in manpage
  * README.down-root: fix plugin module name</changelog>
  <changelog author="max@suse.com" date="1644494400">- Fix license tag in spec file.</changelog>
  <changelog author="max@suse.com" date="1648036800">- update to 2.5.6:
  * bsc#1197341, CVE-2022-0547: possible authentication bypass in
    external authentication plug-in
  * Fix "--mtu-disc maybe|yes" on Linux
  * Fix $common_name variable passed to scripts when
    username-as-common-name is in effect.
  * Fix potential memory leaks in add_route() and add_route_ipv6().
  * Apply connect-retry backoff only to one side of the connection
    in p2p mode.
  * repair "--inactive" handling with a 'bytes' parameter larger
    than 2 Gbytes.
  * new plugin (sample-plugin/defer/multi-auth.c) to help testing
    with multiple parallel plugins that succeed/fail in
    direct/deferred mode.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1123557: --suppress-timestamps isn't needed by default.</changelog>
  <changelog author="mohd.saquib@suse.com" date="1674820800">- bsc#1202792: --enable-iproute2 added back as default option.</changelog>
  <changelog author="mohd.saquib@suse.com" date="1692187200">- update to 2.6.6 (jsc#PED-5763)
  * configure.ac: fix typ0 in LIBCAPNG_CFALGS
  * Avoid unused function warning/error on FreeBSD (and potientially others)
  * fix warning with gcc 12.2.0 (compiler bug?)
  * Fix CR_RESPON